@cmts-dev/carmentis-sdk-core 1.4.2 → 1.7.3

package/dist/crypto/signature/signer/binary/BinaryEndoding.d.ts

@@ -0,0 +1,9 @@
+export declare enum BinaryEncoding {
+    /** Hexadecimal encoding */
+    HEX = "hex",
+    /** Base64 encoding */
+    BASE64 = "base64",
+    /** Base64URL encoding (RFC 4648) */
+    BASE64URL = "base64url"
+}
+//# sourceMappingURL=BinaryEndoding.d.ts.map

package/dist/crypto/signature/signer/binary/BinaryEndoding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BinaryEndoding.d.ts","sourceRoot":"","sources":["../../../../../src/crypto/signature/signer/binary/BinaryEndoding.ts"],"names":[],"mappings":"AAAA,oBAAY,cAAc;IACtB,2BAA2B;IAC3B,GAAG,QAAQ;IACX,sBAAsB;IACtB,MAAM,WAAW;IACjB,oCAAoC;IACpC,SAAS,cAAc;CAC1B"}

package/dist/crypto/signature/signer/binary/BinarySigner.d.ts

@@ -0,0 +1,8 @@
+import { BinaryEncoding } from './BinaryEndoding';
+import { PrivateSignatureKey } from '../../PrivateSignatureKey';
+export declare class BinarySigner {
+    private signatureEncoding;
+    setSignatureEncoding(encoding: BinaryEncoding): this;
+    sign(sk: PrivateSignatureKey, messageEncoding: BinaryEncoding, encodedMessage: string): Promise<string>;
+}
+//# sourceMappingURL=BinarySigner.d.ts.map

package/dist/crypto/signature/signer/binary/BinarySigner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BinarySigner.d.ts","sourceRoot":"","sources":["../../../../../src/crypto/signature/signer/binary/BinarySigner.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,cAAc,EAAC,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAC,mBAAmB,EAAC,MAAM,2BAA2B,CAAC;AAI9D,qBAAa,YAAY;IACrB,OAAO,CAAC,iBAAiB,CAAsC;IAE/D,oBAAoB,CAAC,QAAQ,EAAE,cAAc;IAKvC,IAAI,CACN,EAAE,EAAE,mBAAmB,EACvB,eAAe,EAAE,cAAc,EAC/B,cAAc,EAAE,MAAM;CAM7B"}

package/dist/crypto/signature/signer/binary/BinaryVerifier.d.ts

@@ -0,0 +1,8 @@
+import { BinaryEncoding } from './BinaryEndoding';
+import { PublicSignatureKey } from '../../PublicSignatureKey';
+export declare class BinaryVerifier {
+    private signatureEncoding;
+    setSignatureEncoding(encoding: BinaryEncoding): this;
+    verify(pk: PublicSignatureKey, messageEncoding: BinaryEncoding, encodedMessage: string, signature: string): Promise<boolean>;
+}
+//# sourceMappingURL=BinaryVerifier.d.ts.map

package/dist/crypto/signature/signer/binary/BinaryVerifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BinaryVerifier.d.ts","sourceRoot":"","sources":["../../../../../src/crypto/signature/signer/binary/BinaryVerifier.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,cAAc,EAAC,MAAM,kBAAkB,CAAC;AAIhD,OAAO,EAAC,kBAAkB,EAAC,MAAM,0BAA0B,CAAC;AAE5D,qBAAa,cAAc;IACvB,OAAO,CAAC,iBAAiB,CAAsC;IAE/D,oBAAoB,CAAC,QAAQ,EAAE,cAAc;IAKvC,MAAM,CACR,EAAE,EAAE,kBAAkB,EACtB,eAAe,EAAE,cAAc,EAC/B,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,MAAM;CAMxB"}

package/dist/crypto/signature/signer/json/JsonCanonicalUtf8Signature.d.ts

@@ -0,0 +1,47 @@
+import { JsonSignature } from './JsonSignature';
+import { JsonCanonicalUtf8SignatureObject } from '../../../../type/JsonSignatureSchemas';
+export declare class JsonCanonicalUtf8Signature extends JsonSignature {
+    private readonly signatureObject;
+    constructor(signatureObject: JsonCanonicalUtf8SignatureObject);
+    getContext(): {
+        signedAt: number;
+        purpose: string;
+        target?: string | undefined;
+        requestedAt?: number | undefined;
+        notValidBefore?: number | undefined;
+        notValidAfter?: number | undefined;
+        allowOnChain?: boolean | undefined;
+        organizationId?: string | undefined;
+        applicationId?: string | undefined;
+        applicationLedgerId?: string | undefined;
+        applicationLedgerLatestMicroblockHash?: string | undefined;
+    } & {
+        [key: string]: unknown;
+    };
+    getPayload(): unknown;
+    getSignatureObject(): {
+        signatureType: import("../../../../carmentis-sdk-core").SignatureType.JSON_CANONICAL_UTF8;
+        signature: string;
+        signatureEncoding?: import('../binary/BinaryEndoding').BinaryEncoding | undefined;
+        publicKey?: string | undefined;
+        context: {
+            signedAt: number;
+            purpose: string;
+            target?: string | undefined;
+            requestedAt?: number | undefined;
+            notValidBefore?: number | undefined;
+            notValidAfter?: number | undefined;
+            allowOnChain?: boolean | undefined;
+            organizationId?: string | undefined;
+            applicationId?: string | undefined;
+            applicationLedgerId?: string | undefined;
+            applicationLedgerLatestMicroblockHash?: string | undefined;
+        } & {
+            [key: string]: unknown;
+        };
+        payload?: unknown;
+    } & {
+        [key: string]: unknown;
+    };
+}
+//# sourceMappingURL=JsonCanonicalUtf8Signature.d.ts.map

package/dist/crypto/signature/signer/json/JsonCanonicalUtf8Signature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"JsonCanonicalUtf8Signature.d.ts","sourceRoot":"","sources":["../../../../../src/crypto/signature/signer/json/JsonCanonicalUtf8Signature.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,aAAa,EAAC,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAC,gCAAgC,EAAC,MAAM,uCAAuC,CAAC;AAEvF,qBAAa,0BAA2B,SAAQ,aAAa;IAC7C,OAAO,CAAC,QAAQ,CAAC,eAAe;gBAAf,eAAe,EAAE,gCAAgC;IAK9E,UAAU;;;;;;;;;;;;;;;IAIV,UAAU;IAIV,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;CAGrB"}

package/dist/crypto/signature/signer/json/JsonCanonicalUtf8Signer.d.ts

@@ -0,0 +1,23 @@
+import { BinaryEncoding } from '../binary/BinaryEndoding';
+import { PrivateSignatureKey } from '../../PrivateSignatureKey';
+import { SignatureContext, SignatureObject } from '../../../../type/JsonSignatureSchemas';
+export declare class JsonCanonicalUtf8Signer {
+    private signatureEncoding;
+    private includePayload;
+    private includePublicKey;
+    private includeSignatureEncoding;
+    private location?;
+    setSignatureEncoding(encoding: BinaryEncoding): this;
+    setIncludePayload(shouldInclude: boolean): this;
+    setIncludePublicKey(shouldInclude: boolean): this;
+    setIncludeSignatureEncoding(shouldInclude: boolean): this;
+    /**
+     * Useful when the payload should not be referred here but elsewhere.
+     *
+     * When specified, the payload is automatically ignored in the returned signature
+     * and the provided location object is put inplace (flat).
+     */
+    setPayloadLocation(location: object): void;
+    sign(sk: PrivateSignatureKey, context: SignatureContext, payload: unknown): Promise<SignatureObject>;
+}
+//# sourceMappingURL=JsonCanonicalUtf8Signer.d.ts.map

package/dist/crypto/signature/signer/json/JsonCanonicalUtf8Signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"JsonCanonicalUtf8Signer.d.ts","sourceRoot":"","sources":["../../../../../src/crypto/signature/signer/json/JsonCanonicalUtf8Signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,cAAc,EAAC,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAC,mBAAmB,EAAC,MAAM,2BAA2B,CAAC;AAK9D,OAAO,EAAC,gBAAgB,EAAE,eAAe,EAAgB,MAAM,uCAAuC,CAAC;AAEvG,qBAAa,uBAAuB;IAChC,OAAO,CAAC,iBAAiB,CAAyC;IAClE,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,gBAAgB,CAAiB;IACzC,OAAO,CAAC,wBAAwB,CAAiB;IACjD,OAAO,CAAC,QAAQ,CAAC,CAAqB;IAEtC,oBAAoB,CAAC,QAAQ,EAAE,cAAc;IAK7C,iBAAiB,CAAC,aAAa,EAAE,OAAO;IAMxC,mBAAmB,CAAC,aAAa,EAAE,OAAO;IAK1C,2BAA2B,CAAC,aAAa,EAAE,OAAO;IAKlD;;;;;OAKG;IACH,kBAAkB,CAAC,QAAQ,EAAE,MAAM;IAK7B,IAAI,CACN,EAAE,EAAE,mBAAmB,EACvB,OAAO,EAAE,gBAAgB,EACzB,OAAO,EAAE,OAAO,GACjB,OAAO,CAAC,eAAe,CAAC;CAwB9B"}

package/dist/crypto/signature/signer/json/JsonCanonicalizationMethod.d.ts

@@ -0,0 +1,11 @@
+/**
+ * JSON canonicalization methods for transforming JSON objects before signature verification.
+ * Currently supports JSON Canonicalization Scheme (JCS) per RFC 8785.
+ * Additional methods can be added without breaking existing clients.
+ */
+export declare enum JsonCanonicalizationMethod {
+    /** RFC 8785 JSON Canonicalization Scheme */
+    JSON_CANONICAL = "json-canonical",
+    CBOR = "cbor"
+}
+//# sourceMappingURL=JsonCanonicalizationMethod.d.ts.map

package/dist/crypto/signature/signer/json/JsonCanonicalizationMethod.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"JsonCanonicalizationMethod.d.ts","sourceRoot":"","sources":["../../../../../src/crypto/signature/signer/json/JsonCanonicalizationMethod.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,oBAAY,0BAA0B;IAClC,4CAA4C;IAC5C,cAAc,mBAAmB;IACjC,IAAI,SAAS;CAChB"}

package/dist/crypto/signature/signer/json/JsonEncoder.d.ts

@@ -0,0 +1,5 @@
+import { JsonCanonicalizationMethod } from './JsonCanonicalizationMethod';
+export declare class JsonEncoder {
+    static encode(message: object, canonicalizationMethod: JsonCanonicalizationMethod): Uint8Array<ArrayBufferLike>;
+}
+//# sourceMappingURL=JsonEncoder.d.ts.map

package/dist/crypto/signature/signer/json/JsonEncoder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"JsonEncoder.d.ts","sourceRoot":"","sources":["../../../../../src/crypto/signature/signer/json/JsonEncoder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,0BAA0B,EAAC,MAAM,8BAA8B,CAAC;AAKxE,qBAAa,WAAW;IACpB,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,0BAA0B;CAYpF"}

package/dist/crypto/signature/signer/json/JsonSignature.d.ts

@@ -0,0 +1,9 @@
+import { SignatureContext, SignatureType } from '../../../../type/JsonSignatureSchemas';
+export declare abstract class JsonSignature {
+    private readonly signatureType;
+    constructor(signatureType: SignatureType);
+    getSignatureType(): SignatureType;
+    abstract getContext(): SignatureContext;
+    abstract getPayload(): unknown;
+}
+//# sourceMappingURL=JsonSignature.d.ts.map

package/dist/crypto/signature/signer/json/JsonSignature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"JsonSignature.d.ts","sourceRoot":"","sources":["../../../../../src/crypto/signature/signer/json/JsonSignature.ts"],"names":[],"mappings":"AAGA,OAAO,EAAC,gBAAgB,EAAyB,aAAa,EAAC,MAAM,uCAAuC,CAAC;AAG7G,8BAAsB,aAAa;IAE3B,OAAO,CAAC,QAAQ,CAAC,aAAa;gBAAb,aAAa,EAAE,aAAa;IAGjD,gBAAgB;IAIhB,QAAQ,CAAC,UAAU,IAAI,gBAAgB;IACvC,QAAQ,CAAC,UAAU,IAAI,OAAO;CACjC"}

package/dist/crypto/signature/signer/json/JsonSignatureParser.d.ts

@@ -0,0 +1,10 @@
+import { JsonSignature } from './JsonSignature';
+export declare class JsonSignatureParser {
+    /**
+     * Creates a signature object.
+     *
+     * @param object
+     */
+    static parse(object: unknown): JsonSignature;
+}
+//# sourceMappingURL=JsonSignatureParser.d.ts.map

package/dist/crypto/signature/signer/json/JsonSignatureParser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"JsonSignatureParser.d.ts","sourceRoot":"","sources":["../../../../../src/crypto/signature/signer/json/JsonSignatureParser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,aAAa,EAAC,MAAM,iBAAiB,CAAC;AAO9C,qBAAa,mBAAmB;IAC5B;;;;OAIG;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,GAAG,aAAa;CAU/C"}

package/dist/crypto/signature/signer/json/JsonSignatureUtils.d.ts

@@ -0,0 +1,9 @@
+import { SignatureJwk } from '../../jwk/JwkSignatureAlgorithm';
+import { SignatureContext } from '../../../../type/JsonSignatureSchemas';
+export declare function base64UrlToObject(input: string): any;
+export declare function bytesToBase64Url(bytes: Uint8Array): string;
+export declare function utf8StringToBase64Url(input: string): string;
+export declare function base64UrlToBytes(input: string): Uint8Array;
+export declare function determineJwsAlgorithm(jwk: SignatureJwk): string;
+export declare function deriveJwtClaimsFromSignatureContext(context: SignatureContext): Record<string, unknown>;
+//# sourceMappingURL=JsonSignatureUtils.d.ts.map

package/dist/crypto/signature/signer/json/JsonSignatureUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"JsonSignatureUtils.d.ts","sourceRoot":"","sources":["../../../../../src/crypto/signature/signer/json/JsonSignatureUtils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,YAAY,EAAC,MAAM,iCAAiC,CAAC;AAC7D,OAAO,EAAC,gBAAgB,EAAC,MAAM,uCAAuC,CAAC;AAKvE,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,OAI9C;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAiB1D;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAS1D;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,YAAY,GAAG,MAAM,CAwC/D;AAED,wBAAgB,mCAAmC,CAC/C,OAAO,EAAE,gBAAgB,GAC1B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CASzB"}

package/dist/crypto/signature/signer/json/JsonSignatureVerifier.d.ts

@@ -0,0 +1,12 @@
+import { PublicSignatureKey } from '../../PublicSignatureKey';
+import { JsonSignature } from './JsonSignature';
+import { SignatureVerification, SignatureVerificationContext } from '../../../../type/JsonSignatureSchemas';
+export declare class JsonSignatureVerifier {
+    private payload?;
+    setPayload(payload: unknown): this;
+    verify(pk: PublicSignatureKey, signature: JsonSignature, verificationContext?: SignatureVerificationContext): Promise<SignatureVerification>;
+    private verifyJsonCanonical;
+    private verifyJws;
+    private checkContext;
+}
+//# sourceMappingURL=JsonSignatureVerifier.d.ts.map

package/dist/crypto/signature/signer/json/JsonSignatureVerifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"JsonSignatureVerifier.d.ts","sourceRoot":"","sources":["../../../../../src/crypto/signature/signer/json/JsonSignatureVerifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,kBAAkB,EAAC,MAAM,0BAA0B,CAAC;AAM5D,OAAO,EACH,aAAa,EAChB,MAAM,iBAAiB,CAAC;AAIzB,OAAO,EAGH,qBAAqB,EACrB,4BAA4B,EAC/B,MAAM,uCAAuC,CAAC;AAG/C,qBAAa,qBAAqB;IAE9B,OAAO,CAAC,OAAO,CAAC,CAAU;IAE1B,UAAU,CAAC,OAAO,EAAE,OAAO;IAKrB,MAAM,CACR,EAAE,EAAE,kBAAkB,EACtB,SAAS,EAAE,aAAa,EACxB,mBAAmB,GAAE,4BAAiC,GACvD,OAAO,CAAC,qBAAqB,CAAC;YAenB,mBAAmB;YAgCnB,SAAS;IAiCvB,OAAO,CAAC,YAAY;CAkBvB"}

package/dist/crypto/signature/signer/json/JwsSignature.d.ts

@@ -0,0 +1,27 @@
+import { JwsSignatureObject } from '../../../../type/JsonSignatureSchemas';
+import { JsonSignature } from './JsonSignature';
+export declare class JwsSignature extends JsonSignature {
+    private readonly signature;
+    private readonly jws;
+    private readonly context;
+    private readonly payload;
+    constructor(signature: JwsSignatureObject);
+    getContext(): {
+        signedAt: number;
+        purpose: string;
+        target?: string | undefined;
+        requestedAt?: number | undefined;
+        notValidBefore?: number | undefined;
+        notValidAfter?: number | undefined;
+        allowOnChain?: boolean | undefined;
+        organizationId?: string | undefined;
+        applicationId?: string | undefined;
+        applicationLedgerId?: string | undefined;
+        applicationLedgerLatestMicroblockHash?: string | undefined;
+    } & {
+        [key: string]: unknown;
+    };
+    getPayload(): object;
+    getJws(): string;
+}
+//# sourceMappingURL=JwsSignature.d.ts.map

package/dist/crypto/signature/signer/json/JwsSignature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"JwsSignature.d.ts","sourceRoot":"","sources":["../../../../../src/crypto/signature/signer/json/JwsSignature.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,kBAAkB,EAA2C,MAAM,uCAAuC,CAAC;AACnH,OAAO,EAAC,aAAa,EAAC,MAAM,iBAAiB,CAAC;AAI9C,qBAAa,YAAa,SAAQ,aAAa;IAK/B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAJtC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAmB;IAC3C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAEJ,SAAS,EAAE,kBAAkB;IAU1D,UAAU;;;;;;;;;;;;;;;IAIV,UAAU;IAKV,MAAM,IAAI,MAAM;CAGnB"}

package/dist/crypto/signature/signer/json/JwsSigner.d.ts

@@ -0,0 +1,15 @@
+import { JwkPrivateSignatureKey } from '../../jwk/JwkPrivateSignatureKey';
+import { JwsSignatureObject, SignatureContext } from '../../../../type/JsonSignatureSchemas';
+export declare class JwsSigner {
+    private includePublicKey;
+    private typ;
+    /**
+     * Creates a JWS signature object from the given payload and signature context.
+     *
+     * @param sk The private signature key.
+     * @param context The context in which the signature is considered valid.
+     * @param payload The payload to sign.
+     */
+    sign(sk: JwkPrivateSignatureKey, context: SignatureContext, payload: Record<string, unknown>): Promise<JwsSignatureObject>;
+}
+//# sourceMappingURL=JwsSigner.d.ts.map

package/dist/crypto/signature/signer/json/JwsSigner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"JwsSigner.d.ts","sourceRoot":"","sources":["../../../../../src/crypto/signature/signer/json/JwsSigner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,sBAAsB,EAAC,MAAM,kCAAkC,CAAC;AAExE,OAAO,EAAC,kBAAkB,EAAE,gBAAgB,EAAgB,MAAM,uCAAuC,CAAC;AAQ1G,qBAAa,SAAS;IAClB,OAAO,CAAC,gBAAgB,CAAiB;IACzC,OAAO,CAAC,GAAG,CAAiB;IAE5B;;;;;;OAMG;IACG,IAAI,CACN,EAAE,EAAE,sBAAsB,EAC1B,OAAO,EAAE,gBAAgB,EACzB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,OAAO,CAAC,kBAAkB,CAAC;CAoDjC"}

package/dist/crypto/signature/signer/json/SignatureVerificationUtils.d.ts

@@ -0,0 +1,10 @@
+import { SignatureContext, SignatureVerification } from '../../../../type/JsonSignatureSchemas';
+export declare class SignatureVerificationUtils {
+    static invalidSignature(): SignatureVerification;
+    static malformed(): SignatureVerification;
+    static verified(context: SignatureContext, payload: unknown): SignatureVerification;
+    static notValidYet(): SignatureVerification;
+    static expired(): SignatureVerification;
+    static allowedOnChainNotMatch(): SignatureVerification;
+}
+//# sourceMappingURL=SignatureVerificationUtils.d.ts.map

package/dist/crypto/signature/signer/json/SignatureVerificationUtils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignatureVerificationUtils.d.ts","sourceRoot":"","sources":["../../../../../src/crypto/signature/signer/json/SignatureVerificationUtils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,gBAAgB,EAAE,qBAAqB,EAAC,MAAM,uCAAuC,CAAC;AAE9F,qBAAa,0BAA0B;IACnC,MAAM,CAAC,gBAAgB,IAAI,qBAAqB;IAOhD,MAAM,CAAC,SAAS,IAAI,qBAAqB;IAOzC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,GAAG,qBAAqB;IAQnF,MAAM,CAAC,WAAW,IAAI,qBAAqB;IAO3C,MAAM,CAAC,OAAO,IAAI,qBAAqB;IAOvC,MAAM,CAAC,sBAAsB,IAAI,qBAAqB;CAMzD"}

package/dist/tags/CertificateTagHandler.d.ts

@@ -0,0 +1,8 @@
+import { CertificateTag } from '../type/tags/CertificateTag';
+export declare class CertificateTagHandler {
+    private readonly certificateTag;
+    static fromObject(obj: unknown): CertificateTagHandler;
+    constructor(certificateTag: CertificateTag);
+    getX509Base64Der(): string;
+}
+//# sourceMappingURL=CertificateTagHandler.d.ts.map

package/dist/tags/CertificateTagHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CertificateTagHandler.d.ts","sourceRoot":"","sources":["../../src/tags/CertificateTagHandler.ts"],"names":[],"mappings":"AAEA,OAAO,EAAC,cAAc,EAAuB,MAAM,6BAA6B,CAAC;AAEjF,qBAAa,qBAAqB;IAQ1B,OAAO,CAAC,QAAQ,CAAC,cAAc;IAPnC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,qBAAqB;gBAOjC,cAAc,EAAE,cAAc;IAGnD,gBAAgB,IAAI,MAAM;CAG7B"}

package/dist/type/JsonSignatureSchemas.d.ts

@@ -0,0 +1,99 @@
+import { BinaryEncoding } from '../crypto/signature/signer/binary/BinaryEndoding';
+import * as v from "valibot";
+export declare const SignatureContextSchema: v.LooseObjectSchema<{
+    readonly signedAt: v.NumberSchema<undefined>;
+    readonly purpose: v.StringSchema<undefined>;
+    readonly target: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    readonly requestedAt: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+    readonly notValidBefore: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+    readonly notValidAfter: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+    readonly allowOnChain: v.OptionalSchema<v.BooleanSchema<undefined>, undefined>;
+    readonly organizationId: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    readonly applicationId: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    readonly applicationLedgerId: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    readonly applicationLedgerLatestMicroblockHash: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+}, undefined>;
+export type SignatureContext = v.InferOutput<typeof SignatureContextSchema>;
+export declare enum SignatureType {
+    JSON_CANONICAL_UTF8 = "json-canonical+utf8",
+    JWS = "jws"
+}
+export declare const JsonCanonicalUtf8SignatureSchema: v.LooseObjectSchema<{
+    readonly signatureType: v.LiteralSchema<SignatureType.JSON_CANONICAL_UTF8, undefined>;
+    readonly signature: v.StringSchema<undefined>;
+    readonly signatureEncoding: v.OptionalSchema<v.EnumSchema<typeof BinaryEncoding, undefined>, undefined>;
+    readonly publicKey: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    readonly context: v.LooseObjectSchema<{
+        readonly signedAt: v.NumberSchema<undefined>;
+        readonly purpose: v.StringSchema<undefined>;
+        readonly target: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        readonly requestedAt: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+        readonly notValidBefore: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+        readonly notValidAfter: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+        readonly allowOnChain: v.OptionalSchema<v.BooleanSchema<undefined>, undefined>;
+        readonly organizationId: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        readonly applicationId: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        readonly applicationLedgerId: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        readonly applicationLedgerLatestMicroblockHash: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    }, undefined>;
+    readonly payload: v.OptionalSchema<v.UnknownSchema, undefined>;
+}, undefined>;
+export type JsonCanonicalUtf8SignatureObject = v.InferOutput<typeof JsonCanonicalUtf8SignatureSchema>;
+export declare const JwsSignatureSchema: v.LooseObjectSchema<{
+    readonly signatureType: v.LiteralSchema<SignatureType.JWS, undefined>;
+    readonly jws: v.StringSchema<undefined>;
+    readonly publicKey: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+}, undefined>;
+export type JwsSignatureObject = v.InferOutput<typeof JwsSignatureSchema>;
+export declare const SignatureObjectSchema: v.VariantSchema<"signatureType", [v.LooseObjectSchema<{
+    readonly signatureType: v.LiteralSchema<SignatureType.JSON_CANONICAL_UTF8, undefined>;
+    readonly signature: v.StringSchema<undefined>;
+    readonly signatureEncoding: v.OptionalSchema<v.EnumSchema<typeof BinaryEncoding, undefined>, undefined>;
+    readonly publicKey: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    readonly context: v.LooseObjectSchema<{
+        readonly signedAt: v.NumberSchema<undefined>;
+        readonly purpose: v.StringSchema<undefined>;
+        readonly target: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        readonly requestedAt: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+        readonly notValidBefore: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+        readonly notValidAfter: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+        readonly allowOnChain: v.OptionalSchema<v.BooleanSchema<undefined>, undefined>;
+        readonly organizationId: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        readonly applicationId: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        readonly applicationLedgerId: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        readonly applicationLedgerLatestMicroblockHash: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    }, undefined>;
+    readonly payload: v.OptionalSchema<v.UnknownSchema, undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    readonly signatureType: v.LiteralSchema<SignatureType.JWS, undefined>;
+    readonly jws: v.StringSchema<undefined>;
+    readonly publicKey: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+}, undefined>], undefined>;
+export type SignatureObject = v.InferOutput<typeof SignatureObjectSchema>;
+export declare const SignatureVerificationContextSchema: v.LooseObjectSchema<{
+    readonly verifiedAt: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+    readonly shouldBeValidOnChain: v.NullishSchema<v.BooleanSchema<undefined>, undefined>;
+}, undefined>;
+export type SignatureVerificationContext = v.InferOutput<typeof SignatureVerificationContextSchema>;
+export declare const SignatureVerificationSchema: v.VariantSchema<"verified", [v.ObjectSchema<{
+    readonly verified: v.LiteralSchema<true, undefined>;
+    readonly context: v.LooseObjectSchema<{
+        readonly signedAt: v.NumberSchema<undefined>;
+        readonly purpose: v.StringSchema<undefined>;
+        readonly target: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        readonly requestedAt: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+        readonly notValidBefore: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+        readonly notValidAfter: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+        readonly allowOnChain: v.OptionalSchema<v.BooleanSchema<undefined>, undefined>;
+        readonly organizationId: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        readonly applicationId: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        readonly applicationLedgerId: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        readonly applicationLedgerLatestMicroblockHash: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    }, undefined>;
+    readonly payload: v.UnknownSchema;
+}, undefined>, v.ObjectSchema<{
+    readonly verified: v.LiteralSchema<false, undefined>;
+    readonly errors: v.ArraySchema<v.StringSchema<undefined>, undefined>;
+}, undefined>], undefined>;
+export type SignatureVerification = v.InferOutput<typeof SignatureVerificationSchema>;
+//# sourceMappingURL=JsonSignatureSchemas.d.ts.map

package/dist/type/JsonSignatureSchemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"JsonSignatureSchemas.d.ts","sourceRoot":"","sources":["../../src/type/JsonSignatureSchemas.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAC;AAC7B,OAAO,EAAC,cAAc,EAAC,MAAM,kDAAkD,CAAC;AAEhF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;aAuBjC,CAAA;AACF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E,oBAAY,aAAa;IACrB,mBAAmB,wBAAwB;IAC3C,GAAG,QAAQ;CACd;AAED,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;aAO3C,CAAA;AACF,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,gCAAgC,CAAC,CAAC;AACtG,eAAO,MAAM,kBAAkB;;;;aAI7B,CAAA;AACF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC1E,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;0BAGhC,CAAA;AACF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAC1E,eAAO,MAAM,kCAAkC;;;aAI7C,CAAA;AACF,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,kCAAkC,CAAC,CAAA;AACnG,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;0BAUtC,CAAA;AACF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,2BAA2B,CAAC,CAAA"}

package/dist/type/Resolver.d.ts

@@ -4,4 +4,6 @@ export declare const MLDSA65_TAG = "mldsa65";
 export declare const PKMS_TAG = "pkms";
 export declare const PUBLIC_KEY_TAG = "pk";
 export declare const SECRET_KEY_TAG = "sk";
+export declare const DID_TAG = "did";
+export declare const JWK_TAG = "jwk";
 //# sourceMappingURL=Resolver.d.ts.map

package/dist/type/Resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Resolver.d.ts","sourceRoot":"","sources":["../../src/type/Resolver.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,aAAa,QAAQ,CAAC;AAGnC,eAAO,MAAM,aAAa,cAAc,CAAC;AACzC,eAAO,MAAM,WAAW,YAAY,CAAC;AACrC,eAAO,MAAM,QAAQ,SAAS,CAAC;AAG/B,eAAO,MAAM,cAAc,OAAO,CAAC;AACnC,eAAO,MAAM,cAAc,OAAO,CAAC"}
+{"version":3,"file":"Resolver.d.ts","sourceRoot":"","sources":["../../src/type/Resolver.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,aAAa,QAAQ,CAAC;AAGnC,eAAO,MAAM,aAAa,cAAc,CAAC;AACzC,eAAO,MAAM,WAAW,YAAY,CAAC;AACrC,eAAO,MAAM,QAAQ,SAAS,CAAC;AAG/B,eAAO,MAAM,cAAc,OAAO,CAAC;AACnC,eAAO,MAAM,cAAc,OAAO,CAAC;AAGnC,eAAO,MAAM,OAAO,QAAQ,CAAC;AAC7B,eAAO,MAAM,OAAO,QAAQ,CAAC"}

package/dist/type/tags/CertificateTag.d.ts

@@ -0,0 +1,6 @@
+import * as v from 'valibot';
+export declare const CertificateTagSchema: v.ObjectSchema<{
+    readonly x509Base64Der: v.StringSchema<undefined>;
+}, undefined>;
+export type CertificateTag = v.InferOutput<typeof CertificateTagSchema>;
+//# sourceMappingURL=CertificateTag.d.ts.map

package/dist/type/tags/CertificateTag.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CertificateTag.d.ts","sourceRoot":"","sources":["../../../src/type/tags/CertificateTag.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAC;AAE7B,eAAO,MAAM,oBAAoB;;aAE/B,CAAA;AAEF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,oBAAoB,CAAC,CAAA"}

package/dist/type/tags/SignatureTag.d.ts

@@ -0,0 +1,27 @@
+import * as v from 'valibot';
+export declare const SignatureTagSchema: v.VariantSchema<"signatureType", [v.LooseObjectSchema<{
+    readonly signatureType: v.LiteralSchema<import("../JsonSignatureSchemas").SignatureType.JSON_CANONICAL_UTF8, undefined>;
+    readonly signature: v.StringSchema<undefined>;
+    readonly signatureEncoding: v.OptionalSchema<v.EnumSchema<typeof import('../../carmentis-sdk-core').BinaryEncoding, undefined>, undefined>;
+    readonly publicKey: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    readonly context: v.LooseObjectSchema<{
+        readonly signedAt: v.NumberSchema<undefined>;
+        readonly purpose: v.StringSchema<undefined>;
+        readonly target: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        readonly requestedAt: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+        readonly notValidBefore: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+        readonly notValidAfter: v.OptionalSchema<v.NumberSchema<undefined>, undefined>;
+        readonly allowOnChain: v.OptionalSchema<v.BooleanSchema<undefined>, undefined>;
+        readonly organizationId: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        readonly applicationId: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        readonly applicationLedgerId: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+        readonly applicationLedgerLatestMicroblockHash: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+    }, undefined>;
+    readonly payload: v.OptionalSchema<v.UnknownSchema, undefined>;
+}, undefined>, v.LooseObjectSchema<{
+    readonly signatureType: v.LiteralSchema<import("../JsonSignatureSchemas").SignatureType.JWS, undefined>;
+    readonly jws: v.StringSchema<undefined>;
+    readonly publicKey: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+}, undefined>], undefined>;
+export type SignatureTag = v.InferOutput<typeof SignatureTagSchema>;
+//# sourceMappingURL=SignatureTag.d.ts.map

package/dist/type/tags/SignatureTag.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SignatureTag.d.ts","sourceRoot":"","sources":["../../../src/type/tags/SignatureTag.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAG5B,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;0BAAwB,CAAA;AAEvD,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,kBAAkB,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "@cmts-dev/carmentis-sdk-core",
-  "version": "1.4.2",
+  "repository": "github:Carmentis/carmentis-sdk-core",
+  "version": "1.7.3",
   "license": "Apache-2.0",
   "main": "./dist/carmentis-sdk-core.cjs",
   "module": "./dist/carmentis-sdk-core.js",
@@ -34,9 +35,10 @@
     "@eslint/js": "^10.0.1",
     "@semantic-release/changelog": "^6.0.3",
     "@semantic-release/git": "^10.0.1",
-    "@semantic-release/github": "^12.0.6",
+    "@semantic-release/github": "^12.0.9",
     "@semantic-release/npm": "^13.1.5",
     "@types/jest": "^30.0.0",
+    "@types/lodash": "^4.17.25",
     "@types/node": "^25.5.2",
     "@typescript-eslint/eslint-plugin": "^8.59.4",
     "@typescript-eslint/parser": "^8.59.4",
@@ -58,9 +60,13 @@
     "@noble/hashes": "^1.7.1",
     "@noble/post-quantum": "^0.4.1",
     "@noble/secp256k1": "^2.2.3",
+    "canonical-json": "^0.4.0",
     "cbor-x": "^1.6.0",
     "decimal.js": "^10.6.0",
     "jose": "^6.2.2",
+    "json-canonicalize": "^3.0.0",
+    "lodash": "^4.18.1",
+    "ts-pattern": "^5.9.0",
     "valibot": "^1.2.0"
   }
 }