@did-btcr2/method 0.59.0 → 0.61.0

package/dist/types/core/btcr2-update.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"btcr2-update.d.ts","sourceRoot":"","sources":["../../../src/core/btcr2-update.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAElG;;;;;;;;GAQG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC;;;OAGG;IACH,UAAU,EAAE,MAAM,EAAE,CAAC;IAErB;;;;OAIG;IACH,KAAK,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAE7B;;;;OAIG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;;;OAIG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,uBAAuB,GAAG,wBAAwB,GAAG;IAC/D,gFAAgF;IAChF,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,4FAA4F;IAC5F,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GAAG,mBAAmB,GAAG;IACpD,sFAAsF;IACtF,KAAK,EAAE,uBAAuB,CAAC;CAChC,CAAC;AAEF,qCAAqC;AACrC,MAAM,MAAM,WAAW,GAAG,mBAAmB,GAAG,iBAAiB,CAAC;AAElE;;;;;GAKG;AACH,MAAM,MAAM,wBAAwB,GAAG,yBAAyB,GAAG;IACjE,gFAAgF;IAChF,UAAU,EAAE,MAAM,EAAE,CAAC;IAErB,gFAAgF;IAChF,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,4FAA4F;IAC5F,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC"}
+{"version":3,"file":"btcr2-update.d.ts","sourceRoot":"","sources":["../../../src/core/btcr2-update.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAElG;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,2JAKtB,CAAC;AAEZ;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,EACd,QAAQ,GAAE,SAAS,MAAM,EAAyB,GACjD,KAAK,IAAI,MAAM,EAAE,CAInB;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC;;;OAGG;IACH,UAAU,EAAE,MAAM,EAAE,CAAC;IAErB;;;;OAIG;IACH,KAAK,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;IAE7B;;;;OAIG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;;;OAIG;IACH,UAAU,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,uBAAuB,GAAG,wBAAwB,GAAG;IAC/D,gFAAgF;IAChF,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,4FAA4F;IAC5F,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GAAG,mBAAmB,GAAG;IACpD,sFAAsF;IACtF,KAAK,EAAE,uBAAuB,CAAC;CAChC,CAAC;AAEF,qCAAqC;AACrC,MAAM,MAAM,WAAW,GAAG,mBAAmB,GAAG,iBAAiB,CAAC;AAElE;;;;;GAKG;AACH,MAAM,MAAM,wBAAwB,GAAG,yBAAyB,GAAG;IACjE,6EAA6E;IAC7E,UAAU,EAAE,MAAM,EAAE,CAAC;IAErB,gFAAgF;IAChF,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,4FAA4F;IAC5F,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC"}

package/dist/types/core/identifier.d.ts

@@ -1,4 +1,5 @@
 import type { Bytes, DocumentBytes, KeyBytes, SchnorrKeyPairObject } from '@did-btcr2/common';
+import { IdentifierTypes } from '@did-btcr2/common';
 import { CompressedSecp256k1PublicKey } from '@did-btcr2/keypair';
 import type { DidCreateOptions } from '../did-btcr2.js';
 /**
@@ -24,6 +25,52 @@ export interface IdentifierComponents {
     network: string;
     genesisBytes: Bytes;
 }
+/**
+ * The name of one check that {@link Identifier.validate} runs. The names are in run order.
+ * @typedef {string} IdentifierCheckName
+ */
+export type IdentifierCheckName = 'prefix' | 'lowercase' | 'bech32m' | 'version' | 'network' | 'genesisBytes' | 'roundTrip' | 'genesisBytesMatch' | 'genesisDocument';
+/**
+ * The result of one check that {@link Identifier.validate} ran.
+ * @interface IdentifierCheck
+ * @property {IdentifierCheckName} name The name of the check.
+ * @property {boolean} ok True if the check passed.
+ * @property {string} [detail] What the check found.
+ */
+export interface IdentifierCheck {
+    name: IdentifierCheckName;
+    ok: boolean;
+    detail?: string;
+}
+/**
+ * Options for {@link Identifier.validate}.
+ * @interface IdentifierValidateOptions
+ * @property {Bytes} [genesisBytes] The genesis bytes that the identifier must encode: the 33-byte
+ *   compressed public key of a KEY identifier, or the 32-byte genesis document hash of an EXTERNAL
+ *   identifier. If present, the report includes the `genesisBytesMatch` check.
+ * @property {object} [genesisDocument] The genesis document of an EXTERNAL identifier.
+ *   If present, the report includes the `genesisDocument` check.
+ */
+export interface IdentifierValidateOptions {
+    genesisBytes?: Bytes;
+    genesisDocument?: object;
+}
+/**
+ * The report that {@link Identifier.validate} returns.
+ * @interface IdentifierReport
+ * @property {string} did The identifier that was verified.
+ * @property {boolean} valid True if every check passed.
+ * @property {IdentifierTypes} [idType] The identifier type, known after the `bech32m` check.
+ * @property {string} [network] The network name, known after the `network` check.
+ * @property {Array<IdentifierCheck>} checks The checks that ran, in run order. The run stops at the first failed check.
+ */
+export interface IdentifierReport {
+    did: string;
+    valid: boolean;
+    idType?: IdentifierTypes;
+    network?: string;
+    checks: Array<IdentifierCheck>;
+}
 /**
  * Implements {@link https://dcdpr.github.io/did-btcr2/#syntax | 3 Syntax}.
  * A did:btcr2 DID consists of a did:btcr2 prefix, followed by an id-bech32 value, which is a Bech32m encoding of:
@@ -60,6 +107,26 @@ export declare class Identifier {
      * @throws {DidErrorCode.MethodNotSupported} if the method is not supported
      */
     static decode(identifier: string): DidComponents;
+    /**
+     * Validates that a did:btcr2 identifier conforms to
+     * {@link https://dcdpr.github.io/did-btcr2/#didbtcr2-identifier-decoding | 3.3 did:btcr2 Identifier Decoding}
+     * and returns a report of the checks. The method does not throw on an invalid identifier.
+     *
+     * The checks run in this order: `prefix`, `lowercase`, `bech32m`, `version`, `network`,
+     * `genesisBytes`, `roundTrip`, `genesisBytesMatch`, and `genesisDocument`. The run stops at the
+     * first failed check. The `network` check accepts a named network only: a reserved value (6 to
+     * 11) and a custom value (12 to 15) fail, because this implementation supports no custom network.
+     * The `genesisBytesMatch` check runs only if `options.genesisBytes` is present: the supplied bytes
+     * must equal the genesis bytes of the identifier, for a KEY or an EXTERNAL identifier. The
+     * `genesisDocument` check runs only if `options.genesisDocument` is present. For an EXTERNAL
+     * identifier it confirms that the document is a valid Genesis Document and that its canonical
+     * SHA-256 hash equals the genesis bytes. For a KEY identifier it fails.
+     *
+     * @param {string} identifier The did:btcr2 identifier to validate.
+     * @param {IdentifierValidateOptions} [options] The validation options.
+     * @returns {IdentifierReport} The report. See {@link IdentifierReport} for details.
+     */
+    static validate(identifier: string, options?: IdentifierValidateOptions): IdentifierReport;
     /**
      * Generates a new did:btcr2 identifier based on a newly generated key pair.
      * @returns {string} The new did:btcr2 identifier.

package/dist/types/core/identifier.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"identifier.d.ts","sourceRoot":"","sources":["../../../src/core/identifier.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAE9F,OAAO,EAAE,4BAA4B,EAAkB,MAAM,oBAAoB,CAAC;AAElF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAExD;;;;;GAKG;AACH,MAAM,WAAW,aAAc,SAAQ,oBAAoB;IACvD,GAAG,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,oBAAoB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,KAAK,CAAC;CACvB;AACD;;;;;;;;;;GAUG;AACH,qBAAa,UAAU;IACrB;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,GAAG,aAAa,EAAE,OAAO,EAAE,gBAAgB,GAAG,MAAM;IAuDxF;;;;;;;OAOG;IACH,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,aAAa;IAsFhD;;;OAGG;IACH,MAAM,CAAC,QAAQ,IAAI;QAAE,OAAO,EAAE,oBAAoB,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE;IAYjE;;;;;OAKG;IACH,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,4BAA4B;IAW9D;;;;OAIG;IACH,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;CAQ5C"}
+{"version":3,"file":"identifier.d.ts","sourceRoot":"","sources":["../../../src/core/identifier.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC9F,OAAO,EAIL,eAAe,EAGhB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,4BAA4B,EAAkB,MAAM,oBAAoB,CAAC;AAGlF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAKxD;;;;;GAKG;AACH,MAAM,WAAW,aAAc,SAAQ,oBAAoB;IACvD,GAAG,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,oBAAoB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,KAAK,CAAC;CACvB;AAED;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAC3B,QAAQ,GACR,WAAW,GACX,SAAS,GACT,SAAS,GACT,SAAS,GACT,cAAc,GACd,WAAW,GACX,mBAAmB,GACnB,iBAAiB,CAAC;AAEtB;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC5B,IAAI,EAAE,mBAAmB,CAAC;IAC1B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,yBAAyB;IACtC,YAAY,CAAC,EAAE,KAAK,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;CAClC;AAKD;;;;;;;;;;GAUG;AACH,qBAAa,UAAU;IACrB;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,GAAG,aAAa,EAAE,OAAO,EAAE,gBAAgB,GAAG,MAAM;IAuDxF;;;;;;;OAOG;IACH,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,aAAa;IAyFhD;;;;;;;;;;;;;;;;;;OAkBG;IACH,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,GAAE,yBAA8B,GAAG,gBAAgB;IAqJ9F;;;OAGG;IACH,MAAM,CAAC,QAAQ,IAAI;QAAE,OAAO,EAAE,oBAAoB,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE;IAYjE;;;;;OAKG;IACH,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,4BAA4B;IAW9D;;;;OAIG;IACH,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;CAQ5C"}

package/dist/types/core/resolver.d.ts

@@ -165,7 +165,8 @@ export declare class Resolver {
      */
     private static confirmDuplicate;
     /**
-     * Implements subsection {@link https://dcdpr.github.io/did-btcr2/operations/resolve.html#apply-update | 7.2.f.3 Apply Update}.
+     * Implements subsection {@link https://dcdpr.github.io/did-btcr2/operations/resolve.html#apply-update | 7.2.f.3 Apply Update}
+     * and its step {@link https://dcdpr.github.io/did-btcr2/operations/resolve.html#check-update-proof | Check update.proof}.
      * @param {DidDocument} currentDocument The current DID Document to apply the update to.
      * @param {SignedBTCR2Update} update The BTCR2 Signed Update to apply.
      * @returns {DidDocument} The updated DID Document after applying the update.

package/dist/types/core/resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../../../src/core/resolver.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,EACV,iBAAiB,EAElB,MAAM,mBAAmB,CAAC;AAS3B,OAAO,EAAE,WAAW,EAAwB,MAAM,0BAA0B,CAAC;AAE7E,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEzF,OAAO,KAAK,EAAE,aAAa,EAAC,MAAM,iBAAiB,CAAC;AAEpD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAGxE;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAElC;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,WAAW,CAAC;IACzB,QAAQ,EAAE;QACR,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,OAAO,CAAC;KACvB,CAAA;CACF;AAED,4EAA4E;AAC5E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,uEAAuE;IACvE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,4EAA4E;AAC5E,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,yFAAyF;IACzF,QAAQ,CAAC,cAAc,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;CACvD;AAED,2FAA2F;AAC3F,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,0DAA0D;IAC1D,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,oDAAoD;IACpD,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,sFAAsF;AACtF,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,uDAAuD;IACvD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,oDAAoD;IACpD,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,2EAA2E;AAC3E,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,+DAA+D;IAC/D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,oDAAoD;IACpD,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,gFAAgF;AAChF,MAAM,MAAM,QAAQ,GAAG,mBAAmB,GAAG,iBAAiB,GAAG,mBAAmB,GAAG,gBAAgB,GAAG,YAAY,CAAC;AAEvH;;;GAGG;AACH,MAAM,MAAM,aAAa,GACrB;IAAE,MAAM,EAAE,iBAAiB,CAAC;IAAC,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAA;CAAE,GAC7D;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,qBAAqB,CAAA;CAAE,CAAC;AAE1D;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,KAAK,CAAC,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC,CAAC;IACnD,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;CACxB;AAkED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,QAAQ;;IAqDnB;;OAEG;gBAED,aAAa,EAAE,aAAa,EAC5B,WAAW,EAAE,WAAW,EACxB,eAAe,EAAE,WAAW,GAAG,IAAI,EACnC,OAAO,CAAC,EAAE;QACR,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB;IA0BH;;;;OAIG;IACH,MAAM,CAAC,aAAa,CAAC,aAAa,EAAE,aAAa,GAAG,WAAW;IA8B/D;;;;;;OAMG;IACH,MAAM,CAAC,QAAQ,CACb,aAAa,EAAE,aAAa,EAC5B,eAAe,EAAE,MAAM,GACtB,WAAW;IA2Bd;;;;OAIG;IACH,MAAM,CAAC,WAAW,CAAC,OAAO,GAAE,OAAuB,GAAG,WAAW;IA0BjE;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,OAAO,CACZ,eAAe,EAAE,WAAW,EAC5B,eAAe,EAAE,KAAK,CAAC,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC,EAC1D,WAAW,CAAC,EAAE,MAAM,EACpB,SAAS,CAAC,EAAE,MAAM,EAClB,eAAe,GAAE;QAAE,gBAAgB,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,SAAS,EAAE,CAAA;KAC7B,GAC7C,qBAAqB;IAgIxB;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,CAAC,gBAAgB;IA+C/B;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,CAAC,WAAW;IA4G1B;;;;;;OAMG;IACH,OAAO,IAAI,aAAa;IAyMxB;;;;;;;;OAQG;IACH,OAAO,CAAC,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IACtD,OAAO,CAAC,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,GAAG,IAAI;IACrF,OAAO,CAAC,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,eAAe,GAAG,IAAI;IAC/D,OAAO,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,iBAAiB,GAAG,IAAI;IAC9D,OAAO,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,GAAG,IAAI;CAuFlD"}
+{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../../../src/core/resolver.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,EACV,iBAAiB,EAElB,MAAM,mBAAmB,CAAC;AAU3B,OAAO,EAAE,WAAW,EAAwB,MAAM,0BAA0B,CAAC;AAE7E,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEzF,OAAO,KAAK,EAAE,aAAa,EAAC,MAAM,iBAAiB,CAAC;AAEpD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAGxE;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAElC;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,WAAW,CAAC;IACzB,QAAQ,EAAE;QACR,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,OAAO,CAAC;KACvB,CAAA;CACF;AAED,4EAA4E;AAC5E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,uEAAuE;IACvE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,4EAA4E;AAC5E,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,yFAAyF;IACzF,QAAQ,CAAC,cAAc,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;CACvD;AAED,2FAA2F;AAC3F,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,0DAA0D;IAC1D,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,oDAAoD;IACpD,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,sFAAsF;AACtF,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,uDAAuD;IACvD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,oDAAoD;IACpD,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,2EAA2E;AAC3E,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,+DAA+D;IAC/D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,oDAAoD;IACpD,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,gFAAgF;AAChF,MAAM,MAAM,QAAQ,GAAG,mBAAmB,GAAG,iBAAiB,GAAG,mBAAmB,GAAG,gBAAgB,GAAG,YAAY,CAAC;AAEvH;;;GAGG;AACH,MAAM,MAAM,aAAa,GACrB;IAAE,MAAM,EAAE,iBAAiB,CAAC;IAAC,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAA;CAAE,GAC7D;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,qBAAqB,CAAA;CAAE,CAAC;AAE1D;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,KAAK,CAAC,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC,CAAC;IACnD,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;CACxB;AAkED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,QAAQ;;IAqDnB;;OAEG;gBAED,aAAa,EAAE,aAAa,EAC5B,WAAW,EAAE,WAAW,EACxB,eAAe,EAAE,WAAW,GAAG,IAAI,EACnC,OAAO,CAAC,EAAE;QACR,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB;IA0BH;;;;OAIG;IACH,MAAM,CAAC,aAAa,CAAC,aAAa,EAAE,aAAa,GAAG,WAAW;IA8B/D;;;;;;OAMG;IACH,MAAM,CAAC,QAAQ,CACb,aAAa,EAAE,aAAa,EAC5B,eAAe,EAAE,MAAM,GACtB,WAAW;IA2Bd;;;;OAIG;IACH,MAAM,CAAC,WAAW,CAAC,OAAO,GAAE,OAAuB,GAAG,WAAW;IA0BjE;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,OAAO,CACZ,eAAe,EAAE,WAAW,EAC5B,eAAe,EAAE,KAAK,CAAC,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC,EAC1D,WAAW,CAAC,EAAE,MAAM,EACpB,SAAS,CAAC,EAAE,MAAM,EAClB,eAAe,GAAE;QAAE,gBAAgB,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,SAAS,EAAE,CAAA;KAC7B,GAC7C,qBAAqB;IAgIxB;;;;;;OAMG;IACH,OAAO,CAAC,MAAM,CAAC,gBAAgB;IA+C/B;;;;;;;OAOG;IACH,OAAO,CAAC,MAAM,CAAC,WAAW;IA8H1B;;;;;;OAMG;IACH,OAAO,IAAI,aAAa;IAyMxB;;;;;;;;OAQG;IACH,OAAO,CAAC,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IACtD,OAAO,CAAC,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,GAAG,IAAI;IACrF,OAAO,CAAC,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,eAAe,GAAG,IAAI;IAC/D,OAAO,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,iBAAiB,GAAG,IAAI;IAC9D,OAAO,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,GAAG,IAAI;CAuFlD"}

package/dist/types/core/updater.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"updater.d.ts","sourceRoot":"","sources":["../../../src/core/updater.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAGxD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAA4B,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC1G,OAAO,EAAe,KAAK,gBAAgB,EAAE,KAAK,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAC1G,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAElE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAI5D;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,8DAA8D;IAC9D,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,+CAA+C;IAC/C,QAAQ,CAAC,cAAc,EAAE,mBAAmB,CAAC;CAC9C;AAED;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,yEAAyE;IACzE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,kDAAkD;IAClD,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;CACvC;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,yFAAyF;IACzF,SAAS,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,gGAAgG;IAChG,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,6CAA6C;IAC7C,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC;;;OAGG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,qFAAqF;AACrF,MAAM,MAAM,eAAe,GAAG,cAAc,GAAG,WAAW,GAAG,aAAa,CAAC;AAE3E;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,qEAAqE;IACrE,YAAY,EAAE,iBAAiB,CAAC;CACjC;AAED;;;GAGG;AACH,MAAM,MAAM,YAAY,GACpB;IAAE,MAAM,EAAE,iBAAiB,CAAC;IAAC,KAAK,EAAE,aAAa,CAAC,eAAe,CAAC,CAAA;CAAE,GACpE;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,aAAa,CAAA;CAAE,CAAC;AAgBlD;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,cAAc,EAAE,gBAAgB,CAAC;IACjC,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,qBAAqB,CAAC;IAC1C,aAAa,EAAE,aAAa,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,qBAAa,OAAO;;IAQlB;;OAEG;gBACS,MAAM,EAAE,aAAa;IAYjC;;;;;;;;OAQG;IACH,MAAM,CAAC,SAAS,CACd,cAAc,EAAE,gBAAgB,EAChC,OAAO,EAAE,cAAc,EAAE,EACzB,eAAe,EAAE,MAAM,GACtB,mBAAmB;IAuCtB;;;;;;;;OAQG;IACH,MAAM,CAAC,IAAI,CACT,GAAG,EAAE,MAAM,EACX,cAAc,EAAE,mBAAmB,EACnC,kBAAkB,EAAE,qBAAqB,EACzC,MAAM,EAAE,MAAM,GACb,iBAAiB;IAqEpB;;;;;;;;;;;;;;;OAeG;WACU,QAAQ,CACnB,aAAa,EAAE,aAAa,EAC5B,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,iBAAiB,EACzB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,iBAAiB,EAC1B,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,eAAe,CAAC;IAa3B;;;;OAIG;IACH,OAAO,IAAI,YAAY;IAkEvB;;;;;;OAMG;IACH,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IACjD,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,IAAI;IACtD,OAAO,CAAC,IAAI,EAAE,aAAa,GAAG,IAAI;CAkEnC"}
+{"version":3,"file":"updater.d.ts","sourceRoot":"","sources":["../../../src/core/updater.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAGxD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAA4B,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAE1G,OAAO,EAAe,KAAK,gBAAgB,EAAE,KAAK,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAC1G,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAElE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAI5D;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,8DAA8D;IAC9D,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,+CAA+C;IAC/C,QAAQ,CAAC,cAAc,EAAE,mBAAmB,CAAC;CAC9C;AAED;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,yEAAyE;IACzE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,kDAAkD;IAClD,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;CACvC;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,yFAAyF;IACzF,SAAS,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,gGAAgG;IAChG,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,6CAA6C;IAC7C,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC;;;OAGG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,qFAAqF;AACrF,MAAM,MAAM,eAAe,GAAG,cAAc,GAAG,WAAW,GAAG,aAAa,CAAC;AAE3E;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,qEAAqE;IACrE,YAAY,EAAE,iBAAiB,CAAC;CACjC;AAED;;;GAGG;AACH,MAAM,MAAM,YAAY,GACpB;IAAE,MAAM,EAAE,iBAAiB,CAAC;IAAC,KAAK,EAAE,aAAa,CAAC,eAAe,CAAC,CAAA;CAAE,GACpE;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,aAAa,CAAA;CAAE,CAAC;AAgBlD;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,cAAc,EAAE,gBAAgB,CAAC;IACjC,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,qBAAqB,CAAC;IAC1C,aAAa,EAAE,aAAa,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AACH,qBAAa,OAAO;;IAQlB;;OAEG;gBACS,MAAM,EAAE,aAAa;IAYjC;;;;;;;;OAQG;IACH,MAAM,CAAC,SAAS,CACd,cAAc,EAAE,gBAAgB,EAChC,OAAO,EAAE,cAAc,EAAE,EACzB,eAAe,EAAE,MAAM,GACtB,mBAAmB;IAoCtB;;;;;;;;OAQG;IACH,MAAM,CAAC,IAAI,CACT,GAAG,EAAE,MAAM,EACX,cAAc,EAAE,mBAAmB,EACnC,kBAAkB,EAAE,qBAAqB,EACzC,MAAM,EAAE,MAAM,GACb,iBAAiB;IAmEpB;;;;;;;;;;;;;;;OAeG;WACU,QAAQ,CACnB,aAAa,EAAE,aAAa,EAC5B,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,iBAAiB,EACzB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,iBAAiB,EAC1B,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,eAAe,CAAC;IAa3B;;;;OAIG;IACH,OAAO,IAAI,YAAY;IAkEvB;;;;;;OAMG;IACH,OAAO,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI;IACjD,OAAO,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,IAAI;IACtD,OAAO,CAAC,IAAI,EAAE,aAAa,GAAG,IAAI;CAkEnC"}

package/dist/types/utils/appendix.d.ts

@@ -93,9 +93,10 @@ export declare class Appendix {
      * ```
      * {
      *  "@context": [
+     *   "https://w3id.org/json-ld-patch/v1",
      *   "https://w3id.org/zcap/v1",
      *   "https://w3id.org/security/data-integrity/v2",
-     *   "https://w3id.org/json-ld-patch/v1"
+     *   "https://btcr2.dev/context/v1"
      *  ],
      *  "patch": [
      *   {

package/dist/types/utils/appendix.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"appendix.d.ts","sourceRoot":"","sources":["../../../src/utils/appendix.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,WAAW,EACX,UAAU,EACV,qBAAqB,EAAC,MAAM,YAAY,CAAC;AAO3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D;;;;;GAKG;AACH,qBAAa,QAAQ;IACnB;;;;;;;;;;;OAWG;WACW,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAM7E;;;;;;;;;;;;;;;;;OAiBG;WACW,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAOnF;;;;OAIG;WACW,uBAAuB,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,qBAAqB;IAcjF;;;;OAIG;WACW,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,UAAU;IAW3D;;;;;OAKG;WACW,sBAAsB,CAAC,WAAW,EAAE,WAAW,GAAG,qBAAqB,EAAE;IAgBvF;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,MAAM,CAAC,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,cAAc;IAU/D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAuCG;WACW,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,cAAc;CA8CtE"}
+{"version":3,"file":"appendix.d.ts","sourceRoot":"","sources":["../../../src/utils/appendix.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,WAAW,EACX,UAAU,EACV,qBAAqB,EAAC,MAAM,YAAY,CAAC;AAO3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D;;;;;GAKG;AACH,qBAAa,QAAQ;IACnB;;;;;;;;;;;OAWG;WACW,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAM7E;;;;;;;;;;;;;;;;;OAiBG;WACW,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAOnF;;;;OAIG;WACW,uBAAuB,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,qBAAqB;IAcjF;;;;OAIG;WACW,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,UAAU;IAW3D;;;;;OAKG;WACW,sBAAsB,CAAC,WAAW,EAAE,WAAW,GAAG,qBAAqB,EAAE;IAgBvF;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,MAAM,CAAC,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,cAAc;IAU/D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAwCG;WACW,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,cAAc;CA8CtE"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@did-btcr2/method",
-  "version": "0.59.0",
+  "version": "0.61.0",
   "type": "module",
   "description": "Reference implementation for the did:btcr2 DID method written in TypeScript and JavaScript. did:btcr2 is a censorship resistant DID Method using the Bitcoin blockchain as a Verifiable Data Registry to announce changes to the DID document. This is the core method implementation for the did-btcr2-js monorepo.",
   "main": "./dist/cjs/index.js",
@@ -69,11 +69,11 @@
     "@scure/base": "^1.2.6",
     "@scure/btc-signer": "^1.8.1",
     "@web5/dids": "^1.2.0",
-    "@did-btcr2/bitcoin": "^0.11.0",
     "@did-btcr2/cryptosuite": "^10.0.0",
-    "@did-btcr2/common": "^9.4.0",
     "@did-btcr2/keypair": "^0.13.1",
-    "@did-btcr2/smt": "^0.3.0"
+    "@did-btcr2/smt": "^0.3.0",
+    "@did-btcr2/bitcoin": "^0.11.0",
+    "@did-btcr2/common": "^9.4.0"
   },
   "devDependencies": {
     "@eslint/js": "^9.39.4",

package/src/core/btcr2-update.ts

@@ -1,6 +1,39 @@
 import type { PatchOperation } from '@did-btcr2/common';
 import type { DataIntegrityProofObject, DataIntegrityProofOptions } from '@did-btcr2/cryptosuite';
 
+/**
+ * The `@context` array of a BTCR2 Update. The specification pins the members and their
+ * order. The array is part of the bytes that the JSON Document Hashing algorithm hashes
+ * and that the proof signs, so an update with a different array is a different update,
+ * and a conformant resolver rejects it. The proof of a signed update carries the same
+ * array. See
+ * {@link https://dcdpr.github.io/did-btcr2/data-structures.html#btcr2-unsigned-update | BTCR2 Unsigned Update (data structure)}.
+ */
+export const BTCR2_UPDATE_CONTEXT = Object.freeze([
+  'https://w3id.org/json-ld-patch/v1',
+  'https://w3id.org/zcap/v1',
+  'https://w3id.org/security/data-integrity/v2',
+  'https://btcr2.dev/context/v1',
+] as const);
+
+/**
+ * True if `value` is an array with the same context URLs as `expected`, in the same
+ * order, and with no other member. This is the equality rule of the specification for
+ * two `@context` arrays. `expected` defaults to {@link BTCR2_UPDATE_CONTEXT}.
+ *
+ * @param {unknown} value The `@context` value to check.
+ * @param {readonly string[]} expected The array that `value` must equal.
+ * @returns {boolean} True if the two arrays are equal.
+ */
+export function isBtcr2UpdateContext(
+  value: unknown,
+  expected: readonly string[] = BTCR2_UPDATE_CONTEXT
+): value is string[] {
+  return Array.isArray(value)
+    && value.length === expected.length
+    && value.every((url, i) => url === expected[i]);
+}
+
 /**
  * A {@link https://dcdpr.github.io/did-btcr2/terminology.html#btcr2-update | BTCR2 Update} without a data integrity proof.
  * See {@link https://dcdpr.github.io/did-btcr2/data-structures.html#btcr2-unsigned-update | BTCR2 Unsigned Update (data structure)}.
@@ -12,8 +45,8 @@ import type { DataIntegrityProofObject, DataIntegrityProofOptions } from '@did-b
  */
 export type UnsignedBTCR2Update = {
   /**
-   * JSON-LD context URIs for interpreting this payload, including contexts
-   * for ZCAP (capabilities), Data Integrity proofs, and JSON-LD patch ops.
+   * The JSON-LD context array of the update: exactly the members of
+   * {@link BTCR2_UPDATE_CONTEXT}, in that order.
    */
   '@context': string[];
 
@@ -76,7 +109,7 @@ export type BTCR2Update = UnsignedBTCR2Update | SignedBTCR2Update;
  * {@link https://dcdpr.github.io/did-btcr2/data-structures.html#data-integrity-config | Data Integrity Config}.
  */
 export type Btcr2DataIntegrityConfig = DataIntegrityProofOptions & {
-  /** JSON-LD context URIs for the proof (ZCAP, Data Integrity, JSON-LD patch). */
+  /** The same array as the update `@context`: {@link BTCR2_UPDATE_CONTEXT}. */
   '@context': string[];
 
   /** The root capability being invoked, e.g. `urn:zcap:root:<urlencoded-did>`. */

package/src/core/identifier.ts

@@ -1,8 +1,19 @@
 import type { Bytes, DocumentBytes, KeyBytes, SchnorrKeyPairObject } from '@did-btcr2/common';
-import { BitcoinNetworkNames, IdentifierError, IdentifierTypes, INVALID_DID, METHOD_NOT_SUPPORTED } from '@did-btcr2/common';
+import {
+  BitcoinNetworkNames,
+  canonicalHashBytes,
+  IdentifierError,
+  IdentifierTypes,
+  INVALID_DID,
+  METHOD_NOT_SUPPORTED
+} from '@did-btcr2/common';
 import { CompressedSecp256k1PublicKey, SchnorrKeyPair } from '@did-btcr2/keypair';
-import { bech32m } from '@scure/base';
+import { equalBytes } from '@noble/curves/utils.js';
+import { bech32m, hex } from '@scure/base';
 import type { DidCreateOptions } from '../did-btcr2.js';
+// did-document.js imports this module. Both modules use the other only inside a
+// method body, never at module evaluation, so the cycle is safe in ESM and CJS.
+import { GenesisDocument, ID_PLACEHOLDER_VALUE } from '../utils/did-document.js';
 
 /**
  * Components of a did:btcr2 identifier.
@@ -28,6 +39,69 @@ export interface IdentifierComponents {
     network: string;
     genesisBytes: Bytes;
 }
+
+/**
+ * The name of one check that {@link Identifier.validate} runs. The names are in run order.
+ * @typedef {string} IdentifierCheckName
+ */
+export type IdentifierCheckName =
+  | 'prefix'
+  | 'lowercase'
+  | 'bech32m'
+  | 'version'
+  | 'network'
+  | 'genesisBytes'
+  | 'roundTrip'
+  | 'genesisBytesMatch'
+  | 'genesisDocument';
+
+/**
+ * The result of one check that {@link Identifier.validate} ran.
+ * @interface IdentifierCheck
+ * @property {IdentifierCheckName} name The name of the check.
+ * @property {boolean} ok True if the check passed.
+ * @property {string} [detail] What the check found.
+ */
+export interface IdentifierCheck {
+    name: IdentifierCheckName;
+    ok: boolean;
+    detail?: string;
+}
+
+/**
+ * Options for {@link Identifier.validate}.
+ * @interface IdentifierValidateOptions
+ * @property {Bytes} [genesisBytes] The genesis bytes that the identifier must encode: the 33-byte
+ *   compressed public key of a KEY identifier, or the 32-byte genesis document hash of an EXTERNAL
+ *   identifier. If present, the report includes the `genesisBytesMatch` check.
+ * @property {object} [genesisDocument] The genesis document of an EXTERNAL identifier.
+ *   If present, the report includes the `genesisDocument` check.
+ */
+export interface IdentifierValidateOptions {
+    genesisBytes?: Bytes;
+    genesisDocument?: object;
+}
+
+/**
+ * The report that {@link Identifier.validate} returns.
+ * @interface IdentifierReport
+ * @property {string} did The identifier that was verified.
+ * @property {boolean} valid True if every check passed.
+ * @property {IdentifierTypes} [idType] The identifier type, known after the `bech32m` check.
+ * @property {string} [network] The network name, known after the `network` check.
+ * @property {Array<IdentifierCheck>} checks The checks that ran, in run order. The run stops at the first failed check.
+ */
+export interface IdentifierReport {
+    did: string;
+    valid: boolean;
+    idType?: IdentifierTypes;
+    network?: string;
+    checks: Array<IdentifierCheck>;
+}
+
+/** The prefix of every did:btcr2 identifier. */
+const DID_PREFIX = 'did:btcr2:';
+
 /**
  * Implements {@link https://dcdpr.github.io/did-btcr2/#syntax | 3 Syntax}.
  * A did:btcr2 DID consists of a did:btcr2 prefix, followed by an id-bech32 value, which is a Bech32m encoding of:
@@ -106,7 +180,7 @@ export class Identifier {
     // byte, then append genesisBytes. Bech32m-encode the result.
     const firstByte = ((version - 1) << 4) | networkValue;
     const dataBytes = new Uint8Array([firstByte, ...genesisBytes]);
-    return `did:btcr2:${bech32m.encodeFromBytes(hrp, dataBytes)}`;
+    return `${DID_PREFIX}${bech32m.encodeFromBytes(hrp, dataBytes)}`;
   }
 
   /**
@@ -143,23 +217,29 @@ export class Identifier {
       throw new IdentifierError(`Invalid method-specific id: ${identifier}`, INVALID_DID, { identifier });
     }
 
-    // 6. Bech32m-decode the id into its hrp and dataBytes.
+    // 6. The method-specific id MUST be lowercase. A Bech32m decoder accepts an all-uppercase
+    //    string, so this check runs before the Bech32m step.
+    if (encoded !== encoded.toLowerCase()) {
+      throw new IdentifierError(`Invalid method-specific id (must be lowercase): ${identifier}`, INVALID_DID, { identifier });
+    }
+
+    // 7. Bech32m-decode the id into its hrp and dataBytes.
     const { prefix: hrp, bytes: dataBytes } = bech32m.decodeToBytes(encoded);
 
-    // 7. The hrp MUST be "k" (KEY) or "x" (EXTERNAL).
+    // 8. The hrp MUST be "k" (KEY) or "x" (EXTERNAL).
     if (!['x', 'k'].includes(hrp)) {
       throw new IdentifierError(`Invalid hrp: ${hrp}`, INVALID_DID, { identifier });
     }
 
-    // 8. There MUST be at least one byte to read btcr2_version and network_value from.
+    // 9. There MUST be at least one byte to read btcr2_version and network_value from.
     if (!dataBytes || dataBytes.length < 1) {
       throw new IdentifierError(`Failed to decode id: ${encoded}`, INVALID_DID, { identifier });
     }
 
-    // 9. Map hrp to idType.
+    // 10. Map hrp to idType.
     const idType = hrp === 'k' ? 'KEY' : 'EXTERNAL';
 
-    // 10. btcr2_version is the high nibble of the first byte and MUST be 0, which is version_number 1.
+    // 11. btcr2_version is the high nibble of the first byte and MUST be 0, which is version_number 1.
     //     The version-extension scheme (a leading nibble of 0xF chaining into further bytes) is reserved
     //     and not valid under v1, so any non-zero high nibble (0x1 through 0xF) is a malformed or forged
     //     identifier and is rejected here. Reading a single flat nibble (rather than looping on 0xF) is
@@ -171,23 +251,20 @@ export class Identifier {
     }
     const version = 1;
 
-    // 11. network_value is the low nibble of the first byte. 0-5 map to named networks; 12-14 are custom
-    //     networks (returned as the numeric values 1-3); 6-11 and 15 are reserved/out-of-range and rejected.
+    // 12. network_value is the low nibble of the first byte. 0-5 map to named networks. 6-11 are
+    //     reserved. 12-15 are custom networks; this implementation supports no custom network, so the
+    //     decoder rejects them, as the specification recommends (ADR 107).
     const networkValue = dataBytes[0] & 0x0F;
-    const networkName = BitcoinNetworkNames[networkValue] as string | undefined;
-    let network: string | number;
-    if (typeof networkName === 'string') {
-      network = networkName;
-    } else if (networkValue >= 12 && networkValue <= 14) {
-      network = networkValue - 11;
-    } else {
-      throw new IdentifierError(`Invalid network: ${networkValue}`, INVALID_DID, { identifier });
+    const network = BitcoinNetworkNames[networkValue] as string | undefined;
+    if (typeof network !== 'string') {
+      const reason = networkValue >= 12 ? 'custom network not supported' : 'reserved';
+      throw new IdentifierError(`Invalid network (${reason}): ${networkValue}`, INVALID_DID, { identifier });
     }
 
-    // 12. genesisBytes is everything after the first byte.
+    // 13. genesisBytes is everything after the first byte.
     const genesisBytes = dataBytes.slice(1);
 
-    // 13. genesisBytes MUST match the identifier type: a valid compressed secp256k1 public key for KEY,
+    // 14. genesisBytes MUST match the identifier type: a valid compressed secp256k1 public key for KEY,
     //     or a 32-byte hash for EXTERNAL.
     if (idType === 'KEY') {
       try {
@@ -199,10 +276,178 @@ export class Identifier {
       throw new IdentifierError(`Invalid genesisBytes: ${genesisBytes}`, INVALID_DID, { identifier });
     }
 
-    // 14. Return idType, hrp, version, network, and genesisBytes.
+    // 15. Return idType, hrp, version, network, and genesisBytes.
     return { idType, hrp, version, network, genesisBytes } as DidComponents;
   }
 
+  /**
+   * Validates that a did:btcr2 identifier conforms to
+   * {@link https://dcdpr.github.io/did-btcr2/#didbtcr2-identifier-decoding | 3.3 did:btcr2 Identifier Decoding}
+   * and returns a report of the checks. The method does not throw on an invalid identifier.
+   *
+   * The checks run in this order: `prefix`, `lowercase`, `bech32m`, `version`, `network`,
+   * `genesisBytes`, `roundTrip`, `genesisBytesMatch`, and `genesisDocument`. The run stops at the
+   * first failed check. The `network` check accepts a named network only: a reserved value (6 to
+   * 11) and a custom value (12 to 15) fail, because this implementation supports no custom network.
+   * The `genesisBytesMatch` check runs only if `options.genesisBytes` is present: the supplied bytes
+   * must equal the genesis bytes of the identifier, for a KEY or an EXTERNAL identifier. The
+   * `genesisDocument` check runs only if `options.genesisDocument` is present. For an EXTERNAL
+   * identifier it confirms that the document is a valid Genesis Document and that its canonical
+   * SHA-256 hash equals the genesis bytes. For a KEY identifier it fails.
+   *
+   * @param {string} identifier The did:btcr2 identifier to validate.
+   * @param {IdentifierValidateOptions} [options] The validation options.
+   * @returns {IdentifierReport} The report. See {@link IdentifierReport} for details.
+   */
+  static validate(identifier: string, options: IdentifierValidateOptions = {}): IdentifierReport {
+    const checks: Array<IdentifierCheck> = [];
+    const pass = (name: IdentifierCheckName, detail?: string): void => {
+      checks.push(detail === undefined ? { name, ok: true } : { name, ok: true, detail });
+    };
+    const fail = (name: IdentifierCheckName, detail: string, partial: Partial<IdentifierReport> = {}): IdentifierReport => {
+      checks.push({ name, ok: false, detail });
+      return { did: identifier, valid: false, ...partial, checks };
+    };
+
+    // prefix: the string is "did:btcr2:" followed by a non-empty method-specific id.
+    if (typeof identifier !== 'string') {
+      return fail('prefix', 'The identifier is not a string.');
+    }
+    const parts = identifier.split(':');
+    if (parts.length !== 3 || parts[0] !== 'did' || parts[1] !== 'btcr2') {
+      return fail('prefix', `The identifier must be "${DID_PREFIX}" followed by the method-specific id.`);
+    }
+    const encoded = parts[2];
+    if (encoded.length === 0) {
+      return fail('prefix', 'The method-specific id is empty.');
+    }
+    pass('prefix');
+
+    // lowercase: the method-specific id is lowercase.
+    if (encoded !== encoded.toLowerCase()) {
+      return fail('lowercase', 'The method-specific id must be lowercase.');
+    }
+    pass('lowercase');
+
+    // bech32m: the id decodes, the hrp is "k" or "x", and the data bytes are not empty.
+    let hrp: string;
+    let dataBytes: Uint8Array;
+    try {
+      ({ prefix: hrp, bytes: dataBytes } = bech32m.decodeToBytes(encoded));
+    } catch (error: unknown) {
+      return fail('bech32m', `Bech32m decoding failed: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    if (hrp !== 'k' && hrp !== 'x') {
+      return fail('bech32m', `The hrp must be "k" or "x", got "${hrp}".`);
+    }
+    const idType = hrp === 'k' ? IdentifierTypes.KEY : IdentifierTypes.EXTERNAL;
+    if (dataBytes.length < 1) {
+      return fail('bech32m', 'The data bytes are empty.', { idType });
+    }
+    pass('bech32m', `hrp "${hrp}", ${dataBytes.length} data bytes`);
+
+    // version: btcr2_version (the high nibble of the first byte) is 0.
+    const btcr2Version = dataBytes[0] >>> 4;
+    if (btcr2Version !== 0) {
+      return fail('version', `btcr2_version must be 0, got ${btcr2Version}.`, { idType });
+    }
+    pass('version', 'btcr2_version 0 (version_number 1)');
+
+    // network: network_value (the low nibble of the first byte) names a network.
+    const networkValue = dataBytes[0] & 0x0F;
+    const network = BitcoinNetworkNames[networkValue] as string | undefined;
+    if (typeof network !== 'string') {
+      const detail = networkValue >= 12
+        ? `network_value ${networkValue} is a custom network, not supported by this implementation.`
+        : `network_value ${networkValue} is reserved.`;
+      return fail('network', detail, { idType });
+    }
+    pass('network', `network_value ${networkValue} (${network})`);
+
+    // genesisBytes: a 33-byte SEC compressed secp256k1 public key (KEY) or a 32-byte hash (EXTERNAL).
+    const genesisBytes = dataBytes.slice(1);
+    if (idType === IdentifierTypes.KEY) {
+      try {
+        new CompressedSecp256k1PublicKey(genesisBytes);
+      } catch {
+        return fail(
+          'genesisBytes',
+          `Expected a 33-byte SEC compressed secp256k1 public key, got ${genesisBytes.length} bytes that are not a valid key.`,
+          { idType, network }
+        );
+      }
+      pass('genesisBytes', '33-byte SEC compressed secp256k1 public key');
+    } else {
+      if (genesisBytes.length !== 32) {
+        return fail('genesisBytes', `Expected a 32-byte SHA-256 hash, got ${genesisBytes.length} bytes.`, { idType, network });
+      }
+      pass('genesisBytes', '32-byte SHA-256 hash');
+    }
+
+    // roundTrip: encoding the decoded components reproduces the identifier.
+    let reEncoded: string;
+    try {
+      reEncoded = Identifier.encode(genesisBytes, { idType, version: 1, network: network as DidCreateOptions['network'] });
+    } catch (error: unknown) {
+      return fail('roundTrip', `Re-encoding failed: ${error instanceof Error ? error.message : String(error)}`, { idType, network });
+    }
+    if (reEncoded !== identifier) {
+      return fail('roundTrip', `Re-encoding produced "${reEncoded}".`, { idType, network });
+    }
+    pass('roundTrip');
+
+    // genesisBytesMatch: only if the caller supplied genesis bytes.
+    if (options.genesisBytes !== undefined) {
+      const supplied = options.genesisBytes;
+      if (!(supplied instanceof Uint8Array)) {
+        return fail('genesisBytesMatch', 'The supplied genesis bytes are not a Uint8Array.', { idType, network });
+      }
+      if (supplied.length !== genesisBytes.length) {
+        return fail(
+          'genesisBytesMatch',
+          `Expected ${genesisBytes.length} genesis bytes for a ${idType} identifier, got ${supplied.length}.`,
+          { idType, network }
+        );
+      }
+      if (!equalBytes(supplied, genesisBytes)) {
+        return fail(
+          'genesisBytesMatch',
+          `The supplied genesis bytes ${hex.encode(supplied)} do not equal the genesis bytes of the identifier ${hex.encode(genesisBytes)}.`,
+          { idType, network }
+        );
+      }
+      pass('genesisBytesMatch', 'The supplied genesis bytes equal the genesis bytes of the identifier.');
+    }
+
+    // genesisDocument: only if the caller supplied a document.
+    if (options.genesisDocument !== undefined) {
+      const document = options.genesisDocument;
+      if (idType === IdentifierTypes.KEY) {
+        return fail('genesisDocument', 'A KEY identifier has no genesis document.', { idType, network });
+      }
+      const id = (document as { id?: unknown }).id;
+      if (id !== ID_PLACEHOLDER_VALUE) {
+        return fail('genesisDocument', `The genesis document id must be "${ID_PLACEHOLDER_VALUE}", got ${JSON.stringify(id)}.`, { idType, network });
+      }
+      try {
+        GenesisDocument.fromJSON(document);
+      } catch (error: unknown) {
+        return fail('genesisDocument', `Invalid genesis document: ${error instanceof Error ? error.message : String(error)}`, { idType, network });
+      }
+      const documentHash = canonicalHashBytes(document);
+      if (!equalBytes(documentHash, genesisBytes)) {
+        return fail(
+          'genesisDocument',
+          `The genesis document hash ${hex.encode(documentHash)} does not equal the genesis bytes ${hex.encode(genesisBytes)}.`,
+          { idType, network }
+        );
+      }
+      pass('genesisDocument', 'The genesis document hashes to the genesis bytes.');
+    }
+
+    return { did: identifier, valid: true, idType, network, checks };
+  }
+
   /**
    * Generates a new did:btcr2 identifier based on a newly generated key pair.
    * @returns {string} The new did:btcr2 identifier.
@@ -249,4 +494,4 @@ export class Identifier {
       return false;
     }
   }
-}
+}

package/src/core/resolver.ts

@@ -20,6 +20,7 @@ import type {
   SignedBTCR2Update,
   UnsignedBTCR2Update
 } from './btcr2-update.js';
+import { BTCR2_UPDATE_CONTEXT, isBtcr2UpdateContext } from './btcr2-update.js';
 import {
   BIP340Cryptosuite,
   BIP340DataIntegrityProof,
@@ -608,7 +609,8 @@ export class Resolver {
   }
 
   /**
-   * Implements subsection {@link https://dcdpr.github.io/did-btcr2/operations/resolve.html#apply-update | 7.2.f.3 Apply Update}.
+   * Implements subsection {@link https://dcdpr.github.io/did-btcr2/operations/resolve.html#apply-update | 7.2.f.3 Apply Update}
+   * and its step {@link https://dcdpr.github.io/did-btcr2/operations/resolve.html#check-update-proof | Check update.proof}.
    * @param {DidDocument} currentDocument The current DID Document to apply the update to.
    * @param {SignedBTCR2Update} update The BTCR2 Signed Update to apply.
    * @returns {DidDocument} The updated DID Document after applying the update.
@@ -618,6 +620,24 @@ export class Resolver {
     currentDocument: DidDocument,
     update: SignedBTCR2Update
   ): DidDocument {
+    // Spec "Check update.proof": the update @context must be the array that the BTCR2
+    // Unsigned Update data structure pins, and the proof @context must equal it, member
+    // for member and in order. The array is inside the hashed and signed bytes, so an
+    // update with another array is a different update. The check runs before signature
+    // verification so that the failure names the array and not the signature.
+    if(!isBtcr2UpdateContext(update['@context'])) {
+      throw new ResolveError(
+        'Invalid update: @context is not the array the specification pins for a BTCR2 Update',
+        INVALID_DID_UPDATE, { context: update['@context'], expected: [ ...BTCR2_UPDATE_CONTEXT ] }
+      );
+    }
+    if(!isBtcr2UpdateContext(update.proof?.['@context'], update['@context'])) {
+      throw new ResolveError(
+        'Invalid update: proof @context does not equal the update @context',
+        INVALID_DID_UPDATE, { proofContext: update.proof?.['@context'], context: update['@context'] }
+      );
+    }
+
     // Get the capability id from the to update proof.
     const capabilityId = update.proof?.capability;
     // Since this field is optional, check that it exists