@sphereon/ssi-sdk-ext.key-manager 0.28.1-feature.esm.cjs.8 → 0.28.1-feature.esm.cjs.9

package/dist/index.cjs

@@ -1,15 +1,20 @@
-"use strict";
-var __create = Object.create;
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _createStarExport(obj) { Object.keys(obj) .filter((key) => key !== "default" && key !== "__esModule") .forEach((key) => { if (exports.hasOwnProperty(key)) { return; } Object.defineProperty(exports, key, {enumerable: true, configurable: true, get: () => obj[key]}); }); } function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined") return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
 var __esm = (fn, res) => function __init() {
   return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
 };
-var __commonJS = (cb, mod2) => function __require2() {
+var __commonJS = (cb, mod2) => function __require3() {
   return mod2 || (0, cb[__getOwnPropNames(cb)[0]])((mod2 = { exports: {} }).exports, mod2), mod2.exports;
 };
 var __export = (target, all) => {
@@ -24,7 +29,6 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
-var __reExport = (target, mod2, secondTarget) => (__copyProps(target, mod2, "default"), secondTarget && __copyProps(secondTarget, mod2, "default"));
 var __toESM = (mod2, isNodeMode, target) => (target = mod2 != null ? __create(__getProtoOf(mod2)) : {}, __copyProps(
   // If the importer is in node compatibility mode or this is not an ESM
   // file that has been converted to a CommonJS file using a Babel-
@@ -7546,7 +7550,7 @@ var require_brorand = __commonJS({
       }
     } else {
       try {
-        crypto4 = require("crypto");
+        crypto4 = __require("crypto");
         if (typeof crypto4.randomBytes !== "function") throw new Error("Not supported");
         Rand.prototype._rand = /* @__PURE__ */ __name(function _rand(n) {
           return crypto4.randomBytes(n);
@@ -14762,7 +14766,7 @@ var require_dist = __commonJS({
         return void 0;
       } else if (typeof window === "undefined" && typeof crypto !== "undefined") {
         return void 0;
-      } else return require("crypto");
+      } else return __require("crypto");
     }, "getNodeCrypto");
     exports2.getNodeCrypto = getNodeCrypto;
     var getWebCrypto = /* @__PURE__ */ __name(function() {
@@ -135893,7 +135897,7 @@ var require_hasher = __commonJS({
     });
     exports2.defaultHasher = exports2.shaHasher = void 0;
     var sha2_1 = require_sha2();
-    var u8a = __importStar2(require("uint8arrays"));
+    var u8a = __importStar2(__require("uint8arrays"));
     var supportedAlgorithms = [
       "sha256",
       "sha384",
@@ -136951,8 +136955,8 @@ var require_node2 = __commonJS({
       constructor() {
         this.isAvailable = false;
         this.isInstantiated = false;
-        if (typeof require !== "undefined") {
-          const nodeCrypto = require("crypto");
+        if (typeof __require !== "undefined") {
+          const nodeCrypto = __require("crypto");
           if (nodeCrypto && nodeCrypto.randomBytes) {
             this._crypto = nodeCrypto;
             this.isAvailable = true;
@@ -139510,15 +139514,6 @@ var require_plugin_schema = __commonJS({
 });
 
 // src/index.ts
-var index_exports = {};
-__export(index_exports, {
-  SphereonKeyManager: () => SphereonKeyManager,
-  hasKeyOptions: () => hasKeyOptions,
-  isDefined: () => isDefined,
-  schema: () => schema,
-  sphereonKeyManagerMethods: () => sphereonKeyManagerMethods
-});
-module.exports = __toCommonJS(index_exports);
 init_cjs_shims();
 
 // src/agent/SphereonKeyManager.ts
@@ -141711,7 +141706,7 @@ function weierstrass(curveDef) {
     const is = invN(s);
     const u1 = modN(h * is);
     const u2 = modN(r * is);
-    const R = Point2.BASE.multiplyAndAddUnsafe(P3, u1, u2)?.toAffine();
+    const R = _optionalChain([Point2, 'access', _5 => _5.BASE, 'access', _6 => _6.multiplyAndAddUnsafe, 'call', _7 => _7(P3, u1, u2), 'optionalAccess', _8 => _8.toAffine, 'call', _10 => _10()]);
     if (!R) return false;
     const v = modN(R.x);
     return v === r;
@@ -142144,7 +142139,7 @@ function bls(CURVE2) {
         g2: sig
       });
       return Fp122.eql(pairingBatch(paired), Fp122.ONE);
-    } catch {
+    } catch (e15) {
       return false;
     }
   }
@@ -145110,7 +145105,7 @@ var sha3842 = /* @__PURE__ */ wrapConstructor2(() => new SHA3842());
 
 // ../x509-utils/dist/index.js
 init_cjs_shims();
-var import_to_string = require("uint8arrays/to-string");
+var _tostring = require('uint8arrays/to-string');
 
 // ../../node_modules/.pnpm/pkijs@3.2.5/node_modules/pkijs/build/index.es.js
 init_cjs_shims();
@@ -146642,7 +146637,7 @@ var OctetString = class OctetString2 extends BaseBlock {
             ];
           }
         }
-      } catch {
+      } catch (e19) {
       }
     }
     return super.fromBER(inputBuffer, inputOffset, inputLength);
@@ -146734,7 +146729,7 @@ var LocalBitStringValueBlock = class LocalBitStringValueBlock2 extends HexBlock(
             ];
           }
         }
-      } catch {
+      } catch (e20) {
       }
     }
     this.valueHexView = intBuffer.subarray(1);
@@ -149905,7 +149900,7 @@ var PkiObject = class PkiObject2 {
     let schema2;
     try {
       schema2 = this.toSchema();
-    } catch {
+    } catch (e21) {
       schema2 = this.toSchema(true);
     }
     return pvtsutils2.Convert.ToString(schema2.toBER(), encoding);
@@ -155340,7 +155335,7 @@ var CryptoEngine = class CryptoEngine2 extends AbstractCryptoEngine {
           const publicKeyInfo = new PublicKeyInfo();
           try {
             publicKeyInfo.fromSchema(asn1.result);
-          } catch {
+          } catch (e22) {
             throw new ArgumentError("Incorrect keyData");
           }
           switch (alg.name.toUpperCase()) {
@@ -155595,7 +155590,7 @@ var CryptoEngine = class CryptoEngine2 extends AbstractCryptoEngine {
     if (this.name.toLowerCase() === "safari") {
       try {
         return this.subtle.importKey("jwk", stringToArrayBuffer(JSON.stringify(jwk)), algorithm, extractable, keyUsages);
-      } catch {
+      } catch (e23) {
         return this.subtle.importKey("jwk", jwk, algorithm, extractable, keyUsages);
       }
     }
@@ -156575,7 +156570,7 @@ var CryptoEngine = class CryptoEngine2 extends AbstractCryptoEngine {
                 return EMPTY_STRING2;
               }
             } else result = "SHA-1";
-          } catch {
+          } catch (e28) {
           }
         }
         break;
@@ -164031,7 +164026,7 @@ var EnvelopedData = class EnvelopedData2 extends PkiObject {
         recipientInfo.encryptedKey = new OctetString({
           valueHex: encryptedKey
         });
-      } catch {
+      } catch (e31) {
       }
     }, "SubKeyTransRecipientInfo");
     const SubKEKRecipientInfo = /* @__PURE__ */ __name(async (index) => {
@@ -164229,7 +164224,7 @@ var EnvelopedData = class EnvelopedData2 extends PkiObject {
       }, "unwrapSessionKey");
       try {
         return await unwrapSessionKey(aesKwKey);
-      } catch {
+      } catch (e32) {
         const kdfResult2 = await applyKDF(true);
         const aesKwKey2 = await importAesKwKey(kdfResult2);
         return unwrapSessionKey(aesKwKey2);
@@ -169969,11 +169964,11 @@ __name(initCryptoEngine, "initCryptoEngine");
 initCryptoEngine();
 
 // ../x509-utils/dist/index.js
-var import_from_string = require("uint8arrays/from-string");
-var import_to_string2 = require("uint8arrays/to-string");
 var import_keyto = __toESM(require_src(), 1);
-var import_from_string2 = require("uint8arrays/from-string");
-var import_to_string3 = require("uint8arrays/to-string");
+var _fromstring = require('uint8arrays/from-string');
+
+
+
 
 // ../../node_modules/.pnpm/@peculiar+asn1-schema@2.3.15/node_modules/@peculiar/asn1-schema/build/es2015/index.js
 init_cjs_shims();
@@ -177967,7 +177962,7 @@ var GeneralNames5 = class GeneralNames6 extends AsnData {
       let name = null;
       try {
         name = new GeneralName5(asnName);
-      } catch {
+      } catch (e33) {
         continue;
       }
       items.push(name);
@@ -179499,17 +179494,17 @@ AsnEcSignatureFormatter.namedCurveSize.set("P-521", 66);
 
 // ../x509-utils/dist/index.js
 var import_js_x509_utils = __toESM(require_dist10(), 1);
-var import_from_string3 = require("uint8arrays/from-string");
-var import_to_string4 = require("uint8arrays/to-string");
+
+
 var __defProp2 = Object.defineProperty;
 var __name2 = /* @__PURE__ */ __name((target, value) => __defProp2(target, "name", {
   value,
   configurable: true
 }), "__name");
-var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
-  get: /* @__PURE__ */ __name((a, b) => (typeof require !== "undefined" ? require : a)[b], "get")
+var __require2 = /* @__PURE__ */ ((x) => typeof __require !== "undefined" ? __require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: /* @__PURE__ */ __name((a, b) => (typeof __require !== "undefined" ? __require : a)[b], "get")
 }) : x)(function(x) {
-  if (typeof require !== "undefined") return require.apply(this, arguments);
+  if (typeof __require !== "undefined") return __require.apply(this, arguments);
   throw Error('Dynamic require of "' + x + '" is not supported');
 });
 var globalCrypto = /* @__PURE__ */ __name2((setGlobal, suppliedCrypto) => {
@@ -179521,10 +179516,10 @@ var globalCrypto = /* @__PURE__ */ __name2((setGlobal, suppliedCrypto) => {
   } else if (typeof global.crypto !== "undefined") {
     webcrypto = global.crypto;
   } else {
-    if (typeof global.window?.crypto?.subtle !== "undefined") {
+    if (typeof _optionalChain([global, 'access', _11 => _11.window, 'optionalAccess', _12 => _12.crypto, 'optionalAccess', _13 => _13.subtle]) !== "undefined") {
       webcrypto = global.window.crypto;
     } else {
-      webcrypto = __require("crypto");
+      webcrypto = __require2("crypto");
     }
   }
   if (setGlobal) {
@@ -179582,20 +179577,20 @@ var PEMToHex = /* @__PURE__ */ __name2((PEM, headerKey) => {
 }, "PEMToHex");
 function PEMToBinary(pem) {
   const pemContents = pem.replace(/^[^]*-----BEGIN [^-]+-----/, "").replace(/-----END [^-]+-----[^]*$/, "").replace(/\s/g, "");
-  return (0, import_from_string.fromString)(pemContents, "base64pad");
+  return _fromstring.fromString.call(void 0, pemContents, "base64pad");
 }
 __name(PEMToBinary, "PEMToBinary");
 __name2(PEMToBinary, "PEMToBinary");
 var base64ToHex = /* @__PURE__ */ __name2((input, inputEncoding) => {
   const base64NoNewlines = input.replace(/[^0-9A-Za-z_\-~\/+=]*/g, "");
-  return (0, import_to_string2.toString)((0, import_from_string.fromString)(base64NoNewlines, inputEncoding ? inputEncoding : "base64pad"), "base16");
+  return _tostring.toString.call(void 0, _fromstring.fromString.call(void 0, base64NoNewlines, inputEncoding ? inputEncoding : "base64pad"), "base16");
 }, "base64ToHex");
 var hexToBase64 = /* @__PURE__ */ __name2((input, targetEncoding) => {
   let hex = typeof input === "string" ? input : input.toString(16);
   if (hex.length % 2 === 1) {
     hex = `0${hex}`;
   }
-  return (0, import_to_string2.toString)((0, import_from_string.fromString)(hex, "base16"), targetEncoding ? targetEncoding : "base64pad");
+  return _tostring.toString.call(void 0, _fromstring.fromString.call(void 0, hex, "base16"), targetEncoding ? targetEncoding : "base64pad");
 }, "hexToBase64");
 var hexToPEM = /* @__PURE__ */ __name2((hex, type) => {
   const base64 = hexToBase64(hex, "base64pad");
@@ -179617,7 +179612,7 @@ function PEMToDer(pem) {
 __name(PEMToDer, "PEMToDer");
 __name2(PEMToDer, "PEMToDer");
 function derToPEM(cert, headerKey) {
-  const key = headerKey ?? "CERTIFICATE";
+  const key = _nullishCoalesce(headerKey, () => ( "CERTIFICATE"));
   if (cert.includes(key)) {
     return cert;
   }
@@ -179649,13 +179644,13 @@ var usage = /* @__PURE__ */ __name2((jwk) => {
   }
   if (jwk.kty === "RSA") {
     if (jwk.d) {
-      return jwk.alg?.toUpperCase()?.includes("QAEP") ? [
+      return _optionalChain([jwk, 'access', _14 => _14.alg, 'optionalAccess', _15 => _15.toUpperCase, 'call', _16 => _16(), 'optionalAccess', _17 => _17.includes, 'call', _18 => _18("QAEP")]) ? [
         "encrypt"
       ] : [
         "sign"
       ];
     }
-    return jwk.alg?.toUpperCase()?.includes("QAEP") ? [
+    return _optionalChain([jwk, 'access', _19 => _19.alg, 'optionalAccess', _20 => _20.toUpperCase, 'call', _21 => _21(), 'optionalAccess', _22 => _22.includes, 'call', _23 => _23("QAEP")]) ? [
       "decrypt"
     ] : [
       "verify"
@@ -179685,10 +179680,10 @@ var RSASigner = class {
   static {
     __name2(this, "RSASigner");
   }
-  hashAlgorithm;
-  jwk;
-  key;
-  scheme;
+  
+  
+  
+  
   /**
   *
   * @param key Either in PEM or JWK format (no raw hex keys here!)
@@ -179696,12 +179691,12 @@ var RSASigner = class {
   */
   constructor(key, opts) {
     if (typeof key === "string") {
-      this.jwk = PEMToJwk(key, opts?.visibility);
+      this.jwk = PEMToJwk(key, _optionalChain([opts, 'optionalAccess', _24 => _24.visibility]));
     } else {
       this.jwk = key;
     }
-    this.hashAlgorithm = opts?.hashAlgorithm ?? "SHA-256";
-    this.scheme = opts?.scheme ?? "RSA-PSS";
+    this.hashAlgorithm = _nullishCoalesce(_optionalChain([opts, 'optionalAccess', _25 => _25.hashAlgorithm]), () => ( "SHA-256"));
+    this.scheme = _nullishCoalesce(_optionalChain([opts, 'optionalAccess', _26 => _26.scheme]), () => ( "RSA-PSS"));
   }
   getImportParams() {
     if (this.scheme === "RSA-PSS") {
@@ -179722,7 +179717,7 @@ var RSASigner = class {
   }
   bufferToString(buf) {
     const uint8Array = new Uint8Array(buf);
-    return (0, import_to_string3.toString)(uint8Array, "base64url");
+    return _tostring.toString.call(void 0, uint8Array, "base64url");
   }
   async sign(data) {
     const input = data;
@@ -179735,7 +179730,7 @@ var RSASigner = class {
   }
   async verify(data, signature) {
     const jws = signature.includes(".") ? signature.split(".")[2] : signature;
-    const input = typeof data == "string" ? (0, import_from_string2.fromString)(data, "utf-8") : data;
+    const input = typeof data == "string" ? _fromstring.fromString.call(void 0, data, "utf-8") : data;
     let key = await this.getKey();
     if (!key.usages.includes("verify")) {
       const verifyJwk = {
@@ -179746,7 +179741,7 @@ var RSASigner = class {
       delete verifyJwk.key_ops;
       key = await cryptoSubtleImportRSAKey(verifyJwk, this.scheme, this.hashAlgorithm);
     }
-    const verificationResult = await globalCrypto(false).subtle.verify(this.getImportParams(), key, (0, import_from_string2.fromString)(jws, "base64url"), input);
+    const verificationResult = await globalCrypto(false).subtle.verify(this.getImportParams(), key, _fromstring.fromString.call(void 0, jws, "base64url"), input);
     return verificationResult;
   }
 };
@@ -180940,10 +180935,10 @@ var PKCS1_SHA384 = /* @__PURE__ */ PKCS1(sha3844, "3041300d060960864801650304020
 var PKCS1_SHA512 = /* @__PURE__ */ PKCS1(sha5124, "3051300d060960864801650304020305000440");
 
 // ../key-utils/dist/index.js
-var import_from_string4 = require("uint8arrays/from-string");
-var import_to_string5 = require("uint8arrays/to-string");
-var import_from_string5 = require("uint8arrays/from-string");
-var import_to_string6 = require("uint8arrays/to-string");
+
+
+
+
 
 // ../../node_modules/.pnpm/web-encoding@1.1.5/node_modules/web-encoding/src/lib.mjs
 init_cjs_shims();
@@ -180979,13 +180974,13 @@ var digestMethodParams = /* @__PURE__ */ __name3((hashAlgorithm) => {
   }
 }, "digestMethodParams");
 var sha256DigestMethod = /* @__PURE__ */ __name3((input, encoding = "base16") => {
-  return (0, import_to_string6.toString)(sha2562((0, import_from_string5.fromString)(input, "utf-8")), encoding);
+  return _tostring.toString.call(void 0, sha2562(_fromstring.fromString.call(void 0, input, "utf-8")), encoding);
 }, "sha256DigestMethod");
 var sha384DigestMethod = /* @__PURE__ */ __name3((input, encoding = "base16") => {
-  return (0, import_to_string6.toString)(sha3842((0, import_from_string5.fromString)(input, "utf-8")), encoding);
+  return _tostring.toString.call(void 0, sha3842(_fromstring.fromString.call(void 0, input, "utf-8")), encoding);
 }, "sha384DigestMethod");
 var sha512DigestMethod = /* @__PURE__ */ __name3((input, encoding = "base16") => {
-  return (0, import_to_string6.toString)(sha5122((0, import_from_string5.fromString)(input, "utf-8")), encoding);
+  return _tostring.toString.call(void 0, sha5122(_fromstring.fromString.call(void 0, input, "utf-8")), encoding);
 }, "sha512DigestMethod");
 var textEncoder = new Encoder();
 var textDecoder = new Decoder();
@@ -181008,7 +181003,7 @@ __name(assertObject, "assertObject");
 __name3(assertObject, "assertObject");
 function validateJwk(jwk, opts) {
   assertObject(jwk);
-  const { crvOptional = false } = opts ?? {};
+  const { crvOptional = false } = _nullishCoalesce(opts, () => ( {}));
   check(jwk.kty, '"kty" (Key Type) Parameter', false);
   switch (jwk.kty) {
     /**
@@ -181175,24 +181170,24 @@ var keyMetaAlgorithmsFromKeyType = /* @__PURE__ */ __name3((type) => {
   ];
 }, "keyMetaAlgorithmsFromKeyType");
 async function importProvidedOrGeneratedKey(args, context) {
-  const type = args.options?.type ?? args.options?.key?.type ?? args.options?.keyType ?? "Secp256r1";
-  const key = args?.options?.key;
-  if (args.options?.x509 && key) {
+  const type = _nullishCoalesce(_nullishCoalesce(_nullishCoalesce(_optionalChain([args, 'access', _27 => _27.options, 'optionalAccess', _28 => _28.type]), () => ( _optionalChain([args, 'access', _29 => _29.options, 'optionalAccess', _30 => _30.key, 'optionalAccess', _31 => _31.type]))), () => ( _optionalChain([args, 'access', _32 => _32.options, 'optionalAccess', _33 => _33.keyType]))), () => ( "Secp256r1"));
+  const key = _optionalChain([args, 'optionalAccess', _34 => _34.options, 'optionalAccess', _35 => _35.key]);
+  if (_optionalChain([args, 'access', _36 => _36.options, 'optionalAccess', _37 => _37.x509]) && key) {
     key.meta = {
       ...key.meta,
       x509: {
         ...args.options.x509,
-        ...key.meta?.x509
+        ..._optionalChain([key, 'access', _38 => _38.meta, 'optionalAccess', _39 => _39.x509])
       }
     };
   }
-  if (args.options && args.options?.use === JwkKeyUse.Encryption && !ENC_KEY_ALGS.includes(type)) {
+  if (args.options && _optionalChain([args, 'access', _40 => _40.options, 'optionalAccess', _41 => _41.use]) === JwkKeyUse.Encryption && !ENC_KEY_ALGS.includes(type)) {
     throw new Error(`${type} keys are not valid for encryption`);
   }
   let privateKeyHex = void 0;
   if (key) {
-    privateKeyHex = key.privateKeyHex ?? key.meta?.x509?.privateKeyHex;
-    if ((!privateKeyHex || privateKeyHex.trim() === "") && key?.meta?.x509?.privateKeyPEM) {
+    privateKeyHex = _nullishCoalesce(key.privateKeyHex, () => ( _optionalChain([key, 'access', _42 => _42.meta, 'optionalAccess', _43 => _43.x509, 'optionalAccess', _44 => _44.privateKeyHex])));
+    if ((!privateKeyHex || privateKeyHex.trim() === "") && _optionalChain([key, 'optionalAccess', _45 => _45.meta, 'optionalAccess', _46 => _46.x509, 'optionalAccess', _47 => _47.privateKeyPEM])) {
       privateKeyHex = privateKeyHexFromPEM(key.meta.x509.privateKeyPEM);
     }
   }
@@ -181208,7 +181203,7 @@ async function importProvidedOrGeneratedKey(args, context) {
     type,
     kms: args.kms,
     meta: {
-      ...key?.meta,
+      ..._optionalChain([key, 'optionalAccess', _48 => _48.meta]),
       algorithms: keyMetaAlgorithmsFromKeyType(type),
       keyAlias: args.alias
     }
@@ -181285,8 +181280,8 @@ var calculateJwkThumbprint = /* @__PURE__ */ __name3((args) => {
   return digestAlgorithm === "sha512" ? digestMethodParams("SHA-512").digestMethod(data, "base64url") : digestMethodParams("SHA-256").digestMethod(data, "base64url");
 }, "calculateJwkThumbprint");
 var toJwk = /* @__PURE__ */ __name3((publicKeyHex, type, opts) => {
-  const { key, noKidThumbprint = false } = opts ?? {};
-  if (key && key.publicKeyHex !== publicKeyHex && opts?.isPrivateKey !== true) {
+  const { key, noKidThumbprint = false } = _nullishCoalesce(opts, () => ( {}));
+  if (key && key.publicKeyHex !== publicKeyHex && _optionalChain([opts, 'optionalAccess', _49 => _49.isPrivateKey]) !== true) {
     throw Error(`Provided key with id ${key.kid}, has a different public key hex ${key.publicKeyHex} than supplied public key ${publicKeyHex}`);
   }
   let jwk;
@@ -181341,9 +181336,9 @@ function rsaJwkToRawHexKey(jwk) {
   if (!jwk.n || !jwk.e) {
     throw new Error("RSA JWK must contain 'n' and 'e' properties.");
   }
-  const modulus = (0, import_from_string4.fromString)(jwk.n.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, ""), "base64url");
-  const exponent = (0, import_from_string4.fromString)(jwk.e.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, ""), "base64url");
-  return (0, import_to_string5.toString)(modulus, "hex") + (0, import_to_string5.toString)(exponent, "hex");
+  const modulus = _fromstring.fromString.call(void 0, jwk.n.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, ""), "base64url");
+  const exponent = _fromstring.fromString.call(void 0, jwk.e.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, ""), "base64url");
+  return _tostring.toString.call(void 0, modulus, "hex") + _tostring.toString.call(void 0, exponent, "hex");
 }
 __name(rsaJwkToRawHexKey, "rsaJwkToRawHexKey");
 __name3(rsaJwkToRawHexKey, "rsaJwkToRawHexKey");
@@ -181352,9 +181347,9 @@ function ecJwkToRawHexKey(jwk) {
   if (!jwk.x || !jwk.y) {
     throw new Error("EC JWK must contain 'x' and 'y' properties.");
   }
-  const x = (0, import_from_string4.fromString)(jwk.x.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, ""), "base64url");
-  const y = (0, import_from_string4.fromString)(jwk.y.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, ""), "base64url");
-  return "04" + (0, import_to_string5.toString)(x, "hex") + (0, import_to_string5.toString)(y, "hex");
+  const x = _fromstring.fromString.call(void 0, jwk.x.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, ""), "base64url");
+  const y = _fromstring.fromString.call(void 0, jwk.y.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, ""), "base64url");
+  return "04" + _tostring.toString.call(void 0, x, "hex") + _tostring.toString.call(void 0, y, "hex");
 }
 __name(ecJwkToRawHexKey, "ecJwkToRawHexKey");
 __name3(ecJwkToRawHexKey, "ecJwkToRawHexKey");
@@ -181363,8 +181358,8 @@ function okpJwkToRawHexKey(jwk) {
   if (!jwk.x) {
     throw new Error("OKP JWK must contain 'x' property.");
   }
-  const x = (0, import_from_string4.fromString)(jwk.x.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, ""), "base64url");
-  return (0, import_to_string5.toString)(x, "hex");
+  const x = _fromstring.fromString.call(void 0, jwk.x.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, ""), "base64url");
+  return _tostring.toString.call(void 0, x, "hex");
 }
 __name(okpJwkToRawHexKey, "okpJwkToRawHexKey");
 __name3(okpJwkToRawHexKey, "okpJwkToRawHexKey");
@@ -181373,8 +181368,8 @@ function octJwkToRawHexKey(jwk) {
   if (!jwk.k) {
     throw new Error("Octet JWK must contain 'k' property.");
   }
-  const key = (0, import_from_string4.fromString)(jwk.k.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, ""), "base64url");
-  return (0, import_to_string5.toString)(key, "hex");
+  const key = _fromstring.fromString.call(void 0, jwk.k.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, ""), "base64url");
+  return _tostring.toString.call(void 0, key, "hex");
 }
 __name(octJwkToRawHexKey, "octJwkToRawHexKey");
 __name3(octJwkToRawHexKey, "octJwkToRawHexKey");
@@ -181388,9 +181383,9 @@ var assertProperKeyLength = /* @__PURE__ */ __name3((keyHex, expectedKeyLength)
   }
 }, "assertProperKeyLength");
 var toSecp256k1Jwk = /* @__PURE__ */ __name3((keyHex, opts) => {
-  const { use: use2 } = opts ?? {};
+  const { use: use2 } = _nullishCoalesce(opts, () => ( {}));
   logger.debug(`toSecp256k1Jwk keyHex: ${keyHex}, length: ${keyHex.length}`);
-  if (opts?.isPrivateKey) {
+  if (_optionalChain([opts, 'optionalAccess', _50 => _50.isPrivateKey])) {
     assertProperKeyLength(keyHex, [
       64
     ]);
@@ -181401,8 +181396,8 @@ var toSecp256k1Jwk = /* @__PURE__ */ __name3((keyHex, opts) => {
     ]);
   }
   const secp256k12 = new import_elliptic.default.ec("secp256k1");
-  const keyBytes = (0, import_from_string4.fromString)(keyHex, "base16");
-  const keyPair = opts?.isPrivateKey ? secp256k12.keyFromPrivate(keyBytes) : secp256k12.keyFromPublic(keyBytes);
+  const keyBytes = _fromstring.fromString.call(void 0, keyHex, "base16");
+  const keyPair = _optionalChain([opts, 'optionalAccess', _51 => _51.isPrivateKey]) ? secp256k12.keyFromPrivate(keyBytes) : secp256k12.keyFromPublic(keyBytes);
   const pubPoint = keyPair.getPublic();
   return sanitizedJwk({
     alg: import_ssi_types.JoseSignatureAlgorithm.ES256K,
@@ -181413,15 +181408,15 @@ var toSecp256k1Jwk = /* @__PURE__ */ __name3((keyHex, opts) => {
     crv: import_ssi_types.JoseCurve.secp256k1,
     x: hexToBase64(pubPoint.getX().toString("hex"), "base64url"),
     y: hexToBase64(pubPoint.getY().toString("hex"), "base64url"),
-    ...opts?.isPrivateKey && {
+    ..._optionalChain([opts, 'optionalAccess', _52 => _52.isPrivateKey]) && {
       d: hexToBase64(keyPair.getPrivate("hex"), "base64url")
     }
   });
 }, "toSecp256k1Jwk");
 var toSecp256r1Jwk = /* @__PURE__ */ __name3((keyHex, opts) => {
-  const { use: use2 } = opts ?? {};
+  const { use: use2 } = _nullishCoalesce(opts, () => ( {}));
   logger.debug(`toSecp256r1Jwk keyHex: ${keyHex}, length: ${keyHex.length}`);
-  if (opts?.isPrivateKey) {
+  if (_optionalChain([opts, 'optionalAccess', _53 => _53.isPrivateKey])) {
     assertProperKeyLength(keyHex, [
       64
     ]);
@@ -181432,9 +181427,9 @@ var toSecp256r1Jwk = /* @__PURE__ */ __name3((keyHex, opts) => {
     ]);
   }
   const secp256r1 = new import_elliptic.default.ec("p256");
-  const keyBytes = (0, import_from_string4.fromString)(keyHex, "base16");
+  const keyBytes = _fromstring.fromString.call(void 0, keyHex, "base16");
   logger.debug(`keyBytes length: ${keyBytes}`);
-  const keyPair = opts?.isPrivateKey ? secp256r1.keyFromPrivate(keyBytes) : secp256r1.keyFromPublic(keyBytes);
+  const keyPair = _optionalChain([opts, 'optionalAccess', _54 => _54.isPrivateKey]) ? secp256r1.keyFromPrivate(keyBytes) : secp256r1.keyFromPublic(keyBytes);
   const pubPoint = keyPair.getPublic();
   return sanitizedJwk({
     alg: import_ssi_types.JoseSignatureAlgorithm.ES256,
@@ -181445,31 +181440,31 @@ var toSecp256r1Jwk = /* @__PURE__ */ __name3((keyHex, opts) => {
     crv: import_ssi_types.JoseCurve.P_256,
     x: hexToBase64(pubPoint.getX().toString("hex"), "base64url"),
     y: hexToBase64(pubPoint.getY().toString("hex"), "base64url"),
-    ...opts?.isPrivateKey && {
+    ..._optionalChain([opts, 'optionalAccess', _55 => _55.isPrivateKey]) && {
       d: hexToBase64(keyPair.getPrivate("hex"), "base64url")
     }
   });
 }, "toSecp256r1Jwk");
 var toEd25519OrX25519Jwk = /* @__PURE__ */ __name3((publicKeyHex, opts) => {
   assertProperKeyLength(publicKeyHex, 64);
-  const { use: use2 } = opts ?? {};
+  const { use: use2 } = _nullishCoalesce(opts, () => ( {}));
   return sanitizedJwk({
     alg: import_ssi_types.JoseSignatureAlgorithm.EdDSA,
     ...use2 !== void 0 && {
       use: use2
     },
     kty: import_ssi_types.JwkKeyType.OKP,
-    crv: opts?.crv ?? import_ssi_types.JoseCurve.Ed25519,
+    crv: _nullishCoalesce(_optionalChain([opts, 'optionalAccess', _56 => _56.crv]), () => ( import_ssi_types.JoseCurve.Ed25519)),
     x: hexToBase64(publicKeyHex, "base64url")
   });
 }, "toEd25519OrX25519Jwk");
 var toRSAJwk = /* @__PURE__ */ __name3((publicKeyHex, opts) => {
-  const meta = opts?.key?.meta;
-  if (meta?.publicKeyJwk || meta?.publicKeyPEM) {
-    if (meta?.publicKeyJwk) {
+  const meta = _optionalChain([opts, 'optionalAccess', _57 => _57.key, 'optionalAccess', _58 => _58.meta]);
+  if (_optionalChain([meta, 'optionalAccess', _59 => _59.publicKeyJwk]) || _optionalChain([meta, 'optionalAccess', _60 => _60.publicKeyPEM])) {
+    if (_optionalChain([meta, 'optionalAccess', _61 => _61.publicKeyJwk])) {
       return meta.publicKeyJwk;
     }
-    const publicKeyPEM = meta?.publicKeyPEM ?? hexToPEM(publicKeyHex, "public");
+    const publicKeyPEM = _nullishCoalesce(_optionalChain([meta, 'optionalAccess', _62 => _62.publicKeyPEM]), () => ( hexToPEM(publicKeyHex, "public")));
     return PEMToJwk(publicKeyPEM, "public");
   }
   const exponent = publicKeyHex.slice(-5);
@@ -181593,8 +181588,8 @@ var base64ToBase64Url = /* @__PURE__ */ __name3((input) => {
 }, "base64ToBase64Url");
 async function verifyRawSignature({ data, signature, key: inputKey, opts }) {
   function jwkPropertyToBigInt(jwkProp) {
-    const byteArray = (0, import_from_string4.fromString)(jwkProp, "base64url");
-    const hex = (0, import_to_string5.toString)(byteArray, "hex");
+    const byteArray = _fromstring.fromString.call(void 0, jwkProp, "base64url");
+    const hex = _tostring.toString.call(void 0, byteArray, "hex");
     return BigInt(`0x${hex}`);
   }
   __name(jwkPropertyToBigInt, "jwkPropertyToBigInt");
@@ -181633,12 +181628,12 @@ async function verifyRawSignature({ data, signature, key: inputKey, opts }) {
           prehash: true
         });
       case "Ed25519":
-        return ed25519.verify(signature, data, (0, import_from_string4.fromString)(publicKeyHex, "hex"));
+        return ed25519.verify(signature, data, _fromstring.fromString.call(void 0, publicKeyHex, "hex"));
       case "Bls12381G1":
       case "Bls12381G2":
-        return bls12_381.verify(signature, data, (0, import_from_string4.fromString)(publicKeyHex, "hex"));
+        return bls12_381.verify(signature, data, _fromstring.fromString.call(void 0, publicKeyHex, "hex"));
       case "RSA": {
-        const signatureAlgorithm = opts?.signatureAlg ?? jwk.alg ?? import_ssi_types.JoseSignatureAlgorithm.PS256;
+        const signatureAlgorithm = _nullishCoalesce(_nullishCoalesce(_optionalChain([opts, 'optionalAccess', _63 => _63.signatureAlg]), () => ( jwk.alg)), () => ( import_ssi_types.JoseSignatureAlgorithm.PS256));
         const hashAlg = signatureAlgorithm === (import_ssi_types.JoseSignatureAlgorithm.RS512 || import_ssi_types.JoseSignatureAlgorithm.PS512) ? sha5122 : signatureAlgorithm === (import_ssi_types.JoseSignatureAlgorithm.RS384 || import_ssi_types.JoseSignatureAlgorithm.PS384) ? sha3842 : sha2562;
         switch (signatureAlgorithm) {
           case import_ssi_types.JoseSignatureAlgorithm.RS256:
@@ -181912,8 +181907,8 @@ __name(coseToJoseCurve, "coseToJoseCurve");
 __name3(coseToJoseCurve, "coseToJoseCurve");
 
 // src/agent/SphereonKeyManager.ts
-var import_key_manager = require("@veramo/key-manager");
-var import_from_string6 = require("uint8arrays/from-string");
+var _keymanager = require('@veramo/key-manager'); _createStarExport(_keymanager);
+
 
 // src/types/ISphereonKeyManager.ts
 init_cjs_shims();
@@ -181934,15 +181929,15 @@ var sphereonKeyManagerMethods = [
   "keyManagerGetDefaultKeyManagementSystem",
   "keyManagerHandleExpirations"
 ];
-var SphereonKeyManager = class extends import_key_manager.KeyManager {
+var SphereonKeyManager = class extends _keymanager.KeyManager {
   static {
     __name(this, "SphereonKeyManager");
   }
   // local store reference, given the superclass store is private, and we need additional functions/calls
-  kmsStore;
-  availableKmses;
-  _defaultKms;
-  kmsMethods;
+  
+  
+  
+  
   constructor(options) {
     super({
       store: options.store,
@@ -181950,7 +181945,7 @@ var SphereonKeyManager = class extends import_key_manager.KeyManager {
     });
     this.kmsStore = options.store;
     this.availableKmses = options.kms;
-    this._defaultKms = options.defaultKms ?? Object.keys(this.availableKmses)[0];
+    this._defaultKms = _nullishCoalesce(options.defaultKms, () => ( Object.keys(this.availableKmses)[0]));
     if (!Object.keys(this.availableKmses).includes(this._defaultKms)) {
       throw Error(`Default KMS needs to be listed in the kms object as well. Found kms-es: ${Object.keys(this.availableKmses).join(",")}`);
     }
@@ -181964,18 +181959,18 @@ var SphereonKeyManager = class extends import_key_manager.KeyManager {
     return Promise.resolve(this._defaultKms);
   }
   async keyManagerCreate(args) {
-    const kms = this.getKmsByName(args.kms ?? this._defaultKms);
+    const kms = this.getKmsByName(_nullishCoalesce(args.kms, () => ( this._defaultKms)));
     const meta = {
       ...args.meta,
       ...args.opts && {
         opts: args.opts
       }
     };
-    if (hasKeyOptions(meta) && meta.opts?.ephemeral && !meta.opts.expiration?.removalDate) {
+    if (hasKeyOptions(meta) && _optionalChain([meta, 'access', _64 => _64.opts, 'optionalAccess', _65 => _65.ephemeral]) && !_optionalChain([meta, 'access', _66 => _66.opts, 'access', _67 => _67.expiration, 'optionalAccess', _68 => _68.removalDate])) {
       meta.opts = {
         ...meta.opts,
         expiration: {
-          ...meta.opts?.expiration,
+          ..._optionalChain([meta, 'access', _69 => _69.opts, 'optionalAccess', _70 => _70.expiration]),
           removalDate: new Date(Date.now() + 5 * 60 * 1e3)
         }
       };
@@ -181986,15 +181981,15 @@ var SphereonKeyManager = class extends import_key_manager.KeyManager {
     });
     const key = {
       ...partialKey,
-      kms: args.kms ?? this._defaultKms
+      kms: _nullishCoalesce(args.kms, () => ( this._defaultKms))
     };
     key.meta = {
       ...meta,
       ...key.meta
     };
-    key.meta.jwkThumbprint = key.meta.jwkThumbprint ?? calculateJwkThumbprintForKey({
+    key.meta.jwkThumbprint = _nullishCoalesce(key.meta.jwkThumbprint, () => ( calculateJwkThumbprintForKey({
       key
-    });
+    })));
     await this.kmsStore.import(key);
     if (key.privateKeyHex) {
       delete key.privateKeyHex;
@@ -182010,7 +182005,7 @@ var SphereonKeyManager = class extends import_key_manager.KeyManager {
     if (keyInfo.type === "Bls12381G2") {
       return await kms.sign({
         keyRef: keyInfo,
-        data: typeof args.data === "string" ? (0, import_from_string6.fromString)(args.data) : args.data
+        data: typeof args.data === "string" ? _fromstring.fromString.call(void 0, args.data) : args.data
       });
     }
     return await super.keyManagerSign({
@@ -182028,7 +182023,7 @@ var SphereonKeyManager = class extends import_key_manager.KeyManager {
     return await verifyRawSignature({
       key: toJwk(args.publicKeyHex, args.type),
       data: args.data,
-      signature: (0, import_from_string6.fromString)(args.signature, "utf-8")
+      signature: _fromstring.fromString.call(void 0, args.signature, "utf-8")
     });
   }
   async keyManagerListKeys() {
@@ -182037,7 +182032,7 @@ var SphereonKeyManager = class extends import_key_manager.KeyManager {
   async keyManagerHandleExpirations(args) {
     const keys = await this.keyManagerListKeys();
     const expiredKeys = keys.filter((key) => hasKeyOptions(key.meta)).filter((key) => {
-      if (hasKeyOptions(key.meta) && key.meta?.opts?.expiration) {
+      if (hasKeyOptions(key.meta) && _optionalChain([key, 'access', _71 => _71.meta, 'optionalAccess', _72 => _72.opts, 'optionalAccess', _73 => _73.expiration])) {
         const expiration = key.meta.opts.expiration;
         return !(expiration.expiryDate && expiration.expiryDate.getMilliseconds() > Date.now());
       }
@@ -182066,7 +182061,7 @@ var SphereonKeyManager = class extends import_key_manager.KeyManager {
       return key;
     } catch (e) {
       const keys = await this.keyManagerListKeys();
-      const foundKey = keys.find((key) => key.publicKeyHex === kid || key.meta?.jwkThumbprint === kid || key.meta?.jwkThumbprint == null && calculateJwkThumbprintForKey({
+      const foundKey = keys.find((key) => key.publicKeyHex === kid || _optionalChain([key, 'access', _74 => _74.meta, 'optionalAccess', _75 => _75.jwkThumbprint]) === kid || _optionalChain([key, 'access', _76 => _76.meta, 'optionalAccess', _77 => _77.jwkThumbprint]) == null && calculateJwkThumbprintForKey({
         key
       }) === kid);
       if (foundKey) {
@@ -182091,8 +182086,15 @@ var SphereonKeyManager = class extends import_key_manager.KeyManager {
 };
 
 // src/index.ts
-__reExport(index_exports, require("@veramo/key-manager"), module.exports);
+
 var schema = require_plugin_schema();
+
+
+
+
+
+
+exports.SphereonKeyManager = SphereonKeyManager; exports.hasKeyOptions = hasKeyOptions; exports.isDefined = isDefined; exports.schema = schema; exports.sphereonKeyManagerMethods = sphereonKeyManagerMethods;
 /*! Bundled license information:
 
 pvtsutils/build/index.js: