@learncard/openid4vc-plugin 0.0.1

package/dist/offer/normalize.d.ts

@@ -0,0 +1,15 @@
+import { CredentialOffer } from './types';
+/**
+ * Normalize a raw credential-offer JSON payload (Draft 11 or Draft 13)
+ * into the Draft 13 shape the rest of the plugin consumes.
+ *
+ * - `credentials` (Draft 11) → `credential_configuration_ids` (Draft 13).
+ * - `user_pin_required: true` (Draft 11) → synthetic `tx_code: {}` (Draft 13).
+ *
+ * Draft 11 `credentials` entries that are objects (in-line format metadata
+ * rather than configuration ids) are preserved as their `id` or `types[0]`
+ * fall-back string, with a warning logged. Wallets that need the full inline
+ * metadata should fetch the issuer metadata and match by `format`.
+ */
+export declare const normalizeCredentialOffer: (raw: unknown) => CredentialOffer;
+//# sourceMappingURL=normalize.d.ts.map

package/dist/offer/normalize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize.d.ts","sourceRoot":"","sources":["../../src/offer/normalize.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,eAAe,EAMlB,MAAM,SAAS,CAAC;AAKjB;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,wBAAwB,QAAS,OAAO,KAAG,eA+EvD,CAAC"}

package/dist/offer/parse.d.ts

@@ -0,0 +1,24 @@
+import { ParsedCredentialOfferUri } from './types';
+/**
+ * Parse an OpenID4VCI Credential Offer URI.
+ *
+ * Accepts:
+ * - `openid-credential-offer://?credential_offer=<url-encoded JSON>`
+ * - `openid-credential-offer://?credential_offer_uri=<url-encoded https URL>`
+ * - `haip://` variants of the above
+ * - A bare query string (`?credential_offer=...` or `credential_offer=...`)
+ *
+ * Does not hit the network. For `by_reference` offers, use
+ * {@link resolveCredentialOfferByReference} with a fetch implementation.
+ *
+ * @throws {CredentialOfferParseError}
+ */
+export declare const parseCredentialOfferUri: (input: string) => ParsedCredentialOfferUri;
+/**
+ * Fetch a by-reference credential offer and normalize it.
+ *
+ * @param fetchImpl - Defaults to `globalThis.fetch` when available.
+ * @throws {CredentialOfferParseError}
+ */
+export declare const resolveCredentialOfferByReference: (uri: string, fetchImpl?: typeof fetch) => Promise<ParsedCredentialOfferUri>;
+//# sourceMappingURL=parse.d.ts.map

package/dist/offer/parse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse.d.ts","sourceRoot":"","sources":["../../src/offer/parse.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,wBAAwB,EAC3B,MAAM,SAAS,CAAC;AAGjB;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,uBAAuB,UAAW,MAAM,KAAG,wBA+CvD,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,iCAAiC,QACrC,MAAM,cACA,OAAO,KAAK,KACxB,OAAO,CAAC,wBAAwB,CA6ClC,CAAC"}

package/dist/offer/types.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Domain types for OpenID4VCI Credential Offers.
+ *
+ * Normalized to OID4VCI Draft 13. Draft 11 offers (still widely deployed)
+ * are accepted at parse time and normalized to the Draft 13 shape, so the
+ * rest of the wallet only has to reason about one shape.
+ *
+ * Spec: https://openid.net/specs/openid-4-verifiable-credential-issuance-1_0.html
+ */
+/** OID4VCI Draft 13 pre-authorized code grant-type URN. */
+export declare const PRE_AUTHORIZED_CODE_GRANT = "urn:ietf:params:oauth:grant-type:pre-authorized_code";
+/** Transaction-code metadata (replaces Draft 11's boolean `user_pin_required`). */
+export interface TxCode {
+    /** `numeric` or `text`. Defaults to `numeric`. */
+    input_mode?: 'numeric' | 'text';
+    /** Expected length of the transaction code. Optional. */
+    length?: number;
+    /** Human-readable hint shown to the user. Optional. */
+    description?: string;
+}
+export interface PreAuthorizedCodeGrant {
+    /** The pre-authorized code the wallet exchanges for an access token. */
+    'pre-authorized_code': string;
+    /** If present, the wallet must collect a tx code from the user. */
+    tx_code?: TxCode;
+    /** Minimum seconds the wallet should wait between deferred polls. */
+    interval?: number;
+    /** Authorization server to use if the issuer delegates token issuance. */
+    authorization_server?: string;
+}
+export interface AuthorizationCodeGrant {
+    /** Opaque state the wallet must forward in the authorization request. */
+    issuer_state?: string;
+    /** Authorization server to use if the issuer delegates authorization. */
+    authorization_server?: string;
+}
+export interface CredentialOfferGrants {
+    [PRE_AUTHORIZED_CODE_GRANT]?: PreAuthorizedCodeGrant;
+    authorization_code?: AuthorizationCodeGrant;
+}
+/**
+ * Normalized Draft 13 Credential Offer.
+ *
+ * `credential_configuration_ids` is the Draft 13 field name. Draft 11
+ * `credentials` (array of strings or objects) is normalized into this field
+ * by {@link normalizeCredentialOffer}.
+ */
+export interface CredentialOffer {
+    credential_issuer: string;
+    credential_configuration_ids: string[];
+    grants?: CredentialOfferGrants;
+}
+/**
+ * Raw Draft 11 shape accepted at parse time. Everything else downstream
+ * should consume the normalized {@link CredentialOffer}.
+ */
+export interface RawDraft11CredentialOffer {
+    credential_issuer: string;
+    credentials: Array<string | {
+        format: string;
+        types?: string[];
+        [k: string]: unknown;
+    }>;
+    grants?: {
+        [PRE_AUTHORIZED_CODE_GRANT]?: {
+            'pre-authorized_code': string;
+            user_pin_required?: boolean;
+            interval?: number;
+        };
+        authorization_code?: AuthorizationCodeGrant;
+    };
+}
+/** Result of parsing an `openid-credential-offer://` URI. */
+export type ParsedCredentialOfferUri = {
+    kind: 'by_value';
+    offer: CredentialOffer;
+} | {
+    kind: 'by_reference';
+    uri: string;
+};
+/** Schemes recognized as carrying OID4VCI credential offers. */
+export declare const CREDENTIAL_OFFER_SCHEMES: readonly ["openid-credential-offer", "haip"];
+export type CredentialOfferScheme = (typeof CREDENTIAL_OFFER_SCHEMES)[number];
+/**
+ * Thrown when an offer URI or payload is malformed. Carries a stable `code`
+ * so UI layers can map to friendly copy without string-matching messages.
+ */
+export declare class CredentialOfferParseError extends Error {
+    readonly code: 'invalid_uri' | 'missing_offer' | 'both_offer_and_uri' | 'invalid_json' | 'missing_issuer' | 'missing_credentials' | 'invalid_grants';
+    constructor(code: CredentialOfferParseError['code'], message: string);
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/offer/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/offer/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,2DAA2D;AAC3D,eAAO,MAAM,yBAAyB,yDACoB,CAAC;AAE3D,mFAAmF;AACnF,MAAM,WAAW,MAAM;IACnB,kDAAkD;IAClD,UAAU,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;IAChC,yDAAyD;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,sBAAsB;IACnC,wEAAwE;IACxE,qBAAqB,EAAE,MAAM,CAAC;IAC9B,mEAAmE;IACnE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,oBAAoB,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,sBAAsB;IACnC,yEAAyE;IACzE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yEAAyE;IACzE,oBAAoB,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,qBAAqB;IAClC,CAAC,yBAAyB,CAAC,CAAC,EAAE,sBAAsB,CAAC;IACrD,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;CAC/C;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC5B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,4BAA4B,EAAE,MAAM,EAAE,CAAC;IACvC,MAAM,CAAC,EAAE,qBAAqB,CAAC;CAClC;AAED;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACtC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,KAAK,CAAC,MAAM,GAAG;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC,CAAC;IACxF,MAAM,CAAC,EAAE;QACL,CAAC,yBAAyB,CAAC,CAAC,EAAE;YAC1B,qBAAqB,EAAE,MAAM,CAAC;YAC9B,iBAAiB,CAAC,EAAE,OAAO,CAAC;YAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;SACrB,CAAC;QACF,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;KAC/C,CAAC;CACL;AAED,6DAA6D;AAC7D,MAAM,MAAM,wBAAwB,GAC9B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,eAAe,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5C,gEAAgE;AAChE,eAAO,MAAM,wBAAwB,8CAI3B,CAAC;AAEX,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9E;;;GAGG;AACH,qBAAa,yBAA0B,SAAQ,KAAK;IAChD,QAAQ,CAAC,IAAI,EACP,aAAa,GACb,eAAe,GACf,oBAAoB,GACpB,cAAc,GACd,gBAAgB,GAChB,qBAAqB,GACrB,gBAAgB,CAAC;gBAEX,IAAI,EAAE,yBAAyB,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM;CAKvE"}