@openeudi/openid4vp 0.9.2 → 0.10.0

package/dist/index.js

@@ -1,5 +1,5 @@
-import { X509Certificate, SubjectKeyIdentifierExtension, X509Certificates, BasicConstraintsExtension, KeyUsagesExtension, KeyUsageFlags as KeyUsageFlags$1, AuthorityKeyIdentifierExtension, SubjectAlternativeNameExtension, ExtendedKeyUsageExtension, Name as Name$1 } from '@peculiar/x509';
 import 'reflect-metadata';
+import { X509Certificate, SubjectKeyIdentifierExtension, X509Certificates, BasicConstraintsExtension, KeyUsagesExtension, KeyUsageFlags as KeyUsageFlags$1, AuthorityKeyIdentifierExtension, SubjectAlternativeNameExtension, ExtendedKeyUsageExtension, Name as Name$1 } from '@peculiar/x509';
 import { v4 } from 'uuid';
 import { SignJWT, importX509, decodeProtectedHeader, jwtVerify, importJWK, compactDecrypt } from 'jose';
 import { Encoder, Tag } from 'cbor-x';
@@ -18,11 +18,16 @@ var __export = (target, all) => {
   for (var name in all)
     __defProp(target, name, { get: all[name], enumerable: true });
 };
+var init_reflect_polyfill = __esm({
+  "src/reflect-polyfill.ts"() {
+  }
+});
 
 // src/errors.ts
 var InvalidSignatureError, ExpiredCredentialError, UnsupportedFormatError, MalformedCredentialError, NonceValidationError, HaipValidationError, OpenID4VPError, TrustAnchorNotFoundError, CertificateChainError, RevokedCertificateError, RevocationCheckFailedError, LotlFetchError, LotlSignatureError, SignedRequestBuildError, UnsupportedJweError, DecryptionFailedError, MissingDecryptionKeyError, MissingVerifierEncryptionKeyError, MultipleCredentialsNotSupportedError;
 var init_errors = __esm({
   "src/errors.ts"() {
+    init_reflect_polyfill();
     InvalidSignatureError = class extends Error {
       constructor(message = "Credential signature validation failed") {
         super(message);
@@ -186,6 +191,7 @@ function isEqual(bytes1, bytes2) {
 var ARRAY_BUFFER_NAME, BufferSourceConverter, STRING_TYPE, HEX_REGEX, BASE64_REGEX, BASE64URL_REGEX, Utf8Converter, Utf16Converter, Convert;
 var init_index_es = __esm({
   "node_modules/pvtsutils/build/index.es.js"() {
+    init_reflect_polyfill();
     ARRAY_BUFFER_NAME = "[object ArrayBuffer]";
     BufferSourceConverter = class _BufferSourceConverter {
       static isArrayBuffer(data) {
@@ -642,6 +648,7 @@ function padNumber(inputNumber, fullLength) {
 }
 var init_utils_es = __esm({
   "node_modules/pvutils/build/utils.es.js"() {
+    init_reflect_polyfill();
   }
 });
 
@@ -1478,6 +1485,7 @@ function verifySchema(inputBuffer, inputSchema) {
 var ViewWriter, powers2, digitsString, NAME, VALUE_HEX_VIEW, IS_HEX_ONLY, ID_BLOCK, TAG_CLASS, TAG_NUMBER, IS_CONSTRUCTED, FROM_BER, TO_BER, LOCAL, EMPTY_STRING, EMPTY_BUFFER, EMPTY_VIEW, END_OF_CONTENT_NAME, OCTET_STRING_NAME, BIT_STRING_NAME, LocalBaseBlock, ValueBlock, LocalIdentificationBlock, LocalLengthBlock, typeStore, BaseBlock, BaseStringBlock, LocalPrimitiveValueBlock, _a$w, Primitive, DEFAULT_MAX_DEPTH, DEFAULT_MAX_NODES, DEFAULT_MAX_CONTENT_LENGTH, MAX_DEPTH_EXCEEDED_ERROR, MAX_NODES_EXCEEDED_ERROR, MAX_CONTENT_LENGTH_EXCEEDED_ERROR, LocalConstructedValueBlock, _a$v, Constructed, LocalEndOfContentValueBlock, _a$u, EndOfContent, _a$t, Null, LocalBooleanValueBlock, _a$s, Boolean2, LocalOctetStringValueBlock, _a$r, OctetString, LocalBitStringValueBlock, _a$q, BitString, _a$p, LocalIntegerValueBlock, _a$o, Integer, _a$n, Enumerated, LocalSidValueBlock, LocalObjectIdentifierValueBlock, _a$m, ObjectIdentifier, LocalRelativeSidValueBlock, LocalRelativeObjectIdentifierValueBlock, _a$l, RelativeObjectIdentifier, _a$k, Sequence, _a$j, Set2, LocalStringValueBlock, LocalSimpleStringValueBlock, LocalSimpleStringBlock, LocalUtf8StringValueBlock, _a$i, Utf8String, LocalBmpStringValueBlock, _a$h, BmpString, LocalUniversalStringValueBlock, _a$g, UniversalString, _a$f, NumericString, _a$e, PrintableString, _a$d, TeletexString, _a$c, VideotexString, _a$b, IA5String, _a$a, GraphicString, _a$9, VisibleString, _a$8, GeneralString, _a$7, CharacterString, _a$6, UTCTime, _a$5, GeneralizedTime, _a$4, DATE, _a$3, TimeOfDay, _a$2, DateTime, _a$1, Duration, _a, TIME, Any, Choice, Repeated, RawData;
 var init_index_es2 = __esm({
   "node_modules/asn1js/build/index.es.js"() {
+    init_reflect_polyfill();
     init_index_es();
     init_utils_es();
     ViewWriter = class {
@@ -3714,6 +3722,7 @@ ${values.join("\n")}` : `${blockName} :`;
 var AsnTypeTypes, AsnPropTypes;
 var init_enums = __esm({
   "node_modules/@peculiar/asn1-schema/build/es2015/enums.js"() {
+    init_reflect_polyfill();
     (function(AsnTypeTypes2) {
       AsnTypeTypes2[AsnTypeTypes2["Sequence"] = 0] = "Sequence";
       AsnTypeTypes2[AsnTypeTypes2["Set"] = 1] = "Set";
@@ -3755,6 +3764,7 @@ var init_enums = __esm({
 var BitString2;
 var init_bit_string = __esm({
   "node_modules/@peculiar/asn1-schema/build/es2015/types/bit_string.js"() {
+    init_reflect_polyfill();
     init_index_es2();
     init_index_es();
     BitString2 = class {
@@ -3819,6 +3829,7 @@ var init_bit_string = __esm({
 var OctetString2;
 var init_octet_string = __esm({
   "node_modules/@peculiar/asn1-schema/build/es2015/types/octet_string.js"() {
+    init_reflect_polyfill();
     init_index_es2();
     init_index_es();
     OctetString2 = class {
@@ -3861,6 +3872,7 @@ var init_octet_string = __esm({
 // node_modules/@peculiar/asn1-schema/build/es2015/types/index.js
 var init_types = __esm({
   "node_modules/@peculiar/asn1-schema/build/es2015/types/index.js"() {
+    init_reflect_polyfill();
     init_bit_string();
     init_octet_string();
   }
@@ -3926,6 +3938,7 @@ function defaultConverter(type) {
 var AsnAnyConverter, AsnIntegerConverter, AsnEnumeratedConverter, AsnIntegerArrayBufferConverter, AsnBitStringConverter, AsnObjectIdentifierConverter, AsnBooleanConverter, AsnOctetStringConverter, AsnUtf8StringConverter, AsnBmpStringConverter, AsnUniversalStringConverter, AsnNumericStringConverter, AsnPrintableStringConverter, AsnTeletexStringConverter, AsnVideotexStringConverter, AsnIA5StringConverter, AsnGraphicStringConverter, AsnVisibleStringConverter, AsnGeneralStringConverter, AsnCharacterStringConverter, AsnUTCTimeConverter, AsnGeneralizedTimeConverter, AsnNullConverter;
 var init_converters = __esm({
   "node_modules/@peculiar/asn1-schema/build/es2015/converters.js"() {
+    init_reflect_polyfill();
     init_index_es2();
     init_enums();
     init_types();
@@ -4040,6 +4053,7 @@ function isArrayEqual(bytes1, bytes2) {
 }
 var init_helper = __esm({
   "node_modules/@peculiar/asn1-schema/build/es2015/helper.js"() {
+    init_reflect_polyfill();
   }
 });
 
@@ -4047,6 +4061,7 @@ var init_helper = __esm({
 var AsnSchemaStorage;
 var init_schema = __esm({
   "node_modules/@peculiar/asn1-schema/build/es2015/schema.js"() {
+    init_reflect_polyfill();
     init_index_es2();
     init_enums();
     init_helper();
@@ -4179,6 +4194,7 @@ var init_schema = __esm({
 var schemaStorage;
 var init_storage = __esm({
   "node_modules/@peculiar/asn1-schema/build/es2015/storage.js"() {
+    init_reflect_polyfill();
     init_schema();
     schemaStorage = new AsnSchemaStorage();
   }
@@ -4188,6 +4204,7 @@ var init_storage = __esm({
 var AsnType, AsnProp;
 var init_decorators = __esm({
   "node_modules/@peculiar/asn1-schema/build/es2015/decorators.js"() {
+    init_reflect_polyfill();
     init_converters();
     init_enums();
     init_storage();
@@ -4227,6 +4244,7 @@ var init_decorators = __esm({
 var AsnSchemaValidationError;
 var init_schema_validation = __esm({
   "node_modules/@peculiar/asn1-schema/build/es2015/errors/schema_validation.js"() {
+    init_reflect_polyfill();
     AsnSchemaValidationError = class extends Error {
       constructor() {
         super(...arguments);
@@ -4239,6 +4257,7 @@ var init_schema_validation = __esm({
 // node_modules/@peculiar/asn1-schema/build/es2015/errors/index.js
 var init_errors2 = __esm({
   "node_modules/@peculiar/asn1-schema/build/es2015/errors/index.js"() {
+    init_reflect_polyfill();
     init_schema_validation();
   }
 });
@@ -4247,6 +4266,7 @@ var init_errors2 = __esm({
 var AsnParser;
 var init_parser = __esm({
   "node_modules/@peculiar/asn1-schema/build/es2015/parser.js"() {
+    init_reflect_polyfill();
     init_index_es2();
     init_enums();
     init_converters();
@@ -4533,6 +4553,7 @@ var init_parser = __esm({
 var AsnSerializer;
 var init_serializer = __esm({
   "node_modules/@peculiar/asn1-schema/build/es2015/serializer.js"() {
+    init_reflect_polyfill();
     init_index_es2();
     init_converters();
     init_enums();
@@ -4677,6 +4698,7 @@ var init_serializer = __esm({
 var AsnArray;
 var init_objects = __esm({
   "node_modules/@peculiar/asn1-schema/build/es2015/objects.js"() {
+    init_reflect_polyfill();
     AsnArray = class extends Array {
       constructor(items = []) {
         if (typeof items === "number") {
@@ -4696,6 +4718,7 @@ var init_objects = __esm({
 var AsnConvert;
 var init_convert = __esm({
   "node_modules/@peculiar/asn1-schema/build/es2015/convert.js"() {
+    init_reflect_polyfill();
     init_index_es2();
     init_index_es();
     init_parser();
@@ -4722,6 +4745,7 @@ var init_convert = __esm({
 // node_modules/@peculiar/asn1-schema/build/es2015/index.js
 var init_es2015 = __esm({
   "node_modules/@peculiar/asn1-schema/build/es2015/index.js"() {
+    init_reflect_polyfill();
     init_converters();
     init_types();
     init_decorators();
@@ -4743,6 +4767,7 @@ function __decorate(decorators, target, key, desc) {
 }
 var init_tslib_es6 = __esm({
   "node_modules/tslib/tslib.es6.mjs"() {
+    init_reflect_polyfill();
   }
 });
 
@@ -4750,6 +4775,7 @@ var init_tslib_es6 = __esm({
 var IpConverter;
 var init_ip_converter = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/ip_converter.js"() {
+    init_reflect_polyfill();
     init_index_es();
     IpConverter = class {
       static isIPv4(ip) {
@@ -4923,6 +4949,7 @@ var init_ip_converter = __esm({
 var RelativeDistinguishedName_1, RDNSequence_1, Name_1, DirectoryString, AttributeValue, AttributeTypeAndValue, RelativeDistinguishedName, RDNSequence, Name;
 var init_name = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/name.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_index_es();
@@ -5017,6 +5044,7 @@ var init_name = __esm({
 var AsnIpConverter, OtherName, EDIPartyName, GeneralName;
 var init_general_name = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/general_name.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_ip_converter();
@@ -5094,6 +5122,7 @@ var init_general_name = __esm({
 });
 var init_object_identifiers = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/object_identifiers.js"() {
+    init_reflect_polyfill();
   }
 });
 
@@ -5101,6 +5130,7 @@ var init_object_identifiers = __esm({
 var AuthorityInfoAccessSyntax_1, AccessDescription, AuthorityInfoAccessSyntax;
 var init_authority_information_access = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/authority_information_access.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_general_name();
@@ -5134,6 +5164,7 @@ var init_authority_information_access = __esm({
 var KeyIdentifier, AuthorityKeyIdentifier;
 var init_authority_key_identifier = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/authority_key_identifier.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_general_name();
@@ -5169,6 +5200,7 @@ var init_authority_key_identifier = __esm({
 var BasicConstraints;
 var init_basic_constraints = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/basic_constraints.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_object_identifiers();
@@ -5191,6 +5223,7 @@ var init_basic_constraints = __esm({
 var GeneralNames_1, GeneralNames;
 var init_general_names = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/general_names.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_general_name();
@@ -5211,6 +5244,7 @@ var init_general_names = __esm({
 var CertificateIssuer_1, CertificateIssuer;
 var init_certificate_issuer = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/certificate_issuer.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_general_names();
@@ -5231,6 +5265,7 @@ var init_certificate_issuer = __esm({
 var CertificatePolicies_1, DisplayText, NoticeReference, UserNotice, Qualifier, PolicyQualifierInfo, PolicyInformation, CertificatePolicies;
 var init_certificate_policies = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/certificate_policies.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_object_identifiers();
@@ -5336,6 +5371,7 @@ var init_certificate_policies = __esm({
 var CRLNumber;
 var init_crl_number = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/crl_number.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_object_identifiers();
@@ -5357,6 +5393,7 @@ var init_crl_number = __esm({
 var BaseCRLNumber;
 var init_crl_delta_indicator = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/crl_delta_indicator.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_object_identifiers();
@@ -5373,6 +5410,7 @@ var init_crl_delta_indicator = __esm({
 var CRLDistributionPoints_1, ReasonFlags, Reason, DistributionPointName, DistributionPoint, CRLDistributionPoints;
 var init_crl_distribution_points = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/crl_distribution_points.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_name();
@@ -5470,6 +5508,7 @@ var init_crl_distribution_points = __esm({
 var FreshestCRL_1, FreshestCRL;
 var init_crl_freshest = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/crl_freshest.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_object_identifiers();
@@ -5490,6 +5529,7 @@ var init_crl_freshest = __esm({
 var IssuingDistributionPoint;
 var init_crl_issuing_distribution_point = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/crl_issuing_distribution_point.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_crl_distribution_points();
@@ -5550,6 +5590,7 @@ var init_crl_issuing_distribution_point = __esm({
 var CRLReasons, CRLReason;
 var init_crl_reason = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/crl_reason.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_object_identifiers();
@@ -5590,6 +5631,7 @@ var init_crl_reason = __esm({
 var ExtendedKeyUsage_1, ExtendedKeyUsage;
 var init_extended_key_usage = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/extended_key_usage.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_object_identifiers();
@@ -5609,6 +5651,7 @@ var init_extended_key_usage = __esm({
 var InhibitAnyPolicy;
 var init_inhibit_any_policy = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/inhibit_any_policy.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_object_identifiers();
@@ -5630,6 +5673,7 @@ var init_inhibit_any_policy = __esm({
 var InvalidityDate;
 var init_invalidity_date = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/invalidity_date.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_object_identifiers();
@@ -5654,6 +5698,7 @@ var init_invalidity_date = __esm({
 var IssueAlternativeName_1, IssueAlternativeName;
 var init_issuer_alternative_name = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/issuer_alternative_name.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_general_names();
@@ -5674,6 +5719,7 @@ var init_issuer_alternative_name = __esm({
 var KeyUsageFlags;
 var init_key_usage = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/key_usage.js"() {
+    init_reflect_polyfill();
     init_es2015();
     init_object_identifiers();
     (function(KeyUsageFlags3) {
@@ -5694,6 +5740,7 @@ var init_key_usage = __esm({
 var GeneralSubtrees_1, GeneralSubtree, GeneralSubtrees, NameConstraints;
 var init_name_constraints = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/name_constraints.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_general_name();
@@ -5741,6 +5788,7 @@ var init_name_constraints = __esm({
 var PolicyConstraints;
 var init_policy_constraints = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/policy_constraints.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_object_identifiers();
@@ -5774,6 +5822,7 @@ var init_policy_constraints = __esm({
 var PolicyMappings_1, PolicyMapping, PolicyMappings;
 var init_policy_mappings = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/policy_mappings.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_object_identifiers();
@@ -5806,6 +5855,7 @@ var init_policy_mappings = __esm({
 var SubjectAlternativeName_1, SubjectAlternativeName;
 var init_subject_alternative_name = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/subject_alternative_name.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_general_names();
@@ -5826,6 +5876,7 @@ var init_subject_alternative_name = __esm({
 var Attribute;
 var init_attribute = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/attribute.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     Attribute = class {
@@ -5848,6 +5899,7 @@ var init_attribute = __esm({
 var SubjectDirectoryAttributes_1, SubjectDirectoryAttributes;
 var init_subject_directory_attributes = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/subject_directory_attributes.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_attribute();
@@ -5865,6 +5917,7 @@ var init_subject_directory_attributes = __esm({
 });
 var init_subject_key_identifier = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/subject_key_identifier.js"() {
+    init_reflect_polyfill();
     init_object_identifiers();
     init_authority_key_identifier();
   }
@@ -5874,6 +5927,7 @@ var init_subject_key_identifier = __esm({
 var PrivateKeyUsagePeriod;
 var init_private_key_usage_period = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/private_key_usage_period.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_object_identifiers();
@@ -5895,6 +5949,7 @@ var init_private_key_usage_period = __esm({
 var EntrustInfoFlags, EntrustInfo, EntrustVersionInfo;
 var init_entrust_version_info = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/entrust_version_info.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     (function(EntrustInfoFlags2) {
@@ -5941,6 +5996,7 @@ var init_entrust_version_info = __esm({
 var SubjectInfoAccessSyntax_1, SubjectInfoAccessSyntax;
 var init_subject_info_access = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/subject_info_access.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_object_identifiers();
@@ -5960,6 +6016,7 @@ var init_subject_info_access = __esm({
 // node_modules/@peculiar/asn1-x509/build/es2015/extensions/index.js
 var init_extensions = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extensions/index.js"() {
+    init_reflect_polyfill();
     init_authority_information_access();
     init_authority_key_identifier();
     init_basic_constraints();
@@ -5992,6 +6049,7 @@ var init_extensions = __esm({
 var AlgorithmIdentifier;
 var init_algorithm_identifier = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/algorithm_identifier.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_index_es();
@@ -6022,6 +6080,7 @@ var init_algorithm_identifier = __esm({
 var SubjectPublicKeyInfo;
 var init_subject_public_key_info = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/subject_public_key_info.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_algorithm_identifier();
@@ -6045,6 +6104,7 @@ var init_subject_public_key_info = __esm({
 var Time;
 var init_time = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/time.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     Time = class Time2 {
@@ -6091,6 +6151,7 @@ var init_time = __esm({
 var Validity;
 var init_validity = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/validity.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_time();
@@ -6117,6 +6178,7 @@ var init_validity = __esm({
 var Extensions_1, Extension, Extensions;
 var init_extension = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/extension.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     Extension = class _Extension {
@@ -6156,6 +6218,7 @@ var init_extension = __esm({
 var Version;
 var init_types2 = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/types.js"() {
+    init_reflect_polyfill();
     (function(Version3) {
       Version3[Version3["v1"] = 0] = "v1";
       Version3[Version3["v2"] = 1] = "v2";
@@ -6168,6 +6231,7 @@ var init_types2 = __esm({
 var TBSCertificate;
 var init_tbs_certificate = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/tbs_certificate.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_algorithm_identifier();
@@ -6237,6 +6301,7 @@ var init_tbs_certificate = __esm({
 var Certificate;
 var init_certificate = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/certificate.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_algorithm_identifier();
@@ -6265,6 +6330,7 @@ var init_certificate = __esm({
 var RevokedCertificate, TBSCertList;
 var init_tbs_cert_list = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/tbs_cert_list.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_algorithm_identifier();
@@ -6323,6 +6389,7 @@ var init_tbs_cert_list = __esm({
 var CertificateList;
 var init_certificate_list = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/certificate_list.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_algorithm_identifier();
@@ -6350,6 +6417,7 @@ var init_certificate_list = __esm({
 // node_modules/@peculiar/asn1-x509/build/es2015/index.js
 var init_es20152 = __esm({
   "node_modules/@peculiar/asn1-x509/build/es2015/index.js"() {
+    init_reflect_polyfill();
     init_extensions();
     init_algorithm_identifier();
     init_attribute();
@@ -6393,6 +6461,7 @@ function getSkiBytes(cert) {
 }
 var init_x509_utils = __esm({
   "src/trust/x509-utils.ts"() {
+    init_reflect_polyfill();
   }
 });
 function mapX509AlgoToJwaName(cert) {
@@ -6498,6 +6567,7 @@ function dnIsUnder(childDn, subtreeDn) {
 var NAME_CONSTRAINTS_OID, DEFAULT_ALGORITHMS, ChainBuilder;
 var init_ChainBuilder = __esm({
   "src/trust/ChainBuilder.ts"() {
+    init_reflect_polyfill();
     init_es2015();
     init_es20152();
     init_errors();
@@ -6743,6 +6813,7 @@ function ecdsaDerToIeee(der, coordBytes) {
 }
 var init_ecdsa_util = __esm({
   "src/trust/ecdsa-util.ts"() {
+    init_reflect_polyfill();
   }
 });
 
@@ -6777,6 +6848,7 @@ function bytesToHex(bytes) {
 var CrlFetcher;
 var init_CrlFetcher = __esm({
   "src/trust/CrlFetcher.ts"() {
+    init_reflect_polyfill();
     init_es2015();
     init_es20152();
     init_ecdsa_util();
@@ -6903,6 +6975,7 @@ var init_CrlFetcher = __esm({
 var AcceptableResponses_1, AcceptableResponses;
 var init_acceptable_responses = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/extensions/acceptable_responses.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     AcceptableResponses = AcceptableResponses_1 = class AcceptableResponses2 extends AsnArray {
@@ -6921,6 +6994,7 @@ var init_acceptable_responses = __esm({
 var ArchiveCutoff;
 var init_archive_cutoff = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/extensions/archive_cutoff.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     ArchiveCutoff = class ArchiveCutoff2 {
@@ -6941,6 +7015,7 @@ var init_archive_cutoff = __esm({
 var ExtendedRevoke;
 var init_extended_revoke = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/extensions/extended_revoke.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     ExtendedRevoke = class ExtendedRevoke2 {
@@ -6960,6 +7035,7 @@ var init_extended_revoke = __esm({
 // node_modules/@peculiar/asn1-ocsp/build/es2015/extensions/nonce.js
 var init_nonce = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/extensions/nonce.js"() {
+    init_reflect_polyfill();
     init_es2015();
   }
 });
@@ -6968,6 +7044,7 @@ var init_nonce = __esm({
 var PreferredSignatureAlgorithms_1, PreferredSignatureAlgorithm, PreferredSignatureAlgorithms;
 var init_preferred_signature_algorithms = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/extensions/preferred_signature_algorithms.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_es20152();
@@ -6999,6 +7076,7 @@ var init_preferred_signature_algorithms = __esm({
 var ServiceLocator;
 var init_service_locator = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/extensions/service_locator.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_es20152();
@@ -7021,6 +7099,7 @@ var init_service_locator = __esm({
 // node_modules/@peculiar/asn1-ocsp/build/es2015/extensions/index.js
 var init_extensions2 = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/extensions/index.js"() {
+    init_reflect_polyfill();
     init_acceptable_responses();
     init_archive_cutoff();
     init_extended_revoke();
@@ -7034,6 +7113,7 @@ var init_extensions2 = __esm({
 var KeyHash, ResponderID;
 var init_responder_id = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/responder_id.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_es20152();
@@ -7060,6 +7140,7 @@ var init_responder_id = __esm({
 var CertID;
 var init_cert_id = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/cert_id.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es20152();
     init_es2015();
@@ -7091,6 +7172,7 @@ var init_cert_id = __esm({
 var RevokedInfo;
 var init_revoked_info = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/revoked_info.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_es20152();
@@ -7113,6 +7195,7 @@ var init_revoked_info = __esm({
 var CertStatus;
 var init_cert_status = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/cert_status.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_revoked_info();
@@ -7140,6 +7223,7 @@ var init_cert_status = __esm({
 var SingleResponse;
 var init_single_response = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/single_response.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_cert_id();
@@ -7175,6 +7259,7 @@ var init_single_response = __esm({
 var Version2;
 var init_types3 = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/types.js"() {
+    init_reflect_polyfill();
     (function(Version3) {
       Version3[Version3["v1"] = 0] = "v1";
     })(Version2 || (Version2 = {}));
@@ -7185,6 +7270,7 @@ var init_types3 = __esm({
 var ResponseData;
 var init_response_data = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/response_data.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_es20152();
@@ -7222,6 +7308,7 @@ var init_response_data = __esm({
 var BasicOCSPResponse;
 var init_basic_ocsp_response = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/basic_ocsp_response.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_es20152();
@@ -7250,6 +7337,7 @@ var init_basic_ocsp_response = __esm({
 });
 var init_object_identifiers2 = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/object_identifiers.js"() {
+    init_reflect_polyfill();
     init_es20152();
   }
 });
@@ -7258,6 +7346,7 @@ var init_object_identifiers2 = __esm({
 var Signature;
 var init_signature = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/signature.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_es20152();
@@ -7284,6 +7373,7 @@ var init_signature = __esm({
 var Request;
 var init_request = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/request.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_cert_id();
@@ -7307,6 +7397,7 @@ var init_request = __esm({
 var TBSRequest;
 var init_tbs_request = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/tbs_request.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_es20152();
@@ -7338,6 +7429,7 @@ var init_tbs_request = __esm({
 var OCSPRequest;
 var init_ocsp_request = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/ocsp_request.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_signature();
@@ -7361,6 +7453,7 @@ var init_ocsp_request = __esm({
 var OCSPResponseStatus;
 var init_ocsp_response_status = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/ocsp_response_status.js"() {
+    init_reflect_polyfill();
     (function(OCSPResponseStatus2) {
       OCSPResponseStatus2[OCSPResponseStatus2["successful"] = 0] = "successful";
       OCSPResponseStatus2[OCSPResponseStatus2["malformedRequest"] = 1] = "malformedRequest";
@@ -7376,6 +7469,7 @@ var init_ocsp_response_status = __esm({
 var ResponseBytes;
 var init_response_bytes = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/response_bytes.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     ResponseBytes = class {
@@ -7398,6 +7492,7 @@ var init_response_bytes = __esm({
 var OCSPResponse;
 var init_ocsp_response = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/ocsp_response.js"() {
+    init_reflect_polyfill();
     init_tslib_es6();
     init_es2015();
     init_ocsp_response_status();
@@ -7420,6 +7515,7 @@ var init_ocsp_response = __esm({
 // node_modules/@peculiar/asn1-ocsp/build/es2015/index.js
 var init_es20153 = __esm({
   "node_modules/@peculiar/asn1-ocsp/build/es2015/index.js"() {
+    init_reflect_polyfill();
     init_extensions2();
     init_basic_ocsp_response();
     init_cert_id();
@@ -7486,6 +7582,7 @@ function hexToBigIntBytes(hex) {
 var DEFAULT_MAX_RESPONSE_AGE_MS, OcspClient;
 var init_OcspClient = __esm({
   "src/trust/OcspClient.ts"() {
+    init_reflect_polyfill();
     init_es2015();
     init_es20153();
     init_es20152();
@@ -7789,6 +7886,7 @@ function extractCrlUrls(cert) {
 var RevocationChecker;
 var init_RevocationChecker = __esm({
   "src/trust/RevocationChecker.ts"() {
+    init_reflect_polyfill();
     init_es20152();
     init_es2015();
     init_errors();
@@ -7885,6 +7983,7 @@ function mapLoA(uris) {
 var LOA_MAPPING;
 var init_lotl_loa_mapping = __esm({
   "src/trust/lotl-loa-mapping.ts"() {
+    init_reflect_polyfill();
     LOA_MAPPING = Object.freeze({
       // Qualified electronic signature / seal — substantial + high are both
       // expressed via `qualified` in ETSI, not LoA. The LoA URIs below apply to
@@ -7905,6 +8004,7 @@ function deriveServiceMetadata(service) {
 }
 var init_service_metadata = __esm({
   "src/trust/service-metadata.ts"() {
+    init_reflect_polyfill();
     init_lotl_loa_mapping();
   }
 });
@@ -7936,6 +8036,7 @@ function buildProvenance(service, anchorSki) {
 var ProvenanceResolver;
 var init_ProvenanceResolver = __esm({
   "src/trust/ProvenanceResolver.ts"() {
+    init_reflect_polyfill();
     init_service_metadata();
     init_x509_utils();
     ProvenanceResolver = class {
@@ -8003,6 +8104,7 @@ async function resolveProvenance(store, anchor) {
 var TrustEvaluator;
 var init_TrustEvaluator = __esm({
   "src/trust/TrustEvaluator.ts"() {
+    init_reflect_polyfill();
     init_errors();
     init_ChainBuilder();
     init_RevocationChecker();
@@ -8090,6 +8192,13 @@ var init_TrustEvaluator = __esm({
     };
   }
 });
+
+// src/index.ts
+init_reflect_polyfill();
+init_reflect_polyfill();
+
+// src/authorization.ts
+init_reflect_polyfill();
 function createAuthorizationRequest(input, query) {
   if (!input.clientId) throw new TypeError("clientId is required");
   if (!input.nonce) throw new TypeError("nonce is required");
@@ -8114,6 +8223,7 @@ function createAuthorizationRequest(input, query) {
 }
 
 // src/signed-authorization.ts
+init_reflect_polyfill();
 init_errors();
 var DEFAULT_SUPPORTED_ENC_VALUES = ["A128GCM", "A256GCM"];
 var SUPPORTED_SIGNING_ALGS = /* @__PURE__ */ new Set(["ES256", "ES384", "RS256"]);
@@ -8137,14 +8247,23 @@ async function createSignedAuthorizationRequest(input, query) {
       "vpFormatsSupported is required and must be non-empty"
     );
   }
+  const clientIdPrefix = input.clientIdPrefix ?? "x509_san_dns";
   const leafCert = new X509Certificate(toArrayBuffer(input.certificateChain[0]));
-  const sanDnsNames = extractDnsNames(leafCert);
-  if (!sanDnsNames.includes(input.hostname)) {
+  if (clientIdPrefix === "x509_san_dns" && !input.hostname) {
     throw new SignedRequestBuildError(
-      "hostname_cert_mismatch",
-      `leaf cert SAN DNSName values [${sanDnsNames.join(", ")}] do not include hostname "${input.hostname}"`
+      "missing_hostname",
+      'hostname is required for clientIdPrefix "x509_san_dns"'
     );
   }
+  if (input.hostname) {
+    const sanDnsNames = extractDnsNames(leafCert);
+    if (!sanDnsNames.includes(input.hostname)) {
+      throw new SignedRequestBuildError(
+        "hostname_cert_mismatch",
+        `leaf cert SAN DNSName values [${sanDnsNames.join(", ")}] do not include hostname "${input.hostname}"`
+      );
+    }
+  }
   const signerPublicSpki = new Uint8Array(
     await crypto.subtle.exportKey("spki", input.signer.publicKey)
   );
@@ -8171,7 +8290,7 @@ async function createSignedAuthorizationRequest(input, query) {
     }
   }
   const state = input.state ?? v4();
-  const clientId = `x509_san_dns:${input.hostname}`;
+  const clientId = clientIdPrefix === "x509_hash" ? `x509_hash:${await sha256Base64Url(input.certificateChain[0])}` : `x509_san_dns:${input.hostname}`;
   const now = Math.floor(Date.now() / 1e3);
   const clientMetadata = {
     vp_formats_supported: input.vpFormatsSupported
@@ -8188,8 +8307,6 @@ async function createSignedAuthorizationRequest(input, query) {
     clientMetadata.jwks = { keys: [jwk] };
     const encValues = enc3 ?? [...DEFAULT_SUPPORTED_ENC_VALUES];
     clientMetadata.encrypted_response_enc_values_supported = encValues;
-    clientMetadata.authorization_encrypted_response_alg = "ECDH-ES";
-    clientMetadata.authorization_encrypted_response_enc = encValues[0];
   }
   const payload = {
     iss: clientId,
@@ -8234,6 +8351,10 @@ function bytesEqual(a, b) {
   }
   return true;
 }
+async function sha256Base64Url(derCert) {
+  const digest = new Uint8Array(await crypto.subtle.digest("SHA-256", toArrayBuffer(derCert)));
+  return bytesToBase64(digest).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
 function bytesToBase64(bytes) {
   let s = "";
   for (let i = 0; i < bytes.length; i++) s += String.fromCharCode(bytes[i]);
@@ -8246,6 +8367,7 @@ function toArrayBuffer(bytes) {
 }
 
 // src/haip.ts
+init_reflect_polyfill();
 init_errors();
 var HAIP_DOCTYPE_NAMESPACES = {
   "org.iso.18013.5.1.mDL": "org.iso.18013.5.1",
@@ -8360,7 +8482,14 @@ function isHaipQuery(query) {
   }
 }
 
+// src/presentation.ts
+init_reflect_polyfill();
+
+// src/parsers/mdoc.parser.ts
+init_reflect_polyfill();
+
 // src/crypto/cose-sign1.ts
+init_reflect_polyfill();
 init_errors();
 var decoder = new Encoder({ mapsAsObjects: false, useRecords: false, tagUint8Array: false });
 var HEADER_ALG = 1;
@@ -8461,6 +8590,7 @@ async function verifyCoseSign1(coseSign1, publicKey, allowedAlgorithms) {
 }
 
 // src/crypto/device-auth.ts
+init_reflect_polyfill();
 init_errors();
 var enc = new Encoder({ mapsAsObjects: false, useRecords: false, tagUint8Array: false });
 var HEADER_ALG2 = 1;
@@ -8586,6 +8716,7 @@ function extractTag24Inner(value) {
 }
 
 // src/crypto/digest.ts
+init_reflect_polyfill();
 init_errors();
 var decoder2 = new Encoder({ mapsAsObjects: false, useRecords: false });
 var ALLOWED_HASH_ALGS = /* @__PURE__ */ new Set(["SHA-256", "SHA-384", "SHA-512"]);
@@ -8650,6 +8781,7 @@ async function verifyAllDigests(nameSpaces, mso) {
 }
 
 // src/crypto/mso.ts
+init_reflect_polyfill();
 init_errors();
 var decoder3 = new Encoder({ mapsAsObjects: false, useRecords: false });
 function decodeDateLike(value) {
@@ -9092,6 +9224,7 @@ var MdocParser = class {
 };
 
 // src/parsers/sd-jwt.parser.ts
+init_reflect_polyfill();
 init_errors();
 var DEFAULT_ALLOWED_ALGORITHMS2 = ["ES256", "ES384", "ES512"];
 var sha256Hasher = async (data, _alg) => {
@@ -9463,7 +9596,11 @@ async function parsePresentation(vpToken, options) {
   };
 }
 
+// src/verify.ts
+init_reflect_polyfill();
+
 // src/decrypt-response.ts
+init_reflect_polyfill();
 init_errors();
 var SUPPORTED_ALG = "ECDH-ES";
 var SUPPORTED_ENC = /* @__PURE__ */ new Set(["A128GCM", "A256GCM"]);
@@ -9497,6 +9634,9 @@ async function decryptAuthorizationResponse(jwe, privateKey) {
     });
   }
 }
+
+// src/crypto/session-transcript.ts
+init_reflect_polyfill();
 var enc2 = new Encoder({ mapsAsObjects: false, useRecords: false, tagUint8Array: false });
 async function sha256(bytes) {
   return new Uint8Array(await crypto.subtle.digest("SHA-256", bytes));
@@ -9665,6 +9805,7 @@ async function verifyAuthorizationResponse(envelope, query, options) {
 init_errors();
 
 // src/trust/Cache.ts
+init_reflect_polyfill();
 var InMemoryCache = class {
   entries = /* @__PURE__ */ new Map();
   maxEntries;
@@ -9696,7 +9837,11 @@ var InMemoryCache = class {
   }
 };
 
+// src/trust/index.ts
+init_reflect_polyfill();
+
 // src/trust/TrustStore.ts
+init_reflect_polyfill();
 init_x509_utils();
 var StaticTrustStore = class {
   anchors = [];
@@ -9775,6 +9920,12 @@ function pushInto(map, key, anchor) {
 function bytesToHex3(bytes) {
   return Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
 }
+
+// src/trust/LotlTrustStore.ts
+init_reflect_polyfill();
+
+// src/trust/lotl-signing-anchors.ts
+init_reflect_polyfill();
 var PEM_ANCHORS = [
   `-----BEGIN CERTIFICATE-----
 MIIIoDCCBoigAwIBAgIUc8IcSUtVEKAMMvHm9QWU05kXsPUwDQYJKoZIhvcNAQEN
@@ -9831,6 +9982,7 @@ var EU_LOTL_SIGNING_ANCHORS = Object.freeze(
 );
 
 // src/trust/LotlFetcher.ts
+init_reflect_polyfill();
 init_errors();
 var XMLDSIG_NS = "http://www.w3.org/2000/09/xmldsig#";
 var LotlFetcher = class {
@@ -9941,6 +10093,12 @@ function buildImportAlgorithm(algName, pubKeyAlg) {
     hash: { name: hashName }
   };
 }
+
+// src/trust/LotlParser.ts
+init_reflect_polyfill();
+
+// src/trust/xml-util.ts
+init_reflect_polyfill();
 function firstChild(parent, ns, name) {
   const list = parent.getElementsByTagNameNS(ns, name);
   return list.length > 0 ? list.item(0) : null;
@@ -10031,6 +10189,7 @@ function parsePointer(el) {
 }
 
 // src/trust/NationalTlResolver.ts
+init_reflect_polyfill();
 var TSL_NS2 = "http://uri.etsi.org/02231/v2#";
 var NationalTlResolver = class {
   constructor(opts) {
@@ -10271,7 +10430,7 @@ function equalBytes(a, b) {
 
 // src/index.ts
 init_errors();
-var VERSION = "0.9.2";
+var VERSION = "0.10.0";
 /*! Bundled license information:
 
 pvtsutils/build/index.es.js: