@interop/wallet-core 0.1.1 → 0.3.0

package/dist/request/interactionUrl.d.ts

@@ -0,0 +1,53 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * VCALM `interaction:` URL handling: detecting an interaction URL, normalizing
+ * it to its inner HTTPS URL, and fetching the protocols map it advertises. An
+ * interaction URL is a level of indirection a verifier / issuer hands the wallet
+ * (over a deep link or QR code) that resolves to a `protocols` map naming the
+ * real exchange endpoints.
+ *
+ * Ported verbatim from DCW's `app/lib/interactionUrl.ts`, with the network
+ * transport injected ({@link FetchLike}, default `globalThis.fetch`).
+ */
+import type { FetchLike } from './types.js';
+/**
+ * Detects whether a URL is a VCALM interaction URL.
+ *
+ * Two formats:
+ * - `interaction:` scheme: `interaction:https://example.com/path?iuv=1`
+ * - HTTPS URL with an `iuv` query param: `https://example.com/path?iuv=1`
+ *
+ * @param url {string}
+ * @returns {boolean}
+ */
+export declare function isInteractionUrl(url: string): boolean;
+/**
+ * Normalizes any interaction URL to the inner HTTPS interaction URL. Accepts any
+ * URL that passed {@link isInteractionUrl}.
+ *
+ * - `interaction:https://...?iuv=1` strips the prefix
+ * - `interaction:https%3A%2F%2F...` strips the prefix and decodes (URL-encoded
+ *   after `interaction:` is non-standard, but handled for robustness)
+ * - `https://...?iuv=1` is returned as-is
+ *
+ * @param url {string}
+ * @returns {string}
+ */
+export declare function parseInteractionUrl(url: string): string;
+/**
+ * Fetches the interaction protocols response from a VCALM interaction URL. Sends
+ * GET with `Accept: application/json` per the VCALM spec, and returns the
+ * protocols map. Logs a warning if the `iuv` param value is not `1`; throws if
+ * the response is not ok or the `protocols` key is missing.
+ *
+ * @param interactionUrl {string}
+ * @param [options] {object}
+ * @param [options.fetch] {FetchLike}
+ * @returns {Promise<Record<string, string>>}
+ */
+export declare function fetchInteractionProtocols(interactionUrl: string, { fetch }?: {
+    fetch?: FetchLike;
+}): Promise<Record<string, string>>;
+//# sourceMappingURL=interactionUrl.d.ts.map

package/dist/request/interactionUrl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interactionUrl.d.ts","sourceRoot":"","sources":["../../src/request/interactionUrl.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAI3C;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAUrD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAWvD;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,yBAAyB,CAC7C,cAAc,EAAE,MAAM,EACtB,EAAE,KAAwB,EAAE,GAAE;IAAE,KAAK,CAAC,EAAE,SAAS,CAAA;CAAO,GACvD,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CA+BjC"}

package/dist/request/interactionUrl.js

@@ -0,0 +1,83 @@
+const INTERACTION_SCHEME_PREFIX = 'interaction:';
+/**
+ * Detects whether a URL is a VCALM interaction URL.
+ *
+ * Two formats:
+ * - `interaction:` scheme: `interaction:https://example.com/path?iuv=1`
+ * - HTTPS URL with an `iuv` query param: `https://example.com/path?iuv=1`
+ *
+ * @param url {string}
+ * @returns {boolean}
+ */
+export function isInteractionUrl(url) {
+    if (url.startsWith(INTERACTION_SCHEME_PREFIX)) {
+        return true;
+    }
+    try {
+        const parsed = new URL(url);
+        return parsed.searchParams.has('iuv');
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Normalizes any interaction URL to the inner HTTPS interaction URL. Accepts any
+ * URL that passed {@link isInteractionUrl}.
+ *
+ * - `interaction:https://...?iuv=1` strips the prefix
+ * - `interaction:https%3A%2F%2F...` strips the prefix and decodes (URL-encoded
+ *   after `interaction:` is non-standard, but handled for robustness)
+ * - `https://...?iuv=1` is returned as-is
+ *
+ * @param url {string}
+ * @returns {string}
+ */
+export function parseInteractionUrl(url) {
+    if (!url.startsWith(INTERACTION_SCHEME_PREFIX)) {
+        return url;
+    }
+    const inner = url.slice(INTERACTION_SCHEME_PREFIX.length);
+    // Non-standard: the inner URL may be URL-encoded after the `interaction:`
+    // prefix.
+    if (inner.startsWith('http%3A') || inner.startsWith('https%3A')) {
+        return decodeURIComponent(inner);
+    }
+    return inner;
+}
+/**
+ * Fetches the interaction protocols response from a VCALM interaction URL. Sends
+ * GET with `Accept: application/json` per the VCALM spec, and returns the
+ * protocols map. Logs a warning if the `iuv` param value is not `1`; throws if
+ * the response is not ok or the `protocols` key is missing.
+ *
+ * @param interactionUrl {string}
+ * @param [options] {object}
+ * @param [options.fetch] {FetchLike}
+ * @returns {Promise<Record<string, string>>}
+ */
+export async function fetchInteractionProtocols(interactionUrl, { fetch = globalThis.fetch } = {}) {
+    try {
+        const parsed = new URL(interactionUrl);
+        const iuv = parsed.searchParams.get('iuv');
+        if (iuv && iuv !== '1') {
+            console.warn(`[fetchInteractionProtocols] Unexpected iuv value "${iuv}" ` +
+                '(expected "1"). Proceeding anyway.');
+        }
+    }
+    catch {
+        throw new Error(`Invalid interaction URL: ${interactionUrl}`);
+    }
+    const response = await fetch(interactionUrl, {
+        headers: { Accept: 'application/json' }
+    });
+    if (!response.ok) {
+        throw new Error(`Interaction URL fetch failed: ${response.status} ${response.statusText}`);
+    }
+    const body = await response.json();
+    if (!body.protocols || typeof body.protocols !== 'object') {
+        throw new Error('Interaction URL response missing "protocols" map.');
+    }
+    return body.protocols;
+}
+//# sourceMappingURL=interactionUrl.js.map

package/dist/request/interactionUrl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interactionUrl.js","sourceRoot":"","sources":["../../src/request/interactionUrl.ts"],"names":[],"mappings":"AAeA,MAAM,yBAAyB,GAAG,cAAc,CAAA;AAEhD;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,IAAI,GAAG,CAAC,UAAU,CAAC,yBAAyB,CAAC,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;QAC3B,OAAO,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,yBAAyB,CAAC,EAAE,CAAC;QAC/C,OAAO,GAAG,CAAA;IACZ,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAA;IACzD,0EAA0E;IAC1E,UAAU;IACV,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAChE,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAA;IAClC,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,cAAsB,EACtB,EAAE,KAAK,GAAG,UAAU,CAAC,KAAK,KAA4B,EAAE;IAExD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAA;QACtC,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC1C,IAAI,GAAG,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YACvB,OAAO,CAAC,IAAI,CACV,qDAAqD,GAAG,IAAI;gBAC1D,oCAAoC,CACvC,CAAA;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,4BAA4B,cAAc,EAAE,CAAC,CAAA;IAC/D,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,cAAc,EAAE;QAC3C,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;KACxC,CAAC,CAAA;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,iCAAiC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAC1E,CAAA;IACH,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAElC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;IACtE,CAAC;IAED,OAAO,IAAI,CAAC,SAAS,CAAA;AACvB,CAAC"}

package/dist/request/matching.d.ts

@@ -0,0 +1,69 @@
+import type { IVerifiableCredential } from './types.js';
+import type { IQueryByExample } from './types.js';
+export { issuerId, typeArray } from '@interop/data-integrity-core/guards';
+/**
+ * Whether a credential matches a QueryByExample `example` object, by the DCW
+ * deep-matching algorithm: every key of the example is resolved as a JSONPath
+ * against the credential and compared. Array example values require the
+ * credential to contain (at least) every listed value; object example values
+ * recurse; literal example values compare by strict equality. An empty example
+ * matches any credential.
+ *
+ * @param vprExample {Record<string, unknown>} - The QueryByExample `example`.
+ * @param credential {IVerifiableCredential} - The stored credential to test.
+ * @param [credentialPath] {string} - JSONPath root into the credential
+ *   (defaults to `$`); used internally when recursing into nested objects.
+ * @returns {boolean}
+ */
+export declare function credentialMatchesVprExampleQuery(vprExample: Record<string, unknown>, credential: IVerifiableCredential, credentialPath?: string): boolean;
+/**
+ * Filters credentials to those matching a `QueryByExample`, using the deep
+ * matcher. Each of the query's `credentialQuery` details contributes its
+ * `example`; a credential is included when it matches any of them. A malformed
+ * query with no example matches nothing.
+ *
+ * @param credentials {IVerifiableCredential[]}
+ * @param query {IQueryByExample}
+ * @returns {IVerifiableCredential[]}
+ */
+export declare function filterCredentialsByExample(credentials: IVerifiableCredential[], query: IQueryByExample): IVerifiableCredential[];
+/**
+ * The credentials matching any of the given QueryByExample queries by the
+ * type-and-issuer algorithm. Only queries whose `example` carries a `type`
+ * constrain the result; a query with no example type matches nothing here (the
+ * caller keeps its list-all behavior when *no* query specifies a type).
+ *
+ * @param options {object}
+ * @param options.credentials {IVerifiableCredential[]}
+ * @param options.queries {IQueryByExample[]}
+ * @returns {IVerifiableCredential[]}
+ */
+export declare function vcMatchesFor({ credentials, queries }: {
+    credentials: IVerifiableCredential[];
+    queries: IQueryByExample[];
+}): IVerifiableCredential[];
+/**
+ * Whether any of the QueryByExample queries pins an example `type` (and so
+ * should filter the share list). When false, the caller keeps showing all
+ * stored credentials.
+ *
+ * @param queries {IQueryByExample[]}
+ * @returns {boolean}
+ */
+export declare function hasTypedExample(queries: IQueryByExample[]): boolean;
+/**
+ * Whether any typed example in the query set explicitly lists the given
+ * credential `type`. Lets the caller distinguish a request that actually asks
+ * for a particular type (e.g. a LoginCredential) from a generic, untyped "any
+ * VC" request.
+ *
+ * @param options {object}
+ * @param options.queries {IQueryByExample[]}
+ * @param options.type {string}
+ * @returns {boolean}
+ */
+export declare function requestsCredentialType({ queries, type }: {
+    queries: IQueryByExample[];
+    type: string;
+}): boolean;
+//# sourceMappingURL=matching.d.ts.map

package/dist/request/matching.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"matching.d.ts","sourceRoot":"","sources":["../../src/request/matching.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AACvD,OAAO,KAAK,EAAoB,eAAe,EAAE,MAAM,YAAY,CAAA;AAMnE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAA;AAEzE;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gCAAgC,CAC9C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACnC,UAAU,EAAE,qBAAqB,EACjC,cAAc,SAAM,GACnB,OAAO,CAoCT;AAeD;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CACxC,WAAW,EAAE,qBAAqB,EAAE,EACpC,KAAK,EAAE,eAAe,GACrB,qBAAqB,EAAE,CAgBzB;AAiCD;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,EAC3B,WAAW,EACX,OAAO,EACR,EAAE;IACD,WAAW,EAAE,qBAAqB,EAAE,CAAA;IACpC,OAAO,EAAE,eAAe,EAAE,CAAA;CAC3B,GAAG,qBAAqB,EAAE,CAQ1B;AAqBD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,OAAO,CAEnE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,EACrC,OAAO,EACP,IAAI,EACL,EAAE;IACD,OAAO,EAAE,eAAe,EAAE,CAAA;IAC1B,IAAI,EAAE,MAAM,CAAA;CACb,GAAG,OAAO,CAIV"}

package/dist/request/matching.js

@@ -0,0 +1,183 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * QueryByExample matching: which stored credentials satisfy a verifier's
+ * `QueryByExample` request. Two independent algorithms ship here because the two
+ * apps genuinely differ, and each wallet matches only its own local store (no
+ * cross-replica agreement is required):
+ *
+ * - `credentialMatchesVprExampleQuery` / `filterCredentialsByExample` -- DCW's
+ *   jsonpath-plus deep matcher, which walks the example object and matches any
+ *   nested field (arrays, nested objects, literals) against the credential.
+ * - `vcMatchesFor` / `hasTypedExample` / `requestsCredentialType` --
+ *   Freewallet's type-and-issuer matcher, which constrains only on the
+ *   example's `type` (and, when pinned, `issuer`).
+ *
+ * Both operate on plain `IVerifiableCredential`s; each app maps its own record
+ * type down to the credential before calling. Ported from DCW's
+ * `app/lib/credentialMatching.ts` and Freewallet's
+ * `src/lib/walletRequest/vcMatches.ts`.
+ */
+import { JSONPath } from 'jsonpath-plus';
+import { credentialQueriesOf } from './classify.js';
+import { issuerId, typeArray } from '@interop/data-integrity-core/guards';
+// The loose-field normalizers are owned by data-integrity-core; re-export them
+// here so a matching consumer imports one module.
+export { issuerId, typeArray } from '@interop/data-integrity-core/guards';
+/**
+ * Whether a credential matches a QueryByExample `example` object, by the DCW
+ * deep-matching algorithm: every key of the example is resolved as a JSONPath
+ * against the credential and compared. Array example values require the
+ * credential to contain (at least) every listed value; object example values
+ * recurse; literal example values compare by strict equality. An empty example
+ * matches any credential.
+ *
+ * @param vprExample {Record<string, unknown>} - The QueryByExample `example`.
+ * @param credential {IVerifiableCredential} - The stored credential to test.
+ * @param [credentialPath] {string} - JSONPath root into the credential
+ *   (defaults to `$`); used internally when recursing into nested objects.
+ * @returns {boolean}
+ */
+export function credentialMatchesVprExampleQuery(vprExample, credential, credentialPath = '$') {
+    const matches = [];
+    for (const [vprExampleKey, vprExampleValue] of Object.entries(vprExample)) {
+        const nextPath = extendPath(credentialPath, vprExampleKey);
+        // The result is always dumped into a single-element array.
+        const [credentialScope] = JSONPath({ path: nextPath, json: credential });
+        if (Array.isArray(vprExampleValue)) {
+            // Array query values require that the matching credential contains at
+            // least every value specified. This assumes each element is a literal.
+            if (!Array.isArray(credentialScope)) {
+                return false;
+            }
+            if (credentialScope.length < vprExampleValue.length) {
+                return false;
+            }
+            matches.push(vprExampleValue.every(exVal => credentialScope.includes(exVal)));
+        }
+        else if (typeof vprExampleValue === 'object' &&
+            vprExampleValue !== null) {
+            // Object query values recurse, to handle nested queries.
+            matches.push(credentialMatchesVprExampleQuery(vprExampleValue, credential, nextPath));
+        }
+        else {
+            // Literal query values compare directly.
+            matches.push(credentialScope === vprExampleValue);
+        }
+    }
+    return matches.every(m => m);
+}
+/**
+ * Extends a JSONPath by a literal key, escaping any JSONPath-reserved
+ * characters in the key (jsonpath-plus escapes a reserved char by prefixing it
+ * with a backtick).
+ */
+function extendPath(path, extension) {
+    const reserved = /[$@*()[\].:?]/g;
+    if (reserved.test(extension)) {
+        extension = extension.replace(reserved, match => '`' + match);
+    }
+    return `${path}.${extension}`;
+}
+/**
+ * Filters credentials to those matching a `QueryByExample`, using the deep
+ * matcher. Each of the query's `credentialQuery` details contributes its
+ * `example`; a credential is included when it matches any of them. A malformed
+ * query with no example matches nothing.
+ *
+ * @param credentials {IVerifiableCredential[]}
+ * @param query {IQueryByExample}
+ * @returns {IVerifiableCredential[]}
+ */
+export function filterCredentialsByExample(credentials, query) {
+    const examples = credentialQueriesOf(query)
+        .map(({ example }) => example)
+        .filter((example) => !!example);
+    if (examples.length === 0) {
+        // Malformed request: no example to match against.
+        return [];
+    }
+    return credentials.filter(credential => examples.some(example => credentialMatchesVprExampleQuery(example, credential)));
+}
+/**
+ * Whether a credential matches a single QueryByExample `example` by the
+ * type-and-issuer algorithm: every type listed in `example.type` must appear in
+ * the credential's `type`, and -- when the example pins an `issuer` -- the
+ * credential's issuer must equal it.
+ *
+ * @param options {object}
+ * @param options.credential {IVerifiableCredential}
+ * @param options.example {ICredentialQuery['example']}
+ * @returns {boolean}
+ */
+function matchesExample({ credential, example }) {
+    const wantedTypes = typeArray(example.type);
+    const credentialTypes = typeArray(credential.type);
+    const typesMatch = wantedTypes.every(type => credentialTypes.includes(type));
+    if (!typesMatch) {
+        return false;
+    }
+    const wantedIssuer = issuerId(example.issuer);
+    if (wantedIssuer) {
+        return issuerId(credential.issuer) === wantedIssuer;
+    }
+    return true;
+}
+/**
+ * The credentials matching any of the given QueryByExample queries by the
+ * type-and-issuer algorithm. Only queries whose `example` carries a `type`
+ * constrain the result; a query with no example type matches nothing here (the
+ * caller keeps its list-all behavior when *no* query specifies a type).
+ *
+ * @param options {object}
+ * @param options.credentials {IVerifiableCredential[]}
+ * @param options.queries {IQueryByExample[]}
+ * @returns {IVerifiableCredential[]}
+ */
+export function vcMatchesFor({ credentials, queries }) {
+    const examples = typedExamplesOf(queries);
+    if (examples.length === 0) {
+        return [];
+    }
+    return credentials.filter(credential => examples.some(example => matchesExample({ credential, example })));
+}
+/**
+ * The example credential shapes pinned by a query set: every `credentialQuery`
+ * detail carrying an example `type`. Only these constrain the share list.
+ *
+ * @param queries {IQueryByExample[]}
+ * @returns {Array<ICredentialQuery['example']>}
+ */
+function typedExamplesOf(queries) {
+    return queries
+        .flatMap(query => credentialQueriesOf(query))
+        .map(({ example }) => example)
+        .filter((example) => !!example && typeArray(example.type).length > 0);
+}
+/**
+ * Whether any of the QueryByExample queries pins an example `type` (and so
+ * should filter the share list). When false, the caller keeps showing all
+ * stored credentials.
+ *
+ * @param queries {IQueryByExample[]}
+ * @returns {boolean}
+ */
+export function hasTypedExample(queries) {
+    return typedExamplesOf(queries).length > 0;
+}
+/**
+ * Whether any typed example in the query set explicitly lists the given
+ * credential `type`. Lets the caller distinguish a request that actually asks
+ * for a particular type (e.g. a LoginCredential) from a generic, untyped "any
+ * VC" request.
+ *
+ * @param options {object}
+ * @param options.queries {IQueryByExample[]}
+ * @param options.type {string}
+ * @returns {boolean}
+ */
+export function requestsCredentialType({ queries, type }) {
+    return typedExamplesOf(queries).some(example => typeArray(example.type).includes(type));
+}
+//# sourceMappingURL=matching.js.map

package/dist/request/matching.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"matching.js","sourceRoot":"","sources":["../../src/request/matching.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAGxC,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AACnD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAA;AAEzE,+EAA+E;AAC/E,kDAAkD;AAClD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAA;AAEzE;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gCAAgC,CAC9C,UAAmC,EACnC,UAAiC,EACjC,cAAc,GAAG,GAAG;IAEpB,MAAM,OAAO,GAAc,EAAE,CAAA;IAC7B,KAAK,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1E,MAAM,QAAQ,GAAG,UAAU,CAAC,cAAc,EAAE,aAAa,CAAC,CAAA;QAC1D,2DAA2D;QAC3D,MAAM,CAAC,eAAe,CAAC,GAAG,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAA;QACxE,IAAI,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;YACnC,sEAAsE;YACtE,uEAAuE;YACvE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;gBACpC,OAAO,KAAK,CAAA;YACd,CAAC;YACD,IAAI,eAAe,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM,EAAE,CAAC;gBACpD,OAAO,KAAK,CAAA;YACd,CAAC;YACD,OAAO,CAAC,IAAI,CACV,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAChE,CAAA;QACH,CAAC;aAAM,IACL,OAAO,eAAe,KAAK,QAAQ;YACnC,eAAe,KAAK,IAAI,EACxB,CAAC;YACD,yDAAyD;YACzD,OAAO,CAAC,IAAI,CACV,gCAAgC,CAC9B,eAA0C,EAC1C,UAAU,EACV,QAAQ,CACT,CACF,CAAA;QACH,CAAC;aAAM,CAAC;YACN,yCAAyC;YACzC,OAAO,CAAC,IAAI,CAAC,eAAe,KAAK,eAAe,CAAC,CAAA;QACnD,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;AAC9B,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,IAAY,EAAE,SAAiB;IACjD,MAAM,QAAQ,GAAG,gBAAgB,CAAA;IACjC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,CAAA;IAC/D,CAAC;IACD,OAAO,GAAG,IAAI,IAAI,SAAS,EAAE,CAAA;AAC/B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CACxC,WAAoC,EACpC,KAAsB;IAEtB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC;SACxC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC;SAC7B,MAAM,CAAC,CAAC,OAAO,EAA0C,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IACzE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,kDAAkD;QAClD,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CACrC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CACtB,gCAAgC,CAC9B,OAAkC,EAClC,UAAU,CACX,CACF,CACF,CAAA;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,cAAc,CAAC,EACtB,UAAU,EACV,OAAO,EAIR;IACC,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3C,MAAM,eAAe,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;IAClD,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;IAC5E,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAC7C,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,YAAY,CAAA;IACrD,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY,CAAC,EAC3B,WAAW,EACX,OAAO,EAIR;IACC,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;IACzC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CACrC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CAClE,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CACtB,OAA0B;IAE1B,OAAO,OAAO;SACX,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;SAC5C,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC;SAC7B,MAAM,CACL,CAAC,OAAO,EAA0C,EAAE,CAClD,CAAC,CAAC,OAAO,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAClD,CAAA;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,OAA0B;IACxD,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;AAC5C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CAAC,EACrC,OAAO,EACP,IAAI,EAIL;IACC,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAC7C,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CACvC,CAAA;AACH,CAAC"}

package/dist/request/parse.d.ts

@@ -0,0 +1,68 @@
+/*!
+ * Copyright (c) 2026 Interop Alliance. All rights reserved.
+ */
+/**
+ * Parsing of incoming wallet/VC API messages that arrive as JSON text or a
+ * deep-link URL (`dccrequest://...?request=<json>`), plus the small
+ * query-inspection helpers a caller runs over a parsed VPR body. Ported from
+ * DCW's `app/lib/walletRequestApi.ts`; the `query-string` dependency is dropped
+ * in favor of the native `URL` / `URLSearchParams`.
+ */
+import type { IVPRQuery, IZcapQuery, WalletApiMessage } from './types.js';
+export { isDIDAuthRequested as isDidAuthRequested } from './classify.js';
+/**
+ * Whether a JSON string is a recognized wallet API message: an exchange
+ * invitation, a presentation request, a presentation offer, or an issuance
+ * request. Malformed JSON is not a message.
+ *
+ * @param text {string}
+ * @returns {boolean}
+ */
+export declare function isWalletApiMessage(text: string): boolean;
+/**
+ * Classifies a parsed message object into one of the wallet API message types
+ * by its discriminating property. Returns `undefined` for an unrecognized
+ * shape.
+ *
+ * @param options {object}
+ * @param options.messageObject {object}
+ * @returns {WalletApiMessage | undefined}
+ */
+export declare function parseWalletApiMessage({ messageObject }: {
+    messageObject: object;
+}): WalletApiMessage | undefined;
+/**
+ * Extracts and parses the wallet API message carried in a deep-link URL's
+ * `request` query parameter (`dccrequest://...?request=<json>`). Returns
+ * `undefined` when the parameter is absent or its value is not valid JSON.
+ *
+ * @param options {object}
+ * @param options.url {string}
+ * @returns {Record<string, unknown> | undefined}
+ */
+export declare function parseWalletApiUrl({ url }: {
+    url: string;
+}): Record<string, unknown> | undefined;
+/**
+ * Filters an incoming VCALM query set for capability (zcap) requests, returning
+ * only those. Recognizes both the canonical `AuthorizationCapabilityQuery` and
+ * the legacy `ZcapQuery` type strings.
+ *
+ * @param options {object}
+ * @param options.queries {IVPRQuery[]}
+ * @returns {{ zcapRequests?: IZcapQuery[] }}
+ */
+export declare function zcapsRequested({ queries }: {
+    queries: IVPRQuery[];
+}): {
+    zcapRequests?: IZcapQuery[];
+};
+/**
+ * Returns true if the message is a VPR whose only query type is
+ * `DIDAuthentication` (i.e. no credential sharing is involved).
+ *
+ * @param message {WalletApiMessage}
+ * @returns {boolean}
+ */
+export declare function isDIDAuthOnlyRequest(message: WalletApiMessage): boolean;
+//# sourceMappingURL=parse.d.ts.map

package/dist/request/parse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse.d.ts","sourceRoot":"","sources":["../../src/request/parse.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;GAMG;AACH,OAAO,KAAK,EAKV,SAAS,EACT,UAAU,EACV,gBAAgB,EACjB,MAAM,YAAY,CAAA;AAInB,OAAO,EAAE,kBAAkB,IAAI,kBAAkB,EAAE,MAAM,eAAe,CAAA;AAExE;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAexD;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,EACpC,aAAa,EACd,EAAE;IACD,aAAa,EAAE,MAAM,CAAA;CACtB,GAAG,gBAAgB,GAAG,SAAS,CAe/B;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,EAChC,GAAG,EACJ,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;CACZ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAqBtC;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,EAAE,OAAO,EAAE,EAAE;IAAE,OAAO,EAAE,SAAS,EAAE,CAAA;CAAE,GAAG;IACrE,YAAY,CAAC,EAAE,UAAU,EAAE,CAAA;CAC5B,CASA;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAUvE"}

package/dist/request/parse.js

@@ -0,0 +1,114 @@
+// The DID-Auth query helper is spelled `isDIDAuthRequested` in `classify.ts`;
+// DCW imported it as `isDidAuthRequested`. Both names resolve to one function.
+export { isDIDAuthRequested as isDidAuthRequested } from './classify.js';
+/**
+ * Whether a JSON string is a recognized wallet API message: an exchange
+ * invitation, a presentation request, a presentation offer, or an issuance
+ * request. Malformed JSON is not a message.
+ *
+ * @param text {string}
+ * @returns {boolean}
+ */
+export function isWalletApiMessage(text) {
+    let messageObject;
+    try {
+        messageObject = JSON.parse(text);
+    }
+    catch (_) {
+        return false;
+    }
+    return (!!messageObject &&
+        typeof messageObject === 'object' &&
+        ('protocols' in messageObject ||
+            'verifiablePresentationRequest' in messageObject ||
+            'verifiablePresentation' in messageObject ||
+            'issueRequest' in messageObject));
+}
+/**
+ * Classifies a parsed message object into one of the wallet API message types
+ * by its discriminating property. Returns `undefined` for an unrecognized
+ * shape.
+ *
+ * @param options {object}
+ * @param options.messageObject {object}
+ * @returns {WalletApiMessage | undefined}
+ */
+export function parseWalletApiMessage({ messageObject }) {
+    if ('protocols' in messageObject) {
+        return messageObject;
+    }
+    if ('verifiablePresentationRequest' in messageObject) {
+        return messageObject;
+    }
+    if ('verifiablePresentation' in messageObject) {
+        return messageObject;
+    }
+    if ('issueRequest' in messageObject) {
+        return messageObject;
+    }
+    // Message not recognized / not supported, return undefined.
+    return undefined;
+}
+/**
+ * Extracts and parses the wallet API message carried in a deep-link URL's
+ * `request` query parameter (`dccrequest://...?request=<json>`). Returns
+ * `undefined` when the parameter is absent or its value is not valid JSON.
+ *
+ * @param options {object}
+ * @param options.url {string}
+ * @returns {Record<string, unknown> | undefined}
+ */
+export function parseWalletApiUrl({ url }) {
+    let messageText;
+    try {
+        messageText = new URL(url).searchParams.get('request');
+    }
+    catch {
+        return undefined;
+    }
+    if (messageText === null) {
+        // URL does not contain a "request" parameter.
+        return undefined;
+    }
+    try {
+        // `URLSearchParams.get` has already percent-decoded the value.
+        return JSON.parse(messageText);
+    }
+    catch (err) {
+        console.error(`Error parsing incoming wallet API message: "${messageText}"`, err);
+        return undefined;
+    }
+}
+/**
+ * Filters an incoming VCALM query set for capability (zcap) requests, returning
+ * only those. Recognizes both the canonical `AuthorizationCapabilityQuery` and
+ * the legacy `ZcapQuery` type strings.
+ *
+ * @param options {object}
+ * @param options.queries {IVPRQuery[]}
+ * @returns {{ zcapRequests?: IZcapQuery[] }}
+ */
+export function zcapsRequested({ queries }) {
+    const zcapRequests = queries.filter((q) => q.type === 'ZcapQuery' || q.type === 'AuthorizationCapabilityQuery');
+    if (zcapRequests.length > 0) {
+        return { zcapRequests };
+    }
+    return {};
+}
+/**
+ * Returns true if the message is a VPR whose only query type is
+ * `DIDAuthentication` (i.e. no credential sharing is involved).
+ *
+ * @param message {WalletApiMessage}
+ * @returns {boolean}
+ */
+export function isDIDAuthOnlyRequest(message) {
+    if (!('verifiablePresentationRequest' in message)) {
+        return false;
+    }
+    const { query } = message.verifiablePresentationRequest;
+    const queries = Array.isArray(query) ? query : [query];
+    return (queries.length > 0 &&
+        queries.every(q => !!q && q.type === 'DIDAuthentication'));
+}
+//# sourceMappingURL=parse.js.map

package/dist/request/parse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse.js","sourceRoot":"","sources":["../../src/request/parse.ts"],"names":[],"mappings":"AAoBA,8EAA8E;AAC9E,+EAA+E;AAC/E,OAAO,EAAE,kBAAkB,IAAI,kBAAkB,EAAE,MAAM,eAAe,CAAA;AAExE;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,aAAa,CAAA;IACjB,IAAI,CAAC;QACH,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAClC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,CACL,CAAC,CAAC,aAAa;QACf,OAAO,aAAa,KAAK,QAAQ;QACjC,CAAC,WAAW,IAAI,aAAa;YAC3B,+BAA+B,IAAI,aAAa;YAChD,wBAAwB,IAAI,aAAa;YACzC,cAAc,IAAI,aAAa,CAAC,CACnC,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CAAC,EACpC,aAAa,EAGd;IACC,IAAI,WAAW,IAAI,aAAa,EAAE,CAAC;QACjC,OAAO,aAAoC,CAAA;IAC7C,CAAC;IACD,IAAI,+BAA+B,IAAI,aAAa,EAAE,CAAC;QACrD,OAAO,aAA2B,CAAA;IACpC,CAAC;IACD,IAAI,wBAAwB,IAAI,aAAa,EAAE,CAAC;QAC9C,OAAO,aAAyB,CAAA;IAClC,CAAC;IACD,IAAI,cAAc,IAAI,aAAa,EAAE,CAAC;QACpC,OAAO,aAA8B,CAAA;IACvC,CAAC;IACD,4DAA4D;IAC5D,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAChC,GAAG,EAGJ;IACC,IAAI,WAA0B,CAAA;IAC9B,IAAI,CAAC;QACH,WAAW,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,8CAA8C;QAC9C,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,CAAC;QACH,+DAA+D;QAC/D,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAA4B,CAAA;IAC3D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CACX,+CAA+C,WAAW,GAAG,EAC7D,GAAG,CACJ,CAAA;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,EAAE,OAAO,EAA4B;IAGlE,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CACjC,CAAC,CAAC,EAAmB,EAAE,CACrB,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,8BAA8B,CACtE,CAAA;IACD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,YAAY,EAAE,CAAA;IACzB,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAyB;IAC5D,IAAI,CAAC,CAAC,+BAA+B,IAAI,OAAO,CAAC,EAAE,CAAC;QAClD,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,6BAA6B,CAAA;IACvD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IACtD,OAAO,CACL,OAAO,CAAC,MAAM,GAAG,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAC1D,CAAA;AACH,CAAC"}