@metalabel/dfos-protocol 0.31.0 → 0.32.0

package/dist/chain/index.js

@@ -49,14 +49,14 @@ import {
   verifyIdentityExtensionFromTrustedState,
   verifyRevocation,
   verifySignRequest
-} from "../chunk-W4ESJVMO.js";
+} from "../chunk-W7IFQNUH.js";
 import {
   ED25519_PRIV_MULTICODEC,
   ED25519_PUB_MULTICODEC,
   decodeMultikey,
   encodeEd25519Multikey
-} from "../chunk-6HVYO5OS.js";
-import "../chunk-4QQ5HK5M.js";
+} from "../chunk-XP644GQK.js";
+import "../chunk-4LG2GEB2.js";
 export {
   ARTIFACT_CID_ANCHOR_RE,
   ArtifactPayload,

package/dist/{chunk-4QQ5HK5M.js → chunk-4LG2GEB2.js}

@@ -37,6 +37,10 @@ var isValidEd25519Signature = (payload, signature, publicKey) => {
   return ed25519.verify(signature, payload, publicKey);
 };
 
+// src/crypto/hash.ts
+import { sha256 as nobleSha256 } from "@noble/hashes/sha2.js";
+var sha256 = (data) => nobleSha256(data);
+
 // src/crypto/id.ts
 import { sha256 as sha256Hash } from "@noble/hashes/sha2.js";
 var alphabet = "2346789acdefhknrtvz";
@@ -225,7 +229,7 @@ var JwtVerificationError = class extends Error {
 import * as dagCborCodec from "@ipld/dag-cbor";
 import * as Block from "multiformats/block";
 import { CID } from "multiformats/cid";
-import { sha256 } from "multiformats/hashes/sha2";
+import { sha256 as sha2562 } from "multiformats/hashes/sha2";
 var dagCborCanonicalEncode = async (value) => {
   assertCanonicalNumbers(value);
   const serialized = JSON.parse(JSON.stringify(value));
@@ -235,7 +239,7 @@ var dagCborCanonicalEncode = async (value) => {
     // -0 to 0)
     value: serialized,
     codec: dagCborCodec,
-    hasher: sha256
+    hasher: sha2562
   });
 };
 var MAX_SAFE_CANONICAL_INTEGER = 9007199254740991;
@@ -284,6 +288,7 @@ export {
   importEd25519Keypair,
   signPayloadEd25519,
   isValidEd25519Signature,
+  sha256,
   generateIdNoPrefix,
   generateId,
   isValidId,

package/dist/{chunk-W4ESJVMO.js → chunk-W7IFQNUH.js}

@@ -5,7 +5,7 @@ import {
   matchesResource,
   verifyDFOSCredential,
   verifyDelegationChain
-} from "./chunk-6HVYO5OS.js";
+} from "./chunk-XP644GQK.js";
 import {
   assertJwsProfile,
   base64urlDecode,
@@ -15,7 +15,7 @@ import {
   decodeJwsUnsafe,
   generateIdNoPrefix,
   verifyJws
-} from "./chunk-4QQ5HK5M.js";
+} from "./chunk-4LG2GEB2.js";
 
 // src/chain/schemas.ts
 import { z } from "zod";

package/dist/{chunk-6HVYO5OS.js → chunk-XP644GQK.js}

@@ -5,7 +5,7 @@ import {
   decodeJwsUnsafe,
   verifyJws,
   verifyJwt
-} from "./chunk-4QQ5HK5M.js";
+} from "./chunk-4LG2GEB2.js";
 
 // src/credentials/schemas.ts
 import { z } from "zod";

package/dist/credentials/index.js

@@ -13,8 +13,8 @@ import {
   verifyAuthToken,
   verifyDFOSCredential,
   verifyDelegationChain
-} from "../chunk-6HVYO5OS.js";
-import "../chunk-4QQ5HK5M.js";
+} from "../chunk-XP644GQK.js";
+import "../chunk-4LG2GEB2.js";
 export {
   Attenuation,
   AuthTokenClaims,

package/dist/crypto/index.d.ts

@@ -35,6 +35,9 @@ declare const signPayloadEd25519: (payload: Uint8Array, privateKey: Uint8Array)
  */
 declare const isValidEd25519Signature: (payload: Uint8Array, signature: Uint8Array, publicKey: Uint8Array) => boolean;
 
+/** SHA-256 of the given octets, as 32 raw bytes. */
+declare const sha256: (data: Uint8Array) => Uint8Array;
+
 type PrefixedID<T extends string> = `${T}_${string}`;
 /**
  * Generate an ID without a prefix
@@ -211,4 +214,4 @@ declare const parseDagCborCID: (cid: string) => CID<unknown, number, number, mul
  */
 declare const isCanonicallyEqual: (data1: unknown, data2: unknown) => Promise<boolean>;
 
-export { type JwsHeader, JwsVerificationError, type JwtClaims, type JwtCreateOptions, type JwtHeader, JwtVerificationError, type JwtVerifyOptions, type PrefixedID, assertJwsProfile, base64urlDecode, base64urlEncode, createJws, createJwt, createNewEd25519Keypair, dagCborCanonicalEncode, decodeJwsUnsafe, decodeJwtUnsafe, generateId, generateIdNoPrefix, importEd25519Keypair, isCanonicallyEqual, isValidEd25519Signature, isValidId, normalizedId, parseDagCborCID, signPayloadEd25519, verifyJws, verifyJwt };
+export { type JwsHeader, JwsVerificationError, type JwtClaims, type JwtCreateOptions, type JwtHeader, JwtVerificationError, type JwtVerifyOptions, type PrefixedID, assertJwsProfile, base64urlDecode, base64urlEncode, createJws, createJwt, createNewEd25519Keypair, dagCborCanonicalEncode, decodeJwsUnsafe, decodeJwtUnsafe, generateId, generateIdNoPrefix, importEd25519Keypair, isCanonicallyEqual, isValidEd25519Signature, isValidId, normalizedId, parseDagCborCID, sha256, signPayloadEd25519, verifyJws, verifyJwt };

package/dist/crypto/index.js

@@ -18,10 +18,11 @@ import {
   isValidId,
   normalizedId,
   parseDagCborCID,
+  sha256,
   signPayloadEd25519,
   verifyJws,
   verifyJwt
-} from "../chunk-4QQ5HK5M.js";
+} from "../chunk-4LG2GEB2.js";
 export {
   JwsVerificationError,
   JwtVerificationError,
@@ -42,6 +43,7 @@ export {
   isValidId,
   normalizedId,
   parseDagCborCID,
+  sha256,
   signPayloadEd25519,
   verifyJws,
   verifyJwt

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export { JwsHeader, JwsVerificationError, JwtClaims, JwtCreateOptions, JwtHeader, JwtVerificationError, JwtVerifyOptions, PrefixedID, assertJwsProfile, base64urlDecode, base64urlEncode, createJws, createJwt, createNewEd25519Keypair, dagCborCanonicalEncode, decodeJwsUnsafe, decodeJwtUnsafe, generateId, generateIdNoPrefix, importEd25519Keypair, isCanonicallyEqual, isValidEd25519Signature, isValidId, normalizedId, parseDagCborCID, signPayloadEd25519, verifyJws, verifyJwt } from './crypto/index.js';
+export { JwsHeader, JwsVerificationError, JwtClaims, JwtCreateOptions, JwtHeader, JwtVerificationError, JwtVerifyOptions, PrefixedID, assertJwsProfile, base64urlDecode, base64urlEncode, createJws, createJwt, createNewEd25519Keypair, dagCborCanonicalEncode, decodeJwsUnsafe, decodeJwtUnsafe, generateId, generateIdNoPrefix, importEd25519Keypair, isCanonicallyEqual, isValidEd25519Signature, isValidId, normalizedId, parseDagCborCID, sha256, signPayloadEd25519, verifyJws, verifyJwt } from './crypto/index.js';
 export { A as ARTIFACT_CID_ANCHOR_RE, a as ArtifactPayload, b as Attenuation, c as AuthTokenClaims, C as CONTENT_ID_ANCHOR_RE, d as ContentOperation, e as CountersignPayload, f as CredentialVerificationError, g as CreditClaimPayload, D as DFOSCredentialPayload, I as IdentityOperation, h as Iso8601, M as MAX_ARTIFACT_PAYLOAD_SIZE, i as MAX_CREDENTIAL_SIZE, j as MAX_CREDIT_CLAIM_SIZE, k as MAX_OPERATION_SIZE, l as MAX_SERVICES_ENTRIES, m as MAX_SERVICES_PAYLOAD_SIZE, n as MAX_SIGN_REQUEST_PAYLOAD_SIZE, o as MAX_SIGN_REQUEST_SIZE, p as MultikeyPublicKey, R as RevocationChecker, q as RevocationPayload, S as ServiceEntry, r as ServicesArray, s as SignRequestPayload, t as Signer, V as VerifiedDFOSCredential, u as VerifiedDelegationChain, v as VerifiedIdentity, w as createDFOSCredential, x as decodeDFOSCredentialUnsafe, y as isAttenuated, z as matchesResource, B as parseProtocolTimestampUnix, E as verifyDFOSCredential, F as verifyDelegationChain } from './dfos-credential-DU7WvoHE.js';
 export { AnchorKind, CreditClaimFailureReason, CreditClaimVerifyError, CreditEntry, CreditEntryState, ED25519_PRIV_MULTICODEC, ED25519_PUB_MULTICODEC, RECOGNIZED_SERVICE_TYPES, SignRequestFailureReason, SignRequestVerifyError, VerifiedArtifact, VerifiedContentChain, VerifiedCountersignature, VerifiedCreditClaim, VerifiedCreditEntry, VerifiedRevocation, VerifiedSignRequest, anchorsByLabel, assertCanonicalSignRequestPayload, assertServicesWithinCap, buildSignRequest, classifyAnchor, decodeMultikey, deriveChainIdentifier, deriveContentId, encodeEd25519Multikey, isRecognizedServiceType, relayEndpoints, signArtifact, signContentOperation, signCountersignature, signCreditClaim, signIdentityOperation, signRevocation, verifyArtifact, verifyContentChain, verifyContentExtensionFromTrustedState, verifyCountersignature, verifyCreditClaim, verifyCreditEntry, verifyIdentityChain, verifyIdentityExtensionFromTrustedState, verifyRevocation, verifySignRequest } from './chain/index.js';
 export { AuthTokenCreateOptions, AuthTokenVerificationError, AuthTokenVerifyOptions, VerifiedAuthToken, createAuthToken, verifyAuthToken } from './credentials/index.js';

package/dist/index.js

@@ -49,7 +49,7 @@ import {
   verifyIdentityExtensionFromTrustedState,
   verifyRevocation,
   verifySignRequest
-} from "./chunk-W4ESJVMO.js";
+} from "./chunk-W7IFQNUH.js";
 import {
   Attenuation,
   AuthTokenClaims,
@@ -69,7 +69,7 @@ import {
   verifyAuthToken,
   verifyDFOSCredential,
   verifyDelegationChain
-} from "./chunk-6HVYO5OS.js";
+} from "./chunk-XP644GQK.js";
 import {
   JwsVerificationError,
   JwtVerificationError,
@@ -90,10 +90,11 @@ import {
   isValidId,
   normalizedId,
   parseDagCborCID,
+  sha256,
   signPayloadEd25519,
   verifyJws,
   verifyJwt
-} from "./chunk-4QQ5HK5M.js";
+} from "./chunk-4LG2GEB2.js";
 import {
   INDEX_V1_SCHEMA,
   byteCompare,
@@ -179,6 +180,7 @@ export {
   parseDagCborCID,
   parseProtocolTimestampUnix,
   relayEndpoints,
+  sha256,
   signArtifact,
   signContentOperation,
   signCountersignature,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@metalabel/dfos-protocol",
-  "version": "0.31.0",
+  "version": "0.32.0",
   "type": "module",
   "description": "DFOS Protocol — Ed25519 signed chain primitives, services, credentials, and verification",
   "license": "MIT",