@verana-labs/vs-agent-sdk 2.0.0-dev.51 → 2.0.0-dev.53

package/build/utils/selfIssuedEcsCredential.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.publishSelfIssuedEcsPresentation = publishSelfIssuedEcsPresentation;
 const core_1 = require("@credo-ts/core");
 const setupSelfTr_1 = require("./setupSelfTr");
+const vcdm2_1 = require("./vcdm2");
 const buildIntegrityData = (data) => {
     return (0, setupSelfTr_1.generateDigestSRI)(JSON.stringify((0, setupSelfTr_1.sortKeysDeep)(data)));
 };
@@ -10,6 +11,9 @@ function storedCredentialIsCurrent(credential, credentialSchemaId, did, didRecor
     var _a, _b, _c;
     if (!credential)
         return false;
+    // a credential published by an older agent as data model 1.1 is rebuilt on upgrade
+    if (!(0, vcdm2_1.isDataIntegrityVcdm2Credential)(credential))
+        return false;
     const issuer = typeof credential.issuer === 'string' ? credential.issuer : (_a = credential.issuer) === null || _a === void 0 ? void 0 : _a.id;
     if (issuer !== did)
         return false;
@@ -28,18 +32,27 @@ function storedCredentialIsCurrent(credential, credentialSchemaId, did, didRecor
     const assertionMethods = new Set(((_c = (_b = didRecord.didDocument) === null || _b === void 0 ? void 0 : _b.assertionMethod) !== null && _c !== void 0 ? _c : []).map(entry => typeof entry === 'string' ? entry : entry.id));
     return proofs.every(proof => !!proof.verificationMethod && assertionMethods.has(proof.verificationMethod));
 }
-async function signSelfIssuedEcsCredential(agent, didRecord, type, claims, credentialSchema, presentation) {
+/**
+ * Issues the ECS credential to the agent itself and wraps it in the linked presentation, both
+ * secured with a DataIntegrityProof by the DID Document assertion key.
+ */
+async function signSelfIssuedEcsCredential(agent, didRecord, presentationId, type, claims, credentialSchema) {
     const unsignedCredential = (0, setupSelfTr_1.createCredential)({
         id: agent.did,
         type,
         issuer: agent.did,
-        credentialSubject: { id: agent.did, claims },
+        credentialSubject: Object.assign(Object.assign({}, claims), { id: agent.did }),
+        credentialSchema: { id: credentialSchema.id, type: credentialSchema.type },
     });
-    unsignedCredential.credentialSchema = credentialSchema;
     const verificationMethodId = (0, setupSelfTr_1.getVerificationMethodId)(agent.config.logger, didRecord);
     const signedCredential = await (0, setupSelfTr_1.signerW3c)(agent, unsignedCredential, verificationMethodId);
-    presentation.verifiableCredential = [signedCredential];
-    return await (0, setupSelfTr_1.signerW3c)(agent, presentation, verificationMethodId);
+    const presentation = (0, setupSelfTr_1.createPresentation)({
+        id: presentationId,
+        holder: agent.did,
+        verifiableCredential: [signedCredential],
+    });
+    const signedPresentation = await (0, setupSelfTr_1.signerW3c)(agent, presentation, verificationMethodId);
+    return signedPresentation.securedPresentation;
 }
 async function publishSelfIssuedEcsPresentation(agent, id, ecsSchemas, schemaKey, type, credentialSchema, ecsClaims, beforePublish) {
     var _a, _b, _c, _d, _e, _f, _g;
@@ -68,12 +81,7 @@ async function publishSelfIssuedEcsPresentation(agent, id, ecsSchemas, schemaKey
             await (beforePublish === null || beforePublish === void 0 ? void 0 : beforePublish(metadata.verifiablePresentation));
         return metadata.verifiablePresentation;
     }
-    const presentation = (0, setupSelfTr_1.createPresentation)({
-        id,
-        holder: agent.did,
-        verifiableCredential: [],
-    });
-    const verifiablePresentation = await signSelfIssuedEcsCredential(agent, didRecord, type, claims, credentialSchema, presentation);
+    const verifiablePresentation = await signSelfIssuedEcsCredential(agent, didRecord, id, type, claims, credentialSchema);
     // nothing is persisted yet, so a failure here leaves no public presentation behind
     if (attached)
         await (beforePublish === null || beforePublish === void 0 ? void 0 : beforePublish(verifiablePresentation));
@@ -120,9 +128,7 @@ async function publishSelfIssuedEcsPresentation(agent, id, ecsSchemas, schemaKey
             didDocumentChanged = true;
         }
     }
-    const credential = Array.isArray(verifiablePresentation.verifiableCredential)
-        ? verifiablePresentation.verifiableCredential[0]
-        : verifiablePresentation.verifiableCredential;
+    const [credential] = verifiablePresentation.verifiableCredential;
     record[credentialSchema.id] = {
         credential,
         verifiablePresentation,

package/build/utils/selfIssuedEcsCredential.js.map

@@ -1 +1 @@
-{"version":3,"file":"selfIssuedEcsCredential.js","sourceRoot":"","sources":["../../src/utils/selfIssuedEcsCredential.ts"],"names":[],"mappings":";;AAqFA,4EA2GC;AAhMD,yCAQuB;AAIvB,+CASsB;AAEtB,MAAM,kBAAkB,GAAG,CAAC,IAA6B,EAAE,EAAE;IAC3D,OAAO,IAAA,+BAAiB,EAAC,IAAI,CAAC,SAAS,CAAC,IAAA,0BAAY,EAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AAC9D,CAAC,CAAA;AAQD,SAAS,yBAAyB,CAChC,UAAkD,EAClD,kBAA0B,EAC1B,GAAW,EACX,SAAoB;;IAEpB,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAA;IAE7B,MAAM,MAAM,GAAG,OAAO,UAAU,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,MAAA,UAAU,CAAC,MAAM,0CAAE,EAAE,CAAA;IAChG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,KAAK,CAAA;IAEhC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC;QACvD,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAChC,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAA;IAC/B,IAAI,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,EAAE,MAAK,kBAAkB;QAAE,OAAO,KAAK,CAAA;IAEnD,MAAM,MAAM,GAAG,CAAC,UAAU,CAAC,KAAK;QAC9B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC;YAC/B,CAAC,CAAC,UAAU,CAAC,KAAK;YAClB,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;IACxB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IAErC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,CAAC,MAAA,MAAA,SAAS,CAAC,WAAW,0CAAE,eAAe,mCAAI,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CACzD,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAC7C,CACF,CAAA;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAA;AAC5G,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,KAAc,EACd,SAAoB,EACpB,IAAc,EACd,MAAsC,EACtC,gBAAqC,EACrC,YAA6B;IAE7B,MAAM,kBAAkB,GAAG,IAAA,8BAAgB,EAAC;QAC1C,EAAE,EAAE,KAAK,CAAC,GAAG;QACb,IAAI;QACJ,MAAM,EAAE,KAAK,CAAC,GAAG;QACjB,iBAAiB,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE;KAC7C,CAAC,CAAA;IACF,kBAAkB,CAAC,gBAAgB,GAAG,gBAAgB,CAAA;IACtD,MAAM,oBAAoB,GAAG,IAAA,qCAAuB,EAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;IACpF,MAAM,gBAAgB,GAAG,MAAM,IAAA,uBAAS,EAAC,KAAK,EAAE,kBAAkB,EAAE,oBAAoB,CAAC,CAAA;IACzF,YAAY,CAAC,oBAAoB,GAAG,CAAC,gBAAgB,CAAC,CAAA;IACtD,OAAO,MAAM,IAAA,uBAAS,EAAC,KAAK,EAAE,YAAY,EAAE,oBAAoB,CAAC,CAAA;AACnE,CAAC;AAEM,KAAK,UAAU,gCAAgC,CACpD,KAAc,EACd,EAAU,EACV,UAAkC,EAClC,SAAiB,EACjB,IAAc,EACd,gBAAqC,EACrC,SAAoB,EACpB,aAA8D;;IAE9D,IAAI,CAAC,KAAK,CAAC,GAAG;QAAE,MAAM,KAAK,CAAC,wBAAwB,CAAC,CAAA;IACrD,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAA;IACvE,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,CAAA;IACzC,IAAI,CAAC,WAAW;QAAE,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAA;IAChE,MAAM,MAAM,GAAG,MAAM,IAAA,uBAAS,EAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;IACxG,MAAM,oBAAoB,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAA,8BAAgB,EAAC,SAAS,CAAC,EAAE,CAAA;IAC1E,MAAM,aAAa,GAAG,kBAAkB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAAA;IAChF,MAAM,MAAM,GAAG,MAAA,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,mCAAI,EAAE,CAAA;IACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAA;IAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAC5C,CAAC,CAAC,cAAc,EAAE,KAAK,CAAC,EAAE,EAAE;;QAC1B,OAAA,cAAc,KAAK,gBAAgB,CAAC,EAAE;YACtC,CAAA,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,sBAAsB,0CAAE,EAAE,MAAK,EAAE;YACxC,CAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,QAAQ,MAAK,KAAK,CAAA;KAAA,CAC5B,CAAA;IACD,MAAM,QAAQ,GAAG,CAAC,MAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,QAAQ,mCAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAA;IAC5D,IACE,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,aAAa,MAAK,aAAa;QACzC,yBAAyB,CAAC,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,UAAU,EAAE,gBAAgB,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,EAC1F,CAAC;QACD,8FAA8F;QAC9F,IAAI,QAAQ;YAAE,MAAM,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAG,QAAQ,CAAC,sBAAsB,CAAC,CAAA,CAAA;QACpE,OAAO,QAAQ,CAAC,sBAAsB,CAAA;IACxC,CAAC;IAED,MAAM,YAAY,GAAG,IAAA,gCAAkB,EAAC;QACtC,EAAE;QACF,MAAM,EAAE,KAAK,CAAC,GAAG;QACjB,oBAAoB,EAAE,EAAE;KACzB,CAAC,CAAA;IACF,MAAM,sBAAsB,GAAG,MAAM,2BAA2B,CAC9D,KAAK,EACL,SAAS,EACT,IAAI,EACJ,MAAM,EACN,gBAAgB,EAChB,YAAY,CACb,CAAA;IACD,mFAAmF;IACnF,IAAI,QAAQ;QAAE,MAAM,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAG,sBAAsB,CAAC,CAAA,CAAA;IAC3D,qDAAqD;IACrD,IAAI,QAAQ;QACV,WAAW,CAAC,OAAO,GAAG,MAAA,WAAW,CAAC,OAAO,0CAAE,GAAG,CAAC,CAAC,CAAC,EAAE;YACjD,IAAI,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ;gBAAE,OAAO,CAAC,CAAA;YACnD,IAAI,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,GAAG,QAAQ,EAAE,CAAC;gBAC3E,CAAC,CAAC,EAAE,GAAG,oBAAoB,CAAA;gBAC3B,CAAC,CAAC,eAAe,GAAG,EAAE,CAAA;YACxB,CAAC;YACD,OAAO,CAAC,CAAA;QACV,CAAC,CAAC,CAAA;IACJ,2FAA2F;IAC3F,0FAA0F;IAC1F,4DAA4D;IAC5D,IAAI,kBAAkB,GAAG,KAAK,CAAA;IAC9B,IAAI,QAAQ,IAAI,CAAC,CAAA,MAAA,WAAW,CAAC,OAAO,0CAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,oBAAoB,CAAC,CAAA,EAAE,CAAC;QAC/E,WAAW,CAAC,OAAO,GAAG;YACpB,GAAG,CAAC,MAAA,WAAW,CAAC,OAAO,mCAAI,EAAE,CAAC;YAC9B,IAAI,yBAAkB,CAAC;gBACrB,EAAE,EAAE,oBAAoB;gBACxB,eAAe,EAAE,EAAE;gBACnB,IAAI,EAAE,8BAA8B;aACrC,CAAC;SACH,CAAA;QACD,kBAAkB,GAAG,IAAI,CAAA;IAC3B,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,KAAK,CAAC,GAAG,QAAQ,CAAA;IACpC,IAAI,QAAQ,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAA,WAAW,CAAC,OAAO,0CAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,CAAA;QAC9D,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,KAAK,CAAC,eAAe,KAAK,EAAE,EAAE,CAAC;gBACjC,KAAK,CAAC,eAAe,GAAG,EAAE,CAAA;gBAC1B,kBAAkB,GAAG,IAAI,CAAA;YAC3B,CAAC;QACH,CAAC;aAAM,CAAC;YACN,WAAW,CAAC,OAAO,GAAG;gBACpB,GAAG,CAAC,MAAA,WAAW,CAAC,OAAO,mCAAI,EAAE,CAAC;gBAC9B,IAAI,yBAAkB,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,IAAI,EAAE,8BAA8B,EAAE,CAAC;aACnG,CAAA;YACD,kBAAkB,GAAG,IAAI,CAAA;QAC3B,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,sBAAsB,CAAC,oBAAoB,CAAC;QAC3E,CAAC,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAChD,CAAC,CAAC,sBAAsB,CAAC,oBAAoB,CAAA;IAC/C,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,GAAG;QAC5B,UAAU;QACV,sBAAsB;QACtB,oBAAoB;QACpB,aAAa;QACb,QAAQ;KACT,CAAA;IACD,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;IACzC,MAAM,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,oBAAa,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;IAC7F,IAAI,kBAAkB,EAAE,CAAC;QACvB,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,CAAA;IAC9D,CAAC;IACD,OAAO,sBAAsB,CAAA;AAC/B,CAAC"}
+{"version":3,"file":"selfIssuedEcsCredential.js","sourceRoot":"","sources":["../../src/utils/selfIssuedEcsCredential.ts"],"names":[],"mappings":";;AA8FA,4EAoGC;AAlMD,yCAAkG;AAIlG,+CASsB;AACtB,mCAAwD;AAExD,MAAM,kBAAkB,GAAG,CAAC,IAA6B,EAAE,EAAE;IAC3D,OAAO,IAAA,+BAAiB,EAAC,IAAI,CAAC,SAAS,CAAC,IAAA,0BAAY,EAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AAC9D,CAAC,CAAA;AAQD,SAAS,yBAAyB,CAChC,UAAkD,EAClD,kBAA0B,EAC1B,GAAW,EACX,SAAoB;;IAEpB,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAA;IAC7B,mFAAmF;IACnF,IAAI,CAAC,IAAA,sCAA8B,EAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAA;IAE7D,MAAM,MAAM,GAAG,OAAO,UAAU,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,MAAA,UAAU,CAAC,MAAM,0CAAE,EAAE,CAAA;IAChG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,KAAK,CAAA;IAEhC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC;QACvD,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAChC,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAA;IAC/B,IAAI,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,EAAE,MAAK,kBAAkB;QAAE,OAAO,KAAK,CAAA;IAEnD,MAAM,MAAM,GAAG,CAAC,UAAU,CAAC,KAAK;QAC9B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC;YAC/B,CAAC,CAAC,UAAU,CAAC,KAAK;YAClB,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;IACxB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IAErC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,CAAC,MAAA,MAAA,SAAS,CAAC,WAAW,0CAAE,eAAe,mCAAI,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CACzD,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAC7C,CACF,CAAA;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAA;AAC5G,CAAC;AAOD;;;GAGG;AACH,KAAK,UAAU,2BAA2B,CACxC,KAAc,EACd,SAAoB,EACpB,cAAsB,EACtB,IAAc,EACd,MAA+B,EAC/B,gBAAqC;IAErC,MAAM,kBAAkB,GAAG,IAAA,8BAAgB,EAAC;QAC1C,EAAE,EAAE,KAAK,CAAC,GAAG;QACb,IAAI;QACJ,MAAM,EAAE,KAAK,CAAC,GAAG;QACjB,iBAAiB,kCAAO,MAAM,KAAE,EAAE,EAAE,KAAK,CAAC,GAAG,GAAE;QAC/C,gBAAgB,EAAE,EAAE,EAAE,EAAE,gBAAgB,CAAC,EAAE,EAAE,IAAI,EAAE,gBAAgB,CAAC,IAAI,EAAE;KAC3E,CAAC,CAAA;IACF,MAAM,oBAAoB,GAAG,IAAA,qCAAuB,EAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;IACpF,MAAM,gBAAgB,GAAG,MAAM,IAAA,uBAAS,EAAC,KAAK,EAAE,kBAAkB,EAAE,oBAAoB,CAAC,CAAA;IACzF,MAAM,YAAY,GAAG,IAAA,gCAAkB,EAAC;QACtC,EAAE,EAAE,cAAc;QAClB,MAAM,EAAE,KAAK,CAAC,GAAG;QACjB,oBAAoB,EAAE,CAAC,gBAAgB,CAAC;KACzC,CAAC,CAAA;IACF,MAAM,kBAAkB,GAAG,MAAM,IAAA,uBAAS,EAAC,KAAK,EAAE,YAAY,EAAE,oBAAoB,CAAC,CAAA;IACrF,OAAO,kBAAkB,CAAC,mBAA2D,CAAA;AACvF,CAAC;AAEM,KAAK,UAAU,gCAAgC,CACpD,KAAc,EACd,EAAU,EACV,UAAkC,EAClC,SAAiB,EACjB,IAAc,EACd,gBAAqC,EACrC,SAAoB,EACpB,aAAoF;;IAEpF,IAAI,CAAC,KAAK,CAAC,GAAG;QAAE,MAAM,KAAK,CAAC,wBAAwB,CAAC,CAAA;IACrD,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAA;IACvE,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,CAAA;IACzC,IAAI,CAAC,WAAW;QAAE,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAA;IAChE,MAAM,MAAM,GAAG,MAAM,IAAA,uBAAS,EAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAA;IACxG,MAAM,oBAAoB,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAA,8BAAgB,EAAC,SAAS,CAAC,EAAE,CAAA;IAC1E,MAAM,aAAa,GAAG,kBAAkB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAAA;IAChF,MAAM,MAAM,GAAG,MAAA,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,mCAAI,EAAE,CAAA;IACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAA;IAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAC5C,CAAC,CAAC,cAAc,EAAE,KAAK,CAAC,EAAE,EAAE;;QAC1B,OAAA,cAAc,KAAK,gBAAgB,CAAC,EAAE;YACtC,CAAA,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,sBAAsB,0CAAE,EAAE,MAAK,EAAE;YACxC,CAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,QAAQ,MAAK,KAAK,CAAA;KAAA,CAC5B,CAAA;IACD,MAAM,QAAQ,GAAG,CAAC,MAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,QAAQ,mCAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAA;IAC5D,IACE,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,aAAa,MAAK,aAAa;QACzC,yBAAyB,CAAC,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,UAAU,EAAE,gBAAgB,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,EAC1F,CAAC;QACD,8FAA8F;QAC9F,IAAI,QAAQ;YAAE,MAAM,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAG,QAAQ,CAAC,sBAAsB,CAAC,CAAA,CAAA;QACpE,OAAO,QAAQ,CAAC,sBAAsB,CAAA;IACxC,CAAC;IAED,MAAM,sBAAsB,GAAG,MAAM,2BAA2B,CAC9D,KAAK,EACL,SAAS,EACT,EAAE,EACF,IAAI,EACJ,MAAiC,EACjC,gBAAgB,CACjB,CAAA;IACD,mFAAmF;IACnF,IAAI,QAAQ;QAAE,MAAM,CAAA,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAG,sBAAsB,CAAC,CAAA,CAAA;IAC3D,qDAAqD;IACrD,IAAI,QAAQ;QACV,WAAW,CAAC,OAAO,GAAG,MAAA,WAAW,CAAC,OAAO,0CAAE,GAAG,CAAC,CAAC,CAAC,EAAE;YACjD,IAAI,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ;gBAAE,OAAO,CAAC,CAAA;YACnD,IAAI,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,GAAG,QAAQ,EAAE,CAAC;gBAC3E,CAAC,CAAC,EAAE,GAAG,oBAAoB,CAAA;gBAC3B,CAAC,CAAC,eAAe,GAAG,EAAE,CAAA;YACxB,CAAC;YACD,OAAO,CAAC,CAAA;QACV,CAAC,CAAC,CAAA;IACJ,2FAA2F;IAC3F,0FAA0F;IAC1F,4DAA4D;IAC5D,IAAI,kBAAkB,GAAG,KAAK,CAAA;IAC9B,IAAI,QAAQ,IAAI,CAAC,CAAA,MAAA,WAAW,CAAC,OAAO,0CAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,oBAAoB,CAAC,CAAA,EAAE,CAAC;QAC/E,WAAW,CAAC,OAAO,GAAG;YACpB,GAAG,CAAC,MAAA,WAAW,CAAC,OAAO,mCAAI,EAAE,CAAC;YAC9B,IAAI,yBAAkB,CAAC;gBACrB,EAAE,EAAE,oBAAoB;gBACxB,eAAe,EAAE,EAAE;gBACnB,IAAI,EAAE,8BAA8B;aACrC,CAAC;SACH,CAAA;QACD,kBAAkB,GAAG,IAAI,CAAA;IAC3B,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,KAAK,CAAC,GAAG,QAAQ,CAAA;IACpC,IAAI,QAAQ,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAA,WAAW,CAAC,OAAO,0CAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,CAAA;QAC9D,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,KAAK,CAAC,eAAe,KAAK,EAAE,EAAE,CAAC;gBACjC,KAAK,CAAC,eAAe,GAAG,EAAE,CAAA;gBAC1B,kBAAkB,GAAG,IAAI,CAAA;YAC3B,CAAC;QACH,CAAC;aAAM,CAAC;YACN,WAAW,CAAC,OAAO,GAAG;gBACpB,GAAG,CAAC,MAAA,WAAW,CAAC,OAAO,mCAAI,EAAE,CAAC;gBAC9B,IAAI,yBAAkB,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,EAAE,IAAI,EAAE,8BAA8B,EAAE,CAAC;aACnG,CAAA;YACD,kBAAkB,GAAG,IAAI,CAAA;QAC3B,CAAC;IACH,CAAC;IACD,MAAM,CAAC,UAAU,CAAC,GAAG,sBAAsB,CAAC,oBAAoB,CAAA;IAChE,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,GAAG;QAC5B,UAAU;QACV,sBAAsB;QACtB,oBAAoB;QACpB,aAAa;QACb,QAAQ;KACT,CAAA;IACD,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;IACzC,MAAM,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,oBAAa,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;IAC7F,IAAI,kBAAkB,EAAE,CAAC;QACvB,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,CAAA;IAC9D,CAAC;IACD,OAAO,sBAAsB,CAAA;AAC/B,CAAC"}

package/build/utils/setupSelfTr.d.ts

@@ -1,4 +1,4 @@
-import { W3cCredential, W3cPresentation, W3cCredentialSchema, W3cCredentialSubject, W3cJsonLdVerifiableCredential, W3cJsonLdVerifiablePresentation, W3cCredentialOptions, DidRecord, W3cPresentationOptions, Logger } from '@credo-ts/core';
+import { DidRecord, Logger, W3cCredentialSchema, W3cCredentialSubject, W3cV2Credential, W3cV2CredentialOptions, W3cV2DataIntegrityVerifiableCredential, W3cV2DataIntegrityVerifiablePresentation, W3cV2Presentation, W3cV2PresentationOptions } from '@credo-ts/core';
 import { AnySchemaObject } from 'ajv/dist/2020';
 import { VsAgent } from '../agent/VsAgent';
 import { EcsClaims } from './ecsClaims';
@@ -6,21 +6,36 @@ export declare const createJsonSchema: W3cCredentialSchema;
 export declare const createJsonSubjectRef: (id: string) => W3cCredentialSubject;
 export declare const linkedVpFragment: (schemaKey: string) => string;
 export declare const sortKeysDeep: (value: unknown) => unknown;
-export declare function createCredential(options: Partial<W3cCredentialOptions>): W3cCredential;
 /**
- * Signs a W3C Verifiable Credential or Presentation using the provided agent and verification method.
+ * Builds an unsigned credential: a VC Data Model 2.0 credential, as
+ * [VT-CRED-W3C] and [VT-JSON-SCHEMA-CRED-W3C] require the `https://www.w3.org/ns/credentials/v2`
+ * context, valid from now for ten years unless told otherwise.
+ */
+export declare function createCredential(options: Partial<W3cV2CredentialOptions>): W3cV2Credential;
+/**
+ * The Data Integrity cryptosuite this agent is configured with, read from the registered
+ * `VtFlowModuleConfig` so the self issued credentials are secured and linked VPs with the
+ * same suite `VtFlowApi.issueCredentialForSession` applies to the credentials it issues. Falls back
+ * to the module default when the vt-flow module is not registered on the agent.
+ */
+export declare function getDataIntegrityCryptosuite(agent: Pick<VsAgent, 'context'>): string;
+/**
+ * Secures a W3C credential or presentation with a Data Integrity proof under the cryptosuite the
+ * agent is configured with, using the provided verification method.
  *
- * The function determines whether the input object is a `W3cCredential` or a `W3cPresentation`,
- * and applies the appropriate signing operation using Linked Data Proofs (`Ed25519Signature2020`).
+ * A credential is secured for `assertionMethod` and a presentation for `authentication`, the proof
+ * purposes VC Data Integrity defines for each; the presentation is published from the DID Document
+ * rather than presented to a verifier, so it carries no challenge.
  *
  * @param agent - The agent instance.
  * @param obj - The credential or presentation object to be signed.
  * @param verificationMethod - The DID verification method used to generate the proof.
- * @returns A signed W3C Verifiable Credential or Presentation in JSON-LD format.
+ * @returns The secured credential or presentation, wrapping the JSON that gets published.
  */
-export declare function signerW3c(agent: VsAgent, obj: W3cCredential, verificationMethod: string): Promise<W3cJsonLdVerifiableCredential>;
-export declare function signerW3c(agent: VsAgent, obj: W3cPresentation, verificationMethod: string): Promise<W3cJsonLdVerifiablePresentation>;
-export declare function createPresentation(options: Partial<W3cPresentationOptions>): W3cPresentation;
+export declare function signerW3c(agent: VsAgent, obj: W3cV2Credential, verificationMethod: string): Promise<W3cV2DataIntegrityVerifiableCredential>;
+export declare function signerW3c(agent: VsAgent, obj: W3cV2Presentation, verificationMethod: string): Promise<W3cV2DataIntegrityVerifiablePresentation>;
+/** Builds an unsigned VC Data Model 2.0 presentation; the class supplies the v2 context. */
+export declare function createPresentation(options: Partial<W3cV2PresentationOptions>): W3cV2Presentation;
 /**
  * Retrieves and validates claims for a credential subject.
  * If claims are not found, builds default claims based on the schemaKey.

package/build/utils/setupSelfTr.js

@@ -5,6 +5,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.sortKeysDeep = exports.linkedVpFragment = exports.createJsonSubjectRef = exports.createJsonSchema = void 0;
 exports.createCredential = createCredential;
+exports.getDataIntegrityCryptosuite = getDataIntegrityCryptosuite;
 exports.signerW3c = signerW3c;
 exports.createPresentation = createPresentation;
 exports.getClaims = getClaims;
@@ -13,15 +14,13 @@ exports.addDigestSRI = addDigestSRI;
 exports.generateDigestSRI = generateDigestSRI;
 exports.getVerificationMethodId = getVerificationMethodId;
 const core_1 = require("@credo-ts/core");
-// No type definitions available for this library
-// eslint-disable-next-line @typescript-eslint/ban-ts-comment
-//@ts-expect-error
-const jsonld_signatures_1 = require("@digitalcredentials/jsonld-signatures");
+const credo_ts_didcomm_vt_flow_1 = require("@verana-labs/credo-ts-didcomm-vt-flow");
 const vs_agent_model_1 = require("@verana-labs/vs-agent-model");
 const _2020_1 = __importDefault(require("ajv/dist/2020"));
 const ajv_formats_1 = __importDefault(require("ajv-formats"));
 const crypto_1 = require("crypto");
 const ecsClaims_1 = require("./ecsClaims");
+const vcdm2_1 = require("./vcdm2");
 const ajv = new _2020_1.default({ strict: false, allErrors: true });
 (0, ajv_formats_1.default)(ajv);
 exports.createJsonSchema = {
@@ -60,45 +59,48 @@ const sortKeysDeep = (value) => {
     return value;
 };
 exports.sortKeysDeep = sortKeysDeep;
+/**
+ * Builds an unsigned credential: a VC Data Model 2.0 credential, as
+ * [VT-CRED-W3C] and [VT-JSON-SCHEMA-CRED-W3C] require the `https://www.w3.org/ns/credentials/v2`
+ * context, valid from now for ten years unless told otherwise.
+ */
 function createCredential(options) {
-    var _a, _b, _c;
-    (_a = options.context) !== null && _a !== void 0 ? _a : (options.context = [
-        'https://www.w3.org/2018/credentials/v1',
-        'https://www.w3.org/ns/credentials/examples/v2',
-    ]);
-    (_b = options.issuanceDate) !== null && _b !== void 0 ? _b : (options.issuanceDate = new Date().toISOString());
-    (_c = options.expirationDate) !== null && _c !== void 0 ? _c : (options.expirationDate = new Date(Date.now() + 10 * 365 * 24 * 60 * 60 * 1000).toISOString());
-    return new core_1.W3cCredential(options);
+    return (0, vcdm2_1.createW3cV2Credential)(options);
+}
+/**
+ * The Data Integrity cryptosuite this agent is configured with, read from the registered
+ * `VtFlowModuleConfig` so the self issued credentials are secured and linked VPs with the
+ * same suite `VtFlowApi.issueCredentialForSession` applies to the credentials it issues. Falls back
+ * to the module default when the vt-flow module is not registered on the agent.
+ */
+function getDataIntegrityCryptosuite(agent) {
+    const { dependencyManager } = agent.context;
+    return dependencyManager.isRegistered(credo_ts_didcomm_vt_flow_1.VtFlowModuleConfig)
+        ? dependencyManager.resolve(credo_ts_didcomm_vt_flow_1.VtFlowModuleConfig).dataIntegrityCryptosuite
+        : credo_ts_didcomm_vt_flow_1.DEFAULT_DATA_INTEGRITY_CRYPTOSUITE;
 }
 async function signerW3c(agent, obj, verificationMethod) {
-    const proofPurpose = new jsonld_signatures_1.purposes.AssertionProofPurpose();
-    if (obj instanceof core_1.W3cCredential) {
-        return await agent.w3cCredentials.signCredential({
-            format: core_1.ClaimFormat.LdpVc,
+    const cryptosuite = getDataIntegrityCryptosuite(agent);
+    if (obj instanceof core_1.W3cV2Credential) {
+        return await agent.w3cV2Credentials.signCredential({
+            format: core_1.ClaimFormat.DiVc,
             credential: obj,
-            proofType: 'Ed25519Signature2020',
+            cryptosuite,
             verificationMethod,
-            proofPurpose,
-        });
-    }
-    if (obj instanceof core_1.W3cPresentation) {
-        return await agent.w3cCredentials.signPresentation({
-            format: core_1.ClaimFormat.LdpVp,
-            presentation: obj,
-            proofType: 'Ed25519Signature2020',
-            verificationMethod,
-            proofPurpose,
         });
     }
+    // The options type requires a challenge for every presentation format, while a Data Integrity
+    // proof only carries one when it is given
+    return await agent.w3cV2Credentials.signPresentation({
+        format: core_1.ClaimFormat.DiVp,
+        presentation: obj,
+        cryptosuite,
+        verificationMethod,
+    });
 }
+/** Builds an unsigned VC Data Model 2.0 presentation; the class supplies the v2 context. */
 function createPresentation(options) {
-    var _a, _b;
-    (_a = options.context) !== null && _a !== void 0 ? _a : (options.context = [
-        'https://www.w3.org/2018/credentials/v1',
-        'https://www.w3.org/ns/credentials/examples/v2',
-    ]);
-    (_b = options.type) !== null && _b !== void 0 ? _b : (options.type = ['VerifiablePresentation']);
-    return new core_1.W3cPresentation(options);
+    return new core_1.W3cV2Presentation(Object.assign({ type: ['VerifiablePresentation'] }, options));
 }
 /**
  * Retrieves and validates claims for a credential subject.
@@ -213,7 +215,7 @@ function getVerificationMethodId(logger, didRecord) {
                 method.id === ((_b = (_a = didRecord.didDocument) === null || _a === void 0 ? void 0 : _a.assertionMethod) === null || _b === void 0 ? void 0 : _b[0]);
         });
         if (!verificationMethod) {
-            throw new Error('Cannot find a suitable Ed25519Signature2020 verification method in DID Document');
+            throw new Error('Cannot find a suitable Ed25519 verification method in DID Document');
         }
         return verificationMethod.id;
     }

package/build/utils/setupSelfTr.js.map

@@ -1 +1 @@
-{"version":3,"file":"setupSelfTr.js","sourceRoot":"","sources":["../../src/utils/setupSelfTr.ts"],"names":[],"mappings":";;;;;;AAgEA,4CAUC;AAyBD,8BA0BC;AACD,gDAOC;AAaD,8BAkBC;AAMD,wCAcC;AAuBD,oCAuBC;AA2BD,8CAGC;AAED,0DAeC;AArRD,yCAYuB;AACvB,iDAAiD;AACjD,6DAA6D;AAC7D,kBAAkB;AAClB,6EAAgE;AAChE,gEAA4D;AAC5D,0DAAoD;AACpD,8DAAoC;AACpC,mCAAmC;AAGnC,2CAAyD;AAEzD,MAAM,GAAG,GAAG,IAAI,eAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;AACvD,IAAA,qBAAU,EAAC,GAAG,CAAC,CAAA;AAEF,QAAA,gBAAgB,GAAwB;IACnD,EAAE,EAAE,uDAAuD;IAC3D,IAAI,EAAE,YAAY;CACnB,CAAA;AAEM,MAAM,oBAAoB,GAAG,CAAC,EAAU,EAAwB,EAAE,CAAC,CAAC;IACzE,EAAE;IACF,MAAM,EAAE;QACN,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE;YACV,IAAI,EAAE,EAAE;SACT;KACF;CACF,CAAC,CAAA;AARW,QAAA,oBAAoB,wBAQ/B;AAEF,8CAA8C;AACvC,MAAM,gBAAgB,GAAG,CAAC,SAAiB,EAAU,EAAE,CAC5D,eAAe,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAA;AAD3C,QAAA,gBAAgB,oBAC2B;AAExD,0EAA0E;AAC1E,4EAA4E;AAC5E,uEAAuE;AACvE,yEAAyE;AACzE,uEAAuE;AAChE,MAAM,YAAY,GAAG,CAAC,KAAc,EAAW,EAAE;IACtD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,oBAAY,CAAC,CAAA;IACxD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC;aACjD,IAAI,EAAE;aACN,MAAM,CAA0B,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC5C,GAAG,CAAC,GAAG,CAAC,GAAG,IAAA,oBAAY,EAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,CAAA;YAChE,OAAO,GAAG,CAAA;QACZ,CAAC,EAAE,EAAE,CAAC,CAAA;IACV,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAXY,QAAA,YAAY,gBAWxB;AACD,SAAgB,gBAAgB,CAAC,OAAsC;;IACrE,MAAA,OAAO,CAAC,OAAO,oCAAf,OAAO,CAAC,OAAO,GAAK;QAClB,wCAAwC;QACxC,+CAA+C;KAChD,EAAA;IAED,MAAA,OAAO,CAAC,YAAY,oCAApB,OAAO,CAAC,YAAY,GAAK,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAA;IACjD,MAAA,OAAO,CAAC,cAAc,oCAAtB,OAAO,CAAC,cAAc,GAAK,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,EAAA;IAE9F,OAAO,IAAI,oBAAa,CAAC,OAA+B,CAAC,CAAA;AAC3D,CAAC;AAyBM,KAAK,UAAU,SAAS,CAC7B,KAAc,EACd,GAAoC,EACpC,kBAA0B;IAE1B,MAAM,YAAY,GAAG,IAAI,4BAAQ,CAAC,qBAAqB,EAAE,CAAA;IAEzD,IAAI,GAAG,YAAY,oBAAa,EAAE,CAAC;QACjC,OAAO,MAAM,KAAK,CAAC,cAAc,CAAC,cAAc,CAAC;YAC/C,MAAM,EAAE,kBAAW,CAAC,KAAK;YACzB,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,sBAAsB;YACjC,kBAAkB;YAClB,YAAY;SACb,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,GAAG,YAAY,sBAAe,EAAE,CAAC;QACnC,OAAO,MAAM,KAAK,CAAC,cAAc,CAAC,gBAAgB,CAAC;YACjD,MAAM,EAAE,kBAAW,CAAC,KAAK;YACzB,YAAY,EAAE,GAAG;YACjB,SAAS,EAAE,sBAAsB;YACjC,kBAAkB;YAClB,YAAY;SACb,CAAC,CAAA;IACJ,CAAC;AACH,CAAC;AACD,SAAgB,kBAAkB,CAAC,OAAwC;;IACzE,MAAA,OAAO,CAAC,OAAO,oCAAf,OAAO,CAAC,OAAO,GAAK;QAClB,wCAAwC;QACxC,+CAA+C;KAChD,EAAA;IACD,MAAA,OAAO,CAAC,IAAI,oCAAZ,OAAO,CAAC,IAAI,GAAK,CAAC,wBAAwB,CAAC,EAAA;IAC3C,OAAO,IAAI,sBAAe,CAAC,OAAiC,CAAC,CAAA;AAC/D,CAAC;AAED;;;;;;;;;;GAUG;AACI,KAAK,UAAU,SAAS,CAC7B,MAAc,EACd,UAAkC,EAClC,EAAE,EAAE,EAAwB,EAC5B,SAAiB,EACjB,SAAoB;IAEpB,MAAM,MAAM,GAAG,MAAM,IAAA,4BAAgB,EAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;IACnE,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,SAAS,EAAE,CAAC,CAAA;IAEhF,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC,CAAA;IACvC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,qDAAqD,SAAS,EAAE,CAAC,CAAA;IACnF,CAAC;IAED,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,kBAAI,EAAE,IAAK,MAAM,EAAG,CAAA;IAExD,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;GAGG;AACH,SAAgB,cAAc,CAAC,SAA0B,EAAE,iBAAsC;;IAC/F,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,MAAA,SAAS,CAAC,UAAU,0CAAE,iBAAiB,CAAC,CAAA;IACrE,MAAM,OAAO,GAAG,QAAQ,CAAC,iBAAiB,CAAC,CAAA;IAE3C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,YAAY,GAAG,MAAA,QAAQ,CAAC,MAAM,0CAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC9C,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,IAAI,EAAE,CAAC,CAAC,YAAY;YACpB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,MAAM,EAAE,CAAC,CAAC,MAAM;SACjB,CAAC,CAAC,CAAA;QAEH,MAAM,IAAI,KAAK,CAAC,sBAAsB,SAAS,CAAC,GAAG,KAAK,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAA;IAClG,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,EAAU;IAC1C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAA,+BAAc,EAAC,EAAE,CAAC,CAAC,CAAA;QAChD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAA;QAC/E,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAA;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;IAC1E,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACI,KAAK,UAAU,YAAY,CAChC,EAAW,EACX,IAAQ,EACR,UAAmC;;IAEnC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IAC9C,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,EAAE,CAAC,CAAA;IAC5C,MAAM,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;IAC/B,MAAM,cAAc,GAAG,GAAG,KAAI,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAG,GAAG,CAAC,CAAA,CAAA;IAE/C,MAAM,aAAa,GAAG,MAAA,OAAO,CAAC,OAAO,mCAAI,cAAc,CAAA;IAEvD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,+BAA+B,EAAE,KAAK,OAAO,CAAC,KAAK,gCAAgC,CAAC,CAAA;IACtG,CAAC;IACD,iBAAiB,CAAC,aAAa,EAAE,EAAE,CAAC,CAAA;IAEpC,uCACK,IAAI,KACP,SAAS,EAAE,iBAAiB,CAAC,aAAa,CAAC,IAC5C;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,aAAqB,EAAE,EAAU;;IAC1D,IAAI,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;YACnD,MAAM,MAAM,GAAG,MAAA,MAAA,GAAG,CAAC,MAAM,0CAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,mCAAI,0BAA0B,CAAA;YAEvF,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAA;QACzB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GACX,KAAK,YAAY,WAAW;YAC1B,CAAC,CAAC,qBAAqB;YACvB,CAAC,CAAC,KAAK,YAAY,KAAK;gBACtB,CAAC,CAAC,KAAK,CAAC,OAAO;gBACf,CAAC,CAAC,eAAe,CAAA;QAEvB,MAAM,IAAI,KAAK,CAAC,eAAe,EAAE,kBAAkB,OAAO,EAAE,CAAC,CAAA;IAC/D,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,iBAAiB,CAAC,OAAe,EAAE,YAAoB,QAAQ;IAC7E,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IACnE,OAAO,GAAG,SAAS,IAAI,IAAI,EAAE,CAAA;AAC/B,CAAC;AAED,SAAgB,uBAAuB,CAAC,MAAc,EAAE,SAAoB;;IAC1E,IAAI,CAAC;QACH,MAAM,kBAAkB,GAAG,MAAA,MAAA,SAAS,CAAC,WAAW,0CAAE,kBAAkB,0CAAE,IAAI,CACxE,MAAM,CAAC,EAAE;;YACP,OAAA,CAAC,MAAM,CAAC,IAAI,KAAK,4BAA4B,IAAI,MAAM,CAAC,IAAI,KAAK,4BAA4B,CAAC;gBAC9F,MAAM,CAAC,EAAE,MAAK,MAAA,MAAA,SAAS,CAAC,WAAW,0CAAE,eAAe,0CAAG,CAAC,CAAC,CAAA,CAAA;SAAA,CAC5D,CAAA;QACD,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAA;QACpG,CAAC;QACD,OAAO,kBAAkB,CAAC,EAAE,CAAA;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAA;QAC5D,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC"}
+{"version":3,"file":"setupSelfTr.js","sourceRoot":"","sources":["../../src/utils/setupSelfTr.ts"],"names":[],"mappings":";;;;;;AAqEA,4CAEC;AAQD,kEAKC;AA2BD,8BAwBC;AAGD,gDAEC;AAaD,8BAkBC;AAMD,wCAcC;AAuBD,oCAuBC;AA2BD,8CAGC;AAED,0DAeC;AA5RD,yCAauB;AACvB,oFAA8G;AAC9G,gEAA4D;AAC5D,0DAAoD;AACpD,8DAAoC;AACpC,mCAAmC;AAGnC,2CAAyD;AACzD,mCAA+C;AAE/C,MAAM,GAAG,GAAG,IAAI,eAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;AACvD,IAAA,qBAAU,EAAC,GAAG,CAAC,CAAA;AAEF,QAAA,gBAAgB,GAAwB;IACnD,EAAE,EAAE,uDAAuD;IAC3D,IAAI,EAAE,YAAY;CACnB,CAAA;AAEM,MAAM,oBAAoB,GAAG,CAAC,EAAU,EAAwB,EAAE,CAAC,CAAC;IACzE,EAAE;IACF,MAAM,EAAE;QACN,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE;YACV,IAAI,EAAE,EAAE;SACT;KACF;CACF,CAAC,CAAA;AARW,QAAA,oBAAoB,wBAQ/B;AAEF,8CAA8C;AACvC,MAAM,gBAAgB,GAAG,CAAC,SAAiB,EAAU,EAAE,CAC5D,eAAe,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAA;AAD3C,QAAA,gBAAgB,oBAC2B;AAExD,0EAA0E;AAC1E,4EAA4E;AAC5E,uEAAuE;AACvE,yEAAyE;AACzE,uEAAuE;AAChE,MAAM,YAAY,GAAG,CAAC,KAAc,EAAW,EAAE;IACtD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,oBAAY,CAAC,CAAA;IACxD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC;aACjD,IAAI,EAAE;aACN,MAAM,CAA0B,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC5C,GAAG,CAAC,GAAG,CAAC,GAAG,IAAA,oBAAY,EAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,CAAA;YAChE,OAAO,GAAG,CAAA;QACZ,CAAC,EAAE,EAAE,CAAC,CAAA;IACV,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAXY,QAAA,YAAY,gBAWxB;AAED;;;;GAIG;AACH,SAAgB,gBAAgB,CAAC,OAAwC;IACvE,OAAO,IAAA,6BAAqB,EAAC,OAAiC,CAAC,CAAA;AACjE,CAAC;AAED;;;;;GAKG;AACH,SAAgB,2BAA2B,CAAC,KAA+B;IACzE,MAAM,EAAE,iBAAiB,EAAE,GAAG,KAAK,CAAC,OAAO,CAAA;IAC3C,OAAO,iBAAiB,CAAC,YAAY,CAAC,6CAAkB,CAAC;QACvD,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,6CAAkB,CAAC,CAAC,wBAAwB;QACxE,CAAC,CAAC,6DAAkC,CAAA;AACxC,CAAC;AA2BM,KAAK,UAAU,SAAS,CAC7B,KAAc,EACd,GAAwC,EACxC,kBAA0B;IAE1B,MAAM,WAAW,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAA;IAEtD,IAAI,GAAG,YAAY,sBAAe,EAAE,CAAC;QACnC,OAAO,MAAM,KAAK,CAAC,gBAAgB,CAAC,cAAc,CAAmB;YACnE,MAAM,EAAE,kBAAW,CAAC,IAAI;YACxB,UAAU,EAAE,GAAG;YACf,WAAW;YACX,kBAAkB;SACnB,CAAC,CAAA;IACJ,CAAC;IAED,8FAA8F;IAC9F,0CAA0C;IAC1C,OAAO,MAAM,KAAK,CAAC,gBAAgB,CAAC,gBAAgB,CAAmB;QACrE,MAAM,EAAE,kBAAW,CAAC,IAAI;QACxB,YAAY,EAAE,GAAG;QACjB,WAAW;QACX,kBAAkB;KACe,CAAC,CAAA;AACtC,CAAC;AAED,4FAA4F;AAC5F,SAAgB,kBAAkB,CAAC,OAA0C;IAC3E,OAAO,IAAI,wBAAiB,iBAAG,IAAI,EAAE,CAAC,wBAAwB,CAAC,IAAK,OAAO,EAAG,CAAA;AAChF,CAAC;AAED;;;;;;;;;;GAUG;AACI,KAAK,UAAU,SAAS,CAC7B,MAAc,EACd,UAAkC,EAClC,EAAE,EAAE,EAAwB,EAC5B,SAAiB,EACjB,SAAoB;IAEpB,MAAM,MAAM,GAAG,MAAM,IAAA,4BAAgB,EAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;IACnE,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,SAAS,EAAE,CAAC,CAAA;IAEhF,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC,CAAA;IACvC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,qDAAqD,SAAS,EAAE,CAAC,CAAA;IACnF,CAAC;IAED,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,kBAAI,EAAE,IAAK,MAAM,EAAG,CAAA;IAExD,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;GAGG;AACH,SAAgB,cAAc,CAAC,SAA0B,EAAE,iBAAsC;;IAC/F,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,MAAA,SAAS,CAAC,UAAU,0CAAE,iBAAiB,CAAC,CAAA;IACrE,MAAM,OAAO,GAAG,QAAQ,CAAC,iBAAiB,CAAC,CAAA;IAE3C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,YAAY,GAAG,MAAA,QAAQ,CAAC,MAAM,0CAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC9C,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,IAAI,EAAE,CAAC,CAAC,YAAY;YACpB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,MAAM,EAAE,CAAC,CAAC,MAAM;SACjB,CAAC,CAAC,CAAA;QAEH,MAAM,IAAI,KAAK,CAAC,sBAAsB,SAAS,CAAC,GAAG,KAAK,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAA;IAClG,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,EAAU;IAC1C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAA,+BAAc,EAAC,EAAE,CAAC,CAAC,CAAA;QAChD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAA;QAC/E,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAA;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;IAC1E,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACI,KAAK,UAAU,YAAY,CAChC,EAAW,EACX,IAAQ,EACR,UAAmC;;IAEnC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;IAC9C,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,EAAE,CAAC,CAAA;IAC5C,MAAM,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;IAC/B,MAAM,cAAc,GAAG,GAAG,KAAI,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAG,GAAG,CAAC,CAAA,CAAA;IAE/C,MAAM,aAAa,GAAG,MAAA,OAAO,CAAC,OAAO,mCAAI,cAAc,CAAA;IAEvD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,+BAA+B,EAAE,KAAK,OAAO,CAAC,KAAK,gCAAgC,CAAC,CAAA;IACtG,CAAC;IACD,iBAAiB,CAAC,aAAa,EAAE,EAAE,CAAC,CAAA;IAEpC,uCACK,IAAI,KACP,SAAS,EAAE,iBAAiB,CAAC,aAAa,CAAC,IAC5C;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,aAAqB,EAAE,EAAU;;IAC1D,IAAI,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;YACnD,MAAM,MAAM,GAAG,MAAA,MAAA,GAAG,CAAC,MAAM,0CAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,mCAAI,0BAA0B,CAAA;YAEvF,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAA;QACzB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GACX,KAAK,YAAY,WAAW;YAC1B,CAAC,CAAC,qBAAqB;YACvB,CAAC,CAAC,KAAK,YAAY,KAAK;gBACtB,CAAC,CAAC,KAAK,CAAC,OAAO;gBACf,CAAC,CAAC,eAAe,CAAA;QAEvB,MAAM,IAAI,KAAK,CAAC,eAAe,EAAE,kBAAkB,OAAO,EAAE,CAAC,CAAA;IAC/D,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,iBAAiB,CAAC,OAAe,EAAE,YAAoB,QAAQ;IAC7E,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IACnE,OAAO,GAAG,SAAS,IAAI,IAAI,EAAE,CAAA;AAC/B,CAAC;AAED,SAAgB,uBAAuB,CAAC,MAAc,EAAE,SAAoB;;IAC1E,IAAI,CAAC;QACH,MAAM,kBAAkB,GAAG,MAAA,MAAA,SAAS,CAAC,WAAW,0CAAE,kBAAkB,0CAAE,IAAI,CACxE,MAAM,CAAC,EAAE;;YACP,OAAA,CAAC,MAAM,CAAC,IAAI,KAAK,4BAA4B,IAAI,MAAM,CAAC,IAAI,KAAK,4BAA4B,CAAC;gBAC9F,MAAM,CAAC,EAAE,MAAK,MAAA,MAAA,SAAS,CAAC,WAAW,0CAAE,eAAe,0CAAG,CAAC,CAAC,CAAA,CAAA;SAAA,CAC5D,CAAA;QACD,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAA;QACvF,CAAC;QACD,OAAO,kBAAkB,CAAC,EAAE,CAAA;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAA;QAC5D,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC"}

package/build/utils/trustCredentialStore.d.ts

@@ -1,21 +1,51 @@
-import { DidRecord, W3cJsonLdVerifiableCredential, W3cJsonLdVerifiablePresentation } from '@credo-ts/core';
+import { DidRecord, W3cJsonLdVerifiableCredential, W3cJsonLdVerifiablePresentation, type W3cV2DataIntegritySecuredCredential, W3cV2DataIntegrityVerifiableCredential, W3cV2DataIntegrityVerifiablePresentation } from '@credo-ts/core';
 import { VsAgent } from '../agent/VsAgent';
 import { EcsClaims } from './ecsClaims';
+/**
+ * A trust credential the agent publishes from its DID Document: a VC Data Model 2.0 credential
+ * secured with a DataIntegrityProof, which is what the agent issues itself and receives over the
+ * RFC 0809 credential format, or a data model 1.1 credential carrying a linked data proof that an
+ * older issuer handed over.
+ */
+export type TrustCredential = W3cJsonLdVerifiableCredential | W3cV2DataIntegrityVerifiableCredential;
+export type TrustPresentation = W3cJsonLdVerifiablePresentation | W3cV2DataIntegrityVerifiablePresentation;
+/**
+ * Wraps a VC Data Model 2.0 credential in a data model 2.0 presentation secured with a
+ * DataIntegrityProof under the cryptosuite the agent is configured with, the counterpart of the
+ * linked data proof a data model 1.1 linked VP carries. The presentation is published from the DID
+ * Document rather than presented to a verifier, so there is no challenge to bind; its proof purpose
+ * is `authentication`, as Data Integrity defines for presentations.
+ */
+export declare function signLinkedDataIntegrityPresentation(agent: Pick<VsAgent, 'w3cV2Credentials' | 'context'>, options: {
+    id: string;
+    holder: string;
+    credential: W3cV2DataIntegrityVerifiableCredential;
+    verificationMethodId: string;
+}): Promise<W3cV2DataIntegrityVerifiablePresentation>;
 export declare function findMetadataEntry(didRecord: DidRecord, key: '_vt/vtc' | '_vt/jsc', id?: string, jsonSchemaRef?: string): any;
-export declare function saveMetadataEntry(agent: VsAgent, didRecord: DidRecord, credential: W3cJsonLdVerifiableCredential, verifiablePresentation: W3cJsonLdVerifiablePresentation, didDocumentServiceId: string, key: '_vt/vtc' | '_vt/jsc'): Promise<void>;
+export declare function saveMetadataEntry(agent: VsAgent, didRecord: DidRecord, credential: TrustCredential, verifiablePresentation: TrustPresentation, didDocumentServiceId: string, key: '_vt/vtc' | '_vt/jsc'): Promise<void>;
 export declare function deleteMetadataEntry(agent: VsAgent, id: string, didRecord: DidRecord, key: '_vt/vtc' | '_vt/jsc'): Promise<{
     schemaId: any;
 } | null>;
-export declare function createVtc(agent: VsAgent, publicApiBaseUrl: string, id: string, credential: W3cJsonLdVerifiableCredential): Promise<W3cJsonLdVerifiablePresentation>;
+export declare function createVtc(agent: VsAgent, publicApiBaseUrl: string, id: string, credential: TrustCredential): Promise<TrustPresentation>;
 export interface CreateJscOptions {
     schemaBaseId: string;
     jsonSchemaRef: string;
     precomputedDigestSRI?: string;
 }
-export declare function createJsc(agent: VsAgent, publicApiBaseUrl: string, ecsSchemas: Record<string, string>, options: CreateJscOptions): Promise<import("@credo-ts/core").W3cJsonCredential>;
+export declare function createJsc(agent: VsAgent, publicApiBaseUrl: string, ecsSchemas: Record<string, string>, options: CreateJscOptions): Promise<W3cV2DataIntegritySecuredCredential & {
+    id: string;
+}>;
 export declare function removeTrustCredential(agent: VsAgent, schemaId: string, key: '_vt/jsc' | '_vt/vtc'): Promise<{
     schemaId: any;
 } | null>;
+/**
+ * Removes the linked VP and the stored credential an exchange delivered, as
+ * [VSA-VTI-FLOW-OP-REVOKE] requires of the applicant. The credential is read from the RFC 0809
+ * format data of the exchange; exchanges earlier versions completed over other formats are not
+ * migrated. Returns the credential id, or `undefined` when none is found, in which case nothing is
+ * removed.
+ */
 export declare function removeStoredTrustCredential(agent: VsAgent, credentialExchangeRecordId: string): Promise<string | undefined>;
 export declare function migrateVtjscServiceIds(agent: VsAgent): Promise<void>;
 /**

package/build/utils/trustCredentialStore.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.signLinkedDataIntegrityPresentation = signLinkedDataIntegrityPresentation;
 exports.findMetadataEntry = findMetadataEntry;
 exports.saveMetadataEntry = saveMetadataEntry;
 exports.deleteMetadataEntry = deleteMetadataEntry;
@@ -14,6 +15,10 @@ exports.getTrustMetadata = getTrustMetadata;
 exports.rebindEcsCredentialSchema = rebindEcsCredentialSchema;
 exports.withdrawSelfIssuedEcsCredentials = withdrawSelfIssuedEcsCredentials;
 const core_1 = require("@credo-ts/core");
+// No type definitions available for this library
+// eslint-disable-next-line @typescript-eslint/ban-ts-comment
+//@ts-expect-error
+const jsonld_signatures_1 = require("@digitalcredentials/jsonld-signatures");
 const verre_1 = require("@verana-labs/verre");
 const adminApiService_1 = require("../did/adminApiService");
 const setupSelfTr_1 = require("./setupSelfTr");
@@ -23,6 +28,71 @@ async function getDidRecord(agent) {
     const [didRecord] = await agent.dids.getCreatedDids({ did: agent.did });
     return didRecord;
 }
+/** The credential fields shared by both data models: id, credentialSchema and credentialSubject */
+function trustCredentialFields(credential) {
+    return credential instanceof core_1.W3cV2DataIntegrityVerifiableCredential
+        ? credential.resolvedCredential
+        : credential;
+}
+/**
+ * What the metadata entry stores and the DID Document service endpoint serves. A data model 1.1
+ * presentation is kept as its class instance, which serializes to JSON-LD when the DID record is
+ * saved; a Data Integrity one wraps the secured JSON, so that is what gets stored.
+ */
+function trustCredentialEntry(credential) {
+    return credential instanceof core_1.W3cV2DataIntegrityVerifiableCredential
+        ? credential.securedCredential
+        : credential.jsonCredential;
+}
+function trustPresentationEntry(presentation) {
+    return presentation instanceof core_1.W3cV2DataIntegrityVerifiablePresentation
+        ? presentation.securedPresentation
+        : presentation;
+}
+function trustPresentationId(presentation) {
+    return presentation instanceof core_1.W3cV2DataIntegrityVerifiablePresentation
+        ? presentation.securedPresentation.id
+        : presentation.id;
+}
+/**
+ * Wraps a VC Data Model 2.0 credential in a data model 2.0 presentation secured with a
+ * DataIntegrityProof under the cryptosuite the agent is configured with, the counterpart of the
+ * linked data proof a data model 1.1 linked VP carries. The presentation is published from the DID
+ * Document rather than presented to a verifier, so there is no challenge to bind; its proof purpose
+ * is `authentication`, as Data Integrity defines for presentations.
+ */
+async function signLinkedDataIntegrityPresentation(agent, options) {
+    const presentation = new core_1.W3cV2Presentation({
+        id: options.id,
+        holder: options.holder,
+        verifiableCredential: [options.credential],
+    });
+    // The options type requires a challenge for every presentation format, while a Data Integrity
+    // proof only carries one when it is given
+    return await agent.w3cV2Credentials.signPresentation({
+        format: core_1.ClaimFormat.DiVp,
+        presentation,
+        cryptosuite: (0, setupSelfTr_1.getDataIntegrityCryptosuite)(agent),
+        verificationMethod: options.verificationMethodId,
+    });
+}
+/**
+ * Wraps a VC Data Model 1.1 credential in a data model 1.1 presentation carrying an
+ * Ed25519Signature2020 linked data proof, for credentials received from issuers that still use it.
+ */
+async function signLinkedDataProofPresentation(agent, options) {
+    return await agent.w3cCredentials.signPresentation({
+        format: core_1.ClaimFormat.LdpVp,
+        presentation: new core_1.W3cPresentation({
+            id: options.id,
+            holder: options.holder,
+            verifiableCredential: [options.credential],
+        }),
+        proofType: 'Ed25519Signature2020',
+        verificationMethod: options.verificationMethodId,
+        proofPurpose: new jsonld_signatures_1.purposes.AssertionProofPurpose(),
+    });
+}
 async function updateDidRecord(agent, didRecord) {
     const repo = agent.context.dependencyManager.resolve(core_1.DidRepository);
     (0, adminApiService_1.applyAdminApiServiceEntry)(didRecord.didDocument, agent.adminApiServiceEndpoint);
@@ -56,14 +126,15 @@ function findMetadataEntry(didRecord, key, id, jsonSchemaRef) {
 }
 async function saveMetadataEntry(agent, didRecord, credential, verifiablePresentation, didDocumentServiceId, key) {
     var _a, _b, _c, _d, _e;
-    const schema = key === '_vt/vtc' ? credential.credentialSchema : credential.credentialSubject;
+    const fields = trustCredentialFields(credential);
+    const schema = key === '_vt/vtc' ? fields.credentialSchema : fields.credentialSubject;
     const ref = Array.isArray(schema) ? (_a = schema[0]) === null || _a === void 0 ? void 0 : _a.id : schema === null || schema === void 0 ? void 0 : schema.id;
     if (!ref) {
         throw new Error('No ID was found in credentialSubject');
     }
     const record = (_b = didRecord.metadata.get(key)) !== null && _b !== void 0 ? _b : {};
     // Remove previous entry for this credential ID (if exists)
-    const found = findMetadataEntry(didRecord, key, credential.id, ref);
+    const found = findMetadataEntry(didRecord, key, fields.id, ref);
     if (found) {
         if ((_c = didRecord.didDocument) === null || _c === void 0 ? void 0 : _c.service) {
             didRecord.didDocument.service = didRecord.didDocument.service.filter(s => s.id !== found.didDocumentServiceId);
@@ -71,13 +142,13 @@ async function saveMetadataEntry(agent, didRecord, credential, verifiablePresent
         delete record[found.schemaId];
     }
     record[ref] = {
-        credential: credential.jsonCredential,
-        verifiablePresentation,
+        credential: trustCredentialEntry(credential),
+        verifiablePresentation: trustPresentationEntry(verifiablePresentation),
         didDocumentServiceId,
     };
     (_e = (_d = didRecord.didDocument) === null || _d === void 0 ? void 0 : _d.service) === null || _e === void 0 ? void 0 : _e.push(new core_1.DidDocumentService({
         id: didDocumentServiceId,
-        serviceEndpoint: verifiablePresentation.id,
+        serviceEndpoint: trustPresentationId(verifiablePresentation),
         type: 'LinkedVerifiablePresentation',
     }));
     didRecord.metadata.set(key, record);
@@ -100,12 +171,13 @@ async function createVtc(agent, publicApiBaseUrl, id, credential) {
     const schemaId = `schemas-${id}-vtc-vp.json`;
     const didDocumentServiceId = `${agent.did}#vpr-${schemaId.replace('.json', '')}`;
     const serviceEndpoint = `${publicApiBaseUrl}/vt/${schemaId}`;
-    const unsignedPresentation = (0, setupSelfTr_1.createPresentation)({
-        id: serviceEndpoint,
-        holder: agent.did,
-        verifiableCredential: [credential],
-    });
-    const verifiablePresentation = await (0, setupSelfTr_1.signerW3c)(agent, unsignedPresentation, (0, setupSelfTr_1.getVerificationMethodId)(agent.config.logger, didRecord));
+    const verificationMethodId = (0, setupSelfTr_1.getVerificationMethodId)(agent.config.logger, didRecord);
+    // The linked VP takes the data model of the credential it carries: a Data Integrity credential
+    // cannot be embedded in a data model 1.1 presentation, nor the other way round
+    const linkedVp = { id: serviceEndpoint, holder: agent.did, verificationMethodId };
+    const verifiablePresentation = credential instanceof core_1.W3cV2DataIntegrityVerifiableCredential
+        ? await signLinkedDataIntegrityPresentation(agent, Object.assign(Object.assign({}, linkedVp), { credential }))
+        : await signLinkedDataProofPresentation(agent, Object.assign(Object.assign({}, linkedVp), { credential }));
     await saveMetadataEntry(agent, didRecord, credential, verifiablePresentation, didDocumentServiceId, '_vt/vtc');
     return verifiablePresentation;
 }
@@ -115,31 +187,30 @@ async function createJsc(agent, publicApiBaseUrl, ecsSchemas, options) {
     const { id: subjectId, claims } = (0, setupSelfTr_1.createJsonSubjectRef)(jsonSchemaRef);
     const subjectClaims = precomputedDigestSRI
         ? Object.assign(Object.assign({}, claims), { digestSRI: precomputedDigestSRI }) : await (0, setupSelfTr_1.addDigestSRI)(subjectId, claims, ecsSchemas);
-    const credentialSubject = {
-        id: subjectId,
-        claims: subjectClaims,
-    };
+    const credentialSubject = Object.assign(Object.assign({}, subjectClaims), { id: subjectId });
     const schemaPresentation = `schemas-${schemaBaseId}-vtjsc-vp.json`;
     const schemaCredential = `schemas-${schemaBaseId}-jsc.json`;
     const serviceEndpoint = `${publicApiBaseUrl}/vt/${schemaPresentation}`;
     const didDocumentServiceId = `${agent.did}#vpr-schemas-${schemaBaseId}-vtjsc-vp`;
+    const credentialId = `${publicApiBaseUrl}/vt/${schemaCredential}`;
     const unsignedCredential = (0, setupSelfTr_1.createCredential)({
-        id: `${publicApiBaseUrl}/vt/${schemaCredential}`,
+        id: credentialId,
         type: ['VerifiableCredential', 'JsonSchemaCredential'],
         issuer: agent.did,
         credentialSubject,
+        credentialSchema: await (0, setupSelfTr_1.addDigestSRI)(setupSelfTr_1.createJsonSchema.id, { id: setupSelfTr_1.createJsonSchema.id, type: setupSelfTr_1.createJsonSchema.type }, ecsSchemas),
     });
-    unsignedCredential.credentialSchema = await (0, setupSelfTr_1.addDigestSRI)(setupSelfTr_1.createJsonSchema.id, setupSelfTr_1.createJsonSchema, ecsSchemas);
     const verificationMethodId = (0, setupSelfTr_1.getVerificationMethodId)(agent.config.logger, didRecord);
-    const credential = await (0, setupSelfTr_1.signerW3c)(agent, core_1.JsonTransformer.fromJSON(unsignedCredential, core_1.W3cCredential), verificationMethodId);
-    const unsignedPresentation = (0, setupSelfTr_1.createPresentation)({
+    const credential = await (0, setupSelfTr_1.signerW3c)(agent, unsignedCredential, verificationMethodId);
+    const verifiablePresentation = await signLinkedDataIntegrityPresentation(agent, {
         id: serviceEndpoint,
         holder: agent.did,
-        verifiableCredential: [credential],
+        credential,
+        verificationMethodId,
     });
-    const verifiablePresentation = await (0, setupSelfTr_1.signerW3c)(agent, unsignedPresentation, verificationMethodId);
     await saveMetadataEntry(agent, didRecord, credential, verifiablePresentation, didDocumentServiceId, '_vt/jsc');
-    return credential.jsonCredential;
+    // the credential as published; its id is the one assigned above
+    return credential.securedCredential;
 }
 async function removeTrustCredential(agent, schemaId, key) {
     var _a;
@@ -155,15 +226,30 @@ async function removeTrustCredential(agent, schemaId, key) {
     }
     return await deleteMetadataEntry(agent, schemaId, didRecord, key);
 }
+/**
+ * Removes the linked VP and the stored credential an exchange delivered, as
+ * [VSA-VTI-FLOW-OP-REVOKE] requires of the applicant. The credential is read from the RFC 0809
+ * format data of the exchange; exchanges earlier versions completed over other formats are not
+ * migrated. Returns the credential id, or `undefined` when none is found, in which case nothing is
+ * removed.
+ */
 async function removeStoredTrustCredential(agent, credentialExchangeRecordId) {
-    var _a, _b;
+    var _a, _b, _c;
     const formatData = await agent.didcomm.credentials.getFormatData(credentialExchangeRecordId);
-    const credentialId = (_b = (_a = formatData.credential) === null || _a === void 0 ? void 0 : _a.jsonld) === null || _b === void 0 ? void 0 : _b.id;
-    if (!credentialId)
+    const credentialId = (_c = (_b = (_a = formatData.credential) === null || _a === void 0 ? void 0 : _a.dataIntegrity) === null || _b === void 0 ? void 0 : _b.credential) === null || _c === void 0 ? void 0 : _c.id;
+    if (typeof credentialId !== 'string') {
+        agent.config.logger.warn(`[trust-credential] Credential exchange ${credentialExchangeRecordId} carries no RFC 0809 credential id; its linked VP and stored credential are left in place`);
         return undefined;
+    }
     await removeTrustCredential(agent, credentialId, '_vt/vtc');
-    const stored = await agent.w3cCredentials.getAll();
-    for (const storedRecord of stored) {
+    // The RFC 0809 format holds a data model 2.0 credential in a W3cV2CredentialRecord and a data
+    // model 1.1 one in a W3cCredentialRecord; the credential id is tagged on both
+    for (const storedRecord of await agent.w3cV2Credentials.getAll()) {
+        if (storedRecord.getTags().givenId === credentialId) {
+            await agent.w3cV2Credentials.deleteById(storedRecord.id);
+        }
+    }
+    for (const storedRecord of await agent.w3cCredentials.getAll()) {
         if (storedRecord.getTags().givenId === credentialId) {
             await agent.w3cCredentials.deleteById(storedRecord.id);
         }
@@ -275,7 +361,8 @@ async function anchorCredentialDigest(agent, schemaId, credential, issuerPartici
     const schema = await agent.indexer.getCredentialSchema(schemaId).catch(() => undefined);
     if (!schema)
         throw new Error(`[DigestAnchor] Credential schema ${schemaId} is not on chain`);
-    const digest = (0, verre_1.computeCredentialDigestJCS)(core_1.JsonTransformer.toJSON(credential), schema.digest_algorithm);
+    // the credential as published, which is what a verifier digests
+    const digest = (0, verre_1.computeCredentialDigestJCS)(credential, schema.digest_algorithm);
     // the same credential gives the same digest on each run, so an anchored digest needs no second transaction
     if (await agent.indexer.getDigest(digest))
         return;
@@ -325,10 +412,7 @@ async function rebindEcsCredentialSchema(agent, publicApiBaseUrl, schemaId, sche
         didRecord.metadata.set('_vt/vtc', record);
         await updateDidRecord(agent, didRecord);
     }
-    await (0, selfIssuedEcsCredential_1.publishSelfIssuedEcsPresentation)(agent, vpUrl, Object.assign(Object.assign({}, (0, data_1.getEcsSchemas)(publicApiBaseUrl)), (onChainJsonSchema ? { [schemaKey]: onChainJsonSchema } : {})), schemaKey, ['VerifiableCredential', 'VerifiableTrustCredential'], { id: jscUrl, type: 'JsonSchemaCredential' }, ecsClaims, async (verifiablePresentation) => {
-        var _a;
-        return await anchorCredentialDigest(agent, Number(schemaId), (_a = verifiablePresentation === null || verifiablePresentation === void 0 ? void 0 : verifiablePresentation.verifiableCredential) === null || _a === void 0 ? void 0 : _a[0], issuerParticipantId);
-    });
+    await (0, selfIssuedEcsCredential_1.publishSelfIssuedEcsPresentation)(agent, vpUrl, Object.assign(Object.assign({}, (0, data_1.getEcsSchemas)(publicApiBaseUrl)), (onChainJsonSchema ? { [schemaKey]: onChainJsonSchema } : {})), schemaKey, ['VerifiableCredential', 'VerifiableTrustCredential'], { id: jscUrl, type: 'JsonSchemaCredential' }, ecsClaims, async (verifiablePresentation) => await anchorCredentialDigest(agent, Number(schemaId), verifiablePresentation.verifiableCredential[0], issuerParticipantId));
     const freshRecord = await getDidRecord(agent);
     let recordChanged = false;
     const vtc = (_f = freshRecord.metadata.get('_vt/vtc')) !== null && _f !== void 0 ? _f : {};