a2a-did 0.1.0

package/dist/a2a/verification.js

@@ -0,0 +1,156 @@
+/**
+ * A2A Verification Functions
+ * Agent Card と A2A メッセージの署名検証
+ * @module a2a/verification
+ */
+import { verifyJWS } from 'did-jwt';
+import { resolveDID } from '../did/resolver.js';
+import { base64UrlEncode, decodeBase64UrlJson, fetchUri, jsonEquals } from './utils.js';
+import { extractAgentCardUrl } from './resolution.js';
+/**
+ * Verify AgentCard signature
+ * @param agentCardUrl - URL to fetch AgentCard from (supports http://, https://, ipfs://)
+ * @returns Verification result with signer DID if successful
+ */
+export async function verifyAgentCard(agentCardUrl) {
+    try {
+        // 1. Fetch AgentCard with cryptographic verification (supports http://, https://, ipfs://)
+        const response = await fetchUri(agentCardUrl);
+        if (!response.ok) {
+            return { verified: false, error: `Failed to fetch AgentCard: ${response.status}` };
+        }
+        const signedCard = await response.json();
+        // 2. Check for signatures
+        if (!signedCard.signatures || signedCard.signatures.length === 0) {
+            return { verified: false, error: 'AgentCard has no signatures' };
+        }
+        const sig = signedCard.signatures[0];
+        // 3. Extract signer DID from protected header (kid field)
+        const header = decodeBase64UrlJson(sig.protected);
+        if (!header.kid) {
+            return { verified: false, error: 'No kid in signature header' };
+        }
+        // Extract DID from kid (format: did:...:...#key-1)
+        const kid = header.kid;
+        const signerDid = kid.split('#')[0];
+        // 4. Resolve signer's DID to get public key
+        const didDocument = await resolveDID(signerDid);
+        if (!didDocument) {
+            return { verified: false, error: `Failed to resolve signer DID: ${signerDid}` };
+        }
+        // 5. Find verification method matching the kid
+        const keyFragment = kid.split('#')[1];
+        const verificationMethod = didDocument.verificationMethod?.find(vm => vm.id === kid || vm.id === `${signerDid}#${keyFragment}`);
+        if (!verificationMethod) {
+            return { verified: false, error: `No matching verification method for kid: ${kid}` };
+        }
+        // 6. Reconstruct compact JWS and verify
+        // Remove signatures from card to get original payload
+        const { signatures: _sigs, ...cardWithoutSig } = signedCard;
+        const payloadBase64 = base64UrlEncode(JSON.stringify(cardWithoutSig));
+        const compactJws = `${sig.protected}.${payloadBase64}.${sig.signature}`;
+        // 7. Verify signature
+        verifyJWS(compactJws, verificationMethod);
+        return { verified: true, signerDid };
+    }
+    catch (error) {
+        return {
+            verified: false,
+            error: error instanceof Error ? error.message : 'Unknown verification error',
+        };
+    }
+}
+/**
+ * Verify A2A message JWS signature using DID public key
+ * Follows A2A Protocol 0.3.0: Verifies Agent Card signature first, then message signature
+ *
+ * @param jws - The JWS signature string (compact format)
+ * @returns Verification result with sender DID if successful
+ */
+export async function verifyA2AMessageSignature(jws) {
+    try {
+        // 1. Decode the JWS to get the protected header
+        const parts = jws.split('.');
+        if (parts.length !== 3) {
+            return { valid: false, error: 'Invalid JWS format' };
+        }
+        const header = decodeBase64UrlJson(parts[0]);
+        if (!header.kid) {
+            return { valid: false, error: 'No kid in signature header' };
+        }
+        const senderDid = header.kid.split('#')[0];
+        // 2. Resolve sender's DID to get public key
+        const didDocument = await resolveDID(senderDid);
+        if (!didDocument) {
+            return { valid: false, error: `Failed to resolve sender DID: ${senderDid}` };
+        }
+        // 3. ⭐ Verify Agent Card (A2A Protocol 0.3.0 requirement)
+        const agentCardUrl = extractAgentCardUrl(didDocument);
+        if (!agentCardUrl) {
+            return { valid: false, error: 'No Agent Card URL in DID Document' };
+        }
+        const cardVerification = await verifyAgentCard(agentCardUrl);
+        if (!cardVerification.verified) {
+            return {
+                valid: false,
+                error: `Agent Card verification failed: ${cardVerification.error}`
+            };
+        }
+        // 4. Verify Agent Card signer matches message sender
+        if (cardVerification.signerDid !== senderDid) {
+            return {
+                valid: false,
+                error: 'Agent Card signer does not match message sender'
+            };
+        }
+        // 5. Find verification method matching the kid
+        const keyFragment = header.kid.split('#')[1];
+        const verificationMethod = didDocument.verificationMethod?.find(vm => vm.id === header.kid || vm.id === `${senderDid}#${keyFragment}`);
+        if (!verificationMethod) {
+            return { valid: false, error: `No matching verification method for kid: ${header.kid}` };
+        }
+        // 6. Verify message signature with the DID public key
+        verifyJWS(jws, verificationMethod);
+        return { valid: true, senderDid };
+    }
+    catch (error) {
+        return {
+            valid: false,
+            error: error instanceof Error ? error.message : 'Unknown verification error',
+        };
+    }
+}
+/**
+ * Verify A2A request with signature validation and payload integrity check
+ * This is a convenience function for API servers to validate incoming signed requests
+ *
+ * @param request - The signed A2A request (JSON-RPC with signature field)
+ * @returns Verification result with sender DID if successful
+ */
+export async function verifySignedA2ARequest(request) {
+    if (!request.signature) {
+        return { valid: false, error: 'No signature in request' };
+    }
+    try {
+        // 1. Verify the JWS signature
+        const signatureResult = await verifyA2AMessageSignature(request.signature);
+        if (!signatureResult.valid) {
+            return signatureResult;
+        }
+        // 2. Verify payload integrity (JWS payload matches request body)
+        const parts = request.signature.split('.');
+        const payload = decodeBase64UrlJson(parts[1]);
+        const { signature: _sig, ...requestWithoutSig } = request;
+        if (!jsonEquals(payload, requestWithoutSig)) {
+            return { valid: false, error: 'JWS payload does not match request body' };
+        }
+        return { valid: true, senderDid: signatureResult.senderDid };
+    }
+    catch (error) {
+        return {
+            valid: false,
+            error: error instanceof Error ? error.message : 'Unknown verification error',
+        };
+    }
+}
+//# sourceMappingURL=verification.js.map

package/dist/a2a/verification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification.js","sourceRoot":"","sources":["../../src/a2a/verification.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxF,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAmCtD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,YAAoB;IAEpB,IAAI,CAAC;QACH,2FAA2F;QAC3F,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,8BAA8B,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QACrF,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAqB,CAAC;QAE5D,0BAA0B;QAC1B,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;QACnE,CAAC;QAED,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC;QAEtC,0DAA0D;QAC1D,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAmC,CAAC;QACpF,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YAChB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC;QAClE,CAAC;QAED,mDAAmD;QACnD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;QACvB,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QAErC,4CAA4C;QAC5C,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAiC,SAAS,EAAE,EAAE,CAAC;QAClF,CAAC;QAED,+CAA+C;QAC/C,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QACvC,MAAM,kBAAkB,GAAG,WAAW,CAAC,kBAAkB,EAAE,IAAI,CAC7D,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,GAAG,IAAI,EAAE,CAAC,EAAE,KAAK,GAAG,SAAS,IAAI,WAAW,EAAE,CAC/D,CAAC;QACF,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,4CAA4C,GAAG,EAAE,EAAE,CAAC;QACvF,CAAC;QAED,wCAAwC;QACxC,sDAAsD;QACtD,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,cAAc,EAAE,GAAG,UAAU,CAAC;QAC5D,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC;QACtE,MAAM,UAAU,GAAG,GAAG,GAAG,CAAC,SAAS,IAAI,aAAa,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QAExE,sBAAsB;QACtB,SAAS,CAAC,UAAU,EAAE,kBAAqD,CAAC,CAAC;QAE7E,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B;SAC7E,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,GAAW;IAEX,IAAI,CAAC;QACH,gDAAgD;QAChD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;QACvD,CAAC;QAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAE,CAAmC,CAAC;QAChF,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC;QAC/D,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QAE5C,4CAA4C;QAC5C,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAiC,SAAS,EAAE,EAAE,CAAC;QAC/E,CAAC;QAED,0DAA0D;QAC1D,MAAM,YAAY,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACtD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;QACtE,CAAC;QAED,MAAM,gBAAgB,GAAG,MAAM,eAAe,CAAC,YAAY,CAAC,CAAC;QAC7D,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC;YAC/B,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,mCAAmC,gBAAgB,CAAC,KAAK,EAAE;aACnE,CAAC;QACJ,CAAC;QAED,qDAAqD;QACrD,IAAI,gBAAgB,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAC7C,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,iDAAiD;aACzD,CAAC;QACJ,CAAC;QAED,+CAA+C;QAC/C,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QAC9C,MAAM,kBAAkB,GAAG,WAAW,CAAC,kBAAkB,EAAE,IAAI,CAC7D,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,KAAK,GAAG,SAAS,IAAI,WAAW,EAAE,CACtE,CAAC;QACF,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACxB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,4CAA4C,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC;QAC3F,CAAC;QAED,sDAAsD;QACtD,SAAS,CAAC,GAAG,EAAE,kBAAqD,CAAC,CAAC;QAEtE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B;SAC7E,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAuD;IAEvD,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACvB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;IAC5D,CAAC;IAED,IAAI,CAAC;QACH,8BAA8B;QAC9B,MAAM,eAAe,GAAG,MAAM,yBAAyB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC3E,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;YAC3B,OAAO,eAAe,CAAC;QACzB,CAAC;QAED,iEAAiE;QACjE,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;QAC/C,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,iBAAiB,EAAE,GAAG,OAAO,CAAC;QAE1D,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,iBAAiB,CAAC,EAAE,CAAC;YAC5C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,yCAAyC,EAAE,CAAC;QAC5E,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,CAAC,SAAS,EAAE,CAAC;IAC/D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B;SAC7E,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/agent.d.ts

@@ -0,0 +1,99 @@
+import type { DIDIdentity, ServiceEndpoint } from './did/types.js';
+import type { SignedPayload, VerificationResult } from './types.js';
+/**
+ * Agent configuration
+ */
+export interface AgentConfig {
+    /** Agent name */
+    name: string;
+    /** Agent description */
+    description?: string;
+}
+/**
+ * Agent - an autonomous entity with DID identity
+ *
+ * DID identity is injected, not inherited.
+ * Agent can use any DID method (did:web, did:ethr)
+ */
+export declare class Agent {
+    /** Injected DID identity */
+    readonly identity: DIDIdentity;
+    /** Agent ID (short identifier) */
+    readonly id: string;
+    /** Agent name */
+    readonly name: string;
+    /** Agent description */
+    readonly description: string;
+    /**
+     * Create an Agent with injected DID identity
+     * @param identity - DID identity from any provider (did:web, did:ethr)
+     * @param id - Short identifier for the agent
+     * @param config - Agent configuration (name, description)
+     */
+    constructor(identity: DIDIdentity, id: string, config: AgentConfig);
+    /**
+     * Agent's DID
+     * @returns The DID string (e.g., "did:web:example.com:agents:bot-1")
+     */
+    get did(): string;
+    /**
+     * Key ID for signing
+     * @returns The key ID used in JWS/JWT (e.g., "did:web:example.com:agents:bot-1#key-1")
+     */
+    get keyId(): string;
+    /**
+     * DID Document (if available locally)
+     * - did:web: Available (locally generated)
+     * - did:ethr: undefined (use resolveDID() to get from chain)
+     * @returns The W3C DID Document or undefined
+     */
+    get document(): import("./did/types.js").DIDDocument | undefined;
+    /**
+     * Check if local DID Document is available
+     * @returns true if document is available locally
+     */
+    hasLocalDocument(): boolean;
+    /**
+     * Controller DID (if set in local document)
+     * @returns The DID of the controller (typically a Human), or undefined
+     */
+    get controller(): string | undefined;
+    /**
+     * Get all service endpoints from local DID Document
+     * For did:ethr, use resolveDID() instead to get on-chain services
+     * @returns Array of service endpoints (empty if no local document)
+     */
+    getServices(): ServiceEndpoint[];
+    /**
+     * Get a specific service by type from local DID Document
+     * For did:ethr, use resolveDID() instead to get on-chain services
+     * @param type - The service type to find (e.g., "A2AAgent")
+     * @returns The service endpoint if found, undefined otherwise
+     */
+    getService(type: string): ServiceEndpoint | undefined;
+    /**
+     * Get A2A Agent Card URL from local DID Document
+     * For did:ethr, use resolveDID() instead to get on-chain Agent Card URL
+     * @returns The Agent Card URL if configured, undefined otherwise
+     */
+    getA2AEndpoint(): string | undefined;
+    /**
+     * Sign a payload as JWT
+     * @param payload - The payload to sign
+     * @returns Signed payload containing the JWT and original payload
+     */
+    sign<T extends Record<string, unknown>>(payload: T): Promise<SignedPayload<T>>;
+    /**
+     * Sign data directly as JWS (no iss/iat claims)
+     * @param data - The data to sign
+     * @returns The compact JWS string
+     */
+    signJWS(data: Record<string, unknown>): Promise<string>;
+    /**
+     * Verify a signed payload
+     * @param signed - The signed payload to verify
+     * @returns Verification result with issuer and payload if successful
+     */
+    verify<T = Record<string, unknown>>(signed: SignedPayload<T>): Promise<VerificationResult<T>>;
+}
+//# sourceMappingURL=agent.d.ts.map

package/dist/agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../src/agent.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEnE,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAGpE;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,iBAAiB;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,wBAAwB;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;GAKG;AACH,qBAAa,KAAK;IAChB,4BAA4B;IAC5B,SAAgB,QAAQ,EAAE,WAAW,CAAC;IAEtC,kCAAkC;IAClC,SAAgB,EAAE,EAAE,MAAM,CAAC;IAE3B,iBAAiB;IACjB,SAAgB,IAAI,EAAE,MAAM,CAAC;IAE7B,wBAAwB;IACxB,SAAgB,WAAW,EAAE,MAAM,CAAC;IAEpC;;;;;OAKG;gBACS,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW;IAOlE;;;OAGG;IACH,IAAI,GAAG,IAAI,MAAM,CAEhB;IAED;;;OAGG;IACH,IAAI,KAAK,IAAI,MAAM,CAElB;IAED;;;;;OAKG;IACH,IAAI,QAAQ,qDAEX;IAED;;;OAGG;IACH,gBAAgB,IAAI,OAAO;IAI3B;;;OAGG;IACH,IAAI,UAAU,IAAI,MAAM,GAAG,SAAS,CAInC;IAED;;;;OAIG;IACH,WAAW,IAAI,eAAe,EAAE;IAIhC;;;;;OAKG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAIrD;;;;OAIG;IACH,cAAc,IAAI,MAAM,GAAG,SAAS;IAQpC;;;;OAIG;IACG,IAAI,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IASpF;;;;OAIG;IACG,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAI7D;;;;OAIG;IACG,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;CAoBpG"}

package/dist/agent.js

@@ -0,0 +1,149 @@
+/**
+ * Agent
+ * An autonomous entity that has a DID identity (injected, not inherited)
+ * @module agent
+ */
+import { createJWT, createJWS, verifyJWT } from 'did-jwt';
+import { getResolver } from './did/resolver.js';
+import { A2A_AGENT_CARD_SERVICE_TYPE } from './a2a/constants.js';
+/**
+ * Agent - an autonomous entity with DID identity
+ *
+ * DID identity is injected, not inherited.
+ * Agent can use any DID method (did:web, did:ethr)
+ */
+export class Agent {
+    /** Injected DID identity */
+    identity;
+    /** Agent ID (short identifier) */
+    id;
+    /** Agent name */
+    name;
+    /** Agent description */
+    description;
+    /**
+     * Create an Agent with injected DID identity
+     * @param identity - DID identity from any provider (did:web, did:ethr)
+     * @param id - Short identifier for the agent
+     * @param config - Agent configuration (name, description)
+     */
+    constructor(identity, id, config) {
+        this.identity = identity;
+        this.id = id;
+        this.name = config.name;
+        this.description = config.description ?? '';
+    }
+    /**
+     * Agent's DID
+     * @returns The DID string (e.g., "did:web:example.com:agents:bot-1")
+     */
+    get did() {
+        return this.identity.did;
+    }
+    /**
+     * Key ID for signing
+     * @returns The key ID used in JWS/JWT (e.g., "did:web:example.com:agents:bot-1#key-1")
+     */
+    get keyId() {
+        return this.identity.keyId;
+    }
+    /**
+     * DID Document (if available locally)
+     * - did:web: Available (locally generated)
+     * - did:ethr: undefined (use resolveDID() to get from chain)
+     * @returns The W3C DID Document or undefined
+     */
+    get document() {
+        return this.identity.document;
+    }
+    /**
+     * Check if local DID Document is available
+     * @returns true if document is available locally
+     */
+    hasLocalDocument() {
+        return this.identity.document !== undefined;
+    }
+    /**
+     * Controller DID (if set in local document)
+     * @returns The DID of the controller (typically a Human), or undefined
+     */
+    get controller() {
+        const ctrl = this.identity.document?.controller;
+        if (!ctrl)
+            return undefined;
+        return Array.isArray(ctrl) ? ctrl[0] : ctrl;
+    }
+    /**
+     * Get all service endpoints from local DID Document
+     * For did:ethr, use resolveDID() instead to get on-chain services
+     * @returns Array of service endpoints (empty if no local document)
+     */
+    getServices() {
+        return this.identity.document?.service ?? [];
+    }
+    /**
+     * Get a specific service by type from local DID Document
+     * For did:ethr, use resolveDID() instead to get on-chain services
+     * @param type - The service type to find (e.g., "A2AAgent")
+     * @returns The service endpoint if found, undefined otherwise
+     */
+    getService(type) {
+        return this.identity.document?.service?.find(s => s.type === type);
+    }
+    /**
+     * Get A2A Agent Card URL from local DID Document
+     * For did:ethr, use resolveDID() instead to get on-chain Agent Card URL
+     * @returns The Agent Card URL if configured, undefined otherwise
+     */
+    getA2AEndpoint() {
+        const service = this.getService(A2A_AGENT_CARD_SERVICE_TYPE);
+        if (!service)
+            return undefined;
+        return typeof service.serviceEndpoint === 'string'
+            ? service.serviceEndpoint
+            : undefined;
+    }
+    /**
+     * Sign a payload as JWT
+     * @param payload - The payload to sign
+     * @returns Signed payload containing the JWT and original payload
+     */
+    async sign(payload) {
+        const jwt = await createJWT(payload, { issuer: this.did, signer: this.identity.signer }, { alg: 'ES256K', kid: this.keyId });
+        return { jws: jwt, payload };
+    }
+    /**
+     * Sign data directly as JWS (no iss/iat claims)
+     * @param data - The data to sign
+     * @returns The compact JWS string
+     */
+    async signJWS(data) {
+        return createJWS(data, this.identity.signer, { alg: 'ES256K', kid: this.keyId });
+    }
+    /**
+     * Verify a signed payload
+     * @param signed - The signed payload to verify
+     * @returns Verification result with issuer and payload if successful
+     */
+    async verify(signed) {
+        try {
+            const verified = await verifyJWT(signed.jws, {
+                resolver: getResolver(),
+            });
+            return {
+                verified: true,
+                issuer: verified.issuer,
+                payload: verified.payload,
+            };
+        }
+        catch (error) {
+            return {
+                verified: false,
+                issuer: '',
+                payload: null,
+                error: error instanceof Error ? error.message : 'Unknown error',
+            };
+        }
+    }
+}
+//# sourceMappingURL=agent.js.map

package/dist/agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.js","sourceRoot":"","sources":["../src/agent.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAE1D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,OAAO,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AAYjE;;;;;GAKG;AACH,MAAM,OAAO,KAAK;IAChB,4BAA4B;IACZ,QAAQ,CAAc;IAEtC,kCAAkC;IAClB,EAAE,CAAS;IAE3B,iBAAiB;IACD,IAAI,CAAS;IAE7B,wBAAwB;IACR,WAAW,CAAS;IAEpC;;;;;OAKG;IACH,YAAY,QAAqB,EAAE,EAAU,EAAE,MAAmB;QAChE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACxB,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;IAC9C,CAAC;IAED;;;OAGG;IACH,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;IAC3B,CAAC;IAED;;;OAGG;IACH,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;IAC7B,CAAC;IAED;;;;;OAKG;IACH,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAChC,CAAC;IAED;;;OAGG;IACH,gBAAgB;QACd,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC;IAC9C,CAAC;IAED;;;OAGG;IACH,IAAI,UAAU;QACZ,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;QAChD,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5B,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9C,CAAC;IAED;;;;OAIG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC;IAC/C,CAAC;IAED;;;;;OAKG;IACH,UAAU,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACrE,CAAC;IAED;;;;OAIG;IACH,cAAc;QACZ,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC;QAC7D,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC/B,OAAO,OAAO,OAAO,CAAC,eAAe,KAAK,QAAQ;YAChD,CAAC,CAAC,OAAO,CAAC,eAAe;YACzB,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI,CAAoC,OAAU;QACtD,MAAM,GAAG,GAAG,MAAM,SAAS,CACzB,OAAO,EACP,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAClD,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,CACnC,CAAC;QACF,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;IAC/B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,IAA6B;QACzC,OAAO,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACnF,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM,CAA8B,MAAwB;QAChE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE;gBAC3C,QAAQ,EAAE,WAAW,EAAE;aACxB,CAAC,CAAC;YAEH,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,OAAO,EAAE,QAAQ,CAAC,OAAuB;aAC1C,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,EAAE;gBACV,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;aAChE,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/did/config-types.d.ts

@@ -0,0 +1,37 @@
+/**
+ * DID Method Configuration Types
+ * Type-safe configuration for different DID methods
+ */
+/**
+ * Configuration for did:web method
+ */
+export interface WebDIDConfig {
+    /** DID method identifier */
+    type: 'web';
+    /** Domain name (e.g., "example.com") */
+    domain: string;
+    /** Port number (e.g., 3000) */
+    port: number;
+    /** Optional controller DID */
+    controller?: string;
+}
+/**
+ * Configuration for did:ethr method
+ */
+export interface EthrDIDConfig {
+    /** DID method identifier */
+    type: 'ethr';
+    /** Network name (e.g., "sepolia", "mainnet") */
+    network: string;
+    /** JSON-RPC endpoint URL */
+    rpcUrl: string;
+    /** Optional chain ID (auto-detected from network if not provided) */
+    chainId?: number;
+    /** Optional registry contract address (uses default if not provided) */
+    registry?: string;
+}
+/**
+ * Union type for all DID method configurations
+ */
+export type DIDConfig = WebDIDConfig | EthrDIDConfig;
+//# sourceMappingURL=config-types.d.ts.map

package/dist/did/config-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-types.d.ts","sourceRoot":"","sources":["../../src/did/config-types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,4BAA4B;IAC5B,IAAI,EAAE,KAAK,CAAC;IACZ,wCAAwC;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,8BAA8B;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,4BAA4B;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,4BAA4B;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,MAAM,SAAS,GAAG,YAAY,GAAG,aAAa,CAAC"}

package/dist/did/config-types.js

@@ -0,0 +1,6 @@
+/**
+ * DID Method Configuration Types
+ * Type-safe configuration for different DID methods
+ */
+export {};
+//# sourceMappingURL=config-types.js.map

package/dist/did/config-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-types.js","sourceRoot":"","sources":["../../src/did/config-types.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/did/document.d.ts

@@ -0,0 +1,20 @@
+/**
+ * DID Document builder functions with dynamic handler loading
+ * @module did/document
+ */
+import type { DIDIdentity, DIDDocument, ServiceEndpoint } from './types.js';
+/**
+ * Build DID Document for a given identity
+ * Dynamically loads the appropriate DID method handler
+ *
+ * Note: Only supports did:web. For did:ethr, documents are resolved from on-chain.
+ *
+ * @param identity - The DID identity
+ * @param options - Optional services to include in the document
+ * @returns The DID Document
+ * @throws {Error} When DID method is not 'web'
+ */
+export declare function buildDocumentForIdentity(identity: DIDIdentity, options?: {
+    services?: ServiceEndpoint[];
+}): Promise<DIDDocument>;
+//# sourceMappingURL=document.d.ts.map

package/dist/did/document.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"document.d.ts","sourceRoot":"","sources":["../../src/did/document.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE5E;;;;;;;;;;GAUG;AACH,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,WAAW,EACrB,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,eAAe,EAAE,CAAA;CAAE,GACzC,OAAO,CAAC,WAAW,CAAC,CAUtB"}

package/dist/did/document.js

@@ -0,0 +1,21 @@
+/**
+ * Build DID Document for a given identity
+ * Dynamically loads the appropriate DID method handler
+ *
+ * Note: Only supports did:web. For did:ethr, documents are resolved from on-chain.
+ *
+ * @param identity - The DID identity
+ * @param options - Optional services to include in the document
+ * @returns The DID Document
+ * @throws {Error} When DID method is not 'web'
+ */
+export async function buildDocumentForIdentity(identity, options) {
+    const method = identity.did.split(':')[1]; // 'did:web:...' → 'web'
+    if (method === 'web') {
+        const { DIDWebMethodHandler } = await import('./handlers/web-handler.js');
+        const handler = new DIDWebMethodHandler();
+        return handler.buildDocumentForIdentity(identity, options);
+    }
+    throw new Error(`buildDocumentForIdentity only supports did:web. For did:ethr, use DID resolver instead.`);
+}
+//# sourceMappingURL=document.js.map

package/dist/did/document.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document.js","sourceRoot":"","sources":["../../src/did/document.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,QAAqB,EACrB,OAA0C;IAE1C,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,wBAAwB;IAEnE,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,IAAI,mBAAmB,EAAE,CAAC;QAC1C,OAAO,OAAO,CAAC,wBAAwB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAC;AAC7G,CAAC"}

package/dist/did/factory.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Agent DID Service Factory
+ * Provides convenience functions for creating pre-configured AgentDIDService instances
+ */
+import { AgentDIDService } from './service.js';
+/**
+ * Supported DID methods for factory creation
+ */
+export type DIDMethod = 'web' | 'ethr';
+/**
+ * Create an AgentDIDService with specified methods
+ * Uses dynamic imports for tree-shaking - only requested methods are bundled
+ *
+ * @param methods - Array of DID methods to enable (default: ['web'])
+ * @returns Configured AgentDIDService instance
+ *
+ * @example
+ * // did:web only (no ethers dependency)
+ * const service = await createAgentDIDService(['web']);
+ *
+ * @example
+ * // did:web + did:ethr (includes ethers)
+ * const service = await createAgentDIDService(['web', 'ethr']);
+ */
+export declare function createAgentDIDService(methods?: DIDMethod[]): Promise<AgentDIDService>;
+/**
+ * Get all supported DID method names
+ * @returns Array of supported method names
+ */
+export declare function getSupportedDIDMethods(): DIDMethod[];
+//# sourceMappingURL=factory.d.ts.map

package/dist/did/factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../src/did/factory.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C;;GAEG;AACH,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,MAAM,CAAC;AAEvC;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,GAAE,SAAS,EAAY,GAAG,OAAO,CAAC,eAAe,CAAC,CAiBpG;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,IAAI,SAAS,EAAE,CAEpD"}

package/dist/did/factory.js

@@ -0,0 +1,46 @@
+/**
+ * Agent DID Service Factory
+ * Provides convenience functions for creating pre-configured AgentDIDService instances
+ */
+import { AgentDIDService } from './service.js';
+/**
+ * Create an AgentDIDService with specified methods
+ * Uses dynamic imports for tree-shaking - only requested methods are bundled
+ *
+ * @param methods - Array of DID methods to enable (default: ['web'])
+ * @returns Configured AgentDIDService instance
+ *
+ * @example
+ * // did:web only (no ethers dependency)
+ * const service = await createAgentDIDService(['web']);
+ *
+ * @example
+ * // did:web + did:ethr (includes ethers)
+ * const service = await createAgentDIDService(['web', 'ethr']);
+ */
+export async function createAgentDIDService(methods = ['web']) {
+    const service = new AgentDIDService();
+    for (const method of methods) {
+        if (method === 'web') {
+            const { DIDWebMethodHandler } = await import('./handlers/web-handler.js');
+            service.registerMethod('web', new DIDWebMethodHandler());
+        }
+        else if (method === 'ethr') {
+            const { DIDEthrMethodHandler } = await import('./handlers/ethr-handler.js');
+            service.registerMethod('ethr', new DIDEthrMethodHandler());
+        }
+        else {
+            // Type guard ensures this never happens with proper typing
+            throw new Error(`Unsupported DID method: ${method}`);
+        }
+    }
+    return service;
+}
+/**
+ * Get all supported DID method names
+ * @returns Array of supported method names
+ */
+export function getSupportedDIDMethods() {
+    return ['web', 'ethr'];
+}
+//# sourceMappingURL=factory.js.map

package/dist/did/factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.js","sourceRoot":"","sources":["../../src/did/factory.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAO/C;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,UAAuB,CAAC,KAAK,CAAC;IACxE,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;IAEtC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YACrB,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;YAC1E,OAAO,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,mBAAmB,EAAE,CAAC,CAAC;QAC3D,CAAC;aAAM,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC7B,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;YAC5E,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,oBAAoB,EAAE,CAAC,CAAC;QAC7D,CAAC;aAAM,CAAC;YACN,2DAA2D;YAC3D,MAAM,IAAI,KAAK,CAAC,2BAA2B,MAAM,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB;IACpC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AACzB,CAAC"}