@credo-ts/core 0.6.1-pr-2091-20241119140918 → 0.6.1

package/build/modules/dif-presentation-exchange/utils/credentialSelection.d.mts

@@ -0,0 +1,5 @@
+import "../../sd-jwt-vc/index.mjs";
+import "../../mdoc/index.mjs";
+import "../models/index.mjs";
+import "../../vc/index.mjs";
+import { PEX } from "@animo-id/pex";

package/build/modules/dif-presentation-exchange/utils/credentialSelection.mjs

@@ -0,0 +1,195 @@
+
+
+import { CredoError } from "../../../error/CredoError.mjs";
+import "../../../error/index.mjs";
+import { Hasher } from "../../../crypto/hashes/Hasher.mjs";
+import { ClaimFormat } from "../../vc/models/ClaimFormat.mjs";
+import "../../../crypto/index.mjs";
+import { W3cCredentialRecord } from "../../vc/repository/W3cCredentialRecord.mjs";
+import "../../vc/index.mjs";
+import { MdocRecord } from "../../mdoc/repository/MdocRecord.mjs";
+import { SdJwtVcRecord } from "../../sd-jwt-vc/repository/SdJwtVcRecord.mjs";
+import { MdocDeviceResponse } from "../../mdoc/MdocDeviceResponse.mjs";
+import "../../mdoc/index.mjs";
+import "../../sd-jwt-vc/index.mjs";
+import { DifPresentationExchangeError } from "../DifPresentationExchangeError.mjs";
+import { getSphereonOriginalVerifiableCredential } from "./transform.mjs";
+import { decodeSdJwtSync, getClaimsSync } from "@sd-jwt/decode";
+import { Status } from "@animo-id/pex";
+import { SubmissionRequirementMatchType } from "@animo-id/pex/dist/main/lib/evaluation/core/index.js";
+import { JSONPath } from "@astronautlabs/jsonpath";
+import { Rules } from "@sphereon/pex-models";
+
+//#region src/modules/dif-presentation-exchange/utils/credentialSelection.ts
+async function getCredentialsForRequest(pex, presentationDefinition, credentialRecords) {
+	const encodedCredentials = credentialRecords.map(getSphereonOriginalVerifiableCredential);
+	const selectResultsRaw = pex.selectFrom(presentationDefinition, encodedCredentials);
+	const selectResults = {
+		...selectResultsRaw,
+		matches: selectResultsRaw.matches ?? [],
+		verifiableCredential: selectResultsRaw.verifiableCredential?.map((selectedEncoded, index) => {
+			const credentialRecordIndex = selectResultsRaw.vcIndexes?.[index];
+			if (credentialRecordIndex === void 0 || credentialRecordIndex === -1) throw new DifPresentationExchangeError("Unable to find credential in credential records.");
+			const credentialRecord = credentialRecords[credentialRecordIndex];
+			if (credentialRecord instanceof SdJwtVcRecord) {
+				const { jwt, disclosures } = decodeSdJwtSync(selectedEncoded, Hasher.hash);
+				const prettyClaims = getClaimsSync(jwt.payload, disclosures, Hasher.hash);
+				return {
+					claimFormat: ClaimFormat.SdJwtDc,
+					credentialRecord,
+					disclosedPayload: prettyClaims
+				};
+			}
+			if (credentialRecord instanceof MdocRecord) return {
+				claimFormat: ClaimFormat.MsoMdoc,
+				credentialRecord,
+				disclosedPayload: {}
+			};
+			if (credentialRecord instanceof W3cCredentialRecord) return {
+				claimFormat: credentialRecord.firstCredential.claimFormat,
+				credentialRecord
+			};
+			throw new CredoError("Unrecognized credential record type");
+		}) ?? []
+	};
+	const presentationSubmission = {
+		requirements: [],
+		areRequirementsSatisfied: false,
+		name: presentationDefinition.name,
+		purpose: presentationDefinition.purpose
+	};
+	if (!presentationDefinition.submission_requirements || presentationDefinition.submission_requirements.length === 0) presentationSubmission.requirements = getSubmissionRequirementsForAllInputDescriptors(presentationDefinition.input_descriptors, selectResults);
+	else presentationSubmission.requirements = getSubmissionRequirements(presentationDefinition, selectResults);
+	const allEntries = presentationSubmission.requirements.flatMap((requirement) => requirement.submissionEntry);
+	const inputDescriptorsForMdocCredential = /* @__PURE__ */ new Map();
+	for (const entry of allEntries) for (const verifiableCredential of entry.verifiableCredentials) {
+		if (verifiableCredential.claimFormat !== ClaimFormat.MsoMdoc) continue;
+		const set = inputDescriptorsForMdocCredential.get(verifiableCredential) ?? /* @__PURE__ */ new Set();
+		set.add(entry.inputDescriptorId);
+		inputDescriptorsForMdocCredential.set(verifiableCredential, set);
+	}
+	for (const [verifiableCredential, inputDescriptorIds] of inputDescriptorsForMdocCredential.entries()) {
+		if (verifiableCredential.claimFormat !== ClaimFormat.MsoMdoc) continue;
+		const inputDescriptorsForCredential = presentationDefinition.input_descriptors.filter(({ id }) => inputDescriptorIds.has(id));
+		const mdoc = verifiableCredential.credentialRecord.firstCredential;
+		verifiableCredential.disclosedPayload = MdocDeviceResponse.limitDisclosureToInputDescriptor({
+			inputDescriptor: {
+				id: mdoc.docType,
+				format: { mso_mdoc: { alg: [] } },
+				constraints: {
+					limit_disclosure: "required",
+					fields: inputDescriptorsForCredential.flatMap((i) => i.constraints?.fields ?? [])
+				}
+			},
+			mdoc
+		});
+	}
+	if (presentationSubmission.requirements.length === 0) throw new DifPresentationExchangeError("Presentation Definition does not require any credentials. Optional credentials are not included in the presentation submission.");
+	if (selectResults.areRequiredCredentialsPresent === Status.ERROR) return presentationSubmission;
+	return {
+		...presentationSubmission,
+		areRequirementsSatisfied: presentationSubmission.requirements.every((requirement) => requirement.isRequirementSatisfied)
+	};
+}
+function getSubmissionRequirements(presentationDefinition, selectResults) {
+	const submissionRequirements = [];
+	const matches = selectResults.matches;
+	if (!matches.every((match) => match.type === SubmissionRequirementMatchType.SubmissionRequirement && match.from)) throw new DifPresentationExchangeError(`Expected all matches to be of type '${SubmissionRequirementMatchType.SubmissionRequirement}' with 'from' key.`);
+	presentationDefinition.submission_requirements?.forEach((submissionRequirement, submissionRequirementIndex) => {
+		if (submissionRequirement.from_nested) throw new DifPresentationExchangeError("Presentation definition contains requirement using 'from_nested', which is not supported yet.");
+		if (!submissionRequirement.from) throw new DifPresentationExchangeError("Missing 'from' in submission requirement match");
+		const match = matches.find((match$1) => match$1.id === submissionRequirementIndex);
+		if (!match) throw new Error(`Unable to find a match for submission requirement with index '${submissionRequirementIndex}'`);
+		if (submissionRequirement.rule === Rules.All) {
+			const selectedSubmission = getSubmissionRequirementRuleAll(submissionRequirement, presentationDefinition, selectResults.verifiableCredential, match);
+			submissionRequirements.push(selectedSubmission);
+		} else {
+			const selectedSubmission = getSubmissionRequirementRulePick(submissionRequirement, presentationDefinition, selectResults.verifiableCredential, match);
+			submissionRequirements.push(selectedSubmission);
+		}
+	});
+	return submissionRequirements.filter((requirement) => requirement.needsCount > 0);
+}
+function getSubmissionRequirementsForAllInputDescriptors(inputDescriptors, selectResults) {
+	const submissionRequirements = [];
+	const matches = selectResults.matches;
+	if (!matches.every((match) => match.type === SubmissionRequirementMatchType.InputDescriptor)) throw new DifPresentationExchangeError(`Expected all matches to be of type '${SubmissionRequirementMatchType.InputDescriptor}' when.`);
+	for (const inputDescriptor of inputDescriptors) {
+		const submission = getSubmissionForInputDescriptor(inputDescriptor, selectResults.verifiableCredential, matches);
+		submissionRequirements.push({
+			rule: Rules.Pick,
+			needsCount: 1,
+			submissionEntry: [submission],
+			isRequirementSatisfied: submission.verifiableCredentials.length >= 1
+		});
+	}
+	return submissionRequirements;
+}
+function getSubmissionRequirementRuleAll(submissionRequirement, presentationDefinition, verifiableCredentials, match) {
+	if (!submissionRequirement.from) throw new DifPresentationExchangeError("Missing 'from' in submission requirement match.");
+	const selectedSubmission = {
+		rule: Rules.All,
+		needsCount: 0,
+		name: submissionRequirement.name,
+		purpose: submissionRequirement.purpose,
+		submissionEntry: [],
+		isRequirementSatisfied: false
+	};
+	for (const inputDescriptor of presentationDefinition.input_descriptors) {
+		if (!inputDescriptor.group?.includes(match.from)) continue;
+		const submission = getSubmissionForInputDescriptor(inputDescriptor, verifiableCredentials, match.input_descriptors);
+		selectedSubmission.needsCount += 1;
+		selectedSubmission.submissionEntry.push(submission);
+	}
+	return {
+		...selectedSubmission,
+		isRequirementSatisfied: selectedSubmission.submissionEntry.every((submission) => submission.verifiableCredentials.length >= 1)
+	};
+}
+function getSubmissionRequirementRulePick(submissionRequirement, presentationDefinition, verifiableCredentials, match) {
+	if (!submissionRequirement.from) throw new DifPresentationExchangeError("Missing 'from' in submission requirement match.");
+	const selectedSubmission = {
+		rule: Rules.Pick,
+		needsCount: submissionRequirement.count ?? submissionRequirement.min ?? 1,
+		name: submissionRequirement.name,
+		purpose: submissionRequirement.purpose,
+		submissionEntry: [],
+		isRequirementSatisfied: false
+	};
+	const satisfiedSubmissions = [];
+	const unsatisfiedSubmissions = [];
+	for (const inputDescriptor of presentationDefinition.input_descriptors) {
+		if (!inputDescriptor.group?.includes(match.from)) continue;
+		const submission = getSubmissionForInputDescriptor(inputDescriptor, verifiableCredentials, match.input_descriptors);
+		if (submission.verifiableCredentials.length >= 1) satisfiedSubmissions.push(submission);
+		else unsatisfiedSubmissions.push(submission);
+	}
+	return {
+		...selectedSubmission,
+		isRequirementSatisfied: satisfiedSubmissions.length >= selectedSubmission.needsCount,
+		submissionEntry: satisfiedSubmissions.length >= selectedSubmission.needsCount ? satisfiedSubmissions : [...satisfiedSubmissions, ...unsatisfiedSubmissions]
+	};
+}
+function getSubmissionForInputDescriptor(inputDescriptor, verifiableCredentials, matches) {
+	const matchesForInputDescriptor = matches.filter((m) => m.id === inputDescriptor.id);
+	const submissionEntry = {
+		inputDescriptorId: inputDescriptor.id,
+		name: inputDescriptor.name,
+		purpose: inputDescriptor.purpose,
+		verifiableCredentials: matchesForInputDescriptor.flatMap((matchForInputDescriptor) => extractCredentialsFromInputDescriptorMatch(matchForInputDescriptor, verifiableCredentials))
+	};
+	if (!matchesForInputDescriptor?.length) return submissionEntry;
+	return submissionEntry;
+}
+function extractCredentialsFromInputDescriptorMatch(match, availableCredentials) {
+	const verifiableCredentials = [];
+	for (const vcPath of match.vc_path) {
+		const [verifiableCredential] = JSONPath.query({ verifiableCredential: availableCredentials }, vcPath);
+		verifiableCredentials.push(verifiableCredential);
+	}
+	return verifiableCredentials;
+}
+
+//#endregion
+export { getCredentialsForRequest };
+//# sourceMappingURL=credentialSelection.mjs.map

package/build/modules/dif-presentation-exchange/utils/credentialSelection.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentialSelection.mjs","names":["selectResults: CredentialRecordSelectResults","presentationSubmission: DifPexCredentialsForRequest","submissionRequirements: Array<DifPexCredentialsForRequestRequirement>","match","selectedSubmission: DifPexCredentialsForRequestRequirement","satisfiedSubmissions: Array<DifPexCredentialsForRequestSubmissionEntry>","unsatisfiedSubmissions: Array<DifPexCredentialsForRequestSubmissionEntry>","submissionEntry: DifPexCredentialsForRequestSubmissionEntry","verifiableCredentials: SubmissionEntryCredential[]"],"sources":["../../../../src/modules/dif-presentation-exchange/utils/credentialSelection.ts"],"sourcesContent":["import {\n  type IPresentationDefinition,\n  type PEX,\n  type SelectResults,\n  Status,\n  type SubmissionRequirementMatch,\n} from '@animo-id/pex'\nimport type {\n  SubmissionRequirementMatchFrom,\n  SubmissionRequirementMatchInputDescriptor,\n} from '@animo-id/pex/dist/main/lib/evaluation/core'\nimport { SubmissionRequirementMatchType } from '@animo-id/pex/dist/main/lib/evaluation/core/index.js'\nimport { JSONPath } from '@astronautlabs/jsonpath'\nimport { decodeSdJwtSync, getClaimsSync } from '@sd-jwt/decode'\nimport type { InputDescriptorV1, InputDescriptorV2, SubmissionRequirement } from '@sphereon/pex-models'\nimport { Rules } from '@sphereon/pex-models'\nimport { Hasher } from '../../../crypto'\nimport { CredoError } from '../../../error'\nimport type { JsonObject } from '../../../types'\nimport { MdocRecord } from '../../mdoc'\nimport { MdocDeviceResponse } from '../../mdoc/MdocDeviceResponse'\nimport { SdJwtVcRecord } from '../../sd-jwt-vc'\nimport { ClaimFormat, W3cCredentialRecord } from '../../vc'\nimport { DifPresentationExchangeError } from '../DifPresentationExchangeError'\nimport type {\n  DifPexCredentialsForRequest,\n  DifPexCredentialsForRequestRequirement,\n  DifPexCredentialsForRequestSubmissionEntry,\n  SubmissionEntryCredential,\n} from '../models'\nimport { getSphereonOriginalVerifiableCredential } from './transform'\n\nexport async function getCredentialsForRequest(\n  // PEX instance with hasher defined\n  pex: PEX,\n  presentationDefinition: IPresentationDefinition,\n  credentialRecords: Array<W3cCredentialRecord | SdJwtVcRecord | MdocRecord>\n): Promise<DifPexCredentialsForRequest> {\n  const encodedCredentials = credentialRecords.map(getSphereonOriginalVerifiableCredential)\n  const selectResultsRaw = pex.selectFrom(presentationDefinition, encodedCredentials)\n\n  const selectResults: CredentialRecordSelectResults = {\n    ...selectResultsRaw,\n    matches: selectResultsRaw.matches ?? [],\n    // Map the encoded credential to their respective credential record\n    verifiableCredential:\n      selectResultsRaw.verifiableCredential?.map((selectedEncoded, index): SubmissionEntryCredential => {\n        const credentialRecordIndex = selectResultsRaw.vcIndexes?.[index]\n        if (credentialRecordIndex === undefined || credentialRecordIndex === -1) {\n          throw new DifPresentationExchangeError('Unable to find credential in credential records.')\n        }\n        const credentialRecord = credentialRecords[credentialRecordIndex]\n        if (credentialRecord instanceof SdJwtVcRecord) {\n          // selectedEncoded always string when SdJwtVcRecord\n          // Get the decoded payload from the the selected credential, this already has SD applied\n          const { jwt, disclosures } = decodeSdJwtSync(selectedEncoded as string, Hasher.hash)\n          const prettyClaims = getClaimsSync(jwt.payload, disclosures, Hasher.hash)\n\n          return {\n            claimFormat: ClaimFormat.SdJwtDc,\n            credentialRecord,\n            disclosedPayload: prettyClaims as JsonObject,\n          }\n        }\n        if (credentialRecord instanceof MdocRecord) {\n          return {\n            claimFormat: ClaimFormat.MsoMdoc,\n            credentialRecord,\n            disclosedPayload: {},\n          }\n        }\n        if (credentialRecord instanceof W3cCredentialRecord) {\n          return {\n            claimFormat: credentialRecord.firstCredential.claimFormat,\n            credentialRecord,\n          }\n        }\n        throw new CredoError('Unrecognized credential record type')\n      }) ?? [],\n  }\n\n  const presentationSubmission: DifPexCredentialsForRequest = {\n    requirements: [],\n    areRequirementsSatisfied: false,\n    name: presentationDefinition.name,\n    purpose: presentationDefinition.purpose,\n  }\n\n  // If there's no submission requirements, ALL input descriptors MUST be satisfied\n  if (!presentationDefinition.submission_requirements || presentationDefinition.submission_requirements.length === 0) {\n    presentationSubmission.requirements = getSubmissionRequirementsForAllInputDescriptors(\n      presentationDefinition.input_descriptors,\n      selectResults\n    )\n  } else {\n    presentationSubmission.requirements = getSubmissionRequirements(presentationDefinition, selectResults)\n  }\n\n  const allEntries = presentationSubmission.requirements.flatMap((requirement) => requirement.submissionEntry)\n\n  const inputDescriptorsForMdocCredential = new Map<SubmissionEntryCredential, Set<string>>()\n  for (const entry of allEntries)\n    for (const verifiableCredential of entry.verifiableCredentials) {\n      if (verifiableCredential.claimFormat !== ClaimFormat.MsoMdoc) continue\n\n      const set = inputDescriptorsForMdocCredential.get(verifiableCredential) ?? new Set()\n      set.add(entry.inputDescriptorId)\n      inputDescriptorsForMdocCredential.set(verifiableCredential, set)\n    }\n\n  // NOTE: it might be better to apply disclosure per credential/match (as that's also how mdoc does this)\n  // however this doesn't work very well in wallets, as you usually won't show the same credential twice with\n  // different disclosed attributes\n  // Apply limit disclosure for all mdocs\n  for (const [verifiableCredential, inputDescriptorIds] of inputDescriptorsForMdocCredential.entries()) {\n    if (verifiableCredential.claimFormat !== ClaimFormat.MsoMdoc) continue\n\n    const inputDescriptorsForCredential = presentationDefinition.input_descriptors.filter(({ id }) =>\n      inputDescriptorIds.has(id)\n    )\n\n    const mdoc = verifiableCredential.credentialRecord.firstCredential\n    verifiableCredential.disclosedPayload = MdocDeviceResponse.limitDisclosureToInputDescriptor({\n      inputDescriptor: {\n        id: mdoc.docType,\n        format: {\n          mso_mdoc: {\n            alg: [],\n          },\n        },\n        constraints: {\n          limit_disclosure: 'required',\n          fields: inputDescriptorsForCredential.flatMap((i) => i.constraints?.fields ?? []),\n        },\n      },\n      mdoc,\n    })\n  }\n\n  // There may be no requirements if we filter out all optional ones. To not makes things too complicated, we see it as an error\n  // for now if a request is made that has no required requirements (but only e.g. min: 0, which means we don't need to disclose anything)\n  // I see this more as the fault of the presentation definition, as it should have at least some requirements.\n  if (presentationSubmission.requirements.length === 0) {\n    throw new DifPresentationExchangeError(\n      'Presentation Definition does not require any credentials. Optional credentials are not included in the presentation submission.'\n    )\n  }\n\n  if (selectResults.areRequiredCredentialsPresent === Status.ERROR) {\n    return presentationSubmission\n  }\n\n  return {\n    ...presentationSubmission,\n\n    // If all requirements are satisfied, the presentation submission is satisfied\n    areRequirementsSatisfied: presentationSubmission.requirements.every(\n      (requirement) => requirement.isRequirementSatisfied\n    ),\n  }\n}\n\nfunction getSubmissionRequirements(\n  presentationDefinition: IPresentationDefinition,\n  selectResults: CredentialRecordSelectResults\n): Array<DifPexCredentialsForRequestRequirement> {\n  const submissionRequirements: Array<DifPexCredentialsForRequestRequirement> = []\n\n  const matches = selectResults.matches as SubmissionRequirementMatchFrom[]\n  if (!matches.every((match) => match.type === SubmissionRequirementMatchType.SubmissionRequirement && match.from)) {\n    throw new DifPresentationExchangeError(\n      `Expected all matches to be of type '${SubmissionRequirementMatchType.SubmissionRequirement}' with 'from' key.`\n    )\n  }\n\n  // There are submission requirements, so we need to select the input_descriptors\n  // based on the submission requirements\n  presentationDefinition.submission_requirements?.forEach((submissionRequirement, submissionRequirementIndex) => {\n    // Check: if the submissionRequirement uses `from_nested`, as we don't support this yet\n    if (submissionRequirement.from_nested) {\n      throw new DifPresentationExchangeError(\n        \"Presentation definition contains requirement using 'from_nested', which is not supported yet.\"\n      )\n    }\n\n    // Check if there's a 'from'. If not the structure is not as we expect it\n    if (!submissionRequirement.from) {\n      throw new DifPresentationExchangeError(\"Missing 'from' in submission requirement match\")\n    }\n\n    const match = matches.find((match) => match.id === submissionRequirementIndex)\n    if (!match) {\n      throw new Error(`Unable to find a match for submission requirement with index '${submissionRequirementIndex}'`)\n    }\n\n    if (submissionRequirement.rule === Rules.All) {\n      const selectedSubmission = getSubmissionRequirementRuleAll(\n        submissionRequirement,\n        presentationDefinition,\n        selectResults.verifiableCredential,\n        match\n      )\n      submissionRequirements.push(selectedSubmission)\n    } else {\n      const selectedSubmission = getSubmissionRequirementRulePick(\n        submissionRequirement,\n        presentationDefinition,\n        selectResults.verifiableCredential,\n        match\n      )\n\n      submissionRequirements.push(selectedSubmission)\n    }\n  })\n\n  // Submission may have requirement that doesn't require a credential to be submitted (e.g. min: 0)\n  // We use minimization strategy, and thus only disclose the minimum amount of information\n  const requirementsWithCredentials = submissionRequirements.filter((requirement) => requirement.needsCount > 0)\n\n  return requirementsWithCredentials\n}\n\nfunction getSubmissionRequirementsForAllInputDescriptors(\n  inputDescriptors: Array<InputDescriptorV1> | Array<InputDescriptorV2>,\n  selectResults: CredentialRecordSelectResults\n): Array<DifPexCredentialsForRequestRequirement> {\n  const submissionRequirements: Array<DifPexCredentialsForRequestRequirement> = []\n\n  const matches = selectResults.matches as SubmissionRequirementMatchInputDescriptor[]\n  if (!matches.every((match) => match.type === SubmissionRequirementMatchType.InputDescriptor)) {\n    throw new DifPresentationExchangeError(\n      `Expected all matches to be of type '${SubmissionRequirementMatchType.InputDescriptor}' when.`\n    )\n  }\n\n  for (const inputDescriptor of inputDescriptors) {\n    const submission = getSubmissionForInputDescriptor(inputDescriptor, selectResults.verifiableCredential, matches)\n    submissionRequirements.push({\n      rule: Rules.Pick,\n      needsCount: 1, // Every input descriptor is a distinct requirement, so the count is always 1,\n      submissionEntry: [submission],\n      isRequirementSatisfied: submission.verifiableCredentials.length >= 1,\n    })\n  }\n\n  return submissionRequirements\n}\n\nfunction getSubmissionRequirementRuleAll(\n  submissionRequirement: SubmissionRequirement,\n  presentationDefinition: IPresentationDefinition,\n  verifiableCredentials: SubmissionEntryCredential[],\n  match: SubmissionRequirementMatchFrom\n) {\n  // Check if there's a 'from'. If not the structure is not as we expect it\n  if (!submissionRequirement.from)\n    throw new DifPresentationExchangeError(\"Missing 'from' in submission requirement match.\")\n\n  const selectedSubmission: DifPexCredentialsForRequestRequirement = {\n    rule: Rules.All,\n    needsCount: 0,\n    name: submissionRequirement.name,\n    purpose: submissionRequirement.purpose,\n    submissionEntry: [],\n    isRequirementSatisfied: false,\n  }\n\n  for (const inputDescriptor of presentationDefinition.input_descriptors) {\n    // We only want to get the submission if the input descriptor belongs to the group\n    if (!inputDescriptor.group?.includes(match.from)) continue\n\n    const submission = getSubmissionForInputDescriptor(inputDescriptor, verifiableCredentials, match.input_descriptors)\n\n    // Rule ALL, so for every input descriptor that matches in this group, we need to add it\n    selectedSubmission.needsCount += 1\n    selectedSubmission.submissionEntry.push(submission)\n  }\n\n  return {\n    ...selectedSubmission,\n\n    // If all submissions have a credential, the requirement is satisfied\n    isRequirementSatisfied: selectedSubmission.submissionEntry.every(\n      (submission) => submission.verifiableCredentials.length >= 1\n    ),\n  }\n}\n\nfunction getSubmissionRequirementRulePick(\n  submissionRequirement: SubmissionRequirement,\n  presentationDefinition: IPresentationDefinition,\n  verifiableCredentials: SubmissionEntryCredential[],\n  match: SubmissionRequirementMatchFrom\n) {\n  // Check if there's a 'from'. If not the structure is not as we expect it\n  if (!submissionRequirement.from) {\n    throw new DifPresentationExchangeError(\"Missing 'from' in submission requirement match.\")\n  }\n\n  const selectedSubmission: DifPexCredentialsForRequestRequirement = {\n    rule: Rules.Pick,\n    needsCount: submissionRequirement.count ?? submissionRequirement.min ?? 1,\n    name: submissionRequirement.name,\n    purpose: submissionRequirement.purpose,\n    // If there's no count, min, or max we assume one credential is required for submission\n    // however, the exact behavior is not specified in the spec\n    submissionEntry: [],\n    isRequirementSatisfied: false,\n  }\n\n  const satisfiedSubmissions: Array<DifPexCredentialsForRequestSubmissionEntry> = []\n  const unsatisfiedSubmissions: Array<DifPexCredentialsForRequestSubmissionEntry> = []\n\n  for (const inputDescriptor of presentationDefinition.input_descriptors) {\n    // We only want to get the submission if the input descriptor belongs to the group\n    if (!inputDescriptor.group?.includes(match.from)) continue\n\n    const submission = getSubmissionForInputDescriptor(inputDescriptor, verifiableCredentials, match.input_descriptors)\n\n    if (submission.verifiableCredentials.length >= 1) {\n      satisfiedSubmissions.push(submission)\n    } else {\n      unsatisfiedSubmissions.push(submission)\n    }\n\n    // If we have found enough credentials to satisfy the requirement, we could stop\n    // but the user may not want the first x that match, so we continue and return all matches\n    // if (satisfiedSubmissions.length === selectedSubmission.needsCount) break\n  }\n\n  return {\n    ...selectedSubmission,\n\n    // If there are enough satisfied submissions, the requirement is satisfied\n    isRequirementSatisfied: satisfiedSubmissions.length >= selectedSubmission.needsCount,\n\n    // if the requirement is satisfied, we only need to return the satisfied submissions\n    // however if the requirement is not satisfied, we include all entries so the wallet could\n    // render which credentials are missing.\n    submissionEntry:\n      satisfiedSubmissions.length >= selectedSubmission.needsCount\n        ? satisfiedSubmissions\n        : [...satisfiedSubmissions, ...unsatisfiedSubmissions],\n  }\n}\n\nfunction getSubmissionForInputDescriptor(\n  inputDescriptor: InputDescriptorV1 | InputDescriptorV2,\n  verifiableCredentials: SubmissionEntryCredential[],\n  matches: SubmissionRequirementMatchInputDescriptor[]\n): DifPexCredentialsForRequestSubmissionEntry {\n  const matchesForInputDescriptor = matches.filter((m) => m.id === inputDescriptor.id)\n\n  const submissionEntry: DifPexCredentialsForRequestSubmissionEntry = {\n    inputDescriptorId: inputDescriptor.id,\n    name: inputDescriptor.name,\n    purpose: inputDescriptor.purpose,\n    verifiableCredentials: matchesForInputDescriptor.flatMap((matchForInputDescriptor) =>\n      extractCredentialsFromInputDescriptorMatch(matchForInputDescriptor, verifiableCredentials)\n    ),\n  }\n\n  // return early if no matches.\n  if (!matchesForInputDescriptor?.length) return submissionEntry\n\n  return submissionEntry\n}\n\nfunction extractCredentialsFromInputDescriptorMatch(\n  match: SubmissionRequirementMatchInputDescriptor,\n  availableCredentials: SubmissionEntryCredential[]\n) {\n  const verifiableCredentials: SubmissionEntryCredential[] = []\n\n  for (const vcPath of match.vc_path) {\n    const [verifiableCredential] = JSONPath.query(\n      { verifiableCredential: availableCredentials },\n      vcPath\n    ) as SubmissionEntryCredential[]\n    verifiableCredentials.push(verifiableCredential)\n  }\n\n  return verifiableCredentials\n}\n\n/**\n * Custom SelectResults that includes the Credo records instead of the encoded verifiable credential\n */\ntype CredentialRecordSelectResults = Omit<SelectResults, 'verifiableCredential'> & {\n  verifiableCredential: SubmissionEntryCredential[]\n  matches: SubmissionRequirementMatch[]\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAgCA,eAAsB,yBAEpB,KACA,wBACA,mBACsC;CACtC,MAAM,qBAAqB,kBAAkB,IAAI,wCAAwC;CACzF,MAAM,mBAAmB,IAAI,WAAW,wBAAwB,mBAAmB;CAEnF,MAAMA,gBAA+C;EACnD,GAAG;EACH,SAAS,iBAAiB,WAAW,EAAE;EAEvC,sBACE,iBAAiB,sBAAsB,KAAK,iBAAiB,UAAqC;GAChG,MAAM,wBAAwB,iBAAiB,YAAY;AAC3D,OAAI,0BAA0B,UAAa,0BAA0B,GACnE,OAAM,IAAI,6BAA6B,mDAAmD;GAE5F,MAAM,mBAAmB,kBAAkB;AAC3C,OAAI,4BAA4B,eAAe;IAG7C,MAAM,EAAE,KAAK,gBAAgB,gBAAgB,iBAA2B,OAAO,KAAK;IACpF,MAAM,eAAe,cAAc,IAAI,SAAS,aAAa,OAAO,KAAK;AAEzE,WAAO;KACL,aAAa,YAAY;KACzB;KACA,kBAAkB;KACnB;;AAEH,OAAI,4BAA4B,WAC9B,QAAO;IACL,aAAa,YAAY;IACzB;IACA,kBAAkB,EAAE;IACrB;AAEH,OAAI,4BAA4B,oBAC9B,QAAO;IACL,aAAa,iBAAiB,gBAAgB;IAC9C;IACD;AAEH,SAAM,IAAI,WAAW,sCAAsC;IAC3D,IAAI,EAAE;EACX;CAED,MAAMC,yBAAsD;EAC1D,cAAc,EAAE;EAChB,0BAA0B;EAC1B,MAAM,uBAAuB;EAC7B,SAAS,uBAAuB;EACjC;AAGD,KAAI,CAAC,uBAAuB,2BAA2B,uBAAuB,wBAAwB,WAAW,EAC/G,wBAAuB,eAAe,gDACpC,uBAAuB,mBACvB,cACD;KAED,wBAAuB,eAAe,0BAA0B,wBAAwB,cAAc;CAGxG,MAAM,aAAa,uBAAuB,aAAa,SAAS,gBAAgB,YAAY,gBAAgB;CAE5G,MAAM,oDAAoC,IAAI,KAA6C;AAC3F,MAAK,MAAM,SAAS,WAClB,MAAK,MAAM,wBAAwB,MAAM,uBAAuB;AAC9D,MAAI,qBAAqB,gBAAgB,YAAY,QAAS;EAE9D,MAAM,MAAM,kCAAkC,IAAI,qBAAqB,oBAAI,IAAI,KAAK;AACpF,MAAI,IAAI,MAAM,kBAAkB;AAChC,oCAAkC,IAAI,sBAAsB,IAAI;;AAOpE,MAAK,MAAM,CAAC,sBAAsB,uBAAuB,kCAAkC,SAAS,EAAE;AACpG,MAAI,qBAAqB,gBAAgB,YAAY,QAAS;EAE9D,MAAM,gCAAgC,uBAAuB,kBAAkB,QAAQ,EAAE,SACvF,mBAAmB,IAAI,GAAG,CAC3B;EAED,MAAM,OAAO,qBAAqB,iBAAiB;AACnD,uBAAqB,mBAAmB,mBAAmB,iCAAiC;GAC1F,iBAAiB;IACf,IAAI,KAAK;IACT,QAAQ,EACN,UAAU,EACR,KAAK,EAAE,EACR,EACF;IACD,aAAa;KACX,kBAAkB;KAClB,QAAQ,8BAA8B,SAAS,MAAM,EAAE,aAAa,UAAU,EAAE,CAAC;KAClF;IACF;GACD;GACD,CAAC;;AAMJ,KAAI,uBAAuB,aAAa,WAAW,EACjD,OAAM,IAAI,6BACR,kIACD;AAGH,KAAI,cAAc,kCAAkC,OAAO,MACzD,QAAO;AAGT,QAAO;EACL,GAAG;EAGH,0BAA0B,uBAAuB,aAAa,OAC3D,gBAAgB,YAAY,uBAC9B;EACF;;AAGH,SAAS,0BACP,wBACA,eAC+C;CAC/C,MAAMC,yBAAwE,EAAE;CAEhF,MAAM,UAAU,cAAc;AAC9B,KAAI,CAAC,QAAQ,OAAO,UAAU,MAAM,SAAS,+BAA+B,yBAAyB,MAAM,KAAK,CAC9G,OAAM,IAAI,6BACR,uCAAuC,+BAA+B,sBAAsB,oBAC7F;AAKH,wBAAuB,yBAAyB,SAAS,uBAAuB,+BAA+B;AAE7G,MAAI,sBAAsB,YACxB,OAAM,IAAI,6BACR,gGACD;AAIH,MAAI,CAAC,sBAAsB,KACzB,OAAM,IAAI,6BAA6B,iDAAiD;EAG1F,MAAM,QAAQ,QAAQ,MAAM,YAAUC,QAAM,OAAO,2BAA2B;AAC9E,MAAI,CAAC,MACH,OAAM,IAAI,MAAM,iEAAiE,2BAA2B,GAAG;AAGjH,MAAI,sBAAsB,SAAS,MAAM,KAAK;GAC5C,MAAM,qBAAqB,gCACzB,uBACA,wBACA,cAAc,sBACd,MACD;AACD,0BAAuB,KAAK,mBAAmB;SAC1C;GACL,MAAM,qBAAqB,iCACzB,uBACA,wBACA,cAAc,sBACd,MACD;AAED,0BAAuB,KAAK,mBAAmB;;GAEjD;AAMF,QAFoC,uBAAuB,QAAQ,gBAAgB,YAAY,aAAa,EAAE;;AAKhH,SAAS,gDACP,kBACA,eAC+C;CAC/C,MAAMD,yBAAwE,EAAE;CAEhF,MAAM,UAAU,cAAc;AAC9B,KAAI,CAAC,QAAQ,OAAO,UAAU,MAAM,SAAS,+BAA+B,gBAAgB,CAC1F,OAAM,IAAI,6BACR,uCAAuC,+BAA+B,gBAAgB,SACvF;AAGH,MAAK,MAAM,mBAAmB,kBAAkB;EAC9C,MAAM,aAAa,gCAAgC,iBAAiB,cAAc,sBAAsB,QAAQ;AAChH,yBAAuB,KAAK;GAC1B,MAAM,MAAM;GACZ,YAAY;GACZ,iBAAiB,CAAC,WAAW;GAC7B,wBAAwB,WAAW,sBAAsB,UAAU;GACpE,CAAC;;AAGJ,QAAO;;AAGT,SAAS,gCACP,uBACA,wBACA,uBACA,OACA;AAEA,KAAI,CAAC,sBAAsB,KACzB,OAAM,IAAI,6BAA6B,kDAAkD;CAE3F,MAAME,qBAA6D;EACjE,MAAM,MAAM;EACZ,YAAY;EACZ,MAAM,sBAAsB;EAC5B,SAAS,sBAAsB;EAC/B,iBAAiB,EAAE;EACnB,wBAAwB;EACzB;AAED,MAAK,MAAM,mBAAmB,uBAAuB,mBAAmB;AAEtE,MAAI,CAAC,gBAAgB,OAAO,SAAS,MAAM,KAAK,CAAE;EAElD,MAAM,aAAa,gCAAgC,iBAAiB,uBAAuB,MAAM,kBAAkB;AAGnH,qBAAmB,cAAc;AACjC,qBAAmB,gBAAgB,KAAK,WAAW;;AAGrD,QAAO;EACL,GAAG;EAGH,wBAAwB,mBAAmB,gBAAgB,OACxD,eAAe,WAAW,sBAAsB,UAAU,EAC5D;EACF;;AAGH,SAAS,iCACP,uBACA,wBACA,uBACA,OACA;AAEA,KAAI,CAAC,sBAAsB,KACzB,OAAM,IAAI,6BAA6B,kDAAkD;CAG3F,MAAMA,qBAA6D;EACjE,MAAM,MAAM;EACZ,YAAY,sBAAsB,SAAS,sBAAsB,OAAO;EACxE,MAAM,sBAAsB;EAC5B,SAAS,sBAAsB;EAG/B,iBAAiB,EAAE;EACnB,wBAAwB;EACzB;CAED,MAAMC,uBAA0E,EAAE;CAClF,MAAMC,yBAA4E,EAAE;AAEpF,MAAK,MAAM,mBAAmB,uBAAuB,mBAAmB;AAEtE,MAAI,CAAC,gBAAgB,OAAO,SAAS,MAAM,KAAK,CAAE;EAElD,MAAM,aAAa,gCAAgC,iBAAiB,uBAAuB,MAAM,kBAAkB;AAEnH,MAAI,WAAW,sBAAsB,UAAU,EAC7C,sBAAqB,KAAK,WAAW;MAErC,wBAAuB,KAAK,WAAW;;AAQ3C,QAAO;EACL,GAAG;EAGH,wBAAwB,qBAAqB,UAAU,mBAAmB;EAK1E,iBACE,qBAAqB,UAAU,mBAAmB,aAC9C,uBACA,CAAC,GAAG,sBAAsB,GAAG,uBAAuB;EAC3D;;AAGH,SAAS,gCACP,iBACA,uBACA,SAC4C;CAC5C,MAAM,4BAA4B,QAAQ,QAAQ,MAAM,EAAE,OAAO,gBAAgB,GAAG;CAEpF,MAAMC,kBAA8D;EAClE,mBAAmB,gBAAgB;EACnC,MAAM,gBAAgB;EACtB,SAAS,gBAAgB;EACzB,uBAAuB,0BAA0B,SAAS,4BACxD,2CAA2C,yBAAyB,sBAAsB,CAC3F;EACF;AAGD,KAAI,CAAC,2BAA2B,OAAQ,QAAO;AAE/C,QAAO;;AAGT,SAAS,2CACP,OACA,sBACA;CACA,MAAMC,wBAAqD,EAAE;AAE7D,MAAK,MAAM,UAAU,MAAM,SAAS;EAClC,MAAM,CAAC,wBAAwB,SAAS,MACtC,EAAE,sBAAsB,sBAAsB,EAC9C,OACD;AACD,wBAAsB,KAAK,qBAAqB;;AAGlD,QAAO"}

package/build/modules/dif-presentation-exchange/utils/index.d.mts

@@ -0,0 +1,4 @@
+import "./credentialSelection.mjs";
+import { DifPexPresentationWithDescriptor, extractPresentationsWithDescriptorsFromSubmission } from "./presentationSelection.mjs";
+import "./presentationsToCreate.mjs";
+import "./transform.mjs";

package/build/modules/dif-presentation-exchange/utils/index.mjs

@@ -0,0 +1,6 @@
+
+
+import { getSphereonOriginalVerifiableCredential, getSphereonOriginalVerifiablePresentation, getVerifiablePresentationFromEncoded } from "./transform.mjs";
+import { getCredentialsForRequest } from "./credentialSelection.mjs";
+import { extractPresentationsWithDescriptorsFromSubmission } from "./presentationSelection.mjs";
+import { getPresentationsToCreate } from "./presentationsToCreate.mjs";

package/build/modules/dif-presentation-exchange/utils/presentationSelection.d.mts

@@ -0,0 +1,40 @@
+import { SingleOrArray } from "../../../types.mjs";
+import { ClaimFormat } from "../../vc/models/ClaimFormat.mjs";
+import { W3cJsonLdVerifiableCredential } from "../../vc/data-integrity/models/W3cJsonLdVerifiableCredential.mjs";
+import { SdJwtVcHeader, SdJwtVcPayload } from "../../sd-jwt-vc/SdJwtVcOptions.mjs";
+import { SdJwtVc } from "../../sd-jwt-vc/SdJwtVcService.mjs";
+import "../../sd-jwt-vc/index.mjs";
+import { MdocDeviceResponse } from "../../mdoc/MdocDeviceResponse.mjs";
+import "../../mdoc/index.mjs";
+import { W3cJwtVerifiableCredential } from "../../vc/jwt-vc/W3cJwtVerifiableCredential.mjs";
+import { W3cJwtVerifiablePresentation } from "../../vc/jwt-vc/W3cJwtVerifiablePresentation.mjs";
+import { DifPresentationExchangeDefinition, DifPresentationExchangeSubmission, VerifiablePresentation } from "../models/index.mjs";
+import { W3cJsonLdVerifiablePresentation } from "../../vc/data-integrity/models/W3cJsonLdVerifiablePresentation.mjs";
+import "../../vc/index.mjs";
+import { Mdoc } from "../../mdoc/Mdoc.mjs";
+import * as _sphereon_pex_models20 from "@sphereon/pex-models";
+
+//#region src/modules/dif-presentation-exchange/utils/presentationSelection.d.ts
+type DifPexPresentationWithDescriptor = ReturnType<typeof extractPresentationsWithDescriptorsFromSubmission>[number];
+declare function extractPresentationsWithDescriptorsFromSubmission(presentations: SingleOrArray<VerifiablePresentation>, submission: DifPresentationExchangeSubmission, definition: DifPresentationExchangeDefinition): ({
+  readonly claimFormat: ClaimFormat.MsoMdoc;
+  readonly descriptor: _sphereon_pex_models20.Descriptor;
+  readonly presentation: MdocDeviceResponse;
+  readonly credential: Mdoc;
+  readonly inputDescriptor: _sphereon_pex_models20.InputDescriptorV1 | _sphereon_pex_models20.InputDescriptorV2;
+} | {
+  readonly claimFormat: ClaimFormat.JwtVp | ClaimFormat.LdpVp;
+  readonly descriptor: _sphereon_pex_models20.Descriptor;
+  readonly presentation: W3cJwtVerifiablePresentation | W3cJsonLdVerifiablePresentation;
+  readonly credential: W3cJwtVerifiableCredential | W3cJsonLdVerifiableCredential;
+  readonly inputDescriptor: _sphereon_pex_models20.InputDescriptorV1 | _sphereon_pex_models20.InputDescriptorV2;
+} | {
+  readonly claimFormat: ClaimFormat.SdJwtDc;
+  readonly descriptor: _sphereon_pex_models20.Descriptor;
+  readonly presentation: SdJwtVc<SdJwtVcHeader, SdJwtVcPayload>;
+  readonly credential: SdJwtVc<SdJwtVcHeader, SdJwtVcPayload>;
+  readonly inputDescriptor: _sphereon_pex_models20.InputDescriptorV1 | _sphereon_pex_models20.InputDescriptorV2;
+})[];
+//#endregion
+export { DifPexPresentationWithDescriptor, extractPresentationsWithDescriptorsFromSubmission };
+//# sourceMappingURL=presentationSelection.d.mts.map

package/build/modules/dif-presentation-exchange/utils/presentationSelection.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"presentationSelection.d.mts","names":[],"sources":["../../../../src/modules/dif-presentation-exchange/utils/presentationSelection.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;;;;;;;KAkBY,gCAAA,GAAmC,kBACtC;iBAEO,iDAAA,gBACC,cAAc,qCACjB,+CACA;;;;;;;;;;;;;EANF,SAAA,WAAA,qBAAgC;EAG5B,SAAA,UAAA,mCAAiD;EAClC,SAAA,YAAA,SAAA,+BAAA;EAAd,SAAA,UAAA,SAAA,+BAAA;EACH,SAAA,eAAA,qFAAA;CACA,CAAA,EAAA"}

package/build/modules/dif-presentation-exchange/utils/presentationSelection.mjs

@@ -0,0 +1,59 @@
+
+
+import { CredoError } from "../../../error/CredoError.mjs";
+import "../../../error/index.mjs";
+import { ClaimFormat } from "../../vc/models/ClaimFormat.mjs";
+import { W3cJwtVerifiablePresentation } from "../../vc/jwt-vc/W3cJwtVerifiablePresentation.mjs";
+import { W3cV2SdJwtVerifiablePresentation } from "../../vc/sd-jwt-vc/W3cV2SdJwtVerifiablePresentation.mjs";
+import "../../vc/sd-jwt-vc/index.mjs";
+import { W3cV2JwtVerifiablePresentation } from "../../vc/jwt-vc/W3cV2JwtVerifiablePresentation.mjs";
+import { W3cJsonLdVerifiablePresentation } from "../../vc/data-integrity/models/W3cJsonLdVerifiablePresentation.mjs";
+import "../../vc/index.mjs";
+import { MdocDeviceResponse } from "../../mdoc/MdocDeviceResponse.mjs";
+import "../../mdoc/index.mjs";
+import { JSONPath } from "@astronautlabs/jsonpath";
+
+//#region src/modules/dif-presentation-exchange/utils/presentationSelection.ts
+function extractPresentationsWithDescriptorsFromSubmission(presentations, submission, definition) {
+	return submission.descriptor_map.map((descriptor) => {
+		const [presentation] = JSONPath.query(presentations, descriptor.path);
+		const inputDescriptor = definition.input_descriptors.find(({ id }) => id === descriptor.id);
+		if (!presentation) throw new CredoError(`Unable to extract presentation at path '${descriptor.path}' for submission descriptor '${descriptor.id}'`);
+		if (!inputDescriptor) throw new Error(`Unable to extract input descriptor '${descriptor.id}' from definition '${definition.id}' for submission '${submission.id}'`);
+		if (presentation instanceof MdocDeviceResponse) {
+			const document = presentation.documents.find((document$1) => document$1.docType === descriptor.id);
+			if (!document) throw new Error(`Unable to extract mdoc document with doctype '${descriptor.id}' from mdoc device response for submission '${submission.id}'.`);
+			return {
+				claimFormat: ClaimFormat.MsoMdoc,
+				descriptor,
+				presentation,
+				credential: document,
+				inputDescriptor
+			};
+		}
+		if (presentation instanceof W3cJwtVerifiablePresentation || presentation instanceof W3cJsonLdVerifiablePresentation) {
+			if (!descriptor.path_nested) throw new Error(`Submission descriptor '${descriptor.id}' for submission '${submission.id}' has no 'path_nested' but presentation is format '${presentation.claimFormat}'`);
+			const [verifiableCredential] = JSONPath.query(presentation.claimFormat === ClaimFormat.JwtVp ? { vp: presentation } : presentation, descriptor.path_nested.path);
+			if (!verifiableCredential) throw new CredoError(`Unable to extract credential at path '${descriptor.path_nested.path}' from presentation at path '${descriptor.path}' for submission descriptor '${descriptor.id}'`);
+			return {
+				claimFormat: presentation.claimFormat,
+				descriptor,
+				presentation,
+				credential: verifiableCredential,
+				inputDescriptor
+			};
+		}
+		if (presentation instanceof W3cV2JwtVerifiablePresentation || presentation instanceof W3cV2SdJwtVerifiablePresentation) throw new CredoError(`Presentation format '${presentation.claimFormat}' is not supported with DIF Presentation Exchange`);
+		return {
+			claimFormat: ClaimFormat.SdJwtDc,
+			descriptor,
+			presentation,
+			credential: presentation,
+			inputDescriptor
+		};
+	});
+}
+
+//#endregion
+export { extractPresentationsWithDescriptorsFromSubmission };
+//# sourceMappingURL=presentationSelection.mjs.map

package/build/modules/dif-presentation-exchange/utils/presentationSelection.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"presentationSelection.mjs","names":["document"],"sources":["../../../../src/modules/dif-presentation-exchange/utils/presentationSelection.ts"],"sourcesContent":["import { JSONPath } from '@astronautlabs/jsonpath'\nimport { CredoError } from '../../../error'\nimport type { SingleOrArray } from '../../../types'\nimport { MdocDeviceResponse } from '../../mdoc'\nimport type { W3cJsonLdVerifiableCredential, W3cJwtVerifiableCredential } from '../../vc'\nimport {\n  ClaimFormat,\n  W3cJsonLdVerifiablePresentation,\n  W3cJwtVerifiablePresentation,\n  W3cV2JwtVerifiablePresentation,\n} from '../../vc'\nimport { W3cV2SdJwtVerifiablePresentation } from '../../vc/sd-jwt-vc'\nimport type {\n  DifPresentationExchangeDefinition,\n  DifPresentationExchangeSubmission,\n  VerifiablePresentation,\n} from '../models'\n\nexport type DifPexPresentationWithDescriptor = ReturnType<\n  typeof extractPresentationsWithDescriptorsFromSubmission\n>[number]\nexport function extractPresentationsWithDescriptorsFromSubmission(\n  presentations: SingleOrArray<VerifiablePresentation>,\n  submission: DifPresentationExchangeSubmission,\n  definition: DifPresentationExchangeDefinition\n) {\n  return submission.descriptor_map.map((descriptor) => {\n    const [presentation] = JSONPath.query(presentations, descriptor.path) as [VerifiablePresentation | undefined]\n    const inputDescriptor = definition.input_descriptors.find(({ id }) => id === descriptor.id)\n\n    if (!presentation) {\n      throw new CredoError(\n        `Unable to extract presentation at path '${descriptor.path}' for submission descriptor '${descriptor.id}'`\n      )\n    }\n\n    if (!inputDescriptor) {\n      throw new Error(\n        `Unable to extract input descriptor '${descriptor.id}' from definition '${definition.id}' for submission '${submission.id}'`\n      )\n    }\n\n    if (presentation instanceof MdocDeviceResponse) {\n      const document = presentation.documents.find((document) => document.docType === descriptor.id)\n      if (!document) {\n        throw new Error(\n          `Unable to extract mdoc document with doctype '${descriptor.id}' from mdoc device response for submission '${submission.id}'.`\n        )\n      }\n\n      return {\n        claimFormat: ClaimFormat.MsoMdoc,\n        descriptor,\n        presentation,\n        credential: document,\n        inputDescriptor,\n      } as const\n    }\n    if (\n      presentation instanceof W3cJwtVerifiablePresentation ||\n      presentation instanceof W3cJsonLdVerifiablePresentation\n    ) {\n      if (!descriptor.path_nested) {\n        throw new Error(\n          `Submission descriptor '${descriptor.id}' for submission '${submission.id}' has no 'path_nested' but presentation is format '${presentation.claimFormat}'`\n        )\n      }\n\n      const [verifiableCredential] = JSONPath.query(\n        // Path is `$.vp.verifiableCredential[]` in case of jwt vp\n        presentation.claimFormat === ClaimFormat.JwtVp ? { vp: presentation } : presentation,\n        descriptor.path_nested.path\n      ) as [W3cJwtVerifiableCredential | W3cJsonLdVerifiableCredential | undefined]\n\n      if (!verifiableCredential) {\n        throw new CredoError(\n          `Unable to extract credential at path '${descriptor.path_nested.path}' from presentation at path '${descriptor.path}' for submission descriptor '${descriptor.id}'`\n        )\n      }\n\n      return {\n        claimFormat: presentation.claimFormat,\n        descriptor,\n        presentation,\n        credential: verifiableCredential,\n        inputDescriptor,\n      } as const\n    }\n    if (\n      presentation instanceof W3cV2JwtVerifiablePresentation ||\n      presentation instanceof W3cV2SdJwtVerifiablePresentation\n    ) {\n      throw new CredoError(\n        `Presentation format '${presentation.claimFormat}' is not supported with DIF Presentation Exchange`\n      )\n    }\n    return {\n      claimFormat: ClaimFormat.SdJwtDc,\n      descriptor,\n      presentation,\n      credential: presentation,\n      inputDescriptor,\n    } as const\n  })\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAqBA,SAAgB,kDACd,eACA,YACA,YACA;AACA,QAAO,WAAW,eAAe,KAAK,eAAe;EACnD,MAAM,CAAC,gBAAgB,SAAS,MAAM,eAAe,WAAW,KAAK;EACrE,MAAM,kBAAkB,WAAW,kBAAkB,MAAM,EAAE,SAAS,OAAO,WAAW,GAAG;AAE3F,MAAI,CAAC,aACH,OAAM,IAAI,WACR,2CAA2C,WAAW,KAAK,+BAA+B,WAAW,GAAG,GACzG;AAGH,MAAI,CAAC,gBACH,OAAM,IAAI,MACR,uCAAuC,WAAW,GAAG,qBAAqB,WAAW,GAAG,oBAAoB,WAAW,GAAG,GAC3H;AAGH,MAAI,wBAAwB,oBAAoB;GAC9C,MAAM,WAAW,aAAa,UAAU,MAAM,eAAaA,WAAS,YAAY,WAAW,GAAG;AAC9F,OAAI,CAAC,SACH,OAAM,IAAI,MACR,iDAAiD,WAAW,GAAG,8CAA8C,WAAW,GAAG,IAC5H;AAGH,UAAO;IACL,aAAa,YAAY;IACzB;IACA;IACA,YAAY;IACZ;IACD;;AAEH,MACE,wBAAwB,gCACxB,wBAAwB,iCACxB;AACA,OAAI,CAAC,WAAW,YACd,OAAM,IAAI,MACR,0BAA0B,WAAW,GAAG,oBAAoB,WAAW,GAAG,qDAAqD,aAAa,YAAY,GACzJ;GAGH,MAAM,CAAC,wBAAwB,SAAS,MAEtC,aAAa,gBAAgB,YAAY,QAAQ,EAAE,IAAI,cAAc,GAAG,cACxE,WAAW,YAAY,KACxB;AAED,OAAI,CAAC,qBACH,OAAM,IAAI,WACR,yCAAyC,WAAW,YAAY,KAAK,+BAA+B,WAAW,KAAK,+BAA+B,WAAW,GAAG,GAClK;AAGH,UAAO;IACL,aAAa,aAAa;IAC1B;IACA;IACA,YAAY;IACZ;IACD;;AAEH,MACE,wBAAwB,kCACxB,wBAAwB,iCAExB,OAAM,IAAI,WACR,wBAAwB,aAAa,YAAY,mDAClD;AAEH,SAAO;GACL,aAAa,YAAY;GACzB;GACA;GACA,YAAY;GACZ;GACD;GACD"}

package/build/modules/dif-presentation-exchange/utils/presentationsToCreate.d.mts

@@ -0,0 +1,5 @@
+import "../../../types.mjs";
+import "../../sd-jwt-vc/index.mjs";
+import "../../mdoc/index.mjs";
+import "../models/index.mjs";
+import "../../vc/index.mjs";

package/build/modules/dif-presentation-exchange/utils/presentationsToCreate.mjs

@@ -0,0 +1,51 @@
+
+
+import { ClaimFormat } from "../../vc/models/ClaimFormat.mjs";
+import "../../vc/index.mjs";
+import { MdocRecord } from "../../mdoc/repository/MdocRecord.mjs";
+import "../../mdoc/index.mjs";
+import "../../sd-jwt-vc/index.mjs";
+
+//#region src/modules/dif-presentation-exchange/utils/presentationsToCreate.ts
+function getPresentationsToCreate(credentialsForInputDescriptor) {
+	const presentationsToCreate = [];
+	for (const [inputDescriptorId, credentials] of Object.entries(credentialsForInputDescriptor)) for (const credential of credentials) if (credential.claimFormat === ClaimFormat.SdJwtDc) presentationsToCreate.push({
+		claimFormat: ClaimFormat.SdJwtDc,
+		subjectIds: [],
+		verifiableCredentials: [{
+			inputDescriptorId,
+			credential: credential.credentialRecord,
+			additionalPayload: credential.additionalPayload
+		}]
+	});
+	else if (credential.credentialRecord instanceof MdocRecord) presentationsToCreate.push({
+		claimFormat: ClaimFormat.MsoMdoc,
+		verifiableCredentials: [{
+			inputDescriptorId,
+			credential: credential.credentialRecord
+		}],
+		subjectIds: []
+	});
+	else {
+		const subjectId = credential.credentialRecord.firstCredential.credentialSubjectIds[0];
+		const expectedClaimFormat = credential.credentialRecord.firstCredential.claimFormat === ClaimFormat.LdpVc ? ClaimFormat.LdpVp : ClaimFormat.JwtVp;
+		const matchingClaimFormatAndSubject = presentationsToCreate.find((p) => p.claimFormat === expectedClaimFormat && Boolean(p.subjectIds?.includes(subjectId)));
+		if (matchingClaimFormatAndSubject) matchingClaimFormatAndSubject.verifiableCredentials.push({
+			inputDescriptorId,
+			credential: credential.credentialRecord
+		});
+		else presentationsToCreate.push({
+			claimFormat: expectedClaimFormat,
+			subjectIds: [subjectId],
+			verifiableCredentials: [{
+				credential: credential.credentialRecord,
+				inputDescriptorId
+			}]
+		});
+	}
+	return presentationsToCreate;
+}
+
+//#endregion
+export { getPresentationsToCreate };
+//# sourceMappingURL=presentationsToCreate.mjs.map

package/build/modules/dif-presentation-exchange/utils/presentationsToCreate.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"presentationsToCreate.mjs","names":["presentationsToCreate: Array<PresentationToCreate>"],"sources":["../../../../src/modules/dif-presentation-exchange/utils/presentationsToCreate.ts"],"sourcesContent":["import type { JsonObject } from '../../../types'\nimport { MdocRecord } from '../../mdoc'\nimport { SdJwtVcRecord } from '../../sd-jwt-vc'\nimport { ClaimFormat, W3cCredentialRecord } from '../../vc'\nimport type { DifPexInputDescriptorToCredentials } from '../models'\n\n//  - the credentials included in the presentation\nexport interface SdJwtVcPresentationToCreate {\n  claimFormat: ClaimFormat.SdJwtDc\n  subjectIds: [] // subject is included in the cnf of the sd-jwt and automatically extracted by PEX\n  verifiableCredentials: [\n    {\n      credential: SdJwtVcRecord\n      inputDescriptorId: string\n\n      /**\n       * Additional payload to include in the Key Binding JWT\n       */\n      additionalPayload?: JsonObject\n    },\n  ] // only one credential supported for SD-JWT-VC\n}\n\nexport interface JwtVpPresentationToCreate {\n  claimFormat: ClaimFormat.JwtVp\n  subjectIds: [string] // only one subject id supported for JWT VP\n  verifiableCredentials: Array<{\n    credential: W3cCredentialRecord\n    inputDescriptorId: string\n  }> // multiple credentials supported for JWT VP\n}\n\nexport interface LdpVpPresentationToCreate {\n  claimFormat: ClaimFormat.LdpVp\n  // NOTE: we only support one subject id at the moment as we don't have proper\n  // support yet for adding multiple proofs to an LDP-VP\n  subjectIds: undefined | [string]\n  verifiableCredentials: Array<{\n    credential: W3cCredentialRecord\n    inputDescriptorId: string\n  }> // multiple credentials supported for LDP VP\n}\n\nexport interface MdocPresentationToCreate {\n  claimFormat: ClaimFormat.MsoMdoc\n  subjectIds: []\n  verifiableCredentials: [\n    {\n      credential: MdocRecord\n      inputDescriptorId: string\n    },\n  ] // only one credential supported for MDOC\n}\n\nexport type PresentationToCreate =\n  | SdJwtVcPresentationToCreate\n  | JwtVpPresentationToCreate\n  | LdpVpPresentationToCreate\n  | MdocPresentationToCreate\n\n// FIXME: we should extract supported format form top-level presentation definition, and input_descriptor as well\n// to make sure the presentation we are going to create is a presentation format supported by the verifier.\n// In addition we should allow to pass an override 'format' object, as specification like OID4VP do not use the\n// PD formats, but define their own.\nexport function getPresentationsToCreate(credentialsForInputDescriptor: DifPexInputDescriptorToCredentials) {\n  const presentationsToCreate: Array<PresentationToCreate> = []\n\n  // We map all credentials for a input descriptor to the different subject ids. Each subjectId will need\n  // to create a separate proof (either on the same presentation or if not allowed by proof format on separate)\n  // presentations\n  for (const [inputDescriptorId, credentials] of Object.entries(credentialsForInputDescriptor)) {\n    for (const credential of credentials) {\n      if (credential.claimFormat === ClaimFormat.SdJwtDc) {\n        // SD-JWT-VC always needs it's own presentation\n        presentationsToCreate.push({\n          claimFormat: ClaimFormat.SdJwtDc,\n          subjectIds: [],\n          verifiableCredentials: [\n            {\n              inputDescriptorId,\n              credential: credential.credentialRecord,\n              additionalPayload: credential.additionalPayload,\n            },\n          ],\n        })\n      } else if (credential.credentialRecord instanceof MdocRecord) {\n        presentationsToCreate.push({\n          claimFormat: ClaimFormat.MsoMdoc,\n          verifiableCredentials: [{ inputDescriptorId, credential: credential.credentialRecord }],\n          subjectIds: [],\n        })\n      } else {\n        const subjectId = credential.credentialRecord.firstCredential.credentialSubjectIds[0]\n\n        // NOTE: we only support one subjectId per VP -- once we have proper support\n        // for multiple proofs on an LDP-VP we can add multiple subjectIds to a single VP for LDP-vp only\n        const expectedClaimFormat =\n          credential.credentialRecord.firstCredential.claimFormat === ClaimFormat.LdpVc\n            ? ClaimFormat.LdpVp\n            : ClaimFormat.JwtVp\n\n        const matchingClaimFormatAndSubject = presentationsToCreate.find(\n          (p): p is JwtVpPresentationToCreate =>\n            p.claimFormat === expectedClaimFormat && Boolean(p.subjectIds?.includes(subjectId))\n        )\n\n        if (matchingClaimFormatAndSubject) {\n          matchingClaimFormatAndSubject.verifiableCredentials.push({\n            inputDescriptorId,\n            credential: credential.credentialRecord,\n          })\n        } else {\n          presentationsToCreate.push({\n            claimFormat: expectedClaimFormat,\n            subjectIds: [subjectId],\n            verifiableCredentials: [{ credential: credential.credentialRecord, inputDescriptorId }],\n          })\n        }\n      }\n    }\n  }\n\n  return presentationsToCreate\n}\n"],"mappings":";;;;;;;;;AAgEA,SAAgB,yBAAyB,+BAAmE;CAC1G,MAAMA,wBAAqD,EAAE;AAK7D,MAAK,MAAM,CAAC,mBAAmB,gBAAgB,OAAO,QAAQ,8BAA8B,CAC1F,MAAK,MAAM,cAAc,YACvB,KAAI,WAAW,gBAAgB,YAAY,QAEzC,uBAAsB,KAAK;EACzB,aAAa,YAAY;EACzB,YAAY,EAAE;EACd,uBAAuB,CACrB;GACE;GACA,YAAY,WAAW;GACvB,mBAAmB,WAAW;GAC/B,CACF;EACF,CAAC;UACO,WAAW,4BAA4B,WAChD,uBAAsB,KAAK;EACzB,aAAa,YAAY;EACzB,uBAAuB,CAAC;GAAE;GAAmB,YAAY,WAAW;GAAkB,CAAC;EACvF,YAAY,EAAE;EACf,CAAC;MACG;EACL,MAAM,YAAY,WAAW,iBAAiB,gBAAgB,qBAAqB;EAInF,MAAM,sBACJ,WAAW,iBAAiB,gBAAgB,gBAAgB,YAAY,QACpE,YAAY,QACZ,YAAY;EAElB,MAAM,gCAAgC,sBAAsB,MACzD,MACC,EAAE,gBAAgB,uBAAuB,QAAQ,EAAE,YAAY,SAAS,UAAU,CAAC,CACtF;AAED,MAAI,8BACF,+BAA8B,sBAAsB,KAAK;GACvD;GACA,YAAY,WAAW;GACxB,CAAC;MAEF,uBAAsB,KAAK;GACzB,aAAa;GACb,YAAY,CAAC,UAAU;GACvB,uBAAuB,CAAC;IAAE,YAAY,WAAW;IAAkB;IAAmB,CAAC;GACxF,CAAC;;AAMV,QAAO"}

package/build/modules/dif-presentation-exchange/utils/transform.d.mts

@@ -0,0 +1,7 @@
+import "../../sd-jwt-vc/index.mjs";
+import "../../mdoc/index.mjs";
+import "../../vc/models/presentation/W3cJsonPresentation.mjs";
+import "../models/index.mjs";
+import "../../vc/index.mjs";
+import "../../../agent/index.mjs";
+import "@sphereon/ssi-types";

package/build/modules/dif-presentation-exchange/utils/transform.mjs

@@ -0,0 +1,31 @@
+
+
+import { JsonTransformer } from "../../../utils/JsonTransformer.mjs";
+import "../../../utils/index.mjs";
+import { Jwt } from "../../../crypto/jose/jwt/Jwt.mjs";
+import "../../../crypto/index.mjs";
+import { W3cJwtVerifiablePresentation } from "../../vc/jwt-vc/W3cJwtVerifiablePresentation.mjs";
+import { W3cJsonLdVerifiablePresentation } from "../../vc/data-integrity/models/W3cJsonLdVerifiablePresentation.mjs";
+import "../../vc/index.mjs";
+import { MdocDeviceResponse } from "../../mdoc/MdocDeviceResponse.mjs";
+import "../../mdoc/index.mjs";
+import { SdJwtVcApi } from "../../sd-jwt-vc/SdJwtVcApi.mjs";
+import "../../sd-jwt-vc/index.mjs";
+
+//#region src/modules/dif-presentation-exchange/utils/transform.ts
+function getSphereonOriginalVerifiableCredential(credentialRecord) {
+	return credentialRecord.encoded;
+}
+function getSphereonOriginalVerifiablePresentation(verifiablePresentation) {
+	return verifiablePresentation.encoded;
+}
+function getVerifiablePresentationFromEncoded(agentContext, encodedVerifiablePresentation) {
+	if (typeof encodedVerifiablePresentation === "string" && encodedVerifiablePresentation.includes("~")) return agentContext.dependencyManager.resolve(SdJwtVcApi).fromCompact(encodedVerifiablePresentation);
+	if (typeof encodedVerifiablePresentation === "string" && Jwt.format.test(encodedVerifiablePresentation)) return W3cJwtVerifiablePresentation.fromSerializedJwt(encodedVerifiablePresentation);
+	if (typeof encodedVerifiablePresentation === "object" && "@context" in encodedVerifiablePresentation) return JsonTransformer.fromJSON(encodedVerifiablePresentation, W3cJsonLdVerifiablePresentation);
+	return MdocDeviceResponse.fromBase64Url(encodedVerifiablePresentation);
+}
+
+//#endregion
+export { getSphereonOriginalVerifiableCredential, getSphereonOriginalVerifiablePresentation, getVerifiablePresentationFromEncoded };
+//# sourceMappingURL=transform.mjs.map

package/build/modules/dif-presentation-exchange/utils/transform.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"transform.mjs","names":[],"sources":["../../../../src/modules/dif-presentation-exchange/utils/transform.ts"],"sourcesContent":["import type {\n  OriginalVerifiableCredential as SphereonOriginalVerifiableCredential,\n  OriginalVerifiablePresentation as SphereonOriginalVerifiablePresentation,\n} from '@animo-id/pex/dist/main/lib/types/PexCredentialMapper'\nimport type { W3CVerifiablePresentation as SphereonW3CVerifiablePresentation } from '@sphereon/ssi-types'\nimport type { AgentContext } from '../../../agent'\nimport { Jwt } from '../../../crypto'\nimport { JsonTransformer } from '../../../utils'\nimport type { MdocRecord } from '../../mdoc'\nimport { MdocDeviceResponse } from '../../mdoc'\nimport type { SdJwtVcRecord } from '../../sd-jwt-vc'\nimport { SdJwtVcApi } from '../../sd-jwt-vc'\nimport type { W3cCredentialRecord } from '../../vc'\nimport { W3cJsonLdVerifiablePresentation, W3cJwtVerifiablePresentation } from '../../vc'\nimport type { W3cJsonPresentation } from '../../vc/models/presentation/W3cJsonPresentation'\nimport type { VerifiablePresentation } from '../models'\n\nexport function getSphereonOriginalVerifiableCredential(\n  credentialRecord: W3cCredentialRecord | SdJwtVcRecord | MdocRecord\n): SphereonOriginalVerifiableCredential {\n  return credentialRecord.encoded as SphereonOriginalVerifiableCredential\n}\n\nexport function getSphereonOriginalVerifiablePresentation(\n  verifiablePresentation: VerifiablePresentation\n): SphereonOriginalVerifiablePresentation {\n  return verifiablePresentation.encoded as SphereonOriginalVerifiablePresentation\n}\n\n// TODO: we might want to move this to some generic vc transformation util\nexport function getVerifiablePresentationFromEncoded(\n  agentContext: AgentContext,\n  encodedVerifiablePresentation: string | W3cJsonPresentation | SphereonW3CVerifiablePresentation\n) {\n  if (typeof encodedVerifiablePresentation === 'string' && encodedVerifiablePresentation.includes('~')) {\n    const sdJwtVcApi = agentContext.dependencyManager.resolve(SdJwtVcApi)\n    return sdJwtVcApi.fromCompact(encodedVerifiablePresentation)\n  }\n  if (typeof encodedVerifiablePresentation === 'string' && Jwt.format.test(encodedVerifiablePresentation)) {\n    return W3cJwtVerifiablePresentation.fromSerializedJwt(encodedVerifiablePresentation)\n  }\n  if (typeof encodedVerifiablePresentation === 'object' && '@context' in encodedVerifiablePresentation) {\n    return JsonTransformer.fromJSON(encodedVerifiablePresentation, W3cJsonLdVerifiablePresentation)\n  }\n  return MdocDeviceResponse.fromBase64Url(encodedVerifiablePresentation)\n}\n"],"mappings":";;;;;;;;;;;;;;;AAiBA,SAAgB,wCACd,kBACsC;AACtC,QAAO,iBAAiB;;AAG1B,SAAgB,0CACd,wBACwC;AACxC,QAAO,uBAAuB;;AAIhC,SAAgB,qCACd,cACA,+BACA;AACA,KAAI,OAAO,kCAAkC,YAAY,8BAA8B,SAAS,IAAI,CAElG,QADmB,aAAa,kBAAkB,QAAQ,WAAW,CACnD,YAAY,8BAA8B;AAE9D,KAAI,OAAO,kCAAkC,YAAY,IAAI,OAAO,KAAK,8BAA8B,CACrG,QAAO,6BAA6B,kBAAkB,8BAA8B;AAEtF,KAAI,OAAO,kCAAkC,YAAY,cAAc,8BACrE,QAAO,gBAAgB,SAAS,+BAA+B,gCAAgC;AAEjG,QAAO,mBAAmB,cAAc,8BAA8B"}

package/build/modules/generic-records/GenericRecordsApi.d.mts

@@ -0,0 +1,31 @@
+import { Query, QueryOptions } from "../../storage/StorageService.mjs";
+import { Logger } from "../../logger/Logger.mjs";
+import { GenericRecord, SaveGenericRecordOption } from "./repository/GenericRecord.mjs";
+import { GenericRecordService } from "./services/GenericRecordService.mjs";
+import { AgentContext } from "../../agent/context/AgentContext.mjs";
+import "../../agent/index.mjs";
+
+//#region src/modules/generic-records/GenericRecordsApi.d.ts
+type ContentType = {
+  content: string;
+};
+declare class GenericRecordsApi {
+  private genericRecordsService;
+  private logger;
+  private agentContext;
+  constructor(genericRecordsService: GenericRecordService, logger: Logger, agentContext: AgentContext);
+  save({
+    content,
+    tags,
+    id
+  }: SaveGenericRecordOption): Promise<GenericRecord>;
+  delete(record: GenericRecord): Promise<void>;
+  deleteById(id: string): Promise<void>;
+  update(record: GenericRecord): Promise<void>;
+  findById(id: string): Promise<GenericRecord | null>;
+  findAllByQuery(query: Query<GenericRecord>, queryOptions?: QueryOptions): Promise<GenericRecord[]>;
+  getAll(): Promise<GenericRecord[]>;
+}
+//#endregion
+export { ContentType, GenericRecordsApi };
+//# sourceMappingURL=GenericRecordsApi.d.mts.map

package/build/modules/generic-records/GenericRecordsApi.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GenericRecordsApi.d.mts","names":[],"sources":["../../../src/modules/generic-records/GenericRecordsApi.ts"],"sourcesContent":[],"mappings":";;;;;;;;KASY,WAAA;;;cAKC,iBAAA;;EALD,QAAA,MAAW;EAKV,QAAA,YAAiB;EAMH,WAAA,CAAA,qBAAA,EAAA,oBAAA,EAAA,MAAA,EACkB,MADlB,EAAA,YAAA,EAET,YAFS;EACkB,IAAA,CAAA;IAAA,OAAA;IAAA,IAAA;IAAA;EAAA,CAAA,EAQF,uBARE,CAAA,EAQqB,OARrB,CAQqB,aARrB,CAAA;EAC3B,MAAA,CAAA,MAAA,EAyBY,aAzBZ,CAAA,EAyB4B,OAzB5B,CAAA,IAAA,CAAA;EAOI,UAAA,CAAA,EAAA,EAAA,MAAA,CAAA,EA+BiB,OA/BjB,CAAA,IAAA,CAAA;EAAS,MAAA,CAAA,MAAA,EAmCD,aAnCC,CAAA,EAmCe,OAnCf,CAAA,IAAA,CAAA;EAAM,QAAA,CAAA,EAAA,EAAA,MAAA,CAAA,EAgDH,OAhDG,CAgDH,aAhDG,GAAA,IAAA,CAAA;EAAM,cAAA,CAAA,KAAA,EAoDN,KApDM,CAoDA,aApDA,CAAA,EAAA,YAAA,CAAA,EAoD+B,YApD/B,CAAA,EAoD8C,OApD9C,CAoDsD,aApDtD,EAAA,CAAA;EAAuB,MAAA,CAAA,CAAA,EAwDzC,OAxDyC,CAwDjC,aAxDiC,EAAA,CAAA"}