@interop/wallet-core 0.68.0 → 0.70.0

package/dist/request/composeVp.d.ts

@@ -1,52 +0,0 @@
-import type { IDocumentLoader } from '@interop/data-integrity-core';
-import type { IVerifiablePresentation, IVerifiableCredential, IZcap, PresentationSigner } from './types.js';
-/**
- * Shared JSON-LD document loader for presentation and credential signing: the
- * standard security contexts plus the hosted App Connect context, resolved
- * from the bundled `byoe-context` document so neither signing nor verification
- * fetches it. Exported so single-VC issuance paths reuse the same context
- * resolution the VP compose path uses.
- */
-export declare const documentLoader: IDocumentLoader;
-/**
- * Creates a Verifiable Presentation for the requester.
- *
- * @param options {object}
- * @param [options.presentationSigner] {PresentationSigner} - The authentication
- *   signer and the holder DID to name on a signed VP. Required when
- *   `didAuthRequested` is true; an unsigned (or zcap-only) VP needs none.
- * @param [options.selectedVcs] {IVerifiableCredential[]} - VCs the user chose to
- *   share (empty for a DID-Auth-only or zcap-only response).
- * @param [options.challenge] {string} - Required when DID Auth is requested.
- * @param [options.domain] {string} - Signed into the proof when present;
- *   optional per the VPR spec.
- * @param options.didAuthRequested {boolean} - Whether to sign the VP.
- * @param [options.cryptosuite] {string} - Negotiated cryptosuite; falls back to
- *   the wallet default (Ed25519Signature2020) when absent.
- * @param [options.zcaps] {IZcap[]} - Delegated capabilities to embed as the
- *   VP's `zcap` array (before signing, so a DIDAuth proof covers them).
- * @param [options.appConnect] {{ firstRun: boolean }} - App Connect response
- *   marker to embed (before signing, like the grants).
- * @param [options.documentLoader] {IDocumentLoader} - JSON-LD loader; defaults
- *   to the shared security loader.
- * @returns {Promise<IVerifiablePresentation>}
- */
-export declare function composeVp({ presentationSigner, selectedVcs, challenge, domain, didAuthRequested, cryptosuite, zcaps, appConnect, documentLoader: loader }: {
-    presentationSigner?: PresentationSigner;
-    selectedVcs?: IVerifiableCredential[];
-    challenge?: string;
-    domain?: string;
-    didAuthRequested: boolean;
-    cryptosuite?: string;
-    zcaps?: IZcap[];
-    appConnect?: {
-        firstRun: boolean;
-    };
-    documentLoader?: IDocumentLoader;
-}): Promise<IVerifiablePresentation>;
-/**
- * @deprecated Use {@link composeVp}. Retained for Freewallet, which imports the
- * `composeVP` spelling.
- */
-export declare const composeVP: typeof composeVp;
-//# sourceMappingURL=composeVp.d.ts.map

package/dist/request/composeVp.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"composeVp.d.ts","sourceRoot":"","sources":["../../src/request/composeVp.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAA;AAGnE,OAAO,KAAK,EACV,uBAAuB,EACvB,qBAAqB,EACrB,KAAK,EACL,kBAAkB,EACnB,MAAM,YAAY,CAAA;AAEnB;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,EAAE,eAMzB,CAAA;AAsFJ;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,SAAS,CAAC,EAC9B,kBAAkB,EAClB,WAAgB,EAChB,SAAS,EACT,MAAM,EACN,gBAAgB,EAChB,WAAW,EACX,KAAU,EACV,UAAU,EACV,cAAc,EAAE,MAAuB,EACxC,EAAE;IACD,kBAAkB,CAAC,EAAE,kBAAkB,CAAA;IACvC,WAAW,CAAC,EAAE,qBAAqB,EAAE,CAAA;IACrC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,gBAAgB,EAAE,OAAO,CAAA;IACzB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,KAAK,CAAC,EAAE,KAAK,EAAE,CAAA;IACf,UAAU,CAAC,EAAE;QAAE,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAA;IAClC,cAAc,CAAC,EAAE,eAAe,CAAA;CACjC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAyDnC;AAED;;;GAGG;AACH,eAAO,MAAM,SAAS,kBAAY,CAAA"}

package/dist/request/composeVp.js

@@ -1,176 +0,0 @@
-/*!
- * Copyright (c) 2026 Interop Alliance. All rights reserved.
- */
-/**
- * Composes a Verifiable Presentation to send back to a requester. The VP is
- * signed when DID Authentication was requested (proving control of the holder's
- * DID over the request's `challenge`, and `domain` when the verifier sends
- * one), and unsigned otherwise.
- *
- * Merged from DCW's `app/lib/composeVp.ts` and Freewallet's
- * `src/lib/walletRequest/composeVP.ts`. The signer and holder DID are injected
- * as a {@link PresentationSigner} -- each app resolves them from its own key
- * material -- and the optional zcap / appConnect embedding (grants ride inside
- * the VP, added before signing so a DIDAuth proof covers them) is carried over
- * from Freewallet. The DIDAuth guard follows DCW: `challenge` is required,
- * `domain` is optional (a wallet that needs the stricter "domain always
- * present" invariant enforces it in its own wrapper before calling here).
- */
-import * as vc from '@interop/vc';
-import { securityLoader } from '@interop/security-document-loader';
-import { contexts as byoeContexts, CONTEXT_URL_V1 } from 'byoe-context';
-import { presentationSuiteFor } from './presentationSuite.js';
-import { presentationVersionFor } from './classify.js';
-/**
- * Shared JSON-LD document loader for presentation and credential signing: the
- * standard security contexts plus the hosted App Connect context, resolved
- * from the bundled `byoe-context` document so neither signing nor verification
- * fetches it. Exported so single-VC issuance paths reuse the same context
- * resolution the VP compose path uses.
- */
-export const documentLoader = (() => {
-    const loader = securityLoader({ fetchRemoteContexts: true });
-    for (const [url, context] of byoeContexts) {
-        loader.addStatic(url, context);
-    }
-    return loader.build();
-})();
-/**
- * The hosted App Connect context URL appended to the VP `@context` when grants
- * or the App Connect response marker are embedded. The context document
- * defines the `zcap` (`@container: @set`) and `appConnect` (`@type: @json`)
- * terms, which is what lets JSON-LD safe-mode canonicalization include (rather
- * than reject) the members, so the authentication proof genuinely covers them.
- */
-const APP_CONNECT_CONTEXT_URL = CONTEXT_URL_V1;
-/**
- * Reads a presentation's `@context` as a mutable array of entries.
- */
-function contextEntries(presentation) {
-    const base = presentation['@context'];
-    return Array.isArray(base) ? [...base] : [base];
-}
-/**
- * Writes a presentation's `@context` from an array of entries.
- */
-function setContext(presentation, entries) {
-    ;
-    presentation['@context'] = entries;
-}
-/**
- * Appends the hosted App Connect context URL to the presentation's `@context`,
- * once: a response carrying both grants and the marker still appends a single
- * entry. Each embedded zcap additionally self-describes via its own
- * `@context`; the profile context defines only the top-level members.
- */
-function appendAppConnectContext(presentation) {
-    const entries = contextEntries(presentation);
-    if (entries.includes(APP_CONNECT_CONTEXT_URL)) {
-        return;
-    }
-    setContext(presentation, [...entries, APP_CONNECT_CONTEXT_URL]);
-}
-/**
- * Embeds the delegated capabilities on the presentation and appends the App
- * Connect context that defines the `zcap` term.
- */
-function embedZcaps(presentation, zcaps) {
-    if (zcaps.length === 0) {
-        return;
-    }
-    appendAppConnectContext(presentation);
-    presentation.zcap = zcaps;
-}
-/**
- * Embeds the App Connect response marker (the wallet-provided `firstRun`
- * signal) on the presentation and appends the App Connect context that defines
- * the `appConnect` term (a JSON literal, so its `firstRun` boolean
- * canonicalizes as one opaque value; embedding happens before signing, so the
- * DIDAuth proof covers the marker the same way it covers the grants).
- */
-function embedAppConnect(presentation, appConnect) {
-    if (!appConnect) {
-        return;
-    }
-    appendAppConnectContext(presentation);
-    presentation.appConnect = appConnect;
-}
-/**
- * Creates a Verifiable Presentation for the requester.
- *
- * @param options {object}
- * @param [options.presentationSigner] {PresentationSigner} - The authentication
- *   signer and the holder DID to name on a signed VP. Required when
- *   `didAuthRequested` is true; an unsigned (or zcap-only) VP needs none.
- * @param [options.selectedVcs] {IVerifiableCredential[]} - VCs the user chose to
- *   share (empty for a DID-Auth-only or zcap-only response).
- * @param [options.challenge] {string} - Required when DID Auth is requested.
- * @param [options.domain] {string} - Signed into the proof when present;
- *   optional per the VPR spec.
- * @param options.didAuthRequested {boolean} - Whether to sign the VP.
- * @param [options.cryptosuite] {string} - Negotiated cryptosuite; falls back to
- *   the wallet default (Ed25519Signature2020) when absent.
- * @param [options.zcaps] {IZcap[]} - Delegated capabilities to embed as the
- *   VP's `zcap` array (before signing, so a DIDAuth proof covers them).
- * @param [options.appConnect] {{ firstRun: boolean }} - App Connect response
- *   marker to embed (before signing, like the grants).
- * @param [options.documentLoader] {IDocumentLoader} - JSON-LD loader; defaults
- *   to the shared security loader.
- * @returns {Promise<IVerifiablePresentation>}
- */
-export async function composeVp({ presentationSigner, selectedVcs = [], challenge, domain, didAuthRequested, cryptosuite, zcaps = [], appConnect, documentLoader: loader = documentLoader }) {
-    if (!didAuthRequested && selectedVcs.length === 0 && zcaps.length === 0) {
-        throw new Error('A VP requires credentials, capabilities, or a DID Auth request.');
-    }
-    if (didAuthRequested && !challenge) {
-        throw new Error('A "challenge" is required for DID Auth.');
-    }
-    if (!didAuthRequested) {
-        // Return an unsigned VP. verify: false skips per-VC validation (including
-        // expiration checks). A zcap-only response rides here: the grants are
-        // individually signed and controller-bound, so they need no VP proof.
-        // With no cryptosuite to dictate it, the data model version follows the
-        // credentials being shared (a zcap-only response lands on 1.0).
-        const presentation = vc.createPresentation({
-            verifiableCredential: selectedVcs.length > 0 ? selectedVcs : undefined,
-            verify: false,
-            version: presentationVersionFor(selectedVcs)
-        });
-        embedZcaps(presentation, zcaps);
-        embedAppConnect(presentation, appConnect);
-        return presentation;
-    }
-    if (!presentationSigner) {
-        throw new Error('A "presentationSigner" is required for DID Auth.');
-    }
-    const { signer, holder } = presentationSigner;
-    // Sign with the cryptosuite the verifier requested (via VCALM
-    // `acceptedCryptosuites`), falling back to the wallet default. The suite
-    // dictates the VC data model version: eddsa-rdfc-2022 proofs require VC 2.0,
-    // the default Ed25519Signature2020 proof uses VC 1.0.
-    const { suite, version } = presentationSuiteFor({ signer, cryptosuite });
-    const presentation = vc.createPresentation({
-        holder,
-        verifiableCredential: selectedVcs.length > 0 ? selectedVcs : undefined,
-        verify: false,
-        version
-    });
-    // Embed the grants (and any App Connect marker) before signing so the
-    // authentication proof covers them; the grants additionally self-authenticate
-    // via their own delegation proofs and carry their own `@context`.
-    embedZcaps(presentation, zcaps);
-    embedAppConnect(presentation, appConnect);
-    return (await vc.signPresentation({
-        presentation,
-        challenge,
-        ...(domain !== undefined && { domain }),
-        documentLoader: loader,
-        suite
-    }));
-}
-/**
- * @deprecated Use {@link composeVp}. Retained for Freewallet, which imports the
- * `composeVP` spelling.
- */
-export const composeVP = composeVp;
-//# sourceMappingURL=composeVp.js.map

package/dist/request/composeVp.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"composeVp.js","sourceRoot":"","sources":["../../src/request/composeVp.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,EAAE,MAAM,aAAa,CAAA;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAA;AAClE,OAAO,EAAE,QAAQ,IAAI,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAEvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAA;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AAQtD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAoB,CAAC,GAAG,EAAE;IACnD,MAAM,MAAM,GAAG,cAAc,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAA;IAC5D,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,YAAY,EAAE,CAAC;QAC1C,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IAChC,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,EAAE,CAAA;AACvB,CAAC,CAAC,EAAE,CAAA;AAEJ;;;;;;GAMG;AACH,MAAM,uBAAuB,GAAG,cAAc,CAAA;AAa9C;;GAEG;AACH,SAAS,cAAc,CACrB,YAAmC;IAEnC,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,CAAoC,CAAA;IACxE,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;AACjD,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CACjB,YAAmC,EACnC,OAA+B;IAE/B,CAAC;IAAC,YAAwC,CAAC,UAAU,CAAC,GAAG,OAAO,CAAA;AAClE,CAAC;AAED;;;;;GAKG;AACH,SAAS,uBAAuB,CAAC,YAAmC;IAClE,MAAM,OAAO,GAAG,cAAc,CAAC,YAAY,CAAC,CAAA;IAC5C,IAAI,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAC9C,OAAM;IACR,CAAC;IACD,UAAU,CAAC,YAAY,EAAE,CAAC,GAAG,OAAO,EAAE,uBAAuB,CAAC,CAAC,CAAA;AACjE,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,YAAmC,EAAE,KAAc;IACrE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAM;IACR,CAAC;IACD,uBAAuB,CAAC,YAAY,CAAC,CAAA;IACrC,YAAY,CAAC,IAAI,GAAG,KAAK,CAAA;AAC3B,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CACtB,YAAmC,EACnC,UAA6C;IAE7C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAM;IACR,CAAC;IACD,uBAAuB,CAAC,YAAY,CAAC,CAAA;IACrC,YAAY,CAAC,UAAU,GAAG,UAAU,CAAA;AACtC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,EAC9B,kBAAkB,EAClB,WAAW,GAAG,EAAE,EAChB,SAAS,EACT,MAAM,EACN,gBAAgB,EAChB,WAAW,EACX,KAAK,GAAG,EAAE,EACV,UAAU,EACV,cAAc,EAAE,MAAM,GAAG,cAAc,EAWxC;IACC,IAAI,CAAC,gBAAgB,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAA;IACH,CAAC;IACD,IAAI,gBAAgB,IAAI,CAAC,SAAS,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAC5D,CAAC;IAED,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,0EAA0E;QAC1E,sEAAsE;QACtE,sEAAsE;QACtE,wEAAwE;QACxE,gEAAgE;QAChE,MAAM,YAAY,GAAG,EAAE,CAAC,kBAAkB,CAAC;YACzC,oBAAoB,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;YACtE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,sBAAsB,CAAC,WAAW,CAAC;SAC7C,CAA0B,CAAA;QAC3B,UAAU,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;QAC/B,eAAe,CAAC,YAAY,EAAE,UAAU,CAAC,CAAA;QACzC,OAAO,YAAY,CAAA;IACrB,CAAC;IAED,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;IACrE,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,kBAAkB,CAAA;IAE7C,8DAA8D;IAC9D,yEAAyE;IACzE,6EAA6E;IAC7E,sDAAsD;IACtD,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,oBAAoB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;IAExE,MAAM,YAAY,GAAG,EAAE,CAAC,kBAAkB,CAAC;QACzC,MAAM;QACN,oBAAoB,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;QACtE,MAAM,EAAE,KAAK;QACb,OAAO;KACR,CAA0B,CAAA;IAE3B,sEAAsE;IACtE,8EAA8E;IAC9E,kEAAkE;IAClE,UAAU,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;IAC/B,eAAe,CAAC,YAAY,EAAE,UAAU,CAAC,CAAA;IAEzC,OAAO,CAAC,MAAM,EAAE,CAAC,gBAAgB,CAAC;QAChC,YAAY;QACZ,SAAS;QACT,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC;QACvC,cAAc,EAAE,MAAM;QACtB,KAAK;KACN,CAAC,CAA4B,CAAA;AAChC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,SAAS,CAAA"}

package/dist/request/ephemeralExchange.d.ts

@@ -1,100 +0,0 @@
-import type { FetchLike } from './types.js';
-/**
- * How often the requester polls the exchange for the wallet's response.
- */
-export declare const EPHEMERAL_EXCHANGE_POLL_INTERVAL_MS = 3000;
-/**
- * How long the server keeps an ephemeral exchange. A poll past it can only
- * ever find the exchange gone, so a caller with no other bound (a CLI) passes
- * this as its `timeoutMs`; a UI offering the exchange for a shorter window
- * (an invite countdown) picks its own.
- */
-export declare const EPHEMERAL_EXCHANGE_TTL_MS: number;
-/**
- * The exchange path the interaction URL adds, with the interaction-URL
- * version query the answering wallet's scanner expects.
- */
-export declare const EPHEMERAL_EXCHANGE_INTERACTION_PATH = "/protocols?iuv=1";
-/**
- * Raised when the exchange is no longer on the server (a `404`): it either
- * expired or was never created. The remedy is a fresh exchange, so a caller
- * renders its "expired" state. Dispatch on `err.name` rather than
- * `instanceof`: the transport is injected and may resolve to a different copy
- * of this package, which makes the name the stable contract.
- *
- * Also what the answering side raises on a 404: `fetchInteractionProtocols`
- * (`interactionUrl.ts`), the exchange client's `postToExchange`-based helpers
- * (`exchangeClient.ts`), and `openInteractionRequest`
- * (`interactionRequest.ts`), which composes both.
- */
-export declare class EphemeralExchangeGoneError extends Error {
-    constructor(message?: string);
-}
-/**
- * Raised when the poll's own `timeoutMs` elapses before the exchange
- * completes. Distinct from {@link EphemeralExchangeGoneError}: the exchange
- * may still be on the server and approvable, the requester just stopped
- * waiting. Dispatch on `err.name`, for the same reason as the gone error.
- */
-export declare class EphemeralExchangeTimeoutError extends Error {
-    constructor(message?: string);
-}
-/**
- * REQUESTER: creates an ephemeral exchange holding the request as its stored
- * request, and returns both the exchange URL (the requester polls it) and the
- * interaction URL (what the QR code or printed link carries).
- *
- * The server relays the stored request verbatim as its reply to the begin
- * POST, so the VPR details are stored wrapped as a VC-API exchange response
- * (`{ verifiablePresentationRequest: request }`) -- the shape the answering
- * wallet's classifier reads.
- *
- * The exchange URL is read from the `Location` response header, falling back
- * to the body's `location` member -- deployments differ on which they set,
- * and either alone is enough.
- *
- * @param options {object}
- * @param options.serverUrl {string}   the WAS server base URL
- * @param options.request {unknown}   the VPR details to store
- * @param [options.fetch] {FetchLike}
- * @returns {Promise<{ exchangeUrl: string, interactionUrl: string }>}
- */
-export declare function createEphemeralExchange({ serverUrl, request, fetch: fetchImpl }: {
-    serverUrl: string;
-    request: unknown;
-    fetch?: FetchLike;
-}): Promise<{
-    exchangeUrl: string;
-    interactionUrl: string;
-}>;
-/**
- * REQUESTER: polls the exchange until the wallet posts its response, and
- * resolves with that response body verbatim (the caller interprets it: an
- * onboarding invite through `parseOnboardingResponse`, a capability request
- * by reading the presentation's `zcap` member).
- *
- * A `404` means the exchange expired or was never there, and rejects with
- * {@link EphemeralExchangeGoneError}. Every other failure -- a network error,
- * another non-ok status, an unparseable body -- is transient and simply
- * retried on the next tick. Two bounds end the wait early: the caller's
- * `signal` rejects promptly with its own reason, and `timeoutMs` (measured
- * from the call) rejects with {@link EphemeralExchangeTimeoutError}; either
- * cancels an in-flight request. Without both, the poll runs until the
- * exchange completes or disappears.
- *
- * @param options {object}
- * @param options.exchangeUrl {string}
- * @param [options.signal] {AbortSignal}
- * @param [options.timeoutMs] {number}   the poll's own deadline
- * @param [options.intervalMs] {number}
- * @param [options.fetch] {FetchLike}
- * @returns {Promise<unknown>}   the completed exchange's `response` member
- */
-export declare function pollEphemeralExchange({ exchangeUrl, signal, timeoutMs, intervalMs, fetch: fetchImpl }: {
-    exchangeUrl: string;
-    signal?: AbortSignal;
-    timeoutMs?: number;
-    intervalMs?: number;
-    fetch?: FetchLike;
-}): Promise<unknown>;
-//# sourceMappingURL=ephemeralExchange.d.ts.map

package/dist/request/ephemeralExchange.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ephemeralExchange.d.ts","sourceRoot":"","sources":["../../src/request/ephemeralExchange.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAE3C;;GAEG;AACH,eAAO,MAAM,mCAAmC,OAAO,CAAA;AAEvD;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,QAAiB,CAAA;AAEvD;;;GAGG;AACH,eAAO,MAAM,mCAAmC,qBAAqB,CAAA;AAErE;;;;;;;;;;;GAWG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;gBACvC,OAAO,SAAmD;CAIvE;AAED;;;;;GAKG;AACH,qBAAa,6BAA8B,SAAQ,KAAK;gBAEpD,OAAO,SAA8D;CAKxE;AAcD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,uBAAuB,CAAC,EAC5C,SAAS,EACT,OAAO,EACP,KAAK,EAAE,SAA4B,EACpC,EAAE;IACD,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,SAAS,CAAA;CAClB,GAAG,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,CAAC,CA8B3D;AAmCD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,qBAAqB,CAAC,EAC1C,WAAW,EACX,MAAM,EACN,SAAS,EACT,UAAgD,EAChD,KAAK,EAAE,SAA4B,EACpC,EAAE;IACD,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,SAAS,CAAA;CAClB,GAAG,OAAO,CAAC,OAAO,CAAC,CAyDnB"}

package/dist/request/ephemeralExchange.js

@@ -1,230 +0,0 @@
-/*!
- * Copyright (c) 2026 Interop Alliance. All rights reserved.
- */
-/**
- * The requester's half of an ephemeral exchange on a WAS server: creating an
- * exchange that carries a Verifiable Presentation Request as its stored
- * request, and polling that exchange until the answering wallet posts its
- * response. Generic over what the request asks for -- a wallet's onboarding
- * invite stores a `WalletOnboardingQuery` (`onboarding.ts`), a CLI asking for
- * capabilities stores a zcap-only request (`capabilityRequest.ts`). Pure
- * logic: no UI framework, no DOM, and no module-level mutable state; every
- * run is per-instance, cancelled through the caller's `AbortSignal` or the
- * poll's own deadline, with the network transport injected.
- *
- * These routes are deliberately unauthenticated (a capability-URL access model:
- * the exchange URL is the secret, and it travels point-to-point, as a QR code
- * or a printed link), so nothing here signs a request.
- */
-import { log } from '../log.js';
-/**
- * How often the requester polls the exchange for the wallet's response.
- */
-export const EPHEMERAL_EXCHANGE_POLL_INTERVAL_MS = 3000;
-/**
- * How long the server keeps an ephemeral exchange. A poll past it can only
- * ever find the exchange gone, so a caller with no other bound (a CLI) passes
- * this as its `timeoutMs`; a UI offering the exchange for a shorter window
- * (an invite countdown) picks its own.
- */
-export const EPHEMERAL_EXCHANGE_TTL_MS = 10 * 60 * 1000;
-/**
- * The exchange path the interaction URL adds, with the interaction-URL
- * version query the answering wallet's scanner expects.
- */
-export const EPHEMERAL_EXCHANGE_INTERACTION_PATH = '/protocols?iuv=1';
-/**
- * Raised when the exchange is no longer on the server (a `404`): it either
- * expired or was never created. The remedy is a fresh exchange, so a caller
- * renders its "expired" state. Dispatch on `err.name` rather than
- * `instanceof`: the transport is injected and may resolve to a different copy
- * of this package, which makes the name the stable contract.
- *
- * Also what the answering side raises on a 404: `fetchInteractionProtocols`
- * (`interactionUrl.ts`), the exchange client's `postToExchange`-based helpers
- * (`exchangeClient.ts`), and `openInteractionRequest`
- * (`interactionRequest.ts`), which composes both.
- */
-export class EphemeralExchangeGoneError extends Error {
-    constructor(message = 'The ephemeral exchange is no longer available.') {
-        super(message);
-        this.name = 'EphemeralExchangeGoneError';
-    }
-}
-/**
- * Raised when the poll's own `timeoutMs` elapses before the exchange
- * completes. Distinct from {@link EphemeralExchangeGoneError}: the exchange
- * may still be on the server and approvable, the requester just stopped
- * waiting. Dispatch on `err.name`, for the same reason as the gone error.
- */
-export class EphemeralExchangeTimeoutError extends Error {
-    constructor(message = 'Timed out waiting for the ephemeral exchange to complete.') {
-        super(message);
-        this.name = 'EphemeralExchangeTimeoutError';
-    }
-}
-/**
- * Strips a trailing slash from a configured base URL, so joining a path onto
- * it cannot produce a doubled separator.
- *
- * @param options {object}
- * @param options.serverUrl {string}
- * @returns {string}
- */
-function normalizedServerUrl({ serverUrl }) {
-    return serverUrl.replace(/\/+$/, '');
-}
-/**
- * REQUESTER: creates an ephemeral exchange holding the request as its stored
- * request, and returns both the exchange URL (the requester polls it) and the
- * interaction URL (what the QR code or printed link carries).
- *
- * The server relays the stored request verbatim as its reply to the begin
- * POST, so the VPR details are stored wrapped as a VC-API exchange response
- * (`{ verifiablePresentationRequest: request }`) -- the shape the answering
- * wallet's classifier reads.
- *
- * The exchange URL is read from the `Location` response header, falling back
- * to the body's `location` member -- deployments differ on which they set,
- * and either alone is enough.
- *
- * @param options {object}
- * @param options.serverUrl {string}   the WAS server base URL
- * @param options.request {unknown}   the VPR details to store
- * @param [options.fetch] {FetchLike}
- * @returns {Promise<{ exchangeUrl: string, interactionUrl: string }>}
- */
-export async function createEphemeralExchange({ serverUrl, request, fetch: fetchImpl = globalThis.fetch }) {
-    const url = `${normalizedServerUrl({ serverUrl })}/workflows/ephemeral/exchanges`;
-    const response = await fetchImpl(url, {
-        method: 'POST',
-        headers: { 'content-type': 'application/json' },
-        body: JSON.stringify({
-            request: { verifiablePresentationRequest: request }
-        })
-    });
-    if (!response.ok) {
-        throw new Error(`Could not create the ephemeral exchange (HTTP ${response.status}).`);
-    }
-    let exchangeUrl = response.headers?.get('location') ?? '';
-    if (!exchangeUrl) {
-        try {
-            const body = (await response.json());
-            exchangeUrl = body?.location ?? '';
-        }
-        catch (err) {
-            log.warn('Could not parse the created exchange body', { err });
-        }
-    }
-    if (!exchangeUrl) {
-        throw new Error('The created ephemeral exchange has no location.');
-    }
-    return {
-        exchangeUrl,
-        interactionUrl: `${exchangeUrl}${EPHEMERAL_EXCHANGE_INTERACTION_PATH}`
-    };
-}
-/**
- * Sleeps for `delayMs`, rejecting promptly with the signal's reason if the
- * signal aborts first. The timer is always cleared.
- *
- * @param options {object}
- * @param options.delayMs {number}
- * @param options.signal {AbortSignal}
- * @returns {Promise<void>}
- */
-function abortableDelay({ delayMs, signal }) {
-    return new Promise((resolve, reject) => {
-        if (signal.aborted) {
-            reject(signal.reason);
-            return;
-        }
-        const timer = setTimeout(() => {
-            signal.removeEventListener('abort', onAbort);
-            resolve();
-        }, delayMs);
-        function onAbort() {
-            clearTimeout(timer);
-            reject(signal.reason);
-        }
-        signal.addEventListener('abort', onAbort, { once: true });
-    });
-}
-/**
- * REQUESTER: polls the exchange until the wallet posts its response, and
- * resolves with that response body verbatim (the caller interprets it: an
- * onboarding invite through `parseOnboardingResponse`, a capability request
- * by reading the presentation's `zcap` member).
- *
- * A `404` means the exchange expired or was never there, and rejects with
- * {@link EphemeralExchangeGoneError}. Every other failure -- a network error,
- * another non-ok status, an unparseable body -- is transient and simply
- * retried on the next tick. Two bounds end the wait early: the caller's
- * `signal` rejects promptly with its own reason, and `timeoutMs` (measured
- * from the call) rejects with {@link EphemeralExchangeTimeoutError}; either
- * cancels an in-flight request. Without both, the poll runs until the
- * exchange completes or disappears.
- *
- * @param options {object}
- * @param options.exchangeUrl {string}
- * @param [options.signal] {AbortSignal}
- * @param [options.timeoutMs] {number}   the poll's own deadline
- * @param [options.intervalMs] {number}
- * @param [options.fetch] {FetchLike}
- * @returns {Promise<unknown>}   the completed exchange's `response` member
- */
-export async function pollEphemeralExchange({ exchangeUrl, signal, timeoutMs, intervalMs = EPHEMERAL_EXCHANGE_POLL_INTERVAL_MS, fetch: fetchImpl = globalThis.fetch }) {
-    // One internal signal folds the caller's abort and the deadline together,
-    // so a single `signal` reaches fetch and the delay. The caller's reason is
-    // forwarded verbatim; the deadline aborts with the timeout error.
-    const controller = new AbortController();
-    const onCallerAbort = () => controller.abort(signal?.reason);
-    if (signal?.aborted) {
-        onCallerAbort();
-    }
-    else {
-        signal?.addEventListener('abort', onCallerAbort, { once: true });
-    }
-    const deadline = timeoutMs === undefined
-        ? undefined
-        : setTimeout(() => controller.abort(new EphemeralExchangeTimeoutError()), timeoutMs);
-    try {
-        for (;;) {
-            if (controller.signal.aborted) {
-                throw controller.signal.reason;
-            }
-            try {
-                const response = await fetchImpl(exchangeUrl, {
-                    signal: controller.signal
-                });
-                if (response.status === 404) {
-                    throw new EphemeralExchangeGoneError();
-                }
-                if (response.ok) {
-                    const body = (await response.json());
-                    if (body?.state === 'complete') {
-                        return body.response;
-                    }
-                }
-            }
-            catch (err) {
-                if (controller.signal.aborted) {
-                    throw controller.signal.reason;
-                }
-                if (err?.name === 'EphemeralExchangeGoneError') {
-                    throw err;
-                }
-                // Anything else is transient -- keep polling.
-                log.warn('Polling the ephemeral exchange failed; retrying', { err });
-            }
-            await abortableDelay({ delayMs: intervalMs, signal: controller.signal });
-        }
-    }
-    finally {
-        signal?.removeEventListener('abort', onCallerAbort);
-        if (deadline !== undefined) {
-            clearTimeout(deadline);
-        }
-    }
-}
-//# sourceMappingURL=ephemeralExchange.js.map

package/dist/request/ephemeralExchange.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ephemeralExchange.js","sourceRoot":"","sources":["../../src/request/ephemeralExchange.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAG/B;;GAEG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,IAAI,CAAA;AAEvD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAEvD;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,kBAAkB,CAAA;AAErE;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IACnD,YAAY,OAAO,GAAG,gDAAgD;QACpE,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAA;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IACtD,YACE,OAAO,GAAG,2DAA2D;QAErE,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAA;IAC7C,CAAC;CACF;AAED;;;;;;;GAOG;AACH,SAAS,mBAAmB,CAAC,EAAE,SAAS,EAAyB;IAC/D,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;AACtC,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,EAC5C,SAAS,EACT,OAAO,EACP,KAAK,EAAE,SAAS,GAAG,UAAU,CAAC,KAAK,EAKpC;IACC,MAAM,GAAG,GAAG,GAAG,mBAAmB,CAAC,EAAE,SAAS,EAAE,CAAC,gCAAgC,CAAA;IACjF,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;QACpC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,OAAO,EAAE,EAAE,6BAA6B,EAAE,OAAO,EAAE;SACpD,CAAC;KACH,CAAC,CAAA;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,iDAAiD,QAAQ,CAAC,MAAM,IAAI,CACrE,CAAA;IACH,CAAC;IACD,IAAI,WAAW,GAAG,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAA;IACzD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA0B,CAAA;YAC7D,WAAW,GAAG,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAA;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,2CAA2C,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;QAChE,CAAC;IACH,CAAC;IACD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;IACpE,CAAC;IACD,OAAO;QACL,WAAW;QACX,cAAc,EAAE,GAAG,WAAW,GAAG,mCAAmC,EAAE;KACvE,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,cAAc,CAAC,EACtB,OAAO,EACP,MAAM,EAIP;IACC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YACrB,OAAM;QACR,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC5C,OAAO,EAAE,CAAA;QACX,CAAC,EAAE,OAAO,CAAC,CAAA;QACX,SAAS,OAAO;YACd,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACvB,CAAC;QACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3D,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,EAC1C,WAAW,EACX,MAAM,EACN,SAAS,EACT,UAAU,GAAG,mCAAmC,EAChD,KAAK,EAAE,SAAS,GAAG,UAAU,CAAC,KAAK,EAOpC;IACC,0EAA0E;IAC1E,2EAA2E;IAC3E,kEAAkE;IAClE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5D,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;QACpB,aAAa,EAAE,CAAA;IACjB,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IAClE,CAAC;IACD,MAAM,QAAQ,GACZ,SAAS,KAAK,SAAS;QACrB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,UAAU,CACR,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,6BAA6B,EAAE,CAAC,EAC3D,SAAS,CACV,CAAA;IACP,IAAI,CAAC;QACH,SAAS,CAAC;YACR,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC9B,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAA;YAChC,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,WAAW,EAAE;oBAC5C,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAA;gBACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5B,MAAM,IAAI,0BAA0B,EAAE,CAAA;gBACxC,CAAC;gBACD,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;oBAChB,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAGlC,CAAA;oBACD,IAAI,IAAI,EAAE,KAAK,KAAK,UAAU,EAAE,CAAC;wBAC/B,OAAO,IAAI,CAAC,QAAQ,CAAA;oBACtB,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAC9B,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAA;gBAChC,CAAC;gBACD,IAAK,GAAa,EAAE,IAAI,KAAK,4BAA4B,EAAE,CAAC;oBAC1D,MAAM,GAAG,CAAA;gBACX,CAAC;gBACD,8CAA8C;gBAC9C,GAAG,CAAC,IAAI,CAAC,iDAAiD,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACtE,CAAC;YACD,MAAM,cAAc,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAA;QAC1E,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAA;QACnD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,YAAY,CAAC,QAAQ,CAAC,CAAA;QACxB,CAAC;IACH,CAAC;AACH,CAAC"}