@originator-profile/vite-plugin 0.0.1 → 0.6.0-beta.1

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/NOTICE

@@ -0,0 +1,5 @@
+Originator Profile
+Copyright 2025 Originator Profile Collaborative Innovation Partnership
+
+This product includes software developed at
+Originator Profile Collaborative Innovation Partnership (https://originator-profile.org/).

package/README.md

@@ -1,45 +1,192 @@
 # @originator-profile/vite-plugin
 
-## ⚠️ IMPORTANT NOTICE ⚠️
-
-**This package is created solely for the purpose of setting up OIDC (OpenID Connect) trusted publishing with npm.**
-
-This is **NOT** a functional package and contains **NO** code or functionality beyond the OIDC setup configuration.
-
-## Purpose
-
-This package exists to:
-1. Configure OIDC trusted publishing for the package name `@originator-profile/vite-plugin`
-2. Enable secure, token-less publishing from CI/CD workflows
-3. Establish provenance for packages published under this name
-
-## What is OIDC Trusted Publishing?
-
-OIDC trusted publishing allows package maintainers to publish packages directly from their CI/CD workflows without needing to manage npm access tokens. Instead, it uses OpenID Connect to establish trust between the CI/CD provider (like GitHub Actions) and npm.
-
-## Setup Instructions
-
-To properly configure OIDC trusted publishing for this package:
-
-1. Go to [npmjs.com](https://www.npmjs.com/) and navigate to your package settings
-2. Configure the trusted publisher (e.g., GitHub Actions)
-3. Specify the repository and workflow that should be allowed to publish
-4. Use the configured workflow to publish your actual package
-
-## DO NOT USE THIS PACKAGE
-
-This package is a placeholder for OIDC configuration only. It:
-- Contains no executable code
-- Provides no functionality
-- Should not be installed as a dependency
-- Exists only for administrative purposes
-
-## More Information
-
-For more details about npm's trusted publishing feature, see:
-- [npm Trusted Publishing Documentation](https://docs.npmjs.com/generating-provenance-statements)
-- [GitHub Actions OIDC Documentation](https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect)
-
----
-
-**Maintained for OIDC setup purposes only**
+[![npm version](https://img.shields.io/npm/v/@originator-profile/vite-plugin)](https://www.npmjs.com/package/@originator-profile/vite-plugin)
+
+Vite plugin that signs [Website Profiles](https://docs.originator-profile.org/en/opb/site-profile/) (WSP) and [Content Attestations](https://docs.originator-profile.org/en/opb/content-attestation/) (CA) at build time.
+
+```js
+// vite.config.js
+import { defineConfig } from "vite";
+import { originatorProfile } from "@originator-profile/vite-plugin";
+
+export default defineConfig({
+  plugins: [
+    originatorProfile({
+      issuers: {
+        "dns:example.com": import.meta.env.SIGNING_KEY,
+      },
+    }),
+  ],
+});
+```
+
+## Install
+
+```bash
+npm install -D @originator-profile/vite-plugin
+```
+
+## Options
+
+### `issuers`
+
+**Required.** A mapping of [OP ID](https://docs.originator-profile.org/en/opb/dns-uri-op-id/) to signing key. Each key must be the private key paired with the public key in the issuer's [Core Profile](https://docs.originator-profile.org/en/opb/cp/).
+
+Values can be a JWK object or a JSON string (parsed internally).
+
+```js
+originatorProfile({
+  issuers: {
+    "dns:example.com": import.meta.env.SIGNING_KEY_PROD,
+    "dns:localhost": import.meta.env.SIGNING_KEY_LOCAL,
+  },
+});
+```
+
+The plugin looks up the signing key for each WSP and CA by matching its `issuer` field against this mapping.
+
+### `expiresIn`
+
+Duration until signed credentials expire, relative to build time. Defaults to `"1y"`.
+
+Accepts any string supported by [`ms`](https://github.com/vercel/ms), such as `"1y"` (1 year), `"30d"` (30 days), `"12h"` (12 hours), or `"6m"` (6 minutes — note that `m` is minutes, not months).
+
+### `wsp.input`
+
+Path to the unsigned Site Profile input file, relative to the Vite project root. Defaults to `"./sp.json"`.
+
+## WSP Signing
+
+Place an unsigned [Site Profile](https://docs.originator-profile.org/en/opb/site-profile/) at `<root>/sp.json`. During build, the plugin signs each WSP in the `sites` array and emits the result to `/.well-known/sp.json`.
+
+The `originators` array is passed through as-is. See the [`UnsignedWebsiteProfile` model](https://github.com/originator-profile/originator-profile/blob/main/packages/model/src/unsigned-website-profile.ts) for the schema of each entry in `sites`.
+
+**Input** (`sp.json`):
+
+```json
+{
+  "originators": [
+    {
+      "core": "eyJ...",
+      "annotations": ["eyJ..."],
+      "media": ["eyJ..."]
+    }
+  ],
+  "sites": [
+    {
+      "@context": [
+        "https://www.w3.org/ns/credentials/v2",
+        "https://originator-profile.org/ns/credentials/v1",
+        "https://originator-profile.org/ns/cip/v1",
+        { "@language": "en" }
+      ],
+      "type": ["VerifiableCredential", "WebsiteProfile"],
+      "issuer": "dns:example.com",
+      "credentialSubject": {
+        "id": "https://example.com",
+        "type": "WebSite",
+        "name": "Example Site",
+        "description": "An example website",
+        "image": {
+          "id": "https://example.com/logo.png"
+        },
+        "allowedOrigin": ["https://example.com"]
+      }
+    }
+  ]
+}
+```
+
+**Output** (`/.well-known/sp.json`):
+
+```json
+{
+  "originators": [
+    {
+      "core": "eyJ...",
+      "annotations": ["eyJ..."],
+      "media": ["eyJ..."]
+    }
+  ],
+  "sites": ["eyJ...signed"]
+}
+```
+
+## CA Signing
+
+Embed unsigned Content Attestations in your HTML as a `<script>` element with type `application/prs.originator-profile.unsigned-cas+json`. During build, the plugin signs each CA and replaces the script with a [Content Attestation Set](https://docs.originator-profile.org/en/opb/content-attestation-set/) using the standard `application/cas+json` type, matching the [embedded method](https://docs.originator-profile.org/en/opb/link-to-html/#embedded-method) in the spec. Any pre-signed `application/cas+json` script in the page is passed through unchanged.
+
+See the [`UnsignedContentAttestation` model](https://github.com/originator-profile/originator-profile/blob/main/packages/model/src/content-attestation/unsigned-content-attestation.ts) for the schema of each entry. The `main` property can be set on any entry to mark it as the main content attestation.
+
+**Input** (HTML):
+
+```html
+<script type="application/prs.originator-profile.unsigned-cas+json">
+  [
+    {
+      "@context": [
+        "https://www.w3.org/ns/credentials/v2",
+        "https://originator-profile.org/ns/credentials/v1",
+        "https://originator-profile.org/ns/cip/v1",
+        { "@language": "en" }
+      ],
+      "type": ["VerifiableCredential", "ContentAttestation"],
+      "issuer": "dns:example.com",
+      "credentialSubject": {
+        "id": "urn:uuid:78550fa7-f846-4e0f-ad5c-8d34461cb95b",
+        "type": "Article",
+        "headline": "Article Title",
+        "image": {
+          "id": "https://example.com/image.png"
+        },
+        "description": "Article description",
+        "author": ["Jane Smith"],
+        "datePublished": "2025-01-01T00:00:00Z"
+      },
+      "allowedUrl": ["https://example.com/articles/1"],
+      "target": [
+        {
+          "type": "TextTargetIntegrity",
+          "cssSelector": "#article",
+          "content": "data:text/html,<article id=\"article\">...</article>"
+        }
+      ],
+      "main": true
+    }
+  ]
+</script>
+```
+
+**Output** (HTML):
+
+```html
+<script type="application/cas+json">
+  [{ "attestation": "eyJ...signed", "main": true }]
+</script>
+```
+
+Entries without `main: true` are serialized as bare JWT strings. Entries with `main: true` are serialized as `{ "attestation": "eyJ...", "main": true }`.
+
+## Limitations
+
+### `ExternalResourceTargetIntegrity` requires manual `integrity` attribute
+
+When using [`ExternalResourceTargetIntegrity`](https://docs.originator-profile.org/en/opb/content-integrity-descriptor/external-resource/), verifiers [locate target elements by matching the `integrity` HTML attribute](https://docs.originator-profile.org/en/opb/content-integrity-descriptor/external-resource/#how-to-identify-element-location). This plugin computes the `integrity` value and includes it in the signed CA, but **does not** automatically add the `integrity` attribute to the corresponding HTML elements.
+
+You must manually set the `integrity` attribute on each `<img>`, `<source>`, or other resource element to match the signed value:
+
+```html
+<img src="https://example.com/image.png" integrity="sha256-..." />
+```
+
+### `VisibleTextTargetIntegrity` may not match browser verification
+
+[`VisibleTextTargetIntegrity`](https://docs.originator-profile.org/en/opb/content-integrity-descriptor/visible-text/) computes integrity from the "as rendered" visible text (`element.innerText`), which depends on browser layout and CSS. This plugin computes integrity at build time using a DOM parser without rendering, so the result may differ from what the browser extension calculates. Use `TextTargetIntegrity` or `HtmlTargetIntegrity` for reliable build-time integrity computation.
+
+### DOM target integrity is computed against the pre-transform HTML
+
+When a DOM target (`HtmlTargetIntegrity`, `TextTargetIntegrity`, `VisibleTextTargetIntegrity`) is used without an explicit `content` field, this plugin uses the HTML page **before** the unsigned CA script is replaced with the signed `application/cas+json` Set. As a result, CSS selectors that match elements outside of the unsigned CA script tag are safe, but selectors that target the script's own content (e.g., `script[type="application/cas+json"]`) will not match the served HTML after build.
+
+## License
+
+Apache-2.0

package/dist/index.d.ts

@@ -0,0 +1,32 @@
+import { Plugin } from 'vite';
+import { z } from 'zod';
+
+declare const OriginatorProfileOptions: z.ZodObject<{
+    issuers: z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        kty: z.ZodString;
+        use: z.ZodOptional<z.ZodString>;
+        key_ops: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        alg: z.ZodOptional<z.ZodString>;
+        kid: z.ZodString;
+        x5u: z.ZodOptional<z.ZodString>;
+        x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        x5t: z.ZodOptional<z.ZodString>;
+        "x5t#S256": z.ZodOptional<z.ZodString>;
+    }, z.core.$loose>]>>;
+    expiresIn: z.ZodOptional<z.ZodString>;
+    wsp: z.ZodOptional<z.ZodObject<{
+        input: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+type OriginatorProfileOptions = z.infer<typeof OriginatorProfileOptions>;
+
+declare function isLocalPath(value: string): boolean;
+declare function fileToDataUrl(filePath: string): string;
+declare function resolveLocalContent(obj: {
+    content?: string | string[];
+} | undefined, baseDir: string): void;
+declare function parseExpiresIn(expiresIn: string, from: Date): Date;
+
+declare function originatorProfile(options: OriginatorProfileOptions): Plugin;
+
+export { fileToDataUrl, isLocalPath, originatorProfile, parseExpiresIn, resolveLocalContent };

package/dist/index.js

@@ -0,0 +1,252 @@
+import { readFileSync } from 'node:fs';
+import { resolve, dirname } from 'node:path';
+import rehypeParse from 'rehype-parse';
+import { unified } from 'unified';
+import { visit } from 'unist-util-visit';
+import { Jwk, UnsignedWebsiteProfile, OriginatorProfile, OpId } from '@originator-profile/model';
+import { addMilliseconds } from 'date-fns';
+import mime from 'mime';
+import ms from 'ms';
+import { ContentAttestation, WebsiteProfile } from '@originator-profile/opvc';
+import { z } from 'zod';
+
+function isLocalPath(value) {
+  return !value.startsWith("data:") && !/^https?:\/\//.test(value);
+}
+function fileToDataUrl(filePath) {
+  const bytes = readFileSync(filePath);
+  const mimeType = mime.getType(filePath) ?? "application/octet-stream";
+  return `data:${mimeType};base64,${bytes.toString("base64")}`;
+}
+function resolveLocalContent(obj, baseDir) {
+  if (!obj?.content) return;
+  if (typeof obj.content === "string") {
+    if (isLocalPath(obj.content)) {
+      obj.content = fileToDataUrl(resolve(baseDir, obj.content));
+    }
+  } else {
+    obj.content = obj.content.map(
+      (c) => isLocalPath(c) ? fileToDataUrl(resolve(baseDir, c)) : c
+    );
+  }
+}
+function parseExpiresIn(expiresIn, from) {
+  let millis;
+  try {
+    millis = ms(expiresIn);
+  } catch {
+    millis = void 0;
+  }
+  if (typeof millis !== "number") {
+    throw new Error(
+      `Invalid expiresIn: "${expiresIn}". See https://github.com/vercel/ms for accepted formats (e.g., "1y", "30d", "12h").`
+    );
+  }
+  return addMilliseconds(from, millis);
+}
+function parseKey(value, issuer) {
+  if (typeof value !== "string") return value;
+  const context = issuer ? ` for issuer "${issuer}"` : "";
+  let parsed;
+  try {
+    parsed = JSON.parse(value);
+  } catch {
+    throw new Error(`Invalid signing key${context}: expected valid JSON`);
+  }
+  const result = Jwk.safeParse(parsed);
+  if (!result.success) {
+    throw new Error(
+      `Invalid signing key${context}: ${result.error.issues[0].message}`
+    );
+  }
+  return result.data;
+}
+function resolveKey(issuers, issuer) {
+  const key = issuers[issuer];
+  if (!key) {
+    throw new Error(
+      `No signing key found for issuer "${issuer}". Registered issuers: ${Object.keys(issuers).join(", ")}`
+    );
+  }
+  return key;
+}
+
+const DOM_TARGET_TYPES = /* @__PURE__ */ new Set([
+  "HtmlTargetIntegrity",
+  "TextTargetIntegrity",
+  "VisibleTextTargetIntegrity"
+]);
+async function signCas(entries, ctx, baseDir, html) {
+  const htmlDataUrl = html ? `data:text/html,${encodeURIComponent(html)}` : void 0;
+  return await Promise.all(
+    entries.map(async (entry) => {
+      const { main, ...uca } = structuredClone(entry);
+      resolveLocalContent(
+        uca.credentialSubject.image,
+        baseDir
+      );
+      for (const target of uca.target) {
+        resolveLocalContent(target, baseDir);
+        if (htmlDataUrl && DOM_TARGET_TYPES.has(target.type) && !target.integrity && !target.content) {
+          target.content = htmlDataUrl;
+        }
+      }
+      const key = resolveKey(ctx.issuers, uca.issuer);
+      const jwt = await ContentAttestation.sign(uca, key, {
+        issuedAt: ctx.issuedAt,
+        expiredAt: ctx.expiredAt
+      });
+      return main ? { attestation: jwt, main: true } : jwt;
+    })
+  );
+}
+
+const SiteProfileInput = z.object({
+  originators: z.array(OriginatorProfile).min(1, "originators must not be empty"),
+  sites: z.array(UnsignedWebsiteProfile).min(1, "sites must not be empty")
+});
+async function signSiteProfile(input, ctx, baseDir) {
+  const signedSites = await Promise.all(
+    input.sites.map(async (originalUwsp) => {
+      const uwsp = structuredClone(originalUwsp);
+      resolveLocalContent(
+        uwsp.credentialSubject.image,
+        baseDir
+      );
+      const key = resolveKey(ctx.issuers, uwsp.issuer);
+      return await WebsiteProfile.sign(uwsp, key, {
+        issuedAt: ctx.issuedAt,
+        expiredAt: ctx.expiredAt
+      });
+    })
+  );
+  return {
+    originators: input.originators,
+    sites: signedSites
+  };
+}
+
+const ExpiresIn = z.string().refine(
+  (v) => {
+    try {
+      return typeof ms(v) === "number";
+    } catch {
+      return false;
+    }
+  },
+  {
+    message: 'Invalid duration. See https://github.com/vercel/ms for accepted formats (e.g., "1y", "30d", "12h").'
+  }
+);
+const SigningKey = z.union([z.string(), Jwk]);
+const OriginatorProfileOptions = z.object({
+  issuers: z.record(OpId, SigningKey).refine((v) => Object.keys(v).length > 0, {
+    message: "At least one issuer is required"
+  }),
+  expiresIn: ExpiresIn.optional(),
+  wsp: z.object({
+    input: z.string().optional()
+  }).optional()
+});
+
+async function buildSiteProfile(root, wspInput, signingCtx) {
+  const inputPath = resolve(root, wspInput ?? "./sp.json");
+  const inputDir = dirname(inputPath);
+  const input = JSON.parse(readFileSync(inputPath, "utf-8"));
+  return signSiteProfile(SiteProfileInput.parse(input), signingCtx, inputDir);
+}
+const UNSIGNED_CAS_TYPE = "application/prs.originator-profile.unsigned-cas+json";
+const SIGNED_CAS_TYPE = "application/cas+json";
+const htmlParser = unified().use(rehypeParse);
+function findUnsignedCasScripts(html) {
+  const tree = htmlParser.parse(html);
+  const matches = [];
+  visit(tree, "element", (node) => {
+    if (node.tagName !== "script") return;
+    if (node.properties.type !== UNSIGNED_CAS_TYPE) return;
+    const startOffset = node.position?.start.offset;
+    const endOffset = node.position?.end.offset;
+    if (startOffset === void 0 || endOffset === void 0) return;
+    const jsonContent = node.children.map((c) => c.type === "text" ? c.value : "").join("");
+    matches.push({ startOffset, endOffset, jsonContent });
+  });
+  return matches;
+}
+function escapeForScript(json) {
+  return json.replace(/<\//g, "<\\/");
+}
+function originatorProfile(options) {
+  OriginatorProfileOptions.parse(options);
+  let root;
+  let issuers;
+  let issuedAt;
+  let expiredAt;
+  return {
+    name: "originator-profile",
+    configResolved(config) {
+      root = config.root;
+      issuedAt = /* @__PURE__ */ new Date();
+      expiredAt = parseExpiresIn(options.expiresIn ?? "1y", issuedAt);
+      issuers = Object.fromEntries(
+        Object.entries(options.issuers).map(([id, key]) => [
+          id,
+          parseKey(key, id)
+        ])
+      );
+    },
+    configureServer(server) {
+      server.middlewares.use(
+        "/.well-known/sp.json",
+        async (_req, res, next) => {
+          try {
+            const output = await buildSiteProfile(root, options.wsp?.input, {
+              issuers,
+              issuedAt,
+              expiredAt
+            });
+            res.setHeader("Content-Type", "application/json");
+            res.end(JSON.stringify(output));
+          } catch (err) {
+            next(err);
+          }
+        }
+      );
+    },
+    async transformIndexHtml(html) {
+      const matches = findUnsignedCasScripts(html);
+      if (matches.length === 0) return html;
+      const signingCtx = { issuers, issuedAt, expiredAt };
+      const replacements = await Promise.all(
+        matches.map(async (m) => {
+          const entries = JSON.parse(m.jsonContent);
+          const signed = await signCas(entries, signingCtx, root, html);
+          return {
+            startOffset: m.startOffset,
+            endOffset: m.endOffset,
+            replacement: `<script type="${SIGNED_CAS_TYPE}">${escapeForScript(JSON.stringify(signed))}<\/script>`
+          };
+        })
+      );
+      replacements.sort((a, b) => b.startOffset - a.startOffset);
+      let result = html;
+      for (const { startOffset, endOffset, replacement } of replacements) {
+        result = result.slice(0, startOffset) + replacement + result.slice(endOffset);
+      }
+      return result;
+    },
+    async generateBundle() {
+      const output = await buildSiteProfile(root, options.wsp?.input, {
+        issuers,
+        issuedAt,
+        expiredAt
+      });
+      this.emitFile({
+        type: "asset",
+        fileName: ".well-known/sp.json",
+        source: JSON.stringify(output)
+      });
+    }
+  };
+}
+
+export { fileToDataUrl, isLocalPath, originatorProfile, parseExpiresIn, resolveLocalContent };

package/package.json

@@ -1,10 +1,57 @@
 {
   "name": "@originator-profile/vite-plugin",
-  "version": "0.0.1",
-  "description": "OIDC trusted publishing setup package for @originator-profile/vite-plugin",
-  "keywords": [
-    "oidc",
-    "trusted-publishing",
-    "setup"
-  ]
-}
+  "version": "0.6.0-beta.1",
+  "license": "Apache-2.0",
+  "homepage": "https://docs.originator-profile.org",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/originator-profile/originator-profile.git",
+    "directory": "packages/vite-plugin"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "exports": {
+    "types": "./dist/index.d.ts",
+    "default": "./dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE",
+    "NOTICE"
+  ],
+  "dependencies": {
+    "date-fns": "^4.1.0",
+    "mime": "^4.1.0",
+    "ms": "^2.1.3",
+    "rehype-parse": "^9.0.1",
+    "unified": "^11.0.5",
+    "unist-util-visit": "^5.1.0",
+    "zod": "^4.3.6",
+    "@originator-profile/model": "0.6.0-beta.1",
+    "@originator-profile/opvc": "0.6.0-beta.1"
+  },
+  "peerDependencies": {
+    "vite": "^6.0.0 || ^7.0.0 || ^8.0.0"
+  },
+  "devDependencies": {
+    "@types/ms": "2.1.0",
+    "eslint": "10.2.0",
+    "jose": "6.2.2",
+    "pkgroll": "2.27.0",
+    "typescript": "6.0.2",
+    "vite": "8.0.8",
+    "vitest": "4.1.4",
+    "eslint-config-originator-profile": "0.6.0-beta.1",
+    "@originator-profile/cryptography": "0.6.0-beta.1",
+    "@originator-profile/tsconfig": "0.6.0-beta.1"
+  },
+  "scripts": {
+    "build": "pkgroll --clean-dist",
+    "test": "vitest run",
+    "lint": "eslint --fix .",
+    "type-check": "tsc --noEmit"
+  }
+}