@peac/adapter-did 0.12.6

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/resolver.ts","../src/errors.ts","../src/multicodec.ts","../src/did-key.ts","../src/did-web.ts","../src/extract-key.ts","../src/cache.ts"],"names":[],"mappings":";AAuCO,SAAS,wBAAwB,SAAA,EAAuC;AAC7E,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,UAAU,OAAA,CAAQ,CAAC,MAAM,CAAC,GAAG,CAAA,CAAE,OAAO,CAAC,CAAA;AAAA,IAEhD,MAAM,QAAQ,GAAA,EAA2C;AACvD,MAAA,MAAM,MAAA,GAAS,cAAc,GAAG,CAAA;AAChC,MAAA,IAAI,CAAC,MAAA,EAAQ;AACX,QAAA,OAAO;AAAA,UACL,WAAA,EAAa,IAAA;AAAA,UACb,qBAAA,EAAuB,EAAE,KAAA,EAAO,YAAA,EAAa;AAAA,UAC7C,qBAAqB;AAAC,SACxB;AAAA,MACF;AAEA,MAAA,KAAA,MAAW,YAAY,SAAA,EAAW;AAChC,QAAA,IAAI,QAAA,CAAS,OAAA,CAAQ,QAAA,CAAS,MAAM,CAAA,EAAG;AACrC,UAAA,OAAO,QAAA,CAAS,QAAQ,GAAG,CAAA;AAAA,QAC7B;AAAA,MACF;AAEA,MAAA,OAAO;AAAA,QACL,WAAA,EAAa,IAAA;AAAA,QACb,qBAAA,EAAuB,EAAE,KAAA,EAAO,oBAAA,EAAqB;AAAA,QACrD,qBAAqB;AAAC,OACxB;AAAA,IACF;AAAA,GACF;AACF;AAKA,SAAS,cAAc,GAAA,EAA4B;AACjD,EAAA,IAAI,CAAC,GAAA,CAAI,UAAA,CAAW,MAAM,GAAG,OAAO,IAAA;AACpC,EAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,KAAA,CAAM,GAAG,CAAA;AAC3B,EAAA,IAAI,KAAA,CAAM,MAAA,GAAS,CAAA,EAAG,OAAO,IAAA;AAC7B,EAAA,OAAO,MAAM,CAAC,CAAA;AAChB;;;AC1DO,IAAM,QAAA,GAAN,cAAuB,KAAA,CAAM;AAAA,EACzB,IAAA;AAAA,EAET,WAAA,CAAY,MAAoB,OAAA,EAAiB;AAC/C,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,UAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAAA,EACd;AACF;;;ACPA,IAAM,4BAA4B,IAAI,UAAA,CAAW,CAAC,GAAA,EAAM,CAAI,CAAC,CAAA;AAG7D,IAAM,kBAAA,GAAqB,EAAA;AAG3B,IAAM,yBAAA,GAA4B,0BAA0B,MAAA,GAAS,kBAAA;AAMrE,IAAM,eAAA,GAAkB,4DAAA;AACxB,IAAM,UAAA,uBAAiB,GAAA,EAAoB;AAC3C,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,eAAA,CAAgB,QAAQ,CAAA,EAAA,EAAK;AAC/C,EAAA,UAAA,CAAW,GAAA,CAAI,eAAA,CAAgB,CAAC,CAAA,EAAG,CAAC,CAAA;AACtC;AAEA,SAAS,gBAAgB,KAAA,EAA2B;AAClD,EAAA,IAAI,MAAM,MAAA,KAAW,CAAA,EAAG,OAAO,IAAI,WAAW,CAAC,CAAA;AAG/C,EAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,EAAA,OAAO,QAAQ,KAAA,CAAM,MAAA,IAAU,KAAA,CAAM,KAAK,MAAM,GAAA,EAAK;AACnD,IAAA,KAAA,EAAA;AAAA,EACF;AAGA,EAAA,MAAM,OAAO,IAAA,CAAK,IAAA,CAAM,MAAM,MAAA,GAAS,GAAA,GAAO,GAAI,CAAA,GAAI,CAAA;AACtD,EAAA,MAAM,IAAA,GAAO,IAAI,UAAA,CAAW,IAAI,CAAA;AAChC,EAAA,IAAI,MAAA,GAAS,CAAA;AAEb,EAAA,KAAA,IAAS,CAAA,GAAI,KAAA,EAAO,CAAA,GAAI,KAAA,CAAM,QAAQ,CAAA,EAAA,EAAK;AACzC,IAAA,MAAM,KAAA,GAAQ,UAAA,CAAW,GAAA,CAAI,KAAA,CAAM,CAAC,CAAC,CAAA;AACrC,IAAA,IAAI,UAAU,MAAA,EAAW;AACvB,MAAA,MAAM,IAAI,QAAA,CAAS,wBAAA,EAA0B,gCAAgC,KAAA,CAAM,CAAC,CAAC,CAAA,CAAE,CAAA;AAAA,IACzF;AACA,IAAA,IAAI,KAAA,GAAQ,KAAA;AACZ,IAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,MAAA,IAAU,KAAA,GAAQ,GAAG,CAAA,EAAA,EAAK;AAC5C,MAAA,KAAA,IAAS,EAAA,IAAM,IAAA,CAAK,CAAC,CAAA,IAAK,CAAA,CAAA;AAC1B,MAAA,IAAA,CAAK,CAAC,IAAI,KAAA,GAAQ,GAAA;AAClB,MAAA,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,KAAA,GAAQ,GAAG,CAAA;AAC9B,MAAA,IAAI,CAAA,IAAK,MAAA,EAAQ,MAAA,GAAS,CAAA,GAAI,CAAA;AAAA,IAChC;AAAA,EACF;AAGA,EAAA,MAAM,MAAA,GAAS,IAAI,UAAA,CAAW,KAAA,GAAQ,MAAM,CAAA;AAC5C,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,MAAA,EAAQ,CAAA,EAAA,EAAK;AAC/B,IAAA,MAAA,CAAO,QAAQ,MAAA,GAAS,CAAA,GAAI,CAAC,CAAA,GAAI,KAAK,CAAC,CAAA;AAAA,EACzC;AACA,EAAA,OAAO,MAAA;AACT;AAMA,SAAS,gBAAgB,KAAA,EAA2B;AAClD,EAAA,OAAO,IAAI,UAAA,CAAW,MAAA,CAAO,IAAA,CAAK,KAAA,EAAO,WAAW,CAAC,CAAA;AACvD;AAiBO,SAAS,4BAA4B,cAAA,EAAoC;AAC9E,EAAA,IAAI,cAAA,CAAe,SAAS,CAAA,EAAG;AAC7B,IAAA,MAAM,IAAI,QAAA,CAAS,wBAAA,EAA0B,2BAA2B,CAAA;AAAA,EAC1E;AAEA,EAAA,MAAM,MAAA,GAAS,eAAe,CAAC,CAAA;AAC/B,EAAA,MAAM,OAAA,GAAU,cAAA,CAAe,KAAA,CAAM,CAAC,CAAA;AACtC,EAAA,IAAI,OAAA;AAEJ,EAAA,IAAI,WAAW,GAAA,EAAK;AAClB,IAAA,OAAA,GAAU,gBAAgB,OAAO,CAAA;AAAA,EACnC,CAAA,MAAA,IAAW,WAAW,GAAA,EAAK;AACzB,IAAA,OAAA,GAAU,gBAAgB,OAAO,CAAA;AAAA,EACnC,CAAA,MAAO;AACL,IAAA,MAAM,IAAI,QAAA;AAAA,MACR,wBAAA;AAAA,MACA,kCAAkC,MAAM,CAAA,+CAAA;AAAA,KAC1C;AAAA,EACF;AAGA,EAAA,IAAI,OAAA,CAAQ,WAAW,yBAAA,EAA2B;AAChD,IAAA,MAAM,IAAI,QAAA;AAAA,MACR,qBAAA;AAAA,MACA,CAAA,SAAA,EAAY,yBAAyB,CAAA,gCAAA,EAAmC,OAAA,CAAQ,MAAM,CAAA;AAAA,KACxF;AAAA,EACF;AAGA,EAAA,IAAI,OAAA,CAAQ,CAAC,CAAA,KAAM,yBAAA,CAA0B,CAAC,CAAA,IAAK,OAAA,CAAQ,CAAC,CAAA,KAAM,yBAAA,CAA0B,CAAC,CAAA,EAAG;AAG9F,IAAA,MAAM,IAAI,QAAA,CAAS,qBAAA,EAAuB,6CAA6C,CAAA;AAAA,EACzF;AAEA,EAAA,OAAO,OAAA,CAAQ,MAAM,CAAC,CAAA;AACxB;;;ACjGO,IAAM,iBAAN,MAA4C;AAAA,EACxC,OAAA,GAAU,CAAC,KAAK,CAAA;AAAA,EAEzB,MAAM,QAAQ,GAAA,EAA2C;AAEvD,IAAA,IAAI,CAAC,GAAA,CAAI,UAAA,CAAW,UAAU,CAAA,EAAG;AAC/B,MAAA,OAAO;AAAA,QACL,WAAA,EAAa,IAAA;AAAA,QACb,qBAAA,EAAuB,EAAE,KAAA,EAAO,YAAA,EAAa;AAAA,QAC7C,qBAAqB;AAAC,OACxB;AAAA,IACF;AAEA,IAAA,MAAM,cAAA,GAAiB,GAAA,CAAI,KAAA,CAAM,UAAA,CAAW,MAAM,CAAA;AAClD,IAAA,IAAI,CAAC,cAAA,EAAgB;AACnB,MAAA,OAAO;AAAA,QACL,WAAA,EAAa,IAAA;AAAA,QACb,qBAAA,EAAuB,EAAE,KAAA,EAAO,YAAA,EAAa;AAAA,QAC7C,qBAAqB;AAAC,OACxB;AAAA,IACF;AAOA,IAAA,IAAI;AACF,MAAA,2BAAA,CAA4B,cAAc,CAAA;AAAA,IAC5C,SAAS,CAAA,EAAG;AACV,MAAA,IAAI,aAAa,QAAA,EAAU;AACzB,QAAA,OAAO;AAAA,UACL,WAAA,EAAa,IAAA;AAAA,UACb,qBAAA,EAAuB,EAAE,KAAA,EAAO,CAAA,CAAE,IAAA,EAAK;AAAA,UACvC,qBAAqB;AAAC,SACxB;AAAA,MACF;AACA,MAAA,OAAO;AAAA,QACL,WAAA,EAAa,IAAA;AAAA,QACb,qBAAA,EAAuB,EAAE,KAAA,EAAO,YAAA,EAAa;AAAA,QAC7C,qBAAqB;AAAC,OACxB;AAAA,IACF;AAGA,IAAA,MAAM,KAAA,GAAQ,CAAA,EAAG,GAAG,CAAA,CAAA,EAAI,cAAc,CAAA,CAAA;AAEtC,IAAA,MAAM,kBAAA,GAAyC;AAAA,MAC7C,EAAA,EAAI,KAAA;AAAA,MACJ,IAAA,EAAM,4BAAA;AAAA,MACN,UAAA,EAAY,GAAA;AAAA,MACZ,kBAAA,EAAoB;AAAA,KACtB;AAEA,IAAA,MAAM,QAAA,GAAwB;AAAA,MAC5B,UAAA,EAAY;AAAA,QACV,8BAAA;AAAA,QACA;AAAA,OACF;AAAA,MACA,EAAA,EAAI,GAAA;AAAA,MACJ,kBAAA,EAAoB,CAAC,kBAAkB,CAAA;AAAA,MACvC,cAAA,EAAgB,CAAC,KAAK,CAAA;AAAA,MACtB,eAAA,EAAiB,CAAC,KAAK;AAAA,KACzB;AAEA,IAAA,OAAO;AAAA,MACL,WAAA,EAAa,QAAA;AAAA,MACb,qBAAA,EAAuB,EAAE,WAAA,EAAa,sBAAA,EAAuB;AAAA,MAC7D,qBAAqB;AAAC,KACxB;AAAA,EACF;AACF;;;ACzBA,IAAM,qBAAqB,GAAA,GAAM,IAAA;AACjC,IAAM,kBAAA,GAAqB,GAAA;AAG3B,IAAM,2CAA2B,IAAI,GAAA,CAAI,CAAC,sBAAA,EAAwB,kBAAkB,CAAC,CAAA;AAM9E,IAAM,iBAAN,MAA4C;AAAA,EACxC,OAAA,GAAU,CAAC,KAAK,CAAA;AAAA,EAER,SAAA;AAAA,EACA,cAAA;AAAA,EACA,OAAA;AAAA,EAEjB,YAAY,OAAA,EAAgC;AAC1C,IAAA,IAAA,CAAK,SAAA,GAAY,QAAQ,SAAA,IAAa,kBAAA;AACtC,IAAA,IAAA,CAAK,cAAA,GAAiB,OAAA,CAAQ,cAAA,EAAgB,GAAA,CAAI,iBAAiB,CAAA;AACnE,IAAA,IAAA,CAAK,UAAU,OAAA,CAAQ,OAAA;AAAA,EACzB;AAAA,EAEA,MAAM,QAAQ,GAAA,EAA2C;AAEvD,IAAA,IAAI,CAAC,GAAA,CAAI,UAAA,CAAW,UAAU,CAAA,EAAG;AAC/B,MAAA,OAAO,YAAY,YAAY,CAAA;AAAA,IACjC;AAEA,IAAA,MAAM,gBAAA,GAAmB,GAAA,CAAI,KAAA,CAAM,UAAA,CAAW,MAAM,CAAA;AACpD,IAAA,IAAI,CAAC,gBAAA,EAAkB;AACrB,MAAA,OAAO,YAAY,YAAY,CAAA;AAAA,IACjC;AAGA,IAAA,MAAM,SAAA,GAAY,qBAAqB,gBAAgB,CAAA;AACvD,IAAA,IAAI,CAAC,UAAU,EAAA,EAAI;AACjB,MAAA,OAAO,YAAY,YAAY,CAAA;AAAA,IACjC;AACA,IAAA,MAAM,MAAM,SAAA,CAAU,GAAA;AAGtB,IAAA,MAAM,QAAA,GAAW,iBAAA,CAAkB,SAAA,CAAU,QAAQ,CAAA;AACrD,IAAA,IAAI,KAAK,cAAA,IAAkB,CAAC,KAAK,cAAA,CAAe,QAAA,CAAS,QAAQ,CAAA,EAAG;AAClE,MAAA,OAAO,YAAY,YAAY,CAAA;AAAA,IACjC;AAGA,IAAA,IAAI,WAAA;AACJ,IAAA,IAAI;AACF,MAAA,WAAA,GAAc,MAAM,IAAA,CAAK,OAAA,CAAiB,GAAA,EAAK;AAAA,QAC7C,WAAW,IAAA,CAAK,SAAA;AAAA,QAChB,gBAAA,EAAkB,kBAAA;AAAA,QAClB,YAAA,EAAc;AAAA,OACf,CAAA;AAAA,IACH,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,YAAY,UAAU,CAAA;AAAA,IAC/B;AAEA,IAAA,IAAI,CAAC,WAAA,CAAY,EAAA,IAAM,CAAC,YAAY,IAAA,EAAM;AACxC,MAAA,OAAO,YAAY,UAAU,CAAA;AAAA,IAC/B;AAKA,IAAA,IAAI,WAAA,CAAY,QAAA,IAAY,WAAA,CAAY,QAAA,KAAa,GAAA,EAAK;AACxD,MAAA,OAAO,YAAY,YAAY,CAAA;AAAA,IACjC;AAGA,IAAA,IAAI,YAAY,WAAA,EAAa;AAC3B,MAAA,MAAM,QAAA,GAAW,WAAA,CAAY,WAAA,CAAY,KAAA,CAAM,GAAG,EAAE,CAAC,CAAA,CAAE,IAAA,EAAK,CAAE,WAAA,EAAY;AAC1E,MAAA,IAAI,CAAC,wBAAA,CAAyB,GAAA,CAAI,QAAQ,CAAA,EAAG;AAC3C,QAAA,OAAO,YAAY,YAAY,CAAA;AAAA,MACjC;AAAA,IACF;AAGA,IAAA,MAAM,MAAM,WAAA,CAAY,IAAA;AACxB,IAAA,IAAI,OAAO,QAAQ,QAAA,IAAY,GAAA,KAAQ,QAAQ,KAAA,CAAM,OAAA,CAAQ,GAAG,CAAA,EAAG;AACjE,MAAA,OAAO,YAAY,YAAY,CAAA;AAAA,IACjC;AAEA,IAAA,MAAM,GAAA,GAAM,GAAA;AAEZ,IAAA,IAAI,OAAO,GAAA,CAAI,EAAA,KAAO,QAAA,EAAU;AAC9B,MAAA,OAAO,YAAY,YAAY,CAAA;AAAA,IACjC;AAGA,IAAA,IAAI,GAAA,CAAI,OAAO,GAAA,EAAK;AAClB,MAAA,OAAO,YAAY,YAAY,CAAA;AAAA,IACjC;AAEA,IAAA,OAAO;AAAA,MACL,WAAA,EAAa,GAAA;AAAA,MACb,qBAAA,EAAuB,EAAE,WAAA,EAAa,sBAAA,EAAuB;AAAA,MAC7D,qBAAqB;AAAC,KACxB;AAAA,EACF;AACF;AAuBA,SAAS,qBAAqB,gBAAA,EAA4C;AACxE,EAAA,MAAM,OAAyB,EAAE,EAAA,EAAI,OAAO,GAAA,EAAK,EAAA,EAAI,UAAU,EAAA,EAAG;AAGlE,EAAA,MAAM,KAAA,GAAQ,gBAAA,CAAiB,KAAA,CAAM,GAAG,CAAA;AACxC,EAAA,IAAI,MAAM,MAAA,KAAW,CAAA,IAAK,CAAC,KAAA,CAAM,CAAC,CAAA,EAAG;AACnC,IAAA,OAAO,IAAA;AAAA,EACT;AAGA,EAAA,IAAI,SAAA;AACJ,EAAA,IAAI;AACF,IAAA,SAAA,GAAY,kBAAA,CAAmB,KAAA,CAAM,CAAC,CAAC,CAAA;AAAA,EACzC,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AAGA,EAAA,IAAI,CAAC,SAAA,EAAW;AACd,IAAA,OAAO,IAAA;AAAA,EACT;AAGA,EAAA,IAAI,SAAA,CAAU,QAAA,CAAS,GAAG,CAAA,EAAG;AAC3B,IAAA,OAAO,IAAA;AAAA,EACT;AAGA,EAAA,IAAI,UAAU,QAAA,CAAS,GAAG,KAAK,SAAA,CAAU,QAAA,CAAS,GAAG,CAAA,EAAG;AACtD,IAAA,OAAO,IAAA;AAAA,EACT;AAGA,EAAA,IAAI,SAAA,CAAU,QAAA,CAAS,GAAG,CAAA,EAAG;AAC3B,IAAA,OAAO,IAAA;AAAA,EACT;AAGA,EAAA,IAAI,QAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAU,IAAI,GAAA,CAAI,CAAA,QAAA,EAAW,SAAS,CAAA,CAAE,CAAA;AAC9C,IAAA,QAAA,GAAW,OAAA,CAAQ,QAAA;AAGnB,IAAA,IAAI,OAAA,CAAQ,QAAA,IAAY,OAAA,CAAQ,QAAA,EAAU;AACxC,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AAGA,EAAA,IAAI,WAAA,CAAY,QAAQ,CAAA,EAAG;AACzB,IAAA,OAAO,IAAA;AAAA,EACT;AAGA,EAAA,IAAI,CAAC,QAAA,EAAU;AACb,IAAA,OAAO,IAAA;AAAA,EACT;AAGA,EAAA,IAAI,KAAA,CAAM,SAAS,CAAA,EAAG;AACpB,IAAA,MAAM,SAAA,GAAY,KAAA,CAAM,KAAA,CAAM,CAAC,CAAA;AAE/B,IAAA,KAAA,MAAW,WAAW,SAAA,EAAW;AAE/B,MAAA,IAAI,CAAC,OAAA,EAAS;AACZ,QAAA,OAAO,IAAA;AAAA,MACT;AAGA,MAAA,IAAI,OAAA;AACJ,MAAA,IAAI;AACF,QAAA,OAAA,GAAU,mBAAmB,OAAO,CAAA;AAAA,MACtC,CAAA,CAAA,MAAQ;AACN,QAAA,OAAO,IAAA;AAAA,MACT;AAEA,MAAA,IAAI,OAAA,CAAQ,QAAA,CAAS,GAAG,CAAA,IAAK,OAAA,CAAQ,QAAA,CAAS,GAAG,CAAA,IAAK,OAAA,CAAQ,QAAA,CAAS,GAAG,CAAA,EAAG;AAC3E,QAAA,OAAO,IAAA;AAAA,MACT;AAAA,IACF;AAEA,IAAA,MAAM,eAAA,GAAkB,SAAA,CAAU,GAAA,CAAI,kBAAkB,CAAA;AACxD,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,IAAA;AAAA,MACJ,KAAK,CAAA,QAAA,EAAW,SAAS,IAAI,eAAA,CAAgB,IAAA,CAAK,GAAG,CAAC,CAAA,SAAA,CAAA;AAAA,MACtD;AAAA,KACF;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,IAAA;AAAA,IACJ,GAAA,EAAK,WAAW,SAAS,CAAA,qBAAA,CAAA;AAAA,IACzB;AAAA,GACF;AACF;AAKA,SAAS,YAAY,QAAA,EAA2B;AAC9C,EAAA,IAAI,QAAA,CAAS,UAAA,CAAW,GAAG,CAAA,EAAG,OAAO,IAAA;AACrC,EAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,KAAA,CAAM,GAAG,CAAA;AAChC,EAAA,IAAI,KAAA,CAAM,MAAA,KAAW,CAAA,IAAK,KAAA,CAAM,KAAA,CAAM,CAAC,CAAA,KAAM,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAC,CAAA,EAAG,OAAO,IAAA;AACtE,EAAA,OAAO,KAAA;AACT;AAUA,SAAS,kBAAkB,IAAA,EAAsB;AAC/C,EAAA,OAAO,IAAA,CAAK,WAAA,EAAY,CAAE,OAAA,CAAQ,OAAO,EAAE,CAAA;AAC7C;AAEA,SAAS,YAAY,KAAA,EAAoC;AACvD,EAAA,OAAO;AAAA,IACL,WAAA,EAAa,IAAA;AAAA,IACb,qBAAA,EAAuB,EAAE,KAAA,EAAM;AAAA,IAC/B,qBAAqB;AAAC,GACxB;AACF;;;ACrRO,SAAS,sBAAA,CACd,UACA,OAAA,EACmB;AACnB,EAAA,MAAM,OAAA,GAAU,QAAA,CAAS,kBAAA,IAAsB,EAAC;AAChD,EAAA,MAAM,YAAA,GAAe,SAAS,YAAA,IAAgB,gBAAA;AAC9C,EAAA,MAAM,QAAQ,OAAA,EAAS,KAAA;AAGvB,EAAA,MAAM,gBAAA,GAAmB,mBAAA,CAAoB,QAAA,EAAU,YAAY,CAAA;AAGnE,EAAA,MAAM,aAA2B,EAAC;AAElC,EAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAE5B,IAAA,IAAI,KAAA,IAAS,MAAA,CAAO,EAAA,KAAO,KAAA,EAAO;AAChC,MAAA;AAAA,IACF;AAGA,IAAA,IAAI,gBAAA,CAAiB,SAAS,CAAA,IAAK,CAAC,iBAAiB,QAAA,CAAS,MAAA,CAAO,EAAE,CAAA,EAAG;AACxE,MAAA;AAAA,IACF;AAGA,IAAA,MAAM,GAAA,GAAM,kBAAkB,MAAM,CAAA;AACpC,IAAA,IAAI,GAAA,EAAK;AACP,MAAA,UAAA,CAAW,KAAK,GAAG,CAAA;AAAA,IACrB;AAAA,EACF;AAGA,EAAA,IAAI,UAAA,CAAW,MAAA,KAAW,CAAA,IAAK,gBAAA,CAAiB,SAAS,CAAA,EAAG;AAC1D,IAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,MAAA,IAAI,KAAA,IAAS,MAAA,CAAO,EAAA,KAAO,KAAA,EAAO;AAClC,MAAA,MAAM,GAAA,GAAM,kBAAkB,MAAM,CAAA;AACpC,MAAA,IAAI,GAAA,EAAK,UAAA,CAAW,IAAA,CAAK,GAAG,CAAA;AAAA,IAC9B;AAAA,EACF;AAEA,EAAA,IAAI,UAAA,CAAW,WAAW,CAAA,EAAG;AAC3B,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,IAAI,UAAA,CAAW,WAAW,CAAA,EAAG;AAC3B,IAAA,OAAO,WAAW,CAAC,CAAA;AAAA,EACrB;AAGA,EAAA,MAAM,IAAI,QAAA;AAAA,IACR,qBAAA;AAAA,IACA,CAAA,MAAA,EAAS,WAAW,MAAM,CAAA,gDAAA;AAAA,GAC5B;AACF;AASA,SAAS,mBAAA,CACP,UACA,YAAA,EACU;AACV,EAAA,MAAM,IAAA,GAAO,SAAS,YAAY,CAAA;AAClC,EAAA,IAAI,CAAC,IAAA,EAAM,OAAO,EAAC;AAEnB,EAAA,OAAO,KACJ,GAAA,CAAI,CAAC,GAAA,KAAS,OAAO,QAAQ,QAAA,GAAW,GAAA,GAAM,GAAA,CAAI,EAAG,EACrD,MAAA,CAAO,CAAC,EAAA,KAAqB,OAAO,OAAO,QAAQ,CAAA;AACxD;AAMA,SAAS,kBAAkB,MAAA,EAA+C;AAExE,EAAA,IAAI,OAAO,kBAAA,EAAoB;AAC7B,IAAA,IAAI;AACF,MAAA,OAAO,2BAAA,CAA4B,OAAO,kBAAkB,CAAA;AAAA,IAC9D,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AAGA,EAAA,IAAI,OAAO,YAAA,EAAc;AACvB,IAAA,MAAM,MAAM,MAAA,CAAO,YAAA;AACnB,IAAA,IAAI,GAAA,CAAI,QAAQ,KAAA,IAAS,GAAA,CAAI,QAAQ,SAAA,IAAa,OAAO,GAAA,CAAI,CAAA,KAAM,QAAA,EAAU;AAC3E,MAAA,IAAI;AAEF,QAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,MAAA,CAAO,KAAK,GAAA,CAAI,CAAA,EAAG,WAAW,CAAC,CAAA;AAC5D,QAAA,IAAI,KAAA,CAAM,MAAA,KAAW,EAAA,EAAI,OAAO,KAAA;AAAA,MAClC,CAAA,CAAA,MAAQ;AACN,QAAA,OAAO,IAAA;AAAA,MACT;AAAA,IACF;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,OAAO,IAAA;AACT;;;AC/HA,IAAM,cAAA,GAAiB,IAAI,EAAA,GAAK,GAAA;AAChC,IAAM,mBAAA,GAAsB,GAAA;AAqBrB,IAAM,kBAAN,MAA6C;AAAA,EACzC,OAAA;AAAA,EAEQ,KAAA;AAAA,EACA,KAAA;AAAA,EACA,UAAA;AAAA,EACA,KAAA,uBAAY,GAAA,EAAwB;AAAA,EAErD,WAAA,CAAY,OAAoB,OAAA,EAAkC;AAChE,IAAA,IAAA,CAAK,KAAA,GAAQ,KAAA;AACb,IAAA,IAAA,CAAK,UAAU,KAAA,CAAM,OAAA;AACrB,IAAA,IAAA,CAAK,KAAA,GAAQ,SAAS,KAAA,IAAS,cAAA;AAC/B,IAAA,IAAA,CAAK,UAAA,GAAa,SAAS,UAAA,IAAc,mBAAA;AAAA,EAC3C;AAAA,EAEA,MAAM,QAAQ,GAAA,EAA2C;AACvD,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AAGrB,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,GAAG,CAAA;AACjC,IAAA,IAAI,MAAA,IAAU,MAAA,CAAO,SAAA,GAAY,GAAA,EAAK;AACpC,MAAA,OAAO,eAAA,CAAgB,OAAO,MAAM,CAAA;AAAA,IACtC;AAGA,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,IAAA,CAAK,KAAA,CAAM,OAAO,GAAG,CAAA;AAAA,IACvB;AAGA,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,KAAA,CAAM,QAAQ,GAAG,CAAA;AAG3C,IAAA,IAAI,MAAA,CAAO,gBAAgB,IAAA,EAAM;AAE/B,MAAA,IAAI,IAAA,CAAK,KAAA,CAAM,IAAA,IAAQ,IAAA,CAAK,UAAA,EAAY;AACtC,QAAA,MAAM,YAAY,IAAA,CAAK,KAAA,CAAM,IAAA,EAAK,CAAE,MAAK,CAAE,KAAA;AAC3C,QAAA,IAAI,cAAc,MAAA,EAAW;AAC3B,UAAA,IAAA,CAAK,KAAA,CAAM,OAAO,SAAS,CAAA;AAAA,QAC7B;AAAA,MACF;AAEA,MAAA,IAAA,CAAK,KAAA,CAAM,IAAI,GAAA,EAAK;AAAA,QAClB,MAAA,EAAQ,gBAAgB,MAAM,CAAA;AAAA,QAC9B,SAAA,EAAW,MAAM,IAAA,CAAK;AAAA,OACvB,CAAA;AAAA,IACH;AAEA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA;AAAA,EAGA,WAAW,GAAA,EAAmB;AAC5B,IAAA,IAAA,CAAK,KAAA,CAAM,OAAO,GAAG,CAAA;AAAA,EACvB;AAAA;AAAA,EAGA,KAAA,GAAc;AACZ,IAAA,IAAA,CAAK,MAAM,KAAA,EAAM;AAAA,EACnB;AAAA;AAAA,EAGA,IAAI,IAAA,GAAe;AACjB,IAAA,OAAO,KAAK,KAAA,CAAM,IAAA;AAAA,EACpB;AACF;AAUA,SAAS,gBAAgB,MAAA,EAAkD;AACzE,EAAA,OAAO,gBAAgB,MAAM,CAAA;AAC/B","file":"index.mjs","sourcesContent":["/**\n * DID Resolver interface and composite resolver.\n *\n * Pluggable resolver architecture: callers instantiate and configure\n * resolvers explicitly (DD-52: no ambient key discovery).\n */\n\nimport type { DIDResolutionResult } from './types.js';\n\n// ---------------------------------------------------------------------------\n// Interface\n// ---------------------------------------------------------------------------\n\n/**\n * Interface for DID resolvers.\n *\n * Each resolver handles one or more DID methods (e.g., ['key'], ['web']).\n * Resolution returns a W3C DID Resolution Result.\n */\nexport interface DIDResolver {\n  /** DID methods this resolver handles (e.g., ['key'] for did:key) */\n  readonly methods: readonly string[];\n  /** Resolve a DID to its DID Document */\n  resolve(did: string): Promise<DIDResolutionResult>;\n}\n\n// ---------------------------------------------------------------------------\n// Composite Resolver\n// ---------------------------------------------------------------------------\n\n/**\n * Create a composite resolver that delegates to method-specific resolvers.\n *\n * Tries resolvers in order by method match. The first resolver whose\n * `methods` array includes the DID's method handles the resolution.\n *\n * @param resolvers - Array of method-specific resolvers\n * @returns A composite resolver that delegates by method\n */\nexport function createCompositeResolver(resolvers: DIDResolver[]): DIDResolver {\n  return {\n    methods: resolvers.flatMap((r) => [...r.methods]),\n\n    async resolve(did: string): Promise<DIDResolutionResult> {\n      const method = extractMethod(did);\n      if (!method) {\n        return {\n          didDocument: null,\n          didResolutionMetadata: { error: 'invalidDid' },\n          didDocumentMetadata: {},\n        };\n      }\n\n      for (const resolver of resolvers) {\n        if (resolver.methods.includes(method)) {\n          return resolver.resolve(did);\n        }\n      }\n\n      return {\n        didDocument: null,\n        didResolutionMetadata: { error: 'methodNotSupported' },\n        didDocumentMetadata: {},\n      };\n    },\n  };\n}\n\n/**\n * Extract the method from a DID string (e.g., \"key\" from \"did:key:z6Mk...\").\n */\nfunction extractMethod(did: string): string | null {\n  if (!did.startsWith('did:')) return null;\n  const parts = did.split(':');\n  if (parts.length < 3) return null;\n  return parts[1];\n}\n","/**\n * DID adapter error types.\n *\n * Uses error codes registered in specs/kernel/errors.json (PR3 #571).\n */\n\n/** DID-specific error codes (registered in kernel) */\nexport type DIDErrorCode =\n  | 'E_DID_RESOLUTION_FAILED'\n  | 'E_DID_DOCUMENT_INVALID'\n  | 'E_DID_KEY_NOT_FOUND'\n  | 'E_DID_UNSUPPORTED_METHOD'\n  | 'E_DID_DEACTIVATED'\n  | 'E_DID_KEY_AMBIGUOUS';\n\n/**\n * Error thrown by DID adapter operations.\n */\nexport class DIDError extends Error {\n  readonly code: DIDErrorCode;\n\n  constructor(code: DIDErrorCode, message: string) {\n    super(message);\n    this.name = 'DIDError';\n    this.code = code;\n  }\n}\n","/**\n * Ed25519 multicodec prefix parsing.\n *\n * Supports both multibase forms allowed by the did:key spec (CCG v0.9):\n * - 'z' prefix: base58btc encoding\n * - 'u' prefix: base64url encoding\n *\n * The Ed25519 multicodec prefix is 0xed01 as a varint (2 bytes).\n * After stripping the 2-byte prefix, the remaining 32 bytes are\n * the raw Ed25519 public key.\n */\n\nimport { DIDError } from './errors.js';\n\n// ---------------------------------------------------------------------------\n// Constants\n// ---------------------------------------------------------------------------\n\n/** Ed25519 multicodec prefix as varint: [0xed, 0x01] */\nconst ED25519_MULTICODEC_PREFIX = new Uint8Array([0xed, 0x01]);\n\n/** Expected Ed25519 public key length in bytes */\nconst ED25519_KEY_LENGTH = 32;\n\n/** Total expected length: 2 byte prefix + 32 byte key */\nconst ED25519_MULTICODEC_LENGTH = ED25519_MULTICODEC_PREFIX.length + ED25519_KEY_LENGTH;\n\n// ---------------------------------------------------------------------------\n// Base58btc decoder (minimal, for 'z' prefix multibase)\n// ---------------------------------------------------------------------------\n\nconst BASE58_ALPHABET = '123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz';\nconst BASE58_MAP = new Map<string, number>();\nfor (let i = 0; i < BASE58_ALPHABET.length; i++) {\n  BASE58_MAP.set(BASE58_ALPHABET[i], i);\n}\n\nfunction base58btcDecode(input: string): Uint8Array {\n  if (input.length === 0) return new Uint8Array(0);\n\n  // Count leading '1's (zero bytes)\n  let zeros = 0;\n  while (zeros < input.length && input[zeros] === '1') {\n    zeros++;\n  }\n\n  // Decode\n  const size = Math.ceil((input.length * 733) / 1000) + 1;\n  const b256 = new Uint8Array(size);\n  let length = 0;\n\n  for (let i = zeros; i < input.length; i++) {\n    const value = BASE58_MAP.get(input[i]);\n    if (value === undefined) {\n      throw new DIDError('E_DID_DOCUMENT_INVALID', `Invalid base58btc character: ${input[i]}`);\n    }\n    let carry = value;\n    for (let j = 0; j < length || carry > 0; j++) {\n      carry += 58 * (b256[j] || 0);\n      b256[j] = carry % 256;\n      carry = Math.floor(carry / 256);\n      if (j >= length) length = j + 1;\n    }\n  }\n\n  // Build result with leading zeros\n  const result = new Uint8Array(zeros + length);\n  for (let i = 0; i < length; i++) {\n    result[zeros + length - 1 - i] = b256[i];\n  }\n  return result;\n}\n\n// ---------------------------------------------------------------------------\n// Base64url decoder (for 'u' prefix multibase)\n// ---------------------------------------------------------------------------\n\nfunction base64urlDecode(input: string): Uint8Array {\n  return new Uint8Array(Buffer.from(input, 'base64url'));\n}\n\n// ---------------------------------------------------------------------------\n// Public API\n// ---------------------------------------------------------------------------\n\n/**\n * Extract an Ed25519 public key from a multibase-encoded multicodec value.\n *\n * Supports both multibase prefixes:\n * - 'z': base58btc (e.g., did:key:z6Mk...)\n * - 'u': base64url\n *\n * @param multibaseValue - The multibase-encoded value (including prefix character)\n * @returns 32-byte Ed25519 public key\n * @throws DIDError if not Ed25519 or malformed\n */\nexport function extractEd25519FromMultibase(multibaseValue: string): Uint8Array {\n  if (multibaseValue.length < 2) {\n    throw new DIDError('E_DID_DOCUMENT_INVALID', 'Multibase value too short');\n  }\n\n  const prefix = multibaseValue[0];\n  const encoded = multibaseValue.slice(1);\n  let decoded: Uint8Array;\n\n  if (prefix === 'z') {\n    decoded = base58btcDecode(encoded);\n  } else if (prefix === 'u') {\n    decoded = base64urlDecode(encoded);\n  } else {\n    throw new DIDError(\n      'E_DID_DOCUMENT_INVALID',\n      `Unsupported multibase prefix: '${prefix}'. Expected 'z' (base58btc) or 'u' (base64url).`\n    );\n  }\n\n  // Check total length\n  if (decoded.length !== ED25519_MULTICODEC_LENGTH) {\n    throw new DIDError(\n      'E_DID_KEY_NOT_FOUND',\n      `Expected ${ED25519_MULTICODEC_LENGTH} bytes (2 prefix + 32 key), got ${decoded.length}`\n    );\n  }\n\n  // Verify Ed25519 multicodec prefix (0xed, 0x01)\n  if (decoded[0] !== ED25519_MULTICODEC_PREFIX[0] || decoded[1] !== ED25519_MULTICODEC_PREFIX[1]) {\n    // Non-Ed25519 key type: do NOT throw an oracle-revealing error about\n    // what type it is. Just say Ed25519 not found.\n    throw new DIDError('E_DID_KEY_NOT_FOUND', 'Multicodec prefix does not indicate Ed25519');\n  }\n\n  return decoded.slice(2);\n}\n","/**\n * did:key resolver (Ed25519, zero network I/O).\n *\n * Implements the did:key method spec (W3C CCG v0.9).\n * Parses the multicodec-encoded Ed25519 public key directly from\n * the DID string. No network requests, no ambient discovery.\n *\n * Only Ed25519 keys (multicodec 0xed01) are supported.\n * Non-Ed25519 did:key DIDs produce an error without revealing\n * the actual key type (no oracle).\n */\n\nimport type { DIDDocument, VerificationMethod } from './types.js';\nimport type { DIDResolutionResult } from './types.js';\nimport type { DIDResolver } from './resolver.js';\nimport { extractEd25519FromMultibase } from './multicodec.js';\nimport { DIDError } from './errors.js';\n\n// ---------------------------------------------------------------------------\n// did:key Resolver\n// ---------------------------------------------------------------------------\n\n/**\n * Resolver for the did:key method.\n *\n * did:key encodes the public key directly in the DID string.\n * Resolution is pure computation with zero network I/O.\n *\n * @example\n * ```typescript\n * const resolver = new DidKeyResolver();\n * const result = await resolver.resolve('did:key:z6MkhaXgBZDvotDkL...');\n * const key = extractVerificationKey(result.didDocument!);\n * ```\n */\nexport class DidKeyResolver implements DIDResolver {\n  readonly methods = ['key'] as const;\n\n  async resolve(did: string): Promise<DIDResolutionResult> {\n    // Validate DID format\n    if (!did.startsWith('did:key:')) {\n      return {\n        didDocument: null,\n        didResolutionMetadata: { error: 'invalidDid' },\n        didDocumentMetadata: {},\n      };\n    }\n\n    const multibaseValue = did.slice('did:key:'.length);\n    if (!multibaseValue) {\n      return {\n        didDocument: null,\n        didResolutionMetadata: { error: 'invalidDid' },\n        didDocumentMetadata: {},\n      };\n    }\n\n    // Extract Ed25519 public key (validates multicodec prefix).\n    // Validate the multibase value contains a valid Ed25519 key.\n    // Error boundary: DIDError.code is PEAC-internal (E_DID_*).\n    // didResolutionMetadata.error uses DID-resolution-style values\n    // for the public adapter contract.\n    try {\n      extractEd25519FromMultibase(multibaseValue);\n    } catch (e) {\n      if (e instanceof DIDError) {\n        return {\n          didDocument: null,\n          didResolutionMetadata: { error: e.code },\n          didDocumentMetadata: {},\n        };\n      }\n      return {\n        didDocument: null,\n        didResolutionMetadata: { error: 'invalidDid' },\n        didDocumentMetadata: {},\n      };\n    }\n\n    // Build DID Document with the extracted key\n    const keyId = `${did}#${multibaseValue}`;\n\n    const verificationMethod: VerificationMethod = {\n      id: keyId,\n      type: 'Ed25519VerificationKey2020',\n      controller: did,\n      publicKeyMultibase: multibaseValue,\n    };\n\n    const document: DIDDocument = {\n      '@context': [\n        'https://www.w3.org/ns/did/v1',\n        'https://w3id.org/security/suites/ed25519-2020/v1',\n      ],\n      id: did,\n      verificationMethod: [verificationMethod],\n      authentication: [keyId],\n      assertionMethod: [keyId],\n    };\n\n    return {\n      didDocument: document,\n      didResolutionMetadata: { contentType: 'application/did+json' },\n      didDocumentMetadata: {},\n    };\n  }\n}\n","/**\n * did:web resolver using a caller-provided SSRF-hardened fetch.\n *\n * Implements the did:web method spec (W3C CCG draft).\n * Resolves did:web DIDs to DID Documents via HTTPS fetch.\n *\n * Callers MUST provide a hardened fetch function (e.g., safeFetchJson\n * from @peac/net-node) that enforces:\n * - HTTPS only\n * - No redirects\n * - Private-IP / DNS-rebinding protections\n * - Timeout\n * - Response size limit\n *\n * This resolver adds:\n * - did:web authority/path validation (no userinfo, no query/fragment,\n *   no empty segments, no IP literals)\n * - Content-type enforcement (application/did+json or application/json)\n * - Exact DID Document id match (DD-203)\n * - Domain allowlist (optional)\n *\n * URL transformation rules:\n * - did:web:example.com -> https://example.com/.well-known/did.json\n * - did:web:example.com:path:to -> https://example.com/path/to/did.json\n * - did:web:example.com%3A8443 -> https://example.com:8443/.well-known/did.json\n */\n\nimport type { DIDDocument } from './types.js';\nimport type { DIDResolutionResult } from './types.js';\nimport type { DIDResolver } from './resolver.js';\n\n// ---------------------------------------------------------------------------\n// Fetch Contract\n// ---------------------------------------------------------------------------\n\n/**\n * Result shape for the caller-provided hardened fetch function.\n *\n * Callers should use safeFetchJson from @peac/net-node, which returns\n * this shape. The resolver uses contentType and finalUrl for additional\n * validation beyond what the fetch function itself enforces.\n */\nexport interface HardenedFetchResult<T = unknown> {\n  ok: boolean;\n  data?: T;\n  code?: string;\n  error?: string;\n  /** Content-Type of the response (for validation) */\n  contentType?: string;\n  /** Final URL after any processing (for redirect detection) */\n  finalUrl?: string;\n}\n\nexport type HardenedFetchFn = <T = unknown>(\n  url: string,\n  options?: { timeoutMs?: number; maxResponseBytes?: number; maxRedirects?: number }\n) => Promise<HardenedFetchResult<T>>;\n\n// ---------------------------------------------------------------------------\n// Options\n// ---------------------------------------------------------------------------\n\nexport interface DidWebResolverOptions {\n  /** Request timeout in milliseconds (default: 5000) */\n  timeoutMs?: number;\n  /**\n   * Optional domain allowlist (lowercase). If set, only these domains\n   * are permitted. Comparison is case-insensitive.\n   */\n  allowedDomains?: string[];\n  /**\n   * SSRF-hardened fetch function. Required.\n   * Use safeFetchJson from @peac/net-node for production.\n   */\n  fetchFn: HardenedFetchFn;\n}\n\n// ---------------------------------------------------------------------------\n// Constants\n// ---------------------------------------------------------------------------\n\nconst MAX_DOCUMENT_BYTES = 256 * 1024;\nconst DEFAULT_TIMEOUT_MS = 5000;\n\n/** Acceptable content types for DID Documents */\nconst ACCEPTABLE_CONTENT_TYPES = new Set(['application/did+json', 'application/json']);\n\n// ---------------------------------------------------------------------------\n// did:web Resolver\n// ---------------------------------------------------------------------------\n\nexport class DidWebResolver implements DIDResolver {\n  readonly methods = ['web'] as const;\n\n  private readonly timeoutMs: number;\n  private readonly allowedDomains: string[] | undefined;\n  private readonly fetchFn: HardenedFetchFn;\n\n  constructor(options: DidWebResolverOptions) {\n    this.timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;\n    this.allowedDomains = options.allowedDomains?.map(normalizeHostname);\n    this.fetchFn = options.fetchFn;\n  }\n\n  async resolve(did: string): Promise<DIDResolutionResult> {\n    // 1. Validate DID format\n    if (!did.startsWith('did:web:')) {\n      return errorResult('invalidDid');\n    }\n\n    const methodSpecificId = did.slice('did:web:'.length);\n    if (!methodSpecificId) {\n      return errorResult('invalidDid');\n    }\n\n    // 2. Validate and transform to URL\n    const urlResult = validateAndTransform(methodSpecificId);\n    if (!urlResult.ok) {\n      return errorResult('invalidDid');\n    }\n    const url = urlResult.url;\n\n    // 3. Domain allowlist check (case-insensitive, trailing-dot-normalized)\n    const hostname = normalizeHostname(urlResult.hostname);\n    if (this.allowedDomains && !this.allowedDomains.includes(hostname)) {\n      return errorResult('invalidDid');\n    }\n\n    // 4. Fetch DID Document\n    let fetchResult: HardenedFetchResult;\n    try {\n      fetchResult = await this.fetchFn<unknown>(url, {\n        timeoutMs: this.timeoutMs,\n        maxResponseBytes: MAX_DOCUMENT_BYTES,\n        maxRedirects: 0,\n      });\n    } catch {\n      return errorResult('notFound');\n    }\n\n    if (!fetchResult.ok || !fetchResult.data) {\n      return errorResult('notFound');\n    }\n\n    // 5. Redirect detection: if finalUrl is provided, it must match the\n    // requested URL exactly. The fetch contract uses maxRedirects: 0, so\n    // any discrepancy indicates the fetcher did not enforce no-redirect.\n    if (fetchResult.finalUrl && fetchResult.finalUrl !== url) {\n      return errorResult('invalidDid');\n    }\n\n    // 6. Content-type enforcement (application/did+json or application/json)\n    if (fetchResult.contentType) {\n      const baseType = fetchResult.contentType.split(';')[0].trim().toLowerCase();\n      if (!ACCEPTABLE_CONTENT_TYPES.has(baseType)) {\n        return errorResult('invalidDid');\n      }\n    }\n\n    // 7. Validate response is a JSON object with `id` field\n    const raw = fetchResult.data;\n    if (typeof raw !== 'object' || raw === null || Array.isArray(raw)) {\n      return errorResult('invalidDid');\n    }\n\n    const doc = raw as DIDDocument;\n\n    if (typeof doc.id !== 'string') {\n      return errorResult('invalidDid');\n    }\n\n    // 8. Exact `id` match (DD-203)\n    if (doc.id !== did) {\n      return errorResult('invalidDid');\n    }\n\n    return {\n      didDocument: doc,\n      didResolutionMetadata: { contentType: 'application/did+json' },\n      didDocumentMetadata: {},\n    };\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Authority + Path Validation (Fix 2: strict validation)\n// ---------------------------------------------------------------------------\n\ninterface ValidationResult {\n  ok: boolean;\n  url: string;\n  hostname: string;\n}\n\n/**\n * Validate and transform a did:web method-specific identifier to an HTTPS URL.\n *\n * Rejects:\n * - IP literals (IPv4, IPv6)\n * - Userinfo in authority\n * - Query or fragment components\n * - Empty path segments\n * - Malformed percent encoding\n * - Empty host\n */\nfunction validateAndTransform(methodSpecificId: string): ValidationResult {\n  const fail: ValidationResult = { ok: false, url: '', hostname: '' };\n\n  // Split on ':' for domain + optional path segments\n  const parts = methodSpecificId.split(':');\n  if (parts.length === 0 || !parts[0]) {\n    return fail;\n  }\n\n  // Decode authority (handles %3A for port)\n  let authority: string;\n  try {\n    authority = decodeURIComponent(parts[0]);\n  } catch {\n    return fail; // Malformed percent encoding\n  }\n\n  // Reject empty authority\n  if (!authority) {\n    return fail;\n  }\n\n  // Reject userinfo (@ in authority)\n  if (authority.includes('@')) {\n    return fail;\n  }\n\n  // Reject query/fragment in authority\n  if (authority.includes('?') || authority.includes('#')) {\n    return fail;\n  }\n\n  // Reject encoded slashes in authority (path traversal attempt)\n  if (authority.includes('/')) {\n    return fail;\n  }\n\n  // Parse hostname (with possible port)\n  let hostname: string;\n  try {\n    const testUrl = new URL(`https://${authority}`);\n    hostname = testUrl.hostname;\n\n    // Reject if URL constructor added unexpected components\n    if (testUrl.username || testUrl.password) {\n      return fail;\n    }\n  } catch {\n    return fail; // Invalid authority\n  }\n\n  // Reject IP literals\n  if (isIPLiteral(hostname)) {\n    return fail;\n  }\n\n  // Reject empty hostname\n  if (!hostname) {\n    return fail;\n  }\n\n  // Decode and validate path segments\n  if (parts.length > 1) {\n    const pathParts = parts.slice(1);\n\n    for (const segment of pathParts) {\n      // Reject empty path segments\n      if (!segment) {\n        return fail;\n      }\n\n      // Decode and reject slashes/query/fragment in segments\n      let decoded: string;\n      try {\n        decoded = decodeURIComponent(segment);\n      } catch {\n        return fail;\n      }\n\n      if (decoded.includes('/') || decoded.includes('?') || decoded.includes('#')) {\n        return fail;\n      }\n    }\n\n    const decodedSegments = pathParts.map(decodeURIComponent);\n    return {\n      ok: true,\n      url: `https://${authority}/${decodedSegments.join('/')}/did.json`,\n      hostname,\n    };\n  }\n\n  return {\n    ok: true,\n    url: `https://${authority}/.well-known/did.json`,\n    hostname,\n  };\n}\n\n/**\n * Check if a hostname is an IP literal (IPv4 or IPv6).\n */\nfunction isIPLiteral(hostname: string): boolean {\n  if (hostname.startsWith('[')) return true;\n  const parts = hostname.split('.');\n  if (parts.length === 4 && parts.every((p) => /^\\d+$/.test(p))) return true;\n  return false;\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Normalize a hostname for consistent comparison.\n * Lowercases and strips trailing dot (DNS root).\n */\nfunction normalizeHostname(host: string): string {\n  return host.toLowerCase().replace(/\\.$/, '');\n}\n\nfunction errorResult(error: string): DIDResolutionResult {\n  return {\n    didDocument: null,\n    didResolutionMetadata: { error },\n    didDocumentMetadata: {},\n  };\n}\n","/**\n * Verification key extraction from DID Documents.\n *\n * Implements DD-202 (DID Verification Method Selection Policy):\n * 1. Prefer methods referenced in authentication/assertionMethod\n * 2. If multiple eligible Ed25519 methods remain, require caller keyId\n *    or fail with E_DID_KEY_AMBIGUOUS\n * 3. Only Ed25519 keys extracted; other types silently skipped\n * 4. Iterates ALL methods regardless of match (no early-return oracle)\n */\n\nimport type { DIDDocument, VerificationMethod } from './types.js';\nimport { extractEd25519FromMultibase } from './multicodec.js';\nimport { DIDError } from './errors.js';\n\n// ---------------------------------------------------------------------------\n// Options\n// ---------------------------------------------------------------------------\n\nexport interface ExtractKeyOptions {\n  /**\n   * Explicit key ID to select.\n   * If provided, only methods with this ID are considered.\n   */\n  keyId?: string;\n  /**\n   * Which verification relationship to prefer.\n   * Default: 'authentication'\n   */\n  relationship?: 'authentication' | 'assertionMethod';\n}\n\n// ---------------------------------------------------------------------------\n// Implementation\n// ---------------------------------------------------------------------------\n\n/**\n * Extract an Ed25519 public key from a DID Document.\n *\n * Selection policy (DD-202):\n * 1. Collect all verification methods from the document\n * 2. Filter by keyId if provided\n * 3. Filter by relationship references (authentication/assertionMethod)\n * 4. Try to extract Ed25519 key from each eligible method\n * 5. If exactly one Ed25519 key found: return it\n * 6. If zero found: return null\n * 7. If multiple found without keyId: throw E_DID_KEY_AMBIGUOUS\n *\n * All methods are iterated regardless of match to prevent key-type oracle.\n *\n * @param document - The resolved DID Document\n * @param options - Key selection options\n * @returns 32-byte Ed25519 public key, or null if no suitable key found\n * @throws DIDError with E_DID_KEY_AMBIGUOUS if multiple eligible keys\n */\nexport function extractVerificationKey(\n  document: DIDDocument,\n  options?: ExtractKeyOptions\n): Uint8Array | null {\n  const methods = document.verificationMethod ?? [];\n  const relationship = options?.relationship ?? 'authentication';\n  const keyId = options?.keyId;\n\n  // Get relationship-referenced method IDs\n  const relationshipRefs = getRelationshipRefs(document, relationship);\n\n  // Collect all eligible Ed25519 keys (iterate ALL methods, no early return)\n  const candidates: Uint8Array[] = [];\n\n  for (const method of methods) {\n    // Filter by keyId if specified\n    if (keyId && method.id !== keyId) {\n      continue;\n    }\n\n    // Prefer relationship-referenced methods if refs exist\n    if (relationshipRefs.length > 0 && !relationshipRefs.includes(method.id)) {\n      continue;\n    }\n\n    // Try to extract Ed25519 key (silently skip non-Ed25519)\n    const key = tryExtractEd25519(method);\n    if (key) {\n      candidates.push(key);\n    }\n  }\n\n  // If no relationship-referenced methods found, fall back to all methods\n  if (candidates.length === 0 && relationshipRefs.length > 0) {\n    for (const method of methods) {\n      if (keyId && method.id !== keyId) continue;\n      const key = tryExtractEd25519(method);\n      if (key) candidates.push(key);\n    }\n  }\n\n  if (candidates.length === 0) {\n    return null;\n  }\n\n  if (candidates.length === 1) {\n    return candidates[0];\n  }\n\n  // Multiple Ed25519 keys without explicit keyId selection\n  throw new DIDError(\n    'E_DID_KEY_AMBIGUOUS',\n    `Found ${candidates.length} eligible Ed25519 keys. Provide keyId to select.`\n  );\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Get verification method IDs referenced by a relationship.\n */\nfunction getRelationshipRefs(\n  document: DIDDocument,\n  relationship: 'authentication' | 'assertionMethod'\n): string[] {\n  const refs = document[relationship];\n  if (!refs) return [];\n\n  return refs\n    .map((ref) => (typeof ref === 'string' ? ref : ref.id))\n    .filter((id): id is string => typeof id === 'string');\n}\n\n/**\n * Try to extract an Ed25519 key from a verification method.\n * Returns null for non-Ed25519 methods (no oracle).\n */\nfunction tryExtractEd25519(method: VerificationMethod): Uint8Array | null {\n  // Try publicKeyMultibase (Multikey / Ed25519VerificationKey2020)\n  if (method.publicKeyMultibase) {\n    try {\n      return extractEd25519FromMultibase(method.publicKeyMultibase);\n    } catch {\n      return null;\n    }\n  }\n\n  // Try publicKeyJwk (JsonWebKey2020, OKP/Ed25519)\n  if (method.publicKeyJwk) {\n    const jwk = method.publicKeyJwk;\n    if (jwk.kty === 'OKP' && jwk.crv === 'Ed25519' && typeof jwk.x === 'string') {\n      try {\n        // JWK x value is base64url-encoded raw key\n        const bytes = new Uint8Array(Buffer.from(jwk.x, 'base64url'));\n        if (bytes.length === 32) return bytes;\n      } catch {\n        return null;\n      }\n    }\n    return null;\n  }\n\n  return null;\n}\n","/**\n * Caching resolver wrapper.\n *\n * Wraps any DIDResolver with TTL-based in-memory caching.\n * Cache entries expire after configurable TTL and are evicted\n * when maxEntries is reached (oldest-first).\n *\n * The cache key is the full DID string.\n */\n\nimport type { DIDResolutionResult } from './types.js';\nimport type { DIDResolver } from './resolver.js';\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\nexport interface CachingResolverOptions {\n  /** Time-to-live in milliseconds (default: 300000 = 5 minutes) */\n  ttlMs?: number;\n  /** Maximum number of cached entries (default: 1000) */\n  maxEntries?: number;\n}\n\ninterface CacheEntry {\n  result: DIDResolutionResult;\n  expiresAt: number;\n}\n\n// ---------------------------------------------------------------------------\n// Constants\n// ---------------------------------------------------------------------------\n\nconst DEFAULT_TTL_MS = 5 * 60 * 1000; // 5 minutes\nconst DEFAULT_MAX_ENTRIES = 1000;\n\n// ---------------------------------------------------------------------------\n// CachingResolver\n// ---------------------------------------------------------------------------\n\n/**\n * Caching wrapper for any DIDResolver.\n *\n * - TTL-based expiry: entries older than ttlMs are evicted on access\n * - Max entries: oldest entries evicted when capacity is reached\n * - Only successful resolutions are cached (didDocument !== null)\n * - Failed resolutions are NOT cached (each attempt is fresh)\n *\n * @example\n * ```typescript\n * const inner = new DidKeyResolver();\n * const cached = new CachingResolver(inner, { ttlMs: 60000 });\n * const result = await cached.resolve('did:key:z6Mk...');\n * ```\n */\nexport class CachingResolver implements DIDResolver {\n  readonly methods: readonly string[];\n\n  private readonly inner: DIDResolver;\n  private readonly ttlMs: number;\n  private readonly maxEntries: number;\n  private readonly cache = new Map<string, CacheEntry>();\n\n  constructor(inner: DIDResolver, options?: CachingResolverOptions) {\n    this.inner = inner;\n    this.methods = inner.methods;\n    this.ttlMs = options?.ttlMs ?? DEFAULT_TTL_MS;\n    this.maxEntries = options?.maxEntries ?? DEFAULT_MAX_ENTRIES;\n  }\n\n  async resolve(did: string): Promise<DIDResolutionResult> {\n    const now = Date.now();\n\n    // Check cache (return deep clone to prevent caller mutation of cached data)\n    const cached = this.cache.get(did);\n    if (cached && cached.expiresAt > now) {\n      return deepCloneResult(cached.result);\n    }\n\n    // Evict expired entry if present\n    if (cached) {\n      this.cache.delete(did);\n    }\n\n    // Resolve from inner\n    const result = await this.inner.resolve(did);\n\n    // Only cache successful resolutions (deep clone on store to isolate)\n    if (result.didDocument !== null) {\n      // Evict oldest if at capacity\n      if (this.cache.size >= this.maxEntries) {\n        const oldestKey = this.cache.keys().next().value;\n        if (oldestKey !== undefined) {\n          this.cache.delete(oldestKey);\n        }\n      }\n\n      this.cache.set(did, {\n        result: deepCloneResult(result),\n        expiresAt: now + this.ttlMs,\n      });\n    }\n\n    return result;\n  }\n\n  /** Invalidate a specific cached entry */\n  invalidate(did: string): void {\n    this.cache.delete(did);\n  }\n\n  /** Clear the entire cache */\n  clear(): void {\n    this.cache.clear();\n  }\n\n  /** Current number of cached entries */\n  get size(): number {\n    return this.cache.size;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\n/**\n * Deep clone a DIDResolutionResult to prevent caller mutation of cached data.\n * Uses structuredClone (available since Node 17) for correctness.\n */\nfunction deepCloneResult(result: DIDResolutionResult): DIDResolutionResult {\n  return structuredClone(result);\n}\n"]}

package/dist/multicodec.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Ed25519 multicodec prefix parsing.
+ *
+ * Supports both multibase forms allowed by the did:key spec (CCG v0.9):
+ * - 'z' prefix: base58btc encoding
+ * - 'u' prefix: base64url encoding
+ *
+ * The Ed25519 multicodec prefix is 0xed01 as a varint (2 bytes).
+ * After stripping the 2-byte prefix, the remaining 32 bytes are
+ * the raw Ed25519 public key.
+ */
+/**
+ * Extract an Ed25519 public key from a multibase-encoded multicodec value.
+ *
+ * Supports both multibase prefixes:
+ * - 'z': base58btc (e.g., did:key:z6Mk...)
+ * - 'u': base64url
+ *
+ * @param multibaseValue - The multibase-encoded value (including prefix character)
+ * @returns 32-byte Ed25519 public key
+ * @throws DIDError if not Ed25519 or malformed
+ */
+export declare function extractEd25519FromMultibase(multibaseValue: string): Uint8Array;
+//# sourceMappingURL=multicodec.d.ts.map

package/dist/multicodec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"multicodec.d.ts","sourceRoot":"","sources":["../src/multicodec.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AA2EH;;;;;;;;;;GAUG;AACH,wBAAgB,2BAA2B,CAAC,cAAc,EAAE,MAAM,GAAG,UAAU,CAoC9E"}

package/dist/multicodec.js

@@ -0,0 +1,121 @@
+"use strict";
+/**
+ * Ed25519 multicodec prefix parsing.
+ *
+ * Supports both multibase forms allowed by the did:key spec (CCG v0.9):
+ * - 'z' prefix: base58btc encoding
+ * - 'u' prefix: base64url encoding
+ *
+ * The Ed25519 multicodec prefix is 0xed01 as a varint (2 bytes).
+ * After stripping the 2-byte prefix, the remaining 32 bytes are
+ * the raw Ed25519 public key.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.extractEd25519FromMultibase = extractEd25519FromMultibase;
+const errors_js_1 = require("./errors.js");
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+/** Ed25519 multicodec prefix as varint: [0xed, 0x01] */
+const ED25519_MULTICODEC_PREFIX = new Uint8Array([0xed, 0x01]);
+/** Expected Ed25519 public key length in bytes */
+const ED25519_KEY_LENGTH = 32;
+/** Total expected length: 2 byte prefix + 32 byte key */
+const ED25519_MULTICODEC_LENGTH = ED25519_MULTICODEC_PREFIX.length + ED25519_KEY_LENGTH;
+// ---------------------------------------------------------------------------
+// Base58btc decoder (minimal, for 'z' prefix multibase)
+// ---------------------------------------------------------------------------
+const BASE58_ALPHABET = '123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz';
+const BASE58_MAP = new Map();
+for (let i = 0; i < BASE58_ALPHABET.length; i++) {
+    BASE58_MAP.set(BASE58_ALPHABET[i], i);
+}
+function base58btcDecode(input) {
+    if (input.length === 0)
+        return new Uint8Array(0);
+    // Count leading '1's (zero bytes)
+    let zeros = 0;
+    while (zeros < input.length && input[zeros] === '1') {
+        zeros++;
+    }
+    // Decode
+    const size = Math.ceil(input.length * 733 / 1000) + 1;
+    const b256 = new Uint8Array(size);
+    let length = 0;
+    for (let i = zeros; i < input.length; i++) {
+        const value = BASE58_MAP.get(input[i]);
+        if (value === undefined) {
+            throw new errors_js_1.DIDError('E_DID_DOCUMENT_INVALID', `Invalid base58btc character: ${input[i]}`);
+        }
+        let carry = value;
+        for (let j = 0; j < length || carry > 0; j++) {
+            carry += 58 * (b256[j] || 0);
+            b256[j] = carry % 256;
+            carry = Math.floor(carry / 256);
+            if (j >= length)
+                length = j + 1;
+        }
+    }
+    // Build result with leading zeros
+    const result = new Uint8Array(zeros + length);
+    for (let i = 0; i < length; i++) {
+        result[zeros + length - 1 - i] = b256[i];
+    }
+    return result;
+}
+// ---------------------------------------------------------------------------
+// Base64url decoder (for 'u' prefix multibase)
+// ---------------------------------------------------------------------------
+function base64urlDecode(input) {
+    // Pad to multiple of 4
+    const padded = input + '='.repeat((4 - (input.length % 4)) % 4);
+    const binary = atob(padded.replace(/-/g, '+').replace(/_/g, '/'));
+    const bytes = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i++) {
+        bytes[i] = binary.charCodeAt(i);
+    }
+    return bytes;
+}
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+/**
+ * Extract an Ed25519 public key from a multibase-encoded multicodec value.
+ *
+ * Supports both multibase prefixes:
+ * - 'z': base58btc (e.g., did:key:z6Mk...)
+ * - 'u': base64url
+ *
+ * @param multibaseValue - The multibase-encoded value (including prefix character)
+ * @returns 32-byte Ed25519 public key
+ * @throws DIDError if not Ed25519 or malformed
+ */
+function extractEd25519FromMultibase(multibaseValue) {
+    if (multibaseValue.length < 2) {
+        throw new errors_js_1.DIDError('E_DID_DOCUMENT_INVALID', 'Multibase value too short');
+    }
+    const prefix = multibaseValue[0];
+    const encoded = multibaseValue.slice(1);
+    let decoded;
+    if (prefix === 'z') {
+        decoded = base58btcDecode(encoded);
+    }
+    else if (prefix === 'u') {
+        decoded = base64urlDecode(encoded);
+    }
+    else {
+        throw new errors_js_1.DIDError('E_DID_DOCUMENT_INVALID', `Unsupported multibase prefix: '${prefix}'. Expected 'z' (base58btc) or 'u' (base64url).`);
+    }
+    // Check total length
+    if (decoded.length !== ED25519_MULTICODEC_LENGTH) {
+        throw new errors_js_1.DIDError('E_DID_KEY_NOT_FOUND', `Expected ${ED25519_MULTICODEC_LENGTH} bytes (2 prefix + 32 key), got ${decoded.length}`);
+    }
+    // Verify Ed25519 multicodec prefix (0xed, 0x01)
+    if (decoded[0] !== ED25519_MULTICODEC_PREFIX[0] || decoded[1] !== ED25519_MULTICODEC_PREFIX[1]) {
+        // Non-Ed25519 key type: do NOT throw an oracle-revealing error about
+        // what type it is. Just say Ed25519 not found.
+        throw new errors_js_1.DIDError('E_DID_KEY_NOT_FOUND', 'Multicodec prefix does not indicate Ed25519');
+    }
+    return decoded.slice(2);
+}
+//# sourceMappingURL=multicodec.js.map

package/dist/multicodec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"multicodec.js","sourceRoot":"","sources":["../src/multicodec.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;AA6FH,kEAuCC;AAlID,2CAAuC;AAEvC,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,wDAAwD;AACxD,MAAM,yBAAyB,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAE/D,kDAAkD;AAClD,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B,yDAAyD;AACzD,MAAM,yBAAyB,GAAG,yBAAyB,CAAC,MAAM,GAAG,kBAAkB,CAAC;AAExF,8EAA8E;AAC9E,wDAAwD;AACxD,8EAA8E;AAE9E,MAAM,eAAe,GAAG,4DAA4D,CAAC;AACrF,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;AAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,eAAe,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;IAChD,UAAU,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAEjD,kCAAkC;IAClC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;QACpD,KAAK,EAAE,CAAC;IACV,CAAC;IAED,SAAS;IACT,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,oBAAQ,CAAC,wBAAwB,EAAE,gCAAgC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,KAAK,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7B,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,GAAG,CAAC;YACtB,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;YAChC,IAAI,CAAC,IAAI,MAAM;gBAAE,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,kCAAkC;IAClC,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,GAAG,MAAM,CAAC,CAAC;IAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChC,MAAM,CAAC,KAAK,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,+CAA+C;AAC/C,8EAA8E;AAE9E,SAAS,eAAe,CAAC,KAAa;IACpC,uBAAuB;IACvB,MAAM,MAAM,GAAG,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;;;;GAUG;AACH,SAAgB,2BAA2B,CAAC,cAAsB;IAChE,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,oBAAQ,CAAC,wBAAwB,EAAE,2BAA2B,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,OAAmB,CAAC;IAExB,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;SAAM,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QAC1B,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,oBAAQ,CAChB,wBAAwB,EACxB,kCAAkC,MAAM,iDAAiD,CAC1F,CAAC;IACJ,CAAC;IAED,qBAAqB;IACrB,IAAI,OAAO,CAAC,MAAM,KAAK,yBAAyB,EAAE,CAAC;QACjD,MAAM,IAAI,oBAAQ,CAChB,qBAAqB,EACrB,YAAY,yBAAyB,mCAAmC,OAAO,CAAC,MAAM,EAAE,CACzF,CAAC;IACJ,CAAC;IAED,gDAAgD;IAChD,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,yBAAyB,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/F,qEAAqE;QACrE,+CAA+C;QAC/C,MAAM,IAAI,oBAAQ,CAChB,qBAAqB,EACrB,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC1B,CAAC"}

package/dist/resolver.d.ts

@@ -0,0 +1,30 @@
+/**
+ * DID Resolver interface and composite resolver.
+ *
+ * Pluggable resolver architecture: callers instantiate and configure
+ * resolvers explicitly (DD-52: no ambient key discovery).
+ */
+import type { DIDResolutionResult } from './types.js';
+/**
+ * Interface for DID resolvers.
+ *
+ * Each resolver handles one or more DID methods (e.g., ['key'], ['web']).
+ * Resolution returns a W3C DID Resolution Result.
+ */
+export interface DIDResolver {
+    /** DID methods this resolver handles (e.g., ['key'] for did:key) */
+    readonly methods: readonly string[];
+    /** Resolve a DID to its DID Document */
+    resolve(did: string): Promise<DIDResolutionResult>;
+}
+/**
+ * Create a composite resolver that delegates to method-specific resolvers.
+ *
+ * Tries resolvers in order by method match. The first resolver whose
+ * `methods` array includes the DID's method handles the resolution.
+ *
+ * @param resolvers - Array of method-specific resolvers
+ * @returns A composite resolver that delegates by method
+ */
+export declare function createCompositeResolver(resolvers: DIDResolver[]): DIDResolver;
+//# sourceMappingURL=resolver.d.ts.map

package/dist/resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../src/resolver.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAMtD;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,oEAAoE;IACpE,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,wCAAwC;IACxC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACpD;AAMD;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,WAAW,EAAE,GAAG,WAAW,CA2B7E"}

package/dist/resolver.js

@@ -0,0 +1,58 @@
+"use strict";
+/**
+ * DID Resolver interface and composite resolver.
+ *
+ * Pluggable resolver architecture: callers instantiate and configure
+ * resolvers explicitly (DD-52: no ambient key discovery).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createCompositeResolver = createCompositeResolver;
+// ---------------------------------------------------------------------------
+// Composite Resolver
+// ---------------------------------------------------------------------------
+/**
+ * Create a composite resolver that delegates to method-specific resolvers.
+ *
+ * Tries resolvers in order by method match. The first resolver whose
+ * `methods` array includes the DID's method handles the resolution.
+ *
+ * @param resolvers - Array of method-specific resolvers
+ * @returns A composite resolver that delegates by method
+ */
+function createCompositeResolver(resolvers) {
+    return {
+        methods: resolvers.flatMap((r) => [...r.methods]),
+        async resolve(did) {
+            const method = extractMethod(did);
+            if (!method) {
+                return {
+                    didDocument: null,
+                    didResolutionMetadata: { error: 'invalidDid' },
+                    didDocumentMetadata: {},
+                };
+            }
+            for (const resolver of resolvers) {
+                if (resolver.methods.includes(method)) {
+                    return resolver.resolve(did);
+                }
+            }
+            return {
+                didDocument: null,
+                didResolutionMetadata: { error: 'methodNotSupported' },
+                didDocumentMetadata: {},
+            };
+        },
+    };
+}
+/**
+ * Extract the method from a DID string (e.g., "key" from "did:key:z6Mk...").
+ */
+function extractMethod(did) {
+    if (!did.startsWith('did:'))
+        return null;
+    const parts = did.split(':');
+    if (parts.length < 3)
+        return null;
+    return parts[1];
+}
+//# sourceMappingURL=resolver.js.map

package/dist/resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.js","sourceRoot":"","sources":["../src/resolver.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAkCH,0DA2BC;AAxCD,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,SAAgB,uBAAuB,CAAC,SAAwB;IAC9D,OAAO;QACL,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;QAEjD,KAAK,CAAC,OAAO,CAAC,GAAW;YACvB,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO;oBACL,WAAW,EAAE,IAAI;oBACjB,qBAAqB,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE;oBAC9C,mBAAmB,EAAE,EAAE;iBACxB,CAAC;YACJ,CAAC;YAED,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,IAAI,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBACtC,OAAO,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC;YAED,OAAO;gBACL,WAAW,EAAE,IAAI;gBACjB,qBAAqB,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE;gBACtD,mBAAmB,EAAE,EAAE;aACxB,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,82 @@
+/**
+ * W3C DID Core v1.0 types for PEAC adapter-did.
+ *
+ * These types model the subset of W3C DID Core v1.0 (Recommendation 2022)
+ * needed for Ed25519 key extraction. This is an interoperability adapter
+ * layer, not a normative W3C dependency. did:key and did:web are CCG
+ * drafts with no formal W3C Recommendation standing.
+ *
+ * @see https://www.w3.org/TR/did-core/
+ */
+/**
+ * A verification method entry in a DID Document.
+ *
+ * PEAC only extracts Ed25519 keys; other key types are silently skipped
+ * (no oracle for key-type presence).
+ */
+export interface VerificationMethod {
+    /** Verification method identifier (e.g., "did:key:z6Mk...#z6Mk...") */
+    id: string;
+    /**
+     * Key type. PEAC recognizes:
+     * - 'Ed25519VerificationKey2020'
+     * - 'Multikey'
+     * - 'JsonWebKey2020'
+     */
+    type: string;
+    /** Controller DID */
+    controller: string;
+    /** Multibase-encoded public key (base58btc 'z' prefix or base64url 'u' prefix) */
+    publicKeyMultibase?: string;
+    /** JWK representation of the public key */
+    publicKeyJwk?: JsonWebKey;
+}
+/**
+ * Minimal JsonWebKey for Ed25519 (OKP curve).
+ */
+export interface JsonWebKey {
+    kty: string;
+    crv?: string;
+    x?: string;
+    [key: string]: unknown;
+}
+/**
+ * A W3C DID Document (subset relevant to PEAC key extraction).
+ */
+export interface DIDDocument {
+    /** JSON-LD context */
+    '@context': string | string[];
+    /** The DID this document describes */
+    id: string;
+    /** Verification methods (key material) */
+    verificationMethod?: VerificationMethod[];
+    /** Authentication relationship references */
+    authentication?: (string | VerificationMethod)[];
+    /** Assertion method relationship references */
+    assertionMethod?: (string | VerificationMethod)[];
+    /** Controller DID(s) */
+    controller?: string | string[];
+}
+/** Metadata about the resolution process itself */
+export interface DIDResolutionMetadata {
+    /** Error code if resolution failed */
+    error?: string;
+    /** Content type of the DID Document */
+    contentType?: string;
+}
+/** Metadata about the DID Document */
+export interface DIDDocumentMetadata {
+    /** When the DID Document was created */
+    created?: string;
+    /** When the DID Document was last updated */
+    updated?: string;
+    /** Whether the DID has been deactivated */
+    deactivated?: boolean;
+}
+/** Complete DID resolution result */
+export interface DIDResolutionResult {
+    didDocument: DIDDocument | null;
+    didResolutionMetadata: DIDResolutionMetadata;
+    didDocumentMetadata: DIDDocumentMetadata;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,uEAAuE;IACvE,EAAE,EAAE,MAAM,CAAC;IACX;;;;;OAKG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,kFAAkF;IAClF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,2CAA2C;IAC3C,YAAY,CAAC,EAAE,UAAU,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAMD;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,sBAAsB;IACtB,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC9B,sCAAsC;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,0CAA0C;IAC1C,kBAAkB,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC1C,6CAA6C;IAC7C,cAAc,CAAC,EAAE,CAAC,MAAM,GAAG,kBAAkB,CAAC,EAAE,CAAC;IACjD,+CAA+C;IAC/C,eAAe,CAAC,EAAE,CAAC,MAAM,GAAG,kBAAkB,CAAC,EAAE,CAAC;IAClD,wBAAwB;IACxB,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAChC;AAMD,mDAAmD;AACnD,MAAM,WAAW,qBAAqB;IACpC,sCAAsC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,sCAAsC;AACtC,MAAM,WAAW,mBAAmB;IAClC,wCAAwC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2CAA2C;IAC3C,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,qCAAqC;AACrC,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC;IAChC,qBAAqB,EAAE,qBAAqB,CAAC;IAC7C,mBAAmB,EAAE,mBAAmB,CAAC;CAC1C"}

package/dist/types.js

@@ -0,0 +1,13 @@
+"use strict";
+/**
+ * W3C DID Core v1.0 types for PEAC adapter-did.
+ *
+ * These types model the subset of W3C DID Core v1.0 (Recommendation 2022)
+ * needed for Ed25519 key extraction. This is an interoperability adapter
+ * layer, not a normative W3C dependency. did:key and did:web are CCG
+ * drafts with no formal W3C Recommendation standing.
+ *
+ * @see https://www.w3.org/TR/did-core/
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG"}

package/package.json

@@ -0,0 +1,68 @@
+{
+  "name": "@peac/adapter-did",
+  "version": "0.12.6",
+  "description": "DID document resolution for PEAC receipt verification (did:key, did:web)",
+  "main": "dist/index.cjs",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.cjs",
+      "default": "./dist/index.mjs"
+    },
+    "./package.json": "./package.json"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/peacprotocol/peac.git",
+    "directory": "packages/adapters/did"
+  },
+  "author": "PEAC Protocol Contributors",
+  "license": "Apache-2.0",
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@peac/kernel": "0.12.6",
+    "@peac/schema": "0.12.6"
+  },
+  "devDependencies": {
+    "@types/node": "^22.19.11",
+    "tsup": "^8.0.0",
+    "typescript": "^5.3.3",
+    "vitest": "^4.0.0"
+  },
+  "bugs": {
+    "url": "https://github.com/peacprotocol/peac/issues"
+  },
+  "homepage": "https://github.com/peacprotocol/peac#readme",
+  "keywords": [
+    "peac",
+    "peacprotocol",
+    "interaction-records",
+    "signed-records",
+    "receipts",
+    "originary",
+    "adapter-did",
+    "did",
+    "did-key",
+    "did-web",
+    "decentralized-identity",
+    "w3c-did-core",
+    "ed25519",
+    "verification"
+  ],
+  "scripts": {
+    "build:js": "tsup",
+    "build:types": "tsc --emitDeclarationOnly --declaration",
+    "build": "pnpm build:js && pnpm build:types",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "clean": "rm -rf dist"
+  }
+}