@credo-ts/core 0.4.1-alpha.157

package/build/modules/sd-jwt-vc/SdJwtVcService.js

@@ -0,0 +1,283 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SdJwtVcService = void 0;
+const core_1 = require("@sd-jwt/core");
+const decode_1 = require("@sd-jwt/decode");
+const tsyringe_1 = require("tsyringe");
+const crypto_1 = require("../../crypto");
+const utils_1 = require("../../utils");
+const dids_1 = require("../dids");
+const SdJwtVcError_1 = require("./SdJwtVcError");
+const repository_1 = require("./repository");
+/**
+ * @internal
+ */
+let SdJwtVcService = class SdJwtVcService {
+    constructor(sdJwtVcRepository) {
+        this.sdJwtVcRepository = sdJwtVcRepository;
+    }
+    async sign(agentContext, options) {
+        const { payload, disclosureFrame, hashingAlgorithm } = options;
+        // default is sha-256
+        if (hashingAlgorithm && hashingAlgorithm !== 'sha-256') {
+            throw new SdJwtVcError_1.SdJwtVcError(`Unsupported hashing algorithm used: ${hashingAlgorithm}`);
+        }
+        const issuer = await this.extractKeyFromIssuer(agentContext, options.issuer);
+        const holderBinding = await this.extractKeyFromHolderBinding(agentContext, options.holder);
+        const header = {
+            alg: issuer.alg,
+            typ: 'vc+sd-jwt',
+            kid: issuer.kid,
+        };
+        const sdJwtVc = new core_1.SdJwtVc({}, { disclosureFrame })
+            .withHasher(this.hasher)
+            .withSigner(this.signer(agentContext, issuer.key))
+            .withSaltGenerator(agentContext.wallet.generateNonce)
+            .withHeader(header)
+            .withPayload(Object.assign({}, payload));
+        // Add the `cnf` claim for the holder key binding
+        sdJwtVc.addPayloadClaim('cnf', holderBinding.cnf);
+        // Add `iss` claim
+        sdJwtVc.addPayloadClaim('iss', issuer.iss);
+        // Add the issued at (iat) claim
+        sdJwtVc.addPayloadClaim('iat', Math.floor(new Date().getTime() / 1000));
+        const compact = await sdJwtVc.toCompact();
+        if (!sdJwtVc.signature) {
+            throw new SdJwtVcError_1.SdJwtVcError('Invalid sd-jwt-vc state. Signature should have been set when calling `toCompact`.');
+        }
+        return {
+            compact,
+            prettyClaims: await sdJwtVc.getPrettyClaims(),
+            header: sdJwtVc.header,
+            payload: sdJwtVc.payload,
+        };
+    }
+    fromCompact(compactSdJwtVc) {
+        // NOTE: we use decodeSdJwtVc so we can make this method sync
+        const { decodedPayload, header, signedPayload } = (0, decode_1.decodeSdJwtVc)(compactSdJwtVc, utils_1.Hasher.hash);
+        return {
+            compact: compactSdJwtVc,
+            header: header,
+            payload: signedPayload,
+            prettyClaims: decodedPayload,
+        };
+    }
+    async present(agentContext, { compactSdJwtVc, presentationFrame, verifierMetadata }) {
+        const sdJwtVc = core_1.SdJwtVc.fromCompact(compactSdJwtVc).withHasher(this.hasher);
+        const holder = await this.extractKeyFromHolderBinding(agentContext, this.parseHolderBindingFromCredential(sdJwtVc));
+        const compactDerivedSdJwtVc = await sdJwtVc
+            .withKeyBinding(new core_1.KeyBinding({
+            header: {
+                alg: holder.alg,
+                typ: 'kb+jwt',
+            },
+            payload: {
+                iat: verifierMetadata.issuedAt,
+                nonce: verifierMetadata.nonce,
+                aud: verifierMetadata.audience,
+            },
+        }).withSigner(this.signer(agentContext, holder.key)))
+            .present(presentationFrame === true ? undefined : presentationFrame);
+        return compactDerivedSdJwtVc;
+    }
+    async verify(agentContext, { compactSdJwtVc, keyBinding, requiredClaimKeys }) {
+        const sdJwtVc = core_1.SdJwtVc.fromCompact(compactSdJwtVc).withHasher(this.hasher);
+        const issuer = await this.extractKeyFromIssuer(agentContext, this.parseIssuerFromCredential(sdJwtVc));
+        const holder = await this.extractKeyFromHolderBinding(agentContext, this.parseHolderBindingFromCredential(sdJwtVc));
+        const verificationResult = await sdJwtVc.verify(this.verifier(agentContext), requiredClaimKeys, holder.cnf, (0, crypto_1.getJwkFromKey)(holder.key).toJson(), (0, crypto_1.getJwkFromKey)(issuer.key).toJson());
+        // If keyBinding is present, verify the key binding
+        try {
+            if (keyBinding) {
+                if (!sdJwtVc.keyBinding || !sdJwtVc.keyBinding.payload) {
+                    throw new SdJwtVcError_1.SdJwtVcError('Keybinding is required for verification of the sd-jwt-vc');
+                }
+                // Assert `aud` and `nonce` claims
+                sdJwtVc.keyBinding.assertClaimInPayload('aud', keyBinding.audience);
+                sdJwtVc.keyBinding.assertClaimInPayload('nonce', keyBinding.nonce);
+            }
+        }
+        catch (error) {
+            verificationResult.isKeyBindingValid = false;
+            verificationResult.isValid = false;
+        }
+        return {
+            verification: verificationResult,
+            sdJwtVc: {
+                payload: sdJwtVc.payload,
+                header: sdJwtVc.header,
+                compact: compactSdJwtVc,
+                prettyClaims: await sdJwtVc.getPrettyClaims(),
+            },
+        };
+    }
+    async store(agentContext, compactSdJwtVc) {
+        const sdJwtVcRecord = new repository_1.SdJwtVcRecord({
+            compactSdJwtVc,
+        });
+        await this.sdJwtVcRepository.save(agentContext, sdJwtVcRecord);
+        return sdJwtVcRecord;
+    }
+    async getById(agentContext, id) {
+        return await this.sdJwtVcRepository.getById(agentContext, id);
+    }
+    async getAll(agentContext) {
+        return await this.sdJwtVcRepository.getAll(agentContext);
+    }
+    async findByQuery(agentContext, query) {
+        return await this.sdJwtVcRepository.findByQuery(agentContext, query);
+    }
+    async deleteById(agentContext, id) {
+        await this.sdJwtVcRepository.deleteById(agentContext, id);
+    }
+    async update(agentContext, sdJwtVcRecord) {
+        await this.sdJwtVcRepository.update(agentContext, sdJwtVcRecord);
+    }
+    async resolveDidUrl(agentContext, didUrl) {
+        const didResolver = agentContext.dependencyManager.resolve(dids_1.DidResolverService);
+        const didDocument = await didResolver.resolveDidDocument(agentContext, didUrl);
+        return {
+            verificationMethod: didDocument.dereferenceKey(didUrl, ['assertionMethod']),
+            didDocument,
+        };
+    }
+    get hasher() {
+        return {
+            algorithm: core_1.HasherAlgorithm.Sha256,
+            hasher: utils_1.Hasher.hash,
+        };
+    }
+    /**
+     * @todo validate the JWT header (alg)
+     */
+    signer(agentContext, key) {
+        return async (input) => agentContext.wallet.sign({ key, data: utils_1.TypedArrayEncoder.fromString(input) });
+    }
+    /**
+     * @todo validate the JWT header (alg)
+     */
+    verifier(agentContext) {
+        return async ({ message, signature, publicKeyJwk }) => {
+            if (!publicKeyJwk) {
+                throw new SdJwtVcError_1.SdJwtVcError('The public key used to verify the signature is missing');
+            }
+            return await agentContext.wallet.verify({
+                signature: utils_1.Buffer.from(signature),
+                key: (0, crypto_1.getJwkFromJson)(publicKeyJwk).key,
+                data: utils_1.TypedArrayEncoder.fromString(message),
+            });
+        };
+    }
+    async extractKeyFromIssuer(agentContext, issuer) {
+        if (issuer.method === 'did') {
+            const parsedDid = (0, dids_1.parseDid)(issuer.didUrl);
+            if (!parsedDid.fragment) {
+                throw new SdJwtVcError_1.SdJwtVcError(`didUrl '${issuer.didUrl}' does not contain a '#'. Unable to derive key from did document`);
+            }
+            const { verificationMethod } = await this.resolveDidUrl(agentContext, issuer.didUrl);
+            const key = (0, dids_1.getKeyFromVerificationMethod)(verificationMethod);
+            const alg = (0, crypto_1.getJwkFromKey)(key).supportedSignatureAlgorithms[0];
+            return {
+                alg,
+                key,
+                iss: parsedDid.did,
+                kid: `#${parsedDid.fragment}`,
+            };
+        }
+        throw new SdJwtVcError_1.SdJwtVcError("Unsupported credential issuer. Only 'did' is supported at the moment.");
+    }
+    parseIssuerFromCredential(sdJwtVc) {
+        const iss = sdJwtVc.getClaimInPayload('iss');
+        if (iss.startsWith('did:')) {
+            // If `did` is used, we require a relative KID to be present to identify
+            // the key used by issuer to sign the sd-jwt-vc
+            sdJwtVc.assertClaimInHeader('kid');
+            const issuerKid = sdJwtVc.getClaimInHeader('kid');
+            let didUrl;
+            if (issuerKid.startsWith('#')) {
+                didUrl = `${iss}${issuerKid}`;
+            }
+            else if (issuerKid.startsWith('did:')) {
+                const didFromKid = (0, dids_1.parseDid)(issuerKid);
+                if (didFromKid.did !== iss) {
+                    throw new SdJwtVcError_1.SdJwtVcError(`kid in header is an absolute DID URL, but the did (${didFromKid.did}) does not match with the 'iss' did (${iss})`);
+                }
+                didUrl = issuerKid;
+            }
+            else {
+                throw new SdJwtVcError_1.SdJwtVcError('Invalid issuer kid for did. Only absolute or relative (starting with #) did urls are supported.');
+            }
+            return {
+                method: 'did',
+                didUrl,
+            };
+        }
+        throw new SdJwtVcError_1.SdJwtVcError("Unsupported 'iss' value. Only did is supported at the moment.");
+    }
+    parseHolderBindingFromCredential(sdJwtVc) {
+        const cnf = sdJwtVc.getClaimInPayload('cnf');
+        if (cnf.jwk) {
+            return {
+                method: 'jwk',
+                jwk: cnf.jwk,
+            };
+        }
+        else if (cnf.kid) {
+            if (!cnf.kid.startsWith('did:') || !cnf.kid.includes('#')) {
+                throw new SdJwtVcError_1.SdJwtVcError('Invalid holder kid for did. Only absolute KIDs for cnf are supported');
+            }
+            return {
+                method: 'did',
+                didUrl: cnf.kid,
+            };
+        }
+        throw new SdJwtVcError_1.SdJwtVcError("Unsupported credential holder binding. Only 'did' and 'jwk' are supported at the moment.");
+    }
+    async extractKeyFromHolderBinding(agentContext, holder) {
+        if (holder.method === 'did') {
+            const parsedDid = (0, dids_1.parseDid)(holder.didUrl);
+            if (!parsedDid.fragment) {
+                throw new SdJwtVcError_1.SdJwtVcError(`didUrl '${holder.didUrl}' does not contain a '#'. Unable to derive key from did document`);
+            }
+            const { verificationMethod } = await this.resolveDidUrl(agentContext, holder.didUrl);
+            const key = (0, dids_1.getKeyFromVerificationMethod)(verificationMethod);
+            const alg = (0, crypto_1.getJwkFromKey)(key).supportedSignatureAlgorithms[0];
+            return {
+                alg,
+                key,
+                cnf: {
+                    // We need to include the whole didUrl here, otherwise the verifier
+                    // won't know which did it is associated with
+                    kid: holder.didUrl,
+                },
+            };
+        }
+        else if (holder.method === 'jwk') {
+            const jwk = holder.jwk instanceof crypto_1.Jwk ? holder.jwk : (0, crypto_1.getJwkFromJson)(holder.jwk);
+            const key = jwk.key;
+            const alg = jwk.supportedSignatureAlgorithms[0];
+            return {
+                alg,
+                key,
+                cnf: {
+                    jwk: jwk.toJson(),
+                },
+            };
+        }
+        throw new SdJwtVcError_1.SdJwtVcError("Unsupported credential holder binding. Only 'did' and 'jwk' are supported at the moment.");
+    }
+};
+SdJwtVcService = __decorate([
+    (0, tsyringe_1.injectable)(),
+    __metadata("design:paramtypes", [repository_1.SdJwtVcRepository])
+], SdJwtVcService);
+exports.SdJwtVcService = SdJwtVcService;
+//# sourceMappingURL=SdJwtVcService.js.map

package/build/modules/sd-jwt-vc/SdJwtVcService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SdJwtVcService.js","sourceRoot":"","sources":["../../../src/modules/sd-jwt-vc/SdJwtVcService.ts"],"names":[],"mappings":";;;;;;;;;;;;AAcA,uCAA+E;AAC/E,2CAA8C;AAC9C,uCAAqC;AAErC,yCAAiE;AACjE,uCAA+D;AAC/D,kCAAoF;AAEpF,iDAA6C;AAC7C,6CAA+D;AAgB/D;;GAEG;AAEI,IAAM,cAAc,GAApB,MAAM,cAAc;IAGzB,YAAmB,iBAAoC;QACrD,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAA;IAC5C,CAAC;IAEM,KAAK,CAAC,IAAI,CAAiC,YAA0B,EAAE,OAAoC;QAChH,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAA;QAE9D,qBAAqB;QACrB,IAAI,gBAAgB,IAAI,gBAAgB,KAAK,SAAS,EAAE;YACtD,MAAM,IAAI,2BAAY,CAAC,uCAAuC,gBAAgB,EAAE,CAAC,CAAA;SAClF;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;QAC5E,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;QAE1F,MAAM,MAAM,GAAG;YACb,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,GAAG,EAAE,WAAW;YAChB,GAAG,EAAE,MAAM,CAAC,GAAG;SACP,CAAA;QAEV,MAAM,OAAO,GAAG,IAAI,cAAQ,CAAyB,EAAE,EAAE,EAAE,eAAe,EAAE,CAAC;aAC1E,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;aACvB,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;aACjD,iBAAiB,CAAC,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC;aACpD,UAAU,CAAC,MAAM,CAAC;aAClB,WAAW,mBAAM,OAAO,EAAG,CAAA;QAE9B,iDAAiD;QACjD,OAAO,CAAC,eAAe,CAAC,KAAK,EAAE,aAAa,CAAC,GAAG,CAAC,CAAA;QAEjD,kBAAkB;QAClB,OAAO,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAA;QAE1C,gCAAgC;QAChC,OAAO,CAAC,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,CAAA;QAEvE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,CAAA;QACzC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;YACtB,MAAM,IAAI,2BAAY,CAAC,mFAAmF,CAAC,CAAA;SAC5G;QAED,OAAO;YACL,OAAO;YACP,YAAY,EAAE,MAAM,OAAO,CAAC,eAAe,EAAE;YAC7C,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,OAAO,CAAC,OAAO;SACiB,CAAA;IAC7C,CAAC;IAEM,WAAW,CAChB,cAAsB;QAEtB,6DAA6D;QAC7D,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,IAAA,sBAAa,EAAC,cAAc,EAAE,cAAM,CAAC,IAAI,CAAC,CAAA;QAE5F,OAAO;YACL,OAAO,EAAE,cAAc;YACvB,MAAM,EAAE,MAAgB;YACxB,OAAO,EAAE,aAAwB;YACjC,YAAY,EAAE,cAAyB;SACxC,CAAA;IACH,CAAC;IAEM,KAAK,CAAC,OAAO,CAClB,YAA0B,EAC1B,EAAE,cAAc,EAAE,iBAAiB,EAAE,gBAAgB,EAAkC;QAEvF,MAAM,OAAO,GAAG,cAAQ,CAAC,WAAW,CAAS,cAAc,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACpF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,YAAY,EAAE,IAAI,CAAC,gCAAgC,CAAC,OAAO,CAAC,CAAC,CAAA;QAEnH,MAAM,qBAAqB,GAAG,MAAM,OAAO;aACxC,cAAc,CACb,IAAI,iBAAU,CAAC;YACb,MAAM,EAAE;gBACN,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,GAAG,EAAE,QAAQ;aACd;YACD,OAAO,EAAE;gBACP,GAAG,EAAE,gBAAgB,CAAC,QAAQ;gBAC9B,KAAK,EAAE,gBAAgB,CAAC,KAAK;gBAC7B,GAAG,EAAE,gBAAgB,CAAC,QAAQ;aAC/B;SACF,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CACrD;aACA,OAAO,CAAC,iBAAiB,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAA;QAEtE,OAAO,qBAAqB,CAAA;IAC9B,CAAC;IAEM,KAAK,CAAC,MAAM,CACjB,YAA0B,EAC1B,EAAE,cAAc,EAAE,UAAU,EAAE,iBAAiB,EAAwB;QAEvE,MAAM,OAAO,GAAG,cAAQ,CAAC,WAAW,CAAkB,cAAc,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAE7F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,YAAY,EAAE,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC,CAAA;QACrG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,YAAY,EAAE,IAAI,CAAC,gCAAgC,CAAC,OAAO,CAAC,CAAC,CAAA;QAEnH,MAAM,kBAAkB,GAAG,MAAM,OAAO,CAAC,MAAM,CAC7C,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAC3B,iBAAiB,EACjB,MAAM,CAAC,GAAG,EACV,IAAA,sBAAa,EAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAClC,IAAA,sBAAa,EAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CACnC,CAAA;QAED,mDAAmD;QACnD,IAAI;YACF,IAAI,UAAU,EAAE;gBACd,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE;oBACtD,MAAM,IAAI,2BAAY,CAAC,0DAA0D,CAAC,CAAA;iBACnF;gBAED,kCAAkC;gBAClC,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,KAAK,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAA;gBACnE,OAAO,CAAC,UAAU,CAAC,oBAAoB,CAAC,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,CAAA;aACnE;SACF;QAAC,OAAO,KAAK,EAAE;YACd,kBAAkB,CAAC,iBAAiB,GAAG,KAAK,CAAA;YAC5C,kBAAkB,CAAC,OAAO,GAAG,KAAK,CAAA;SACnC;QAED,OAAO;YACL,YAAY,EAAE,kBAAkB;YAChC,OAAO,EAAE;gBACP,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE,cAAc;gBACvB,YAAY,EAAE,MAAM,OAAO,CAAC,eAAe,EAAE;aACX;SACrC,CAAA;IACH,CAAC;IAEM,KAAK,CAAC,KAAK,CAAC,YAA0B,EAAE,cAAsB;QACnE,MAAM,aAAa,GAAG,IAAI,0BAAa,CAAC;YACtC,cAAc;SACf,CAAC,CAAA;QACF,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,CAAA;QAE9D,OAAO,aAAa,CAAA;IACtB,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,YAA0B,EAAE,EAAU;QACzD,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAA;IAC/D,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,YAA0B;QAC5C,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;IAC1D,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,YAA0B,EAAE,KAA2B;QAC9E,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;IACtE,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,YAA0B,EAAE,EAAU;QAC5D,MAAM,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,YAAY,EAAE,EAAE,CAAC,CAAA;IAC3D,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,YAA0B,EAAE,aAA4B;QAC1E,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC,CAAA;IAClE,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,YAA0B,EAAE,MAAc;QACpE,MAAM,WAAW,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,yBAAkB,CAAC,CAAA;QAC9E,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,kBAAkB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAA;QAE9E,OAAO;YACL,kBAAkB,EAAE,WAAW,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,iBAAiB,CAAC,CAAC;YAC3E,WAAW;SACZ,CAAA;IACH,CAAC;IAED,IAAY,MAAM;QAChB,OAAO;YACL,SAAS,EAAE,sBAAe,CAAC,MAAM;YACjC,MAAM,EAAE,cAAM,CAAC,IAAI;SACpB,CAAA;IACH,CAAC;IAED;;OAEG;IACK,MAAM,CAA+C,YAA0B,EAAE,GAAQ;QAC/F,OAAO,KAAK,EAAE,KAAa,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,yBAAiB,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAC9G,CAAC;IAED;;OAEG;IACK,QAAQ,CAA+C,YAA0B;QACvF,OAAO,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,EAAE;YACpD,IAAI,CAAC,YAAY,EAAE;gBACjB,MAAM,IAAI,2BAAY,CAAC,wDAAwD,CAAC,CAAA;aACjF;YAED,OAAO,MAAM,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC;gBACtC,SAAS,EAAE,cAAM,CAAC,IAAI,CAAC,SAAS,CAAC;gBACjC,GAAG,EAAE,IAAA,uBAAc,EAAC,YAAuB,CAAC,CAAC,GAAG;gBAChD,IAAI,EAAE,yBAAiB,CAAC,UAAU,CAAC,OAAO,CAAC;aAC5C,CAAC,CAAA;QACJ,CAAC,CAAA;IACH,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAAC,YAA0B,EAAE,MAAqB;QAClF,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,EAAE;YAC3B,MAAM,SAAS,GAAG,IAAA,eAAQ,EAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YACzC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE;gBACvB,MAAM,IAAI,2BAAY,CACpB,WAAW,MAAM,CAAC,MAAM,kEAAkE,CAC3F,CAAA;aACF;YAED,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;YACpF,MAAM,GAAG,GAAG,IAAA,mCAA4B,EAAC,kBAAkB,CAAC,CAAA;YAC5D,MAAM,GAAG,GAAG,IAAA,sBAAa,EAAC,GAAG,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAA;YAE9D,OAAO;gBACL,GAAG;gBACH,GAAG;gBACH,GAAG,EAAE,SAAS,CAAC,GAAG;gBAClB,GAAG,EAAE,IAAI,SAAS,CAAC,QAAQ,EAAE;aAC9B,CAAA;SACF;QAED,MAAM,IAAI,2BAAY,CAAC,uEAAuE,CAAC,CAAA;IACjG,CAAC;IAEO,yBAAyB,CAC/B,OAAkC;QAElC,MAAM,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAS,KAAK,CAAC,CAAA;QAEpD,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE;YAC1B,wEAAwE;YACxE,+CAA+C;YAC/C,OAAO,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAA;YAClC,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAS,KAAK,CAAC,CAAA;YAEzD,IAAI,MAAc,CAAA;YAClB,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE;gBAC7B,MAAM,GAAG,GAAG,GAAG,GAAG,SAAS,EAAE,CAAA;aAC9B;iBAAM,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE;gBACvC,MAAM,UAAU,GAAG,IAAA,eAAQ,EAAC,SAAS,CAAC,CAAA;gBACtC,IAAI,UAAU,CAAC,GAAG,KAAK,GAAG,EAAE;oBAC1B,MAAM,IAAI,2BAAY,CACpB,sDAAsD,UAAU,CAAC,GAAG,wCAAwC,GAAG,GAAG,CACnH,CAAA;iBACF;gBAED,MAAM,GAAG,SAAS,CAAA;aACnB;iBAAM;gBACL,MAAM,IAAI,2BAAY,CACpB,iGAAiG,CAClG,CAAA;aACF;YAED,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,MAAM;aACP,CAAA;SACF;QACD,MAAM,IAAI,2BAAY,CAAC,+DAA+D,CAAC,CAAA;IACzF,CAAC;IAEO,gCAAgC,CACtC,OAAkC;QAElC,MAAM,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAkC,KAAK,CAAC,CAAA;QAE7E,IAAI,GAAG,CAAC,GAAG,EAAE;YACX,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,GAAG,CAAC,GAAG;aACb,CAAA;SACF;aAAM,IAAI,GAAG,CAAC,GAAG,EAAE;YAClB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE;gBACzD,MAAM,IAAI,2BAAY,CAAC,sEAAsE,CAAC,CAAA;aAC/F;YACD,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,GAAG,CAAC,GAAG;aAChB,CAAA;SACF;QAED,MAAM,IAAI,2BAAY,CAAC,0FAA0F,CAAC,CAAA;IACpH,CAAC;IAEO,KAAK,CAAC,2BAA2B,CAAC,YAA0B,EAAE,MAA4B;QAChG,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,EAAE;YAC3B,MAAM,SAAS,GAAG,IAAA,eAAQ,EAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YACzC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE;gBACvB,MAAM,IAAI,2BAAY,CACpB,WAAW,MAAM,CAAC,MAAM,kEAAkE,CAC3F,CAAA;aACF;YAED,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;YACpF,MAAM,GAAG,GAAG,IAAA,mCAA4B,EAAC,kBAAkB,CAAC,CAAA;YAC5D,MAAM,GAAG,GAAG,IAAA,sBAAa,EAAC,GAAG,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAA;YAE9D,OAAO;gBACL,GAAG;gBACH,GAAG;gBACH,GAAG,EAAE;oBACH,mEAAmE;oBACnE,6CAA6C;oBAC7C,GAAG,EAAE,MAAM,CAAC,MAAM;iBACnB;aACF,CAAA;SACF;aAAM,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,EAAE;YAClC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,YAAY,YAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAA,uBAAc,EAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAC/E,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAA;YACnB,MAAM,GAAG,GAAG,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAA;YAE/C,OAAO;gBACL,GAAG;gBACH,GAAG;gBACH,GAAG,EAAE;oBACH,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE;iBAClB;aACF,CAAA;SACF;QAED,MAAM,IAAI,2BAAY,CAAC,0FAA0F,CAAC,CAAA;IACpH,CAAC;CACF,CAAA;AAzUY,cAAc;IAD1B,IAAA,qBAAU,GAAE;qCAI2B,8BAAiB;GAH5C,cAAc,CAyU1B;AAzUY,wCAAc"}

package/build/modules/sd-jwt-vc/index.d.ts

@@ -0,0 +1,6 @@
+export * from './SdJwtVcApi';
+export * from './SdJwtVcModule';
+export * from './SdJwtVcService';
+export * from './SdJwtVcError';
+export * from './SdJwtVcOptions';
+export * from './repository';

package/build/modules/sd-jwt-vc/index.js

@@ -0,0 +1,23 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./SdJwtVcApi"), exports);
+__exportStar(require("./SdJwtVcModule"), exports);
+__exportStar(require("./SdJwtVcService"), exports);
+__exportStar(require("./SdJwtVcError"), exports);
+__exportStar(require("./SdJwtVcOptions"), exports);
+__exportStar(require("./repository"), exports);
+//# sourceMappingURL=index.js.map

package/build/modules/sd-jwt-vc/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/modules/sd-jwt-vc/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+CAA4B;AAC5B,kDAA+B;AAC/B,mDAAgC;AAChC,iDAA8B;AAC9B,mDAAgC;AAChC,+CAA4B"}

package/build/modules/sd-jwt-vc/repository/SdJwtVcRecord.d.ts

@@ -0,0 +1,32 @@
+import type { JwaSignatureAlgorithm } from '../../../crypto';
+import type { TagsBase } from '../../../storage/BaseRecord';
+import { BaseRecord } from '../../../storage/BaseRecord';
+export type DefaultSdJwtVcRecordTags = {
+    vct: string;
+    /**
+     * The sdAlg is the alg used for creating digests for selective disclosures
+     */
+    sdAlg: string;
+    /**
+     * The alg is the alg used to sign the SD-JWT
+     */
+    alg: JwaSignatureAlgorithm;
+};
+export type SdJwtVcRecordStorageProps = {
+    id?: string;
+    createdAt?: Date;
+    tags?: TagsBase;
+    compactSdJwtVc: string;
+};
+export declare class SdJwtVcRecord extends BaseRecord<DefaultSdJwtVcRecordTags> {
+    static readonly type = "SdJwtVcRecord";
+    readonly type = "SdJwtVcRecord";
+    compactSdJwtVc: string;
+    constructor(props: SdJwtVcRecordStorageProps);
+    getTags(): {
+        vct: string;
+        sdAlg: string;
+        alg: JwaSignatureAlgorithm;
+    };
+    clone(): this;
+}

package/build/modules/sd-jwt-vc/repository/SdJwtVcRecord.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SdJwtVcRecord = void 0;
+const core_1 = require("@sd-jwt/core");
+const BaseRecord_1 = require("../../../storage/BaseRecord");
+const utils_1 = require("../../../utils");
+const uuid_1 = require("../../../utils/uuid");
+class SdJwtVcRecord extends BaseRecord_1.BaseRecord {
+    // TODO: should we also store the pretty claims so it's not needed to
+    // re-calculate the hashes each time? I think for now it's fine to re-calculate
+    constructor(props) {
+        var _a, _b, _c;
+        super();
+        this.type = SdJwtVcRecord.type;
+        if (props) {
+            this.id = (_a = props.id) !== null && _a !== void 0 ? _a : (0, uuid_1.uuid)();
+            this.createdAt = (_b = props.createdAt) !== null && _b !== void 0 ? _b : new Date();
+            this.compactSdJwtVc = props.compactSdJwtVc;
+            this._tags = (_c = props.tags) !== null && _c !== void 0 ? _c : {};
+        }
+    }
+    getTags() {
+        var _a;
+        const sdJwtVc = core_1.SdJwtVc.fromCompact(this.compactSdJwtVc);
+        return Object.assign(Object.assign({}, this._tags), { vct: sdJwtVc.getClaimInPayload('vct'), sdAlg: (_a = sdJwtVc.payload._sd_alg) !== null && _a !== void 0 ? _a : 'sha-256', alg: sdJwtVc.getClaimInHeader('alg') });
+    }
+    clone() {
+        return utils_1.JsonTransformer.fromJSON(utils_1.JsonTransformer.toJSON(this), this.constructor);
+    }
+}
+exports.SdJwtVcRecord = SdJwtVcRecord;
+SdJwtVcRecord.type = 'SdJwtVcRecord';
+//# sourceMappingURL=SdJwtVcRecord.js.map

package/build/modules/sd-jwt-vc/repository/SdJwtVcRecord.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SdJwtVcRecord.js","sourceRoot":"","sources":["../../../../src/modules/sd-jwt-vc/repository/SdJwtVcRecord.ts"],"names":[],"mappings":";;;AAIA,uCAAsC;AAEtC,4DAAwD;AACxD,0CAAgD;AAChD,8CAA0C;AAuB1C,MAAa,aAAc,SAAQ,uBAAoC;IAOrE,qEAAqE;IACrE,+EAA+E;IAC/E,YAAmB,KAAgC;;QACjD,KAAK,EAAE,CAAA;QARO,SAAI,GAAG,aAAa,CAAC,IAAI,CAAA;QAUvC,IAAI,KAAK,EAAE;YACT,IAAI,CAAC,EAAE,GAAG,MAAA,KAAK,CAAC,EAAE,mCAAI,IAAA,WAAI,GAAE,CAAA;YAC5B,IAAI,CAAC,SAAS,GAAG,MAAA,KAAK,CAAC,SAAS,mCAAI,IAAI,IAAI,EAAE,CAAA;YAC9C,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAA;YAC1C,IAAI,CAAC,KAAK,GAAG,MAAA,KAAK,CAAC,IAAI,mCAAI,EAAE,CAAA;SAC9B;IACH,CAAC;IAEM,OAAO;;QACZ,MAAM,OAAO,GAAG,cAAO,CAAC,WAAW,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAExD,uCACK,IAAI,CAAC,KAAK,KACb,GAAG,EAAE,OAAO,CAAC,iBAAiB,CAAS,KAAK,CAAC,EAC7C,KAAK,EAAE,MAAC,OAAO,CAAC,OAAO,CAAC,OAA8B,mCAAI,SAAS,EACnE,GAAG,EAAE,OAAO,CAAC,gBAAgB,CAAwB,KAAK,CAAC,IAC5D;IACH,CAAC;IAEM,KAAK;QACV,OAAO,uBAAe,CAAC,QAAQ,CAAC,uBAAe,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,WAAkC,CAAC,CAAA;IACxG,CAAC;;AAjCH,sCAkCC;AAjCwB,kBAAI,GAAG,eAAe,CAAA"}

package/build/modules/sd-jwt-vc/repository/SdJwtVcRepository.d.ts

@@ -0,0 +1,7 @@
+import { EventEmitter } from '../../../agent/EventEmitter';
+import { Repository } from '../../../storage/Repository';
+import { StorageService } from '../../../storage/StorageService';
+import { SdJwtVcRecord } from './SdJwtVcRecord';
+export declare class SdJwtVcRepository extends Repository<SdJwtVcRecord> {
+    constructor(storageService: StorageService<SdJwtVcRecord>, eventEmitter: EventEmitter);
+}

package/build/modules/sd-jwt-vc/repository/SdJwtVcRepository.js

@@ -0,0 +1,32 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SdJwtVcRepository = void 0;
+const EventEmitter_1 = require("../../../agent/EventEmitter");
+const constants_1 = require("../../../constants");
+const plugins_1 = require("../../../plugins");
+const Repository_1 = require("../../../storage/Repository");
+const SdJwtVcRecord_1 = require("./SdJwtVcRecord");
+let SdJwtVcRepository = class SdJwtVcRepository extends Repository_1.Repository {
+    constructor(storageService, eventEmitter) {
+        super(SdJwtVcRecord_1.SdJwtVcRecord, storageService, eventEmitter);
+    }
+};
+SdJwtVcRepository = __decorate([
+    (0, plugins_1.injectable)(),
+    __param(0, (0, plugins_1.inject)(constants_1.InjectionSymbols.StorageService)),
+    __metadata("design:paramtypes", [Object, EventEmitter_1.EventEmitter])
+], SdJwtVcRepository);
+exports.SdJwtVcRepository = SdJwtVcRepository;
+//# sourceMappingURL=SdJwtVcRepository.js.map

package/build/modules/sd-jwt-vc/repository/SdJwtVcRepository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SdJwtVcRepository.js","sourceRoot":"","sources":["../../../../src/modules/sd-jwt-vc/repository/SdJwtVcRepository.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,8DAA0D;AAC1D,kDAAqD;AACrD,8CAAqD;AACrD,4DAAwD;AAGxD,mDAA+C;AAGxC,IAAM,iBAAiB,GAAvB,MAAM,iBAAkB,SAAQ,uBAAyB;IAC9D,YAC2C,cAA6C,EACtF,YAA0B;QAE1B,KAAK,CAAC,6BAAa,EAAE,cAAc,EAAE,YAAY,CAAC,CAAA;IACpD,CAAC;CACF,CAAA;AAPY,iBAAiB;IAD7B,IAAA,oBAAU,GAAE;IAGR,WAAA,IAAA,gBAAM,EAAC,4BAAgB,CAAC,cAAc,CAAC,CAAA;6CAC1B,2BAAY;GAHjB,iBAAiB,CAO7B;AAPY,8CAAiB"}

package/build/modules/sd-jwt-vc/repository/index.d.ts

@@ -0,0 +1,2 @@
+export * from './SdJwtVcRecord';
+export * from './SdJwtVcRepository';

package/build/modules/sd-jwt-vc/repository/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./SdJwtVcRecord"), exports);
+__exportStar(require("./SdJwtVcRepository"), exports);
+//# sourceMappingURL=index.js.map

package/build/modules/sd-jwt-vc/repository/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/modules/sd-jwt-vc/repository/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,kDAA+B;AAC/B,sDAAmC"}

package/build/modules/vc/W3cCredentialService.d.ts

@@ -0,0 +1,60 @@
+import type { StoreCredentialOptions, W3cCreatePresentationOptions, W3cSignCredentialOptions, W3cSignPresentationOptions, W3cVerifyCredentialOptions, W3cVerifyPresentationOptions } from './W3cCredentialServiceOptions';
+import type { W3cVerifiableCredential, W3cVerifiablePresentation, W3cVerifyCredentialResult, W3cVerifyPresentationResult } from './models';
+import type { AgentContext } from '../../agent/context';
+import type { Query } from '../../storage/StorageService';
+import { W3cJsonLdCredentialService } from './data-integrity/W3cJsonLdCredentialService';
+import { W3cJwtCredentialService } from './jwt-vc/W3cJwtCredentialService';
+import { ClaimFormat } from './models';
+import { W3cPresentation } from './models/presentation/W3cPresentation';
+import { W3cCredentialRecord, W3cCredentialRepository } from './repository';
+export declare class W3cCredentialService {
+    private w3cCredentialRepository;
+    private w3cJsonLdCredentialService;
+    private w3cJwtCredentialService;
+    constructor(w3cCredentialRepository: W3cCredentialRepository, w3cJsonLdCredentialService: W3cJsonLdCredentialService, w3cJwtCredentialService: W3cJwtCredentialService);
+    /**
+     * Signs a credential
+     *
+     * @param credential the credential to be signed
+     * @returns the signed credential
+     */
+    signCredential<Format extends ClaimFormat.JwtVc | ClaimFormat.LdpVc>(agentContext: AgentContext, options: W3cSignCredentialOptions<Format>): Promise<W3cVerifiableCredential<Format>>;
+    /**
+     * Verifies the signature(s) of a credential
+     */
+    verifyCredential(agentContext: AgentContext, options: W3cVerifyCredentialOptions): Promise<W3cVerifyCredentialResult>;
+    /**
+     * Utility method that creates a {@link W3cPresentation} from one or more {@link W3cJsonLdVerifiableCredential}s.
+     *
+     * **NOTE: the presentation that is returned is unsigned.**
+     *
+     * @returns An instance of {@link W3cPresentation}
+     */
+    createPresentation(options: W3cCreatePresentationOptions): Promise<W3cPresentation>;
+    /**
+     * Signs a presentation including the credentials it includes
+     *
+     * @param presentation the presentation to be signed
+     * @returns the signed presentation
+     */
+    signPresentation<Format extends ClaimFormat.JwtVp | ClaimFormat.LdpVp>(agentContext: AgentContext, options: W3cSignPresentationOptions<Format>): Promise<W3cVerifiablePresentation<Format>>;
+    /**
+     * Verifies a presentation including the credentials it includes
+     *
+     * @param presentation the presentation to be verified
+     * @returns the verification result
+     */
+    verifyPresentation(agentContext: AgentContext, options: W3cVerifyPresentationOptions): Promise<W3cVerifyPresentationResult>;
+    /**
+     * Writes a credential to storage
+     *
+     * @param record the credential to be stored
+     * @returns the credential record that was written to storage
+     */
+    storeCredential(agentContext: AgentContext, options: StoreCredentialOptions): Promise<W3cCredentialRecord>;
+    removeCredentialRecord(agentContext: AgentContext, id: string): Promise<void>;
+    getAllCredentialRecords(agentContext: AgentContext): Promise<W3cCredentialRecord[]>;
+    getCredentialRecordById(agentContext: AgentContext, id: string): Promise<W3cCredentialRecord>;
+    findCredentialsByQuery(agentContext: AgentContext, query: Query<W3cCredentialRecord>): Promise<W3cVerifiableCredential[]>;
+    findCredentialRecordByQuery(agentContext: AgentContext, query: Query<W3cCredentialRecord>): Promise<W3cVerifiableCredential | undefined>;
+}