@interop/wallet-core 0.1.1 → 0.2.0

package/dist/request/matching.js

@@ -0,0 +1,183 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * QueryByExample matching: which stored credentials satisfy a verifier's
+ * `QueryByExample` request. Two independent algorithms ship here because the two
+ * apps genuinely differ, and each wallet matches only its own local store (no
+ * cross-replica agreement is required):
+ *
+ * - `credentialMatchesVprExampleQuery` / `filterCredentialsByExample` -- DCW's
+ *   jsonpath-plus deep matcher, which walks the example object and matches any
+ *   nested field (arrays, nested objects, literals) against the credential.
+ * - `vcMatchesFor` / `hasTypedExample` / `requestsCredentialType` --
+ *   Freewallet's type-and-issuer matcher, which constrains only on the
+ *   example's `type` (and, when pinned, `issuer`).
+ *
+ * Both operate on plain `IVerifiableCredential`s; each app maps its own record
+ * type down to the credential before calling. Ported from DCW's
+ * `app/lib/credentialMatching.ts` and Freewallet's
+ * `src/lib/walletRequest/vcMatches.ts`.
+ */
+import { JSONPath } from 'jsonpath-plus';
+import { credentialQueriesOf } from './classify.js';
+import { issuerId, typeArray } from '@interop/data-integrity-core/guards';
+// The loose-field normalizers are owned by data-integrity-core; re-export them
+// here so a matching consumer imports one module.
+export { issuerId, typeArray } from '@interop/data-integrity-core/guards';
+/**
+ * Whether a credential matches a QueryByExample `example` object, by the DCW
+ * deep-matching algorithm: every key of the example is resolved as a JSONPath
+ * against the credential and compared. Array example values require the
+ * credential to contain (at least) every listed value; object example values
+ * recurse; literal example values compare by strict equality. An empty example
+ * matches any credential.
+ *
+ * @param vprExample {Record<string, unknown>} - The QueryByExample `example`.
+ * @param credential {IVerifiableCredential} - The stored credential to test.
+ * @param [credentialPath] {string} - JSONPath root into the credential
+ *   (defaults to `$`); used internally when recursing into nested objects.
+ * @returns {boolean}
+ */
+export function credentialMatchesVprExampleQuery(vprExample, credential, credentialPath = '$') {
+    const matches = [];
+    for (const [vprExampleKey, vprExampleValue] of Object.entries(vprExample)) {
+        const nextPath = extendPath(credentialPath, vprExampleKey);
+        // The result is always dumped into a single-element array.
+        const [credentialScope] = JSONPath({ path: nextPath, json: credential });
+        if (Array.isArray(vprExampleValue)) {
+            // Array query values require that the matching credential contains at
+            // least every value specified. This assumes each element is a literal.
+            if (!Array.isArray(credentialScope)) {
+                return false;
+            }
+            if (credentialScope.length < vprExampleValue.length) {
+                return false;
+            }
+            matches.push(vprExampleValue.every(exVal => credentialScope.includes(exVal)));
+        }
+        else if (typeof vprExampleValue === 'object' &&
+            vprExampleValue !== null) {
+            // Object query values recurse, to handle nested queries.
+            matches.push(credentialMatchesVprExampleQuery(vprExampleValue, credential, nextPath));
+        }
+        else {
+            // Literal query values compare directly.
+            matches.push(credentialScope === vprExampleValue);
+        }
+    }
+    return matches.every(m => m);
+}
+/**
+ * Extends a JSONPath by a literal key, escaping any JSONPath-reserved
+ * characters in the key (jsonpath-plus escapes a reserved char by prefixing it
+ * with a backtick).
+ */
+function extendPath(path, extension) {
+    const reserved = /[$@*()[\].:?]/g;
+    if (reserved.test(extension)) {
+        extension = extension.replace(reserved, match => '`' + match);
+    }
+    return `${path}.${extension}`;
+}
+/**
+ * Filters credentials to those matching a `QueryByExample`, using the deep
+ * matcher. Each of the query's `credentialQuery` details contributes its
+ * `example`; a credential is included when it matches any of them. A malformed
+ * query with no example matches nothing.
+ *
+ * @param credentials {IVerifiableCredential[]}
+ * @param query {IQueryByExample}
+ * @returns {IVerifiableCredential[]}
+ */
+export function filterCredentialsByExample(credentials, query) {
+    const examples = credentialQueriesOf(query)
+        .map(({ example }) => example)
+        .filter((example) => !!example);
+    if (examples.length === 0) {
+        // Malformed request: no example to match against.
+        return [];
+    }
+    return credentials.filter(credential => examples.some(example => credentialMatchesVprExampleQuery(example, credential)));
+}
+/**
+ * Whether a credential matches a single QueryByExample `example` by the
+ * type-and-issuer algorithm: every type listed in `example.type` must appear in
+ * the credential's `type`, and -- when the example pins an `issuer` -- the
+ * credential's issuer must equal it.
+ *
+ * @param options {object}
+ * @param options.credential {IVerifiableCredential}
+ * @param options.example {ICredentialQuery['example']}
+ * @returns {boolean}
+ */
+function matchesExample({ credential, example }) {
+    const wantedTypes = typeArray(example.type);
+    const credentialTypes = typeArray(credential.type);
+    const typesMatch = wantedTypes.every(type => credentialTypes.includes(type));
+    if (!typesMatch) {
+        return false;
+    }
+    const wantedIssuer = issuerId(example.issuer);
+    if (wantedIssuer) {
+        return issuerId(credential.issuer) === wantedIssuer;
+    }
+    return true;
+}
+/**
+ * The credentials matching any of the given QueryByExample queries by the
+ * type-and-issuer algorithm. Only queries whose `example` carries a `type`
+ * constrain the result; a query with no example type matches nothing here (the
+ * caller keeps its list-all behavior when *no* query specifies a type).
+ *
+ * @param options {object}
+ * @param options.credentials {IVerifiableCredential[]}
+ * @param options.queries {IQueryByExample[]}
+ * @returns {IVerifiableCredential[]}
+ */
+export function vcMatchesFor({ credentials, queries }) {
+    const examples = typedExamplesOf(queries);
+    if (examples.length === 0) {
+        return [];
+    }
+    return credentials.filter(credential => examples.some(example => matchesExample({ credential, example })));
+}
+/**
+ * The example credential shapes pinned by a query set: every `credentialQuery`
+ * detail carrying an example `type`. Only these constrain the share list.
+ *
+ * @param queries {IQueryByExample[]}
+ * @returns {Array<ICredentialQuery['example']>}
+ */
+function typedExamplesOf(queries) {
+    return queries
+        .flatMap(query => credentialQueriesOf(query))
+        .map(({ example }) => example)
+        .filter((example) => !!example && typeArray(example.type).length > 0);
+}
+/**
+ * Whether any of the QueryByExample queries pins an example `type` (and so
+ * should filter the share list). When false, the caller keeps showing all
+ * stored credentials.
+ *
+ * @param queries {IQueryByExample[]}
+ * @returns {boolean}
+ */
+export function hasTypedExample(queries) {
+    return typedExamplesOf(queries).length > 0;
+}
+/**
+ * Whether any typed example in the query set explicitly lists the given
+ * credential `type`. Lets the caller distinguish a request that actually asks
+ * for a particular type (e.g. a LoginCredential) from a generic, untyped "any
+ * VC" request.
+ *
+ * @param options {object}
+ * @param options.queries {IQueryByExample[]}
+ * @param options.type {string}
+ * @returns {boolean}
+ */
+export function requestsCredentialType({ queries, type }) {
+    return typedExamplesOf(queries).some(example => typeArray(example.type).includes(type));
+}
+//# sourceMappingURL=matching.js.map

package/dist/request/matching.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"matching.js","sourceRoot":"","sources":["../../src/request/matching.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAGxC,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AACnD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAA;AAEzE,+EAA+E;AAC/E,kDAAkD;AAClD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAA;AAEzE;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gCAAgC,CAC9C,UAAmC,EACnC,UAAiC,EACjC,cAAc,GAAG,GAAG;IAEpB,MAAM,OAAO,GAAc,EAAE,CAAA;IAC7B,KAAK,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1E,MAAM,QAAQ,GAAG,UAAU,CAAC,cAAc,EAAE,aAAa,CAAC,CAAA;QAC1D,2DAA2D;QAC3D,MAAM,CAAC,eAAe,CAAC,GAAG,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAA;QACxE,IAAI,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;YACnC,sEAAsE;YACtE,uEAAuE;YACvE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;gBACpC,OAAO,KAAK,CAAA;YACd,CAAC;YACD,IAAI,eAAe,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM,EAAE,CAAC;gBACpD,OAAO,KAAK,CAAA;YACd,CAAC;YACD,OAAO,CAAC,IAAI,CACV,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAChE,CAAA;QACH,CAAC;aAAM,IACL,OAAO,eAAe,KAAK,QAAQ;YACnC,eAAe,KAAK,IAAI,EACxB,CAAC;YACD,yDAAyD;YACzD,OAAO,CAAC,IAAI,CACV,gCAAgC,CAC9B,eAA0C,EAC1C,UAAU,EACV,QAAQ,CACT,CACF,CAAA;QACH,CAAC;aAAM,CAAC;YACN,yCAAyC;YACzC,OAAO,CAAC,IAAI,CAAC,eAAe,KAAK,eAAe,CAAC,CAAA;QACnD,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;AAC9B,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,IAAY,EAAE,SAAiB;IACjD,MAAM,QAAQ,GAAG,gBAAgB,CAAA;IACjC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,CAAA;IAC/D,CAAC;IACD,OAAO,GAAG,IAAI,IAAI,SAAS,EAAE,CAAA;AAC/B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CACxC,WAAoC,EACpC,KAAsB;IAEtB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC;SACxC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC;SAC7B,MAAM,CAAC,CAAC,OAAO,EAA0C,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IACzE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,kDAAkD;QAClD,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CACrC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CACtB,gCAAgC,CAC9B,OAAkC,EAClC,UAAU,CACX,CACF,CACF,CAAA;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,cAAc,CAAC,EACtB,UAAU,EACV,OAAO,EAIR;IACC,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3C,MAAM,eAAe,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;IAClD,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;IAC5E,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAC7C,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,YAAY,CAAA;IACrD,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY,CAAC,EAC3B,WAAW,EACX,OAAO,EAIR;IACC,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;IACzC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CACrC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CAClE,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CACtB,OAA0B;IAE1B,OAAO,OAAO;SACX,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;SAC5C,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC;SAC7B,MAAM,CACL,CAAC,OAAO,EAA0C,EAAE,CAClD,CAAC,CAAC,OAAO,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAClD,CAAA;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,OAA0B;IACxD,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;AAC5C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CAAC,EACrC,OAAO,EACP,IAAI,EAIL;IACC,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAC7C,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CACvC,CAAA;AACH,CAAC"}

package/dist/request/parse.d.ts

@@ -0,0 +1,68 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * Parsing of incoming wallet/VC API messages that arrive as JSON text or a
+ * deep-link URL (`dccrequest://...?request=<json>`), plus the small
+ * query-inspection helpers a caller runs over a parsed VPR body. Ported from
+ * DCW's `app/lib/walletRequestApi.ts`; the `query-string` dependency is dropped
+ * in favor of the native `URL` / `URLSearchParams`.
+ */
+import type { IVPRQuery, IZcapQuery, WalletApiMessage } from './types.js';
+export { isDIDAuthRequested as isDidAuthRequested } from './classify.js';
+/**
+ * Whether a JSON string is a recognized wallet API message: an exchange
+ * invitation, a presentation request, a presentation offer, or an issuance
+ * request. Malformed JSON is not a message.
+ *
+ * @param text {string}
+ * @returns {boolean}
+ */
+export declare function isWalletApiMessage(text: string): boolean;
+/**
+ * Classifies a parsed message object into one of the wallet API message types
+ * by its discriminating property. Returns `undefined` for an unrecognized
+ * shape.
+ *
+ * @param options {object}
+ * @param options.messageObject {object}
+ * @returns {WalletApiMessage | undefined}
+ */
+export declare function parseWalletApiMessage({ messageObject }: {
+    messageObject: object;
+}): WalletApiMessage | undefined;
+/**
+ * Extracts and parses the wallet API message carried in a deep-link URL's
+ * `request` query parameter (`dccrequest://...?request=<json>`). Returns
+ * `undefined` when the parameter is absent or its value is not valid JSON.
+ *
+ * @param options {object}
+ * @param options.url {string}
+ * @returns {Record<string, unknown> | undefined}
+ */
+export declare function parseWalletApiUrl({ url }: {
+    url: string;
+}): Record<string, unknown> | undefined;
+/**
+ * Filters an incoming VCALM query set for capability (zcap) requests, returning
+ * only those. Recognizes both the canonical `AuthorizationCapabilityQuery` and
+ * the legacy `ZcapQuery` type strings.
+ *
+ * @param options {object}
+ * @param options.queries {IVPRQuery[]}
+ * @returns {{ zcapRequests?: IZcapQuery[] }}
+ */
+export declare function zcapsRequested({ queries }: {
+    queries: IVPRQuery[];
+}): {
+    zcapRequests?: IZcapQuery[];
+};
+/**
+ * Returns true if the message is a VPR whose only query type is
+ * `DIDAuthentication` (i.e. no credential sharing is involved).
+ *
+ * @param message {WalletApiMessage}
+ * @returns {boolean}
+ */
+export declare function isDIDAuthOnlyRequest(message: WalletApiMessage): boolean;
+//# sourceMappingURL=parse.d.ts.map

package/dist/request/parse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse.d.ts","sourceRoot":"","sources":["../../src/request/parse.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;GAMG;AACH,OAAO,KAAK,EAKV,SAAS,EACT,UAAU,EACV,gBAAgB,EACjB,MAAM,YAAY,CAAA;AAInB,OAAO,EAAE,kBAAkB,IAAI,kBAAkB,EAAE,MAAM,eAAe,CAAA;AAExE;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAexD;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,EACpC,aAAa,EACd,EAAE;IACD,aAAa,EAAE,MAAM,CAAA;CACtB,GAAG,gBAAgB,GAAG,SAAS,CAe/B;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,EAChC,GAAG,EACJ,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAqBtC;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,EAAE,OAAO,EAAE,EAAE;IAAE,OAAO,EAAE,SAAS,EAAE,CAAA;CAAE,GAAG;IACrE,YAAY,CAAC,EAAE,UAAU,EAAE,CAAA;CAC5B,CASA;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAUvE"}

package/dist/request/parse.js

@@ -0,0 +1,114 @@
+// The DID-Auth query helper is spelled `isDIDAuthRequested` in `classify.ts`;
+// DCW imported it as `isDidAuthRequested`. Both names resolve to one function.
+export { isDIDAuthRequested as isDidAuthRequested } from './classify.js';
+/**
+ * Whether a JSON string is a recognized wallet API message: an exchange
+ * invitation, a presentation request, a presentation offer, or an issuance
+ * request. Malformed JSON is not a message.
+ *
+ * @param text {string}
+ * @returns {boolean}
+ */
+export function isWalletApiMessage(text) {
+    let messageObject;
+    try {
+        messageObject = JSON.parse(text);
+    }
+    catch (_) {
+        return false;
+    }
+    return (!!messageObject &&
+        typeof messageObject === 'object' &&
+        ('protocols' in messageObject ||
+            'verifiablePresentationRequest' in messageObject ||
+            'verifiablePresentation' in messageObject ||
+            'issueRequest' in messageObject));
+}
+/**
+ * Classifies a parsed message object into one of the wallet API message types
+ * by its discriminating property. Returns `undefined` for an unrecognized
+ * shape.
+ *
+ * @param options {object}
+ * @param options.messageObject {object}
+ * @returns {WalletApiMessage | undefined}
+ */
+export function parseWalletApiMessage({ messageObject }) {
+    if ('protocols' in messageObject) {
+        return messageObject;
+    }
+    if ('verifiablePresentationRequest' in messageObject) {
+        return messageObject;
+    }
+    if ('verifiablePresentation' in messageObject) {
+        return messageObject;
+    }
+    if ('issueRequest' in messageObject) {
+        return messageObject;
+    }
+    // Message not recognized / not supported, return undefined.
+    return undefined;
+}
+/**
+ * Extracts and parses the wallet API message carried in a deep-link URL's
+ * `request` query parameter (`dccrequest://...?request=<json>`). Returns
+ * `undefined` when the parameter is absent or its value is not valid JSON.
+ *
+ * @param options {object}
+ * @param options.url {string}
+ * @returns {Record<string, unknown> | undefined}
+ */
+export function parseWalletApiUrl({ url }) {
+    let messageText;
+    try {
+        messageText = new URL(url).searchParams.get('request');
+    }
+    catch {
+        return undefined;
+    }
+    if (messageText === null) {
+        // URL does not contain a "request" parameter.
+        return undefined;
+    }
+    try {
+        // `URLSearchParams.get` has already percent-decoded the value.
+        return JSON.parse(messageText);
+    }
+    catch (err) {
+        console.error(`Error parsing incoming wallet API message: "${messageText}"`, err);
+        return undefined;
+    }
+}
+/**
+ * Filters an incoming VCALM query set for capability (zcap) requests, returning
+ * only those. Recognizes both the canonical `AuthorizationCapabilityQuery` and
+ * the legacy `ZcapQuery` type strings.
+ *
+ * @param options {object}
+ * @param options.queries {IVPRQuery[]}
+ * @returns {{ zcapRequests?: IZcapQuery[] }}
+ */
+export function zcapsRequested({ queries }) {
+    const zcapRequests = queries.filter((q) => q.type === 'ZcapQuery' || q.type === 'AuthorizationCapabilityQuery');
+    if (zcapRequests.length > 0) {
+        return { zcapRequests };
+    }
+    return {};
+}
+/**
+ * Returns true if the message is a VPR whose only query type is
+ * `DIDAuthentication` (i.e. no credential sharing is involved).
+ *
+ * @param message {WalletApiMessage}
+ * @returns {boolean}
+ */
+export function isDIDAuthOnlyRequest(message) {
+    if (!('verifiablePresentationRequest' in message)) {
+        return false;
+    }
+    const { query } = message.verifiablePresentationRequest;
+    const queries = Array.isArray(query) ? query : [query];
+    return (queries.length > 0 &&
+        queries.every(q => !!q && q.type === 'DIDAuthentication'));
+}
+//# sourceMappingURL=parse.js.map

package/dist/request/parse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse.js","sourceRoot":"","sources":["../../src/request/parse.ts"],"names":[],"mappings":"AAoBA,8EAA8E;AAC9E,+EAA+E;AAC/E,OAAO,EAAE,kBAAkB,IAAI,kBAAkB,EAAE,MAAM,eAAe,CAAA;AAExE;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,aAAa,CAAA;IACjB,IAAI,CAAC;QACH,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAClC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,CACL,CAAC,CAAC,aAAa;QACf,OAAO,aAAa,KAAK,QAAQ;QACjC,CAAC,WAAW,IAAI,aAAa;YAC3B,+BAA+B,IAAI,aAAa;YAChD,wBAAwB,IAAI,aAAa;YACzC,cAAc,IAAI,aAAa,CAAC,CACnC,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CAAC,EACpC,aAAa,EAGd;IACC,IAAI,WAAW,IAAI,aAAa,EAAE,CAAC;QACjC,OAAO,aAAoC,CAAA;IAC7C,CAAC;IACD,IAAI,+BAA+B,IAAI,aAAa,EAAE,CAAC;QACrD,OAAO,aAA2B,CAAA;IACpC,CAAC;IACD,IAAI,wBAAwB,IAAI,aAAa,EAAE,CAAC;QAC9C,OAAO,aAAyB,CAAA;IAClC,CAAC;IACD,IAAI,cAAc,IAAI,aAAa,EAAE,CAAC;QACpC,OAAO,aAA8B,CAAA;IACvC,CAAC;IACD,4DAA4D;IAC5D,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAChC,GAAG,EAGJ;IACC,IAAI,WAA0B,CAAA;IAC9B,IAAI,CAAC;QACH,WAAW,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,8CAA8C;QAC9C,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,CAAC;QACH,+DAA+D;QAC/D,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAA4B,CAAA;IAC3D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CACX,+CAA+C,WAAW,GAAG,EAC7D,GAAG,CACJ,CAAA;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,EAAE,OAAO,EAA4B;IAGlE,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CACjC,CAAC,CAAC,EAAmB,EAAE,CACrB,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,8BAA8B,CACtE,CAAA;IACD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,YAAY,EAAE,CAAA;IACzB,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAyB;IAC5D,IAAI,CAAC,CAAC,+BAA+B,IAAI,OAAO,CAAC,EAAE,CAAC;QAClD,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,6BAA6B,CAAA;IACvD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IACtD,OAAO,CACL,OAAO,CAAC,MAAM,GAAG,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAC1D,CAAA;AACH,CAAC"}

package/dist/request/presentationSuite.d.ts

@@ -0,0 +1,71 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * Cryptosuite negotiation and proof-suite construction for signed Verifiable
+ * Presentations. `negotiateCryptosuite` decides which cryptosuite the wallet
+ * signs a presentation with (honoring a verifier's `acceptedCryptosuites`
+ * preference, or inferring VC 2.0 from a QueryByExample); `presentationSuiteFor`
+ * builds the matching proof suite and VC data-model version.
+ *
+ * Ported from Freewallet's `src/lib/walletRequest/presentationSuite.ts` (the
+ * superset of DCW's `app/lib/presentationSuite.ts`): it accepts both the VCALM
+ * `{ cryptosuite }` object form and the bare cryptosuite-string form verifiers
+ * send in practice, and reads `acceptedCryptosuites` from a QueryByExample's
+ * individual `credentialQuery` details as well as the query itself.
+ */
+import { DataIntegrityProof } from '@interop/data-integrity-proof';
+import type { ISigner } from '@interop/data-integrity-core';
+import type { IVPRQuery } from './types.js';
+/**
+ * VCALM cryptosuite identifier for the modern EdDSA Data Integrity proof. This
+ * is what a verifier lists in `acceptedCryptosuites` to ask for a
+ * `DataIntegrityProof` (VC 2.0) presentation instead of the legacy default.
+ *
+ * @see https://www.w3.org/TR/vc-data-integrity/
+ */
+export declare const EDDSA_RDFC_2022 = "eddsa-rdfc-2022";
+/**
+ * Decides the cryptosuite the wallet should sign a presentation with, in two
+ * tiers:
+ *
+ * 1. The explicit, spec-sanctioned signal: an `acceptedCryptosuites` preference
+ *    (allowed on DIDAuthentication and QueryByExample queries, and on a
+ *    QueryByExample's individual `credentialQuery` details). The verifier's
+ *    stated order is honored, picking the first listed suite the wallet
+ *    supports. If the verifier listed suites but none are supported, the wallet
+ *    falls back to its default rather than overriding their explicit choice with
+ *    the heuristic below.
+ * 2. A fallback heuristic when no `acceptedCryptosuites` is given: if a
+ *    QueryByExample asks for a VC 2.0 example credential, infer the verifier
+ *    wants a VC 2.0 `DataIntegrityProof` (eddsa-rdfc-2022) response.
+ *
+ * Returns `undefined` when neither tier yields a supported suite, signalling
+ * that the caller should sign with the wallet default (Ed25519Signature2020,
+ * VC 1.0).
+ *
+ * @param queries {IVPRQuery[]}
+ * @returns {string | undefined}
+ * @see https://w3c.github.io/vcalm/ -- the `acceptedCryptosuites` query field
+ */
+export declare function negotiateCryptosuite(queries: IVPRQuery[]): string | undefined;
+/**
+ * Builds the proof suite and the VC Data Model version to use for a presentation
+ * proof. The negotiated `eddsa-rdfc-2022` cryptosuite emits a
+ * `DataIntegrityProof` and requires the VC 2.0 context (which defines
+ * `challenge`/`domain` only within the `DataIntegrityProof` scope); the default
+ * `Ed25519Signature2020` suite uses the VC 1.0 context.
+ *
+ * @param options {object}
+ * @param options.signer {ISigner}
+ * @param [options.cryptosuite] {string}
+ * @returns {{ suite: DataIntegrityProof, version: number }}
+ */
+export declare function presentationSuiteFor({ signer, cryptosuite }: {
+    signer: ISigner;
+    cryptosuite?: string;
+}): {
+    suite: DataIntegrityProof;
+    version: number;
+};
+//# sourceMappingURL=presentationSuite.d.ts.map

package/dist/request/presentationSuite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"presentationSuite.d.ts","sourceRoot":"","sources":["../../src/request/presentationSuite.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAA;AAGlE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,8BAA8B,CAAA;AAE3D,OAAO,KAAK,EAAyB,SAAS,EAAE,MAAM,YAAY,CAAA;AAElE;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,oBAAoB,CAAA;AAiEhD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,MAAM,GAAG,SAAS,CAkB7E;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,EACnC,MAAM,EACN,WAAW,EACZ,EAAE;IACD,MAAM,EAAE,OAAO,CAAA;IACf,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,GAAG;IAAE,KAAK,EAAE,kBAAkB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAQjD"}

package/dist/request/presentationSuite.js

@@ -0,0 +1,139 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * Cryptosuite negotiation and proof-suite construction for signed Verifiable
+ * Presentations. `negotiateCryptosuite` decides which cryptosuite the wallet
+ * signs a presentation with (honoring a verifier's `acceptedCryptosuites`
+ * preference, or inferring VC 2.0 from a QueryByExample); `presentationSuiteFor`
+ * builds the matching proof suite and VC data-model version.
+ *
+ * Ported from Freewallet's `src/lib/walletRequest/presentationSuite.ts` (the
+ * superset of DCW's `app/lib/presentationSuite.ts`): it accepts both the VCALM
+ * `{ cryptosuite }` object form and the bare cryptosuite-string form verifiers
+ * send in practice, and reads `acceptedCryptosuites` from a QueryByExample's
+ * individual `credentialQuery` details as well as the query itself.
+ */
+import { DataIntegrityProof } from '@interop/data-integrity-proof';
+import { Ed25519Signature2020 } from '@interop/ed25519-signature';
+import { eddsaRdfc2022 } from '@interop/ed25519-signature/eddsa-rdfc-2022';
+import { credentialQueriesOf } from './classify.js';
+/**
+ * VCALM cryptosuite identifier for the modern EdDSA Data Integrity proof. This
+ * is what a verifier lists in `acceptedCryptosuites` to ask for a
+ * `DataIntegrityProof` (VC 2.0) presentation instead of the legacy default.
+ *
+ * @see https://www.w3.org/TR/vc-data-integrity/
+ */
+export const EDDSA_RDFC_2022 = 'eddsa-rdfc-2022';
+/**
+ * Cryptosuites this wallet can produce for a presentation proof when a verifier
+ * offers a choice via VCALM `acceptedCryptosuites`. `Ed25519Signature2020` is
+ * deliberately absent: it is the wallet's default, used as a fallback whenever
+ * the verifier expresses no (supported) preference, for backwards compatibility
+ * with verifiers that predate cryptosuite negotiation.
+ */
+const SUPPORTED_CRYPTOSUITES = [EDDSA_RDFC_2022];
+/** VC Data Model 2.0 context URL. */
+const CREDENTIALS_CONTEXT_V2_URL = 'https://www.w3.org/ns/credentials/v2';
+/** Returns true if a JSON-LD `@context` value contains the given URL. */
+function contextIncludes(context, url) {
+    if (typeof context === 'string') {
+        return context === url;
+    }
+    if (Array.isArray(context)) {
+        return context.includes(url);
+    }
+    return false;
+}
+/**
+ * Normalizes an `acceptedCryptosuites` list to cryptosuite name strings,
+ * accepting both the VCALM `{ cryptosuite }` object form and the bare string
+ * form verifiers send in practice.
+ *
+ * @param [accepted] {IAcceptedCryptosuites}
+ * @returns {string[]}
+ */
+function cryptosuiteNames(accepted) {
+    if (!Array.isArray(accepted)) {
+        return [];
+    }
+    return accepted
+        .map(entry => (typeof entry === 'string' ? entry : entry?.cryptosuite))
+        .filter((name) => typeof name === 'string');
+}
+/**
+ * Every cryptosuite a query offers, in the order the verifier stated them. A
+ * `QueryByExample` may carry the preference on the query itself (VCALM) or
+ * inside each of its `credentialQuery` details (what verifiers send in
+ * practice); both are collected.
+ *
+ * @param query {IVPRQuery}
+ * @returns {string[]}
+ */
+function acceptedCryptosuitesOf(query) {
+    const onQuery = 'acceptedCryptosuites' in query
+        ? cryptosuiteNames(query.acceptedCryptosuites)
+        : [];
+    if (query.type !== 'QueryByExample') {
+        return onQuery;
+    }
+    const onDetails = credentialQueriesOf(query).flatMap(({ acceptedCryptosuites }) => cryptosuiteNames(acceptedCryptosuites));
+    return [...onQuery, ...onDetails];
+}
+/**
+ * Decides the cryptosuite the wallet should sign a presentation with, in two
+ * tiers:
+ *
+ * 1. The explicit, spec-sanctioned signal: an `acceptedCryptosuites` preference
+ *    (allowed on DIDAuthentication and QueryByExample queries, and on a
+ *    QueryByExample's individual `credentialQuery` details). The verifier's
+ *    stated order is honored, picking the first listed suite the wallet
+ *    supports. If the verifier listed suites but none are supported, the wallet
+ *    falls back to its default rather than overriding their explicit choice with
+ *    the heuristic below.
+ * 2. A fallback heuristic when no `acceptedCryptosuites` is given: if a
+ *    QueryByExample asks for a VC 2.0 example credential, infer the verifier
+ *    wants a VC 2.0 `DataIntegrityProof` (eddsa-rdfc-2022) response.
+ *
+ * Returns `undefined` when neither tier yields a supported suite, signalling
+ * that the caller should sign with the wallet default (Ed25519Signature2020,
+ * VC 1.0).
+ *
+ * @param queries {IVPRQuery[]}
+ * @returns {string | undefined}
+ * @see https://w3c.github.io/vcalm/ -- the `acceptedCryptosuites` query field
+ */
+export function negotiateCryptosuite(queries) {
+    const accepted = queries.flatMap(query => acceptedCryptosuitesOf(query));
+    if (accepted.length > 0) {
+        return accepted.find(cryptosuite => SUPPORTED_CRYPTOSUITES.includes(cryptosuite));
+    }
+    // Fallback: a QueryByExample requesting a VC 2.0 example credential implies
+    // the verifier operates in the VC 2.0 data model, so respond in kind.
+    const requestsV2Example = queries.some(query => query.type === 'QueryByExample' &&
+        credentialQueriesOf(query).some(({ example }) => contextIncludes(example?.['@context'], CREDENTIALS_CONTEXT_V2_URL)));
+    return requestsV2Example ? EDDSA_RDFC_2022 : undefined;
+}
+/**
+ * Builds the proof suite and the VC Data Model version to use for a presentation
+ * proof. The negotiated `eddsa-rdfc-2022` cryptosuite emits a
+ * `DataIntegrityProof` and requires the VC 2.0 context (which defines
+ * `challenge`/`domain` only within the `DataIntegrityProof` scope); the default
+ * `Ed25519Signature2020` suite uses the VC 1.0 context.
+ *
+ * @param options {object}
+ * @param options.signer {ISigner}
+ * @param [options.cryptosuite] {string}
+ * @returns {{ suite: DataIntegrityProof, version: number }}
+ */
+export function presentationSuiteFor({ signer, cryptosuite }) {
+    if (cryptosuite === EDDSA_RDFC_2022) {
+        return {
+            suite: new DataIntegrityProof({ signer, cryptosuite: eddsaRdfc2022 }),
+            version: 2.0
+        };
+    }
+    return { suite: new Ed25519Signature2020({ signer }), version: 1.0 };
+}
+//# sourceMappingURL=presentationSuite.js.map

package/dist/request/presentationSuite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"presentationSuite.js","sourceRoot":"","sources":["../../src/request/presentationSuite.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAA;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAA;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,4CAA4C,CAAA;AAE1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AAGnD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAA;AAEhD;;;;;;GAMG;AACH,MAAM,sBAAsB,GAAG,CAAC,eAAe,CAAC,CAAA;AAEhD,qCAAqC;AACrC,MAAM,0BAA0B,GAAG,sCAAsC,CAAA;AAEzE,yEAAyE;AACzE,SAAS,eAAe,CAAC,OAAgB,EAAE,GAAW;IACpD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,OAAO,KAAK,GAAG,CAAA;IACxB,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,QAAgC;IACxD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,QAAQ;SACZ,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;SACtE,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAA;AAC/D,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,sBAAsB,CAAC,KAAgB;IAC9C,MAAM,OAAO,GACX,sBAAsB,IAAI,KAAK;QAC7B,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,oBAAoB,CAAC;QAC9C,CAAC,CAAC,EAAE,CAAA;IACR,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACpC,OAAO,OAAO,CAAA;IAChB,CAAC;IACD,MAAM,SAAS,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC,OAAO,CAClD,CAAC,EAAE,oBAAoB,EAAE,EAAE,EAAE,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,CACrE,CAAA;IACD,OAAO,CAAC,GAAG,OAAO,EAAE,GAAG,SAAS,CAAC,CAAA;AACnC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAoB;IACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAA;IACxE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CACjC,sBAAsB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAC7C,CAAA;IACH,CAAC;IAED,4EAA4E;IAC5E,sEAAsE;IACtE,MAAM,iBAAiB,GAAG,OAAO,CAAC,IAAI,CACpC,KAAK,CAAC,EAAE,CACN,KAAK,CAAC,IAAI,KAAK,gBAAgB;QAC/B,mBAAmB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAC9C,eAAe,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,0BAA0B,CAAC,CACnE,CACJ,CAAA;IACD,OAAO,iBAAiB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAA;AACxD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,oBAAoB,CAAC,EACnC,MAAM,EACN,WAAW,EAIZ;IACC,IAAI,WAAW,KAAK,eAAe,EAAE,CAAC;QACpC,OAAO;YACL,KAAK,EAAE,IAAI,kBAAkB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC;YACrE,OAAO,EAAE,GAAG;SACb,CAAA;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAA;AACtE,CAAC"}

package/dist/request/processRequest.d.ts

@@ -0,0 +1,48 @@
+import type { IVerifiableCredential, IVPRDetails, PresentationSigner, RequestProcessors, WalletResponse } from './types.js';
+/**
+ * Domain-binding check (VCALM §3.4.3 advisement): a DID-Auth `domain` MUST match
+ * the channel the request arrived on, otherwise a dishonest verifier could relay
+ * the challenge from another origin and replay the response.
+ *
+ * @param options {object}
+ * @param options.domain {string} - The `domain` from the request.
+ * @param [options.origin] {string} - The channel origin (for CHAPI,
+ *   `event.credentialRequestOrigin`).
+ * @returns {boolean}
+ */
+export declare function domainMatchesOrigin({ domain, origin }: {
+    domain: string;
+    origin?: string;
+}): boolean;
+/**
+ * Processes a Verifiable Presentation Request and composes the wallet's
+ * response. Assumes the user has already consented and (for VC sharing) picked
+ * which credentials to send.
+ *
+ * @param options {object}
+ * @param options.request {IVPRDetails} - The VPR body.
+ * @param options.presentationSigner {PresentationSigner} - Authentication signer
+ *   and holder DID.
+ * @param [options.selectedVCs] {IVerifiableCredential[]} - VCs the user chose to
+ *   share (empty for a DID-Auth-only or zcap-only response).
+ * @param [options.credentialRequestOrigin] {string} - Channel origin, used for
+ *   the domain-binding check and required by the App Connect branch.
+ * @param [options.processors] {RequestProcessors} - App-side capability /
+ *   App Connect processors.
+ * @param [options.cryptosuite] {string} - Cryptosuite override; when absent it
+ *   is negotiated from the request's `acceptedCryptosuites`.
+ * @param [options.vocabBaseIri] {string} - Vocabulary base IRI passed through to
+ *   {@link composeVp} for embedded-grant term definitions.
+ * @returns {Promise<WalletResponse>} The response VP (and any granted zcaps), or
+ *   `{}` when there is nothing to send.
+ */
+export declare function processRequest({ request, presentationSigner, selectedVCs, credentialRequestOrigin, processors, cryptosuite, vocabBaseIri }: {
+    request: IVPRDetails;
+    presentationSigner: PresentationSigner;
+    selectedVCs?: IVerifiableCredential[];
+    credentialRequestOrigin?: string;
+    processors?: RequestProcessors;
+    cryptosuite?: string;
+    vocabBaseIri?: string;
+}): Promise<WalletResponse>;
+//# sourceMappingURL=processRequest.d.ts.map

package/dist/request/processRequest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"processRequest.d.ts","sourceRoot":"","sources":["../../src/request/processRequest.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EACV,qBAAqB,EACrB,WAAW,EAEX,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACf,MAAM,YAAY,CAAA;AAkBnB;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,EAClC,MAAM,EACN,MAAM,EACP,EAAE;IACD,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB,GAAG,OAAO,CAOV;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,cAAc,CAAC,EACnC,OAAO,EACP,kBAAkB,EAClB,WAAgB,EAChB,uBAAuB,EACvB,UAAU,EACV,WAAW,EACX,YAAY,EACb,EAAE;IACD,OAAO,EAAE,WAAW,CAAA;IACpB,kBAAkB,EAAE,kBAAkB,CAAA;IACtC,WAAW,CAAC,EAAE,qBAAqB,EAAE,CAAA;IACrC,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,UAAU,CAAC,EAAE,iBAAiB,CAAA;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,GAAG,OAAO,CAAC,cAAc,CAAC,CA0E1B"}