@credo-ts/openid4vc 0.6.0-pr-2209-20250321171013 → 0.6.0-pr-2195-20250321182650

package/build/shared/utils.js

@@ -2,12 +2,11 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getSupportedJwaSignatureAlgorithms = getSupportedJwaSignatureAlgorithms;
 exports.getKeyFromDid = getKeyFromDid;
-exports.getVerifyJwtCallback = getVerifyJwtCallback;
-exports.getCreateJwtCallback = getCreateJwtCallback;
-exports.openIdTokenIssuerToJwtIssuer = openIdTokenIssuerToJwtIssuer;
+exports.requestSignerToJwtIssuer = requestSignerToJwtIssuer;
 exports.getProofTypeFromKey = getProofTypeFromKey;
 exports.addSecondsToDate = addSecondsToDate;
 exports.dateToSeconds = dateToSeconds;
+exports.parseIfJson = parseIfJson;
 const core_1 = require("@credo-ts/core");
 /**
  * Returns the JWA Signature Algorithms that are supported by the wallet.
@@ -35,141 +34,58 @@ async function getKeyFromDid(agentContext, didUrl, allowedPurposes = ['authentic
     const verificationMethod = didDocument.dereferenceKey(didUrl, allowedPurposes);
     return (0, core_1.getKeyFromVerificationMethod)(verificationMethod);
 }
-function getVerifyJwtCallback(agentContext, _trustedCertificates) {
-    return async (jwtVerifier, jwt) => {
-        const jwsService = agentContext.dependencyManager.resolve(core_1.JwsService);
-        let trustedCertificates = _trustedCertificates;
-        if (jwtVerifier.method === 'did') {
-            const key = await getKeyFromDid(agentContext, jwtVerifier.didUrl);
-            const jwk = (0, core_1.getJwkFromKey)(key);
-            const res = await jwsService.verifyJws(agentContext, {
-                jws: jwt.raw,
-                jwkResolver: () => jwk,
-                // No certificates trusted
-                trustedCertificates: [],
-            });
-            return res.isValid;
-        }
-        if (jwtVerifier.method === 'x5c' || jwtVerifier.method === 'jwk') {
-            if (jwtVerifier.type === 'request-object') {
-                const x509Config = agentContext.dependencyManager.resolve(core_1.X509ModuleConfig);
-                const certificateChain = jwt.header.x5c?.map((cert) => core_1.X509Certificate.fromEncodedCertificate(cert));
-                if (!trustedCertificates && certificateChain && x509Config.getTrustedCertificatesForVerification) {
-                    trustedCertificates = await x509Config.getTrustedCertificatesForVerification(agentContext, {
-                        certificateChain,
-                        verification: {
-                            type: 'oauth2SecuredAuthorizationRequest',
-                            authorizationRequest: {
-                                jwt: jwt.raw,
-                                payload: core_1.JwtPayload.fromJson(jwt.payload),
-                            },
-                        },
-                    });
-                }
-                if (!trustedCertificates) {
-                    // We also take from the config here to avoid the callback being called again
-                    trustedCertificates = x509Config.trustedCertificates ?? [];
-                }
-            }
-            const res = await jwsService.verifyJws(agentContext, {
-                jws: jwt.raw,
-                // Only allowed for request object
-                trustedCertificates: jwtVerifier.type === 'request-object' ? trustedCertificates : [],
-            });
-            return res.isValid;
-        }
-        throw new Error(`Unsupported jwt verifier method: '${jwtVerifier.method}'`);
-    };
-}
-function getCreateJwtCallback(agentContext) {
-    return async (jwtIssuer, jwt) => {
-        const jwsService = agentContext.dependencyManager.resolve(core_1.JwsService);
-        if (jwtIssuer.method === 'did') {
-            const key = await getKeyFromDid(agentContext, jwtIssuer.didUrl);
-            const jws = await jwsService.createJwsCompact(agentContext, {
-                protectedHeaderOptions: { ...jwt.header, alg: jwtIssuer.alg, jwk: undefined },
-                payload: core_1.JwtPayload.fromJson(jwt.payload),
-                key,
-            });
-            return jws;
-        }
-        if (jwtIssuer.method === 'jwk') {
-            if (!jwtIssuer.jwk.kty) {
-                throw new core_1.CredoError('Missing required key type (kty) in the jwk.');
-            }
-            const jwk = (0, core_1.getJwkFromJson)(jwtIssuer.jwk);
-            const key = jwk.key;
-            const jws = await jwsService.createJwsCompact(agentContext, {
-                protectedHeaderOptions: { ...jwt.header, jwk, alg: jwtIssuer.alg },
-                payload: core_1.JwtPayload.fromJson(jwt.payload),
-                key,
-            });
-            return jws;
-        }
-        if (jwtIssuer.method === 'x5c') {
-            const leafCertificate = core_1.X509Service.getLeafCertificate(agentContext, { certificateChain: jwtIssuer.x5c });
-            const jws = await jwsService.createJwsCompact(agentContext, {
-                protectedHeaderOptions: { ...jwt.header, alg: jwtIssuer.alg, jwk: undefined },
-                payload: core_1.JwtPayload.fromJson(jwt.payload),
-                key: leafCertificate.publicKey,
-            });
-            return jws;
-        }
-        throw new Error(`Unsupported jwt issuer method '${jwtIssuer.method}'`);
-    };
-}
-async function openIdTokenIssuerToJwtIssuer(agentContext, openId4VcTokenIssuer) {
-    if (openId4VcTokenIssuer.method === 'did') {
-        const key = await getKeyFromDid(agentContext, openId4VcTokenIssuer.didUrl);
+async function requestSignerToJwtIssuer(agentContext, requestSigner) {
+    if (requestSigner.method === 'did') {
+        const key = await getKeyFromDid(agentContext, requestSigner.didUrl);
         const alg = (0, core_1.getJwkClassFromKeyType)(key.keyType)?.supportedSignatureAlgorithms[0];
         if (!alg)
             throw new core_1.CredoError(`No supported signature algorithms for key type: ${key.keyType}`);
         return {
-            method: openId4VcTokenIssuer.method,
-            didUrl: openId4VcTokenIssuer.didUrl,
+            method: requestSigner.method,
+            didUrl: requestSigner.didUrl,
             alg,
         };
     }
-    if (openId4VcTokenIssuer.method === 'x5c') {
+    if (requestSigner.method === 'x5c') {
         const leafCertificate = core_1.X509Service.getLeafCertificate(agentContext, {
-            certificateChain: openId4VcTokenIssuer.x5c,
+            certificateChain: requestSigner.x5c,
         });
         const jwk = (0, core_1.getJwkFromKey)(leafCertificate.publicKey);
         const alg = jwk.supportedSignatureAlgorithms[0];
         if (!alg) {
             throw new core_1.CredoError(`No supported signature algorithms found key type: '${jwk.keyType}'`);
         }
-        if (!openId4VcTokenIssuer.issuer.startsWith('https://') &&
-            !(openId4VcTokenIssuer.issuer.startsWith('http://') && agentContext.config.allowInsecureHttpUrls)) {
+        if (!requestSigner.issuer.startsWith('https://') &&
+            !(requestSigner.issuer.startsWith('http://') && agentContext.config.allowInsecureHttpUrls)) {
             throw new core_1.CredoError('The X509 certificate issuer must be a HTTPS URI.');
         }
-        if (!leafCertificate.sanUriNames.includes(openId4VcTokenIssuer.issuer) &&
-            !leafCertificate.sanDnsNames.includes((0, core_1.getDomainFromUrl)(openId4VcTokenIssuer.issuer))) {
+        if (!leafCertificate.sanUriNames.includes(requestSigner.issuer) &&
+            !leafCertificate.sanDnsNames.includes((0, core_1.getDomainFromUrl)(requestSigner.issuer))) {
             const sanUriMessage = leafCertificate.sanUriNames.length > 0
                 ? `SAN-URI names are ${leafCertificate.sanUriNames.join(', ')}`
                 : 'there are no SAN-URI names';
             const sanDnsMessage = leafCertificate.sanDnsNames.length > 0
                 ? `SAN-DNS names are ${leafCertificate.sanDnsNames.join(', ')}`
                 : 'there are no SAN-DNS names';
-            throw new Error(`The 'iss' claim in the payload does not match a 'SAN-URI' or 'SAN-DNS' name in the x5c certificate. 'iss' value is '${openId4VcTokenIssuer.issuer}', ${sanUriMessage}, ${sanDnsMessage} (for SAN-DNS only domain has to match)`);
+            throw new Error(`The 'iss' claim in the payload does not match a 'SAN-URI' or 'SAN-DNS' name in the x5c certificate. 'iss' value is '${requestSigner.issuer}', ${sanUriMessage}, ${sanDnsMessage} (for SAN-DNS only domain has to match)`);
         }
         return {
-            ...openId4VcTokenIssuer,
+            ...requestSigner,
             alg,
         };
     }
-    if (openId4VcTokenIssuer.method === 'jwk') {
-        const alg = openId4VcTokenIssuer.jwk.supportedSignatureAlgorithms[0];
+    if (requestSigner.method === 'jwk') {
+        const alg = requestSigner.jwk.supportedSignatureAlgorithms[0];
         if (!alg) {
-            throw new core_1.CredoError(`No supported signature algorithms for key type: '${openId4VcTokenIssuer.jwk.keyType}'`);
+            throw new core_1.CredoError(`No supported signature algorithms for key type: '${requestSigner.jwk.keyType}'`);
         }
         return {
-            ...openId4VcTokenIssuer,
-            jwk: openId4VcTokenIssuer.jwk.toJson(),
+            ...requestSigner,
+            publicJwk: requestSigner.jwk.toJson(),
             alg,
         };
     }
-    throw new core_1.CredoError(`Unsupported jwt issuer method '${openId4VcTokenIssuer.method}'`);
+    throw new core_1.CredoError(`Unsupported jwt issuer method '${requestSigner.method}'`);
 }
 function getProofTypeFromKey(agentContext, key) {
     const signatureSuiteRegistry = agentContext.dependencyManager.resolve(core_1.SignatureSuiteRegistry);
@@ -185,4 +101,17 @@ function addSecondsToDate(date, seconds) {
 function dateToSeconds(date) {
     return Math.floor(date.getTime() / 1000);
 }
+function parseIfJson(input) {
+    if (typeof input !== 'string') {
+        return input;
+    }
+    try {
+        // Try to parse the string as JSON
+        return JSON.parse(input);
+    }
+    catch (_error) {
+        /* empty */
+    }
+    return input;
+}
 //# sourceMappingURL=utils.js.map

package/build/shared/utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../src/shared/utils.ts"],"names":[],"mappings":";;AAoCA,gFAaC;AAED,sCAUC;AAED,oDAsDC;AACD,oDA4CC;AAED,oEAoEC;AAED,kDASC;AAED,4CAEC;AAED,sCAEC;AA/OD,yCAcuB;AAEvB;;;;;;;GAOG;AACH,SAAgB,kCAAkC,CAAC,YAA0B;IAC3E,MAAM,iBAAiB,GAAG,YAAY,CAAC,MAAM,CAAC,iBAAiB,CAAA;IAE/D,4EAA4E;IAC5E,MAAM,+BAA+B,GAAG,iBAAiB;QACvD,yDAAyD;SACxD,GAAG,CAAC,6BAAsB,CAAC;QAC5B,kCAAkC;SACjC,MAAM,CAAC,CAAC,QAAQ,EAAmD,EAAE,CAAC,QAAQ,KAAK,SAAS,CAAC;QAC9F,oEAAoE;SACnE,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAA;IAE/D,OAAO,+BAA+B,CAAA;AACxC,CAAC;AAEM,KAAK,UAAU,aAAa,CACjC,YAA0B,EAC1B,MAAc,EACd,kBAAgC,CAAC,gBAAgB,CAAC;IAElD,MAAM,OAAO,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,cAAO,CAAC,CAAA;IAC/D,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAC5D,MAAM,kBAAkB,GAAG,WAAW,CAAC,cAAc,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;IAE9E,OAAO,IAAA,mCAA4B,EAAC,kBAAkB,CAAC,CAAA;AACzD,CAAC;AAED,SAAgB,oBAAoB,CAClC,YAA0B,EAC1B,oBAA+C;IAE/C,OAAO,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE;QAChC,MAAM,UAAU,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,iBAAU,CAAC,CAAA;QAErE,IAAI,mBAAmB,GAAG,oBAAoB,CAAA;QAE9C,IAAI,WAAW,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACjC,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;YACjE,MAAM,GAAG,GAAG,IAAA,oBAAa,EAAC,GAAG,CAAC,CAAA;YAE9B,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,YAAY,EAAE;gBACnD,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,WAAW,EAAE,GAAG,EAAE,CAAC,GAAG;gBACtB,0BAA0B;gBAC1B,mBAAmB,EAAE,EAAE;aACxB,CAAC,CAAA;YACF,OAAO,GAAG,CAAC,OAAO,CAAA;QACpB,CAAC;QACD,IAAI,WAAW,CAAC,MAAM,KAAK,KAAK,IAAI,WAAW,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACjE,IAAI,WAAW,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBAC1C,MAAM,UAAU,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,uBAAgB,CAAC,CAAA;gBAC3E,MAAM,gBAAgB,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,sBAAe,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAA;gBAEpG,IAAI,CAAC,mBAAmB,IAAI,gBAAgB,IAAI,UAAU,CAAC,qCAAqC,EAAE,CAAC;oBACjG,mBAAmB,GAAG,MAAM,UAAU,CAAC,qCAAqC,CAAC,YAAY,EAAE;wBACzF,gBAAgB;wBAChB,YAAY,EAAE;4BACZ,IAAI,EAAE,mCAAmC;4BACzC,oBAAoB,EAAE;gCACpB,GAAG,EAAE,GAAG,CAAC,GAAG;gCACZ,OAAO,EAAE,iBAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;6BAC1C;yBACF;qBACF,CAAC,CAAA;gBACJ,CAAC;gBAED,IAAI,CAAC,mBAAmB,EAAE,CAAC;oBACzB,6EAA6E;oBAC7E,mBAAmB,GAAG,UAAU,CAAC,mBAAmB,IAAI,EAAE,CAAA;gBAC5D,CAAC;YACH,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,YAAY,EAAE;gBACnD,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,kCAAkC;gBAClC,mBAAmB,EAAE,WAAW,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE;aACtF,CAAC,CAAA;YACF,OAAO,GAAG,CAAC,OAAO,CAAA;QACpB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qCAAqC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAA;IAC7E,CAAC,CAAA;AACH,CAAC;AACD,SAAgB,oBAAoB,CAClC,YAA0B;IAE1B,OAAO,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE;QAC9B,MAAM,UAAU,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,iBAAU,CAAC,CAAA;QAErE,IAAI,SAAS,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,YAAY,EAAE,SAAS,CAAC,MAAM,CAAC,CAAA;YAC/D,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,gBAAgB,CAAC,YAAY,EAAE;gBAC1D,sBAAsB,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE;gBAC7E,OAAO,EAAE,iBAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;gBACzC,GAAG;aACJ,CAAC,CAAA;YAEF,OAAO,GAAG,CAAA;QACZ,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC/B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;gBACvB,MAAM,IAAI,iBAAU,CAAC,6CAA6C,CAAC,CAAA;YACrE,CAAC;YACD,MAAM,GAAG,GAAG,IAAA,qBAAc,EAAC,SAAS,CAAC,GAAc,CAAC,CAAA;YACpD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAA;YACnB,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,gBAAgB,CAAC,YAAY,EAAE;gBAC1D,sBAAsB,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE;gBAClE,OAAO,EAAE,iBAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;gBACzC,GAAG;aACJ,CAAC,CAAA;YAEF,OAAO,GAAG,CAAA;QACZ,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC/B,MAAM,eAAe,GAAG,kBAAW,CAAC,kBAAkB,CAAC,YAAY,EAAE,EAAE,gBAAgB,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC,CAAA;YAEzG,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,gBAAgB,CAAC,YAAY,EAAE;gBAC1D,sBAAsB,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE;gBAC7E,OAAO,EAAE,iBAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;gBACzC,GAAG,EAAE,eAAe,CAAC,SAAS;aAC/B,CAAC,CAAA;YAEF,OAAO,GAAG,CAAA;QACZ,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,kCAAkC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAA;IACxE,CAAC,CAAA;AACH,CAAC;AAEM,KAAK,UAAU,4BAA4B,CAChD,YAA0B,EAC1B,oBAAiH;IAEjH,IAAI,oBAAoB,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,YAAY,EAAE,oBAAoB,CAAC,MAAM,CAAC,CAAA;QAC1E,MAAM,GAAG,GAAG,IAAA,6BAAsB,EAAC,GAAG,CAAC,OAAO,CAAC,EAAE,4BAA4B,CAAC,CAAC,CAAC,CAAA;QAChF,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,iBAAU,CAAC,mDAAmD,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;QAEhG,OAAO;YACL,MAAM,EAAE,oBAAoB,CAAC,MAAM;YACnC,MAAM,EAAE,oBAAoB,CAAC,MAAM;YACnC,GAAG;SACJ,CAAA;IACH,CAAC;IACD,IAAI,oBAAoB,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC1C,MAAM,eAAe,GAAG,kBAAW,CAAC,kBAAkB,CAAC,YAAY,EAAE;YACnE,gBAAgB,EAAE,oBAAoB,CAAC,GAAG;SAC3C,CAAC,CAAA;QAEF,MAAM,GAAG,GAAG,IAAA,oBAAa,EAAC,eAAe,CAAC,SAAS,CAAC,CAAA;QACpD,MAAM,GAAG,GAAG,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAA;QAC/C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,iBAAU,CAAC,sDAAsD,GAAG,CAAC,OAAO,GAAG,CAAC,CAAA;QAC5F,CAAC;QAED,IACE,CAAC,oBAAoB,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;YACnD,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,qBAAqB,CAAC,EACjG,CAAC;YACD,MAAM,IAAI,iBAAU,CAAC,kDAAkD,CAAC,CAAA;QAC1E,CAAC;QAED,IACE,CAAC,eAAe,CAAC,WAAW,CAAC,QAAQ,CAAC,oBAAoB,CAAC,MAAM,CAAC;YAClE,CAAC,eAAe,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAA,uBAAgB,EAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,EACpF,CAAC;YACD,MAAM,aAAa,GACjB,eAAe,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;gBACpC,CAAC,CAAC,qBAAqB,eAAe,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC/D,CAAC,CAAC,4BAA4B,CAAA;YAClC,MAAM,aAAa,GACjB,eAAe,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;gBACpC,CAAC,CAAC,qBAAqB,eAAe,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC/D,CAAC,CAAC,4BAA4B,CAAA;YAClC,MAAM,IAAI,KAAK,CACb,uHAAuH,oBAAoB,CAAC,MAAM,MAAM,aAAa,KAAK,aAAa,yCAAyC,CACjO,CAAA;QACH,CAAC;QAED,OAAO;YACL,GAAG,oBAAoB;YACvB,GAAG;SACJ,CAAA;IACH,CAAC;IACD,IAAI,oBAAoB,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAA;QACpE,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,iBAAU,CAAC,oDAAoD,oBAAoB,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,CAAA;QAC/G,CAAC;QACD,OAAO;YACL,GAAG,oBAAoB;YACvB,GAAG,EAAE,oBAAoB,CAAC,GAAG,CAAC,MAAM,EAAE;YACtC,GAAG;SACJ,CAAA;IACH,CAAC;IAED,MAAM,IAAI,iBAAU,CAAC,kCAAmC,oBAA2C,CAAC,MAAM,GAAG,CAAC,CAAA;AAChH,CAAC;AAED,SAAgB,mBAAmB,CAAC,YAA0B,EAAE,GAAQ;IACtE,MAAM,sBAAsB,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,6BAAsB,CAAC,CAAA;IAE7F,MAAM,wBAAwB,GAAG,sBAAsB,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IACpF,IAAI,wBAAwB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,iBAAU,CAAC,qEAAqE,GAAG,CAAC,OAAO,IAAI,CAAC,CAAA;IAC5G,CAAC;IAED,OAAO,wBAAwB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AAC9C,CAAC;AAED,SAAgB,gBAAgB,CAAC,IAAU,EAAE,OAAe;IAC1D,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,OAAO,GAAG,IAAI,CAAC,CAAA;AAClD,CAAC;AAED,SAAgB,aAAa,CAAC,IAAU;IACtC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAA;AAC1C,CAAC"}
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../src/shared/utils.ts"],"names":[],"mappings":";;AAuBA,gFAaC;AAED,sCAUC;AAED,4DAoEC;AAED,kDASC;AAED,4CAEC;AAED,sCAEC;AAED,kCAaC;AApJD,yCASuB;AAEvB;;;;;;;GAOG;AACH,SAAgB,kCAAkC,CAAC,YAA0B;IAC3E,MAAM,iBAAiB,GAAG,YAAY,CAAC,MAAM,CAAC,iBAAiB,CAAA;IAE/D,4EAA4E;IAC5E,MAAM,+BAA+B,GAAG,iBAAiB;QACvD,yDAAyD;SACxD,GAAG,CAAC,6BAAsB,CAAC;QAC5B,kCAAkC;SACjC,MAAM,CAAC,CAAC,QAAQ,EAAmD,EAAE,CAAC,QAAQ,KAAK,SAAS,CAAC;QAC9F,oEAAoE;SACnE,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAA;IAE/D,OAAO,+BAA+B,CAAA;AACxC,CAAC;AAEM,KAAK,UAAU,aAAa,CACjC,YAA0B,EAC1B,MAAc,EACd,kBAAgC,CAAC,gBAAgB,CAAC;IAElD,MAAM,OAAO,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,cAAO,CAAC,CAAA;IAC/D,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAC5D,MAAM,kBAAkB,GAAG,WAAW,CAAC,cAAc,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;IAE9E,OAAO,IAAA,mCAA4B,EAAC,kBAAkB,CAAC,CAAA;AACzD,CAAC;AAEM,KAAK,UAAU,wBAAwB,CAC5C,YAA0B,EAC1B,aAAiC;IAEjC,IAAI,aAAa,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;QACnE,MAAM,GAAG,GAAG,IAAA,6BAAsB,EAAC,GAAG,CAAC,OAAO,CAAC,EAAE,4BAA4B,CAAC,CAAC,CAAC,CAAA;QAChF,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,iBAAU,CAAC,mDAAmD,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;QAEhG,OAAO;YACL,MAAM,EAAE,aAAa,CAAC,MAAM;YAC5B,MAAM,EAAE,aAAa,CAAC,MAAM;YAC5B,GAAG;SACJ,CAAA;IACH,CAAC;IACD,IAAI,aAAa,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QACnC,MAAM,eAAe,GAAG,kBAAW,CAAC,kBAAkB,CAAC,YAAY,EAAE;YACnE,gBAAgB,EAAE,aAAa,CAAC,GAAG;SACpC,CAAC,CAAA;QAEF,MAAM,GAAG,GAAG,IAAA,oBAAa,EAAC,eAAe,CAAC,SAAS,CAAC,CAAA;QACpD,MAAM,GAAG,GAAG,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAA;QAC/C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,iBAAU,CAAC,sDAAsD,GAAG,CAAC,OAAO,GAAG,CAAC,CAAA;QAC5F,CAAC;QAED,IACE,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;YAC5C,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAC1F,CAAC;YACD,MAAM,IAAI,iBAAU,CAAC,kDAAkD,CAAC,CAAA;QAC1E,CAAC;QAED,IACE,CAAC,eAAe,CAAC,WAAW,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC;YAC3D,CAAC,eAAe,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAA,uBAAgB,EAAC,aAAa,CAAC,MAAM,CAAC,CAAC,EAC7E,CAAC;YACD,MAAM,aAAa,GACjB,eAAe,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;gBACpC,CAAC,CAAC,qBAAqB,eAAe,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC/D,CAAC,CAAC,4BAA4B,CAAA;YAClC,MAAM,aAAa,GACjB,eAAe,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;gBACpC,CAAC,CAAC,qBAAqB,eAAe,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC/D,CAAC,CAAC,4BAA4B,CAAA;YAClC,MAAM,IAAI,KAAK,CACb,uHAAuH,aAAa,CAAC,MAAM,MAAM,aAAa,KAAK,aAAa,yCAAyC,CAC1N,CAAA;QACH,CAAC;QAED,OAAO;YACL,GAAG,aAAa;YAChB,GAAG;SACJ,CAAA;IACH,CAAC;IACD,IAAI,aAAa,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAA;QAC7D,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,iBAAU,CAAC,oDAAoD,aAAa,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,CAAA;QACxG,CAAC;QACD,OAAO;YACL,GAAG,aAAa;YAChB,SAAS,EAAE,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE;YACrC,GAAG;SACJ,CAAA;IACH,CAAC;IAED,MAAM,IAAI,iBAAU,CAAC,kCAAmC,aAAoC,CAAC,MAAM,GAAG,CAAC,CAAA;AACzG,CAAC;AAED,SAAgB,mBAAmB,CAAC,YAA0B,EAAE,GAAQ;IACtE,MAAM,sBAAsB,GAAG,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,6BAAsB,CAAC,CAAA;IAE7F,MAAM,wBAAwB,GAAG,sBAAsB,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IACpF,IAAI,wBAAwB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,iBAAU,CAAC,qEAAqE,GAAG,CAAC,OAAO,IAAI,CAAC,CAAA;IAC5G,CAAC;IAED,OAAO,wBAAwB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AAC9C,CAAC;AAED,SAAgB,gBAAgB,CAAC,IAAU,EAAE,OAAe;IAC1D,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,OAAO,GAAG,IAAI,CAAC,CAAA;AAClD,CAAC;AAED,SAAgB,aAAa,CAAC,IAAU;IACtC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAA;AAC1C,CAAC;AAED,SAAgB,WAAW,CAAI,KAAQ;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAA;IACd,CAAC;IAED,IAAI,CAAC;QACH,kCAAkC;QAClC,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC1B,CAAC;IAAC,OAAO,MAAM,EAAE,CAAC;QAChB,WAAW;IACb,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC"}

package/package.json

@@ -2,7 +2,7 @@
   "name": "@credo-ts/openid4vc",
   "main": "build/index",
   "types": "build/index",
-  "version": "0.6.0-pr-2209-20250321171013",
+  "version": "0.6.0-pr-2195-20250321182650",
   "files": [
     "build"
   ],
@@ -17,15 +17,14 @@
     "directory": "packages/openid4vc"
   },
   "dependencies": {
-    "@sphereon/did-auth-siop": "0.16.1-fix.173",
-    "@sphereon/oid4vc-common": "0.16.1-fix.173",
-    "@sphereon/ssi-types": "0.30.2-next.135",
     "class-transformer": "^0.5.1",
     "rxjs": "^7.8.0",
     "zod": "^3.23.8",
-    "@animo-id/oid4vci": "0.1.4",
-    "@animo-id/oauth2": "0.1.4",
-    "@credo-ts/core": "0.6.0-pr-2209-20250321171013"
+    "@openid4vc/openid4vci": "0.3.0-alpha-20250321150652",
+    "@openid4vc/oauth2": "0.3.0-alpha-20250321150652",
+    "@openid4vc/openid4vp": "0.3.0-alpha-20250321150652",
+    "@openid4vc/utils": "0.3.0-alpha-20250321150652",
+    "@credo-ts/core": "0.6.0-pr-2195-20250321182650"
   },
   "devDependencies": {
     "@types/express": "^4.17.21",
@@ -33,7 +32,7 @@
     "nock": "^14.0.0-beta.19",
     "rimraf": "^4.4.0",
     "typescript": "~5.5.2",
-    "@credo-ts/tenants": "0.6.0-pr-2209-20250321171013"
+    "@credo-ts/tenants": "0.6.0-pr-2195-20250321182650"
   },
   "scripts": {
     "build": "pnpm run clean && pnpm run compile",

package/build/openid4vc-holder/OpenId4vcSiopHolderService.d.ts

@@ -1,32 +0,0 @@
-import type { AgentContext, EncodedX509Certificate } from '@credo-ts/core';
-import type { AuthorizationResponsePayload } from '@sphereon/did-auth-siop';
-import type { OpenId4VcSiopAcceptAuthorizationRequestOptions, OpenId4VcSiopResolvedAuthorizationRequest } from './OpenId4vcSiopHolderServiceOptions';
-import { DifPresentationExchangeService } from '@credo-ts/core';
-export declare class OpenId4VcSiopHolderService {
-    private presentationExchangeService;
-    constructor(presentationExchangeService: DifPresentationExchangeService);
-    resolveAuthorizationRequest(agentContext: AgentContext, requestJwtOrUri: string, trustedCertificates?: EncodedX509Certificate[]): Promise<OpenId4VcSiopResolvedAuthorizationRequest>;
-    acceptAuthorizationRequest(agentContext: AgentContext, options: OpenId4VcSiopAcceptAuthorizationRequestOptions): Promise<{
-        readonly ok: false;
-        readonly serverResponse: {
-            readonly status: number;
-            readonly body: string | Record<string, unknown> | null;
-        };
-        readonly submittedResponse: AuthorizationResponsePayload;
-        readonly redirectUri?: undefined;
-        readonly presentationDuringIssuanceSession?: undefined;
-    } | {
-        readonly ok: true;
-        readonly serverResponse: {
-            readonly status: number;
-            readonly body: Record<string, unknown>;
-        };
-        readonly submittedResponse: AuthorizationResponsePayload;
-        readonly redirectUri: string | undefined;
-        readonly presentationDuringIssuanceSession: string | undefined;
-    }>;
-    private getOpenIdProvider;
-    private getOpenIdTokenIssuerFromVerifiablePresentation;
-    private assertValidTokenIssuer;
-    private encryptJarmResponse;
-}

package/build/openid4vc-holder/OpenId4vcSiopHolderService.js

@@ -1,300 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OpenId4VcSiopHolderService = void 0;
-const core_1 = require("@credo-ts/core");
-const did_auth_siop_1 = require("@sphereon/did-auth-siop");
-const transform_1 = require("../shared/transform");
-const utils_1 = require("../shared/utils");
-let OpenId4VcSiopHolderService = class OpenId4VcSiopHolderService {
-    constructor(presentationExchangeService) {
-        this.presentationExchangeService = presentationExchangeService;
-    }
-    async resolveAuthorizationRequest(agentContext, requestJwtOrUri, trustedCertificates) {
-        const openidProvider = await this.getOpenIdProvider(agentContext, trustedCertificates);
-        // parsing happens automatically in verifyAuthorizationRequest
-        const verifiedAuthorizationRequest = await openidProvider.verifyAuthorizationRequest(requestJwtOrUri);
-        agentContext.config.logger.debug(`verified SIOP Authorization Request for issuer '${verifiedAuthorizationRequest.issuer}'`);
-        agentContext.config.logger.debug(`requestJwtOrUri '${requestJwtOrUri}'`);
-        if (verifiedAuthorizationRequest.presentationDefinitions &&
-            verifiedAuthorizationRequest.presentationDefinitions.length > 1) {
-            throw new core_1.CredoError('Only a single presentation definition is supported.');
-        }
-        const presentationDefinition = verifiedAuthorizationRequest.presentationDefinitions?.[0]?.definition;
-        return {
-            authorizationRequest: verifiedAuthorizationRequest,
-            // Parameters related to DIF Presentation Exchange
-            presentationExchange: presentationDefinition
-                ? {
-                    definition: presentationDefinition,
-                    credentialsForRequest: await this.presentationExchangeService.getCredentialsForRequest(agentContext, presentationDefinition),
-                }
-                : undefined,
-        };
-    }
-    async acceptAuthorizationRequest(agentContext, options) {
-        const { authorizationRequest, presentationExchange } = options;
-        let openIdTokenIssuer = options.openIdTokenIssuer;
-        let presentationExchangeOptions = undefined;
-        const wantsIdToken = await authorizationRequest.authorizationRequest.containsResponseType(did_auth_siop_1.ResponseType.ID_TOKEN);
-        const authorizationResponseNonce = await agentContext.wallet.generateNonce();
-        // Handle presentation exchange part
-        if (authorizationRequest.presentationDefinitions && authorizationRequest.presentationDefinitions.length > 0) {
-            if (!presentationExchange) {
-                throw new core_1.CredoError('Authorization request included presentation definition. `presentationExchange` MUST be supplied to accept authorization requests.');
-            }
-            const nonce = await authorizationRequest.authorizationRequest.getMergedProperty('nonce');
-            if (!nonce) {
-                throw new core_1.CredoError("Unable to extract 'nonce' from authorization request");
-            }
-            const clientId = await authorizationRequest.authorizationRequest.getMergedProperty('client_id');
-            if (!clientId) {
-                throw new core_1.CredoError("Unable to extract 'client_id' from authorization request");
-            }
-            const responseUri = (await authorizationRequest.authorizationRequest.getMergedProperty('response_uri')) ??
-                (await authorizationRequest.authorizationRequest.getMergedProperty('redirect_uri'));
-            if (!responseUri) {
-                throw new core_1.CredoError("Unable to extract 'response_uri' from authorization request");
-            }
-            const { verifiablePresentations, presentationSubmission } = await this.presentationExchangeService.createPresentation(agentContext, {
-                credentialsForInputDescriptor: presentationExchange.credentials,
-                presentationDefinition: authorizationRequest.presentationDefinitions[0].definition,
-                challenge: nonce,
-                domain: clientId,
-                presentationSubmissionLocation: core_1.DifPresentationExchangeSubmissionLocation.EXTERNAL,
-                openid4vp: {
-                    mdocGeneratedNonce: authorizationResponseNonce,
-                    responseUri,
-                },
-            });
-            presentationExchangeOptions = {
-                verifiablePresentations: verifiablePresentations.map((vp) => (0, transform_1.getSphereonVerifiablePresentation)(vp)),
-                presentationSubmission,
-                vpTokenLocation: did_auth_siop_1.VPTokenLocation.AUTHORIZATION_RESPONSE,
-            };
-            if (wantsIdToken && !openIdTokenIssuer) {
-                openIdTokenIssuer = this.getOpenIdTokenIssuerFromVerifiablePresentation(verifiablePresentations[0]);
-            }
-        }
-        else if (options.presentationExchange) {
-            throw new core_1.CredoError('`presentationExchange` was supplied, but no presentation definition was found in the presentation request.');
-        }
-        if (wantsIdToken) {
-            if (!openIdTokenIssuer) {
-                throw new core_1.CredoError('Unable to create authorization response. openIdTokenIssuer MUST be supplied when no presentation is active and the ResponseType includes id_token.');
-            }
-            this.assertValidTokenIssuer(authorizationRequest, openIdTokenIssuer);
-        }
-        const jwtIssuer = wantsIdToken && openIdTokenIssuer
-            ? await (0, utils_1.openIdTokenIssuerToJwtIssuer)(agentContext, openIdTokenIssuer)
-            : undefined;
-        const openidProvider = await this.getOpenIdProvider(agentContext);
-        const authorizationResponseWithCorrelationId = await openidProvider.createAuthorizationResponse(authorizationRequest, {
-            jwtIssuer,
-            presentationExchange: presentationExchangeOptions,
-            // https://openid.net/specs/openid-connect-self-issued-v2-1_0.html#name-aud-of-a-request-object
-            audience: authorizationRequest.authorizationRequestPayload.client_id,
-        });
-        const getCreateJarmResponseCallback = (authorizationResponseNonce) => {
-            return async (opts) => {
-                const { authorizationResponsePayload, requestObjectPayload } = opts;
-                const jwk = await did_auth_siop_1.OP.extractEncJwksFromClientMetadata(requestObjectPayload.client_metadata);
-                if (!jwk.kty) {
-                    throw new core_1.CredoError('Missing kty in jwk.');
-                }
-                const validatedMetadata = did_auth_siop_1.OP.validateJarmMetadata({
-                    client_metadata: requestObjectPayload.client_metadata,
-                    server_metadata: {
-                        authorization_encryption_alg_values_supported: ['ECDH-ES'],
-                        authorization_encryption_enc_values_supported: ['A256GCM', 'A128CBC-HS256'],
-                    },
-                });
-                if (validatedMetadata.type !== 'encrypted') {
-                    throw new core_1.CredoError('Only encrypted JARM responses are supported.');
-                }
-                // Extract nonce from the request, we use this as the `apv`
-                const nonce = authorizationRequest.payload?.nonce;
-                if (!nonce || typeof nonce !== 'string') {
-                    throw new core_1.CredoError('Missing nonce in authorization request payload');
-                }
-                const jwe = await this.encryptJarmResponse(agentContext, {
-                    jwkJson: jwk,
-                    payload: authorizationResponsePayload,
-                    authorizationRequestNonce: nonce,
-                    alg: validatedMetadata.client_metadata.authorization_encrypted_response_alg,
-                    enc: validatedMetadata.client_metadata.authorization_encrypted_response_enc,
-                    authorizationResponseNonce,
-                });
-                return { response: jwe };
-            };
-        };
-        const response = await openidProvider.submitAuthorizationResponse(authorizationResponseWithCorrelationId, getCreateJarmResponseCallback(authorizationResponseNonce));
-        const responseText = await response
-            .clone()
-            .text()
-            .catch(() => null);
-        const responseJson = (await response
-            .clone()
-            .json()
-            .catch(() => null));
-        if (!response.ok) {
-            return {
-                ok: false,
-                serverResponse: {
-                    status: response.status,
-                    body: responseJson ?? responseText,
-                },
-                submittedResponse: authorizationResponseWithCorrelationId.response.payload,
-            };
-        }
-        return {
-            ok: true,
-            serverResponse: {
-                status: response.status,
-                body: responseJson ?? {},
-            },
-            submittedResponse: authorizationResponseWithCorrelationId.response.payload,
-            redirectUri: responseJson?.redirect_uri,
-            presentationDuringIssuanceSession: responseJson?.presentation_during_issuance_session,
-        };
-    }
-    async getOpenIdProvider(agentContext, trustedCertificates) {
-        const builder = did_auth_siop_1.OP.builder()
-            .withExpiresIn(6000)
-            .withIssuer(did_auth_siop_1.ResponseIss.SELF_ISSUED_V2)
-            .withResponseMode(did_auth_siop_1.ResponseMode.POST)
-            .withSupportedVersions([
-            did_auth_siop_1.SupportedVersion.SIOPv2_D11,
-            did_auth_siop_1.SupportedVersion.SIOPv2_D12_OID4VP_D18,
-            did_auth_siop_1.SupportedVersion.SIOPv2_D12_OID4VP_D20,
-        ])
-            .withCreateJwtCallback((0, utils_1.getCreateJwtCallback)(agentContext))
-            .withVerifyJwtCallback((0, utils_1.getVerifyJwtCallback)(agentContext, trustedCertificates))
-            .withHasher(core_1.Hasher.hash);
-        const openidProvider = builder.build();
-        return openidProvider;
-    }
-    getOpenIdTokenIssuerFromVerifiablePresentation(verifiablePresentation) {
-        let openIdTokenIssuer;
-        if (verifiablePresentation instanceof core_1.W3cJsonLdVerifiablePresentation) {
-            const [firstProof] = (0, core_1.asArray)(verifiablePresentation.proof);
-            if (!firstProof)
-                throw new core_1.CredoError('Verifiable presentation does not contain a proof');
-            if (!firstProof.verificationMethod.startsWith('did:')) {
-                throw new core_1.CredoError('Verifiable presentation proof verificationMethod is not a did. Unable to extract openIdTokenIssuer from verifiable presentation');
-            }
-            openIdTokenIssuer = {
-                method: 'did',
-                didUrl: firstProof.verificationMethod,
-            };
-        }
-        else if (verifiablePresentation instanceof core_1.W3cJwtVerifiablePresentation) {
-            const kid = verifiablePresentation.jwt.header.kid;
-            if (!kid)
-                throw new core_1.CredoError('Verifiable Presentation does not contain a kid in the jwt header');
-            if (kid.startsWith('#') && verifiablePresentation.presentation.holderId) {
-                openIdTokenIssuer = {
-                    didUrl: `${verifiablePresentation.presentation.holderId}${kid}`,
-                    method: 'did',
-                };
-            }
-            else if (kid.startsWith('did:')) {
-                openIdTokenIssuer = {
-                    didUrl: kid,
-                    method: 'did',
-                };
-            }
-            else {
-                throw new core_1.CredoError("JWT W3C Verifiable presentation does not include did in JWT header 'kid'. Unable to extract openIdTokenIssuer from verifiable presentation");
-            }
-        }
-        else if (verifiablePresentation instanceof core_1.MdocDeviceResponse) {
-            throw new core_1.CredoError('Mdoc Verifiable Presentations are not yet supported');
-        }
-        else {
-            const cnf = verifiablePresentation.payload.cnf;
-            // FIXME: SD-JWT VC should have better payload typing, so this doesn't become so ugly
-            if (!cnf ||
-                typeof cnf !== 'object' ||
-                !('kid' in cnf) ||
-                typeof cnf.kid !== 'string' ||
-                !cnf.kid.startsWith('did:') ||
-                !cnf.kid.includes('#')) {
-                throw new core_1.CredoError("SD-JWT Verifiable presentation has no 'cnf' claim or does not include 'cnf' claim where 'kid' is a didUrl pointing to a key. Unable to extract openIdTokenIssuer from verifiable presentation");
-            }
-            openIdTokenIssuer = {
-                didUrl: cnf.kid,
-                method: 'did',
-            };
-        }
-        return openIdTokenIssuer;
-    }
-    assertValidTokenIssuer(authorizationRequest, openIdTokenIssuer) {
-        const subjectSyntaxTypesSupported = authorizationRequest.registrationMetadataPayload.subject_syntax_types_supported;
-        if (!subjectSyntaxTypesSupported) {
-            throw new core_1.CredoError('subject_syntax_types_supported is not supplied in the registration metadata. subject_syntax_types is REQUIRED.');
-        }
-        let allowedSubjectSyntaxTypes = [];
-        if (openIdTokenIssuer.method === 'did') {
-            const parsedDid = (0, core_1.parseDid)(openIdTokenIssuer.didUrl);
-            // Either did:<method> or did (for all did methods) is allowed
-            allowedSubjectSyntaxTypes = [`did:${parsedDid.method}`, 'did'];
-        }
-        else if (openIdTokenIssuer.method === 'jwk') {
-            allowedSubjectSyntaxTypes = ['urn:ietf:params:oauth:jwk-thumbprint'];
-        }
-        else {
-            throw new core_1.CredoError("Only 'did' and 'jwk' are supported as openIdTokenIssuer at the moment");
-        }
-        // At least one of the allowed subject syntax types must be supported by the RP
-        if (!allowedSubjectSyntaxTypes.some((allowed) => subjectSyntaxTypesSupported.includes(allowed))) {
-            throw new core_1.CredoError([
-                'The provided openIdTokenIssuer is not supported by the relying party.',
-                `Supported subject syntax types: '${subjectSyntaxTypesSupported.join(', ')}'`,
-            ].join('\n'));
-        }
-    }
-    async encryptJarmResponse(agentContext, options) {
-        const { payload, jwkJson } = options;
-        const jwk = (0, core_1.getJwkFromJson)(jwkJson);
-        const key = jwk.key;
-        if (!agentContext.wallet.directEncryptCompactJweEcdhEs) {
-            throw new core_1.CredoError('Cannot decrypt Jarm Response, wallet does not support directEncryptCompactJweEcdhEs. You need to upgrade your wallet implementation.');
-        }
-        if (options.alg !== 'ECDH-ES') {
-            throw new core_1.CredoError("Only 'ECDH-ES' is supported as 'alg' value for JARM response encryption");
-        }
-        if (options.enc !== 'A256GCM' && options.enc !== 'A128CBC-HS256') {
-            throw new core_1.CredoError("Only 'A256GCM' and 'A128CBC-HS256' are supported as 'enc' value for JARM response encryption");
-        }
-        if (key.keyType !== core_1.KeyType.P256) {
-            throw new core_1.CredoError(`Only '${core_1.KeyType.P256}' key type is supported for JARM response encryption`);
-        }
-        const data = core_1.Buffer.from(JSON.stringify(payload));
-        const jwe = await agentContext.wallet.directEncryptCompactJweEcdhEs({
-            data,
-            recipientKey: key,
-            header: {
-                kid: jwkJson.kid,
-            },
-            encryptionAlgorithm: options.enc,
-            apu: core_1.TypedArrayEncoder.toBase64URL(core_1.TypedArrayEncoder.fromString(options.authorizationResponseNonce)),
-            apv: core_1.TypedArrayEncoder.toBase64URL(core_1.TypedArrayEncoder.fromString(options.authorizationRequestNonce)),
-        });
-        return jwe;
-    }
-};
-exports.OpenId4VcSiopHolderService = OpenId4VcSiopHolderService;
-exports.OpenId4VcSiopHolderService = OpenId4VcSiopHolderService = __decorate([
-    (0, core_1.injectable)(),
-    __metadata("design:paramtypes", [core_1.DifPresentationExchangeService])
-], OpenId4VcSiopHolderService);
-//# sourceMappingURL=OpenId4vcSiopHolderService.js.map

package/build/openid4vc-holder/OpenId4vcSiopHolderService.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"OpenId4vcSiopHolderService.js","sourceRoot":"","sources":["../../src/openid4vc-holder/OpenId4vcSiopHolderService.ts"],"names":[],"mappings":";;;;;;;;;;;;AAaA,yCAeuB;AACvB,2DAAwH;AAExH,mDAAuE;AACvE,2CAA0G;AAGnG,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IACrC,YAA2B,2BAA2D;QAA3D,gCAA2B,GAA3B,2BAA2B,CAAgC;IAAG,CAAC;IAEnF,KAAK,CAAC,2BAA2B,CACtC,YAA0B,EAC1B,eAAuB,EACvB,mBAA8C;QAE9C,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAA;QAEtF,8DAA8D;QAC9D,MAAM,4BAA4B,GAAG,MAAM,cAAc,CAAC,0BAA0B,CAAC,eAAe,CAAC,CAAA;QAErG,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAC9B,mDAAmD,4BAA4B,CAAC,MAAM,GAAG,CAC1F,CAAA;QACD,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,eAAe,GAAG,CAAC,CAAA;QAExE,IACE,4BAA4B,CAAC,uBAAuB;YACpD,4BAA4B,CAAC,uBAAuB,CAAC,MAAM,GAAG,CAAC,EAC/D,CAAC;YACD,MAAM,IAAI,iBAAU,CAAC,qDAAqD,CAAC,CAAA;QAC7E,CAAC;QAED,MAAM,sBAAsB,GAAG,4BAA4B,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,CAAA;QAEpG,OAAO;YACL,oBAAoB,EAAE,4BAA4B;YAElD,kDAAkD;YAClD,oBAAoB,EAAE,sBAAsB;gBAC1C,CAAC,CAAC;oBACE,UAAU,EAAE,sBAAsB;oBAClC,qBAAqB,EAAE,MAAM,IAAI,CAAC,2BAA2B,CAAC,wBAAwB,CACpF,YAAY,EACZ,sBAAsB,CACvB;iBACF;gBACH,CAAC,CAAC,SAAS;SACd,CAAA;IACH,CAAC;IAEM,KAAK,CAAC,0BAA0B,CACrC,YAA0B,EAC1B,OAAuD;QAEvD,MAAM,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,GAAG,OAAO,CAAA;QAC9D,IAAI,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAA;QACjD,IAAI,2BAA2B,GAAiD,SAAS,CAAA;QAEzF,MAAM,YAAY,GAAG,MAAM,oBAAoB,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,4BAAY,CAAC,QAAQ,CAAC,CAAA;QAChH,MAAM,0BAA0B,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,aAAa,EAAE,CAAA;QAE5E,oCAAoC;QACpC,IAAI,oBAAoB,CAAC,uBAAuB,IAAI,oBAAoB,CAAC,uBAAuB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5G,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBAC1B,MAAM,IAAI,iBAAU,CAClB,mIAAmI,CACpI,CAAA;YACH,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,oBAAoB,CAAC,iBAAiB,CAAS,OAAO,CAAC,CAAA;YAChG,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,iBAAU,CAAC,sDAAsD,CAAC,CAAA;YAC9E,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,oBAAoB,CAAC,iBAAiB,CAAS,WAAW,CAAC,CAAA;YACvG,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,iBAAU,CAAC,0DAA0D,CAAC,CAAA;YAClF,CAAC;YAED,MAAM,WAAW,GACf,CAAC,MAAM,oBAAoB,CAAC,oBAAoB,CAAC,iBAAiB,CAAS,cAAc,CAAC,CAAC;gBAC3F,CAAC,MAAM,oBAAoB,CAAC,oBAAoB,CAAC,iBAAiB,CAAS,cAAc,CAAC,CAAC,CAAA;YAC7F,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,IAAI,iBAAU,CAAC,6DAA6D,CAAC,CAAA;YACrF,CAAC;YAED,MAAM,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,GACvD,MAAM,IAAI,CAAC,2BAA2B,CAAC,kBAAkB,CAAC,YAAY,EAAE;gBACtE,6BAA6B,EAAE,oBAAoB,CAAC,WAAW;gBAC/D,sBAAsB,EAAE,oBAAoB,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,UAAU;gBAClF,SAAS,EAAE,KAAK;gBAChB,MAAM,EAAE,QAAQ;gBAChB,8BAA8B,EAAE,gDAAyC,CAAC,QAAQ;gBAClF,SAAS,EAAE;oBACT,kBAAkB,EAAE,0BAA0B;oBAC9C,WAAW;iBACZ;aACF,CAAC,CAAA;YAEJ,2BAA2B,GAAG;gBAC5B,uBAAuB,EAAE,uBAAuB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAA,6CAAiC,EAAC,EAAE,CAAC,CAAC;gBACnG,sBAAsB;gBACtB,eAAe,EAAE,+BAAe,CAAC,sBAAsB;aACxD,CAAA;YAED,IAAI,YAAY,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACvC,iBAAiB,GAAG,IAAI,CAAC,8CAA8C,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAA;YACrG,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;YACxC,MAAM,IAAI,iBAAU,CAClB,4GAA4G,CAC7G,CAAA;QACH,CAAC;QAED,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACvB,MAAM,IAAI,iBAAU,CAClB,oJAAoJ,CACrJ,CAAA;YACH,CAAC;YAED,IAAI,CAAC,sBAAsB,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,CAAA;QACtE,CAAC;QAED,MAAM,SAAS,GACb,YAAY,IAAI,iBAAiB;YAC/B,CAAC,CAAC,MAAM,IAAA,oCAA4B,EAAC,YAAY,EAAE,iBAAiB,CAAC;YACrE,CAAC,CAAC,SAAS,CAAA;QAEf,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAA;QACjE,MAAM,sCAAsC,GAAG,MAAM,cAAc,CAAC,2BAA2B,CAC7F,oBAAoB,EACpB;YACE,SAAS;YACT,oBAAoB,EAAE,2BAA2B;YACjD,+FAA+F;YAC/F,QAAQ,EAAE,oBAAoB,CAAC,2BAA2B,CAAC,SAAS;SACrE,CACF,CAAA;QAED,MAAM,6BAA6B,GAAG,CAAC,0BAAkC,EAAE,EAAE;YAC3E,OAAO,KAAK,EAAE,IAGb,EAAE,EAAE;gBACH,MAAM,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,GAAG,IAAI,CAAA;gBAEnE,MAAM,GAAG,GAAG,MAAM,kBAAE,CAAC,gCAAgC,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAA;gBAC3F,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;oBACb,MAAM,IAAI,iBAAU,CAAC,qBAAqB,CAAC,CAAA;gBAC7C,CAAC;gBAED,MAAM,iBAAiB,GAAG,kBAAE,CAAC,oBAAoB,CAAC;oBAChD,eAAe,EAAE,oBAAoB,CAAC,eAAe;oBACrD,eAAe,EAAE;wBACf,6CAA6C,EAAE,CAAC,SAAS,CAAC;wBAC1D,6CAA6C,EAAE,CAAC,SAAS,EAAE,eAAe,CAAC;qBAC5E;iBACF,CAAC,CAAA;gBAEF,IAAI,iBAAiB,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBAC3C,MAAM,IAAI,iBAAU,CAAC,8CAA8C,CAAC,CAAA;gBACtE,CAAC;gBAED,2DAA2D;gBAC3D,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAA;gBACjD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACxC,MAAM,IAAI,iBAAU,CAAC,gDAAgD,CAAC,CAAA;gBACxE,CAAC;gBAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,YAAY,EAAE;oBACvD,OAAO,EAAE,GAAc;oBACvB,OAAO,EAAE,4BAA4B;oBACrC,yBAAyB,EAAE,KAAK;oBAChC,GAAG,EAAE,iBAAiB,CAAC,eAAe,CAAC,oCAAoC;oBAC3E,GAAG,EAAE,iBAAiB,CAAC,eAAe,CAAC,oCAAoC;oBAC3E,0BAA0B;iBAC3B,CAAC,CAAA;gBAEF,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAA;YAC1B,CAAC,CAAA;QACH,CAAC,CAAA;QACD,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,2BAA2B,CAC/D,sCAAsC,EACtC,6BAA6B,CAAC,0BAA0B,CAAC,CAC1D,CAAA;QACD,MAAM,YAAY,GAAG,MAAM,QAAQ;aAChC,KAAK,EAAE;aACP,IAAI,EAAE;aACN,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;QACpB,MAAM,YAAY,GAAG,CAAC,MAAM,QAAQ;aACjC,KAAK,EAAE;aACP,IAAI,EAAE;aACN,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAmC,CAAA;QAEvD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,cAAc,EAAE;oBACd,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,IAAI,EAAE,YAAY,IAAI,YAAY;iBACnC;gBACD,iBAAiB,EAAE,sCAAsC,CAAC,QAAQ,CAAC,OAAO;aAClE,CAAA;QACZ,CAAC;QAED,OAAO;YACL,EAAE,EAAE,IAAI;YACR,cAAc,EAAE;gBACd,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,IAAI,EAAE,YAAY,IAAI,EAAE;aACzB;YACD,iBAAiB,EAAE,sCAAsC,CAAC,QAAQ,CAAC,OAAO;YAE1E,WAAW,EAAE,YAAY,EAAE,YAAkC;YAC7D,iCAAiC,EAAE,YAAY,EAAE,oCAA0D;SACnG,CAAA;IACZ,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,YAA0B,EAAE,mBAA8C;QACxG,MAAM,OAAO,GAAG,kBAAE,CAAC,OAAO,EAAE;aACzB,aAAa,CAAC,IAAI,CAAC;aACnB,UAAU,CAAC,2BAAW,CAAC,cAAc,CAAC;aACtC,gBAAgB,CAAC,4BAAY,CAAC,IAAI,CAAC;aACnC,qBAAqB,CAAC;YACrB,gCAAgB,CAAC,UAAU;YAC3B,gCAAgB,CAAC,qBAAqB;YACtC,gCAAgB,CAAC,qBAAqB;SACvC,CAAC;aACD,qBAAqB,CAAC,IAAA,4BAAoB,EAAC,YAAY,CAAC,CAAC;aACzD,qBAAqB,CAAC,IAAA,4BAAoB,EAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;aAC9E,UAAU,CAAC,aAAM,CAAC,IAAI,CAAC,CAAA;QAE1B,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,EAAE,CAAA;QAEtC,OAAO,cAAc,CAAA;IACvB,CAAC;IAEO,8CAA8C,CACpD,sBAA8C;QAE9C,IAAI,iBAAqC,CAAA;QAEzC,IAAI,sBAAsB,YAAY,sCAA+B,EAAE,CAAC;YACtE,MAAM,CAAC,UAAU,CAAC,GAAG,IAAA,cAAO,EAAC,sBAAsB,CAAC,KAAK,CAAC,CAAA;YAC1D,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,iBAAU,CAAC,kDAAkD,CAAC,CAAA;YAEzF,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtD,MAAM,IAAI,iBAAU,CAClB,iIAAiI,CAClI,CAAA;YACH,CAAC;YAED,iBAAiB,GAAG;gBAClB,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,UAAU,CAAC,kBAAkB;aACtC,CAAA;QACH,CAAC;aAAM,IAAI,sBAAsB,YAAY,mCAA4B,EAAE,CAAC;YAC1E,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAA;YAEjD,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,iBAAU,CAAC,kEAAkE,CAAC,CAAA;YAClG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,sBAAsB,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;gBACxE,iBAAiB,GAAG;oBAClB,MAAM,EAAE,GAAG,sBAAsB,CAAC,YAAY,CAAC,QAAQ,GAAG,GAAG,EAAE;oBAC/D,MAAM,EAAE,KAAK;iBACd,CAAA;YACH,CAAC;iBAAM,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClC,iBAAiB,GAAG;oBAClB,MAAM,EAAE,GAAG;oBACX,MAAM,EAAE,KAAK;iBACd,CAAA;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,iBAAU,CAClB,4IAA4I,CAC7I,CAAA;YACH,CAAC;QACH,CAAC;aAAM,IAAI,sBAAsB,YAAY,yBAAkB,EAAE,CAAC;YAChE,MAAM,IAAI,iBAAU,CAAC,qDAAqD,CAAC,CAAA;QAC7E,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAA;YAC9C,qFAAqF;YACrF,IACE,CAAC,GAAG;gBACJ,OAAO,GAAG,KAAK,QAAQ;gBACvB,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC;gBACf,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ;gBAC3B,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;gBAC3B,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EACtB,CAAC;gBACD,MAAM,IAAI,iBAAU,CAClB,+LAA+L,CAChM,CAAA;YACH,CAAC;YAED,iBAAiB,GAAG;gBAClB,MAAM,EAAE,GAAG,CAAC,GAAG;gBACf,MAAM,EAAE,KAAK;aACd,CAAA;QACH,CAAC;QAED,OAAO,iBAAiB,CAAA;IAC1B,CAAC;IAEO,sBAAsB,CAC5B,oBAAkD,EAClD,iBAAqC;QAErC,MAAM,2BAA2B,GAAG,oBAAoB,CAAC,2BAA2B,CAAC,8BAA8B,CAAA;QACnH,IAAI,CAAC,2BAA2B,EAAE,CAAC;YACjC,MAAM,IAAI,iBAAU,CAClB,gHAAgH,CACjH,CAAA;QACH,CAAC;QAED,IAAI,yBAAyB,GAAa,EAAE,CAAA;QAC5C,IAAI,iBAAiB,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,IAAA,eAAQ,EAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;YAEpD,8DAA8D;YAC9D,yBAAyB,GAAG,CAAC,OAAO,SAAS,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,CAAA;QAChE,CAAC;aAAM,IAAI,iBAAiB,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC9C,yBAAyB,GAAG,CAAC,sCAAsC,CAAC,CAAA;QACtE,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,iBAAU,CAAC,uEAAuE,CAAC,CAAA;QAC/F,CAAC;QAED,+EAA+E;QAC/E,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,2BAA2B,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAChG,MAAM,IAAI,iBAAU,CAClB;gBACE,uEAAuE;gBACvE,oCAAoC,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;aAC9E,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAA;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,YAA0B,EAC1B,OAOC;QAED,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,OAAO,CAAA;QACpC,MAAM,GAAG,GAAG,IAAA,qBAAc,EAAC,OAAO,CAAC,CAAA;QACnC,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAA;QAEnB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,6BAA6B,EAAE,CAAC;YACvD,MAAM,IAAI,iBAAU,CAClB,sIAAsI,CACvI,CAAA;QACH,CAAC;QAED,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,iBAAU,CAAC,yEAAyE,CAAC,CAAA;QACjG,CAAC;QAED,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,KAAK,eAAe,EAAE,CAAC;YACjE,MAAM,IAAI,iBAAU,CAClB,8FAA8F,CAC/F,CAAA;QACH,CAAC;QAED,IAAI,GAAG,CAAC,OAAO,KAAK,cAAO,CAAC,IAAI,EAAE,CAAC;YACjC,MAAM,IAAI,iBAAU,CAAC,SAAS,cAAO,CAAC,IAAI,sDAAsD,CAAC,CAAA;QACnG,CAAC;QAED,MAAM,IAAI,GAAG,aAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAA;QACjD,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,6BAA6B,CAAC;YAClE,IAAI;YACJ,YAAY,EAAE,GAAG;YACjB,MAAM,EAAE;gBACN,GAAG,EAAE,OAAO,CAAC,GAAG;aACjB;YACD,mBAAmB,EAAE,OAAO,CAAC,GAAG;YAChC,GAAG,EAAE,wBAAiB,CAAC,WAAW,CAAC,wBAAiB,CAAC,UAAU,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;YACpG,GAAG,EAAE,wBAAiB,CAAC,WAAW,CAAC,wBAAiB,CAAC,UAAU,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;SACpG,CAAC,CAAA;QAEF,OAAO,GAAG,CAAA;IACZ,CAAC;CACF,CAAA;AA3XY,gEAA0B;qCAA1B,0BAA0B;IADtC,IAAA,iBAAU,GAAE;qCAE6C,qCAA8B;GAD3E,0BAA0B,CA2XtC"}