@e-sig/uaid-exch 0.1.0-preview.0

package/README.md

@@ -0,0 +1,105 @@
+# @e-sig/uaid-exch
+
+**Preview implementation of the proposed [IAASO Exchange Profile (ADR-006)](../../../../iaaso/proposals/ADR-006-exchange-profile.md).** The doctrine is under review by the IAASO standards council. This package is versioned `0.1.0-preview` and its wire format will be re-shaped to conform to the accepted schemas when ADR-006 lands. Use in production only after ADR-006 is Accepted and the schemas ship under `iaaso/artifacts/schemas/exchange/*/v1/`.
+
+Wraps every `@e-sig/core` signing operation as a per-transaction signed authorization on the UUAID Network — subject + issuer proofs, network-side receipt, scope-checked authorization, and a Polygon-anchored batch inclusion proof that anyone can look up at `tx.uuaid.org/<id>`.
+
+**Wire format note.** The current preview uses W3C `DataIntegrityProof` shape (`eddsa-jcs-2022`) as an ergonomic starting point. Per IAASO ADR-002, the accepted wire format for IAASO objects is the **UUAID SignatureEnvelope** (`{alg, keyId?, publicKey?, sig, created?}` — JCS + Ed25519, keccak256 for anchor). When ADR-006 is Accepted, this package will re-emit both shapes (VC shape for external interop, SignatureEnvelope for IAASO conformance) via a single call.
+
+```bash
+npm i @e-sig/uaid-exch @uuaid/sdk
+```
+
+MIT-licensed. Opt-in. If UUAID env is unset, this package is a no-op.
+
+## Why
+
+`@e-sig/core` already produces a real cryptographic PDF signature. `@e-sig/uuaid` already stamps the acting agent's UUAID into the audit log. This package closes the loop by producing a **portable, per-exchange Verifiable Credential** that:
+
+- **Public.** Anyone can `GET https://api.uuaid.org/v1/exchanges/<id>` without a key.
+- **Three-party attested.** Agent proof + Issuer TSP proof + (asynchronously) a Network receipt.
+- **Scope-checked.** The Signing Credential's `scope` (actions, counterparty allowlist, value ceiling, assurance minimum) is machine-enforced by verifiers before the counterparty acts.
+- **Anchored.** Every batch of receipts is Merkle-rooted and anchored to Polygon mainnet by the UUAID registry. Rewriting history means contradicting a public blockchain.
+- **Interoperable.** Compatible with Google AP2 as an extension credential (`uuaid.exchange.v1`); the AP2 Payment Mandate id can be cross-referenced in `external_refs.ap2_payment_mandate`.
+
+## Quickstart
+
+```ts
+import { signDocument } from "@e-sig/core";
+import { UuaidClient } from "@uuaid/sdk";
+import {
+  createExchange,
+  exchangeInputFromEsigEnvelope,
+  UaidNetworkClient,
+} from "@e-sig/uaid-exch";
+
+// 1. Sign the PDF as usual with @e-sig/core.
+const signed = await signDocument({ /* ...as usual... */ });
+
+// 2. Build a UAP-EXCH-1 Exchange over that signing action.
+const network = new UaidNetworkClient({ apiKey: process.env.UUAID_API_KEY! });
+
+const exchange = await createExchange(
+  exchangeInputFromEsigEnvelope({
+    envelopeId: signed.envelopeId,
+    signingCredentialId: process.env.UUAID_SIGNING_CREDENTIAL_ID!,
+    principal: "did:web:acme.com",
+    counterparty: "did:web:customer.com",
+    pdfSha256: `sha256:${signed.pdfSha256Hex}`,
+    pdfSize: signed.signedPdfBytes.length,
+    pdfUri: signed.signedPdfUrl,
+    purpose: "MSA Q3 renewal",
+    value_impact: { currency: "USD", amount: 24000, term_months: 12 },
+    soleControl: {
+      challenge_type: "webauthn-prf",
+      challenge_at: signed.consent.givenAt,
+      challenge_evidence_hash: `sha256:${signed.consent.evidenceSha256Hex}`,
+    },
+  }),
+  agentSigner,   // provide { agentUuaid, verificationMethod, sign(bytes) }
+  issuerSigner   // provide { issuerDid,  verificationMethod, sign(bytes) }
+);
+
+// 3. Submit to the network. The receipt anchors ~10 minutes later.
+const { exchange_id, estimated_anchor_at } = await network.submit(exchange);
+
+// 4. Anyone can now verify at tx.uuaid.org/<tx_short_id> once anchored.
+console.log(network.resolverUrl(exchange_id));
+```
+
+## Assurance ladder
+
+Per [UAP-EXCH-1 § 4](https://github.com/uuaid/spec/blob/main/docs/profiles/UAP-EXCH-1/v0.1.md#4-assurance-ladder):
+
+| Level | Requirements |
+|---|---|
+| **L0** | Software-key Agent, no KYA. |
+| **L1** | Software-key + verified Principal. |
+| **L2** | HW-attested key + org-verified Principal. |
+| **L3** | L2 + continuous evidence from an Assurance Provider (e.g. DSalvus). |
+| **L4** | L3 + industry KYA depth (HIPAA / PCI / SOX / 21 CFR Part 11) + insurance. |
+| **L5** | L4 + eIDAS QES by a QTSP on the EU Trusted List. |
+
+Counterparties enforce a minimum level; this SDK renders it into the Signing Credential and Exchange so verification is one JSON check.
+
+## Strictly opt-in
+
+Absent `UUAID_API_KEY`, the package is a pure library — no network calls. `UaidNetworkClient.submit()` throws early rather than dropping data into a silent no-op. Reads (`get`, `getReceipt`) are unauthenticated per the spec.
+
+## Interoperability
+
+- **AP2 (Google + 60 partners).** UAID Exchange embeds inside an AP2 A2A task under extension key `uuaid.exchange.v1`; conversely, the AP2 Payment Mandate id can be referenced from `external_refs.ap2_payment_mandate`.
+- **W3C VC-Data-Model 2.0.** Every artifact this package produces is a conformant VC.
+- **eIDAS QES.** At L5, `external_refs` also carries the QTSP-produced PKCS#7/CAdES-T reference.
+
+## Development
+
+```bash
+npm install
+npm run build
+npm test
+```
+
+## License
+
+MIT. Part of the [esig-suite](https://github.com/vmvtech/esig-suite) family.

package/dist/index.d.ts

@@ -0,0 +1,227 @@
+/**
+ * @e-sig/uaid-exch — reference implementation of UAP-EXCH-1 v0.1
+ * (UUAID Exchange Profile).
+ *
+ * MIT-licensed. Ships alongside @e-sig/core and @e-sig/uuaid; consumes
+ * @uuaid/sdk for identifier resolution and Network submission.
+ *
+ * See docs/profiles/UAP-EXCH-1/v0.1.md in the uuaid repo for the normative
+ * profile. This module implements the § 5 (Signing Credential), § 6 (Exchange),
+ * and § 7 (Receipt) shapes plus the § 8 submission API.
+ */
+export type AssuranceLevel = "L0" | "L1" | "L2" | "L3" | "L4" | "L5";
+export interface UaidSigningCredential {
+    "@context": string[];
+    type: ["VerifiableCredential", "UaidSigningCredential"];
+    id: string;
+    issuer: string;
+    validFrom: string;
+    validUntil: string;
+    credentialSubject: {
+        id: string;
+        principal: string;
+        scope: {
+            actions: string[];
+            resource_pattern?: string;
+            counterparty_allowlist?: string[];
+            value_ceiling?: {
+                currency: string;
+                amount: number;
+            };
+            geographies?: string[];
+            assurance_min?: AssuranceLevel;
+        };
+        authenticator: {
+            type: "platform" | "hardware" | "hsm" | "qscd";
+            attestation?: string;
+            public_key_jwk: JsonWebKey;
+        };
+        assurance_level: AssuranceLevel;
+        assurance_evidence?: Array<{
+            provider: string;
+            evidence_uri: string;
+            hash: string;
+        }>;
+        kya_hash: string;
+    };
+    proof: DataIntegrityProof;
+}
+export interface UaidExchange {
+    "@context": string[];
+    type: ["VerifiableCredential", "UaidExchange"];
+    id: string;
+    issuer: string;
+    validFrom: string;
+    credentialSubject: {
+        authorization: {
+            signing_credential: string;
+            principal: string;
+        };
+        exchange: {
+            action: string;
+            counterparty: string;
+            resource: {
+                type: string;
+                sha256: string;
+                size: number;
+                uri?: string;
+            };
+            purpose: string;
+            value_impact?: Record<string, unknown>;
+            external_refs?: {
+                ap2_payment_mandate?: string;
+                esign_envelope?: string;
+            };
+        };
+        sole_control: {
+            challenge_type: string;
+            challenge_at: string;
+            challenge_evidence_hash: string;
+        };
+        policy_evaluation?: {
+            provider: string;
+            verdict: "PASS" | "FAIL" | "WARN" | "EXCEPTION_APPROVED";
+            bundle: string;
+            evidence_uri?: string;
+            evidence_hash?: string;
+        };
+    };
+    proof: DataIntegrityProof[];
+}
+export interface UaidExchangeReceipt {
+    "@context": string[];
+    type: ["VerifiableCredential", "UaidExchangeReceipt"];
+    id: string;
+    issuer: string;
+    validFrom: string;
+    credentialSubject: {
+        exchange: string;
+        verified_proofs: string[];
+        policy_evaluation_verified: boolean;
+        anchor: {
+            chain: string;
+            contract: string;
+            batch_root: string;
+            batch_index: number;
+            batch_position: number;
+            block_number: number;
+            anchored_at: string;
+        };
+        tx_short_id: string;
+    };
+    proof: DataIntegrityProof;
+}
+export interface DataIntegrityProof {
+    type: "DataIntegrityProof";
+    cryptosuite: "eddsa-jcs-2022";
+    created: string;
+    verificationMethod: string;
+    proofPurpose: "authentication" | "assertionMethod";
+    proofValue: string;
+}
+export interface AgentSigner {
+    agentUuaid: string;
+    verificationMethod: string;
+    sign(canonicalBytes: Uint8Array): Promise<string>;
+}
+export interface IssuerSigner {
+    issuerDid: string;
+    verificationMethod: string;
+    sign(canonicalBytes: Uint8Array): Promise<string>;
+}
+export interface CreateExchangeInput {
+    signingCredentialId: string;
+    principal: string;
+    action: string;
+    counterparty: string;
+    resource: {
+        type: string;
+        sha256: string;
+        size: number;
+        uri?: string;
+    };
+    purpose: string;
+    value_impact?: Record<string, unknown>;
+    external_refs?: UaidExchange["credentialSubject"]["exchange"]["external_refs"];
+    soleControl: {
+        challenge_type: string;
+        challenge_at: string;
+        challenge_evidence_hash: string;
+    };
+    policyEvaluation?: UaidExchange["credentialSubject"]["policy_evaluation"];
+    now?: () => Date;
+    idFactory?: () => string;
+}
+export interface UaidNetworkClientOptions {
+    baseUrl?: string;
+    apiKey?: string;
+    fetchImpl?: typeof fetch;
+}
+/**
+ * Build the unsigned Exchange body, canonicalize it (JCS per RFC 8785),
+ * sign it once with the Agent key and once with the Issuer key, and return
+ * the assembled UaidExchange ready to submit.
+ */
+export declare function createExchange(input: CreateExchangeInput, agent: AgentSigner, issuer: IssuerSigner): Promise<UaidExchange>;
+/**
+ * Wrap an existing esig-suite envelope as a UAID Exchange. Convenience helper
+ * for the common case where you're signing a PDF via @e-sig/core.signDocument().
+ */
+export declare function exchangeInputFromEsigEnvelope(args: {
+    envelopeId: string;
+    signingCredentialId: string;
+    principal: string;
+    counterparty: string;
+    pdfSha256: string;
+    pdfSize: number;
+    pdfUri?: string;
+    purpose: string;
+    value_impact?: Record<string, unknown>;
+    soleControl: CreateExchangeInput["soleControl"];
+    policyEvaluation?: CreateExchangeInput["policyEvaluation"];
+}): CreateExchangeInput;
+export declare class UaidNetworkClient {
+    private readonly baseUrl;
+    private readonly apiKey?;
+    private readonly fetchImpl;
+    constructor(opts?: UaidNetworkClientOptions);
+    /** POST /v1/exchanges — submit a signed Exchange for verification + anchoring. */
+    submit(exchange: UaidExchange): Promise<{
+        exchange_id: string;
+        status: "verified" | "queued";
+        receipt_pending_anchor: boolean;
+        estimated_anchor_at?: string;
+    }>;
+    /** GET /v1/exchanges/:id — unauthenticated. Returns { exchange, receipt? }. */
+    get(exchangeId: string): Promise<{
+        exchange: UaidExchange;
+        receipt?: UaidExchangeReceipt;
+    }>;
+    /** GET /v1/exchanges/:id/receipt — unauthenticated. */
+    getReceipt(exchangeId: string): Promise<UaidExchangeReceipt>;
+    /** Convenience: the public browser URL for a receipt's tx_short_id. */
+    txBrowserUrl(txShortId: string): string;
+    /** Convenience: the resolver URL for a full exchange id. */
+    resolverUrl(exchangeId: string): string;
+}
+/**
+ * RFC 8785 JSON Canonicalization Scheme.
+ *
+ * Rules implemented:
+ * - Object keys sorted lexicographically by UTF-16 code units.
+ * - No insignificant whitespace.
+ * - Strings encoded with the minimal escape set.
+ * - Numbers serialized per ECMA-262 7.1.12.1 (JS default `String(number)` is
+ *   compliant for the finite-number subset we accept here).
+ *
+ * We reject NaN, ±Infinity, and non-integer numeric keys per RFC 8785 § 3.2.
+ */
+export declare function jcs(value: unknown): string;
+/** Convenience: canonicalize + UTF-8 encode. */
+export declare function jcsBytes(value: unknown): Uint8Array;
+/**
+ * Generate a UUIDv7 (unix-time-ordered). Matches the format UUAID uses under
+ * the hood; safe as an identifier suffix.
+ */
+export declare function uuidv7(): string;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,MAAM,cAAc,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AAErE,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,IAAI,EAAE,CAAC,sBAAsB,EAAE,uBAAuB,CAAC,CAAC;IACxD,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE;QACjB,EAAE,EAAE,MAAM,CAAC;QACX,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE;YACL,OAAO,EAAE,MAAM,EAAE,CAAC;YAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;YAC1B,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;YAClC,aAAa,CAAC,EAAE;gBAAE,QAAQ,EAAE,MAAM,CAAC;gBAAC,MAAM,EAAE,MAAM,CAAA;aAAE,CAAC;YACrD,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;YACvB,aAAa,CAAC,EAAE,cAAc,CAAC;SAChC,CAAC;QACF,aAAa,EAAE;YACb,IAAI,EAAE,UAAU,GAAG,UAAU,GAAG,KAAK,GAAG,MAAM,CAAC;YAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;YACrB,cAAc,EAAE,UAAU,CAAC;SAC5B,CAAC;QACF,eAAe,EAAE,cAAc,CAAC;QAChC,kBAAkB,CAAC,EAAE,KAAK,CAAC;YACzB,QAAQ,EAAE,MAAM,CAAC;YACjB,YAAY,EAAE,MAAM,CAAC;YACrB,IAAI,EAAE,MAAM,CAAC;SACd,CAAC,CAAC;QACH,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,KAAK,EAAE,kBAAkB,CAAC;CAC3B;AAED,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,IAAI,EAAE,CAAC,sBAAsB,EAAE,cAAc,CAAC,CAAC;IAC/C,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE;QACjB,aAAa,EAAE;YACb,kBAAkB,EAAE,MAAM,CAAC;YAC3B,SAAS,EAAE,MAAM,CAAC;SACnB,CAAC;QACF,QAAQ,EAAE;YACR,MAAM,EAAE,MAAM,CAAC;YACf,YAAY,EAAE,MAAM,CAAC;YACrB,QAAQ,EAAE;gBACR,IAAI,EAAE,MAAM,CAAC;gBACb,MAAM,EAAE,MAAM,CAAC;gBACf,IAAI,EAAE,MAAM,CAAC;gBACb,GAAG,CAAC,EAAE,MAAM,CAAC;aACd,CAAC;YACF,OAAO,EAAE,MAAM,CAAC;YAChB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACvC,aAAa,CAAC,EAAE;gBACd,mBAAmB,CAAC,EAAE,MAAM,CAAC;gBAC7B,cAAc,CAAC,EAAE,MAAM,CAAC;aACzB,CAAC;SACH,CAAC;QACF,YAAY,EAAE;YACZ,cAAc,EAAE,MAAM,CAAC;YACvB,YAAY,EAAE,MAAM,CAAC;YACrB,uBAAuB,EAAE,MAAM,CAAC;SACjC,CAAC;QACF,iBAAiB,CAAC,EAAE;YAClB,QAAQ,EAAE,MAAM,CAAC;YACjB,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,oBAAoB,CAAC;YACzD,MAAM,EAAE,MAAM,CAAC;YACf,YAAY,CAAC,EAAE,MAAM,CAAC;YACtB,aAAa,CAAC,EAAE,MAAM,CAAC;SACxB,CAAC;KACH,CAAC;IACF,KAAK,EAAE,kBAAkB,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,IAAI,EAAE,CAAC,sBAAsB,EAAE,qBAAqB,CAAC,CAAC;IACtD,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,eAAe,EAAE,MAAM,EAAE,CAAC;QAC1B,0BAA0B,EAAE,OAAO,CAAC;QACpC,MAAM,EAAE;YACN,KAAK,EAAE,MAAM,CAAC;YACd,QAAQ,EAAE,MAAM,CAAC;YACjB,UAAU,EAAE,MAAM,CAAC;YACnB,WAAW,EAAE,MAAM,CAAC;YACpB,cAAc,EAAE,MAAM,CAAC;YACvB,YAAY,EAAE,MAAM,CAAC;YACrB,WAAW,EAAE,MAAM,CAAC;SACrB,CAAC;QACF,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,KAAK,EAAE,kBAAkB,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,WAAW,EAAE,gBAAgB,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,gBAAgB,GAAG,iBAAiB,CAAC;IACnD,UAAU,EAAE,MAAM,CAAC;CACpB;AAMD,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,IAAI,CAAC,cAAc,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACnD;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,IAAI,CAAC,cAAc,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACnD;AAED,MAAM,WAAW,mBAAmB;IAClC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,CAAC;IACF,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,aAAa,CAAC,EAAE,YAAY,CAAC,mBAAmB,CAAC,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,CAAC;IAC/E,WAAW,EAAE;QACX,cAAc,EAAE,MAAM,CAAC;QACvB,YAAY,EAAE,MAAM,CAAC;QACrB,uBAAuB,EAAE,MAAM,CAAC;KACjC,CAAC;IACF,gBAAgB,CAAC,EAAE,YAAY,CAAC,mBAAmB,CAAC,CAAC,mBAAmB,CAAC,CAAC;IAC1E,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAWD;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE,mBAAmB,EAC1B,KAAK,EAAE,WAAW,EAClB,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,YAAY,CAAC,CAqDvB;AAED;;;GAGG;AACH,wBAAgB,6BAA6B,CAAC,IAAI,EAAE;IAClD,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,WAAW,EAAE,mBAAmB,CAAC,aAAa,CAAC,CAAC;IAChD,gBAAgB,CAAC,EAAE,mBAAmB,CAAC,kBAAkB,CAAC,CAAC;CAC5D,GAAG,mBAAmB,CAkBtB;AAMD,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;gBAE7B,IAAI,GAAE,wBAA6B;IAM/C,kFAAkF;IAC5E,MAAM,CAAC,QAAQ,EAAE,YAAY,GAAG,OAAO,CAAC;QAC5C,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,UAAU,GAAG,QAAQ,CAAC;QAC9B,sBAAsB,EAAE,OAAO,CAAC;QAChC,mBAAmB,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC;IAyBF,+EAA+E;IACzE,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;QACrC,QAAQ,EAAE,YAAY,CAAC;QACvB,OAAO,CAAC,EAAE,mBAAmB,CAAC;KAC/B,CAAC;IAaF,uDAAuD;IACjD,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAUlE,uEAAuE;IACvE,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAIvC,4DAA4D;IAC5D,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM;CAGxC;AAMD;;;;;;;;;;;GAWG;AACH,wBAAgB,GAAG,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE1C;AAED,gDAAgD;AAChD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,CAEnD;AA+DD;;;GAGG;AACH,wBAAgB,MAAM,IAAI,MAAM,CAsB/B"}

package/dist/index.js

@@ -0,0 +1,273 @@
+/**
+ * @e-sig/uaid-exch — reference implementation of UAP-EXCH-1 v0.1
+ * (UUAID Exchange Profile).
+ *
+ * MIT-licensed. Ships alongside @e-sig/core and @e-sig/uuaid; consumes
+ * @uuaid/sdk for identifier resolution and Network submission.
+ *
+ * See docs/profiles/UAP-EXCH-1/v0.1.md in the uuaid repo for the normative
+ * profile. This module implements the § 5 (Signing Credential), § 6 (Exchange),
+ * and § 7 (Receipt) shapes plus the § 8 submission API.
+ */
+// ============================================================================
+// Exchange creation
+// ============================================================================
+const CONTEXT = [
+    "https://www.w3.org/ns/credentials/v2",
+    "https://uuaid.org/spec/UAP-EXCH-1/v1",
+];
+/**
+ * Build the unsigned Exchange body, canonicalize it (JCS per RFC 8785),
+ * sign it once with the Agent key and once with the Issuer key, and return
+ * the assembled UaidExchange ready to submit.
+ */
+export async function createExchange(input, agent, issuer) {
+    const now = (input.now ?? (() => new Date()))();
+    const id = `uuaid:foundation:exchange:${(input.idFactory ?? uuidv7)()}`;
+    const body = {
+        "@context": CONTEXT,
+        type: ["VerifiableCredential", "UaidExchange"],
+        id,
+        issuer: agent.agentUuaid,
+        validFrom: now.toISOString(),
+        credentialSubject: {
+            authorization: {
+                signing_credential: input.signingCredentialId,
+                principal: input.principal,
+            },
+            exchange: {
+                action: input.action,
+                counterparty: input.counterparty,
+                resource: input.resource,
+                purpose: input.purpose,
+                value_impact: input.value_impact ?? {},
+                external_refs: input.external_refs ?? {},
+            },
+            sole_control: input.soleControl,
+            policy_evaluation: input.policyEvaluation,
+        },
+    };
+    const canonicalBytes = jcsBytes(body);
+    const [agentProofValue, issuerProofValue] = await Promise.all([
+        agent.sign(canonicalBytes),
+        issuer.sign(canonicalBytes),
+    ]);
+    const agentProof = {
+        type: "DataIntegrityProof",
+        cryptosuite: "eddsa-jcs-2022",
+        created: now.toISOString(),
+        verificationMethod: agent.verificationMethod,
+        proofPurpose: "authentication",
+        proofValue: agentProofValue,
+    };
+    const issuerProof = {
+        type: "DataIntegrityProof",
+        cryptosuite: "eddsa-jcs-2022",
+        created: now.toISOString(),
+        verificationMethod: issuer.verificationMethod,
+        proofPurpose: "assertionMethod",
+        proofValue: issuerProofValue,
+    };
+    return { ...body, proof: [agentProof, issuerProof] };
+}
+/**
+ * Wrap an existing esig-suite envelope as a UAID Exchange. Convenience helper
+ * for the common case where you're signing a PDF via @e-sig/core.signDocument().
+ */
+export function exchangeInputFromEsigEnvelope(args) {
+    return {
+        signingCredentialId: args.signingCredentialId,
+        principal: args.principal,
+        action: "sign.contract",
+        counterparty: args.counterparty,
+        resource: {
+            type: "application/pdf",
+            sha256: args.pdfSha256,
+            size: args.pdfSize,
+            uri: args.pdfUri,
+        },
+        purpose: args.purpose,
+        value_impact: args.value_impact,
+        external_refs: { esign_envelope: `esig:envelope:${args.envelopeId}` },
+        soleControl: args.soleControl,
+        policyEvaluation: args.policyEvaluation,
+    };
+}
+// ============================================================================
+// Network client
+// ============================================================================
+export class UaidNetworkClient {
+    baseUrl;
+    apiKey;
+    fetchImpl;
+    constructor(opts = {}) {
+        this.baseUrl = (opts.baseUrl ?? "https://api.uuaid.org").replace(/\/$/, "");
+        this.apiKey = opts.apiKey;
+        this.fetchImpl = opts.fetchImpl ?? fetch;
+    }
+    /** POST /v1/exchanges — submit a signed Exchange for verification + anchoring. */
+    async submit(exchange) {
+        if (!this.apiKey) {
+            throw new Error("UaidNetworkClient.submit requires a partner apiKey (UUAID_API_KEY).");
+        }
+        const res = await this.fetchImpl(`${this.baseUrl}/v1/exchanges`, {
+            method: "POST",
+            headers: {
+                "content-type": "application/json",
+                authorization: `Bearer ${this.apiKey}`,
+            },
+            body: JSON.stringify(exchange),
+        });
+        if (res.status !== 201) {
+            throw new Error(`submit failed: HTTP ${res.status}: ${await res.text()}`);
+        }
+        return res.json();
+    }
+    /** GET /v1/exchanges/:id — unauthenticated. Returns { exchange, receipt? }. */
+    async get(exchangeId) {
+        const res = await this.fetchImpl(`${this.baseUrl}/v1/exchanges/${encodeURIComponent(exchangeId)}`);
+        if (!res.ok) {
+            throw new Error(`get failed: HTTP ${res.status}`);
+        }
+        return res.json();
+    }
+    /** GET /v1/exchanges/:id/receipt — unauthenticated. */
+    async getReceipt(exchangeId) {
+        const res = await this.fetchImpl(`${this.baseUrl}/v1/exchanges/${encodeURIComponent(exchangeId)}/receipt`);
+        if (!res.ok) {
+            throw new Error(`getReceipt failed: HTTP ${res.status}`);
+        }
+        return res.json();
+    }
+    /** Convenience: the public browser URL for a receipt's tx_short_id. */
+    txBrowserUrl(txShortId) {
+        return `https://tx.uuaid.org/${encodeURIComponent(txShortId)}`;
+    }
+    /** Convenience: the resolver URL for a full exchange id. */
+    resolverUrl(exchangeId) {
+        return `https://registry.uuaid.org/exchange/${encodeURIComponent(exchangeId)}`;
+    }
+}
+// ============================================================================
+// JCS canonicalization (RFC 8785) — minimal, dependency-free
+// ============================================================================
+/**
+ * RFC 8785 JSON Canonicalization Scheme.
+ *
+ * Rules implemented:
+ * - Object keys sorted lexicographically by UTF-16 code units.
+ * - No insignificant whitespace.
+ * - Strings encoded with the minimal escape set.
+ * - Numbers serialized per ECMA-262 7.1.12.1 (JS default `String(number)` is
+ *   compliant for the finite-number subset we accept here).
+ *
+ * We reject NaN, ±Infinity, and non-integer numeric keys per RFC 8785 § 3.2.
+ */
+export function jcs(value) {
+    return jcsSerialize(value);
+}
+/** Convenience: canonicalize + UTF-8 encode. */
+export function jcsBytes(value) {
+    return new TextEncoder().encode(jcs(value));
+}
+function jcsSerialize(v) {
+    if (v === null)
+        return "null";
+    if (typeof v === "boolean")
+        return v ? "true" : "false";
+    if (typeof v === "number") {
+        if (!Number.isFinite(v)) {
+            throw new Error("JCS: non-finite numbers are not permitted");
+        }
+        return jcsNumber(v);
+    }
+    if (typeof v === "string")
+        return jcsString(v);
+    if (Array.isArray(v)) {
+        return "[" + v.map(jcsSerialize).join(",") + "]";
+    }
+    if (typeof v === "object") {
+        const keys = Object.keys(v)
+            .filter((k) => v[k] !== undefined)
+            .sort(); // lexicographic on UTF-16 code units is the default
+        return ("{" +
+            keys
+                .map((k) => jcsString(k) +
+                ":" +
+                jcsSerialize(v[k]))
+                .join(",") +
+            "}");
+    }
+    throw new Error(`JCS: unsupported value type: ${typeof v}`);
+}
+function jcsString(s) {
+    let out = '"';
+    for (let i = 0; i < s.length; i++) {
+        const c = s.charCodeAt(i);
+        if (c === 0x22)
+            out += '\\"';
+        else if (c === 0x5c)
+            out += "\\\\";
+        else if (c === 0x08)
+            out += "\\b";
+        else if (c === 0x0c)
+            out += "\\f";
+        else if (c === 0x0a)
+            out += "\\n";
+        else if (c === 0x0d)
+            out += "\\r";
+        else if (c === 0x09)
+            out += "\\t";
+        else if (c < 0x20)
+            out += "\\u" + c.toString(16).padStart(4, "0");
+        else
+            out += s[i];
+    }
+    return out + '"';
+}
+function jcsNumber(n) {
+    if (n === 0)
+        return "0";
+    // JavaScript's default number stringification matches ECMA-262 7.1.12.1,
+    // which JCS references. This is correct for finite numbers.
+    return String(n);
+}
+// ============================================================================
+// UUIDv7 — small, dependency-free
+// ============================================================================
+/**
+ * Generate a UUIDv7 (unix-time-ordered). Matches the format UUAID uses under
+ * the hood; safe as an identifier suffix.
+ */
+export function uuidv7() {
+    const ms = BigInt(Date.now());
+    const rand = new Uint8Array(10);
+    cryptoRandomFill(rand);
+    const bytes = new Uint8Array(16);
+    bytes[0] = Number((ms >> 40n) & 0xffn);
+    bytes[1] = Number((ms >> 32n) & 0xffn);
+    bytes[2] = Number((ms >> 24n) & 0xffn);
+    bytes[3] = Number((ms >> 16n) & 0xffn);
+    bytes[4] = Number((ms >> 8n) & 0xffn);
+    bytes[5] = Number(ms & 0xffn);
+    bytes[6] = 0x70 | (rand[0] & 0x0f); // version 7
+    bytes[7] = rand[1];
+    bytes[8] = 0x80 | (rand[2] & 0x3f); // variant 10
+    bytes.set(rand.slice(3), 9);
+    const hex = Array.from(bytes)
+        .map((b) => b.toString(16).padStart(2, "0"))
+        .join("");
+    return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+}
+function cryptoRandomFill(out) {
+    const g = globalThis.crypto;
+    if (g?.getRandomValues) {
+        g.getRandomValues(out);
+        return;
+    }
+    // Fallback — Node 20 always exposes globalThis.crypto, so this branch
+    // should never run in production. Kept for defensive symmetry.
+    for (let i = 0; i < out.length; i++)
+        out[i] = Math.floor(Math.random() * 256);
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAgKH,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E,MAAM,OAAO,GAAG;IACd,sCAAsC;IACtC,sCAAsC;CACvC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAA0B,EAC1B,KAAkB,EAClB,MAAoB;IAEpB,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;IAChD,MAAM,EAAE,GAAG,6BAA6B,CAAC,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;IAExE,MAAM,IAAI,GAAgC;QACxC,UAAU,EAAE,OAAO;QACnB,IAAI,EAAE,CAAC,sBAAsB,EAAE,cAAc,CAAC;QAC9C,EAAE;QACF,MAAM,EAAE,KAAK,CAAC,UAAU;QACxB,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;QAC5B,iBAAiB,EAAE;YACjB,aAAa,EAAE;gBACb,kBAAkB,EAAE,KAAK,CAAC,mBAAmB;gBAC7C,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B;YACD,QAAQ,EAAE;gBACR,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,EAAE;gBACtC,aAAa,EAAE,KAAK,CAAC,aAAa,IAAI,EAAE;aACzC;YACD,YAAY,EAAE,KAAK,CAAC,WAAW;YAC/B,iBAAiB,EAAE,KAAK,CAAC,gBAAgB;SAC1C;KACF,CAAC;IAEF,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAEtC,MAAM,CAAC,eAAe,EAAE,gBAAgB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC5D,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC;KAC5B,CAAC,CAAC;IAEH,MAAM,UAAU,GAAuB;QACrC,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,gBAAgB;QAC7B,OAAO,EAAE,GAAG,CAAC,WAAW,EAAE;QAC1B,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,YAAY,EAAE,gBAAgB;QAC9B,UAAU,EAAE,eAAe;KAC5B,CAAC;IACF,MAAM,WAAW,GAAuB;QACtC,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,gBAAgB;QAC7B,OAAO,EAAE,GAAG,CAAC,WAAW,EAAE;QAC1B,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,YAAY,EAAE,iBAAiB;QAC/B,UAAU,EAAE,gBAAgB;KAC7B,CAAC;IAEF,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,6BAA6B,CAAC,IAY7C;IACC,OAAO;QACL,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,MAAM,EAAE,eAAe;QACvB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,QAAQ,EAAE;YACR,IAAI,EAAE,iBAAiB;YACvB,MAAM,EAAE,IAAI,CAAC,SAAS;YACtB,IAAI,EAAE,IAAI,CAAC,OAAO;YAClB,GAAG,EAAE,IAAI,CAAC,MAAM;SACjB;QACD,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,aAAa,EAAE,EAAE,cAAc,EAAE,iBAAiB,IAAI,CAAC,UAAU,EAAE,EAAE;QACrE,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;KACxC,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E,MAAM,OAAO,iBAAiB;IACX,OAAO,CAAS;IAChB,MAAM,CAAU;IAChB,SAAS,CAAe;IAEzC,YAAY,OAAiC,EAAE;QAC7C,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,uBAAuB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC3C,CAAC;IAED,kFAAkF;IAClF,KAAK,CAAC,MAAM,CAAC,QAAsB;QAMjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CACb,qEAAqE,CACtE,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,eAAe,EAAE;YAC/D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;aACvC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;SAC/B,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,CAAC,MAAM,KAAK,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,EAKb,CAAC;IACL,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,GAAG,CAAC,UAAkB;QAI1B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAC9B,GAAG,IAAI,CAAC,OAAO,iBAAiB,kBAAkB,CAAC,UAAU,CAAC,EAAE,CACjE,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,EAGb,CAAC;IACL,CAAC;IAED,uDAAuD;IACvD,KAAK,CAAC,UAAU,CAAC,UAAkB;QACjC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAC9B,GAAG,IAAI,CAAC,OAAO,iBAAiB,kBAAkB,CAAC,UAAU,CAAC,UAAU,CACzE,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,EAAkC,CAAC;IACpD,CAAC;IAED,uEAAuE;IACvE,YAAY,CAAC,SAAiB;QAC5B,OAAO,wBAAwB,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;IACjE,CAAC;IAED,4DAA4D;IAC5D,WAAW,CAAC,UAAkB;QAC5B,OAAO,uCAAuC,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;IACjF,CAAC;CACF;AAED,+EAA+E;AAC/E,6DAA6D;AAC7D,+EAA+E;AAE/E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,GAAG,CAAC,KAAc;IAChC,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,YAAY,CAAC,CAAU;IAC9B,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAC9B,IAAI,OAAO,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IACxD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;IAC/C,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACrB,OAAO,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACnD,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAA4B,CAAC;aACnD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAA6B,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;aAC9D,IAAI,EAAE,CAAC,CAAC,oDAAoD;QAC/D,OAAO,CACL,GAAG;YACH,IAAI;iBACD,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,SAAS,CAAC,CAAC,CAAC;gBACZ,GAAG;gBACH,YAAY,CAAE,CAA6B,CAAC,CAAC,CAAC,CAAC,CAClD;iBACA,IAAI,CAAC,GAAG,CAAC;YACZ,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,OAAO,CAAC,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,IAAI,GAAG,GAAG,GAAG,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,IAAI;YAAE,GAAG,IAAI,KAAK,CAAC;aACxB,IAAI,CAAC,KAAK,IAAI;YAAE,GAAG,IAAI,MAAM,CAAC;aAC9B,IAAI,CAAC,KAAK,IAAI;YAAE,GAAG,IAAI,KAAK,CAAC;aAC7B,IAAI,CAAC,KAAK,IAAI;YAAE,GAAG,IAAI,KAAK,CAAC;aAC7B,IAAI,CAAC,KAAK,IAAI;YAAE,GAAG,IAAI,KAAK,CAAC;aAC7B,IAAI,CAAC,KAAK,IAAI;YAAE,GAAG,IAAI,KAAK,CAAC;aAC7B,IAAI,CAAC,KAAK,IAAI;YAAE,GAAG,IAAI,KAAK,CAAC;aAC7B,IAAI,CAAC,GAAG,IAAI;YAAE,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;;YAC7D,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,GAAG,GAAG,CAAC;AACnB,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IACxB,yEAAyE;IACzE,4DAA4D;IAC5D,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;AACnB,CAAC;AAED,+EAA+E;AAC/E,kCAAkC;AAClC,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,UAAU,MAAM;IACpB,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAChC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACvB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IACvC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IACvC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IACvC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IACvC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC;IACtC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC;IAC9B,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,YAAY;IAChD,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACnB,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,aAAa;IACjD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;SAC1B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CACxD,EAAE,EACF,EAAE,CACH,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAe;IACvC,MAAM,CAAC,GAAI,UAA6C,CAAC,MAAM,CAAC;IAChE,IAAI,CAAC,EAAE,eAAe,EAAE,CAAC;QACvB,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QACvB,OAAO;IACT,CAAC;IACD,sEAAsE;IACtE,+DAA+D;IAC/D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC;AAChF,CAAC"}

package/package.json

@@ -0,0 +1,68 @@
+{
+  "name": "@e-sig/uaid-exch",
+  "version": "0.1.0-preview.0",
+  "description": "Preview implementation of the IAASO Exchange Profile (ADR-006, under review). Wraps @e-sig/core envelopes as per-transaction signed authorizations on the UUAID Network with subject + issuer proofs and Polygon-anchored batch receipts. Wire format will be finalized when ADR-006 is Accepted.",
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist/",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "clean": "rm -rf dist",
+    "prepublishOnly": "npm run clean && npm run build",
+    "pretest": "npm run build",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "keywords": [
+    "uuaid",
+    "uap-exch-1",
+    "verifiable-credentials",
+    "agent-signing",
+    "ai-agent",
+    "exchange",
+    "network",
+    "polygon",
+    "pdf",
+    "esignature",
+    "self-contained"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/vmvtech/esig-suite.git",
+    "directory": "packages/esig-uaid-exch"
+  },
+  "homepage": "https://github.com/vmvtech/esig-suite/tree/main/packages/esig-uaid-exch#readme",
+  "dependencies": {
+    "@uuaid/sdk": "^0.1.0"
+  },
+  "peerDependencies": {
+    "@e-sig/core": "^0.5.0"
+  },
+  "devDependencies": {
+    "@e-sig/core": "^0.5.0",
+    "@types/node": "^22.0.0",
+    "typescript": "^5.4.0",
+    "vitest": "^2.1.9"
+  },
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org",
+    "access": "public"
+  }
+}