@ixo/credentials-kit 0.0.0-stage → 0.1.1

package/dist/chunk-XREZY53L.js

@@ -0,0 +1,260 @@
+import { CredentialsKitError, decodeJws, JoseError, isRecord } from './chunk-VXKONZK4.js';
+import { base64urlEncode, utf8, bytesToHex, fromUtf8, base64urlDecode } from './chunk-AQ3IINHC.js';
+import { sha256 } from '@noble/hashes/sha2.js';
+
+var MAX_SD_JWT_LENGTH = 32 * 1024;
+var MAX_DISCLOSURES = 256;
+var REFUSED_CLAIM_NAMES = /* @__PURE__ */ new Set([
+  "__proto__",
+  "constructor",
+  "prototype"
+]);
+var NOT_A_DISCLOSURE_NAME = /* @__PURE__ */ new Set(["_sd", "...", "_sd_alg"]);
+var MAX_CLAIM_DEPTH = 32;
+var SD_JWT_MESSAGES = {
+  malformed: "The SD-JWT is not well formed.",
+  bad_disclosure: "An SD-JWT disclosure is not well formed.",
+  unknown_claim: "The SD-JWT has no disclosure for a requested claim."
+};
+var SdJwtError = class extends CredentialsKitError {
+  constructor(code) {
+    super(code, SD_JWT_MESSAGES[code]);
+  }
+};
+function sdDigest(s) {
+  return base64urlEncode(sha256(utf8(s)));
+}
+function parseDisclosure(raw) {
+  let arr;
+  try {
+    arr = JSON.parse(fromUtf8(base64urlDecode(raw)));
+  } catch {
+    throw new SdJwtError("bad_disclosure");
+  }
+  if (!Array.isArray(arr) || typeof arr[0] !== "string") {
+    throw new SdJwtError("bad_disclosure");
+  }
+  const digest = sdDigest(raw);
+  if (arr.length === 3) {
+    if (typeof arr[1] !== "string") throw new SdJwtError("bad_disclosure");
+    return {
+      raw,
+      salt: arr[0],
+      name: arr[1],
+      value: arr[2],
+      digest
+    };
+  }
+  if (arr.length === 2) {
+    return { raw, salt: arr[0], name: null, value: arr[1], digest };
+  }
+  throw new SdJwtError("bad_disclosure");
+}
+function parseSdJwt(str) {
+  if (typeof str !== "string" || str.length > MAX_SD_JWT_LENGTH) {
+    throw new SdJwtError("malformed");
+  }
+  const segments = str.split("~");
+  if (segments.length < 2) throw new SdJwtError("malformed");
+  const jwt = segments[0];
+  let decoded;
+  try {
+    decoded = decodeJws(jwt);
+  } catch (e) {
+    if (e instanceof JoseError) throw new SdJwtError("malformed");
+    throw e;
+  }
+  const last = segments[segments.length - 1];
+  const middle = segments.slice(1, -1);
+  if (middle.length > MAX_DISCLOSURES) throw new SdJwtError("malformed");
+  const disclosures = middle.map((raw) => {
+    if (raw.length === 0 || raw.includes("."))
+      throw new SdJwtError("malformed");
+    return parseDisclosure(raw);
+  });
+  const parsed = {
+    jwt,
+    header: decoded.header,
+    payload: decoded.payload,
+    disclosures
+  };
+  if (last.length > 0) {
+    try {
+      decodeJws(last);
+    } catch {
+      throw new SdJwtError("malformed");
+    }
+    parsed.kbJwt = last;
+  }
+  return parsed;
+}
+function serializeSdJwt(jwt, disclosureRaws, kbJwt) {
+  return `${jwt}~${disclosureRaws.map((d) => `${d}~`).join("")}${kbJwt ?? ""}`;
+}
+function topLevelDigests(payload) {
+  const sd = payload._sd;
+  return new Set(
+    Array.isArray(sd) ? sd.filter((x) => typeof x === "string") : []
+  );
+}
+function selectDisclosures(parsed, names) {
+  const wanted = new Set(names);
+  const top = topLevelDigests(parsed.payload);
+  const found = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const d of parsed.disclosures) {
+    if (d.name !== null && top.has(d.digest) && wanted.has(d.name) && !found.has(d.name)) {
+      found.add(d.name);
+      out.push(d.raw);
+    }
+  }
+  if (found.size !== wanted.size) throw new SdJwtError("unknown_claim");
+  return out;
+}
+function sdHash(jwtAndDisclosures) {
+  if (!jwtAndDisclosures.endsWith("~")) throw new SdJwtError("malformed");
+  return sdDigest(jwtAndDisclosures);
+}
+function processDisclosures(payload, disclosures) {
+  const byDigest = /* @__PURE__ */ new Map();
+  for (const d of disclosures) {
+    if (byDigest.has(d.digest)) throw new SdJwtError("bad_disclosure");
+    byDigest.set(d.digest, d);
+  }
+  const seenDigests = /* @__PURE__ */ new Set();
+  const used = /* @__PURE__ */ new Set();
+  const take = (digest) => {
+    if (typeof digest !== "string") throw new SdJwtError("malformed");
+    if (seenDigests.has(digest)) throw new SdJwtError("bad_disclosure");
+    seenDigests.add(digest);
+    const d = byDigest.get(digest);
+    if (d) used.add(digest);
+    return d;
+  };
+  const walk = (value, depth, top) => {
+    if (depth > MAX_CLAIM_DEPTH) throw new SdJwtError("malformed");
+    if (Array.isArray(value)) {
+      const out2 = [];
+      for (const element of value) {
+        if (isRecord(element) && Object.hasOwn(element, "...")) {
+          if (Object.keys(element).length !== 1)
+            throw new SdJwtError("malformed");
+          const d = take(element["..."]);
+          if (!d) continue;
+          if (d.name !== null) throw new SdJwtError("bad_disclosure");
+          out2.push(walk(d.value, depth + 1, false));
+        } else {
+          out2.push(walk(element, depth + 1, false));
+        }
+      }
+      return out2;
+    }
+    if (!isRecord(value)) return value;
+    const out = {};
+    const disclosedHere = [];
+    for (const [key, v] of Object.entries(value)) {
+      if (REFUSED_CLAIM_NAMES.has(key) || key === "...")
+        throw new SdJwtError("malformed");
+      if (key === "_sd") continue;
+      if (key === "_sd_alg") {
+        if (!top) throw new SdJwtError("malformed");
+        continue;
+      }
+      out[key] = walk(v, depth + 1, false);
+    }
+    if (value._sd !== void 0) {
+      if (!Array.isArray(value._sd)) throw new SdJwtError("malformed");
+      for (const digest of value._sd) {
+        const d = take(digest);
+        if (!d) continue;
+        if (d.name === null) throw new SdJwtError("bad_disclosure");
+        if (NOT_A_DISCLOSURE_NAME.has(d.name))
+          throw new SdJwtError("bad_disclosure");
+        if (REFUSED_CLAIM_NAMES.has(d.name)) throw new SdJwtError("malformed");
+        if (Object.hasOwn(out, d.name)) throw new SdJwtError("bad_disclosure");
+        out[d.name] = walk(d.value, depth + 1, false);
+        disclosedHere.push(d.name);
+      }
+    }
+    if (top) topDisclosed.push(...disclosedHere);
+    return out;
+  };
+  const topDisclosed = [];
+  const claims = walk(payload, 0, true);
+  if (used.size !== byDigest.size) throw new SdJwtError("bad_disclosure");
+  return { claims, disclosed: topDisclosed };
+}
+var STRUCTURAL = /* @__PURE__ */ new Set([
+  "iss",
+  "sub",
+  "iat",
+  "nbf",
+  "exp",
+  "vct",
+  "cnf",
+  "status",
+  "_sd",
+  "_sd_alg",
+  "jti",
+  "aud"
+]);
+function credentialRecordFromSdJwt(sdjwt, opts = {}) {
+  const parsed = parseSdJwt(sdjwt.trim());
+  if (parsed.kbJwt !== void 0) throw new SdJwtError("malformed");
+  const { payload } = parsed;
+  if (typeof payload.iss !== "string" || typeof payload.sub !== "string" || typeof payload.vct !== "string" || typeof payload.iat !== "number") {
+    throw new SdJwtError("malformed");
+  }
+  if (opts.holderDid !== void 0 && payload.sub !== opts.holderDid) {
+    throw new SdJwtError("malformed");
+  }
+  for (const key of Object.keys(payload)) {
+    if (REFUSED_CLAIM_NAMES.has(key)) throw new SdJwtError("malformed");
+  }
+  for (const d of parsed.disclosures) {
+    if (d.name !== null && REFUSED_CLAIM_NAMES.has(d.name))
+      throw new SdJwtError("malformed");
+  }
+  const processed = processDisclosures(payload, parsed.disclosures).claims;
+  const top = topLevelDigests(payload);
+  const claims = {};
+  for (const key of Object.keys(payload)) {
+    if (!STRUCTURAL.has(key))
+      claims[key] = { value: processed[key], sd: "never" };
+  }
+  for (const d of parsed.disclosures) {
+    if (d.name !== null && top.has(d.digest))
+      claims[d.name] = { value: processed[d.name], sd: "allowed" };
+  }
+  return {
+    recordType: "SdJwtCredentialRecord",
+    format: "dc+sd-jwt",
+    credential: sdjwt,
+    issuerDid: payload.iss,
+    ...opts.issuerName !== void 0 ? { issuerName: opts.issuerName } : {},
+    holderDid: payload.sub,
+    vct: payload.vct,
+    issuedAt: new Date(payload.iat * 1e3).toISOString(),
+    ...typeof payload.exp === "number" ? { expiresAt: new Date(payload.exp * 1e3).toISOString() } : {},
+    claims,
+    holderBinding: !!payload.cnf
+  };
+}
+function canonicalize(value) {
+  if (Array.isArray(value)) return value.map(canonicalize);
+  if (value && typeof value === "object") {
+    return Object.keys(value).sort().reduce((acc, key) => {
+      acc[key] = canonicalize(value[key]);
+      return acc;
+    }, {});
+  }
+  return value;
+}
+function credentialCid(record) {
+  const canonical = JSON.stringify(canonicalize(record));
+  return `sha256:${bytesToHex(sha256(utf8(canonical)))}`;
+}
+
+export { MAX_CLAIM_DEPTH, MAX_DISCLOSURES, MAX_SD_JWT_LENGTH, REFUSED_CLAIM_NAMES, SdJwtError, credentialCid, credentialRecordFromSdJwt, parseSdJwt, processDisclosures, sdDigest, sdHash, selectDisclosures, serializeSdJwt };
+//# sourceMappingURL=chunk-XREZY53L.js.map
+//# sourceMappingURL=chunk-XREZY53L.js.map

package/dist/chunk-XREZY53L.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdjwt.ts"],"names":["out"],"mappings":";;;;AA2BO,IAAM,oBAAoB,EAAA,GAAK;AAE/B,IAAM,eAAA,GAAkB;AA6BxB,IAAM,mBAAA,uBAA+C,GAAA,CAAI;AAAA,EAC9D,WAAA;AAAA,EACA,aAAA;AAAA,EACA;AACF,CAAC;AAED,IAAM,wCAAwB,IAAI,GAAA,CAAI,CAAC,KAAA,EAAO,KAAA,EAAO,SAAS,CAAC,CAAA;AAExD,IAAM,eAAA,GAAkB;AAE/B,IAAM,eAAA,GAAkD;AAAA,EACtD,SAAA,EAAW,gCAAA;AAAA,EACX,cAAA,EAAgB,0CAAA;AAAA,EAChB,aAAA,EAAe;AACjB,CAAA;AAEO,IAAM,UAAA,GAAN,cAAyB,mBAAA,CAAoB;AAAA,EAElD,YAAY,IAAA,EAAsB;AAChC,IAAA,KAAA,CAAM,IAAA,EAAM,eAAA,CAAgB,IAAI,CAAC,CAAA;AAAA,EACnC;AACF;AAGO,SAAS,SAAS,CAAA,EAAmB;AAC1C,EAAA,OAAO,eAAA,CAAgB,MAAA,CAAO,IAAA,CAAK,CAAC,CAAC,CAAC,CAAA;AACxC;AAEA,SAAS,gBAAgB,GAAA,EAAyB;AAChD,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,KAAK,KAAA,CAAM,QAAA,CAAS,eAAA,CAAgB,GAAG,CAAC,CAAC,CAAA;AAAA,EACjD,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,WAAW,gBAAgB,CAAA;AAAA,EACvC;AACA,EAAA,IAAI,CAAC,MAAM,OAAA,CAAQ,GAAG,KAAK,OAAO,GAAA,CAAI,CAAC,CAAA,KAAM,QAAA,EAAU;AACrD,IAAA,MAAM,IAAI,WAAW,gBAAgB,CAAA;AAAA,EACvC;AACA,EAAA,MAAM,MAAA,GAAS,SAAS,GAAG,CAAA;AAC3B,EAAA,IAAI,GAAA,CAAI,WAAW,CAAA,EAAG;AACpB,IAAA,IAAI,OAAO,IAAI,CAAC,CAAA,KAAM,UAAU,MAAM,IAAI,WAAW,gBAAgB,CAAA;AACrE,IAAA,OAAO;AAAA,MACL,GAAA;AAAA,MACA,IAAA,EAAM,IAAI,CAAC,CAAA;AAAA,MACX,IAAA,EAAM,IAAI,CAAC,CAAA;AAAA,MACX,KAAA,EAAO,IAAI,CAAC,CAAA;AAAA,MACZ;AAAA,KACF;AAAA,EACF;AACA,EAAA,IAAI,GAAA,CAAI,WAAW,CAAA,EAAG;AACpB,IAAA,OAAO,EAAE,GAAA,EAAK,IAAA,EAAM,GAAA,CAAI,CAAC,CAAA,EAAG,IAAA,EAAM,IAAA,EAAM,KAAA,EAAO,GAAA,CAAI,CAAC,CAAA,EAAc,MAAA,EAAO;AAAA,EAC3E;AACA,EAAA,MAAM,IAAI,WAAW,gBAAgB,CAAA;AACvC;AAMO,SAAS,WAAW,GAAA,EAA0B;AACnD,EAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,IAAY,GAAA,CAAI,SAAS,iBAAA,EAAmB;AAC7D,IAAA,MAAM,IAAI,WAAW,WAAW,CAAA;AAAA,EAClC;AACA,EAAA,MAAM,QAAA,GAAW,GAAA,CAAI,KAAA,CAAM,GAAG,CAAA;AAC9B,EAAA,IAAI,SAAS,MAAA,GAAS,CAAA,EAAG,MAAM,IAAI,WAAW,WAAW,CAAA;AACzD,EAAA,MAAM,GAAA,GAAM,SAAS,CAAC,CAAA;AACtB,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI;AACF,IAAA,OAAA,GAAU,UAAU,GAAG,CAAA;AAAA,EACzB,SAAS,CAAA,EAAG;AACV,IAAA,IAAI,CAAA,YAAa,SAAA,EAAW,MAAM,IAAI,WAAW,WAAW,CAAA;AAC5D,IAAA,MAAM,CAAA;AAAA,EACR;AACA,EAAA,MAAM,IAAA,GAAO,QAAA,CAAS,QAAA,CAAS,MAAA,GAAS,CAAC,CAAA;AACzC,EAAA,MAAM,MAAA,GAAS,QAAA,CAAS,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AACnC,EAAA,IAAI,OAAO,MAAA,GAAS,eAAA,EAAiB,MAAM,IAAI,WAAW,WAAW,CAAA;AACrE,EAAA,MAAM,WAAA,GAAc,MAAA,CAAO,GAAA,CAAI,CAAA,GAAA,KAAO;AACpC,IAAA,IAAI,GAAA,CAAI,MAAA,KAAW,CAAA,IAAK,GAAA,CAAI,SAAS,GAAG,CAAA;AACtC,MAAA,MAAM,IAAI,WAAW,WAAW,CAAA;AAClC,IAAA,OAAO,gBAAgB,GAAG,CAAA;AAAA,EAC5B,CAAC,CAAA;AACD,EAAA,MAAM,MAAA,GAAsB;AAAA,IAC1B,GAAA;AAAA,IACA,QAAQ,OAAA,CAAQ,MAAA;AAAA,IAChB,SAAS,OAAA,CAAQ,OAAA;AAAA,IACjB;AAAA,GACF;AACA,EAAA,IAAI,IAAA,CAAK,SAAS,CAAA,EAAG;AACnB,IAAA,IAAI;AACF,MAAA,SAAA,CAAU,IAAI,CAAA;AAAA,IAChB,CAAA,CAAA,MAAQ;AACN,MAAA,MAAM,IAAI,WAAW,WAAW,CAAA;AAAA,IAClC;AACA,IAAA,MAAA,CAAO,KAAA,GAAQ,IAAA;AAAA,EACjB;AACA,EAAA,OAAO,MAAA;AACT;AAMO,SAAS,cAAA,CACd,GAAA,EACA,cAAA,EACA,KAAA,EACQ;AACR,EAAA,OAAO,CAAA,EAAG,GAAG,CAAA,CAAA,EAAI,cAAA,CAAe,IAAI,CAAA,CAAA,KAAK,CAAA,EAAG,CAAC,CAAA,CAAA,CAAG,EAAE,IAAA,CAAK,EAAE,CAAC,CAAA,EAAG,SAAS,EAAE,CAAA,CAAA;AAC1E;AAGA,SAAS,gBAAgB,OAAA,EAAkC;AACzD,EAAA,MAAM,KAAK,OAAA,CAAQ,GAAA;AACnB,EAAA,OAAO,IAAI,GAAA;AAAA,IACT,KAAA,CAAM,OAAA,CAAQ,EAAE,CAAA,GACZ,EAAA,CAAG,MAAA,CAAO,CAAC,CAAA,KAAmB,OAAO,CAAA,KAAM,QAAQ,CAAA,GACnD;AAAC,GACP;AACF;AAUO,SAAS,iBAAA,CACd,QACA,KAAA,EACU;AACV,EAAA,MAAM,MAAA,GAAS,IAAI,GAAA,CAAI,KAAK,CAAA;AAC5B,EAAA,MAAM,GAAA,GAAM,eAAA,CAAgB,MAAA,CAAO,OAAO,CAAA;AAC1C,EAAA,MAAM,KAAA,uBAAY,GAAA,EAAY;AAC9B,EAAA,MAAM,MAAgB,EAAC;AACvB,EAAA,KAAA,MAAW,CAAA,IAAK,OAAO,WAAA,EAAa;AAClC,IAAA,IACE,EAAE,IAAA,KAAS,IAAA,IACX,IAAI,GAAA,CAAI,CAAA,CAAE,MAAM,CAAA,IAChB,MAAA,CAAO,GAAA,CAAI,CAAA,CAAE,IAAI,CAAA,IACjB,CAAC,MAAM,GAAA,CAAI,CAAA,CAAE,IAAI,CAAA,EACjB;AACA,MAAA,KAAA,CAAM,GAAA,CAAI,EAAE,IAAI,CAAA;AAChB,MAAA,GAAA,CAAI,IAAA,CAAK,EAAE,GAAG,CAAA;AAAA,IAChB;AAAA,EACF;AACA,EAAA,IAAI,MAAM,IAAA,KAAS,MAAA,CAAO,MAAM,MAAM,IAAI,WAAW,eAAe,CAAA;AACpE,EAAA,OAAO,GAAA;AACT;AAMO,SAAS,OAAO,iBAAA,EAAmC;AACxD,EAAA,IAAI,CAAC,kBAAkB,QAAA,CAAS,GAAG,GAAG,MAAM,IAAI,WAAW,WAAW,CAAA;AACtE,EAAA,OAAO,SAAS,iBAAiB,CAAA;AACnC;AAuBO,SAAS,kBAAA,CACd,SACA,WAAA,EACgB;AAChB,EAAA,MAAM,QAAA,uBAAe,GAAA,EAAwB;AAC7C,EAAA,KAAA,MAAW,KAAK,WAAA,EAAa;AAE3B,IAAA,IAAI,QAAA,CAAS,IAAI,CAAA,CAAE,MAAM,GAAG,MAAM,IAAI,WAAW,gBAAgB,CAAA;AACjE,IAAA,QAAA,CAAS,GAAA,CAAI,CAAA,CAAE,MAAA,EAAQ,CAAC,CAAA;AAAA,EAC1B;AACA,EAAA,MAAM,WAAA,uBAAkB,GAAA,EAAY;AACpC,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAE7B,EAAA,MAAM,IAAA,GAAO,CAAC,MAAA,KAA4C;AACxD,IAAA,IAAI,OAAO,MAAA,KAAW,QAAA,EAAU,MAAM,IAAI,WAAW,WAAW,CAAA;AAChE,IAAA,IAAI,YAAY,GAAA,CAAI,MAAM,GAAG,MAAM,IAAI,WAAW,gBAAgB,CAAA;AAClE,IAAA,WAAA,CAAY,IAAI,MAAM,CAAA;AACtB,IAAA,MAAM,CAAA,GAAI,QAAA,CAAS,GAAA,CAAI,MAAM,CAAA;AAC7B,IAAA,IAAI,CAAA,EAAG,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA;AACtB,IAAA,OAAO,CAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,IAAA,GAAO,CAAC,KAAA,EAAgB,KAAA,EAAe,GAAA,KAA0B;AACrE,IAAA,IAAI,KAAA,GAAQ,eAAA,EAAiB,MAAM,IAAI,WAAW,WAAW,CAAA;AAC7D,IAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AACxB,MAAA,MAAMA,OAAiB,EAAC;AACxB,MAAA,KAAA,MAAW,WAAW,KAAA,EAAO;AAC3B,QAAA,IAAI,SAAS,OAAO,CAAA,IAAK,OAAO,MAAA,CAAO,OAAA,EAAS,KAAK,CAAA,EAAG;AACtD,UAAA,IAAI,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,CAAE,MAAA,KAAW,CAAA;AAClC,YAAA,MAAM,IAAI,WAAW,WAAW,CAAA;AAClC,UAAA,MAAM,CAAA,GAAI,IAAA,CAAK,OAAA,CAAQ,KAAK,CAAC,CAAA;AAC7B,UAAA,IAAI,CAAC,CAAA,EAAG;AACR,UAAA,IAAI,EAAE,IAAA,KAAS,IAAA,EAAM,MAAM,IAAI,WAAW,gBAAgB,CAAA;AAC1D,UAAAA,IAAAA,CAAI,KAAK,IAAA,CAAK,CAAA,CAAE,OAAO,KAAA,GAAQ,CAAA,EAAG,KAAK,CAAC,CAAA;AAAA,QAC1C,CAAA,MAAO;AACL,UAAAA,KAAI,IAAA,CAAK,IAAA,CAAK,SAAS,KAAA,GAAQ,CAAA,EAAG,KAAK,CAAC,CAAA;AAAA,QAC1C;AAAA,MACF;AACA,MAAA,OAAOA,IAAAA;AAAA,IACT;AACA,IAAA,IAAI,CAAC,QAAA,CAAS,KAAK,CAAA,EAAG,OAAO,KAAA;AAC7B,IAAA,MAAM,MAAkB,EAAC;AACzB,IAAA,MAAM,gBAA0B,EAAC;AACjC,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,CAAC,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AAC5C,MAAA,IAAI,mBAAA,CAAoB,GAAA,CAAI,GAAG,CAAA,IAAK,GAAA,KAAQ,KAAA;AAC1C,QAAA,MAAM,IAAI,WAAW,WAAW,CAAA;AAClC,MAAA,IAAI,QAAQ,KAAA,EAAO;AACnB,MAAA,IAAI,QAAQ,SAAA,EAAW;AACrB,QAAA,IAAI,CAAC,GAAA,EAAK,MAAM,IAAI,WAAW,WAAW,CAAA;AAC1C,QAAA;AAAA,MACF;AACA,MAAA,GAAA,CAAI,GAAG,CAAA,GAAI,IAAA,CAAK,CAAA,EAAG,KAAA,GAAQ,GAAG,KAAK,CAAA;AAAA,IACrC;AACA,IAAA,IAAI,KAAA,CAAM,QAAQ,MAAA,EAAW;AAC3B,MAAA,IAAI,CAAC,MAAM,OAAA,CAAQ,KAAA,CAAM,GAAG,CAAA,EAAG,MAAM,IAAI,UAAA,CAAW,WAAW,CAAA;AAC/D,MAAA,KAAA,MAAW,MAAA,IAAU,MAAM,GAAA,EAAK;AAC9B,QAAA,MAAM,CAAA,GAAI,KAAK,MAAM,CAAA;AACrB,QAAA,IAAI,CAAC,CAAA,EAAG;AACR,QAAA,IAAI,EAAE,IAAA,KAAS,IAAA,EAAM,MAAM,IAAI,WAAW,gBAAgB,CAAA;AAC1D,QAAA,IAAI,qBAAA,CAAsB,GAAA,CAAI,CAAA,CAAE,IAAI,CAAA;AAClC,UAAA,MAAM,IAAI,WAAW,gBAAgB,CAAA;AACvC,QAAA,IAAI,mBAAA,CAAoB,IAAI,CAAA,CAAE,IAAI,GAAG,MAAM,IAAI,WAAW,WAAW,CAAA;AAErE,QAAA,IAAI,MAAA,CAAO,OAAO,GAAA,EAAK,CAAA,CAAE,IAAI,CAAA,EAAG,MAAM,IAAI,UAAA,CAAW,gBAAgB,CAAA;AACrE,QAAA,GAAA,CAAI,CAAA,CAAE,IAAI,CAAA,GAAI,IAAA,CAAK,EAAE,KAAA,EAAO,KAAA,GAAQ,GAAG,KAAK,CAAA;AAC5C,QAAA,aAAA,CAAc,IAAA,CAAK,EAAE,IAAI,CAAA;AAAA,MAC3B;AAAA,IACF;AACA,IAAA,IAAI,GAAA,EAAK,YAAA,CAAa,IAAA,CAAK,GAAG,aAAa,CAAA;AAC3C,IAAA,OAAO,GAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,eAAyB,EAAC;AAChC,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,OAAA,EAAS,CAAA,EAAG,IAAI,CAAA;AACpC,EAAA,IAAI,KAAK,IAAA,KAAS,QAAA,CAAS,MAAM,MAAM,IAAI,WAAW,gBAAgB,CAAA;AACtE,EAAA,OAAO,EAAE,MAAA,EAAQ,SAAA,EAAW,YAAA,EAAa;AAC3C;AA4BA,IAAM,UAAA,uBAAiB,GAAA,CAAI;AAAA,EACzB,KAAA;AAAA,EACA,KAAA;AAAA,EACA,KAAA;AAAA,EACA,KAAA;AAAA,EACA,KAAA;AAAA,EACA,KAAA;AAAA,EACA,KAAA;AAAA,EACA,QAAA;AAAA,EACA,KAAA;AAAA,EACA,SAAA;AAAA,EACA,KAAA;AAAA,EACA;AACF,CAAC,CAAA;AAwBM,SAAS,yBAAA,CACd,KAAA,EACA,IAAA,GAAgC,EAAC,EACV;AACvB,EAAA,MAAM,MAAA,GAAS,UAAA,CAAW,KAAA,CAAM,IAAA,EAAM,CAAA;AACtC,EAAA,IAAI,OAAO,KAAA,KAAU,MAAA,EAAW,MAAM,IAAI,WAAW,WAAW,CAAA;AAChE,EAAA,MAAM,EAAE,SAAQ,GAAI,MAAA;AACpB,EAAA,IACE,OAAO,OAAA,CAAQ,GAAA,KAAQ,QAAA,IACvB,OAAO,OAAA,CAAQ,GAAA,KAAQ,QAAA,IACvB,OAAO,QAAQ,GAAA,KAAQ,QAAA,IACvB,OAAO,OAAA,CAAQ,QAAQ,QAAA,EACvB;AACA,IAAA,MAAM,IAAI,WAAW,WAAW,CAAA;AAAA,EAClC;AACA,EAAA,IAAI,KAAK,SAAA,KAAc,MAAA,IAAa,OAAA,CAAQ,GAAA,KAAQ,KAAK,SAAA,EAAW;AAClE,IAAA,MAAM,IAAI,WAAW,WAAW,CAAA;AAAA,EAClC;AAGA,EAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,EAAG;AACtC,IAAA,IAAI,oBAAoB,GAAA,CAAI,GAAG,GAAG,MAAM,IAAI,WAAW,WAAW,CAAA;AAAA,EACpE;AACA,EAAA,KAAA,MAAW,CAAA,IAAK,OAAO,WAAA,EAAa;AAClC,IAAA,IAAI,EAAE,IAAA,KAAS,IAAA,IAAQ,mBAAA,CAAoB,GAAA,CAAI,EAAE,IAAI,CAAA;AACnD,MAAA,MAAM,IAAI,WAAW,WAAW,CAAA;AAAA,EACpC;AAEA,EAAA,MAAM,SAAA,GAAY,kBAAA,CAAmB,OAAA,EAAS,MAAA,CAAO,WAAW,CAAA,CAAE,MAAA;AAClE,EAAA,MAAM,GAAA,GAAM,gBAAgB,OAAO,CAAA;AACnC,EAAA,MAAM,SAA0C,EAAC;AACjD,EAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,EAAG;AACtC,IAAA,IAAI,CAAC,UAAA,CAAW,GAAA,CAAI,GAAG,CAAA;AACrB,MAAA,MAAA,CAAO,GAAG,IAAI,EAAE,KAAA,EAAO,UAAU,GAAG,CAAA,EAAG,IAAI,OAAA,EAAQ;AAAA,EACvD;AACA,EAAA,KAAA,MAAW,CAAA,IAAK,OAAO,WAAA,EAAa;AAClC,IAAA,IAAI,EAAE,IAAA,KAAS,IAAA,IAAQ,GAAA,CAAI,GAAA,CAAI,EAAE,MAAM,CAAA;AACrC,MAAA,MAAA,CAAO,CAAA,CAAE,IAAI,CAAA,GAAI,EAAE,KAAA,EAAO,UAAU,CAAA,CAAE,IAAI,CAAA,EAAG,EAAA,EAAI,SAAA,EAAU;AAAA,EAC/D;AAEA,EAAA,OAAO;AAAA,IACL,UAAA,EAAY,uBAAA;AAAA,IACZ,MAAA,EAAQ,WAAA;AAAA,IACR,UAAA,EAAY,KAAA;AAAA,IACZ,WAAW,OAAA,CAAQ,GAAA;AAAA,IACnB,GAAI,KAAK,UAAA,KAAe,MAAA,GAAY,EAAE,UAAA,EAAY,IAAA,CAAK,UAAA,EAAW,GAAI,EAAC;AAAA,IACvE,WAAW,OAAA,CAAQ,GAAA;AAAA,IACnB,KAAK,OAAA,CAAQ,GAAA;AAAA,IACb,UAAU,IAAI,IAAA,CAAK,QAAQ,GAAA,GAAM,GAAI,EAAE,WAAA,EAAY;AAAA,IACnD,GAAI,OAAO,OAAA,CAAQ,GAAA,KAAQ,QAAA,GACvB,EAAE,SAAA,EAAW,IAAI,IAAA,CAAK,OAAA,CAAQ,MAAM,GAAI,CAAA,CAAE,WAAA,EAAY,KACtD,EAAC;AAAA,IACL,MAAA;AAAA,IACA,aAAA,EAAe,CAAC,CAAC,OAAA,CAAQ;AAAA,GAC3B;AACF;AASA,SAAS,aAAa,KAAA,EAAyB;AAC7C,EAAA,IAAI,MAAM,OAAA,CAAQ,KAAK,GAAG,OAAO,KAAA,CAAM,IAAI,YAAY,CAAA;AACvD,EAAA,IAAI,KAAA,IAAS,OAAO,KAAA,KAAU,QAAA,EAAU;AAEtC,IAAA,OAAO,MAAA,CAAO,KAAK,KAAgC,CAAA,CAChD,MAAK,CACL,MAAA,CAAgC,CAAC,GAAA,EAAK,GAAA,KAAQ;AAC7C,MAAA,GAAA,CAAI,GAAG,CAAA,GAAI,YAAA,CAAc,KAAA,CAAkC,GAAG,CAAC,CAAA;AAC/D,MAAA,OAAO,GAAA;AAAA,IACT,CAAA,EAAG,EAAE,CAAA;AAAA,EACT;AACA,EAAA,OAAO,KAAA;AACT;AAGO,SAAS,cAAc,MAAA,EAAyB;AACrD,EAAA,MAAM,SAAA,GAAY,IAAA,CAAK,SAAA,CAAU,YAAA,CAAa,MAAM,CAAC,CAAA;AACrD,EAAA,OAAO,UAAU,UAAA,CAAW,MAAA,CAAO,KAAK,SAAS,CAAC,CAAC,CAAC,CAAA,CAAA;AACtD","file":"chunk-XREZY53L.js","sourcesContent":["/**\n * `@ixo/credentials-kit/sdjwt` — SD-JWT (RFC 9901) parsing and serialization, the Vault record\n * the Self web app and the portal store, and its CID.\n *\n *   SD-JWT       <issuer-signed JWT>~<disclosure 1>~…~<disclosure n>~\n *   SD-JWT+KB    <issuer-signed JWT>~<disclosure 1>~…~<disclosure n>~<KB-JWT>\n *   disclosure   base64url(UTF-8 JSON [salt, name, value])   (array element: [salt, value])\n *   digest       base64url(SHA-256(US-ASCII of the disclosure string))\n *   sd_hash      base64url(SHA-256(US-ASCII of \"<jwt>~<d1>~…~<dn>~\"))\n *\n * Parsing does not verify signatures (see `verify`); it checks structure only.\n * `processDisclosures` is the RFC 9901 §7.1 step 3–5 algorithm (recursive: nested object and\n * array-element disclosures), used by `verify` after the signature has been checked.\n */\nimport { sha256 } from '@noble/hashes/sha2.js';\nimport {\n  base64urlDecode,\n  base64urlEncode,\n  bytesToHex,\n  fromUtf8,\n  utf8,\n} from './internal/bytes';\nimport { CredentialsKitError } from './internal/errors';\nimport { isRecord, type JsonObject } from './internal/util';\nimport { JoseError, decodeJws } from './jose';\n\n/** Largest SD-JWT (with KB-JWT) the kit parses: 32 KiB. */\nexport const MAX_SD_JWT_LENGTH = 32 * 1024;\n/** Most disclosures one SD-JWT may carry. */\nexport const MAX_DISCLOSURES = 256;\n\nexport interface Disclosure {\n  /** The disclosure exactly as it appears in the SD-JWT (base64url). */\n  raw: string;\n  salt: string;\n  /** The claim name; null for an array-element disclosure (`[salt, value]`). */\n  name: string | null;\n  value: unknown;\n  /** base64url(SHA-256(raw)), the value found in `_sd`. */\n  digest: string;\n}\n\nexport interface ParsedSdJwt {\n  /** The issuer-signed JWT. */\n  jwt: string;\n  header: JsonObject;\n  payload: JsonObject;\n  disclosures: Disclosure[];\n  /** The Key Binding JWT, when the input was an SD-JWT+KB. */\n  kbJwt?: string;\n}\n\nexport type SdJwtErrorCode = 'malformed' | 'bad_disclosure' | 'unknown_claim';\n\n/**\n * Claim names refused anywhere in a credential (plaintext or disclosed): they would change an\n * object's prototype or shadow its constructor in JavaScript consumers (SPEC §13.3).\n */\nexport const REFUSED_CLAIM_NAMES: ReadonlySet<string> = new Set([\n  '__proto__',\n  'constructor',\n  'prototype',\n]);\n/** Names a disclosure may never carry (RFC 9901 §4.2.1, plus `_sd_alg`). */\nconst NOT_A_DISCLOSURE_NAME = new Set(['_sd', '...', '_sd_alg']);\n/** Deepest nesting `processDisclosures` walks. */\nexport const MAX_CLAIM_DEPTH = 32;\n\nconst SD_JWT_MESSAGES: Record<SdJwtErrorCode, string> = {\n  malformed: 'The SD-JWT is not well formed.',\n  bad_disclosure: 'An SD-JWT disclosure is not well formed.',\n  unknown_claim: 'The SD-JWT has no disclosure for a requested claim.',\n};\n\nexport class SdJwtError extends CredentialsKitError {\n  declare readonly code: SdJwtErrorCode;\n  constructor(code: SdJwtErrorCode) {\n    super(code, SD_JWT_MESSAGES[code]);\n  }\n}\n\n/** base64url(SHA-256(US-ASCII bytes of `s`)), the SD-JWT digest (sha-256 only). */\nexport function sdDigest(s: string): string {\n  return base64urlEncode(sha256(utf8(s)));\n}\n\nfunction parseDisclosure(raw: string): Disclosure {\n  let arr: unknown;\n  try {\n    arr = JSON.parse(fromUtf8(base64urlDecode(raw)));\n  } catch {\n    throw new SdJwtError('bad_disclosure');\n  }\n  if (!Array.isArray(arr) || typeof arr[0] !== 'string') {\n    throw new SdJwtError('bad_disclosure');\n  }\n  const digest = sdDigest(raw);\n  if (arr.length === 3) {\n    if (typeof arr[1] !== 'string') throw new SdJwtError('bad_disclosure');\n    return {\n      raw,\n      salt: arr[0],\n      name: arr[1],\n      value: arr[2] as unknown,\n      digest,\n    };\n  }\n  if (arr.length === 2) {\n    return { raw, salt: arr[0], name: null, value: arr[1] as unknown, digest };\n  }\n  throw new SdJwtError('bad_disclosure');\n}\n\n/**\n * Parse an SD-JWT or SD-JWT+KB. Throws `SdJwtError` (`malformed`, `bad_disclosure`). Does not\n * verify anything cryptographic and does not check that disclosures are referenced.\n */\nexport function parseSdJwt(str: string): ParsedSdJwt {\n  if (typeof str !== 'string' || str.length > MAX_SD_JWT_LENGTH) {\n    throw new SdJwtError('malformed');\n  }\n  const segments = str.split('~');\n  if (segments.length < 2) throw new SdJwtError('malformed');\n  const jwt = segments[0]!;\n  let decoded;\n  try {\n    decoded = decodeJws(jwt);\n  } catch (e) {\n    if (e instanceof JoseError) throw new SdJwtError('malformed');\n    throw e;\n  }\n  const last = segments[segments.length - 1]!;\n  const middle = segments.slice(1, -1);\n  if (middle.length > MAX_DISCLOSURES) throw new SdJwtError('malformed');\n  const disclosures = middle.map(raw => {\n    if (raw.length === 0 || raw.includes('.'))\n      throw new SdJwtError('malformed');\n    return parseDisclosure(raw);\n  });\n  const parsed: ParsedSdJwt = {\n    jwt,\n    header: decoded.header,\n    payload: decoded.payload,\n    disclosures,\n  };\n  if (last.length > 0) {\n    try {\n      decodeJws(last);\n    } catch {\n      throw new SdJwtError('malformed');\n    }\n    parsed.kbJwt = last;\n  }\n  return parsed;\n}\n\n/**\n * `<jwt>~<d1>~…~<dn>~` plus the KB-JWT when given. With no KB-JWT the result ends with `~`\n * (RFC 9901 §4).\n */\nexport function serializeSdJwt(\n  jwt: string,\n  disclosureRaws: readonly string[],\n  kbJwt?: string\n): string {\n  return `${jwt}~${disclosureRaws.map(d => `${d}~`).join('')}${kbJwt ?? ''}`;\n}\n\n/** The digests listed in the payload's own (top-level) `_sd`. */\nfunction topLevelDigests(payload: JsonObject): Set<string> {\n  const sd = payload._sd;\n  return new Set(\n    Array.isArray(sd)\n      ? sd.filter((x): x is string => typeof x === 'string')\n      : []\n  );\n}\n\n/**\n * The raw disclosures for the TOP-LEVEL claim `names`: object-property disclosures whose digest\n * is listed in the payload's own `_sd`, in the order the SD-JWT carries them. A claim name is an\n * exact path of one segment: a disclosure of the same name nested inside another claim is never\n * selected (it would release a value nobody asked for), and the nested disclosures inside a\n * selected value are not released either. Throws `unknown_claim` when a name has no top-level\n * disclosure, so a caller never silently presents less (or something else) than it meant to.\n */\nexport function selectDisclosures(\n  parsed: ParsedSdJwt,\n  names: readonly string[]\n): string[] {\n  const wanted = new Set(names);\n  const top = topLevelDigests(parsed.payload);\n  const found = new Set<string>();\n  const out: string[] = [];\n  for (const d of parsed.disclosures) {\n    if (\n      d.name !== null &&\n      top.has(d.digest) &&\n      wanted.has(d.name) &&\n      !found.has(d.name)\n    ) {\n      found.add(d.name);\n      out.push(d.raw);\n    }\n  }\n  if (found.size !== wanted.size) throw new SdJwtError('unknown_claim');\n  return out;\n}\n\n/**\n * The KB-JWT `sd_hash` over `<jwt>~<d1>~…~<dn>~` (must end with `~`, as presented: the\n * issuer-signed JWT and the chosen disclosures, without the KB-JWT).\n */\nexport function sdHash(jwtAndDisclosures: string): string {\n  if (!jwtAndDisclosures.endsWith('~')) throw new SdJwtError('malformed');\n  return sdDigest(jwtAndDisclosures);\n}\n\nexport interface ProcessedSdJwt {\n  /**\n   * The payload with every presented disclosure put in place, recursively, and every `_sd`,\n   * `_sd_alg` and unmatched `{\"...\": digest}` array element removed (RFC 9901 §7.1 step 3).\n   */\n  claims: JsonObject;\n  /** Names of the top-level claims that came from a disclosure, in payload order. */\n  disclosed: string[];\n}\n\n/**\n * RFC 9901 §7.1 steps 3–5 over an (already signature-checked) payload: every `_sd` digest list\n * in every object and every `{\"...\": digest}` element of every array, recursively into\n * disclosed values. Throws `SdJwtError('bad_disclosure')` when a digest appears more than once,\n * a disclosure matches no digest (or is presented twice), an object-property disclosure is\n * found in an array (or the reverse), a disclosed name is `_sd`, `...` or `_sd_alg`, or a\n * disclosed name already exists at its level. Throws `SdJwtError('malformed')` for a malformed\n * `_sd` or `...` structure, a claim named `__proto__` / `constructor` / `prototype`, `_sd_alg`\n * below the top level, or nesting deeper than `MAX_CLAIM_DEPTH`. `sha-256` digests only (the\n * caller checks `_sd_alg`).\n */\nexport function processDisclosures(\n  payload: JsonObject,\n  disclosures: readonly Disclosure[]\n): ProcessedSdJwt {\n  const byDigest = new Map<string, Disclosure>();\n  for (const d of disclosures) {\n    // The same disclosure presented twice can be referenced only once (§7.1 step 5).\n    if (byDigest.has(d.digest)) throw new SdJwtError('bad_disclosure');\n    byDigest.set(d.digest, d);\n  }\n  const seenDigests = new Set<string>();\n  const used = new Set<string>();\n\n  const take = (digest: unknown): Disclosure | undefined => {\n    if (typeof digest !== 'string') throw new SdJwtError('malformed');\n    if (seenDigests.has(digest)) throw new SdJwtError('bad_disclosure');\n    seenDigests.add(digest);\n    const d = byDigest.get(digest);\n    if (d) used.add(digest);\n    return d;\n  };\n\n  const walk = (value: unknown, depth: number, top: boolean): unknown => {\n    if (depth > MAX_CLAIM_DEPTH) throw new SdJwtError('malformed');\n    if (Array.isArray(value)) {\n      const out: unknown[] = [];\n      for (const element of value) {\n        if (isRecord(element) && Object.hasOwn(element, '...')) {\n          if (Object.keys(element).length !== 1)\n            throw new SdJwtError('malformed');\n          const d = take(element['...']);\n          if (!d) continue; // withheld or decoy: the element is removed\n          if (d.name !== null) throw new SdJwtError('bad_disclosure');\n          out.push(walk(d.value, depth + 1, false));\n        } else {\n          out.push(walk(element, depth + 1, false));\n        }\n      }\n      return out;\n    }\n    if (!isRecord(value)) return value;\n    const out: JsonObject = {};\n    const disclosedHere: string[] = [];\n    for (const [key, v] of Object.entries(value)) {\n      if (REFUSED_CLAIM_NAMES.has(key) || key === '...')\n        throw new SdJwtError('malformed');\n      if (key === '_sd') continue;\n      if (key === '_sd_alg') {\n        if (!top) throw new SdJwtError('malformed');\n        continue;\n      }\n      out[key] = walk(v, depth + 1, false);\n    }\n    if (value._sd !== undefined) {\n      if (!Array.isArray(value._sd)) throw new SdJwtError('malformed');\n      for (const digest of value._sd) {\n        const d = take(digest);\n        if (!d) continue; // withheld or decoy\n        if (d.name === null) throw new SdJwtError('bad_disclosure');\n        if (NOT_A_DISCLOSURE_NAME.has(d.name))\n          throw new SdJwtError('bad_disclosure');\n        if (REFUSED_CLAIM_NAMES.has(d.name)) throw new SdJwtError('malformed');\n        // A disclosure never overwrites a claim at its level (§7.1 step 3.c.ii.3).\n        if (Object.hasOwn(out, d.name)) throw new SdJwtError('bad_disclosure');\n        out[d.name] = walk(d.value, depth + 1, false);\n        disclosedHere.push(d.name);\n      }\n    }\n    if (top) topDisclosed.push(...disclosedHere);\n    return out;\n  };\n\n  const topDisclosed: string[] = [];\n  const claims = walk(payload, 0, true) as JsonObject;\n  if (used.size !== byDigest.size) throw new SdJwtError('bad_disclosure');\n  return { claims, disclosed: topDisclosed };\n}\n\n// ---------------------------------------------------------------------------------------------\n// The Vault record (port of ixo-self/web/src/vault/sdjwt.ts `toCredentialRecord`).\n\n/**\n * The `ixo.credential` payload the portal / jambo / Self web app store\n * (`SdJwtCredentialRecord`): the raw SD-JWT is authoritative; `claims` is a display cache with\n * each claim's disclosure rule.\n */\nexport interface SdJwtCredentialRecord {\n  recordType: 'SdJwtCredentialRecord';\n  format: 'dc+sd-jwt';\n  credential: string;\n  issuerDid: string;\n  issuerName?: string;\n  holderDid: string;\n  vct: string;\n  issuedAt: string;\n  expiresAt?: string;\n  claims: Record<\n    string,\n    { value: unknown; sd: 'never' | 'allowed' | 'always' }\n  >;\n  holderBinding: boolean;\n}\n\n/** JWT registered / SD-JWT structural claims that are not user-facing claims (Self's set). */\nconst STRUCTURAL = new Set([\n  'iss',\n  'sub',\n  'iat',\n  'nbf',\n  'exp',\n  'vct',\n  'cnf',\n  'status',\n  '_sd',\n  '_sd_alg',\n  'jti',\n  'aud',\n]);\n\nexport interface CredentialRecordOptions {\n  /** Display name of the issuer (Self stores `'IXO Identity'`). Omitted when not given. */\n  issuerName?: string;\n  /** When given, the credential's `sub` must equal it (it was issued to this holder). */\n  holderDid?: string;\n}\n\n/**\n * The Vault record of an issued SD-JWT VC, byte-identical (same members, same order) to Self's\n * `toCredentialRecord` for the same flat credential, so the Hub and the browser de-duplicate by\n * CID. Every field comes from the SD-JWT itself; the same credential always yields the same\n * record. `claims` holds the TOP-LEVEL claims only: plaintext ones (`sd: 'never'`), then the\n * top-level disclosures in the order the SD-JWT carries them (`sd: 'allowed'`). A nested\n * disclosure stays inside its parent's value (RFC 9901 §7.1 processing), so it can never stand\n * in for, or overwrite, a top-level claim of the same name. Throws `SdJwtError('malformed')`\n * when `iss`, `sub`, `vct` or `iat` is missing, when `holderDid` does not match, or when a claim\n * is named `__proto__`, `constructor` or `prototype`, and `SdJwtError('bad_disclosure')` (or\n * `malformed`) when the disclosures break RFC 9901 §7.1 (unreferenced, repeated, overwriting).\n *\n * This only PARSES: it does not check the issuer's signature, `cnf` or validity. A wallet must\n * call `verifyIssuedCredential` (kit `verify`) first and store only what passed (RFC 9901 §7.2).\n */\nexport function credentialRecordFromSdJwt(\n  sdjwt: string,\n  opts: CredentialRecordOptions = {}\n): SdJwtCredentialRecord {\n  const parsed = parseSdJwt(sdjwt.trim());\n  if (parsed.kbJwt !== undefined) throw new SdJwtError('malformed');\n  const { payload } = parsed;\n  if (\n    typeof payload.iss !== 'string' ||\n    typeof payload.sub !== 'string' ||\n    typeof payload.vct !== 'string' ||\n    typeof payload.iat !== 'number'\n  ) {\n    throw new SdJwtError('malformed');\n  }\n  if (opts.holderDid !== undefined && payload.sub !== opts.holderDid) {\n    throw new SdJwtError('malformed');\n  }\n\n  // A claim named __proto__ / constructor / prototype would rewire the record (L-5): refused.\n  for (const key of Object.keys(payload)) {\n    if (REFUSED_CLAIM_NAMES.has(key)) throw new SdJwtError('malformed');\n  }\n  for (const d of parsed.disclosures) {\n    if (d.name !== null && REFUSED_CLAIM_NAMES.has(d.name))\n      throw new SdJwtError('malformed');\n  }\n  // RFC 9901 §7.1: every disclosure in its place, nested ones inside their parent's value.\n  const processed = processDisclosures(payload, parsed.disclosures).claims;\n  const top = topLevelDigests(payload);\n  const claims: SdJwtCredentialRecord['claims'] = {};\n  for (const key of Object.keys(payload)) {\n    if (!STRUCTURAL.has(key))\n      claims[key] = { value: processed[key], sd: 'never' };\n  }\n  for (const d of parsed.disclosures) {\n    if (d.name !== null && top.has(d.digest))\n      claims[d.name] = { value: processed[d.name], sd: 'allowed' };\n  }\n\n  return {\n    recordType: 'SdJwtCredentialRecord',\n    format: 'dc+sd-jwt',\n    credential: sdjwt,\n    issuerDid: payload.iss,\n    ...(opts.issuerName !== undefined ? { issuerName: opts.issuerName } : {}),\n    holderDid: payload.sub,\n    vct: payload.vct,\n    issuedAt: new Date(payload.iat * 1000).toISOString(),\n    ...(typeof payload.exp === 'number'\n      ? { expiresAt: new Date(payload.exp * 1000).toISOString() }\n      : {}),\n    claims,\n    holderBinding: !!payload.cnf,\n  };\n}\n\n// ---------------------------------------------------------------------------------------------\n// CID (port of ixo-self/web/src/vault/cid.ts, itself byte-identical to the portal's\n// lib/kyc/kycVault.ts and jambo's utils/matrixCredential.ts).\n\n// Recursively sort object keys so JSON.stringify yields a canonical, hash-stable form. Must stay\n// byte-identical to jambo's utils/matrixCredential.ts: the CID is the cross-app dedup key for the\n// same credential payload.\nfunction canonicalize(value: unknown): unknown {\n  if (Array.isArray(value)) return value.map(canonicalize);\n  if (value && typeof value === 'object') {\n    // eslint-disable-next-line @typescript-eslint/no-unnecessary-type-assertion -- kept as ported\n    return Object.keys(value as Record<string, unknown>)\n      .sort()\n      .reduce<Record<string, unknown>>((acc, key) => {\n        acc[key] = canonicalize((value as Record<string, unknown>)[key]);\n        return acc;\n      }, {});\n  }\n  return value;\n}\n\n/** `\"sha256:\" + hex(sha256(JSON.stringify(canonicalize(record))))`, the Vault's dedup key. */\nexport function credentialCid(record: unknown): string {\n  const canonical = JSON.stringify(canonicalize(record));\n  return `sha256:${bytesToHex(sha256(utf8(canonical)))}`;\n}\n"]}

package/dist/chunk-ZZY4WGQ6.js

@@ -0,0 +1,13 @@
+import { IXO_PERSON_DID, IXO_ENTITY_DID, parseDidWeb } from './chunk-WIEGZFUO.js';
+
+// src/sender.ts
+function senderKeyOf(did) {
+  if (typeof did !== "string") return null;
+  if (did.startsWith("did:ixo:"))
+    return IXO_PERSON_DID.test(did) || IXO_ENTITY_DID.test(did) ? did : null;
+  return parseDidWeb(did) ? did : null;
+}
+
+export { senderKeyOf };
+//# sourceMappingURL=chunk-ZZY4WGQ6.js.map
+//# sourceMappingURL=chunk-ZZY4WGQ6.js.map

package/dist/chunk-ZZY4WGQ6.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sender.ts"],"names":[],"mappings":";;;AA4BO,SAAS,YAAY,GAAA,EAA4B;AACtD,EAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,EAAU,OAAO,IAAA;AACpC,EAAA,IAAI,GAAA,CAAI,WAAW,UAAU,CAAA;AAC3B,IAAA,OAAO,cAAA,CAAe,KAAK,GAAG,CAAA,IAAK,eAAe,IAAA,CAAK,GAAG,IAAI,GAAA,GAAM,IAAA;AACtE,EAAA,OAAO,WAAA,CAAY,GAAG,CAAA,GAAI,GAAA,GAAM,IAAA;AAClC","file":"chunk-ZZY4WGQ6.js","sourcesContent":["/**\n * `@ixo/credentials-kit/sender` — who a sender is, for block lists, pending caps and the catalog\n * (SPEC §16.1, §17.4).\n *\n * One rule for everyone, no list of services: every DID is its own sender, exactly as written. A\n * sender's KEY is the DID itself in its canonical form:\n *   - a did:ixo in its canonical form (SPEC §17.5, PD-07): a person `did:ixo:ixo1…` (lower-case\n *     bech32 of a 20-byte address, `IXO_PERSON_DID`) or an entity `did:ixo:entity:<32 lower-case\n *     hex>` (`IXO_ENTITY_DID`), the only did:ixo forms the resolver resolves. Any other did:ixo\n *     (`did:ixo:IXO1…`, `did:ixo:anything`) is null. The bech32 checksum is not verified (the kit\n *     has no bech32 decoder); such a DID never resolves, so it can never deposit anything;\n *   - a did:web in canonical form (`parseDidWeb`, the parser the resolver uses), whatever its host\n *     and path: `did:web:example.com`, `did:web:a.example.com` and `did:web:example.com:user:alice`\n *     are three senders, each with its own caps, its own block and its own catalog entry. Blocking\n *     one never blocks another DID on the same domain.\n *\n * The did:web must be in canonical form, so one DID has one spelling and a second spelling of one\n * DID can never be a second sender: `senderKeyOf` answers null for any other spelling (trailing\n * dot, upper case, percent-encoding in the host other than `%3A` before a port, an IDN not in\n * punycode, …), and callers refuse it.\n */\nimport { IXO_ENTITY_DID, IXO_PERSON_DID, parseDidWeb } from './did';\n\n/**\n * The sender key of `did`: the DID itself when it is a did:ixo person or entity DID, or a did:web\n * in canonical form. Null for any other did:ixo or did:web spelling (refuse it) and for anything\n * that is not a did:ixo or did:web.\n */\nexport function senderKeyOf(did: string): string | null {\n  if (typeof did !== 'string') return null;\n  if (did.startsWith('did:ixo:'))\n    return IXO_PERSON_DID.test(did) || IXO_ENTITY_DID.test(did) ? did : null;\n  return parseDidWeb(did) ? did : null;\n}\n"]}

package/dist/did.d.ts

@@ -0,0 +1,182 @@
+import { CredentialsKitError } from './index.js';
+import { F as FetchLike, H as HostPolicy } from './http-BhuJ_-RZ.js';
+export { i as isFetchableUrl, a as isPrivateHost } from './http-BhuJ_-RZ.js';
+import { JsonObject } from './index.js';
+
+/**
+ * The cache the kit's network functions accept. The shape is a subset of Cloudflare's
+ * `KVNamespace`, so a KV binding can be passed as is; `createMemoryCache()` is an in-isolate
+ * implementation for Node, browsers and tests. A cache is never a source of truth: a read or
+ * write failure is treated as a miss and ignored.
+ */
+interface KeyValueCache {
+    get(key: string): Promise<string | null>;
+    put(key: string, value: string, options?: {
+        expirationTtl?: number;
+    }): Promise<void>;
+}
+/** An in-memory cache with per-entry TTL and a size bound (oldest entry evicted first). */
+declare function createMemoryCache(opts?: {
+    maxEntries?: number;
+    now?: () => number;
+}): KeyValueCache;
+
+interface VerificationMethod {
+    id: string;
+    type: string;
+    controller: string;
+    publicKeyMultibase?: string;
+    publicKeyBase58?: string;
+    publicKeyHex?: string;
+    publicKeyJwk?: JsonObject;
+    [name: string]: unknown;
+}
+type VerificationRelationshipEntry = string | VerificationMethod;
+interface DidDocument {
+    id: string;
+    controller?: string[];
+    verificationMethod?: VerificationMethod[];
+    authentication?: VerificationRelationshipEntry[];
+    assertionMethod?: VerificationRelationshipEntry[];
+    capabilityInvocation?: VerificationRelationshipEntry[];
+    capabilityDelegation?: VerificationRelationshipEntry[];
+    keyAgreement?: VerificationRelationshipEntry[];
+    service?: unknown[];
+    [name: string]: unknown;
+}
+/** `null`: the DID does not exist. Throws `ResolverUnavailable` when the source cannot be read. */
+type DidResolver = (did: string) => Promise<DidDocument | null>;
+/** The relationships a credentials key may be selected under. */
+type KeyRelationship = 'assertionMethod' | 'authentication';
+interface ResolvedKey {
+    /** The verification method's absolute id (a DID URL). */
+    id: string;
+    /** Raw 32-byte Ed25519 public key. */
+    publicKey: Uint8Array;
+}
+type ResolverSource = 'blocksync' | 'did_web';
+/** The DID's source could not be read (down, timed out, errored, malformed answer). */
+declare class ResolverUnavailable extends CredentialsKitError {
+    readonly code: 'resolver_unavailable';
+    readonly source: ResolverSource;
+    constructor(source: ResolverSource);
+}
+/** `did:ixo` of a person: an ixo1 account address (20-byte bech32). */
+declare const IXO_PERSON_DID: RegExp;
+/** `did:ixo` of an entity. */
+declare const IXO_ENTITY_DID: RegExp;
+/** The DID part of a DID URL (`did:x:y#frag` → `did:x:y`). */
+declare function didFromKid(kid: string): string;
+/**
+ * A DID document in the kit's normal form: every id absolute, relationships as arrays,
+ * `controller` as an array. Unknown members are kept. Returns null when `v` is not a document
+ * for `did`.
+ */
+declare function normalizeDidDocument(did: string, v: unknown): DidDocument | null;
+/**
+ * The raw Ed25519 key of a verification method, or null when it has none. Key strings longer
+ * than an Ed25519 key can be (`MAX_KEY_STRING_LENGTHS`) are refused before decoding.
+ */
+declare function ed25519KeyOfMethod(vm: VerificationMethod): Uint8Array | null;
+/** Most verification methods `keysFor` considers under one relationship. */
+declare const MAX_METHODS_PER_RELATIONSHIP = 32;
+/**
+ * The Ed25519 keys listed under `relationship` whose verification method is controlled by the
+ * document's own DID and whose id is a DID URL of that DID. Only the first
+ * `MAX_METHODS_PER_RELATIONSHIP` distinct entries are considered.
+ */
+declare function keysFor(doc: DidDocument, relationship: KeyRelationship): ResolvedKey[];
+/**
+ * The ONE key `kid` names, if it is an Ed25519 key of this document under `relationship`
+ * (see `keysFor`). A `#fragment` kid is taken relative to the document. Null otherwise. Only
+ * that method's key material is decoded.
+ */
+declare function findKey(doc: DidDocument, kid: string, relationship: KeyRelationship): ResolvedKey | null;
+/** First resolver that knows the DID wins; `ResolverUnavailable` from any of them propagates. */
+declare function composeResolvers(...resolvers: DidResolver[]): DidResolver;
+/** A resolver over fixed documents (tests, local development, the service's own DID). */
+declare function createStaticResolver(docs: DidDocument[]): DidResolver;
+interface IxoResolverOptions {
+    /** Blocksync GraphQL endpoint, e.g. `https://blocksync.ixo.earth/graphql`. */
+    blocksyncUrl: string;
+    fetch: FetchLike;
+    /** Positive results only. Default: a per-resolver in-memory cache. */
+    cache?: KeyValueCache;
+    /** Default 600 s. A key removed from the IID keeps working for up to this long. */
+    cacheTtlSeconds?: number;
+    timeoutMs?: number;
+}
+/**
+ * did:ixo resolver over Blocksync GraphQL. Resolves people (`did:ixo:ixo1…`) and entities
+ * (`did:ixo:entity:<32 hex>`); returns null for any other DID without a network call.
+ */
+declare function createIxoResolver(opts: IxoResolverOptions): DidResolver;
+interface WebResolverOptions {
+    fetch: FetchLike;
+    /**
+     * Resolve a did:web whose host is localhost / 127.0.0.1 / [::1] over plain http (local
+     * development only). Every other host is always https. Needs `allowLocal` as well.
+     */
+    allowHttp?: boolean;
+    /**
+     * Resolve a did:web whose host is loopback, private, link-local, unique-local or a local name.
+     * Default false (such a DID resolves to null). Local development only.
+     */
+    allowLocal?: boolean;
+    cache?: KeyValueCache;
+    cacheTtlSeconds?: number;
+    timeoutMs?: number;
+}
+/** Longest did:web accepted. */
+declare const MAX_DID_WEB_LENGTH = 2048;
+/** A did:web in canonical form, split into its parts (`parseDidWeb`). */
+interface DidWeb {
+    /** The host: lower case, ASCII (an IDN in punycode), no trailing dot, no port. */
+    host: string;
+    /** The port, only when the DID names one (never 443). */
+    port?: number;
+    /** The host part exactly as the DID writes it (`issuer.example`, `localhost%3A34672`). */
+    authority: string;
+    /** The path segments after the host, as written (empty for a bare-host did:web). */
+    path: string[];
+}
+/**
+ * Is `host` a host name in canonical form: lower-case LDH labels, no empty label (so no trailing
+ * dot), at most 253 characters, and one the WHATWG URL parser leaves exactly as it is (that
+ * refuses punycode that does not decode, and numeric forms such as `0x7f.1` that it would rewrite
+ * to another address)?
+ */
+declare function isCanonicalHost(host: string): boolean;
+/**
+ * Parse a did:web (did:web method spec, https://w3c-ccg.github.io/did-method-web/:
+ * `did:web:<host>[%3A<port>][:<path>…]`), accepting ONLY its canonical spelling, so that one DID
+ * has one spelling (SPEC §17.4, R3-W-03). Any host (a subdomain is fine), any port (written
+ * `%3A<port>`) and any path the spec allows are accepted. Refused (null): upper case in the host,
+ * a trailing dot, any percent-encoding in the host other than the `%3A` before a port, `%3a`, a
+ * port of 443 (the URL `https://` already implies; naming it is a second spelling) or with a
+ * leading zero, a host that is not ASCII (write an IDN in punycode), an IP address (the spec: the
+ * identifier "MUST NOT include IP addresses"), an empty path segment, a segment with a character
+ * DID syntax does not allow (`idchar`: letters, digits, `.`, `-`, `_` and percent-encoding), and a
+ * segment that is or percent-encodes `.`, `..`, `/`, `\`, `?` or `#`. In a path segment (SPEC
+ * §17.5, PD-06) also: lower-case hex in a percent-encoding (`%7e`; write `%7E`), a `%` not followed
+ * by two hex digits, a percent-encoded unreserved character (`%61lice` is `alice`; RFC 3986
+ * §6.2.2.2: `A-Z a-z 0-9 - . _ ~`, so a `~` cannot be written at all: DID syntax has no bare `~`),
+ * and a `.well-known` segment in any letter case (`did:web:example.com:.well-known` would read the
+ * bare host's document). This says nothing about whether the host may be fetched (see
+ * `didWebUrl`).
+ */
+declare function parseDidWeb(did: string): DidWeb | null;
+/**
+ * The URL of a did:web document (did:web method spec §3.2): `did:web:<host>[%3A<port>][:<path>…]`
+ * → `https://<host>[:<port>]/.well-known/did.json` or `https://<host>[:<port>]/<path…>/did.json`.
+ * Null when the DID is not a did:web in canonical form (`parseDidWeb`: one spelling per server, so
+ * a server cannot appear under several DIDs), or when the host is local/private and `allowLocal`
+ * is not set. `allowHttp` switches a loopback host to http. A boolean `policy` (the earlier
+ * signature) means `{ allowHttp: b, allowLocal: b }`.
+ */
+declare function didWebUrl(did: string, policy?: boolean | HostPolicy): string | null;
+/** did:web resolver. 404/410 → null; any other failure → `ResolverUnavailable`. */
+declare function createWebResolver(opts: WebResolverOptions): DidResolver;
+
+export { FetchLike, HostPolicy, IXO_ENTITY_DID, IXO_PERSON_DID, MAX_DID_WEB_LENGTH, MAX_METHODS_PER_RELATIONSHIP, ResolverUnavailable, composeResolvers, createIxoResolver, createMemoryCache, createStaticResolver, createWebResolver, didFromKid, didWebUrl, ed25519KeyOfMethod, findKey, isCanonicalHost, keysFor, normalizeDidDocument, parseDidWeb };
+export type { DidDocument, DidResolver, DidWeb, IxoResolverOptions, KeyRelationship, KeyValueCache, ResolvedKey, ResolverSource, VerificationMethod, VerificationRelationshipEntry, WebResolverOptions };

package/dist/did.js

@@ -0,0 +1,6 @@
+export { IXO_ENTITY_DID, IXO_PERSON_DID, MAX_DID_WEB_LENGTH, MAX_METHODS_PER_RELATIONSHIP, ResolverUnavailable, composeResolvers, createIxoResolver, createMemoryCache, createStaticResolver, createWebResolver, didFromKid, didWebUrl, ed25519KeyOfMethod, findKey, isCanonicalHost, keysFor, normalizeDidDocument, parseDidWeb } from './chunk-WIEGZFUO.js';
+export { isFetchableUrl, isPrivateHost } from './chunk-Q3MZNMCK.js';
+import './chunk-VXKONZK4.js';
+import './chunk-AQ3IINHC.js';
+//# sourceMappingURL=did.js.map
+//# sourceMappingURL=did.js.map

package/dist/did.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"did.js"}

package/dist/display.d.ts

@@ -0,0 +1,117 @@
+import { HostPolicy } from './did.js';
+
+/**
+ * `@ixo/credentials-kit/display` — the card look of a credential (SPEC §15.1): what an issuer may
+ * set (`CardDisplay`), how it is validated (`parseCardDisplay`), and the look a wallet shows,
+ * with a neutral fallback derived from the issuer DID (`cardLook`, `markLook`).
+ *
+ * Pure functions: no fetch, no dependencies, no Node built-ins (workerd, Node 22, browsers). The
+ * image URLs are only validated here (https, default port, no query string or fragment: see
+ * `parseCardUri`); a wallet that shows them fetches them itself under its own rules (the Auth Hub
+ * proxies them: png, jpeg or webp, at most 256 KB and 2048 px per side, no animation, never SVG).
+ *
+ * Member names follow OpenID4VCI credential display metadata, flattened: `background_color`,
+ * `text_color`, `logo.uri` → `logo_uri`, `background_image.uri` → `background_image_uri`.
+ */
+
+/** The look an issuer may set for a credential. Every member is optional. */
+interface CardDisplay {
+    /** `#rrggbb`, lower case once parsed. */
+    background_color?: string;
+    /** `#rrggbb`; a wallet ignores it when its contrast with the background is below 4.5:1. */
+    text_color?: string;
+    /** https URL (default port, no query or fragment) of the issuer's mark (png, jpeg or webp), shown small. */
+    logo_uri?: string;
+    /** https URL (default port, no query or fragment) of an image that covers the card (png, jpeg or webp). */
+    background_image_uri?: string;
+}
+/** The members of `CardDisplay`, in a fixed order. */
+declare const CARD_DISPLAY_MEMBERS: readonly ["background_color", "text_color", "logo_uri", "background_image_uri"];
+type CardDisplayMember = (typeof CARD_DISPLAY_MEMBERS)[number];
+/** Longest accepted image URL (characters, before and after normalising). */
+declare const MAX_CARD_URI_LENGTH = 512;
+/** The only colour form accepted anywhere: `#rrggbb`. */
+declare const CARD_COLOR_PATTERN: RegExp;
+/** Minimum WCAG contrast for the text colour an issuer chose (WCAG 2.x AA, normal text). */
+declare const MIN_TEXT_CONTRAST = 4.5;
+/** Foregrounds used when the issuer's text colour is missing or too faint. */
+declare const CARD_LIGHT_TEXT = "#ffffff";
+declare const CARD_DARK_TEXT = "#111111";
+/**
+ * The fixed set of deep hues the neutral card picks from (by a hash of the issuer DID). Every
+ * one has at least 7:1 contrast with white.
+ */
+declare const CARD_HUES: readonly string[];
+/** Number of generated card patterns; `pattern` is 0 … CARD_PATTERNS - 1. */
+declare const CARD_PATTERNS = 6;
+/** What a wallet draws for a card. Colours are `#rrggbb`, lower case. */
+interface CardLook {
+    background: string;
+    foreground: string;
+    /** 1–2 upper-case letters (`?` only when neither a name nor a DID gives one). */
+    monogram: string;
+    /** 0–5, from the issuer DID. */
+    pattern: number;
+}
+/** What a wallet draws for a party (issuer or verifier) mark. */
+interface MarkLook {
+    color: string;
+    monogram: string;
+}
+/** A `#rrggbb` colour in lower case, or `undefined` for anything else (never throws). */
+declare function parseCardColor(value: unknown): string | undefined;
+/**
+ * An image URL a wallet may fetch for a card (SPEC §15.1, §15.4 L7), returned in normalised form
+ * (`URL.href`: lower-case scheme and host, IDN hosts in punycode, an explicit default port
+ * removed), or `undefined` for anything else (never throws). Rules:
+ * - https on the default port (`:443` is accepted and normalised away; any other port is refused);
+ * - no query string and no fragment, not even an empty `?` or `#` (a per-person query string
+ *   would turn the image into a tracking pixel; an odd port would turn the wallet's image proxy
+ *   into a fetch relay);
+ * - written as `https://host/…` (the parser's repairs of `https:host` or `https:///host` refused);
+ * - the kit's fetchable-URL rules (`isFetchableUrl`): no user name or password (not even an
+ *   empty `@`), a public host;
+ * - no trailing dot on the host (`cdn.example.com.` is a second spelling of the same host);
+ * - at most `MAX_CARD_URI_LENGTH` characters, before and after normalising.
+ *
+ * Local development (`allowHttp` and `allowLocal` together) also accepts http, and any port, on a
+ * loopback host (`localhost`, `127.0.0.1`, `[::1]`) only; `allowLocal` alone also accepts https
+ * on other local hosts on the default port. The query string and fragment rule has no exception.
+ */
+declare function parseCardUri(value: unknown, policy?: HostPolicy): string | undefined;
+/**
+ * Validate an issuer's `display` look: returns only the members that pass (colours `#rrggbb`,
+ * normalised to lower case; URLs as `parseCardUri`). Unknown members, wrong types and anything
+ * that is not an object give nothing. Never throws.
+ */
+declare function parseCardDisplay(input: unknown, policy?: HostPolicy): CardDisplay;
+/**
+ * WCAG contrast ratio of two `#rrggbb` colours, 1 … 21 (order does not matter). Throws
+ * `TypeError` for anything that is not `#rrggbb`.
+ */
+declare function contrastRatio(a: string, b: string): number;
+/**
+ * The look of a credential's card. `background` is the issuer's `background_color`, else a deep
+ * hue picked by the DID hash from `CARD_HUES`; `foreground` is the issuer's `text_color` when it
+ * has at least 4.5:1 contrast with the background, else white or near-black, whichever contrasts
+ * more; `monogram` is 1–2 upper-case initials of `issuerName` (or one character from the DID);
+ * `pattern` is 0–5 from the DID hash. `display` may be unvalidated: only valid colours are used.
+ * Never throws.
+ */
+declare function cardLook(input: {
+    display?: CardDisplay | null;
+    issuerDid: string;
+    issuerName?: string | null;
+}): CardLook;
+/**
+ * The mark of a party (issuer or verifier, e.g. in inbox rows): its `color` when valid, else the
+ * same DID-derived hue `cardLook` uses; the same monogram rule. Never throws.
+ */
+declare function markLook(input: {
+    color?: string | null;
+    did: string;
+    name?: string | null;
+}): MarkLook;
+
+export { CARD_COLOR_PATTERN, CARD_DARK_TEXT, CARD_DISPLAY_MEMBERS, CARD_HUES, CARD_LIGHT_TEXT, CARD_PATTERNS, MAX_CARD_URI_LENGTH, MIN_TEXT_CONTRAST, cardLook, contrastRatio, markLook, parseCardColor, parseCardDisplay, parseCardUri };
+export type { CardDisplay, CardDisplayMember, CardLook, MarkLook };