@midnight-ntwrk/credential-compact 0.1.0-rc2 → 0.2.0-rc1

package/CHANGELOG.md

@@ -1,10 +1,52 @@
 # Changelog
 
+## 0.2.0 - 2026-09-18
+
+- Classified every exported Compact circuit and added fail-closed coverage for
+  envelope invariants, verification-method references, proof contexts, and
+  credential and presentation body substitution.
+- Reject caller-supplied credential body roots that do not equal the canonical
+  root recomputed from the complete credential before issuer-proof validation.
+- Bind credential presentations to the exact credential schema and add
+  positive and substitution-negative conformance for VC/VP relations, explicit
+  holder-proof references, and structural status bindings.
+- Added source-neutral issuer/verifier authorization descriptors, signature and
+  exact method/key/scope binding circuits, monotonic lifecycle validation, and
+  domain-separated Jubjub authority and verifier-request proof contexts without
+  introducing Trust Registry or datetime dependencies.
+- Documented `midnight-did` `0.6.0` as the current downstream adapter
+  compatibility baseline while keeping the Compact package DID-independent.
+- Bound authority decisions to an explicit consumer/network domain, made
+  revocation terminal per authorization ID, validated Jubjub subgroup
+  membership, and added a credential-derived issuer authorization helper.
+- Hardened all context-specific proofs against invalid verification-method
+  references and identity, off-curve, or torsion public-key and nonce points.
+- BREAKING: renamed `VerificationMethodRef.didContractAddress` to
+  `controllerAddress` so the core can reference DID, registry, or other
+  verification-method controllers without choosing a DID method.
+- Verification-method validation now rejects zero controller addresses across
+  holder and status bindings, and holder equality checks reject invalid refs.
+- BREAKING: removed the single-value status enum and no-op no-status validator.
+  The smaller `RegistryBoundStatusBinding` layout changes its persistent hash
+  from the `0.1.x` package surface.
+- Removed the unrelated TypeScript Jubjub scalar helper from the VC package
+  surface.
+- Removed experimental secret-holder, blinded-holder, pseudonym, and
+  same-holder circuits. The package now supports explicit holder binding only.
+- Removed unused issuance and presentation protocol choreography from the
+  family-neutral Compact source surface.
+- Reduced the package to one standalone Compact root and one composition-safe
+  Compact root.
+- Removed unused schema-discovery descriptors, method-specific legacy holder
+  bindings, and three-credential business helpers.
+- Removed duplicate `src` copies and redundant TypeScript subpath exports from
+  the package tarball; Compact sources remain available through `dist` exports.
+
 ## 0.1.0 - RC2 supported prerelease
 
 - Extracted curated family-neutral Compact VC/VP semantics from the internal
   credentials package.
 - Excluded verification-v1, authority contracts, family code, and private
   proving/deployment material.
-- Added audited same-holder standalone and composition-safe entrypoints.
+- Added audited same-holder circuits and semantic vectors.
 - Promoted the package into the supported RC2 development surface.

package/README.md

@@ -11,46 +11,66 @@ credential family, proof artifact, or registry authority.
 ## Scope
 
 The package contains generic VC/VP envelopes, schema references, issuer and
-holder-binding shapes, proof/challenge primitives, issuance and presentation
-message envelopes, VC-side status-binding shapes, and VC/VP linkage helpers.
-`StatusRegistryRef` is vocabulary only: this package does not authenticate
-registry mutation, roots, time, witnesses, or final non-membership.
+holder-binding shapes, proof/challenge primitives, VC-side status-binding
+shapes, source-neutral signer-authorization descriptors and binding helpers,
+VC/VP linkage helpers, and
+protocol-neutral `compact-value-v1.base64url` TypeScript framing for canonical
+Compact runtime values. `StatusRegistryRef` is vocabulary only: this package
+does not authenticate registry mutation, roots, time, witnesses, or final
+non-membership.
 
-`verification-v1`, family claims and predicates, status-registry authority,
-proving/deployment artifacts, wallets, signing keys, witnesses, secrets, and
-use-case code are deliberately excluded.
+Context-specific proof helpers validate signer references, reject identity,
+off-curve, and non-prime-subgroup Jubjub public keys and nonce points, derive
+domain-separated challenges, and verify Schnorr signatures. Signed timestamps
+and challenge hashes still require application-defined time, freshness,
+audience, and replay policy.
+
+Signer authorization supports two composition modes. Applications may install
+an accepted descriptor through local governance, or verify a domain-separated
+authority proof before materializing the same descriptor. The authorization
+proof is bound to a caller-configured network/consumer domain. The composed
+`VC<>::assertAuthorizedIssuerProof` and verifier-request helper verify the
+signature as well as the exact role, method, key, and scope binding. This
+package does not resolve
+`midnight-did`, evaluate Trust Registry policy, synchronize registry state, or
+provide trusted wall-clock time.
+
+`verification-v1`, issuance/presentation protocol choreography, family claims
+and predicates, status-registry authority, proving/deployment artifacts,
+wallets, signing keys, witnesses, secrets, and use-case code are deliberately
+excluded.
 
 ## Toolchain and generated output
 
-The candidate is compiled and checked with the pinned Compact `0.30.0` compiler
-and exactly `@midnight-ntwrk/compact-runtime` `0.15.0`. Builds fail before
-generated output is accepted if either resolved version drifts. `src/managed` and
-`dist` are generated during build and are not hand-edited.
+The package is compiled with the pinned Compact `0.31.1` compiler and exactly
+`@midnight-ntwrk/compact-runtime` `0.16.0`. Builds verify both versions, then
+regenerate `src/managed` and `dist`; neither directory is hand-edited.
 `dist/compact-build.json` records the exact compiler/runtime tuple, source digest,
 and generated-artifact digest.
 
-Only `./credentials.compact` and `./holder-binding/same-holder.compact` are
-standalone roots. `./holder-binding/same-holder/composable.compact` is an
-explicit composition fragment: include `credentials/bindings` (or the full
-`credentials` root) first, then include the fragment exactly once. The other
+`./credentials.compact` is the only standalone root.
+`./credentials/composable.compact` is the only composition-safe root: include it
+exactly once before dependency-free family composition entrypoints. The other
 credential leaf modules remain packaged for internal composition but are not
 advertised as standalone exports because they rely on declarations supplied by
 the shared root.
 
-The external consumer gate compiles both standalone roots and the composition
-fragment, then runs positive and negative same-holder vectors (different holder
-secret, challenge, and binding) against each generated contract. This is a pure
-binding predicate and adds no family or business semantics.
+The external consumer gate compiles both canonical roots from the packed
+tarball. Hidden-holder, pseudonym, and same-holder semantics require a dedicated
+threat model and belong in independently versioned credential-family packages.
+The repository's
+[`compact-circuits.json`](../../../conformance/compact-circuits.json) inventory
+classifies the complete exported circuit surface and distinguishes supported
+semantic operations from low-level composition primitives.
 
-## Compatibility and ownership
+## Ownership
 
-The old private `@midnight-ntwrk/midnight-did-credentials` package remains an
-internal compatibility facade for one migration cycle and receives no new API.
-The old same-holder package remains private and unchanged as a compatibility
-implementation. Technical ownership is the VC package maintainers; support and
-publication ownership remain unassigned until a separate graduation review.
-ADR-0014 remains **Proposed**; this candidate records an implementation graph,
-not normative ADR acceptance.
+This package is the single canonical owner of reusable Compact VC/VP semantics.
+The retired compatibility packages are not part of the workspace or release
+surface. Their `verification-v1`, status-attestation, and hidden-holder
+entrypoints are not supported by this package. Technical ownership is the VC
+package maintainers; release operation and incident ownership are defined by
+the repository's npm publication runbook.
 
 ## Usage boundary
 

package/dist/compact-build.json

@@ -1,29 +1,22 @@
 {
   "schema": 1,
-  "compiler": "0.30.0",
+  "compiler": "0.31.1",
   "runtime": {
     "name": "@midnight-ntwrk/compact-runtime",
-    "version": "0.15.0"
+    "version": "0.16.0"
   },
-  "sourceDigest": "5543655b0f1f0e0d9524120811a7bf82d68d93190b14b56a37845446031d3439",
-  "artifactDigest": "e33d5b53bfccf195e8ed955bc80c87277b21e5bd5f03a7856a10855c160255b6",
+  "sourceDigest": "6058807adf9e4ee137d69deb9ca236bb9d0c31cd5bb6794a7130ec79164621b9",
+  "artifactDigest": "9506e06d6dd6d010bdad1f9ffbbf3eed9b508fcfd5589af024da47595f5c74c5",
   "sourceFiles": [
-    "src/credentials/bindings.compact",
     "src/credentials/composable.compact",
     "src/credentials/holder-bindings.compact",
-    "src/credentials/issue.compact",
-    "src/credentials/present.compact",
     "src/credentials/proofs.compact",
-    "src/credentials/protocol-support.compact",
-    "src/credentials/protocols.compact",
     "src/credentials/relations.compact",
+    "src/credentials/signer-authorization.compact",
     "src/credentials/status-bindings.compact",
     "src/credentials/types.compact",
-    "src/credentials/vc-support.compact",
     "src/credentials/vc.compact",
     "src/credentials/vp.compact",
-    "src/credentials.compact",
-    "src/holder-binding/same-holder/composable.compact",
-    "src/holder-binding/same-holder.compact"
+    "src/credentials.compact"
   ]
 }

package/dist/compact-value-codec.d.ts

@@ -0,0 +1,14 @@
+import type { CompactType, Value } from "@midnight-ntwrk/compact-runtime";
+export declare const COMPACT_VALUE_ENCODING: "compact-value-v1.base64url";
+export type CompactValueEncoding = typeof COMPACT_VALUE_ENCODING;
+export type EncodedCompactValue = {
+    readonly encoding: CompactValueEncoding;
+    readonly payload: string;
+};
+export declare const compactValueToBytes: (value: readonly Uint8Array[]) => Uint8Array;
+export declare const compactValueFromBytes: (bytes: Uint8Array) => Value;
+export declare const encodeCompactValue: (value: readonly Uint8Array[]) => EncodedCompactValue;
+export declare const decodeCompactValue: (encoded: EncodedCompactValue) => Value;
+export declare const encodeCompactPayload: <T>(descriptor: CompactType<T>, value: T) => EncodedCompactValue;
+export declare const decodeCompactPayload: <T>(descriptor: CompactType<T>, encoded: EncodedCompactValue) => T;
+//# sourceMappingURL=compact-value-codec.d.ts.map

package/dist/compact-value-codec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compact-value-codec.d.ts","sourceRoot":"","sources":["../src/compact-value-codec.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,iCAAiC,CAAC;AAE1E,eAAO,MAAM,sBAAsB,EAAG,4BAAqC,CAAC;AAS5E,MAAM,MAAM,oBAAoB,GAAG,OAAO,sBAAsB,CAAC;AAEjE,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;AAgFF,eAAO,MAAM,mBAAmB,GAC9B,OAAO,SAAS,UAAU,EAAE,KAC3B,UAiBF,CAAC;AAEF,eAAO,MAAM,qBAAqB,GAAI,OAAO,UAAU,KAAG,KAyBzD,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAC7B,OAAO,SAAS,UAAU,EAAE,KAC3B,mBAGD,CAAC;AAEH,eAAO,MAAM,kBAAkB,GAAI,SAAS,mBAAmB,KAAG,KAKjE,CAAC;AAEF,eAAO,MAAM,oBAAoB,GAAI,CAAC,EACpC,YAAY,WAAW,CAAC,CAAC,CAAC,EAC1B,OAAO,CAAC,KACP,mBAAoE,CAAC;AAExE,eAAO,MAAM,oBAAoB,GAAI,CAAC,EACpC,YAAY,WAAW,CAAC,CAAC,CAAC,EAC1B,SAAS,mBAAmB,KAC3B,CASF,CAAC"}

package/dist/compact-value-codec.js

@@ -0,0 +1,135 @@
+export const COMPACT_VALUE_ENCODING = "compact-value-v1.base64url";
+const MAGIC = new Uint8Array([0x4d, 0x43, 0x56, 0x31]); // MCV1
+const HEADER_LENGTH = MAGIC.length + 4;
+const CHUNK_LENGTH_BYTES = 4;
+const BASE64URL_ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";
+const BASE64URL_TEXT = /^[A-Za-z0-9_-]+$/u;
+const assertUint32 = (value, label) => {
+    if (!Number.isInteger(value) || value < 0 || value > 0xffffffff) {
+        throw new Error(`${label} must fit into uint32`);
+    }
+};
+const writeUint32 = (target, offset, value) => {
+    assertUint32(value, "uint32 value");
+    target[offset] = (value >>> 24) & 0xff;
+    target[offset + 1] = (value >>> 16) & 0xff;
+    target[offset + 2] = (value >>> 8) & 0xff;
+    target[offset + 3] = value & 0xff;
+};
+const readUint32 = (source, offset) => {
+    if (offset + CHUNK_LENGTH_BYTES > source.length) {
+        throw new Error("Compact value payload ended before uint32 field");
+    }
+    return (source[offset] * 0x1000000 +
+        ((source[offset + 1] ?? 0) << 16) +
+        ((source[offset + 2] ?? 0) << 8) +
+        (source[offset + 3] ?? 0));
+};
+const toBase64Url = (bytes) => {
+    let encoded = "";
+    for (let offset = 0; offset < bytes.length; offset += 3) {
+        const first = bytes[offset] ?? 0;
+        const second = bytes[offset + 1] ?? 0;
+        const third = bytes[offset + 2] ?? 0;
+        const packed = (first << 16) | (second << 8) | third;
+        encoded += BASE64URL_ALPHABET[(packed >>> 18) & 0x3f];
+        encoded += BASE64URL_ALPHABET[(packed >>> 12) & 0x3f];
+        if (offset + 1 < bytes.length) {
+            encoded += BASE64URL_ALPHABET[(packed >>> 6) & 0x3f];
+        }
+        if (offset + 2 < bytes.length) {
+            encoded += BASE64URL_ALPHABET[packed & 0x3f];
+        }
+    }
+    return encoded;
+};
+const fromBase64Url = (value) => {
+    if (value.length === 0) {
+        throw new Error("Compact value payload must not be empty");
+    }
+    if (!BASE64URL_TEXT.test(value) || value.length % 4 === 1) {
+        throw new Error("Compact value payload is not valid unpadded base64url");
+    }
+    const decoded = new Uint8Array(Math.floor((value.length * 6) / 8));
+    let accumulator = 0;
+    let bitCount = 0;
+    let outputOffset = 0;
+    for (const character of value) {
+        const index = BASE64URL_ALPHABET.indexOf(character);
+        accumulator = (accumulator << 6) | index;
+        bitCount += 6;
+        if (bitCount >= 8) {
+            bitCount -= 8;
+            decoded[outputOffset] = (accumulator >>> bitCount) & 0xff;
+            outputOffset += 1;
+        }
+    }
+    if (toBase64Url(decoded) !== value) {
+        throw new Error("Compact value payload is not canonical unpadded base64url");
+    }
+    return decoded;
+};
+export const compactValueToBytes = (value) => {
+    assertUint32(value.length, "Compact value chunk count");
+    const bodyLength = value.reduce((total, chunk) => {
+        assertUint32(chunk.length, "Compact value chunk length");
+        return total + CHUNK_LENGTH_BYTES + chunk.length;
+    }, 0);
+    const result = new Uint8Array(HEADER_LENGTH + bodyLength);
+    result.set(MAGIC, 0);
+    writeUint32(result, MAGIC.length, value.length);
+    let offset = HEADER_LENGTH;
+    for (const chunk of value) {
+        writeUint32(result, offset, chunk.length);
+        offset += CHUNK_LENGTH_BYTES;
+        result.set(chunk, offset);
+        offset += chunk.length;
+    }
+    return result;
+};
+export const compactValueFromBytes = (bytes) => {
+    if (bytes.length < HEADER_LENGTH) {
+        throw new Error("Compact value payload is shorter than the header");
+    }
+    for (let i = 0; i < MAGIC.length; i += 1) {
+        if (bytes[i] !== MAGIC[i]) {
+            throw new Error("Compact value payload has an unexpected magic header");
+        }
+    }
+    const chunkCount = readUint32(bytes, MAGIC.length);
+    const chunks = [];
+    let offset = HEADER_LENGTH;
+    for (let i = 0; i < chunkCount; i += 1) {
+        const length = readUint32(bytes, offset);
+        offset += CHUNK_LENGTH_BYTES;
+        if (offset + length > bytes.length) {
+            throw new Error("Compact value chunk exceeds payload length");
+        }
+        chunks.push(bytes.slice(offset, offset + length));
+        offset += length;
+    }
+    if (offset !== bytes.length) {
+        throw new Error("Compact value payload contains trailing bytes");
+    }
+    return chunks;
+};
+export const encodeCompactValue = (value) => ({
+    encoding: COMPACT_VALUE_ENCODING,
+    payload: toBase64Url(compactValueToBytes(value)),
+});
+export const decodeCompactValue = (encoded) => {
+    if (encoded.encoding !== COMPACT_VALUE_ENCODING) {
+        throw new Error(`Unsupported Compact value encoding "${encoded.encoding}"`);
+    }
+    return compactValueFromBytes(fromBase64Url(encoded.payload));
+};
+export const encodeCompactPayload = (descriptor, value) => encodeCompactValue(descriptor.toValue(value));
+export const decodeCompactPayload = (descriptor, encoded) => {
+    const runtimeValue = decodeCompactValue(encoded);
+    const decoded = descriptor.fromValue(runtimeValue);
+    if (runtimeValue.length !== 0) {
+        throw new Error("Compact value payload contains trailing chunks for descriptor");
+    }
+    return decoded;
+};
+//# sourceMappingURL=compact-value-codec.js.map

package/dist/compact-value-codec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compact-value-codec.js","sourceRoot":"","sources":["../src/compact-value-codec.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,sBAAsB,GAAG,4BAAqC,CAAC;AAE5E,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO;AAC/D,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AACvC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAC7B,MAAM,kBAAkB,GACtB,kEAAkE,CAAC;AACrE,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAS3C,MAAM,YAAY,GAAG,CAAC,KAAa,EAAE,KAAa,EAAQ,EAAE;IAC1D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,UAAU,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,uBAAuB,CAAC,CAAC;IACnD,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAClB,MAAkB,EAClB,MAAc,EACd,KAAa,EACP,EAAE;IACR,YAAY,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACpC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC;IACvC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC;IAC3C,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC;IAC1C,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC;AACpC,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,MAAkB,EAAE,MAAc,EAAU,EAAE;IAChE,IAAI,MAAM,GAAG,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,CACL,MAAM,CAAC,MAAM,CAAC,GAAG,SAAS;QAC1B,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACjC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAC1B,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,KAAiB,EAAU,EAAE;IAChD,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC;QACxD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;QACrD,OAAO,IAAI,kBAAkB,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACtD,OAAO,IAAI,kBAAkB,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACtD,IAAI,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC9B,OAAO,IAAI,kBAAkB,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC9B,OAAO,IAAI,kBAAkB,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,KAAa,EAAc,EAAE;IAClD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACnE,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACpD,WAAW,GAAG,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;QACzC,QAAQ,IAAI,CAAC,CAAC;QACd,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;YAClB,QAAQ,IAAI,CAAC,CAAC;YACd,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,GAAG,IAAI,CAAC;YAC1D,YAAY,IAAI,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,IAAI,WAAW,CAAC,OAAO,CAAC,KAAK,KAAK,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,KAA4B,EAChB,EAAE;IACd,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,2BAA2B,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC/C,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;QACzD,OAAO,KAAK,GAAG,kBAAkB,GAAG,KAAK,CAAC,MAAM,CAAC;IACnD,CAAC,EAAE,CAAC,CAAC,CAAC;IACN,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,aAAa,GAAG,UAAU,CAAC,CAAC;IAC1D,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACrB,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,MAAM,GAAG,aAAa,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,IAAI,kBAAkB,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;IACzB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,KAAiB,EAAS,EAAE;IAChE,IAAI,KAAK,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,MAAM,GAAG,aAAa,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,IAAI,kBAAkB,CAAC;QAC7B,IAAI,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC;QAClD,MAAM,IAAI,MAAM,CAAC;IACnB,CAAC;IACD,IAAI,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,KAA4B,EACP,EAAE,CAAC,CAAC;IACzB,QAAQ,EAAE,sBAAsB;IAChC,OAAO,EAAE,WAAW,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;CACjD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,OAA4B,EAAS,EAAE;IACxE,IAAI,OAAO,CAAC,QAAQ,KAAK,sBAAsB,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,uCAAuC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,qBAAqB,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/D,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,UAA0B,EAC1B,KAAQ,EACa,EAAE,CAAC,kBAAkB,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AAExE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,UAA0B,EAC1B,OAA4B,EACzB,EAAE;IACL,MAAM,YAAY,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IACnD,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,+DAA+D,CAChE,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC","sourcesContent":["import type { CompactType, Value } from \"@midnight-ntwrk/compact-runtime\";\n\nexport const COMPACT_VALUE_ENCODING = \"compact-value-v1.base64url\" as const;\n\nconst MAGIC = new Uint8Array([0x4d, 0x43, 0x56, 0x31]); // MCV1\nconst HEADER_LENGTH = MAGIC.length + 4;\nconst CHUNK_LENGTH_BYTES = 4;\nconst BASE64URL_ALPHABET =\n  \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_\";\nconst BASE64URL_TEXT = /^[A-Za-z0-9_-]+$/u;\n\nexport type CompactValueEncoding = typeof COMPACT_VALUE_ENCODING;\n\nexport type EncodedCompactValue = {\n  readonly encoding: CompactValueEncoding;\n  readonly payload: string;\n};\n\nconst assertUint32 = (value: number, label: string): void => {\n  if (!Number.isInteger(value) || value < 0 || value > 0xffffffff) {\n    throw new Error(`${label} must fit into uint32`);\n  }\n};\n\nconst writeUint32 = (\n  target: Uint8Array,\n  offset: number,\n  value: number,\n): void => {\n  assertUint32(value, \"uint32 value\");\n  target[offset] = (value >>> 24) & 0xff;\n  target[offset + 1] = (value >>> 16) & 0xff;\n  target[offset + 2] = (value >>> 8) & 0xff;\n  target[offset + 3] = value & 0xff;\n};\n\nconst readUint32 = (source: Uint8Array, offset: number): number => {\n  if (offset + CHUNK_LENGTH_BYTES > source.length) {\n    throw new Error(\"Compact value payload ended before uint32 field\");\n  }\n  return (\n    source[offset] * 0x1000000 +\n    ((source[offset + 1] ?? 0) << 16) +\n    ((source[offset + 2] ?? 0) << 8) +\n    (source[offset + 3] ?? 0)\n  );\n};\n\nconst toBase64Url = (bytes: Uint8Array): string => {\n  let encoded = \"\";\n  for (let offset = 0; offset < bytes.length; offset += 3) {\n    const first = bytes[offset] ?? 0;\n    const second = bytes[offset + 1] ?? 0;\n    const third = bytes[offset + 2] ?? 0;\n    const packed = (first << 16) | (second << 8) | third;\n    encoded += BASE64URL_ALPHABET[(packed >>> 18) & 0x3f];\n    encoded += BASE64URL_ALPHABET[(packed >>> 12) & 0x3f];\n    if (offset + 1 < bytes.length) {\n      encoded += BASE64URL_ALPHABET[(packed >>> 6) & 0x3f];\n    }\n    if (offset + 2 < bytes.length) {\n      encoded += BASE64URL_ALPHABET[packed & 0x3f];\n    }\n  }\n  return encoded;\n};\n\nconst fromBase64Url = (value: string): Uint8Array => {\n  if (value.length === 0) {\n    throw new Error(\"Compact value payload must not be empty\");\n  }\n  if (!BASE64URL_TEXT.test(value) || value.length % 4 === 1) {\n    throw new Error(\"Compact value payload is not valid unpadded base64url\");\n  }\n  const decoded = new Uint8Array(Math.floor((value.length * 6) / 8));\n  let accumulator = 0;\n  let bitCount = 0;\n  let outputOffset = 0;\n  for (const character of value) {\n    const index = BASE64URL_ALPHABET.indexOf(character);\n    accumulator = (accumulator << 6) | index;\n    bitCount += 6;\n    if (bitCount >= 8) {\n      bitCount -= 8;\n      decoded[outputOffset] = (accumulator >>> bitCount) & 0xff;\n      outputOffset += 1;\n    }\n  }\n  if (toBase64Url(decoded) !== value) {\n    throw new Error(\n      \"Compact value payload is not canonical unpadded base64url\",\n    );\n  }\n  return decoded;\n};\n\nexport const compactValueToBytes = (\n  value: readonly Uint8Array[],\n): Uint8Array => {\n  assertUint32(value.length, \"Compact value chunk count\");\n  const bodyLength = value.reduce((total, chunk) => {\n    assertUint32(chunk.length, \"Compact value chunk length\");\n    return total + CHUNK_LENGTH_BYTES + chunk.length;\n  }, 0);\n  const result = new Uint8Array(HEADER_LENGTH + bodyLength);\n  result.set(MAGIC, 0);\n  writeUint32(result, MAGIC.length, value.length);\n  let offset = HEADER_LENGTH;\n  for (const chunk of value) {\n    writeUint32(result, offset, chunk.length);\n    offset += CHUNK_LENGTH_BYTES;\n    result.set(chunk, offset);\n    offset += chunk.length;\n  }\n  return result;\n};\n\nexport const compactValueFromBytes = (bytes: Uint8Array): Value => {\n  if (bytes.length < HEADER_LENGTH) {\n    throw new Error(\"Compact value payload is shorter than the header\");\n  }\n  for (let i = 0; i < MAGIC.length; i += 1) {\n    if (bytes[i] !== MAGIC[i]) {\n      throw new Error(\"Compact value payload has an unexpected magic header\");\n    }\n  }\n  const chunkCount = readUint32(bytes, MAGIC.length);\n  const chunks: Uint8Array[] = [];\n  let offset = HEADER_LENGTH;\n  for (let i = 0; i < chunkCount; i += 1) {\n    const length = readUint32(bytes, offset);\n    offset += CHUNK_LENGTH_BYTES;\n    if (offset + length > bytes.length) {\n      throw new Error(\"Compact value chunk exceeds payload length\");\n    }\n    chunks.push(bytes.slice(offset, offset + length));\n    offset += length;\n  }\n  if (offset !== bytes.length) {\n    throw new Error(\"Compact value payload contains trailing bytes\");\n  }\n  return chunks;\n};\n\nexport const encodeCompactValue = (\n  value: readonly Uint8Array[],\n): EncodedCompactValue => ({\n  encoding: COMPACT_VALUE_ENCODING,\n  payload: toBase64Url(compactValueToBytes(value)),\n});\n\nexport const decodeCompactValue = (encoded: EncodedCompactValue): Value => {\n  if (encoded.encoding !== COMPACT_VALUE_ENCODING) {\n    throw new Error(`Unsupported Compact value encoding \"${encoded.encoding}\"`);\n  }\n  return compactValueFromBytes(fromBase64Url(encoded.payload));\n};\n\nexport const encodeCompactPayload = <T>(\n  descriptor: CompactType<T>,\n  value: T,\n): EncodedCompactValue => encodeCompactValue(descriptor.toValue(value));\n\nexport const decodeCompactPayload = <T>(\n  descriptor: CompactType<T>,\n  encoded: EncodedCompactValue,\n): T => {\n  const runtimeValue = decodeCompactValue(encoded);\n  const decoded = descriptor.fromValue(runtimeValue);\n  if (runtimeValue.length !== 0) {\n    throw new Error(\n      \"Compact value payload contains trailing chunks for descriptor\",\n    );\n  }\n  return decoded;\n};\n"]}

package/dist/credentials/composable.compact

@@ -4,11 +4,9 @@
 
 include "./types";
 include "./proofs";
+include "./signer-authorization";
 include "./vc";
 include "./vp";
 include "./relations";
 include "./holder-bindings";
-include "./protocols";
-include "./issue";
-include "./present";
 include "./status-bindings";