@sphereon/ssi-sdk-ext.did-utils 0.10.2-next.20

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this fragment.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [2021] [Sphereon BV]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,43 @@
+<!--suppress HtmlDeprecatedAttribute -->
+<h1 align="center">
+  <br>
+  <a href="https://www.sphereon.com"><img src="https://sphereon.com/content/themes/sphereon/assets/img/logo.svg" alt="Sphereon" width="400"></a>
+  <br>SSI SDK DID Utils 
+  <br>
+</h1>
+
+# did-utils
+
+A SSI SDK plugin with different DID functions
+
+### Installation
+
+```shell
+yarn add @sphereon/ssi-sdk-ext.did-utils
+```
+
+### Build
+
+```shell
+yarn build
+```
+
+### Test
+
+The test command runs:
+
+- `prettier`
+- `jest`
+- `coverage`
+
+You can also run only a single section of these tests, using for example `yarn test:unit`.
+
+```shell
+yarn test
+```
+
+### Utility scripts
+
+There are other utility scripts that help with development.
+
+- `yarn fix` - runs `eslint --fix` as well as `prettier` to fix code style.

package/dist/did-functions.d.ts

@@ -0,0 +1,58 @@
+import { DIDDocument, DIDDocumentSection, DIDResolutionResult, IAgentContext, IDIDManager, IIdentifier, IKey, IResolver } from '@veramo/core';
+import { _ExtendedIKey, _ExtendedVerificationMethod, _NormalizedVerificationMethod } from '@veramo/utils';
+import { DIDResolutionOptions, Resolvable } from 'did-resolver';
+import { IDIDOptions, IIdentifierOpts } from './types';
+export declare const getFirstKeyWithRelation: (identifier: IIdentifier, context: IAgentContext<IResolver>, vmRelationship?: DIDDocumentSection, errorOnNotFound?: boolean) => Promise<_ExtendedIKey | undefined>;
+/**
+ * Dereferences keys from DID document and normalizes them for easy comparison.
+ *
+ * When dereferencing keyAgreement keys, only Ed25519 and X25519 curves are supported.
+ * Other key types are omitted from the result and Ed25519 keys are converted to X25519
+ *
+ * @returns a Promise that resolves to the list of dereferenced keys.
+ *
+ * @beta This API may change without a BREAKING CHANGE notice.
+ */
+export declare function dereferenceDidKeysWithJwkSupport(didDocument: DIDDocument, section: DIDDocumentSection | undefined, context: IAgentContext<IResolver>): Promise<_NormalizedVerificationMethod[]>;
+/**
+ * Converts the publicKey of a VerificationMethod to hex encoding (publicKeyHex)
+ *
+ * @param pk - the VerificationMethod to be converted
+ * @param convert - when this flag is set to true, Ed25519 keys are converted to their X25519 pairs
+ * @returns the hex encoding of the public key
+ *
+ * @beta This API may change without a BREAKING CHANGE notice.
+ */
+export declare function extractPublicKeyHexWithJwkSupport(pk: _ExtendedVerificationMethod, convert?: boolean): string;
+/**
+ * Maps the keys of a locally managed {@link @veramo/core#IIdentifier | IIdentifier} to the corresponding
+ * {@link did-resolver#VerificationMethod | VerificationMethod} entries from the DID document.
+ *
+ * @param identifier - the identifier to be mapped
+ * @param section - the section of the DID document to be mapped (see
+ *   {@link https://www.w3.org/TR/did-core/#verification-relationships | verification relationships}), but can also be
+ *   `verificationMethod` to map all the keys.
+ * @param context - the veramo agent context, which must contain a {@link @veramo/core#IResolver | IResolver}
+ *   implementation that can resolve the DID document of the identifier.
+ *
+ * @returns an array of mapped keys. The corresponding verification method is added to the `meta.verificationMethod`
+ *   property of the key.
+ *
+ * @beta This API may change without a BREAKING CHANGE notice.
+ */
+export declare function mapIdentifierKeysToDocWithJwkSupport(identifier: IIdentifier, section: DIDDocumentSection | undefined, context: IAgentContext<IResolver>, didDocument?: DIDDocument): Promise<_ExtendedIKey[]>;
+export declare function getAgentDIDMethods(context: IAgentContext<IDIDManager>): Promise<string[]>;
+export declare function getIdentifier(identifierOpts: IIdentifierOpts, context: IAgentContext<IDIDManager>): Promise<IIdentifier>;
+export declare function getDID(identifierOpts: IIdentifierOpts): string;
+export declare function toDID(identifier: string | IIdentifier | Partial<IIdentifier>): string;
+export declare function toDIDs(identifiers?: (string | IIdentifier | Partial<IIdentifier>)[]): string[];
+export declare function getKey(identifier: IIdentifier, verificationMethodSection: DIDDocumentSection | undefined, context: IAgentContext<IResolver>, keyId?: string): Promise<IKey>;
+export declare function determineKid(key: IKey, idOpts: IIdentifierOpts): string;
+export declare function getSupportedDIDMethods(didOpts: IDIDOptions, context: IAgentContext<IDIDManager>): Promise<string[]>;
+export declare class AgentDIDResolver implements Resolvable {
+    private readonly context;
+    private readonly uniresolverFallback;
+    constructor(context: IAgentContext<IResolver>, uniresolverFallback?: boolean);
+    resolve(didUrl: string, options?: DIDResolutionOptions): Promise<DIDResolutionResult>;
+}
+//# sourceMappingURL=did-functions.d.ts.map

package/dist/did-functions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"did-functions.d.ts","sourceRoot":"","sources":["../src/did-functions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAC7I,OAAO,EACL,aAAa,EACb,2BAA2B,EAC3B,6BAA6B,EAK9B,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAsB,MAAM,cAAc,CAAA;AAInF,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAGtD,eAAO,MAAM,uBAAuB,eACtB,WAAW,WACd,cAAc,SAAS,CAAC,mBAChB,kBAAkB,oBACjB,OAAO,KACxB,QAAQ,aAAa,GAAG,SAAS,CAUnC,CAAA;AAGD;;;;;;;;;GASG;AACH,wBAAsB,gCAAgC,CACpD,WAAW,EAAE,WAAW,EACxB,OAAO,gCAAqC,EAC5C,OAAO,EAAE,aAAa,CAAC,SAAS,CAAC,GAChC,OAAO,CAAC,6BAA6B,EAAE,CAAC,CAkC1C;AAED;;;;;;;;GAQG;AACH,wBAAgB,iCAAiC,CAAC,EAAE,EAAE,2BAA2B,EAAE,OAAO,UAAQ,GAAG,MAAM,CAkB1G;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,oCAAoC,CACxD,UAAU,EAAE,WAAW,EACvB,OAAO,gCAAqC,EAC5C,OAAO,EAAE,aAAa,CAAC,SAAS,CAAC,EACjC,WAAW,CAAC,EAAE,WAAW,GACxB,OAAO,CAAC,aAAa,EAAE,CAAC,CA0B1B;AAED,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,aAAa,CAAC,WAAW,CAAC,qBAE3E;AAED,wBAAsB,aAAa,CAAC,cAAc,EAAE,eAAe,EAAE,OAAO,EAAE,aAAa,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAO9H;AAED,wBAAgB,MAAM,CAAC,cAAc,EAAE,eAAe,GAAG,MAAM,CAO9D;AAED,wBAAgB,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,MAAM,CAQrF;AAED,wBAAgB,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,MAAM,GAAG,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAK9F;AAED,wBAAsB,MAAM,CAC1B,UAAU,EAAE,WAAW,EACvB,yBAAyB,gCAAuC,EAChE,OAAO,EAAE,aAAa,CAAC,SAAS,CAAC,EACjC,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAYf;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,GAAG,MAAM,CAEvE;AAED,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,CAAC,WAAW,CAAC,qBAErG;AAED,qBAAa,gBAAiB,YAAW,UAAU;IACjD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0B;IAClD,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAS;gBAEjC,OAAO,EAAE,aAAa,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC,EAAE,OAAO;IAKtE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC;CAU5F"}

package/dist/did-functions.js

@@ -0,0 +1,282 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __rest = (this && this.__rest) || function (s, e) {
+    var t = {};
+    for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)
+        t[p] = s[p];
+    if (s != null && typeof Object.getOwnPropertySymbols === "function")
+        for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {
+            if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))
+                t[p[i]] = s[p[i]];
+        }
+    return t;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentDIDResolver = exports.getSupportedDIDMethods = exports.determineKid = exports.getKey = exports.toDIDs = exports.toDID = exports.getDID = exports.getIdentifier = exports.getAgentDIDMethods = exports.mapIdentifierKeysToDocWithJwkSupport = exports.extractPublicKeyHexWithJwkSupport = exports.dereferenceDidKeysWithJwkSupport = exports.getFirstKeyWithRelation = void 0;
+const did_uni_client_1 = require("@sphereon/did-uni-client");
+const utils_1 = require("@veramo/utils");
+// @ts-ignore
+const elliptic_1 = __importDefault(require("elliptic"));
+const u8a = __importStar(require("uint8arrays"));
+const ssi_sdk_ext_key_utils_1 = require("@sphereon/ssi-sdk-ext.key-utils");
+const getFirstKeyWithRelation = (identifier, context, vmRelationship, errorOnNotFound) => __awaiter(void 0, void 0, void 0, function* () {
+    const section = vmRelationship || 'verificationMethod'; // search all VMs in case no relationship is provided
+    const matchedKeys = yield mapIdentifierKeysToDocWithJwkSupport(identifier, section, context);
+    if (Array.isArray(matchedKeys) && matchedKeys.length > 0) {
+        return matchedKeys[0];
+    }
+    if (errorOnNotFound === true) {
+        throw new Error(`Could not find key with relationship ${section} in DID document for ${identifier.did}`);
+    }
+    return undefined;
+});
+exports.getFirstKeyWithRelation = getFirstKeyWithRelation;
+//TODO: Move to ssi-sdk/core and create PR upstream
+/**
+ * Dereferences keys from DID document and normalizes them for easy comparison.
+ *
+ * When dereferencing keyAgreement keys, only Ed25519 and X25519 curves are supported.
+ * Other key types are omitted from the result and Ed25519 keys are converted to X25519
+ *
+ * @returns a Promise that resolves to the list of dereferenced keys.
+ *
+ * @beta This API may change without a BREAKING CHANGE notice.
+ */
+function dereferenceDidKeysWithJwkSupport(didDocument, section = 'keyAgreement', context) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const convert = section === 'keyAgreement';
+        if (section === 'service') {
+            return [];
+        }
+        return (yield Promise.all((didDocument[section] || []).map((key) => __awaiter(this, void 0, void 0, function* () {
+            if (typeof key === 'string') {
+                try {
+                    return (yield context.agent.getDIDComponentById({
+                        didDocument,
+                        didUrl: key,
+                        section,
+                    }));
+                }
+                catch (e) {
+                    return null;
+                }
+            }
+            else {
+                return key;
+            }
+        }))))
+            .filter(utils_1.isDefined)
+            .map((key) => {
+            const hexKey = extractPublicKeyHexWithJwkSupport(key, convert);
+            const { publicKeyHex, publicKeyBase58, publicKeyBase64, publicKeyJwk } = key, keyProps = __rest(key, ["publicKeyHex", "publicKeyBase58", "publicKeyBase64", "publicKeyJwk"]);
+            const newKey = Object.assign(Object.assign({}, keyProps), { publicKeyHex: hexKey });
+            if (convert && 'Ed25519VerificationKey2018' === newKey.type) {
+                newKey.type = 'X25519KeyAgreementKey2019';
+            }
+            return newKey;
+        });
+    });
+}
+exports.dereferenceDidKeysWithJwkSupport = dereferenceDidKeysWithJwkSupport;
+/**
+ * Converts the publicKey of a VerificationMethod to hex encoding (publicKeyHex)
+ *
+ * @param pk - the VerificationMethod to be converted
+ * @param convert - when this flag is set to true, Ed25519 keys are converted to their X25519 pairs
+ * @returns the hex encoding of the public key
+ *
+ * @beta This API may change without a BREAKING CHANGE notice.
+ */
+function extractPublicKeyHexWithJwkSupport(pk, convert = false) {
+    if (pk.publicKeyJwk) {
+        if (pk.publicKeyJwk.kty === 'EC') {
+            const secp256 = new elliptic_1.default.ec(pk.publicKeyJwk.crv === 'secp256k1' ? 'secp256k1' : 'p256');
+            const prefix = pk.publicKeyJwk.crv === 'secp256k1' ? '04' : '03';
+            const x = u8a.fromString(pk.publicKeyJwk.x, 'base64url');
+            const y = u8a.fromString(pk.publicKeyJwk.y, 'base64url');
+            const hex = `${prefix}${u8a.toString(x, 'base16')}${u8a.toString(y, 'base16')}`;
+            // We return directly as we don't want to convert the result back into Uint8Array and then convert again to hex as the elliptic lib already returns hex strings
+            return secp256.keyFromPublic(hex, 'hex').getPublic(true, 'hex');
+        }
+        else if (pk.publicKeyJwk.crv === 'Ed25519') {
+            return u8a.toString(u8a.fromString(pk.publicKeyJwk.x, 'base64url'), 'base16');
+        }
+        else if (pk.publicKeyJwk.kty === 'RSA') {
+            return (0, ssi_sdk_ext_key_utils_1.hexKeyFromPEMBasedJwk)(pk.publicKeyJwk, 'public');
+        }
+    }
+    // delegate the other types to the original Veramo function
+    return (0, utils_1.extractPublicKeyHex)(pk, convert);
+}
+exports.extractPublicKeyHexWithJwkSupport = extractPublicKeyHexWithJwkSupport;
+/**
+ * Maps the keys of a locally managed {@link @veramo/core#IIdentifier | IIdentifier} to the corresponding
+ * {@link did-resolver#VerificationMethod | VerificationMethod} entries from the DID document.
+ *
+ * @param identifier - the identifier to be mapped
+ * @param section - the section of the DID document to be mapped (see
+ *   {@link https://www.w3.org/TR/did-core/#verification-relationships | verification relationships}), but can also be
+ *   `verificationMethod` to map all the keys.
+ * @param context - the veramo agent context, which must contain a {@link @veramo/core#IResolver | IResolver}
+ *   implementation that can resolve the DID document of the identifier.
+ *
+ * @returns an array of mapped keys. The corresponding verification method is added to the `meta.verificationMethod`
+ *   property of the key.
+ *
+ * @beta This API may change without a BREAKING CHANGE notice.
+ */
+function mapIdentifierKeysToDocWithJwkSupport(identifier, section = 'keyAgreement', context, didDocument) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const rsaDidWeb = identifier.keys && identifier.keys.length > 0 && identifier.keys[0].type === 'RSA' && didDocument;
+        // We skip mapping in case the identifier is RSA and a did document is supplied.
+        const keys = rsaDidWeb ? [] : yield (0, utils_1.mapIdentifierKeysToDoc)(identifier, section, context);
+        const didDoc = didDocument ? didDocument : yield (0, utils_1.resolveDidOrThrow)(identifier.did, context);
+        // dereference all key agreement keys from DID document and normalize
+        const documentKeys = yield dereferenceDidKeysWithJwkSupport(didDoc, section, context);
+        const localKeys = identifier.keys.filter(utils_1.isDefined);
+        // finally map the didDocument keys to the identifier keys by comparing `publicKeyHex`
+        const extendedKeys = documentKeys
+            .map((verificationMethod) => {
+            /*if (verificationMethod.type !== 'JsonWebKey2020') {
+              return null
+            }*/
+            const localKey = localKeys.find((localKey) => localKey.publicKeyHex === verificationMethod.publicKeyHex);
+            if (localKey) {
+                const { meta } = localKey, localProps = __rest(localKey, ["meta"]);
+                return Object.assign(Object.assign({}, localProps), { meta: Object.assign(Object.assign({}, meta), { verificationMethod }) });
+            }
+            else {
+                return null;
+            }
+        })
+            .filter(utils_1.isDefined);
+        return keys.concat(extendedKeys);
+    });
+}
+exports.mapIdentifierKeysToDocWithJwkSupport = mapIdentifierKeysToDocWithJwkSupport;
+function getAgentDIDMethods(context) {
+    return __awaiter(this, void 0, void 0, function* () {
+        return (yield context.agent.didManagerGetProviders()).map((provider) => provider.toLowerCase().replace('did:', ''));
+    });
+}
+exports.getAgentDIDMethods = getAgentDIDMethods;
+function getIdentifier(identifierOpts, context) {
+    return __awaiter(this, void 0, void 0, function* () {
+        if (typeof identifierOpts.identifier === 'string') {
+            return context.agent.didManagerGet({ did: identifierOpts.identifier });
+        }
+        else if (typeof identifierOpts.identifier === 'object') {
+            return identifierOpts.identifier;
+        }
+        throw Error(`Cannot get agent identifier value from options`);
+    });
+}
+exports.getIdentifier = getIdentifier;
+function getDID(identifierOpts) {
+    if (typeof identifierOpts.identifier === 'string') {
+        return identifierOpts.identifier;
+    }
+    else if (typeof identifierOpts.identifier === 'object') {
+        return identifierOpts.identifier.did;
+    }
+    throw Error(`Cannot get DID from identifier value`);
+}
+exports.getDID = getDID;
+function toDID(identifier) {
+    if (typeof identifier === 'string') {
+        return identifier;
+    }
+    if (identifier.did) {
+        return identifier.did;
+    }
+    throw Error(`No DID value present in identifier`);
+}
+exports.toDID = toDID;
+function toDIDs(identifiers) {
+    if (!identifiers) {
+        return [];
+    }
+    return identifiers.map(toDID);
+}
+exports.toDIDs = toDIDs;
+function getKey(identifier, verificationMethodSection = 'authentication', context, keyId) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const keys = yield mapIdentifierKeysToDocWithJwkSupport(identifier, verificationMethodSection, context);
+        if (!keys || keys.length === 0) {
+            throw new Error(`No keys found for verificationMethodSection: ${verificationMethodSection} and did ${identifier.did}`);
+        }
+        const identifierKey = keyId ? keys.find((key) => key.kid === keyId || key.meta.verificationMethod.id === keyId) : keys[0];
+        if (!identifierKey) {
+            throw new Error(`No matching verificationMethodSection key found for keyId: ${keyId}`);
+        }
+        return identifierKey;
+    });
+}
+exports.getKey = getKey;
+function determineKid(key, idOpts) {
+    var _a, _b, _c;
+    return (_c = (_b = (_a = key.meta) === null || _a === void 0 ? void 0 : _a.verificationMethod.id) !== null && _b !== void 0 ? _b : idOpts.kid) !== null && _c !== void 0 ? _c : key.kid;
+}
+exports.determineKid = determineKid;
+function getSupportedDIDMethods(didOpts, context) {
+    var _a;
+    return __awaiter(this, void 0, void 0, function* () {
+        return (_a = didOpts.supportedDIDMethods) !== null && _a !== void 0 ? _a : (yield getAgentDIDMethods(context));
+    });
+}
+exports.getSupportedDIDMethods = getSupportedDIDMethods;
+class AgentDIDResolver {
+    constructor(context, uniresolverFallback) {
+        this.context = context;
+        this.uniresolverFallback = uniresolverFallback === true;
+    }
+    resolve(didUrl, options) {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                return this.context.agent.resolveDid({ didUrl, options });
+            }
+            catch (error) {
+                if (this.uniresolverFallback) {
+                    return new did_uni_client_1.UniResolver().resolve(didUrl, options);
+                }
+                throw error;
+            }
+        });
+    }
+}
+exports.AgentDIDResolver = AgentDIDResolver;
+//# sourceMappingURL=did-functions.js.map

package/dist/did-functions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"did-functions.js","sourceRoot":"","sources":["../src/did-functions.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,6DAAsD;AAEtD,yCAQsB;AAEtB,aAAa;AACb,wDAA+B;AAC/B,iDAAkC;AAElC,2EAAuE;AAEhE,MAAM,uBAAuB,GAAG,CACrC,UAAuB,EACvB,OAAiC,EACjC,cAAmC,EACnC,eAAyB,EACW,EAAE;IACtC,MAAM,OAAO,GAAG,cAAc,IAAI,oBAAoB,CAAA,CAAC,qDAAqD;IAC5G,MAAM,WAAW,GAAG,MAAM,oCAAoC,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;IAC5F,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE;QACxD,OAAO,WAAW,CAAC,CAAC,CAAC,CAAA;KACtB;IACD,IAAI,eAAe,KAAK,IAAI,EAAE;QAC5B,MAAM,IAAI,KAAK,CAAC,wCAAwC,OAAO,wBAAwB,UAAU,CAAC,GAAG,EAAE,CAAC,CAAA;KACzG;IACD,OAAO,SAAS,CAAA;AAClB,CAAC,CAAA,CAAA;AAfY,QAAA,uBAAuB,2BAenC;AAED,mDAAmD;AACnD;;;;;;;;;GASG;AACH,SAAsB,gCAAgC,CACpD,WAAwB,EACxB,UAA8B,cAAc,EAC5C,OAAiC;;QAEjC,MAAM,OAAO,GAAG,OAAO,KAAK,cAAc,CAAA;QAC1C,IAAI,OAAO,KAAK,SAAS,EAAE;YACzB,OAAO,EAAE,CAAA;SACV;QACD,OAAO,CACL,MAAM,OAAO,CAAC,GAAG,CACf,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAO,GAAgC,EAAE,EAAE;YAC1E,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE;gBAC3B,IAAI;oBACF,OAAO,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC;wBAC9C,WAAW;wBACX,MAAM,EAAE,GAAG;wBACX,OAAO;qBACR,CAAC,CAAgC,CAAA;iBACnC;gBAAC,OAAO,CAAC,EAAE;oBACV,OAAO,IAAI,CAAA;iBACZ;aACF;iBAAM;gBACL,OAAO,GAAkC,CAAA;aAC1C;QACH,CAAC,CAAA,CAAC,CACH,CACF;aACE,MAAM,CAAC,iBAAS,CAAC;aACjB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YACX,MAAM,MAAM,GAAG,iCAAiC,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;YAC9D,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,YAAY,KAAkB,GAAG,EAAhB,QAAQ,UAAK,GAAG,EAAnF,sEAA6E,CAAM,CAAA;YACzF,MAAM,MAAM,mCAAQ,QAAQ,KAAE,YAAY,EAAE,MAAM,GAAE,CAAA;YACpD,IAAI,OAAO,IAAI,4BAA4B,KAAK,MAAM,CAAC,IAAI,EAAE;gBAC3D,MAAM,CAAC,IAAI,GAAG,2BAA2B,CAAA;aAC1C;YACD,OAAO,MAAM,CAAA;QACf,CAAC,CAAC,CAAA;IACN,CAAC;CAAA;AAtCD,4EAsCC;AAED;;;;;;;;GAQG;AACH,SAAgB,iCAAiC,CAAC,EAA+B,EAAE,OAAO,GAAG,KAAK;IAChG,IAAI,EAAE,CAAC,YAAY,EAAE;QACnB,IAAI,EAAE,CAAC,YAAY,CAAC,GAAG,KAAK,IAAI,EAAE;YAChC,MAAM,OAAO,GAAG,IAAI,kBAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;YAC3F,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;YAChE,MAAM,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,YAAY,CAAC,CAAE,EAAE,WAAW,CAAC,CAAA;YACzD,MAAM,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,YAAY,CAAC,CAAE,EAAE,WAAW,CAAC,CAAA;YACzD,MAAM,GAAG,GAAG,GAAG,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAA;YAC/E,+JAA+J;YAC/J,OAAO,OAAO,CAAC,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;SAChE;aAAM,IAAI,EAAE,CAAC,YAAY,CAAC,GAAG,KAAK,SAAS,EAAE;YAC5C,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,YAAY,CAAC,CAAE,EAAE,WAAW,CAAC,EAAE,QAAQ,CAAC,CAAA;SAC/E;aAAM,IAAI,EAAE,CAAC,YAAY,CAAC,GAAG,KAAK,KAAK,EAAE;YACxC,OAAO,IAAA,6CAAqB,EAAC,EAAE,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAA;SACxD;KACF;IACD,2DAA2D;IAC3D,OAAO,IAAA,2BAAmB,EAAC,EAAE,EAAE,OAAO,CAAC,CAAA;AACzC,CAAC;AAlBD,8EAkBC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAsB,oCAAoC,CACxD,UAAuB,EACvB,UAA8B,cAAc,EAC5C,OAAiC,EACjC,WAAyB;;QAEzB,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,WAAW,CAAA;QACnH,gFAAgF;QAChF,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,IAAA,8BAAsB,EAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;QACxF,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,IAAA,yBAAiB,EAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;QAC3F,qEAAqE;QACrE,MAAM,YAAY,GAAyB,MAAM,gCAAgC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;QAE3G,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAS,CAAC,CAAA;QACnD,sFAAsF;QACtF,MAAM,YAAY,GAAoB,YAAY;aAC/C,GAAG,CAAC,CAAC,kBAAkB,EAAE,EAAE;YAC1B;;eAEG;YACH,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,KAAK,kBAAkB,CAAC,YAAY,CAAC,CAAA;YACxG,IAAI,QAAQ,EAAE;gBACZ,MAAM,EAAE,IAAI,KAAoB,QAAQ,EAAvB,UAAU,UAAK,QAAQ,EAAlC,QAAuB,CAAW,CAAA;gBACxC,uCAAY,UAAU,KAAE,IAAI,kCAAO,IAAI,KAAE,kBAAkB,OAAI;aAChE;iBAAM;gBACL,OAAO,IAAI,CAAA;aACZ;QACH,CAAC,CAAC;aACD,MAAM,CAAC,iBAAS,CAAC,CAAA;QAEpB,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;IAClC,CAAC;CAAA;AA/BD,oFA+BC;AAED,SAAsB,kBAAkB,CAAC,OAAmC;;QAC1E,OAAO,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAA;IACrH,CAAC;CAAA;AAFD,gDAEC;AAED,SAAsB,aAAa,CAAC,cAA+B,EAAE,OAAmC;;QACtG,IAAI,OAAO,cAAc,CAAC,UAAU,KAAK,QAAQ,EAAE;YACjD,OAAO,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,cAAc,CAAC,UAAU,EAAE,CAAC,CAAA;SACvE;aAAM,IAAI,OAAO,cAAc,CAAC,UAAU,KAAK,QAAQ,EAAE;YACxD,OAAO,cAAc,CAAC,UAAU,CAAA;SACjC;QACD,MAAM,KAAK,CAAC,gDAAgD,CAAC,CAAA;IAC/D,CAAC;CAAA;AAPD,sCAOC;AAED,SAAgB,MAAM,CAAC,cAA+B;IACpD,IAAI,OAAO,cAAc,CAAC,UAAU,KAAK,QAAQ,EAAE;QACjD,OAAO,cAAc,CAAC,UAAU,CAAA;KACjC;SAAM,IAAI,OAAO,cAAc,CAAC,UAAU,KAAK,QAAQ,EAAE;QACxD,OAAO,cAAc,CAAC,UAAU,CAAC,GAAG,CAAA;KACrC;IACD,MAAM,KAAK,CAAC,sCAAsC,CAAC,CAAA;AACrD,CAAC;AAPD,wBAOC;AAED,SAAgB,KAAK,CAAC,UAAuD;IAC3E,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE;QAClC,OAAO,UAAU,CAAA;KAClB;IACD,IAAI,UAAU,CAAC,GAAG,EAAE;QAClB,OAAO,UAAU,CAAC,GAAG,CAAA;KACtB;IACD,MAAM,KAAK,CAAC,oCAAoC,CAAC,CAAA;AACnD,CAAC;AARD,sBAQC;AAED,SAAgB,MAAM,CAAC,WAA6D;IAClF,IAAI,CAAC,WAAW,EAAE;QAChB,OAAO,EAAE,CAAA;KACV;IACD,OAAO,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;AAC/B,CAAC;AALD,wBAKC;AAED,SAAsB,MAAM,CAC1B,UAAuB,EACvB,4BAAgD,gBAAgB,EAChE,OAAiC,EACjC,KAAc;;QAEd,MAAM,IAAI,GAAG,MAAM,oCAAoC,CAAC,UAAU,EAAE,yBAAyB,EAAE,OAAO,CAAC,CAAA;QACvG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE;YAC9B,MAAM,IAAI,KAAK,CAAC,gDAAgD,yBAAyB,YAAY,UAAU,CAAC,GAAG,EAAE,CAAC,CAAA;SACvH;QAED,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAkB,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACxI,IAAI,CAAC,aAAa,EAAE;YAClB,MAAM,IAAI,KAAK,CAAC,8DAA8D,KAAK,EAAE,CAAC,CAAA;SACvF;QAED,OAAO,aAAa,CAAA;IACtB,CAAC;CAAA;AAjBD,wBAiBC;AAED,SAAgB,YAAY,CAAC,GAAS,EAAE,MAAuB;;IAC7D,OAAO,MAAA,MAAA,MAAA,GAAG,CAAC,IAAI,0CAAE,kBAAkB,CAAC,EAAE,mCAAI,MAAM,CAAC,GAAG,mCAAI,GAAG,CAAC,GAAG,CAAA;AACjE,CAAC;AAFD,oCAEC;AAED,SAAsB,sBAAsB,CAAC,OAAoB,EAAE,OAAmC;;;QACpG,OAAO,MAAA,OAAO,CAAC,mBAAmB,mCAAI,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAA;;CAC1E;AAFD,wDAEC;AAED,MAAa,gBAAgB;IAI3B,YAAY,OAAiC,EAAE,mBAA6B;QAC1E,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,KAAK,IAAI,CAAA;IACzD,CAAC;IAEK,OAAO,CAAC,MAAc,EAAE,OAA8B;;YAC1D,IAAI;gBACF,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAA;aAC1D;YAAC,OAAO,KAAc,EAAE;gBACvB,IAAI,IAAI,CAAC,mBAAmB,EAAE;oBAC5B,OAAO,IAAI,4BAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;iBAClD;gBACD,MAAM,KAAK,CAAA;aACZ;QACH,CAAC;KAAA;CACF;AAnBD,4CAmBC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export * from './did-functions';
+export * from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAA;AAC/B,cAAc,SAAS,CAAA"}

package/dist/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./did-functions"), exports);
+__exportStar(require("./types"), exports);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,kDAA+B;AAC/B,0CAAuB"}

package/dist/types.d.ts

@@ -0,0 +1,22 @@
+import { JWTVerifyOptions } from 'did-jwt';
+import { Resolvable } from 'did-resolver';
+import { DIDDocumentSection, IIdentifier } from '@veramo/core';
+export interface ResolveOpts {
+    jwtVerifyOpts?: JWTVerifyOptions;
+    resolver?: Resolvable;
+    resolveUrl?: string;
+    noUniversalResolverFallback?: boolean;
+    subjectSyntaxTypesSupported?: string[];
+}
+export interface IDIDOptions {
+    resolveOpts?: ResolveOpts;
+    identifierOpts: IIdentifierOpts;
+    supportedDIDMethods?: string[];
+}
+export interface IIdentifierOpts {
+    identifier: IIdentifier | string;
+    verificationMethodSection?: DIDDocumentSection;
+    kid?: string;
+}
+export declare const DID_PREFIX = "did:";
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAA;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAE9D,MAAM,WAAW,WAAW;IAC1B,aAAa,CAAC,EAAE,gBAAgB,CAAA;IAChC,QAAQ,CAAC,EAAE,UAAU,CAAA;IACrB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,2BAA2B,CAAC,EAAE,OAAO,CAAA;IACrC,2BAA2B,CAAC,EAAE,MAAM,EAAE,CAAA;CACvC;AAED,MAAM,WAAW,WAAW;IAC1B,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,cAAc,EAAE,eAAe,CAAA;IAC/B,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAA;CAC/B;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,WAAW,GAAG,MAAM,CAAA;IAChC,yBAAyB,CAAC,EAAE,kBAAkB,CAAA;IAC9C,GAAG,CAAC,EAAE,MAAM,CAAA;CACb;AAED,eAAO,MAAM,UAAU,SAAS,CAAA"}

package/dist/types.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DID_PREFIX = void 0;
+exports.DID_PREFIX = 'did:';
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":";;;AAwBa,QAAA,UAAU,GAAG,MAAM,CAAA"}

package/package.json

@@ -0,0 +1,38 @@
+{
+  "name": "@sphereon/ssi-sdk-ext.did-utils",
+  "description": "DID Utils",
+  "version": "0.10.2-next.20+fe74ec5",
+  "source": "src/index.ts",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "scripts": {
+    "build": "tsc --build",
+    "build:clean": "tsc --build --clean && tsc --build"
+  },
+  "dependencies": {
+    "@sphereon/did-uni-client": "^0.6.0",
+    "@sphereon/ssi-sdk-ext.key-utils": "0.10.2-next.20+fe74ec5",
+    "@veramo/core": "4.2.0",
+    "@veramo/utils": "4.2.0",
+    "did-jwt": "^6.11.6",
+    "did-resolver": "^4.1.0",
+    "elliptic": "^6.5.4",
+    "uint8arrays": "^3.1.1"
+  },
+  "files": [
+    "dist/**/*",
+    "src/**/*",
+    "plugin.schema.json",
+    "README.md",
+    "LICENSE"
+  ],
+  "private": false,
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": "git@github.com:Sphereon-OpenSource/ssi-sdk-crypto-extensions.git",
+  "author": "Sphereon <dev@sphereon.com>",
+  "license": "Apache-2.0",
+  "keywords": [],
+  "gitHead": "fe74ec598881102070db75141155719cc9df9812"
+}

package/src/did-functions.ts

@@ -0,0 +1,250 @@
+import { UniResolver } from '@sphereon/did-uni-client'
+import { DIDDocument, DIDDocumentSection, DIDResolutionResult, IAgentContext, IDIDManager, IIdentifier, IKey, IResolver } from '@veramo/core'
+import {
+  _ExtendedIKey,
+  _ExtendedVerificationMethod,
+  _NormalizedVerificationMethod,
+  extractPublicKeyHex,
+  isDefined,
+  mapIdentifierKeysToDoc,
+  resolveDidOrThrow,
+} from '@veramo/utils'
+import { DIDResolutionOptions, Resolvable, VerificationMethod } from 'did-resolver'
+// @ts-ignore
+import elliptic from 'elliptic'
+import * as u8a from 'uint8arrays'
+import { IDIDOptions, IIdentifierOpts } from './types'
+import { hexKeyFromPEMBasedJwk } from '@sphereon/ssi-sdk-ext.key-utils'
+
+export const getFirstKeyWithRelation = async (
+  identifier: IIdentifier,
+  context: IAgentContext<IResolver>,
+  vmRelationship?: DIDDocumentSection,
+  errorOnNotFound?: boolean
+): Promise<_ExtendedIKey | undefined> => {
+  const section = vmRelationship || 'verificationMethod' // search all VMs in case no relationship is provided
+  const matchedKeys = await mapIdentifierKeysToDocWithJwkSupport(identifier, section, context)
+  if (Array.isArray(matchedKeys) && matchedKeys.length > 0) {
+    return matchedKeys[0]
+  }
+  if (errorOnNotFound === true) {
+    throw new Error(`Could not find key with relationship ${section} in DID document for ${identifier.did}`)
+  }
+  return undefined
+}
+
+//TODO: Move to ssi-sdk/core and create PR upstream
+/**
+ * Dereferences keys from DID document and normalizes them for easy comparison.
+ *
+ * When dereferencing keyAgreement keys, only Ed25519 and X25519 curves are supported.
+ * Other key types are omitted from the result and Ed25519 keys are converted to X25519
+ *
+ * @returns a Promise that resolves to the list of dereferenced keys.
+ *
+ * @beta This API may change without a BREAKING CHANGE notice.
+ */
+export async function dereferenceDidKeysWithJwkSupport(
+  didDocument: DIDDocument,
+  section: DIDDocumentSection = 'keyAgreement',
+  context: IAgentContext<IResolver>
+): Promise<_NormalizedVerificationMethod[]> {
+  const convert = section === 'keyAgreement'
+  if (section === 'service') {
+    return []
+  }
+  return (
+    await Promise.all(
+      (didDocument[section] || []).map(async (key: string | VerificationMethod) => {
+        if (typeof key === 'string') {
+          try {
+            return (await context.agent.getDIDComponentById({
+              didDocument,
+              didUrl: key,
+              section,
+            })) as _ExtendedVerificationMethod
+          } catch (e) {
+            return null
+          }
+        } else {
+          return key as _ExtendedVerificationMethod
+        }
+      })
+    )
+  )
+    .filter(isDefined)
+    .map((key) => {
+      const hexKey = extractPublicKeyHexWithJwkSupport(key, convert)
+      const { publicKeyHex, publicKeyBase58, publicKeyBase64, publicKeyJwk, ...keyProps } = key
+      const newKey = { ...keyProps, publicKeyHex: hexKey }
+      if (convert && 'Ed25519VerificationKey2018' === newKey.type) {
+        newKey.type = 'X25519KeyAgreementKey2019'
+      }
+      return newKey
+    })
+}
+
+/**
+ * Converts the publicKey of a VerificationMethod to hex encoding (publicKeyHex)
+ *
+ * @param pk - the VerificationMethod to be converted
+ * @param convert - when this flag is set to true, Ed25519 keys are converted to their X25519 pairs
+ * @returns the hex encoding of the public key
+ *
+ * @beta This API may change without a BREAKING CHANGE notice.
+ */
+export function extractPublicKeyHexWithJwkSupport(pk: _ExtendedVerificationMethod, convert = false): string {
+  if (pk.publicKeyJwk) {
+    if (pk.publicKeyJwk.kty === 'EC') {
+      const secp256 = new elliptic.ec(pk.publicKeyJwk.crv === 'secp256k1' ? 'secp256k1' : 'p256')
+      const prefix = pk.publicKeyJwk.crv === 'secp256k1' ? '04' : '03'
+      const x = u8a.fromString(pk.publicKeyJwk.x!, 'base64url')
+      const y = u8a.fromString(pk.publicKeyJwk.y!, 'base64url')
+      const hex = `${prefix}${u8a.toString(x, 'base16')}${u8a.toString(y, 'base16')}`
+      // We return directly as we don't want to convert the result back into Uint8Array and then convert again to hex as the elliptic lib already returns hex strings
+      return secp256.keyFromPublic(hex, 'hex').getPublic(true, 'hex')
+    } else if (pk.publicKeyJwk.crv === 'Ed25519') {
+      return u8a.toString(u8a.fromString(pk.publicKeyJwk.x!, 'base64url'), 'base16')
+    } else if (pk.publicKeyJwk.kty === 'RSA') {
+      return hexKeyFromPEMBasedJwk(pk.publicKeyJwk, 'public')
+    }
+  }
+  // delegate the other types to the original Veramo function
+  return extractPublicKeyHex(pk, convert)
+}
+
+/**
+ * Maps the keys of a locally managed {@link @veramo/core#IIdentifier | IIdentifier} to the corresponding
+ * {@link did-resolver#VerificationMethod | VerificationMethod} entries from the DID document.
+ *
+ * @param identifier - the identifier to be mapped
+ * @param section - the section of the DID document to be mapped (see
+ *   {@link https://www.w3.org/TR/did-core/#verification-relationships | verification relationships}), but can also be
+ *   `verificationMethod` to map all the keys.
+ * @param context - the veramo agent context, which must contain a {@link @veramo/core#IResolver | IResolver}
+ *   implementation that can resolve the DID document of the identifier.
+ *
+ * @returns an array of mapped keys. The corresponding verification method is added to the `meta.verificationMethod`
+ *   property of the key.
+ *
+ * @beta This API may change without a BREAKING CHANGE notice.
+ */
+export async function mapIdentifierKeysToDocWithJwkSupport(
+  identifier: IIdentifier,
+  section: DIDDocumentSection = 'keyAgreement',
+  context: IAgentContext<IResolver>,
+  didDocument?: DIDDocument
+): Promise<_ExtendedIKey[]> {
+  const rsaDidWeb = identifier.keys && identifier.keys.length > 0 && identifier.keys[0].type === 'RSA' && didDocument
+  // We skip mapping in case the identifier is RSA and a did document is supplied.
+  const keys = rsaDidWeb ? [] : await mapIdentifierKeysToDoc(identifier, section, context)
+  const didDoc = didDocument ? didDocument : await resolveDidOrThrow(identifier.did, context)
+  // dereference all key agreement keys from DID document and normalize
+  const documentKeys: VerificationMethod[] = await dereferenceDidKeysWithJwkSupport(didDoc, section, context)
+
+  const localKeys = identifier.keys.filter(isDefined)
+  // finally map the didDocument keys to the identifier keys by comparing `publicKeyHex`
+  const extendedKeys: _ExtendedIKey[] = documentKeys
+    .map((verificationMethod) => {
+      /*if (verificationMethod.type !== 'JsonWebKey2020') {
+        return null
+      }*/
+      const localKey = localKeys.find((localKey) => localKey.publicKeyHex === verificationMethod.publicKeyHex)
+      if (localKey) {
+        const { meta, ...localProps } = localKey
+        return { ...localProps, meta: { ...meta, verificationMethod } }
+      } else {
+        return null
+      }
+    })
+    .filter(isDefined)
+
+  return keys.concat(extendedKeys)
+}
+
+export async function getAgentDIDMethods(context: IAgentContext<IDIDManager>) {
+  return (await context.agent.didManagerGetProviders()).map((provider) => provider.toLowerCase().replace('did:', ''))
+}
+
+export async function getIdentifier(identifierOpts: IIdentifierOpts, context: IAgentContext<IDIDManager>): Promise<IIdentifier> {
+  if (typeof identifierOpts.identifier === 'string') {
+    return context.agent.didManagerGet({ did: identifierOpts.identifier })
+  } else if (typeof identifierOpts.identifier === 'object') {
+    return identifierOpts.identifier
+  }
+  throw Error(`Cannot get agent identifier value from options`)
+}
+
+export function getDID(identifierOpts: IIdentifierOpts): string {
+  if (typeof identifierOpts.identifier === 'string') {
+    return identifierOpts.identifier
+  } else if (typeof identifierOpts.identifier === 'object') {
+    return identifierOpts.identifier.did
+  }
+  throw Error(`Cannot get DID from identifier value`)
+}
+
+export function toDID(identifier: string | IIdentifier | Partial<IIdentifier>): string {
+  if (typeof identifier === 'string') {
+    return identifier
+  }
+  if (identifier.did) {
+    return identifier.did
+  }
+  throw Error(`No DID value present in identifier`)
+}
+
+export function toDIDs(identifiers?: (string | IIdentifier | Partial<IIdentifier>)[]): string[] {
+  if (!identifiers) {
+    return []
+  }
+  return identifiers.map(toDID)
+}
+
+export async function getKey(
+  identifier: IIdentifier,
+  verificationMethodSection: DIDDocumentSection = 'authentication',
+  context: IAgentContext<IResolver>,
+  keyId?: string
+): Promise<IKey> {
+  const keys = await mapIdentifierKeysToDocWithJwkSupport(identifier, verificationMethodSection, context)
+  if (!keys || keys.length === 0) {
+    throw new Error(`No keys found for verificationMethodSection: ${verificationMethodSection} and did ${identifier.did}`)
+  }
+
+  const identifierKey = keyId ? keys.find((key: _ExtendedIKey) => key.kid === keyId || key.meta.verificationMethod.id === keyId) : keys[0]
+  if (!identifierKey) {
+    throw new Error(`No matching verificationMethodSection key found for keyId: ${keyId}`)
+  }
+
+  return identifierKey
+}
+
+export function determineKid(key: IKey, idOpts: IIdentifierOpts): string {
+  return key.meta?.verificationMethod.id ?? idOpts.kid ?? key.kid
+}
+
+export async function getSupportedDIDMethods(didOpts: IDIDOptions, context: IAgentContext<IDIDManager>) {
+  return didOpts.supportedDIDMethods ?? (await getAgentDIDMethods(context))
+}
+
+export class AgentDIDResolver implements Resolvable {
+  private readonly context: IAgentContext<IResolver>
+  private readonly uniresolverFallback: boolean
+
+  constructor(context: IAgentContext<IResolver>, uniresolverFallback?: boolean) {
+    this.context = context
+    this.uniresolverFallback = uniresolverFallback === true
+  }
+
+  async resolve(didUrl: string, options?: DIDResolutionOptions): Promise<DIDResolutionResult> {
+    try {
+      return this.context.agent.resolveDid({ didUrl, options })
+    } catch (error: unknown) {
+      if (this.uniresolverFallback) {
+        return new UniResolver().resolve(didUrl, options)
+      }
+      throw error
+    }
+  }
+}

package/src/index.ts

@@ -0,0 +1,2 @@
+export * from './did-functions'
+export * from './types'

package/src/types.ts

@@ -0,0 +1,25 @@
+import { JWTVerifyOptions } from 'did-jwt'
+import { Resolvable } from 'did-resolver'
+import { DIDDocumentSection, IIdentifier } from '@veramo/core'
+
+export interface ResolveOpts {
+  jwtVerifyOpts?: JWTVerifyOptions
+  resolver?: Resolvable
+  resolveUrl?: string
+  noUniversalResolverFallback?: boolean
+  subjectSyntaxTypesSupported?: string[]
+}
+
+export interface IDIDOptions {
+  resolveOpts?: ResolveOpts
+  identifierOpts: IIdentifierOpts
+  supportedDIDMethods?: string[]
+}
+
+export interface IIdentifierOpts {
+  identifier: IIdentifier | string
+  verificationMethodSection?: DIDDocumentSection
+  kid?: string
+}
+
+export const DID_PREFIX = 'did:'