Hyperledger Identus is open-source self-sovereign identity: an issuer signs a verifiable credential, a holder keeps it in their wallet, a verifier checks it without phoning the issuer. Every idea in this catalog leans on one of four primitives, all reached over plain REST on an Identus Cloud Agent.
Primitive: `POST /did-registrar/dids` with a document template (curve `secp256k1`, purposes `authentication` + `assertionMethod`) then `POST /did-registrar/dids/{didRef}/publications` — the Identus Cloud Agent mints a decentralised identifier the holder controls and publishes it so anyone can resolve it
UI: a one-tap identity button that mints a portable DID for the artist, studio, or work and shows its resolvable document
Primitive: `POST /connections` with `{ label, goalCode }` returns an out-of-band invitation URL; the other side calls `POST /connection-invitations` to accept, and both agents settle into a `ConnectionResponseSent` / `ConnectionResponseReceived` state over DIDComm
UI: a QR code or invitation link that pairs two people's wallets into a private, mutually-authenticated channel
Primitive: `POST /issue-credentials/credential-offers` with `{ claims, issuingDID, credentialFormat: "JWT", automaticIssuance: true }` (connection-bound or connectionless with a `goalCode`) — the agent signs the claims with the issuer's published `assertionMethod` key and returns a verifiable credential the holder keeps
UI: an issue button that turns a fact — a credit, a licence, a role, a provenance record — into a signed credential in the recipient's wallet
Primitive: `POST /present-proof/presentations` creates a presentation request with the claims and trusted issuers you demand; the holder answers from their wallet and the verifier polls the record until `PresentationVerified` — optionally selective-disclosure or zero-knowledge so only the predicate (over-18, member-in-good-standing) is revealed
UI: a verification gate that checks a credential at the door — no callbacks to the issuer, no personal data copied into your database
Every mega-prompt in the catalog is written for one of three modes. Pick the mode on any idea page and the prompt rewrites itself.
An in-app mock of the Identus Cloud Agent. DIDs, connections, credentials and proofs are generated and stored locally, with the exact same shapes the real agent returns. No secrets, no containers, nothing to wait for.
Secrets: none
The real Identus stack — cloud-agent + prism-node + Postgres — running from a docker compose file on the participant's machine, reachable at http://localhost:8085/cloud-agent. Sprites is used to author and lint the compose file, not to run it.
Secrets: AGENT_BASE_URL, AGENT_API_KEY
A dedicated Fly Machines deployment — Postgres, prism-node and cloud-agent, each its own machine — serving HTTPS on a public app hostname so remote wallets and judges can actually reach it.
Secrets: AGENT_BASE_URL, AGENT_API_KEY
The Identus docs leave a few edges ambiguous. These bite hardest in a one-shot Lovable build.
Only a PUBLISHED did:prism carrying an `assertionMethod` key can sign a credential offer. Create → publish → wait for `PUBLISHED`, or issuance fails with a cryptic 422.
A direct Fly deploy has no APISIX gateway, so strip any trailing `/cloud-agent` from the base URL. The local docker compose stack keeps it.
POST creates a record; you then poll `protocolState` — `OfferSent` → `CredentialSent`, `RequestSent` → `PresentationVerified`. Never assume the POST finished the job.
Issuing without an established connection means omitting `connectionId` and supplying a `goalCode`. Send neither and you get "Missing connectionId".
`DIDCOMM_SERVICE_URL` must point at a real, publicly reachable host with port 8090 published. A placeholder makes every invitation undeliverable.
First boot migrates four databases. Allow ~5 minutes and at least 4 GB of memory before deciding the agent is broken — under that it gets OOM-killed mid-migration.
Primitives, agent modes, REST shapes, failure modes and all 1,000 catalog entries — formatted for pasting straight into ChatGPT, Claude or your editor's assistant.