@solidus-network/sdk 0.1.0 → 0.3.0

package/dist/index.d.ts

@@ -1,8 +1,14 @@
 import type { DID, DIDDocument, VerifiableCredential, IssueCredentialParams, VerificationResult, AuthResult } from '@solidus-network/types';
+import type { BbsDisclosedMessage, BbsCredentialProofResult } from './chain/bbs.js';
 export type { DID, DIDDocument, VerifiableCredential, IssueCredentialParams, VerificationResult, AuthResult, };
 export { runMigrations, closeConnection } from './stub/db.js';
 export { generateKeypair, decodePublicKey } from './stub/crypto.js';
 export type { ChainConfig } from './chain/index.js';
+export { createChainClient } from './chain/index.js';
+export type { BbsDisclosedMessage, BbsCredentialProofResult, BbsCredentialRecord, } from './chain/bbs.js';
+export { utf8ToHex, toHex } from './chain/bbs.js';
+export { issueSdJwtVc, verifySdJwtVc, presentSdJwtVc, createStatusListJwt, ed25519PublicKeyToJwk, ed25519PublicKeyFromJwk, } from './sdjwt/index.js';
+export type { IssueSdJwtVcParams, IssuedSdJwtVc, VerifySdJwtVcParams, PresentSdJwtVcParams, PresentationResult, CreateStatusListJwtParams, Ed25519Jwk, VerificationResult as SdJwtVerificationResult, } from './sdjwt/index.js';
 export interface SolidusSDK {
     did: {
         create(publicKey: string): Promise<DID>;
@@ -19,6 +25,39 @@ export interface SolidusSDK {
         createChallenge(domain: string): Promise<string>;
         verifyPresentation(vp: string, challenge: string, domain: string): Promise<AuthResult>;
     };
+    /**
+     * BBS+ selective-disclosure operations. Available only in chain mode
+     * (testnet/mainnet) — `undefined` in stub mode.
+     */
+    bbs?: {
+        issueCredential(params: {
+            issuerPrivateKey: string;
+            subjectDid: string;
+            credentialType: string;
+            payloadHash: Uint8Array;
+            bbsPubkey: Uint8Array;
+            bbsMessageCount: number;
+        }): Promise<{
+            txHash: string;
+            credentialId: string;
+            receipt: unknown;
+        }>;
+        verifyProof(params: {
+            proofHex: string;
+            pubkeyHex: string;
+            headerHex?: string;
+            phHex?: string;
+            disclosedMessages: BbsDisclosedMessage[];
+            totalMessageCount: number;
+        }): Promise<boolean>;
+        verifyCredentialProof(params: {
+            credentialId: string;
+            proofHex: string;
+            headerHex?: string;
+            phHex?: string;
+            disclosedMessages: BbsDisclosedMessage[];
+        }): Promise<BbsCredentialProofResult>;
+    };
 }
 export interface SolidusConfig {
     mode: 'stub' | 'testnet' | 'mainnet';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,GAAG,EAAE,WAAW,EAAE,oBAAoB,EACtC,qBAAqB,EAAE,kBAAkB,EAAE,UAAU,EACtD,MAAM,gBAAgB,CAAA;AAMvB,YAAY,EACV,GAAG,EAAE,WAAW,EAAE,oBAAoB,EACtC,qBAAqB,EAAE,kBAAkB,EAAE,UAAU,GACtD,CAAA;AACD,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC7D,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AACnE,YAAY,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAEnD,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE;QACH,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;QACvC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAA;QACjD,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;KAC1D,CAAA;IACD,WAAW,EAAE;QACX,KAAK,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;QACnE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;QACjD,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAC9D,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAA;KAC3D,CAAA;IACD,IAAI,EAAE;QACJ,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;QAChD,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;KACvF,CAAA;CACF;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAAA;IACpC,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,gEAAgE;IAChE,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAkCD,wBAAgB,SAAS,CAAC,MAAM,EAAE,aAAa,GAAG,UAAU,CAiB3D"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,GAAG,EAAE,WAAW,EAAE,oBAAoB,EACtC,qBAAqB,EAAE,kBAAkB,EAAE,UAAU,EACtD,MAAM,gBAAgB,CAAA;AAKvB,OAAO,KAAK,EACV,mBAAmB,EACnB,wBAAwB,EAEzB,MAAM,gBAAgB,CAAA;AAEvB,YAAY,EACV,GAAG,EAAE,WAAW,EAAE,oBAAoB,EACtC,qBAAqB,EAAE,kBAAkB,EAAE,UAAU,GACtD,CAAA;AACD,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC7D,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AACnE,YAAY,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACpD,YAAY,EACV,mBAAmB,EACnB,wBAAwB,EACxB,mBAAmB,GACpB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAA;AAMjD,OAAO,EACL,YAAY,EACZ,aAAa,EACb,cAAc,EACd,mBAAmB,EACnB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,kBAAkB,CAAA;AACzB,YAAY,EACV,kBAAkB,EAClB,aAAa,EACb,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,yBAAyB,EACzB,UAAU,EACV,kBAAkB,IAAI,uBAAuB,GAC9C,MAAM,kBAAkB,CAAA;AAEzB,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE;QACH,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;QACvC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAA;QACjD,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;KAC1D,CAAA;IACD,WAAW,EAAE;QACX,KAAK,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;QACnE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;QACjD,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAC9D,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAA;KAC3D,CAAA;IACD,IAAI,EAAE;QACJ,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;QAChD,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;KACvF,CAAA;IACD;;;OAGG;IACH,GAAG,CAAC,EAAE;QACJ,eAAe,CAAC,MAAM,EAAE;YACtB,gBAAgB,EAAE,MAAM,CAAA;YACxB,UAAU,EAAE,MAAM,CAAA;YAClB,cAAc,EAAE,MAAM,CAAA;YACtB,WAAW,EAAE,UAAU,CAAA;YACvB,SAAS,EAAE,UAAU,CAAA;YACrB,eAAe,EAAE,MAAM,CAAA;SACxB,GAAG,OAAO,CAAC;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,OAAO,CAAA;SAAE,CAAC,CAAA;QACvE,WAAW,CAAC,MAAM,EAAE;YAClB,QAAQ,EAAE,MAAM,CAAA;YAChB,SAAS,EAAE,MAAM,CAAA;YACjB,SAAS,CAAC,EAAE,MAAM,CAAA;YAClB,KAAK,CAAC,EAAE,MAAM,CAAA;YACd,iBAAiB,EAAE,mBAAmB,EAAE,CAAA;YACxC,iBAAiB,EAAE,MAAM,CAAA;SAC1B,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;QACpB,qBAAqB,CAAC,MAAM,EAAE;YAC5B,YAAY,EAAE,MAAM,CAAA;YACpB,QAAQ,EAAE,MAAM,CAAA;YAChB,SAAS,CAAC,EAAE,MAAM,CAAA;YAClB,KAAK,CAAC,EAAE,MAAM,CAAA;YACd,iBAAiB,EAAE,mBAAmB,EAAE,CAAA;SACzC,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAA;KACtC,CAAA;CACF;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAAA;IACpC,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,gEAAgE;IAChE,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAkCD,wBAAgB,SAAS,CAAC,MAAM,EAAE,aAAa,GAAG,UAAU,CAiB3D"}

package/dist/index.js

@@ -5,6 +5,13 @@ import { getSql } from './stub/db.js';
 import { createChainClient } from './chain/index.js';
 export { runMigrations, closeConnection } from './stub/db.js';
 export { generateKeypair, decodePublicKey } from './stub/crypto.js';
+export { createChainClient } from './chain/index.js';
+export { utf8ToHex, toHex } from './chain/bbs.js';
+// SD-JWT VC (selective-disclosure JWT, VC profile) — required for
+// EUDI Wallet interop.
+//   Phase 1: issue + verify on flat subjects.
+//   Phase 2: holder presentation API + Key-Binding JWT.
+export { issueSdJwtVc, verifySdJwtVc, presentSdJwtVc, createStatusListJwt, ed25519PublicKeyToJwk, ed25519PublicKeyFromJwk, } from './sdjwt/index.js';
 function createStubSdk() {
     return {
         did: {

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAKxC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AACpE,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAChH,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,iBAAiB,EAAoB,MAAM,kBAAkB,CAAA;AAMtE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC7D,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AA6BnE,SAAS,aAAa;IACpB,OAAO;QACL,GAAG,EAAE;YACH,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,UAAU;YACnB,UAAU,EAAE,aAAa;SAC1B;QACD,WAAW,EAAE;YACX,KAAK,EAAE,gBAAgB;YACvB,MAAM,EAAE,iBAAiB;YACzB,MAAM,EAAE,iBAAiB;YACzB,KAAK,EAAE,gBAAgB;SACxB;QACD,IAAI,EAAE;YACJ,KAAK,CAAC,eAAe,CAAC,MAAc;gBAClC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;gBACpB,MAAM,SAAS,GAAG,UAAU,EAAE,CAAA;gBAC9B,MAAM,GAAG,CAAA,2DAA2D,SAAS,KAAK,MAAM,GAAG,CAAA;gBAC3F,OAAO,SAAS,CAAA;YAClB,CAAC;YACD,KAAK,CAAC,kBAAkB,CACtB,GAAW,EACX,UAAkB,EAClB,OAAe;gBAEf,qDAAqD;gBACrD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;YACpC,CAAC;SACF;KACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAqB;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,CAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAgD,IAAI,MAAM,CAAC,CAAA;IAEvH,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,SAAS,CAAC;QACf,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,uBAAuB,CAAA;YACzF,MAAM,SAAS,GAAG,MAAM,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAA;YACpF,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAA;YAC3F,CAAC;YACD,OAAO,iBAAiB,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;QAClF,CAAC;QACD,KAAK,MAAM,CAAC;QACZ;YACE,OAAO,aAAa,EAAE,CAAA;IAC1B,CAAC;AACH,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAKxC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AACpE,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAChH,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,iBAAiB,EAAoB,MAAM,kBAAkB,CAAA;AAWtE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC7D,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAEnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAMpD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAA;AAEjD,kEAAkE;AAClE,uBAAuB;AACvB,8CAA8C;AAC9C,wDAAwD;AACxD,OAAO,EACL,YAAY,EACZ,aAAa,EACb,cAAc,EACd,mBAAmB,EACnB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,kBAAkB,CAAA;AAmEzB,SAAS,aAAa;IACpB,OAAO;QACL,GAAG,EAAE;YACH,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,UAAU;YACnB,UAAU,EAAE,aAAa;SAC1B;QACD,WAAW,EAAE;YACX,KAAK,EAAE,gBAAgB;YACvB,MAAM,EAAE,iBAAiB;YACzB,MAAM,EAAE,iBAAiB;YACzB,KAAK,EAAE,gBAAgB;SACxB;QACD,IAAI,EAAE;YACJ,KAAK,CAAC,eAAe,CAAC,MAAc;gBAClC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;gBACpB,MAAM,SAAS,GAAG,UAAU,EAAE,CAAA;gBAC9B,MAAM,GAAG,CAAA,2DAA2D,SAAS,KAAK,MAAM,GAAG,CAAA;gBAC3F,OAAO,SAAS,CAAA;YAClB,CAAC;YACD,KAAK,CAAC,kBAAkB,CACtB,GAAW,EACX,UAAkB,EAClB,OAAe;gBAEf,qDAAqD;gBACrD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;YACpC,CAAC;SACF;KACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAqB;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,CAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAgD,IAAI,MAAM,CAAC,CAAA;IAEvH,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,SAAS,CAAC;QACf,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,uBAAuB,CAAA;YACzF,MAAM,SAAS,GAAG,MAAM,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAA;YACpF,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAA;YAC3F,CAAC;YACD,OAAO,iBAAiB,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;QAClF,CAAC;QACD,KAAK,MAAM,CAAC;QACZ;YACE,OAAO,aAAa,EAAE,CAAA;IAC1B,CAAC;AACH,CAAC"}

package/dist/sdjwt/index.d.ts

@@ -0,0 +1,8 @@
+export type { IssueSdJwtVcParams, IssuedSdJwtVc, VerifySdJwtVcParams, VerificationResult, PresentSdJwtVcParams, PresentationResult, } from './types.js';
+export { issueSdJwtVc } from './issue.js';
+export { verifySdJwtVc } from './verify.js';
+export { presentSdJwtVc } from './present.js';
+export { createStatusListJwt } from './status-list.js';
+export type { CreateStatusListJwtParams } from './status-list.js';
+export { ed25519PublicKeyToJwk, ed25519PublicKeyFromJwk, type Ed25519Jwk, } from './signer.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/sdjwt/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sdjwt/index.ts"],"names":[],"mappings":"AAGA,YAAY,EACV,kBAAkB,EAClB,aAAa,EACb,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AACtD,YAAY,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAA;AACjE,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,KAAK,UAAU,GAChB,MAAM,aAAa,CAAA"}

package/dist/sdjwt/index.js

@@ -0,0 +1,8 @@
+// SD-JWT VC integration for Solidus.
+// See `.claude/plans/2026-05-09-sdjwt-vc-implementation.md`.
+export { issueSdJwtVc } from './issue.js';
+export { verifySdJwtVc } from './verify.js';
+export { presentSdJwtVc } from './present.js';
+export { createStatusListJwt } from './status-list.js';
+export { ed25519PublicKeyToJwk, ed25519PublicKeyFromJwk, } from './signer.js';
+//# sourceMappingURL=index.js.map

package/dist/sdjwt/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sdjwt/index.ts"],"names":[],"mappings":"AAAA,qCAAqC;AACrC,6DAA6D;AAW7D,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAEtD,OAAO,EACL,qBAAqB,EACrB,uBAAuB,GAExB,MAAM,aAAa,CAAA"}

package/dist/sdjwt/issue.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Issue an SD-JWT VC (Selective-Disclosure JWT, VC profile).
+ *
+ * Wraps `@sd-jwt/sd-jwt-vc` with Solidus's Ed25519 / EdDSA conventions.
+ * The result is the compact-serialised form `<jws>~<d1>~<d2>~`, ready
+ * to hand off to a holder. Disclosure values stay attached to the
+ * compact form; selective revelation is a holder-side concern (see
+ * `present.ts` in a follow-up).
+ */
+import type { IssueSdJwtVcParams, IssuedSdJwtVc } from './types.js';
+export declare function issueSdJwtVc(params: IssueSdJwtVcParams): Promise<IssuedSdJwtVc>;
+//# sourceMappingURL=issue.d.ts.map

package/dist/sdjwt/issue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"issue.d.ts","sourceRoot":"","sources":["../../src/sdjwt/issue.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAYH,OAAO,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAuDnE,wBAAsB,YAAY,CAChC,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,aAAa,CAAC,CA+ExB"}

package/dist/sdjwt/issue.js

@@ -0,0 +1,119 @@
+/**
+ * Issue an SD-JWT VC (Selective-Disclosure JWT, VC profile).
+ *
+ * Wraps `@sd-jwt/sd-jwt-vc` with Solidus's Ed25519 / EdDSA conventions.
+ * The result is the compact-serialised form `<jws>~<d1>~<d2>~`, ready
+ * to hand off to a holder. Disclosure values stay attached to the
+ * compact form; selective revelation is a holder-side concern (see
+ * `present.ts` in a follow-up).
+ */
+import { SDJwtVcInstance } from '@sd-jwt/sd-jwt-vc';
+import * as ed from '@noble/ed25519';
+import { ed25519PublicKeyToJwk, makeEd25519Signer, sdJwtHasher, sdJwtSaltGenerator, } from './signer.js';
+/**
+ * Build a sd-jwt-js DisclosureFrame from a list of disclosable claim
+ * paths (Phase 2c). Each path is a dot-separated string like
+ * `address.street`. The resulting frame is recursive — nested `_sd`
+ * arrays per object level — matching sd-jwt-js's DisclosureFrame type.
+ *
+ * Default behaviour (when `disclosable` is undefined): every top-level
+ * key except `id` is disclosable. Nested objects are NOT auto-expanded
+ * — callers who want nested disclosure must pass explicit paths.
+ */
+function buildDisclosureFrame(subject, disclosable) {
+    const paths = disclosable ?? Object.keys(subject).filter((k) => k !== 'id');
+    // Flat fast path: no dotted paths → original Phase 1 behaviour.
+    if (paths.every((p) => !p.includes('.'))) {
+        return { _sd: paths };
+    }
+    const root = { _sd: [] };
+    for (const path of paths) {
+        const segments = path.split('.');
+        let cursor = root;
+        for (let i = 0; i < segments.length; i++) {
+            const seg = segments[i];
+            if (i === segments.length - 1) {
+                cursor._sd.push(seg);
+            }
+            else {
+                const existing = cursor[seg];
+                if (existing === undefined ||
+                    Array.isArray(existing) ||
+                    seg === '_sd') {
+                    cursor[seg] = { _sd: [] };
+                }
+                cursor = cursor[seg];
+            }
+        }
+    }
+    return root;
+}
+export async function issueSdJwtVc(params) {
+    if (params.issuerPrivateKey.length !== 32) {
+        throw new Error(`issuerPrivateKey must be 32 bytes, got ${params.issuerPrivateKey.length}`);
+    }
+    // Derive the public key once so the verifier callback can be
+    // attached at issuance time (sd-jwt-vc does not strictly need it for
+    // issue() but we keep symmetry with the verify path).
+    const issuerPublicKey = await ed.getPublicKeyAsync(params.issuerPrivateKey);
+    const sdjwt = new SDJwtVcInstance({
+        signer: makeEd25519Signer(params.issuerPrivateKey),
+        signAlg: 'EdDSA',
+        hasher: sdJwtHasher,
+        hashAlg: 'sha-256',
+        saltGenerator: sdJwtSaltGenerator,
+        // We don't load remote vct metadata in Phase 1 — the issuer is
+        // authoritative for the type and consumers can fetch metadata
+        // out-of-band when Phase 2 adds a metadata endpoint.
+        loadTypeMetadataFormat: false,
+    });
+    const now = Math.floor(Date.now() / 1000);
+    const subject = { ...params.subject };
+    const subjectId = typeof subject['id'] === 'string' ? subject['id'] : undefined;
+    // `id` is not part of the SD-JWT VC payload directly — `sub` carries
+    // the holder identifier per spec §3.2.2.2.
+    delete subject['id'];
+    const payload = {
+        iss: params.issuer,
+        vct: params.vct,
+        iat: now,
+        ...subject,
+    };
+    if (subjectId !== undefined)
+        payload['sub'] = subjectId;
+    if (params.validFrom !== undefined) {
+        payload['nbf'] = Math.floor(new Date(params.validFrom).getTime() / 1000);
+    }
+    if (params.validUntil !== undefined) {
+        payload['exp'] = Math.floor(new Date(params.validUntil).getTime() / 1000);
+    }
+    // When a holder public key is supplied, bind the credential to that
+    // key via the W3C `cnf` claim (RFC 7800). The verifier checks the
+    // KB-JWT's signature against this key at presentation time.
+    if (params.holderPublicKey !== undefined) {
+        payload['cnf'] = { jwk: ed25519PublicKeyToJwk(params.holderPublicKey) };
+    }
+    // Optional status-list reference per draft-ietf-oauth-status-list.
+    if (params.status !== undefined) {
+        payload['status'] = {
+            status_list: { uri: params.status.uri, idx: params.status.idx },
+        };
+    }
+    const disclosureFrame = buildDisclosureFrame(subject, params.disclosable);
+    const compact = await sdjwt.issue(payload, disclosureFrame);
+    // Quick sanity check that we can derive a count of disclosures from
+    // the compact form: split on `~`, drop the leading JWS, and any
+    // trailing empty (which is the absent KB-JWT slot in Phase 1).
+    const parts = compact.split('~');
+    const disclosureCount = parts.slice(1).filter((p) => p.length > 0).length;
+    // Surface the public key on the result for callers that want to
+    // immediately store it alongside the compact form (e.g., a verify
+    // backend that records the issuer-key-at-issue-time).
+    void issuerPublicKey;
+    return {
+        compact,
+        payload,
+        disclosureCount,
+    };
+}
+//# sourceMappingURL=issue.js.map

package/dist/sdjwt/issue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"issue.js","sourceRoot":"","sources":["../../src/sdjwt/issue.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAEnD,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAA;AAEpC,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,WAAW,EACX,kBAAkB,GACnB,MAAM,aAAa,CAAA;AAGpB;;;;;;;;;GASG;AACH,SAAS,oBAAoB,CAC3B,OAAgC,EAChC,WAAsB;IAEtB,MAAM,KAAK,GACT,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAA;IAE/D,gEAAgE;IAChE,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,GAAG,EAAE,KAAK,EAElB,CAAA;IACH,CAAC;IAOD,MAAM,IAAI,GAAc,EAAE,GAAG,EAAE,EAAE,EAAE,CAAA;IACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAChC,IAAI,MAAM,GAAc,IAAI,CAAA;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAA;YACxB,IAAI,CAAC,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACtB,CAAC;iBAAM,CAAC;gBACN,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;gBAC5B,IACE,QAAQ,KAAK,SAAS;oBACtB,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;oBACvB,GAAG,KAAK,KAAK,EACb,CAAC;oBACD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAe,CAAA;gBACxC,CAAC;gBACD,MAAM,GAAG,MAAM,CAAC,GAAG,CAAc,CAAA;YACnC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAA2D,CAAA;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAA0B;IAE1B,IAAI,MAAM,CAAC,gBAAgB,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,0CAA0C,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAC3E,CAAA;IACH,CAAC;IAED,6DAA6D;IAC7D,qEAAqE;IACrE,sDAAsD;IACtD,MAAM,eAAe,GAAG,MAAM,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAA;IAE3E,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC;QAChC,MAAM,EAAE,iBAAiB,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAClD,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,SAAS;QAClB,aAAa,EAAE,kBAAkB;QACjC,+DAA+D;QAC/D,8DAA8D;QAC9D,qDAAqD;QACrD,sBAAsB,EAAE,KAAK;KAC9B,CAAC,CAAA;IAEF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;IACzC,MAAM,OAAO,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,CAAA;IACrC,MAAM,SAAS,GAAG,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC/E,qEAAqE;IACrE,2CAA2C;IAC3C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAA;IAEpB,MAAM,OAAO,GAA4B;QACvC,GAAG,EAAE,MAAM,CAAC,MAAM;QAClB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,GAAG,EAAE,GAAG;QACR,GAAG,OAAO;KACX,CAAA;IACD,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,CAAC,KAAK,CAAC,GAAG,SAAS,CAAA;IACvD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAA;IAC1E,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACpC,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAA;IAC3E,CAAC;IACD,oEAAoE;IACpE,kEAAkE;IAClE,4DAA4D;IAC5D,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACzC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,qBAAqB,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAA;IACzE,CAAC;IACD,mEAAmE;IACnE,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,CAAC,QAAQ,CAAC,GAAG;YAClB,WAAW,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE;SAChE,CAAA;IACH,CAAC;IAED,MAAM,eAAe,GAAG,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAA;IACzE,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,KAAK,CAC/B,OAA4C,EAC5C,eAAoD,CACrD,CAAA;IAED,oEAAoE;IACpE,gEAAgE;IAChE,+DAA+D;IAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAChC,MAAM,eAAe,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,CAAA;IAEzE,gEAAgE;IAChE,kEAAkE;IAClE,sDAAsD;IACtD,KAAK,eAAe,CAAA;IAEpB,OAAO;QACL,OAAO;QACP,OAAO;QACP,eAAe;KAChB,CAAA;AACH,CAAC"}

package/dist/sdjwt/present.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Holder-side presentation API for SD-JWT VC.
+ *
+ * Phase 2. Takes an issued SD-JWT VC (with all disclosures attached)
+ * and returns a presentation that:
+ *   - reveals only the disclosures the holder consents to,
+ *   - is bound to a Key-Binding JWT signed by the holder's private key.
+ *
+ * The KB-JWT proves the holder controls the key referenced by the
+ * issuer-set `cnf.jwk` claim — without it, anyone with a copy of the
+ * compact form could replay the credential to a different verifier.
+ */
+import type { PresentSdJwtVcParams, PresentationResult } from './types.js';
+export declare function presentSdJwtVc(params: PresentSdJwtVcParams): Promise<PresentationResult>;
+//# sourceMappingURL=present.d.ts.map

package/dist/sdjwt/present.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"present.d.ts","sourceRoot":"","sources":["../../src/sdjwt/present.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAUH,OAAO,KAAK,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AA6C1E,wBAAsB,cAAc,CAClC,MAAM,EAAE,oBAAoB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CAmC7B"}

package/dist/sdjwt/present.js

@@ -0,0 +1,80 @@
+/**
+ * Holder-side presentation API for SD-JWT VC.
+ *
+ * Phase 2. Takes an issued SD-JWT VC (with all disclosures attached)
+ * and returns a presentation that:
+ *   - reveals only the disclosures the holder consents to,
+ *   - is bound to a Key-Binding JWT signed by the holder's private key.
+ *
+ * The KB-JWT proves the holder controls the key referenced by the
+ * issuer-set `cnf.jwk` claim — without it, anyone with a copy of the
+ * compact form could replay the credential to a different verifier.
+ */
+import { SDJwtVcInstance } from '@sd-jwt/sd-jwt-vc';
+import { makeEd25519Signer, sdJwtHasher, sdJwtSaltGenerator, } from './signer.js';
+/**
+ * Build a sd-jwt-js PresentationFrame from a list of claim paths
+ * (Phase 2c — supports nested paths via dot notation). Each path is
+ * either a top-level key (`'firstName'`) or a dotted path into a
+ * nested object (`'address.street'`). Result is a recursive map
+ * `{ key: true | { nestedKey: true } }` matching sd-jwt-js's
+ * PresentationFrame type.
+ */
+function buildPresentationFrame(reveal) {
+    // Flat fast path — preserves the original Phase 2 behaviour.
+    if (reveal.every((p) => !p.includes('.'))) {
+        const flat = {};
+        for (const k of reveal)
+            flat[k] = true;
+        return flat;
+    }
+    const root = {};
+    for (const path of reveal) {
+        const segments = path.split('.');
+        let cursor = root;
+        for (let i = 0; i < segments.length; i++) {
+            const seg = segments[i];
+            if (i === segments.length - 1) {
+                cursor[seg] = true;
+            }
+            else {
+                // If a previous path already pinned this segment as `true`,
+                // upgrade to an object so we can attach the nested key.
+                const existing = cursor[seg];
+                if (existing === true || existing === undefined) {
+                    cursor[seg] = {};
+                }
+                cursor = cursor[seg];
+            }
+        }
+    }
+    return root;
+}
+export async function presentSdJwtVc(params) {
+    if (params.holderPrivateKey.length !== 32) {
+        throw new Error(`holderPrivateKey must be 32 bytes, got ${params.holderPrivateKey.length}`);
+    }
+    // Holder uses its own key as the KB-JWT signer. The issuer-side
+    // signer is irrelevant here — present() does not re-sign the SD-JWT,
+    // only the new KB-JWT.
+    const sdjwt = new SDJwtVcInstance({
+        hasher: sdJwtHasher,
+        saltGenerator: sdJwtSaltGenerator,
+        hashAlg: 'sha-256',
+        kbSigner: makeEd25519Signer(params.holderPrivateKey),
+        kbSignAlg: 'EdDSA',
+        loadTypeMetadataFormat: false,
+    });
+    const presentationFrame = buildPresentationFrame(params.claimsToReveal);
+    const compact = await sdjwt.present(params.compact, presentationFrame, {
+        kb: {
+            payload: {
+                iat: Math.floor(Date.now() / 1000),
+                aud: params.audience,
+                nonce: params.nonce,
+            },
+        },
+    });
+    return { compact };
+}
+//# sourceMappingURL=present.js.map

package/dist/sdjwt/present.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"present.js","sourceRoot":"","sources":["../../src/sdjwt/present.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAGnD,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,kBAAkB,GACnB,MAAM,aAAa,CAAA;AAGpB;;;;;;;GAOG;AACH,SAAS,sBAAsB,CAC7B,MAAgB;IAEhB,6DAA6D;IAC7D,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAyB,EAAE,CAAA;QACrC,KAAK,MAAM,CAAC,IAAI,MAAM;YAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAA;QACtC,OAAO,IAA6D,CAAA;IACtE,CAAC;IAKD,MAAM,IAAI,GAAc,EAAE,CAAA;IAC1B,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAChC,IAAI,MAAM,GAAc,IAAI,CAAA;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAA;YACxB,IAAI,CAAC,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAA;YACpB,CAAC;iBAAM,CAAC;gBACN,4DAA4D;gBAC5D,wDAAwD;gBACxD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;gBAC5B,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAChD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAA;gBAClB,CAAC;gBACD,MAAM,GAAG,MAAM,CAAC,GAAG,CAAc,CAAA;YACnC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAA6D,CAAA;AACtE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAA4B;IAE5B,IAAI,MAAM,CAAC,gBAAgB,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,0CAA0C,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAC3E,CAAA;IACH,CAAC;IAED,gEAAgE;IAChE,qEAAqE;IACrE,uBAAuB;IACvB,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC;QAChC,MAAM,EAAE,WAAW;QACnB,aAAa,EAAE,kBAAkB;QACjC,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,iBAAiB,CAAC,MAAM,CAAC,gBAAgB,CAAC;QACpD,SAAS,EAAE,OAAO;QAClB,sBAAsB,EAAE,KAAK;KAC9B,CAAC,CAAA;IAEF,MAAM,iBAAiB,GAAG,sBAAsB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;IACvE,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,CACjC,MAAM,CAAC,OAAO,EACd,iBAAiB,EACjB;QACE,EAAE,EAAE;YACF,OAAO,EAAE;gBACP,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;gBAClC,GAAG,EAAE,MAAM,CAAC,QAAQ;gBACpB,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB;SACF;KACF,CACF,CAAA;IAED,OAAO,EAAE,OAAO,EAAE,CAAA;AACpB,CAAC"}

package/dist/sdjwt/signer.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Ed25519 signer/verifier adapters for `@sd-jwt/core`.
+ *
+ * sd-jwt-js expects callbacks shaped as `(data: string) => Promise<string>`
+ * for signing and `(data: string, signature: string) => Promise<boolean>`
+ * for verification. Both data and signature are compact-encoded bytes
+ * for SD-JWT (which uses base64url).
+ *
+ * This module wires those callbacks to `@noble/ed25519`, matching the
+ * EdDSA convention used elsewhere in Solidus (chain tx signing,
+ * `@solidus-network/jwt`). The hash algorithm is fixed at SHA-256 because the
+ * SD-JWT spec requires it for the disclosure-digest construction; the
+ * rest of Solidus (chain layer) uses BLAKE3, but disclosure hashes are
+ * client-interop boundary so we follow the spec.
+ */
+/**
+ * Construct a signer callback bound to the given Ed25519 private key.
+ *
+ * Returns the signature as a base64url-encoded string, matching what
+ * sd-jwt-js expects for the JWS `signature` segment.
+ */
+export declare function makeEd25519Signer(privateKey: Uint8Array): (data: string) => Promise<string>;
+/** Construct a verifier callback bound to the given Ed25519 public key. */
+export declare function makeEd25519Verifier(publicKey: Uint8Array): (data: string, signature: string) => Promise<boolean>;
+/**
+ * Hasher in the shape `@sd-jwt/types` expects:
+ * `(data: string | ArrayBuffer, alg: string) => Uint8Array`.
+ *
+ * Honours the requested algorithm so callers can plug in others later;
+ * Phase 1 only supports `sha-256` (the SD-JWT spec default and the
+ * only algorithm sd-jwt-vc emits without explicit configuration).
+ */
+export declare function sdJwtHasher(data: string | ArrayBuffer, alg: string): Uint8Array;
+/**
+ * Salt generator in the shape `@sd-jwt/types` expects:
+ * `(length: number) => string`.
+ *
+ * Returns a base64url-encoded random string of `length` bytes.
+ * SD-JWT spec recommends ≥128 bits (16 bytes) of entropy per salt;
+ * sd-jwt-js calls this with `length = 16` by default.
+ */
+export declare function sdJwtSaltGenerator(length: number): string;
+/**
+ * JWK shape used in the SD-JWT VC `cnf` claim for an Ed25519 holder
+ * key. Matches RFC 8037 — Ed25519 → OKP curve, no `d` (private)
+ * component. The verifier reconstructs the raw 32-byte public key from
+ * `x`.
+ */
+export interface Ed25519Jwk {
+    kty: 'OKP';
+    crv: 'Ed25519';
+    x: string;
+    alg: 'EdDSA';
+}
+/** Convert a 32-byte Ed25519 public key into the canonical JWK form. */
+export declare function ed25519PublicKeyToJwk(publicKey: Uint8Array): Ed25519Jwk;
+/** Recover a 32-byte Ed25519 public key from its canonical JWK form. */
+export declare function ed25519PublicKeyFromJwk(jwk: unknown): Uint8Array;
+//# sourceMappingURL=signer.d.ts.map

package/dist/sdjwt/signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer.d.ts","sourceRoot":"","sources":["../../src/sdjwt/signer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAqBH;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,UAAU,IAIxC,MAAM,MAAM,KAAG,OAAO,CAAC,MAAM,CAAC,CAI7C;AAED,2EAA2E;AAC3E,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,UAAU,IAIzC,MAAM,MAAM,EAAE,WAAW,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC,CAWjE;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CACzB,IAAI,EAAE,MAAM,GAAG,WAAW,EAC1B,GAAG,EAAE,MAAM,GACV,UAAU,CASZ;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAQzD;AAED;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,KAAK,CAAA;IACV,GAAG,EAAE,SAAS,CAAA;IACd,CAAC,EAAE,MAAM,CAAA;IACT,GAAG,EAAE,OAAO,CAAA;CACb;AAED,wEAAwE;AACxE,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,UAAU,GAAG,UAAU,CAUvE;AAED,wEAAwE;AACxE,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,OAAO,GAAG,UAAU,CAehE"}

package/dist/sdjwt/signer.js

@@ -0,0 +1,119 @@
+/**
+ * Ed25519 signer/verifier adapters for `@sd-jwt/core`.
+ *
+ * sd-jwt-js expects callbacks shaped as `(data: string) => Promise<string>`
+ * for signing and `(data: string, signature: string) => Promise<boolean>`
+ * for verification. Both data and signature are compact-encoded bytes
+ * for SD-JWT (which uses base64url).
+ *
+ * This module wires those callbacks to `@noble/ed25519`, matching the
+ * EdDSA convention used elsewhere in Solidus (chain tx signing,
+ * `@solidus-network/jwt`). The hash algorithm is fixed at SHA-256 because the
+ * SD-JWT spec requires it for the disclosure-digest construction; the
+ * rest of Solidus (chain layer) uses BLAKE3, but disclosure hashes are
+ * client-interop boundary so we follow the spec.
+ */
+import * as ed from '@noble/ed25519';
+import { sha256 } from '@noble/hashes/sha2';
+function fromBase64Url(input) {
+    const padded = input.replace(/-/g, '+').replace(/_/g, '/').padEnd(input.length + ((4 - (input.length % 4)) % 4), '=');
+    return new Uint8Array(Buffer.from(padded, 'base64'));
+}
+function toBase64Url(input) {
+    return Buffer.from(input)
+        .toString('base64')
+        .replace(/\+/g, '-')
+        .replace(/\//g, '_')
+        .replace(/=/g, '');
+}
+/**
+ * Construct a signer callback bound to the given Ed25519 private key.
+ *
+ * Returns the signature as a base64url-encoded string, matching what
+ * sd-jwt-js expects for the JWS `signature` segment.
+ */
+export function makeEd25519Signer(privateKey) {
+    if (privateKey.length !== 32) {
+        throw new Error(`privateKey must be 32 bytes, got ${privateKey.length}`);
+    }
+    return async (data) => {
+        const sig = await ed.signAsync(new TextEncoder().encode(data), privateKey);
+        return toBase64Url(sig);
+    };
+}
+/** Construct a verifier callback bound to the given Ed25519 public key. */
+export function makeEd25519Verifier(publicKey) {
+    if (publicKey.length !== 32) {
+        throw new Error(`publicKey must be 32 bytes, got ${publicKey.length}`);
+    }
+    return async (data, signature) => {
+        try {
+            return await ed.verifyAsync(fromBase64Url(signature), new TextEncoder().encode(data), publicKey);
+        }
+        catch {
+            return false;
+        }
+    };
+}
+/**
+ * Hasher in the shape `@sd-jwt/types` expects:
+ * `(data: string | ArrayBuffer, alg: string) => Uint8Array`.
+ *
+ * Honours the requested algorithm so callers can plug in others later;
+ * Phase 1 only supports `sha-256` (the SD-JWT spec default and the
+ * only algorithm sd-jwt-vc emits without explicit configuration).
+ */
+export function sdJwtHasher(data, alg) {
+    if (alg !== 'sha-256') {
+        throw new Error(`unsupported SD-JWT hash algorithm: ${alg}`);
+    }
+    const bytes = typeof data === 'string'
+        ? new TextEncoder().encode(data)
+        : new Uint8Array(data);
+    return sha256(bytes);
+}
+/**
+ * Salt generator in the shape `@sd-jwt/types` expects:
+ * `(length: number) => string`.
+ *
+ * Returns a base64url-encoded random string of `length` bytes.
+ * SD-JWT spec recommends ≥128 bits (16 bytes) of entropy per salt;
+ * sd-jwt-js calls this with `length = 16` by default.
+ */
+export function sdJwtSaltGenerator(length) {
+    const bytes = new Uint8Array(length);
+    crypto.getRandomValues(bytes);
+    return Buffer.from(bytes)
+        .toString('base64')
+        .replace(/\+/g, '-')
+        .replace(/\//g, '_')
+        .replace(/=/g, '');
+}
+/** Convert a 32-byte Ed25519 public key into the canonical JWK form. */
+export function ed25519PublicKeyToJwk(publicKey) {
+    if (publicKey.length !== 32) {
+        throw new Error(`publicKey must be 32 bytes, got ${publicKey.length}`);
+    }
+    return {
+        kty: 'OKP',
+        crv: 'Ed25519',
+        x: toBase64Url(publicKey),
+        alg: 'EdDSA',
+    };
+}
+/** Recover a 32-byte Ed25519 public key from its canonical JWK form. */
+export function ed25519PublicKeyFromJwk(jwk) {
+    if (!jwk ||
+        typeof jwk !== 'object' ||
+        jwk.kty !== 'OKP' ||
+        jwk.crv !== 'Ed25519' ||
+        typeof jwk.x !== 'string') {
+        throw new Error('not an Ed25519 OKP JWK');
+    }
+    const bytes = fromBase64Url(jwk.x);
+    if (bytes.length !== 32) {
+        throw new Error(`JWK x must decode to 32 bytes, got ${bytes.length}`);
+    }
+    return bytes;
+}
+//# sourceMappingURL=signer.js.map

package/dist/sdjwt/signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer.js","sourceRoot":"","sources":["../../src/sdjwt/signer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAA;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAE3C,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,MAAM,CAC/D,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAC7C,GAAG,CACJ,CAAA;IACD,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;AACtD,CAAC;AAED,SAAS,WAAW,CAAC,KAAiB;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;SACtB,QAAQ,CAAC,QAAQ,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAsB;IACtD,IAAI,UAAU,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,oCAAoC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAA;IAC1E,CAAC;IACD,OAAO,KAAK,EAAE,IAAY,EAAmB,EAAE;QAC7C,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,CAAA;QAC1E,OAAO,WAAW,CAAC,GAAG,CAAC,CAAA;IACzB,CAAC,CAAA;AACH,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,mBAAmB,CAAC,SAAqB;IACvD,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,mCAAmC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAA;IACxE,CAAC;IACD,OAAO,KAAK,EAAE,IAAY,EAAE,SAAiB,EAAoB,EAAE;QACjE,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,CAAC,WAAW,CACzB,aAAa,CAAC,SAAS,CAAC,EACxB,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAC9B,SAAS,CACV,CAAA;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CACzB,IAA0B,EAC1B,GAAW;IAEX,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,sCAAsC,GAAG,EAAE,CAAC,CAAA;IAC9D,CAAC;IACD,MAAM,KAAK,GACT,OAAO,IAAI,KAAK,QAAQ;QACtB,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;QAChC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAA;IAC1B,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;AACtB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAA;IACpC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;IAC7B,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;SACtB,QAAQ,CAAC,QAAQ,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;AACtB,CAAC;AAeD,wEAAwE;AACxE,MAAM,UAAU,qBAAqB,CAAC,SAAqB;IACzD,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,mCAAmC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAA;IACxE,CAAC;IACD,OAAO;QACL,GAAG,EAAE,KAAK;QACV,GAAG,EAAE,SAAS;QACd,CAAC,EAAE,WAAW,CAAC,SAAS,CAAC;QACzB,GAAG,EAAE,OAAO;KACb,CAAA;AACH,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,uBAAuB,CAAC,GAAY;IAClD,IACE,CAAC,GAAG;QACJ,OAAO,GAAG,KAAK,QAAQ;QACtB,GAAyB,CAAC,GAAG,KAAK,KAAK;QACvC,GAAyB,CAAC,GAAG,KAAK,SAAS;QAC5C,OAAQ,GAAuB,CAAC,CAAC,KAAK,QAAQ,EAC9C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;IAC3C,CAAC;IACD,MAAM,KAAK,GAAG,aAAa,CAAE,GAAqB,CAAC,CAAC,CAAC,CAAA;IACrD,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,sCAAsC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;IACvE,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/sdjwt/status-list.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Status list (draft-ietf-oauth-status-list) helper for issuers.
+ *
+ * The lifecycle:
+ *   1. Issuer creates a `StatusList` (a bitstring of N statuses,
+ *      typically 1 bit per credential — 0 = active, 1 = revoked).
+ *   2. Issuer wraps it in a JWT signed by the issuer's key, served at
+ *      a stable URL (e.g., `/status-lists/<id>`).
+ *   3. Each issued SD-JWT VC carries a `status.status_list.{uri, idx}`
+ *      pointing at one bit in the list.
+ *   4. To revoke a credential, the issuer flips its bit and republishes
+ *      the (now-updated) JWT at the same URL.
+ *   5. Verifiers refetch the list (cache-respecting) and check the bit.
+ *
+ * `createStatusListJwt` is a thin wrapper around `@sd-jwt/jwt-status-list`
+ * that uses Ed25519 / EdDSA to match the rest of Solidus's signing
+ * conventions.
+ */
+import { type BitsPerStatus } from '@sd-jwt/jwt-status-list';
+export interface CreateStatusListJwtParams {
+    /** Issuer's raw 32-byte Ed25519 private key. */
+    issuerPrivateKey: Uint8Array;
+    /** Issuer DID — becomes the `iss` claim on the status-list JWT. */
+    issuer: string;
+    /**
+     * The URL where this status-list JWT will be served. Becomes the
+     * `sub` claim per draft-ietf-oauth-status-list §6.2 and is what
+     * issued credentials reference via `status.status_list.uri`.
+     */
+    uri: string;
+    /**
+     * Total number of statuses in the list. Determines the bitstring
+     * size. Choose with growth in mind — once published, callers cannot
+     * shrink the list without breaking existing references.
+     */
+    totalStatuses: number;
+    /**
+     * Bits per status. 1 = boolean (active/revoked); 2/4/8 add finer
+     * granularity (suspended, expired, etc.) per spec §6. Default 1.
+     */
+    bitsPerStatus?: BitsPerStatus;
+    /**
+     * Indexes whose status should be set to non-zero. With `bitsPerStatus
+     * = 1`, listing an index here means "revoked". For higher bit
+     * widths, pass `[index, value]` tuples.
+     */
+    revoked?: Array<number | [number, number]>;
+    /**
+     * Optional time-to-live in seconds — verifiers MAY use this to
+     * decide how long to cache the list. Per draft-ietf-oauth-status-list.
+     */
+    ttlSeconds?: number;
+}
+/**
+ * Build a signed status-list JWT.
+ *
+ * Returns the JWT in compact form. Issuers serve this at the URL
+ * embedded in their issued SD-JWT VCs' `status.status_list.uri` claim.
+ */
+export declare function createStatusListJwt(params: CreateStatusListJwtParams): Promise<string>;
+//# sourceMappingURL=status-list.d.ts.map

package/dist/sdjwt/status-list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status-list.d.ts","sourceRoot":"","sources":["../../src/sdjwt/status-list.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EAGL,KAAK,aAAa,EACnB,MAAM,yBAAyB,CAAA;AAUhC,MAAM,WAAW,yBAAyB;IACxC,gDAAgD;IAChD,gBAAgB,EAAE,UAAU,CAAA;IAE5B,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAA;IAEd;;;;OAIG;IACH,GAAG,EAAE,MAAM,CAAA;IAEX;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAA;IAErB;;;OAGG;IACH,aAAa,CAAC,EAAE,aAAa,CAAA;IAE7B;;;;OAIG;IACH,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAE1C;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,MAAM,CAAC,CA8CjB"}