@owf/mdoc 0.7.0 → 0.7.1-alpha-20260804091211

package/dist/index.d.mts

@@ -1,7 +1,6 @@
 import { CborStructure, CoseKey, CoseKey as CoseKey$1, CoseKeyDecodedStructure, CoseKeyEncodedStructure, CoseKeyOptions, Curve, DataItem, DateOnly, DecodedStructureType, DigestAlgorithm, EncodedStructureType, KeyOps, KeyType, Mac0, Mac0 as Mac0$1, Mac0Context, Mac0DecodedStructure, Mac0EncodedStructure, Mac0Options, MacAlgorithm, ProtectedHeaders, ProtectedHeaders as ProtectedHeaders$1, RegisteredCwtClaimKey, RegisteredCwtClaimKey as RegisteredCwtClaimKey$1, RegisteredCwtHeaderClaimKey, Sign1, Sign1 as Sign1$1, Sign1Context, Sign1DecodedStructure, Sign1EncodedStructure, Sign1Options, SignatureAlgorithm, SignatureAlgorithm as SignatureAlgorithm$1, TypedMap, UnprotectedHeaders, cborDecode, cborEncode } from "@owf/cose";
 import { StatusListCwt, StatusListInfo, StatusListInfo as StatusListInfo$1, StatusListInfoOptions } from "@owf/token-status-list";
 import z, { z as z$1 } from "zod";
-
 //#region src/context.d.ts
 type MaybePromise<T> = Promise<T> | T;
 interface MdocContext {
@@ -971,11 +970,7 @@ declare class IssuerAuth extends Sign1$1 {
    *
    * @todo return the full verified chain for audit / compliance.
    */
-  verifyStatus({
-    now,
-    checkFreshness,
-    trustedStatusCertificates
-  }: {
+  verifyStatus({ now, checkFreshness, trustedStatusCertificates }: {
     now?: Date;
     checkFreshness?: boolean;
     trustedStatusCertificates?: Uint8Array[];

package/dist/index.mjs

@@ -1111,7 +1111,8 @@ var DeviceAuth = class extends CborStructure {
 		return this.structure.get("deviceMac");
 	}
 	async verify(options, ctx) {
-		const onCheck = onCategoryCheck(options.verificationCallback ?? defaultVerificationCallback, "DEVICE_AUTH");
+		const verificationCallback = options.verificationCallback ?? defaultVerificationCallback;
+		const onCheck = onCategoryCheck(verificationCallback, "DEVICE_AUTH");
 		const { deviceKey } = options.document.issuerSigned.issuerAuth.mobileSecurityObject.deviceKeyInfo;
 		const deviceMac = this.structure.get("deviceMac");
 		const deviceSignature = this.structure.get("deviceSignature");
@@ -1335,7 +1336,8 @@ var ReaderAuthentication = class extends CborStructure {
 var ReaderAuth = class extends Sign1$1 {
 	async verify(options, ctx) {
 		const readerAuthentication = options.readerAuthentication instanceof ReaderAuthentication ? options.readerAuthentication : new ReaderAuthentication(options.readerAuthentication);
-		const onCheck = onCategoryCheck(options.verificationCallback ?? defaultVerificationCallback, "READER_AUTH");
+		const verificationCallback = options.verificationCallback ?? defaultVerificationCallback;
+		const onCheck = onCategoryCheck(verificationCallback, "READER_AUTH");
 		onCheck({
 			status: await this.verifySignature({
 				key: await ctx.x509.getPublicKey({
@@ -1743,7 +1745,8 @@ var IdentifierListCwt = class IdentifierListCwt {
 		if (!cwt.payload) throw new Error("IdentifierList CWT has no payload");
 		const decoded = cborDecode$1(cwt.payload, { unwrapTopLevelDataItem: false });
 		if (decoded.has(StatusListCwtClaimKey.StatusList)) throw new Error("IdentifierList CWT must not contain a StatusList claim (ISO 18013-5 § 12.3.6.4)");
-		return new IdentifierListCwt(cwt, IdentifierListCwtPayload.fromEncodedStructure(decoded));
+		const payload = IdentifierListCwtPayload.fromEncodedStructure(decoded);
+		return new IdentifierListCwt(cwt, payload);
 	}
 	static async fetch(uri, ctx) {
 		const response = await (ctx.fetch ?? fetch)(uri, { headers: { Accept: "application/identifierlist+cwt" } });
@@ -2485,62 +2488,63 @@ var DeviceResponse = class DeviceResponse extends CborStructure {
 		if (useMac === useSignature) throw new EitherSignatureOrMacMustBeProvidedError();
 		const signingKey = useSignature ? options.signature?.signingKey : options.mac?.signingKey;
 		if (!signingKey) throw new Error("Signing key is missing");
-		const map = new TypedMap([
-			["version", "1.0"],
-			["status", 0],
-			["documents", await Promise.all(options.deviceRequest.docRequests.map(async (docRequest) => {
-				const issuerSigned = findIssuerSigned(options.issuerSigned, docRequest.itemsRequest.docType);
-				const disclosedIssuerNamespace = limitDisclosureToDeviceRequestNameSpaces(issuerSigned, docRequest);
-				const docType = docRequest.itemsRequest.docType;
-				const deviceNamespaces = options.deviceNamespaces ?? DeviceNamespaces.create({ deviceNamespaces: /* @__PURE__ */ new Map() });
-				const deviceAuthenticationBytes = DeviceAuthentication.create({
-					sessionTranscript: options.sessionTranscript,
-					docType,
-					deviceNamespaces
-				}).encode({ asDataItem: true });
-				const unprotectedHeaders = UnprotectedHeaders$1.create({});
-				if (signingKey.keyId) unprotectedHeaders.headers?.set(RegisteredCwtHeaderClaimKey$1.KeyId, stringToBytes(signingKey.keyId));
-				const protectedHeaders = ProtectedHeaders$1.create({ protectedHeaders: /* @__PURE__ */ new Map([[RegisteredCwtHeaderClaimKey$1.Algorithm, signingKey.algorithm]]) });
-				const deviceAuthOptions = {};
-				if (useSignature) deviceAuthOptions.deviceSignature = await DeviceSignature.create({
-					unprotectedHeaders,
+		const documents = await Promise.all(options.deviceRequest.docRequests.map(async (docRequest) => {
+			const issuerSigned = findIssuerSigned(options.issuerSigned, docRequest.itemsRequest.docType);
+			const disclosedIssuerNamespace = limitDisclosureToDeviceRequestNameSpaces(issuerSigned, docRequest);
+			const docType = docRequest.itemsRequest.docType;
+			const deviceNamespaces = options.deviceNamespaces ?? DeviceNamespaces.create({ deviceNamespaces: /* @__PURE__ */ new Map() });
+			const deviceAuthenticationBytes = DeviceAuthentication.create({
+				sessionTranscript: options.sessionTranscript,
+				docType,
+				deviceNamespaces
+			}).encode({ asDataItem: true });
+			const unprotectedHeaders = UnprotectedHeaders$1.create({});
+			if (signingKey.keyId) unprotectedHeaders.headers?.set(RegisteredCwtHeaderClaimKey$1.KeyId, stringToBytes(signingKey.keyId));
+			const protectedHeaders = ProtectedHeaders$1.create({ protectedHeaders: /* @__PURE__ */ new Map([[RegisteredCwtHeaderClaimKey$1.Algorithm, signingKey.algorithm]]) });
+			const deviceAuthOptions = {};
+			if (useSignature) deviceAuthOptions.deviceSignature = await DeviceSignature.create({
+				unprotectedHeaders,
+				protectedHeaders,
+				payload: null
+			}).sign({
+				signingKey,
+				detachedPayload: deviceAuthenticationBytes
+			}, { sign: ctx.cose.sign1.sign });
+			else {
+				const ephemeralKey = options.mac?.ephemeralKey;
+				if (!ephemeralKey) throw new Error("Ephemeral key is missing");
+				const deviceMac = DeviceMac.create({
 					protectedHeaders,
+					unprotectedHeaders,
 					payload: null
-				}).sign({
-					signingKey,
-					detachedPayload: deviceAuthenticationBytes
-				}, { sign: ctx.cose.sign1.sign });
-				else {
-					const ephemeralKey = options.mac?.ephemeralKey;
-					if (!ephemeralKey) throw new Error("Ephemeral key is missing");
-					const deviceMac = DeviceMac.create({
-						protectedHeaders,
-						unprotectedHeaders,
-						payload: null
-					});
-					const macKey = await deviceMac.createDeviceMacKey({
-						publicKey: ephemeralKey,
-						privateKey: signingKey,
-						sessionTranscript: options.sessionTranscript
-					}, ctx);
-					await deviceMac.authenticate({
-						key: macKey,
-						detachedPayload: deviceAuthenticationBytes
-					}, ctx.cose.mac0);
-					deviceAuthOptions.deviceMac = deviceMac;
-				}
-				return Document.create({
-					docType,
-					issuerSigned: IssuerSigned.create({
-						issuerNamespaces: disclosedIssuerNamespace,
-						issuerAuth: issuerSigned.issuerAuth
-					}),
-					deviceSigned: DeviceSigned.create({
-						deviceNamespaces,
-						deviceAuth: DeviceAuth.create(deviceAuthOptions)
-					})
 				});
-			}))]
+				const macKey = await deviceMac.createDeviceMacKey({
+					publicKey: ephemeralKey,
+					privateKey: signingKey,
+					sessionTranscript: options.sessionTranscript
+				}, ctx);
+				await deviceMac.authenticate({
+					key: macKey,
+					detachedPayload: deviceAuthenticationBytes
+				}, ctx.cose.mac0);
+				deviceAuthOptions.deviceMac = deviceMac;
+			}
+			return Document.create({
+				docType,
+				issuerSigned: IssuerSigned.create({
+					issuerNamespaces: disclosedIssuerNamespace,
+					issuerAuth: issuerSigned.issuerAuth
+				}),
+				deviceSigned: DeviceSigned.create({
+					deviceNamespaces,
+					deviceAuth: DeviceAuth.create(deviceAuthOptions)
+				})
+			});
+		}));
+		const map = new TypedMap([
+			["version", "1.0"],
+			["status", 0],
+			["documents", documents]
 		]);
 		return DeviceResponse.fromDecodedStructure(map);
 	}