@openid4vc/openid4vp 0.3.0-alpha-20250707121837 → 0.3.0-alpha-20250711120307

package/dist/index.d.mts

@@ -21665,7 +21665,12 @@ interface ParsedTransactionDataEntry {
 }
 declare function parseTransactionData(options: ParseTransactionDataOptions): ParsedTransactionDataEntry[];
 
-type Openid4vpDraftVersionNumber = 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29;
+/**
+ * The Openid4vpVersionNumber
+ *
+ * 100 means 1.0 final, all others are draft versions
+ */
+type Openid4vpVersionNumber = 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 100;
 
 interface ResolveOpenid4vpAuthorizationRequestOptions {
     authorizationRequestPayload: Openid4vpAuthorizationRequest | Openid4vpAuthorizationRequestDcApi | JarAuthorizationRequest;
@@ -21687,9 +21692,11 @@ type ResolvedOpenid4vpAuthorizationRequest = {
         query: unknown;
     } | undefined;
     /**
-     * The highest possible draft version number based on draft-specific version checks done on the request.
+     * The highest possible version number based on (draft)-version checks done on the request.
+     *
+     * 100 means 1.0 final, all other numbers are draft versions.
      */
-    version: Openid4vpDraftVersionNumber;
+    version: Openid4vpVersionNumber;
 };
 declare function resolveOpenid4vpAuthorizationRequest(options: ResolveOpenid4vpAuthorizationRequestOptions): Promise<ResolvedOpenid4vpAuthorizationRequest>;
 
@@ -21711,7 +21718,7 @@ type JarmServerMetadata = z.infer<typeof zJarmServerMetadata>;
 declare const zOpenid4vpAuthorizationResponse: z.ZodObject<{
     state: z.ZodOptional<z.ZodString>;
     id_token: z.ZodOptional<z.ZodString>;
-    vp_token: z.ZodUnion<[z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>>, z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, "atleastone">]>]>;
+    vp_token: z.ZodUnion<[z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, "atleastone">, z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>]>>, z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, "atleastone">]>]>;
     presentation_submission: z.ZodOptional<z.ZodUnion<[z.ZodRecord<z.ZodString, z.ZodAny>, z.ZodEffects<z.ZodString, any, string>]>>;
     refresh_token: z.ZodOptional<z.ZodString>;
     token_type: z.ZodOptional<z.ZodString>;
@@ -21720,7 +21727,7 @@ declare const zOpenid4vpAuthorizationResponse: z.ZodObject<{
 }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
     state: z.ZodOptional<z.ZodString>;
     id_token: z.ZodOptional<z.ZodString>;
-    vp_token: z.ZodUnion<[z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>>, z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, "atleastone">]>]>;
+    vp_token: z.ZodUnion<[z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, "atleastone">, z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>]>>, z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, "atleastone">]>]>;
     presentation_submission: z.ZodOptional<z.ZodUnion<[z.ZodRecord<z.ZodString, z.ZodAny>, z.ZodEffects<z.ZodString, any, string>]>>;
     refresh_token: z.ZodOptional<z.ZodString>;
     token_type: z.ZodOptional<z.ZodString>;
@@ -21729,7 +21736,7 @@ declare const zOpenid4vpAuthorizationResponse: z.ZodObject<{
 }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
     state: z.ZodOptional<z.ZodString>;
     id_token: z.ZodOptional<z.ZodString>;
-    vp_token: z.ZodUnion<[z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>>, z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, "atleastone">]>]>;
+    vp_token: z.ZodUnion<[z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, "atleastone">, z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>]>>, z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, "atleastone">]>]>;
     presentation_submission: z.ZodOptional<z.ZodUnion<[z.ZodRecord<z.ZodString, z.ZodAny>, z.ZodEffects<z.ZodString, any, string>]>>;
     refresh_token: z.ZodOptional<z.ZodString>;
     token_type: z.ZodOptional<z.ZodString>;
@@ -21788,20 +21795,20 @@ declare function submitOpenid4vpAuthorizationResponse(options: SubmitOpenid4vpAu
     response: Response;
 }>;
 
-declare const zVpTokenPexEntry: z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>;
+declare const zVpTokenPresentationEntry: z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>;
+type VpTokenPresentationEntry = z.infer<typeof zVpTokenPresentationEntry>;
 declare const zVpTokenPex: z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, "atleastone">]>;
 type VpTokenPex = z.infer<typeof zVpTokenPex>;
-type VpTokenPexEntry = z.infer<typeof zVpTokenPexEntry>;
-declare const zVpTokenDcql: z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>>;
+declare const zVpTokenDcql: z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, "atleastone">, z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>]>>;
 type VpTokenDcql = z.infer<typeof zVpTokenDcql>;
-declare const zVpToken: z.ZodUnion<[z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>>, z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, "atleastone">]>]>;
+declare const zVpToken: z.ZodUnion<[z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, "atleastone">, z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>]>>, z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, "atleastone">]>]>;
 type VpToken = z.infer<typeof zVpToken>;
 
 interface ValidateOpenid4VpPexAuthorizationResponseResult {
     type: 'pex';
     pex: {
         presentationSubmission: PexPresentationSubmission;
-        presentations: [VpTokenPexEntry, ...VpTokenPexEntry[]];
+        presentations: [VpTokenPresentationEntry, ...VpTokenPresentationEntry[]];
     } & ({
         scope: string;
         presentationDefinition?: never;
@@ -21813,7 +21820,7 @@ interface ValidateOpenid4VpPexAuthorizationResponseResult {
 interface ValidateOpenid4VpDcqlAuthorizationResponseResult {
     type: 'dcql';
     dcql: {
-        presentations: VpTokenDcql;
+        presentations: Record<string, [VpTokenPresentationEntry, ...VpTokenPresentationEntry[]]>;
     } & ({
         scope: string;
         query?: never;
@@ -21870,8 +21877,8 @@ interface VerifiedTransactionDataEntry {
     credentialHashIndex: number;
 }
 
-declare function parsePexVpToken(vpToken: unknown): [VpTokenPexEntry, ...VpTokenPexEntry[]];
-declare function parseDcqlVpToken(vpToken: unknown): VpTokenDcql;
+declare function parsePexVpToken(vpToken: unknown): [VpTokenPresentationEntry, ...VpTokenPresentationEntry[]];
+declare function parseDcqlVpToken(vpToken: unknown): Record<string, [VpTokenPresentationEntry, ...VpTokenPresentationEntry[]]>;
 
 declare const zJarmHeader: z.ZodObject<{
     apu: z.ZodOptional<z.ZodString>;
@@ -22104,7 +22111,7 @@ declare function parseOpenid4vpAuthorizationResponse(options: ParseOpenid4vpAuth
 declare function parseOpenid4VpAuthorizationResponsePayload(payload: Record<string, unknown>): zod.objectOutputType<{
     state: zod.ZodOptional<zod.ZodString>;
     id_token: zod.ZodOptional<zod.ZodString>;
-    vp_token: zod.ZodUnion<[zod.ZodRecord<zod.ZodString, zod.ZodUnion<[zod.ZodString, zod.ZodRecord<zod.ZodString, zod.ZodAny>]>>, zod.ZodUnion<[zod.ZodUnion<[zod.ZodString, zod.ZodRecord<zod.ZodString, zod.ZodAny>]>, zod.ZodArray<zod.ZodUnion<[zod.ZodString, zod.ZodRecord<zod.ZodString, zod.ZodAny>]>, "atleastone">]>]>;
+    vp_token: zod.ZodUnion<[zod.ZodRecord<zod.ZodString, zod.ZodUnion<[zod.ZodArray<zod.ZodUnion<[zod.ZodString, zod.ZodRecord<zod.ZodString, zod.ZodAny>]>, "atleastone">, zod.ZodUnion<[zod.ZodString, zod.ZodRecord<zod.ZodString, zod.ZodAny>]>]>>, zod.ZodUnion<[zod.ZodUnion<[zod.ZodString, zod.ZodRecord<zod.ZodString, zod.ZodAny>]>, zod.ZodArray<zod.ZodUnion<[zod.ZodString, zod.ZodRecord<zod.ZodString, zod.ZodAny>]>, "atleastone">]>]>;
     presentation_submission: zod.ZodOptional<zod.ZodUnion<[zod.ZodRecord<zod.ZodString, zod.ZodAny>, zod.ZodEffects<zod.ZodString, any, string>]>>;
     refresh_token: zod.ZodOptional<zod.ZodString>;
     token_type: zod.ZodOptional<zod.ZodString>;
@@ -31172,7 +31179,7 @@ declare class Openid4vpVerifier {
     parseOpenid4vpAuthorizationResponse(options: ParseOpenid4vpAuthorizationResponseOptions): Promise<ParsedOpenid4vpAuthorizationResponse>;
     validateOpenid4vpAuthorizationResponsePayload(options: ValidateOpenid4vpAuthorizationResponseOptions): ValidateOpenid4VpAuthorizationResponseResult;
     parsePexVpToken(vpToken: unknown): [string | Record<string, any>, ...(string | Record<string, any>)[]];
-    parseDcqlVpToken(vpToken: unknown): Record<string, string | Record<string, any>>;
+    parseDcqlVpToken(vpToken: unknown): Record<string, [string | Record<string, any>, ...(string | Record<string, any>)[]]>;
     parseTransactionData(options: ParseTransactionDataOptions): ParsedTransactionDataEntry[];
     verifyTransactionData(options: Omit<VerifyTransactionDataOptions, 'callbacks'>): Promise<VerifiedTransactionDataEntry[]>;
 }
@@ -31216,4 +31223,4 @@ declare const zVerifierAttestations: zod__default.ZodArray<zod__default.ZodObjec
 type VerifierAttestation = zod__default.infer<typeof zVerifierAttestation>;
 type VerifierAttestations = zod__default.infer<typeof zVerifierAttestations>;
 
-export { type ClientIdPrefix, type ClientMetadata, type CreateOpenid4vpAuthorizationRequestOptions, type CreateOpenid4vpAuthorizationResponseOptions, type CreateOpenid4vpAuthorizationResponseResult, type CredentialFormat, type GetOpenid4vpClientIdOptions, type JarmClientMetadata, JarmMode, type Openid4vpAuthorizationRequest, type Openid4vpAuthorizationRequestDcApi, type Openid4vpAuthorizationResponse, Openid4vpClient, Openid4vpVerifier, type ParseJarmAuthorizationResponseOptions, type ParseOpenid4vpAuthorizationRequestOptions, type ParseOpenid4vpAuthorizationResponseOptions, type ParseTransactionDataOptions, type ParsedOpenid4vpAuthorizationResponse, type ProofFormat, type ResolveOpenid4vpAuthorizationRequestOptions, type ResolvedOpenid4vpAuthorizationRequest, type SubmitOpenid4vpAuthorizationResponseOptions, type TransactionDataEntry, type TransactionDataHashesCredentials, type ValidateOpenid4VpAuthorizationResponseResult, type ValidateOpenid4VpDcqlAuthorizationResponseResult, type ValidateOpenid4VpPexAuthorizationResponseResult, type ValidateOpenid4vpAuthorizationRequestPayloadOptions, type ValidateOpenid4vpAuthorizationResponseOptions, type VerifiedTransactionDataEntry, type VerifierAttestation, type VerifierAttestations, type VerifyJarmAuthorizationResponseOptions, type VerifyTransactionDataOptions, type VpToken, type VpTokenDcql, type VpTokenPex, type VpTokenPexEntry, type WalletMetadata, type WalletVerificationOptions, createOpenid4vpAuthorizationRequest, createOpenid4vpAuthorizationResponse, getOpenid4vpClientId, isJarmResponseMode, isOpenid4vpAuthorizationRequestDcApi, parseDcqlVpToken, parseJarmAuthorizationResponse, parseOpenid4VpAuthorizationResponsePayload, parseOpenid4vpAuthorizationRequest, parseOpenid4vpAuthorizationResponse, parsePexVpToken, parseTransactionData, resolveOpenid4vpAuthorizationRequest, submitOpenid4vpAuthorizationResponse, validateOpenid4vpAuthorizationRequestPayload, validateOpenid4vpAuthorizationResponsePayload, verifyJarmAuthorizationResponse, zClientIdPrefix, zClientMetadata, zCredentialFormat, zJarmClientMetadata, zOpenid4vpAuthorizationResponse, zProofFormat, zVerifierAttestations, zWalletMetadata };
+export { type ClientIdPrefix, type ClientMetadata, type CreateOpenid4vpAuthorizationRequestOptions, type CreateOpenid4vpAuthorizationResponseOptions, type CreateOpenid4vpAuthorizationResponseResult, type CredentialFormat, type GetOpenid4vpClientIdOptions, type JarmClientMetadata, JarmMode, type Openid4vpAuthorizationRequest, type Openid4vpAuthorizationRequestDcApi, type Openid4vpAuthorizationResponse, Openid4vpClient, Openid4vpVerifier, type ParseJarmAuthorizationResponseOptions, type ParseOpenid4vpAuthorizationRequestOptions, type ParseOpenid4vpAuthorizationResponseOptions, type ParseTransactionDataOptions, type ParsedOpenid4vpAuthorizationResponse, type ProofFormat, type ResolveOpenid4vpAuthorizationRequestOptions, type ResolvedOpenid4vpAuthorizationRequest, type SubmitOpenid4vpAuthorizationResponseOptions, type TransactionDataEntry, type TransactionDataHashesCredentials, type ValidateOpenid4VpAuthorizationResponseResult, type ValidateOpenid4VpDcqlAuthorizationResponseResult, type ValidateOpenid4VpPexAuthorizationResponseResult, type ValidateOpenid4vpAuthorizationRequestPayloadOptions, type ValidateOpenid4vpAuthorizationResponseOptions, type VerifiedTransactionDataEntry, type VerifierAttestation, type VerifierAttestations, type VerifyJarmAuthorizationResponseOptions, type VerifyTransactionDataOptions, type VpToken, type VpTokenDcql, type VpTokenPex, type VpTokenPresentationEntry, type WalletMetadata, type WalletVerificationOptions, createOpenid4vpAuthorizationRequest, createOpenid4vpAuthorizationResponse, getOpenid4vpClientId, isJarmResponseMode, isOpenid4vpAuthorizationRequestDcApi, parseDcqlVpToken, parseJarmAuthorizationResponse, parseOpenid4VpAuthorizationResponsePayload, parseOpenid4vpAuthorizationRequest, parseOpenid4vpAuthorizationResponse, parsePexVpToken, parseTransactionData, resolveOpenid4vpAuthorizationRequest, submitOpenid4vpAuthorizationResponse, validateOpenid4vpAuthorizationRequestPayload, validateOpenid4vpAuthorizationResponsePayload, verifyJarmAuthorizationResponse, zClientIdPrefix, zClientMetadata, zCredentialFormat, zJarmClientMetadata, zOpenid4vpAuthorizationResponse, zProofFormat, zVerifierAttestations, zWalletMetadata };

package/dist/index.d.ts

@@ -21665,7 +21665,12 @@ interface ParsedTransactionDataEntry {
 }
 declare function parseTransactionData(options: ParseTransactionDataOptions): ParsedTransactionDataEntry[];
 
-type Openid4vpDraftVersionNumber = 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29;
+/**
+ * The Openid4vpVersionNumber
+ *
+ * 100 means 1.0 final, all others are draft versions
+ */
+type Openid4vpVersionNumber = 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 100;
 
 interface ResolveOpenid4vpAuthorizationRequestOptions {
     authorizationRequestPayload: Openid4vpAuthorizationRequest | Openid4vpAuthorizationRequestDcApi | JarAuthorizationRequest;
@@ -21687,9 +21692,11 @@ type ResolvedOpenid4vpAuthorizationRequest = {
         query: unknown;
     } | undefined;
     /**
-     * The highest possible draft version number based on draft-specific version checks done on the request.
+     * The highest possible version number based on (draft)-version checks done on the request.
+     *
+     * 100 means 1.0 final, all other numbers are draft versions.
      */
-    version: Openid4vpDraftVersionNumber;
+    version: Openid4vpVersionNumber;
 };
 declare function resolveOpenid4vpAuthorizationRequest(options: ResolveOpenid4vpAuthorizationRequestOptions): Promise<ResolvedOpenid4vpAuthorizationRequest>;
 
@@ -21711,7 +21718,7 @@ type JarmServerMetadata = z.infer<typeof zJarmServerMetadata>;
 declare const zOpenid4vpAuthorizationResponse: z.ZodObject<{
     state: z.ZodOptional<z.ZodString>;
     id_token: z.ZodOptional<z.ZodString>;
-    vp_token: z.ZodUnion<[z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>>, z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, "atleastone">]>]>;
+    vp_token: z.ZodUnion<[z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, "atleastone">, z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>]>>, z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, "atleastone">]>]>;
     presentation_submission: z.ZodOptional<z.ZodUnion<[z.ZodRecord<z.ZodString, z.ZodAny>, z.ZodEffects<z.ZodString, any, string>]>>;
     refresh_token: z.ZodOptional<z.ZodString>;
     token_type: z.ZodOptional<z.ZodString>;
@@ -21720,7 +21727,7 @@ declare const zOpenid4vpAuthorizationResponse: z.ZodObject<{
 }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
     state: z.ZodOptional<z.ZodString>;
     id_token: z.ZodOptional<z.ZodString>;
-    vp_token: z.ZodUnion<[z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>>, z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, "atleastone">]>]>;
+    vp_token: z.ZodUnion<[z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, "atleastone">, z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>]>>, z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, "atleastone">]>]>;
     presentation_submission: z.ZodOptional<z.ZodUnion<[z.ZodRecord<z.ZodString, z.ZodAny>, z.ZodEffects<z.ZodString, any, string>]>>;
     refresh_token: z.ZodOptional<z.ZodString>;
     token_type: z.ZodOptional<z.ZodString>;
@@ -21729,7 +21736,7 @@ declare const zOpenid4vpAuthorizationResponse: z.ZodObject<{
 }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
     state: z.ZodOptional<z.ZodString>;
     id_token: z.ZodOptional<z.ZodString>;
-    vp_token: z.ZodUnion<[z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>>, z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, "atleastone">]>]>;
+    vp_token: z.ZodUnion<[z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, "atleastone">, z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>]>>, z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, "atleastone">]>]>;
     presentation_submission: z.ZodOptional<z.ZodUnion<[z.ZodRecord<z.ZodString, z.ZodAny>, z.ZodEffects<z.ZodString, any, string>]>>;
     refresh_token: z.ZodOptional<z.ZodString>;
     token_type: z.ZodOptional<z.ZodString>;
@@ -21788,20 +21795,20 @@ declare function submitOpenid4vpAuthorizationResponse(options: SubmitOpenid4vpAu
     response: Response;
 }>;
 
-declare const zVpTokenPexEntry: z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>;
+declare const zVpTokenPresentationEntry: z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>;
+type VpTokenPresentationEntry = z.infer<typeof zVpTokenPresentationEntry>;
 declare const zVpTokenPex: z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, "atleastone">]>;
 type VpTokenPex = z.infer<typeof zVpTokenPex>;
-type VpTokenPexEntry = z.infer<typeof zVpTokenPexEntry>;
-declare const zVpTokenDcql: z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>>;
+declare const zVpTokenDcql: z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, "atleastone">, z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>]>>;
 type VpTokenDcql = z.infer<typeof zVpTokenDcql>;
-declare const zVpToken: z.ZodUnion<[z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>>, z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, "atleastone">]>]>;
+declare const zVpToken: z.ZodUnion<[z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, "atleastone">, z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>]>>, z.ZodUnion<[z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodRecord<z.ZodString, z.ZodAny>]>, "atleastone">]>]>;
 type VpToken = z.infer<typeof zVpToken>;
 
 interface ValidateOpenid4VpPexAuthorizationResponseResult {
     type: 'pex';
     pex: {
         presentationSubmission: PexPresentationSubmission;
-        presentations: [VpTokenPexEntry, ...VpTokenPexEntry[]];
+        presentations: [VpTokenPresentationEntry, ...VpTokenPresentationEntry[]];
     } & ({
         scope: string;
         presentationDefinition?: never;
@@ -21813,7 +21820,7 @@ interface ValidateOpenid4VpPexAuthorizationResponseResult {
 interface ValidateOpenid4VpDcqlAuthorizationResponseResult {
     type: 'dcql';
     dcql: {
-        presentations: VpTokenDcql;
+        presentations: Record<string, [VpTokenPresentationEntry, ...VpTokenPresentationEntry[]]>;
     } & ({
         scope: string;
         query?: never;
@@ -21870,8 +21877,8 @@ interface VerifiedTransactionDataEntry {
     credentialHashIndex: number;
 }
 
-declare function parsePexVpToken(vpToken: unknown): [VpTokenPexEntry, ...VpTokenPexEntry[]];
-declare function parseDcqlVpToken(vpToken: unknown): VpTokenDcql;
+declare function parsePexVpToken(vpToken: unknown): [VpTokenPresentationEntry, ...VpTokenPresentationEntry[]];
+declare function parseDcqlVpToken(vpToken: unknown): Record<string, [VpTokenPresentationEntry, ...VpTokenPresentationEntry[]]>;
 
 declare const zJarmHeader: z.ZodObject<{
     apu: z.ZodOptional<z.ZodString>;
@@ -22104,7 +22111,7 @@ declare function parseOpenid4vpAuthorizationResponse(options: ParseOpenid4vpAuth
 declare function parseOpenid4VpAuthorizationResponsePayload(payload: Record<string, unknown>): zod.objectOutputType<{
     state: zod.ZodOptional<zod.ZodString>;
     id_token: zod.ZodOptional<zod.ZodString>;
-    vp_token: zod.ZodUnion<[zod.ZodRecord<zod.ZodString, zod.ZodUnion<[zod.ZodString, zod.ZodRecord<zod.ZodString, zod.ZodAny>]>>, zod.ZodUnion<[zod.ZodUnion<[zod.ZodString, zod.ZodRecord<zod.ZodString, zod.ZodAny>]>, zod.ZodArray<zod.ZodUnion<[zod.ZodString, zod.ZodRecord<zod.ZodString, zod.ZodAny>]>, "atleastone">]>]>;
+    vp_token: zod.ZodUnion<[zod.ZodRecord<zod.ZodString, zod.ZodUnion<[zod.ZodArray<zod.ZodUnion<[zod.ZodString, zod.ZodRecord<zod.ZodString, zod.ZodAny>]>, "atleastone">, zod.ZodUnion<[zod.ZodString, zod.ZodRecord<zod.ZodString, zod.ZodAny>]>]>>, zod.ZodUnion<[zod.ZodUnion<[zod.ZodString, zod.ZodRecord<zod.ZodString, zod.ZodAny>]>, zod.ZodArray<zod.ZodUnion<[zod.ZodString, zod.ZodRecord<zod.ZodString, zod.ZodAny>]>, "atleastone">]>]>;
     presentation_submission: zod.ZodOptional<zod.ZodUnion<[zod.ZodRecord<zod.ZodString, zod.ZodAny>, zod.ZodEffects<zod.ZodString, any, string>]>>;
     refresh_token: zod.ZodOptional<zod.ZodString>;
     token_type: zod.ZodOptional<zod.ZodString>;
@@ -31172,7 +31179,7 @@ declare class Openid4vpVerifier {
     parseOpenid4vpAuthorizationResponse(options: ParseOpenid4vpAuthorizationResponseOptions): Promise<ParsedOpenid4vpAuthorizationResponse>;
     validateOpenid4vpAuthorizationResponsePayload(options: ValidateOpenid4vpAuthorizationResponseOptions): ValidateOpenid4VpAuthorizationResponseResult;
     parsePexVpToken(vpToken: unknown): [string | Record<string, any>, ...(string | Record<string, any>)[]];
-    parseDcqlVpToken(vpToken: unknown): Record<string, string | Record<string, any>>;
+    parseDcqlVpToken(vpToken: unknown): Record<string, [string | Record<string, any>, ...(string | Record<string, any>)[]]>;
     parseTransactionData(options: ParseTransactionDataOptions): ParsedTransactionDataEntry[];
     verifyTransactionData(options: Omit<VerifyTransactionDataOptions, 'callbacks'>): Promise<VerifiedTransactionDataEntry[]>;
 }
@@ -31216,4 +31223,4 @@ declare const zVerifierAttestations: zod__default.ZodArray<zod__default.ZodObjec
 type VerifierAttestation = zod__default.infer<typeof zVerifierAttestation>;
 type VerifierAttestations = zod__default.infer<typeof zVerifierAttestations>;
 
-export { type ClientIdPrefix, type ClientMetadata, type CreateOpenid4vpAuthorizationRequestOptions, type CreateOpenid4vpAuthorizationResponseOptions, type CreateOpenid4vpAuthorizationResponseResult, type CredentialFormat, type GetOpenid4vpClientIdOptions, type JarmClientMetadata, JarmMode, type Openid4vpAuthorizationRequest, type Openid4vpAuthorizationRequestDcApi, type Openid4vpAuthorizationResponse, Openid4vpClient, Openid4vpVerifier, type ParseJarmAuthorizationResponseOptions, type ParseOpenid4vpAuthorizationRequestOptions, type ParseOpenid4vpAuthorizationResponseOptions, type ParseTransactionDataOptions, type ParsedOpenid4vpAuthorizationResponse, type ProofFormat, type ResolveOpenid4vpAuthorizationRequestOptions, type ResolvedOpenid4vpAuthorizationRequest, type SubmitOpenid4vpAuthorizationResponseOptions, type TransactionDataEntry, type TransactionDataHashesCredentials, type ValidateOpenid4VpAuthorizationResponseResult, type ValidateOpenid4VpDcqlAuthorizationResponseResult, type ValidateOpenid4VpPexAuthorizationResponseResult, type ValidateOpenid4vpAuthorizationRequestPayloadOptions, type ValidateOpenid4vpAuthorizationResponseOptions, type VerifiedTransactionDataEntry, type VerifierAttestation, type VerifierAttestations, type VerifyJarmAuthorizationResponseOptions, type VerifyTransactionDataOptions, type VpToken, type VpTokenDcql, type VpTokenPex, type VpTokenPexEntry, type WalletMetadata, type WalletVerificationOptions, createOpenid4vpAuthorizationRequest, createOpenid4vpAuthorizationResponse, getOpenid4vpClientId, isJarmResponseMode, isOpenid4vpAuthorizationRequestDcApi, parseDcqlVpToken, parseJarmAuthorizationResponse, parseOpenid4VpAuthorizationResponsePayload, parseOpenid4vpAuthorizationRequest, parseOpenid4vpAuthorizationResponse, parsePexVpToken, parseTransactionData, resolveOpenid4vpAuthorizationRequest, submitOpenid4vpAuthorizationResponse, validateOpenid4vpAuthorizationRequestPayload, validateOpenid4vpAuthorizationResponsePayload, verifyJarmAuthorizationResponse, zClientIdPrefix, zClientMetadata, zCredentialFormat, zJarmClientMetadata, zOpenid4vpAuthorizationResponse, zProofFormat, zVerifierAttestations, zWalletMetadata };
+export { type ClientIdPrefix, type ClientMetadata, type CreateOpenid4vpAuthorizationRequestOptions, type CreateOpenid4vpAuthorizationResponseOptions, type CreateOpenid4vpAuthorizationResponseResult, type CredentialFormat, type GetOpenid4vpClientIdOptions, type JarmClientMetadata, JarmMode, type Openid4vpAuthorizationRequest, type Openid4vpAuthorizationRequestDcApi, type Openid4vpAuthorizationResponse, Openid4vpClient, Openid4vpVerifier, type ParseJarmAuthorizationResponseOptions, type ParseOpenid4vpAuthorizationRequestOptions, type ParseOpenid4vpAuthorizationResponseOptions, type ParseTransactionDataOptions, type ParsedOpenid4vpAuthorizationResponse, type ProofFormat, type ResolveOpenid4vpAuthorizationRequestOptions, type ResolvedOpenid4vpAuthorizationRequest, type SubmitOpenid4vpAuthorizationResponseOptions, type TransactionDataEntry, type TransactionDataHashesCredentials, type ValidateOpenid4VpAuthorizationResponseResult, type ValidateOpenid4VpDcqlAuthorizationResponseResult, type ValidateOpenid4VpPexAuthorizationResponseResult, type ValidateOpenid4vpAuthorizationRequestPayloadOptions, type ValidateOpenid4vpAuthorizationResponseOptions, type VerifiedTransactionDataEntry, type VerifierAttestation, type VerifierAttestations, type VerifyJarmAuthorizationResponseOptions, type VerifyTransactionDataOptions, type VpToken, type VpTokenDcql, type VpTokenPex, type VpTokenPresentationEntry, type WalletMetadata, type WalletVerificationOptions, createOpenid4vpAuthorizationRequest, createOpenid4vpAuthorizationResponse, getOpenid4vpClientId, isJarmResponseMode, isOpenid4vpAuthorizationRequestDcApi, parseDcqlVpToken, parseJarmAuthorizationResponse, parseOpenid4VpAuthorizationResponsePayload, parseOpenid4vpAuthorizationRequest, parseOpenid4vpAuthorizationResponse, parsePexVpToken, parseTransactionData, resolveOpenid4vpAuthorizationRequest, submitOpenid4vpAuthorizationResponse, validateOpenid4vpAuthorizationRequestPayload, validateOpenid4vpAuthorizationResponsePayload, verifyJarmAuthorizationResponse, zClientIdPrefix, zClientMetadata, zCredentialFormat, zJarmClientMetadata, zOpenid4vpAuthorizationResponse, zProofFormat, zVerifierAttestations, zWalletMetadata };

package/dist/index.js

@@ -1101,10 +1101,10 @@ var import_oauth215 = require("@openid4vc/oauth2");
 function parseAuthorizationRequestVersion(request) {
   const requirements = [];
   if (request.verifier_info) {
-    requirements.push([">=", 29]);
+    requirements.push([">=", 100]);
   }
   if (request.verifier_attestations) {
-    requirements.push(["<", 29]);
+    requirements.push(["<", 100]);
   }
   if (request.client_metadata?.vp_formats_supported?.mso_mdoc?.deviceauth_alg_values || request.client_metadata?.vp_formats_supported?.mso_mdoc?.deviceauth_alg_values) {
     requirements.push([">=", 28]);
@@ -1189,12 +1189,12 @@ function parseAuthorizationRequestVersion(request) {
   }
   const lessThanVersions = requirements.filter(([operator]) => operator === "<").map(([_, version]) => version);
   const greaterThanVersions = requirements.filter(([operator]) => operator === ">=").map(([_, version]) => version);
-  const highestPossibleVersion = lessThanVersions.length > 0 ? Math.max(Math.min(...lessThanVersions) - 1, 18) : 29;
+  const highestPossibleVersion = lessThanVersions.length > 0 ? Math.max(Math.min(...lessThanVersions) - 1, 18) : 100;
   const lowestRequiredVersion = greaterThanVersions.length > 0 ? Math.max(...greaterThanVersions) : 18;
   if (lowestRequiredVersion > highestPossibleVersion) {
     throw new import_oauth215.Oauth2ServerErrorResponseError({
       error: import_oauth215.Oauth2ErrorCodes.InvalidRequest,
-      error_description: "Could not infer openid4vp version from the openid4vp request payload."
+      error_description: `Could not infer openid4vp version from the openid4vp request payload. Based on specification requirements, lowest required version is ${lowestRequiredVersion} and highest possible version is ${highestPossibleVersion}`
     });
   }
   return highestPossibleVersion;
@@ -1783,18 +1783,24 @@ var import_utils20 = require("@openid4vc/utils");
 
 // src/vp-token/z-vp-token.ts
 var import_zod17 = require("zod");
-var zVpTokenPexEntry = import_zod17.z.union([import_zod17.z.string(), import_zod17.z.record(import_zod17.z.any())], {
-  message: "pex vp_token entry must be a string or object"
+var zVpTokenPresentationEntry = import_zod17.z.union([import_zod17.z.string(), import_zod17.z.record(import_zod17.z.any())], {
+  message: "vp_token presentation entry must be string or object"
 });
 var zVpTokenPex = import_zod17.z.union(
-  [zVpTokenPexEntry, import_zod17.z.array(zVpTokenPexEntry).nonempty("Must have at least entry in vp_token array")],
+  [
+    zVpTokenPresentationEntry,
+    import_zod17.z.array(zVpTokenPresentationEntry).nonempty("Must have at least entry in vp_token array")
+  ],
   {
-    message: "pex vp_token must be a string, object or array of strings and objects"
+    message: "pex vp_token must be a string, object or non-empty array of strings and objects"
+  }
+);
+var zVpTokenDcql = import_zod17.z.record(
+  import_zod17.z.union([import_zod17.z.array(zVpTokenPresentationEntry).nonempty(), zVpTokenPresentationEntry]),
+  {
+    message: "dcql vp_token must be an object with keys referencing the dcql credential query id, and values a non-empty array of strings and objects, or string, or object"
   }
 );
-var zVpTokenDcql = import_zod17.z.record(import_zod17.z.union([import_zod17.z.string(), import_zod17.z.record(import_zod17.z.any())]), {
-  message: "dcql vp_token must be an object with keys referencing the dcql credential query id, and values the encoded (string or object) presentation"
-});
 var zVpToken = zVpTokenDcql.or(zVpTokenPex);
 
 // src/vp-token/parse-vp-token.ts
@@ -1807,11 +1813,17 @@ function parsePexVpToken(vpToken) {
   return Array.isArray(parsedVpToken) ? parsedVpToken : [parsedVpToken];
 }
 function parseDcqlVpToken(vpToken) {
-  return (0, import_utils20.parseWithErrorHandling)(
+  const parsedVpToken = (0, import_utils20.parseWithErrorHandling)(
     zVpTokenDcql,
     (0, import_utils20.parseIfJson)(vpToken),
     "Could not parse dcql vp_token. Expected an object where the values are encoded presentations"
   );
+  return Object.fromEntries(
+    Object.entries(parsedVpToken).map(([queryId, presentations]) => [
+      queryId,
+      Array.isArray(presentations) ? presentations : [presentations]
+    ])
+  );
 }
 
 // src/authorization-response/validate-authorization-response.ts