@bsv/vsc 0.2.0-beta.1

package/artifacts/w3c/credentials-v2.jsonld

@@ -0,0 +1,340 @@
+{
+  "@context": {
+    "@protected": true,
+
+    "id": "@id",
+    "type": "@type",
+
+    "description": "https://schema.org/description",
+    "digestMultibase": {
+      "@id": "https://w3id.org/security#digestMultibase",
+      "@type": "https://w3id.org/security#multibase"
+    },
+    "digestSRI": {
+      "@id": "https://www.w3.org/2018/credentials#digestSRI",
+      "@type": "https://www.w3.org/2018/credentials#sriString"
+    },
+    "mediaType": {
+      "@id": "https://schema.org/encodingFormat"
+    },
+    "name": "https://schema.org/name",
+
+    "VerifiableCredential": {
+      "@id": "https://www.w3.org/2018/credentials#VerifiableCredential",
+      "@context": {
+        "@protected": true,
+
+        "id": "@id",
+        "type": "@type",
+
+        "confidenceMethod": {
+          "@id": "https://www.w3.org/2018/credentials#confidenceMethod",
+          "@type": "@id"
+        },
+        "credentialSchema": {
+          "@id": "https://www.w3.org/2018/credentials#credentialSchema",
+          "@type": "@id"
+        },
+        "credentialStatus": {
+          "@id": "https://www.w3.org/2018/credentials#credentialStatus",
+          "@type": "@id"
+        },
+        "credentialSubject": {
+          "@id": "https://www.w3.org/2018/credentials#credentialSubject",
+          "@type": "@id"
+        },
+        "description": "https://schema.org/description",
+        "evidence": {
+          "@id": "https://www.w3.org/2018/credentials#evidence",
+          "@type": "@id"
+        },
+        "issuer": {
+          "@id": "https://www.w3.org/2018/credentials#issuer",
+          "@type": "@id"
+        },
+        "name": "https://schema.org/name",
+        "proof": {
+          "@id": "https://w3id.org/security#proof",
+          "@type": "@id",
+          "@container": "@graph"
+        },
+        "refreshService": {
+          "@id": "https://www.w3.org/2018/credentials#refreshService",
+          "@type": "@id"
+        },
+        "relatedResource": {
+          "@id": "https://www.w3.org/2018/credentials#relatedResource",
+          "@type": "@id"
+        },
+        "renderMethod": {
+          "@id": "https://www.w3.org/2018/credentials#renderMethod",
+          "@type": "@id"
+        },
+        "termsOfUse": {
+          "@id": "https://www.w3.org/2018/credentials#termsOfUse",
+          "@type": "@id"
+        },
+        "validFrom": {
+          "@id": "https://www.w3.org/2018/credentials#validFrom",
+          "@type": "http://www.w3.org/2001/XMLSchema#dateTime"
+        },
+        "validUntil": {
+          "@id": "https://www.w3.org/2018/credentials#validUntil",
+          "@type": "http://www.w3.org/2001/XMLSchema#dateTime"
+        }
+      }
+    },
+
+    "EnvelopedVerifiableCredential":
+      "https://www.w3.org/2018/credentials#EnvelopedVerifiableCredential",
+
+    "VerifiablePresentation": {
+      "@id": "https://www.w3.org/2018/credentials#VerifiablePresentation",
+      "@context": {
+        "@protected": true,
+
+        "id": "@id",
+        "type": "@type",
+
+        "holder": {
+          "@id": "https://www.w3.org/2018/credentials#holder",
+          "@type": "@id"
+        },
+        "proof": {
+          "@id": "https://w3id.org/security#proof",
+          "@type": "@id",
+          "@container": "@graph"
+        },
+        "termsOfUse": {
+          "@id": "https://www.w3.org/2018/credentials#termsOfUse",
+          "@type": "@id"
+        },
+        "verifiableCredential": {
+          "@id": "https://www.w3.org/2018/credentials#verifiableCredential",
+          "@type": "@id",
+          "@container": "@graph",
+          "@context": null
+        }
+      }
+    },
+
+    "EnvelopedVerifiablePresentation":
+      "https://www.w3.org/2018/credentials#EnvelopedVerifiablePresentation",
+
+    "JsonSchemaCredential":
+      "https://www.w3.org/2018/credentials#JsonSchemaCredential",
+
+    "JsonSchema": {
+      "@id": "https://www.w3.org/2018/credentials#JsonSchema",
+      "@context": {
+        "@protected": true,
+
+        "id": "@id",
+        "type": "@type",
+
+        "jsonSchema": {
+          "@id": "https://www.w3.org/2018/credentials#jsonSchema",
+          "@type": "@json"
+        }
+      }
+    },
+
+    "BitstringStatusListCredential":
+      "https://www.w3.org/ns/credentials/status#BitstringStatusListCredential",
+
+    "BitstringStatusList": {
+      "@id": "https://www.w3.org/ns/credentials/status#BitstringStatusList",
+      "@context": {
+        "@protected": true,
+
+        "id": "@id",
+        "type": "@type",
+
+        "encodedList": {
+          "@id": "https://www.w3.org/ns/credentials/status#encodedList",
+          "@type": "https://w3id.org/security#multibase"
+        },
+        "statusPurpose":
+          "https://www.w3.org/ns/credentials/status#statusPurpose",
+        "ttl": "https://www.w3.org/ns/credentials/status#ttl"
+      }
+    },
+
+    "BitstringStatusListEntry": {
+      "@id":
+        "https://www.w3.org/ns/credentials/status#BitstringStatusListEntry",
+      "@context": {
+        "@protected": true,
+
+        "id": "@id",
+        "type": "@type",
+
+        "statusListCredential": {
+          "@id":
+            "https://www.w3.org/ns/credentials/status#statusListCredential",
+          "@type": "@id"
+        },
+        "statusListIndex":
+          "https://www.w3.org/ns/credentials/status#statusListIndex",
+        "statusPurpose":
+          "https://www.w3.org/ns/credentials/status#statusPurpose",
+        "statusMessage": {
+          "@id": "https://www.w3.org/ns/credentials/status#statusMessage",
+          "@context": {
+            "@protected": true,
+
+            "id": "@id",
+            "type": "@type",
+
+            "message": "https://www.w3.org/ns/credentials/status#message",
+            "status": "https://www.w3.org/ns/credentials/status#status"
+          }
+        },
+        "statusReference": {
+          "@id": "https://www.w3.org/ns/credentials/status#statusReference",
+          "@type": "@id"
+        },
+        "statusSize": {
+          "@id": "https://www.w3.org/ns/credentials/status#statusSize",
+          "@type": "https://www.w3.org/2001/XMLSchema#integer"
+        }
+      }
+    },
+
+    "DataIntegrityProof": {
+      "@id": "https://w3id.org/security#DataIntegrityProof",
+      "@context": {
+        "@protected": true,
+
+        "id": "@id",
+        "type": "@type",
+
+        "challenge": "https://w3id.org/security#challenge",
+        "created": {
+          "@id": "http://purl.org/dc/terms/created",
+          "@type": "http://www.w3.org/2001/XMLSchema#dateTime"
+        },
+        "cryptosuite": {
+          "@id": "https://w3id.org/security#cryptosuite",
+          "@type": "https://w3id.org/security#cryptosuiteString"
+        },
+        "domain": "https://w3id.org/security#domain",
+        "expires": {
+          "@id": "https://w3id.org/security#expiration",
+          "@type": "http://www.w3.org/2001/XMLSchema#dateTime"
+        },
+        "nonce": "https://w3id.org/security#nonce",
+        "previousProof": {
+          "@id": "https://w3id.org/security#previousProof",
+          "@type": "@id"
+        },
+        "proofPurpose": {
+          "@id": "https://w3id.org/security#proofPurpose",
+          "@type": "@vocab",
+          "@context": {
+            "@protected": true,
+
+            "id": "@id",
+            "type": "@type",
+
+            "assertionMethod": {
+              "@id": "https://w3id.org/security#assertionMethod",
+              "@type": "@id",
+              "@container": "@set"
+            },
+            "authentication": {
+              "@id": "https://w3id.org/security#authenticationMethod",
+              "@type": "@id",
+              "@container": "@set"
+            },
+            "capabilityDelegation": {
+              "@id": "https://w3id.org/security#capabilityDelegationMethod",
+              "@type": "@id",
+              "@container": "@set"
+            },
+            "capabilityInvocation": {
+              "@id": "https://w3id.org/security#capabilityInvocationMethod",
+              "@type": "@id",
+              "@container": "@set"
+            },
+            "keyAgreement": {
+              "@id": "https://w3id.org/security#keyAgreementMethod",
+              "@type": "@id",
+              "@container": "@set"
+            }
+          }
+        },
+        "proofValue": {
+          "@id": "https://w3id.org/security#proofValue",
+          "@type": "https://w3id.org/security#multibase"
+        },
+        "verificationMethod": {
+          "@id": "https://w3id.org/security#verificationMethod",
+          "@type": "@id"
+        }
+      }
+    },
+
+    "...": {
+      "@id": "https://www.iana.org/assignments/jwt#..."
+    },
+    "_sd": {
+      "@id": "https://www.iana.org/assignments/jwt#_sd",
+      "@type": "@json"
+    },
+    "_sd_alg": {
+      "@id": "https://www.iana.org/assignments/jwt#_sd_alg"
+    },
+    "aud": {
+      "@id": "https://www.iana.org/assignments/jwt#aud",
+      "@type": "@id"
+    },
+    "cnf": {
+      "@id": "https://www.iana.org/assignments/jwt#cnf",
+      "@context": {
+        "@protected": true,
+
+        "kid": {
+          "@id": "https://www.iana.org/assignments/jwt#kid",
+          "@type": "@id"
+        },
+        "jwk": {
+          "@id": "https://www.iana.org/assignments/jwt#jwk",
+          "@type": "@json"
+        }
+      }
+    },
+    "exp": {
+      "@id": "https://www.iana.org/assignments/jwt#exp",
+      "@type": "https://www.w3.org/2001/XMLSchema#nonNegativeInteger"
+    },
+    "iat": {
+      "@id": "https://www.iana.org/assignments/jwt#iat",
+      "@type": "https://www.w3.org/2001/XMLSchema#nonNegativeInteger"
+    },
+    "iss": {
+      "@id": "https://www.iana.org/assignments/jose#iss",
+      "@type": "@id"
+    },
+    "jku": {
+      "@id": "https://www.iana.org/assignments/jose#jku",
+      "@type": "@id"
+    },
+    "kid": {
+      "@id": "https://www.iana.org/assignments/jose#kid",
+      "@type": "@id"
+    },
+    "nbf": {
+      "@id": "https://www.iana.org/assignments/jwt#nbf",
+      "@type": "https://www.w3.org/2001/XMLSchema#nonNegativeInteger"
+    },
+    "sub": {
+      "@id": "https://www.iana.org/assignments/jose#sub",
+      "@type": "@id"
+    },
+    "x5u": {
+      "@id": "https://www.iana.org/assignments/jose#x5u",
+      "@type": "@id"
+    }
+  }
+}

package/dist/context.d.ts

@@ -0,0 +1,9 @@
+import type { DocumentLoader, JsonObject } from './types.js';
+export declare const PROFILE_ID = "vsc-draft-compat/0.1.0";
+export declare const UPSTREAM_REVISION = "c279de3debcd6eab94a77034584d1750f5d65e6a";
+export declare const CONTEXT_URL = "urn:bsv:vsc:context:0.1.0";
+export declare const PROFILE_CONTEXT: JsonObject;
+export declare const SEAL_CONTEXTS: string[];
+/** Contexts are pinned package resources. External DID/credential retrieval is an explicit dependency. */
+export declare function createDocumentLoader(documents?: ReadonlyMap<string, JsonObject>, fallback?: DocumentLoader): DocumentLoader;
+//# sourceMappingURL=context.d.ts.map

package/dist/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7D,eAAO,MAAM,UAAU,2BAA2B,CAAC;AACnD,eAAO,MAAM,iBAAiB,6CAA6C,CAAC;AAE5E,eAAO,MAAM,WAAW,8BAA8B,CAAC;AAYvD,eAAO,MAAM,eAAe,EAAE,UAAkC,CAAC;AACjE,eAAO,MAAM,aAAa,UAIzB,CAAC;AAEF,0GAA0G;AAC1G,wBAAgB,oBAAoB,CAAC,SAAS,GAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAa,EAAE,QAAQ,CAAC,EAAE,cAAc,GAAG,cAAc,CAatI"}

package/dist/context.js

@@ -0,0 +1,50 @@
+import { contexts as vcContexts } from '@digitalbazaar/credentials-context';
+import { contexts as diContexts } from '@digitalbazaar/data-integrity-context';
+import { contexts as multikeyContexts } from '@digitalbazaar/multikey-context';
+import { contexts as didContexts } from 'did-context';
+import { suiteContext } from '@digitalbazaar/ed25519-signature-2020';
+export const PROFILE_ID = 'vsc-draft-compat/0.1.0';
+export const UPSTREAM_REVISION = 'c279de3debcd6eab94a77034584d1750f5d65e6a';
+// Owned profile identifier. No invented context is served under a W3C URL.
+export const CONTEXT_URL = 'urn:bsv:vsc:context:0.1.0';
+const ns = 'urn:bsv:vsc:term:';
+const terms = {
+    '@version': 1.1, '@protected': true,
+    'VSC-SEAL': `${ns}SEAL`, VscEventAuthorisation: `${ns}EventAuthorisation`, VscCorrectionAuthorisation: `${ns}CorrectionAuthorisation`,
+    issuanceDate: { '@id': 'https://www.w3.org/2018/credentials#issuanceDate', '@type': 'http://www.w3.org/2001/XMLSchema#dateTime' },
+};
+for (const term of ['sealVersion', 'sealTimestamp', 'eventVector', 'what', 'when', 'where', 'who', 'how', 'scheme', 'value', 'schemeAuthority', 'serialNumber', 'batchOrLot', 'expiryDate', 'quantity', 'quantityUnit', 'eventTime', 'recordedAt', 'timezone', 'timePrecision', 'jurisdiction', 'actorRole', 'eventType', 'eventTypeVocab', 'businessStep', 'disposition', 'action', 'chainOfCustody', 'sequenceNumber', 'topology', 'topologyNote'])
+    terms[term] = `${ns}${term}`;
+for (const term of ['actorDid', 'assertionMethod', 'chainId', 'correctionOf', 'originalIssuer'])
+    terms[term] = { '@id': `${ns}${term}`, '@type': '@id' };
+for (const term of ['productIdentifiers'])
+    terms[term] = { '@id': `${ns}${term}`, '@container': '@set' };
+for (const term of ['parentSeals', 'childSeals', 'predecessorCredentials'])
+    terms[term] = { '@id': `${ns}${term}`, '@type': '@id', '@container': '@set' };
+for (const term of ['extensions', 'classifications', 'readPoint', 'businessLocation', 'geoCoordinates', 'actorLicense', 'permittedEventTypes', 'permittedProductSchemes', 'permittedJurisdictions', 'permittedRecordIds', 'permittedActions'])
+    terms[term] = { '@id': `${ns}${term}`, '@type': '@json' };
+export const PROFILE_CONTEXT = { '@context': terms };
+export const SEAL_CONTEXTS = [
+    'https://www.w3.org/ns/credentials/v2', CONTEXT_URL,
+    'https://w3id.org/security/suites/ed25519-2020/v1',
+    'https://w3id.org/security/data-integrity/v2',
+];
+/** Contexts are pinned package resources. External DID/credential retrieval is an explicit dependency. */
+export function createDocumentLoader(documents = new Map(), fallback) {
+    const builtins = new Map([
+        ...vcContexts, ...diContexts, ...multikeyContexts, ...didContexts,
+        ...suiteContext.contexts, [CONTEXT_URL, PROFILE_CONTEXT],
+    ]);
+    return async (url) => {
+        const document = builtins.get(url) ?? documents.get(url);
+        if (document)
+            return { document: structuredClone(document), documentUrl: url, contextUrl: null };
+        // Context substitution is never delegated to network loaders.
+        if (url.includes('/contexts/') || url.startsWith('urn:bsv:vsc:'))
+            throw new Error(`Unsupported context: ${url}`);
+        if (!fallback)
+            throw new Error(`No document available: ${url}`);
+        return fallback(url);
+    };
+}
+//# sourceMappingURL=context.js.map

package/dist/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,EAAE,QAAQ,IAAI,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAC/E,OAAO,EAAE,QAAQ,IAAI,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAGrE,MAAM,CAAC,MAAM,UAAU,GAAG,wBAAwB,CAAC;AACnD,MAAM,CAAC,MAAM,iBAAiB,GAAG,0CAA0C,CAAC;AAC5E,2EAA2E;AAC3E,MAAM,CAAC,MAAM,WAAW,GAAG,2BAA2B,CAAC;AACvD,MAAM,EAAE,GAAG,mBAAmB,CAAC;AAC/B,MAAM,KAAK,GAA4B;IACrC,UAAU,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI;IACnC,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,qBAAqB,EAAE,GAAG,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,GAAG,EAAE,yBAAyB;IACrI,YAAY,EAAE,EAAE,KAAK,EAAE,kDAAkD,EAAE,OAAO,EAAE,2CAA2C,EAAE;CAClI,CAAC;AACF,KAAK,MAAM,IAAI,IAAI,CAAC,aAAa,EAAC,eAAe,EAAC,aAAa,EAAC,MAAM,EAAC,MAAM,EAAC,OAAO,EAAC,KAAK,EAAC,KAAK,EAAC,QAAQ,EAAC,OAAO,EAAC,iBAAiB,EAAC,cAAc,EAAC,YAAY,EAAC,YAAY,EAAC,UAAU,EAAC,cAAc,EAAC,WAAW,EAAC,YAAY,EAAC,UAAU,EAAC,eAAe,EAAC,cAAc,EAAC,WAAW,EAAC,WAAW,EAAC,gBAAgB,EAAC,cAAc,EAAC,aAAa,EAAC,QAAQ,EAAC,gBAAgB,EAAC,gBAAgB,EAAC,UAAU,EAAC,cAAc,CAAC;IAAE,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;AACrb,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,EAAC,iBAAiB,EAAC,SAAS,EAAC,cAAc,EAAC,gBAAgB,CAAC;IAAE,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACrJ,KAAK,MAAM,IAAI,IAAI,CAAC,oBAAoB,CAAC;IAAE,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;AACzG,KAAK,MAAM,IAAI,IAAI,CAAC,aAAa,EAAC,YAAY,EAAC,wBAAwB,CAAC;IAAE,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;AACxJ,KAAK,MAAM,IAAI,IAAI,CAAC,YAAY,EAAC,iBAAiB,EAAC,WAAW,EAAC,kBAAkB,EAAC,gBAAgB,EAAC,cAAc,EAAC,qBAAqB,EAAC,yBAAyB,EAAC,wBAAwB,EAAC,oBAAoB,EAAC,kBAAkB,CAAC;IAAE,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC/R,MAAM,CAAC,MAAM,eAAe,GAAe,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AACjE,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,sCAAsC,EAAE,WAAW;IACnD,kDAAkD;IAClD,6CAA6C;CAC9C,CAAC;AAEF,0GAA0G;AAC1G,MAAM,UAAU,oBAAoB,CAAC,YAA6C,IAAI,GAAG,EAAE,EAAE,QAAyB;IACpH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAqB;QAC3C,GAAG,UAAU,EAAE,GAAG,UAAU,EAAE,GAAG,gBAAgB,EAAE,GAAG,WAAW;QACjE,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC;KACzD,CAAC,CAAC;IACH,OAAO,KAAK,EAAC,GAAG,EAAC,EAAE;QACjB,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzD,IAAI,QAAQ;YAAE,OAAO,EAAE,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QACjG,8DAA8D;QAC9D,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,EAAE,CAAC,CAAC;QACjH,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,EAAE,CAAC,CAAC;QAChE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC;AACJ,CAAC"}

package/dist/crypto.d.ts

@@ -0,0 +1,50 @@
+import type { Credential, DocumentLoader, Seal, Check } from './types.js';
+export interface SigningKey {
+    id: string;
+    controller: string;
+    signer(): unknown;
+}
+export declare const ALWAYS_DISCLOSED: readonly ["/id", "/type", "/issuer", "/validFrom", "/sealVersion", "/sealTimestamp", "/correctionOf", "/credentialSubject", "/credentialStatus", "/eventVector/what/productIdentifiers", "/eventVector/when/eventTime", "/eventVector/when/timezone", "/eventVector/where/jurisdiction", "/eventVector/who/actorDid", "/eventVector/who/actorRole", "/eventVector/who/assertionMethod", "/eventVector/how/eventType", "/eventVector/how/eventTypeVocab", "/eventVector/how/disposition", "/chainOfCustody/chainId"];
+export declare function signCredentialEd25519({ credential, key, documentLoader, date }: {
+    credential: Credential;
+    key: SigningKey;
+    documentLoader: DocumentLoader;
+    date?: string;
+}): Promise<Credential>;
+export declare function issueSealEd25519(options: {
+    credential: Seal;
+    key: SigningKey;
+    documentLoader: DocumentLoader;
+}): Promise<Seal>;
+export declare function issueSealBbs({ credential, key, documentLoader }: {
+    credential: Seal;
+    key: SigningKey;
+    documentLoader: DocumentLoader;
+}): Promise<Seal>;
+export declare function verifyCredentialProof({ credential, documentLoader, presentationHeader }: {
+    credential: Credential;
+    documentLoader: DocumentLoader;
+    presentationHeader?: Uint8Array;
+}): Promise<Check>;
+export interface PresentationBinding {
+    requestId: string;
+    challenge: string;
+    verifierDid: string;
+    holderDid: string;
+    expiresAt: string;
+}
+export declare function presentationHeader(binding: PresentationBinding): Uint8Array;
+/** Cryptographic disclosure primitive. Callers must separately authorise every optional pointer. */
+export declare function deriveSealPresentation({ credential, documentLoader, selectivePointers, binding }: {
+    credential: Seal;
+    documentLoader: DocumentLoader;
+    selectivePointers?: string[];
+    binding: PresentationBinding;
+}): Promise<Credential>;
+export declare function verifySealPresentation({ credential, documentLoader, binding, evaluationTime }: {
+    credential: Credential;
+    documentLoader: DocumentLoader;
+    binding: PresentationBinding;
+    evaluationTime?: string;
+}): Promise<Check>;
+//# sourceMappingURL=crypto.d.ts.map

package/dist/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAqB,IAAI,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAI7F,MAAM,WAAW,UAAU;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,IAAI,OAAO,CAAC;CAAE;AAClF,eAAO,MAAM,gBAAgB,qfAQnB,CAAC;AAQX,wBAAsB,qBAAqB,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE;IACrF,UAAU,EAAE,UAAU,CAAC;IAAC,GAAG,EAAE,UAAU,CAAC;IAAC,cAAc,EAAE,cAAc,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxF,GAAG,OAAO,CAAC,UAAU,CAAC,CAItB;AACD,wBAAsB,gBAAgB,CAAC,OAAO,EAAE;IAAE,UAAU,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,UAAU,CAAC;IAAC,cAAc,EAAE,cAAc,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAGpI;AACD,wBAAsB,YAAY,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,cAAc,EAAE,EAAE;IAAE,UAAU,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,UAAU,CAAC;IAAC,cAAc,EAAE,cAAc,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAM5J;AAoCD,wBAAsB,qBAAqB,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE;IAAE,UAAU,EAAE,UAAU,CAAC;IAAC,cAAc,EAAE,cAAc,CAAC;IAAC,kBAAkB,CAAC,EAAE,UAAU,CAAA;CAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAW3M;AACD,MAAM,WAAW,mBAAmB;IAAG,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;CAAE;AACzI,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,UAAU,CAG3E;AACD,oGAAoG;AACpG,wBAAsB,sBAAsB,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,iBAAsB,EAAE,OAAO,EAAE,EAAE;IAAE,UAAU,EAAE,IAAI,CAAC;IAAC,cAAc,EAAE,cAAc,CAAC;IAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,mBAAmB,CAAA;CAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAYnP;AACD,wBAAsB,sBAAsB,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,cAAyC,EAAE,EAAE;IAAE,UAAU,EAAE,UAAU,CAAC;IAAC,cAAc,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,mBAAmB,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAWlQ"}

package/dist/crypto.js

@@ -0,0 +1,141 @@
+import jsigs from 'jsonld-signatures';
+import { Ed25519Signature2020 } from '@digitalbazaar/ed25519-signature-2020';
+import { DataIntegrityProof } from '@digitalbazaar/data-integrity';
+import { createSignCryptosuite, createDiscloseCryptosuite, createVerifyCryptosuite } from '@digitalbazaar/bbs-2023-cryptosuite';
+import { validateSealStructure, validateSealPresentationStructure } from './validation.js';
+import { SEAL_CONTEXTS } from './context.js';
+export const ALWAYS_DISCLOSED = [
+    '/id', '/type', '/issuer', '/validFrom', '/sealVersion', '/sealTimestamp', '/correctionOf',
+    '/credentialSubject', '/credentialStatus',
+    '/eventVector/what/productIdentifiers', '/eventVector/when/eventTime',
+    '/eventVector/when/timezone', '/eventVector/where/jurisdiction',
+    '/eventVector/who/actorDid', '/eventVector/who/actorRole', '/eventVector/who/assertionMethod',
+    '/eventVector/how/eventType', '/eventVector/how/eventTypeVocab', '/eventVector/how/disposition',
+    '/chainOfCustody/chainId',
+];
+function assertUnsigned(seal, key) {
+    const validation = validateSealStructure(seal, { requireProof: false });
+    if (!validation.valid)
+        throw new Error(validation.errors.map(e => `${e.path}: ${e.message}`).join('; '));
+    if (seal.proof)
+        throw new Error('Issue a new immutable credential instead of replacing a proof');
+    if (seal.issuer !== key.controller || seal.eventVector.who.assertionMethod !== key.id)
+        throw new Error('Signing key must match the declared issuer and assertion method');
+}
+export async function signCredentialEd25519({ credential, key, documentLoader, date }) {
+    if (credential.issuer !== key.controller)
+        throw new Error('Signing key controller must match issuer');
+    const suite = new Ed25519Signature2020({ key, date: date ?? credential.validFrom });
+    return jsigs.sign(structuredClone(credential), { suite, purpose: new jsigs.purposes.AssertionProofPurpose(), documentLoader });
+}
+export async function issueSealEd25519(options) {
+    assertUnsigned(options.credential, options.key);
+    return await signCredentialEd25519(options);
+}
+export async function issueSealBbs({ credential, key, documentLoader }) {
+    assertUnsigned(credential, key);
+    const mandatoryPointers = ALWAYS_DISCLOSED.filter(p => p !== '/correctionOf' || credential.correctionOf !== null);
+    if (credential.validUntil)
+        mandatoryPointers.push('/validUntil');
+    const suite = new DataIntegrityProof({ signer: key.signer(), cryptosuite: createSignCryptosuite({ mandatoryPointers }) });
+    return jsigs.sign(structuredClone(credential), { suite, purpose: new jsigs.purposes.AssertionProofPurpose(), documentLoader });
+}
+async function issuerPurpose(credential, proof, documentLoader) {
+    if (typeof credential.issuer !== 'string' || !credential.issuer.startsWith('did:'))
+        throw new Error('Issuer must be a DID');
+    if (proof.proofPurpose !== 'assertionMethod')
+        throw new Error('Proof does not authorise an assertion');
+    const { document } = await documentLoader(credential.issuer);
+    if (document.id !== credential.issuer)
+        throw new Error('Resolved DID document does not identify the issuer');
+    const relationships = document.assertionMethod;
+    if (!Array.isArray(relationships) || !relationships.some(value => value === proof.verificationMethod || (typeof value === 'object' && value !== null && value.id === proof.verificationMethod)))
+        throw new Error('Issuer has not authorised this assertion method');
+    return new jsigs.purposes.AssertionProofPurpose({ controller: document });
+}
+function proofArray(credential) { return Array.isArray(credential.proof) ? credential.proof : credential.proof ? [credential.proof] : []; }
+function bbsDerived(proof) {
+    // The maintained suite parses and verifies the encoded proof. This prefix only selects its operation.
+    return proof.proofValue.startsWith('u2V0D');
+}
+async function verifyOne(credential, proof, documentLoader, presentationHeader) {
+    const purpose = await issuerPurpose(credential, proof, documentLoader);
+    let document = { ...structuredClone(credential), proof };
+    let suite;
+    if (proof.type === 'Ed25519Signature2020') {
+        if (presentationHeader)
+            throw new Error('An ordinary Ed25519 proof is not a request-bound selective presentation');
+        suite = new Ed25519Signature2020();
+    }
+    else if (proof.type === 'DataIntegrityProof' && proof.cryptosuite === 'bbs-2023') {
+        if (!bbsDerived(proof)) {
+            if (presentationHeader)
+                throw new Error('A presentation must contain a derived proof');
+            const selectivePointers = Object.keys(document).filter(k => k !== '@context' && k !== 'proof' && document[k] !== null).map(k => `/${k.replace(/~/g, '~0').replace(/\//g, '~1')}`);
+            document = await jsigs.derive(document, {
+                suite: new DataIntegrityProof({ cryptosuite: createDiscloseCryptosuite({ selectivePointers }) }), purpose, documentLoader,
+            });
+        }
+        suite = new DataIntegrityProof({ cryptosuite: createVerifyCryptosuite({ expectedPresentationHeader: presentationHeader }) });
+    }
+    else
+        throw new Error(`Unsupported proof suite: ${proof.type}/${proof.cryptosuite ?? ''}`);
+    const result = await jsigs.verify(document, { suite, purpose, documentLoader });
+    if (!result.verified)
+        throw new Error(result.error?.message ?? result.results?.[0]?.error?.message ?? 'Cryptographic proof failed');
+}
+export async function verifyCredentialProof({ credential, documentLoader, presentationHeader }) {
+    if (!Array.isArray(credential['@context']) || credential['@context'][0] !== SEAL_CONTEXTS[0] || credential['@context'].some(c => typeof c !== 'string' || !SEAL_CONTEXTS.includes(c)))
+        return { outcome: 'unsupported', issues: [{ code: 'context_unsupported', path: '/@context', message: 'Only pinned profile and standard contexts are accepted' }] };
+    const proofs = proofArray(credential);
+    if (!proofs.length)
+        return { outcome: 'invalid', issues: [{ code: 'proof_missing', path: '/proof', message: 'A secured credential is required' }] };
+    try {
+        for (const proof of proofs)
+            await verifyOne(credential, proof, documentLoader, presentationHeader);
+        return { outcome: 'verified', issues: [], evidence: proofs.map(p => p.verificationMethod) };
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return { outcome: message.startsWith('Unsupported') ? 'unsupported' : message.startsWith('No document available') ? 'indeterminate' : 'invalid', issues: [{ code: 'proof_failed', path: '/proof', message }] };
+    }
+}
+export function presentationHeader(binding) {
+    if (!binding.challenge || !binding.requestId || !binding.verifierDid.startsWith('did:') || !binding.holderDid.startsWith('did:') || !Number.isFinite(Date.parse(binding.expiresAt)))
+        throw new Error('Invalid presentation binding');
+    return new TextEncoder().encode(JSON.stringify([binding.requestId, binding.challenge, binding.verifierDid, binding.holderDid, binding.expiresAt]));
+}
+/** Cryptographic disclosure primitive. Callers must separately authorise every optional pointer. */
+export async function deriveSealPresentation({ credential, documentLoader, selectivePointers = [], binding }) {
+    const checked = await verifyCredentialProof({ credential, documentLoader });
+    if (checked.outcome !== 'verified')
+        throw new Error('Cannot derive from an unverified base credential');
+    const bbs = proofArray(credential).find(p => p.type === 'DataIntegrityProof' && p.cryptosuite === 'bbs-2023');
+    if (!bbs)
+        throw new Error('Credential has no BBS base proof');
+    const derived = await jsigs.derive({ ...structuredClone(credential), proof: bbs }, {
+        suite: new DataIntegrityProof({ cryptosuite: createDiscloseCryptosuite({ selectivePointers, presentationHeader: presentationHeader(binding) }) }),
+        purpose: await issuerPurpose(credential, bbs, documentLoader), documentLoader,
+    });
+    // RDF omits null; restore the profile's explicit original-record marker.
+    if (credential.correctionOf === null)
+        derived.correctionOf = null;
+    return derived;
+}
+export async function verifySealPresentation({ credential, documentLoader, binding, evaluationTime = new Date().toISOString() }) {
+    if (!Number.isFinite(Date.parse(evaluationTime)) || !Number.isFinite(Date.parse(binding.expiresAt)) || Date.parse(binding.expiresAt) <= Date.parse(evaluationTime))
+        return { outcome: 'invalid', issues: [{ code: 'presentation_expired', path: '', message: 'Presentation request has expired' }] };
+    const structure = validateSealPresentationStructure(credential);
+    if (!structure.valid)
+        return { outcome: 'invalid', issues: structure.errors };
+    const missing = ALWAYS_DISCLOSED.filter(pointer => {
+        let value = credential;
+        for (const part of pointer.slice(1).split('/'))
+            value = value && typeof value === 'object' ? value[part] : undefined;
+        return value === undefined;
+    });
+    if (missing.length)
+        return { outcome: 'invalid', issues: missing.map(path => ({ code: 'required_disclosure', path, message: 'Required presentation field is absent' })) };
+    return verifyCredentialProof({ credential, documentLoader, presentationHeader: presentationHeader(binding) });
+}
+//# sourceMappingURL=crypto.js.map

package/dist/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,mBAAmB,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAEhI,OAAO,EAAE,qBAAqB,EAAE,iCAAiC,EAAE,MAAM,iBAAiB,CAAC;AAC3F,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG7C,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,KAAK,EAAC,OAAO,EAAC,SAAS,EAAC,YAAY,EAAC,cAAc,EAAC,gBAAgB,EAAC,eAAe;IACpF,oBAAoB,EAAC,mBAAmB;IACxC,sCAAsC,EAAC,6BAA6B;IACpE,4BAA4B,EAAC,iCAAiC;IAC9D,2BAA2B,EAAC,4BAA4B,EAAC,kCAAkC;IAC3F,4BAA4B,EAAC,iCAAiC,EAAC,8BAA8B;IAC7F,yBAAyB;CACjB,CAAC;AAEX,SAAS,cAAc,CAAC,IAAU,EAAE,GAAe;IACjD,MAAM,UAAU,GAAG,qBAAqB,CAAC,IAAI,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;IACxE,IAAI,CAAC,UAAU,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACzG,IAAI,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACjG,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,eAAe,KAAK,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;AAC5K,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAElF;IACC,IAAI,UAAU,CAAC,MAAM,KAAK,GAAG,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACtG,MAAM,KAAK,GAAG,IAAI,oBAAoB,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC;IACpF,OAAO,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,qBAAqB,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;AACjI,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAA8E;IACnH,cAAc,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAChD,OAAO,MAAM,qBAAqB,CAAC,OAAO,CAAS,CAAC;AACtD,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,cAAc,EAAyE;IAC3I,cAAc,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAChC,MAAM,iBAAiB,GAAa,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,eAAe,IAAI,UAAU,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC;IAC5H,IAAI,UAAU,CAAC,UAAU;QAAE,iBAAiB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,IAAI,kBAAkB,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,qBAAqB,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1H,OAAO,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,qBAAqB,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;AACjI,CAAC;AACD,KAAK,UAAU,aAAa,CAAC,UAAsB,EAAE,KAAY,EAAE,cAA8B;IAC/F,IAAI,OAAO,UAAU,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC5H,IAAI,KAAK,CAAC,YAAY,KAAK,iBAAiB;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACvG,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC7D,IAAI,QAAQ,CAAC,EAAE,KAAK,UAAU,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IAC7G,MAAM,aAAa,GAAG,QAAQ,CAAC,eAAe,CAAC;IAC/C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,kBAAkB,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAK,KAAoB,CAAC,EAAE,KAAK,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACpR,OAAO,IAAI,KAAK,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC5E,CAAC;AACD,SAAS,UAAU,CAAC,UAAsB,IAAa,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAChK,SAAS,UAAU,CAAC,KAAY;IAC9B,sGAAsG;IACtG,OAAO,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AAC9C,CAAC;AACD,KAAK,UAAU,SAAS,CAAC,UAAsB,EAAE,KAAY,EAAE,cAA8B,EAAE,kBAA+B;IAC5H,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,UAAU,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;IACvE,IAAI,QAAQ,GAAG,EAAE,GAAG,eAAe,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC;IACzD,IAAI,KAAc,CAAC;IACnB,IAAI,KAAK,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;QAC1C,IAAI,kBAAkB;YAAE,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;QACnH,KAAK,GAAG,IAAI,oBAAoB,EAAE,CAAC;IACrC,CAAC;SACI,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,IAAI,KAAK,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QACjF,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACvB,IAAI,kBAAkB;gBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACvF,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,OAAO,IAAI,QAAQ,CAAC,CAA0B,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YAC3M,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;gBACtC,KAAK,EAAE,IAAI,kBAAkB,CAAC,EAAE,WAAW,EAAE,yBAAyB,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,cAAc;aAC1H,CAAC,CAAC;QACL,CAAC;QACD,KAAK,GAAG,IAAI,kBAAkB,CAAC,EAAE,WAAW,EAAE,uBAAuB,CAAC,EAAE,0BAA0B,EAAE,kBAAkB,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/H,CAAC;;QAAM,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC,CAAC;IAC5F,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;IAChF,IAAI,CAAC,MAAM,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,IAAI,4BAA4B,CAAC,CAAC;AACtI,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,kBAAkB,EAA+F;IACzL,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,wDAAwD,EAAE,CAAC,EAAE,CAAC;IAC1V,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,EAAE,CAAC;IACpJ,IAAI,CAAC;QACH,KAAK,MAAM,KAAK,IAAI,MAAM;YAAE,MAAM,SAAS,CAAC,UAAU,EAAE,KAAK,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC;QACnG,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC;IAC9F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACjN,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAA4B;IAC7D,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACrO,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AACrJ,CAAC;AACD,oGAAoG;AACpG,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,iBAAiB,GAAG,EAAE,EAAE,OAAO,EAAoH;IAC5N,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC,CAAC;IAC5E,IAAI,OAAO,CAAC,OAAO,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACxG,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,oBAAoB,IAAI,CAAC,CAAC,WAAW,KAAK,UAAU,CAAC,CAAC;IAC9G,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,eAAe,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACjF,KAAK,EAAE,IAAI,kBAAkB,CAAC,EAAE,WAAW,EAAE,yBAAyB,CAAC,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QACjJ,OAAO,EAAE,MAAM,aAAa,CAAC,UAAU,EAAE,GAAG,EAAE,cAAc,CAAC,EAAE,cAAc;KAC9E,CAAC,CAAC;IACH,yEAAyE;IACzE,IAAI,UAAU,CAAC,YAAY,KAAK,IAAI;QAAE,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAClE,OAAO,OAAO,CAAC;AACjB,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAqH;IAChP,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,EAAE,CAAC;IACrS,MAAM,SAAS,GAAG,iCAAiC,CAAC,UAAU,CAAC,CAAC;IAChE,IAAI,CAAC,SAAS,CAAC,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;IAC9E,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;QAChD,IAAI,KAAK,GAAY,UAAU,CAAC;QAChC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;YAAE,KAAK,GAAG,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACrI,OAAO,KAAK,KAAK,SAAS,CAAC;IAC7B,CAAC,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC,CAAC,EAAE,CAAC;IAC1K,OAAO,qBAAqB,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,kBAAkB,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAChH,CAAC"}

package/dist/did-web.d.ts

@@ -0,0 +1,9 @@
+import type { DocumentLoader } from './types.js';
+/** Resolve did:web using explicit operator-approved origins, with bounded reads and no redirects. */
+export declare function createDidWebResolver({ allowedOrigins, fetcher, timeoutMs, maxBytes }: {
+    allowedOrigins: readonly string[];
+    fetcher?: typeof globalThis.fetch;
+    timeoutMs?: number;
+    maxBytes?: number;
+}): DocumentLoader;
+//# sourceMappingURL=did-web.d.ts.map

package/dist/did-web.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"did-web.d.ts","sourceRoot":"","sources":["../src/did-web.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAc,MAAM,YAAY,CAAC;AAG7D,qGAAqG;AACrG,wBAAgB,oBAAoB,CAAC,EAAE,cAAc,EAAE,OAA0B,EAAE,SAAgB,EAAE,QAAiB,EAAE,EAAE;IACxH,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC7G,GAAG,cAAc,CAiCjB"}