a2a-did 0.1.0

package/dist/did/handlers/ethr-handler.d.ts

@@ -0,0 +1,62 @@
+import type { DIDMethodHandler } from '../service.js';
+import type { DIDIdentity, ServiceEndpoint } from '../types.js';
+import type { DIDConfig } from '../config-types.js';
+/**
+ * Ethereum DID Method Handler
+ * Implements DID operations for did:ethr method using EIP-1056 registry
+ * @implements {DIDMethodHandler}
+ */
+export declare class DIDEthrMethodHandler implements DIDMethodHandler {
+    /**
+     * Create a new did:ethr identity
+     * @param options - Configuration options
+     * @param options.agentId - Agent unique identifier
+     * @param options.config - Ethereum DID configuration (network, rpcUrl)
+     * @param options.services - Optional service endpoints to register
+     * @returns Promise resolving to DID identity with document
+     * @throws {Error} When config type is not 'ethr' or rpcUrl is missing
+     */
+    createIdentity(options: {
+        agentId: string;
+        config: DIDConfig;
+        services?: ServiceEndpoint[];
+    }): Promise<DIDIdentity>;
+    /**
+     * Register a service endpoint on-chain for did:ethr
+     * Updates the EIP-1056 registry with the new service endpoint
+     * @param options - Registration options
+     * @param options.did - DID string (e.g., "did:ethr:sepolia:0x...")
+     * @param options.privateKey - Private key for signing transactions (hex string)
+     * @param options.serviceEndpoint - Service endpoint URI (e.g., "ipfs://...")
+     * @param options.config - Ethereum DID configuration (network, rpcUrl)
+     * @returns Promise resolving to array of transaction hashes
+     * @throws {Error} When config type is not 'ethr' or rpcUrl is missing
+     */
+    registerServiceEndpoint(options: {
+        did: string;
+        privateKey: string;
+        serviceEndpoint: string;
+        config: DIDConfig;
+    }): Promise<string[]>;
+    /**
+     * Extract wallet address from did:ethr
+     * @param did - DID string (e.g., "did:ethr:sepolia:0x1234...")
+     * @returns Ethereum wallet address (e.g., "0x1234...")
+     * @example
+     * extractWalletAddress("did:ethr:sepolia:0x1234...") // returns "0x1234..."
+     */
+    extractWalletAddress(did: string): string | undefined;
+    /**
+     * Get key ID for did:ethr
+     * @param did - DID string
+     * @returns Key identifier with #controller fragment
+     * @example
+     * getKeyId("did:ethr:sepolia:0x1234...") // returns "did:ethr:sepolia:0x1234...#controller"
+     */
+    getKeyId(did: string): string;
+    /**
+     * Get network name for DID format
+     */
+    private getNetworkName;
+}
+//# sourceMappingURL=ethr-handler.d.ts.map

package/dist/did/handlers/ethr-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ethr-handler.d.ts","sourceRoot":"","sources":["../../../src/did/handlers/ethr-handler.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAOpD;;;;GAIG;AACH,qBAAa,oBAAqB,YAAW,gBAAgB;IAC3D;;;;;;;;OAQG;IACG,cAAc,CAAC,OAAO,EAAE;QAC5B,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,SAAS,CAAC;QAClB,QAAQ,CAAC,EAAE,eAAe,EAAE,CAAC;KAC9B,GAAG,OAAO,CAAC,WAAW,CAAC;IA+DxB;;;;;;;;;;OAUG;IACG,uBAAuB,CAAC,OAAO,EAAE;QACrC,GAAG,EAAE,MAAM,CAAC;QACZ,UAAU,EAAE,MAAM,CAAC;QACnB,eAAe,EAAE,MAAM,CAAC;QACxB,MAAM,EAAE,SAAS,CAAC;KACnB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAkErB;;;;;;OAMG;IACH,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAKrD;;;;;;OAMG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;IAI7B;;OAEG;IACH,OAAO,CAAC,cAAc;CAevB"}

package/dist/did/handlers/ethr-handler.js

@@ -0,0 +1,184 @@
+/**
+ * Ethereum DID Method Handler
+ * Handles DID operations for did:ethr
+ */
+import { EthrDID } from 'ethr-did';
+import { JsonRpcProvider, Wallet } from 'ethers';
+import * as u8a from 'uint8arrays';
+import { KNOWN_NETWORKS } from '../resolvers/ethr.js';
+import { A2A_AGENT_CARD_SERVICE_TYPE } from '../../a2a/constants.js';
+// Default validity period: 1 year in seconds
+const DEFAULT_VALIDITY = 31536000;
+/**
+ * Ethereum DID Method Handler
+ * Implements DID operations for did:ethr method using EIP-1056 registry
+ * @implements {DIDMethodHandler}
+ */
+export class DIDEthrMethodHandler {
+    /**
+     * Create a new did:ethr identity
+     * @param options - Configuration options
+     * @param options.agentId - Agent unique identifier
+     * @param options.config - Ethereum DID configuration (network, rpcUrl)
+     * @param options.services - Optional service endpoints to register
+     * @returns Promise resolving to DID identity with document
+     * @throws {Error} When config type is not 'ethr' or rpcUrl is missing
+     */
+    async createIdentity(options) {
+        const config = options.config;
+        if (config.type !== 'ethr') {
+            throw new Error('Invalid config for did:ethr');
+        }
+        if (!config.rpcUrl) {
+            throw new Error(`rpcUrl is required for network: ${config.network}`);
+        }
+        // Get network configuration
+        const known = KNOWN_NETWORKS[config.network];
+        const chainId = config.chainId ?? known?.chainId;
+        const registry = config.registry ?? known?.registry;
+        if (!chainId || !registry) {
+            throw new Error(`Unknown network "${config.network}". Provide chainId and registry.`);
+        }
+        // Generate random Ethereum wallet
+        const wallet = Wallet.createRandom();
+        const privateKeyHex = wallet.privateKey.slice(2); // Remove '0x' prefix
+        const privateKey = u8a.fromString(privateKeyHex, 'base16');
+        // Create JSON RPC provider
+        const jsonRpcProvider = new JsonRpcProvider(config.rpcUrl);
+        // Connect wallet to provider for signing transactions
+        const connectedWallet = wallet.connect(jsonRpcProvider);
+        // Create EthrDID instance
+        const ethrDid = new EthrDID({
+            identifier: wallet.address,
+            privateKey: privateKeyHex,
+            provider: jsonRpcProvider,
+            txSigner: connectedWallet,
+            chainNameOrId: chainId,
+            registry: registry,
+        });
+        // Get network name for DID format
+        const networkName = this.getNetworkName(config.network, chainId);
+        // DID format: did:ethr:sepolia:0x...
+        const did = `did:ethr:${networkName}:${wallet.address}`;
+        const keyId = `${did}#controller`;
+        // EthrDID always has a signer when created with privateKey
+        if (!ethrDid.signer) {
+            throw new Error('EthrDID signer not available');
+        }
+        // Note: On-chain service registration is skipped during creation
+        // Call registerServiceEndpoint() separately after funding the wallet
+        return {
+            did,
+            keyId,
+            signer: ethrDid.signer,
+            privateKey: new Uint8Array(privateKey),
+            // document is undefined - did:ethr resolves from on-chain via resolveDID()
+        };
+    }
+    /**
+     * Register a service endpoint on-chain for did:ethr
+     * Updates the EIP-1056 registry with the new service endpoint
+     * @param options - Registration options
+     * @param options.did - DID string (e.g., "did:ethr:sepolia:0x...")
+     * @param options.privateKey - Private key for signing transactions (hex string)
+     * @param options.serviceEndpoint - Service endpoint URI (e.g., "ipfs://...")
+     * @param options.config - Ethereum DID configuration (network, rpcUrl)
+     * @returns Promise resolving to array of transaction hashes
+     * @throws {Error} When config type is not 'ethr' or rpcUrl is missing
+     */
+    async registerServiceEndpoint(options) {
+        const config = options.config;
+        if (config.type !== 'ethr') {
+            throw new Error('Invalid config for did:ethr');
+        }
+        // Resolve RPC URL
+        if (!config.rpcUrl) {
+            throw new Error(`rpcUrl is required for network: ${config.network}`);
+        }
+        // Get network configuration
+        const known = KNOWN_NETWORKS[config.network];
+        const chainId = config.chainId ?? known?.chainId;
+        const registry = config.registry ?? known?.registry;
+        if (!chainId || !registry) {
+            throw new Error(`Unknown network "${config.network}". Provide chainId and registry.`);
+        }
+        // Reconstruct wallet from private key
+        const privateKeyHex = options.privateKey.startsWith('0x')
+            ? options.privateKey
+            : `0x${options.privateKey}`;
+        const wallet = new Wallet(privateKeyHex);
+        // Create JSON RPC provider
+        const jsonRpcProvider = new JsonRpcProvider(config.rpcUrl);
+        const connectedWallet = wallet.connect(jsonRpcProvider);
+        // Create EthrDID instance
+        const ethrDid = new EthrDID({
+            identifier: wallet.address,
+            privateKey: privateKeyHex.slice(2),
+            provider: jsonRpcProvider,
+            txSigner: connectedWallet,
+            chainNameOrId: chainId,
+            registry: registry,
+        });
+        // Register service endpoint on-chain
+        // Note: Service id is auto-generated by resolver as ${did}#service-${eventIndex}
+        // Only type and serviceEndpoint are stored on-chain via EIP-1056
+        const serviceType = A2A_AGENT_CARD_SERVICE_TYPE;
+        const attributeKey = `did/svc/${serviceType}`;
+        const endpoint = typeof options.serviceEndpoint === 'string'
+            ? options.serviceEndpoint
+            : JSON.stringify(options.serviceEndpoint);
+        try {
+            // setAttribute() sends a transaction to the EthereumDIDRegistry
+            const tx = await ethrDid.setAttribute(attributeKey, endpoint, DEFAULT_VALIDITY);
+            return [tx];
+        }
+        catch (error) {
+            // If no ETH for gas, provide helpful message
+            if (error instanceof Error && error.message.includes('insufficient funds')) {
+                throw new Error(`Insufficient funds for on-chain registration. ` +
+                    `Get Sepolia ETH from faucet for address: ${ethrDid.address}`);
+            }
+            throw error;
+        }
+    }
+    /**
+     * Extract wallet address from did:ethr
+     * @param did - DID string (e.g., "did:ethr:sepolia:0x1234...")
+     * @returns Ethereum wallet address (e.g., "0x1234...")
+     * @example
+     * extractWalletAddress("did:ethr:sepolia:0x1234...") // returns "0x1234..."
+     */
+    extractWalletAddress(did) {
+        const parts = did.split(':');
+        return parts[parts.length - 1];
+    }
+    /**
+     * Get key ID for did:ethr
+     * @param did - DID string
+     * @returns Key identifier with #controller fragment
+     * @example
+     * getKeyId("did:ethr:sepolia:0x1234...") // returns "did:ethr:sepolia:0x1234...#controller"
+     */
+    getKeyId(did) {
+        return `${did}#controller`;
+    }
+    /**
+     * Get network name for DID format
+     */
+    getNetworkName(network, chainId) {
+        if (network) {
+            return network;
+        }
+        switch (chainId) {
+            case 1:
+                return 'mainnet';
+            case 11155111:
+                return 'sepolia';
+            case 5:
+                return 'goerli';
+            default:
+                return `0x${chainId.toString(16)}`;
+        }
+    }
+}
+//# sourceMappingURL=ethr-handler.js.map

package/dist/did/handlers/ethr-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ethr-handler.js","sourceRoot":"","sources":["../../../src/did/handlers/ethr-handler.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACjD,OAAO,KAAK,GAAG,MAAM,aAAa,CAAC;AAInC,OAAO,EAAE,cAAc,EAAqB,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AAErE,6CAA6C;AAC7C,MAAM,gBAAgB,GAAG,QAAQ,CAAC;AAElC;;;;GAIG;AACH,MAAM,OAAO,oBAAoB;IAC/B;;;;;;;;OAQG;IACH,KAAK,CAAC,cAAc,CAAC,OAIpB;QACC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,mCAAmC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,4BAA4B;QAC5B,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,OAAuB,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,KAAK,EAAE,OAAO,CAAC;QACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,KAAK,EAAE,QAAQ,CAAC;QAEpD,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,oBAAoB,MAAM,CAAC,OAAO,kCAAkC,CAAC,CAAC;QACxF,CAAC;QAED,kCAAkC;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;QACrC,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB;QACvE,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;QAE3D,2BAA2B;QAC3B,MAAM,eAAe,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAE3D,sDAAsD;QACtD,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAExD,0BAA0B;QAC1B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC;YAC1B,UAAU,EAAE,MAAM,CAAC,OAAO;YAC1B,UAAU,EAAE,aAAa;YACzB,QAAQ,EAAE,eAAe;YACzB,QAAQ,EAAE,eAAe;YACzB,aAAa,EAAE,OAAO;YACtB,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QAEH,kCAAkC;QAClC,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAEjE,qCAAqC;QACrC,MAAM,GAAG,GAAG,YAAY,WAAW,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACxD,MAAM,KAAK,GAAG,GAAG,GAAG,aAAa,CAAC;QAElC,2DAA2D;QAC3D,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,iEAAiE;QACjE,qEAAqE;QACrE,OAAO;YACL,GAAG;YACH,KAAK;YACL,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,UAAU,EAAE,IAAI,UAAU,CAAC,UAAU,CAAC;YACtC,2EAA2E;SAC5E,CAAC;IACJ,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,uBAAuB,CAAC,OAK7B;QACC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QAED,kBAAkB;QAClB,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,mCAAmC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,4BAA4B;QAC5B,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,OAAuB,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,KAAK,EAAE,OAAO,CAAC;QACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,KAAK,EAAE,QAAQ,CAAC;QAEpD,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,oBAAoB,MAAM,CAAC,OAAO,kCAAkC,CAAC,CAAC;QACxF,CAAC;QAED,sCAAsC;QACtC,MAAM,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;YACvD,CAAC,CAAC,OAAO,CAAC,UAAU;YACpB,CAAC,CAAC,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC;QAEzC,2BAA2B;QAC3B,MAAM,eAAe,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAExD,0BAA0B;QAC1B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC;YAC1B,UAAU,EAAE,MAAM,CAAC,OAAO;YAC1B,UAAU,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;YAClC,QAAQ,EAAE,eAAe;YACzB,QAAQ,EAAE,eAAe;YACzB,aAAa,EAAE,OAAO;YACtB,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QAEH,qCAAqC;QACrC,iFAAiF;QACjF,iEAAiE;QACjE,MAAM,WAAW,GAAG,2BAA2B,CAAC;QAChD,MAAM,YAAY,GAAG,WAAW,WAAW,EAAE,CAAC;QAC9C,MAAM,QAAQ,GACZ,OAAO,OAAO,CAAC,eAAe,KAAK,QAAQ;YACzC,CAAC,CAAC,OAAO,CAAC,eAAe;YACzB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAE9C,IAAI,CAAC;YACH,gEAAgE;YAChE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,YAAY,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;YAChF,OAAO,CAAC,EAAE,CAAC,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,6CAA6C;YAC7C,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBAC3E,MAAM,IAAI,KAAK,CACb,gDAAgD;oBAC9C,4CAA4C,OAAO,CAAC,OAAO,EAAE,CAChE,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,oBAAoB,CAAC,GAAW;QAC9B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjC,CAAC;IAED;;;;;;OAMG;IACH,QAAQ,CAAC,GAAW;QAClB,OAAO,GAAG,GAAG,aAAa,CAAC;IAC7B,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,OAAe,EAAE,OAAe;QACrD,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,CAAC;gBACJ,OAAO,SAAS,CAAC;YACnB,KAAK,QAAQ;gBACX,OAAO,SAAS,CAAC;YACnB,KAAK,CAAC;gBACJ,OAAO,QAAQ,CAAC;YAClB;gBACE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QACvC,CAAC;IACH,CAAC;CACF"}

package/dist/did/handlers/web-handler.d.ts

@@ -0,0 +1,73 @@
+import type { DIDMethodHandler } from '../service.js';
+import type { DIDIdentity, ServiceEndpoint, DIDDocument } from '../types.js';
+import type { DIDConfig } from '../config-types.js';
+/**
+ * Web DID Method Handler
+ * Implements DID operations for did:web method
+ * did:web resolves DIDs through HTTPS to .well-known/did.json
+ * @implements {DIDMethodHandler}
+ */
+export declare class DIDWebMethodHandler implements DIDMethodHandler {
+    /**
+     * Create a new did:web identity
+     * @param options - Configuration options
+     * @param options.agentId - Agent unique identifier
+     * @param options.config - Web DID configuration (domain, port)
+     * @param options.services - Optional service endpoints to include in DID Document
+     * @returns Promise resolving to DID identity with document
+     * @throws {Error} When config type is not 'web' or domain is missing
+     */
+    createIdentity(options: {
+        agentId: string;
+        config: DIDConfig;
+        services?: ServiceEndpoint[];
+    }): Promise<DIDIdentity>;
+    /**
+     * Register a service endpoint for did:web
+     * No-op for did:web as service endpoints are declared in the DID Document
+     * served at .well-known/did.json (handled during DID creation)
+     * @param _options - Registration options (unused)
+     * @returns Promise resolving to empty array (no transaction hashes)
+     */
+    registerServiceEndpoint(_options: {
+        did: string;
+        privateKey: string;
+        serviceEndpoint: string;
+        config: DIDConfig;
+    }): Promise<string[]>;
+    /**
+     * Extract wallet address from did:web
+     * @param _did - DID string (unused for did:web)
+     * @returns undefined (did:web has no wallet address concept)
+     */
+    extractWalletAddress(_did: string): string | undefined;
+    /**
+     * Get key ID for did:web
+     * @param did - DID string
+     * @returns Default key identifier with #key-1 fragment
+     * @example
+     * getKeyId("did:web:example.com") // returns "did:web:example.com#key-1"
+     */
+    getKeyId(did: string): string;
+    /**
+     * Build DID Document for an existing identity
+     * @param identity - The DID identity to build document for
+     * @param options - Optional creation options (controller, services)
+     * @returns The DID Document
+     */
+    buildDocumentForIdentity(identity: DIDIdentity, options?: {
+        controller?: string;
+        services?: ServiceEndpoint[];
+    }): DIDDocument;
+    /**
+     * Internal: Build DID Document
+     * @param did - The DID string
+     * @param keyId - The key ID
+     * @param publicKey - The public key bytes
+     * @param controller - Optional controller DID
+     * @param services - Optional service endpoints
+     * @returns The DID Document
+     */
+    private buildDocumentInternal;
+}
+//# sourceMappingURL=web-handler.d.ts.map

package/dist/did/handlers/web-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-handler.d.ts","sourceRoot":"","sources":["../../../src/did/handlers/web-handler.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,WAAW,EAAc,MAAM,aAAa,CAAC;AACzF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AA+CpD;;;;;GAKG;AACH,qBAAa,mBAAoB,YAAW,gBAAgB;IAC1D;;;;;;;;OAQG;IACG,cAAc,CAAC,OAAO,EAAE;QAC5B,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,SAAS,CAAC;QAClB,QAAQ,CAAC,EAAE,eAAe,EAAE,CAAC;KAC9B,GAAG,OAAO,CAAC,WAAW,CAAC;IAyCxB;;;;;;OAMG;IACG,uBAAuB,CAAC,QAAQ,EAAE;QACtC,GAAG,EAAE,MAAM,CAAC;QACZ,UAAU,EAAE,MAAM,CAAC;QACnB,eAAe,EAAE,MAAM,CAAC;QACxB,MAAM,EAAE,SAAS,CAAC;KACnB,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAOrB;;;;OAIG;IACH,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAKtD;;;;;;OAMG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;IAI7B;;;;;OAKG;IACH,wBAAwB,CACtB,QAAQ,EAAE,WAAW,EACrB,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,CAAA;KAAE,GAC9D,WAAW;IAWd;;;;;;;;OAQG;IACH,OAAO,CAAC,qBAAqB;CAmC9B"}

package/dist/did/handlers/web-handler.js

@@ -0,0 +1,170 @@
+/**
+ * Web DID Method Handler
+ * Handles DID operations for did:web
+ */
+import { ES256KSigner } from 'did-jwt';
+import { getPublicKey } from '@noble/secp256k1';
+import * as u8a from 'uint8arrays';
+/**
+ * Generate cryptographically secure random bytes
+ */
+function randomBytes(size) {
+    const cryptoProvider = globalThis.crypto;
+    if (!cryptoProvider?.getRandomValues) {
+        throw new Error('crypto.getRandomValues is required for did:web key generation');
+    }
+    const bytes = new Uint8Array(size);
+    cryptoProvider.getRandomValues(bytes);
+    return bytes;
+}
+/**
+ * Convert public key to JWK format
+ * @param publicKey - The secp256k1 public key bytes (33 or 65 bytes)
+ * @returns The public key in JWK format
+ */
+function publicKeyToJwk(publicKey) {
+    // For secp256k1, we need to handle compressed (33 bytes) or uncompressed (65 bytes) keys
+    // The compressed key starts with 0x02 or 0x03, uncompressed with 0x04
+    // For compressed key, we store it as-is and use crv: secp256k1
+    // JWK for secp256k1 uses x and y coordinates (32 bytes each)
+    if (publicKey.length === 33) {
+        // Compressed key - store as x coordinate with compressed flag
+        return {
+            kty: 'EC',
+            crv: 'secp256k1',
+            x: u8a.toString(publicKey.slice(1), 'base64url'),
+        };
+    }
+    // Uncompressed key (65 bytes: 04 || x || y)
+    const x = publicKey.slice(1, 33);
+    const y = publicKey.slice(33, 65);
+    return {
+        kty: 'EC',
+        crv: 'secp256k1',
+        x: u8a.toString(x, 'base64url'),
+        y: u8a.toString(y, 'base64url'),
+    };
+}
+/**
+ * Web DID Method Handler
+ * Implements DID operations for did:web method
+ * did:web resolves DIDs through HTTPS to .well-known/did.json
+ * @implements {DIDMethodHandler}
+ */
+export class DIDWebMethodHandler {
+    /**
+     * Create a new did:web identity
+     * @param options - Configuration options
+     * @param options.agentId - Agent unique identifier
+     * @param options.config - Web DID configuration (domain, port)
+     * @param options.services - Optional service endpoints to include in DID Document
+     * @returns Promise resolving to DID identity with document
+     * @throws {Error} When config type is not 'web' or domain is missing
+     */
+    async createIdentity(options) {
+        const config = options.config;
+        if (config.type !== 'web') {
+            throw new Error('Invalid config for did:web');
+        }
+        if (!config.domain) {
+            throw new Error('Domain is required for did:web');
+        }
+        // Generate secp256k1 key pair
+        const privateKey = new Uint8Array(randomBytes(32));
+        const publicKey = getPublicKey(privateKey, false); // uncompressed
+        // Build DID string
+        // Encode special characters (: → %3A for port numbers)
+        const encodedDomain = `${config.domain}:${config.port}`.replace(/:/g, '%3A');
+        const path = `agents/${options.agentId}`;
+        const did = `did:web:${encodedDomain}:${path.split('/').join(':')}`;
+        const keyId = `${did}#key-1`;
+        const signer = ES256KSigner(privateKey);
+        // Build DID Document
+        const document = this.buildDocumentInternal(did, keyId, publicKey, config.controller, options.services);
+        return {
+            did,
+            keyId,
+            signer,
+            document,
+            privateKey,
+        };
+    }
+    /**
+     * Register a service endpoint for did:web
+     * No-op for did:web as service endpoints are declared in the DID Document
+     * served at .well-known/did.json (handled during DID creation)
+     * @param _options - Registration options (unused)
+     * @returns Promise resolving to empty array (no transaction hashes)
+     */
+    async registerServiceEndpoint(_options) {
+        // did:web does not require on-chain service registration
+        // Services are declared in the DID Document served at .well-known/did.json
+        // This is already handled during DID creation
+        return [];
+    }
+    /**
+     * Extract wallet address from did:web
+     * @param _did - DID string (unused for did:web)
+     * @returns undefined (did:web has no wallet address concept)
+     */
+    extractWalletAddress(_did) {
+        // did:web does not have a wallet address
+        return undefined;
+    }
+    /**
+     * Get key ID for did:web
+     * @param did - DID string
+     * @returns Default key identifier with #key-1 fragment
+     * @example
+     * getKeyId("did:web:example.com") // returns "did:web:example.com#key-1"
+     */
+    getKeyId(did) {
+        return `${did}#key-1`;
+    }
+    /**
+     * Build DID Document for an existing identity
+     * @param identity - The DID identity to build document for
+     * @param options - Optional creation options (controller, services)
+     * @returns The DID Document
+     */
+    buildDocumentForIdentity(identity, options) {
+        const publicKey = getPublicKey(identity.privateKey, false);
+        return this.buildDocumentInternal(identity.did, identity.keyId, publicKey, options?.controller, options?.services);
+    }
+    /**
+     * Internal: Build DID Document
+     * @param did - The DID string
+     * @param keyId - The key ID
+     * @param publicKey - The public key bytes
+     * @param controller - Optional controller DID
+     * @param services - Optional service endpoints
+     * @returns The DID Document
+     */
+    buildDocumentInternal(did, keyId, publicKey, controller, services) {
+        const doc = {
+            '@context': [
+                'https://www.w3.org/ns/did/v1',
+                'https://w3id.org/security/suites/jws-2020/v1',
+            ],
+            id: did,
+            verificationMethod: [
+                {
+                    id: keyId,
+                    type: 'JsonWebKey2020',
+                    controller: did,
+                    publicKeyJwk: publicKeyToJwk(publicKey),
+                },
+            ],
+            authentication: [keyId],
+            assertionMethod: [keyId],
+        };
+        if (controller) {
+            doc.controller = controller;
+        }
+        if (services && services.length > 0) {
+            doc.service = services;
+        }
+        return doc;
+    }
+}
+//# sourceMappingURL=web-handler.js.map

package/dist/did/handlers/web-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-handler.js","sourceRoot":"","sources":["../../../src/did/handlers/web-handler.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,KAAK,GAAG,MAAM,aAAa,CAAC;AAKnC;;GAEG;AACH,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC;IACzC,IAAI,CAAC,cAAc,EAAE,eAAe,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IACnC,cAAc,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IACtC,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,SAAqB;IAC3C,yFAAyF;IACzF,sEAAsE;IAEtE,+DAA+D;IAC/D,6DAA6D;IAC7D,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC5B,8DAA8D;QAC9D,OAAO;YACL,GAAG,EAAE,IAAI;YACT,GAAG,EAAE,WAAW;YAChB,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC;SACjD,CAAC;IACJ,CAAC;IAED,4CAA4C;IAC5C,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjC,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAElC,OAAO;QACL,GAAG,EAAE,IAAI;QACT,GAAG,EAAE,WAAW;QAChB,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,WAAW,CAAC;QAC/B,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,WAAW,CAAC;KAChC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,mBAAmB;IAC9B;;;;;;;;OAQG;IACH,KAAK,CAAC,cAAc,CAAC,OAIpB;QACC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QAED,8BAA8B;QAC9B,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,YAAY,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,eAAe;QAElE,mBAAmB;QACnB,uDAAuD;QACvD,MAAM,aAAa,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC7E,MAAM,IAAI,GAAG,UAAU,OAAO,CAAC,OAAO,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,WAAW,aAAa,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAEpE,MAAM,KAAK,GAAG,GAAG,GAAG,QAAQ,CAAC;QAC7B,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;QAExC,qBAAqB;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,qBAAqB,CACzC,GAAG,EACH,KAAK,EACL,SAAS,EACT,MAAM,CAAC,UAAU,EACjB,OAAO,CAAC,QAAQ,CACjB,CAAC;QAEF,OAAO;YACL,GAAG;YACH,KAAK;YACL,MAAM;YACN,QAAQ;YACR,UAAU;SACX,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,uBAAuB,CAAC,QAK7B;QACC,yDAAyD;QACzD,2EAA2E;QAC3E,8CAA8C;QAC9C,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;;;OAIG;IACH,oBAAoB,CAAC,IAAY;QAC/B,yCAAyC;QACzC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;OAMG;IACH,QAAQ,CAAC,GAAW;QAClB,OAAO,GAAG,GAAG,QAAQ,CAAC;IACxB,CAAC;IAED;;;;;OAKG;IACH,wBAAwB,CACtB,QAAqB,EACrB,OAA+D;QAE/D,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,qBAAqB,CAC/B,QAAQ,CAAC,GAAG,EACZ,QAAQ,CAAC,KAAK,EACd,SAAS,EACT,OAAO,EAAE,UAAU,EACnB,OAAO,EAAE,QAAQ,CAClB,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACK,qBAAqB,CAC3B,GAAW,EACX,KAAa,EACb,SAAqB,EACrB,UAAmB,EACnB,QAA4B;QAE5B,MAAM,GAAG,GAAgB;YACvB,UAAU,EAAE;gBACV,8BAA8B;gBAC9B,8CAA8C;aAC/C;YACD,EAAE,EAAE,GAAG;YACP,kBAAkB,EAAE;gBAClB;oBACE,EAAE,EAAE,KAAK;oBACT,IAAI,EAAE,gBAAgB;oBACtB,UAAU,EAAE,GAAG;oBACf,YAAY,EAAE,cAAc,CAAC,SAAS,CAAC;iBACxC;aACF;YACD,cAAc,EAAE,CAAC,KAAK,CAAC;YACvB,eAAe,EAAE,CAAC,KAAK,CAAC;SACzB,CAAC;QAEF,IAAI,UAAU,EAAE,CAAC;YACf,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC;QAC9B,CAAC;QAED,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,GAAG,CAAC,OAAO,GAAG,QAAQ,CAAC;QACzB,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;CACF"}

package/dist/did/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * DID Module
+ * @module did
+ */
+export * from './types.js';
+export * from './service.js';
+export * from './factory.js';
+export * from './resolver.js';
+export * from './signing.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/did/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/did/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,cAAc,YAAY,CAAC;AAG3B,cAAc,cAAc,CAAC;AAG7B,cAAc,cAAc,CAAC;AAG7B,cAAc,eAAe,CAAC;AAG9B,cAAc,cAAc,CAAC"}

package/dist/did/index.js

@@ -0,0 +1,15 @@
+/**
+ * DID Module
+ * @module did
+ */
+// Core types and interfaces
+export * from './types.js';
+// DID Service (requires explicit handler registration)
+export * from './service.js';
+// Factory helper (lazy loading with tree-shaking)
+export * from './factory.js';
+// Resolver
+export * from './resolver.js';
+// Signing utilities
+export * from './signing.js';
+//# sourceMappingURL=index.js.map

package/dist/did/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/did/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,4BAA4B;AAC5B,cAAc,YAAY,CAAC;AAE3B,uDAAuD;AACvD,cAAc,cAAc,CAAC;AAE7B,kDAAkD;AAClD,cAAc,cAAc,CAAC;AAE7B,WAAW;AACX,cAAc,eAAe,CAAC;AAE9B,oBAAoB;AACpB,cAAc,cAAc,CAAC"}

package/dist/did/resolver.d.ts

@@ -0,0 +1,85 @@
+/**
+ * DID Resolver
+ * Combines modular resolvers for different DID methods
+ * @module did/resolver
+ */
+import { Resolver } from 'did-resolver';
+import { type EthrResolverConfig } from './resolvers/ethr.js';
+import type { DIDDocument } from './types.js';
+/**
+ * Resolver configuration
+ * Specify which DID methods to enable and their configurations
+ */
+export interface ResolverConfig {
+    /** Enable did:web resolver (default: true) */
+    web?: boolean;
+    /** did:ethr configuration (omit to disable) */
+    ethr?: EthrResolverConfig;
+}
+/**
+ * Create a new DID resolver with specified configuration
+ * @param config - Resolver configuration
+ * @returns Configured Resolver instance
+ *
+ * @example
+ * // did:web only (no external dependencies)
+ * const resolver = createResolver({ web: true });
+ *
+ * @example
+ * // did:web + did:ethr
+ * const resolver = createResolver({
+ *   web: true,
+ *   ethr: {
+ *     networks: [{
+ *       name: 'sepolia',
+ *       rpcUrl: 'https://sepolia.infura.io/v3/YOUR_KEY',
+ *     }]
+ *   }
+ * });
+ */
+export declare function createResolver(config?: ResolverConfig): Resolver;
+/**
+ * Configure the default resolver
+ * Call this at application startup to set up DID resolution
+ *
+ * IMPORTANT: If you use did:ethr, you MUST call this function before resolving did:ethr DIDs.
+ * Otherwise, did:ethr resolution will fail.
+ *
+ * @param config - Resolver configuration
+ *
+ * @example
+ * // In your app initialization (required for did:ethr)
+ * configureResolver({
+ *   web: true,
+ *   ethr: {
+ *     networks: [{ name: 'sepolia', rpcUrl: process.env.SEPOLIA_RPC_URL }]
+ *   }
+ * });
+ */
+export declare function configureResolver(config: ResolverConfig): void;
+/**
+ * Get the default resolver instance
+ * If not configured, creates a did:web-only resolver
+ * @returns The default Resolver instance
+ */
+export declare function getResolver(): Resolver;
+/**
+ * Get the current resolver configuration
+ * @returns Current configuration or null if using defaults
+ */
+export declare function getResolverConfig(): ResolverConfig | null;
+/**
+ * Check if a specific DID method is enabled
+ * @param method - DID method to check (e.g., 'web', 'ethr')
+ * @returns true if the method is enabled in the current configuration
+ */
+export declare function isMethodEnabled(method: 'web' | 'ethr'): boolean;
+/**
+ * Resolve a DID to its document
+ * @param did - The DID to resolve
+ * @returns The DID Document if found, null otherwise
+ */
+export declare function resolveDID(did: string): Promise<DIDDocument | null>;
+export { createWebResolver } from './resolvers/web.js';
+export { createEthrResolver, createSepoliaResolver, KNOWN_NETWORKS, type EthrNetworkConfig, type EthrResolverConfig, type KnownNetwork, } from './resolvers/ethr.js';
+//# sourceMappingURL=resolver.d.ts.map

package/dist/did/resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../../src/did/resolver.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,QAAQ,EAAoB,MAAM,cAAc,CAAC;AAE1D,OAAO,EAAsB,KAAK,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,8CAA8C;IAC9C,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,+CAA+C;IAC/C,IAAI,CAAC,EAAE,kBAAkB,CAAC;CAK3B;AAMD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,cAAc,CAAC,MAAM,GAAE,cAAmB,GAAG,QAAQ,CAgBpE;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAG9D;AAED;;;;GAIG;AACH,wBAAgB,WAAW,IAAI,QAAQ,CAOtC;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,cAAc,GAAG,IAAI,CAEzD;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,CAU/D;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAOzE;AAGD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,cAAc,EACd,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,YAAY,GAClB,MAAM,qBAAqB,CAAC"}