@peac/adapter-did 0.12.6 → 0.12.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@peac/adapter-did",
-  "version": "0.12.6",
+  "version": "0.12.7",
   "description": "DID document resolution for PEAC receipt verification (did:key, did:web)",
   "main": "dist/index.cjs",
   "types": "dist/index.d.ts",
@@ -28,8 +28,8 @@
     "access": "public"
   },
   "dependencies": {
-    "@peac/kernel": "0.12.6",
-    "@peac/schema": "0.12.6"
+    "@peac/kernel": "0.12.7",
+    "@peac/schema": "0.12.7"
   },
   "devDependencies": {
     "@types/node": "^22.19.11",

package/dist/did-key.js

@@ -1,97 +0,0 @@
-"use strict";
-/**
- * did:key resolver (Ed25519, zero network I/O).
- *
- * Implements the did:key method spec (W3C CCG v0.9).
- * Parses the multicodec-encoded Ed25519 public key directly from
- * the DID string. No network requests, no ambient discovery.
- *
- * Only Ed25519 keys (multicodec 0xed01) are supported.
- * Non-Ed25519 did:key DIDs produce an error without revealing
- * the actual key type (no oracle).
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DidKeyResolver = void 0;
-const multicodec_js_1 = require("./multicodec.js");
-const errors_js_1 = require("./errors.js");
-// ---------------------------------------------------------------------------
-// did:key Resolver
-// ---------------------------------------------------------------------------
-/**
- * Resolver for the did:key method.
- *
- * did:key encodes the public key directly in the DID string.
- * Resolution is pure computation with zero network I/O.
- *
- * @example
- * ```typescript
- * const resolver = new DidKeyResolver();
- * const result = await resolver.resolve('did:key:z6MkhaXgBZDvotDkL...');
- * const key = extractVerificationKey(result.didDocument!);
- * ```
- */
-class DidKeyResolver {
-    methods = ['key'];
-    async resolve(did) {
-        // Validate DID format
-        if (!did.startsWith('did:key:')) {
-            return {
-                didDocument: null,
-                didResolutionMetadata: { error: 'invalidDid' },
-                didDocumentMetadata: {},
-            };
-        }
-        const multibaseValue = did.slice('did:key:'.length);
-        if (!multibaseValue) {
-            return {
-                didDocument: null,
-                didResolutionMetadata: { error: 'invalidDid' },
-                didDocumentMetadata: {},
-            };
-        }
-        // Extract Ed25519 public key (validates multicodec prefix)
-        let publicKeyBytes;
-        try {
-            publicKeyBytes = (0, multicodec_js_1.extractEd25519FromMultibase)(multibaseValue);
-        }
-        catch (e) {
-            if (e instanceof errors_js_1.DIDError) {
-                return {
-                    didDocument: null,
-                    didResolutionMetadata: { error: e.code },
-                    didDocumentMetadata: {},
-                };
-            }
-            return {
-                didDocument: null,
-                didResolutionMetadata: { error: 'invalidDid' },
-                didDocumentMetadata: {},
-            };
-        }
-        // Build DID Document with the extracted key
-        const keyId = `${did}#${multibaseValue}`;
-        const verificationMethod = {
-            id: keyId,
-            type: 'Ed25519VerificationKey2020',
-            controller: did,
-            publicKeyMultibase: multibaseValue,
-        };
-        const document = {
-            '@context': [
-                'https://www.w3.org/ns/did/v1',
-                'https://w3id.org/security/suites/ed25519-2020/v1',
-            ],
-            id: did,
-            verificationMethod: [verificationMethod],
-            authentication: [keyId],
-            assertionMethod: [keyId],
-        };
-        return {
-            didDocument: document,
-            didResolutionMetadata: { contentType: 'application/did+json' },
-            didDocumentMetadata: {},
-        };
-    }
-}
-exports.DidKeyResolver = DidKeyResolver;
-//# sourceMappingURL=did-key.js.map

package/dist/did-key.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"did-key.js","sourceRoot":"","sources":["../src/did-key.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AAKH,mDAA8D;AAC9D,2CAAuC;AAEvC,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;;;;;;;;;;GAYG;AACH,MAAa,cAAc;IAChB,OAAO,GAAG,CAAC,KAAK,CAAU,CAAC;IAEpC,KAAK,CAAC,OAAO,CAAC,GAAW;QACvB,sBAAsB;QACtB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAChC,OAAO;gBACL,WAAW,EAAE,IAAI;gBACjB,qBAAqB,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE;gBAC9C,mBAAmB,EAAE,EAAE;aACxB,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO;gBACL,WAAW,EAAE,IAAI;gBACjB,qBAAqB,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE;gBAC9C,mBAAmB,EAAE,EAAE;aACxB,CAAC;QACJ,CAAC;QAED,2DAA2D;QAC3D,IAAI,cAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,cAAc,GAAG,IAAA,2CAA2B,EAAC,cAAc,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,oBAAQ,EAAE,CAAC;gBAC1B,OAAO;oBACL,WAAW,EAAE,IAAI;oBACjB,qBAAqB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE;oBACxC,mBAAmB,EAAE,EAAE;iBACxB,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,WAAW,EAAE,IAAI;gBACjB,qBAAqB,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE;gBAC9C,mBAAmB,EAAE,EAAE;aACxB,CAAC;QACJ,CAAC;QAED,4CAA4C;QAC5C,MAAM,KAAK,GAAG,GAAG,GAAG,IAAI,cAAc,EAAE,CAAC;QAEzC,MAAM,kBAAkB,GAAuB;YAC7C,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,4BAA4B;YAClC,UAAU,EAAE,GAAG;YACf,kBAAkB,EAAE,cAAc;SACnC,CAAC;QAEF,MAAM,QAAQ,GAAgB;YAC5B,UAAU,EAAE;gBACV,8BAA8B;gBAC9B,kDAAkD;aACnD;YACD,EAAE,EAAE,GAAG;YACP,kBAAkB,EAAE,CAAC,kBAAkB,CAAC;YACxC,cAAc,EAAE,CAAC,KAAK,CAAC;YACvB,eAAe,EAAE,CAAC,KAAK,CAAC;SACzB,CAAC;QAEF,OAAO;YACL,WAAW,EAAE,QAAQ;YACrB,qBAAqB,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE;YAC9D,mBAAmB,EAAE,EAAE;SACxB,CAAC;IACJ,CAAC;CACF;AApED,wCAoEC"}

package/dist/errors.js

@@ -1,21 +0,0 @@
-"use strict";
-/**
- * DID adapter error types.
- *
- * Uses error codes registered in specs/kernel/errors.json (PR3 #571).
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DIDError = void 0;
-/**
- * Error thrown by DID adapter operations.
- */
-class DIDError extends Error {
-    code;
-    constructor(code, message) {
-        super(message);
-        this.name = 'DIDError';
-        this.code = code;
-    }
-}
-exports.DIDError = DIDError;
-//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAWH;;GAEG;AACH,MAAa,QAAS,SAAQ,KAAK;IACxB,IAAI,CAAe;IAE5B,YAAY,IAAkB,EAAE,OAAe;QAC7C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AARD,4BAQC"}

package/dist/extract-key.js

@@ -1,131 +0,0 @@
-"use strict";
-/**
- * Verification key extraction from DID Documents.
- *
- * Implements DD-202 (DID Verification Method Selection Policy):
- * 1. Prefer methods referenced in authentication/assertionMethod
- * 2. If multiple eligible Ed25519 methods remain, require caller keyId
- *    or fail with E_DID_KEY_AMBIGUOUS
- * 3. Only Ed25519 keys extracted; other types silently skipped
- * 4. Iterates ALL methods regardless of match (no early-return oracle)
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.extractVerificationKey = extractVerificationKey;
-const multicodec_js_1 = require("./multicodec.js");
-const errors_js_1 = require("./errors.js");
-// ---------------------------------------------------------------------------
-// Implementation
-// ---------------------------------------------------------------------------
-/**
- * Extract an Ed25519 public key from a DID Document.
- *
- * Selection policy (DD-202):
- * 1. Collect all verification methods from the document
- * 2. Filter by keyId if provided
- * 3. Filter by relationship references (authentication/assertionMethod)
- * 4. Try to extract Ed25519 key from each eligible method
- * 5. If exactly one Ed25519 key found: return it
- * 6. If zero found: return null
- * 7. If multiple found without keyId: throw E_DID_KEY_AMBIGUOUS
- *
- * All methods are iterated regardless of match to prevent key-type oracle.
- *
- * @param document - The resolved DID Document
- * @param options - Key selection options
- * @returns 32-byte Ed25519 public key, or null if no suitable key found
- * @throws DIDError with E_DID_KEY_AMBIGUOUS if multiple eligible keys
- */
-function extractVerificationKey(document, options) {
-    const methods = document.verificationMethod ?? [];
-    const relationship = options?.relationship ?? 'authentication';
-    const keyId = options?.keyId;
-    // Get relationship-referenced method IDs
-    const relationshipRefs = getRelationshipRefs(document, relationship);
-    // Collect all eligible Ed25519 keys (iterate ALL methods, no early return)
-    const candidates = [];
-    for (const method of methods) {
-        // Filter by keyId if specified
-        if (keyId && method.id !== keyId) {
-            continue;
-        }
-        // Prefer relationship-referenced methods if refs exist
-        if (relationshipRefs.length > 0 && !relationshipRefs.includes(method.id)) {
-            continue;
-        }
-        // Try to extract Ed25519 key (silently skip non-Ed25519)
-        const key = tryExtractEd25519(method);
-        if (key) {
-            candidates.push(key);
-        }
-    }
-    // If no relationship-referenced methods found, fall back to all methods
-    if (candidates.length === 0 && relationshipRefs.length > 0) {
-        for (const method of methods) {
-            if (keyId && method.id !== keyId)
-                continue;
-            const key = tryExtractEd25519(method);
-            if (key)
-                candidates.push(key);
-        }
-    }
-    if (candidates.length === 0) {
-        return null;
-    }
-    if (candidates.length === 1) {
-        return candidates[0];
-    }
-    // Multiple Ed25519 keys without explicit keyId selection
-    throw new errors_js_1.DIDError('E_DID_KEY_AMBIGUOUS', `Found ${candidates.length} eligible Ed25519 keys. Provide keyId to select.`);
-}
-// ---------------------------------------------------------------------------
-// Helpers
-// ---------------------------------------------------------------------------
-/**
- * Get verification method IDs referenced by a relationship.
- */
-function getRelationshipRefs(document, relationship) {
-    const refs = document[relationship];
-    if (!refs)
-        return [];
-    return refs
-        .map((ref) => (typeof ref === 'string' ? ref : ref.id))
-        .filter((id) => typeof id === 'string');
-}
-/**
- * Try to extract an Ed25519 key from a verification method.
- * Returns null for non-Ed25519 methods (no oracle).
- */
-function tryExtractEd25519(method) {
-    // Try publicKeyMultibase (Multikey / Ed25519VerificationKey2020)
-    if (method.publicKeyMultibase) {
-        try {
-            return (0, multicodec_js_1.extractEd25519FromMultibase)(method.publicKeyMultibase);
-        }
-        catch {
-            return null;
-        }
-    }
-    // Try publicKeyJwk (JsonWebKey2020, OKP/Ed25519)
-    if (method.publicKeyJwk) {
-        const jwk = method.publicKeyJwk;
-        if (jwk.kty === 'OKP' && jwk.crv === 'Ed25519' && typeof jwk.x === 'string') {
-            try {
-                // JWK x value is base64url-encoded raw key
-                const padded = jwk.x + '='.repeat((4 - (jwk.x.length % 4)) % 4);
-                const binary = atob(padded.replace(/-/g, '+').replace(/_/g, '/'));
-                const bytes = new Uint8Array(binary.length);
-                for (let i = 0; i < binary.length; i++) {
-                    bytes[i] = binary.charCodeAt(i);
-                }
-                if (bytes.length === 32)
-                    return bytes;
-            }
-            catch {
-                return null;
-            }
-        }
-        return null;
-    }
-    return null;
-}
-//# sourceMappingURL=extract-key.js.map

package/dist/extract-key.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"extract-key.js","sourceRoot":"","sources":["../src/extract-key.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;AA8CH,wDAsDC;AAjGD,mDAA8D;AAC9D,2CAAuC;AAmBvC,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAgB,sBAAsB,CACpC,QAAqB,EACrB,OAA2B;IAE3B,MAAM,OAAO,GAAG,QAAQ,CAAC,kBAAkB,IAAI,EAAE,CAAC;IAClD,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,IAAI,gBAAgB,CAAC;IAC/D,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;IAE7B,yCAAyC;IACzC,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAErE,2EAA2E;IAC3E,MAAM,UAAU,GAAiB,EAAE,CAAC;IAEpC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,+BAA+B;QAC/B,IAAI,KAAK,IAAI,MAAM,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;YACjC,SAAS;QACX,CAAC;QAED,uDAAuD;QACvD,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;YACzE,SAAS;QACX,CAAC;QAED,yDAAyD;QACzD,MAAM,GAAG,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,GAAG,EAAE,CAAC;YACR,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3D,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,KAAK,IAAI,MAAM,CAAC,EAAE,KAAK,KAAK;gBAAE,SAAS;YAC3C,MAAM,GAAG,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;YACtC,IAAI,GAAG;gBAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IAED,yDAAyD;IACzD,MAAM,IAAI,oBAAQ,CAChB,qBAAqB,EACrB,SAAS,UAAU,CAAC,MAAM,kDAAkD,CAC7E,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;GAEG;AACH,SAAS,mBAAmB,CAC1B,QAAqB,EACrB,YAAkD;IAElD,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAErB,OAAO,IAAI;SACR,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;SACtD,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,MAA0B;IACnD,iEAAiE;IACjE,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,OAAO,IAAA,2CAA2B,EAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,iDAAiD;IACjD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC;QAChC,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC5E,IAAI,CAAC;gBACH,2CAA2C;gBAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAChE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;gBAClE,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBACvC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;gBAClC,CAAC;gBACD,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE;oBAAE,OAAO,KAAK,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/index.js

@@ -1,29 +0,0 @@
-"use strict";
-/**
- * @peac/adapter-did
- *
- * DID document resolution for PEAC receipt verification.
- * Interoperability adapter layer for W3C DID Core v1.0.
- *
- * Supported DID methods:
- * - did:key (Ed25519, zero network I/O)
- * - did:web (HTTPS, SSRF-hardened; added in PR7)
- *
- * @packageDocumentation
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DIDError = exports.extractEd25519FromMultibase = exports.extractVerificationKey = exports.DidKeyResolver = exports.createCompositeResolver = void 0;
-var resolver_js_1 = require("./resolver.js");
-Object.defineProperty(exports, "createCompositeResolver", { enumerable: true, get: function () { return resolver_js_1.createCompositeResolver; } });
-// did:key resolver
-var did_key_js_1 = require("./did-key.js");
-Object.defineProperty(exports, "DidKeyResolver", { enumerable: true, get: function () { return did_key_js_1.DidKeyResolver; } });
-var extract_key_js_1 = require("./extract-key.js");
-Object.defineProperty(exports, "extractVerificationKey", { enumerable: true, get: function () { return extract_key_js_1.extractVerificationKey; } });
-// Multicodec utilities
-var multicodec_js_1 = require("./multicodec.js");
-Object.defineProperty(exports, "extractEd25519FromMultibase", { enumerable: true, get: function () { return multicodec_js_1.extractEd25519FromMultibase; } });
-// Errors
-var errors_js_1 = require("./errors.js");
-Object.defineProperty(exports, "DIDError", { enumerable: true, get: function () { return errors_js_1.DIDError; } });
-//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAcH,6CAAwD;AAA/C,sHAAA,uBAAuB,OAAA;AAEhC,mBAAmB;AACnB,2CAA8C;AAArC,4GAAA,cAAc,OAAA;AAIvB,mDAA0D;AAAjD,wHAAA,sBAAsB,OAAA;AAE/B,uBAAuB;AACvB,iDAA8D;AAArD,4HAAA,2BAA2B,OAAA;AAEpC,SAAS;AACT,yCAAuC;AAA9B,qGAAA,QAAQ,OAAA"}

package/dist/multicodec.js

@@ -1,121 +0,0 @@
-"use strict";
-/**
- * Ed25519 multicodec prefix parsing.
- *
- * Supports both multibase forms allowed by the did:key spec (CCG v0.9):
- * - 'z' prefix: base58btc encoding
- * - 'u' prefix: base64url encoding
- *
- * The Ed25519 multicodec prefix is 0xed01 as a varint (2 bytes).
- * After stripping the 2-byte prefix, the remaining 32 bytes are
- * the raw Ed25519 public key.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.extractEd25519FromMultibase = extractEd25519FromMultibase;
-const errors_js_1 = require("./errors.js");
-// ---------------------------------------------------------------------------
-// Constants
-// ---------------------------------------------------------------------------
-/** Ed25519 multicodec prefix as varint: [0xed, 0x01] */
-const ED25519_MULTICODEC_PREFIX = new Uint8Array([0xed, 0x01]);
-/** Expected Ed25519 public key length in bytes */
-const ED25519_KEY_LENGTH = 32;
-/** Total expected length: 2 byte prefix + 32 byte key */
-const ED25519_MULTICODEC_LENGTH = ED25519_MULTICODEC_PREFIX.length + ED25519_KEY_LENGTH;
-// ---------------------------------------------------------------------------
-// Base58btc decoder (minimal, for 'z' prefix multibase)
-// ---------------------------------------------------------------------------
-const BASE58_ALPHABET = '123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz';
-const BASE58_MAP = new Map();
-for (let i = 0; i < BASE58_ALPHABET.length; i++) {
-    BASE58_MAP.set(BASE58_ALPHABET[i], i);
-}
-function base58btcDecode(input) {
-    if (input.length === 0)
-        return new Uint8Array(0);
-    // Count leading '1's (zero bytes)
-    let zeros = 0;
-    while (zeros < input.length && input[zeros] === '1') {
-        zeros++;
-    }
-    // Decode
-    const size = Math.ceil(input.length * 733 / 1000) + 1;
-    const b256 = new Uint8Array(size);
-    let length = 0;
-    for (let i = zeros; i < input.length; i++) {
-        const value = BASE58_MAP.get(input[i]);
-        if (value === undefined) {
-            throw new errors_js_1.DIDError('E_DID_DOCUMENT_INVALID', `Invalid base58btc character: ${input[i]}`);
-        }
-        let carry = value;
-        for (let j = 0; j < length || carry > 0; j++) {
-            carry += 58 * (b256[j] || 0);
-            b256[j] = carry % 256;
-            carry = Math.floor(carry / 256);
-            if (j >= length)
-                length = j + 1;
-        }
-    }
-    // Build result with leading zeros
-    const result = new Uint8Array(zeros + length);
-    for (let i = 0; i < length; i++) {
-        result[zeros + length - 1 - i] = b256[i];
-    }
-    return result;
-}
-// ---------------------------------------------------------------------------
-// Base64url decoder (for 'u' prefix multibase)
-// ---------------------------------------------------------------------------
-function base64urlDecode(input) {
-    // Pad to multiple of 4
-    const padded = input + '='.repeat((4 - (input.length % 4)) % 4);
-    const binary = atob(padded.replace(/-/g, '+').replace(/_/g, '/'));
-    const bytes = new Uint8Array(binary.length);
-    for (let i = 0; i < binary.length; i++) {
-        bytes[i] = binary.charCodeAt(i);
-    }
-    return bytes;
-}
-// ---------------------------------------------------------------------------
-// Public API
-// ---------------------------------------------------------------------------
-/**
- * Extract an Ed25519 public key from a multibase-encoded multicodec value.
- *
- * Supports both multibase prefixes:
- * - 'z': base58btc (e.g., did:key:z6Mk...)
- * - 'u': base64url
- *
- * @param multibaseValue - The multibase-encoded value (including prefix character)
- * @returns 32-byte Ed25519 public key
- * @throws DIDError if not Ed25519 or malformed
- */
-function extractEd25519FromMultibase(multibaseValue) {
-    if (multibaseValue.length < 2) {
-        throw new errors_js_1.DIDError('E_DID_DOCUMENT_INVALID', 'Multibase value too short');
-    }
-    const prefix = multibaseValue[0];
-    const encoded = multibaseValue.slice(1);
-    let decoded;
-    if (prefix === 'z') {
-        decoded = base58btcDecode(encoded);
-    }
-    else if (prefix === 'u') {
-        decoded = base64urlDecode(encoded);
-    }
-    else {
-        throw new errors_js_1.DIDError('E_DID_DOCUMENT_INVALID', `Unsupported multibase prefix: '${prefix}'. Expected 'z' (base58btc) or 'u' (base64url).`);
-    }
-    // Check total length
-    if (decoded.length !== ED25519_MULTICODEC_LENGTH) {
-        throw new errors_js_1.DIDError('E_DID_KEY_NOT_FOUND', `Expected ${ED25519_MULTICODEC_LENGTH} bytes (2 prefix + 32 key), got ${decoded.length}`);
-    }
-    // Verify Ed25519 multicodec prefix (0xed, 0x01)
-    if (decoded[0] !== ED25519_MULTICODEC_PREFIX[0] || decoded[1] !== ED25519_MULTICODEC_PREFIX[1]) {
-        // Non-Ed25519 key type: do NOT throw an oracle-revealing error about
-        // what type it is. Just say Ed25519 not found.
-        throw new errors_js_1.DIDError('E_DID_KEY_NOT_FOUND', 'Multicodec prefix does not indicate Ed25519');
-    }
-    return decoded.slice(2);
-}
-//# sourceMappingURL=multicodec.js.map

package/dist/multicodec.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"multicodec.js","sourceRoot":"","sources":["../src/multicodec.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;AA6FH,kEAuCC;AAlID,2CAAuC;AAEvC,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,wDAAwD;AACxD,MAAM,yBAAyB,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAE/D,kDAAkD;AAClD,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B,yDAAyD;AACzD,MAAM,yBAAyB,GAAG,yBAAyB,CAAC,MAAM,GAAG,kBAAkB,CAAC;AAExF,8EAA8E;AAC9E,wDAAwD;AACxD,8EAA8E;AAE9E,MAAM,eAAe,GAAG,4DAA4D,CAAC;AACrF,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;AAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,eAAe,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;IAChD,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAEjD,kCAAkC;IAClC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;QACpD,KAAK,EAAE,CAAC;IACV,CAAC;IAED,SAAS;IACT,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,oBAAQ,CAAC,wBAAwB,EAAE,gCAAgC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,KAAK,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7B,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,GAAG,CAAC;YACtB,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;YAChC,IAAI,CAAC,IAAI,MAAM;gBAAE,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,kCAAkC;IAClC,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,GAAG,MAAM,CAAC,CAAC;IAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChC,MAAM,CAAC,KAAK,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,+CAA+C;AAC/C,8EAA8E;AAE9E,SAAS,eAAe,CAAC,KAAa;IACpC,uBAAuB;IACvB,MAAM,MAAM,GAAG,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;;;;GAUG;AACH,SAAgB,2BAA2B,CAAC,cAAsB;IAChE,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,oBAAQ,CAAC,wBAAwB,EAAE,2BAA2B,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,OAAmB,CAAC;IAExB,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;SAAM,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QAC1B,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,oBAAQ,CAChB,wBAAwB,EACxB,kCAAkC,MAAM,iDAAiD,CAC1F,CAAC;IACJ,CAAC;IAED,qBAAqB;IACrB,IAAI,OAAO,CAAC,MAAM,KAAK,yBAAyB,EAAE,CAAC;QACjD,MAAM,IAAI,oBAAQ,CAChB,qBAAqB,EACrB,YAAY,yBAAyB,mCAAmC,OAAO,CAAC,MAAM,EAAE,CACzF,CAAC;IACJ,CAAC;IAED,gDAAgD;IAChD,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,yBAAyB,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/F,qEAAqE;QACrE,+CAA+C;QAC/C,MAAM,IAAI,oBAAQ,CAChB,qBAAqB,EACrB,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC1B,CAAC"}

package/dist/resolver.js

@@ -1,58 +0,0 @@
-"use strict";
-/**
- * DID Resolver interface and composite resolver.
- *
- * Pluggable resolver architecture: callers instantiate and configure
- * resolvers explicitly (DD-52: no ambient key discovery).
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createCompositeResolver = createCompositeResolver;
-// ---------------------------------------------------------------------------
-// Composite Resolver
-// ---------------------------------------------------------------------------
-/**
- * Create a composite resolver that delegates to method-specific resolvers.
- *
- * Tries resolvers in order by method match. The first resolver whose
- * `methods` array includes the DID's method handles the resolution.
- *
- * @param resolvers - Array of method-specific resolvers
- * @returns A composite resolver that delegates by method
- */
-function createCompositeResolver(resolvers) {
-    return {
-        methods: resolvers.flatMap((r) => [...r.methods]),
-        async resolve(did) {
-            const method = extractMethod(did);
-            if (!method) {
-                return {
-                    didDocument: null,
-                    didResolutionMetadata: { error: 'invalidDid' },
-                    didDocumentMetadata: {},
-                };
-            }
-            for (const resolver of resolvers) {
-                if (resolver.methods.includes(method)) {
-                    return resolver.resolve(did);
-                }
-            }
-            return {
-                didDocument: null,
-                didResolutionMetadata: { error: 'methodNotSupported' },
-                didDocumentMetadata: {},
-            };
-        },
-    };
-}
-/**
- * Extract the method from a DID string (e.g., "key" from "did:key:z6Mk...").
- */
-function extractMethod(did) {
-    if (!did.startsWith('did:'))
-        return null;
-    const parts = did.split(':');
-    if (parts.length < 3)
-        return null;
-    return parts[1];
-}
-//# sourceMappingURL=resolver.js.map

package/dist/resolver.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"resolver.js","sourceRoot":"","sources":["../src/resolver.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAkCH,0DA2BC;AAxCD,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,SAAgB,uBAAuB,CAAC,SAAwB;IAC9D,OAAO;QACL,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;QAEjD,KAAK,CAAC,OAAO,CAAC,GAAW;YACvB,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO;oBACL,WAAW,EAAE,IAAI;oBACjB,qBAAqB,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE;oBAC9C,mBAAmB,EAAE,EAAE;iBACxB,CAAC;YACJ,CAAC;YAED,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,IAAI,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBACtC,OAAO,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC;YAED,OAAO;gBACL,WAAW,EAAE,IAAI;gBACjB,qBAAqB,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE;gBACtD,mBAAmB,EAAE,EAAE;aACxB,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/dist/types.js

@@ -1,13 +0,0 @@
-"use strict";
-/**
- * W3C DID Core v1.0 types for PEAC adapter-did.
- *
- * These types model the subset of W3C DID Core v1.0 (Recommendation 2022)
- * needed for Ed25519 key extraction. This is an interoperability adapter
- * layer, not a normative W3C dependency. did:key and did:web are CCG
- * drafts with no formal W3C Recommendation standing.
- *
- * @see https://www.w3.org/TR/did-core/
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG"}