@owf/eudi-lote 0.0.0

package/dist/index.mjs

@@ -0,0 +1,573 @@
+import { IdentityException, base64urlEncode } from "@owf/identity-common";
+import { z } from "zod";
+import { parseCertificate } from "@owf/crypto";
+//#region src/lote-exception.ts
+/**
+* LoTEException is a custom error class for LoTE-related exceptions.
+*/
+var LoTEException = class LoTEException extends IdentityException {
+	constructor(message, details) {
+		super(message, details);
+		Object.setPrototypeOf(this, LoTEException.prototype);
+		this.name = "LoTEException";
+	}
+};
+//#endregion
+//#region src/schemas.ts
+/**
+* LoTE Zod Schemas
+*
+* Zod schemas for ETSI TS 119 602 (LoTE - List of Trusted Entities) format.
+* Types are derived from these schemas via z.infer<>.
+*
+* @see https://www.etsi.org/deliver/etsi_ts/119600_119699/119602/01.01.01_60/ts_119602v010101p.pdf
+*/
+const LocalizedStringSchema = z.object({
+	lang: z.string().min(1),
+	value: z.string().min(1)
+});
+const LocalizedURISchema = z.object({
+	lang: z.string().min(1),
+	uriValue: z.string().url()
+});
+const PostalAddressSchema = z.object({
+	lang: z.string().min(1),
+	StreetAddress: z.string(),
+	Locality: z.string(),
+	StateOrProvince: z.string().optional(),
+	PostalCode: z.string(),
+	Country: z.string().length(2)
+});
+const SchemeOperatorAddressSchema = z.object({
+	SchemeOperatorPostalAddress: z.array(PostalAddressSchema),
+	SchemeOperatorElectronicAddress: z.array(LocalizedURISchema)
+});
+const TrustedEntityAddressSchema = z.object({
+	TEPostalAddress: z.array(PostalAddressSchema),
+	TEElectronicAddress: z.array(LocalizedURISchema)
+});
+const PkiObjectSchema = z.object({
+	encoding: z.string().optional(),
+	specRef: z.string().optional(),
+	val: z.string().min(1)
+});
+const X509CertificateRefSchema = PkiObjectSchema.extend({
+	encoding: z.literal("urn:ietf:params:tls-cert-type:x509").optional(),
+	specRef: z.literal("RFC5280").optional()
+});
+const JWKPublicKeySchema = z.object({
+	kty: z.enum([
+		"RSA",
+		"EC",
+		"OKP"
+	]),
+	kid: z.string().optional(),
+	use: z.enum(["sig", "enc"]).optional(),
+	alg: z.string().optional()
+}).passthrough();
+const ServiceDigitalIdentitySchema = z.object({
+	X509Certificates: z.array(X509CertificateRefSchema).optional(),
+	X509SubjectNames: z.array(z.string()).optional(),
+	PublicKeyValues: z.array(JWKPublicKeySchema).optional(),
+	X509SKIs: z.array(z.string()).optional(),
+	OtherIds: z.array(z.string()).optional()
+}).refine((id) => id.X509Certificates && id.X509Certificates.length > 0 || id.X509SubjectNames && id.X509SubjectNames.length > 0 || id.PublicKeyValues && id.PublicKeyValues.length > 0 || id.X509SKIs && id.X509SKIs.length > 0 || id.OtherIds && id.OtherIds.length > 0, { message: "At least one digital identity type must be provided" });
+const ServiceSupplyPointSchema = z.object({
+	ServiceType: z.string(),
+	uriValue: z.string()
+});
+const ServiceInformationSchema = z.object({
+	ServiceName: z.array(LocalizedStringSchema).min(1),
+	ServiceDigitalIdentity: ServiceDigitalIdentitySchema,
+	ServiceTypeIdentifier: z.string().url().optional(),
+	ServiceStatus: z.string().url().optional(),
+	StatusStartingTime: z.string().datetime().optional(),
+	SchemeServiceDefinitionURI: z.array(LocalizedURISchema).optional(),
+	ServiceSupplyPoints: z.array(ServiceSupplyPointSchema).optional(),
+	ServiceDefinitionURI: z.array(LocalizedURISchema).optional(),
+	ServiceInformationExtensions: z.array(z.unknown()).optional()
+});
+const ServiceHistoryInstanceSchema = z.object({
+	ServiceName: z.array(LocalizedStringSchema).min(1),
+	ServiceDigitalIdentity: ServiceDigitalIdentitySchema,
+	ServiceStatus: z.string().url(),
+	StatusStartingTime: z.string().datetime(),
+	ServiceTypeIdentifier: z.string().url().optional(),
+	ServiceInformationExtensions: z.array(z.unknown()).optional()
+});
+const TrustedEntityServiceSchema = z.object({
+	ServiceInformation: ServiceInformationSchema,
+	ServiceHistory: z.array(ServiceHistoryInstanceSchema).optional()
+});
+const TrustedEntityInformationSchema = z.object({
+	TEName: z.array(LocalizedStringSchema).min(1),
+	TETradeName: z.array(LocalizedStringSchema).optional(),
+	TEAddress: TrustedEntityAddressSchema,
+	TEInformationURI: z.array(LocalizedURISchema).optional(),
+	TEInformationExtensions: z.array(z.unknown()).optional()
+});
+const TrustedEntitySchema = z.object({
+	TrustedEntityInformation: TrustedEntityInformationSchema,
+	TrustedEntityServices: z.array(TrustedEntityServiceSchema).min(1)
+});
+const PolicyOrLegalNoticeSchema = z.object({
+	LoTEPolicy: LocalizedURISchema.optional(),
+	LoTELegalNotice: LocalizedStringSchema.optional()
+});
+const LoTEQualifierSchema = z.object({
+	LoTEType: z.string().url(),
+	SchemeOperatorName: z.array(LocalizedStringSchema).min(1),
+	SchemeTypeCommunityRules: z.array(LocalizedURISchema).optional(),
+	SchemeTerritory: z.string().length(2).optional(),
+	MimeType: z.string().min(1)
+});
+const OtherLoTEPointerSchema = z.object({
+	LoTELocation: z.string().url(),
+	ServiceDigitalIdentities: z.array(ServiceDigitalIdentitySchema).min(1),
+	LoTEQualifiers: z.array(LoTEQualifierSchema).min(1)
+});
+const ListAndSchemeInformationSchema = z.object({
+	LoTEVersionIdentifier: z.number().int(),
+	LoTESequenceNumber: z.number().int(),
+	LoTEType: z.string().url().optional(),
+	SchemeOperatorName: z.array(LocalizedStringSchema).min(1),
+	SchemeOperatorAddress: SchemeOperatorAddressSchema.optional(),
+	SchemeName: z.array(LocalizedStringSchema).optional(),
+	SchemeInformationURI: z.array(LocalizedURISchema).optional(),
+	StatusDeterminationApproach: z.string().url().optional(),
+	SchemeTypeCommunityRules: z.array(LocalizedURISchema).optional(),
+	SchemeTerritory: z.string().length(2).optional(),
+	PolicyOrLegalNotice: z.array(PolicyOrLegalNoticeSchema).optional(),
+	HistoricalInformationPeriod: z.number().optional(),
+	PointersToOtherLoTE: z.array(OtherLoTEPointerSchema).optional(),
+	ListIssueDateTime: z.string().datetime(),
+	NextUpdate: z.string().datetime(),
+	DistributionPoints: z.array(z.string()).optional(),
+	SchemeExtensions: z.array(z.unknown()).optional()
+});
+const LoTESchema = z.object({
+	ListAndSchemeInformation: ListAndSchemeInformationSchema,
+	TrustedEntitiesList: z.array(TrustedEntitySchema)
+});
+const LoTEDocumentSchema = z.object({ LoTE: LoTESchema });
+//#endregion
+//#region src/builders.ts
+/**
+* Builder for creating TrustedEntity objects with a fluent API
+*/
+var TrustedEntityBuilder = class {
+	constructor() {
+		this.info = {};
+		this.services = [];
+	}
+	/**
+	* Set the entity name
+	*/
+	name(value, lang = "en") {
+		this.info.TEName = this.info.TEName ?? [];
+		this.info.TEName.push({
+			lang,
+			value
+		});
+		return this;
+	}
+	/**
+	* Set the trade name
+	*/
+	tradeName(value, lang = "en") {
+		this.info.TETradeName = this.info.TETradeName ?? [];
+		this.info.TETradeName.push({
+			lang,
+			value
+		});
+		return this;
+	}
+	/**
+	* Set the postal address
+	*/
+	postalAddress(address, lang = "en") {
+		this.info.TEAddress = this.info.TEAddress ?? {
+			TEPostalAddress: [],
+			TEElectronicAddress: []
+		};
+		this.info.TEAddress.TEPostalAddress.push({
+			...address,
+			lang
+		});
+		return this;
+	}
+	/**
+	* Add an electronic address (email)
+	*/
+	email(email, lang = "en") {
+		this.info.TEAddress = this.info.TEAddress ?? {
+			TEPostalAddress: [],
+			TEElectronicAddress: []
+		};
+		this.info.TEAddress.TEElectronicAddress.push({
+			lang,
+			uriValue: email.startsWith("mailto:") ? email : `mailto:${email}`
+		});
+		return this;
+	}
+	/**
+	* Add an information URI
+	*/
+	infoUri(uri, lang = "en") {
+		this.info.TEInformationURI = this.info.TEInformationURI ?? [];
+		this.info.TEInformationURI.push({
+			lang,
+			uriValue: uri
+		});
+		return this;
+	}
+	/**
+	* Add a website URL as an electronic address
+	*/
+	website(url, lang = "en") {
+		this.info.TEAddress = this.info.TEAddress ?? {
+			TEPostalAddress: [],
+			TEElectronicAddress: []
+		};
+		this.info.TEAddress.TEElectronicAddress.push({
+			lang,
+			uriValue: url.startsWith("http") ? url : `https://${url}`
+		});
+		return this;
+	}
+	/**
+	* Add custom extensions
+	*/
+	addExtension(extension) {
+		this.info.TEInformationExtensions = this.info.TEInformationExtensions ?? [];
+		this.info.TEInformationExtensions.push(extension);
+		return this;
+	}
+	/**
+	* Add a service to the entity
+	*/
+	addService(service) {
+		this.services.push(service);
+		return this;
+	}
+	/**
+	* Build the TrustedEntity object
+	*/
+	build() {
+		const result = TrustedEntitySchema.safeParse({
+			TrustedEntityInformation: this.info,
+			TrustedEntityServices: this.services
+		});
+		if (!result.success) throw new LoTEException(`Invalid TrustedEntity:\n${result.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("\n")}`);
+		return result.data;
+	}
+};
+/**
+* Builder for creating TrustedEntityService objects
+*/
+var ServiceBuilder = class {
+	constructor() {
+		this.info = {};
+		this.history = [];
+	}
+	/**
+	* Set the service name
+	*/
+	name(value, lang = "en") {
+		this.info.ServiceName = this.info.ServiceName ?? [];
+		this.info.ServiceName.push({
+			lang,
+			value
+		});
+		return this;
+	}
+	/**
+	* Set the service type identifier
+	*/
+	type(typeUri) {
+		this.info.ServiceTypeIdentifier = typeUri;
+		return this;
+	}
+	/**
+	* Set the service status
+	*/
+	status(statusUri, startingTime) {
+		this.info.ServiceStatus = statusUri;
+		this.info.StatusStartingTime = startingTime?.toISOString() ?? (/* @__PURE__ */ new Date()).toISOString();
+		return this;
+	}
+	/**
+	* Add an X.509 certificate to the digital identity
+	*/
+	addCertificate(certBase64) {
+		this.info.ServiceDigitalIdentity = this.info.ServiceDigitalIdentity ?? {};
+		this.info.ServiceDigitalIdentity.X509Certificates = this.info.ServiceDigitalIdentity.X509Certificates ?? [];
+		this.info.ServiceDigitalIdentity.X509Certificates.push({
+			encoding: "urn:ietf:params:tls-cert-type:x509",
+			specRef: "RFC5280",
+			val: certBase64
+		});
+		return this;
+	}
+	/**
+	* Add an X.509 subject name (DN format) to the digital identity
+	*/
+	addX509SubjectName(subjectName) {
+		this.info.ServiceDigitalIdentity = this.info.ServiceDigitalIdentity ?? {};
+		this.info.ServiceDigitalIdentity.X509SubjectNames = this.info.ServiceDigitalIdentity.X509SubjectNames ?? [];
+		this.info.ServiceDigitalIdentity.X509SubjectNames.push(subjectName);
+		return this;
+	}
+	/**
+	* Add an X.509 Subject Key Identifier (base64-encoded) to the digital identity
+	*/
+	addX509SKI(ski) {
+		this.info.ServiceDigitalIdentity = this.info.ServiceDigitalIdentity ?? {};
+		this.info.ServiceDigitalIdentity.X509SKIs = this.info.ServiceDigitalIdentity.X509SKIs ?? [];
+		this.info.ServiceDigitalIdentity.X509SKIs.push(ski);
+		return this;
+	}
+	/**
+	* Add another identifier to the digital identity
+	*/
+	addOtherId(id) {
+		this.info.ServiceDigitalIdentity = this.info.ServiceDigitalIdentity ?? {};
+		this.info.ServiceDigitalIdentity.OtherIds = this.info.ServiceDigitalIdentity.OtherIds ?? [];
+		this.info.ServiceDigitalIdentity.OtherIds.push(id);
+		return this;
+	}
+	/**
+	* Add a public key (JWK) to the digital identity
+	*/
+	addPublicKey(jwk) {
+		this.info.ServiceDigitalIdentity = this.info.ServiceDigitalIdentity ?? {};
+		this.info.ServiceDigitalIdentity.PublicKeyValues = this.info.ServiceDigitalIdentity.PublicKeyValues ?? [];
+		this.info.ServiceDigitalIdentity.PublicKeyValues.push(jwk);
+		return this;
+	}
+	/**
+	* Add a service endpoint
+	*/
+	addEndpoint(type, uri) {
+		this.info.ServiceSupplyPoints = this.info.ServiceSupplyPoints ?? [];
+		this.info.ServiceSupplyPoints.push({
+			ServiceType: type,
+			uriValue: uri
+		});
+		return this;
+	}
+	/**
+	* Add a service definition URI
+	*/
+	addDefinitionUri(uri, lang = "en") {
+		this.info.ServiceDefinitionURI = this.info.ServiceDefinitionURI ?? [];
+		this.info.ServiceDefinitionURI.push({
+			lang,
+			uriValue: uri
+		});
+		return this;
+	}
+	/**
+	* Add custom service information extensions
+	*/
+	addExtension(extension) {
+		this.info.ServiceInformationExtensions = this.info.ServiceInformationExtensions ?? [];
+		this.info.ServiceInformationExtensions.push(extension);
+		return this;
+	}
+	/**
+	* Add a historical service instance
+	*/
+	addHistoryEntry(historyInstance) {
+		this.history.push(historyInstance);
+		return this;
+	}
+	/**
+	* Build the TrustedEntityService object
+	*/
+	build() {
+		const data = { ServiceInformation: this.info };
+		if (this.history.length > 0) data.ServiceHistory = this.history;
+		const result = TrustedEntityServiceSchema.safeParse(data);
+		if (!result.success) throw new LoTEException(`Invalid TrustedEntityService:\n${result.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("\n")}`);
+		return result.data;
+	}
+};
+/**
+* Create a new TrustedEntityBuilder
+*/
+function trustedEntity() {
+	return new TrustedEntityBuilder();
+}
+/**
+* Create a new ServiceBuilder
+*/
+function service() {
+	return new ServiceBuilder();
+}
+//#endregion
+//#region src/signer.ts
+/**
+* Sign a LoTE document
+*
+* @param options - Signing options including LoTE document, key ID, and signer function
+* @returns The signed LoTE document as a JWS
+*
+* @example Using a local key via @owf/crypto:
+* ```typescript
+* import { ES256 } from '@owf/crypto';
+* import { signLoTE } from '@owf/eudi-lote';
+*
+* const { privateKey } = await ES256.generateKeyPair();
+* const signer = await ES256.getSigner(privateKey);
+* const signed = await signLoTE({
+*   lote: myLoTE,
+*   keyId: 'lote-signer-2025',
+*   signer,
+* });
+* ```
+*
+* @example Using an external KMS:
+* ```typescript
+* const signed = await signLoTE({
+*   lote: myLoTE,
+*   keyId: 'lote-signer-2025',
+*   signer: async (data) => myKms.sign('ES256', data),
+* });
+* ```
+*/
+async function signLoTE(options) {
+	const { lote, keyId, algorithm = "ES256", certificates, signer } = options;
+	const header = {
+		alg: algorithm,
+		typ: "trustlist+jwt",
+		kid: keyId
+	};
+	if (certificates && certificates.length > 0) header.x5c = certificates.map(parseCertificate);
+	const signingInput = `${base64urlEncode(JSON.stringify(header))}.${base64urlEncode(JSON.stringify(lote))}`;
+	return {
+		jws: `${signingInput}.${await signer(signingInput)}`,
+		header: {
+			alg: algorithm,
+			typ: "trustlist+jwt",
+			kid: keyId,
+			x5c: header.x5c
+		},
+		payload: lote
+	};
+}
+/**
+* Create a new LoTE document with required structure
+* Per ETSI TS 119 602, only SchemeOperatorName, ListIssueDateTime and NextUpdate are required
+*/
+function createLoTE(schemeInfo, entities = []) {
+	const now = /* @__PURE__ */ new Date();
+	const nextYear = new Date(now);
+	nextYear.setFullYear(nextYear.getFullYear() + 1);
+	return { LoTE: {
+		ListAndSchemeInformation: {
+			LoTEVersionIdentifier: schemeInfo.LoTEVersionIdentifier ?? 1,
+			LoTESequenceNumber: schemeInfo.LoTESequenceNumber ?? 1,
+			LoTEType: schemeInfo.LoTEType,
+			SchemeOperatorName: schemeInfo.SchemeOperatorName,
+			SchemeOperatorAddress: schemeInfo.SchemeOperatorAddress,
+			SchemeName: schemeInfo.SchemeName,
+			SchemeInformationURI: schemeInfo.SchemeInformationURI,
+			StatusDeterminationApproach: schemeInfo.StatusDeterminationApproach,
+			SchemeTypeCommunityRules: schemeInfo.SchemeTypeCommunityRules,
+			SchemeTerritory: schemeInfo.SchemeTerritory,
+			PolicyOrLegalNotice: schemeInfo.PolicyOrLegalNotice,
+			HistoricalInformationPeriod: schemeInfo.HistoricalInformationPeriod,
+			PointersToOtherLoTE: schemeInfo.PointersToOtherLoTE,
+			ListIssueDateTime: schemeInfo.ListIssueDateTime ?? now.toISOString(),
+			NextUpdate: schemeInfo.NextUpdate ?? nextYear.toISOString(),
+			DistributionPoints: schemeInfo.DistributionPoints,
+			SchemeExtensions: schemeInfo.SchemeExtensions
+		},
+		TrustedEntitiesList: entities
+	} };
+}
+/**
+* Increment the sequence number and update timestamps for a new version
+*/
+function updateLoTEVersion(lote) {
+	const now = /* @__PURE__ */ new Date();
+	const nextYear = new Date(now);
+	nextYear.setFullYear(nextYear.getFullYear() + 1);
+	return { LoTE: {
+		...lote.LoTE,
+		ListAndSchemeInformation: {
+			...lote.LoTE.ListAndSchemeInformation,
+			LoTESequenceNumber: lote.LoTE.ListAndSchemeInformation.LoTESequenceNumber + 1,
+			ListIssueDateTime: now.toISOString(),
+			NextUpdate: nextYear.toISOString()
+		}
+	} };
+}
+/**
+* Add a trusted entity to a LoTE document
+*/
+function addTrustedEntity(lote, entity) {
+	return { LoTE: {
+		...lote.LoTE,
+		TrustedEntitiesList: [...lote.LoTE.TrustedEntitiesList, entity]
+	} };
+}
+/**
+* Remove a trusted entity from a LoTE document by name
+*/
+function removeTrustedEntity(lote, entityName) {
+	return { LoTE: {
+		...lote.LoTE,
+		TrustedEntitiesList: lote.LoTE.TrustedEntitiesList.filter((e) => !e.TrustedEntityInformation.TEName.some((n) => n.value === entityName))
+	} };
+}
+//#endregion
+//#region src/validator.ts
+/**
+* LoTE Validator
+*
+* Runtime validation for ETSI TS 119 602 LoTE documents using Zod schemas.
+*/
+/**
+* Validate a LoTE document against ETSI TS 119 602 schema
+*
+* @param loteDocument - The LoTE document to validate
+* @returns Validation result with errors if invalid
+*
+* @example
+* ```typescript
+* const result = validateLoTE(myLoTE);
+* if (!result.valid) {
+*   console.error('Validation errors:', result.errors);
+* }
+* ```
+*/
+function validateLoTE(loteDocument) {
+	const result = LoTEDocumentSchema.safeParse(loteDocument);
+	if (result.success) return {
+		valid: true,
+		errors: []
+	};
+	return {
+		valid: false,
+		errors: result.error.issues.map((issue) => ({
+			path: issue.path.join("."),
+			message: issue.message
+		}))
+	};
+}
+/**
+* Assert that a LoTE document is valid, throwing if not
+*
+* @param loteDocument - The LoTE document to validate
+* @throws Error if validation fails
+*/
+function assertValidLoTE(loteDocument) {
+	const result = validateLoTE(loteDocument);
+	if (!result.valid) throw new LoTEException(`Invalid LoTE document:\n${result.errors.map((e) => `${e.path}: ${e.message}`).join("\n")}`);
+}
+//#endregion
+export { JWKPublicKeySchema, ListAndSchemeInformationSchema, LoTEDocumentSchema, LoTEException, LoTEQualifierSchema, LoTESchema, LocalizedStringSchema, LocalizedURISchema, OtherLoTEPointerSchema, PkiObjectSchema, PolicyOrLegalNoticeSchema, PostalAddressSchema, SchemeOperatorAddressSchema, ServiceBuilder, ServiceDigitalIdentitySchema, ServiceHistoryInstanceSchema, ServiceInformationSchema, ServiceSupplyPointSchema, TrustedEntityAddressSchema, TrustedEntityBuilder, TrustedEntityInformationSchema, TrustedEntitySchema, TrustedEntityServiceSchema, X509CertificateRefSchema, addTrustedEntity, assertValidLoTE, createLoTE, removeTrustedEntity, service, signLoTE, trustedEntity, updateLoTEVersion, validateLoTE };
+
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../src/lote-exception.ts","../src/schemas.ts","../src/builders.ts","../src/signer.ts","../src/validator.ts"],"sourcesContent":["import { IdentityException } from '@owf/identity-common'\n\n/**\n * LoTEException is a custom error class for LoTE-related exceptions.\n */\nexport class LoTEException extends IdentityException {\n  constructor(message: string, details?: unknown) {\n    super(message, details)\n    Object.setPrototypeOf(this, LoTEException.prototype)\n    this.name = 'LoTEException'\n  }\n}\n","/**\n * LoTE Zod Schemas\n *\n * Zod schemas for ETSI TS 119 602 (LoTE - List of Trusted Entities) format.\n * Types are derived from these schemas via z.infer<>.\n *\n * @see https://www.etsi.org/deliver/etsi_ts/119600_119699/119602/01.01.01_60/ts_119602v010101p.pdf\n */\n\nimport { z } from 'zod'\n\n// ============================================================================\n// Localized Value Schemas\n// ============================================================================\n\nexport const LocalizedStringSchema = z.object({\n  lang: z.string().min(1),\n  value: z.string().min(1),\n})\n\nexport const LocalizedURISchema = z.object({\n  lang: z.string().min(1),\n  uriValue: z.string().url(),\n})\n\n// ============================================================================\n// Address Schemas\n// ============================================================================\n\nexport const PostalAddressSchema = z.object({\n  lang: z.string().min(1),\n  StreetAddress: z.string(),\n  Locality: z.string(),\n  StateOrProvince: z.string().optional(),\n  PostalCode: z.string(),\n  Country: z.string().length(2),\n})\n\nexport const SchemeOperatorAddressSchema = z.object({\n  SchemeOperatorPostalAddress: z.array(PostalAddressSchema),\n  SchemeOperatorElectronicAddress: z.array(LocalizedURISchema),\n})\n\nexport const TrustedEntityAddressSchema = z.object({\n  TEPostalAddress: z.array(PostalAddressSchema),\n  TEElectronicAddress: z.array(LocalizedURISchema),\n})\n\n// ============================================================================\n// Digital Identity Schemas\n// ============================================================================\n\nexport const PkiObjectSchema = z.object({\n  encoding: z.string().optional(),\n  specRef: z.string().optional(),\n  val: z.string().min(1),\n})\n\nexport const X509CertificateRefSchema = PkiObjectSchema.extend({\n  encoding: z.literal('urn:ietf:params:tls-cert-type:x509').optional(),\n  specRef: z.literal('RFC5280').optional(),\n})\n\nexport const JWKPublicKeySchema = z\n  .object({\n    kty: z.enum(['RSA', 'EC', 'OKP']),\n    kid: z.string().optional(),\n    use: z.enum(['sig', 'enc']).optional(),\n    alg: z.string().optional(),\n  })\n  .passthrough()\n\nexport const ServiceDigitalIdentitySchema = z\n  .object({\n    X509Certificates: z.array(X509CertificateRefSchema).optional(),\n    X509SubjectNames: z.array(z.string()).optional(),\n    PublicKeyValues: z.array(JWKPublicKeySchema).optional(),\n    X509SKIs: z.array(z.string()).optional(),\n    OtherIds: z.array(z.string()).optional(),\n  })\n  .refine(\n    (id) =>\n      (id.X509Certificates && id.X509Certificates.length > 0) ||\n      (id.X509SubjectNames && id.X509SubjectNames.length > 0) ||\n      (id.PublicKeyValues && id.PublicKeyValues.length > 0) ||\n      (id.X509SKIs && id.X509SKIs.length > 0) ||\n      (id.OtherIds && id.OtherIds.length > 0),\n    { message: 'At least one digital identity type must be provided' }\n  )\n\n// ============================================================================\n// Service Schemas\n// ============================================================================\n\nexport const ServiceSupplyPointSchema = z.object({\n  ServiceType: z.string(),\n  uriValue: z.string(),\n})\n\nexport const ServiceInformationSchema = z.object({\n  ServiceName: z.array(LocalizedStringSchema).min(1),\n  ServiceDigitalIdentity: ServiceDigitalIdentitySchema,\n  ServiceTypeIdentifier: z.string().url().optional(),\n  ServiceStatus: z.string().url().optional(),\n  StatusStartingTime: z.string().datetime().optional(),\n  SchemeServiceDefinitionURI: z.array(LocalizedURISchema).optional(),\n  ServiceSupplyPoints: z.array(ServiceSupplyPointSchema).optional(),\n  ServiceDefinitionURI: z.array(LocalizedURISchema).optional(),\n  ServiceInformationExtensions: z.array(z.unknown()).optional(),\n})\n\nexport const ServiceHistoryInstanceSchema = z.object({\n  ServiceName: z.array(LocalizedStringSchema).min(1),\n  ServiceDigitalIdentity: ServiceDigitalIdentitySchema,\n  ServiceStatus: z.string().url(),\n  StatusStartingTime: z.string().datetime(),\n  ServiceTypeIdentifier: z.string().url().optional(),\n  ServiceInformationExtensions: z.array(z.unknown()).optional(),\n})\n\nexport const TrustedEntityServiceSchema = z.object({\n  ServiceInformation: ServiceInformationSchema,\n  ServiceHistory: z.array(ServiceHistoryInstanceSchema).optional(),\n})\n\n// ============================================================================\n// Trusted Entity Schemas\n// ============================================================================\n\nexport const TrustedEntityInformationSchema = z.object({\n  TEName: z.array(LocalizedStringSchema).min(1),\n  TETradeName: z.array(LocalizedStringSchema).optional(),\n  TEAddress: TrustedEntityAddressSchema,\n  TEInformationURI: z.array(LocalizedURISchema).optional(),\n  TEInformationExtensions: z.array(z.unknown()).optional(),\n})\n\nexport const TrustedEntitySchema = z.object({\n  TrustedEntityInformation: TrustedEntityInformationSchema,\n  TrustedEntityServices: z.array(TrustedEntityServiceSchema).min(1),\n})\n\n// ============================================================================\n// List and Scheme Information Schemas\n// ============================================================================\n\nexport const PolicyOrLegalNoticeSchema = z.object({\n  LoTEPolicy: LocalizedURISchema.optional(),\n  LoTELegalNotice: LocalizedStringSchema.optional(),\n})\n\nexport const LoTEQualifierSchema = z.object({\n  LoTEType: z.string().url(),\n  SchemeOperatorName: z.array(LocalizedStringSchema).min(1),\n  SchemeTypeCommunityRules: z.array(LocalizedURISchema).optional(),\n  SchemeTerritory: z.string().length(2).optional(),\n  MimeType: z.string().min(1),\n})\n\nexport const OtherLoTEPointerSchema = z.object({\n  LoTELocation: z.string().url(),\n  ServiceDigitalIdentities: z.array(ServiceDigitalIdentitySchema).min(1),\n  LoTEQualifiers: z.array(LoTEQualifierSchema).min(1),\n})\n\nexport const ListAndSchemeInformationSchema = z.object({\n  LoTEVersionIdentifier: z.number().int(),\n  LoTESequenceNumber: z.number().int(),\n  LoTEType: z.string().url().optional(),\n  SchemeOperatorName: z.array(LocalizedStringSchema).min(1),\n  SchemeOperatorAddress: SchemeOperatorAddressSchema.optional(),\n  SchemeName: z.array(LocalizedStringSchema).optional(),\n  SchemeInformationURI: z.array(LocalizedURISchema).optional(),\n  StatusDeterminationApproach: z.string().url().optional(),\n  SchemeTypeCommunityRules: z.array(LocalizedURISchema).optional(),\n  SchemeTerritory: z.string().length(2).optional(),\n  PolicyOrLegalNotice: z.array(PolicyOrLegalNoticeSchema).optional(),\n  HistoricalInformationPeriod: z.number().optional(),\n  PointersToOtherLoTE: z.array(OtherLoTEPointerSchema).optional(),\n  ListIssueDateTime: z.string().datetime(),\n  NextUpdate: z.string().datetime(),\n  DistributionPoints: z.array(z.string()).optional(),\n  SchemeExtensions: z.array(z.unknown()).optional(),\n})\n\n// ============================================================================\n// LoTE Root Schemas\n// ============================================================================\n\nexport const LoTESchema = z.object({\n  ListAndSchemeInformation: ListAndSchemeInformationSchema,\n  TrustedEntitiesList: z.array(TrustedEntitySchema),\n})\n\nexport const LoTEDocumentSchema = z.object({\n  LoTE: LoTESchema,\n})\n","import { LoTEException } from './lote-exception'\nimport { TrustedEntitySchema, TrustedEntityServiceSchema } from './schemas'\nimport type {\n  JWKPublicKey,\n  PostalAddress,\n  ServiceHistoryInstance,\n  ServiceInformation,\n  TrustedEntity,\n  TrustedEntityInformation,\n  TrustedEntityService,\n} from './types'\n\n/**\n * Builder for creating TrustedEntity objects with a fluent API\n */\nexport class TrustedEntityBuilder {\n  private info: Partial<TrustedEntityInformation> = {}\n  private services: TrustedEntityService[] = []\n\n  /**\n   * Set the entity name\n   */\n  name(value: string, lang = 'en'): this {\n    this.info.TEName = this.info.TEName ?? []\n    this.info.TEName.push({ lang, value })\n    return this\n  }\n\n  /**\n   * Set the trade name\n   */\n  tradeName(value: string, lang = 'en'): this {\n    this.info.TETradeName = this.info.TETradeName ?? []\n    this.info.TETradeName.push({ lang, value })\n    return this\n  }\n\n  /**\n   * Set the postal address\n   */\n  postalAddress(address: Omit<PostalAddress, 'lang'>, lang = 'en'): this {\n    this.info.TEAddress = this.info.TEAddress ?? {\n      TEPostalAddress: [],\n      TEElectronicAddress: [],\n    }\n    this.info.TEAddress.TEPostalAddress.push({ ...address, lang })\n    return this\n  }\n\n  /**\n   * Add an electronic address (email)\n   */\n  email(email: string, lang = 'en'): this {\n    this.info.TEAddress = this.info.TEAddress ?? {\n      TEPostalAddress: [],\n      TEElectronicAddress: [],\n    }\n    this.info.TEAddress.TEElectronicAddress.push({\n      lang,\n      uriValue: email.startsWith('mailto:') ? email : `mailto:${email}`,\n    })\n    return this\n  }\n\n  /**\n   * Add an information URI\n   */\n  infoUri(uri: string, lang = 'en'): this {\n    this.info.TEInformationURI = this.info.TEInformationURI ?? []\n    this.info.TEInformationURI.push({ lang, uriValue: uri })\n    return this\n  }\n\n  /**\n   * Add a website URL as an electronic address\n   */\n  website(url: string, lang = 'en'): this {\n    this.info.TEAddress = this.info.TEAddress ?? {\n      TEPostalAddress: [],\n      TEElectronicAddress: [],\n    }\n    this.info.TEAddress.TEElectronicAddress.push({\n      lang,\n      uriValue: url.startsWith('http') ? url : `https://${url}`,\n    })\n    return this\n  }\n\n  /**\n   * Add custom extensions\n   */\n  addExtension(extension: unknown): this {\n    this.info.TEInformationExtensions = this.info.TEInformationExtensions ?? []\n    this.info.TEInformationExtensions.push(extension)\n    return this\n  }\n\n  /**\n   * Add a service to the entity\n   */\n  addService(service: TrustedEntityService): this {\n    this.services.push(service)\n    return this\n  }\n\n  /**\n   * Build the TrustedEntity object\n   */\n  build(): TrustedEntity {\n    const result = TrustedEntitySchema.safeParse({\n      TrustedEntityInformation: this.info,\n      TrustedEntityServices: this.services,\n    })\n\n    if (!result.success) {\n      const messages = result.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`).join('\\n')\n      throw new LoTEException(`Invalid TrustedEntity:\\n${messages}`)\n    }\n\n    return result.data\n  }\n}\n\n/**\n * Builder for creating TrustedEntityService objects\n */\nexport class ServiceBuilder {\n  private info: Partial<ServiceInformation> = {}\n  private history: ServiceHistoryInstance[] = []\n\n  /**\n   * Set the service name\n   */\n  name(value: string, lang = 'en'): this {\n    this.info.ServiceName = this.info.ServiceName ?? []\n    this.info.ServiceName.push({ lang, value })\n    return this\n  }\n\n  /**\n   * Set the service type identifier\n   */\n  type(typeUri: string): this {\n    this.info.ServiceTypeIdentifier = typeUri\n    return this\n  }\n\n  /**\n   * Set the service status\n   */\n  status(statusUri: string, startingTime?: Date): this {\n    this.info.ServiceStatus = statusUri\n    this.info.StatusStartingTime = startingTime?.toISOString() ?? new Date().toISOString()\n    return this\n  }\n\n  /**\n   * Add an X.509 certificate to the digital identity\n   */\n  addCertificate(certBase64: string): this {\n    this.info.ServiceDigitalIdentity = this.info.ServiceDigitalIdentity ?? {}\n    this.info.ServiceDigitalIdentity.X509Certificates = this.info.ServiceDigitalIdentity.X509Certificates ?? []\n    this.info.ServiceDigitalIdentity.X509Certificates.push({\n      encoding: 'urn:ietf:params:tls-cert-type:x509',\n      specRef: 'RFC5280',\n      val: certBase64,\n    })\n    return this\n  }\n\n  /**\n   * Add an X.509 subject name (DN format) to the digital identity\n   */\n  addX509SubjectName(subjectName: string): this {\n    this.info.ServiceDigitalIdentity = this.info.ServiceDigitalIdentity ?? {}\n    this.info.ServiceDigitalIdentity.X509SubjectNames = this.info.ServiceDigitalIdentity.X509SubjectNames ?? []\n    this.info.ServiceDigitalIdentity.X509SubjectNames.push(subjectName)\n    return this\n  }\n\n  /**\n   * Add an X.509 Subject Key Identifier (base64-encoded) to the digital identity\n   */\n  addX509SKI(ski: string): this {\n    this.info.ServiceDigitalIdentity = this.info.ServiceDigitalIdentity ?? {}\n    this.info.ServiceDigitalIdentity.X509SKIs = this.info.ServiceDigitalIdentity.X509SKIs ?? []\n    this.info.ServiceDigitalIdentity.X509SKIs.push(ski)\n    return this\n  }\n\n  /**\n   * Add another identifier to the digital identity\n   */\n  addOtherId(id: string): this {\n    this.info.ServiceDigitalIdentity = this.info.ServiceDigitalIdentity ?? {}\n    this.info.ServiceDigitalIdentity.OtherIds = this.info.ServiceDigitalIdentity.OtherIds ?? []\n    this.info.ServiceDigitalIdentity.OtherIds.push(id)\n    return this\n  }\n\n  /**\n   * Add a public key (JWK) to the digital identity\n   */\n  addPublicKey(jwk: JWKPublicKey): this {\n    this.info.ServiceDigitalIdentity = this.info.ServiceDigitalIdentity ?? {}\n    this.info.ServiceDigitalIdentity.PublicKeyValues = this.info.ServiceDigitalIdentity.PublicKeyValues ?? []\n    this.info.ServiceDigitalIdentity.PublicKeyValues.push(jwk)\n    return this\n  }\n\n  /**\n   * Add a service endpoint\n   */\n  addEndpoint(type: string, uri: string): this {\n    this.info.ServiceSupplyPoints = this.info.ServiceSupplyPoints ?? []\n    this.info.ServiceSupplyPoints.push({ ServiceType: type, uriValue: uri })\n    return this\n  }\n\n  /**\n   * Add a service definition URI\n   */\n  addDefinitionUri(uri: string, lang = 'en'): this {\n    this.info.ServiceDefinitionURI = this.info.ServiceDefinitionURI ?? []\n    this.info.ServiceDefinitionURI.push({ lang, uriValue: uri })\n    return this\n  }\n\n  /**\n   * Add custom service information extensions\n   */\n  addExtension(extension: unknown): this {\n    this.info.ServiceInformationExtensions = this.info.ServiceInformationExtensions ?? []\n    this.info.ServiceInformationExtensions.push(extension)\n    return this\n  }\n\n  /**\n   * Add a historical service instance\n   */\n  addHistoryEntry(historyInstance: ServiceHistoryInstance): this {\n    this.history.push(historyInstance)\n    return this\n  }\n\n  /**\n   * Build the TrustedEntityService object\n   */\n  build(): TrustedEntityService {\n    const data: Record<string, unknown> = {\n      ServiceInformation: this.info,\n    }\n\n    if (this.history.length > 0) {\n      data.ServiceHistory = this.history\n    }\n\n    const result = TrustedEntityServiceSchema.safeParse(data)\n\n    if (!result.success) {\n      const messages = result.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`).join('\\n')\n      throw new LoTEException(`Invalid TrustedEntityService:\\n${messages}`)\n    }\n\n    return result.data\n  }\n}\n\n/**\n * Create a new TrustedEntityBuilder\n */\nexport function trustedEntity(): TrustedEntityBuilder {\n  return new TrustedEntityBuilder()\n}\n\n/**\n * Create a new ServiceBuilder\n */\nexport function service(): ServiceBuilder {\n  return new ServiceBuilder()\n}\n","import { parseCertificate } from '@owf/crypto'\nimport { base64urlEncode } from '@owf/identity-common'\nimport type { ListAndSchemeInformation, LoTE, LoTEDocument, SignedLoTE, SignOptions, TrustedEntity } from './types'\n\n/**\n * Sign a LoTE document\n *\n * @param options - Signing options including LoTE document, key ID, and signer function\n * @returns The signed LoTE document as a JWS\n *\n * @example Using a local key via @owf/crypto:\n * ```typescript\n * import { ES256 } from '@owf/crypto';\n * import { signLoTE } from '@owf/eudi-lote';\n *\n * const { privateKey } = await ES256.generateKeyPair();\n * const signer = await ES256.getSigner(privateKey);\n * const signed = await signLoTE({\n *   lote: myLoTE,\n *   keyId: 'lote-signer-2025',\n *   signer,\n * });\n * ```\n *\n * @example Using an external KMS:\n * ```typescript\n * const signed = await signLoTE({\n *   lote: myLoTE,\n *   keyId: 'lote-signer-2025',\n *   signer: async (data) => myKms.sign('ES256', data),\n * });\n * ```\n */\nexport async function signLoTE(options: SignOptions): Promise<SignedLoTE> {\n  const { lote, keyId, algorithm = 'ES256', certificates, signer } = options\n\n  const header: Record<string, unknown> = {\n    alg: algorithm,\n    typ: 'trustlist+jwt',\n    kid: keyId,\n  }\n\n  if (certificates && certificates.length > 0) {\n    header.x5c = certificates.map(parseCertificate)\n  }\n\n  const encodedHeader = base64urlEncode(JSON.stringify(header))\n  const encodedPayload = base64urlEncode(JSON.stringify(lote))\n  const signingInput = `${encodedHeader}.${encodedPayload}`\n\n  const signature = await signer(signingInput)\n  const jws = `${signingInput}.${signature}`\n\n  return {\n    jws,\n    header: {\n      alg: algorithm,\n      typ: 'trustlist+jwt',\n      kid: keyId,\n      x5c: header.x5c as string[] | undefined,\n    },\n    payload: lote,\n  }\n}\n\n/**\n * Create a new LoTE document with required structure\n * Per ETSI TS 119 602, only SchemeOperatorName, ListIssueDateTime and NextUpdate are required\n */\nexport function createLoTE(\n  schemeInfo: Partial<ListAndSchemeInformation> & Pick<ListAndSchemeInformation, 'SchemeOperatorName'>,\n  entities: TrustedEntity[] = []\n): LoTEDocument {\n  const now = new Date()\n  const nextYear = new Date(now)\n  nextYear.setFullYear(nextYear.getFullYear() + 1)\n\n  const lote: LoTE = {\n    ListAndSchemeInformation: {\n      LoTEVersionIdentifier: schemeInfo.LoTEVersionIdentifier ?? 1,\n      LoTESequenceNumber: schemeInfo.LoTESequenceNumber ?? 1,\n      LoTEType: schemeInfo.LoTEType,\n      SchemeOperatorName: schemeInfo.SchemeOperatorName,\n      SchemeOperatorAddress: schemeInfo.SchemeOperatorAddress,\n      SchemeName: schemeInfo.SchemeName,\n      SchemeInformationURI: schemeInfo.SchemeInformationURI,\n      StatusDeterminationApproach: schemeInfo.StatusDeterminationApproach,\n      SchemeTypeCommunityRules: schemeInfo.SchemeTypeCommunityRules,\n      SchemeTerritory: schemeInfo.SchemeTerritory,\n      PolicyOrLegalNotice: schemeInfo.PolicyOrLegalNotice,\n      HistoricalInformationPeriod: schemeInfo.HistoricalInformationPeriod,\n      PointersToOtherLoTE: schemeInfo.PointersToOtherLoTE,\n      ListIssueDateTime: schemeInfo.ListIssueDateTime ?? now.toISOString(),\n      NextUpdate: schemeInfo.NextUpdate ?? nextYear.toISOString(),\n      DistributionPoints: schemeInfo.DistributionPoints,\n      SchemeExtensions: schemeInfo.SchemeExtensions,\n    },\n    TrustedEntitiesList: entities,\n  }\n\n  return { LoTE: lote }\n}\n\n/**\n * Increment the sequence number and update timestamps for a new version\n */\nexport function updateLoTEVersion(lote: LoTEDocument): LoTEDocument {\n  const now = new Date()\n  const nextYear = new Date(now)\n  nextYear.setFullYear(nextYear.getFullYear() + 1)\n\n  return {\n    LoTE: {\n      ...lote.LoTE,\n      ListAndSchemeInformation: {\n        ...lote.LoTE.ListAndSchemeInformation,\n        LoTESequenceNumber: lote.LoTE.ListAndSchemeInformation.LoTESequenceNumber + 1,\n        ListIssueDateTime: now.toISOString(),\n        NextUpdate: nextYear.toISOString(),\n      },\n    },\n  }\n}\n\n/**\n * Add a trusted entity to a LoTE document\n */\nexport function addTrustedEntity(lote: LoTEDocument, entity: TrustedEntity): LoTEDocument {\n  return {\n    LoTE: {\n      ...lote.LoTE,\n      TrustedEntitiesList: [...lote.LoTE.TrustedEntitiesList, entity],\n    },\n  }\n}\n\n/**\n * Remove a trusted entity from a LoTE document by name\n */\nexport function removeTrustedEntity(lote: LoTEDocument, entityName: string): LoTEDocument {\n  return {\n    LoTE: {\n      ...lote.LoTE,\n      TrustedEntitiesList: lote.LoTE.TrustedEntitiesList.filter(\n        (e) => !e.TrustedEntityInformation.TEName.some((n) => n.value === entityName)\n      ),\n    },\n  }\n}\n","/**\n * LoTE Validator\n *\n * Runtime validation for ETSI TS 119 602 LoTE documents using Zod schemas.\n */\n\nimport { LoTEException } from './lote-exception'\nimport { LoTEDocumentSchema } from './schemas'\nimport type { LoTEDocument } from './types'\n\n/**\n * Validation error detail\n */\nexport interface ValidationError {\n  /** Path to the invalid field */\n  path: string\n  /** Error message */\n  message: string\n}\n\n/**\n * Validation result\n */\nexport interface ValidationResult {\n  /** Whether the LoTE document is valid */\n  valid: boolean\n  /** List of validation errors (if invalid) */\n  errors: ValidationError[]\n}\n\n/**\n * Validate a LoTE document against ETSI TS 119 602 schema\n *\n * @param loteDocument - The LoTE document to validate\n * @returns Validation result with errors if invalid\n *\n * @example\n * ```typescript\n * const result = validateLoTE(myLoTE);\n * if (!result.valid) {\n *   console.error('Validation errors:', result.errors);\n * }\n * ```\n */\nexport function validateLoTE(loteDocument: unknown): ValidationResult {\n  const result = LoTEDocumentSchema.safeParse(loteDocument)\n\n  if (result.success) {\n    return { valid: true, errors: [] }\n  }\n\n  const errors: ValidationError[] = result.error.issues.map((issue) => ({\n    path: issue.path.join('.'),\n    message: issue.message,\n  }))\n\n  return { valid: false, errors }\n}\n\n/**\n * Assert that a LoTE document is valid, throwing if not\n *\n * @param loteDocument - The LoTE document to validate\n * @throws Error if validation fails\n */\nexport function assertValidLoTE(loteDocument: unknown): asserts loteDocument is LoTEDocument {\n  const result = validateLoTE(loteDocument)\n  if (!result.valid) {\n    const errorMessages = result.errors.map((e) => `${e.path}: ${e.message}`).join('\\n')\n    throw new LoTEException(`Invalid LoTE document:\\n${errorMessages}`)\n  }\n}\n"],"mappings":";;;;;;;AAKA,IAAa,gBAAb,MAAa,sBAAsB,kBAAkB;CACnD,YAAY,SAAiB,SAAmB;AAC9C,QAAM,SAAS,QAAQ;AACvB,SAAO,eAAe,MAAM,cAAc,UAAU;AACpD,OAAK,OAAO;;;;;;;;;;;;;ACMhB,MAAa,wBAAwB,EAAE,OAAO;CAC5C,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE;CACvB,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE;CACzB,CAAC;AAEF,MAAa,qBAAqB,EAAE,OAAO;CACzC,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE;CACvB,UAAU,EAAE,QAAQ,CAAC,KAAK;CAC3B,CAAC;AAMF,MAAa,sBAAsB,EAAE,OAAO;CAC1C,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE;CACvB,eAAe,EAAE,QAAQ;CACzB,UAAU,EAAE,QAAQ;CACpB,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,YAAY,EAAE,QAAQ;CACtB,SAAS,EAAE,QAAQ,CAAC,OAAO,EAAE;CAC9B,CAAC;AAEF,MAAa,8BAA8B,EAAE,OAAO;CAClD,6BAA6B,EAAE,MAAM,oBAAoB;CACzD,iCAAiC,EAAE,MAAM,mBAAmB;CAC7D,CAAC;AAEF,MAAa,6BAA6B,EAAE,OAAO;CACjD,iBAAiB,EAAE,MAAM,oBAAoB;CAC7C,qBAAqB,EAAE,MAAM,mBAAmB;CACjD,CAAC;AAMF,MAAa,kBAAkB,EAAE,OAAO;CACtC,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,SAAS,EAAE,QAAQ,CAAC,UAAU;CAC9B,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE;CACvB,CAAC;AAEF,MAAa,2BAA2B,gBAAgB,OAAO;CAC7D,UAAU,EAAE,QAAQ,qCAAqC,CAAC,UAAU;CACpE,SAAS,EAAE,QAAQ,UAAU,CAAC,UAAU;CACzC,CAAC;AAEF,MAAa,qBAAqB,EAC/B,OAAO;CACN,KAAK,EAAE,KAAK;EAAC;EAAO;EAAM;EAAM,CAAC;CACjC,KAAK,EAAE,QAAQ,CAAC,UAAU;CAC1B,KAAK,EAAE,KAAK,CAAC,OAAO,MAAM,CAAC,CAAC,UAAU;CACtC,KAAK,EAAE,QAAQ,CAAC,UAAU;CAC3B,CAAC,CACD,aAAa;AAEhB,MAAa,+BAA+B,EACzC,OAAO;CACN,kBAAkB,EAAE,MAAM,yBAAyB,CAAC,UAAU;CAC9D,kBAAkB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAChD,iBAAiB,EAAE,MAAM,mBAAmB,CAAC,UAAU;CACvD,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACxC,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACzC,CAAC,CACD,QACE,OACE,GAAG,oBAAoB,GAAG,iBAAiB,SAAS,KACpD,GAAG,oBAAoB,GAAG,iBAAiB,SAAS,KACpD,GAAG,mBAAmB,GAAG,gBAAgB,SAAS,KAClD,GAAG,YAAY,GAAG,SAAS,SAAS,KACpC,GAAG,YAAY,GAAG,SAAS,SAAS,GACvC,EAAE,SAAS,uDAAuD,CACnE;AAMH,MAAa,2BAA2B,EAAE,OAAO;CAC/C,aAAa,EAAE,QAAQ;CACvB,UAAU,EAAE,QAAQ;CACrB,CAAC;AAEF,MAAa,2BAA2B,EAAE,OAAO;CAC/C,aAAa,EAAE,MAAM,sBAAsB,CAAC,IAAI,EAAE;CAClD,wBAAwB;CACxB,uBAAuB,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU;CAClD,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU;CAC1C,oBAAoB,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;CACpD,4BAA4B,EAAE,MAAM,mBAAmB,CAAC,UAAU;CAClE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC,UAAU;CACjE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC,UAAU;CAC5D,8BAA8B,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,UAAU;CAC9D,CAAC;AAEF,MAAa,+BAA+B,EAAE,OAAO;CACnD,aAAa,EAAE,MAAM,sBAAsB,CAAC,IAAI,EAAE;CAClD,wBAAwB;CACxB,eAAe,EAAE,QAAQ,CAAC,KAAK;CAC/B,oBAAoB,EAAE,QAAQ,CAAC,UAAU;CACzC,uBAAuB,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU;CAClD,8BAA8B,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,UAAU;CAC9D,CAAC;AAEF,MAAa,6BAA6B,EAAE,OAAO;CACjD,oBAAoB;CACpB,gBAAgB,EAAE,MAAM,6BAA6B,CAAC,UAAU;CACjE,CAAC;AAMF,MAAa,iCAAiC,EAAE,OAAO;CACrD,QAAQ,EAAE,MAAM,sBAAsB,CAAC,IAAI,EAAE;CAC7C,aAAa,EAAE,MAAM,sBAAsB,CAAC,UAAU;CACtD,WAAW;CACX,kBAAkB,EAAE,MAAM,mBAAmB,CAAC,UAAU;CACxD,yBAAyB,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,UAAU;CACzD,CAAC;AAEF,MAAa,sBAAsB,EAAE,OAAO;CAC1C,0BAA0B;CAC1B,uBAAuB,EAAE,MAAM,2BAA2B,CAAC,IAAI,EAAE;CAClE,CAAC;AAMF,MAAa,4BAA4B,EAAE,OAAO;CAChD,YAAY,mBAAmB,UAAU;CACzC,iBAAiB,sBAAsB,UAAU;CAClD,CAAC;AAEF,MAAa,sBAAsB,EAAE,OAAO;CAC1C,UAAU,EAAE,QAAQ,CAAC,KAAK;CAC1B,oBAAoB,EAAE,MAAM,sBAAsB,CAAC,IAAI,EAAE;CACzD,0BAA0B,EAAE,MAAM,mBAAmB,CAAC,UAAU;CAChE,iBAAiB,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,UAAU;CAChD,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC5B,CAAC;AAEF,MAAa,yBAAyB,EAAE,OAAO;CAC7C,cAAc,EAAE,QAAQ,CAAC,KAAK;CAC9B,0BAA0B,EAAE,MAAM,6BAA6B,CAAC,IAAI,EAAE;CACtE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC,IAAI,EAAE;CACpD,CAAC;AAEF,MAAa,iCAAiC,EAAE,OAAO;CACrD,uBAAuB,EAAE,QAAQ,CAAC,KAAK;CACvC,oBAAoB,EAAE,QAAQ,CAAC,KAAK;CACpC,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU;CACrC,oBAAoB,EAAE,MAAM,sBAAsB,CAAC,IAAI,EAAE;CACzD,uBAAuB,4BAA4B,UAAU;CAC7D,YAAY,EAAE,MAAM,sBAAsB,CAAC,UAAU;CACrD,sBAAsB,EAAE,MAAM,mBAAmB,CAAC,UAAU;CAC5D,6BAA6B,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU;CACxD,0BAA0B,EAAE,MAAM,mBAAmB,CAAC,UAAU;CAChE,iBAAiB,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,UAAU;CAChD,qBAAqB,EAAE,MAAM,0BAA0B,CAAC,UAAU;CAClE,6BAA6B,EAAE,QAAQ,CAAC,UAAU;CAClD,qBAAqB,EAAE,MAAM,uBAAuB,CAAC,UAAU;CAC/D,mBAAmB,EAAE,QAAQ,CAAC,UAAU;CACxC,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,oBAAoB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAClD,kBAAkB,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,UAAU;CAClD,CAAC;AAMF,MAAa,aAAa,EAAE,OAAO;CACjC,0BAA0B;CAC1B,qBAAqB,EAAE,MAAM,oBAAoB;CAClD,CAAC;AAEF,MAAa,qBAAqB,EAAE,OAAO,EACzC,MAAM,YACP,CAAC;;;;;;ACrLF,IAAa,uBAAb,MAAkC;;cACkB,EAAE;kBACT,EAAE;;;;;CAK7C,KAAK,OAAe,OAAO,MAAY;AACrC,OAAK,KAAK,SAAS,KAAK,KAAK,UAAU,EAAE;AACzC,OAAK,KAAK,OAAO,KAAK;GAAE;GAAM;GAAO,CAAC;AACtC,SAAO;;;;;CAMT,UAAU,OAAe,OAAO,MAAY;AAC1C,OAAK,KAAK,cAAc,KAAK,KAAK,eAAe,EAAE;AACnD,OAAK,KAAK,YAAY,KAAK;GAAE;GAAM;GAAO,CAAC;AAC3C,SAAO;;;;;CAMT,cAAc,SAAsC,OAAO,MAAY;AACrE,OAAK,KAAK,YAAY,KAAK,KAAK,aAAa;GAC3C,iBAAiB,EAAE;GACnB,qBAAqB,EAAE;GACxB;AACD,OAAK,KAAK,UAAU,gBAAgB,KAAK;GAAE,GAAG;GAAS;GAAM,CAAC;AAC9D,SAAO;;;;;CAMT,MAAM,OAAe,OAAO,MAAY;AACtC,OAAK,KAAK,YAAY,KAAK,KAAK,aAAa;GAC3C,iBAAiB,EAAE;GACnB,qBAAqB,EAAE;GACxB;AACD,OAAK,KAAK,UAAU,oBAAoB,KAAK;GAC3C;GACA,UAAU,MAAM,WAAW,UAAU,GAAG,QAAQ,UAAU;GAC3D,CAAC;AACF,SAAO;;;;;CAMT,QAAQ,KAAa,OAAO,MAAY;AACtC,OAAK,KAAK,mBAAmB,KAAK,KAAK,oBAAoB,EAAE;AAC7D,OAAK,KAAK,iBAAiB,KAAK;GAAE;GAAM,UAAU;GAAK,CAAC;AACxD,SAAO;;;;;CAMT,QAAQ,KAAa,OAAO,MAAY;AACtC,OAAK,KAAK,YAAY,KAAK,KAAK,aAAa;GAC3C,iBAAiB,EAAE;GACnB,qBAAqB,EAAE;GACxB;AACD,OAAK,KAAK,UAAU,oBAAoB,KAAK;GAC3C;GACA,UAAU,IAAI,WAAW,OAAO,GAAG,MAAM,WAAW;GACrD,CAAC;AACF,SAAO;;;;;CAMT,aAAa,WAA0B;AACrC,OAAK,KAAK,0BAA0B,KAAK,KAAK,2BAA2B,EAAE;AAC3E,OAAK,KAAK,wBAAwB,KAAK,UAAU;AACjD,SAAO;;;;;CAMT,WAAW,SAAqC;AAC9C,OAAK,SAAS,KAAK,QAAQ;AAC3B,SAAO;;;;;CAMT,QAAuB;EACrB,MAAM,SAAS,oBAAoB,UAAU;GAC3C,0BAA0B,KAAK;GAC/B,uBAAuB,KAAK;GAC7B,CAAC;AAEF,MAAI,CAAC,OAAO,QAEV,OAAM,IAAI,cAAc,2BADP,OAAO,MAAM,OAAO,KAAK,MAAM,GAAG,EAAE,KAAK,KAAK,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,KAAK,GACjC;AAGhE,SAAO,OAAO;;;;;;AAOlB,IAAa,iBAAb,MAA4B;;cACkB,EAAE;iBACF,EAAE;;;;;CAK9C,KAAK,OAAe,OAAO,MAAY;AACrC,OAAK,KAAK,cAAc,KAAK,KAAK,eAAe,EAAE;AACnD,OAAK,KAAK,YAAY,KAAK;GAAE;GAAM;GAAO,CAAC;AAC3C,SAAO;;;;;CAMT,KAAK,SAAuB;AAC1B,OAAK,KAAK,wBAAwB;AAClC,SAAO;;;;;CAMT,OAAO,WAAmB,cAA2B;AACnD,OAAK,KAAK,gBAAgB;AAC1B,OAAK,KAAK,qBAAqB,cAAc,aAAa,qBAAI,IAAI,MAAM,EAAC,aAAa;AACtF,SAAO;;;;;CAMT,eAAe,YAA0B;AACvC,OAAK,KAAK,yBAAyB,KAAK,KAAK,0BAA0B,EAAE;AACzE,OAAK,KAAK,uBAAuB,mBAAmB,KAAK,KAAK,uBAAuB,oBAAoB,EAAE;AAC3G,OAAK,KAAK,uBAAuB,iBAAiB,KAAK;GACrD,UAAU;GACV,SAAS;GACT,KAAK;GACN,CAAC;AACF,SAAO;;;;;CAMT,mBAAmB,aAA2B;AAC5C,OAAK,KAAK,yBAAyB,KAAK,KAAK,0BAA0B,EAAE;AACzE,OAAK,KAAK,uBAAuB,mBAAmB,KAAK,KAAK,uBAAuB,oBAAoB,EAAE;AAC3G,OAAK,KAAK,uBAAuB,iBAAiB,KAAK,YAAY;AACnE,SAAO;;;;;CAMT,WAAW,KAAmB;AAC5B,OAAK,KAAK,yBAAyB,KAAK,KAAK,0BAA0B,EAAE;AACzE,OAAK,KAAK,uBAAuB,WAAW,KAAK,KAAK,uBAAuB,YAAY,EAAE;AAC3F,OAAK,KAAK,uBAAuB,SAAS,KAAK,IAAI;AACnD,SAAO;;;;;CAMT,WAAW,IAAkB;AAC3B,OAAK,KAAK,yBAAyB,KAAK,KAAK,0BAA0B,EAAE;AACzE,OAAK,KAAK,uBAAuB,WAAW,KAAK,KAAK,uBAAuB,YAAY,EAAE;AAC3F,OAAK,KAAK,uBAAuB,SAAS,KAAK,GAAG;AAClD,SAAO;;;;;CAMT,aAAa,KAAyB;AACpC,OAAK,KAAK,yBAAyB,KAAK,KAAK,0BAA0B,EAAE;AACzE,OAAK,KAAK,uBAAuB,kBAAkB,KAAK,KAAK,uBAAuB,mBAAmB,EAAE;AACzG,OAAK,KAAK,uBAAuB,gBAAgB,KAAK,IAAI;AAC1D,SAAO;;;;;CAMT,YAAY,MAAc,KAAmB;AAC3C,OAAK,KAAK,sBAAsB,KAAK,KAAK,uBAAuB,EAAE;AACnE,OAAK,KAAK,oBAAoB,KAAK;GAAE,aAAa;GAAM,UAAU;GAAK,CAAC;AACxE,SAAO;;;;;CAMT,iBAAiB,KAAa,OAAO,MAAY;AAC/C,OAAK,KAAK,uBAAuB,KAAK,KAAK,wBAAwB,EAAE;AACrE,OAAK,KAAK,qBAAqB,KAAK;GAAE;GAAM,UAAU;GAAK,CAAC;AAC5D,SAAO;;;;;CAMT,aAAa,WAA0B;AACrC,OAAK,KAAK,+BAA+B,KAAK,KAAK,gCAAgC,EAAE;AACrF,OAAK,KAAK,6BAA6B,KAAK,UAAU;AACtD,SAAO;;;;;CAMT,gBAAgB,iBAA+C;AAC7D,OAAK,QAAQ,KAAK,gBAAgB;AAClC,SAAO;;;;;CAMT,QAA8B;EAC5B,MAAM,OAAgC,EACpC,oBAAoB,KAAK,MAC1B;AAED,MAAI,KAAK,QAAQ,SAAS,EACxB,MAAK,iBAAiB,KAAK;EAG7B,MAAM,SAAS,2BAA2B,UAAU,KAAK;AAEzD,MAAI,CAAC,OAAO,QAEV,OAAM,IAAI,cAAc,kCADP,OAAO,MAAM,OAAO,KAAK,MAAM,GAAG,EAAE,KAAK,KAAK,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,KAAK,GAC1B;AAGvE,SAAO,OAAO;;;;;;AAOlB,SAAgB,gBAAsC;AACpD,QAAO,IAAI,sBAAsB;;;;;AAMnC,SAAgB,UAA0B;AACxC,QAAO,IAAI,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACtP7B,eAAsB,SAAS,SAA2C;CACxE,MAAM,EAAE,MAAM,OAAO,YAAY,SAAS,cAAc,WAAW;CAEnE,MAAM,SAAkC;EACtC,KAAK;EACL,KAAK;EACL,KAAK;EACN;AAED,KAAI,gBAAgB,aAAa,SAAS,EACxC,QAAO,MAAM,aAAa,IAAI,iBAAiB;CAKjD,MAAM,eAAe,GAFC,gBAAgB,KAAK,UAAU,OAAO,CAAC,CAEvB,GADf,gBAAgB,KAAK,UAAU,KAAK,CAAC;AAM5D,QAAO;EACL,KAHU,GAAG,aAAa,GADV,MAAM,OAAO,aAAa;EAK1C,QAAQ;GACN,KAAK;GACL,KAAK;GACL,KAAK;GACL,KAAK,OAAO;GACb;EACD,SAAS;EACV;;;;;;AAOH,SAAgB,WACd,YACA,WAA4B,EAAE,EAChB;CACd,MAAM,sBAAM,IAAI,MAAM;CACtB,MAAM,WAAW,IAAI,KAAK,IAAI;AAC9B,UAAS,YAAY,SAAS,aAAa,GAAG,EAAE;AAyBhD,QAAO,EAAE,MAvBU;EACjB,0BAA0B;GACxB,uBAAuB,WAAW,yBAAyB;GAC3D,oBAAoB,WAAW,sBAAsB;GACrD,UAAU,WAAW;GACrB,oBAAoB,WAAW;GAC/B,uBAAuB,WAAW;GAClC,YAAY,WAAW;GACvB,sBAAsB,WAAW;GACjC,6BAA6B,WAAW;GACxC,0BAA0B,WAAW;GACrC,iBAAiB,WAAW;GAC5B,qBAAqB,WAAW;GAChC,6BAA6B,WAAW;GACxC,qBAAqB,WAAW;GAChC,mBAAmB,WAAW,qBAAqB,IAAI,aAAa;GACpE,YAAY,WAAW,cAAc,SAAS,aAAa;GAC3D,oBAAoB,WAAW;GAC/B,kBAAkB,WAAW;GAC9B;EACD,qBAAqB;EACtB,EAEoB;;;;;AAMvB,SAAgB,kBAAkB,MAAkC;CAClE,MAAM,sBAAM,IAAI,MAAM;CACtB,MAAM,WAAW,IAAI,KAAK,IAAI;AAC9B,UAAS,YAAY,SAAS,aAAa,GAAG,EAAE;AAEhD,QAAO,EACL,MAAM;EACJ,GAAG,KAAK;EACR,0BAA0B;GACxB,GAAG,KAAK,KAAK;GACb,oBAAoB,KAAK,KAAK,yBAAyB,qBAAqB;GAC5E,mBAAmB,IAAI,aAAa;GACpC,YAAY,SAAS,aAAa;GACnC;EACF,EACF;;;;;AAMH,SAAgB,iBAAiB,MAAoB,QAAqC;AACxF,QAAO,EACL,MAAM;EACJ,GAAG,KAAK;EACR,qBAAqB,CAAC,GAAG,KAAK,KAAK,qBAAqB,OAAO;EAChE,EACF;;;;;AAMH,SAAgB,oBAAoB,MAAoB,YAAkC;AACxF,QAAO,EACL,MAAM;EACJ,GAAG,KAAK;EACR,qBAAqB,KAAK,KAAK,oBAAoB,QAChD,MAAM,CAAC,EAAE,yBAAyB,OAAO,MAAM,MAAM,EAAE,UAAU,WAAW,CAC9E;EACF,EACF;;;;;;;;;;;;;;;;;;;;;;;ACvGH,SAAgB,aAAa,cAAyC;CACpE,MAAM,SAAS,mBAAmB,UAAU,aAAa;AAEzD,KAAI,OAAO,QACT,QAAO;EAAE,OAAO;EAAM,QAAQ,EAAE;EAAE;AAQpC,QAAO;EAAE,OAAO;EAAO,QALW,OAAO,MAAM,OAAO,KAAK,WAAW;GACpE,MAAM,MAAM,KAAK,KAAK,IAAI;GAC1B,SAAS,MAAM;GAChB,EAAE;EAE4B;;;;;;;;AASjC,SAAgB,gBAAgB,cAA6D;CAC3F,MAAM,SAAS,aAAa,aAAa;AACzC,KAAI,CAAC,OAAO,MAEV,OAAM,IAAI,cAAc,2BADF,OAAO,OAAO,KAAK,MAAM,GAAG,EAAE,KAAK,IAAI,EAAE,UAAU,CAAC,KAAK,KAAK,GACjB"}

package/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "@owf/eudi-lote",
+  "version": "0.0.0",
+  "description": "SDK for creating, signing, and validating Lists of Trusted Entities (LoTE) per ETSI TS 119 602",
+  "files": [
+    "dist"
+  ],
+  "license": "Apache-2.0",
+  "exports": "./src/index.ts",
+  "homepage": "https://github.com/openwallet-foundation-labs/identity-common-ts/tree/main/packages/eudi-lote",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/openwallet-foundation-labs/identity-common-ts",
+    "directory": "packages/eudi-lote"
+  },
+  "publishConfig": {
+    "module": "./dist/index.mjs",
+    "types": "./dist/index.d.mts",
+    "exports": {
+      ".": "./dist/index.mjs",
+      "./package.json": "./package.json"
+    }
+  },
+  "keywords": [
+    "lote",
+    "list-of-trusted-entities",
+    "etsi",
+    "etsi-ts-119-602",
+    "eudi",
+    "wallet",
+    "x509",
+    "jwt"
+  ],
+  "scripts": {
+    "build": "tsdown src/index.ts --format esm --dts --sourcemap"
+  },
+  "dependencies": {
+    "@owf/crypto": "workspace:*",
+    "@owf/identity-common": "workspace:*",
+    "zod": "^4.3.6"
+  }
+}