@learncard/openid4vc-plugin 0.1.2 → 0.2.0

package/dist/dcql/adapt.d.ts

@@ -34,10 +34,11 @@
  *   `DcqlMdocCredential` shape requires a CBOR-decoded namespace
  *   tree we don't compute.
  */
-import type { DcqlW3cVcCredential } from './types';
+import type { DcqlSdJwtVcCredential, DcqlW3cVcCredential } from './types';
+import type { SdJwtParser } from '../vp/select';
 /** Subset of {@link CandidateCredential} this adapter consumes. */
 export interface AdaptableCredential {
-    /** Wire-shape credential — string for JWT-VCs, object for LD-VCs. */
+    /** Wire-shape credential — string for JWT-VCs, object for LD-VCs, compact for SD-JWT. */
     credential: unknown;
     /**
      * Optional explicit format hint. When omitted the adapter infers
@@ -48,6 +49,16 @@ export interface AdaptableCredential {
      */
     format?: string;
 }
+export interface AdaptOptions {
+    /**
+     * Required when SD-JWT candidates are in the pool. Plugin-level
+     * callers wire this to `learnCard.invoke.parseSdJwtVc` (same
+     * runtime feature-detect convention as the PEX matcher); test
+     * callers can skip it when none of their fixtures are SD-JWT.
+     */
+    sdJwtParser?: SdJwtParser;
+}
+type AdaptedCredential = DcqlW3cVcCredential | DcqlSdJwtVcCredential;
 /**
  * Convert a single held credential into a `DcqlW3cVcCredential` ready
  * for `DcqlQuery.query()` to evaluate.
@@ -64,7 +75,7 @@ export interface AdaptableCredential {
  * caller to wrap in try/catch and degrade UX for "I have a weird
  * credential" cases that are otherwise harmless.
  */
-export declare const adaptCredentialForDcql: (candidate: AdaptableCredential) => DcqlW3cVcCredential | undefined;
+export declare const adaptCredentialForDcql: (candidate: AdaptableCredential, options?: AdaptOptions) => Promise<AdaptedCredential | undefined>;
 /**
  * Batch adapter — runs {@link adaptCredentialForDcql} over a candidate
  * pool, dropping any that don't normalize. Returns the filtered list
@@ -73,8 +84,9 @@ export declare const adaptCredentialForDcql: (candidate: AdaptableCredential) =>
  * present (the matcher only sees the normalized shape; submission
  * needs the original).
  */
-export declare const adaptCredentialsForDcql: (candidates: readonly AdaptableCredential[]) => Array<{
+export declare const adaptCredentialsForDcql: (candidates: readonly AdaptableCredential[], options?: AdaptOptions) => Promise<Array<{
     original: AdaptableCredential;
-    adapted: DcqlW3cVcCredential;
-}>;
+    adapted: AdaptedCredential;
+}>>;
+export {};
 //# sourceMappingURL=adapt.d.ts.map

package/dist/dcql/adapt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adapt.d.ts","sourceRoot":"","sources":["../../src/dcql/adapt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAEnD,mEAAmE;AACnE,MAAM,WAAW,mBAAmB;IAChC,qEAAqE;IACrE,UAAU,EAAE,OAAO,CAAC;IACpB;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,sBAAsB,cACpB,mBAAmB,KAC/B,mBAAmB,GAAG,SAaxB,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,eACpB,SAAS,mBAAmB,EAAE,KAC3C,KAAK,CAAC;IAAE,QAAQ,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,mBAAmB,CAAA;CAAE,CASvE,CAAC"}
+{"version":3,"file":"adapt.d.ts","sourceRoot":"","sources":["../../src/dcql/adapt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,OAAO,KAAK,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD,mEAAmE;AACnE,MAAM,WAAW,mBAAmB;IAChC,yFAAyF;IACzF,UAAU,EAAE,OAAO,CAAC;IACpB;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IACzB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;CAC7B;AAED,KAAK,iBAAiB,GAAG,mBAAmB,GAAG,qBAAqB,CAAC;AAErE;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,sBAAsB,cACpB,mBAAmB,YACrB,YAAY,KACtB,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAgBvC,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,eACpB,SAAS,mBAAmB,EAAE,YACjC,YAAY,KACtB,OAAO,CAAC,KAAK,CAAC;IAAE,QAAQ,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,CAAC,CAY9E,CAAC"}

package/dist/dcql/build.d.ts

@@ -48,8 +48,15 @@
 import type { UnsignedVP } from '@learncard/types';
 import type { AdaptableCredential } from './adapt';
 import type { DcqlQuery } from './types';
-/** Outer presentation envelope format produced for a DCQL response. */
-export type DcqlVpFormat = 'jwt_vp_json' | 'ldp_vp';
+import type { SdJwtDiscloseFrame } from '../vp/sign';
+/**
+ * Outer envelope format for a DCQL per-query response. The first two
+ * are W3C VP envelopes signed by the signing layer; the last two are
+ * SD-JWT-VC passthroughs that carry the compact form directly into the
+ * `vp_token` value (no VP envelope per OID4VP §6.1.1 — the issuer JWT
+ * + disclosures + KB-JWT IS the presentation).
+ */
+export type DcqlVpFormat = 'jwt_vp_json' | 'ldp_vp' | 'dc+sd-jwt' | 'vc+sd-jwt';
 /**
  * One holder pick: "this candidate satisfies this credential query."
  *
@@ -59,8 +66,14 @@ export type DcqlVpFormat = 'jwt_vp_json' | 'ldp_vp';
 export interface DcqlChosenCredential {
     /** Matches `DcqlQuery.credentials[N].id` from the verifier's query. */
     credentialQueryId: string;
-    /** Wire-shape credential (JWT-VC string or LD-VC object). */
+    /** Wire-shape credential (JWT-VC string, LD-VC object, or SD-JWT compact). */
     candidate: AdaptableCredential;
+    /**
+     * Optional per-claim consent frame, honored only when this entry
+     * resolves to an SD-JWT-VC passthrough. Omitted = release every
+     * disclosable claim (no selective disclosure).
+     */
+    disclose?: SdJwtDiscloseFrame;
 }
 export interface BuildDcqlPresentationsInput {
     /**
@@ -81,14 +94,29 @@ export interface BuildDcqlPresentationsInput {
      */
     makeId?: () => string;
 }
-/** One unsigned VP, ready for the signing layer. */
-export interface BuiltDcqlPresentation {
+/**
+ * Per-query build output. Discriminated by `kind`:
+ *
+ * - `vp` — verifiable presentation envelope (jwt_vp_json or ldp_vp).
+ *   The signing layer wraps the chosen credentials in `unsignedVp` and
+ *   produces a signed VP. This is the path for `jwt_vc_json` / `ldp_vc`
+ *   inner formats.
+ * - `sd-jwt-vc` — passthrough for `dc+sd-jwt` / `vc+sd-jwt` queries. The
+ *   compact SD-JWT-VC IS the presentation per OID4VP §6.1.1; the
+ *   signing layer asks `learnCard.invoke.presentSdJwtVc` to apply
+ *   selective disclosure + KB-JWT and emits the resulting compact string
+ *   as the `vp_token` value for this query id. DCQL's `multiple: true`
+ *   is not yet implemented for SD-JWT (one compact per query id).
+ */
+export type BuiltDcqlPresentation = BuiltDcqlVpPresentation | BuiltDcqlSdJwtPresentation;
+export interface BuiltDcqlVpPresentation {
+    kind: 'vp';
     /** Matches `DcqlQuery.credentials[N].id`. */
     credentialQueryId: string;
     /** Unsigned VP wrapping the chosen credentials for this query. */
     unsignedVp: UnsignedVP;
     /** Envelope format the signing layer should use. */
-    vpFormat: DcqlVpFormat;
+    vpFormat: 'jwt_vp_json' | 'ldp_vp';
     /**
      * Original wire-shape candidates packed into this VP, in the
      * order they appear in `unsignedVp.verifiableCredential`. The
@@ -97,7 +125,20 @@ export interface BuiltDcqlPresentation {
      */
     candidates: AdaptableCredential[];
 }
-export type BuildDcqlPresentationErrorCode = 'no_selections' | 'unknown_credential_query' | 'unsupported_format' | 'invalid_jwt_vc';
+export interface BuiltDcqlSdJwtPresentation {
+    kind: 'sd-jwt-vc';
+    /** Matches `DcqlQuery.credentials[N].id`. */
+    credentialQueryId: string;
+    /** Source compact SD-JWT-VC the holder chose. The signing layer feeds this into `presentSdJwtVc`. */
+    compact: string;
+    /** Format declared by the verifier on this query entry; passed back so the response can echo it. */
+    vpFormat: 'dc+sd-jwt' | 'vc+sd-jwt';
+    /** Original wire-shape candidates (always length-1 in this slice; `multiple: true` is a follow-up). */
+    candidates: AdaptableCredential[];
+    /** Per-claim consent frame from the holder UI, forwarded to the SD-JWT presenter at sign time. */
+    disclose?: SdJwtDiscloseFrame;
+}
+export type BuildDcqlPresentationErrorCode = 'no_selections' | 'unknown_credential_query' | 'unsupported_format' | 'invalid_jwt_vc' | 'invalid_sd_jwt_vc';
 export declare class BuildDcqlPresentationError extends Error {
     readonly code: BuildDcqlPresentationErrorCode;
     constructor(code: BuildDcqlPresentationErrorCode, message: string);

package/dist/dcql/build.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../src/dcql/build.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAMzC,uEAAuE;AACvE,MAAM,MAAM,YAAY,GAAG,aAAa,GAAG,QAAQ,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACjC,uEAAuE;IACvE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,6DAA6D;IAC7D,SAAS,EAAE,mBAAmB,CAAC;CAClC;AAED,MAAM,WAAW,2BAA2B;IACxC;;;;;OAKG;IACH,KAAK,EAAE,SAAS,CAAC;IAEjB,qEAAqE;IACrE,MAAM,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAExC,+EAA+E;IAC/E,MAAM,EAAE,MAAM,CAAC;IAEf;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;CACzB;AAED,oDAAoD;AACpD,MAAM,WAAW,qBAAqB;IAClC,6CAA6C;IAC7C,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kEAAkE;IAClE,UAAU,EAAE,UAAU,CAAC;IACvB,oDAAoD;IACpD,QAAQ,EAAE,YAAY,CAAC;IACvB;;;;;OAKG;IACH,UAAU,EAAE,mBAAmB,EAAE,CAAC;CACrC;AAMD,MAAM,MAAM,8BAA8B,GACpC,eAAe,GACf,0BAA0B,GAC1B,oBAAoB,GACpB,gBAAgB,CAAC;AAEvB,qBAAa,0BAA2B,SAAQ,KAAK;IACjD,QAAQ,CAAC,IAAI,EAAE,8BAA8B,CAAC;gBAElC,IAAI,EAAE,8BAA8B,EAAE,OAAO,EAAE,MAAM;CAKpE;AAMD;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,sBAAsB,UACxB,2BAA2B,KACnC,qBAAqB,EAwDvB,CAAC"}
+{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../src/dcql/build.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAMrD;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,GAAG,aAAa,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,CAAC;AAEhF;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACjC,uEAAuE;IACvE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,8EAA8E;IAC9E,SAAS,EAAE,mBAAmB,CAAC;IAC/B;;;;OAIG;IACH,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CACjC;AAED,MAAM,WAAW,2BAA2B;IACxC;;;;;OAKG;IACH,KAAK,EAAE,SAAS,CAAC;IAEjB,qEAAqE;IACrE,MAAM,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAExC,+EAA+E;IAC/E,MAAM,EAAE,MAAM,CAAC;IAEf;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;CACzB;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,qBAAqB,GAAG,uBAAuB,GAAG,0BAA0B,CAAC;AAEzF,MAAM,WAAW,uBAAuB;IACpC,IAAI,EAAE,IAAI,CAAC;IACX,6CAA6C;IAC7C,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kEAAkE;IAClE,UAAU,EAAE,UAAU,CAAC;IACvB,oDAAoD;IACpD,QAAQ,EAAE,aAAa,GAAG,QAAQ,CAAC;IACnC;;;;;OAKG;IACH,UAAU,EAAE,mBAAmB,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,0BAA0B;IACvC,IAAI,EAAE,WAAW,CAAC;IAClB,6CAA6C;IAC7C,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qGAAqG;IACrG,OAAO,EAAE,MAAM,CAAC;IAChB,oGAAoG;IACpG,QAAQ,EAAE,WAAW,GAAG,WAAW,CAAC;IACpC,uGAAuG;IACvG,UAAU,EAAE,mBAAmB,EAAE,CAAC;IAClC,kGAAkG;IAClG,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CACjC;AAMD,MAAM,MAAM,8BAA8B,GACpC,eAAe,GACf,0BAA0B,GAC1B,oBAAoB,GACpB,gBAAgB,GAChB,mBAAmB,CAAC;AAE1B,qBAAa,0BAA2B,SAAQ,KAAK;IACjD,QAAQ,CAAC,IAAI,EAAE,8BAA8B,CAAC;gBAElC,IAAI,EAAE,8BAA8B,EAAE,OAAO,EAAE,MAAM;CAKpE;AAMD;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,sBAAsB,UACxB,2BAA2B,KACnC,qBAAqB,EA4DvB,CAAC"}

package/dist/dcql/index.d.ts

@@ -10,9 +10,9 @@
  */
 export type { DcqlQuery, DcqlQueryResult, DcqlCredential, DcqlW3cVcCredential, DcqlSdJwtVcCredential, DcqlMdocCredential, DcqlPresentation, DcqlPresentationResult, DcqlPresentationEntry, } from './types';
 export { parseDcqlQuery } from './parse';
-export { adaptCredentialForDcql, adaptCredentialsForDcql, type AdaptableCredential, } from './adapt';
+export { adaptCredentialForDcql, adaptCredentialsForDcql, type AdaptableCredential } from './adapt';
 export { selectCredentialsForDcql, type DcqlSelectionResult, type DcqlCredentialMatch, } from './select';
-export { buildDcqlPresentations, BuildDcqlPresentationError, type BuildDcqlPresentationsInput, type BuiltDcqlPresentation, type DcqlChosenCredential, type DcqlVpFormat, type BuildDcqlPresentationErrorCode, } from './build';
-export { signDcqlPresentations, buildDcqlResponse, assembleDcqlVpToken, type DcqlSignedPresentation, type DcqlInnerVpToken, type DcqlResponse, type SignDcqlPresentationsInput, type SignDcqlPresentationsHelpers, } from './respond';
+export { buildDcqlPresentations, BuildDcqlPresentationError, type BuildDcqlPresentationsInput, type BuiltDcqlPresentation, type BuiltDcqlVpPresentation, type BuiltDcqlSdJwtPresentation, type DcqlChosenCredential, type DcqlVpFormat, type BuildDcqlPresentationErrorCode, } from './build';
+export { signDcqlPresentations, buildDcqlResponse, assembleDcqlVpToken, DcqlSignError, type DcqlSignedPresentation, type DcqlInnerVpToken, type DcqlResponse, type SignDcqlPresentationsInput, type SignDcqlPresentationsHelpers, } from './respond';
 export { buildDcqlQuery, requestW3cVc, type RequestW3cVcSpec, type RequestW3cVcClaim, } from './compose';
 //# sourceMappingURL=index.d.ts.map

package/dist/dcql/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/dcql/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,YAAY,EACR,SAAS,EACT,eAAe,EACf,cAAc,EACd,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,EAClB,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,GACxB,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAEzC,OAAO,EACH,sBAAsB,EACtB,uBAAuB,EACvB,KAAK,mBAAmB,GAC3B,MAAM,SAAS,CAAC;AAEjB,OAAO,EACH,wBAAwB,EACxB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,GAC3B,MAAM,UAAU,CAAC;AAElB,OAAO,EACH,sBAAsB,EACtB,0BAA0B,EAC1B,KAAK,2BAA2B,EAChC,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,YAAY,EACjB,KAAK,8BAA8B,GACtC,MAAM,SAAS,CAAC;AAEjB,OAAO,EACH,qBAAqB,EACrB,iBAAiB,EACjB,mBAAmB,EACnB,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,0BAA0B,EAC/B,KAAK,4BAA4B,GACpC,MAAM,WAAW,CAAC;AAGnB,OAAO,EACH,cAAc,EACd,YAAY,EACZ,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,GACzB,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/dcql/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,YAAY,EACR,SAAS,EACT,eAAe,EACf,cAAc,EACd,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,EAClB,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,GACxB,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAEzC,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,KAAK,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAEpG,OAAO,EACH,wBAAwB,EACxB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,GAC3B,MAAM,UAAU,CAAC;AAElB,OAAO,EACH,sBAAsB,EACtB,0BAA0B,EAC1B,KAAK,2BAA2B,EAChC,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EACzB,KAAK,YAAY,EACjB,KAAK,8BAA8B,GACtC,MAAM,SAAS,CAAC;AAEjB,OAAO,EACH,qBAAqB,EACrB,iBAAiB,EACjB,mBAAmB,EACnB,aAAa,EACb,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,0BAA0B,EAC/B,KAAK,4BAA4B,GACpC,MAAM,WAAW,CAAC;AAGnB,OAAO,EACH,cAAc,EACd,YAAY,EACZ,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,GACzB,MAAM,WAAW,CAAC"}

package/dist/dcql/respond.d.ts

@@ -32,9 +32,10 @@
  * Submission to `response_uri` happens in the next slice via an
  * extension to `vp/submit.ts` that takes an object-form `vp_token`.
  */
-import { type LdpVpSigner } from '../vp/sign';
+import { type LdpVpSigner, type SdJwtPresenter } from '../vp/sign';
 import type { ProofJwtSigner } from '../vci/types';
 import type { BuiltDcqlPresentation } from './build';
+export type { SdJwtPresenter };
 export interface SignDcqlPresentationsInput {
     /** Output of `buildDcqlPresentations(...)`. */
     built: readonly BuiltDcqlPresentation[];
@@ -52,6 +53,8 @@ export interface SignDcqlPresentationsHelpers {
     jwtSigner?: ProofJwtSigner;
     /** Required when any `built[].vpFormat === 'ldp_vp'`. */
     ldpVpSigner?: LdpVpSigner;
+    /** Required when any `built[].kind === 'sd-jwt-vc'`. */
+    sdJwtPresenter?: SdJwtPresenter;
 }
 /**
  * One signed presentation in a DCQL response. The value type is the
@@ -80,15 +83,25 @@ export interface DcqlResponse {
      */
     presentations: DcqlSignedPresentation[];
 }
+export declare class DcqlSignError extends Error {
+    readonly code: 'missing_sd_jwt_presenter' | 'sd_jwt_present_failed';
+    constructor(code: DcqlSignError['code'], message: string, options?: {
+        cause?: unknown;
+    });
+}
 /**
  * Sign each unsigned VP from {@link buildDcqlPresentations} using the
  * appropriate signer (jwt for jwt_vp_json, ldp for ldp_vp), preserving
- * the per-query `credentialQueryId` association.
+ * the per-query `credentialQueryId` association. SD-JWT-VC entries
+ * (`kind: 'sd-jwt-vc'`) are routed through `helpers.sdJwtPresenter`
+ * instead of the VP signing path — the compact form they produce IS
+ * the vp_token value for that query id.
  *
- * Throws `VpSignError` (the same code path as PEX signing) on signer
- * misconfiguration; the per-query signing is sequential rather than
- * parallel both because Ed25519 signing is fast (sub-ms per VP) and
- * because some host signers maintain ordered nonce state.
+ * Throws `VpSignError` for VP signing failures and `DcqlSignError`
+ * for SD-JWT presenter failures. Per-query signing is sequential
+ * rather than parallel both because Ed25519 signing is fast (sub-ms
+ * per VP) and because some host signers maintain ordered nonce
+ * state.
  */
 export declare const signDcqlPresentations: (input: SignDcqlPresentationsInput, helpers: SignDcqlPresentationsHelpers) => Promise<DcqlSignedPresentation[]>;
 /**

package/dist/dcql/respond.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"respond.d.ts","sourceRoot":"","sources":["../../src/dcql/respond.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,EAEH,KAAK,WAAW,EACnB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAMrD,MAAM,WAAW,0BAA0B;IACvC,+CAA+C;IAC/C,KAAK,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACxC,oEAAoE;IACpE,QAAQ,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,KAAK,EAAE,MAAM,CAAC;IACd,+BAA+B;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,GAAG,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,4BAA4B;IACzC,8DAA8D;IAC9D,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,yDAAyD;IACzD,WAAW,CAAC,EAAE,WAAW,CAAC;CAC7B;AAED;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,OAAO,kBAAkB,EAAE,EAAE,CAAC;AAEtE,MAAM,WAAW,sBAAsB;IACnC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,gBAAgB,CAAC;IAC1B,QAAQ,EAAE,qBAAqB,CAAC,UAAU,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,YAAY;IACzB;;;;;OAKG;IACH,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAE1C;;;;OAIG;IACH,aAAa,EAAE,sBAAsB,EAAE,CAAC;CAC3C;AAMD;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,UACvB,0BAA0B,WACxB,4BAA4B,KACtC,OAAO,CAAC,sBAAsB,EAAE,CA8BlC,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,UACnB,0BAA0B,WACxB,4BAA4B,KACtC,OAAO,CAAC,YAAY,CAMtB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,mBAAmB,kBACb,SAAS,sBAAsB,EAAE,KACjD,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAMjC,CAAC"}
+{"version":3,"file":"respond.d.ts","sourceRoot":"","sources":["../../src/dcql/respond.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,OAAO,EAAoB,KAAK,WAAW,EAAE,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AACrF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAErD,YAAY,EAAE,cAAc,EAAE,CAAC;AAM/B,MAAM,WAAW,0BAA0B;IACvC,+CAA+C;IAC/C,KAAK,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACxC,oEAAoE;IACpE,QAAQ,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,KAAK,EAAE,MAAM,CAAC;IACd,+BAA+B;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,GAAG,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,4BAA4B;IACzC,8DAA8D;IAC9D,SAAS,CAAC,EAAE,cAAc,CAAC;IAC3B,yDAAyD;IACzD,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,wDAAwD;IACxD,cAAc,CAAC,EAAE,cAAc,CAAC;CACnC;AAED;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,OAAO,kBAAkB,EAAE,EAAE,CAAC;AAEtE,MAAM,WAAW,sBAAsB;IACnC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,gBAAgB,CAAC;IAC1B,QAAQ,EAAE,qBAAqB,CAAC,UAAU,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,YAAY;IACzB;;;;;OAKG;IACH,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAE1C;;;;OAIG;IACH,aAAa,EAAE,sBAAsB,EAAE,CAAC;CAC3C;AAMD,qBAAa,aAAc,SAAQ,KAAK;IACpC,QAAQ,CAAC,IAAI,EAAE,0BAA0B,GAAG,uBAAuB,CAAC;gBAExD,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAQ1F;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,qBAAqB,UACvB,0BAA0B,WACxB,4BAA4B,KACtC,OAAO,CAAC,sBAAsB,EAAE,CA6BlC,CAAC;AAsCF;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,UACnB,0BAA0B,WACxB,4BAA4B,KACtC,OAAO,CAAC,YAAY,CAMtB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,mBAAmB,kBACb,SAAS,sBAAsB,EAAE,KACjD,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAMjC,CAAC"}

package/dist/dcql/select.d.ts

@@ -1,5 +1,15 @@
 import { type AdaptableCredential } from './adapt';
 import type { DcqlQueryResult } from './types';
+import type { SdJwtParser } from '../vp/select';
+export interface SelectForDcqlOptions {
+    /**
+     * Required when SD-JWT candidates are in the pool; ignored otherwise.
+     * Same runtime-feature-detect injection seam as the PEX matcher's
+     * `SelectCredentialsOptions.sdJwtParser`. Plugin-level callers wire
+     * this to `learnCard.invoke.parseSdJwtVc`.
+     */
+    sdJwtParser?: SdJwtParser;
+}
 /**
  * Per-credential-query result. Each `DcqlQuery.credentials[]` entry
  * gets exactly one of these in `DcqlSelectionResult.matches[]`,
@@ -59,5 +69,5 @@ export interface DcqlSelectionResult {
  * (sd-jwt-vc, mso_mdoc — see `./adapt.ts`) without erroring; those
  * simply don't appear in `matches[*].candidates`.
  */
-export declare const selectCredentialsForDcql: (candidates: readonly AdaptableCredential[], query: import("./types").DcqlQuery) => DcqlSelectionResult;
+export declare const selectCredentialsForDcql: (candidates: readonly AdaptableCredential[], query: import("./types").DcqlQuery, options?: SelectForDcqlOptions) => Promise<DcqlSelectionResult>;
 //# sourceMappingURL=select.d.ts.map

package/dist/dcql/select.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"select.d.ts","sourceRoot":"","sources":["../../src/dcql/select.ts"],"names":[],"mappings":"AAiCA,OAAO,EAA2B,KAAK,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,KAAK,EAAa,eAAe,EAAE,MAAM,SAAS,CAAC;AAM1D;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAChC,uEAAuE;IACvE,iBAAiB,EAAE,MAAM,CAAC;IAE1B;;;;OAIG;IACH,UAAU,EAAE,mBAAmB,EAAE,CAAC;IAElC,oEAAoE;IACpE,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAChC;;;;;OAKG;IACH,UAAU,EAAE,OAAO,CAAC;IAEpB,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAE7C,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;;;;OAKG;IACH,GAAG,EAAE,eAAe,CAAC;CACxB;AAMD;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,wBAAwB,eACrB,SAAS,mBAAmB,EAAE,SACnC,OAAO,SAAS,EAAE,SAAS,KACnC,mBAmDF,CAAC"}
+{"version":3,"file":"select.d.ts","sourceRoot":"","sources":["../../src/dcql/select.ts"],"names":[],"mappings":"AAiCA,OAAO,EAA2B,KAAK,mBAAmB,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,KAAK,EAAa,eAAe,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD,MAAM,WAAW,oBAAoB;IACjC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;CAC7B;AAMD;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAChC,uEAAuE;IACvE,iBAAiB,EAAE,MAAM,CAAC;IAE1B;;;;OAIG;IACH,UAAU,EAAE,mBAAmB,EAAE,CAAC;IAElC,oEAAoE;IACpE,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAChC;;;;;OAKG;IACH,UAAU,EAAE,OAAO,CAAC;IAEpB,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAE7C,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;;;;OAKG;IACH,GAAG,EAAE,eAAe,CAAC;CACxB;AAMD;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,wBAAwB,eACrB,SAAS,mBAAmB,EAAE,SACnC,OAAO,SAAS,EAAE,SAAS,YACzB,oBAAoB,KAC9B,OAAO,CAAC,mBAAmB,CAqD7B,CAAC"}