@sphereon/ssi-sdk.linked-vp 0.34.1-feature.SSISDK.82.linkedVP.325 → 0.34.1-feature.SSISDK.82.linkedVP.326

package/dist/index.cjs

@@ -217,6 +217,7 @@ var plugin_schema_default = {
 var import_typeorm = require("typeorm");
 
 // src/services/LinkedVPService.ts
+var import_ssi_sdk = require("@sphereon/ssi-sdk.sd-jwt");
 var import_ssi_types = require("@sphereon/ssi-types");
 
 // src/types/ILinkedVPManager.ts
@@ -224,6 +225,7 @@ var LOGGER_NAMESPACE = "sphereon:linked-vp";
 
 // src/services/LinkedVPService.ts
 var logger = import_ssi_types.Loggers.DEFAULT.get(LOGGER_NAMESPACE);
+var CLOCK_SKEW = 120;
 function extractOriginalCredential(credential) {
   if (typeof credential === "string") {
     return credential;
@@ -241,40 +243,81 @@ function extractOriginalCredential(credential) {
   return credential;
 }
 __name(extractOriginalCredential, "extractOriginalCredential");
-async function createLinkedVPPresentation(holderDid, credentials, agent) {
-  if (credentials.length === 0) {
-    return Promise.reject(Error("Cannot create LinkedVP presentation with zero credentials"));
-  }
-  logger.debug(`Creating LinkedVP presentation for ${holderDid} with ${credentials.length} credentials`);
+async function createLinkedVPPresentation(holderDid, credential, agent) {
+  logger.debug(`Creating LinkedVP presentation for ${holderDid} of credential ${credential.id}`);
   const identifier = await agent.identifierManagedGet({
     identifier: holderDid
   });
-  const verifiableCredentials = credentials.map((credential) => {
-    const original = extractOriginalCredential(credential);
-    return typeof original === "string" ? original : original;
-  });
-  const vpObject = {
-    "@context": [
-      "https://www.w3.org/2018/credentials/v1"
-    ],
-    type: [
-      "VerifiablePresentation"
-    ],
-    holder: holderDid,
-    verifiableCredential: verifiableCredentials
-  };
-  const result = await agent.createVerifiablePresentation({
-    presentation: vpObject,
-    proofFormat: "jwt",
-    keyRef: identifier.kmsKeyRef || identifier.kid
-  });
-  if (typeof result === "string") {
-    return result;
-  }
-  if (result.proof && "jws" in result.proof) {
-    return result.proof.jws;
+  const originalCredential = extractOriginalCredential(credential);
+  const documentFormat = import_ssi_types.CredentialMapper.detectDocumentType(originalCredential);
+  switch (documentFormat) {
+    case import_ssi_types.DocumentFormat.SD_JWT_VC: {
+      const decodedSdJwt = await import_ssi_types.CredentialMapper.decodeSdJwtVcAsync(typeof originalCredential === "string" ? originalCredential : originalCredential.compactSdJwtVc, import_ssi_sdk.defaultGenerateDigest);
+      const hashAlg = decodedSdJwt.signedPayload._sd_alg ?? "sha-256";
+      const sdHash = (0, import_ssi_sdk.calculateSdHash)(decodedSdJwt.compactSdJwtVc, hashAlg, import_ssi_sdk.defaultGenerateDigest);
+      const kbJwtPayload = {
+        iat: Math.floor(Date.now() / 1e3 - CLOCK_SKEW),
+        sd_hash: sdHash
+      };
+      const presentationResult = await agent.createSdJwtPresentation({
+        presentation: decodedSdJwt.compactSdJwtVc,
+        kb: {
+          payload: kbJwtPayload
+        }
+      });
+      return presentationResult.presentation;
+    }
+    case import_ssi_types.DocumentFormat.JSONLD: {
+      const vcObject = typeof originalCredential === "string" ? JSON.parse(originalCredential) : originalCredential;
+      const vpObject = {
+        "@context": [
+          "https://www.w3.org/2018/credentials/v1"
+        ],
+        type: [
+          "VerifiablePresentation"
+        ],
+        verifiableCredential: [
+          vcObject
+        ],
+        holder: holderDid
+      };
+      return await agent.createVerifiablePresentation({
+        presentation: vpObject,
+        proofFormat: "lds",
+        keyRef: identifier.kmsKeyRef || identifier.kid
+      });
+    }
+    case import_ssi_types.DocumentFormat.MSO_MDOC: {
+      logger.warning("mso_mdoc format has basic support - production use requires proper mdoc VP token implementation");
+      return originalCredential;
+    }
+    default: {
+      const vcJwt = typeof originalCredential === "string" ? originalCredential : JSON.stringify(originalCredential);
+      const vpPayload = {
+        iss: holderDid,
+        vp: {
+          "@context": [
+            "https://www.w3.org/2018/credentials/v1"
+          ],
+          type: [
+            "VerifiablePresentation"
+          ],
+          holder: holderDid,
+          verifiableCredential: [
+            vcJwt
+          ]
+        },
+        iat: Math.floor(Date.now() / 1e3 - CLOCK_SKEW),
+        exp: Math.floor(Date.now() / 1e3 + 600 + CLOCK_SKEW)
+      };
+      const vpJwt = await agent.createVerifiablePresentation({
+        presentation: vpPayload.vp,
+        proofFormat: "jwt",
+        keyRef: identifier.kmsKeyRef || identifier.kid
+      });
+      return vpJwt.proof && "jwt" in vpJwt.proof && vpJwt.proof.jwt || vpJwt;
+    }
   }
-  return Promise.reject(Error("Failed to create JWT VP - no JWT in result"));
 }
 __name(createLinkedVPPresentation, "createLinkedVPPresentation");
 
@@ -396,7 +439,10 @@ var LinkedVPManager = class {
     if (uniqueCredentials.length === 0) {
       return Promise.reject(Error(`No published credentials found for linkedVpId ${linkedVpId}`));
     }
-    return createLinkedVPPresentation(holderDid, uniqueCredentials, context.agent);
+    if (uniqueCredentials.length > 1) {
+      return Promise.reject(Error(`Multiple credentials found for linkedVpId ${linkedVpId}`));
+    }
+    return createLinkedVPPresentation(holderDid, uniqueCredentials[0], context.agent);
   }
   getHolderDid(tenantId) {
     const holderDid = this.holderDids[tenantId ?? "default"];

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../plugin.schema.json","../src/agent/LinkedVPManager.ts","../src/services/LinkedVPService.ts","../src/types/ILinkedVPManager.ts"],"sourcesContent":["/**\n * @public\n */\nimport schema from '../plugin.schema.json'\nexport { schema }\nexport { LinkedVPManager, linkedVPManagerMethods } from './agent/LinkedVPManager'\nexport * from './types/ILinkedVPManager'\n","{\n  \"ILinkedVPManager\": {\n    \"components\": {\n      \"schemas\": {\n        \"GeneratePresentationArgs\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"linkedVpId\": {\n              \"type\": \"string\"\n            }\n          },\n          \"required\": [\n            \"linkedVpId\"\n          ],\n          \"additionalProperties\": false\n        },\n        \"LinkedVPPresentation\": {\n          \"anyOf\": [\n            {\n              \"type\": \"string\"\n            },\n            {\n              \"$ref\": \"#/components/schemas/Record<string,any>\"\n            }\n          ]\n        },\n        \"Record<string,any>\": {\n          \"type\": \"object\"\n        },\n        \"GetServiceEntriesArgs\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"tenantId\": {\n              \"type\": \"string\"\n            }\n          },\n          \"additionalProperties\": false\n        },\n        \"LinkedVPServiceEntry\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"id\": {\n              \"type\": \"string\"\n            },\n            \"type\": {\n              \"type\": \"string\",\n              \"const\": \"LinkedVerifiablePresentation\"\n            },\n            \"serviceEndpoint\": {\n              \"type\": \"string\"\n            }\n          },\n          \"required\": [\n            \"id\",\n            \"type\",\n            \"serviceEndpoint\"\n          ],\n          \"additionalProperties\": false\n        },\n        \"HasLinkedVPEntryArgs\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"linkedVpId\": {\n              \"type\": \"string\"\n            }\n          },\n          \"required\": [\n            \"linkedVpId\"\n          ],\n          \"additionalProperties\": false\n        },\n        \"PublishCredentialArgs\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"digitalCredentialId\": {\n              \"type\": \"string\"\n            },\n            \"linkedVpId\": {\n              \"type\": \"string\"\n            },\n            \"tenantId\": {\n              \"type\": \"string\"\n            }\n          },\n          \"required\": [\n            \"digitalCredentialId\"\n          ],\n          \"additionalProperties\": false\n        },\n        \"LinkedVPEntry\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"id\": {\n              \"type\": \"string\"\n            },\n            \"linkedVpId\": {\n              \"type\": \"string\"\n            },\n            \"tenantId\": {\n              \"type\": \"string\"\n            },\n            \"linkedVpFrom\": {\n              \"type\": \"string\",\n              \"format\": \"date-time\"\n            },\n            \"createdAt\": {\n              \"type\": \"string\",\n              \"format\": \"date-time\"\n            }\n          },\n          \"required\": [\n            \"id\",\n            \"linkedVpId\",\n            \"createdAt\"\n          ],\n          \"additionalProperties\": false\n        },\n        \"UnpublishCredentialArgs\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"linkedVpId\": {\n              \"type\": \"string\"\n            }\n          },\n          \"required\": [\n            \"linkedVpId\"\n          ],\n          \"additionalProperties\": false\n        }\n      },\n      \"methods\": {\n        \"lvpGeneratePresentation\": {\n          \"description\": \"Generate and return a Verifiable Presentation for a published LinkedVP This is the main endpoint handler for GET /linked-vp/\",\n          \"arguments\": {\n            \"$ref\": \"#/components/schemas/GeneratePresentationArgs\"\n          },\n          \"returnType\": {\n            \"$ref\": \"#/components/schemas/LinkedVPPresentation\"\n          }\n        },\n        \"lvpGetServiceEntries\": {\n          \"description\": \"Get LinkedVP service entries for a DID to be added to a DID Document This is useful when generating DID Documents with toDidDocument\",\n          \"arguments\": {\n            \"$ref\": \"#/components/schemas/GetServiceEntriesArgs\"\n          },\n          \"returnType\": {\n            \"type\": \"array\",\n            \"items\": {\n              \"$ref\": \"#/components/schemas/LinkedVPServiceEntry\"\n            }\n          }\n        },\n        \"lvpHasEntry\": {\n          \"description\": \"Check if a LinkedVP entry exists by linkedVpId\",\n          \"arguments\": {\n            \"$ref\": \"#/components/schemas/HasLinkedVPEntryArgs\"\n          },\n          \"returnType\": {\n            \"type\": \"boolean\"\n          }\n        },\n        \"lvpPublishCredential\": {\n          \"description\": \"Publish a credential as a LinkedVP by adding it to the holder's DID Document\",\n          \"arguments\": {\n            \"$ref\": \"#/components/schemas/PublishCredentialArgs\"\n          },\n          \"returnType\": {\n            \"$ref\": \"#/components/schemas/LinkedVPEntry\"\n          }\n        },\n        \"lvpUnpublishCredential\": {\n          \"description\": \"Unpublish a credential by removing its LinkedVP entry from the DID Document\",\n          \"arguments\": {\n            \"$ref\": \"#/components/schemas/UnpublishCredentialArgs\"\n          },\n          \"returnType\": {\n            \"type\": \"boolean\"\n          }\n        }\n      }\n    }\n  }\n}","import { DigitalCredential } from '@sphereon/ssi-sdk.data-store-types'\nimport { IAgentPlugin } from '@veramo/core'\nimport { IsNull, Not } from 'typeorm'\nimport { schema } from '../index'\nimport { createLinkedVPPresentation } from '../services/LinkedVPService'\nimport {\n  GeneratePresentationArgs,\n  GetServiceEntriesArgs,\n  HasLinkedVPEntryArgs,\n  ILinkedVPManager,\n  LinkedVPEntry,\n  LinkedVPPresentation,\n  LinkedVPServiceEntry,\n  PublishCredentialArgs,\n  RequiredContext,\n  UnpublishCredentialArgs,\n} from '../types'\n\n// Exposing the methods here for any REST implementation\nexport const linkedVPManagerMethods: Array<string> = [\n  'lvpPublishCredential',\n  'lvpUnpublishCredential',\n  'lvpHasEntry',\n  'lvpGetServiceEntries',\n  'lvpGeneratePresentation',\n]\n\n/**\n * {@inheritDoc ILinkedVPManager}\n */\nexport class LinkedVPManager implements IAgentPlugin {\n  readonly schema = schema.ILinkedVPManager\n  readonly methods: ILinkedVPManager = {\n    lvpPublishCredential: this.lvpPublishCredential.bind(this),\n    lvpUnpublishCredential: this.lvpUnpublishCredential.bind(this),\n    lvpHasEntry: this.lvpHasEntry.bind(this),\n    lvpGetServiceEntries: this.lvpGetServiceEntries.bind(this),\n    lvpGeneratePresentation: this.lvpGeneratePresentation.bind(this),\n  }\n\n  private readonly holderDids: Record<string, string>\n\n  constructor(options: { holderDids: Record<string, string> }) {\n    this.holderDids = options.holderDids\n  }\n\n  private async lvpPublishCredential(args: PublishCredentialArgs, context: RequiredContext): Promise<LinkedVPEntry> {\n    const { digitalCredentialId } = args\n\n    const credential: DigitalCredential = await context.agent.crsGetCredential({ id: digitalCredentialId })\n\n    if (credential.linkedVpId) {\n      return Promise.reject(new Error(`Credential ${digitalCredentialId} is already published with linkedVpId ${credential.linkedVpId}`))\n    }\n\n    const linkedVpId = this.buildLinkedVpId(args.linkedVpId, credential.tenantId)\n\n    await this.ensureLinkedVpIdUnique(linkedVpId, context, credential.tenantId)\n\n    const publishedAt = new Date()\n    await context.agent.crsUpdateCredential({\n      id: digitalCredentialId,\n      linkedVpId,\n      linkedVpFrom: publishedAt,\n    })\n\n    return {\n      id: credential.id,\n      linkedVpId,\n      tenantId: credential.tenantId,\n      linkedVpFrom: publishedAt,\n      createdAt: credential.createdAt,\n    }\n  }\n\n  private async lvpUnpublishCredential(args: UnpublishCredentialArgs, context: RequiredContext): Promise<boolean> {\n    const { linkedVpId } = args\n\n    // Find credential by linkedVpId and tenantId\n    const credentials = await context.agent.crsGetCredentials({\n      filter: [{ linkedVpId }],\n    })\n    if (credentials.length === 0) {\n      return Promise.reject(Error(`No credential found with linkedVpId ${linkedVpId}`))\n    }\n\n    const credential = credentials[0]\n    await context.agent.crsUpdateCredential({\n      id: credential.id,\n      linkedVpId: undefined,\n      linkedVpFrom: undefined,\n    })\n\n    return true\n  }\n\n  private async lvpHasEntry(args: HasLinkedVPEntryArgs, context: RequiredContext): Promise<boolean> {\n    const { linkedVpId } = args\n\n    try {\n      const credentials = await context.agent.crsGetCredentials({\n        filter: [{ linkedVpId }],\n      })\n      return credentials.length > 0\n    } catch (error) {\n      return false\n    }\n  }\n\n  private async lvpGetServiceEntries(args: GetServiceEntriesArgs, context: RequiredContext): Promise<Array<LinkedVPServiceEntry>> {\n    const { tenantId } = args\n\n    // Get all published credentials (credentials with linkedVpId set)\n    const filter: any = { linkedVpId: Not(IsNull()) }\n    if (tenantId) {\n      filter.tenantId = tenantId\n    }\n\n    const credentials = await context.agent.crsGetCredentials({\n      filter: [filter],\n    })\n\n    return credentials\n      .filter((cred) => cred.linkedVpId !== undefined && cred.linkedVpId !== null)\n      .map((cred) => {\n        const holderDidForEntry = this.getHolderDid(cred.tenantId)\n        return this.credentialToServiceEntry(cred, holderDidForEntry)\n      })\n  }\n\n  private async lvpGeneratePresentation(args: GeneratePresentationArgs, context: RequiredContext): Promise<LinkedVPPresentation> {\n    const { linkedVpId } = args\n    const tenantId = this.parseTenantFromLinkedVpId(linkedVpId)\n    const holderDid = this.getHolderDid(tenantId)\n\n    const uniqueCredentials = await context.agent.crsGetUniqueCredentials({\n      filter: [\n        {\n          linkedVpId: args.linkedVpId,\n          ...(tenantId && { tenantId }),\n        },\n      ],\n    })\n    if (uniqueCredentials.length === 0) {\n      return Promise.reject(Error(`No published credentials found for linkedVpId ${linkedVpId}`))\n    }\n\n    // Generate the Verifiable Presentation with all published credentials\n    return createLinkedVPPresentation(holderDid, uniqueCredentials, context.agent)\n  }\n\n  private getHolderDid(tenantId: string | undefined) {\n    const holderDid = this.holderDids[tenantId ?? 'default']\n    if (!holderDid) {\n      throw Error(`No holder did supplied for tenant ${tenantId ?? 'default'}`)\n    }\n    return holderDid\n  }\n\n  private parseTenantFromLinkedVpId(linkedVpId: string): string | undefined {\n    const idx = linkedVpId.lastIndexOf('@')\n    return idx === -1 ? undefined : linkedVpId.substring(idx + 1)\n  }\n\n  private generateLinkedVpId(): string {\n    return `lvp-${Date.now()}-${Math.random().toString(36).substring(2, 15)}`\n  }\n\n  private async ensureLinkedVpIdUnique(linkedVpId: string, context: RequiredContext, tenantId?: string): Promise<void> {\n    const credentials = await context.agent.crsGetCredentials({\n      filter: [{ linkedVpId, ...(tenantId && { tenantId }) }],\n    })\n\n    if (credentials.length > 0) {\n      throw new Error(`LinkedVP ID ${linkedVpId} already exists${tenantId ? ` for tenant ${tenantId}` : ''}`)\n    }\n  }\n\n  private buildLinkedVpId(linkedVpId: string | undefined, tenantId: string | undefined) {\n    let finalLinkedVpId = linkedVpId || this.generateLinkedVpId()\n\n    // Append tenantId if provided and not already present\n    if (tenantId && tenantId !== '' && !finalLinkedVpId.includes('@')) {\n      finalLinkedVpId = `${finalLinkedVpId}@${tenantId}`\n    }\n    return finalLinkedVpId\n  }\n\n  private getBaseUrlFromDid(holderDid: string): string {\n    if (!holderDid.startsWith('did:web:')) {\n      throw new Error(`Invalid DID: ${holderDid}, must be did:web`)\n    }\n\n    const withoutPrefix = holderDid.replace('did:web:', '') // example.com:tenants:tenant1\n    const parts = withoutPrefix.split(':')\n    const domain = parts.shift()! // example.com\n    const path = parts.join('/') // tenants/tenant1\n\n    return path\n      ? `https://${domain}/${path}` // https://example.com/tenants/tenant1\n      : `https://${domain}` // https://example.com\n  }\n\n  private buildServiceEndpoint(holderDid: string, linkedVpId: string): string {\n    const baseUrl = this.getBaseUrlFromDid(holderDid)\n    const cleanBaseUrl = baseUrl.endsWith('/') ? baseUrl.slice(0, -1) : baseUrl\n    return `${cleanBaseUrl}/linked-vp/${linkedVpId}`\n  }\n\n  private credentialToServiceEntry(credential: DigitalCredential, holderDid: string): LinkedVPServiceEntry {\n    if (!credential.linkedVpId) {\n      throw new Error(`Credential ${credential.id} does not have a linkedVpId`)\n    }\n\n    return {\n      id: `${holderDid}#${credential.linkedVpId}`,\n      type: 'LinkedVerifiablePresentation',\n      serviceEndpoint: this.buildServiceEndpoint(holderDid, credential.linkedVpId),\n    }\n  }\n}\n","import { UniqueDigitalCredential } from '@sphereon/ssi-sdk.credential-store'\nimport { Loggers, OriginalVerifiableCredential, WrappedVerifiableCredential } from '@sphereon/ssi-types'\nimport type { PresentationPayload } from '@veramo/core'\nimport { W3CVerifiableCredential } from '@veramo/core/src/types/vc-data-model'\nimport { LOGGER_NAMESPACE, RequiredContext } from '../types'\n\nconst logger = Loggers.DEFAULT.get(LOGGER_NAMESPACE)\n\n/**\n * Extracts the original credential from various wrapper types\n */\nfunction extractOriginalCredential(\n  credential: UniqueDigitalCredential | WrappedVerifiableCredential | OriginalVerifiableCredential,\n): OriginalVerifiableCredential {\n  if (typeof credential === 'string') {\n    return credential\n  }\n\n  if ('digitalCredential' in credential) {\n    const udc = credential as UniqueDigitalCredential\n    if (udc.originalVerifiableCredential) {\n      return udc.originalVerifiableCredential\n    }\n    return udc.uniformVerifiableCredential as OriginalVerifiableCredential\n  }\n\n  if ('original' in credential) {\n    return credential.original\n  }\n\n  return credential as OriginalVerifiableCredential\n}\n\n/**\n * Creates a Verifiable Presentation for LinkedVP publishing\n * Contains multiple credentials in a single JWT VP\n * No nonce or audience since this is for publishing, not responding to verification\n */\nexport async function createLinkedVPPresentation(\n  holderDid: string,\n  credentials: UniqueDigitalCredential[],\n  agent: RequiredContext['agent'],\n): Promise<string | Record<string, any>> {\n  if (credentials.length === 0) {\n    return Promise.reject(Error('Cannot create LinkedVP presentation with zero credentials'))\n  }\n\n  logger.debug(`Creating LinkedVP presentation for ${holderDid} with ${credentials.length} credentials`)\n\n  const identifier = await agent.identifierManagedGet({ identifier: holderDid })\n\n  // Extract and prepare credentials\n  const verifiableCredentials = credentials.map((credential) => {\n    const original = extractOriginalCredential(credential)\n    // Keep as-is if string (JWT), otherwise convert to object\n    return typeof original === 'string' ? original : original\n  })\n\n  // Create VP structure\n  const vpObject: PresentationPayload = {\n    '@context': ['https://www.w3.org/2018/credentials/v1'],\n    type: ['VerifiablePresentation'],\n    holder: holderDid,\n    verifiableCredential: verifiableCredentials as W3CVerifiableCredential[],\n  }\n\n  // Create and sign the VP as JWT\n  const result = await agent.createVerifiablePresentation({\n    presentation: vpObject,\n    proofFormat: 'jwt',\n    keyRef: identifier.kmsKeyRef || identifier.kid,\n  })\n\n  // Extract JWT from result\n  if (typeof result === 'string') {\n    return result\n  }\n\n  if (result.proof && 'jws' in result.proof) {\n    return result.proof.jws\n  }\n\n  return Promise.reject(Error('Failed to create JWT VP - no JWT in result'))\n}\n","import { IIdentifierResolution } from '@sphereon/ssi-sdk-ext.identifier-resolution'\nimport { ICredentialStore } from '@sphereon/ssi-sdk.credential-store'\nimport { VcdmCredentialPlugin } from '@sphereon/ssi-sdk.credential-vcdm'\nimport { IAgentContext, IPluginMethodMap } from '@veramo/core'\nimport { IKeyManager } from '@veramo/core/src/types/IKeyManager'\n\nexport const LOGGER_NAMESPACE = 'sphereon:linked-vp'\n\nexport type LinkedVPPresentation = string | Record<string, any>\n\nexport interface ILinkedVPManager extends IPluginMethodMap {\n  /**\n   * Publish a credential as a LinkedVP by adding it to the holder's DID Document\n   * @param args - Publication arguments including credential ID and scope configuration\n   * @param context - Agent context\n   */\n  lvpPublishCredential(args: PublishCredentialArgs, context: RequiredContext): Promise<LinkedVPEntry>\n\n  /**\n   * Unpublish a credential by removing its LinkedVP entry from the DID Document\n   * @param args - Unpublish arguments\n   * @param context - Agent context\n   */\n  lvpUnpublishCredential(args: UnpublishCredentialArgs, context: RequiredContext): Promise<boolean>\n\n  /**\n   * Check if a LinkedVP entry exists by linkedVpId\n   * @param args - Query arguments\n   * @param context - Agent context\n   */\n  lvpHasEntry(args: HasLinkedVPEntryArgs, context: RequiredContext): Promise<boolean>\n\n  /**\n   * Get LinkedVP service entries for a DID to be added to a DID Document\n   * This is useful when generating DID Documents with toDidDocument\n   * @param args - Query arguments for the DID\n   * @param context - Agent context\n   */\n  lvpGetServiceEntries(args: GetServiceEntriesArgs, context: RequiredContext): Promise<Array<LinkedVPServiceEntry>>\n\n  /**\n   * Generate and return a Verifiable Presentation for a published LinkedVP\n   * This is the main endpoint handler for GET /linked-vp/{linkedVpId}\n   * @param args - Generation arguments\n   * @param context - Agent context\n   */\n  lvpGeneratePresentation(args: GeneratePresentationArgs, context: RequiredContext): Promise<LinkedVPPresentation>\n}\n\nexport type PublishCredentialArgs = {\n  digitalCredentialId: string\n  linkedVpId?: string // Optional: if not provided, will be auto-generated\n}\n\nexport type UnpublishCredentialArgs = {\n  linkedVpId: string\n}\n\nexport type HasLinkedVPEntryArgs = {\n  linkedVpId: string\n}\n\nexport type GetServiceEntriesArgs = {\n  tenantId?: string\n}\n\nexport type GeneratePresentationArgs = {\n  linkedVpId: string\n}\n\nexport type LinkedVPEntry = {\n  id: string\n  linkedVpId: string\n  tenantId?: string\n  linkedVpFrom?: Date\n  createdAt: Date\n}\n\nexport type LinkedVPServiceEntry = {\n  id: string\n  type: 'LinkedVerifiablePresentation'\n  serviceEndpoint: string\n}\n\nexport type RequiredContext = IAgentContext<IIdentifierResolution & ICredentialStore & IKeyManager & VcdmCredentialPlugin>\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA;;;;;;;;;;ACAA;AAAA,EACE,kBAAoB;AAAA,IAClB,YAAc;AAAA,MACZ,SAAW;AAAA,QACT,0BAA4B;AAAA,UAC1B,MAAQ;AAAA,UACR,YAAc;AAAA,YACZ,YAAc;AAAA,cACZ,MAAQ;AAAA,YACV;AAAA,UACF;AAAA,UACA,UAAY;AAAA,YACV;AAAA,UACF;AAAA,UACA,sBAAwB;AAAA,QAC1B;AAAA,QACA,sBAAwB;AAAA,UACtB,OAAS;AAAA,YACP;AAAA,cACE,MAAQ;AAAA,YACV;AAAA,YACA;AAAA,cACE,MAAQ;AAAA,YACV;AAAA,UACF;AAAA,QACF;AAAA,QACA,sBAAsB;AAAA,UACpB,MAAQ;AAAA,QACV;AAAA,QACA,uBAAyB;AAAA,UACvB,MAAQ;AAAA,UACR,YAAc;AAAA,YACZ,UAAY;AAAA,cACV,MAAQ;AAAA,YACV;AAAA,UACF;AAAA,UACA,sBAAwB;AAAA,QAC1B;AAAA,QACA,sBAAwB;AAAA,UACtB,MAAQ;AAAA,UACR,YAAc;AAAA,YACZ,IAAM;AAAA,cACJ,MAAQ;AAAA,YACV;AAAA,YACA,MAAQ;AAAA,cACN,MAAQ;AAAA,cACR,OAAS;AAAA,YACX;AAAA,YACA,iBAAmB;AAAA,cACjB,MAAQ;AAAA,YACV;AAAA,UACF;AAAA,UACA,UAAY;AAAA,YACV;AAAA,YACA;AAAA,YACA;AAAA,UACF;AAAA,UACA,sBAAwB;AAAA,QAC1B;AAAA,QACA,sBAAwB;AAAA,UACtB,MAAQ;AAAA,UACR,YAAc;AAAA,YACZ,YAAc;AAAA,cACZ,MAAQ;AAAA,YACV;AAAA,UACF;AAAA,UACA,UAAY;AAAA,YACV;AAAA,UACF;AAAA,UACA,sBAAwB;AAAA,QAC1B;AAAA,QACA,uBAAyB;AAAA,UACvB,MAAQ;AAAA,UACR,YAAc;AAAA,YACZ,qBAAuB;AAAA,cACrB,MAAQ;AAAA,YACV;AAAA,YACA,YAAc;AAAA,cACZ,MAAQ;AAAA,YACV;AAAA,YACA,UAAY;AAAA,cACV,MAAQ;AAAA,YACV;AAAA,UACF;AAAA,UACA,UAAY;AAAA,YACV;AAAA,UACF;AAAA,UACA,sBAAwB;AAAA,QAC1B;AAAA,QACA,eAAiB;AAAA,UACf,MAAQ;AAAA,UACR,YAAc;AAAA,YACZ,IAAM;AAAA,cACJ,MAAQ;AAAA,YACV;AAAA,YACA,YAAc;AAAA,cACZ,MAAQ;AAAA,YACV;AAAA,YACA,UAAY;AAAA,cACV,MAAQ;AAAA,YACV;AAAA,YACA,cAAgB;AAAA,cACd,MAAQ;AAAA,cACR,QAAU;AAAA,YACZ;AAAA,YACA,WAAa;AAAA,cACX,MAAQ;AAAA,cACR,QAAU;AAAA,YACZ;AAAA,UACF;AAAA,UACA,UAAY;AAAA,YACV;AAAA,YACA;AAAA,YACA;AAAA,UACF;AAAA,UACA,sBAAwB;AAAA,QAC1B;AAAA,QACA,yBAA2B;AAAA,UACzB,MAAQ;AAAA,UACR,YAAc;AAAA,YACZ,YAAc;AAAA,cACZ,MAAQ;AAAA,YACV;AAAA,UACF;AAAA,UACA,UAAY;AAAA,YACV;AAAA,UACF;AAAA,UACA,sBAAwB;AAAA,QAC1B;AAAA,MACF;AAAA,MACA,SAAW;AAAA,QACT,yBAA2B;AAAA,UACzB,aAAe;AAAA,UACf,WAAa;AAAA,YACX,MAAQ;AAAA,UACV;AAAA,UACA,YAAc;AAAA,YACZ,MAAQ;AAAA,UACV;AAAA,QACF;AAAA,QACA,sBAAwB;AAAA,UACtB,aAAe;AAAA,UACf,WAAa;AAAA,YACX,MAAQ;AAAA,UACV;AAAA,UACA,YAAc;AAAA,YACZ,MAAQ;AAAA,YACR,OAAS;AAAA,cACP,MAAQ;AAAA,YACV;AAAA,UACF;AAAA,QACF;AAAA,QACA,aAAe;AAAA,UACb,aAAe;AAAA,UACf,WAAa;AAAA,YACX,MAAQ;AAAA,UACV;AAAA,UACA,YAAc;AAAA,YACZ,MAAQ;AAAA,UACV;AAAA,QACF;AAAA,QACA,sBAAwB;AAAA,UACtB,aAAe;AAAA,UACf,WAAa;AAAA,YACX,MAAQ;AAAA,UACV;AAAA,UACA,YAAc;AAAA,YACZ,MAAQ;AAAA,UACV;AAAA,QACF;AAAA,QACA,wBAA0B;AAAA,UACxB,aAAe;AAAA,UACf,WAAa;AAAA,YACX,MAAQ;AAAA,UACV;AAAA,UACA,YAAc;AAAA,YACZ,MAAQ;AAAA,UACV;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;ACpLA,qBAA4B;;;ACD5B,uBAAmF;;;ACK5E,IAAMA,mBAAmB;;;ADAhC,IAAMC,SAASC,yBAAQC,QAAQC,IAAIC,gBAAAA;AAKnC,SAASC,0BACPC,YAAgG;AAEhG,MAAI,OAAOA,eAAe,UAAU;AAClC,WAAOA;EACT;AAEA,MAAI,uBAAuBA,YAAY;AACrC,UAAMC,MAAMD;AACZ,QAAIC,IAAIC,8BAA8B;AACpC,aAAOD,IAAIC;IACb;AACA,WAAOD,IAAIE;EACb;AAEA,MAAI,cAAcH,YAAY;AAC5B,WAAOA,WAAWI;EACpB;AAEA,SAAOJ;AACT;AApBSD;AA2BT,eAAsBM,2BACpBC,WACAC,aACAC,OAA+B;AAE/B,MAAID,YAAYE,WAAW,GAAG;AAC5B,WAAOC,QAAQC,OAAOC,MAAM,2DAAA,CAAA;EAC9B;AAEAlB,SAAOmB,MAAM,sCAAsCP,SAAAA,SAAkBC,YAAYE,MAAM,cAAc;AAErG,QAAMK,aAAa,MAAMN,MAAMO,qBAAqB;IAAED,YAAYR;EAAU,CAAA;AAG5E,QAAMU,wBAAwBT,YAAYU,IAAI,CAACjB,eAAAA;AAC7C,UAAMI,WAAWL,0BAA0BC,UAAAA;AAE3C,WAAO,OAAOI,aAAa,WAAWA,WAAWA;EACnD,CAAA;AAGA,QAAMc,WAAgC;IACpC,YAAY;MAAC;;IACbC,MAAM;MAAC;;IACPC,QAAQd;IACRe,sBAAsBL;EACxB;AAGA,QAAMM,SAAS,MAAMd,MAAMe,6BAA6B;IACtDC,cAAcN;IACdO,aAAa;IACbC,QAAQZ,WAAWa,aAAab,WAAWc;EAC7C,CAAA;AAGA,MAAI,OAAON,WAAW,UAAU;AAC9B,WAAOA;EACT;AAEA,MAAIA,OAAOO,SAAS,SAASP,OAAOO,OAAO;AACzC,WAAOP,OAAOO,MAAMC;EACtB;AAEA,SAAOpB,QAAQC,OAAOC,MAAM,4CAAA,CAAA;AAC9B;AA7CsBP;;;ADnBf,IAAM0B,yBAAwC;EACnD;EACA;EACA;EACA;EACA;;AAMK,IAAMC,kBAAN,MAAMA;EA5Bb,OA4BaA;;;EACFC,SAASA,sBAAOC;EAChBC,UAA4B;IACnCC,sBAAsB,KAAKA,qBAAqBC,KAAK,IAAI;IACzDC,wBAAwB,KAAKA,uBAAuBD,KAAK,IAAI;IAC7DE,aAAa,KAAKA,YAAYF,KAAK,IAAI;IACvCG,sBAAsB,KAAKA,qBAAqBH,KAAK,IAAI;IACzDI,yBAAyB,KAAKA,wBAAwBJ,KAAK,IAAI;EACjE;EAEiBK;EAEjB,YAAYC,SAAiD;AAC3D,SAAKD,aAAaC,QAAQD;EAC5B;EAEA,MAAcN,qBAAqBQ,MAA6BC,SAAkD;AAChH,UAAM,EAAEC,oBAAmB,IAAKF;AAEhC,UAAMG,aAAgC,MAAMF,QAAQG,MAAMC,iBAAiB;MAAEC,IAAIJ;IAAoB,CAAA;AAErG,QAAIC,WAAWI,YAAY;AACzB,aAAOC,QAAQC,OAAO,IAAIC,MAAM,cAAcR,mBAAAA,yCAA4DC,WAAWI,UAAU,EAAE,CAAA;IACnI;AAEA,UAAMA,aAAa,KAAKI,gBAAgBX,KAAKO,YAAYJ,WAAWS,QAAQ;AAE5E,UAAM,KAAKC,uBAAuBN,YAAYN,SAASE,WAAWS,QAAQ;AAE1E,UAAME,cAAc,oBAAIC,KAAAA;AACxB,UAAMd,QAAQG,MAAMY,oBAAoB;MACtCV,IAAIJ;MACJK;MACAU,cAAcH;IAChB,CAAA;AAEA,WAAO;MACLR,IAAIH,WAAWG;MACfC;MACAK,UAAUT,WAAWS;MACrBK,cAAcH;MACdI,WAAWf,WAAWe;IACxB;EACF;EAEA,MAAcxB,uBAAuBM,MAA+BC,SAA4C;AAC9G,UAAM,EAAEM,WAAU,IAAKP;AAGvB,UAAMmB,cAAc,MAAMlB,QAAQG,MAAMgB,kBAAkB;MACxDC,QAAQ;QAAC;UAAEd;QAAW;;IACxB,CAAA;AACA,QAAIY,YAAYG,WAAW,GAAG;AAC5B,aAAOd,QAAQC,OAAOC,MAAM,uCAAuCH,UAAAA,EAAY,CAAA;IACjF;AAEA,UAAMJ,aAAagB,YAAY,CAAA;AAC/B,UAAMlB,QAAQG,MAAMY,oBAAoB;MACtCV,IAAIH,WAAWG;MACfC,YAAYgB;MACZN,cAAcM;IAChB,CAAA;AAEA,WAAO;EACT;EAEA,MAAc5B,YAAYK,MAA4BC,SAA4C;AAChG,UAAM,EAAEM,WAAU,IAAKP;AAEvB,QAAI;AACF,YAAMmB,cAAc,MAAMlB,QAAQG,MAAMgB,kBAAkB;QACxDC,QAAQ;UAAC;YAAEd;UAAW;;MACxB,CAAA;AACA,aAAOY,YAAYG,SAAS;IAC9B,SAASE,OAAO;AACd,aAAO;IACT;EACF;EAEA,MAAc5B,qBAAqBI,MAA6BC,SAAgE;AAC9H,UAAM,EAAEW,SAAQ,IAAKZ;AAGrB,UAAMqB,SAAc;MAAEd,gBAAYkB,wBAAIC,uBAAAA,CAAAA;IAAU;AAChD,QAAId,UAAU;AACZS,aAAOT,WAAWA;IACpB;AAEA,UAAMO,cAAc,MAAMlB,QAAQG,MAAMgB,kBAAkB;MACxDC,QAAQ;QAACA;;IACX,CAAA;AAEA,WAAOF,YACJE,OAAO,CAACM,SAASA,KAAKpB,eAAegB,UAAaI,KAAKpB,eAAe,IAAA,EACtEqB,IAAI,CAACD,SAAAA;AACJ,YAAME,oBAAoB,KAAKC,aAAaH,KAAKf,QAAQ;AACzD,aAAO,KAAKmB,yBAAyBJ,MAAME,iBAAAA;IAC7C,CAAA;EACJ;EAEA,MAAchC,wBAAwBG,MAAgCC,SAAyD;AAC7H,UAAM,EAAEM,WAAU,IAAKP;AACvB,UAAMY,WAAW,KAAKoB,0BAA0BzB,UAAAA;AAChD,UAAM0B,YAAY,KAAKH,aAAalB,QAAAA;AAEpC,UAAMsB,oBAAoB,MAAMjC,QAAQG,MAAM+B,wBAAwB;MACpEd,QAAQ;QACN;UACEd,YAAYP,KAAKO;UACjB,GAAIK,YAAY;YAAEA;UAAS;QAC7B;;IAEJ,CAAA;AACA,QAAIsB,kBAAkBZ,WAAW,GAAG;AAClC,aAAOd,QAAQC,OAAOC,MAAM,iDAAiDH,UAAAA,EAAY,CAAA;IAC3F;AAGA,WAAO6B,2BAA2BH,WAAWC,mBAAmBjC,QAAQG,KAAK;EAC/E;EAEQ0B,aAAalB,UAA8B;AACjD,UAAMqB,YAAY,KAAKnC,WAAWc,YAAY,SAAA;AAC9C,QAAI,CAACqB,WAAW;AACd,YAAMvB,MAAM,qCAAqCE,YAAY,SAAA,EAAW;IAC1E;AACA,WAAOqB;EACT;EAEQD,0BAA0BzB,YAAwC;AACxE,UAAM8B,MAAM9B,WAAW+B,YAAY,GAAA;AACnC,WAAOD,QAAQ,KAAKd,SAAYhB,WAAWgC,UAAUF,MAAM,CAAA;EAC7D;EAEQG,qBAA6B;AACnC,WAAO,OAAOzB,KAAK0B,IAAG,CAAA,IAAMC,KAAKC,OAAM,EAAGC,SAAS,EAAA,EAAIL,UAAU,GAAG,EAAA,CAAA;EACtE;EAEA,MAAc1B,uBAAuBN,YAAoBN,SAA0BW,UAAkC;AACnH,UAAMO,cAAc,MAAMlB,QAAQG,MAAMgB,kBAAkB;MACxDC,QAAQ;QAAC;UAAEd;UAAY,GAAIK,YAAY;YAAEA;UAAS;QAAG;;IACvD,CAAA;AAEA,QAAIO,YAAYG,SAAS,GAAG;AAC1B,YAAM,IAAIZ,MAAM,eAAeH,UAAAA,kBAA4BK,WAAW,eAAeA,QAAAA,KAAa,EAAA,EAAI;IACxG;EACF;EAEQD,gBAAgBJ,YAAgCK,UAA8B;AACpF,QAAIiC,kBAAkBtC,cAAc,KAAKiC,mBAAkB;AAG3D,QAAI5B,YAAYA,aAAa,MAAM,CAACiC,gBAAgBC,SAAS,GAAA,GAAM;AACjED,wBAAkB,GAAGA,eAAAA,IAAmBjC,QAAAA;IAC1C;AACA,WAAOiC;EACT;EAEQE,kBAAkBd,WAA2B;AACnD,QAAI,CAACA,UAAUe,WAAW,UAAA,GAAa;AACrC,YAAM,IAAItC,MAAM,gBAAgBuB,SAAAA,mBAA4B;IAC9D;AAEA,UAAMgB,gBAAgBhB,UAAUiB,QAAQ,YAAY,EAAA;AACpD,UAAMC,QAAQF,cAAcG,MAAM,GAAA;AAClC,UAAMC,SAASF,MAAMG,MAAK;AAC1B,UAAMC,OAAOJ,MAAMK,KAAK,GAAA;AAExB,WAAOD,OACH,WAAWF,MAAAA,IAAUE,IAAAA,KACrB,WAAWF,MAAAA;EACjB;EAEQI,qBAAqBxB,WAAmB1B,YAA4B;AAC1E,UAAMmD,UAAU,KAAKX,kBAAkBd,SAAAA;AACvC,UAAM0B,eAAeD,QAAQE,SAAS,GAAA,IAAOF,QAAQG,MAAM,GAAG,EAAC,IAAKH;AACpE,WAAO,GAAGC,YAAAA,cAA0BpD,UAAAA;EACtC;EAEQwB,yBAAyB5B,YAA+B8B,WAAyC;AACvG,QAAI,CAAC9B,WAAWI,YAAY;AAC1B,YAAM,IAAIG,MAAM,cAAcP,WAAWG,EAAE,6BAA6B;IAC1E;AAEA,WAAO;MACLA,IAAI,GAAG2B,SAAAA,IAAa9B,WAAWI,UAAU;MACzCuD,MAAM;MACNC,iBAAiB,KAAKN,qBAAqBxB,WAAW9B,WAAWI,UAAU;IAC7E;EACF;AACF;","names":["LOGGER_NAMESPACE","logger","Loggers","DEFAULT","get","LOGGER_NAMESPACE","extractOriginalCredential","credential","udc","originalVerifiableCredential","uniformVerifiableCredential","original","createLinkedVPPresentation","holderDid","credentials","agent","length","Promise","reject","Error","debug","identifier","identifierManagedGet","verifiableCredentials","map","vpObject","type","holder","verifiableCredential","result","createVerifiablePresentation","presentation","proofFormat","keyRef","kmsKeyRef","kid","proof","jws","linkedVPManagerMethods","LinkedVPManager","schema","ILinkedVPManager","methods","lvpPublishCredential","bind","lvpUnpublishCredential","lvpHasEntry","lvpGetServiceEntries","lvpGeneratePresentation","holderDids","options","args","context","digitalCredentialId","credential","agent","crsGetCredential","id","linkedVpId","Promise","reject","Error","buildLinkedVpId","tenantId","ensureLinkedVpIdUnique","publishedAt","Date","crsUpdateCredential","linkedVpFrom","createdAt","credentials","crsGetCredentials","filter","length","undefined","error","Not","IsNull","cred","map","holderDidForEntry","getHolderDid","credentialToServiceEntry","parseTenantFromLinkedVpId","holderDid","uniqueCredentials","crsGetUniqueCredentials","createLinkedVPPresentation","idx","lastIndexOf","substring","generateLinkedVpId","now","Math","random","toString","finalLinkedVpId","includes","getBaseUrlFromDid","startsWith","withoutPrefix","replace","parts","split","domain","shift","path","join","buildServiceEndpoint","baseUrl","cleanBaseUrl","endsWith","slice","type","serviceEndpoint"]}
+{"version":3,"sources":["../src/index.ts","../plugin.schema.json","../src/agent/LinkedVPManager.ts","../src/services/LinkedVPService.ts","../src/types/ILinkedVPManager.ts"],"sourcesContent":["/**\n * @public\n */\nimport schema from '../plugin.schema.json'\nexport { schema }\nexport { LinkedVPManager, linkedVPManagerMethods } from './agent/LinkedVPManager'\nexport * from './types/ILinkedVPManager'\n","{\n  \"ILinkedVPManager\": {\n    \"components\": {\n      \"schemas\": {\n        \"GeneratePresentationArgs\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"linkedVpId\": {\n              \"type\": \"string\"\n            }\n          },\n          \"required\": [\n            \"linkedVpId\"\n          ],\n          \"additionalProperties\": false\n        },\n        \"LinkedVPPresentation\": {\n          \"anyOf\": [\n            {\n              \"type\": \"string\"\n            },\n            {\n              \"$ref\": \"#/components/schemas/Record<string,any>\"\n            }\n          ]\n        },\n        \"Record<string,any>\": {\n          \"type\": \"object\"\n        },\n        \"GetServiceEntriesArgs\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"tenantId\": {\n              \"type\": \"string\"\n            }\n          },\n          \"additionalProperties\": false\n        },\n        \"LinkedVPServiceEntry\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"id\": {\n              \"type\": \"string\"\n            },\n            \"type\": {\n              \"type\": \"string\",\n              \"const\": \"LinkedVerifiablePresentation\"\n            },\n            \"serviceEndpoint\": {\n              \"type\": \"string\"\n            }\n          },\n          \"required\": [\n            \"id\",\n            \"type\",\n            \"serviceEndpoint\"\n          ],\n          \"additionalProperties\": false\n        },\n        \"HasLinkedVPEntryArgs\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"linkedVpId\": {\n              \"type\": \"string\"\n            }\n          },\n          \"required\": [\n            \"linkedVpId\"\n          ],\n          \"additionalProperties\": false\n        },\n        \"PublishCredentialArgs\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"digitalCredentialId\": {\n              \"type\": \"string\"\n            },\n            \"linkedVpId\": {\n              \"type\": \"string\"\n            },\n            \"tenantId\": {\n              \"type\": \"string\"\n            }\n          },\n          \"required\": [\n            \"digitalCredentialId\"\n          ],\n          \"additionalProperties\": false\n        },\n        \"LinkedVPEntry\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"id\": {\n              \"type\": \"string\"\n            },\n            \"linkedVpId\": {\n              \"type\": \"string\"\n            },\n            \"tenantId\": {\n              \"type\": \"string\"\n            },\n            \"linkedVpFrom\": {\n              \"type\": \"string\",\n              \"format\": \"date-time\"\n            },\n            \"createdAt\": {\n              \"type\": \"string\",\n              \"format\": \"date-time\"\n            }\n          },\n          \"required\": [\n            \"id\",\n            \"linkedVpId\",\n            \"createdAt\"\n          ],\n          \"additionalProperties\": false\n        },\n        \"UnpublishCredentialArgs\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"linkedVpId\": {\n              \"type\": \"string\"\n            }\n          },\n          \"required\": [\n            \"linkedVpId\"\n          ],\n          \"additionalProperties\": false\n        }\n      },\n      \"methods\": {\n        \"lvpGeneratePresentation\": {\n          \"description\": \"Generate and return a Verifiable Presentation for a published LinkedVP This is the main endpoint handler for GET /linked-vp/\",\n          \"arguments\": {\n            \"$ref\": \"#/components/schemas/GeneratePresentationArgs\"\n          },\n          \"returnType\": {\n            \"$ref\": \"#/components/schemas/LinkedVPPresentation\"\n          }\n        },\n        \"lvpGetServiceEntries\": {\n          \"description\": \"Get LinkedVP service entries for a DID to be added to a DID Document This is useful when generating DID Documents with toDidDocument\",\n          \"arguments\": {\n            \"$ref\": \"#/components/schemas/GetServiceEntriesArgs\"\n          },\n          \"returnType\": {\n            \"type\": \"array\",\n            \"items\": {\n              \"$ref\": \"#/components/schemas/LinkedVPServiceEntry\"\n            }\n          }\n        },\n        \"lvpHasEntry\": {\n          \"description\": \"Check if a LinkedVP entry exists by linkedVpId\",\n          \"arguments\": {\n            \"$ref\": \"#/components/schemas/HasLinkedVPEntryArgs\"\n          },\n          \"returnType\": {\n            \"type\": \"boolean\"\n          }\n        },\n        \"lvpPublishCredential\": {\n          \"description\": \"Publish a credential as a LinkedVP by adding it to the holder's DID Document\",\n          \"arguments\": {\n            \"$ref\": \"#/components/schemas/PublishCredentialArgs\"\n          },\n          \"returnType\": {\n            \"$ref\": \"#/components/schemas/LinkedVPEntry\"\n          }\n        },\n        \"lvpUnpublishCredential\": {\n          \"description\": \"Unpublish a credential by removing its LinkedVP entry from the DID Document\",\n          \"arguments\": {\n            \"$ref\": \"#/components/schemas/UnpublishCredentialArgs\"\n          },\n          \"returnType\": {\n            \"type\": \"boolean\"\n          }\n        }\n      }\n    }\n  }\n}","import { DigitalCredential } from '@sphereon/ssi-sdk.data-store-types'\nimport { IAgentPlugin } from '@veramo/core'\nimport { IsNull, Not } from 'typeorm'\nimport { schema } from '../index'\nimport { createLinkedVPPresentation } from '../services/LinkedVPService'\nimport {\n  GeneratePresentationArgs,\n  GetServiceEntriesArgs,\n  HasLinkedVPEntryArgs,\n  ILinkedVPManager,\n  LinkedVPEntry,\n  LinkedVPPresentation,\n  LinkedVPServiceEntry,\n  PublishCredentialArgs,\n  RequiredContext,\n  UnpublishCredentialArgs,\n} from '../types'\n\n// Exposing the methods here for any REST implementation\nexport const linkedVPManagerMethods: Array<string> = [\n  'lvpPublishCredential',\n  'lvpUnpublishCredential',\n  'lvpHasEntry',\n  'lvpGetServiceEntries',\n  'lvpGeneratePresentation',\n]\n\n/**\n * {@inheritDoc ILinkedVPManager}\n */\nexport class LinkedVPManager implements IAgentPlugin {\n  readonly schema = schema.ILinkedVPManager\n  readonly methods: ILinkedVPManager = {\n    lvpPublishCredential: this.lvpPublishCredential.bind(this),\n    lvpUnpublishCredential: this.lvpUnpublishCredential.bind(this),\n    lvpHasEntry: this.lvpHasEntry.bind(this),\n    lvpGetServiceEntries: this.lvpGetServiceEntries.bind(this),\n    lvpGeneratePresentation: this.lvpGeneratePresentation.bind(this),\n  }\n\n  private readonly holderDids: Record<string, string>\n\n  constructor(options: { holderDids: Record<string, string> }) {\n    this.holderDids = options.holderDids\n  }\n\n  private async lvpPublishCredential(args: PublishCredentialArgs, context: RequiredContext): Promise<LinkedVPEntry> {\n    const { digitalCredentialId } = args\n\n    const credential: DigitalCredential = await context.agent.crsGetCredential({ id: digitalCredentialId })\n\n    if (credential.linkedVpId) {\n      return Promise.reject(new Error(`Credential ${digitalCredentialId} is already published with linkedVpId ${credential.linkedVpId}`))\n    }\n\n    const linkedVpId = this.buildLinkedVpId(args.linkedVpId, credential.tenantId)\n\n    await this.ensureLinkedVpIdUnique(linkedVpId, context, credential.tenantId)\n\n    const publishedAt = new Date()\n    await context.agent.crsUpdateCredential({\n      id: digitalCredentialId,\n      linkedVpId,\n      linkedVpFrom: publishedAt,\n    })\n\n    return {\n      id: credential.id,\n      linkedVpId,\n      tenantId: credential.tenantId,\n      linkedVpFrom: publishedAt,\n      createdAt: credential.createdAt,\n    }\n  }\n\n  private async lvpUnpublishCredential(args: UnpublishCredentialArgs, context: RequiredContext): Promise<boolean> {\n    const { linkedVpId } = args\n\n    // Find credential by linkedVpId and tenantId\n    const credentials = await context.agent.crsGetCredentials({\n      filter: [{ linkedVpId }],\n    })\n    if (credentials.length === 0) {\n      return Promise.reject(Error(`No credential found with linkedVpId ${linkedVpId}`))\n    }\n\n    const credential = credentials[0]\n    await context.agent.crsUpdateCredential({\n      id: credential.id,\n      linkedVpId: undefined,\n      linkedVpFrom: undefined,\n    })\n\n    return true\n  }\n\n  private async lvpHasEntry(args: HasLinkedVPEntryArgs, context: RequiredContext): Promise<boolean> {\n    const { linkedVpId } = args\n\n    try {\n      const credentials = await context.agent.crsGetCredentials({\n        filter: [{ linkedVpId }],\n      })\n      return credentials.length > 0\n    } catch (error) {\n      return false\n    }\n  }\n\n  private async lvpGetServiceEntries(args: GetServiceEntriesArgs, context: RequiredContext): Promise<Array<LinkedVPServiceEntry>> {\n    const { tenantId } = args\n\n    // Get all published credentials (credentials with linkedVpId set)\n    const filter: any = { linkedVpId: Not(IsNull()) }\n    if (tenantId) {\n      filter.tenantId = tenantId\n    }\n\n    const credentials = await context.agent.crsGetCredentials({\n      filter: [filter],\n    })\n\n    return credentials\n      .filter((cred) => cred.linkedVpId !== undefined && cred.linkedVpId !== null)\n      .map((cred) => {\n        const holderDidForEntry = this.getHolderDid(cred.tenantId)\n        return this.credentialToServiceEntry(cred, holderDidForEntry)\n      })\n  }\n\n  private async lvpGeneratePresentation(args: GeneratePresentationArgs, context: RequiredContext): Promise<LinkedVPPresentation> {\n    const { linkedVpId } = args\n    const tenantId = this.parseTenantFromLinkedVpId(linkedVpId)\n    const holderDid = this.getHolderDid(tenantId)\n\n    const uniqueCredentials = await context.agent.crsGetUniqueCredentials({\n      filter: [\n        {\n          linkedVpId: args.linkedVpId,\n          ...(tenantId && { tenantId }),\n        },\n      ],\n    })\n    if (uniqueCredentials.length === 0) {\n      return Promise.reject(Error(`No published credentials found for linkedVpId ${linkedVpId}`))\n    }\n    if (uniqueCredentials.length > 1) {\n      return Promise.reject(Error(`Multiple credentials found for linkedVpId ${linkedVpId}`))\n    }\n\n    // Generate the Verifiable Presentation with all published credentials\n    return createLinkedVPPresentation(holderDid, uniqueCredentials[0], context.agent)\n  }\n\n  private getHolderDid(tenantId: string | undefined) {\n    const holderDid = this.holderDids[tenantId ?? 'default']\n    if (!holderDid) {\n      throw Error(`No holder did supplied for tenant ${tenantId ?? 'default'}`)\n    }\n    return holderDid\n  }\n\n  private parseTenantFromLinkedVpId(linkedVpId: string): string | undefined {\n    const idx = linkedVpId.lastIndexOf('@')\n    return idx === -1 ? undefined : linkedVpId.substring(idx + 1)\n  }\n\n  private generateLinkedVpId(): string {\n    return `lvp-${Date.now()}-${Math.random().toString(36).substring(2, 15)}`\n  }\n\n  private async ensureLinkedVpIdUnique(linkedVpId: string, context: RequiredContext, tenantId?: string): Promise<void> {\n    const credentials = await context.agent.crsGetCredentials({\n      filter: [{ linkedVpId, ...(tenantId && { tenantId }) }],\n    })\n\n    if (credentials.length > 0) {\n      throw new Error(`LinkedVP ID ${linkedVpId} already exists${tenantId ? ` for tenant ${tenantId}` : ''}`)\n    }\n  }\n\n  private buildLinkedVpId(linkedVpId: string | undefined, tenantId: string | undefined) {\n    let finalLinkedVpId = linkedVpId || this.generateLinkedVpId()\n\n    // Append tenantId if provided and not already present\n    if (tenantId && tenantId !== '' && !finalLinkedVpId.includes('@')) {\n      finalLinkedVpId = `${finalLinkedVpId}@${tenantId}`\n    }\n    return finalLinkedVpId\n  }\n\n  private getBaseUrlFromDid(holderDid: string): string {\n    if (!holderDid.startsWith('did:web:')) {\n      throw new Error(`Invalid DID: ${holderDid}, must be did:web`)\n    }\n\n    const withoutPrefix = holderDid.replace('did:web:', '') // example.com:tenants:tenant1\n    const parts = withoutPrefix.split(':')\n    const domain = parts.shift()! // example.com\n    const path = parts.join('/') // tenants/tenant1\n\n    return path\n      ? `https://${domain}/${path}` // https://example.com/tenants/tenant1\n      : `https://${domain}` // https://example.com\n  }\n\n  private buildServiceEndpoint(holderDid: string, linkedVpId: string): string {\n    const baseUrl = this.getBaseUrlFromDid(holderDid)\n    const cleanBaseUrl = baseUrl.endsWith('/') ? baseUrl.slice(0, -1) : baseUrl\n    return `${cleanBaseUrl}/linked-vp/${linkedVpId}`\n  }\n\n  private credentialToServiceEntry(credential: DigitalCredential, holderDid: string): LinkedVPServiceEntry {\n    if (!credential.linkedVpId) {\n      throw new Error(`Credential ${credential.id} does not have a linkedVpId`)\n    }\n\n    return {\n      id: `${holderDid}#${credential.linkedVpId}`,\n      type: 'LinkedVerifiablePresentation',\n      serviceEndpoint: this.buildServiceEndpoint(holderDid, credential.linkedVpId),\n    }\n  }\n}\n","import { UniqueDigitalCredential } from '@sphereon/ssi-sdk.credential-store'\nimport { calculateSdHash, defaultGenerateDigest, PartialSdJwtKbJwt } from '@sphereon/ssi-sdk.sd-jwt'\n\nimport {\n  CredentialMapper,\n  DocumentFormat,\n  Loggers,\n  OriginalVerifiableCredential,\n  SdJwtDecodedVerifiableCredential,\n  WrappedVerifiableCredential,\n} from '@sphereon/ssi-types'\nimport { LOGGER_NAMESPACE, RequiredContext } from '../types'\n\nconst logger = Loggers.DEFAULT.get(LOGGER_NAMESPACE)\nconst CLOCK_SKEW = 120 // TODO make adjustable?\n\n/**\n * Extracts the original credential from various wrapper types\n */\nfunction extractOriginalCredential(\n  credential: UniqueDigitalCredential | WrappedVerifiableCredential | OriginalVerifiableCredential,\n): OriginalVerifiableCredential {\n  if (typeof credential === 'string') {\n    return credential\n  }\n\n  if ('digitalCredential' in credential) {\n    const udc = credential as UniqueDigitalCredential\n    if (udc.originalVerifiableCredential) {\n      return udc.originalVerifiableCredential\n    }\n    return udc.uniformVerifiableCredential as OriginalVerifiableCredential\n  }\n\n  if ('original' in credential) {\n    return credential.original\n  }\n\n  return credential as OriginalVerifiableCredential\n}\n\n/**\n * Creates a Verifiable Presentation for LinkedVP publishing\n * Contains multiple credentials in a single JWT VP\n * No nonce or audience since this is for publishing, not responding to verification\n */\nexport async function createLinkedVPPresentation(\n  holderDid: string,\n  credential: UniqueDigitalCredential,\n  agent: RequiredContext['agent'],\n): Promise<string | Record<string, any>> {\n  logger.debug(`Creating LinkedVP presentation for ${holderDid} of credential ${credential.id}`)\n\n  const identifier = await agent.identifierManagedGet({ identifier: holderDid })\n  const originalCredential = extractOriginalCredential(credential)\n  const documentFormat = CredentialMapper.detectDocumentType(originalCredential)\n  switch (documentFormat) {\n    case DocumentFormat.SD_JWT_VC: {\n      // SD-JWT with KB-JWT\n      const decodedSdJwt = await CredentialMapper.decodeSdJwtVcAsync(\n        typeof originalCredential === 'string' ? originalCredential : (originalCredential as SdJwtDecodedVerifiableCredential).compactSdJwtVc,\n        defaultGenerateDigest,\n      )\n\n      const hashAlg = decodedSdJwt.signedPayload._sd_alg ?? 'sha-256'\n      const sdHash = calculateSdHash(decodedSdJwt.compactSdJwtVc, hashAlg, defaultGenerateDigest)\n      const kbJwtPayload: PartialSdJwtKbJwt['payload'] = {\n        iat: Math.floor(Date.now() / 1000 - CLOCK_SKEW),\n        sd_hash: sdHash,\n      }\n\n      const presentationResult = await agent.createSdJwtPresentation({\n        presentation: decodedSdJwt.compactSdJwtVc,\n        kb: {\n          payload: kbJwtPayload as any, // FIXME?\n        },\n      })\n\n      return presentationResult.presentation\n    }\n    case DocumentFormat.JSONLD: {\n      // JSON-LD VC - create JSON-LD VP with challenge and domain in proof\n      const vcObject = typeof originalCredential === 'string' ? JSON.parse(originalCredential) : originalCredential\n\n      const vpObject = {\n        '@context': ['https://www.w3.org/2018/credentials/v1'],\n        type: ['VerifiablePresentation'],\n        verifiableCredential: [vcObject],\n        holder: holderDid,\n      }\n\n      // Create JSON-LD VP with proof\n      return await agent.createVerifiablePresentation({\n        presentation: vpObject,\n        proofFormat: 'lds',\n        keyRef: identifier.kmsKeyRef || identifier.kid,\n      })\n    }\n    case DocumentFormat.MSO_MDOC: {\n      // ISO mdoc - create mdoc VP token\n      // This is a placeholder implementation\n      // Full implementation would require:\n      // 1. Decode the mdoc using CredentialMapper or mdoc utilities\n      // 2. Build proper mdoc VP token with session transcript\n      // 3. Include nonce/audience in the session transcript\n      logger.warning('mso_mdoc format has basic support - production use requires proper mdoc VP token implementation')\n\n      return originalCredential\n    }\n    default: {\n      // JWT VC - create JWT VP with nonce and aud in payload\n      const vcJwt = typeof originalCredential === 'string' ? originalCredential : JSON.stringify(originalCredential)\n\n      // Create VP JWT using agent method\n      const vpPayload = {\n        iss: holderDid,\n        vp: {\n          '@context': ['https://www.w3.org/2018/credentials/v1'],\n          type: ['VerifiablePresentation'],\n          holder: holderDid,\n          verifiableCredential: [vcJwt],\n        },\n        iat: Math.floor(Date.now() / 1000 - CLOCK_SKEW),\n        exp: Math.floor(Date.now() / 1000 + 600 + CLOCK_SKEW), // 10 minutes\n      }\n\n      // Use the agent's JWT creation capability\n      const vpJwt = await agent.createVerifiablePresentation({\n        presentation: vpPayload.vp,\n        proofFormat: 'jwt',\n        keyRef: identifier.kmsKeyRef || identifier.kid,\n      })\n\n      return (vpJwt.proof && 'jwt' in vpJwt.proof && vpJwt.proof.jwt) || vpJwt\n    }\n  }\n}\n","import { IIdentifierResolution } from '@sphereon/ssi-sdk-ext.identifier-resolution'\nimport { ICredentialStore } from '@sphereon/ssi-sdk.credential-store'\nimport { VcdmCredentialPlugin } from '@sphereon/ssi-sdk.credential-vcdm'\nimport { ISDJwtPlugin } from '@sphereon/ssi-sdk.sd-jwt'\nimport { IAgentContext, IPluginMethodMap } from '@veramo/core'\nimport { IKeyManager } from '@veramo/core/src/types/IKeyManager'\n\nexport const LOGGER_NAMESPACE = 'sphereon:linked-vp'\n\nexport type LinkedVPPresentation = string | Record<string, any>\n\nexport interface ILinkedVPManager extends IPluginMethodMap {\n  /**\n   * Publish a credential as a LinkedVP by adding it to the holder's DID Document\n   * @param args - Publication arguments including credential ID and scope configuration\n   * @param context - Agent context\n   */\n  lvpPublishCredential(args: PublishCredentialArgs, context: RequiredContext): Promise<LinkedVPEntry>\n\n  /**\n   * Unpublish a credential by removing its LinkedVP entry from the DID Document\n   * @param args - Unpublish arguments\n   * @param context - Agent context\n   */\n  lvpUnpublishCredential(args: UnpublishCredentialArgs, context: RequiredContext): Promise<boolean>\n\n  /**\n   * Check if a LinkedVP entry exists by linkedVpId\n   * @param args - Query arguments\n   * @param context - Agent context\n   */\n  lvpHasEntry(args: HasLinkedVPEntryArgs, context: RequiredContext): Promise<boolean>\n\n  /**\n   * Get LinkedVP service entries for a DID to be added to a DID Document\n   * This is useful when generating DID Documents with toDidDocument\n   * @param args - Query arguments for the DID\n   * @param context - Agent context\n   */\n  lvpGetServiceEntries(args: GetServiceEntriesArgs, context: RequiredContext): Promise<Array<LinkedVPServiceEntry>>\n\n  /**\n   * Generate and return a Verifiable Presentation for a published LinkedVP\n   * This is the main endpoint handler for GET /linked-vp/{linkedVpId}\n   * @param args - Generation arguments\n   * @param context - Agent context\n   */\n  lvpGeneratePresentation(args: GeneratePresentationArgs, context: RequiredContext): Promise<LinkedVPPresentation>\n}\n\nexport type PublishCredentialArgs = {\n  digitalCredentialId: string\n  linkedVpId?: string // Optional: if not provided, will be auto-generated\n}\n\nexport type UnpublishCredentialArgs = {\n  linkedVpId: string\n}\n\nexport type HasLinkedVPEntryArgs = {\n  linkedVpId: string\n}\n\nexport type GetServiceEntriesArgs = {\n  tenantId?: string\n}\n\nexport type GeneratePresentationArgs = {\n  linkedVpId: string\n}\n\nexport type LinkedVPEntry = {\n  id: string\n  linkedVpId: string\n  tenantId?: string\n  linkedVpFrom?: Date\n  createdAt: Date\n}\n\nexport type LinkedVPServiceEntry = {\n  id: string\n  type: 'LinkedVerifiablePresentation'\n  serviceEndpoint: string\n}\n\nexport type RequiredContext = IAgentContext<IIdentifierResolution & ICredentialStore & IKeyManager & VcdmCredentialPlugin & ISDJwtPlugin>\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA;;;;;;;;;;ACAA;AAAA,EACE,kBAAoB;AAAA,IAClB,YAAc;AAAA,MACZ,SAAW;AAAA,QACT,0BAA4B;AAAA,UAC1B,MAAQ;AAAA,UACR,YAAc;AAAA,YACZ,YAAc;AAAA,cACZ,MAAQ;AAAA,YACV;AAAA,UACF;AAAA,UACA,UAAY;AAAA,YACV;AAAA,UACF;AAAA,UACA,sBAAwB;AAAA,QAC1B;AAAA,QACA,sBAAwB;AAAA,UACtB,OAAS;AAAA,YACP;AAAA,cACE,MAAQ;AAAA,YACV;AAAA,YACA;AAAA,cACE,MAAQ;AAAA,YACV;AAAA,UACF;AAAA,QACF;AAAA,QACA,sBAAsB;AAAA,UACpB,MAAQ;AAAA,QACV;AAAA,QACA,uBAAyB;AAAA,UACvB,MAAQ;AAAA,UACR,YAAc;AAAA,YACZ,UAAY;AAAA,cACV,MAAQ;AAAA,YACV;AAAA,UACF;AAAA,UACA,sBAAwB;AAAA,QAC1B;AAAA,QACA,sBAAwB;AAAA,UACtB,MAAQ;AAAA,UACR,YAAc;AAAA,YACZ,IAAM;AAAA,cACJ,MAAQ;AAAA,YACV;AAAA,YACA,MAAQ;AAAA,cACN,MAAQ;AAAA,cACR,OAAS;AAAA,YACX;AAAA,YACA,iBAAmB;AAAA,cACjB,MAAQ;AAAA,YACV;AAAA,UACF;AAAA,UACA,UAAY;AAAA,YACV;AAAA,YACA;AAAA,YACA;AAAA,UACF;AAAA,UACA,sBAAwB;AAAA,QAC1B;AAAA,QACA,sBAAwB;AAAA,UACtB,MAAQ;AAAA,UACR,YAAc;AAAA,YACZ,YAAc;AAAA,cACZ,MAAQ;AAAA,YACV;AAAA,UACF;AAAA,UACA,UAAY;AAAA,YACV;AAAA,UACF;AAAA,UACA,sBAAwB;AAAA,QAC1B;AAAA,QACA,uBAAyB;AAAA,UACvB,MAAQ;AAAA,UACR,YAAc;AAAA,YACZ,qBAAuB;AAAA,cACrB,MAAQ;AAAA,YACV;AAAA,YACA,YAAc;AAAA,cACZ,MAAQ;AAAA,YACV;AAAA,YACA,UAAY;AAAA,cACV,MAAQ;AAAA,YACV;AAAA,UACF;AAAA,UACA,UAAY;AAAA,YACV;AAAA,UACF;AAAA,UACA,sBAAwB;AAAA,QAC1B;AAAA,QACA,eAAiB;AAAA,UACf,MAAQ;AAAA,UACR,YAAc;AAAA,YACZ,IAAM;AAAA,cACJ,MAAQ;AAAA,YACV;AAAA,YACA,YAAc;AAAA,cACZ,MAAQ;AAAA,YACV;AAAA,YACA,UAAY;AAAA,cACV,MAAQ;AAAA,YACV;AAAA,YACA,cAAgB;AAAA,cACd,MAAQ;AAAA,cACR,QAAU;AAAA,YACZ;AAAA,YACA,WAAa;AAAA,cACX,MAAQ;AAAA,cACR,QAAU;AAAA,YACZ;AAAA,UACF;AAAA,UACA,UAAY;AAAA,YACV;AAAA,YACA;AAAA,YACA;AAAA,UACF;AAAA,UACA,sBAAwB;AAAA,QAC1B;AAAA,QACA,yBAA2B;AAAA,UACzB,MAAQ;AAAA,UACR,YAAc;AAAA,YACZ,YAAc;AAAA,cACZ,MAAQ;AAAA,YACV;AAAA,UACF;AAAA,UACA,UAAY;AAAA,YACV;AAAA,UACF;AAAA,UACA,sBAAwB;AAAA,QAC1B;AAAA,MACF;AAAA,MACA,SAAW;AAAA,QACT,yBAA2B;AAAA,UACzB,aAAe;AAAA,UACf,WAAa;AAAA,YACX,MAAQ;AAAA,UACV;AAAA,UACA,YAAc;AAAA,YACZ,MAAQ;AAAA,UACV;AAAA,QACF;AAAA,QACA,sBAAwB;AAAA,UACtB,aAAe;AAAA,UACf,WAAa;AAAA,YACX,MAAQ;AAAA,UACV;AAAA,UACA,YAAc;AAAA,YACZ,MAAQ;AAAA,YACR,OAAS;AAAA,cACP,MAAQ;AAAA,YACV;AAAA,UACF;AAAA,QACF;AAAA,QACA,aAAe;AAAA,UACb,aAAe;AAAA,UACf,WAAa;AAAA,YACX,MAAQ;AAAA,UACV;AAAA,UACA,YAAc;AAAA,YACZ,MAAQ;AAAA,UACV;AAAA,QACF;AAAA,QACA,sBAAwB;AAAA,UACtB,aAAe;AAAA,UACf,WAAa;AAAA,YACX,MAAQ;AAAA,UACV;AAAA,UACA,YAAc;AAAA,YACZ,MAAQ;AAAA,UACV;AAAA,QACF;AAAA,QACA,wBAA0B;AAAA,UACxB,aAAe;AAAA,UACf,WAAa;AAAA,YACX,MAAQ;AAAA,UACV;AAAA,UACA,YAAc;AAAA,YACZ,MAAQ;AAAA,UACV;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;ACpLA,qBAA4B;;;ACD5B,qBAA0E;AAE1E,uBAOO;;;ACHA,IAAMA,mBAAmB;;;ADMhC,IAAMC,SAASC,yBAAQC,QAAQC,IAAIC,gBAAAA;AACnC,IAAMC,aAAa;AAKnB,SAASC,0BACPC,YAAgG;AAEhG,MAAI,OAAOA,eAAe,UAAU;AAClC,WAAOA;EACT;AAEA,MAAI,uBAAuBA,YAAY;AACrC,UAAMC,MAAMD;AACZ,QAAIC,IAAIC,8BAA8B;AACpC,aAAOD,IAAIC;IACb;AACA,WAAOD,IAAIE;EACb;AAEA,MAAI,cAAcH,YAAY;AAC5B,WAAOA,WAAWI;EACpB;AAEA,SAAOJ;AACT;AApBSD;AA2BT,eAAsBM,2BACpBC,WACAN,YACAO,OAA+B;AAE/Bd,SAAOe,MAAM,sCAAsCF,SAAAA,kBAA2BN,WAAWS,EAAE,EAAE;AAE7F,QAAMC,aAAa,MAAMH,MAAMI,qBAAqB;IAAED,YAAYJ;EAAU,CAAA;AAC5E,QAAMM,qBAAqBb,0BAA0BC,UAAAA;AACrD,QAAMa,iBAAiBC,kCAAiBC,mBAAmBH,kBAAAA;AAC3D,UAAQC,gBAAAA;IACN,KAAKG,gCAAeC,WAAW;AAE7B,YAAMC,eAAe,MAAMJ,kCAAiBK,mBAC1C,OAAOP,uBAAuB,WAAWA,qBAAsBA,mBAAwDQ,gBACvHC,oCAAAA;AAGF,YAAMC,UAAUJ,aAAaK,cAAcC,WAAW;AACtD,YAAMC,aAASC,gCAAgBR,aAAaE,gBAAgBE,SAASD,oCAAAA;AACrE,YAAMM,eAA6C;QACjDC,KAAKC,KAAKC,MAAMC,KAAKC,IAAG,IAAK,MAAOlC,UAAAA;QACpCmC,SAASR;MACX;AAEA,YAAMS,qBAAqB,MAAM3B,MAAM4B,wBAAwB;QAC7DC,cAAclB,aAAaE;QAC3BiB,IAAI;UACFC,SAASX;QACX;MACF,CAAA;AAEA,aAAOO,mBAAmBE;IAC5B;IACA,KAAKpB,gCAAeuB,QAAQ;AAE1B,YAAMC,WAAW,OAAO5B,uBAAuB,WAAW6B,KAAKC,MAAM9B,kBAAAA,IAAsBA;AAE3F,YAAM+B,WAAW;QACf,YAAY;UAAC;;QACbC,MAAM;UAAC;;QACPC,sBAAsB;UAACL;;QACvBM,QAAQxC;MACV;AAGA,aAAO,MAAMC,MAAMwC,6BAA6B;QAC9CX,cAAcO;QACdK,aAAa;QACbC,QAAQvC,WAAWwC,aAAaxC,WAAWyC;MAC7C,CAAA;IACF;IACA,KAAKnC,gCAAeoC,UAAU;AAO5B3D,aAAO4D,QAAQ,iGAAA;AAEf,aAAOzC;IACT;IACA,SAAS;AAEP,YAAM0C,QAAQ,OAAO1C,uBAAuB,WAAWA,qBAAqB6B,KAAKc,UAAU3C,kBAAAA;AAG3F,YAAM4C,YAAY;QAChBC,KAAKnD;QACLoD,IAAI;UACF,YAAY;YAAC;;UACbd,MAAM;YAAC;;UACPE,QAAQxC;UACRuC,sBAAsB;YAACS;;QACzB;QACA1B,KAAKC,KAAKC,MAAMC,KAAKC,IAAG,IAAK,MAAOlC,UAAAA;QACpC6D,KAAK9B,KAAKC,MAAMC,KAAKC,IAAG,IAAK,MAAO,MAAMlC,UAAAA;MAC5C;AAGA,YAAM8D,QAAQ,MAAMrD,MAAMwC,6BAA6B;QACrDX,cAAcoB,UAAUE;QACxBV,aAAa;QACbC,QAAQvC,WAAWwC,aAAaxC,WAAWyC;MAC7C,CAAA;AAEA,aAAQS,MAAMC,SAAS,SAASD,MAAMC,SAASD,MAAMC,MAAMC,OAAQF;IACrE;EACF;AACF;AA1FsBvD;;;AD3Bf,IAAM0D,yBAAwC;EACnD;EACA;EACA;EACA;EACA;;AAMK,IAAMC,kBAAN,MAAMA;EA5Bb,OA4BaA;;;EACFC,SAASA,sBAAOC;EAChBC,UAA4B;IACnCC,sBAAsB,KAAKA,qBAAqBC,KAAK,IAAI;IACzDC,wBAAwB,KAAKA,uBAAuBD,KAAK,IAAI;IAC7DE,aAAa,KAAKA,YAAYF,KAAK,IAAI;IACvCG,sBAAsB,KAAKA,qBAAqBH,KAAK,IAAI;IACzDI,yBAAyB,KAAKA,wBAAwBJ,KAAK,IAAI;EACjE;EAEiBK;EAEjB,YAAYC,SAAiD;AAC3D,SAAKD,aAAaC,QAAQD;EAC5B;EAEA,MAAcN,qBAAqBQ,MAA6BC,SAAkD;AAChH,UAAM,EAAEC,oBAAmB,IAAKF;AAEhC,UAAMG,aAAgC,MAAMF,QAAQG,MAAMC,iBAAiB;MAAEC,IAAIJ;IAAoB,CAAA;AAErG,QAAIC,WAAWI,YAAY;AACzB,aAAOC,QAAQC,OAAO,IAAIC,MAAM,cAAcR,mBAAAA,yCAA4DC,WAAWI,UAAU,EAAE,CAAA;IACnI;AAEA,UAAMA,aAAa,KAAKI,gBAAgBX,KAAKO,YAAYJ,WAAWS,QAAQ;AAE5E,UAAM,KAAKC,uBAAuBN,YAAYN,SAASE,WAAWS,QAAQ;AAE1E,UAAME,cAAc,oBAAIC,KAAAA;AACxB,UAAMd,QAAQG,MAAMY,oBAAoB;MACtCV,IAAIJ;MACJK;MACAU,cAAcH;IAChB,CAAA;AAEA,WAAO;MACLR,IAAIH,WAAWG;MACfC;MACAK,UAAUT,WAAWS;MACrBK,cAAcH;MACdI,WAAWf,WAAWe;IACxB;EACF;EAEA,MAAcxB,uBAAuBM,MAA+BC,SAA4C;AAC9G,UAAM,EAAEM,WAAU,IAAKP;AAGvB,UAAMmB,cAAc,MAAMlB,QAAQG,MAAMgB,kBAAkB;MACxDC,QAAQ;QAAC;UAAEd;QAAW;;IACxB,CAAA;AACA,QAAIY,YAAYG,WAAW,GAAG;AAC5B,aAAOd,QAAQC,OAAOC,MAAM,uCAAuCH,UAAAA,EAAY,CAAA;IACjF;AAEA,UAAMJ,aAAagB,YAAY,CAAA;AAC/B,UAAMlB,QAAQG,MAAMY,oBAAoB;MACtCV,IAAIH,WAAWG;MACfC,YAAYgB;MACZN,cAAcM;IAChB,CAAA;AAEA,WAAO;EACT;EAEA,MAAc5B,YAAYK,MAA4BC,SAA4C;AAChG,UAAM,EAAEM,WAAU,IAAKP;AAEvB,QAAI;AACF,YAAMmB,cAAc,MAAMlB,QAAQG,MAAMgB,kBAAkB;QACxDC,QAAQ;UAAC;YAAEd;UAAW;;MACxB,CAAA;AACA,aAAOY,YAAYG,SAAS;IAC9B,SAASE,OAAO;AACd,aAAO;IACT;EACF;EAEA,MAAc5B,qBAAqBI,MAA6BC,SAAgE;AAC9H,UAAM,EAAEW,SAAQ,IAAKZ;AAGrB,UAAMqB,SAAc;MAAEd,gBAAYkB,wBAAIC,uBAAAA,CAAAA;IAAU;AAChD,QAAId,UAAU;AACZS,aAAOT,WAAWA;IACpB;AAEA,UAAMO,cAAc,MAAMlB,QAAQG,MAAMgB,kBAAkB;MACxDC,QAAQ;QAACA;;IACX,CAAA;AAEA,WAAOF,YACJE,OAAO,CAACM,SAASA,KAAKpB,eAAegB,UAAaI,KAAKpB,eAAe,IAAA,EACtEqB,IAAI,CAACD,SAAAA;AACJ,YAAME,oBAAoB,KAAKC,aAAaH,KAAKf,QAAQ;AACzD,aAAO,KAAKmB,yBAAyBJ,MAAME,iBAAAA;IAC7C,CAAA;EACJ;EAEA,MAAchC,wBAAwBG,MAAgCC,SAAyD;AAC7H,UAAM,EAAEM,WAAU,IAAKP;AACvB,UAAMY,WAAW,KAAKoB,0BAA0BzB,UAAAA;AAChD,UAAM0B,YAAY,KAAKH,aAAalB,QAAAA;AAEpC,UAAMsB,oBAAoB,MAAMjC,QAAQG,MAAM+B,wBAAwB;MACpEd,QAAQ;QACN;UACEd,YAAYP,KAAKO;UACjB,GAAIK,YAAY;YAAEA;UAAS;QAC7B;;IAEJ,CAAA;AACA,QAAIsB,kBAAkBZ,WAAW,GAAG;AAClC,aAAOd,QAAQC,OAAOC,MAAM,iDAAiDH,UAAAA,EAAY,CAAA;IAC3F;AACA,QAAI2B,kBAAkBZ,SAAS,GAAG;AAChC,aAAOd,QAAQC,OAAOC,MAAM,6CAA6CH,UAAAA,EAAY,CAAA;IACvF;AAGA,WAAO6B,2BAA2BH,WAAWC,kBAAkB,CAAA,GAAIjC,QAAQG,KAAK;EAClF;EAEQ0B,aAAalB,UAA8B;AACjD,UAAMqB,YAAY,KAAKnC,WAAWc,YAAY,SAAA;AAC9C,QAAI,CAACqB,WAAW;AACd,YAAMvB,MAAM,qCAAqCE,YAAY,SAAA,EAAW;IAC1E;AACA,WAAOqB;EACT;EAEQD,0BAA0BzB,YAAwC;AACxE,UAAM8B,MAAM9B,WAAW+B,YAAY,GAAA;AACnC,WAAOD,QAAQ,KAAKd,SAAYhB,WAAWgC,UAAUF,MAAM,CAAA;EAC7D;EAEQG,qBAA6B;AACnC,WAAO,OAAOzB,KAAK0B,IAAG,CAAA,IAAMC,KAAKC,OAAM,EAAGC,SAAS,EAAA,EAAIL,UAAU,GAAG,EAAA,CAAA;EACtE;EAEA,MAAc1B,uBAAuBN,YAAoBN,SAA0BW,UAAkC;AACnH,UAAMO,cAAc,MAAMlB,QAAQG,MAAMgB,kBAAkB;MACxDC,QAAQ;QAAC;UAAEd;UAAY,GAAIK,YAAY;YAAEA;UAAS;QAAG;;IACvD,CAAA;AAEA,QAAIO,YAAYG,SAAS,GAAG;AAC1B,YAAM,IAAIZ,MAAM,eAAeH,UAAAA,kBAA4BK,WAAW,eAAeA,QAAAA,KAAa,EAAA,EAAI;IACxG;EACF;EAEQD,gBAAgBJ,YAAgCK,UAA8B;AACpF,QAAIiC,kBAAkBtC,cAAc,KAAKiC,mBAAkB;AAG3D,QAAI5B,YAAYA,aAAa,MAAM,CAACiC,gBAAgBC,SAAS,GAAA,GAAM;AACjED,wBAAkB,GAAGA,eAAAA,IAAmBjC,QAAAA;IAC1C;AACA,WAAOiC;EACT;EAEQE,kBAAkBd,WAA2B;AACnD,QAAI,CAACA,UAAUe,WAAW,UAAA,GAAa;AACrC,YAAM,IAAItC,MAAM,gBAAgBuB,SAAAA,mBAA4B;IAC9D;AAEA,UAAMgB,gBAAgBhB,UAAUiB,QAAQ,YAAY,EAAA;AACpD,UAAMC,QAAQF,cAAcG,MAAM,GAAA;AAClC,UAAMC,SAASF,MAAMG,MAAK;AAC1B,UAAMC,OAAOJ,MAAMK,KAAK,GAAA;AAExB,WAAOD,OACH,WAAWF,MAAAA,IAAUE,IAAAA,KACrB,WAAWF,MAAAA;EACjB;EAEQI,qBAAqBxB,WAAmB1B,YAA4B;AAC1E,UAAMmD,UAAU,KAAKX,kBAAkBd,SAAAA;AACvC,UAAM0B,eAAeD,QAAQE,SAAS,GAAA,IAAOF,QAAQG,MAAM,GAAG,EAAC,IAAKH;AACpE,WAAO,GAAGC,YAAAA,cAA0BpD,UAAAA;EACtC;EAEQwB,yBAAyB5B,YAA+B8B,WAAyC;AACvG,QAAI,CAAC9B,WAAWI,YAAY;AAC1B,YAAM,IAAIG,MAAM,cAAcP,WAAWG,EAAE,6BAA6B;IAC1E;AAEA,WAAO;MACLA,IAAI,GAAG2B,SAAAA,IAAa9B,WAAWI,UAAU;MACzCuD,MAAM;MACNC,iBAAiB,KAAKN,qBAAqBxB,WAAW9B,WAAWI,UAAU;IAC7E;EACF;AACF;","names":["LOGGER_NAMESPACE","logger","Loggers","DEFAULT","get","LOGGER_NAMESPACE","CLOCK_SKEW","extractOriginalCredential","credential","udc","originalVerifiableCredential","uniformVerifiableCredential","original","createLinkedVPPresentation","holderDid","agent","debug","id","identifier","identifierManagedGet","originalCredential","documentFormat","CredentialMapper","detectDocumentType","DocumentFormat","SD_JWT_VC","decodedSdJwt","decodeSdJwtVcAsync","compactSdJwtVc","defaultGenerateDigest","hashAlg","signedPayload","_sd_alg","sdHash","calculateSdHash","kbJwtPayload","iat","Math","floor","Date","now","sd_hash","presentationResult","createSdJwtPresentation","presentation","kb","payload","JSONLD","vcObject","JSON","parse","vpObject","type","verifiableCredential","holder","createVerifiablePresentation","proofFormat","keyRef","kmsKeyRef","kid","MSO_MDOC","warning","vcJwt","stringify","vpPayload","iss","vp","exp","vpJwt","proof","jwt","linkedVPManagerMethods","LinkedVPManager","schema","ILinkedVPManager","methods","lvpPublishCredential","bind","lvpUnpublishCredential","lvpHasEntry","lvpGetServiceEntries","lvpGeneratePresentation","holderDids","options","args","context","digitalCredentialId","credential","agent","crsGetCredential","id","linkedVpId","Promise","reject","Error","buildLinkedVpId","tenantId","ensureLinkedVpIdUnique","publishedAt","Date","crsUpdateCredential","linkedVpFrom","createdAt","credentials","crsGetCredentials","filter","length","undefined","error","Not","IsNull","cred","map","holderDidForEntry","getHolderDid","credentialToServiceEntry","parseTenantFromLinkedVpId","holderDid","uniqueCredentials","crsGetUniqueCredentials","createLinkedVPPresentation","idx","lastIndexOf","substring","generateLinkedVpId","now","Math","random","toString","finalLinkedVpId","includes","getBaseUrlFromDid","startsWith","withoutPrefix","replace","parts","split","domain","shift","path","join","buildServiceEndpoint","baseUrl","cleanBaseUrl","endsWith","slice","type","serviceEndpoint"]}

package/dist/index.d.cts

@@ -2,6 +2,7 @@ import { IPluginMethodMap, IAgentContext, IAgentPlugin } from '@veramo/core';
 import { IIdentifierResolution } from '@sphereon/ssi-sdk-ext.identifier-resolution';
 import { ICredentialStore } from '@sphereon/ssi-sdk.credential-store';
 import { VcdmCredentialPlugin } from '@sphereon/ssi-sdk.credential-vcdm';
+import { ISDJwtPlugin } from '@sphereon/ssi-sdk.sd-jwt';
 import { IKeyManager } from '@veramo/core/src/types/IKeyManager';
 
 var ILinkedVPManager$1 = {
@@ -253,7 +254,7 @@ type LinkedVPServiceEntry = {
     type: 'LinkedVerifiablePresentation';
     serviceEndpoint: string;
 };
-type RequiredContext = IAgentContext<IIdentifierResolution & ICredentialStore & IKeyManager & VcdmCredentialPlugin>;
+type RequiredContext = IAgentContext<IIdentifierResolution & ICredentialStore & IKeyManager & VcdmCredentialPlugin & ISDJwtPlugin>;
 
 declare const linkedVPManagerMethods: Array<string>;
 /**

package/dist/index.d.ts

@@ -2,6 +2,7 @@ import { IPluginMethodMap, IAgentContext, IAgentPlugin } from '@veramo/core';
 import { IIdentifierResolution } from '@sphereon/ssi-sdk-ext.identifier-resolution';
 import { ICredentialStore } from '@sphereon/ssi-sdk.credential-store';
 import { VcdmCredentialPlugin } from '@sphereon/ssi-sdk.credential-vcdm';
+import { ISDJwtPlugin } from '@sphereon/ssi-sdk.sd-jwt';
 import { IKeyManager } from '@veramo/core/src/types/IKeyManager';
 
 var ILinkedVPManager$1 = {
@@ -253,7 +254,7 @@ type LinkedVPServiceEntry = {
     type: 'LinkedVerifiablePresentation';
     serviceEndpoint: string;
 };
-type RequiredContext = IAgentContext<IIdentifierResolution & ICredentialStore & IKeyManager & VcdmCredentialPlugin>;
+type RequiredContext = IAgentContext<IIdentifierResolution & ICredentialStore & IKeyManager & VcdmCredentialPlugin & ISDJwtPlugin>;
 
 declare const linkedVPManagerMethods: Array<string>;
 /**

package/dist/index.js

@@ -190,13 +190,15 @@ var plugin_schema_default = {
 import { IsNull, Not } from "typeorm";
 
 // src/services/LinkedVPService.ts
-import { Loggers } from "@sphereon/ssi-types";
+import { calculateSdHash, defaultGenerateDigest } from "@sphereon/ssi-sdk.sd-jwt";
+import { CredentialMapper, DocumentFormat, Loggers } from "@sphereon/ssi-types";
 
 // src/types/ILinkedVPManager.ts
 var LOGGER_NAMESPACE = "sphereon:linked-vp";
 
 // src/services/LinkedVPService.ts
 var logger = Loggers.DEFAULT.get(LOGGER_NAMESPACE);
+var CLOCK_SKEW = 120;
 function extractOriginalCredential(credential) {
   if (typeof credential === "string") {
     return credential;
@@ -214,40 +216,81 @@ function extractOriginalCredential(credential) {
   return credential;
 }
 __name(extractOriginalCredential, "extractOriginalCredential");
-async function createLinkedVPPresentation(holderDid, credentials, agent) {
-  if (credentials.length === 0) {
-    return Promise.reject(Error("Cannot create LinkedVP presentation with zero credentials"));
-  }
-  logger.debug(`Creating LinkedVP presentation for ${holderDid} with ${credentials.length} credentials`);
+async function createLinkedVPPresentation(holderDid, credential, agent) {
+  logger.debug(`Creating LinkedVP presentation for ${holderDid} of credential ${credential.id}`);
   const identifier = await agent.identifierManagedGet({
     identifier: holderDid
   });
-  const verifiableCredentials = credentials.map((credential) => {
-    const original = extractOriginalCredential(credential);
-    return typeof original === "string" ? original : original;
-  });
-  const vpObject = {
-    "@context": [
-      "https://www.w3.org/2018/credentials/v1"
-    ],
-    type: [
-      "VerifiablePresentation"
-    ],
-    holder: holderDid,
-    verifiableCredential: verifiableCredentials
-  };
-  const result = await agent.createVerifiablePresentation({
-    presentation: vpObject,
-    proofFormat: "jwt",
-    keyRef: identifier.kmsKeyRef || identifier.kid
-  });
-  if (typeof result === "string") {
-    return result;
-  }
-  if (result.proof && "jws" in result.proof) {
-    return result.proof.jws;
+  const originalCredential = extractOriginalCredential(credential);
+  const documentFormat = CredentialMapper.detectDocumentType(originalCredential);
+  switch (documentFormat) {
+    case DocumentFormat.SD_JWT_VC: {
+      const decodedSdJwt = await CredentialMapper.decodeSdJwtVcAsync(typeof originalCredential === "string" ? originalCredential : originalCredential.compactSdJwtVc, defaultGenerateDigest);
+      const hashAlg = decodedSdJwt.signedPayload._sd_alg ?? "sha-256";
+      const sdHash = calculateSdHash(decodedSdJwt.compactSdJwtVc, hashAlg, defaultGenerateDigest);
+      const kbJwtPayload = {
+        iat: Math.floor(Date.now() / 1e3 - CLOCK_SKEW),
+        sd_hash: sdHash
+      };
+      const presentationResult = await agent.createSdJwtPresentation({
+        presentation: decodedSdJwt.compactSdJwtVc,
+        kb: {
+          payload: kbJwtPayload
+        }
+      });
+      return presentationResult.presentation;
+    }
+    case DocumentFormat.JSONLD: {
+      const vcObject = typeof originalCredential === "string" ? JSON.parse(originalCredential) : originalCredential;
+      const vpObject = {
+        "@context": [
+          "https://www.w3.org/2018/credentials/v1"
+        ],
+        type: [
+          "VerifiablePresentation"
+        ],
+        verifiableCredential: [
+          vcObject
+        ],
+        holder: holderDid
+      };
+      return await agent.createVerifiablePresentation({
+        presentation: vpObject,
+        proofFormat: "lds",
+        keyRef: identifier.kmsKeyRef || identifier.kid
+      });
+    }
+    case DocumentFormat.MSO_MDOC: {
+      logger.warning("mso_mdoc format has basic support - production use requires proper mdoc VP token implementation");
+      return originalCredential;
+    }
+    default: {
+      const vcJwt = typeof originalCredential === "string" ? originalCredential : JSON.stringify(originalCredential);
+      const vpPayload = {
+        iss: holderDid,
+        vp: {
+          "@context": [
+            "https://www.w3.org/2018/credentials/v1"
+          ],
+          type: [
+            "VerifiablePresentation"
+          ],
+          holder: holderDid,
+          verifiableCredential: [
+            vcJwt
+          ]
+        },
+        iat: Math.floor(Date.now() / 1e3 - CLOCK_SKEW),
+        exp: Math.floor(Date.now() / 1e3 + 600 + CLOCK_SKEW)
+      };
+      const vpJwt = await agent.createVerifiablePresentation({
+        presentation: vpPayload.vp,
+        proofFormat: "jwt",
+        keyRef: identifier.kmsKeyRef || identifier.kid
+      });
+      return vpJwt.proof && "jwt" in vpJwt.proof && vpJwt.proof.jwt || vpJwt;
+    }
   }
-  return Promise.reject(Error("Failed to create JWT VP - no JWT in result"));
 }
 __name(createLinkedVPPresentation, "createLinkedVPPresentation");
 
@@ -369,7 +412,10 @@ var LinkedVPManager = class {
     if (uniqueCredentials.length === 0) {
       return Promise.reject(Error(`No published credentials found for linkedVpId ${linkedVpId}`));
     }
-    return createLinkedVPPresentation(holderDid, uniqueCredentials, context.agent);
+    if (uniqueCredentials.length > 1) {
+      return Promise.reject(Error(`Multiple credentials found for linkedVpId ${linkedVpId}`));
+    }
+    return createLinkedVPPresentation(holderDid, uniqueCredentials[0], context.agent);
   }
   getHolderDid(tenantId) {
     const holderDid = this.holderDids[tenantId ?? "default"];

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../plugin.schema.json","../src/agent/LinkedVPManager.ts","../src/services/LinkedVPService.ts","../src/types/ILinkedVPManager.ts"],"sourcesContent":["{\n  \"ILinkedVPManager\": {\n    \"components\": {\n      \"schemas\": {\n        \"GeneratePresentationArgs\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"linkedVpId\": {\n              \"type\": \"string\"\n            }\n          },\n          \"required\": [\n            \"linkedVpId\"\n          ],\n          \"additionalProperties\": false\n        },\n        \"LinkedVPPresentation\": {\n          \"anyOf\": [\n            {\n              \"type\": \"string\"\n            },\n            {\n              \"$ref\": \"#/components/schemas/Record<string,any>\"\n            }\n          ]\n        },\n        \"Record<string,any>\": {\n          \"type\": \"object\"\n        },\n        \"GetServiceEntriesArgs\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"tenantId\": {\n              \"type\": \"string\"\n            }\n          },\n          \"additionalProperties\": false\n        },\n        \"LinkedVPServiceEntry\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"id\": {\n              \"type\": \"string\"\n            },\n            \"type\": {\n              \"type\": \"string\",\n              \"const\": \"LinkedVerifiablePresentation\"\n            },\n            \"serviceEndpoint\": {\n              \"type\": \"string\"\n            }\n          },\n          \"required\": [\n            \"id\",\n            \"type\",\n            \"serviceEndpoint\"\n          ],\n          \"additionalProperties\": false\n        },\n        \"HasLinkedVPEntryArgs\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"linkedVpId\": {\n              \"type\": \"string\"\n            }\n          },\n          \"required\": [\n            \"linkedVpId\"\n          ],\n          \"additionalProperties\": false\n        },\n        \"PublishCredentialArgs\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"digitalCredentialId\": {\n              \"type\": \"string\"\n            },\n            \"linkedVpId\": {\n              \"type\": \"string\"\n            },\n            \"tenantId\": {\n              \"type\": \"string\"\n            }\n          },\n          \"required\": [\n            \"digitalCredentialId\"\n          ],\n          \"additionalProperties\": false\n        },\n        \"LinkedVPEntry\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"id\": {\n              \"type\": \"string\"\n            },\n            \"linkedVpId\": {\n              \"type\": \"string\"\n            },\n            \"tenantId\": {\n              \"type\": \"string\"\n            },\n            \"linkedVpFrom\": {\n              \"type\": \"string\",\n              \"format\": \"date-time\"\n            },\n            \"createdAt\": {\n              \"type\": \"string\",\n              \"format\": \"date-time\"\n            }\n          },\n          \"required\": [\n            \"id\",\n            \"linkedVpId\",\n            \"createdAt\"\n          ],\n          \"additionalProperties\": false\n        },\n        \"UnpublishCredentialArgs\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"linkedVpId\": {\n              \"type\": \"string\"\n            }\n          },\n          \"required\": [\n            \"linkedVpId\"\n          ],\n          \"additionalProperties\": false\n        }\n      },\n      \"methods\": {\n        \"lvpGeneratePresentation\": {\n          \"description\": \"Generate and return a Verifiable Presentation for a published LinkedVP This is the main endpoint handler for GET /linked-vp/\",\n          \"arguments\": {\n            \"$ref\": \"#/components/schemas/GeneratePresentationArgs\"\n          },\n          \"returnType\": {\n            \"$ref\": \"#/components/schemas/LinkedVPPresentation\"\n          }\n        },\n        \"lvpGetServiceEntries\": {\n          \"description\": \"Get LinkedVP service entries for a DID to be added to a DID Document This is useful when generating DID Documents with toDidDocument\",\n          \"arguments\": {\n            \"$ref\": \"#/components/schemas/GetServiceEntriesArgs\"\n          },\n          \"returnType\": {\n            \"type\": \"array\",\n            \"items\": {\n              \"$ref\": \"#/components/schemas/LinkedVPServiceEntry\"\n            }\n          }\n        },\n        \"lvpHasEntry\": {\n          \"description\": \"Check if a LinkedVP entry exists by linkedVpId\",\n          \"arguments\": {\n            \"$ref\": \"#/components/schemas/HasLinkedVPEntryArgs\"\n          },\n          \"returnType\": {\n            \"type\": \"boolean\"\n          }\n        },\n        \"lvpPublishCredential\": {\n          \"description\": \"Publish a credential as a LinkedVP by adding it to the holder's DID Document\",\n          \"arguments\": {\n            \"$ref\": \"#/components/schemas/PublishCredentialArgs\"\n          },\n          \"returnType\": {\n            \"$ref\": \"#/components/schemas/LinkedVPEntry\"\n          }\n        },\n        \"lvpUnpublishCredential\": {\n          \"description\": \"Unpublish a credential by removing its LinkedVP entry from the DID Document\",\n          \"arguments\": {\n            \"$ref\": \"#/components/schemas/UnpublishCredentialArgs\"\n          },\n          \"returnType\": {\n            \"type\": \"boolean\"\n          }\n        }\n      }\n    }\n  }\n}","import { DigitalCredential } from '@sphereon/ssi-sdk.data-store-types'\nimport { IAgentPlugin } from '@veramo/core'\nimport { IsNull, Not } from 'typeorm'\nimport { schema } from '../index'\nimport { createLinkedVPPresentation } from '../services/LinkedVPService'\nimport {\n  GeneratePresentationArgs,\n  GetServiceEntriesArgs,\n  HasLinkedVPEntryArgs,\n  ILinkedVPManager,\n  LinkedVPEntry,\n  LinkedVPPresentation,\n  LinkedVPServiceEntry,\n  PublishCredentialArgs,\n  RequiredContext,\n  UnpublishCredentialArgs,\n} from '../types'\n\n// Exposing the methods here for any REST implementation\nexport const linkedVPManagerMethods: Array<string> = [\n  'lvpPublishCredential',\n  'lvpUnpublishCredential',\n  'lvpHasEntry',\n  'lvpGetServiceEntries',\n  'lvpGeneratePresentation',\n]\n\n/**\n * {@inheritDoc ILinkedVPManager}\n */\nexport class LinkedVPManager implements IAgentPlugin {\n  readonly schema = schema.ILinkedVPManager\n  readonly methods: ILinkedVPManager = {\n    lvpPublishCredential: this.lvpPublishCredential.bind(this),\n    lvpUnpublishCredential: this.lvpUnpublishCredential.bind(this),\n    lvpHasEntry: this.lvpHasEntry.bind(this),\n    lvpGetServiceEntries: this.lvpGetServiceEntries.bind(this),\n    lvpGeneratePresentation: this.lvpGeneratePresentation.bind(this),\n  }\n\n  private readonly holderDids: Record<string, string>\n\n  constructor(options: { holderDids: Record<string, string> }) {\n    this.holderDids = options.holderDids\n  }\n\n  private async lvpPublishCredential(args: PublishCredentialArgs, context: RequiredContext): Promise<LinkedVPEntry> {\n    const { digitalCredentialId } = args\n\n    const credential: DigitalCredential = await context.agent.crsGetCredential({ id: digitalCredentialId })\n\n    if (credential.linkedVpId) {\n      return Promise.reject(new Error(`Credential ${digitalCredentialId} is already published with linkedVpId ${credential.linkedVpId}`))\n    }\n\n    const linkedVpId = this.buildLinkedVpId(args.linkedVpId, credential.tenantId)\n\n    await this.ensureLinkedVpIdUnique(linkedVpId, context, credential.tenantId)\n\n    const publishedAt = new Date()\n    await context.agent.crsUpdateCredential({\n      id: digitalCredentialId,\n      linkedVpId,\n      linkedVpFrom: publishedAt,\n    })\n\n    return {\n      id: credential.id,\n      linkedVpId,\n      tenantId: credential.tenantId,\n      linkedVpFrom: publishedAt,\n      createdAt: credential.createdAt,\n    }\n  }\n\n  private async lvpUnpublishCredential(args: UnpublishCredentialArgs, context: RequiredContext): Promise<boolean> {\n    const { linkedVpId } = args\n\n    // Find credential by linkedVpId and tenantId\n    const credentials = await context.agent.crsGetCredentials({\n      filter: [{ linkedVpId }],\n    })\n    if (credentials.length === 0) {\n      return Promise.reject(Error(`No credential found with linkedVpId ${linkedVpId}`))\n    }\n\n    const credential = credentials[0]\n    await context.agent.crsUpdateCredential({\n      id: credential.id,\n      linkedVpId: undefined,\n      linkedVpFrom: undefined,\n    })\n\n    return true\n  }\n\n  private async lvpHasEntry(args: HasLinkedVPEntryArgs, context: RequiredContext): Promise<boolean> {\n    const { linkedVpId } = args\n\n    try {\n      const credentials = await context.agent.crsGetCredentials({\n        filter: [{ linkedVpId }],\n      })\n      return credentials.length > 0\n    } catch (error) {\n      return false\n    }\n  }\n\n  private async lvpGetServiceEntries(args: GetServiceEntriesArgs, context: RequiredContext): Promise<Array<LinkedVPServiceEntry>> {\n    const { tenantId } = args\n\n    // Get all published credentials (credentials with linkedVpId set)\n    const filter: any = { linkedVpId: Not(IsNull()) }\n    if (tenantId) {\n      filter.tenantId = tenantId\n    }\n\n    const credentials = await context.agent.crsGetCredentials({\n      filter: [filter],\n    })\n\n    return credentials\n      .filter((cred) => cred.linkedVpId !== undefined && cred.linkedVpId !== null)\n      .map((cred) => {\n        const holderDidForEntry = this.getHolderDid(cred.tenantId)\n        return this.credentialToServiceEntry(cred, holderDidForEntry)\n      })\n  }\n\n  private async lvpGeneratePresentation(args: GeneratePresentationArgs, context: RequiredContext): Promise<LinkedVPPresentation> {\n    const { linkedVpId } = args\n    const tenantId = this.parseTenantFromLinkedVpId(linkedVpId)\n    const holderDid = this.getHolderDid(tenantId)\n\n    const uniqueCredentials = await context.agent.crsGetUniqueCredentials({\n      filter: [\n        {\n          linkedVpId: args.linkedVpId,\n          ...(tenantId && { tenantId }),\n        },\n      ],\n    })\n    if (uniqueCredentials.length === 0) {\n      return Promise.reject(Error(`No published credentials found for linkedVpId ${linkedVpId}`))\n    }\n\n    // Generate the Verifiable Presentation with all published credentials\n    return createLinkedVPPresentation(holderDid, uniqueCredentials, context.agent)\n  }\n\n  private getHolderDid(tenantId: string | undefined) {\n    const holderDid = this.holderDids[tenantId ?? 'default']\n    if (!holderDid) {\n      throw Error(`No holder did supplied for tenant ${tenantId ?? 'default'}`)\n    }\n    return holderDid\n  }\n\n  private parseTenantFromLinkedVpId(linkedVpId: string): string | undefined {\n    const idx = linkedVpId.lastIndexOf('@')\n    return idx === -1 ? undefined : linkedVpId.substring(idx + 1)\n  }\n\n  private generateLinkedVpId(): string {\n    return `lvp-${Date.now()}-${Math.random().toString(36).substring(2, 15)}`\n  }\n\n  private async ensureLinkedVpIdUnique(linkedVpId: string, context: RequiredContext, tenantId?: string): Promise<void> {\n    const credentials = await context.agent.crsGetCredentials({\n      filter: [{ linkedVpId, ...(tenantId && { tenantId }) }],\n    })\n\n    if (credentials.length > 0) {\n      throw new Error(`LinkedVP ID ${linkedVpId} already exists${tenantId ? ` for tenant ${tenantId}` : ''}`)\n    }\n  }\n\n  private buildLinkedVpId(linkedVpId: string | undefined, tenantId: string | undefined) {\n    let finalLinkedVpId = linkedVpId || this.generateLinkedVpId()\n\n    // Append tenantId if provided and not already present\n    if (tenantId && tenantId !== '' && !finalLinkedVpId.includes('@')) {\n      finalLinkedVpId = `${finalLinkedVpId}@${tenantId}`\n    }\n    return finalLinkedVpId\n  }\n\n  private getBaseUrlFromDid(holderDid: string): string {\n    if (!holderDid.startsWith('did:web:')) {\n      throw new Error(`Invalid DID: ${holderDid}, must be did:web`)\n    }\n\n    const withoutPrefix = holderDid.replace('did:web:', '') // example.com:tenants:tenant1\n    const parts = withoutPrefix.split(':')\n    const domain = parts.shift()! // example.com\n    const path = parts.join('/') // tenants/tenant1\n\n    return path\n      ? `https://${domain}/${path}` // https://example.com/tenants/tenant1\n      : `https://${domain}` // https://example.com\n  }\n\n  private buildServiceEndpoint(holderDid: string, linkedVpId: string): string {\n    const baseUrl = this.getBaseUrlFromDid(holderDid)\n    const cleanBaseUrl = baseUrl.endsWith('/') ? baseUrl.slice(0, -1) : baseUrl\n    return `${cleanBaseUrl}/linked-vp/${linkedVpId}`\n  }\n\n  private credentialToServiceEntry(credential: DigitalCredential, holderDid: string): LinkedVPServiceEntry {\n    if (!credential.linkedVpId) {\n      throw new Error(`Credential ${credential.id} does not have a linkedVpId`)\n    }\n\n    return {\n      id: `${holderDid}#${credential.linkedVpId}`,\n      type: 'LinkedVerifiablePresentation',\n      serviceEndpoint: this.buildServiceEndpoint(holderDid, credential.linkedVpId),\n    }\n  }\n}\n","import { UniqueDigitalCredential } from '@sphereon/ssi-sdk.credential-store'\nimport { Loggers, OriginalVerifiableCredential, WrappedVerifiableCredential } from '@sphereon/ssi-types'\nimport type { PresentationPayload } from '@veramo/core'\nimport { W3CVerifiableCredential } from '@veramo/core/src/types/vc-data-model'\nimport { LOGGER_NAMESPACE, RequiredContext } from '../types'\n\nconst logger = Loggers.DEFAULT.get(LOGGER_NAMESPACE)\n\n/**\n * Extracts the original credential from various wrapper types\n */\nfunction extractOriginalCredential(\n  credential: UniqueDigitalCredential | WrappedVerifiableCredential | OriginalVerifiableCredential,\n): OriginalVerifiableCredential {\n  if (typeof credential === 'string') {\n    return credential\n  }\n\n  if ('digitalCredential' in credential) {\n    const udc = credential as UniqueDigitalCredential\n    if (udc.originalVerifiableCredential) {\n      return udc.originalVerifiableCredential\n    }\n    return udc.uniformVerifiableCredential as OriginalVerifiableCredential\n  }\n\n  if ('original' in credential) {\n    return credential.original\n  }\n\n  return credential as OriginalVerifiableCredential\n}\n\n/**\n * Creates a Verifiable Presentation for LinkedVP publishing\n * Contains multiple credentials in a single JWT VP\n * No nonce or audience since this is for publishing, not responding to verification\n */\nexport async function createLinkedVPPresentation(\n  holderDid: string,\n  credentials: UniqueDigitalCredential[],\n  agent: RequiredContext['agent'],\n): Promise<string | Record<string, any>> {\n  if (credentials.length === 0) {\n    return Promise.reject(Error('Cannot create LinkedVP presentation with zero credentials'))\n  }\n\n  logger.debug(`Creating LinkedVP presentation for ${holderDid} with ${credentials.length} credentials`)\n\n  const identifier = await agent.identifierManagedGet({ identifier: holderDid })\n\n  // Extract and prepare credentials\n  const verifiableCredentials = credentials.map((credential) => {\n    const original = extractOriginalCredential(credential)\n    // Keep as-is if string (JWT), otherwise convert to object\n    return typeof original === 'string' ? original : original\n  })\n\n  // Create VP structure\n  const vpObject: PresentationPayload = {\n    '@context': ['https://www.w3.org/2018/credentials/v1'],\n    type: ['VerifiablePresentation'],\n    holder: holderDid,\n    verifiableCredential: verifiableCredentials as W3CVerifiableCredential[],\n  }\n\n  // Create and sign the VP as JWT\n  const result = await agent.createVerifiablePresentation({\n    presentation: vpObject,\n    proofFormat: 'jwt',\n    keyRef: identifier.kmsKeyRef || identifier.kid,\n  })\n\n  // Extract JWT from result\n  if (typeof result === 'string') {\n    return result\n  }\n\n  if (result.proof && 'jws' in result.proof) {\n    return result.proof.jws\n  }\n\n  return Promise.reject(Error('Failed to create JWT VP - no JWT in result'))\n}\n","import { IIdentifierResolution } from '@sphereon/ssi-sdk-ext.identifier-resolution'\nimport { ICredentialStore } from '@sphereon/ssi-sdk.credential-store'\nimport { VcdmCredentialPlugin } from '@sphereon/ssi-sdk.credential-vcdm'\nimport { IAgentContext, IPluginMethodMap } from '@veramo/core'\nimport { IKeyManager } from '@veramo/core/src/types/IKeyManager'\n\nexport const LOGGER_NAMESPACE = 'sphereon:linked-vp'\n\nexport type LinkedVPPresentation = string | Record<string, any>\n\nexport interface ILinkedVPManager extends IPluginMethodMap {\n  /**\n   * Publish a credential as a LinkedVP by adding it to the holder's DID Document\n   * @param args - Publication arguments including credential ID and scope configuration\n   * @param context - Agent context\n   */\n  lvpPublishCredential(args: PublishCredentialArgs, context: RequiredContext): Promise<LinkedVPEntry>\n\n  /**\n   * Unpublish a credential by removing its LinkedVP entry from the DID Document\n   * @param args - Unpublish arguments\n   * @param context - Agent context\n   */\n  lvpUnpublishCredential(args: UnpublishCredentialArgs, context: RequiredContext): Promise<boolean>\n\n  /**\n   * Check if a LinkedVP entry exists by linkedVpId\n   * @param args - Query arguments\n   * @param context - Agent context\n   */\n  lvpHasEntry(args: HasLinkedVPEntryArgs, context: RequiredContext): Promise<boolean>\n\n  /**\n   * Get LinkedVP service entries for a DID to be added to a DID Document\n   * This is useful when generating DID Documents with toDidDocument\n   * @param args - Query arguments for the DID\n   * @param context - Agent context\n   */\n  lvpGetServiceEntries(args: GetServiceEntriesArgs, context: RequiredContext): Promise<Array<LinkedVPServiceEntry>>\n\n  /**\n   * Generate and return a Verifiable Presentation for a published LinkedVP\n   * This is the main endpoint handler for GET /linked-vp/{linkedVpId}\n   * @param args - Generation arguments\n   * @param context - Agent context\n   */\n  lvpGeneratePresentation(args: GeneratePresentationArgs, context: RequiredContext): Promise<LinkedVPPresentation>\n}\n\nexport type PublishCredentialArgs = {\n  digitalCredentialId: string\n  linkedVpId?: string // Optional: if not provided, will be auto-generated\n}\n\nexport type UnpublishCredentialArgs = {\n  linkedVpId: string\n}\n\nexport type HasLinkedVPEntryArgs = {\n  linkedVpId: string\n}\n\nexport type GetServiceEntriesArgs = {\n  tenantId?: string\n}\n\nexport type GeneratePresentationArgs = {\n  linkedVpId: string\n}\n\nexport type LinkedVPEntry = {\n  id: string\n  linkedVpId: string\n  tenantId?: string\n  linkedVpFrom?: Date\n  createdAt: Date\n}\n\nexport type LinkedVPServiceEntry = {\n  id: string\n  type: 'LinkedVerifiablePresentation'\n  serviceEndpoint: string\n}\n\nexport type RequiredContext = IAgentContext<IIdentifierResolution & ICredentialStore & IKeyManager & VcdmCredentialPlugin>\n"],"mappings":";;;;AAAA;AAAA,EACE,kBAAoB;AAAA,IAClB,YAAc;AAAA,MACZ,SAAW;AAAA,QACT,0BAA4B;AAAA,UAC1B,MAAQ;AAAA,UACR,YAAc;AAAA,YACZ,YAAc;AAAA,cACZ,MAAQ;AAAA,YACV;AAAA,UACF;AAAA,UACA,UAAY;AAAA,YACV;AAAA,UACF;AAAA,UACA,sBAAwB;AAAA,QAC1B;AAAA,QACA,sBAAwB;AAAA,UACtB,OAAS;AAAA,YACP;AAAA,cACE,MAAQ;AAAA,YACV;AAAA,YACA;AAAA,cACE,MAAQ;AAAA,YACV;AAAA,UACF;AAAA,QACF;AAAA,QACA,sBAAsB;AAAA,UACpB,MAAQ;AAAA,QACV;AAAA,QACA,uBAAyB;AAAA,UACvB,MAAQ;AAAA,UACR,YAAc;AAAA,YACZ,UAAY;AAAA,cACV,MAAQ;AAAA,YACV;AAAA,UACF;AAAA,UACA,sBAAwB;AAAA,QAC1B;AAAA,QACA,sBAAwB;AAAA,UACtB,MAAQ;AAAA,UACR,YAAc;AAAA,YACZ,IAAM;AAAA,cACJ,MAAQ;AAAA,YACV;AAAA,YACA,MAAQ;AAAA,cACN,MAAQ;AAAA,cACR,OAAS;AAAA,YACX;AAAA,YACA,iBAAmB;AAAA,cACjB,MAAQ;AAAA,YACV;AAAA,UACF;AAAA,UACA,UAAY;AAAA,YACV;AAAA,YACA;AAAA,YACA;AAAA,UACF;AAAA,UACA,sBAAwB;AAAA,QAC1B;AAAA,QACA,sBAAwB;AAAA,UACtB,MAAQ;AAAA,UACR,YAAc;AAAA,YACZ,YAAc;AAAA,cACZ,MAAQ;AAAA,YACV;AAAA,UACF;AAAA,UACA,UAAY;AAAA,YACV;AAAA,UACF;AAAA,UACA,sBAAwB;AAAA,QAC1B;AAAA,QACA,uBAAyB;AAAA,UACvB,MAAQ;AAAA,UACR,YAAc;AAAA,YACZ,qBAAuB;AAAA,cACrB,MAAQ;AAAA,YACV;AAAA,YACA,YAAc;AAAA,cACZ,MAAQ;AAAA,YACV;AAAA,YACA,UAAY;AAAA,cACV,MAAQ;AAAA,YACV;AAAA,UACF;AAAA,UACA,UAAY;AAAA,YACV;AAAA,UACF;AAAA,UACA,sBAAwB;AAAA,QAC1B;AAAA,QACA,eAAiB;AAAA,UACf,MAAQ;AAAA,UACR,YAAc;AAAA,YACZ,IAAM;AAAA,cACJ,MAAQ;AAAA,YACV;AAAA,YACA,YAAc;AAAA,cACZ,MAAQ;AAAA,YACV;AAAA,YACA,UAAY;AAAA,cACV,MAAQ;AAAA,YACV;AAAA,YACA,cAAgB;AAAA,cACd,MAAQ;AAAA,cACR,QAAU;AAAA,YACZ;AAAA,YACA,WAAa;AAAA,cACX,MAAQ;AAAA,cACR,QAAU;AAAA,YACZ;AAAA,UACF;AAAA,UACA,UAAY;AAAA,YACV;AAAA,YACA;AAAA,YACA;AAAA,UACF;AAAA,UACA,sBAAwB;AAAA,QAC1B;AAAA,QACA,yBAA2B;AAAA,UACzB,MAAQ;AAAA,UACR,YAAc;AAAA,YACZ,YAAc;AAAA,cACZ,MAAQ;AAAA,YACV;AAAA,UACF;AAAA,UACA,UAAY;AAAA,YACV;AAAA,UACF;AAAA,UACA,sBAAwB;AAAA,QAC1B;AAAA,MACF;AAAA,MACA,SAAW;AAAA,QACT,yBAA2B;AAAA,UACzB,aAAe;AAAA,UACf,WAAa;AAAA,YACX,MAAQ;AAAA,UACV;AAAA,UACA,YAAc;AAAA,YACZ,MAAQ;AAAA,UACV;AAAA,QACF;AAAA,QACA,sBAAwB;AAAA,UACtB,aAAe;AAAA,UACf,WAAa;AAAA,YACX,MAAQ;AAAA,UACV;AAAA,UACA,YAAc;AAAA,YACZ,MAAQ;AAAA,YACR,OAAS;AAAA,cACP,MAAQ;AAAA,YACV;AAAA,UACF;AAAA,QACF;AAAA,QACA,aAAe;AAAA,UACb,aAAe;AAAA,UACf,WAAa;AAAA,YACX,MAAQ;AAAA,UACV;AAAA,UACA,YAAc;AAAA,YACZ,MAAQ;AAAA,UACV;AAAA,QACF;AAAA,QACA,sBAAwB;AAAA,UACtB,aAAe;AAAA,UACf,WAAa;AAAA,YACX,MAAQ;AAAA,UACV;AAAA,UACA,YAAc;AAAA,YACZ,MAAQ;AAAA,UACV;AAAA,QACF;AAAA,QACA,wBAA0B;AAAA,UACxB,aAAe;AAAA,UACf,WAAa;AAAA,YACX,MAAQ;AAAA,UACV;AAAA,UACA,YAAc;AAAA,YACZ,MAAQ;AAAA,UACV;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;ACpLA,SAASA,QAAQC,WAAW;;;ACD5B,SAASC,eAA0E;;;ACK5E,IAAMC,mBAAmB;;;ADAhC,IAAMC,SAASC,QAAQC,QAAQC,IAAIC,gBAAAA;AAKnC,SAASC,0BACPC,YAAgG;AAEhG,MAAI,OAAOA,eAAe,UAAU;AAClC,WAAOA;EACT;AAEA,MAAI,uBAAuBA,YAAY;AACrC,UAAMC,MAAMD;AACZ,QAAIC,IAAIC,8BAA8B;AACpC,aAAOD,IAAIC;IACb;AACA,WAAOD,IAAIE;EACb;AAEA,MAAI,cAAcH,YAAY;AAC5B,WAAOA,WAAWI;EACpB;AAEA,SAAOJ;AACT;AApBSD;AA2BT,eAAsBM,2BACpBC,WACAC,aACAC,OAA+B;AAE/B,MAAID,YAAYE,WAAW,GAAG;AAC5B,WAAOC,QAAQC,OAAOC,MAAM,2DAAA,CAAA;EAC9B;AAEAlB,SAAOmB,MAAM,sCAAsCP,SAAAA,SAAkBC,YAAYE,MAAM,cAAc;AAErG,QAAMK,aAAa,MAAMN,MAAMO,qBAAqB;IAAED,YAAYR;EAAU,CAAA;AAG5E,QAAMU,wBAAwBT,YAAYU,IAAI,CAACjB,eAAAA;AAC7C,UAAMI,WAAWL,0BAA0BC,UAAAA;AAE3C,WAAO,OAAOI,aAAa,WAAWA,WAAWA;EACnD,CAAA;AAGA,QAAMc,WAAgC;IACpC,YAAY;MAAC;;IACbC,MAAM;MAAC;;IACPC,QAAQd;IACRe,sBAAsBL;EACxB;AAGA,QAAMM,SAAS,MAAMd,MAAMe,6BAA6B;IACtDC,cAAcN;IACdO,aAAa;IACbC,QAAQZ,WAAWa,aAAab,WAAWc;EAC7C,CAAA;AAGA,MAAI,OAAON,WAAW,UAAU;AAC9B,WAAOA;EACT;AAEA,MAAIA,OAAOO,SAAS,SAASP,OAAOO,OAAO;AACzC,WAAOP,OAAOO,MAAMC;EACtB;AAEA,SAAOpB,QAAQC,OAAOC,MAAM,4CAAA,CAAA;AAC9B;AA7CsBP;;;ADnBf,IAAM0B,yBAAwC;EACnD;EACA;EACA;EACA;EACA;;AAMK,IAAMC,kBAAN,MAAMA;EA5Bb,OA4BaA;;;EACFC,SAASA,sBAAOC;EAChBC,UAA4B;IACnCC,sBAAsB,KAAKA,qBAAqBC,KAAK,IAAI;IACzDC,wBAAwB,KAAKA,uBAAuBD,KAAK,IAAI;IAC7DE,aAAa,KAAKA,YAAYF,KAAK,IAAI;IACvCG,sBAAsB,KAAKA,qBAAqBH,KAAK,IAAI;IACzDI,yBAAyB,KAAKA,wBAAwBJ,KAAK,IAAI;EACjE;EAEiBK;EAEjB,YAAYC,SAAiD;AAC3D,SAAKD,aAAaC,QAAQD;EAC5B;EAEA,MAAcN,qBAAqBQ,MAA6BC,SAAkD;AAChH,UAAM,EAAEC,oBAAmB,IAAKF;AAEhC,UAAMG,aAAgC,MAAMF,QAAQG,MAAMC,iBAAiB;MAAEC,IAAIJ;IAAoB,CAAA;AAErG,QAAIC,WAAWI,YAAY;AACzB,aAAOC,QAAQC,OAAO,IAAIC,MAAM,cAAcR,mBAAAA,yCAA4DC,WAAWI,UAAU,EAAE,CAAA;IACnI;AAEA,UAAMA,aAAa,KAAKI,gBAAgBX,KAAKO,YAAYJ,WAAWS,QAAQ;AAE5E,UAAM,KAAKC,uBAAuBN,YAAYN,SAASE,WAAWS,QAAQ;AAE1E,UAAME,cAAc,oBAAIC,KAAAA;AACxB,UAAMd,QAAQG,MAAMY,oBAAoB;MACtCV,IAAIJ;MACJK;MACAU,cAAcH;IAChB,CAAA;AAEA,WAAO;MACLR,IAAIH,WAAWG;MACfC;MACAK,UAAUT,WAAWS;MACrBK,cAAcH;MACdI,WAAWf,WAAWe;IACxB;EACF;EAEA,MAAcxB,uBAAuBM,MAA+BC,SAA4C;AAC9G,UAAM,EAAEM,WAAU,IAAKP;AAGvB,UAAMmB,cAAc,MAAMlB,QAAQG,MAAMgB,kBAAkB;MACxDC,QAAQ;QAAC;UAAEd;QAAW;;IACxB,CAAA;AACA,QAAIY,YAAYG,WAAW,GAAG;AAC5B,aAAOd,QAAQC,OAAOC,MAAM,uCAAuCH,UAAAA,EAAY,CAAA;IACjF;AAEA,UAAMJ,aAAagB,YAAY,CAAA;AAC/B,UAAMlB,QAAQG,MAAMY,oBAAoB;MACtCV,IAAIH,WAAWG;MACfC,YAAYgB;MACZN,cAAcM;IAChB,CAAA;AAEA,WAAO;EACT;EAEA,MAAc5B,YAAYK,MAA4BC,SAA4C;AAChG,UAAM,EAAEM,WAAU,IAAKP;AAEvB,QAAI;AACF,YAAMmB,cAAc,MAAMlB,QAAQG,MAAMgB,kBAAkB;QACxDC,QAAQ;UAAC;YAAEd;UAAW;;MACxB,CAAA;AACA,aAAOY,YAAYG,SAAS;IAC9B,SAASE,OAAO;AACd,aAAO;IACT;EACF;EAEA,MAAc5B,qBAAqBI,MAA6BC,SAAgE;AAC9H,UAAM,EAAEW,SAAQ,IAAKZ;AAGrB,UAAMqB,SAAc;MAAEd,YAAYkB,IAAIC,OAAAA,CAAAA;IAAU;AAChD,QAAId,UAAU;AACZS,aAAOT,WAAWA;IACpB;AAEA,UAAMO,cAAc,MAAMlB,QAAQG,MAAMgB,kBAAkB;MACxDC,QAAQ;QAACA;;IACX,CAAA;AAEA,WAAOF,YACJE,OAAO,CAACM,SAASA,KAAKpB,eAAegB,UAAaI,KAAKpB,eAAe,IAAA,EACtEqB,IAAI,CAACD,SAAAA;AACJ,YAAME,oBAAoB,KAAKC,aAAaH,KAAKf,QAAQ;AACzD,aAAO,KAAKmB,yBAAyBJ,MAAME,iBAAAA;IAC7C,CAAA;EACJ;EAEA,MAAchC,wBAAwBG,MAAgCC,SAAyD;AAC7H,UAAM,EAAEM,WAAU,IAAKP;AACvB,UAAMY,WAAW,KAAKoB,0BAA0BzB,UAAAA;AAChD,UAAM0B,YAAY,KAAKH,aAAalB,QAAAA;AAEpC,UAAMsB,oBAAoB,MAAMjC,QAAQG,MAAM+B,wBAAwB;MACpEd,QAAQ;QACN;UACEd,YAAYP,KAAKO;UACjB,GAAIK,YAAY;YAAEA;UAAS;QAC7B;;IAEJ,CAAA;AACA,QAAIsB,kBAAkBZ,WAAW,GAAG;AAClC,aAAOd,QAAQC,OAAOC,MAAM,iDAAiDH,UAAAA,EAAY,CAAA;IAC3F;AAGA,WAAO6B,2BAA2BH,WAAWC,mBAAmBjC,QAAQG,KAAK;EAC/E;EAEQ0B,aAAalB,UAA8B;AACjD,UAAMqB,YAAY,KAAKnC,WAAWc,YAAY,SAAA;AAC9C,QAAI,CAACqB,WAAW;AACd,YAAMvB,MAAM,qCAAqCE,YAAY,SAAA,EAAW;IAC1E;AACA,WAAOqB;EACT;EAEQD,0BAA0BzB,YAAwC;AACxE,UAAM8B,MAAM9B,WAAW+B,YAAY,GAAA;AACnC,WAAOD,QAAQ,KAAKd,SAAYhB,WAAWgC,UAAUF,MAAM,CAAA;EAC7D;EAEQG,qBAA6B;AACnC,WAAO,OAAOzB,KAAK0B,IAAG,CAAA,IAAMC,KAAKC,OAAM,EAAGC,SAAS,EAAA,EAAIL,UAAU,GAAG,EAAA,CAAA;EACtE;EAEA,MAAc1B,uBAAuBN,YAAoBN,SAA0BW,UAAkC;AACnH,UAAMO,cAAc,MAAMlB,QAAQG,MAAMgB,kBAAkB;MACxDC,QAAQ;QAAC;UAAEd;UAAY,GAAIK,YAAY;YAAEA;UAAS;QAAG;;IACvD,CAAA;AAEA,QAAIO,YAAYG,SAAS,GAAG;AAC1B,YAAM,IAAIZ,MAAM,eAAeH,UAAAA,kBAA4BK,WAAW,eAAeA,QAAAA,KAAa,EAAA,EAAI;IACxG;EACF;EAEQD,gBAAgBJ,YAAgCK,UAA8B;AACpF,QAAIiC,kBAAkBtC,cAAc,KAAKiC,mBAAkB;AAG3D,QAAI5B,YAAYA,aAAa,MAAM,CAACiC,gBAAgBC,SAAS,GAAA,GAAM;AACjED,wBAAkB,GAAGA,eAAAA,IAAmBjC,QAAAA;IAC1C;AACA,WAAOiC;EACT;EAEQE,kBAAkBd,WAA2B;AACnD,QAAI,CAACA,UAAUe,WAAW,UAAA,GAAa;AACrC,YAAM,IAAItC,MAAM,gBAAgBuB,SAAAA,mBAA4B;IAC9D;AAEA,UAAMgB,gBAAgBhB,UAAUiB,QAAQ,YAAY,EAAA;AACpD,UAAMC,QAAQF,cAAcG,MAAM,GAAA;AAClC,UAAMC,SAASF,MAAMG,MAAK;AAC1B,UAAMC,OAAOJ,MAAMK,KAAK,GAAA;AAExB,WAAOD,OACH,WAAWF,MAAAA,IAAUE,IAAAA,KACrB,WAAWF,MAAAA;EACjB;EAEQI,qBAAqBxB,WAAmB1B,YAA4B;AAC1E,UAAMmD,UAAU,KAAKX,kBAAkBd,SAAAA;AACvC,UAAM0B,eAAeD,QAAQE,SAAS,GAAA,IAAOF,QAAQG,MAAM,GAAG,EAAC,IAAKH;AACpE,WAAO,GAAGC,YAAAA,cAA0BpD,UAAAA;EACtC;EAEQwB,yBAAyB5B,YAA+B8B,WAAyC;AACvG,QAAI,CAAC9B,WAAWI,YAAY;AAC1B,YAAM,IAAIG,MAAM,cAAcP,WAAWG,EAAE,6BAA6B;IAC1E;AAEA,WAAO;MACLA,IAAI,GAAG2B,SAAAA,IAAa9B,WAAWI,UAAU;MACzCuD,MAAM;MACNC,iBAAiB,KAAKN,qBAAqBxB,WAAW9B,WAAWI,UAAU;IAC7E;EACF;AACF;","names":["IsNull","Not","Loggers","LOGGER_NAMESPACE","logger","Loggers","DEFAULT","get","LOGGER_NAMESPACE","extractOriginalCredential","credential","udc","originalVerifiableCredential","uniformVerifiableCredential","original","createLinkedVPPresentation","holderDid","credentials","agent","length","Promise","reject","Error","debug","identifier","identifierManagedGet","verifiableCredentials","map","vpObject","type","holder","verifiableCredential","result","createVerifiablePresentation","presentation","proofFormat","keyRef","kmsKeyRef","kid","proof","jws","linkedVPManagerMethods","LinkedVPManager","schema","ILinkedVPManager","methods","lvpPublishCredential","bind","lvpUnpublishCredential","lvpHasEntry","lvpGetServiceEntries","lvpGeneratePresentation","holderDids","options","args","context","digitalCredentialId","credential","agent","crsGetCredential","id","linkedVpId","Promise","reject","Error","buildLinkedVpId","tenantId","ensureLinkedVpIdUnique","publishedAt","Date","crsUpdateCredential","linkedVpFrom","createdAt","credentials","crsGetCredentials","filter","length","undefined","error","Not","IsNull","cred","map","holderDidForEntry","getHolderDid","credentialToServiceEntry","parseTenantFromLinkedVpId","holderDid","uniqueCredentials","crsGetUniqueCredentials","createLinkedVPPresentation","idx","lastIndexOf","substring","generateLinkedVpId","now","Math","random","toString","finalLinkedVpId","includes","getBaseUrlFromDid","startsWith","withoutPrefix","replace","parts","split","domain","shift","path","join","buildServiceEndpoint","baseUrl","cleanBaseUrl","endsWith","slice","type","serviceEndpoint"]}
+{"version":3,"sources":["../plugin.schema.json","../src/agent/LinkedVPManager.ts","../src/services/LinkedVPService.ts","../src/types/ILinkedVPManager.ts"],"sourcesContent":["{\n  \"ILinkedVPManager\": {\n    \"components\": {\n      \"schemas\": {\n        \"GeneratePresentationArgs\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"linkedVpId\": {\n              \"type\": \"string\"\n            }\n          },\n          \"required\": [\n            \"linkedVpId\"\n          ],\n          \"additionalProperties\": false\n        },\n        \"LinkedVPPresentation\": {\n          \"anyOf\": [\n            {\n              \"type\": \"string\"\n            },\n            {\n              \"$ref\": \"#/components/schemas/Record<string,any>\"\n            }\n          ]\n        },\n        \"Record<string,any>\": {\n          \"type\": \"object\"\n        },\n        \"GetServiceEntriesArgs\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"tenantId\": {\n              \"type\": \"string\"\n            }\n          },\n          \"additionalProperties\": false\n        },\n        \"LinkedVPServiceEntry\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"id\": {\n              \"type\": \"string\"\n            },\n            \"type\": {\n              \"type\": \"string\",\n              \"const\": \"LinkedVerifiablePresentation\"\n            },\n            \"serviceEndpoint\": {\n              \"type\": \"string\"\n            }\n          },\n          \"required\": [\n            \"id\",\n            \"type\",\n            \"serviceEndpoint\"\n          ],\n          \"additionalProperties\": false\n        },\n        \"HasLinkedVPEntryArgs\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"linkedVpId\": {\n              \"type\": \"string\"\n            }\n          },\n          \"required\": [\n            \"linkedVpId\"\n          ],\n          \"additionalProperties\": false\n        },\n        \"PublishCredentialArgs\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"digitalCredentialId\": {\n              \"type\": \"string\"\n            },\n            \"linkedVpId\": {\n              \"type\": \"string\"\n            },\n            \"tenantId\": {\n              \"type\": \"string\"\n            }\n          },\n          \"required\": [\n            \"digitalCredentialId\"\n          ],\n          \"additionalProperties\": false\n        },\n        \"LinkedVPEntry\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"id\": {\n              \"type\": \"string\"\n            },\n            \"linkedVpId\": {\n              \"type\": \"string\"\n            },\n            \"tenantId\": {\n              \"type\": \"string\"\n            },\n            \"linkedVpFrom\": {\n              \"type\": \"string\",\n              \"format\": \"date-time\"\n            },\n            \"createdAt\": {\n              \"type\": \"string\",\n              \"format\": \"date-time\"\n            }\n          },\n          \"required\": [\n            \"id\",\n            \"linkedVpId\",\n            \"createdAt\"\n          ],\n          \"additionalProperties\": false\n        },\n        \"UnpublishCredentialArgs\": {\n          \"type\": \"object\",\n          \"properties\": {\n            \"linkedVpId\": {\n              \"type\": \"string\"\n            }\n          },\n          \"required\": [\n            \"linkedVpId\"\n          ],\n          \"additionalProperties\": false\n        }\n      },\n      \"methods\": {\n        \"lvpGeneratePresentation\": {\n          \"description\": \"Generate and return a Verifiable Presentation for a published LinkedVP This is the main endpoint handler for GET /linked-vp/\",\n          \"arguments\": {\n            \"$ref\": \"#/components/schemas/GeneratePresentationArgs\"\n          },\n          \"returnType\": {\n            \"$ref\": \"#/components/schemas/LinkedVPPresentation\"\n          }\n        },\n        \"lvpGetServiceEntries\": {\n          \"description\": \"Get LinkedVP service entries for a DID to be added to a DID Document This is useful when generating DID Documents with toDidDocument\",\n          \"arguments\": {\n            \"$ref\": \"#/components/schemas/GetServiceEntriesArgs\"\n          },\n          \"returnType\": {\n            \"type\": \"array\",\n            \"items\": {\n              \"$ref\": \"#/components/schemas/LinkedVPServiceEntry\"\n            }\n          }\n        },\n        \"lvpHasEntry\": {\n          \"description\": \"Check if a LinkedVP entry exists by linkedVpId\",\n          \"arguments\": {\n            \"$ref\": \"#/components/schemas/HasLinkedVPEntryArgs\"\n          },\n          \"returnType\": {\n            \"type\": \"boolean\"\n          }\n        },\n        \"lvpPublishCredential\": {\n          \"description\": \"Publish a credential as a LinkedVP by adding it to the holder's DID Document\",\n          \"arguments\": {\n            \"$ref\": \"#/components/schemas/PublishCredentialArgs\"\n          },\n          \"returnType\": {\n            \"$ref\": \"#/components/schemas/LinkedVPEntry\"\n          }\n        },\n        \"lvpUnpublishCredential\": {\n          \"description\": \"Unpublish a credential by removing its LinkedVP entry from the DID Document\",\n          \"arguments\": {\n            \"$ref\": \"#/components/schemas/UnpublishCredentialArgs\"\n          },\n          \"returnType\": {\n            \"type\": \"boolean\"\n          }\n        }\n      }\n    }\n  }\n}","import { DigitalCredential } from '@sphereon/ssi-sdk.data-store-types'\nimport { IAgentPlugin } from '@veramo/core'\nimport { IsNull, Not } from 'typeorm'\nimport { schema } from '../index'\nimport { createLinkedVPPresentation } from '../services/LinkedVPService'\nimport {\n  GeneratePresentationArgs,\n  GetServiceEntriesArgs,\n  HasLinkedVPEntryArgs,\n  ILinkedVPManager,\n  LinkedVPEntry,\n  LinkedVPPresentation,\n  LinkedVPServiceEntry,\n  PublishCredentialArgs,\n  RequiredContext,\n  UnpublishCredentialArgs,\n} from '../types'\n\n// Exposing the methods here for any REST implementation\nexport const linkedVPManagerMethods: Array<string> = [\n  'lvpPublishCredential',\n  'lvpUnpublishCredential',\n  'lvpHasEntry',\n  'lvpGetServiceEntries',\n  'lvpGeneratePresentation',\n]\n\n/**\n * {@inheritDoc ILinkedVPManager}\n */\nexport class LinkedVPManager implements IAgentPlugin {\n  readonly schema = schema.ILinkedVPManager\n  readonly methods: ILinkedVPManager = {\n    lvpPublishCredential: this.lvpPublishCredential.bind(this),\n    lvpUnpublishCredential: this.lvpUnpublishCredential.bind(this),\n    lvpHasEntry: this.lvpHasEntry.bind(this),\n    lvpGetServiceEntries: this.lvpGetServiceEntries.bind(this),\n    lvpGeneratePresentation: this.lvpGeneratePresentation.bind(this),\n  }\n\n  private readonly holderDids: Record<string, string>\n\n  constructor(options: { holderDids: Record<string, string> }) {\n    this.holderDids = options.holderDids\n  }\n\n  private async lvpPublishCredential(args: PublishCredentialArgs, context: RequiredContext): Promise<LinkedVPEntry> {\n    const { digitalCredentialId } = args\n\n    const credential: DigitalCredential = await context.agent.crsGetCredential({ id: digitalCredentialId })\n\n    if (credential.linkedVpId) {\n      return Promise.reject(new Error(`Credential ${digitalCredentialId} is already published with linkedVpId ${credential.linkedVpId}`))\n    }\n\n    const linkedVpId = this.buildLinkedVpId(args.linkedVpId, credential.tenantId)\n\n    await this.ensureLinkedVpIdUnique(linkedVpId, context, credential.tenantId)\n\n    const publishedAt = new Date()\n    await context.agent.crsUpdateCredential({\n      id: digitalCredentialId,\n      linkedVpId,\n      linkedVpFrom: publishedAt,\n    })\n\n    return {\n      id: credential.id,\n      linkedVpId,\n      tenantId: credential.tenantId,\n      linkedVpFrom: publishedAt,\n      createdAt: credential.createdAt,\n    }\n  }\n\n  private async lvpUnpublishCredential(args: UnpublishCredentialArgs, context: RequiredContext): Promise<boolean> {\n    const { linkedVpId } = args\n\n    // Find credential by linkedVpId and tenantId\n    const credentials = await context.agent.crsGetCredentials({\n      filter: [{ linkedVpId }],\n    })\n    if (credentials.length === 0) {\n      return Promise.reject(Error(`No credential found with linkedVpId ${linkedVpId}`))\n    }\n\n    const credential = credentials[0]\n    await context.agent.crsUpdateCredential({\n      id: credential.id,\n      linkedVpId: undefined,\n      linkedVpFrom: undefined,\n    })\n\n    return true\n  }\n\n  private async lvpHasEntry(args: HasLinkedVPEntryArgs, context: RequiredContext): Promise<boolean> {\n    const { linkedVpId } = args\n\n    try {\n      const credentials = await context.agent.crsGetCredentials({\n        filter: [{ linkedVpId }],\n      })\n      return credentials.length > 0\n    } catch (error) {\n      return false\n    }\n  }\n\n  private async lvpGetServiceEntries(args: GetServiceEntriesArgs, context: RequiredContext): Promise<Array<LinkedVPServiceEntry>> {\n    const { tenantId } = args\n\n    // Get all published credentials (credentials with linkedVpId set)\n    const filter: any = { linkedVpId: Not(IsNull()) }\n    if (tenantId) {\n      filter.tenantId = tenantId\n    }\n\n    const credentials = await context.agent.crsGetCredentials({\n      filter: [filter],\n    })\n\n    return credentials\n      .filter((cred) => cred.linkedVpId !== undefined && cred.linkedVpId !== null)\n      .map((cred) => {\n        const holderDidForEntry = this.getHolderDid(cred.tenantId)\n        return this.credentialToServiceEntry(cred, holderDidForEntry)\n      })\n  }\n\n  private async lvpGeneratePresentation(args: GeneratePresentationArgs, context: RequiredContext): Promise<LinkedVPPresentation> {\n    const { linkedVpId } = args\n    const tenantId = this.parseTenantFromLinkedVpId(linkedVpId)\n    const holderDid = this.getHolderDid(tenantId)\n\n    const uniqueCredentials = await context.agent.crsGetUniqueCredentials({\n      filter: [\n        {\n          linkedVpId: args.linkedVpId,\n          ...(tenantId && { tenantId }),\n        },\n      ],\n    })\n    if (uniqueCredentials.length === 0) {\n      return Promise.reject(Error(`No published credentials found for linkedVpId ${linkedVpId}`))\n    }\n    if (uniqueCredentials.length > 1) {\n      return Promise.reject(Error(`Multiple credentials found for linkedVpId ${linkedVpId}`))\n    }\n\n    // Generate the Verifiable Presentation with all published credentials\n    return createLinkedVPPresentation(holderDid, uniqueCredentials[0], context.agent)\n  }\n\n  private getHolderDid(tenantId: string | undefined) {\n    const holderDid = this.holderDids[tenantId ?? 'default']\n    if (!holderDid) {\n      throw Error(`No holder did supplied for tenant ${tenantId ?? 'default'}`)\n    }\n    return holderDid\n  }\n\n  private parseTenantFromLinkedVpId(linkedVpId: string): string | undefined {\n    const idx = linkedVpId.lastIndexOf('@')\n    return idx === -1 ? undefined : linkedVpId.substring(idx + 1)\n  }\n\n  private generateLinkedVpId(): string {\n    return `lvp-${Date.now()}-${Math.random().toString(36).substring(2, 15)}`\n  }\n\n  private async ensureLinkedVpIdUnique(linkedVpId: string, context: RequiredContext, tenantId?: string): Promise<void> {\n    const credentials = await context.agent.crsGetCredentials({\n      filter: [{ linkedVpId, ...(tenantId && { tenantId }) }],\n    })\n\n    if (credentials.length > 0) {\n      throw new Error(`LinkedVP ID ${linkedVpId} already exists${tenantId ? ` for tenant ${tenantId}` : ''}`)\n    }\n  }\n\n  private buildLinkedVpId(linkedVpId: string | undefined, tenantId: string | undefined) {\n    let finalLinkedVpId = linkedVpId || this.generateLinkedVpId()\n\n    // Append tenantId if provided and not already present\n    if (tenantId && tenantId !== '' && !finalLinkedVpId.includes('@')) {\n      finalLinkedVpId = `${finalLinkedVpId}@${tenantId}`\n    }\n    return finalLinkedVpId\n  }\n\n  private getBaseUrlFromDid(holderDid: string): string {\n    if (!holderDid.startsWith('did:web:')) {\n      throw new Error(`Invalid DID: ${holderDid}, must be did:web`)\n    }\n\n    const withoutPrefix = holderDid.replace('did:web:', '') // example.com:tenants:tenant1\n    const parts = withoutPrefix.split(':')\n    const domain = parts.shift()! // example.com\n    const path = parts.join('/') // tenants/tenant1\n\n    return path\n      ? `https://${domain}/${path}` // https://example.com/tenants/tenant1\n      : `https://${domain}` // https://example.com\n  }\n\n  private buildServiceEndpoint(holderDid: string, linkedVpId: string): string {\n    const baseUrl = this.getBaseUrlFromDid(holderDid)\n    const cleanBaseUrl = baseUrl.endsWith('/') ? baseUrl.slice(0, -1) : baseUrl\n    return `${cleanBaseUrl}/linked-vp/${linkedVpId}`\n  }\n\n  private credentialToServiceEntry(credential: DigitalCredential, holderDid: string): LinkedVPServiceEntry {\n    if (!credential.linkedVpId) {\n      throw new Error(`Credential ${credential.id} does not have a linkedVpId`)\n    }\n\n    return {\n      id: `${holderDid}#${credential.linkedVpId}`,\n      type: 'LinkedVerifiablePresentation',\n      serviceEndpoint: this.buildServiceEndpoint(holderDid, credential.linkedVpId),\n    }\n  }\n}\n","import { UniqueDigitalCredential } from '@sphereon/ssi-sdk.credential-store'\nimport { calculateSdHash, defaultGenerateDigest, PartialSdJwtKbJwt } from '@sphereon/ssi-sdk.sd-jwt'\n\nimport {\n  CredentialMapper,\n  DocumentFormat,\n  Loggers,\n  OriginalVerifiableCredential,\n  SdJwtDecodedVerifiableCredential,\n  WrappedVerifiableCredential,\n} from '@sphereon/ssi-types'\nimport { LOGGER_NAMESPACE, RequiredContext } from '../types'\n\nconst logger = Loggers.DEFAULT.get(LOGGER_NAMESPACE)\nconst CLOCK_SKEW = 120 // TODO make adjustable?\n\n/**\n * Extracts the original credential from various wrapper types\n */\nfunction extractOriginalCredential(\n  credential: UniqueDigitalCredential | WrappedVerifiableCredential | OriginalVerifiableCredential,\n): OriginalVerifiableCredential {\n  if (typeof credential === 'string') {\n    return credential\n  }\n\n  if ('digitalCredential' in credential) {\n    const udc = credential as UniqueDigitalCredential\n    if (udc.originalVerifiableCredential) {\n      return udc.originalVerifiableCredential\n    }\n    return udc.uniformVerifiableCredential as OriginalVerifiableCredential\n  }\n\n  if ('original' in credential) {\n    return credential.original\n  }\n\n  return credential as OriginalVerifiableCredential\n}\n\n/**\n * Creates a Verifiable Presentation for LinkedVP publishing\n * Contains multiple credentials in a single JWT VP\n * No nonce or audience since this is for publishing, not responding to verification\n */\nexport async function createLinkedVPPresentation(\n  holderDid: string,\n  credential: UniqueDigitalCredential,\n  agent: RequiredContext['agent'],\n): Promise<string | Record<string, any>> {\n  logger.debug(`Creating LinkedVP presentation for ${holderDid} of credential ${credential.id}`)\n\n  const identifier = await agent.identifierManagedGet({ identifier: holderDid })\n  const originalCredential = extractOriginalCredential(credential)\n  const documentFormat = CredentialMapper.detectDocumentType(originalCredential)\n  switch (documentFormat) {\n    case DocumentFormat.SD_JWT_VC: {\n      // SD-JWT with KB-JWT\n      const decodedSdJwt = await CredentialMapper.decodeSdJwtVcAsync(\n        typeof originalCredential === 'string' ? originalCredential : (originalCredential as SdJwtDecodedVerifiableCredential).compactSdJwtVc,\n        defaultGenerateDigest,\n      )\n\n      const hashAlg = decodedSdJwt.signedPayload._sd_alg ?? 'sha-256'\n      const sdHash = calculateSdHash(decodedSdJwt.compactSdJwtVc, hashAlg, defaultGenerateDigest)\n      const kbJwtPayload: PartialSdJwtKbJwt['payload'] = {\n        iat: Math.floor(Date.now() / 1000 - CLOCK_SKEW),\n        sd_hash: sdHash,\n      }\n\n      const presentationResult = await agent.createSdJwtPresentation({\n        presentation: decodedSdJwt.compactSdJwtVc,\n        kb: {\n          payload: kbJwtPayload as any, // FIXME?\n        },\n      })\n\n      return presentationResult.presentation\n    }\n    case DocumentFormat.JSONLD: {\n      // JSON-LD VC - create JSON-LD VP with challenge and domain in proof\n      const vcObject = typeof originalCredential === 'string' ? JSON.parse(originalCredential) : originalCredential\n\n      const vpObject = {\n        '@context': ['https://www.w3.org/2018/credentials/v1'],\n        type: ['VerifiablePresentation'],\n        verifiableCredential: [vcObject],\n        holder: holderDid,\n      }\n\n      // Create JSON-LD VP with proof\n      return await agent.createVerifiablePresentation({\n        presentation: vpObject,\n        proofFormat: 'lds',\n        keyRef: identifier.kmsKeyRef || identifier.kid,\n      })\n    }\n    case DocumentFormat.MSO_MDOC: {\n      // ISO mdoc - create mdoc VP token\n      // This is a placeholder implementation\n      // Full implementation would require:\n      // 1. Decode the mdoc using CredentialMapper or mdoc utilities\n      // 2. Build proper mdoc VP token with session transcript\n      // 3. Include nonce/audience in the session transcript\n      logger.warning('mso_mdoc format has basic support - production use requires proper mdoc VP token implementation')\n\n      return originalCredential\n    }\n    default: {\n      // JWT VC - create JWT VP with nonce and aud in payload\n      const vcJwt = typeof originalCredential === 'string' ? originalCredential : JSON.stringify(originalCredential)\n\n      // Create VP JWT using agent method\n      const vpPayload = {\n        iss: holderDid,\n        vp: {\n          '@context': ['https://www.w3.org/2018/credentials/v1'],\n          type: ['VerifiablePresentation'],\n          holder: holderDid,\n          verifiableCredential: [vcJwt],\n        },\n        iat: Math.floor(Date.now() / 1000 - CLOCK_SKEW),\n        exp: Math.floor(Date.now() / 1000 + 600 + CLOCK_SKEW), // 10 minutes\n      }\n\n      // Use the agent's JWT creation capability\n      const vpJwt = await agent.createVerifiablePresentation({\n        presentation: vpPayload.vp,\n        proofFormat: 'jwt',\n        keyRef: identifier.kmsKeyRef || identifier.kid,\n      })\n\n      return (vpJwt.proof && 'jwt' in vpJwt.proof && vpJwt.proof.jwt) || vpJwt\n    }\n  }\n}\n","import { IIdentifierResolution } from '@sphereon/ssi-sdk-ext.identifier-resolution'\nimport { ICredentialStore } from '@sphereon/ssi-sdk.credential-store'\nimport { VcdmCredentialPlugin } from '@sphereon/ssi-sdk.credential-vcdm'\nimport { ISDJwtPlugin } from '@sphereon/ssi-sdk.sd-jwt'\nimport { IAgentContext, IPluginMethodMap } from '@veramo/core'\nimport { IKeyManager } from '@veramo/core/src/types/IKeyManager'\n\nexport const LOGGER_NAMESPACE = 'sphereon:linked-vp'\n\nexport type LinkedVPPresentation = string | Record<string, any>\n\nexport interface ILinkedVPManager extends IPluginMethodMap {\n  /**\n   * Publish a credential as a LinkedVP by adding it to the holder's DID Document\n   * @param args - Publication arguments including credential ID and scope configuration\n   * @param context - Agent context\n   */\n  lvpPublishCredential(args: PublishCredentialArgs, context: RequiredContext): Promise<LinkedVPEntry>\n\n  /**\n   * Unpublish a credential by removing its LinkedVP entry from the DID Document\n   * @param args - Unpublish arguments\n   * @param context - Agent context\n   */\n  lvpUnpublishCredential(args: UnpublishCredentialArgs, context: RequiredContext): Promise<boolean>\n\n  /**\n   * Check if a LinkedVP entry exists by linkedVpId\n   * @param args - Query arguments\n   * @param context - Agent context\n   */\n  lvpHasEntry(args: HasLinkedVPEntryArgs, context: RequiredContext): Promise<boolean>\n\n  /**\n   * Get LinkedVP service entries for a DID to be added to a DID Document\n   * This is useful when generating DID Documents with toDidDocument\n   * @param args - Query arguments for the DID\n   * @param context - Agent context\n   */\n  lvpGetServiceEntries(args: GetServiceEntriesArgs, context: RequiredContext): Promise<Array<LinkedVPServiceEntry>>\n\n  /**\n   * Generate and return a Verifiable Presentation for a published LinkedVP\n   * This is the main endpoint handler for GET /linked-vp/{linkedVpId}\n   * @param args - Generation arguments\n   * @param context - Agent context\n   */\n  lvpGeneratePresentation(args: GeneratePresentationArgs, context: RequiredContext): Promise<LinkedVPPresentation>\n}\n\nexport type PublishCredentialArgs = {\n  digitalCredentialId: string\n  linkedVpId?: string // Optional: if not provided, will be auto-generated\n}\n\nexport type UnpublishCredentialArgs = {\n  linkedVpId: string\n}\n\nexport type HasLinkedVPEntryArgs = {\n  linkedVpId: string\n}\n\nexport type GetServiceEntriesArgs = {\n  tenantId?: string\n}\n\nexport type GeneratePresentationArgs = {\n  linkedVpId: string\n}\n\nexport type LinkedVPEntry = {\n  id: string\n  linkedVpId: string\n  tenantId?: string\n  linkedVpFrom?: Date\n  createdAt: Date\n}\n\nexport type LinkedVPServiceEntry = {\n  id: string\n  type: 'LinkedVerifiablePresentation'\n  serviceEndpoint: string\n}\n\nexport type RequiredContext = IAgentContext<IIdentifierResolution & ICredentialStore & IKeyManager & VcdmCredentialPlugin & ISDJwtPlugin>\n"],"mappings":";;;;AAAA;AAAA,EACE,kBAAoB;AAAA,IAClB,YAAc;AAAA,MACZ,SAAW;AAAA,QACT,0BAA4B;AAAA,UAC1B,MAAQ;AAAA,UACR,YAAc;AAAA,YACZ,YAAc;AAAA,cACZ,MAAQ;AAAA,YACV;AAAA,UACF;AAAA,UACA,UAAY;AAAA,YACV;AAAA,UACF;AAAA,UACA,sBAAwB;AAAA,QAC1B;AAAA,QACA,sBAAwB;AAAA,UACtB,OAAS;AAAA,YACP;AAAA,cACE,MAAQ;AAAA,YACV;AAAA,YACA;AAAA,cACE,MAAQ;AAAA,YACV;AAAA,UACF;AAAA,QACF;AAAA,QACA,sBAAsB;AAAA,UACpB,MAAQ;AAAA,QACV;AAAA,QACA,uBAAyB;AAAA,UACvB,MAAQ;AAAA,UACR,YAAc;AAAA,YACZ,UAAY;AAAA,cACV,MAAQ;AAAA,YACV;AAAA,UACF;AAAA,UACA,sBAAwB;AAAA,QAC1B;AAAA,QACA,sBAAwB;AAAA,UACtB,MAAQ;AAAA,UACR,YAAc;AAAA,YACZ,IAAM;AAAA,cACJ,MAAQ;AAAA,YACV;AAAA,YACA,MAAQ;AAAA,cACN,MAAQ;AAAA,cACR,OAAS;AAAA,YACX;AAAA,YACA,iBAAmB;AAAA,cACjB,MAAQ;AAAA,YACV;AAAA,UACF;AAAA,UACA,UAAY;AAAA,YACV;AAAA,YACA;AAAA,YACA;AAAA,UACF;AAAA,UACA,sBAAwB;AAAA,QAC1B;AAAA,QACA,sBAAwB;AAAA,UACtB,MAAQ;AAAA,UACR,YAAc;AAAA,YACZ,YAAc;AAAA,cACZ,MAAQ;AAAA,YACV;AAAA,UACF;AAAA,UACA,UAAY;AAAA,YACV;AAAA,UACF;AAAA,UACA,sBAAwB;AAAA,QAC1B;AAAA,QACA,uBAAyB;AAAA,UACvB,MAAQ;AAAA,UACR,YAAc;AAAA,YACZ,qBAAuB;AAAA,cACrB,MAAQ;AAAA,YACV;AAAA,YACA,YAAc;AAAA,cACZ,MAAQ;AAAA,YACV;AAAA,YACA,UAAY;AAAA,cACV,MAAQ;AAAA,YACV;AAAA,UACF;AAAA,UACA,UAAY;AAAA,YACV;AAAA,UACF;AAAA,UACA,sBAAwB;AAAA,QAC1B;AAAA,QACA,eAAiB;AAAA,UACf,MAAQ;AAAA,UACR,YAAc;AAAA,YACZ,IAAM;AAAA,cACJ,MAAQ;AAAA,YACV;AAAA,YACA,YAAc;AAAA,cACZ,MAAQ;AAAA,YACV;AAAA,YACA,UAAY;AAAA,cACV,MAAQ;AAAA,YACV;AAAA,YACA,cAAgB;AAAA,cACd,MAAQ;AAAA,cACR,QAAU;AAAA,YACZ;AAAA,YACA,WAAa;AAAA,cACX,MAAQ;AAAA,cACR,QAAU;AAAA,YACZ;AAAA,UACF;AAAA,UACA,UAAY;AAAA,YACV;AAAA,YACA;AAAA,YACA;AAAA,UACF;AAAA,UACA,sBAAwB;AAAA,QAC1B;AAAA,QACA,yBAA2B;AAAA,UACzB,MAAQ;AAAA,UACR,YAAc;AAAA,YACZ,YAAc;AAAA,cACZ,MAAQ;AAAA,YACV;AAAA,UACF;AAAA,UACA,UAAY;AAAA,YACV;AAAA,UACF;AAAA,UACA,sBAAwB;AAAA,QAC1B;AAAA,MACF;AAAA,MACA,SAAW;AAAA,QACT,yBAA2B;AAAA,UACzB,aAAe;AAAA,UACf,WAAa;AAAA,YACX,MAAQ;AAAA,UACV;AAAA,UACA,YAAc;AAAA,YACZ,MAAQ;AAAA,UACV;AAAA,QACF;AAAA,QACA,sBAAwB;AAAA,UACtB,aAAe;AAAA,UACf,WAAa;AAAA,YACX,MAAQ;AAAA,UACV;AAAA,UACA,YAAc;AAAA,YACZ,MAAQ;AAAA,YACR,OAAS;AAAA,cACP,MAAQ;AAAA,YACV;AAAA,UACF;AAAA,QACF;AAAA,QACA,aAAe;AAAA,UACb,aAAe;AAAA,UACf,WAAa;AAAA,YACX,MAAQ;AAAA,UACV;AAAA,UACA,YAAc;AAAA,YACZ,MAAQ;AAAA,UACV;AAAA,QACF;AAAA,QACA,sBAAwB;AAAA,UACtB,aAAe;AAAA,UACf,WAAa;AAAA,YACX,MAAQ;AAAA,UACV;AAAA,UACA,YAAc;AAAA,YACZ,MAAQ;AAAA,UACV;AAAA,QACF;AAAA,QACA,wBAA0B;AAAA,UACxB,aAAe;AAAA,UACf,WAAa;AAAA,YACX,MAAQ;AAAA,UACV;AAAA,UACA,YAAc;AAAA,YACZ,MAAQ;AAAA,UACV;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;ACpLA,SAASA,QAAQC,WAAW;;;ACD5B,SAASC,iBAAiBC,6BAAgD;AAE1E,SACEC,kBACAC,gBACAC,eAIK;;;ACHA,IAAMC,mBAAmB;;;ADMhC,IAAMC,SAASC,QAAQC,QAAQC,IAAIC,gBAAAA;AACnC,IAAMC,aAAa;AAKnB,SAASC,0BACPC,YAAgG;AAEhG,MAAI,OAAOA,eAAe,UAAU;AAClC,WAAOA;EACT;AAEA,MAAI,uBAAuBA,YAAY;AACrC,UAAMC,MAAMD;AACZ,QAAIC,IAAIC,8BAA8B;AACpC,aAAOD,IAAIC;IACb;AACA,WAAOD,IAAIE;EACb;AAEA,MAAI,cAAcH,YAAY;AAC5B,WAAOA,WAAWI;EACpB;AAEA,SAAOJ;AACT;AApBSD;AA2BT,eAAsBM,2BACpBC,WACAN,YACAO,OAA+B;AAE/Bd,SAAOe,MAAM,sCAAsCF,SAAAA,kBAA2BN,WAAWS,EAAE,EAAE;AAE7F,QAAMC,aAAa,MAAMH,MAAMI,qBAAqB;IAAED,YAAYJ;EAAU,CAAA;AAC5E,QAAMM,qBAAqBb,0BAA0BC,UAAAA;AACrD,QAAMa,iBAAiBC,iBAAiBC,mBAAmBH,kBAAAA;AAC3D,UAAQC,gBAAAA;IACN,KAAKG,eAAeC,WAAW;AAE7B,YAAMC,eAAe,MAAMJ,iBAAiBK,mBAC1C,OAAOP,uBAAuB,WAAWA,qBAAsBA,mBAAwDQ,gBACvHC,qBAAAA;AAGF,YAAMC,UAAUJ,aAAaK,cAAcC,WAAW;AACtD,YAAMC,SAASC,gBAAgBR,aAAaE,gBAAgBE,SAASD,qBAAAA;AACrE,YAAMM,eAA6C;QACjDC,KAAKC,KAAKC,MAAMC,KAAKC,IAAG,IAAK,MAAOlC,UAAAA;QACpCmC,SAASR;MACX;AAEA,YAAMS,qBAAqB,MAAM3B,MAAM4B,wBAAwB;QAC7DC,cAAclB,aAAaE;QAC3BiB,IAAI;UACFC,SAASX;QACX;MACF,CAAA;AAEA,aAAOO,mBAAmBE;IAC5B;IACA,KAAKpB,eAAeuB,QAAQ;AAE1B,YAAMC,WAAW,OAAO5B,uBAAuB,WAAW6B,KAAKC,MAAM9B,kBAAAA,IAAsBA;AAE3F,YAAM+B,WAAW;QACf,YAAY;UAAC;;QACbC,MAAM;UAAC;;QACPC,sBAAsB;UAACL;;QACvBM,QAAQxC;MACV;AAGA,aAAO,MAAMC,MAAMwC,6BAA6B;QAC9CX,cAAcO;QACdK,aAAa;QACbC,QAAQvC,WAAWwC,aAAaxC,WAAWyC;MAC7C,CAAA;IACF;IACA,KAAKnC,eAAeoC,UAAU;AAO5B3D,aAAO4D,QAAQ,iGAAA;AAEf,aAAOzC;IACT;IACA,SAAS;AAEP,YAAM0C,QAAQ,OAAO1C,uBAAuB,WAAWA,qBAAqB6B,KAAKc,UAAU3C,kBAAAA;AAG3F,YAAM4C,YAAY;QAChBC,KAAKnD;QACLoD,IAAI;UACF,YAAY;YAAC;;UACbd,MAAM;YAAC;;UACPE,QAAQxC;UACRuC,sBAAsB;YAACS;;QACzB;QACA1B,KAAKC,KAAKC,MAAMC,KAAKC,IAAG,IAAK,MAAOlC,UAAAA;QACpC6D,KAAK9B,KAAKC,MAAMC,KAAKC,IAAG,IAAK,MAAO,MAAMlC,UAAAA;MAC5C;AAGA,YAAM8D,QAAQ,MAAMrD,MAAMwC,6BAA6B;QACrDX,cAAcoB,UAAUE;QACxBV,aAAa;QACbC,QAAQvC,WAAWwC,aAAaxC,WAAWyC;MAC7C,CAAA;AAEA,aAAQS,MAAMC,SAAS,SAASD,MAAMC,SAASD,MAAMC,MAAMC,OAAQF;IACrE;EACF;AACF;AA1FsBvD;;;AD3Bf,IAAM0D,yBAAwC;EACnD;EACA;EACA;EACA;EACA;;AAMK,IAAMC,kBAAN,MAAMA;EA5Bb,OA4BaA;;;EACFC,SAASA,sBAAOC;EAChBC,UAA4B;IACnCC,sBAAsB,KAAKA,qBAAqBC,KAAK,IAAI;IACzDC,wBAAwB,KAAKA,uBAAuBD,KAAK,IAAI;IAC7DE,aAAa,KAAKA,YAAYF,KAAK,IAAI;IACvCG,sBAAsB,KAAKA,qBAAqBH,KAAK,IAAI;IACzDI,yBAAyB,KAAKA,wBAAwBJ,KAAK,IAAI;EACjE;EAEiBK;EAEjB,YAAYC,SAAiD;AAC3D,SAAKD,aAAaC,QAAQD;EAC5B;EAEA,MAAcN,qBAAqBQ,MAA6BC,SAAkD;AAChH,UAAM,EAAEC,oBAAmB,IAAKF;AAEhC,UAAMG,aAAgC,MAAMF,QAAQG,MAAMC,iBAAiB;MAAEC,IAAIJ;IAAoB,CAAA;AAErG,QAAIC,WAAWI,YAAY;AACzB,aAAOC,QAAQC,OAAO,IAAIC,MAAM,cAAcR,mBAAAA,yCAA4DC,WAAWI,UAAU,EAAE,CAAA;IACnI;AAEA,UAAMA,aAAa,KAAKI,gBAAgBX,KAAKO,YAAYJ,WAAWS,QAAQ;AAE5E,UAAM,KAAKC,uBAAuBN,YAAYN,SAASE,WAAWS,QAAQ;AAE1E,UAAME,cAAc,oBAAIC,KAAAA;AACxB,UAAMd,QAAQG,MAAMY,oBAAoB;MACtCV,IAAIJ;MACJK;MACAU,cAAcH;IAChB,CAAA;AAEA,WAAO;MACLR,IAAIH,WAAWG;MACfC;MACAK,UAAUT,WAAWS;MACrBK,cAAcH;MACdI,WAAWf,WAAWe;IACxB;EACF;EAEA,MAAcxB,uBAAuBM,MAA+BC,SAA4C;AAC9G,UAAM,EAAEM,WAAU,IAAKP;AAGvB,UAAMmB,cAAc,MAAMlB,QAAQG,MAAMgB,kBAAkB;MACxDC,QAAQ;QAAC;UAAEd;QAAW;;IACxB,CAAA;AACA,QAAIY,YAAYG,WAAW,GAAG;AAC5B,aAAOd,QAAQC,OAAOC,MAAM,uCAAuCH,UAAAA,EAAY,CAAA;IACjF;AAEA,UAAMJ,aAAagB,YAAY,CAAA;AAC/B,UAAMlB,QAAQG,MAAMY,oBAAoB;MACtCV,IAAIH,WAAWG;MACfC,YAAYgB;MACZN,cAAcM;IAChB,CAAA;AAEA,WAAO;EACT;EAEA,MAAc5B,YAAYK,MAA4BC,SAA4C;AAChG,UAAM,EAAEM,WAAU,IAAKP;AAEvB,QAAI;AACF,YAAMmB,cAAc,MAAMlB,QAAQG,MAAMgB,kBAAkB;QACxDC,QAAQ;UAAC;YAAEd;UAAW;;MACxB,CAAA;AACA,aAAOY,YAAYG,SAAS;IAC9B,SAASE,OAAO;AACd,aAAO;IACT;EACF;EAEA,MAAc5B,qBAAqBI,MAA6BC,SAAgE;AAC9H,UAAM,EAAEW,SAAQ,IAAKZ;AAGrB,UAAMqB,SAAc;MAAEd,YAAYkB,IAAIC,OAAAA,CAAAA;IAAU;AAChD,QAAId,UAAU;AACZS,aAAOT,WAAWA;IACpB;AAEA,UAAMO,cAAc,MAAMlB,QAAQG,MAAMgB,kBAAkB;MACxDC,QAAQ;QAACA;;IACX,CAAA;AAEA,WAAOF,YACJE,OAAO,CAACM,SAASA,KAAKpB,eAAegB,UAAaI,KAAKpB,eAAe,IAAA,EACtEqB,IAAI,CAACD,SAAAA;AACJ,YAAME,oBAAoB,KAAKC,aAAaH,KAAKf,QAAQ;AACzD,aAAO,KAAKmB,yBAAyBJ,MAAME,iBAAAA;IAC7C,CAAA;EACJ;EAEA,MAAchC,wBAAwBG,MAAgCC,SAAyD;AAC7H,UAAM,EAAEM,WAAU,IAAKP;AACvB,UAAMY,WAAW,KAAKoB,0BAA0BzB,UAAAA;AAChD,UAAM0B,YAAY,KAAKH,aAAalB,QAAAA;AAEpC,UAAMsB,oBAAoB,MAAMjC,QAAQG,MAAM+B,wBAAwB;MACpEd,QAAQ;QACN;UACEd,YAAYP,KAAKO;UACjB,GAAIK,YAAY;YAAEA;UAAS;QAC7B;;IAEJ,CAAA;AACA,QAAIsB,kBAAkBZ,WAAW,GAAG;AAClC,aAAOd,QAAQC,OAAOC,MAAM,iDAAiDH,UAAAA,EAAY,CAAA;IAC3F;AACA,QAAI2B,kBAAkBZ,SAAS,GAAG;AAChC,aAAOd,QAAQC,OAAOC,MAAM,6CAA6CH,UAAAA,EAAY,CAAA;IACvF;AAGA,WAAO6B,2BAA2BH,WAAWC,kBAAkB,CAAA,GAAIjC,QAAQG,KAAK;EAClF;EAEQ0B,aAAalB,UAA8B;AACjD,UAAMqB,YAAY,KAAKnC,WAAWc,YAAY,SAAA;AAC9C,QAAI,CAACqB,WAAW;AACd,YAAMvB,MAAM,qCAAqCE,YAAY,SAAA,EAAW;IAC1E;AACA,WAAOqB;EACT;EAEQD,0BAA0BzB,YAAwC;AACxE,UAAM8B,MAAM9B,WAAW+B,YAAY,GAAA;AACnC,WAAOD,QAAQ,KAAKd,SAAYhB,WAAWgC,UAAUF,MAAM,CAAA;EAC7D;EAEQG,qBAA6B;AACnC,WAAO,OAAOzB,KAAK0B,IAAG,CAAA,IAAMC,KAAKC,OAAM,EAAGC,SAAS,EAAA,EAAIL,UAAU,GAAG,EAAA,CAAA;EACtE;EAEA,MAAc1B,uBAAuBN,YAAoBN,SAA0BW,UAAkC;AACnH,UAAMO,cAAc,MAAMlB,QAAQG,MAAMgB,kBAAkB;MACxDC,QAAQ;QAAC;UAAEd;UAAY,GAAIK,YAAY;YAAEA;UAAS;QAAG;;IACvD,CAAA;AAEA,QAAIO,YAAYG,SAAS,GAAG;AAC1B,YAAM,IAAIZ,MAAM,eAAeH,UAAAA,kBAA4BK,WAAW,eAAeA,QAAAA,KAAa,EAAA,EAAI;IACxG;EACF;EAEQD,gBAAgBJ,YAAgCK,UAA8B;AACpF,QAAIiC,kBAAkBtC,cAAc,KAAKiC,mBAAkB;AAG3D,QAAI5B,YAAYA,aAAa,MAAM,CAACiC,gBAAgBC,SAAS,GAAA,GAAM;AACjED,wBAAkB,GAAGA,eAAAA,IAAmBjC,QAAAA;IAC1C;AACA,WAAOiC;EACT;EAEQE,kBAAkBd,WAA2B;AACnD,QAAI,CAACA,UAAUe,WAAW,UAAA,GAAa;AACrC,YAAM,IAAItC,MAAM,gBAAgBuB,SAAAA,mBAA4B;IAC9D;AAEA,UAAMgB,gBAAgBhB,UAAUiB,QAAQ,YAAY,EAAA;AACpD,UAAMC,QAAQF,cAAcG,MAAM,GAAA;AAClC,UAAMC,SAASF,MAAMG,MAAK;AAC1B,UAAMC,OAAOJ,MAAMK,KAAK,GAAA;AAExB,WAAOD,OACH,WAAWF,MAAAA,IAAUE,IAAAA,KACrB,WAAWF,MAAAA;EACjB;EAEQI,qBAAqBxB,WAAmB1B,YAA4B;AAC1E,UAAMmD,UAAU,KAAKX,kBAAkBd,SAAAA;AACvC,UAAM0B,eAAeD,QAAQE,SAAS,GAAA,IAAOF,QAAQG,MAAM,GAAG,EAAC,IAAKH;AACpE,WAAO,GAAGC,YAAAA,cAA0BpD,UAAAA;EACtC;EAEQwB,yBAAyB5B,YAA+B8B,WAAyC;AACvG,QAAI,CAAC9B,WAAWI,YAAY;AAC1B,YAAM,IAAIG,MAAM,cAAcP,WAAWG,EAAE,6BAA6B;IAC1E;AAEA,WAAO;MACLA,IAAI,GAAG2B,SAAAA,IAAa9B,WAAWI,UAAU;MACzCuD,MAAM;MACNC,iBAAiB,KAAKN,qBAAqBxB,WAAW9B,WAAWI,UAAU;IAC7E;EACF;AACF;","names":["IsNull","Not","calculateSdHash","defaultGenerateDigest","CredentialMapper","DocumentFormat","Loggers","LOGGER_NAMESPACE","logger","Loggers","DEFAULT","get","LOGGER_NAMESPACE","CLOCK_SKEW","extractOriginalCredential","credential","udc","originalVerifiableCredential","uniformVerifiableCredential","original","createLinkedVPPresentation","holderDid","agent","debug","id","identifier","identifierManagedGet","originalCredential","documentFormat","CredentialMapper","detectDocumentType","DocumentFormat","SD_JWT_VC","decodedSdJwt","decodeSdJwtVcAsync","compactSdJwtVc","defaultGenerateDigest","hashAlg","signedPayload","_sd_alg","sdHash","calculateSdHash","kbJwtPayload","iat","Math","floor","Date","now","sd_hash","presentationResult","createSdJwtPresentation","presentation","kb","payload","JSONLD","vcObject","JSON","parse","vpObject","type","verifiableCredential","holder","createVerifiablePresentation","proofFormat","keyRef","kmsKeyRef","kid","MSO_MDOC","warning","vcJwt","stringify","vpPayload","iss","vp","exp","vpJwt","proof","jwt","linkedVPManagerMethods","LinkedVPManager","schema","ILinkedVPManager","methods","lvpPublishCredential","bind","lvpUnpublishCredential","lvpHasEntry","lvpGetServiceEntries","lvpGeneratePresentation","holderDids","options","args","context","digitalCredentialId","credential","agent","crsGetCredential","id","linkedVpId","Promise","reject","Error","buildLinkedVpId","tenantId","ensureLinkedVpIdUnique","publishedAt","Date","crsUpdateCredential","linkedVpFrom","createdAt","credentials","crsGetCredentials","filter","length","undefined","error","Not","IsNull","cred","map","holderDidForEntry","getHolderDid","credentialToServiceEntry","parseTenantFromLinkedVpId","holderDid","uniqueCredentials","crsGetUniqueCredentials","createLinkedVPPresentation","idx","lastIndexOf","substring","generateLinkedVpId","now","Math","random","toString","finalLinkedVpId","includes","getBaseUrlFromDid","startsWith","withoutPrefix","replace","parts","split","domain","shift","path","join","buildServiceEndpoint","baseUrl","cleanBaseUrl","endsWith","slice","type","serviceEndpoint"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sphereon/ssi-sdk.linked-vp",
-  "version": "0.34.1-feature.SSISDK.82.linkedVP.325+9de5d4ff",
+  "version": "0.34.1-feature.SSISDK.82.linkedVP.326+2b4ebda9",
   "source": "src/index.ts",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -27,12 +27,13 @@
     "generate-plugin-schema": "tsx ../../packages/dev/bin/sphereon.js dev generate-plugin-schema"
   },
   "dependencies": {
-    "@sphereon/ssi-sdk-ext.identifier-resolution": "0.34.1-feature.SSISDK.82.linkedVP.325+9de5d4ff",
-    "@sphereon/ssi-sdk.credential-store": "0.34.1-feature.SSISDK.82.linkedVP.325+9de5d4ff",
-    "@sphereon/ssi-sdk.credential-vcdm": "0.34.1-feature.SSISDK.82.linkedVP.325+9de5d4ff",
-    "@sphereon/ssi-sdk.data-store": "0.34.1-feature.SSISDK.82.linkedVP.325+9de5d4ff",
-    "@sphereon/ssi-sdk.data-store-types": "0.34.1-feature.SSISDK.82.linkedVP.325+9de5d4ff",
-    "@sphereon/ssi-types": "0.34.1-feature.SSISDK.82.linkedVP.325+9de5d4ff",
+    "@sphereon/ssi-sdk-ext.identifier-resolution": "0.34.1-feature.SSISDK.82.linkedVP.326+2b4ebda9",
+    "@sphereon/ssi-sdk.credential-store": "0.34.1-feature.SSISDK.82.linkedVP.326+2b4ebda9",
+    "@sphereon/ssi-sdk.credential-vcdm": "0.34.1-feature.SSISDK.82.linkedVP.326+2b4ebda9",
+    "@sphereon/ssi-sdk.data-store": "0.34.1-feature.SSISDK.82.linkedVP.326+2b4ebda9",
+    "@sphereon/ssi-sdk.data-store-types": "0.34.1-feature.SSISDK.82.linkedVP.326+2b4ebda9",
+    "@sphereon/ssi-sdk.sd-jwt": "0.34.1-feature.SSISDK.82.linkedVP.326+2b4ebda9",
+    "@sphereon/ssi-types": "0.34.1-feature.SSISDK.82.linkedVP.326+2b4ebda9",
     "@veramo/utils": "4.2.0",
     "cross-fetch": "^4.1.0",
     "dcql": "1.0.1",
@@ -41,10 +42,10 @@
     "uint8arrays": "3.1.1"
   },
   "devDependencies": {
-    "@sphereon/ssi-sdk-ext.key-manager": "0.34.1-feature.SSISDK.82.linkedVP.325+9de5d4ff",
-    "@sphereon/ssi-sdk-ext.kms-local": "0.34.1-feature.SSISDK.82.linkedVP.325+9de5d4ff",
-    "@sphereon/ssi-sdk.agent-config": "0.34.1-feature.SSISDK.82.linkedVP.325+9de5d4ff",
-    "@sphereon/ssi-sdk.credential-vcdm1-jwt-provider": "0.34.1-feature.SSISDK.82.linkedVP.325+9de5d4ff",
+    "@sphereon/ssi-sdk-ext.key-manager": "0.34.1-feature.SSISDK.82.linkedVP.326+2b4ebda9",
+    "@sphereon/ssi-sdk-ext.kms-local": "0.34.1-feature.SSISDK.82.linkedVP.326+2b4ebda9",
+    "@sphereon/ssi-sdk.agent-config": "0.34.1-feature.SSISDK.82.linkedVP.326+2b4ebda9",
+    "@sphereon/ssi-sdk.credential-vcdm1-jwt-provider": "0.34.1-feature.SSISDK.82.linkedVP.326+2b4ebda9",
     "@veramo/data-store": "4.2.0",
     "@veramo/did-manager": "4.2.0",
     "@veramo/did-provider-web": "4.2.0",
@@ -76,5 +77,5 @@
     "Presentation Defintion Manager",
     "PD Manager"
   ],
-  "gitHead": "9de5d4ff0d17685351d63a9685ec853f6add2d6c"
+  "gitHead": "2b4ebda97cd73ad5b73555cb8bb9d087f0d98395"
 }

package/src/agent/LinkedVPManager.ts

@@ -144,9 +144,12 @@ export class LinkedVPManager implements IAgentPlugin {
     if (uniqueCredentials.length === 0) {
       return Promise.reject(Error(`No published credentials found for linkedVpId ${linkedVpId}`))
     }
+    if (uniqueCredentials.length > 1) {
+      return Promise.reject(Error(`Multiple credentials found for linkedVpId ${linkedVpId}`))
+    }
 
     // Generate the Verifiable Presentation with all published credentials
-    return createLinkedVPPresentation(holderDid, uniqueCredentials, context.agent)
+    return createLinkedVPPresentation(holderDid, uniqueCredentials[0], context.agent)
   }
 
   private getHolderDid(tenantId: string | undefined) {

package/src/services/LinkedVPService.ts

@@ -1,10 +1,18 @@
 import { UniqueDigitalCredential } from '@sphereon/ssi-sdk.credential-store'
-import { Loggers, OriginalVerifiableCredential, WrappedVerifiableCredential } from '@sphereon/ssi-types'
-import type { PresentationPayload } from '@veramo/core'
-import { W3CVerifiableCredential } from '@veramo/core/src/types/vc-data-model'
+import { calculateSdHash, defaultGenerateDigest, PartialSdJwtKbJwt } from '@sphereon/ssi-sdk.sd-jwt'
+
+import {
+  CredentialMapper,
+  DocumentFormat,
+  Loggers,
+  OriginalVerifiableCredential,
+  SdJwtDecodedVerifiableCredential,
+  WrappedVerifiableCredential,
+} from '@sphereon/ssi-types'
 import { LOGGER_NAMESPACE, RequiredContext } from '../types'
 
 const logger = Loggers.DEFAULT.get(LOGGER_NAMESPACE)
+const CLOCK_SKEW = 120 // TODO make adjustable?
 
 /**
  * Extracts the original credential from various wrapper types
@@ -38,47 +46,92 @@ function extractOriginalCredential(
  */
 export async function createLinkedVPPresentation(
   holderDid: string,
-  credentials: UniqueDigitalCredential[],
+  credential: UniqueDigitalCredential,
   agent: RequiredContext['agent'],
 ): Promise<string | Record<string, any>> {
-  if (credentials.length === 0) {
-    return Promise.reject(Error('Cannot create LinkedVP presentation with zero credentials'))
-  }
-
-  logger.debug(`Creating LinkedVP presentation for ${holderDid} with ${credentials.length} credentials`)
+  logger.debug(`Creating LinkedVP presentation for ${holderDid} of credential ${credential.id}`)
 
   const identifier = await agent.identifierManagedGet({ identifier: holderDid })
+  const originalCredential = extractOriginalCredential(credential)
+  const documentFormat = CredentialMapper.detectDocumentType(originalCredential)
+  switch (documentFormat) {
+    case DocumentFormat.SD_JWT_VC: {
+      // SD-JWT with KB-JWT
+      const decodedSdJwt = await CredentialMapper.decodeSdJwtVcAsync(
+        typeof originalCredential === 'string' ? originalCredential : (originalCredential as SdJwtDecodedVerifiableCredential).compactSdJwtVc,
+        defaultGenerateDigest,
+      )
 
-  // Extract and prepare credentials
-  const verifiableCredentials = credentials.map((credential) => {
-    const original = extractOriginalCredential(credential)
-    // Keep as-is if string (JWT), otherwise convert to object
-    return typeof original === 'string' ? original : original
-  })
-
-  // Create VP structure
-  const vpObject: PresentationPayload = {
-    '@context': ['https://www.w3.org/2018/credentials/v1'],
-    type: ['VerifiablePresentation'],
-    holder: holderDid,
-    verifiableCredential: verifiableCredentials as W3CVerifiableCredential[],
-  }
+      const hashAlg = decodedSdJwt.signedPayload._sd_alg ?? 'sha-256'
+      const sdHash = calculateSdHash(decodedSdJwt.compactSdJwtVc, hashAlg, defaultGenerateDigest)
+      const kbJwtPayload: PartialSdJwtKbJwt['payload'] = {
+        iat: Math.floor(Date.now() / 1000 - CLOCK_SKEW),
+        sd_hash: sdHash,
+      }
 
-  // Create and sign the VP as JWT
-  const result = await agent.createVerifiablePresentation({
-    presentation: vpObject,
-    proofFormat: 'jwt',
-    keyRef: identifier.kmsKeyRef || identifier.kid,
-  })
+      const presentationResult = await agent.createSdJwtPresentation({
+        presentation: decodedSdJwt.compactSdJwtVc,
+        kb: {
+          payload: kbJwtPayload as any, // FIXME?
+        },
+      })
 
-  // Extract JWT from result
-  if (typeof result === 'string') {
-    return result
-  }
+      return presentationResult.presentation
+    }
+    case DocumentFormat.JSONLD: {
+      // JSON-LD VC - create JSON-LD VP with challenge and domain in proof
+      const vcObject = typeof originalCredential === 'string' ? JSON.parse(originalCredential) : originalCredential
 
-  if (result.proof && 'jws' in result.proof) {
-    return result.proof.jws
-  }
+      const vpObject = {
+        '@context': ['https://www.w3.org/2018/credentials/v1'],
+        type: ['VerifiablePresentation'],
+        verifiableCredential: [vcObject],
+        holder: holderDid,
+      }
 
-  return Promise.reject(Error('Failed to create JWT VP - no JWT in result'))
+      // Create JSON-LD VP with proof
+      return await agent.createVerifiablePresentation({
+        presentation: vpObject,
+        proofFormat: 'lds',
+        keyRef: identifier.kmsKeyRef || identifier.kid,
+      })
+    }
+    case DocumentFormat.MSO_MDOC: {
+      // ISO mdoc - create mdoc VP token
+      // This is a placeholder implementation
+      // Full implementation would require:
+      // 1. Decode the mdoc using CredentialMapper or mdoc utilities
+      // 2. Build proper mdoc VP token with session transcript
+      // 3. Include nonce/audience in the session transcript
+      logger.warning('mso_mdoc format has basic support - production use requires proper mdoc VP token implementation')
+
+      return originalCredential
+    }
+    default: {
+      // JWT VC - create JWT VP with nonce and aud in payload
+      const vcJwt = typeof originalCredential === 'string' ? originalCredential : JSON.stringify(originalCredential)
+
+      // Create VP JWT using agent method
+      const vpPayload = {
+        iss: holderDid,
+        vp: {
+          '@context': ['https://www.w3.org/2018/credentials/v1'],
+          type: ['VerifiablePresentation'],
+          holder: holderDid,
+          verifiableCredential: [vcJwt],
+        },
+        iat: Math.floor(Date.now() / 1000 - CLOCK_SKEW),
+        exp: Math.floor(Date.now() / 1000 + 600 + CLOCK_SKEW), // 10 minutes
+      }
+
+      // Use the agent's JWT creation capability
+      const vpJwt = await agent.createVerifiablePresentation({
+        presentation: vpPayload.vp,
+        proofFormat: 'jwt',
+        keyRef: identifier.kmsKeyRef || identifier.kid,
+      })
+
+      return (vpJwt.proof && 'jwt' in vpJwt.proof && vpJwt.proof.jwt) || vpJwt
+    }
+  }
 }

package/src/types/ILinkedVPManager.ts

@@ -1,6 +1,7 @@
 import { IIdentifierResolution } from '@sphereon/ssi-sdk-ext.identifier-resolution'
 import { ICredentialStore } from '@sphereon/ssi-sdk.credential-store'
 import { VcdmCredentialPlugin } from '@sphereon/ssi-sdk.credential-vcdm'
+import { ISDJwtPlugin } from '@sphereon/ssi-sdk.sd-jwt'
 import { IAgentContext, IPluginMethodMap } from '@veramo/core'
 import { IKeyManager } from '@veramo/core/src/types/IKeyManager'
 
@@ -82,4 +83,4 @@ export type LinkedVPServiceEntry = {
   serviceEndpoint: string
 }
 
-export type RequiredContext = IAgentContext<IIdentifierResolution & ICredentialStore & IKeyManager & VcdmCredentialPlugin>
+export type RequiredContext = IAgentContext<IIdentifierResolution & ICredentialStore & IKeyManager & VcdmCredentialPlugin & ISDJwtPlugin>