@europeum-ebsi/cli 0.0.0 → 1.0.0-rc.0

package/dist/config/config.d.ts

@@ -0,0 +1,45 @@
+import type { KeyAlgorithm } from "../crypto/wallet.ts";
+export type EbsiEnv = "local" | "pilot" | "preprod" | "prod" | "test";
+export declare const EBSI_ENVS: EbsiEnv[];
+export declare const ENV_BASE_URLS: Partial<Record<EbsiEnv, string>>;
+export interface CliConfig {
+    baseUrl: string;
+    did?: string;
+    env: EbsiEnv;
+    es256kPrivateKey?: string;
+    es256PrivateKey?: string;
+    output: OutputFormat;
+    signAlg?: KeyAlgorithm;
+    token?: string;
+}
+export type OutputFormat = "json" | "pretty" | "table";
+export declare const OUTPUT_FORMATS: OutputFormat[];
+export declare const SIGN_ALGS: KeyAlgorithm[];
+interface PersistedConfig {
+    baseUrl?: string;
+    did?: string;
+    env?: EbsiEnv;
+    es256kPrivateKey?: string;
+    es256PrivateKey?: string;
+    output?: OutputFormat;
+    signAlg?: KeyAlgorithm;
+    token?: string;
+}
+export declare function getConfigFilePath(): string;
+export declare function getPersistedConfigValue(key: keyof PersistedConfig): string | undefined;
+export declare function resolveConfig(overrides: {
+    baseUrl?: string;
+    did?: string;
+    env?: string;
+    es256Key?: string;
+    es256kKey?: string;
+    output?: string;
+    signAlg?: string;
+    token?: string;
+}, opts?: {
+    allowLegacyPrivateKey?: boolean;
+}): CliConfig;
+export declare function setPersistedConfigValue(key: keyof PersistedConfig, value: string): void;
+export declare function writePersistedConfig(config: PersistedConfig): void;
+export {};
+//# sourceMappingURL=config.d.ts.map

package/dist/config/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config/config.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAKxD,MAAM,MAAM,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC;AAKtE,eAAO,MAAM,SAAS,EAAE,OAAO,EAM9B,CAAC;AAWF,eAAO,MAAM,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAI1D,CAAC;AAEF,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAIhB,GAAG,CAAC,EAAE,MAAM,CAAC;IAMb,GAAG,EAAE,OAAO,CAAC;IAMb,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAM1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,YAAY,CAAC;IAMrB,OAAO,CAAC,EAAE,YAAY,CAAC;IAIvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAC;AACvD,eAAO,MAAM,cAAc,EAAE,YAAY,EAAgC,CAAC;AAE1E,eAAO,MAAM,SAAS,EAAE,YAAY,EAAwB,CAAC;AAK7D,UAAU,eAAe;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,OAAO,CAAC,EAAE,YAAY,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAMD,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,MAAM,eAAe,GACzB,MAAM,GAAG,SAAS,CAIpB;AAiBD,wBAAgB,aAAa,CAC3B,SAAS,EAAE;IACT,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,EACD,IAAI,GAAE;IAAE,qBAAqB,CAAC,EAAE,OAAO,CAAA;CAAO,GAC7C,SAAS,CA6DX;AAED,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,MAAM,eAAe,EAC1B,KAAK,EAAE,MAAM,GACZ,IAAI,CAYN;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAOlE"}

package/dist/config/config.js

@@ -0,0 +1,111 @@
+import envPaths from "env-paths";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import path from "node:path";
+export const EBSI_ENVS = [
+    "local",
+    "test",
+    "pilot",
+    "preprod",
+    "prod",
+];
+export const ENV_BASE_URLS = {
+    local: "http://localhost:3000/v1",
+    pilot: "https://api-pilot.ebsi.eu/v1",
+    test: "https://api-test.testnode02.ebsi.eu/v1",
+};
+export const OUTPUT_FORMATS = ["pretty", "json", "table"];
+export const SIGN_ALGS = ["ES256", "ES256K"];
+const APP_NAME = "ebsi-cli";
+const paths = envPaths(APP_NAME, { suffix: "" });
+const CONFIG_FILE = path.join(paths.config, "config.json");
+export function getConfigFilePath() {
+    return CONFIG_FILE;
+}
+export function getPersistedConfigValue(key) {
+    const persisted = readPersistedConfig();
+    const value = persisted[key];
+    return value ?? undefined;
+}
+export function resolveConfig(overrides, opts = {}) {
+    const persisted = readPersistedConfig();
+    if (!opts.allowLegacyPrivateKey) {
+        assertNotLegacyPrivateKey(persisted);
+    }
+    const output = (overrides.output ??
+        process.env["EBSI_OUTPUT"] ??
+        persisted.output ??
+        "pretty");
+    const token = overrides.token ?? process.env["EBSI_ACCESS_TOKEN"] ?? persisted.token;
+    const es256kPrivateKey = overrides.es256kKey ??
+        process.env["EBSI_ES256K_PRIVATE_KEY"] ??
+        persisted.es256kPrivateKey;
+    const es256PrivateKey = overrides.es256Key ??
+        process.env["EBSI_ES256_PRIVATE_KEY"] ??
+        persisted.es256PrivateKey;
+    const signAlg = validateSignAlg(overrides.signAlg ?? process.env["EBSI_SIGN_ALG"] ?? persisted.signAlg);
+    const did = overrides.did ?? process.env["EBSI_DID"] ?? persisted.did;
+    const envName = overrides.env ?? process.env["EBSI_ENV"] ?? persisted.env;
+    const env = isEbsiEnv(envName) ? envName : "test";
+    const baseUrl = overrides.baseUrl ?? process.env["EBSI_API_BASE_URL"] ?? ENV_BASE_URLS[env];
+    if (baseUrl === undefined) {
+        throw new Error(`The "${env}" environment has no default API base URL: ` +
+            "pass --base-url <url> or set EBSI_API_BASE_URL.");
+    }
+    return {
+        baseUrl,
+        env,
+        output,
+        ...(token !== undefined && { token }),
+        ...(es256kPrivateKey !== undefined && { es256kPrivateKey }),
+        ...(es256PrivateKey !== undefined && { es256PrivateKey }),
+        ...(signAlg !== undefined && { signAlg }),
+        ...(did !== undefined && { did }),
+    };
+}
+export function setPersistedConfigValue(key, value) {
+    const persisted = readPersistedConfig();
+    persisted[key] = value;
+    delete persisted.privateKey;
+    writePersistedConfig(persisted);
+}
+export function writePersistedConfig(config) {
+    mkdirSync(paths.config, { recursive: true });
+    writeFileSync(CONFIG_FILE, JSON.stringify(config, undefined, 2) + "\n", "utf8");
+}
+function assertNotLegacyPrivateKey(persisted) {
+    if (process.env["EBSI_PRIVATE_KEY"] === undefined &&
+        persisted.privateKey === undefined) {
+        return;
+    }
+    throw new Error("EBSI_PRIVATE_KEY has been renamed to EBSI_ES256K_PRIVATE_KEY. " +
+        "The CLI now takes a mandatory secp256k1 key (EBSI_ES256K_PRIVATE_KEY, " +
+        "signs Ethereum transactions) and an optional P-256 key " +
+        "(EBSI_ES256_PRIVATE_KEY, signs VCs/VPs). " +
+        "If a persisted config file still has a `privateKey` entry, run " +
+        "`ebsi config set es256kPrivateKey <hex>` to migrate it (allowed even " +
+        "while this error is otherwise showing) — it also clears the old entry. " +
+        "Otherwise, unset the EBSI_PRIVATE_KEY environment variable.");
+}
+function isEbsiEnv(value) {
+    return EBSI_ENVS.includes(value);
+}
+function readPersistedConfig() {
+    if (!existsSync(CONFIG_FILE))
+        return {};
+    try {
+        return JSON.parse(readFileSync(CONFIG_FILE, "utf8"));
+    }
+    catch {
+        return {};
+    }
+}
+function validateSignAlg(value) {
+    if (value === undefined)
+        return undefined;
+    const normalized = value.toUpperCase();
+    if (!SIGN_ALGS.includes(normalized)) {
+        throw new Error(`Invalid sign algorithm "${value}". Valid values: ${SIGN_ALGS.join(", ")}`);
+    }
+    return normalized;
+}
+//# sourceMappingURL=config.js.map

package/dist/config/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/config/config.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,IAAI,MAAM,WAAW,CAAC;AAY7B,MAAM,CAAC,MAAM,SAAS,GAAc;IAClC,OAAO;IACP,MAAM;IACN,OAAO;IACP,SAAS;IACT,MAAM;CACP,CAAC;AAWF,MAAM,CAAC,MAAM,aAAa,GAAqC;IAC7D,KAAK,EAAE,0BAA0B;IACjC,KAAK,EAAE,8BAA8B;IACrC,IAAI,EAAE,wCAAwC;CAC/C,CAAC;AAwCF,MAAM,CAAC,MAAM,cAAc,GAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAE1E,MAAM,CAAC,MAAM,SAAS,GAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AAgB7D,MAAM,QAAQ,GAAG,UAAU,CAAC;AAC5B,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;AACjD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;AAE3D,MAAM,UAAU,iBAAiB;IAC/B,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,GAA0B;IAE1B,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7B,OAAO,KAAK,IAAI,SAAS,CAAC;AAC5B,CAAC;AAiBD,MAAM,UAAU,aAAa,CAC3B,SASC,EACD,OAA4C,EAAE;IAE9C,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;IAExC,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAChC,yBAAyB,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IAGD,MAAM,MAAM,GAAG,CAAC,SAAS,CAAC,MAAM;QAC9B,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QAC1B,SAAS,CAAC,MAAM;QAChB,QAAQ,CAAiB,CAAC;IAG5B,MAAM,KAAK,GACT,SAAS,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC;IAGzE,MAAM,gBAAgB,GACpB,SAAS,CAAC,SAAS;QACnB,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;QACtC,SAAS,CAAC,gBAAgB,CAAC;IAG7B,MAAM,eAAe,GACnB,SAAS,CAAC,QAAQ;QAClB,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC;QACrC,SAAS,CAAC,eAAe,CAAC;IAG5B,MAAM,OAAO,GAAG,eAAe,CAC7B,SAAS,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,SAAS,CAAC,OAAO,CACvE,CAAC;IAGF,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC;IAGtE,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC;IAC1E,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;IAGlD,MAAM,OAAO,GACX,SAAS,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC;IAC9E,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,QAAQ,GAAG,6CAA6C;YACtD,iDAAiD,CACpD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO;QACP,GAAG;QACH,MAAM;QACN,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,CAAC;QACrC,GAAG,CAAC,gBAAgB,KAAK,SAAS,IAAI,EAAE,gBAAgB,EAAE,CAAC;QAC3D,GAAG,CAAC,eAAe,KAAK,SAAS,IAAI,EAAE,eAAe,EAAE,CAAC;QACzD,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,CAAC;QACzC,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,EAAE,GAAG,EAAE,CAAC;KAClC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,GAA0B,EAC1B,KAAa;IAEb,MAAM,SAAS,GACb,mBAAmB,EAAE,CAAC;IAEvB,SAAoC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAMnD,OAAO,SAAS,CAAC,UAAU,CAAC;IAC5B,oBAAoB,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAuB;IAC1D,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,aAAa,CACX,WAAW,EACX,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,GAAG,IAAI,EAC3C,MAAM,CACP,CAAC;AACJ,CAAC;AAQD,SAAS,yBAAyB,CAChC,SAAoD;IAEpD,IACE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,KAAK,SAAS;QAC7C,SAAS,CAAC,UAAU,KAAK,SAAS,EAClC,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,IAAI,KAAK,CACb,gEAAgE;QAC9D,wEAAwE;QACxE,yDAAyD;QACzD,2CAA2C;QAC3C,iEAAiE;QACjE,uEAAuE;QACvE,yEAAyE;QACzE,6DAA6D,CAChE,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAyB;IAC1C,OAAO,SAAS,CAAC,QAAQ,CAAC,KAAgB,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,mBAAmB;IAC1B,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAoB,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAyB;IAChD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,UAAU,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,UAA0B,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CACb,2BAA2B,KAAK,oBAAoB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3E,CAAC;IACJ,CAAC;IACD,OAAO,UAA0B,CAAC;AACpC,CAAC"}

package/dist/config/ebsi-env.d.ts

@@ -0,0 +1,4 @@
+import type { EbsiEnvConfiguration } from "@europeum-ebsi/verifiable-credential";
+import type { CliConfig } from "./config.ts";
+export declare function buildEbsiEnvConfig(config: CliConfig): EbsiEnvConfiguration;
+//# sourceMappingURL=ebsi-env.d.ts.map

package/dist/config/ebsi-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ebsi-env.d.ts","sourceRoot":"","sources":["../../src/config/ebsi-env.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAEjF,OAAO,KAAK,EAAE,SAAS,EAAW,MAAM,aAAa,CAAC;AAqBtD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,GAAG,oBAAoB,CAkB1E"}

package/dist/config/ebsi-env.js

@@ -0,0 +1,37 @@
+const EBSI_SERVICES = [
+    "did-registry",
+    "track-and-trace",
+    "contracts-registry",
+    "issuers-registry",
+    "policies-registry",
+    "schemas-registry",
+];
+export function buildEbsiEnvConfig(config) {
+    const url = new URL(config.baseUrl);
+    const version = (url.pathname.split("/").find(Boolean) ??
+        "v1");
+    return {
+        hosts: [url.hostname],
+        network: {
+            isOptional: config.env === "prod",
+            name: resolveNetworkName(config.env),
+        },
+        scheme: "ebsi",
+        services: [...EBSI_SERVICES],
+        version,
+    };
+}
+function resolveNetworkName(env) {
+    switch (env) {
+        case "local": {
+            return "test";
+        }
+        case "prod": {
+            return "production";
+        }
+        default: {
+            return env;
+        }
+    }
+}
+//# sourceMappingURL=ebsi-env.js.map

package/dist/config/ebsi-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ebsi-env.js","sourceRoot":"","sources":["../../src/config/ebsi-env.ts"],"names":[],"mappings":"AAIA,MAAM,aAAa,GAAG;IACpB,cAAc;IACd,iBAAiB;IACjB,oBAAoB;IACpB,kBAAkB;IAClB,mBAAmB;IACnB,kBAAkB;CACV,CAAC;AAYX,MAAM,UAAU,kBAAkB,CAAC,MAAiB;IAClD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAEpC,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;QACpD,IAAI,CAAiB,CAAC;IAExB,OAAO;QACL,KAAK,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC;QAGrB,OAAO,EAAE;YACP,UAAU,EAAE,MAAM,CAAC,GAAG,KAAK,MAAM;YACjC,IAAI,EAAE,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC;SACrC;QACD,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE,CAAC,GAAG,aAAa,CAAC;QAC5B,OAAO;KACR,CAAC;AACJ,CAAC;AAaD,SAAS,kBAAkB,CAAC,GAAY;IACtC,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/crypto/wallet.d.ts

@@ -0,0 +1,34 @@
+import type { EbsiIssuer } from "@europeum-ebsi/verifiable-credential";
+import { ethers } from "ethers";
+export interface DeriveWalletKeys {
+    es256kPrivateKey: string;
+    es256PrivateKey?: string;
+    signAlg?: KeyAlgorithm;
+}
+export type KeyAlgorithm = "ES256" | "ES256K";
+export interface KeyMaterial {
+    alg: KeyAlgorithm;
+    issuer: EbsiIssuer;
+    kid: string;
+    publicKeyJwk: JwkEcKey;
+    thumbprint: string;
+}
+export interface WalletDetails {
+    address: string;
+    did: string;
+    es256?: KeyMaterial;
+    es256k: KeyMaterial;
+    signingKey(): KeyMaterial;
+    wallet: ethers.Wallet;
+}
+interface JwkEcKey {
+    crv: "P-256" | "secp256k1";
+    kty: "EC";
+    x: string;
+    y: string;
+}
+export declare function deriveEs256Issuer(privateKeyHex: string, did: string): Promise<EbsiIssuer<"ES256">>;
+export declare function deriveWallet(keys: DeriveWalletKeys, overrideDid?: string): Promise<WalletDetails>;
+export declare function generatePrivateKey(algorithm?: KeyAlgorithm): string;
+export {};
+//# sourceMappingURL=wallet.d.ts.map

package/dist/crypto/wallet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet.d.ts","sourceRoot":"","sources":["../../src/crypto/wallet.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sCAAsC,CAAC;AASvE,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAGhC,MAAM,WAAW,gBAAgB;IAI/B,gBAAgB,EAAE,MAAM,CAAC;IAIzB,eAAe,CAAC,EAAE,MAAM,CAAC;IAKzB,OAAO,CAAC,EAAE,YAAY,CAAC;CACxB;AAQD,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,QAAQ,CAAC;AAO9C,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,YAAY,CAAC;IAClB,MAAM,EAAE,UAAU,CAAC;IAInB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,QAAQ,CAAC;IAMvB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAK5B,OAAO,EAAE,MAAM,CAAC;IAIhB,GAAG,EAAE,MAAM,CAAC;IAMZ,KAAK,CAAC,EAAE,WAAW,CAAC;IAKpB,MAAM,EAAE,WAAW,CAAC;IAWpB,UAAU,IAAI,WAAW,CAAC;IAK1B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;CACvB;AAOD,UAAU,QAAQ;IAChB,GAAG,EAAE,OAAO,GAAG,WAAW,CAAC;IAC3B,GAAG,EAAE,IAAI,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;CACX;AAUD,wBAAsB,iBAAiB,CACrC,aAAa,EAAE,MAAM,EACrB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAG9B;AAgBD,wBAAsB,YAAY,CAChC,IAAI,EAAE,gBAAgB,EACtB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,aAAa,CAAC,CAwCxB;AAOD,wBAAgB,kBAAkB,CAAC,SAAS,GAAE,YAAuB,GAAG,MAAM,CAM7E"}

package/dist/crypto/wallet.js

@@ -0,0 +1,100 @@
+import { bytesToBase64url, ES256KSigner, ES256Signer, hexToBytes, } from "@europeum-ebsi/did-jwt";
+import { EbsiWallet } from "@europeum-ebsi/wallet";
+import { ethers } from "ethers";
+import { calculateJwkThumbprint } from "jose";
+export async function deriveEs256Issuer(privateKeyHex, did) {
+    const { issuer } = await deriveEs256KeyMaterial(privateKeyHex, did);
+    return issuer;
+}
+export async function deriveWallet(keys, overrideDid) {
+    const { es256kPrivateKey, es256PrivateKey, signAlg } = keys;
+    new EbsiWallet({
+        ES256KPrivateKey: es256kPrivateKey,
+        ...(es256PrivateKey !== undefined && {
+            ES256PrivateKey: es256PrivateKey,
+        }),
+    });
+    const { publicKeyJwk, wallet } = deriveEs256kPublicMaterial(es256kPrivateKey);
+    const thumbprint = await calculateJwkThumbprint(publicKeyJwk);
+    const did = overrideDid ?? EbsiWallet.createDid();
+    const kid = `${did}#${thumbprint}`;
+    const pkBytes = hexToBytes(wallet.privateKey);
+    const es256k = {
+        alg: "ES256K",
+        issuer: { alg: "ES256K", did, kid, signer: ES256KSigner(pkBytes) },
+        kid,
+        publicKeyJwk,
+        thumbprint,
+    };
+    const es256 = es256PrivateKey === undefined
+        ? undefined
+        : await deriveEs256KeyMaterial(es256PrivateKey, did);
+    return {
+        address: wallet.address,
+        did,
+        ...(es256 !== undefined && { es256 }),
+        es256k,
+        signingKey: () => pickSigningKey(es256k, es256, signAlg),
+        wallet,
+    };
+}
+export function generatePrivateKey(algorithm = "ES256K") {
+    if (algorithm === "ES256") {
+        const { privateKey } = EbsiWallet.generateKeyPair({ algorithm: "ES256" });
+        return addPrefix(privateKey);
+    }
+    return ethers.Wallet.createRandom().privateKey;
+}
+function addPrefix(hex) {
+    return hex.startsWith("0x") ? hex : `0x${hex}`;
+}
+async function deriveEs256KeyMaterial(privateKeyHex, did) {
+    const publicKeyHex = EbsiWallet.getPublicKeyHex(privateKeyHex, "ES256");
+    const publicKeyJwk = EbsiWallet.formatPublicKey(publicKeyHex, "jwk", "ES256");
+    const thumbprint = await calculateJwkThumbprint(publicKeyJwk, "sha256");
+    const kid = `${did}#${thumbprint}`;
+    return {
+        alg: "ES256",
+        issuer: {
+            alg: "ES256",
+            did,
+            kid,
+            signer: ES256Signer(hexToBytes(privateKeyHex)),
+        },
+        kid,
+        publicKeyJwk,
+        thumbprint,
+    };
+}
+function deriveEs256kPublicMaterial(privateKeyHex) {
+    const wallet = new ethers.Wallet(privateKeyHex);
+    const uncompressed = ethers.SigningKey.computePublicKey(wallet.signingKey.publicKey, false);
+    const xHex = uncompressed.slice(4, 68);
+    const yHex = uncompressed.slice(68);
+    const publicKeyJwk = {
+        crv: "secp256k1",
+        kty: "EC",
+        x: bytesToBase64url(hexToBytes(xHex)),
+        y: bytesToBase64url(hexToBytes(yHex)),
+    };
+    return { publicKeyJwk, wallet };
+}
+function pickSigningKey(es256k, es256, signAlg) {
+    if (signAlg === "ES256") {
+        if (!es256) {
+            throw new Error("No P-256 key configured. Pass --es256-key <hex>, set " +
+                "EBSI_ES256_PRIVATE_KEY, or run `ebsi config set es256PrivateKey <hex>`.");
+        }
+        return es256;
+    }
+    if (signAlg === "ES256K") {
+        return es256k;
+    }
+    if (!es256) {
+        return es256k;
+    }
+    throw new Error("Two signing keys are configured (ES256K and ES256). Choose which one " +
+        "signs VCs/VPs with --sign-alg <ES256|ES256K>, EBSI_SIGN_ALG, or " +
+        "`ebsi config set signAlg <alg>`.");
+}
+//# sourceMappingURL=wallet.js.map

package/dist/crypto/wallet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet.js","sourceRoot":"","sources":["../../src/crypto/wallet.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,WAAW,EACX,UAAU,GACX,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,sBAAsB,EAAE,MAAM,MAAM,CAAC;AA0G9C,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,aAAqB,EACrB,GAAW;IAEX,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,sBAAsB,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;IACpE,OAAO,MAA6B,CAAC;AACvC,CAAC;AAgBD,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAsB,EACtB,WAAoB;IAEpB,MAAM,EAAE,gBAAgB,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAI5D,IAAI,UAAU,CAAC;QACb,gBAAgB,EAAE,gBAAgB;QAClC,GAAG,CAAC,eAAe,KAAK,SAAS,IAAI;YACnC,eAAe,EAAE,eAAe;SACjC,CAAC;KACH,CAAC,CAAC;IAEH,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,0BAA0B,CAAC,gBAAgB,CAAC,CAAC;IAC9E,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,YAAY,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,WAAW,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;IAClD,MAAM,GAAG,GAAG,GAAG,GAAG,IAAI,UAAU,EAAE,CAAC;IAEnC,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAE9C,MAAM,MAAM,GAAgB;QAC1B,GAAG,EAAE,QAAQ;QACb,MAAM,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE;QAClE,GAAG;QACH,YAAY;QACZ,UAAU;KACX,CAAC;IAEF,MAAM,KAAK,GACT,eAAe,KAAK,SAAS;QAC3B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,sBAAsB,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;IAEzD,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,GAAG;QACH,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,CAAC;QACrC,MAAM;QACN,UAAU,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC;QACxD,MAAM;KACP,CAAC;AACJ,CAAC;AAOD,MAAM,UAAU,kBAAkB,CAAC,YAA0B,QAAQ;IACnE,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QAC1B,MAAM,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC,eAAe,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1E,OAAO,SAAS,CAAC,UAAU,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,UAAU,CAAC;AACjD,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;AACjD,CAAC;AAQD,KAAK,UAAU,sBAAsB,CACnC,aAAqB,EACrB,GAAW;IAEX,MAAM,YAAY,GAAG,UAAU,CAAC,eAAe,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACxE,MAAM,YAAY,GAAG,UAAU,CAAC,eAAe,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC9E,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACxE,MAAM,GAAG,GAAG,GAAG,GAAG,IAAI,UAAU,EAAE,CAAC;IAEnC,OAAO;QACL,GAAG,EAAE,OAAO;QACZ,MAAM,EAAE;YACN,GAAG,EAAE,OAAO;YACZ,GAAG;YACH,GAAG;YAEH,MAAM,EAAE,WAAW,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;SAC/C;QACD,GAAG;QACH,YAAY;QACZ,UAAU;KACX,CAAC;AACJ,CAAC;AAMD,SAAS,0BAA0B,CAAC,aAAqB;IAIvD,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAGhD,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,gBAAgB,CACrD,MAAM,CAAC,UAAU,CAAC,SAAS,EAC3B,KAAK,CACN,CAAC;IACF,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAEpC,MAAM,YAAY,GAAa;QAC7B,GAAG,EAAE,WAAW;QAChB,GAAG,EAAE,IAAI;QACT,CAAC,EAAE,gBAAgB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC,EAAE,gBAAgB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;KACtC,CAAC;IAEF,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;AAClC,CAAC;AAMD,SAAS,cAAc,CACrB,MAAmB,EACnB,KAA8B,EAC9B,OAAiC;IAEjC,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,uDAAuD;gBACrD,yEAAyE,CAC5E,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,IAAI,KAAK,CACb,uEAAuE;QACrE,kEAAkE;QAClE,kCAAkC,CACrC,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/dist/index.js

@@ -1,7 +1,16 @@
-export * from "./app.js";
-export * from "./buildParam/index.js";
-export * from "./commands/index.js";
-export * from "./config.js";
-export * from "./interfaces/index.js";
-export * from "./utils/index.js";
+#!/usr/bin/env node
+const args = process.argv.slice(2);
+const isInteractive = args.length === 0 || args[0] === "--interactive";
+if (isInteractive) {
+    const { render } = await import("ink");
+    const React = (await import("react")).default;
+    const { App } = await import("./tui/App.js");
+    render(React.createElement(App, {}));
+}
+else {
+    const { buildProgram } = await import("./cli.js");
+    const program = buildProgram();
+    await program.parseAsync(process.argv);
+}
+export {};
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAQA,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACnC,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,eAAe,CAAC;AAEvE,IAAI,aAAa,EAAE,CAAC;IAElB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;IAEvC,MAAM,KAAK,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IAC9C,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,cAAe,CAAC,CAAC;IAC9C,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;AACvC,CAAC;KAAM,CAAC;IAEN,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;IAC/B,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC"}

package/dist/ledger/read.d.ts

@@ -0,0 +1,11 @@
+import type { CliConfig } from "../config/config.ts";
+import type { RegistryEntry } from "./registries.ts";
+export interface ReadOptions {
+    config: CliConfig;
+    contractAddress: string;
+    functionArgs: unknown[];
+    functionName: string;
+    registry: RegistryEntry;
+}
+export declare function readFromRegistry(opts: ReadOptions): Promise<unknown>;
+//# sourceMappingURL=read.d.ts.map

package/dist/ledger/read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../src/ledger/read.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAErD,MAAM,WAAW,WAAW;IAI1B,MAAM,EAAE,SAAS,CAAC;IAIlB,eAAe,EAAE,MAAM,CAAC;IAIxB,YAAY,EAAE,OAAO,EAAE,CAAC;IAIxB,YAAY,EAAE,MAAM,CAAC;IAIrB,QAAQ,EAAE,aAAa,CAAC;CACzB;AAYD,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAsB1E"}

package/dist/ledger/read.js

@@ -0,0 +1,24 @@
+import { ethers } from "ethers";
+export async function readFromRegistry(opts) {
+    const { config, contractAddress, functionArgs, functionName, registry } = opts;
+    const iface = registry.getInterface();
+    let data;
+    try {
+        data = iface.encodeFunctionData(functionName, functionArgs);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        throw new Error(`Failed to encode function data for "${functionName}": ${message}. ` +
+            "Check the function name and argument types.", { cause: error });
+    }
+    const provider = new ethers.JsonRpcProvider(`${config.baseUrl}/ledger`);
+    const result = await provider.call({ data, to: contractAddress });
+    const decoded = iface.decodeFunctionResult(functionName, result);
+    return toJsonSafe(decoded);
+}
+function toJsonSafe(value) {
+    if (typeof value === "bigint")
+        return value.toString();
+    return Array.isArray(value) ? value.map((item) => toJsonSafe(item)) : value;
+}
+//# sourceMappingURL=read.js.map

package/dist/ledger/read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.js","sourceRoot":"","sources":["../../src/ledger/read.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAsChC,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAiB;IACtD,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,GACrE,IAAI,CAAC;IAEP,MAAM,KAAK,GAAG,QAAQ,CAAC,YAAY,EAAE,CAAC;IACtC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,KAAK,CAAC,kBAAkB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,IAAI,KAAK,CACb,uCAAuC,YAAY,MAAM,OAAO,IAAI;YAClE,6CAA6C,EAC/C,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,eAAe,CAAC,GAAG,MAAM,CAAC,OAAO,SAAS,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,KAAK,CAAC,oBAAoB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAEjE,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC;AAMD,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IACvD,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC9E,CAAC"}

package/dist/ledger/registries.d.ts

@@ -0,0 +1,25 @@
+import { ethers } from "ethers";
+export interface RegistryEntry {
+    addressEnvKey: string;
+    defaultScope: string;
+    getInterface(): ethers.Interface;
+}
+export declare const REGISTRIES: Record<string, RegistryEntry | undefined>;
+export declare const REGISTRY_NAMES: string[];
+export interface ContractAddressOption {
+    option: {
+        description: string;
+        flags: string;
+    };
+    resolve: (opts: Record<string, string>) => string | undefined;
+}
+export interface RegistryTarget {
+    functionName?: string;
+    registryName: string;
+    to: string;
+}
+export declare function contractAddressOption(envKey: string, description: string): ContractAddressOption;
+export declare function contractAddressOptionFor(registryName: string): ContractAddressOption;
+export declare function defaultScopeFor(registryName: string, functionName: string | undefined, registry: RegistryEntry): string;
+export declare function deriveScopeForRegistries(targets: RegistryTarget[]): string;
+//# sourceMappingURL=registries.d.ts.map

package/dist/ledger/registries.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registries.d.ts","sourceRoot":"","sources":["../../src/ledger/registries.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAKhC,MAAM,WAAW,aAAa;IAa5B,aAAa,EAAE,MAAM,CAAC;IAItB,YAAY,EAAE,MAAM,CAAC;IAIrB,YAAY,IAAI,MAAM,CAAC,SAAS,CAAC;CAClC;AA8BD,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,GAAG,SAAS,CA6DhE,CAAC;AAKF,eAAO,MAAM,cAAc,UAA0B,CAAC;AAKtD,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,MAAM,GAAG,SAAS,CAAC;CAC/D;AAQD,MAAM,WAAW,cAAc;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,EAAE,EAAE,MAAM,CAAC;CACZ;AASD,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,GAClB,qBAAqB,CAKvB;AAOD,wBAAgB,wBAAwB,CACtC,YAAY,EAAE,MAAM,GACnB,qBAAqB,CAWvB;AA+BD,wBAAgB,eAAe,CAC7B,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,QAAQ,EAAE,aAAa,GACtB,MAAM,CAWR;AAiBD,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,MAAM,CA0B1E"}

package/dist/ledger/registries.js

@@ -0,0 +1,111 @@
+import { ethers } from "ethers";
+import { createRequire } from "node:module";
+const req = createRequire(import.meta.url);
+function loadInterface(pkg, factoryName) {
+    const mod = req(pkg);
+    const factory = mod[factoryName];
+    if (!factory) {
+        throw new Error(`Factory class "${factoryName}" not found in package "${pkg}"`);
+    }
+    return factory.createInterface();
+}
+export const REGISTRIES = {
+    "did-registry": {
+        addressEnvKey: "DID_REGISTRY_CONTRACT_ADDRESS",
+        defaultScope: "did-registry:write",
+        getInterface() {
+            return loadInterface("@europeum-ebsi/did-registry-contract", "DidRegistry__factory");
+        },
+    },
+    "issuers-registry": {
+        addressEnvKey: "ISSUERS_REGISTRY_CONTRACT_ADDRESS",
+        defaultScope: "issuers-registry:write",
+        getInterface() {
+            return loadInterface("@europeum-ebsi/issuers-registry-contract", "IssuersRegistry__factory");
+        },
+    },
+    "policies-registry": {
+        addressEnvKey: "POLICIES_REGISTRY_CONTRACT_ADDRESS",
+        defaultScope: "policies-registry:write",
+        getInterface() {
+            return loadInterface("@europeum-ebsi/policies-registry-contract", "PoliciesRegistry__factory");
+        },
+    },
+    "schemas-registry": {
+        addressEnvKey: "SCHEMAS_REGISTRY_CONTRACT_ADDRESS",
+        defaultScope: "schemas-registry:write",
+        getInterface() {
+            return loadInterface("@europeum-ebsi/schemas-registry-contract", "SchemasRegistry__factory");
+        },
+    },
+    timestamp: {
+        addressEnvKey: "TIMESTAMP_CONTRACT_ADDRESS",
+        defaultScope: "timestamp:write",
+        getInterface() {
+            return loadInterface("@europeum-ebsi/timestamp-contract", "Timestamp__factory");
+        },
+    },
+    "track-and-trace": {
+        addressEnvKey: "TRACK_AND_TRACE_CONTRACT_ADDRESS",
+        defaultScope: "track-and-trace:write",
+        getInterface() {
+            return loadInterface("@europeum-ebsi/track-and-trace-contract", "TrackAndTrace__factory");
+        },
+    },
+};
+export const REGISTRY_NAMES = Object.keys(REGISTRIES);
+export function contractAddressOption(envKey, description) {
+    return {
+        option: { description, flags: "--contract-address <address>" },
+        resolve: (opts) => resolveContractAddress(opts, envKey),
+    };
+}
+export function contractAddressOptionFor(registryName) {
+    const registry = REGISTRIES[registryName];
+    if (!registry) {
+        throw new Error(`Unknown registry "${registryName}". Known registries: ${REGISTRY_NAMES.join(", ")}`);
+    }
+    return contractAddressOption(registry.addressEnvKey, `Contract address to query. Defaults to $${registry.addressEnvKey} if set (the same address "ledger write" signs against), otherwise the API's configured default.`);
+}
+const TRACK_AND_TRACE_FUNCTION_SCOPE = {
+    authoriseDid: "track-and-trace:authorise",
+    commitCreateDocument: "track-and-trace:create",
+    createDocument: "track-and-trace:create",
+};
+export function defaultScopeFor(registryName, functionName, registry) {
+    if (registryName === "did-registry" && functionName === "insertDidDocument") {
+        return "did-registry:invite";
+    }
+    if (registryName === "track-and-trace" && functionName !== undefined) {
+        const scope = TRACK_AND_TRACE_FUNCTION_SCOPE[functionName];
+        if (scope) {
+            return scope;
+        }
+    }
+    return registry.defaultScope;
+}
+export function deriveScopeForRegistries(targets) {
+    const addressByFamily = new Map();
+    for (const { functionName, registryName, to } of targets) {
+        const registry = REGISTRIES[registryName];
+        if (!registry) {
+            throw new Error(`Unknown registry "${registryName}". Known registries: ${REGISTRY_NAMES.join(", ")}`);
+        }
+        const family = defaultScopeFor(registryName, functionName, registry);
+        const existingAddress = addressByFamily.get(family);
+        if (existingAddress !== undefined && existingAddress !== to) {
+            throw new Error(`Batch targets two different "${family}" contract instances (${existingAddress} and ${to}) ` +
+                "in a single --auto-token request. A single access token can only target one instance " +
+                "per scope family — split the batch, or provide --token/--scope explicitly.");
+        }
+        addressByFamily.set(family, to);
+    }
+    return [...addressByFamily]
+        .map(([family, address]) => `${family}:${address}`)
+        .toSorted((a, b) => a.localeCompare(b))
+        .join(" ");
+}
+function resolveContractAddress(opts, envKey) {
+    return opts["contractAddress"] ?? process.env[envKey];
+}
+//# sourceMappingURL=registries.js.map

package/dist/ledger/registries.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registries.js","sourceRoot":"","sources":["../../src/ledger/registries.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAiC3C,SAAS,aAAa,CAAC,GAAW,EAAE,WAAmB;IACrD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAGlB,CAAC;IACF,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC;IAEjC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,kBAAkB,WAAW,2BAA2B,GAAG,GAAG,CAC/D,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,eAAe,EAAE,CAAC;AACnC,CAAC;AAQD,MAAM,CAAC,MAAM,UAAU,GAA8C;IACnE,cAAc,EAAE;QACd,aAAa,EAAE,+BAA+B;QAC9C,YAAY,EAAE,oBAAoB;QAClC,YAAY;YACV,OAAO,aAAa,CAClB,sCAAsC,EACtC,sBAAsB,CACvB,CAAC;QACJ,CAAC;KACF;IACD,kBAAkB,EAAE;QAClB,aAAa,EAAE,mCAAmC;QAClD,YAAY,EAAE,wBAAwB;QACtC,YAAY;YACV,OAAO,aAAa,CAClB,0CAA0C,EAC1C,0BAA0B,CAC3B,CAAC;QACJ,CAAC;KACF;IACD,mBAAmB,EAAE;QACnB,aAAa,EAAE,oCAAoC;QACnD,YAAY,EAAE,yBAAyB;QACvC,YAAY;YACV,OAAO,aAAa,CAClB,2CAA2C,EAC3C,2BAA2B,CAC5B,CAAC;QACJ,CAAC;KACF;IACD,kBAAkB,EAAE;QAClB,aAAa,EAAE,mCAAmC;QAClD,YAAY,EAAE,wBAAwB;QACtC,YAAY;YACV,OAAO,aAAa,CAClB,0CAA0C,EAC1C,0BAA0B,CAC3B,CAAC;QACJ,CAAC;KACF;IACD,SAAS,EAAE;QACT,aAAa,EAAE,4BAA4B;QAC3C,YAAY,EAAE,iBAAiB;QAC/B,YAAY;YACV,OAAO,aAAa,CAClB,mCAAmC,EACnC,oBAAoB,CACrB,CAAC;QACJ,CAAC;KACF;IACD,iBAAiB,EAAE;QACjB,aAAa,EAAE,kCAAkC;QACjD,YAAY,EAAE,uBAAuB;QACrC,YAAY;YACV,OAAO,aAAa,CAClB,yCAAyC,EACzC,wBAAwB,CACzB,CAAC;QACJ,CAAC;KACF;CACF,CAAC;AAKF,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AA6BtD,MAAM,UAAU,qBAAqB,CACnC,MAAc,EACd,WAAmB;IAEnB,OAAO;QACL,MAAM,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,8BAA8B,EAAE;QAC9D,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,EAAE,MAAM,CAAC;KACxD,CAAC;AACJ,CAAC;AAOD,MAAM,UAAU,wBAAwB,CACtC,YAAoB;IAEpB,MAAM,QAAQ,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,qBAAqB,YAAY,wBAAwB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrF,CAAC;IACJ,CAAC;IACD,OAAO,qBAAqB,CAC1B,QAAQ,CAAC,aAAa,EACtB,2CAA2C,QAAQ,CAAC,aAAa,kGAAkG,CACpK,CAAC;AACJ,CAAC;AAcD,MAAM,8BAA8B,GAA2B;IAC7D,YAAY,EAAE,2BAA2B;IACzC,oBAAoB,EAAE,wBAAwB;IAC9C,cAAc,EAAE,wBAAwB;CACzC,CAAC;AAaF,MAAM,UAAU,eAAe,CAC7B,YAAoB,EACpB,YAAgC,EAChC,QAAuB;IAEvB,IAAI,YAAY,KAAK,cAAc,IAAI,YAAY,KAAK,mBAAmB,EAAE,CAAC;QAC5E,OAAO,qBAAqB,CAAC;IAC/B,CAAC;IACD,IAAI,YAAY,KAAK,iBAAiB,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QACrE,MAAM,KAAK,GAAG,8BAA8B,CAAC,YAAY,CAAC,CAAC;QAC3D,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,YAAY,CAAC;AAC/B,CAAC;AAiBD,MAAM,UAAU,wBAAwB,CAAC,OAAyB;IAChE,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClD,KAAK,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC;QACzD,MAAM,QAAQ,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CACb,qBAAqB,YAAY,wBAAwB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrF,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,YAAY,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;QACrE,MAAM,eAAe,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,eAAe,KAAK,SAAS,IAAI,eAAe,KAAK,EAAE,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CACb,gCAAgC,MAAM,yBAAyB,eAAe,QAAQ,EAAE,IAAI;gBAC1F,uFAAuF;gBACvF,4EAA4E,CAC/E,CAAC;QACJ,CAAC;QACD,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,CAAC,GAAG,eAAe,CAAC;SACxB,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC;SAClD,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;SACtC,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAUD,SAAS,sBAAsB,CAC7B,IAA4B,EAC5B,MAAc;IAEd,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACxD,CAAC"}