Add comprehensive installation and setup documentation

- Add GETTING_STARTED.md with quick start guide and development modes
- Add INSTALL.sh automated installation script
- Add INSTALLATION_CHECKLIST.md, INSTALLATION_SUCCESS.md, and INSTALLATION_SUMMARY.md
- Add QUICK_REFERENCE.md for common commands
- Add SETUP_GUIDE.md with detailed setup instructions
- Update README.md with improved project overview
- Add did-wallet app dependencies and node_modules

apps/web5-dwn/node_modules/eciesjs/dist/utils/compat.d.ts

@@ -0,0 +1,2 @@
+import { Cipher } from "@noble/ciphers/utils";
+export declare function aes256gcm(key: Uint8Array, nonce: Uint8Array, AAD?: Uint8Array): Cipher;

apps/web5-dwn/node_modules/eciesjs/dist/utils/compat.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.aes256gcm = void 0;
+var utils_1 = require("@noble/ciphers/utils");
+var crypto_1 = require("crypto");
+var consts_1 = require("../consts");
+// make `node:crypto`'s aes compatible with `@noble/ciphers`
+function aes256gcm(key, nonce, AAD) {
+    var encrypt = function (plainText) {
+        var cipher = (0, crypto_1.createCipheriv)("aes-256-gcm", key, nonce);
+        if (AAD) {
+            cipher.setAAD(AAD);
+        }
+        var updated = cipher.update(plainText);
+        var finalized = cipher.final();
+        return (0, utils_1.concatBytes)(updated, finalized, cipher.getAuthTag());
+    };
+    var decrypt = function (cipherText) {
+        var encrypted = cipherText.subarray(0, cipherText.length - consts_1.AEAD_TAG_LENGTH);
+        var tag = cipherText.subarray(-consts_1.AEAD_TAG_LENGTH);
+        var decipher = (0, crypto_1.createDecipheriv)("aes-256-gcm", key, nonce);
+        if (AAD) {
+            decipher.setAAD(AAD);
+        }
+        decipher.setAuthTag(tag);
+        var updated = decipher.update(encrypted);
+        var finalized = decipher.final();
+        return (0, utils_1.concatBytes)(updated, finalized);
+    };
+    return {
+        tagLength: consts_1.AEAD_TAG_LENGTH,
+        encrypt: encrypt,
+        decrypt: decrypt,
+    };
+}
+exports.aes256gcm = aes256gcm;

apps/web5-dwn/node_modules/eciesjs/dist/utils/elliptic.d.ts

@@ -0,0 +1,7 @@
+export declare function getValidSecret(): Uint8Array;
+export declare function isValidPrivateKey(secret: Uint8Array): boolean;
+export declare function getPublicKey(secret: Uint8Array): Uint8Array;
+export declare function getSharedKey(ephemeralPoint: Uint8Array, sharedPoint: Uint8Array): Uint8Array;
+export declare function getSharedPoint(sk: Uint8Array, pk: Uint8Array, compressed?: boolean): Uint8Array;
+export declare function convertPublicKeyFormat(pk: Uint8Array, compressed: boolean): Uint8Array;
+export declare function hexToPublicKey(hex: string): Uint8Array;

apps/web5-dwn/node_modules/eciesjs/dist/utils/elliptic.js

@@ -0,0 +1,74 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.hexToPublicKey = exports.convertPublicKeyFormat = exports.getSharedPoint = exports.getSharedKey = exports.getPublicKey = exports.isValidPrivateKey = exports.getValidSecret = void 0;
+var utils_1 = require("@noble/ciphers/utils");
+var utils_2 = require("@noble/ciphers/webcrypto/utils");
+var ed25519_1 = require("@noble/curves/ed25519");
+var secp256k1_1 = require("@noble/curves/secp256k1");
+var config_1 = require("../config");
+var consts_1 = require("../consts");
+var hex_1 = require("./hex");
+var symmetric_1 = require("./symmetric");
+function getValidSecret() {
+    var key;
+    do {
+        key = (0, utils_2.randomBytes)(consts_1.SECRET_KEY_LENGTH);
+    } while (!isValidPrivateKey(key));
+    return key;
+}
+exports.getValidSecret = getValidSecret;
+function isValidPrivateKey(secret) {
+    // on secp256k1: only key ∈ (0, group order) is valid
+    // on curve25519: any 32-byte key is valid
+    return _exec(function (curve) { return curve.utils.isValidPrivateKey(secret); }, function () { return true; }, function () { return true; });
+}
+exports.isValidPrivateKey = isValidPrivateKey;
+function getPublicKey(secret) {
+    return _exec(function (curve) { return curve.getPublicKey(secret); }, function (curve) { return curve.getPublicKey(secret); }, function (curve) { return curve.getPublicKey(secret); });
+}
+exports.getPublicKey = getPublicKey;
+function getSharedKey(ephemeralPoint, sharedPoint) {
+    return (0, symmetric_1.deriveKey)((0, utils_1.concatBytes)(ephemeralPoint, sharedPoint));
+}
+exports.getSharedKey = getSharedKey;
+function getSharedPoint(sk, pk, compressed) {
+    return _exec(function (curve) { return curve.getSharedSecret(sk, pk, compressed); }, function (curve) { return curve.getSharedSecret(sk, pk); }, function (curve) {
+        // Note: scalar is hashed from sk
+        var scalar = curve.utils.getExtendedPublicKey(sk).scalar;
+        var point = curve.ExtendedPoint.fromHex(pk).multiply(scalar);
+        return point.toRawBytes();
+    });
+}
+exports.getSharedPoint = getSharedPoint;
+function convertPublicKeyFormat(pk, compressed) {
+    // only for secp256k1
+    return _exec(function (curve) { return curve.getSharedSecret(BigInt(1), pk, compressed); }, function () { return pk; }, function () { return pk; });
+}
+exports.convertPublicKeyFormat = convertPublicKeyFormat;
+function hexToPublicKey(hex) {
+    var decoded = (0, hex_1.decodeHex)(hex);
+    return _exec(function () {
+        if (decoded.length === consts_1.ETH_PUBLIC_KEY_SIZE) {
+            var fixed = new Uint8Array(1 + decoded.length);
+            fixed.set([0x04]);
+            fixed.set(decoded, 1);
+            return fixed;
+        }
+        return decoded;
+    }, function () { return decoded; }, function () { return decoded; });
+}
+exports.hexToPublicKey = hexToPublicKey;
+function _exec(secp256k1Callback, x25519Callback, ed25519Callback) {
+    if ((0, config_1.ellipticCurve)() === "secp256k1") {
+        return secp256k1Callback(secp256k1_1.secp256k1);
+    }
+    else if ((0, config_1.ellipticCurve)() === "x25519") {
+        return x25519Callback(ed25519_1.x25519);
+    }
+    else if ((0, config_1.ellipticCurve)() === "ed25519") {
+        return ed25519Callback(ed25519_1.ed25519);
+    }
+    else {
+        throw new Error("Not implemented");
+    }
+}

apps/web5-dwn/node_modules/eciesjs/dist/utils/hex.d.ts

@@ -0,0 +1,2 @@
+export declare function remove0x(hex: string): string;
+export declare function decodeHex(hex: string): Uint8Array;

apps/web5-dwn/node_modules/eciesjs/dist/utils/hex.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeHex = exports.remove0x = void 0;
+var utils_1 = require("@noble/ciphers/utils");
+function remove0x(hex) {
+    if (hex.startsWith("0x") || hex.startsWith("0X")) {
+        return hex.slice(2);
+    }
+    return hex;
+}
+exports.remove0x = remove0x;
+function decodeHex(hex) {
+    return (0, utils_1.hexToBytes)(remove0x(hex));
+}
+exports.decodeHex = decodeHex;

apps/web5-dwn/node_modules/eciesjs/dist/utils/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./elliptic";
+export * from "./hex";
+export * from "./symmetric";

apps/web5-dwn/node_modules/eciesjs/dist/utils/index.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+// under this folder no `Buffer`
+__exportStar(require("./elliptic"), exports);
+__exportStar(require("./hex"), exports);
+__exportStar(require("./symmetric"), exports);

apps/web5-dwn/node_modules/eciesjs/dist/utils/symmetric.d.ts

@@ -0,0 +1,3 @@
+export declare function aesEncrypt(key: Uint8Array, plainText: Uint8Array): Uint8Array;
+export declare function aesDecrypt(key: Uint8Array, cipherText: Uint8Array): Uint8Array;
+export declare function deriveKey(master: Uint8Array): Uint8Array;

apps/web5-dwn/node_modules/eciesjs/dist/utils/symmetric.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deriveKey = exports.aesDecrypt = exports.aesEncrypt = void 0;
+var chacha_1 = require("@noble/ciphers/chacha");
+var utils_1 = require("@noble/ciphers/utils");
+var utils_2 = require("@noble/ciphers/webcrypto/utils");
+var hkdf_1 = require("@noble/hashes/hkdf");
+var sha256_1 = require("@noble/hashes/sha256");
+var config_1 = require("../config");
+var consts_1 = require("../consts");
+var compat_1 = require("./compat");
+function aesEncrypt(key, plainText) {
+    // TODO: Rename to symEncrypt
+    return _exec(true, key, plainText);
+}
+exports.aesEncrypt = aesEncrypt;
+function aesDecrypt(key, cipherText) {
+    // TODO: Rename to symDecrypt
+    return _exec(false, key, cipherText);
+}
+exports.aesDecrypt = aesDecrypt;
+function deriveKey(master) {
+    // 32 bytes shared secret for aes and xchacha20
+    return (0, hkdf_1.hkdf)(sha256_1.sha256, master, undefined, undefined, 32);
+}
+exports.deriveKey = deriveKey;
+function _exec(is_encryption, key, data) {
+    var algorithm = (0, config_1.symmetricAlgorithm)();
+    var callback = is_encryption ? _encrypt : _decrypt;
+    if (algorithm === "aes-256-gcm") {
+        return callback(compat_1.aes256gcm, key, data, (0, config_1.symmetricNonceLength)());
+    }
+    else if (algorithm === "xchacha20") {
+        return callback(chacha_1.xchacha20poly1305, key, data, consts_1.XCHACHA20_NONCE_LENGTH);
+    }
+    else {
+        throw new Error("Not implemented");
+    }
+}
+function _encrypt(func, key, plainText, nonceLength) {
+    var nonce = (0, utils_2.randomBytes)(nonceLength);
+    var cipher = func(key, nonce);
+    var ciphered = cipher.encrypt(plainText); // TAG + encrypted
+    var encrypted = ciphered.subarray(0, ciphered.length - consts_1.AEAD_TAG_LENGTH);
+    var tag = ciphered.subarray(-consts_1.AEAD_TAG_LENGTH);
+    return (0, utils_1.concatBytes)(nonce, tag, encrypted);
+}
+function _decrypt(func, key, cipherText, nonceLength) {
+    var nonceTagLength = nonceLength + consts_1.AEAD_TAG_LENGTH;
+    var nonce = cipherText.subarray(0, nonceLength);
+    var tag = cipherText.subarray(nonceLength, nonceTagLength);
+    var encrypted = cipherText.subarray(nonceTagLength);
+    var decipher = func(key, Uint8Array.from(nonce)); // to reset byteOffset
+    var ciphered = (0, utils_1.concatBytes)(encrypted, tag);
+    return decipher.decrypt(ciphered);
+}