@europeum-ebsi/cli 0.0.0

package/dist/scripts/assets/vcdm2.0/VerifiableAccreditationToAttest.json

@@ -0,0 +1,38 @@
+{
+  "@context": ["https://www.w3.org/ns/credentials/v2"],
+  "type": [
+    "VerifiableCredential",
+    "VerifiableAttestation",
+    "VerifiableTrustModel",
+    "VerifiableAccreditationToAttest"
+  ],
+  "issuer": "",
+  "credentialSchema": {
+    "id": "ebsi:pilot:trusted-schemas-registry:/schemas/z2DzoeZrgduRwk3y4RAetwSHRZAHAqNF6fWWMaEcZUdAY",
+    "type": "FullJsonSchemaValidator2021"
+  },
+  "credentialStatus": {
+    "id": "",
+    "type": "EbsiAccreditationEntry"
+  },
+  "credentialSubject": {
+    "id": "",
+    "permissionFor": [
+      {
+        "schemaId": "ebsi:pilot:trusted-schemas-registry:/schemas/zB5yLy7GXdZs1iaJ7wN2K5mhwZDTxjECM2fELYE73mu3E",
+        "types": [
+          "VerifiableCredential",
+          "VerifiableAttestation",
+          "CTRevocable"
+        ],
+        "jurisdiction":
+          "https://publications.europa.eu/resource/authority/atu/EUR"
+      }
+    ]
+  },
+  "termsOfUse": {
+    "parentAccreditation": "",
+    "rootAuthorisation": "",
+    "type": "AccreditationPolicy"
+  }
+}

package/dist/scripts/assets/vcdm2.0/VerifiableAuthorisationForTrustChain.json

@@ -0,0 +1,30 @@
+{
+  "@context": [
+    "https://www.w3.org/ns/credentials/v2"
+  ],
+  "type": [
+    "VerifiableCredential",
+    "VerifiableAttestation",
+    "VerifiableTrustModel",
+    "VerifiableAuthorisationForTrustChain"
+  ],
+  "issuer": "",
+  "credentialSchema": {
+    "id": "ebsi:pilot:trusted-schemas-registry:/schemas/z2DzoeZrgduRwk3y4RAetwSHRZAHAqNF6fWWMaEcZUdAY",
+    "type": "FullJsonSchemaValidator2021"
+  },
+  "credentialStatus": {
+    "id": "",
+    "type": "EbsiAccreditationEntry"
+  },
+  "credentialSubject": {
+    "id": "",
+    "reservedAttributeId": ""
+  },
+  "termsOfUse": {
+    "type": "TrustFrameworkPolicy",
+    "trustFramework": "",
+    "policyId": "",
+    "legalBasis": ""
+  }
+}

package/dist/scripts/assets/vcdm2.0/VerifiableAuthorisationToInvoke.json

@@ -0,0 +1,24 @@
+{
+  "@context": [
+    "https://www.w3.org/ns/credentials/v2"
+  ],
+  "type": [
+    "VerifiableCredential",
+    "VerifiableAttestation",
+    "VerifiableAuthorisationToInvoke"
+  ],
+  "issuer": "",
+  "credentialSubject": {
+    "id": "",
+    "contractAddress": ""
+  },
+  "termsOfUse": {
+    "parentAccreditation": "",
+    "rootAuthorisation": "",
+    "type": "AttestationPolicy"
+  },
+  "credentialSchema": {
+    "id": "ebsi:pilot:trusted-schemas-registry:/schemas/zB5yLy7GXdZs1iaJ7wN2K5mhwZDTxjECM2fELYE73mu3E",
+    "type": "FullJsonSchemaValidator2021"
+  }
+}

package/dist/scripts/assets/vcdm2.0/VerifiableAuthorisationToOnboard.json

@@ -0,0 +1,23 @@
+{
+  "@context": [
+    "https://www.w3.org/ns/credentials/v2"
+  ],
+  "type": [
+    "VerifiableCredential",
+    "VerifiableAttestation",
+    "VerifiableAuthorisationToOnboard"
+  ],
+  "issuer": "",
+  "credentialSubject": {
+    "id": ""
+  },
+  "termsOfUse": {
+    "parentAccreditation": "",
+    "rootAuthorisation": "",
+    "type": "AttestationPolicy"
+  },
+  "credentialSchema": {
+    "id": "ebsi:pilot:trusted-schemas-registry:/schemas/zB5yLy7GXdZs1iaJ7wN2K5mhwZDTxjECM2fELYE73mu3E",
+    "type": "FullJsonSchemaValidator2021"
+  }
+}

package/dist/scripts/bootstrap/0a-loadTPROperator

@@ -0,0 +1,5 @@
+# Script to load the admin with the ROLE OPERATOR in the Trusted Apps Registry
+# This role is granted by the multisignature wallet
+env SET_ENV
+using user null
+using user ES256K did1 PRIVATE_KEY_TPR_OPERATOR DID_TPR_OPERATOR

package/dist/scripts/bootstrap/0b-loadAdmin

@@ -0,0 +1,8 @@
+# Script to load a user with admin attributes in the Trusted Policies Registry
+# (example: "TIR:insertIssuer" -> attribute to insert issuers in the Trusted Issuers Registry)
+env SET_ENV
+using user null
+using user ES256K did1 PRIVATE_KEY_ES256K_SUPPORT_OFFICE DID_SUPPORT_OFFICE
+using user ES256 did1 PRIVATE_KEY_ES256_SUPPORT_OFFICE DID_SUPPORT_OFFICE
+set user.supportOfficeAccreditationUrl ACCREDITATION_URL_SUPPORT_OFFICE
+set user.accreditationUrl ACCREDITATION_URL_ROOT_TAO

package/dist/scripts/bootstrap/1-populateTPR

@@ -0,0 +1,92 @@
+run bootstrap/0a-loadTPROperator
+
+# New Policies
+
+#DID
+proxyledger tpr insertPolicy DID:updateBaseDocument ["updateBaseDocument in DID Registry"]
+proxyledger tpr insertPolicy DID:addController ["addController in DID Registry"]
+proxyledger tpr insertPolicy DID:revokeController ["revokeController in DID Registry"]
+proxyledger tpr insertPolicy DID:addVerificationMethod ["addVerificationMethod in DID Registry"]
+proxyledger tpr insertPolicy DID:addVerificationRelationship ["addVerificationRelationship in DID Registry"]
+proxyledger tpr insertPolicy DID:revokeVerificationMethod ["revokeVerificationMethod in DID Registry"]
+proxyledger tpr insertPolicy DID:expireVerificationMethod ["expireVerificationMethod in DID Registry"]
+proxyledger tpr insertPolicy DID:rollVerificationMethod ["rollVerificationMethod in DID Registry"]
+proxyledger tpr insertPolicy TCR:deployProxy ["deployProxy in Trusted Contracts Registry"]
+proxyledger tpr insertPolicy TCR:manageTemplates ["manage templates in the Proxy Template Regsitry"]
+
+#TIR
+proxyledger tpr insertPolicy TIR:updateIssuer ["updateIssuer in Trusted Issuers Registry"]
+proxyledger tpr insertPolicy TIR:setAttributeMetadata ["setAttributeMetadata in Trusted Issuers Registry"]
+
+#Timestamp
+proxyledger tpr insertPolicy TS:insertHashAlgorithm ["insertHashAlgorithm in Timestamp"]
+proxyledger tpr insertPolicy TS:updateHashAlgorithm ["updateHashAlgorithm in Timestamp"]
+
+#TSR
+proxyledger tpr insertPolicy TSR:insertSchema ["insertSchema in Trusted Schemas Registry"]
+proxyledger tpr insertPolicy TSR:updateSchema ["updateSchema in Trusted Schemas Registry"]
+proxyledger tpr insertPolicy TSR:updateMetadata ["updateMetadata in Trusted Schemas Registry"]
+
+# User Attributes
+# List taken from https://ec.europa.eu/digital-building-blocks/wikis/display/BLOCKCHAININT/RFC+-+Procedure+for+multisig+wallet+maintenance
+
+# Iulian Florin NITA
+proxyledger tpr insertUserAttributes 0x1CBE1945fa323F5C5CeD4ec560C2D1600b4b4364 ["DID:updateBaseDocument", "DID:addController", "DID:revokeController", "DID:addVerificationMethod", "DID:addVerificationRelationship", "DID:revokeVerificationMethod", "DID:expireVerificationMethod", "DID:rollVerificationMethod"]
+proxyledger tpr insertUserAttributes 0x1CBE1945fa323F5C5CeD4ec560C2D1600b4b4364 ["TIR:insertIssuer", "TIR:updateIssuer", "TIR:setAttributeMetadata"]
+proxyledger tpr insertUserAttributes 0x1CBE1945fa323F5C5CeD4ec560C2D1600b4b4364 ["TS:insertHashAlgorithm", "TS:updateHashAlgorithm"]
+proxyledger tpr insertUserAttributes 0x1CBE1945fa323F5C5CeD4ec560C2D1600b4b4364 ["TSR:insertSchema", "TSR:updateSchema", "TSR:updateMetadata"]
+
+# Alen Horvat
+proxyledger tpr insertUserAttributes 0x30dE361706Ddc9D5D0B19AFe9B89212CcD453566 ["DID:updateBaseDocument", "DID:addController", "DID:revokeController", "DID:addVerificationMethod", "DID:addVerificationRelationship", "DID:revokeVerificationMethod", "DID:expireVerificationMethod", "DID:rollVerificationMethod"]
+proxyledger tpr insertUserAttributes 0x30dE361706Ddc9D5D0B19AFe9B89212CcD453566 ["TIR:insertIssuer", "TIR:updateIssuer", "TIR:setAttributeMetadata"]
+proxyledger tpr insertUserAttributes 0x30dE361706Ddc9D5D0B19AFe9B89212CcD453566 ["TS:insertHashAlgorithm", "TS:updateHashAlgorithm"]
+proxyledger tpr insertUserAttributes 0x30dE361706Ddc9D5D0B19AFe9B89212CcD453566 ["TSR:insertSchema", "TSR:updateSchema", "TSR:updateMetadata"]
+
+# Julian GONZALEZ AGUDELO
+proxyledger tpr insertUserAttributes 0x69e48d89bf5e09588E858D757323b4abBBB3f814 ["DID:updateBaseDocument", "DID:addController", "DID:revokeController", "DID:addVerificationMethod", "DID:addVerificationRelationship", "DID:revokeVerificationMethod", "DID:expireVerificationMethod", "DID:rollVerificationMethod"]
+proxyledger tpr insertUserAttributes 0x69e48d89bf5e09588E858D757323b4abBBB3f814 ["TIR:insertIssuer", "TIR:updateIssuer", "TIR:setAttributeMetadata"]
+proxyledger tpr insertUserAttributes 0x69e48d89bf5e09588E858D757323b4abBBB3f814 ["TS:insertHashAlgorithm", "TS:updateHashAlgorithm"]
+proxyledger tpr insertUserAttributes 0x69e48d89bf5e09588E858D757323b4abBBB3f814 ["TSR:insertSchema", "TSR:updateSchema", "TSR:updateMetadata"]
+
+# wesley DEGLISE
+proxyledger tpr insertUserAttributes 0x37daE23C7C8915E6b8FA13b32BBA00c6b6f35993 ["DID:updateBaseDocument", "DID:addController", "DID:revokeController", "DID:addVerificationMethod", "DID:addVerificationRelationship", "DID:revokeVerificationMethod", "DID:expireVerificationMethod", "DID:rollVerificationMethod"]
+proxyledger tpr insertUserAttributes 0x37daE23C7C8915E6b8FA13b32BBA00c6b6f35993 ["TIR:insertIssuer", "TIR:updateIssuer", "TIR:setAttributeMetadata"]
+proxyledger tpr insertUserAttributes 0x37daE23C7C8915E6b8FA13b32BBA00c6b6f35993 ["TS:insertHashAlgorithm", "TS:updateHashAlgorithm"]
+proxyledger tpr insertUserAttributes 0x37daE23C7C8915E6b8FA13b32BBA00c6b6f35993 ["TSR:insertSchema", "TSR:updateSchema", "TSR:updateMetadata"]
+
+# Arnaud RIESS
+proxyledger tpr insertUserAttributes 0x9faB1fF75B0309e4dF4360331ed630F963a30869 ["DID:updateBaseDocument", "DID:addController", "DID:revokeController", "DID:addVerificationMethod", "DID:addVerificationRelationship", "DID:revokeVerificationMethod", "DID:expireVerificationMethod", "DID:rollVerificationMethod"]
+proxyledger tpr insertUserAttributes 0x9faB1fF75B0309e4dF4360331ed630F963a30869 ["TIR:insertIssuer", "TIR:updateIssuer", "TIR:setAttributeMetadata"]
+proxyledger tpr insertUserAttributes 0x9faB1fF75B0309e4dF4360331ed630F963a30869 ["TS:insertHashAlgorithm", "TS:updateHashAlgorithm"]
+proxyledger tpr insertUserAttributes 0x9faB1fF75B0309e4dF4360331ed630F963a30869 ["TSR:insertSchema", "TSR:updateSchema", "TSR:updateMetadata"]
+
+# Guillermo Liarte Cano
+proxyledger tpr insertUserAttributes 0x108d42f3C66DB73E70B3fFe6Dd1F3ABb0f5C83A0 ["DID:updateBaseDocument", "DID:addController", "DID:revokeController", "DID:addVerificationMethod", "DID:addVerificationRelationship", "DID:revokeVerificationMethod", "DID:expireVerificationMethod", "DID:rollVerificationMethod"]
+proxyledger tpr insertUserAttributes 0x108d42f3C66DB73E70B3fFe6Dd1F3ABb0f5C83A0 ["TIR:insertIssuer", "TIR:updateIssuer", "TIR:setAttributeMetadata"]
+proxyledger tpr insertUserAttributes 0x108d42f3C66DB73E70B3fFe6Dd1F3ABb0f5C83A0 ["TS:insertHashAlgorithm", "TS:updateHashAlgorithm"]
+proxyledger tpr insertUserAttributes 0x108d42f3C66DB73E70B3fFe6Dd1F3ABb0f5C83A0 ["TSR:insertSchema", "TSR:updateSchema", "TSR:updateMetadata"]
+
+# Pablo STAIANO
+proxyledger tpr insertUserAttributes 0x3d47cfAeF18364586C9cCAF70F6ED79b2eA38429 ["DID:updateBaseDocument", "DID:addController", "DID:revokeController", "DID:addVerificationMethod", "DID:addVerificationRelationship", "DID:revokeVerificationMethod", "DID:expireVerificationMethod", "DID:rollVerificationMethod"]
+proxyledger tpr insertUserAttributes 0x3d47cfAeF18364586C9cCAF70F6ED79b2eA38429 ["TIR:insertIssuer", "TIR:updateIssuer", "TIR:setAttributeMetadata"]
+proxyledger tpr insertUserAttributes 0x3d47cfAeF18364586C9cCAF70F6ED79b2eA38429 ["TS:insertHashAlgorithm", "TS:updateHashAlgorithm"]
+proxyledger tpr insertUserAttributes 0x3d47cfAeF18364586C9cCAF70F6ED79b2eA38429 ["TSR:insertSchema", "TSR:updateSchema", "TSR:updateMetadata"]
+
+# Yannick HUARD
+proxyledger tpr insertUserAttributes 0xfa8adA8Bd7CEbC130F455f5683ae173B3a3AC365 ["DID:updateBaseDocument", "DID:addController", "DID:revokeController", "DID:addVerificationMethod", "DID:addVerificationRelationship", "DID:revokeVerificationMethod", "DID:expireVerificationMethod", "DID:rollVerificationMethod"]
+proxyledger tpr insertUserAttributes 0xfa8adA8Bd7CEbC130F455f5683ae173B3a3AC365 ["TIR:insertIssuer", "TIR:updateIssuer", "TIR:setAttributeMetadata"]
+proxyledger tpr insertUserAttributes 0xfa8adA8Bd7CEbC130F455f5683ae173B3a3AC365 ["TS:insertHashAlgorithm", "TS:updateHashAlgorithm"]
+proxyledger tpr insertUserAttributes 0xfa8adA8Bd7CEbC130F455f5683ae173B3a3AC365 ["TSR:insertSchema", "TSR:updateSchema", "TSR:updateMetadata"]
+
+# Stefan-Adrian Bancu
+proxyledger tpr insertUserAttributes 0xaA61dA5CbC1E563F065Af74f278abd55c399353D ["DID:updateBaseDocument", "DID:addController", "DID:revokeController", "DID:addVerificationMethod", "DID:addVerificationRelationship", "DID:revokeVerificationMethod", "DID:expireVerificationMethod", "DID:rollVerificationMethod"]
+proxyledger tpr insertUserAttributes 0xaA61dA5CbC1E563F065Af74f278abd55c399353D ["TIR:insertIssuer", "TIR:updateIssuer", "TIR:setAttributeMetadata"]
+proxyledger tpr insertUserAttributes 0xaA61dA5CbC1E563F065Af74f278abd55c399353D ["TS:insertHashAlgorithm", "TS:updateHashAlgorithm"]
+proxyledger tpr insertUserAttributes 0xaA61dA5CbC1E563F065Af74f278abd55c399353D ["TSR:insertSchema", "TSR:updateSchema", "TSR:updateMetadata"]
+
+# Support EBSI
+proxyledger tpr insertUserAttributes 0xA4B6C8710f6bF233b8b480498916DEC224A5a891 ["DID:updateBaseDocument", "DID:addController", "DID:revokeController", "DID:addVerificationMethod", "DID:addVerificationRelationship", "DID:revokeVerificationMethod", "DID:expireVerificationMethod", "DID:rollVerificationMethod"]
+proxyledger tpr insertUserAttributes 0xA4B6C8710f6bF233b8b480498916DEC224A5a891 ["TIR:insertIssuer", "TIR:updateIssuer", "TIR:setAttributeMetadata"]
+proxyledger tpr insertUserAttributes 0xA4B6C8710f6bF233b8b480498916DEC224A5a891 ["TS:insertHashAlgorithm", "TS:updateHashAlgorithm"]
+proxyledger tpr insertUserAttributes 0xA4B6C8710f6bF233b8b480498916DEC224A5a891 ["TSR:insertSchema", "TSR:updateSchema", "TSR:updateMetadata"]
+proxyledger tpr insertUserAttributes 0xA4B6C8710f6bF233b8b480498916DEC224A5a891 ["TCR:deployProxy", "TCR:manageTemplates"]

package/dist/scripts/bootstrap/2-populateDID

@@ -0,0 +1,6 @@
+# DID admin
+run bootstrap/0b-loadAdmin
+proxyledger did insertDidDocument
+proxyledger did addVerificationMethod user.did ES256
+proxyledger did addVerificationRelationship user.did authentication ES256
+proxyledger did addVerificationRelationship user.did assertionMethod ES256

package/dist/scripts/bootstrap/3-populateTimestamp

@@ -0,0 +1,9 @@
+run bootstrap/0b-loadAdmin
+
+proxyledger timestamp insertHashAlgorithm 256 sha-256 2.16.840.1.101.3.4.2.1 1 sha2-256
+proxyledger timestamp insertHashAlgorithm 384 sha-384 2.16.840.1.101.3.4.2.2 1 sha2-384
+proxyledger timestamp insertHashAlgorithm 512 sha-512 2.16.840.1.101.3.4.2.3 1 sha2-512
+proxyledger timestamp insertHashAlgorithm 224 sha3-224 2.16.840.1.101.3.4.2.7 1 sha3-224
+proxyledger timestamp insertHashAlgorithm 256 sha3-256 2.16.840.1.101.3.4.2.8 1 sha3-256
+proxyledger timestamp insertHashAlgorithm 384 sha3-384 2.16.840.1.101.3.4.2.9 1 sha3-384
+proxyledger timestamp insertHashAlgorithm 512 sha3-512 2.16.840.1.101.3.4.2.10 1 sha3-512

package/dist/scripts/bootstrap/4-populateTIR

@@ -0,0 +1,8 @@
+run bootstrap/0b-loadAdmin
+
+# support office
+reservedAttributeId: compute randomID
+vc: run issue_SelfAttestationSupportOffice user.did reservedAttributeId
+proxyledger tir setAttributeMetadata user.did reservedAttributeId roottao
+proxyledger tir setAttributeData user.did reservedAttributeId vc
+

package/dist/scripts/bootstrap/5-populateTSR

@@ -0,0 +1,85 @@
+run bootstrap/0b-loadAdmin
+
+# load json file exported from json-schema repo
+schemes: load SCHEMES_FILE
+
+proxyledger tsr insertSchema schemes.0.idBase16 schemes.0.content {}
+proxyledger tsr insertSchema schemes.1.idBase16 schemes.1.content {}
+proxyledger tsr insertSchema schemes.2.idBase16 schemes.2.content {}
+proxyledger tsr insertSchema schemes.3.idBase16 schemes.3.content {}
+proxyledger tsr insertSchema schemes.4.idBase16 schemes.4.content {}
+proxyledger tsr insertSchema schemes.5.idBase16 schemes.5.content {}
+proxyledger tsr insertSchema schemes.6.idBase16 schemes.6.content {}
+proxyledger tsr insertSchema schemes.7.idBase16 schemes.7.content {}
+proxyledger tsr insertSchema schemes.8.idBase16 schemes.8.content {}
+proxyledger tsr insertSchema schemes.9.idBase16 schemes.9.content {}
+proxyledger tsr insertSchema schemes.10.idBase16 schemes.10.content {}
+proxyledger tsr insertSchema schemes.11.idBase16 schemes.11.content {}
+proxyledger tsr insertSchema schemes.12.idBase16 schemes.12.content {}
+proxyledger tsr insertSchema schemes.13.idBase16 schemes.13.content {}
+proxyledger tsr insertSchema schemes.14.idBase16 schemes.14.content {}
+proxyledger tsr insertSchema schemes.15.idBase16 schemes.15.content {}
+proxyledger tsr insertSchema schemes.16.idBase16 schemes.16.content {}
+proxyledger tsr insertSchema schemes.17.idBase16 schemes.17.content {}
+proxyledger tsr insertSchema schemes.18.idBase16 schemes.18.content {}
+proxyledger tsr insertSchema schemes.19.idBase16 schemes.19.content {}
+proxyledger tsr insertSchema schemes.20.idBase16 schemes.20.content {}
+proxyledger tsr insertSchema schemes.21.idBase16 schemes.21.content {}
+proxyledger tsr insertSchema schemes.22.idBase16 schemes.22.content {}
+proxyledger tsr insertSchema schemes.23.idBase16 schemes.23.content {}
+proxyledger tsr insertSchema schemes.24.idBase16 schemes.24.content {}
+proxyledger tsr insertSchema schemes.25.idBase16 schemes.25.content {}
+proxyledger tsr insertSchema schemes.26.idBase16 schemes.26.content {}
+proxyledger tsr insertSchema schemes.27.idBase16 schemes.27.content {}
+proxyledger tsr insertSchema schemes.28.idBase16 schemes.28.content {}
+proxyledger tsr insertSchema schemes.29.idBase16 schemes.29.content {}
+proxyledger tsr insertSchema schemes.30.idBase16 schemes.30.content {}
+proxyledger tsr insertSchema schemes.31.idBase16 schemes.31.content {}
+proxyledger tsr insertSchema schemes.32.idBase16 schemes.32.content {}
+proxyledger tsr insertSchema schemes.33.idBase16 schemes.33.content {}
+proxyledger tsr insertSchema schemes.34.idBase16 schemes.34.content {}
+proxyledger tsr insertSchema schemes.35.idBase16 schemes.35.content {}
+proxyledger tsr insertSchema schemes.36.idBase16 schemes.36.content {}
+proxyledger tsr insertSchema schemes.37.idBase16 schemes.37.content {}
+proxyledger tsr insertSchema schemes.38.idBase16 schemes.38.content {}
+proxyledger tsr insertSchema schemes.39.idBase16 schemes.39.content {}
+proxyledger tsr insertSchema schemes.40.idBase16 schemes.40.content {}
+proxyledger tsr insertSchema schemes.41.idBase16 schemes.41.content {}
+proxyledger tsr insertSchema schemes.42.idBase16 schemes.42.content {}
+proxyledger tsr insertSchema schemes.43.idBase16 schemes.43.content {}
+proxyledger tsr insertSchema schemes.44.idBase16 schemes.44.content {}
+proxyledger tsr insertSchema schemes.45.idBase16 schemes.45.content {}
+proxyledger tsr insertSchema schemes.46.idBase16 schemes.46.content {}
+proxyledger tsr insertSchema schemes.47.idBase16 schemes.47.content {}
+proxyledger tsr insertSchema schemes.48.idBase16 schemes.48.content {}
+proxyledger tsr insertSchema schemes.49.idBase16 schemes.49.content {}
+proxyledger tsr insertSchema schemes.50.idBase16 schemes.50.content {}
+proxyledger tsr insertSchema schemes.51.idBase16 schemes.51.content {}
+proxyledger tsr insertSchema schemes.52.idBase16 schemes.52.content {}
+proxyledger tsr insertSchema schemes.53.idBase16 schemes.53.content {}
+proxyledger tsr insertSchema schemes.54.idBase16 schemes.54.content {}
+proxyledger tsr insertSchema schemes.55.idBase16 schemes.55.content {}
+proxyledger tsr insertSchema schemes.56.idBase16 schemes.56.content {}
+proxyledger tsr insertSchema schemes.57.idBase16 schemes.57.content {}
+proxyledger tsr insertSchema schemes.58.idBase16 schemes.58.content {}
+proxyledger tsr insertSchema schemes.59.idBase16 schemes.59.content {}
+proxyledger tsr insertSchema schemes.60.idBase16 schemes.60.content {}
+proxyledger tsr insertSchema schemes.61.idBase16 schemes.61.content {}
+proxyledger tsr insertSchema schemes.62.idBase16 schemes.62.content {}
+proxyledger tsr insertSchema schemes.63.idBase16 schemes.63.content {}
+proxyledger tsr insertSchema schemes.64.idBase16 schemes.64.content {}
+proxyledger tsr insertSchema schemes.65.idBase16 schemes.65.content {}
+proxyledger tsr insertSchema schemes.66.idBase16 schemes.66.content {}
+proxyledger tsr insertSchema schemes.67.idBase16 schemes.67.content {}
+proxyledger tsr insertSchema schemes.68.idBase16 schemes.68.content {}
+proxyledger tsr insertSchema schemes.69.idBase16 schemes.69.content {}
+proxyledger tsr insertSchema schemes.70.idBase16 schemes.70.content {}
+proxyledger tsr insertSchema schemes.71.idBase16 schemes.71.content {}
+proxyledger tsr insertSchema schemes.72.idBase16 schemes.72.content {}
+proxyledger tsr insertSchema schemes.73.idBase16 schemes.73.content {}
+proxyledger tsr insertSchema schemes.74.idBase16 schemes.74.content {}
+proxyledger tsr insertSchema schemes.75.idBase16 schemes.75.content {}
+proxyledger tsr insertSchema schemes.76.idBase16 schemes.76.content {}
+proxyledger tsr insertSchema schemes.77.idBase16 schemes.77.content {}
+proxyledger tsr insertSchema schemes.78.idBase16 schemes.78.content {}
+proxyledger tsr insertSchema schemes.79.idBase16 schemes.79.content {}

package/dist/scripts/bootstrap/6-setupConformanceIssuer

@@ -0,0 +1,35 @@
+# create keys for conformance
+using user null
+using user ES256K did1
+using user ES256 did1 user.keys.ES256K.privateKeyHex
+set confIssuer user
+
+# register conformance in the DID Registry
+proxyledger did insertDidDocument
+proxyledger did addVerificationMethod user.did ES256
+proxyledger did addVerificationRelationship user.did authentication ES256
+proxyledger did addVerificationRelationship user.did assertionMethod ES256
+
+# conformance service can authorize Root TAOs then it needs to be registered in TPR
+run bootstrap/0a-loadTPROperator
+proxyledger tpr insertUserAttributes confIssuer.address ["TIR:setAttributeMetadata"]
+using user confIssuer
+
+# registration in the TIR
+reservedAttributeId: compute randomID
+vc: run issue_SelfAttestationSupportOffice user.did reservedAttributeId
+proxyledger tir setAttributeMetadata user.did reservedAttributeId roottao
+proxyledger tir setAttributeData user.did reservedAttributeId vc
+
+# register a proxy
+set proxyData {"prefix":"","headers":{},"testSuffix":"/credentials/status/1"}
+set proxyData.prefix domain /conformance/v4/issuer-mock
+proxyledger tir addIssuerProxy user.did proxyData
+proxyId: compute sha256 proxyData
+
+set user.accreditationUrl tirUrl /issuers/ user.did /attributes/ reservedAttributeId
+set proxyUrl tirUrl /issuers/ user.did /proxies/ proxyId
+set user.proxyId proxyId
+
+view user
+view proxyUrl

package/dist/scripts/bootstrap/README.md

@@ -0,0 +1,218 @@
+# EBSI Network Bootstrap Guide
+
+This document describes the procedure to bootstrap a new EBSI network. It is intended for administrators setting up a fresh deployment with custom smart contracts.
+
+## Prerequisites
+
+- All EBSI smart contracts must be deployed on the target blockchain
+- At least one account with **Operator** role in the Trusted Policies Registry (TPR)
+- Node.js v18 or higher (v22 recommended for optimal stability)
+- SSH access to the RPC node (for direct blockchain connectivity)
+
+## 1. Environment Configuration
+
+### 1.1 Direct Blockchain Access (proxyledger)
+
+The bootstrap process uses `proxyledger` to bypass the Ledger API and interact directly with the Besu RPC node. This is required because the Ledger API may not be available or configured for a new network.
+
+1. Establish an SSH tunnel to the RPC node to expose it locally:
+
+   ```bash
+   ssh -L <local_port>:<rpc_host>:<rpc_port> <user>@<bastion_host>
+   ```
+
+2. Define the Besu provider endpoint in your environment. Use the appropriate variable for your target environment:
+
+   | Environment | Variable | Example |
+   |-------------|----------|---------|
+   | Test       | `TEST_BESU_PROVIDER` | `http://localhost:18545` |
+   | Pilot      | `PILOT_BESU_PROVIDER` | `http://localhost:28545` |
+   | Custom     | `BESU_PROVIDER` | `http://localhost:38545` |
+
+   Example for a custom environment:
+
+   ```bash
+   export BESU_PROVIDER=http://localhost:38545
+   ```
+
+### 1.2 Contract Addresses (Custom Environments Only)
+
+If you are not using the standard **test** or **pilot** environments, you must define all contract addresses in your `.env` file or environment:
+
+| Variable | Description |
+|----------|-------------|
+| `DID_SC_ADDRESS` | DID Registry contract address |
+| `TIMESTAMP_SC_ADDRESS` | Timestamp Registry contract address |
+| `TNT_SC_ADDRESS` | Trusted Nodes List contract address |
+| `TIR_SC_ADDRESS` | Trusted Issuers Registry contract address |
+| `TPR_SC_ADDRESS` | Trusted Policies Registry contract address |
+| `TSR_SC_ADDRESS` | Trusted Schemas Registry contract address |
+
+### 1.3 Copy and Configure Environment
+
+```bash
+cp .env.example .env
+# Edit .env with your provider URL and contract addresses
+```
+
+## 2. Start the CLI
+
+Build the project (if running from source) and start the EBSI CLI:
+
+```bash
+# From source
+pnpm run build
+pnpm start
+
+# Or using npx (public package)
+npx @europeum-ebsi/cli
+```
+
+When the prompt displays `==>`, the CLI is ready to receive commands.
+
+## 3. Define Required Variables
+
+Before running the bootstrap scripts, define the following variables. You can generate most values randomly using the CLI, **except** the TPR Operator private key, which must be the key of the account that holds the Operator role in the TPR.
+
+### Variables to Set (Required)
+
+```
+set PRIVATE_KEY_TPR_OPERATOR <private_key_of_tpr_operator>
+set DID_TPR_OPERATOR <did_of_tpr_operator>
+set PRIVATE_KEY_ES256K_SUPPORT_OFFICE <private_key_es256k_support_office>
+set PRIVATE_KEY_ES256_SUPPORT_OFFICE <private_key_es256_support_office>
+set DID_SUPPORT_OFFICE <did_of_support_office>
+```
+
+### Variables to Set (Environment-Dependent)
+
+```
+set SET_ENV test
+```
+
+Use `test` or `pilot` for standard environments. For custom deployments, ensure `EBSI_ENV` and the corresponding provider are correctly configured.
+
+### Optional Variables (for `0b-loadAdmin`)
+
+The bootstrap scripts that load the Support Office user may require these if your workflows depend on accreditation URLs:
+
+```
+set ACCREDITATION_URL_SUPPORT_OFFICE <url>
+set ACCREDITATION_URL_ROOT_TAO <url>
+```
+
+For initial bootstrap, placeholder values may suffice. After completing [Step 4](#step-4-populate-trusted-issuers-registry-tir), use `view reservedAttributeId` to obtain the attribute ID and construct `ACCREDITATION_URL_SUPPORT_OFFICE` (e.g. `{tirUrl}/issuers/{DID_SUPPORT_OFFICE}/attributes/{reservedAttributeId}`) for future Support Office operations.
+
+---
+
+**Note:** The TPR Operator private key cannot be generated—it must correspond to an account that already has the Operator role on the deployed TPR contract. Generate all other keys and DIDs using the CLI's key generation commands before running the scripts.
+
+## 4. Bootstrap Steps
+
+Execute the steps below **in order**. Scripts are resolved from `dist/scripts/bootstrap/` when running the built application.
+
+---
+
+### Step 1: Populate Trusted Policies Registry (TPR)
+
+Registers policies in the Trusted Policies Registry and assigns attributes to users.
+
+**Command:**
+
+```
+run bootstrap/1-populateTPR
+```
+
+**Customization:** To use a different set of users, edit `src/scripts/bootstrap/1-populateTPR` before building. The script contains hardcoded Ethereum addresses and policy associations.
+
+---
+
+### Step 2: Populate DID Registry
+
+Registers the Support Office in the DID Registry.
+
+**Command:**
+
+```
+run bootstrap/2-populateDID
+```
+
+---
+
+### Step 3: Populate Timestamp Registry
+
+Creates the required hash algorithms in the Timestamp Registry.
+
+**Command:**
+
+```
+run bootstrap/3-populateTimestamp
+```
+
+---
+
+### Step 4: Populate Trusted Issuers Registry (TIR)
+
+Inserts the Support Office verifiable credential into the Trusted Issuers Registry.
+
+**Command:**
+
+```
+run bootstrap/4-populateTIR
+```
+
+**For future use:** The reserved attribute ID is needed for Support Office configuration. View it with:
+
+```
+view reservedAttributeId
+```
+
+Use this value to construct and set `ACCREDITATION_URL_SUPPORT_OFFICE` (e.g. `{tirUrl}/issuers/{DID_SUPPORT_OFFICE}/attributes/{reservedAttributeId}`) for later Support Office operations.
+
+---
+
+### Step 5: Populate Trusted Schemas Registry (TSR)
+
+Registers JSON schemas from the [EBSI JSON Schema repository](https://gitlab.com/europeum/public/json-schema).
+
+1. Clone the [json-schema repository](https://gitlab.com/europeum/public/json-schema) and follow its instructions to export the schemas into a JSON file.
+2. Set the path to the exported file:
+
+   ```
+   set SCHEMES_FILE <path/to/exported/schemes.json>
+   ```
+
+3. Run the population script:
+
+   ```
+   run bootstrap/5-populateTSR
+   ```
+
+**Limitation:** The script is configured to register 80 schemas. If your JSON file contains more, you must extend `src/scripts/bootstrap/5-populateTSR` with additional `proxyledger tsr insertSchema` lines before rebuilding.
+
+---
+
+## 5. Bootstrap Complete
+
+After completing all steps, the network is bootstrapped with:
+
+- Trusted Policies Registry policies and user attributes  
+- Support Office DID and verification methods  
+- Timestamp hash algorithms  
+- Support Office as a trusted issuer in the TIR  
+- JSON schemas in the TSR  
+
+## 6. Environment-Specific Notes
+
+Each deployment may have specific requirements. Consider:
+
+- **User lists:** Adjust `1-populateTPR` to add or remove operators and their policy attributes
+- **Schema count:** Update `5-populateTSR` if more than 80 schemas are needed
+- **Custom accreditation:** Configure accreditation URLs and legal identifiers as required by your trust framework
+
+For detailed CLI usage, tutorials, and command reference, consult the official documentation:
+
+- [EBSI Hub – CLI](https://hub.ebsi.eu/tools/cli)
+- [CLI Commands](https://hub.ebsi.eu/tools/cli/commands)
+- [Support Office Tutorials](https://hub.ebsi.eu/tools/cli/support-office-tutorials)
+- [Onboarding Tutorial](https://hub.ebsi.eu/tools/cli/onboarding-tutorial)

package/dist/scripts/issueVcInvoke

@@ -0,0 +1,10 @@
+# way of use:
+# ==> run issueVcInvoke <didSubject> <address>
+
+payloadVcInvoke: load assets/vcdm1.1/VerifiableAuthorisationToInvoke.json
+set payloadVcInvoke.issuer user.did
+set payloadVcInvoke.credentialSubject.id $1
+set payloadVcInvoke.credentialSubject.contractAddress $2
+set payloadVcInvoke.termsOfUse.id user.accreditationUrl
+set payloadVcInvoke.credentialSchema.id tsrUrl /schemas/zH74MKkYTbQ6ZfTxufi6A3Aw8giS4piGm8dpgxFmkJjmu
+compute createVcJwt payloadVcInvoke {} ES256 1.1

package/dist/scripts/issueVcOnboard

@@ -0,0 +1,9 @@
+# way of use:
+# ==> run issueVcOnboard <didSubject>
+
+payloadVcOnboard: load assets/vcdm1.1/VerifiableAuthorisationToOnboard.json
+set payloadVcOnboard.issuer user.did
+set payloadVcOnboard.credentialSubject.id $1
+set payloadVcOnboard.termsOfUse.id user.accreditationUrl
+set payloadVcOnboard.credentialSchema.id tsrUrl /schemas/zH74MKkYTbQ6ZfTxufi6A3Aw8giS4piGm8dpgxFmkJjmu
+compute createVcJwt payloadVcOnboard {} ES256 1.1

package/dist/scripts/issueVcRootTAO

@@ -0,0 +1,11 @@
+# way of use:
+# ==> run issueVcRootTAO <didSubject>
+
+reservedAttributeId: compute randomID
+payloadVcRootTAO: load assets/vcdm1.1/VerifiableAuthorisationForTrustChain.json
+set payloadVcRootTAO.issuer user.did
+set payloadVcRootTAO.credentialSubject.id $1
+set payloadVcRootTAO.termsOfUse.id user.supportOfficeAccreditationUrl
+set payloadVcRootTAO.credentialSchema.id tsrUrl /schemas/zH74MKkYTbQ6ZfTxufi6A3Aw8giS4piGm8dpgxFmkJjmu
+set payloadVcRootTAO.credentialSubject.reservedAttributeId reservedAttributeId
+compute createVcJwt payloadVcRootTAO {} ES256 1.1

package/dist/scripts/issueVcTAO

@@ -0,0 +1,12 @@
+# way of use:
+# ==> run issueVcTAO <didSubject>
+
+reservedAttributeId: compute randomID
+payloadVcTAO: load assets/vcdm1.1/VerifiableAccreditationToAccredit.json
+set payloadVcTAO.issuer user.did
+set payloadVcTAO.credentialSubject.id $1
+set payloadVcTAO.credentialSubject.accreditedFor.0.schemaId tsrUrl /schemas/zH74MKkYTbQ6ZfTxufi6A3Aw8giS4piGm8dpgxFmkJjmu
+set payloadVcTAO.termsOfUse.0.id user.accreditationUrl
+set payloadVcTAO.credentialSchema.id tsrUrl /schemas/zHXHLkJpZg4w9nt2GbEBbyE8uhkfirbmT3nF7mJ9kFnjv
+set payloadVcTAO.credentialSubject.reservedAttributeId reservedAttributeId
+compute createVcJwt payloadVcTAO {} ES256 1.1