@vess-id/ai-identity 0.0.0-dev-20260902121045

package/dist/vp/vp-manager.d.ts

@@ -0,0 +1,75 @@
+import { VerifiablePresentation, VPRequest } from '../types';
+import { KeyManager } from '../did/key-manager';
+export declare class VPManager {
+    private keyManager;
+    /**
+     * 🔴 Deliberately does NOT call `SDJwtClient.setKeyManager` — that assigned a
+     * static, so constructing a VPManager repointed key resolution for every
+     * manager already alive. `presentOne` passes `this.keyManager` (#1449).
+     */
+    constructor(keyManager?: KeyManager);
+    /**
+     * Create a SD-JWT presentation using the present() method
+     * This properly binds the holder's key to the SD-JWT VC
+     */
+    /**
+     * Separator between presentations in a multi-credential response.
+     *
+     * 🔴 A comma, because SD-JWT already owns `~`.
+     *
+     * Each presentation is `<issuer-jwt>~<disclosure>*~<kb-jwt>`, so splitting a
+     * bundle on `~` would take it apart at the wrong level. OID4VP carries
+     * several presentations as a JSON array; this transport has one string, so
+     * the array becomes a comma-joined list — a character that appears in
+     * neither base64url nor the SD-JWT grammar.
+     */
+    static readonly PRESENTATION_SEPARATOR = ",";
+    /**
+     * Build a presentation over one or more credentials.
+     *
+     * 🔴 Every credential gets its own presentation, and its own KB-JWT.
+     *
+     * An SD-JWT presentation binds one key-binding token to one credential —
+     * there is no place in that format for a second. So "present three
+     * credentials" is three presentations, joined, exactly as OID4VP carries an
+     * array of them. Each one proves holder possession of the credential it
+     * belongs to, which a single KB-JWT over a bundle could not do.
+     *
+     * This used to take `vcs[0]` and drop the rest in silence. The caller got
+     * back a presentation missing the authority it thought it was carrying, and
+     * found out at the verifier — if at all, since a delegation alone is often
+     * enough to reach a permit.
+     */
+    create(vcs: string[], // Array of SD-JWT VC strings
+    options: {
+        holderDid: string;
+        challenge: string;
+        domain: string;
+        purpose?: string;
+    }): Promise<string>;
+    /** One credential, one KB-JWT. */
+    private presentOne;
+    /**
+     * Verify a Verifiable Presentation
+     */
+    verify(vpJwt: string, options: {
+        expectedChallenge: string;
+        expectedDomain: string;
+        expectedHolder?: string;
+    }): Promise<VerifiablePresentation>;
+    /**
+     * Create a VP request
+     */
+    createRequest(domain: string, query?: {
+        type?: string;
+        credentialQuery?: any;
+    }): VPRequest;
+    /**
+     * Submit VP to a verifier
+     */
+    submit(vpJwt: string, verifierEndpoint: string): Promise<{
+        verified: boolean;
+        result?: any;
+    }>;
+}
+//# sourceMappingURL=vp-manager.d.ts.map

package/dist/vp/vp-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vp-manager.d.ts","sourceRoot":"","sources":["../../src/vp/vp-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AAE5D,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAM/C,qBAAa,SAAS;IACpB,OAAO,CAAC,UAAU,CAAY;IAE9B;;;;OAIG;gBACS,UAAU,CAAC,EAAE,UAAU;IAInC;;;OAGG;IACH;;;;;;;;;;OAUG;IACH,MAAM,CAAC,QAAQ,CAAC,sBAAsB,OAAM;IAE5C;;;;;;;;;;;;;;;OAeG;IACG,MAAM,CACV,GAAG,EAAE,MAAM,EAAE,EAAE,6BAA6B;IAC5C,OAAO,EAAE;QACP,SAAS,EAAE,MAAM,CAAA;QACjB,SAAS,EAAE,MAAM,CAAA;QACjB,MAAM,EAAE,MAAM,CAAA;QACd,OAAO,CAAC,EAAE,MAAM,CAAA;KACjB,GACA,OAAO,CAAC,MAAM,CAAC;IAalB,kCAAkC;YACpB,UAAU;IA+CxB;;OAEG;IACG,MAAM,CACV,KAAK,EAAE,MAAM,EACb,OAAO,EAAE;QACP,iBAAiB,EAAE,MAAM,CAAA;QACzB,cAAc,EAAE,MAAM,CAAA;QACtB,cAAc,CAAC,EAAE,MAAM,CAAA;KACxB,GACA,OAAO,CAAC,sBAAsB,CAAC;IAwClC;;OAEG;IACH,aAAa,CACX,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE;QACN,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,eAAe,CAAC,EAAE,GAAG,CAAA;KACtB,GACA,SAAS;IAQZ;;OAEG;IACG,MAAM,CACV,KAAK,EAAE,MAAM,EACb,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,GAAG,CAAA;KAAE,CAAC;CAehD"}

package/package.json

@@ -0,0 +1,66 @@
+{
+  "name": "@vess-id/ai-identity",
+  "version": "0.0.0-dev-20260902121045",
+  "description": "TypeScript SDK for AI Identity Layer",
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "require": "./dist/index.js",
+      "import": "./dist/index.mjs"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/cvoxelprotocol/aidentity.git",
+    "directory": "packages/sdk"
+  },
+  "peerDependencies": {
+    "@types/node": ">=20"
+  },
+  "peerDependenciesMeta": {
+    "@types/node": {
+      "optional": true
+    }
+  },
+  "dependencies": {
+    "@cedar-policy/cedar-wasm": "4.11.2",
+    "@sd-jwt/crypto-nodejs": "^0.15.0",
+    "@sd-jwt/sd-jwt-vc": "^0.15.1",
+    "@sd-jwt/types": "^0.15.0",
+    "ajv": "^8.18.0",
+    "ajv-formats": "^3.0.1",
+    "jose": "^5.10.0",
+    "uuid": "^9.0.1"
+  },
+  "devDependencies": {
+    "@types/jest": "^29.5.14",
+    "@types/node": "^22.19.17",
+    "@types/uuid": "^9.0.8",
+    "jest": "^29.7.0",
+    "ts-jest": "^29.4.9",
+    "tsup": "^8.5.1",
+    "typescript": "^5.9.3"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "license": "MIT",
+  "engines": {
+    "node": ">=20"
+  },
+  "scripts": {
+    "build": "tsup && tsc --declaration --emitDeclarationOnly --outDir dist",
+    "dev": "tsup --watch --no-clean",
+    "test": "jest",
+    "typecheck": "tsc --noEmit",
+    "clean": "rm -rf dist node_modules",
+    "assert:publish-surface": "node scripts/assert-publish-surface.js"
+  }
+}