@vess-id/ai-identity 0.20.0 → 0.22.0

package/dist/utils/sdjwt-client.d.ts

@@ -3,28 +3,196 @@ import { KeyManager } from '../did/key-manager';
 import type { DisclosureFrame } from '@sd-jwt/types';
 import type { JWK } from 'jose';
 export declare class SDJwtClient {
+    /**
+     * 🔴 Keyed by DID **and** by the identity of the key that was resolved.
+     *
+     * The instance holds a signer built from a private key the KeyManager
+     * handed over, so two stores holding *different* keys for one DID must not
+     * share an instance. Keying on the DID alone returned whichever one was
+     * built first — and since `setKeyManager` replaces a static field,
+     * constructing a second VPManager silently repointed every later lookup at
+     * a store that did not have the key. Measured: an agent that generated its
+     * DID through one manager could not present with another, failing as
+     * `Private key not found for holder` with the key sitting in the first
+     * manager's store the whole time.
+     *
+     * 🔴 The discriminator is the KEY, not the KeyManager object. Keying on
+     * object identity (a WeakMap-assigned `km0`/`km1`/…) fixed the mix-up and
+     * broke two other things, because the api builds a throwaway KeyManager
+     * per request — `new APIVCManager(new KeyManager(ephemeral))` at
+     * grant/services/remote-vc-issuer.service.ts:2234, which runs on every
+     * tool-invoke auto-issue, plus five more sites:
+     *
+     *   1. Same key material, new object, new id — so a long-lived issuer
+     *      (user/services/sdjwt-credential.service.ts:69) could not read back
+     *      its own warm entry once a per-request manager had replaced the
+     *      static. It failed outright rather than falling back. Measured:
+     *      `{"resolved":false,"msg":"Private key not found for issuer: … km1"}`
+     *      where the DID-only key gave `{"resolved":true}` — by accident, by
+     *      returning the wrong signer on a cache hit.
+     *
+     *   2. Entries accumulated without bound. `keyManagerIds` is a WeakMap, so
+     *      a collected manager releases its id — but the Map entry keyed by
+     *      that id string stays, and a signer closes over a DECRYPTED PRIVATE
+     *      KEY. Nothing in the api calls `clearIssuerCache`. Measured over 25
+     *      issuances of one DID: `{"instanceCount":25,"signerCount":25}` where
+     *      the DID-only key gave 1.
+     *
+     * A thumbprint (RFC 7638) is the right granularity for both: same key ⇒
+     * same entry whoever holds it, different key ⇒ different entry. It is
+     * computed over the public members only (`crv`/`kty`/`x`/`y` — `d`, `kid`
+     * and `alg` are excluded by the spec), which is what makes two stores
+     * holding the same keypair agree. Two *different* private keys sharing a
+     * public half is not a case that exists for a valid EC pair, so nothing is
+     * conflated that should not be. Measured at ~1.7µs per call, against an
+     * ECDSA signature that follows it.
+     */
     private static instances;
+    /**
+     * 🔴 Only ever read as a fallback — when a call arrives without a KeyManager.
+     *
+     * `VCManager`, `VPManager` and `APIVCManager` used to assign it in their
+     * constructors. They no longer do — every one of them passes its own
+     * KeyManager to each call — so within the SDK this field holds whatever an
+     * external consumer set via the deprecated {@link setKeyManager}, and
+     * otherwise a default `new KeyManager()` that {@link resolveKey} creates the
+     * first time it actually has to fall back. Nothing else writes it, and a
+     * call that carries its own store never causes that default to exist.
+     *
+     * It stays because `SDJwtClient` is a public export and a consumer pairing
+     * `setKeyManager` with {@link getSDJwtInstance} would otherwise break on a
+     * minor release. Removal belongs to the next major.
+     */
     private static keyManager;
     private static signerCache;
     private static verifierCache;
+    /**
+     * A stable identifier for the key itself, shared by every store holding it.
+     *
+     * 🔴 Falls back to a per-call unique value rather than to a constant when
+     * the thumbprint cannot be computed. A constant would make two unrelated
+     * malformed keys collide on one cache entry, which is the mix-up this whole
+     * scheme exists to prevent — the safe direction of failure is "cache
+     * nothing", never "share an entry". In practice this is unreachable for a
+     * key that got through `getKey`; it is here so a future JWK shape degrades
+     * into a slow path instead of a wrong one.
+     */
+    private static keyId;
+    private static nextFallbackKeyId;
+    /**
+     * 🔴 Cache keys are built here and nowhere else.
+     *
+     * Three maps, three key shapes. When they were assembled inline at each
+     * call site, `clearIssuerCache` wrote its own third version from memory and
+     * matched only one of them: it deleted `issuerDid` where the instance was
+     * stored as `${did}:issuer:${kmId}`, and `signer:${did}` where the signer
+     * was stored as `signer:${did}:${kmId}`. Measured before the fix — one
+     * issuer cached, then cleared:
+     *
+     *   BEFORE {"instanceCount":1,"signerCount":1,"verifierCount":1}
+     *   AFTER  {"instanceCount":1,"signerCount":1,"verifierCount":0}
+     *
+     * The signer closes over a decrypted private key, so the two that survived
+     * were the two that mattered. Keeping writers and the eraser on one
+     * definition is what stops that from drifting apart again.
+     */
+    private static instanceKey;
+    private static signerKey;
+    /**
+     * The part of a key that identifies the DID, up to and including the
+     * delimiter before the key-identity segment.
+     *
+     * 🔴 `clearIssuerCache` matches on these rather than rebuilding prefixes of
+     * its own — writing the shape a second time is the mistake being fixed. The
+     * trailing `:` is load-bearing: matching a bare DID would make
+     * `did:key:abc` also evict `did:key:abcd`.
+     */
+    private static instancePrefix;
+    private static signerPrefix;
+    /**
+     * 🔴 Carries the key identity too, symmetrically with {@link signerKey}.
+     *
+     * It used to be keyed by DID alone, on the reasoning that "a verifier is
+     * built from the public half, which is the same value no matter which store
+     * the private key came out of". That holds for the case the caches were
+     * built for — one keypair, several stores — and fails for the exact case
+     * the key segment exists to separate: two stores holding *different* keys
+     * under one DID. There the second caller reused the first's verifier and so
+     * checked signatures against a public key that was not its own.
+     *
+     * Costs nothing now that the segment is the key's own thumbprint rather
+     * than a per-object id: the same keypair still yields one entry however
+     * many managers hold it, which is what the old comment actually wanted.
+     */
+    private static verifierKey;
+    private static verifierPrefix;
     private constructor();
     /**
      * Initialize with KeyManager for DID-based key management
+     *
+     * @deprecated Pass the KeyManager to the call instead:
+     * {@link getIssuerInstance}`(did, keyManager)`,
+     * {@link getHolderInstance}`(did, keyManager)`, {@link issueSDJWT} and
+     * {@link verifySDJWT} all take one. This setter writes a **static** field,
+     * so every manager an application constructs repoints key resolution for
+     * every other one — construction order decides which store is searched.
+     *
+     * 🔴 Not a style preference; it caused a production failure. A long-lived
+     * issuer and a per-request `new APIVCManager(new KeyManager(ephemeral))`
+     * coexist in the api, and whichever ran last won: the long-lived one then
+     * signed with a store that was not its own or failed outright with
+     * `Private key not found for issuer: …`. See PR #1441.
+     *
+     * Retained for external SDK consumers that pair it with
+     * {@link getSDJwtInstance}; scheduled for removal in the next major.
      */
     static setKeyManager(keyManager: KeyManager): void;
     /**
      * Get SDJwtVcInstance for issuer role (VC issuance)
      */
-    static getIssuerInstance(issuerDid: string): Promise<SDJwtVcInstance>;
+    static getIssuerInstance(issuerDid: string, keyManager?: KeyManager): Promise<SDJwtVcInstance>;
     /**
      * Get SDJwtVcInstance for holder role (VP presentation)
      */
-    static getHolderInstance(holderDid: string): Promise<SDJwtVcInstance>;
+    static getHolderInstance(holderDid: string, keyManager?: KeyManager): Promise<SDJwtVcInstance>;
+    /**
+     * Resolve the key, then look in the cache — in that order.
+     *
+     * 🔴 The order is the fix, not an implementation detail. The cache key
+     * names the key that was resolved, so it cannot be built before resolving,
+     * and the store must therefore be consulted on a hit as well as a miss.
+     * That is what makes a warm entry reachable from any manager holding the
+     * same key: with the KeyManager object in the key, the caller whose store
+     * DID hold the key looked under a name nobody had written to and got
+     * `Private key not found` — the store had it the whole time.
+     *
+     * The extra work on a hit is one `getKey` (an in-memory or DB read the
+     * caller would owe anyway on a miss) plus a ~1.7µs thumbprint. What is
+     * saved is the SDJwtVcInstance and, more to the point, re-importing the
+     * key material into a signer.
+     */
+    private static getInstance;
+    /**
+     * Fetch the DID's private key from the given store (or the static one) and
+     * derive the identity the caches key on.
+     */
+    private static resolveKey;
     /**
      * Get SDJwtVcInstance with specified role (backward compatibility)
+     *
+     * @deprecated Call {@link getIssuerInstance}`(did, keyManager)` or
+     * {@link getHolderInstance}`(did, keyManager)` directly — this wrapper adds
+     * nothing but the role switch, and the role is known at every call site.
+     *
+     * 🔴 `keyManager` was added here because omitting it was the defect: with no
+     * way to name a store, every caller of this wrapper fell through to the
+     * static field and so was the one path that could not benefit from the
+     * PR #1441 fix. Callers that still omit it keep the old static behaviour, so
+     * existing external code is unaffected.
      */
     static getSDJwtInstance(did: string, options?: {
         role?: 'issuer' | 'holder';
+        keyManager?: KeyManager;
     }): Promise<SDJwtVcInstance>;
     /**
      * Create a new SDJwtVcInstance with DID-based keys and role
@@ -40,6 +208,55 @@ export declare class SDJwtClient {
      * - vct: SD-JWT VC credential type discriminator.
      */
     private static readonly NEVER_DISCLOSE;
+    /**
+     * Claims that decide whether an action is PERMITTED, and so must not be
+     * withholdable by the party they constrain.
+     *
+     * 🔴 Separate from NEVER_DISCLOSE on purpose. That set is about structural
+     * integrity — hide `cnf` and Proof of Possession cannot be checked at all.
+     * This set is about authorisation: these fields are readable, they simply
+     * must not be OPTIONAL, because SD-JWT makes an undisclosed field
+     * physically absent rather than merely hidden. A holder who omits the
+     * disclosure presents a credential with no constraints on it.
+     *
+     * The harm is not theoretical. Gate-2 permits when the delegate list is
+     * empty (tool-executor.service.ts) — deliberate backward compatibility for
+     * two credential shapes that genuinely carry no `delegates` — and a
+     * withheld disclosure lands in that same branch. Cedar Gate-1 backstops
+     * high-risk actions, but only where the Cedar default policy is
+     * bootstrapped; that early return's own comment records that a non-Cedar
+     * deployment's flat-permission fallback does not risk-gate, making the
+     * withholding an unconditional allow there.
+     *
+     * 🔴 Enforced here rather than by curating each caller's field list. Four
+     * issuance paths pass their own arrays — remote-vc-issuer.service.ts,
+     * user/services/sdjwt-credential.service.ts (a hardcoded switch that
+     * duplicates the SDK config), sdk/src/vc/api-vc-manager.ts, and
+     * oauth.service.ts in two places — so fixing one leaves three standing,
+     * and a fifth added later would inherit the defect. This function is the
+     * single point all of them flow through.
+     *
+     * It is also the only place that can stop the NESTED case: the recursion
+     * below passes every key of a nested object as disclosable regardless of
+     * what was requested, which no call-site list can reach.
+     *
+     * What is NOT here: `approval` and `intent_description`. Those are
+     * selective for privacy — an approver's identity, free text — and no gate
+     * reads them to decide anything. The line being drawn is "authorisation
+     * input", not "sensitive".
+     *
+     * Field-by-field, with where each is read:
+     * - delegates:     carries actions/effect/resource (tool-auth.service.ts)
+     * - actions:       what a delegate may do
+     * - tool:          prefixes bare actions into the permission string that
+     *                  gates the decision; withheld, `message.post` is emitted
+     *                  instead of `slack.message.post` — a different string
+     * - resourceScope: gates the scope match (tool-manager.ts)
+     * - permissions:   the flat-permission path (tool-auth.service.ts)
+     * - effect:        whether a delegate rule allows or denies
+     * - resource:      what a rule applies to
+     */
+    private static readonly NEVER_SELECTIVE;
     /**
      * Create disclosure frame for selective disclosure
      */
@@ -48,11 +265,11 @@ export declare class SDJwtClient {
      * Issue an SD-JWT with selective disclosure
      */
     static issueSDJWT(payload: Record<string, any>, _privateKey: any, // Not used since we get key from KeyManager based on issuer DID
-    selectiveDisclosureFields?: string[]): Promise<string>;
+    selectiveDisclosureFields?: string[], keyManager?: KeyManager): Promise<string>;
     /**
      * Verify an SD-JWT
      */
-    static verifySDJWT(credential: string): Promise<{
+    static verifySDJWT(credential: string, keyManager?: KeyManager): Promise<{
         valid: boolean;
         payload?: any;
         error?: string;
@@ -70,7 +287,27 @@ export declare class SDJwtClient {
      */
     static clearCaches(): void;
     /**
-     * Clear cache for specific issuer
+     * Drop every cache entry holding key material for one DID.
+     *
+     * 🔴 Scans rather than deletes by exact key, because the caller cannot
+     * build the exact keys. Both the instance and signer keys carry a
+     * `keyManagerId`, which is private and WeakMap-derived, and this method
+     * takes only a DID. The same DID legitimately has one entry per KeyManager
+     * that ever resolved it, so anything short of "all of them" leaves a live
+     * signer — and a signer closes over a decrypted private key. The maps hold
+     * a handful of entries; a linear pass is not worth optimizing away.
+     *
+     * 🔴 Clears the holder instance too, despite the `Issuer` in the name.
+     * The unit being freed is the DID's key material, not a role: a holder
+     * instance is constructed with `kbSigner` set to the very same signer
+     * object as the issuer's, so evicting the signer while leaving the holder
+     * instance cached would keep the decrypted key reachable through the map
+     * we claimed to have cleaned. Roles are not separable here; the DID is the
+     * only safe granularity.
+     *
+     * 🔴 Matches on a delimiter, not a bare prefix. `did:key:abc` and
+     * `did:key:abcd` are different DIDs, and `startsWith(did)` would take the
+     * second one down with the first.
      */
     static clearIssuerCache(issuerDid: string): void;
     /**

package/dist/utils/sdjwt-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sdjwt-client.d.ts","sourceRoot":"","sources":["../../src/utils/sdjwt-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAGnD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAE/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AACpD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAA;AAG/B,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAC,SAAS,CAA0C;IAClE,OAAO,CAAC,MAAM,CAAC,UAAU,CAAY;IACrC,OAAO,CAAC,MAAM,CAAC,WAAW,CAA8B;IACxD,OAAO,CAAC,MAAM,CAAC,aAAa,CAA8B;IAE1D,OAAO;IAEP;;OAEG;WACW,aAAa,CAAC,UAAU,EAAE,UAAU;IAIlD;;OAEG;WACiB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IASlF;;OAEG;WACiB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IASlF;;OAEG;WACiB,gBAAgB,CAClC,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAA;KAAE,GACvC,OAAO,CAAC,eAAe,CAAC;IAK3B;;OAEG;mBACkB,cAAc;IA8DnC;;;;;;;;OAQG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAEpC;IAEF;;OAEG;WACW,qBAAqB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC/D,MAAM,EAAE,CAAC,EACT,sBAAsB,GAAE,MAAM,EAAO,GACpC,eAAe,CAAC,CAAC,CAAC;IAgCrB;;OAEG;WACiB,UAAU,CAC5B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC5B,WAAW,EAAE,GAAG,EAAE,gEAAgE;IAClF,yBAAyB,GAAE,MAAM,EAAO,GACvC,OAAO,CAAC,MAAM,CAAC;IAgBlB;;OAEG;WACiB,WAAW,CAC7B,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,GAAG,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA0C7D;;OAEG;WACiB,oBAAoB;;;;WAQpB,eAAe;IAInC;;OAEG;WACW,WAAW,IAAI,IAAI;IAMjC;;OAEG;WACW,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAMvD;;OAEG;WACW,aAAa,IAAI;QAC7B,aAAa,EAAE,MAAM,CAAA;QACrB,WAAW,EAAE,MAAM,CAAA;QACnB,aAAa,EAAE,MAAM,CAAA;KACtB;IAQD;;;;OAIG;mBACkB,wBAAwB;IAiC7C;;;OAGG;mBACkB,uBAAuB;IAsB5C;;OAEG;mBACkB,mBAAmB;IAsBxC;;;;;;;;;;;;;;;;OAgBG;WACiB,qBAAqB,CACvC,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,GAAG,GACb,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,GAAG,CAAC;QAAC,MAAM,CAAC,EAAE,GAAG,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA2B3E;;;;;;;;;;;;;;OAcG;WACiB,mBAAmB,CACrC,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,GAAG,CAAC;QAAC,MAAM,CAAC,EAAE,GAAG,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAiC/F;;;;;;;;;;;;;;;;;OAiBG;WACiB,yBAAyB,CAC3C,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC;QACT,OAAO,CAAC,EAAE,GAAG,CAAA;QACb,MAAM,CAAC,EAAE,GAAG,CAAA;QACZ,WAAW,CAAC,EAAE,GAAG,EAAE,CAAA;QACnB,MAAM,CAAC,EAAE,GAAG,CAAA;QACZ,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAC;IAuBF;;;;;;OAMG;WACW,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;CAelE"}
+{"version":3,"file":"sdjwt-client.d.ts","sourceRoot":"","sources":["../../src/utils/sdjwt-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAGnD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAE/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AACpD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAA;AAI/B,qBAAa,WAAW;IACtB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2CG;IACH,OAAO,CAAC,MAAM,CAAC,SAAS,CAA0C;IAElE;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,MAAM,CAAC,UAAU,CAAY;IACrC,OAAO,CAAC,MAAM,CAAC,WAAW,CAA8B;IACxD,OAAO,CAAC,MAAM,CAAC,aAAa,CAA8B;IAE1D;;;;;;;;;;OAUG;mBACkB,KAAK;IAQ1B,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAI;IAEpC;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,CAAC,MAAM,CAAC,WAAW;IAI1B,OAAO,CAAC,MAAM,CAAC,SAAS;IAIxB;;;;;;;;OAQG;IACH,OAAO,CAAC,MAAM,CAAC,cAAc;IAI7B,OAAO,CAAC,MAAM,CAAC,YAAY;IAI3B;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,MAAM,CAAC,WAAW;IAI1B,OAAO,CAAC,MAAM,CAAC,cAAc;IAI7B,OAAO;IAEP;;;;;;;;;;;;;;;;;;OAkBG;WACW,aAAa,CAAC,UAAU,EAAE,UAAU;IAIlD;;OAEG;WACiB,iBAAiB,CACnC,SAAS,EAAE,MAAM,EACjB,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,eAAe,CAAC;IAI3B;;OAEG;WACiB,iBAAiB,CACnC,SAAS,EAAE,MAAM,EACjB,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,eAAe,CAAC;IAI3B;;;;;;;;;;;;;;;OAeG;mBACkB,WAAW;IAchC;;;OAGG;mBACkB,UAAU;IAwC/B;;;;;;;;;;;;OAYG;WACiB,gBAAgB,CAClC,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;QAAC,UAAU,CAAC,EAAE,UAAU,CAAA;KAAE,GAChE,OAAO,CAAC,eAAe,CAAC;IAO3B;;OAEG;mBACkB,cAAc;IA2DnC;;;;;;;;OAQG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CASpC;IAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+CG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAoBrC;IAEF;;OAEG;WACW,qBAAqB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC/D,MAAM,EAAE,CAAC,EACT,sBAAsB,GAAE,MAAM,EAAO,GACpC,eAAe,CAAC,CAAC,CAAC;IAmErB;;OAEG;WACiB,UAAU,CAC5B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC5B,WAAW,EAAE,GAAG,EAAE,gEAAgE;IAClF,yBAAyB,GAAE,MAAM,EAAO,EACxC,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,MAAM,CAAC;IAgBlB;;OAEG;WACiB,WAAW,CAC7B,UAAU,EAAE,MAAM,EAClB,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,GAAG,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA0C7D;;OAEG;WACiB,oBAAoB;;;;WAQpB,eAAe;IAInC;;OAEG;WACW,WAAW,IAAI,IAAI;IAMjC;;;;;;;;;;;;;;;;;;;;;;OAsBG;WACW,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAwBvD;;OAEG;WACW,aAAa,IAAI;QAC7B,aAAa,EAAE,MAAM,CAAA;QACrB,WAAW,EAAE,MAAM,CAAA;QACnB,aAAa,EAAE,MAAM,CAAA;KACtB;IAQD;;;;OAIG;mBACkB,wBAAwB;IAmC7C;;;OAGG;mBACkB,uBAAuB;IAsB5C;;OAEG;mBACkB,mBAAmB;IAsBxC;;;;;;;;;;;;;;;;OAgBG;WACiB,qBAAqB,CACvC,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,GAAG,GACb,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,GAAG,CAAC;QAAC,MAAM,CAAC,EAAE,GAAG,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IA2B3E;;;;;;;;;;;;;;OAcG;WACiB,mBAAmB,CACrC,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,GAAG,CAAC;QAAC,MAAM,CAAC,EAAE,GAAG,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAiC/F;;;;;;;;;;;;;;;;;OAiBG;WACiB,yBAAyB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;QACzE,OAAO,CAAC,EAAE,GAAG,CAAA;QACb,MAAM,CAAC,EAAE,GAAG,CAAA;QACZ,WAAW,CAAC,EAAE,GAAG,EAAE,CAAA;QACnB,MAAM,CAAC,EAAE,GAAG,CAAA;QACZ,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAC;IAuBF;;;;;;OAMG;WACW,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;CAelE"}

package/dist/vc/api-vc-manager.d.ts

@@ -6,6 +6,11 @@ import { KeyManager } from '../did/key-manager';
  */
 export declare class APIVCManager {
     private keyManager;
+    /**
+     * 🔴 Deliberately does NOT call `SDJwtClient.setKeyManager` — that assigned a
+     * static, so constructing one of these repointed every other manager's key
+     * resolution. Every call below passes `this.keyManager` instead (#1449).
+     */
     constructor(keyManager?: KeyManager);
     /**
      * Issue an SD-JWT VC with selective disclosure

package/dist/vc/api-vc-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-vc-manager.d.ts","sourceRoot":"","sources":["../../src/vc/api-vc-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EAEpB,MAAM,UAAU,CAAA;AACjB,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAI/C;;;GAGG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,UAAU,CAAY;gBAElB,UAAU,CAAC,EAAE,UAAU;IAMnC;;OAEG;IACG,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAqD7E;;OAEG;IACG,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA4CrE;;OAEG;IACG,4BAA4B,CAChC,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EAAE,EACrB,SAAS,EAAE,MAAM,EACjB,eAAe,SAAK,GACnB,OAAO,CAAC,kBAAkB,CAAC;IAkB9B;;OAEG;IACG,yBAAyB,CAC7B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EAAE,EACjB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,eAAe,SAAK,GACnB,OAAO,CAAC,kBAAkB,CAAC;IAkB9B;;OAEG;IACG,wBAAwB,CAC5B,QAAQ,EAAE,MAAM,EAChB,eAAe,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,EAC3D,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,eAAe,SAAK,GACnB,OAAO,CAAC,kBAAkB,CAAC;IAiB9B;;OAEG;IACG,oBAAoB,CACxB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,SAAS,GAAG,QAAQ,EAC3B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,SAAS,EAAE,MAAM,EACjB,eAAe,SAAI,GAClB,OAAO,CAAC,kBAAkB,CAAC;CAiB/B"}
+{"version":3,"file":"api-vc-manager.d.ts","sourceRoot":"","sources":["../../src/vc/api-vc-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EAEpB,MAAM,UAAU,CAAA;AACjB,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAI/C;;;GAGG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,UAAU,CAAY;IAE9B;;;;OAIG;gBACS,UAAU,CAAC,EAAE,UAAU;IAInC;;OAEG;IACG,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAgE7E;;OAEG;IACG,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA6CrE;;OAEG;IACG,4BAA4B,CAChC,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EAAE,EACrB,SAAS,EAAE,MAAM,EACjB,eAAe,SAAK,GACnB,OAAO,CAAC,kBAAkB,CAAC;IAkB9B;;OAEG;IACG,yBAAyB,CAC7B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EAAE,EACjB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,eAAe,SAAK,GACnB,OAAO,CAAC,kBAAkB,CAAC;IAkB9B;;OAEG;IACG,wBAAwB,CAC5B,QAAQ,EAAE,MAAM,EAChB,eAAe,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,EAC3D,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,eAAe,SAAK,GACnB,OAAO,CAAC,kBAAkB,CAAC;IAiB9B;;OAEG;IACG,oBAAoB,CACxB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,SAAS,GAAG,QAAQ,EAC3B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,SAAS,EAAE,MAAM,EACjB,eAAe,SAAI,GAClB,OAAO,CAAC,kBAAkB,CAAC;CAiB/B"}

package/dist/vc/vc-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vc-manager.d.ts","sourceRoot":"","sources":["../../src/vc/vc-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,UAAU,EACX,MAAM,UAAU,CAAA;AAEjB,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAE/C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAA;AAGvE,qBAAa,SAAS;IACpB,OAAO,CAAC,UAAU,CAAY;IAC9B,OAAO,CAAC,SAAS,CAAqC;IACtD,OAAO,CAAC,YAAY,CAAc;IAClC,OAAO,CAAC,mBAAmB,CAAqB;gBAG9C,UAAU,CAAC,EAAE,UAAU,EACvB,YAAY,CAAC,EAAE,YAAY,EAC3B,mBAAmB,CAAC,EAAE,mBAAmB;IAQ3C;;OAEG;IACH,OAAO,CAAC,+BAA+B;IAavC;;;OAGG;IACG,KAAK,CACT,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,GAAG,EACX,OAAO,EAAE;QACP,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,GACA,OAAO,CAAC,MAAM,CAAC;IAmGlB;;OAEG;YACW,mBAAmB;IA6BjC;;OAEG;IACG,WAAW,CACf,cAAc,EAAE,MAAM,EACtB,MAAM,EAAE,GAAG,EACX,OAAO,EAAE;QACP,SAAS,EAAE,MAAM,CAAA;QACjB,UAAU,EAAE,MAAM,CAAA;KACnB,GACA,OAAO,CAAC,MAAM,CAAC;IAoClB;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QACR,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,eAAe,CAAC,EAAE,MAAM,CAAA;QACxB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;KAC1B,GACA,OAAO,CAAC,GAAG,CAAC;IAkDf;;OAEG;IACG,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK9D;;OAEG;IACH,gBAAgB,CAAC,QAAQ,EAAE,UAAU,GAAG,IAAI;IAI5C,OAAO,CAAC,wBAAwB;IA4BhC,OAAO,CAAC,uBAAuB;CA2BhC"}
+{"version":3,"file":"vc-manager.d.ts","sourceRoot":"","sources":["../../src/vc/vc-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgD,UAAU,EAAE,MAAM,UAAU,CAAA;AAEnF,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAE/C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAA;AAGvE,qBAAa,SAAS;IACpB,OAAO,CAAC,UAAU,CAAY;IAC9B,OAAO,CAAC,SAAS,CAAqC;IACtD,OAAO,CAAC,YAAY,CAAc;IAClC,OAAO,CAAC,mBAAmB,CAAqB;gBAG9C,UAAU,CAAC,EAAE,UAAU,EACvB,YAAY,CAAC,EAAE,YAAY,EAC3B,mBAAmB,CAAC,EAAE,mBAAmB;IAiB3C;;OAEG;IACH,OAAO,CAAC,+BAA+B;IAavC;;;OAGG;IACG,KAAK,CACT,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,GAAG,EACX,OAAO,EAAE;QACP,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,GACA,OAAO,CAAC,MAAM,CAAC;IAqGlB;;OAEG;YACW,mBAAmB;IAgCjC;;OAEG;IACG,WAAW,CACf,cAAc,EAAE,MAAM,EACtB,MAAM,EAAE,GAAG,EACX,OAAO,EAAE;QACP,SAAS,EAAE,MAAM,CAAA;QACjB,UAAU,EAAE,MAAM,CAAA;KACnB,GACA,OAAO,CAAC,MAAM,CAAC;IAoClB;;OAEG;IACG,MAAM,CACV,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QACR,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,eAAe,CAAC,EAAE,MAAM,CAAA;QACxB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;KAC1B,GACA,OAAO,CAAC,GAAG,CAAC;IAgDf;;OAEG;IACG,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK9D;;OAEG;IACH,gBAAgB,CAAC,QAAQ,EAAE,UAAU,GAAG,IAAI;IAI5C,OAAO,CAAC,wBAAwB;IA4BhC,OAAO,CAAC,uBAAuB;CA2BhC"}

package/dist/vp/vp-manager.d.ts

@@ -2,11 +2,44 @@ import { VerifiablePresentation, VPRequest } from '../types';
 import { KeyManager } from '../did/key-manager';
 export declare class VPManager {
     private keyManager;
+    /**
+     * 🔴 Deliberately does NOT call `SDJwtClient.setKeyManager` — that assigned a
+     * static, so constructing a VPManager repointed key resolution for every
+     * manager already alive. `presentOne` passes `this.keyManager` (#1449).
+     */
     constructor(keyManager?: KeyManager);
     /**
      * Create a SD-JWT presentation using the present() method
      * This properly binds the holder's key to the SD-JWT VC
      */
+    /**
+     * Separator between presentations in a multi-credential response.
+     *
+     * 🔴 A comma, because SD-JWT already owns `~`.
+     *
+     * Each presentation is `<issuer-jwt>~<disclosure>*~<kb-jwt>`, so splitting a
+     * bundle on `~` would take it apart at the wrong level. OID4VP carries
+     * several presentations as a JSON array; this transport has one string, so
+     * the array becomes a comma-joined list — a character that appears in
+     * neither base64url nor the SD-JWT grammar.
+     */
+    static readonly PRESENTATION_SEPARATOR = ",";
+    /**
+     * Build a presentation over one or more credentials.
+     *
+     * 🔴 Every credential gets its own presentation, and its own KB-JWT.
+     *
+     * An SD-JWT presentation binds one key-binding token to one credential —
+     * there is no place in that format for a second. So "present three
+     * credentials" is three presentations, joined, exactly as OID4VP carries an
+     * array of them. Each one proves holder possession of the credential it
+     * belongs to, which a single KB-JWT over a bundle could not do.
+     *
+     * This used to take `vcs[0]` and drop the rest in silence. The caller got
+     * back a presentation missing the authority it thought it was carrying, and
+     * found out at the verifier — if at all, since a delegation alone is often
+     * enough to reach a permit.
+     */
     create(vcs: string[], // Array of SD-JWT VC strings
     options: {
         holderDid: string;
@@ -14,6 +47,8 @@ export declare class VPManager {
         domain: string;
         purpose?: string;
     }): Promise<string>;
+    /** One credential, one KB-JWT. */
+    private presentOne;
     /**
      * Verify a Verifiable Presentation
      */

package/dist/vp/vp-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vp-manager.d.ts","sourceRoot":"","sources":["../../src/vp/vp-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AAE5D,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAM/C,qBAAa,SAAS;IACpB,OAAO,CAAC,UAAU,CAAY;gBAElB,UAAU,CAAC,EAAE,UAAU;IAMnC;;;OAGG;IACG,MAAM,CACV,GAAG,EAAE,MAAM,EAAE,EAAE,6BAA6B;IAC5C,OAAO,EAAE;QACP,SAAS,EAAE,MAAM,CAAA;QACjB,SAAS,EAAE,MAAM,CAAA;QACjB,MAAM,EAAE,MAAM,CAAA;QACd,OAAO,CAAC,EAAE,MAAM,CAAA;KACjB,GACA,OAAO,CAAC,MAAM,CAAC;IA6ClB;;OAEG;IACG,MAAM,CACV,KAAK,EAAE,MAAM,EACb,OAAO,EAAE;QACP,iBAAiB,EAAE,MAAM,CAAA;QACzB,cAAc,EAAE,MAAM,CAAA;QACtB,cAAc,CAAC,EAAE,MAAM,CAAA;KACxB,GACA,OAAO,CAAC,sBAAsB,CAAC;IAwClC;;OAEG;IACH,aAAa,CACX,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE;QACN,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,eAAe,CAAC,EAAE,GAAG,CAAA;KACtB,GACA,SAAS;IAQZ;;OAEG;IACG,MAAM,CACV,KAAK,EAAE,MAAM,EACb,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,GAAG,CAAA;KAAE,CAAC;CAehD"}
+{"version":3,"file":"vp-manager.d.ts","sourceRoot":"","sources":["../../src/vp/vp-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AAE5D,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAM/C,qBAAa,SAAS;IACpB,OAAO,CAAC,UAAU,CAAY;IAE9B;;;;OAIG;gBACS,UAAU,CAAC,EAAE,UAAU;IAInC;;;OAGG;IACH;;;;;;;;;;OAUG;IACH,MAAM,CAAC,QAAQ,CAAC,sBAAsB,OAAM;IAE5C;;;;;;;;;;;;;;;OAeG;IACG,MAAM,CACV,GAAG,EAAE,MAAM,EAAE,EAAE,6BAA6B;IAC5C,OAAO,EAAE;QACP,SAAS,EAAE,MAAM,CAAA;QACjB,SAAS,EAAE,MAAM,CAAA;QACjB,MAAM,EAAE,MAAM,CAAA;QACd,OAAO,CAAC,EAAE,MAAM,CAAA;KACjB,GACA,OAAO,CAAC,MAAM,CAAC;IAalB,kCAAkC;YACpB,UAAU;IA+CxB;;OAEG;IACG,MAAM,CACV,KAAK,EAAE,MAAM,EACb,OAAO,EAAE;QACP,iBAAiB,EAAE,MAAM,CAAA;QACzB,cAAc,EAAE,MAAM,CAAA;QACtB,cAAc,CAAC,EAAE,MAAM,CAAA;KACxB,GACA,OAAO,CAAC,sBAAsB,CAAC;IAwClC;;OAEG;IACH,aAAa,CACX,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE;QACN,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,eAAe,CAAC,EAAE,GAAG,CAAA;KACtB,GACA,SAAS;IAQZ;;OAEG;IACG,MAAM,CACV,KAAK,EAAE,MAAM,EACb,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,GAAG,CAAA;KAAE,CAAC;CAehD"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vess-id/ai-identity",
-  "version": "0.20.0",
+  "version": "0.22.0",
   "description": "TypeScript SDK for AI Identity Layer",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",

package/dist/constraint/__tests__/fixtures/constraint.fixtures.d.ts

@@ -1,56 +0,0 @@
-import { GrantConstraints, TimeWindowConstraint, EvaluationContext } from '../../../types';
-export declare const mockExecutorDid = "did:key:z6MkiY62766b1LJkExWMsM3QG4WtX23zJpRgVLwZBKQhyt6d";
-/**
- * Create mock time window constraint
- */
-export declare const createMockTimeWindow: (overrides?: Partial<TimeWindowConstraint>) => TimeWindowConstraint;
-/**
- * Create mock constraints
- */
-export declare const createMockConstraints: (overrides?: Partial<GrantConstraints>) => GrantConstraints;
-/**
- * Create mock evaluation context
- */
-export declare const createMockContext: (overrides?: Partial<EvaluationContext>) => EvaluationContext;
-/**
- * Create constraints that should pass all checks
- */
-export declare const createPassingConstraints: () => GrantConstraints;
-/**
- * Create constraints that should fail time window check
- */
-export declare const createFailingTimeWindowConstraints: () => GrantConstraints;
-/**
- * Create constraints that should fail invocation limit
- */
-export declare const createExhaustedConstraints: () => GrantConstraints;
-/**
- * Create constraints that should fail IP check
- */
-export declare const createRestrictedIpConstraints: () => GrantConstraints;
-/**
- * Create overnight time window (e.g., 22:00-06:00)
- */
-export declare const createOvernightTimeWindow: () => TimeWindowConstraint;
-/**
- * Test IPs for various scenarios
- */
-export declare const testIps: {
-    inRange192: string;
-    inRange10: string;
-    outOfRange: string;
-    localhost: string;
-    ipv6Localhost: string;
-    ipv6Public: string;
-};
-/**
- * Test timestamps for various scenarios
- */
-export declare const createTestTimestamps: () => {
-    weekdayMorning: Date;
-    weekdayEvening: Date;
-    weekendMorning: Date;
-    midnight: Date;
-    now: Date;
-};
-//# sourceMappingURL=constraint.fixtures.d.ts.map

package/dist/constraint/__tests__/fixtures/constraint.fixtures.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"constraint.fixtures.d.ts","sourceRoot":"","sources":["../../../../src/constraint/__tests__/fixtures/constraint.fixtures.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,iBAAiB,EAClB,MAAM,gBAAgB,CAAA;AAGvB,eAAO,MAAM,eAAe,6DAA6D,CAAA;AAEzF;;GAEG;AACH,eAAO,MAAM,oBAAoB,GAAI,YAAW,OAAO,CAAC,oBAAoB,CAAM,KAAG,oBAMnF,CAAA;AAEF;;GAEG;AACH,eAAO,MAAM,qBAAqB,GAAI,YAAW,OAAO,CAAC,gBAAgB,CAAM,KAAG,gBAOhF,CAAA;AAEF;;GAEG;AACH,eAAO,MAAM,iBAAiB,GAAI,YAAW,OAAO,CAAC,iBAAiB,CAAM,KAAG,iBAc7E,CAAA;AAEF;;GAEG;AACH,eAAO,MAAM,wBAAwB,QAAO,gBAW1C,CAAA;AAEF;;GAEG;AACH,eAAO,MAAM,kCAAkC,QAAO,gBAOpD,CAAA;AAEF;;GAEG;AACH,eAAO,MAAM,0BAA0B,QAAO,gBAE5C,CAAA;AAEF;;GAEG;AACH,eAAO,MAAM,6BAA6B,QAAO,gBAE/C,CAAA;AAEF;;GAEG;AACH,eAAO,MAAM,yBAAyB,QAAO,oBAK3C,CAAA;AAEF;;GAEG;AACH,eAAO,MAAM,OAAO;;;;;;;CAOnB,CAAA;AAED;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;;;CAchC,CAAA"}

package/dist/internal-signature/__tests__/canonical.spec.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=canonical.spec.d.ts.map

package/dist/internal-signature/__tests__/canonical.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"canonical.spec.d.ts","sourceRoot":"","sources":["../../../src/internal-signature/__tests__/canonical.spec.ts"],"names":[],"mappings":""}

package/dist/internal-signature/__tests__/signer-roundtrip.spec.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=signer-roundtrip.spec.d.ts.map

package/dist/internal-signature/__tests__/signer-roundtrip.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"signer-roundtrip.spec.d.ts","sourceRoot":"","sources":["../../../src/internal-signature/__tests__/signer-roundtrip.spec.ts"],"names":[],"mappings":""}

package/dist/internal-signature/__tests__/signer.spec.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=signer.spec.d.ts.map

package/dist/internal-signature/__tests__/signer.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"signer.spec.d.ts","sourceRoot":"","sources":["../../../src/internal-signature/__tests__/signer.spec.ts"],"names":[],"mappings":""}

package/dist/monitoring/metrics-manager.d.ts

@@ -1,74 +0,0 @@
-export interface SDJWTMetrics {
-    issuanceCount: number;
-    verificationCount: number;
-    failedIssuances: number;
-    failedVerifications: number;
-    averageIssuanceTime: number;
-    averageVerificationTime: number;
-    cacheHitRate: number;
-    lastActivity: Date;
-}
-export interface OperationMetric {
-    operation: 'issue' | 'verify';
-    startTime: number;
-    endTime: number;
-    success: boolean;
-    error?: string;
-    issuerDid?: string;
-    credentialType?: string;
-}
-export declare class MetricsManager {
-    private metrics;
-    private operations;
-    private maxOperationHistory;
-    /**
-     * Start tracking an operation
-     */
-    startOperation(operation: 'issue' | 'verify', metadata?: Record<string, any>): string;
-    /**
-     * End tracking an operation
-     */
-    endOperation(_operationId: string, success: boolean, error?: string): void;
-    /**
-     * Update aggregated metrics
-     */
-    private updateMetrics;
-    /**
-     * Get metrics for a specific issuer or global
-     */
-    getMetrics(issuerDid?: string): SDJWTMetrics | null;
-    /**
-     * Get all metrics
-     */
-    getAllMetrics(): Map<string, SDJWTMetrics>;
-    /**
-     * Get recent operations
-     */
-    getRecentOperations(limit?: number): OperationMetric[];
-    /**
-     * Get operation statistics
-     */
-    getOperationStats(): {
-        totalOperations: number;
-        successRate: number;
-        averageResponseTime: number;
-        operationsPerMinute: number;
-    };
-    /**
-     * Update cache hit rate
-     */
-    updateCacheHitRate(issuerDid: string, hit: boolean): void;
-    /**
-     * Reset metrics
-     */
-    resetMetrics(issuerDid?: string): void;
-    /**
-     * Export metrics as JSON
-     */
-    exportMetrics(): {
-        aggregatedMetrics: Record<string, SDJWTMetrics>;
-        recentOperations: OperationMetric[];
-        summary: ReturnType<any>;
-    };
-}
-//# sourceMappingURL=metrics-manager.d.ts.map

package/dist/monitoring/metrics-manager.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"metrics-manager.d.ts","sourceRoot":"","sources":["../../src/monitoring/metrics-manager.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,MAAM,CAAA;IACrB,iBAAiB,EAAE,MAAM,CAAA;IACzB,eAAe,EAAE,MAAM,CAAA;IACvB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,mBAAmB,EAAE,MAAM,CAAA;IAC3B,uBAAuB,EAAE,MAAM,CAAA;IAC/B,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,IAAI,CAAA;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,OAAO,GAAG,QAAQ,CAAA;IAC7B,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,qBAAa,cAAc;IACzB,OAAO,CAAC,OAAO,CAAuC;IACtD,OAAO,CAAC,UAAU,CAAwB;IAC1C,OAAO,CAAC,mBAAmB,CAAO;IAElC;;OAEG;IACH,cAAc,CAAC,SAAS,EAAE,OAAO,GAAG,QAAQ,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM;IAgBrF;;OAEG;IACH,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI;IAmB1E;;OAEG;IACH,OAAO,CAAC,aAAa;IA2CrB;;OAEG;IACH,UAAU,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI;IAKnD;;OAEG;IACH,aAAa,IAAI,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC;IAI1C;;OAEG;IACH,mBAAmB,CAAC,KAAK,SAAM,GAAG,eAAe,EAAE;IAInD;;OAEG;IACH,iBAAiB,IAAI;QACnB,eAAe,EAAE,MAAM,CAAA;QACvB,WAAW,EAAE,MAAM,CAAA;QACnB,mBAAmB,EAAE,MAAM,CAAA;QAC3B,mBAAmB,EAAE,MAAM,CAAA;KAC5B;IAiBD;;OAEG;IACH,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,IAAI;IA0BzD;;OAEG;IACH,YAAY,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI;IAStC;;OAEG;IACH,aAAa,IAAI;QACf,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;QAC/C,gBAAgB,EAAE,eAAe,EAAE,CAAA;QACnC,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,CAAA;KACzB;CAOF"}

package/dist/policy/__tests__/cedar-engine.spec.d.ts

@@ -1,17 +0,0 @@
-/**
- * CedarEngine wrapper tests (Phase 1 Step 1, Task 1.2).
- *
- * Design ref: docs/specs/2026-05-23-cedar-rar-permission-redesign.md Appendix C
- * Plan ref:   docs/specs/2026-05-23-cedar-rar-implementation-plan-phase1.md §Step 1
- *
- * Scope of this spec:
- *   - load wasm + evaluate basic permit / forbid
- *   - default-deny when no policy matches
- *   - I-Cedar-4 regression: forbid alone without paired permit → Deny
- *   - structured errors (not throws) for malformed schema / policy
- *   - conditional permit driven by request context.approval.granted
- *   - C3 TOCTOU regression: concurrent loaders share the in-flight Promise
- *   - load failure clears cached promise so retry can succeed
- */
-export {};
-//# sourceMappingURL=cedar-engine.spec.d.ts.map

package/dist/policy/__tests__/cedar-engine.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cedar-engine.spec.d.ts","sourceRoot":"","sources":["../../../src/policy/__tests__/cedar-engine.spec.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG"}

package/dist/policy/__tests__/cedar-entities.spec.d.ts

@@ -1,14 +0,0 @@
-/**
- * Tests for buildCedarEntities (Cedar unification Step 1).
- *
- * Spec refs:
- * - docs/specs/2026-05-24-cedar-unification-design.md §7.1 (Action entity attrs)
- * - §7.2 (risk_level resolution rule, Phase 1 baseline)
- *
- * Phase 1 採用方針 (spec §7.1 rev 3 C1): entity attribute と context の
- * 二重 bind を採用する。本 helper は **entity 側のみ** を組み立て、
- * `context.action.risk_level` は CedarDecisionService 側で `buildCedarEvaluateRequest`
- * が別途注入する。
- */
-export {};
-//# sourceMappingURL=cedar-entities.spec.d.ts.map

package/dist/policy/__tests__/cedar-entities.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cedar-entities.spec.d.ts","sourceRoot":"","sources":["../../../src/policy/__tests__/cedar-entities.spec.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG"}

package/dist/policy/__tests__/decision-enum.spec.d.ts

@@ -1,16 +0,0 @@
-/**
- * Tests for the Decision 7-value enum (Cedar unification Step 1).
- *
- * Spec refs:
- * - docs/specs/2026-05-24-cedar-unification-design.md §3 (Decision 7 値 enum)
- * - §3.3 evaluation algorithm (fail-closed: indeterminate when errors[] > 0)
- *
- * Phase 1 Step 1 scope:
- *   - Decision type literal accepts the 7 A2A-aligned states
- *   - isDecision() runtime guard rejects unknown strings
- *
- * Note: Step 2 will wire the API layer (`CedarDecisionService`) to emit
- *       these values. This Step 1 only introduces the SDK-side enum.
- */
-export {};
-//# sourceMappingURL=decision-enum.spec.d.ts.map

package/dist/policy/__tests__/decision-enum.spec.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"decision-enum.spec.d.ts","sourceRoot":"","sources":["../../../src/policy/__tests__/decision-enum.spec.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG"}