@originator-profile/model 0.5.2 → 0.5.4

package/dist/index.cjs

@@ -0,0 +1,484 @@
+'use strict';
+
+var zod = require('zod');
+var websri = require('websri');
+
+function isValidOrigin(val) {
+  try {
+    return new URL(val).origin === val;
+  } catch {
+    return false;
+  }
+}
+const Item$1 = zod.z.stringFormat("origin", isValidOrigin, {
+  error: "Origin MUST be in the format scheme://host[:port] (do not include a trailing slash or path. e.g. https://example.com)"
+});
+const AllowedOrigin = zod.z.union([Item$1, zod.z.array(Item$1).min(1)]).describe(
+  "@deprecated allowedOrigin is deprecated in Content Attestation. Use allowedUrl instead. Supported until September 2026.\n\nThe [origin](https://www.rfc-editor.org/rfc/rfc6454#section-7) of the information being asserted."
+);
+
+function isValidUrlPattern(val) {
+  try {
+    new URLPattern(val);
+    return true;
+  } catch {
+    return false;
+  }
+}
+const Item = zod.z.stringFormat("url-pattern", isValidUrlPattern, {
+  error: "Invalid URL Pattern string (* alone is not allowed. Specify a URL Pattern string such as https://example.com/*)"
+});
+const AllowedUrl = zod.z.union([Item, zod.z.array(Item).min(1)]).describe(
+  "The URL for which information is asserted by this Content Attestation. The string MUST be a URL Pattern string. It MUST NOT be an empty array."
+);
+
+const CertificationSystem = zod.z.object({
+  id: zod.z.url().describe("Certification system ID"),
+  type: zod.z.literal("CertificationSystem"),
+  name: zod.z.string().describe("Name of the certification system"),
+  description: zod.z.string().optional().describe("Description"),
+  ref: zod.z.url().optional().describe(
+    "A URL for people to read to find out more about the certification system."
+  )
+});
+
+const OpCipContext = zod.z.tuple([
+  zod.z.literal("https://www.w3.org/ns/credentials/v2"),
+  zod.z.literal("https://originator-profile.org/ns/credentials/v1"),
+  zod.z.literal("https://originator-profile.org/ns/cip/v1"),
+  zod.z.object({
+    "@language": zod.z.string().describe("Language code")
+  })
+]);
+
+const DateTimeStamp = zod.z.iso.datetime({
+  offset: true,
+  error: "Must be an xsd:dateTimeStamp string (e.g. 2024-01-01T00:00:00Z or 2024-01-01T00:00:00+09:00)"
+});
+
+const DNS_URI_PATTERN = /^dns:([a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?\.)*[a-zA-Z](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?$/;
+const OpId = zod.z.string().regex(DNS_URI_PATTERN, {
+  error: "Invalid OP ID: must be dns:<valid-domain>"
+});
+
+const SubresourceIntegrity = zod.z.stringFormat(
+  "sri",
+  (val) => {
+    try {
+      const integrity = new websri.IntegrityMetadataSet(val);
+      return integrity.size > 0 && [...integrity].every((m) => m.alg in websri.supportedHashAlgorithms);
+    } catch {
+      return false;
+    }
+  },
+  {
+    error: "Must be in the format sha256-<base64>, sha384-<base64>, or sha512-<base64>."
+  }
+).describe("Subresource Integrity (SRI) string");
+
+const RawImage = zod.z.object({
+  id: zod.z.url(),
+  content: zod.z.union([zod.z.string(), zod.z.array(zod.z.string())]).describe("Transient content for digestSRI auto-calculation")
+});
+const Image = zod.z.object({
+  id: zod.z.url(),
+  digestSRI: SubresourceIntegrity.optional()
+});
+
+const CertificateProperties = zod.z.object({
+  id: OpId.describe("OP ID of the subject"),
+  type: zod.z.literal("CertificateProperties"),
+  description: zod.z.string().optional().describe("Description"),
+  image: Image.optional(),
+  certifier: zod.z.string().optional().describe("Name of the certification authority"),
+  verifier: zod.z.string().optional().describe("Name of the verification authority"),
+  certificationSystem: CertificationSystem
+});
+
+const Certificate = zod.z.object({
+  "@context": OpCipContext,
+  type: zod.z.tuple([zod.z.literal("VerifiableCredential"), zod.z.literal("Certificate")]),
+  issuer: OpId,
+  validFrom: DateTimeStamp.optional().describe(
+    "Validity period start and time"
+  ),
+  validUntil: DateTimeStamp.optional().describe("Validity period end and time"),
+  credentialSubject: CertificateProperties
+});
+
+const JapaneseExistenceCertificateProperties = zod.z.object({
+  id: OpId.describe("OP ID of the subject"),
+  type: zod.z.literal("JP-OrganizationExistenceCertificate"),
+  name: zod.z.string().describe("PA name"),
+  description: zod.z.string().optional().describe("Description"),
+  image: Image.optional(),
+  corporateName: zod.z.string().describe("Corporate name"),
+  corporateNumber: zod.z.string().describe("Corporate number"),
+  postalCode: zod.z.string().describe("Postal code"),
+  addressCountry: zod.z.string().describe("Country"),
+  addressRegion: zod.z.string().describe("Prefecture / State"),
+  addressLocality: zod.z.string().describe("City / Municipality"),
+  streetAddress: zod.z.string().describe("Street address"),
+  certificationSystem: CertificationSystem
+});
+const JapaneseExistenceCertificate = zod.z.looseObject({
+  "@context": OpCipContext,
+  type: zod.z.tuple([zod.z.literal("VerifiableCredential"), zod.z.literal("Certificate")]),
+  issuer: OpId,
+  credentialSubject: JapaneseExistenceCertificateProperties,
+  validFrom: DateTimeStamp.optional().describe(
+    "Validity period start and time"
+  ),
+  validUntil: DateTimeStamp.optional().describe("Validity period end and time")
+});
+
+const Page = zod.z.object({
+  id: zod.z.url(),
+  name: zod.z.string()
+});
+
+const OpContextHead = zod.z.array(zod.z.unknown()).refine(
+  (arr) => arr.includes("https://www.w3.org/ns/credentials/v2") && arr.includes("https://originator-profile.org/ns/credentials/v1"),
+  {
+    error: "Context must include both W3C credentials v2 and OP credentials v1"
+  }
+);
+
+const BasicTarget = zod.z.looseObject({
+  type: zod.z.enum([
+    "TextTargetIntegrity",
+    "VisibleTextTargetIntegrity",
+    "HtmlTargetIntegrity"
+  ]),
+  integrity: SubresourceIntegrity,
+  cssSelector: zod.z.string().describe("CSS selector")
+});
+
+const ExternalResourceTarget = zod.z.looseObject({
+  type: zod.z.literal("ExternalResourceTargetIntegrity"),
+  integrity: SubresourceIntegrity
+});
+
+const RawTarget = zod.z.looseObject({
+  type: zod.z.enum([
+    "TextTargetIntegrity",
+    "VisibleTextTargetIntegrity",
+    "HtmlTargetIntegrity",
+    "ExternalResourceTargetIntegrity"
+  ]).describe("Target Integrity type (e.g., TextTargetIntegrity)"),
+  content: zod.z.union([
+    zod.z.array(zod.z.string().describe("Content body (text/html or URL)")),
+    zod.z.string().describe("Content body (text/html or URL)")
+  ]).optional(),
+  cssSelector: zod.z.string().optional().describe("CSS selector")
+}).describe("Raw target");
+
+const Target = zod.z.union([BasicTarget, ExternalResourceTarget]);
+
+const subject$5 = zod.z.looseObject({
+  id: zod.z.url().describe("CA ID"),
+  type: zod.z.string().describe("JSON-LD type")
+});
+const ContentAttestation = zod.z.looseObject({
+  "@context": OpContextHead,
+  type: zod.z.array(zod.z.unknown()).refine((arr) => arr.includes("ContentAttestation"), {
+    error: `type must include "ContentAttestation"`
+  }),
+  issuer: OpId,
+  credentialSubject: subject$5,
+  allowedUrl: AllowedUrl.optional(),
+  allowedOrigin: AllowedOrigin.optional(),
+  target: zod.z.array(Target).min(1)
+});
+
+const subject$4 = zod.z.looseObject({
+  id: zod.z.url().describe("CA ID"),
+  type: zod.z.literal("OnlineAd"),
+  name: zod.z.string().optional().describe("Title of the ad."),
+  description: zod.z.string().optional().describe("Ad description (plain text)."),
+  image: Image.optional(),
+  genre: zod.z.string().optional().describe("Genre"),
+  landingPageUrl: zod.z.url().optional().describe("Landing page URL"),
+  adReportContact: Page.optional(),
+  adReviewGuidelines: Page.optional(),
+  targetingPolicy: Page.optional(),
+  adDataHandlingPolicy: Page.optional(),
+  adDisplayRationale: zod.z.object({
+    page: Page.optional(),
+    description: zod.z.string().optional()
+  }).refine(
+    (obj) => obj.page !== void 0 || obj.description !== void 0,
+    { error: "Either page or description must be provided" }
+  ).optional().describe("The reason this ad is being displayed")
+}).refine(
+  (obj) => obj.name !== void 0 || obj.description !== void 0 || obj.image !== void 0,
+  { error: "At least one of name, description, or image must be provided" }
+);
+const withAllowedUrl = zod.z.object({
+  allowedUrl: AllowedUrl,
+  allowedOrigin: zod.z.never().optional()
+});
+const withAllowedOrigin = zod.z.object({
+  allowedUrl: zod.z.never().optional(),
+  allowedOrigin: AllowedOrigin
+});
+const AdvertisementCA = ContentAttestation.extend({
+  "@context": OpCipContext,
+  credentialSubject: subject$4
+}).and(zod.z.union([withAllowedUrl, withAllowedOrigin]));
+
+const subject$3 = zod.z.object({
+  id: zod.z.url().describe("CA ID"),
+  type: zod.z.literal("Advertorial"),
+  headline: zod.z.string().describe("Title of the advertorial."),
+  description: zod.z.string().describe("A description of the advertorial (string)."),
+  image: Image.optional(),
+  datePublished: DateTimeStamp.optional().describe("Publication date and time"),
+  dateModified: DateTimeStamp.optional().describe(
+    "Last modified date and time"
+  ),
+  author: zod.z.array(zod.z.string()).optional().describe("Author names"),
+  editor: zod.z.array(zod.z.string()).optional().describe("Editor names"),
+  sponsor: zod.z.array(zod.z.string()).optional().describe("Sponsor names"),
+  genre: zod.z.string().optional().describe("Genre")
+});
+const AdvertorialCA = ContentAttestation.extend({
+  "@context": OpCipContext,
+  credentialSubject: subject$3,
+  allowedUrl: AllowedUrl
+}).refine((obj) => !("allowedOrigin" in obj), {
+  error: "allowedOrigin is not allowed in AdvertorialCA"
+});
+
+const subject$2 = zod.z.object({
+  id: zod.z.url().describe("CA ID"),
+  type: zod.z.literal("Article"),
+  headline: zod.z.string().describe("Title of the content."),
+  description: zod.z.string().describe("A description of the content (plain text)."),
+  image: Image.optional(),
+  datePublished: DateTimeStamp.optional().describe("Publication date and time"),
+  dateModified: DateTimeStamp.optional().describe(
+    "Last modified date and time"
+  ),
+  author: zod.z.array(zod.z.string()).optional().describe("Author names"),
+  editor: zod.z.array(zod.z.string()).optional().describe("Editor names"),
+  genre: zod.z.string().optional().describe("Genre")
+});
+const ArticleCA = ContentAttestation.extend({
+  "@context": OpCipContext,
+  credentialSubject: subject$2,
+  allowedUrl: AllowedUrl
+}).refine((obj) => !("allowedOrigin" in obj), {
+  error: "allowedOrigin is not allowed in ArticleCA"
+});
+
+const UnsignedContentAttestation = zod.z.looseObject({
+  "@context": OpContextHead,
+  type: zod.z.array(zod.z.unknown()).refine((arr) => arr.includes("ContentAttestation"), {
+    error: `type must include "ContentAttestation"`
+  }),
+  issuer: OpId,
+  credentialSubject: subject$5,
+  allowedUrl: AllowedUrl.optional(),
+  allowedOrigin: AllowedOrigin.optional(),
+  target: zod.z.array(RawTarget).min(1)
+});
+
+const ContentAttestationSetItem = zod.z.union([
+  zod.z.looseObject({
+    main: zod.z.literal(true).describe("Main content"),
+    attestation: zod.z.string().describe("Content Attestation")
+  }),
+  zod.z.string().describe("Content Attestation")
+]);
+const ContentAttestationSet = zod.z.array(ContentAttestationSetItem);
+
+const CpContext = zod.z.tuple([
+  zod.z.literal("https://www.w3.org/ns/credentials/v2"),
+  zod.z.literal("https://originator-profile.org/ns/credentials/v1")
+]);
+
+const Jwk = zod.z.looseObject({
+  kty: zod.z.string(),
+  use: zod.z.string().optional(),
+  key_ops: zod.z.array(zod.z.string()).optional(),
+  alg: zod.z.string().optional(),
+  kid: zod.z.string(),
+  x5u: zod.z.string().optional(),
+  x5c: zod.z.array(zod.z.string()).optional(),
+  x5t: zod.z.string().optional(),
+  "x5t#S256": zod.z.string().optional()
+});
+
+const Jwks = zod.z.looseObject({
+  keys: zod.z.array(Jwk)
+});
+
+const CoreProfile = zod.z.object({
+  "@context": CpContext,
+  type: zod.z.tuple([zod.z.literal("VerifiableCredential"), zod.z.literal("CoreProfile")]),
+  issuer: OpId,
+  credentialSubject: zod.z.object({
+    id: OpId,
+    type: zod.z.literal("Core"),
+    jwks: Jwks
+  })
+});
+
+const Description = zod.z.union([
+  zod.z.string(),
+  zod.z.looseObject({
+    text: zod.z.string().describe("Text value."),
+    encodingFormat: zod.z.enum(["text/plain", "text/html"]).describe(
+      "MIME type. Allowed values: 'text/plain' and 'text/html' (only br, p, ol, ul, li allowed)."
+    )
+  })
+]);
+
+const OpMeta = zod.z.object({
+  targetopid: zod.z.string()
+}).passthrough();
+
+const OpVc = zod.z.looseObject({
+  "@context": OpContextHead,
+  type: zod.z.array(zod.z.unknown()).refine((arr) => arr.includes("VerifiableCredential"), {
+    error: `type must include "VerifiableCredential"`
+  }),
+  issuer: OpId,
+  credentialSubject: zod.z.looseObject({
+    id: OpId
+  })
+});
+
+const OriginatorProfile = zod.z.looseObject({
+  core: zod.z.string().describe("Core Profile"),
+  annotations: zod.z.array(zod.z.string().describe("Profile Annotation")).optional().describe("An array of Profile Annotation"),
+  /** @deprecated 後方互換性のため 2026-11-01 まで非配列 WMP を許容。代わりに配列を使用してください。 */
+  media: zod.z.union([zod.z.string(), zod.z.array(zod.z.string())]).optional().describe(
+    `An array of Web Media Profile
+
+@deprecated \u5F8C\u65B9\u4E92\u63DB\u6027\u306E\u305F\u3081 2026-11-01 \u307E\u3067\u975E\u914D\u5217 WMP \u3092\u8A31\u5BB9\u3002\u4EE3\u308F\u308A\u306B\u914D\u5217\u3092\u4F7F\u7528\u3057\u3066\u304F\u3060\u3055\u3044\u3002
+`
+  )
+});
+const OriginatorProfileSet = zod.z.array(OriginatorProfile);
+
+const SiteProfile = zod.z.looseObject({
+  originators: zod.z.array(OriginatorProfile).min(1),
+  sites: zod.z.array(zod.z.string().describe("Website Profile")).optional().describe("An array of Website Profile"),
+  /** @deprecated 後方互換性のため 2026-11-01 まで許容。sites が優先され、存在しない場合に credential を使用。 */
+  credential: zod.z.string().optional().describe(
+    "@deprecated \u5F8C\u65B9\u4E92\u63DB\u6027\u306E\u305F\u3081 2026-11-01 \u307E\u3067\u8A31\u5BB9\u3002sites \u304C\u512A\u5148\u3055\u308C\u3001\u5B58\u5728\u3057\u306A\u3044\u5834\u5408\u306B credential \u3092\u4F7F\u7528\u3002"
+  )
+});
+
+const deprecatedSubject = zod.z.looseObject({
+  id: zod.z.url().describe("Web site origin (format: https://<hostname>)"),
+  type: zod.z.literal("WebSite"),
+  name: zod.z.string().describe("The name of the Web site."),
+  image: Image.optional(),
+  description: zod.z.string().optional().describe("A description of the Web site."),
+  url: AllowedOrigin
+});
+const subject$1 = zod.z.looseObject({
+  id: zod.z.url().describe(
+    "It MUST be the Web site URL. If the same content exists on multiple URLs, specify the most representative URL."
+  ),
+  type: zod.z.literal("WebSite"),
+  name: zod.z.string().describe("The name of the Web site."),
+  image: Image.optional(),
+  description: zod.z.string().optional().describe("A description of the Web site."),
+  allowedOrigin: AllowedOrigin
+});
+const WebsiteProfile = zod.z.looseObject({
+  "@context": OpCipContext,
+  type: zod.z.tuple([
+    zod.z.literal("VerifiableCredential"),
+    zod.z.literal("WebsiteProfile")
+  ]),
+  issuer: OpId,
+  credentialSubject: zod.z.union([deprecatedSubject, subject$1])
+});
+
+const UnsignedWebsiteProfile = zod.z.looseObject({
+  ...WebsiteProfile.shape,
+  credentialSubject: zod.z.union([
+    ...WebsiteProfile.shape.credentialSubject.options,
+    WebsiteProfile.shape.credentialSubject.options.at(-1)?.safeExtend({
+      image: zod.z.union([RawImage, Image])
+    }) ?? zod.z.never()
+  ])
+});
+
+const subject = zod.z.looseObject({
+  id: OpId.describe("OP ID of the WMP holding organization"),
+  type: zod.z.literal("OnlineBusiness"),
+  url: zod.z.url().describe("Web media URL"),
+  name: zod.z.string().describe("Organization name"),
+  logo: Image.optional(),
+  email: zod.z.email().optional().describe("Email address"),
+  telephone: zod.z.string().optional().describe("Phone number"),
+  contactPoint: zod.z.object({
+    id: zod.z.url().describe("Contact page URL"),
+    name: zod.z.string().describe("Contact page display name")
+  }).optional(),
+  informationTransmissionPolicy: zod.z.object({
+    id: zod.z.url().describe("Information transmission policy URL"),
+    name: zod.z.string().describe("Information transmission policy display name")
+  }).optional(),
+  publishingPrinciple: zod.z.object({
+    id: zod.z.url().describe("Editorial guidelines URL"),
+    name: zod.z.string().describe("Editorial guidelines display name")
+  }).optional(),
+  privacyPolicy: zod.z.object({
+    id: zod.z.url().describe("Privacy policy page URL"),
+    name: zod.z.string().describe("Privacy policy page display name")
+  }).optional(),
+  description: zod.z.union([Description, zod.z.array(Description)]).optional()
+});
+const WebMediaProfile = zod.z.looseObject({
+  "@context": OpCipContext,
+  type: zod.z.tuple([
+    zod.z.literal("VerifiableCredential"),
+    zod.z.literal("WebMediaProfile")
+  ]),
+  issuer: OpId,
+  credentialSubject: subject
+});
+
+exports.AdvertisementCA = AdvertisementCA;
+exports.AdvertorialCA = AdvertorialCA;
+exports.AllowedOrigin = AllowedOrigin;
+exports.AllowedUrl = AllowedUrl;
+exports.ArticleCA = ArticleCA;
+exports.BasicTarget = BasicTarget;
+exports.Certificate = Certificate;
+exports.CertificationSystem = CertificationSystem;
+exports.ContentAttestation = ContentAttestation;
+exports.ContentAttestationSet = ContentAttestationSet;
+exports.ContentAttestationSetItem = ContentAttestationSetItem;
+exports.CoreProfile = CoreProfile;
+exports.DateTimeStamp = DateTimeStamp;
+exports.Description = Description;
+exports.ExternalResourceTarget = ExternalResourceTarget;
+exports.Image = Image;
+exports.JapaneseExistenceCertificate = JapaneseExistenceCertificate;
+exports.JapaneseExistenceCertificateProperties = JapaneseExistenceCertificateProperties;
+exports.Jwk = Jwk;
+exports.Jwks = Jwks;
+exports.OpId = OpId;
+exports.OpMeta = OpMeta;
+exports.OpVc = OpVc;
+exports.OriginatorProfile = OriginatorProfile;
+exports.OriginatorProfileSet = OriginatorProfileSet;
+exports.Page = Page;
+exports.RawImage = RawImage;
+exports.RawTarget = RawTarget;
+exports.SiteProfile = SiteProfile;
+exports.SubresourceIntegrity = SubresourceIntegrity;
+exports.Target = Target;
+exports.UnsignedContentAttestation = UnsignedContentAttestation;
+exports.UnsignedWebsiteProfile = UnsignedWebsiteProfile;
+exports.WebMediaProfile = WebMediaProfile;
+exports.WebsiteProfile = WebsiteProfile;
+exports.subject = subject$5;