a2a-did 0.1.0

package/dist/did/signing.d.ts

@@ -0,0 +1,19 @@
+export interface JWSSignature {
+    protected: string;
+    signature: string;
+}
+export interface SignedPayload<T> {
+    payload: T;
+    signatures: JWSSignature[];
+}
+/**
+ * Sign a payload with a DID using ES256K (secp256k1)
+ * @param payload - Data to sign
+ * @param did - DID string (e.g., "did:ethr:sepolia:0x...")
+ * @param privateKey - Private key (hex string)
+ * @returns Signed payload with JWS signatures
+ */
+export declare function signWithDID<T extends object>(payload: T, did: string, privateKey: string, keyId?: string): Promise<T & {
+    signatures: JWSSignature[];
+}>;
+//# sourceMappingURL=signing.d.ts.map

package/dist/did/signing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.d.ts","sourceRoot":"","sources":["../../src/did/signing.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa,CAAC,CAAC;IAC9B,OAAO,EAAE,CAAC,CAAC;IACX,UAAU,EAAE,YAAY,EAAE,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,wBAAsB,WAAW,CAAC,CAAC,SAAS,MAAM,EAChD,OAAO,EAAE,CAAC,EACV,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,EAClB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,CAAC,GAAG;IAAE,UAAU,EAAE,YAAY,EAAE,CAAA;CAAE,CAAC,CA2B7C"}

package/dist/did/signing.js

@@ -0,0 +1,37 @@
+/**
+ * DID Signing Utilities
+ * Provides cryptographic signing operations for DIDs
+ */
+import { createJWS, ES256KSigner } from 'did-jwt';
+import * as u8a from 'uint8arrays';
+/**
+ * Sign a payload with a DID using ES256K (secp256k1)
+ * @param payload - Data to sign
+ * @param did - DID string (e.g., "did:ethr:sepolia:0x...")
+ * @param privateKey - Private key (hex string)
+ * @returns Signed payload with JWS signatures
+ */
+export async function signWithDID(payload, did, privateKey, keyId) {
+    // Convert hex string to Uint8Array
+    const privateKeyBytes = u8a.fromString(privateKey, 'base16');
+    // Create ES256K signer
+    const signer = ES256KSigner(privateKeyBytes);
+    const keyIdValue = keyId ?? `${did}#controller`;
+    // Create JWS
+    const jws = await createJWS(payload, signer, { alg: 'ES256K', kid: keyIdValue });
+    // Parse JWS (format: "header.payload.signature")
+    const [protectedHeader, _payload, signature] = jws.split('.');
+    if (!protectedHeader || !signature) {
+        throw new Error('Invalid JWS format');
+    }
+    return {
+        ...payload,
+        signatures: [
+            {
+                protected: protectedHeader,
+                signature,
+            },
+        ],
+    };
+}
+//# sourceMappingURL=signing.js.map

package/dist/did/signing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.js","sourceRoot":"","sources":["../../src/did/signing.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,KAAK,GAAG,MAAM,aAAa,CAAC;AAYnC;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAU,EACV,GAAW,EACX,UAAkB,EAClB,KAAc;IAEd,mCAAmC;IACnC,MAAM,eAAe,GAAG,GAAG,CAAC,UAAU,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAE7D,uBAAuB;IACvB,MAAM,MAAM,GAAG,YAAY,CAAC,eAAe,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,KAAK,IAAI,GAAG,GAAG,aAAa,CAAC;IAEhD,aAAa;IACb,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;IAEjF,iDAAiD;IACjD,MAAM,CAAC,eAAe,EAAE,QAAQ,EAAE,SAAS,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAE9D,IAAI,CAAC,eAAe,IAAI,CAAC,SAAS,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,CAAC;IAED,OAAO;QACL,GAAG,OAAO;QACV,UAAU,EAAE;YACV;gBACE,SAAS,EAAE,eAAe;gBAC1B,SAAS;aACV;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/did/types.d.ts

@@ -0,0 +1,134 @@
+/**
+ * DID Types and Interfaces
+ * Extensible design for multiple DID methods (did:web, did:ethr)
+ * @module did/types
+ */
+import type { Signer } from 'did-jwt';
+/**
+ * JSON Web Key (minimal definition for Node.js)
+ * @see https://datatracker.ietf.org/doc/html/rfc7517
+ */
+export interface JsonWebKey {
+    /** Key type (e.g., "EC", "RSA") */
+    kty?: string;
+    /** Curve name for EC keys (e.g., "secp256k1") */
+    crv?: string;
+    /** X coordinate for EC keys (base64url encoded) */
+    x?: string;
+    /** Y coordinate for EC keys (base64url encoded) */
+    y?: string;
+    /** Private key for EC keys (base64url encoded) */
+    d?: string;
+    /** Modulus for RSA keys */
+    n?: string;
+    /** Exponent for RSA keys */
+    e?: string;
+    /** Key ID */
+    kid?: string;
+    /** Public key use (e.g., "sig", "enc") */
+    use?: string;
+    /** Algorithm (e.g., "ES256K") */
+    alg?: string;
+}
+/**
+ * Verification Method in DID Document
+ * @see https://www.w3.org/TR/did-core/#verification-methods
+ */
+export interface VerificationMethod {
+    /** Verification method ID (e.g., "did:web:example.com#key-1") */
+    id: string;
+    /** Type of verification method (e.g., "JsonWebKey2020") */
+    type: string;
+    /** DID of the controller */
+    controller: string;
+    /** Public key in JWK format */
+    publicKeyJwk?: JsonWebKey;
+    /** Public key in multibase format */
+    publicKeyMultibase?: string;
+}
+/**
+ * Service Endpoint in DID Document
+ * Used for self-declaration of communication endpoints
+ * @see https://www.w3.org/TR/did-core/#services
+ */
+export interface ServiceEndpoint {
+    /** Service ID (e.g., "did:web:example.com#agent-card") */
+    id: string;
+    /** Service type (e.g., "A2AAgentCard") */
+    type: string;
+    /** Service endpoint URL or configuration */
+    serviceEndpoint: string | string[] | Record<string, unknown>;
+}
+/**
+ * DID Document (W3C DID Core compliant)
+ * @see https://www.w3.org/TR/did-core/#core-properties
+ */
+export interface DIDDocument {
+    /** JSON-LD context */
+    '@context': string | string[];
+    /** The DID subject */
+    id: string;
+    /** Controller DID(s) */
+    controller?: string | string[];
+    /** Verification methods */
+    verificationMethod?: VerificationMethod[];
+    /** Authentication verification methods */
+    authentication?: (string | VerificationMethod)[];
+    /** Assertion verification methods */
+    assertionMethod?: (string | VerificationMethod)[];
+    /** Key agreement verification methods */
+    keyAgreement?: (string | VerificationMethod)[];
+    /** Service endpoints */
+    service?: ServiceEndpoint[];
+}
+/**
+ * Options for creating a new DID
+ */
+export interface DIDCreateOptions {
+    /** Domain for did:web (e.g., "example.com" or "localhost:3001") */
+    domain?: string;
+    /** Path segments for did:web (e.g., ['agents', 'agent-a']) */
+    path?: string[];
+    /** Controller DID (e.g., a Human's DID that controls this Agent) */
+    controller?: string;
+    /** Service endpoints to include in the DID Document */
+    services?: ServiceEndpoint[];
+}
+/**
+ * Result of creating a new DID identity
+ * Contains everything needed to use the DID for signing and verification
+ */
+export interface DIDIdentity {
+    /** The DID string (e.g., "did:web:example.com:agents:bot-1") */
+    did: string;
+    /** Key ID for signing (e.g., "did:web:example.com:agents:bot-1#key-1") */
+    keyId: string;
+    /** Signer function for creating JWS/JWT signatures */
+    signer: Signer;
+    /**
+     * The DID Document (optional)
+     * - did:web: Available immediately (locally generated for HTTP serving)
+     * - did:ethr: Not available at creation time (resolve via resolveDID() when needed)
+     */
+    document?: DIDDocument;
+    /** Private key bytes (for storage/recovery) */
+    privateKey: Uint8Array;
+}
+/**
+ * DID Resolution Result
+ * @see https://www.w3.org/TR/did-core/#did-resolution
+ */
+export interface DIDResolutionResult {
+    /** The resolved DID Document, or null if resolution failed */
+    didDocument: DIDDocument | null;
+    /** Metadata about the DID Document */
+    didDocumentMetadata: Record<string, unknown>;
+    /** Metadata about the resolution process */
+    didResolutionMetadata: {
+        /** Error code if resolution failed */
+        error?: string;
+        /** Error message */
+        message?: string;
+    };
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/did/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/did/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEtC;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,mCAAmC;IACnC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,iDAAiD;IACjD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,mDAAmD;IACnD,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,kDAAkD;IAClD,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,2BAA2B;IAC3B,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,4BAA4B;IAC5B,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,aAAa;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,0CAA0C;IAC1C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAGD;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,iEAAiE;IACjE,EAAE,EAAE,MAAM,CAAC;IACX,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,4BAA4B;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,+BAA+B;IAC/B,YAAY,CAAC,EAAE,UAAU,CAAC;IAC1B,qCAAqC;IACrC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,0DAA0D;IAC1D,EAAE,EAAE,MAAM,CAAC;IACX,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,4CAA4C;IAC5C,eAAe,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9D;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,sBAAsB;IACtB,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC9B,sBAAsB;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,wBAAwB;IACxB,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC/B,2BAA2B;IAC3B,kBAAkB,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC1C,0CAA0C;IAC1C,cAAc,CAAC,EAAE,CAAC,MAAM,GAAG,kBAAkB,CAAC,EAAE,CAAC;IACjD,qCAAqC;IACrC,eAAe,CAAC,EAAE,CAAC,MAAM,GAAG,kBAAkB,CAAC,EAAE,CAAC;IAClD,yCAAyC;IACzC,YAAY,CAAC,EAAE,CAAC,MAAM,GAAG,kBAAkB,CAAC,EAAE,CAAC;IAC/C,wBAAwB;IACxB,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8DAA8D;IAC9D,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,oEAAoE;IACpE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uDAAuD;IACvD,QAAQ,CAAC,EAAE,eAAe,EAAE,CAAC;CAC9B;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,gEAAgE;IAChE,GAAG,EAAE,MAAM,CAAC;IACZ,0EAA0E;IAC1E,KAAK,EAAE,MAAM,CAAC;IACd,sDAAsD;IACtD,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB,+CAA+C;IAC/C,UAAU,EAAE,UAAU,CAAC;CACxB;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,8DAA8D;IAC9D,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC;IAChC,sCAAsC;IACtC,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7C,4CAA4C;IAC5C,qBAAqB,EAAE;QACrB,sCAAsC;QACtC,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,oBAAoB;QACpB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;CACH"}

package/dist/did/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/did/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/did/types.ts"],"names":[],"mappings":""}

package/dist/index.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Core package entry point
+ * Exports DID-related types, providers, resolvers, and helper utilities
+ * for creating and managing decentralized identities
+ */
+export * from './did/types.js';
+export * from './did/config-types.js';
+export * from './did/resolver.js';
+export * from './did/factory.js';
+export * from './did/service.js';
+export * from './did/service-loader.js';
+export * from './did/signing.js';
+export * from './did/document.js';
+export * from './a2a/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,cAAc,gBAAgB,CAAC;AAC/B,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAGlC,cAAc,gBAAgB,CAAC"}

package/dist/index.js

@@ -0,0 +1,17 @@
+/**
+ * Core package entry point
+ * Exports DID-related types, providers, resolvers, and helper utilities
+ * for creating and managing decentralized identities
+ */
+// DID module
+export * from './did/types.js';
+export * from './did/config-types.js';
+export * from './did/resolver.js';
+export * from './did/factory.js';
+export * from './did/service.js';
+export * from './did/service-loader.js';
+export * from './did/signing.js';
+export * from './did/document.js';
+// A2A integration (DID-based signing and verification)
+export * from './a2a/index.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,aAAa;AACb,cAAc,gBAAgB,CAAC;AAC/B,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAElC,uDAAuD;AACvD,cAAc,gBAAgB,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Signed payload in JWS format.
+ * @typeParam T - Payload type
+ */
+export interface SignedPayload<T = Record<string, unknown>> {
+    /** JWS compact serialization */
+    jws: string;
+    /** Original payload */
+    payload: T;
+}
+/**
+ * Verification result.
+ * @typeParam T - Payload type
+ */
+export interface VerificationResult<T = Record<string, unknown>> {
+    /** Whether the signature is valid */
+    verified: boolean;
+    /** Issuer DID (empty if failed) */
+    issuer: string;
+    /** Verified payload (null if failed) */
+    payload: T | null;
+    /** Error message (if failed) */
+    error?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,WAAW,aAAa,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACxD,gCAAgC;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,uBAAuB;IACvB,OAAO,EAAE,CAAC,CAAC;CACZ;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAC7D,qCAAqC;IACrC,QAAQ,EAAE,OAAO,CAAC;IAClB,mCAAmC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,wCAAwC;IACxC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC;IAClB,gCAAgC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,70 @@
+{
+  "name": "a2a-did",
+  "version": "0.1.0",
+  "description": "DID-based authentication for A2A Protocol - Sign and verify agent messages with did:web and did:ethr",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "engines": {
+    "node": ">=22.0.0"
+  },
+  "license": "MIT",
+  "author": "humuhimi",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/humuhimi/a2a-did.git"
+  },
+  "homepage": "https://github.com/humuhimi/a2a-did#readme",
+  "bugs": {
+    "url": "https://github.com/humuhimi/a2a-did/issues"
+  },
+  "keywords": [
+    "a2a",
+    "did",
+    "agent",
+    "authentication",
+    "decentralized-identity",
+    "did-web",
+    "did-ethr",
+    "jws",
+    "ai-agent"
+  ],
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "dependencies": {
+    "@helia/verified-fetch": "^5.1.1",
+    "@noble/secp256k1": "^3.0.0",
+    "did-jwt": "^8.0.18",
+    "did-resolver": "^4.1.0",
+    "ethers": "^6.16.0",
+    "ethr-did": "^3.0.38",
+    "ethr-did-resolver": "^11.0.5",
+    "multiformats": "^13.4.2",
+    "uint8arrays": "^5.1.0",
+    "web-did-resolver": "^2.0.32"
+  },
+  "devDependencies": {
+    "@types/node": "^25.0.3",
+    "@vitest/coverage-v8": "^4.0.16",
+    "tsx": "^4.21.0",
+    "typescript": "^5.9.3",
+    "vitest": "^4.0.16"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage"
+  }
+}