@interop/did-cli 0.13.0 → 0.14.0

package/dist/was/request-grant.d.ts

@@ -0,0 +1,144 @@
+import type { IVPRDetails } from '@interop/data-integrity-core/vpr';
+import type { IZcap } from '@interop/data-integrity-core/zcap';
+/**
+ * The wallet-defined descriptor for a world-readable collection under the
+ * user's own Space. Naming a descriptor rather than a URL is what lets the
+ * request be written before the Space exists: the wallet resolves it to one of
+ * its own collections at consent time.
+ */
+export declare const PUBLIC_COLLECTION_TYPE = "https://w3id.org/byoe#public-collection";
+/** The collection the request names when `--collection` is not given. */
+export declare const DEFAULT_COLLECTION = "web";
+/** The actions the request asks for when `--action` is not given. */
+export declare const DEFAULT_ACTIONS: string[];
+/**
+ * How long to wait for the user to approve before giving up: the server's
+ * exchange TTL, since past it the exchange is gone and no approval can arrive.
+ */
+export declare const DEFAULT_TIMEOUT_MS: number;
+/**
+ * The largest wait the poll's deadline accepts (a `setTimeout` delay, which is
+ * truncated to a signed 32-bit value and would otherwise fire at once).
+ * Anything past this is rejected as bad input rather than left to fail deep
+ * inside the poll.
+ */
+export declare const MAX_TIMEOUT_MS = 2147483647;
+/**
+ * Raised when the exchange itself ran but produced no grant: the user declined,
+ * let it expire, or approved a request the wallet could not satisfy. These are
+ * operation failures rather than bad input, and the command reports them as
+ * such. Internal to this package; nothing dispatches on the name across a
+ * package boundary.
+ */
+export declare class GrantRequestError extends Error {
+}
+/**
+ * The subset of `fetch` the exchange helpers use.
+ */
+type FetchLike = (input: string, init?: RequestInit) => Promise<Response>;
+/**
+ * Replaces the `fetch` the exchange helpers transport over (a test-only seam,
+ * mirroring `setWasClientFactory`). Call with no argument to restore the
+ * global `fetch`.
+ *
+ * @param [fetchImpl] {FetchLike}
+ * @returns {void}
+ */
+export declare function setExchangeFetch(fetchImpl?: FetchLike): void;
+/**
+ * Builds the zcap-only VPR this command sends: one capability query naming the
+ * agent as the capability `controller` and a public-collection descriptor as
+ * the target, plus an optional root `agent` member naming what the agent
+ * calls itself, composed by wallet-core. There is deliberately no
+ * `DIDAuthentication` query and no `domain` -- the agent is asking for
+ * authority, not proving who it is to a verifier, and a CLI has no attested
+ * origin for a wallet to check a domain against (one sent anyway is enforced,
+ * and fails).
+ *
+ * @param options {object}
+ * @param options.controller {string}   The agent's did:key (the grantee).
+ * @param [options.collection] {string}   The collection name to request.
+ * @param [options.actions] {string[]}   The actions to request.
+ * @param [options.reason] {string}   Human-readable text shown at consent.
+ * @param [options.name] {string}   The agent's self-declared display name,
+ *   shown at consent as what it calls itself.
+ * @returns {IVPRDetails}
+ */
+export declare function buildCapabilityRequest({ controller, collection, actions, reason, name }: {
+    controller: string;
+    collection?: string;
+    actions?: string[];
+    reason?: string;
+    name?: string;
+}): IVPRDetails;
+/**
+ * Resolves a wallet base URL to its external-request route, rejecting anything
+ * that is not an absolute http(s) URL. Kept separate from the link itself so a
+ * bad `--wallet` is caught before an exchange is opened for it.
+ *
+ * @param options {object}
+ * @param options.wallet {string}   The wallet's base URL.
+ * @returns {URL}
+ */
+export declare function walletRequestRoute({ wallet }: {
+    wallet: string;
+}): URL;
+/**
+ * Builds the link that opens a wallet straight onto the approval page for an
+ * exchange, for the case where the user is already at a browser: the wallet's
+ * external-request route carrying the interaction URL as a percent-encoded
+ * `url` parameter. The interaction URL alone stays the fallback, since it is
+ * what a wallet on another device can be pointed at.
+ *
+ * @param options {object}
+ * @param options.route {URL}   The wallet's external-request route.
+ * @param options.interactionUrl {string}   The exchange's interaction URL.
+ * @returns {string}
+ */
+export declare function buildWalletDeepLink({ route, interactionUrl }: {
+    route: URL;
+    interactionUrl: string;
+}): string;
+/**
+ * Opens an ephemeral exchange on the WAS server carrying the request, and
+ * returns both the URL to poll and the interaction URL to hand the user.
+ *
+ * @param options {object}
+ * @param options.server {string}   The WAS server base URL.
+ * @param options.request {IVPRDetails}   The VPR to store on the exchange.
+ * @returns {Promise<{exchangeUrl: string, interactionUrl: string}>}
+ */
+export declare function openGrantExchange({ server, request }: {
+    server: string;
+    request: IVPRDetails;
+}): Promise<{
+    exchangeUrl: string;
+    interactionUrl: string;
+}>;
+/**
+ * Pulls the delegated capabilities out of a completed exchange response. The
+ * wallet posts `{ verifiablePresentation }`, and the zcaps ride inside that
+ * presentation as its `zcap` member.
+ *
+ * @param response {unknown}   The exchange's `response` member.
+ * @returns {IZcap[]}
+ */
+export declare function extractCapabilities(response: unknown): IZcap[];
+/**
+ * Waits for the user's wallet to complete the exchange, and returns the
+ * capabilities it delegated. Gives up at `timeoutMs`, and distinguishes an
+ * exchange the server has already dropped from one still waiting on the user.
+ *
+ * @param options {object}
+ * @param options.exchangeUrl {string}
+ * @param [options.timeoutMs] {number}
+ * @param [options.intervalMs] {number}   How often to poll.
+ * @returns {Promise<IZcap[]>}
+ */
+export declare function awaitGrantedCapabilities({ exchangeUrl, timeoutMs, intervalMs }: {
+    exchangeUrl: string;
+    timeoutMs?: number;
+    intervalMs?: number;
+}): Promise<IZcap[]>;
+export {};
+//# sourceMappingURL=request-grant.d.ts.map

package/dist/was/request-grant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-grant.d.ts","sourceRoot":"","sources":["../../src/was/request-grant.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAEV,WAAW,EACZ,MAAM,kCAAkC,CAAA;AACzC,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mCAAmC,CAAA;AAE9D;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,4CAA4C,CAAA;AAE/E,yEAAyE;AACzE,eAAO,MAAM,kBAAkB,QAAQ,CAAA;AAEvC,qEAAqE;AACrE,eAAO,MAAM,eAAe,UAAiC,CAAA;AAS7D;;;GAGG;AACH,eAAO,MAAM,kBAAkB,QAA4B,CAAA;AAE3D;;;;;GAKG;AACH,eAAO,MAAM,cAAc,aAAgB,CAAA;AAE3C;;;;;;GAMG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;CAAG;AAE/C;;GAEG;AACH,KAAK,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;AAIzE;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,CAAC,EAAE,SAAS,GAAG,IAAI,CAE5D;AAsBD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,sBAAsB,CAAC,EACrC,UAAU,EACV,UAA+B,EAC/B,OAAyB,EACzB,MAAM,EACN,IAAI,EACL,EAAE;IACD,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;CACd,GAAG,WAAW,CAcd;AASD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,MAAM,EAAE,EAAE;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,GAAG,CAoBtE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,EAClC,KAAK,EACL,cAAc,EACf,EAAE;IACD,KAAK,EAAE,GAAG,CAAA;IACV,cAAc,EAAE,MAAM,CAAA;CACvB,GAAG,MAAM,CAIT;AAED;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CAAC,EACtC,MAAM,EACN,OAAO,EACR,EAAE;IACD,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,WAAW,CAAA;CACrB,GAAG,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,CAAC,CAM3D;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,OAAO,GAAG,KAAK,EAAE,CA4B9D;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,wBAAwB,CAAC,EAC7C,WAAW,EACX,SAA8B,EAC9B,UAAU,EACX,EAAE;IACD,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CA8BnB"}

package/dist/was/request-grant.js

@@ -0,0 +1,249 @@
+/**
+ * The requesting half of capability delegation (`was request-grant`), the
+ * inverse of `was grant`. Instead of signing a capability for someone else,
+ * this asks a user's wallet to sign one for us: it builds a zcap-only
+ * Verifiable Presentation Request (VPR), opens an ephemeral exchange on the
+ * WAS server to carry it, and waits for the wallet to post back a response
+ * presentation holding the delegated capabilities.
+ *
+ * Nothing here is signed. The exchange routes are unauthenticated by design --
+ * the exchange URL is itself the secret, and it travels point-to-point to the
+ * user (today as a printed interaction URL). Both the exchange transport and
+ * the zcap-only VPR composition come from `@interop/wallet-request`; what
+ * is owned here is the CLI's own request shape (the public-collection
+ * descriptor and the action normalization) and the response parsing.
+ */
+import { composeCapabilityRequest, createEphemeralExchange, pollEphemeralExchange, EPHEMERAL_EXCHANGE_TTL_MS } from '@interop/wallet-request';
+/**
+ * The wallet-defined descriptor for a world-readable collection under the
+ * user's own Space. Naming a descriptor rather than a URL is what lets the
+ * request be written before the Space exists: the wallet resolves it to one of
+ * its own collections at consent time.
+ */
+export const PUBLIC_COLLECTION_TYPE = 'https://w3id.org/byoe#public-collection';
+/** The collection the request names when `--collection` is not given. */
+export const DEFAULT_COLLECTION = 'web';
+/** The actions the request asks for when `--action` is not given. */
+export const DEFAULT_ACTIONS = ['GET', 'HEAD', 'PUT', 'POST'];
+/**
+ * The actions a capability request may name. A superset of the verbs
+ * `was grant` signs (it adds `HEAD`), because the wallet -- not this CLI -- is
+ * the authority on what it is willing to delegate.
+ */
+const REQUESTABLE_ACTIONS = ['GET', 'HEAD', 'PUT', 'POST', 'DELETE'];
+/**
+ * How long to wait for the user to approve before giving up: the server's
+ * exchange TTL, since past it the exchange is gone and no approval can arrive.
+ */
+export const DEFAULT_TIMEOUT_MS = EPHEMERAL_EXCHANGE_TTL_MS;
+/**
+ * The largest wait the poll's deadline accepts (a `setTimeout` delay, which is
+ * truncated to a signed 32-bit value and would otherwise fire at once).
+ * Anything past this is rejected as bad input rather than left to fail deep
+ * inside the poll.
+ */
+export const MAX_TIMEOUT_MS = 2_147_483_647;
+/**
+ * Raised when the exchange itself ran but produced no grant: the user declined,
+ * let it expire, or approved a request the wallet could not satisfy. These are
+ * operation failures rather than bad input, and the command reports them as
+ * such. Internal to this package; nothing dispatches on the name across a
+ * package boundary.
+ */
+export class GrantRequestError extends Error {
+}
+let exchangeFetch;
+/**
+ * Replaces the `fetch` the exchange helpers transport over (a test-only seam,
+ * mirroring `setWasClientFactory`). Call with no argument to restore the
+ * global `fetch`.
+ *
+ * @param [fetchImpl] {FetchLike}
+ * @returns {void}
+ */
+export function setExchangeFetch(fetchImpl) {
+    exchangeFetch = fetchImpl;
+}
+/**
+ * Normalizes requested action verbs to their canonical uppercase form,
+ * rejecting anything that is not an HTTP verb a WAS server matches against.
+ *
+ * @param actions {string[]}
+ * @returns {string[]}
+ */
+function normalizeRequestedActions(actions) {
+    return actions.map(action => {
+        const verb = action.toUpperCase();
+        if (!REQUESTABLE_ACTIONS.includes(verb)) {
+            throw new Error(`Unknown action "${action}" (supported: ` +
+                `${REQUESTABLE_ACTIONS.join(', ')}).`);
+        }
+        return verb;
+    });
+}
+/**
+ * Builds the zcap-only VPR this command sends: one capability query naming the
+ * agent as the capability `controller` and a public-collection descriptor as
+ * the target, plus an optional root `agent` member naming what the agent
+ * calls itself, composed by wallet-core. There is deliberately no
+ * `DIDAuthentication` query and no `domain` -- the agent is asking for
+ * authority, not proving who it is to a verifier, and a CLI has no attested
+ * origin for a wallet to check a domain against (one sent anyway is enforced,
+ * and fails).
+ *
+ * @param options {object}
+ * @param options.controller {string}   The agent's did:key (the grantee).
+ * @param [options.collection] {string}   The collection name to request.
+ * @param [options.actions] {string[]}   The actions to request.
+ * @param [options.reason] {string}   Human-readable text shown at consent.
+ * @param [options.name] {string}   The agent's self-declared display name,
+ *   shown at consent as what it calls itself.
+ * @returns {IVPRDetails}
+ */
+export function buildCapabilityRequest({ controller, collection = DEFAULT_COLLECTION, actions = DEFAULT_ACTIONS, reason, name }) {
+    const capabilityQuery = {
+        ...(reason !== undefined && { reason }),
+        allowedAction: normalizeRequestedActions(actions),
+        controller,
+        invocationTarget: {
+            type: PUBLIC_COLLECTION_TYPE,
+            name: collection
+        }
+    };
+    return composeCapabilityRequest({
+        capabilityQueries: [capabilityQuery],
+        ...(name !== undefined && { agent: { name } })
+    });
+}
+/**
+ * The wallet route an outside request is handed to. Requests arriving from
+ * outside the app land under `/external/`; `/wallet/*` stays CHAPI-handler
+ * only.
+ */
+const WALLET_REQUEST_PATH = 'external/request';
+/**
+ * Resolves a wallet base URL to its external-request route, rejecting anything
+ * that is not an absolute http(s) URL. Kept separate from the link itself so a
+ * bad `--wallet` is caught before an exchange is opened for it.
+ *
+ * @param options {object}
+ * @param options.wallet {string}   The wallet's base URL.
+ * @returns {URL}
+ */
+export function walletRequestRoute({ wallet }) {
+    let base;
+    try {
+        base = new URL(wallet);
+    }
+    catch (err) {
+        throw new Error(`Invalid wallet URL "${wallet}": expected an absolute http(s) URL.`, { cause: err });
+    }
+    if (base.protocol !== 'https:' && base.protocol !== 'http:') {
+        throw new Error(`Invalid wallet URL "${wallet}": expected an http(s) URL, got ` +
+            `"${base.protocol}".`);
+    }
+    // Resolve the route against the base path rather than the origin, so a
+    // wallet deployed under a sub-path keeps its prefix.
+    const path = base.pathname.endsWith('/') ? base.pathname : `${base.pathname}/`;
+    return new URL(`${path}${WALLET_REQUEST_PATH}`, base);
+}
+/**
+ * Builds the link that opens a wallet straight onto the approval page for an
+ * exchange, for the case where the user is already at a browser: the wallet's
+ * external-request route carrying the interaction URL as a percent-encoded
+ * `url` parameter. The interaction URL alone stays the fallback, since it is
+ * what a wallet on another device can be pointed at.
+ *
+ * @param options {object}
+ * @param options.route {URL}   The wallet's external-request route.
+ * @param options.interactionUrl {string}   The exchange's interaction URL.
+ * @returns {string}
+ */
+export function buildWalletDeepLink({ route, interactionUrl }) {
+    const link = new URL(route);
+    link.searchParams.set('url', interactionUrl);
+    return link.toString();
+}
+/**
+ * Opens an ephemeral exchange on the WAS server carrying the request, and
+ * returns both the URL to poll and the interaction URL to hand the user.
+ *
+ * @param options {object}
+ * @param options.server {string}   The WAS server base URL.
+ * @param options.request {IVPRDetails}   The VPR to store on the exchange.
+ * @returns {Promise<{exchangeUrl: string, interactionUrl: string}>}
+ */
+export async function openGrantExchange({ server, request }) {
+    return createEphemeralExchange({
+        serverUrl: server,
+        request,
+        ...(exchangeFetch && { fetch: exchangeFetch })
+    });
+}
+/**
+ * Pulls the delegated capabilities out of a completed exchange response. The
+ * wallet posts `{ verifiablePresentation }`, and the zcaps ride inside that
+ * presentation as its `zcap` member.
+ *
+ * @param response {unknown}   The exchange's `response` member.
+ * @returns {IZcap[]}
+ */
+export function extractCapabilities(response) {
+    const presentation = response?.verifiablePresentation;
+    if (!presentation) {
+        throw new GrantRequestError('The wallet response contained no verifiablePresentation.');
+    }
+    const { zcap } = presentation;
+    const zcaps = zcap === undefined ? [] : Array.isArray(zcap) ? zcap : [zcap];
+    for (const capability of zcaps) {
+        if (typeof capability.id !== 'string' || capability.id === '') {
+            throw new GrantRequestError('The wallet returned a capability with no id, which cannot be filed ' +
+                'in the zcap store or named by a later --capability.');
+        }
+    }
+    if (zcaps.length === 0) {
+        throw new GrantRequestError('The wallet returned a presentation with no capabilities: the request ' +
+            'was declined, or the collection could not be granted (a public ' +
+            'collection is only ever created public, never converted from an ' +
+            'existing private one).');
+    }
+    return zcaps;
+}
+/**
+ * Waits for the user's wallet to complete the exchange, and returns the
+ * capabilities it delegated. Gives up at `timeoutMs`, and distinguishes an
+ * exchange the server has already dropped from one still waiting on the user.
+ *
+ * @param options {object}
+ * @param options.exchangeUrl {string}
+ * @param [options.timeoutMs] {number}
+ * @param [options.intervalMs] {number}   How often to poll.
+ * @returns {Promise<IZcap[]>}
+ */
+export async function awaitGrantedCapabilities({ exchangeUrl, timeoutMs = DEFAULT_TIMEOUT_MS, intervalMs }) {
+    let response;
+    try {
+        response = await pollEphemeralExchange({
+            exchangeUrl,
+            timeoutMs,
+            ...(intervalMs !== undefined && { intervalMs }),
+            ...(exchangeFetch && { fetch: exchangeFetch })
+        });
+    }
+    catch (err) {
+        // The transport is injected and may resolve to a different copy of
+        // wallet-core, so the error name is the stable contract here.
+        if (err.name === 'EphemeralExchangeGoneError') {
+            throw new GrantRequestError('The request expired before it was approved (the server keeps an ' +
+                'exchange for ten minutes). Run the command again for a fresh link.', { cause: err });
+        }
+        if (err.name === 'EphemeralExchangeTimeoutError') {
+            throw new GrantRequestError(`Gave up waiting for approval after ${Math.round(timeoutMs / 1000)}s. ` +
+                'The request may still be approvable; raise --timeout, or run the ' +
+                'command again for a fresh link.', { cause: err });
+        }
+        throw err;
+    }
+    return extractCapabilities(response);
+}
+//# sourceMappingURL=request-grant.js.map

package/dist/was/request-grant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-grant.js","sourceRoot":"","sources":["../../src/was/request-grant.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,qBAAqB,EACrB,yBAAyB,EAC1B,MAAM,yBAAyB,CAAA;AAOhC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,yCAAyC,CAAA;AAE/E,yEAAyE;AACzE,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,CAAA;AAEvC,qEAAqE;AACrE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;AAE7D;;;;GAIG;AACH,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAU,CAAA;AAE7E;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,yBAAyB,CAAA;AAE3D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,aAAa,CAAA;AAE3C;;;;;;GAMG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;CAAG;AAO/C,IAAI,aAAoC,CAAA;AAExC;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAqB;IACpD,aAAa,GAAG,SAAS,CAAA;AAC3B,CAAC;AAED;;;;;;GAMG;AACH,SAAS,yBAAyB,CAAC,OAAiB;IAClD,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;QAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,EAAE,CAAA;QACjC,IAAI,CAAE,mBAAyC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CACb,mBAAmB,MAAM,gBAAgB;gBACvC,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACxC,CAAA;QACH,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,sBAAsB,CAAC,EACrC,UAAU,EACV,UAAU,GAAG,kBAAkB,EAC/B,OAAO,GAAG,eAAe,EACzB,MAAM,EACN,IAAI,EAOL;IACC,MAAM,eAAe,GAA2B;QAC9C,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC;QACvC,aAAa,EAAE,yBAAyB,CAAC,OAAO,CAAC;QACjD,UAAU;QACV,gBAAgB,EAAE;YAChB,IAAI,EAAE,sBAAsB;YAC5B,IAAI,EAAE,UAAU;SACjB;KACF,CAAA;IACD,OAAO,wBAAwB,CAAC;QAC9B,iBAAiB,EAAE,CAAC,eAAe,CAAC;QACpC,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;KAC/C,CAAC,CAAA;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,mBAAmB,GAAG,kBAAkB,CAAA;AAE9C;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAE,MAAM,EAAsB;IAC/D,IAAI,IAAS,CAAA;IACb,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAA;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,uBAAuB,MAAM,sCAAsC,EACnE,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAA;IACH,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CACb,uBAAuB,MAAM,kCAAkC;YAC7D,IAAI,IAAI,CAAC,QAAQ,IAAI,CACxB,CAAA;IACH,CAAC;IACD,uEAAuE;IACvE,qDAAqD;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,GAAG,CAAA;IAC9E,OAAO,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,mBAAmB,EAAE,EAAE,IAAI,CAAC,CAAA;AACvD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAClC,KAAK,EACL,cAAc,EAIf;IACC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IAC3B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC,CAAA;IAC5C,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAA;AACxB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EACtC,MAAM,EACN,OAAO,EAIR;IACC,OAAO,uBAAuB,CAAC;QAC7B,SAAS,EAAE,MAAM;QACjB,OAAO;QACP,GAAG,CAAC,aAAa,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;KAC/C,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAiB;IACnD,MAAM,YAAY,GAChB,QACD,EAAE,sBAAsB,CAAA;IACzB,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,iBAAiB,CACzB,0DAA0D,CAC3D,CAAA;IACH,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,GAAG,YAAY,CAAA;IAC7B,MAAM,KAAK,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IAC3E,KAAK,MAAM,UAAU,IAAI,KAAK,EAAE,CAAC;QAC/B,IAAI,OAAO,UAAU,CAAC,EAAE,KAAK,QAAQ,IAAI,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;YAC9D,MAAM,IAAI,iBAAiB,CACzB,qEAAqE;gBACnE,qDAAqD,CACxD,CAAA;QACH,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,iBAAiB,CACzB,uEAAuE;YACrE,iEAAiE;YACjE,kEAAkE;YAClE,wBAAwB,CAC3B,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,EAC7C,WAAW,EACX,SAAS,GAAG,kBAAkB,EAC9B,UAAU,EAKX;IACC,IAAI,QAAiB,CAAA;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,qBAAqB,CAAC;YACrC,WAAW;YACX,SAAS;YACT,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,CAAC;YAC/C,GAAG,CAAC,aAAa,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;SAC/C,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,mEAAmE;QACnE,8DAA8D;QAC9D,IAAK,GAAa,CAAC,IAAI,KAAK,4BAA4B,EAAE,CAAC;YACzD,MAAM,IAAI,iBAAiB,CACzB,kEAAkE;gBAChE,oEAAoE,EACtE,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAA;QACH,CAAC;QACD,IAAK,GAAa,CAAC,IAAI,KAAK,+BAA+B,EAAE,CAAC;YAC5D,MAAM,IAAI,iBAAiB,CACzB,sCAAsC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK;gBACrE,mEAAmE;gBACnE,iCAAiC,EACnC,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CAAA;QACH,CAAC;QACD,MAAM,GAAG,CAAA;IACX,CAAC;IACD,OAAO,mBAAmB,CAAC,QAAQ,CAAC,CAAA;AACtC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@interop/did-cli",
-  "version": "0.13.0",
+  "version": "0.14.0",
   "description": "DID CLI tool for DIDs, Verifiable Credentials, key pairs, and zcaps",
   "type": "module",
   "main": "dist/index.js",
@@ -26,25 +26,27 @@
   "dependencies": {
     "@digitalcredentials/bnid": "^5.0.0",
     "@digitalcredentials/issuer-registry-client": "^4.0.0",
-    "@interop/data-integrity-core": "^8.2.0",
-    "@interop/data-integrity-proof": "^3.4.1",
-    "@interop/did-io": "^4.0.6",
-    "@interop/did-method-key": "^7.3.3",
-    "@interop/did-method-webvh": "^3.7.0",
-    "@interop/did-web-resolver": "^6.2.3",
-    "@interop/ecdsa-multikey": "^2.3.2",
-    "@interop/ecdsa-signature": "2.0.4",
-    "@interop/ed25519-signature": "^7.1.3",
-    "@interop/ed25519-verification-key": "^8.0.2",
-    "@interop/edv-client": "^17.6.1",
-    "@interop/ezcap": "^7.3.2",
-    "@interop/minimal-cipher": "^7.6.1",
-    "@interop/security-document-loader": "^9.4.1",
-    "@interop/vc": "^11.0.5",
-    "@interop/verifier-core": "^3.3.1",
-    "@interop/was-client": "^0.14.5",
-    "@interop/x25519-key-agreement-key": "^5.2.0",
-    "@interop/zcap": "^11.0.4",
+    "@interop/data-integrity-core": "^8.7.1",
+    "@interop/data-integrity-proof": "^3.4.5",
+    "@interop/did-io": "^4.1.1",
+    "@interop/did-method-key": "^7.4.2",
+    "@interop/did-method-webvh": "^5.9.0",
+    "@interop/did-web-resolver": "^6.3.3",
+    "@interop/ecdsa-multikey": "^2.4.0",
+    "@interop/ecdsa-signature": "2.0.7",
+    "@interop/ed25519-signature": "^7.2.2",
+    "@interop/ed25519-verification-key": "^8.2.0",
+    "@interop/edv-client": "^17.8.4",
+    "@interop/ezcap": "^7.4.8",
+    "@interop/minimal-cipher": "^7.10.2",
+    "@interop/security-document-loader": "^10.1.2",
+    "@interop/vc": "^11.0.9",
+    "@interop/verifier-core": "^3.5.8",
+    "@interop/wallet-core": "^0.75.0",
+    "@interop/wallet-request": "^0.3.1",
+    "@interop/was-client": "^0.60.0",
+    "@interop/x25519-key-agreement-key": "^5.4.0",
+    "@interop/zcap": "^11.2.0",
     "@scure/base": "^2.2.0",
     "commander": "^15.0.0"
   },