@sd-jwt/sd-jwt-vc 0.19.1-next.0 → 0.19.1-next.10

package/README.md

@@ -1,5 +1,5 @@
 ![License](https://img.shields.io/github/license/openwallet-foundation/sd-jwt-js.svg)
-![NPM](https://img.shields.io/npm/v/%40sd-jwt%2Fcore)
+![NPM](https://img.shields.io/npm/v/%40sd-jwt%2Fsd-jwt-vc)
 ![Release](https://img.shields.io/github/v/release/openwallet-foundation/sd-jwt-js)
 ![Stars](https://img.shields.io/github/stars/openwallet-foundation/sd-jwt-js)
 
@@ -9,7 +9,7 @@
 
 ### About
 
-SD-JWT-VC format based on the core functions
+Implementation of [SD-JWT-based Verifiable Credentials (SD-JWT VC) — draft-ietf-oauth-sd-jwt-vc-15](https://www.ietf.org/archive/id/draft-ietf-oauth-sd-jwt-vc-15.html), built on top of `@sd-jwt/core` ([RFC 9901](https://www.rfc-editor.org/rfc/rfc9901.html)).
 
 Check the detail description in our github [repo](https://github.com/openwallet-foundation/sd-jwt-js).
 
@@ -34,8 +34,8 @@ Ensure you have Node.js installed as a prerequisite.
 
 Here's a basic example of how to use this library:
 
-```jsx
-import { DisclosureFrame } from '@sd-jwt/sd-jwt-vc';
+```typescript
+import type { DisclosureFrame } from '@sd-jwt/core';
 
 // identifier of the issuer
 const iss = 'University';
@@ -85,7 +85,7 @@ Check out more details in our [documentation](https://github.com/openwallet-foun
 
 ### Revocation
 
-To add revocation capabilities, you can use the `@sd-jwt/jwt-status-list` library to create a JWT Status List and include it in the SD-JWT-VC.
+To add revocation capabilities, you can use the `@owf/token-status-list` library to create a JWT Status List and include it in the SD-JWT-VC.
 
 You can pass a dedicated `statusVerifier` function in the configuration to verify the signature of the payload of the JWT of the statuslist. If no function is provided, it will fallback to the verifier that is also used for the sd-jwt-vc.
 
@@ -105,13 +105,69 @@ const sdjwt = new SDJwtVcInstance({
 });
 ```
 
-The library will load load the type metadata format based on the `vct` value according to the [SD-JWT-VC specification](https://www.ietf.org/archive/id/draft-ietf-oauth-sd-jwt-vc-08.html#name-sd-jwt-vc-type-metadata) and validate this schema.
+The library will load the type metadata format based on the `vct` value according to the [SD-JWT-VC specification](https://www.ietf.org/archive/id/draft-ietf-oauth-sd-jwt-vc-15.html#name-sd-jwt-vc-type-metadata) and validate this schema.
 
 Since at this point the display is not yet implemented, the library will only validate the schema and return the type metadata format. In the future the values of the type metadata can be fetched via a function call.
 
+### Verification
+
+The library provides two verification approaches:
+
+#### Standard Verification (Fail-Fast)
+
+The `verify()` method throws an error immediately when the first validation failure is encountered:
+
+```typescript
+try {
+  const result = await sdjwt.verify(presentation);
+  console.log('Verified payload:', result.payload);
+} catch (error) {
+  console.error('Verification failed:', error.message);
+}
+```
+
+#### Safe Verification (Collect All Errors)
+
+The `safeVerify()` method collects all validation errors instead of failing on the first one. This is useful when you want to show users all issues with a credential at once, including signature, status (revocation), and VCT metadata validation:
+
+```typescript
+import type { SafeVerifyResult, VerificationError } from '@sd-jwt/core';
+
+const result = await sdjwt.safeVerify(presentation);
+
+if (result.success) {
+  // Verification succeeded
+  console.log('Verified payload:', result.payload);
+  console.log('Header:', result.header);
+  if (result.kb) {
+    console.log('Key binding:', result.kb);
+  }
+  if (result.typeMetadata) {
+    console.log('Type metadata:', result.typeMetadata);
+  }
+} else {
+  // Verification failed - inspect all errors
+  for (const error of result.errors) {
+    console.error(`[${error.code}] ${error.message}`);
+    if (error.details) {
+      console.error('Details:', error.details);
+    }
+  }
+}
+```
+
+##### SD-JWT-VC Specific Error Codes
+
+In addition to the [core error codes](../core/README.md#error-codes), `safeVerify()` in SD-JWT-VC can return:
+
+| Code | Description |
+|------|-------------|
+| `STATUS_VERIFICATION_FAILED` | Status list fetch or verification failed |
+| `STATUS_INVALID` | Credential status indicates revocation |
+| `VCT_VERIFICATION_FAILED` | VCT type metadata fetch or validation failed |
+
 ### Dependencies
 
-- @sd-jwt/core
-- @sd-jwt/types
-- @sd-jwt/utils
-- @sd-jwt/jwt-status-list
+- [@sd-jwt/core](https://www.npmjs.com/package/@sd-jwt/core)
+- [@owf/token-status-list](https://www.npmjs.com/package/@owf/token-status-list)
+- [zod](https://www.npmjs.com/package/zod)

package/dist/index.d.mts

@@ -1,6 +1,5 @@
-import { SDJWTConfig, Verifier, kbPayload, kbHeader, DisclosureFrame } from '@sd-jwt/types';
+import { SDJWTConfig, Verifier, SdJwtPayload, kbPayload, kbHeader, SDJwtInstance, DisclosureFrame, VerifierOptions, SafeVerifyResult } from '@sd-jwt/core';
 import { z } from 'zod';
-import { SdJwtPayload, SDJwtInstance, VerifierOptions } from '@sd-jwt/core';
 
 declare const BackgroundImageSchema: z.ZodObject<{
     /** REQUIRED. A URI pointing to the background image. */
@@ -517,18 +516,24 @@ declare const ClaimDisplaySchema: z.ZodPipe<z.ZodObject<{
      */
     locale: z.ZodOptional<z.ZodString>;
     /** REQUIRED. Human-readable label for the claim. */
-    label: z.ZodString;
+    label: z.ZodOptional<z.ZodString>;
+    /**
+     * Human-readable label for the claim.
+     * @deprecated - use `label` instead
+     */
+    name: z.ZodOptional<z.ZodString>;
     /** OPTIONAL. Description of the claim for end users. */
     description: z.ZodOptional<z.ZodString>;
 }, z.core.$loose>, z.ZodTransform<{
     locale: string | undefined;
-    label: string;
+    label: string | undefined;
     description?: string | undefined;
 }, {
     [x: string]: unknown;
-    label: string;
     lang?: string | undefined;
     locale?: string | undefined;
+    label?: string | undefined;
+    name?: string | undefined;
     description?: string | undefined;
 }>>;
 type ClaimDisplay = z.infer<typeof ClaimDisplaySchema>;
@@ -563,18 +568,24 @@ declare const ClaimSchema: z.ZodObject<{
          */
         locale: z.ZodOptional<z.ZodString>;
         /** REQUIRED. Human-readable label for the claim. */
-        label: z.ZodString;
+        label: z.ZodOptional<z.ZodString>;
+        /**
+         * Human-readable label for the claim.
+         * @deprecated - use `label` instead
+         */
+        name: z.ZodOptional<z.ZodString>;
         /** OPTIONAL. Description of the claim for end users. */
         description: z.ZodOptional<z.ZodString>;
     }, z.core.$loose>, z.ZodTransform<{
         locale: string | undefined;
-        label: string;
+        label: string | undefined;
         description?: string | undefined;
     }, {
         [x: string]: unknown;
-        label: string;
         lang?: string | undefined;
         locale?: string | undefined;
+        label?: string | undefined;
+        name?: string | undefined;
         description?: string | undefined;
     }>>>>;
     /** OPTIONAL. Controls whether the claim must, may, or must not be selectively disclosed. */
@@ -862,18 +873,24 @@ declare const TypeMetadataFormatSchema: z.ZodObject<{
              */
             locale: z.ZodOptional<z.ZodString>;
             /** REQUIRED. Human-readable label for the claim. */
-            label: z.ZodString;
+            label: z.ZodOptional<z.ZodString>;
+            /**
+             * Human-readable label for the claim.
+             * @deprecated - use `label` instead
+             */
+            name: z.ZodOptional<z.ZodString>;
             /** OPTIONAL. Description of the claim for end users. */
             description: z.ZodOptional<z.ZodString>;
         }, z.core.$loose>, z.ZodTransform<{
             locale: string | undefined;
-            label: string;
+            label: string | undefined;
             description?: string | undefined;
         }, {
             [x: string]: unknown;
-            label: string;
             lang?: string | undefined;
             locale?: string | undefined;
+            label?: string | undefined;
+            name?: string | undefined;
             description?: string | undefined;
         }>>>>;
         /** OPTIONAL. Controls whether the claim must, may, or must not be selectively disclosed. */
@@ -915,7 +932,7 @@ type ResolvedTypeMetadata = {
 };
 type TypeMetadataFormat = z.infer<typeof TypeMetadataFormatSchema>;
 
-type VcTFetcher = (uri: string, integrity?: string) => Promise<TypeMetadataFormat | undefined>;
+type VCTFetcher = (uri: string, integrity?: string) => Promise<TypeMetadataFormat | undefined>;
 
 type StatusListFetcher = (uri: string) => Promise<string>;
 type StatusValidator = (status: number) => Promise<void>;
@@ -925,7 +942,7 @@ type StatusValidator = (status: number) => Promise<void>;
 type SDJWTVCConfig = SDJWTConfig & {
     statusListFetcher?: StatusListFetcher;
     statusValidator?: StatusValidator;
-    vctFetcher?: VcTFetcher;
+    vctFetcher?: VCTFetcher;
     statusVerifier?: Verifier;
     loadTypeMetadataFormat?: boolean;
     timeout?: number;
@@ -990,6 +1007,16 @@ declare class SDJwtVcInstance extends SDJwtInstance<SdJwtVcPayload> {
      * @param currentDate current time in seconds
      */
     verify(encodedSDJwt: string, options?: VerifierOptions): Promise<VerificationResult>;
+    /**
+     * Safe verification that collects all errors instead of failing fast.
+     * Returns a result object with either the verified data or an array of all errors.
+     * This includes SD-JWT-VC specific validations like status and VCT metadata.
+     *
+     * @param encodedSDJwt - The encoded SD-JWT-VC to verify
+     * @param options - Verification options
+     * @returns A SafeVerifyResult containing either success data or collected errors
+     */
+    safeVerify(encodedSDJwt: string, options?: VerifierOptions): Promise<SafeVerifyResult<VerificationResult>>;
     /**
      * Gets VCT Metadata of the raw SD-JWT-VC. Returns the type metadata format. If the SD-JWT-VC is invalid or does not contain a vct claim, an error is thrown.
      *
@@ -1073,6 +1100,7 @@ declare class SDJwtVcInstance extends SDJwtInstance<SdJwtVcPayload> {
      * @param options
      */
     private verifyStatus;
+    config(newConfig: SDJWTVCConfig): void;
 }
 
-export { type BackgroundImage, BackgroundImageSchema, type Claim, type ClaimDisplay, ClaimDisplaySchema, type ClaimPath, ClaimPathSchema, ClaimSchema, type ClaimSelectiveDisclosure, ClaimSelectiveDisclosureSchema, ColorSchemeSchema, ContrastSchema, type Display, DisplaySchema, type Logo, LogoSchema, OrientationSchema, type Rendering, RenderingSchema, type ResolvedTypeMetadata, type SDJWTVCConfig, type SDJWTVCStatusReference, SDJwtVcInstance, type SdJwtVcPayload, type SimpleRendering, SimpleRenderingSchema, type StatusListFetcher, type StatusValidator, type SvgTemplateProperties, SvgTemplatePropertiesSchema, type SvgTemplateRendering, SvgTemplateRenderingSchema, type TypeMetadataFormat, TypeMetadataFormatSchema, type VcTFetcher, type VerificationResult };
+export { type BackgroundImage, BackgroundImageSchema, type Claim, type ClaimDisplay, ClaimDisplaySchema, type ClaimPath, ClaimPathSchema, ClaimSchema, type ClaimSelectiveDisclosure, ClaimSelectiveDisclosureSchema, ColorSchemeSchema, ContrastSchema, type Display, DisplaySchema, type Logo, LogoSchema, OrientationSchema, type Rendering, RenderingSchema, type ResolvedTypeMetadata, type SDJWTVCConfig, type SDJWTVCStatusReference, SDJwtVcInstance, type SdJwtVcPayload, type SimpleRendering, SimpleRenderingSchema, type StatusListFetcher, type StatusValidator, type SvgTemplateProperties, SvgTemplatePropertiesSchema, type SvgTemplateRendering, SvgTemplateRenderingSchema, type TypeMetadataFormat, TypeMetadataFormatSchema, type VCTFetcher, type VerificationResult };

package/dist/index.d.ts

@@ -1,6 +1,5 @@
-import { SDJWTConfig, Verifier, kbPayload, kbHeader, DisclosureFrame } from '@sd-jwt/types';
+import { SDJWTConfig, Verifier, SdJwtPayload, kbPayload, kbHeader, SDJwtInstance, DisclosureFrame, VerifierOptions, SafeVerifyResult } from '@sd-jwt/core';
 import { z } from 'zod';
-import { SdJwtPayload, SDJwtInstance, VerifierOptions } from '@sd-jwt/core';
 
 declare const BackgroundImageSchema: z.ZodObject<{
     /** REQUIRED. A URI pointing to the background image. */
@@ -517,18 +516,24 @@ declare const ClaimDisplaySchema: z.ZodPipe<z.ZodObject<{
      */
     locale: z.ZodOptional<z.ZodString>;
     /** REQUIRED. Human-readable label for the claim. */
-    label: z.ZodString;
+    label: z.ZodOptional<z.ZodString>;
+    /**
+     * Human-readable label for the claim.
+     * @deprecated - use `label` instead
+     */
+    name: z.ZodOptional<z.ZodString>;
     /** OPTIONAL. Description of the claim for end users. */
     description: z.ZodOptional<z.ZodString>;
 }, z.core.$loose>, z.ZodTransform<{
     locale: string | undefined;
-    label: string;
+    label: string | undefined;
     description?: string | undefined;
 }, {
     [x: string]: unknown;
-    label: string;
     lang?: string | undefined;
     locale?: string | undefined;
+    label?: string | undefined;
+    name?: string | undefined;
     description?: string | undefined;
 }>>;
 type ClaimDisplay = z.infer<typeof ClaimDisplaySchema>;
@@ -563,18 +568,24 @@ declare const ClaimSchema: z.ZodObject<{
          */
         locale: z.ZodOptional<z.ZodString>;
         /** REQUIRED. Human-readable label for the claim. */
-        label: z.ZodString;
+        label: z.ZodOptional<z.ZodString>;
+        /**
+         * Human-readable label for the claim.
+         * @deprecated - use `label` instead
+         */
+        name: z.ZodOptional<z.ZodString>;
         /** OPTIONAL. Description of the claim for end users. */
         description: z.ZodOptional<z.ZodString>;
     }, z.core.$loose>, z.ZodTransform<{
         locale: string | undefined;
-        label: string;
+        label: string | undefined;
         description?: string | undefined;
     }, {
         [x: string]: unknown;
-        label: string;
         lang?: string | undefined;
         locale?: string | undefined;
+        label?: string | undefined;
+        name?: string | undefined;
         description?: string | undefined;
     }>>>>;
     /** OPTIONAL. Controls whether the claim must, may, or must not be selectively disclosed. */
@@ -862,18 +873,24 @@ declare const TypeMetadataFormatSchema: z.ZodObject<{
              */
             locale: z.ZodOptional<z.ZodString>;
             /** REQUIRED. Human-readable label for the claim. */
-            label: z.ZodString;
+            label: z.ZodOptional<z.ZodString>;
+            /**
+             * Human-readable label for the claim.
+             * @deprecated - use `label` instead
+             */
+            name: z.ZodOptional<z.ZodString>;
             /** OPTIONAL. Description of the claim for end users. */
             description: z.ZodOptional<z.ZodString>;
         }, z.core.$loose>, z.ZodTransform<{
             locale: string | undefined;
-            label: string;
+            label: string | undefined;
             description?: string | undefined;
         }, {
             [x: string]: unknown;
-            label: string;
             lang?: string | undefined;
             locale?: string | undefined;
+            label?: string | undefined;
+            name?: string | undefined;
             description?: string | undefined;
         }>>>>;
         /** OPTIONAL. Controls whether the claim must, may, or must not be selectively disclosed. */
@@ -915,7 +932,7 @@ type ResolvedTypeMetadata = {
 };
 type TypeMetadataFormat = z.infer<typeof TypeMetadataFormatSchema>;
 
-type VcTFetcher = (uri: string, integrity?: string) => Promise<TypeMetadataFormat | undefined>;
+type VCTFetcher = (uri: string, integrity?: string) => Promise<TypeMetadataFormat | undefined>;
 
 type StatusListFetcher = (uri: string) => Promise<string>;
 type StatusValidator = (status: number) => Promise<void>;
@@ -925,7 +942,7 @@ type StatusValidator = (status: number) => Promise<void>;
 type SDJWTVCConfig = SDJWTConfig & {
     statusListFetcher?: StatusListFetcher;
     statusValidator?: StatusValidator;
-    vctFetcher?: VcTFetcher;
+    vctFetcher?: VCTFetcher;
     statusVerifier?: Verifier;
     loadTypeMetadataFormat?: boolean;
     timeout?: number;
@@ -990,6 +1007,16 @@ declare class SDJwtVcInstance extends SDJwtInstance<SdJwtVcPayload> {
      * @param currentDate current time in seconds
      */
     verify(encodedSDJwt: string, options?: VerifierOptions): Promise<VerificationResult>;
+    /**
+     * Safe verification that collects all errors instead of failing fast.
+     * Returns a result object with either the verified data or an array of all errors.
+     * This includes SD-JWT-VC specific validations like status and VCT metadata.
+     *
+     * @param encodedSDJwt - The encoded SD-JWT-VC to verify
+     * @param options - Verification options
+     * @returns A SafeVerifyResult containing either success data or collected errors
+     */
+    safeVerify(encodedSDJwt: string, options?: VerifierOptions): Promise<SafeVerifyResult<VerificationResult>>;
     /**
      * Gets VCT Metadata of the raw SD-JWT-VC. Returns the type metadata format. If the SD-JWT-VC is invalid or does not contain a vct claim, an error is thrown.
      *
@@ -1073,6 +1100,7 @@ declare class SDJwtVcInstance extends SDJwtInstance<SdJwtVcPayload> {
      * @param options
      */
     private verifyStatus;
+    config(newConfig: SDJWTVCConfig): void;
 }
 
-export { type BackgroundImage, BackgroundImageSchema, type Claim, type ClaimDisplay, ClaimDisplaySchema, type ClaimPath, ClaimPathSchema, ClaimSchema, type ClaimSelectiveDisclosure, ClaimSelectiveDisclosureSchema, ColorSchemeSchema, ContrastSchema, type Display, DisplaySchema, type Logo, LogoSchema, OrientationSchema, type Rendering, RenderingSchema, type ResolvedTypeMetadata, type SDJWTVCConfig, type SDJWTVCStatusReference, SDJwtVcInstance, type SdJwtVcPayload, type SimpleRendering, SimpleRenderingSchema, type StatusListFetcher, type StatusValidator, type SvgTemplateProperties, SvgTemplatePropertiesSchema, type SvgTemplateRendering, SvgTemplateRenderingSchema, type TypeMetadataFormat, TypeMetadataFormatSchema, type VcTFetcher, type VerificationResult };
+export { type BackgroundImage, BackgroundImageSchema, type Claim, type ClaimDisplay, ClaimDisplaySchema, type ClaimPath, ClaimPathSchema, ClaimSchema, type ClaimSelectiveDisclosure, ClaimSelectiveDisclosureSchema, ColorSchemeSchema, ContrastSchema, type Display, DisplaySchema, type Logo, LogoSchema, OrientationSchema, type Rendering, RenderingSchema, type ResolvedTypeMetadata, type SDJWTVCConfig, type SDJWTVCStatusReference, SDJwtVcInstance, type SdJwtVcPayload, type SimpleRendering, SimpleRenderingSchema, type StatusListFetcher, type StatusValidator, type SvgTemplateProperties, SvgTemplatePropertiesSchema, type SvgTemplateRendering, SvgTemplateRenderingSchema, type TypeMetadataFormat, TypeMetadataFormatSchema, type VCTFetcher, type VerificationResult };

package/dist/index.js

@@ -101,9 +101,8 @@ __export(index_exports, {
 module.exports = __toCommonJS(index_exports);
 
 // src/sd-jwt-vc-instance.ts
+var import_token_status_list = require("@owf/token-status-list");
 var import_core = require("@sd-jwt/core");
-var import_jwt_status_list = require("@sd-jwt/jwt-status-list");
-var import_utils = require("@sd-jwt/utils");
 var import_zod2 = __toESM(require("zod"));
 
 // src/sd-jwt-vc-type-metadata-format.ts
@@ -205,16 +204,24 @@ var ClaimDisplaySchema = import_zod.z.looseObject({
    */
   locale: import_zod.z.string().optional(),
   /** REQUIRED. Human-readable label for the claim. */
-  label: import_zod.z.string(),
+  label: import_zod.z.string().optional(),
+  /**
+   * Human-readable label for the claim.
+   * @deprecated - use `label` instead
+   */
+  name: import_zod.z.string().optional(),
   /** OPTIONAL. Description of the claim for end users. */
   description: import_zod.z.string().optional()
 }).transform((_a) => {
-  var _b = _a, { lang, locale } = _b, rest = __objRest(_b, ["lang", "locale"]);
+  var _b = _a, { lang, name, label, locale } = _b, rest = __objRest(_b, ["lang", "name", "label", "locale"]);
   return __spreadProps(__spreadValues({}, rest), {
-    locale: locale != null ? locale : lang
+    locale: locale != null ? locale : lang,
+    label: label != null ? label : name
   });
 }).refine(({ locale }) => locale !== void 0, {
-  message: "Either locale (preferred) or lang (spec name, deprecated) MUST be defined on claim display entry."
+  message: "Either locale (preferred) or lang (deprecated) MUST be defined on claim display entry."
+}).refine(({ label }) => label !== void 0, {
+  message: "Either label (preferred) or name (deprecated) MUST be defined on claim display entry."
 });
 var ClaimSelectiveDisclosureSchema = import_zod.z.enum([
   "always",
@@ -279,9 +286,11 @@ var SDJwtVcInstance = class _SDJwtVcInstance extends import_core.SDJwtInstance {
   validateReservedFields(disclosureFrame) {
     if ((disclosureFrame == null ? void 0 : disclosureFrame._sd) && Array.isArray(disclosureFrame._sd) && disclosureFrame._sd.length > 0) {
       const reservedNames = ["iss", "nbf", "exp", "cnf", "vct", "status"];
-      const reservedNamesInDisclosureFrame = disclosureFrame._sd.filter((key) => reservedNames.includes(key));
+      const reservedNamesInDisclosureFrame = disclosureFrame._sd.filter(
+        (key) => reservedNames.includes(String(key))
+      );
       if (reservedNamesInDisclosureFrame.length > 0) {
-        throw new import_utils.SDJWTException("Cannot disclose protected field");
+        throw new import_core.SDJWTException("Cannot disclose protected field");
       }
     }
   }
@@ -321,7 +330,7 @@ var SDJwtVcInstance = class _SDJwtVcInstance extends import_core.SDJwtInstance {
    */
   statusValidator(status) {
     return __async(this, null, function* () {
-      if (status !== 0) throw new import_utils.SDJWTException("Status is not valid");
+      if (status !== 0) throw new import_core.SDJWTException("Status is not valid");
       return Promise.resolve();
     });
   }
@@ -346,6 +355,96 @@ var SDJwtVcInstance = class _SDJwtVcInstance extends import_core.SDJwtInstance {
       return result;
     });
   }
+  /**
+   * Safe verification that collects all errors instead of failing fast.
+   * Returns a result object with either the verified data or an array of all errors.
+   * This includes SD-JWT-VC specific validations like status and VCT metadata.
+   *
+   * @param encodedSDJwt - The encoded SD-JWT-VC to verify
+   * @param options - Verification options
+   * @returns A SafeVerifyResult containing either success data or collected errors
+   */
+  safeVerify(encodedSDJwt, options) {
+    return __async(this, null, function* () {
+      const errors = [];
+      const addError = (code, message, details) => {
+        errors.push({ code, message, details });
+      };
+      const baseResult = yield __superGet(_SDJwtVcInstance.prototype, this, "safeVerify").call(this, encodedSDJwt, options);
+      if (!baseResult.success) {
+        errors.push(...baseResult.errors);
+      }
+      let result;
+      if (baseResult.success) {
+        result = {
+          payload: baseResult.data.payload,
+          header: baseResult.data.header,
+          kb: baseResult.data.kb
+        };
+      } else {
+        try {
+          const { payload, header } = yield import_core.SDJwt.extractJwt(encodedSDJwt);
+          if (payload) {
+            result = {
+              payload,
+              header,
+              kb: void 0
+            };
+          }
+        } catch (e) {
+        }
+      }
+      if (result) {
+        try {
+          yield this.verifyStatus(result, options);
+        } catch (e) {
+          const error = (0, import_core.ensureError)(e);
+          const errorMessage = error.message;
+          if (errorMessage.includes("Status is not valid")) {
+            addError("STATUS_INVALID", errorMessage, error);
+          } else {
+            addError(
+              "STATUS_VERIFICATION_FAILED",
+              `Status verification failed: ${errorMessage}`,
+              error
+            );
+          }
+        }
+        if (this.userConfig.loadTypeMetadataFormat) {
+          try {
+            const resolvedTypeMetadata = yield this.fetchVct(result);
+            if (result) {
+              result.typeMetadata = resolvedTypeMetadata;
+            }
+          } catch (e) {
+            addError(
+              "VCT_VERIFICATION_FAILED",
+              `VCT verification failed: ${(0, import_core.ensureError)(e).message}`,
+              e
+            );
+          }
+        }
+      }
+      if (errors.length > 0) {
+        return { success: false, errors };
+      }
+      if (!result) {
+        return {
+          success: false,
+          errors: [
+            {
+              code: "INVALID_SD_JWT",
+              message: "Failed to construct verification result"
+            }
+          ]
+        };
+      }
+      return {
+        success: true,
+        data: result
+      };
+    });
+  }
   /**
    * Gets VCT Metadata of the raw SD-JWT-VC. Returns the type metadata format. If the SD-JWT-VC is invalid or does not contain a vct claim, an error is thrown.
    *
@@ -358,7 +457,7 @@ var SDJwtVcInstance = class _SDJwtVcInstance extends import_core.SDJwtInstance {
     return __async(this, null, function* () {
       const { payload, header } = yield import_core.SDJwt.extractJwt(encodedSDJwt);
       if (!payload) {
-        throw new import_utils.SDJWTException("JWT payload is missing");
+        throw new import_core.SDJWTException("JWT payload is missing");
       }
       const result = {
         payload,
@@ -378,10 +477,10 @@ var SDJwtVcInstance = class _SDJwtVcInstance extends import_core.SDJwtInstance {
       if (!integrity) return;
       const arrayBuffer = yield response.arrayBuffer();
       const alg = integrity.split("-")[0];
-      const hashBuffer = yield this.userConfig.hasher(
-        arrayBuffer,
-        alg
-      );
+      if (!this.userConfig.hasher) {
+        throw new import_core.SDJWTException("Hasher not found");
+      }
+      const hashBuffer = yield this.userConfig.hasher(arrayBuffer, alg);
       const integrityHash = integrity.split("-")[1];
       const hash = Array.from(new Uint8Array(hashBuffer)).map((byte) => byte.toString(16).padStart(2, "0")).join("");
       if (hash !== integrityHash) {
@@ -412,7 +511,8 @@ var SDJwtVcInstance = class _SDJwtVcInstance extends import_core.SDJwtInstance {
         yield this.validateIntegrity(response.clone(), url, integrity);
         const data = yield response.json();
         return data;
-      } catch (error) {
+      } catch (e) {
+        const error = (0, import_core.ensureError)(e);
         if (error.name === "TimeoutError") {
           throw new Error(`Request to ${url} timed out`);
         }
@@ -463,7 +563,7 @@ var SDJwtVcInstance = class _SDJwtVcInstance extends import_core.SDJwtInstance {
     if (baseClaim.sd && extendingClaim.sd) {
       if ((baseClaim.sd === "always" || baseClaim.sd === "never") && baseClaim.sd !== extendingClaim.sd) {
         const pathStr = JSON.stringify(extendingClaim.path);
-        throw new import_utils.SDJWTException(
+        throw new import_core.SDJWTException(
           `Cannot change 'sd' property from '${baseClaim.sd}' to '${extendingClaim.sd}' for claim at path ${pathStr}`
         );
       }
@@ -535,17 +635,17 @@ var SDJwtVcInstance = class _SDJwtVcInstance extends import_core.SDJwtInstance {
       var _a;
       const maxDepth = (_a = this.userConfig.maxVctExtendsDepth) != null ? _a : 5;
       if (maxDepth !== -1 && depth > maxDepth) {
-        throw new import_utils.SDJWTException(
+        throw new import_core.SDJWTException(
           `Maximum VCT extends depth of ${maxDepth} exceeded`
         );
       }
       if (!parentTypeMetadata.extends) {
-        throw new import_utils.SDJWTException(
+        throw new import_core.SDJWTException(
           `Type metadata for vct '${parentTypeMetadata.vct}' has no 'extends' field. Unable to resolve extended type metadata document.`
         );
       }
       if (visitedVcts.has(parentTypeMetadata.extends)) {
-        throw new import_utils.SDJWTException(
+        throw new import_core.SDJWTException(
           `Circular dependency detected in VCT extends chain: ${parentTypeMetadata.extends}`
         );
       }
@@ -555,7 +655,7 @@ var SDJwtVcInstance = class _SDJwtVcInstance extends import_core.SDJwtInstance {
         parentTypeMetadata["extends#integrity"]
       );
       if (!extendedTypeMetadata) {
-        throw new import_utils.SDJWTException(
+        throw new import_core.SDJWTException(
           `Resolving VCT extends value '${parentTypeMetadata.extends}' resulted in an undefined result.`
         );
       }
@@ -600,7 +700,7 @@ var SDJwtVcInstance = class _SDJwtVcInstance extends import_core.SDJwtInstance {
       if (!data) return void 0;
       const validated = TypeMetadataFormatSchema.safeParse(data);
       if (!validated.success) {
-        throw new import_utils.SDJWTException(
+        throw new import_core.SDJWTException(
           `Invalid VCT type metadata for vct '${vct}':
 ${import_zod2.default.prettifyError(validated.error)}`
         );
@@ -623,16 +723,19 @@ ${import_zod2.default.prettifyError(validated.error)}`
             result.payload.status.status_list.uri
           );
           const slJWT = import_core.Jwt.fromEncode(statusListJWT);
+          if (!this.userConfig.verifier || !this.userConfig.statusVerifier) {
+            throw new import_core.SDJWTException("Verifier not found for status list JWT");
+          }
           yield slJWT.verify(
             (_b = this.userConfig.statusVerifier) != null ? _b : this.userConfig.verifier,
             options
           ).catch((err) => {
-            throw new import_jwt_status_list.SLException(
+            throw new import_token_status_list.SLException(
               `Status List JWT verification failed: ${err.message}`,
               err.details
             );
           });
-          const statusList = (0, import_jwt_status_list.getListFromStatusListJWT)(statusListJWT);
+          const statusList = (0, import_token_status_list.getListFromStatusListJWT)(statusListJWT);
           const status = statusList.getStatus(
             result.payload.status.status_list.idx
           );
@@ -642,6 +745,9 @@ ${import_zod2.default.prettifyError(validated.error)}`
       }
     });
   }
+  config(newConfig) {
+    super.config(newConfig);
+  }
 };
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {