@sphereon/ssi-sdk.sd-jwt 0.29.0 → 0.29.1-next.103

package/dist/action-handler.d.ts

@@ -1,3 +1,4 @@
+import { SignKeyArgs, SignKeyResult } from './index';
 import { SDJwtVcInstance } from '@sd-jwt/sd-jwt-vc';
 import { IAgentPlugin } from '@veramo/core';
 import { SdJWTImplementation, ICreateSdJwtVcArgs, ICreateSdJwtVcResult, ICreateSdJwtPresentationArgs, ICreateSdJwtPresentationResult, IRequiredContext, ISDJwtPlugin, IVerifySdJwtVcArgs, IVerifySdJwtVcResult, IVerifySdJwtPresentationArgs, IVerifySdJwtPresentationResult } from './types';
@@ -7,7 +8,6 @@ import { SdJWTImplementation, ICreateSdJwtVcArgs, ICreateSdJwtVcResult, ICreateS
  */
 export declare class SDJwtPlugin implements IAgentPlugin {
     private algorithms;
-    readonly schema: any;
     constructor(algorithms: SdJWTImplementation);
     readonly methods: ISDJwtPlugin;
     /**
@@ -19,11 +19,11 @@ export declare class SDJwtPlugin implements IAgentPlugin {
     createSdJwtVc(args: ICreateSdJwtVcArgs, context: IRequiredContext): Promise<ICreateSdJwtVcResult>;
     /**
      * Get the key to sign the SD-JWT
-     * @param issuer - did url like did:exmaple.com#key-1
+     * @param args - consists of twp arguments: identifier like a did and other forms of identifiers and vmRelationship which represents the purpose of the key
      * @param context - agent instance
      * @returns the key to sign the SD-JWT
      */
-    private getSignKey;
+    getSignKey(args: SignKeyArgs, context: IRequiredContext): Promise<SignKeyResult>;
     /**
      * Create a signed SD-JWT presentation.
      * @param args - Arguments necessary for the creation of a SD-JWT presentation.

package/dist/action-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"action-handler.d.ts","sourceRoot":"","sources":["../src/action-handler.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,eAAe,EAAkB,MAAM,mBAAmB,CAAA;AAEnE,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,4BAA4B,EAC5B,8BAA8B,EAC9B,gBAAgB,EAChB,YAAY,EACZ,kBAAkB,EAClB,oBAAoB,EACpB,4BAA4B,EAC5B,8BAA8B,EAE/B,MAAM,SAAS,CAAA;AAIhB;;;GAGG;AACH,qBAAa,WAAY,YAAW,YAAY;IAGlC,OAAO,CAAC,UAAU;IAF9B,QAAQ,CAAC,MAAM,MAAsB;gBAEjB,UAAU,EAAE,mBAAmB;IAGnD,QAAQ,CAAC,OAAO,EAAE,YAAY,CAK7B;IAED;;;;;OAKG;IACG,aAAa,CAAC,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAuBvG;;;;;OAKG;YACW,UAAU;IAmBxB;;;;;OAKG;IACG,uBAAuB,CAAC,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,8BAA8B,CAAC;IA+BrI;;;;;OAKG;IACG,aAAa,CAAC,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAWvG;;;;;;;;OAQG;IACH,OAAO,CAAC,QAAQ;IAQhB;;;;;;;OAOG;IACG,MAAM,CAAC,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;IAqB/F;;;;;OAKG;IACG,uBAAuB,CAAC,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,8BAA8B,CAAC;IAgBrI,OAAO,CAAC,mBAAmB;CAY5B"}
+{"version":3,"file":"action-handler.d.ts","sourceRoot":"","sources":["../src/action-handler.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAEpD,OAAO,EAAE,eAAe,EAAkB,MAAM,mBAAmB,CAAA;AAEnE,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,4BAA4B,EAC5B,8BAA8B,EAC9B,gBAAgB,EAChB,YAAY,EACZ,kBAAkB,EAClB,oBAAoB,EACpB,4BAA4B,EAC5B,8BAA8B,EAE/B,MAAM,SAAS,CAAA;AAOhB;;;GAGG;AACH,qBAAa,WAAY,YAAW,YAAY;IAClC,OAAO,CAAC,UAAU;gBAAV,UAAU,EAAE,mBAAmB;IAGnD,QAAQ,CAAC,OAAO,EAAE,YAAY,CAK7B;IAED;;;;;OAKG;IACG,aAAa,CAAC,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAuBvG;;;;;OAKG;IACG,UAAU,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,aAAa,CAAC;IA6BtF;;;;;OAKG;IACG,uBAAuB,CAAC,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,8BAA8B,CAAC;IA6BrI;;;;;OAKG;IACG,aAAa,CAAC,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAWvG;;;;;;;;OAQG;IACH,OAAO,CAAC,QAAQ;IAQhB;;;;;;;OAOG;IACG,MAAM,CAAC,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;IAuC/F;;;;;OAKG;IACG,uBAAuB,CAAC,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,8BAA8B,CAAC;IAgBrI,OAAO,CAAC,mBAAmB;CAY5B"}

package/dist/action-handler.js

@@ -14,12 +14,12 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SDJwtPlugin = void 0;
 const debug_1 = __importDefault(require("debug"));
-const index_1 = require("./index");
 const core_1 = require("@sd-jwt/core");
 const sd_jwt_vc_1 = require("@sd-jwt/sd-jwt-vc");
 const ssi_sdk_ext_did_utils_1 = require("@sphereon/ssi-sdk-ext.did-utils");
-const utils_1 = require("@veramo/utils");
-const debug = (0, debug_1.default)('sd-jwt');
+const ssi_sdk_ext_key_utils_1 = require("@sphereon/ssi-sdk-ext.key-utils");
+const trustAnchors_1 = require("./trustAnchors");
+const debug = (0, debug_1.default)('@sphereon/ssi-sdk.sd-jwt');
 /**
  * @beta
  * SD-JWT plugin for Veramo
@@ -27,7 +27,6 @@ const debug = (0, debug_1.default)('sd-jwt');
 class SDJwtPlugin {
     constructor(algorithms) {
         this.algorithms = algorithms;
-        this.schema = index_1.schema.ISDJwtPlugin;
         // map the methods your plugin is declaring to their implementation
         this.methods = {
             createSdJwtVc: this.createSdJwtVc.bind(this),
@@ -48,7 +47,7 @@ class SDJwtPlugin {
             if (!issuer) {
                 throw new Error('credential.issuer must not be empty');
             }
-            const { alg, key } = yield this.getSignKey(issuer, context);
+            const { alg, key } = yield this.getSignKey({ identifier: issuer, vmRelationship: 'assertionMethod' }, context);
             //TODO: let the user also insert a method to sign the data
             const signer = (data) => __awaiter(this, void 0, void 0, function* () { return context.agent.keyManagerSign({ keyRef: key.kid, data }); });
             const sdjwt = new sd_jwt_vc_1.SDJwtVcInstance({
@@ -64,27 +63,42 @@ class SDJwtPlugin {
     }
     /**
      * Get the key to sign the SD-JWT
-     * @param issuer - did url like did:exmaple.com#key-1
+     * @param args - consists of twp arguments: identifier like a did and other forms of identifiers and vmRelationship which represents the purpose of the key
      * @param context - agent instance
      * @returns the key to sign the SD-JWT
      */
-    getSignKey(issuer, context) {
+    getSignKey(args, context) {
         return __awaiter(this, void 0, void 0, function* () {
-            debug(`Getting signing key for issuer ${issuer}`);
-            const identifier = yield context.agent.didManagerGet({
-                did: issuer.split('#')[0],
-            });
-            const doc = yield (0, ssi_sdk_ext_did_utils_1.mapIdentifierKeysToDocWithJwkSupport)({ identifier, vmRelationship: 'assertionMethod' }, context);
-            if (!doc || doc.length === 0) {
-                throw new Error('No key found for signing');
+            var _a, _b;
+            const { identifier, vmRelationship } = Object.assign({}, args);
+            if (identifier.startsWith('did:')) {
+                const didIdentifier = yield context.agent.didManagerGet({
+                    did: identifier.split('#')[0],
+                });
+                const key = yield (0, ssi_sdk_ext_did_utils_1.getFirstKeyWithRelation)({ identifier: didIdentifier, vmRelationship: vmRelationship }, context);
+                if (!key) {
+                    throw new Error(`No key found with the given id: ${identifier}`);
+                }
+                const alg = this.getKeyTypeAlgorithm(key.type);
+                debug(`Signing key ${key.publicKeyHex} found for identifier ${identifier}`);
+                return { alg, key };
             }
-            const key = doc.find((key) => key.meta.verificationMethod.id === issuer);
-            if (!key) {
-                throw new Error(`No key found with the given id: ${issuer}`);
+            else {
+                const key = yield context.agent.keyManagerGet({ kid: identifier });
+                if (!key) {
+                    throw new Error(`No key found with the identifier ${identifier}`);
+                }
+                const alg = this.getKeyTypeAlgorithm(key.type);
+                if (((_a = key.meta) === null || _a === void 0 ? void 0 : _a.x509) && key.meta.x509.x5c) {
+                    return { alg, key: { kid: key.kid, x5c: key.meta.x509.x5c } };
+                }
+                else if ((_b = key.meta) === null || _b === void 0 ? void 0 : _b.jwkThumbprint) {
+                    return { alg, key: { kid: key.kid, jwkThumbprint: key.meta.jwkThumbprint } };
+                }
+                else {
+                    return { alg, key: { kid: key.kid } };
+                }
             }
-            const alg = this.getKeyTypeAlgorithm(key.type);
-            debug(`Signing key ${key.publicKeyHex} found for issuer ${issuer}`);
-            return { alg, key };
         });
     }
     /**
@@ -98,21 +112,19 @@ class SDJwtPlugin {
             var _a;
             const cred = yield core_1.SDJwt.fromEncode(args.presentation, this.algorithms.hasher);
             const claims = yield cred.getClaims(this.algorithms.hasher);
-            let holderDID;
+            let holder;
             // we primarly look for a cnf field, if it's not there we look for a sub field. If this is also not given, we throw an error since we can not sign it.
             if ((_a = claims.cnf) === null || _a === void 0 ? void 0 : _a.jwk) {
-                const key = claims.cnf.jwk;
-                //TODO SDK-19: convert the JWK to hex and search for the appropriate key and associated DID
-                //doesn't apply to did:jwk only, as you can represent any DID key as a JWK. So whenever you encounter a JWK it doesn't mean it had to come from a did:jwk in the system. It just can always be represented as a did:jwk
-                holderDID = `did:jwk:${(0, utils_1.encodeJoseBlob)(key)}#0`;
+                const jwk = claims.cnf.jwk;
+                holder = (0, ssi_sdk_ext_key_utils_1.calculateJwkThumbprint)({ jwk: jwk });
             }
             else if (claims.sub) {
-                holderDID = claims.sub;
+                holder = claims.sub;
             }
             else {
                 throw new Error('invalid_argument: credential does not include a holder reference');
             }
-            const { alg, key } = yield this.getSignKey(holderDID, context);
+            const { alg, key } = yield this.getSignKey({ identifier: holder, vmRelationship: 'assertionMethod' }, context);
             const signer = (data) => __awaiter(this, void 0, void 0, function* () {
                 return context.agent.keyManagerSign({ keyRef: key.kid, data });
             });
@@ -171,22 +183,38 @@ class SDJwtPlugin {
             var _a, _b;
             const decodedVC = yield sdjwt.decode(`${data}.${signature}`);
             const issuer = decodedVC.jwt.payload.iss;
-            if (!issuer.startsWith('did:')) {
-                throw new Error('invalid_issuer: issuer must be a did');
+            const header = decodedVC.jwt.header;
+            const x5c = header === null || header === void 0 ? void 0 : header.x5c;
+            let jwk = undefined;
+            if (issuer.includes('did:')) {
+                const didDoc = yield context.agent.resolveDid({ didUrl: issuer });
+                if (!didDoc) {
+                    throw new Error('invalid_issuer: issuer did not resolve to a did document');
+                }
+                //TODO SDK-20: This should be checking for an assertionMethod and not just an verificationMethod with an id
+                const didDocumentKey = (_b = (_a = didDoc.didDocument) === null || _a === void 0 ? void 0 : _a.verificationMethod) === null || _b === void 0 ? void 0 : _b.find((key) => key.id);
+                if (!didDocumentKey) {
+                    throw new Error('invalid_issuer: issuer did document does not include referenced key');
+                }
+                //FIXME SDK-21: in case it's another did method, the value of the key can be also encoded as a base64url
+                // needs more checks. some DID methods do not expose the keys as publicKeyJwk
+                jwk = didDocumentKey.publicKeyJwk;
             }
-            const didDoc = yield context.agent.resolveDid({ didUrl: issuer });
-            if (!didDoc) {
-                throw new Error('invalid_issuer: issuer did not resolve to a did document');
+            if (x5c) {
+                const certificateValidationResult = yield context.agent.verifyCertificateChain({
+                    chain: x5c,
+                    trustAnchors: [trustAnchors_1.funkeTestCA, trustAnchors_1.sphereonCA],
+                });
+                if (certificateValidationResult.error || !(certificateValidationResult === null || certificateValidationResult === void 0 ? void 0 : certificateValidationResult.certificateChain)) {
+                    throw new Error('Certificate chain validation failed');
+                }
+                const certInfo = certificateValidationResult.certificateChain[0];
+                jwk = certInfo.publicKeyJWK;
             }
-            //TODO SDK-20: This should be checking for an assertionMethod and not just an verificationMethod with an id
-            const didDocumentKey = (_b = (_a = didDoc.didDocument) === null || _a === void 0 ? void 0 : _a.verificationMethod) === null || _b === void 0 ? void 0 : _b.find((key) => key.id);
-            if (!didDocumentKey) {
-                throw new Error('invalid_issuer: issuer did document does not include referenced key');
+            if (!jwk) {
+                throw new Error('No valid public key found for signature verification');
             }
-            //FIXME SDK-21: in case it's another did method, the value of the key can be also encoded as a base64url
-            //needs more checks. some DID methods do not expose the keys as publicKeyJwk
-            const key = didDocumentKey.publicKeyJwk;
-            return this.algorithms.verifySignature(data, signature, key);
+            return this.algorithms.verifySignature(data, signature, jwk);
         });
     }
     /**

package/dist/action-handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"action-handler.js","sourceRoot":"","sources":["../src/action-handler.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,kDAAyB;AAEzB,mCAAgC;AAChC,uCAAyC;AACzC,iDAAmE;AAiBnE,2EAAsF;AACtF,yCAA8C;AAC9C,MAAM,KAAK,GAAG,IAAA,eAAK,EAAC,QAAQ,CAAC,CAAA;AAC7B;;;GAGG;AACH,MAAa,WAAW;IAGtB,YAAoB,UAA+B;QAA/B,eAAU,GAAV,UAAU,CAAqB;QAF1C,WAAM,GAAG,cAAM,CAAC,YAAY,CAAA;QAIrC,mEAAmE;QAC1D,YAAO,GAAiB;YAC/B,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;YAC5C,uBAAuB,EAAE,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;YAChE,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;YAC5C,uBAAuB,EAAE,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;SACjE,CAAA;IARqD,CAAC;IAUvD;;;;;OAKG;IACG,aAAa,CAAC,IAAwB,EAAE,OAAyB;;YACrE,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAA;YACzC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;YACxD,CAAC;YAED,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;YAE3D,0DAA0D;YAC1D,MAAM,MAAM,GAAW,CAAO,IAAY,EAAE,EAAE,gDAAC,OAAA,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA,GAAA,CAAA;YAEtG,MAAM,KAAK,GAAG,IAAI,2BAAe,CAAC;gBAChC,MAAM;gBACN,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM;gBAC9B,aAAa,EAAE,IAAI,CAAC,UAAU,CAAC,aAAa;gBAC5C,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,SAAS;aACnB,CAAC,CAAA;YAEF,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,eAAiE,CAAC,CAAA;YACpI,OAAO,EAAE,UAAU,EAAE,CAAA;QACvB,CAAC;KAAA;IAED;;;;;OAKG;IACW,UAAU,CAAC,MAAc,EAAE,OAAyB;;YAChE,KAAK,CAAC,kCAAkC,MAAM,EAAE,CAAC,CAAA;YACjD,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC;gBACnD,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aAC1B,CAAC,CAAA;YACF,MAAM,GAAG,GAAG,MAAM,IAAA,4DAAoC,EAAC,EAAE,UAAU,EAAE,cAAc,EAAE,iBAAiB,EAAE,EAAE,OAAO,CAAC,CAAA;YAClH,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;YAC7C,CAAC;YACD,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,KAAK,MAAM,CAAC,CAAA;YACxE,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,KAAK,CAAC,mCAAmC,MAAM,EAAE,CAAC,CAAA;YAC9D,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;YAC9C,KAAK,CAAC,eAAe,GAAG,CAAC,YAAY,qBAAqB,MAAM,EAAE,CAAC,CAAA;YAEnE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAA;QACrB,CAAC;KAAA;IAED;;;;;OAKG;IACG,uBAAuB,CAAC,IAAkC,EAAE,OAAyB;;;YACzF,MAAM,IAAI,GAAG,MAAM,YAAK,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;YAC9E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAS,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;YACnE,IAAI,SAAiB,CAAA;YACrB,sJAAsJ;YACtJ,IAAI,MAAA,MAAM,CAAC,GAAG,0CAAE,GAAG,EAAE,CAAC;gBACpB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAA;gBAC1B,2FAA2F;gBAC3F,uNAAuN;gBACvN,SAAS,GAAG,WAAW,IAAA,sBAAc,EAAC,GAAG,CAAC,IAAI,CAAA;YAChD,CAAC;iBAAM,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;gBACtB,SAAS,GAAG,MAAM,CAAC,GAAa,CAAA;YAClC,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAA;YACrF,CAAC;YACD,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;YAE9D,MAAM,MAAM,GAAW,CAAO,IAAY,EAAE,EAAE;gBAC5C,OAAO,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA;YAChE,CAAC,CAAA,CAAA;YAED,MAAM,KAAK,GAAG,IAAI,2BAAe,CAAC;gBAChC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM;gBAC9B,aAAa,EAAE,IAAI,CAAC,UAAU,CAAC,aAAa;gBAC5C,QAAQ,EAAE,MAAM;gBAChB,SAAS,EAAE,GAAG;aACf,CAAC,CAAA;YACF,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,iBAAsD,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;YACvI,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,CAAA;QACrC,CAAC;KAAA;IAED;;;;;OAKG;IACG,aAAa,CAAC,IAAwB,EAAE,OAAyB;;YACrE,kDAAkD;YAClD,IAAI,KAAsB,CAAA;YAC1B,MAAM,QAAQ,GAAa,CAAO,IAAY,EAAE,SAAiB,EAAE,EAAE,gDAAC,OAAA,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAA,GAAA,CAAA;YAElH,KAAK,GAAG,IAAI,2BAAe,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAA;YACzE,MAAM,gBAAgB,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YAE5D,OAAO,EAAE,gBAAgB,EAAE,CAAA;QAC7B,CAAC;KAAA;IAED;;;;;;;;OAQG;IACK,QAAQ,CAAC,KAAsB,EAAE,OAAyB,EAAE,IAAY,EAAE,SAAiB,EAAE,OAAmB;QACtH,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACjB,MAAM,KAAK,CAAC,4CAA4C,CAAC,CAAA;QAC3D,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,GAAiB,CAAA;QACzC,OAAO,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;IAC9D,CAAC;IAED;;;;;;;OAOG;IACG,MAAM,CAAC,KAAsB,EAAE,OAAyB,EAAE,IAAY,EAAE,SAAiB;;;YAC7F,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,SAAS,EAAE,CAAC,CAAA;YAC5D,MAAM,MAAM,GAAa,SAAS,CAAC,GAAW,CAAC,OAAmC,CAAC,GAAa,CAAA;YAChG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;YACzD,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;YACjE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;YAC7E,CAAC;YACD,2GAA2G;YAC3G,MAAM,cAAc,GAAG,MAAA,MAAA,MAAM,CAAC,WAAW,0CAAE,kBAAkB,0CAAE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACpF,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAA;YACxF,CAAC;YACD,wGAAwG;YACxG,4EAA4E;YAC5E,MAAM,GAAG,GAAG,cAAc,CAAC,YAA0B,CAAA;YACrD,OAAO,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;QAC9D,CAAC;KAAA;IAED;;;;;OAKG;IACG,uBAAuB,CAAC,IAAkC,EAAE,OAAyB;;YACzF,kDAAkD;YAClD,IAAI,KAAsB,CAAA;YAC1B,MAAM,QAAQ,GAAa,CAAO,IAAY,EAAE,SAAiB,EAAE,EAAE,gDAAC,OAAA,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAA,GAAA,CAAA;YAClH,MAAM,UAAU,GAAe,CAAO,IAAY,EAAE,SAAiB,EAAE,OAAmB,EAAE,EAAE,gDAC5F,OAAA,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAA,GAAA,CAAA;YACzD,KAAK,GAAG,IAAI,2BAAe,CAAC;gBAC1B,QAAQ;gBACR,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM;gBAC9B,UAAU,EAAE,UAAU;aACvB,CAAC,CAAA;YACF,MAAM,gBAAgB,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;YAE/F,OAAO,EAAE,gBAAgB,EAAE,CAAA;QAC7B,CAAC;KAAA;IAEO,mBAAmB,CAAC,OAAe;QACzC,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,SAAS;gBACZ,OAAO,OAAO,CAAA;YAChB,KAAK,WAAW;gBACd,OAAO,QAAQ,CAAA;YACjB,KAAK,WAAW;gBACd,OAAO,OAAO,CAAA;YAChB;gBACE,MAAM,IAAI,KAAK,CAAC,wBAAwB,OAAO,EAAE,CAAC,CAAA;QACtD,CAAC;IACH,CAAC;CACF;AAzMD,kCAyMC"}
+{"version":3,"file":"action-handler.js","sourceRoot":"","sources":["../src/action-handler.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,kDAAyB;AAGzB,uCAAyC;AACzC,iDAAmE;AAkBnE,2EAAyE;AACzE,2EAA6E;AAC7E,iDAAwD;AAExD,MAAM,KAAK,GAAG,IAAA,eAAK,EAAC,0BAA0B,CAAC,CAAA;AAC/C;;;GAGG;AACH,MAAa,WAAW;IACtB,YAAoB,UAA+B;QAA/B,eAAU,GAAV,UAAU,CAAqB;QAEnD,mEAAmE;QAC1D,YAAO,GAAiB;YAC/B,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;YAC5C,uBAAuB,EAAE,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;YAChE,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;YAC5C,uBAAuB,EAAE,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;SACjE,CAAA;IARqD,CAAC;IAUvD;;;;;OAKG;IACG,aAAa,CAAC,IAAwB,EAAE,OAAyB;;YACrE,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAA;YACzC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;YACxD,CAAC;YAED,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,iBAAiB,EAAE,EAAE,OAAO,CAAC,CAAA;YAE9G,0DAA0D;YAC1D,MAAM,MAAM,GAAW,CAAO,IAAY,EAAE,EAAE,gDAAC,OAAA,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA,GAAA,CAAA;YAEtG,MAAM,KAAK,GAAG,IAAI,2BAAe,CAAC;gBAChC,MAAM;gBACN,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM;gBAC9B,aAAa,EAAE,IAAI,CAAC,UAAU,CAAC,aAAa;gBAC5C,OAAO,EAAE,GAAG;gBACZ,OAAO,EAAE,SAAS;aACnB,CAAC,CAAA;YAEF,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,eAAiE,CAAC,CAAA;YACpI,OAAO,EAAE,UAAU,EAAE,CAAA;QACvB,CAAC;KAAA;IAED;;;;;OAKG;IACG,UAAU,CAAC,IAAiB,EAAE,OAAyB;;;YAC3D,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,qBAAQ,IAAI,CAAE,CAAA;YAClD,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClC,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC;oBACtD,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;iBAC9B,CAAC,CAAA;gBACF,MAAM,GAAG,GAA8B,MAAM,IAAA,+CAAuB,EAAC,EAAE,UAAU,EAAE,aAAa,EAAE,cAAc,EAAE,cAAc,EAAE,EAAE,OAAO,CAAC,CAAA;gBAC5I,IAAI,CAAC,GAAG,EAAE,CAAC;oBACT,MAAM,IAAI,KAAK,CAAC,mCAAmC,UAAU,EAAE,CAAC,CAAA;gBAClE,CAAC;gBACD,MAAM,GAAG,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;gBAC9C,KAAK,CAAC,eAAe,GAAG,CAAC,YAAY,yBAAyB,UAAU,EAAE,CAAC,CAAA;gBAC3E,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAA;YACrB,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAA;gBAClE,IAAI,CAAC,GAAG,EAAE,CAAC;oBACT,MAAM,IAAI,KAAK,CAAC,oCAAoC,UAAU,EAAE,CAAC,CAAA;gBACnE,CAAC;gBACD,MAAM,GAAG,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;gBAC9C,IAAI,CAAA,MAAA,GAAG,CAAC,IAAI,0CAAE,IAAI,KAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;oBACxC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAe,EAAE,EAAE,CAAA;gBAC3E,CAAC;qBAAM,IAAI,MAAA,GAAG,CAAC,IAAI,0CAAE,aAAa,EAAE,CAAC;oBACnC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,aAAa,EAAE,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAA;gBAC9E,CAAC;qBAAM,CAAC;oBACN,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,CAAA;gBACvC,CAAC;YACH,CAAC;QACH,CAAC;KAAA;IAED;;;;;OAKG;IACG,uBAAuB,CAAC,IAAkC,EAAE,OAAyB;;;YACzF,MAAM,IAAI,GAAG,MAAM,YAAK,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;YAC9E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAS,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;YACnE,IAAI,MAAc,CAAA;YAClB,sJAAsJ;YACtJ,IAAI,MAAA,MAAM,CAAC,GAAG,0CAAE,GAAG,EAAE,CAAC;gBACpB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAA;gBAC1B,MAAM,GAAG,IAAA,8CAAsB,EAAC,EAAE,GAAG,EAAE,GAAU,EAAE,CAAC,CAAA;YACtD,CAAC;iBAAM,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;gBACtB,MAAM,GAAG,MAAM,CAAC,GAAa,CAAA;YAC/B,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAA;YACrF,CAAC;YACD,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,iBAAiB,EAAE,EAAE,OAAO,CAAC,CAAA;YAE9G,MAAM,MAAM,GAAW,CAAO,IAAY,EAAE,EAAE;gBAC5C,OAAO,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA;YAChE,CAAC,CAAA,CAAA;YAED,MAAM,KAAK,GAAG,IAAI,2BAAe,CAAC;gBAChC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM;gBAC9B,aAAa,EAAE,IAAI,CAAC,UAAU,CAAC,aAAa;gBAC5C,QAAQ,EAAE,MAAM;gBAChB,SAAS,EAAE,GAAG;aACf,CAAC,CAAA;YACF,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,iBAAsD,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;YACvI,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,CAAA;QACrC,CAAC;KAAA;IAED;;;;;OAKG;IACG,aAAa,CAAC,IAAwB,EAAE,OAAyB;;YACrE,kDAAkD;YAClD,IAAI,KAAsB,CAAA;YAC1B,MAAM,QAAQ,GAAa,CAAO,IAAY,EAAE,SAAiB,EAAE,EAAE,gDAAC,OAAA,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAA,GAAA,CAAA;YAElH,KAAK,GAAG,IAAI,2BAAe,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAA;YACzE,MAAM,gBAAgB,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YAE5D,OAAO,EAAE,gBAAgB,EAAE,CAAA;QAC7B,CAAC;KAAA;IAED;;;;;;;;OAQG;IACK,QAAQ,CAAC,KAAsB,EAAE,OAAyB,EAAE,IAAY,EAAE,SAAiB,EAAE,OAAmB;QACtH,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACjB,MAAM,KAAK,CAAC,4CAA4C,CAAC,CAAA;QAC3D,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,GAAiB,CAAA;QACzC,OAAO,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;IAC9D,CAAC;IAED;;;;;;;OAOG;IACG,MAAM,CAAC,KAAsB,EAAE,OAAyB,EAAE,IAAY,EAAE,SAAiB;;;YAC7F,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,SAAS,EAAE,CAAC,CAAA;YAC5D,MAAM,MAAM,GAAa,SAAS,CAAC,GAAW,CAAC,OAAmC,CAAC,GAAa,CAAA;YAChG,MAAM,MAAM,GAAI,SAAS,CAAC,GAAW,CAAC,MAA6B,CAAA;YACnE,MAAM,GAAG,GAAyB,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,GAAe,CAAA;YACzD,IAAI,GAAG,GAAiC,SAAS,CAAA;YACjD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;gBACjE,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;gBAC7E,CAAC;gBACD,2GAA2G;gBAC3G,MAAM,cAAc,GAAG,MAAA,MAAA,MAAM,CAAC,WAAW,0CAAE,kBAAkB,0CAAE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;gBACpF,IAAI,CAAC,cAAc,EAAE,CAAC;oBACpB,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAA;gBACxF,CAAC;gBACD,wGAAwG;gBACxG,6EAA6E;gBAC7E,GAAG,GAAG,cAAc,CAAC,YAA0B,CAAA;YACjD,CAAC;YACD,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,2BAA2B,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC;oBAC7E,KAAK,EAAE,GAAG;oBACV,YAAY,EAAE,CAAC,0BAAW,EAAE,yBAAU,CAAC;iBACxC,CAAC,CAAA;gBAEF,IAAI,2BAA2B,CAAC,KAAK,IAAI,CAAC,CAAA,2BAA2B,aAA3B,2BAA2B,uBAA3B,2BAA2B,CAAE,gBAAgB,CAAA,EAAE,CAAC;oBACxF,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;gBACxD,CAAC;gBACD,MAAM,QAAQ,GAAG,2BAA2B,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAA;gBAChE,GAAG,GAAG,QAAQ,CAAC,YAAmB,CAAA;YACpC,CAAC;YAED,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA;YACzE,CAAC;YACD,OAAO,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;QAC9D,CAAC;KAAA;IAED;;;;;OAKG;IACG,uBAAuB,CAAC,IAAkC,EAAE,OAAyB;;YACzF,kDAAkD;YAClD,IAAI,KAAsB,CAAA;YAC1B,MAAM,QAAQ,GAAa,CAAO,IAAY,EAAE,SAAiB,EAAE,EAAE,gDAAC,OAAA,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,CAAA,GAAA,CAAA;YAClH,MAAM,UAAU,GAAe,CAAO,IAAY,EAAE,SAAiB,EAAE,OAAmB,EAAE,EAAE,gDAC5F,OAAA,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAA,GAAA,CAAA;YACzD,KAAK,GAAG,IAAI,2BAAe,CAAC;gBAC1B,QAAQ;gBACR,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM;gBAC9B,UAAU,EAAE,UAAU;aACvB,CAAC,CAAA;YACF,MAAM,gBAAgB,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;YAE/F,OAAO,EAAE,gBAAgB,EAAE,CAAA;QAC7B,CAAC;KAAA;IAEO,mBAAmB,CAAC,OAAe;QACzC,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,SAAS;gBACZ,OAAO,OAAO,CAAA;YAChB,KAAK,WAAW;gBACd,OAAO,QAAQ,CAAA;YACjB,KAAK,WAAW;gBACd,OAAO,OAAO,CAAA;YAChB;gBACE,MAAM,IAAI,KAAK,CAAC,wBAAwB,OAAO,EAAE,CAAC,CAAA;QACtD,CAAC;IACH,CAAC;CACF;AAjOD,kCAiOC"}

package/dist/index.d.ts

@@ -1,8 +1,3 @@
-/**
- * @public
- */
-declare const schema: any;
-export { schema };
 export { SDJwtPlugin } from './action-handler';
 export * from './types';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,QAAA,MAAM,MAAM,KAAmC,CAAA;AAC/C,OAAO,EAAE,MAAM,EAAE,CAAA;AACjB,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC9C,cAAc,SAAS,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC9C,cAAc,SAAS,CAAA"}

package/dist/index.js

@@ -14,12 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SDJwtPlugin = exports.schema = void 0;
-/**
- * @public
- */
-const schema = require('../plugin.schema.json');
-exports.schema = schema;
+exports.SDJwtPlugin = void 0;
 var action_handler_1 = require("./action-handler");
 Object.defineProperty(exports, "SDJwtPlugin", { enumerable: true, get: function () { return action_handler_1.SDJwtPlugin; } });
 __exportStar(require("./types"), exports);

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA;;GAEG;AACH,MAAM,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAA;AACtC,wBAAM;AACf,mDAA8C;AAArC,6GAAA,WAAW,OAAA;AACpB,0CAAuB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,mDAA8C;AAArC,6GAAA,WAAW,OAAA;AACpB,0CAAuB"}

package/dist/trustAnchors.d.ts

@@ -0,0 +1,3 @@
+export declare const funkeTestCA: string;
+export declare const sphereonCA: string;
+//# sourceMappingURL=trustAnchors.d.ts.map

package/dist/trustAnchors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trustAnchors.d.ts","sourceRoot":"","sources":["../src/trustAnchors.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,WAAW,QAGK,CAAA;AAE7B,eAAO,MAAM,UAAU,QAaM,CAAA"}

package/dist/trustAnchors.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sphereonCA = exports.funkeTestCA = void 0;
+exports.funkeTestCA = '-----BEGIN CERTIFICATE-----\n' +
+    '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\n' +
+    '-----END CERTIFICATE-----';
+exports.sphereonCA = '-----BEGIN CERTIFICATE-----\n' +
+    'MIICCDCCAa6gAwIBAgITAPMgqwtYzWPBXaobHhxG9iSydTAKBggqhkjOPQQDAjBa\n' +
+    'MQswCQYDVQQGEwJOTDEkMCIGA1UECgwbU3BoZXJlb24gSW50ZXJuYXRpb25hbCBC\n' +
+    'LlYuMQswCQYDVQQLDAJJVDEYMBYGA1UEAwwPY2Euc3BoZXJlb24uY29tMB4XDTI0\n' +
+    'MDcyODIxMjY0OVoXDTM0MDcyODIxMjY0OVowWjELMAkGA1UEBhMCTkwxJDAiBgNV\n' +
+    'BAoMG1NwaGVyZW9uIEludGVybmF0aW9uYWwgQi5WLjELMAkGA1UECwwCSVQxGDAW\n' +
+    'BgNVBAMMD2NhLnNwaGVyZW9uLmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IA\n' +
+    'BEiA0KeESSNrOcmCDga8YsBkUTgowZGwqvL2n91JUpAMdRSwvlVFdqdiLXnk2pQq\n' +
+    'T1vZnDG0I+x+iz2EbdsG0aajUzBRMB0GA1UdDgQWBBTnB8pdlVz5yKD+zuNkRR6A\n' +
+    'sywywTAOBgNVHQ8BAf8EBAMCAaYwDwYDVR0lBAgwBgYEVR0lADAPBgNVHRMBAf8E\n' +
+    'BTADAQH/MAoGCCqGSM49BAMCA0gAMEUCIHH7ie1OAAbff5262rzZVQa8J9zENG8A\n' +
+    'QlHHFydMdgaXAiEA1Ib82mhHIYDziE0DDbHEAXOs98al+7dpo8fPGVGTeKI=\n' +
+    '-----END CERTIFICATE-----';
+//# sourceMappingURL=trustAnchors.js.map

package/dist/trustAnchors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trustAnchors.js","sourceRoot":"","sources":["../src/trustAnchors.ts"],"names":[],"mappings":";;;AAAa,QAAA,WAAW,GACtB,+BAA+B;IAC/B,w1BAAw1B;IACx1B,2BAA2B,CAAA;AAEhB,QAAA,UAAU,GACrB,+BAA+B;IAC/B,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,gEAAgE;IAChE,2BAA2B,CAAA"}

package/dist/types.d.ts

@@ -1,6 +1,7 @@
 import { Hasher, KBOptions, SaltGenerator } from '@sd-jwt/types';
-import { SdJwtVcPayload } from '@sd-jwt/sd-jwt-vc';
-import { IAgentContext, IDIDManager, IKeyManager, IPluginMethodMap, IResolver } from '@veramo/core';
+import { SdJwtVcPayload as SdJwtPayload } from '@sd-jwt/sd-jwt-vc';
+import { DIDDocumentSection, IAgentContext, IDIDManager, IKeyManager, IPluginMethodMap, IResolver } from '@veramo/core';
+import { ImDLMdoc } from '@sphereon/ssi-sdk.mdl-mdoc';
 /**
  * My Agent Plugin description.
  *
@@ -55,11 +56,15 @@ export interface ISDJwtPlugin extends IPluginMethodMap {
      */
     verifySdJwtPresentation(args: IVerifySdJwtPresentationArgs, context: IRequiredContext): Promise<IVerifySdJwtPresentationResult>;
 }
+export declare function contextHasSDJwtPlugin(context: IAgentContext<IPluginMethodMap>): context is IAgentContext<ISDJwtPlugin>;
 /**
  * ICreateSdJwtVcArgs
  *
  * @beta
  */
+export interface SdJwtVcPayload extends SdJwtPayload {
+    x5c?: string[];
+}
 export interface ICreateSdJwtVcArgs {
     credentialPayload: SdJwtVcPayload;
     disclosureFrame?: IDisclosureFrame;
@@ -140,6 +145,18 @@ export interface IVerifySdJwtPresentationArgs {
 export type IVerifySdJwtPresentationResult = {
     verifiedPayloads: Record<string, unknown>;
 };
+export type SignKeyArgs = {
+    identifier: string;
+    vmRelationship: DIDDocumentSection;
+};
+export type SignKeyResult = {
+    alg: string;
+    key: {
+        kid: string;
+        x5c?: string[];
+        jwkThumbprint?: string;
+    };
+};
 /**
  * This context describes the requirements of this plugin.
  * For this plugin to function properly, the agent needs to also have other plugins installed that implement the
@@ -148,7 +165,7 @@ export type IVerifySdJwtPresentationResult = {
  *
  * @beta
  */
-export type IRequiredContext = IAgentContext<IDIDManager & IResolver & IKeyManager>;
+export type IRequiredContext = IAgentContext<IDIDManager & IResolver & IKeyManager & ImDLMdoc>;
 export interface SdJWTImplementation {
     saltGenerator: SaltGenerator;
     hasher: Hasher;

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAClD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAEnG;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,YAAa,SAAQ,gBAAgB;IACpD;;;;;;;OAOG;IACH;;;;OAIG;IACH,aAAa,CAAC,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAEjG;;;;OAIG;IACH,uBAAuB,CAAC,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAA;IAE/H;;;;OAIG;IACH,aAAa,CAAC,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAEjG;;;;OAIG;IACH,uBAAuB,CAAC,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAA;CAChI;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,iBAAiB,EAAE,cAAc,CAAA;IAGjC,eAAe,CAAC,EAAE,gBAAgB,CAAA;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,GAAG,CAAC,EAAE,MAAM,EAAE,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAAA;CAC9D;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,UAAU,EAAE,MAAM,CAAA;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,4BAA4B;IAC3C;;OAEG;IACH,YAAY,EAAE,MAAM,CAAA;IAOpB,iBAAiB,CAAC,EAAE,kBAAkB,CAAA;IAEtC;;OAEG;IACH,EAAE,CAAC,EAAE,SAAS,CAAA;CACf;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,kBAAkB,CAAA;CAC1C;AAED;;;GAGG;AACH,MAAM,WAAW,8BAA8B;IAC7C;;OAEG;IACH,YAAY,EAAE,MAAM,CAAA;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAA;CACnB;AAED;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,gBAAgB,EAAE,OAAO,CAAA;CAC1B,CAAA;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,YAAY,EAAE,MAAM,CAAA;IAEpB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAE5B,EAAE,CAAC,EAAE,OAAO,CAAA;CACb;AAED;;GAEG;AACH,MAAM,MAAM,8BAA8B,GAAG;IAC3C,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC1C,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,gBAAgB,GAAG,aAAa,CAAC,WAAW,GAAG,SAAS,GAAG,WAAW,CAAC,CAAA;AACnF,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,aAAa,CAAA;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CAC9F;AAED,MAAM,WAAW,MAAM;IACrB;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE;QACJ,GAAG,EAAE,UAAU,CAAA;KAChB,CAAA;IACD,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAChE,OAAO,EAAE,cAAc,IAAI,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAClE,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AACvH,OAAO,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAA;AAGrD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,YAAa,SAAQ,gBAAgB;IACpD;;;;;;;OAOG;IACH;;;;OAIG;IACH,aAAa,CAAC,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAEjG;;;;OAIG;IACH,uBAAuB,CAAC,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAA;IAE/H;;;;OAIG;IACH,aAAa,CAAC,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAEjG;;;;OAIG;IACH,uBAAuB,CAAC,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAA;CAChI;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,aAAa,CAAC,gBAAgB,CAAC,GAAG,OAAO,IAAI,aAAa,CAAC,YAAY,CAAC,CAEtH;AAED;;;;GAIG;AAEH,MAAM,WAAW,cAAe,SAAQ,YAAY;IAClD,GAAG,CAAC,EAAE,MAAM,EAAE,CAAA;CACf;AAED,MAAM,WAAW,kBAAkB;IACjC,iBAAiB,EAAE,cAAc,CAAA;IAGjC,eAAe,CAAC,EAAE,gBAAgB,CAAA;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,GAAG,CAAC,EAAE,MAAM,EAAE,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;IAElB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAAA;CAC9D;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC;;OAEG;IACH,UAAU,EAAE,MAAM,CAAA;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,4BAA4B;IAC3C;;OAEG;IACH,YAAY,EAAE,MAAM,CAAA;IAOpB,iBAAiB,CAAC,EAAE,kBAAkB,CAAA;IAEtC;;OAEG;IACH,EAAE,CAAC,EAAE,SAAS,CAAA;CACf;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,kBAAkB,CAAA;CAC1C;AAED;;;GAGG;AACH,MAAM,WAAW,8BAA8B;IAC7C;;OAEG;IACH,YAAY,EAAE,MAAM,CAAA;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAA;CACnB;AAED;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,gBAAgB,EAAE,OAAO,CAAA;CAC1B,CAAA;AAED;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,YAAY,EAAE,MAAM,CAAA;IAEpB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAE5B,EAAE,CAAC,EAAE,OAAO,CAAA;CACb;AAED;;GAEG;AACH,MAAM,MAAM,8BAA8B,GAAG;IAC3C,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC1C,CAAA;AAED,MAAM,MAAM,WAAW,GAAG;IACxB,UAAU,EAAE,MAAM,CAAA;IAClB,cAAc,EAAE,kBAAkB,CAAA;CACnC,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE;QACH,GAAG,EAAE,MAAM,CAAA;QACX,GAAG,CAAC,EAAE,MAAM,EAAE,CAAA;QACd,aAAa,CAAC,EAAE,MAAM,CAAA;KACvB,CAAA;CACF,CAAA;AACD;;;;;;;GAOG;AACH,MAAM,MAAM,gBAAgB,GAAG,aAAa,CAAC,WAAW,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC,CAAA;AAE9F,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,aAAa,CAAA;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CAC9F;AAED,MAAM,WAAW,MAAM;IACrB;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE;QACJ,GAAG,EAAE,UAAU,CAAA;KAChB,CAAA;IAED,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB"}

package/dist/types.js

@@ -1,3 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.contextHasSDJwtPlugin = void 0;
+const ssi_sdk_agent_config_1 = require("@sphereon/ssi-sdk.agent-config");
+function contextHasSDJwtPlugin(context) {
+    return (0, ssi_sdk_agent_config_1.contextHasPlugin)(context, 'verifySdJwtVc');
+}
+exports.contextHasSDJwtPlugin = contextHasSDJwtPlugin;
 //# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":";;;AAIA,yEAAiE;AA4DjE,SAAgB,qBAAqB,CAAC,OAAwC;IAC5E,OAAO,IAAA,uCAAgB,EAAC,OAAO,EAAE,eAAe,CAAC,CAAA;AACnD,CAAC;AAFD,sDAEC"}

package/package.json

@@ -1,13 +1,12 @@
 {
   "name": "@sphereon/ssi-sdk.sd-jwt",
-  "version": "0.29.0",
+  "version": "0.29.1-next.103+6c9bb921",
   "source": "src/index.ts",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "scripts": {
     "build": "tsc",
-    "build:clean": "tsc --build --clean && tsc --build",
-    "generate-plugin-schema": "ts-node ../../packages/dev/bin/sphereon.js dev generate-plugin-schema"
+    "build:clean": "tsc --build --clean && tsc --build"
   },
   "veramo": {
     "pluginInterfaces": {
@@ -17,7 +16,11 @@
   "dependencies": {
     "@sd-jwt/core": "^0.6.1",
     "@sd-jwt/sd-jwt-vc": "^0.6.1",
-    "@sphereon/ssi-sdk-ext.did-utils": "0.24.0",
+    "@sphereon/ssi-sdk-ext.did-utils": "0.24.1-next.96",
+    "@sphereon/ssi-sdk-ext.key-utils": "0.24.1-next.96",
+    "@sphereon/ssi-sdk.agent-config": "0.29.1-next.103+6c9bb921",
+    "@sphereon/ssi-sdk.mdl-mdoc": "0.29.1-next.103+6c9bb921",
+    "@sphereon/ssi-types": "0.29.1-next.103+6c9bb921",
     "@veramo/utils": "4.2.0",
     "debug": "^4.3.5"
   },
@@ -25,10 +28,10 @@
     "@sd-jwt/decode": "^0.6.1",
     "@sd-jwt/types": "^0.6.1",
     "@sd-jwt/utils": "^0.6.1",
-    "@sphereon/ssi-sdk-ext.did-provider-jwk": "0.24.0",
-    "@sphereon/ssi-sdk-ext.did-resolver-jwk": "0.24.0",
-    "@sphereon/ssi-sdk-ext.key-manager": "0.24.0",
-    "@sphereon/ssi-sdk-ext.kms-local": "0.24.0",
+    "@sphereon/ssi-sdk-ext.did-provider-jwk": "0.24.1-next.96",
+    "@sphereon/ssi-sdk-ext.did-resolver-jwk": "0.24.1-next.96",
+    "@sphereon/ssi-sdk-ext.key-manager": "0.24.1-next.96",
+    "@sphereon/ssi-sdk-ext.kms-local": "0.24.1-next.96",
     "@types/node": "18.15.3",
     "@veramo/core": "4.2.0",
     "@veramo/data-store": "4.2.0",
@@ -62,5 +65,5 @@
     "Selective Disclosure",
     "Verifiable Credential"
   ],
-  "gitHead": "3000e7d897ac4ea58779ff2b578027bf9165be43"
+  "gitHead": "6c9bb921b256f0a200e49b8977180e7d8ed93bf9"
 }

package/src/__tests__/sd-jwt.test.ts

@@ -132,7 +132,7 @@ describe('Agent plugin', () => {
       iat: new Date().getTime() / 1000,
       vct: '',
     }
-    expect(
+    await expect(
       agent.createSdJwtVc({
         credentialPayload: credentialPayload as unknown as SdJwtVcPayload,
         disclosureFrame,
@@ -242,7 +242,7 @@ describe('Agent plugin', () => {
         },
       },
     })
-    expect(presentation).rejects.toThrow('credential does not include a holder reference')
+    await expect(presentation).rejects.toThrow('credential does not include a holder reference')
   })
 
   it('verify a presentation', async () => {

package/src/action-handler.ts

@@ -1,6 +1,6 @@
 import Debug from 'debug'
 
-import { schema } from './index'
+import { SignKeyArgs, SignKeyResult } from './index'
 import { Jwt, SDJwt } from '@sd-jwt/core'
 import { SDJwtVcInstance, SdJwtVcPayload } from '@sd-jwt/sd-jwt-vc'
 import { Signer, Verifier, KbVerifier, JwtPayload, DisclosureFrame, PresentationFrame } from '@sd-jwt/types'
@@ -19,16 +19,17 @@ import {
   IVerifySdJwtPresentationResult,
   Claims,
 } from './types'
-import { mapIdentifierKeysToDocWithJwkSupport } from '@sphereon/ssi-sdk-ext.did-utils'
-import { encodeJoseBlob } from '@veramo/utils'
-const debug = Debug('sd-jwt')
+import { _ExtendedIKey } from '@veramo/utils'
+import { getFirstKeyWithRelation } from '@sphereon/ssi-sdk-ext.did-utils'
+import { calculateJwkThumbprint, JWK } from '@sphereon/ssi-sdk-ext.key-utils'
+import { funkeTestCA, sphereonCA } from './trustAnchors'
+
+const debug = Debug('@sphereon/ssi-sdk.sd-jwt')
 /**
  * @beta
  * SD-JWT plugin for Veramo
  */
 export class SDJwtPlugin implements IAgentPlugin {
-  readonly schema = schema.ISDJwtPlugin
-
   constructor(private algorithms: SdJWTImplementation) {}
 
   // map the methods your plugin is declaring to their implementation
@@ -51,7 +52,7 @@ export class SDJwtPlugin implements IAgentPlugin {
       throw new Error('credential.issuer must not be empty')
     }
 
-    const { alg, key } = await this.getSignKey(issuer, context)
+    const { alg, key } = await this.getSignKey({ identifier: issuer, vmRelationship: 'assertionMethod' }, context)
 
     //TODO: let the user also insert a method to sign the data
     const signer: Signer = async (data: string) => context.agent.keyManagerSign({ keyRef: key.kid, data })
@@ -70,27 +71,37 @@ export class SDJwtPlugin implements IAgentPlugin {
 
   /**
    * Get the key to sign the SD-JWT
-   * @param issuer - did url like did:exmaple.com#key-1
+   * @param args - consists of twp arguments: identifier like a did and other forms of identifiers and vmRelationship which represents the purpose of the key
    * @param context - agent instance
    * @returns the key to sign the SD-JWT
    */
-  private async getSignKey(issuer: string, context: IRequiredContext) {
-    debug(`Getting signing key for issuer ${issuer}`)
-    const identifier = await context.agent.didManagerGet({
-      did: issuer.split('#')[0],
-    })
-    const doc = await mapIdentifierKeysToDocWithJwkSupport({ identifier, vmRelationship: 'assertionMethod' }, context)
-    if (!doc || doc.length === 0) {
-      throw new Error('No key found for signing')
-    }
-    const key = doc.find((key) => key.meta.verificationMethod.id === issuer)
-    if (!key) {
-      throw new Error(`No key found with the given id: ${issuer}`)
+  async getSignKey(args: SignKeyArgs, context: IRequiredContext): Promise<SignKeyResult> {
+    const { identifier, vmRelationship } = { ...args }
+    if (identifier.startsWith('did:')) {
+      const didIdentifier = await context.agent.didManagerGet({
+        did: identifier.split('#')[0],
+      })
+      const key: _ExtendedIKey | undefined = await getFirstKeyWithRelation({ identifier: didIdentifier, vmRelationship: vmRelationship }, context)
+      if (!key) {
+        throw new Error(`No key found with the given id: ${identifier}`)
+      }
+      const alg = this.getKeyTypeAlgorithm(key.type)
+      debug(`Signing key ${key.publicKeyHex} found for identifier ${identifier}`)
+      return { alg, key }
+    } else {
+      const key = await context.agent.keyManagerGet({ kid: identifier })
+      if (!key) {
+        throw new Error(`No key found with the identifier ${identifier}`)
+      }
+      const alg = this.getKeyTypeAlgorithm(key.type)
+      if (key.meta?.x509 && key.meta.x509.x5c) {
+        return { alg, key: { kid: key.kid, x5c: key.meta.x509.x5c as string[] } }
+      } else if (key.meta?.jwkThumbprint) {
+        return { alg, key: { kid: key.kid, jwkThumbprint: key.meta.jwkThumbprint } }
+      } else {
+        return { alg, key: { kid: key.kid } }
+      }
     }
-    const alg = this.getKeyTypeAlgorithm(key.type)
-    debug(`Signing key ${key.publicKeyHex} found for issuer ${issuer}`)
-
-    return { alg, key }
   }
 
   /**
@@ -102,19 +113,17 @@ export class SDJwtPlugin implements IAgentPlugin {
   async createSdJwtPresentation(args: ICreateSdJwtPresentationArgs, context: IRequiredContext): Promise<ICreateSdJwtPresentationResult> {
     const cred = await SDJwt.fromEncode(args.presentation, this.algorithms.hasher)
     const claims = await cred.getClaims<Claims>(this.algorithms.hasher)
-    let holderDID: string
+    let holder: string
     // we primarly look for a cnf field, if it's not there we look for a sub field. If this is also not given, we throw an error since we can not sign it.
     if (claims.cnf?.jwk) {
-      const key = claims.cnf.jwk
-      //TODO SDK-19: convert the JWK to hex and search for the appropriate key and associated DID
-      //doesn't apply to did:jwk only, as you can represent any DID key as a JWK. So whenever you encounter a JWK it doesn't mean it had to come from a did:jwk in the system. It just can always be represented as a did:jwk
-      holderDID = `did:jwk:${encodeJoseBlob(key)}#0`
+      const jwk = claims.cnf.jwk
+      holder = calculateJwkThumbprint({ jwk: jwk as JWK })
     } else if (claims.sub) {
-      holderDID = claims.sub as string
+      holder = claims.sub as string
     } else {
       throw new Error('invalid_argument: credential does not include a holder reference')
     }
-    const { alg, key } = await this.getSignKey(holderDID, context)
+    const { alg, key } = await this.getSignKey({ identifier: holder, vmRelationship: 'assertionMethod' }, context)
 
     const signer: Signer = async (data: string) => {
       return context.agent.keyManagerSign({ keyRef: key.kid, data })
@@ -175,22 +184,40 @@ export class SDJwtPlugin implements IAgentPlugin {
   async verify(sdjwt: SDJwtVcInstance, context: IRequiredContext, data: string, signature: string) {
     const decodedVC = await sdjwt.decode(`${data}.${signature}`)
     const issuer: string = ((decodedVC.jwt as Jwt).payload as Record<string, unknown>).iss as string
-    if (!issuer.startsWith('did:')) {
-      throw new Error('invalid_issuer: issuer must be a did')
+    const header = (decodedVC.jwt as Jwt).header as Record<string, any>
+    const x5c: string[] | undefined = header?.x5c as string[]
+    let jwk: JWK | JsonWebKey | undefined = undefined
+    if (issuer.includes('did:')) {
+      const didDoc = await context.agent.resolveDid({ didUrl: issuer })
+      if (!didDoc) {
+        throw new Error('invalid_issuer: issuer did not resolve to a did document')
+      }
+      //TODO SDK-20: This should be checking for an assertionMethod and not just an verificationMethod with an id
+      const didDocumentKey = didDoc.didDocument?.verificationMethod?.find((key) => key.id)
+      if (!didDocumentKey) {
+        throw new Error('invalid_issuer: issuer did document does not include referenced key')
+      }
+      //FIXME SDK-21: in case it's another did method, the value of the key can be also encoded as a base64url
+      // needs more checks. some DID methods do not expose the keys as publicKeyJwk
+      jwk = didDocumentKey.publicKeyJwk as JsonWebKey
     }
-    const didDoc = await context.agent.resolveDid({ didUrl: issuer })
-    if (!didDoc) {
-      throw new Error('invalid_issuer: issuer did not resolve to a did document')
+    if (x5c) {
+      const certificateValidationResult = await context.agent.verifyCertificateChain({
+        chain: x5c,
+        trustAnchors: [funkeTestCA, sphereonCA],
+      })
+
+      if (certificateValidationResult.error || !certificateValidationResult?.certificateChain) {
+        throw new Error('Certificate chain validation failed')
+      }
+      const certInfo = certificateValidationResult.certificateChain[0]
+      jwk = certInfo.publicKeyJWK as JWK
     }
-    //TODO SDK-20: This should be checking for an assertionMethod and not just an verificationMethod with an id
-    const didDocumentKey = didDoc.didDocument?.verificationMethod?.find((key) => key.id)
-    if (!didDocumentKey) {
-      throw new Error('invalid_issuer: issuer did document does not include referenced key')
+
+    if (!jwk) {
+      throw new Error('No valid public key found for signature verification')
     }
-    //FIXME SDK-21: in case it's another did method, the value of the key can be also encoded as a base64url
-    //needs more checks. some DID methods do not expose the keys as publicKeyJwk
-    const key = didDocumentKey.publicKeyJwk as JsonWebKey
-    return this.algorithms.verifySignature(data, signature, key)
+    return this.algorithms.verifySignature(data, signature, jwk)
   }
 
   /**

package/src/index.ts

@@ -1,7 +1,2 @@
-/**
- * @public
- */
-const schema = require('../plugin.schema.json')
-export { schema }
 export { SDJwtPlugin } from './action-handler'
 export * from './types'

package/src/trustAnchors.ts

@@ -0,0 +1,19 @@
+export const funkeTestCA =
+  '-----BEGIN CERTIFICATE-----\n' +
+  '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\n' +
+  '-----END CERTIFICATE-----'
+
+export const sphereonCA =
+  '-----BEGIN CERTIFICATE-----\n' +
+  'MIICCDCCAa6gAwIBAgITAPMgqwtYzWPBXaobHhxG9iSydTAKBggqhkjOPQQDAjBa\n' +
+  'MQswCQYDVQQGEwJOTDEkMCIGA1UECgwbU3BoZXJlb24gSW50ZXJuYXRpb25hbCBC\n' +
+  'LlYuMQswCQYDVQQLDAJJVDEYMBYGA1UEAwwPY2Euc3BoZXJlb24uY29tMB4XDTI0\n' +
+  'MDcyODIxMjY0OVoXDTM0MDcyODIxMjY0OVowWjELMAkGA1UEBhMCTkwxJDAiBgNV\n' +
+  'BAoMG1NwaGVyZW9uIEludGVybmF0aW9uYWwgQi5WLjELMAkGA1UECwwCSVQxGDAW\n' +
+  'BgNVBAMMD2NhLnNwaGVyZW9uLmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IA\n' +
+  'BEiA0KeESSNrOcmCDga8YsBkUTgowZGwqvL2n91JUpAMdRSwvlVFdqdiLXnk2pQq\n' +
+  'T1vZnDG0I+x+iz2EbdsG0aajUzBRMB0GA1UdDgQWBBTnB8pdlVz5yKD+zuNkRR6A\n' +
+  'sywywTAOBgNVHQ8BAf8EBAMCAaYwDwYDVR0lBAgwBgYEVR0lADAPBgNVHRMBAf8E\n' +
+  'BTADAQH/MAoGCCqGSM49BAMCA0gAMEUCIHH7ie1OAAbff5262rzZVQa8J9zENG8A\n' +
+  'QlHHFydMdgaXAiEA1Ib82mhHIYDziE0DDbHEAXOs98al+7dpo8fPGVGTeKI=\n' +
+  '-----END CERTIFICATE-----'

package/src/types.ts

@@ -1,6 +1,8 @@
 import { Hasher, KBOptions, SaltGenerator } from '@sd-jwt/types'
-import { SdJwtVcPayload } from '@sd-jwt/sd-jwt-vc'
-import { IAgentContext, IDIDManager, IKeyManager, IPluginMethodMap, IResolver } from '@veramo/core'
+import { SdJwtVcPayload as SdJwtPayload } from '@sd-jwt/sd-jwt-vc'
+import { DIDDocumentSection, IAgentContext, IDIDManager, IKeyManager, IPluginMethodMap, IResolver } from '@veramo/core'
+import { ImDLMdoc } from '@sphereon/ssi-sdk.mdl-mdoc'
+import { contextHasPlugin } from '@sphereon/ssi-sdk.agent-config'
 
 /**
  * My Agent Plugin description.
@@ -60,11 +62,20 @@ export interface ISDJwtPlugin extends IPluginMethodMap {
   verifySdJwtPresentation(args: IVerifySdJwtPresentationArgs, context: IRequiredContext): Promise<IVerifySdJwtPresentationResult>
 }
 
+export function contextHasSDJwtPlugin(context: IAgentContext<IPluginMethodMap>): context is IAgentContext<ISDJwtPlugin> {
+  return contextHasPlugin(context, 'verifySdJwtVc')
+}
+
 /**
  * ICreateSdJwtVcArgs
  *
  * @beta
  */
+
+export interface SdJwtVcPayload extends SdJwtPayload {
+  x5c?: string[]
+}
+
 export interface ICreateSdJwtVcArgs {
   credentialPayload: SdJwtVcPayload
 
@@ -78,6 +89,7 @@ export interface ICreateSdJwtVcArgs {
 export interface IDisclosureFrame {
   _sd?: string[]
   _sd_decoy?: number
+
   [x: string]: string[] | number | IDisclosureFrame | undefined
 }
 
@@ -166,6 +178,19 @@ export type IVerifySdJwtPresentationResult = {
   verifiedPayloads: Record<string, unknown>
 }
 
+export type SignKeyArgs = {
+  identifier: string
+  vmRelationship: DIDDocumentSection
+}
+
+export type SignKeyResult = {
+  alg: string
+  key: {
+    kid: string
+    x5c?: string[]
+    jwkThumbprint?: string
+  }
+}
 /**
  * This context describes the requirements of this plugin.
  * For this plugin to function properly, the agent needs to also have other plugins installed that implement the
@@ -174,7 +199,8 @@ export type IVerifySdJwtPresentationResult = {
  *
  * @beta
  */
-export type IRequiredContext = IAgentContext<IDIDManager & IResolver & IKeyManager>
+export type IRequiredContext = IAgentContext<IDIDManager & IResolver & IKeyManager & ImDLMdoc>
+
 export interface SdJWTImplementation {
   saltGenerator: SaltGenerator
   hasher: Hasher
@@ -189,5 +215,6 @@ export interface Claims {
   cnf?: {
     jwk: JsonWebKey
   }
+
   [key: string]: unknown
 }

package/dist/ssi-sdk.sd-jwt.d.ts

@@ -1,261 +0,0 @@
-import { Hasher } from '@sd-jwt/types';
-import { IAgentContext } from '@veramo/core';
-import { IAgentPlugin } from '@veramo/core';
-import { IDIDManager } from '@veramo/core';
-import { IKeyManager } from '@veramo/core';
-import { IPluginMethodMap } from '@veramo/core';
-import { IResolver } from '@veramo/core';
-import { KBOptions } from '@sd-jwt/types';
-import { SaltGenerator } from '@sd-jwt/types';
-import { SDJwtVcInstance } from '@sd-jwt/sd-jwt-vc';
-import { SdJwtVcPayload } from '@sd-jwt/sd-jwt-vc';
-
-export declare interface Claims {
-    /**
-     * Subject of the SD-JWT
-     */
-    sub?: string;
-    cnf?: {
-        jwk: JsonWebKey;
-    };
-    [key: string]: unknown;
-}
-
-/**
- *
- * @beta
- */
-export declare interface ICreateSdJwtPresentationArgs {
-    /**
-     * Encoded SD-JWT credential
-     */
-    presentation: string;
-    presentationFrame?: IPresentationFrame;
-    /**
-     * Information to include to add key binding.
-     */
-    kb?: KBOptions;
-}
-
-/**
- * Created presentation
- * @beta
- */
-export declare interface ICreateSdJwtPresentationResult {
-    /**
-     * Encoded presentation.
-     */
-    presentation: string;
-}
-
-/**
- * ICreateSdJwtVcArgs
- *
- * @beta
- */
-export declare interface ICreateSdJwtVcArgs {
-    credentialPayload: SdJwtVcPayload;
-    disclosureFrame?: IDisclosureFrame;
-}
-
-/**
- * ICreateSdJwtVcResult
- *
- * @beta
- */
-export declare interface ICreateSdJwtVcResult {
-    /**
-     * the encoded sd-jwt credential
-     */
-    credential: string;
-}
-
-/**
- * @beta
- */
-export declare interface IDisclosureFrame {
-    _sd?: string[];
-    _sd_decoy?: number;
-    [x: string]: string[] | number | IDisclosureFrame | undefined;
-}
-
-/**
- * @beta
- */
-export declare interface IPresentationFrame {
-    [x: string]: boolean | IPresentationFrame;
-}
-
-/**
- * This context describes the requirements of this plugin.
- * For this plugin to function properly, the agent needs to also have other plugins installed that implement the
- * interfaces declared here.
- * You can also define requirements on a more granular level, for each plugin method or event handler of your plugin.
- *
- * @beta
- */
-export declare type IRequiredContext = IAgentContext<IDIDManager & IResolver & IKeyManager>;
-
-/**
- * My Agent Plugin description.
- *
- * This is the interface that describes what your plugin can do.
- * The methods listed here, will be directly available to the veramo agent where your plugin is going to be used.
- * Depending on the agent configuration, other agent plugins, as well as the application where the agent is used
- * will be able to call these methods.
- *
- * To build a schema for your plugin using standard tools, you must link to this file in your package.json.
- * Example:
- * ```
- * "veramo": {
- *    "pluginInterfaces": {
- *      "IMyAgentPlugin": "./src/types/IMyAgentPlugin.ts"
- *    }
- *  },
- * ```
- *
- * @beta
- */
-export declare interface ISDJwtPlugin extends IPluginMethodMap {
-    /**
-     * Your plugin method description
-     *
-     * @param args - Input parameters for this method
-     * @param context - The required context where this method can run.
-     *   Declaring a context type here lets other developers know which other plugins
-     *   need to also be installed for this method to work.
-     */
-    /**
-     * Create a signed SD-JWT credential.
-     * @param args - Arguments necessary for the creation of a SD-JWT credential.
-     * @param context - This reserved param is automatically added and handled by the framework, *do not override*
-     */
-    createSdJwtVc(args: ICreateSdJwtVcArgs, context: IRequiredContext): Promise<ICreateSdJwtVcResult>;
-    /**
-     * Create a signed SD-JWT presentation.
-     * @param args - Arguments necessary for the creation of a SD-JWT presentation.
-     * @param context - This reserved param is automatically added and handled by the framework, *do not override*
-     */
-    createSdJwtPresentation(args: ICreateSdJwtPresentationArgs, context: IRequiredContext): Promise<ICreateSdJwtPresentationResult>;
-    /**
-     * Verify a signed SD-JWT credential.
-     * @param args - Arguments necessary for the verification of a SD-JWT credential.
-     * @param context - This reserved param is automatically added and handled by the framework, *do not override*
-     */
-    verifySdJwtVc(args: IVerifySdJwtVcArgs, context: IRequiredContext): Promise<IVerifySdJwtVcResult>;
-    /**
-     * Verify a signed SD-JWT presentation.
-     * @param args - Arguments necessary for the verification of a SD-JWT presentation.
-     * @param context - This reserved param is automatically added and handled by the framework, *do not override*
-     */
-    verifySdJwtPresentation(args: IVerifySdJwtPresentationArgs, context: IRequiredContext): Promise<IVerifySdJwtPresentationResult>;
-}
-
-/**
- * @beta
- */
-export declare interface IVerifySdJwtPresentationArgs {
-    presentation: string;
-    requiredClaimKeys?: string[];
-    kb?: boolean;
-}
-
-/**
- * @beta
- */
-export declare type IVerifySdJwtPresentationResult = {
-    verifiedPayloads: Record<string, unknown>;
-};
-
-/**
- * @beta
- */
-export declare interface IVerifySdJwtVcArgs {
-    credential: string;
-}
-
-/**
- * @beta
- */
-export declare type IVerifySdJwtVcResult = {
-    verifiedPayloads: unknown;
-};
-
-/**
- * @public
- */
-export declare const schema: any;
-
-export declare interface SdJWTImplementation {
-    saltGenerator: SaltGenerator;
-    hasher: Hasher;
-    verifySignature: (data: string, signature: string, publicKey: JsonWebKey) => Promise<boolean>;
-}
-
-/**
- * @beta
- * SD-JWT plugin for Veramo
- */
-export declare class SDJwtPlugin implements IAgentPlugin {
-    private algorithms;
-    readonly schema: any;
-    constructor(algorithms: SdJWTImplementation);
-    readonly methods: ISDJwtPlugin;
-    /**
-     * Create a signed SD-JWT credential.
-     * @param args - Arguments necessary for the creation of a SD-JWT credential.
-     * @param context - This reserved param is automatically added and handled by the framework, *do not override*
-     * @returns A signed SD-JWT credential.
-     */
-    createSdJwtVc(args: ICreateSdJwtVcArgs, context: IRequiredContext): Promise<ICreateSdJwtVcResult>;
-    /**
-     * Get the key to sign the SD-JWT
-     * @param issuer - did url like did:exmaple.com#key-1
-     * @param context - agent instance
-     * @returns the key to sign the SD-JWT
-     */
-    private getSignKey;
-    /**
-     * Create a signed SD-JWT presentation.
-     * @param args - Arguments necessary for the creation of a SD-JWT presentation.
-     * @param context - This reserved param is automatically added and handled by the framework, *do not override*
-     * @returns A signed SD-JWT presentation.
-     */
-    createSdJwtPresentation(args: ICreateSdJwtPresentationArgs, context: IRequiredContext): Promise<ICreateSdJwtPresentationResult>;
-    /**
-     * Verify a signed SD-JWT credential.
-     * @param args - Arguments necessary for the verify a SD-JWT credential.
-     * @param context - This reserved param is automatically added and handled by the framework, *do not override*
-     * @returns
-     */
-    verifySdJwtVc(args: IVerifySdJwtVcArgs, context: IRequiredContext): Promise<IVerifySdJwtVcResult>;
-    /**
-     * Verify the key binding of a SD-JWT by validating the signature of the key bound to the SD-JWT
-     * @param sdjwt - SD-JWT instance
-     * @param context - This reserved param is automatically added and handled by the framework, *do not override*
-     * @param data - signed data
-     * @param signature - The signature
-     * @param payload - The payload of the SD-JWT
-     * @returns
-     */
-    private verifyKb;
-    /**
-     * Validates the signature of a SD-JWT
-     * @param sdjwt - SD-JWT instance
-     * @param context - This reserved param is automatically added and handled by the framework, *do not override*
-     * @param data - signed data
-     * @param signature - The signature
-     * @returns
-     */
-    verify(sdjwt: SDJwtVcInstance, context: IRequiredContext, data: string, signature: string): Promise<boolean>;
-    /**
-     * Verify a signed SD-JWT presentation.
-     * @param args - Arguments necessary for the verify a SD-JWT presentation.
-     * @param context - This reserved param is automatically added and handled by the framework, *do not override*
-     * @returns
-     */
-    verifySdJwtPresentation(args: IVerifySdJwtPresentationArgs, context: IRequiredContext): Promise<IVerifySdJwtPresentationResult>;
-    private getKeyTypeAlgorithm;
-}
-
-export { }

package/dist/tsdoc-metadata.json

@@ -1,11 +0,0 @@
-// This file is read by tools that parse documentation comments conforming to the TSDoc standard.
-// It should be published with your NPM package.  It should not be tracked by Git.
-{
-  "tsdocVersion": "0.12",
-  "toolPackages": [
-    {
-      "packageName": "@microsoft/api-extractor",
-      "packageVersion": "7.47.2"
-    }
-  ]
-}

package/plugin.schema.json

@@ -1,254 +0,0 @@
-{
-  "ISDJwtPlugin": {
-    "components": {
-      "schemas": {
-        "ICreateSdJwtPresentationArgs": {
-          "type": "object",
-          "properties": {
-            "presentation": {
-              "type": "string",
-              "description": "Encoded SD-JWT credential"
-            },
-            "presentationFrame": {
-              "$ref": "#/components/schemas/IPresentationFrame"
-            },
-            "kb": {
-              "type": "object",
-              "properties": {
-                "payload": {
-                  "type": "object",
-                  "properties": {
-                    "iat": {
-                      "type": "number"
-                    },
-                    "aud": {
-                      "type": "string"
-                    },
-                    "nonce": {
-                      "type": "string"
-                    }
-                  },
-                  "required": [
-                    "iat",
-                    "aud",
-                    "nonce"
-                  ]
-                }
-              },
-              "required": [
-                "payload"
-              ],
-              "description": "Information to include to add key binding."
-            }
-          },
-          "required": [
-            "presentation"
-          ]
-        },
-        "IPresentationFrame": {
-          "type": "object",
-          "additionalProperties": {
-            "anyOf": [
-              {
-                "type": "boolean"
-              },
-              {
-                "$ref": "#/components/schemas/IPresentationFrame"
-              }
-            ]
-          }
-        },
-        "ICreateSdJwtPresentationResult": {
-          "type": "object",
-          "properties": {
-            "presentation": {
-              "type": "string",
-              "description": "Encoded presentation."
-            }
-          },
-          "required": [
-            "presentation"
-          ],
-          "description": "Created presentation"
-        },
-        "ICreateSdJwtVcArgs": {
-          "type": "object",
-          "properties": {
-            "credentialPayload": {
-              "type": "object",
-              "properties": {
-                "iss": {
-                  "type": "string"
-                },
-                "nbf": {
-                  "type": "number"
-                },
-                "exp": {
-                  "type": "number"
-                },
-                "cnf": {},
-                "vct": {
-                  "type": "string"
-                },
-                "status": {},
-                "sub": {
-                  "type": "string"
-                },
-                "iat": {
-                  "type": "number"
-                }
-              },
-              "required": [
-                "iss",
-                "vct"
-              ]
-            },
-            "disclosureFrame": {
-              "$ref": "#/components/schemas/IDisclosureFrame"
-            }
-          },
-          "required": [
-            "credentialPayload"
-          ],
-          "description": "ICreateSdJwtVcArgs"
-        },
-        "IDisclosureFrame": {
-          "type": "object",
-          "properties": {
-            "_sd": {
-              "type": "array",
-              "items": {
-                "type": "string"
-              }
-            },
-            "_sd_decoy": {
-              "type": "number"
-            }
-          },
-          "additionalProperties": {
-            "anyOf": [
-              {
-                "type": "array",
-                "items": {
-                  "type": "string"
-                }
-              },
-              {
-                "type": "number"
-              },
-              {
-                "$ref": "#/components/schemas/IDisclosureFrame"
-              },
-              {
-                "not": {}
-              }
-            ]
-          }
-        },
-        "ICreateSdJwtVcResult": {
-          "type": "object",
-          "properties": {
-            "credential": {
-              "type": "string",
-              "description": "the encoded sd-jwt credential"
-            }
-          },
-          "required": [
-            "credential"
-          ],
-          "description": "ICreateSdJwtVcResult"
-        },
-        "IVerifySdJwtPresentationArgs": {
-          "type": "object",
-          "properties": {
-            "presentation": {
-              "type": "string"
-            },
-            "requiredClaimKeys": {
-              "type": "array",
-              "items": {
-                "type": "string"
-              }
-            },
-            "kb": {
-              "type": "boolean"
-            }
-          },
-          "required": [
-            "presentation"
-          ]
-        },
-        "IVerifySdJwtPresentationResult": {
-          "type": "object",
-          "properties": {
-            "verifiedPayloads": {
-              "type": "object",
-              "additionalProperties": {}
-            }
-          },
-          "required": [
-            "verifiedPayloads"
-          ]
-        },
-        "IVerifySdJwtVcArgs": {
-          "type": "object",
-          "properties": {
-            "credential": {
-              "type": "string"
-            }
-          },
-          "required": [
-            "credential"
-          ]
-        },
-        "IVerifySdJwtVcResult": {
-          "type": "object",
-          "properties": {
-            "verifiedPayloads": {}
-          },
-          "required": [
-            "verifiedPayloads"
-          ]
-        }
-      },
-      "methods": {
-        "createSdJwtPresentation": {
-          "description": "Create a signed SD-JWT presentation.",
-          "arguments": {
-            "$ref": "#/components/schemas/ICreateSdJwtPresentationArgs"
-          },
-          "returnType": {
-            "$ref": "#/components/schemas/ICreateSdJwtPresentationResult"
-          }
-        },
-        "createSdJwtVc": {
-          "description": "Create a signed SD-JWT credential.",
-          "arguments": {
-            "$ref": "#/components/schemas/ICreateSdJwtVcArgs"
-          },
-          "returnType": {
-            "$ref": "#/components/schemas/ICreateSdJwtVcResult"
-          }
-        },
-        "verifySdJwtPresentation": {
-          "description": "Verify a signed SD-JWT presentation.",
-          "arguments": {
-            "$ref": "#/components/schemas/IVerifySdJwtPresentationArgs"
-          },
-          "returnType": {
-            "$ref": "#/components/schemas/IVerifySdJwtPresentationResult"
-          }
-        },
-        "verifySdJwtVc": {
-          "description": "Verify a signed SD-JWT credential.",
-          "arguments": {
-            "$ref": "#/components/schemas/IVerifySdJwtVcArgs"
-          },
-          "returnType": {
-            "$ref": "#/components/schemas/IVerifySdJwtVcResult"
-          }
-        }
-      }
-    }
-  }
-}