@oma3/omatrust 0.1.0-alpha.1 → 0.1.0-alpha.11

package/dist/index-QueRiudB.d.cts

@@ -0,0 +1,329 @@
+import { k as GetControllerAuthorizationParams, d as ControllerAuthorizationResult, D as Did, aV as VerifyDnsTxtControllerDidOptions, A as AttestationQueryResult, a as AttestationValidationError, B as BuildDelegatedTypedDataFromEncodedParams, C as CallControllerWitnessParams, b as CallControllerWitnessResult, c as ChainConstants, aW as ContractOwnershipProvider, e as ControllerWitnessEvidence, f as CreatePopEip712ProofParams, g as CreatePopJwsProofParams, h as DnsTxtRecordResult, aX as EIP1967_ADMIN_SLOT, E as EvidencePointerProof, i as EvmOwnershipProvider, G as GetAttestationParams, j as GetAttestationsByAttesterParams, l as GetLatestAttestationsParams, H as Hex, L as ListAttestationsParams, aY as OWNERSHIP_PATTERNS, P as PopEip712Proof, m as PopJwsProof, n as PrepareDelegatedAttestationParams, o as PrepareDelegatedAttestationResult, p as ProofPurpose, q as ProofType, r as ProofWrapper, R as RelayErrorDetails, s as RelayMetadata, t as RequestControllerWitnessParams, u as RequestControllerWitnessResult, v as RevokeAttestationParams, w as RevokeAttestationResult, S as SchemaField, x as SubjectOwnershipVerificationMethod, y as SubjectOwnershipVerificationResult, z as SubmitAttestationParams, F as SubmitAttestationResult, I as SubmitDelegatedAttestationParams, J as SubmitDelegatedAttestationResult, T as TxEncodedValueProof, K as TxInteractionProof, V as VerifyAttestationParams, M as VerifyAttestationResult, N as VerifyDidJsonControllerDidOptions, O as VerifyDidPkhOwnershipParams, Q as VerifyDidWebOwnershipParams, U as VerifyProofParams, W as VerifyProofResult, X as VerifySubjectOwnershipParams, Y as W3CKeyPurpose, Z as X402OfferProof, _ as X402ReceiptProof, $ as buildDelegatedAttestationTypedData, a0 as buildDelegatedTypedDataFromEncoded, a1 as buildDnsTxtRecord, a2 as buildEip712Domain, a3 as calculateAverageUserReviewRating, a4 as calculateTransferAmount, a5 as calculateTransferAmountFromAddresses, a6 as callControllerWitness, a7 as constructSeed, a8 as createEvidencePointerProof, a9 as createPopEip712Proof, aa as createPopJwsProof, ab as createTxEncodedValueProof, ac as createTxInteractionProof, ad as createX402OfferProof, ae as createX402ReceiptProof, af as decodeAttestationData, ag as deduplicateReviews, aZ as discoverContractOwner, a_ as discoverControllingWalletDid, ah as encodeAttestationData, ai as extractEvmAddressesFromDidDocument, aj as extractExpirationTime, ak as extractJwksFromDidDocument, al as fetchDidDocument, am as formatSchemaUid, an as formatTransferAmount, ao as getAttestation, ap as getAttestationsByAttester, aq as getAttestationsForDid, ar as getChainConstants, as as getExplorerAddressUrl, at as getExplorerTxUrl, au as getLatestAttestations, av as getMajorVersion, aw as getOmaTrustProofEip712Types, ax as getSchemaDetails, ay as getSupportedChainIds, az as hashSeed, aA as isChainSupported, aB as listAttestations, aC as normalizeSchema, aD as parseDnsTxtRecord, aE as prepareDelegatedAttestation, a$ as readOwnerFromContract, aF as requestControllerWitness, aG as revokeAttestation, aH as schemaToString, aI as splitSignature, aJ as submitAttestation, aK as submitDelegatedAttestation, aL as validateAttestationData, aM as verifyAttestation, aN as verifyDidDocumentControllerDid, aO as verifyDidJsonControllerDid, aP as verifyDidPkhOwnership, aQ as verifyDidWebOwnership, aR as verifyEip712Signature, aS as verifyProof, aT as verifySchemaExists, aU as verifySubjectOwnership, b0 as verifyTransferProof } from './subject-ownership-B7cFlm8c.cjs';
+import { R as ResolveKeyOptions, c as JwsVerificationResult, b as JwsVerificationFailure } from './types-dpYxRq8N.cjs';
+
+/**
+ * Controller Authorization — verifies the time window during which a controller
+ * was authorized for a subject DID.
+ *
+ * This is the "read/verify" counterpart to requestControllerWitness (write).
+ *
+ * For did:web subjects:
+ *   - Controller witness attestations (strongest durable evidence)
+ *   - Key binding with purpose check
+ *   - Live DNS TXT / did.json verification (current-point-in-time fallback)
+ *
+ * For did:pkh subjects (smart contracts):
+ *   - Direct subject ownership check (owner/admin/EIP-1967)
+ *   - Key binding with transfer proof verification
+ *   - NOTE: Only EVM chains are currently supported for contract ownership checks.
+ *     Non-EVM did:pkh subjects (e.g. Solana) will need chain-specific verification.
+ */
+
+/**
+ * Determine the authorization window for a controller-subject pair.
+ *
+ * For did:web subjects, checks:
+ * 1. On-chain controller-witness attestations (strongest evidence)
+ * 2. On-chain key-binding revocation and purpose status
+ * 3. Live DNS TXT / did.json verification (current-point-in-time fallback)
+ *
+ * For did:pkh subjects (smart contracts), checks:
+ * 1. Direct subject ownership (controller is the contract owner/admin)
+ * 2. Key binding with transfer proof verification
+ *
+ * Returns the authorization window so the consumer can filter attestations
+ * by timestamp without repeated on-chain queries.
+ */
+declare function getControllerAuthorization(params: GetControllerAuthorizationParams): Promise<ControllerAuthorizationResult>;
+
+/**
+ * x402 JWS Verification — Phase 5
+ *
+ * Verifies x402 signed offer and receipt artifacts using JWS Compact Serialization.
+ *
+ * Two verification paths:
+ * 1. Embedded JWK: header contains `jwk` → validate, verify signature, derive did:jwk
+ * 2. KID Resolution: header contains `kid` (no `jwk`) → resolve DID URL → verify → derive did:jwk
+ *
+ * If both `kid` and `jwk` are present and the resolved key conflicts with the
+ * embedded key, verification fails.
+ *
+ * JWS verification is NOT authorization. It only proves the signature is valid
+ * and returns the did:jwk for downstream authorization checks.
+ */
+
+/** x402 JWS artifact envelope */
+interface X402JwsArtifact {
+    format: "jws";
+    signature: string;
+}
+/** Options for x402 JWS verification */
+interface X402JwsVerifyOptions {
+    /**
+     * Options for DID URL key resolution (used when kid is present).
+     * Pass a custom fetchDidDocument for testing or non-standard resolution.
+     */
+    resolveOptions?: ResolveKeyOptions;
+}
+/**
+ * Verify an x402 JWS artifact (offer or receipt).
+ *
+ * This is the core verification function. It:
+ * 1. Parses the compact JWS
+ * 2. Decodes the protected header
+ * 3. Requires `alg` and at least one of `kid` or `jwk`
+ * 4. Selects the public key (embedded jwk or resolved kid)
+ * 5. Verifies the JWS signature
+ * 6. Derives did:jwk from the verified public key
+ * 7. Returns a structured result
+ *
+ * Does NOT validate payload shape — use verifyX402JwsOffer or verifyX402JwsReceipt
+ * for payload validation.
+ *
+ * @param artifact - The x402 JWS artifact envelope
+ * @param options - Optional verification options (resolver config, etc.)
+ * @returns JwsVerificationResult on success, JwsVerificationFailure on failure
+ */
+declare function verifyX402JwsArtifact(artifact: X402JwsArtifact, options?: X402JwsVerifyOptions): Promise<JwsVerificationResult | JwsVerificationFailure>;
+/**
+ * Verify an x402 JWS offer artifact.
+ *
+ * Performs full JWS signature verification and validates that the payload
+ * contains required offer fields: version, resourceUrl, scheme, network,
+ * asset, payTo, amount.
+ *
+ * @param artifact - The x402 JWS artifact envelope
+ * @param options - Optional verification options
+ * @returns JwsVerificationResult on success, JwsVerificationFailure on failure
+ */
+declare function verifyX402JwsOffer(artifact: X402JwsArtifact, options?: X402JwsVerifyOptions): Promise<JwsVerificationResult | JwsVerificationFailure>;
+/**
+ * Verify an x402 JWS receipt artifact.
+ *
+ * Performs full JWS signature verification and validates that the payload
+ * contains required receipt fields: version, network, resourceUrl, payer,
+ * issuedAt.
+ *
+ * @param artifact - The x402 JWS artifact envelope
+ * @param options - Optional verification options
+ * @returns JwsVerificationResult on success, JwsVerificationFailure on failure
+ */
+declare function verifyX402JwsReceipt(artifact: X402JwsArtifact, options?: X402JwsVerifyOptions): Promise<JwsVerificationResult | JwsVerificationFailure>;
+
+/**
+ * x402 EIP-712 Verification — Phase 5b
+ *
+ * Verifies x402 signed offer and receipt artifacts using EIP-712 typed data signatures.
+ *
+ * EIP-712 is the simpler verification path: the signer address is recovered directly
+ * from the signature using ethers verifyTypedData. There is no DID URL resolution or
+ * JWK handling — the recovered address is the verification output.
+ *
+ * EIP-712 verification is NOT authorization. It only proves the signature is valid
+ * and returns the recovered signer address for downstream authorization checks.
+ */
+/** x402 EIP-712 artifact envelope */
+interface X402Eip712Artifact {
+    format: "eip712";
+    payload: Record<string, unknown>;
+    signature: string;
+}
+/** Successful EIP-712 verification result */
+interface Eip712VerificationResult {
+    valid: true;
+    /** Decoded payload from the artifact */
+    payload: Record<string, unknown>;
+    /** Recovered signer address (checksummed) */
+    signer: string;
+    /** Whether this is an offer or receipt */
+    artifactType: "offer" | "receipt";
+}
+/** Failed EIP-712 verification result */
+interface Eip712VerificationFailure {
+    valid: false;
+    error: {
+        code: string;
+        message: string;
+    };
+    payload?: Record<string, unknown>;
+    signer?: string;
+}
+/**
+ * Verify an x402 EIP-712 artifact (offer or receipt).
+ *
+ * This is the core verification function. It:
+ * 1. Validates the artifact envelope (format, payload, signature)
+ * 2. Validates payload shape for the artifact type
+ * 3. Constructs EIP-712 typed data using canonical domain and types
+ * 4. Verifies signature and recovers signer address
+ * 5. Returns structured result with recovered signer
+ *
+ * @param artifact - The x402 EIP-712 artifact envelope
+ * @param artifactType - Whether this is an "offer" or "receipt"
+ * @returns Eip712VerificationResult on success, Eip712VerificationFailure on failure
+ */
+declare function verifyX402Eip712Artifact(artifact: X402Eip712Artifact, artifactType: "offer" | "receipt"): Eip712VerificationResult | Eip712VerificationFailure;
+/**
+ * Verify an x402 EIP-712 offer artifact.
+ *
+ * Recovers the signer address and validates that the payload contains
+ * required offer fields: version, resourceUrl, scheme, network, asset, payTo, amount.
+ *
+ * @param artifact - The x402 EIP-712 artifact envelope
+ * @returns Eip712VerificationResult on success, Eip712VerificationFailure on failure
+ */
+declare function verifyX402Eip712Offer(artifact: X402Eip712Artifact): Eip712VerificationResult | Eip712VerificationFailure;
+/**
+ * Verify an x402 EIP-712 receipt artifact.
+ *
+ * Recovers the signer address and validates that the payload contains
+ * required receipt fields: version, network, resourceUrl, payer, issuedAt.
+ *
+ * @param artifact - The x402 EIP-712 artifact envelope
+ * @returns Eip712VerificationResult on success, Eip712VerificationFailure on failure
+ */
+declare function verifyX402Eip712Receipt(artifact: X402Eip712Artifact): Eip712VerificationResult | Eip712VerificationFailure;
+
+declare function verifyDnsTxtControllerDid(domain: string, expectedControllerDid: Did, options?: VerifyDnsTxtControllerDidOptions): Promise<{
+    valid: boolean;
+    record?: string;
+    reason?: string;
+}>;
+
+declare const index_AttestationQueryResult: typeof AttestationQueryResult;
+declare const index_AttestationValidationError: typeof AttestationValidationError;
+declare const index_BuildDelegatedTypedDataFromEncodedParams: typeof BuildDelegatedTypedDataFromEncodedParams;
+declare const index_CallControllerWitnessParams: typeof CallControllerWitnessParams;
+declare const index_CallControllerWitnessResult: typeof CallControllerWitnessResult;
+declare const index_ChainConstants: typeof ChainConstants;
+declare const index_ContractOwnershipProvider: typeof ContractOwnershipProvider;
+declare const index_ControllerAuthorizationResult: typeof ControllerAuthorizationResult;
+declare const index_ControllerWitnessEvidence: typeof ControllerWitnessEvidence;
+declare const index_CreatePopEip712ProofParams: typeof CreatePopEip712ProofParams;
+declare const index_CreatePopJwsProofParams: typeof CreatePopJwsProofParams;
+declare const index_Did: typeof Did;
+declare const index_DnsTxtRecordResult: typeof DnsTxtRecordResult;
+declare const index_EIP1967_ADMIN_SLOT: typeof EIP1967_ADMIN_SLOT;
+type index_Eip712VerificationFailure = Eip712VerificationFailure;
+type index_Eip712VerificationResult = Eip712VerificationResult;
+declare const index_EvidencePointerProof: typeof EvidencePointerProof;
+declare const index_EvmOwnershipProvider: typeof EvmOwnershipProvider;
+declare const index_GetAttestationParams: typeof GetAttestationParams;
+declare const index_GetAttestationsByAttesterParams: typeof GetAttestationsByAttesterParams;
+declare const index_GetControllerAuthorizationParams: typeof GetControllerAuthorizationParams;
+declare const index_GetLatestAttestationsParams: typeof GetLatestAttestationsParams;
+declare const index_Hex: typeof Hex;
+declare const index_ListAttestationsParams: typeof ListAttestationsParams;
+declare const index_OWNERSHIP_PATTERNS: typeof OWNERSHIP_PATTERNS;
+declare const index_PopEip712Proof: typeof PopEip712Proof;
+declare const index_PopJwsProof: typeof PopJwsProof;
+declare const index_PrepareDelegatedAttestationParams: typeof PrepareDelegatedAttestationParams;
+declare const index_PrepareDelegatedAttestationResult: typeof PrepareDelegatedAttestationResult;
+declare const index_ProofPurpose: typeof ProofPurpose;
+declare const index_ProofType: typeof ProofType;
+declare const index_ProofWrapper: typeof ProofWrapper;
+declare const index_RelayErrorDetails: typeof RelayErrorDetails;
+declare const index_RelayMetadata: typeof RelayMetadata;
+declare const index_RequestControllerWitnessParams: typeof RequestControllerWitnessParams;
+declare const index_RequestControllerWitnessResult: typeof RequestControllerWitnessResult;
+declare const index_RevokeAttestationParams: typeof RevokeAttestationParams;
+declare const index_RevokeAttestationResult: typeof RevokeAttestationResult;
+declare const index_SchemaField: typeof SchemaField;
+declare const index_SubjectOwnershipVerificationMethod: typeof SubjectOwnershipVerificationMethod;
+declare const index_SubjectOwnershipVerificationResult: typeof SubjectOwnershipVerificationResult;
+declare const index_SubmitAttestationParams: typeof SubmitAttestationParams;
+declare const index_SubmitAttestationResult: typeof SubmitAttestationResult;
+declare const index_SubmitDelegatedAttestationParams: typeof SubmitDelegatedAttestationParams;
+declare const index_SubmitDelegatedAttestationResult: typeof SubmitDelegatedAttestationResult;
+declare const index_TxEncodedValueProof: typeof TxEncodedValueProof;
+declare const index_TxInteractionProof: typeof TxInteractionProof;
+declare const index_VerifyAttestationParams: typeof VerifyAttestationParams;
+declare const index_VerifyAttestationResult: typeof VerifyAttestationResult;
+declare const index_VerifyDidJsonControllerDidOptions: typeof VerifyDidJsonControllerDidOptions;
+declare const index_VerifyDidPkhOwnershipParams: typeof VerifyDidPkhOwnershipParams;
+declare const index_VerifyDidWebOwnershipParams: typeof VerifyDidWebOwnershipParams;
+declare const index_VerifyDnsTxtControllerDidOptions: typeof VerifyDnsTxtControllerDidOptions;
+declare const index_VerifyProofParams: typeof VerifyProofParams;
+declare const index_VerifyProofResult: typeof VerifyProofResult;
+declare const index_VerifySubjectOwnershipParams: typeof VerifySubjectOwnershipParams;
+declare const index_W3CKeyPurpose: typeof W3CKeyPurpose;
+type index_X402Eip712Artifact = X402Eip712Artifact;
+type index_X402JwsArtifact = X402JwsArtifact;
+type index_X402JwsVerifyOptions = X402JwsVerifyOptions;
+declare const index_X402OfferProof: typeof X402OfferProof;
+declare const index_X402ReceiptProof: typeof X402ReceiptProof;
+declare const index_buildDelegatedAttestationTypedData: typeof buildDelegatedAttestationTypedData;
+declare const index_buildDelegatedTypedDataFromEncoded: typeof buildDelegatedTypedDataFromEncoded;
+declare const index_buildDnsTxtRecord: typeof buildDnsTxtRecord;
+declare const index_buildEip712Domain: typeof buildEip712Domain;
+declare const index_calculateAverageUserReviewRating: typeof calculateAverageUserReviewRating;
+declare const index_calculateTransferAmount: typeof calculateTransferAmount;
+declare const index_calculateTransferAmountFromAddresses: typeof calculateTransferAmountFromAddresses;
+declare const index_callControllerWitness: typeof callControllerWitness;
+declare const index_constructSeed: typeof constructSeed;
+declare const index_createEvidencePointerProof: typeof createEvidencePointerProof;
+declare const index_createPopEip712Proof: typeof createPopEip712Proof;
+declare const index_createPopJwsProof: typeof createPopJwsProof;
+declare const index_createTxEncodedValueProof: typeof createTxEncodedValueProof;
+declare const index_createTxInteractionProof: typeof createTxInteractionProof;
+declare const index_createX402OfferProof: typeof createX402OfferProof;
+declare const index_createX402ReceiptProof: typeof createX402ReceiptProof;
+declare const index_decodeAttestationData: typeof decodeAttestationData;
+declare const index_deduplicateReviews: typeof deduplicateReviews;
+declare const index_discoverContractOwner: typeof discoverContractOwner;
+declare const index_discoverControllingWalletDid: typeof discoverControllingWalletDid;
+declare const index_encodeAttestationData: typeof encodeAttestationData;
+declare const index_extractEvmAddressesFromDidDocument: typeof extractEvmAddressesFromDidDocument;
+declare const index_extractExpirationTime: typeof extractExpirationTime;
+declare const index_extractJwksFromDidDocument: typeof extractJwksFromDidDocument;
+declare const index_fetchDidDocument: typeof fetchDidDocument;
+declare const index_formatSchemaUid: typeof formatSchemaUid;
+declare const index_formatTransferAmount: typeof formatTransferAmount;
+declare const index_getAttestation: typeof getAttestation;
+declare const index_getAttestationsByAttester: typeof getAttestationsByAttester;
+declare const index_getAttestationsForDid: typeof getAttestationsForDid;
+declare const index_getChainConstants: typeof getChainConstants;
+declare const index_getControllerAuthorization: typeof getControllerAuthorization;
+declare const index_getExplorerAddressUrl: typeof getExplorerAddressUrl;
+declare const index_getExplorerTxUrl: typeof getExplorerTxUrl;
+declare const index_getLatestAttestations: typeof getLatestAttestations;
+declare const index_getMajorVersion: typeof getMajorVersion;
+declare const index_getOmaTrustProofEip712Types: typeof getOmaTrustProofEip712Types;
+declare const index_getSchemaDetails: typeof getSchemaDetails;
+declare const index_getSupportedChainIds: typeof getSupportedChainIds;
+declare const index_hashSeed: typeof hashSeed;
+declare const index_isChainSupported: typeof isChainSupported;
+declare const index_listAttestations: typeof listAttestations;
+declare const index_normalizeSchema: typeof normalizeSchema;
+declare const index_parseDnsTxtRecord: typeof parseDnsTxtRecord;
+declare const index_prepareDelegatedAttestation: typeof prepareDelegatedAttestation;
+declare const index_readOwnerFromContract: typeof readOwnerFromContract;
+declare const index_requestControllerWitness: typeof requestControllerWitness;
+declare const index_revokeAttestation: typeof revokeAttestation;
+declare const index_schemaToString: typeof schemaToString;
+declare const index_splitSignature: typeof splitSignature;
+declare const index_submitAttestation: typeof submitAttestation;
+declare const index_submitDelegatedAttestation: typeof submitDelegatedAttestation;
+declare const index_validateAttestationData: typeof validateAttestationData;
+declare const index_verifyAttestation: typeof verifyAttestation;
+declare const index_verifyDidDocumentControllerDid: typeof verifyDidDocumentControllerDid;
+declare const index_verifyDidJsonControllerDid: typeof verifyDidJsonControllerDid;
+declare const index_verifyDidPkhOwnership: typeof verifyDidPkhOwnership;
+declare const index_verifyDidWebOwnership: typeof verifyDidWebOwnership;
+declare const index_verifyDnsTxtControllerDid: typeof verifyDnsTxtControllerDid;
+declare const index_verifyEip712Signature: typeof verifyEip712Signature;
+declare const index_verifyProof: typeof verifyProof;
+declare const index_verifySchemaExists: typeof verifySchemaExists;
+declare const index_verifySubjectOwnership: typeof verifySubjectOwnership;
+declare const index_verifyTransferProof: typeof verifyTransferProof;
+declare const index_verifyX402Eip712Artifact: typeof verifyX402Eip712Artifact;
+declare const index_verifyX402Eip712Offer: typeof verifyX402Eip712Offer;
+declare const index_verifyX402Eip712Receipt: typeof verifyX402Eip712Receipt;
+declare const index_verifyX402JwsArtifact: typeof verifyX402JwsArtifact;
+declare const index_verifyX402JwsOffer: typeof verifyX402JwsOffer;
+declare const index_verifyX402JwsReceipt: typeof verifyX402JwsReceipt;
+declare namespace index {
+  export { index_AttestationQueryResult as AttestationQueryResult, index_AttestationValidationError as AttestationValidationError, index_BuildDelegatedTypedDataFromEncodedParams as BuildDelegatedTypedDataFromEncodedParams, index_CallControllerWitnessParams as CallControllerWitnessParams, index_CallControllerWitnessResult as CallControllerWitnessResult, index_ChainConstants as ChainConstants, index_ContractOwnershipProvider as ContractOwnershipProvider, index_ControllerAuthorizationResult as ControllerAuthorizationResult, index_ControllerWitnessEvidence as ControllerWitnessEvidence, index_CreatePopEip712ProofParams as CreatePopEip712ProofParams, index_CreatePopJwsProofParams as CreatePopJwsProofParams, index_Did as Did, index_DnsTxtRecordResult as DnsTxtRecordResult, index_EIP1967_ADMIN_SLOT as EIP1967_ADMIN_SLOT, type index_Eip712VerificationFailure as Eip712VerificationFailure, type index_Eip712VerificationResult as Eip712VerificationResult, index_EvidencePointerProof as EvidencePointerProof, index_EvmOwnershipProvider as EvmOwnershipProvider, index_GetAttestationParams as GetAttestationParams, index_GetAttestationsByAttesterParams as GetAttestationsByAttesterParams, index_GetControllerAuthorizationParams as GetControllerAuthorizationParams, index_GetLatestAttestationsParams as GetLatestAttestationsParams, index_Hex as Hex, index_ListAttestationsParams as ListAttestationsParams, index_OWNERSHIP_PATTERNS as OWNERSHIP_PATTERNS, index_PopEip712Proof as PopEip712Proof, index_PopJwsProof as PopJwsProof, index_PrepareDelegatedAttestationParams as PrepareDelegatedAttestationParams, index_PrepareDelegatedAttestationResult as PrepareDelegatedAttestationResult, index_ProofPurpose as ProofPurpose, index_ProofType as ProofType, index_ProofWrapper as ProofWrapper, index_RelayErrorDetails as RelayErrorDetails, index_RelayMetadata as RelayMetadata, index_RequestControllerWitnessParams as RequestControllerWitnessParams, index_RequestControllerWitnessResult as RequestControllerWitnessResult, index_RevokeAttestationParams as RevokeAttestationParams, index_RevokeAttestationResult as RevokeAttestationResult, index_SchemaField as SchemaField, index_SubjectOwnershipVerificationMethod as SubjectOwnershipVerificationMethod, index_SubjectOwnershipVerificationResult as SubjectOwnershipVerificationResult, index_SubmitAttestationParams as SubmitAttestationParams, index_SubmitAttestationResult as SubmitAttestationResult, index_SubmitDelegatedAttestationParams as SubmitDelegatedAttestationParams, index_SubmitDelegatedAttestationResult as SubmitDelegatedAttestationResult, index_TxEncodedValueProof as TxEncodedValueProof, index_TxInteractionProof as TxInteractionProof, index_VerifyAttestationParams as VerifyAttestationParams, index_VerifyAttestationResult as VerifyAttestationResult, index_VerifyDidJsonControllerDidOptions as VerifyDidJsonControllerDidOptions, index_VerifyDidPkhOwnershipParams as VerifyDidPkhOwnershipParams, index_VerifyDidWebOwnershipParams as VerifyDidWebOwnershipParams, index_VerifyDnsTxtControllerDidOptions as VerifyDnsTxtControllerDidOptions, index_VerifyProofParams as VerifyProofParams, index_VerifyProofResult as VerifyProofResult, index_VerifySubjectOwnershipParams as VerifySubjectOwnershipParams, index_W3CKeyPurpose as W3CKeyPurpose, type index_X402Eip712Artifact as X402Eip712Artifact, type index_X402JwsArtifact as X402JwsArtifact, type index_X402JwsVerifyOptions as X402JwsVerifyOptions, index_X402OfferProof as X402OfferProof, index_X402ReceiptProof as X402ReceiptProof, index_buildDelegatedAttestationTypedData as buildDelegatedAttestationTypedData, index_buildDelegatedTypedDataFromEncoded as buildDelegatedTypedDataFromEncoded, index_buildDnsTxtRecord as buildDnsTxtRecord, index_buildEip712Domain as buildEip712Domain, index_calculateAverageUserReviewRating as calculateAverageUserReviewRating, index_calculateTransferAmount as calculateTransferAmount, index_calculateTransferAmountFromAddresses as calculateTransferAmountFromAddresses, index_callControllerWitness as callControllerWitness, index_constructSeed as constructSeed, index_createEvidencePointerProof as createEvidencePointerProof, index_createPopEip712Proof as createPopEip712Proof, index_createPopJwsProof as createPopJwsProof, index_createTxEncodedValueProof as createTxEncodedValueProof, index_createTxInteractionProof as createTxInteractionProof, index_createX402OfferProof as createX402OfferProof, index_createX402ReceiptProof as createX402ReceiptProof, index_decodeAttestationData as decodeAttestationData, index_deduplicateReviews as deduplicateReviews, index_discoverContractOwner as discoverContractOwner, index_discoverControllingWalletDid as discoverControllingWalletDid, index_encodeAttestationData as encodeAttestationData, index_extractEvmAddressesFromDidDocument as extractEvmAddressesFromDidDocument, index_extractExpirationTime as extractExpirationTime, index_extractJwksFromDidDocument as extractJwksFromDidDocument, index_fetchDidDocument as fetchDidDocument, index_formatSchemaUid as formatSchemaUid, index_formatTransferAmount as formatTransferAmount, index_getAttestation as getAttestation, index_getAttestationsByAttester as getAttestationsByAttester, index_getAttestationsForDid as getAttestationsForDid, index_getChainConstants as getChainConstants, index_getControllerAuthorization as getControllerAuthorization, index_getExplorerAddressUrl as getExplorerAddressUrl, index_getExplorerTxUrl as getExplorerTxUrl, index_getLatestAttestations as getLatestAttestations, index_getMajorVersion as getMajorVersion, index_getOmaTrustProofEip712Types as getOmaTrustProofEip712Types, index_getSchemaDetails as getSchemaDetails, index_getSupportedChainIds as getSupportedChainIds, index_hashSeed as hashSeed, index_isChainSupported as isChainSupported, index_listAttestations as listAttestations, index_normalizeSchema as normalizeSchema, index_parseDnsTxtRecord as parseDnsTxtRecord, index_prepareDelegatedAttestation as prepareDelegatedAttestation, index_readOwnerFromContract as readOwnerFromContract, index_requestControllerWitness as requestControllerWitness, index_revokeAttestation as revokeAttestation, index_schemaToString as schemaToString, index_splitSignature as splitSignature, index_submitAttestation as submitAttestation, index_submitDelegatedAttestation as submitDelegatedAttestation, index_validateAttestationData as validateAttestationData, index_verifyAttestation as verifyAttestation, index_verifyDidDocumentControllerDid as verifyDidDocumentControllerDid, index_verifyDidJsonControllerDid as verifyDidJsonControllerDid, index_verifyDidPkhOwnership as verifyDidPkhOwnership, index_verifyDidWebOwnership as verifyDidWebOwnership, index_verifyDnsTxtControllerDid as verifyDnsTxtControllerDid, index_verifyEip712Signature as verifyEip712Signature, index_verifyProof as verifyProof, index_verifySchemaExists as verifySchemaExists, index_verifySubjectOwnership as verifySubjectOwnership, index_verifyTransferProof as verifyTransferProof, index_verifyX402Eip712Artifact as verifyX402Eip712Artifact, index_verifyX402Eip712Offer as verifyX402Eip712Offer, index_verifyX402Eip712Receipt as verifyX402Eip712Receipt, index_verifyX402JwsArtifact as verifyX402JwsArtifact, index_verifyX402JwsOffer as verifyX402JwsOffer, index_verifyX402JwsReceipt as verifyX402JwsReceipt };
+}
+
+export { type Eip712VerificationFailure as E, type X402Eip712Artifact as X, type Eip712VerificationResult as a, type X402JwsArtifact as b, type X402JwsVerifyOptions as c, verifyX402Eip712Artifact as d, verifyX402Eip712Offer as e, verifyX402Eip712Receipt as f, getControllerAuthorization as g, verifyX402JwsArtifact as h, index as i, verifyX402JwsOffer as j, verifyX402JwsReceipt as k, verifyDnsTxtControllerDid as v };

package/dist/index-R78TpAhN.d.ts

@@ -0,0 +1,235 @@
+import { A as AuthorizationMetadata, J as JwkValidationResult, a as JwsVerificationError, b as JwsVerificationFailure, c as JwsVerificationResult, P as PublicJwk, d as PublicKeySource, R as ResolveKeyOptions, e as ResolvedControllerDid, f as ResolvedPublicKey, g as computeJwkThumbprint, h as didJwkToJwk, i as extractAuthorizationMetadata, j as formatJktValue, k as jwkToDidJwk, p as publicJwkEquals, r as resolveDidUrlToControllerDid, l as resolveDidUrlToPublicKey, v as validatePublicJwk } from './types-dpYxRq8N.js';
+
+type Hex$1 = `0x${string}`;
+type Did = string;
+declare function isValidDid(did: string): boolean;
+declare function extractDidMethod(did: Did): string | null;
+declare function extractDidIdentifier(did: Did): string | null;
+declare function normalizeDomain(domain: string): string;
+declare function normalizeDidWeb(input: string): Did;
+declare function normalizeDidPkh(input: string): Did;
+declare function normalizeDidHandle(input: string): Did;
+declare function normalizeDidKey(input: string): Did;
+declare function normalizeDid(input: string): Did;
+declare function computeDidHash(did: Did): Hex$1;
+declare function computeDidAddress(didHash: Hex$1): Hex$1;
+declare function didToAddress(did: Did): Hex$1;
+declare function validateDidAddress(did: Did, address: Hex$1): boolean;
+declare function buildDidWeb(domain: string): Did;
+declare function buildDidPkh(namespace: string, chainId: string | number, address: string): Did;
+declare function buildEvmDidPkh(chainId: string | number, address: string): Did;
+declare function buildDidPkhFromCaip10(caip10: string): Did;
+declare function getChainIdFromDidPkh(did: Did): string | null;
+declare function getAddressFromDidPkh(did: Did): string | null;
+declare function getNamespaceFromDidPkh(did: Did): string | null;
+declare function isEvmDidPkh(did: Did): boolean;
+declare function getDomainFromDidWeb(did: Did): string | null;
+/**
+ * Extract an EVM address from a DID or address-like identifier.
+ *
+ * Supports:
+ * - did:pkh (extracts the address portion — currently EVM only)
+ * - did:ethr (extracts the Ethereum address)
+ * - CAIP-10 format (e.g. eip155:1:0xABC)
+ * - Raw EVM addresses (0x + 40 hex chars)
+ *
+ * NOTE: This function is EVM-specific. It does not support non-EVM chains
+ * (e.g. Solana, Cosmos). Non-EVM did:pkh identifiers will throw.
+ * A future version may generalize to support multiple chain families.
+ *
+ * @param identifier - A DID, CAIP-10 string, or raw EVM address
+ * @returns The checksummed EVM address
+ * @throws OmaTrustError if the identifier cannot be resolved to an EVM address
+ */
+declare function extractAddressFromDid(identifier: string): string;
+/** Result of private-key DID validation */
+interface PrivateKeyDidValidation {
+    valid: boolean;
+    method: "pkh" | "jwk" | null;
+    error?: string;
+}
+/**
+ * Check if a DID uses a private-key method (can sign transactions/messages).
+ * Quick boolean check — use validatePrivateKeyDid() for detailed errors.
+ */
+declare function isPrivateKeyDid(did: string): boolean;
+/**
+ * Validate that a DID is a well-formed private-key DID.
+ * Returns detailed validation result with method identification and error messages.
+ *
+ * Supported methods:
+ * - did:pkh — CAIP-10 blockchain account (deep validation for eip155)
+ * - did:jwk — JSON Web Key (structural validation)
+ */
+declare function validatePrivateKeyDid(did: string): PrivateKeyDidValidation;
+/**
+ * Normalize a did:jwk DID.
+ * Validates structure and returns the DID unchanged (did:jwk is already canonical).
+ */
+declare function normalizeDidJwk(input: string): Did;
+
+/**
+ * DID URL Parsing — Phase 1
+ *
+ * Parses DID URLs (e.g. did:web:api.example.com#key-1) into their components.
+ * DID URLs are mutable key references / lookup handles, not durable controller DIDs.
+ */
+/** Parsed DID URL components */
+interface ParsedDidUrl {
+    /** The original full DID URL */
+    didUrl: string;
+    /** The base DID (without fragment) */
+    did: string;
+    /** The fragment identifier (without the '#'), or null if no fragment */
+    fragment: string | null;
+}
+/**
+ * Parse a DID URL into its components.
+ *
+ * A DID URL may include a fragment (e.g. `did:web:api.example.com#key-1`).
+ * The fragment identifies a verification method, key reference, or other
+ * resource under the DID.
+ *
+ * DID URLs are mutable key references. They should not be used as durable
+ * controller DIDs. Use `resolveDidUrlControllerDid()` to derive a durable
+ * `did:jwk` from a DID URL.
+ *
+ * @param input - A DID URL string
+ * @returns Parsed components: didUrl, did, fragment
+ * @throws OmaTrustError with code INVALID_DID_URL if input is malformed
+ */
+declare function parseDidUrl(input: string): ParsedDidUrl;
+/**
+ * Check whether a string is a DID URL (contains a fragment).
+ * Useful for guards that need to reject DID URLs where a bare DID is expected.
+ */
+declare function isDidUrl(input: string): boolean;
+/**
+ * Assert that a string is a bare DID (not a DID URL with a fragment).
+ * Throws if the input contains a fragment.
+ *
+ * Use this in functions that expect a subject DID and must reject DID URLs.
+ */
+declare function assertBareDid(input: string, paramName?: string): void;
+
+/**
+ * Controller ID Comparison
+ *
+ * Determines whether two controller DIDs refer to the same entity.
+ * Handles DID normalization and EVM address-based fallback (chain-agnostic).
+ */
+/**
+ * Check if two controller DIDs refer to the same entity.
+ *
+ * Matching strategies (tried in order):
+ * 1. Exact normalized DID string match
+ * 2. EVM address match (chain-agnostic): if both DIDs resolve to the same
+ *    EVM address, they match regardless of chain ID. This handles cases like
+ *    did:pkh:eip155:1:0xABC matching did:pkh:eip155:137:0xABC.
+ * 3. JWK material match: if both are did:jwk, compare the decoded public key
+ *    material directly (handles non-canonical encoding differences).
+ *
+ * @param a - First controller DID
+ * @param b - Second controller DID
+ * @returns true if both DIDs refer to the same controller
+ */
+declare function isSameControllerId(a: string, b: string): boolean;
+/**
+ * Extract an EVM address from a controller DID, if possible.
+ * Returns null for non-EVM controllers (did:jwk, non-eip155 did:pkh, etc.)
+ */
+declare function extractControllerEvmAddress(controllerDid: string): string | null;
+
+type Caip10 = string;
+type ParsedCaip10 = {
+    namespace: string;
+    reference: string;
+    address: string;
+};
+type ParsedCaip2 = {
+    namespace: string;
+    reference: string;
+};
+declare function parseCaip10(input: string): ParsedCaip10;
+declare function buildCaip10(namespace: string, reference: string, address: string): Caip10;
+declare function normalizeCaip10(input: string): Caip10;
+declare function buildCaip2(namespace: string, reference: string): string;
+declare function parseCaip2(caip2: string): ParsedCaip2;
+
+type Hex = `0x${string}`;
+declare function canonicalizeJson(obj: unknown): string;
+declare function canonicalizeForHash(obj: unknown): {
+    jcsJson: string;
+    hash: Hex;
+};
+declare function hashCanonicalizedJson(obj: unknown, algorithm: "keccak256" | "sha256"): Hex;
+
+declare const index_AuthorizationMetadata: typeof AuthorizationMetadata;
+type index_Caip10 = Caip10;
+type index_Did = Did;
+declare const index_JwkValidationResult: typeof JwkValidationResult;
+declare const index_JwsVerificationError: typeof JwsVerificationError;
+declare const index_JwsVerificationFailure: typeof JwsVerificationFailure;
+declare const index_JwsVerificationResult: typeof JwsVerificationResult;
+type index_ParsedCaip10 = ParsedCaip10;
+type index_ParsedCaip2 = ParsedCaip2;
+type index_ParsedDidUrl = ParsedDidUrl;
+type index_PrivateKeyDidValidation = PrivateKeyDidValidation;
+declare const index_PublicJwk: typeof PublicJwk;
+declare const index_PublicKeySource: typeof PublicKeySource;
+declare const index_ResolveKeyOptions: typeof ResolveKeyOptions;
+declare const index_ResolvedControllerDid: typeof ResolvedControllerDid;
+declare const index_ResolvedPublicKey: typeof ResolvedPublicKey;
+declare const index_assertBareDid: typeof assertBareDid;
+declare const index_buildCaip10: typeof buildCaip10;
+declare const index_buildCaip2: typeof buildCaip2;
+declare const index_buildDidPkh: typeof buildDidPkh;
+declare const index_buildDidPkhFromCaip10: typeof buildDidPkhFromCaip10;
+declare const index_buildDidWeb: typeof buildDidWeb;
+declare const index_buildEvmDidPkh: typeof buildEvmDidPkh;
+declare const index_canonicalizeForHash: typeof canonicalizeForHash;
+declare const index_canonicalizeJson: typeof canonicalizeJson;
+declare const index_computeDidAddress: typeof computeDidAddress;
+declare const index_computeDidHash: typeof computeDidHash;
+declare const index_computeJwkThumbprint: typeof computeJwkThumbprint;
+declare const index_didJwkToJwk: typeof didJwkToJwk;
+declare const index_didToAddress: typeof didToAddress;
+declare const index_extractAddressFromDid: typeof extractAddressFromDid;
+declare const index_extractAuthorizationMetadata: typeof extractAuthorizationMetadata;
+declare const index_extractControllerEvmAddress: typeof extractControllerEvmAddress;
+declare const index_extractDidIdentifier: typeof extractDidIdentifier;
+declare const index_extractDidMethod: typeof extractDidMethod;
+declare const index_formatJktValue: typeof formatJktValue;
+declare const index_getAddressFromDidPkh: typeof getAddressFromDidPkh;
+declare const index_getChainIdFromDidPkh: typeof getChainIdFromDidPkh;
+declare const index_getDomainFromDidWeb: typeof getDomainFromDidWeb;
+declare const index_getNamespaceFromDidPkh: typeof getNamespaceFromDidPkh;
+declare const index_hashCanonicalizedJson: typeof hashCanonicalizedJson;
+declare const index_isDidUrl: typeof isDidUrl;
+declare const index_isEvmDidPkh: typeof isEvmDidPkh;
+declare const index_isPrivateKeyDid: typeof isPrivateKeyDid;
+declare const index_isSameControllerId: typeof isSameControllerId;
+declare const index_isValidDid: typeof isValidDid;
+declare const index_jwkToDidJwk: typeof jwkToDidJwk;
+declare const index_normalizeCaip10: typeof normalizeCaip10;
+declare const index_normalizeDid: typeof normalizeDid;
+declare const index_normalizeDidHandle: typeof normalizeDidHandle;
+declare const index_normalizeDidJwk: typeof normalizeDidJwk;
+declare const index_normalizeDidKey: typeof normalizeDidKey;
+declare const index_normalizeDidPkh: typeof normalizeDidPkh;
+declare const index_normalizeDidWeb: typeof normalizeDidWeb;
+declare const index_normalizeDomain: typeof normalizeDomain;
+declare const index_parseCaip10: typeof parseCaip10;
+declare const index_parseCaip2: typeof parseCaip2;
+declare const index_parseDidUrl: typeof parseDidUrl;
+declare const index_publicJwkEquals: typeof publicJwkEquals;
+declare const index_resolveDidUrlToControllerDid: typeof resolveDidUrlToControllerDid;
+declare const index_resolveDidUrlToPublicKey: typeof resolveDidUrlToPublicKey;
+declare const index_validateDidAddress: typeof validateDidAddress;
+declare const index_validatePrivateKeyDid: typeof validatePrivateKeyDid;
+declare const index_validatePublicJwk: typeof validatePublicJwk;
+declare namespace index {
+  export { index_AuthorizationMetadata as AuthorizationMetadata, type index_Caip10 as Caip10, type index_Did as Did, type Hex$1 as Hex, index_JwkValidationResult as JwkValidationResult, index_JwsVerificationError as JwsVerificationError, index_JwsVerificationFailure as JwsVerificationFailure, index_JwsVerificationResult as JwsVerificationResult, type index_ParsedCaip10 as ParsedCaip10, type index_ParsedCaip2 as ParsedCaip2, type index_ParsedDidUrl as ParsedDidUrl, type index_PrivateKeyDidValidation as PrivateKeyDidValidation, index_PublicJwk as PublicJwk, index_PublicKeySource as PublicKeySource, index_ResolveKeyOptions as ResolveKeyOptions, index_ResolvedControllerDid as ResolvedControllerDid, index_ResolvedPublicKey as ResolvedPublicKey, index_assertBareDid as assertBareDid, index_buildCaip10 as buildCaip10, index_buildCaip2 as buildCaip2, index_buildDidPkh as buildDidPkh, index_buildDidPkhFromCaip10 as buildDidPkhFromCaip10, index_buildDidWeb as buildDidWeb, index_buildEvmDidPkh as buildEvmDidPkh, index_canonicalizeForHash as canonicalizeForHash, index_canonicalizeJson as canonicalizeJson, index_computeDidAddress as computeDidAddress, index_computeDidHash as computeDidHash, index_computeJwkThumbprint as computeJwkThumbprint, index_didJwkToJwk as didJwkToJwk, index_didToAddress as didToAddress, index_extractAddressFromDid as extractAddressFromDid, index_extractAuthorizationMetadata as extractAuthorizationMetadata, index_extractControllerEvmAddress as extractControllerEvmAddress, index_extractDidIdentifier as extractDidIdentifier, index_extractDidMethod as extractDidMethod, index_formatJktValue as formatJktValue, index_getAddressFromDidPkh as getAddressFromDidPkh, index_getChainIdFromDidPkh as getChainIdFromDidPkh, index_getDomainFromDidWeb as getDomainFromDidWeb, index_getNamespaceFromDidPkh as getNamespaceFromDidPkh, index_hashCanonicalizedJson as hashCanonicalizedJson, index_isDidUrl as isDidUrl, index_isEvmDidPkh as isEvmDidPkh, index_isPrivateKeyDid as isPrivateKeyDid, index_isSameControllerId as isSameControllerId, index_isValidDid as isValidDid, index_jwkToDidJwk as jwkToDidJwk, index_normalizeCaip10 as normalizeCaip10, index_normalizeDid as normalizeDid, index_normalizeDidHandle as normalizeDidHandle, index_normalizeDidJwk as normalizeDidJwk, index_normalizeDidKey as normalizeDidKey, index_normalizeDidPkh as normalizeDidPkh, index_normalizeDidWeb as normalizeDidWeb, index_normalizeDomain as normalizeDomain, index_parseCaip10 as parseCaip10, index_parseCaip2 as parseCaip2, index_parseDidUrl as parseDidUrl, index_publicJwkEquals as publicJwkEquals, index_resolveDidUrlToControllerDid as resolveDidUrlToControllerDid, index_resolveDidUrlToPublicKey as resolveDidUrlToPublicKey, index_validateDidAddress as validateDidAddress, index_validatePrivateKeyDid as validatePrivateKeyDid, index_validatePublicJwk as validatePublicJwk };
+}
+
+export { isEvmDidPkh as A, isPrivateKeyDid as B, type Caip10 as C, type Did as D, isSameControllerId as E, isValidDid as F, normalizeCaip10 as G, type Hex$1 as H, normalizeDid as I, normalizeDidHandle as J, normalizeDidJwk as K, normalizeDidKey as L, normalizeDidPkh as M, normalizeDidWeb as N, normalizeDomain as O, type ParsedCaip10 as P, parseCaip10 as Q, parseCaip2 as R, parseDidUrl as S, validateDidAddress as T, validatePrivateKeyDid as U, type ParsedCaip2 as a, type ParsedDidUrl as b, type PrivateKeyDidValidation as c, assertBareDid as d, buildCaip10 as e, buildCaip2 as f, buildDidPkh as g, buildDidPkhFromCaip10 as h, index as i, buildDidWeb as j, buildEvmDidPkh as k, canonicalizeForHash as l, canonicalizeJson as m, computeDidAddress as n, computeDidHash as o, didToAddress as p, extractAddressFromDid as q, extractControllerEvmAddress as r, extractDidIdentifier as s, extractDidMethod as t, getAddressFromDidPkh as u, getChainIdFromDidPkh as v, getDomainFromDidWeb as w, getNamespaceFromDidPkh as x, hashCanonicalizedJson as y, isDidUrl as z };