Cardano Updates

The @vdr_ledger test requires VDR_LEDGER_DRIVER=prism-node and
VDR_PRISM_NODE_DRIVER_ENABLED=true to select the correct driver.

Signed-off-by: Yurii Shynbuiev <[email protected]>
Co-Authored-By: Claude Opus 4.6 <[email protected]>

Signed-off-by: Yurii Shynbuiev <[email protected]>
Co-authored-by: Claude Opus 4.6 <[email protected]>

Co-Authored-By: Claude Opus 4.6 <[email protected]>
Signed-off-by: Yurii Shynbuiev <[email protected]>

Add driver comparison table, mermaid architecture diagram, and updated
prerequisites listing all 5 VDR drivers (memory, database, neoprism,
prism-node, PRISM blockfrost) with their enable flags and use cases.

Signed-off-by: Yurii Shynbuiev <[email protected]>
Co-Authored-By: Claude Opus 4.6 <[email protected]>

Co-Authored-By: Claude Opus 4.6 <[email protected]>

Move JWT and SD-JWT verification logic behind PresentationService,
SDJwtService, and VcJwtService abstractions so that apiServerJobsIssue
and apiServerJobsPresent no longer depend on credentialsVcJWT,
credentialsSDJWT, or credentialsAnoncreds modules directly.

BREAKING CHANGE: PresentationService, VcJwtService, and SDJwtService
traits have new methods that implementations must provide.

Co-Authored-By: Claude Opus 4.6 <[email protected]>

Extract AnonCredsCredentialBuilder that delegates to AnoncredService
for credential issuance. Uses CredentialContext.Resolver to bridge
pre-negotiated state (cred def, offer, request) from the protocol
layer. Add zio-test dependencies to credentialsAnoncreds project.

Co-Authored-By: Claude Opus 4.6 <[email protected]>

Extract SdJwtCredentialBuilder that delegates to SDJwtService for
credential issuance. Includes IssuerKeyResolver trait to bridge
generic KeyRef to Ed25519PrivateKey. Registered as SdJwtBuilderModule
in AllModules.

Co-Authored-By: Claude Opus 4.6 <[email protected]>

Bridges PresentationProtocol contract to OID4VP redirect-based flow.
Registered in AllModules for startup validation.

Co-Authored-By: Claude Opus 4.6 <[email protected]>

Bridges IssuanceProtocol contract to OID4VCI redirect-based flow.
Most methods are unsupported (OID4VCI uses HTTP, not messages),
but the adapter formalizes OID4VCI as a first-class protocol.

Co-Authored-By: Claude Opus 4.6 <[email protected]>

- Simplify submitSignedOperation to delegate to submitVdrOperation,
  eliminating ~30 lines of duplicated HTTP call logic.
- Add isLedgerBacked property to VdrDriver enum, replacing repeated
  `driver == PRISM_NODE || driver == NEOPRISM` checks across test steps.

Co-Authored-By: Claude Opus 4.6 <[email protected]>
Signed-off-by: Yurii Shynbuiev <[email protected]>

- Change neoPrismConfigLayer from val to lazy val in Modules.scala to fix
  NullPointerException caused by forward reference in object initialization
- Add webhook URLs for Issuer/Holder/Verifier roles in vdr_neoprism.conf
  to support ListenToEvents ability required by DID publishing tests
- Fix duplicate version line in agents config

Signed-off-by: Yurii Shynbuiev <[email protected]>
Co-Authored-By: Claude Opus 4.6 <[email protected]>
Signed-off-by: Yurii Shynbuiev <[email protected]>

Enforce that shared contains only contracts (no implementation deps)
and persistence-sqlite stays isolated from domain modules.

Co-Authored-By: Claude Opus 4.6 <[email protected]>

- ModuleRegistry.fromAll with disable filtering and report generation
- AllModules registry collecting all extracted modules
- CloudAgentApp validates module dependency graph at startup
- Integration tests expanded to 10 (covering all modules + filtering)
- ModuleRegistry unit tests expanded to 8

Co-Authored-By: Claude Opus 4.6 <[email protected]>

- PersistenceProvider trait and PersistenceType enum in shared
- SqlitePersistenceProvider with Flyway migration support
- PostgresPersistenceModule and SqlitePersistenceModule declarations
- New persistence-sqlite sbt project with sqlite-jdbc dependency
- 9 tests: contract (2), SQLite provider (3), module registry (4)

Co-Authored-By: Claude Opus 4.6 <[email protected]>

Add DIDCommV2 transport, OIDC transport, and PresentationExchange
module declarations. Extend ModuleRegistry integration tests to
cover issuance and presentation protocol resolution.

Co-Authored-By: Claude Opus 4.6 <[email protected]>

Co-Authored-By: Claude Opus 4.6 <[email protected]>

Add DIDCommIssuanceModule declaring IssuanceProtocol("didcomm-v3")
capability. Add DIDCommIssuanceAdapter that bridges the IssuanceProtocol
contract to the existing CredentialService — dispatches createRequest
and issueCredential to format-specific methods based on record's
credential format. Enables incremental migration via strangler fig
pattern.

Co-Authored-By: Claude Opus 4.6 <[email protected]>

Add Vcdm11DataModelCodec that encodes/decodes W3C VCDM 1.1 credential
structure. Add JwtCredentialBuilder that composes DataModelCodec +
CredentialSigner through a pipeline: encode claims → serialize →
sign → assemble JWT string.

Co-Authored-By: Claude Opus 4.6 <[email protected]>

Extract EdDSA and Secp256k1 CredentialSigner implementations from
vc-jwt module into sharedCrypto, and add JwtExpiryCheck as the first
VerificationCheck implementation in shared core.

Co-Authored-By: Claude Opus 4.6 <[email protected]>

Add zio-json to shared module dependencies. Replace String with
zio.json.ast.Json in all contract interfaces (BuildContext,
BuildState, BuiltCredential, ProtocolMessage, IssuanceProtocol,
PresentationProtocol, PresentationExchange, DataModelCodec).

Co-Authored-By: Claude Opus 4.6 <[email protected]>

Phase 0 of plugin architecture migration:
- Capability, Contract, Cardinality types for module dependency system
- Module trait with lifecycle, capabilities, per-module config
- ModuleRegistry with dependency validation and capability resolution
- Credential contracts: CredentialSigner, DataModelCodec, CredentialBuilder,
  VerificationCheck, RevocationCheck, CredentialVerifier combinator
- Protocol contracts: ProtocolTransport, IssuanceProtocol,
  PresentationProtocol, PresentationExchange
- 13 tests passing

Co-Authored-By: Claude Opus 4.6 <[email protected]>

- Add PersistenceProvider contract with PostgreSQL and SQLite modules
- Add SQLite considerations (no advisory locks, migration variants)
- Add DIDComm protocol versioning (v2/v3 as separate modules)
- Add Phase 5 (SQLite) to implementation plan, renumber Phase 6

Co-Authored-By: Claude Opus 4.6 <[email protected]>

Type-erase at the consumer boundary by introducing JsonEventConsumer
in notificationsApi. WebhookPublisher now works with Seq[JsonEventConsumer]
instead of typed consumers. JsonEventEncoders moved to apiServer where
WebhookPublisherFactory wires typed consumers with domain-specific encoders.

Co-Authored-By: Claude Opus 4.6 <[email protected]>

Move pure data types (JWT, Signer, Issuer, DidResolver, credential/presentation
payloads, proofs) from credentialsVcJWT to credentialsCore while keeping the same
package namespace to avoid import changes across the codebase. Introduce VcJwtService
trait in core with VcJwtServiceLive implementation in vc-jwt, abstracting all crypto
operations (signing, verification, status list creation) behind a service boundary.

credentialsVcJWT now depends on credentialsCore instead of the reverse, completing
the inversion of all format module dependencies.

Co-Authored-By: Claude Opus 4.6 <[email protected]>