@zanii/vc 0.1.0 → 0.1.2

package/README.md

@@ -52,3 +52,7 @@ domain-bound issuer root-of-trust, and ledger-backed history remain Zanii-side c
 (`@zanii/credentials`, `@zanii/kya`); W3C StatusList is deliberately not implemented —
 mapping it would claim a liveness this bridge cannot provide. And `verifyVC` checks
 the proof, not the issuer's institutional identity — say what it does, never more.
+
+## Changelog
+
+- **0.1.2** — OpenID4VCI issuer metadata and credential offers, presentations bound to a verifier nonce and domain (OpenID4VP) with DCQL queries, Bitstring Status List revocation, did:web issuer verification, agent credentials, trust-registry checks, verification receipts.

package/dist/ecosystem.d.ts

@@ -0,0 +1,189 @@
+import { type DataIntegrityProof, type VerifiableCredential } from './index.js';
+type FetchLike = (input: string, init?: RequestInit) => Promise<Response>;
+/** Issuer metadata for `/.well-known/openid-credential-issuer`, offering Data Integrity VCs (`ldp_vc`). */
+export declare function issuerMetadata(input: {
+    issuerUrl: string;
+    credentialEndpoint?: string;
+    configurations: Record<string, {
+        types: string[];
+        display?: Array<{
+            name: string;
+            locale?: string;
+        }>;
+    }>;
+}): {
+    credential_issuer: string;
+    credential_endpoint: string;
+    credential_configurations_supported: {
+        [k: string]: {
+            display?: {
+                name: string;
+                locale?: string;
+            }[] | undefined;
+            format: string;
+            cryptographic_binding_methods_supported: string[];
+            credential_signing_alg_values_supported: string[];
+            credential_definition: {
+                '@context': string[];
+                type: string[];
+            };
+        };
+    };
+};
+/** A pre-authorised credential offer and the `openid-credential-offer://` link a wallet scans. */
+export declare function credentialOffer(input: {
+    issuerUrl: string;
+    configurationIds: string[];
+    preAuthorizedCode: string;
+    txCode?: {
+        length: number;
+        input_mode?: 'numeric' | 'text';
+    };
+}): {
+    offer: {
+        credential_issuer: string;
+        credential_configuration_ids: string[];
+        grants: {
+            'urn:ietf:params:oauth:grant-type:pre-authorized_code': {
+                tx_code?: {
+                    length: number;
+                    input_mode?: "numeric" | "text";
+                } | undefined;
+                'pre-authorized_code': string;
+            };
+        };
+    };
+    uri: string;
+};
+export interface VerifiablePresentation {
+    '@context': string[];
+    type: string[];
+    holder: string;
+    verifiableCredential: VerifiableCredential[];
+    proof?: DataIntegrityProof & {
+        challenge: string;
+        domain: string;
+    };
+}
+/** The holder wraps credentials in a presentation bound to the verifier's nonce (challenge) and identity (domain). */
+export declare function createPresentation(vcs: VerifiableCredential[], holder: {
+    did: string;
+    privateKey: Uint8Array;
+}, opts: {
+    challenge: string;
+    domain: string;
+    created: string;
+}): VerifiablePresentation;
+/** Verify a presentation: holder proof over this nonce and domain, then every credential; optionally require subjects to be the holder. */
+export declare function verifyPresentation(vp: VerifiablePresentation, opts: {
+    challenge: string;
+    domain: string;
+    at?: string;
+    requireHolderBinding?: boolean;
+}): {
+    ok: boolean;
+    reasons: string[];
+    holder: string;
+};
+/** A DCQL query asking for Data Integrity credentials of given types (OpenID4VP). */
+export declare function dcqlQuery(requests: Array<{
+    id: string;
+    types: string[];
+}>): {
+    credentials: {
+        id: string;
+        format: string;
+        meta: {
+            type_values: string[][];
+        };
+    }[];
+};
+/** A status list of `size` bits (default 131,072, the minimum for herd privacy); bit 0 is the first byte's highest bit. */
+export declare function createStatusList(size?: number): {
+    size: number;
+    set(index: number, value?: boolean): void;
+    encoded: () => string;
+};
+/** Read one status bit from an `encodedList`. */
+export declare function statusAt(encodedList: string, index: number): boolean;
+/** The signed status list credential to publish at `listUrl`. */
+export declare function statusListCredential(input: {
+    listUrl: string;
+    encodedList: string;
+    purpose?: 'revocation' | 'suspension';
+    validFrom: string;
+}, issuer: {
+    did: string;
+    privateKey: Uint8Array;
+}): VerifiableCredential;
+/** The `credentialStatus` entry to put on a credential before signing it. */
+export declare function statusEntry(listUrl: string, index: number, purpose?: 'revocation' | 'suspension'): {
+    id: string;
+    type: string;
+    statusPurpose: "revocation" | "suspension";
+    statusListIndex: string;
+    statusListCredential: string;
+};
+/** Check a credential's status against its (verified) list credential from the same issuer. */
+export declare function checkStatus(vc: VerifiableCredential, list: VerifiableCredential): {
+    ok: boolean;
+    status: "no-status";
+} | {
+    ok: boolean;
+    status: "list-invalid";
+} | {
+    ok: boolean;
+    status: "suspended" | "revoked" | "valid";
+};
+/** The URL of a did:web document: `did:web:example.com` -> `https://example.com/.well-known/did.json`; path segments become directories. */
+export declare function didWebUrl(did: string): string;
+/**
+ * Verify a VC from a did:web issuer: fetch the DID document, take the Multikey
+ * (Ed25519) verification method the proof names, check the issuer lists it for assertion.
+ */
+export declare function verifyDidWebVC(vc: VerifiableCredential, fetchImpl?: FetchLike): Promise<{
+    ok: boolean;
+    reasons: string[];
+}>;
+/** A credential describing an agent: who owns it, what it may do, its licences and model. */
+export declare function agentCredential(input: {
+    agent: string;
+    owner: string;
+    capabilities: string[];
+    licences?: string[];
+    model?: string;
+    validFrom: string;
+    validUntil?: string;
+}, issuer: {
+    did: string;
+    privateKey: Uint8Array;
+}): VerifiableCredential;
+/** Is the issuer accredited, in a registry you trust, for this credential type at this time? */
+export declare function trustRegistryCheck(issuer: string, credentialType: string, registry: Array<{
+    did: string;
+    accreditedFor: string[];
+    validUntil?: string;
+}>, at?: string): {
+    accredited: boolean;
+    reason: string;
+} | {
+    accredited: boolean;
+    reason: null;
+};
+/** Record a verification as a receipt: what was checked, the result, never the credential's claims. */
+export declare function verificationReceipt(vc: VerifiableCredential, check: {
+    ok: boolean;
+    reasons: string[];
+}, at: string): {
+    target: string;
+    payload: {
+        vc: string;
+        issuer: string;
+        types: string[];
+        ok: boolean;
+        reasons: string[];
+        at: string;
+    };
+};
+export {};
+//# sourceMappingURL=ecosystem.d.ts.map

package/dist/ecosystem.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ecosystem.d.ts","sourceRoot":"","sources":["../src/ecosystem.ts"],"names":[],"mappings":"AAWA,OAAO,EAAmE,KAAK,kBAAkB,EAAE,KAAK,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEjJ,KAAK,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AA0B1E,2GAA2G;AAC3G,wBAAgB,cAAc,CAAC,KAAK,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC,CAAA;CAAE;;;;;;sBAA/B,MAAM;yBAAW,MAAM;;;;;;;;;;;EASxL;AAED,kGAAkG;AAClG,wBAAgB,eAAe,CAAC,KAAK,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,SAAS,GAAG,MAAM,CAAA;KAAE,CAAA;CAAE;;;;;;;4BAA3C,MAAM;iCAAe,SAAS,GAAG,MAAM;;;;;;;EAO5K;AAMD,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,oBAAoB,EAAE,oBAAoB,EAAE,CAAC;IAC7C,KAAK,CAAC,EAAE,kBAAkB,GAAG;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CACpE;AAED,sHAAsH;AACtH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,oBAAoB,EAAE,EAAE,MAAM,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,EAAE,IAAI,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,sBAAsB,CAMrM;AAED,2IAA2I;AAC3I,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,sBAAsB,EAAE,IAAI,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAAE;;;;EAetJ;AAED,qFAAqF;AACrF,wBAAgB,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;;;;;;;;EAEzE;AAMD,2HAA2H;AAC3H,wBAAgB,gBAAgB,CAAC,IAAI,SAAU;;eAKhC,MAAM;;EAOpB;AAED,iDAAiD;AACjD,wBAAgB,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAKpE;AAED,iEAAiE;AACjE,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,YAAY,GAAG,YAAY,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,EAAE,MAAM,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,wBAE9L;AAED,6EAA6E;AAC7E,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,YAAY,GAAG,YAA2B;;;;;;EAE9G;AAED,+FAA+F;AAC/F,wBAAgB,WAAW,CAAC,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAE,oBAAoB;;;;;;;;;EAO/E;AAMD,4IAA4I;AAC5I,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAI7C;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAAC,EAAE,EAAE,oBAAoB,EAAE,SAAS,GAAE,SAAiC;;;GAc1G;AAED,6FAA6F;AAC7F,wBAAgB,eAAe,CAAC,KAAK,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,MAAM,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,wBAE5N;AAED,gGAAgG;AAChG,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,EAAE,EAAE,SAA2B;;;;;;EAMvL;AAED,uGAAuG;AACvG,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,EAAE,EAAE,EAAE,MAAM;;;;;;;;;;EAElH"}

package/dist/ecosystem.js

@@ -0,0 +1,194 @@
+/**
+ * VCs in the wider ecosystem: OpenID4VCI offers and issuer metadata, presentations bound to
+ * a verifier's nonce (for OpenID4VP), Bitstring Status List revocation, did:web issuers,
+ * agent credentials, trust-registry checks and verification receipts. Same
+ * `eddsa-jcs-2022` proofs as `signVC` / `verifyVC`.
+ */
+import { gunzipSync, gzipSync } from 'node:zlib';
+import { ed25519 } from '@noble/curves/ed25519';
+import { sha256 } from '@noble/hashes/sha256';
+import { base58 } from '@scure/base';
+import { canonicalBytes, jcsHash, publicKeyFromDid } from '@zanii/core';
+import { CRYPTOSUITE, signVC, verificationMethodOf, verifyVC, VC_CONTEXT } from './index.js';
+// The eddsa-jcs-2022 signing input, as in index.ts: sha256(JCS(options)) || sha256(JCS(document without proof)).
+function hashData(doc, options) {
+    const { proof: _omit, ...unsecured } = doc;
+    const out = new Uint8Array(64);
+    out.set(sha256(canonicalBytes(options)), 0);
+    out.set(sha256(canonicalBytes(unsecured)), 32);
+    return out;
+}
+function verifyProofWithKey(doc, publicKey) {
+    const p = doc.proof;
+    if (!p || p.type !== 'DataIntegrityProof' || p.cryptosuite !== CRYPTOSUITE || typeof p.proofValue !== 'string' || !p.proofValue.startsWith('z'))
+        return false;
+    try {
+        const { proofValue, ...options } = p;
+        return ed25519.verify(base58.decode(proofValue.slice(1)), hashData(doc, { '@context': doc['@context'], ...options }), publicKey);
+    }
+    catch {
+        return false;
+    }
+}
+// ------------------------------------------------------------------------------ //
+// OpenID4VCI
+// ------------------------------------------------------------------------------ //
+/** Issuer metadata for `/.well-known/openid-credential-issuer`, offering Data Integrity VCs (`ldp_vc`). */
+export function issuerMetadata(input) {
+    return {
+        credential_issuer: input.issuerUrl,
+        credential_endpoint: input.credentialEndpoint ?? `${input.issuerUrl.replace(/\/$/, '')}/credential`,
+        credential_configurations_supported: Object.fromEntries(Object.entries(input.configurations).map(([id, c]) => [id, {
+                format: 'ldp_vc', cryptographic_binding_methods_supported: ['did:key'], credential_signing_alg_values_supported: [CRYPTOSUITE],
+                credential_definition: { '@context': [VC_CONTEXT], type: c.types }, ...(c.display ? { display: c.display } : {}),
+            }])),
+    };
+}
+/** A pre-authorised credential offer and the `openid-credential-offer://` link a wallet scans. */
+export function credentialOffer(input) {
+    const offer = {
+        credential_issuer: input.issuerUrl,
+        credential_configuration_ids: input.configurationIds,
+        grants: { 'urn:ietf:params:oauth:grant-type:pre-authorized_code': { 'pre-authorized_code': input.preAuthorizedCode, ...(input.txCode ? { tx_code: input.txCode } : {}) } },
+    };
+    return { offer, uri: `openid-credential-offer://?credential_offer=${encodeURIComponent(JSON.stringify(offer))}` };
+}
+/** The holder wraps credentials in a presentation bound to the verifier's nonce (challenge) and identity (domain). */
+export function createPresentation(vcs, holder, opts) {
+    const unsecured = { '@context': [VC_CONTEXT], type: ['VerifiablePresentation'], holder: holder.did, verifiableCredential: vcs };
+    const options = { '@context': unsecured['@context'], type: 'DataIntegrityProof', cryptosuite: CRYPTOSUITE, created: opts.created, verificationMethod: verificationMethodOf(holder.did), proofPurpose: 'authentication', challenge: opts.challenge, domain: opts.domain };
+    const sig = ed25519.sign(hashData(unsecured, options), holder.privateKey);
+    const { '@context': _c, ...proofFields } = options;
+    return { ...unsecured, proof: { ...proofFields, challenge: opts.challenge, domain: opts.domain, proofValue: `z${base58.encode(sig)}` } };
+}
+/** Verify a presentation: holder proof over this nonce and domain, then every credential; optionally require subjects to be the holder. */
+export function verifyPresentation(vp, opts) {
+    const reasons = [];
+    const p = vp.proof;
+    if (!p || p.proofPurpose !== 'authentication')
+        reasons.push('presentation proof missing or not for authentication');
+    else {
+        if (p.challenge !== opts.challenge)
+            reasons.push('challenge does not match (replayed presentation?)');
+        if (p.domain !== opts.domain)
+            reasons.push('domain does not match this verifier');
+        if (p.verificationMethod !== verificationMethodOf(vp.holder))
+            reasons.push('proof key is not the holder');
+        const holderKey = publicKeyFromDid(vp.holder);
+        if (!holderKey || !verifyProofWithKey(vp, holderKey))
+            reasons.push('holder proof does not verify');
+    }
+    const credentials = vp.verifiableCredential.map((vc) => verifyVC(vc, opts.at ? { at: opts.at } : {}));
+    credentials.forEach((c, i) => { if (!c.ok)
+        reasons.push(`credential ${i}: ${c.reasons.join('; ')}`); });
+    if (opts.requireHolderBinding)
+        vp.verifiableCredential.forEach((vc, i) => { if (vc.credentialSubject.id !== vp.holder)
+            reasons.push(`credential ${i} is about someone else`); });
+    return { ok: reasons.length === 0, reasons, holder: vp.holder };
+}
+/** A DCQL query asking for Data Integrity credentials of given types (OpenID4VP). */
+export function dcqlQuery(requests) {
+    return { credentials: requests.map((r) => ({ id: r.id, format: 'ldp_vc', meta: { type_values: [r.types] } })) };
+}
+// ------------------------------------------------------------------------------ //
+// Bitstring Status List
+// ------------------------------------------------------------------------------ //
+/** A status list of `size` bits (default 131,072, the minimum for herd privacy); bit 0 is the first byte's highest bit. */
+export function createStatusList(size = 131_072) {
+    if (size % 8 !== 0 || size <= 0)
+        throw new Error('vc: status list size must be a positive multiple of 8');
+    const bits = new Uint8Array(size / 8);
+    return {
+        size,
+        set(index, value = true) {
+            if (!Number.isInteger(index) || index < 0 || index >= size)
+                throw new Error('vc: status index out of range');
+            const mask = 0x80 >> (index % 8);
+            bits[index >> 3] = value ? bits[index >> 3] | mask : bits[index >> 3] & ~mask;
+        },
+        encoded: () => `u${gzipSync(bits).toString('base64url')}`,
+    };
+}
+/** Read one status bit from an `encodedList`. */
+export function statusAt(encodedList, index) {
+    if (!encodedList.startsWith('u'))
+        throw new Error('vc: encodedList must be multibase base64url');
+    const bits = gunzipSync(Buffer.from(encodedList.slice(1), 'base64url'));
+    if (index < 0 || index >= bits.length * 8)
+        throw new Error('vc: status index out of range');
+    return (bits[index >> 3] & (0x80 >> (index % 8))) !== 0;
+}
+/** The signed status list credential to publish at `listUrl`. */
+export function statusListCredential(input, issuer) {
+    return signVC({ '@context': [VC_CONTEXT], id: input.listUrl, type: ['VerifiableCredential', 'BitstringStatusListCredential'], issuer: issuer.did, validFrom: input.validFrom, credentialSubject: { id: `${input.listUrl}#list`, type: 'BitstringStatusList', statusPurpose: input.purpose ?? 'revocation', encodedList: input.encodedList } }, issuer, { created: input.validFrom });
+}
+/** The `credentialStatus` entry to put on a credential before signing it. */
+export function statusEntry(listUrl, index, purpose = 'revocation') {
+    return { id: `${listUrl}#${index}`, type: 'BitstringStatusListEntry', statusPurpose: purpose, statusListIndex: String(index), statusListCredential: listUrl };
+}
+/** Check a credential's status against its (verified) list credential from the same issuer. */
+export function checkStatus(vc, list) {
+    const s = vc.credentialStatus;
+    if (!s)
+        return { ok: true, status: 'no-status' };
+    const lv = verifyVC(list);
+    if (!lv.ok || list.issuer !== vc.issuer || list.id !== s.statusListCredential)
+        return { ok: false, status: 'list-invalid' };
+    const set = statusAt(String(list.credentialSubject.encodedList), Number(s.statusListIndex));
+    return { ok: !set, status: set ? (s.statusPurpose === 'suspension' ? 'suspended' : 'revoked') : 'valid' };
+}
+// ------------------------------------------------------------------------------ //
+// did:web, agents, registries, receipts
+// ------------------------------------------------------------------------------ //
+/** The URL of a did:web document: `did:web:example.com` -> `https://example.com/.well-known/did.json`; path segments become directories. */
+export function didWebUrl(did) {
+    if (!did.startsWith('did:web:'))
+        throw new Error('vc: not a did:web');
+    const [host, ...path] = did.slice('did:web:'.length).split(':');
+    return `https://${decodeURIComponent(host)}/${path.length ? `${path.map(decodeURIComponent).join('/')}/did.json` : '.well-known/did.json'}`;
+}
+/**
+ * Verify a VC from a did:web issuer: fetch the DID document, take the Multikey
+ * (Ed25519) verification method the proof names, check the issuer lists it for assertion.
+ */
+export async function verifyDidWebVC(vc, fetchImpl = (u, i) => fetch(u, i)) {
+    const reasons = [];
+    if (!vc.issuer?.startsWith('did:web:'))
+        return { ok: false, reasons: ['issuer is not did:web'] };
+    const res = await fetchImpl(didWebUrl(vc.issuer)).catch(() => null);
+    if (!res?.ok)
+        return { ok: false, reasons: ['DID document not reachable'] };
+    const doc = (await res.json());
+    if (doc.id !== vc.issuer)
+        reasons.push('DID document id does not match the issuer');
+    const vmId = vc.proof?.verificationMethod ?? '';
+    const vm = doc.verificationMethod?.find((m) => m.id === vmId || `${doc.id}${m.id}` === vmId);
+    const listed = (doc.assertionMethod ?? []).some((a) => (typeof a === 'string' ? a : a.id) === vmId || `${doc.id}${typeof a === 'string' ? a : a.id}` === vmId);
+    if (!vm || vm.type !== 'Multikey' || !vm.publicKeyMultibase?.startsWith('z6Mk'))
+        reasons.push('verification method missing or not an Ed25519 Multikey');
+    if (!listed)
+        reasons.push('verification method is not an assertion method of the issuer');
+    if (reasons.length === 0 && !verifyProofWithKey(vc, base58.decode(vm.publicKeyMultibase.slice(1)).slice(2)))
+        reasons.push('proof does not verify');
+    return { ok: reasons.length === 0, reasons };
+}
+/** A credential describing an agent: who owns it, what it may do, its licences and model. */
+export function agentCredential(input, issuer) {
+    return signVC({ '@context': [VC_CONTEXT], type: ['VerifiableCredential', 'AgentCredential'], issuer: issuer.did, validFrom: input.validFrom, ...(input.validUntil ? { validUntil: input.validUntil } : {}), credentialSubject: { id: input.agent, owner: input.owner, capabilities: input.capabilities, ...(input.licences ? { licences: input.licences } : {}), ...(input.model ? { model: input.model } : {}) } }, issuer, { created: input.validFrom });
+}
+/** Is the issuer accredited, in a registry you trust, for this credential type at this time? */
+export function trustRegistryCheck(issuer, credentialType, registry, at = new Date().toISOString()) {
+    const e = registry.find((x) => x.did === issuer);
+    if (!e)
+        return { accredited: false, reason: 'issuer not in the registry' };
+    if (e.validUntil && at > e.validUntil)
+        return { accredited: false, reason: 'accreditation expired' };
+    if (!e.accreditedFor.includes(credentialType))
+        return { accredited: false, reason: `not accredited for ${credentialType}` };
+    return { accredited: true, reason: null };
+}
+/** Record a verification as a receipt: what was checked, the result, never the credential's claims. */
+export function verificationReceipt(vc, check, at) {
+    return { target: 'vc.verified', payload: { vc: jcsHash(vc), issuer: vc.issuer, types: vc.type, ok: check.ok, reasons: check.reasons, at } };
+}
+//# sourceMappingURL=ecosystem.js.map

package/dist/ecosystem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ecosystem.js","sourceRoot":"","sources":["../src/ecosystem.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,oBAAoB,EAAE,QAAQ,EAAE,UAAU,EAAsD,MAAM,YAAY,CAAC;AAIjJ,iHAAiH;AACjH,SAAS,QAAQ,CAAC,GAA4B,EAAE,OAAgC;IAC9E,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,SAAS,EAAE,GAAG,GAAG,CAAC;IAC3C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC/B,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5C,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAuF,EAAE,SAAqB;IACxI,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC;IACpB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,oBAAoB,IAAI,CAAC,CAAC,WAAW,KAAK,WAAW,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9J,IAAI,CAAC;QACH,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,GAAG,CAAC,CAAC;QACrC,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;IACnI,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,aAAa;AACb,oFAAoF;AAEpF,2GAA2G;AAC3G,MAAM,UAAU,cAAc,CAAC,KAAkK;IAC/L,OAAO;QACL,iBAAiB,EAAE,KAAK,CAAC,SAAS;QAClC,mBAAmB,EAAE,KAAK,CAAC,kBAAkB,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa;QACnG,mCAAmC,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE;gBACjH,MAAM,EAAE,QAAQ,EAAE,uCAAuC,EAAE,CAAC,SAAS,CAAC,EAAE,uCAAuC,EAAE,CAAC,WAAW,CAAC;gBAC9H,qBAAqB,EAAE,EAAE,UAAU,EAAE,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACjH,CAAC,CAAC,CAAC;KACL,CAAC;AACJ,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,eAAe,CAAC,KAAiJ;IAC/K,MAAM,KAAK,GAAG;QACZ,iBAAiB,EAAE,KAAK,CAAC,SAAS;QAClC,4BAA4B,EAAE,KAAK,CAAC,gBAAgB;QACpD,MAAM,EAAE,EAAE,sDAAsD,EAAE,EAAE,qBAAqB,EAAE,KAAK,CAAC,iBAAiB,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;KAC3K,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,+CAA+C,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;AACpH,CAAC;AAcD,sHAAsH;AACtH,MAAM,UAAU,kBAAkB,CAAC,GAA2B,EAAE,MAA+C,EAAE,IAA4D;IAC3K,MAAM,SAAS,GAAG,EAAE,UAAU,EAAE,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,wBAAwB,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,oBAAoB,EAAE,GAAG,EAAE,CAAC;IAChI,MAAM,OAAO,GAAG,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,YAAY,EAAE,gBAAgB,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IACzQ,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAC1E,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,WAAW,EAAE,GAAG,OAAO,CAAC;IACnD,OAAO,EAAE,GAAG,SAAS,EAAE,KAAK,EAAE,EAAE,GAAI,WAA6C,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC;AAC9K,CAAC;AAED,2IAA2I;AAC3I,MAAM,UAAU,kBAAkB,CAAC,EAA0B,EAAE,IAAwF;IACrJ,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;IACnB,IAAI,CAAC,CAAC,IAAK,CAA+B,CAAC,YAAY,KAAK,gBAAgB;QAAE,OAAO,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;SAC9I,CAAC;QACJ,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;YAAE,OAAO,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QACtG,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;QAClF,IAAI,CAAC,CAAC,kBAAkB,KAAK,oBAAoB,CAAC,EAAE,CAAC,MAAM,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAC1G,MAAM,SAAS,GAAG,gBAAgB,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,SAAS,IAAI,CAAC,kBAAkB,CAAC,EAAW,EAAE,SAAS,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC9G,CAAC;IACD,MAAM,WAAW,GAAG,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtG,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxG,IAAI,IAAI,CAAC,oBAAoB;QAAE,EAAE,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,CAAC,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjL,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC;AAClE,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,SAAS,CAAC,QAAgD;IACxE,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;AAClH,CAAC;AAED,oFAAoF;AACpF,wBAAwB;AACxB,oFAAoF;AAEpF,2HAA2H;AAC3H,MAAM,UAAU,gBAAgB,CAAC,IAAI,GAAG,OAAO;IAC7C,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC1G,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;IACtC,OAAO;QACL,IAAI;QACJ,GAAG,CAAC,KAAa,EAAE,KAAK,GAAG,IAAI;YAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YAC7G,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAE,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAE,GAAG,CAAC,IAAI,CAAC;QAClF,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE;KAC1D,CAAC;AACJ,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,QAAQ,CAAC,WAAmB,EAAE,KAAa;IACzD,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjG,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;IACxE,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC5F,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAE,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAC3D,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,oBAAoB,CAAC,KAAyG,EAAE,MAA+C;IAC7L,OAAO,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,sBAAsB,EAAE,+BAA+B,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,iBAAiB,EAAE,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAE,aAAa,EAAE,KAAK,CAAC,OAAO,IAAI,YAAY,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;AACvX,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,KAAa,EAAE,UAAuC,YAAY;IAC7G,OAAO,EAAE,EAAE,EAAE,GAAG,OAAO,IAAI,KAAK,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE,aAAa,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,oBAAoB,EAAE,OAAO,EAAE,CAAC;AAChK,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,WAAW,CAAC,EAAwB,EAAE,IAA0B;IAC9E,MAAM,CAAC,GAAG,EAAE,CAAC,gBAA8D,CAAC;IAC5E,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,WAAoB,EAAE,CAAC;IAC1D,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM,IAAI,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC,oBAAoB;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAuB,EAAE,CAAC;IACrI,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;IAC5F,OAAO,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,KAAK,YAAY,CAAC,CAAC,CAAE,WAAqB,CAAC,CAAC,CAAE,SAAmB,CAAC,CAAC,CAAC,CAAE,OAAiB,EAAE,CAAC;AAC7I,CAAC;AAED,oFAAoF;AACpF,wCAAwC;AACxC,oFAAoF;AAEpF,4IAA4I;AAC5I,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACtE,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChE,OAAO,WAAW,kBAAkB,CAAC,IAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,sBAAsB,EAAE,CAAC;AAC/I,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EAAwB,EAAE,YAAuB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;IACzG,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,uBAAuB,CAAC,EAAE,CAAC;IACjG,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACpE,IAAI,CAAC,GAAG,EAAE,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,4BAA4B,CAAC,EAAE,CAAC;IAC5E,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4J,CAAC;IAC1L,IAAI,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;IACpF,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,EAAE,kBAAkB,IAAI,EAAE,CAAC;IAChD,MAAM,EAAE,GAAG,GAAG,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK,IAAI,CAAC,CAAC;IAC7F,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,IAAI,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,IAAI,CAAC,CAAC;IAC/J,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IACxJ,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;IAC1F,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAW,EAAE,MAAM,CAAC,MAAM,CAAC,EAAG,CAAC,kBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC9J,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;AAC/C,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,eAAe,CAAC,KAA4I,EAAE,MAA+C;IAC3N,OAAO,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,sBAAsB,EAAE,iBAAiB,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,iBAAiB,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;AAC7b,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,cAAsB,EAAE,QAA8E,EAAE,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IACtL,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC;IACjD,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;IAC3E,IAAI,CAAC,CAAC,UAAU,IAAI,EAAE,GAAG,CAAC,CAAC,UAAU;QAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IACrG,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,cAAc,EAAE,EAAE,CAAC;IAC5H,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC5C,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,mBAAmB,CAAC,EAAwB,EAAE,KAAyC,EAAE,EAAU;IACjH,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAW,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC;AACvJ,CAAC"}

package/dist/index.d.ts

@@ -65,4 +65,5 @@ export declare function cvToVC(cv: AgentCV, agentPrivateKey: Uint8Array, opts: {
 }): VerifiableCredential;
 /** Decode helper for tests/interop: raw signature bytes from a multibase proofValue. */
 export declare function proofSignatureBytes(proofValue: string): Uint8Array;
+export * from './ecosystem.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAiCA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAY,KAAK,OAAO,EAAE,MAAM,WAAW,CAAC;AAEnD,eAAO,MAAM,UAAU,yCAAyC,CAAC;AACjE,eAAO,MAAM,WAAW,mBAAmB,CAAC;AAE5C,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,WAAW,EAAE,OAAO,WAAW,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,iBAAiB,CAAC;IAChC,2DAA2D;IAC3D,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,0FAA0F;AAC1F,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAExD;AAgBD;;;GAGG;AACH,wBAAgB,MAAM,CACpB,SAAS,EAAE,IAAI,CAAC,oBAAoB,EAAE,OAAO,CAAC,EAC9C,MAAM,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,EAC/C,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GACxB,oBAAoB,CAuBtB;AAED,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,sEAAsE;IACtE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,EAAE,EAAE,oBAAoB,GAAG,SAAS,EAAE,IAAI,GAAE;IAAE,EAAE,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CA+ClG;AAeD;;;;;;GAMG;AACH,wBAAgB,IAAI,CAClB,UAAU,EAAE,UAAU,EACtB,gBAAgB,EAAE,UAAU,EAC5B,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GACxB,oBAAoB,CAwBtB;AAED,wFAAwF;AACxF,wBAAgB,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,oBAAoB,CAuBhH;AAED,wFAAwF;AACxF,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,UAAU,CAGlE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAiCA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAY,KAAK,OAAO,EAAE,MAAM,WAAW,CAAC;AAEnD,eAAO,MAAM,UAAU,yCAAyC,CAAC;AACjE,eAAO,MAAM,WAAW,mBAAmB,CAAC;AAE5C,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,WAAW,EAAE,OAAO,WAAW,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,iBAAiB,CAAC;IAChC,2DAA2D;IAC3D,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,0FAA0F;AAC1F,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAExD;AAgBD;;;GAGG;AACH,wBAAgB,MAAM,CACpB,SAAS,EAAE,IAAI,CAAC,oBAAoB,EAAE,OAAO,CAAC,EAC9C,MAAM,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,EAC/C,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GACxB,oBAAoB,CAuBtB;AAED,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,sEAAsE;IACtE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,EAAE,EAAE,oBAAoB,GAAG,SAAS,EAAE,IAAI,GAAE;IAAE,EAAE,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CA+ClG;AAeD;;;;;;GAMG;AACH,wBAAgB,IAAI,CAClB,UAAU,EAAE,UAAU,EACtB,gBAAgB,EAAE,UAAU,EAC5B,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GACxB,oBAAoB,CAwBtB;AAED,wFAAwF;AACxF,wBAAgB,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,oBAAoB,CAuBhH;AAED,wFAAwF;AACxF,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,UAAU,CAGlE;AACD,cAAc,gBAAgB,CAAC"}

package/dist/index.js

@@ -214,4 +214,5 @@ export function proofSignatureBytes(proofValue) {
         throw new Error('not multibase base58btc');
     return base58.decode(proofValue.slice(1));
 }
+export * from './ecosystem.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/D,OAAO,EAAE,QAAQ,EAAgB,MAAM,WAAW,CAAC;AAEnD,MAAM,CAAC,MAAM,UAAU,GAAG,sCAAsC,CAAC;AACjE,MAAM,CAAC,MAAM,WAAW,GAAG,gBAAgB,CAAC;AAwB5C,0FAA0F;AAC1F,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,OAAO,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;AAClD,CAAC;AAED;;;GAGG;AACH,SAAS,QAAQ,CAAC,GAA4B,EAAE,YAAqC;IACnF,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,SAAS,EAAE,GAAG,GAAG,CAAC;IAC3C,MAAM,UAAU,GAAG,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC/B,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACvB,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACrB,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,MAAM,CACpB,SAA8C,EAC9C,MAA+C,EAC/C,IAAyB;IAEzB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,4BAA4B,UAAU,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAChG,MAAM,YAAY,GAA4B;QAC5C,UAAU,EAAE,SAAS,CAAC,UAAU,CAAC;QACjC,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,WAAW;QACxB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,kBAAkB,EAAE,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC;QACpD,YAAY,EAAE,iBAAiB;KAChC,CAAC;IACF,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAoC,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAC1G,MAAM,KAAK,GAAuB;QAChC,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,WAAW;QACxB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,kBAAkB,EAAE,YAAY,CAAC,oBAAoB,CAAW;QAChE,YAAY,EAAE,iBAAiB;QAC/B,UAAU,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;KACrC,CAAC;IACF,OAAO,EAAE,GAAG,SAAS,EAAE,KAAK,EAA0B,CAAC;AACzD,CAAC;AASD;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,EAAoC,EAAE,OAAwB,EAAE;IACvF,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,CAAC,GAAG,EAAE,IAAK,EAA2B,CAAC;IAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,UAAU;QAAE,OAAO,CAAC,IAAI,CAAC,4BAA4B,UAAU,EAAE,CAAC,CAAC;IAC7H,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IAC/H,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;IACvJ,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;IAClB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,oBAAoB,IAAI,CAAC,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;QAC3E,OAAO,CAAC,IAAI,CAAC,uDAAuD,WAAW,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAEpE,MAAM,KAAK,GAAG,CAAuB,CAAC;IACtC,IAAI,KAAK,CAAC,kBAAkB,KAAK,oBAAoB,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,GAAG,GAAG,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;IAC3E,IAAI,GAAG,GAAsB,IAAI,CAAC;IAClC,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7E,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,GAAG,IAAI,CAAC;QACb,CAAC;IACH,CAAC;IACD,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IAChE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,IAAI,GAAG,EAAE,CAAC;QACvC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,YAAY,EAAE,GAAG,KAAK,CAAC;QACrD,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAuC,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC;QAC/G,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,GAAG,KAAK,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,IAAI,CAAC,EAAE,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;aAC7D,CAAC;YACJ,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YACjH,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/G,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/F,CAAC;AAED,iGAAiG;AACjG,SAAS,aAAa,CAAC,GAA+C,EAAE,SAAiB;IACvF,MAAM,GAAG,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClG,IAAI,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACvD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,QAAQ,EAAE,GAAG,GAAG,CAAC;IACxC,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,IAAI,CAClB,UAAsB,EACtB,gBAA4B,EAC5B,IAAyB;IAEzB,IAAI,UAAU,EAAE,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;QACxG,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,UAAmE,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3G,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,MAAM,CACX;QACE,UAAU,EAAE,CAAC,UAAU,CAAC;QACxB,IAAI,EAAE,CAAC,sBAAsB,EAAE,iBAAiB,CAAC;QACjD,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,UAAU,EAAE,UAAU,CAAC,GAAG;QAC1B,iBAAiB,EAAE;YACjB,EAAE,EAAE,UAAU,CAAC,MAAM;YACrB,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,YAAY,EAAE,UAAU,CAAC,aAAa;SACvC;KACF,EACD,EAAE,GAAG,EAAE,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,EACxD,IAAI,CACL,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,MAAM,CAAC,EAAW,EAAE,eAA2B,EAAE,IAAyB;IACxF,MAAM,KAAK,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC3B,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,eAAe,EAAE,CAAC,CAAC;IAC3G,CAAC;IACD,OAAO,MAAM,CACX;QACE,UAAU,EAAE,CAAC,UAAU,CAAC;QACxB,IAAI,EAAE,CAAC,sBAAsB,EAAE,cAAc,CAAC;QAC9C,MAAM,EAAE,EAAE,CAAC,GAAG;QACd,SAAS,EAAE,EAAE,CAAC,YAAY;QAC1B,iBAAiB,EAAE;YACjB,EAAE,EAAE,EAAE,CAAC,GAAG;YACV,OAAO,EAAE,EAAE,CAAC,OAA6C;YACzD,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,SAAS,EAAE,EAAE,CAAC,SAAS;YACvB,UAAU,EAAE,EAAE,CAAC,UAAU;YACzB,MAAM,EAAE,EAAE,CAAC,MAAM;SAClB;KACF,EACD,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,UAAU,EAAE,eAAe,EAAE,EAC5C,IAAI,CACL,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,mBAAmB,CAAC,UAAkB;IACpD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC5E,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5C,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/D,OAAO,EAAE,QAAQ,EAAgB,MAAM,WAAW,CAAC;AAEnD,MAAM,CAAC,MAAM,UAAU,GAAG,sCAAsC,CAAC;AACjE,MAAM,CAAC,MAAM,WAAW,GAAG,gBAAgB,CAAC;AAwB5C,0FAA0F;AAC1F,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,OAAO,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;AAClD,CAAC;AAED;;;GAGG;AACH,SAAS,QAAQ,CAAC,GAA4B,EAAE,YAAqC;IACnF,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,SAAS,EAAE,GAAG,GAAG,CAAC;IAC3C,MAAM,UAAU,GAAG,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC/B,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACvB,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACrB,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,MAAM,CACpB,SAA8C,EAC9C,MAA+C,EAC/C,IAAyB;IAEzB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,4BAA4B,UAAU,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAChG,MAAM,YAAY,GAA4B;QAC5C,UAAU,EAAE,SAAS,CAAC,UAAU,CAAC;QACjC,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,WAAW;QACxB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,kBAAkB,EAAE,oBAAoB,CAAC,MAAM,CAAC,GAAG,CAAC;QACpD,YAAY,EAAE,iBAAiB;KAChC,CAAC;IACF,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAoC,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAC1G,MAAM,KAAK,GAAuB;QAChC,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,WAAW;QACxB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,kBAAkB,EAAE,YAAY,CAAC,oBAAoB,CAAW;QAChE,YAAY,EAAE,iBAAiB;QAC/B,UAAU,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;KACrC,CAAC;IACF,OAAO,EAAE,GAAG,SAAS,EAAE,KAAK,EAA0B,CAAC;AACzD,CAAC;AASD;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,EAAoC,EAAE,OAAwB,EAAE;IACvF,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,CAAC,GAAG,EAAE,IAAK,EAA2B,CAAC;IAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,UAAU;QAAE,OAAO,CAAC,IAAI,CAAC,4BAA4B,UAAU,EAAE,CAAC,CAAC;IAC7H,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IAC/H,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;IACvJ,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;IAClB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,oBAAoB,IAAI,CAAC,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;QAC3E,OAAO,CAAC,IAAI,CAAC,uDAAuD,WAAW,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAEpE,MAAM,KAAK,GAAG,CAAuB,CAAC;IACtC,IAAI,KAAK,CAAC,kBAAkB,KAAK,oBAAoB,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,GAAG,GAAG,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;IAC3E,IAAI,GAAG,GAAsB,IAAI,CAAC;IAClC,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7E,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,GAAG,IAAI,CAAC;QACb,CAAC;IACH,CAAC;IACD,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IAChE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,IAAI,GAAG,EAAE,CAAC;QACvC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,YAAY,EAAE,GAAG,KAAK,CAAC;QACrD,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAuC,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC;QAC/G,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,GAAG,KAAK,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,IAAI,CAAC,EAAE,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;aAC7D,CAAC;YACJ,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YACjH,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/G,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/F,CAAC;AAED,iGAAiG;AACjG,SAAS,aAAa,CAAC,GAA+C,EAAE,SAAiB;IACvF,MAAM,GAAG,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClG,IAAI,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACvD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,QAAQ,EAAE,GAAG,GAAG,CAAC;IACxC,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,IAAI,CAClB,UAAsB,EACtB,gBAA4B,EAC5B,IAAyB;IAEzB,IAAI,UAAU,EAAE,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;QACxG,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,UAAmE,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3G,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,MAAM,CACX;QACE,UAAU,EAAE,CAAC,UAAU,CAAC;QACxB,IAAI,EAAE,CAAC,sBAAsB,EAAE,iBAAiB,CAAC;QACjD,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,UAAU,EAAE,UAAU,CAAC,GAAG;QAC1B,iBAAiB,EAAE;YACjB,EAAE,EAAE,UAAU,CAAC,MAAM;YACrB,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,YAAY,EAAE,UAAU,CAAC,aAAa;SACvC;KACF,EACD,EAAE,GAAG,EAAE,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,EACxD,IAAI,CACL,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,MAAM,CAAC,EAAW,EAAE,eAA2B,EAAE,IAAyB;IACxF,MAAM,KAAK,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC3B,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,eAAe,EAAE,CAAC,CAAC;IAC3G,CAAC;IACD,OAAO,MAAM,CACX;QACE,UAAU,EAAE,CAAC,UAAU,CAAC;QACxB,IAAI,EAAE,CAAC,sBAAsB,EAAE,cAAc,CAAC;QAC9C,MAAM,EAAE,EAAE,CAAC,GAAG;QACd,SAAS,EAAE,EAAE,CAAC,YAAY;QAC1B,iBAAiB,EAAE;YACjB,EAAE,EAAE,EAAE,CAAC,GAAG;YACV,OAAO,EAAE,EAAE,CAAC,OAA6C;YACzD,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,SAAS,EAAE,EAAE,CAAC,SAAS;YACvB,UAAU,EAAE,EAAE,CAAC,UAAU;YACzB,MAAM,EAAE,EAAE,CAAC,MAAM;SAClB;KACF,EACD,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,UAAU,EAAE,eAAe,EAAE,EAC5C,IAAI,CACL,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,mBAAmB,CAAC,UAAkB;IACpD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC5E,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5C,CAAC;AACD,cAAc,gBAAgB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zanii/vc",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "W3C Verifiable Credentials 2.0 bridge - export Zanii credentials and AgentCVs as spec-conformant VCs with genuine eddsa-jcs-2022 DataIntegrityProofs (Zanii already speaks did:key + Ed25519 + JCS, which IS that cryptosuite), and verify any did:key eddsa-jcs-2022 VC from anyone. Bridges the format, not the trust model: revocation freshness and domain binding remain Zanii-side checks.",
   "license": "Apache-2.0",
   "homepage": "https://ledger.zanii.agency",
@@ -34,9 +34,9 @@
     "@noble/curves": "^1.8.1",
     "@noble/hashes": "^1.7.1",
     "@scure/base": "^1.2.1",
-    "@zanii/core": "0.4.0",
-    "@zanii/cv": "0.1.0",
-    "@zanii/credentials": "0.1.0"
+    "@zanii/core": "^0.5.4",
+    "@zanii/cv": "^0.1.2",
+    "@zanii/credentials": "^0.1.2"
   },
   "scripts": {
     "build": "tsc -p tsconfig.build.json",

package/src/ecosystem.ts

@@ -0,0 +1,201 @@
+/**
+ * VCs in the wider ecosystem: OpenID4VCI offers and issuer metadata, presentations bound to
+ * a verifier's nonce (for OpenID4VP), Bitstring Status List revocation, did:web issuers,
+ * agent credentials, trust-registry checks and verification receipts. Same
+ * `eddsa-jcs-2022` proofs as `signVC` / `verifyVC`.
+ */
+import { gunzipSync, gzipSync } from 'node:zlib';
+import { ed25519 } from '@noble/curves/ed25519';
+import { sha256 } from '@noble/hashes/sha256';
+import { base58 } from '@scure/base';
+import { canonicalBytes, jcsHash, publicKeyFromDid } from '@zanii/core';
+import { CRYPTOSUITE, signVC, verificationMethodOf, verifyVC, VC_CONTEXT, type DataIntegrityProof, type VerifiableCredential } from './index.js';
+
+type FetchLike = (input: string, init?: RequestInit) => Promise<Response>;
+
+// The eddsa-jcs-2022 signing input, as in index.ts: sha256(JCS(options)) || sha256(JCS(document without proof)).
+function hashData(doc: Record<string, unknown>, options: Record<string, unknown>): Uint8Array {
+  const { proof: _omit, ...unsecured } = doc;
+  const out = new Uint8Array(64);
+  out.set(sha256(canonicalBytes(options)), 0);
+  out.set(sha256(canonicalBytes(unsecured)), 32);
+  return out;
+}
+
+function verifyProofWithKey(doc: Record<string, unknown> & { proof?: DataIntegrityProof & Record<string, unknown> }, publicKey: Uint8Array): boolean {
+  const p = doc.proof;
+  if (!p || p.type !== 'DataIntegrityProof' || p.cryptosuite !== CRYPTOSUITE || typeof p.proofValue !== 'string' || !p.proofValue.startsWith('z')) return false;
+  try {
+    const { proofValue, ...options } = p;
+    return ed25519.verify(base58.decode(proofValue.slice(1)), hashData(doc, { '@context': doc['@context'], ...options }), publicKey);
+  } catch {
+    return false;
+  }
+}
+
+// ------------------------------------------------------------------------------ //
+// OpenID4VCI
+// ------------------------------------------------------------------------------ //
+
+/** Issuer metadata for `/.well-known/openid-credential-issuer`, offering Data Integrity VCs (`ldp_vc`). */
+export function issuerMetadata(input: { issuerUrl: string; credentialEndpoint?: string; configurations: Record<string, { types: string[]; display?: Array<{ name: string; locale?: string }> }> }) {
+  return {
+    credential_issuer: input.issuerUrl,
+    credential_endpoint: input.credentialEndpoint ?? `${input.issuerUrl.replace(/\/$/, '')}/credential`,
+    credential_configurations_supported: Object.fromEntries(Object.entries(input.configurations).map(([id, c]) => [id, {
+      format: 'ldp_vc', cryptographic_binding_methods_supported: ['did:key'], credential_signing_alg_values_supported: [CRYPTOSUITE],
+      credential_definition: { '@context': [VC_CONTEXT], type: c.types }, ...(c.display ? { display: c.display } : {}),
+    }])),
+  };
+}
+
+/** A pre-authorised credential offer and the `openid-credential-offer://` link a wallet scans. */
+export function credentialOffer(input: { issuerUrl: string; configurationIds: string[]; preAuthorizedCode: string; txCode?: { length: number; input_mode?: 'numeric' | 'text' } }) {
+  const offer = {
+    credential_issuer: input.issuerUrl,
+    credential_configuration_ids: input.configurationIds,
+    grants: { 'urn:ietf:params:oauth:grant-type:pre-authorized_code': { 'pre-authorized_code': input.preAuthorizedCode, ...(input.txCode ? { tx_code: input.txCode } : {}) } },
+  };
+  return { offer, uri: `openid-credential-offer://?credential_offer=${encodeURIComponent(JSON.stringify(offer))}` };
+}
+
+// ------------------------------------------------------------------------------ //
+// Presentations (OpenID4VP)
+// ------------------------------------------------------------------------------ //
+
+export interface VerifiablePresentation {
+  '@context': string[];
+  type: string[];
+  holder: string;
+  verifiableCredential: VerifiableCredential[];
+  proof?: DataIntegrityProof & { challenge: string; domain: string };
+}
+
+/** The holder wraps credentials in a presentation bound to the verifier's nonce (challenge) and identity (domain). */
+export function createPresentation(vcs: VerifiableCredential[], holder: { did: string; privateKey: Uint8Array }, opts: { challenge: string; domain: string; created: string }): VerifiablePresentation {
+  const unsecured = { '@context': [VC_CONTEXT], type: ['VerifiablePresentation'], holder: holder.did, verifiableCredential: vcs };
+  const options = { '@context': unsecured['@context'], type: 'DataIntegrityProof', cryptosuite: CRYPTOSUITE, created: opts.created, verificationMethod: verificationMethodOf(holder.did), proofPurpose: 'authentication', challenge: opts.challenge, domain: opts.domain };
+  const sig = ed25519.sign(hashData(unsecured, options), holder.privateKey);
+  const { '@context': _c, ...proofFields } = options;
+  return { ...unsecured, proof: { ...(proofFields as unknown as DataIntegrityProof), challenge: opts.challenge, domain: opts.domain, proofValue: `z${base58.encode(sig)}` } };
+}
+
+/** Verify a presentation: holder proof over this nonce and domain, then every credential; optionally require subjects to be the holder. */
+export function verifyPresentation(vp: VerifiablePresentation, opts: { challenge: string; domain: string; at?: string; requireHolderBinding?: boolean }) {
+  const reasons: string[] = [];
+  const p = vp.proof;
+  if (!p || (p as { proofPurpose?: string }).proofPurpose !== 'authentication') reasons.push('presentation proof missing or not for authentication');
+  else {
+    if (p.challenge !== opts.challenge) reasons.push('challenge does not match (replayed presentation?)');
+    if (p.domain !== opts.domain) reasons.push('domain does not match this verifier');
+    if (p.verificationMethod !== verificationMethodOf(vp.holder)) reasons.push('proof key is not the holder');
+    const holderKey = publicKeyFromDid(vp.holder);
+    if (!holderKey || !verifyProofWithKey(vp as never, holderKey)) reasons.push('holder proof does not verify');
+  }
+  const credentials = vp.verifiableCredential.map((vc) => verifyVC(vc, opts.at ? { at: opts.at } : {}));
+  credentials.forEach((c, i) => { if (!c.ok) reasons.push(`credential ${i}: ${c.reasons.join('; ')}`); });
+  if (opts.requireHolderBinding) vp.verifiableCredential.forEach((vc, i) => { if (vc.credentialSubject.id !== vp.holder) reasons.push(`credential ${i} is about someone else`); });
+  return { ok: reasons.length === 0, reasons, holder: vp.holder };
+}
+
+/** A DCQL query asking for Data Integrity credentials of given types (OpenID4VP). */
+export function dcqlQuery(requests: Array<{ id: string; types: string[] }>) {
+  return { credentials: requests.map((r) => ({ id: r.id, format: 'ldp_vc', meta: { type_values: [r.types] } })) };
+}
+
+// ------------------------------------------------------------------------------ //
+// Bitstring Status List
+// ------------------------------------------------------------------------------ //
+
+/** A status list of `size` bits (default 131,072, the minimum for herd privacy); bit 0 is the first byte's highest bit. */
+export function createStatusList(size = 131_072) {
+  if (size % 8 !== 0 || size <= 0) throw new Error('vc: status list size must be a positive multiple of 8');
+  const bits = new Uint8Array(size / 8);
+  return {
+    size,
+    set(index: number, value = true) {
+      if (!Number.isInteger(index) || index < 0 || index >= size) throw new Error('vc: status index out of range');
+      const mask = 0x80 >> (index % 8);
+      bits[index >> 3] = value ? bits[index >> 3]! | mask : bits[index >> 3]! & ~mask;
+    },
+    encoded: () => `u${gzipSync(bits).toString('base64url')}`,
+  };
+}
+
+/** Read one status bit from an `encodedList`. */
+export function statusAt(encodedList: string, index: number): boolean {
+  if (!encodedList.startsWith('u')) throw new Error('vc: encodedList must be multibase base64url');
+  const bits = gunzipSync(Buffer.from(encodedList.slice(1), 'base64url'));
+  if (index < 0 || index >= bits.length * 8) throw new Error('vc: status index out of range');
+  return (bits[index >> 3]! & (0x80 >> (index % 8))) !== 0;
+}
+
+/** The signed status list credential to publish at `listUrl`. */
+export function statusListCredential(input: { listUrl: string; encodedList: string; purpose?: 'revocation' | 'suspension'; validFrom: string }, issuer: { did: string; privateKey: Uint8Array }) {
+  return signVC({ '@context': [VC_CONTEXT], id: input.listUrl, type: ['VerifiableCredential', 'BitstringStatusListCredential'], issuer: issuer.did, validFrom: input.validFrom, credentialSubject: { id: `${input.listUrl}#list`, type: 'BitstringStatusList', statusPurpose: input.purpose ?? 'revocation', encodedList: input.encodedList } }, issuer, { created: input.validFrom });
+}
+
+/** The `credentialStatus` entry to put on a credential before signing it. */
+export function statusEntry(listUrl: string, index: number, purpose: 'revocation' | 'suspension' = 'revocation') {
+  return { id: `${listUrl}#${index}`, type: 'BitstringStatusListEntry', statusPurpose: purpose, statusListIndex: String(index), statusListCredential: listUrl };
+}
+
+/** Check a credential's status against its (verified) list credential from the same issuer. */
+export function checkStatus(vc: VerifiableCredential, list: VerifiableCredential) {
+  const s = vc.credentialStatus as ReturnType<typeof statusEntry> | undefined;
+  if (!s) return { ok: true, status: 'no-status' as const };
+  const lv = verifyVC(list);
+  if (!lv.ok || list.issuer !== vc.issuer || list.id !== s.statusListCredential) return { ok: false, status: 'list-invalid' as const };
+  const set = statusAt(String(list.credentialSubject.encodedList), Number(s.statusListIndex));
+  return { ok: !set, status: set ? (s.statusPurpose === 'suspension' ? ('suspended' as const) : ('revoked' as const)) : ('valid' as const) };
+}
+
+// ------------------------------------------------------------------------------ //
+// did:web, agents, registries, receipts
+// ------------------------------------------------------------------------------ //
+
+/** The URL of a did:web document: `did:web:example.com` -> `https://example.com/.well-known/did.json`; path segments become directories. */
+export function didWebUrl(did: string): string {
+  if (!did.startsWith('did:web:')) throw new Error('vc: not a did:web');
+  const [host, ...path] = did.slice('did:web:'.length).split(':');
+  return `https://${decodeURIComponent(host!)}/${path.length ? `${path.map(decodeURIComponent).join('/')}/did.json` : '.well-known/did.json'}`;
+}
+
+/**
+ * Verify a VC from a did:web issuer: fetch the DID document, take the Multikey
+ * (Ed25519) verification method the proof names, check the issuer lists it for assertion.
+ */
+export async function verifyDidWebVC(vc: VerifiableCredential, fetchImpl: FetchLike = (u, i) => fetch(u, i)) {
+  const reasons: string[] = [];
+  if (!vc.issuer?.startsWith('did:web:')) return { ok: false, reasons: ['issuer is not did:web'] };
+  const res = await fetchImpl(didWebUrl(vc.issuer)).catch(() => null);
+  if (!res?.ok) return { ok: false, reasons: ['DID document not reachable'] };
+  const doc = (await res.json()) as { id: string; verificationMethod?: Array<{ id: string; type: string; publicKeyMultibase?: string }>; assertionMethod?: Array<string | { id: string }> };
+  if (doc.id !== vc.issuer) reasons.push('DID document id does not match the issuer');
+  const vmId = vc.proof?.verificationMethod ?? '';
+  const vm = doc.verificationMethod?.find((m) => m.id === vmId || `${doc.id}${m.id}` === vmId);
+  const listed = (doc.assertionMethod ?? []).some((a) => (typeof a === 'string' ? a : a.id) === vmId || `${doc.id}${typeof a === 'string' ? a : a.id}` === vmId);
+  if (!vm || vm.type !== 'Multikey' || !vm.publicKeyMultibase?.startsWith('z6Mk')) reasons.push('verification method missing or not an Ed25519 Multikey');
+  if (!listed) reasons.push('verification method is not an assertion method of the issuer');
+  if (reasons.length === 0 && !verifyProofWithKey(vc as never, base58.decode(vm!.publicKeyMultibase!.slice(1)).slice(2))) reasons.push('proof does not verify');
+  return { ok: reasons.length === 0, reasons };
+}
+
+/** A credential describing an agent: who owns it, what it may do, its licences and model. */
+export function agentCredential(input: { agent: string; owner: string; capabilities: string[]; licences?: string[]; model?: string; validFrom: string; validUntil?: string }, issuer: { did: string; privateKey: Uint8Array }) {
+  return signVC({ '@context': [VC_CONTEXT], type: ['VerifiableCredential', 'AgentCredential'], issuer: issuer.did, validFrom: input.validFrom, ...(input.validUntil ? { validUntil: input.validUntil } : {}), credentialSubject: { id: input.agent, owner: input.owner, capabilities: input.capabilities, ...(input.licences ? { licences: input.licences } : {}), ...(input.model ? { model: input.model } : {}) } }, issuer, { created: input.validFrom });
+}
+
+/** Is the issuer accredited, in a registry you trust, for this credential type at this time? */
+export function trustRegistryCheck(issuer: string, credentialType: string, registry: Array<{ did: string; accreditedFor: string[]; validUntil?: string }>, at = new Date().toISOString()) {
+  const e = registry.find((x) => x.did === issuer);
+  if (!e) return { accredited: false, reason: 'issuer not in the registry' };
+  if (e.validUntil && at > e.validUntil) return { accredited: false, reason: 'accreditation expired' };
+  if (!e.accreditedFor.includes(credentialType)) return { accredited: false, reason: `not accredited for ${credentialType}` };
+  return { accredited: true, reason: null };
+}
+
+/** Record a verification as a receipt: what was checked, the result, never the credential's claims. */
+export function verificationReceipt(vc: VerifiableCredential, check: { ok: boolean; reasons: string[] }, at: string) {
+  return { target: 'vc.verified', payload: { vc: jcsHash(vc as never), issuer: vc.issuer, types: vc.type, ok: check.ok, reasons: check.reasons, at } };
+}

package/src/index.ts

@@ -254,3 +254,4 @@ export function proofSignatureBytes(proofValue: string): Uint8Array {
   if (!proofValue.startsWith('z')) throw new Error('not multibase base58btc');
   return base58.decode(proofValue.slice(1));
 }
+export * from './ecosystem.js';