@sphereon/ssi-sdk.presentation-exchange 0.29.0 → 0.29.1-next.104

package/dist/functions.d.ts

@@ -1,9 +1,9 @@
-import { IIdentifierOpts } from '@sphereon/ssi-sdk-ext.did-utils';
-import { IPEXPresentationSignCallback, IRequiredContext } from './types/IPresentationExchange';
-import { ProofFormat } from '@veramo/core';
 import { Format } from '@sphereon/pex-models';
+import { ManagedIdentifierOpts } from '@sphereon/ssi-sdk-ext.identifier-resolution';
+import { ProofFormat } from '@veramo/core';
+import { IPEXPresentationSignCallback, IRequiredContext } from './types/IPresentationExchange';
 export declare function createPEXPresentationSignCallback(args: {
-    idOpts: IIdentifierOpts;
+    idOpts: ManagedIdentifierOpts;
     fetchRemoteContexts?: boolean;
     skipDidResolution?: boolean;
     format?: Format | ProofFormat;

package/dist/functions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"functions.d.ts","sourceRoot":"","sources":["../src/functions.ts"],"names":[],"mappings":"AAAA,OAAO,EAA6E,eAAe,EAAE,MAAM,iCAAiC,CAAA;AAE5I,OAAO,EAAE,4BAA4B,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAA;AAE9F,OAAO,EAA6B,WAAW,EAAE,MAAM,cAAc,CAAA;AAErE,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAE7C,wBAAsB,iCAAiC,CACrD,IAAI,EAAE;IACJ,MAAM,EAAE,eAAe,CAAA;IACvB,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,WAAW,CAAA;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,EACD,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,4BAA4B,CAAC,CAgJvC"}
+{"version":3,"file":"functions.d.ts","sourceRoot":"","sources":["../src/functions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAIL,qBAAqB,EACtB,MAAM,6CAA6C,CAAA;AAQpD,OAAO,EAAuB,WAAW,EAAE,MAAM,cAAc,CAAA;AAC/D,OAAO,EAAE,4BAA4B,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAA;AAE9F,wBAAsB,iCAAiC,CACrD,IAAI,EAAE;IACJ,MAAM,EAAE,qBAAqB,CAAA;IAC7B,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,WAAW,CAAA;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,EACD,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,4BAA4B,CAAC,CAyJvC"}

package/dist/functions.js

@@ -10,130 +10,123 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createPEXPresentationSignCallback = void 0;
-const ssi_sdk_ext_did_utils_1 = require("@sphereon/ssi-sdk-ext.did-utils");
+const ssi_sdk_ext_identifier_resolution_1 = require("@sphereon/ssi-sdk-ext.identifier-resolution");
 const ssi_types_1 = require("@sphereon/ssi-types");
 function createPEXPresentationSignCallback(args, context) {
     return __awaiter(this, void 0, void 0, function* () {
-        function determineProofFormat({ format, presentationDefinition, }) {
-            var _a;
-            let proofFormat = 'jwt';
-            const formatOptions = (_a = format !== null && format !== void 0 ? format : args.format) !== null && _a !== void 0 ? _a : presentationDefinition.format;
-            if (formatOptions) {
-                if (typeof formatOptions === 'object') {
-                    const formats = Object.keys(formatOptions).map((form) => (form.includes('ldp') ? 'lds' : 'jwt'));
-                    if (!formats.includes('jwt')) {
-                        proofFormat = 'lds';
-                    }
-                }
-                else {
-                    proofFormat = formatOptions;
-                }
+        function determineProofFormat(args) {
+            const { format, presentationDefinition } = args;
+            // All format arguments are optional. So if no format has been given we go for SD-JWT
+            const formatOptions = format !== null && format !== void 0 ? format : presentationDefinition.format;
+            if (!formatOptions) {
+                return 'vc+sd-jwt';
             }
-            return proofFormat;
-        }
-        return (_a) => __awaiter(this, [_a], void 0, function* ({ presentation, domain, presentationDefinition, format, challenge, }) {
-            var _b, _c, _d, _e, _f, _g;
-            const idOpts = args.idOpts;
-            const id = yield (0, ssi_sdk_ext_did_utils_1.getIdentifier)(idOpts, context);
-            if (typeof idOpts.identifier === 'string') {
-                idOpts.identifier = id;
+            else if (typeof formatOptions === 'string') {
+                // if formatOptions is a singular string we can return that as the format
+                return formatOptions;
             }
-            if (!presentation.holder) {
-                presentation.holder = id.did;
+            // here we transform all format options to either lds or jwt. but we also want to support sd-jwt, so we need to specifically check for this one. which is ['vc+sd-jwt']
+            const formats = new Set(Object.keys(formatOptions).map((form) => (form.includes('ldp') ? 'lds' : form.includes('vc+sd-jwt') ? 'vc+sd-jwt' : 'jwt')));
+            // if we only have 1 format type we can return that
+            if (formats.size === 1) {
+                return formats.values().next().value;
             }
-            let key;
-            if (args.skipDidResolution) {
-                if (!idOpts.kmsKeyRef) {
-                    key = id.keys.find((key) => { var _a, _b, _c; return ((_b = (_a = key.meta) === null || _a === void 0 ? void 0 : _a.purpose) === null || _b === void 0 ? void 0 : _b.includes((_c = idOpts.verificationMethodSection) !== null && _c !== void 0 ? _c : 'authentication')) === true; });
-                }
-                if (!key) {
-                    key = id.keys.find((key) => {
-                        var _a;
-                        return !idOpts.kmsKeyRef ||
-                            key.kid === idOpts.kmsKeyRef ||
-                            ((_a = key.meta) === null || _a === void 0 ? void 0 : _a.jwkThumbprint) === idOpts.kmsKeyRef ||
-                            `${id.did}#${key.kid}` === idOpts.kmsKeyRef;
-                    });
-                }
+            // if we can go for sd-jwt, we go for sd-jwt
+            if (formats.has('vc+sd-jwt')) {
+                return 'vc+sd-jwt';
             }
-            else {
-                key = yield (0, ssi_sdk_ext_did_utils_1.getKey)({ identifier: id, vmRelationship: 'authentication', kmsKeyRef: idOpts.kmsKeyRef }, context);
+            // if it is not sd-jwt we would like to go for jwt
+            else if (formats.has('jwt')) {
+                return 'jwt';
             }
-            if (!key) {
-                throw Error(`Could not determine key to use ${JSON.stringify(idOpts)}`);
+            // else we go for lds
+            return 'lds';
+        }
+        return (_a) => __awaiter(this, [_a], void 0, function* ({ presentation, domain, presentationDefinition, format, challenge, }) {
+            var _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m;
+            const proofFormat = determineProofFormat({ format, presentationDefinition });
+            const { idOpts } = args;
+            const CLOCK_SKEW = 120;
+            if (args.skipDidResolution && (0, ssi_sdk_ext_identifier_resolution_1.isManagedIdentifierDidOpts)(idOpts)) {
+                idOpts.offlineWhenNoDIDRegistered = true;
             }
-            let vm = undefined;
-            if (args.skipDidResolution !== true) {
-                const didResolution = yield (0, ssi_sdk_ext_did_utils_1.getAgentResolver)(context).resolve(idOpts.identifier.did);
-                const vms = yield (0, ssi_sdk_ext_did_utils_1.dereferenceDidKeysWithJwkSupport)(didResolution.didDocument, (_b = idOpts.verificationMethodSection) !== null && _b !== void 0 ? _b : 'authentication', context);
-                vm = vms.find((vm) => vm.publicKeyHex === key.publicKeyHex);
-                if (!vm) {
-                    throw Error(`Could not resolve DID document or match signing key to did ${idOpts.identifier.did}`);
+            const resolution = yield context.agent.identifierManagedGet(idOpts);
+            if ('compactSdJwtVc' in presentation) {
+                if (proofFormat !== 'vc+sd-jwt') {
+                    return Promise.reject(Error(`presentation payload does not match proof format ${proofFormat}`));
                 }
+                const presentationResult = yield context.agent.createSdJwtPresentation({
+                    presentation: presentation.compactSdJwtVc,
+                    kb: {
+                        payload: Object.assign(Object.assign({}, (_b = presentation.kbJwt) === null || _b === void 0 ? void 0 : _b.payload), { iat: (_e = (_d = (_c = presentation.kbJwt) === null || _c === void 0 ? void 0 : _c.payload) === null || _d === void 0 ? void 0 : _d.iat) !== null && _e !== void 0 ? _e : Math.floor(Date.now() / 1000 - CLOCK_SKEW), nonce: challenge !== null && challenge !== void 0 ? challenge : (_g = (_f = presentation.kbJwt) === null || _f === void 0 ? void 0 : _f.payload) === null || _g === void 0 ? void 0 : _g.nonce, aud: (_k = (_j = (_h = presentation.kbJwt) === null || _h === void 0 ? void 0 : _h.payload) === null || _j === void 0 ? void 0 : _j.aud) !== null && _k !== void 0 ? _k : resolution.issuer }),
+                    },
+                });
+                return ssi_types_1.CredentialMapper.storedPresentationToOriginalFormat(presentationResult.presentation);
             }
-            const proofFormat = determineProofFormat({ format, presentationDefinition });
-            let header;
-            if (!presentation.holder) {
-                presentation.holder = id.did;
-            }
-            const kid = (_e = (_c = vm === null || vm === void 0 ? void 0 : vm.id) !== null && _c !== void 0 ? _c : (_d = key.meta) === null || _d === void 0 ? void 0 : _d.jwkThumbprint) !== null && _e !== void 0 ? _e : key.kid;
-            if (proofFormat === 'jwt') {
-                header = {
-                    kid: kid.includes('#') ? kid : `${id.did}#${kid}`,
-                };
-                if (presentation.verifier || !presentation.aud) {
-                    presentation.aud = Array.isArray(presentation.verifier) ? presentation.verifier : ((_g = (_f = presentation.verifier) !== null && _f !== void 0 ? _f : domain) !== null && _g !== void 0 ? _g : args.domain);
-                    delete presentation.verifier;
+            else {
+                if (proofFormat === 'vc+sd-jwt') {
+                    return Promise.reject(Error(`presentation payload does not match proof format ${proofFormat}`));
+                }
+                let header;
+                if (!presentation.holder) {
+                    presentation.holder = resolution.issuer;
                 }
-                if (!presentation.nbf) {
-                    if (presentation.issuanceDate) {
-                        const converted = Date.parse(presentation.issuanceDate);
-                        if (!isNaN(converted)) {
-                            presentation.nbf = Math.floor(converted / 1000);
+                if (proofFormat === 'jwt') {
+                    header = Object.assign(Object.assign({}, (((0, ssi_sdk_ext_identifier_resolution_1.isManagedIdentifierDidResult)(resolution) || (0, ssi_sdk_ext_identifier_resolution_1.isManagedIdentifierX5cResult)(resolution)) && resolution.kid && { kid: resolution.kid })), ((0, ssi_sdk_ext_identifier_resolution_1.isManagedIdentifierX5cResult)(resolution) && { jwk: resolution.jwk }));
+                    if (presentation.verifier || !presentation.aud) {
+                        presentation.aud = Array.isArray(presentation.verifier) ? presentation.verifier : ((_m = (_l = presentation.verifier) !== null && _l !== void 0 ? _l : domain) !== null && _m !== void 0 ? _m : args.domain);
+                        delete presentation.verifier;
+                    }
+                    if (!presentation.nbf) {
+                        if (presentation.issuanceDate) {
+                            const converted = Date.parse(presentation.issuanceDate);
+                            if (!isNaN(converted)) {
+                                presentation.nbf = Math.floor(converted / 1000); // no skew here, as an explicit value was given
+                            }
+                        }
+                        else {
+                            presentation.nbf = Math.floor(Date.now() / 1000 - CLOCK_SKEW);
                         }
                     }
-                    else {
-                        presentation.nbf = Math.floor(Date.now() / 1000 - 120);
+                    if (!presentation.iat) {
+                        presentation.iat = presentation.nbf;
                     }
-                }
-                if (!presentation.iat) {
-                    presentation.iat = presentation.nbf;
-                }
-                if (!presentation.exp) {
-                    if (presentation.expirationDate) {
-                        const converted = Date.parse(presentation.expirationDate);
-                        if (!isNaN(converted)) {
-                            presentation.exp = Math.floor(converted / 1000);
+                    if (!presentation.exp) {
+                        if (presentation.expirationDate) {
+                            const converted = Date.parse(presentation.expirationDate);
+                            if (!isNaN(converted)) {
+                                presentation.exp = Math.floor(converted / 1000); // no skew here as an explicit value w as given
+                            }
+                        }
+                        else {
+                            presentation.exp = presentation.nbf + 600 + CLOCK_SKEW;
                         }
                     }
-                    else {
-                        presentation.exp = presentation.nbf + 600 + 120;
+                    if (!presentation.vp) {
+                        presentation.vp = {};
+                    }
+                    /*if (!presentation.sub) {
+                      presentation.sub = id.did
+                    }*/
+                    if (!presentation.vp.holder) {
+                        presentation.vp.holder = presentation.holder;
                     }
                 }
-                if (!presentation.vp) {
-                    presentation.vp = {};
-                }
-                if (!presentation.sub) {
-                    presentation.sub = id.did;
-                }
-                if (!presentation.vp.holder) {
-                    presentation.vp.holder = id.did;
-                }
+                // we ignore the alg / proof_format for now, as we already have the kid anyway at this point
+                // todo: look for jwt_vc_json and remove types and @context
+                const vp = yield context.agent.createVerifiablePresentation({
+                    presentation: presentation,
+                    removeOriginalFields: false,
+                    keyRef: resolution.kmsKeyRef,
+                    // domain: domain ?? args.domain, // handled above, and did-jwt-vc creates an array even for 1 entry
+                    challenge: challenge !== null && challenge !== void 0 ? challenge : args.challenge,
+                    fetchRemoteContexts: args.fetchRemoteContexts !== false,
+                    proofFormat: proofFormat,
+                    header,
+                });
+                // makes sure we extract an actual JWT from the internal representation in case it is a JWT
+                return ssi_types_1.CredentialMapper.storedPresentationToOriginalFormat(vp);
             }
-            // we ignore the alg / proof_format for now, as we already have the kid anyway at this point
-            // todo: look for jwt_vc_json and remove types and @context
-            const vp = yield context.agent.createVerifiablePresentation({
-                presentation: presentation,
-                removeOriginalFields: false,
-                keyRef: key.kid,
-                // domain: domain ?? args.domain, // handled above, and did-jwt-vc creates an array even for 1 entry
-                challenge: challenge !== null && challenge !== void 0 ? challenge : args.challenge,
-                fetchRemoteContexts: args.fetchRemoteContexts !== false,
-                proofFormat,
-                header,
-            });
-            // makes sure we extract an actual JWT from the internal representation in case it is a JWT
-            return ssi_types_1.CredentialMapper.storedPresentationToOriginalFormat(vp);
         });
     });
 }

package/dist/functions.js.map

@@ -1 +1 @@
-{"version":3,"file":"functions.js","sourceRoot":"","sources":["../src/functions.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2EAA4I;AAK5I,mDAA2H;AAG3H,SAAsB,iCAAiC,CACrD,IAOC,EACD,OAAyB;;QAEzB,SAAS,oBAAoB,CAAC,EAC5B,MAAM,EACN,sBAAsB,GAIvB;;YACC,IAAI,WAAW,GAAgB,KAAK,CAAA;YACpC,MAAM,aAAa,GAAG,MAAA,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,IAAI,CAAC,MAAM,mCAAI,sBAAsB,CAAC,MAAM,CAAA;YAC5E,IAAI,aAAa,EAAE,CAAC;gBAClB,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;oBACtC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;oBAChG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC7B,WAAW,GAAG,KAAK,CAAA;oBACrB,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,WAAW,GAAG,aAAa,CAAA;gBAC7B,CAAC;YACH,CAAC;YACD,OAAO,WAAW,CAAA;QACpB,CAAC;QAED,OAAO,KAYgC,EAAE,0CAZ3B,EACZ,YAAY,EACZ,MAAM,EACN,sBAAsB,EACtB,MAAM,EACN,SAAS,GAOV;;YACC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;YAC1B,MAAM,EAAE,GAAG,MAAM,IAAA,qCAAa,EAAC,MAAM,EAAE,OAAO,CAAC,CAAA;YAC/C,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;gBAC1C,MAAM,CAAC,UAAU,GAAG,EAAE,CAAA;YACxB,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;gBACzB,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,GAAG,CAAA;YAC9B,CAAC;YACD,IAAI,GAAqB,CAAA;YAEzB,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBAC3B,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;oBACtB,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,mBAAC,OAAA,CAAA,MAAA,MAAA,GAAG,CAAC,IAAI,0CAAE,OAAO,0CAAE,QAAQ,CAAC,MAAA,MAAM,CAAC,yBAAyB,mCAAI,gBAAgB,CAAC,MAAK,IAAI,CAAA,EAAA,CAAC,CAAA;gBACzH,CAAC;gBACD,IAAI,CAAC,GAAG,EAAE,CAAC;oBACT,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAChB,CAAC,GAAG,EAAE,EAAE;;wBACN,OAAA,CAAC,MAAM,CAAC,SAAS;4BACjB,GAAG,CAAC,GAAG,KAAK,MAAM,CAAC,SAAS;4BAC5B,CAAA,MAAA,GAAG,CAAC,IAAI,0CAAE,aAAa,MAAK,MAAM,CAAC,SAAS;4BAC5C,GAAG,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,KAAK,MAAM,CAAC,SAAS,CAAA;qBAAA,CAC9C,CAAA;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,GAAG,GAAG,MAAM,IAAA,8BAAM,EAAC,EAAE,UAAU,EAAE,EAAE,EAAE,cAAc,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,EAAE,OAAO,CAAC,CAAA;YAChH,CAAC;YAED,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,KAAK,CAAC,kCAAkC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YACzE,CAAC;YACD,IAAI,EAAE,GAA8C,SAAS,CAAA;YAC7D,IAAI,IAAI,CAAC,iBAAiB,KAAK,IAAI,EAAE,CAAC;gBACpC,MAAM,aAAa,GAAG,MAAM,IAAA,wCAAgB,EAAC,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;gBACpF,MAAM,GAAG,GAAG,MAAM,IAAA,wDAAgC,EAAC,aAAa,CAAC,WAAY,EAAE,MAAA,MAAM,CAAC,yBAAyB,mCAAI,gBAAgB,EAAE,OAAO,CAAC,CAAA;gBAC7I,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,YAAY,KAAK,GAAG,CAAC,YAAY,CAAC,CAAA;gBAC3D,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,MAAM,KAAK,CAAC,8DAA8D,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,CAAA;gBACpG,CAAC;YACH,CAAC;YAED,MAAM,WAAW,GAAG,oBAAoB,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAA;YAC5E,IAAI,MAAM,CAAA;YACV,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;gBACzB,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,GAAG,CAAA;YAC9B,CAAC;YACD,MAAM,GAAG,GAAG,MAAA,MAAA,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,EAAE,mCAAI,MAAA,GAAG,CAAC,IAAI,0CAAE,aAAa,mCAAI,GAAG,CAAC,GAAG,CAAA;YACxD,IAAI,WAAW,KAAK,KAAK,EAAE,CAAC;gBAC1B,MAAM,GAAG;oBACP,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,GAAG,EAAE;iBAClD,CAAA;gBACD,IAAI,YAAY,CAAC,QAAQ,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC;oBAC/C,YAAY,CAAC,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAA,MAAA,YAAY,CAAC,QAAQ,mCAAI,MAAM,mCAAI,IAAI,CAAC,MAAM,CAAC,CAAA;oBAClI,OAAO,YAAY,CAAC,QAAQ,CAAA;gBAC9B,CAAC;gBACD,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC;oBACtB,IAAI,YAAY,CAAC,YAAY,EAAE,CAAC;wBAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,CAAA;wBACvD,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;4BACtB,YAAY,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,CAAA;wBACjD,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,YAAY,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,GAAG,CAAC,CAAA;oBACxD,CAAC;gBACH,CAAC;gBAED,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC;oBACtB,YAAY,CAAC,GAAG,GAAG,YAAY,CAAC,GAAG,CAAA;gBACrC,CAAC;gBAED,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC;oBACtB,IAAI,YAAY,CAAC,cAAc,EAAE,CAAC;wBAChC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,cAAc,CAAC,CAAA;wBACzD,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;4BACtB,YAAY,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,CAAA;wBACjD,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,YAAY,CAAC,GAAG,GAAG,YAAY,CAAC,GAAG,GAAG,GAAG,GAAG,GAAG,CAAA;oBACjD,CAAC;gBACH,CAAC;gBAED,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;oBACrB,YAAY,CAAC,EAAE,GAAG,EAAE,CAAA;gBACtB,CAAC;gBACD,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC;oBACtB,YAAY,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,CAAA;gBAC3B,CAAC;gBACD,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;oBAC5B,YAAY,CAAC,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC,GAAG,CAAA;gBACjC,CAAC;YACH,CAAC;YAED,4FAA4F;YAE5F,2DAA2D;YAE3D,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC;gBAC1D,YAAY,EAAE,YAAmC;gBACjD,oBAAoB,EAAE,KAAK;gBAC3B,MAAM,EAAE,GAAG,CAAC,GAAG;gBACf,oGAAoG;gBACpG,SAAS,EAAE,SAAS,aAAT,SAAS,cAAT,SAAS,GAAI,IAAI,CAAC,SAAS;gBACtC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,KAAK,KAAK;gBACvD,WAAW;gBACX,MAAM;aACP,CAAC,CAAA;YACF,2FAA2F;YAC3F,OAAO,4BAAgB,CAAC,kCAAkC,CAAC,EAAoC,CAAC,CAAA;QAClG,CAAC,CAAA,CAAA;IACH,CAAC;CAAA;AA1JD,8EA0JC"}
+{"version":3,"file":"functions.js","sourceRoot":"","sources":["../src/functions.ts"],"names":[],"mappings":";;;;;;;;;;;;AAEA,mGAKoD;AACpD,mDAM4B;AAI5B,SAAsB,iCAAiC,CACrD,IAOC,EACD,OAAyB;;QAEzB,SAAS,oBAAoB,CAAC,IAG7B;YACC,MAAM,EAAE,MAAM,EAAE,sBAAsB,EAAE,GAAG,IAAI,CAAA;YAE/C,qFAAqF;YACrF,MAAM,aAAa,GAAG,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,sBAAsB,CAAC,MAAM,CAAA;YAC7D,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,OAAO,WAAW,CAAA;YACpB,CAAC;iBAAM,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;gBAC7C,yEAAyE;gBACzE,OAAO,aAAa,CAAA;YACtB,CAAC;YAED,uKAAuK;YACvK,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAC5H,CAAA;YAED,mDAAmD;YACnD,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAA;YACtC,CAAC;YAED,4CAA4C;YAC5C,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC7B,OAAO,WAAW,CAAA;YACpB,CAAC;YACD,kDAAkD;iBAC7C,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5B,OAAO,KAAK,CAAA;YACd,CAAC;YAED,qBAAqB;YACrB,OAAO,KAAK,CAAA;QACd,CAAC;QAED,OAAO,KAYgC,EAAE,0CAZ3B,EACZ,YAAY,EACZ,MAAM,EACN,sBAAsB,EACtB,MAAM,EACN,SAAS,GAOV;;YACC,MAAM,WAAW,GAAG,oBAAoB,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAA;YAC5E,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;YACvB,MAAM,UAAU,GAAG,GAAG,CAAA;YACtB,IAAI,IAAI,CAAC,iBAAiB,IAAI,IAAA,8DAA0B,EAAC,MAAM,CAAC,EAAE,CAAC;gBACjE,MAAM,CAAC,0BAA0B,GAAG,IAAI,CAAA;YAC1C,CAAC;YAED,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAA;YAEnE,IAAI,gBAAgB,IAAI,YAAY,EAAE,CAAC;gBACrC,IAAI,WAAW,KAAK,WAAW,EAAE,CAAC;oBAChC,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oDAAoD,WAAW,EAAE,CAAC,CAAC,CAAA;gBACjG,CAAC;gBAED,MAAM,kBAAkB,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC;oBACrE,YAAY,EAAE,YAAY,CAAC,cAAc;oBACzC,EAAE,EAAE;wBACF,OAAO,kCACF,MAAA,YAAY,CAAC,KAAK,0CAAE,OAAO,KAC9B,GAAG,EAAE,MAAA,MAAA,MAAA,YAAY,CAAC,KAAK,0CAAE,OAAO,0CAAE,GAAG,mCAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,UAAU,CAAC,EACnF,KAAK,EAAE,SAAS,aAAT,SAAS,cAAT,SAAS,GAAI,MAAA,MAAA,YAAY,CAAC,KAAK,0CAAE,OAAO,0CAAE,KAAK,EACtD,GAAG,EAAE,MAAA,MAAA,MAAA,YAAY,CAAC,KAAK,0CAAE,OAAO,0CAAE,GAAG,mCAAI,UAAU,CAAC,MAAM,GAC3D;qBACF;iBACF,CAAC,CAAA;gBAEF,OAAO,4BAAgB,CAAC,kCAAkC,CAAC,kBAAkB,CAAC,YAA8C,CAAC,CAAA;YAC/H,CAAC;iBAAM,CAAC;gBACN,IAAI,WAAW,KAAK,WAAW,EAAE,CAAC;oBAChC,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oDAAoD,WAAW,EAAE,CAAC,CAAC,CAAA;gBACjG,CAAC;gBACD,IAAI,MAAM,CAAA;gBACV,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;oBACzB,YAAY,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAA;gBACzC,CAAC;gBACD,IAAI,WAAW,KAAK,KAAK,EAAE,CAAC;oBAC1B,MAAM,mCACD,CAAC,CAAC,IAAA,gEAA4B,EAAC,UAAU,CAAC,IAAI,IAAA,gEAA4B,EAAC,UAAU,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,GACrI,CAAC,IAAA,gEAA4B,EAAC,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,CAAC,CACzE,CAAA;oBACD,IAAI,YAAY,CAAC,QAAQ,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC;wBAC/C,YAAY,CAAC,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAA,MAAA,YAAY,CAAC,QAAQ,mCAAI,MAAM,mCAAI,IAAI,CAAC,MAAM,CAAC,CAAA;wBAClI,OAAO,YAAY,CAAC,QAAQ,CAAA;oBAC9B,CAAC;oBAED,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC;wBACtB,IAAI,YAAY,CAAC,YAAY,EAAE,CAAC;4BAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,CAAA;4BACvD,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gCACtB,YAAY,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,CAAA,CAAC,+CAA+C;4BACjG,CAAC;wBACH,CAAC;6BAAM,CAAC;4BACN,YAAY,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,UAAU,CAAC,CAAA;wBAC/D,CAAC;oBACH,CAAC;oBAED,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC;wBACtB,YAAY,CAAC,GAAG,GAAG,YAAY,CAAC,GAAG,CAAA;oBACrC,CAAC;oBAED,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC;wBACtB,IAAI,YAAY,CAAC,cAAc,EAAE,CAAC;4BAChC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,cAAc,CAAC,CAAA;4BACzD,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gCACtB,YAAY,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,CAAA,CAAC,+CAA+C;4BACjG,CAAC;wBACH,CAAC;6BAAM,CAAC;4BACN,YAAY,CAAC,GAAG,GAAG,YAAY,CAAC,GAAG,GAAG,GAAG,GAAG,UAAU,CAAA;wBACxD,CAAC;oBACH,CAAC;oBAED,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;wBACrB,YAAY,CAAC,EAAE,GAAG,EAAE,CAAA;oBACtB,CAAC;oBACD;;uBAEG;oBACH,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;wBAC5B,YAAY,CAAC,EAAE,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAA;oBAC9C,CAAC;gBACH,CAAC;gBAED,4FAA4F;gBAE5F,2DAA2D;gBAE3D,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,4BAA4B,CAAC;oBAC1D,YAAY,EAAE,YAAmC;oBACjD,oBAAoB,EAAE,KAAK;oBAC3B,MAAM,EAAE,UAAU,CAAC,SAAS;oBAC5B,oGAAoG;oBACpG,SAAS,EAAE,SAAS,aAAT,SAAS,cAAT,SAAS,GAAI,IAAI,CAAC,SAAS;oBACtC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,KAAK,KAAK;oBACvD,WAAW,EAAE,WAA0B;oBACvC,MAAM;iBACP,CAAC,CAAA;gBAEF,2FAA2F;gBAC3F,OAAO,4BAAgB,CAAC,kCAAkC,CAAC,EAAoC,CAAC,CAAA;YAClG,CAAC;QACH,CAAC,CAAA,CAAA;IACH,CAAC;CAAA;AAnKD,8EAmKC"}

package/dist/types/IPresentationExchange.d.ts

@@ -1,9 +1,10 @@
+import { IIdentifierResolution } from '@sphereon/ssi-sdk-ext.identifier-resolution';
 import { IAgentContext, ICredentialPlugin, IDataStoreORM, IDIDManager, IIdentifier, IPluginMethodMap, IResolver, PresentationPayload } from '@veramo/core';
-import { IPresentation, Optional, W3CVerifiableCredential, W3CVerifiablePresentation } from '@sphereon/ssi-types';
+import { IPresentation, Optional, SdJwtDecodedVerifiableCredential, W3CVerifiableCredential, W3CVerifiablePresentation } from '@sphereon/ssi-types';
 import { IPresentationDefinition, PEVersion, SelectResults } from '@sphereon/pex';
 import { Format, InputDescriptorV1, InputDescriptorV2 } from '@sphereon/pex-models';
-import { ICredentialStore } from '@sphereon/ssi-sdk.credential-store';
 import { CredentialRole, FindDigitalCredentialArgs } from '@sphereon/ssi-sdk.data-store';
+import { ISDJwtPlugin } from '@sphereon/ssi-sdk.sd-jwt';
 export interface IPresentationExchange extends IPluginMethodMap {
     pexValidateDefinition(args: IDefinitionValidateArgs): Promise<boolean>;
     pexDefinitionVersion(presentationDefinition: IPresentationDefinition): Promise<VersionDiscoveryResult>;
@@ -47,8 +48,8 @@ export interface VersionDiscoveryResult {
 }
 export type IPEXPresentationSignCallback = (args: IPEXPresentationSignCallBackParams) => Promise<W3CVerifiablePresentation>;
 export interface IPEXPresentationSignCallBackParams {
-    presentation: IPresentation | Optional<PresentationPayload, 'holder'>;
+    presentation: IPresentation | Optional<PresentationPayload, 'holder'> | SdJwtDecodedVerifiableCredential;
     presentationDefinition: IPresentationDefinition;
 }
-export type IRequiredContext = IAgentContext<IDataStoreORM & IResolver & IDIDManager & ICredentialPlugin & ICredentialStore>;
+export type IRequiredContext = IAgentContext<IDataStoreORM & IResolver & IDIDManager & IIdentifierResolution & ICredentialPlugin & ISDJwtPlugin>;
 //# sourceMappingURL=IPresentationExchange.d.ts.map

package/dist/types/IPresentationExchange.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"IPresentationExchange.d.ts","sourceRoot":"","sources":["../../src/types/IPresentationExchange.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,WAAW,EACX,WAAW,EACX,gBAAgB,EAChB,SAAS,EACT,mBAAmB,EACpB,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAA;AACjH,OAAO,EAAE,uBAAuB,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AACjF,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AACnF,OAAO,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAA;AACrE,OAAO,EAAE,cAAc,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAA;AAExF,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;IAC7D,qBAAqB,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAEtE,oBAAoB,CAAC,sBAAsB,EAAE,uBAAuB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAA;IAEtG,8BAA8B,CAAC,IAAI,EAAE,+BAA+B,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAE3H,gDAAgD,CAC9C,IAAI,EAAE,+BAA+B,EACrC,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,mCAAmC,EAAE,CAAC,CAAA;CAClD;AAED,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,uBAAuB,CAAA;CACpC;AAED,MAAM,WAAW,+BAA+B;IAC9C,sBAAsB,EAAE,uBAAuB,CAAA;IAC/C,oBAAoB,EAAE;QACpB,cAAc,EAAE,cAAc,CAAA;QAC9B,qBAAqB,CAAC,EAAE,uBAAuB,EAAE,CAAA;QACjD,MAAM,CAAC,EAAE,yBAAyB,CAAA;KACnC,CAAA;IACD,UAAU,CAAC,EAAE,CAAC,MAAM,GAAG,WAAW,CAAC,EAAE,CAAA;IACrC,8BAA8B,CAAC,EAAE,MAAM,EAAE,CAAA;IACzC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;CAChC;AAED,MAAM,WAAW,OAAO;IACtB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,WAAW;IAE1B,UAAU,CAAC,EAAE,uBAAuB,CAAA;IACpC,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,mCAAoC,SAAQ,gBAAgB;IAC3E,eAAe,EAAE,iBAAiB,GAAG,iBAAiB,CAAA;CACvD;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAA;IACV,aAAa,EAAE,aAAa,CAAA;IAC5B,mBAAmB,EAAE,uBAAuB,EAAE,CAAA;CAC/C;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,CAAC,EAAE,SAAS,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,MAAM,4BAA4B,GAAG,CAAC,IAAI,EAAE,kCAAkC,KAAK,OAAO,CAAC,yBAAyB,CAAC,CAAA;AAE3H,MAAM,WAAW,kCAAkC;IACjD,YAAY,EAAE,aAAa,GAAG,QAAQ,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAA;IACrE,sBAAsB,EAAE,uBAAuB,CAAA;CAChD;AAED,MAAM,MAAM,gBAAgB,GAAG,aAAa,CAAC,aAAa,GAAG,SAAS,GAAG,WAAW,GAAG,iBAAiB,GAAG,gBAAgB,CAAC,CAAA"}
+{"version":3,"file":"IPresentationExchange.d.ts","sourceRoot":"","sources":["../../src/types/IPresentationExchange.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAA;AACnF,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,WAAW,EACX,WAAW,EACX,gBAAgB,EAChB,SAAS,EACT,mBAAmB,EACpB,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,gCAAgC,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAA;AACnJ,OAAO,EAAE,uBAAuB,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AACjF,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AACnF,OAAO,EAAE,cAAc,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAA;AACxF,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAA;AAEvD,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;IAC7D,qBAAqB,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAEtE,oBAAoB,CAAC,sBAAsB,EAAE,uBAAuB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAA;IAEtG,8BAA8B,CAAC,IAAI,EAAE,+BAA+B,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAE3H,gDAAgD,CAC9C,IAAI,EAAE,+BAA+B,EACrC,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,mCAAmC,EAAE,CAAC,CAAA;CAClD;AAED,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,uBAAuB,CAAA;CACpC;AAED,MAAM,WAAW,+BAA+B;IAC9C,sBAAsB,EAAE,uBAAuB,CAAA;IAC/C,oBAAoB,EAAE;QACpB,cAAc,EAAE,cAAc,CAAA;QAC9B,qBAAqB,CAAC,EAAE,uBAAuB,EAAE,CAAA;QACjD,MAAM,CAAC,EAAE,yBAAyB,CAAA;KACnC,CAAA;IACD,UAAU,CAAC,EAAE,CAAC,MAAM,GAAG,WAAW,CAAC,EAAE,CAAA;IACrC,8BAA8B,CAAC,EAAE,MAAM,EAAE,CAAA;IACzC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;CAChC;AAED,MAAM,WAAW,OAAO;IACtB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,WAAW,WAAW;IAE1B,UAAU,CAAC,EAAE,uBAAuB,CAAA;IACpC,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,mCAAoC,SAAQ,gBAAgB;IAC3E,eAAe,EAAE,iBAAiB,GAAG,iBAAiB,CAAA;CACvD;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAA;IACV,aAAa,EAAE,aAAa,CAAA;IAC5B,mBAAmB,EAAE,uBAAuB,EAAE,CAAA;CAC/C;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,CAAC,EAAE,SAAS,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,MAAM,4BAA4B,GAAG,CAAC,IAAI,EAAE,kCAAkC,KAAK,OAAO,CAAC,yBAAyB,CAAC,CAAA;AAE3H,MAAM,WAAW,kCAAkC;IACjD,YAAY,EAAE,aAAa,GAAG,QAAQ,CAAC,mBAAmB,EAAE,QAAQ,CAAC,GAAG,gCAAgC,CAAA;IACxG,sBAAsB,EAAE,uBAAuB,CAAA;CAChD;AAED,MAAM,MAAM,gBAAgB,GAAG,aAAa,CAAC,aAAa,GAAG,SAAS,GAAG,WAAW,GAAG,qBAAqB,GAAG,iBAAiB,GAAG,YAAY,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sphereon/ssi-sdk.presentation-exchange",
-  "version": "0.29.0",
+  "version": "0.29.1-next.104+f55b05ba",
   "source": "src/index.ts",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -16,15 +16,17 @@
   "dependencies": {
     "@sphereon/pex": "^4.0.1",
     "@sphereon/pex-models": "^2.2.4",
-    "@sphereon/ssi-sdk-ext.did-utils": "0.24.0",
-    "@sphereon/ssi-sdk.credential-store": "0.29.0",
-    "@sphereon/ssi-sdk.data-store": "0.29.0",
-    "@sphereon/ssi-types": "0.29.0",
+    "@sphereon/ssi-sdk-ext.did-utils": "0.24.1-next.96",
+    "@sphereon/ssi-sdk-ext.identifier-resolution": "0.24.1-next.96",
+    "@sphereon/ssi-sdk.credential-store": "0.29.1-next.104+f55b05ba",
+    "@sphereon/ssi-sdk.data-store": "0.29.1-next.104+f55b05ba",
+    "@sphereon/ssi-sdk.sd-jwt": "0.29.1-next.104+f55b05ba",
+    "@sphereon/ssi-types": "0.29.1-next.104+f55b05ba",
     "@veramo/core": "4.2.0"
   },
   "devDependencies": {
     "@sphereon/did-uni-client": "^0.6.3",
-    "@sphereon/ssi-sdk.agent-config": "0.29.0",
+    "@sphereon/ssi-sdk.agent-config": "0.29.1-next.104+f55b05ba",
     "@types/json-buffer": "^3.0.2",
     "@veramo/did-provider-key": "4.2.0",
     "@veramo/did-resolver": "4.2.0",
@@ -61,5 +63,5 @@
     "OpenID Connect",
     "Authenticator"
   ],
-  "gitHead": "3000e7d897ac4ea58779ff2b578027bf9165be43"
+  "gitHead": "f55b05baa77e2a8acb72d5e74f3db710ef898958"
 }

package/src/functions.ts

@@ -1,14 +1,24 @@
-import { dereferenceDidKeysWithJwkSupport, getAgentResolver, getIdentifier, getKey, IIdentifierOpts } from '@sphereon/ssi-sdk-ext.did-utils'
-import { _NormalizedVerificationMethod } from '@veramo/utils'
-import { IPEXPresentationSignCallback, IRequiredContext } from './types/IPresentationExchange'
 import { IPresentationDefinition } from '@sphereon/pex'
-import { IKey, PresentationPayload, ProofFormat } from '@veramo/core'
-import { CredentialMapper, Optional, OriginalVerifiablePresentation, W3CVerifiablePresentation } from '@sphereon/ssi-types'
 import { Format } from '@sphereon/pex-models'
+import {
+  isManagedIdentifierDidOpts,
+  isManagedIdentifierDidResult,
+  isManagedIdentifierX5cResult,
+  ManagedIdentifierOpts,
+} from '@sphereon/ssi-sdk-ext.identifier-resolution'
+import {
+  CredentialMapper,
+  Optional,
+  OriginalVerifiablePresentation,
+  SdJwtDecodedVerifiableCredential,
+  W3CVerifiablePresentation,
+} from '@sphereon/ssi-types'
+import { PresentationPayload, ProofFormat } from '@veramo/core'
+import { IPEXPresentationSignCallback, IRequiredContext } from './types/IPresentationExchange'
 
 export async function createPEXPresentationSignCallback(
   args: {
-    idOpts: IIdentifierOpts
+    idOpts: ManagedIdentifierOpts
     fetchRemoteContexts?: boolean
     skipDidResolution?: boolean
     format?: Format | ProofFormat
@@ -17,26 +27,42 @@ export async function createPEXPresentationSignCallback(
   },
   context: IRequiredContext,
 ): Promise<IPEXPresentationSignCallback> {
-  function determineProofFormat({
-    format,
-    presentationDefinition,
-  }: {
+  function determineProofFormat(args: {
     format?: Format | 'jwt' | 'lds' | 'EthereumEip712Signature2021'
     presentationDefinition: IPresentationDefinition
-  }) {
-    let proofFormat: ProofFormat = 'jwt'
-    const formatOptions = format ?? args.format ?? presentationDefinition.format
-    if (formatOptions) {
-      if (typeof formatOptions === 'object') {
-        const formats = Object.keys(formatOptions).map((form) => (form.includes('ldp') ? 'lds' : 'jwt'))
-        if (!formats.includes('jwt')) {
-          proofFormat = 'lds'
-        }
-      } else {
-        proofFormat = formatOptions
-      }
+  }): string {
+    const { format, presentationDefinition } = args
+
+    // All format arguments are optional. So if no format has been given we go for SD-JWT
+    const formatOptions = format ?? presentationDefinition.format
+    if (!formatOptions) {
+      return 'vc+sd-jwt'
+    } else if (typeof formatOptions === 'string') {
+      // if formatOptions is a singular string we can return that as the format
+      return formatOptions
+    }
+
+    // here we transform all format options to either lds or jwt. but we also want to support sd-jwt, so we need to specifically check for this one. which is ['vc+sd-jwt']
+    const formats = new Set(
+      Object.keys(formatOptions).map((form) => (form.includes('ldp') ? 'lds' : form.includes('vc+sd-jwt') ? 'vc+sd-jwt' : 'jwt')),
+    )
+
+    // if we only have 1 format type we can return that
+    if (formats.size === 1) {
+      return formats.values().next().value
     }
-    return proofFormat
+
+    // if we can go for sd-jwt, we go for sd-jwt
+    if (formats.has('vc+sd-jwt')) {
+      return 'vc+sd-jwt'
+    }
+    // if it is not sd-jwt we would like to go for jwt
+    else if (formats.has('jwt')) {
+      return 'jwt'
+    }
+
+    // else we go for lds
+    return 'lds'
   }
 
   return async ({
@@ -46,118 +72,111 @@ export async function createPEXPresentationSignCallback(
     format,
     challenge,
   }: {
-    presentation: Optional<PresentationPayload, 'holder'>
+    presentation: Optional<PresentationPayload, 'holder'> | SdJwtDecodedVerifiableCredential
     presentationDefinition: IPresentationDefinition
     format?: Format | ProofFormat
     domain?: string
     challenge?: string
   }): Promise<W3CVerifiablePresentation> => {
-    const idOpts = args.idOpts
-    const id = await getIdentifier(idOpts, context)
-    if (typeof idOpts.identifier === 'string') {
-      idOpts.identifier = id
-    }
-    if (!presentation.holder) {
-      presentation.holder = id.did
+    const proofFormat = determineProofFormat({ format, presentationDefinition })
+    const { idOpts } = args
+    const CLOCK_SKEW = 120
+    if (args.skipDidResolution && isManagedIdentifierDidOpts(idOpts)) {
+      idOpts.offlineWhenNoDIDRegistered = true
     }
-    let key: IKey | undefined
 
-    if (args.skipDidResolution) {
-      if (!idOpts.kmsKeyRef) {
-        key = id.keys.find((key) => key.meta?.purpose?.includes(idOpts.verificationMethodSection ?? 'authentication') === true)
-      }
-      if (!key) {
-        key = id.keys.find(
-          (key) =>
-            !idOpts.kmsKeyRef ||
-            key.kid === idOpts.kmsKeyRef ||
-            key.meta?.jwkThumbprint === idOpts.kmsKeyRef ||
-            `${id.did}#${key.kid}` === idOpts.kmsKeyRef,
-        )
-      }
-    } else {
-      key = await getKey({ identifier: id, vmRelationship: 'authentication', kmsKeyRef: idOpts.kmsKeyRef }, context)
-    }
+    const resolution = await context.agent.identifierManagedGet(idOpts)
 
-    if (!key) {
-      throw Error(`Could not determine key to use ${JSON.stringify(idOpts)}`)
-    }
-    let vm: _NormalizedVerificationMethod | undefined = undefined
-    if (args.skipDidResolution !== true) {
-      const didResolution = await getAgentResolver(context).resolve(idOpts.identifier.did)
-      const vms = await dereferenceDidKeysWithJwkSupport(didResolution.didDocument!, idOpts.verificationMethodSection ?? 'authentication', context)
-      vm = vms.find((vm) => vm.publicKeyHex === key.publicKeyHex)
-      if (!vm) {
-        throw Error(`Could not resolve DID document or match signing key to did ${idOpts.identifier.did}`)
+    if ('compactSdJwtVc' in presentation) {
+      if (proofFormat !== 'vc+sd-jwt') {
+        return Promise.reject(Error(`presentation payload does not match proof format ${proofFormat}`))
       }
-    }
 
-    const proofFormat = determineProofFormat({ format, presentationDefinition })
-    let header
-    if (!presentation.holder) {
-      presentation.holder = id.did
-    }
-    const kid = vm?.id ?? key.meta?.jwkThumbprint ?? key.kid
-    if (proofFormat === 'jwt') {
-      header = {
-        kid: kid.includes('#') ? kid : `${id.did}#${kid}`,
+      const presentationResult = await context.agent.createSdJwtPresentation({
+        presentation: presentation.compactSdJwtVc,
+        kb: {
+          payload: {
+            ...presentation.kbJwt?.payload,
+            iat: presentation.kbJwt?.payload?.iat ?? Math.floor(Date.now() / 1000 - CLOCK_SKEW),
+            nonce: challenge ?? presentation.kbJwt?.payload?.nonce,
+            aud: presentation.kbJwt?.payload?.aud ?? resolution.issuer,
+          },
+        },
+      })
+
+      return CredentialMapper.storedPresentationToOriginalFormat(presentationResult.presentation as OriginalVerifiablePresentation)
+    } else {
+      if (proofFormat === 'vc+sd-jwt') {
+        return Promise.reject(Error(`presentation payload does not match proof format ${proofFormat}`))
       }
-      if (presentation.verifier || !presentation.aud) {
-        presentation.aud = Array.isArray(presentation.verifier) ? presentation.verifier : (presentation.verifier ?? domain ?? args.domain)
-        delete presentation.verifier
+      let header
+      if (!presentation.holder) {
+        presentation.holder = resolution.issuer
       }
-      if (!presentation.nbf) {
-        if (presentation.issuanceDate) {
-          const converted = Date.parse(presentation.issuanceDate)
-          if (!isNaN(converted)) {
-            presentation.nbf = Math.floor(converted / 1000)
+      if (proofFormat === 'jwt') {
+        header = {
+          ...((isManagedIdentifierDidResult(resolution) || isManagedIdentifierX5cResult(resolution)) && resolution.kid && { kid: resolution.kid }),
+          ...(isManagedIdentifierX5cResult(resolution) && { jwk: resolution.jwk }),
+        }
+        if (presentation.verifier || !presentation.aud) {
+          presentation.aud = Array.isArray(presentation.verifier) ? presentation.verifier : (presentation.verifier ?? domain ?? args.domain)
+          delete presentation.verifier
+        }
+
+        if (!presentation.nbf) {
+          if (presentation.issuanceDate) {
+            const converted = Date.parse(presentation.issuanceDate)
+            if (!isNaN(converted)) {
+              presentation.nbf = Math.floor(converted / 1000) // no skew here, as an explicit value was given
+            }
+          } else {
+            presentation.nbf = Math.floor(Date.now() / 1000 - CLOCK_SKEW)
           }
-        } else {
-          presentation.nbf = Math.floor(Date.now() / 1000 - 120)
         }
-      }
 
-      if (!presentation.iat) {
-        presentation.iat = presentation.nbf
-      }
+        if (!presentation.iat) {
+          presentation.iat = presentation.nbf
+        }
 
-      if (!presentation.exp) {
-        if (presentation.expirationDate) {
-          const converted = Date.parse(presentation.expirationDate)
-          if (!isNaN(converted)) {
-            presentation.exp = Math.floor(converted / 1000)
+        if (!presentation.exp) {
+          if (presentation.expirationDate) {
+            const converted = Date.parse(presentation.expirationDate)
+            if (!isNaN(converted)) {
+              presentation.exp = Math.floor(converted / 1000) // no skew here as an explicit value w as given
+            }
+          } else {
+            presentation.exp = presentation.nbf + 600 + CLOCK_SKEW
           }
-        } else {
-          presentation.exp = presentation.nbf + 600 + 120
         }
-      }
 
-      if (!presentation.vp) {
-        presentation.vp = {}
-      }
-      if (!presentation.sub) {
-        presentation.sub = id.did
-      }
-      if (!presentation.vp.holder) {
-        presentation.vp.holder = id.did
+        if (!presentation.vp) {
+          presentation.vp = {}
+        }
+        /*if (!presentation.sub) {
+          presentation.sub = id.did
+        }*/
+        if (!presentation.vp.holder) {
+          presentation.vp.holder = presentation.holder
+        }
       }
-    }
 
-    // we ignore the alg / proof_format for now, as we already have the kid anyway at this point
-
-    // todo: look for jwt_vc_json and remove types and @context
-
-    const vp = await context.agent.createVerifiablePresentation({
-      presentation: presentation as PresentationPayload,
-      removeOriginalFields: false,
-      keyRef: key.kid,
-      // domain: domain ?? args.domain, // handled above, and did-jwt-vc creates an array even for 1 entry
-      challenge: challenge ?? args.challenge,
-      fetchRemoteContexts: args.fetchRemoteContexts !== false,
-      proofFormat,
-      header,
-    })
-    // makes sure we extract an actual JWT from the internal representation in case it is a JWT
-    return CredentialMapper.storedPresentationToOriginalFormat(vp as OriginalVerifiablePresentation)
+      // we ignore the alg / proof_format for now, as we already have the kid anyway at this point
+
+      // todo: look for jwt_vc_json and remove types and @context
+
+      const vp = await context.agent.createVerifiablePresentation({
+        presentation: presentation as PresentationPayload,
+        removeOriginalFields: false,
+        keyRef: resolution.kmsKeyRef,
+        // domain: domain ?? args.domain, // handled above, and did-jwt-vc creates an array even for 1 entry
+        challenge: challenge ?? args.challenge,
+        fetchRemoteContexts: args.fetchRemoteContexts !== false,
+        proofFormat: proofFormat as ProofFormat,
+        header,
+      })
+
+      // makes sure we extract an actual JWT from the internal representation in case it is a JWT
+      return CredentialMapper.storedPresentationToOriginalFormat(vp as OriginalVerifiablePresentation)
+    }
   }
 }

package/src/types/IPresentationExchange.ts

@@ -1,3 +1,4 @@
+import { IIdentifierResolution } from '@sphereon/ssi-sdk-ext.identifier-resolution'
 import {
   IAgentContext,
   ICredentialPlugin,
@@ -8,11 +9,11 @@ import {
   IResolver,
   PresentationPayload,
 } from '@veramo/core'
-import { IPresentation, Optional, W3CVerifiableCredential, W3CVerifiablePresentation } from '@sphereon/ssi-types'
+import { IPresentation, Optional, SdJwtDecodedVerifiableCredential, W3CVerifiableCredential, W3CVerifiablePresentation } from '@sphereon/ssi-types'
 import { IPresentationDefinition, PEVersion, SelectResults } from '@sphereon/pex'
 import { Format, InputDescriptorV1, InputDescriptorV2 } from '@sphereon/pex-models'
-import { ICredentialStore } from '@sphereon/ssi-sdk.credential-store'
 import { CredentialRole, FindDigitalCredentialArgs } from '@sphereon/ssi-sdk.data-store'
+import { ISDJwtPlugin } from '@sphereon/ssi-sdk.sd-jwt'
 
 export interface IPresentationExchange extends IPluginMethodMap {
   pexValidateDefinition(args: IDefinitionValidateArgs): Promise<boolean>
@@ -73,8 +74,8 @@ export interface VersionDiscoveryResult {
 export type IPEXPresentationSignCallback = (args: IPEXPresentationSignCallBackParams) => Promise<W3CVerifiablePresentation>
 
 export interface IPEXPresentationSignCallBackParams {
-  presentation: IPresentation | Optional<PresentationPayload, 'holder'>
+  presentation: IPresentation | Optional<PresentationPayload, 'holder'> | SdJwtDecodedVerifiableCredential
   presentationDefinition: IPresentationDefinition
 }
 
-export type IRequiredContext = IAgentContext<IDataStoreORM & IResolver & IDIDManager & ICredentialPlugin & ICredentialStore>
+export type IRequiredContext = IAgentContext<IDataStoreORM & IResolver & IDIDManager & IIdentifierResolution & ICredentialPlugin & ISDJwtPlugin>