@openvtc/pnm-core 0.1.0

package/dist/vta/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/vta/errors.ts"],"names":[],"mappings":"AAkBA,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,IAAI,CAAe;IACnB,MAAM,CAAU;IAChB,OAAO,CAAW;IAClB,UAAU,CAAU;IAE7B,YACE,IAAkB,EAClB,OAAe,EACf,OAAoE,EAAE;QAEtE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QACzD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5D,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACvE,CAAC;CACF;AAMD,MAAM,WAAW,GAA4B;IAC3C,sBAAsB;IACtB,mBAAmB;IACnB,kBAAkB;IAClB,kBAAkB;IAClB,sBAAsB;IACtB,qBAAqB;IACrB,kBAAkB;CACnB,CAAC;AAEF,SAAS,UAAU,CAAC,GAAuB,EAAE,MAAc;IACzD,IAAI,GAAG,IAAK,WAAiC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5D,OAAO,GAAmB,CAAC;IAC7B,CAAC;IACD,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,sBAAsB,CAAC;IAClD,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,mBAAmB,CAAC;IAC/C,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,kBAAkB,CAAC;IAC9C,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,kBAAkB,CAAC;IAC9C,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,sBAAsB,CAAC;IAClD,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,kBAAkB,CAAC;IAC7C,OAAO,qBAAqB,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAa;IACnD,IAAI,IAAiC,CAAC;IACtC,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAoB,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,4BAA4B;IAC9B,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,EAAE,KAAK,EAAE,OAAO,IAAI,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;IAC1E,MAAM,IAAI,GAA+D;QACvE,MAAM,EAAE,GAAG,CAAC,MAAM;KACnB,CAAC;IACF,IAAI,IAAI,EAAE,KAAK,EAAE,OAAO,KAAK,SAAS;QAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;IAC1E,IAAI,IAAI,EAAE,KAAK,EAAE,UAAU,KAAK,SAAS;QAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;IACnF,OAAO,IAAI,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AACjD,CAAC"}

package/dist/vta/index.d.ts

@@ -0,0 +1,15 @@
+export * from "./bridge-memory.js";
+export * from "./bridge-mediator-session.js";
+export * from "./client.js";
+export * from "./contexts.js";
+export * from "./didcomm.js";
+export * from "./errors.js";
+export * from "./mediation.js";
+export * from "./mediator-client.js";
+export * from "./pickup.js";
+export * from "./protocol.js";
+export * from "./smoke.js";
+export * from "./transport.js";
+export * from "./types.js";
+export * from "./wallet-session.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/vta/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/vta/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC"}

package/dist/vta/index.js

@@ -0,0 +1,15 @@
+export * from "./bridge-memory.js";
+export * from "./bridge-mediator-session.js";
+export * from "./client.js";
+export * from "./contexts.js";
+export * from "./didcomm.js";
+export * from "./errors.js";
+export * from "./mediation.js";
+export * from "./mediator-client.js";
+export * from "./pickup.js";
+export * from "./protocol.js";
+export * from "./smoke.js";
+export * from "./transport.js";
+export * from "./types.js";
+export * from "./wallet-session.js";
+//# sourceMappingURL=index.js.map

package/dist/vta/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/vta/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC"}

package/dist/vta/mediation.d.ts

@@ -0,0 +1,80 @@
+/**
+ * DIDComm v2 protocol — `coordinate-mediation/2.0`.
+ *
+ * Spec: <https://didcomm.org/coordinate-mediation/2.0/>
+ *
+ * A wallet uses this protocol to enroll itself with a mediator so
+ * the mediator will accept and queue inbound messages on the
+ * wallet's behalf. Three exchanges:
+ *
+ *   mediate-request    → mediate-grant / mediate-deny
+ *   keylist-update     → keylist-update-response
+ *   keylist-query      → keylist
+ *
+ * After a successful mediate-grant + keylist-update(add), the
+ * mediator will accept and queue messages addressed to any
+ * `recipient_did` the wallet registered. The wallet retrieves them
+ * via the `pickup/3.0` protocol on the same transport.
+ */
+export declare const CoordinateMediationProtocol: {
+    readonly mediateRequest: "https://didcomm.org/coordinate-mediation/2.0/mediate-request";
+    readonly mediateGrant: "https://didcomm.org/coordinate-mediation/2.0/mediate-grant";
+    readonly mediateDeny: "https://didcomm.org/coordinate-mediation/2.0/mediate-deny";
+    readonly keylistUpdate: "https://didcomm.org/coordinate-mediation/2.0/keylist-update";
+    readonly keylistUpdateResponse: "https://didcomm.org/coordinate-mediation/2.0/keylist-update-response";
+    readonly keylistQuery: "https://didcomm.org/coordinate-mediation/2.0/keylist-query";
+    readonly keylist: "https://didcomm.org/coordinate-mediation/2.0/keylist";
+};
+export type CoordinateMediationMessageType = (typeof CoordinateMediationProtocol)[keyof typeof CoordinateMediationProtocol];
+/** mediate-request body. Empty per spec. */
+export interface MediateRequestBody {
+}
+/** mediate-grant body. */
+export interface MediateGrantBody {
+    /**
+     * The DID the wallet should publish in its DID document
+     * `service` entry's `routingKeys` to indicate "messages for me go
+     * via this mediator first".
+     */
+    routing_did: string[];
+}
+/** mediate-deny body. */
+export interface MediateDenyBody {
+    reason?: string;
+}
+export type KeylistUpdateAction = "add" | "remove";
+export interface KeylistUpdateItem {
+    recipient_did: string;
+    action: KeylistUpdateAction;
+}
+export interface KeylistUpdateBody {
+    updates: KeylistUpdateItem[];
+}
+export type KeylistUpdateResult = "client_error" | "server_error" | "no_change" | "success";
+export interface KeylistUpdateResponseItem {
+    recipient_did: string;
+    action: KeylistUpdateAction;
+    result: KeylistUpdateResult;
+}
+export interface KeylistUpdateResponseBody {
+    updated: KeylistUpdateResponseItem[];
+}
+export interface KeylistQueryBody {
+    /** Optional pagination cursor — opaque to the wallet. */
+    paginate?: {
+        limit?: number;
+        offset?: number;
+    };
+}
+export interface KeylistEntry {
+    recipient_did: string;
+}
+export interface KeylistBody {
+    keys: KeylistEntry[];
+    pagination?: {
+        count: number;
+        offset: number;
+        remaining: number;
+    };
+}
+//# sourceMappingURL=mediation.d.ts.map

package/dist/vta/mediation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mediation.d.ts","sourceRoot":"","sources":["../../src/vta/mediation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,eAAO,MAAM,2BAA2B;;;;;;;;CAQ9B,CAAC;AAEX,MAAM,MAAM,8BAA8B,GACxC,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,OAAO,2BAA2B,CAAC,CAAC;AAMjF,4CAA4C;AAC5C,MAAM,WAAW,kBAAkB;CAElC;AAED,0BAA0B;AAC1B,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,yBAAyB;AACzB,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,mBAAmB,GAAG,KAAK,GAAG,QAAQ,CAAC;AAEnD,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,mBAAmB,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,iBAAiB,EAAE,CAAC;CAC9B;AAED,MAAM,MAAM,mBAAmB,GAC3B,cAAc,GACd,cAAc,GACd,WAAW,GACX,SAAS,CAAC;AAEd,MAAM,WAAW,yBAAyB;IACxC,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,MAAM,EAAE,mBAAmB,CAAC;CAC7B;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,yBAAyB,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,gBAAgB;IAC/B,yDAAyD;IACzD,QAAQ,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAChD;AAED,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,YAAY,EAAE,CAAC;IACrB,UAAU,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CACnE"}

package/dist/vta/mediation.js

@@ -0,0 +1,29 @@
+/**
+ * DIDComm v2 protocol — `coordinate-mediation/2.0`.
+ *
+ * Spec: <https://didcomm.org/coordinate-mediation/2.0/>
+ *
+ * A wallet uses this protocol to enroll itself with a mediator so
+ * the mediator will accept and queue inbound messages on the
+ * wallet's behalf. Three exchanges:
+ *
+ *   mediate-request    → mediate-grant / mediate-deny
+ *   keylist-update     → keylist-update-response
+ *   keylist-query      → keylist
+ *
+ * After a successful mediate-grant + keylist-update(add), the
+ * mediator will accept and queue messages addressed to any
+ * `recipient_did` the wallet registered. The wallet retrieves them
+ * via the `pickup/3.0` protocol on the same transport.
+ */
+const BASE = "https://didcomm.org/coordinate-mediation/2.0";
+export const CoordinateMediationProtocol = {
+    mediateRequest: `${BASE}/mediate-request`,
+    mediateGrant: `${BASE}/mediate-grant`,
+    mediateDeny: `${BASE}/mediate-deny`,
+    keylistUpdate: `${BASE}/keylist-update`,
+    keylistUpdateResponse: `${BASE}/keylist-update-response`,
+    keylistQuery: `${BASE}/keylist-query`,
+    keylist: `${BASE}/keylist`,
+};
+//# sourceMappingURL=mediation.js.map

package/dist/vta/mediation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mediation.js","sourceRoot":"","sources":["../../src/vta/mediation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,IAAI,GAAG,8CAA8C,CAAC;AAE5D,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,cAAc,EAAE,GAAG,IAAI,kBAAkB;IACzC,YAAY,EAAE,GAAG,IAAI,gBAAgB;IACrC,WAAW,EAAE,GAAG,IAAI,eAAe;IACnC,aAAa,EAAE,GAAG,IAAI,iBAAiB;IACvC,qBAAqB,EAAE,GAAG,IAAI,0BAA0B;IACxD,YAAY,EAAE,GAAG,IAAI,gBAAgB;IACrC,OAAO,EAAE,GAAG,IAAI,UAAU;CAClB,CAAC"}

package/dist/vta/mediator-client.d.ts

@@ -0,0 +1,66 @@
+import { Identity, type PublicJwk } from "../didcomm/index.js";
+import type { RemoteDidcommEndpoint } from "./didcomm.js";
+import { type KeylistBody, type KeylistUpdateItem, type KeylistUpdateResponseBody, type MediateGrantBody } from "./mediation.js";
+import type { DidcommMessageBridge } from "./transport.js";
+export interface MediatorClientOptions {
+    bridge: DidcommMessageBridge;
+    holder: Identity;
+    mediator: RemoteDidcommEndpoint;
+    /** Per-request timeout (default 30s). */
+    timeoutMs?: number;
+}
+/**
+ * `coordinate-mediation/2.0` client. Talks directly to a DIDComm
+ * mediator (authcrypt holder→mediator; **no** forward wrapping) and
+ * threads request/response by DIDComm `thid` through the shared
+ * `DidcommMessageBridge`.
+ *
+ * Typical first-run sequence:
+ *
+ * ```ts
+ * const mc = new MediatorClient({ bridge, holder, mediator });
+ * const grant = await mc.requestMediation();
+ * await mc.updateKeylist([{ recipient_did: holder.did, action: "add" }]);
+ * // grant.routing_did → publish in your DID document's service entry
+ * ```
+ */
+export declare class MediatorClient {
+    private readonly bridge;
+    private readonly holder;
+    private readonly mediator;
+    private readonly timeoutMs;
+    constructor(opts: MediatorClientOptions);
+    requestMediation(): Promise<MediateGrantBody>;
+    updateKeylist(updates: KeylistUpdateItem[]): Promise<KeylistUpdateResponseBody>;
+    queryKeylist(paginate?: {
+        limit?: number;
+        offset?: number;
+    }): Promise<KeylistBody>;
+    /**
+     * Toggle Pickup 3.0 live-delivery mode. When enabled, the
+     * mediator pushes inbound DIDComm messages on the same channel
+     * (via `pickup/3.0/delivery`) as soon as they arrive.
+     *
+     * Fire-and-forget per spec; no reply.
+     */
+    setLiveDelivery(enabled: boolean): Promise<void>;
+    /**
+     * Acknowledge delivery of one or more queued messages by their
+     * mediator-assigned IDs. Tells the mediator it can drop them
+     * from the holder's queue.
+     *
+     * Fire-and-forget per spec; no reply.
+     */
+    acknowledgeMessages(messageIds: string[]): Promise<void>;
+    private exchange;
+    /**
+     * Construct the outbound authcrypt envelope (no forward wrap —
+     * the mediator IS the recipient). Exposed for tests/inspection.
+     */
+    buildOutbound<Req extends object>(requestType: string, body: Req): Promise<{
+        outer: string;
+        requestId: string;
+    }>;
+}
+export type { PublicJwk };
+//# sourceMappingURL=mediator-client.d.ts.map

package/dist/vta/mediator-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mediator-client.d.ts","sourceRoot":"","sources":["../../src/vta/mediator-client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EAER,KAAK,SAAS,EACf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAE1D,OAAO,EAEL,KAAK,WAAW,EAGhB,KAAK,iBAAiB,EACtB,KAAK,yBAAyB,EAC9B,KAAK,gBAAgB,EAEtB,MAAM,gBAAgB,CAAC;AAMxB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAE3D,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,oBAAoB,CAAC;IAC7B,MAAM,EAAE,QAAQ,CAAC;IACjB,QAAQ,EAAE,qBAAqB,CAAC;IAChC,yCAAyC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AA8BD;;;;;;;;;;;;;;GAcG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAW;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwB;IACjD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEvB,IAAI,EAAE,qBAAqB;IAOvC,gBAAgB,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAY7C,aAAa,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAS/E,YAAY,CAAC,QAAQ,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC;IASlF;;;;;;OAMG;IACG,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAMtD;;;;;;OAMG;IACG,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;YAOhD,QAAQ;IA6CtB;;;OAGG;IACG,aAAa,CAAC,GAAG,SAAS,MAAM,EACpC,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,GAAG,GACR,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CAiBjD;AAGD,YAAY,EAAE,SAAS,EAAE,CAAC"}

package/dist/vta/mediator-client.js

@@ -0,0 +1,139 @@
+import { Identity, packAuthcrypt, } from "../didcomm/index.js";
+import { VtaClientError } from "./errors.js";
+import { CoordinateMediationProtocol, } from "./mediation.js";
+import { PickupProtocol, } from "./pickup.js";
+const DEFAULT_TIMEOUT_MS = 30_000;
+function newMessageId() {
+    return globalThis.crypto.randomUUID();
+}
+const KNOWN_ERROR_CODES = new Set([
+    "e.p.msg.unauthorized",
+    "e.p.msg.forbidden",
+    "e.p.msg.notfound",
+    "e.p.msg.conflict",
+    "e.p.msg.rate_limited",
+    "e.p.msg.bad_request",
+    "e.p.msg.internal",
+]);
+function coerceProblemCode(code) {
+    if (code && KNOWN_ERROR_CODES.has(code)) {
+        return code;
+    }
+    return "e.p.msg.bad_request";
+}
+/**
+ * `coordinate-mediation/2.0` client. Talks directly to a DIDComm
+ * mediator (authcrypt holder→mediator; **no** forward wrapping) and
+ * threads request/response by DIDComm `thid` through the shared
+ * `DidcommMessageBridge`.
+ *
+ * Typical first-run sequence:
+ *
+ * ```ts
+ * const mc = new MediatorClient({ bridge, holder, mediator });
+ * const grant = await mc.requestMediation();
+ * await mc.updateKeylist([{ recipient_did: holder.did, action: "add" }]);
+ * // grant.routing_did → publish in your DID document's service entry
+ * ```
+ */
+export class MediatorClient {
+    bridge;
+    holder;
+    mediator;
+    timeoutMs;
+    constructor(opts) {
+        this.bridge = opts.bridge;
+        this.holder = opts.holder;
+        this.mediator = opts.mediator;
+        this.timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    }
+    requestMediation() {
+        const body = {};
+        return this.exchange(CoordinateMediationProtocol.mediateRequest, body, [
+            CoordinateMediationProtocol.mediateGrant,
+            CoordinateMediationProtocol.mediateDeny,
+        ]);
+    }
+    updateKeylist(updates) {
+        const body = { updates };
+        return this.exchange(CoordinateMediationProtocol.keylistUpdate, body, [CoordinateMediationProtocol.keylistUpdateResponse]);
+    }
+    queryKeylist(paginate) {
+        const body = paginate ? { paginate } : {};
+        return this.exchange(CoordinateMediationProtocol.keylistQuery, body, [CoordinateMediationProtocol.keylist]);
+    }
+    /**
+     * Toggle Pickup 3.0 live-delivery mode. When enabled, the
+     * mediator pushes inbound DIDComm messages on the same channel
+     * (via `pickup/3.0/delivery`) as soon as they arrive.
+     *
+     * Fire-and-forget per spec; no reply.
+     */
+    async setLiveDelivery(enabled) {
+        const body = { live_delivery: enabled };
+        const { outer } = await this.buildOutbound(PickupProtocol.liveDeliveryChange, body);
+        await this.bridge.send(outer);
+    }
+    /**
+     * Acknowledge delivery of one or more queued messages by their
+     * mediator-assigned IDs. Tells the mediator it can drop them
+     * from the holder's queue.
+     *
+     * Fire-and-forget per spec; no reply.
+     */
+    async acknowledgeMessages(messageIds) {
+        if (messageIds.length === 0)
+            return;
+        const body = { message_id_list: messageIds };
+        const { outer } = await this.buildOutbound(PickupProtocol.messagesReceived, body);
+        await this.bridge.send(outer);
+    }
+    async exchange(requestType, body, acceptedResponseTypes) {
+        const { outer, requestId } = await this.buildOutbound(requestType, body);
+        // The bridge returns the decrypted, sender-authenticated reply.
+        const msg = await this.bridge.sendAndAwaitReply(outer, requestId, {
+            timeoutMs: this.timeoutMs,
+        });
+        if (msg.type === "https://didcomm.org/report-problem/2.0/problem-report") {
+            const pr = (msg.body ?? {});
+            throw new VtaClientError(coerceProblemCode(pr.code), pr.comment ?? pr.code ?? "problem-report", {
+                details: pr,
+            });
+        }
+        if (msg.type === CoordinateMediationProtocol.mediateDeny) {
+            throw new VtaClientError("e.p.msg.forbidden", "mediator denied mediation request", { details: msg.body });
+        }
+        if (!msg.type || !acceptedResponseTypes.includes(msg.type)) {
+            throw new VtaClientError("e.client.parse", `unexpected reply type: ${msg.type ?? "(none)"}`);
+        }
+        if (msg.thid !== requestId) {
+            throw new VtaClientError("e.client.parse", `reply thid ${msg.thid ?? "(none)"} != request id ${requestId}`);
+        }
+        if (msg.from !== this.mediator.did) {
+            throw new VtaClientError("e.p.msg.unauthorized", `reply from ${msg.from ?? "(none)"} != mediator ${this.mediator.did}`);
+        }
+        return (msg.body ?? {});
+    }
+    /**
+     * Construct the outbound authcrypt envelope (no forward wrap —
+     * the mediator IS the recipient). Exposed for tests/inspection.
+     */
+    async buildOutbound(requestType, body) {
+        const requestId = newMessageId();
+        const message = {
+            id: requestId,
+            type: requestType,
+            from: this.holder.did,
+            to: [this.mediator.did],
+            body,
+        };
+        const outer = await packAuthcrypt(message, this.holder, [
+            {
+                kid: this.mediator.keyAgreementKid,
+                jwk: this.mediator.keyAgreementPublicJwk,
+            },
+        ]);
+        return { outer, requestId };
+    }
+}
+//# sourceMappingURL=mediator-client.js.map

package/dist/vta/mediator-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mediator-client.js","sourceRoot":"","sources":["../../src/vta/mediator-client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EACR,aAAa,GAEd,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,cAAc,EAAqB,MAAM,aAAa,CAAC;AAChE,OAAO,EACL,2BAA2B,GAQ5B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,cAAc,GAGf,MAAM,aAAa,CAAC;AAWrB,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,SAAS,YAAY;IACnB,OAAO,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;AACxC,CAAC;AAOD,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAe;IAC9C,sBAAsB;IACtB,mBAAmB;IACnB,kBAAkB;IAClB,kBAAkB;IAClB,sBAAsB;IACtB,qBAAqB;IACrB,kBAAkB;CACnB,CAAC,CAAC;AAEH,SAAS,iBAAiB,CAAC,IAAwB;IACjD,IAAI,IAAI,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAoB,CAAC,EAAE,CAAC;QACxD,OAAO,IAAoB,CAAC;IAC9B,CAAC;IACD,OAAO,qBAAqB,CAAC;AAC/B,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,cAAc;IACR,MAAM,CAAuB;IAC7B,MAAM,CAAW;IACjB,QAAQ,CAAwB;IAChC,SAAS,CAAS;IAEnC,YAAY,IAA2B;QACrC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;IACxD,CAAC;IAED,gBAAgB;QACd,MAAM,IAAI,GAAuB,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC,QAAQ,CAClB,2BAA2B,CAAC,cAAc,EAC1C,IAAI,EACJ;YACE,2BAA2B,CAAC,YAAY;YACxC,2BAA2B,CAAC,WAAW;SACxC,CACF,CAAC;IACJ,CAAC;IAED,aAAa,CAAC,OAA4B;QACxC,MAAM,IAAI,GAAsB,EAAE,OAAO,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC,QAAQ,CAClB,2BAA2B,CAAC,aAAa,EACzC,IAAI,EACJ,CAAC,2BAA2B,CAAC,qBAAqB,CAAC,CACpD,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,QAA8C;QACzD,MAAM,IAAI,GAAqB,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,OAAO,IAAI,CAAC,QAAQ,CAClB,2BAA2B,CAAC,YAAY,EACxC,IAAI,EACJ,CAAC,2BAA2B,CAAC,OAAO,CAAC,CACtC,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,eAAe,CAAC,OAAgB;QACpC,MAAM,IAAI,GAA2B,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;QAChE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;QACpF,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,mBAAmB,CAAC,UAAoB;QAC5C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACpC,MAAM,IAAI,GAAyB,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC;QACnE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;QAClF,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAEO,KAAK,CAAC,QAAQ,CACpB,WAAmB,EACnB,IAAS,EACT,qBAA+B;QAE/B,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAEzE,gEAAgE;QAChE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,EAAE,SAAS,EAAE;YAChE,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,IAAI,KAAK,uDAAuD,EAAE,CAAC;YACzE,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAsB,CAAC;YACjD,MAAM,IAAI,cAAc,CAAC,iBAAiB,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,IAAI,IAAI,gBAAgB,EAAE;gBAC9F,OAAO,EAAE,EAAE;aACZ,CAAC,CAAC;QACL,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,2BAA2B,CAAC,WAAW,EAAE,CAAC;YACzD,MAAM,IAAI,cAAc,CACtB,mBAAmB,EACnB,mCAAmC,EACnC,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,CACtB,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,cAAc,CACtB,gBAAgB,EAChB,0BAA0B,GAAG,CAAC,IAAI,IAAI,QAAQ,EAAE,CACjD,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,cAAc,CACtB,gBAAgB,EAChB,cAAc,GAAG,CAAC,IAAI,IAAI,QAAQ,kBAAkB,SAAS,EAAE,CAChE,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;YACnC,MAAM,IAAI,cAAc,CACtB,sBAAsB,EACtB,cAAc,GAAG,CAAC,IAAI,IAAI,QAAQ,gBAAgB,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CACtE,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAQ,CAAC;IACjC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa,CACjB,WAAmB,EACnB,IAAS;QAET,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG;YACd,EAAE,EAAE,SAAS;YACb,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG;YACrB,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YACvB,IAAI;SACL,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE;YACtD;gBACE,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,eAAe;gBAClC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,qBAAqB;aACzC;SACF,CAAC,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC9B,CAAC;CACF"}

package/dist/vta/pickup.d.ts

@@ -0,0 +1,81 @@
+/**
+ * DIDComm v2 protocol — `messagepickup/3.0`.
+ *
+ * Spec: <https://didcomm.org/messagepickup/3.0/>
+ *
+ * The wallet uses Pickup 3.0 to retrieve messages queued at its
+ * mediator. Two operating modes:
+ *
+ * - **Polling**: wallet sends `status-request` to check the queue,
+ *   then `delivery-request` to receive batches, then
+ *   `messages-received` to ACK so the mediator can free them.
+ * - **Live mode**: wallet sends `live-delivery-change` with
+ *   `live_delivery: true` and the mediator pushes `delivery`
+ *   messages immediately when traffic arrives. This is the mode the
+ *   library's `MediatorSession` enables on connect.
+ *
+ * In both modes, the `delivery` envelope carries attachments where
+ * each attachment is one inner DIDComm message originally sent
+ * through the mediator on the wallet's behalf.
+ */
+export declare const PickupProtocol: {
+    readonly statusRequest: "https://didcomm.org/messagepickup/3.0/status-request";
+    readonly status: "https://didcomm.org/messagepickup/3.0/status";
+    readonly deliveryRequest: "https://didcomm.org/messagepickup/3.0/delivery-request";
+    readonly delivery: "https://didcomm.org/messagepickup/3.0/delivery";
+    readonly messagesReceived: "https://didcomm.org/messagepickup/3.0/messages-received";
+    readonly liveDeliveryChange: "https://didcomm.org/messagepickup/3.0/live-delivery-change";
+};
+export type PickupMessageType = (typeof PickupProtocol)[keyof typeof PickupProtocol];
+export interface StatusRequestBody {
+    /** Optional: filter to a specific recipient DID. */
+    recipient_did?: string;
+}
+export interface StatusBody {
+    /** Total messages queued. */
+    message_count: number;
+    /** Optional: count for a specific recipient if filtered. */
+    recipient_did?: string;
+    longest_waited_seconds?: number;
+    newest_received_time?: number;
+    oldest_received_time?: number;
+    total_bytes?: number;
+    live_delivery?: boolean;
+}
+export interface DeliveryRequestBody {
+    /** Maximum number of messages to deliver in this batch. */
+    limit: number;
+    /** Optional: filter to a specific recipient DID. */
+    recipient_did?: string;
+}
+export interface DeliveryAttachment {
+    /** Per-message id — typically the mediator's queue id. Used by
+     *  the wallet in `messages-received.message_id_list`. */
+    id: string;
+    data: {
+        /** The full DIDComm JWE as JSON (parsed object), not a string. */
+        json: unknown;
+    };
+}
+export interface DeliveryBody {
+    recipient_did?: string;
+}
+/** Spec note: pickup/3.0/delivery's attachments live at the top
+ *  level of the Message envelope, not in `body`. The Message struct
+ *  in `affinidi-messaging-didcomm` exposes them via `attachments`
+ *  (flattened on the wire by serde). */
+export interface DeliveryEnvelopeShape {
+    type: typeof PickupProtocol.delivery;
+    from?: string;
+    to?: string[];
+    thid?: string;
+    body: DeliveryBody;
+    attachments: DeliveryAttachment[];
+}
+export interface MessagesReceivedBody {
+    message_id_list: string[];
+}
+export interface LiveDeliveryChangeBody {
+    live_delivery: boolean;
+}
+//# sourceMappingURL=pickup.d.ts.map

package/dist/vta/pickup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pickup.d.ts","sourceRoot":"","sources":["../../src/vta/pickup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,eAAO,MAAM,cAAc;;;;;;;CAOjB,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAC3B,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,OAAO,cAAc,CAAC,CAAC;AAMvD,MAAM,WAAW,iBAAiB;IAChC,oDAAoD;IACpD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,UAAU;IACzB,6BAA6B;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,2DAA2D;IAC3D,KAAK,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC;6DACyD;IACzD,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE;QACJ,kEAAkE;QAClE,IAAI,EAAE,OAAO,CAAC;KACf,CAAC;CACH;AAED,MAAM,WAAW,YAAY;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;wCAGwC;AACxC,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,OAAO,cAAc,CAAC,QAAQ,CAAC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,YAAY,CAAC;IACnB,WAAW,EAAE,kBAAkB,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,oBAAoB;IACnC,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,OAAO,CAAC;CACxB"}

package/dist/vta/pickup.js

@@ -0,0 +1,30 @@
+/**
+ * DIDComm v2 protocol — `messagepickup/3.0`.
+ *
+ * Spec: <https://didcomm.org/messagepickup/3.0/>
+ *
+ * The wallet uses Pickup 3.0 to retrieve messages queued at its
+ * mediator. Two operating modes:
+ *
+ * - **Polling**: wallet sends `status-request` to check the queue,
+ *   then `delivery-request` to receive batches, then
+ *   `messages-received` to ACK so the mediator can free them.
+ * - **Live mode**: wallet sends `live-delivery-change` with
+ *   `live_delivery: true` and the mediator pushes `delivery`
+ *   messages immediately when traffic arrives. This is the mode the
+ *   library's `MediatorSession` enables on connect.
+ *
+ * In both modes, the `delivery` envelope carries attachments where
+ * each attachment is one inner DIDComm message originally sent
+ * through the mediator on the wallet's behalf.
+ */
+const BASE = "https://didcomm.org/messagepickup/3.0";
+export const PickupProtocol = {
+    statusRequest: `${BASE}/status-request`,
+    status: `${BASE}/status`,
+    deliveryRequest: `${BASE}/delivery-request`,
+    delivery: `${BASE}/delivery`,
+    messagesReceived: `${BASE}/messages-received`,
+    liveDeliveryChange: `${BASE}/live-delivery-change`,
+};
+//# sourceMappingURL=pickup.js.map

package/dist/vta/pickup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pickup.js","sourceRoot":"","sources":["../../src/vta/pickup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,IAAI,GAAG,uCAAuC,CAAC;AAErD,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,aAAa,EAAE,GAAG,IAAI,iBAAiB;IACvC,MAAM,EAAE,GAAG,IAAI,SAAS;IACxB,eAAe,EAAE,GAAG,IAAI,mBAAmB;IAC3C,QAAQ,EAAE,GAAG,IAAI,WAAW;IAC5B,gBAAgB,EAAE,GAAG,IAAI,oBAAoB;IAC7C,kBAAkB,EAAE,GAAG,IAAI,uBAAuB;CAC1C,CAAC"}

package/dist/vta/protocol.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Trust-Tasks passkey-VM management over DIDComm.
+ *
+ * The VTA exposes passkey verification-method enrollment as Trust-Tasks
+ * under the `trusttasks.org` namespace. Over DIDComm they ride the
+ * framework binding (`https://trusttasks.org/binding/didcomm/0.1`): every
+ * request is a single reserved DIDComm message type
+ * ({@link TRUST_TASK_ENVELOPE_TYPE}) whose `body` is a full `TrustTask`
+ * document; the document's own `type` selects the operation. Replies are
+ * also binding envelopes whose body is the framework response document
+ * (success) or a `trust-task-error/0.1` document (failure), correlated by
+ * the DIDComm `thid`.
+ */
+/** DIDComm message `type` for every Trust-Task envelope. The body is a
+ *  {@link TrustTask} document. Conformant peers reject any other type. */
+export declare const TRUST_TASK_ENVELOPE_TYPE = "https://trusttasks.org/binding/didcomm/0.1/envelope";
+/** Framework error-document `type` — a `TrustTask` whose payload is a
+ *  {@link TrustTaskErrorPayload}. */
+export declare const TRUST_TASK_ERROR_TYPE = "https://trusttasks.org/spec/trust-task-error/0.1";
+/** Trust-task operation type URIs — the value of a request envelope's
+ *  `type` field (NOT the DIDComm message type, which is always
+ *  {@link TRUST_TASK_ENVELOPE_TYPE}). */
+export declare const PasskeyVmTask: {
+    readonly enrollChallenge: "https://trusttasks.org/spec/vta/passkey-vms/enroll-challenge/1.0";
+    readonly enrollSubmit: "https://trusttasks.org/spec/vta/passkey-vms/enroll-submit/1.0";
+    readonly list: "https://trusttasks.org/spec/vta/passkey-vms/list/1.0";
+    readonly revoke: "https://trusttasks.org/spec/vta/passkey-vms/revoke/1.0";
+};
+export type PasskeyVmTaskType = (typeof PasskeyVmTask)[keyof typeof PasskeyVmTask];
+/**
+ * A Trust-Task document — the DIDComm message body. Field names are the
+ * canonical camelCase wire form (`trust_tasks_rs::TrustTask`).
+ */
+export interface TrustTask<P> {
+    id: string;
+    type: string;
+    issuer?: string;
+    recipient?: string;
+    threadId?: string;
+    issuedAt?: string;
+    expiresAt?: string;
+    payload: P;
+}
+/** Payload of a `trust-task-error/0.1` document. `code` is a snake_case
+ *  framework status (`permission_denied`, `malformed_request`,
+ *  `task_failed`, `unsupported_type`, `internal_error`, …). */
+export interface TrustTaskErrorPayload {
+    code: string;
+    message?: string;
+    retryable?: boolean;
+}
+export interface EnrollChallengePayload {
+    did: string;
+    label?: string;
+}
+export interface EnrollSubmitPayload {
+    did: string;
+    ceremonyId: string;
+    credentialId: string;
+    publicKeyMultibase: string;
+    coseAlgorithm: number;
+    attestationObject: string;
+    clientDataJson: string;
+    authenticatorData: string;
+    transports: AuthenticatorTransport[];
+    label?: string;
+}
+export interface ListPayload {
+    did: string;
+}
+export interface RevokePayload {
+    did: string;
+    fragment: string;
+}
+export type { EnrollmentChallengeResponse as EnrollChallengeResult, EnrollmentSubmitResponse as EnrollSubmitResult, PasskeyList as ListResult, } from "./types.js";
+//# sourceMappingURL=protocol.d.ts.map

package/dist/vta/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../src/vta/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH;0EAC0E;AAC1E,eAAO,MAAM,wBAAwB,wDACkB,CAAC;AAExD;qCACqC;AACrC,eAAO,MAAM,qBAAqB,qDACkB,CAAC;AAIrD;;yCAEyC;AACzC,eAAO,MAAM,aAAa;;;;;CAKhB,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAC3B,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,OAAO,aAAa,CAAC,CAAC;AAErD;;;GAGG;AACH,MAAM,WAAW,SAAS,CAAC,CAAC;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,CAAC,CAAC;CACZ;AAED;;+DAE+D;AAC/D,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAOD,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,sBAAsB,EAAE,CAAC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;CAClB;AAOD,YAAY,EACV,2BAA2B,IAAI,qBAAqB,EACpD,wBAAwB,IAAI,kBAAkB,EAC9C,WAAW,IAAI,UAAU,GAC1B,MAAM,YAAY,CAAC"}

package/dist/vta/protocol.js

@@ -0,0 +1,30 @@
+/**
+ * Trust-Tasks passkey-VM management over DIDComm.
+ *
+ * The VTA exposes passkey verification-method enrollment as Trust-Tasks
+ * under the `trusttasks.org` namespace. Over DIDComm they ride the
+ * framework binding (`https://trusttasks.org/binding/didcomm/0.1`): every
+ * request is a single reserved DIDComm message type
+ * ({@link TRUST_TASK_ENVELOPE_TYPE}) whose `body` is a full `TrustTask`
+ * document; the document's own `type` selects the operation. Replies are
+ * also binding envelopes whose body is the framework response document
+ * (success) or a `trust-task-error/0.1` document (failure), correlated by
+ * the DIDComm `thid`.
+ */
+/** DIDComm message `type` for every Trust-Task envelope. The body is a
+ *  {@link TrustTask} document. Conformant peers reject any other type. */
+export const TRUST_TASK_ENVELOPE_TYPE = "https://trusttasks.org/binding/didcomm/0.1/envelope";
+/** Framework error-document `type` — a `TrustTask` whose payload is a
+ *  {@link TrustTaskErrorPayload}. */
+export const TRUST_TASK_ERROR_TYPE = "https://trusttasks.org/spec/trust-task-error/0.1";
+const PASSKEY_VMS = "https://trusttasks.org/spec/vta/passkey-vms";
+/** Trust-task operation type URIs — the value of a request envelope's
+ *  `type` field (NOT the DIDComm message type, which is always
+ *  {@link TRUST_TASK_ENVELOPE_TYPE}). */
+export const PasskeyVmTask = {
+    enrollChallenge: `${PASSKEY_VMS}/enroll-challenge/1.0`,
+    enrollSubmit: `${PASSKEY_VMS}/enroll-submit/1.0`,
+    list: `${PASSKEY_VMS}/list/1.0`,
+    revoke: `${PASSKEY_VMS}/revoke/1.0`,
+};
+//# sourceMappingURL=protocol.js.map

package/dist/vta/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../src/vta/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH;0EAC0E;AAC1E,MAAM,CAAC,MAAM,wBAAwB,GACnC,qDAAqD,CAAC;AAExD;qCACqC;AACrC,MAAM,CAAC,MAAM,qBAAqB,GAChC,kDAAkD,CAAC;AAErD,MAAM,WAAW,GAAG,6CAA6C,CAAC;AAElE;;yCAEyC;AACzC,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,eAAe,EAAE,GAAG,WAAW,uBAAuB;IACtD,YAAY,EAAE,GAAG,WAAW,oBAAoB;IAChD,IAAI,EAAE,GAAG,WAAW,WAAW;IAC/B,MAAM,EAAE,GAAG,WAAW,aAAa;CAC3B,CAAC"}