@originals/sdk 1.1.0 → 1.4.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (247) hide show
  1. package/package.json +3 -2
  2. package/src/did/DIDManager.ts +1 -1
  3. package/src/did/WebVHManager.ts +11 -2
  4. package/src/examples/create-module-original.ts +435 -0
  5. package/src/examples/full-lifecycle-flow.ts +514 -0
  6. package/src/examples/run.ts +59 -4
  7. package/src/index.ts +69 -3
  8. package/src/kinds/KindRegistry.ts +290 -0
  9. package/src/kinds/index.ts +74 -0
  10. package/src/kinds/types.ts +470 -0
  11. package/src/kinds/validators/AgentValidator.ts +257 -0
  12. package/src/kinds/validators/AppValidator.ts +211 -0
  13. package/src/kinds/validators/DatasetValidator.ts +242 -0
  14. package/src/kinds/validators/DocumentValidator.ts +311 -0
  15. package/src/kinds/validators/MediaValidator.ts +269 -0
  16. package/src/kinds/validators/ModuleValidator.ts +225 -0
  17. package/src/kinds/validators/base.ts +276 -0
  18. package/src/kinds/validators/index.ts +12 -0
  19. package/src/lifecycle/LifecycleManager.ts +909 -1
  20. package/src/resources/ResourceManager.ts +655 -0
  21. package/src/resources/index.ts +21 -0
  22. package/src/resources/types.ts +202 -0
  23. package/src/types/common.ts +1 -1
  24. package/src/vc/CredentialManager.ts +647 -2
  25. package/tests/integration/createTypedOriginal.test.ts +379 -0
  26. package/tests/performance/BatchOperations.perf.test.ts +2 -2
  27. package/tests/unit/kinds/KindRegistry.test.ts +329 -0
  28. package/tests/unit/kinds/types.test.ts +409 -0
  29. package/tests/unit/kinds/validators.test.ts +651 -0
  30. package/tests/unit/lifecycle/LifecycleManager.cleanapi.test.ts +441 -0
  31. package/tests/unit/resources/ResourceManager.test.ts +740 -0
  32. package/tests/unit/vc/CredentialManager.helpers.test.ts +527 -0
  33. package/tsconfig.json +0 -1
  34. package/.turbo/turbo-build.log +0 -1
  35. package/.turbo/turbo-test.log +0 -68353
  36. package/dist/adapters/FeeOracleMock.d.ts +0 -6
  37. package/dist/adapters/FeeOracleMock.js +0 -8
  38. package/dist/adapters/index.d.ts +0 -4
  39. package/dist/adapters/index.js +0 -4
  40. package/dist/adapters/providers/OrdHttpProvider.d.ts +0 -56
  41. package/dist/adapters/providers/OrdHttpProvider.js +0 -110
  42. package/dist/adapters/providers/OrdMockProvider.d.ts +0 -70
  43. package/dist/adapters/providers/OrdMockProvider.js +0 -75
  44. package/dist/adapters/types.d.ts +0 -71
  45. package/dist/adapters/types.js +0 -1
  46. package/dist/bitcoin/BitcoinManager.d.ts +0 -15
  47. package/dist/bitcoin/BitcoinManager.js +0 -262
  48. package/dist/bitcoin/BroadcastClient.d.ts +0 -30
  49. package/dist/bitcoin/BroadcastClient.js +0 -35
  50. package/dist/bitcoin/OrdinalsClient.d.ts +0 -21
  51. package/dist/bitcoin/OrdinalsClient.js +0 -105
  52. package/dist/bitcoin/PSBTBuilder.d.ts +0 -24
  53. package/dist/bitcoin/PSBTBuilder.js +0 -80
  54. package/dist/bitcoin/fee-calculation.d.ts +0 -14
  55. package/dist/bitcoin/fee-calculation.js +0 -31
  56. package/dist/bitcoin/providers/OrdNodeProvider.d.ts +0 -38
  57. package/dist/bitcoin/providers/OrdNodeProvider.js +0 -67
  58. package/dist/bitcoin/providers/OrdinalsProvider.d.ts +0 -33
  59. package/dist/bitcoin/providers/OrdinalsProvider.js +0 -50
  60. package/dist/bitcoin/providers/types.d.ts +0 -63
  61. package/dist/bitcoin/providers/types.js +0 -1
  62. package/dist/bitcoin/transactions/commit.d.ts +0 -89
  63. package/dist/bitcoin/transactions/commit.js +0 -311
  64. package/dist/bitcoin/transactions/index.d.ts +0 -7
  65. package/dist/bitcoin/transactions/index.js +0 -8
  66. package/dist/bitcoin/transfer.d.ts +0 -9
  67. package/dist/bitcoin/transfer.js +0 -26
  68. package/dist/bitcoin/utxo-selection.d.ts +0 -78
  69. package/dist/bitcoin/utxo-selection.js +0 -237
  70. package/dist/bitcoin/utxo.d.ts +0 -26
  71. package/dist/bitcoin/utxo.js +0 -78
  72. package/dist/contexts/credentials-v1.json +0 -195
  73. package/dist/contexts/credentials-v2-examples.json +0 -5
  74. package/dist/contexts/credentials-v2.json +0 -301
  75. package/dist/contexts/credentials.json +0 -195
  76. package/dist/contexts/data-integrity-v2.json +0 -81
  77. package/dist/contexts/dids.json +0 -57
  78. package/dist/contexts/ed255192020.json +0 -93
  79. package/dist/contexts/ordinals-plus.json +0 -23
  80. package/dist/contexts/originals.json +0 -22
  81. package/dist/core/OriginalsSDK.d.ts +0 -158
  82. package/dist/core/OriginalsSDK.js +0 -274
  83. package/dist/crypto/Multikey.d.ts +0 -30
  84. package/dist/crypto/Multikey.js +0 -149
  85. package/dist/crypto/Signer.d.ts +0 -21
  86. package/dist/crypto/Signer.js +0 -196
  87. package/dist/crypto/noble-init.d.ts +0 -18
  88. package/dist/crypto/noble-init.js +0 -106
  89. package/dist/did/BtcoDidResolver.d.ts +0 -57
  90. package/dist/did/BtcoDidResolver.js +0 -166
  91. package/dist/did/DIDManager.d.ts +0 -101
  92. package/dist/did/DIDManager.js +0 -493
  93. package/dist/did/Ed25519Verifier.d.ts +0 -30
  94. package/dist/did/Ed25519Verifier.js +0 -59
  95. package/dist/did/KeyManager.d.ts +0 -17
  96. package/dist/did/KeyManager.js +0 -207
  97. package/dist/did/WebVHManager.d.ts +0 -100
  98. package/dist/did/WebVHManager.js +0 -304
  99. package/dist/did/createBtcoDidDocument.d.ts +0 -10
  100. package/dist/did/createBtcoDidDocument.js +0 -42
  101. package/dist/did/providers/OrdinalsClientProviderAdapter.d.ts +0 -23
  102. package/dist/did/providers/OrdinalsClientProviderAdapter.js +0 -51
  103. package/dist/events/EventEmitter.d.ts +0 -115
  104. package/dist/events/EventEmitter.js +0 -198
  105. package/dist/events/index.d.ts +0 -7
  106. package/dist/events/index.js +0 -6
  107. package/dist/events/types.d.ts +0 -286
  108. package/dist/events/types.js +0 -9
  109. package/dist/examples/basic-usage.d.ts +0 -3
  110. package/dist/examples/basic-usage.js +0 -62
  111. package/dist/examples/run.d.ts +0 -1
  112. package/dist/examples/run.js +0 -4
  113. package/dist/index.d.ts +0 -39
  114. package/dist/index.js +0 -47
  115. package/dist/lifecycle/BatchOperations.d.ts +0 -147
  116. package/dist/lifecycle/BatchOperations.js +0 -251
  117. package/dist/lifecycle/LifecycleManager.d.ts +0 -116
  118. package/dist/lifecycle/LifecycleManager.js +0 -971
  119. package/dist/lifecycle/OriginalsAsset.d.ts +0 -164
  120. package/dist/lifecycle/OriginalsAsset.js +0 -380
  121. package/dist/lifecycle/ProvenanceQuery.d.ts +0 -126
  122. package/dist/lifecycle/ProvenanceQuery.js +0 -220
  123. package/dist/lifecycle/ResourceVersioning.d.ts +0 -73
  124. package/dist/lifecycle/ResourceVersioning.js +0 -127
  125. package/dist/migration/MigrationManager.d.ts +0 -86
  126. package/dist/migration/MigrationManager.js +0 -412
  127. package/dist/migration/audit/AuditLogger.d.ts +0 -51
  128. package/dist/migration/audit/AuditLogger.js +0 -156
  129. package/dist/migration/checkpoint/CheckpointManager.d.ts +0 -31
  130. package/dist/migration/checkpoint/CheckpointManager.js +0 -96
  131. package/dist/migration/checkpoint/CheckpointStorage.d.ts +0 -26
  132. package/dist/migration/checkpoint/CheckpointStorage.js +0 -89
  133. package/dist/migration/index.d.ts +0 -22
  134. package/dist/migration/index.js +0 -27
  135. package/dist/migration/operations/BaseMigration.d.ts +0 -48
  136. package/dist/migration/operations/BaseMigration.js +0 -83
  137. package/dist/migration/operations/PeerToBtcoMigration.d.ts +0 -25
  138. package/dist/migration/operations/PeerToBtcoMigration.js +0 -67
  139. package/dist/migration/operations/PeerToWebvhMigration.d.ts +0 -19
  140. package/dist/migration/operations/PeerToWebvhMigration.js +0 -46
  141. package/dist/migration/operations/WebvhToBtcoMigration.d.ts +0 -25
  142. package/dist/migration/operations/WebvhToBtcoMigration.js +0 -67
  143. package/dist/migration/rollback/RollbackManager.d.ts +0 -29
  144. package/dist/migration/rollback/RollbackManager.js +0 -146
  145. package/dist/migration/state/StateMachine.d.ts +0 -25
  146. package/dist/migration/state/StateMachine.js +0 -76
  147. package/dist/migration/state/StateTracker.d.ts +0 -36
  148. package/dist/migration/state/StateTracker.js +0 -123
  149. package/dist/migration/types.d.ts +0 -306
  150. package/dist/migration/types.js +0 -33
  151. package/dist/migration/validation/BitcoinValidator.d.ts +0 -13
  152. package/dist/migration/validation/BitcoinValidator.js +0 -83
  153. package/dist/migration/validation/CredentialValidator.d.ts +0 -13
  154. package/dist/migration/validation/CredentialValidator.js +0 -46
  155. package/dist/migration/validation/DIDCompatibilityValidator.d.ts +0 -16
  156. package/dist/migration/validation/DIDCompatibilityValidator.js +0 -127
  157. package/dist/migration/validation/LifecycleValidator.d.ts +0 -10
  158. package/dist/migration/validation/LifecycleValidator.js +0 -52
  159. package/dist/migration/validation/StorageValidator.d.ts +0 -10
  160. package/dist/migration/validation/StorageValidator.js +0 -65
  161. package/dist/migration/validation/ValidationPipeline.d.ts +0 -29
  162. package/dist/migration/validation/ValidationPipeline.js +0 -180
  163. package/dist/storage/LocalStorageAdapter.d.ts +0 -11
  164. package/dist/storage/LocalStorageAdapter.js +0 -53
  165. package/dist/storage/MemoryStorageAdapter.d.ts +0 -6
  166. package/dist/storage/MemoryStorageAdapter.js +0 -21
  167. package/dist/storage/StorageAdapter.d.ts +0 -16
  168. package/dist/storage/StorageAdapter.js +0 -1
  169. package/dist/storage/index.d.ts +0 -2
  170. package/dist/storage/index.js +0 -2
  171. package/dist/types/bitcoin.d.ts +0 -84
  172. package/dist/types/bitcoin.js +0 -1
  173. package/dist/types/common.d.ts +0 -82
  174. package/dist/types/common.js +0 -1
  175. package/dist/types/credentials.d.ts +0 -75
  176. package/dist/types/credentials.js +0 -1
  177. package/dist/types/did.d.ts +0 -26
  178. package/dist/types/did.js +0 -1
  179. package/dist/types/index.d.ts +0 -5
  180. package/dist/types/index.js +0 -5
  181. package/dist/types/network.d.ts +0 -78
  182. package/dist/types/network.js +0 -145
  183. package/dist/utils/EventLogger.d.ts +0 -71
  184. package/dist/utils/EventLogger.js +0 -232
  185. package/dist/utils/Logger.d.ts +0 -106
  186. package/dist/utils/Logger.js +0 -257
  187. package/dist/utils/MetricsCollector.d.ts +0 -110
  188. package/dist/utils/MetricsCollector.js +0 -264
  189. package/dist/utils/bitcoin-address.d.ts +0 -38
  190. package/dist/utils/bitcoin-address.js +0 -113
  191. package/dist/utils/cbor.d.ts +0 -2
  192. package/dist/utils/cbor.js +0 -9
  193. package/dist/utils/encoding.d.ts +0 -37
  194. package/dist/utils/encoding.js +0 -120
  195. package/dist/utils/hash.d.ts +0 -1
  196. package/dist/utils/hash.js +0 -5
  197. package/dist/utils/retry.d.ts +0 -10
  198. package/dist/utils/retry.js +0 -35
  199. package/dist/utils/satoshi-validation.d.ts +0 -60
  200. package/dist/utils/satoshi-validation.js +0 -156
  201. package/dist/utils/serialization.d.ts +0 -14
  202. package/dist/utils/serialization.js +0 -76
  203. package/dist/utils/telemetry.d.ts +0 -17
  204. package/dist/utils/telemetry.js +0 -24
  205. package/dist/utils/validation.d.ts +0 -5
  206. package/dist/utils/validation.js +0 -98
  207. package/dist/vc/CredentialManager.d.ts +0 -22
  208. package/dist/vc/CredentialManager.js +0 -227
  209. package/dist/vc/Issuer.d.ts +0 -27
  210. package/dist/vc/Issuer.js +0 -70
  211. package/dist/vc/Verifier.d.ts +0 -16
  212. package/dist/vc/Verifier.js +0 -50
  213. package/dist/vc/cryptosuites/bbs.d.ts +0 -44
  214. package/dist/vc/cryptosuites/bbs.js +0 -213
  215. package/dist/vc/cryptosuites/bbsSimple.d.ts +0 -9
  216. package/dist/vc/cryptosuites/bbsSimple.js +0 -12
  217. package/dist/vc/cryptosuites/eddsa.d.ts +0 -30
  218. package/dist/vc/cryptosuites/eddsa.js +0 -81
  219. package/dist/vc/documentLoader.d.ts +0 -16
  220. package/dist/vc/documentLoader.js +0 -59
  221. package/dist/vc/proofs/data-integrity.d.ts +0 -21
  222. package/dist/vc/proofs/data-integrity.js +0 -15
  223. package/dist/vc/utils/jsonld.d.ts +0 -2
  224. package/dist/vc/utils/jsonld.js +0 -15
  225. package/test/logs/did_webvh_QmQsRNhXxPSCSeLjpbKYcNMZj8b1kBQAoC6cZmkFAgmpHt_example_com.jsonl +0 -1
  226. package/test/logs/did_webvh_QmSQkpD58qxcqMWHYcEmDUn3wk7hHvJwzYTrZmhh6zjPQ8_example_com_users_alice123_profile.jsonl +0 -1
  227. package/test/logs/did_webvh_QmTMda6VW3cUPdKk5Yc3onnv1vdgEumvWWdP2noAYFSjeG_example_com.jsonl +0 -1
  228. package/test/logs/did_webvh_QmTkb8KnCYcsnKKDCY4eUQuKQdKJLrCinvhw13v3zETxpE_example_com_users_etc_passwd.jsonl +0 -1
  229. package/test/logs/did_webvh_QmTn9FdCfpXFDrxHH52pwB4iNrDFVvNDjJ5FQTcDbmM3Fg_example_com.jsonl +0 -1
  230. package/test/logs/did_webvh_QmUCQUi1xjtJjnSQ1XJZgKqcWgErx1v7E2dz4DAPraAyJP_example_com_etc_passwd.jsonl +0 -1
  231. package/test/logs/did_webvh_QmUENQJCDKBJVRS5BkL6zjaUvcRjkb9xHmy7foCgRjmv3W_example_com.jsonl +0 -1
  232. package/test/logs/did_webvh_QmUPdGyjYBEnQ3aQUkmqyyBKTyjvCP5RZQGiaEDeTtf6dc_example_com.jsonl +0 -1
  233. package/test/logs/did_webvh_QmUoHTuHMWzQM29ZFrE9VLtMxkZ5u869yqee8LwcCLN39M_example_com.jsonl +0 -1
  234. package/test/logs/did_webvh_QmUrnms8G65ggVKsr9oQeWrLUBuGChwQPPb2LCFvaoNxaw_example_com_users_alice.jsonl +0 -1
  235. package/test/logs/did_webvh_QmUwiw3eSXdHG1hPvoAGu3cuK5jF4aXRYDLBAjPXfv1qzb_example_com_level1_level2.jsonl +0 -1
  236. package/test/logs/did_webvh_QmW7bzKh6yFEKNAtmVsrPGvvsMHTUQdzJSNsTZkbuGFpbj_example_com_secret.jsonl +0 -1
  237. package/test/logs/did_webvh_QmXbFTFBBJ8zpjdz9WE1DNN44A2wprFmdvAubjSffeyoAG_example_com.jsonl +0 -1
  238. package/test/logs/did_webvh_QmXyVXFPCTffGb2mTUFDeMCsScjnpLWkyUkVkB6q6QoeBf_example_com_C_Windows_System32.jsonl +0 -1
  239. package/test/logs/did_webvh_QmZK9B81gxZtvo5fYHYKDtKt8zZfZZPhmCMhbujBJuRRzE_example_com_etc_passwd.jsonl +0 -1
  240. package/test/logs/did_webvh_QmbNLCVSdXSVLrwFBvCBQPAabjtRb1SGHjkGVyw3QUbfBL_example_com_users_etc_passwd.jsonl +0 -1
  241. package/test/logs/did_webvh_QmbeaicmGW3Q7Yzbqmftc8a9jLBngokveb5A2KVKfVGZRb_example_com_my_org_user_name_test_123.jsonl +0 -1
  242. package/test/logs/did_webvh_Qmdv7c7AjUreUfoKyvkN2UpAWTozxKsv99srQetPJMJEnp_example_com_users_etc_passwd.jsonl +0 -1
  243. package/test/logs/did_webvh_QmeioWY3uypYLkYpCXe9eCYnn4xBVruP9C1d79azMrTEHG_example_com.jsonl +0 -1
  244. package/test/logs/did_webvh_Qmf4QH5dsA6Ecr5HJ6KaJL9uJRyY8RxrQdqoRCM25DzvPi_example_com_users_alice.jsonl +0 -1
  245. package/tests/e2e/README.md +0 -97
  246. package/tests/e2e/example.spec.ts +0 -78
  247. package/tsconfig.tsbuildinfo +0 -1
@@ -1,227 +0,0 @@
1
- import { canonicalizeDocument } from '../utils/serialization';
2
- import { encodeBase64UrlMultibase, decodeBase64UrlMultibase } from '../utils/encoding';
3
- import { sha256 } from '@noble/hashes/sha2.js';
4
- import { ES256KSigner, Ed25519Signer, ES256Signer } from '../crypto/Signer';
5
- import { Issuer } from './Issuer';
6
- import { createDocumentLoader } from './documentLoader';
7
- import { Verifier } from './Verifier';
8
- export class CredentialManager {
9
- constructor(config, didManager) {
10
- this.config = config;
11
- this.didManager = didManager;
12
- }
13
- async createResourceCredential(type, subject, issuer) {
14
- return {
15
- '@context': ['https://www.w3.org/2018/credentials/v1'],
16
- type: ['VerifiableCredential', type],
17
- issuer,
18
- issuanceDate: new Date().toISOString(),
19
- credentialSubject: subject
20
- };
21
- }
22
- async signCredential(credential, privateKeyMultibase, verificationMethod) {
23
- if (this.didManager && typeof verificationMethod === 'string' && verificationMethod.startsWith('did:')) {
24
- try {
25
- const loader = createDocumentLoader(this.didManager);
26
- const { document } = await loader(verificationMethod);
27
- if (document && document.publicKeyMultibase) {
28
- const vm = {
29
- id: verificationMethod,
30
- controller: typeof credential.issuer === 'string' ? credential.issuer : credential.issuer?.id,
31
- publicKeyMultibase: document.publicKeyMultibase,
32
- secretKeyMultibase: privateKeyMultibase,
33
- type: document.type || 'Multikey'
34
- };
35
- const issuer = new Issuer(this.didManager, vm);
36
- const unsigned = { ...credential };
37
- delete unsigned['@context'];
38
- delete unsigned.proof;
39
- return issuer.issueCredential(unsigned, { proofPurpose: 'assertionMethod' });
40
- }
41
- }
42
- catch {
43
- // fall through to legacy signing
44
- }
45
- }
46
- // fallback to legacy local signer
47
- const proofBase = {
48
- type: 'DataIntegrityProof',
49
- created: new Date().toISOString(),
50
- verificationMethod,
51
- proofPurpose: 'assertionMethod',
52
- proofValue: ''
53
- };
54
- const proofValue = await this.generateProofValue(credential, privateKeyMultibase, proofBase);
55
- const proof = { ...proofBase, proofValue };
56
- return { ...credential, proof };
57
- }
58
- /**
59
- * Sign a credential using an external signer (e.g., hardware wallet, Privy)
60
- * @param credential - The unsigned credential
61
- * @param signer - External signer implementation
62
- * @returns Signed verifiable credential
63
- */
64
- async signCredentialWithExternalSigner(credential, signer) {
65
- const verificationMethodId = await signer.getVerificationMethodId();
66
- // Create proof structure
67
- const proofBase = {
68
- type: 'DataIntegrityProof',
69
- cryptosuite: 'eddsa-rdfc-2022', // Or derive from signer type
70
- created: new Date().toISOString(),
71
- verificationMethod: verificationMethodId,
72
- proofPurpose: 'assertionMethod'
73
- };
74
- // Prepare unsigned credential
75
- const unsignedCredential = { ...credential };
76
- delete unsignedCredential.proof;
77
- // Use external signer to sign
78
- const { proofValue } = await signer.sign({
79
- document: unsignedCredential,
80
- proof: proofBase
81
- });
82
- // Return signed credential
83
- return {
84
- ...credential,
85
- proof: {
86
- ...proofBase,
87
- proofValue
88
- }
89
- };
90
- }
91
- async verifyCredential(credential) {
92
- if (this.didManager) {
93
- const proofAny = credential.proof;
94
- if (proofAny && (proofAny.cryptosuite || (Array.isArray(proofAny) && proofAny[0]?.cryptosuite))) {
95
- const verifier = new Verifier(this.didManager);
96
- const res = await verifier.verifyCredential(credential);
97
- return res.verified;
98
- }
99
- }
100
- const proof = credential.proof;
101
- if (!proof) {
102
- return false;
103
- }
104
- const { proofValue, verificationMethod } = proof;
105
- if (!proofValue || !verificationMethod)
106
- return false;
107
- const signature = this.decodeMultibase(proofValue);
108
- if (!signature)
109
- return false;
110
- const proofSansValue = { ...proof };
111
- delete proofSansValue.proofValue;
112
- const proofInput = { ...proofSansValue };
113
- const credentialContext = credential['@context'];
114
- if (credentialContext && !proofInput['@context']) {
115
- proofInput['@context'] = credentialContext;
116
- }
117
- const unsignedCredential = { ...credential };
118
- delete unsignedCredential.proof;
119
- const c14nProof = await canonicalizeDocument(proofInput);
120
- const c14nCred = await canonicalizeDocument(unsignedCredential);
121
- const hProof = Buffer.from(sha256(Buffer.from(c14nProof, 'utf8')));
122
- const hCred = Buffer.from(sha256(Buffer.from(c14nCred, 'utf8')));
123
- const digest = Buffer.concat([hProof, hCred]);
124
- const signer = this.getSigner();
125
- try {
126
- const resolvedKey = proof.publicKeyMultibase
127
- || await this.resolveVerificationMethodMultibase(verificationMethod);
128
- if (!resolvedKey) {
129
- return false;
130
- }
131
- return await signer.verify(Buffer.from(digest), Buffer.from(signature), resolvedKey);
132
- }
133
- catch {
134
- return false;
135
- }
136
- }
137
- async createPresentation(credentials, holder) {
138
- return {
139
- '@context': ['https://www.w3.org/2018/credentials/v1'],
140
- type: ['VerifiablePresentation'],
141
- holder,
142
- verifiableCredential: credentials
143
- };
144
- }
145
- async generateProofValue(credential, privateKeyMultibase, proofBase) {
146
- // Construct canonical digest including provided proof sans proofValue
147
- const proofSansValue = { ...proofBase };
148
- delete proofSansValue.proofValue;
149
- const proofInput = { ...proofSansValue };
150
- const credentialContext = credential['@context'];
151
- if (credentialContext && !proofInput['@context']) {
152
- proofInput['@context'] = credentialContext;
153
- }
154
- const unsignedCredential = { ...credential };
155
- delete unsignedCredential.proof;
156
- const c14nProof = await canonicalizeDocument(proofInput);
157
- const c14nCred = await canonicalizeDocument(unsignedCredential);
158
- const hProof = Buffer.from(sha256(Buffer.from(c14nProof, 'utf8')));
159
- const hCred = Buffer.from(sha256(Buffer.from(c14nCred, 'utf8')));
160
- const digest = Buffer.concat([hProof, hCred]);
161
- const signer = this.getSigner();
162
- const sig = await signer.sign(Buffer.from(digest), privateKeyMultibase);
163
- return encodeBase64UrlMultibase(sig);
164
- }
165
- getSigner() {
166
- switch (this.config.defaultKeyType) {
167
- case 'ES256K':
168
- return new ES256KSigner();
169
- case 'Ed25519':
170
- return new Ed25519Signer();
171
- case 'ES256':
172
- return new ES256Signer();
173
- default:
174
- return new ES256KSigner();
175
- }
176
- }
177
- async resolveVerificationMethodMultibase(verificationMethod) {
178
- if (typeof verificationMethod === 'string' && verificationMethod.startsWith('z')) {
179
- return verificationMethod;
180
- }
181
- if (!this.didManager || typeof verificationMethod !== 'string' || !verificationMethod.startsWith('did:')) {
182
- return null;
183
- }
184
- const loader = createDocumentLoader(this.didManager);
185
- try {
186
- const { document } = await loader(verificationMethod);
187
- if (document && typeof document.publicKeyMultibase === 'string') {
188
- return document.publicKeyMultibase;
189
- }
190
- }
191
- catch (err) {
192
- // Document loader failed; will try alternative resolution method
193
- if (this.config.enableLogging) {
194
- console.warn('Failed to load verification method via document loader:', err);
195
- }
196
- }
197
- try {
198
- const did = verificationMethod.split('#')[0];
199
- if (!did) {
200
- return null;
201
- }
202
- const didDoc = await this.didManager.resolveDID(did);
203
- const vms = didDoc?.verificationMethod;
204
- if (Array.isArray(vms)) {
205
- const vm = vms.find((m) => m?.id === verificationMethod);
206
- if (vm && typeof vm.publicKeyMultibase === 'string') {
207
- return vm.publicKeyMultibase;
208
- }
209
- }
210
- }
211
- catch (err) {
212
- // Failed to resolve DID document
213
- if (this.config.enableLogging) {
214
- console.warn('Failed to resolve DID for verification method:', err);
215
- }
216
- }
217
- return null;
218
- }
219
- decodeMultibase(s) {
220
- try {
221
- return decodeBase64UrlMultibase(s);
222
- }
223
- catch {
224
- return null;
225
- }
226
- }
227
- }
@@ -1,27 +0,0 @@
1
- import { VerifiableCredential, VerifiablePresentation } from '../types';
2
- import { DIDManager } from '../did/DIDManager';
3
- export interface IssueOptions {
4
- proofPurpose: 'assertionMethod' | 'authentication';
5
- documentLoader?: (iri: string) => Promise<{
6
- document: any;
7
- documentUrl: string;
8
- contextUrl: string | null;
9
- }>;
10
- challenge?: string;
11
- domain?: string;
12
- }
13
- export type VerificationMethodLike = {
14
- id: string;
15
- controller: string;
16
- publicKeyMultibase: string;
17
- secretKeyMultibase?: string;
18
- type?: 'Multikey' | string;
19
- };
20
- export declare class Issuer {
21
- private didManager;
22
- private verificationMethod;
23
- constructor(didManager: DIDManager, verificationMethod: VerificationMethodLike);
24
- private inferKeyType;
25
- issueCredential(unsigned: Omit<VerifiableCredential, '@context' | 'proof'>, options: IssueOptions): Promise<VerifiableCredential>;
26
- issuePresentation(presentation: Omit<VerifiablePresentation, '@context' | 'proof'>, options: IssueOptions): Promise<VerifiablePresentation>;
27
- }
package/dist/vc/Issuer.js DELETED
@@ -1,70 +0,0 @@
1
- import { multikey } from '../crypto/Multikey';
2
- import { createDocumentLoader } from './documentLoader';
3
- import { DataIntegrityProofManager } from './proofs/data-integrity';
4
- export class Issuer {
5
- constructor(didManager, verificationMethod) {
6
- this.didManager = didManager;
7
- this.verificationMethod = verificationMethod;
8
- }
9
- inferKeyType(publicKeyMultibase) {
10
- try {
11
- return multikey.decodePublicKey(publicKeyMultibase).type;
12
- }
13
- catch {
14
- return 'Ed25519';
15
- }
16
- }
17
- async issueCredential(unsigned, options) {
18
- const documentLoader = options.documentLoader || createDocumentLoader(this.didManager);
19
- await documentLoader(this.verificationMethod.id);
20
- const issuerId = typeof unsigned.issuer === 'string' ? unsigned.issuer : unsigned.issuer?.id;
21
- const credential = {
22
- ...unsigned,
23
- '@context': ['https://www.w3.org/ns/credentials/v2'],
24
- issuer: issuerId || this.verificationMethod.controller,
25
- proof: undefined
26
- };
27
- if (!this.verificationMethod.secretKeyMultibase) {
28
- throw new Error('Missing secretKeyMultibase for issuance');
29
- }
30
- const keyType = this.inferKeyType(this.verificationMethod.publicKeyMultibase);
31
- if (keyType !== 'Ed25519') {
32
- throw new Error('Only Ed25519 supported for eddsa-rdfc-2022');
33
- }
34
- const proof = await DataIntegrityProofManager.createProof(credential, {
35
- verificationMethod: this.verificationMethod.id,
36
- proofPurpose: options.proofPurpose,
37
- cryptosuite: 'eddsa-rdfc-2022',
38
- type: 'DataIntegrityProof',
39
- privateKey: this.verificationMethod.secretKeyMultibase,
40
- documentLoader
41
- });
42
- return { ...credential, proof };
43
- }
44
- async issuePresentation(presentation, options) {
45
- const documentLoader = options.documentLoader || createDocumentLoader(this.didManager);
46
- await documentLoader(this.verificationMethod.id);
47
- if (!this.verificationMethod.secretKeyMultibase) {
48
- throw new Error('Missing secretKeyMultibase for issuance');
49
- }
50
- const keyType = this.inferKeyType(this.verificationMethod.publicKeyMultibase);
51
- if (keyType !== 'Ed25519') {
52
- throw new Error('Only Ed25519 supported for eddsa-rdfc-2022');
53
- }
54
- const proof = await DataIntegrityProofManager.createProof({ ...presentation, '@context': ['https://www.w3.org/ns/credentials/v2'] }, {
55
- verificationMethod: this.verificationMethod.id,
56
- proofPurpose: options.proofPurpose,
57
- cryptosuite: 'eddsa-rdfc-2022',
58
- type: 'DataIntegrityProof',
59
- privateKey: this.verificationMethod.secretKeyMultibase,
60
- challenge: options.challenge,
61
- domain: options.domain,
62
- documentLoader
63
- });
64
- return {
65
- ...presentation,
66
- '@context': ['https://www.w3.org/ns/credentials/v2'],
67
- proof
68
- };
69
- }
70
- }
@@ -1,16 +0,0 @@
1
- import { VerifiableCredential, VerifiablePresentation } from '../types';
2
- import { DIDManager } from '../did/DIDManager';
3
- export type VerificationResult = {
4
- verified: boolean;
5
- errors: string[];
6
- };
7
- export declare class Verifier {
8
- private didManager;
9
- constructor(didManager: DIDManager);
10
- verifyCredential(vc: VerifiableCredential, options?: {
11
- documentLoader?: (iri: string) => Promise<any>;
12
- }): Promise<VerificationResult>;
13
- verifyPresentation(vp: VerifiablePresentation, options?: {
14
- documentLoader?: (iri: string) => Promise<any>;
15
- }): Promise<VerificationResult>;
16
- }
@@ -1,50 +0,0 @@
1
- import { createDocumentLoader } from './documentLoader';
2
- import { DataIntegrityProofManager } from './proofs/data-integrity';
3
- export class Verifier {
4
- constructor(didManager) {
5
- this.didManager = didManager;
6
- }
7
- async verifyCredential(vc, options = {}) {
8
- try {
9
- if (!vc || !vc['@context'] || !vc.type)
10
- throw new Error('Invalid credential');
11
- if (!vc.proof)
12
- throw new Error('Credential has no proof');
13
- const loader = options.documentLoader || createDocumentLoader(this.didManager);
14
- const ctxs = Array.isArray(vc['@context']) ? vc['@context'] : [vc['@context']];
15
- for (const c of ctxs)
16
- await loader(c);
17
- const proof = Array.isArray(vc.proof) ? vc.proof[0] : vc.proof;
18
- const result = await DataIntegrityProofManager.verifyProof(vc, proof, { documentLoader: loader });
19
- return result.verified ? { verified: true, errors: [] } : { verified: false, errors: result.errors ?? ['Verification failed'] };
20
- }
21
- catch (e) {
22
- return { verified: false, errors: [e?.message ?? 'Unknown error in verifyCredential'] };
23
- }
24
- }
25
- async verifyPresentation(vp, options = {}) {
26
- try {
27
- if (!vp || !vp['@context'] || !vp.type)
28
- throw new Error('Invalid presentation');
29
- if (!vp.proof)
30
- throw new Error('Presentation has no proof');
31
- const loader = options.documentLoader || createDocumentLoader(this.didManager);
32
- const ctxs = Array.isArray(vp['@context']) ? vp['@context'] : [vp['@context']];
33
- for (const c of ctxs)
34
- await loader(c);
35
- if (vp.verifiableCredential) {
36
- for (const c of vp.verifiableCredential) {
37
- const res = await this.verifyCredential(c, { documentLoader: loader });
38
- if (!res.verified)
39
- return res;
40
- }
41
- }
42
- const proof = Array.isArray(vp.proof) ? vp.proof[0] : vp.proof;
43
- const result = await DataIntegrityProofManager.verifyProof(vp, proof, { documentLoader: loader });
44
- return result.verified ? { verified: true, errors: [] } : { verified: false, errors: result.errors ?? ['Verification failed'] };
45
- }
46
- catch (e) {
47
- return { verified: false, errors: [e?.message ?? 'Unknown error in verifyPresentation'] };
48
- }
49
- }
50
- }
@@ -1,44 +0,0 @@
1
- /**
2
- * Minimal BBS utility methods ported from legacy for working with
3
- * Data Integrity BBS (bbs-2023) base and derived proof value encoding.
4
- *
5
- * Notes:
6
- * - This module focuses on serialization/parsing helpers used by callers
7
- * to pack/unpack proof values. It does not perform signing or verification.
8
- * - All methods operate on Uint8Array inputs and return multibase strings
9
- * (base64url with 'u' prefix) where applicable to match the spec.
10
- */
11
- export declare class BBSCryptosuiteUtils {
12
- private static encodeBase64urlNoPad;
13
- private static decodeBase64urlNoPad;
14
- private static compareBytes;
15
- private static concatBytes;
16
- static serializeBaseProofValue(bbsSignature: Uint8Array, bbsHeader: Uint8Array, publicKey: Uint8Array, hmacKey: Uint8Array, mandatoryPointers: string[], featureOption: 'baseline' | 'anonymous_holder_binding' | 'pseudonym_issuer_pid' | 'pseudonym_hidden_pid', pid?: Uint8Array, signerBlind?: Uint8Array): string;
17
- static parseBaseProofValue(proofValue: string): {
18
- bbsSignature: Uint8Array;
19
- bbsHeader: Uint8Array;
20
- publicKey: Uint8Array;
21
- hmacKey: Uint8Array;
22
- mandatoryPointers: string[];
23
- featureOption: 'baseline' | 'anonymous_holder_binding' | 'pseudonym_issuer_pid' | 'pseudonym_hidden_pid' | 'base_proof';
24
- pid?: Uint8Array;
25
- signerBlind?: Uint8Array;
26
- };
27
- private static compressLabelMap;
28
- private static decompressLabelMap;
29
- static serializeDerivedProofValue(bbsProof: Uint8Array, labelMap: {
30
- [key: string]: string;
31
- }, mandatoryIndexes: number[], selectiveIndexes: number[], presentationHeader: Uint8Array, featureOption: 'baseline' | 'anonymous_holder_binding' | 'pseudonym', pseudonym?: string, lengthBBSMessages?: number): string;
32
- static parseDerivedProofValue(proofValue: string): {
33
- bbsProof: Uint8Array;
34
- labelMap: {
35
- [key: string]: string;
36
- };
37
- mandatoryIndexes: number[];
38
- selectiveIndexes: number[];
39
- presentationHeader: Uint8Array;
40
- featureOption: 'baseline' | 'anonymous_holder_binding' | 'pseudonym';
41
- pseudonym?: string;
42
- lengthBBSMessages?: number;
43
- };
44
- }
@@ -1,213 +0,0 @@
1
- import * as cbor from 'cbor-js';
2
- /**
3
- * Minimal BBS utility methods ported from legacy for working with
4
- * Data Integrity BBS (bbs-2023) base and derived proof value encoding.
5
- *
6
- * Notes:
7
- * - This module focuses on serialization/parsing helpers used by callers
8
- * to pack/unpack proof values. It does not perform signing or verification.
9
- * - All methods operate on Uint8Array inputs and return multibase strings
10
- * (base64url with 'u' prefix) where applicable to match the spec.
11
- */
12
- export class BBSCryptosuiteUtils {
13
- static encodeBase64urlNoPad(bytes) {
14
- const b64 = Buffer.from(bytes).toString('base64');
15
- const b64url = b64.replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/g, '');
16
- return 'u' + b64url;
17
- }
18
- static decodeBase64urlNoPad(s) {
19
- if (!s.startsWith('u'))
20
- throw new Error('Not a multibase base64url (u- prefixed) string');
21
- const raw = s.slice(1);
22
- const b64 = raw.replace(/-/g, '+').replace(/_/g, '/');
23
- const pad = b64.length % 4 === 2 ? '==' : b64.length % 4 === 3 ? '=' : '';
24
- return new Uint8Array(Buffer.from(b64 + pad, 'base64'));
25
- }
26
- static compareBytes(a, b) {
27
- if (a.length !== b.length)
28
- return false;
29
- for (let i = 0; i < b.length; i++) {
30
- if (a[i] !== b[i])
31
- return false;
32
- }
33
- return true;
34
- }
35
- static concatBytes(a, b) {
36
- const out = new Uint8Array(a.length + b.length);
37
- out.set(a, 0);
38
- out.set(b, a.length);
39
- return out;
40
- }
41
- // ===== Base proof (serialize/parse) =====
42
- static serializeBaseProofValue(bbsSignature, bbsHeader, publicKey, hmacKey, mandatoryPointers, featureOption, pid, signerBlind) {
43
- let headerBytes;
44
- let components;
45
- switch (featureOption) {
46
- case 'baseline':
47
- headerBytes = new Uint8Array([0xd9, 0x5d, 0x02]);
48
- components = [bbsSignature, bbsHeader, publicKey, hmacKey, mandatoryPointers];
49
- break;
50
- case 'anonymous_holder_binding':
51
- headerBytes = new Uint8Array([0xd9, 0x5d, 0x04]);
52
- if (!signerBlind)
53
- throw new Error('signerBlind is required for anonymous_holder_binding');
54
- components = [bbsSignature, bbsHeader, publicKey, hmacKey, mandatoryPointers, signerBlind];
55
- break;
56
- case 'pseudonym_issuer_pid':
57
- headerBytes = new Uint8Array([0xd9, 0x5d, 0x06]);
58
- if (!pid)
59
- throw new Error('pid is required for pseudonym_issuer_pid');
60
- components = [bbsSignature, bbsHeader, publicKey, hmacKey, mandatoryPointers, pid];
61
- break;
62
- case 'pseudonym_hidden_pid':
63
- headerBytes = new Uint8Array([0xd9, 0x5d, 0x08]);
64
- if (!signerBlind)
65
- throw new Error('signerBlind is required for pseudonym_hidden_pid');
66
- components = [bbsSignature, bbsHeader, publicKey, hmacKey, mandatoryPointers, signerBlind];
67
- break;
68
- default:
69
- throw new Error(`Unsupported feature option: ${featureOption}`);
70
- }
71
- const encodedComponents = cbor.encode(components);
72
- const proofBytes = BBSCryptosuiteUtils.concatBytes(headerBytes, new Uint8Array(encodedComponents));
73
- return BBSCryptosuiteUtils.encodeBase64urlNoPad(proofBytes);
74
- }
75
- static parseBaseProofValue(proofValue) {
76
- const decoded = BBSCryptosuiteUtils.decodeBase64urlNoPad(proofValue);
77
- const header = decoded.slice(0, 3);
78
- let featureOption;
79
- if (this.compareBytes(header, [0xd9, 0x5d, 0x02]))
80
- featureOption = 'baseline';
81
- else if (this.compareBytes(header, [0xd9, 0x5d, 0x04]))
82
- featureOption = 'anonymous_holder_binding';
83
- else if (this.compareBytes(header, [0xd9, 0x5d, 0x06]))
84
- featureOption = 'pseudonym_issuer_pid';
85
- else if (this.compareBytes(header, [0xd9, 0x5d, 0x08]))
86
- featureOption = 'pseudonym_hidden_pid';
87
- else if (this.compareBytes(header, [0xd9, 0x5d, 0x03]))
88
- featureOption = 'base_proof';
89
- else
90
- throw new Error('Invalid BBS base proof header');
91
- const components = cbor.decode(decoded.slice(3).buffer);
92
- const base = {
93
- bbsSignature: components[0],
94
- bbsHeader: components[1],
95
- publicKey: components[2],
96
- hmacKey: components[3],
97
- mandatoryPointers: components[4],
98
- featureOption
99
- };
100
- if (featureOption === 'anonymous_holder_binding' || featureOption === 'pseudonym_hidden_pid') {
101
- base.signerBlind = components[5];
102
- }
103
- if (featureOption === 'pseudonym_issuer_pid') {
104
- base.pid = components[5];
105
- }
106
- return base;
107
- }
108
- // ===== Label map compression helpers =====
109
- static compressLabelMap(labelMap) {
110
- const map = {};
111
- for (const [k, v] of Object.entries(labelMap)) {
112
- const c14nMatch = k.match(/^c14n(\d+)$/);
113
- const bMatch = v.match(/^b(\d+)$/);
114
- if (!c14nMatch || !bMatch) {
115
- throw new Error(`Invalid label map entry: ${k} -> ${v}`);
116
- }
117
- const key = parseInt(c14nMatch[1], 10);
118
- const value = parseInt(bMatch[1], 10);
119
- map[key] = value.toString();
120
- }
121
- return map;
122
- }
123
- static decompressLabelMap(compressed) {
124
- const map = {};
125
- for (const [k, v] of Object.entries(compressed)) {
126
- map[`c14n${k}`] = `b${v}`;
127
- }
128
- return map;
129
- }
130
- // ===== Derived proof (serialize/parse) =====
131
- static serializeDerivedProofValue(bbsProof, labelMap, mandatoryIndexes, selectiveIndexes, presentationHeader, featureOption, pseudonym, lengthBBSMessages) {
132
- const compressedLabelMap = this.compressLabelMap(labelMap);
133
- let headerBytes;
134
- let components;
135
- switch (featureOption) {
136
- case 'baseline':
137
- headerBytes = new Uint8Array([0xd9, 0x5d, 0x03]);
138
- components = [
139
- bbsProof,
140
- compressedLabelMap,
141
- mandatoryIndexes,
142
- selectiveIndexes,
143
- presentationHeader
144
- ];
145
- break;
146
- case 'anonymous_holder_binding':
147
- if (typeof lengthBBSMessages !== 'number') {
148
- throw new Error('lengthBBSMessages is required for anonymous_holder_binding');
149
- }
150
- headerBytes = new Uint8Array([0xd9, 0x5d, 0x05]);
151
- components = [
152
- bbsProof,
153
- compressedLabelMap,
154
- mandatoryIndexes,
155
- selectiveIndexes,
156
- presentationHeader,
157
- lengthBBSMessages
158
- ];
159
- break;
160
- case 'pseudonym':
161
- if (!pseudonym || typeof lengthBBSMessages !== 'number') {
162
- throw new Error('pseudonym and lengthBBSMessages are required for pseudonym features');
163
- }
164
- headerBytes = new Uint8Array([0xd9, 0x5d, 0x07]);
165
- components = [
166
- bbsProof,
167
- compressedLabelMap,
168
- mandatoryIndexes,
169
- selectiveIndexes,
170
- presentationHeader,
171
- pseudonym,
172
- lengthBBSMessages
173
- ];
174
- break;
175
- default:
176
- throw new Error(`Unsupported feature option: ${featureOption}`);
177
- }
178
- const encodedComponents = cbor.encode(components);
179
- const proofBytes = this.concatBytes(headerBytes, new Uint8Array(encodedComponents));
180
- return this.encodeBase64urlNoPad(proofBytes);
181
- }
182
- static parseDerivedProofValue(proofValue) {
183
- const decoded = this.decodeBase64urlNoPad(proofValue);
184
- const header = decoded.slice(0, 3);
185
- let featureOption;
186
- if (this.compareBytes(header, [0xd9, 0x5d, 0x03]))
187
- featureOption = 'baseline';
188
- else if (this.compareBytes(header, [0xd9, 0x5d, 0x05]))
189
- featureOption = 'anonymous_holder_binding';
190
- else if (this.compareBytes(header, [0xd9, 0x5d, 0x07]))
191
- featureOption = 'pseudonym';
192
- else
193
- throw new Error('Invalid BBS derived proof header');
194
- const components = cbor.decode(decoded.slice(3).buffer);
195
- const decompressedLabelMap = this.decompressLabelMap(components[1]);
196
- const result = {
197
- bbsProof: components[0],
198
- labelMap: decompressedLabelMap,
199
- mandatoryIndexes: components[2],
200
- selectiveIndexes: components[3],
201
- presentationHeader: components[4],
202
- featureOption
203
- };
204
- if (featureOption === 'anonymous_holder_binding') {
205
- result.lengthBBSMessages = components[5];
206
- }
207
- else if (featureOption === 'pseudonym') {
208
- result.pseudonym = components[5];
209
- result.lengthBBSMessages = components[6];
210
- }
211
- return result;
212
- }
213
- }
@@ -1,9 +0,0 @@
1
- export type BbsKeyPair = {
2
- publicKey: Uint8Array;
3
- privateKey: Uint8Array;
4
- };
5
- export declare class BbsSimple {
6
- static readonly CIPHERSUITE = "BLS12-381-SHA-256";
7
- static sign(messages: Uint8Array[], keypair: BbsKeyPair, header?: Uint8Array): Promise<Uint8Array>;
8
- static verify(messages: Uint8Array[], signature: Uint8Array, publicKey: Uint8Array, header?: Uint8Array): Promise<boolean>;
9
- }
@@ -1,12 +0,0 @@
1
- import { sha256 } from '@noble/hashes/sha2.js';
2
- export class BbsSimple {
3
- static async sign(messages, keypair, header) {
4
- const headerBytes = header ?? new Uint8Array(sha256(new Uint8Array(0)));
5
- throw new Error('BbsSimple.sign is not implemented');
6
- }
7
- static async verify(messages, signature, publicKey, header) {
8
- const headerBytes = header ?? new Uint8Array(sha256(new Uint8Array(0)));
9
- throw new Error('BbsSimple.verify is not implemented');
10
- }
11
- }
12
- BbsSimple.CIPHERSUITE = 'BLS12-381-SHA-256';