@solidus-network/sdk 0.1.0

package/dist/chain/did.js

@@ -0,0 +1,111 @@
+import { buildTransaction, getAddressFromKey, addressFromPublicKey, hexToBytes, hexToArray, } from './transaction.js';
+import bs58 from 'bs58';
+// ---------- helpers ----------
+/**
+ * Build the DID string from network and address.
+ * Format: did:solidus:{network}:{base58_address}
+ */
+function buildDidString(network, address) {
+    return `did:solidus:${network}:${address}`;
+}
+/**
+ * Poll for a transaction receipt, retrying every 500ms for up to 10 seconds.
+ */
+async function pollReceipt(rpc, txHash) {
+    const maxAttempts = 20; // 20 * 500ms = 10s
+    for (let i = 0; i < maxAttempts; i++) {
+        const receipt = await rpc.call('solidus_getReceipt', [txHash]);
+        if (receipt)
+            return receipt;
+        await new Promise((resolve) => setTimeout(resolve, 500));
+    }
+    throw new Error(`Transaction ${txHash} not confirmed after 10 seconds`);
+}
+/**
+ * Convert an RPC DID document to the W3C DIDDocument format expected
+ * by the SolidusSDK interface.
+ */
+function mapToW3CDIDDocument(doc) {
+    const verificationMethod = doc.verification_method.map((vm) => ({
+        id: vm.id,
+        type: 'Ed25519VerificationKey2020',
+        controller: vm.controller,
+        publicKeyMultibase: 'z' + bs58.encode(hexToBytes(vm.publicKeyHex)),
+    }));
+    return {
+        '@context': [
+            'https://www.w3.org/ns/did/v1',
+            'https://w3id.org/security/suites/ed25519-2020/v1',
+        ],
+        id: doc.id,
+        controller: doc.controller,
+        verificationMethod,
+        authentication: doc.authentication,
+        assertionMethod: doc.authentication, // mirror authentication
+        created: new Date(doc.created_ms).toISOString(),
+        updated: new Date(doc.updated_ms).toISOString(),
+    };
+}
+// ---------- factory ----------
+export function createChainDid(rpc, config) {
+    return {
+        async create(publicKey) {
+            // 1. Derive sender address from the signing key
+            const senderAddress = config.signerAddress ?? (await getAddressFromKey(config.signerPrivateKey));
+            // 2. Get current nonce
+            const nonce = await rpc.call('solidus_getNonce', [senderAddress]);
+            // 3. Build DidCreate payload (Rust serde tagged enum format)
+            const payload = {
+                DidCreate: {
+                    public_key: hexToArray(publicKey),
+                    service_endpoints: [],
+                },
+            };
+            // 4. Build and sign transaction
+            const tx = await buildTransaction(config.signerPrivateKey, nonce, payload);
+            // 5. Submit via RPC
+            const txHash = await rpc.call('solidus_sendTransaction', [JSON.stringify(tx)]);
+            // 6. Poll for receipt
+            const receipt = await pollReceipt(rpc, txHash);
+            if (!receipt.status.startsWith('success')) {
+                throw new Error(`DidCreate failed: ${receipt.status}`);
+            }
+            // 7. Build DID string from the public key that was registered
+            // The chain creates the DID using the public key's address
+            const pubKeyBytes = hexToBytes(publicKey);
+            const didAddress = addressFromPublicKey(pubKeyBytes);
+            const did = buildDidString(config.network, didAddress);
+            // 8. Resolve the created DID to get timestamps
+            const doc = await rpc.call('solidus_didResolve', [did]);
+            const now = new Date().toISOString();
+            return {
+                id: did,
+                controller: did,
+                created: doc ? new Date(doc.created_ms).toISOString() : now,
+                updated: doc ? new Date(doc.updated_ms).toISOString() : now,
+                network: config.network,
+            };
+        },
+        async resolve(did) {
+            const doc = await rpc.call('solidus_didResolve', [did]);
+            if (!doc)
+                return null;
+            if (!doc.active)
+                return null;
+            return mapToW3CDIDDocument(doc);
+        },
+        async deactivate(did, signerKey) {
+            // Derive address from the provided signing key
+            const address = await getAddressFromKey(signerKey);
+            const nonce = await rpc.call('solidus_getNonce', [address]);
+            const payload = { DidDeactivate: { did } };
+            const tx = await buildTransaction(signerKey, nonce, payload);
+            const txHash = await rpc.call('solidus_sendTransaction', [JSON.stringify(tx)]);
+            const receipt = await pollReceipt(rpc, txHash);
+            if (!receipt.status.startsWith('success')) {
+                throw new Error(`DidDeactivate failed: ${receipt.status}`);
+            }
+        },
+    };
+}
+//# sourceMappingURL=did.js.map

package/dist/chain/did.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"did.js","sourceRoot":"","sources":["../../src/chain/did.ts"],"names":[],"mappings":"AAUA,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,EACpB,UAAU,EACV,UAAU,GAEX,MAAM,kBAAkB,CAAA;AAEzB,OAAO,IAAI,MAAM,MAAM,CAAA;AA+BvB,gCAAgC;AAEhC;;;GAGG;AACH,SAAS,cAAc,CAAC,OAAe,EAAE,OAAe;IACtD,OAAO,eAAe,OAAO,IAAI,OAAO,EAAE,CAAA;AAC5C,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,WAAW,CAAC,GAAc,EAAE,MAAc;IACvD,MAAM,WAAW,GAAG,EAAE,CAAA,CAAC,mBAAmB;IAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,CAAoB,oBAAoB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;QACjF,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAC3B,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAA;IAC1D,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,eAAe,MAAM,iCAAiC,CAAC,CAAA;AACzE,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,GAAmB;IAC9C,MAAM,kBAAkB,GAAyB,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACpF,EAAE,EAAE,EAAE,CAAC,EAAE;QACT,IAAI,EAAE,4BAA4B;QAClC,UAAU,EAAE,EAAE,CAAC,UAAU;QACzB,kBAAkB,EAAE,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC;KACnE,CAAC,CAAC,CAAA;IAEH,OAAO;QACL,UAAU,EAAE;YACV,8BAA8B;YAC9B,kDAAkD;SACnD;QACD,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,kBAAkB;QAClB,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,eAAe,EAAE,GAAG,CAAC,cAAc,EAAE,wBAAwB;QAC7D,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;QAC/C,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;KAChD,CAAA;AACH,CAAC;AAED,gCAAgC;AAEhC,MAAM,UAAU,cAAc,CAAC,GAAc,EAAE,MAAmB;IAChE,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,SAAiB;YAC5B,gDAAgD;YAChD,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,CAAC,MAAM,iBAAiB,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAA;YAEhG,uBAAuB;YACvB,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,IAAI,CAAS,kBAAkB,EAAE,CAAC,aAAa,CAAC,CAAC,CAAA;YAEzE,6DAA6D;YAC7D,MAAM,OAAO,GAAG;gBACd,SAAS,EAAE;oBACT,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC;oBACjC,iBAAiB,EAAE,EAAE;iBACtB;aACF,CAAA;YAED,gCAAgC;YAChC,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,gBAAgB,EAAE,KAAK,EAAE,OAAO,CAAC,CAAA;YAE1E,oBAAoB;YACpB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAS,yBAAyB,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YAEtF,sBAAsB;YACtB,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;YAC9C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CAAC,qBAAqB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;YACxD,CAAC;YAED,8DAA8D;YAC9D,2DAA2D;YAC3D,MAAM,WAAW,GAAG,UAAU,CAAC,SAAS,CAAC,CAAA;YACzC,MAAM,UAAU,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAA;YACpD,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;YAEtD,+CAA+C;YAC/C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAwB,oBAAoB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;YAC9E,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;YAEpC,OAAO;gBACL,EAAE,EAAE,GAAG;gBACP,UAAU,EAAE,GAAG;gBACf,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG;gBAC3D,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG;gBAC3D,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAA;QACH,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,GAAW;YACvB,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAwB,oBAAoB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;YAC9E,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAA;YACrB,IAAI,CAAC,GAAG,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAA;YAC5B,OAAO,mBAAmB,CAAC,GAAG,CAAC,CAAA;QACjC,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,GAAW,EAAE,SAAiB;YAC7C,+CAA+C;YAC/C,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,SAAS,CAAC,CAAA;YAClD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,IAAI,CAAS,kBAAkB,EAAE,CAAC,OAAO,CAAC,CAAC,CAAA;YAEnE,MAAM,OAAO,GAAG,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE,EAAE,CAAA;YAC1C,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAA;YAE5D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAS,yBAAyB,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YACtF,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;YAC9C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;YAC5D,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/chain/index.d.ts

@@ -0,0 +1,13 @@
+import type { SolidusSDK } from '../index.js';
+export interface ChainConfig {
+    /** JSON-RPC endpoint URL of the Solidus chain node. */
+    rpcUrl: string;
+    /** Hex-encoded 32-byte Ed25519 private key used for signing transactions. */
+    signerPrivateKey: string;
+    /** Network identifier (used in DID strings). */
+    network: 'testnet' | 'mainnet';
+    /** Base58 sender address. Computed from signerPrivateKey if not provided. */
+    signerAddress?: string;
+}
+export declare function createChainClient(config: ChainConfig): SolidusSDK;
+//# sourceMappingURL=index.d.ts.map

package/dist/chain/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/chain/index.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAE7C,MAAM,WAAW,WAAW;IAC1B,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAA;IACd,6EAA6E;IAC7E,gBAAgB,EAAE,MAAM,CAAA;IACxB,gDAAgD;IAChD,OAAO,EAAE,SAAS,GAAG,SAAS,CAAA;IAC9B,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,GAAG,UAAU,CAOjE"}

package/dist/chain/index.js

@@ -0,0 +1,19 @@
+/**
+ * Chain-backed SolidusSDK client factory.
+ *
+ * Creates an SDK instance that communicates with the Solidus blockchain
+ * via JSON-RPC, replacing the PostgreSQL-backed stub for testnet/mainnet.
+ */
+import { RpcClient } from './rpc.js';
+import { createChainDid } from './did.js';
+import { createChainCredentials } from './credentials.js';
+import { createChainAuth } from './auth.js';
+export function createChainClient(config) {
+    const rpc = new RpcClient(config.rpcUrl);
+    return {
+        did: createChainDid(rpc, config),
+        credentials: createChainCredentials(rpc, config),
+        auth: createChainAuth(rpc, config),
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/chain/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/chain/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAA;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAA;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAe3C,MAAM,UAAU,iBAAiB,CAAC,MAAmB;IACnD,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACxC,OAAO;QACL,GAAG,EAAE,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC;QAChC,WAAW,EAAE,sBAAsB,CAAC,GAAG,EAAE,MAAM,CAAC;QAChD,IAAI,EAAE,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC;KACnC,CAAA;AACH,CAAC"}

package/dist/chain/rpc.d.ts

@@ -0,0 +1,9 @@
+/**
+ * JSON-RPC 2.0 HTTP client for communicating with the Solidus chain node.
+ */
+export declare class RpcClient {
+    private rpcUrl;
+    constructor(rpcUrl: string);
+    call<T>(method: string, params: unknown[]): Promise<T>;
+}
+//# sourceMappingURL=rpc.d.ts.map

package/dist/chain/rpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc.d.ts","sourceRoot":"","sources":["../../src/chain/rpc.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,qBAAa,SAAS;IACR,OAAO,CAAC,MAAM;gBAAN,MAAM,EAAE,MAAM;IAE5B,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;CAiB7D"}

package/dist/chain/rpc.js

@@ -0,0 +1,25 @@
+/**
+ * JSON-RPC 2.0 HTTP client for communicating with the Solidus chain node.
+ */
+export class RpcClient {
+    rpcUrl;
+    constructor(rpcUrl) {
+        this.rpcUrl = rpcUrl;
+    }
+    async call(method, params) {
+        const res = await fetch(this.rpcUrl, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ jsonrpc: '2.0', method, params, id: Date.now() }),
+        });
+        if (!res.ok) {
+            throw new Error(`RPC HTTP error: ${res.status} ${res.statusText}`);
+        }
+        const json = (await res.json());
+        if (json.error) {
+            throw new Error(`RPC error ${json.error.code}: ${json.error.message}`);
+        }
+        return json.result;
+    }
+}
+//# sourceMappingURL=rpc.js.map

package/dist/chain/rpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc.js","sourceRoot":"","sources":["../../src/chain/rpc.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,OAAO,SAAS;IACA;IAApB,YAAoB,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;IAAG,CAAC;IAEtC,KAAK,CAAC,IAAI,CAAI,MAAc,EAAE,MAAiB;QAC7C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE;YACnC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;SACzE,CAAC,CAAA;QAEF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAA;QACpE,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA8D,CAAA;QAC5F,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;QACxE,CAAC;QACD,OAAO,IAAI,CAAC,MAAW,CAAA;IACzB,CAAC;CACF"}

package/dist/chain/transaction.d.ts

@@ -0,0 +1,27 @@
+export interface ChainTransaction {
+    sender_pubkey: number[];
+    nonce: number;
+    payload: unknown;
+    signature: number[];
+}
+/**
+ * Build and sign a transaction for the Solidus chain.
+ */
+export declare function buildTransaction(privateKeyHex: string, nonce: number, payload: unknown): Promise<ChainTransaction>;
+/**
+ * Derive the Solidus address from a private key.
+ * Algorithm: BLAKE3(publicKey) -> take first 20 bytes -> base58 encode.
+ * Matches Rust Address::from_public_key.
+ */
+export declare function getAddressFromKey(privateKeyHex: string): Promise<string>;
+/**
+ * Derive the Solidus address from a raw public key (Uint8Array).
+ */
+export declare function addressFromPublicKey(publicKey: Uint8Array): string;
+export declare function hexToBytes(hex: string): Uint8Array;
+export declare function bytesToHex(bytes: Uint8Array): string;
+/**
+ * Convert a hex-encoded public key to a number[] array (for JSON payloads).
+ */
+export declare function hexToArray(hex: string): number[];
+//# sourceMappingURL=transaction.d.ts.map

package/dist/chain/transaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction.d.ts","sourceRoot":"","sources":["../../src/chain/transaction.ts"],"names":[],"mappings":"AAmBA,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,gBAAgB,CAAC,CAuB3B;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAI9E;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,UAAU,GAAG,MAAM,CAIlE;AAID,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAMlD;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAIpD;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAEhD"}

package/dist/chain/transaction.js

@@ -0,0 +1,78 @@
+/**
+ * Transaction building and Ed25519 signing for the Solidus chain.
+ *
+ * Matches the Rust chain's expected format:
+ *   - sender_pubkey: [u8; 32]  (JSON array of numbers)
+ *   - nonce: u64
+ *   - payload: TxPayload       (serde tagged enum, e.g. {"DidCreate": {...}})
+ *   - signature: [u8; 64]      (JSON array of numbers)
+ *
+ * signing_bytes = BLAKE3(sender_pubkey || nonce_le_bytes || serde_json(payload))
+ */
+import * as ed from '@noble/ed25519';
+import { sha512 } from '@noble/hashes/sha512';
+import { blake3 } from '@noble/hashes/blake3';
+import bs58 from 'bs58';
+// Configure ed25519 v2 to use sha512 for sync operations
+ed.etc.sha512Sync = (...m) => sha512(ed.etc.concatBytes(...m));
+/**
+ * Build and sign a transaction for the Solidus chain.
+ */
+export async function buildTransaction(privateKeyHex, nonce, payload) {
+    const privateKey = hexToBytes(privateKeyHex);
+    const publicKey = await ed.getPublicKeyAsync(privateKey);
+    // Build signing bytes: BLAKE3(pubkey || nonce_le || json(payload))
+    const nonceBytes = new Uint8Array(8);
+    new DataView(nonceBytes.buffer).setBigUint64(0, BigInt(nonce), true); // little-endian
+    const payloadBytes = new TextEncoder().encode(JSON.stringify(payload));
+    const combined = new Uint8Array(publicKey.length + nonceBytes.length + payloadBytes.length);
+    combined.set(publicKey, 0);
+    combined.set(nonceBytes, publicKey.length);
+    combined.set(payloadBytes, publicKey.length + nonceBytes.length);
+    const signingHash = blake3(combined);
+    const signature = await ed.signAsync(signingHash, privateKey);
+    return {
+        sender_pubkey: Array.from(publicKey),
+        nonce,
+        payload,
+        signature: Array.from(signature),
+    };
+}
+/**
+ * Derive the Solidus address from a private key.
+ * Algorithm: BLAKE3(publicKey) -> take first 20 bytes -> base58 encode.
+ * Matches Rust Address::from_public_key.
+ */
+export async function getAddressFromKey(privateKeyHex) {
+    const privateKey = hexToBytes(privateKeyHex);
+    const publicKey = await ed.getPublicKeyAsync(privateKey);
+    return addressFromPublicKey(publicKey);
+}
+/**
+ * Derive the Solidus address from a raw public key (Uint8Array).
+ */
+export function addressFromPublicKey(publicKey) {
+    const hash = blake3(publicKey);
+    const addressBytes = hash.slice(0, 20);
+    return bs58.encode(addressBytes);
+}
+// ---------- hex utilities ----------
+export function hexToBytes(hex) {
+    const bytes = new Uint8Array(hex.length / 2);
+    for (let i = 0; i < hex.length; i += 2) {
+        bytes[i / 2] = parseInt(hex.substring(i, i + 2), 16);
+    }
+    return bytes;
+}
+export function bytesToHex(bytes) {
+    return Array.from(bytes)
+        .map((b) => b.toString(16).padStart(2, '0'))
+        .join('');
+}
+/**
+ * Convert a hex-encoded public key to a number[] array (for JSON payloads).
+ */
+export function hexToArray(hex) {
+    return Array.from(hexToBytes(hex));
+}
+//# sourceMappingURL=transaction.js.map

package/dist/chain/transaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction.js","sourceRoot":"","sources":["../../src/chain/transaction.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAA;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,IAAI,MAAM,MAAM,CAAA;AAEvB,yDAAyD;AACzD,EAAE,CAAC,GAAG,CAAC,UAAU,GAAG,CAAC,GAAG,CAAe,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;AAS5E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,aAAqB,EACrB,KAAa,EACb,OAAgB;IAEhB,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,CAAA;IAC5C,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAA;IAExD,mEAAmE;IACnE,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAA;IACpC,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAA,CAAC,gBAAgB;IACrF,MAAM,YAAY,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAA;IAEtE,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;IAC3F,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAA;IAC1B,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,MAAM,CAAC,CAAA;IAC1C,QAAQ,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAA;IAEhE,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAA;IACpC,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,UAAU,CAAC,CAAA;IAE7D,OAAO;QACL,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;QACpC,KAAK;QACL,OAAO;QACP,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;KACjC,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,aAAqB;IAC3D,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,CAAA;IAC5C,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAA;IACxD,OAAO,oBAAoB,CAAC,SAAS,CAAC,CAAA;AACxC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAqB;IACxD,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,CAAA;IAC9B,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACtC,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;AAClC,CAAC;AAED,sCAAsC;AAEtC,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACtD,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAiB;IAC1C,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;SACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SAC3C,IAAI,CAAC,EAAE,CAAC,CAAA;AACb,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;AACpC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,31 @@
+import type { DID, DIDDocument, VerifiableCredential, IssueCredentialParams, VerificationResult, AuthResult } from '@solidus-network/types';
+export type { DID, DIDDocument, VerifiableCredential, IssueCredentialParams, VerificationResult, AuthResult, };
+export { runMigrations, closeConnection } from './stub/db.js';
+export { generateKeypair, decodePublicKey } from './stub/crypto.js';
+export type { ChainConfig } from './chain/index.js';
+export interface SolidusSDK {
+    did: {
+        create(publicKey: string): Promise<DID>;
+        resolve(did: string): Promise<DIDDocument | null>;
+        deactivate(did: string, signerKey: string): Promise<void>;
+    };
+    credentials: {
+        issue(params: IssueCredentialParams): Promise<VerifiableCredential>;
+        verify(vcId: string): Promise<VerificationResult>;
+        revoke(credentialId: string, issuerKey: string): Promise<void>;
+        query(subjectDid: string): Promise<VerifiableCredential[]>;
+    };
+    auth: {
+        createChallenge(domain: string): Promise<string>;
+        verifyPresentation(vp: string, challenge: string, domain: string): Promise<AuthResult>;
+    };
+}
+export interface SolidusConfig {
+    mode: 'stub' | 'testnet' | 'mainnet';
+    /** JSON-RPC URL for testnet/mainnet modes (default: http://127.0.0.1:9944) */
+    rpcUrl?: string;
+    /** Hex-encoded Ed25519 private key for testnet/mainnet modes */
+    signerPrivateKey?: string;
+}
+export declare function createSdk(config: SolidusConfig): SolidusSDK;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,GAAG,EAAE,WAAW,EAAE,oBAAoB,EACtC,qBAAqB,EAAE,kBAAkB,EAAE,UAAU,EACtD,MAAM,gBAAgB,CAAA;AAMvB,YAAY,EACV,GAAG,EAAE,WAAW,EAAE,oBAAoB,EACtC,qBAAqB,EAAE,kBAAkB,EAAE,UAAU,GACtD,CAAA;AACD,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC7D,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AACnE,YAAY,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAEnD,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE;QACH,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;QACvC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAA;QACjD,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;KAC1D,CAAA;IACD,WAAW,EAAE;QACX,KAAK,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;QACnE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;QACjD,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAC9D,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAA;KAC3D,CAAA;IACD,IAAI,EAAE;QACJ,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;QAChD,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;KACvF,CAAA;CACF;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAAA;IACpC,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,gEAAgE;IAChE,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAkCD,wBAAgB,SAAS,CAAC,MAAM,EAAE,aAAa,GAAG,UAAU,CAiB3D"}

package/dist/index.js

@@ -0,0 +1,52 @@
+import { randomUUID } from 'node:crypto';
+import { didCreate, didResolve, didDeactivate } from './stub/did.js';
+import { credentialsIssue, credentialsVerify, credentialsRevoke, credentialsQuery } from './stub/credentials.js';
+import { getSql } from './stub/db.js';
+import { createChainClient } from './chain/index.js';
+export { runMigrations, closeConnection } from './stub/db.js';
+export { generateKeypair, decodePublicKey } from './stub/crypto.js';
+function createStubSdk() {
+    return {
+        did: {
+            create: didCreate,
+            resolve: didResolve,
+            deactivate: didDeactivate,
+        },
+        credentials: {
+            issue: credentialsIssue,
+            verify: credentialsVerify,
+            revoke: credentialsRevoke,
+            query: credentialsQuery,
+        },
+        auth: {
+            async createChallenge(domain) {
+                const sql = getSql();
+                const challenge = randomUUID();
+                await sql `INSERT INTO stub_challenges (challenge, domain) VALUES (${challenge}, ${domain})`;
+                return challenge;
+            },
+            async verifyPresentation(_vp, _challenge, _domain) {
+                // Real VP verification ships with Identity (Phase 2)
+                return { valid: true, claims: {} };
+            },
+        },
+    };
+}
+export function createSdk(config) {
+    const mode = config.mode ?? (process.env['SOLIDUS_SDK_MODE'] ?? 'stub');
+    switch (mode) {
+        case 'testnet':
+        case 'mainnet': {
+            const rpcUrl = config.rpcUrl ?? process.env['SOLIDUS_RPC_URL'] ?? 'http://127.0.0.1:9944';
+            const signerKey = config.signerPrivateKey ?? process.env['SOLIDUS_SIGNER_KEY'] ?? '';
+            if (!signerKey) {
+                throw new Error('signerPrivateKey or SOLIDUS_SIGNER_KEY env var required for chain mode');
+            }
+            return createChainClient({ rpcUrl, signerPrivateKey: signerKey, network: mode });
+        }
+        case 'stub':
+        default:
+            return createStubSdk();
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAKxC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AACpE,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAChH,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AACrC,OAAO,EAAE,iBAAiB,EAAoB,MAAM,kBAAkB,CAAA;AAMtE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAC7D,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AA6BnE,SAAS,aAAa;IACpB,OAAO;QACL,GAAG,EAAE;YACH,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,UAAU;YACnB,UAAU,EAAE,aAAa;SAC1B;QACD,WAAW,EAAE;YACX,KAAK,EAAE,gBAAgB;YACvB,MAAM,EAAE,iBAAiB;YACzB,MAAM,EAAE,iBAAiB;YACzB,KAAK,EAAE,gBAAgB;SACxB;QACD,IAAI,EAAE;YACJ,KAAK,CAAC,eAAe,CAAC,MAAc;gBAClC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;gBACpB,MAAM,SAAS,GAAG,UAAU,EAAE,CAAA;gBAC9B,MAAM,GAAG,CAAA,2DAA2D,SAAS,KAAK,MAAM,GAAG,CAAA;gBAC3F,OAAO,SAAS,CAAA;YAClB,CAAC;YACD,KAAK,CAAC,kBAAkB,CACtB,GAAW,EACX,UAAkB,EAClB,OAAe;gBAEf,qDAAqD;gBACrD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;YACpC,CAAC;SACF;KACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAqB;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,CAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAgD,IAAI,MAAM,CAAC,CAAA;IAEvH,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,SAAS,CAAC;QACf,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,uBAAuB,CAAA;YACzF,MAAM,SAAS,GAAG,MAAM,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAA;YACpF,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAA;YAC3F,CAAC;YACD,OAAO,iBAAiB,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;QAClF,CAAC;QACD,KAAK,MAAM,CAAC;QACZ;YACE,OAAO,aAAa,EAAE,CAAA;IAC1B,CAAC;AACH,CAAC"}

package/dist/stub/credentials.d.ts

@@ -0,0 +1,6 @@
+import type { VerifiableCredential, IssueCredentialParams, VerificationResult } from '@solidus-network/types';
+export declare function credentialsIssue(params: IssueCredentialParams): Promise<VerifiableCredential>;
+export declare function credentialsVerify(vcId: string): Promise<VerificationResult>;
+export declare function credentialsRevoke(credentialId: string, _issuerKey: string): Promise<void>;
+export declare function credentialsQuery(subjectDid: string): Promise<VerifiableCredential[]>;
+//# sourceMappingURL=credentials.d.ts.map

package/dist/stub/credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../src/stub/credentials.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AAqDrG,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAsCnG;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAuCjF;AAED,wBAAsB,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAU/F;AAED,wBAAsB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAQ1F"}

package/dist/stub/credentials.js

@@ -0,0 +1,123 @@
+import { randomUUID } from 'node:crypto';
+import { getSql } from './db.js';
+import { sign, verify as cryptoVerify } from './crypto.js';
+function rowToVC(row) {
+    return {
+        '@context': ['https://www.w3.org/2018/credentials/v1'],
+        id: row.credential_id,
+        type: row.type,
+        issuer: row.issuer_did,
+        issuanceDate: row.issued_at.toISOString(),
+        ...(row.expires_at && { expirationDate: row.expires_at.toISOString() }),
+        credentialSubject: { id: row.subject_did, ...row.claims },
+        proof: {
+            type: 'Ed25519Signature2020',
+            created: row.issued_at.toISOString(),
+            verificationMethod: `${row.issuer_did}#key-1`,
+            proofPurpose: 'assertionMethod',
+            proofValue: row.proof_value,
+        },
+    };
+}
+function buildPayload(params) {
+    return new TextEncoder().encode(JSON.stringify({
+        id: params.credentialId,
+        subject: params.subjectDid,
+        issuer: params.issuerDid,
+        claims: params.claims,
+        issuedAt: params.issuedAt,
+    }));
+}
+export async function credentialsIssue(params) {
+    const sql = getSql();
+    const credentialId = `vc:solidus:stub:${randomUUID()}`;
+    const now = new Date();
+    const expiresAt = params.expiresInDays
+        ? new Date(now.getTime() + params.expiresInDays * 86_400_000)
+        : null;
+    const payload = buildPayload({
+        credentialId,
+        subjectDid: params.subjectDid,
+        issuerDid: params.issuerDid,
+        claims: params.claims,
+        issuedAt: now.toISOString(),
+    });
+    const proofValue = await sign(payload, params.issuerPrivateKey);
+    await sql `
+    INSERT INTO stub_credentials
+      (credential_id, subject_did, issuer_did, type, claims, proof_value, issued_at, expires_at)
+    VALUES (
+      ${credentialId}, ${params.subjectDid}, ${params.issuerDid},
+      ${sql.array(params.type)}, ${sql.json(params.claims)},
+      ${proofValue}, ${now}, ${expiresAt}
+    )
+  `;
+    return rowToVC({
+        credential_id: credentialId,
+        subject_did: params.subjectDid,
+        issuer_did: params.issuerDid,
+        type: params.type,
+        claims: params.claims,
+        proof_value: proofValue,
+        issued_at: now,
+        expires_at: expiresAt,
+        revoked: false,
+    });
+}
+export async function credentialsVerify(vcId) {
+    const sql = getSql();
+    const rows = await sql `
+    SELECT * FROM stub_credentials WHERE credential_id = ${vcId}
+  `;
+    if (rows.length === 0) {
+        return {
+            valid: false,
+            error: 'Credential not found',
+            checks: { signature: false, expiry: false, revocation: false },
+        };
+    }
+    const row = rows[0];
+    const notRevoked = !row.revoked;
+    const notExpired = !row.expires_at || row.expires_at > new Date();
+    const issuerRows = await sql `
+    SELECT public_key FROM stub_dids WHERE did = ${row.issuer_did}
+  `;
+    let sigValid = false;
+    if (issuerRows.length > 0) {
+        const payload = buildPayload({
+            credentialId: row.credential_id,
+            subjectDid: row.subject_did,
+            issuerDid: row.issuer_did,
+            claims: row.claims,
+            issuedAt: row.issued_at.toISOString(),
+        });
+        sigValid = await cryptoVerify(payload, row.proof_value, issuerRows[0].public_key);
+    }
+    const valid = sigValid && notRevoked && notExpired;
+    return {
+        valid,
+        credentialId: vcId,
+        checks: { signature: sigValid, expiry: notExpired, revocation: notRevoked },
+    };
+}
+export async function credentialsRevoke(credentialId, _issuerKey) {
+    const sql = getSql();
+    await sql `
+    UPDATE stub_credentials SET revoked = true, revoked_at = now()
+    WHERE credential_id = ${credentialId}
+  `;
+    await sql `
+    INSERT INTO stub_revocations (credential_id) VALUES (${credentialId})
+    ON CONFLICT DO NOTHING
+  `;
+}
+export async function credentialsQuery(subjectDid) {
+    const sql = getSql();
+    const rows = await sql `
+    SELECT * FROM stub_credentials
+    WHERE subject_did = ${subjectDid} AND revoked = false
+    ORDER BY issued_at DESC
+  `;
+    return rows.map(rowToVC);
+}
+//# sourceMappingURL=credentials.js.map

package/dist/stub/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/stub/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAGxC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,YAAY,EAAE,MAAM,aAAa,CAAA;AAc1D,SAAS,OAAO,CAAC,GAAkB;IACjC,OAAO;QACL,UAAU,EAAE,CAAC,wCAAwC,CAAC;QACtD,EAAE,EAAE,GAAG,CAAC,aAAa;QACrB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,MAAM,EAAE,GAAG,CAAC,UAAU;QACtB,YAAY,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;QACzC,GAAG,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,cAAc,EAAE,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;QACvE,iBAAiB,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE;QACzD,KAAK,EAAE;YACL,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;YACpC,kBAAkB,EAAE,GAAG,GAAG,CAAC,UAAU,QAAQ;YAC7C,YAAY,EAAE,iBAAiB;YAC/B,UAAU,EAAE,GAAG,CAAC,WAAW;SAC5B;KACF,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,MAMrB;IACC,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAC7B,IAAI,CAAC,SAAS,CAAC;QACb,EAAE,EAAE,MAAM,CAAC,YAAY;QACvB,OAAO,EAAE,MAAM,CAAC,UAAU;QAC1B,MAAM,EAAE,MAAM,CAAC,SAAS;QACxB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC,CACH,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAA6B;IAClE,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;IACpB,MAAM,YAAY,GAAG,mBAAmB,UAAU,EAAE,EAAE,CAAA;IACtD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;IACtB,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa;QACpC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,aAAa,GAAG,UAAU,CAAC;QAC7D,CAAC,CAAC,IAAI,CAAA;IAER,MAAM,OAAO,GAAG,YAAY,CAAC;QAC3B,YAAY;QACZ,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,GAAG,CAAC,WAAW,EAAE;KAC5B,CAAC,CAAA;IACF,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAA;IAE/D,MAAM,GAAG,CAAA;;;;QAIH,YAAY,KAAK,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC,SAAS;QACvD,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAA4B,CAAC;QACxE,UAAU,KAAK,GAAG,KAAK,SAAS;;GAErC,CAAA;IAED,OAAO,OAAO,CAAC;QACb,aAAa,EAAE,YAAY;QAC3B,WAAW,EAAE,MAAM,CAAC,UAAU;QAC9B,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,WAAW,EAAE,UAAU;QACvB,SAAS,EAAE,GAAG;QACd,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE,KAAK;KACf,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAClD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;IACpB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAiB;2DACkB,IAAI;GAC5D,CAAA;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,sBAAsB;YAC7B,MAAM,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE;SAC/D,CAAA;IACH,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAE,CAAA;IAEpB,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,OAAO,CAAA;IAC/B,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAA;IAEjE,MAAM,UAAU,GAAG,MAAM,GAAG,CAA+B;mDACV,GAAG,CAAC,UAAU;GAC9D,CAAA;IAED,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,YAAY,CAAC;YAC3B,YAAY,EAAE,GAAG,CAAC,aAAa;YAC/B,UAAU,EAAE,GAAG,CAAC,WAAW;YAC3B,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;SACtC,CAAC,CAAA;QACF,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC,CAAA;IACpF,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,IAAI,UAAU,IAAI,UAAU,CAAA;IAClD,OAAO;QACL,KAAK;QACL,YAAY,EAAE,IAAI;QAClB,MAAM,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE;KAC5E,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,YAAoB,EAAE,UAAkB;IAC9E,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;IACpB,MAAM,GAAG,CAAA;;4BAEiB,YAAY;GACrC,CAAA;IACD,MAAM,GAAG,CAAA;2DACgD,YAAY;;GAEpE,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,UAAkB;IACvD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAA;IACpB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAiB;;0BAEf,UAAU;;GAEjC,CAAA;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;AAC1B,CAAC"}

package/dist/stub/crypto.d.ts

@@ -0,0 +1,10 @@
+export declare function generateKeypair(): Promise<{
+    privateKey: string;
+    publicKey: string;
+}>;
+export declare function sign(message: Uint8Array, privateKeyHex: string): Promise<string>;
+export declare function verify(message: Uint8Array, signatureBase64url: string, publicKeyHex: string): Promise<boolean>;
+/** Encode public key as multibase base58btc (W3C Ed25519VerificationKey2020) */
+export declare function encodePublicKey(publicKeyHex: string): string;
+export declare function decodePublicKey(multibase: string): string;
+//# sourceMappingURL=crypto.d.ts.map

package/dist/stub/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../src/stub/crypto.ts"],"names":[],"mappings":"AAOA,wBAAsB,eAAe,IAAI,OAAO,CAAC;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAO1F;AAED,wBAAsB,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAItF;AAED,wBAAsB,MAAM,CAC1B,OAAO,EAAE,UAAU,EACnB,kBAAkB,EAAE,MAAM,EAC1B,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,OAAO,CAAC,CAQlB;AAED,gFAAgF;AAChF,wBAAgB,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAG5D;AAED,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAGzD"}

package/dist/stub/crypto.js

@@ -0,0 +1,38 @@
+import * as ed from '@noble/ed25519';
+import { sha512 } from '@noble/hashes/sha512';
+import bs58 from 'bs58';
+// @noble/ed25519 v2 requires sha512 to be configured for sync operations
+ed.etc.sha512Sync = (...m) => sha512(ed.etc.concatBytes(...m));
+export async function generateKeypair() {
+    const privateKeyBytes = ed.utils.randomPrivateKey();
+    const publicKeyBytes = await ed.getPublicKeyAsync(privateKeyBytes);
+    return {
+        privateKey: Buffer.from(privateKeyBytes).toString('hex'),
+        publicKey: Buffer.from(publicKeyBytes).toString('hex'),
+    };
+}
+export async function sign(message, privateKeyHex) {
+    const privateKeyBytes = Buffer.from(privateKeyHex, 'hex');
+    const sig = await ed.signAsync(message, privateKeyBytes);
+    return Buffer.from(sig).toString('base64url');
+}
+export async function verify(message, signatureBase64url, publicKeyHex) {
+    try {
+        const sig = Buffer.from(signatureBase64url, 'base64url');
+        const pub = Buffer.from(publicKeyHex, 'hex');
+        return await ed.verifyAsync(sig, message, pub);
+    }
+    catch {
+        return false;
+    }
+}
+/** Encode public key as multibase base58btc (W3C Ed25519VerificationKey2020) */
+export function encodePublicKey(publicKeyHex) {
+    const bytes = Buffer.from(publicKeyHex, 'hex');
+    return 'z' + bs58.encode(bytes);
+}
+export function decodePublicKey(multibase) {
+    const bytes = bs58.decode(multibase.slice(1));
+    return Buffer.from(bytes).toString('hex');
+}
+//# sourceMappingURL=crypto.js.map

package/dist/stub/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/stub/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAA;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,IAAI,MAAM,MAAM,CAAA;AAEvB,yEAAyE;AACzE,EAAE,CAAC,GAAG,CAAC,UAAU,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;AAE9D,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,eAAe,GAAG,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAA;IACnD,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAA;IAClE,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QACxD,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;KACvD,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,OAAmB,EAAE,aAAqB;IACnE,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,CAAA;IACzD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,eAAe,CAAC,CAAA;IACxD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,OAAmB,EACnB,kBAA0B,EAC1B,YAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,WAAW,CAAC,CAAA;QACxD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;QAC5C,OAAO,MAAM,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAA;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,eAAe,CAAC,YAAoB;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;IAC9C,OAAO,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACjC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,SAAiB;IAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7C,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AAC3C,CAAC"}

package/dist/stub/db.d.ts

@@ -0,0 +1,5 @@
+import postgres from 'postgres';
+export declare function getSql(): postgres.Sql;
+export declare function runMigrations(): Promise<void>;
+export declare function closeConnection(): Promise<void>;
+//# sourceMappingURL=db.d.ts.map

package/dist/stub/db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../../src/stub/db.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,UAAU,CAAA;AAS/B,wBAAgB,MAAM,IAAI,QAAQ,CAAC,GAAG,CAOrC;AAED,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAKnD;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAKrD"}