@credo-ts/core 0.7.3 → 0.7.4-alpha-20261028231852

package/build/agent/TrustedIssuerContext.d.mts

@@ -1,4 +1,4 @@
-import { TrustedIssuer, TrustedIssuersForVerificationContext, TrustedIssuersForVerificationResult, VerificationSigner } from "./TrustedIssuersForVerification.mjs";
+import { GetTrustedIssuersForCredential, TrustedIssuer, TrustedIssuerDid, TrustedIssuersForVerificationContext, TrustedIssuersForVerificationResult, VerificationSigner, VerificationSignerDid, VerificationTypeCredential } from "./TrustedIssuersForVerification.mjs";
 import { AgentContext } from "./context/AgentContext.mjs";
 import "./context/index.mjs";
 //#region src/agent/TrustedIssuerContext.d.ts
@@ -14,6 +14,16 @@ export declare class TrustedIssuerContext {
   } = never>(agentContext: AgentContext, context: TrustedIssuersForVerificationContext<Signer, AdditionalVerificationTypes>, _trustedIssuers?: TrustedIssuer[]): Promise<{
     trustedIssuer: TrustedIssuerForSigner<Signer['method']> | undefined;
   }>;
+  /**
+   * Ensures the DID signer of a credential is trusted, where `trustedIssuers` can also resolve the
+   * trusted issuers for each credential.
+   */
+  static ensureTrustedCredentialSigner(agentContext: AgentContext, context: {
+    signer: VerificationSignerDid;
+    verification: VerificationTypeCredential;
+  }, trustedIssuers?: TrustedIssuerDid[] | GetTrustedIssuersForCredential): Promise<{
+    trustedIssuer: TrustedIssuerDid | undefined;
+  }>;
 }
 //#endregion
 //# sourceMappingURL=TrustedIssuerContext.d.mts.map

package/build/agent/TrustedIssuerContext.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"TrustedIssuerContext.d.mts","names":[],"sources":["../../src/agent/TrustedIssuerContext.ts"],"mappings":";;;;KAaK,uBAAuB,qBAAqB,gCAAgC,QAC/E;EACE,QAAQ;;qBAIC;SACS,iCAClB,eAAe,oBACf;IAAsC;aAEtC,cAAc,cACd,SAAS,qCAAqC,QAAQ,+BACrD,QAAQ,oCAAoC,uBAAuB;SAsBlD,oBAClB,eAAe,oBACf;IAAsC;aAEtC,cAAc,cACd,SAAS,qCAAqC,QAAQ,8BAEtD,kBAAkB,kBACjB;IAAU,eAAe,uBAAuB"}
+{"version":3,"file":"TrustedIssuerContext.d.mts","names":[],"sources":["../../src/agent/TrustedIssuerContext.ts"],"mappings":";;;;KAgBK,uBAAuB,qBAAqB,gCAAgC,QAC/E;EACE,QAAQ;;qBAIC;SACS,iCAClB,eAAe,oBACf;IAAsC;aAEtC,cAAc,cACd,SAAS,qCAAqC,QAAQ,+BACrD,QAAQ,oCAAoC,uBAAuB;SAsBlD,oBAClB,eAAe,oBACf;IAAsC;aAEtC,cAAc,cACd,SAAS,qCAAqC,QAAQ,8BAEtD,kBAAkB,kBACjB;IAAU,eAAe,uBAAuB;;;;;;SA0D/B,8BAClB,cAAc,cACd;IAAW,QAAQ;IAAuB,cAAc;KACxD,iBAAiB,qBAAqB,iCAA8B"}

package/build/agent/TrustedIssuerContext.mjs

@@ -37,6 +37,13 @@ var TrustedIssuerContext = class TrustedIssuerContext {
 		}
 		throw new CredoError("Unknown trusted entity signer method");
 	}
+	/**
+	* Ensures the DID signer of a credential is trusted, where `trustedIssuers` can also resolve the
+	* trusted issuers for each credential.
+	*/
+	static async ensureTrustedCredentialSigner(agentContext, context, trustedIssuers) {
+		return TrustedIssuerContext.ensureTrustedSigner(agentContext, context, typeof trustedIssuers === "function" ? await trustedIssuers(context) : trustedIssuers);
+	}
 };
 //#endregion
 export { TrustedIssuerContext };

package/build/agent/TrustedIssuerContext.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"TrustedIssuerContext.mjs","names":[],"sources":["../../src/agent/TrustedIssuerContext.ts"],"sourcesContent":["import { CredoError } from '../error'\nimport { parseDid } from '../modules/dids'\nimport { X509Certificate } from '../modules/x509/X509Certificate'\nimport { X509Service } from '../modules/x509/X509Service'\nimport type { AgentContext } from './context'\nimport type {\n  TrustedIssuer,\n  TrustedIssuerDid,\n  TrustedIssuersForVerificationContext,\n  TrustedIssuersForVerificationResult,\n  VerificationSigner,\n} from './TrustedIssuersForVerification'\n\ntype TrustedIssuerForSigner<SignerMethod extends VerificationSigner['method']> = Extract<\n  TrustedIssuer,\n  { method: SignerMethod }\n>\n\n// biome-ignore lint/complexity/noStaticOnlyClass: no explanation\nexport class TrustedIssuerContext {\n  public static async getTrustedIssuersForVerification<\n    Signer extends VerificationSigner,\n    AdditionalVerificationTypes extends { type: string } = never,\n  >(\n    agentContext: AgentContext,\n    context: TrustedIssuersForVerificationContext<Signer, AdditionalVerificationTypes>\n  ): Promise<TrustedIssuersForVerificationResult<TrustedIssuerForSigner<Signer['method']>> | undefined> {\n    // Call the user-registered callback\n    const trustedIssuers = await agentContext.config.getTrustedIssuersForVerification?.(agentContext, context)\n\n    // If there's no result, we return undefined (generally means we allow anything, but in case of mdoc nothing)\n    if (!trustedIssuers) return undefined\n\n    for (const trustedIssuer of trustedIssuers.trustedIssuers) {\n      // In the future we could allow a signer method to map to multiple trusted issuer methods\n      // but for now we require a 1-to-1 mapping\n      if (context.signer.method !== trustedIssuer.method) {\n        throw new CredoError(\n          `All trusted issuer methods must match the signer method (${context.signer.method}). Found method ${trustedIssuer.method}`\n        )\n      }\n    }\n\n    return {\n      trustedIssuers: trustedIssuers.trustedIssuers as TrustedIssuerForSigner<Signer['method']>[],\n    }\n  }\n\n  public static async ensureTrustedSigner<\n    Signer extends VerificationSigner,\n    AdditionalVerificationTypes extends { type: string } = never,\n  >(\n    agentContext: AgentContext,\n    context: TrustedIssuersForVerificationContext<Signer, AdditionalVerificationTypes>,\n    // The trusted issuers to verify the signer against. If not provided they will be dynamically fetched.\n    _trustedIssuers?: TrustedIssuer[]\n  ): Promise<{ trustedIssuer: TrustedIssuerForSigner<Signer['method']> | undefined }> {\n    const signer = context.signer\n    const trustedIssuers =\n      _trustedIssuers ??\n      (await TrustedIssuerContext.getTrustedIssuersForVerification(agentContext, context))?.trustedIssuers\n\n    if (signer.method === 'x509') {\n      // For X509 we do not allow verification to continue if there's no trusted issuers returned.\n      if (!trustedIssuers) {\n        throw new CredoError(\n          'No trusted certificates configured for X509 certificate chain validation. Signer cannot be verified.'\n        )\n      }\n\n      const x509Issuers = trustedIssuers.filter((t) => t.method === 'x509')\n      const validatedChain = await X509Service.validateCertificateChain(agentContext, {\n        // TODO: we should allow x509 cert instance here\n        certificateChain: signer.certificateChain.map((certificate) => certificate.toString('base64')),\n        trustedCertificates: x509Issuers.flatMap((t) => t.issuance),\n      })\n\n      // validateCertificateChain returns the chain, where the first element is\n      // always the matched trusted certificate from the list we provided\n      const trustAnchor = validatedChain[0]\n      const trustedIssuer = x509Issuers.find((t) =>\n        t.issuance.some((certificate) => X509Certificate.fromEncodedCertificate(certificate).equal(trustAnchor))\n      )\n\n      return { trustedIssuer: trustedIssuer as TrustedIssuerForSigner<Signer['method']> }\n    }\n\n    if (signer.method === 'did') {\n      // For DIDs we do allow verification to continue if there's no trusted issuers returned. To mimic original behavior.\n      // This can easily be disabled by returning an empty array\n      if (!trustedIssuers) return { trustedIssuer: undefined }\n\n      const didIssuers = trustedIssuers?.filter((t) => t.method === 'did') as TrustedIssuerDid[]\n      const signerDid = parseDid(signer.didUrl)\n\n      const trustedIssuer = didIssuers.find((t) => {\n        const did = parseDid(t.issuance)\n        return signerDid.did === did.did\n      })\n\n      if (!trustedIssuer) {\n        throw new CredoError(`Signer did ${signerDid.did} is not trusted. Unable to verify signature.`)\n      }\n\n      return { trustedIssuer: trustedIssuer as TrustedIssuerForSigner<Signer['method']> }\n    }\n\n    throw new CredoError('Unknown trusted entity signer method')\n  }\n}\n"],"mappings":";;;;;;;AAmBA,IAAa,uBAAb,MAAa,qBAAqB;CAChC,aAAoB,iCAIlB,cACA,SACoG;EAEpG,MAAM,iBAAiB,MAAM,aAAa,OAAO,mCAAmC,cAAc,OAAO;EAGzG,IAAI,CAAC,gBAAgB,OAAO,KAAA;EAE5B,KAAK,MAAM,iBAAiB,eAAe,gBAGzC,IAAI,QAAQ,OAAO,WAAW,cAAc,QAC1C,MAAM,IAAI,WACR,4DAA4D,QAAQ,OAAO,OAAO,kBAAkB,cAAc,QACpH;EAIJ,OAAO,EACL,gBAAgB,eAAe,eACjC;CACF;CAEA,aAAoB,oBAIlB,cACA,SAEA,iBACkF;EAClF,MAAM,SAAS,QAAQ;EACvB,MAAM,iBACJ,oBACC,MAAM,qBAAqB,iCAAiC,cAAc,OAAO,EAAA,EAAI;EAExF,IAAI,OAAO,WAAW,QAAQ;GAE5B,IAAI,CAAC,gBACH,MAAM,IAAI,WACR,sGACF;GAGF,MAAM,cAAc,eAAe,QAAQ,MAAM,EAAE,WAAW,MAAM;GASpE,MAAM,eAAc,MARS,YAAY,yBAAyB,cAAc;IAE9E,kBAAkB,OAAO,iBAAiB,KAAK,gBAAgB,YAAY,SAAS,QAAQ,CAAC;IAC7F,qBAAqB,YAAY,SAAS,MAAM,EAAE,QAAQ;GAC5D,CAAC,EAAA,CAIkC;GAKnC,OAAO,EAAE,eAJa,YAAY,MAAM,MACtC,EAAE,SAAS,MAAM,gBAAgB,gBAAgB,uBAAuB,WAAW,CAAC,CAAC,MAAM,WAAW,CAAC,CAGrE,EAA8C;EACpF;EAEA,IAAI,OAAO,WAAW,OAAO;GAG3B,IAAI,CAAC,gBAAgB,OAAO,EAAE,eAAe,KAAA,EAAU;GAEvD,MAAM,aAAa,gBAAgB,QAAQ,MAAM,EAAE,WAAW,KAAK;GACnE,MAAM,YAAY,SAAS,OAAO,MAAM;GAExC,MAAM,gBAAgB,WAAW,MAAM,MAAM;IAC3C,MAAM,MAAM,SAAS,EAAE,QAAQ;IAC/B,OAAO,UAAU,QAAQ,IAAI;GAC/B,CAAC;GAED,IAAI,CAAC,eACH,MAAM,IAAI,WAAW,cAAc,UAAU,IAAI,6CAA6C;GAGhG,OAAO,EAAiB,cAA0D;EACpF;EAEA,MAAM,IAAI,WAAW,sCAAsC;CAC7D;AACF"}
+{"version":3,"file":"TrustedIssuerContext.mjs","names":[],"sources":["../../src/agent/TrustedIssuerContext.ts"],"sourcesContent":["import { CredoError } from '../error'\nimport { parseDid } from '../modules/dids'\nimport { X509Certificate } from '../modules/x509/X509Certificate'\nimport { X509Service } from '../modules/x509/X509Service'\nimport type { AgentContext } from './context'\nimport type {\n  GetTrustedIssuersForCredential,\n  TrustedIssuer,\n  TrustedIssuerDid,\n  TrustedIssuersForVerificationContext,\n  TrustedIssuersForVerificationResult,\n  VerificationSigner,\n  VerificationSignerDid,\n  VerificationTypeCredential,\n} from './TrustedIssuersForVerification'\n\ntype TrustedIssuerForSigner<SignerMethod extends VerificationSigner['method']> = Extract<\n  TrustedIssuer,\n  { method: SignerMethod }\n>\n\n// biome-ignore lint/complexity/noStaticOnlyClass: no explanation\nexport class TrustedIssuerContext {\n  public static async getTrustedIssuersForVerification<\n    Signer extends VerificationSigner,\n    AdditionalVerificationTypes extends { type: string } = never,\n  >(\n    agentContext: AgentContext,\n    context: TrustedIssuersForVerificationContext<Signer, AdditionalVerificationTypes>\n  ): Promise<TrustedIssuersForVerificationResult<TrustedIssuerForSigner<Signer['method']>> | undefined> {\n    // Call the user-registered callback\n    const trustedIssuers = await agentContext.config.getTrustedIssuersForVerification?.(agentContext, context)\n\n    // If there's no result, we return undefined (generally means we allow anything, but in case of mdoc nothing)\n    if (!trustedIssuers) return undefined\n\n    for (const trustedIssuer of trustedIssuers.trustedIssuers) {\n      // In the future we could allow a signer method to map to multiple trusted issuer methods\n      // but for now we require a 1-to-1 mapping\n      if (context.signer.method !== trustedIssuer.method) {\n        throw new CredoError(\n          `All trusted issuer methods must match the signer method (${context.signer.method}). Found method ${trustedIssuer.method}`\n        )\n      }\n    }\n\n    return {\n      trustedIssuers: trustedIssuers.trustedIssuers as TrustedIssuerForSigner<Signer['method']>[],\n    }\n  }\n\n  public static async ensureTrustedSigner<\n    Signer extends VerificationSigner,\n    AdditionalVerificationTypes extends { type: string } = never,\n  >(\n    agentContext: AgentContext,\n    context: TrustedIssuersForVerificationContext<Signer, AdditionalVerificationTypes>,\n    // The trusted issuers to verify the signer against. If not provided they will be dynamically fetched.\n    _trustedIssuers?: TrustedIssuer[]\n  ): Promise<{ trustedIssuer: TrustedIssuerForSigner<Signer['method']> | undefined }> {\n    const signer = context.signer\n    const trustedIssuers =\n      _trustedIssuers ??\n      (await TrustedIssuerContext.getTrustedIssuersForVerification(agentContext, context))?.trustedIssuers\n\n    if (signer.method === 'x509') {\n      // For X509 we do not allow verification to continue if there's no trusted issuers returned.\n      if (!trustedIssuers) {\n        throw new CredoError(\n          'No trusted certificates configured for X509 certificate chain validation. Signer cannot be verified.'\n        )\n      }\n\n      const x509Issuers = trustedIssuers.filter((t) => t.method === 'x509')\n      const validatedChain = await X509Service.validateCertificateChain(agentContext, {\n        // TODO: we should allow x509 cert instance here\n        certificateChain: signer.certificateChain.map((certificate) => certificate.toString('base64')),\n        trustedCertificates: x509Issuers.flatMap((t) => t.issuance),\n      })\n\n      // validateCertificateChain returns the chain, where the first element is\n      // always the matched trusted certificate from the list we provided\n      const trustAnchor = validatedChain[0]\n      const trustedIssuer = x509Issuers.find((t) =>\n        t.issuance.some((certificate) => X509Certificate.fromEncodedCertificate(certificate).equal(trustAnchor))\n      )\n\n      return { trustedIssuer: trustedIssuer as TrustedIssuerForSigner<Signer['method']> }\n    }\n\n    if (signer.method === 'did') {\n      // For DIDs we do allow verification to continue if there's no trusted issuers returned. To mimic original behavior.\n      // This can easily be disabled by returning an empty array\n      if (!trustedIssuers) return { trustedIssuer: undefined }\n\n      const didIssuers = trustedIssuers?.filter((t) => t.method === 'did') as TrustedIssuerDid[]\n      const signerDid = parseDid(signer.didUrl)\n\n      const trustedIssuer = didIssuers.find((t) => {\n        const did = parseDid(t.issuance)\n        return signerDid.did === did.did\n      })\n\n      if (!trustedIssuer) {\n        throw new CredoError(`Signer did ${signerDid.did} is not trusted. Unable to verify signature.`)\n      }\n\n      return { trustedIssuer: trustedIssuer as TrustedIssuerForSigner<Signer['method']> }\n    }\n\n    throw new CredoError('Unknown trusted entity signer method')\n  }\n\n  /**\n   * Ensures the DID signer of a credential is trusted, where `trustedIssuers` can also resolve the\n   * trusted issuers for each credential.\n   */\n  public static async ensureTrustedCredentialSigner(\n    agentContext: AgentContext,\n    context: { signer: VerificationSignerDid; verification: VerificationTypeCredential },\n    trustedIssuers?: TrustedIssuerDid[] | GetTrustedIssuersForCredential\n  ) {\n    return TrustedIssuerContext.ensureTrustedSigner(\n      agentContext,\n      context,\n      typeof trustedIssuers === 'function' ? await trustedIssuers(context) : trustedIssuers\n    )\n  }\n}\n"],"mappings":";;;;;;;AAsBA,IAAa,uBAAb,MAAa,qBAAqB;CAChC,aAAoB,iCAIlB,cACA,SACoG;EAEpG,MAAM,iBAAiB,MAAM,aAAa,OAAO,mCAAmC,cAAc,OAAO;EAGzG,IAAI,CAAC,gBAAgB,OAAO,KAAA;EAE5B,KAAK,MAAM,iBAAiB,eAAe,gBAGzC,IAAI,QAAQ,OAAO,WAAW,cAAc,QAC1C,MAAM,IAAI,WACR,4DAA4D,QAAQ,OAAO,OAAO,kBAAkB,cAAc,QACpH;EAIJ,OAAO,EACL,gBAAgB,eAAe,eACjC;CACF;CAEA,aAAoB,oBAIlB,cACA,SAEA,iBACkF;EAClF,MAAM,SAAS,QAAQ;EACvB,MAAM,iBACJ,oBACC,MAAM,qBAAqB,iCAAiC,cAAc,OAAO,EAAA,EAAI;EAExF,IAAI,OAAO,WAAW,QAAQ;GAE5B,IAAI,CAAC,gBACH,MAAM,IAAI,WACR,sGACF;GAGF,MAAM,cAAc,eAAe,QAAQ,MAAM,EAAE,WAAW,MAAM;GASpE,MAAM,eAAc,MARS,YAAY,yBAAyB,cAAc;IAE9E,kBAAkB,OAAO,iBAAiB,KAAK,gBAAgB,YAAY,SAAS,QAAQ,CAAC;IAC7F,qBAAqB,YAAY,SAAS,MAAM,EAAE,QAAQ;GAC5D,CAAC,EAAA,CAIkC;GAKnC,OAAO,EAAE,eAJa,YAAY,MAAM,MACtC,EAAE,SAAS,MAAM,gBAAgB,gBAAgB,uBAAuB,WAAW,CAAC,CAAC,MAAM,WAAW,CAAC,CAGrE,EAA8C;EACpF;EAEA,IAAI,OAAO,WAAW,OAAO;GAG3B,IAAI,CAAC,gBAAgB,OAAO,EAAE,eAAe,KAAA,EAAU;GAEvD,MAAM,aAAa,gBAAgB,QAAQ,MAAM,EAAE,WAAW,KAAK;GACnE,MAAM,YAAY,SAAS,OAAO,MAAM;GAExC,MAAM,gBAAgB,WAAW,MAAM,MAAM;IAC3C,MAAM,MAAM,SAAS,EAAE,QAAQ;IAC/B,OAAO,UAAU,QAAQ,IAAI;GAC/B,CAAC;GAED,IAAI,CAAC,eACH,MAAM,IAAI,WAAW,cAAc,UAAU,IAAI,6CAA6C;GAGhG,OAAO,EAAiB,cAA0D;EACpF;EAEA,MAAM,IAAI,WAAW,sCAAsC;CAC7D;;;;;CAMA,aAAoB,8BAClB,cACA,SACA,gBACA;EACA,OAAO,qBAAqB,oBAC1B,cACA,SACA,OAAO,mBAAmB,aAAa,MAAM,eAAe,OAAO,IAAI,cACzE;CACF;AACF"}

package/build/agent/TrustedIssuersForVerification.d.mts

@@ -5,6 +5,7 @@ import { W3cV2JwtVerifiableCredential } from "../modules/vc/jwt-vc/W3cV2JwtVerif
 import { W3cV2SdJwtVerifiableCredential } from "../modules/vc/sd-jwt-vc/W3cV2SdJwtVerifiableCredential.mjs";
 import { W3cJwtVerifiableCredential } from "../modules/vc/jwt-vc/W3cJwtVerifiableCredential.mjs";
 import { W3cJsonLdVerifiableCredential } from "../modules/vc/linked-data-proofs/models/W3cJsonLdVerifiableCredential.mjs";
+import { W3cV2DataIntegrityVerifiableCredential } from "../modules/vc/data-integrity/W3cV2DataIntegrityVerifiableCredential.mjs";
 import "../modules/vc/index.mjs";
 import { Mdoc } from "../modules/mdoc/Mdoc.mjs";
 import { AgentContext } from "./context/AgentContext.mjs";
@@ -49,8 +50,17 @@ export interface TrustedIssuersForVerificationResult<T extends TrustedIssuer = T
 }
 export type VerificationTypeCredential = {
   type: 'credential';
-  credential: SdJwtVc | Mdoc | W3cJsonLdVerifiableCredential | W3cJwtVerifiableCredential | W3cV2JwtVerifiableCredential | W3cV2SdJwtVerifiableCredential;
+  credential: SdJwtVc | Mdoc | W3cJsonLdVerifiableCredential | W3cJwtVerifiableCredential | W3cV2JwtVerifiableCredential | W3cV2SdJwtVerifiableCredential | W3cV2DataIntegrityVerifiableCredential;
 };
+/**
+ * Resolves the trusted issuers of a single credential when it is verified, for example to apply a
+ * different trust policy to each credential in a presentation. Return `undefined` to fall through
+ * to the `getTrustedIssuersForVerification` callback.
+ */
+export type GetTrustedIssuersForCredential = (context: {
+  signer: VerificationSignerDid;
+  verification: VerificationTypeCredential;
+}) => Promise<TrustedIssuerDid[] | undefined>;
 /**
  * Reader authentication on an incoming mdoc request.
  *

package/build/agent/TrustedIssuersForVerification.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"TrustedIssuersForVerification.d.mts","names":[],"sources":["../../src/agent/TrustedIssuersForVerification.ts"],"mappings":";;;;;;;;;;;;iBAWiB;EACf;;;;EAKA;;iBAGe;EACf;;;;EAKA,kBAAkB;;YAGR,qBAAqB,wBAAwB;iBAExC;EACf;;EAGA;;iBAGe;EACf;;EAGA;;EAGA;;YAGU,gBAAgB,mBAAmB;iBAE9B,oCAAoC,UAAU,gBAAgB;;;;;;;EAO7E,gBAAgB;;YAGN;EACV;EACA,YACI,UACA,OACA,gCACA,6BACA,+BACA;;;;;;;;;;;;YAaM;EACV;;;;;;;;;EAUA;IACE;;;;IAKA;;;;;EAMF;;;;EAKA,YAAY,eAAe;;iBAGZ,qCACf,eAAe,qBAAqB,oBACpC;EAAsC;;;;;EAKtC,QAAQ;;;;EAKR,cAAc,6BAA6B,iCAAiC;;;;;;;;;YAUlE,iCACV,eAAe,qBAAqB,oBACpC;EAAsC;cAEtC,cAAc,cACd,SAAS,qCAAqC,QAAQ,iCACnD,QAAQ"}
+{"version":3,"file":"TrustedIssuersForVerification.d.mts","names":[],"sources":["../../src/agent/TrustedIssuersForVerification.ts"],"mappings":";;;;;;;;;;;;;iBAYiB;EACf;;;;EAKA;;iBAGe;EACf;;;;EAKA,kBAAkB;;YAGR,qBAAqB,wBAAwB;iBAExC;EACf;;EAGA;;iBAGe;EACf;;EAGA;;EAGA;;YAGU,gBAAgB,mBAAmB;iBAE9B,oCAAoC,UAAU,gBAAgB;;;;;;;EAO7E,gBAAgB;;YAGN;EACV;EACA,YACI,UACA,OACA,gCACA,6BACA,+BACA,iCACA;;;;;;;YAQM,kCAAkC;EAC5C,QAAQ;EACR,cAAc;MACV,QAAQ;;;;;;;;;;;YAYF;EACV;;;;;;;;;EAUA;IACE;;;;IAKA;;;;;EAMF;;;;EAKA,YAAY,eAAe;;iBAGZ,qCACf,eAAe,qBAAqB,oBACpC;EAAsC;;;;;EAKtC,QAAQ;;;;EAKR,cAAc,6BAA6B,iCAAiC;;;;;;;;;YAUlE,iCACV,eAAe,qBAAqB,oBACpC;EAAsC;cAEtC,cAAc,cACd,SAAS,qCAAqC,QAAQ,iCACnD,QAAQ"}

package/build/crypto/webcrypto/CredoWalletWebCrypto.d.mts

@@ -29,7 +29,7 @@ export declare class CredoWalletWebCrypto {
     modulusLength?: undefined;
   } | {
     kty: "RSA";
-    modulusLength: 4096 | 3072 | 2048;
+    modulusLength: 2048 | 3072 | 4096;
     crv?: undefined;
   }>>;
   importKey(format: KeyFormat, keyData: Uint8Array | JsonWebKey, algorithm: KeyImportParams, extractable: boolean, keyUsages: Array<KeyUsage>): Promise<CredoWebCryptoKey>;

package/build/index.d.mts

@@ -40,7 +40,7 @@ import { convertLegacyTrustedCertificates, legacyTrustedCertificatesToTrustedIss
 import { ALL_REVOCATION_REASONS_MASK, X509CrlDistributionPoint, X509RevocationReason } from "./modules/x509/X509CrlDistributionPoint.mjs";
 import { X509Certificate, X509CertificateOptions, X509ExtendedKeyUsage, X509KeyUsage } from "./modules/x509/X509Certificate.mjs";
 import { X509CertificateRevocationList, X509CertificateRevocationListEntry, X509CertificateRevocationListEntryReason, X509IssuingDistributionPoint } from "./modules/x509/X509CertificateRevocationList.mjs";
-import { X509RevocationCheckMode, X509RevocationCheckOptions } from "./modules/x509/X509ValidationOptions.mjs";
+import { X509RevocationCheckMode, X509RevocationCheckOptions, X509RevocationCheckOptionsWithDefaults, defaultX509RevocationCheckOptions, withX509RevocationCheckDefaults } from "./modules/x509/X509ValidationOptions.mjs";
 import { EncodedX509Certificate, X509CertificateExtensionsOptions, X509CertificateIssuerAndSubjectOptions, X509CertificateRevocationListEntryOptions, X509CertificateRevocationListExtensionsOptions, X509CertificateSigningRequestExtensionsOptions, X509CheckCertificateRevocationOptions, X509CreateCertificateChainOptions, X509CreateCertificateOptions, X509CreateCertificateRevocationListOptions, X509CreateCertificateSigningRequestOptions, X509FetchCertificateRevocationListOptions, X509GetLeafCertificateOptions, X509ParseCertificateOptions, X509ParseCertificateRevocationListOptions, X509ParseCertificateSigningRequestOptions, X509ValidateCertificateChainOptions } from "./modules/x509/X509ServiceOptions.mjs";
 import { X509CrlExtensionIdentifier, X509ExtensionIdentifier, createAuthorityKeyIdentifierExtension, createBasicConstraintsExtension, createCrlDistributionPointsExtension, createCrlEntryCertificateIssuerExtension, createCrlNumberExtension, createDeltaCrlIndicatorExtension, createExtendedKeyUsagesExtension, createIssuerAlternativeNameExtension, createIssuingDistributionPointExtension, createKeyUsagesExtension, createSubjectAlternativeNameExtension, createSubjectKeyIdentifierExtension } from "./modules/x509/utils/extensions.mjs";
 import { convertName } from "./modules/x509/utils/nameConversion.mjs";
@@ -180,7 +180,7 @@ import { W3cV2CredentialsApi } from "./modules/vc/W3cV2CredentialsApi.mjs";
 import { W3cV2CredentialsModule } from "./modules/vc/W3cV2CredentialsModule.mjs";
 import "./modules/vc/index.mjs";
 import { Mdoc } from "./modules/mdoc/Mdoc.mjs";
-import { GetTrustedIssuersForVerification, TrustedIssuer, TrustedIssuerDid, TrustedIssuerX509, TrustedIssuersForVerificationContext, TrustedIssuersForVerificationResult, VerificationSigner, VerificationSignerDid, VerificationSignerX509, VerificationTypeCredential, VerificationTypeMdocReaderAuth } from "./agent/TrustedIssuersForVerification.mjs";
+import { GetTrustedIssuersForCredential, GetTrustedIssuersForVerification, TrustedIssuer, TrustedIssuerDid, TrustedIssuerX509, TrustedIssuersForVerificationContext, TrustedIssuersForVerificationResult, VerificationSigner, VerificationSignerDid, VerificationSignerX509, VerificationTypeCredential, VerificationTypeMdocReaderAuth } from "./agent/TrustedIssuersForVerification.mjs";
 import { X509ModuleConfig, X509ModuleConfigOptions, X509VerificationContext, X509VerificationTrustedCertificates, X509VerificationTypeCredential, X509VerificationTypeMdocReaderAuth, X509VerificationTypeOauth2ClientAttestation, X509VerificationTypeOauth2SecuredAuthorizationRequest, X509VerificationTypeOpenId4VciCredentialIssuerMetadata, X509VerificationTypeOpenId4VciKeyAttestation } from "./modules/x509/X509ModuleConfig.mjs";
 import { JwsSigner, JwsSignerDid, JwsSignerJwk, JwsSignerWithJwk, JwsSignerX5c } from "./crypto/JwsSigner.mjs";
 import { JwsDetachedFormat, JwsFlattenedDetachedFormat, JwsGeneralFormat, JwsProtectedHeaderOptions } from "./crypto/JwsTypes.mjs";
@@ -312,5 +312,5 @@ declare const utils: {
   addSecondsToDate: typeof addSecondsToDate;
 };
 //#endregion
-export { ALL_REVOCATION_REASONS_MASK, ANONCREDS_DATA_INTEGRITY_CRYPTOSUITE, ANONCREDS_W3C_CREDENTIAL_CRYPTOSUITE, Agent, type AgentApi, AgentConfig, AgentContext, AgentContextProvider, type AgentDependencies, AnonCredsDataIntegrityServiceSymbol, type AnonCredsW3cCredentialCreatePresentation, AnonCredsW3cCredentialProof, type AnonCredsW3cCredentialProofOptions, AnonCredsW3cCredentialServiceSymbol, type AnonCredsW3cCredentialVerifyPresentation, AnoncredsDataIntegrityCreatePresentation, AnoncredsDataIntegrityVerifyPresentation, ApiModule, BaseAgent, BaseEvent, BaseLogger, type BaseName, BaseRecord, BaseRecordAny, type BaseRecordConstructor, CREDENTIALS_CONTEXT_V1_URL, CREDENTIALS_CONTEXT_V2_URL, CREDENTIALS_ISSUER_URL, type Cache, CacheModule, CacheModuleConfig, type CacheModuleOptions, type CacheOptions, CachedStorageService, type CanBePromise, CertificateSigningRequest, CertificateSigningRequestOptions, ClaimFormat, type ClaimPath, ClassValidationError, ConsoleLogger, type Constructable, type Constructor, ContentType, CreateTokenStatusListOptions, CredentialIssuancePurpose, CredentialMultiInstanceState, CredentialMultiInstanceUseMode, type CredentialMultiInstanceUseUpdateMode, CredoError, CredoWebCrypto, CredoWebCryptoKey, CustomDidTags, CustomW3cCredentialTags, DID_V1_CONTEXT_URL, DataIntegrityProof, DataIntegrityProofOptions, DateOnly, DateTransformer, DcqlClaimSetDisclosedPaths, DcqlCredential, DcqlCredentialsForRequest, DcqlEncodedPresentations, DcqlEncodedPresentationsEntry, DcqlError, DcqlFailedCredential, DcqlJwtVpPresentationToCreate, DcqlJwtW3cVpPresentationToCreate, DcqlLdpVpPresentationToCreate, DcqlMatchWithRecord, DcqlMdocCredential, DcqlMdocPresentationToCreate, DcqlModule, DcqlPresentation, DcqlPresentationResult, DcqlPresentationsToCreate, DcqlQuery, DcqlQueryResult, DcqlSdJwtVcCredential, DcqlSdJwtVcPresentationToCreate, DcqlSdJwtW3cVpPresentationToCreate, DcqlSelectCredentialsForRequestOptions, DcqlSelectiveDisclosure, DcqlService, DcqlValidCredential, DcqlW3cVcCredential, DefaultAgentContextProvider, type DefaultAgentModules, DefaultMdocRecordTags, DefaultMdocVerificationSessionRecordTags, DefaultSdJwtVcRecordTags, DefaultW3cCredentialTags, DefaultW3cV2CredentialTags, DependencyManager, DeviceAndIssuerClaims, DidCommV1Service, LegacyDidCommV2Service as DidCommV2Service, type LegacyDidCommV2ServiceOptions as DidCommV2ServiceOptions, DidCreateOptions, DidCreateResult, DidDeactivateOptions, DidDeactivateResult, DidDocument, DidDocumentBuilder, DidDocumentKey, DidDocumentMetadata, DidDocumentOperation, DidDocumentRole, DidDocumentService, DidJwk, DidKey, DidOperationStateActionBase, DidOperationStateFailed, DidOperationStateFinished, DidOperationStateWait, DidPurpose, DidRecord, DidRecordMetadataKeys, DidRecordProps, DidRegistrar, DidRegistrarService, DidRegistrationExtraOptions, DidRegistrationMetadata, DidRegistrationSecretOptions, DidRepository, DidResolutionMetadata, DidResolutionOptions, DidResolutionResult, DidResolver, DidResolverService, DidUpdateOptions, DidUpdateResult, DidsApi, DidsModule, DidsModuleConfig, DidsModuleConfigOptions, DifPexCredentialsForRequest, DifPexCredentialsForRequestRequirement, DifPexCredentialsForRequestSubmissionEntry, DifPexInputDescriptorToCredentials, type DifPexPresentationWithDescriptor, DifPresentationExchangeDefinition, DifPresentationExchangeDefinitionV1, DifPresentationExchangeDefinitionV2, DifPresentationExchangeError, DifPresentationExchangeModule, DifPresentationExchangeService, DifPresentationExchangeSubmission, PresentationSubmissionLocation as DifPresentationExchangeSubmissionLocation, type DocumentLoader, type DownloadToFileOptions, ENVELOPED_VERIFIABLE_CREDENTIAL_TYPE, ENVELOPED_VERIFIABLE_PRESENTATION_TYPE, EXPANDED_TYPE_CREDENTIALS_CONTEXT_V1_VC_TYPE, Ed25519Signature2018, Ed25519Signature2020, type EmptyModuleMap, EncodedX509Certificate, EventEmitter, EventMetadata, FetchTokenStatusListOptions, type FileSystem, GenericRecord, GenericRecordStorageProps, GenericRecordTags, GenericRecordsApi, GenericRecordsModule, GetTrustedIssuersForVerification, HashName, Hasher, IAnonCredsDataIntegrityService, type IAnonCredsW3cCredentialService, IDisclosureFrame, IPresentationFrame, ImportDidOptions, InMemoryLruCache, type InMemoryLruCacheOptions, IndyAgentService, type InitConfig, InjectionSymbols, type InjectionToken, IntegrityVerifier, IsEnvelopedVerifiableCredentialType, IsEnvelopedVerifiablePresentationType, IsStringOrInstance, IsStringOrInstanceOrArrayOfInstances, IsStringOrStringArray, IsStringOrVerificationMethod, IsUri, IsW3cCredentialSubject, IsW3cIssuer, IsW3cV2Issuer, type JsonArray, JsonEncoder, JsonLdModule, JsonLdModuleConfig, JsonLdModuleConfigOptions, type JsonObject, JsonTransformer, type JsonValue, JwkDidCreateOptions, JwkDidDeactivateOptions, JwkDidRegistrar, JwkDidResolver, JwkDidUpdateOptions, type JwsDetachedFormat, type JwsFlattenedDetachedFormat, type JwsGeneralFormat, JwsLinkedDataSignature, JwsLinkedDataSignatureOptions, type JwsProtectedHeaderOptions, JwsService, type JwsSigner, type JwsSignerDid, type JwsSignerJwk, type JwsSignerWithJwk, type JwsSignerX5c, Jwt, JwtPayload, type JwtPayloadJson, type JwtPayloadOptions, KeyDidCreateOptions, KeyDidDeactivateOptions, KeyDidRegistrar, KeyDidResolver, KeyDidUpdateOptions, type KeyGenAlgorithm, type KeySignParams, index_d_exports as Kms, LdKeyPair, LdKeyPairOptions, LinkedDataProof, LinkedDataProofOptions, LogLevel, Logger, Mdoc, MdocApi, MdocClaimMatch, MdocDcApiCreateResponseOptions, MdocDcApiCreateVerificationSessionOptions, MdocDcApiCredentialMatch, MdocDcApiDocRequest, MdocDcApiFailedCredential, MdocDcApiRequest, MdocDcApiResolveRequestOptions, MdocDcApiResolvedDocRequest, MdocDcApiResolvedDocRequestFailure, MdocDcApiResolvedDocRequestSuccess, MdocDcApiResolvedRequest, MdocDcApiResponse, MdocDcApiService, MdocDcApiValidCredential, MdocDcApiVerifyResponseOptions, MdocDeleteVerificationSessionOptions, MdocDeviceRequestDefinition, MdocDeviceRequestMatch, MdocDeviceRequestNotSatisfiedError, MdocDeviceResponse, MdocDeviceResponseDcqlQueryOptions, MdocDeviceResponseOptions, MdocDeviceResponsePresentationDefinitionOptions, MdocDeviceResponseVerifyOptions, MdocDocRequestDefinition, MdocDocumentRequest, MdocElementSource, MdocError, MdocEventTypes, MdocIsoDcApiVerificationSessionTranscript, MdocModule, MdocNameSpaces, MdocOpenId4VpDcApiDraft24SessionTranscriptOptions, MdocOpenId4VpDcApiSessionTranscriptOptions, MdocOpenId4VpDraft18SessionTranscriptOptions, MdocOpenId4VpSessionTranscriptOptions, MdocRecord, MdocRecordInstances, MdocRecordStorageProps, MdocRepository, MdocRequestedElement, MdocService, MdocSessionTranscriptByteOptions, MdocSessionTranscriptOptions, MdocSignOptions, MdocStoreOptions, type MdocSupportedSignatureAlgorithm, MdocVerificationSessionExpiredError, MdocVerificationSessionRecord, MdocVerificationSessionRecordProps, MdocVerificationSessionRepository, MdocVerificationSessionState, MdocVerificationSessionStateChangedEvent, MdocVerificationSessionTranscript, MdocVerifyOptions, MessageValidator, Metadata, type MetadataBase, Module, type ModulesMap, MultiBaseEncoder, MultiHashEncoder, NON_DISCLOSEABLE_FIELDS, DidCommV2Service as NewDidCommV2Service, DidCommV2ServiceEndpoint as NewDidCommV2ServiceEndpoint, type DidCommV2ServiceEndpointOptions as NewDidCommV2ServiceEndpointOptions, type NonEmptyArray, type Optional, ParsedDid, PeerDidCreateOptions, PeerDidDeactivateOptions, PeerDidNumAlgo, PeerDidNumAlgo0CreateOptions, PeerDidNumAlgo1CreateOptions, PeerDidNumAlgo2CreateOptions, PeerDidNumAlgo4CreateOptions, PeerDidRegistrar, PeerDidResolver, PeerDidUpdateOptions, type Proof, ProofPurpose, Purposes, type Query, type QueryOptions, RecordDeletedEvent, RecordDuplicateError, RecordNotFoundError, RecordSavedEvent, RecordTags, RecordUpdatedEvent, Repository, RepositoryEventTypes, type ResolvedDidCommService, SECURITY_CONTEXT_SECP256k1_URL, SECURITY_CONTEXT_URL, SECURITY_CONTEXT_V1_URL, SECURITY_CONTEXT_V2_URL, SECURITY_CONTEXT_V3_URL, SECURITY_ED25519_2018_CONTEXT_URL, SECURITY_ED25519_2020_CONTEXT_URL, SECURITY_JWS_CONTEXT_URL, SECURITY_PROOF_URL, SECURITY_SIGNATURE_URL, SECURITY_X25519_CONTEXT_URL, SaveGenericRecordOption, SdJwtVc, SdJwtVcApi, SdJwtVcError, SdJwtVcHeader, SdJwtVcHolderBinding, SdJwtVcHolderDidBinding, SdJwtVcHolderJwkBinding, SdJwtVcIssuer, SdJwtVcIssuerDid, SdJwtVcIssuerX5c, SdJwtVcModule, type SdJwtVcPayload, SdJwtVcPresentOptions, SdJwtVcRecord, SdJwtVcRecordInstances, SdJwtVcRecordStorageProps, SdJwtVcRepository, SdJwtVcService, SdJwtVcSignOptions, SdJwtVcStoreOptions, SdJwtVcTypeMetadata, SdJwtVcTypeMetadataClaim, SdJwtVcTypeMetadataDisplay, SdJwtVcTypeMetadataRenderingMethodSimple, SdJwtVcTypeMetadataRenderingMethodSvgTemplate, SdJwtVcVerifyOptions, ServiceTransformer, Sha1, Sha256, Sha384, Sha512, SignatureSuiteRegistry, SignatureSuiteToken, type SimpleQuery, type SingleContextLruCacheItem, SingleContextLruCacheRecord, SingleContextStorageLruCache, type SingleContextStorageLruCacheOptions, type SingleOrArray, SingleValidationResult, StatusListCwt, type StatusListCwtOptions, StatusListInput, type StorageService, StorageUpdateService, StorageVersionRecord, StorageVersionRecordProps, StorageVersionRepository, SubmissionEntryCredential, SuiteInfo, Suites, TagValue, Tags, TagsBase, TokenStatusListApi, TokenStatusListFormat, TokenStatusListModule, TokenStatusListResult, TokenStatusListResultFor, TokenStatusListService, TrustedIssuer, TrustedIssuerContext, TrustedIssuerDid, TrustedIssuerX509, TrustedIssuersForVerificationContext, TrustedIssuersForVerificationResult, TypedArrayEncoder, type UnionToIntersection, type Update, UpdateAssistant, UpdateAssistantUpdateOptions, type UpdateConfig, UpdateTokenStatusListOptions, type UseInstanceFromCredentialRecordOptions, type UseInstanceFromCredentialRecordReturn, type V0_1ToV0_2UpdateConfig, VERIFIABLE_CREDENTIAL_TYPE, VERIFIABLE_PRESENTATION_TYPE, VERIFICATION_METHOD_TYPE_ECDSA_SECP256K1_VERIFICATION_KEY_2019, VERIFICATION_METHOD_TYPE_ED25519_VERIFICATION_KEY_2018, VERIFICATION_METHOD_TYPE_ED25519_VERIFICATION_KEY_2020, VERIFICATION_METHOD_TYPE_JSON_WEB_KEY_2020, VERIFICATION_METHOD_TYPE_MULTIKEY, VERIFICATION_METHOD_TYPE_X25519_KEY_AGREEMENT_KEY_2019, VerifiableCredential, VerifiablePresentation, VerificationMethod, VerificationMethodTransformer, VerificationResult, VerificationSigner, VerificationSignerDid, VerificationSignerX509, VerificationTypeCredential, VerificationTypeMdocReaderAuth, type VersionString, W3cCreatePresentationOptions, W3cCredential, W3cCredentialOptions, W3cCredentialRecord, W3cCredentialRecordInstances, W3cCredentialRecordOptions, W3cCredentialRepository, W3cCredentialSchema, W3cCredentialSchemaOptions, W3cCredentialService, W3cCredentialStatus, W3cCredentialStatusOptions, W3cCredentialSubject, W3cCredentialSubjectOptions, W3cCredentialSubjectTransformer, W3cCredentialsApi, W3cCredentialsModule, W3cCredentialsModuleConfig, W3cCredentialsModuleConfigOptions, W3cDataIntegrityApi, type W3cDataIntegrityCreateFailure, type W3cDataIntegrityCreateProofOptions, type W3cDataIntegrityCreateResult, type W3cDataIntegrityCreateSuccess, type W3cDataIntegrityCryptosuite, type W3cDataIntegrityCryptosuiteInfo, type W3cDataIntegrityCryptosuiteProof, type W3cDataIntegrityCryptosuiteProofOptions, type W3cDataIntegrityIssueList, W3cDataIntegrityModule, W3cDataIntegrityProcessingErrorCode, type W3cDataIntegrityProcessingIssue, type W3cDataIntegrityProofSet, type W3cDataIntegrityProofSetSecuredDocument, type W3cDataIntegritySecuredDocument, type W3cDataIntegritySingleProofSecuredDocument, type W3cDataIntegrityUnsecuredDocument, type W3cDataIntegrityVerifyFailure, type W3cDataIntegrityVerifyProofDocumentOptions, type W3cDataIntegrityVerifyProofOptions, type W3cDataIntegrityVerifyResult, type W3cDataIntegrityVerifySuccess, W3cIssuer, W3cIssuerOptions, W3cIssuerTransformer, W3cJsonCredential, W3cJsonLdCredentialService, W3cJsonLdCredentialSigningNotSupportedError, W3cJsonLdCredentialSigningNotSupportedReason, W3cJsonLdDeriveProofOptions, W3cJsonLdSignCredentialOptions, W3cJsonLdSignPresentationOptions, W3cJsonLdVerifiableCredential, W3cJsonLdVerifiableCredentialOptions, W3cJsonLdVerifiablePresentation, W3cJsonLdVerifiablePresentationOptions, W3cJsonLdVerifyCredentialOptions, W3cJsonLdVerifyPresentationOptions, W3cJsonPresentation, W3cJwtCredentialService, W3cJwtSignCredentialOptions, W3cJwtSignPresentationOptions, W3cJwtVerifiableCredential, W3cJwtVerifiableCredentialOptions, W3cJwtVerifiablePresentation, W3cJwtVerifiablePresentationOptions, W3cJwtVerifyCredentialOptions, W3cJwtVerifyPresentationOptions, W3cPresentation, W3cPresentationOptions, W3cSignCredentialOptions, W3cSignPresentationOptions, W3cStoreCredentialOptions, W3cV2Credential, W3cV2CredentialOptions, W3cV2CredentialRecord, W3cV2CredentialRecordInstances, W3cV2CredentialRecordOptions, W3cV2CredentialRepository, W3cV2CredentialSchema, W3cV2CredentialSchemaOptions, W3cV2CredentialService, W3cV2CredentialStatus, W3cV2CredentialStatusOptions, W3cV2CredentialSubject, W3cV2CredentialSubjectOptions, W3cV2CredentialsApi, W3cV2CredentialsModule, W3cV2CredentialsModuleConfig, W3cV2CredentialsModuleConfigOptions, W3cV2DataIntegrityContextValidationResult, W3cV2DataIntegrityContextValidator, W3cV2DataIntegrityCredentialService, W3cV2DataIntegrityIssue, W3cV2DataIntegrityPresentationCredentialEntry, W3cV2DataIntegrityResolvedPresentation, W3cV2DataIntegritySecuredCredential, W3cV2DataIntegritySecuredPresentation, W3cV2DataIntegrityVerifiableCredential, W3cV2DataIntegrityVerifiableCredentialOptions, W3cV2DataIntegrityVerifiablePresentation, W3cV2DataIntegrityVerifiablePresentationOptions, W3cV2DiSignCredentialOptions, W3cV2DiSignPresentationOptions, W3cV2DiVerifyCredentialOptions, W3cV2DiVerifyPresentationOptions, W3cV2EnvelopedVerifiableCredential, W3cV2EnvelopedVerifiableCredentialOptions, W3cV2EnvelopedVerifiableCredentialTransformer, W3cV2EnvelopedVerifiablePresentation, W3cV2EnvelopedVerifiablePresentationOptions, W3cV2Evidence, W3cV2EvidenceOptions, W3cV2Issuer, W3cV2IssuerOptions, W3cV2IssuerTransformer, W3cV2JsonCredential, W3cV2JsonDataIntegrityPresentationEntry, W3cV2JsonEnvelopedVerifiableCredentialEntry, W3cV2JsonEnvelopedVerifiablePresentationEntry, W3cV2JsonLocalizedValue, W3cV2JsonPresentation, W3cV2JsonPresentationCredentialEntry, W3cV2JwtCredentialService, W3cV2JwtSignCredentialOptions, W3cV2JwtSignPresentationOptions, W3cV2JwtVerifiableCredential, W3cV2JwtVerifiableCredentialOptions, W3cV2JwtVerifiablePresentation, W3cV2JwtVerifiablePresentationOptions, W3cV2JwtVerifyCredentialOptions, W3cV2JwtVerifyPresentationOptions, W3cV2LocalizedValue, W3cV2LocalizedValueOptions, W3cV2LocalizedValueTransformer, W3cV2Presentation, W3cV2PresentationCredentialEntry, W3cV2PresentationCredentialEntryOptions, W3cV2PresentationCredentialEntryResult, W3cV2PresentationCredentialEntryTransformer, W3cV2PresentationOptions, W3cV2RefreshService, W3cV2RefreshServiceOptions, W3cV2SdJwt, W3cV2SdJwtCredentialService, W3cV2SdJwtHeader, W3cV2SdJwtPayload, W3cV2SdJwtSignCredentialOptions, W3cV2SdJwtSignPresentationOptions, W3cV2SdJwtVcPresentOptions, W3cV2SdJwtVerifiableCredential, W3cV2SdJwtVerifiableCredentialOptions, W3cV2SdJwtVerifiablePresentation, W3cV2SdJwtVerifiablePresentationOptions, W3cV2SdJwtVerifyCredentialOptions, W3cV2SdJwtVerifyPresentationOptions, W3cV2SignCredentialOptions, W3cV2SignPresentationOptions, W3cV2StoreCredentialOptions, W3cV2TermsOfUse, W3cV2TermsOfUseOptions, W3cV2VerifiableCredential, W3cV2VerifiableCredentialOptions, W3cV2VerifiableCredentialTransformer, W3cV2VerifiablePresentation, W3cV2VerifiablePresentationOptions, W3cV2VerifiablePresentationTransformer, W3cV2VerifyCredentialOptions, W3cV2VerifyCredentialResult, W3cV2VerifyPresentationOptions, W3cV2VerifyPresentationResult, W3cVerifiableCredential, W3cVerifiableCredentialTransformer, W3cVerifiablePresentation, W3cVerifyCredentialOptions, W3cVerifyCredentialResult, W3cVerifyPresentationOptions, W3cVerifyPresentationResult, WebDidResolver, X509Api, X509Certificate, X509CertificateExtensionsOptions, X509CertificateIssuerAndSubjectOptions, X509CertificateOptions, X509CertificateRevocationList, X509CertificateRevocationListEntry, X509CertificateRevocationListEntryOptions, X509CertificateRevocationListEntryReason, X509CertificateRevocationListExtensionsOptions, X509CertificateSigningRequestExtensionsOptions, X509CertificateSingleValidationResult, X509CertificateValidations, X509CheckCertificateRevocationOptions, X509CreateCertificateChainOptions, X509CreateCertificateOptions, X509CreateCertificateRevocationListOptions, X509CreateCertificateSigningRequestOptions, X509CrlDistributionPoint, X509CrlExtensionIdentifier, X509CrlUnavailableError, X509Error, X509ExtendedKeyUsage, X509ExtensionIdentifier, X509FetchCertificateRevocationListOptions, X509GetLeafCertificateOptions, X509IssuingDistributionPoint, X509KeyUsage, X509Module, X509ModuleConfig, X509ModuleConfigOptions, X509ParseCertificateOptions, X509ParseCertificateRevocationListOptions, X509ParseCertificateSigningRequestOptions, X509RevocationCheckMode, X509RevocationCheckOptions, X509RevocationCheckResult, X509RevocationReason, X509RevocationService, X509Service, X509ValidateCertificateChainOptions, X509ValidationError, X509ValidationResult, X509VerificationContext, X509VerificationTrustedCertificates, X509VerificationTypeCredential, X509VerificationTypeMdocReaderAuth, X509VerificationTypeOauth2ClientAttestation, X509VerificationTypeOauth2SecuredAuthorizationRequest, X509VerificationTypeOpenId4VciCredentialIssuerMetadata, X509VerificationTypeOpenId4VciKeyAttestation, type XOR, ZodValidationError, asArray, canUseInstanceFromCredentialRecord, constants, convertLegacyTrustedCertificates, convertName, convertPublicKeyToX25519, createAuthorityKeyIdentifierExtension, createBasicConstraintsExtension, createCrlDistributionPointsExtension, createCrlEntryCertificateIssuerExtension, createCrlNumberExtension, createDeltaCrlIndicatorExtension, createExtendedKeyUsagesExtension, createIssuerAlternativeNameExtension, createIssuingDistributionPointExtension, createKeyUsagesExtension, createPeerDidDocumentFromServices, createSubjectAlternativeNameExtension, createSubjectKeyIdentifierExtension, dcqlGetPresentationsToCreate, decodeCursor, decodeSdJwt, decodeW3cV2VerifiableCredential, decodeW3cV2VerifiablePresentation, deepEquality, defaultDocumentLoader, deriveProof, didDocumentJsonToNumAlgo1Did, didDocumentToNumAlgo2Did, didDocumentToNumAlgo4Did, didKeyToEd25519PublicJwk, didKeyToVerkey, encodeCursor, equalsIgnoreOrder, equalsWithOrder, extractPresentationsWithDescriptorsFromSubmission, extractX509CertificatesFromJwt, filterContextCorrelationId, findMatchingEd25519Key, getAlternativeDidsForPeerDid, getApiForModuleByName, getDirFromFilePath, getDomainFromUrl, getEcdsaSecp256k1VerificationKey2019, getEd25519VerificationKey2018, getEd25519VerificationKey2020, getJsonWebKey2020, getKmsKeyIdForVerifiacationMethod, getMultikey, getNumAlgoFromPeerDid, getPublicJwkFromEcdsaSecp256k1VerificationKey2019, getPublicJwkFromEd25519VerificationKey2018, getPublicJwkFromEd25519VerificationKey2020, getPublicJwkFromJsonWebKey2020, getPublicJwkFromMultikey, getPublicJwkFromVerificationMethod, getPublicJwkFrommX25519KeyAgreementKey2019, getRegisteredModuleByInstance, getRegisteredModuleByName, getX25519KeyAgreementKey2019, inject, injectAll, injectable, isDid, isDidKey, isEcdsaSecp256k1VerificationKey2019, isEd25519VerificationKey2018, isEd25519VerificationKey2020, isEmbeddedDataIntegrityPresentationEntry, isEnvelopedVerifiableCredentialEntry, isEnvelopedVerifiablePresentationEntry, isJsonObject, isJsonWebKey2020, isMdocSupportedSignatureAlgorithm, isMultikey, isNonEmptyArray, isStorageUpToDate, isValidPeerDid, isX25519KeyAgreementKey2019, joinUriParts, jwaAlgorithmToKeySignParams, keyDidEd25519, keyDidX25519, keyParamsToJwaAlgorithm, legacyTrustedCertificatesToTrustedIssuers, mapDataIntegrityIssuesToCredoError, mapNonEmptyArray, parseDid, presentationFromDataUri, presentationToDataUri, publicJwkToCryptoKeyAlgorithm, purposes, recordToCursor, replaceError, sdJwtVcHasher, serviceTypes, suites, tryParseDid, useInstanceFromCredentialRecord, utils, validateW3cV2SdJwtDisclosureFrame, vcLibraries, verkeyToDidKey, verkeyToPublicJwk, w3cDate, x509SignatureAlgorithmToJwa };
+export { ALL_REVOCATION_REASONS_MASK, ANONCREDS_DATA_INTEGRITY_CRYPTOSUITE, ANONCREDS_W3C_CREDENTIAL_CRYPTOSUITE, Agent, type AgentApi, AgentConfig, AgentContext, AgentContextProvider, type AgentDependencies, AnonCredsDataIntegrityServiceSymbol, type AnonCredsW3cCredentialCreatePresentation, AnonCredsW3cCredentialProof, type AnonCredsW3cCredentialProofOptions, AnonCredsW3cCredentialServiceSymbol, type AnonCredsW3cCredentialVerifyPresentation, AnoncredsDataIntegrityCreatePresentation, AnoncredsDataIntegrityVerifyPresentation, ApiModule, BaseAgent, BaseEvent, BaseLogger, type BaseName, BaseRecord, BaseRecordAny, type BaseRecordConstructor, CREDENTIALS_CONTEXT_V1_URL, CREDENTIALS_CONTEXT_V2_URL, CREDENTIALS_ISSUER_URL, type Cache, CacheModule, CacheModuleConfig, type CacheModuleOptions, type CacheOptions, CachedStorageService, type CanBePromise, CertificateSigningRequest, CertificateSigningRequestOptions, ClaimFormat, type ClaimPath, ClassValidationError, ConsoleLogger, type Constructable, type Constructor, ContentType, CreateTokenStatusListOptions, CredentialIssuancePurpose, CredentialMultiInstanceState, CredentialMultiInstanceUseMode, type CredentialMultiInstanceUseUpdateMode, CredoError, CredoWebCrypto, CredoWebCryptoKey, CustomDidTags, CustomW3cCredentialTags, DID_V1_CONTEXT_URL, DataIntegrityProof, DataIntegrityProofOptions, DateOnly, DateTransformer, DcqlClaimSetDisclosedPaths, DcqlCredential, DcqlCredentialsForRequest, DcqlEncodedPresentations, DcqlEncodedPresentationsEntry, DcqlError, DcqlFailedCredential, DcqlJwtVpPresentationToCreate, DcqlJwtW3cVpPresentationToCreate, DcqlLdpVpPresentationToCreate, DcqlMatchWithRecord, DcqlMdocCredential, DcqlMdocPresentationToCreate, DcqlModule, DcqlPresentation, DcqlPresentationResult, DcqlPresentationsToCreate, DcqlQuery, DcqlQueryResult, DcqlSdJwtVcCredential, DcqlSdJwtVcPresentationToCreate, DcqlSdJwtW3cVpPresentationToCreate, DcqlSelectCredentialsForRequestOptions, DcqlSelectiveDisclosure, DcqlService, DcqlValidCredential, DcqlW3cVcCredential, DefaultAgentContextProvider, type DefaultAgentModules, DefaultMdocRecordTags, DefaultMdocVerificationSessionRecordTags, DefaultSdJwtVcRecordTags, DefaultW3cCredentialTags, DefaultW3cV2CredentialTags, DependencyManager, DeviceAndIssuerClaims, DidCommV1Service, LegacyDidCommV2Service as DidCommV2Service, type LegacyDidCommV2ServiceOptions as DidCommV2ServiceOptions, DidCreateOptions, DidCreateResult, DidDeactivateOptions, DidDeactivateResult, DidDocument, DidDocumentBuilder, DidDocumentKey, DidDocumentMetadata, DidDocumentOperation, DidDocumentRole, DidDocumentService, DidJwk, DidKey, DidOperationStateActionBase, DidOperationStateFailed, DidOperationStateFinished, DidOperationStateWait, DidPurpose, DidRecord, DidRecordMetadataKeys, DidRecordProps, DidRegistrar, DidRegistrarService, DidRegistrationExtraOptions, DidRegistrationMetadata, DidRegistrationSecretOptions, DidRepository, DidResolutionMetadata, DidResolutionOptions, DidResolutionResult, DidResolver, DidResolverService, DidUpdateOptions, DidUpdateResult, DidsApi, DidsModule, DidsModuleConfig, DidsModuleConfigOptions, DifPexCredentialsForRequest, DifPexCredentialsForRequestRequirement, DifPexCredentialsForRequestSubmissionEntry, DifPexInputDescriptorToCredentials, type DifPexPresentationWithDescriptor, DifPresentationExchangeDefinition, DifPresentationExchangeDefinitionV1, DifPresentationExchangeDefinitionV2, DifPresentationExchangeError, DifPresentationExchangeModule, DifPresentationExchangeService, DifPresentationExchangeSubmission, PresentationSubmissionLocation as DifPresentationExchangeSubmissionLocation, type DocumentLoader, type DownloadToFileOptions, ENVELOPED_VERIFIABLE_CREDENTIAL_TYPE, ENVELOPED_VERIFIABLE_PRESENTATION_TYPE, EXPANDED_TYPE_CREDENTIALS_CONTEXT_V1_VC_TYPE, Ed25519Signature2018, Ed25519Signature2020, type EmptyModuleMap, EncodedX509Certificate, EventEmitter, EventMetadata, FetchTokenStatusListOptions, type FileSystem, GenericRecord, GenericRecordStorageProps, GenericRecordTags, GenericRecordsApi, GenericRecordsModule, GetTrustedIssuersForCredential, GetTrustedIssuersForVerification, HashName, Hasher, IAnonCredsDataIntegrityService, type IAnonCredsW3cCredentialService, IDisclosureFrame, IPresentationFrame, ImportDidOptions, InMemoryLruCache, type InMemoryLruCacheOptions, IndyAgentService, type InitConfig, InjectionSymbols, type InjectionToken, IntegrityVerifier, IsEnvelopedVerifiableCredentialType, IsEnvelopedVerifiablePresentationType, IsStringOrInstance, IsStringOrInstanceOrArrayOfInstances, IsStringOrStringArray, IsStringOrVerificationMethod, IsUri, IsW3cCredentialSubject, IsW3cIssuer, IsW3cV2Issuer, type JsonArray, JsonEncoder, JsonLdModule, JsonLdModuleConfig, JsonLdModuleConfigOptions, type JsonObject, JsonTransformer, type JsonValue, JwkDidCreateOptions, JwkDidDeactivateOptions, JwkDidRegistrar, JwkDidResolver, JwkDidUpdateOptions, type JwsDetachedFormat, type JwsFlattenedDetachedFormat, type JwsGeneralFormat, JwsLinkedDataSignature, JwsLinkedDataSignatureOptions, type JwsProtectedHeaderOptions, JwsService, type JwsSigner, type JwsSignerDid, type JwsSignerJwk, type JwsSignerWithJwk, type JwsSignerX5c, Jwt, JwtPayload, type JwtPayloadJson, type JwtPayloadOptions, KeyDidCreateOptions, KeyDidDeactivateOptions, KeyDidRegistrar, KeyDidResolver, KeyDidUpdateOptions, type KeyGenAlgorithm, type KeySignParams, index_d_exports as Kms, LdKeyPair, LdKeyPairOptions, LinkedDataProof, LinkedDataProofOptions, LogLevel, Logger, Mdoc, MdocApi, MdocClaimMatch, MdocDcApiCreateResponseOptions, MdocDcApiCreateVerificationSessionOptions, MdocDcApiCredentialMatch, MdocDcApiDocRequest, MdocDcApiFailedCredential, MdocDcApiRequest, MdocDcApiResolveRequestOptions, MdocDcApiResolvedDocRequest, MdocDcApiResolvedDocRequestFailure, MdocDcApiResolvedDocRequestSuccess, MdocDcApiResolvedRequest, MdocDcApiResponse, MdocDcApiService, MdocDcApiValidCredential, MdocDcApiVerifyResponseOptions, MdocDeleteVerificationSessionOptions, MdocDeviceRequestDefinition, MdocDeviceRequestMatch, MdocDeviceRequestNotSatisfiedError, MdocDeviceResponse, MdocDeviceResponseDcqlQueryOptions, MdocDeviceResponseOptions, MdocDeviceResponsePresentationDefinitionOptions, MdocDeviceResponseVerifyOptions, MdocDocRequestDefinition, MdocDocumentRequest, MdocElementSource, MdocError, MdocEventTypes, MdocIsoDcApiVerificationSessionTranscript, MdocModule, MdocNameSpaces, MdocOpenId4VpDcApiDraft24SessionTranscriptOptions, MdocOpenId4VpDcApiSessionTranscriptOptions, MdocOpenId4VpDraft18SessionTranscriptOptions, MdocOpenId4VpSessionTranscriptOptions, MdocRecord, MdocRecordInstances, MdocRecordStorageProps, MdocRepository, MdocRequestedElement, MdocService, MdocSessionTranscriptByteOptions, MdocSessionTranscriptOptions, MdocSignOptions, MdocStoreOptions, type MdocSupportedSignatureAlgorithm, MdocVerificationSessionExpiredError, MdocVerificationSessionRecord, MdocVerificationSessionRecordProps, MdocVerificationSessionRepository, MdocVerificationSessionState, MdocVerificationSessionStateChangedEvent, MdocVerificationSessionTranscript, MdocVerifyOptions, MessageValidator, Metadata, type MetadataBase, Module, type ModulesMap, MultiBaseEncoder, MultiHashEncoder, NON_DISCLOSEABLE_FIELDS, DidCommV2Service as NewDidCommV2Service, DidCommV2ServiceEndpoint as NewDidCommV2ServiceEndpoint, type DidCommV2ServiceEndpointOptions as NewDidCommV2ServiceEndpointOptions, type NonEmptyArray, type Optional, ParsedDid, PeerDidCreateOptions, PeerDidDeactivateOptions, PeerDidNumAlgo, PeerDidNumAlgo0CreateOptions, PeerDidNumAlgo1CreateOptions, PeerDidNumAlgo2CreateOptions, PeerDidNumAlgo4CreateOptions, PeerDidRegistrar, PeerDidResolver, PeerDidUpdateOptions, type Proof, ProofPurpose, Purposes, type Query, type QueryOptions, RecordDeletedEvent, RecordDuplicateError, RecordNotFoundError, RecordSavedEvent, RecordTags, RecordUpdatedEvent, Repository, RepositoryEventTypes, type ResolvedDidCommService, SECURITY_CONTEXT_SECP256k1_URL, SECURITY_CONTEXT_URL, SECURITY_CONTEXT_V1_URL, SECURITY_CONTEXT_V2_URL, SECURITY_CONTEXT_V3_URL, SECURITY_ED25519_2018_CONTEXT_URL, SECURITY_ED25519_2020_CONTEXT_URL, SECURITY_JWS_CONTEXT_URL, SECURITY_PROOF_URL, SECURITY_SIGNATURE_URL, SECURITY_X25519_CONTEXT_URL, SaveGenericRecordOption, SdJwtVc, SdJwtVcApi, SdJwtVcError, SdJwtVcHeader, SdJwtVcHolderBinding, SdJwtVcHolderDidBinding, SdJwtVcHolderJwkBinding, SdJwtVcIssuer, SdJwtVcIssuerDid, SdJwtVcIssuerX5c, SdJwtVcModule, type SdJwtVcPayload, SdJwtVcPresentOptions, SdJwtVcRecord, SdJwtVcRecordInstances, SdJwtVcRecordStorageProps, SdJwtVcRepository, SdJwtVcService, SdJwtVcSignOptions, SdJwtVcStoreOptions, SdJwtVcTypeMetadata, SdJwtVcTypeMetadataClaim, SdJwtVcTypeMetadataDisplay, SdJwtVcTypeMetadataRenderingMethodSimple, SdJwtVcTypeMetadataRenderingMethodSvgTemplate, SdJwtVcVerifyOptions, ServiceTransformer, Sha1, Sha256, Sha384, Sha512, SignatureSuiteRegistry, SignatureSuiteToken, type SimpleQuery, type SingleContextLruCacheItem, SingleContextLruCacheRecord, SingleContextStorageLruCache, type SingleContextStorageLruCacheOptions, type SingleOrArray, SingleValidationResult, StatusListCwt, type StatusListCwtOptions, StatusListInput, type StorageService, StorageUpdateService, StorageVersionRecord, StorageVersionRecordProps, StorageVersionRepository, SubmissionEntryCredential, SuiteInfo, Suites, TagValue, Tags, TagsBase, TokenStatusListApi, TokenStatusListFormat, TokenStatusListModule, TokenStatusListResult, TokenStatusListResultFor, TokenStatusListService, TrustedIssuer, TrustedIssuerContext, TrustedIssuerDid, TrustedIssuerX509, TrustedIssuersForVerificationContext, TrustedIssuersForVerificationResult, TypedArrayEncoder, type UnionToIntersection, type Update, UpdateAssistant, UpdateAssistantUpdateOptions, type UpdateConfig, UpdateTokenStatusListOptions, type UseInstanceFromCredentialRecordOptions, type UseInstanceFromCredentialRecordReturn, type V0_1ToV0_2UpdateConfig, VERIFIABLE_CREDENTIAL_TYPE, VERIFIABLE_PRESENTATION_TYPE, VERIFICATION_METHOD_TYPE_ECDSA_SECP256K1_VERIFICATION_KEY_2019, VERIFICATION_METHOD_TYPE_ED25519_VERIFICATION_KEY_2018, VERIFICATION_METHOD_TYPE_ED25519_VERIFICATION_KEY_2020, VERIFICATION_METHOD_TYPE_JSON_WEB_KEY_2020, VERIFICATION_METHOD_TYPE_MULTIKEY, VERIFICATION_METHOD_TYPE_X25519_KEY_AGREEMENT_KEY_2019, VerifiableCredential, VerifiablePresentation, VerificationMethod, VerificationMethodTransformer, VerificationResult, VerificationSigner, VerificationSignerDid, VerificationSignerX509, VerificationTypeCredential, VerificationTypeMdocReaderAuth, type VersionString, W3cCreatePresentationOptions, W3cCredential, W3cCredentialOptions, W3cCredentialRecord, W3cCredentialRecordInstances, W3cCredentialRecordOptions, W3cCredentialRepository, W3cCredentialSchema, W3cCredentialSchemaOptions, W3cCredentialService, W3cCredentialStatus, W3cCredentialStatusOptions, W3cCredentialSubject, W3cCredentialSubjectOptions, W3cCredentialSubjectTransformer, W3cCredentialsApi, W3cCredentialsModule, W3cCredentialsModuleConfig, W3cCredentialsModuleConfigOptions, W3cDataIntegrityApi, type W3cDataIntegrityCreateFailure, type W3cDataIntegrityCreateProofOptions, type W3cDataIntegrityCreateResult, type W3cDataIntegrityCreateSuccess, type W3cDataIntegrityCryptosuite, type W3cDataIntegrityCryptosuiteInfo, type W3cDataIntegrityCryptosuiteProof, type W3cDataIntegrityCryptosuiteProofOptions, type W3cDataIntegrityIssueList, W3cDataIntegrityModule, W3cDataIntegrityProcessingErrorCode, type W3cDataIntegrityProcessingIssue, type W3cDataIntegrityProofSet, type W3cDataIntegrityProofSetSecuredDocument, type W3cDataIntegritySecuredDocument, type W3cDataIntegritySingleProofSecuredDocument, type W3cDataIntegrityUnsecuredDocument, type W3cDataIntegrityVerifyFailure, type W3cDataIntegrityVerifyProofDocumentOptions, type W3cDataIntegrityVerifyProofOptions, type W3cDataIntegrityVerifyResult, type W3cDataIntegrityVerifySuccess, W3cIssuer, W3cIssuerOptions, W3cIssuerTransformer, W3cJsonCredential, W3cJsonLdCredentialService, W3cJsonLdCredentialSigningNotSupportedError, W3cJsonLdCredentialSigningNotSupportedReason, W3cJsonLdDeriveProofOptions, W3cJsonLdSignCredentialOptions, W3cJsonLdSignPresentationOptions, W3cJsonLdVerifiableCredential, W3cJsonLdVerifiableCredentialOptions, W3cJsonLdVerifiablePresentation, W3cJsonLdVerifiablePresentationOptions, W3cJsonLdVerifyCredentialOptions, W3cJsonLdVerifyPresentationOptions, W3cJsonPresentation, W3cJwtCredentialService, W3cJwtSignCredentialOptions, W3cJwtSignPresentationOptions, W3cJwtVerifiableCredential, W3cJwtVerifiableCredentialOptions, W3cJwtVerifiablePresentation, W3cJwtVerifiablePresentationOptions, W3cJwtVerifyCredentialOptions, W3cJwtVerifyPresentationOptions, W3cPresentation, W3cPresentationOptions, W3cSignCredentialOptions, W3cSignPresentationOptions, W3cStoreCredentialOptions, W3cV2Credential, W3cV2CredentialOptions, W3cV2CredentialRecord, W3cV2CredentialRecordInstances, W3cV2CredentialRecordOptions, W3cV2CredentialRepository, W3cV2CredentialSchema, W3cV2CredentialSchemaOptions, W3cV2CredentialService, W3cV2CredentialStatus, W3cV2CredentialStatusOptions, W3cV2CredentialSubject, W3cV2CredentialSubjectOptions, W3cV2CredentialsApi, W3cV2CredentialsModule, W3cV2CredentialsModuleConfig, W3cV2CredentialsModuleConfigOptions, W3cV2DataIntegrityContextValidationResult, W3cV2DataIntegrityContextValidator, W3cV2DataIntegrityCredentialService, W3cV2DataIntegrityIssue, W3cV2DataIntegrityPresentationCredentialEntry, W3cV2DataIntegrityResolvedPresentation, W3cV2DataIntegritySecuredCredential, W3cV2DataIntegritySecuredPresentation, W3cV2DataIntegrityVerifiableCredential, W3cV2DataIntegrityVerifiableCredentialOptions, W3cV2DataIntegrityVerifiablePresentation, W3cV2DataIntegrityVerifiablePresentationOptions, W3cV2DiSignCredentialOptions, W3cV2DiSignPresentationOptions, W3cV2DiVerifyCredentialOptions, W3cV2DiVerifyPresentationOptions, W3cV2EnvelopedVerifiableCredential, W3cV2EnvelopedVerifiableCredentialOptions, W3cV2EnvelopedVerifiableCredentialTransformer, W3cV2EnvelopedVerifiablePresentation, W3cV2EnvelopedVerifiablePresentationOptions, W3cV2Evidence, W3cV2EvidenceOptions, W3cV2Issuer, W3cV2IssuerOptions, W3cV2IssuerTransformer, W3cV2JsonCredential, W3cV2JsonDataIntegrityPresentationEntry, W3cV2JsonEnvelopedVerifiableCredentialEntry, W3cV2JsonEnvelopedVerifiablePresentationEntry, W3cV2JsonLocalizedValue, W3cV2JsonPresentation, W3cV2JsonPresentationCredentialEntry, W3cV2JwtCredentialService, W3cV2JwtSignCredentialOptions, W3cV2JwtSignPresentationOptions, W3cV2JwtVerifiableCredential, W3cV2JwtVerifiableCredentialOptions, W3cV2JwtVerifiablePresentation, W3cV2JwtVerifiablePresentationOptions, W3cV2JwtVerifyCredentialOptions, W3cV2JwtVerifyPresentationOptions, W3cV2LocalizedValue, W3cV2LocalizedValueOptions, W3cV2LocalizedValueTransformer, W3cV2Presentation, W3cV2PresentationCredentialEntry, W3cV2PresentationCredentialEntryOptions, W3cV2PresentationCredentialEntryResult, W3cV2PresentationCredentialEntryTransformer, W3cV2PresentationOptions, W3cV2RefreshService, W3cV2RefreshServiceOptions, W3cV2SdJwt, W3cV2SdJwtCredentialService, W3cV2SdJwtHeader, W3cV2SdJwtPayload, W3cV2SdJwtSignCredentialOptions, W3cV2SdJwtSignPresentationOptions, W3cV2SdJwtVcPresentOptions, W3cV2SdJwtVerifiableCredential, W3cV2SdJwtVerifiableCredentialOptions, W3cV2SdJwtVerifiablePresentation, W3cV2SdJwtVerifiablePresentationOptions, W3cV2SdJwtVerifyCredentialOptions, W3cV2SdJwtVerifyPresentationOptions, W3cV2SignCredentialOptions, W3cV2SignPresentationOptions, W3cV2StoreCredentialOptions, W3cV2TermsOfUse, W3cV2TermsOfUseOptions, W3cV2VerifiableCredential, W3cV2VerifiableCredentialOptions, W3cV2VerifiableCredentialTransformer, W3cV2VerifiablePresentation, W3cV2VerifiablePresentationOptions, W3cV2VerifiablePresentationTransformer, W3cV2VerifyCredentialOptions, W3cV2VerifyCredentialResult, W3cV2VerifyPresentationOptions, W3cV2VerifyPresentationResult, W3cVerifiableCredential, W3cVerifiableCredentialTransformer, W3cVerifiablePresentation, W3cVerifyCredentialOptions, W3cVerifyCredentialResult, W3cVerifyPresentationOptions, W3cVerifyPresentationResult, WebDidResolver, X509Api, X509Certificate, X509CertificateExtensionsOptions, X509CertificateIssuerAndSubjectOptions, X509CertificateOptions, X509CertificateRevocationList, X509CertificateRevocationListEntry, X509CertificateRevocationListEntryOptions, X509CertificateRevocationListEntryReason, X509CertificateRevocationListExtensionsOptions, X509CertificateSigningRequestExtensionsOptions, X509CertificateSingleValidationResult, X509CertificateValidations, X509CheckCertificateRevocationOptions, X509CreateCertificateChainOptions, X509CreateCertificateOptions, X509CreateCertificateRevocationListOptions, X509CreateCertificateSigningRequestOptions, X509CrlDistributionPoint, X509CrlExtensionIdentifier, X509CrlUnavailableError, X509Error, X509ExtendedKeyUsage, X509ExtensionIdentifier, X509FetchCertificateRevocationListOptions, X509GetLeafCertificateOptions, X509IssuingDistributionPoint, X509KeyUsage, X509Module, X509ModuleConfig, X509ModuleConfigOptions, X509ParseCertificateOptions, X509ParseCertificateRevocationListOptions, X509ParseCertificateSigningRequestOptions, X509RevocationCheckMode, X509RevocationCheckOptions, X509RevocationCheckOptionsWithDefaults, X509RevocationCheckResult, X509RevocationReason, X509RevocationService, X509Service, X509ValidateCertificateChainOptions, X509ValidationError, X509ValidationResult, X509VerificationContext, X509VerificationTrustedCertificates, X509VerificationTypeCredential, X509VerificationTypeMdocReaderAuth, X509VerificationTypeOauth2ClientAttestation, X509VerificationTypeOauth2SecuredAuthorizationRequest, X509VerificationTypeOpenId4VciCredentialIssuerMetadata, X509VerificationTypeOpenId4VciKeyAttestation, type XOR, ZodValidationError, asArray, canUseInstanceFromCredentialRecord, constants, convertLegacyTrustedCertificates, convertName, convertPublicKeyToX25519, createAuthorityKeyIdentifierExtension, createBasicConstraintsExtension, createCrlDistributionPointsExtension, createCrlEntryCertificateIssuerExtension, createCrlNumberExtension, createDeltaCrlIndicatorExtension, createExtendedKeyUsagesExtension, createIssuerAlternativeNameExtension, createIssuingDistributionPointExtension, createKeyUsagesExtension, createPeerDidDocumentFromServices, createSubjectAlternativeNameExtension, createSubjectKeyIdentifierExtension, dcqlGetPresentationsToCreate, decodeCursor, decodeSdJwt, decodeW3cV2VerifiableCredential, decodeW3cV2VerifiablePresentation, deepEquality, defaultDocumentLoader, defaultX509RevocationCheckOptions, deriveProof, didDocumentJsonToNumAlgo1Did, didDocumentToNumAlgo2Did, didDocumentToNumAlgo4Did, didKeyToEd25519PublicJwk, didKeyToVerkey, encodeCursor, equalsIgnoreOrder, equalsWithOrder, extractPresentationsWithDescriptorsFromSubmission, extractX509CertificatesFromJwt, filterContextCorrelationId, findMatchingEd25519Key, getAlternativeDidsForPeerDid, getApiForModuleByName, getDirFromFilePath, getDomainFromUrl, getEcdsaSecp256k1VerificationKey2019, getEd25519VerificationKey2018, getEd25519VerificationKey2020, getJsonWebKey2020, getKmsKeyIdForVerifiacationMethod, getMultikey, getNumAlgoFromPeerDid, getPublicJwkFromEcdsaSecp256k1VerificationKey2019, getPublicJwkFromEd25519VerificationKey2018, getPublicJwkFromEd25519VerificationKey2020, getPublicJwkFromJsonWebKey2020, getPublicJwkFromMultikey, getPublicJwkFromVerificationMethod, getPublicJwkFrommX25519KeyAgreementKey2019, getRegisteredModuleByInstance, getRegisteredModuleByName, getX25519KeyAgreementKey2019, inject, injectAll, injectable, isDid, isDidKey, isEcdsaSecp256k1VerificationKey2019, isEd25519VerificationKey2018, isEd25519VerificationKey2020, isEmbeddedDataIntegrityPresentationEntry, isEnvelopedVerifiableCredentialEntry, isEnvelopedVerifiablePresentationEntry, isJsonObject, isJsonWebKey2020, isMdocSupportedSignatureAlgorithm, isMultikey, isNonEmptyArray, isStorageUpToDate, isValidPeerDid, isX25519KeyAgreementKey2019, joinUriParts, jwaAlgorithmToKeySignParams, keyDidEd25519, keyDidX25519, keyParamsToJwaAlgorithm, legacyTrustedCertificatesToTrustedIssuers, mapDataIntegrityIssuesToCredoError, mapNonEmptyArray, parseDid, presentationFromDataUri, presentationToDataUri, publicJwkToCryptoKeyAlgorithm, purposes, recordToCursor, replaceError, sdJwtVcHasher, serviceTypes, suites, tryParseDid, useInstanceFromCredentialRecord, utils, validateW3cV2SdJwtDisclosureFrame, vcLibraries, verkeyToDidKey, verkeyToPublicJwk, w3cDate, withX509RevocationCheckDefaults, x509SignatureAlgorithmToJwa };
 //# sourceMappingURL=index.d.mts.map

package/build/index.mjs

@@ -50,7 +50,7 @@ import { convertName } from "./modules/x509/utils/nameConversion.mjs";
 import { X509CrlExtensionIdentifier, X509ExtensionIdentifier, createAuthorityKeyIdentifierExtension, createBasicConstraintsExtension, createCrlDistributionPointsExtension, createCrlEntryCertificateIssuerExtension, createCrlNumberExtension, createDeltaCrlIndicatorExtension, createExtendedKeyUsagesExtension, createIssuerAlternativeNameExtension, createIssuingDistributionPointExtension, createKeyUsagesExtension, createSubjectAlternativeNameExtension, createSubjectKeyIdentifierExtension } from "./modules/x509/utils/extensions.mjs";
 import { x509SignatureAlgorithmToJwa } from "./modules/x509/utils/signatureAlgorithm.mjs";
 import { X509Certificate, X509ExtendedKeyUsage, X509KeyUsage } from "./modules/x509/X509Certificate.mjs";
-import { X509RevocationCheckMode } from "./modules/x509/X509ValidationOptions.mjs";
+import { X509RevocationCheckMode, defaultX509RevocationCheckOptions, withX509RevocationCheckDefaults } from "./modules/x509/X509ValidationOptions.mjs";
 import { X509ModuleConfig } from "./modules/x509/X509ModuleConfig.mjs";
 import { CertificateSigningRequest } from "./modules/x509/CertificateSigningRequest.mjs";
 import { X509CertificateRevocationList, X509CertificateRevocationListEntryReason } from "./modules/x509/X509CertificateRevocationList.mjs";
@@ -273,6 +273,6 @@ const utils = {
 	addSecondsToDate
 };
 //#endregion
-export { ALL_REVOCATION_REASONS_MASK, ANONCREDS_DATA_INTEGRITY_CRYPTOSUITE, ANONCREDS_W3C_CREDENTIAL_CRYPTOSUITE, Agent, AgentConfig, AgentContext, AnonCredsDataIntegrityServiceSymbol, AnonCredsW3cCredentialProof, AnonCredsW3cCredentialServiceSymbol, BaseAgent, BaseLogger, BaseRecord, CREDENTIALS_CONTEXT_V1_URL, CREDENTIALS_CONTEXT_V2_URL, CREDENTIALS_ISSUER_URL, CacheModule, CacheModuleConfig, CachedStorageService, CertificateSigningRequest, ClaimFormat, ClassValidationError, ConsoleLogger, CredentialIssuancePurpose, CredentialMultiInstanceState, CredentialMultiInstanceUseMode, CredoError, CredoWebCrypto, CredoWebCryptoKey, DID_V1_CONTEXT_URL, DataIntegrityProof, DateOnly, DateTransformer, DcqlError, DcqlModule, DcqlService, DefaultAgentContextProvider, DependencyManager, DidCommV1Service, LegacyDidCommV2Service as DidCommV2Service, DidDocument, DidDocumentBuilder, DidDocumentRole, DidDocumentService, DidJwk, DidKey, DidRecord, DidRecordMetadataKeys, DidRegistrarService, DidRepository, DidResolverService, DidsApi, DidsModule, DidsModuleConfig, DifPresentationExchangeError, DifPresentationExchangeModule, DifPresentationExchangeService, PresentationSubmissionLocation as DifPresentationExchangeSubmissionLocation, ENVELOPED_VERIFIABLE_CREDENTIAL_TYPE, ENVELOPED_VERIFIABLE_PRESENTATION_TYPE, EXPANDED_TYPE_CREDENTIALS_CONTEXT_V1_VC_TYPE, Ed25519Signature2018, Ed25519Signature2020, EventEmitter, GenericRecord, GenericRecordsApi, GenericRecordsModule, Hasher, InMemoryLruCache, IndyAgentService, InjectionSymbols, IntegrityVerifier, IsEnvelopedVerifiableCredentialType, IsEnvelopedVerifiablePresentationType, IsStringOrInstance, IsStringOrInstanceOrArrayOfInstances, IsStringOrStringArray, IsStringOrVerificationMethod, IsUri, IsW3cCredentialSubject, IsW3cIssuer, IsW3cV2Issuer, JsonEncoder, JsonLdModule, JsonLdModuleConfig, JsonTransformer, JwkDidRegistrar, JwkDidResolver, JwsLinkedDataSignature, JwsService, Jwt, JwtPayload, KeyDidRegistrar, KeyDidResolver, kms_exports as Kms, LdKeyPair, LinkedDataProof, LogLevel, Mdoc, MdocApi, MdocDcApiService, MdocDeviceRequestNotSatisfiedError, MdocDeviceResponse, MdocError, MdocEventTypes, MdocModule, MdocRecord, MdocRepository, MdocService, MdocVerificationSessionExpiredError, MdocVerificationSessionRecord, MdocVerificationSessionRepository, MdocVerificationSessionState, MessageValidator, Metadata, MultiBaseEncoder, MultiHashEncoder, NON_DISCLOSEABLE_FIELDS, DidCommV2Service as NewDidCommV2Service, DidCommV2ServiceEndpoint as NewDidCommV2ServiceEndpoint, PeerDidNumAlgo, PeerDidRegistrar, PeerDidResolver, RecordDuplicateError, RecordNotFoundError, Repository, RepositoryEventTypes, SECURITY_CONTEXT_SECP256k1_URL, SECURITY_CONTEXT_URL, SECURITY_CONTEXT_V1_URL, SECURITY_CONTEXT_V2_URL, SECURITY_CONTEXT_V3_URL, SECURITY_ED25519_2018_CONTEXT_URL, SECURITY_ED25519_2020_CONTEXT_URL, SECURITY_JWS_CONTEXT_URL, SECURITY_PROOF_URL, SECURITY_SIGNATURE_URL, SECURITY_X25519_CONTEXT_URL, SdJwtVcApi, SdJwtVcError, SdJwtVcModule, SdJwtVcRecord, SdJwtVcRepository, SdJwtVcService, ServiceTransformer, Sha1, Sha256, Sha384, Sha512, SignatureSuiteRegistry, SignatureSuiteToken, SingleContextLruCacheRecord, SingleContextStorageLruCache, StatusListCwt, StorageUpdateService, StorageVersionRecord, StorageVersionRepository, TokenStatusListApi, TokenStatusListModule, TokenStatusListService, TrustedIssuerContext, TypedArrayEncoder, UpdateAssistant, VERIFIABLE_CREDENTIAL_TYPE, VERIFIABLE_PRESENTATION_TYPE, VERIFICATION_METHOD_TYPE_ECDSA_SECP256K1_VERIFICATION_KEY_2019, VERIFICATION_METHOD_TYPE_ED25519_VERIFICATION_KEY_2018, VERIFICATION_METHOD_TYPE_ED25519_VERIFICATION_KEY_2020, VERIFICATION_METHOD_TYPE_JSON_WEB_KEY_2020, VERIFICATION_METHOD_TYPE_MULTIKEY, VERIFICATION_METHOD_TYPE_X25519_KEY_AGREEMENT_KEY_2019, VerificationMethod, VerificationMethodTransformer, W3cCredential, W3cCredentialRecord, W3cCredentialRepository, W3cCredentialSchema, W3cCredentialService, W3cCredentialStatus, W3cCredentialSubject, W3cCredentialSubjectTransformer, W3cCredentialsApi, W3cCredentialsModule, W3cCredentialsModuleConfig, W3cDataIntegrityApi, W3cDataIntegrityModule, W3cDataIntegrityProcessingErrorCode, W3cIssuer, W3cIssuerTransformer, W3cJsonLdCredentialService, W3cJsonLdCredentialSigningNotSupportedError, W3cJsonLdVerifiableCredential, W3cJsonLdVerifiablePresentation, W3cJwtCredentialService, W3cJwtVerifiableCredential, W3cJwtVerifiablePresentation, W3cPresentation, W3cV2Credential, W3cV2CredentialRecord, W3cV2CredentialRepository, W3cV2CredentialSchema, W3cV2CredentialService, W3cV2CredentialStatus, W3cV2CredentialSubject, W3cV2CredentialsApi, W3cV2CredentialsModule, W3cV2CredentialsModuleConfig, W3cV2DataIntegrityContextValidator, W3cV2DataIntegrityCredentialService, W3cV2DataIntegrityVerifiableCredential, W3cV2DataIntegrityVerifiablePresentation, W3cV2EnvelopedVerifiableCredential, W3cV2EnvelopedVerifiableCredentialTransformer, W3cV2EnvelopedVerifiablePresentation, W3cV2Evidence, W3cV2Issuer, W3cV2IssuerTransformer, W3cV2JwtCredentialService, W3cV2JwtVerifiableCredential, W3cV2JwtVerifiablePresentation, W3cV2LocalizedValue, W3cV2LocalizedValueTransformer, W3cV2Presentation, W3cV2PresentationCredentialEntryTransformer, W3cV2RefreshService, W3cV2SdJwtCredentialService, W3cV2SdJwtVerifiableCredential, W3cV2SdJwtVerifiablePresentation, W3cV2TermsOfUse, W3cV2VerifiableCredentialTransformer, W3cV2VerifiablePresentationTransformer, W3cVerifiableCredentialTransformer, WebDidResolver, X509Api, X509Certificate, X509CertificateRevocationList, X509CertificateRevocationListEntryReason, X509CrlExtensionIdentifier, X509CrlUnavailableError, X509Error, X509ExtendedKeyUsage, X509ExtensionIdentifier, X509KeyUsage, X509Module, X509ModuleConfig, X509RevocationCheckMode, X509RevocationReason, X509RevocationService, X509Service, X509ValidationError, ZodValidationError, asArray, canUseInstanceFromCredentialRecord, constants, convertLegacyTrustedCertificates, convertName, convertPublicKeyToX25519, createAuthorityKeyIdentifierExtension, createBasicConstraintsExtension, createCrlDistributionPointsExtension, createCrlEntryCertificateIssuerExtension, createCrlNumberExtension, createDeltaCrlIndicatorExtension, createExtendedKeyUsagesExtension, createIssuerAlternativeNameExtension, createIssuingDistributionPointExtension, createKeyUsagesExtension, createPeerDidDocumentFromServices, createSubjectAlternativeNameExtension, createSubjectKeyIdentifierExtension, dcqlGetPresentationsToCreate, decodeCursor, decodeSdJwt, decodeW3cV2VerifiableCredential, decodeW3cV2VerifiablePresentation, deepEquality, defaultDocumentLoader, deriveProof, didDocumentJsonToNumAlgo1Did, didDocumentToNumAlgo2Did, didDocumentToNumAlgo4Did, didKeyToEd25519PublicJwk, didKeyToVerkey, encodeCursor, equalsIgnoreOrder, equalsWithOrder, extractPresentationsWithDescriptorsFromSubmission, extractX509CertificatesFromJwt, filterContextCorrelationId, findMatchingEd25519Key, getAlternativeDidsForPeerDid, getApiForModuleByName, getDirFromFilePath, getDomainFromUrl, getEcdsaSecp256k1VerificationKey2019, getEd25519VerificationKey2018, getEd25519VerificationKey2020, getJsonWebKey2020, getKmsKeyIdForVerifiacationMethod, getMultikey, getNumAlgoFromPeerDid, getPublicJwkFromEcdsaSecp256k1VerificationKey2019, getPublicJwkFromEd25519VerificationKey2018, getPublicJwkFromEd25519VerificationKey2020, getPublicJwkFromJsonWebKey2020, getPublicJwkFromMultikey, getPublicJwkFromVerificationMethod, getPublicJwkFrommX25519KeyAgreementKey2019, getRegisteredModuleByInstance, getRegisteredModuleByName, getX25519KeyAgreementKey2019, inject, injectAll, injectable, isDid, isDidKey, isEcdsaSecp256k1VerificationKey2019, isEd25519VerificationKey2018, isEd25519VerificationKey2020, isEmbeddedDataIntegrityPresentationEntry, isEnvelopedVerifiableCredentialEntry, isEnvelopedVerifiablePresentationEntry, isJsonObject, isJsonWebKey2020, isMdocSupportedSignatureAlgorithm, isMultikey, isNonEmptyArray, isStorageUpToDate, isValidPeerDid, isX25519KeyAgreementKey2019, joinUriParts, jwaAlgorithmToKeySignParams, keyDidEd25519, keyDidX25519, keyParamsToJwaAlgorithm, legacyTrustedCertificatesToTrustedIssuers, mapDataIntegrityIssuesToCredoError, mapNonEmptyArray, parseDid, presentationFromDataUri, presentationToDataUri, publicJwkToCryptoKeyAlgorithm, purposes, recordToCursor, replaceError, sdJwtVcHasher, serviceTypes, suites, tryParseDid, useInstanceFromCredentialRecord, utils, validateW3cV2SdJwtDisclosureFrame, vcLibraries, verkeyToDidKey, verkeyToPublicJwk, w3cDate, x509SignatureAlgorithmToJwa };
+export { ALL_REVOCATION_REASONS_MASK, ANONCREDS_DATA_INTEGRITY_CRYPTOSUITE, ANONCREDS_W3C_CREDENTIAL_CRYPTOSUITE, Agent, AgentConfig, AgentContext, AnonCredsDataIntegrityServiceSymbol, AnonCredsW3cCredentialProof, AnonCredsW3cCredentialServiceSymbol, BaseAgent, BaseLogger, BaseRecord, CREDENTIALS_CONTEXT_V1_URL, CREDENTIALS_CONTEXT_V2_URL, CREDENTIALS_ISSUER_URL, CacheModule, CacheModuleConfig, CachedStorageService, CertificateSigningRequest, ClaimFormat, ClassValidationError, ConsoleLogger, CredentialIssuancePurpose, CredentialMultiInstanceState, CredentialMultiInstanceUseMode, CredoError, CredoWebCrypto, CredoWebCryptoKey, DID_V1_CONTEXT_URL, DataIntegrityProof, DateOnly, DateTransformer, DcqlError, DcqlModule, DcqlService, DefaultAgentContextProvider, DependencyManager, DidCommV1Service, LegacyDidCommV2Service as DidCommV2Service, DidDocument, DidDocumentBuilder, DidDocumentRole, DidDocumentService, DidJwk, DidKey, DidRecord, DidRecordMetadataKeys, DidRegistrarService, DidRepository, DidResolverService, DidsApi, DidsModule, DidsModuleConfig, DifPresentationExchangeError, DifPresentationExchangeModule, DifPresentationExchangeService, PresentationSubmissionLocation as DifPresentationExchangeSubmissionLocation, ENVELOPED_VERIFIABLE_CREDENTIAL_TYPE, ENVELOPED_VERIFIABLE_PRESENTATION_TYPE, EXPANDED_TYPE_CREDENTIALS_CONTEXT_V1_VC_TYPE, Ed25519Signature2018, Ed25519Signature2020, EventEmitter, GenericRecord, GenericRecordsApi, GenericRecordsModule, Hasher, InMemoryLruCache, IndyAgentService, InjectionSymbols, IntegrityVerifier, IsEnvelopedVerifiableCredentialType, IsEnvelopedVerifiablePresentationType, IsStringOrInstance, IsStringOrInstanceOrArrayOfInstances, IsStringOrStringArray, IsStringOrVerificationMethod, IsUri, IsW3cCredentialSubject, IsW3cIssuer, IsW3cV2Issuer, JsonEncoder, JsonLdModule, JsonLdModuleConfig, JsonTransformer, JwkDidRegistrar, JwkDidResolver, JwsLinkedDataSignature, JwsService, Jwt, JwtPayload, KeyDidRegistrar, KeyDidResolver, kms_exports as Kms, LdKeyPair, LinkedDataProof, LogLevel, Mdoc, MdocApi, MdocDcApiService, MdocDeviceRequestNotSatisfiedError, MdocDeviceResponse, MdocError, MdocEventTypes, MdocModule, MdocRecord, MdocRepository, MdocService, MdocVerificationSessionExpiredError, MdocVerificationSessionRecord, MdocVerificationSessionRepository, MdocVerificationSessionState, MessageValidator, Metadata, MultiBaseEncoder, MultiHashEncoder, NON_DISCLOSEABLE_FIELDS, DidCommV2Service as NewDidCommV2Service, DidCommV2ServiceEndpoint as NewDidCommV2ServiceEndpoint, PeerDidNumAlgo, PeerDidRegistrar, PeerDidResolver, RecordDuplicateError, RecordNotFoundError, Repository, RepositoryEventTypes, SECURITY_CONTEXT_SECP256k1_URL, SECURITY_CONTEXT_URL, SECURITY_CONTEXT_V1_URL, SECURITY_CONTEXT_V2_URL, SECURITY_CONTEXT_V3_URL, SECURITY_ED25519_2018_CONTEXT_URL, SECURITY_ED25519_2020_CONTEXT_URL, SECURITY_JWS_CONTEXT_URL, SECURITY_PROOF_URL, SECURITY_SIGNATURE_URL, SECURITY_X25519_CONTEXT_URL, SdJwtVcApi, SdJwtVcError, SdJwtVcModule, SdJwtVcRecord, SdJwtVcRepository, SdJwtVcService, ServiceTransformer, Sha1, Sha256, Sha384, Sha512, SignatureSuiteRegistry, SignatureSuiteToken, SingleContextLruCacheRecord, SingleContextStorageLruCache, StatusListCwt, StorageUpdateService, StorageVersionRecord, StorageVersionRepository, TokenStatusListApi, TokenStatusListModule, TokenStatusListService, TrustedIssuerContext, TypedArrayEncoder, UpdateAssistant, VERIFIABLE_CREDENTIAL_TYPE, VERIFIABLE_PRESENTATION_TYPE, VERIFICATION_METHOD_TYPE_ECDSA_SECP256K1_VERIFICATION_KEY_2019, VERIFICATION_METHOD_TYPE_ED25519_VERIFICATION_KEY_2018, VERIFICATION_METHOD_TYPE_ED25519_VERIFICATION_KEY_2020, VERIFICATION_METHOD_TYPE_JSON_WEB_KEY_2020, VERIFICATION_METHOD_TYPE_MULTIKEY, VERIFICATION_METHOD_TYPE_X25519_KEY_AGREEMENT_KEY_2019, VerificationMethod, VerificationMethodTransformer, W3cCredential, W3cCredentialRecord, W3cCredentialRepository, W3cCredentialSchema, W3cCredentialService, W3cCredentialStatus, W3cCredentialSubject, W3cCredentialSubjectTransformer, W3cCredentialsApi, W3cCredentialsModule, W3cCredentialsModuleConfig, W3cDataIntegrityApi, W3cDataIntegrityModule, W3cDataIntegrityProcessingErrorCode, W3cIssuer, W3cIssuerTransformer, W3cJsonLdCredentialService, W3cJsonLdCredentialSigningNotSupportedError, W3cJsonLdVerifiableCredential, W3cJsonLdVerifiablePresentation, W3cJwtCredentialService, W3cJwtVerifiableCredential, W3cJwtVerifiablePresentation, W3cPresentation, W3cV2Credential, W3cV2CredentialRecord, W3cV2CredentialRepository, W3cV2CredentialSchema, W3cV2CredentialService, W3cV2CredentialStatus, W3cV2CredentialSubject, W3cV2CredentialsApi, W3cV2CredentialsModule, W3cV2CredentialsModuleConfig, W3cV2DataIntegrityContextValidator, W3cV2DataIntegrityCredentialService, W3cV2DataIntegrityVerifiableCredential, W3cV2DataIntegrityVerifiablePresentation, W3cV2EnvelopedVerifiableCredential, W3cV2EnvelopedVerifiableCredentialTransformer, W3cV2EnvelopedVerifiablePresentation, W3cV2Evidence, W3cV2Issuer, W3cV2IssuerTransformer, W3cV2JwtCredentialService, W3cV2JwtVerifiableCredential, W3cV2JwtVerifiablePresentation, W3cV2LocalizedValue, W3cV2LocalizedValueTransformer, W3cV2Presentation, W3cV2PresentationCredentialEntryTransformer, W3cV2RefreshService, W3cV2SdJwtCredentialService, W3cV2SdJwtVerifiableCredential, W3cV2SdJwtVerifiablePresentation, W3cV2TermsOfUse, W3cV2VerifiableCredentialTransformer, W3cV2VerifiablePresentationTransformer, W3cVerifiableCredentialTransformer, WebDidResolver, X509Api, X509Certificate, X509CertificateRevocationList, X509CertificateRevocationListEntryReason, X509CrlExtensionIdentifier, X509CrlUnavailableError, X509Error, X509ExtendedKeyUsage, X509ExtensionIdentifier, X509KeyUsage, X509Module, X509ModuleConfig, X509RevocationCheckMode, X509RevocationReason, X509RevocationService, X509Service, X509ValidationError, ZodValidationError, asArray, canUseInstanceFromCredentialRecord, constants, convertLegacyTrustedCertificates, convertName, convertPublicKeyToX25519, createAuthorityKeyIdentifierExtension, createBasicConstraintsExtension, createCrlDistributionPointsExtension, createCrlEntryCertificateIssuerExtension, createCrlNumberExtension, createDeltaCrlIndicatorExtension, createExtendedKeyUsagesExtension, createIssuerAlternativeNameExtension, createIssuingDistributionPointExtension, createKeyUsagesExtension, createPeerDidDocumentFromServices, createSubjectAlternativeNameExtension, createSubjectKeyIdentifierExtension, dcqlGetPresentationsToCreate, decodeCursor, decodeSdJwt, decodeW3cV2VerifiableCredential, decodeW3cV2VerifiablePresentation, deepEquality, defaultDocumentLoader, defaultX509RevocationCheckOptions, deriveProof, didDocumentJsonToNumAlgo1Did, didDocumentToNumAlgo2Did, didDocumentToNumAlgo4Did, didKeyToEd25519PublicJwk, didKeyToVerkey, encodeCursor, equalsIgnoreOrder, equalsWithOrder, extractPresentationsWithDescriptorsFromSubmission, extractX509CertificatesFromJwt, filterContextCorrelationId, findMatchingEd25519Key, getAlternativeDidsForPeerDid, getApiForModuleByName, getDirFromFilePath, getDomainFromUrl, getEcdsaSecp256k1VerificationKey2019, getEd25519VerificationKey2018, getEd25519VerificationKey2020, getJsonWebKey2020, getKmsKeyIdForVerifiacationMethod, getMultikey, getNumAlgoFromPeerDid, getPublicJwkFromEcdsaSecp256k1VerificationKey2019, getPublicJwkFromEd25519VerificationKey2018, getPublicJwkFromEd25519VerificationKey2020, getPublicJwkFromJsonWebKey2020, getPublicJwkFromMultikey, getPublicJwkFromVerificationMethod, getPublicJwkFrommX25519KeyAgreementKey2019, getRegisteredModuleByInstance, getRegisteredModuleByName, getX25519KeyAgreementKey2019, inject, injectAll, injectable, isDid, isDidKey, isEcdsaSecp256k1VerificationKey2019, isEd25519VerificationKey2018, isEd25519VerificationKey2020, isEmbeddedDataIntegrityPresentationEntry, isEnvelopedVerifiableCredentialEntry, isEnvelopedVerifiablePresentationEntry, isJsonObject, isJsonWebKey2020, isMdocSupportedSignatureAlgorithm, isMultikey, isNonEmptyArray, isStorageUpToDate, isValidPeerDid, isX25519KeyAgreementKey2019, joinUriParts, jwaAlgorithmToKeySignParams, keyDidEd25519, keyDidX25519, keyParamsToJwaAlgorithm, legacyTrustedCertificatesToTrustedIssuers, mapDataIntegrityIssuesToCredoError, mapNonEmptyArray, parseDid, presentationFromDataUri, presentationToDataUri, publicJwkToCryptoKeyAlgorithm, purposes, recordToCursor, replaceError, sdJwtVcHasher, serviceTypes, suites, tryParseDid, useInstanceFromCredentialRecord, utils, validateW3cV2SdJwtDisclosureFrame, vcLibraries, verkeyToDidKey, verkeyToPublicJwk, w3cDate, withX509RevocationCheckDefaults, x509SignatureAlgorithmToJwa };
 
 //# sourceMappingURL=index.mjs.map

package/build/modules/dcql/DcqlService.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"DcqlService.d.mts","names":[],"sources":["../../../src/modules/dcql/DcqlService.ts"],"mappings":";;;;;;;;;;;;iBAmEiB;;;;;;;;;;EAUf,UAAU;;qBAIC;;;;;UAKG;UAwGN;EAsCK,gCACX,cAAc,cACd,cAAc,wBACd,iBAAiB,mCAChB,QAAQ;EA+GE,yBAAyB,cAAc,cAAc,WAAW,YAAY,QAAQ;;;;;;;;;;;UA4LzF;EAwCK,4BACX,cAAc,cACd,kBAAkB,kBAClB,WAAW,YAAS;;;;;;;;;;YAkfksr8B;YAAwD;;;;;;;;;;;YAAoZ,4CAAC;;;;;;;;;;;YAAyW,8BAAC;;;cAAoH;;;;;;;;;YAA0S,+BAAC;;;cAAqH;;;;;;;;;cAAoW,qCAAC;cAA2E;;;;;;;;;YAAyR,mCAAC;;;cAAgJ,qCAAC;;;;;;;;;;;;;;;;;;;;;;;;QAA04B,oCAAC;;;;;YAAyM;YAAwD;;;;;;;;;;;YAAoZ,4CAAC;;;;;;;;;;YAAgW;;;;;;;;;;;;YAAqZ,8BAAC;;;cAAoH;;;;;;;;;YAA0S,+BAAC;;;cAAqH;;;;;;;;;cAAoW,qCAAC;cAA2E;;;;;;;;;YAAyR,mCAAC;;;cAAgJ,qCAAC;;;;;;;;YAA+S,8BAAC;;;cAAoH;;;;;;;;;;;;cAA+Z;;;;;;YAAyM;;;;cAA+L,qCAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAAwoC;QAA4C,oCAAC;;;;;YAAyM;YAAwD;;;;;;;;;;;YAAoZ,4CAAC;;;;;;;;;;YAAgW;;;;;;;;;;;;YAAqZ,8BAAC;;;cAAoH;;;;;;;;;YAA0S,+BAAC;;;cAAqH;;;;;;;;;cAAoW,qCAAC;cAA2E;;;;;;;;;YAAyR,mCAAC;;;cAAgJ,qCAAC;;;;;;;;YAA+S,8BAAC;;;cAAoH;;;;;;;;;;;;cAA+Z;;;;;;YAAyM;;;;cAA+L,qCAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAAkrC;;;;;;;UAnbt/l9B;UAQA;;;;;EAqDD,4BACL,iBAAiB,qBACf,YAAuD,yCACxD;EAwEI,kBAAkB,WAAW,YAAY,UAAU,kBAAkB;EAM/D,mBACX,cAAc,cACd;IACE,6BAA6B;IAC7B;IACA;IACA,wBAAwB;MAEzB;IACD,kBAAkB;IAClB,yBAAyB;;UAmOnB;UAaA;UAIA;UAIM;UAoBN"}
+{"version":3,"file":"DcqlService.d.mts","names":[],"sources":["../../../src/modules/dcql/DcqlService.ts"],"mappings":";;;;;;;;;;;;iBAqEiB;;;;;;;;;;EAUf,UAAU;;qBAIC;;;;;UAKG;UAwGN;EAsCK,gCACX,cAAc,cACd,cAAc,wBACd,iBAAiB,mCAChB,QAAQ;EA+GE,yBAAyB,cAAc,cAAc,WAAW,YAAY,QAAQ;;;;;;;;;;;UA4LzF;EAwCK,4BACX,cAAc,cACd,kBAAkB,kBAClB,WAAW,YAAS;;;;;;;;;;YAsgB+7o8B;YAAwD;;;;;;;;;;;YAAoZ,4CAAC;;;;;;;;;;;YAAyW,8BAAC;;;cAAoH;;;;;;;;;YAA0S,+BAAC;;;cAAqH;;;;;;;;;cAAoW,qCAAC;cAA2E;;;;;;;;;YAAyR,mCAAC;;;cAAgJ,qCAAC;;;;;;;;;;;;;;;;;;;;;;;;QAA04B,oCAAC;;;;;YAAyM;YAAwD;;;;;;;;;;;YAAoZ,4CAAC;;;;;;;;;;YAAgW;;;;;;;;;;;;YAAqZ,8BAAC;;;cAAoH;;;;;;;;;YAA0S,+BAAC;;;cAAqH;;;;;;;;;cAAoW,qCAAC;cAA2E;;;;;;;;;YAAyR,mCAAC;;;cAAgJ,qCAAC;;;;;;;;YAA+S,8BAAC;;;cAAoH;;;;;;;;;;;;cAA+Z;;;;;;YAAyM;;;;cAA+L,qCAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAAwoC;QAA4C,oCAAC;;;;;YAAyM;YAAwD;;;;;;;;;;;YAAoZ,4CAAC;;;;;;;;;;YAAgW;;;;;;;;;;;;YAAqZ,8BAAC;;;cAAoH;;;;;;;;;YAA0S,+BAAC;;;cAAqH;;;;;;;;;cAAoW,qCAAC;cAA2E;;;;;;;;;YAAyR,mCAAC;;;cAAgJ,qCAAC;;;;;;;;YAA+S,8BAAC;;;cAAoH;;;;;;;;;;;;cAA+Z;;;;;;YAAyM;;;;cAA+L,qCAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;MAAkrC;;;;;;;UAvcnvj9B;UAQA;;;;;EAqDD,4BACL,iBAAiB,qBACf,YAAuD,yCACxD;EAwEI,kBAAkB,WAAW,YAAY,UAAU,kBAAkB;EAM/D,mBACX,cAAc,cACd;IACE,6BAA6B;IAC7B;IACA;IACA,wBAAwB;MAEzB;IACD,kBAAkB;IAClB,yBAAyB;;UAmOnB;UAaA;UAIA;UAIM;UAoBN"}

package/build/modules/dcql/DcqlService.mjs

@@ -13,6 +13,7 @@ import "../../utils/credentialUseTypes.mjs";
 import "../vc/models/ClaimFormat.mjs";
 import { W3cPresentation } from "../vc/models/presentation/W3cPresentation.mjs";
 import { W3cV2Credential } from "../vc/models/credential/W3cV2Credential.mjs";
+import { W3cV2JwtVerifiableCredential } from "../vc/jwt-vc/W3cV2JwtVerifiableCredential.mjs";
 import { W3cV2SdJwtVerifiableCredential } from "../vc/sd-jwt-vc/W3cV2SdJwtVerifiableCredential.mjs";
 import { W3cV2EnvelopedVerifiableCredential } from "../vc/models/credential/W3cV2EnvelopedVerifiableCredential.mjs";
 import { W3cV2Presentation } from "../vc/models/presentation/W3cV2Presentation.mjs";
@@ -128,7 +129,7 @@ let DcqlService = class DcqlService {
 			return {
 				credential_format: queryCredential.format === "dc+sd-jwt" ? "dc+sd-jwt" : "vc+sd-jwt",
 				authority: this.getAuthorityForCredential(presentation),
-				cryptographic_holder_binding: true,
+				cryptographic_holder_binding: presentation.kbJwt !== void 0,
 				vct: presentationVctValues.find((presentationVctValue) => requestedVcts?.includes(presentationVctValue)) ?? presentation.payload.vct,
 				claims: presentation.prettyClaims
 			};
@@ -152,7 +153,7 @@ let DcqlService = class DcqlService {
 		if (presentation.claimFormat === "jwt_vp") {
 			const vc = Array.isArray(presentation.verifiableCredential) ? presentation.verifiableCredential[0] : presentation.verifiableCredential;
 			return {
-				cryptographic_holder_binding: true,
+				cryptographic_holder_binding: hasHolderBinding(void 0, vc.credentialSubjectIds),
 				credential_format: "jwt_vc_json",
 				authority: this.getAuthorityForCredential(vc),
 				claims: vc.jsonCredential,
@@ -163,7 +164,7 @@ let DcqlService = class DcqlService {
 			const vc = Array.isArray(presentation.verifiableCredential) ? presentation.verifiableCredential[0] : presentation.verifiableCredential;
 			const expandedTypes = await agentContext.dependencyManager.resolve(W3cJsonLdCredentialService).getExpandedTypesForCredential(agentContext, vc);
 			return {
-				cryptographic_holder_binding: true,
+				cryptographic_holder_binding: hasHolderBinding(void 0, vc.credentialSubjectIds),
 				credential_format: "ldp_vc",
 				authority: this.getAuthorityForCredential(vc),
 				claims: vc.jsonCredential,
@@ -174,7 +175,7 @@ let DcqlService = class DcqlService {
 			const firstEntry = Array.isArray(presentation.resolvedPresentation.verifiableCredential) ? presentation.resolvedPresentation.verifiableCredential[0] : presentation.resolvedPresentation.verifiableCredential;
 			if (!(firstEntry instanceof W3cV2EnvelopedVerifiableCredential)) throw new DcqlError("Expected an EnvelopedVerifiableCredential entry for vc+sd-jwt presentation claim extraction");
 			return {
-				cryptographic_holder_binding: true,
+				cryptographic_holder_binding: hasW3cV2HolderBinding(firstEntry.envelopedCredential),
 				credential_format: "vc+sd-jwt",
 				authority: this.getAuthorityForCredential(firstEntry),
 				type: asArray(firstEntry.resolvedCredential.type),
@@ -209,28 +210,28 @@ let DcqlService = class DcqlService {
 						credential_format: "dc+sd-jwt",
 						vct: record.getTags().vct,
 						claims,
-						cryptographic_holder_binding: true
+						cryptographic_holder_binding: sdJwtVc.holder !== void 0
 					},
 					...record.extendedVctValues.map((extendedVctValue) => ({
 						authority: this.getAuthorityForCredential(sdJwtVc),
 						credential_format: "dc+sd-jwt",
 						vct: extendedVctValue,
 						claims,
-						cryptographic_holder_binding: true
+						cryptographic_holder_binding: sdJwtVc.holder !== void 0
 					})),
 					{
 						authority: this.getAuthorityForCredential(sdJwtVc),
 						credential_format: "vc+sd-jwt",
 						vct: record.getTags().vct,
 						claims,
-						cryptographic_holder_binding: true
+						cryptographic_holder_binding: sdJwtVc.holder !== void 0
 					},
 					...record.extendedVctValues.map((extendedVctValue) => ({
 						authority: this.getAuthorityForCredential(sdJwtVc),
 						credential_format: "vc+sd-jwt",
 						vct: extendedVctValue,
 						claims,
-						cryptographic_holder_binding: true
+						cryptographic_holder_binding: sdJwtVc.holder !== void 0
 					}))
 				];
 			}
@@ -242,14 +243,14 @@ let DcqlService = class DcqlService {
 					authority: this.getAuthorityForCredential(firstCredential),
 					type: record.getTags().expandedTypes ?? [],
 					claims: firstCredential.jsonCredential,
-					cryptographic_holder_binding: true
+					cryptographic_holder_binding: hasHolderBinding(void 0, firstCredential.credentialSubjectIds)
 				};
 				return {
 					credential_format: "jwt_vc_json",
 					authority: this.getAuthorityForCredential(firstCredential),
 					type: firstCredential.type,
 					claims: firstCredential.jsonCredential,
-					cryptographic_holder_binding: true
+					cryptographic_holder_binding: hasHolderBinding(void 0, firstCredential.credentialSubjectIds)
 				};
 			}
 			if (record.type === "W3cV2CredentialRecord") {
@@ -260,7 +261,7 @@ let DcqlService = class DcqlService {
 					authority: this.getAuthorityForCredential(firstCredential),
 					type: asArray(firstCredential.resolvedCredential.type),
 					claims: firstCredential.resolvedCredential.toJSON(),
-					cryptographic_holder_binding: true
+					cryptographic_holder_binding: hasW3cV2HolderBinding(firstCredential)
 				};
 			}
 			throw new DcqlError("Unsupported record type");
@@ -572,7 +573,7 @@ let DcqlService = class DcqlService {
 				});
 				const w3cV2CredentialService = agentContext.resolve(W3cV2CredentialService);
 				const w3cV2Presentation = new W3cV2Presentation({
-					holder: presentationToCreate.credentialRecord.firstCredential.resolvedCredential.credentialSchemaIds[0],
+					holder: presentationToCreate.credentialRecord.firstCredential.resolvedCredential.credentialSubjectIds[0],
 					verifiableCredential: [W3cV2EnvelopedVerifiableCredential.fromVerifiableCredential(sdJwtVc)]
 				});
 				const signedPresentation = await w3cV2CredentialService.signPresentation(agentContext, {
@@ -622,6 +623,17 @@ let DcqlService = class DcqlService {
 	}
 };
 DcqlService = __decorate([injectable()], DcqlService);
+/**
+* A credential is bound to its holder through a key (`cnf`) or its subject. Verifying a presentation
+* checks that the presenter proves the binding. A subject id that is not a DID also counts, so such
+* a credential can't be presented.
+*/
+function hasHolderBinding(cnf, credentialSubjectIds) {
+	return cnf !== void 0 || credentialSubjectIds.length > 0;
+}
+function hasW3cV2HolderBinding(credential) {
+	return hasHolderBinding(credential instanceof W3cV2SdJwtVerifiableCredential ? credential.sdJwt.prettyClaims.cnf : credential instanceof W3cV2JwtVerifiableCredential ? credential.jwt.payload.additionalClaims.cnf : void 0, credential.resolvedCredential.credentialSubjectIds);
+}
 //#endregion
 export { DcqlService };