@interop/wallet-core 0.69.0 → 0.71.0

package/dist/request/exchangeClient.d.ts

@@ -1,142 +0,0 @@
-import type { CHAPIProtocols, FetchLike, IVerifiablePresentation, IVPRDetails, IZcap, VCAPIExchangeResponse } from './types.js';
-/**
- * The exchange URL a CHAPI request defers to, if any. Present when the verifier
- * or issuer chose an exchange-based protocol, in which case the request's VPR
- * (or store) body is empty and everything of substance lives behind this URL.
- *
- * Two protocol handles carry such a URL: the classic `vcapi` key, and the
- * `interact` key of the newer `chapi.interact()` API (a "meta" protocol whose
- * URL is opaque -- the underlying exchange is negotiated behind it, exactly as
- * with `vcapi`). Both are plain HTTP exchange endpoints the wallet POSTs to, so
- * they are handled identically here; `interact` is preferred when a request
- * carries both.
- *
- * @param options {object}
- * @param [options.protocols] {CHAPIProtocols}
- * @returns {string | undefined}
- */
-export declare function vcApiExchangeUrl({ protocols }: {
-    protocols?: CHAPIProtocols;
-}): string | undefined;
-/**
- * Opens the exchange and retrieves the Verifiable Presentation Request the
- * verifier is actually asking for. The wallet begins an exchange by POSTing an
- * empty body; the reply carries the VPR.
- *
- * @param options {object}
- * @param options.exchangeUrl {string}
- * @param [options.fetch] {FetchLike}
- * @returns {Promise<IVPRDetails>}
- */
-export declare function startExchange({ exchangeUrl, fetch }: {
-    exchangeUrl: string;
-    fetch?: FetchLike;
-}): Promise<IVPRDetails>;
-/**
- * Opens an exchange: the wallet's first message is always an empty JSON body,
- * whether the exchange goes on to request a presentation (a verifier) or to
- * offer one (an issuer).
- *
- * @param options {object}
- * @param options.exchangeUrl {string}
- * @param [options.fetch] {FetchLike}
- * @returns {Promise<VCAPIExchangeResponse>}
- */
-export declare function beginExchange({ exchangeUrl, fetch }: {
-    exchangeUrl: string;
-    fetch?: FetchLike;
-}): Promise<VCAPIExchangeResponse>;
-/**
- * Delivers the wallet's composed presentation to a verifier's exchange and
- * confirms the exchange finished. The exchange, not the CHAPI channel, is the
- * verifier's system of record, so an unfinished (multi-step) reply is a failed
- * delivery.
- *
- * @param options {object}
- * @param options.request {IVPRDetails} - The VPR the exchange handed back.
- * @param options.exchangeUrl {string}
- * @param options.verifiablePresentation {IVerifiablePresentation}
- * @param [options.fetch] {FetchLike}
- * @returns {Promise<void>}
- */
-export declare function deliverPresentation({ request, exchangeUrl, verifiablePresentation, fetch }: {
-    request: IVPRDetails;
-    exchangeUrl: string;
-    verifiablePresentation: IVerifiablePresentation;
-    fetch?: FetchLike;
-}): Promise<void>;
-/**
- * Answers an issuance exchange's holder-binding step: POSTs the wallet's
- * DID-Auth presentation and collects the credentials the issuer hands back in
- * return. A reply carrying yet another `verifiablePresentationRequest` means a
- * further round this wallet does not answer.
- *
- * @param options {object}
- * @param options.request {IVPRDetails} - The VPR the exchange opened with.
- * @param options.exchangeUrl {string}
- * @param options.verifiablePresentation {IVerifiablePresentation} - The signed
- *   DID-Auth presentation proving control of the holder DID.
- * @param [options.fetch] {FetchLike}
- * @returns {Promise<IVerifiablePresentation>} The offered presentation.
- */
-export declare function collectIssuedPresentation({ request, exchangeUrl, verifiablePresentation, fetch }: {
-    request: IVPRDetails;
-    exchangeUrl: string;
-    verifiablePresentation: IVerifiablePresentation;
-    fetch?: FetchLike;
-}): Promise<IVerifiablePresentation>;
-/**
- * Where to POST the composed presentation: the VPR's unmediated HTTP
- * presentation service, when it names one, else the exchange URL itself (which
- * every exchange accepts, and which is all vcplayground.org's VPR offers).
- *
- * @param options {object}
- * @param options.request {IVPRDetails}
- * @param options.exchangeUrl {string}
- * @returns {string}
- */
-export declare function presentationEndpointFor({ request, exchangeUrl }: {
-    request: IVPRDetails;
-    exchangeUrl: string;
-}): string;
-/**
- * Delivers the wallet's composed presentation to the exchange and returns the
- * raw reply. The exchange is complete unless the reply carries a further
- * `verifiablePresentationRequest`; the finalize helpers (`deliverPresentation`,
- * `collectIssuedPresentation`) inspect the reply via `assertExchangeComplete`.
- *
- * @param options {object}
- * @param options.request {IVPRDetails} - The VPR the exchange handed back.
- * @param options.exchangeUrl {string}
- * @param options.verifiablePresentation {IVerifiablePresentation}
- * @param [options.fetch] {FetchLike}
- * @returns {Promise<VCAPIExchangeResponse>}
- */
-export declare function submitPresentation({ request, exchangeUrl, verifiablePresentation, fetch }: {
-    request: IVPRDetails;
-    exchangeUrl: string;
-    verifiablePresentation: IVerifiablePresentation;
-    fetch?: FetchLike;
-}): Promise<VCAPIExchangeResponse>;
-/**
- * Sends the whole Wallet Response object -- a VP and/or delegated `zcap`s -- to
- * an exchanger endpoint (DCW's response envelope, which threads the grants
- * *beside* the VP rather than embedding them inside it). Returns the parsed JSON
- * reply, or `null` for an empty body. Kept alongside `submitPresentation` (whose
- * envelope carries only the VP) because the two apps POST different shapes.
- *
- * @param options {object}
- * @param options.exchangeUrl {string}
- * @param options.payload {{ verifiablePresentation?, zcap? }}
- * @param [options.fetch] {FetchLike}
- * @returns {Promise<unknown>}
- */
-export declare function sendToExchanger({ exchangeUrl, payload, fetch }: {
-    exchangeUrl: string;
-    payload: {
-        verifiablePresentation?: IVerifiablePresentation;
-        zcap?: IZcap[];
-    };
-    fetch?: FetchLike;
-}): Promise<unknown>;
-//# sourceMappingURL=exchangeClient.d.ts.map

package/dist/request/exchangeClient.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"exchangeClient.d.ts","sourceRoot":"","sources":["../../src/request/exchangeClient.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EACV,cAAc,EACd,SAAS,EACT,uBAAuB,EACvB,WAAW,EACX,KAAK,EACL,qBAAqB,EACtB,MAAM,YAAY,CAAA;AAQnB;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gBAAgB,CAAC,EAC/B,SAAS,EACV,EAAE;IACD,SAAS,CAAC,EAAE,cAAc,CAAA;CAC3B,GAAG,MAAM,GAAG,SAAS,CAGrB;AAoDD;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CAAC,EAClC,WAAW,EACX,KAAwB,EACzB,EAAE;IACD,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,SAAS,CAAA;CAClB,GAAG,OAAO,CAAC,WAAW,CAAC,CAYvB;AAED;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CAAC,EAClC,WAAW,EACX,KAAwB,EACzB,EAAE;IACD,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,SAAS,CAAA;CAClB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAEjC;AAwBD;;;;;;;;;;;;GAYG;AACH,wBAAsB,mBAAmB,CAAC,EACxC,OAAO,EACP,WAAW,EACX,sBAAsB,EACtB,KAAwB,EACzB,EAAE;IACD,OAAO,EAAE,WAAW,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,sBAAsB,EAAE,uBAAuB,CAAA;IAC/C,KAAK,CAAC,EAAE,SAAS,CAAA;CAClB,GAAG,OAAO,CAAC,IAAI,CAAC,CAQhB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,yBAAyB,CAAC,EAC9C,OAAO,EACP,WAAW,EACX,sBAAsB,EACtB,KAAwB,EACzB,EAAE;IACD,OAAO,EAAE,WAAW,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,sBAAsB,EAAE,uBAAuB,CAAA;IAC/C,KAAK,CAAC,EAAE,SAAS,CAAA;CAClB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAcnC;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,EACtC,OAAO,EACP,WAAW,EACZ,EAAE;IACD,OAAO,EAAE,WAAW,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;CACpB,GAAG,MAAM,CAOT;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,kBAAkB,CAAC,EACvC,OAAO,EACP,WAAW,EACX,sBAAsB,EACtB,KAAwB,EACzB,EAAE;IACD,OAAO,EAAE,WAAW,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,sBAAsB,EAAE,uBAAuB,CAAA;IAC/C,KAAK,CAAC,EAAE,SAAS,CAAA;CAClB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAMjC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,eAAe,CAAC,EACpC,WAAW,EACX,OAAO,EACP,KAAwB,EACzB,EAAE;IACD,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE;QACP,sBAAsB,CAAC,EAAE,uBAAuB,CAAA;QAChD,IAAI,CAAC,EAAE,KAAK,EAAE,CAAA;KACf,CAAA;IACD,KAAK,CAAC,EAAE,SAAS,CAAA;CAClB,GAAG,OAAO,CAAC,OAAO,CAAC,CAQnB"}

package/dist/request/exchangeClient.js

@@ -1,241 +0,0 @@
-/*!
- * Copyright (c) 2026 Interop Alliance. All rights reserved.
- */
-/**
- * VC API exchange client. A verifier may hand the wallet a CHAPI request whose
- * `VerifiablePresentation` body is empty and whose `protocols.vcapi` names an
- * exchange URL instead: the real Verifiable Presentation Request lives on the
- * verifier's exchange endpoint, and the wallet POSTs its response back there
- * rather than (only) over the CHAPI channel. vcplayground.org's verifier does
- * exactly this whenever it mints an exchange, which is always.
- *
- * Two calls make up the wallet's side of the exchange: `startExchange` (POST an
- * empty body, receive the VPR) and `submitPresentation` (POST the composed VP
- * to the VPR's presentation service endpoint, defaulting to the exchange URL).
- * An issuance exchange runs the same two calls in the other direction.
- *
- * Ported from Freewallet's `src/lib/walletRequest/vcApiExchange.ts`, with the
- * network transport injected ({@link FetchLike}, default `globalThis.fetch`) and
- * DCW's `sendToExchanger` (the whole-`WalletResponse` POST, envelope carrying
- * `zcap`) added alongside `submitPresentation` (VP-only body).
- *
- * @see https://w3c-ccg.github.io/vc-api/#exchange-examples
- */
-import { EphemeralExchangeGoneError } from './ephemeralExchange.js';
-/**
- * The `interact.service` type naming an endpoint that accepts a Verifiable
- * Presentation over plain HTTP POST, with no mediator in between.
- */
-const PRESENTATION_SERVICE_TYPE = 'UnmediatedHttpPresentationService2021';
-/**
- * The exchange URL a CHAPI request defers to, if any. Present when the verifier
- * or issuer chose an exchange-based protocol, in which case the request's VPR
- * (or store) body is empty and everything of substance lives behind this URL.
- *
- * Two protocol handles carry such a URL: the classic `vcapi` key, and the
- * `interact` key of the newer `chapi.interact()` API (a "meta" protocol whose
- * URL is opaque -- the underlying exchange is negotiated behind it, exactly as
- * with `vcapi`). Both are plain HTTP exchange endpoints the wallet POSTs to, so
- * they are handled identically here; `interact` is preferred when a request
- * carries both.
- *
- * @param options {object}
- * @param [options.protocols] {CHAPIProtocols}
- * @returns {string | undefined}
- */
-export function vcApiExchangeUrl({ protocols }) {
-    const candidates = [protocols?.interact, protocols?.vcapi];
-    return candidates.find(url => typeof url === 'string' && url.length > 0);
-}
-/**
- * POSTs a JSON body to an exchange endpoint and parses the reply. A 2xx with an
- * empty body is normal (a completed exchange), and yields `{}`. A `404` is
- * reported as {@link EphemeralExchangeGoneError} (dispatch on `err.name`): the
- * exchange expired or was never there.
- *
- * @param options {object}
- * @param options.url {string}
- * @param options.body {object}
- * @param options.fetch {FetchLike}
- * @returns {Promise<VCAPIExchangeResponse>}
- */
-async function postToExchange({ url, body, fetch }) {
-    const response = await fetch(url, {
-        method: 'POST',
-        headers: { 'content-type': 'application/json', accept: 'application/json' },
-        body: JSON.stringify(body)
-    });
-    if (response.status === 404) {
-        throw new EphemeralExchangeGoneError(`The exchange at ${url} is no longer available.`);
-    }
-    if (!response.ok) {
-        throw new Error(`The exchange at ${url} responded ${response.status} ` +
-            `${response.statusText}.`);
-    }
-    const text = await response.text();
-    if (!text) {
-        return {};
-    }
-    try {
-        return JSON.parse(text);
-    }
-    catch (err) {
-        throw new Error(`The exchange at ${url} returned malformed JSON.`, {
-            cause: err
-        });
-    }
-}
-/**
- * Opens the exchange and retrieves the Verifiable Presentation Request the
- * verifier is actually asking for. The wallet begins an exchange by POSTing an
- * empty body; the reply carries the VPR.
- *
- * @param options {object}
- * @param options.exchangeUrl {string}
- * @param [options.fetch] {FetchLike}
- * @returns {Promise<IVPRDetails>}
- */
-export async function startExchange({ exchangeUrl, fetch = globalThis.fetch }) {
-    const { verifiablePresentationRequest } = await beginExchange({
-        exchangeUrl,
-        fetch
-    });
-    if (!verifiablePresentationRequest) {
-        throw new Error(`The exchange at ${exchangeUrl} did not return a ` +
-            'verifiablePresentationRequest.');
-    }
-    return verifiablePresentationRequest;
-}
-/**
- * Opens an exchange: the wallet's first message is always an empty JSON body,
- * whether the exchange goes on to request a presentation (a verifier) or to
- * offer one (an issuer).
- *
- * @param options {object}
- * @param options.exchangeUrl {string}
- * @param [options.fetch] {FetchLike}
- * @returns {Promise<VCAPIExchangeResponse>}
- */
-export async function beginExchange({ exchangeUrl, fetch = globalThis.fetch }) {
-    return postToExchange({ url: exchangeUrl, body: {}, fetch });
-}
-/**
- * Reply inspection shared by both exchange directions. This wallet answers a
- * single round, so a reply carrying a further `verifiablePresentationRequest` is
- * a multi-step exchange it cannot continue: throw rather than pretend the
- * exchange closed. A reply without one is a completed round and returns
- * normally.
- */
-function assertExchangeComplete({ reply, exchangeUrl }) {
-    if (reply.verifiablePresentationRequest) {
-        throw new Error(`The exchange at ${exchangeUrl} asked for a further presentation; ` +
-            'multi-step exchanges are not supported.');
-    }
-}
-/**
- * Delivers the wallet's composed presentation to a verifier's exchange and
- * confirms the exchange finished. The exchange, not the CHAPI channel, is the
- * verifier's system of record, so an unfinished (multi-step) reply is a failed
- * delivery.
- *
- * @param options {object}
- * @param options.request {IVPRDetails} - The VPR the exchange handed back.
- * @param options.exchangeUrl {string}
- * @param options.verifiablePresentation {IVerifiablePresentation}
- * @param [options.fetch] {FetchLike}
- * @returns {Promise<void>}
- */
-export async function deliverPresentation({ request, exchangeUrl, verifiablePresentation, fetch = globalThis.fetch }) {
-    const reply = await submitPresentation({
-        request,
-        exchangeUrl,
-        verifiablePresentation,
-        fetch
-    });
-    assertExchangeComplete({ reply, exchangeUrl });
-}
-/**
- * Answers an issuance exchange's holder-binding step: POSTs the wallet's
- * DID-Auth presentation and collects the credentials the issuer hands back in
- * return. A reply carrying yet another `verifiablePresentationRequest` means a
- * further round this wallet does not answer.
- *
- * @param options {object}
- * @param options.request {IVPRDetails} - The VPR the exchange opened with.
- * @param options.exchangeUrl {string}
- * @param options.verifiablePresentation {IVerifiablePresentation} - The signed
- *   DID-Auth presentation proving control of the holder DID.
- * @param [options.fetch] {FetchLike}
- * @returns {Promise<IVerifiablePresentation>} The offered presentation.
- */
-export async function collectIssuedPresentation({ request, exchangeUrl, verifiablePresentation, fetch = globalThis.fetch }) {
-    const reply = await submitPresentation({
-        request,
-        exchangeUrl,
-        verifiablePresentation,
-        fetch
-    });
-    if (reply.verifiablePresentation) {
-        return reply.verifiablePresentation;
-    }
-    assertExchangeComplete({ reply, exchangeUrl });
-    throw new Error(`The exchange at ${exchangeUrl} offered no verifiablePresentation.`);
-}
-/**
- * Where to POST the composed presentation: the VPR's unmediated HTTP
- * presentation service, when it names one, else the exchange URL itself (which
- * every exchange accepts, and which is all vcplayground.org's VPR offers).
- *
- * @param options {object}
- * @param options.request {IVPRDetails}
- * @param options.exchangeUrl {string}
- * @returns {string}
- */
-export function presentationEndpointFor({ request, exchangeUrl }) {
-    const services = request.interact?.service ?? [];
-    const unmediated = services.find(({ type, serviceEndpoint }) => type === PRESENTATION_SERVICE_TYPE && !!serviceEndpoint);
-    return unmediated?.serviceEndpoint ?? exchangeUrl;
-}
-/**
- * Delivers the wallet's composed presentation to the exchange and returns the
- * raw reply. The exchange is complete unless the reply carries a further
- * `verifiablePresentationRequest`; the finalize helpers (`deliverPresentation`,
- * `collectIssuedPresentation`) inspect the reply via `assertExchangeComplete`.
- *
- * @param options {object}
- * @param options.request {IVPRDetails} - The VPR the exchange handed back.
- * @param options.exchangeUrl {string}
- * @param options.verifiablePresentation {IVerifiablePresentation}
- * @param [options.fetch] {FetchLike}
- * @returns {Promise<VCAPIExchangeResponse>}
- */
-export async function submitPresentation({ request, exchangeUrl, verifiablePresentation, fetch = globalThis.fetch }) {
-    return postToExchange({
-        url: presentationEndpointFor({ request, exchangeUrl }),
-        body: { verifiablePresentation },
-        fetch
-    });
-}
-/**
- * Sends the whole Wallet Response object -- a VP and/or delegated `zcap`s -- to
- * an exchanger endpoint (DCW's response envelope, which threads the grants
- * *beside* the VP rather than embedding them inside it). Returns the parsed JSON
- * reply, or `null` for an empty body. Kept alongside `submitPresentation` (whose
- * envelope carries only the VP) because the two apps POST different shapes.
- *
- * @param options {object}
- * @param options.exchangeUrl {string}
- * @param options.payload {{ verifiablePresentation?, zcap? }}
- * @param [options.fetch] {FetchLike}
- * @returns {Promise<unknown>}
- */
-export async function sendToExchanger({ exchangeUrl, payload, fetch = globalThis.fetch }) {
-    const response = await fetch(exchangeUrl, {
-        method: 'POST',
-        headers: { 'Content-Type': 'application/json' },
-        body: JSON.stringify(payload)
-    });
-    const text = await response.text();
-    return text ? JSON.parse(text) : null;
-}
-//# sourceMappingURL=exchangeClient.js.map

package/dist/request/exchangeClient.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"exchangeClient.js","sourceRoot":"","sources":["../../src/request/exchangeClient.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAA;AAUnE;;;GAGG;AACH,MAAM,yBAAyB,GAAG,uCAAuC,CAAA;AAEzE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAC/B,SAAS,EAGV;IACC,MAAM,UAAU,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,CAAA;IAC1D,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AAC1E,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,cAAc,CAAC,EAC5B,GAAG,EACH,IAAI,EACJ,KAAK,EAKN;IACC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE;QAC3E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAA;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,0BAA0B,CAClC,mBAAmB,GAAG,0BAA0B,CACjD,CAAA;IACH,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,mBAAmB,GAAG,cAAc,QAAQ,CAAC,MAAM,GAAG;YACpD,GAAG,QAAQ,CAAC,UAAU,GAAG,CAC5B,CAAA;IACH,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAClC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,CAAA;IACX,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAA0B,CAAA;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,2BAA2B,EAAE;YACjE,KAAK,EAAE,GAAG;SACX,CAAC,CAAA;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAClC,WAAW,EACX,KAAK,GAAG,UAAU,CAAC,KAAK,EAIzB;IACC,MAAM,EAAE,6BAA6B,EAAE,GAAG,MAAM,aAAa,CAAC;QAC5D,WAAW;QACX,KAAK;KACN,CAAC,CAAA;IACF,IAAI,CAAC,6BAA6B,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,mBAAmB,WAAW,oBAAoB;YAChD,gCAAgC,CACnC,CAAA;IACH,CAAC;IACD,OAAO,6BAA6B,CAAA;AACtC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAClC,WAAW,EACX,KAAK,GAAG,UAAU,CAAC,KAAK,EAIzB;IACC,OAAO,cAAc,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;AAC9D,CAAC;AAED;;;;;;GAMG;AACH,SAAS,sBAAsB,CAAC,EAC9B,KAAK,EACL,WAAW,EAIZ;IACC,IAAI,KAAK,CAAC,6BAA6B,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,mBAAmB,WAAW,qCAAqC;YACjE,yCAAyC,CAC5C,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,EACxC,OAAO,EACP,WAAW,EACX,sBAAsB,EACtB,KAAK,GAAG,UAAU,CAAC,KAAK,EAMzB;IACC,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC;QACrC,OAAO;QACP,WAAW;QACX,sBAAsB;QACtB,KAAK;KACN,CAAC,CAAA;IACF,sBAAsB,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;AAChD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,EAC9C,OAAO,EACP,WAAW,EACX,sBAAsB,EACtB,KAAK,GAAG,UAAU,CAAC,KAAK,EAMzB;IACC,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC;QACrC,OAAO;QACP,WAAW;QACX,sBAAsB;QACtB,KAAK;KACN,CAAC,CAAA;IACF,IAAI,KAAK,CAAC,sBAAsB,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC,sBAAsB,CAAA;IACrC,CAAC;IACD,sBAAsB,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;IAC9C,MAAM,IAAI,KAAK,CACb,mBAAmB,WAAW,qCAAqC,CACpE,CAAA;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CAAC,EACtC,OAAO,EACP,WAAW,EAIZ;IACC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAA;IAChD,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAC9B,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,CAC5B,IAAI,KAAK,yBAAyB,IAAI,CAAC,CAAC,eAAe,CAC1D,CAAA;IACD,OAAO,UAAU,EAAE,eAAe,IAAI,WAAW,CAAA;AACnD,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EACvC,OAAO,EACP,WAAW,EACX,sBAAsB,EACtB,KAAK,GAAG,UAAU,CAAC,KAAK,EAMzB;IACC,OAAO,cAAc,CAAC;QACpB,GAAG,EAAE,uBAAuB,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;QACtD,IAAI,EAAE,EAAE,sBAAsB,EAAE;QAChC,KAAK;KACN,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EACpC,WAAW,EACX,OAAO,EACP,KAAK,GAAG,UAAU,CAAC,KAAK,EAQzB;IACC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE;QACxC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;KAC9B,CAAC,CAAA;IACF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAClC,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACvC,CAAC"}

package/dist/request/index.d.ts

@@ -1,59 +0,0 @@
-/*!
- * Copyright (c) 2026 Interop Alliance. All rights reserved.
- */
-/**
- * The `@interop/wallet-core/request` subpath: wallet-request / exchange-protocol
- * handling shared by the Interop wallet apps (DCW and Freewallet).
- *
- * - `types` re-exports the VPR message vocabulary from
- *   `@interop/data-integrity-core` and declares the request-local types (CHAPI
- *   events, the classified-request profile, and the `PresentationSigner` /
- *   `FetchLike` / `RequestProcessors` injection seams).
- * - `parse` / `classify` turn a raw URL, JSON string, or CHAPI event into a
- *   typed message and dispatch on what it asks for.
- * - `matching` filters stored credentials against a QueryByExample (both the
- *   deep matcher and the type/issuer matcher).
- * - `onboarding` is the `WalletOnboardingQuery` transport vocabulary: the
- *   inviter's compose helper and the enrollee's classification, over a query
- *   carrying the account pointer (did:webvh id, `spaceId`, `host`) and the
- *   account controller did:key (the response envelope itself lives in
- *   `@interop/wallet-core/enrollment`, beside the connect code it carries).
- * - `appKey` is the App Connect app-key credential module: the wire constants,
- *   the matching / minting / legacy re-issue paths, and the store-time
- *   refusal policy.
- * - `presentationSuite` negotiates the response cryptosuite; `composeVp` builds
- *   the (optionally signed, optionally grant-embedding) response VP.
- * - `exchangeClient` is the fetch-injectable VC-API exchange client;
- *   `interactionUrl` resolves VCALM `interaction:` URLs; `interactionRequest`
- *   composes the two into `openInteractionRequest`, the answering wallet's
- *   one-call entry point for an interaction URL.
- * - `ephemeralExchange` is the requester's side of a WAS server's ephemeral
- *   exchange: create one carrying a VPR, poll it (with an optional deadline)
- *   until the wallet answers. `capabilityRequest` composes the zcap-only VPR
- *   a requester stores on it.
- * - `processRequest` is the pure request-to-response pipeline, with the
- *   app-side side effects injected.
- * - `classifyWalletInput` / `handleWalletInput` are the ordered
- *   discrimination every "scan or paste something" entry point runs, with the
- *   per-grammar handlers injected.
- *
- * The signing / document-loader dependency graph lives entirely behind this
- * subpath; `@interop/wallet-core`'s plaintext consumers never pull it in.
- */
-export * from './types.js';
-export * from './parse.js';
-export * from './queryPredicates.js';
-export * from './classify.js';
-export * from './onboarding.js';
-export * from './matching.js';
-export * from './appKey.js';
-export * from './presentationSuite.js';
-export * from './composeVp.js';
-export * from './exchangeClient.js';
-export * from './interactionUrl.js';
-export * from './interactionRequest.js';
-export * from './ephemeralExchange.js';
-export * from './capabilityRequest.js';
-export * from './processRequest.js';
-export * from './walletInput.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/request/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/request/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAC1B,cAAc,sBAAsB,CAAA;AACpC,cAAc,eAAe,CAAA;AAC7B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,eAAe,CAAA;AAC7B,cAAc,aAAa,CAAA;AAC3B,cAAc,wBAAwB,CAAA;AACtC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,qBAAqB,CAAA;AACnC,cAAc,qBAAqB,CAAA;AACnC,cAAc,yBAAyB,CAAA;AACvC,cAAc,wBAAwB,CAAA;AACtC,cAAc,wBAAwB,CAAA;AACtC,cAAc,qBAAqB,CAAA;AACnC,cAAc,kBAAkB,CAAA"}

package/dist/request/index.js

@@ -1,59 +0,0 @@
-/*!
- * Copyright (c) 2026 Interop Alliance. All rights reserved.
- */
-/**
- * The `@interop/wallet-core/request` subpath: wallet-request / exchange-protocol
- * handling shared by the Interop wallet apps (DCW and Freewallet).
- *
- * - `types` re-exports the VPR message vocabulary from
- *   `@interop/data-integrity-core` and declares the request-local types (CHAPI
- *   events, the classified-request profile, and the `PresentationSigner` /
- *   `FetchLike` / `RequestProcessors` injection seams).
- * - `parse` / `classify` turn a raw URL, JSON string, or CHAPI event into a
- *   typed message and dispatch on what it asks for.
- * - `matching` filters stored credentials against a QueryByExample (both the
- *   deep matcher and the type/issuer matcher).
- * - `onboarding` is the `WalletOnboardingQuery` transport vocabulary: the
- *   inviter's compose helper and the enrollee's classification, over a query
- *   carrying the account pointer (did:webvh id, `spaceId`, `host`) and the
- *   account controller did:key (the response envelope itself lives in
- *   `@interop/wallet-core/enrollment`, beside the connect code it carries).
- * - `appKey` is the App Connect app-key credential module: the wire constants,
- *   the matching / minting / legacy re-issue paths, and the store-time
- *   refusal policy.
- * - `presentationSuite` negotiates the response cryptosuite; `composeVp` builds
- *   the (optionally signed, optionally grant-embedding) response VP.
- * - `exchangeClient` is the fetch-injectable VC-API exchange client;
- *   `interactionUrl` resolves VCALM `interaction:` URLs; `interactionRequest`
- *   composes the two into `openInteractionRequest`, the answering wallet's
- *   one-call entry point for an interaction URL.
- * - `ephemeralExchange` is the requester's side of a WAS server's ephemeral
- *   exchange: create one carrying a VPR, poll it (with an optional deadline)
- *   until the wallet answers. `capabilityRequest` composes the zcap-only VPR
- *   a requester stores on it.
- * - `processRequest` is the pure request-to-response pipeline, with the
- *   app-side side effects injected.
- * - `classifyWalletInput` / `handleWalletInput` are the ordered
- *   discrimination every "scan or paste something" entry point runs, with the
- *   per-grammar handlers injected.
- *
- * The signing / document-loader dependency graph lives entirely behind this
- * subpath; `@interop/wallet-core`'s plaintext consumers never pull it in.
- */
-export * from './types.js';
-export * from './parse.js';
-export * from './queryPredicates.js';
-export * from './classify.js';
-export * from './onboarding.js';
-export * from './matching.js';
-export * from './appKey.js';
-export * from './presentationSuite.js';
-export * from './composeVp.js';
-export * from './exchangeClient.js';
-export * from './interactionUrl.js';
-export * from './interactionRequest.js';
-export * from './ephemeralExchange.js';
-export * from './capabilityRequest.js';
-export * from './processRequest.js';
-export * from './walletInput.js';
-//# sourceMappingURL=index.js.map

package/dist/request/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/request/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,cAAc,YAAY,CAAA;AAC1B,cAAc,YAAY,CAAA;AAC1B,cAAc,sBAAsB,CAAA;AACpC,cAAc,eAAe,CAAA;AAC7B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,eAAe,CAAA;AAC7B,cAAc,aAAa,CAAA;AAC3B,cAAc,wBAAwB,CAAA;AACtC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,qBAAqB,CAAA;AACnC,cAAc,qBAAqB,CAAA;AACnC,cAAc,yBAAyB,CAAA;AACvC,cAAc,wBAAwB,CAAA;AACtC,cAAc,wBAAwB,CAAA;AACtC,cAAc,qBAAqB,CAAA;AACnC,cAAc,kBAAkB,CAAA"}

package/dist/request/interactionRequest.d.ts

@@ -1,23 +0,0 @@
-import type { FetchLike, IVPRDetails } from './types.js';
-/**
- * Resolves an interaction URL to the Verifiable Presentation Request it names.
- * Throws a plain `Error` when the text is not an interaction URL, or when the
- * resolved protocols map names no usable exchange (`interact` or `vcapi`); a
- * `404` on either the protocols fetch or the exchange's begin POST surfaces as
- * {@link EphemeralExchangeGoneError} (dispatch on `err.name`), since either
- * one means the exchange expired or the link is wrong.
- *
- * @param options {object}
- * @param options.url {string}
- * @param [options.fetch] {FetchLike}
- * @returns {Promise<{ interactionUrl: string, exchangeUrl: string, request: IVPRDetails }>}
- */
-export declare function openInteractionRequest({ url, fetch }: {
-    url: string;
-    fetch?: FetchLike;
-}): Promise<{
-    interactionUrl: string;
-    exchangeUrl: string;
-    request: IVPRDetails;
-}>;
-//# sourceMappingURL=interactionRequest.d.ts.map

package/dist/request/interactionRequest.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"interactionRequest.d.ts","sourceRoot":"","sources":["../../src/request/interactionRequest.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAExD;;;;;;;;;;;;GAYG;AACH,wBAAsB,sBAAsB,CAAC,EAC3C,GAAG,EACH,KAAwB,EACzB,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,SAAS,CAAA;CAClB,GAAG,OAAO,CAAC;IACV,cAAc,EAAE,MAAM,CAAA;IACtB,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,WAAW,CAAA;CACrB,CAAC,CAeD"}

package/dist/request/interactionRequest.js

@@ -1,46 +0,0 @@
-/*!
- * Copyright (c) 2026 Interop Alliance. All rights reserved.
- */
-/**
- * Opens a VCALM interaction URL end to end: resolves its protocols map, begins
- * the exchange it names, and hands back the Verifiable Presentation Request the
- * exchange is actually asking for. This is the answering wallet's counterpart
- * of `createEphemeralExchange` (`ephemeralExchange.ts`): a requester stores a
- * VPR on an ephemeral exchange and prints the interaction URL; this opens it.
- *
- * Classification is deliberately not done here. The caller runs its own
- * `classifyRequest` over the returned `request` -- freewallet's App
- * Connect-aware classifier must refuse an `AppConnectQuery` that arrives with
- * no attested origin, and the shared classifier here would silently filter it
- * out instead.
- */
-import { fetchInteractionProtocols, isInteractionUrl, parseInteractionUrl } from './interactionUrl.js';
-import { startExchange, vcApiExchangeUrl } from './exchangeClient.js';
-/**
- * Resolves an interaction URL to the Verifiable Presentation Request it names.
- * Throws a plain `Error` when the text is not an interaction URL, or when the
- * resolved protocols map names no usable exchange (`interact` or `vcapi`); a
- * `404` on either the protocols fetch or the exchange's begin POST surfaces as
- * {@link EphemeralExchangeGoneError} (dispatch on `err.name`), since either
- * one means the exchange expired or the link is wrong.
- *
- * @param options {object}
- * @param options.url {string}
- * @param [options.fetch] {FetchLike}
- * @returns {Promise<{ interactionUrl: string, exchangeUrl: string, request: IVPRDetails }>}
- */
-export async function openInteractionRequest({ url, fetch = globalThis.fetch }) {
-    if (!isInteractionUrl(url)) {
-        throw new Error(`Not an interaction URL: ${url}`);
-    }
-    const interactionUrl = parseInteractionUrl(url);
-    const protocols = await fetchInteractionProtocols(interactionUrl, { fetch });
-    const exchangeUrl = vcApiExchangeUrl({ protocols });
-    if (!exchangeUrl) {
-        throw new Error(`The interaction URL's protocols map names no usable exchange ` +
-            `("interact" or "vcapi"): ${interactionUrl}`);
-    }
-    const request = await startExchange({ exchangeUrl, fetch });
-    return { interactionUrl, exchangeUrl, request };
-}
-//# sourceMappingURL=interactionRequest.js.map

package/dist/request/interactionRequest.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"interactionRequest.js","sourceRoot":"","sources":["../../src/request/interactionRequest.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;GAYG;AACH,OAAO,EACL,yBAAyB,EACzB,gBAAgB,EAChB,mBAAmB,EACpB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAGrE;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,EAC3C,GAAG,EACH,KAAK,GAAG,UAAU,CAAC,KAAK,EAIzB;IAKC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAA;IACnD,CAAC;IACD,MAAM,cAAc,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAA;IAC/C,MAAM,SAAS,GAAG,MAAM,yBAAyB,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;IAC5E,MAAM,WAAW,GAAG,gBAAgB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAA;IACnD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,+DAA+D;YAC7D,4BAA4B,cAAc,EAAE,CAC/C,CAAA;IACH,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAA;IAC3D,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,OAAO,EAAE,CAAA;AACjD,CAAC"}

package/dist/request/interactionUrl.d.ts

@@ -1,42 +0,0 @@
-import type { FetchLike } from './types.js';
-/**
- * Detects whether a URL is a VCALM interaction URL.
- *
- * Two formats:
- * - `interaction:` scheme: `interaction:https://example.com/path?iuv=1`
- * - HTTPS URL with an `iuv` query param: `https://example.com/path?iuv=1`
- *
- * @param url {string}
- * @returns {boolean}
- */
-export declare function isInteractionUrl(url: string): boolean;
-/**
- * Normalizes any interaction URL to the inner HTTPS interaction URL. Accepts any
- * URL that passed {@link isInteractionUrl}.
- *
- * - `interaction:https://...?iuv=1` strips the prefix
- * - `interaction:https%3A%2F%2F...` strips the prefix and decodes (URL-encoded
- *   after `interaction:` is non-standard, but handled for robustness)
- * - `https://...?iuv=1` is returned as-is
- *
- * @param url {string}
- * @returns {string}
- */
-export declare function parseInteractionUrl(url: string): string;
-/**
- * Fetches the interaction protocols response from a VCALM interaction URL. Sends
- * GET with `Accept: application/json` per the VCALM spec, and returns the
- * protocols map. Logs a warning if the `iuv` param value is not `1`; throws if
- * the response is not ok or the `protocols` key is missing. A `404` is reported
- * as {@link EphemeralExchangeGoneError} (dispatch on `err.name`): the
- * interaction URL points at an exchange that expired or was never there.
- *
- * @param interactionUrl {string}
- * @param [options] {object}
- * @param [options.fetch] {FetchLike}
- * @returns {Promise<Record<string, string>>}
- */
-export declare function fetchInteractionProtocols(interactionUrl: string, { fetch }?: {
-    fetch?: FetchLike;
-}): Promise<Record<string, string>>;
-//# sourceMappingURL=interactionUrl.d.ts.map

package/dist/request/interactionUrl.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"interactionUrl.d.ts","sourceRoot":"","sources":["../../src/request/interactionUrl.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAI3C;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAUrD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAWvD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,yBAAyB,CAC7C,cAAc,EAAE,MAAM,EACtB,EAAE,KAAwB,EAAE,GAAE;IAAE,KAAK,CAAC,EAAE,SAAS,CAAA;CAAO,GACvD,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAmCjC"}