@nmshd/consumption 7.0.0 → 7.1.0-openid4vc.1

package/dist/modules/openid4vc/local/Holder.d.ts

@@ -0,0 +1,34 @@
+import { X509Module } from "@credo-ts/core";
+import { OpenId4VcModule, type OpenId4VciMetadata, type OpenId4VciResolvedCredentialOffer, type OpenId4VpResolvedAuthorizationRequest } from "@credo-ts/openid4vc";
+import { AccountController } from "@nmshd/transport";
+import { AttributesController, OwnIdentityAttribute } from "../../attributes";
+import { BaseAgent } from "./BaseAgent";
+declare function getOpenIdHolderModules(): {
+    readonly openid4vc: OpenId4VcModule<null, null>;
+    readonly x509: X509Module;
+};
+export declare class Holder extends BaseAgent<ReturnType<typeof getOpenIdHolderModules>> {
+    client: {
+        clientId: string;
+        redirectUri: string;
+    };
+    constructor(accountController: AccountController, attributeController: AttributesController);
+    getVerifiableCredentials(ids: string[] | undefined): Promise<any[]>;
+    resolveCredentialOffer(credentialOffer: string): Promise<OpenId4VciResolvedCredentialOffer>;
+    resolveIssuerMetadata(credentialIssuer: string): Promise<OpenId4VciMetadata>;
+    initiateAuthorization(resolvedCredentialOffer: OpenId4VciResolvedCredentialOffer, credentialsToRequest: string[]): Promise<any>;
+    requestAndStoreCredentials(resolvedCredentialOffer: OpenId4VciResolvedCredentialOffer, options: {
+        clientId?: string;
+        codeVerifier?: string;
+        credentialsToRequest: string[];
+        code?: string;
+        redirectUri?: string;
+        txCode?: string;
+    }): Promise<OwnIdentityAttribute[]>;
+    resolveProofRequest(proofRequest: string): Promise<any>;
+    acceptPresentationRequest(resolvedPresentationRequest: OpenId4VpResolvedAuthorizationRequest): Promise<any>;
+    exit(): Promise<any>;
+    restart(): Promise<any>;
+}
+export {};
+//# sourceMappingURL=Holder.d.ts.map

package/dist/modules/openid4vc/local/Holder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Holder.d.ts","sourceRoot":"","sources":["../../../../src/modules/openid4vc/local/Holder.ts"],"names":[],"mappings":"AAAA,OAAO,EAYH,UAAU,EACb,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACH,eAAe,EAIf,KAAK,kBAAkB,EACvB,KAAK,iCAAiC,EACtC,KAAK,qCAAqC,EAC7C,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGxC,iBAAS,sBAAsB;;;EAW9B;AAED,qBAAa,MAAO,SAAQ,SAAS,CAAC,UAAU,CAAC,OAAO,sBAAsB,CAAC,CAAC;IACrE,MAAM;;;MAGX;gBAEiB,iBAAiB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,oBAAoB;IAIrF,wBAAwB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IASnE,sBAAsB,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,iCAAiC,CAAC;IAI3F,qBAAqB,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAI5E,qBAAqB,CAAC,uBAAuB,EAAE,iCAAiC,EAAE,oBAAoB,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IAiC/H,0BAA0B,CACnC,uBAAuB,EAAE,iCAAiC,EAC1D,OAAO,EAAE;QACL,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,oBAAoB,EAAE,MAAM,EAAE,CAAC;QAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,MAAM,CAAC,EAAE,MAAM,CAAC;KACnB,GACF,OAAO,CAAC,oBAAoB,EAAE,CAAC;IA2HrB,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAMvD,yBAAyB,CAAC,2BAA2B,EAAE,qCAAqC,GAAG,OAAO,CAAC,GAAG,CAAC;IAuD3G,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC;IAKpB,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC;CAGvC"}

package/dist/modules/openid4vc/local/Holder.js

@@ -0,0 +1,225 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Holder = void 0;
+const core_1 = require("@credo-ts/core");
+const openid4vc_1 = require("@credo-ts/openid4vc");
+const BaseAgent_1 = require("./BaseAgent");
+function getOpenIdHolderModules() {
+    return {
+        openid4vc: new openid4vc_1.OpenId4VcModule(),
+        x509: new core_1.X509Module({
+            getTrustedCertificatesForVerification: (_agentContext, { certificateChain, verification }) => {
+                // eslint-disable-next-line no-console
+                console.log(`dyncamically trusting certificate ${certificateChain[0].getIssuerNameField("C")} for verification of ${verification.type}`);
+                return [certificateChain[0].toString("pem")];
+            }
+        })
+    };
+}
+class Holder extends BaseAgent_1.BaseAgent {
+    constructor(accountController, attributeController) {
+        super(3000, `OpenId4VcHolder ${Math.random().toString()}`, getOpenIdHolderModules(), accountController, attributeController);
+        this.client = {
+            clientId: "wallet",
+            redirectUri: "http://localhost:3000/redirect"
+        };
+    }
+    async getVerifiableCredentials(ids) {
+        // eslint-disable-next-line @typescript-eslint/no-unnecessary-type-assertion
+        const storageService = this.agent.dependencyManager.resolve(core_1.InjectionSymbols.StorageService);
+        const allCredentials = await storageService.getAllAsAttributes(this.agent.context, core_1.SdJwtVcRecord);
+        if (!ids)
+            return allCredentials;
+        return allCredentials.filter((vc) => ids.includes(vc.id.toString()));
+    }
+    async resolveCredentialOffer(credentialOffer) {
+        return await this.agent.openid4vc.holder.resolveCredentialOffer(credentialOffer);
+    }
+    async resolveIssuerMetadata(credentialIssuer) {
+        return await this.agent.openid4vc.holder.resolveIssuerMetadata(credentialIssuer);
+    }
+    async initiateAuthorization(resolvedCredentialOffer, credentialsToRequest) {
+        const grants = resolvedCredentialOffer.credentialOfferPayload.grants;
+        if (grants?.[openid4vc_1.preAuthorizedCodeGrantIdentifier]) {
+            return {
+                authorizationFlow: "PreAuthorized",
+                preAuthorizedCode: grants[openid4vc_1.preAuthorizedCodeGrantIdentifier]["pre-authorized_code"]
+            };
+        }
+        if (resolvedCredentialOffer.credentialOfferPayload.grants?.[openid4vc_1.authorizationCodeGrantIdentifier]) {
+            const resolvedAuthorizationRequest = await this.agent.openid4vc.holder.resolveOpenId4VciAuthorizationRequest(resolvedCredentialOffer, {
+                clientId: this.client.clientId,
+                redirectUri: this.client.redirectUri,
+                scope: Object.entries(resolvedCredentialOffer.offeredCredentialConfigurations)
+                    .map(([id, value]) => (credentialsToRequest.includes(id) ? value.scope : undefined))
+                    .filter((v) => Boolean(v))
+            });
+            if (resolvedAuthorizationRequest.authorizationFlow === openid4vc_1.OpenId4VciAuthorizationFlow.PresentationDuringIssuance) {
+                return {
+                    ...resolvedAuthorizationRequest,
+                    authorizationFlow: `${openid4vc_1.OpenId4VciAuthorizationFlow.PresentationDuringIssuance}`
+                };
+            }
+            return {
+                ...resolvedAuthorizationRequest,
+                authorizationFlow: `${openid4vc_1.OpenId4VciAuthorizationFlow.Oauth2Redirect}`
+            };
+        }
+        throw new Error("Unsupported grant type");
+    }
+    async requestAndStoreCredentials(resolvedCredentialOffer, options) {
+        const tokenResponse = await this.agent.openid4vc.holder.requestToken(options.code && options.clientId
+            ? {
+                resolvedCredentialOffer,
+                clientId: options.clientId,
+                codeVerifier: options.codeVerifier,
+                code: options.code,
+                redirectUri: options.redirectUri
+            }
+            : {
+                resolvedCredentialOffer,
+                txCode: options.txCode
+            });
+        const credentialResponse = await this.agent.openid4vc.holder.requestCredentials({
+            resolvedCredentialOffer,
+            clientId: options.clientId,
+            credentialConfigurationIds: options.credentialsToRequest,
+            credentialBindingResolver: async ({ supportedDidMethods, supportsAllDidMethods, proofTypes }) => {
+                const key = await this.agent.kms.createKeyForSignatureAlgorithm({
+                    algorithm: proofTypes.jwt?.supportedSignatureAlgorithms[0] ?? "EdDSA"
+                });
+                const publicJwk = core_1.Kms.PublicJwk.fromPublicJwk(key.publicJwk);
+                if (supportsAllDidMethods || supportedDidMethods?.includes("did:key")) {
+                    await this.agent.dids.create({
+                        method: "key",
+                        options: {
+                            keyId: key.keyId
+                        }
+                    });
+                    const didKey = new core_1.DidKey(publicJwk);
+                    return {
+                        method: "did",
+                        didUrls: [`${didKey.did}#${didKey.publicJwk.fingerprint}`]
+                    };
+                }
+                if (supportedDidMethods?.includes("did:jwk")) {
+                    const didJwk = core_1.DidJwk.fromPublicJwk(publicJwk);
+                    await this.agent.dids.create({
+                        method: "jwk",
+                        options: {
+                            keyId: key.keyId
+                        }
+                    });
+                    return {
+                        method: "did",
+                        didUrls: [`${didJwk.did}#0`]
+                    };
+                }
+                // We fall back on jwk binding
+                return {
+                    method: "jwk",
+                    keys: [publicJwk]
+                };
+            },
+            ...tokenResponse
+        });
+        this.agent.config.logger.info("Credential response:", credentialResponse);
+        const storedCredentials = await Promise.all(credentialResponse.credentials.map((response) => {
+            // TODO: batch issuance not yet supported
+            const credential = response.credentials[0];
+            // eslint-disable-next-line @typescript-eslint/no-unnecessary-type-assertion
+            const enmeshedStorageService = this.agent.dependencyManager.resolve(core_1.InjectionSymbols.StorageService);
+            let credentialKey = "";
+            for (const resolved in resolvedCredentialOffer.offeredCredentialConfigurations) {
+                credentialKey = resolved;
+            }
+            const displayInfo = resolvedCredentialOffer.offeredCredentialConfigurations[credentialKey].display;
+            // if the displayInfo does not provide a logo - we try to load a logo from the issuers attributes
+            if (displayInfo !== undefined &&
+                displayInfo[0]?.logo === undefined &&
+                resolvedCredentialOffer.metadata.credentialIssuer.display !== undefined &&
+                resolvedCredentialOffer.metadata.credentialIssuer.display?.[0] !== undefined &&
+                resolvedCredentialOffer.metadata.credentialIssuer.display?.[0]?.["logo"] !== undefined) {
+                const logoInformation = resolvedCredentialOffer.metadata.credentialIssuer.display?.[0]?.["logo"];
+                displayInfo[0]["logo"] = logoInformation;
+            }
+            if (credential.claimFormat === core_1.ClaimFormat.MsoMdoc) {
+                return enmeshedStorageService.saveWithDisplay(this.agent.context, credential.base64Url, credential.claimFormat.toString(), JSON.stringify(displayInfo), credentialKey);
+            }
+            else if (credential.claimFormat === core_1.ClaimFormat.SdJwtDc) {
+                return enmeshedStorageService.saveWithDisplay(this.agent.context, credential.compact, credential.claimFormat.toString(), JSON.stringify(displayInfo), credentialKey);
+            }
+            else if (credential.claimFormat === core_1.ClaimFormat.SdJwtW3cVc) {
+                return enmeshedStorageService.saveWithDisplay(this.agent.context, credential.encoded, credential.claimFormat.toString(), JSON.stringify(displayInfo), credentialKey);
+            }
+            throw new Error("Unsupported credential format");
+        }));
+        this.agent.config.logger.info(`Stored credentials: ${JSON.stringify(storedCredentials)}`);
+        return storedCredentials;
+    }
+    async resolveProofRequest(proofRequest) {
+        const resolvedProofRequest = await this.agent.openid4vc.holder.resolveOpenId4VpAuthorizationRequest(proofRequest);
+        return resolvedProofRequest;
+    }
+    async acceptPresentationRequest(resolvedPresentationRequest) {
+        if (!resolvedPresentationRequest.presentationExchange && !resolvedPresentationRequest.dcql) {
+            throw new Error("Missing presentation exchange or dcql on resolved authorization request");
+        }
+        // This fix ensures that the credential records which have been loaded here actually do provide the encoded() method
+        // this issue arises as the records are loaded and then communicated to the app as a json object, losing the class prototype
+        if (resolvedPresentationRequest.presentationExchange) {
+            for (const requirementKey in resolvedPresentationRequest.presentationExchange.credentialsForRequest.requirements) {
+                const requirement = resolvedPresentationRequest.presentationExchange.credentialsForRequest.requirements[requirementKey];
+                for (const submissionEntry of requirement.submissionEntry) {
+                    for (const vc of submissionEntry.verifiableCredentials) {
+                        if (vc.claimFormat === core_1.ClaimFormat.SdJwtDc) {
+                            const recordUncast = vc.credentialRecord;
+                            const record = new core_1.SdJwtVcRecord({
+                                id: recordUncast.id,
+                                createdAt: recordUncast.createdAt,
+                                compactSdJwtVc: recordUncast.compactSdJwtVc
+                            });
+                            vc.credentialRecord = record;
+                        }
+                        else if (vc.claimFormat === core_1.ClaimFormat.MsoMdoc) {
+                            const recordUncast = vc.credentialRecord;
+                            const record = new core_1.MdocRecord({
+                                id: recordUncast.id,
+                                createdAt: recordUncast.createdAt,
+                                mdoc: core_1.Mdoc.fromBase64Url(recordUncast.base64Url)
+                            });
+                            vc.credentialRecord = record;
+                        }
+                        else {
+                            // eslint-disable-next-line no-console
+                            console.log("Unsupported credential format in demo app, only sd-jwt-vc is supported at the moment");
+                        }
+                    }
+                }
+            }
+        }
+        const submissionResult = await this.agent.openid4vc.holder.acceptOpenId4VpAuthorizationRequest({
+            authorizationRequestPayload: resolvedPresentationRequest.authorizationRequestPayload,
+            presentationExchange: resolvedPresentationRequest.presentationExchange
+                ? {
+                    credentials: this.agent.openid4vc.holder.selectCredentialsForPresentationExchangeRequest(resolvedPresentationRequest.presentationExchange.credentialsForRequest)
+                }
+                : undefined,
+            dcql: resolvedPresentationRequest.dcql
+                ? {
+                    credentials: this.agent.openid4vc.holder.selectCredentialsForDcqlRequest(resolvedPresentationRequest.dcql.queryResult)
+                }
+                : undefined
+        });
+        return submissionResult.serverResponse;
+    }
+    async exit() {
+        await this.shutdown();
+        process.exit(0);
+    }
+    async restart() {
+        await this.shutdown();
+    }
+}
+exports.Holder = Holder;
+//# sourceMappingURL=Holder.js.map

package/dist/modules/openid4vc/local/Holder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Holder.js","sourceRoot":"","sources":["../../../../src/modules/openid4vc/local/Holder.ts"],"names":[],"mappings":";;;AAAA,yCAawB;AACxB,mDAQ6B;AAG7B,2CAAwC;AAGxC,SAAS,sBAAsB;IAC3B,OAAO;QACH,SAAS,EAAE,IAAI,2BAAe,EAAE;QAChC,IAAI,EAAE,IAAI,iBAAU,CAAC;YACjB,qCAAqC,EAAE,CAAC,aAAa,EAAE,EAAE,gBAAgB,EAAE,YAAY,EAAE,EAAE,EAAE;gBACzF,sCAAsC;gBACtC,OAAO,CAAC,GAAG,CAAC,qCAAqC,gBAAgB,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,wBAAwB,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;gBACzI,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YACjD,CAAC;SACJ,CAAC;KACI,CAAC;AACf,CAAC;AAED,MAAa,MAAO,SAAQ,qBAAoD;IAM5E,YAAmB,iBAAoC,EAAE,mBAAyC;QAC9F,KAAK,CAAC,IAAI,EAAE,mBAAmB,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,sBAAsB,EAAE,EAAE,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;QAN1H,WAAM,GAAG;YACZ,QAAQ,EAAE,QAAQ;YAClB,WAAW,EAAE,gCAAgC;SAChD,CAAC;IAIF,CAAC;IAEM,KAAK,CAAC,wBAAwB,CAAC,GAAyB;QAC3D,4EAA4E;QAC5E,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,OAAO,CAAC,uBAAgB,CAAC,cAAc,CAAuC,CAAC;QACnI,MAAM,cAAc,GAAG,MAAM,cAAc,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,oBAAa,CAAC,CAAC;QAElG,IAAI,CAAC,GAAG;YAAE,OAAO,cAAc,CAAC;QAChC,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IACzE,CAAC;IAEM,KAAK,CAAC,sBAAsB,CAAC,eAAuB;QACvD,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,sBAAsB,CAAC,eAAe,CAAC,CAAC;IACrF,CAAC;IAEM,KAAK,CAAC,qBAAqB,CAAC,gBAAwB;QACvD,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;IACrF,CAAC;IAEM,KAAK,CAAC,qBAAqB,CAAC,uBAA0D,EAAE,oBAA8B;QACzH,MAAM,MAAM,GAAG,uBAAuB,CAAC,sBAAsB,CAAC,MAAM,CAAC;QACrE,IAAI,MAAM,EAAE,CAAC,4CAAgC,CAAC,EAAE,CAAC;YAC7C,OAAO;gBACH,iBAAiB,EAAE,eAAe;gBAClC,iBAAiB,EAAE,MAAM,CAAC,4CAAgC,CAAC,CAAC,qBAAqB,CAAC;aAC5E,CAAC;QACf,CAAC;QAED,IAAI,uBAAuB,CAAC,sBAAsB,CAAC,MAAM,EAAE,CAAC,4CAAgC,CAAC,EAAE,CAAC;YAC5F,MAAM,4BAA4B,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,qCAAqC,CAAC,uBAAuB,EAAE;gBAClI,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC9B,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;gBACpC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,+BAA+B,CAAC;qBACzE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;qBACnF,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;aAC9C,CAAC,CAAC;YAEH,IAAI,4BAA4B,CAAC,iBAAiB,KAAK,uCAA2B,CAAC,0BAA0B,EAAE,CAAC;gBAC5G,OAAO;oBACH,GAAG,4BAA4B;oBAC/B,iBAAiB,EAAE,GAAG,uCAA2B,CAAC,0BAA0B,EAAE;iBACxE,CAAC;YACf,CAAC;YACD,OAAO;gBACH,GAAG,4BAA4B;gBAC/B,iBAAiB,EAAE,GAAG,uCAA2B,CAAC,cAAc,EAAE;aAC5D,CAAC;QACf,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC9C,CAAC;IAEM,KAAK,CAAC,0BAA0B,CACnC,uBAA0D,EAC1D,OAOC;QAED,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAChE,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,QAAQ;YAC5B,CAAC,CAAC;gBACI,uBAAuB;gBACvB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,WAAW,EAAE,OAAO,CAAC,WAAW;aACnC;YACH,CAAC,CAAC;gBACI,uBAAuB;gBACvB,MAAM,EAAE,OAAO,CAAC,MAAM;aACzB,CACV,CAAC;QAEF,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,kBAAkB,CAAC;YAC5E,uBAAuB;YACvB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,0BAA0B,EAAE,OAAO,CAAC,oBAAoB;YACxD,yBAAyB,EAAE,KAAK,EAAE,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,UAAU,EAAE,EAAE,EAAE;gBAC5F,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,8BAA8B,CAAC;oBAC5D,SAAS,EAAE,UAAU,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC,CAAC,IAAI,OAAO;iBACxE,CAAC,CAAC;gBACH,MAAM,SAAS,GAAG,UAAG,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAE7D,IAAI,qBAAqB,IAAI,mBAAmB,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;oBACpE,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAsB;wBAC9C,MAAM,EAAE,KAAK;wBACb,OAAO,EAAE;4BACL,KAAK,EAAE,GAAG,CAAC,KAAK;yBACnB;qBACJ,CAAC,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,aAAM,CAAC,SAAS,CAAC,CAAC;oBAErC,OAAO;wBACH,MAAM,EAAE,KAAK;wBACb,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;qBAC7D,CAAC;gBACN,CAAC;gBACD,IAAI,mBAAmB,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC3C,MAAM,MAAM,GAAG,aAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;oBAC/C,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAsB;wBAC9C,MAAM,EAAE,KAAK;wBACb,OAAO,EAAE;4BACL,KAAK,EAAE,GAAG,CAAC,KAAK;yBACnB;qBACJ,CAAC,CAAC;oBAEH,OAAO;wBACH,MAAM,EAAE,KAAK;wBACb,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC;qBAC/B,CAAC;gBACN,CAAC;gBAED,8BAA8B;gBAC9B,OAAO;oBACH,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,CAAC,SAAS,CAAC;iBACpB,CAAC;YACN,CAAC;YACD,GAAG,aAAa;SACnB,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,CAAC;QAE1E,MAAM,iBAAiB,GAAG,MAAM,OAAO,CAAC,GAAG,CACvC,kBAAkB,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;YAC5C,yCAAyC;YACzC,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YAC3C,4EAA4E;YAC5E,MAAM,sBAAsB,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,OAAO,CAAC,uBAAgB,CAAC,cAAc,CAAuC,CAAC;YAC3I,IAAI,aAAa,GAAG,EAAE,CAAC;YACvB,KAAK,MAAM,QAAQ,IAAI,uBAAuB,CAAC,+BAA+B,EAAE,CAAC;gBAC7E,aAAa,GAAG,QAAQ,CAAC;YAC7B,CAAC;YACD,MAAM,WAAW,GAAG,uBAAuB,CAAC,+BAA+B,CAAC,aAAa,CAAC,CAAC,OAAc,CAAC;YAE1G,iGAAiG;YACjG,IACI,WAAW,KAAK,SAAS;gBACzB,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,SAAS;gBAClC,uBAAuB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,OAAO,KAAK,SAAS;gBACtE,uBAAuB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,OAAe,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS;gBACpF,uBAAuB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,OAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,SAAS,EACjG,CAAC;gBACC,MAAM,eAAe,GAAI,uBAAuB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,OAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;gBAC1G,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,eAAe,CAAC;YAC7C,CAAC;YAED,IAAI,UAAU,CAAC,WAAW,KAAK,kBAAW,CAAC,OAAO,EAAE,CAAC;gBACjD,OAAO,sBAAsB,CAAC,eAAe,CACzC,IAAI,CAAC,KAAK,CAAC,OAAO,EAClB,UAAU,CAAC,SAAS,EACpB,UAAU,CAAC,WAAW,CAAC,QAAQ,EAAE,EACjC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAC3B,aAAa,CAChB,CAAC;YACN,CAAC;iBAAM,IAAI,UAAU,CAAC,WAAW,KAAK,kBAAW,CAAC,OAAO,EAAE,CAAC;gBACxD,OAAO,sBAAsB,CAAC,eAAe,CACzC,IAAI,CAAC,KAAK,CAAC,OAAO,EAClB,UAAU,CAAC,OAAO,EAClB,UAAU,CAAC,WAAW,CAAC,QAAQ,EAAE,EACjC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAC3B,aAAa,CAChB,CAAC;YACN,CAAC;iBAAM,IAAI,UAAU,CAAC,WAAW,KAAK,kBAAW,CAAC,UAAU,EAAE,CAAC;gBAC3D,OAAO,sBAAsB,CAAC,eAAe,CACzC,IAAI,CAAC,KAAK,CAAC,OAAO,EAClB,UAAU,CAAC,OAAO,EAClB,UAAU,CAAC,WAAW,CAAC,QAAQ,EAAE,EACjC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAC3B,aAAa,CAChB,CAAC;YACN,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACrD,CAAC,CAAC,CACL,CAAC;QAEF,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAC1F,OAAO,iBAAiB,CAAC;IAC7B,CAAC;IAEM,KAAK,CAAC,mBAAmB,CAAC,YAAoB;QACjD,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,oCAAoC,CAAC,YAAY,CAAC,CAAC;QAElH,OAAO,oBAAoB,CAAC;IAChC,CAAC;IAEM,KAAK,CAAC,yBAAyB,CAAC,2BAAkE;QACrG,IAAI,CAAC,2BAA2B,CAAC,oBAAoB,IAAI,CAAC,2BAA2B,CAAC,IAAI,EAAE,CAAC;YACzF,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;QAC/F,CAAC;QAED,oHAAoH;QACpH,4HAA4H;QAC5H,IAAI,2BAA2B,CAAC,oBAAoB,EAAE,CAAC;YACnD,KAAK,MAAM,cAAc,IAAI,2BAA2B,CAAC,oBAAoB,CAAC,qBAAqB,CAAC,YAAY,EAAE,CAAC;gBAC/G,MAAM,WAAW,GAAG,2BAA2B,CAAC,oBAAoB,CAAC,qBAAqB,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;gBACxH,KAAK,MAAM,eAAe,IAAI,WAAW,CAAC,eAAe,EAAE,CAAC;oBACxD,KAAK,MAAM,EAAE,IAAI,eAAe,CAAC,qBAAqB,EAAE,CAAC;wBACrD,IAAI,EAAE,CAAC,WAAW,KAAK,kBAAW,CAAC,OAAO,EAAE,CAAC;4BACzC,MAAM,YAAY,GAAG,EAAE,CAAC,gBAAgB,CAAC;4BACzC,MAAM,MAAM,GAAG,IAAI,oBAAa,CAAC;gCAC7B,EAAE,EAAE,YAAY,CAAC,EAAE;gCACnB,SAAS,EAAE,YAAY,CAAC,SAAS;gCACjC,cAAc,EAAE,YAAY,CAAC,cAAc;6BAC9C,CAAC,CAAC;4BACH,EAAE,CAAC,gBAAgB,GAAG,MAAM,CAAC;wBACjC,CAAC;6BAAM,IAAI,EAAE,CAAC,WAAW,KAAK,kBAAW,CAAC,OAAO,EAAE,CAAC;4BAChD,MAAM,YAAY,GAAG,EAAE,CAAC,gBAAgB,CAAC;4BACzC,MAAM,MAAM,GAAG,IAAI,iBAAU,CAAC;gCAC1B,EAAE,EAAE,YAAY,CAAC,EAAE;gCACnB,SAAS,EAAE,YAAY,CAAC,SAAS;gCACjC,IAAI,EAAE,WAAI,CAAC,aAAa,CAAC,YAAY,CAAC,SAAS,CAAC;6BACnD,CAAC,CAAC;4BACH,EAAE,CAAC,gBAAgB,GAAG,MAAM,CAAC;wBACjC,CAAC;6BAAM,CAAC;4BACJ,sCAAsC;4BACtC,OAAO,CAAC,GAAG,CAAC,sFAAsF,CAAC,CAAC;wBACxG,CAAC;oBACL,CAAC;gBACL,CAAC;YACL,CAAC;QACL,CAAC;QAED,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,mCAAmC,CAAC;YAC3F,2BAA2B,EAAE,2BAA2B,CAAC,2BAA2B;YACpF,oBAAoB,EAAE,2BAA2B,CAAC,oBAAoB;gBAClE,CAAC,CAAC;oBACI,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,+CAA+C,CACpF,2BAA2B,CAAC,oBAAoB,CAAC,qBAAqB,CACzE;iBACJ;gBACH,CAAC,CAAC,SAAS;YACf,IAAI,EAAE,2BAA2B,CAAC,IAAI;gBAClC,CAAC,CAAC;oBACI,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,+BAA+B,CAAC,2BAA2B,CAAC,IAAI,CAAC,WAAW,CAAC;iBACzH;gBACH,CAAC,CAAC,SAAS;SAClB,CAAC,CAAC;QACH,OAAO,gBAAgB,CAAC,cAAc,CAAC;IAC3C,CAAC;IAEM,KAAK,CAAC,IAAI;QACb,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAEM,KAAK,CAAC,OAAO;QAChB,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC1B,CAAC;CACJ;AAtQD,wBAsQC"}

package/dist/modules/openid4vc/local/LocalAgentDependencies.d.ts

@@ -0,0 +1,3 @@
+import { AgentDependencies } from "@credo-ts/core";
+export declare const agentDependencies: AgentDependencies;
+//# sourceMappingURL=LocalAgentDependencies.d.ts.map

package/dist/modules/openid4vc/local/LocalAgentDependencies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalAgentDependencies.d.ts","sourceRoot":"","sources":["../../../../src/modules/openid4vc/local/LocalAgentDependencies.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAQnD,eAAO,MAAM,iBAAiB,EAAE,iBAK/B,CAAC"}

package/dist/modules/openid4vc/local/LocalAgentDependencies.js

@@ -0,0 +1,18 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.agentDependencies = void 0;
+const events_1 = require("events");
+const ws_1 = __importDefault(require("ws"));
+const EnmeshedHolderFileSystem_1 = require("./EnmeshedHolderFileSystem");
+const fetchImpl = globalThis.fetch;
+const webSocketImpl = ws_1.default;
+exports.agentDependencies = {
+    FileSystem: EnmeshedHolderFileSystem_1.EnmeshedHolderFileSystem,
+    EventEmitterClass: events_1.EventEmitter,
+    fetch: fetchImpl,
+    WebSocketClass: webSocketImpl
+};
+//# sourceMappingURL=LocalAgentDependencies.js.map

package/dist/modules/openid4vc/local/LocalAgentDependencies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LocalAgentDependencies.js","sourceRoot":"","sources":["../../../../src/modules/openid4vc/local/LocalAgentDependencies.ts"],"names":[],"mappings":";;;;;;AAEA,mCAAsC;AACtC,4CAA2B;AAC3B,yEAAsE;AAEtE,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC;AACnC,MAAM,aAAa,GAAG,YAAS,CAAC;AAEnB,QAAA,iBAAiB,GAAsB;IAChD,UAAU,EAAE,mDAAwB;IACpC,iBAAiB,EAAE,qBAAY;IAC/B,KAAK,EAAE,SAAS;IAChB,cAAc,EAAE,aAAa;CAChC,CAAC"}

package/package.json

@@ -59,15 +59,22 @@
         }
     },
     "dependencies": {
+        "@credo-ts/core": "v0.6.0-alpha-20250919145226",
+        "@credo-ts/openid4vc": "v0.6.0-alpha-20250919145226",
         "@js-soft/docdb-querytranslator": "^1.1.6",
         "@js-soft/ts-serval": "2.0.14",
         "@js-soft/ts-utils": "2.3.5",
-        "@nmshd/content": "7.0.0",
-        "@nmshd/core-types": "7.0.0",
+        "@nmshd/content": "7.1.0-openid4vc.1",
+        "@nmshd/core-types": "7.1.0-openid4vc.1",
         "@nmshd/iql": "^1.0.4",
-        "@nmshd/transport": "7.0.0",
+        "@nmshd/transport": "7.1.0-openid4vc.1",
+        "@noble/ciphers": "^0.2.0",
+        "jose": "^6.0.13",
+        "libsodium-wrappers": "^0.7.15",
         "lodash": "^4.17.21",
-        "ts-simple-nameof": "^1.3.3"
+        "sjcl": "^1.0.8",
+        "ts-simple-nameof": "^1.3.3",
+        "ws": "^8.18.3"
     },
     "devDependencies": {
         "@js-soft/docdb-access-loki": "1.3.1",
@@ -75,11 +82,12 @@
         "@js-soft/node-logger": "1.2.1",
         "@nmshd/crypto": "2.1.3",
         "@types/lodash": "^4.17.20",
+        "@types/sjcl": "^1.0.34",
         "ts-mockito": "^2.6.1"
     },
     "publishConfig": {
         "access": "public",
         "provenance": true
     },
-    "version": "7.0.0"
+    "version": "7.1.0-openid4vc.1"
 }