@credo-ts/core 0.6.1-pr-2091-20241119140918 → 0.6.1

package/build/modules/vc/jwt-vc/W3cV2JwtVerifiablePresentation.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"W3cV2JwtVerifiablePresentation.mjs","names":[],"sources":["../../../../src/modules/vc/jwt-vc/W3cV2JwtVerifiablePresentation.ts"],"sourcesContent":["import { Jwt } from '../../../crypto/jose/jwt/Jwt'\nimport { CredoError } from '../../../error'\nimport { JsonTransformer, MessageValidator } from '../../../utils'\nimport { ClaimFormat } from '../models'\nimport { W3cV2Presentation } from '../models/presentation/W3cV2Presentation'\n\nexport interface W3cV2JwtVerifiablePresentationOptions {\n  jwt: Jwt\n}\n\n/**\n * Represents a Verifiable Presentation encoded as a JWT.\n *\n * @see https://www.w3.org/TR/vc-jose-cose/#securing-vps-with-jose\n */\nexport class W3cV2JwtVerifiablePresentation {\n  public constructor(options: W3cV2JwtVerifiablePresentationOptions) {\n    this.jwt = options.jwt\n    this.resolvedPresentation = JsonTransformer.fromJSON(options.jwt.payload.additionalClaims, W3cV2Presentation, {\n      validate: false,\n    })\n\n    // Validates the JWT and resolved presentation\n    this.validate()\n  }\n\n  public static fromCompact(compact: string) {\n    const jwt = Jwt.fromSerializedJwt(compact)\n\n    return new W3cV2JwtVerifiablePresentation({\n      jwt,\n    })\n  }\n\n  /**\n   * The original JWT.\n   */\n  public readonly jwt: Jwt\n\n  /**\n   * Resolved presentation is the fully resolved {@link W3cV2Presentation} instance.\n   */\n  public readonly resolvedPresentation: W3cV2Presentation\n\n  /**\n   * The encoded version of this presentation.\n   */\n  public get encoded() {\n    return this.jwt.serializedJwt\n  }\n\n  /**\n   * The {@link ClaimFormat} of the presentation.\n   *\n   * For W3C VP JWT credentials this is always `vp+jwt`.\n   */\n  public get claimFormat(): ClaimFormat.JwtW3cVp {\n    return ClaimFormat.JwtW3cVp\n  }\n\n  /**\n   * Validates the JWT and the resolved presentation.\n   */\n  public validate() {\n    // Validate the resolved credential according to the data model\n    MessageValidator.validateSync(this.resolvedPresentation)\n\n    // Basic JWT validations to ensure compliance to the specification\n    const jwt = this.jwt\n    const header = jwt.header\n    const payload = jwt.payload\n\n    if ('typ' in header && header.typ !== 'vp+jwt') {\n      throw new CredoError(`The provided W3C VP JWT does not have the correct 'typ' header.`)\n    }\n\n    if ('cyt' in header && header.cyt !== 'vp') {\n      throw new CredoError(`The provided W3C VP JWT does not have the correct 'cyt' header.`)\n    }\n\n    const iss = header.iss ?? payload.iss\n    if (iss && this.resolvedPresentation.holderId) {\n      if (this.resolvedPresentation.holderId !== iss) {\n        throw new CredoError(`The provided W3C VP JWT has both 'iss' and 'holder' claims, but they differ.`)\n      }\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAeA,IAAa,iCAAb,MAAa,+BAA+B;CAC1C,AAAO,YAAY,SAAgD;AACjE,OAAK,MAAM,QAAQ;AACnB,OAAK,uBAAuB,gBAAgB,SAAS,QAAQ,IAAI,QAAQ,kBAAkB,mBAAmB,EAC5G,UAAU,OACX,CAAC;AAGF,OAAK,UAAU;;CAGjB,OAAc,YAAY,SAAiB;AAGzC,SAAO,IAAI,+BAA+B,EACxC,KAHU,IAAI,kBAAkB,QAAQ,EAIzC,CAAC;;;;;CAgBJ,IAAW,UAAU;AACnB,SAAO,KAAK,IAAI;;;;;;;CAQlB,IAAW,cAAoC;AAC7C,SAAO,YAAY;;;;;CAMrB,AAAO,WAAW;AAEhB,mBAAiB,aAAa,KAAK,qBAAqB;EAGxD,MAAM,MAAM,KAAK;EACjB,MAAM,SAAS,IAAI;EACnB,MAAM,UAAU,IAAI;AAEpB,MAAI,SAAS,UAAU,OAAO,QAAQ,SACpC,OAAM,IAAI,WAAW,kEAAkE;AAGzF,MAAI,SAAS,UAAU,OAAO,QAAQ,KACpC,OAAM,IAAI,WAAW,kEAAkE;EAGzF,MAAM,MAAM,OAAO,OAAO,QAAQ;AAClC,MAAI,OAAO,KAAK,qBAAqB,UACnC;OAAI,KAAK,qBAAqB,aAAa,IACzC,OAAM,IAAI,WAAW,+EAA+E"}

package/build/modules/vc/jwt-vc/credentialTransformer.mjs

@@ -0,0 +1,88 @@
+
+
+import { CredoError } from "../../../error/CredoError.mjs";
+import "../../../error/index.mjs";
+import { JsonTransformer } from "../../../utils/JsonTransformer.mjs";
+import "../../../utils/index.mjs";
+import { isJsonObject } from "../../../types.mjs";
+import { JwtPayload } from "../../../crypto/jose/jwt/JwtPayload.mjs";
+import "../../../crypto/jose/jwt/index.mjs";
+import { W3cCredential } from "../models/credential/W3cCredential.mjs";
+import { w3cDate } from "../util.mjs";
+import { isObject } from "class-validator";
+
+//#region src/modules/vc/jwt-vc/credentialTransformer.ts
+function getJwtPayloadFromCredential(credential) {
+	const vc = JsonTransformer.toJSON(credential);
+	const payloadOptions = { additionalClaims: { vc } };
+	const issuanceDate = Date.parse(credential.issuanceDate);
+	if (Number.isNaN(issuanceDate)) throw new CredoError("JWT VCs must have a valid issuance date");
+	payloadOptions.nbf = Math.floor(issuanceDate / 1e3);
+	delete vc.issuanceDate;
+	if (credential.expirationDate) {
+		const expirationDate = Date.parse(credential.expirationDate);
+		if (!Number.isNaN(expirationDate)) {
+			payloadOptions.exp = Math.floor(expirationDate / 1e3);
+			delete vc.expirationDate;
+		}
+	}
+	payloadOptions.iss = credential.issuerId;
+	if (typeof vc.issuer === "string") delete vc.issuer;
+	else if (typeof vc.issuer === "object") {
+		delete vc.issuer.id;
+		if (Object.keys(vc.issuer).length === 0) delete vc.issuer;
+	}
+	if (credential.id) {
+		payloadOptions.jti = credential.id;
+		delete vc.id;
+	}
+	if (Array.isArray(credential.credentialSubject) && credential.credentialSubject.length !== 1) throw new CredoError("JWT VCs must have exactly one credential subject");
+	const [credentialSubjectId] = credential.credentialSubjectIds;
+	if (credentialSubjectId) {
+		payloadOptions.sub = credentialSubjectId;
+		if (Array.isArray(vc.credentialSubject)) delete vc.credentialSubject[0].id;
+		else delete vc.credentialSubject?.id;
+	}
+	return new JwtPayload(payloadOptions);
+}
+function getCredentialFromJwtPayload(jwtPayload) {
+	if (!("vc" in jwtPayload.additionalClaims) || !isJsonObject(jwtPayload.additionalClaims.vc)) throw new CredoError("JWT does not contain a valid 'vc' claim");
+	const jwtVc = jwtPayload.additionalClaims.vc;
+	if (!jwtPayload.nbf || !jwtPayload.iss) throw new CredoError("JWT does not contain valid 'nbf' and 'iss' claims");
+	if (Array.isArray(jwtVc.credentialSubject) && jwtVc.credentialSubject.length !== 1) throw new CredoError("JWT VCs must have exactly one credential subject");
+	if (Array.isArray(jwtVc.credentialSubject) && !isObject(jwtVc.credentialSubject[0])) throw new CredoError("JWT VCs must have a credential subject of type object");
+	const credentialSubject = Array.isArray(jwtVc.credentialSubject) ? jwtVc.credentialSubject[0] : jwtVc.credentialSubject;
+	if (!isJsonObject(credentialSubject)) throw new CredoError("JWT VC does not have a valid credential subject");
+	const subjectWithId = jwtPayload.sub ? {
+		...credentialSubject,
+		id: jwtPayload.sub
+	} : credentialSubject;
+	if (jwtVc.id && jwtPayload.jti !== jwtVc.id) throw new CredoError("JWT jti and vc.id do not match");
+	if (typeof jwtVc.issuer === "string" && jwtPayload.iss !== jwtVc.issuer || isJsonObject(jwtVc.issuer) && jwtVc.issuer.id && jwtPayload.iss !== jwtVc.issuer.id) throw new CredoError("JWT iss and vc.issuer(.id) do not match");
+	if (jwtVc.issuanceDate) {
+		if (typeof jwtVc.issuanceDate !== "string") throw new CredoError("JWT vc.issuanceDate must be a string");
+		const issuanceDate = Date.parse(jwtVc.issuanceDate) / 1e3;
+		if (jwtPayload.nbf !== issuanceDate) throw new CredoError("JWT nbf and vc.issuanceDate do not match");
+	}
+	if (jwtVc.expirationDate) {
+		if (typeof jwtVc.expirationDate !== "string") throw new CredoError("JWT vc.expirationDate must be a string");
+		if (Date.parse(jwtVc.expirationDate) / 1e3 !== jwtPayload.exp) throw new CredoError("JWT exp and vc.expirationDate do not match");
+	}
+	if (isJsonObject(jwtVc.credentialSubject) && jwtVc.credentialSubject.id && jwtPayload.sub !== jwtVc.credentialSubject.id || Array.isArray(jwtVc.credentialSubject) && isJsonObject(jwtVc.credentialSubject[0]) && jwtVc.credentialSubject[0].id && jwtPayload.sub !== jwtVc.credentialSubject[0].id) throw new CredoError("JWT sub and vc.credentialSubject.id do not match");
+	const dataModelVc = {
+		...jwtVc,
+		issuanceDate: w3cDate(jwtPayload.nbf * 1e3),
+		expirationDate: jwtPayload.exp ? w3cDate(jwtPayload.exp * 1e3) : void 0,
+		issuer: typeof jwtVc.issuer === "object" ? {
+			...jwtVc.issuer,
+			id: jwtPayload.iss
+		} : jwtPayload.iss,
+		id: jwtPayload.jti,
+		credentialSubject: Array.isArray(jwtVc.credentialSubject) ? [subjectWithId] : subjectWithId
+	};
+	return JsonTransformer.fromJSON(dataModelVc, W3cCredential);
+}
+
+//#endregion
+export { getCredentialFromJwtPayload, getJwtPayloadFromCredential };
+//# sourceMappingURL=credentialTransformer.mjs.map

package/build/modules/vc/jwt-vc/credentialTransformer.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentialTransformer.mjs","names":["payloadOptions: JwtPayloadOptions"],"sources":["../../../../src/modules/vc/jwt-vc/credentialTransformer.ts"],"sourcesContent":["import { isObject } from 'class-validator'\nimport type { JwtPayloadOptions } from '../../../crypto/jose/jwt'\n\nimport { JwtPayload } from '../../../crypto/jose/jwt'\nimport { CredoError } from '../../../error'\nimport { isJsonObject } from '../../../types'\nimport { JsonTransformer } from '../../../utils'\nimport { W3cCredential } from '../models/credential/W3cCredential'\nimport { w3cDate } from '../util'\n\nexport function getJwtPayloadFromCredential(credential: W3cCredential) {\n  const vc = JsonTransformer.toJSON(credential)\n\n  const payloadOptions: JwtPayloadOptions = {\n    additionalClaims: {\n      vc,\n    },\n  }\n\n  // Extract `nbf` and remove issuance date from vc\n  const issuanceDate = Date.parse(credential.issuanceDate)\n  if (Number.isNaN(issuanceDate)) {\n    throw new CredoError('JWT VCs must have a valid issuance date')\n  }\n  payloadOptions.nbf = Math.floor(issuanceDate / 1000)\n  // biome-ignore lint/performance/noDelete: no explanation\n  delete vc.issuanceDate\n\n  // Extract `exp` and remove expiration date from vc\n  if (credential.expirationDate) {\n    const expirationDate = Date.parse(credential.expirationDate)\n    if (!Number.isNaN(expirationDate)) {\n      payloadOptions.exp = Math.floor(expirationDate / 1000)\n      // biome-ignore lint/performance/noDelete: no explanation\n      delete vc.expirationDate\n    }\n  }\n\n  // Extract `iss` and remove issuer id from vc\n  payloadOptions.iss = credential.issuerId\n  if (typeof vc.issuer === 'string') {\n    // biome-ignore lint/performance/noDelete: no explanation\n    delete vc.issuer\n  } else if (typeof vc.issuer === 'object') {\n    // biome-ignore lint/performance/noDelete: no explanation\n    delete vc.issuer.id\n    if (Object.keys(vc.issuer).length === 0) {\n      // biome-ignore lint/performance/noDelete: no explanation\n      delete vc.issuer\n    }\n  }\n\n  // Extract `jti` and remove id from vc\n  if (credential.id) {\n    payloadOptions.jti = credential.id\n    // biome-ignore lint/performance/noDelete: no explanation\n    delete vc.id\n  }\n\n  if (Array.isArray(credential.credentialSubject) && credential.credentialSubject.length !== 1) {\n    throw new CredoError('JWT VCs must have exactly one credential subject')\n  }\n\n  // Extract `sub` and remove credential subject id from vc\n  const [credentialSubjectId] = credential.credentialSubjectIds\n  if (credentialSubjectId) {\n    payloadOptions.sub = credentialSubjectId\n\n    if (Array.isArray(vc.credentialSubject)) {\n      // biome-ignore lint/performance/noDelete: no explanation\n      delete vc.credentialSubject[0].id\n    } else {\n      // biome-ignore lint/performance/noDelete: no explanation\n      delete vc.credentialSubject?.id\n    }\n  }\n\n  return new JwtPayload(payloadOptions)\n}\n\nexport function getCredentialFromJwtPayload(jwtPayload: JwtPayload) {\n  if (!('vc' in jwtPayload.additionalClaims) || !isJsonObject(jwtPayload.additionalClaims.vc)) {\n    throw new CredoError(\"JWT does not contain a valid 'vc' claim\")\n  }\n\n  const jwtVc = jwtPayload.additionalClaims.vc\n\n  if (!jwtPayload.nbf || !jwtPayload.iss) {\n    throw new CredoError(\"JWT does not contain valid 'nbf' and 'iss' claims\")\n  }\n\n  if (Array.isArray(jwtVc.credentialSubject) && jwtVc.credentialSubject.length !== 1) {\n    throw new CredoError('JWT VCs must have exactly one credential subject')\n  }\n\n  if (Array.isArray(jwtVc.credentialSubject) && !isObject(jwtVc.credentialSubject[0])) {\n    throw new CredoError('JWT VCs must have a credential subject of type object')\n  }\n\n  const credentialSubject = Array.isArray(jwtVc.credentialSubject)\n    ? jwtVc.credentialSubject[0]\n    : jwtVc.credentialSubject\n  if (!isJsonObject(credentialSubject)) {\n    throw new CredoError('JWT VC does not have a valid credential subject')\n  }\n  const subjectWithId = jwtPayload.sub ? { ...credentialSubject, id: jwtPayload.sub } : credentialSubject\n\n  // Validate vc.id and jti\n  if (jwtVc.id && jwtPayload.jti !== jwtVc.id) {\n    throw new CredoError('JWT jti and vc.id do not match')\n  }\n\n  // Validate vc.issuer and iss\n  if (\n    (typeof jwtVc.issuer === 'string' && jwtPayload.iss !== jwtVc.issuer) ||\n    (isJsonObject(jwtVc.issuer) && jwtVc.issuer.id && jwtPayload.iss !== jwtVc.issuer.id)\n  ) {\n    throw new CredoError('JWT iss and vc.issuer(.id) do not match')\n  }\n\n  // Validate vc.issuanceDate and nbf\n  if (jwtVc.issuanceDate) {\n    if (typeof jwtVc.issuanceDate !== 'string') {\n      throw new CredoError('JWT vc.issuanceDate must be a string')\n    }\n\n    const issuanceDate = Date.parse(jwtVc.issuanceDate) / 1000\n    if (jwtPayload.nbf !== issuanceDate) {\n      throw new CredoError('JWT nbf and vc.issuanceDate do not match')\n    }\n  }\n\n  // Validate vc.expirationDate and exp\n  if (jwtVc.expirationDate) {\n    if (typeof jwtVc.expirationDate !== 'string') {\n      throw new CredoError('JWT vc.expirationDate must be a string')\n    }\n\n    const expirationDate = Date.parse(jwtVc.expirationDate) / 1000\n    if (expirationDate !== jwtPayload.exp) {\n      throw new CredoError('JWT exp and vc.expirationDate do not match')\n    }\n  }\n\n  // Validate vc.credentialSubject.id and sub\n  if (\n    (isJsonObject(jwtVc.credentialSubject) &&\n      jwtVc.credentialSubject.id &&\n      jwtPayload.sub !== jwtVc.credentialSubject.id) ||\n    (Array.isArray(jwtVc.credentialSubject) &&\n      isJsonObject(jwtVc.credentialSubject[0]) &&\n      jwtVc.credentialSubject[0].id &&\n      jwtPayload.sub !== jwtVc.credentialSubject[0].id)\n  ) {\n    throw new CredoError('JWT sub and vc.credentialSubject.id do not match')\n  }\n\n  // Create a verifiable credential structure that is compatible with the VC data model\n  const dataModelVc = {\n    ...jwtVc,\n    issuanceDate: w3cDate(jwtPayload.nbf * 1000),\n    expirationDate: jwtPayload.exp ? w3cDate(jwtPayload.exp * 1000) : undefined,\n    issuer: typeof jwtVc.issuer === 'object' ? { ...jwtVc.issuer, id: jwtPayload.iss } : jwtPayload.iss,\n    id: jwtPayload.jti,\n    credentialSubject: Array.isArray(jwtVc.credentialSubject) ? [subjectWithId] : subjectWithId,\n  }\n\n  const vcInstance = JsonTransformer.fromJSON(dataModelVc, W3cCredential)\n\n  return vcInstance\n}\n"],"mappings":";;;;;;;;;;;;;;AAUA,SAAgB,4BAA4B,YAA2B;CACrE,MAAM,KAAK,gBAAgB,OAAO,WAAW;CAE7C,MAAMA,iBAAoC,EACxC,kBAAkB,EAChB,IACD,EACF;CAGD,MAAM,eAAe,KAAK,MAAM,WAAW,aAAa;AACxD,KAAI,OAAO,MAAM,aAAa,CAC5B,OAAM,IAAI,WAAW,0CAA0C;AAEjE,gBAAe,MAAM,KAAK,MAAM,eAAe,IAAK;AAEpD,QAAO,GAAG;AAGV,KAAI,WAAW,gBAAgB;EAC7B,MAAM,iBAAiB,KAAK,MAAM,WAAW,eAAe;AAC5D,MAAI,CAAC,OAAO,MAAM,eAAe,EAAE;AACjC,kBAAe,MAAM,KAAK,MAAM,iBAAiB,IAAK;AAEtD,UAAO,GAAG;;;AAKd,gBAAe,MAAM,WAAW;AAChC,KAAI,OAAO,GAAG,WAAW,SAEvB,QAAO,GAAG;UACD,OAAO,GAAG,WAAW,UAAU;AAExC,SAAO,GAAG,OAAO;AACjB,MAAI,OAAO,KAAK,GAAG,OAAO,CAAC,WAAW,EAEpC,QAAO,GAAG;;AAKd,KAAI,WAAW,IAAI;AACjB,iBAAe,MAAM,WAAW;AAEhC,SAAO,GAAG;;AAGZ,KAAI,MAAM,QAAQ,WAAW,kBAAkB,IAAI,WAAW,kBAAkB,WAAW,EACzF,OAAM,IAAI,WAAW,mDAAmD;CAI1E,MAAM,CAAC,uBAAuB,WAAW;AACzC,KAAI,qBAAqB;AACvB,iBAAe,MAAM;AAErB,MAAI,MAAM,QAAQ,GAAG,kBAAkB,CAErC,QAAO,GAAG,kBAAkB,GAAG;MAG/B,QAAO,GAAG,mBAAmB;;AAIjC,QAAO,IAAI,WAAW,eAAe;;AAGvC,SAAgB,4BAA4B,YAAwB;AAClE,KAAI,EAAE,QAAQ,WAAW,qBAAqB,CAAC,aAAa,WAAW,iBAAiB,GAAG,CACzF,OAAM,IAAI,WAAW,0CAA0C;CAGjE,MAAM,QAAQ,WAAW,iBAAiB;AAE1C,KAAI,CAAC,WAAW,OAAO,CAAC,WAAW,IACjC,OAAM,IAAI,WAAW,oDAAoD;AAG3E,KAAI,MAAM,QAAQ,MAAM,kBAAkB,IAAI,MAAM,kBAAkB,WAAW,EAC/E,OAAM,IAAI,WAAW,mDAAmD;AAG1E,KAAI,MAAM,QAAQ,MAAM,kBAAkB,IAAI,CAAC,SAAS,MAAM,kBAAkB,GAAG,CACjF,OAAM,IAAI,WAAW,wDAAwD;CAG/E,MAAM,oBAAoB,MAAM,QAAQ,MAAM,kBAAkB,GAC5D,MAAM,kBAAkB,KACxB,MAAM;AACV,KAAI,CAAC,aAAa,kBAAkB,CAClC,OAAM,IAAI,WAAW,kDAAkD;CAEzE,MAAM,gBAAgB,WAAW,MAAM;EAAE,GAAG;EAAmB,IAAI,WAAW;EAAK,GAAG;AAGtF,KAAI,MAAM,MAAM,WAAW,QAAQ,MAAM,GACvC,OAAM,IAAI,WAAW,iCAAiC;AAIxD,KACG,OAAO,MAAM,WAAW,YAAY,WAAW,QAAQ,MAAM,UAC7D,aAAa,MAAM,OAAO,IAAI,MAAM,OAAO,MAAM,WAAW,QAAQ,MAAM,OAAO,GAElF,OAAM,IAAI,WAAW,0CAA0C;AAIjE,KAAI,MAAM,cAAc;AACtB,MAAI,OAAO,MAAM,iBAAiB,SAChC,OAAM,IAAI,WAAW,uCAAuC;EAG9D,MAAM,eAAe,KAAK,MAAM,MAAM,aAAa,GAAG;AACtD,MAAI,WAAW,QAAQ,aACrB,OAAM,IAAI,WAAW,2CAA2C;;AAKpE,KAAI,MAAM,gBAAgB;AACxB,MAAI,OAAO,MAAM,mBAAmB,SAClC,OAAM,IAAI,WAAW,yCAAyC;AAIhE,MADuB,KAAK,MAAM,MAAM,eAAe,GAAG,QACnC,WAAW,IAChC,OAAM,IAAI,WAAW,6CAA6C;;AAKtE,KACG,aAAa,MAAM,kBAAkB,IACpC,MAAM,kBAAkB,MACxB,WAAW,QAAQ,MAAM,kBAAkB,MAC5C,MAAM,QAAQ,MAAM,kBAAkB,IACrC,aAAa,MAAM,kBAAkB,GAAG,IACxC,MAAM,kBAAkB,GAAG,MAC3B,WAAW,QAAQ,MAAM,kBAAkB,GAAG,GAEhD,OAAM,IAAI,WAAW,mDAAmD;CAI1E,MAAM,cAAc;EAClB,GAAG;EACH,cAAc,QAAQ,WAAW,MAAM,IAAK;EAC5C,gBAAgB,WAAW,MAAM,QAAQ,WAAW,MAAM,IAAK,GAAG;EAClE,QAAQ,OAAO,MAAM,WAAW,WAAW;GAAE,GAAG,MAAM;GAAQ,IAAI,WAAW;GAAK,GAAG,WAAW;EAChG,IAAI,WAAW;EACf,mBAAmB,MAAM,QAAQ,MAAM,kBAAkB,GAAG,CAAC,cAAc,GAAG;EAC/E;AAID,QAFmB,gBAAgB,SAAS,aAAa,cAAc"}

package/build/modules/vc/jwt-vc/index.d.mts

@@ -0,0 +1,6 @@
+import { W3cV2JwtVerifiableCredential, W3cV2JwtVerifiableCredentialOptions } from "./W3cV2JwtVerifiableCredential.mjs";
+import { W3cJwtVerifiableCredential, W3cJwtVerifiableCredentialOptions } from "./W3cJwtVerifiableCredential.mjs";
+import { W3cJwtVerifiablePresentation, W3cJwtVerifiablePresentationOptions } from "./W3cJwtVerifiablePresentation.mjs";
+import { W3cJwtCredentialService } from "./W3cJwtCredentialService.mjs";
+import { W3cV2JwtVerifiablePresentation, W3cV2JwtVerifiablePresentationOptions } from "./W3cV2JwtVerifiablePresentation.mjs";
+import { W3cV2JwtCredentialService } from "./W3cV2JwtCredentialService.mjs";

package/build/modules/vc/jwt-vc/index.mjs

@@ -0,0 +1,8 @@
+
+
+import { W3cV2JwtVerifiableCredential } from "./W3cV2JwtVerifiableCredential.mjs";
+import { W3cJwtVerifiableCredential } from "./W3cJwtVerifiableCredential.mjs";
+import { W3cJwtVerifiablePresentation } from "./W3cJwtVerifiablePresentation.mjs";
+import { W3cJwtCredentialService } from "./W3cJwtCredentialService.mjs";
+import { W3cV2JwtVerifiablePresentation } from "./W3cV2JwtVerifiablePresentation.mjs";
+import { W3cV2JwtCredentialService } from "./W3cV2JwtCredentialService.mjs";

package/build/modules/vc/jwt-vc/presentationTransformer.mjs

@@ -0,0 +1,45 @@
+
+
+import { CredoError } from "../../../error/CredoError.mjs";
+import "../../../error/index.mjs";
+import { JsonTransformer } from "../../../utils/JsonTransformer.mjs";
+import "../../../utils/index.mjs";
+import { isJsonObject } from "../../../types.mjs";
+import { JwtPayload } from "../../../crypto/jose/jwt/JwtPayload.mjs";
+import "../../../crypto/jose/jwt/index.mjs";
+import { W3cPresentation } from "../models/presentation/W3cPresentation.mjs";
+
+//#region src/modules/vc/jwt-vc/presentationTransformer.ts
+function getJwtPayloadFromPresentation(presentation) {
+	const vp = JsonTransformer.toJSON(presentation);
+	const payloadOptions = { additionalClaims: { vp } };
+	if (presentation.holderId) {
+		payloadOptions.iss = presentation.holderId;
+		if (typeof vp.holder === "string") delete vp.holder;
+		else if (typeof vp.holder === "object") {
+			delete vp.holder.id;
+			if (Object.keys(vp.holder).length === 0) delete vp.holder;
+		}
+	}
+	if (presentation.id) {
+		payloadOptions.jti = presentation.id;
+		delete vp.id;
+	}
+	return new JwtPayload(payloadOptions);
+}
+function getPresentationFromJwtPayload(jwtPayload) {
+	if (!("vp" in jwtPayload.additionalClaims) || !isJsonObject(jwtPayload.additionalClaims.vp)) throw new CredoError("JWT does not contain a valid 'vp' claim");
+	const jwtVp = jwtPayload.additionalClaims.vp;
+	if (jwtVp.id && jwtPayload.jti !== jwtVp.id) throw new CredoError("JWT jti and vp.id do not match");
+	if (typeof jwtVp.holder === "string" && jwtPayload.iss !== jwtVp.holder || isJsonObject(jwtVp.holder) && jwtVp.holder.id && jwtPayload.iss !== jwtVp.holder.id) throw new CredoError("JWT iss and vp.holder(.id) do not match");
+	const dataModelVp = {
+		...jwtVp,
+		id: jwtPayload.jti,
+		holder: jwtPayload.iss
+	};
+	return JsonTransformer.fromJSON(dataModelVp, W3cPresentation);
+}
+
+//#endregion
+export { getJwtPayloadFromPresentation, getPresentationFromJwtPayload };
+//# sourceMappingURL=presentationTransformer.mjs.map

package/build/modules/vc/jwt-vc/presentationTransformer.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"presentationTransformer.mjs","names":["payloadOptions: JwtPayloadOptions"],"sources":["../../../../src/modules/vc/jwt-vc/presentationTransformer.ts"],"sourcesContent":["import type { JwtPayloadOptions } from '../../../crypto/jose/jwt'\nimport { JwtPayload } from '../../../crypto/jose/jwt'\nimport { CredoError } from '../../../error'\nimport { isJsonObject } from '../../../types'\nimport { JsonTransformer } from '../../../utils'\nimport type { W3cJsonPresentation } from '../models/presentation/W3cJsonPresentation'\nimport { W3cPresentation } from '../models/presentation/W3cPresentation'\n\nexport function getJwtPayloadFromPresentation(presentation: W3cPresentation) {\n  const vp = JsonTransformer.toJSON(presentation) as Partial<W3cJsonPresentation>\n\n  const payloadOptions: JwtPayloadOptions = {\n    additionalClaims: {\n      vp,\n    },\n  }\n\n  // Extract `iss` and remove holder id from vp\n  if (presentation.holderId) {\n    payloadOptions.iss = presentation.holderId\n\n    if (typeof vp.holder === 'string') {\n      // biome-ignore lint/performance/noDelete: no explanation\n      delete vp.holder\n    } else if (typeof vp.holder === 'object') {\n      // biome-ignore lint/performance/noDelete: no explanation\n      delete vp.holder.id\n      if (Object.keys(vp.holder).length === 0) {\n        // biome-ignore lint/performance/noDelete: no explanation\n        delete vp.holder\n      }\n    }\n  }\n\n  // Extract `jti` and remove id from vp\n  if (presentation.id) {\n    payloadOptions.jti = presentation.id\n    // biome-ignore lint/performance/noDelete: no explanation\n    delete vp.id\n  }\n\n  return new JwtPayload(payloadOptions)\n}\n\nexport function getPresentationFromJwtPayload(jwtPayload: JwtPayload) {\n  if (!('vp' in jwtPayload.additionalClaims) || !isJsonObject(jwtPayload.additionalClaims.vp)) {\n    throw new CredoError(\"JWT does not contain a valid 'vp' claim\")\n  }\n\n  const jwtVp = jwtPayload.additionalClaims.vp\n\n  // Validate vp.id and jti\n  if (jwtVp.id && jwtPayload.jti !== jwtVp.id) {\n    throw new CredoError('JWT jti and vp.id do not match')\n  }\n\n  // Validate vp.holder and iss\n  if (\n    (typeof jwtVp.holder === 'string' && jwtPayload.iss !== jwtVp.holder) ||\n    (isJsonObject(jwtVp.holder) && jwtVp.holder.id && jwtPayload.iss !== jwtVp.holder.id)\n  ) {\n    throw new CredoError('JWT iss and vp.holder(.id) do not match')\n  }\n\n  const dataModelVp = {\n    ...jwtVp,\n    id: jwtPayload.jti,\n    holder: jwtPayload.iss,\n  }\n\n  const vpInstance = JsonTransformer.fromJSON(dataModelVp, W3cPresentation)\n\n  return vpInstance\n}\n"],"mappings":";;;;;;;;;;;;AAQA,SAAgB,8BAA8B,cAA+B;CAC3E,MAAM,KAAK,gBAAgB,OAAO,aAAa;CAE/C,MAAMA,iBAAoC,EACxC,kBAAkB,EAChB,IACD,EACF;AAGD,KAAI,aAAa,UAAU;AACzB,iBAAe,MAAM,aAAa;AAElC,MAAI,OAAO,GAAG,WAAW,SAEvB,QAAO,GAAG;WACD,OAAO,GAAG,WAAW,UAAU;AAExC,UAAO,GAAG,OAAO;AACjB,OAAI,OAAO,KAAK,GAAG,OAAO,CAAC,WAAW,EAEpC,QAAO,GAAG;;;AAMhB,KAAI,aAAa,IAAI;AACnB,iBAAe,MAAM,aAAa;AAElC,SAAO,GAAG;;AAGZ,QAAO,IAAI,WAAW,eAAe;;AAGvC,SAAgB,8BAA8B,YAAwB;AACpE,KAAI,EAAE,QAAQ,WAAW,qBAAqB,CAAC,aAAa,WAAW,iBAAiB,GAAG,CACzF,OAAM,IAAI,WAAW,0CAA0C;CAGjE,MAAM,QAAQ,WAAW,iBAAiB;AAG1C,KAAI,MAAM,MAAM,WAAW,QAAQ,MAAM,GACvC,OAAM,IAAI,WAAW,iCAAiC;AAIxD,KACG,OAAO,MAAM,WAAW,YAAY,WAAW,QAAQ,MAAM,UAC7D,aAAa,MAAM,OAAO,IAAI,MAAM,OAAO,MAAM,WAAW,QAAQ,MAAM,OAAO,GAElF,OAAM,IAAI,WAAW,0CAA0C;CAGjE,MAAM,cAAc;EAClB,GAAG;EACH,IAAI,WAAW;EACf,QAAQ,WAAW;EACpB;AAID,QAFmB,gBAAgB,SAAS,aAAa,gBAAgB"}

package/build/modules/vc/models/ClaimFormat.d.mts

@@ -0,0 +1,25 @@
+//#region src/modules/vc/models/ClaimFormat.d.ts
+/**
+ * Defines the claim format based on the formats registered in
+ * [DIF Claim Format Registry](https://identity.foundation/claim-format-registry/).
+ */
+declare enum ClaimFormat {
+  Jwt = "jwt",
+  JwtVc = "jwt_vc",
+  JwtVp = "jwt_vp",
+  Ldp = "ldp",
+  LdpVc = "ldp_vc",
+  LdpVp = "ldp_vp",
+  Di = "di",
+  DiVc = "di_vc",
+  DiVp = "di_vp",
+  SdJwtDc = "dc+sd-jwt",
+  JwtW3cVc = "vc+jwt",
+  JwtW3cVp = "vp+jwt",
+  SdJwtW3cVc = "vc+sd-jwt",
+  SdJwtW3cVp = "vp+sd-jwt",
+  MsoMdoc = "mso_mdoc",
+}
+//#endregion
+export { ClaimFormat };
+//# sourceMappingURL=ClaimFormat.d.mts.map

package/build/modules/vc/models/ClaimFormat.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClaimFormat.d.mts","names":[],"sources":["../../../../src/modules/vc/models/ClaimFormat.ts"],"sourcesContent":[],"mappings":";;;;AAIA;aAAY,WAAA"}

package/build/modules/vc/models/ClaimFormat.mjs

@@ -0,0 +1,29 @@
+
+
+//#region src/modules/vc/models/ClaimFormat.ts
+/**
+* Defines the claim format based on the formats registered in
+* [DIF Claim Format Registry](https://identity.foundation/claim-format-registry/).
+*/
+let ClaimFormat = /* @__PURE__ */ function(ClaimFormat$1) {
+	ClaimFormat$1["Jwt"] = "jwt";
+	ClaimFormat$1["JwtVc"] = "jwt_vc";
+	ClaimFormat$1["JwtVp"] = "jwt_vp";
+	ClaimFormat$1["Ldp"] = "ldp";
+	ClaimFormat$1["LdpVc"] = "ldp_vc";
+	ClaimFormat$1["LdpVp"] = "ldp_vp";
+	ClaimFormat$1["Di"] = "di";
+	ClaimFormat$1["DiVc"] = "di_vc";
+	ClaimFormat$1["DiVp"] = "di_vp";
+	ClaimFormat$1["SdJwtDc"] = "dc+sd-jwt";
+	ClaimFormat$1["JwtW3cVc"] = "vc+jwt";
+	ClaimFormat$1["JwtW3cVp"] = "vp+jwt";
+	ClaimFormat$1["SdJwtW3cVc"] = "vc+sd-jwt";
+	ClaimFormat$1["SdJwtW3cVp"] = "vp+sd-jwt";
+	ClaimFormat$1["MsoMdoc"] = "mso_mdoc";
+	return ClaimFormat$1;
+}({});
+
+//#endregion
+export { ClaimFormat };
+//# sourceMappingURL=ClaimFormat.mjs.map

package/build/modules/vc/models/ClaimFormat.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClaimFormat.mjs","names":[],"sources":["../../../../src/modules/vc/models/ClaimFormat.ts"],"sourcesContent":["/**\n * Defines the claim format based on the formats registered in\n * [DIF Claim Format Registry](https://identity.foundation/claim-format-registry/).\n */\nexport enum ClaimFormat {\n  Jwt = 'jwt',\n  JwtVc = 'jwt_vc',\n  JwtVp = 'jwt_vp',\n  Ldp = 'ldp',\n  LdpVc = 'ldp_vc',\n  LdpVp = 'ldp_vp',\n  Di = 'di',\n  DiVc = 'di_vc',\n  DiVp = 'di_vp',\n  SdJwtDc = 'dc+sd-jwt',\n  JwtW3cVc = 'vc+jwt',\n  JwtW3cVp = 'vp+jwt',\n  SdJwtW3cVc = 'vc+sd-jwt',\n  SdJwtW3cVp = 'vp+sd-jwt',\n  MsoMdoc = 'mso_mdoc',\n}\n"],"mappings":";;;;;;;AAIA,IAAY,sDAAL;AACL;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA"}

package/build/modules/vc/models/W3cV2VerifyResult.d.mts

@@ -0,0 +1,85 @@
+import { SingleValidationResult } from "./W3cVerifyResult.mjs";
+
+//#region src/modules/vc/models/W3cV2VerifyResult.d.ts
+type W3cV2VerifyPresentationResult = W3cV2VerifyResult<W3cV2PresentationValidations>;
+type W3cV2VerifyCredentialResult = W3cV2VerifyResult<W3cV2CredentialValidations>;
+interface W3cV2VerifyResult<Validations> {
+  /**
+   * Whether the verification as a whole is valid. This means that
+   * all validations inside the validations object should have passed.
+   */
+  isValid: boolean;
+  /**
+   * Validations that have been performed
+   */
+  validations: Partial<Validations>;
+  /**
+   * Error that was caught during verification not related to
+   * any of the specific validations that are performed
+   */
+  error?: Error;
+}
+interface W3cV2CredentialValidations {
+  /**
+   * Validation that validates whether the credential conforms
+   * to the data model and is currently valid (not expired or
+   * issued in the future).
+   */
+  dataModel: SingleValidationResult;
+  /**
+   * Whether the signature of the credential is valid
+   */
+  signature: SingleValidationResult;
+  /**
+   * Whether the 'issuer' of the credential is also the
+   * signer of the credential proof
+   */
+  issuerIsSigner: SingleValidationResult;
+}
+interface W3cV2PresentationValidations {
+  /**
+   * Validation that validates whether the presentation conforms
+   * to the data model.
+   */
+  dataModel: SingleValidationResult;
+  /**
+   * Whether the signature of the presentation is valid
+   */
+  presentationSignature: SingleValidationResult;
+  /**
+   * Validation results of the credentials inside the presentation.
+   * The order matches the order of credentials in the presentation.
+   *
+   * This object extends the credential verification result with the exception that
+   * a new `credentialSubjectAuthentication` has been added.
+   */
+  credentials: W3cV2VerifyResult<W3cV2CredentialValidations & {
+    /**
+     * Whether the credential subject authentication is valid. Note this only
+     * takes into account credentialSubject authentication, and not cases where
+     * the holder of a credential may be different from the credential subject.
+     *
+     * The credentialSubject authentication is deemed valid in the following cases:
+     *  - The credential has no credential subject identifiers. In this case the
+     *    credential is seen as a bearer credential and thus authentication is not needed.
+     *  - The credential has AT LEAST one credential subject id, and the presentation
+     *    is signed by at least one of the credential subject ids.
+     */
+    credentialSubjectAuthentication: SingleValidationResult;
+  }>[];
+  /**
+   * Whether the presentation is signed by the 'holder' of the
+   * presentation.
+   *
+   * NOTE: this check will return the value `true` for `isValid`
+   * when the `holder` property is not set on the presentation.
+   * as the goal of this validation is to assert whether the
+   * 'holder' property that is used in the presentation is valid.
+   * If the property is not present, the validation can be seen as
+   * successful
+   */
+  holderIsSigner: SingleValidationResult;
+}
+//#endregion
+export { W3cV2VerifyCredentialResult, W3cV2VerifyPresentationResult };
+//# sourceMappingURL=W3cV2VerifyResult.d.mts.map

package/build/modules/vc/models/W3cV2VerifyResult.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"W3cV2VerifyResult.d.mts","names":[],"sources":["../../../../src/modules/vc/models/W3cV2VerifyResult.ts"],"sourcesContent":[],"mappings":";;;KAEY,6BAAA,GAAgC,kBAAkB;KAClD,2BAAA,GAA8B,kBAAkB;UAElD;;AAHV;AACA;AAAuF;EAYhE,OAAA,EAAA,OAAA;EAAR;;;EASL,WAAA,EATK,OASL,CATa,WASa,CAAA;EAMvB;;;;EAcH,KAAA,CAAA,EAvBA,KAuBA;;UApBA,0BAAA,CA8Be;EAUrB;;;;;aAlCS;;;;aAKA;;;;;kBAMK;;UAGR,4BAAA;;;;;aAKG;;;;yBAKY;;;;;;;;eASV,kBACX;;;;;;;;;;;;qCAYmC;;;;;;;;;;;;;kBAerB"}

package/build/modules/vc/models/W3cVerifyResult.d.mts

@@ -0,0 +1,112 @@
+//#region src/modules/vc/models/W3cVerifyResult.d.ts
+type W3cVerifyPresentationResult = W3cVerifyResult<W3cPresentationValidations>;
+type W3cVerifyCredentialResult = W3cVerifyResult<W3cCredentialValidations>;
+type SingleValidationResult = {
+  isValid: boolean;
+  error?: Error;
+};
+interface W3cVerifyResult<Validations> {
+  /**
+   * Whether the verification as a whole is valid. This means that
+   * all validations inside the validations object should have passed.
+   */
+  isValid: boolean;
+  /**
+   * Validations that have been performed
+   */
+  validations: Partial<Validations>;
+  /**
+   * Error that was caught during verification not related to
+   * any of the specific validations that are performed
+   */
+  error?: Error;
+}
+interface W3cCredentialValidations {
+  /**
+   * Validation that validates whether the credential conforms
+   * to the data model and is currently valid (not expired or
+   * issued in the future).
+   */
+  dataModel: SingleValidationResult;
+  /**
+   * Whether the signature of the credential is valid
+   */
+  signature: SingleValidationResult;
+  /**
+   * Whether the credential status is still valid, meaning
+   * that is hasn't been revoked yet.
+   */
+  credentialStatus: SingleValidationResult;
+  /**
+   * Whether the 'issuer' of the credential is also the
+   * signer of the credential proof
+   */
+  issuerIsSigner: SingleValidationResult;
+  /**
+   * NOTE: this validation is currently only present for ldp_vc credentials.
+   * When this validation is present, ALL OTHER validations will be skipped.
+   *
+   * Whether the presentation is valid according to the [vc.js](https://github.com/digitalbazaar/vc)
+   * library. As the library handles all validations, it is not possible to include the other
+   * validation items separately. In the future the vc.js library will be replaced to provide a similar
+   * validation result for all credential formats.
+   */
+  vcJs: SingleValidationResult;
+}
+interface W3cPresentationValidations {
+  /**
+   * Validation that validates whether the presentation conforms
+   * to the data model.
+   */
+  dataModel: SingleValidationResult;
+  /**
+   * Whether the signature of the presentation is valid
+   */
+  presentationSignature: SingleValidationResult;
+  /**
+   * Validation results of the credentials inside the presentation.
+   * The order matches the order of credentials in the presentation.
+   *
+   * This object extends the credential verification result with the exception that
+   * a new `credentialSubjectAuthentication` has been added.
+   */
+  credentials: W3cVerifyResult<W3cCredentialValidations & {
+    /**
+     * Whether the credential subject authentication is valid. Note this only
+     * takes into account credentialSubject authentication, and not cases where
+     * the holder of a credential may be different from the credential subject.
+     *
+     * The credentialSubject authentication is deemed valid in the following cases:
+     *  - The credential has no credential subject identifiers. In this case the
+     *    credential is seen as a bearer credential and thus authentication is not needed.
+     *  - The credential has AT LEAST one credential subject id, and the presentation
+     *    is signed by at least one of the credential subject ids.
+     */
+    credentialSubjectAuthentication: SingleValidationResult;
+  }>[];
+  /**
+   * Whether the presentation is signed by the 'holder' of the
+   * presentation.
+   *
+   * NOTE: this check will return the value `true` for `isValid`
+   * when the `holder` property is not set on the presentation.
+   * as the goal of this validation is to assert whether the
+   * 'holder' property that is used in the presentation is valid.
+   * If the property is not present, the validation can be seen as
+   * successful
+   */
+  holderIsSigner: SingleValidationResult;
+  /**
+   * NOTE: this validation is currently only present for ldp_vp presentations.
+   * When this validation is present, ALL OTHER validations will be skipped.
+   *
+   * Whether the presentation is valid according to the [vc.js](https://github.com/digitalbazaar/vc)
+   * library. As the library handles all validations, it is not possible to include the other
+   * validation items separately. In the future the vc.js library will be replaced to provide a similar
+   * validation result for all credential formats.
+   */
+  vcJs: SingleValidationResult;
+}
+//#endregion
+export { SingleValidationResult, W3cVerifyCredentialResult, W3cVerifyPresentationResult };
+//# sourceMappingURL=W3cVerifyResult.d.mts.map

package/build/modules/vc/models/W3cVerifyResult.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"W3cVerifyResult.d.mts","names":[],"sources":["../../../../src/modules/vc/models/W3cVerifyResult.ts"],"sourcesContent":[],"mappings":";KAAY,2BAAA,GAA8B,gBAAgB;KAC9C,yBAAA,GAA4B,gBAAgB;KAE5C,sBAAA;EAHA,OAAA,EAAA,OAAA;EACA,KAAA,CAAA,EAEqD,KAFrD;AAEZ,CAAA;AAAwE,UAE9D,eAAe,CAAA,WAAA,CAAA,CAAA;EAUF;;;;EASb,OAAA,EAAA,OAAA;EAMG;;;EAiBK,WAAA,EAhCH,OAgCG,CAhCK,WAgCL,CAAA;EAWV;;AAAsB;;EAaL,KAAA,CAAA,EAlDf,KAkDe;;UA/Cf,wBAAA,CAqE6B;EAbxB;;;;;aAlDF;;;;aAKA;;;;;oBAMO;;;;;kBAMF;;;;;;;;;;QAWV;;UAGE,0BAAA;;;;;aAKG;;;;yBAKY;;;;;;;;eASV,gBACX;;;;;;;;;;;;qCAYmC;;;;;;;;;;;;;kBAerB;;;;;;;;;;QAWV"}

package/build/modules/vc/models/credential/W3cCredential.d.mts

@@ -0,0 +1,38 @@
+import { JsonObject, SingleOrArray } from "../../../../types.mjs";
+import { W3cCredentialSchema } from "./W3cCredentialSchema.mjs";
+import { W3cCredentialStatus } from "./W3cCredentialStatus.mjs";
+import { W3cCredentialSubject, W3cCredentialSubjectOptions } from "./W3cCredentialSubject.mjs";
+import { W3cIssuer, W3cIssuerOptions } from "./W3cIssuer.mjs";
+
+//#region src/modules/vc/models/credential/W3cCredential.d.ts
+interface W3cCredentialOptions {
+  context?: Array<string | JsonObject>;
+  id?: string;
+  type: Array<string>;
+  issuer: string | W3cIssuerOptions;
+  issuanceDate: string;
+  expirationDate?: string;
+  credentialSubject: SingleOrArray<W3cCredentialSubjectOptions>;
+  credentialStatus?: W3cCredentialStatus;
+  credentialSchema?: SingleOrArray<W3cCredentialSchema>;
+}
+declare class W3cCredential {
+  constructor(options: W3cCredentialOptions);
+  context: Array<string | JsonObject>;
+  id?: string;
+  type: Array<string>;
+  issuer: string | W3cIssuer;
+  issuanceDate: string;
+  expirationDate?: string;
+  credentialSubject: SingleOrArray<W3cCredentialSubject>;
+  credentialSchema?: SingleOrArray<W3cCredentialSchema>;
+  credentialStatus?: W3cCredentialStatus;
+  get issuerId(): string;
+  get credentialSchemaIds(): string[];
+  get credentialSubjectIds(): string[];
+  get contexts(): Array<string | JsonObject>;
+  static fromJson(json: Record<string, unknown>): W3cCredential;
+}
+//#endregion
+export { W3cCredential, W3cCredentialOptions };
+//# sourceMappingURL=W3cCredential.d.mts.map

package/build/modules/vc/models/credential/W3cCredential.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"W3cCredential.d.mts","names":[],"sources":["../../../../../src/modules/vc/models/credential/W3cCredential.ts"],"sourcesContent":[],"mappings":";;;;;;;UAciB,oBAAA;YACL,eAAe;EADV,EAAA,CAAA,EAAA,MAAA;EACU,IAAA,EAEnB,KAFmB,CAAA,MAAA,CAAA;EAAf,MAAA,EAAA,MAAA,GAGO,gBAHP;EAEJ,YAAA,EAAA,MAAA;EACW,cAAA,CAAA,EAAA,MAAA;EAGgB,iBAAA,EAAd,aAAc,CAAA,2BAAA,CAAA;EAAd,gBAAA,CAAA,EACA,mBADA;EACA,gBAAA,CAAA,EACA,aADA,CACc,mBADd,CAAA;;AACA,cAGR,aAAA,CAHQ;EAAa,WAAA,CAAA,OAAA,EAIJ,oBAJI;EAGrB,OAAA,EAiCM,KAjCN,CAAA,MAAa,GAiCQ,UAjCR,CAAA;EACI,EAAA,CAAA,EAAA,MAAA;EAgCI,IAAA,EAOlB,KAPkB,CAAA,MAAA,CAAA;EAAf,MAAA,EAAA,MAAA,GAWQ,SAXR;EAOH,YAAA,EAAA,MAAA;EAIW,cAAA,CAAA,EAAA,MAAA;EAWgB,iBAAA,EAAd,aAAc,CAAA,oBAAA,CAAA;EAAd,gBAAA,CAAA,EAMD,aANC,CAMa,mBANb,CAAA;EAMa,gBAAA,CAAA,EAMd,mBANc;EAAd,IAAA,QAAA,CAAA,CAAA,EAAA,MAAA;EAMA,IAAA,mBAAA,CAAA,CAAA,EAAA,MAAA,EAAA;EA0BY,IAAA,oBAAA,CAAA,CAAA,EAAA,MAAA,EAAA;EAAf,IAAA,QAAA,CAAA,CAAA,EAAA,KAAA,CAAA,MAAA,GAAe,UAAf,CAAA;EAIM,OAAA,QAAA,CAAA,IAAA,EAAA,MAAA,CAAA,MAAA,EAAA,OAAA,CAAA,CAAA,EAAuB,aAAvB"}

package/build/modules/vc/models/credential/W3cCredential.mjs

@@ -0,0 +1,100 @@
+
+
+import { __decorateMetadata } from "../../../../_virtual/_@oxc-project_runtime@0.99.0/helpers/decorateMetadata.mjs";
+import { __decorate } from "../../../../_virtual/_@oxc-project_runtime@0.99.0/helpers/decorate.mjs";
+import { asArray, mapSingleOrArray } from "../../../../utils/array.mjs";
+import { JsonTransformer } from "../../../../utils/JsonTransformer.mjs";
+import { IsInstanceOrArrayOfInstances, IsUri } from "../../../../utils/validators.mjs";
+import "../../../../utils/index.mjs";
+import { CREDENTIALS_CONTEXT_V1_URL } from "../../constants.mjs";
+import { IsCredentialJsonLdContext, IsCredentialType } from "../../validators.mjs";
+import { W3cCredentialSchema } from "./W3cCredentialSchema.mjs";
+import { W3cCredentialStatus } from "./W3cCredentialStatus.mjs";
+import { IsW3cCredentialSubject, W3cCredentialSubject, W3cCredentialSubjectTransformer } from "./W3cCredentialSubject.mjs";
+import { IsW3cIssuer, W3cIssuer, W3cIssuerTransformer } from "./W3cIssuer.mjs";
+import { Expose, Type } from "class-transformer";
+import { IsInstance, IsOptional, IsRFC3339, ValidateNested } from "class-validator";
+
+//#region src/modules/vc/models/credential/W3cCredential.ts
+var _ref, _ref2, _ref3;
+var W3cCredential = class W3cCredential {
+	constructor(options) {
+		if (options) {
+			this.context = options.context ?? [CREDENTIALS_CONTEXT_V1_URL];
+			this.id = options.id;
+			this.type = options.type || ["VerifiableCredential"];
+			this.issuer = typeof options.issuer === "string" || options.issuer instanceof W3cIssuer ? options.issuer : new W3cIssuer(options.issuer);
+			this.issuanceDate = options.issuanceDate;
+			this.expirationDate = options.expirationDate;
+			this.credentialSubject = mapSingleOrArray(options.credentialSubject, (subject) => subject instanceof W3cCredentialSubject ? subject : new W3cCredentialSubject(subject));
+			if (options.credentialStatus) this.credentialStatus = options.credentialStatus instanceof W3cCredentialStatus ? options.credentialStatus : new W3cCredentialStatus(options.credentialStatus);
+			if (options.credentialSchema) this.credentialSchema = mapSingleOrArray(options.credentialSchema, (schema) => schema instanceof W3cCredentialSchema ? schema : new W3cCredentialSchema(schema));
+		}
+	}
+	get issuerId() {
+		return this.issuer instanceof W3cIssuer ? this.issuer.id : this.issuer;
+	}
+	get credentialSchemaIds() {
+		if (!this.credentialSchema) return [];
+		if (Array.isArray(this.credentialSchema)) return this.credentialSchema.map((credentialSchema) => credentialSchema.id);
+		return [this.credentialSchema.id];
+	}
+	get credentialSubjectIds() {
+		if (Array.isArray(this.credentialSubject)) return this.credentialSubject.map((credentialSubject) => credentialSubject.id).filter((v) => v !== void 0);
+		return this.credentialSubject.id ? [this.credentialSubject.id] : [];
+	}
+	get contexts() {
+		return asArray(this.context);
+	}
+	static fromJson(json) {
+		return JsonTransformer.fromJSON(json, W3cCredential);
+	}
+};
+__decorate([
+	Expose({ name: "@context" }),
+	IsCredentialJsonLdContext(),
+	__decorateMetadata("design:type", typeof (_ref = typeof Array !== "undefined" && Array) === "function" ? _ref : Object)
+], W3cCredential.prototype, "context", void 0);
+__decorate([
+	IsOptional(),
+	IsUri(),
+	__decorateMetadata("design:type", String)
+], W3cCredential.prototype, "id", void 0);
+__decorate([IsCredentialType(), __decorateMetadata("design:type", typeof (_ref2 = typeof Array !== "undefined" && Array) === "function" ? _ref2 : Object)], W3cCredential.prototype, "type", void 0);
+__decorate([
+	W3cIssuerTransformer(),
+	IsW3cIssuer(),
+	__decorateMetadata("design:type", Object)
+], W3cCredential.prototype, "issuer", void 0);
+__decorate([IsRFC3339(), __decorateMetadata("design:type", String)], W3cCredential.prototype, "issuanceDate", void 0);
+__decorate([
+	IsRFC3339(),
+	IsOptional(),
+	__decorateMetadata("design:type", String)
+], W3cCredential.prototype, "expirationDate", void 0);
+__decorate([
+	IsW3cCredentialSubject({ each: true }),
+	W3cCredentialSubjectTransformer(),
+	__decorateMetadata("design:type", Object)
+], W3cCredential.prototype, "credentialSubject", void 0);
+__decorate([
+	IsOptional(),
+	Type(() => W3cCredentialSchema),
+	ValidateNested({ each: true }),
+	IsInstanceOrArrayOfInstances({
+		classType: W3cCredentialSchema,
+		allowEmptyArray: true
+	}),
+	__decorateMetadata("design:type", Object)
+], W3cCredential.prototype, "credentialSchema", void 0);
+__decorate([
+	IsOptional(),
+	Type(() => W3cCredentialStatus),
+	ValidateNested({ each: true }),
+	IsInstance(W3cCredentialStatus),
+	__decorateMetadata("design:type", typeof (_ref3 = typeof W3cCredentialStatus !== "undefined" && W3cCredentialStatus) === "function" ? _ref3 : Object)
+], W3cCredential.prototype, "credentialStatus", void 0);
+
+//#endregion
+export { W3cCredential };
+//# sourceMappingURL=W3cCredential.mjs.map

package/build/modules/vc/models/credential/W3cCredential.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"W3cCredential.mjs","names":[],"sources":["../../../../../src/modules/vc/models/credential/W3cCredential.ts"],"sourcesContent":["import { Expose, Type } from 'class-transformer'\nimport { IsInstance, IsOptional, IsRFC3339, ValidateNested } from 'class-validator'\nimport type { JsonObject, SingleOrArray } from '../../../../types'\nimport { asArray, JsonTransformer, mapSingleOrArray } from '../../../../utils'\nimport { IsInstanceOrArrayOfInstances, IsUri } from '../../../../utils/validators'\nimport { CREDENTIALS_CONTEXT_V1_URL } from '../../constants'\nimport { IsCredentialJsonLdContext, IsCredentialType } from '../../validators'\nimport { W3cCredentialSchema } from './W3cCredentialSchema'\nimport { W3cCredentialStatus } from './W3cCredentialStatus'\nimport type { W3cCredentialSubjectOptions } from './W3cCredentialSubject'\nimport { IsW3cCredentialSubject, W3cCredentialSubject, W3cCredentialSubjectTransformer } from './W3cCredentialSubject'\nimport type { W3cIssuerOptions } from './W3cIssuer'\nimport { IsW3cIssuer, W3cIssuer, W3cIssuerTransformer } from './W3cIssuer'\n\nexport interface W3cCredentialOptions {\n  context?: Array<string | JsonObject>\n  id?: string\n  type: Array<string>\n  issuer: string | W3cIssuerOptions\n  issuanceDate: string\n  expirationDate?: string\n  credentialSubject: SingleOrArray<W3cCredentialSubjectOptions>\n  credentialStatus?: W3cCredentialStatus\n  credentialSchema?: SingleOrArray<W3cCredentialSchema>\n}\n\nexport class W3cCredential {\n  public constructor(options: W3cCredentialOptions) {\n    if (options) {\n      this.context = options.context ?? [CREDENTIALS_CONTEXT_V1_URL]\n      this.id = options.id\n      this.type = options.type || ['VerifiableCredential']\n      this.issuer =\n        typeof options.issuer === 'string' || options.issuer instanceof W3cIssuer\n          ? options.issuer\n          : new W3cIssuer(options.issuer)\n      this.issuanceDate = options.issuanceDate\n      this.expirationDate = options.expirationDate\n      this.credentialSubject = mapSingleOrArray(options.credentialSubject, (subject) =>\n        subject instanceof W3cCredentialSubject ? subject : new W3cCredentialSubject(subject)\n      )\n\n      if (options.credentialStatus) {\n        this.credentialStatus =\n          options.credentialStatus instanceof W3cCredentialStatus\n            ? options.credentialStatus\n            : new W3cCredentialStatus(options.credentialStatus)\n      }\n\n      if (options.credentialSchema) {\n        this.credentialSchema = mapSingleOrArray(options.credentialSchema, (schema) =>\n          schema instanceof W3cCredentialSchema ? schema : new W3cCredentialSchema(schema)\n        )\n      }\n    }\n  }\n\n  @Expose({ name: '@context' })\n  @IsCredentialJsonLdContext()\n  public context!: Array<string | JsonObject>\n\n  @IsOptional()\n  @IsUri()\n  public id?: string\n\n  @IsCredentialType()\n  public type!: Array<string>\n\n  @W3cIssuerTransformer()\n  @IsW3cIssuer()\n  public issuer!: string | W3cIssuer\n\n  @IsRFC3339()\n  public issuanceDate!: string\n\n  @IsRFC3339()\n  @IsOptional()\n  public expirationDate?: string\n\n  @IsW3cCredentialSubject({ each: true })\n  @W3cCredentialSubjectTransformer()\n  public credentialSubject!: SingleOrArray<W3cCredentialSubject>\n\n  @IsOptional()\n  @Type(() => W3cCredentialSchema)\n  @ValidateNested({ each: true })\n  @IsInstanceOrArrayOfInstances({ classType: W3cCredentialSchema, allowEmptyArray: true })\n  public credentialSchema?: SingleOrArray<W3cCredentialSchema>\n\n  @IsOptional()\n  @Type(() => W3cCredentialStatus)\n  @ValidateNested({ each: true })\n  @IsInstance(W3cCredentialStatus)\n  public credentialStatus?: W3cCredentialStatus\n\n  public get issuerId(): string {\n    return this.issuer instanceof W3cIssuer ? this.issuer.id : this.issuer\n  }\n\n  public get credentialSchemaIds(): string[] {\n    if (!this.credentialSchema) return []\n\n    if (Array.isArray(this.credentialSchema)) {\n      return this.credentialSchema.map((credentialSchema) => credentialSchema.id)\n    }\n\n    return [this.credentialSchema.id]\n  }\n\n  public get credentialSubjectIds(): string[] {\n    if (Array.isArray(this.credentialSubject)) {\n      return this.credentialSubject\n        .map((credentialSubject) => credentialSubject.id)\n        .filter((v): v is string => v !== undefined)\n    }\n\n    return this.credentialSubject.id ? [this.credentialSubject.id] : []\n  }\n\n  public get contexts(): Array<string | JsonObject> {\n    return asArray(this.context)\n  }\n\n  public static fromJson(json: Record<string, unknown>) {\n    return JsonTransformer.fromJSON(json, W3cCredential)\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AA0BA,IAAa,gBAAb,MAAa,cAAc;CACzB,AAAO,YAAY,SAA+B;AAChD,MAAI,SAAS;AACX,QAAK,UAAU,QAAQ,WAAW,CAAC,2BAA2B;AAC9D,QAAK,KAAK,QAAQ;AAClB,QAAK,OAAO,QAAQ,QAAQ,CAAC,uBAAuB;AACpD,QAAK,SACH,OAAO,QAAQ,WAAW,YAAY,QAAQ,kBAAkB,YAC5D,QAAQ,SACR,IAAI,UAAU,QAAQ,OAAO;AACnC,QAAK,eAAe,QAAQ;AAC5B,QAAK,iBAAiB,QAAQ;AAC9B,QAAK,oBAAoB,iBAAiB,QAAQ,oBAAoB,YACpE,mBAAmB,uBAAuB,UAAU,IAAI,qBAAqB,QAAQ,CACtF;AAED,OAAI,QAAQ,iBACV,MAAK,mBACH,QAAQ,4BAA4B,sBAChC,QAAQ,mBACR,IAAI,oBAAoB,QAAQ,iBAAiB;AAGzD,OAAI,QAAQ,iBACV,MAAK,mBAAmB,iBAAiB,QAAQ,mBAAmB,WAClE,kBAAkB,sBAAsB,SAAS,IAAI,oBAAoB,OAAO,CACjF;;;CA2CP,IAAW,WAAmB;AAC5B,SAAO,KAAK,kBAAkB,YAAY,KAAK,OAAO,KAAK,KAAK;;CAGlE,IAAW,sBAAgC;AACzC,MAAI,CAAC,KAAK,iBAAkB,QAAO,EAAE;AAErC,MAAI,MAAM,QAAQ,KAAK,iBAAiB,CACtC,QAAO,KAAK,iBAAiB,KAAK,qBAAqB,iBAAiB,GAAG;AAG7E,SAAO,CAAC,KAAK,iBAAiB,GAAG;;CAGnC,IAAW,uBAAiC;AAC1C,MAAI,MAAM,QAAQ,KAAK,kBAAkB,CACvC,QAAO,KAAK,kBACT,KAAK,sBAAsB,kBAAkB,GAAG,CAChD,QAAQ,MAAmB,MAAM,OAAU;AAGhD,SAAO,KAAK,kBAAkB,KAAK,CAAC,KAAK,kBAAkB,GAAG,GAAG,EAAE;;CAGrE,IAAW,WAAuC;AAChD,SAAO,QAAQ,KAAK,QAAQ;;CAG9B,OAAc,SAAS,MAA+B;AACpD,SAAO,gBAAgB,SAAS,MAAM,cAAc;;;;CAnErD,OAAO,EAAE,MAAM,YAAY,CAAC;CAC5B,2BAA2B;;;;CAG3B,YAAY;CACZ,OAAO;;;YAGP,kBAAkB;;CAGlB,sBAAsB;CACtB,aAAa;;;YAGb,WAAW;;CAGX,WAAW;CACX,YAAY;;;;CAGZ,uBAAuB,EAAE,MAAM,MAAM,CAAC;CACtC,iCAAiC;;;;CAGjC,YAAY;CACZ,WAAW,oBAAoB;CAC/B,eAAe,EAAE,MAAM,MAAM,CAAC;CAC9B,6BAA6B;EAAE,WAAW;EAAqB,iBAAiB;EAAM,CAAC;;;;CAGvF,YAAY;CACZ,WAAW,oBAAoB;CAC/B,eAAe,EAAE,MAAM,MAAM,CAAC;CAC9B,WAAW,oBAAoB"}

package/build/modules/vc/models/credential/W3cCredentialSchema.d.mts

@@ -0,0 +1,13 @@
+//#region src/modules/vc/models/credential/W3cCredentialSchema.d.ts
+interface W3cCredentialSchemaOptions {
+  id: string;
+  type: string;
+}
+declare class W3cCredentialSchema {
+  constructor(options: W3cCredentialSchemaOptions);
+  id: string;
+  type: string;
+}
+//#endregion
+export { W3cCredentialSchema, W3cCredentialSchemaOptions };
+//# sourceMappingURL=W3cCredentialSchema.d.mts.map