@glideco/kya-vc

npm install @glideco/kya-vc @glideco/kms-signer

import { issueAgentSanctionsPassCredential } from '@glideco/kya-vc';
import { buildEnvKeySigner } from '@glideco/kms-signer';

const signer = buildEnvKeySigner({
  privateKeyPem: process.env.ISSUER_PRIVATE_KEY_PEM!,
  algorithm: 'ed25519',
  nodeEnv: 'development', // throws in production — use aws/gcp/vault instead
});

const vc = await issueAgentSanctionsPassCredential({
  screening: {
    screeningId: '018f1a2b-0000-7000-8000-000000000001',
    screenedAt: '2026-05-04T12:00:00Z',
    subjectDid: 'did:key:zDnaeYr8LMXDy6dP...',
    addresses: [{ chain: 'eth', address: '0xABCDEF1234...' }],
    listsScreened: ['ofac-sdn', 'un-consolidated'],
    hits: [],
    provider: 'chainalysis',
  },
  issuerDid: 'did:web:glide.co',
  signer,
  statusListUrl: 'https://glide.co/credentials/status/1',
  statusListIndex: 42,
});

import {
  parseAgentSanctionsPassCredential,
  validateCredentialEnvelope,
} from '@glideco/kya-vc';

// 1. Parse and validate shape (throws on schema mismatch).
const vc = parseAgentSanctionsPassCredential(inboundJson);

// 2. Check issuer, expiry, proof block presence.
const outcome = validateCredentialEnvelope(vc);
if (!outcome.ok) {
  throw new Error(`credential rejected: ${outcome.reason}`);
}

// 3. Caller must verify the cryptographic signature using the issuer's
//    public key from https://glide.co/.well-known/did.json.

import { decodeProofValue } from '@glideco/kya-vc';

// Accepts multibase prefix `z` (base58btc) or `u` (base64url).
const sigBytes = decodeProofValue(vc.proof!.proofValue);
// → Uint8Array (64 bytes for ed25519 / es256; 96 bytes for es384)