@openid4vc/openid4vp 0.3.0-alpha-20251017121147 → 0.3.0-alpha-20251017122507

package/dist/index.mjs

@@ -191,27 +191,27 @@ const zJarmClientMetadataParsed = zJarmClientMetadata.transform((client_metadata
 //#region src/models/z-vp-formats-supported.ts
 const zVpFormatsSupported = z.object({
 	"dc+sd-jwt": z.optional(z.object({
-		"sd-jwt_alg_values": z.optional(z.array(z.string()).nonempty()),
-		"kb-jwt_alg_values": z.optional(z.array(z.string()).nonempty())
-	}).passthrough()),
-	jwt_vc_json: z.optional(z.object({ alg_values: z.optional(z.array(z.string()).nonempty()) }).passthrough()),
+		"sd-jwt_alg_values": z.optional(z.tuple([z.string()], z.string())),
+		"kb-jwt_alg_values": z.optional(z.tuple([z.string()], z.string()))
+	}).loose()),
+	jwt_vc_json: z.optional(z.object({ alg_values: z.optional(z.tuple([z.string()], z.string())) }).loose()),
 	ldp_vc: z.optional(z.object({
-		proof_type_values: z.optional(z.array(z.string()).nonempty()),
-		cryptosuite_values: z.optional(z.array(z.string()).nonempty())
-	}).passthrough()),
+		proof_type_values: z.optional(z.tuple([z.string()], z.string())),
+		cryptosuite_values: z.optional(z.tuple([z.string()], z.string()))
+	}).loose()),
 	mso_mdoc: z.optional(z.object({
-		issuer_signed_alg_values: z.optional(z.array(z.number()).nonempty()),
-		device_signed_alg_values: z.optional(z.array(z.number()).nonempty()),
-		issuerauth_alg_values: z.optional(z.array(z.number()).nonempty()),
-		deviceauth_alg_values: z.optional(z.array(z.number()).nonempty())
-	}).passthrough())
-}).passthrough().catchall(z.object({}).passthrough());
-const zLegacyVpFormats = z.record(z.string(), z.object({ alg_values_supported: z.optional(z.array(z.string())) }).passthrough());
+		issuer_signed_alg_values: z.optional(z.tuple([z.number()], z.number())),
+		device_signed_alg_values: z.optional(z.tuple([z.number()], z.number())),
+		issuerauth_alg_values: z.optional(z.tuple([z.number()], z.number())),
+		deviceauth_alg_values: z.optional(z.tuple([z.number()], z.number()))
+	}).loose())
+}).loose().catchall(z.object({}).loose());
+const zLegacyVpFormats = z.record(z.string(), z.object({ alg_values_supported: z.optional(z.array(z.string())) }).loose());
 
 //#endregion
 //#region src/models/z-client-metadata.ts
 const zClientMetadata = z.object({
-	jwks_uri: z.string().url().optional(),
+	jwks_uri: z.url().optional(),
 	jwks: z.optional(zJwkSet),
 	vp_formats: z.optional(zLegacyVpFormats),
 	vp_formats_supported: z.optional(zVpFormatsSupported),
@@ -219,13 +219,13 @@ const zClientMetadata = z.object({
 	...zJarmClientMetadata.shape,
 	logo_uri: zHttpsUrl.optional(),
 	client_name: z.string().optional()
-}).passthrough();
+}).loose();
 
 //#endregion
 //#region src/models/z-verifier-attestations.ts
 const zVerifierAttestation = z$1.object({
 	format: z$1.string(),
-	data: z$1.record(z$1.unknown()).or(z$1.string()),
+	data: z$1.record(z$1.string(), z$1.unknown()).or(z$1.string()),
 	credential_ids: z$1.array(z$1.string()).optional()
 });
 const zVerifierAttestations = z$1.array(zVerifierAttestation);
@@ -243,14 +243,14 @@ const zOpenid4vpAuthorizationRequest = z.object({
 	nonce: z.string(),
 	wallet_nonce: z.string().optional(),
 	scope: z.string().optional(),
-	presentation_definition: z.record(z.any()).or(zStringToJson).optional(),
+	presentation_definition: z.record(z.string(), z.any()).or(zStringToJson).optional(),
 	presentation_definition_uri: zHttpsUrl.optional(),
-	dcql_query: z.record(z.any()).or(zStringToJson).optional(),
+	dcql_query: z.record(z.string(), z.any()).or(zStringToJson).optional(),
 	client_metadata: zClientMetadata.optional(),
 	client_metadata_uri: zHttpsUrl.optional(),
 	state: z.string().optional(),
-	transaction_data: z.array(z.string().base64url()).optional(),
-	trust_chain: z.array(z.string()).nonempty().optional(),
+	transaction_data: z.array(z.base64url()).optional(),
+	trust_chain: z.tuple([z.string()], z.string()).optional(),
 	client_id_scheme: z.enum([
 		"pre-registered",
 		"redirect_uri",
@@ -263,15 +263,15 @@ const zOpenid4vpAuthorizationRequest = z.object({
 	]).optional(),
 	verifier_attestations: zVerifierAttestations.optional(),
 	verifier_info: zVerifierAttestations.optional()
-}).passthrough();
-const zOpenid4vpAuthorizationRequestFromUriParams = z.string().url().transform((url) => Object.fromEntries(new URL(url).searchParams)).pipe(z.object({
+}).loose();
+const zOpenid4vpAuthorizationRequestFromUriParams = z.url().transform((url) => Object.fromEntries(new URL(url).searchParams)).pipe(z.object({
 	presentation_definition: zStringToJson.optional(),
 	client_metadata: zStringToJson.optional(),
 	dcql_query: zStringToJson.optional(),
 	transaction_data: zStringToJson.optional(),
 	verifier_attestations: zStringToJson.optional(),
 	verifier_info: zStringToJson.optional()
-}).passthrough());
+}).loose());
 
 //#endregion
 //#region src/authorization-request/z-authorization-request-dc-api.ts
@@ -388,7 +388,7 @@ const zJarAuthorizationRequest = z.object({
 	request_uri: z.optional(zHttpsUrl),
 	request_uri_method: z.optional(z.string()),
 	client_id: z.optional(z.string())
-}).passthrough();
+}).loose();
 function validateJarRequestParams(options) {
 	const { jarRequestParams } = options;
 	if (jarRequestParams.request && jarRequestParams.request_uri) throw new Oauth2ServerErrorResponseError({
@@ -857,7 +857,7 @@ async function fetchJarRequestObject(options) {
 const zJarRequestObjectPayload = z.object({
 	...zJwtPayload.shape,
 	client_id: z.string()
-}).passthrough();
+}).loose();
 
 //#endregion
 //#region src/jar/handle-jar-request/verify-jar-request.ts
@@ -1005,9 +1005,9 @@ async function verifyJarRequestObject(options) {
 //#region src/transaction-data/z-transaction-data.ts
 const zTransactionEntry = z.object({
 	type: z.string(),
-	credential_ids: z.array(z.string()).nonempty(),
-	transaction_data_hashes_alg: z.array(z.string()).nonempty().optional()
-}).passthrough();
+	credential_ids: z.tuple([z.string()], z.string()),
+	transaction_data_hashes_alg: z.tuple([z.string()], z.string()).optional()
+}).loose();
 const zTransactionData = z.array(zTransactionEntry);
 
 //#endregion
@@ -1290,14 +1290,14 @@ async function createOpenid4vpAuthorizationResponse(options) {
 
 //#endregion
 //#region src/models/z-pex.ts
-const zPexPresentationDefinition = z.record(z.any());
-const zPexPresentationSubmission = z.record(z.any());
+const zPexPresentationDefinition = z.record(z.string(), z.any());
+const zPexPresentationSubmission = z.record(z.string(), z.any());
 
 //#endregion
 //#region src/vp-token/z-vp-token.ts
-const zVpTokenPresentationEntry = z.union([z.string(), z.record(z.any())], { message: "vp_token presentation entry must be string or object" });
-const zVpTokenPex = z.union([zVpTokenPresentationEntry, z.array(zVpTokenPresentationEntry).nonempty("Must have at least entry in vp_token array")], { message: "pex vp_token must be a string, object or non-empty array of strings and objects" });
-const zVpTokenDcql = z.record(z.union([z.array(zVpTokenPresentationEntry).nonempty(), zVpTokenPresentationEntry]), { message: "dcql vp_token must be an object with keys referencing the dcql credential query id, and values a non-empty array of strings and objects, or string, or object" });
+const zVpTokenPresentationEntry = z.union([z.string(), z.record(z.string(), z.any())], { message: "vp_token presentation entry must be string or object" });
+const zVpTokenPex = z.union([zVpTokenPresentationEntry, z.tuple([zVpTokenPresentationEntry], zVpTokenPresentationEntry, "Must have at least entry in vp_token array")], { message: "pex vp_token must be a string, object or non-empty array of strings and objects" });
+const zVpTokenDcql = z.record(z.string(), z.union([z.tuple([zVpTokenPresentationEntry], zVpTokenPresentationEntry), zVpTokenPresentationEntry]), { message: "dcql vp_token must be an object with keys referencing the dcql credential query id, and values a non-empty array of strings and objects, or string, or object" });
 const zVpToken = zVpTokenDcql.or(zVpTokenPex);
 
 //#endregion
@@ -1311,7 +1311,7 @@ const zOpenid4vpAuthorizationResponse = z.object({
 	token_type: z.string().optional(),
 	access_token: z.string().optional(),
 	expires_in: z.coerce.number().optional()
-}).passthrough();
+}).loose();
 
 //#endregion
 //#region src/authorization-response/parse-authorization-response-payload.ts
@@ -1334,11 +1334,11 @@ const zJarmAuthorizationResponse = z.object({
 		exp: true
 	}).required().shape,
 	state: z.optional(z.string())
-}).passthrough();
+}).loose();
 const zJarmAuthorizationResponseEncryptedOnly = z.object({
 	...zJwtPayload.shape,
 	state: z.optional(z.string())
-}).passthrough();
+}).loose();
 
 //#endregion
 //#region src/jarm/jarm-authorization-response/jarm-validate-authorization-response.ts