@interop/wallet-core 0.69.0 → 0.71.0

package/dist/request/interactionUrl.js

@@ -1,104 +0,0 @@
-/*!
- * Copyright (c) 2026 Interop Alliance. All rights reserved.
- */
-/**
- * VCALM `interaction:` URL handling: detecting an interaction URL, normalizing
- * it to its inner HTTPS URL, and fetching the protocols map it advertises. An
- * interaction URL is a level of indirection a verifier / issuer hands the wallet
- * (over a deep link or QR code) that resolves to a `protocols` map naming the
- * real exchange endpoints.
- *
- * Ported verbatim from DCW's `app/lib/interactionUrl.ts`, with the network
- * transport injected ({@link FetchLike}, default `globalThis.fetch`).
- */
-import { log } from '../log.js';
-import { EphemeralExchangeGoneError } from './ephemeralExchange.js';
-const INTERACTION_SCHEME_PREFIX = 'interaction:';
-/**
- * Detects whether a URL is a VCALM interaction URL.
- *
- * Two formats:
- * - `interaction:` scheme: `interaction:https://example.com/path?iuv=1`
- * - HTTPS URL with an `iuv` query param: `https://example.com/path?iuv=1`
- *
- * @param url {string}
- * @returns {boolean}
- */
-export function isInteractionUrl(url) {
-    if (url.startsWith(INTERACTION_SCHEME_PREFIX)) {
-        return true;
-    }
-    try {
-        const parsed = new URL(url);
-        return parsed.searchParams.has('iuv');
-    }
-    catch {
-        return false;
-    }
-}
-/**
- * Normalizes any interaction URL to the inner HTTPS interaction URL. Accepts any
- * URL that passed {@link isInteractionUrl}.
- *
- * - `interaction:https://...?iuv=1` strips the prefix
- * - `interaction:https%3A%2F%2F...` strips the prefix and decodes (URL-encoded
- *   after `interaction:` is non-standard, but handled for robustness)
- * - `https://...?iuv=1` is returned as-is
- *
- * @param url {string}
- * @returns {string}
- */
-export function parseInteractionUrl(url) {
-    if (!url.startsWith(INTERACTION_SCHEME_PREFIX)) {
-        return url;
-    }
-    const inner = url.slice(INTERACTION_SCHEME_PREFIX.length);
-    // Non-standard: the inner URL may be URL-encoded after the `interaction:`
-    // prefix.
-    if (inner.startsWith('http%3A') || inner.startsWith('https%3A')) {
-        return decodeURIComponent(inner);
-    }
-    return inner;
-}
-/**
- * Fetches the interaction protocols response from a VCALM interaction URL. Sends
- * GET with `Accept: application/json` per the VCALM spec, and returns the
- * protocols map. Logs a warning if the `iuv` param value is not `1`; throws if
- * the response is not ok or the `protocols` key is missing. A `404` is reported
- * as {@link EphemeralExchangeGoneError} (dispatch on `err.name`): the
- * interaction URL points at an exchange that expired or was never there.
- *
- * @param interactionUrl {string}
- * @param [options] {object}
- * @param [options.fetch] {FetchLike}
- * @returns {Promise<Record<string, string>>}
- */
-export async function fetchInteractionProtocols(interactionUrl, { fetch = globalThis.fetch } = {}) {
-    try {
-        const parsed = new URL(interactionUrl);
-        const iuv = parsed.searchParams.get('iuv');
-        if (iuv && iuv !== '1') {
-            log.warn('Unexpected iuv value (expected "1"); proceeding anyway', {
-                iuv
-            });
-        }
-    }
-    catch {
-        throw new Error(`Invalid interaction URL: ${interactionUrl}`);
-    }
-    const response = await fetch(interactionUrl, {
-        headers: { Accept: 'application/json' }
-    });
-    if (response.status === 404) {
-        throw new EphemeralExchangeGoneError(`The interaction URL ${interactionUrl} is no longer available.`);
-    }
-    if (!response.ok) {
-        throw new Error(`Interaction URL fetch failed: ${response.status} ${response.statusText}`);
-    }
-    const body = await response.json();
-    if (!body.protocols || typeof body.protocols !== 'object') {
-        throw new Error('Interaction URL response missing "protocols" map.');
-    }
-    return body.protocols;
-}
-//# sourceMappingURL=interactionUrl.js.map

package/dist/request/interactionUrl.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"interactionUrl.js","sourceRoot":"","sources":["../../src/request/interactionUrl.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;GASG;AACH,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAC/B,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAA;AAGnE,MAAM,yBAAyB,GAAG,cAAc,CAAA;AAEhD;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,IAAI,GAAG,CAAC,UAAU,CAAC,yBAAyB,CAAC,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAA;QAC3B,OAAO,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,yBAAyB,CAAC,EAAE,CAAC;QAC/C,OAAO,GAAG,CAAA;IACZ,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAA;IACzD,0EAA0E;IAC1E,UAAU;IACV,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAChE,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAA;IAClC,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,cAAsB,EACtB,EAAE,KAAK,GAAG,UAAU,CAAC,KAAK,KAA4B,EAAE;IAExD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAA;QACtC,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC1C,IAAI,GAAG,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YACvB,GAAG,CAAC,IAAI,CAAC,wDAAwD,EAAE;gBACjE,GAAG;aACJ,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,4BAA4B,cAAc,EAAE,CAAC,CAAA;IAC/D,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,cAAc,EAAE;QAC3C,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;KACxC,CAAC,CAAA;IAEF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,0BAA0B,CAClC,uBAAuB,cAAc,0BAA0B,CAChE,CAAA;IACH,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,iCAAiC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAC1E,CAAA;IACH,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAElC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;IACtE,CAAC;IAED,OAAO,IAAI,CAAC,SAAS,CAAA;AACvB,CAAC"}

package/dist/request/matching.d.ts

@@ -1,95 +0,0 @@
-/*!
- * Copyright (c) 2026 Interop Alliance. All rights reserved.
- */
-/**
- * QueryByExample matching: which stored credentials satisfy a verifier's
- * `QueryByExample` request. Two independent algorithms ship here because the two
- * apps genuinely differ, and each wallet matches only its own local store (no
- * cross-replica agreement is required):
- *
- * - `credentialMatchesVprExampleQuery` / `filterCredentialsByExample` -- DCW's
- *   deep matcher, which walks the example object and matches any nested field
- *   (arrays, nested objects, literals) against the credential.
- * - `vcMatchesFor` / `hasTypedExample` / `requestsCredentialType` --
- *   Freewallet's type-and-issuer matcher, which constrains only on the
- *   example's `type` (and, when pinned, `issuer`).
- *
- * Both operate on plain `IVerifiableCredential`s; each app maps its own record
- * type down to the credential before calling. Ported from DCW's
- * `app/lib/credentialMatching.ts` and Freewallet's
- * `src/lib/walletRequest/vcMatches.ts`.
- */
-import type { IVerifiableCredential } from './types.js';
-import type { IQueryByExample } from './types.js';
-export { issuerId, typeArray } from '@interop/data-integrity-core/guards';
-export type { ICredentialQuery, IQueryByExample, IVerifiableCredential } from './types.js';
-/**
- * Whether a credential matches a QueryByExample `example` object, by the DCW
- * deep-matching algorithm: every key of the example is resolved as a literal
- * property of the credential and compared. Array example values require the
- * credential to contain (at least) every listed value; object example values
- * recurse; literal example values compare by strict equality. An empty example
- * matches any credential.
- *
- * Both sides are normalized for JSON-LD's single-value / array duality: a
- * literal example value also matches a credential field holding the array form
- * (`"type": "AlumniCredential"` vs `type: ['VerifiableCredential',
- * 'AlumniCredential']`), and an array example value also matches a credential
- * field holding the compacted single value.
- *
- * @param vprExample {Record<string, unknown>} - The QueryByExample `example`.
- * @param credential {IVerifiableCredential} - The stored credential to test.
- * @returns {boolean}
- */
-export declare function credentialMatchesVprExampleQuery(vprExample: Record<string, unknown>, credential: IVerifiableCredential): boolean;
-/**
- * Filters credentials to those matching a `QueryByExample`, using the deep
- * matcher. Each of the query's `credentialQuery` details contributes its
- * `example`; a credential is included when it matches any of them. A malformed
- * query with no example matches nothing.
- *
- * @param credentials {IVerifiableCredential[]}
- * @param query {IQueryByExample}
- * @returns {IVerifiableCredential[]}
- */
-export declare function filterCredentialsByExample(credentials: IVerifiableCredential[], query: IQueryByExample): IVerifiableCredential[];
-/**
- * The credentials matching any of the given QueryByExample queries by the
- * type-and-issuer algorithm. Only queries whose `example` carries a `type`
- * constrain the result; a query with no example type matches nothing here (the
- * caller keeps its list-all behavior when *no* query specifies a type).
- *
- * @param options {object}
- * @param options.credentials {IVerifiableCredential[]}
- * @param options.queries {IQueryByExample[]}
- * @returns {IVerifiableCredential[]}
- */
-export declare function vcMatchesFor({ credentials, queries }: {
-    credentials: IVerifiableCredential[];
-    queries: IQueryByExample[];
-}): IVerifiableCredential[];
-/**
- * Whether any of the QueryByExample queries pins an example `type` (and so
- * should filter the share list). When false, the caller keeps showing all
- * stored credentials.
- *
- * @param queries {IQueryByExample[]}
- * @returns {boolean}
- */
-export declare function hasTypedExample(queries: IQueryByExample[]): boolean;
-/**
- * Whether any typed example in the query set explicitly lists the given
- * credential `type`. Lets the caller distinguish a request that actually asks
- * for a particular type (e.g. a LoginCredential) from a generic, untyped "any
- * VC" request.
- *
- * @param options {object}
- * @param options.queries {IQueryByExample[]}
- * @param options.type {string}
- * @returns {boolean}
- */
-export declare function requestsCredentialType({ queries, type }: {
-    queries: IQueryByExample[];
-    type: string;
-}): boolean;
-//# sourceMappingURL=matching.d.ts.map

package/dist/request/matching.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"matching.d.ts","sourceRoot":"","sources":["../../src/request/matching.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AACvD,OAAO,KAAK,EAAoB,eAAe,EAAE,MAAM,YAAY,CAAA;AAMnE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAA;AAKzE,YAAY,EACV,gBAAgB,EAChB,eAAe,EACf,qBAAqB,EACtB,MAAM,YAAY,CAAA;AAEnB;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,gCAAgC,CAC9C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACnC,UAAU,EAAE,qBAAqB,GAChC,OAAO,CAET;AAiGD;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CACxC,WAAW,EAAE,qBAAqB,EAAE,EACpC,KAAK,EAAE,eAAe,GACrB,qBAAqB,EAAE,CAgBzB;AAiCD;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,EAC3B,WAAW,EACX,OAAO,EACR,EAAE;IACD,WAAW,EAAE,qBAAqB,EAAE,CAAA;IACpC,OAAO,EAAE,eAAe,EAAE,CAAA;CAC3B,GAAG,qBAAqB,EAAE,CAQ1B;AAqBD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,OAAO,CAEnE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,EACrC,OAAO,EACP,IAAI,EACL,EAAE;IACD,OAAO,EAAE,eAAe,EAAE,CAAA;IAC1B,IAAI,EAAE,MAAM,CAAA;CACb,GAAG,OAAO,CAIV"}

package/dist/request/matching.js

@@ -1,205 +0,0 @@
-import { credentialQueriesOf } from './classify.js';
-import { issuerId, typeArray } from '@interop/data-integrity-core/guards';
-// The loose-field normalizers are owned by data-integrity-core; re-export them
-// here so a matching consumer imports one module.
-export { issuerId, typeArray } from '@interop/data-integrity-core/guards';
-/**
- * Whether a credential matches a QueryByExample `example` object, by the DCW
- * deep-matching algorithm: every key of the example is resolved as a literal
- * property of the credential and compared. Array example values require the
- * credential to contain (at least) every listed value; object example values
- * recurse; literal example values compare by strict equality. An empty example
- * matches any credential.
- *
- * Both sides are normalized for JSON-LD's single-value / array duality: a
- * literal example value also matches a credential field holding the array form
- * (`"type": "AlumniCredential"` vs `type: ['VerifiableCredential',
- * 'AlumniCredential']`), and an array example value also matches a credential
- * field holding the compacted single value.
- *
- * @param vprExample {Record<string, unknown>} - The QueryByExample `example`.
- * @param credential {IVerifiableCredential} - The stored credential to test.
- * @returns {boolean}
- */
-export function credentialMatchesVprExampleQuery(vprExample, credential) {
-    return matchesExampleScope(vprExample, credential);
-}
-/**
- * The recursive half of the deep matcher: whether an example object matches the
- * given scope of a credential. Each example key is resolved as a literal
- * property of the scope, and an object example value recurses into the value it
- * resolved to.
- *
- * @param vprExample {Record<string, unknown>} - The example (or sub-example).
- * @param scope {unknown} - The credential value the example is matched against
- *   (the credential itself at the top level).
- * @returns {boolean}
- */
-function matchesExampleScope(vprExample, scope) {
-    const matches = [];
-    for (const [vprExampleKey, vprExampleValue] of Object.entries(vprExample)) {
-        const credentialScope = propertyOf(scope, vprExampleKey);
-        if (Array.isArray(vprExampleValue)) {
-            // Array query values require that the matching credential contains at
-            // least every value specified. This assumes each element is a literal.
-            // The credential side may hold the compacted single-value form.
-            const scopeValues = valueList(credentialScope);
-            if (scopeValues.length < vprExampleValue.length) {
-                return false;
-            }
-            matches.push(vprExampleValue.every(exampleValue => scopeValues.includes(exampleValue)));
-        }
-        else if (typeof vprExampleValue === 'object' &&
-            vprExampleValue !== null) {
-            // Object query values recurse, to handle nested queries.
-            matches.push(matchesExampleScope(vprExampleValue, credentialScope));
-        }
-        else {
-            // Literal query values compare directly, or by membership when the
-            // credential holds the array form of the field.
-            matches.push(Array.isArray(credentialScope)
-                ? credentialScope.includes(vprExampleValue)
-                : credentialScope === vprExampleValue);
-        }
-    }
-    return matches.every(match => match);
-}
-/**
- * Normalizes a credential field value to the array form, so an example's array
- * value can be compared against a field holding either the array or the
- * compacted single value. An absent field yields `[]`.
- *
- * @param value {unknown}
- * @returns {unknown[]}
- */
-function valueList(value) {
-    if (Array.isArray(value)) {
-        return value;
-    }
-    if (value === undefined) {
-        return [];
-    }
-    return [value];
-}
-/**
- * The value of an own property of a credential scope, or `undefined` when the
- * scope carries no such property. Example keys are arbitrary strings, so only
- * own properties resolve: an inherited name (`toString`, `constructor`,
- * `__proto__`) reads as absent rather than reaching the prototype chain. An
- * array scope is an ordinary object here -- a key is not mapped over its
- * elements.
- *
- * @param scope {unknown} - The credential value to read from.
- * @param key {string} - The literal property name.
- * @returns {unknown}
- */
-function propertyOf(scope, key) {
-    if (scope === null || scope === undefined) {
-        return undefined;
-    }
-    if (!Object.hasOwn(scope, key)) {
-        return undefined;
-    }
-    return scope[key];
-}
-/**
- * Filters credentials to those matching a `QueryByExample`, using the deep
- * matcher. Each of the query's `credentialQuery` details contributes its
- * `example`; a credential is included when it matches any of them. A malformed
- * query with no example matches nothing.
- *
- * @param credentials {IVerifiableCredential[]}
- * @param query {IQueryByExample}
- * @returns {IVerifiableCredential[]}
- */
-export function filterCredentialsByExample(credentials, query) {
-    const examples = credentialQueriesOf(query)
-        .map(({ example }) => example)
-        .filter((example) => !!example);
-    if (examples.length === 0) {
-        // Malformed request: no example to match against.
-        return [];
-    }
-    return credentials.filter(credential => examples.some(example => credentialMatchesVprExampleQuery(example, credential)));
-}
-/**
- * Whether a credential matches a single QueryByExample `example` by the
- * type-and-issuer algorithm: every type listed in `example.type` must appear in
- * the credential's `type`, and -- when the example pins an `issuer` -- the
- * credential's issuer must equal it.
- *
- * @param options {object}
- * @param options.credential {IVerifiableCredential}
- * @param options.example {ICredentialQuery['example']}
- * @returns {boolean}
- */
-function matchesExample({ credential, example }) {
-    const wantedTypes = typeArray(example.type);
-    const credentialTypes = typeArray(credential.type);
-    const typesMatch = wantedTypes.every(type => credentialTypes.includes(type));
-    if (!typesMatch) {
-        return false;
-    }
-    const wantedIssuer = issuerId(example.issuer);
-    if (wantedIssuer) {
-        return issuerId(credential.issuer) === wantedIssuer;
-    }
-    return true;
-}
-/**
- * The credentials matching any of the given QueryByExample queries by the
- * type-and-issuer algorithm. Only queries whose `example` carries a `type`
- * constrain the result; a query with no example type matches nothing here (the
- * caller keeps its list-all behavior when *no* query specifies a type).
- *
- * @param options {object}
- * @param options.credentials {IVerifiableCredential[]}
- * @param options.queries {IQueryByExample[]}
- * @returns {IVerifiableCredential[]}
- */
-export function vcMatchesFor({ credentials, queries }) {
-    const examples = typedExamplesOf(queries);
-    if (examples.length === 0) {
-        return [];
-    }
-    return credentials.filter(credential => examples.some(example => matchesExample({ credential, example })));
-}
-/**
- * The example credential shapes pinned by a query set: every `credentialQuery`
- * detail carrying an example `type`. Only these constrain the share list.
- *
- * @param queries {IQueryByExample[]}
- * @returns {Array<ICredentialQuery['example']>}
- */
-function typedExamplesOf(queries) {
-    return queries
-        .flatMap(query => credentialQueriesOf(query))
-        .map(({ example }) => example)
-        .filter((example) => !!example && typeArray(example.type).length > 0);
-}
-/**
- * Whether any of the QueryByExample queries pins an example `type` (and so
- * should filter the share list). When false, the caller keeps showing all
- * stored credentials.
- *
- * @param queries {IQueryByExample[]}
- * @returns {boolean}
- */
-export function hasTypedExample(queries) {
-    return typedExamplesOf(queries).length > 0;
-}
-/**
- * Whether any typed example in the query set explicitly lists the given
- * credential `type`. Lets the caller distinguish a request that actually asks
- * for a particular type (e.g. a LoginCredential) from a generic, untyped "any
- * VC" request.
- *
- * @param options {object}
- * @param options.queries {IQueryByExample[]}
- * @param options.type {string}
- * @returns {boolean}
- */
-export function requestsCredentialType({ queries, type }) {
-    return typedExamplesOf(queries).some(example => typeArray(example.type).includes(type));
-}
-//# sourceMappingURL=matching.js.map

package/dist/request/matching.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"matching.js","sourceRoot":"","sources":["../../src/request/matching.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AACnD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAA;AAEzE,+EAA+E;AAC/E,kDAAkD;AAClD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,qCAAqC,CAAA;AAWzE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,gCAAgC,CAC9C,UAAmC,EACnC,UAAiC;IAEjC,OAAO,mBAAmB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAA;AACpD,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,mBAAmB,CAC1B,UAAmC,EACnC,KAAc;IAEd,MAAM,OAAO,GAAc,EAAE,CAAA;IAC7B,KAAK,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1E,MAAM,eAAe,GAAG,UAAU,CAAC,KAAK,EAAE,aAAa,CAAC,CAAA;QACxD,IAAI,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;YACnC,sEAAsE;YACtE,uEAAuE;YACvE,gEAAgE;YAChE,MAAM,WAAW,GAAG,SAAS,CAAC,eAAe,CAAC,CAAA;YAC9C,IAAI,WAAW,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM,EAAE,CAAC;gBAChD,OAAO,KAAK,CAAA;YACd,CAAC;YACD,OAAO,CAAC,IAAI,CACV,eAAe,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CACnC,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,CACnC,CACF,CAAA;QACH,CAAC;aAAM,IACL,OAAO,eAAe,KAAK,QAAQ;YACnC,eAAe,KAAK,IAAI,EACxB,CAAC;YACD,yDAAyD;YACzD,OAAO,CAAC,IAAI,CACV,mBAAmB,CACjB,eAA0C,EAC1C,eAAe,CAChB,CACF,CAAA;QACH,CAAC;aAAM,CAAC;YACN,mEAAmE;YACnE,gDAAgD;YAChD,OAAO,CAAC,IAAI,CACV,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC;gBAC5B,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAC3C,CAAC,CAAC,eAAe,KAAK,eAAe,CACxC,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAA;AACtC,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,CAAA;AAChB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,UAAU,CAAC,KAAc,EAAE,GAAW;IAC7C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAe,EAAE,GAAG,CAAC,EAAE,CAAC;QACzC,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAQ,KAAiC,CAAC,GAAG,CAAC,CAAA;AAChD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CACxC,WAAoC,EACpC,KAAsB;IAEtB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC;SACxC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC;SAC7B,MAAM,CAAC,CAAC,OAAO,EAA0C,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IACzE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,kDAAkD;QAClD,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CACrC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CACtB,gCAAgC,CAC9B,OAAkC,EAClC,UAAU,CACX,CACF,CACF,CAAA;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,cAAc,CAAC,EACtB,UAAU,EACV,OAAO,EAIR;IACC,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3C,MAAM,eAAe,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;IAClD,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;IAC5E,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAC7C,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,YAAY,CAAA;IACrD,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY,CAAC,EAC3B,WAAW,EACX,OAAO,EAIR;IACC,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;IACzC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CACrC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CAClE,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CACtB,OAA0B;IAE1B,OAAO,OAAO;SACX,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;SAC5C,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC;SAC7B,MAAM,CACL,CAAC,OAAO,EAA0C,EAAE,CAClD,CAAC,CAAC,OAAO,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAClD,CAAA;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,OAA0B;IACxD,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;AAC5C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CAAC,EACrC,OAAO,EACP,IAAI,EAIL;IACC,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAC7C,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CACvC,CAAA;AACH,CAAC"}

package/dist/request/onboarding.d.ts

@@ -1,94 +0,0 @@
-import type { IVPRDetails, IVPRQuery, IWalletOnboardingRequest } from './types.js';
-/**
- * Validates a wallet-onboarding `host` and returns its serialized form. The
- * value must parse as an absolute URL and must be `http:` or `https:` (it is
- * dereferenced as a WAS server base URL) and must not carry a fragment; any
- * violation throws. Compose and classification share this one rule, so the
- * spelling the inviter publishes is the spelling the enrollee resolves, and
- * URLs differing only in a default port, percent-encoding case, or dot
- * segments do not name distinct servers.
- *
- * There is no attested origin to compare against here -- an exchange has no
- * CHAPI requesting origin -- so unlike an App Connect `appUrl` the check is
- * shape only. The channel's trust comes from the point-to-point fingerprint
- * comparison of the enrollment ceremony, not from this value.
- *
- * The fragment check reads the serialized URL rather than `url.hash`: a bare
- * trailing `#` sets an empty (non-null) fragment that `hash` reports as `''`.
- *
- * @param options {object}
- * @param options.host {string} - The query's `host`.
- * @returns {string} The parsed URL's serialization.
- */
-export declare function serializedOnboardingHost({ host }: {
-    host: string;
-}): string;
-/**
- * Validates the account members a `WalletOnboardingQuery` carries and returns
- * them in the classified form: the account's did:webvh `did`, its `spaceId`,
- * the serialized `host`, and the account controller did:key. Compose and
- * classification share this one rule, so the two sides cannot drift.
- *
- * The `did` must be a did:webvh id: only a promoted account (one whose Space
- * controller is its published did:webvh) has the world-readable log the
- * enrollee verifies its approval from. The `controller` check is shape only
- * (a non-empty `did:key:` string) -- it is a discovery value the enrollee
- * stores, and the channel's trust comes from the ceremony's confirmation-code
- * comparison, not from any member of the query.
- *
- * @param options {object}
- * @param options.did {string | undefined}         the account's did:webvh id.
- * @param options.spaceId {string | undefined}     the account's Space id.
- * @param options.host {string | undefined}        the WAS server base URL.
- * @param options.controller {string | undefined}  the account controller
- *   did:key.
- * @returns {IWalletOnboardingRequest}
- */
-export declare function validatedOnboardingAccount({ did, spaceId, host, controller }: {
-    did?: string | undefined;
-    spaceId?: string | undefined;
-    host?: string | undefined;
-    controller?: string | undefined;
-}): IWalletOnboardingRequest;
-/**
- * INVITER: the VPR details body to store on the ephemeral exchange -- one
- * `WalletOnboardingQuery` and nothing else, since the query is one mental
- * model per exchange. The account members are validated by
- * {@link validatedOnboardingAccount} and the `host` is stored in its
- * serialized form ({@link serializedOnboardingHost}).
- *
- * @param options {object}
- * @param options.pointer {object}  the account pointer (keyring's
- *   `AccountPointer` shape: the inviter passes its session pointer straight
- *   in), whose `did` must already be the promoted did:webvh id.
- * @param options.controller {string}  the account controller did:key.
- * @returns {IVPRDetails}
- */
-export declare function composeWalletOnboardingRequest({ pointer, controller }: {
-    pointer: {
-        did?: string;
-        spaceId: string;
-        host: string;
-    };
-    controller: string;
-}): IVPRDetails;
-/**
- * ENROLLEE: extracts the wallet-onboarding request from a query set, when one
- * is present. Like an `AppConnectQuery`, a `WalletOnboardingQuery` is one
- * mental model per exchange: at most one may appear, and it must not be
- * combined with `QueryByExample`, standalone capability queries, or an
- * `AppConnectQuery` (a screen that asks the person to connect a wallet must
- * not simultaneously ask them to share credentials or grant capabilities).
- * Its account members must satisfy {@link validatedOnboardingAccount} (so a
- * query missing the pointer or the controller is malformed), and its `host` is
- * rewritten to its serialized form. Violations throw; classification-time
- * callers surface the throw as a malformed-request state.
- *
- * @param options {object}
- * @param options.queries {IVPRQuery[]}
- * @returns {IWalletOnboardingRequest | null}
- */
-export declare function walletOnboardingRequestOf({ queries }: {
-    queries: IVPRQuery[];
-}): IWalletOnboardingRequest | null;
-//# sourceMappingURL=onboarding.d.ts.map

package/dist/request/onboarding.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"onboarding.d.ts","sourceRoot":"","sources":["../../src/request/onboarding.ts"],"names":[],"mappings":"AAwCA,OAAO,KAAK,EACV,WAAW,EACX,SAAS,EAET,wBAAwB,EACzB,MAAM,YAAY,CAAA;AAEnB;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,wBAAwB,CAAC,EAAE,IAAI,EAAE,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAc3E;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,0BAA0B,CAAC,EACzC,GAAG,EACH,OAAO,EACP,IAAI,EACJ,UAAU,EACX,EAAE;IACD,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACzB,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAChC,GAAG,wBAAwB,CA6B3B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,8BAA8B,CAAC,EAC7C,OAAO,EACP,UAAU,EACX,EAAE;IACD,OAAO,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;IACxD,UAAU,EAAE,MAAM,CAAA;CACnB,GAAG,WAAW,CAMd;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,yBAAyB,CAAC,EACxC,OAAO,EACR,EAAE;IACD,OAAO,EAAE,SAAS,EAAE,CAAA;CACrB,GAAG,wBAAwB,GAAG,IAAI,CAkBlC"}