@credo-ts/core 0.6.0-pr-2392-20251010173905 → 0.6.0-pr-2457-20251016083534

package/build/modules/kms/options/KmsVerifyOptions.d.ts

@@ -1,3 +1,4 @@
+import { AnyUint8Array } from "../../../types.js";
 import { KmsJwkPublic } from "../jwk/knownJwk.js";
 import { z } from "zod";
 
@@ -281,11 +282,11 @@ declare const zKmsVerifyOptions: z.ZodObject<{
   /**
    * The data to verify
    */
-  data: z.ZodType<Uint8Array<ArrayBuffer>, z.ZodTypeDef, Uint8Array<ArrayBuffer>>;
+  data: z.ZodType<AnyUint8Array, z.ZodTypeDef, AnyUint8Array>;
   /**
    * The signature to verify the data against
    */
-  signature: z.ZodType<Uint8Array<ArrayBuffer>, z.ZodTypeDef, Uint8Array<ArrayBuffer>>;
+  signature: z.ZodType<AnyUint8Array, z.ZodTypeDef, AnyUint8Array>;
 }, "strip", z.ZodTypeAny, {
   key: {
     keyId: string;
@@ -343,8 +344,8 @@ declare const zKmsVerifyOptions: z.ZodObject<{
     };
     keyId?: undefined;
   };
-  signature: Uint8Array<ArrayBuffer>;
-  data: Uint8Array<ArrayBuffer>;
+  signature: AnyUint8Array;
+  data: AnyUint8Array;
   algorithm: "HS256" | "HS384" | "HS512" | "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "PS256" | "PS384" | "PS512" | "EdDSA" | "ES256K";
 }, {
   key: {
@@ -403,8 +404,8 @@ declare const zKmsVerifyOptions: z.ZodObject<{
     };
     keyId?: undefined;
   };
-  signature: Uint8Array<ArrayBuffer>;
-  data: Uint8Array<ArrayBuffer>;
+  signature: AnyUint8Array;
+  data: AnyUint8Array;
   algorithm: "HS256" | "HS384" | "HS512" | "RS256" | "RS384" | "RS512" | "ES256" | "ES384" | "ES512" | "PS256" | "PS384" | "PS512" | "EdDSA" | "ES256K";
 }>;
 type KmsVerifyOptions = z.output<typeof zKmsVerifyOptions>;

package/build/modules/kms/options/KmsVerifyOptions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"KmsVerifyOptions.d.ts","names":[],"sources":["../../../../src/modules/kms/options/KmsVerifyOptions.ts"],"sourcesContent":[],"mappings":";;;;cAOa,mBAAiB,CAAA,CAAA;;AAA9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAA8B,GAAA,CAAA,EAAA,MAAA,GAAA,SAAA;MAAA,GAAA,CAAA,EAAA,OAAA,GAAA,SAAA;MAuClB,GAAA,CAAA,EAAA,MAAgB,EAAA,GAAA,SAAA;MAAA,GAAA,CAAA,EAAA,MAAA,GAAA,SAAA;MAAmB,UAAA,CAAA,EAAA,MAAA,GAAA,SAAA;MAAd,GAAA,CAAA,EAAA,MAAA,GAAA,SAAA;MAAM,CAAA,CAAA,EAAA,SAAA;IAE3B,CAAA,GAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAFA,gBAAA,GAAmB,CAAA,CAAE,cAAc;KAEnC,eAAA;;aAGK"}
+{"version":3,"file":"KmsVerifyOptions.d.ts","names":[],"sources":["../../../../src/modules/kms/options/KmsVerifyOptions.ts"],"sourcesContent":[],"mappings":";;;;;cAOa,mBAAiB,CAAA,CAAA;;;AAA9B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAA8B,GAAA,EAAA,IAAA;MAAA,GAAA,EAAA,OAAA,GAAA,OAAA,GAAA,OAAA,GAAA,WAAA;MAuClB,CAAA,EAAA,MAAA;MAAgB,CAAA,EAAA,MAAA;MAAmB,GAAA,CAAA,EAAA,MAAA,GAAA,SAAA;MAAd,GAAA,CAAA,EAAA,MAAA,GAAA,SAAA;MAAM,OAAA,CAAA,EAAA,MAAA,EAAA,GAAA,SAAA;MAE3B,GAAA,CAAA,EAAA,MAAe,GAAA,SAGV;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KALL,gBAAA,GAAmB,CAAA,CAAE,cAAc;KAEnC,eAAA;;aAGK"}

package/build/modules/kms/options/KmsVerifyOptions.js

@@ -2,6 +2,7 @@
 
 const require_rolldown_runtime = require('../../../_virtual/rolldown_runtime.js');
 const require_jwa = require('../jwk/jwa.js');
+const require_zod = require('../../../utils/zod.js');
 const require_knownJwk = require('../jwk/knownJwk.js');
 const require_common = require('./common.js');
 let zod = require("zod");
@@ -17,8 +18,8 @@ const zKmsVerifyOptions = zod.z.object({
 		keyId: zod.z.never().optional()
 	})]),
 	algorithm: require_jwa.zKnownJwaSignatureAlgorithm.describe("The JWA signature algorithm to use for verification"),
-	data: zod.z.instanceof(Uint8Array).describe("The data to verify"),
-	signature: zod.z.instanceof(Uint8Array).describe("The signature on the data to verify")
+	data: require_zod.zAnyUint8Array.describe("The data to verify"),
+	signature: require_zod.zAnyUint8Array.describe("The signature on the data to verify")
 });
 
 //#endregion

package/build/modules/kms/options/KmsVerifyOptions.mjs

@@ -1,6 +1,7 @@
 
 
 import { zKnownJwaSignatureAlgorithm } from "../jwk/jwa.mjs";
+import { zAnyUint8Array } from "../../../utils/zod.mjs";
 import { zKmsJwkPublicAsymmetric } from "../jwk/knownJwk.mjs";
 import { zKmsKeyId } from "./common.mjs";
 import { z } from "zod";
@@ -15,8 +16,8 @@ const zKmsVerifyOptions = z.object({
 		keyId: z.never().optional()
 	})]),
 	algorithm: zKnownJwaSignatureAlgorithm.describe("The JWA signature algorithm to use for verification"),
-	data: z.instanceof(Uint8Array).describe("The data to verify"),
-	signature: z.instanceof(Uint8Array).describe("The signature on the data to verify")
+	data: zAnyUint8Array.describe("The data to verify"),
+	signature: zAnyUint8Array.describe("The signature on the data to verify")
 });
 
 //#endregion

package/build/modules/kms/options/KmsVerifyOptions.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"KmsVerifyOptions.mjs","names":[],"sources":["../../../../src/modules/kms/options/KmsVerifyOptions.ts"],"sourcesContent":["import type { KmsJwkPublic } from '../jwk/knownJwk'\n\nimport { z } from 'zod'\nimport { zKnownJwaSignatureAlgorithm } from '../jwk/jwa'\nimport { zKmsJwkPublicAsymmetric } from '../jwk/knownJwk'\nimport { zKmsKeyId } from './common'\n\nexport const zKmsVerifyOptions = z.object({\n  /**\n   * The key to verify with. Either a string referring to a keyId, or a `KmsJwkPublicAssymetric` for verifying with a\n   * public asymmetric JWK.\n   *\n   * It is currently not possible to verify a signature for a symmetric key\n   * that is not already present in the KMS.\n   */\n  key: z.union([\n    z.object({\n      keyId: zKmsKeyId,\n\n      // never helps with type narrowing\n      publicJwk: z.never().optional(),\n    }),\n    z.object({\n      publicJwk: zKmsJwkPublicAsymmetric,\n\n      // never helps with type narrowing\n      keyId: z.never().optional(),\n    }),\n  ]),\n\n  /**\n   * The JWA signature algorithm to use for verification\n   */\n  algorithm: zKnownJwaSignatureAlgorithm.describe('The JWA signature algorithm to use for verification'),\n\n  /**\n   * The data to verify\n   */\n  data: z.instanceof(Uint8Array).describe('The data to verify'),\n\n  /**\n   * The signature to verify the data against\n   */\n  signature: z.instanceof(Uint8Array).describe('The signature on the data to verify'),\n})\n\nexport type KmsVerifyOptions = z.output<typeof zKmsVerifyOptions>\n\nexport type KmsVerifyReturn =\n  | {\n      verified: true\n      publicJwk: KmsJwkPublic\n    }\n  | { verified: false }\n"],"mappings":";;;;;;;;AAOA,MAAa,oBAAoB,EAAE,OAAO;CAQxC,KAAK,EAAE,MAAM,CACX,EAAE,OAAO;EACP,OAAO;EAGP,WAAW,EAAE,OAAO,CAAC,UAAU;EAChC,CAAC,EACF,EAAE,OAAO;EACP,WAAW;EAGX,OAAO,EAAE,OAAO,CAAC,UAAU;EAC5B,CAAC,CACH,CAAC;CAKF,WAAW,4BAA4B,SAAS,sDAAsD;CAKtG,MAAM,EAAE,WAAW,WAAW,CAAC,SAAS,qBAAqB;CAK7D,WAAW,EAAE,WAAW,WAAW,CAAC,SAAS,sCAAsC;CACpF,CAAC"}
+{"version":3,"file":"KmsVerifyOptions.mjs","names":[],"sources":["../../../../src/modules/kms/options/KmsVerifyOptions.ts"],"sourcesContent":["import { z } from 'zod'\nimport { zAnyUint8Array } from '../../../utils/zod'\nimport { zKnownJwaSignatureAlgorithm } from '../jwk/jwa'\nimport type { KmsJwkPublic } from '../jwk/knownJwk'\nimport { zKmsJwkPublicAsymmetric } from '../jwk/knownJwk'\nimport { zKmsKeyId } from './common'\n\nexport const zKmsVerifyOptions = z.object({\n  /**\n   * The key to verify with. Either a string referring to a keyId, or a `KmsJwkPublicAssymetric` for verifying with a\n   * public asymmetric JWK.\n   *\n   * It is currently not possible to verify a signature for a symmetric key\n   * that is not already present in the KMS.\n   */\n  key: z.union([\n    z.object({\n      keyId: zKmsKeyId,\n\n      // never helps with type narrowing\n      publicJwk: z.never().optional(),\n    }),\n    z.object({\n      publicJwk: zKmsJwkPublicAsymmetric,\n\n      // never helps with type narrowing\n      keyId: z.never().optional(),\n    }),\n  ]),\n\n  /**\n   * The JWA signature algorithm to use for verification\n   */\n  algorithm: zKnownJwaSignatureAlgorithm.describe('The JWA signature algorithm to use for verification'),\n\n  /**\n   * The data to verify\n   */\n  data: zAnyUint8Array.describe('The data to verify'),\n\n  /**\n   * The signature to verify the data against\n   */\n  signature: zAnyUint8Array.describe('The signature on the data to verify'),\n})\n\nexport type KmsVerifyOptions = z.output<typeof zKmsVerifyOptions>\n\nexport type KmsVerifyReturn =\n  | {\n      verified: true\n      publicJwk: KmsJwkPublic\n    }\n  | { verified: false }\n"],"mappings":";;;;;;;;;AAOA,MAAa,oBAAoB,EAAE,OAAO;CAQxC,KAAK,EAAE,MAAM,CACX,EAAE,OAAO;EACP,OAAO;EAGP,WAAW,EAAE,OAAO,CAAC,UAAU;EAChC,CAAC,EACF,EAAE,OAAO;EACP,WAAW;EAGX,OAAO,EAAE,OAAO,CAAC,UAAU;EAC5B,CAAC,CACH,CAAC;CAKF,WAAW,4BAA4B,SAAS,sDAAsD;CAKtG,MAAM,eAAe,SAAS,qBAAqB;CAKnD,WAAW,eAAe,SAAS,sCAAsC;CAC1E,CAAC"}

package/build/modules/mdoc/Mdoc.d.mts

@@ -1,8 +1,8 @@
 import { KnownJwaSignatureAlgorithm } from "../kms/jwk/jwa.mjs";
 import { ClaimFormat } from "../vc/models/ClaimFormat.mjs";
 import { MdocNameSpaces, MdocSignOptions, MdocVerifyOptions } from "./MdocOptions.mjs";
-import { AgentContext } from "../../agent/context/AgentContext.mjs";
 import { PublicJwk } from "../kms/jwk/PublicJwk.mjs";
+import { AgentContext } from "../../agent/context/AgentContext.mjs";
 import * as _animo_id_mdoc0 from "@animo-id/mdoc";
 import { DeviceSignedDocument, IssuerSignedDocument } from "@animo-id/mdoc";
 
@@ -44,8 +44,6 @@ declare class Mdoc {
     isValid: false;
     error: string;
   }>;
-  private toJSON;
-  private toString;
 }
 //#endregion
 export { Mdoc };

package/build/modules/mdoc/Mdoc.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"Mdoc.d.mts","names":[],"sources":["../../../src/modules/mdoc/Mdoc.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;;;cA2Ba,IAAA;EAAA,oBAAI,EAGkC,oBAHlC,GAGyD,oBAHzD;EAAA,SAAA,EAAA,MAAA;UAGkC,WAAA,CAAA;;;;MA6B6B,WAAA,CAAA,CAAA,EArBxD,WAAA,CAAA,OAqBwD;;;;MA2BlC,OAAA,CAAA,CAAA,EAAA,MAYrB;;;;MAiBgB,SAAA,CAAA,CAAA,EA/Df,SA+De,GAAA,IAAA;SAAA,aAAA,CAAA,aAAA,EAAA,MAAA,EAAA,eAAA,CAAA,EAAA,MAAA,CAAA,EAxDuC,IAwDvC;SAIV,wBAAA,CAAA,qBAAA,EAAA,MAAA,EAAA,eAAA,CAAA,EAAA,MAAA,CAAA,EAvDoE,IAuDpE;SAAA,wBAAA,CAAA,qBAAA,EAAA,MAAA,EAAA,qBAAA,EAAA,MAAA,EAAA,eAAA,CAAA,EAAA,MAAA,CAAA,EA/C1B,IA+C0B;MAIQ,OAAA,CAAA,CAAA,EAAA,MAAA;MASE,GAAA,CAAA,CAAA,EA9CrB,0BA8CqB;MAAuB,YAAA,CAAA,CAAA,EA9ClB,eAAA,CAYrB,YAkCuC;MAAe,sBAAA,CAAA,CAAA,EA9BxC,cA8BwC,GAAA,IAAA;MAAA,4BAAA,CAAA,CAAA,EAAA,CAjBtC,UAiBsC,CAjBtC,eAiBsC,CAAA,EAAA,GAjBtC,UAiBsC,CAjBtC,eAiBsC,CAAA,EAAA,CAAA;MAsC7D,kBAAA,CAAA,CAAA,EAnDa,UAmDb,CAnDa,eAmDb,CAAA;MACJ,sBAAA,CAAA,CAAA,EAhDyB,cAgDzB;SACT,IAAA,CAAA,YAAA,EAxCoC,YAwCpC,EAAA,OAAA,EAxC2D,eAwC3D,CAAA,EAxC0E,OAwC1E,CAxC0E,IAwC1E,CAAA;EAAO,MAAA,CAAA,YAAA,EAFM,YAEN,EAAA,OAAA,CAAA,EADE,iBACF,CAAA,EAAP,OAAO,CAAA"}
+{"version":3,"file":"Mdoc.d.mts","names":[],"sources":["../../../src/modules/mdoc/Mdoc.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;;;cAyBa,IAAA;EAAA,oBAAI,EAGkC,oBAHlC,GAGyD,oBAHzD;EAAA,SAAA,EAAA,MAAA;UAGkC,WAAA,CAAA;;;;MA6B6B,WAAA,CAAA,CAAA,EArBxD,WAAA,CAAA,OAqBwD;;;;MA2BlC,OAAA,CAAA,CAAA,EAAA,MAYrB;;;;MAiBgB,SAAA,CAAA,CAAA,EA/Df,SA+De,GAAA,IAAA;SAAA,aAAA,CAAA,aAAA,EAAA,MAAA,EAAA,eAAA,CAAA,EAAA,MAAA,CAAA,EAxDuC,IAwDvC;SAIV,wBAAA,CAAA,qBAAA,EAAA,MAAA,EAAA,eAAA,CAAA,EAAA,MAAA,CAAA,EAvDoE,IAuDpE;SAAA,wBAAA,CAAA,qBAAA,EAAA,MAAA,EAAA,qBAAA,EAAA,MAAA,EAAA,eAAA,CAAA,EAAA,MAAA,CAAA,EA/C1B,IA+C0B;MAIQ,OAAA,CAAA,CAAA,EAAA,MAAA;MASE,GAAA,CAAA,CAAA,EA9CrB,0BA8CqB;MAAuB,YAAA,CAAA,CAAA,EA9ClB,eAAA,CAYrB,YAkCuC;MAAe,sBAAA,CAAA,CAAA,EA9BxC,cA8BwC,GAAA,IAAA;MAAA,4BAAA,CAAA,CAAA,EAAA,CAjBtC,UAiBsC,CAjBtC,eAiBsC,CAAA,EAAA,GAjBtC,UAiBsC,CAjBtC,eAiBsC,CAAA,EAAA,CAAA;MAsC7D,kBAAA,CAAA,CAAA,EAnDa,UAmDb,CAnDa,eAmDb,CAAA;MACJ,sBAAA,CAAA,CAAA,EAhDyB,cAgDzB;SACT,IAAA,CAAA,YAAA,EAxCoC,YAwCpC,EAAA,OAAA,EAxC2D,eAwC3D,CAAA,EAxC0E,OAwC1E,CAxC0E,IAwC1E,CAAA;EAAO,MAAA,CAAA,YAAA,EAFM,YAEN,EAAA,OAAA,CAAA,EADE,iBACF,CAAA,EAAP,OAAO,CAAA"}

package/build/modules/mdoc/Mdoc.d.ts

@@ -1,8 +1,8 @@
 import { KnownJwaSignatureAlgorithm } from "../kms/jwk/jwa.js";
 import { ClaimFormat } from "../vc/models/ClaimFormat.js";
 import { MdocNameSpaces, MdocSignOptions, MdocVerifyOptions } from "./MdocOptions.js";
-import { AgentContext } from "../../agent/context/AgentContext.js";
 import { PublicJwk } from "../kms/jwk/PublicJwk.js";
+import { AgentContext } from "../../agent/context/AgentContext.js";
 import * as _animo_id_mdoc0 from "@animo-id/mdoc";
 import { DeviceSignedDocument, IssuerSignedDocument } from "@animo-id/mdoc";
 
@@ -45,8 +45,6 @@ declare class Mdoc {
     isValid: false;
     error: string;
   }>;
-  private toJSON;
-  private toString;
 }
 //#endregion
 export { Mdoc };

package/build/modules/mdoc/Mdoc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Mdoc.d.ts","names":[],"sources":["../../../src/modules/mdoc/Mdoc.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;;;AA2BA;AAAiB,cAAJ,IAAA,CAAI;sBAGkC,EAAA,oBAAA,GAAuB,oBAAvB;WAAuB,EAAA,MAAA;UAQlD,WAAA,CAAA;;;;MAkCnB,WAAA,CAAA,CAAA,EAlCmB,WAAA,CAAA,OAkCnB;;;;MA2CoC,OAAA,CAAA,CAAA,EAAA,MAAA;;;;MAIV,SAAA,CAAA,CAAA,EAnEL,SAmEK,GAAA,IAAA;SAAA,aAAA,CAAA,aAAA,EAAA,MAAA,EAAA,eAAA,CAAA,EAAA,MAAA,CAAA,EA5DiD,IA4DjD;SAIQ,wBAAA,CAAA,qBAAA,EAAA,MAAA,EAAA,eAAA,CAAA,EAAA,MAAA,CAAA,EA3D4D,IA2D5D;SASE,wBAAA,CAAA,qBAAA,EAAA,MAAA,EAAA,qBAAA,EAAA,MAAA,EAAA,eAAA,CAAA,EAAA,MAAA,CAAA,EA5DpC,IA4DoC;MAAuB,OAAA,CAAA,CAAA,EAAA,MAAA;MAAe,GAAA,CAAA,CAAA,EA9C3D,0BA8C2D;MAAA,YAAA,CAAA,CAAA,EA9CjC,eAAA,CAYrB,YAkCsD;MAsC7D,sBAAA,CAAA,CAAA,EApEqB,cAoErB,GAAA,IAAA;MACJ,4BAAA,CAAA,CAAA,EAAA,CAxD2B,UAwD3B,CAxD2B,eAwD3B,CAAA,EAAA,GAxD2B,UAwD3B,CAxD2B,eAwD3B,CAAA,EAAA,CAAA;MACT,kBAAA,CAAA,CAAA,EArD0B,UAqD1B,CArD0B,eAqD1B,CAAA;EAAO,IAAA,sBAAA,CAAA,CAAA,EAjD2B,cAiD3B;4BAxC6B,uBAAuB,kBAAe,QAAA;uBAsC7D,wBACJ,oBACT"}
+{"version":3,"file":"Mdoc.d.ts","names":[],"sources":["../../../src/modules/mdoc/Mdoc.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;;;AAyBA;AAAiB,cAAJ,IAAA,CAAI;sBAGkC,EAAA,oBAAA,GAAuB,oBAAvB;WAAuB,EAAA,MAAA;UAQlD,WAAA,CAAA;;;;MAkCnB,WAAA,CAAA,CAAA,EAlCmB,WAAA,CAAA,OAkCnB;;;;MA2CoC,OAAA,CAAA,CAAA,EAAA,MAAA;;;;MAIV,SAAA,CAAA,CAAA,EAnEL,SAmEK,GAAA,IAAA;SAAA,aAAA,CAAA,aAAA,EAAA,MAAA,EAAA,eAAA,CAAA,EAAA,MAAA,CAAA,EA5DiD,IA4DjD;SAIQ,wBAAA,CAAA,qBAAA,EAAA,MAAA,EAAA,eAAA,CAAA,EAAA,MAAA,CAAA,EA3D4D,IA2D5D;SASE,wBAAA,CAAA,qBAAA,EAAA,MAAA,EAAA,qBAAA,EAAA,MAAA,EAAA,eAAA,CAAA,EAAA,MAAA,CAAA,EA5DpC,IA4DoC;MAAuB,OAAA,CAAA,CAAA,EAAA,MAAA;MAAe,GAAA,CAAA,CAAA,EA9C3D,0BA8C2D;MAAA,YAAA,CAAA,CAAA,EA9CjC,eAAA,CAYrB,YAkCsD;MAsC7D,sBAAA,CAAA,CAAA,EApEqB,cAoErB,GAAA,IAAA;MACJ,4BAAA,CAAA,CAAA,EAAA,CAxD2B,UAwD3B,CAxD2B,eAwD3B,CAAA,EAAA,GAxD2B,UAwD3B,CAxD2B,eAwD3B,CAAA,EAAA,CAAA;MACT,kBAAA,CAAA,CAAA,EArD0B,UAqD1B,CArD0B,eAqD1B,CAAA;EAAO,IAAA,sBAAA,CAAA,CAAA,EAjD2B,cAiD3B;4BAxC6B,uBAAuB,kBAAe,QAAA;uBAsC7D,wBACJ,oBACT"}

package/build/modules/mdoc/Mdoc.js

@@ -1,9 +1,9 @@
 
 
 const require_rolldown_runtime = require('../../_virtual/rolldown_runtime.js');
-const require_jwa = require('../kms/jwk/jwa.js');
 const require_TypedArrayEncoder = require('../../utils/TypedArrayEncoder.js');
 require('../../utils/index.js');
+const require_jwa = require('../kms/jwk/jwa.js');
 const require_PublicJwk = require('../kms/jwk/PublicJwk.js');
 require('../kms/index.js');
 const require_X509Certificate = require('../x509/X509Certificate.js');
@@ -126,12 +126,6 @@ var Mdoc = class Mdoc {
 			};
 		}
 	}
-	toJSON() {
-		return this.base64Url;
-	}
-	toString() {
-		return this.base64Url;
-	}
 };
 
 //#endregion

package/build/modules/mdoc/Mdoc.mjs

@@ -1,8 +1,8 @@
 
 
-import { isKnownJwaSignatureAlgorithm } from "../kms/jwk/jwa.mjs";
 import { TypedArrayEncoder } from "../../utils/TypedArrayEncoder.mjs";
 import "../../utils/index.mjs";
+import { isKnownJwaSignatureAlgorithm } from "../kms/jwk/jwa.mjs";
 import { PublicJwk } from "../kms/jwk/PublicJwk.mjs";
 import "../kms/index.mjs";
 import { X509Certificate } from "../x509/X509Certificate.mjs";
@@ -124,12 +124,6 @@ var Mdoc = class Mdoc {
 			};
 		}
 	}
-	toJSON() {
-		return this.base64Url;
-	}
-	toString() {
-		return this.base64Url;
-	}
 };
 
 //#endregion

package/build/modules/mdoc/Mdoc.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"Mdoc.mjs","names":["issuerSignedDocument: IssuerSignedDocument | DeviceSignedDocument"],"sources":["../../../src/modules/mdoc/Mdoc.ts"],"sourcesContent":["import type { IssuerSignedDocument } from '@animo-id/mdoc'\nimport type { AgentContext } from '../../agent'\nimport type { MdocNameSpaces, MdocSignOptions, MdocVerifyOptions } from './MdocOptions'\n\nimport {\n  COSEKey,\n  DeviceSignedDocument,\n  Document,\n  Verifier,\n  cborEncode,\n  parseDeviceSigned,\n  parseIssuerSigned,\n} from '@animo-id/mdoc'\nimport { ClaimFormat } from '../vc/index'\nimport { X509Certificate, X509ModuleConfig } from '../x509'\n\nimport { type KnownJwaSignatureAlgorithm, PublicJwk } from '../kms'\nimport { isKnownJwaSignatureAlgorithm } from '../kms/jwk/jwa'\nimport { TypedArrayEncoder } from './../../utils'\nimport { getMdocContext } from './MdocContext'\nimport { MdocError } from './MdocError'\nimport { isMdocSupportedSignatureAlgorithm, mdocSupporteSignatureAlgorithms } from './mdocSupportedAlgs'\n\n/**\n * This class represents a IssuerSigned Mdoc Document,\n * which are the actual credentials being issued to holders.\n */\nexport class Mdoc {\n  public base64Url: string\n\n  private constructor(public issuerSignedDocument: IssuerSignedDocument | DeviceSignedDocument) {\n    const issuerSigned = issuerSignedDocument.prepare().get('issuerSigned')\n    this.base64Url = TypedArrayEncoder.toBase64URL(cborEncode(issuerSigned))\n  }\n\n  /**\n   * claim format is convenience method added to all credential instances\n   */\n  public get claimFormat() {\n    return ClaimFormat.MsoMdoc as const\n  }\n\n  /**\n   * Encoded is convenience method added to all credential instances\n   */\n  public get encoded() {\n    return this.base64Url\n  }\n\n  /**\n   * Get the device key to which the mdoc is bound\n   */\n  public get deviceKey(): PublicJwk | null {\n    const deviceKeyRaw = this.issuerSignedDocument.issuerSigned.issuerAuth.decodedPayload.deviceKeyInfo?.deviceKey\n    if (!deviceKeyRaw) return null\n\n    return PublicJwk.fromUnknown(COSEKey.import(deviceKeyRaw).toJWK())\n  }\n\n  public static fromBase64Url(mdocBase64Url: string, expectedDocType?: string): Mdoc {\n    const issuerSignedDocument = parseIssuerSigned(TypedArrayEncoder.fromBase64(mdocBase64Url), expectedDocType)\n    return new Mdoc(issuerSignedDocument)\n  }\n\n  public static fromIssuerSignedDocument(issuerSignedBase64Url: string, expectedDocType?: string): Mdoc {\n    return new Mdoc(parseIssuerSigned(TypedArrayEncoder.fromBase64(issuerSignedBase64Url), expectedDocType))\n  }\n\n  public static fromDeviceSignedDocument(\n    issuerSignedBase64Url: string,\n    deviceSignedBase64Url: string,\n    expectedDocType?: string\n  ): Mdoc {\n    return new Mdoc(\n      parseDeviceSigned(\n        TypedArrayEncoder.fromBase64(deviceSignedBase64Url),\n        TypedArrayEncoder.fromBase64(issuerSignedBase64Url),\n        expectedDocType\n      )\n    )\n  }\n\n  public get docType(): string {\n    return this.issuerSignedDocument.docType\n  }\n\n  public get alg(): KnownJwaSignatureAlgorithm {\n    const algName = this.issuerSignedDocument.issuerSigned.issuerAuth.algName\n    if (!algName) {\n      throw new MdocError('Cannot extract the signature algorithm from the mdoc.')\n    }\n    if (isKnownJwaSignatureAlgorithm(algName)) {\n      return algName\n    }\n\n    throw new MdocError(`Cannot parse mdoc. The signature algorithm '${algName}' is not supported.`)\n  }\n\n  public get validityInfo() {\n    return this.issuerSignedDocument.issuerSigned.issuerAuth.decodedPayload.validityInfo\n  }\n\n  public get deviceSignedNamespaces(): MdocNameSpaces | null {\n    if (this.issuerSignedDocument instanceof DeviceSignedDocument === false) {\n      return null\n    }\n\n    return Object.fromEntries(\n      Array.from(this.issuerSignedDocument.allDeviceSignedNamespaces.entries()).map(([namespace, value]) => [\n        namespace,\n        Object.fromEntries(Array.from(value.entries())),\n      ])\n    )\n  }\n\n  public get issuerSignedCertificateChain() {\n    return this.issuerSignedDocument.issuerSigned.issuerAuth.certificateChain\n  }\n\n  public get signingCertificate() {\n    return this.issuerSignedDocument.issuerSigned.issuerAuth.certificate\n  }\n\n  public get issuerSignedNamespaces(): MdocNameSpaces {\n    return Object.fromEntries(\n      Array.from(this.issuerSignedDocument.allIssuerSignedNamespaces.entries()).map(([namespace, value]) => [\n        namespace,\n        Object.fromEntries(Array.from(value.entries())),\n      ])\n    )\n  }\n\n  public static async sign(agentContext: AgentContext, options: MdocSignOptions) {\n    const { docType, validityInfo, namespaces, holderKey, issuerCertificate } = options\n    const mdocContext = getMdocContext(agentContext)\n\n    const document = new Document(docType, mdocContext)\n      .useDigestAlgorithm('SHA-256')\n      .addValidityInfo(validityInfo)\n      .addDeviceKeyInfo({ deviceKey: holderKey.toJson() })\n\n    for (const [namespace, namespaceRecord] of Object.entries(namespaces)) {\n      document.addIssuerNameSpace(namespace, namespaceRecord)\n    }\n\n    const issuerKey = issuerCertificate.publicJwk\n    const alg = issuerKey.supportedSignatureAlgorithms.find(isMdocSupportedSignatureAlgorithm)\n    if (!alg) {\n      throw new MdocError(\n        `Unable to create sign mdoc. No supported signature algorithm found to sign mdoc for jwk with key ${\n          issuerKey.jwkTypehumanDescription\n        }. Key supports algs ${issuerKey.supportedSignatureAlgorithms.join(\n          ', '\n        )}. mdoc supports algs ${mdocSupporteSignatureAlgorithms.join(', ')}`\n      )\n    }\n\n    const issuerSignedDocument = await document.sign(\n      {\n        issuerPrivateKey: issuerKey.toJson(),\n        alg,\n        issuerCertificate: issuerCertificate.rawCertificate,\n      },\n      mdocContext\n    )\n\n    return new Mdoc(issuerSignedDocument)\n  }\n\n  public async verify(\n    agentContext: AgentContext,\n    options?: MdocVerifyOptions\n  ): Promise<{ isValid: true } | { isValid: false; error: string }> {\n    const x509ModuleConfig = agentContext.dependencyManager.resolve(X509ModuleConfig)\n    const certificateChain = this.issuerSignedDocument.issuerSigned.issuerAuth.certificateChain.map((certificate) =>\n      X509Certificate.fromRawCertificate(certificate)\n    )\n\n    let trustedCertificates = options?.trustedCertificates\n    if (!trustedCertificates) {\n      trustedCertificates =\n        (await x509ModuleConfig.getTrustedCertificatesForVerification?.(agentContext, {\n          verification: {\n            type: 'credential',\n            credential: this,\n          },\n          certificateChain,\n        })) ?? x509ModuleConfig.trustedCertificates\n    }\n\n    if (!trustedCertificates) {\n      throw new MdocError('No trusted certificates found. Cannot verify mdoc.')\n    }\n\n    const mdocContext = getMdocContext(agentContext)\n    try {\n      const verifier = new Verifier()\n      await verifier.verifyIssuerSignature(\n        {\n          trustedCertificates: trustedCertificates.map(\n            (cert) => X509Certificate.fromEncodedCertificate(cert).rawCertificate\n          ),\n          issuerAuth: this.issuerSignedDocument.issuerSigned.issuerAuth,\n          disableCertificateChainValidation: false,\n          now: options?.now,\n        },\n        mdocContext\n      )\n\n      await verifier.verifyData({ mdoc: this.issuerSignedDocument }, mdocContext)\n      return { isValid: true }\n    } catch (error) {\n      return { isValid: false, error: error.message }\n    }\n  }\n\n  private toJSON() {\n    return this.base64Url\n  }\n\n  private toString() {\n    return this.base64Url\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AA2BA,IAAa,OAAb,MAAa,KAAK;CAGhB,AAAQ,YAAY,AAAOA,sBAAmE;EAAnE;EACzB,MAAM,eAAe,qBAAqB,SAAS,CAAC,IAAI,eAAe;AACvE,OAAK,YAAY,kBAAkB,YAAY,WAAW,aAAa,CAAC;;;;;CAM1E,IAAW,cAAc;AACvB,SAAO,YAAY;;;;;CAMrB,IAAW,UAAU;AACnB,SAAO,KAAK;;;;;CAMd,IAAW,YAA8B;EACvC,MAAM,eAAe,KAAK,qBAAqB,aAAa,WAAW,eAAe,eAAe;AACrG,MAAI,CAAC,aAAc,QAAO;AAE1B,SAAO,UAAU,YAAY,QAAQ,OAAO,aAAa,CAAC,OAAO,CAAC;;CAGpE,OAAc,cAAc,eAAuB,iBAAgC;AAEjF,SAAO,IAAI,KADkB,kBAAkB,kBAAkB,WAAW,cAAc,EAAE,gBAAgB,CACvE;;CAGvC,OAAc,yBAAyB,uBAA+B,iBAAgC;AACpG,SAAO,IAAI,KAAK,kBAAkB,kBAAkB,WAAW,sBAAsB,EAAE,gBAAgB,CAAC;;CAG1G,OAAc,yBACZ,uBACA,uBACA,iBACM;AACN,SAAO,IAAI,KACT,kBACE,kBAAkB,WAAW,sBAAsB,EACnD,kBAAkB,WAAW,sBAAsB,EACnD,gBACD,CACF;;CAGH,IAAW,UAAkB;AAC3B,SAAO,KAAK,qBAAqB;;CAGnC,IAAW,MAAkC;EAC3C,MAAM,UAAU,KAAK,qBAAqB,aAAa,WAAW;AAClE,MAAI,CAAC,QACH,OAAM,IAAI,UAAU,wDAAwD;AAE9E,MAAI,6BAA6B,QAAQ,CACvC,QAAO;AAGT,QAAM,IAAI,UAAU,+CAA+C,QAAQ,qBAAqB;;CAGlG,IAAW,eAAe;AACxB,SAAO,KAAK,qBAAqB,aAAa,WAAW,eAAe;;CAG1E,IAAW,yBAAgD;AACzD,MAAI,KAAK,gCAAgC,yBAAyB,MAChE,QAAO;AAGT,SAAO,OAAO,YACZ,MAAM,KAAK,KAAK,qBAAqB,0BAA0B,SAAS,CAAC,CAAC,KAAK,CAAC,WAAW,WAAW,CACpG,WACA,OAAO,YAAY,MAAM,KAAK,MAAM,SAAS,CAAC,CAAC,CAChD,CAAC,CACH;;CAGH,IAAW,+BAA+B;AACxC,SAAO,KAAK,qBAAqB,aAAa,WAAW;;CAG3D,IAAW,qBAAqB;AAC9B,SAAO,KAAK,qBAAqB,aAAa,WAAW;;CAG3D,IAAW,yBAAyC;AAClD,SAAO,OAAO,YACZ,MAAM,KAAK,KAAK,qBAAqB,0BAA0B,SAAS,CAAC,CAAC,KAAK,CAAC,WAAW,WAAW,CACpG,WACA,OAAO,YAAY,MAAM,KAAK,MAAM,SAAS,CAAC,CAAC,CAChD,CAAC,CACH;;CAGH,aAAoB,KAAK,cAA4B,SAA0B;EAC7E,MAAM,EAAE,SAAS,cAAc,YAAY,WAAW,sBAAsB;EAC5E,MAAM,cAAc,eAAe,aAAa;EAEhD,MAAM,WAAW,IAAI,SAAS,SAAS,YAAY,CAChD,mBAAmB,UAAU,CAC7B,gBAAgB,aAAa,CAC7B,iBAAiB,EAAE,WAAW,UAAU,QAAQ,EAAE,CAAC;AAEtD,OAAK,MAAM,CAAC,WAAW,oBAAoB,OAAO,QAAQ,WAAW,CACnE,UAAS,mBAAmB,WAAW,gBAAgB;EAGzD,MAAM,YAAY,kBAAkB;EACpC,MAAM,MAAM,UAAU,6BAA6B,KAAK,kCAAkC;AAC1F,MAAI,CAAC,IACH,OAAM,IAAI,UACR,oGACE,UAAU,wBACX,sBAAsB,UAAU,6BAA6B,KAC5D,KACD,CAAC,uBAAuB,gCAAgC,KAAK,KAAK,GACpE;AAYH,SAAO,IAAI,KATkB,MAAM,SAAS,KAC1C;GACE,kBAAkB,UAAU,QAAQ;GACpC;GACA,mBAAmB,kBAAkB;GACtC,EACD,YACD,CAEoC;;CAGvC,MAAa,OACX,cACA,SACgE;EAChE,MAAM,mBAAmB,aAAa,kBAAkB,QAAQ,iBAAiB;EACjF,MAAM,mBAAmB,KAAK,qBAAqB,aAAa,WAAW,iBAAiB,KAAK,gBAC/F,gBAAgB,mBAAmB,YAAY,CAChD;EAED,IAAI,sBAAsB,SAAS;AACnC,MAAI,CAAC,oBACH,uBACG,MAAM,iBAAiB,wCAAwC,cAAc;GAC5E,cAAc;IACZ,MAAM;IACN,YAAY;IACb;GACD;GACD,CAAC,IAAK,iBAAiB;AAG5B,MAAI,CAAC,oBACH,OAAM,IAAI,UAAU,qDAAqD;EAG3E,MAAM,cAAc,eAAe,aAAa;AAChD,MAAI;GACF,MAAM,WAAW,IAAI,UAAU;AAC/B,SAAM,SAAS,sBACb;IACE,qBAAqB,oBAAoB,KACtC,SAAS,gBAAgB,uBAAuB,KAAK,CAAC,eACxD;IACD,YAAY,KAAK,qBAAqB,aAAa;IACnD,mCAAmC;IACnC,KAAK,SAAS;IACf,EACD,YACD;AAED,SAAM,SAAS,WAAW,EAAE,MAAM,KAAK,sBAAsB,EAAE,YAAY;AAC3E,UAAO,EAAE,SAAS,MAAM;WACjB,OAAO;AACd,UAAO;IAAE,SAAS;IAAO,OAAO,MAAM;IAAS;;;CAInD,AAAQ,SAAS;AACf,SAAO,KAAK;;CAGd,AAAQ,WAAW;AACjB,SAAO,KAAK"}
+{"version":3,"file":"Mdoc.mjs","names":["issuerSignedDocument: IssuerSignedDocument | DeviceSignedDocument"],"sources":["../../../src/modules/mdoc/Mdoc.ts"],"sourcesContent":["import type { IssuerSignedDocument } from '@animo-id/mdoc'\nimport {\n  COSEKey,\n  cborEncode,\n  DeviceSignedDocument,\n  Document,\n  parseDeviceSigned,\n  parseIssuerSigned,\n  Verifier,\n} from '@animo-id/mdoc'\nimport type { AgentContext } from '../../agent'\nimport { TypedArrayEncoder } from './../../utils'\nimport { type KnownJwaSignatureAlgorithm, PublicJwk } from '../kms'\nimport { isKnownJwaSignatureAlgorithm } from '../kms/jwk/jwa'\nimport { ClaimFormat } from '../vc/index'\nimport { X509Certificate, X509ModuleConfig } from '../x509'\nimport { getMdocContext } from './MdocContext'\nimport { MdocError } from './MdocError'\nimport type { MdocNameSpaces, MdocSignOptions, MdocVerifyOptions } from './MdocOptions'\nimport { isMdocSupportedSignatureAlgorithm, mdocSupporteSignatureAlgorithms } from './mdocSupportedAlgs'\n\n/**\n * This class represents a IssuerSigned Mdoc Document,\n * which are the actual credentials being issued to holders.\n */\nexport class Mdoc {\n  public base64Url: string\n\n  private constructor(public issuerSignedDocument: IssuerSignedDocument | DeviceSignedDocument) {\n    const issuerSigned = issuerSignedDocument.prepare().get('issuerSigned')\n    this.base64Url = TypedArrayEncoder.toBase64URL(cborEncode(issuerSigned))\n  }\n\n  /**\n   * claim format is convenience method added to all credential instances\n   */\n  public get claimFormat() {\n    return ClaimFormat.MsoMdoc as const\n  }\n\n  /**\n   * Encoded is convenience method added to all credential instances\n   */\n  public get encoded() {\n    return this.base64Url\n  }\n\n  /**\n   * Get the device key to which the mdoc is bound\n   */\n  public get deviceKey(): PublicJwk | null {\n    const deviceKeyRaw = this.issuerSignedDocument.issuerSigned.issuerAuth.decodedPayload.deviceKeyInfo?.deviceKey\n    if (!deviceKeyRaw) return null\n\n    return PublicJwk.fromUnknown(COSEKey.import(deviceKeyRaw).toJWK())\n  }\n\n  public static fromBase64Url(mdocBase64Url: string, expectedDocType?: string): Mdoc {\n    const issuerSignedDocument = parseIssuerSigned(TypedArrayEncoder.fromBase64(mdocBase64Url), expectedDocType)\n    return new Mdoc(issuerSignedDocument)\n  }\n\n  public static fromIssuerSignedDocument(issuerSignedBase64Url: string, expectedDocType?: string): Mdoc {\n    return new Mdoc(parseIssuerSigned(TypedArrayEncoder.fromBase64(issuerSignedBase64Url), expectedDocType))\n  }\n\n  public static fromDeviceSignedDocument(\n    issuerSignedBase64Url: string,\n    deviceSignedBase64Url: string,\n    expectedDocType?: string\n  ): Mdoc {\n    return new Mdoc(\n      parseDeviceSigned(\n        TypedArrayEncoder.fromBase64(deviceSignedBase64Url),\n        TypedArrayEncoder.fromBase64(issuerSignedBase64Url),\n        expectedDocType\n      )\n    )\n  }\n\n  public get docType(): string {\n    return this.issuerSignedDocument.docType\n  }\n\n  public get alg(): KnownJwaSignatureAlgorithm {\n    const algName = this.issuerSignedDocument.issuerSigned.issuerAuth.algName\n    if (!algName) {\n      throw new MdocError('Cannot extract the signature algorithm from the mdoc.')\n    }\n    if (isKnownJwaSignatureAlgorithm(algName)) {\n      return algName\n    }\n\n    throw new MdocError(`Cannot parse mdoc. The signature algorithm '${algName}' is not supported.`)\n  }\n\n  public get validityInfo() {\n    return this.issuerSignedDocument.issuerSigned.issuerAuth.decodedPayload.validityInfo\n  }\n\n  public get deviceSignedNamespaces(): MdocNameSpaces | null {\n    if (this.issuerSignedDocument instanceof DeviceSignedDocument === false) {\n      return null\n    }\n\n    return Object.fromEntries(\n      Array.from(this.issuerSignedDocument.allDeviceSignedNamespaces.entries()).map(([namespace, value]) => [\n        namespace,\n        Object.fromEntries(Array.from(value.entries())),\n      ])\n    )\n  }\n\n  public get issuerSignedCertificateChain() {\n    return this.issuerSignedDocument.issuerSigned.issuerAuth.certificateChain\n  }\n\n  public get signingCertificate() {\n    return this.issuerSignedDocument.issuerSigned.issuerAuth.certificate\n  }\n\n  public get issuerSignedNamespaces(): MdocNameSpaces {\n    return Object.fromEntries(\n      Array.from(this.issuerSignedDocument.allIssuerSignedNamespaces.entries()).map(([namespace, value]) => [\n        namespace,\n        Object.fromEntries(Array.from(value.entries())),\n      ])\n    )\n  }\n\n  public static async sign(agentContext: AgentContext, options: MdocSignOptions) {\n    const { docType, validityInfo, namespaces, holderKey, issuerCertificate } = options\n    const mdocContext = getMdocContext(agentContext)\n\n    const document = new Document(docType, mdocContext)\n      .useDigestAlgorithm('SHA-256')\n      .addValidityInfo(validityInfo)\n      .addDeviceKeyInfo({ deviceKey: holderKey.toJson() })\n\n    for (const [namespace, namespaceRecord] of Object.entries(namespaces)) {\n      document.addIssuerNameSpace(namespace, namespaceRecord)\n    }\n\n    const issuerKey = issuerCertificate.publicJwk\n    const alg = issuerKey.supportedSignatureAlgorithms.find(isMdocSupportedSignatureAlgorithm)\n    if (!alg) {\n      throw new MdocError(\n        `Unable to create sign mdoc. No supported signature algorithm found to sign mdoc for jwk with key ${\n          issuerKey.jwkTypehumanDescription\n        }. Key supports algs ${issuerKey.supportedSignatureAlgorithms.join(\n          ', '\n        )}. mdoc supports algs ${mdocSupporteSignatureAlgorithms.join(', ')}`\n      )\n    }\n\n    const issuerSignedDocument = await document.sign(\n      {\n        issuerPrivateKey: issuerKey.toJson(),\n        alg,\n        issuerCertificate: issuerCertificate.rawCertificate,\n      },\n      mdocContext\n    )\n\n    return new Mdoc(issuerSignedDocument)\n  }\n\n  public async verify(\n    agentContext: AgentContext,\n    options?: MdocVerifyOptions\n  ): Promise<{ isValid: true } | { isValid: false; error: string }> {\n    const x509ModuleConfig = agentContext.dependencyManager.resolve(X509ModuleConfig)\n    const certificateChain = this.issuerSignedDocument.issuerSigned.issuerAuth.certificateChain.map((certificate) =>\n      X509Certificate.fromRawCertificate(certificate)\n    )\n\n    let trustedCertificates = options?.trustedCertificates\n    if (!trustedCertificates) {\n      trustedCertificates =\n        (await x509ModuleConfig.getTrustedCertificatesForVerification?.(agentContext, {\n          verification: {\n            type: 'credential',\n            credential: this,\n          },\n          certificateChain,\n        })) ?? x509ModuleConfig.trustedCertificates\n    }\n\n    if (!trustedCertificates) {\n      throw new MdocError('No trusted certificates found. Cannot verify mdoc.')\n    }\n\n    const mdocContext = getMdocContext(agentContext)\n    try {\n      const verifier = new Verifier()\n      await verifier.verifyIssuerSignature(\n        {\n          trustedCertificates: trustedCertificates.map(\n            (cert) => X509Certificate.fromEncodedCertificate(cert).rawCertificate\n          ),\n          issuerAuth: this.issuerSignedDocument.issuerSigned.issuerAuth,\n          disableCertificateChainValidation: false,\n          now: options?.now,\n        },\n        mdocContext\n      )\n\n      await verifier.verifyData({ mdoc: this.issuerSignedDocument }, mdocContext)\n      return { isValid: true }\n    } catch (error) {\n      return { isValid: false, error: error.message }\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAyBA,IAAa,OAAb,MAAa,KAAK;CAGhB,AAAQ,YAAY,AAAOA,sBAAmE;EAAnE;EACzB,MAAM,eAAe,qBAAqB,SAAS,CAAC,IAAI,eAAe;AACvE,OAAK,YAAY,kBAAkB,YAAY,WAAW,aAAa,CAAC;;;;;CAM1E,IAAW,cAAc;AACvB,SAAO,YAAY;;;;;CAMrB,IAAW,UAAU;AACnB,SAAO,KAAK;;;;;CAMd,IAAW,YAA8B;EACvC,MAAM,eAAe,KAAK,qBAAqB,aAAa,WAAW,eAAe,eAAe;AACrG,MAAI,CAAC,aAAc,QAAO;AAE1B,SAAO,UAAU,YAAY,QAAQ,OAAO,aAAa,CAAC,OAAO,CAAC;;CAGpE,OAAc,cAAc,eAAuB,iBAAgC;AAEjF,SAAO,IAAI,KADkB,kBAAkB,kBAAkB,WAAW,cAAc,EAAE,gBAAgB,CACvE;;CAGvC,OAAc,yBAAyB,uBAA+B,iBAAgC;AACpG,SAAO,IAAI,KAAK,kBAAkB,kBAAkB,WAAW,sBAAsB,EAAE,gBAAgB,CAAC;;CAG1G,OAAc,yBACZ,uBACA,uBACA,iBACM;AACN,SAAO,IAAI,KACT,kBACE,kBAAkB,WAAW,sBAAsB,EACnD,kBAAkB,WAAW,sBAAsB,EACnD,gBACD,CACF;;CAGH,IAAW,UAAkB;AAC3B,SAAO,KAAK,qBAAqB;;CAGnC,IAAW,MAAkC;EAC3C,MAAM,UAAU,KAAK,qBAAqB,aAAa,WAAW;AAClE,MAAI,CAAC,QACH,OAAM,IAAI,UAAU,wDAAwD;AAE9E,MAAI,6BAA6B,QAAQ,CACvC,QAAO;AAGT,QAAM,IAAI,UAAU,+CAA+C,QAAQ,qBAAqB;;CAGlG,IAAW,eAAe;AACxB,SAAO,KAAK,qBAAqB,aAAa,WAAW,eAAe;;CAG1E,IAAW,yBAAgD;AACzD,MAAI,KAAK,gCAAgC,yBAAyB,MAChE,QAAO;AAGT,SAAO,OAAO,YACZ,MAAM,KAAK,KAAK,qBAAqB,0BAA0B,SAAS,CAAC,CAAC,KAAK,CAAC,WAAW,WAAW,CACpG,WACA,OAAO,YAAY,MAAM,KAAK,MAAM,SAAS,CAAC,CAAC,CAChD,CAAC,CACH;;CAGH,IAAW,+BAA+B;AACxC,SAAO,KAAK,qBAAqB,aAAa,WAAW;;CAG3D,IAAW,qBAAqB;AAC9B,SAAO,KAAK,qBAAqB,aAAa,WAAW;;CAG3D,IAAW,yBAAyC;AAClD,SAAO,OAAO,YACZ,MAAM,KAAK,KAAK,qBAAqB,0BAA0B,SAAS,CAAC,CAAC,KAAK,CAAC,WAAW,WAAW,CACpG,WACA,OAAO,YAAY,MAAM,KAAK,MAAM,SAAS,CAAC,CAAC,CAChD,CAAC,CACH;;CAGH,aAAoB,KAAK,cAA4B,SAA0B;EAC7E,MAAM,EAAE,SAAS,cAAc,YAAY,WAAW,sBAAsB;EAC5E,MAAM,cAAc,eAAe,aAAa;EAEhD,MAAM,WAAW,IAAI,SAAS,SAAS,YAAY,CAChD,mBAAmB,UAAU,CAC7B,gBAAgB,aAAa,CAC7B,iBAAiB,EAAE,WAAW,UAAU,QAAQ,EAAE,CAAC;AAEtD,OAAK,MAAM,CAAC,WAAW,oBAAoB,OAAO,QAAQ,WAAW,CACnE,UAAS,mBAAmB,WAAW,gBAAgB;EAGzD,MAAM,YAAY,kBAAkB;EACpC,MAAM,MAAM,UAAU,6BAA6B,KAAK,kCAAkC;AAC1F,MAAI,CAAC,IACH,OAAM,IAAI,UACR,oGACE,UAAU,wBACX,sBAAsB,UAAU,6BAA6B,KAC5D,KACD,CAAC,uBAAuB,gCAAgC,KAAK,KAAK,GACpE;AAYH,SAAO,IAAI,KATkB,MAAM,SAAS,KAC1C;GACE,kBAAkB,UAAU,QAAQ;GACpC;GACA,mBAAmB,kBAAkB;GACtC,EACD,YACD,CAEoC;;CAGvC,MAAa,OACX,cACA,SACgE;EAChE,MAAM,mBAAmB,aAAa,kBAAkB,QAAQ,iBAAiB;EACjF,MAAM,mBAAmB,KAAK,qBAAqB,aAAa,WAAW,iBAAiB,KAAK,gBAC/F,gBAAgB,mBAAmB,YAAY,CAChD;EAED,IAAI,sBAAsB,SAAS;AACnC,MAAI,CAAC,oBACH,uBACG,MAAM,iBAAiB,wCAAwC,cAAc;GAC5E,cAAc;IACZ,MAAM;IACN,YAAY;IACb;GACD;GACD,CAAC,IAAK,iBAAiB;AAG5B,MAAI,CAAC,oBACH,OAAM,IAAI,UAAU,qDAAqD;EAG3E,MAAM,cAAc,eAAe,aAAa;AAChD,MAAI;GACF,MAAM,WAAW,IAAI,UAAU;AAC/B,SAAM,SAAS,sBACb;IACE,qBAAqB,oBAAoB,KACtC,SAAS,gBAAgB,uBAAuB,KAAK,CAAC,eACxD;IACD,YAAY,KAAK,qBAAqB,aAAa;IACnD,mCAAmC;IACnC,KAAK,SAAS;IACf,EACD,YACD;AAED,SAAM,SAAS,WAAW,EAAE,MAAM,KAAK,sBAAsB,EAAE,YAAY;AAC3E,UAAO,EAAE,SAAS,MAAM;WACjB,OAAO;AACd,UAAO;IAAE,SAAS;IAAO,OAAO,MAAM;IAAS"}

package/build/modules/mdoc/MdocApi.d.mts

@@ -1,8 +1,8 @@
 import { Query, QueryOptions } from "../../storage/StorageService.mjs";
 import { MdocSignOptions, MdocVerifyOptions } from "./MdocOptions.mjs";
-import { Mdoc } from "./Mdoc.mjs";
 import { MdocRecord } from "./repository/MdocRecord.mjs";
 import { MdocService } from "./MdocService.mjs";
+import { Mdoc } from "./Mdoc.mjs";
 import { AgentContext } from "../../agent/context/AgentContext.mjs";
 
 //#region src/modules/mdoc/MdocApi.d.ts

package/build/modules/mdoc/MdocApi.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"MdocApi.d.mts","names":[],"sources":["../../../src/modules/mdoc/MdocApi.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;cAca,OAAA;EAAA,QAAA,YAAO;EAAA,QAAA,WAAA;aAIe,CAAA,YAAA,EAAA,YAAA,EAAA,WAAA,EAA2B,WAA3B;;;;;;;MAsByB,CAAA,OAAA,EAX/B,eAW+B,CAAA,EAXhB,OAWgB,CAXhB,IAWgB,CAAA;;;;;;;;QAmB3B,CAAA,IAAA,EAnBL,IAmBK,EAAA,OAAA,EAnBU,iBAmBV,CAAA,EAnB2B,OAmB3B,CAAA;IAAR,OAAA,EAAA,IAAA;MAIkB;IAAN,OAAA,EAAA,KAAA;IAAkC,KAAA,EAAA,MAAA;;;;;eAQrC,CAAA,SAAA,EAAA,MAAA,CAAA,EAxBM,IAwBN;OAAU,CAAA,YAAA,EApBT,IAoBS,CAAA,EApBL,OAoBK,CApBL,UAoBK,CAAA;EAAA,OAAA,CAAA,EAAA,EAAA,MAAA,CAAA,EAhBR,OAgBQ,CAhBA,UAgBA,CAAA;YAZnB,QAAQ,MAAM;wBAIF,MAAM,4BAA4B,eAAe,QAAQ,MAAM;0BAIhE;qBAIF,aAAU"}
+{"version":3,"file":"MdocApi.d.mts","names":[],"sources":["../../../src/modules/mdoc/MdocApi.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;cAYa,OAAA;EAAA,QAAA,YAAO;EAAA,QAAA,WAAA;aAIe,CAAA,YAAA,EAAA,YAAA,EAAA,WAAA,EAA2B,WAA3B;;;;;;;MAsByB,CAAA,OAAA,EAX/B,eAW+B,CAAA,EAXhB,OAWgB,CAXhB,IAWgB,CAAA;;;;;;;;QAmB3B,CAAA,IAAA,EAnBL,IAmBK,EAAA,OAAA,EAnBU,iBAmBV,CAAA,EAnB2B,OAmB3B,CAAA;IAAR,OAAA,EAAA,IAAA;MAIkB;IAAN,OAAA,EAAA,KAAA;IAAkC,KAAA,EAAA,MAAA;;;;;eAQrC,CAAA,SAAA,EAAA,MAAA,CAAA,EAxBM,IAwBN;OAAU,CAAA,YAAA,EApBT,IAoBS,CAAA,EApBL,OAoBK,CApBL,UAoBK,CAAA;EAAA,OAAA,CAAA,EAAA,EAAA,MAAA,CAAA,EAhBR,OAgBQ,CAhBA,UAgBA,CAAA;YAZnB,QAAQ,MAAM;wBAIF,MAAM,4BAA4B,eAAe,QAAQ,MAAM;0BAIhE;qBAIF,aAAU"}

package/build/modules/mdoc/MdocApi.d.ts

@@ -1,8 +1,8 @@
 import { Query, QueryOptions } from "../../storage/StorageService.js";
 import { MdocSignOptions, MdocVerifyOptions } from "./MdocOptions.js";
-import { Mdoc } from "./Mdoc.js";
 import { MdocRecord } from "./repository/MdocRecord.js";
 import { MdocService } from "./MdocService.js";
+import { Mdoc } from "./Mdoc.js";
 import { AgentContext } from "../../agent/context/AgentContext.js";
 
 //#region src/modules/mdoc/MdocApi.d.ts

package/build/modules/mdoc/MdocApi.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MdocApi.d.ts","names":[],"sources":["../../../src/modules/mdoc/MdocApi.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;AAaA;AACoB,cAAP,OAAA,CAAO;UAIe,YAAA;UAA2B,WAAA;aAWjC,CAAA,YAAA,EAXM,YAWN,EAAA,WAAA,EAXiC,WAWjC;;;;;;;MAsBM,CAAA,OAAA,EAtBN,eAsBM,CAAA,EAtBS,OAsBT,CAtBS,IAsBT,CAAA;;;;;;;;QAYQ,CAAA,IAAA,EAvBf,IAuBe,EAAA,OAAA,EAvBA,iBAuBA,CAAA,EAvBiB,OAuBjB,CAAA;IAAN,OAAA,EAAA,IAAA;MAAkC;IAA6B,OAAA,EAAA,KAAA;IAAN,KAAA,EAAA,MAAA;;;;;EAQlD,aAAA,CAAA,SAAA,EAAA,MAAA,CAAA,EAxBJ,IAwBI;sBApBT,OAAI,QAAA;uBAIH,QAAQ;YAInB,QAAQ,MAAM;wBAIF,MAAM,4BAA4B,eAAe,QAAQ,MAAM;0BAIhE;qBAIF,aAAU"}
+{"version":3,"file":"MdocApi.d.ts","names":[],"sources":["../../../src/modules/mdoc/MdocApi.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;AAWA;AACoB,cAAP,OAAA,CAAO;UAIe,YAAA;UAA2B,WAAA;aAWjC,CAAA,YAAA,EAXM,YAWN,EAAA,WAAA,EAXiC,WAWjC;;;;;;;MAsBM,CAAA,OAAA,EAtBN,eAsBM,CAAA,EAtBS,OAsBT,CAtBS,IAsBT,CAAA;;;;;;;;QAYQ,CAAA,IAAA,EAvBf,IAuBe,EAAA,OAAA,EAvBA,iBAuBA,CAAA,EAvBiB,OAuBjB,CAAA;IAAN,OAAA,EAAA,IAAA;MAAkC;IAA6B,OAAA,EAAA,KAAA;IAAN,KAAA,EAAA,MAAA;;;;;EAQlD,aAAA,CAAA,SAAA,EAAA,MAAA,CAAA,EAxBJ,IAwBI;sBApBT,OAAI,QAAA;uBAIH,QAAQ;YAInB,QAAQ,MAAM;wBAIF,MAAM,4BAA4B,eAAe,QAAQ,MAAM;0BAIhE;qBAIF,aAAU"}

package/build/modules/mdoc/MdocApi.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"MdocApi.mjs","names":["MdocApi"],"sources":["../../../src/modules/mdoc/MdocApi.ts"],"sourcesContent":["import type { Query, QueryOptions } from '../../storage/StorageService'\nimport type { MdocSignOptions, MdocVerifyOptions } from './MdocOptions'\nimport type { MdocRecord } from './repository'\n\nimport { AgentContext } from '../../agent'\nimport { injectable } from '../../plugins'\n\nimport { Mdoc } from './Mdoc'\nimport { MdocService } from './MdocService'\n\n/**\n * @public\n */\n@injectable()\nexport class MdocApi {\n  private agentContext: AgentContext\n  private mdocService: MdocService\n\n  public constructor(agentContext: AgentContext, mdocService: MdocService) {\n    this.agentContext = agentContext\n    this.mdocService = mdocService\n  }\n\n  /**\n   * Create a new Mdoc, with a spcific doctype, namespace, and validity info.\n   *\n   * @param options {MdocSignOptions}\n   * @returns {Promise<Mdoc>}\n   */\n  public async sign(options: MdocSignOptions) {\n    return await this.mdocService.signMdoc(this.agentContext, options)\n  }\n\n  /**\n   *\n   * Verify an incoming mdoc. It will check whether everything is valid, but also returns parts of the validation.\n   *\n   * For example, you might still want to continue with a flow if not all the claims are included, but the signature is valid.\n   *\n   */\n  public async verify(mdoc: Mdoc, options: MdocVerifyOptions) {\n    return await this.mdocService.verifyMdoc(this.agentContext, mdoc, options)\n  }\n\n  /**\n   * Create a Mdoc class from a base64url encoded Mdoc Issuer-Signed structure\n   */\n  public fromBase64Url(base64Url: string) {\n    return Mdoc.fromBase64Url(base64Url)\n  }\n\n  public async store(issuerSigned: Mdoc) {\n    return await this.mdocService.store(this.agentContext, issuerSigned)\n  }\n\n  public async getById(id: string): Promise<MdocRecord> {\n    return await this.mdocService.getById(this.agentContext, id)\n  }\n\n  public async getAll(): Promise<Array<MdocRecord>> {\n    return await this.mdocService.getAll(this.agentContext)\n  }\n\n  public async findAllByQuery(query: Query<MdocRecord>, queryOptions?: QueryOptions): Promise<Array<MdocRecord>> {\n    return await this.mdocService.findByQuery(this.agentContext, query, queryOptions)\n  }\n\n  public async deleteById(id: string) {\n    return await this.mdocService.deleteById(this.agentContext, id)\n  }\n\n  public async update(mdocRecord: MdocRecord) {\n    return await this.mdocService.update(this.agentContext, mdocRecord)\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAcO,oBAAMA,UAAQ;CAInB,AAAO,YAAY,cAA4B,aAA0B;AACvE,OAAK,eAAe;AACpB,OAAK,cAAc;;;;;;;;CASrB,MAAa,KAAK,SAA0B;AAC1C,SAAO,MAAM,KAAK,YAAY,SAAS,KAAK,cAAc,QAAQ;;;;;;;;;CAUpE,MAAa,OAAO,MAAY,SAA4B;AAC1D,SAAO,MAAM,KAAK,YAAY,WAAW,KAAK,cAAc,MAAM,QAAQ;;;;;CAM5E,AAAO,cAAc,WAAmB;AACtC,SAAO,KAAK,cAAc,UAAU;;CAGtC,MAAa,MAAM,cAAoB;AACrC,SAAO,MAAM,KAAK,YAAY,MAAM,KAAK,cAAc,aAAa;;CAGtE,MAAa,QAAQ,IAAiC;AACpD,SAAO,MAAM,KAAK,YAAY,QAAQ,KAAK,cAAc,GAAG;;CAG9D,MAAa,SAAqC;AAChD,SAAO,MAAM,KAAK,YAAY,OAAO,KAAK,aAAa;;CAGzD,MAAa,eAAe,OAA0B,cAAyD;AAC7G,SAAO,MAAM,KAAK,YAAY,YAAY,KAAK,cAAc,OAAO,aAAa;;CAGnF,MAAa,WAAW,IAAY;AAClC,SAAO,MAAM,KAAK,YAAY,WAAW,KAAK,cAAc,GAAG;;CAGjE,MAAa,OAAO,YAAwB;AAC1C,SAAO,MAAM,KAAK,YAAY,OAAO,KAAK,cAAc,WAAW;;;sBA3DtE,YAAY"}
+{"version":3,"file":"MdocApi.mjs","names":["MdocApi"],"sources":["../../../src/modules/mdoc/MdocApi.ts"],"sourcesContent":["import { AgentContext } from '../../agent'\nimport { injectable } from '../../plugins'\nimport type { Query, QueryOptions } from '../../storage/StorageService'\nimport { Mdoc } from './Mdoc'\nimport type { MdocSignOptions, MdocVerifyOptions } from './MdocOptions'\nimport { MdocService } from './MdocService'\nimport type { MdocRecord } from './repository'\n\n/**\n * @public\n */\n@injectable()\nexport class MdocApi {\n  private agentContext: AgentContext\n  private mdocService: MdocService\n\n  public constructor(agentContext: AgentContext, mdocService: MdocService) {\n    this.agentContext = agentContext\n    this.mdocService = mdocService\n  }\n\n  /**\n   * Create a new Mdoc, with a spcific doctype, namespace, and validity info.\n   *\n   * @param options {MdocSignOptions}\n   * @returns {Promise<Mdoc>}\n   */\n  public async sign(options: MdocSignOptions) {\n    return await this.mdocService.signMdoc(this.agentContext, options)\n  }\n\n  /**\n   *\n   * Verify an incoming mdoc. It will check whether everything is valid, but also returns parts of the validation.\n   *\n   * For example, you might still want to continue with a flow if not all the claims are included, but the signature is valid.\n   *\n   */\n  public async verify(mdoc: Mdoc, options: MdocVerifyOptions) {\n    return await this.mdocService.verifyMdoc(this.agentContext, mdoc, options)\n  }\n\n  /**\n   * Create a Mdoc class from a base64url encoded Mdoc Issuer-Signed structure\n   */\n  public fromBase64Url(base64Url: string) {\n    return Mdoc.fromBase64Url(base64Url)\n  }\n\n  public async store(issuerSigned: Mdoc) {\n    return await this.mdocService.store(this.agentContext, issuerSigned)\n  }\n\n  public async getById(id: string): Promise<MdocRecord> {\n    return await this.mdocService.getById(this.agentContext, id)\n  }\n\n  public async getAll(): Promise<Array<MdocRecord>> {\n    return await this.mdocService.getAll(this.agentContext)\n  }\n\n  public async findAllByQuery(query: Query<MdocRecord>, queryOptions?: QueryOptions): Promise<Array<MdocRecord>> {\n    return await this.mdocService.findByQuery(this.agentContext, query, queryOptions)\n  }\n\n  public async deleteById(id: string) {\n    return await this.mdocService.deleteById(this.agentContext, id)\n  }\n\n  public async update(mdocRecord: MdocRecord) {\n    return await this.mdocService.update(this.agentContext, mdocRecord)\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAYO,oBAAMA,UAAQ;CAInB,AAAO,YAAY,cAA4B,aAA0B;AACvE,OAAK,eAAe;AACpB,OAAK,cAAc;;;;;;;;CASrB,MAAa,KAAK,SAA0B;AAC1C,SAAO,MAAM,KAAK,YAAY,SAAS,KAAK,cAAc,QAAQ;;;;;;;;;CAUpE,MAAa,OAAO,MAAY,SAA4B;AAC1D,SAAO,MAAM,KAAK,YAAY,WAAW,KAAK,cAAc,MAAM,QAAQ;;;;;CAM5E,AAAO,cAAc,WAAmB;AACtC,SAAO,KAAK,cAAc,UAAU;;CAGtC,MAAa,MAAM,cAAoB;AACrC,SAAO,MAAM,KAAK,YAAY,MAAM,KAAK,cAAc,aAAa;;CAGtE,MAAa,QAAQ,IAAiC;AACpD,SAAO,MAAM,KAAK,YAAY,QAAQ,KAAK,cAAc,GAAG;;CAG9D,MAAa,SAAqC;AAChD,SAAO,MAAM,KAAK,YAAY,OAAO,KAAK,aAAa;;CAGzD,MAAa,eAAe,OAA0B,cAAyD;AAC7G,SAAO,MAAM,KAAK,YAAY,YAAY,KAAK,cAAc,OAAO,aAAa;;CAGnF,MAAa,WAAW,IAAY;AAClC,SAAO,MAAM,KAAK,YAAY,WAAW,KAAK,cAAc,GAAG;;CAGjE,MAAa,OAAO,YAAwB;AAC1C,SAAO,MAAM,KAAK,YAAY,OAAO,KAAK,cAAc,WAAW;;;sBA3DtE,YAAY"}

package/build/modules/mdoc/MdocContext.js

@@ -1,8 +1,8 @@
 
 
 const require_rolldown_runtime = require('../../_virtual/rolldown_runtime.js');
-const require_Hasher = require('../../crypto/hashes/Hasher.js');
 const require_TypedArrayEncoder = require('../../utils/TypedArrayEncoder.js');
+const require_Hasher = require('../../crypto/hashes/Hasher.js');
 require('../../utils/index.js');
 const require_PublicJwk = require('../kms/jwk/PublicJwk.js');
 const require_KeyManagementApi = require('../kms/KeyManagementApi.js');
@@ -12,14 +12,12 @@ const require_X509Certificate = require('../x509/X509Certificate.js');
 const require_X509Service = require('../x509/X509Service.js');
 require('../x509/index.js');
 require('../../crypto/index.js');
-let __noble_hashes_sha2 = require("@noble/hashes/sha2");
-__noble_hashes_sha2 = require_rolldown_runtime.__toESM(__noble_hashes_sha2);
-let __noble_curves_p256 = require("@noble/curves/p256");
-__noble_curves_p256 = require_rolldown_runtime.__toESM(__noble_curves_p256);
-let __noble_hashes_hkdf = require("@noble/hashes/hkdf");
-__noble_hashes_hkdf = require_rolldown_runtime.__toESM(__noble_hashes_hkdf);
-let buffer_index_js = require("buffer/index.js");
-buffer_index_js = require_rolldown_runtime.__toESM(buffer_index_js);
+let __noble_hashes_sha2_js = require("@noble/hashes/sha2.js");
+__noble_hashes_sha2_js = require_rolldown_runtime.__toESM(__noble_hashes_sha2_js);
+let __noble_curves_nist_js = require("@noble/curves/nist.js");
+__noble_curves_nist_js = require_rolldown_runtime.__toESM(__noble_curves_nist_js);
+let __noble_hashes_hkdf_js = require("@noble/hashes/hkdf.js");
+__noble_hashes_hkdf_js = require_rolldown_runtime.__toESM(__noble_hashes_hkdf_js);
 
 //#region src/modules/mdoc/MdocContext.ts
 const getMdocContext = (agentContext) => {
@@ -29,14 +27,14 @@ const getMdocContext = (agentContext) => {
 		crypto: {
 			digest: async (input) => {
 				const { bytes, digestAlgorithm } = input;
-				return new Uint8Array(crypto.digest(digestAlgorithm, bytes));
+				return new Uint8Array(crypto.digest(digestAlgorithm, new Uint8Array(bytes).buffer));
 			},
 			random: (length) => {
 				return crypto.getRandomValues(new Uint8Array(length));
 			},
 			calculateEphemeralMacKeyJwk: async (input) => {
 				const { privateKey, publicKey, sessionTranscriptBytes } = input;
-				const hk1 = (0, __noble_hashes_hkdf.hkdf)(__noble_hashes_sha2.sha256, __noble_curves_p256.p256.getSharedSecret(require_TypedArrayEncoder.TypedArrayEncoder.toHex(privateKey), require_TypedArrayEncoder.TypedArrayEncoder.toHex(publicKey), true).slice(1), require_Hasher.Hasher.hash(sessionTranscriptBytes, "sha-256"), buffer_index_js.Buffer.from("EMacKey", "utf-8"), 32);
+				const hk1 = (0, __noble_hashes_hkdf_js.hkdf)(__noble_hashes_sha2_js.sha256, __noble_curves_nist_js.p256.getSharedSecret(privateKey, publicKey, true).slice(1), require_Hasher.Hasher.hash(sessionTranscriptBytes, "sha-256"), require_TypedArrayEncoder.TypedArrayEncoder.fromString("EMacKey"), 32);
 				return {
 					key_ops: ["sign", "verify"],
 					ext: true,

package/build/modules/mdoc/MdocContext.mjs

@@ -1,8 +1,7 @@
 
 
-import { Hasher } from "../../crypto/hashes/Hasher.mjs";
-import { Buffer } from "../../utils/buffer.mjs";
 import { TypedArrayEncoder } from "../../utils/TypedArrayEncoder.mjs";
+import { Hasher } from "../../crypto/hashes/Hasher.mjs";
 import "../../utils/index.mjs";
 import { PublicJwk } from "../kms/jwk/PublicJwk.mjs";
 import { KeyManagementApi } from "../kms/KeyManagementApi.mjs";
@@ -12,9 +11,9 @@ import { X509Certificate } from "../x509/X509Certificate.mjs";
 import { X509Service } from "../x509/X509Service.mjs";
 import "../x509/index.mjs";
 import "../../crypto/index.mjs";
-import { sha256 } from "@noble/hashes/sha2";
-import { p256 } from "@noble/curves/p256";
-import { hkdf } from "@noble/hashes/hkdf";
+import { sha256 } from "@noble/hashes/sha2.js";
+import { p256 } from "@noble/curves/nist.js";
+import { hkdf } from "@noble/hashes/hkdf.js";
 
 //#region src/modules/mdoc/MdocContext.ts
 const getMdocContext = (agentContext) => {
@@ -24,14 +23,14 @@ const getMdocContext = (agentContext) => {
 		crypto: {
 			digest: async (input) => {
 				const { bytes, digestAlgorithm } = input;
-				return new Uint8Array(crypto.digest(digestAlgorithm, bytes));
+				return new Uint8Array(crypto.digest(digestAlgorithm, new Uint8Array(bytes).buffer));
 			},
 			random: (length) => {
 				return crypto.getRandomValues(new Uint8Array(length));
 			},
 			calculateEphemeralMacKeyJwk: async (input) => {
 				const { privateKey, publicKey, sessionTranscriptBytes } = input;
-				const hk1 = hkdf(sha256, p256.getSharedSecret(TypedArrayEncoder.toHex(privateKey), TypedArrayEncoder.toHex(publicKey), true).slice(1), Hasher.hash(sessionTranscriptBytes, "sha-256"), Buffer.from("EMacKey", "utf-8"), 32);
+				const hk1 = hkdf(sha256, p256.getSharedSecret(privateKey, publicKey, true).slice(1), Hasher.hash(sessionTranscriptBytes, "sha-256"), TypedArrayEncoder.fromString("EMacKey"), 32);
 				return {
 					key_ops: ["sign", "verify"],
 					ext: true,

package/build/modules/mdoc/MdocContext.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"MdocContext.mjs","names":[],"sources":["../../../src/modules/mdoc/MdocContext.ts"],"sourcesContent":["import type { MdocContext, X509Context } from '@animo-id/mdoc'\nimport type { AgentContext } from '../../agent'\n\nimport { p256 } from '@noble/curves/p256'\nimport { hkdf } from '@noble/hashes/hkdf'\nimport { sha256 } from '@noble/hashes/sha2'\n\nimport { CredoWebCrypto, Hasher } from '../../crypto'\nimport { Buffer, TypedArrayEncoder } from '../../utils'\nimport { KeyManagementApi, type KmsJwkPublicAsymmetric, type KnownJwaSignatureAlgorithm, PublicJwk } from '../kms'\nimport { X509Certificate, X509Service } from '../x509'\n\nexport const getMdocContext = (agentContext: AgentContext): MdocContext => {\n  const crypto = new CredoWebCrypto(agentContext)\n  const kms = agentContext.resolve(KeyManagementApi)\n\n  return {\n    crypto: {\n      digest: async (input) => {\n        const { bytes, digestAlgorithm } = input\n        return new Uint8Array(crypto.digest(digestAlgorithm, bytes))\n      },\n      random: (length) => {\n        return crypto.getRandomValues(new Uint8Array(length))\n      },\n      calculateEphemeralMacKeyJwk: async (input) => {\n        const { privateKey, publicKey, sessionTranscriptBytes } = input\n        const ikm = p256\n          .getSharedSecret(TypedArrayEncoder.toHex(privateKey), TypedArrayEncoder.toHex(publicKey), true)\n          .slice(1)\n        const salt = Hasher.hash(sessionTranscriptBytes, 'sha-256')\n        const info = Buffer.from('EMacKey', 'utf-8')\n        const hk1 = hkdf(sha256, ikm, salt, info, 32)\n\n        return {\n          key_ops: ['sign', 'verify'],\n          ext: true,\n          kty: 'oct',\n          k: TypedArrayEncoder.toBase64URL(hk1),\n          alg: 'HS256',\n        }\n      },\n    },\n\n    cose: {\n      mac0: {\n        sign: async (input) => {\n          const { jwk, mac0 } = input\n          const { data } = mac0.getRawSigningData()\n\n          const publicJwk = PublicJwk.fromUnknown(jwk)\n          const algorithm = mac0.algName ?? publicJwk.signatureAlgorithm\n\n          const { signature } = await kms.sign({\n            data,\n            algorithm,\n            keyId: publicJwk.keyId,\n          })\n\n          return signature\n        },\n        verify: async (input) => {\n          const { mac0, jwk, options } = input\n          const { data, signature } = mac0.getRawVerificationData(options)\n\n          const publicJwk = PublicJwk.fromUnknown(jwk)\n          const algorithm = mac0.algName ?? publicJwk.signatureAlgorithm\n\n          const { verified } = await kms.verify({\n            key: {\n              publicJwk: jwk as KmsJwkPublicAsymmetric,\n            },\n            data,\n            algorithm,\n            signature,\n          })\n\n          return verified\n        },\n      },\n      sign1: {\n        sign: async (input) => {\n          const { jwk, sign1 } = input\n          const { data } = sign1.getRawSigningData()\n\n          const publicJwk = PublicJwk.fromUnknown(jwk)\n          const algorithm = sign1.algName ?? publicJwk.signatureAlgorithm\n\n          const { signature } = await kms.sign({\n            data,\n            algorithm: algorithm as KnownJwaSignatureAlgorithm,\n            keyId: publicJwk.keyId,\n          })\n\n          return signature\n        },\n        verify: async (input) => {\n          const { sign1, jwk, options } = input\n          const { data, signature } = sign1.getRawVerificationData(options)\n\n          const publicJwk = PublicJwk.fromUnknown(jwk)\n          const algorithm = sign1.algName ?? publicJwk.signatureAlgorithm\n\n          const { verified } = await kms.verify({\n            key: {\n              publicJwk: jwk as KmsJwkPublicAsymmetric,\n            },\n            data,\n            algorithm: algorithm as KnownJwaSignatureAlgorithm,\n            signature,\n          })\n\n          return verified\n        },\n      },\n    },\n\n    x509: {\n      getIssuerNameField: (input) => {\n        const { certificate, field } = input\n        const x509Certificate = X509Certificate.fromRawCertificate(certificate)\n        return x509Certificate.getIssuerNameField(field)\n      },\n      getPublicKey: async (input) => {\n        const certificate = X509Certificate.fromRawCertificate(input.certificate)\n        return certificate.publicJwk.toJson()\n      },\n      validateCertificateChain: async (input) => {\n        const certificateChain = input.x5chain.map((cert) => X509Certificate.fromRawCertificate(cert).toString('pem'))\n        const trustedCertificates = input.trustedCertificates.map((cert) =>\n          X509Certificate.fromRawCertificate(cert).toString('pem')\n        ) as [string, ...string[]]\n\n        await X509Service.validateCertificateChain(agentContext, {\n          certificateChain,\n          trustedCertificates,\n        })\n      },\n      getCertificateData: async (input) => {\n        const { certificate } = input\n        const x509Certificate = X509Certificate.fromRawCertificate(certificate)\n        return {\n          ...x509Certificate.data,\n          thumbprint: await x509Certificate.getThumprintInHex(agentContext),\n        }\n      },\n    } satisfies X509Context,\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAYA,MAAa,kBAAkB,iBAA4C;CACzE,MAAM,SAAS,IAAI,eAAe,aAAa;CAC/C,MAAM,MAAM,aAAa,QAAQ,iBAAiB;AAElD,QAAO;EACL,QAAQ;GACN,QAAQ,OAAO,UAAU;IACvB,MAAM,EAAE,OAAO,oBAAoB;AACnC,WAAO,IAAI,WAAW,OAAO,OAAO,iBAAiB,MAAM,CAAC;;GAE9D,SAAS,WAAW;AAClB,WAAO,OAAO,gBAAgB,IAAI,WAAW,OAAO,CAAC;;GAEvD,6BAA6B,OAAO,UAAU;IAC5C,MAAM,EAAE,YAAY,WAAW,2BAA2B;IAM1D,MAAM,MAAM,KAAK,QALL,KACT,gBAAgB,kBAAkB,MAAM,WAAW,EAAE,kBAAkB,MAAM,UAAU,EAAE,KAAK,CAC9F,MAAM,EAAE,EACE,OAAO,KAAK,wBAAwB,UAAU,EAC9C,OAAO,KAAK,WAAW,QAAQ,EACF,GAAG;AAE7C,WAAO;KACL,SAAS,CAAC,QAAQ,SAAS;KAC3B,KAAK;KACL,KAAK;KACL,GAAG,kBAAkB,YAAY,IAAI;KACrC,KAAK;KACN;;GAEJ;EAED,MAAM;GACJ,MAAM;IACJ,MAAM,OAAO,UAAU;KACrB,MAAM,EAAE,KAAK,SAAS;KACtB,MAAM,EAAE,SAAS,KAAK,mBAAmB;KAEzC,MAAM,YAAY,UAAU,YAAY,IAAI;KAC5C,MAAM,YAAY,KAAK,WAAW,UAAU;KAE5C,MAAM,EAAE,cAAc,MAAM,IAAI,KAAK;MACnC;MACA;MACA,OAAO,UAAU;MAClB,CAAC;AAEF,YAAO;;IAET,QAAQ,OAAO,UAAU;KACvB,MAAM,EAAE,MAAM,KAAK,YAAY;KAC/B,MAAM,EAAE,MAAM,cAAc,KAAK,uBAAuB,QAAQ;KAEhE,MAAM,YAAY,UAAU,YAAY,IAAI;KAC5C,MAAM,YAAY,KAAK,WAAW,UAAU;KAE5C,MAAM,EAAE,aAAa,MAAM,IAAI,OAAO;MACpC,KAAK,EACH,WAAW,KACZ;MACD;MACA;MACA;MACD,CAAC;AAEF,YAAO;;IAEV;GACD,OAAO;IACL,MAAM,OAAO,UAAU;KACrB,MAAM,EAAE,KAAK,UAAU;KACvB,MAAM,EAAE,SAAS,MAAM,mBAAmB;KAE1C,MAAM,YAAY,UAAU,YAAY,IAAI;KAC5C,MAAM,YAAY,MAAM,WAAW,UAAU;KAE7C,MAAM,EAAE,cAAc,MAAM,IAAI,KAAK;MACnC;MACW;MACX,OAAO,UAAU;MAClB,CAAC;AAEF,YAAO;;IAET,QAAQ,OAAO,UAAU;KACvB,MAAM,EAAE,OAAO,KAAK,YAAY;KAChC,MAAM,EAAE,MAAM,cAAc,MAAM,uBAAuB,QAAQ;KAEjE,MAAM,YAAY,UAAU,YAAY,IAAI;KAC5C,MAAM,YAAY,MAAM,WAAW,UAAU;KAE7C,MAAM,EAAE,aAAa,MAAM,IAAI,OAAO;MACpC,KAAK,EACH,WAAW,KACZ;MACD;MACW;MACX;MACD,CAAC;AAEF,YAAO;;IAEV;GACF;EAED,MAAM;GACJ,qBAAqB,UAAU;IAC7B,MAAM,EAAE,aAAa,UAAU;AAE/B,WADwB,gBAAgB,mBAAmB,YAAY,CAChD,mBAAmB,MAAM;;GAElD,cAAc,OAAO,UAAU;AAE7B,WADoB,gBAAgB,mBAAmB,MAAM,YAAY,CACtD,UAAU,QAAQ;;GAEvC,0BAA0B,OAAO,UAAU;IACzC,MAAM,mBAAmB,MAAM,QAAQ,KAAK,SAAS,gBAAgB,mBAAmB,KAAK,CAAC,SAAS,MAAM,CAAC;IAC9G,MAAM,sBAAsB,MAAM,oBAAoB,KAAK,SACzD,gBAAgB,mBAAmB,KAAK,CAAC,SAAS,MAAM,CACzD;AAED,UAAM,YAAY,yBAAyB,cAAc;KACvD;KACA;KACD,CAAC;;GAEJ,oBAAoB,OAAO,UAAU;IACnC,MAAM,EAAE,gBAAgB;IACxB,MAAM,kBAAkB,gBAAgB,mBAAmB,YAAY;AACvE,WAAO;KACL,GAAG,gBAAgB;KACnB,YAAY,MAAM,gBAAgB,kBAAkB,aAAa;KAClE;;GAEJ;EACF"}
+{"version":3,"file":"MdocContext.mjs","names":[],"sources":["../../../src/modules/mdoc/MdocContext.ts"],"sourcesContent":["import type { MdocContext, X509Context } from '@animo-id/mdoc'\nimport { p256 } from '@noble/curves/nist.js'\nimport { hkdf } from '@noble/hashes/hkdf.js'\nimport { sha256 } from '@noble/hashes/sha2.js'\nimport type { AgentContext } from '../../agent'\nimport { CredoWebCrypto, Hasher } from '../../crypto'\nimport { TypedArrayEncoder } from '../../utils'\nimport { KeyManagementApi, type KmsJwkPublicAsymmetric, type KnownJwaSignatureAlgorithm, PublicJwk } from '../kms'\nimport { X509Certificate, X509Service } from '../x509'\n\nexport const getMdocContext = (agentContext: AgentContext): MdocContext => {\n  const crypto = new CredoWebCrypto(agentContext)\n  const kms = agentContext.resolve(KeyManagementApi)\n\n  return {\n    crypto: {\n      digest: async (input) => {\n        const { bytes, digestAlgorithm } = input\n\n        return new Uint8Array(\n          crypto.digest(\n            digestAlgorithm,\n            // NOTE: extra Uint8Array wrapping is needed here, somehow if we use `bytes.buffer` directly\n            // it's not working. Maybe due to Uint8array lengt\n            new Uint8Array(bytes).buffer\n          )\n        )\n      },\n      random: (length) => {\n        return crypto.getRandomValues(new Uint8Array(length))\n      },\n      calculateEphemeralMacKeyJwk: async (input) => {\n        const { privateKey, publicKey, sessionTranscriptBytes } = input\n        const ikm = p256.getSharedSecret(privateKey, publicKey, true).slice(1)\n        const salt = Hasher.hash(sessionTranscriptBytes, 'sha-256')\n        const info = TypedArrayEncoder.fromString('EMacKey')\n        const hk1 = hkdf(sha256, ikm, salt, info, 32)\n\n        return {\n          key_ops: ['sign', 'verify'],\n          ext: true,\n          kty: 'oct',\n          k: TypedArrayEncoder.toBase64URL(hk1),\n          alg: 'HS256',\n        }\n      },\n    },\n\n    cose: {\n      mac0: {\n        sign: async (input) => {\n          const { jwk, mac0 } = input\n          const { data } = mac0.getRawSigningData()\n\n          const publicJwk = PublicJwk.fromUnknown(jwk)\n          const algorithm = mac0.algName ?? publicJwk.signatureAlgorithm\n\n          const { signature } = await kms.sign({\n            data,\n            algorithm,\n            keyId: publicJwk.keyId,\n          })\n\n          return signature\n        },\n        verify: async (input) => {\n          const { mac0, jwk, options } = input\n          const { data, signature } = mac0.getRawVerificationData(options)\n\n          const publicJwk = PublicJwk.fromUnknown(jwk)\n          const algorithm = mac0.algName ?? publicJwk.signatureAlgorithm\n\n          const { verified } = await kms.verify({\n            key: {\n              publicJwk: jwk as KmsJwkPublicAsymmetric,\n            },\n            data,\n            algorithm,\n            signature,\n          })\n\n          return verified\n        },\n      },\n      sign1: {\n        sign: async (input) => {\n          const { jwk, sign1 } = input\n          const { data } = sign1.getRawSigningData()\n\n          const publicJwk = PublicJwk.fromUnknown(jwk)\n          const algorithm = sign1.algName ?? publicJwk.signatureAlgorithm\n\n          const { signature } = await kms.sign({\n            data,\n            algorithm: algorithm as KnownJwaSignatureAlgorithm,\n            keyId: publicJwk.keyId,\n          })\n\n          return signature\n        },\n        verify: async (input) => {\n          const { sign1, jwk, options } = input\n          const { data, signature } = sign1.getRawVerificationData(options)\n\n          const publicJwk = PublicJwk.fromUnknown(jwk)\n          const algorithm = sign1.algName ?? publicJwk.signatureAlgorithm\n\n          const { verified } = await kms.verify({\n            key: {\n              publicJwk: jwk as KmsJwkPublicAsymmetric,\n            },\n            data,\n            algorithm: algorithm as KnownJwaSignatureAlgorithm,\n            signature,\n          })\n\n          return verified\n        },\n      },\n    },\n\n    x509: {\n      getIssuerNameField: (input) => {\n        const { certificate, field } = input\n        const x509Certificate = X509Certificate.fromRawCertificate(certificate)\n        return x509Certificate.getIssuerNameField(field)\n      },\n      getPublicKey: async (input) => {\n        const certificate = X509Certificate.fromRawCertificate(input.certificate)\n        return certificate.publicJwk.toJson()\n      },\n      validateCertificateChain: async (input) => {\n        const certificateChain = input.x5chain.map((cert) => X509Certificate.fromRawCertificate(cert).toString('pem'))\n        const trustedCertificates = input.trustedCertificates.map((cert) =>\n          X509Certificate.fromRawCertificate(cert).toString('pem')\n        ) as [string, ...string[]]\n\n        await X509Service.validateCertificateChain(agentContext, {\n          certificateChain,\n          trustedCertificates,\n        })\n      },\n      getCertificateData: async (input) => {\n        const { certificate } = input\n        const x509Certificate = X509Certificate.fromRawCertificate(certificate)\n        return {\n          ...x509Certificate.data,\n          thumbprint: await x509Certificate.getThumprintInHex(agentContext),\n        }\n      },\n    } satisfies X509Context,\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAUA,MAAa,kBAAkB,iBAA4C;CACzE,MAAM,SAAS,IAAI,eAAe,aAAa;CAC/C,MAAM,MAAM,aAAa,QAAQ,iBAAiB;AAElD,QAAO;EACL,QAAQ;GACN,QAAQ,OAAO,UAAU;IACvB,MAAM,EAAE,OAAO,oBAAoB;AAEnC,WAAO,IAAI,WACT,OAAO,OACL,iBAGA,IAAI,WAAW,MAAM,CAAC,OACvB,CACF;;GAEH,SAAS,WAAW;AAClB,WAAO,OAAO,gBAAgB,IAAI,WAAW,OAAO,CAAC;;GAEvD,6BAA6B,OAAO,UAAU;IAC5C,MAAM,EAAE,YAAY,WAAW,2BAA2B;IAI1D,MAAM,MAAM,KAAK,QAHL,KAAK,gBAAgB,YAAY,WAAW,KAAK,CAAC,MAAM,EAAE,EACzD,OAAO,KAAK,wBAAwB,UAAU,EAC9C,kBAAkB,WAAW,UAAU,EACV,GAAG;AAE7C,WAAO;KACL,SAAS,CAAC,QAAQ,SAAS;KAC3B,KAAK;KACL,KAAK;KACL,GAAG,kBAAkB,YAAY,IAAI;KACrC,KAAK;KACN;;GAEJ;EAED,MAAM;GACJ,MAAM;IACJ,MAAM,OAAO,UAAU;KACrB,MAAM,EAAE,KAAK,SAAS;KACtB,MAAM,EAAE,SAAS,KAAK,mBAAmB;KAEzC,MAAM,YAAY,UAAU,YAAY,IAAI;KAC5C,MAAM,YAAY,KAAK,WAAW,UAAU;KAE5C,MAAM,EAAE,cAAc,MAAM,IAAI,KAAK;MACnC;MACA;MACA,OAAO,UAAU;MAClB,CAAC;AAEF,YAAO;;IAET,QAAQ,OAAO,UAAU;KACvB,MAAM,EAAE,MAAM,KAAK,YAAY;KAC/B,MAAM,EAAE,MAAM,cAAc,KAAK,uBAAuB,QAAQ;KAEhE,MAAM,YAAY,UAAU,YAAY,IAAI;KAC5C,MAAM,YAAY,KAAK,WAAW,UAAU;KAE5C,MAAM,EAAE,aAAa,MAAM,IAAI,OAAO;MACpC,KAAK,EACH,WAAW,KACZ;MACD;MACA;MACA;MACD,CAAC;AAEF,YAAO;;IAEV;GACD,OAAO;IACL,MAAM,OAAO,UAAU;KACrB,MAAM,EAAE,KAAK,UAAU;KACvB,MAAM,EAAE,SAAS,MAAM,mBAAmB;KAE1C,MAAM,YAAY,UAAU,YAAY,IAAI;KAC5C,MAAM,YAAY,MAAM,WAAW,UAAU;KAE7C,MAAM,EAAE,cAAc,MAAM,IAAI,KAAK;MACnC;MACW;MACX,OAAO,UAAU;MAClB,CAAC;AAEF,YAAO;;IAET,QAAQ,OAAO,UAAU;KACvB,MAAM,EAAE,OAAO,KAAK,YAAY;KAChC,MAAM,EAAE,MAAM,cAAc,MAAM,uBAAuB,QAAQ;KAEjE,MAAM,YAAY,UAAU,YAAY,IAAI;KAC5C,MAAM,YAAY,MAAM,WAAW,UAAU;KAE7C,MAAM,EAAE,aAAa,MAAM,IAAI,OAAO;MACpC,KAAK,EACH,WAAW,KACZ;MACD;MACW;MACX;MACD,CAAC;AAEF,YAAO;;IAEV;GACF;EAED,MAAM;GACJ,qBAAqB,UAAU;IAC7B,MAAM,EAAE,aAAa,UAAU;AAE/B,WADwB,gBAAgB,mBAAmB,YAAY,CAChD,mBAAmB,MAAM;;GAElD,cAAc,OAAO,UAAU;AAE7B,WADoB,gBAAgB,mBAAmB,MAAM,YAAY,CACtD,UAAU,QAAQ;;GAEvC,0BAA0B,OAAO,UAAU;IACzC,MAAM,mBAAmB,MAAM,QAAQ,KAAK,SAAS,gBAAgB,mBAAmB,KAAK,CAAC,SAAS,MAAM,CAAC;IAC9G,MAAM,sBAAsB,MAAM,oBAAoB,KAAK,SACzD,gBAAgB,mBAAmB,KAAK,CAAC,SAAS,MAAM,CACzD;AAED,UAAM,YAAY,yBAAyB,cAAc;KACvD;KACA;KACD,CAAC;;GAEJ,oBAAoB,OAAO,UAAU;IACnC,MAAM,EAAE,gBAAgB;IACxB,MAAM,kBAAkB,gBAAgB,mBAAmB,YAAY;AACvE,WAAO;KACL,GAAG,gBAAgB;KACnB,YAAY,MAAM,gBAAgB,kBAAkB,aAAa;KAClE;;GAEJ;EACF"}

package/build/modules/mdoc/MdocDeviceResponse.d.mts

@@ -1,7 +1,7 @@
 import { ClaimFormat } from "../vc/models/ClaimFormat.mjs";
 import { MdocDeviceResponseOptions, MdocDeviceResponsePresentationDefinitionOptions, MdocDeviceResponseVerifyOptions } from "./MdocOptions.mjs";
-import { Mdoc } from "./Mdoc.mjs";
 import { DifPresentationExchangeDefinition } from "../dif-presentation-exchange/models/index.mjs";
+import { Mdoc } from "./Mdoc.mjs";
 import { AgentContext } from "../../agent/context/AgentContext.mjs";
 import * as _sphereon_pex_models0 from "@sphereon/pex-models";
 import { InputDescriptorV2 } from "@sphereon/pex-models";

package/build/modules/mdoc/MdocDeviceResponse.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"MdocDeviceResponse.d.mts","names":[],"sources":["../../../src/modules/mdoc/MdocDeviceResponse.ts"],"sourcesContent":[],"mappings":";;;;;;;;;cAoCa,kBAAA;;aAGS;;;AAHtB;;MAGsB,WAAA,CAAA,CAAA,EAME,WAAA,CAAA,OANF;;;;MAqGiC,OAAA,CAAA,CAAA,EAAA,MAAA;;;;sCAjFV;;2CAmCE;;+CA8CQ;;;kBAAiC,qBAAA,CAAA,aAAA;;;;;;;;;;;;;;;;;;;;;;;QA4CnE,EAAA,EAAA,MAAA;QACX,IAAA,CAAA,EAAA,MAAA;QAqBQ,OAAA,CAAA,EAAA,MAAA;QACL,KAAA,CAAA,OAAA,CAAA,MAAA,CAAA;QAA+C,QAAA,CAAA,OAAA,gCAAA;MA0DH,CAAA,EAAA;MAAuB,EAAA,EAAA,MAAA;MAAyB,IAAA,CAAA,EAAA,MAAA;MAAA,OAAA,CAAA,EAAA,MAAA;MAAA,uBAAA,CAAA,OAAA,6CAAA;IA8CrE,CAAA,GAAA;MAA4B,MAAA,EAAA;QAAL,QAAA,wCAAA,SAAA;MAAuD,CAAA;MAAA,iBAAA,EAAA;QAAA,MAAA,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBA/H7F;UACX;;;;;;kEAqBQ,uBACL,kDAA+C;;;;;;;;;;;;4CA0DH,uBAAuB,4BAAyB,QAAA,WAAA;uBA8CrE,uBAAuB,KAAK,qDAAkD,QAAA"}
+{"version":3,"file":"MdocDeviceResponse.d.mts","names":[],"sources":["../../../src/modules/mdoc/MdocDeviceResponse.ts"],"sourcesContent":[],"mappings":";;;;;;;;;cAkCa,kBAAA;;aAGS;;;AAHtB;;MAGsB,WAAA,CAAA,CAAA,EAME,WAAA,CAAA,OANF;;;;MAqGiC,OAAA,CAAA,CAAA,EAAA,MAAA;;;;sCAjFV;;2CAmCE;;+CA8CQ;;;kBAAiC,qBAAA,CAAA,aAAA;;;;;;;;;;;;;;;;;;;;;;;QA2CX,EAAA,EAAA,MAAA;QAAyB,IAAA,CAAA,EAAA,MAAA;QAoBpF,OAAA,CAAA,EAAA,MAAA;QACL,KAAA,CAAA,OAAA,CAAA,MAAA,CAAA;QAA+C,QAAA,CAAA,OAAA,gCAAA;MA0DH,CAAA,EAAA;MAAuB,EAAA,EAAA,MAAA;MAAyB,IAAA,CAAA,EAAA,MAAA;MAAA,OAAA,CAAA,EAAA,MAAA;MAAA,uBAAA,CAAA,OAAA,6CAAA;IA8CrE,CAAA,GAAA;MAA4B,MAAA,EAAA;QAAL,QAAA,wCAAA,SAAA;MAAuD,CAAA;MAAA,iBAAA,EAAA;QAAA,MAAA,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBA7HrC;UAAyB;;;;;;kEAoBpF,uBACL,kDAA+C;;;;;;;;;;;;4CA0DH,uBAAuB,4BAAyB,QAAA,WAAA;uBA8CrE,uBAAuB,KAAK,qDAAkD,QAAA"}

package/build/modules/mdoc/MdocDeviceResponse.d.ts

@@ -1,7 +1,7 @@
 import { ClaimFormat } from "../vc/models/ClaimFormat.js";
 import { MdocDeviceResponseOptions, MdocDeviceResponsePresentationDefinitionOptions, MdocDeviceResponseVerifyOptions } from "./MdocOptions.js";
-import { Mdoc } from "./Mdoc.js";
 import { DifPresentationExchangeDefinition } from "../dif-presentation-exchange/models/index.js";
+import { Mdoc } from "./Mdoc.js";
 import { AgentContext } from "../../agent/context/AgentContext.js";
 import * as _sphereon_pex_models0 from "@sphereon/pex-models";
 import { InputDescriptorV2 } from "@sphereon/pex-models";

package/build/modules/mdoc/MdocDeviceResponse.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MdocDeviceResponse.d.ts","names":[],"sources":["../../../src/modules/mdoc/MdocDeviceResponse.ts"],"sourcesContent":[],"mappings":";;;;;;;;;cAoCa,kBAAA;;aAGS;EAHT,QAAA,WAAA,CAAA;EAAkB;;;MAuBc,WAAA,CAAA,CAAA,EAdrB,WAAA,CAAA,OAcqB;;;;;;;;sCAAA;;2CAmCE;;+CA8CQ;;;kBAAiC,qBAAA,CAAA,aAAA;;;;;;;;;;;;;;;;;;;;;UA4CnE,YAAA,CAAA,OAAA,qCAAA;QACX,CAAA;QAqBQ,EAAA,EAAA,MAAA;QACL,IAAA,CAAA,EAAA,MAAA;QAA+C,OAAA,CAAA,EAAA,MAAA;QA0DH,KAAA,CAAA,OAAA,CAAA,MAAA,CAAA;QAAuB,QAAA,CAAA,OAAA,gCAAA;MAAyB,CAAA,EAAA;MAAA,EAAA,EAAA,MAAA;MAAA,IAAA,CAAA,EAAA,MAAA;MA8CrE,OAAA,CAAA,EAAA,MAAA;MAA4B,uBAAA,CAAA,OAAA,6CAAA;IAAL,CAAA,GAAA;MAAuD,MAAA,EAAA;QAAA,QAAA,wCAAA,SAAA;MAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBA/H7F;UACX;;;;;;kEAqBQ,uBACL,kDAA+C;;;;;;;;;;;;4CA0DH,uBAAuB,4BAAyB,QAAA,WAAA;uBA8CrE,uBAAuB,KAAK,qDAAkD,QAAA"}
+{"version":3,"file":"MdocDeviceResponse.d.ts","names":[],"sources":["../../../src/modules/mdoc/MdocDeviceResponse.ts"],"sourcesContent":[],"mappings":";;;;;;;;;cAkCa,kBAAA;;aAGS;EAHT,QAAA,WAAA,CAAA;EAAkB;;;MAuBc,WAAA,CAAA,CAAA,EAdrB,WAAA,CAAA,OAcqB;;;;;;;;sCAAA;;2CAmCE;;+CA8CQ;;;kBAAiC,qBAAA,CAAA,aAAA;;;;;;;;;;;;;;;;;;;;;UA2CX,YAAA,CAAA,OAAA,qCAAA;QAAyB,CAAA;QAoBpF,EAAA,EAAA,MAAA;QACL,IAAA,CAAA,EAAA,MAAA;QAA+C,OAAA,CAAA,EAAA,MAAA;QA0DH,KAAA,CAAA,OAAA,CAAA,MAAA,CAAA;QAAuB,QAAA,CAAA,OAAA,gCAAA;MAAyB,CAAA,EAAA;MAAA,EAAA,EAAA,MAAA;MAAA,IAAA,CAAA,EAAA,MAAA;MA8CrE,OAAA,CAAA,EAAA,MAAA;MAA4B,uBAAA,CAAA,OAAA,6CAAA;IAAL,CAAA,GAAA;MAAuD,MAAA,EAAA;QAAA,QAAA,wCAAA,SAAA;MAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBA7HrC;UAAyB;;;;;;kEAoBpF,uBACL,kDAA+C;;;;;;;;;;;;4CA0DH,uBAAuB,4BAAyB,QAAA,WAAA;uBA8CrE,uBAAuB,KAAK,qDAAkD,QAAA"}

package/build/modules/mdoc/MdocDeviceResponse.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"MdocDeviceResponse.mjs","names":["base64Url: string","documents: Mdoc[]","deviceResponses: MdocDeviceResponse[]","mdocLimitDisclosureToInputDescriptor","nonMdocPresentationDefinition: DifPresentationExchangeDefinition","this"],"sources":["../../../src/modules/mdoc/MdocDeviceResponse.ts"],"sourcesContent":["import type { MdocContext } from '@animo-id/mdoc'\nimport type { PresentationDefinition } from '@animo-id/mdoc'\nimport type { InputDescriptorV2 } from '@sphereon/pex-models'\nimport type { AgentContext } from '../../agent'\nimport type { DifPresentationExchangeDefinition } from '../dif-presentation-exchange'\nimport type {\n  MdocDeviceResponseOptions,\n  MdocDeviceResponsePresentationDefinitionOptions,\n  MdocDeviceResponseVerifyOptions,\n  MdocSessionTranscriptOptions,\n} from './MdocOptions'\n\nimport {\n  DataItem,\n  DeviceRequest,\n  DeviceResponse,\n  DeviceSignedDocument,\n  MDoc,\n  MDocStatus,\n  Verifier,\n  cborEncode,\n  limitDisclosureToInputDescriptor as mdocLimitDisclosureToInputDescriptor,\n  defaultCallback as onCheck,\n  parseDeviceResponse,\n  parseIssuerSigned,\n} from '@animo-id/mdoc'\nimport { uuid } from '../../utils/uuid'\nimport { PublicJwk } from '../kms'\nimport { ClaimFormat } from '../vc'\nimport { TypedArrayEncoder } from './../../utils'\nimport { Mdoc } from './Mdoc'\nimport { getMdocContext } from './MdocContext'\nimport { MdocError } from './MdocError'\nimport { isMdocSupportedSignatureAlgorithm, mdocSupporteSignatureAlgorithms } from './mdocSupportedAlgs'\nimport { nameSpacesRecordToMap } from './mdocUtil'\n\nexport class MdocDeviceResponse {\n  private constructor(\n    public base64Url: string,\n    public documents: Mdoc[]\n  ) {}\n\n  /**\n   * claim format is convenience method added to all credential instances\n   */\n  public get claimFormat() {\n    return ClaimFormat.MsoMdoc as const\n  }\n\n  /**\n   * Encoded is convenience method added to all credential instances\n   */\n  public get encoded() {\n    return this.base64Url\n  }\n\n  /**\n   * To support a single DeviceResponse with multiple documents in OpenID4VP\n   */\n  public splitIntoSingleDocumentResponses(): MdocDeviceResponse[] {\n    const deviceResponses: MdocDeviceResponse[] = []\n\n    if (this.documents.length === 0) {\n      throw new MdocError('mdoc device response does not contain any mdocs')\n    }\n\n    for (const document of this.documents) {\n      const deviceResponse = new MDoc()\n\n      deviceResponse.addDocument(document.issuerSignedDocument)\n\n      deviceResponses.push(MdocDeviceResponse.fromDeviceResponse(deviceResponse))\n    }\n\n    return deviceResponses\n  }\n\n  private static fromDeviceResponse(mdoc: MDoc) {\n    const documents = mdoc.documents.map((doc) => {\n      const prepared = doc.prepare()\n      const docType = prepared.get('docType') as string\n      const issuerSigned = cborEncode(prepared.get('issuerSigned'))\n      const deviceSigned = cborEncode(prepared.get('deviceSigned'))\n\n      return Mdoc.fromDeviceSignedDocument(\n        TypedArrayEncoder.toBase64URL(issuerSigned),\n        TypedArrayEncoder.toBase64URL(deviceSigned),\n        docType\n      )\n    })\n\n    return new MdocDeviceResponse(TypedArrayEncoder.toBase64URL(mdoc.encode()), documents)\n  }\n\n  public static fromBase64Url(base64Url: string) {\n    const parsed = parseDeviceResponse(TypedArrayEncoder.fromBase64(base64Url))\n    if (parsed.status !== MDocStatus.OK) {\n      throw new MdocError('Parsing Mdoc Device Response failed.')\n    }\n\n    return MdocDeviceResponse.fromDeviceResponse(parsed)\n  }\n\n  private static assertMdocInputDescriptor(inputDescriptor: InputDescriptorV2) {\n    if (!inputDescriptor.format || !inputDescriptor.format.mso_mdoc) {\n      throw new MdocError(`Input descriptor must contain 'mso_mdoc' format property`)\n    }\n\n    if (!inputDescriptor.format.mso_mdoc.alg) {\n      throw new MdocError(`Input descriptor mso_mdoc must contain 'alg' property`)\n    }\n\n    if (!inputDescriptor.constraints?.limit_disclosure || inputDescriptor.constraints.limit_disclosure !== 'required') {\n      throw new MdocError(\n        `Input descriptor must contain 'limit_disclosure' constraints property which is set to required`\n      )\n    }\n\n    if (!inputDescriptor.constraints?.fields?.every((field) => field.intent_to_retain !== undefined)) {\n      throw new MdocError(`Input descriptor must contain 'intent_to_retain' constraints property`)\n    }\n\n    return {\n      ...inputDescriptor,\n      format: {\n        mso_mdoc: inputDescriptor.format.mso_mdoc,\n      },\n      constraints: {\n        ...inputDescriptor.constraints,\n        limit_disclosure: 'required',\n        fields: (inputDescriptor.constraints.fields ?? []).map((field) => {\n          return {\n            ...field,\n            intent_to_retain: field.intent_to_retain ?? false,\n          }\n        }),\n      },\n    } satisfies PresentationDefinition['input_descriptors'][number]\n  }\n\n  public static partitionPresentationDefinition = (pd: DifPresentationExchangeDefinition) => {\n    const nonMdocPresentationDefinition: DifPresentationExchangeDefinition = {\n      ...pd,\n      input_descriptors: pd.input_descriptors.filter(\n        (id) => !Object.keys((id as InputDescriptorV2).format ?? {}).includes('mso_mdoc')\n      ),\n    } as DifPresentationExchangeDefinition\n\n    const mdocPresentationDefinition = {\n      ...pd,\n      format: { mso_mdoc: pd.format?.mso_mdoc },\n      input_descriptors: (pd.input_descriptors as InputDescriptorV2[])\n        .filter((id) => Object.keys(id.format ?? {}).includes('mso_mdoc'))\n        .map(this.assertMdocInputDescriptor),\n    }\n\n    return { mdocPresentationDefinition, nonMdocPresentationDefinition }\n  }\n\n  private static createPresentationSubmission(input: {\n    id: string\n    presentationDefinition: {\n      id: string\n      input_descriptors: ReturnType<typeof MdocDeviceResponse.assertMdocInputDescriptor>[]\n    }\n  }) {\n    const { id, presentationDefinition } = input\n    if (presentationDefinition.input_descriptors.length !== 1) {\n      throw new MdocError('Currently Mdoc Presentation Submissions can only be created for a sigle input descriptor')\n    }\n    return {\n      id,\n      definition_id: presentationDefinition.id,\n      descriptor_map: [\n        {\n          id: presentationDefinition.input_descriptors[0].id,\n          format: 'mso_mdoc',\n          path: '$',\n        },\n      ],\n    }\n  }\n\n  public static limitDisclosureToInputDescriptor(options: {\n    inputDescriptor: InputDescriptorV2\n    mdoc: Mdoc\n  }) {\n    const { mdoc } = options\n\n    const inputDescriptor = MdocDeviceResponse.assertMdocInputDescriptor(options.inputDescriptor)\n    const _mdoc = parseIssuerSigned(TypedArrayEncoder.fromBase64(mdoc.base64Url), mdoc.docType)\n\n    const disclosure = mdocLimitDisclosureToInputDescriptor(_mdoc, inputDescriptor)\n    const disclosedPayloadAsRecord = Object.fromEntries(\n      Array.from(disclosure.entries()).map(([namespace, issuerSignedItem]) => {\n        return [\n          namespace,\n          Object.fromEntries(issuerSignedItem.map((item) => [item.elementIdentifier, item.elementValue])),\n        ]\n      })\n    )\n\n    return disclosedPayloadAsRecord\n  }\n\n  public static async createPresentationDefinitionDeviceResponse(\n    agentContext: AgentContext,\n    options: MdocDeviceResponsePresentationDefinitionOptions\n  ) {\n    const presentationDefinition = MdocDeviceResponse.partitionPresentationDefinition(\n      options.presentationDefinition\n    ).mdocPresentationDefinition\n\n    const docTypes = options.mdocs.map((i) => i.docType)\n\n    const combinedDeviceResponseMdoc = new MDoc()\n\n    for (const document of options.mdocs) {\n      const deviceKeyJwk = document.deviceKey\n      if (!deviceKeyJwk) throw new MdocError(`Device key is missing in mdoc with doctype ${document.docType}`)\n\n      // Set keyId to legacy key id if it doesn't have a key id set\n      if (!deviceKeyJwk.hasKeyId) {\n        deviceKeyJwk.keyId = deviceKeyJwk.legacyKeyId\n      }\n\n      const alg = MdocDeviceResponse.getAlgForDeviceKeyJwk(deviceKeyJwk)\n\n      // We do PEX filtering on a different layer, so we only include the needed input descriptor here\n      const presentationDefinitionForDocument = {\n        ...presentationDefinition,\n        input_descriptors: presentationDefinition.input_descriptors.filter(\n          (inputDescriptor) => inputDescriptor.id === document.docType\n        ),\n      }\n\n      const mdocContext = getMdocContext(agentContext)\n      const issuerSignedDocument = parseIssuerSigned(TypedArrayEncoder.fromBase64(document.base64Url), document.docType)\n      const deviceResponseBuilder = DeviceResponse.from(new MDoc([issuerSignedDocument]))\n        .usingPresentationDefinition(presentationDefinitionForDocument)\n        .authenticateWithSignature(deviceKeyJwk.toJson(), alg)\n        .usingSessionTranscriptBytes(\n          await MdocDeviceResponse.getSessionTranscriptBytesForOptions(mdocContext, options.sessionTranscriptOptions)\n        )\n\n      for (const [nameSpace, nameSpaceValue] of Object.entries(options.deviceNameSpaces ?? {})) {\n        deviceResponseBuilder.addDeviceNameSpace(nameSpace, nameSpaceValue)\n      }\n\n      const deviceResponseMdoc = await deviceResponseBuilder.sign(mdocContext)\n      combinedDeviceResponseMdoc.addDocument(deviceResponseMdoc.documents[0])\n    }\n\n    return {\n      deviceResponseBase64Url: TypedArrayEncoder.toBase64URL(combinedDeviceResponseMdoc.encode()),\n      presentationSubmission: MdocDeviceResponse.createPresentationSubmission({\n        id: `MdocPresentationSubmission ${uuid()}`,\n        presentationDefinition: {\n          ...presentationDefinition,\n          input_descriptors: presentationDefinition.input_descriptors.filter((i) => docTypes.includes(i.id)),\n        },\n      }),\n    }\n  }\n\n  public static async createDeviceResponse(agentContext: AgentContext, options: MdocDeviceResponseOptions) {\n    const combinedDeviceResponseMdoc = new MDoc()\n\n    for (const document of options.mdocs) {\n      const deviceKeyJwk = document.deviceKey\n      if (!deviceKeyJwk) throw new MdocError(`Device key is missing in mdoc with doctype ${document.docType}`)\n      const alg = MdocDeviceResponse.getAlgForDeviceKeyJwk(deviceKeyJwk)\n\n      // Set keyId to legacy key id if it doesn't have a key id set\n      if (!deviceKeyJwk.hasKeyId) {\n        deviceKeyJwk.keyId = deviceKeyJwk.legacyKeyId\n      }\n\n      const issuerSignedDocument = parseIssuerSigned(TypedArrayEncoder.fromBase64(document.base64Url), document.docType)\n\n      const deviceRequestForDocument = DeviceRequest.from(\n        '1.0',\n        options.documentRequests\n          .filter((request) => request.docType === issuerSignedDocument.docType)\n          .map((request) => ({\n            itemsRequestData: {\n              docType: request.docType,\n              nameSpaces: nameSpacesRecordToMap(request.nameSpaces),\n            },\n          }))\n      )\n\n      const mdocContext = getMdocContext(agentContext)\n      const deviceResponseBuilder = DeviceResponse.from(new MDoc([issuerSignedDocument]))\n        .authenticateWithSignature(deviceKeyJwk.toJson(), alg)\n        .usingDeviceRequest(deviceRequestForDocument)\n        .usingSessionTranscriptBytes(\n          await MdocDeviceResponse.getSessionTranscriptBytesForOptions(mdocContext, options.sessionTranscriptOptions)\n        )\n\n      for (const [nameSpace, nameSpaceValue] of Object.entries(options.deviceNameSpaces ?? {})) {\n        deviceResponseBuilder.addDeviceNameSpace(nameSpace, nameSpaceValue)\n      }\n\n      const deviceResponseMdoc = await deviceResponseBuilder.sign(mdocContext)\n      combinedDeviceResponseMdoc.addDocument(deviceResponseMdoc.documents[0])\n    }\n\n    return combinedDeviceResponseMdoc.encode()\n  }\n\n  public async verify(agentContext: AgentContext, options: Omit<MdocDeviceResponseVerifyOptions, 'deviceResponse'>) {\n    const verifier = new Verifier()\n    const mdocContext = getMdocContext(agentContext)\n\n    onCheck({\n      status: this.documents.length > 0 ? 'PASSED' : 'FAILED',\n      check: 'Device Response must include at least one document.',\n      category: 'DOCUMENT_FORMAT',\n    })\n\n    const deviceResponse = parseDeviceResponse(TypedArrayEncoder.fromBase64(this.base64Url))\n\n    // NOTE: we do not use the verification from mdoc library, as it checks all documents\n    // based on the same trusted certificates\n    for (const documentIndex of this.documents.keys()) {\n      const rawDocument = deviceResponse.documents[documentIndex]\n      const document = this.documents[documentIndex]\n\n      const verificationResult = await document.verify(agentContext, {\n        now: options.now,\n        trustedCertificates: options.trustedCertificates,\n      })\n\n      if (!verificationResult.isValid) {\n        throw new MdocError(`Mdoc at index ${documentIndex} is not valid. ${verificationResult.error}`)\n      }\n\n      if (!(rawDocument instanceof DeviceSignedDocument)) {\n        onCheck({\n          status: 'FAILED',\n          category: 'DEVICE_AUTH',\n          check: `The document is not signed by the device. ${document.docType}`,\n        })\n        continue\n      }\n\n      await verifier.verifyDeviceSignature(\n        {\n          sessionTranscriptBytes: await MdocDeviceResponse.getSessionTranscriptBytesForOptions(\n            mdocContext,\n            options.sessionTranscriptOptions\n          ),\n          deviceSigned: rawDocument,\n        },\n        mdocContext\n      )\n    }\n\n    if (deviceResponse.documentErrors.length > 1) {\n      throw new MdocError('Device response verification failed.')\n    }\n\n    if (deviceResponse.status !== MDocStatus.OK) {\n      throw new MdocError('Device response verification failed. An unknown error occurred.')\n    }\n\n    return this.documents\n  }\n\n  private static async getSessionTranscriptBytesForOptions(\n    context: MdocContext,\n    options: MdocSessionTranscriptOptions\n  ) {\n    if (options.type === 'sesionTranscriptBytes') {\n      return options.sessionTranscriptBytes\n    }\n\n    // NOTE: temporary until we have updated to the new major version of mdoc\n    // Based on https://github.com/animo/mdoc/blob/main/src/mdoc/models/session-transcript.ts#L84\n    if (options.type === 'openId4Vp') {\n      return cborEncode(\n        DataItem.fromData([\n          null,\n          null,\n          [\n            'OpenID4VPHandover',\n            await context.crypto.digest({\n              digestAlgorithm: 'SHA-256',\n              bytes: cborEncode([\n                options.clientId,\n                options.verifierGeneratedNonce,\n                options.encryptionJwk?.getJwkThumbprint('sha-256') ?? null,\n                options.responseUri,\n              ]),\n            }),\n          ],\n        ])\n      )\n    }\n\n    if (options.type === 'openId4VpDraft18') {\n      return await DeviceResponse.calculateSessionTranscriptBytesForOID4VP({\n        ...options,\n        context,\n      })\n    }\n\n    // NOTE: temporary until we have updated to the new major version of mdoc\n    // Based on https://github.com/animo/mdoc/blob/main/src/mdoc/models/session-transcript.ts#L65\n    if (options.type === 'openId4VpDcApi') {\n      return cborEncode(\n        DataItem.fromData([\n          null,\n          null,\n          [\n            'OpenID4VPDCAPIHandover',\n            await context.crypto.digest({\n              digestAlgorithm: 'SHA-256',\n              bytes: cborEncode([\n                options.origin,\n                options.verifierGeneratedNonce,\n                options.encryptionJwk?.getJwkThumbprint('sha-256') ?? null,\n              ]),\n            }),\n          ],\n        ])\n      )\n    }\n\n    if (options.type === 'openId4VpDcApiDraft24') {\n      return await DeviceResponse.calculateSessionTranscriptBytesForOID4VPDCApi({\n        ...options,\n        context,\n      })\n    }\n\n    throw new MdocError('Unsupported session transcript option')\n  }\n\n  private static getAlgForDeviceKeyJwk(jwk: PublicJwk) {\n    const signatureAlgorithm = jwk.supportedSignatureAlgorithms.find(isMdocSupportedSignatureAlgorithm)\n    if (!signatureAlgorithm) {\n      throw new MdocError(\n        `Unable to create mdoc device response. No supported signature algorithm found to sign device response for jwk  ${\n          jwk.jwkTypehumanDescription\n        }. Key supports algs ${jwk.supportedSignatureAlgorithms.join(\n          ', '\n        )}. mdoc supports algs ${mdocSupporteSignatureAlgorithms.join(', ')}`\n      )\n    }\n\n    return signatureAlgorithm\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAoCA,IAAa,qBAAb,MAAa,mBAAmB;CAC9B,AAAQ,YACN,AAAOA,WACP,AAAOC,WACP;EAFO;EACA;;;;;CAMT,IAAW,cAAc;AACvB,SAAO,YAAY;;;;;CAMrB,IAAW,UAAU;AACnB,SAAO,KAAK;;;;;CAMd,AAAO,mCAAyD;EAC9D,MAAMC,kBAAwC,EAAE;AAEhD,MAAI,KAAK,UAAU,WAAW,EAC5B,OAAM,IAAI,UAAU,kDAAkD;AAGxE,OAAK,MAAM,YAAY,KAAK,WAAW;GACrC,MAAM,iBAAiB,IAAI,MAAM;AAEjC,kBAAe,YAAY,SAAS,qBAAqB;AAEzD,mBAAgB,KAAK,mBAAmB,mBAAmB,eAAe,CAAC;;AAG7E,SAAO;;CAGT,OAAe,mBAAmB,MAAY;EAC5C,MAAM,YAAY,KAAK,UAAU,KAAK,QAAQ;GAC5C,MAAM,WAAW,IAAI,SAAS;GAC9B,MAAM,UAAU,SAAS,IAAI,UAAU;GACvC,MAAM,eAAe,WAAW,SAAS,IAAI,eAAe,CAAC;GAC7D,MAAM,eAAe,WAAW,SAAS,IAAI,eAAe,CAAC;AAE7D,UAAO,KAAK,yBACV,kBAAkB,YAAY,aAAa,EAC3C,kBAAkB,YAAY,aAAa,EAC3C,QACD;IACD;AAEF,SAAO,IAAI,mBAAmB,kBAAkB,YAAY,KAAK,QAAQ,CAAC,EAAE,UAAU;;CAGxF,OAAc,cAAc,WAAmB;EAC7C,MAAM,SAAS,oBAAoB,kBAAkB,WAAW,UAAU,CAAC;AAC3E,MAAI,OAAO,WAAW,WAAW,GAC/B,OAAM,IAAI,UAAU,uCAAuC;AAG7D,SAAO,mBAAmB,mBAAmB,OAAO;;CAGtD,OAAe,0BAA0B,iBAAoC;AAC3E,MAAI,CAAC,gBAAgB,UAAU,CAAC,gBAAgB,OAAO,SACrD,OAAM,IAAI,UAAU,2DAA2D;AAGjF,MAAI,CAAC,gBAAgB,OAAO,SAAS,IACnC,OAAM,IAAI,UAAU,wDAAwD;AAG9E,MAAI,CAAC,gBAAgB,aAAa,oBAAoB,gBAAgB,YAAY,qBAAqB,WACrG,OAAM,IAAI,UACR,iGACD;AAGH,MAAI,CAAC,gBAAgB,aAAa,QAAQ,OAAO,UAAU,MAAM,qBAAqB,OAAU,CAC9F,OAAM,IAAI,UAAU,wEAAwE;AAG9F,SAAO;GACL,GAAG;GACH,QAAQ,EACN,UAAU,gBAAgB,OAAO,UAClC;GACD,aAAa;IACX,GAAG,gBAAgB;IACnB,kBAAkB;IAClB,SAAS,gBAAgB,YAAY,UAAU,EAAE,EAAE,KAAK,UAAU;AAChE,YAAO;MACL,GAAG;MACH,kBAAkB,MAAM,oBAAoB;MAC7C;MACD;IACH;GACF;;CAsBH,OAAe,6BAA6B,OAMzC;EACD,MAAM,EAAE,IAAI,2BAA2B;AACvC,MAAI,uBAAuB,kBAAkB,WAAW,EACtD,OAAM,IAAI,UAAU,2FAA2F;AAEjH,SAAO;GACL;GACA,eAAe,uBAAuB;GACtC,gBAAgB,CACd;IACE,IAAI,uBAAuB,kBAAkB,GAAG;IAChD,QAAQ;IACR,MAAM;IACP,CACF;GACF;;CAGH,OAAc,iCAAiC,SAG5C;EACD,MAAM,EAAE,SAAS;EAEjB,MAAM,kBAAkB,mBAAmB,0BAA0B,QAAQ,gBAAgB;EAG7F,MAAM,aAAaC,iCAFL,kBAAkB,kBAAkB,WAAW,KAAK,UAAU,EAAE,KAAK,QAAQ,EAE5B,gBAAgB;AAU/E,SATiC,OAAO,YACtC,MAAM,KAAK,WAAW,SAAS,CAAC,CAAC,KAAK,CAAC,WAAW,sBAAsB;AACtE,UAAO,CACL,WACA,OAAO,YAAY,iBAAiB,KAAK,SAAS,CAAC,KAAK,mBAAmB,KAAK,aAAa,CAAC,CAAC,CAChG;IACD,CACH;;CAKH,aAAoB,2CAClB,cACA,SACA;EACA,MAAM,yBAAyB,mBAAmB,gCAChD,QAAQ,uBACT,CAAC;EAEF,MAAM,WAAW,QAAQ,MAAM,KAAK,MAAM,EAAE,QAAQ;EAEpD,MAAM,6BAA6B,IAAI,MAAM;AAE7C,OAAK,MAAM,YAAY,QAAQ,OAAO;GACpC,MAAM,eAAe,SAAS;AAC9B,OAAI,CAAC,aAAc,OAAM,IAAI,UAAU,8CAA8C,SAAS,UAAU;AAGxG,OAAI,CAAC,aAAa,SAChB,cAAa,QAAQ,aAAa;GAGpC,MAAM,MAAM,mBAAmB,sBAAsB,aAAa;GAGlE,MAAM,oCAAoC;IACxC,GAAG;IACH,mBAAmB,uBAAuB,kBAAkB,QACzD,oBAAoB,gBAAgB,OAAO,SAAS,QACtD;IACF;GAED,MAAM,cAAc,eAAe,aAAa;GAChD,MAAM,uBAAuB,kBAAkB,kBAAkB,WAAW,SAAS,UAAU,EAAE,SAAS,QAAQ;GAClH,MAAM,wBAAwB,eAAe,KAAK,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAChF,4BAA4B,kCAAkC,CAC9D,0BAA0B,aAAa,QAAQ,EAAE,IAAI,CACrD,4BACC,MAAM,mBAAmB,oCAAoC,aAAa,QAAQ,yBAAyB,CAC5G;AAEH,QAAK,MAAM,CAAC,WAAW,mBAAmB,OAAO,QAAQ,QAAQ,oBAAoB,EAAE,CAAC,CACtF,uBAAsB,mBAAmB,WAAW,eAAe;GAGrE,MAAM,qBAAqB,MAAM,sBAAsB,KAAK,YAAY;AACxE,8BAA2B,YAAY,mBAAmB,UAAU,GAAG;;AAGzE,SAAO;GACL,yBAAyB,kBAAkB,YAAY,2BAA2B,QAAQ,CAAC;GAC3F,wBAAwB,mBAAmB,6BAA6B;IACtE,IAAI,8BAA8B,MAAM;IACxC,wBAAwB;KACtB,GAAG;KACH,mBAAmB,uBAAuB,kBAAkB,QAAQ,MAAM,SAAS,SAAS,EAAE,GAAG,CAAC;KACnG;IACF,CAAC;GACH;;CAGH,aAAoB,qBAAqB,cAA4B,SAAoC;EACvG,MAAM,6BAA6B,IAAI,MAAM;AAE7C,OAAK,MAAM,YAAY,QAAQ,OAAO;GACpC,MAAM,eAAe,SAAS;AAC9B,OAAI,CAAC,aAAc,OAAM,IAAI,UAAU,8CAA8C,SAAS,UAAU;GACxG,MAAM,MAAM,mBAAmB,sBAAsB,aAAa;AAGlE,OAAI,CAAC,aAAa,SAChB,cAAa,QAAQ,aAAa;GAGpC,MAAM,uBAAuB,kBAAkB,kBAAkB,WAAW,SAAS,UAAU,EAAE,SAAS,QAAQ;GAElH,MAAM,2BAA2B,cAAc,KAC7C,OACA,QAAQ,iBACL,QAAQ,YAAY,QAAQ,YAAY,qBAAqB,QAAQ,CACrE,KAAK,aAAa,EACjB,kBAAkB;IAChB,SAAS,QAAQ;IACjB,YAAY,sBAAsB,QAAQ,WAAW;IACtD,EACF,EAAE,CACN;GAED,MAAM,cAAc,eAAe,aAAa;GAChD,MAAM,wBAAwB,eAAe,KAAK,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAChF,0BAA0B,aAAa,QAAQ,EAAE,IAAI,CACrD,mBAAmB,yBAAyB,CAC5C,4BACC,MAAM,mBAAmB,oCAAoC,aAAa,QAAQ,yBAAyB,CAC5G;AAEH,QAAK,MAAM,CAAC,WAAW,mBAAmB,OAAO,QAAQ,QAAQ,oBAAoB,EAAE,CAAC,CACtF,uBAAsB,mBAAmB,WAAW,eAAe;GAGrE,MAAM,qBAAqB,MAAM,sBAAsB,KAAK,YAAY;AACxE,8BAA2B,YAAY,mBAAmB,UAAU,GAAG;;AAGzE,SAAO,2BAA2B,QAAQ;;CAG5C,MAAa,OAAO,cAA4B,SAAkE;EAChH,MAAM,WAAW,IAAI,UAAU;EAC/B,MAAM,cAAc,eAAe,aAAa;AAEhD,kBAAQ;GACN,QAAQ,KAAK,UAAU,SAAS,IAAI,WAAW;GAC/C,OAAO;GACP,UAAU;GACX,CAAC;EAEF,MAAM,iBAAiB,oBAAoB,kBAAkB,WAAW,KAAK,UAAU,CAAC;AAIxF,OAAK,MAAM,iBAAiB,KAAK,UAAU,MAAM,EAAE;GACjD,MAAM,cAAc,eAAe,UAAU;GAC7C,MAAM,WAAW,KAAK,UAAU;GAEhC,MAAM,qBAAqB,MAAM,SAAS,OAAO,cAAc;IAC7D,KAAK,QAAQ;IACb,qBAAqB,QAAQ;IAC9B,CAAC;AAEF,OAAI,CAAC,mBAAmB,QACtB,OAAM,IAAI,UAAU,iBAAiB,cAAc,iBAAiB,mBAAmB,QAAQ;AAGjG,OAAI,EAAE,uBAAuB,uBAAuB;AAClD,oBAAQ;KACN,QAAQ;KACR,UAAU;KACV,OAAO,6CAA6C,SAAS;KAC9D,CAAC;AACF;;AAGF,SAAM,SAAS,sBACb;IACE,wBAAwB,MAAM,mBAAmB,oCAC/C,aACA,QAAQ,yBACT;IACD,cAAc;IACf,EACD,YACD;;AAGH,MAAI,eAAe,eAAe,SAAS,EACzC,OAAM,IAAI,UAAU,uCAAuC;AAG7D,MAAI,eAAe,WAAW,WAAW,GACvC,OAAM,IAAI,UAAU,kEAAkE;AAGxF,SAAO,KAAK;;CAGd,aAAqB,oCACnB,SACA,SACA;AACA,MAAI,QAAQ,SAAS,wBACnB,QAAO,QAAQ;AAKjB,MAAI,QAAQ,SAAS,YACnB,QAAO,WACL,SAAS,SAAS;GAChB;GACA;GACA,CACE,qBACA,MAAM,QAAQ,OAAO,OAAO;IAC1B,iBAAiB;IACjB,OAAO,WAAW;KAChB,QAAQ;KACR,QAAQ;KACR,QAAQ,eAAe,iBAAiB,UAAU,IAAI;KACtD,QAAQ;KACT,CAAC;IACH,CAAC,CACH;GACF,CAAC,CACH;AAGH,MAAI,QAAQ,SAAS,mBACnB,QAAO,MAAM,eAAe,yCAAyC;GACnE,GAAG;GACH;GACD,CAAC;AAKJ,MAAI,QAAQ,SAAS,iBACnB,QAAO,WACL,SAAS,SAAS;GAChB;GACA;GACA,CACE,0BACA,MAAM,QAAQ,OAAO,OAAO;IAC1B,iBAAiB;IACjB,OAAO,WAAW;KAChB,QAAQ;KACR,QAAQ;KACR,QAAQ,eAAe,iBAAiB,UAAU,IAAI;KACvD,CAAC;IACH,CAAC,CACH;GACF,CAAC,CACH;AAGH,MAAI,QAAQ,SAAS,wBACnB,QAAO,MAAM,eAAe,8CAA8C;GACxE,GAAG;GACH;GACD,CAAC;AAGJ,QAAM,IAAI,UAAU,wCAAwC;;CAG9D,OAAe,sBAAsB,KAAgB;EACnD,MAAM,qBAAqB,IAAI,6BAA6B,KAAK,kCAAkC;AACnG,MAAI,CAAC,mBACH,OAAM,IAAI,UACR,kHACE,IAAI,wBACL,sBAAsB,IAAI,6BAA6B,KACtD,KACD,CAAC,uBAAuB,gCAAgC,KAAK,KAAK,GACpE;AAGH,SAAO;;;;mBAxTK,mCAAmC,OAA0C;CACzF,MAAMC,gCAAmE;EACvE,GAAG;EACH,mBAAmB,GAAG,kBAAkB,QACrC,OAAO,CAAC,OAAO,KAAM,GAAyB,UAAU,EAAE,CAAC,CAAC,SAAS,WAAW,CAClF;EACF;AAUD,QAAO;EAAE,4BAR0B;GACjC,GAAG;GACH,QAAQ,EAAE,UAAU,GAAG,QAAQ,UAAU;GACzC,mBAAoB,GAAG,kBACpB,QAAQ,OAAO,OAAO,KAAK,GAAG,UAAU,EAAE,CAAC,CAAC,SAAS,WAAW,CAAC,CACjE,IAAIC,oBAAK,0BAA0B;GACvC;EAEoC;EAA+B"}
+{"version":3,"file":"MdocDeviceResponse.mjs","names":["base64Url: string","documents: Mdoc[]","deviceResponses: MdocDeviceResponse[]","mdocLimitDisclosureToInputDescriptor","nonMdocPresentationDefinition: DifPresentationExchangeDefinition","this"],"sources":["../../../src/modules/mdoc/MdocDeviceResponse.ts"],"sourcesContent":["import type { MdocContext, PresentationDefinition } from '@animo-id/mdoc'\nimport {\n  cborEncode,\n  DataItem,\n  DeviceRequest,\n  DeviceResponse,\n  DeviceSignedDocument,\n  MDoc,\n  MDocStatus,\n  limitDisclosureToInputDescriptor as mdocLimitDisclosureToInputDescriptor,\n  defaultCallback as onCheck,\n  parseDeviceResponse,\n  parseIssuerSigned,\n  Verifier,\n} from '@animo-id/mdoc'\nimport type { InputDescriptorV2 } from '@sphereon/pex-models'\nimport type { AgentContext } from '../../agent'\nimport { TypedArrayEncoder } from './../../utils'\nimport { uuid } from '../../utils/uuid'\nimport type { DifPresentationExchangeDefinition } from '../dif-presentation-exchange'\nimport { PublicJwk } from '../kms'\nimport { ClaimFormat } from '../vc'\nimport { Mdoc } from './Mdoc'\nimport { getMdocContext } from './MdocContext'\nimport { MdocError } from './MdocError'\nimport type {\n  MdocDeviceResponseOptions,\n  MdocDeviceResponsePresentationDefinitionOptions,\n  MdocDeviceResponseVerifyOptions,\n  MdocSessionTranscriptOptions,\n} from './MdocOptions'\nimport { isMdocSupportedSignatureAlgorithm, mdocSupporteSignatureAlgorithms } from './mdocSupportedAlgs'\nimport { nameSpacesRecordToMap } from './mdocUtil'\n\nexport class MdocDeviceResponse {\n  private constructor(\n    public base64Url: string,\n    public documents: Mdoc[]\n  ) {}\n\n  /**\n   * claim format is convenience method added to all credential instances\n   */\n  public get claimFormat() {\n    return ClaimFormat.MsoMdoc as const\n  }\n\n  /**\n   * Encoded is convenience method added to all credential instances\n   */\n  public get encoded() {\n    return this.base64Url\n  }\n\n  /**\n   * To support a single DeviceResponse with multiple documents in OpenID4VP\n   */\n  public splitIntoSingleDocumentResponses(): MdocDeviceResponse[] {\n    const deviceResponses: MdocDeviceResponse[] = []\n\n    if (this.documents.length === 0) {\n      throw new MdocError('mdoc device response does not contain any mdocs')\n    }\n\n    for (const document of this.documents) {\n      const deviceResponse = new MDoc()\n\n      deviceResponse.addDocument(document.issuerSignedDocument)\n\n      deviceResponses.push(MdocDeviceResponse.fromDeviceResponse(deviceResponse))\n    }\n\n    return deviceResponses\n  }\n\n  private static fromDeviceResponse(mdoc: MDoc) {\n    const documents = mdoc.documents.map((doc) => {\n      const prepared = doc.prepare()\n      const docType = prepared.get('docType') as string\n      const issuerSigned = cborEncode(prepared.get('issuerSigned'))\n      const deviceSigned = cborEncode(prepared.get('deviceSigned'))\n\n      return Mdoc.fromDeviceSignedDocument(\n        TypedArrayEncoder.toBase64URL(issuerSigned),\n        TypedArrayEncoder.toBase64URL(deviceSigned),\n        docType\n      )\n    })\n\n    return new MdocDeviceResponse(TypedArrayEncoder.toBase64URL(mdoc.encode()), documents)\n  }\n\n  public static fromBase64Url(base64Url: string) {\n    const parsed = parseDeviceResponse(TypedArrayEncoder.fromBase64(base64Url))\n    if (parsed.status !== MDocStatus.OK) {\n      throw new MdocError('Parsing Mdoc Device Response failed.')\n    }\n\n    return MdocDeviceResponse.fromDeviceResponse(parsed)\n  }\n\n  private static assertMdocInputDescriptor(inputDescriptor: InputDescriptorV2) {\n    if (!inputDescriptor.format || !inputDescriptor.format.mso_mdoc) {\n      throw new MdocError(`Input descriptor must contain 'mso_mdoc' format property`)\n    }\n\n    if (!inputDescriptor.format.mso_mdoc.alg) {\n      throw new MdocError(`Input descriptor mso_mdoc must contain 'alg' property`)\n    }\n\n    if (!inputDescriptor.constraints?.limit_disclosure || inputDescriptor.constraints.limit_disclosure !== 'required') {\n      throw new MdocError(\n        `Input descriptor must contain 'limit_disclosure' constraints property which is set to required`\n      )\n    }\n\n    if (!inputDescriptor.constraints?.fields?.every((field) => field.intent_to_retain !== undefined)) {\n      throw new MdocError(`Input descriptor must contain 'intent_to_retain' constraints property`)\n    }\n\n    return {\n      ...inputDescriptor,\n      format: {\n        mso_mdoc: inputDescriptor.format.mso_mdoc,\n      },\n      constraints: {\n        ...inputDescriptor.constraints,\n        limit_disclosure: 'required',\n        fields: (inputDescriptor.constraints.fields ?? []).map((field) => {\n          return {\n            ...field,\n            intent_to_retain: field.intent_to_retain ?? false,\n          }\n        }),\n      },\n    } satisfies PresentationDefinition['input_descriptors'][number]\n  }\n\n  public static partitionPresentationDefinition = (pd: DifPresentationExchangeDefinition) => {\n    const nonMdocPresentationDefinition: DifPresentationExchangeDefinition = {\n      ...pd,\n      input_descriptors: pd.input_descriptors.filter(\n        (id) => !Object.keys((id as InputDescriptorV2).format ?? {}).includes('mso_mdoc')\n      ),\n    } as DifPresentationExchangeDefinition\n\n    const mdocPresentationDefinition = {\n      ...pd,\n      format: { mso_mdoc: pd.format?.mso_mdoc },\n      input_descriptors: (pd.input_descriptors as InputDescriptorV2[])\n        .filter((id) => Object.keys(id.format ?? {}).includes('mso_mdoc'))\n        .map(this.assertMdocInputDescriptor),\n    }\n\n    return { mdocPresentationDefinition, nonMdocPresentationDefinition }\n  }\n\n  private static createPresentationSubmission(input: {\n    id: string\n    presentationDefinition: {\n      id: string\n      input_descriptors: ReturnType<typeof MdocDeviceResponse.assertMdocInputDescriptor>[]\n    }\n  }) {\n    const { id, presentationDefinition } = input\n    if (presentationDefinition.input_descriptors.length !== 1) {\n      throw new MdocError('Currently Mdoc Presentation Submissions can only be created for a sigle input descriptor')\n    }\n    return {\n      id,\n      definition_id: presentationDefinition.id,\n      descriptor_map: [\n        {\n          id: presentationDefinition.input_descriptors[0].id,\n          format: 'mso_mdoc',\n          path: '$',\n        },\n      ],\n    }\n  }\n\n  public static limitDisclosureToInputDescriptor(options: { inputDescriptor: InputDescriptorV2; mdoc: Mdoc }) {\n    const { mdoc } = options\n\n    const inputDescriptor = MdocDeviceResponse.assertMdocInputDescriptor(options.inputDescriptor)\n    const _mdoc = parseIssuerSigned(TypedArrayEncoder.fromBase64(mdoc.base64Url), mdoc.docType)\n\n    const disclosure = mdocLimitDisclosureToInputDescriptor(_mdoc, inputDescriptor)\n    const disclosedPayloadAsRecord = Object.fromEntries(\n      Array.from(disclosure.entries()).map(([namespace, issuerSignedItem]) => {\n        return [\n          namespace,\n          Object.fromEntries(issuerSignedItem.map((item) => [item.elementIdentifier, item.elementValue])),\n        ]\n      })\n    )\n\n    return disclosedPayloadAsRecord\n  }\n\n  public static async createPresentationDefinitionDeviceResponse(\n    agentContext: AgentContext,\n    options: MdocDeviceResponsePresentationDefinitionOptions\n  ) {\n    const presentationDefinition = MdocDeviceResponse.partitionPresentationDefinition(\n      options.presentationDefinition\n    ).mdocPresentationDefinition\n\n    const docTypes = options.mdocs.map((i) => i.docType)\n\n    const combinedDeviceResponseMdoc = new MDoc()\n\n    for (const document of options.mdocs) {\n      const deviceKeyJwk = document.deviceKey\n      if (!deviceKeyJwk) throw new MdocError(`Device key is missing in mdoc with doctype ${document.docType}`)\n\n      // Set keyId to legacy key id if it doesn't have a key id set\n      if (!deviceKeyJwk.hasKeyId) {\n        deviceKeyJwk.keyId = deviceKeyJwk.legacyKeyId\n      }\n\n      const alg = MdocDeviceResponse.getAlgForDeviceKeyJwk(deviceKeyJwk)\n\n      // We do PEX filtering on a different layer, so we only include the needed input descriptor here\n      const presentationDefinitionForDocument = {\n        ...presentationDefinition,\n        input_descriptors: presentationDefinition.input_descriptors.filter(\n          (inputDescriptor) => inputDescriptor.id === document.docType\n        ),\n      }\n\n      const mdocContext = getMdocContext(agentContext)\n      const issuerSignedDocument = parseIssuerSigned(TypedArrayEncoder.fromBase64(document.base64Url), document.docType)\n      const deviceResponseBuilder = DeviceResponse.from(new MDoc([issuerSignedDocument]))\n        .usingPresentationDefinition(presentationDefinitionForDocument)\n        .authenticateWithSignature(deviceKeyJwk.toJson(), alg)\n        .usingSessionTranscriptBytes(\n          await MdocDeviceResponse.getSessionTranscriptBytesForOptions(mdocContext, options.sessionTranscriptOptions)\n        )\n\n      for (const [nameSpace, nameSpaceValue] of Object.entries(options.deviceNameSpaces ?? {})) {\n        deviceResponseBuilder.addDeviceNameSpace(nameSpace, nameSpaceValue)\n      }\n\n      const deviceResponseMdoc = await deviceResponseBuilder.sign(mdocContext)\n      combinedDeviceResponseMdoc.addDocument(deviceResponseMdoc.documents[0])\n    }\n\n    return {\n      deviceResponseBase64Url: TypedArrayEncoder.toBase64URL(combinedDeviceResponseMdoc.encode()),\n      presentationSubmission: MdocDeviceResponse.createPresentationSubmission({\n        id: `MdocPresentationSubmission ${uuid()}`,\n        presentationDefinition: {\n          ...presentationDefinition,\n          input_descriptors: presentationDefinition.input_descriptors.filter((i) => docTypes.includes(i.id)),\n        },\n      }),\n    }\n  }\n\n  public static async createDeviceResponse(agentContext: AgentContext, options: MdocDeviceResponseOptions) {\n    const combinedDeviceResponseMdoc = new MDoc()\n\n    for (const document of options.mdocs) {\n      const deviceKeyJwk = document.deviceKey\n      if (!deviceKeyJwk) throw new MdocError(`Device key is missing in mdoc with doctype ${document.docType}`)\n      const alg = MdocDeviceResponse.getAlgForDeviceKeyJwk(deviceKeyJwk)\n\n      // Set keyId to legacy key id if it doesn't have a key id set\n      if (!deviceKeyJwk.hasKeyId) {\n        deviceKeyJwk.keyId = deviceKeyJwk.legacyKeyId\n      }\n\n      const issuerSignedDocument = parseIssuerSigned(TypedArrayEncoder.fromBase64(document.base64Url), document.docType)\n\n      const deviceRequestForDocument = DeviceRequest.from(\n        '1.0',\n        options.documentRequests\n          .filter((request) => request.docType === issuerSignedDocument.docType)\n          .map((request) => ({\n            itemsRequestData: {\n              docType: request.docType,\n              nameSpaces: nameSpacesRecordToMap(request.nameSpaces),\n            },\n          }))\n      )\n\n      const mdocContext = getMdocContext(agentContext)\n      const deviceResponseBuilder = DeviceResponse.from(new MDoc([issuerSignedDocument]))\n        .authenticateWithSignature(deviceKeyJwk.toJson(), alg)\n        .usingDeviceRequest(deviceRequestForDocument)\n        .usingSessionTranscriptBytes(\n          await MdocDeviceResponse.getSessionTranscriptBytesForOptions(mdocContext, options.sessionTranscriptOptions)\n        )\n\n      for (const [nameSpace, nameSpaceValue] of Object.entries(options.deviceNameSpaces ?? {})) {\n        deviceResponseBuilder.addDeviceNameSpace(nameSpace, nameSpaceValue)\n      }\n\n      const deviceResponseMdoc = await deviceResponseBuilder.sign(mdocContext)\n      combinedDeviceResponseMdoc.addDocument(deviceResponseMdoc.documents[0])\n    }\n\n    return combinedDeviceResponseMdoc.encode()\n  }\n\n  public async verify(agentContext: AgentContext, options: Omit<MdocDeviceResponseVerifyOptions, 'deviceResponse'>) {\n    const verifier = new Verifier()\n    const mdocContext = getMdocContext(agentContext)\n\n    onCheck({\n      status: this.documents.length > 0 ? 'PASSED' : 'FAILED',\n      check: 'Device Response must include at least one document.',\n      category: 'DOCUMENT_FORMAT',\n    })\n\n    const deviceResponse = parseDeviceResponse(TypedArrayEncoder.fromBase64(this.base64Url))\n\n    // NOTE: we do not use the verification from mdoc library, as it checks all documents\n    // based on the same trusted certificates\n    for (const documentIndex of this.documents.keys()) {\n      const rawDocument = deviceResponse.documents[documentIndex]\n      const document = this.documents[documentIndex]\n\n      const verificationResult = await document.verify(agentContext, {\n        now: options.now,\n        trustedCertificates: options.trustedCertificates,\n      })\n\n      if (!verificationResult.isValid) {\n        throw new MdocError(`Mdoc at index ${documentIndex} is not valid. ${verificationResult.error}`)\n      }\n\n      if (!(rawDocument instanceof DeviceSignedDocument)) {\n        onCheck({\n          status: 'FAILED',\n          category: 'DEVICE_AUTH',\n          check: `The document is not signed by the device. ${document.docType}`,\n        })\n        continue\n      }\n\n      await verifier.verifyDeviceSignature(\n        {\n          sessionTranscriptBytes: await MdocDeviceResponse.getSessionTranscriptBytesForOptions(\n            mdocContext,\n            options.sessionTranscriptOptions\n          ),\n          deviceSigned: rawDocument,\n        },\n        mdocContext\n      )\n    }\n\n    if (deviceResponse.documentErrors.length > 1) {\n      throw new MdocError('Device response verification failed.')\n    }\n\n    if (deviceResponse.status !== MDocStatus.OK) {\n      throw new MdocError('Device response verification failed. An unknown error occurred.')\n    }\n\n    return this.documents\n  }\n\n  private static async getSessionTranscriptBytesForOptions(\n    context: MdocContext,\n    options: MdocSessionTranscriptOptions\n  ) {\n    if (options.type === 'sesionTranscriptBytes') {\n      return options.sessionTranscriptBytes\n    }\n\n    // NOTE: temporary until we have updated to the new major version of mdoc\n    // Based on https://github.com/animo/mdoc/blob/main/src/mdoc/models/session-transcript.ts#L84\n    if (options.type === 'openId4Vp') {\n      return cborEncode(\n        DataItem.fromData([\n          null,\n          null,\n          [\n            'OpenID4VPHandover',\n            await context.crypto.digest({\n              digestAlgorithm: 'SHA-256',\n              bytes: cborEncode([\n                options.clientId,\n                options.verifierGeneratedNonce,\n                options.encryptionJwk?.getJwkThumbprint('sha-256') ?? null,\n                options.responseUri,\n              ]),\n            }),\n          ],\n        ])\n      )\n    }\n\n    if (options.type === 'openId4VpDraft18') {\n      return await DeviceResponse.calculateSessionTranscriptBytesForOID4VP({\n        ...options,\n        context,\n      })\n    }\n\n    // NOTE: temporary until we have updated to the new major version of mdoc\n    // Based on https://github.com/animo/mdoc/blob/main/src/mdoc/models/session-transcript.ts#L65\n    if (options.type === 'openId4VpDcApi') {\n      return cborEncode(\n        DataItem.fromData([\n          null,\n          null,\n          [\n            'OpenID4VPDCAPIHandover',\n            await context.crypto.digest({\n              digestAlgorithm: 'SHA-256',\n              bytes: cborEncode([\n                options.origin,\n                options.verifierGeneratedNonce,\n                options.encryptionJwk?.getJwkThumbprint('sha-256') ?? null,\n              ]),\n            }),\n          ],\n        ])\n      )\n    }\n\n    if (options.type === 'openId4VpDcApiDraft24') {\n      return await DeviceResponse.calculateSessionTranscriptBytesForOID4VPDCApi({\n        ...options,\n        context,\n      })\n    }\n\n    throw new MdocError('Unsupported session transcript option')\n  }\n\n  private static getAlgForDeviceKeyJwk(jwk: PublicJwk) {\n    const signatureAlgorithm = jwk.supportedSignatureAlgorithms.find(isMdocSupportedSignatureAlgorithm)\n    if (!signatureAlgorithm) {\n      throw new MdocError(\n        `Unable to create mdoc device response. No supported signature algorithm found to sign device response for jwk  ${\n          jwk.jwkTypehumanDescription\n        }. Key supports algs ${jwk.supportedSignatureAlgorithms.join(\n          ', '\n        )}. mdoc supports algs ${mdocSupporteSignatureAlgorithms.join(', ')}`\n      )\n    }\n\n    return signatureAlgorithm\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAkCA,IAAa,qBAAb,MAAa,mBAAmB;CAC9B,AAAQ,YACN,AAAOA,WACP,AAAOC,WACP;EAFO;EACA;;;;;CAMT,IAAW,cAAc;AACvB,SAAO,YAAY;;;;;CAMrB,IAAW,UAAU;AACnB,SAAO,KAAK;;;;;CAMd,AAAO,mCAAyD;EAC9D,MAAMC,kBAAwC,EAAE;AAEhD,MAAI,KAAK,UAAU,WAAW,EAC5B,OAAM,IAAI,UAAU,kDAAkD;AAGxE,OAAK,MAAM,YAAY,KAAK,WAAW;GACrC,MAAM,iBAAiB,IAAI,MAAM;AAEjC,kBAAe,YAAY,SAAS,qBAAqB;AAEzD,mBAAgB,KAAK,mBAAmB,mBAAmB,eAAe,CAAC;;AAG7E,SAAO;;CAGT,OAAe,mBAAmB,MAAY;EAC5C,MAAM,YAAY,KAAK,UAAU,KAAK,QAAQ;GAC5C,MAAM,WAAW,IAAI,SAAS;GAC9B,MAAM,UAAU,SAAS,IAAI,UAAU;GACvC,MAAM,eAAe,WAAW,SAAS,IAAI,eAAe,CAAC;GAC7D,MAAM,eAAe,WAAW,SAAS,IAAI,eAAe,CAAC;AAE7D,UAAO,KAAK,yBACV,kBAAkB,YAAY,aAAa,EAC3C,kBAAkB,YAAY,aAAa,EAC3C,QACD;IACD;AAEF,SAAO,IAAI,mBAAmB,kBAAkB,YAAY,KAAK,QAAQ,CAAC,EAAE,UAAU;;CAGxF,OAAc,cAAc,WAAmB;EAC7C,MAAM,SAAS,oBAAoB,kBAAkB,WAAW,UAAU,CAAC;AAC3E,MAAI,OAAO,WAAW,WAAW,GAC/B,OAAM,IAAI,UAAU,uCAAuC;AAG7D,SAAO,mBAAmB,mBAAmB,OAAO;;CAGtD,OAAe,0BAA0B,iBAAoC;AAC3E,MAAI,CAAC,gBAAgB,UAAU,CAAC,gBAAgB,OAAO,SACrD,OAAM,IAAI,UAAU,2DAA2D;AAGjF,MAAI,CAAC,gBAAgB,OAAO,SAAS,IACnC,OAAM,IAAI,UAAU,wDAAwD;AAG9E,MAAI,CAAC,gBAAgB,aAAa,oBAAoB,gBAAgB,YAAY,qBAAqB,WACrG,OAAM,IAAI,UACR,iGACD;AAGH,MAAI,CAAC,gBAAgB,aAAa,QAAQ,OAAO,UAAU,MAAM,qBAAqB,OAAU,CAC9F,OAAM,IAAI,UAAU,wEAAwE;AAG9F,SAAO;GACL,GAAG;GACH,QAAQ,EACN,UAAU,gBAAgB,OAAO,UAClC;GACD,aAAa;IACX,GAAG,gBAAgB;IACnB,kBAAkB;IAClB,SAAS,gBAAgB,YAAY,UAAU,EAAE,EAAE,KAAK,UAAU;AAChE,YAAO;MACL,GAAG;MACH,kBAAkB,MAAM,oBAAoB;MAC7C;MACD;IACH;GACF;;CAsBH,OAAe,6BAA6B,OAMzC;EACD,MAAM,EAAE,IAAI,2BAA2B;AACvC,MAAI,uBAAuB,kBAAkB,WAAW,EACtD,OAAM,IAAI,UAAU,2FAA2F;AAEjH,SAAO;GACL;GACA,eAAe,uBAAuB;GACtC,gBAAgB,CACd;IACE,IAAI,uBAAuB,kBAAkB,GAAG;IAChD,QAAQ;IACR,MAAM;IACP,CACF;GACF;;CAGH,OAAc,iCAAiC,SAA6D;EAC1G,MAAM,EAAE,SAAS;EAEjB,MAAM,kBAAkB,mBAAmB,0BAA0B,QAAQ,gBAAgB;EAG7F,MAAM,aAAaC,iCAFL,kBAAkB,kBAAkB,WAAW,KAAK,UAAU,EAAE,KAAK,QAAQ,EAE5B,gBAAgB;AAU/E,SATiC,OAAO,YACtC,MAAM,KAAK,WAAW,SAAS,CAAC,CAAC,KAAK,CAAC,WAAW,sBAAsB;AACtE,UAAO,CACL,WACA,OAAO,YAAY,iBAAiB,KAAK,SAAS,CAAC,KAAK,mBAAmB,KAAK,aAAa,CAAC,CAAC,CAChG;IACD,CACH;;CAKH,aAAoB,2CAClB,cACA,SACA;EACA,MAAM,yBAAyB,mBAAmB,gCAChD,QAAQ,uBACT,CAAC;EAEF,MAAM,WAAW,QAAQ,MAAM,KAAK,MAAM,EAAE,QAAQ;EAEpD,MAAM,6BAA6B,IAAI,MAAM;AAE7C,OAAK,MAAM,YAAY,QAAQ,OAAO;GACpC,MAAM,eAAe,SAAS;AAC9B,OAAI,CAAC,aAAc,OAAM,IAAI,UAAU,8CAA8C,SAAS,UAAU;AAGxG,OAAI,CAAC,aAAa,SAChB,cAAa,QAAQ,aAAa;GAGpC,MAAM,MAAM,mBAAmB,sBAAsB,aAAa;GAGlE,MAAM,oCAAoC;IACxC,GAAG;IACH,mBAAmB,uBAAuB,kBAAkB,QACzD,oBAAoB,gBAAgB,OAAO,SAAS,QACtD;IACF;GAED,MAAM,cAAc,eAAe,aAAa;GAChD,MAAM,uBAAuB,kBAAkB,kBAAkB,WAAW,SAAS,UAAU,EAAE,SAAS,QAAQ;GAClH,MAAM,wBAAwB,eAAe,KAAK,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAChF,4BAA4B,kCAAkC,CAC9D,0BAA0B,aAAa,QAAQ,EAAE,IAAI,CACrD,4BACC,MAAM,mBAAmB,oCAAoC,aAAa,QAAQ,yBAAyB,CAC5G;AAEH,QAAK,MAAM,CAAC,WAAW,mBAAmB,OAAO,QAAQ,QAAQ,oBAAoB,EAAE,CAAC,CACtF,uBAAsB,mBAAmB,WAAW,eAAe;GAGrE,MAAM,qBAAqB,MAAM,sBAAsB,KAAK,YAAY;AACxE,8BAA2B,YAAY,mBAAmB,UAAU,GAAG;;AAGzE,SAAO;GACL,yBAAyB,kBAAkB,YAAY,2BAA2B,QAAQ,CAAC;GAC3F,wBAAwB,mBAAmB,6BAA6B;IACtE,IAAI,8BAA8B,MAAM;IACxC,wBAAwB;KACtB,GAAG;KACH,mBAAmB,uBAAuB,kBAAkB,QAAQ,MAAM,SAAS,SAAS,EAAE,GAAG,CAAC;KACnG;IACF,CAAC;GACH;;CAGH,aAAoB,qBAAqB,cAA4B,SAAoC;EACvG,MAAM,6BAA6B,IAAI,MAAM;AAE7C,OAAK,MAAM,YAAY,QAAQ,OAAO;GACpC,MAAM,eAAe,SAAS;AAC9B,OAAI,CAAC,aAAc,OAAM,IAAI,UAAU,8CAA8C,SAAS,UAAU;GACxG,MAAM,MAAM,mBAAmB,sBAAsB,aAAa;AAGlE,OAAI,CAAC,aAAa,SAChB,cAAa,QAAQ,aAAa;GAGpC,MAAM,uBAAuB,kBAAkB,kBAAkB,WAAW,SAAS,UAAU,EAAE,SAAS,QAAQ;GAElH,MAAM,2BAA2B,cAAc,KAC7C,OACA,QAAQ,iBACL,QAAQ,YAAY,QAAQ,YAAY,qBAAqB,QAAQ,CACrE,KAAK,aAAa,EACjB,kBAAkB;IAChB,SAAS,QAAQ;IACjB,YAAY,sBAAsB,QAAQ,WAAW;IACtD,EACF,EAAE,CACN;GAED,MAAM,cAAc,eAAe,aAAa;GAChD,MAAM,wBAAwB,eAAe,KAAK,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAChF,0BAA0B,aAAa,QAAQ,EAAE,IAAI,CACrD,mBAAmB,yBAAyB,CAC5C,4BACC,MAAM,mBAAmB,oCAAoC,aAAa,QAAQ,yBAAyB,CAC5G;AAEH,QAAK,MAAM,CAAC,WAAW,mBAAmB,OAAO,QAAQ,QAAQ,oBAAoB,EAAE,CAAC,CACtF,uBAAsB,mBAAmB,WAAW,eAAe;GAGrE,MAAM,qBAAqB,MAAM,sBAAsB,KAAK,YAAY;AACxE,8BAA2B,YAAY,mBAAmB,UAAU,GAAG;;AAGzE,SAAO,2BAA2B,QAAQ;;CAG5C,MAAa,OAAO,cAA4B,SAAkE;EAChH,MAAM,WAAW,IAAI,UAAU;EAC/B,MAAM,cAAc,eAAe,aAAa;AAEhD,kBAAQ;GACN,QAAQ,KAAK,UAAU,SAAS,IAAI,WAAW;GAC/C,OAAO;GACP,UAAU;GACX,CAAC;EAEF,MAAM,iBAAiB,oBAAoB,kBAAkB,WAAW,KAAK,UAAU,CAAC;AAIxF,OAAK,MAAM,iBAAiB,KAAK,UAAU,MAAM,EAAE;GACjD,MAAM,cAAc,eAAe,UAAU;GAC7C,MAAM,WAAW,KAAK,UAAU;GAEhC,MAAM,qBAAqB,MAAM,SAAS,OAAO,cAAc;IAC7D,KAAK,QAAQ;IACb,qBAAqB,QAAQ;IAC9B,CAAC;AAEF,OAAI,CAAC,mBAAmB,QACtB,OAAM,IAAI,UAAU,iBAAiB,cAAc,iBAAiB,mBAAmB,QAAQ;AAGjG,OAAI,EAAE,uBAAuB,uBAAuB;AAClD,oBAAQ;KACN,QAAQ;KACR,UAAU;KACV,OAAO,6CAA6C,SAAS;KAC9D,CAAC;AACF;;AAGF,SAAM,SAAS,sBACb;IACE,wBAAwB,MAAM,mBAAmB,oCAC/C,aACA,QAAQ,yBACT;IACD,cAAc;IACf,EACD,YACD;;AAGH,MAAI,eAAe,eAAe,SAAS,EACzC,OAAM,IAAI,UAAU,uCAAuC;AAG7D,MAAI,eAAe,WAAW,WAAW,GACvC,OAAM,IAAI,UAAU,kEAAkE;AAGxF,SAAO,KAAK;;CAGd,aAAqB,oCACnB,SACA,SACA;AACA,MAAI,QAAQ,SAAS,wBACnB,QAAO,QAAQ;AAKjB,MAAI,QAAQ,SAAS,YACnB,QAAO,WACL,SAAS,SAAS;GAChB;GACA;GACA,CACE,qBACA,MAAM,QAAQ,OAAO,OAAO;IAC1B,iBAAiB;IACjB,OAAO,WAAW;KAChB,QAAQ;KACR,QAAQ;KACR,QAAQ,eAAe,iBAAiB,UAAU,IAAI;KACtD,QAAQ;KACT,CAAC;IACH,CAAC,CACH;GACF,CAAC,CACH;AAGH,MAAI,QAAQ,SAAS,mBACnB,QAAO,MAAM,eAAe,yCAAyC;GACnE,GAAG;GACH;GACD,CAAC;AAKJ,MAAI,QAAQ,SAAS,iBACnB,QAAO,WACL,SAAS,SAAS;GAChB;GACA;GACA,CACE,0BACA,MAAM,QAAQ,OAAO,OAAO;IAC1B,iBAAiB;IACjB,OAAO,WAAW;KAChB,QAAQ;KACR,QAAQ;KACR,QAAQ,eAAe,iBAAiB,UAAU,IAAI;KACvD,CAAC;IACH,CAAC,CACH;GACF,CAAC,CACH;AAGH,MAAI,QAAQ,SAAS,wBACnB,QAAO,MAAM,eAAe,8CAA8C;GACxE,GAAG;GACH;GACD,CAAC;AAGJ,QAAM,IAAI,UAAU,wCAAwC;;CAG9D,OAAe,sBAAsB,KAAgB;EACnD,MAAM,qBAAqB,IAAI,6BAA6B,KAAK,kCAAkC;AACnG,MAAI,CAAC,mBACH,OAAM,IAAI,UACR,kHACE,IAAI,wBACL,sBAAsB,IAAI,6BAA6B,KACtD,KACD,CAAC,uBAAuB,gCAAgC,KAAK,KAAK,GACpE;AAGH,SAAO;;;;mBArTK,mCAAmC,OAA0C;CACzF,MAAMC,gCAAmE;EACvE,GAAG;EACH,mBAAmB,GAAG,kBAAkB,QACrC,OAAO,CAAC,OAAO,KAAM,GAAyB,UAAU,EAAE,CAAC,CAAC,SAAS,WAAW,CAClF;EACF;AAUD,QAAO;EAAE,4BAR0B;GACjC,GAAG;GACH,QAAQ,EAAE,UAAU,GAAG,QAAQ,UAAU;GACzC,mBAAoB,GAAG,kBACpB,QAAQ,OAAO,OAAO,KAAK,GAAG,UAAU,EAAE,CAAC,CAAC,SAAS,WAAW,CAAC,CACjE,IAAIC,oBAAK,0BAA0B;GACvC;EAEoC;EAA+B"}

package/build/modules/mdoc/MdocModule.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"MdocModule.d.mts","names":[],"sources":["../../../src/modules/mdoc/MdocModule.ts"],"sourcesContent":[],"mappings":";;;;;;;;cAWa,UAAA,YAAsB;uBACd;EADR;;;UAMwB,CAAA,iBAAA,EAAA,iBAAA,CAAA,EAAA,IAAA"}
+{"version":3,"file":"MdocModule.d.mts","names":[],"sources":["../../../src/modules/mdoc/MdocModule.ts"],"sourcesContent":[],"mappings":";;;;;;;;cAUa,UAAA,YAAsB;uBACd;EADR;;;UAMwB,CAAA,iBAAA,EAAA,iBAAA,CAAA,EAAA,IAAA"}