@ajna-inc/openbadges 0.1.0

package/build/cryptosuites/contextPreprocessor.js

@@ -0,0 +1,127 @@
+"use strict";
+/**
+ * Context Preprocessor
+ *
+ * Strips @protected flags from JSON-LD contexts to allow combining
+ * multiple contexts that define the same terms identically.
+ *
+ * This is necessary because:
+ * - VC v2 and OBv3 contexts both define terms like "description"
+ * - Both map to the same IRIs (e.g., https://schema.org/description)
+ * - But both use @protected: true, which prevents redefinition
+ * - Stripping @protected allows compatible contexts to work together
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createPreprocessingDocumentLoader = createPreprocessingDocumentLoader;
+exports.clearContextCache = clearContextCache;
+exports.prewarmContextCache = prewarmContextCache;
+// eslint-disable-next-line @typescript-eslint/ban-ts-comment
+// @ts-ignore
+const jsonld = __importStar(require("@digitalcredentials/jsonld"));
+// Cache for preprocessed contexts
+const processedContextCache = {};
+/**
+ * Recursively remove @protected from a context object
+ */
+function stripProtected(obj) {
+    if (obj === null || obj === undefined) {
+        return obj;
+    }
+    if (Array.isArray(obj)) {
+        return obj.map(stripProtected);
+    }
+    if (typeof obj === 'object') {
+        const result = {};
+        for (const [key, value] of Object.entries(obj)) {
+            // Skip @protected keys
+            if (key === '@protected') {
+                continue;
+            }
+            result[key] = stripProtected(value);
+        }
+        return result;
+    }
+    return obj;
+}
+/**
+ * Create a document loader that preprocesses contexts to remove @protected
+ */
+function createPreprocessingDocumentLoader() {
+    const jld = jsonld.default ?? jsonld;
+    const nodeDocumentLoader = jld.documentLoaders?.node?.();
+    return async (url) => {
+        // Check cache first
+        if (processedContextCache[url]) {
+            return {
+                contextUrl: null,
+                document: processedContextCache[url],
+                documentUrl: url,
+            };
+        }
+        // Fetch from network
+        if (nodeDocumentLoader) {
+            try {
+                const result = await nodeDocumentLoader(url);
+                if (result?.document) {
+                    // Strip @protected from the context
+                    const processed = stripProtected(result.document);
+                    processedContextCache[url] = processed;
+                    return {
+                        contextUrl: null,
+                        document: processed,
+                        documentUrl: url,
+                    };
+                }
+                return result;
+            }
+            catch (e) {
+                console.warn(`[ContextPreprocessor] Failed to fetch context: ${url}`, e?.message);
+            }
+        }
+        // Return empty context if fetch fails
+        return {
+            contextUrl: null,
+            document: { '@context': {} },
+            documentUrl: url,
+        };
+    };
+}
+/**
+ * Clear the processed context cache
+ */
+function clearContextCache() {
+    for (const key of Object.keys(processedContextCache)) {
+        delete processedContextCache[key];
+    }
+}
+/**
+ * Pre-warm the context cache by fetching common contexts
+ */
+async function prewarmContextCache(urls) {
+    const loader = createPreprocessingDocumentLoader();
+    await Promise.all(urls.map((url) => loader(url).catch(() => null)));
+}
+//# sourceMappingURL=contextPreprocessor.js.map

package/build/cryptosuites/contextPreprocessor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contextPreprocessor.js","sourceRoot":"","sources":["../../src/cryptosuites/contextPreprocessor.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;;;;;;;;;;;;;;;;;;;;;;;AAuCH,8EA2CC;AAKD,8CAIC;AAKD,kDAGC;AAjGD,6DAA6D;AAC7D,aAAa;AACb,mEAAoD;AAEpD,kCAAkC;AAClC,MAAM,qBAAqB,GAA2B,EAAE,CAAA;AAExD;;GAEG;AACH,SAAS,cAAc,CAAC,GAAY;IAClC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;IAChC,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,MAAM,GAA4B,EAAE,CAAA;QAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAA8B,CAAC,EAAE,CAAC;YAC1E,uBAAuB;YACvB,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;gBACzB,SAAQ;YACV,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;QACrC,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAED,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;GAEG;AACH,SAAgB,iCAAiC;IAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAA;IACpC,MAAM,kBAAkB,GAAG,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,EAAE,CAAA;IAExD,OAAO,KAAK,EAAE,GAAW,EAAE,EAAE;QAC3B,oBAAoB;QACpB,IAAI,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO;gBACL,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,qBAAqB,CAAC,GAAG,CAAC;gBACpC,WAAW,EAAE,GAAG;aACjB,CAAA;QACH,CAAC;QAED,qBAAqB;QACrB,IAAI,kBAAkB,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAA;gBAE5C,IAAI,MAAM,EAAE,QAAQ,EAAE,CAAC;oBACrB,oCAAoC;oBACpC,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;oBACjD,qBAAqB,CAAC,GAAG,CAAC,GAAG,SAAmB,CAAA;oBAEhD,OAAO;wBACL,UAAU,EAAE,IAAI;wBAChB,QAAQ,EAAE,SAAS;wBACnB,WAAW,EAAE,GAAG;qBACjB,CAAA;gBACH,CAAC;gBACD,OAAO,MAAM,CAAA;YACf,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,CAAC,IAAI,CAAC,kDAAkD,GAAG,EAAE,EAAG,CAAW,EAAE,OAAO,CAAC,CAAA;YAC9F,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,QAAQ,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;YAC5B,WAAW,EAAE,GAAG;SACjB,CAAA;IACH,CAAC,CAAA;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,iBAAiB;IAC/B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC;QACrD,OAAO,qBAAqB,CAAC,GAAG,CAAC,CAAA;IACnC,CAAC;AACH,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,mBAAmB,CAAC,IAAc;IACtD,MAAM,MAAM,GAAG,iCAAiC,EAAE,CAAA;IAClD,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACrE,CAAC"}

package/build/cryptosuites/dataIntegrityV2Context.d.ts

@@ -0,0 +1,144 @@
+/**
+ * Data Integrity v2 Context
+ * https://w3id.org/security/data-integrity/v2
+ *
+ * This context defines the DataIntegrityProof and related terms.
+ * Simplified without @protected to avoid conflicts when combining contexts.
+ */
+export declare const dataIntegrityV2Context: {
+    '@context': {
+        id: string;
+        type: string;
+        DataIntegrityProof: string;
+        challenge: string;
+        created: {
+            '@id': string;
+            '@type': string;
+        };
+        domain: string;
+        expires: {
+            '@id': string;
+            '@type': string;
+        };
+        nonce: string;
+        proofPurpose: {
+            '@id': string;
+            '@type': string;
+        };
+        assertionMethod: {
+            '@id': string;
+            '@type': string;
+        };
+        authentication: {
+            '@id': string;
+            '@type': string;
+        };
+        cryptosuite: {
+            '@id': string;
+            '@type': string;
+        };
+        proofValue: {
+            '@id': string;
+            '@type': string;
+        };
+        verificationMethod: {
+            '@id': string;
+            '@type': string;
+        };
+        previousProof: {
+            '@id': string;
+            '@type': string;
+        };
+        Multikey: string;
+        controller: {
+            '@id': string;
+            '@type': string;
+        };
+        revoked: {
+            '@id': string;
+            '@type': string;
+        };
+        publicKeyMultibase: {
+            '@id': string;
+            '@type': string;
+        };
+        secretKeyMultibase: {
+            '@id': string;
+            '@type': string;
+        };
+        proof: {
+            '@id': string;
+            '@type': string;
+            '@container': string;
+        };
+    };
+};
+declare const dataIntegrityContextMap: Map<string, {
+    '@context': {
+        id: string;
+        type: string;
+        DataIntegrityProof: string;
+        challenge: string;
+        created: {
+            '@id': string;
+            '@type': string;
+        };
+        domain: string;
+        expires: {
+            '@id': string;
+            '@type': string;
+        };
+        nonce: string;
+        proofPurpose: {
+            '@id': string;
+            '@type': string;
+        };
+        assertionMethod: {
+            '@id': string;
+            '@type': string;
+        };
+        authentication: {
+            '@id': string;
+            '@type': string;
+        };
+        cryptosuite: {
+            '@id': string;
+            '@type': string;
+        };
+        proofValue: {
+            '@id': string;
+            '@type': string;
+        };
+        verificationMethod: {
+            '@id': string;
+            '@type': string;
+        };
+        previousProof: {
+            '@id': string;
+            '@type': string;
+        };
+        Multikey: string;
+        controller: {
+            '@id': string;
+            '@type': string;
+        };
+        revoked: {
+            '@id': string;
+            '@type': string;
+        };
+        publicKeyMultibase: {
+            '@id': string;
+            '@type': string;
+        };
+        secretKeyMultibase: {
+            '@id': string;
+            '@type': string;
+        };
+        proof: {
+            '@id': string;
+            '@type': string;
+            '@container': string;
+        };
+    };
+}>;
+export { dataIntegrityContextMap };

package/build/cryptosuites/dataIntegrityV2Context.js

@@ -0,0 +1,86 @@
+"use strict";
+/**
+ * Data Integrity v2 Context
+ * https://w3id.org/security/data-integrity/v2
+ *
+ * This context defines the DataIntegrityProof and related terms.
+ * Simplified without @protected to avoid conflicts when combining contexts.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.dataIntegrityContextMap = exports.dataIntegrityV2Context = void 0;
+const constants_1 = require("./constants");
+exports.dataIntegrityV2Context = {
+    '@context': {
+        id: '@id',
+        type: '@type',
+        // Data Integrity Proof terms
+        DataIntegrityProof: 'https://w3id.org/security#DataIntegrityProof',
+        challenge: 'https://w3id.org/security#challenge',
+        created: {
+            '@id': 'http://purl.org/dc/terms/created',
+            '@type': 'http://www.w3.org/2001/XMLSchema#dateTime',
+        },
+        domain: 'https://w3id.org/security#domain',
+        expires: {
+            '@id': 'https://w3id.org/security#expiration',
+            '@type': 'http://www.w3.org/2001/XMLSchema#dateTime',
+        },
+        nonce: 'https://w3id.org/security#nonce',
+        proofPurpose: {
+            '@id': 'https://w3id.org/security#proofPurpose',
+            '@type': '@vocab',
+        },
+        assertionMethod: {
+            '@id': 'https://w3id.org/security#assertionMethod',
+            '@type': '@id',
+        },
+        authentication: {
+            '@id': 'https://w3id.org/security#authenticationMethod',
+            '@type': '@id',
+        },
+        cryptosuite: {
+            '@id': 'https://w3id.org/security#cryptosuite',
+            '@type': 'https://w3id.org/security#cryptosuiteString',
+        },
+        proofValue: {
+            '@id': 'https://w3id.org/security#proofValue',
+            '@type': 'https://w3id.org/security#multibase',
+        },
+        verificationMethod: {
+            '@id': 'https://w3id.org/security#verificationMethod',
+            '@type': '@id',
+        },
+        previousProof: {
+            '@id': 'https://w3id.org/security#previousProof',
+            '@type': '@id',
+        },
+        // Multikey terms
+        Multikey: 'https://w3id.org/security#Multikey',
+        controller: {
+            '@id': 'https://w3id.org/security#controller',
+            '@type': '@id',
+        },
+        revoked: {
+            '@id': 'https://w3id.org/security#revoked',
+            '@type': 'http://www.w3.org/2001/XMLSchema#dateTime',
+        },
+        publicKeyMultibase: {
+            '@id': 'https://w3id.org/security#publicKeyMultibase',
+            '@type': 'https://w3id.org/security#multibase',
+        },
+        secretKeyMultibase: {
+            '@id': 'https://w3id.org/security#secretKeyMultibase',
+            '@type': 'https://w3id.org/security#multibase',
+        },
+        // Common terms
+        proof: {
+            '@id': 'https://w3id.org/security#proof',
+            '@type': '@id',
+            '@container': '@graph',
+        },
+    },
+};
+const dataIntegrityContextMap = new Map();
+exports.dataIntegrityContextMap = dataIntegrityContextMap;
+dataIntegrityContextMap.set(constants_1.DATA_INTEGRITY_V2_CONTEXT_URL, exports.dataIntegrityV2Context);
+//# sourceMappingURL=dataIntegrityV2Context.js.map

package/build/cryptosuites/dataIntegrityV2Context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dataIntegrityV2Context.js","sourceRoot":"","sources":["../../src/cryptosuites/dataIntegrityV2Context.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AAEH,2CAA2D;AAE9C,QAAA,sBAAsB,GAAG;IACpC,UAAU,EAAE;QACV,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,OAAO;QAEb,6BAA6B;QAC7B,kBAAkB,EAAE,8CAA8C;QAClE,SAAS,EAAE,qCAAqC;QAChD,OAAO,EAAE;YACP,KAAK,EAAE,kCAAkC;YACzC,OAAO,EAAE,2CAA2C;SACrD;QACD,MAAM,EAAE,kCAAkC;QAC1C,OAAO,EAAE;YACP,KAAK,EAAE,sCAAsC;YAC7C,OAAO,EAAE,2CAA2C;SACrD;QACD,KAAK,EAAE,iCAAiC;QACxC,YAAY,EAAE;YACZ,KAAK,EAAE,wCAAwC;YAC/C,OAAO,EAAE,QAAQ;SAClB;QACD,eAAe,EAAE;YACf,KAAK,EAAE,2CAA2C;YAClD,OAAO,EAAE,KAAK;SACf;QACD,cAAc,EAAE;YACd,KAAK,EAAE,gDAAgD;YACvD,OAAO,EAAE,KAAK;SACf;QACD,WAAW,EAAE;YACX,KAAK,EAAE,uCAAuC;YAC9C,OAAO,EAAE,6CAA6C;SACvD;QACD,UAAU,EAAE;YACV,KAAK,EAAE,sCAAsC;YAC7C,OAAO,EAAE,qCAAqC;SAC/C;QACD,kBAAkB,EAAE;YAClB,KAAK,EAAE,8CAA8C;YACrD,OAAO,EAAE,KAAK;SACf;QACD,aAAa,EAAE;YACb,KAAK,EAAE,yCAAyC;YAChD,OAAO,EAAE,KAAK;SACf;QAED,iBAAiB;QACjB,QAAQ,EAAE,oCAAoC;QAC9C,UAAU,EAAE;YACV,KAAK,EAAE,sCAAsC;YAC7C,OAAO,EAAE,KAAK;SACf;QACD,OAAO,EAAE;YACP,KAAK,EAAE,mCAAmC;YAC1C,OAAO,EAAE,2CAA2C;SACrD;QACD,kBAAkB,EAAE;YAClB,KAAK,EAAE,8CAA8C;YACrD,OAAO,EAAE,qCAAqC;SAC/C;QACD,kBAAkB,EAAE;YAClB,KAAK,EAAE,8CAA8C;YACrD,OAAO,EAAE,qCAAqC;SAC/C;QAED,eAAe;QACf,KAAK,EAAE;YACL,KAAK,EAAE,iCAAiC;YACxC,OAAO,EAAE,KAAK;YACd,YAAY,EAAE,QAAQ;SACvB;KACF;CACF,CAAA;AAED,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAAyC,CAAA;AAGvE,0DAAuB;AAFhC,uBAAuB,CAAC,GAAG,CAAC,yCAA6B,EAAE,8BAAsB,CAAC,CAAA"}

package/build/cryptosuites/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * OpenBadges 3.0 Cryptosuites
+ *
+ * This module exports the cryptosuites required for OBv3 certification:
+ * - eddsa-rdfc-2022: Ed25519 with RDFC-1.0 canonicalization
+ * - ecdsa-sd-2023: ECDSA P-256 with selective disclosure support
+ */
+export * from './constants';
+export * from './dataIntegrityV2Context';
+export { EddsaRdfc2022Cryptosuite, type EddsaRdfc2022KeyPair, type EddsaRdfc2022Proof, type SignOptions as EddsaRdfc2022SignOptions, type VerifyOptions as EddsaRdfc2022VerifyOptions, } from './EddsaRdfc2022';
+export { EcdsaSd2023Cryptosuite, type EcdsaSd2023KeyPair, type EcdsaSd2023Proof, type SignOptions as EcdsaSd2023SignOptions, type DeriveOptions as EcdsaSd2023DeriveOptions, type VerifyOptions as EcdsaSd2023VerifyOptions, } from './EcdsaSd2023';

package/build/cryptosuites/index.js

@@ -0,0 +1,33 @@
+"use strict";
+/**
+ * OpenBadges 3.0 Cryptosuites
+ *
+ * This module exports the cryptosuites required for OBv3 certification:
+ * - eddsa-rdfc-2022: Ed25519 with RDFC-1.0 canonicalization
+ * - ecdsa-sd-2023: ECDSA P-256 with selective disclosure support
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EcdsaSd2023Cryptosuite = exports.EddsaRdfc2022Cryptosuite = void 0;
+__exportStar(require("./constants"), exports);
+__exportStar(require("./dataIntegrityV2Context"), exports);
+// Export EddsaRdfc2022 with namespaced types
+var EddsaRdfc2022_1 = require("./EddsaRdfc2022");
+Object.defineProperty(exports, "EddsaRdfc2022Cryptosuite", { enumerable: true, get: function () { return EddsaRdfc2022_1.EddsaRdfc2022Cryptosuite; } });
+// Export EcdsaSd2023 with namespaced types
+var EcdsaSd2023_1 = require("./EcdsaSd2023");
+Object.defineProperty(exports, "EcdsaSd2023Cryptosuite", { enumerable: true, get: function () { return EcdsaSd2023_1.EcdsaSd2023Cryptosuite; } });
+//# sourceMappingURL=index.js.map

package/build/cryptosuites/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cryptosuites/index.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;;;;;;;;;;;;;;AAEH,8CAA2B;AAC3B,2DAAwC;AAExC,6CAA6C;AAC7C,iDAMwB;AALtB,yHAAA,wBAAwB,OAAA;AAO1B,2CAA2C;AAC3C,6CAOsB;AANpB,qHAAA,sBAAsB,OAAA"}

package/build/http/OpenBadgesHttpModule.d.ts

@@ -0,0 +1,9 @@
+import type { AgentContext, DependencyManager, Module } from '@credo-ts/core';
+import { OpenBadgesHttpModuleConfig, type OpenBadgesHttpModuleConfigOptions } from './OpenBadgesHttpModuleConfig';
+export declare class OpenBadgesHttpModule implements Module {
+    readonly config: OpenBadgesHttpModuleConfig;
+    constructor(options: OpenBadgesHttpModuleConfigOptions);
+    register(dependencyManager: DependencyManager): void;
+    initialize(agentContext: AgentContext): Promise<void>;
+    private configureRouter;
+}

package/build/http/OpenBadgesHttpModule.js

@@ -0,0 +1,120 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpenBadgesHttpModule = void 0;
+const core_1 = require("@credo-ts/core");
+const router_1 = require("./router");
+const OpenBadgesHttpModuleConfig_1 = require("./OpenBadgesHttpModuleConfig");
+const serviceDescription_1 = require("./endpoints/serviceDescription");
+const jwks_1 = require("./endpoints/jwks");
+const registration_1 = require("./endpoints/registration");
+const authorize_1 = require("./endpoints/authorize");
+const token_1 = require("./endpoints/token");
+const revoke_1 = require("./endpoints/revoke");
+const introspect_1 = require("./endpoints/introspect");
+const did_1 = require("./endpoints/did");
+const profile_1 = require("./endpoints/profile");
+const credentials_1 = require("./endpoints/credentials");
+const statusList_1 = require("./endpoints/statusList");
+const refresh_1 = require("./endpoints/refresh");
+class OpenBadgesHttpModule {
+    constructor(options) {
+        this.config = new OpenBadgesHttpModuleConfig_1.OpenBadgesHttpModuleConfig(options);
+    }
+    register(dependencyManager) {
+        dependencyManager.resolve(core_1.AgentConfig).logger.info('[OB][HTTP] Registering OpenBadgesHttpModule');
+        // Expose the module instance via DI if needed in the future
+        dependencyManager.registerInstance(OpenBadgesHttpModule, this);
+    }
+    async initialize(agentContext) {
+        this.configureRouter(agentContext);
+    }
+    configureRouter(rootAgentContext) {
+        const { json, urlencoded, Router } = (0, router_1.importExpress)();
+        const contextRouter = this.config.router;
+        const endpointRouter = this.config.useTenantRouting ? Router() : contextRouter;
+        // parse application/x-www-form-urlencoded & json
+        contextRouter.use(urlencoded({ extended: false }));
+        contextRouter.use(json());
+        if (this.config.useTenantRouting) {
+            contextRouter.param(this.config.actorParamName, async (req, res, next, actorId) => {
+                if (!actorId)
+                    return res.status(404).send('Not found');
+                try {
+                    const { getAgentContextForActorId } = await Promise.resolve().then(() => __importStar(require('./tenants')));
+                    const agentContext = await getAgentContextForActorId(rootAgentContext, actorId);
+                    req.requestContext = { agentContext };
+                    next();
+                }
+                catch (e) {
+                    await rootAgentContext.endSession();
+                    return res.status(404).send('Not found');
+                }
+            });
+            contextRouter.use(`/:${this.config.actorParamName}`, endpointRouter);
+        }
+        else {
+            // Attach request context for single-tenant
+            contextRouter.use((0, router_1.setRequestContext)(rootAgentContext));
+        }
+        // Endpoints
+        (0, serviceDescription_1.configureServiceDescriptionEndpoint)(endpointRouter, this.config);
+        (0, jwks_1.configureJwksEndpoint)(endpointRouter, this.config);
+        (0, did_1.configureDidDocumentEndpoint)(endpointRouter, this.config);
+        (0, registration_1.configureRegistrationEndpoint)(endpointRouter, this.config);
+        (0, authorize_1.configureAuthorizeEndpoint)(endpointRouter, this);
+        (0, token_1.configureTokenEndpoint)(endpointRouter, this);
+        (0, revoke_1.configureRevokeEndpoint)(endpointRouter, this);
+        (0, introspect_1.configureIntrospectEndpoint)(endpointRouter, this);
+        // Consent endpoint for dev/simple flows
+        const { configureConsentEndpoint } = require('./endpoints/consent');
+        configureConsentEndpoint(endpointRouter, this);
+        (0, profile_1.configureProfileEndpoints)(endpointRouter, this.config, this);
+        (0, credentials_1.configureCredentialsEndpoints)(endpointRouter, this.config, this);
+        (0, statusList_1.configureStatusListEndpoint)(endpointRouter, this.config, this);
+        (0, refresh_1.configureRefreshEndpoint)(endpointRouter, this.config, this);
+        // End session middleware for tenant contexts
+        contextRouter.use(async (req, _res, next) => {
+            const agentContext = req.requestContext?.agentContext;
+            if (agentContext && agentContext !== rootAgentContext) {
+                await agentContext.endSession().catch(() => { });
+            }
+            next();
+        });
+        // Error fallthrough safeguard
+        contextRouter.use(async (err, req, res, next) => {
+            if (!res.headersSent) {
+                res.status(500).json({ error: 'server_error', error_description: 'Unexpected error' });
+            }
+            const agentContext = req.requestContext?.agentContext;
+            if (agentContext && agentContext !== rootAgentContext) {
+                await agentContext.endSession().catch(() => { });
+            }
+            next(err);
+        });
+    }
+}
+exports.OpenBadgesHttpModule = OpenBadgesHttpModule;
+//# sourceMappingURL=OpenBadgesHttpModule.js.map

package/build/http/OpenBadgesHttpModule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OpenBadgesHttpModule.js","sourceRoot":"","sources":["../../src/http/OpenBadgesHttpModule.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAGA,yCAA4C;AAC5C,qCAA2D;AAC3D,6EAAiH;AACjH,uEAAoF;AACpF,2CAAwD;AACxD,2DAAwE;AACxE,qDAAkE;AAClE,6CAA0D;AAC1D,+CAA4D;AAC5D,uDAAoE;AACpE,yCAA8D;AAC9D,iDAA+D;AAC/D,yDAAuE;AACvE,uDAAoE;AACpE,iDAA8D;AAE9D,MAAa,oBAAoB;IAG/B,YAAmB,OAA0C;QAC3D,IAAI,CAAC,MAAM,GAAG,IAAI,uDAA0B,CAAC,OAAO,CAAC,CAAA;IACvD,CAAC;IAEM,QAAQ,CAAC,iBAAoC;QAClD,iBAAiB,CAAC,OAAO,CAAC,kBAAW,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAA;QACjG,4DAA4D;QAC5D,iBAAiB,CAAC,gBAAgB,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAA;IAChE,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,YAA0B;QAChD,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,CAAA;IACpC,CAAC;IAEO,eAAe,CAAC,gBAA8B;QACpD,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,IAAA,sBAAa,GAAE,CAAA;QACpD,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAA;QACxC,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,aAAa,CAAA;QAE9E,iDAAiD;QACjD,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAA;QAClD,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;QAEzB,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACjC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,EAAE,GAAY,EAAE,GAAG,EAAE,IAAI,EAAE,OAAe,EAAE,EAAE;gBACjG,IAAI,CAAC,OAAO;oBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;gBACtD,IAAI,CAAC;oBACH,MAAM,EAAE,yBAAyB,EAAE,GAAG,wDAAa,WAAW,GAAC,CAAA;oBAC/D,MAAM,YAAY,GAAG,MAAM,yBAAyB,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAC9E;oBAAC,GAAW,CAAC,cAAc,GAAG,EAAE,YAAY,EAAE,CAAA;oBAC/C,IAAI,EAAE,CAAA;gBACR,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,MAAM,gBAAgB,CAAC,UAAU,EAAE,CAAA;oBACnC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;gBAC1C,CAAC;YACH,CAAC,CAAC,CAAA;YACF,aAAa,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,cAAc,CAAC,CAAA;QACtE,CAAC;aAAM,CAAC;YACN,2CAA2C;YAC3C,aAAa,CAAC,GAAG,CAAC,IAAA,0BAAiB,EAAC,gBAAgB,CAAC,CAAC,CAAA;QACxD,CAAC;QAED,YAAY;QACZ,IAAA,wDAAmC,EAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QAChE,IAAA,4BAAqB,EAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QAClD,IAAA,kCAA4B,EAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QACzD,IAAA,4CAA6B,EAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;QAC1D,IAAA,sCAA0B,EAAC,cAAmC,EAAE,IAAI,CAAC,CAAA;QACrE,IAAA,8BAAsB,EAAC,cAAmC,EAAE,IAAI,CAAC,CAAA;QACjE,IAAA,gCAAuB,EAAC,cAAmC,EAAE,IAAI,CAAC,CAAA;QAClE,IAAA,wCAA2B,EAAC,cAAmC,EAAE,IAAI,CAAC,CAAA;QACtE,wCAAwC;QACxC,MAAM,EAAE,wBAAwB,EAAE,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAA;QACnE,wBAAwB,CAAC,cAAmC,EAAE,IAAI,CAAC,CAAA;QACnE,IAAA,mCAAyB,EAAC,cAAmC,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QACjF,IAAA,2CAA6B,EAAC,cAAmC,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QACrF,IAAA,wCAA2B,EAAC,cAAmC,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QACnF,IAAA,kCAAwB,EAAC,cAAmC,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QAEhF,6CAA6C;QAC7C,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,GAAY,EAAE,IAAc,EAAE,IAAkB,EAAE,EAAE;YAC3E,MAAM,YAAY,GAAI,GAAW,CAAC,cAAc,EAAE,YAAY,CAAA;YAC9D,IAAI,YAAY,IAAI,YAAY,KAAK,gBAAgB,EAAE,CAAC;gBACtD,MAAM,YAAY,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YACjD,CAAC;YACD,IAAI,EAAE,CAAA;QACR,CAAC,CAAC,CAAA;QAEF,8BAA8B;QAC9B,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,GAAY,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YACxF,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,CAAC,CAAA;YACxF,CAAC;YACD,MAAM,YAAY,GAAI,GAAW,CAAC,cAAc,EAAE,YAAY,CAAA;YAC9D,IAAI,YAAY,IAAI,YAAY,KAAK,gBAAgB,EAAE,CAAC;gBACtD,MAAM,YAAY,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YACjD,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,CAAA;QACX,CAAC,CAAC,CAAA;IACJ,CAAC;CACF;AAnFD,oDAmFC"}

package/build/http/OpenBadgesHttpModuleConfig.d.ts

@@ -0,0 +1,55 @@
+import type { Router } from 'express';
+export type OpenBadgesHttpModuleConfigOptions = {
+    baseUrl: string;
+    router?: Router;
+    defaultSubjectId?: string;
+    providerName?: string;
+    privacyPolicyUrl?: string;
+    termsOfServiceUrl?: string;
+    requireConsent?: boolean;
+    useTenantRouting?: boolean;
+    actorParamName?: string;
+    didWebId?: string;
+    endpoints?: {
+        discovery?: string;
+        jwks?: string;
+        didDocument?: string;
+        registration?: string;
+        authorize?: string;
+        token?: string;
+        revoke?: string;
+        introspect?: string;
+        consent?: string;
+        profile?: string;
+        credentials?: string;
+        statusList?: string;
+        refresh?: string;
+    };
+};
+export declare class OpenBadgesHttpModuleConfig {
+    private readonly options;
+    readonly router: Router;
+    constructor(options: OpenBadgesHttpModuleConfigOptions);
+    get baseUrl(): string;
+    get defaultSubjectId(): string | undefined;
+    get discoveryPath(): string;
+    get jwksPath(): string;
+    get didDocumentPath(): string;
+    get registrationPath(): string;
+    get authorizePath(): string;
+    get tokenPath(): string;
+    get revokePath(): string;
+    get introspectPath(): string;
+    get profilePath(): string;
+    get credentialsPath(): string;
+    get providerName(): string | undefined;
+    get privacyPolicyUrl(): string | undefined;
+    get termsOfServiceUrl(): string | undefined;
+    get requireConsent(): boolean;
+    get useTenantRouting(): boolean;
+    get actorParamName(): string;
+    get didWebId(): string | undefined;
+    get consentPath(): string;
+    get statusListPath(): string;
+    get refreshPath(): string;
+}