@agenticprimitives/verifiable-credentials 0.0.0-alpha.2

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Agentic Trust Labs
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,20 @@
+# @agenticprimitives/verifiable-credentials
+
+> **Status:** STUB (Wave 0.5 of the W1 implementation wave). Implementation lands in subsequent waves per [docs/architecture/w1-implementation-wave-plan.md](../../docs/architecture/w1-implementation-wave-plan.md).
+
+W3C Verifiable Credentials envelope + Eip712Signature2026 proof + DOLCE+DnS Situation bases + ontology-shape schema registration. Substrate for layers 12–15 credential types.
+
+**Owns spine layers:** envelope.
+**Authoritative spec:** [`specs/242-*.md`](../../specs/) — see `spec.md` for the symlink to the canonical spec.
+
+## What this package will own
+
+See `CLAUDE.md` and `capability.manifest.json` for the bounded surface.
+
+## Build
+
+```bash
+pnpm --filter @agenticprimitives/verifiable-credentials typecheck
+pnpm --filter @agenticprimitives/verifiable-credentials test
+pnpm --filter @agenticprimitives/verifiable-credentials build
+```

package/dist/canonical.d.ts

@@ -0,0 +1,34 @@
+/**
+ * RFC 8785 JSON Canonicalization Scheme (JCS) — deterministic JSON serialisation
+ * for cross-stack hash equality (TS ↔ Solidity ↔ Java/Go verifiers).
+ *
+ * The substrate's `credentialHash` is `keccak256(jcsCanonicalize(vc-without-proof))`.
+ * Every package that needs to recompute the hash MUST go through this helper.
+ *
+ * RFC 8785 rules:
+ *  - UTF-8 strings, NFC normalisation (browsers ship NFC already)
+ *  - Object keys sorted by UTF-16 code unit (== lexicographic in BMP)
+ *  - No insignificant whitespace
+ *  - Numbers as the shortest IEEE 754 round-trip representation
+ *  - Booleans `true` / `false` / `null` lowercase
+ *  - Strings JSON-escape U+0000..U+001F, U+0022, U+005C only; emit other code points as-is
+ *
+ * This implementation is intentionally narrow: substrate VCs use a constrained
+ * subset of JSON (string / number / boolean / null / object / array). We do not
+ * handle BigInt or Date — callers must serialise those upstream.
+ */
+export declare class JcsError extends Error {
+    readonly path: string;
+    constructor(message: string, path: string);
+}
+/**
+ * Canonicalize a JSON-compatible value per RFC 8785.
+ * Returns the canonical string (UTF-8 text; callers wrap with `utf8ToBytes` to hash).
+ */
+export declare function jcsCanonicalize(value: unknown, path?: string): string;
+/**
+ * Compute the canonical hash of a value: `keccak256(jcsCanonicalize(value))`.
+ * Returns the 32-byte hex hash.
+ */
+export declare function canonicalHash(value: unknown): `0x${string}`;
+//# sourceMappingURL=canonical.d.ts.map

package/dist/canonical.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.d.ts","sourceRoot":"","sources":["../src/canonical.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAKH,qBAAa,QAAS,SAAQ,KAAK;IACJ,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAtC,OAAO,EAAE,MAAM,EAAW,IAAI,EAAE,MAAM;CAGnD;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,GAAE,MAAY,GAAG,MAAM,CA2B1E;AAkED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,MAAM,EAAE,CAK3D"}

package/dist/canonical.js

@@ -0,0 +1,146 @@
+/**
+ * RFC 8785 JSON Canonicalization Scheme (JCS) — deterministic JSON serialisation
+ * for cross-stack hash equality (TS ↔ Solidity ↔ Java/Go verifiers).
+ *
+ * The substrate's `credentialHash` is `keccak256(jcsCanonicalize(vc-without-proof))`.
+ * Every package that needs to recompute the hash MUST go through this helper.
+ *
+ * RFC 8785 rules:
+ *  - UTF-8 strings, NFC normalisation (browsers ship NFC already)
+ *  - Object keys sorted by UTF-16 code unit (== lexicographic in BMP)
+ *  - No insignificant whitespace
+ *  - Numbers as the shortest IEEE 754 round-trip representation
+ *  - Booleans `true` / `false` / `null` lowercase
+ *  - Strings JSON-escape U+0000..U+001F, U+0022, U+005C only; emit other code points as-is
+ *
+ * This implementation is intentionally narrow: substrate VCs use a constrained
+ * subset of JSON (string / number / boolean / null / object / array). We do not
+ * handle BigInt or Date — callers must serialise those upstream.
+ */
+import { keccak_256 } from '@noble/hashes/sha3.js';
+import { utf8ToBytes } from '@noble/hashes/utils.js';
+export class JcsError extends Error {
+    path;
+    constructor(message, path) {
+        super(`[JCS] ${message} at ${path}`);
+        this.path = path;
+    }
+}
+/**
+ * Canonicalize a JSON-compatible value per RFC 8785.
+ * Returns the canonical string (UTF-8 text; callers wrap with `utf8ToBytes` to hash).
+ */
+export function jcsCanonicalize(value, path = '$') {
+    if (value === null)
+        return 'null';
+    if (value === undefined) {
+        throw new JcsError('undefined is not JSON', path);
+    }
+    switch (typeof value) {
+        case 'boolean':
+            return value ? 'true' : 'false';
+        case 'string':
+            return serializeString(value);
+        case 'number':
+            return serializeNumber(value, path);
+        case 'object': {
+            if (Array.isArray(value)) {
+                const items = value.map((v, i) => jcsCanonicalize(v, `${path}[${i}]`));
+                return `[${items.join(',')}]`;
+            }
+            // Plain object
+            const entries = Object.entries(value)
+                .filter(([, v]) => v !== undefined)
+                .sort(([a], [b]) => sortByCodeUnit(a, b));
+            const items = entries.map(([k, v]) => `${serializeString(k)}:${jcsCanonicalize(v, `${path}.${k}`)}`);
+            return `{${items.join(',')}}`;
+        }
+        default:
+            throw new JcsError(`unsupported JSON type: ${typeof value}`, path);
+    }
+}
+/** UTF-16 code unit comparison — exactly what RFC 8785 §3.2.3 requires. */
+function sortByCodeUnit(a, b) {
+    const len = Math.min(a.length, b.length);
+    for (let i = 0; i < len; i++) {
+        const av = a.charCodeAt(i);
+        const bv = b.charCodeAt(i);
+        if (av !== bv)
+            return av - bv;
+    }
+    return a.length - b.length;
+}
+/** RFC 8259 string serialisation with JCS-compatible escaping (RFC 8785 §3.2.2.2). */
+function serializeString(s) {
+    let out = '"';
+    for (let i = 0; i < s.length; i++) {
+        const code = s.charCodeAt(i);
+        if (code === 0x22) {
+            out += '\\"';
+        }
+        else if (code === 0x5c) {
+            out += '\\\\';
+        }
+        else if (code < 0x20) {
+            // Control characters
+            switch (code) {
+                case 0x08:
+                    out += '\\b';
+                    break;
+                case 0x09:
+                    out += '\\t';
+                    break;
+                case 0x0a:
+                    out += '\\n';
+                    break;
+                case 0x0c:
+                    out += '\\f';
+                    break;
+                case 0x0d:
+                    out += '\\r';
+                    break;
+                default:
+                    out += `\\u${code.toString(16).padStart(4, '0')}`;
+            }
+        }
+        else {
+            out += s[i];
+        }
+    }
+    out += '"';
+    return out;
+}
+/** RFC 8785 §3.2.2.3 — shortest round-tripping IEEE 754 representation. */
+function serializeNumber(n, path) {
+    if (!Number.isFinite(n)) {
+        throw new JcsError(`non-finite number (${n})`, path);
+    }
+    if (Object.is(n, -0))
+        return '0';
+    if (n === 0)
+        return '0';
+    if (Number.isInteger(n) && Math.abs(n) < 1e21) {
+        return n.toString();
+    }
+    // Browsers + Node give us the shortest round-trip via `toString()`
+    // (per ECMA-262 §6.1.6.1.13). RFC 8785 expects the ES round-trip form.
+    return n.toString();
+}
+/**
+ * Compute the canonical hash of a value: `keccak256(jcsCanonicalize(value))`.
+ * Returns the 32-byte hex hash.
+ */
+export function canonicalHash(value) {
+    const canonical = jcsCanonicalize(value);
+    const bytes = utf8ToBytes(canonical);
+    const digest = keccak_256(bytes);
+    return `0x${bytesToHex(digest)}`;
+}
+function bytesToHex(b) {
+    let s = '';
+    for (const v of b) {
+        s += v.toString(16).padStart(2, '0');
+    }
+    return s;
+}
+//# sourceMappingURL=canonical.js.map

package/dist/canonical.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.js","sourceRoot":"","sources":["../src/canonical.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAErD,MAAM,OAAO,QAAS,SAAQ,KAAK;IACK;IAAtC,YAAY,OAAe,EAAW,IAAY;QAChD,KAAK,CAAC,SAAS,OAAO,OAAO,IAAI,EAAE,CAAC,CAAC;QADD,SAAI,GAAJ,IAAI,CAAQ;IAElD,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,OAAe,GAAG;IAChE,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,QAAQ,CAAC,uBAAuB,EAAE,IAAI,CAAC,CAAC;IACpD,CAAC;IACD,QAAQ,OAAO,KAAK,EAAE,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAClC,KAAK,QAAQ;YACX,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;QAChC,KAAK,QAAQ;YACX,OAAO,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACtC,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBACvE,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAChC,CAAC;YACD,eAAe;YACf,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;iBAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;iBAClC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACrG,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QAChC,CAAC;QACD;YACE,MAAM,IAAI,QAAQ,CAAC,0BAA0B,OAAO,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,SAAS,cAAc,CAAC,CAAS,EAAE,CAAS;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAChC,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;AAC7B,CAAC;AAED,sFAAsF;AACtF,SAAS,eAAe,CAAC,CAAS;IAChC,IAAI,GAAG,GAAG,GAAG,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,GAAG,IAAI,KAAK,CAAC;QACf,CAAC;aAAM,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACzB,GAAG,IAAI,MAAM,CAAC;QAChB,CAAC;aAAM,IAAI,IAAI,GAAG,IAAI,EAAE,CAAC;YACvB,qBAAqB;YACrB,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,IAAI;oBACP,GAAG,IAAI,KAAK,CAAC;oBACb,MAAM;gBACR,KAAK,IAAI;oBACP,GAAG,IAAI,KAAK,CAAC;oBACb,MAAM;gBACR,KAAK,IAAI;oBACP,GAAG,IAAI,KAAK,CAAC;oBACb,MAAM;gBACR,KAAK,IAAI;oBACP,GAAG,IAAI,KAAK,CAAC;oBACb,MAAM;gBACR,KAAK,IAAI;oBACP,GAAG,IAAI,KAAK,CAAC;oBACb,MAAM;gBACR;oBACE,GAAG,IAAI,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YACtD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IACD,GAAG,IAAI,GAAG,CAAC;IACX,OAAO,GAAG,CAAC;AACb,CAAC;AAED,2EAA2E;AAC3E,SAAS,eAAe,CAAC,CAAS,EAAE,IAAY;IAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,QAAQ,CAAC,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,GAAG,CAAC;IACjC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IACxB,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC;QAC9C,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtB,CAAC;IACD,mEAAmE;IACnE,uEAAuE;IACvE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,KAAK,UAAU,CAAC,MAAM,CAAC,EAAmB,CAAC;AACpD,CAAC;AAED,SAAS,UAAU,CAAC,CAAa;IAC/B,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAClB,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,24 @@
+/**
+ * @agenticprimitives/verifiable-credentials — W3C VC 2.0 envelope, EIP-712
+ * + ERC-1271 proof, DOLCE+DnS Situation bases, JCS canonical hash, and the
+ * schema-registration helper.
+ *
+ * Substrate for spine layers 12–15 credential classes; consumers (attestations,
+ * agreements, payments, fulfillment) compose specific credential types on top.
+ *
+ * Authoritative spec: specs/242-trust-credentials-and-public-assertions.md
+ */
+export declare const PACKAGE_NAME = "@agenticprimitives/verifiable-credentials";
+export declare const PACKAGE_STATUS: "w1-foundational";
+export declare const SPEC_REF = "specs/242-trust-credentials-and-public-assertions.md";
+export { VC_CONTEXT_V2, EIP712_SIG_2026_CONTEXT, VC_DOMAIN_NAME, VC_DOMAIN_VERSION, VC_EIP712_TYPES, } from './types.js';
+export type { Hex32, ISODate, ProofType, Eip712Signature2026Proof, Proof, CredentialStatus2021, VisibilityTier, DisclosurePolicy, VerifiableCredential, UnsignedCredential, } from './types.js';
+export { jcsCanonicalize, canonicalHash, JcsError } from './canonical.js';
+export { assertSituationRolesPresent, buildSituation, } from './situation.js';
+export type { Situation, DescriptionRef, RoleName } from './situation.js';
+export { credentialHash, eip712Digest, isoToSeconds, signCredential, viemSignerFromWallet, } from './proof.js';
+export type { CredentialSigner } from './proof.js';
+export { verifyCredentialStructural } from './verifier.js';
+export type { VerificationResult } from './verifier.js';
+export { SHAPE_DID_PREFIX, buildShapeUri, parseShapeUri, shapeHash } from './schema.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,eAAO,MAAM,YAAY,8CAA8C,CAAC;AACxE,eAAO,MAAM,cAAc,EAAG,iBAA0B,CAAC;AACzD,eAAO,MAAM,QAAQ,yDAAyD,CAAC;AAG/E,OAAO,EACL,aAAa,EACb,uBAAuB,EACvB,cAAc,EACd,iBAAiB,EACjB,eAAe,GAChB,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,KAAK,EACL,OAAO,EACP,SAAS,EACT,wBAAwB,EACxB,KAAK,EACL,oBAAoB,EACpB,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG1E,OAAO,EACL,2BAA2B,EAC3B,cAAc,GACf,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG1E,OAAO,EACL,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,oBAAoB,GACrB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAGnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAC;AAC3D,YAAY,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAGxD,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,26 @@
+/**
+ * @agenticprimitives/verifiable-credentials — W3C VC 2.0 envelope, EIP-712
+ * + ERC-1271 proof, DOLCE+DnS Situation bases, JCS canonical hash, and the
+ * schema-registration helper.
+ *
+ * Substrate for spine layers 12–15 credential classes; consumers (attestations,
+ * agreements, payments, fulfillment) compose specific credential types on top.
+ *
+ * Authoritative spec: specs/242-trust-credentials-and-public-assertions.md
+ */
+export const PACKAGE_NAME = '@agenticprimitives/verifiable-credentials';
+export const PACKAGE_STATUS = 'w1-foundational';
+export const SPEC_REF = 'specs/242-trust-credentials-and-public-assertions.md';
+// Types + constants
+export { VC_CONTEXT_V2, EIP712_SIG_2026_CONTEXT, VC_DOMAIN_NAME, VC_DOMAIN_VERSION, VC_EIP712_TYPES, } from './types.js';
+// Canonical hash + JCS
+export { jcsCanonicalize, canonicalHash, JcsError } from './canonical.js';
+// Situation pattern
+export { assertSituationRolesPresent, buildSituation, } from './situation.js';
+// Proof builder
+export { credentialHash, eip712Digest, isoToSeconds, signCredential, viemSignerFromWallet, } from './proof.js';
+// Verifier
+export { verifyCredentialStructural } from './verifier.js';
+// Schema registration
+export { SHAPE_DID_PREFIX, buildShapeUri, parseShapeUri, shapeHash } from './schema.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,2CAA2C,CAAC;AACxE,MAAM,CAAC,MAAM,cAAc,GAAG,iBAA0B,CAAC;AACzD,MAAM,CAAC,MAAM,QAAQ,GAAG,sDAAsD,CAAC;AAE/E,oBAAoB;AACpB,OAAO,EACL,aAAa,EACb,uBAAuB,EACvB,cAAc,EACd,iBAAiB,EACjB,eAAe,GAChB,MAAM,YAAY,CAAC;AAcpB,uBAAuB;AACvB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1E,oBAAoB;AACpB,OAAO,EACL,2BAA2B,EAC3B,cAAc,GACf,MAAM,gBAAgB,CAAC;AAGxB,gBAAgB;AAChB,OAAO,EACL,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,oBAAoB,GACrB,MAAM,YAAY,CAAC;AAGpB,WAAW;AACX,OAAO,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAC;AAG3D,sBAAsB;AACtB,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC"}

package/dist/proof.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Eip712Signature2026 proof builder — signs the canonical hash of a credential
+ * subject + envelope metadata with EIP-712 typed data, producing an
+ * ERC-1271-verifiable signature.
+ *
+ * Spec 242 §4.3 + ADR-0023 §D2.
+ */
+import { type Address, type Hex, type WalletClient } from 'viem';
+import { type Eip712Signature2026Proof, type Hex32, type Proof, type UnsignedCredential, type VerifiableCredential } from './types.js';
+/** A signer abstraction so callers can wire viem wallet client OR a custom signer. */
+export interface CredentialSigner {
+    /** Address of the SA that will be the issuer (verified via ERC-1271). */
+    issuerAddress: Address;
+    /** EIP-712 chain id + verifying-contract anchor for the SA. */
+    chainId: number;
+    /** Must match the SA's verifying contract (typically the SA itself for ERC-1271). */
+    verifyingContract: Address;
+    /**
+     * Sign an arbitrary 32-byte digest. Implementations route through whatever
+     * the SA's signing path is (passkey, EOA wrap, KMS, multi-sig, etc.).
+     */
+    signDigest(digest: Hex32): Promise<Hex>;
+}
+/**
+ * Compute the canonical hash of an unsigned credential — strips `proof`,
+ * applies RFC 8785 JCS canonicalisation, returns keccak256.
+ */
+export declare function credentialHash(unsigned: UnsignedCredential | VerifiableCredential): Hex32;
+/**
+ * Compute the EIP-712 typed-data digest the signer signs. Cross-stack typehash
+ * equality test (spec 242 §4.3) verifies this matches a Solidity verifier.
+ */
+export declare function eip712Digest(args: {
+    credentialBodyHash: Hex32;
+    issuer: string;
+    validFrom: number;
+    validUntil: number;
+    proofPurpose: Eip712Signature2026Proof['proofPurpose'];
+    chainId: number;
+    verifyingContract: Address;
+}): Hex32;
+/** Convert an ISO-8601 timestamp to a uint64-safe seconds value. */
+export declare function isoToSeconds(iso: string | undefined): number;
+/**
+ * Sign an `UnsignedCredential` and return a fully formed `VerifiableCredential`.
+ */
+export declare function signCredential<TSubject extends Record<string, unknown>>(unsigned: UnsignedCredential<TSubject>, signer: CredentialSigner, opts?: {
+    proofPurpose?: Eip712Signature2026Proof['proofPurpose'];
+}): Promise<VerifiableCredential<TSubject>>;
+/** Convenience: a viem `WalletClient`-backed `CredentialSigner` (EOA-only path). */
+export declare function viemSignerFromWallet(args: {
+    wallet: WalletClient;
+    issuerAddress: Address;
+    chainId: number;
+    verifyingContract: Address;
+}): CredentialSigner;
+/** Re-export so callers see the Proof union from one place. */
+export type { Proof };
+//# sourceMappingURL=proof.d.ts.map

package/dist/proof.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof.d.ts","sourceRoot":"","sources":["../src/proof.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAiB,KAAK,OAAO,EAAE,KAAK,GAAG,EAAE,KAAK,YAAY,EAAE,MAAM,MAAM,CAAC;AAGhF,OAAO,EAML,KAAK,wBAAwB,EAC7B,KAAK,KAAK,EACV,KAAK,KAAK,EACV,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EAC1B,MAAM,YAAY,CAAC;AAEpB,sFAAsF;AACtF,MAAM,WAAW,gBAAgB;IAC/B,yEAAyE;IACzE,aAAa,EAAE,OAAO,CAAC;IACvB,+DAA+D;IAC/D,OAAO,EAAE,MAAM,CAAC;IAChB,qFAAqF;IACrF,iBAAiB,EAAE,OAAO,CAAC;IAC3B;;;OAGG;IACH,UAAU,CAAC,MAAM,EAAE,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;CACzC;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,kBAAkB,GAAG,oBAAoB,GAAG,KAAK,CAKzF;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE;IACjC,kBAAkB,EAAE,KAAK,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,wBAAwB,CAAC,cAAc,CAAC,CAAC;IACvD,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,OAAO,CAAC;CAC5B,GAAG,KAAK,CAkBR;AAED,oEAAoE;AACpE,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAG5D;AAED;;GAEG;AACH,wBAAsB,cAAc,CAAC,QAAQ,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC3E,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,CAAC,EACtC,MAAM,EAAE,gBAAgB,EACxB,IAAI,GAAE;IAAE,YAAY,CAAC,EAAE,wBAAwB,CAAC,cAAc,CAAC,CAAA;CAAO,GACrE,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAkCzC;AAED,oFAAoF;AACpF,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,MAAM,EAAE,YAAY,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,OAAO,CAAC;CAC5B,GAAG,gBAAgB,CAYnB;AAQD,+DAA+D;AAC/D,YAAY,EAAE,KAAK,EAAE,CAAC"}

package/dist/proof.js

@@ -0,0 +1,105 @@
+/**
+ * Eip712Signature2026 proof builder — signs the canonical hash of a credential
+ * subject + envelope metadata with EIP-712 typed data, producing an
+ * ERC-1271-verifiable signature.
+ *
+ * Spec 242 §4.3 + ADR-0023 §D2.
+ */
+import { hashTypedData } from 'viem';
+import { canonicalHash } from './canonical.js';
+import { EIP712_SIG_2026_CONTEXT, VC_CONTEXT_V2, VC_DOMAIN_NAME, VC_DOMAIN_VERSION, VC_EIP712_TYPES, } from './types.js';
+/**
+ * Compute the canonical hash of an unsigned credential — strips `proof`,
+ * applies RFC 8785 JCS canonicalisation, returns keccak256.
+ */
+export function credentialHash(unsigned) {
+    // Defensive: strip proof if a signed VC was passed in.
+    const { proof: _ignored, ...withoutProof } = unsigned;
+    void _ignored;
+    return canonicalHash(withoutProof);
+}
+/**
+ * Compute the EIP-712 typed-data digest the signer signs. Cross-stack typehash
+ * equality test (spec 242 §4.3) verifies this matches a Solidity verifier.
+ */
+export function eip712Digest(args) {
+    return hashTypedData({
+        domain: {
+            name: VC_DOMAIN_NAME,
+            version: VC_DOMAIN_VERSION,
+            chainId: args.chainId,
+            verifyingContract: args.verifyingContract,
+        },
+        types: VC_EIP712_TYPES,
+        primaryType: 'VerifiableCredentialAttestation',
+        message: {
+            credentialHash: args.credentialBodyHash,
+            issuer: args.issuer,
+            validFrom: BigInt(args.validFrom),
+            validUntil: BigInt(args.validUntil),
+            proofPurpose: args.proofPurpose,
+        },
+    });
+}
+/** Convert an ISO-8601 timestamp to a uint64-safe seconds value. */
+export function isoToSeconds(iso) {
+    if (!iso)
+        return 0;
+    return Math.floor(new Date(iso).getTime() / 1000);
+}
+/**
+ * Sign an `UnsignedCredential` and return a fully formed `VerifiableCredential`.
+ */
+export async function signCredential(unsigned, signer, opts = {}) {
+    const proofPurpose = opts.proofPurpose ?? 'assertionMethod';
+    const bodyHash = credentialHash(unsigned);
+    const digest = eip712Digest({
+        credentialBodyHash: bodyHash,
+        issuer: unsigned.issuer,
+        validFrom: isoToSeconds(unsigned.validFrom),
+        validUntil: isoToSeconds(unsigned.validUntil),
+        proofPurpose,
+        chainId: signer.chainId,
+        verifyingContract: signer.verifyingContract,
+    });
+    const proofValue = await signer.signDigest(digest);
+    const proof = {
+        type: 'Eip712Signature2026',
+        created: new Date().toISOString(),
+        verificationMethod: `eip155:${signer.chainId}:${signer.verifyingContract}#assertion-key-1`,
+        proofPurpose,
+        proofValue,
+        eip712Domain: {
+            name: VC_DOMAIN_NAME,
+            version: VC_DOMAIN_VERSION,
+            chainId: signer.chainId,
+            verifyingContract: signer.verifyingContract,
+        },
+        credentialHash: bodyHash,
+    };
+    return {
+        ...unsigned,
+        '@context': ensureContexts(unsigned['@context']),
+        proof,
+    };
+}
+/** Convenience: a viem `WalletClient`-backed `CredentialSigner` (EOA-only path). */
+export function viemSignerFromWallet(args) {
+    return {
+        issuerAddress: args.issuerAddress,
+        chainId: args.chainId,
+        verifyingContract: args.verifyingContract,
+        async signDigest(digest) {
+            return args.wallet.request({
+                method: 'eth_sign',
+                params: [args.issuerAddress, digest],
+            });
+        },
+    };
+}
+function ensureContexts(existing) {
+    const needed = [VC_CONTEXT_V2, EIP712_SIG_2026_CONTEXT];
+    const have = new Set(existing);
+    return [...existing, ...needed.filter((c) => !have.has(c))];
+}
+//# sourceMappingURL=proof.js.map

package/dist/proof.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof.js","sourceRoot":"","sources":["../src/proof.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,aAAa,EAA6C,MAAM,MAAM,CAAC;AAEhF,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EACL,uBAAuB,EACvB,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,eAAe,GAMhB,MAAM,YAAY,CAAC;AAiBpB;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,QAAmD;IAChF,uDAAuD;IACvD,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,YAAY,EAAE,GAAG,QAAgC,CAAC;IAC9E,KAAK,QAAQ,CAAC;IACd,OAAO,aAAa,CAAC,YAAY,CAAC,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAQ5B;IACC,OAAO,aAAa,CAAC;QACnB,MAAM,EAAE;YACN,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,iBAAiB;YAC1B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;SAC1C;QACD,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,iCAAiC;QAC9C,OAAO,EAAE;YACP,cAAc,EAAE,IAAI,CAAC,kBAAkB;YACvC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YACjC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;YACnC,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC;KACF,CAAU,CAAC;AACd,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,YAAY,CAAC,GAAuB;IAClD,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,CAAC;IACnB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;AACpD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAsC,EACtC,MAAwB,EACxB,OAAoE,EAAE;IAEtE,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,iBAAiB,CAAC;IAC5D,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,YAAY,CAAC;QAC1B,kBAAkB,EAAE,QAAQ;QAC5B,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,SAAS,EAAE,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC3C,UAAU,EAAE,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC7C,YAAY;QACZ,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;KAC5C,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAEnD,MAAM,KAAK,GAA6B;QACtC,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACjC,kBAAkB,EAAE,UAAU,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,iBAAiB,kBAAkB;QAC1F,YAAY;QACZ,UAAU;QACV,YAAY,EAAE;YACZ,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,iBAAiB;YAC1B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;SAC5C;QACD,cAAc,EAAE,QAAQ;KACzB,CAAC;IAEF,OAAO;QACL,GAAG,QAAQ;QACX,UAAU,EAAE,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAChD,KAAK;KAC4B,CAAC;AACtC,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,oBAAoB,CAAC,IAKpC;IACC,OAAO;QACL,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,KAAK,CAAC,UAAU,CAAC,MAAM;YACrB,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;gBACzB,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC;aACgB,CAAmB,CAAC;QAC5E,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,QAA2B;IACjD,MAAM,MAAM,GAAG,CAAC,aAAa,EAAE,uBAAuB,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/B,OAAO,CAAC,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC"}

package/dist/schema.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Schema registration helper — produces the `did:shape:<name>:<version>` ↔
+ * on-chain `ShapeRegistry.defineShape(...)` round-trip per PD-12.
+ *
+ * In W1 this module ships pure helpers (no on-chain call). The caller wires
+ * the actual `defineShape` call against their viem clients; we provide:
+ *  - the canonical schema URI form (`did:shape:<name>:<version>`)
+ *  - the canonical hash bytes (`keccak256` of the canonical SHACL string)
+ *  - a parser to round-trip schema URIs
+ */
+import type { Hex32 } from './types.js';
+export declare const SHAPE_DID_PREFIX: "did:shape:";
+/**
+ * Build the canonical `did:shape:<name>:<version>` URI.
+ *
+ * @throws if name or version contains characters outside `[A-Za-z0-9-_.]`.
+ */
+export declare function buildShapeUri(name: string, version: string): string;
+/**
+ * Parse a `did:shape:<name>:<version>` URI.
+ */
+export declare function parseShapeUri(uri: string): {
+    name: string;
+    version: string;
+} | null;
+/**
+ * Canonicalise SHACL bytes for the on-chain hash. The canonical form is:
+ *  - UTF-8 normalised (callers are responsible for upstream NFC if needed)
+ *  - keccak256 of the raw bytes
+ *
+ * This matches the on-chain `ShapeRegistry.defineShape(shapeHash)` expectation
+ * — both sides hash the exact same SHACL string.
+ */
+export declare function shapeHash(shaclBytes: string | Uint8Array): Hex32;
+//# sourceMappingURL=schema.d.ts.map

package/dist/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAExC,eAAO,MAAM,gBAAgB,EAAG,YAAqB,CAAC;AAEtD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAQnE;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CASnF;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,UAAU,GAAG,KAAK,CAQhE"}

package/dist/schema.js

@@ -0,0 +1,61 @@
+/**
+ * Schema registration helper — produces the `did:shape:<name>:<version>` ↔
+ * on-chain `ShapeRegistry.defineShape(...)` round-trip per PD-12.
+ *
+ * In W1 this module ships pure helpers (no on-chain call). The caller wires
+ * the actual `defineShape` call against their viem clients; we provide:
+ *  - the canonical schema URI form (`did:shape:<name>:<version>`)
+ *  - the canonical hash bytes (`keccak256` of the canonical SHACL string)
+ *  - a parser to round-trip schema URIs
+ */
+import { keccak_256 } from '@noble/hashes/sha3.js';
+import { utf8ToBytes } from '@noble/hashes/utils.js';
+export const SHAPE_DID_PREFIX = 'did:shape:';
+/**
+ * Build the canonical `did:shape:<name>:<version>` URI.
+ *
+ * @throws if name or version contains characters outside `[A-Za-z0-9-_.]`.
+ */
+export function buildShapeUri(name, version) {
+    if (!/^[A-Za-z0-9._-]+$/.test(name)) {
+        throw new Error(`[verifiable-credentials/schema] invalid shape name: ${name}`);
+    }
+    if (!/^[A-Za-z0-9._-]+$/.test(version)) {
+        throw new Error(`[verifiable-credentials/schema] invalid shape version: ${version}`);
+    }
+    return `${SHAPE_DID_PREFIX}${name}:${version}`;
+}
+/**
+ * Parse a `did:shape:<name>:<version>` URI.
+ */
+export function parseShapeUri(uri) {
+    if (!uri.startsWith(SHAPE_DID_PREFIX))
+        return null;
+    const body = uri.slice(SHAPE_DID_PREFIX.length);
+    const colonIdx = body.lastIndexOf(':');
+    if (colonIdx === -1)
+        return null;
+    const name = body.slice(0, colonIdx);
+    const version = body.slice(colonIdx + 1);
+    if (!name || !version)
+        return null;
+    return { name, version };
+}
+/**
+ * Canonicalise SHACL bytes for the on-chain hash. The canonical form is:
+ *  - UTF-8 normalised (callers are responsible for upstream NFC if needed)
+ *  - keccak256 of the raw bytes
+ *
+ * This matches the on-chain `ShapeRegistry.defineShape(shapeHash)` expectation
+ * — both sides hash the exact same SHACL string.
+ */
+export function shapeHash(shaclBytes) {
+    const bytes = typeof shaclBytes === 'string' ? utf8ToBytes(shaclBytes) : shaclBytes;
+    const digest = keccak_256(bytes);
+    let hex = '0x';
+    for (const v of digest) {
+        hex += v.toString(16).padStart(2, '0');
+    }
+    return hex;
+}
+//# sourceMappingURL=schema.js.map

package/dist/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAIrD,MAAM,CAAC,MAAM,gBAAgB,GAAG,YAAqB,CAAC;AAEtD;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,OAAe;IACzD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,uDAAuD,IAAI,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,0DAA0D,OAAO,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,GAAG,gBAAgB,GAAG,IAAI,IAAI,OAAO,EAAE,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,gBAAgB,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,QAAQ,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CAAC,UAA+B;IACvD,MAAM,KAAK,GAAG,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IACpF,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,GAAY,CAAC;AACtB,CAAC"}

package/dist/situation.d.ts

@@ -0,0 +1,48 @@
+/**
+ * DOLCE+DnS Situation pattern — the substrate's typed base for every credential
+ * subject. Per spec 242 §5: substrate credentials describe a `Situation` with
+ * a `Description`, `Roles`, and `Participants`.
+ *
+ *   Situation     — the thing the credential is about (e.g. "this agreement",
+ *                   "this validation result", "this evidence anchor")
+ *   Description   — the typed shape spec the situation conforms to (SHACL IRI)
+ *   Roles         — typed slots filled by participants (e.g. issuer, holder,
+ *                   beneficiary, validator)
+ *   Participants  — the SAs filling each role
+ *
+ * Owning vocabularies define their specific Situation subclasses; this module
+ * exports the substrate base types every consumer composes against.
+ */
+import type { Address } from '@agenticprimitives/types';
+/** Ontology IRI of the Description shape (e.g. `apagr:AgreementCredential`). */
+export type DescriptionRef = `${string}:${string}`;
+/** Role identifier — local name within a Description. */
+export type RoleName = string;
+/** A typed Situation as a credential subject. The `[k: string]: unknown`
+ *  index signature lets it satisfy `VerifiableCredential`'s `TSubject` constraint
+ *  while keeping the typed `description / roles / body` fields tight. */
+export interface Situation<TBody extends Record<string, unknown> = Record<string, unknown>> {
+    /** The Description shape the situation conforms to. */
+    description: DescriptionRef;
+    /** Typed slots — `{ roleName → AgentSA }`. */
+    roles: Record<RoleName, Address>;
+    /** Optional non-Agent participants (e.g. resource IRIs, document hashes). */
+    participants?: Record<string, string>;
+    /** The situation-specific payload. */
+    body: TBody;
+    /** Index signature so Situation satisfies VC's TSubject constraint. */
+    [key: string]: unknown;
+}
+/**
+ * Validate that a Situation declares the roles its Description requires.
+ * Used by SDK helpers before signing; production validation runs SHACL.
+ */
+export declare function assertSituationRolesPresent(s: Situation, requiredRoles: RoleName[]): void;
+/** Convenience constructor — builds the situation envelope from typed bits. */
+export declare function buildSituation<TBody extends Record<string, unknown>>(args: {
+    description: DescriptionRef;
+    roles: Record<RoleName, Address>;
+    body: TBody;
+    participants?: Record<string, string>;
+}): Situation<TBody>;
+//# sourceMappingURL=situation.d.ts.map

package/dist/situation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"situation.d.ts","sourceRoot":"","sources":["../src/situation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAExD,gFAAgF;AAChF,MAAM,MAAM,cAAc,GAAG,GAAG,MAAM,IAAI,MAAM,EAAE,CAAC;AAEnD,yDAAyD;AACzD,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC;AAE9B;;yEAEyE;AACzE,MAAM,WAAW,SAAS,CAAC,KAAK,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACxF,uDAAuD;IACvD,WAAW,EAAE,cAAc,CAAC;IAC5B,8CAA8C;IAC9C,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACjC,6EAA6E;IAC7E,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,sCAAsC;IACtC,IAAI,EAAE,KAAK,CAAC;IACZ,uEAAuE;IACvE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,IAAI,CAQzF;AAED,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,KAAK,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE;IAC1E,WAAW,EAAE,cAAc,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACjC,IAAI,EAAE,KAAK,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACvC,GAAG,SAAS,CAAC,KAAK,CAAC,CAOnB"}

package/dist/situation.js

@@ -0,0 +1,36 @@
+/**
+ * DOLCE+DnS Situation pattern — the substrate's typed base for every credential
+ * subject. Per spec 242 §5: substrate credentials describe a `Situation` with
+ * a `Description`, `Roles`, and `Participants`.
+ *
+ *   Situation     — the thing the credential is about (e.g. "this agreement",
+ *                   "this validation result", "this evidence anchor")
+ *   Description   — the typed shape spec the situation conforms to (SHACL IRI)
+ *   Roles         — typed slots filled by participants (e.g. issuer, holder,
+ *                   beneficiary, validator)
+ *   Participants  — the SAs filling each role
+ *
+ * Owning vocabularies define their specific Situation subclasses; this module
+ * exports the substrate base types every consumer composes against.
+ */
+/**
+ * Validate that a Situation declares the roles its Description requires.
+ * Used by SDK helpers before signing; production validation runs SHACL.
+ */
+export function assertSituationRolesPresent(s, requiredRoles) {
+    const have = new Set(Object.keys(s.roles));
+    const missing = requiredRoles.filter((r) => !have.has(r));
+    if (missing.length > 0) {
+        throw new Error(`[verifiable-credentials] Situation '${s.description}' is missing required roles: ${missing.join(', ')}`);
+    }
+}
+/** Convenience constructor — builds the situation envelope from typed bits. */
+export function buildSituation(args) {
+    return {
+        description: args.description,
+        roles: { ...args.roles },
+        participants: args.participants ? { ...args.participants } : undefined,
+        body: args.body,
+    };
+}
+//# sourceMappingURL=situation.js.map

package/dist/situation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"situation.js","sourceRoot":"","sources":["../src/situation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AA0BH;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CAAC,CAAY,EAAE,aAAyB;IACjF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,uCAAuC,CAAC,CAAC,WAAW,gCAAgC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACzG,CAAC;IACJ,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAAwC,IAKrE;IACC,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE;QACxB,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,SAAS;QACtE,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,CAAC;AACJ,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,135 @@
+/**
+ * W3C Verifiable Credentials 2.0 envelope types + `Eip712Signature2026` proof
+ * type. Substrate for all spine credential classes (Association, Evidence,
+ * Outcome, Validation, TrustUpdate, AgreementCredential, PaymentReceipt, ...).
+ *
+ * Authoritative spec: specs/242-trust-credentials-and-public-assertions.md §4.
+ * Architecture-of-record: ADR-0023 + ADR-0024 (composability table).
+ */
+import type { Address, Hex } from '@agenticprimitives/types';
+export type Hex32 = `0x${string}`;
+export type ISODate = string;
+/** W3C VC 2.0 default context. */
+export declare const VC_CONTEXT_V2: "https://www.w3.org/ns/credentials/v2";
+/** Substrate's Eip712Signature2026 context (proof-type alongside W3C VC). */
+export declare const EIP712_SIG_2026_CONTEXT: "https://agenticprimitives.dev/contexts/eip712-signature-2026/v1";
+/**
+ * Discriminator for the proof type. Primary in W1; BBS+ / SD-JWT reserved per
+ * PD-28 (privacy doc §2.3).
+ */
+export type ProofType = 'Eip712Signature2026' | 'DataIntegrityProof' | 'SdJwtProof';
+/**
+ * The primary W1 proof shape — EIP-712 typed-data signature verified via
+ * ERC-1271 against the issuer SA.
+ *
+ * Per ADR-0023:
+ * - `verificationMethod` SHOULD be a CAIP-10 reference to the issuer's SA.
+ * - `proofPurpose` is `assertionMethod` for issuer-attested credentials,
+ *   `authentication` for holder-asserted ones.
+ */
+export interface Eip712Signature2026Proof {
+    type: 'Eip712Signature2026';
+    created: ISODate;
+    verificationMethod: string;
+    proofPurpose: 'assertionMethod' | 'authentication' | 'capabilityInvocation';
+    /** Hex-encoded ERC-1271-verifiable signature. */
+    proofValue: Hex;
+    /** Optional EIP-712 domain hash for cross-stack reconciliation. */
+    eip712Domain?: {
+        name: string;
+        version: string;
+        chainId: number;
+        verifyingContract: Address;
+    };
+    /** Optional canonical-hash receipt of the credential body (RFC 8785 JCS). */
+    credentialHash?: Hex32;
+}
+/** Discriminated union for all supported proof types (W1: Eip712Signature2026 only). */
+export type Proof = Eip712Signature2026Proof;
+/** W3C VC StatusList2021 envelope (per `credentialStatus`). */
+export interface CredentialStatus2021 {
+    id: string;
+    type: 'StatusList2021Entry' | 'RevocationList2020Status';
+    statusPurpose?: 'revocation' | 'suspension';
+    statusListIndex?: number;
+    statusListCredential?: string;
+}
+/**
+ * Per privacy doc D-42: every field MAY carry a per-field VisibilityTier
+ * override; consumers MAY render a partial VC by tier.
+ */
+export type VisibilityTier = 'Public' | 'PublicCoarse' | 'PrivateCommitment' | 'PrivateZK' | 'OffchainOnly';
+export interface DisclosurePolicy {
+    /** JSON-encoded { fieldPath → tier }. */
+    fieldDisclosure?: Record<string, VisibilityTier>;
+    /** Default tier applied to every unmapped field. */
+    defaultTier: VisibilityTier;
+}
+/**
+ * The canonical W3C VC 2.0 envelope, parameterised by the credential-subject
+ * shape. Implementations of substrate credential types (Association, Evidence,
+ * Outcome, Validation, TrustUpdate, AgreementCredential, PaymentReceipt) live
+ * in their owning packages; this envelope is substrate-wide.
+ */
+export interface VerifiableCredential<TSubject extends Record<string, unknown> = Record<string, unknown>> {
+    '@context': readonly string[];
+    /** First element MUST be `'VerifiableCredential'`; subsequent are class names. */
+    type: readonly [...string[]];
+    /** CAIP-10 reference to the issuer SA (preferred), or a DID. */
+    issuer: string;
+    /** Issuance time. */
+    validFrom: ISODate;
+    /** Optional expiry. */
+    validUntil?: ISODate;
+    /** Credential subject — discriminated by class. */
+    credentialSubject: TSubject;
+    /** Optional revocation envelope (StatusList2021). */
+    credentialStatus?: CredentialStatus2021;
+    /** Optional schema pointer — `did:shape:<name>:<version>` (per PD-12 round-trip). */
+    credentialSchema?: {
+        id: string;
+        type: 'JsonSchema' | 'ShaclShape';
+    };
+    /** Substrate per-field DisclosurePolicy (D-42). */
+    disclosurePolicy?: DisclosurePolicy;
+    /** The proof (W1: Eip712Signature2026). */
+    proof?: Proof;
+}
+/** Convenience alias for a VC without a proof attached (pre-signing). */
+export type UnsignedCredential<TSubject extends Record<string, unknown> = Record<string, unknown>> = Omit<VerifiableCredential<TSubject>, 'proof'>;
+/**
+ * Standard EIP-712 domain for the substrate's `Eip712Signature2026` proof.
+ *
+ * Cross-stack typehash equality: any Solidity verifier MUST compute the same
+ * `typeHash` from the same primary type string + same field types. The
+ * canonical primary type is `VerifiableCredentialAttestation`:
+ *
+ *   VerifiableCredentialAttestation(
+ *     bytes32 credentialHash,
+ *     string  issuer,
+ *     uint64  validFrom,
+ *     uint64  validUntil,
+ *     string  proofPurpose
+ *   )
+ */
+export declare const VC_EIP712_TYPES: {
+    readonly VerifiableCredentialAttestation: readonly [{
+        readonly name: "credentialHash";
+        readonly type: "bytes32";
+    }, {
+        readonly name: "issuer";
+        readonly type: "string";
+    }, {
+        readonly name: "validFrom";
+        readonly type: "uint64";
+    }, {
+        readonly name: "validUntil";
+        readonly type: "uint64";
+    }, {
+        readonly name: "proofPurpose";
+        readonly type: "string";
+    }];
+};
+export declare const VC_DOMAIN_NAME: "AgenticPrimitivesVC";
+export declare const VC_DOMAIN_VERSION: "1";
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,0BAA0B,CAAC;AAE7D,MAAM,MAAM,KAAK,GAAG,KAAK,MAAM,EAAE,CAAC;AAClC,MAAM,MAAM,OAAO,GAAG,MAAM,CAAC;AAE7B,kCAAkC;AAClC,eAAO,MAAM,aAAa,EAAG,sCAA+C,CAAC;AAE7E,6EAA6E;AAC7E,eAAO,MAAM,uBAAuB,EAClC,iEAA0E,CAAC;AAE7E;;;GAGG;AACH,MAAM,MAAM,SAAS,GACjB,qBAAqB,GACrB,oBAAoB,GACpB,YAAY,CAAC;AAEjB;;;;;;;;GAQG;AACH,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,qBAAqB,CAAC;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,iBAAiB,GAAG,gBAAgB,GAAG,sBAAsB,CAAC;IAC5E,iDAAiD;IACjD,UAAU,EAAE,GAAG,CAAC;IAChB,mEAAmE;IACnE,YAAY,CAAC,EAAE;QACb,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,iBAAiB,EAAE,OAAO,CAAC;KAC5B,CAAC;IACF,6EAA6E;IAC7E,cAAc,CAAC,EAAE,KAAK,CAAC;CACxB;AAED,wFAAwF;AACxF,MAAM,MAAM,KAAK,GAAG,wBAAwB,CAAC;AAE7C,+DAA+D;AAC/D,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,qBAAqB,GAAG,0BAA0B,CAAC;IACzD,aAAa,CAAC,EAAE,YAAY,GAAG,YAAY,CAAC;IAC5C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,MAAM,cAAc,GACtB,QAAQ,GACR,cAAc,GACd,mBAAmB,GACnB,WAAW,GACX,cAAc,CAAC;AAEnB,MAAM,WAAW,gBAAgB;IAC/B,yCAAyC;IACzC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACjD,oDAAoD;IACpD,WAAW,EAAE,cAAc,CAAC;CAC7B;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB,CAAC,QAAQ,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACtG,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,kFAAkF;IAClF,IAAI,EAAE,SAAS,CAAC,GAAG,MAAM,EAAE,CAAC,CAAC;IAC7B,gEAAgE;IAChE,MAAM,EAAE,MAAM,CAAC;IACf,qBAAqB;IACrB,SAAS,EAAE,OAAO,CAAC;IACnB,uBAAuB;IACvB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,mDAAmD;IACnD,iBAAiB,EAAE,QAAQ,CAAC;IAC5B,qDAAqD;IACrD,gBAAgB,CAAC,EAAE,oBAAoB,CAAC;IACxC,qFAAqF;IACrF,gBAAgB,CAAC,EAAE;QACjB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,YAAY,GAAG,YAAY,CAAC;KACnC,CAAC;IACF,mDAAmD;IACnD,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,2CAA2C;IAC3C,KAAK,CAAC,EAAE,KAAK,CAAC;CACf;AAED,yEAAyE;AACzE,MAAM,MAAM,kBAAkB,CAAC,QAAQ,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,IAAI,CACvG,oBAAoB,CAAC,QAAQ,CAAC,EAC9B,OAAO,CACR,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;CAQlB,CAAC;AAEX,eAAO,MAAM,cAAc,EAAG,qBAA8B,CAAC;AAC7D,eAAO,MAAM,iBAAiB,EAAG,GAAY,CAAC"}

package/dist/types.js

@@ -0,0 +1,39 @@
+/**
+ * W3C Verifiable Credentials 2.0 envelope types + `Eip712Signature2026` proof
+ * type. Substrate for all spine credential classes (Association, Evidence,
+ * Outcome, Validation, TrustUpdate, AgreementCredential, PaymentReceipt, ...).
+ *
+ * Authoritative spec: specs/242-trust-credentials-and-public-assertions.md §4.
+ * Architecture-of-record: ADR-0023 + ADR-0024 (composability table).
+ */
+/** W3C VC 2.0 default context. */
+export const VC_CONTEXT_V2 = 'https://www.w3.org/ns/credentials/v2';
+/** Substrate's Eip712Signature2026 context (proof-type alongside W3C VC). */
+export const EIP712_SIG_2026_CONTEXT = 'https://agenticprimitives.dev/contexts/eip712-signature-2026/v1';
+/**
+ * Standard EIP-712 domain for the substrate's `Eip712Signature2026` proof.
+ *
+ * Cross-stack typehash equality: any Solidity verifier MUST compute the same
+ * `typeHash` from the same primary type string + same field types. The
+ * canonical primary type is `VerifiableCredentialAttestation`:
+ *
+ *   VerifiableCredentialAttestation(
+ *     bytes32 credentialHash,
+ *     string  issuer,
+ *     uint64  validFrom,
+ *     uint64  validUntil,
+ *     string  proofPurpose
+ *   )
+ */
+export const VC_EIP712_TYPES = {
+    VerifiableCredentialAttestation: [
+        { name: 'credentialHash', type: 'bytes32' },
+        { name: 'issuer', type: 'string' },
+        { name: 'validFrom', type: 'uint64' },
+        { name: 'validUntil', type: 'uint64' },
+        { name: 'proofPurpose', type: 'string' },
+    ],
+};
+export const VC_DOMAIN_NAME = 'AgenticPrimitivesVC';
+export const VC_DOMAIN_VERSION = '1';
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,kCAAkC;AAClC,MAAM,CAAC,MAAM,aAAa,GAAG,sCAA+C,CAAC;AAE7E,6EAA6E;AAC7E,MAAM,CAAC,MAAM,uBAAuB,GAClC,iEAA0E,CAAC;AAyG7E;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,+BAA+B,EAAE;QAC/B,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,SAAS,EAAE;QAC3C,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;QAClC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE;QACrC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE;QACtC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE;KACzC;CACO,CAAC;AAEX,MAAM,CAAC,MAAM,cAAc,GAAG,qBAA8B,CAAC;AAC7D,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAY,CAAC"}

package/dist/verifier.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Verifier — checks that a VC's proof is valid.
+ *
+ * For W1 the verifier is structural + signature-shape only; the ERC-1271
+ * round-trip against the issuer SA on chain is delegated to consumers (who
+ * already hold a viem public client). The verifier returns enough information
+ * for the consumer to perform the on-chain check itself.
+ *
+ * Status-list resolution (StatusList2021) is likewise structural in W1 — we
+ * record whether a status entry was present + which list to fetch. Per
+ * ADR-0013 (no silent fallbacks) the consumer fetches the status list itself.
+ */
+import type { Hex32, VerifiableCredential } from './types.js';
+export interface VerificationResult {
+    /** Structural validity (envelope shape + canonical hash agreement). */
+    structural: boolean;
+    /** The digest the issuer SA's ERC-1271 path MUST validate. */
+    expectedDigest: Hex32 | null;
+    /** The proof value the consumer presents to `isValidSignatureNow`. */
+    proofValue: `0x${string}` | null;
+    /** The CAIP-10 issuer reference extracted from the verification method. */
+    issuerCaip10: string | null;
+    /** Status-list entry (if present); consumer fetches the list itself. */
+    statusListId: string | null;
+    /** Issues found — empty array if everything passes structural + canonical-hash checks. */
+    issues: string[];
+}
+/**
+ * Structural verification — does NOT make a network call. Returns the
+ * expected digest + proof value the caller MUST forward to the issuer SA's
+ * `isValidSignatureNow` (or other ERC-1271-aware path).
+ */
+export declare function verifyCredentialStructural(vc: VerifiableCredential): VerificationResult;
+//# sourceMappingURL=verifier.d.ts.map

package/dist/verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifier.d.ts","sourceRoot":"","sources":["../src/verifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAEV,KAAK,EAEL,oBAAoB,EACrB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,kBAAkB;IACjC,uEAAuE;IACvE,UAAU,EAAE,OAAO,CAAC;IACpB,8DAA8D;IAC9D,cAAc,EAAE,KAAK,GAAG,IAAI,CAAC;IAC7B,sEAAsE;IACtE,UAAU,EAAE,KAAK,MAAM,EAAE,GAAG,IAAI,CAAC;IACjC,2EAA2E;IAC3E,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,wEAAwE;IACxE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,0FAA0F;IAC1F,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,oBAAoB,GAAG,kBAAkB,CAqFvF"}

package/dist/verifier.js

@@ -0,0 +1,107 @@
+/**
+ * Verifier — checks that a VC's proof is valid.
+ *
+ * For W1 the verifier is structural + signature-shape only; the ERC-1271
+ * round-trip against the issuer SA on chain is delegated to consumers (who
+ * already hold a viem public client). The verifier returns enough information
+ * for the consumer to perform the on-chain check itself.
+ *
+ * Status-list resolution (StatusList2021) is likewise structural in W1 — we
+ * record whether a status entry was present + which list to fetch. Per
+ * ADR-0013 (no silent fallbacks) the consumer fetches the status list itself.
+ */
+import { credentialHash, eip712Digest, isoToSeconds } from './proof.js';
+/**
+ * Structural verification — does NOT make a network call. Returns the
+ * expected digest + proof value the caller MUST forward to the issuer SA's
+ * `isValidSignatureNow` (or other ERC-1271-aware path).
+ */
+export function verifyCredentialStructural(vc) {
+    const issues = [];
+    if (!vc['@context'] || vc['@context'].length === 0) {
+        issues.push('missing @context');
+    }
+    if (!vc.type || vc.type[0] !== 'VerifiableCredential') {
+        issues.push('type[0] MUST be "VerifiableCredential"');
+    }
+    if (!vc.issuer)
+        issues.push('missing issuer');
+    if (!vc.validFrom)
+        issues.push('missing validFrom');
+    if (!vc.credentialSubject)
+        issues.push('missing credentialSubject');
+    if (vc.validUntil) {
+        const until = isoToSeconds(vc.validUntil);
+        const now = Math.floor(Date.now() / 1000);
+        if (until < now) {
+            issues.push(`credential expired at ${vc.validUntil}`);
+        }
+    }
+    if (!vc.proof) {
+        return {
+            structural: false,
+            expectedDigest: null,
+            proofValue: null,
+            issuerCaip10: null,
+            statusListId: vc.credentialStatus?.statusListCredential ?? null,
+            issues: [...issues, 'missing proof'],
+        };
+    }
+    if (vc.proof.type !== 'Eip712Signature2026') {
+        issues.push(`unsupported proof.type: ${vc.proof.type}`);
+        return {
+            structural: false,
+            expectedDigest: null,
+            proofValue: null,
+            issuerCaip10: null,
+            statusListId: vc.credentialStatus?.statusListCredential ?? null,
+            issues,
+        };
+    }
+    const proof = vc.proof;
+    if (!proof.eip712Domain) {
+        issues.push('Eip712Signature2026 proof MUST carry eip712Domain (for cross-stack verification)');
+        return {
+            structural: false,
+            expectedDigest: null,
+            proofValue: null,
+            issuerCaip10: null,
+            statusListId: vc.credentialStatus?.statusListCredential ?? null,
+            issues,
+        };
+    }
+    const bodyHash = credentialHash(vc);
+    if (proof.credentialHash && proof.credentialHash !== bodyHash) {
+        issues.push(`proof.credentialHash (${proof.credentialHash}) does not match canonical hash of credential body (${bodyHash})`);
+    }
+    const expectedDigest = eip712Digest({
+        credentialBodyHash: bodyHash,
+        issuer: vc.issuer,
+        validFrom: isoToSeconds(vc.validFrom),
+        validUntil: isoToSeconds(vc.validUntil),
+        proofPurpose: proof.proofPurpose,
+        chainId: proof.eip712Domain.chainId,
+        verifyingContract: proof.eip712Domain.verifyingContract,
+    });
+    const issuerCaip10 = parseCaip10IssuerFromVerificationMethod(proof.verificationMethod);
+    return {
+        structural: issues.length === 0,
+        expectedDigest,
+        proofValue: proof.proofValue,
+        issuerCaip10,
+        statusListId: vc.credentialStatus?.statusListCredential ?? null,
+        issues,
+    };
+}
+function parseCaip10IssuerFromVerificationMethod(method) {
+    // Format: `eip155:<chainId>:<address>#<keyName>`
+    const hashIdx = method.indexOf('#');
+    if (hashIdx === -1)
+        return null;
+    const ref = method.slice(0, hashIdx);
+    // Light sanity check
+    if (!/^eip155:\d+:0x[0-9a-fA-F]+$/.test(ref))
+        return null;
+    return ref;
+}
+//# sourceMappingURL=verifier.js.map

package/dist/verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifier.js","sourceRoot":"","sources":["../src/verifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAuBxE;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,EAAwB;IACjE,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,sBAAsB,EAAE,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,MAAM;QAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC9C,IAAI,CAAC,EAAE,CAAC,SAAS;QAAE,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACpD,IAAI,CAAC,EAAE,CAAC,iBAAiB;QAAE,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAEpE,IAAI,EAAE,CAAC,UAAU,EAAE,CAAC;QAClB,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QACd,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,cAAc,EAAE,IAAI;YACpB,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,IAAI;YAClB,YAAY,EAAE,EAAE,CAAC,gBAAgB,EAAE,oBAAoB,IAAI,IAAI;YAC/D,MAAM,EAAE,CAAC,GAAG,MAAM,EAAE,eAAe,CAAC;SACrC,CAAC;IACJ,CAAC;IAED,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,2BAA4B,EAAE,CAAC,KAAe,CAAC,IAAI,EAAE,CAAC,CAAC;QACnE,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,cAAc,EAAE,IAAI;YACpB,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,IAAI;YAClB,YAAY,EAAE,EAAE,CAAC,gBAAgB,EAAE,oBAAoB,IAAI,IAAI;YAC/D,MAAM;SACP,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,EAAE,CAAC,KAAiC,CAAC;IAEnD,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,kFAAkF,CAAC,CAAC;QAChG,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,cAAc,EAAE,IAAI;YACpB,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,IAAI;YAClB,YAAY,EAAE,EAAE,CAAC,gBAAgB,EAAE,oBAAoB,IAAI,IAAI;YAC/D,MAAM;SACP,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;QAC9D,MAAM,CAAC,IAAI,CACT,yBAAyB,KAAK,CAAC,cAAc,uDAAuD,QAAQ,GAAG,CAChH,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,YAAY,CAAC;QAClC,kBAAkB,EAAE,QAAQ;QAC5B,MAAM,EAAE,EAAE,CAAC,MAAM;QACjB,SAAS,EAAE,YAAY,CAAC,EAAE,CAAC,SAAS,CAAC;QACrC,UAAU,EAAE,YAAY,CAAC,EAAE,CAAC,UAAU,CAAC;QACvC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,OAAO,EAAE,KAAK,CAAC,YAAY,CAAC,OAAO;QACnC,iBAAiB,EAAE,KAAK,CAAC,YAAY,CAAC,iBAAiB;KACxD,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,uCAAuC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAEvF,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC/B,cAAc;QACd,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,YAAY;QACZ,YAAY,EAAE,EAAE,CAAC,gBAAgB,EAAE,oBAAoB,IAAI,IAAI;QAC/D,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAS,uCAAuC,CAAC,MAAc;IAC7D,iDAAiD;IACjD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,OAAO,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACrC,qBAAqB;IACrB,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,OAAO,GAAG,CAAC;AACb,CAAC"}

package/package.json

@@ -0,0 +1,58 @@
+{
+  "name": "@agenticprimitives/verifiable-credentials",
+  "version": "0.0.0-alpha.2",
+  "description": "W3C Verifiable Credentials envelope + Eip712Signature2026 proof + DOLCE+DnS Situation bases + ontology-shape schema registration. Substrate for layers 12–15 credential types.",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/agentictrustlabs/agenticprimitives.git",
+    "directory": "packages/verifiable-credentials"
+  },
+  "homepage": "https://github.com/agentictrustlabs/agenticprimitives/tree/master/packages/verifiable-credentials",
+  "bugs": {
+    "url": "https://github.com/agentictrustlabs/agenticprimitives/issues"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "LICENSE",
+    "dist",
+    "spec.md",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "peerDependencies": {
+    "viem": "^2.52.2",
+    "@agenticprimitives/types": "1.0.0-alpha.6",
+    "@agenticprimitives/ontology": "1.0.0-alpha.6"
+  },
+  "dependencies": {
+    "@noble/hashes": "^2.2.0"
+  },
+  "devDependencies": {
+    "vitest": "^4.1.8",
+    "viem": "^2.52.2"
+  },
+  "keywords": [
+    "agentic",
+    "primitives",
+    "verifiable-credentials"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run --passWithNoTests",
+    "test:unit": "vitest run test/unit --passWithNoTests",
+    "test:watch": "vitest",
+    "clean": "rm -rf dist"
+  }
+}

package/spec.md

@@ -0,0 +1,5 @@
+# Spec pointer
+
+Canonical spec: [`../../specs/242-*.md`](../../specs/)
+
+Owning layers (per [coordination-substrate.md](../../docs/architecture/coordination-substrate.md)): envelope.