@awiki/anp-typescript-sdk 0.2.0 → 0.9.4

package/dist/index.d.cts

@@ -11,6 +11,9 @@ declare class AuthenticationError extends ANPError {
 declare class ProofError extends ANPError {
     constructor(message: string, cause?: Error);
 }
+declare class DeviceManifestError extends AuthenticationError {
+    constructor(message: string, cause?: Error);
+}
 declare class NetworkError extends ANPError {
     readonly statusCode?: number | undefined;
     constructor(message: string, statusCode?: number | undefined, cause?: Error);
@@ -121,6 +124,15 @@ interface DidDocument {
     keyAgreement?: Array<string | VerificationMethodRecord>;
     service?: ServiceRecord[];
     proof?: ProofRecord;
+    deviceManifest?: {
+        type: string;
+        devices: Array<{
+            device_id: string;
+            signing_key_id: string;
+            e2ee_key_id: string;
+            profiles: string[];
+        }>;
+    };
 }
 interface DidDocumentOptions {
     port?: number;
@@ -300,6 +312,80 @@ declare class DidWbaVerifier {
 
 declare function verifyFederatedHttpRequest(senderDid: string, requestMethod: string, requestUrl: string, headers: Record<string, string>, body?: Uint8Array | string, options?: FederatedVerificationOptions): Promise<FederatedVerificationResult>;
 
+declare const DEVICE_MANIFEST_TYPE = "ANPDeviceManifest";
+declare const PROFILE_CORE_BINDING_V1 = "anp.core.binding.v1";
+declare const PROFILE_IDENTITY_DISCOVERY_V1 = "anp.identity.discovery.v1";
+declare const PROFILE_DIRECT_BASE_V1 = "anp.direct.base.v1";
+declare const PROFILE_GROUP_BASE_V1 = "anp.group.base.v1";
+declare const PROFILE_DIRECT_E2EE_V2 = "anp.direct.e2ee.v2";
+declare const PROFILE_GROUP_E2EE_V2 = "anp.group.e2ee.v2";
+declare const PROFILE_CORE_BINDING_V2 = "anp.core.binding.v2";
+declare const PROFILE_IDENTITY_DISCOVERY_V2 = "anp.identity.discovery.v2";
+declare const PROFILE_DIRECT_BASE_V2 = "anp.direct.base.v2";
+declare const PROFILE_GROUP_BASE_V2 = "anp.group.base.v2";
+type ManifestDidDocument = Record<string, unknown>;
+interface DeviceManifestEntryWire {
+    device_id: string;
+    signing_key_id: string;
+    e2ee_key_id: string;
+    profiles: string[];
+}
+interface DeviceManifestWire {
+    type: string;
+    devices: DeviceManifestEntryWire[];
+}
+declare class DeviceManifestEntry {
+    readonly deviceId: string;
+    readonly signingKeyId: string;
+    readonly e2eeKeyId: string;
+    readonly profiles: readonly string[];
+    constructor(deviceId: string, signingKeyId: string, e2eeKeyId: string, profiles: readonly string[]);
+    static fromWire(value: DeviceManifestEntryWire): DeviceManifestEntry;
+    toDict(): DeviceManifestEntryWire;
+}
+declare class DeviceManifest {
+    readonly type: string;
+    readonly devices: readonly DeviceManifestEntry[];
+    constructor(type: string, devices: readonly DeviceManifestEntry[]);
+    toDict(): DeviceManifestWire;
+}
+declare function parseDeviceManifest(didDocument: ManifestDidDocument): DeviceManifest | null;
+declare function validateDeviceManifest(didDocument: ManifestDidDocument): DeviceManifest | null;
+declare function findEligibleDevice(didDocument: ManifestDidDocument, deviceId: string, requiredProfile: string): DeviceManifestEntry | null;
+declare function buildVnextDidDocument(baseDocument: ManifestDidDocument, rootKeyId: string, rootVerificationMethod: Record<string, unknown>, device: DeviceManifestEntry, deviceSigningVerificationMethod: Record<string, unknown>, deviceE2eeVerificationMethod: Record<string, unknown>): ManifestDidDocument;
+declare function addDeviceToDidDocument(didDocument: ManifestDidDocument, rootKeyId: string, device: DeviceManifestEntry, deviceSigningVerificationMethod: Record<string, unknown>, deviceE2eeVerificationMethod: Record<string, unknown>, retiredDeviceIds: Iterable<string>): ManifestDidDocument;
+declare function updateDeviceInDidDocument(didDocument: ManifestDidDocument, rootKeyId: string, device: DeviceManifestEntry, deviceSigningVerificationMethod: Record<string, unknown>, deviceE2eeVerificationMethod: Record<string, unknown>): ManifestDidDocument;
+declare function removeDeviceFromDidDocument(didDocument: ManifestDidDocument, rootKeyId: string, deviceId: string): ManifestDidDocument;
+
+declare const deviceManifest_DEVICE_MANIFEST_TYPE: typeof DEVICE_MANIFEST_TYPE;
+type deviceManifest_DeviceManifest = DeviceManifest;
+declare const deviceManifest_DeviceManifest: typeof DeviceManifest;
+type deviceManifest_DeviceManifestEntry = DeviceManifestEntry;
+declare const deviceManifest_DeviceManifestEntry: typeof DeviceManifestEntry;
+type deviceManifest_DeviceManifestEntryWire = DeviceManifestEntryWire;
+type deviceManifest_DeviceManifestWire = DeviceManifestWire;
+type deviceManifest_ManifestDidDocument = ManifestDidDocument;
+declare const deviceManifest_PROFILE_CORE_BINDING_V1: typeof PROFILE_CORE_BINDING_V1;
+declare const deviceManifest_PROFILE_CORE_BINDING_V2: typeof PROFILE_CORE_BINDING_V2;
+declare const deviceManifest_PROFILE_DIRECT_BASE_V1: typeof PROFILE_DIRECT_BASE_V1;
+declare const deviceManifest_PROFILE_DIRECT_BASE_V2: typeof PROFILE_DIRECT_BASE_V2;
+declare const deviceManifest_PROFILE_DIRECT_E2EE_V2: typeof PROFILE_DIRECT_E2EE_V2;
+declare const deviceManifest_PROFILE_GROUP_BASE_V1: typeof PROFILE_GROUP_BASE_V1;
+declare const deviceManifest_PROFILE_GROUP_BASE_V2: typeof PROFILE_GROUP_BASE_V2;
+declare const deviceManifest_PROFILE_GROUP_E2EE_V2: typeof PROFILE_GROUP_E2EE_V2;
+declare const deviceManifest_PROFILE_IDENTITY_DISCOVERY_V1: typeof PROFILE_IDENTITY_DISCOVERY_V1;
+declare const deviceManifest_PROFILE_IDENTITY_DISCOVERY_V2: typeof PROFILE_IDENTITY_DISCOVERY_V2;
+declare const deviceManifest_addDeviceToDidDocument: typeof addDeviceToDidDocument;
+declare const deviceManifest_buildVnextDidDocument: typeof buildVnextDidDocument;
+declare const deviceManifest_findEligibleDevice: typeof findEligibleDevice;
+declare const deviceManifest_parseDeviceManifest: typeof parseDeviceManifest;
+declare const deviceManifest_removeDeviceFromDidDocument: typeof removeDeviceFromDidDocument;
+declare const deviceManifest_updateDeviceInDidDocument: typeof updateDeviceInDidDocument;
+declare const deviceManifest_validateDeviceManifest: typeof validateDeviceManifest;
+declare namespace deviceManifest {
+  export { deviceManifest_DEVICE_MANIFEST_TYPE as DEVICE_MANIFEST_TYPE, deviceManifest_DeviceManifest as DeviceManifest, deviceManifest_DeviceManifestEntry as DeviceManifestEntry, type deviceManifest_DeviceManifestEntryWire as DeviceManifestEntryWire, type deviceManifest_DeviceManifestWire as DeviceManifestWire, type deviceManifest_ManifestDidDocument as ManifestDidDocument, deviceManifest_PROFILE_CORE_BINDING_V1 as PROFILE_CORE_BINDING_V1, deviceManifest_PROFILE_CORE_BINDING_V2 as PROFILE_CORE_BINDING_V2, deviceManifest_PROFILE_DIRECT_BASE_V1 as PROFILE_DIRECT_BASE_V1, deviceManifest_PROFILE_DIRECT_BASE_V2 as PROFILE_DIRECT_BASE_V2, deviceManifest_PROFILE_DIRECT_E2EE_V2 as PROFILE_DIRECT_E2EE_V2, deviceManifest_PROFILE_GROUP_BASE_V1 as PROFILE_GROUP_BASE_V1, deviceManifest_PROFILE_GROUP_BASE_V2 as PROFILE_GROUP_BASE_V2, deviceManifest_PROFILE_GROUP_E2EE_V2 as PROFILE_GROUP_E2EE_V2, deviceManifest_PROFILE_IDENTITY_DISCOVERY_V1 as PROFILE_IDENTITY_DISCOVERY_V1, deviceManifest_PROFILE_IDENTITY_DISCOVERY_V2 as PROFILE_IDENTITY_DISCOVERY_V2, deviceManifest_addDeviceToDidDocument as addDeviceToDidDocument, deviceManifest_buildVnextDidDocument as buildVnextDidDocument, deviceManifest_findEligibleDevice as findEligibleDevice, deviceManifest_parseDeviceManifest as parseDeviceManifest, deviceManifest_removeDeviceFromDidDocument as removeDeviceFromDidDocument, deviceManifest_updateDeviceInDidDocument as updateDeviceInDidDocument, deviceManifest_validateDeviceManifest as validateDeviceManifest };
+}
+
 declare const didDocuments: {
     ANP_MESSAGE_SERVICE_TYPE: string;
     buildAnpMessageService: typeof buildAnpMessageService;
@@ -351,6 +437,7 @@ declare const authentication: {
         verifyMessage: typeof verifyHttpMessageSignature;
         parseMetadata: typeof extractSignatureMetadata;
     };
+    deviceManifest: typeof deviceManifest;
     federation: {
         verifyRequest: typeof verifyFederatedHttpRequest;
     };
@@ -459,11 +546,70 @@ declare namespace imProof {
   export { imProof_IM_PROOF_DEFAULT_COMPONENTS as IM_PROOF_DEFAULT_COMPONENTS, imProof_IM_PROOF_RELATION_ASSERTION_METHOD as IM_PROOF_RELATION_ASSERTION_METHOD, imProof_IM_PROOF_RELATION_AUTHENTICATION as IM_PROOF_RELATION_AUTHENTICATION, type imProof_ImProof as ImProof, type imProof_ImProofGenerationOptions as ImProofGenerationOptions, type imProof_ImProofVerificationRelationship as ImProofVerificationRelationship, type imProof_ImProofVerificationResult as ImProofVerificationResult, type imProof_ImProofVerificationTarget as ImProofVerificationTarget, type imProof_ParsedImSignatureInput as ParsedImSignatureInput, imProof_buildImContentDigest as buildImContentDigest, imProof_buildImSignatureInput as buildImSignatureInput, imProof_decodeImSignature as decodeImSignature, imProof_encodeImSignature as encodeImSignature, imProof_generateImProof as generateImProof, imProof_parseImSignatureInput as parseImSignatureInput, imProof_verifyImContentDigest as verifyImContentDigest, imProof_verifyImProof as verifyImProof };
 }
 
+declare const RFC9421_ORIGIN_PROOF_DEFAULT_LABEL = "sig1";
+declare const RFC9421_ORIGIN_PROOF_DEFAULT_COMPONENTS: readonly ["@method", "@target-uri", "content-digest"];
+declare const TARGET_KIND_AGENT = "agent";
+declare const TARGET_KIND_GROUP = "group";
+declare const TARGET_KIND_SERVICE = "service";
+declare class Rfc9421OriginProofError extends ProofError {
+    constructor(message: string, cause?: Error);
+}
+interface SignedRequestObject {
+    method: string;
+    meta: JsonObject;
+    body: JsonObject;
+}
+type Rfc9421OriginProof = ImProof;
+interface Rfc9421OriginProofGenerationOptions {
+    created?: number;
+    expires?: number;
+    nonce?: string;
+    label?: string;
+}
+interface Rfc9421OriginProofVerificationOptions {
+    expectedSignerDid?: string;
+}
+declare function buildSignedRequestObject(method: string, meta: Record<string, unknown>, body: Record<string, unknown>): SignedRequestObject;
+declare function canonicalizeSignedRequestObject(signedRequestObject: SignedRequestObject | Record<string, unknown>): Uint8Array;
+declare function buildLogicalTargetUri(targetKind: string, targetDid: string): string;
+declare function buildRfc9421OriginSignatureBase(method: string, logicalTargetUri: string, contentDigest: string, signatureInput: string): Uint8Array;
+declare function generateRfc9421OriginProof(method: string, meta: Record<string, unknown>, body: Record<string, unknown>, privateKey: PrivateKeyInput, keyId: string, options?: Rfc9421OriginProofGenerationOptions): Rfc9421OriginProof;
+declare function verifyRfc9421OriginProof(originProof: Rfc9421OriginProof, method: string, meta: Record<string, unknown>, body: Record<string, unknown>, verification?: {
+    didDocument?: DidDocument;
+    verificationMethod?: VerificationMethodRecord;
+    options?: Rfc9421OriginProofVerificationOptions;
+}): ImProofVerificationResult;
+/** Percent-encode like Python urllib.parse.quote(..., safe="-._~"). */
+declare function quoteRfc3986Unreserved(value: string): string;
+
+declare const rfc9421Origin_RFC9421_ORIGIN_PROOF_DEFAULT_COMPONENTS: typeof RFC9421_ORIGIN_PROOF_DEFAULT_COMPONENTS;
+declare const rfc9421Origin_RFC9421_ORIGIN_PROOF_DEFAULT_LABEL: typeof RFC9421_ORIGIN_PROOF_DEFAULT_LABEL;
+type rfc9421Origin_Rfc9421OriginProof = Rfc9421OriginProof;
+type rfc9421Origin_Rfc9421OriginProofError = Rfc9421OriginProofError;
+declare const rfc9421Origin_Rfc9421OriginProofError: typeof Rfc9421OriginProofError;
+type rfc9421Origin_Rfc9421OriginProofGenerationOptions = Rfc9421OriginProofGenerationOptions;
+type rfc9421Origin_Rfc9421OriginProofVerificationOptions = Rfc9421OriginProofVerificationOptions;
+type rfc9421Origin_SignedRequestObject = SignedRequestObject;
+declare const rfc9421Origin_TARGET_KIND_AGENT: typeof TARGET_KIND_AGENT;
+declare const rfc9421Origin_TARGET_KIND_GROUP: typeof TARGET_KIND_GROUP;
+declare const rfc9421Origin_TARGET_KIND_SERVICE: typeof TARGET_KIND_SERVICE;
+declare const rfc9421Origin_buildLogicalTargetUri: typeof buildLogicalTargetUri;
+declare const rfc9421Origin_buildRfc9421OriginSignatureBase: typeof buildRfc9421OriginSignatureBase;
+declare const rfc9421Origin_buildSignedRequestObject: typeof buildSignedRequestObject;
+declare const rfc9421Origin_canonicalizeSignedRequestObject: typeof canonicalizeSignedRequestObject;
+declare const rfc9421Origin_generateRfc9421OriginProof: typeof generateRfc9421OriginProof;
+declare const rfc9421Origin_quoteRfc3986Unreserved: typeof quoteRfc3986Unreserved;
+declare const rfc9421Origin_verifyRfc9421OriginProof: typeof verifyRfc9421OriginProof;
+declare namespace rfc9421Origin {
+  export { rfc9421Origin_RFC9421_ORIGIN_PROOF_DEFAULT_COMPONENTS as RFC9421_ORIGIN_PROOF_DEFAULT_COMPONENTS, rfc9421Origin_RFC9421_ORIGIN_PROOF_DEFAULT_LABEL as RFC9421_ORIGIN_PROOF_DEFAULT_LABEL, type rfc9421Origin_Rfc9421OriginProof as Rfc9421OriginProof, rfc9421Origin_Rfc9421OriginProofError as Rfc9421OriginProofError, type rfc9421Origin_Rfc9421OriginProofGenerationOptions as Rfc9421OriginProofGenerationOptions, type rfc9421Origin_Rfc9421OriginProofVerificationOptions as Rfc9421OriginProofVerificationOptions, type rfc9421Origin_SignedRequestObject as SignedRequestObject, rfc9421Origin_TARGET_KIND_AGENT as TARGET_KIND_AGENT, rfc9421Origin_TARGET_KIND_GROUP as TARGET_KIND_GROUP, rfc9421Origin_TARGET_KIND_SERVICE as TARGET_KIND_SERVICE, rfc9421Origin_buildLogicalTargetUri as buildLogicalTargetUri, rfc9421Origin_buildRfc9421OriginSignatureBase as buildRfc9421OriginSignatureBase, rfc9421Origin_buildSignedRequestObject as buildSignedRequestObject, rfc9421Origin_canonicalizeSignedRequestObject as canonicalizeSignedRequestObject, rfc9421Origin_generateRfc9421OriginProof as generateRfc9421OriginProof, rfc9421Origin_quoteRfc3986Unreserved as quoteRfc3986Unreserved, rfc9421Origin_verifyRfc9421OriginProof as verifyRfc9421OriginProof };
+}
+
 declare const proof: {
     create: typeof generateW3cProof;
     verify: typeof verifyW3cProof;
     verifyDetailed: typeof verifyW3cProofDetailed;
     im: typeof imProof;
+    rfc9421: typeof rfc9421Origin;
 };
 
 type BindingGeneration = string & {
@@ -787,4 +933,4 @@ declare class AwikiImError extends Error {
     });
 }
 
-export { ANPError, ANP_HANDLE_SERVICE_TYPE, ANP_MESSAGE_SERVICE_TYPE, type AnpMessageServiceOptions, AuthMode, AuthenticationError, type AwikiAttachment, type AwikiAttachmentContent, type AwikiAttachmentId, type AwikiConversation, type AwikiConversationId, type AwikiCursor, type AwikiDid, type AwikiDirectConversation, type AwikiDirectTarget, type AwikiGroupConversation, type AwikiGroupTarget, type AwikiHandle, type AwikiIdentity, type AwikiImClient, type AwikiImClientOptions, AwikiImError, type AwikiImErrorCode, type AwikiImId, type AwikiMessage, type AwikiMessageContent, type AwikiMessageId, type AwikiMessageTarget, type AwikiPage, type AwikiPageRequest, type AwikiTextContent, type AwikiUpload, type BindingGeneration, type BindingVerificationOptions, type BindingVerificationResult, CRYPTOSUITE_DIDWBA_SECP256K1_2025, CRYPTOSUITE_EDDSA_JCS_2022, CryptoError, type DIDSubjectProfile, DIDWbaAuthHeader, DIDWbaAuthHeader as DidAuthHeaders, type DidDocument, type DidDocumentBundle, type DidDocumentOptions, DidProfile, type DidResolutionOptions, type DidResolver, DidWbaVerifier, type DidWbaVerifierConfig, DidWbaVerifierError, type DownloadAwikiAttachmentRequest, type DownloadedAwikiAttachment, type FederatedVerificationOptions, type FederatedVerificationResult, type GetAwikiHistoryRequest, HandleBindingError, HandleGoneError, HandleMovedError, HandleNotFoundError, type HandleResolutionDocument, HandleResolutionError, type HandleServiceEntry, HandleStatus, HandleValidationError, type HttpSignatureOptions, IM_PROOF_DEFAULT_COMPONENTS, IM_PROOF_RELATION_ASSERTION_METHOD, IM_PROOF_RELATION_AUTHENTICATION, type ImProof, type ImProofGenerationOptions, type ImProofVerificationRelationship, type ImProofVerificationResult, type ImProofVerificationTarget, type LegacyAuthOptions, NetworkError, PROOF_TYPE_DATA_INTEGRITY, PROOF_TYPE_ED25519, PROOF_TYPE_SECP256K1, type ParsedAuthHeader, type ParsedImSignatureInput, type ParsedWbaUri, ProofError, type ProofGenerationOptions, type ProofObject, type ProofRecord, type ProofVerificationOptions, type RegisterIdentityRequest, DidWbaVerifier as RequestVerifier, DidWbaVerifierError as RequestVerifierError, type ResolveHandleOptions, type SendAwikiAttachmentRequest, type SendAwikiTextRequest, type SendRegistrationOtpRequest, type SendRegistrationOtpResult, type ServiceRecord, type SignatureMetadata, SubjectType, VM_KEY_AUTH, VM_KEY_E2EE_AGREEMENT, VM_KEY_E2EE_SIGNING, VerificationMethod, type VerificationMethodRecord, type VerificationSuccess, WbaUriParseError, WnsError, authentication, buildAgentMessageService, buildAnpMessageService, buildContentDigest, buildGroupMessageService, buildHandleServiceEntry, buildImContentDigest, buildImSignatureInput, buildResolutionUrl, buildWbaUri as buildUri, buildWbaUri, canonicalizeBindingGeneration, compareBindingGenerations, computeJwkFingerprint, computeMultikeyFingerprint, createAwikiImClient, createDidWbaDocument as createDidDocument, createDidWbaDocumentWithKeyBinding as createDidDocumentWithKeyBinding, createDidWbaDocument, createDidWbaDocumentWithKeyBinding, buildHandleServiceEntry as createHandleServiceEntry, generateAuthHeader as createLegacyAuthHeader, generateAuthJson as createLegacyAuthPayload, generateW3cProof as createProof, generateHttpSignatureHeaders as createSignatureHeaders, createVerificationMethod, decodeImSignature, didDocuments, encodeImSignature, extractAuthHeaderParts, extractHandleServiceFromDidDocument, extractHandleServiceFromDidDocument as extractHandleServices, extractPublicKey, extractSignatureMetadata, findVerificationMethod, generateAuthHeader, generateAuthJson, generateHttpSignatureHeaders, generateImProof, generateW3cProof, httpSignatures, isAssertionMethodAuthorized, isAuthenticationAuthorized, legacyAuth, normalizeHandle, parseImSignatureInput, extractAuthHeaderParts as parseLegacyAuthHeader, extractSignatureMetadata as parseSignatureMetadata, parseWbaUri as parseUri, parseWbaUri, proof, resolveDidDocument, resolveDidWbaDocument, resolveHandle, resolveHandleFromUri, resolveHandleFromUri as resolveUri, validateDidDocumentBinding as validateDidBinding, validateDidDocumentBinding, validateHandle, validateLocalPart, verifyAuthHeaderSignature, verifyAuthJsonSignature, verifyHandleBinding as verifyBinding, verifyContentDigest, verifyDidKeyBinding as verifyDidBinding, verifyDidKeyBinding, verifyFederatedHttpRequest, verifyHandleBinding, verifyHttpMessageSignature, verifyImContentDigest, verifyImProof, verifyAuthHeaderSignature as verifyLegacyAuthHeader, verifyAuthJsonSignature as verifyLegacyAuthPayload, verifyW3cProof as verifyProof, verifyW3cProofDetailed as verifyProofDetailed, verifyHttpMessageSignature as verifySignatureHeaders, verifyW3cProof, verifyW3cProofDetailed, wns };
+export { ANPError, ANP_HANDLE_SERVICE_TYPE, ANP_MESSAGE_SERVICE_TYPE, type AnpMessageServiceOptions, AuthMode, AuthenticationError, type AwikiAttachment, type AwikiAttachmentContent, type AwikiAttachmentId, type AwikiConversation, type AwikiConversationId, type AwikiCursor, type AwikiDid, type AwikiDirectConversation, type AwikiDirectTarget, type AwikiGroupConversation, type AwikiGroupTarget, type AwikiHandle, type AwikiIdentity, type AwikiImClient, type AwikiImClientOptions, AwikiImError, type AwikiImErrorCode, type AwikiImId, type AwikiMessage, type AwikiMessageContent, type AwikiMessageId, type AwikiMessageTarget, type AwikiPage, type AwikiPageRequest, type AwikiTextContent, type AwikiUpload, type BindingGeneration, type BindingVerificationOptions, type BindingVerificationResult, CRYPTOSUITE_DIDWBA_SECP256K1_2025, CRYPTOSUITE_EDDSA_JCS_2022, CryptoError, DEVICE_MANIFEST_TYPE, type DIDSubjectProfile, DIDWbaAuthHeader, DeviceManifest, DeviceManifestEntry, type DeviceManifestEntryWire, DeviceManifestError, type DeviceManifestWire, DIDWbaAuthHeader as DidAuthHeaders, type DidDocument, type DidDocumentBundle, type DidDocumentOptions, DidProfile, type DidResolutionOptions, type DidResolver, DidWbaVerifier, type DidWbaVerifierConfig, DidWbaVerifierError, type DownloadAwikiAttachmentRequest, type DownloadedAwikiAttachment, type FederatedVerificationOptions, type FederatedVerificationResult, type GetAwikiHistoryRequest, HandleBindingError, HandleGoneError, HandleMovedError, HandleNotFoundError, type HandleResolutionDocument, HandleResolutionError, type HandleServiceEntry, HandleStatus, HandleValidationError, type HttpSignatureOptions, IM_PROOF_DEFAULT_COMPONENTS, IM_PROOF_RELATION_ASSERTION_METHOD, IM_PROOF_RELATION_AUTHENTICATION, type ImProof, type ImProofGenerationOptions, type ImProofVerificationRelationship, type ImProofVerificationResult, type ImProofVerificationTarget, type LegacyAuthOptions, type ManifestDidDocument, NetworkError, PROFILE_CORE_BINDING_V1, PROFILE_CORE_BINDING_V2, PROFILE_DIRECT_BASE_V1, PROFILE_DIRECT_BASE_V2, PROFILE_DIRECT_E2EE_V2, PROFILE_GROUP_BASE_V1, PROFILE_GROUP_BASE_V2, PROFILE_GROUP_E2EE_V2, PROFILE_IDENTITY_DISCOVERY_V1, PROFILE_IDENTITY_DISCOVERY_V2, PROOF_TYPE_DATA_INTEGRITY, PROOF_TYPE_ED25519, PROOF_TYPE_SECP256K1, type ParsedAuthHeader, type ParsedImSignatureInput, type ParsedWbaUri, ProofError, type ProofGenerationOptions, type ProofObject, type ProofRecord, type ProofVerificationOptions, RFC9421_ORIGIN_PROOF_DEFAULT_COMPONENTS, RFC9421_ORIGIN_PROOF_DEFAULT_LABEL, type RegisterIdentityRequest, DidWbaVerifier as RequestVerifier, DidWbaVerifierError as RequestVerifierError, type ResolveHandleOptions, type Rfc9421OriginProof, Rfc9421OriginProofError, type Rfc9421OriginProofGenerationOptions, type Rfc9421OriginProofVerificationOptions, type SendAwikiAttachmentRequest, type SendAwikiTextRequest, type SendRegistrationOtpRequest, type SendRegistrationOtpResult, type ServiceRecord, type SignatureMetadata, type SignedRequestObject, SubjectType, TARGET_KIND_AGENT, TARGET_KIND_GROUP, TARGET_KIND_SERVICE, VM_KEY_AUTH, VM_KEY_E2EE_AGREEMENT, VM_KEY_E2EE_SIGNING, VerificationMethod, type VerificationMethodRecord, type VerificationSuccess, WbaUriParseError, WnsError, addDeviceToDidDocument, authentication, buildAgentMessageService, buildAnpMessageService, buildContentDigest, buildGroupMessageService, buildHandleServiceEntry, buildImContentDigest, buildImSignatureInput, buildLogicalTargetUri, buildResolutionUrl, buildRfc9421OriginSignatureBase, buildSignedRequestObject, buildWbaUri as buildUri, buildVnextDidDocument, buildWbaUri, canonicalizeBindingGeneration, canonicalizeSignedRequestObject, compareBindingGenerations, computeJwkFingerprint, computeMultikeyFingerprint, createAwikiImClient, createDidWbaDocument as createDidDocument, createDidWbaDocumentWithKeyBinding as createDidDocumentWithKeyBinding, createDidWbaDocument, createDidWbaDocumentWithKeyBinding, buildHandleServiceEntry as createHandleServiceEntry, generateAuthHeader as createLegacyAuthHeader, generateAuthJson as createLegacyAuthPayload, generateW3cProof as createProof, generateHttpSignatureHeaders as createSignatureHeaders, createVerificationMethod, decodeImSignature, didDocuments, encodeImSignature, extractAuthHeaderParts, extractHandleServiceFromDidDocument, extractHandleServiceFromDidDocument as extractHandleServices, extractPublicKey, extractSignatureMetadata, findEligibleDevice, findVerificationMethod, generateAuthHeader, generateAuthJson, generateHttpSignatureHeaders, generateImProof, generateRfc9421OriginProof, generateW3cProof, httpSignatures, isAssertionMethodAuthorized, isAuthenticationAuthorized, legacyAuth, normalizeHandle, parseDeviceManifest, parseImSignatureInput, extractAuthHeaderParts as parseLegacyAuthHeader, extractSignatureMetadata as parseSignatureMetadata, parseWbaUri as parseUri, parseWbaUri, proof, quoteRfc3986Unreserved, removeDeviceFromDidDocument, resolveDidDocument, resolveDidWbaDocument, resolveHandle, resolveHandleFromUri, resolveHandleFromUri as resolveUri, updateDeviceInDidDocument, validateDeviceManifest, validateDidDocumentBinding as validateDidBinding, validateDidDocumentBinding, validateHandle, validateLocalPart, verifyAuthHeaderSignature, verifyAuthJsonSignature, verifyHandleBinding as verifyBinding, verifyContentDigest, verifyDidKeyBinding as verifyDidBinding, verifyDidKeyBinding, verifyFederatedHttpRequest, verifyHandleBinding, verifyHttpMessageSignature, verifyImContentDigest, verifyImProof, verifyAuthHeaderSignature as verifyLegacyAuthHeader, verifyAuthJsonSignature as verifyLegacyAuthPayload, verifyW3cProof as verifyProof, verifyW3cProofDetailed as verifyProofDetailed, verifyRfc9421OriginProof, verifyHttpMessageSignature as verifySignatureHeaders, verifyW3cProof, verifyW3cProofDetailed, wns };

package/dist/index.d.ts

@@ -11,6 +11,9 @@ declare class AuthenticationError extends ANPError {
 declare class ProofError extends ANPError {
     constructor(message: string, cause?: Error);
 }
+declare class DeviceManifestError extends AuthenticationError {
+    constructor(message: string, cause?: Error);
+}
 declare class NetworkError extends ANPError {
     readonly statusCode?: number | undefined;
     constructor(message: string, statusCode?: number | undefined, cause?: Error);
@@ -121,6 +124,15 @@ interface DidDocument {
     keyAgreement?: Array<string | VerificationMethodRecord>;
     service?: ServiceRecord[];
     proof?: ProofRecord;
+    deviceManifest?: {
+        type: string;
+        devices: Array<{
+            device_id: string;
+            signing_key_id: string;
+            e2ee_key_id: string;
+            profiles: string[];
+        }>;
+    };
 }
 interface DidDocumentOptions {
     port?: number;
@@ -300,6 +312,80 @@ declare class DidWbaVerifier {
 
 declare function verifyFederatedHttpRequest(senderDid: string, requestMethod: string, requestUrl: string, headers: Record<string, string>, body?: Uint8Array | string, options?: FederatedVerificationOptions): Promise<FederatedVerificationResult>;
 
+declare const DEVICE_MANIFEST_TYPE = "ANPDeviceManifest";
+declare const PROFILE_CORE_BINDING_V1 = "anp.core.binding.v1";
+declare const PROFILE_IDENTITY_DISCOVERY_V1 = "anp.identity.discovery.v1";
+declare const PROFILE_DIRECT_BASE_V1 = "anp.direct.base.v1";
+declare const PROFILE_GROUP_BASE_V1 = "anp.group.base.v1";
+declare const PROFILE_DIRECT_E2EE_V2 = "anp.direct.e2ee.v2";
+declare const PROFILE_GROUP_E2EE_V2 = "anp.group.e2ee.v2";
+declare const PROFILE_CORE_BINDING_V2 = "anp.core.binding.v2";
+declare const PROFILE_IDENTITY_DISCOVERY_V2 = "anp.identity.discovery.v2";
+declare const PROFILE_DIRECT_BASE_V2 = "anp.direct.base.v2";
+declare const PROFILE_GROUP_BASE_V2 = "anp.group.base.v2";
+type ManifestDidDocument = Record<string, unknown>;
+interface DeviceManifestEntryWire {
+    device_id: string;
+    signing_key_id: string;
+    e2ee_key_id: string;
+    profiles: string[];
+}
+interface DeviceManifestWire {
+    type: string;
+    devices: DeviceManifestEntryWire[];
+}
+declare class DeviceManifestEntry {
+    readonly deviceId: string;
+    readonly signingKeyId: string;
+    readonly e2eeKeyId: string;
+    readonly profiles: readonly string[];
+    constructor(deviceId: string, signingKeyId: string, e2eeKeyId: string, profiles: readonly string[]);
+    static fromWire(value: DeviceManifestEntryWire): DeviceManifestEntry;
+    toDict(): DeviceManifestEntryWire;
+}
+declare class DeviceManifest {
+    readonly type: string;
+    readonly devices: readonly DeviceManifestEntry[];
+    constructor(type: string, devices: readonly DeviceManifestEntry[]);
+    toDict(): DeviceManifestWire;
+}
+declare function parseDeviceManifest(didDocument: ManifestDidDocument): DeviceManifest | null;
+declare function validateDeviceManifest(didDocument: ManifestDidDocument): DeviceManifest | null;
+declare function findEligibleDevice(didDocument: ManifestDidDocument, deviceId: string, requiredProfile: string): DeviceManifestEntry | null;
+declare function buildVnextDidDocument(baseDocument: ManifestDidDocument, rootKeyId: string, rootVerificationMethod: Record<string, unknown>, device: DeviceManifestEntry, deviceSigningVerificationMethod: Record<string, unknown>, deviceE2eeVerificationMethod: Record<string, unknown>): ManifestDidDocument;
+declare function addDeviceToDidDocument(didDocument: ManifestDidDocument, rootKeyId: string, device: DeviceManifestEntry, deviceSigningVerificationMethod: Record<string, unknown>, deviceE2eeVerificationMethod: Record<string, unknown>, retiredDeviceIds: Iterable<string>): ManifestDidDocument;
+declare function updateDeviceInDidDocument(didDocument: ManifestDidDocument, rootKeyId: string, device: DeviceManifestEntry, deviceSigningVerificationMethod: Record<string, unknown>, deviceE2eeVerificationMethod: Record<string, unknown>): ManifestDidDocument;
+declare function removeDeviceFromDidDocument(didDocument: ManifestDidDocument, rootKeyId: string, deviceId: string): ManifestDidDocument;
+
+declare const deviceManifest_DEVICE_MANIFEST_TYPE: typeof DEVICE_MANIFEST_TYPE;
+type deviceManifest_DeviceManifest = DeviceManifest;
+declare const deviceManifest_DeviceManifest: typeof DeviceManifest;
+type deviceManifest_DeviceManifestEntry = DeviceManifestEntry;
+declare const deviceManifest_DeviceManifestEntry: typeof DeviceManifestEntry;
+type deviceManifest_DeviceManifestEntryWire = DeviceManifestEntryWire;
+type deviceManifest_DeviceManifestWire = DeviceManifestWire;
+type deviceManifest_ManifestDidDocument = ManifestDidDocument;
+declare const deviceManifest_PROFILE_CORE_BINDING_V1: typeof PROFILE_CORE_BINDING_V1;
+declare const deviceManifest_PROFILE_CORE_BINDING_V2: typeof PROFILE_CORE_BINDING_V2;
+declare const deviceManifest_PROFILE_DIRECT_BASE_V1: typeof PROFILE_DIRECT_BASE_V1;
+declare const deviceManifest_PROFILE_DIRECT_BASE_V2: typeof PROFILE_DIRECT_BASE_V2;
+declare const deviceManifest_PROFILE_DIRECT_E2EE_V2: typeof PROFILE_DIRECT_E2EE_V2;
+declare const deviceManifest_PROFILE_GROUP_BASE_V1: typeof PROFILE_GROUP_BASE_V1;
+declare const deviceManifest_PROFILE_GROUP_BASE_V2: typeof PROFILE_GROUP_BASE_V2;
+declare const deviceManifest_PROFILE_GROUP_E2EE_V2: typeof PROFILE_GROUP_E2EE_V2;
+declare const deviceManifest_PROFILE_IDENTITY_DISCOVERY_V1: typeof PROFILE_IDENTITY_DISCOVERY_V1;
+declare const deviceManifest_PROFILE_IDENTITY_DISCOVERY_V2: typeof PROFILE_IDENTITY_DISCOVERY_V2;
+declare const deviceManifest_addDeviceToDidDocument: typeof addDeviceToDidDocument;
+declare const deviceManifest_buildVnextDidDocument: typeof buildVnextDidDocument;
+declare const deviceManifest_findEligibleDevice: typeof findEligibleDevice;
+declare const deviceManifest_parseDeviceManifest: typeof parseDeviceManifest;
+declare const deviceManifest_removeDeviceFromDidDocument: typeof removeDeviceFromDidDocument;
+declare const deviceManifest_updateDeviceInDidDocument: typeof updateDeviceInDidDocument;
+declare const deviceManifest_validateDeviceManifest: typeof validateDeviceManifest;
+declare namespace deviceManifest {
+  export { deviceManifest_DEVICE_MANIFEST_TYPE as DEVICE_MANIFEST_TYPE, deviceManifest_DeviceManifest as DeviceManifest, deviceManifest_DeviceManifestEntry as DeviceManifestEntry, type deviceManifest_DeviceManifestEntryWire as DeviceManifestEntryWire, type deviceManifest_DeviceManifestWire as DeviceManifestWire, type deviceManifest_ManifestDidDocument as ManifestDidDocument, deviceManifest_PROFILE_CORE_BINDING_V1 as PROFILE_CORE_BINDING_V1, deviceManifest_PROFILE_CORE_BINDING_V2 as PROFILE_CORE_BINDING_V2, deviceManifest_PROFILE_DIRECT_BASE_V1 as PROFILE_DIRECT_BASE_V1, deviceManifest_PROFILE_DIRECT_BASE_V2 as PROFILE_DIRECT_BASE_V2, deviceManifest_PROFILE_DIRECT_E2EE_V2 as PROFILE_DIRECT_E2EE_V2, deviceManifest_PROFILE_GROUP_BASE_V1 as PROFILE_GROUP_BASE_V1, deviceManifest_PROFILE_GROUP_BASE_V2 as PROFILE_GROUP_BASE_V2, deviceManifest_PROFILE_GROUP_E2EE_V2 as PROFILE_GROUP_E2EE_V2, deviceManifest_PROFILE_IDENTITY_DISCOVERY_V1 as PROFILE_IDENTITY_DISCOVERY_V1, deviceManifest_PROFILE_IDENTITY_DISCOVERY_V2 as PROFILE_IDENTITY_DISCOVERY_V2, deviceManifest_addDeviceToDidDocument as addDeviceToDidDocument, deviceManifest_buildVnextDidDocument as buildVnextDidDocument, deviceManifest_findEligibleDevice as findEligibleDevice, deviceManifest_parseDeviceManifest as parseDeviceManifest, deviceManifest_removeDeviceFromDidDocument as removeDeviceFromDidDocument, deviceManifest_updateDeviceInDidDocument as updateDeviceInDidDocument, deviceManifest_validateDeviceManifest as validateDeviceManifest };
+}
+
 declare const didDocuments: {
     ANP_MESSAGE_SERVICE_TYPE: string;
     buildAnpMessageService: typeof buildAnpMessageService;
@@ -351,6 +437,7 @@ declare const authentication: {
         verifyMessage: typeof verifyHttpMessageSignature;
         parseMetadata: typeof extractSignatureMetadata;
     };
+    deviceManifest: typeof deviceManifest;
     federation: {
         verifyRequest: typeof verifyFederatedHttpRequest;
     };
@@ -459,11 +546,70 @@ declare namespace imProof {
   export { imProof_IM_PROOF_DEFAULT_COMPONENTS as IM_PROOF_DEFAULT_COMPONENTS, imProof_IM_PROOF_RELATION_ASSERTION_METHOD as IM_PROOF_RELATION_ASSERTION_METHOD, imProof_IM_PROOF_RELATION_AUTHENTICATION as IM_PROOF_RELATION_AUTHENTICATION, type imProof_ImProof as ImProof, type imProof_ImProofGenerationOptions as ImProofGenerationOptions, type imProof_ImProofVerificationRelationship as ImProofVerificationRelationship, type imProof_ImProofVerificationResult as ImProofVerificationResult, type imProof_ImProofVerificationTarget as ImProofVerificationTarget, type imProof_ParsedImSignatureInput as ParsedImSignatureInput, imProof_buildImContentDigest as buildImContentDigest, imProof_buildImSignatureInput as buildImSignatureInput, imProof_decodeImSignature as decodeImSignature, imProof_encodeImSignature as encodeImSignature, imProof_generateImProof as generateImProof, imProof_parseImSignatureInput as parseImSignatureInput, imProof_verifyImContentDigest as verifyImContentDigest, imProof_verifyImProof as verifyImProof };
 }
 
+declare const RFC9421_ORIGIN_PROOF_DEFAULT_LABEL = "sig1";
+declare const RFC9421_ORIGIN_PROOF_DEFAULT_COMPONENTS: readonly ["@method", "@target-uri", "content-digest"];
+declare const TARGET_KIND_AGENT = "agent";
+declare const TARGET_KIND_GROUP = "group";
+declare const TARGET_KIND_SERVICE = "service";
+declare class Rfc9421OriginProofError extends ProofError {
+    constructor(message: string, cause?: Error);
+}
+interface SignedRequestObject {
+    method: string;
+    meta: JsonObject;
+    body: JsonObject;
+}
+type Rfc9421OriginProof = ImProof;
+interface Rfc9421OriginProofGenerationOptions {
+    created?: number;
+    expires?: number;
+    nonce?: string;
+    label?: string;
+}
+interface Rfc9421OriginProofVerificationOptions {
+    expectedSignerDid?: string;
+}
+declare function buildSignedRequestObject(method: string, meta: Record<string, unknown>, body: Record<string, unknown>): SignedRequestObject;
+declare function canonicalizeSignedRequestObject(signedRequestObject: SignedRequestObject | Record<string, unknown>): Uint8Array;
+declare function buildLogicalTargetUri(targetKind: string, targetDid: string): string;
+declare function buildRfc9421OriginSignatureBase(method: string, logicalTargetUri: string, contentDigest: string, signatureInput: string): Uint8Array;
+declare function generateRfc9421OriginProof(method: string, meta: Record<string, unknown>, body: Record<string, unknown>, privateKey: PrivateKeyInput, keyId: string, options?: Rfc9421OriginProofGenerationOptions): Rfc9421OriginProof;
+declare function verifyRfc9421OriginProof(originProof: Rfc9421OriginProof, method: string, meta: Record<string, unknown>, body: Record<string, unknown>, verification?: {
+    didDocument?: DidDocument;
+    verificationMethod?: VerificationMethodRecord;
+    options?: Rfc9421OriginProofVerificationOptions;
+}): ImProofVerificationResult;
+/** Percent-encode like Python urllib.parse.quote(..., safe="-._~"). */
+declare function quoteRfc3986Unreserved(value: string): string;
+
+declare const rfc9421Origin_RFC9421_ORIGIN_PROOF_DEFAULT_COMPONENTS: typeof RFC9421_ORIGIN_PROOF_DEFAULT_COMPONENTS;
+declare const rfc9421Origin_RFC9421_ORIGIN_PROOF_DEFAULT_LABEL: typeof RFC9421_ORIGIN_PROOF_DEFAULT_LABEL;
+type rfc9421Origin_Rfc9421OriginProof = Rfc9421OriginProof;
+type rfc9421Origin_Rfc9421OriginProofError = Rfc9421OriginProofError;
+declare const rfc9421Origin_Rfc9421OriginProofError: typeof Rfc9421OriginProofError;
+type rfc9421Origin_Rfc9421OriginProofGenerationOptions = Rfc9421OriginProofGenerationOptions;
+type rfc9421Origin_Rfc9421OriginProofVerificationOptions = Rfc9421OriginProofVerificationOptions;
+type rfc9421Origin_SignedRequestObject = SignedRequestObject;
+declare const rfc9421Origin_TARGET_KIND_AGENT: typeof TARGET_KIND_AGENT;
+declare const rfc9421Origin_TARGET_KIND_GROUP: typeof TARGET_KIND_GROUP;
+declare const rfc9421Origin_TARGET_KIND_SERVICE: typeof TARGET_KIND_SERVICE;
+declare const rfc9421Origin_buildLogicalTargetUri: typeof buildLogicalTargetUri;
+declare const rfc9421Origin_buildRfc9421OriginSignatureBase: typeof buildRfc9421OriginSignatureBase;
+declare const rfc9421Origin_buildSignedRequestObject: typeof buildSignedRequestObject;
+declare const rfc9421Origin_canonicalizeSignedRequestObject: typeof canonicalizeSignedRequestObject;
+declare const rfc9421Origin_generateRfc9421OriginProof: typeof generateRfc9421OriginProof;
+declare const rfc9421Origin_quoteRfc3986Unreserved: typeof quoteRfc3986Unreserved;
+declare const rfc9421Origin_verifyRfc9421OriginProof: typeof verifyRfc9421OriginProof;
+declare namespace rfc9421Origin {
+  export { rfc9421Origin_RFC9421_ORIGIN_PROOF_DEFAULT_COMPONENTS as RFC9421_ORIGIN_PROOF_DEFAULT_COMPONENTS, rfc9421Origin_RFC9421_ORIGIN_PROOF_DEFAULT_LABEL as RFC9421_ORIGIN_PROOF_DEFAULT_LABEL, type rfc9421Origin_Rfc9421OriginProof as Rfc9421OriginProof, rfc9421Origin_Rfc9421OriginProofError as Rfc9421OriginProofError, type rfc9421Origin_Rfc9421OriginProofGenerationOptions as Rfc9421OriginProofGenerationOptions, type rfc9421Origin_Rfc9421OriginProofVerificationOptions as Rfc9421OriginProofVerificationOptions, type rfc9421Origin_SignedRequestObject as SignedRequestObject, rfc9421Origin_TARGET_KIND_AGENT as TARGET_KIND_AGENT, rfc9421Origin_TARGET_KIND_GROUP as TARGET_KIND_GROUP, rfc9421Origin_TARGET_KIND_SERVICE as TARGET_KIND_SERVICE, rfc9421Origin_buildLogicalTargetUri as buildLogicalTargetUri, rfc9421Origin_buildRfc9421OriginSignatureBase as buildRfc9421OriginSignatureBase, rfc9421Origin_buildSignedRequestObject as buildSignedRequestObject, rfc9421Origin_canonicalizeSignedRequestObject as canonicalizeSignedRequestObject, rfc9421Origin_generateRfc9421OriginProof as generateRfc9421OriginProof, rfc9421Origin_quoteRfc3986Unreserved as quoteRfc3986Unreserved, rfc9421Origin_verifyRfc9421OriginProof as verifyRfc9421OriginProof };
+}
+
 declare const proof: {
     create: typeof generateW3cProof;
     verify: typeof verifyW3cProof;
     verifyDetailed: typeof verifyW3cProofDetailed;
     im: typeof imProof;
+    rfc9421: typeof rfc9421Origin;
 };
 
 type BindingGeneration = string & {
@@ -787,4 +933,4 @@ declare class AwikiImError extends Error {
     });
 }
 
-export { ANPError, ANP_HANDLE_SERVICE_TYPE, ANP_MESSAGE_SERVICE_TYPE, type AnpMessageServiceOptions, AuthMode, AuthenticationError, type AwikiAttachment, type AwikiAttachmentContent, type AwikiAttachmentId, type AwikiConversation, type AwikiConversationId, type AwikiCursor, type AwikiDid, type AwikiDirectConversation, type AwikiDirectTarget, type AwikiGroupConversation, type AwikiGroupTarget, type AwikiHandle, type AwikiIdentity, type AwikiImClient, type AwikiImClientOptions, AwikiImError, type AwikiImErrorCode, type AwikiImId, type AwikiMessage, type AwikiMessageContent, type AwikiMessageId, type AwikiMessageTarget, type AwikiPage, type AwikiPageRequest, type AwikiTextContent, type AwikiUpload, type BindingGeneration, type BindingVerificationOptions, type BindingVerificationResult, CRYPTOSUITE_DIDWBA_SECP256K1_2025, CRYPTOSUITE_EDDSA_JCS_2022, CryptoError, type DIDSubjectProfile, DIDWbaAuthHeader, DIDWbaAuthHeader as DidAuthHeaders, type DidDocument, type DidDocumentBundle, type DidDocumentOptions, DidProfile, type DidResolutionOptions, type DidResolver, DidWbaVerifier, type DidWbaVerifierConfig, DidWbaVerifierError, type DownloadAwikiAttachmentRequest, type DownloadedAwikiAttachment, type FederatedVerificationOptions, type FederatedVerificationResult, type GetAwikiHistoryRequest, HandleBindingError, HandleGoneError, HandleMovedError, HandleNotFoundError, type HandleResolutionDocument, HandleResolutionError, type HandleServiceEntry, HandleStatus, HandleValidationError, type HttpSignatureOptions, IM_PROOF_DEFAULT_COMPONENTS, IM_PROOF_RELATION_ASSERTION_METHOD, IM_PROOF_RELATION_AUTHENTICATION, type ImProof, type ImProofGenerationOptions, type ImProofVerificationRelationship, type ImProofVerificationResult, type ImProofVerificationTarget, type LegacyAuthOptions, NetworkError, PROOF_TYPE_DATA_INTEGRITY, PROOF_TYPE_ED25519, PROOF_TYPE_SECP256K1, type ParsedAuthHeader, type ParsedImSignatureInput, type ParsedWbaUri, ProofError, type ProofGenerationOptions, type ProofObject, type ProofRecord, type ProofVerificationOptions, type RegisterIdentityRequest, DidWbaVerifier as RequestVerifier, DidWbaVerifierError as RequestVerifierError, type ResolveHandleOptions, type SendAwikiAttachmentRequest, type SendAwikiTextRequest, type SendRegistrationOtpRequest, type SendRegistrationOtpResult, type ServiceRecord, type SignatureMetadata, SubjectType, VM_KEY_AUTH, VM_KEY_E2EE_AGREEMENT, VM_KEY_E2EE_SIGNING, VerificationMethod, type VerificationMethodRecord, type VerificationSuccess, WbaUriParseError, WnsError, authentication, buildAgentMessageService, buildAnpMessageService, buildContentDigest, buildGroupMessageService, buildHandleServiceEntry, buildImContentDigest, buildImSignatureInput, buildResolutionUrl, buildWbaUri as buildUri, buildWbaUri, canonicalizeBindingGeneration, compareBindingGenerations, computeJwkFingerprint, computeMultikeyFingerprint, createAwikiImClient, createDidWbaDocument as createDidDocument, createDidWbaDocumentWithKeyBinding as createDidDocumentWithKeyBinding, createDidWbaDocument, createDidWbaDocumentWithKeyBinding, buildHandleServiceEntry as createHandleServiceEntry, generateAuthHeader as createLegacyAuthHeader, generateAuthJson as createLegacyAuthPayload, generateW3cProof as createProof, generateHttpSignatureHeaders as createSignatureHeaders, createVerificationMethod, decodeImSignature, didDocuments, encodeImSignature, extractAuthHeaderParts, extractHandleServiceFromDidDocument, extractHandleServiceFromDidDocument as extractHandleServices, extractPublicKey, extractSignatureMetadata, findVerificationMethod, generateAuthHeader, generateAuthJson, generateHttpSignatureHeaders, generateImProof, generateW3cProof, httpSignatures, isAssertionMethodAuthorized, isAuthenticationAuthorized, legacyAuth, normalizeHandle, parseImSignatureInput, extractAuthHeaderParts as parseLegacyAuthHeader, extractSignatureMetadata as parseSignatureMetadata, parseWbaUri as parseUri, parseWbaUri, proof, resolveDidDocument, resolveDidWbaDocument, resolveHandle, resolveHandleFromUri, resolveHandleFromUri as resolveUri, validateDidDocumentBinding as validateDidBinding, validateDidDocumentBinding, validateHandle, validateLocalPart, verifyAuthHeaderSignature, verifyAuthJsonSignature, verifyHandleBinding as verifyBinding, verifyContentDigest, verifyDidKeyBinding as verifyDidBinding, verifyDidKeyBinding, verifyFederatedHttpRequest, verifyHandleBinding, verifyHttpMessageSignature, verifyImContentDigest, verifyImProof, verifyAuthHeaderSignature as verifyLegacyAuthHeader, verifyAuthJsonSignature as verifyLegacyAuthPayload, verifyW3cProof as verifyProof, verifyW3cProofDetailed as verifyProofDetailed, verifyHttpMessageSignature as verifySignatureHeaders, verifyW3cProof, verifyW3cProofDetailed, wns };
+export { ANPError, ANP_HANDLE_SERVICE_TYPE, ANP_MESSAGE_SERVICE_TYPE, type AnpMessageServiceOptions, AuthMode, AuthenticationError, type AwikiAttachment, type AwikiAttachmentContent, type AwikiAttachmentId, type AwikiConversation, type AwikiConversationId, type AwikiCursor, type AwikiDid, type AwikiDirectConversation, type AwikiDirectTarget, type AwikiGroupConversation, type AwikiGroupTarget, type AwikiHandle, type AwikiIdentity, type AwikiImClient, type AwikiImClientOptions, AwikiImError, type AwikiImErrorCode, type AwikiImId, type AwikiMessage, type AwikiMessageContent, type AwikiMessageId, type AwikiMessageTarget, type AwikiPage, type AwikiPageRequest, type AwikiTextContent, type AwikiUpload, type BindingGeneration, type BindingVerificationOptions, type BindingVerificationResult, CRYPTOSUITE_DIDWBA_SECP256K1_2025, CRYPTOSUITE_EDDSA_JCS_2022, CryptoError, DEVICE_MANIFEST_TYPE, type DIDSubjectProfile, DIDWbaAuthHeader, DeviceManifest, DeviceManifestEntry, type DeviceManifestEntryWire, DeviceManifestError, type DeviceManifestWire, DIDWbaAuthHeader as DidAuthHeaders, type DidDocument, type DidDocumentBundle, type DidDocumentOptions, DidProfile, type DidResolutionOptions, type DidResolver, DidWbaVerifier, type DidWbaVerifierConfig, DidWbaVerifierError, type DownloadAwikiAttachmentRequest, type DownloadedAwikiAttachment, type FederatedVerificationOptions, type FederatedVerificationResult, type GetAwikiHistoryRequest, HandleBindingError, HandleGoneError, HandleMovedError, HandleNotFoundError, type HandleResolutionDocument, HandleResolutionError, type HandleServiceEntry, HandleStatus, HandleValidationError, type HttpSignatureOptions, IM_PROOF_DEFAULT_COMPONENTS, IM_PROOF_RELATION_ASSERTION_METHOD, IM_PROOF_RELATION_AUTHENTICATION, type ImProof, type ImProofGenerationOptions, type ImProofVerificationRelationship, type ImProofVerificationResult, type ImProofVerificationTarget, type LegacyAuthOptions, type ManifestDidDocument, NetworkError, PROFILE_CORE_BINDING_V1, PROFILE_CORE_BINDING_V2, PROFILE_DIRECT_BASE_V1, PROFILE_DIRECT_BASE_V2, PROFILE_DIRECT_E2EE_V2, PROFILE_GROUP_BASE_V1, PROFILE_GROUP_BASE_V2, PROFILE_GROUP_E2EE_V2, PROFILE_IDENTITY_DISCOVERY_V1, PROFILE_IDENTITY_DISCOVERY_V2, PROOF_TYPE_DATA_INTEGRITY, PROOF_TYPE_ED25519, PROOF_TYPE_SECP256K1, type ParsedAuthHeader, type ParsedImSignatureInput, type ParsedWbaUri, ProofError, type ProofGenerationOptions, type ProofObject, type ProofRecord, type ProofVerificationOptions, RFC9421_ORIGIN_PROOF_DEFAULT_COMPONENTS, RFC9421_ORIGIN_PROOF_DEFAULT_LABEL, type RegisterIdentityRequest, DidWbaVerifier as RequestVerifier, DidWbaVerifierError as RequestVerifierError, type ResolveHandleOptions, type Rfc9421OriginProof, Rfc9421OriginProofError, type Rfc9421OriginProofGenerationOptions, type Rfc9421OriginProofVerificationOptions, type SendAwikiAttachmentRequest, type SendAwikiTextRequest, type SendRegistrationOtpRequest, type SendRegistrationOtpResult, type ServiceRecord, type SignatureMetadata, type SignedRequestObject, SubjectType, TARGET_KIND_AGENT, TARGET_KIND_GROUP, TARGET_KIND_SERVICE, VM_KEY_AUTH, VM_KEY_E2EE_AGREEMENT, VM_KEY_E2EE_SIGNING, VerificationMethod, type VerificationMethodRecord, type VerificationSuccess, WbaUriParseError, WnsError, addDeviceToDidDocument, authentication, buildAgentMessageService, buildAnpMessageService, buildContentDigest, buildGroupMessageService, buildHandleServiceEntry, buildImContentDigest, buildImSignatureInput, buildLogicalTargetUri, buildResolutionUrl, buildRfc9421OriginSignatureBase, buildSignedRequestObject, buildWbaUri as buildUri, buildVnextDidDocument, buildWbaUri, canonicalizeBindingGeneration, canonicalizeSignedRequestObject, compareBindingGenerations, computeJwkFingerprint, computeMultikeyFingerprint, createAwikiImClient, createDidWbaDocument as createDidDocument, createDidWbaDocumentWithKeyBinding as createDidDocumentWithKeyBinding, createDidWbaDocument, createDidWbaDocumentWithKeyBinding, buildHandleServiceEntry as createHandleServiceEntry, generateAuthHeader as createLegacyAuthHeader, generateAuthJson as createLegacyAuthPayload, generateW3cProof as createProof, generateHttpSignatureHeaders as createSignatureHeaders, createVerificationMethod, decodeImSignature, didDocuments, encodeImSignature, extractAuthHeaderParts, extractHandleServiceFromDidDocument, extractHandleServiceFromDidDocument as extractHandleServices, extractPublicKey, extractSignatureMetadata, findEligibleDevice, findVerificationMethod, generateAuthHeader, generateAuthJson, generateHttpSignatureHeaders, generateImProof, generateRfc9421OriginProof, generateW3cProof, httpSignatures, isAssertionMethodAuthorized, isAuthenticationAuthorized, legacyAuth, normalizeHandle, parseDeviceManifest, parseImSignatureInput, extractAuthHeaderParts as parseLegacyAuthHeader, extractSignatureMetadata as parseSignatureMetadata, parseWbaUri as parseUri, parseWbaUri, proof, quoteRfc3986Unreserved, removeDeviceFromDidDocument, resolveDidDocument, resolveDidWbaDocument, resolveHandle, resolveHandleFromUri, resolveHandleFromUri as resolveUri, updateDeviceInDidDocument, validateDeviceManifest, validateDidDocumentBinding as validateDidBinding, validateDidDocumentBinding, validateHandle, validateLocalPart, verifyAuthHeaderSignature, verifyAuthJsonSignature, verifyHandleBinding as verifyBinding, verifyContentDigest, verifyDidKeyBinding as verifyDidBinding, verifyDidKeyBinding, verifyFederatedHttpRequest, verifyHandleBinding, verifyHttpMessageSignature, verifyImContentDigest, verifyImProof, verifyAuthHeaderSignature as verifyLegacyAuthHeader, verifyAuthJsonSignature as verifyLegacyAuthPayload, verifyW3cProof as verifyProof, verifyW3cProofDetailed as verifyProofDetailed, verifyRfc9421OriginProof, verifyHttpMessageSignature as verifySignatureHeaders, verifyW3cProof, verifyW3cProofDetailed, wns };