@idos-network/issuer 1.0.0-rc.1.2 → 1.2.0

package/README.md

@@ -1,11 +1,72 @@
 # idOS Issuer JavaScript SDK
 
-See [Issuer guide](../../docs/guide-issuer.md)
+Server-side SDK for issuing and managing credentials in idOS. Designed for backend services that verify user identity and issue verifiable credentials.
 
+[![NPM](https://img.shields.io/npm/v/@idos-network/issuer?logo=npm)](https://www.npmjs.com/package/@idos-network/issuer) ![License](https://img.shields.io/badge/license-MIT-blue?&logo=data:image/svg%2bxml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSI2NHB4IiBoZWlnaHQ9IjY0cHgiIHZpZXdCb3g9IjAgMCAyNCAyNCIgZmlsbD0ibm9uZSIgc3Ryb2tlPSIjRkZGRkZGIiBzdHJva2Utd2lkdGg9IjIiIHN0cm9rZS1saW5lY2FwPSJyb3VuZCIgc3Ryb2tlLWxpbmVqb2luPSJyb3VuZCiPjxnIGlkPSJTVkdSZXBvX2JnQ2FycmllciIgc3Ryb2tlLXdpZHRoPSIwIj48L2c+PGcgaWQ9IlNWR1JlcG9fdHJhY2VyQ2FycmllciIgc3Ryb2tlLWxpbmVjYXA9InJvdW5kIiBzdHJva2UtbGluZWpvaW49InJvdW5kIj48L2c+PGcgaWQ9IlNWR1JlcG9faWNvbkNhcnJpZXIiPiA8cGF0aCBkPSJNMTYgMTZsMy04IDMuMDAxIDhBNS4wMDIgNS4wMDIgMCAwMTE2IDE2eiI+PC9wYXRoPiA8cGF0aCBkPSJNMiAxNmwzLTggMy4wMDEgOEE1LjAwMiA1LjAwMiAwIDAxMiAxNnoiPjwvcGF0aD4gPHBhdGggZD0iTTcgMjFoMTAiPjwvcGF0aD4gPHBhdGggZD0iTTEyIDN2MTgiPjwvcGF0aD4gPHBhdGggZD0iTTMgN2gyYzIgMCA1LTEgNy0yIDIgMSA1IDIgNyAyaDIiPjwvcGF0aD4gPC9nPjwvc3ZnPgo=)
+
+> ⚖️ Legalities
+>
+> By downloading, installing, or implementing any of the idOS' SDKs, you acknowledge that you have read and understood idOS' Privacy Policy and Transparency Document.
+>
+> - <https://www.idos.network/legal/privacy-policy>
+> - <https://www.idos.network/legal/transparency-document>
+
+## Installation
+
+```bash
+pnpm add @idos-network/issuer
+```
+
+## Quick Start
+
+```typescript
+import { idOSIssuer as idOSIssuerClass } from "@idos-network/issuer";
+
+// Initialize with your signing and encryption keys
+const idOSIssuer = await idOSIssuerClass.init({
+  nodeUrl: "https://nodes.idos.network",
+  signingKeyPair, // Your signing keypair
+  encryptionSecretKey, // Your encryption secret key
+});
+
+// Create a user profile
+await idOSIssuer.createUser(user, wallet);
+
+// Build and issue a W3C Verifiable Credential
+const credential = await idOSIssuer.buildCredential(credentialFields, credentialSubject, issuer);
+
+// Write credential using delegated write grant
+await idOSIssuer.createCredentialByDelegatedWriteGrant(credentialPayload, delegatedWriteGrant);
+```
+
+## Documentation
+
+For complete documentation, examples, and implementation guides:
+
+- 📖 **[Issuer Guide](../../docs/guide-issuer.md)** - Comprehensive implementation guide
+- 🏗️ **[System Overview](../../docs/README.md)** - Understanding idOS architecture
+- 🔒 **[Encryption](../../docs/encryption.md)** - Encryption key management
+- ✍️ **[Signatures](../../docs/signatures.md)** - Signer implementation details
+
+## Key Features
+
+- **User Profile Creation** - Create and manage user profiles in idOS
+- **Credential Issuance** - Issue W3C Verifiable Credentials
+- **Delegated Write Grants** - Write credentials on behalf of users
+- **Credential Management** - Edit and revoke issued credentials
+- **Multi-Chain Support** - Works with EVM, NEAR, XRPL, and Stellar wallets
+- **Schema Validation** - Optional validation against W3C VC schemas
+
+## Support
+
+Please follow the process outlined here: <https://github.com/idos-network/.github/blob/main/profile/README.md>
+
+---
 
 ## Developing the SDK locally
 
 Run:
+
 ```bash
 pnpm dev
 ```

package/dist/index.d.mts

@@ -0,0 +1,78 @@
+import { Credential, FaceIdCredential } from "@idos-network/credentials/builder";
+import { EditPublicNotesAsIssuerInput, idOSDelegatedWriteGrant, idOSGrant, idOSUser, idOSUser as idOSUser$1, idOSUserAttribute, idOSWallet, idOSWallet as idOSWallet$1 } from "@idos-network/kwil-infra/actions";
+import nacl, { SignKeyPair } from "tweetnacl";
+import { AvailableIssuerType, CredentialFields, CredentialSubject, CredentialSubjectFaceId, idOSCredential } from "@idos-network/credentials/types";
+
+//#region src/services/credential.service.d.ts
+type BaseCredentialParams = {
+  id?: string;
+  userId: string;
+  publicNotes: string;
+  plaintextContent: Uint8Array;
+  recipientEncryptionPublicKey: Uint8Array;
+};
+type DelegatedWriteGrantBaseParams = Omit<BaseCredentialParams, "userId">;
+type DelegatedWriteGrantParams = {
+  id: string;
+  ownerWalletIdentifier: string;
+  consumerWalletIdentifier: string;
+  issuerPublicKey: string;
+  accessGrantTimelock: string;
+  notUsableBefore: string;
+  notUsableAfter: string;
+  signature: string;
+};
+//#endregion
+//#region src/services/grant.service.d.ts
+type CreateAccessGrantFromDAGParams = {
+  dag_data_id: string;
+  dag_owner_wallet_identifier: string;
+  dag_grantee_wallet_identifier: string;
+  dag_signature: string;
+  dag_locked_until: number;
+  dag_content_hash: string;
+};
+//#endregion
+//#region src/services/user.service.d.ts
+type CreateProfileReqParams = Omit<idOSUser$1, "id"> & {
+  id?: string;
+};
+type UpsertWalletReqParams = Omit<idOSWallet$1, "id"> & {
+  id?: string;
+};
+type CreateWalletReqParams = Omit<UpsertWalletReqParams, "user_id"> & {
+  id?: string;
+};
+//#endregion
+//#region src/index.d.ts
+type CreateIssuerParams = {
+  chainId?: string;
+  nodeUrl: string;
+  signingKeyPair: SignKeyPair;
+  encryptionSecretKey: Uint8Array;
+};
+declare class idOSIssuer {
+  #private;
+  static init(params: CreateIssuerParams): Promise<idOSIssuer>;
+  private constructor();
+  hasProfile(userAddress: string): Promise<boolean>;
+  createUserProfile(params: CreateProfileReqParams): Promise<idOSUser>;
+  upsertWalletAsInserter(params: UpsertWalletReqParams): Promise<idOSWallet>;
+  createUser(user: CreateProfileReqParams, wallet: CreateWalletReqParams): Promise<[idOSUser, idOSWallet]>;
+  getUser(id: string): Promise<idOSUser>;
+  requestDelegatedWriteGrantMessage(params: idOSDelegatedWriteGrant): Promise<string>;
+  createCredentialByDelegatedWriteGrant(credentialParams: DelegatedWriteGrantBaseParams, delegatedWriteGrant: DelegatedWriteGrantParams, consumerEncryptionPublicKey?: Uint8Array): Promise<{
+    originalCredential: Omit<idOSCredential, "user_id">;
+    copyCredential: Omit<idOSCredential, "user_id">;
+  }>;
+  editCredentialAsIssuer(publicNotesId: string, publicNotes: string): Promise<EditPublicNotesAsIssuerInput | null>;
+  getCredentialIdByContentHash(contentHash: string): Promise<string | null>;
+  getCredentialShared(id: string): Promise<idOSCredential | null>;
+  createAccessGrantFromDAG(params: CreateAccessGrantFromDAGParams): Promise<CreateAccessGrantFromDAGParams | null>;
+  buildCredential(fields: CredentialFields, subject: CredentialSubject, issuer: AvailableIssuerType, validate?: boolean): Promise<Credential>;
+  deriveCredentialLevel(subject: CredentialSubject): string;
+  buildFaceIdCredential(fields: CredentialFields, subject: CredentialSubjectFaceId, issuer: AvailableIssuerType, validate?: boolean): Promise<FaceIdCredential>;
+}
+//#endregion
+export { type AvailableIssuerType, type Credential, type CredentialFields, type CredentialSubject, type CredentialSubjectFaceId, type FaceIdCredential, type idOSCredential, type idOSDelegatedWriteGrant, type idOSGrant, idOSIssuer, type idOSUser, type idOSUserAttribute, type idOSWallet };
+//# sourceMappingURL=index.d.mts.map

package/dist/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../src/services/credential.service.ts","../src/services/grant.service.ts","../src/services/user.service.ts","../src/index.ts"],"mappings":";;;;;;KAsCY,oBAAA;EACV,EAAA;EACA,MAAA;EACA,WAAA;EACA,gBAAA,EAAkB,UAAA;EAClB,4BAAA,EAA8B,UAAA;AAAA;AAAA,KAGpB,6BAAA,GAAgC,IAAA,CAAK,oBAAA;AAAA,KAErC,yBAAA;EACV,EAAA;EACA,qBAAA;EACA,wBAAA;EACA,eAAA;EACA,mBAAA;EACA,eAAA;EACA,cAAA;EACA,SAAA;AAAA;;;KChDU,8BAAA;EACV,WAAA;EACA,2BAAA;EACA,6BAAA;EACA,aAAA;EACA,gBAAA;EACA,gBAAA;AAAA;;;KCFU,sBAAA,GAAyB,IAAA,CAAK,UAAA;EACxC,EAAA;AAAA;AAAA,KAGU,qBAAA,GAAwB,IAAA,CAAK,YAAA;EACvC,EAAA;AAAA;AAAA,KAGU,qBAAA,GAAwB,IAAA,CAAK,qBAAA;EACvC,EAAA;AAAA;;;KCkBG,kBAAA;EACH,OAAA;EACA,OAAA;EACA,cAAA,EAAgB,WAAA;EAChB,mBAAA,EAAqB,UAAA;AAAA;AAAA,cAGV,UAAA;EAAA;SAKE,IAAA,CAAK,MAAA,EAAQ,kBAAA,GAAqB,OAAA,CAAQ,UAAA;EAAA,QAqB/C,WAAA,CAAA;EAWR,UAAA,CAAiB,WAAA,WAAsB,OAAA;EAIvC,iBAAA,CAAwB,MAAA,EAAQ,sBAAA,GAAyB,OAAA,CAAQ,QAAA;EAIjE,sBAAA,CAA6B,MAAA,EAAQ,qBAAA,GAAwB,OAAA,CAAQ,UAAA;EAIrE,UAAA,CACE,IAAA,EAAM,sBAAA,EACN,MAAA,EAAQ,qBAAA,GACP,OAAA,EAAS,QAAA,EAAU,UAAA;EAItB,OAAA,CAAc,EAAA,WAAa,OAAA,CAAQ,QAAA;EAInC,iCAAA,CAAwC,MAAA,EAAQ,uBAAA,GAA0B,OAAA;EAI1E,qCAAA,CACE,gBAAA,EAAkB,6BAAA,EAClB,mBAAA,EAAqB,yBAAA,EACrB,2BAAA,GAA8B,UAAA,GAC7B,OAAA;IACD,kBAAA,EAAoB,IAAA,CAAK,cAAA;IACzB,cAAA,EAAgB,IAAA,CAAK,cAAA;EAAA;EASvB,sBAAA,CACE,aAAA,UACA,WAAA,WACC,OAAA,CAAQ,4BAAA;EAIX,4BAAA,CAAmC,WAAA,WAAsB,OAAA;EAIzD,mBAAA,CAA0B,EAAA,WAAa,OAAA,CAAQ,cAAA;EAI/C,wBAAA,CACE,MAAA,EAAQ,8BAAA,GACP,OAAA,CAAQ,8BAAA;EAQX,eAAA,CACE,MAAA,EAAQ,gBAAA,EACR,OAAA,EAAS,iBAAA,EACT,MAAA,EAAQ,mBAAA,EACR,QAAA,aACC,OAAA,CAAQ,UAAA;EAIX,qBAAA,CAAsB,OAAA,EAAS,iBAAA;EAI/B,qBAAA,CACE,MAAA,EAAQ,gBAAA,EACR,OAAA,EAAS,uBAAA,EACT,MAAA,EAAQ,mBAAA,EACR,QAAA,aACC,OAAA,CAAQ,gBAAA;AAAA"}

package/dist/index.mjs

@@ -0,0 +1,233 @@
+import { buildCredential, buildFaceIdCredential } from "@idos-network/credentials/builder";
+import { deriveLevel } from "@idos-network/credentials/utils";
+import { createNodeKwilClient, createServerKwilSigner } from "@idos-network/kwil-infra";
+import { addUserAsInserter, createAgByDagForCopy, createCredentialsByDwg, dwgMessage, editPublicNotesAsIssuer, getCredentialShared, getSiblingCredentialId, getUserAsInserter, hasProfile, upsertWalletAsInserter } from "@idos-network/kwil-infra/actions";
+import { base64Decode, base64Encode, hexEncode, hexEncodeSha256Hash, utf8Encode } from "@idos-network/utils/codecs";
+import { NoncedBox, encryptContent } from "@idos-network/utils/cryptography";
+import nacl from "tweetnacl";
+//#region ../../node_modules/.pnpm/tiny-invariant@1.3.3/node_modules/tiny-invariant/dist/esm/tiny-invariant.js
+var isProduction = process.env.NODE_ENV === "production";
+var prefix = "Invariant failed";
+function invariant(condition, message) {
+	if (condition) return;
+	if (isProduction) throw new Error(prefix);
+	var provided = typeof message === "function" ? message() : message;
+	var value = provided ? "".concat(prefix, ": ").concat(provided) : prefix;
+	throw new Error(value);
+}
+//#endregion
+//#region src/services/credential.service.ts
+var CredentialService = class {
+	#kwilClient;
+	#signingKeyPair;
+	#encryptionSecretKey;
+	constructor(kwilClient, signingKeyPair, encryptionSecretKey) {
+		this.#kwilClient = kwilClient;
+		this.#signingKeyPair = signingKeyPair;
+		this.#encryptionSecretKey = encryptionSecretKey;
+	}
+	#buildInsertableIDOSCredential({ userId, publicNotes, plaintextContent, recipientEncryptionPublicKey }) {
+		const ephemeralKeyPair = nacl.box.keyPair();
+		const content = encryptContent(plaintextContent, recipientEncryptionPublicKey, ephemeralKeyPair.secretKey);
+		const public_notes_signature = base64Encode(nacl.sign.detached(utf8Encode(publicNotes), this.#signingKeyPair.secretKey));
+		return {
+			user_id: userId,
+			content: base64Encode(content),
+			public_notes: publicNotes,
+			public_notes_signature,
+			broader_signature: base64Encode(nacl.sign.detached(Uint8Array.from([...base64Decode(public_notes_signature), ...content]), this.#signingKeyPair.secretKey)),
+			issuer_auth_public_key: hexEncode(this.#signingKeyPair.publicKey, true),
+			encryptor_public_key: base64Encode(ephemeralKeyPair.publicKey)
+		};
+	}
+	#ensureEntityId(entity) {
+		if (!entity.id) entity.id = crypto.randomUUID();
+		return entity;
+	}
+	async requestDelegatedWriteGrantMessage(params) {
+		return dwgMessage(this.#kwilClient, params).then((res) => res.message);
+	}
+	async createCredentialByDelegatedWriteGrant(credentialParams, delegatedWriteGrant, consumerEncryptionPublicKey) {
+		let recipientPublicKey = consumerEncryptionPublicKey;
+		if (!recipientPublicKey) recipientPublicKey = nacl.box.keyPair.fromSecretKey(this.#encryptionSecretKey).publicKey;
+		const originalCredential = this.#ensureEntityId(this.#buildInsertableIDOSCredential(credentialParams));
+		const contentHash = hexEncodeSha256Hash(credentialParams.plaintextContent);
+		const copyCredential = this.#ensureEntityId(this.#buildInsertableIDOSCredential({
+			publicNotes: "",
+			plaintextContent: credentialParams.plaintextContent,
+			recipientEncryptionPublicKey: recipientPublicKey
+		}));
+		const payload = {
+			issuer_auth_public_key: originalCredential.issuer_auth_public_key,
+			original_encryptor_public_key: originalCredential.encryptor_public_key,
+			original_credential_id: originalCredential.id,
+			original_content: originalCredential.content,
+			original_public_notes: originalCredential.public_notes,
+			original_public_notes_signature: originalCredential.public_notes_signature,
+			original_broader_signature: originalCredential.broader_signature,
+			copy_encryptor_public_key: copyCredential.encryptor_public_key,
+			copy_credential_id: copyCredential.id,
+			copy_content: copyCredential.content,
+			copy_public_notes_signature: copyCredential.public_notes_signature,
+			copy_broader_signature: copyCredential.broader_signature,
+			content_hash: contentHash,
+			dwg_owner: delegatedWriteGrant.ownerWalletIdentifier,
+			dwg_grantee: delegatedWriteGrant.consumerWalletIdentifier,
+			dwg_issuer_public_key: delegatedWriteGrant.issuerPublicKey,
+			dwg_id: delegatedWriteGrant.id,
+			dwg_access_grant_timelock: delegatedWriteGrant.accessGrantTimelock,
+			dwg_not_before: delegatedWriteGrant.notUsableBefore,
+			dwg_not_after: delegatedWriteGrant.notUsableAfter,
+			dwg_signature: delegatedWriteGrant.signature
+		};
+		await createCredentialsByDwg(this.#kwilClient, payload);
+		return {
+			originalCredential,
+			copyCredential
+		};
+	}
+	async editCredentialAsIssuer(publicNotesId, publicNotes) {
+		const payload = {
+			public_notes_id: publicNotesId,
+			public_notes: publicNotes
+		};
+		await editPublicNotesAsIssuer(this.#kwilClient, payload);
+		return payload;
+	}
+	async getCredentialIdByContentHash(contentHash) {
+		const id = await getSiblingCredentialId(this.#kwilClient, { content_hash: contentHash }).then((res) => res.id);
+		invariant(id, "Required `idOSCredential` id not found");
+		return id;
+	}
+	async getCredentialShared(id) {
+		return await getCredentialShared(this.#kwilClient, { id }).then((res) => res[0]) ?? null;
+	}
+};
+//#endregion
+//#region src/services/grant.service.ts
+var GrantService = class {
+	#kwilClient;
+	#encryptionSecretKey;
+	constructor(kwilClient, encryptionSecretKey) {
+		this.#kwilClient = kwilClient;
+		this.#encryptionSecretKey = encryptionSecretKey;
+	}
+	async createAccessGrantFromDAG(params, getCredentialIdByContentHash, getCredentialShared) {
+		const credentialId = await getCredentialIdByContentHash(params.dag_content_hash);
+		invariant(credentialId, "Missing `idOSCredential` id");
+		const credential = await getCredentialShared(credentialId);
+		invariant(credential, "`idOSCredential` with id `{credentialId}` not found");
+		if (hexEncodeSha256Hash(utf8Encode(await NoncedBox.nonceFromBase64SecretKey(base64Encode(this.#encryptionSecretKey)).decrypt(credential.content, credential.encryptor_public_key))) !== params.dag_content_hash) throw new Error("Hash mismatch between `DAG` and `idOSCredential` content");
+		return await createAgByDagForCopy(this.#kwilClient, params) ?? null;
+	}
+};
+//#endregion
+//#region src/services/user.service.ts
+var UserService = class {
+	#kwilClient;
+	constructor(kwilClient) {
+		this.#kwilClient = kwilClient;
+	}
+	#ensureEntityId(entity) {
+		if (!entity.id) entity.id = crypto.randomUUID();
+		return entity;
+	}
+	async hasProfile(address) {
+		return hasProfile(this.#kwilClient, { address }).then((res) => res.has_profile);
+	}
+	async createUserProfile(params) {
+		const payload = this.#ensureEntityId(params);
+		await addUserAsInserter(this.#kwilClient, payload);
+		return payload;
+	}
+	async upsertWalletAsInserter(params) {
+		const payload = this.#ensureEntityId(params);
+		await upsertWalletAsInserter(this.#kwilClient, payload);
+		return payload;
+	}
+	async getUser(params) {
+		return getUserAsInserter(this.#kwilClient, this.#ensureEntityId(params));
+	}
+	async createUser(user, wallet) {
+		const user_id = user.id ?? crypto.randomUUID();
+		const wallet_id = wallet.id ?? crypto.randomUUID();
+		const userReqParams = {
+			...user,
+			id: user_id
+		};
+		const userResponse = await this.createUserProfile(userReqParams);
+		const walletReqParams = {
+			...wallet,
+			user_id,
+			id: wallet_id
+		};
+		return [userResponse, await this.upsertWalletAsInserter(walletReqParams)];
+	}
+};
+//#endregion
+//#region src/index.ts
+var idOSIssuer = class idOSIssuer {
+	#credentialService;
+	#grantService;
+	#userService;
+	static async init(params) {
+		const kwilClient = await createNodeKwilClient({
+			nodeUrl: params.nodeUrl,
+			chainId: params.chainId
+		});
+		const [signer] = await createServerKwilSigner(params.signingKeyPair);
+		kwilClient.setSigner(signer);
+		return new idOSIssuer(new CredentialService(kwilClient, params.signingKeyPair, params.encryptionSecretKey), new GrantService(kwilClient, params.encryptionSecretKey), new UserService(kwilClient));
+	}
+	constructor(credentialService, grantService, userService) {
+		this.#credentialService = credentialService;
+		this.#grantService = grantService;
+		this.#userService = userService;
+	}
+	async hasProfile(userAddress) {
+		return this.#userService.hasProfile(userAddress);
+	}
+	async createUserProfile(params) {
+		return this.#userService.createUserProfile(params);
+	}
+	async upsertWalletAsInserter(params) {
+		return this.#userService.upsertWalletAsInserter(params);
+	}
+	async createUser(user, wallet) {
+		return this.#userService.createUser(user, wallet);
+	}
+	async getUser(id) {
+		return this.#userService.getUser({ id });
+	}
+	async requestDelegatedWriteGrantMessage(params) {
+		return this.#credentialService.requestDelegatedWriteGrantMessage(params);
+	}
+	async createCredentialByDelegatedWriteGrant(credentialParams, delegatedWriteGrant, consumerEncryptionPublicKey) {
+		return this.#credentialService.createCredentialByDelegatedWriteGrant(credentialParams, delegatedWriteGrant, consumerEncryptionPublicKey);
+	}
+	async editCredentialAsIssuer(publicNotesId, publicNotes) {
+		return this.#credentialService.editCredentialAsIssuer(publicNotesId, publicNotes);
+	}
+	async getCredentialIdByContentHash(contentHash) {
+		return this.#credentialService.getCredentialIdByContentHash(contentHash);
+	}
+	async getCredentialShared(id) {
+		return this.#credentialService.getCredentialShared(id);
+	}
+	async createAccessGrantFromDAG(params) {
+		return this.#grantService.createAccessGrantFromDAG(params, (contentHash) => this.getCredentialIdByContentHash(contentHash), (id) => this.getCredentialShared(id));
+	}
+	async buildCredential(fields, subject, issuer, validate = true) {
+		return buildCredential(fields, subject, issuer, validate);
+	}
+	deriveCredentialLevel(subject) {
+		return deriveLevel(subject);
+	}
+	async buildFaceIdCredential(fields, subject, issuer, validate = true) {
+		return buildFaceIdCredential(fields, subject, issuer, validate);
+	}
+};
+//#endregion
+export { idOSIssuer };
+
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":["#kwilClient","#signingKeyPair","#encryptionSecretKey","#ensureEntityId","#buildInsertableIDOSCredential","#kwilClient","#encryptionSecretKey","_createAgByDagForCopy","#kwilClient","_hasProfile","#ensureEntityId","_upsertWalletAsInserter","#credentialService","#grantService","#userService"],"sources":["../../../node_modules/.pnpm/tiny-invariant@1.3.3/node_modules/tiny-invariant/dist/esm/tiny-invariant.js","../src/services/credential.service.ts","../src/services/grant.service.ts","../src/services/user.service.ts","../src/index.ts"],"sourcesContent":["var isProduction = process.env.NODE_ENV === 'production';\nvar prefix = 'Invariant failed';\nfunction invariant(condition, message) {\n    if (condition) {\n        return;\n    }\n    if (isProduction) {\n        throw new Error(prefix);\n    }\n    var provided = typeof message === 'function' ? message() : message;\n    var value = provided ? \"\".concat(prefix, \": \").concat(provided) : prefix;\n    throw new Error(value);\n}\n\nexport { invariant as default };\n","import type { idOSCredential } from \"@idos-network/credentials/types\";\nimport type { KwilActionClient } from \"@idos-network/kwil-infra\";\n\nimport {\n  type CreateCredentialsByDwgInput,\n  createCredentialsByDwg,\n  dwgMessage,\n  type EditPublicNotesAsIssuerInput,\n  editPublicNotesAsIssuer,\n  getCredentialShared,\n  getSiblingCredentialId,\n  type idOSDelegatedWriteGrant,\n} from \"@idos-network/kwil-infra/actions\";\nimport {\n  base64Decode,\n  base64Encode,\n  hexEncode,\n  hexEncodeSha256Hash,\n  utf8Encode,\n} from \"@idos-network/utils/codecs\";\nimport { encryptContent } from \"@idos-network/utils/cryptography\";\nimport invariant from \"tiny-invariant\";\nimport nacl from \"tweetnacl\";\n\ntype InsertableIDOSCredential = Omit<idOSCredential, \"id\" | \"original_id\"> & {\n  id?: idOSCredential[\"id\"];\n  content_hash?: string;\n  public_notes_signature: string;\n  broader_signature: string;\n};\n\ntype BuildInsertableIDOSCredentialArgs = {\n  userId: string;\n  publicNotes: string;\n  plaintextContent: Uint8Array;\n  recipientEncryptionPublicKey: Uint8Array;\n};\n\nexport type BaseCredentialParams = {\n  id?: string;\n  userId: string;\n  publicNotes: string;\n  plaintextContent: Uint8Array;\n  recipientEncryptionPublicKey: Uint8Array;\n};\n\nexport type DelegatedWriteGrantBaseParams = Omit<BaseCredentialParams, \"userId\">;\n\nexport type DelegatedWriteGrantParams = {\n  id: string;\n  ownerWalletIdentifier: string;\n  consumerWalletIdentifier: string;\n  issuerPublicKey: string;\n  accessGrantTimelock: string;\n  notUsableBefore: string;\n  notUsableAfter: string;\n  signature: string;\n};\n\nexport class CredentialService {\n  readonly #kwilClient: KwilActionClient;\n  readonly #signingKeyPair: nacl.SignKeyPair;\n  readonly #encryptionSecretKey: Uint8Array;\n\n  constructor(\n    kwilClient: KwilActionClient,\n    signingKeyPair: nacl.SignKeyPair,\n    encryptionSecretKey: Uint8Array,\n  ) {\n    this.#kwilClient = kwilClient;\n    this.#signingKeyPair = signingKeyPair;\n    this.#encryptionSecretKey = encryptionSecretKey;\n  }\n\n  #buildInsertableIDOSCredential({\n    userId,\n    publicNotes,\n    plaintextContent,\n    recipientEncryptionPublicKey,\n  }: Omit<BuildInsertableIDOSCredentialArgs, \"userId\"> & { userId?: string }):\n    | InsertableIDOSCredential\n    | Omit<InsertableIDOSCredential, \"user_id\"> {\n    const ephemeralKeyPair = nacl.box.keyPair();\n    const content = encryptContent(\n      plaintextContent,\n      recipientEncryptionPublicKey,\n      ephemeralKeyPair.secretKey,\n    );\n\n    const public_notes_signature = base64Encode(\n      nacl.sign.detached(utf8Encode(publicNotes), this.#signingKeyPair.secretKey),\n    );\n\n    return {\n      user_id: userId,\n      content: base64Encode(content),\n      public_notes: publicNotes,\n      public_notes_signature,\n\n      broader_signature: base64Encode(\n        nacl.sign.detached(\n          Uint8Array.from([...base64Decode(public_notes_signature), ...content]),\n          this.#signingKeyPair.secretKey,\n        ),\n      ),\n\n      issuer_auth_public_key: hexEncode(this.#signingKeyPair.publicKey, true),\n      encryptor_public_key: base64Encode(ephemeralKeyPair.publicKey),\n    };\n  }\n\n  #ensureEntityId<T extends { id?: string }>(entity: T): T & { id: string } {\n    if (!entity.id) {\n      (entity as T & { id: string }).id = crypto.randomUUID();\n    }\n    return entity as T & { id: string };\n  }\n\n  async requestDelegatedWriteGrantMessage(params: idOSDelegatedWriteGrant): Promise<string> {\n    return dwgMessage(this.#kwilClient, params).then((res) => res.message);\n  }\n\n  async createCredentialByDelegatedWriteGrant(\n    credentialParams: DelegatedWriteGrantBaseParams,\n    delegatedWriteGrant: DelegatedWriteGrantParams,\n    consumerEncryptionPublicKey?: Uint8Array,\n  ): Promise<{\n    originalCredential: Omit<idOSCredential, \"user_id\">;\n    copyCredential: Omit<idOSCredential, \"user_id\">;\n  }> {\n    let recipientPublicKey = consumerEncryptionPublicKey;\n    if (!recipientPublicKey) {\n      // If we're not explicitly given a consumer enc pub key, we're assuming that the issuer is creating a copy\n      // for themselves. So, we derive the recipient encryption public key from the issuer's encryption secret key.\n      recipientPublicKey = nacl.box.keyPair.fromSecretKey(this.#encryptionSecretKey).publicKey;\n    }\n\n    const originalCredential = this.#ensureEntityId(\n      this.#buildInsertableIDOSCredential(credentialParams),\n    );\n\n    const contentHash = hexEncodeSha256Hash(credentialParams.plaintextContent);\n\n    const copyCredential = this.#ensureEntityId(\n      this.#buildInsertableIDOSCredential({\n        publicNotes: \"\",\n        plaintextContent: credentialParams.plaintextContent,\n        recipientEncryptionPublicKey: recipientPublicKey,\n      }),\n    );\n\n    const payload: CreateCredentialsByDwgInput = {\n      issuer_auth_public_key: originalCredential.issuer_auth_public_key,\n      original_encryptor_public_key: originalCredential.encryptor_public_key,\n      original_credential_id: originalCredential.id,\n      original_content: originalCredential.content,\n      original_public_notes: originalCredential.public_notes,\n      original_public_notes_signature: originalCredential.public_notes_signature,\n      original_broader_signature: originalCredential.broader_signature,\n      copy_encryptor_public_key: copyCredential.encryptor_public_key,\n      copy_credential_id: copyCredential.id,\n      copy_content: copyCredential.content,\n      copy_public_notes_signature: copyCredential.public_notes_signature,\n      copy_broader_signature: copyCredential.broader_signature,\n      content_hash: contentHash,\n      dwg_owner: delegatedWriteGrant.ownerWalletIdentifier,\n      dwg_grantee: delegatedWriteGrant.consumerWalletIdentifier,\n      dwg_issuer_public_key: delegatedWriteGrant.issuerPublicKey,\n      dwg_id: delegatedWriteGrant.id,\n      dwg_access_grant_timelock: delegatedWriteGrant.accessGrantTimelock,\n      dwg_not_before: delegatedWriteGrant.notUsableBefore,\n      dwg_not_after: delegatedWriteGrant.notUsableAfter,\n      dwg_signature: delegatedWriteGrant.signature,\n    };\n\n    await createCredentialsByDwg(this.#kwilClient, payload);\n\n    return { originalCredential, copyCredential };\n  }\n\n  async editCredentialAsIssuer(\n    publicNotesId: string,\n    publicNotes: string,\n  ): Promise<EditPublicNotesAsIssuerInput | null> {\n    const payload = {\n      public_notes_id: publicNotesId,\n      public_notes: publicNotes,\n    };\n\n    await editPublicNotesAsIssuer(this.#kwilClient, payload);\n\n    return payload;\n  }\n\n  async getCredentialIdByContentHash(contentHash: string): Promise<string | null> {\n    const id = await getSiblingCredentialId(this.#kwilClient, { content_hash: contentHash }).then(\n      (res) => res.id,\n    );\n\n    invariant(id, \"Required `idOSCredential` id not found\");\n\n    return id;\n  }\n\n  async getCredentialShared(id: string): Promise<idOSCredential | null> {\n    const result = await getCredentialShared(this.#kwilClient, { id }).then((res) => res[0]);\n\n    return result ?? null;\n  }\n}\n","import type { idOSCredential } from \"@idos-network/credentials/types\";\nimport type { KwilActionClient } from \"@idos-network/kwil-infra\";\n\nimport { createAgByDagForCopy as _createAgByDagForCopy } from \"@idos-network/kwil-infra/actions\";\nimport { base64Encode, hexEncodeSha256Hash, utf8Encode } from \"@idos-network/utils/codecs\";\nimport { NoncedBox } from \"@idos-network/utils/cryptography\";\nimport invariant from \"tiny-invariant\";\n\nexport type CreateAccessGrantFromDAGParams = {\n  dag_data_id: string;\n  dag_owner_wallet_identifier: string;\n  dag_grantee_wallet_identifier: string;\n  dag_signature: string;\n  dag_locked_until: number;\n  dag_content_hash: string;\n};\n\nexport class GrantService {\n  readonly #kwilClient: KwilActionClient;\n  readonly #encryptionSecretKey: Uint8Array;\n\n  constructor(kwilClient: KwilActionClient, encryptionSecretKey: Uint8Array) {\n    this.#kwilClient = kwilClient;\n    this.#encryptionSecretKey = encryptionSecretKey;\n  }\n\n  async createAccessGrantFromDAG(\n    params: CreateAccessGrantFromDAGParams,\n    getCredentialIdByContentHash: (contentHash: string) => Promise<string | null>,\n    getCredentialShared: (id: string) => Promise<idOSCredential | null>,\n  ): Promise<CreateAccessGrantFromDAGParams | null> {\n    const credentialId = await getCredentialIdByContentHash(params.dag_content_hash);\n\n    invariant(credentialId, \"Missing `idOSCredential` id\");\n\n    const credential = await getCredentialShared(credentialId);\n\n    invariant(credential, \"`idOSCredential` with id `{credentialId}` not found\");\n\n    const plaintextContent = await NoncedBox.nonceFromBase64SecretKey(\n      base64Encode(this.#encryptionSecretKey),\n    ).decrypt(credential.content, credential.encryptor_public_key);\n\n    // Get the content hash from the plaintext content\n    const contentHash = hexEncodeSha256Hash(utf8Encode(plaintextContent));\n\n    // Check if the content hash matches the content hash in the credential\n    if (contentHash !== params.dag_content_hash) {\n      throw new Error(\"Hash mismatch between `DAG` and `idOSCredential` content\");\n    }\n\n    const result = await _createAgByDagForCopy(this.#kwilClient, params);\n\n    return result ?? null;\n  }\n}\n","import type { KwilActionClient } from \"@idos-network/kwil-infra\";\n\nimport {\n  hasProfile as _hasProfile,\n  upsertWalletAsInserter as _upsertWalletAsInserter,\n  addUserAsInserter,\n  type GetUserAsInserterInput,\n  getUserAsInserter,\n  type idOSUser,\n  type idOSWallet,\n} from \"@idos-network/kwil-infra/actions\";\n\nexport type CreateProfileReqParams = Omit<idOSUser, \"id\"> & {\n  id?: string;\n};\n\nexport type UpsertWalletReqParams = Omit<idOSWallet, \"id\"> & {\n  id?: string;\n};\n\nexport type CreateWalletReqParams = Omit<UpsertWalletReqParams, \"user_id\"> & {\n  id?: string;\n};\n\nexport class UserService {\n  readonly #kwilClient: KwilActionClient;\n\n  constructor(kwilClient: KwilActionClient) {\n    this.#kwilClient = kwilClient;\n  }\n\n  #ensureEntityId<T extends { id?: string }>(entity: T): T & { id: string } {\n    if (!entity.id) {\n      (entity as T & { id: string }).id = crypto.randomUUID();\n    }\n    return entity as T & { id: string };\n  }\n\n  async hasProfile(address: string): Promise<boolean> {\n    return _hasProfile(this.#kwilClient, { address }).then((res) => res.has_profile);\n  }\n\n  async createUserProfile(params: CreateProfileReqParams): Promise<idOSUser> {\n    const payload = this.#ensureEntityId(params);\n    await addUserAsInserter(this.#kwilClient, payload);\n    return payload;\n  }\n\n  async upsertWalletAsInserter(params: UpsertWalletReqParams): Promise<idOSWallet> {\n    const payload = this.#ensureEntityId(params);\n    await _upsertWalletAsInserter(this.#kwilClient, payload);\n    return payload;\n  }\n\n  /// Useful to understand if a user id already exists.\n  async getUser(params: GetUserAsInserterInput): Promise<idOSUser> {\n    return getUserAsInserter(this.#kwilClient, this.#ensureEntityId(params));\n  }\n\n  async createUser(\n    user: CreateProfileReqParams,\n    wallet: CreateWalletReqParams,\n  ): Promise<[idOSUser, idOSWallet]> {\n    const user_id = user.id ?? crypto.randomUUID();\n    const wallet_id = wallet.id ?? crypto.randomUUID();\n\n    const userReqParams = {\n      ...user,\n      id: user_id,\n    };\n\n    const userResponse = await this.createUserProfile(userReqParams);\n\n    const walletReqParams = {\n      ...wallet,\n      user_id,\n      id: wallet_id,\n    };\n\n    const walletResponse = await this.upsertWalletAsInserter(walletReqParams);\n\n    return [userResponse, walletResponse];\n  }\n}\n","import type {\n  AvailableIssuerType,\n  CredentialFields,\n  CredentialSubject,\n  CredentialSubjectFaceId,\n  idOSCredential,\n} from \"@idos-network/credentials/types\";\nimport type {\n  EditPublicNotesAsIssuerInput,\n  idOSDelegatedWriteGrant,\n  idOSGrant,\n  idOSUser,\n  idOSUserAttribute,\n  idOSWallet,\n} from \"@idos-network/kwil-infra/actions\";\nimport type { SignKeyPair } from \"tweetnacl\";\n\nimport {\n  buildCredential,\n  buildFaceIdCredential,\n  type Credential,\n  type FaceIdCredential,\n} from \"@idos-network/credentials/builder\";\nimport { deriveLevel } from \"@idos-network/credentials/utils\";\nimport { createNodeKwilClient, createServerKwilSigner } from \"@idos-network/kwil-infra\";\n\nimport {\n  CredentialService,\n  type DelegatedWriteGrantBaseParams,\n  type DelegatedWriteGrantParams,\n} from \"./services/credential.service\";\nimport { type CreateAccessGrantFromDAGParams, GrantService } from \"./services/grant.service\";\nimport {\n  type CreateProfileReqParams,\n  type CreateWalletReqParams,\n  type UpsertWalletReqParams,\n  UserService,\n} from \"./services/user.service\";\n\ntype CreateIssuerParams = {\n  chainId?: string;\n  nodeUrl: string;\n  signingKeyPair: SignKeyPair;\n  encryptionSecretKey: Uint8Array;\n};\n\nexport class idOSIssuer {\n  readonly #credentialService: CredentialService;\n  readonly #grantService: GrantService;\n  readonly #userService: UserService;\n\n  static async init(params: CreateIssuerParams): Promise<idOSIssuer> {\n    const kwilClient = await createNodeKwilClient({\n      nodeUrl: params.nodeUrl,\n      chainId: params.chainId,\n    });\n\n    const [signer] = await createServerKwilSigner(params.signingKeyPair);\n    kwilClient.setSigner(signer);\n\n    const credentialService = new CredentialService(\n      kwilClient,\n      params.signingKeyPair,\n      params.encryptionSecretKey,\n    );\n\n    const grantService = new GrantService(kwilClient, params.encryptionSecretKey);\n    const userService = new UserService(kwilClient);\n\n    return new idOSIssuer(credentialService, grantService, userService);\n  }\n\n  private constructor(\n    credentialService: CredentialService,\n    grantService: GrantService,\n    userService: UserService,\n  ) {\n    this.#credentialService = credentialService;\n    this.#grantService = grantService;\n    this.#userService = userService;\n  }\n\n  // User Service facade methods\n  async hasProfile(userAddress: string): Promise<boolean> {\n    return this.#userService.hasProfile(userAddress);\n  }\n\n  async createUserProfile(params: CreateProfileReqParams): Promise<idOSUser> {\n    return this.#userService.createUserProfile(params);\n  }\n\n  async upsertWalletAsInserter(params: UpsertWalletReqParams): Promise<idOSWallet> {\n    return this.#userService.upsertWalletAsInserter(params);\n  }\n\n  async createUser(\n    user: CreateProfileReqParams,\n    wallet: CreateWalletReqParams,\n  ): Promise<[idOSUser, idOSWallet]> {\n    return this.#userService.createUser(user, wallet);\n  }\n\n  async getUser(id: string): Promise<idOSUser> {\n    return this.#userService.getUser({ id });\n  }\n\n  async requestDelegatedWriteGrantMessage(params: idOSDelegatedWriteGrant): Promise<string> {\n    return this.#credentialService.requestDelegatedWriteGrantMessage(params);\n  }\n\n  async createCredentialByDelegatedWriteGrant(\n    credentialParams: DelegatedWriteGrantBaseParams,\n    delegatedWriteGrant: DelegatedWriteGrantParams,\n    consumerEncryptionPublicKey?: Uint8Array,\n  ): Promise<{\n    originalCredential: Omit<idOSCredential, \"user_id\">;\n    copyCredential: Omit<idOSCredential, \"user_id\">;\n  }> {\n    return this.#credentialService.createCredentialByDelegatedWriteGrant(\n      credentialParams,\n      delegatedWriteGrant,\n      consumerEncryptionPublicKey,\n    );\n  }\n\n  async editCredentialAsIssuer(\n    publicNotesId: string,\n    publicNotes: string,\n  ): Promise<EditPublicNotesAsIssuerInput | null> {\n    return this.#credentialService.editCredentialAsIssuer(publicNotesId, publicNotes);\n  }\n\n  async getCredentialIdByContentHash(contentHash: string): Promise<string | null> {\n    return this.#credentialService.getCredentialIdByContentHash(contentHash);\n  }\n\n  async getCredentialShared(id: string): Promise<idOSCredential | null> {\n    return this.#credentialService.getCredentialShared(id);\n  }\n\n  async createAccessGrantFromDAG(\n    params: CreateAccessGrantFromDAGParams,\n  ): Promise<CreateAccessGrantFromDAGParams | null> {\n    return this.#grantService.createAccessGrantFromDAG(\n      params,\n      (contentHash: string) => this.getCredentialIdByContentHash(contentHash),\n      (id: string) => this.getCredentialShared(id),\n    );\n  }\n\n  async buildCredential(\n    fields: CredentialFields,\n    subject: CredentialSubject,\n    issuer: AvailableIssuerType,\n    validate = true,\n  ): Promise<Credential> {\n    return buildCredential(fields, subject, issuer, validate);\n  }\n\n  deriveCredentialLevel(subject: CredentialSubject): string {\n    return deriveLevel(subject);\n  }\n\n  async buildFaceIdCredential(\n    fields: CredentialFields,\n    subject: CredentialSubjectFaceId,\n    issuer: AvailableIssuerType,\n    validate = true,\n  ): Promise<FaceIdCredential> {\n    return buildFaceIdCredential(fields, subject, issuer, validate);\n  }\n}\n\nexport type {\n  idOSCredential,\n  idOSGrant,\n  idOSUser,\n  idOSUserAttribute,\n  idOSDelegatedWriteGrant,\n  idOSWallet,\n  CredentialFields,\n  CredentialSubject,\n  AvailableIssuerType,\n  Credential,\n  CredentialSubjectFaceId,\n  FaceIdCredential,\n};\n"],"x_google_ignoreList":[0],"mappings":";;;;;;;;AAAA,IAAI,eAAe,QAAQ,IAAI,aAAa;AAC5C,IAAI,SAAS;AACb,SAAS,UAAU,WAAW,SAAS;CACnC,IAAI,WACA;CAEJ,IAAI,cACA,MAAM,IAAI,MAAM,OAAO;CAE3B,IAAI,WAAW,OAAO,YAAY,aAAa,SAAS,GAAG;CAC3D,IAAI,QAAQ,WAAW,GAAG,OAAO,QAAQ,KAAK,CAAC,OAAO,SAAS,GAAG;CAClE,MAAM,IAAI,MAAM,MAAM;;;;ACgD1B,IAAa,oBAAb,MAA+B;CAC7B;CACA;CACA;CAEA,YACE,YACA,gBACA,qBACA;EACA,KAAKA,cAAc;EACnB,KAAKC,kBAAkB;EACvB,KAAKC,uBAAuB;;CAG9B,+BAA+B,EAC7B,QACA,aACA,kBACA,gCAG4C;EAC5C,MAAM,mBAAmB,KAAK,IAAI,SAAS;EAC3C,MAAM,UAAU,eACd,kBACA,8BACA,iBAAiB,UAClB;EAED,MAAM,yBAAyB,aAC7B,KAAK,KAAK,SAAS,WAAW,YAAY,EAAE,KAAKD,gBAAgB,UAAU,CAC5E;EAED,OAAO;GACL,SAAS;GACT,SAAS,aAAa,QAAQ;GAC9B,cAAc;GACd;GAEA,mBAAmB,aACjB,KAAK,KAAK,SACR,WAAW,KAAK,CAAC,GAAG,aAAa,uBAAuB,EAAE,GAAG,QAAQ,CAAC,EACtE,KAAKA,gBAAgB,UACtB,CACF;GAED,wBAAwB,UAAU,KAAKA,gBAAgB,WAAW,KAAK;GACvE,sBAAsB,aAAa,iBAAiB,UAAU;GAC/D;;CAGH,gBAA2C,QAA+B;EACxE,IAAI,CAAC,OAAO,IACV,OAA+B,KAAK,OAAO,YAAY;EAEzD,OAAO;;CAGT,MAAM,kCAAkC,QAAkD;EACxF,OAAO,WAAW,KAAKD,aAAa,OAAO,CAAC,MAAM,QAAQ,IAAI,QAAQ;;CAGxE,MAAM,sCACJ,kBACA,qBACA,6BAIC;EACD,IAAI,qBAAqB;EACzB,IAAI,CAAC,oBAGH,qBAAqB,KAAK,IAAI,QAAQ,cAAc,KAAKE,qBAAqB,CAAC;EAGjF,MAAM,qBAAqB,KAAKC,gBAC9B,KAAKC,+BAA+B,iBAAiB,CACtD;EAED,MAAM,cAAc,oBAAoB,iBAAiB,iBAAiB;EAE1E,MAAM,iBAAiB,KAAKD,gBAC1B,KAAKC,+BAA+B;GAClC,aAAa;GACb,kBAAkB,iBAAiB;GACnC,8BAA8B;GAC/B,CAAC,CACH;EAED,MAAM,UAAuC;GAC3C,wBAAwB,mBAAmB;GAC3C,+BAA+B,mBAAmB;GAClD,wBAAwB,mBAAmB;GAC3C,kBAAkB,mBAAmB;GACrC,uBAAuB,mBAAmB;GAC1C,iCAAiC,mBAAmB;GACpD,4BAA4B,mBAAmB;GAC/C,2BAA2B,eAAe;GAC1C,oBAAoB,eAAe;GACnC,cAAc,eAAe;GAC7B,6BAA6B,eAAe;GAC5C,wBAAwB,eAAe;GACvC,cAAc;GACd,WAAW,oBAAoB;GAC/B,aAAa,oBAAoB;GACjC,uBAAuB,oBAAoB;GAC3C,QAAQ,oBAAoB;GAC5B,2BAA2B,oBAAoB;GAC/C,gBAAgB,oBAAoB;GACpC,eAAe,oBAAoB;GACnC,eAAe,oBAAoB;GACpC;EAED,MAAM,uBAAuB,KAAKJ,aAAa,QAAQ;EAEvD,OAAO;GAAE;GAAoB;GAAgB;;CAG/C,MAAM,uBACJ,eACA,aAC8C;EAC9C,MAAM,UAAU;GACd,iBAAiB;GACjB,cAAc;GACf;EAED,MAAM,wBAAwB,KAAKA,aAAa,QAAQ;EAExD,OAAO;;CAGT,MAAM,6BAA6B,aAA6C;EAC9E,MAAM,KAAK,MAAM,uBAAuB,KAAKA,aAAa,EAAE,cAAc,aAAa,CAAC,CAAC,MACtF,QAAQ,IAAI,GACd;EAED,UAAU,IAAI,yCAAyC;EAEvD,OAAO;;CAGT,MAAM,oBAAoB,IAA4C;EAGpE,OAAO,MAFc,oBAAoB,KAAKA,aAAa,EAAE,IAAI,CAAC,CAAC,MAAM,QAAQ,IAAI,GAAG,IAEvE;;;;;AC9LrB,IAAa,eAAb,MAA0B;CACxB;CACA;CAEA,YAAY,YAA8B,qBAAiC;EACzE,KAAKK,cAAc;EACnB,KAAKC,uBAAuB;;CAG9B,MAAM,yBACJ,QACA,8BACA,qBACgD;EAChD,MAAM,eAAe,MAAM,6BAA6B,OAAO,iBAAiB;EAEhF,UAAU,cAAc,8BAA8B;EAEtD,MAAM,aAAa,MAAM,oBAAoB,aAAa;EAE1D,UAAU,YAAY,sDAAsD;EAU5E,IAHoB,oBAAoB,WAAW,MALpB,UAAU,yBACvC,aAAa,KAAKA,qBAAqB,CACxC,CAAC,QAAQ,WAAW,SAAS,WAAW,qBAAqB,CAGM,CAGrD,KAAK,OAAO,kBACzB,MAAM,IAAI,MAAM,2DAA2D;EAK7E,OAAO,MAFcC,qBAAsB,KAAKF,aAAa,OAAO,IAEnD;;;;;AC7BrB,IAAa,cAAb,MAAyB;CACvB;CAEA,YAAY,YAA8B;EACxC,KAAKG,cAAc;;CAGrB,gBAA2C,QAA+B;EACxE,IAAI,CAAC,OAAO,IACV,OAA+B,KAAK,OAAO,YAAY;EAEzD,OAAO;;CAGT,MAAM,WAAW,SAAmC;EAClD,OAAOC,WAAY,KAAKD,aAAa,EAAE,SAAS,CAAC,CAAC,MAAM,QAAQ,IAAI,YAAY;;CAGlF,MAAM,kBAAkB,QAAmD;EACzE,MAAM,UAAU,KAAKE,gBAAgB,OAAO;EAC5C,MAAM,kBAAkB,KAAKF,aAAa,QAAQ;EAClD,OAAO;;CAGT,MAAM,uBAAuB,QAAoD;EAC/E,MAAM,UAAU,KAAKE,gBAAgB,OAAO;EAC5C,MAAMC,uBAAwB,KAAKH,aAAa,QAAQ;EACxD,OAAO;;CAIT,MAAM,QAAQ,QAAmD;EAC/D,OAAO,kBAAkB,KAAKA,aAAa,KAAKE,gBAAgB,OAAO,CAAC;;CAG1E,MAAM,WACJ,MACA,QACiC;EACjC,MAAM,UAAU,KAAK,MAAM,OAAO,YAAY;EAC9C,MAAM,YAAY,OAAO,MAAM,OAAO,YAAY;EAElD,MAAM,gBAAgB;GACpB,GAAG;GACH,IAAI;GACL;EAED,MAAM,eAAe,MAAM,KAAK,kBAAkB,cAAc;EAEhE,MAAM,kBAAkB;GACtB,GAAG;GACH;GACA,IAAI;GACL;EAID,OAAO,CAAC,cAAc,MAFO,KAAK,uBAAuB,gBAAgB,CAEpC;;;;;ACnCzC,IAAa,aAAb,MAAa,WAAW;CACtB;CACA;CACA;CAEA,aAAa,KAAK,QAAiD;EACjE,MAAM,aAAa,MAAM,qBAAqB;GAC5C,SAAS,OAAO;GAChB,SAAS,OAAO;GACjB,CAAC;EAEF,MAAM,CAAC,UAAU,MAAM,uBAAuB,OAAO,eAAe;EACpE,WAAW,UAAU,OAAO;EAW5B,OAAO,IAAI,WAAW,IATQ,kBAC5B,YACA,OAAO,gBACP,OAAO,oBAM8B,EAAE,IAHhB,aAAa,YAAY,OAAO,oBAGJ,EAAE,IAF/B,YAAY,WAE8B,CAAC;;CAGrE,YACE,mBACA,cACA,aACA;EACA,KAAKE,qBAAqB;EAC1B,KAAKC,gBAAgB;EACrB,KAAKC,eAAe;;CAItB,MAAM,WAAW,aAAuC;EACtD,OAAO,KAAKA,aAAa,WAAW,YAAY;;CAGlD,MAAM,kBAAkB,QAAmD;EACzE,OAAO,KAAKA,aAAa,kBAAkB,OAAO;;CAGpD,MAAM,uBAAuB,QAAoD;EAC/E,OAAO,KAAKA,aAAa,uBAAuB,OAAO;;CAGzD,MAAM,WACJ,MACA,QACiC;EACjC,OAAO,KAAKA,aAAa,WAAW,MAAM,OAAO;;CAGnD,MAAM,QAAQ,IAA+B;EAC3C,OAAO,KAAKA,aAAa,QAAQ,EAAE,IAAI,CAAC;;CAG1C,MAAM,kCAAkC,QAAkD;EACxF,OAAO,KAAKF,mBAAmB,kCAAkC,OAAO;;CAG1E,MAAM,sCACJ,kBACA,qBACA,6BAIC;EACD,OAAO,KAAKA,mBAAmB,sCAC7B,kBACA,qBACA,4BACD;;CAGH,MAAM,uBACJ,eACA,aAC8C;EAC9C,OAAO,KAAKA,mBAAmB,uBAAuB,eAAe,YAAY;;CAGnF,MAAM,6BAA6B,aAA6C;EAC9E,OAAO,KAAKA,mBAAmB,6BAA6B,YAAY;;CAG1E,MAAM,oBAAoB,IAA4C;EACpE,OAAO,KAAKA,mBAAmB,oBAAoB,GAAG;;CAGxD,MAAM,yBACJ,QACgD;EAChD,OAAO,KAAKC,cAAc,yBACxB,SACC,gBAAwB,KAAK,6BAA6B,YAAY,GACtE,OAAe,KAAK,oBAAoB,GAAG,CAC7C;;CAGH,MAAM,gBACJ,QACA,SACA,QACA,WAAW,MACU;EACrB,OAAO,gBAAgB,QAAQ,SAAS,QAAQ,SAAS;;CAG3D,sBAAsB,SAAoC;EACxD,OAAO,YAAY,QAAQ;;CAG7B,MAAM,sBACJ,QACA,SACA,QACA,WAAW,MACgB;EAC3B,OAAO,sBAAsB,QAAQ,SAAS,QAAQ,SAAS"}

package/package.json

@@ -1,64 +1,49 @@
 {
   "name": "@idos-network/issuer",
+  "version": "1.2.0",
   "description": "idOS Issuer JavaScript SDK for server environments",
-  "version": "1.0.0-rc.1.2",
-  "clean-package": {
-    "remove": [
-      "devDependencies.@idos-network/core",
-      "devDependencies.@idos-network/credentials"
-    ]
+  "homepage": "https://idos.network",
+  "license": "MIT",
+  "repository": "github:idos-network/idos-sdk-js",
+  "files": [
+    "dist/**/*",
+    "src/**/*"
+  ],
+  "type": "module",
+  "sideEffects": false,
+  "main": "./dist/index.mjs",
+  "module": "dist/index.mjs",
+  "types": "./dist/index.d.mts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.mts",
+      "import": "./dist/index.mjs"
+    }
+  },
+  "publishConfig": {
+    "access": "public"
   },
   "dependencies": {
-    "@digitalbazaar/ed25519-signature-2020": "^5.4.0",
-    "@digitalbazaar/ed25519-verification-key-2020": "^4.2.0",
-    "@digitalbazaar/vc": "^7.2.0",
-    "@idos-network/kwil-js": "0.1.1",
-    "base85": "^3.1.0",
-    "es-toolkit": "^1.39.0",
-    "jsonld-document-loader": "^2.3.0",
-    "ripple-keypairs": "^2.0.0",
+    "@idos-network/kwil-js": "0.1.3",
     "tweetnacl": "^1.0.3",
-    "web-streams-polyfill": "^4.1.0"
+    "@idos-network/kwil-infra": "1.2.0",
+    "@idos-network/credentials": "1.2.0",
+    "@idos-network/utils": "1.2.0"
   },
   "devDependencies": {
-    "clean-package": "^2.2.0",
-    "release-it": "^19.0.2",
-    "release-it-pnpm": "^4.6.5",
     "tiny-invariant": "^1.3.3",
-    "tsdown": "^0.13.0",
-    "@idos-network/utils": "1.0.0-rc.1.0"
-  },
-  "engines": {
-    "node": ">=20.0.0"
+    "tsdown": "^0.22.0"
   },
-  "exports": {
-    ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js"
-    }
-  },
-  "files": [
-    "dist/**/*",
-    "src/**/*"
-  ],
-  "homepage": "https://idos.network",
-  "license": "MIT",
-  "main": "./dist/index.js",
-  "module": "dist/index.js",
   "peerDependencies": {
     "typescript": "^5.8.3"
   },
-  "publishConfig": {
-    "access": "public"
+  "engines": {
+    "node": ">=22.19.0"
   },
-  "repository": "https://github.com/idos-network/idos-sdk-js",
-  "sideEffects": false,
-  "type": "module",
-  "types": "./dist/index.d.ts",
   "scripts": {
     "build": "tsdown",
     "dev": "tsdown  --watch",
     "publint": "pnpx publint --strict",
-    "release-it": "release-it"
+    "typecheck": "tsc --noEmit"
   }
 }