antifraud-sdk-core-ts 0.1.1 → 0.1.3

package/CHANGELOG.md

@@ -2,6 +2,25 @@
 
 ## Unreleased
 
+## 0.1.3 - 2026-10-18
+
+- Consume `antifraud-data-utils-ts@0.1.4` and orchestrate Schema.org
+  confidential-document delivery through canonical inline or protected-link
+  DIDComm attachments.
+- Preserve trusted sender and recipient bindings, idempotent operation replay,
+  exact byte-count agreement and separate delivery, read and signature states.
+
+## 0.1.2 - 2026-10-18
+
+- Replace binary qualification-issuer lookup with explicit
+  `participant-resolved`, `identity-resolved` and `not-resolved` outcomes.
+- Record employer evidence for a known non-participating issuer as
+  `awaiting-issuer-onboarding` without fabricating a tenant or queueing a
+  confirmation request.
+- Reuse the canonical CIDv1(raw, SHA3-384) validator and synthetic attachment
+  fixture from `antifraud-data-utils-ts@0.1.3` instead of duplicating the
+  multibase and multihash implementation.
+
 ## 0.1.1 - 2026-10-17
 
 - Add runtime-neutral authoritative credential issuance orchestration using

package/README.md

@@ -4,7 +4,8 @@ Runtime-neutral orchestration contracts for identity verification, subject and r
 
 ## Status
 
-Public implementation foundation. No package has been published and no production readiness is claimed yet.
+Published public implementation foundation. Registry publication proves the
+package artifact only; no deployment or production readiness is claimed.
 
 ## Responsibility
 
@@ -65,12 +66,26 @@ jurisdiction. If no source credential exists, the employer may sign its own
 attestation but must not be represented as the awarding organization's issuer.
 
 The implemented qualification-evidence controller records the employer's proof
-through a trusted port, resolves the claimed issuer by legal identifier and
-jurisdiction, anchors only opaque continuity, and queues a tenant-to-tenant
-confirmation request. See [Qualification evidence confirmation prototype](docs/QUALIFICATION_EVIDENCE_CONFIRMATION.md)
+through a trusted port and resolves the claimed issuer by legal identifier and
+jurisdiction with three explicit outcomes. A participating issuer has a known
+tenant and confirmation service, so the controller anchors opaque continuity
+and queues a tenant-to-tenant confirmation request. A known legal identity
+without a participating tenant is recorded as `awaiting-issuer-onboarding`
+without sending a message or inventing tenant authority. An unresolved identity
+fails before evidence recording. See [Qualification evidence confirmation prototype](docs/QUALIFICATION_EVIDENCE_CONFIRMATION.md)
 for attachment, issuer notification, ledger recovery and credential-rendering
 boundaries.
 
+## Schema.org document delivery
+
+Antifraud documents are Schema.org `DigitalDocument` resources with concrete
+`MediaObject` encodings. They are never FHIR `DocumentReference` resources.
+`createDocumentDeliveryController` consumes the canonical data-utils contract
+and carries governed bytes through DIDComm `attachments[]`, inline or by
+protected reference. Trusted sender, recipient and service bindings remain
+server-owned; replay is operation-idempotent; receipt storage contains no raw
+bytes. Delivery, read and signature remain distinct states.
+
 ## Dependency direction
 
 ```text

package/dist/document-delivery-controller.d.ts

@@ -0,0 +1,62 @@
+import { buildSchemaOrgConfidentialDocumentGraph, type DidCommBinaryAttachment, type SchemaOrgDigitalDocumentDescriptor, type SchemaOrgEvidenceMediaAttachment } from 'antifraud-data-utils-ts';
+export type TrustedDocumentDeliveryContext = Readonly<{
+    senderReference: string;
+    recipientReference: string;
+    serviceReference: string;
+}>;
+export type DocumentDeliveryAttachmentInput = Readonly<{
+    kind: 'inline';
+    mediaObject: SchemaOrgEvidenceMediaAttachment;
+    bytes: Uint8Array;
+}> | Readonly<{
+    kind: 'linked';
+    mediaObject: SchemaOrgEvidenceMediaAttachment;
+}>;
+export type DocumentDeliveryRequest = Readonly<{
+    operationId: string;
+    messageId: string;
+    trustedContext: TrustedDocumentDeliveryContext;
+    manifest: SchemaOrgDigitalDocumentDescriptor;
+    document: SchemaOrgDigitalDocumentDescriptor;
+    attachment: DocumentDeliveryAttachmentInput;
+}>;
+export type PreparedDocumentDelivery = Readonly<{
+    operationId: string;
+    messageId: string;
+    trustedContext: TrustedDocumentDeliveryContext;
+    documentGraph: ReturnType<typeof buildSchemaOrgConfidentialDocumentGraph>;
+    attachments: readonly [DidCommBinaryAttachment];
+}>;
+export type DocumentDeliveryReceipt = Readonly<{
+    operationId: string;
+    messageId: string;
+    deliveryReference: string;
+    deliveredAt: string;
+    deliveryStatus: 'delivered';
+    readStatus: 'unread';
+    signatureStatus: 'unsigned';
+}>;
+type DocumentDeliveryContinuity = Readonly<{
+    messageId: string;
+    senderReference: string;
+    recipientReference: string;
+    contentId: string;
+    receipt: DocumentDeliveryReceipt;
+}>;
+export type DocumentDeliveryControllerPorts = Readonly<{
+    transport: Readonly<{
+        send(delivery: PreparedDocumentDelivery): Promise<Readonly<{
+            deliveryReference: string;
+            deliveredAt: string;
+        }>>;
+    }>;
+    receipts: Readonly<{
+        get(operationId: string): Promise<DocumentDeliveryContinuity | undefined>;
+        put(operationId: string, record: DocumentDeliveryContinuity): Promise<void>;
+    }>;
+}>;
+export declare function createDocumentDeliveryController(ports: DocumentDeliveryControllerPorts): Readonly<{
+    deliver(request: DocumentDeliveryRequest): Promise<DocumentDeliveryReceipt>;
+}>;
+export {};
+//# sourceMappingURL=document-delivery-controller.d.ts.map

package/dist/document-delivery-controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-delivery-controller.d.ts","sourceRoot":"","sources":["../src/document-delivery-controller.ts"],"names":[],"mappings":"AAEA,OAAO,EAGL,uCAAuC,EACvC,KAAK,uBAAuB,EAC5B,KAAK,kCAAkC,EACvC,KAAK,gCAAgC,EACtC,MAAM,yBAAyB,CAAA;AAEhC,MAAM,MAAM,8BAA8B,GAAG,QAAQ,CAAC;IACpD,eAAe,EAAE,MAAM,CAAA;IACvB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,gBAAgB,EAAE,MAAM,CAAA;CACzB,CAAC,CAAA;AAEF,MAAM,MAAM,+BAA+B,GACvC,QAAQ,CAAC;IACP,IAAI,EAAE,QAAQ,CAAA;IACd,WAAW,EAAE,gCAAgC,CAAA;IAC7C,KAAK,EAAE,UAAU,CAAA;CAClB,CAAC,GACF,QAAQ,CAAC;IACP,IAAI,EAAE,QAAQ,CAAA;IACd,WAAW,EAAE,gCAAgC,CAAA;CAC9C,CAAC,CAAA;AAEN,MAAM,MAAM,uBAAuB,GAAG,QAAQ,CAAC;IAC7C,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,8BAA8B,CAAA;IAC9C,QAAQ,EAAE,kCAAkC,CAAA;IAC5C,QAAQ,EAAE,kCAAkC,CAAA;IAC5C,UAAU,EAAE,+BAA+B,CAAA;CAC5C,CAAC,CAAA;AAEF,MAAM,MAAM,wBAAwB,GAAG,QAAQ,CAAC;IAC9C,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,8BAA8B,CAAA;IAC9C,aAAa,EAAE,UAAU,CAAC,OAAO,uCAAuC,CAAC,CAAA;IACzE,WAAW,EAAE,SAAS,CAAC,uBAAuB,CAAC,CAAA;CAChD,CAAC,CAAA;AAEF,MAAM,MAAM,uBAAuB,GAAG,QAAQ,CAAC;IAC7C,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,iBAAiB,EAAE,MAAM,CAAA;IACzB,WAAW,EAAE,MAAM,CAAA;IACnB,cAAc,EAAE,WAAW,CAAA;IAC3B,UAAU,EAAE,QAAQ,CAAA;IACpB,eAAe,EAAE,UAAU,CAAA;CAC5B,CAAC,CAAA;AAEF,KAAK,0BAA0B,GAAG,QAAQ,CAAC;IACzC,SAAS,EAAE,MAAM,CAAA;IACjB,eAAe,EAAE,MAAM,CAAA;IACvB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,uBAAuB,CAAA;CACjC,CAAC,CAAA;AAEF,MAAM,MAAM,+BAA+B,GAAG,QAAQ,CAAC;IACrD,SAAS,EAAE,QAAQ,CAAC;QAClB,IAAI,CAAC,QAAQ,EAAE,wBAAwB,GAAG,OAAO,CAAC,QAAQ,CAAC;YACzD,iBAAiB,EAAE,MAAM,CAAA;YACzB,WAAW,EAAE,MAAM,CAAA;SACpB,CAAC,CAAC,CAAA;KACJ,CAAC,CAAA;IACF,QAAQ,EAAE,QAAQ,CAAC;QACjB,GAAG,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAA;QACzE,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;KAC5E,CAAC,CAAA;CACH,CAAC,CAAA;AAqDF,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,+BAA+B;qBAE5D,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,CAAC;GA+BpF"}

package/dist/document-delivery-controller.js

@@ -0,0 +1,77 @@
+// Copyright 2026 Antifraud Services Inc. under the Apache License, Version 2.0.
+import { buildDidCommInlineBinaryAttachment, buildDidCommLinkedBinaryAttachment, buildSchemaOrgConfidentialDocumentGraph, } from 'antifraud-data-utils-ts';
+function requireNonEmpty(value, path) {
+    const normalized = value.trim();
+    if (!normalized)
+        throw new TypeError(`${path} must not be empty`);
+    return normalized;
+}
+function prepareDocumentDelivery(request) {
+    const operationId = requireNonEmpty(request.operationId, 'operationId');
+    const messageId = requireNonEmpty(request.messageId, 'messageId');
+    const trustedContext = Object.freeze({
+        senderReference: requireNonEmpty(request.trustedContext.senderReference, 'senderReference'),
+        recipientReference: requireNonEmpty(request.trustedContext.recipientReference, 'recipientReference'),
+        serviceReference: requireNonEmpty(request.trustedContext.serviceReference, 'serviceReference'),
+    });
+    const documentGraph = buildSchemaOrgConfidentialDocumentGraph({
+        manifest: request.manifest,
+        documents: [{ ...request.document, attachment: request.attachment.mediaObject }],
+    });
+    const attachment = request.attachment.kind === 'inline'
+        ? buildDidCommInlineBinaryAttachment({
+            id: request.attachment.mediaObject.id,
+            mediaType: request.attachment.mediaObject.mediaType,
+            bytes: request.attachment.bytes,
+        })
+        : buildDidCommLinkedBinaryAttachment(request.attachment.mediaObject);
+    if (attachment.byte_count !== request.attachment.mediaObject.contentSize) {
+        throw new TypeError('DIDComm attachment byte count does not match the Schema.org MediaObject');
+    }
+    return Object.freeze({
+        operationId,
+        messageId,
+        trustedContext,
+        documentGraph,
+        attachments: Object.freeze([attachment]),
+    });
+}
+function isSameOperation(current, prepared, contentId) {
+    return current.messageId === prepared.messageId
+        && current.senderReference === prepared.trustedContext.senderReference
+        && current.recipientReference === prepared.trustedContext.recipientReference
+        && current.contentId === contentId;
+}
+export function createDocumentDeliveryController(ports) {
+    return Object.freeze({
+        async deliver(request) {
+            const prepared = prepareDocumentDelivery(request);
+            const contentId = request.attachment.mediaObject.contentId;
+            const current = await ports.receipts.get(prepared.operationId);
+            if (current) {
+                if (!isSameOperation(current, prepared, contentId)) {
+                    throw new Error('Document delivery operation replay does not match the original request');
+                }
+                return current.receipt;
+            }
+            const delivered = await ports.transport.send(prepared);
+            const receipt = Object.freeze({
+                operationId: prepared.operationId,
+                messageId: prepared.messageId,
+                deliveryReference: requireNonEmpty(delivered.deliveryReference, 'deliveryReference'),
+                deliveredAt: requireNonEmpty(delivered.deliveredAt, 'deliveredAt'),
+                deliveryStatus: 'delivered',
+                readStatus: 'unread',
+                signatureStatus: 'unsigned',
+            });
+            await ports.receipts.put(prepared.operationId, Object.freeze({
+                messageId: prepared.messageId,
+                senderReference: prepared.trustedContext.senderReference,
+                recipientReference: prepared.trustedContext.recipientReference,
+                contentId,
+                receipt,
+            }));
+            return receipt;
+        },
+    });
+}

package/dist/index.d.ts

@@ -1,5 +1,6 @@
 export * from './openid4vp.js';
 export * from './credential-issuance-controller.js';
+export * from './document-delivery-controller.js';
 export * from './presentation-controller.js';
 export * from './presentation-session.js';
 export * from './qualification-evidence-controller.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA;AAC9B,cAAc,qCAAqC,CAAA;AACnD,cAAc,8BAA8B,CAAA;AAC5C,cAAc,2BAA2B,CAAA;AACzC,cAAc,wCAAwC,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA;AAC9B,cAAc,qCAAqC,CAAA;AACnD,cAAc,mCAAmC,CAAA;AACjD,cAAc,8BAA8B,CAAA;AAC5C,cAAc,2BAA2B,CAAA;AACzC,cAAc,wCAAwC,CAAA"}

package/dist/index.js

@@ -1,5 +1,6 @@
 export * from './openid4vp.js';
 export * from './credential-issuance-controller.js';
+export * from './document-delivery-controller.js';
 export * from './presentation-controller.js';
 export * from './presentation-session.js';
 export * from './qualification-evidence-controller.js';

package/dist/qualification-evidence-controller.d.ts

@@ -7,6 +7,15 @@ export type ResolvedQualificationIssuer = QualificationIssuerQuery & Readonly<{
     issuerOrganizationReference: string;
     confirmationServiceReference: string;
 }>;
+export type QualificationIssuerResolution = Readonly<{
+    kind: 'participant-resolved';
+    issuer: ResolvedQualificationIssuer;
+}> | Readonly<{
+    kind: 'identity-resolved';
+    issuerOrganizationReference: string;
+}> | Readonly<{
+    kind: 'not-resolved';
+}>;
 export type QualificationEvidenceRequest = Readonly<{
     trustedContext: Readonly<{
         controllerAuthorizationReference: string;
@@ -40,7 +49,7 @@ export type QualificationConfirmationRequestMessage = Readonly<{
 }>;
 export type QualificationEvidenceControllerPorts = Readonly<{
     issuerDirectory: Readonly<{
-        resolve(query: QualificationIssuerQuery): Promise<ResolvedQualificationIssuer | null>;
+        resolve(query: QualificationIssuerQuery): Promise<QualificationIssuerResolution>;
     }>;
     evidenceRecorder: Readonly<{
         recordEmployerAttestation(request: QualificationEvidenceRequest): Promise<Readonly<{
@@ -57,9 +66,13 @@ export type QualificationEvidenceControllerPorts = Readonly<{
             anchorReference: string;
             evidenceReference: string;
             contentHash: string;
+            issuerOrganizationReference: string;
+        }> & (Readonly<{
             issuerTenantReference: string;
             lifecycleStatus: 'awaiting-issuer-confirmation';
-        }>): Promise<void>;
+        }> | Readonly<{
+            lifecycleStatus: 'awaiting-issuer-onboarding';
+        }>)): Promise<void>;
     }>;
     outbox: Readonly<{
         queue(message: QualificationConfirmationRequestMessage): Promise<Readonly<{
@@ -71,6 +84,12 @@ export type QualificationEvidenceControllerPorts = Readonly<{
 export declare function createQualificationEvidenceController(ports: QualificationEvidenceControllerPorts): {
     submit(request: QualificationEvidenceRequest): Promise<Readonly<{
         phase: "issuer-not-resolved";
+    }> | Readonly<{
+        phase: "awaiting-issuer-onboarding";
+        evidenceReference: string;
+        employerProofReference: string;
+        ledgerAnchorReference: string;
+        issuerOrganizationReference: string;
     }> | Readonly<{
         phase: "issuer-confirmation-queued";
         evidenceReference: string;

package/dist/qualification-evidence-controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"qualification-evidence-controller.d.ts","sourceRoot":"","sources":["../src/qualification-evidence-controller.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,wBAAwB,GAAG,QAAQ,CAAC;IAC9C,eAAe,EAAE,MAAM,CAAA;IACvB,YAAY,EAAE,MAAM,CAAA;CACrB,CAAC,CAAA;AAEF,MAAM,MAAM,2BAA2B,GAAG,wBAAwB,GAAG,QAAQ,CAAC;IAC5E,qBAAqB,EAAE,MAAM,CAAA;IAC7B,2BAA2B,EAAE,MAAM,CAAA;IACnC,4BAA4B,EAAE,MAAM,CAAA;CACrC,CAAC,CAAA;AAEF,MAAM,MAAM,4BAA4B,GAAG,QAAQ,CAAC;IAClD,cAAc,EAAE,QAAQ,CAAC;QACvB,gCAAgC,EAAE,MAAM,CAAA;QACxC,uBAAuB,EAAE,MAAM,CAAA;QAC/B,6BAA6B,EAAE,MAAM,CAAA;QACrC,iBAAiB,EAAE,MAAM,CAAA;QACzB,2BAA2B,EAAE,MAAM,CAAA;KACpC,CAAC,CAAA;IACF,2BAA2B,EAAE,MAAM,CAAA;IACnC,aAAa,EAAE,wBAAwB,CAAA;IACvC,QAAQ,EAAE,QAAQ,CAAC;QACjB,SAAS,EAAE,MAAM,CAAA;QACjB,SAAS,EAAE,MAAM,CAAA;QACjB,SAAS,EAAE,iBAAiB,GAAG,WAAW,GAAG,YAAY,GAAG,YAAY,CAAA;QACxE,QAAQ,EAAE,MAAM,CAAA;KACjB,CAAC,CAAA;CACH,CAAC,CAAA;AAEF,MAAM,MAAM,uCAAuC,GAAG,QAAQ,CAAC;IAC7D,WAAW,EAAE,6CAA6C,CAAA;IAC1D,SAAS,EAAE,MAAM,CAAA;IACjB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,iBAAiB,EAAE,MAAM,CAAA;IACzB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,2BAA2B,EAAE,MAAM,CAAA;IACnC,6BAA6B,EAAE,MAAM,CAAA;IACrC,kCAAkC,EAAE,MAAM,CAAA;IAC1C,iBAAiB,EAAE,MAAM,CAAA;IACzB,iBAAiB,EAAE,4BAA4B,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,CAAA;IACxE,SAAS,EAAE,MAAM,CAAA;CAClB,CAAC,CAAA;AAEF,MAAM,MAAM,oCAAoC,GAAG,QAAQ,CAAC;IAC1D,eAAe,EAAE,QAAQ,CAAC;QACxB,OAAO,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,2BAA2B,GAAG,IAAI,CAAC,CAAA;KACtF,CAAC,CAAA;IACF,gBAAgB,EAAE,QAAQ,CAAC;QACzB,yBAAyB,CAAC,OAAO,EAAE,4BAA4B,GAAG,OAAO,CAAC,QAAQ,CAAC;YACjF,iBAAiB,EAAE,MAAM,CAAA;YACzB,sBAAsB,EAAE,MAAM,CAAA;YAC9B,MAAM,EAAE,QAAQ,CAAC;gBACf,eAAe,EAAE,MAAM,CAAA;gBACvB,WAAW,EAAE,MAAM,CAAA;aACpB,CAAC,CAAA;SACH,CAAC,CAAC,CAAA;KACJ,CAAC,CAAA;IACF,MAAM,EAAE,QAAQ,CAAC;QACf,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC;YAC5B,eAAe,EAAE,MAAM,CAAA;YACvB,iBAAiB,EAAE,MAAM,CAAA;YACzB,WAAW,EAAE,MAAM,CAAA;YACnB,qBAAqB,EAAE,MAAM,CAAA;YAC7B,eAAe,EAAE,8BAA8B,CAAA;SAChD,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;KACnB,CAAC,CAAA;IACF,MAAM,EAAE,QAAQ,CAAC;QACf,KAAK,CAAC,OAAO,EAAE,uCAAuC,GAAG,OAAO,CAAC,QAAQ,CAAC;YACxE,gBAAgB,EAAE,MAAM,CAAA;SACzB,CAAC,CAAC,CAAA;KACJ,CAAC,CAAA;IACF,GAAG,IAAI,MAAM,CAAA;CACd,CAAC,CAAA;AAwDF,wBAAgB,qCAAqC,CACnD,KAAK,EAAE,oCAAoC;oBAGnB,4BAA4B;;;;;;;;;;;EA2CrD;AAED,MAAM,MAAM,2BAA2B,GAAG,QAAQ,CAAC;IACjD,iBAAiB,EAAE,MAAM,CAAA;IACzB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,2BAA2B,EAAE,MAAM,CAAA;IACnC,QAAQ,EAAE,WAAW,GAAG,UAAU,GAAG,SAAS,CAAA;IAC9C,oBAAoB,EAAE,MAAM,CAAA;IAC5B,SAAS,EAAE,MAAM,CAAA;CAClB,CAAC,CAAA;AAEF,MAAM,MAAM,0BAA0B,GAAG,QAAQ,CAAC;IAChD,iBAAiB,EAAE,MAAM,CAAA;IACzB,MAAM,EAAE,kBAAkB,GAAG,iBAAiB,GAAG,gBAAgB,CAAA;IACjE,oBAAoB,EAAE,MAAM,CAAA;IAC5B,SAAS,EAAE,MAAM,CAAA;CAClB,CAAC,CAAA;AAEF,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,QAAQ,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAA;IACzB,6BAA6B,EAAE,MAAM,CAAA;IACrC,mCAAmC,EAAE,MAAM,CAAA;CAC5C,CAAC,EACF,QAAQ,EAAE,2BAA2B,GACpC,0BAA0B,CAkB5B;AAED,MAAM,MAAM,iCAAiC,GAAG,QAAQ,CAAC;IACvD,WAAW,EAAE,wCAAwC,CAAA;IACrD,SAAS,EAAE,MAAM,CAAA;IACjB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,iBAAiB,EAAE,MAAM,CAAA;IACzB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,MAAM,EAAE,0BAA0B,CAAC,QAAQ,CAAC,CAAA;IAC5C,oBAAoB,EAAE,MAAM,CAAA;IAC5B,SAAS,EAAE,MAAM,CAAA;CAClB,CAAC,CAAA;AAEF,wBAAgB,sCAAsC,CAAC,KAAK,EAAE,QAAQ,CAAC;IACrE,OAAO,EAAE,0BAA0B,CAAA;IACnC,uBAAuB,EAAE,MAAM,CAAA;IAC/B,qBAAqB,EAAE,MAAM,CAAA;IAC7B,oCAAoC,EAAE,MAAM,CAAA;IAC5C,SAAS,EAAE,MAAM,CAAA;CAClB,CAAC,GAAG,iCAAiC,CAarC"}
+{"version":3,"file":"qualification-evidence-controller.d.ts","sourceRoot":"","sources":["../src/qualification-evidence-controller.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,wBAAwB,GAAG,QAAQ,CAAC;IAC9C,eAAe,EAAE,MAAM,CAAA;IACvB,YAAY,EAAE,MAAM,CAAA;CACrB,CAAC,CAAA;AAEF,MAAM,MAAM,2BAA2B,GAAG,wBAAwB,GAAG,QAAQ,CAAC;IAC5E,qBAAqB,EAAE,MAAM,CAAA;IAC7B,2BAA2B,EAAE,MAAM,CAAA;IACnC,4BAA4B,EAAE,MAAM,CAAA;CACrC,CAAC,CAAA;AAEF,MAAM,MAAM,6BAA6B,GACrC,QAAQ,CAAC;IACP,IAAI,EAAE,sBAAsB,CAAA;IAC5B,MAAM,EAAE,2BAA2B,CAAA;CACpC,CAAC,GACF,QAAQ,CAAC;IACP,IAAI,EAAE,mBAAmB,CAAA;IACzB,2BAA2B,EAAE,MAAM,CAAA;CACpC,CAAC,GACF,QAAQ,CAAC;IACP,IAAI,EAAE,cAAc,CAAA;CACrB,CAAC,CAAA;AAEN,MAAM,MAAM,4BAA4B,GAAG,QAAQ,CAAC;IAClD,cAAc,EAAE,QAAQ,CAAC;QACvB,gCAAgC,EAAE,MAAM,CAAA;QACxC,uBAAuB,EAAE,MAAM,CAAA;QAC/B,6BAA6B,EAAE,MAAM,CAAA;QACrC,iBAAiB,EAAE,MAAM,CAAA;QACzB,2BAA2B,EAAE,MAAM,CAAA;KACpC,CAAC,CAAA;IACF,2BAA2B,EAAE,MAAM,CAAA;IACnC,aAAa,EAAE,wBAAwB,CAAA;IACvC,QAAQ,EAAE,QAAQ,CAAC;QACjB,SAAS,EAAE,MAAM,CAAA;QACjB,SAAS,EAAE,MAAM,CAAA;QACjB,SAAS,EAAE,iBAAiB,GAAG,WAAW,GAAG,YAAY,GAAG,YAAY,CAAA;QACxE,QAAQ,EAAE,MAAM,CAAA;KACjB,CAAC,CAAA;CACH,CAAC,CAAA;AAEF,MAAM,MAAM,uCAAuC,GAAG,QAAQ,CAAC;IAC7D,WAAW,EAAE,6CAA6C,CAAA;IAC1D,SAAS,EAAE,MAAM,CAAA;IACjB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,iBAAiB,EAAE,MAAM,CAAA;IACzB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,2BAA2B,EAAE,MAAM,CAAA;IACnC,6BAA6B,EAAE,MAAM,CAAA;IACrC,kCAAkC,EAAE,MAAM,CAAA;IAC1C,iBAAiB,EAAE,MAAM,CAAA;IACzB,iBAAiB,EAAE,4BAA4B,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,CAAA;IACxE,SAAS,EAAE,MAAM,CAAA;CAClB,CAAC,CAAA;AAEF,MAAM,MAAM,oCAAoC,GAAG,QAAQ,CAAC;IAC1D,eAAe,EAAE,QAAQ,CAAC;QACxB,OAAO,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAAA;KACjF,CAAC,CAAA;IACF,gBAAgB,EAAE,QAAQ,CAAC;QACzB,yBAAyB,CAAC,OAAO,EAAE,4BAA4B,GAAG,OAAO,CAAC,QAAQ,CAAC;YACjF,iBAAiB,EAAE,MAAM,CAAA;YACzB,sBAAsB,EAAE,MAAM,CAAA;YAC9B,MAAM,EAAE,QAAQ,CAAC;gBACf,eAAe,EAAE,MAAM,CAAA;gBACvB,WAAW,EAAE,MAAM,CAAA;aACpB,CAAC,CAAA;SACH,CAAC,CAAC,CAAA;KACJ,CAAC,CAAA;IACF,MAAM,EAAE,QAAQ,CAAC;QACf,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC;YAC5B,eAAe,EAAE,MAAM,CAAA;YACvB,iBAAiB,EAAE,MAAM,CAAA;YACzB,WAAW,EAAE,MAAM,CAAA;YACnB,2BAA2B,EAAE,MAAM,CAAA;SACpC,CAAC,GAAG,CACD,QAAQ,CAAC;YACP,qBAAqB,EAAE,MAAM,CAAA;YAC7B,eAAe,EAAE,8BAA8B,CAAA;SAChD,CAAC,GACF,QAAQ,CAAC;YACP,eAAe,EAAE,4BAA4B,CAAA;SAC9C,CAAC,CACL,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;KAClB,CAAC,CAAA;IACF,MAAM,EAAE,QAAQ,CAAC;QACf,KAAK,CAAC,OAAO,EAAE,uCAAuC,GAAG,OAAO,CAAC,QAAQ,CAAC;YACxE,gBAAgB,EAAE,MAAM,CAAA;SACzB,CAAC,CAAC,CAAA;KACJ,CAAC,CAAA;IACF,GAAG,IAAI,MAAM,CAAA;CACd,CAAC,CAAA;AAmBF,wBAAgB,qCAAqC,CACnD,KAAK,EAAE,oCAAoC;oBAGnB,4BAA4B;;;;;;;;;;;;;;;;;EA8DrD;AAED,MAAM,MAAM,2BAA2B,GAAG,QAAQ,CAAC;IACjD,iBAAiB,EAAE,MAAM,CAAA;IACzB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,2BAA2B,EAAE,MAAM,CAAA;IACnC,QAAQ,EAAE,WAAW,GAAG,UAAU,GAAG,SAAS,CAAA;IAC9C,oBAAoB,EAAE,MAAM,CAAA;IAC5B,SAAS,EAAE,MAAM,CAAA;CAClB,CAAC,CAAA;AAEF,MAAM,MAAM,0BAA0B,GAAG,QAAQ,CAAC;IAChD,iBAAiB,EAAE,MAAM,CAAA;IACzB,MAAM,EAAE,kBAAkB,GAAG,iBAAiB,GAAG,gBAAgB,CAAA;IACjE,oBAAoB,EAAE,MAAM,CAAA;IAC5B,SAAS,EAAE,MAAM,CAAA;CAClB,CAAC,CAAA;AAEF,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,QAAQ,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAA;IACzB,6BAA6B,EAAE,MAAM,CAAA;IACrC,mCAAmC,EAAE,MAAM,CAAA;CAC5C,CAAC,EACF,QAAQ,EAAE,2BAA2B,GACpC,0BAA0B,CAkB5B;AAED,MAAM,MAAM,iCAAiC,GAAG,QAAQ,CAAC;IACvD,WAAW,EAAE,wCAAwC,CAAA;IACrD,SAAS,EAAE,MAAM,CAAA;IACjB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,iBAAiB,EAAE,MAAM,CAAA;IACzB,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,MAAM,EAAE,0BAA0B,CAAC,QAAQ,CAAC,CAAA;IAC5C,oBAAoB,EAAE,MAAM,CAAA;IAC5B,SAAS,EAAE,MAAM,CAAA;CAClB,CAAC,CAAA;AAEF,wBAAgB,sCAAsC,CAAC,KAAK,EAAE,QAAQ,CAAC;IACrE,OAAO,EAAE,0BAA0B,CAAA;IACnC,uBAAuB,EAAE,MAAM,CAAA;IAC/B,qBAAqB,EAAE,MAAM,CAAA;IAC7B,oCAAoC,EAAE,MAAM,CAAA;IAC5C,SAAS,EAAE,MAAM,CAAA;CAClB,CAAC,GAAG,iCAAiC,CAarC"}

package/dist/qualification-evidence-controller.js

@@ -1,42 +1,9 @@
 // Copyright 2026 Antifraud Services Inc. under the Apache License, Version 2.0.
+import { assertSha3_384EvidenceContentId } from 'antifraud-data-utils-ts';
 function requireReference(value, path) {
     if (value.trim().length === 0)
         throw new TypeError(`${path} must not be empty`);
 }
-const BASE58BTC_ALPHABET = '123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz';
-function decodeBase58btc(value) {
-    let decoded = 0n;
-    for (const character of value) {
-        const index = BASE58BTC_ALPHABET.indexOf(character);
-        if (index < 0)
-            throw new TypeError('Invalid base58btc character');
-        decoded = decoded * 58n + BigInt(index);
-    }
-    const bytes = [];
-    while (decoded > 0n) {
-        bytes.unshift(Number(decoded & 0xffn));
-        decoded >>= 8n;
-    }
-    for (const character of value) {
-        if (character !== '1')
-            break;
-        bytes.unshift(0);
-    }
-    return Uint8Array.from(bytes);
-}
-function assertRawSha3_384CidV1(contentId) {
-    if (!/^z[1-9A-HJ-NP-Za-km-z]+$/u.test(contentId)) {
-        throw new TypeError('evidence.contentId must be a base58btc multibase CID');
-    }
-    const bytes = decodeBase58btc(contentId.slice(1));
-    if (bytes.length !== 52
-        || bytes[0] !== 0x01
-        || bytes[1] !== 0x55
-        || bytes[2] !== 0x15
-        || bytes[3] !== 0x30) {
-        throw new TypeError('evidence.contentId must be CIDv1 raw with a SHA3-384 multihash');
-    }
-}
 function validateRequest(request) {
     requireReference(request.trustedContext.controllerAuthorizationReference, 'controllerAuthorizationReference');
     requireReference(request.trustedContext.employerTenantReference, 'employerTenantReference');
@@ -47,22 +14,40 @@ function validateRequest(request) {
     requireReference(request.claimedIssuer.legalIdentifier, 'claimedIssuer.legalIdentifier');
     requireReference(request.claimedIssuer.jurisdiction, 'claimedIssuer.jurisdiction');
     requireReference(request.evidence.reference, 'evidence.reference');
-    assertRawSha3_384CidV1(request.evidence.contentId);
+    assertSha3_384EvidenceContentId(request.evidence.contentId);
 }
 export function createQualificationEvidenceController(ports) {
     return {
         async submit(request) {
             validateRequest(request);
-            const issuer = await ports.issuerDirectory.resolve(request.claimedIssuer);
-            if (!issuer) {
+            const resolution = await ports.issuerDirectory.resolve(request.claimedIssuer);
+            if (resolution.kind === 'not-resolved') {
                 return Object.freeze({ phase: 'issuer-not-resolved' });
             }
             const recorded = await ports.evidenceRecorder.recordEmployerAttestation(request);
+            if (resolution.kind === 'identity-resolved') {
+                await ports.ledger.recordAnchor({
+                    anchorReference: recorded.anchor.anchorReference,
+                    evidenceReference: recorded.evidenceReference,
+                    contentHash: recorded.anchor.contentHash,
+                    issuerOrganizationReference: resolution.issuerOrganizationReference,
+                    lifecycleStatus: 'awaiting-issuer-onboarding',
+                });
+                return Object.freeze({
+                    phase: 'awaiting-issuer-onboarding',
+                    evidenceReference: recorded.evidenceReference,
+                    employerProofReference: recorded.employerProofReference,
+                    ledgerAnchorReference: recorded.anchor.anchorReference,
+                    issuerOrganizationReference: resolution.issuerOrganizationReference,
+                });
+            }
+            const issuer = resolution.issuer;
             await ports.ledger.recordAnchor({
                 anchorReference: recorded.anchor.anchorReference,
                 evidenceReference: recorded.evidenceReference,
                 contentHash: recorded.anchor.contentHash,
                 issuerTenantReference: issuer.issuerTenantReference,
+                issuerOrganizationReference: issuer.issuerOrganizationReference,
                 lifecycleStatus: 'awaiting-issuer-confirmation',
             });
             const message = Object.freeze({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "antifraud-sdk-core-ts",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "Runtime-neutral orchestration for identity verification and provider-issued credentials",
   "type": "module",
   "main": "./dist/index.js",
@@ -34,6 +34,6 @@
     "typescript": "^5.9.3"
   },
   "dependencies": {
-    "antifraud-data-utils-ts": "0.1.1"
+    "antifraud-data-utils-ts": "0.1.4"
   }
 }