@sphereon/ssi-sdk-ext.did-utils 0.28.1-feature.esm.cjs.8 → 0.28.1-feature.esm.cjs.9

package/dist/index.cjs

@@ -1,85 +1,18 @@
-"use strict";
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } async function _asyncNullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return await rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }var __defProp = Object.defineProperty;
 var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/index.ts
-var index_exports = {};
-__export(index_exports, {
-  AgentDIDResolver: () => AgentDIDResolver,
-  DID_PREFIX: () => DID_PREFIX,
-  IdentifierAliasEnum: () => IdentifierAliasEnum,
-  SupportedDidMethodEnum: () => SupportedDidMethodEnum,
-  asDidWeb: () => asDidWeb,
-  createIdentifier: () => createIdentifier,
-  dereferenceDidKeysWithJwkSupport: () => dereferenceDidKeysWithJwkSupport,
-  determineKid: () => determineKid,
-  didDocumentToJwks: () => didDocumentToJwks,
-  extractPublicKeyHex: () => extractPublicKeyHex,
-  extractPublicKeyHexWithJwkSupport: () => extractPublicKeyHexWithJwkSupport,
-  getAgentDIDMethods: () => getAgentDIDMethods,
-  getAgentResolver: () => getAgentResolver,
-  getAuthenticationKey: () => getAuthenticationKey,
-  getControllerKey: () => getControllerKey,
-  getDID: () => getDID,
-  getDidSigner: () => getDidSigner,
-  getEthereumAddressFromKey: () => getEthereumAddressFromKey,
-  getFirstKeyWithRelation: () => getFirstKeyWithRelation,
-  getFirstKeyWithRelationFromDIDDoc: () => getFirstKeyWithRelationFromDIDDoc,
-  getKey: () => getKey,
-  getKeys: () => getKeys,
-  getOrCreatePrimaryIdentifier: () => getOrCreatePrimaryIdentifier,
-  getPrimaryIdentifier: () => getPrimaryIdentifier,
-  getSupportedDIDMethods: () => getSupportedDIDMethods,
-  isEvenHexString: () => isEvenHexString,
-  jwkTtoPublicKeyHex: () => jwkTtoPublicKeyHex,
-  mapIdentifierKeysToDocWithJwkSupport: () => mapIdentifierKeysToDocWithJwkSupport,
-  signDidJWT: () => signDidJWT,
-  toDID: () => toDID,
-  toDIDs: () => toDIDs,
-  toDidDocument: () => toDidDocument,
-  toDidResolutionResult: () => toDidResolutionResult,
-  verificationMethodToJwk: () => verificationMethodToJwk
-});
-module.exports = __toCommonJS(index_exports);
 
 // src/did-functions.ts
-var import_transactions = require("@ethersproject/transactions");
-var import_did_uni_client = require("@sphereon/did-uni-client");
-var import_ssi_sdk_ext = require("@sphereon/ssi-sdk-ext.key-utils");
-var import_ssi_sdk_ext2 = require("@sphereon/ssi-sdk-ext.x509-utils");
-var import_ssi_sdk = require("@sphereon/ssi-sdk.core");
-var import_ed25519 = require("@stablelib/ed25519");
-var import_utils = require("@veramo/utils");
-var import_did_jwt = require("did-jwt");
-var import_elliptic = __toESM(require("elliptic"), 1);
-var import_from_string = require("uint8arrays/from-string");
-var import_to_string = require("uint8arrays/to-string");
+var _transactions = require('@ethersproject/transactions');
+var _diduniclient = require('@sphereon/did-uni-client');
+var _ssisdkextkeyutils = require('@sphereon/ssi-sdk-ext.key-utils');
+var _ssisdkextx509utils = require('@sphereon/ssi-sdk-ext.x509-utils');
+var _ssisdkcore = require('@sphereon/ssi-sdk.core');
+var _ed25519 = require('@stablelib/ed25519');
+var _utils = require('@veramo/utils');
+var _didjwt = require('did-jwt');
+var _elliptic = require('elliptic'); var _elliptic2 = _interopRequireDefault(_elliptic);
+var _fromstring = require('uint8arrays/from-string');
+var _tostring = require('uint8arrays/to-string');
 
 // src/types.ts
 var SupportedDidMethodEnum = /* @__PURE__ */ function(SupportedDidMethodEnum2) {
@@ -112,19 +45,19 @@ var getAuthenticationKey = /* @__PURE__ */ __name(async ({ identifier, offlineWh
 var getFirstKeyWithRelation = /* @__PURE__ */ __name(async ({ identifier, offlineWhenNoDIDRegistered, noVerificationMethodFallback, keyType, controllerKey, vmRelationship }, context) => {
   let key = void 0;
   try {
-    key = await getFirstKeyWithRelationFromDIDDoc({
+    key = await _asyncNullishCoalesce(await getFirstKeyWithRelationFromDIDDoc({
       identifier,
       vmRelationship,
       errorOnNotFound: false,
       keyType,
       controllerKey
-    }, context) ?? (noVerificationMethodFallback || vmRelationship === "verificationMethod" ? void 0 : await getFirstKeyWithRelationFromDIDDoc({
+    }, context), async () => ( (noVerificationMethodFallback || vmRelationship === "verificationMethod" ? void 0 : await getFirstKeyWithRelationFromDIDDoc({
       identifier,
       vmRelationship: "verificationMethod",
       errorOnNotFound: false,
       keyType,
       controllerKey
-    }, context));
+    }, context))));
   } catch (e) {
     if (e instanceof Error) {
       if (!e.message.includes("404") || !offlineWhenNoDIDRegistered) {
@@ -136,23 +69,23 @@ var getFirstKeyWithRelation = /* @__PURE__ */ __name(async ({ identifier, offlin
   }
   if (!key && offlineWhenNoDIDRegistered) {
     const offlineDID = toDidDocument(identifier);
-    key = await getFirstKeyWithRelationFromDIDDoc({
+    key = await _asyncNullishCoalesce(await getFirstKeyWithRelationFromDIDDoc({
       identifier,
       vmRelationship,
       errorOnNotFound: false,
       didDocument: offlineDID,
       keyType,
       controllerKey
-    }, context) ?? (noVerificationMethodFallback || vmRelationship === "verificationMethod" ? void 0 : await getFirstKeyWithRelationFromDIDDoc({
+    }, context), async () => ( (noVerificationMethodFallback || vmRelationship === "verificationMethod" ? void 0 : await getFirstKeyWithRelationFromDIDDoc({
       identifier,
       vmRelationship: "verificationMethod",
       errorOnNotFound: false,
       didDocument: offlineDID,
       keyType,
       controllerKey
-    }, context));
+    }, context))));
     if (!key) {
-      key = identifier.keys.map((key2) => key2).filter((key2) => keyType === void 0 || key2.type === keyType || controllerKey && key2.kid === identifier.controllerKeyId).find((key2) => key2.meta.verificationMethod?.type.includes("authentication") || key2.meta.purposes?.includes("authentication"));
+      key = identifier.keys.map((key2) => key2).filter((key2) => keyType === void 0 || key2.type === keyType || controllerKey && key2.kid === identifier.controllerKeyId).find((key2) => _optionalChain([key2, 'access', _ => _.meta, 'access', _2 => _2.verificationMethod, 'optionalAccess', _3 => _3.type, 'access', _4 => _4.includes, 'call', _5 => _5("authentication")]) || _optionalChain([key2, 'access', _6 => _6.meta, 'access', _7 => _7.purposes, 'optionalAccess', _8 => _8.includes, 'call', _9 => _9("authentication")]));
     }
   }
   if (!key) {
@@ -162,8 +95,8 @@ var getFirstKeyWithRelation = /* @__PURE__ */ __name(async ({ identifier, offlin
 }, "getFirstKeyWithRelation");
 var getOrCreatePrimaryIdentifier = /* @__PURE__ */ __name(async (context, opts) => {
   const primaryIdentifier = await getPrimaryIdentifier(context, {
-    ...opts?.createOpts?.options,
-    ...opts?.method && {
+    ..._optionalChain([opts, 'optionalAccess', _10 => _10.createOpts, 'optionalAccess', _11 => _11.options]),
+    ..._optionalChain([opts, 'optionalAccess', _12 => _12.method]) && {
       method: opts.method
     }
   });
@@ -173,8 +106,8 @@ var getOrCreatePrimaryIdentifier = /* @__PURE__ */ __name(async (context, opts)
       result: primaryIdentifier
     };
   }
-  if (opts?.method === SupportedDidMethodEnum.DID_KEY) {
-    const createOpts = opts?.createOpts ?? {};
+  if (_optionalChain([opts, 'optionalAccess', _13 => _13.method]) === SupportedDidMethodEnum.DID_KEY) {
+    const createOpts = _nullishCoalesce(_optionalChain([opts, 'optionalAccess', _14 => _14.createOpts]), () => ( {}));
     createOpts.options = {
       codecName: "EBSI",
       type: "Secp256r1",
@@ -189,19 +122,19 @@ var getOrCreatePrimaryIdentifier = /* @__PURE__ */ __name(async (context, opts)
   };
 }, "getOrCreatePrimaryIdentifier");
 var getPrimaryIdentifier = /* @__PURE__ */ __name(async (context, opts) => {
-  const identifiers = (await context.agent.didManagerFind(opts?.method ? {
-    provider: `${DID_PREFIX}${opts?.method}`
-  } : {})).filter((identifier) => opts?.type === void 0 || identifier.keys.some((key) => key.type === opts?.type));
+  const identifiers = (await context.agent.didManagerFind(_optionalChain([opts, 'optionalAccess', _15 => _15.method]) ? {
+    provider: `${DID_PREFIX}${_optionalChain([opts, 'optionalAccess', _16 => _16.method])}`
+  } : {})).filter((identifier) => _optionalChain([opts, 'optionalAccess', _17 => _17.type]) === void 0 || identifier.keys.some((key) => key.type === _optionalChain([opts, 'optionalAccess', _18 => _18.type])));
   return identifiers && identifiers.length > 0 ? identifiers[0] : void 0;
 }, "getPrimaryIdentifier");
 var createIdentifier = /* @__PURE__ */ __name(async (context, opts) => {
   return await context.agent.didManagerCreate({
-    kms: await (0, import_ssi_sdk_ext.getKms)(context, opts?.createOpts?.kms),
-    ...opts?.method && {
-      provider: `${DID_PREFIX}${opts?.method}`
+    kms: await _ssisdkextkeyutils.getKms.call(void 0, context, _optionalChain([opts, 'optionalAccess', _19 => _19.createOpts, 'optionalAccess', _20 => _20.kms])),
+    ..._optionalChain([opts, 'optionalAccess', _21 => _21.method]) && {
+      provider: `${DID_PREFIX}${_optionalChain([opts, 'optionalAccess', _22 => _22.method])}`
     },
-    alias: opts?.createOpts?.alias ?? `${IdentifierAliasEnum.PRIMARY}-${opts?.method}-${opts?.createOpts?.options?.type}-${(/* @__PURE__ */ new Date()).getTime()}`,
-    options: opts?.createOpts?.options
+    alias: _nullishCoalesce(_optionalChain([opts, 'optionalAccess', _23 => _23.createOpts, 'optionalAccess', _24 => _24.alias]), () => ( `${IdentifierAliasEnum.PRIMARY}-${_optionalChain([opts, 'optionalAccess', _25 => _25.method])}-${_optionalChain([opts, 'optionalAccess', _26 => _26.createOpts, 'optionalAccess', _27 => _27.options, 'optionalAccess', _28 => _28.type])}-${(/* @__PURE__ */ new Date()).getTime()}`)),
+    options: _optionalChain([opts, 'optionalAccess', _29 => _29.createOpts, 'optionalAccess', _30 => _30.options])
   });
 }, "createIdentifier");
 var getFirstKeyWithRelationFromDIDDoc = /* @__PURE__ */ __name(async ({ identifier, vmRelationship = "verificationMethod", keyType, errorOnNotFound = false, didDocument, controllerKey }, context) => {
@@ -225,7 +158,7 @@ var getEthereumAddressFromKey = /* @__PURE__ */ __name(({ key }) => {
   if (key.type !== "Secp256k1") {
     throw Error(`Can only get ethereum address from a Secp256k1 key. Type is ${key.type} for keyRef: ${key.kid}`);
   }
-  const ethereumAddress = key.meta?.ethereumAddress ?? key.meta?.account?.toLowerCase() ?? (0, import_transactions.computeAddress)(`0x${key.publicKeyHex}`).toLowerCase();
+  const ethereumAddress = _nullishCoalesce(_nullishCoalesce(_optionalChain([key, 'access', _31 => _31.meta, 'optionalAccess', _32 => _32.ethereumAddress]), () => ( _optionalChain([key, 'access', _33 => _33.meta, 'optionalAccess', _34 => _34.account, 'optionalAccess', _35 => _35.toLowerCase, 'call', _36 => _36()]))), () => ( _transactions.computeAddress.call(void 0, `0x${key.publicKeyHex}`).toLowerCase()));
   if (!ethereumAddress) {
     throw Error(`Could not get or generate ethereum address from key with keyRef ${key.kid}`);
   }
@@ -239,7 +172,7 @@ var getControllerKey = /* @__PURE__ */ __name(({ identifier }) => {
   return key;
 }, "getControllerKey");
 var getKeys = /* @__PURE__ */ __name(({ jwkThumbprint, kms, identifier, kmsKeyRef, keyType, controllerKey }) => {
-  return identifier.keys.filter((key) => !keyType || key.type === keyType).filter((key) => !kms || key.kms === kms).filter((key) => !kmsKeyRef || key.kid === kmsKeyRef).filter((key) => !jwkThumbprint || key.meta?.jwkThumbprint === jwkThumbprint).filter((key) => !controllerKey || identifier.controllerKeyId === key.kid);
+  return identifier.keys.filter((key) => !keyType || key.type === keyType).filter((key) => !kms || key.kms === kms).filter((key) => !kmsKeyRef || key.kid === kmsKeyRef).filter((key) => !jwkThumbprint || _optionalChain([key, 'access', _37 => _37.meta, 'optionalAccess', _38 => _38.jwkThumbprint]) === jwkThumbprint).filter((key) => !controllerKey || identifier.controllerKeyId === key.kid);
 }, "getKeys");
 async function dereferenceDidKeysWithJwkSupport(didDocument, section = "keyAgreement", context) {
   const convert = section === "keyAgreement";
@@ -260,7 +193,7 @@ async function dereferenceDidKeysWithJwkSupport(didDocument, section = "keyAgree
     } else {
       return key;
     }
-  }))).filter(import_utils.isDefined).map((key) => {
+  }))).filter(_utils.isDefined).map((key) => {
     const hexKey = extractPublicKeyHexWithJwkSupport(key, convert);
     const { publicKeyHex, publicKeyBase58, publicKeyBase64, publicKeyJwk, ...keyProps } = key;
     const newKey = {
@@ -276,31 +209,31 @@ async function dereferenceDidKeysWithJwkSupport(didDocument, section = "keyAgree
 __name(dereferenceDidKeysWithJwkSupport, "dereferenceDidKeysWithJwkSupport");
 function jwkTtoPublicKeyHex(jwk) {
   const vm = {
-    publicKeyJwk: (0, import_ssi_sdk_ext.sanitizedJwk)(jwk)
+    publicKeyJwk: _ssisdkextkeyutils.sanitizedJwk.call(void 0, jwk)
   };
   return extractPublicKeyHexWithJwkSupport(vm);
 }
 __name(jwkTtoPublicKeyHex, "jwkTtoPublicKeyHex");
 function extractPublicKeyHexWithJwkSupport(pk, convert = false) {
   if (pk.publicKeyJwk) {
-    const jwk = (0, import_ssi_sdk_ext.sanitizedJwk)(pk.publicKeyJwk);
+    const jwk = _ssisdkextkeyutils.sanitizedJwk.call(void 0, pk.publicKeyJwk);
     if (jwk.kty === "EC") {
       const curve = jwk.crv ? toEcLibCurve(jwk.crv) : "p256";
-      const xHex = (0, import_ssi_sdk_ext2.base64ToHex)(jwk.x, "base64url");
-      const yHex = (0, import_ssi_sdk_ext2.base64ToHex)(jwk.y, "base64url");
+      const xHex = _ssisdkextx509utils.base64ToHex.call(void 0, jwk.x, "base64url");
+      const yHex = _ssisdkextx509utils.base64ToHex.call(void 0, jwk.y, "base64url");
       const prefix = "04";
       const hex = `${prefix}${xHex}${yHex}`;
       try {
-        const ec = new import_elliptic.default.ec(curve);
+        const ec = new _elliptic2.default.ec(curve);
         const publicKeyHex = ec.keyFromPublic(hex, "hex").getPublic(true, "hex");
         return publicKeyHex;
       } catch (error) {
         console.error(`Error converting EC with elliptic lib curve ${curve} from JWK to hex. x: ${jwk.x}, y: ${jwk.y}, error: ${error}`, error);
       }
     } else if (jwk.crv === "Ed25519") {
-      return (0, import_to_string.toString)((0, import_from_string.fromString)(jwk.x, "base64url"), "base16");
+      return _tostring.toString.call(void 0, _fromstring.fromString.call(void 0, jwk.x, "base64url"), "base16");
     } else if (jwk.kty === "RSA") {
-      return (0, import_ssi_sdk_ext2.hexKeyFromPEMBasedJwk)(jwk, "public");
+      return _ssisdkextx509utils.hexKeyFromPEMBasedJwk.call(void 0, jwk, "public");
     }
   }
   return extractPublicKeyHex(pk, convert);
@@ -322,23 +255,23 @@ function isEvenHexString(hex) {
 __name(isEvenHexString, "isEvenHexString");
 function extractPublicKeyHex(pk, convert = false) {
   let keyBytes = extractPublicKeyBytes(pk);
-  const jwk = pk.publicKeyJwk ? (0, import_ssi_sdk_ext.sanitizedJwk)(pk.publicKeyJwk) : void 0;
+  const jwk = pk.publicKeyJwk ? _ssisdkextkeyutils.sanitizedJwk.call(void 0, pk.publicKeyJwk) : void 0;
   if (convert) {
     if ([
       "Ed25519",
       "Ed25519VerificationKey2018",
       "Ed25519VerificationKey2020"
-    ].includes(pk.type) || pk.type === "JsonWebKey2020" && jwk?.crv === "Ed25519") {
-      keyBytes = (0, import_ed25519.convertPublicKeyToX25519)(keyBytes);
+    ].includes(pk.type) || pk.type === "JsonWebKey2020" && _optionalChain([jwk, 'optionalAccess', _39 => _39.crv]) === "Ed25519") {
+      keyBytes = _ed25519.convertPublicKeyToX25519.call(void 0, keyBytes);
     } else if (![
       "X25519",
       "X25519KeyAgreementKey2019",
       "X25519KeyAgreementKey2020"
-    ].includes(pk.type) && !(pk.type === "JsonWebKey2020" && jwk?.crv === "X25519")) {
+    ].includes(pk.type) && !(pk.type === "JsonWebKey2020" && _optionalChain([jwk, 'optionalAccess', _40 => _40.crv]) === "X25519")) {
       return "";
     }
   }
-  return (0, import_ssi_sdk.bytesToHex)(keyBytes);
+  return _ssisdkcore.bytesToHex.call(void 0, keyBytes);
 }
 __name(extractPublicKeyHex, "extractPublicKeyHex");
 function toEcLibCurve(input) {
@@ -347,17 +280,17 @@ function toEcLibCurve(input) {
 __name(toEcLibCurve, "toEcLibCurve");
 function extractPublicKeyBytes(pk) {
   if (pk.publicKeyBase58) {
-    return (0, import_ssi_sdk.base58ToBytes)(pk.publicKeyBase58);
+    return _ssisdkcore.base58ToBytes.call(void 0, pk.publicKeyBase58);
   } else if (pk.publicKeyMultibase) {
-    return (0, import_ssi_sdk.multibaseKeyToBytes)(pk.publicKeyMultibase);
+    return _ssisdkcore.multibaseKeyToBytes.call(void 0, pk.publicKeyMultibase);
   } else if (pk.publicKeyBase64) {
-    return (0, import_ssi_sdk.base64ToBytes)(pk.publicKeyBase64);
+    return _ssisdkcore.base64ToBytes.call(void 0, pk.publicKeyBase64);
   } else if (pk.publicKeyHex) {
-    return (0, import_ssi_sdk.hexToBytes)(pk.publicKeyHex);
-  } else if (pk.publicKeyJwk?.crv && pk.publicKeyJwk.x && pk.publicKeyJwk.y) {
-    return (0, import_ssi_sdk.hexToBytes)(extractPublicKeyHexWithJwkSupport(pk));
+    return _ssisdkcore.hexToBytes.call(void 0, pk.publicKeyHex);
+  } else if (_optionalChain([pk, 'access', _41 => _41.publicKeyJwk, 'optionalAccess', _42 => _42.crv]) && pk.publicKeyJwk.x && pk.publicKeyJwk.y) {
+    return _ssisdkcore.hexToBytes.call(void 0, extractPublicKeyHexWithJwkSupport(pk));
   } else if (pk.publicKeyJwk && (pk.publicKeyJwk.crv === "Ed25519" || pk.publicKeyJwk.crv === "X25519") && pk.publicKeyJwk.x) {
-    return (0, import_ssi_sdk.base64ToBytes)(pk.publicKeyJwk.x);
+    return _ssisdkcore.base64ToBytes.call(void 0, pk.publicKeyJwk.x);
   }
   return new Uint8Array();
 }
@@ -365,8 +298,8 @@ __name(extractPublicKeyBytes, "extractPublicKeyBytes");
 function verificationMethodToJwk(vm) {
   let jwk = vm.publicKeyJwk;
   if (!jwk) {
-    let publicKeyHex = vm.publicKeyHex ?? (0, import_to_string.toString)(extractPublicKeyBytes(vm), "hex");
-    jwk = (0, import_ssi_sdk_ext.toJwk)(publicKeyHex, (0, import_ssi_sdk_ext.keyTypeFromCryptographicSuite)({
+    let publicKeyHex = _nullishCoalesce(vm.publicKeyHex, () => ( _tostring.toString.call(void 0, extractPublicKeyBytes(vm), "hex")));
+    jwk = _ssisdkextkeyutils.toJwk.call(void 0, publicKeyHex, _ssisdkextkeyutils.keyTypeFromCryptographicSuite.call(void 0, {
       crv: vm.type
     }));
   }
@@ -374,11 +307,11 @@ function verificationMethodToJwk(vm) {
     throw Error(`Could not convert verification method to jwk`);
   }
   jwk.kid = vm.id;
-  return (0, import_ssi_sdk_ext.sanitizedJwk)(jwk);
+  return _ssisdkextkeyutils.sanitizedJwk.call(void 0, jwk);
 }
 __name(verificationMethodToJwk, "verificationMethodToJwk");
 function didDocumentSectionToJwks(didDocumentSection, searchForVerificationMethods, verificationMethods) {
-  const jwks = new Set((searchForVerificationMethods ?? []).map((vmOrId) => typeof vmOrId === "object" ? vmOrId : verificationMethods?.find((vm) => vm.id === vmOrId)).filter(import_utils.isDefined).map((vm) => verificationMethodToJwk(vm)));
+  const jwks = new Set((_nullishCoalesce(searchForVerificationMethods, () => ( []))).map((vmOrId) => typeof vmOrId === "object" ? vmOrId : _optionalChain([verificationMethods, 'optionalAccess', _43 => _43.find, 'call', _44 => _44((vm) => vm.id === vmOrId)])).filter(_utils.isDefined).map((vm) => verificationMethodToJwk(vm)));
   return {
     didDocumentSection,
     jwks: Array.from(jwks)
@@ -400,15 +333,15 @@ function didDocumentToJwks(didDocument) {
 }
 __name(didDocumentToJwks, "didDocumentToJwks");
 async function mapIdentifierKeysToDocWithJwkSupport({ identifier, vmRelationship = "verificationMethod", didDocument }, context) {
-  const didDoc = didDocument ?? await getAgentResolver(context).resolve(identifier.did).then((result) => result.didDocument);
+  const didDoc = await _asyncNullishCoalesce(didDocument, async () => ( await getAgentResolver(context).resolve(identifier.did).then((result) => result.didDocument)));
   if (!didDoc) {
     throw Error(`Could not resolve DID ${identifier.did}`);
   }
-  const keys = didDoc ? [] : await (0, import_utils.mapIdentifierKeysToDoc)(identifier, vmRelationship, context);
+  const keys = didDoc ? [] : await _utils.mapIdentifierKeysToDoc.call(void 0, identifier, vmRelationship, context);
   const documentKeys = await dereferenceDidKeysWithJwkSupport(didDoc, vmRelationship, context);
-  const localKeys = vmRelationship === "keyAgreement" ? (0, import_utils.convertIdentifierEncryptionKeys)(identifier) : (0, import_utils.compressIdentifierSecp256k1Keys)(identifier);
+  const localKeys = vmRelationship === "keyAgreement" ? _utils.convertIdentifierEncryptionKeys.call(void 0, identifier) : _utils.compressIdentifierSecp256k1Keys.call(void 0, identifier);
   const extendedKeys = documentKeys.map((verificationMethod) => {
-    const localKey = localKeys.find((localKey2) => localKey2.publicKeyHex === verificationMethod.publicKeyHex || verificationMethod.publicKeyHex?.startsWith(localKey2.publicKeyHex) || compareBlockchainAccountId(localKey2, verificationMethod));
+    const localKey = localKeys.find((localKey2) => localKey2.publicKeyHex === verificationMethod.publicKeyHex || _optionalChain([verificationMethod, 'access', _45 => _45.publicKeyHex, 'optionalAccess', _46 => _46.startsWith, 'call', _47 => _47(localKey2.publicKeyHex)]) || compareBlockchainAccountId(localKey2, verificationMethod));
     if (localKey) {
       const { meta, ...localProps } = localKey;
       return {
@@ -421,7 +354,7 @@ async function mapIdentifierKeysToDocWithJwkSupport({ identifier, vmRelationship
     } else {
       return null;
     }
-  }).filter(import_utils.isDefined);
+  }).filter(_utils.isDefined);
   return keys.concat(extendedKeys);
 }
 __name(mapIdentifierKeysToDocWithJwkSupport, "mapIdentifierKeysToDocWithJwkSupport");
@@ -429,11 +362,11 @@ function compareBlockchainAccountId(localKey, verificationMethod) {
   if (verificationMethod.type !== "EcdsaSecp256k1RecoveryMethod2020" && verificationMethod.type !== "EcdsaSecp256k1VerificationKey2019" || localKey.type !== "Secp256k1") {
     return false;
   }
-  let vmEthAddr = (0, import_utils.getEthereumAddress)(verificationMethod);
-  if (localKey.meta?.account) {
-    return vmEthAddr === localKey.meta?.account.toLowerCase();
+  let vmEthAddr = _utils.getEthereumAddress.call(void 0, verificationMethod);
+  if (_optionalChain([localKey, 'access', _48 => _48.meta, 'optionalAccess', _49 => _49.account])) {
+    return vmEthAddr === _optionalChain([localKey, 'access', _50 => _50.meta, 'optionalAccess', _51 => _51.account, 'access', _52 => _52.toLowerCase, 'call', _53 => _53()]);
   }
-  const computedAddr = (0, import_transactions.computeAddress)("0x" + localKey.publicKeyHex).toLowerCase();
+  const computedAddr = _transactions.computeAddress.call(void 0, "0x" + localKey.publicKeyHex).toLowerCase();
   return computedAddr === vmEthAddr;
 }
 __name(compareBlockchainAccountId, "compareBlockchainAccountId");
@@ -471,9 +404,9 @@ async function getKey({ identifier, vmRelationship = "authentication", kmsKeyRef
   if (!identifier) {
     return Promise.reject(new Error(`No identifier provided to getKey method!`));
   }
-  const kmsKeyRefParts = kmsKeyRef?.split(`#`);
-  const kid = kmsKeyRefParts ? kmsKeyRefParts?.length === 2 ? kmsKeyRefParts[1] : kmsKeyRefParts[0] : void 0;
-  let identifierKey = kmsKeyRef ? identifier.keys.find((key) => key.kid === kid || key?.meta?.jwkThumbprint === kid) : void 0;
+  const kmsKeyRefParts = _optionalChain([kmsKeyRef, 'optionalAccess', _54 => _54.split, 'call', _55 => _55(`#`)]);
+  const kid = kmsKeyRefParts ? _optionalChain([kmsKeyRefParts, 'optionalAccess', _56 => _56.length]) === 2 ? kmsKeyRefParts[1] : kmsKeyRefParts[0] : void 0;
+  let identifierKey = kmsKeyRef ? identifier.keys.find((key) => key.kid === kid || _optionalChain([key, 'optionalAccess', _57 => _57.meta, 'optionalAccess', _58 => _58.jwkThumbprint]) === kid) : void 0;
   if (!identifierKey) {
     const keys = await mapIdentifierKeysToDocWithJwkSupport({
       identifier,
@@ -483,10 +416,10 @@ async function getKey({ identifier, vmRelationship = "authentication", kmsKeyRef
       throw new Error(`No keys found for verificationMethodSection: ${vmRelationship} and did ${identifier.did}`);
     }
     if (kmsKeyRef) {
-      identifierKey = keys.find((key) => key.meta.verificationMethod?.id === kmsKeyRef || kid && key.meta.verificationMethod?.id?.includes(kid));
+      identifierKey = keys.find((key) => _optionalChain([key, 'access', _59 => _59.meta, 'access', _60 => _60.verificationMethod, 'optionalAccess', _61 => _61.id]) === kmsKeyRef || kid && _optionalChain([key, 'access', _62 => _62.meta, 'access', _63 => _63.verificationMethod, 'optionalAccess', _64 => _64.id, 'optionalAccess', _65 => _65.includes, 'call', _66 => _66(kid)]));
     }
     if (!identifierKey) {
-      identifierKey = keys.find((key) => key.meta.verificationMethod?.type === vmRelationship || key.meta.purposes?.includes(vmRelationship));
+      identifierKey = keys.find((key) => _optionalChain([key, 'access', _67 => _67.meta, 'access', _68 => _68.verificationMethod, 'optionalAccess', _69 => _69.type]) === vmRelationship || _optionalChain([key, 'access', _70 => _70.meta, 'access', _71 => _71.purposes, 'optionalAccess', _72 => _72.includes, 'call', _73 => _73(vmRelationship)]));
     }
     if (!identifierKey) {
       identifierKey = keys[0];
@@ -508,8 +441,8 @@ async function legacyGetIdentifier({ identifier }, context) {
 }
 __name(legacyGetIdentifier, "legacyGetIdentifier");
 async function determineKid({ key, idOpts }, context) {
-  if (key.meta?.verificationMethod?.id) {
-    return key.meta?.verificationMethod?.id;
+  if (_optionalChain([key, 'access', _74 => _74.meta, 'optionalAccess', _75 => _75.verificationMethod, 'optionalAccess', _76 => _76.id])) {
+    return _optionalChain([key, 'access', _77 => _77.meta, 'optionalAccess', _78 => _78.verificationMethod, 'optionalAccess', _79 => _79.id]);
   }
   const identifier = await legacyGetIdentifier(idOpts, context);
   const mappedKeys = await mapIdentifierKeysToDocWithJwkSupport({
@@ -518,13 +451,13 @@ async function determineKid({ key, idOpts }, context) {
   }, context);
   const vmKey = mappedKeys.find((extendedKey) => extendedKey.kid === key.kid);
   if (vmKey) {
-    return vmKey.meta?.verificationMethod?.id ?? vmKey.meta?.jwkThumbprint ?? idOpts.kmsKeyRef ?? vmKey.kid;
+    return _nullishCoalesce(_nullishCoalesce(_nullishCoalesce(_optionalChain([vmKey, 'access', _80 => _80.meta, 'optionalAccess', _81 => _81.verificationMethod, 'optionalAccess', _82 => _82.id]), () => ( _optionalChain([vmKey, 'access', _83 => _83.meta, 'optionalAccess', _84 => _84.jwkThumbprint]))), () => ( idOpts.kmsKeyRef)), () => ( vmKey.kid));
   }
-  return key.meta?.jwkThumbprint ?? idOpts.kmsKeyRef ?? key.kid;
+  return _nullishCoalesce(_nullishCoalesce(_optionalChain([key, 'access', _85 => _85.meta, 'optionalAccess', _86 => _86.jwkThumbprint]), () => ( idOpts.kmsKeyRef)), () => ( key.kid));
 }
 __name(determineKid, "determineKid");
 async function getSupportedDIDMethods(didOpts, context) {
-  return didOpts.supportedDIDMethods ?? await getAgentDIDMethods(context);
+  return await _asyncNullishCoalesce(didOpts.supportedDIDMethods, async () => ( await getAgentDIDMethods(context)));
 }
 __name(getSupportedDIDMethods, "getSupportedDIDMethods");
 function getAgentResolver(context, opts) {
@@ -535,15 +468,15 @@ var AgentDIDResolver = class {
   static {
     __name(this, "AgentDIDResolver");
   }
-  context;
-  resolverResolution;
-  uniresolverResolution;
-  localResolution;
+  
+  
+  
+  
   constructor(context, opts) {
     this.context = context;
-    this.resolverResolution = opts?.resolverResolution !== false;
-    this.uniresolverResolution = opts?.uniresolverResolution !== false;
-    this.localResolution = opts?.localResolution !== false;
+    this.resolverResolution = _optionalChain([opts, 'optionalAccess', _87 => _87.resolverResolution]) !== false;
+    this.uniresolverResolution = _optionalChain([opts, 'optionalAccess', _88 => _88.uniresolverResolution]) !== false;
+    this.localResolution = _optionalChain([opts, 'optionalAccess', _89 => _89.localResolution]) !== false;
   }
   async resolve(didUrl, options) {
     let resolutionResult;
@@ -601,7 +534,7 @@ var AgentDIDResolver = class {
     }
     if (!resolutionResult && this.uniresolverResolution) {
       console.log(`Using universal resolver resolution for did ${didUrl} `);
-      resolutionResult = await new import_did_uni_client.UniResolver().resolve(didUrl, options);
+      resolutionResult = await new (0, _diduniclient.UniResolver)().resolve(didUrl, options);
       if (!origResolutionResult) {
         origResolutionResult = resolutionResult;
       }
@@ -615,13 +548,13 @@ var AgentDIDResolver = class {
     if (!resolutionResult && !origResolutionResult) {
       throw `Could not resolve ${didUrl}. Resolutions tried: online: ${this.resolverResolution}, local: ${this.localResolution}, uni resolver: ${this.uniresolverResolution}`;
     }
-    return resolutionResult ?? origResolutionResult;
+    return _nullishCoalesce(resolutionResult, () => ( origResolutionResult));
   }
 };
 function toDidDocument(identifier, opts) {
   let didDocument = void 0;
   if (identifier) {
-    const did = identifier.did ?? opts?.did;
+    const did = _nullishCoalesce(identifier.did, () => ( _optionalChain([opts, 'optionalAccess', _90 => _90.did])));
     didDocument = {
       "@context": "https://www.w3.org/ns/did/v1",
       id: did,
@@ -629,48 +562,48 @@ function toDidDocument(identifier, opts) {
         const vm = {
           controller: did,
           id: key.kid.startsWith(did) && key.kid.includes("#") ? key.kid : `${did}#${key.kid}`,
-          publicKeyJwk: (0, import_ssi_sdk_ext.toJwk)(key.publicKeyHex, key.type, {
-            use: import_ssi_sdk_ext.ENC_KEY_ALGS.includes(key.type) ? import_ssi_sdk_ext.JwkKeyUse.Encryption : import_ssi_sdk_ext.JwkKeyUse.Signature,
+          publicKeyJwk: _ssisdkextkeyutils.toJwk.call(void 0, key.publicKeyHex, key.type, {
+            use: _ssisdkextkeyutils.ENC_KEY_ALGS.includes(key.type) ? _ssisdkextkeyutils.JwkKeyUse.Encryption : _ssisdkextkeyutils.JwkKeyUse.Signature,
             key
           }),
           type: "JsonWebKey2020"
         };
         return vm;
       }),
-      ...(opts?.use === void 0 || opts?.use?.includes(import_ssi_sdk_ext.JwkKeyUse.Signature)) && identifier.keys && {
-        assertionMethod: identifier.keys.filter((key) => key?.meta?.purpose === void 0 || key?.meta?.purpose === "assertionMethod" || key?.meta?.purposes?.includes("assertionMethod")).map((key) => {
+      ...(_optionalChain([opts, 'optionalAccess', _91 => _91.use]) === void 0 || _optionalChain([opts, 'optionalAccess', _92 => _92.use, 'optionalAccess', _93 => _93.includes, 'call', _94 => _94(_ssisdkextkeyutils.JwkKeyUse.Signature)])) && identifier.keys && {
+        assertionMethod: identifier.keys.filter((key) => _optionalChain([key, 'optionalAccess', _95 => _95.meta, 'optionalAccess', _96 => _96.purpose]) === void 0 || _optionalChain([key, 'optionalAccess', _97 => _97.meta, 'optionalAccess', _98 => _98.purpose]) === "assertionMethod" || _optionalChain([key, 'optionalAccess', _99 => _99.meta, 'optionalAccess', _100 => _100.purposes, 'optionalAccess', _101 => _101.includes, 'call', _102 => _102("assertionMethod")])).map((key) => {
           if (key.kid.startsWith(did) && key.kid.includes("#")) {
             return key.kid;
           }
           return `${did}#${key.kid}`;
         })
       },
-      ...(opts?.use === void 0 || opts?.use?.includes(import_ssi_sdk_ext.JwkKeyUse.Signature)) && identifier.keys && {
-        authentication: identifier.keys.filter((key) => key?.meta?.purpose === void 0 || key?.meta?.purpose === "authentication" || key?.meta?.purposes?.includes("authentication")).map((key) => {
+      ...(_optionalChain([opts, 'optionalAccess', _103 => _103.use]) === void 0 || _optionalChain([opts, 'optionalAccess', _104 => _104.use, 'optionalAccess', _105 => _105.includes, 'call', _106 => _106(_ssisdkextkeyutils.JwkKeyUse.Signature)])) && identifier.keys && {
+        authentication: identifier.keys.filter((key) => _optionalChain([key, 'optionalAccess', _107 => _107.meta, 'optionalAccess', _108 => _108.purpose]) === void 0 || _optionalChain([key, 'optionalAccess', _109 => _109.meta, 'optionalAccess', _110 => _110.purpose]) === "authentication" || _optionalChain([key, 'optionalAccess', _111 => _111.meta, 'optionalAccess', _112 => _112.purposes, 'optionalAccess', _113 => _113.includes, 'call', _114 => _114("authentication")])).map((key) => {
           if (key.kid.startsWith(did) && key.kid.includes("#")) {
             return key.kid;
           }
           return `${did}#${key.kid}`;
         })
       },
-      ...(opts?.use === void 0 || opts?.use?.includes(import_ssi_sdk_ext.JwkKeyUse.Encryption)) && identifier.keys && {
-        keyAgreement: identifier.keys.filter((key) => key.type === "X25519" || key?.meta?.purpose === "keyAgreement" || key?.meta?.purposes?.includes("keyAgreement")).map((key) => {
+      ...(_optionalChain([opts, 'optionalAccess', _115 => _115.use]) === void 0 || _optionalChain([opts, 'optionalAccess', _116 => _116.use, 'optionalAccess', _117 => _117.includes, 'call', _118 => _118(_ssisdkextkeyutils.JwkKeyUse.Encryption)])) && identifier.keys && {
+        keyAgreement: identifier.keys.filter((key) => key.type === "X25519" || _optionalChain([key, 'optionalAccess', _119 => _119.meta, 'optionalAccess', _120 => _120.purpose]) === "keyAgreement" || _optionalChain([key, 'optionalAccess', _121 => _121.meta, 'optionalAccess', _122 => _122.purposes, 'optionalAccess', _123 => _123.includes, 'call', _124 => _124("keyAgreement")])).map((key) => {
           if (key.kid.startsWith(did) && key.kid.includes("#")) {
             return key.kid;
           }
           return `${did}#${key.kid}`;
         })
       },
-      ...(opts?.use === void 0 || opts?.use?.includes(import_ssi_sdk_ext.JwkKeyUse.Encryption)) && identifier.keys && {
-        capabilityInvocation: identifier.keys.filter((key) => key.type === "X25519" || key?.meta?.purpose === "capabilityInvocation" || key?.meta?.purposes?.includes("capabilityInvocation")).map((key) => {
+      ...(_optionalChain([opts, 'optionalAccess', _125 => _125.use]) === void 0 || _optionalChain([opts, 'optionalAccess', _126 => _126.use, 'optionalAccess', _127 => _127.includes, 'call', _128 => _128(_ssisdkextkeyutils.JwkKeyUse.Encryption)])) && identifier.keys && {
+        capabilityInvocation: identifier.keys.filter((key) => key.type === "X25519" || _optionalChain([key, 'optionalAccess', _129 => _129.meta, 'optionalAccess', _130 => _130.purpose]) === "capabilityInvocation" || _optionalChain([key, 'optionalAccess', _131 => _131.meta, 'optionalAccess', _132 => _132.purposes, 'optionalAccess', _133 => _133.includes, 'call', _134 => _134("capabilityInvocation")])).map((key) => {
           if (key.kid.startsWith(did) && key.kid.includes("#")) {
             return key.kid;
           }
           return `${did}#${key.kid}`;
         })
       },
-      ...(opts?.use === void 0 || opts?.use?.includes(import_ssi_sdk_ext.JwkKeyUse.Encryption)) && identifier.keys && {
-        capabilityDelegation: identifier.keys.filter((key) => key.type === "X25519" || key?.meta?.purpose === "capabilityDelegation" || key?.meta?.purposes?.includes("capabilityDelegation")).map((key) => {
+      ...(_optionalChain([opts, 'optionalAccess', _135 => _135.use]) === void 0 || _optionalChain([opts, 'optionalAccess', _136 => _136.use, 'optionalAccess', _137 => _137.includes, 'call', _138 => _138(_ssisdkextkeyutils.JwkKeyUse.Encryption)])) && identifier.keys && {
+        capabilityDelegation: identifier.keys.filter((key) => key.type === "X25519" || _optionalChain([key, 'optionalAccess', _139 => _139.meta, 'optionalAccess', _140 => _140.purpose]) === "capabilityDelegation" || _optionalChain([key, 'optionalAccess', _141 => _141.meta, 'optionalAccess', _142 => _142.purposes, 'optionalAccess', _143 => _143.includes, 'call', _144 => _144("capabilityDelegation")])).map((key) => {
           if (key.kid.startsWith(did) && key.kid.includes("#")) {
             return key.kid;
           }
@@ -686,7 +619,7 @@ function toDidDocument(identifier, opts) {
 }
 __name(toDidDocument, "toDidDocument");
 function toDidResolutionResult(identifier, opts) {
-  const didDocument = toDidDocument(identifier, opts) ?? null;
+  const didDocument = _nullishCoalesce(toDidDocument(identifier, opts), () => ( null));
   const resolutionResult = {
     "@context": "https://w3id.org/did-resolution/v1",
     didDocument,
@@ -694,13 +627,13 @@ function toDidResolutionResult(identifier, opts) {
       ...!didDocument && {
         error: "notFound"
       },
-      ...Array.isArray(opts?.supportedMethods) && identifier && !opts?.supportedMethods.includes(identifier.provider.replace("did:", "")) && {
+      ...Array.isArray(_optionalChain([opts, 'optionalAccess', _145 => _145.supportedMethods])) && identifier && !_optionalChain([opts, 'optionalAccess', _146 => _146.supportedMethods, 'access', _147 => _147.includes, 'call', _148 => _148(identifier.provider.replace("did:", ""))]) && {
         error: "unsupportedDidMethod"
       }
     },
     didDocumentMetadata: {
-      ...identifier?.alias && {
-        equivalentId: identifier?.alias
+      ..._optionalChain([identifier, 'optionalAccess', _149 => _149.alias]) && {
+        equivalentId: _optionalChain([identifier, 'optionalAccess', _150 => _150.alias])
       }
     }
   };
@@ -727,7 +660,7 @@ var signDidJWT = /* @__PURE__ */ __name(async (args) => {
       context
     })
   };
-  return (0, import_did_jwt.createJWT)(payload, jwtOptions, header);
+  return _didjwt.createJWT.call(void 0, payload, jwtOptions, header);
 }, "signDidJWT");
 var getDidSigner = /* @__PURE__ */ __name(async (args) => {
   const { idOpts, context } = args;
@@ -737,7 +670,7 @@ var getDidSigner = /* @__PURE__ */ __name(async (args) => {
     vmRelationship: idOpts.verificationMethodSection,
     kmsKeyRef: idOpts.kmsKeyRef
   }, context);
-  const algorithm = await (0, import_ssi_sdk_ext.signatureAlgorithmFromKey)({
+  const algorithm = await _ssisdkextkeyutils.signatureAlgorithmFromKey.call(void 0, {
     key
   });
   return async (data) => {
@@ -749,4 +682,40 @@ var getDidSigner = /* @__PURE__ */ __name(async (args) => {
     });
   };
 }, "getDidSigner");
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+exports.AgentDIDResolver = AgentDIDResolver; exports.DID_PREFIX = DID_PREFIX; exports.IdentifierAliasEnum = IdentifierAliasEnum; exports.SupportedDidMethodEnum = SupportedDidMethodEnum; exports.asDidWeb = asDidWeb; exports.createIdentifier = createIdentifier; exports.dereferenceDidKeysWithJwkSupport = dereferenceDidKeysWithJwkSupport; exports.determineKid = determineKid; exports.didDocumentToJwks = didDocumentToJwks; exports.extractPublicKeyHex = extractPublicKeyHex; exports.extractPublicKeyHexWithJwkSupport = extractPublicKeyHexWithJwkSupport; exports.getAgentDIDMethods = getAgentDIDMethods; exports.getAgentResolver = getAgentResolver; exports.getAuthenticationKey = getAuthenticationKey; exports.getControllerKey = getControllerKey; exports.getDID = getDID; exports.getDidSigner = getDidSigner; exports.getEthereumAddressFromKey = getEthereumAddressFromKey; exports.getFirstKeyWithRelation = getFirstKeyWithRelation; exports.getFirstKeyWithRelationFromDIDDoc = getFirstKeyWithRelationFromDIDDoc; exports.getKey = getKey; exports.getKeys = getKeys; exports.getOrCreatePrimaryIdentifier = getOrCreatePrimaryIdentifier; exports.getPrimaryIdentifier = getPrimaryIdentifier; exports.getSupportedDIDMethods = getSupportedDIDMethods; exports.isEvenHexString = isEvenHexString; exports.jwkTtoPublicKeyHex = jwkTtoPublicKeyHex; exports.mapIdentifierKeysToDocWithJwkSupport = mapIdentifierKeysToDocWithJwkSupport; exports.signDidJWT = signDidJWT; exports.toDID = toDID; exports.toDIDs = toDIDs; exports.toDidDocument = toDidDocument; exports.toDidResolutionResult = toDidResolutionResult; exports.verificationMethodToJwk = verificationMethodToJwk;
 //# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/did-functions.ts","../src/types.ts"],"sourcesContent":["export * from './did-functions'\nexport * from './types'\n","import { computeAddress } from '@ethersproject/transactions'\nimport { UniResolver } from '@sphereon/did-uni-client'\nimport {\n  ENC_KEY_ALGS,\n  getKms,\n  JwkKeyUse,\n  keyTypeFromCryptographicSuite,\n  sanitizedJwk,\n  signatureAlgorithmFromKey,\n  TKeyType,\n  toJwk,\n} from '@sphereon/ssi-sdk-ext.key-utils'\nimport { base64ToHex, hexKeyFromPEMBasedJwk } from '@sphereon/ssi-sdk-ext.x509-utils'\nimport { base58ToBytes, base64ToBytes, bytesToHex, hexToBytes, multibaseKeyToBytes } from '@sphereon/ssi-sdk.core'\nimport { JWK } from '@sphereon/ssi-types'\nimport { convertPublicKeyToX25519 } from '@stablelib/ed25519'\nimport { DIDDocument, DIDDocumentSection, DIDResolutionResult, IAgentContext, IDIDManager, IIdentifier, IKey, IResolver } from '@veramo/core'\nimport {\n  _ExtendedIKey,\n  _ExtendedVerificationMethod,\n  _NormalizedVerificationMethod,\n  compressIdentifierSecp256k1Keys,\n  convertIdentifierEncryptionKeys,\n  getEthereumAddress,\n  isDefined,\n  mapIdentifierKeysToDoc,\n} from '@veramo/utils'\nimport { createJWT, Signer } from 'did-jwt'\nimport { DIDResolutionOptions, JsonWebKey, Resolvable, VerificationMethod } from 'did-resolver'\n// @ts-ignore\nimport elliptic from 'elliptic'\n// @ts-ignore\nimport { fromString } from 'uint8arrays/from-string'\n// @ts-ignore\nimport { toString } from 'uint8arrays/to-string'\nimport {\n  CreateIdentifierOpts,\n  CreateOrGetIdentifierOpts,\n  DID_PREFIX,\n  GetOrCreateResult,\n  GetSignerArgs,\n  IdentifierAliasEnum,\n  IdentifierProviderOpts,\n  IDIDOptions,\n  SignJwtArgs,\n  SupportedDidMethodEnum,\n} from './types'\n\nexport const getAuthenticationKey = async (\n  {\n    identifier,\n    offlineWhenNoDIDRegistered,\n    noVerificationMethodFallback,\n    keyType,\n    controllerKey,\n  }: {\n    identifier: IIdentifier\n    keyType?: TKeyType\n    offlineWhenNoDIDRegistered?: boolean\n    noVerificationMethodFallback?: boolean\n    controllerKey?: boolean\n  },\n  context: IAgentContext<IResolver & IDIDManager>\n): Promise<_ExtendedIKey> => {\n  return await getFirstKeyWithRelation(\n    {\n      identifier,\n      offlineWhenNoDIDRegistered,\n      noVerificationMethodFallback,\n      keyType,\n      controllerKey,\n      vmRelationship: 'authentication',\n    },\n    context\n  )\n}\nexport const getFirstKeyWithRelation = async (\n  {\n    identifier,\n    offlineWhenNoDIDRegistered,\n    noVerificationMethodFallback,\n    keyType,\n    controllerKey,\n    vmRelationship,\n  }: {\n    identifier: IIdentifier\n    keyType?: TKeyType\n    offlineWhenNoDIDRegistered?: boolean\n    noVerificationMethodFallback?: boolean\n    controllerKey?: boolean\n    vmRelationship: DIDDocumentSection\n  },\n  context: IAgentContext<IResolver & IDIDManager>\n): Promise<_ExtendedIKey> => {\n  let key: _ExtendedIKey | undefined = undefined\n  try {\n    key =\n      (await getFirstKeyWithRelationFromDIDDoc(\n        {\n          identifier,\n          vmRelationship,\n          errorOnNotFound: false,\n          keyType,\n          controllerKey,\n        },\n        context\n      )) ??\n      (noVerificationMethodFallback || vmRelationship === 'verificationMethod' // let's not fallback to the same value again\n        ? undefined\n        : await getFirstKeyWithRelationFromDIDDoc(\n            {\n              identifier,\n              vmRelationship: 'verificationMethod',\n              errorOnNotFound: false,\n              keyType,\n              controllerKey,\n            },\n            context\n          ))\n  } catch (e) {\n    if (e instanceof Error) {\n      if (!e.message.includes('404') || !offlineWhenNoDIDRegistered) {\n        throw e\n      }\n    } else {\n      throw e\n    }\n  }\n  if (!key && offlineWhenNoDIDRegistered) {\n    const offlineDID = toDidDocument(identifier)\n    key =\n      (await getFirstKeyWithRelationFromDIDDoc(\n        {\n          identifier,\n          vmRelationship,\n          errorOnNotFound: false,\n          didDocument: offlineDID,\n          keyType,\n          controllerKey,\n        },\n        context\n      )) ??\n      (noVerificationMethodFallback || vmRelationship === 'verificationMethod' // let's not fallback to the same value again\n        ? undefined\n        : await getFirstKeyWithRelationFromDIDDoc(\n            {\n              identifier,\n              vmRelationship: 'verificationMethod',\n              errorOnNotFound: false,\n              didDocument: offlineDID,\n              keyType,\n              controllerKey,\n            },\n            context\n          ))\n    if (!key) {\n      key = identifier.keys\n        .map((key) => key as _ExtendedIKey)\n        .filter((key) => keyType === undefined || key.type === keyType || (controllerKey && key.kid === identifier.controllerKeyId))\n        .find((key) => key.meta.verificationMethod?.type.includes('authentication') || key.meta.purposes?.includes('authentication'))\n    }\n  }\n  if (!key) {\n    throw Error(`Could not find authentication key for DID ${identifier.did}`)\n  }\n  return key\n}\n\nexport const getOrCreatePrimaryIdentifier = async (\n  context: IAgentContext<IDIDManager>,\n  opts?: CreateOrGetIdentifierOpts\n): Promise<GetOrCreateResult<IIdentifier>> => {\n  const primaryIdentifier = await getPrimaryIdentifier(context, { ...opts?.createOpts?.options, ...(opts?.method && { method: opts.method }) })\n  if (primaryIdentifier !== undefined) {\n    return {\n      created: false,\n      result: primaryIdentifier,\n    }\n  }\n\n  if (opts?.method === SupportedDidMethodEnum.DID_KEY) {\n    const createOpts = opts?.createOpts ?? {}\n    createOpts.options = { codecName: 'EBSI', type: 'Secp256r1', ...createOpts }\n    opts.createOpts = createOpts\n  }\n  const createdIdentifier = await createIdentifier(context, opts)\n  return {\n    created: true,\n    result: createdIdentifier,\n  }\n}\n\nexport const getPrimaryIdentifier = async (context: IAgentContext<IDIDManager>, opts?: IdentifierProviderOpts): Promise<IIdentifier | undefined> => {\n  const identifiers = (await context.agent.didManagerFind(opts?.method ? { provider: `${DID_PREFIX}${opts?.method}` } : {})).filter(\n    (identifier: IIdentifier) => opts?.type === undefined || identifier.keys.some((key: IKey) => key.type === opts?.type)\n  )\n\n  return identifiers && identifiers.length > 0 ? identifiers[0] : undefined\n}\n\nexport const createIdentifier = async (context: IAgentContext<IDIDManager>, opts?: CreateIdentifierOpts): Promise<IIdentifier> => {\n  return await context.agent.didManagerCreate({\n    kms: await getKms(context, opts?.createOpts?.kms),\n    ...(opts?.method && { provider: `${DID_PREFIX}${opts?.method}` }),\n    alias: opts?.createOpts?.alias ?? `${IdentifierAliasEnum.PRIMARY}-${opts?.method}-${opts?.createOpts?.options?.type}-${new Date().getTime()}`,\n    options: opts?.createOpts?.options,\n  })\n}\n\nexport const getFirstKeyWithRelationFromDIDDoc = async (\n  {\n    identifier,\n    vmRelationship = 'verificationMethod',\n    keyType,\n    errorOnNotFound = false,\n    didDocument,\n    controllerKey,\n  }: {\n    identifier: IIdentifier\n    controllerKey?: boolean\n    vmRelationship?: DIDDocumentSection\n    keyType?: TKeyType\n    errorOnNotFound?: boolean\n    didDocument?: DIDDocument\n  },\n  context: IAgentContext<IResolver & IDIDManager>\n): Promise<_ExtendedIKey | undefined> => {\n  const matchedKeys = await mapIdentifierKeysToDocWithJwkSupport({ identifier, vmRelationship, didDocument }, context)\n  if (Array.isArray(matchedKeys) && matchedKeys.length > 0) {\n    const result = matchedKeys.find(\n      (key) => keyType === undefined || key.type === keyType || (controllerKey && key.kid === identifier.controllerKeyId)\n    )\n    if (result) {\n      return result\n    }\n  }\n  if (errorOnNotFound) {\n    throw new Error(\n      `Could not find key with relationship ${vmRelationship} in DID document for ${identifier.did}${keyType ? ' and key type: ' + keyType : ''}`\n    )\n  }\n  return undefined\n}\n\nexport const getEthereumAddressFromKey = ({ key }: { key: IKey }) => {\n  if (key.type !== 'Secp256k1') {\n    throw Error(`Can only get ethereum address from a Secp256k1 key. Type is ${key.type} for keyRef: ${key.kid}`)\n  }\n  const ethereumAddress = key.meta?.ethereumAddress ?? key.meta?.account?.toLowerCase() ?? computeAddress(`0x${key.publicKeyHex}`).toLowerCase()\n  if (!ethereumAddress) {\n    throw Error(`Could not get or generate ethereum address from key with keyRef ${key.kid}`)\n  }\n  return ethereumAddress\n}\n\nexport const getControllerKey = ({ identifier }: { identifier: IIdentifier }) => {\n  const key = identifier.keys.find((key) => key.kid === identifier.controllerKeyId)\n  if (!key) {\n    throw Error(`Could not get controller key for identifier ${identifier}`)\n  }\n  return key\n}\n\nexport const getKeys = ({\n  jwkThumbprint,\n  kms,\n  identifier,\n  kmsKeyRef,\n  keyType,\n  controllerKey,\n}: {\n  identifier: IIdentifier\n  kmsKeyRef?: string\n  keyType?: TKeyType\n  kms?: string\n  jwkThumbprint?: string\n  controllerKey?: boolean\n}) => {\n  return identifier.keys\n    .filter((key) => !keyType || key.type === keyType)\n    .filter((key) => !kms || key.kms === kms)\n    .filter((key) => !kmsKeyRef || key.kid === kmsKeyRef)\n    .filter((key) => !jwkThumbprint || key.meta?.jwkThumbprint === jwkThumbprint)\n    .filter((key) => !controllerKey || identifier.controllerKeyId === key.kid)\n}\n\n//TODO: Move to ssi-sdk/core and create PR upstream\n/**\n * Dereferences keys from DID document and normalizes them for easy comparison.\n *\n * When dereferencing keyAgreement keys, only Ed25519 and X25519 curves are supported.\n * Other key types are omitted from the result and Ed25519 keys are converted to X25519\n *\n * @returns a Promise that resolves to the list of dereferenced keys.\n *\n * @beta This API may change without a BREAKING CHANGE notice.\n */\nexport async function dereferenceDidKeysWithJwkSupport(\n  didDocument: DIDDocument,\n  section: DIDDocumentSection = 'keyAgreement',\n  context: IAgentContext<IResolver>\n): Promise<_NormalizedVerificationMethod[]> {\n  const convert = section === 'keyAgreement'\n  if (section === 'service') {\n    return []\n  }\n  return (\n    await Promise.all(\n      (didDocument[section] || []).map(async (key: string | VerificationMethod) => {\n        if (typeof key === 'string') {\n          try {\n            return (await context.agent.getDIDComponentById({\n              didDocument,\n              didUrl: key,\n              section,\n            })) as _ExtendedVerificationMethod\n          } catch (e) {\n            return null\n          }\n        } else {\n          return key as _ExtendedVerificationMethod\n        }\n      })\n    )\n  )\n    .filter(isDefined)\n    .map((key) => {\n      const hexKey = extractPublicKeyHexWithJwkSupport(key, convert)\n      const { publicKeyHex, publicKeyBase58, publicKeyBase64, publicKeyJwk, ...keyProps } = key\n      const newKey = { ...keyProps, publicKeyHex: hexKey }\n      if (convert && 'Ed25519VerificationKey2018' === newKey.type) {\n        newKey.type = 'X25519KeyAgreementKey2019'\n      }\n      return newKey\n    })\n}\n\nexport function jwkTtoPublicKeyHex(jwk: JWK): string {\n  // todo: Hacky way to convert this to a VM. Should extract the logic from the below methods\n  // @ts-ignore\n  const vm: _ExtendedVerificationMethod = {\n    publicKeyJwk: sanitizedJwk(jwk),\n  }\n  return extractPublicKeyHexWithJwkSupport(vm)\n}\n\n/**\n * Converts the publicKey of a VerificationMethod to hex encoding (publicKeyHex)\n *\n * @param pk - the VerificationMethod to be converted\n * @param convert - when this flag is set to true, Ed25519 keys are converted to their X25519 pairs\n * @returns the hex encoding of the public key\n *\n * @beta This API may change without a BREAKING CHANGE notice.\n */\nexport function extractPublicKeyHexWithJwkSupport(pk: _ExtendedVerificationMethod, convert = false): string {\n  if (pk.publicKeyJwk) {\n    const jwk = sanitizedJwk(pk.publicKeyJwk)\n    if (jwk.kty === 'EC') {\n      const curve = jwk.crv ? toEcLibCurve(jwk.crv) : 'p256'\n      const xHex = base64ToHex(jwk.x!, 'base64url')\n      const yHex = base64ToHex(jwk.y!, 'base64url')\n      const prefix = '04' // isEven(yHex) ? '02' : '03'\n      // Uncompressed Hex format: 04<x><y>\n      // Compressed Hex format: 02<x> (for even y) or 03<x> (for uneven y)\n      const hex = `${prefix}${xHex}${yHex}`\n      try {\n        const ec = new elliptic.ec(curve)\n        // We return directly as we don't want to convert the result back into Uint8Array and then convert again to hex as the elliptic lib already returns hex strings\n        const publicKeyHex = ec.keyFromPublic(hex, 'hex').getPublic(true, 'hex')\n        // This returns a short form (x) with 02 or 03 prefix\n        return publicKeyHex\n      } catch (error: any) {\n        console.error(`Error converting EC with elliptic lib curve ${curve} from JWK to hex. x: ${jwk.x}, y: ${jwk.y}, error: ${error}`, error)\n      }\n    } else if (jwk.crv === 'Ed25519') {\n      return toString(fromString(jwk.x!, 'base64url'), 'base16')\n    } else if (jwk.kty === 'RSA') {\n      return hexKeyFromPEMBasedJwk(jwk, 'public')\n    }\n  }\n  // delegate the other types to the original Veramo function\n  return extractPublicKeyHex(pk, convert)\n}\n\nexport function isEvenHexString(hex: string) {\n  const lastChar = hex[hex.length - 1].toLowerCase()\n  return ['0', '2', '4', '6', '8', 'a', 'c', 'e'].includes(lastChar)\n}\n\ninterface LegacyVerificationMethod extends VerificationMethod {\n  publicKeyBase64: string\n}\n\n/**\n * Converts the publicKey of a VerificationMethod to hex encoding (publicKeyHex)\n *\n * @param pk - the VerificationMethod to be converted\n * @param convert - when this flag is set to true, Ed25519 keys are converted to their X25519 pairs\n * @returns the hex encoding of the public key\n *\n * @beta This API may change without a BREAKING CHANGE notice.\n */\nexport function extractPublicKeyHex(pk: _ExtendedVerificationMethod, convert: boolean = false): string {\n  let keyBytes = extractPublicKeyBytes(pk)\n  const jwk = pk.publicKeyJwk ? sanitizedJwk(pk.publicKeyJwk) : undefined\n  if (convert) {\n    if (\n      ['Ed25519', 'Ed25519VerificationKey2018', 'Ed25519VerificationKey2020'].includes(pk.type) ||\n      (pk.type === 'JsonWebKey2020' && jwk?.crv === 'Ed25519')\n    ) {\n      keyBytes = convertPublicKeyToX25519(keyBytes)\n    } else if (\n      !['X25519', 'X25519KeyAgreementKey2019', 'X25519KeyAgreementKey2020'].includes(pk.type) &&\n      !(pk.type === 'JsonWebKey2020' && jwk?.crv === 'X25519')\n    ) {\n      return ''\n    }\n  }\n  return bytesToHex(keyBytes)\n}\n\nfunction toEcLibCurve(input: string) {\n  return input.toLowerCase().replace('-', '').replace('_', '')\n}\n\nfunction extractPublicKeyBytes(pk: VerificationMethod): Uint8Array {\n  if (pk.publicKeyBase58) {\n    return base58ToBytes(pk.publicKeyBase58)\n  } else if (pk.publicKeyMultibase) {\n    return multibaseKeyToBytes(pk.publicKeyMultibase)\n  } else if ((<LegacyVerificationMethod>pk).publicKeyBase64) {\n    return base64ToBytes((<LegacyVerificationMethod>pk).publicKeyBase64)\n  } else if (pk.publicKeyHex) {\n    return hexToBytes(pk.publicKeyHex)\n  } else if (pk.publicKeyJwk?.crv && pk.publicKeyJwk.x && pk.publicKeyJwk.y) {\n    return hexToBytes(extractPublicKeyHexWithJwkSupport(pk))\n  } else if (pk.publicKeyJwk && (pk.publicKeyJwk.crv === 'Ed25519' || pk.publicKeyJwk.crv === 'X25519') && pk.publicKeyJwk.x) {\n    return base64ToBytes(pk.publicKeyJwk.x)\n  }\n  return new Uint8Array()\n}\n\nexport function verificationMethodToJwk(vm: VerificationMethod): JWK {\n  let jwk: JWK | undefined = vm.publicKeyJwk as JWK\n  if (!jwk) {\n    let publicKeyHex = vm.publicKeyHex ?? toString(extractPublicKeyBytes(vm), 'hex')\n    jwk = toJwk(publicKeyHex, keyTypeFromCryptographicSuite({ crv: vm.type }))\n  }\n  if (!jwk) {\n    throw Error(`Could not convert verification method to jwk`)\n  }\n  jwk.kid = vm.id\n  return sanitizedJwk(jwk)\n}\n\nfunction didDocumentSectionToJwks(\n  didDocumentSection: DIDDocumentSection,\n  searchForVerificationMethods?: (VerificationMethod | string)[],\n  verificationMethods?: VerificationMethod[]\n) {\n  const jwks = new Set(\n    (searchForVerificationMethods ?? [])\n      .map((vmOrId) => (typeof vmOrId === 'object' ? vmOrId : verificationMethods?.find((vm) => vm.id === vmOrId)))\n      .filter(isDefined)\n      .map((vm) => verificationMethodToJwk(vm))\n  )\n  return { didDocumentSection, jwks: Array.from(jwks) }\n}\n\nexport type DidDocumentJwks = Record<Exclude<DIDDocumentSection, 'publicKey' | 'service'>, Array<JWK>>\n\nexport function didDocumentToJwks(didDocument: DIDDocument): DidDocumentJwks {\n  return {\n    verificationMethod: [\n      ...didDocumentSectionToJwks('publicKey', didDocument.publicKey, didDocument.verificationMethod).jwks, // legacy support\n      ...didDocumentSectionToJwks('verificationMethod', didDocument.verificationMethod, didDocument.verificationMethod).jwks,\n    ],\n    assertionMethod: didDocumentSectionToJwks('assertionMethod', didDocument.assertionMethod, didDocument.verificationMethod).jwks,\n    authentication: didDocumentSectionToJwks('authentication', didDocument.authentication, didDocument.verificationMethod).jwks,\n    keyAgreement: didDocumentSectionToJwks('keyAgreement', didDocument.keyAgreement, didDocument.verificationMethod).jwks,\n    capabilityInvocation: didDocumentSectionToJwks('capabilityInvocation', didDocument.capabilityInvocation, didDocument.verificationMethod).jwks,\n    capabilityDelegation: didDocumentSectionToJwks('capabilityDelegation', didDocument.capabilityDelegation, didDocument.verificationMethod).jwks,\n  }\n}\n\n/**\n * Maps the keys of a locally managed {@link @veramo/core#IIdentifier | IIdentifier} to the corresponding\n * {@link did-resolver#VerificationMethod | VerificationMethod} entries from the DID document.\n *\n * @param identifier - the identifier to be mapped\n * @param section - the section of the DID document to be mapped (see\n *   {@link https://www.w3.org/TR/did-core/#verification-relationships | verification relationships}), but can also be\n *   `verificationMethod` to map all the keys.\n * @param didDocument\n * @param context - the veramo agent context, which must contain a {@link @veramo/core#IResolver | IResolver}\n *   implementation that can resolve the DID document of the identifier.\n *\n * @returns an array of mapped keys. The corresponding verification method is added to the `meta.verificationMethod`\n *   property of the key.\n *\n * @beta This API may change without a BREAKING CHANGE notice.\n */\nexport async function mapIdentifierKeysToDocWithJwkSupport(\n  {\n    identifier,\n    vmRelationship = 'verificationMethod',\n    didDocument,\n  }: {\n    identifier: IIdentifier\n    vmRelationship?: DIDDocumentSection\n    didDocument?: DIDDocument\n  },\n  context: IAgentContext<IResolver & IDIDManager>\n): Promise<_ExtendedIKey[]> {\n  const didDoc =\n    didDocument ??\n    (await getAgentResolver(context)\n      .resolve(identifier.did)\n      .then((result) => result.didDocument))\n  if (!didDoc) {\n    throw Error(`Could not resolve DID ${identifier.did}`)\n  }\n\n  // const rsaDidWeb = identifier.keys && identifier.keys.length > 0 && identifier.keys.find((key) => key.type === 'RSA') && didDocument\n\n  // We skip mapping in case the identifier is RSA and a did document is supplied.\n  const keys = didDoc ? [] : await mapIdentifierKeysToDoc(identifier, vmRelationship, context)\n\n  // dereference all key agreement keys from DID document and normalize\n  const documentKeys: VerificationMethod[] = await dereferenceDidKeysWithJwkSupport(didDoc, vmRelationship, context)\n\n  const localKeys = vmRelationship === 'keyAgreement' ? convertIdentifierEncryptionKeys(identifier) : compressIdentifierSecp256k1Keys(identifier)\n\n  // finally map the didDocument keys to the identifier keys by comparing `publicKeyHex`\n  const extendedKeys: _ExtendedIKey[] = documentKeys\n    .map((verificationMethod) => {\n      /*if (verificationMethod.type !== 'JsonWebKey2020') {\n                                                                                                              return null\n                                                                                                            }*/\n      const localKey = localKeys.find(\n        (localKey) =>\n          localKey.publicKeyHex === verificationMethod.publicKeyHex ||\n          verificationMethod.publicKeyHex?.startsWith(localKey.publicKeyHex) ||\n          compareBlockchainAccountId(localKey, verificationMethod)\n      )\n      if (localKey) {\n        const { meta, ...localProps } = localKey\n        return { ...localProps, meta: { ...meta, verificationMethod } }\n      } else {\n        return null\n      }\n    })\n    .filter(isDefined)\n\n  return keys.concat(extendedKeys)\n}\n\n/**\n * Compares the `blockchainAccountId` of a `EcdsaSecp256k1RecoveryMethod2020` verification method with the address\n * computed from a locally managed key.\n *\n * @returns true if the local key address corresponds to the `blockchainAccountId`\n *\n * @param localKey - The locally managed key\n * @param verificationMethod - a {@link did-resolver#VerificationMethod | VerificationMethod} with a\n *   `blockchainAccountId`\n *\n * @beta This API may change without a BREAKING CHANGE notice.\n */\nfunction compareBlockchainAccountId(localKey: IKey, verificationMethod: VerificationMethod): boolean {\n  if (\n    (verificationMethod.type !== 'EcdsaSecp256k1RecoveryMethod2020' && verificationMethod.type !== 'EcdsaSecp256k1VerificationKey2019') ||\n    localKey.type !== 'Secp256k1'\n  ) {\n    return false\n  }\n  let vmEthAddr = getEthereumAddress(verificationMethod)\n  if (localKey.meta?.account) {\n    return vmEthAddr === localKey.meta?.account.toLowerCase()\n  }\n  const computedAddr = computeAddress('0x' + localKey.publicKeyHex).toLowerCase()\n  return computedAddr === vmEthAddr\n}\n\nexport async function getAgentDIDMethods(context: IAgentContext<IDIDManager>) {\n  return (await context.agent.didManagerGetProviders()).map((provider) => provider.toLowerCase().replace('did:', ''))\n}\n\nexport function getDID(idOpts: { identifier: IIdentifier | string }): string {\n  if (typeof idOpts.identifier === 'string') {\n    return idOpts.identifier\n  } else if (typeof idOpts.identifier === 'object') {\n    return idOpts.identifier.did\n  }\n  throw Error(`Cannot get DID from identifier value`)\n}\n\nexport function toDID(identifier: string | IIdentifier | Partial<IIdentifier>): string {\n  if (typeof identifier === 'string') {\n    return identifier\n  }\n  if (identifier.did) {\n    return identifier.did\n  }\n  throw Error(`No DID value present in identifier`)\n}\n\nexport function toDIDs(identifiers?: (string | IIdentifier | Partial<IIdentifier>)[]): string[] {\n  if (!identifiers) {\n    return []\n  }\n  return identifiers.map(toDID)\n}\n\nexport async function getKey(\n  {\n    identifier,\n    vmRelationship = 'authentication',\n    kmsKeyRef,\n  }: {\n    identifier: IIdentifier\n    vmRelationship?: DIDDocumentSection\n    kmsKeyRef?: string\n  },\n  context: IAgentContext<IResolver & IDIDManager>\n): Promise<IKey> {\n  if (!identifier) {\n    return Promise.reject(new Error(`No identifier provided to getKey method!`))\n  }\n  // normalize to kid, in case keyId was passed in as did#vm or #vm\n  const kmsKeyRefParts = kmsKeyRef?.split(`#`)\n  const kid = kmsKeyRefParts ? (kmsKeyRefParts?.length === 2 ? kmsKeyRefParts[1] : kmsKeyRefParts[0]) : undefined\n  // todo: We really should do a keyRef and external kid here\n  let identifierKey = kmsKeyRef ? identifier.keys.find((key: IKey) => key.kid === kid || key?.meta?.jwkThumbprint === kid) : undefined\n  if (!identifierKey) {\n    const keys = await mapIdentifierKeysToDocWithJwkSupport({ identifier, vmRelationship: vmRelationship }, context)\n    if (!keys || keys.length === 0) {\n      throw new Error(`No keys found for verificationMethodSection: ${vmRelationship} and did ${identifier.did}`)\n    }\n    if (kmsKeyRef) {\n      identifierKey = keys.find(\n        (key: _ExtendedIKey) => key.meta.verificationMethod?.id === kmsKeyRef || (kid && key.meta.verificationMethod?.id?.includes(kid))\n      )\n    }\n    if (!identifierKey) {\n      identifierKey = keys.find(\n        (key: _ExtendedIKey) => key.meta.verificationMethod?.type === vmRelationship || key.meta.purposes?.includes(vmRelationship)\n      )\n    }\n    if (!identifierKey) {\n      identifierKey = keys[0]\n    }\n  }\n  if (!identifierKey) {\n    throw new Error(\n      `No matching verificationMethodSection key found for keyId: ${kmsKeyRef} and vmSection: ${vmRelationship} for id ${identifier.did}`\n    )\n  }\n\n  return identifierKey\n}\n\n/**\n *\n * @param identifier\n * @param context\n *\n * @deprecated Replaced by the identfier resolution plugin\n */\nasync function legacyGetIdentifier(\n  {\n    identifier,\n  }: {\n    identifier: string | IIdentifier\n  },\n  context: IAgentContext<IDIDManager>\n): Promise<IIdentifier> {\n  if (typeof identifier === 'string') {\n    return await context.agent.didManagerGet({ did: identifier })\n  }\n  return identifier\n}\n\n/**\n * Get the real kid as used in JWTs. This is the kid in the VM or in the JWT, not the kid in the Veramo/Sphereon keystore. That was just a poorly chosen name\n * @param key\n * @param idOpts\n * @param context\n */\nexport async function determineKid(\n  {\n    key,\n    idOpts,\n  }: {\n    key: IKey\n    idOpts: { identifier: IIdentifier | string; kmsKeyRef?: string }\n  },\n  context: IAgentContext<IResolver & IDIDManager>\n): Promise<string> {\n  if (key.meta?.verificationMethod?.id) {\n    return key.meta?.verificationMethod?.id\n  }\n  const identifier = await legacyGetIdentifier(idOpts, context)\n  const mappedKeys = await mapIdentifierKeysToDocWithJwkSupport(\n    {\n      identifier,\n      vmRelationship: 'verificationMethod',\n    },\n    context\n  )\n  const vmKey = mappedKeys.find((extendedKey) => extendedKey.kid === key.kid)\n  if (vmKey) {\n    return vmKey.meta?.verificationMethod?.id ?? vmKey.meta?.jwkThumbprint ?? idOpts.kmsKeyRef ?? vmKey.kid\n  }\n\n  return key.meta?.jwkThumbprint ?? idOpts.kmsKeyRef ?? key.kid\n}\n\nexport async function getSupportedDIDMethods(didOpts: IDIDOptions, context: IAgentContext<IDIDManager>) {\n  return didOpts.supportedDIDMethods ?? (await getAgentDIDMethods(context))\n}\n\nexport function getAgentResolver(\n  context: IAgentContext<IResolver & IDIDManager>,\n  opts?: {\n    localResolution?: boolean // Resolve identifiers hosted by the agent\n    uniresolverResolution?: boolean // Resolve identifiers using universal resolver\n    resolverResolution?: boolean // Use registered drivers\n  }\n): Resolvable {\n  return new AgentDIDResolver(context, opts)\n}\n\nexport class AgentDIDResolver implements Resolvable {\n  private readonly context: IAgentContext<IResolver & IDIDManager>\n  private readonly resolverResolution: boolean\n  private readonly uniresolverResolution: boolean\n  private readonly localResolution: boolean\n\n  constructor(\n    context: IAgentContext<IResolver & IDIDManager>,\n    opts?: { uniresolverResolution?: boolean; localResolution?: boolean; resolverResolution?: boolean }\n  ) {\n    this.context = context\n    this.resolverResolution = opts?.resolverResolution !== false\n    this.uniresolverResolution = opts?.uniresolverResolution !== false\n    this.localResolution = opts?.localResolution !== false\n  }\n\n  async resolve(didUrl: string, options?: DIDResolutionOptions): Promise<DIDResolutionResult> {\n    let resolutionResult: DIDResolutionResult | undefined\n    let origResolutionResult: DIDResolutionResult | undefined\n    let err: any\n    if (!this.resolverResolution && !this.localResolution && !this.uniresolverResolution) {\n      throw Error(`No agent hosted DID resolution, regular agent resolution nor universal resolver resolution is enabled. Cannot resolve DIDs.`)\n    }\n    if (this.resolverResolution) {\n      try {\n        resolutionResult = await this.context.agent.resolveDid({ didUrl, options })\n      } catch (error: unknown) {\n        err = error\n      }\n    }\n    if (resolutionResult) {\n      origResolutionResult = resolutionResult\n      if (resolutionResult.didDocument === null) {\n        resolutionResult = undefined\n      }\n    } else {\n      console.log(`Agent resolver resolution is disabled. This typically isn't desirable!`)\n    }\n    if (!resolutionResult && this.localResolution) {\n      console.log(`Using local DID resolution, looking at DIDs hosted by the agent.`)\n      try {\n        const did = didUrl.split('#')[0]\n        const iIdentifier = await this.context.agent.didManagerGet({ did })\n        resolutionResult = toDidResolutionResult(iIdentifier, { did })\n        if (resolutionResult.didDocument) {\n          err = undefined\n        } else {\n          console.log(`Local resolution resulted in a DID Document for ${did}`)\n        }\n      } catch (error: unknown) {\n        if (!err) {\n          err = error\n        }\n      }\n    }\n    if (resolutionResult) {\n      if (!origResolutionResult) {\n        origResolutionResult = resolutionResult\n      }\n      if (!resolutionResult.didDocument) {\n        resolutionResult = undefined\n      }\n    }\n    if (!resolutionResult && this.uniresolverResolution) {\n      console.log(`Using universal resolver resolution for did ${didUrl} `)\n      resolutionResult = await new UniResolver().resolve(didUrl, options)\n      if (!origResolutionResult) {\n        origResolutionResult = resolutionResult\n      }\n      if (resolutionResult.didDocument) {\n        err = undefined\n      }\n    }\n\n    if (err) {\n      // throw original error\n      throw err\n    }\n    if (!resolutionResult && !origResolutionResult) {\n      throw `Could not resolve ${didUrl}. Resolutions tried: online: ${this.resolverResolution}, local: ${this.localResolution}, uni resolver: ${this.uniresolverResolution}`\n    }\n    return resolutionResult ?? origResolutionResult!\n  }\n}\n\n/**\n * Please note that this is not an exact representation of the actual DID Document.\n *\n * We try to do our best, to map keys onto relevant verification methods and relationships, but we simply lack the context\n * of the actual DID method here. Do not relly on this method for DID resolution. It is only handy for offline use cases\n * when no DID Document is cached. For DID:WEB it does provide an accurate representation!\n *\n * @param identifier\n * @param opts\n */\nexport function toDidDocument(\n  identifier?: IIdentifier,\n  opts?: {\n    did?: string\n    use?: JwkKeyUse[]\n  }\n): DIDDocument | undefined {\n  let didDocument: DIDDocument | undefined = undefined\n  // TODO: Introduce jwk thumbprints here\n  if (identifier) {\n    const did = identifier.did ?? opts?.did\n    didDocument = {\n      '@context': 'https://www.w3.org/ns/did/v1',\n      id: did,\n      verificationMethod: identifier.keys.map((key) => {\n        const vm: VerificationMethod = {\n          controller: did,\n          id: key.kid.startsWith(did) && key.kid.includes('#') ? key.kid : `${did}#${key.kid}`,\n          publicKeyJwk: toJwk(key.publicKeyHex, key.type, {\n            use: ENC_KEY_ALGS.includes(key.type) ? JwkKeyUse.Encryption : JwkKeyUse.Signature,\n            key,\n          }) as JsonWebKey,\n          type: 'JsonWebKey2020',\n        }\n        return vm\n      }),\n      ...((opts?.use === undefined || opts?.use?.includes(JwkKeyUse.Signature)) &&\n        identifier.keys && {\n          assertionMethod: identifier.keys\n            .filter(\n              (key) =>\n                key?.meta?.purpose === undefined || key?.meta?.purpose === 'assertionMethod' || key?.meta?.purposes?.includes('assertionMethod')\n            )\n            .map((key) => {\n              if (key.kid.startsWith(did) && key.kid.includes('#')) {\n                return key.kid\n              }\n              return `${did}#${key.kid}`\n            }),\n        }),\n      ...((opts?.use === undefined || opts?.use?.includes(JwkKeyUse.Signature)) &&\n        identifier.keys && {\n          authentication: identifier.keys\n            .filter(\n              (key) => key?.meta?.purpose === undefined || key?.meta?.purpose === 'authentication' || key?.meta?.purposes?.includes('authentication')\n            )\n            .map((key) => {\n              if (key.kid.startsWith(did) && key.kid.includes('#')) {\n                return key.kid\n              }\n              return `${did}#${key.kid}`\n            }),\n        }),\n      ...((opts?.use === undefined || opts?.use?.includes(JwkKeyUse.Encryption)) &&\n        identifier.keys && {\n          keyAgreement: identifier.keys\n            .filter((key) => key.type === 'X25519' || key?.meta?.purpose === 'keyAgreement' || key?.meta?.purposes?.includes('keyAgreement'))\n            .map((key) => {\n              if (key.kid.startsWith(did) && key.kid.includes('#')) {\n                return key.kid\n              }\n              return `${did}#${key.kid}`\n            }),\n        }),\n      ...((opts?.use === undefined || opts?.use?.includes(JwkKeyUse.Encryption)) &&\n        identifier.keys && {\n          capabilityInvocation: identifier.keys\n            .filter(\n              (key) => key.type === 'X25519' || key?.meta?.purpose === 'capabilityInvocation' || key?.meta?.purposes?.includes('capabilityInvocation')\n            )\n            .map((key) => {\n              if (key.kid.startsWith(did) && key.kid.includes('#')) {\n                return key.kid\n              }\n              return `${did}#${key.kid}`\n            }),\n        }),\n      ...((opts?.use === undefined || opts?.use?.includes(JwkKeyUse.Encryption)) &&\n        identifier.keys && {\n          capabilityDelegation: identifier.keys\n            .filter(\n              (key) => key.type === 'X25519' || key?.meta?.purpose === 'capabilityDelegation' || key?.meta?.purposes?.includes('capabilityDelegation')\n            )\n            .map((key) => {\n              if (key.kid.startsWith(did) && key.kid.includes('#')) {\n                return key.kid\n              }\n              return `${did}#${key.kid}`\n            }),\n        }),\n      ...(identifier.services && identifier.services.length > 0 && { service: identifier.services }),\n    }\n  }\n  return didDocument\n}\n\nexport function toDidResolutionResult(\n  identifier?: IIdentifier,\n  opts?: {\n    did?: string\n    supportedMethods?: string[]\n  }\n): DIDResolutionResult {\n  const didDocument = toDidDocument(identifier, opts) ?? null // null is used in case of errors and required by the did resolution spec\n\n  const resolutionResult: DIDResolutionResult = {\n    '@context': 'https://w3id.org/did-resolution/v1',\n    didDocument,\n    didResolutionMetadata: {\n      ...(!didDocument && { error: 'notFound' }),\n      ...(Array.isArray(opts?.supportedMethods) &&\n        identifier &&\n        !opts?.supportedMethods.includes(identifier.provider.replace('did:', '')) && { error: 'unsupportedDidMethod' }),\n    },\n    didDocumentMetadata: {\n      ...(identifier?.alias && { equivalentId: identifier?.alias }),\n    },\n  }\n  return resolutionResult\n}\n\nexport async function asDidWeb(hostnameOrDID: string): Promise<string> {\n  let did = hostnameOrDID\n  if (!did) {\n    throw Error('Domain or DID expected, but received nothing.')\n  }\n  if (did.startsWith('did:web:')) {\n    return did\n  }\n  return `did:web:${did.replace(/https?:\\/\\/([^/?#]+).*/i, '$1').toLowerCase()}`\n}\n\n/**\n * @deprecated Replaced by the new signer service\n */\nexport const signDidJWT = async (args: SignJwtArgs): Promise<string> => {\n  const { idOpts, header, payload, context, options } = args\n  const jwtOptions = {\n    ...options,\n    signer: await getDidSigner({ idOpts, context }),\n  }\n\n  return createJWT(payload, jwtOptions, header)\n}\n\n/**\n * @deprecated Replaced by the new signer service\n */\nexport const getDidSigner = async (\n  args: GetSignerArgs & {\n    idOpts: {\n      /**\n       * @deprecated\n       */\n      identifier: IIdentifier | string\n      /**\n       * @deprecated\n       */\n      verificationMethodSection?: DIDDocumentSection\n      /**\n       * @deprecated\n       */\n      kmsKeyRef?: string\n    }\n  }\n): Promise<Signer> => {\n  const { idOpts, context } = args\n\n  const identifier = await legacyGetIdentifier(idOpts, context)\n  const key = await getKey(\n    {\n      identifier,\n      vmRelationship: idOpts.verificationMethodSection,\n      kmsKeyRef: idOpts.kmsKeyRef,\n    },\n    context\n  )\n  const algorithm = await signatureAlgorithmFromKey({ key })\n\n  return async (data: string | Uint8Array): Promise<string> => {\n    const input = data instanceof Object.getPrototypeOf(Uint8Array) ? new TextDecoder().decode(data as Uint8Array) : (data as string)\n    return await context.agent.keyManagerSign({\n      keyRef: key.kid,\n      algorithm,\n      data: input,\n    })\n  }\n}\n","import { TKeyType } from '@sphereon/ssi-sdk-ext.key-utils'\nimport { IAgentContext, IDIDManager, IIdentifier, IKeyManager, IResolver } from '@veramo/core'\nimport { JWTHeader, JWTPayload, JWTVerifyOptions } from 'did-jwt'\nimport { Resolvable } from 'did-resolver'\n\nexport enum SupportedDidMethodEnum {\n  DID_ETHR = 'ethr',\n  DID_KEY = 'key',\n  DID_LTO = 'lto',\n  DID_ION = 'ion',\n  DID_EBSI = 'ebsi',\n  DID_JWK = 'jwk',\n  DID_OYD = 'oyd',\n}\n\nexport enum IdentifierAliasEnum {\n  PRIMARY = 'primary',\n}\n\nexport interface ResolveOpts {\n  jwtVerifyOpts?: JWTVerifyOptions\n  resolver?: Resolvable\n  resolveUrl?: string\n  noUniversalResolverFallback?: boolean\n  subjectSyntaxTypesSupported?: string[]\n}\n\n/**\n * @deprecated Replaced by the identifier resolution service\n */\nexport interface IDIDOptions {\n  resolveOpts?: ResolveOpts\n  idOpts: LegacyIIdentifierOpts\n  supportedDIDMethods?: string[]\n}\n\nexport type IdentifierProviderOpts = {\n  type?: TKeyType\n  use?: string\n  method?: SupportedDidMethodEnum\n  [x: string]: any\n}\n\nexport type CreateIdentifierOpts = {\n  method: SupportedDidMethodEnum\n  createOpts?: CreateIdentifierCreateOpts\n}\n\nexport type CreateIdentifierCreateOpts = {\n  kms?: string\n  alias?: string\n  options?: IdentifierProviderOpts\n}\n\nexport type CreateOrGetIdentifierOpts = {\n  method: SupportedDidMethodEnum\n  createOpts?: CreateIdentifierCreateOpts\n}\n\nexport const DID_PREFIX = 'did:'\n\nexport interface GetOrCreateResult<T> {\n  created: boolean\n  result: T\n}\n\n/**\n * @deprecated Replaced by new signer\n */\nexport type SignJwtArgs = {\n  idOpts: LegacyIIdentifierOpts\n  header: Partial<JWTHeader>\n  payload: Partial<JWTPayload>\n  options: { issuer: string; expiresIn?: number; canonicalize?: boolean }\n  context: IRequiredSignAgentContext\n}\n\n/**\n * @deprecated Replaced by new signer\n */\nexport type GetSignerArgs = {\n  idOpts: LegacyIIdentifierOpts\n  context: IRequiredSignAgentContext\n}\n\n/**\n * @deprecated Replaced by the identifier resolution service\n */\ntype LegacyIIdentifierOpts = {\n  identifier: IIdentifier | string\n}\nexport type IRequiredSignAgentContext = IAgentContext<IKeyManager & IDIDManager & IResolver>\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACAA,0BAA+B;AAC/B,4BAA4B;AAC5B,yBASO;AACP,IAAAA,sBAAmD;AACnD,qBAA0F;AAE1F,qBAAyC;AAEzC,mBASO;AACP,qBAAkC;AAGlC,sBAAqB;AAErB,yBAA2B;AAE3B,uBAAyB;;;AC7BlB,IAAKC,yBAAAA,yBAAAA,yBAAAA;;;;;;;;SAAAA;;AAUL,IAAKC,sBAAAA,yBAAAA,sBAAAA;;SAAAA;;AA4CL,IAAMC,aAAa;;;ADXnB,IAAMC,uBAAuB,8BAClC,EACEC,YACAC,4BACAC,8BACAC,SACAC,cAAa,GAQfC,YAAAA;AAEA,SAAO,MAAMC,wBACX;IACEN;IACAC;IACAC;IACAC;IACAC;IACAG,gBAAgB;EAClB,GACAF,OAAAA;AAEJ,GA3BoC;AA4B7B,IAAMC,0BAA0B,8BACrC,EACEN,YACAC,4BACAC,8BACAC,SACAC,eACAG,eAAc,GAShBF,YAAAA;AAEA,MAAIG,MAAiCC;AACrC,MAAI;AACFD,UACG,MAAME,kCACL;MACEV;MACAO;MACAI,iBAAiB;MACjBR;MACAC;IACF,GACAC,OAAAA,MAEDH,gCAAgCK,mBAAmB,uBAChDE,SACA,MAAMC,kCACJ;MACEV;MACAO,gBAAgB;MAChBI,iBAAiB;MACjBR;MACAC;IACF,GACAC,OAAAA;EAEV,SAASO,GAAG;AACV,QAAIA,aAAaC,OAAO;AACtB,UAAI,CAACD,EAAEE,QAAQC,SAAS,KAAA,KAAU,CAACd,4BAA4B;AAC7D,cAAMW;MACR;IACF,OAAO;AACL,YAAMA;IACR;EACF;AACA,MAAI,CAACJ,OAAOP,4BAA4B;AACtC,UAAMe,aAAaC,cAAcjB,UAAAA;AACjCQ,UACG,MAAME,kCACL;MACEV;MACAO;MACAI,iBAAiB;MACjBO,aAAaF;MACbb;MACAC;IACF,GACAC,OAAAA,MAEDH,gCAAgCK,mBAAmB,uBAChDE,SACA,MAAMC,kCACJ;MACEV;MACAO,gBAAgB;MAChBI,iBAAiB;MACjBO,aAAaF;MACbb;MACAC;IACF,GACAC,OAAAA;AAER,QAAI,CAACG,KAAK;AACRA,YAAMR,WAAWmB,KACdC,IAAI,CAACZ,SAAQA,IAAAA,EACba,OAAO,CAACb,SAAQL,YAAYM,UAAaD,KAAIc,SAASnB,WAAYC,iBAAiBI,KAAIe,QAAQvB,WAAWwB,eAAe,EACzHC,KAAK,CAACjB,SAAQA,KAAIkB,KAAKC,oBAAoBL,KAAKP,SAAS,gBAAA,KAAqBP,KAAIkB,KAAKE,UAAUb,SAAS,gBAAA,CAAA;IAC/G;EACF;AACA,MAAI,CAACP,KAAK;AACR,UAAMK,MAAM,6CAA6Cb,WAAW6B,GAAG,EAAE;EAC3E;AACA,SAAOrB;AACT,GA1FuC;AA4FhC,IAAMsB,+BAA+B,8BAC1CzB,SACA0B,SAAAA;AAEA,QAAMC,oBAAoB,MAAMC,qBAAqB5B,SAAS;IAAE,GAAG0B,MAAMG,YAAYC;IAAS,GAAIJ,MAAMK,UAAU;MAAEA,QAAQL,KAAKK;IAAO;EAAG,CAAA;AAC3I,MAAIJ,sBAAsBvB,QAAW;AACnC,WAAO;MACL4B,SAAS;MACTC,QAAQN;IACV;EACF;AAEA,MAAID,MAAMK,WAAWG,uBAAuBC,SAAS;AACnD,UAAMN,aAAaH,MAAMG,cAAc,CAAC;AACxCA,eAAWC,UAAU;MAAEM,WAAW;MAAQnB,MAAM;MAAa,GAAGY;IAAW;AAC3EH,SAAKG,aAAaA;EACpB;AACA,QAAMQ,oBAAoB,MAAMC,iBAAiBtC,SAAS0B,IAAAA;AAC1D,SAAO;IACLM,SAAS;IACTC,QAAQI;EACV;AACF,GAtB4C;AAwBrC,IAAMT,uBAAuB,8BAAO5B,SAAqC0B,SAAAA;AAC9E,QAAMa,eAAe,MAAMvC,QAAQwC,MAAMC,eAAef,MAAMK,SAAS;IAAEW,UAAU,GAAGC,UAAAA,GAAajB,MAAMK,MAAAA;EAAS,IAAI,CAAC,CAAA,GAAIf,OACzH,CAACrB,eAA4B+B,MAAMT,SAASb,UAAaT,WAAWmB,KAAK8B,KAAK,CAACzC,QAAcA,IAAIc,SAASS,MAAMT,IAAAA,CAAAA;AAGlH,SAAOsB,eAAeA,YAAYM,SAAS,IAAIN,YAAY,CAAA,IAAKnC;AAClE,GANoC;AAQ7B,IAAMkC,mBAAmB,8BAAOtC,SAAqC0B,SAAAA;AAC1E,SAAO,MAAM1B,QAAQwC,MAAMM,iBAAiB;IAC1CC,KAAK,UAAMC,2BAAOhD,SAAS0B,MAAMG,YAAYkB,GAAAA;IAC7C,GAAIrB,MAAMK,UAAU;MAAEW,UAAU,GAAGC,UAAAA,GAAajB,MAAMK,MAAAA;IAAS;IAC/DkB,OAAOvB,MAAMG,YAAYoB,SAAS,GAAGC,oBAAoBC,OAAO,IAAIzB,MAAMK,MAAAA,IAAUL,MAAMG,YAAYC,SAASb,IAAAA,KAAQ,oBAAImC,KAAAA,GAAOC,QAAO,CAAA;IACzIvB,SAASJ,MAAMG,YAAYC;EAC7B,CAAA;AACF,GAPgC;AASzB,IAAMzB,oCAAoC,8BAC/C,EACEV,YACAO,iBAAiB,sBACjBJ,SACAQ,kBAAkB,OAClBO,aACAd,cAAa,GASfC,YAAAA;AAEA,QAAMsD,cAAc,MAAMC,qCAAqC;IAAE5D;IAAYO;IAAgBW;EAAY,GAAGb,OAAAA;AAC5G,MAAIwD,MAAMC,QAAQH,WAAAA,KAAgBA,YAAYT,SAAS,GAAG;AACxD,UAAMZ,SAASqB,YAAYlC,KACzB,CAACjB,QAAQL,YAAYM,UAAaD,IAAIc,SAASnB,WAAYC,iBAAiBI,IAAIe,QAAQvB,WAAWwB,eAAe;AAEpH,QAAIc,QAAQ;AACV,aAAOA;IACT;EACF;AACA,MAAI3B,iBAAiB;AACnB,UAAM,IAAIE,MACR,wCAAwCN,cAAAA,wBAAsCP,WAAW6B,GAAG,GAAG1B,UAAU,oBAAoBA,UAAU,EAAA,EAAI;EAE/I;AACA,SAAOM;AACT,GAjCiD;AAmC1C,IAAMsD,4BAA4B,wBAAC,EAAEvD,IAAG,MAAiB;AAC9D,MAAIA,IAAIc,SAAS,aAAa;AAC5B,UAAMT,MAAM,+DAA+DL,IAAIc,IAAI,gBAAgBd,IAAIe,GAAG,EAAE;EAC9G;AACA,QAAMyC,kBAAkBxD,IAAIkB,MAAMsC,mBAAmBxD,IAAIkB,MAAMuC,SAASC,YAAAA,SAAiBC,oCAAe,KAAK3D,IAAI4D,YAAY,EAAE,EAAEF,YAAW;AAC5I,MAAI,CAACF,iBAAiB;AACpB,UAAMnD,MAAM,mEAAmEL,IAAIe,GAAG,EAAE;EAC1F;AACA,SAAOyC;AACT,GATyC;AAWlC,IAAMK,mBAAmB,wBAAC,EAAErE,WAAU,MAA+B;AAC1E,QAAMQ,MAAMR,WAAWmB,KAAKM,KAAK,CAACjB,SAAQA,KAAIe,QAAQvB,WAAWwB,eAAe;AAChF,MAAI,CAAChB,KAAK;AACR,UAAMK,MAAM,+CAA+Cb,UAAAA,EAAY;EACzE;AACA,SAAOQ;AACT,GANgC;AAQzB,IAAM8D,UAAU,wBAAC,EACtBC,eACAnB,KACApD,YACAwE,WACArE,SACAC,cAAa,MAQd;AACC,SAAOJ,WAAWmB,KACfE,OAAO,CAACb,QAAQ,CAACL,WAAWK,IAAIc,SAASnB,OAAAA,EACzCkB,OAAO,CAACb,QAAQ,CAAC4C,OAAO5C,IAAI4C,QAAQA,GAAAA,EACpC/B,OAAO,CAACb,QAAQ,CAACgE,aAAahE,IAAIe,QAAQiD,SAAAA,EAC1CnD,OAAO,CAACb,QAAQ,CAAC+D,iBAAiB/D,IAAIkB,MAAM6C,kBAAkBA,aAAAA,EAC9DlD,OAAO,CAACb,QAAQ,CAACJ,iBAAiBJ,WAAWwB,oBAAoBhB,IAAIe,GAAG;AAC7E,GArBuB;AAkCvB,eAAsBkD,iCACpBvD,aACAwD,UAA8B,gBAC9BrE,SAAiC;AAEjC,QAAMsE,UAAUD,YAAY;AAC5B,MAAIA,YAAY,WAAW;AACzB,WAAO,CAAA;EACT;AACA,UACE,MAAME,QAAQC,KACX3D,YAAYwD,OAAAA,KAAY,CAAA,GAAItD,IAAI,OAAOZ,QAAAA;AACtC,QAAI,OAAOA,QAAQ,UAAU;AAC3B,UAAI;AACF,eAAQ,MAAMH,QAAQwC,MAAMiC,oBAAoB;UAC9C5D;UACA6D,QAAQvE;UACRkE;QACF,CAAA;MACF,SAAS9D,GAAG;AACV,eAAO;MACT;IACF,OAAO;AACL,aAAOJ;IACT;EACF,CAAA,CAAA,GAGDa,OAAO2D,sBAAAA,EACP5D,IAAI,CAACZ,QAAAA;AACJ,UAAMyE,SAASC,kCAAkC1E,KAAKmE,OAAAA;AACtD,UAAM,EAAEP,cAAce,iBAAiBC,iBAAiBC,cAAc,GAAGC,SAAAA,IAAa9E;AACtF,UAAM+E,SAAS;MAAE,GAAGD;MAAUlB,cAAca;IAAO;AACnD,QAAIN,WAAW,iCAAiCY,OAAOjE,MAAM;AAC3DiE,aAAOjE,OAAO;IAChB;AACA,WAAOiE;EACT,CAAA;AACJ;AAtCsBd;AAwCf,SAASe,mBAAmBC,KAAQ;AAGzC,QAAMC,KAAkC;IACtCL,kBAAcM,iCAAaF,GAAAA;EAC7B;AACA,SAAOP,kCAAkCQ,EAAAA;AAC3C;AAPgBF;AAkBT,SAASN,kCAAkCU,IAAiCjB,UAAU,OAAK;AAChG,MAAIiB,GAAGP,cAAc;AACnB,UAAMI,UAAME,iCAAaC,GAAGP,YAAY;AACxC,QAAII,IAAII,QAAQ,MAAM;AACpB,YAAMC,QAAQL,IAAIM,MAAMC,aAAaP,IAAIM,GAAG,IAAI;AAChD,YAAME,WAAOC,iCAAYT,IAAIU,GAAI,WAAA;AACjC,YAAMC,WAAOF,iCAAYT,IAAIY,GAAI,WAAA;AACjC,YAAMC,SAAS;AAGf,YAAMC,MAAM,GAAGD,MAAAA,GAASL,IAAAA,GAAOG,IAAAA;AAC/B,UAAI;AACF,cAAMI,KAAK,IAAIC,gBAAAA,QAASD,GAAGV,KAAAA;AAE3B,cAAM1B,eAAeoC,GAAGE,cAAcH,KAAK,KAAA,EAAOI,UAAU,MAAM,KAAA;AAElE,eAAOvC;MACT,SAASwC,OAAY;AACnBC,gBAAQD,MAAM,+CAA+Cd,KAAAA,wBAA6BL,IAAIU,CAAC,QAAQV,IAAIY,CAAC,YAAYO,KAAAA,IAASA,KAAAA;MACnI;IACF,WAAWnB,IAAIM,QAAQ,WAAW;AAChC,iBAAOe,+BAASC,+BAAWtB,IAAIU,GAAI,WAAA,GAAc,QAAA;IACnD,WAAWV,IAAII,QAAQ,OAAO;AAC5B,iBAAOmB,2CAAsBvB,KAAK,QAAA;IACpC;EACF;AAEA,SAAOwB,oBAAoBrB,IAAIjB,OAAAA;AACjC;AA5BgBO;AA8BT,SAASgC,gBAAgBX,KAAW;AACzC,QAAMY,WAAWZ,IAAIA,IAAIrD,SAAS,CAAA,EAAGgB,YAAW;AAChD,SAAO;IAAC;IAAK;IAAK;IAAK;IAAK;IAAK;IAAK;IAAK;IAAKnD,SAASoG,QAAAA;AAC3D;AAHgBD;AAkBT,SAASD,oBAAoBrB,IAAiCjB,UAAmB,OAAK;AAC3F,MAAIyC,WAAWC,sBAAsBzB,EAAAA;AACrC,QAAMH,MAAMG,GAAGP,mBAAeM,iCAAaC,GAAGP,YAAY,IAAI5E;AAC9D,MAAIkE,SAAS;AACX,QACE;MAAC;MAAW;MAA8B;MAA8B5D,SAAS6E,GAAGtE,IAAI,KACvFsE,GAAGtE,SAAS,oBAAoBmE,KAAKM,QAAQ,WAC9C;AACAqB,qBAAWE,yCAAyBF,QAAAA;IACtC,WACE,CAAC;MAAC;MAAU;MAA6B;MAA6BrG,SAAS6E,GAAGtE,IAAI,KACtF,EAAEsE,GAAGtE,SAAS,oBAAoBmE,KAAKM,QAAQ,WAC/C;AACA,aAAO;IACT;EACF;AACA,aAAOwB,2BAAWH,QAAAA;AACpB;AAjBgBH;AAmBhB,SAASjB,aAAawB,OAAa;AACjC,SAAOA,MAAMtD,YAAW,EAAGuD,QAAQ,KAAK,EAAA,EAAIA,QAAQ,KAAK,EAAA;AAC3D;AAFSzB;AAIT,SAASqB,sBAAsBzB,IAAsB;AACnD,MAAIA,GAAGT,iBAAiB;AACtB,eAAOuC,8BAAc9B,GAAGT,eAAe;EACzC,WAAWS,GAAG+B,oBAAoB;AAChC,eAAOC,oCAAoBhC,GAAG+B,kBAAkB;EAClD,WAAsC/B,GAAIR,iBAAiB;AACzD,eAAOyC,8BAAyCjC,GAAIR,eAAe;EACrE,WAAWQ,GAAGxB,cAAc;AAC1B,eAAO0D,2BAAWlC,GAAGxB,YAAY;EACnC,WAAWwB,GAAGP,cAAcU,OAAOH,GAAGP,aAAac,KAAKP,GAAGP,aAAagB,GAAG;AACzE,eAAOyB,2BAAW5C,kCAAkCU,EAAAA,CAAAA;EACtD,WAAWA,GAAGP,iBAAiBO,GAAGP,aAAaU,QAAQ,aAAaH,GAAGP,aAAaU,QAAQ,aAAaH,GAAGP,aAAac,GAAG;AAC1H,eAAO0B,8BAAcjC,GAAGP,aAAac,CAAC;EACxC;AACA,SAAO,IAAI4B,WAAAA;AACb;AAfSV;AAiBF,SAASW,wBAAwBtC,IAAsB;AAC5D,MAAID,MAAuBC,GAAGL;AAC9B,MAAI,CAACI,KAAK;AACR,QAAIrB,eAAesB,GAAGtB,oBAAgB0C,2BAASO,sBAAsB3B,EAAAA,GAAK,KAAA;AAC1ED,cAAMwC,0BAAM7D,kBAAc8D,kDAA8B;MAAEnC,KAAKL,GAAGpE;IAAK,CAAA,CAAA;EACzE;AACA,MAAI,CAACmE,KAAK;AACR,UAAM5E,MAAM,8CAA8C;EAC5D;AACA4E,MAAIlE,MAAMmE,GAAGyC;AACb,aAAOxC,iCAAaF,GAAAA;AACtB;AAXgBuC;AAahB,SAASI,yBACPC,oBACAC,8BACAC,qBAA0C;AAE1C,QAAMC,OAAO,IAAIC,KACdH,gCAAgC,CAAA,GAC9BlH,IAAI,CAACsH,WAAY,OAAOA,WAAW,WAAWA,SAASH,qBAAqB9G,KAAK,CAACiE,OAAOA,GAAGyC,OAAOO,MAAAA,CAAAA,EACnGrH,OAAO2D,sBAAAA,EACP5D,IAAI,CAACsE,OAAOsC,wBAAwBtC,EAAAA,CAAAA,CAAAA;AAEzC,SAAO;IAAE2C;IAAoBG,MAAM3E,MAAM8E,KAAKH,IAAAA;EAAM;AACtD;AAZSJ;AAgBF,SAASQ,kBAAkB1H,aAAwB;AACxD,SAAO;IACLS,oBAAoB;SACfyG,yBAAyB,aAAalH,YAAY2H,WAAW3H,YAAYS,kBAAkB,EAAE6G;SAC7FJ,yBAAyB,sBAAsBlH,YAAYS,oBAAoBT,YAAYS,kBAAkB,EAAE6G;;IAEpHM,iBAAiBV,yBAAyB,mBAAmBlH,YAAY4H,iBAAiB5H,YAAYS,kBAAkB,EAAE6G;IAC1HO,gBAAgBX,yBAAyB,kBAAkBlH,YAAY6H,gBAAgB7H,YAAYS,kBAAkB,EAAE6G;IACvHQ,cAAcZ,yBAAyB,gBAAgBlH,YAAY8H,cAAc9H,YAAYS,kBAAkB,EAAE6G;IACjHS,sBAAsBb,yBAAyB,wBAAwBlH,YAAY+H,sBAAsB/H,YAAYS,kBAAkB,EAAE6G;IACzIU,sBAAsBd,yBAAyB,wBAAwBlH,YAAYgI,sBAAsBhI,YAAYS,kBAAkB,EAAE6G;EAC3I;AACF;AAZgBI;AA+BhB,eAAsBhF,qCACpB,EACE5D,YACAO,iBAAiB,sBACjBW,YAAW,GAMbb,SAA+C;AAE/C,QAAM8I,SACJjI,eACC,MAAMkI,iBAAiB/I,OAAAA,EACrBgJ,QAAQrJ,WAAW6B,GAAG,EACtByH,KAAK,CAAChH,WAAWA,OAAOpB,WAAW;AACxC,MAAI,CAACiI,QAAQ;AACX,UAAMtI,MAAM,yBAAyBb,WAAW6B,GAAG,EAAE;EACvD;AAKA,QAAMV,OAAOgI,SAAS,CAAA,IAAK,UAAMI,qCAAuBvJ,YAAYO,gBAAgBF,OAAAA;AAGpF,QAAMmJ,eAAqC,MAAM/E,iCAAiC0E,QAAQ5I,gBAAgBF,OAAAA;AAE1G,QAAMoJ,YAAYlJ,mBAAmB,qBAAiBmJ,8CAAgC1J,UAAAA,QAAc2J,8CAAgC3J,UAAAA;AAGpI,QAAM4J,eAAgCJ,aACnCpI,IAAI,CAACO,uBAAAA;AAIJ,UAAMkI,WAAWJ,UAAUhI,KACzB,CAACoI,cACCA,UAASzF,iBAAiBzC,mBAAmByC,gBAC7CzC,mBAAmByC,cAAc0F,WAAWD,UAASzF,YAAY,KACjE2F,2BAA2BF,WAAUlI,kBAAAA,CAAAA;AAEzC,QAAIkI,UAAU;AACZ,YAAM,EAAEnI,MAAM,GAAGsI,WAAAA,IAAeH;AAChC,aAAO;QAAE,GAAGG;QAAYtI,MAAM;UAAE,GAAGA;UAAMC;QAAmB;MAAE;IAChE,OAAO;AACL,aAAO;IACT;EACF,CAAA,EACCN,OAAO2D,sBAAAA;AAEV,SAAO7D,KAAK8I,OAAOL,YAAAA;AACrB;AArDsBhG;AAmEtB,SAASmG,2BAA2BF,UAAgBlI,oBAAsC;AACxF,MACGA,mBAAmBL,SAAS,sCAAsCK,mBAAmBL,SAAS,uCAC/FuI,SAASvI,SAAS,aAClB;AACA,WAAO;EACT;AACA,MAAI4I,gBAAYC,iCAAmBxI,kBAAAA;AACnC,MAAIkI,SAASnI,MAAMuC,SAAS;AAC1B,WAAOiG,cAAcL,SAASnI,MAAMuC,QAAQC,YAAAA;EAC9C;AACA,QAAMkG,mBAAejG,oCAAe,OAAO0F,SAASzF,YAAY,EAAEF,YAAW;AAC7E,SAAOkG,iBAAiBF;AAC1B;AAbSH;AAeT,eAAsBM,mBAAmBhK,SAAmC;AAC1E,UAAQ,MAAMA,QAAQwC,MAAMyH,uBAAsB,GAAIlJ,IAAI,CAAC2B,aAAaA,SAASmB,YAAW,EAAGuD,QAAQ,QAAQ,EAAA,CAAA;AACjH;AAFsB4C;AAIf,SAASE,OAAOC,QAA4C;AACjE,MAAI,OAAOA,OAAOxK,eAAe,UAAU;AACzC,WAAOwK,OAAOxK;EAChB,WAAW,OAAOwK,OAAOxK,eAAe,UAAU;AAChD,WAAOwK,OAAOxK,WAAW6B;EAC3B;AACA,QAAMhB,MAAM,sCAAsC;AACpD;AAPgB0J;AAST,SAASE,MAAMzK,YAAuD;AAC3E,MAAI,OAAOA,eAAe,UAAU;AAClC,WAAOA;EACT;AACA,MAAIA,WAAW6B,KAAK;AAClB,WAAO7B,WAAW6B;EACpB;AACA,QAAMhB,MAAM,oCAAoC;AAClD;AARgB4J;AAUT,SAASC,OAAO9H,aAA6D;AAClF,MAAI,CAACA,aAAa;AAChB,WAAO,CAAA;EACT;AACA,SAAOA,YAAYxB,IAAIqJ,KAAAA;AACzB;AALgBC;AAOhB,eAAsBC,OACpB,EACE3K,YACAO,iBAAiB,kBACjBiE,UAAS,GAMXnE,SAA+C;AAE/C,MAAI,CAACL,YAAY;AACf,WAAO4E,QAAQgG,OAAO,IAAI/J,MAAM,0CAA0C,CAAA;EAC5E;AAEA,QAAMgK,iBAAiBrG,WAAWsG,MAAM,GAAG;AAC3C,QAAMvJ,MAAMsJ,iBAAkBA,gBAAgB3H,WAAW,IAAI2H,eAAe,CAAA,IAAKA,eAAe,CAAA,IAAMpK;AAEtG,MAAIsK,gBAAgBvG,YAAYxE,WAAWmB,KAAKM,KAAK,CAACjB,QAAcA,IAAIe,QAAQA,OAAOf,KAAKkB,MAAM6C,kBAAkBhD,GAAAA,IAAOd;AAC3H,MAAI,CAACsK,eAAe;AAClB,UAAM5J,OAAO,MAAMyC,qCAAqC;MAAE5D;MAAYO;IAA+B,GAAGF,OAAAA;AACxG,QAAI,CAACc,QAAQA,KAAK+B,WAAW,GAAG;AAC9B,YAAM,IAAIrC,MAAM,gDAAgDN,cAAAA,YAA0BP,WAAW6B,GAAG,EAAE;IAC5G;AACA,QAAI2C,WAAW;AACbuG,sBAAgB5J,KAAKM,KACnB,CAACjB,QAAuBA,IAAIkB,KAAKC,oBAAoBwG,OAAO3D,aAAcjD,OAAOf,IAAIkB,KAAKC,oBAAoBwG,IAAIpH,SAASQ,GAAAA,CAAAA;IAE/H;AACA,QAAI,CAACwJ,eAAe;AAClBA,sBAAgB5J,KAAKM,KACnB,CAACjB,QAAuBA,IAAIkB,KAAKC,oBAAoBL,SAASf,kBAAkBC,IAAIkB,KAAKE,UAAUb,SAASR,cAAAA,CAAAA;IAEhH;AACA,QAAI,CAACwK,eAAe;AAClBA,sBAAgB5J,KAAK,CAAA;IACvB;EACF;AACA,MAAI,CAAC4J,eAAe;AAClB,UAAM,IAAIlK,MACR,8DAA8D2D,SAAAA,mBAA4BjE,cAAAA,WAAyBP,WAAW6B,GAAG,EAAE;EAEvI;AAEA,SAAOkJ;AACT;AA9CsBJ;AAuDtB,eAAeK,oBACb,EACEhL,WAAU,GAIZK,SAAmC;AAEnC,MAAI,OAAOL,eAAe,UAAU;AAClC,WAAO,MAAMK,QAAQwC,MAAMoI,cAAc;MAAEpJ,KAAK7B;IAAW,CAAA;EAC7D;AACA,SAAOA;AACT;AAZegL;AAoBf,eAAsBE,aACpB,EACE1K,KACAgK,OAAM,GAKRnK,SAA+C;AAE/C,MAAIG,IAAIkB,MAAMC,oBAAoBwG,IAAI;AACpC,WAAO3H,IAAIkB,MAAMC,oBAAoBwG;EACvC;AACA,QAAMnI,aAAa,MAAMgL,oBAAoBR,QAAQnK,OAAAA;AACrD,QAAM8K,aAAa,MAAMvH,qCACvB;IACE5D;IACAO,gBAAgB;EAClB,GACAF,OAAAA;AAEF,QAAM+K,QAAQD,WAAW1J,KAAK,CAAC4J,gBAAgBA,YAAY9J,QAAQf,IAAIe,GAAG;AAC1E,MAAI6J,OAAO;AACT,WAAOA,MAAM1J,MAAMC,oBAAoBwG,MAAMiD,MAAM1J,MAAM6C,iBAAiBiG,OAAOhG,aAAa4G,MAAM7J;EACtG;AAEA,SAAOf,IAAIkB,MAAM6C,iBAAiBiG,OAAOhG,aAAahE,IAAIe;AAC5D;AA3BsB2J;AA6BtB,eAAsBI,uBAAuBC,SAAsBlL,SAAmC;AACpG,SAAOkL,QAAQC,uBAAwB,MAAMnB,mBAAmBhK,OAAAA;AAClE;AAFsBiL;AAIf,SAASlC,iBACd/I,SACA0B,MAIC;AAED,SAAO,IAAI0J,iBAAiBpL,SAAS0B,IAAAA;AACvC;AATgBqH;AAWT,IAAMqC,mBAAN,MAAMA;EA9tBb,OA8tBaA;;;EACMpL;EACAqL;EACAC;EACAC;EAEjBC,YACExL,SACA0B,MACA;AACA,SAAK1B,UAAUA;AACf,SAAKqL,qBAAqB3J,MAAM2J,uBAAuB;AACvD,SAAKC,wBAAwB5J,MAAM4J,0BAA0B;AAC7D,SAAKC,kBAAkB7J,MAAM6J,oBAAoB;EACnD;EAEA,MAAMvC,QAAQtE,QAAgB5C,SAA8D;AAC1F,QAAI2J;AACJ,QAAIC;AACJ,QAAIC;AACJ,QAAI,CAAC,KAAKN,sBAAsB,CAAC,KAAKE,mBAAmB,CAAC,KAAKD,uBAAuB;AACpF,YAAM9K,MAAM,6HAA6H;IAC3I;AACA,QAAI,KAAK6K,oBAAoB;AAC3B,UAAI;AACFI,2BAAmB,MAAM,KAAKzL,QAAQwC,MAAMoJ,WAAW;UAAElH;UAAQ5C;QAAQ,CAAA;MAC3E,SAASyE,OAAgB;AACvBoF,cAAMpF;MACR;IACF;AACA,QAAIkF,kBAAkB;AACpBC,6BAAuBD;AACvB,UAAIA,iBAAiB5K,gBAAgB,MAAM;AACzC4K,2BAAmBrL;MACrB;IACF,OAAO;AACLoG,cAAQqF,IAAI,wEAAwE;IACtF;AACA,QAAI,CAACJ,oBAAoB,KAAKF,iBAAiB;AAC7C/E,cAAQqF,IAAI,kEAAkE;AAC9E,UAAI;AACF,cAAMrK,MAAMkD,OAAO+F,MAAM,GAAA,EAAK,CAAA;AAC9B,cAAMqB,cAAc,MAAM,KAAK9L,QAAQwC,MAAMoI,cAAc;UAAEpJ;QAAI,CAAA;AACjEiK,2BAAmBM,sBAAsBD,aAAa;UAAEtK;QAAI,CAAA;AAC5D,YAAIiK,iBAAiB5K,aAAa;AAChC8K,gBAAMvL;QACR,OAAO;AACLoG,kBAAQqF,IAAI,mDAAmDrK,GAAAA,EAAK;QACtE;MACF,SAAS+E,OAAgB;AACvB,YAAI,CAACoF,KAAK;AACRA,gBAAMpF;QACR;MACF;IACF;AACA,QAAIkF,kBAAkB;AACpB,UAAI,CAACC,sBAAsB;AACzBA,+BAAuBD;MACzB;AACA,UAAI,CAACA,iBAAiB5K,aAAa;AACjC4K,2BAAmBrL;MACrB;IACF;AACA,QAAI,CAACqL,oBAAoB,KAAKH,uBAAuB;AACnD9E,cAAQqF,IAAI,+CAA+CnH,MAAAA,GAAS;AACpE+G,yBAAmB,MAAM,IAAIO,kCAAAA,EAAchD,QAAQtE,QAAQ5C,OAAAA;AAC3D,UAAI,CAAC4J,sBAAsB;AACzBA,+BAAuBD;MACzB;AACA,UAAIA,iBAAiB5K,aAAa;AAChC8K,cAAMvL;MACR;IACF;AAEA,QAAIuL,KAAK;AAEP,YAAMA;IACR;AACA,QAAI,CAACF,oBAAoB,CAACC,sBAAsB;AAC9C,YAAM,qBAAqBhH,MAAAA,gCAAsC,KAAK2G,kBAAkB,YAAY,KAAKE,eAAe,mBAAmB,KAAKD,qBAAqB;IACvK;AACA,WAAOG,oBAAoBC;EAC7B;AACF;AAYO,SAAS9K,cACdjB,YACA+B,MAGC;AAED,MAAIb,cAAuCT;AAE3C,MAAIT,YAAY;AACd,UAAM6B,MAAM7B,WAAW6B,OAAOE,MAAMF;AACpCX,kBAAc;MACZ,YAAY;MACZiH,IAAItG;MACJF,oBAAoB3B,WAAWmB,KAAKC,IAAI,CAACZ,QAAAA;AACvC,cAAMkF,KAAyB;UAC7B4G,YAAYzK;UACZsG,IAAI3H,IAAIe,IAAIuI,WAAWjI,GAAAA,KAAQrB,IAAIe,IAAIR,SAAS,GAAA,IAAOP,IAAIe,MAAM,GAAGM,GAAAA,IAAOrB,IAAIe,GAAG;UAClF8D,kBAAc4C,0BAAMzH,IAAI4D,cAAc5D,IAAIc,MAAM;YAC9CiL,KAAKC,gCAAazL,SAASP,IAAIc,IAAI,IAAImL,6BAAUC,aAAaD,6BAAUE;YACxEnM;UACF,CAAA;UACAc,MAAM;QACR;AACA,eAAOoE;MACT,CAAA;MACA,IAAK3D,MAAMwK,QAAQ9L,UAAasB,MAAMwK,KAAKxL,SAAS0L,6BAAUE,SAAS,MACrE3M,WAAWmB,QAAQ;QACjB2H,iBAAiB9I,WAAWmB,KACzBE,OACC,CAACb,QACCA,KAAKkB,MAAMkL,YAAYnM,UAAaD,KAAKkB,MAAMkL,YAAY,qBAAqBpM,KAAKkB,MAAME,UAAUb,SAAS,iBAAA,CAAA,EAEjHK,IAAI,CAACZ,QAAAA;AACJ,cAAIA,IAAIe,IAAIuI,WAAWjI,GAAAA,KAAQrB,IAAIe,IAAIR,SAAS,GAAA,GAAM;AACpD,mBAAOP,IAAIe;UACb;AACA,iBAAO,GAAGM,GAAAA,IAAOrB,IAAIe,GAAG;QAC1B,CAAA;MACJ;MACF,IAAKQ,MAAMwK,QAAQ9L,UAAasB,MAAMwK,KAAKxL,SAAS0L,6BAAUE,SAAS,MACrE3M,WAAWmB,QAAQ;QACjB4H,gBAAgB/I,WAAWmB,KACxBE,OACC,CAACb,QAAQA,KAAKkB,MAAMkL,YAAYnM,UAAaD,KAAKkB,MAAMkL,YAAY,oBAAoBpM,KAAKkB,MAAME,UAAUb,SAAS,gBAAA,CAAA,EAEvHK,IAAI,CAACZ,QAAAA;AACJ,cAAIA,IAAIe,IAAIuI,WAAWjI,GAAAA,KAAQrB,IAAIe,IAAIR,SAAS,GAAA,GAAM;AACpD,mBAAOP,IAAIe;UACb;AACA,iBAAO,GAAGM,GAAAA,IAAOrB,IAAIe,GAAG;QAC1B,CAAA;MACJ;MACF,IAAKQ,MAAMwK,QAAQ9L,UAAasB,MAAMwK,KAAKxL,SAAS0L,6BAAUC,UAAU,MACtE1M,WAAWmB,QAAQ;QACjB6H,cAAchJ,WAAWmB,KACtBE,OAAO,CAACb,QAAQA,IAAIc,SAAS,YAAYd,KAAKkB,MAAMkL,YAAY,kBAAkBpM,KAAKkB,MAAME,UAAUb,SAAS,cAAA,CAAA,EAChHK,IAAI,CAACZ,QAAAA;AACJ,cAAIA,IAAIe,IAAIuI,WAAWjI,GAAAA,KAAQrB,IAAIe,IAAIR,SAAS,GAAA,GAAM;AACpD,mBAAOP,IAAIe;UACb;AACA,iBAAO,GAAGM,GAAAA,IAAOrB,IAAIe,GAAG;QAC1B,CAAA;MACJ;MACF,IAAKQ,MAAMwK,QAAQ9L,UAAasB,MAAMwK,KAAKxL,SAAS0L,6BAAUC,UAAU,MACtE1M,WAAWmB,QAAQ;QACjB8H,sBAAsBjJ,WAAWmB,KAC9BE,OACC,CAACb,QAAQA,IAAIc,SAAS,YAAYd,KAAKkB,MAAMkL,YAAY,0BAA0BpM,KAAKkB,MAAME,UAAUb,SAAS,sBAAA,CAAA,EAElHK,IAAI,CAACZ,QAAAA;AACJ,cAAIA,IAAIe,IAAIuI,WAAWjI,GAAAA,KAAQrB,IAAIe,IAAIR,SAAS,GAAA,GAAM;AACpD,mBAAOP,IAAIe;UACb;AACA,iBAAO,GAAGM,GAAAA,IAAOrB,IAAIe,GAAG;QAC1B,CAAA;MACJ;MACF,IAAKQ,MAAMwK,QAAQ9L,UAAasB,MAAMwK,KAAKxL,SAAS0L,6BAAUC,UAAU,MACtE1M,WAAWmB,QAAQ;QACjB+H,sBAAsBlJ,WAAWmB,KAC9BE,OACC,CAACb,QAAQA,IAAIc,SAAS,YAAYd,KAAKkB,MAAMkL,YAAY,0BAA0BpM,KAAKkB,MAAME,UAAUb,SAAS,sBAAA,CAAA,EAElHK,IAAI,CAACZ,QAAAA;AACJ,cAAIA,IAAIe,IAAIuI,WAAWjI,GAAAA,KAAQrB,IAAIe,IAAIR,SAAS,GAAA,GAAM;AACpD,mBAAOP,IAAIe;UACb;AACA,iBAAO,GAAGM,GAAAA,IAAOrB,IAAIe,GAAG;QAC1B,CAAA;MACJ;MACF,GAAIvB,WAAW6M,YAAY7M,WAAW6M,SAAS3J,SAAS,KAAK;QAAE4J,SAAS9M,WAAW6M;MAAS;IAC9F;EACF;AACA,SAAO3L;AACT;AA9FgBD;AAgGT,SAASmL,sBACdpM,YACA+B,MAGC;AAED,QAAMb,cAAcD,cAAcjB,YAAY+B,IAAAA,KAAS;AAEvD,QAAM+J,mBAAwC;IAC5C,YAAY;IACZ5K;IACA6L,uBAAuB;MACrB,GAAI,CAAC7L,eAAe;QAAE0F,OAAO;MAAW;MACxC,GAAI/C,MAAMC,QAAQ/B,MAAMiL,gBAAAA,KACtBhN,cACA,CAAC+B,MAAMiL,iBAAiBjM,SAASf,WAAW+C,SAAS0E,QAAQ,QAAQ,EAAA,CAAA,KAAQ;QAAEb,OAAO;MAAuB;IACjH;IACAqG,qBAAqB;MACnB,GAAIjN,YAAYsD,SAAS;QAAE4J,cAAclN,YAAYsD;MAAM;IAC7D;EACF;AACA,SAAOwI;AACT;AAvBgBM;AAyBhB,eAAsBe,SAASC,eAAqB;AAClD,MAAIvL,MAAMuL;AACV,MAAI,CAACvL,KAAK;AACR,UAAMhB,MAAM,+CAAA;EACd;AACA,MAAIgB,IAAIiI,WAAW,UAAA,GAAa;AAC9B,WAAOjI;EACT;AACA,SAAO,WAAWA,IAAI4F,QAAQ,2BAA2B,IAAA,EAAMvD,YAAW,CAAA;AAC5E;AATsBiJ;AAcf,IAAME,aAAa,8BAAOC,SAAAA;AAC/B,QAAM,EAAE9C,QAAQ+C,QAAQC,SAASnN,SAAS8B,QAAO,IAAKmL;AACtD,QAAMG,aAAa;IACjB,GAAGtL;IACHuL,QAAQ,MAAMC,aAAa;MAAEnD;MAAQnK;IAAQ,CAAA;EAC/C;AAEA,aAAOuN,0BAAUJ,SAASC,YAAYF,MAAAA;AACxC,GAR0B;AAanB,IAAMI,eAAe,8BAC1BL,SAAAA;AAiBA,QAAM,EAAE9C,QAAQnK,QAAO,IAAKiN;AAE5B,QAAMtN,aAAa,MAAMgL,oBAAoBR,QAAQnK,OAAAA;AACrD,QAAMG,MAAM,MAAMmK,OAChB;IACE3K;IACAO,gBAAgBiK,OAAOqD;IACvBrJ,WAAWgG,OAAOhG;EACpB,GACAnE,OAAAA;AAEF,QAAMyN,YAAY,UAAMC,8CAA0B;IAAEvN;EAAI,CAAA;AAExD,SAAO,OAAOwN,SAAAA;AACZ,UAAMxG,QAAQwG,gBAAgBC,OAAOC,eAAenG,UAAAA,IAAc,IAAIoG,YAAAA,EAAcC,OAAOJ,IAAAA,IAAuBA;AAClH,WAAO,MAAM3N,QAAQwC,MAAMwL,eAAe;MACxCC,QAAQ9N,IAAIe;MACZuM;MACAE,MAAMxG;IACR,CAAA;EACF;AACF,GAvC4B;","names":["import_ssi_sdk_ext","SupportedDidMethodEnum","IdentifierAliasEnum","DID_PREFIX","getAuthenticationKey","identifier","offlineWhenNoDIDRegistered","noVerificationMethodFallback","keyType","controllerKey","context","getFirstKeyWithRelation","vmRelationship","key","undefined","getFirstKeyWithRelationFromDIDDoc","errorOnNotFound","e","Error","message","includes","offlineDID","toDidDocument","didDocument","keys","map","filter","type","kid","controllerKeyId","find","meta","verificationMethod","purposes","did","getOrCreatePrimaryIdentifier","opts","primaryIdentifier","getPrimaryIdentifier","createOpts","options","method","created","result","SupportedDidMethodEnum","DID_KEY","codecName","createdIdentifier","createIdentifier","identifiers","agent","didManagerFind","provider","DID_PREFIX","some","length","didManagerCreate","kms","getKms","alias","IdentifierAliasEnum","PRIMARY","Date","getTime","matchedKeys","mapIdentifierKeysToDocWithJwkSupport","Array","isArray","getEthereumAddressFromKey","ethereumAddress","account","toLowerCase","computeAddress","publicKeyHex","getControllerKey","getKeys","jwkThumbprint","kmsKeyRef","dereferenceDidKeysWithJwkSupport","section","convert","Promise","all","getDIDComponentById","didUrl","isDefined","hexKey","extractPublicKeyHexWithJwkSupport","publicKeyBase58","publicKeyBase64","publicKeyJwk","keyProps","newKey","jwkTtoPublicKeyHex","jwk","vm","sanitizedJwk","pk","kty","curve","crv","toEcLibCurve","xHex","base64ToHex","x","yHex","y","prefix","hex","ec","elliptic","keyFromPublic","getPublic","error","console","toString","fromString","hexKeyFromPEMBasedJwk","extractPublicKeyHex","isEvenHexString","lastChar","keyBytes","extractPublicKeyBytes","convertPublicKeyToX25519","bytesToHex","input","replace","base58ToBytes","publicKeyMultibase","multibaseKeyToBytes","base64ToBytes","hexToBytes","Uint8Array","verificationMethodToJwk","toJwk","keyTypeFromCryptographicSuite","id","didDocumentSectionToJwks","didDocumentSection","searchForVerificationMethods","verificationMethods","jwks","Set","vmOrId","from","didDocumentToJwks","publicKey","assertionMethod","authentication","keyAgreement","capabilityInvocation","capabilityDelegation","didDoc","getAgentResolver","resolve","then","mapIdentifierKeysToDoc","documentKeys","localKeys","convertIdentifierEncryptionKeys","compressIdentifierSecp256k1Keys","extendedKeys","localKey","startsWith","compareBlockchainAccountId","localProps","concat","vmEthAddr","getEthereumAddress","computedAddr","getAgentDIDMethods","didManagerGetProviders","getDID","idOpts","toDID","toDIDs","getKey","reject","kmsKeyRefParts","split","identifierKey","legacyGetIdentifier","didManagerGet","determineKid","mappedKeys","vmKey","extendedKey","getSupportedDIDMethods","didOpts","supportedDIDMethods","AgentDIDResolver","resolverResolution","uniresolverResolution","localResolution","constructor","resolutionResult","origResolutionResult","err","resolveDid","log","iIdentifier","toDidResolutionResult","UniResolver","controller","use","ENC_KEY_ALGS","JwkKeyUse","Encryption","Signature","purpose","services","service","didResolutionMetadata","supportedMethods","didDocumentMetadata","equivalentId","asDidWeb","hostnameOrDID","signDidJWT","args","header","payload","jwtOptions","signer","getDidSigner","createJWT","verificationMethodSection","algorithm","signatureAlgorithmFromKey","data","Object","getPrototypeOf","TextDecoder","decode","keyManagerSign","keyRef"]}
+{"version":3,"sources":["/home/runner/work/SSI-SDK-crypto-extensions/SSI-SDK-crypto-extensions/packages/did-utils/dist/index.cjs","../src/did-functions.ts","../src/types.ts"],"names":["SupportedDidMethodEnum","IdentifierAliasEnum","DID_PREFIX","getAuthenticationKey","identifier","offlineWhenNoDIDRegistered","noVerificationMethodFallback","keyType","controllerKey","context","getFirstKeyWithRelation","vmRelationship","key","undefined","getFirstKeyWithRelationFromDIDDoc","errorOnNotFound","e","Error","message","includes","offlineDID","toDidDocument","didDocument","keys","map","filter","type","kid","controllerKeyId","find","meta","verificationMethod","purposes","did","opts","options","method","primaryIdentifier","createOpts","createdIdentifier","some","kms","result","toLowerCase","ethereumAddress","kmsKeyRef","section","convert","keyProps","hexKey","newKey","dereferenceDidKeysWithJwkSupport","jwk","vm","jwkTtoPublicKeyHex","yHex","curve","publicKeyHex","extractPublicKeyHexWithJwkSupport","lastChar","isEvenHexString","pk","keyBytes","extractPublicKeyHex","toEcLibCurve","y","publicKeyJwk","Uint8Array","extractPublicKeyBytes","id","verificationMethodToJwk","searchForVerificationMethods","didDocumentSection","jwks","didDocumentSectionToJwks","authentication","keyAgreement","didDocumentToJwks","convertIdentifierEncryptionKeys","localKey","localProps","isDefined","extendedKeys","mapIdentifierKeysToDocWithJwkSupport","vmEthAddr","compareBlockchainAccountId","provider","getAgentDIDMethods","getDID","toDID","toDIDs","kmsKeyRefParts","identifierKey","getKey","legacyGetIdentifier","jwkThumbprint","determineKid","getSupportedDIDMethods","getAgentResolver","AgentDIDResolver","resolverResolution","uniresolverResolution","localResolution","resolutionResult","origResolutionResult","err","didUrl","error","JwkKeyUse","purpose","services","supportedMethods","alias","toDidResolutionResult","hostnameOrDID","asDidWeb","args","idOpts","header","verificationMethodSection","data","TextDecoder","algorithm","input"],"mappings":"AAAA,04BAAI,UAAU,EAAE,MAAM,CAAC,cAAc;AACrC,IAAI,OAAO,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;AACxF;AACA;ACHA,2DAA+B;AAC/B,wDAA4B;AAC5B,oEASO;AACP,sEAAmD;AACnD,oDAA0F;AAE1F,6CAAyC;AAEzC,sCASO;AACP,iCAAkC;AAGlC,wFAAqB;AAErB,qDAA2B;AAE3B,iDAAyB;ADnBzB;AACA;AEXO,IAAKA,uBAAAA,kBAAAA,QAAAA,CAAAA,uBAAAA,EAAAA;AFaZ,EAAE,uBAAuB,CAAC,UAAU,EAAE,EAAE,MAAM;AAC9C,EAAE,uBAAuB,CAAC,SAAS,EAAE,EAAE,KAAK;AAC5C,EAAE,uBAAuB,CAAC,SAAS,EAAE,EAAE,KAAK;AAC5C,EAAE,uBAAuB,CAAC,SAAS,EAAE,EAAE,KAAK;AAC5C,EAAE,uBAAuB,CAAC,UAAU,EAAE,EAAE,MAAM;AAC9C,EAAE,uBAAuB,CAAC,SAAS,EAAE,EAAE,KAAK;AAC5C,EAAE,uBAAuB,CAAC,SAAS,EAAE,EAAE,KAAK;AAC5C,EAAE,OEpBUA,uBAAAA;AFqBZ,CAAC,CAAC,CAAC,CAAC,CAAC;AEXE,IAAKC,oBAAAA,kBAAAA,QAAAA,CAAAA,oBAAAA,EAAAA;AFaZ,EAAE,oBAAoB,CAAC,SAAS,EAAE,EAAE,SAAS;AAC7C,EAAE,OEdUA,oBAAAA;AFeZ,CAAC,CAAC,CAAC,CAAC,CAAC;AE6BE,IAAMC,WAAAA,EAAa,MAAA;AF3B1B;AACA;ACeO,IAAMC,qBAAAA,kBAAuB,MAAA,CAAA,MAAA,CAClC,EACEC,UAAAA,EACAC,0BAAAA,EACAC,4BAAAA,EACAC,OAAAA,EACAC,cAAa,CAAA,EAQfC,OAAAA,EAAAA,GAAAA;AAEA,EAAA,OAAO,MAAMC,uBAAAA,CACX;AD7BJ,IC8BMN,UAAAA;AD7BN,IC8BMC,0BAAAA;AD7BN,IC8BMC,4BAAAA;AD7BN,IC8BMC,OAAAA;AD7BN,IC8BMC,aAAAA;AD7BN,IC8BMG,cAAAA,EAAgB;AD7BtB,EC8BI,CAAA,EACAF,OAAAA,CAAAA;AAEJ,CAAA,EA3BoC,sBAAA,CAAA;AA4B7B,IAAMC,wBAAAA,kBAA0B,MAAA,CAAA,MAAA,CACrC,EACEN,UAAAA,EACAC,0BAAAA,EACAC,4BAAAA,EACAC,OAAAA,EACAC,aAAAA,EACAG,eAAc,CAAA,EAShBF,OAAAA,EAAAA,GAAAA;AAEA,EAAA,IAAIG,IAAAA,EAAiCC,KAAAA,CAAAA;AACrC,EAAA,IAAI;AACFD,IAAAA,IAAAA,8BACG,MAAME,iCAAAA,CACL;ADlDR,MCmDUV,UAAAA;ADlDV,MCmDUO,cAAAA;ADlDV,MCmDUI,eAAAA,EAAiB,KAAA;ADlD3B,MCmDUR,OAAAA;ADlDV,MCmDUC;ADlDV,ICmDQ,CAAA,EACAC,OAAAA,CAAAA,gBAAAA,CAEDH,6BAAAA,GAAgCK,eAAAA,IAAmB,qBAAA,EAChDE,KAAAA,EAAAA,EACA,MAAMC,iCAAAA,CACJ;ADxDZ,MCyDcV,UAAAA;ADxDd,MCyDcO,cAAAA,EAAgB,oBAAA;ADxD9B,MCyDcI,eAAAA,EAAiB,KAAA;ADxD/B,MCyDcR,OAAAA;ADxDd,MCyDcC;ADxDd,ICyDY,CAAA,EACAC,OAAAA,CAAAA,GAAAA;ADzDZ,EC2DE,EAAA,MAAA,CAASO,CAAAA,EAAG;AACV,IAAA,GAAA,CAAIA,EAAAA,WAAaC,KAAAA,EAAO;AACtB,MAAA,GAAA,CAAI,CAACD,CAAAA,CAAEE,OAAAA,CAAQC,QAAAA,CAAS,KAAA,EAAA,GAAU,CAACd,0BAAAA,EAA4B;AAC7D,QAAA,MAAMW,CAAAA;AD1Dd,MC2DM;AD1DN,IC2DI,EAAA,KAAO;AACL,MAAA,MAAMA,CAAAA;AD1DZ,IC2DI;AD1DJ,EC2DE;AACA,EAAA,GAAA,CAAI,CAACJ,IAAAA,GAAOP,0BAAAA,EAA4B;AACtC,IAAA,MAAMe,WAAAA,EAAaC,aAAAA,CAAcjB,UAAAA,CAAAA;AACjCQ,IAAAA,IAAAA,8BACG,MAAME,iCAAAA,CACL;AD5DR,MC6DUV,UAAAA;AD5DV,MC6DUO,cAAAA;AD5DV,MC6DUI,eAAAA,EAAiB,KAAA;AD5D3B,MC6DUO,WAAAA,EAAaF,UAAAA;AD5DvB,MC6DUb,OAAAA;AD5DV,MC6DUC;AD5DV,IC6DQ,CAAA,EACAC,OAAAA,CAAAA,gBAAAA,CAEDH,6BAAAA,GAAgCK,eAAAA,IAAmB,qBAAA,EAChDE,KAAAA,EAAAA,EACA,MAAMC,iCAAAA,CACJ;ADlEZ,MCmEcV,UAAAA;ADlEd,MCmEcO,cAAAA,EAAgB,oBAAA;ADlE9B,MCmEcI,eAAAA,EAAiB,KAAA;ADlE/B,MCmEcO,WAAAA,EAAaF,UAAAA;ADlE3B,MCmEcb,OAAAA;ADlEd,MCmEcC;ADlEd,ICmEY,CAAA,EACAC,OAAAA,CAAAA,GAAAA;AAER,IAAA,GAAA,CAAI,CAACG,GAAAA,EAAK;AACRA,MAAAA,IAAAA,EAAMR,UAAAA,CAAWmB,IAAAA,CACdC,GAAAA,CAAI,CAACZ,IAAAA,EAAAA,GAAQA,IAAAA,CAAAA,CACba,MAAAA,CAAO,CAACb,IAAAA,EAAAA,GAAQL,QAAAA,IAAYM,KAAAA,EAAAA,GAAaD,IAAAA,CAAIc,KAAAA,IAASnB,QAAAA,GAAYC,cAAAA,GAAiBI,IAAAA,CAAIe,IAAAA,IAAQvB,UAAAA,CAAWwB,eAAe,CAAA,CACzHC,IAAAA,CAAK,CAACjB,IAAAA,EAAAA,mBAAQA,IAAAA,mBAAIkB,IAAAA,qBAAKC,kBAAAA,6BAAoBL,IAAAA,qBAAKP,QAAAA,mBAAS,gBAAA,IAAA,mBAAqBP,IAAAA,qBAAIkB,IAAAA,qBAAKE,QAAAA,6BAAUb,QAAAA,mBAAS,gBAAA,GAAA,CAAA;ADvEnH,ICwEI;ADvEJ,ECwEE;AACA,EAAA,GAAA,CAAI,CAACP,GAAAA,EAAK;AACR,IAAA,MAAMK,KAAAA,CAAM,CAAA,0CAAA,EAA6Cb,UAAAA,CAAW6B,GAAG,CAAA,CAAA;AACzE,EAAA;AACOrB,EAAAA;AAzF8B;AA8FrCsB;AAE8D,EAAA;AAAuBC,IAAAA;AAA6B,IAAA;AAAeC,MAAAA;AAAO,IAAA;AAAG,EAAA;AACtG,EAAA;AAC5B,IAAA;AACI,MAAA;AACDC,MAAAA;AACV,IAAA;AACF,EAAA;AAEqD,EAAA;AACX,IAAA;AACnB,IAAA;AAAa,MAAA;AAAc,MAAA;AAAgBC,MAAAA;AAAW,IAAA;AACzDA,IAAAA;AACpB,EAAA;AAC0DJ,EAAAA;AACnD,EAAA;AACI,IAAA;AACDK,IAAAA;AACV,EAAA;AArB0C;AAwBoCL;AACP,EAAA;AAAkCE,IAAAA;AAC9BI,EAAAA;AAGX3B,EAAAA;AAL9B;AAQwCqB;AAC9B,EAAA;AACGO,IAAAA;AACzB,IAAA;AAAkCL,MAAAA;AAAS,IAAA;AACKF,IAAAA;AACzCC,IAAAA;AAC7B,EAAA;AAN8B;AAW5B/B;AAgB6D,EAAA;AAAEA,IAAAA;AAAYO,IAAAA;AAAgBW,IAAAA;AAAeb,EAAAA;AAClD,EAAA;AAEhBiB,IAAAA;AAE5B,IAAA;AACHgB,MAAAA;AACT,IAAA;AACF,EAAA;AACqB,EAAA;AAEuB/B,IAAAA;AAE5C,EAAA;AACOE,EAAAA;AAhCwC;AAmCe;AAChC,EAAA;AAChB,IAAA;AACd,EAAA;AACwE8B,EAAAA;AAClD,EAAA;AACR,IAAA;AACd,EAAA;AACOC,EAAAA;AARgC;AAWmC;AACThB,EAAAA;AACvD,EAAA;AAC+D,IAAA;AACzE,EAAA;AACOhB,EAAAA;AALuB;AAY9BiC;AAaGpB,EAAAA;AAjBkB;AAoCS;AAGF,EAAA;AACD,EAAA;AAClB,IAAA;AACT,EAAA;AAG4Cb,EAAAA;AACT,IAAA;AACvB,MAAA;AAC8C,QAAA;AAC9CU,UAAAA;AACQV,UAAAA;AACRkC,UAAAA;AACF,QAAA;AACU,MAAA;AACH,QAAA;AACT,MAAA;AACK,IAAA;AACElC,MAAAA;AACT,IAAA;AAKEA,EAAAA;AACkDmC,IAAAA;AACgB,IAAA;AACvD,IAAA;AAAKC,MAAAA;AAAwBC,MAAAA;AAAO,IAAA;AACU,IAAA;AAC7C,MAAA;AAChB,IAAA;AACOC,IAAAA;AACT,EAAA;AACJ;AAtCsBC;AAwCqB;AAGD,EAAA;AACXC,IAAAA;AAC7B,EAAA;AACyCC,EAAAA;AAC3C;AAPgBC;AAkBkF;AAC3E,EAAA;AACqB,IAAA;AAClB,IAAA;AAC4B,MAAA;AACf,MAAA;AACA,MAAA;AAClB,MAAA;AAGgBC,MAAAA;AAC3B,MAAA;AACyBC,QAAAA;AAEuC,QAAA;AAE3DC,QAAAA;AACY,MAAA;AAC0CD,QAAAA;AAC/D,MAAA;AACgC,IAAA;AACiB,MAAA;AACrB,IAAA;AACM,MAAA;AACpC,IAAA;AACF,EAAA;AAE+BT,EAAAA;AACjC;AA5BgBW;AA8B2B;AACO,EAAA;AACzC,EAAA;AAAC,IAAA;AAAK,IAAA;AAAK,IAAA;AAAK,IAAA;AAAK,IAAA;AAAK,IAAA;AAAK,IAAA;AAAK,IAAA;AAAcC,EAAAA;AAC3D;AAHgBC;AAkB6E;AACtDC,EAAAA;AACyBhD,EAAAA;AACjD,EAAA;AAET,IAAA;AAAC,MAAA;AAAW,MAAA;AAA8B,MAAA;AACI,IAAA;AAEViD,MAAAA;AAEnC,IAAA;AAAC,MAAA;AAAU,MAAA;AAA6B,MAAA;AACM,IAAA;AAExC,MAAA;AACT,IAAA;AACF,EAAA;AACkBA,EAAAA;AACpB;AAjBgBC;AAmBmB;AACwB,EAAA;AAC3D;AAFSC;AAI4C;AAC3B,EAAA;AACiB,IAAA;AACP,EAAA;AACgB,IAAA;AACS,EAAA;AACU,IAAA;AACzC,EAAA;AACO,IAAA;AACqCC,EAAAA;AAClBJ,IAAAA;AACiBK,EAAAA;AAC/B,IAAA;AACxC,EAAA;AACWC,EAAAA;AACb;AAfSC;AAiBqD;AAC9BF,EAAAA;AACpB,EAAA;AAC6Db,IAAAA;AACb,IAAA;AAAU3B,MAAAA;AAAK,IAAA;AACzE,EAAA;AACU,EAAA;AACkD,IAAA;AAC5D,EAAA;AACa2C,EAAAA;AACOjB,EAAAA;AACtB;AAXgBkB;AAedC;AAKsB,EAAA;AAIf,EAAA;AAAEC,IAAAA;AAAqCC,IAAAA;AAAM,EAAA;AACtD;AAZSC;AAgBiD;AACjD,EAAA;AACe,IAAA;AAC8CpD,MAAAA;AACFS,MAAAA;ADvJQ,IAAA;ACyJXT,IAAAA;AACUqD,IAAAA;AACJC,IAAAA;AACItD,IAAAA;AACAA,IAAAA;AACzE,EAAA;AACF;AAZgBuD;AAkCZlE;AAYWP,EAAAA;AAEA,EAAA;AAC0C,IAAA;AACvD,EAAA;AAKoEO,EAAAA;AAGsBA,EAAAA;AAEpCmE,EAAAA;AAI9C/C,EAAAA;AAMS0B,IAAAA;AAIC,IAAA;AACoBsB,MAAAA;AACzB,MAAA;AAAKC,QAAAA;AAAkB,QAAA;AAAKlD,UAAAA;AAAMC,UAAAA;AAAmB,QAAA;AAAE,MAAA;AACzD,IAAA;AACE,MAAA;AACT,IAAA;AAEMkD,EAAAA;AAESC,EAAAA;AACrB;AArDsBC;AAmEoE;AAEnBpD,EAAAA;AAG5D,IAAA;AACT,EAAA;AACmCA,EAAAA;AACP,EAAA;AACkBY,IAAAA;AAC9C,EAAA;AACkEA,EAAAA;AAC1CyC,EAAAA;AAC1B;AAbSC;AAemE;AACFC,EAAAA;AAC1E;AAFsBC;AAI6C;AACtB,EAAA;AAC3BnF,IAAAA;AACkC,EAAA;AACvB6B,IAAAA;AAC3B,EAAA;AACkD,EAAA;AACpD;AAPgBuD;AAS6D;AACvC,EAAA;AAC3BpF,IAAAA;AACT,EAAA;AACoB,EAAA;AACA6B,IAAAA;AACpB,EAAA;AACgD,EAAA;AAClD;AARgBwD;AAUoE;AAChE,EAAA;AACT,IAAA;AACT,EAAA;AACuBA,EAAAA;AACzB;AALgBC;AAWZ7C;AAQe,EAAA;AACiB,IAAA;AAClC,EAAA;AAE2C,EAAA;AACkB8C,EAAAA;AAEmBhE,EAAAA;AAC5D,EAAA;AACsC,IAAA;AAAEvB,MAAAA;AAAYO,MAAAA;AAAkCF,IAAAA;AACxE,IAAA;AACkCE,MAAAA;AAClE,IAAA;AACe,IAAA;AAE0C0D,MAAAA;AAEzD,IAAA;AACoB,IAAA;AAEqC3C,MAAAA;AAEzD,IAAA;AACoB,IAAA;AACG,MAAA;AACvB,IAAA;AACF,EAAA;AACoB,EAAA;AAEhB,IAAA;AAEJ,EAAA;AAEOkE,EAAAA;AACT;AA9CsBC;AA6De;AAEC,EAAA;AACO,IAAA;AAAOzF,MAAAA;AAAW,IAAA;AAC7D,EAAA;AACOA,EAAAA;AACT;AAZe0F;AA4BkC;AAET,EAAA;AACCzB,IAAAA;AACvC,EAAA;AACqD5D,EAAAA;AAEnD,EAAA;AACEL,IAAAA;AACgB,IAAA;AAElBK,EAAAA;AAEwE,EAAA;AAC/D,EAAA;AACgDsF,IAAAA;AAC3D,EAAA;AAE0DpE,EAAAA;AAC5D;AA3BsBqE;AA6BgF;AACpCvF,EAAAA;AAClE;AAFsBwF;AAUnB;AAEoC/D,EAAAA;AACvC;AATgBgE;AAWHC;AAAAA,EAAAA;AD1Q+D,IAAA;AACA,EAAA;AC0QzD1F,EAAAA;AACA2F,EAAAA;AACAC,EAAAA;AACAC,EAAAA;AAKf,EAAA;AACe7F,IAAAA;AACwC,IAAA;AACM,IAAA;AACZ,IAAA;AACnD,EAAA;AAE4F,EAAA;AACtF8F,IAAAA;AACAC,IAAAA;AACAC,IAAAA;AAC2DJ,IAAAA;AACjD,MAAA;AACd,IAAA;AAC6B,IAAA;AACvB,MAAA;AACqD,QAAA;AAAEK,UAAAA;AAAQvE,UAAAA;AAAQ,QAAA;AAClD,MAAA;AACjBwE,QAAAA;AACR,MAAA;AACF,IAAA;AACsB,IAAA;AACGJ,MAAAA;AACoB,MAAA;AACtB1F,QAAAA;AACrB,MAAA;AACK,IAAA;AACO,MAAA;AACd,IAAA;AAC+C,IAAA;AACjC,MAAA;AACR,MAAA;AAC4B,QAAA;AAC6B,QAAA;AAAEoB,UAAAA;AAAI,QAAA;AACX,QAAA;AAAEA,UAAAA;AAAI,QAAA;AAC1B,QAAA;AAC1BpB,UAAAA;AACD,QAAA;AAC0DoB,UAAAA;AACjE,QAAA;AACuB,MAAA;AACb,QAAA;AACF0E,UAAAA;AACR,QAAA;AACF,MAAA;AACF,IAAA;AACsB,IAAA;AACO,MAAA;AACFJ,QAAAA;AACzB,MAAA;AACmC,MAAA;AACd1F,QAAAA;AACrB,MAAA;AACF,IAAA;AACqD,IAAA;AACiB,MAAA;AACTsB,MAAAA;AAChC,MAAA;AACFoE,QAAAA;AACzB,MAAA;AACkC,MAAA;AAC1B1F,QAAAA;AACR,MAAA;AACF,IAAA;AAES,IAAA;AAED4F,MAAAA;AACR,IAAA;AACgD,IAAA;AACwBL,MAAAA;AACxE,IAAA;AAC2BI,IAAAA;AAC7B,EAAA;AACF;AAiBG;AAE0C3F,EAAAA;AAE3B,EAAA;AACsBoB,IAAAA;AACtB,IAAA;AACA,MAAA;AACRA,MAAAA;AACqCrB,MAAAA;AACR,QAAA;AACjBqB,UAAAA;AACqD,UAAA;AACjB,UAAA;AACgB2E,YAAAA;AAC9DhG,YAAAA;AACF,UAAA;AACM,UAAA;AACR,QAAA;AACOyC,QAAAA;AACT,MAAA;AACuE,MAAA;AAKlDwD,QAAAA;AAGyC,UAAA;AACzClF,YAAAA;AACb,UAAA;AACwB,UAAA;AAC1B,QAAA;AACJ,MAAA;AACqE,MAAA;AAI3CkF,QAAAA;AAGkC,UAAA;AACzClF,YAAAA;AACb,UAAA;AACwB,UAAA;AAC1B,QAAA;AACJ,MAAA;AACsE,MAAA;AAGpC,QAAA;AAE0B,UAAA;AACzCA,YAAAA;AACb,UAAA;AACwB,UAAA;AAC1B,QAAA;AACJ,MAAA;AACsE,MAAA;AAI1C,QAAA;AAGgC,UAAA;AACzCA,YAAAA;AACb,UAAA;AACwB,UAAA;AAC1B,QAAA;AACJ,MAAA;AACsE,MAAA;AAI1C,QAAA;AAGgC,UAAA;AACzCA,YAAAA;AACb,UAAA;AACwB,UAAA;AAC1B,QAAA;AACJ,MAAA;AAC2D,MAAA;AAAsBmF,QAAAA;AAAS,MAAA;AAC9F,IAAA;AACF,EAAA;AACOxF,EAAAA;AACT;AA9FgBD;AAqGb;AAEsD,EAAA;AAET,EAAA;AAChC,IAAA;AACZC,IAAAA;AACuB,IAAA;AACD,MAAA;AAAS,QAAA;AAAW,MAAA;AAG/ByF,MAAAA;AAA+E,QAAA;AAAuB,MAAA;AACjH,IAAA;AACqB,IAAA;AACM,MAAA;AAA4BC,QAAAA;AAAM,MAAA;AAC7D,IAAA;AACF,EAAA;AACOT,EAAAA;AACT;AAvBgBU;AAyBoC;AACxCC,EAAAA;AACA,EAAA;AACI,IAAA;AACd,EAAA;AACgC,EAAA;AACvBjF,IAAAA;AACT,EAAA;AAC+DU,EAAAA;AACjE;AATsBwE;AAcWC;AACuBA,EAAAA;AACnC,EAAA;AACdjF,IAAAA;AACwB,IAAA;AAAEkF,MAAAA;AAAQ5G,MAAAA;AAAQ,IAAA;AAC/C,EAAA;AAEsC6G,EAAAA;AAPd;AAcxBF;AAiB4BA,EAAAA;AAEyB3G,EAAAA;AAEnD,EAAA;AACEL,IAAAA;AACuBmH,IAAAA;AACL1E,IAAAA;AAEpBpC,EAAAA;AAEgD,EAAA;AAAEG,IAAAA;AAAI,EAAA;AAE1C4G,EAAAA;AAC0DC,IAAAA;AAC5B,IAAA;AAC5B9F,MAAAA;AACZ+F,MAAAA;AACMC,MAAAA;AACR,IAAA;AACF,EAAA;AAtC0B;ADrSgD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA","file":"/home/runner/work/SSI-SDK-crypto-extensions/SSI-SDK-crypto-extensions/packages/did-utils/dist/index.cjs","sourcesContent":[null,"import { computeAddress } from '@ethersproject/transactions'\nimport { UniResolver } from '@sphereon/did-uni-client'\nimport {\n  ENC_KEY_ALGS,\n  getKms,\n  JwkKeyUse,\n  keyTypeFromCryptographicSuite,\n  sanitizedJwk,\n  signatureAlgorithmFromKey,\n  TKeyType,\n  toJwk,\n} from '@sphereon/ssi-sdk-ext.key-utils'\nimport { base64ToHex, hexKeyFromPEMBasedJwk } from '@sphereon/ssi-sdk-ext.x509-utils'\nimport { base58ToBytes, base64ToBytes, bytesToHex, hexToBytes, multibaseKeyToBytes } from '@sphereon/ssi-sdk.core'\nimport { JWK } from '@sphereon/ssi-types'\nimport { convertPublicKeyToX25519 } from '@stablelib/ed25519'\nimport { DIDDocument, DIDDocumentSection, DIDResolutionResult, IAgentContext, IDIDManager, IIdentifier, IKey, IResolver } from '@veramo/core'\nimport {\n  _ExtendedIKey,\n  _ExtendedVerificationMethod,\n  _NormalizedVerificationMethod,\n  compressIdentifierSecp256k1Keys,\n  convertIdentifierEncryptionKeys,\n  getEthereumAddress,\n  isDefined,\n  mapIdentifierKeysToDoc,\n} from '@veramo/utils'\nimport { createJWT, Signer } from 'did-jwt'\nimport { DIDResolutionOptions, JsonWebKey, Resolvable, VerificationMethod } from 'did-resolver'\n// @ts-ignore\nimport elliptic from 'elliptic'\n// @ts-ignore\nimport { fromString } from 'uint8arrays/from-string'\n// @ts-ignore\nimport { toString } from 'uint8arrays/to-string'\nimport {\n  CreateIdentifierOpts,\n  CreateOrGetIdentifierOpts,\n  DID_PREFIX,\n  GetOrCreateResult,\n  GetSignerArgs,\n  IdentifierAliasEnum,\n  IdentifierProviderOpts,\n  IDIDOptions,\n  SignJwtArgs,\n  SupportedDidMethodEnum,\n} from './types'\n\nexport const getAuthenticationKey = async (\n  {\n    identifier,\n    offlineWhenNoDIDRegistered,\n    noVerificationMethodFallback,\n    keyType,\n    controllerKey,\n  }: {\n    identifier: IIdentifier\n    keyType?: TKeyType\n    offlineWhenNoDIDRegistered?: boolean\n    noVerificationMethodFallback?: boolean\n    controllerKey?: boolean\n  },\n  context: IAgentContext<IResolver & IDIDManager>\n): Promise<_ExtendedIKey> => {\n  return await getFirstKeyWithRelation(\n    {\n      identifier,\n      offlineWhenNoDIDRegistered,\n      noVerificationMethodFallback,\n      keyType,\n      controllerKey,\n      vmRelationship: 'authentication',\n    },\n    context\n  )\n}\nexport const getFirstKeyWithRelation = async (\n  {\n    identifier,\n    offlineWhenNoDIDRegistered,\n    noVerificationMethodFallback,\n    keyType,\n    controllerKey,\n    vmRelationship,\n  }: {\n    identifier: IIdentifier\n    keyType?: TKeyType\n    offlineWhenNoDIDRegistered?: boolean\n    noVerificationMethodFallback?: boolean\n    controllerKey?: boolean\n    vmRelationship: DIDDocumentSection\n  },\n  context: IAgentContext<IResolver & IDIDManager>\n): Promise<_ExtendedIKey> => {\n  let key: _ExtendedIKey | undefined = undefined\n  try {\n    key =\n      (await getFirstKeyWithRelationFromDIDDoc(\n        {\n          identifier,\n          vmRelationship,\n          errorOnNotFound: false,\n          keyType,\n          controllerKey,\n        },\n        context\n      )) ??\n      (noVerificationMethodFallback || vmRelationship === 'verificationMethod' // let's not fallback to the same value again\n        ? undefined\n        : await getFirstKeyWithRelationFromDIDDoc(\n            {\n              identifier,\n              vmRelationship: 'verificationMethod',\n              errorOnNotFound: false,\n              keyType,\n              controllerKey,\n            },\n            context\n          ))\n  } catch (e) {\n    if (e instanceof Error) {\n      if (!e.message.includes('404') || !offlineWhenNoDIDRegistered) {\n        throw e\n      }\n    } else {\n      throw e\n    }\n  }\n  if (!key && offlineWhenNoDIDRegistered) {\n    const offlineDID = toDidDocument(identifier)\n    key =\n      (await getFirstKeyWithRelationFromDIDDoc(\n        {\n          identifier,\n          vmRelationship,\n          errorOnNotFound: false,\n          didDocument: offlineDID,\n          keyType,\n          controllerKey,\n        },\n        context\n      )) ??\n      (noVerificationMethodFallback || vmRelationship === 'verificationMethod' // let's not fallback to the same value again\n        ? undefined\n        : await getFirstKeyWithRelationFromDIDDoc(\n            {\n              identifier,\n              vmRelationship: 'verificationMethod',\n              errorOnNotFound: false,\n              didDocument: offlineDID,\n              keyType,\n              controllerKey,\n            },\n            context\n          ))\n    if (!key) {\n      key = identifier.keys\n        .map((key) => key as _ExtendedIKey)\n        .filter((key) => keyType === undefined || key.type === keyType || (controllerKey && key.kid === identifier.controllerKeyId))\n        .find((key) => key.meta.verificationMethod?.type.includes('authentication') || key.meta.purposes?.includes('authentication'))\n    }\n  }\n  if (!key) {\n    throw Error(`Could not find authentication key for DID ${identifier.did}`)\n  }\n  return key\n}\n\nexport const getOrCreatePrimaryIdentifier = async (\n  context: IAgentContext<IDIDManager>,\n  opts?: CreateOrGetIdentifierOpts\n): Promise<GetOrCreateResult<IIdentifier>> => {\n  const primaryIdentifier = await getPrimaryIdentifier(context, { ...opts?.createOpts?.options, ...(opts?.method && { method: opts.method }) })\n  if (primaryIdentifier !== undefined) {\n    return {\n      created: false,\n      result: primaryIdentifier,\n    }\n  }\n\n  if (opts?.method === SupportedDidMethodEnum.DID_KEY) {\n    const createOpts = opts?.createOpts ?? {}\n    createOpts.options = { codecName: 'EBSI', type: 'Secp256r1', ...createOpts }\n    opts.createOpts = createOpts\n  }\n  const createdIdentifier = await createIdentifier(context, opts)\n  return {\n    created: true,\n    result: createdIdentifier,\n  }\n}\n\nexport const getPrimaryIdentifier = async (context: IAgentContext<IDIDManager>, opts?: IdentifierProviderOpts): Promise<IIdentifier | undefined> => {\n  const identifiers = (await context.agent.didManagerFind(opts?.method ? { provider: `${DID_PREFIX}${opts?.method}` } : {})).filter(\n    (identifier: IIdentifier) => opts?.type === undefined || identifier.keys.some((key: IKey) => key.type === opts?.type)\n  )\n\n  return identifiers && identifiers.length > 0 ? identifiers[0] : undefined\n}\n\nexport const createIdentifier = async (context: IAgentContext<IDIDManager>, opts?: CreateIdentifierOpts): Promise<IIdentifier> => {\n  return await context.agent.didManagerCreate({\n    kms: await getKms(context, opts?.createOpts?.kms),\n    ...(opts?.method && { provider: `${DID_PREFIX}${opts?.method}` }),\n    alias: opts?.createOpts?.alias ?? `${IdentifierAliasEnum.PRIMARY}-${opts?.method}-${opts?.createOpts?.options?.type}-${new Date().getTime()}`,\n    options: opts?.createOpts?.options,\n  })\n}\n\nexport const getFirstKeyWithRelationFromDIDDoc = async (\n  {\n    identifier,\n    vmRelationship = 'verificationMethod',\n    keyType,\n    errorOnNotFound = false,\n    didDocument,\n    controllerKey,\n  }: {\n    identifier: IIdentifier\n    controllerKey?: boolean\n    vmRelationship?: DIDDocumentSection\n    keyType?: TKeyType\n    errorOnNotFound?: boolean\n    didDocument?: DIDDocument\n  },\n  context: IAgentContext<IResolver & IDIDManager>\n): Promise<_ExtendedIKey | undefined> => {\n  const matchedKeys = await mapIdentifierKeysToDocWithJwkSupport({ identifier, vmRelationship, didDocument }, context)\n  if (Array.isArray(matchedKeys) && matchedKeys.length > 0) {\n    const result = matchedKeys.find(\n      (key) => keyType === undefined || key.type === keyType || (controllerKey && key.kid === identifier.controllerKeyId)\n    )\n    if (result) {\n      return result\n    }\n  }\n  if (errorOnNotFound) {\n    throw new Error(\n      `Could not find key with relationship ${vmRelationship} in DID document for ${identifier.did}${keyType ? ' and key type: ' + keyType : ''}`\n    )\n  }\n  return undefined\n}\n\nexport const getEthereumAddressFromKey = ({ key }: { key: IKey }) => {\n  if (key.type !== 'Secp256k1') {\n    throw Error(`Can only get ethereum address from a Secp256k1 key. Type is ${key.type} for keyRef: ${key.kid}`)\n  }\n  const ethereumAddress = key.meta?.ethereumAddress ?? key.meta?.account?.toLowerCase() ?? computeAddress(`0x${key.publicKeyHex}`).toLowerCase()\n  if (!ethereumAddress) {\n    throw Error(`Could not get or generate ethereum address from key with keyRef ${key.kid}`)\n  }\n  return ethereumAddress\n}\n\nexport const getControllerKey = ({ identifier }: { identifier: IIdentifier }) => {\n  const key = identifier.keys.find((key) => key.kid === identifier.controllerKeyId)\n  if (!key) {\n    throw Error(`Could not get controller key for identifier ${identifier}`)\n  }\n  return key\n}\n\nexport const getKeys = ({\n  jwkThumbprint,\n  kms,\n  identifier,\n  kmsKeyRef,\n  keyType,\n  controllerKey,\n}: {\n  identifier: IIdentifier\n  kmsKeyRef?: string\n  keyType?: TKeyType\n  kms?: string\n  jwkThumbprint?: string\n  controllerKey?: boolean\n}) => {\n  return identifier.keys\n    .filter((key) => !keyType || key.type === keyType)\n    .filter((key) => !kms || key.kms === kms)\n    .filter((key) => !kmsKeyRef || key.kid === kmsKeyRef)\n    .filter((key) => !jwkThumbprint || key.meta?.jwkThumbprint === jwkThumbprint)\n    .filter((key) => !controllerKey || identifier.controllerKeyId === key.kid)\n}\n\n//TODO: Move to ssi-sdk/core and create PR upstream\n/**\n * Dereferences keys from DID document and normalizes them for easy comparison.\n *\n * When dereferencing keyAgreement keys, only Ed25519 and X25519 curves are supported.\n * Other key types are omitted from the result and Ed25519 keys are converted to X25519\n *\n * @returns a Promise that resolves to the list of dereferenced keys.\n *\n * @beta This API may change without a BREAKING CHANGE notice.\n */\nexport async function dereferenceDidKeysWithJwkSupport(\n  didDocument: DIDDocument,\n  section: DIDDocumentSection = 'keyAgreement',\n  context: IAgentContext<IResolver>\n): Promise<_NormalizedVerificationMethod[]> {\n  const convert = section === 'keyAgreement'\n  if (section === 'service') {\n    return []\n  }\n  return (\n    await Promise.all(\n      (didDocument[section] || []).map(async (key: string | VerificationMethod) => {\n        if (typeof key === 'string') {\n          try {\n            return (await context.agent.getDIDComponentById({\n              didDocument,\n              didUrl: key,\n              section,\n            })) as _ExtendedVerificationMethod\n          } catch (e) {\n            return null\n          }\n        } else {\n          return key as _ExtendedVerificationMethod\n        }\n      })\n    )\n  )\n    .filter(isDefined)\n    .map((key) => {\n      const hexKey = extractPublicKeyHexWithJwkSupport(key, convert)\n      const { publicKeyHex, publicKeyBase58, publicKeyBase64, publicKeyJwk, ...keyProps } = key\n      const newKey = { ...keyProps, publicKeyHex: hexKey }\n      if (convert && 'Ed25519VerificationKey2018' === newKey.type) {\n        newKey.type = 'X25519KeyAgreementKey2019'\n      }\n      return newKey\n    })\n}\n\nexport function jwkTtoPublicKeyHex(jwk: JWK): string {\n  // todo: Hacky way to convert this to a VM. Should extract the logic from the below methods\n  // @ts-ignore\n  const vm: _ExtendedVerificationMethod = {\n    publicKeyJwk: sanitizedJwk(jwk),\n  }\n  return extractPublicKeyHexWithJwkSupport(vm)\n}\n\n/**\n * Converts the publicKey of a VerificationMethod to hex encoding (publicKeyHex)\n *\n * @param pk - the VerificationMethod to be converted\n * @param convert - when this flag is set to true, Ed25519 keys are converted to their X25519 pairs\n * @returns the hex encoding of the public key\n *\n * @beta This API may change without a BREAKING CHANGE notice.\n */\nexport function extractPublicKeyHexWithJwkSupport(pk: _ExtendedVerificationMethod, convert = false): string {\n  if (pk.publicKeyJwk) {\n    const jwk = sanitizedJwk(pk.publicKeyJwk)\n    if (jwk.kty === 'EC') {\n      const curve = jwk.crv ? toEcLibCurve(jwk.crv) : 'p256'\n      const xHex = base64ToHex(jwk.x!, 'base64url')\n      const yHex = base64ToHex(jwk.y!, 'base64url')\n      const prefix = '04' // isEven(yHex) ? '02' : '03'\n      // Uncompressed Hex format: 04<x><y>\n      // Compressed Hex format: 02<x> (for even y) or 03<x> (for uneven y)\n      const hex = `${prefix}${xHex}${yHex}`\n      try {\n        const ec = new elliptic.ec(curve)\n        // We return directly as we don't want to convert the result back into Uint8Array and then convert again to hex as the elliptic lib already returns hex strings\n        const publicKeyHex = ec.keyFromPublic(hex, 'hex').getPublic(true, 'hex')\n        // This returns a short form (x) with 02 or 03 prefix\n        return publicKeyHex\n      } catch (error: any) {\n        console.error(`Error converting EC with elliptic lib curve ${curve} from JWK to hex. x: ${jwk.x}, y: ${jwk.y}, error: ${error}`, error)\n      }\n    } else if (jwk.crv === 'Ed25519') {\n      return toString(fromString(jwk.x!, 'base64url'), 'base16')\n    } else if (jwk.kty === 'RSA') {\n      return hexKeyFromPEMBasedJwk(jwk, 'public')\n    }\n  }\n  // delegate the other types to the original Veramo function\n  return extractPublicKeyHex(pk, convert)\n}\n\nexport function isEvenHexString(hex: string) {\n  const lastChar = hex[hex.length - 1].toLowerCase()\n  return ['0', '2', '4', '6', '8', 'a', 'c', 'e'].includes(lastChar)\n}\n\ninterface LegacyVerificationMethod extends VerificationMethod {\n  publicKeyBase64: string\n}\n\n/**\n * Converts the publicKey of a VerificationMethod to hex encoding (publicKeyHex)\n *\n * @param pk - the VerificationMethod to be converted\n * @param convert - when this flag is set to true, Ed25519 keys are converted to their X25519 pairs\n * @returns the hex encoding of the public key\n *\n * @beta This API may change without a BREAKING CHANGE notice.\n */\nexport function extractPublicKeyHex(pk: _ExtendedVerificationMethod, convert: boolean = false): string {\n  let keyBytes = extractPublicKeyBytes(pk)\n  const jwk = pk.publicKeyJwk ? sanitizedJwk(pk.publicKeyJwk) : undefined\n  if (convert) {\n    if (\n      ['Ed25519', 'Ed25519VerificationKey2018', 'Ed25519VerificationKey2020'].includes(pk.type) ||\n      (pk.type === 'JsonWebKey2020' && jwk?.crv === 'Ed25519')\n    ) {\n      keyBytes = convertPublicKeyToX25519(keyBytes)\n    } else if (\n      !['X25519', 'X25519KeyAgreementKey2019', 'X25519KeyAgreementKey2020'].includes(pk.type) &&\n      !(pk.type === 'JsonWebKey2020' && jwk?.crv === 'X25519')\n    ) {\n      return ''\n    }\n  }\n  return bytesToHex(keyBytes)\n}\n\nfunction toEcLibCurve(input: string) {\n  return input.toLowerCase().replace('-', '').replace('_', '')\n}\n\nfunction extractPublicKeyBytes(pk: VerificationMethod): Uint8Array {\n  if (pk.publicKeyBase58) {\n    return base58ToBytes(pk.publicKeyBase58)\n  } else if (pk.publicKeyMultibase) {\n    return multibaseKeyToBytes(pk.publicKeyMultibase)\n  } else if ((<LegacyVerificationMethod>pk).publicKeyBase64) {\n    return base64ToBytes((<LegacyVerificationMethod>pk).publicKeyBase64)\n  } else if (pk.publicKeyHex) {\n    return hexToBytes(pk.publicKeyHex)\n  } else if (pk.publicKeyJwk?.crv && pk.publicKeyJwk.x && pk.publicKeyJwk.y) {\n    return hexToBytes(extractPublicKeyHexWithJwkSupport(pk))\n  } else if (pk.publicKeyJwk && (pk.publicKeyJwk.crv === 'Ed25519' || pk.publicKeyJwk.crv === 'X25519') && pk.publicKeyJwk.x) {\n    return base64ToBytes(pk.publicKeyJwk.x)\n  }\n  return new Uint8Array()\n}\n\nexport function verificationMethodToJwk(vm: VerificationMethod): JWK {\n  let jwk: JWK | undefined = vm.publicKeyJwk as JWK\n  if (!jwk) {\n    let publicKeyHex = vm.publicKeyHex ?? toString(extractPublicKeyBytes(vm), 'hex')\n    jwk = toJwk(publicKeyHex, keyTypeFromCryptographicSuite({ crv: vm.type }))\n  }\n  if (!jwk) {\n    throw Error(`Could not convert verification method to jwk`)\n  }\n  jwk.kid = vm.id\n  return sanitizedJwk(jwk)\n}\n\nfunction didDocumentSectionToJwks(\n  didDocumentSection: DIDDocumentSection,\n  searchForVerificationMethods?: (VerificationMethod | string)[],\n  verificationMethods?: VerificationMethod[]\n) {\n  const jwks = new Set(\n    (searchForVerificationMethods ?? [])\n      .map((vmOrId) => (typeof vmOrId === 'object' ? vmOrId : verificationMethods?.find((vm) => vm.id === vmOrId)))\n      .filter(isDefined)\n      .map((vm) => verificationMethodToJwk(vm))\n  )\n  return { didDocumentSection, jwks: Array.from(jwks) }\n}\n\nexport type DidDocumentJwks = Record<Exclude<DIDDocumentSection, 'publicKey' | 'service'>, Array<JWK>>\n\nexport function didDocumentToJwks(didDocument: DIDDocument): DidDocumentJwks {\n  return {\n    verificationMethod: [\n      ...didDocumentSectionToJwks('publicKey', didDocument.publicKey, didDocument.verificationMethod).jwks, // legacy support\n      ...didDocumentSectionToJwks('verificationMethod', didDocument.verificationMethod, didDocument.verificationMethod).jwks,\n    ],\n    assertionMethod: didDocumentSectionToJwks('assertionMethod', didDocument.assertionMethod, didDocument.verificationMethod).jwks,\n    authentication: didDocumentSectionToJwks('authentication', didDocument.authentication, didDocument.verificationMethod).jwks,\n    keyAgreement: didDocumentSectionToJwks('keyAgreement', didDocument.keyAgreement, didDocument.verificationMethod).jwks,\n    capabilityInvocation: didDocumentSectionToJwks('capabilityInvocation', didDocument.capabilityInvocation, didDocument.verificationMethod).jwks,\n    capabilityDelegation: didDocumentSectionToJwks('capabilityDelegation', didDocument.capabilityDelegation, didDocument.verificationMethod).jwks,\n  }\n}\n\n/**\n * Maps the keys of a locally managed {@link @veramo/core#IIdentifier | IIdentifier} to the corresponding\n * {@link did-resolver#VerificationMethod | VerificationMethod} entries from the DID document.\n *\n * @param identifier - the identifier to be mapped\n * @param section - the section of the DID document to be mapped (see\n *   {@link https://www.w3.org/TR/did-core/#verification-relationships | verification relationships}), but can also be\n *   `verificationMethod` to map all the keys.\n * @param didDocument\n * @param context - the veramo agent context, which must contain a {@link @veramo/core#IResolver | IResolver}\n *   implementation that can resolve the DID document of the identifier.\n *\n * @returns an array of mapped keys. The corresponding verification method is added to the `meta.verificationMethod`\n *   property of the key.\n *\n * @beta This API may change without a BREAKING CHANGE notice.\n */\nexport async function mapIdentifierKeysToDocWithJwkSupport(\n  {\n    identifier,\n    vmRelationship = 'verificationMethod',\n    didDocument,\n  }: {\n    identifier: IIdentifier\n    vmRelationship?: DIDDocumentSection\n    didDocument?: DIDDocument\n  },\n  context: IAgentContext<IResolver & IDIDManager>\n): Promise<_ExtendedIKey[]> {\n  const didDoc =\n    didDocument ??\n    (await getAgentResolver(context)\n      .resolve(identifier.did)\n      .then((result) => result.didDocument))\n  if (!didDoc) {\n    throw Error(`Could not resolve DID ${identifier.did}`)\n  }\n\n  // const rsaDidWeb = identifier.keys && identifier.keys.length > 0 && identifier.keys.find((key) => key.type === 'RSA') && didDocument\n\n  // We skip mapping in case the identifier is RSA and a did document is supplied.\n  const keys = didDoc ? [] : await mapIdentifierKeysToDoc(identifier, vmRelationship, context)\n\n  // dereference all key agreement keys from DID document and normalize\n  const documentKeys: VerificationMethod[] = await dereferenceDidKeysWithJwkSupport(didDoc, vmRelationship, context)\n\n  const localKeys = vmRelationship === 'keyAgreement' ? convertIdentifierEncryptionKeys(identifier) : compressIdentifierSecp256k1Keys(identifier)\n\n  // finally map the didDocument keys to the identifier keys by comparing `publicKeyHex`\n  const extendedKeys: _ExtendedIKey[] = documentKeys\n    .map((verificationMethod) => {\n      /*if (verificationMethod.type !== 'JsonWebKey2020') {\n                                                                                                              return null\n                                                                                                            }*/\n      const localKey = localKeys.find(\n        (localKey) =>\n          localKey.publicKeyHex === verificationMethod.publicKeyHex ||\n          verificationMethod.publicKeyHex?.startsWith(localKey.publicKeyHex) ||\n          compareBlockchainAccountId(localKey, verificationMethod)\n      )\n      if (localKey) {\n        const { meta, ...localProps } = localKey\n        return { ...localProps, meta: { ...meta, verificationMethod } }\n      } else {\n        return null\n      }\n    })\n    .filter(isDefined)\n\n  return keys.concat(extendedKeys)\n}\n\n/**\n * Compares the `blockchainAccountId` of a `EcdsaSecp256k1RecoveryMethod2020` verification method with the address\n * computed from a locally managed key.\n *\n * @returns true if the local key address corresponds to the `blockchainAccountId`\n *\n * @param localKey - The locally managed key\n * @param verificationMethod - a {@link did-resolver#VerificationMethod | VerificationMethod} with a\n *   `blockchainAccountId`\n *\n * @beta This API may change without a BREAKING CHANGE notice.\n */\nfunction compareBlockchainAccountId(localKey: IKey, verificationMethod: VerificationMethod): boolean {\n  if (\n    (verificationMethod.type !== 'EcdsaSecp256k1RecoveryMethod2020' && verificationMethod.type !== 'EcdsaSecp256k1VerificationKey2019') ||\n    localKey.type !== 'Secp256k1'\n  ) {\n    return false\n  }\n  let vmEthAddr = getEthereumAddress(verificationMethod)\n  if (localKey.meta?.account) {\n    return vmEthAddr === localKey.meta?.account.toLowerCase()\n  }\n  const computedAddr = computeAddress('0x' + localKey.publicKeyHex).toLowerCase()\n  return computedAddr === vmEthAddr\n}\n\nexport async function getAgentDIDMethods(context: IAgentContext<IDIDManager>) {\n  return (await context.agent.didManagerGetProviders()).map((provider) => provider.toLowerCase().replace('did:', ''))\n}\n\nexport function getDID(idOpts: { identifier: IIdentifier | string }): string {\n  if (typeof idOpts.identifier === 'string') {\n    return idOpts.identifier\n  } else if (typeof idOpts.identifier === 'object') {\n    return idOpts.identifier.did\n  }\n  throw Error(`Cannot get DID from identifier value`)\n}\n\nexport function toDID(identifier: string | IIdentifier | Partial<IIdentifier>): string {\n  if (typeof identifier === 'string') {\n    return identifier\n  }\n  if (identifier.did) {\n    return identifier.did\n  }\n  throw Error(`No DID value present in identifier`)\n}\n\nexport function toDIDs(identifiers?: (string | IIdentifier | Partial<IIdentifier>)[]): string[] {\n  if (!identifiers) {\n    return []\n  }\n  return identifiers.map(toDID)\n}\n\nexport async function getKey(\n  {\n    identifier,\n    vmRelationship = 'authentication',\n    kmsKeyRef,\n  }: {\n    identifier: IIdentifier\n    vmRelationship?: DIDDocumentSection\n    kmsKeyRef?: string\n  },\n  context: IAgentContext<IResolver & IDIDManager>\n): Promise<IKey> {\n  if (!identifier) {\n    return Promise.reject(new Error(`No identifier provided to getKey method!`))\n  }\n  // normalize to kid, in case keyId was passed in as did#vm or #vm\n  const kmsKeyRefParts = kmsKeyRef?.split(`#`)\n  const kid = kmsKeyRefParts ? (kmsKeyRefParts?.length === 2 ? kmsKeyRefParts[1] : kmsKeyRefParts[0]) : undefined\n  // todo: We really should do a keyRef and external kid here\n  let identifierKey = kmsKeyRef ? identifier.keys.find((key: IKey) => key.kid === kid || key?.meta?.jwkThumbprint === kid) : undefined\n  if (!identifierKey) {\n    const keys = await mapIdentifierKeysToDocWithJwkSupport({ identifier, vmRelationship: vmRelationship }, context)\n    if (!keys || keys.length === 0) {\n      throw new Error(`No keys found for verificationMethodSection: ${vmRelationship} and did ${identifier.did}`)\n    }\n    if (kmsKeyRef) {\n      identifierKey = keys.find(\n        (key: _ExtendedIKey) => key.meta.verificationMethod?.id === kmsKeyRef || (kid && key.meta.verificationMethod?.id?.includes(kid))\n      )\n    }\n    if (!identifierKey) {\n      identifierKey = keys.find(\n        (key: _ExtendedIKey) => key.meta.verificationMethod?.type === vmRelationship || key.meta.purposes?.includes(vmRelationship)\n      )\n    }\n    if (!identifierKey) {\n      identifierKey = keys[0]\n    }\n  }\n  if (!identifierKey) {\n    throw new Error(\n      `No matching verificationMethodSection key found for keyId: ${kmsKeyRef} and vmSection: ${vmRelationship} for id ${identifier.did}`\n    )\n  }\n\n  return identifierKey\n}\n\n/**\n *\n * @param identifier\n * @param context\n *\n * @deprecated Replaced by the identfier resolution plugin\n */\nasync function legacyGetIdentifier(\n  {\n    identifier,\n  }: {\n    identifier: string | IIdentifier\n  },\n  context: IAgentContext<IDIDManager>\n): Promise<IIdentifier> {\n  if (typeof identifier === 'string') {\n    return await context.agent.didManagerGet({ did: identifier })\n  }\n  return identifier\n}\n\n/**\n * Get the real kid as used in JWTs. This is the kid in the VM or in the JWT, not the kid in the Veramo/Sphereon keystore. That was just a poorly chosen name\n * @param key\n * @param idOpts\n * @param context\n */\nexport async function determineKid(\n  {\n    key,\n    idOpts,\n  }: {\n    key: IKey\n    idOpts: { identifier: IIdentifier | string; kmsKeyRef?: string }\n  },\n  context: IAgentContext<IResolver & IDIDManager>\n): Promise<string> {\n  if (key.meta?.verificationMethod?.id) {\n    return key.meta?.verificationMethod?.id\n  }\n  const identifier = await legacyGetIdentifier(idOpts, context)\n  const mappedKeys = await mapIdentifierKeysToDocWithJwkSupport(\n    {\n      identifier,\n      vmRelationship: 'verificationMethod',\n    },\n    context\n  )\n  const vmKey = mappedKeys.find((extendedKey) => extendedKey.kid === key.kid)\n  if (vmKey) {\n    return vmKey.meta?.verificationMethod?.id ?? vmKey.meta?.jwkThumbprint ?? idOpts.kmsKeyRef ?? vmKey.kid\n  }\n\n  return key.meta?.jwkThumbprint ?? idOpts.kmsKeyRef ?? key.kid\n}\n\nexport async function getSupportedDIDMethods(didOpts: IDIDOptions, context: IAgentContext<IDIDManager>) {\n  return didOpts.supportedDIDMethods ?? (await getAgentDIDMethods(context))\n}\n\nexport function getAgentResolver(\n  context: IAgentContext<IResolver & IDIDManager>,\n  opts?: {\n    localResolution?: boolean // Resolve identifiers hosted by the agent\n    uniresolverResolution?: boolean // Resolve identifiers using universal resolver\n    resolverResolution?: boolean // Use registered drivers\n  }\n): Resolvable {\n  return new AgentDIDResolver(context, opts)\n}\n\nexport class AgentDIDResolver implements Resolvable {\n  private readonly context: IAgentContext<IResolver & IDIDManager>\n  private readonly resolverResolution: boolean\n  private readonly uniresolverResolution: boolean\n  private readonly localResolution: boolean\n\n  constructor(\n    context: IAgentContext<IResolver & IDIDManager>,\n    opts?: { uniresolverResolution?: boolean; localResolution?: boolean; resolverResolution?: boolean }\n  ) {\n    this.context = context\n    this.resolverResolution = opts?.resolverResolution !== false\n    this.uniresolverResolution = opts?.uniresolverResolution !== false\n    this.localResolution = opts?.localResolution !== false\n  }\n\n  async resolve(didUrl: string, options?: DIDResolutionOptions): Promise<DIDResolutionResult> {\n    let resolutionResult: DIDResolutionResult | undefined\n    let origResolutionResult: DIDResolutionResult | undefined\n    let err: any\n    if (!this.resolverResolution && !this.localResolution && !this.uniresolverResolution) {\n      throw Error(`No agent hosted DID resolution, regular agent resolution nor universal resolver resolution is enabled. Cannot resolve DIDs.`)\n    }\n    if (this.resolverResolution) {\n      try {\n        resolutionResult = await this.context.agent.resolveDid({ didUrl, options })\n      } catch (error: unknown) {\n        err = error\n      }\n    }\n    if (resolutionResult) {\n      origResolutionResult = resolutionResult\n      if (resolutionResult.didDocument === null) {\n        resolutionResult = undefined\n      }\n    } else {\n      console.log(`Agent resolver resolution is disabled. This typically isn't desirable!`)\n    }\n    if (!resolutionResult && this.localResolution) {\n      console.log(`Using local DID resolution, looking at DIDs hosted by the agent.`)\n      try {\n        const did = didUrl.split('#')[0]\n        const iIdentifier = await this.context.agent.didManagerGet({ did })\n        resolutionResult = toDidResolutionResult(iIdentifier, { did })\n        if (resolutionResult.didDocument) {\n          err = undefined\n        } else {\n          console.log(`Local resolution resulted in a DID Document for ${did}`)\n        }\n      } catch (error: unknown) {\n        if (!err) {\n          err = error\n        }\n      }\n    }\n    if (resolutionResult) {\n      if (!origResolutionResult) {\n        origResolutionResult = resolutionResult\n      }\n      if (!resolutionResult.didDocument) {\n        resolutionResult = undefined\n      }\n    }\n    if (!resolutionResult && this.uniresolverResolution) {\n      console.log(`Using universal resolver resolution for did ${didUrl} `)\n      resolutionResult = await new UniResolver().resolve(didUrl, options)\n      if (!origResolutionResult) {\n        origResolutionResult = resolutionResult\n      }\n      if (resolutionResult.didDocument) {\n        err = undefined\n      }\n    }\n\n    if (err) {\n      // throw original error\n      throw err\n    }\n    if (!resolutionResult && !origResolutionResult) {\n      throw `Could not resolve ${didUrl}. Resolutions tried: online: ${this.resolverResolution}, local: ${this.localResolution}, uni resolver: ${this.uniresolverResolution}`\n    }\n    return resolutionResult ?? origResolutionResult!\n  }\n}\n\n/**\n * Please note that this is not an exact representation of the actual DID Document.\n *\n * We try to do our best, to map keys onto relevant verification methods and relationships, but we simply lack the context\n * of the actual DID method here. Do not relly on this method for DID resolution. It is only handy for offline use cases\n * when no DID Document is cached. For DID:WEB it does provide an accurate representation!\n *\n * @param identifier\n * @param opts\n */\nexport function toDidDocument(\n  identifier?: IIdentifier,\n  opts?: {\n    did?: string\n    use?: JwkKeyUse[]\n  }\n): DIDDocument | undefined {\n  let didDocument: DIDDocument | undefined = undefined\n  // TODO: Introduce jwk thumbprints here\n  if (identifier) {\n    const did = identifier.did ?? opts?.did\n    didDocument = {\n      '@context': 'https://www.w3.org/ns/did/v1',\n      id: did,\n      verificationMethod: identifier.keys.map((key) => {\n        const vm: VerificationMethod = {\n          controller: did,\n          id: key.kid.startsWith(did) && key.kid.includes('#') ? key.kid : `${did}#${key.kid}`,\n          publicKeyJwk: toJwk(key.publicKeyHex, key.type, {\n            use: ENC_KEY_ALGS.includes(key.type) ? JwkKeyUse.Encryption : JwkKeyUse.Signature,\n            key,\n          }) as JsonWebKey,\n          type: 'JsonWebKey2020',\n        }\n        return vm\n      }),\n      ...((opts?.use === undefined || opts?.use?.includes(JwkKeyUse.Signature)) &&\n        identifier.keys && {\n          assertionMethod: identifier.keys\n            .filter(\n              (key) =>\n                key?.meta?.purpose === undefined || key?.meta?.purpose === 'assertionMethod' || key?.meta?.purposes?.includes('assertionMethod')\n            )\n            .map((key) => {\n              if (key.kid.startsWith(did) && key.kid.includes('#')) {\n                return key.kid\n              }\n              return `${did}#${key.kid}`\n            }),\n        }),\n      ...((opts?.use === undefined || opts?.use?.includes(JwkKeyUse.Signature)) &&\n        identifier.keys && {\n          authentication: identifier.keys\n            .filter(\n              (key) => key?.meta?.purpose === undefined || key?.meta?.purpose === 'authentication' || key?.meta?.purposes?.includes('authentication')\n            )\n            .map((key) => {\n              if (key.kid.startsWith(did) && key.kid.includes('#')) {\n                return key.kid\n              }\n              return `${did}#${key.kid}`\n            }),\n        }),\n      ...((opts?.use === undefined || opts?.use?.includes(JwkKeyUse.Encryption)) &&\n        identifier.keys && {\n          keyAgreement: identifier.keys\n            .filter((key) => key.type === 'X25519' || key?.meta?.purpose === 'keyAgreement' || key?.meta?.purposes?.includes('keyAgreement'))\n            .map((key) => {\n              if (key.kid.startsWith(did) && key.kid.includes('#')) {\n                return key.kid\n              }\n              return `${did}#${key.kid}`\n            }),\n        }),\n      ...((opts?.use === undefined || opts?.use?.includes(JwkKeyUse.Encryption)) &&\n        identifier.keys && {\n          capabilityInvocation: identifier.keys\n            .filter(\n              (key) => key.type === 'X25519' || key?.meta?.purpose === 'capabilityInvocation' || key?.meta?.purposes?.includes('capabilityInvocation')\n            )\n            .map((key) => {\n              if (key.kid.startsWith(did) && key.kid.includes('#')) {\n                return key.kid\n              }\n              return `${did}#${key.kid}`\n            }),\n        }),\n      ...((opts?.use === undefined || opts?.use?.includes(JwkKeyUse.Encryption)) &&\n        identifier.keys && {\n          capabilityDelegation: identifier.keys\n            .filter(\n              (key) => key.type === 'X25519' || key?.meta?.purpose === 'capabilityDelegation' || key?.meta?.purposes?.includes('capabilityDelegation')\n            )\n            .map((key) => {\n              if (key.kid.startsWith(did) && key.kid.includes('#')) {\n                return key.kid\n              }\n              return `${did}#${key.kid}`\n            }),\n        }),\n      ...(identifier.services && identifier.services.length > 0 && { service: identifier.services }),\n    }\n  }\n  return didDocument\n}\n\nexport function toDidResolutionResult(\n  identifier?: IIdentifier,\n  opts?: {\n    did?: string\n    supportedMethods?: string[]\n  }\n): DIDResolutionResult {\n  const didDocument = toDidDocument(identifier, opts) ?? null // null is used in case of errors and required by the did resolution spec\n\n  const resolutionResult: DIDResolutionResult = {\n    '@context': 'https://w3id.org/did-resolution/v1',\n    didDocument,\n    didResolutionMetadata: {\n      ...(!didDocument && { error: 'notFound' }),\n      ...(Array.isArray(opts?.supportedMethods) &&\n        identifier &&\n        !opts?.supportedMethods.includes(identifier.provider.replace('did:', '')) && { error: 'unsupportedDidMethod' }),\n    },\n    didDocumentMetadata: {\n      ...(identifier?.alias && { equivalentId: identifier?.alias }),\n    },\n  }\n  return resolutionResult\n}\n\nexport async function asDidWeb(hostnameOrDID: string): Promise<string> {\n  let did = hostnameOrDID\n  if (!did) {\n    throw Error('Domain or DID expected, but received nothing.')\n  }\n  if (did.startsWith('did:web:')) {\n    return did\n  }\n  return `did:web:${did.replace(/https?:\\/\\/([^/?#]+).*/i, '$1').toLowerCase()}`\n}\n\n/**\n * @deprecated Replaced by the new signer service\n */\nexport const signDidJWT = async (args: SignJwtArgs): Promise<string> => {\n  const { idOpts, header, payload, context, options } = args\n  const jwtOptions = {\n    ...options,\n    signer: await getDidSigner({ idOpts, context }),\n  }\n\n  return createJWT(payload, jwtOptions, header)\n}\n\n/**\n * @deprecated Replaced by the new signer service\n */\nexport const getDidSigner = async (\n  args: GetSignerArgs & {\n    idOpts: {\n      /**\n       * @deprecated\n       */\n      identifier: IIdentifier | string\n      /**\n       * @deprecated\n       */\n      verificationMethodSection?: DIDDocumentSection\n      /**\n       * @deprecated\n       */\n      kmsKeyRef?: string\n    }\n  }\n): Promise<Signer> => {\n  const { idOpts, context } = args\n\n  const identifier = await legacyGetIdentifier(idOpts, context)\n  const key = await getKey(\n    {\n      identifier,\n      vmRelationship: idOpts.verificationMethodSection,\n      kmsKeyRef: idOpts.kmsKeyRef,\n    },\n    context\n  )\n  const algorithm = await signatureAlgorithmFromKey({ key })\n\n  return async (data: string | Uint8Array): Promise<string> => {\n    const input = data instanceof Object.getPrototypeOf(Uint8Array) ? new TextDecoder().decode(data as Uint8Array) : (data as string)\n    return await context.agent.keyManagerSign({\n      keyRef: key.kid,\n      algorithm,\n      data: input,\n    })\n  }\n}\n","import { TKeyType } from '@sphereon/ssi-sdk-ext.key-utils'\nimport { IAgentContext, IDIDManager, IIdentifier, IKeyManager, IResolver } from '@veramo/core'\nimport { JWTHeader, JWTPayload, JWTVerifyOptions } from 'did-jwt'\nimport { Resolvable } from 'did-resolver'\n\nexport enum SupportedDidMethodEnum {\n  DID_ETHR = 'ethr',\n  DID_KEY = 'key',\n  DID_LTO = 'lto',\n  DID_ION = 'ion',\n  DID_EBSI = 'ebsi',\n  DID_JWK = 'jwk',\n  DID_OYD = 'oyd',\n}\n\nexport enum IdentifierAliasEnum {\n  PRIMARY = 'primary',\n}\n\nexport interface ResolveOpts {\n  jwtVerifyOpts?: JWTVerifyOptions\n  resolver?: Resolvable\n  resolveUrl?: string\n  noUniversalResolverFallback?: boolean\n  subjectSyntaxTypesSupported?: string[]\n}\n\n/**\n * @deprecated Replaced by the identifier resolution service\n */\nexport interface IDIDOptions {\n  resolveOpts?: ResolveOpts\n  idOpts: LegacyIIdentifierOpts\n  supportedDIDMethods?: string[]\n}\n\nexport type IdentifierProviderOpts = {\n  type?: TKeyType\n  use?: string\n  method?: SupportedDidMethodEnum\n  [x: string]: any\n}\n\nexport type CreateIdentifierOpts = {\n  method: SupportedDidMethodEnum\n  createOpts?: CreateIdentifierCreateOpts\n}\n\nexport type CreateIdentifierCreateOpts = {\n  kms?: string\n  alias?: string\n  options?: IdentifierProviderOpts\n}\n\nexport type CreateOrGetIdentifierOpts = {\n  method: SupportedDidMethodEnum\n  createOpts?: CreateIdentifierCreateOpts\n}\n\nexport const DID_PREFIX = 'did:'\n\nexport interface GetOrCreateResult<T> {\n  created: boolean\n  result: T\n}\n\n/**\n * @deprecated Replaced by new signer\n */\nexport type SignJwtArgs = {\n  idOpts: LegacyIIdentifierOpts\n  header: Partial<JWTHeader>\n  payload: Partial<JWTPayload>\n  options: { issuer: string; expiresIn?: number; canonicalize?: boolean }\n  context: IRequiredSignAgentContext\n}\n\n/**\n * @deprecated Replaced by new signer\n */\nexport type GetSignerArgs = {\n  idOpts: LegacyIIdentifierOpts\n  context: IRequiredSignAgentContext\n}\n\n/**\n * @deprecated Replaced by the identifier resolution service\n */\ntype LegacyIIdentifierOpts = {\n  identifier: IIdentifier | string\n}\nexport type IRequiredSignAgentContext = IAgentContext<IKeyManager & IDIDManager & IResolver>\n"]}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@sphereon/ssi-sdk-ext.did-utils",
   "description": "DID Utils",
-  "version": "0.28.1-feature.esm.cjs.8+4c162d1",
+  "version": "0.28.1-feature.esm.cjs.9+71682ea",
   "source": "./src/index.ts",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -24,8 +24,8 @@
     "@ethersproject/networks": "^5.7.1",
     "@ethersproject/transactions": "^5.7.0",
     "@sphereon/did-uni-client": "^0.6.3",
-    "@sphereon/ssi-sdk-ext.key-utils": "^0.28.1-feature.esm.cjs.8+4c162d1",
-    "@sphereon/ssi-sdk-ext.x509-utils": "^0.28.1-feature.esm.cjs.8+4c162d1",
+    "@sphereon/ssi-sdk-ext.key-utils": "^0.28.1-feature.esm.cjs.9+71682ea",
+    "@sphereon/ssi-sdk-ext.x509-utils": "^0.28.1-feature.esm.cjs.9+71682ea",
     "@sphereon/ssi-sdk.agent-config": " ^0.33",
     "@sphereon/ssi-sdk.core": " ^0.33",
     "@sphereon/ssi-types": " ^0.33",
@@ -52,5 +52,5 @@
   "author": "Sphereon <dev@sphereon.com>",
   "license": "Apache-2.0",
   "keywords": [],
-  "gitHead": "4c162d14577f462070adeea3e7ec5a443c324ee7"
+  "gitHead": "71682ea0c528f5b32c421245c253b3bc9d6296a0"
 }