@pagopa/io-react-native-wallet 3.6.3 → 3.6.4

package/lib/module/mdoc/index.js

@@ -1,9 +1,9 @@
 import { CBOR, COSE, ISO18013_7 } from "@pagopa/io-react-native-iso18013";
+import { removePadding } from "@pagopa/io-react-native-jwt";
 import { b64utob64 } from "jsrsasign";
 import { MissingX509CertsError } from "../trust/common/errors";
-import { IoWalletError } from "../utils/errors";
 import { convertBase64DerToPem, getSigninJwkFromCert } from "../utils/crypto";
-import { removePadding } from "@pagopa/io-react-native-jwt";
+import { IoWalletError } from "../utils/errors";
 import { verifyX509Chain } from "../utils/x509";
 export * from "./utils";
 export const verify = async (token, x509CertRoot) => {
@@ -23,8 +23,13 @@ export const verify = async (token, x509CertRoot) => {
   if (!coseSign1) {
     throw new IoWalletError("Missing coseSign1");
   }
+  const firstCert = x5chain[0];
+  if (!firstCert) {
+    throw new IoWalletError("x5chain is empty, cannot verify signature");
+  }
+
   // Once the x5chain is verified, the signatures verification can be performed
-  await verifyMdocSignature(coseSign1, x5chain[0]);
+  await verifyMdocSignature(coseSign1, firstCert);
   return {
     issuerSigned
   };
@@ -40,6 +45,9 @@ export const verify = async (token, x509CertRoot) => {
 const verifyMdocSignature = async (coseSign1, cert) => {
   const pemcert = convertBase64DerToPem(cert);
   const jwk = getSigninJwkFromCert(pemcert);
+  if (!jwk.x || !jwk.y) {
+    throw new IoWalletError("Missing x or y coordinate in the certificate's public key");
+  }
   jwk.x = b64utob64(jwk.x);
   jwk.y = b64utob64(jwk.y);
   const signatureCorrect = await COSE.verify(coseSign1, jwk);
@@ -49,9 +57,9 @@ export const prepareVpTokenMdoc = async (requestNonce, generatedNonce, clientId,
   let [verifiableCredential, presentationFrame] = _ref;
   /* verifiableCredential is a IssuerSigned structure */
   const documents = [{
-    issuerSignedContent: b64utob64(verifiableCredential),
     alias: keyTag,
-    docType
+    docType,
+    issuerSignedContent: b64utob64(verifiableCredential)
   }];
 
   /* clientId,responseUri,requestNonce are retrieved by Auth Request Object */

package/lib/module/mdoc/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["CBOR","COSE","ISO18013_7","b64utob64","MissingX509CertsError","IoWalletError","convertBase64DerToPem","getSigninJwkFromCert","removePadding","verifyX509Chain","verify","token","x509CertRoot","_issuerSigned$issuerA","issuerSigned","decodeIssuerSigned","issuerAuth","unprotectedHeader","x5chain","Array","isArray","length","map","coseSign1","rawValue","verifyMdocSignature","cert","pemcert","jwk","x","y","signatureCorrect","Error","prepareVpTokenMdoc","requestNonce","generatedNonce","clientId","responseUri","docType","keyTag","_ref","verifiableCredential","presentationFrame","documents","issuerSignedContent","alias","vp_token","generateOID4VPDeviceResponse"],"sourceRoot":"../../../src","sources":["mdoc/index.ts"],"mappings":"AAAA,SAASA,IAAI,EAAEC,IAAI,EAAEC,UAAU,QAAQ,kCAAkC;AACzE,SAASC,SAAS,QAAQ,WAAW;AAErC,SAASC,qBAAqB,QAAQ,wBAAwB;AAC9D,SAASC,aAAa,QAAQ,iBAAiB;AAC/C,SAASC,qBAAqB,EAAEC,oBAAoB,QAAQ,iBAAiB;AAE7E,SAASC,aAAa,QAAQ,6BAA6B;AAC3D,SAASC,eAAe,QAAQ,eAAe;AAC/C,cAAc,SAAS;AAEvB,OAAO,MAAMC,MAAM,GAAG,MAAAA,CACpBC,KAAa,EACbC,YAAoB,KAC6B;EAAA,IAAAC,qBAAA;EACjD;EACA,MAAMC,YAAY,GAAG,MAAMd,IAAI,CAACe,kBAAkB,CAACJ,KAAK,CAAC;EAEzD,IAAI,CAACG,YAAY,EAAE;IACjB,MAAM,IAAIT,aAAa,CAAC,cAAc,CAAC;EACzC;EAEA,IACE,GAAAQ,qBAAA,GAACC,YAAY,CAACE,UAAU,CAACC,iBAAiB,cAAAJ,qBAAA,eAAzCA,qBAAA,CAA2CK,OAAO,MAClD,CAACC,KAAK,CAACC,OAAO,CAACN,YAAY,CAACE,UAAU,CAACC,iBAAiB,CAACC,OAAO,CAAC,IAChEJ,YAAY,CAACE,UAAU,CAACC,iBAAiB,CAACC,OAAO,CAACG,MAAM,KAAK,CAAC,CAAC,EACjE;IACA,MAAM,IAAIjB,qBAAqB,CAAC,2BAA2B,CAAC;EAC9D;EACA,MAAMc,OAAO,GACXJ,YAAY,CAACE,UAAU,CAACC,iBAAiB,CAACC,OAAO,CAACI,GAAG,CAACnB,SAAS,CAAC;EAClE;EACA,MAAMM,eAAe,CAACS,OAAO,EAAEN,YAAY,CAAC;EAE5C,MAAMW,SAAS,GAAGT,YAAY,CAACE,UAAU,CAACQ,QAAQ;EAElD,IAAI,CAACD,SAAS,EAAE;IACd,MAAM,IAAIlB,aAAa,CAAC,mBAAmB,CAAC;EAC9C;EACA;EACA,MAAMoB,mBAAmB,CAACF,SAAS,EAAEL,OAAO,CAAC,CAAC,CAAE,CAAC;EAEjD,OAAO;IAAEJ;EAAa,CAAC;AACzB,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMW,mBAAmB,GAAG,MAAAA,CAAOF,SAAiB,EAAEG,IAAY,KAAK;EACrE,MAAMC,OAAO,GAAGrB,qBAAqB,CAACoB,IAAI,CAAC;EAC3C,MAAME,GAAG,GAAGrB,oBAAoB,CAACoB,OAAO,CAAC;EAEzCC,GAAG,CAACC,CAAC,GAAG1B,SAAS,CAACyB,GAAG,CAACC,CAAE,CAAC;EACzBD,GAAG,CAACE,CAAC,GAAG3B,SAAS,CAACyB,GAAG,CAACE,CAAE,CAAC;EAEzB,MAAMC,gBAAgB,GAAG,MAAM9B,IAAI,CAACS,MAAM,CAACa,SAAS,EAAEK,GAAgB,CAAC;EAEvE,IAAI,CAACG,gBAAgB,EAAE,MAAM,IAAIC,KAAK,CAAC,wBAAwB,CAAC;AAClE,CAAC;AAED,OAAO,MAAMC,kBAAkB,GAAG,MAAAA,CAChCC,YAAoB,EACpBC,cAAsB,EACtBC,QAAgB,EAChBC,WAAmB,EACnBC,OAAe,EACfC,MAAc,EAAAC,IAAA,KAIV;EAAA,IAHJ,CAACC,oBAAoB,EAAEC,iBAAiB,CAAe,GAAAF,IAAA;EAIvD;EACA,MAAMG,SAAS,GAAG,CAChB;IACEC,mBAAmB,EAAEzC,SAAS,CAACsC,oBAAoB,CAAC;IACpDI,KAAK,EAAEN,MAAM;IACbD;EACF,CAAC,CACF;;EAED;EACA;EACA,MAAMQ,QAAQ,GAAG,MAAM5C,UAAU,CAAC6C,4BAA4B,CAC5DX,QAAQ,EACRC,WAAW,EACXH,YAAY,EACZC,cAAc,EACdQ,SAAS,EACTD,iBACF,CAAC;EAED,OAAO;IACLI,QAAQ,EAAEtC,aAAa,CAACsC,QAAQ;EAClC,CAAC;AACH,CAAC"}
+{"version":3,"names":["CBOR","COSE","ISO18013_7","removePadding","b64utob64","MissingX509CertsError","convertBase64DerToPem","getSigninJwkFromCert","IoWalletError","verifyX509Chain","verify","token","x509CertRoot","_issuerSigned$issuerA","issuerSigned","decodeIssuerSigned","issuerAuth","unprotectedHeader","x5chain","Array","isArray","length","map","coseSign1","rawValue","firstCert","verifyMdocSignature","cert","pemcert","jwk","x","y","signatureCorrect","Error","prepareVpTokenMdoc","requestNonce","generatedNonce","clientId","responseUri","docType","keyTag","_ref","verifiableCredential","presentationFrame","documents","alias","issuerSignedContent","vp_token","generateOID4VPDeviceResponse"],"sourceRoot":"../../../src","sources":["mdoc/index.ts"],"mappings":"AACA,SAASA,IAAI,EAAEC,IAAI,EAAEC,UAAU,QAAQ,kCAAkC;AACzE,SAASC,aAAa,QAAQ,6BAA6B;AAC3D,SAASC,SAAS,QAAQ,WAAW;AAIrC,SAASC,qBAAqB,QAAQ,wBAAwB;AAC9D,SAASC,qBAAqB,EAAEC,oBAAoB,QAAQ,iBAAiB;AAC7E,SAASC,aAAa,QAAQ,iBAAiB;AAC/C,SAASC,eAAe,QAAQ,eAAe;AAC/C,cAAc,SAAS;AAEvB,OAAO,MAAMC,MAAM,GAAG,MAAAA,CACpBC,KAAa,EACbC,YAAoB,KAC6B;EAAA,IAAAC,qBAAA;EACjD;EACA,MAAMC,YAAY,GAAG,MAAMd,IAAI,CAACe,kBAAkB,CAACJ,KAAK,CAAC;EAEzD,IAAI,CAACG,YAAY,EAAE;IACjB,MAAM,IAAIN,aAAa,CAAC,cAAc,CAAC;EACzC;EAEA,IACE,GAAAK,qBAAA,GAACC,YAAY,CAACE,UAAU,CAACC,iBAAiB,cAAAJ,qBAAA,eAAzCA,qBAAA,CAA2CK,OAAO,MAClD,CAACC,KAAK,CAACC,OAAO,CAACN,YAAY,CAACE,UAAU,CAACC,iBAAiB,CAACC,OAAO,CAAC,IAChEJ,YAAY,CAACE,UAAU,CAACC,iBAAiB,CAACC,OAAO,CAACG,MAAM,KAAK,CAAC,CAAC,EACjE;IACA,MAAM,IAAIhB,qBAAqB,CAAC,2BAA2B,CAAC;EAC9D;EACA,MAAMa,OAAO,GACXJ,YAAY,CAACE,UAAU,CAACC,iBAAiB,CAACC,OAAO,CAACI,GAAG,CAAClB,SAAS,CAAC;EAClE;EACA,MAAMK,eAAe,CAACS,OAAO,EAAEN,YAAY,CAAC;EAE5C,MAAMW,SAAS,GAAGT,YAAY,CAACE,UAAU,CAACQ,QAAQ;EAElD,IAAI,CAACD,SAAS,EAAE;IACd,MAAM,IAAIf,aAAa,CAAC,mBAAmB,CAAC;EAC9C;EAEA,MAAMiB,SAAS,GAAGP,OAAO,CAAC,CAAC,CAAC;EAE5B,IAAI,CAACO,SAAS,EAAE;IACd,MAAM,IAAIjB,aAAa,CAAC,2CAA2C,CAAC;EACtE;;EAEA;EACA,MAAMkB,mBAAmB,CAACH,SAAS,EAAEE,SAAS,CAAC;EAE/C,OAAO;IAAEX;EAAa,CAAC;AACzB,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMY,mBAAmB,GAAG,MAAAA,CAAOH,SAAiB,EAAEI,IAAY,KAAK;EACrE,MAAMC,OAAO,GAAGtB,qBAAqB,CAACqB,IAAI,CAAC;EAC3C,MAAME,GAAG,GAAGtB,oBAAoB,CAACqB,OAAO,CAAC;EAEzC,IAAI,CAACC,GAAG,CAACC,CAAC,IAAI,CAACD,GAAG,CAACE,CAAC,EAAE;IACpB,MAAM,IAAIvB,aAAa,CACrB,2DACF,CAAC;EACH;EAEAqB,GAAG,CAACC,CAAC,GAAG1B,SAAS,CAACyB,GAAG,CAACC,CAAC,CAAC;EACxBD,GAAG,CAACE,CAAC,GAAG3B,SAAS,CAACyB,GAAG,CAACE,CAAC,CAAC;EAExB,MAAMC,gBAAgB,GAAG,MAAM/B,IAAI,CAACS,MAAM,CAACa,SAAS,EAAEM,GAAgB,CAAC;EAEvE,IAAI,CAACG,gBAAgB,EAAE,MAAM,IAAIC,KAAK,CAAC,wBAAwB,CAAC;AAClE,CAAC;AAED,OAAO,MAAMC,kBAAkB,GAAG,MAAAA,CAChCC,YAAoB,EACpBC,cAAsB,EACtBC,QAAgB,EAChBC,WAAmB,EACnBC,OAAe,EACfC,MAAc,EAAAC,IAAA,KAIV;EAAA,IAHJ,CAACC,oBAAoB,EAAEC,iBAAiB,CAAe,GAAAF,IAAA;EAIvD;EACA,MAAMG,SAAS,GAAG,CAChB;IACEC,KAAK,EAAEL,MAAM;IACbD,OAAO;IACPO,mBAAmB,EAAE1C,SAAS,CAACsC,oBAAoB;EACrD,CAAC,CACF;;EAED;EACA;EACA,MAAMK,QAAQ,GAAG,MAAM7C,UAAU,CAAC8C,4BAA4B,CAC5DX,QAAQ,EACRC,WAAW,EACXH,YAAY,EACZC,cAAc,EACdQ,SAAS,EACTD,iBACF,CAAC;EAED,OAAO;IACLI,QAAQ,EAAE5C,aAAa,CAAC4C,QAAQ;EAClC,CAAC;AACH,CAAC"}

package/lib/module/mdoc/utils.js.map

@@ -1 +1 @@
-{"version":3,"names":["CBOR","Verification","MDOC_VERIFICATION_IDENTIFIER","getParsedCredentialClaimKey","namespace","key","getVerificationFromParsedCredential","parsedCredential","_parsedCredential$ver","verificationKey","Object","keys","find","endsWith","verification","value","undefined","parse","getVerification","token","_flattenedClaims$find","issuerSigned","decodeIssuerSigned","flattenedClaims","values","nameSpaces","flat","x","elementIdentifier","elementValue"],"sourceRoot":"../../../src","sources":["mdoc/utils.ts"],"mappings":"AAAA,SAASA,IAAI,QAAQ,kCAAkC;AACvD,SAASC,YAAY,QAAQ,iBAAiB;AAG9C,SAASC,4BAA4B,QAAQ,SAAS;;AAEtD;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,2BAA2B,GAAGA,CAACC,SAAiB,EAAEC,GAAW,KACvE,GAAED,SAAU,IAAGC,GAAI,EAAC;;AAEvB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,mCAAmC,GAC9CC,gBAEqB,IAClB;EAAA,IAAAC,qBAAA;EACH,MAAMC,eAAe,GAAGC,MAAM,CAACC,IAAI,CAACJ,gBAAgB,CAAC,CAACK,IAAI,CAAEP,GAAG,IAC7DA,GAAG,CAACQ,QAAQ,CAACX,4BAA4B,CAC3C,CAAC;EACD,MAAMY,YAAY,GAAGL,eAAe,IAAAD,qBAAA,GAChCD,gBAAgB,CAACE,eAAe,CAAC,cAAAD,qBAAA,uBAAjCA,qBAAA,CAAmCO,KAAK,GACxCC,SAAS;EACb,OAAOF,YAAY,GAAGb,YAAY,CAACgB,KAAK,CAACH,YAAY,CAAC,GAAGE,SAAS;AACpE,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAME,eAAe,GAAG,MAAOC,KAAa,IAAK;EAAA,IAAAC,qBAAA;EACtD,MAAMC,YAAY,GAAG,MAAMrB,IAAI,CAACsB,kBAAkB,CAACH,KAAK,CAAC;EAEzD,MAAMI,eAAe,GAAGb,MAAM,CAACc,MAAM,CAACH,YAAY,CAACI,UAAU,CAAC,CAACC,IAAI,CAAC,CAAC;EAErE,MAAMZ,YAAY,GAAGS,eAAe,aAAfA,eAAe,gBAAAH,qBAAA,GAAfG,eAAe,CAAEX,IAAI,CACvCe,CAAC,IAAKA,CAAC,CAACC,iBAAiB,KAAK1B,4BACjC,CAAC,cAAAkB,qBAAA,uBAFoBA,qBAAA,CAElBS,YAAY;EAEf,OAAOf,YAAY,GAAGb,YAAY,CAACgB,KAAK,CAACH,YAAY,CAAC,GAAGE,SAAS;AACpE,CAAC"}
+{"version":3,"names":["CBOR","Verification","MDOC_VERIFICATION_IDENTIFIER","getParsedCredentialClaimKey","namespace","key","getVerificationFromParsedCredential","parsedCredential","_parsedCredential$ver","verificationKey","Object","keys","find","endsWith","verification","value","undefined","parse","getVerification","token","_flattenedClaims$find","issuerSigned","decodeIssuerSigned","flattenedClaims","values","nameSpaces","flat","x","elementIdentifier","elementValue"],"sourceRoot":"../../../src","sources":["mdoc/utils.ts"],"mappings":"AAAA,SAASA,IAAI,QAAQ,kCAAkC;AAKvD,SAASC,YAAY,QAAQ,iBAAiB;AAC9C,SAASC,4BAA4B,QAAQ,SAAS;;AAEtD;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,2BAA2B,GAAGA,CAACC,SAAiB,EAAEC,GAAW,KACvE,GAAED,SAAU,IAAGC,GAAI,EAAC;;AAEvB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,mCAAmC,GAC9CC,gBAEqB,IAClB;EAAA,IAAAC,qBAAA;EACH,MAAMC,eAAe,GAAGC,MAAM,CAACC,IAAI,CAACJ,gBAAgB,CAAC,CAACK,IAAI,CAAEP,GAAG,IAC7DA,GAAG,CAACQ,QAAQ,CAACX,4BAA4B,CAC3C,CAAC;EACD,MAAMY,YAAY,GAAGL,eAAe,IAAAD,qBAAA,GAChCD,gBAAgB,CAACE,eAAe,CAAC,cAAAD,qBAAA,uBAAjCA,qBAAA,CAAmCO,KAAK,GACxCC,SAAS;EACb,OAAOF,YAAY,GAAGb,YAAY,CAACgB,KAAK,CAACH,YAAY,CAAC,GAAGE,SAAS;AACpE,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAME,eAAe,GAAG,MAAOC,KAAa,IAAK;EAAA,IAAAC,qBAAA;EACtD,MAAMC,YAAY,GAAG,MAAMrB,IAAI,CAACsB,kBAAkB,CAACH,KAAK,CAAC;EAEzD,MAAMI,eAAe,GAAGb,MAAM,CAACc,MAAM,CAACH,YAAY,CAACI,UAAU,CAAC,CAACC,IAAI,CAAC,CAAC;EAErE,MAAMZ,YAAY,GAAGS,eAAe,aAAfA,eAAe,gBAAAH,qBAAA,GAAfG,eAAe,CAAEX,IAAI,CACvCe,CAAC,IAAKA,CAAC,CAACC,iBAAiB,KAAK1B,4BACjC,CAAC,cAAAkB,qBAAA,uBAFoBA,qBAAA,CAElBS,YAAY;EAEf,OAAOf,YAAY,GAAGb,YAAY,CAACgB,KAAK,CAACH,YAAY,CAAC,GAAGE,SAAS;AACpE,CAAC"}

package/lib/module/sd-jwt/__test__/types.test.js

@@ -2,27 +2,27 @@ import { Verification } from "../types";
 describe("Verification.time", () => {
   test.each([["ISO string", "2025-09-09T10:00:00Z"], ["unix seconds", 1752122400], ["unix milliseconds", 1752122400000]])("accepts %s", (_label, time) => {
     const value = {
-      trust_framework: "eidas",
       assurance_level: "high",
       evidence: [{
-        type: "vouch",
-        time,
         attestation: {
-          type: "digital_attestation",
-          reference_number: "abc",
           date_of_issuance: "2025-09-02",
+          reference_number: "abc",
+          type: "digital_attestation",
           voucher: {
             organization: "IPZS"
           }
-        }
-      }]
+        },
+        time,
+        type: "vouch"
+      }],
+      trust_framework: "eidas"
     };
     expect(Verification.safeParse(value).success).toBe(true);
   });
   it("rejects invalid type", () => {
     const value = {
-      trust_framework: ["eidas"],
-      assurance_level: "high"
+      assurance_level: "high",
+      trust_framework: ["eidas"]
     };
     expect(Verification.safeParse(value).success).toBe(false);
   });

package/lib/module/sd-jwt/__test__/types.test.js.map

@@ -1 +1 @@
-{"version":3,"names":["Verification","describe","test","each","_label","time","value","trust_framework","assurance_level","evidence","type","attestation","reference_number","date_of_issuance","voucher","organization","expect","safeParse","success","toBe","it"],"sourceRoot":"../../../../src","sources":["sd-jwt/__test__/types.test.ts"],"mappings":"AAAA,SAASA,YAAY,QAAQ,UAAU;AAEvCC,QAAQ,CAAC,mBAAmB,EAAE,MAAM;EAClCC,IAAI,CAACC,IAAI,CAAC,CACR,CAAC,YAAY,EAAE,sBAAsB,CAAC,EACtC,CAAC,cAAc,EAAE,UAAU,CAAC,EAC5B,CAAC,mBAAmB,EAAE,aAAa,CAAC,CACrC,CAAC,CAAC,YAAY,EAAE,CAACC,MAAM,EAAEC,IAAI,KAAK;IACjC,MAAMC,KAAK,GAAG;MACZC,eAAe,EAAE,OAAO;MACxBC,eAAe,EAAE,MAAM;MACvBC,QAAQ,EAAE,CACR;QACEC,IAAI,EAAE,OAAO;QACbL,IAAI;QACJM,WAAW,EAAE;UACXD,IAAI,EAAE,qBAAqB;UAC3BE,gBAAgB,EAAE,KAAK;UACvBC,gBAAgB,EAAE,YAAY;UAC9BC,OAAO,EAAE;YAAEC,YAAY,EAAE;UAAO;QAClC;MACF,CAAC;IAEL,CAAC;IAEDC,MAAM,CAAChB,YAAY,CAACiB,SAAS,CAACX,KAAK,CAAC,CAACY,OAAO,CAAC,CAACC,IAAI,CAAC,IAAI,CAAC;EAC1D,CAAC,CAAC;EAEFC,EAAE,CAAC,sBAAsB,EAAE,MAAM;IAC/B,MAAMd,KAAK,GAAG;MACZC,eAAe,EAAE,CAAC,OAAO,CAAC;MAC1BC,eAAe,EAAE;IACnB,CAAC;IAEDQ,MAAM,CAAChB,YAAY,CAACiB,SAAS,CAACX,KAAK,CAAC,CAACY,OAAO,CAAC,CAACC,IAAI,CAAC,KAAK,CAAC;EAC3D,CAAC,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"names":["Verification","describe","test","each","_label","time","value","assurance_level","evidence","attestation","date_of_issuance","reference_number","type","voucher","organization","trust_framework","expect","safeParse","success","toBe","it"],"sourceRoot":"../../../../src","sources":["sd-jwt/__test__/types.test.ts"],"mappings":"AAAA,SAASA,YAAY,QAAQ,UAAU;AAEvCC,QAAQ,CAAC,mBAAmB,EAAE,MAAM;EAClCC,IAAI,CAACC,IAAI,CAAC,CACR,CAAC,YAAY,EAAE,sBAAsB,CAAC,EACtC,CAAC,cAAc,EAAE,UAAU,CAAC,EAC5B,CAAC,mBAAmB,EAAE,aAAa,CAAC,CACrC,CAAC,CAAC,YAAY,EAAE,CAACC,MAAM,EAAEC,IAAI,KAAK;IACjC,MAAMC,KAAK,GAAG;MACZC,eAAe,EAAE,MAAM;MACvBC,QAAQ,EAAE,CACR;QACEC,WAAW,EAAE;UACXC,gBAAgB,EAAE,YAAY;UAC9BC,gBAAgB,EAAE,KAAK;UACvBC,IAAI,EAAE,qBAAqB;UAC3BC,OAAO,EAAE;YAAEC,YAAY,EAAE;UAAO;QAClC,CAAC;QACDT,IAAI;QACJO,IAAI,EAAE;MACR,CAAC,CACF;MACDG,eAAe,EAAE;IACnB,CAAC;IAEDC,MAAM,CAAChB,YAAY,CAACiB,SAAS,CAACX,KAAK,CAAC,CAACY,OAAO,CAAC,CAACC,IAAI,CAAC,IAAI,CAAC;EAC1D,CAAC,CAAC;EAEFC,EAAE,CAAC,sBAAsB,EAAE,MAAM;IAC/B,MAAMd,KAAK,GAAG;MACZC,eAAe,EAAE,MAAM;MACvBQ,eAAe,EAAE,CAAC,OAAO;IAC3B,CAAC;IAEDC,MAAM,CAAChB,YAAY,CAACiB,SAAS,CAACX,KAAK,CAAC,CAACY,OAAO,CAAC,CAACC,IAAI,CAAC,KAAK,CAAC;EAC3D,CAAC,CAAC;AACJ,CAAC,CAAC"}

package/lib/module/sd-jwt/__test__/utils.test.js

@@ -1,10 +1,10 @@
-import { legacyPid, pid } from "../__mocks__/sd-jwt";
 import { getVerification } from "..";
+import { legacyPid, pid } from "../__fixtures__/sd-jwt";
 describe("SD-JWT getVerification", () => {
   it("extracts the verification claims correctly", () => {
     expect(getVerification(pid)).toEqual({
-      trust_framework: "it_cie",
-      assurance_level: "high"
+      assurance_level: "high",
+      trust_framework: "it_cie"
     });
   });
   it("returns undefined when the verification claim is not found", () => {

package/lib/module/sd-jwt/__test__/utils.test.js.map

@@ -1 +1 @@
-{"version":3,"names":["legacyPid","pid","getVerification","describe","it","expect","toEqual","trust_framework","assurance_level","toBeUndefined"],"sourceRoot":"../../../../src","sources":["sd-jwt/__test__/utils.test.ts"],"mappings":"AAAA,SAASA,SAAS,EAAEC,GAAG,QAAQ,qBAAqB;AACpD,SAASC,eAAe,QAAQ,IAAI;AAEpCC,QAAQ,CAAC,wBAAwB,EAAE,MAAM;EACvCC,EAAE,CAAC,4CAA4C,EAAE,MAAM;IACrDC,MAAM,CAACH,eAAe,CAACD,GAAG,CAAC,CAAC,CAACK,OAAO,CAAC;MACnCC,eAAe,EAAE,QAAQ;MACzBC,eAAe,EAAE;IACnB,CAAC,CAAC;EACJ,CAAC,CAAC;EAEFJ,EAAE,CAAC,4DAA4D,EAAE,MAAM;IACrEC,MAAM,CAACH,eAAe,CAACF,SAAS,CAAC,CAAC,CAACS,aAAa,CAAC,CAAC;EACpD,CAAC,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"names":["getVerification","legacyPid","pid","describe","it","expect","toEqual","assurance_level","trust_framework","toBeUndefined"],"sourceRoot":"../../../../src","sources":["sd-jwt/__test__/utils.test.ts"],"mappings":"AAAA,SAASA,eAAe,QAAQ,IAAI;AACpC,SAASC,SAAS,EAAEC,GAAG,QAAQ,wBAAwB;AAEvDC,QAAQ,CAAC,wBAAwB,EAAE,MAAM;EACvCC,EAAE,CAAC,4CAA4C,EAAE,MAAM;IACrDC,MAAM,CAACL,eAAe,CAACE,GAAG,CAAC,CAAC,CAACI,OAAO,CAAC;MACnCC,eAAe,EAAE,MAAM;MACvBC,eAAe,EAAE;IACnB,CAAC,CAAC;EACJ,CAAC,CAAC;EAEFJ,EAAE,CAAC,4DAA4D,EAAE,MAAM;IACrEC,MAAM,CAACL,eAAe,CAACC,SAAS,CAAC,CAAC,CAACQ,aAAa,CAAC,CAAC;EACpD,CAAC,CAAC;AACJ,CAAC,CAAC"}

package/lib/module/sd-jwt/index.js

@@ -1,7 +1,7 @@
 import { sha256ToBase64, SignJWT } from "@pagopa/io-react-native-jwt";
+import { digest } from "@sd-jwt/crypto-nodejs";
 import { decodeSdJwtSync } from "@sd-jwt/decode";
 import { present } from "@sd-jwt/present";
-import { digest } from "@sd-jwt/crypto-nodejs";
 import { fixLegacyCredentialSdJwt } from "../utils/credentials";
 import { SdJwt4VCBase } from "./types";
 export * from "./utils";
@@ -22,12 +22,12 @@ export const decode = token => {
     payload: decoded.jwt.payload
   });
   const disclosures = decoded.disclosures.map(disclosure => ({
-    encoded: disclosure._digest,
-    decoded: [disclosure.salt, disclosure.key, disclosure.value]
+    decoded: [disclosure.salt, disclosure.key, disclosure.value],
+    encoded: disclosure._digest
   }));
   return {
-    sdJwt,
-    disclosures
+    disclosures,
+    sdJwt
   };
 };
 
@@ -54,11 +54,11 @@ export const prepareVpToken = async (nonce, client_id, _ref) => {
   // <Issuer-signed JWT>~<Disclosure 1>~<Disclosure N>~
   const sd_hash = await sha256ToBase64(vp);
   const kbJwt = await new SignJWT(cryptoContext).setProtectedHeader({
-    typ: "kb+jwt",
-    alg: "ES256"
+    alg: "ES256",
+    typ: "kb+jwt"
   }).setPayload({
-    sd_hash,
-    nonce: nonce
+    nonce: nonce,
+    sd_hash
   }).setAudience(client_id).setIssuedAt().sign();
   // <Issuer-signed JWT>~<Disclosure 1>~...~<Disclosure N>~<KB-JWT>
   const vp_token = [vp, kbJwt].join("");

package/lib/module/sd-jwt/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["sha256ToBase64","SignJWT","decodeSdJwtSync","present","digest","fixLegacyCredentialSdJwt","SdJwt4VCBase","decode","token","decoded","sdJwt","parse","header","jwt","payload","disclosures","map","disclosure","encoded","_digest","salt","key","value","prepareVpToken","nonce","client_id","_ref","verifiableCredential","presentationFrame","cryptoContext","vp","sd_hash","kbJwt","setProtectedHeader","typ","alg","setPayload","setAudience","setIssuedAt","sign","vp_token","join"],"sourceRoot":"../../../src","sources":["sd-jwt/index.ts"],"mappings":"AAAA,SAASA,cAAc,EAAEC,OAAO,QAAQ,6BAA6B;AACrE,SAASC,eAAe,QAAQ,gBAAgB;AAChD,SAASC,OAAO,QAAQ,iBAAiB;AACzC,SAASC,MAAM,QAAQ,uBAAuB;AAC9C,SAASC,wBAAwB,QAAQ,sBAAsB;AAE/D,SAASC,YAAY,QAAQ,SAAS;AAEtC,cAAc,SAAS;;AAEvB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,MAAM,GAAIC,KAAa,IAAK;EACvC,MAAMC,OAAO,GAAGP,eAAe,CAACG,wBAAwB,CAACG,KAAK,CAAC,EAAEJ,MAAM,CAAC;EAExE,MAAMM,KAAK,GAAGJ,YAAY,CAACK,KAAK,CAAC;IAC/BC,MAAM,EAAEH,OAAO,CAACI,GAAG,CAACD,MAAM;IAC1BE,OAAO,EAAEL,OAAO,CAACI,GAAG,CAACC;EACvB,CAAC,CAAC;EACF,MAAMC,WAAW,GAAGN,OAAO,CAACM,WAAW,CAACC,GAAG,CAAEC,UAAU,KAAM;IAC3DC,OAAO,EAAED,UAAU,CAACE,OAAO;IAC3BV,OAAO,EAAE,CAACQ,UAAU,CAACG,IAAI,EAAEH,UAAU,CAACI,GAAG,EAAEJ,UAAU,CAACK,KAAK;EAC7D,CAAC,CAAC,CAAC;EACH,OAAO;IAAEZ,KAAK;IAAEK;EAAY,CAAC;AAC/B,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMQ,cAAc,GAAG,MAAAA,CAC5BC,KAAa,EACbC,SAAiB,EAAAC,IAAA,KAIb;EAAA,IAHJ,CAACC,oBAAoB,EAAEC,iBAAiB,EAAEC,aAAa,CAAe,GAAAH,IAAA;EAItE;EACA,MAAMI,EAAE,GAAG,MAAM3B,OAAO,CACtBE,wBAAwB,CAACsB,oBAAoB,CAAC,EAC9CC,iBAAiB,EACjBxB,MACF,CAAC;;EAED;EACA,MAAM2B,OAAO,GAAG,MAAM/B,cAAc,CAAC8B,EAAE,CAAC;EAExC,MAAME,KAAK,GAAG,MAAM,IAAI/B,OAAO,CAAC4B,aAAa,CAAC,CAC3CI,kBAAkB,CAAC;IAClBC,GAAG,EAAE,QAAQ;IACbC,GAAG,EAAE;EACP,CAAC,CAAC,CACDC,UAAU,CAAC;IACVL,OAAO;IACPP,KAAK,EAAEA;EACT,CAAC,CAAC,CACDa,WAAW,CAACZ,SAAS,CAAC,CACtBa,WAAW,CAAC,CAAC,CACbC,IAAI,CAAC,CAAC;EACT;EACA,MAAMC,QAAQ,GAAG,CAACV,EAAE,EAAEE,KAAK,CAAC,CAACS,IAAI,CAAC,EAAE,CAAC;EAErC,OAAO;IAAED;EAAS,CAAC;AACrB,CAAC"}
+{"version":3,"names":["sha256ToBase64","SignJWT","digest","decodeSdJwtSync","present","fixLegacyCredentialSdJwt","SdJwt4VCBase","decode","token","decoded","sdJwt","parse","header","jwt","payload","disclosures","map","disclosure","salt","key","value","encoded","_digest","prepareVpToken","nonce","client_id","_ref","verifiableCredential","presentationFrame","cryptoContext","vp","sd_hash","kbJwt","setProtectedHeader","alg","typ","setPayload","setAudience","setIssuedAt","sign","vp_token","join"],"sourceRoot":"../../../src","sources":["sd-jwt/index.ts"],"mappings":"AAAA,SAASA,cAAc,EAAEC,OAAO,QAAQ,6BAA6B;AACrE,SAASC,MAAM,QAAQ,uBAAuB;AAC9C,SAASC,eAAe,QAAQ,gBAAgB;AAChD,SAASC,OAAO,QAAQ,iBAAiB;AAIzC,SAASC,wBAAwB,QAAQ,sBAAsB;AAC/D,SAASC,YAAY,QAAQ,SAAS;AAEtC,cAAc,SAAS;;AAEvB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,MAAM,GAAIC,KAAa,IAAK;EACvC,MAAMC,OAAO,GAAGN,eAAe,CAACE,wBAAwB,CAACG,KAAK,CAAC,EAAEN,MAAM,CAAC;EAExE,MAAMQ,KAAK,GAAGJ,YAAY,CAACK,KAAK,CAAC;IAC/BC,MAAM,EAAEH,OAAO,CAACI,GAAG,CAACD,MAAM;IAC1BE,OAAO,EAAEL,OAAO,CAACI,GAAG,CAACC;EACvB,CAAC,CAAC;EACF,MAAMC,WAAW,GAAGN,OAAO,CAACM,WAAW,CAACC,GAAG,CAAEC,UAAU,KAAM;IAC3DR,OAAO,EAAE,CAACQ,UAAU,CAACC,IAAI,EAAED,UAAU,CAACE,GAAG,EAAEF,UAAU,CAACG,KAAK,CAAC;IAC5DC,OAAO,EAAEJ,UAAU,CAACK;EACtB,CAAC,CAAC,CAAC;EACH,OAAO;IAAEP,WAAW;IAAEL;EAAM,CAAC;AAC/B,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMa,cAAc,GAAG,MAAAA,CAC5BC,KAAa,EACbC,SAAiB,EAAAC,IAAA,KAIb;EAAA,IAHJ,CAACC,oBAAoB,EAAEC,iBAAiB,EAAEC,aAAa,CAAe,GAAAH,IAAA;EAItE;EACA,MAAMI,EAAE,GAAG,MAAM1B,OAAO,CACtBC,wBAAwB,CAACsB,oBAAoB,CAAC,EAC9CC,iBAAiB,EACjB1B,MACF,CAAC;;EAED;EACA,MAAM6B,OAAO,GAAG,MAAM/B,cAAc,CAAC8B,EAAE,CAAC;EAExC,MAAME,KAAK,GAAG,MAAM,IAAI/B,OAAO,CAAC4B,aAAa,CAAC,CAC3CI,kBAAkB,CAAC;IAClBC,GAAG,EAAE,OAAO;IACZC,GAAG,EAAE;EACP,CAAC,CAAC,CACDC,UAAU,CAAC;IACVZ,KAAK,EAAEA,KAAK;IACZO;EACF,CAAC,CAAC,CACDM,WAAW,CAACZ,SAAS,CAAC,CACtBa,WAAW,CAAC,CAAC,CACbC,IAAI,CAAC,CAAC;EACT;EACA,MAAMC,QAAQ,GAAG,CAACV,EAAE,EAAEE,KAAK,CAAC,CAACS,IAAI,CAAC,EAAE,CAAC;EAErC,OAAO;IAAED;EAAS,CAAC;AACrB,CAAC"}

package/lib/module/sd-jwt/types.js

@@ -1,6 +1,6 @@
 import { z } from "zod";
-import { UnixTime } from "../utils/zod";
 import { JWK } from "../utils/jwk";
+import { UnixTime } from "../utils/zod";
 
 /**
  * For backward compatibility reasons it is still necessary to support the legacy SD-JWT
@@ -23,29 +23,29 @@ const StatusList = z.object({
 
 export const SdJwt4VCBase = z.object({
   header: z.object({
-    typ: z.enum(["dc+sd-jwt", LEGACY_SD_JWT]),
     alg: z.string(),
     kid: z.string(),
     trust_chain: z.array(z.string()).optional(),
-    x5c: z.array(z.string()).optional(),
-    vctm: z.array(z.string()).optional()
+    typ: z.enum(["dc+sd-jwt", LEGACY_SD_JWT]),
+    vctm: z.array(z.string()).optional(),
+    x5c: z.array(z.string()).optional()
   }),
   payload: z.object({
     _sd: z.array(z.string()),
     _sd_alg: z.literal("sha-256"),
-    iss: z.string(),
-    sub: z.string(),
-    iat: UnixTime.optional(),
-    exp: UnixTime,
     cnf: z.object({
       jwk: JWK
     }),
+    exp: UnixTime,
+    iat: UnixTime.optional(),
+    iss: z.string(),
     status: z.union([z.object({
       status_list: StatusList
     }), z.object({
       /** @deprecated Use `status.status_list` */
       status_assertion: StatusAssertion
     })]),
+    sub: z.string(),
     vct: z.string(),
     "vct#integrity": z.string().optional()
   })
@@ -57,8 +57,8 @@ export const SdJwt4VCBase = z.object({
  */
 
 export const Verification = z.object({
-  trust_framework: z.string(),
-  assurance_level: z.string()
+  assurance_level: z.string(),
+  trust_framework: z.string()
 });
 
 /**
@@ -68,17 +68,17 @@ export const Verification = z.object({
  */
 
 export const TypeMetadata = z.object({
-  name: z.string(),
-  description: z.string(),
   data_source: z.object({
-    trust_framework: z.string(),
     authentic_source: z.object({
-      organization_name: z.string(),
-      organization_code: z.string(),
       contacts: z.array(z.string()),
       homepage_uri: z.string().url(),
-      logo_uri: z.string().url()
-    })
-  })
+      logo_uri: z.string().url(),
+      organization_code: z.string(),
+      organization_name: z.string()
+    }),
+    trust_framework: z.string()
+  }),
+  description: z.string(),
+  name: z.string()
 });
 //# sourceMappingURL=types.js.map

package/lib/module/sd-jwt/types.js.map

@@ -1 +1 @@
-{"version":3,"names":["z","UnixTime","JWK","LEGACY_SD_JWT","StatusAssertion","object","credential_hash_alg","literal","StatusList","idx","number","uri","string","SdJwt4VCBase","header","typ","enum","alg","kid","trust_chain","array","optional","x5c","vctm","payload","_sd","_sd_alg","iss","sub","iat","exp","cnf","jwk","status","union","status_list","status_assertion","vct","Verification","trust_framework","assurance_level","TypeMetadata","name","description","data_source","authentic_source","organization_name","organization_code","contacts","homepage_uri","url","logo_uri"],"sourceRoot":"../../../src","sources":["sd-jwt/types.ts"],"mappings":"AAAA,SAASA,CAAC,QAAQ,KAAK;AACvB,SAASC,QAAQ,QAAQ,cAAc;AACvC,SAASC,GAAG,QAAQ,cAAc;;AAElC;AACA;AACA;AACA;;AAEA,OAAO,MAAMC,aAAa,GAAG,WAAW;AAExC,MAAMC,eAAe,GAAGJ,CAAC,CAACK,MAAM,CAAC;EAC/BC,mBAAmB,EAAEN,CAAC,CAACO,OAAO,CAAC,SAAS;AAC1C,CAAC,CAAC;AAEF,MAAMC,UAAU,GAAGR,CAAC,CAACK,MAAM,CAAC;EAC1BI,GAAG,EAAET,CAAC,CAACU,MAAM,CAAC,CAAC;EACfC,GAAG,EAAEX,CAAC,CAACY,MAAM,CAAC;AAChB,CAAC,CAAC;;AAEF;AACA;AACA;AACA;;AAEA,OAAO,MAAMC,YAAY,GAAGb,CAAC,CAACK,MAAM,CAAC;EACnCS,MAAM,EAAEd,CAAC,CAACK,MAAM,CAAC;IACfU,GAAG,EAAEf,CAAC,CAACgB,IAAI,CAAC,CAAC,WAAW,EAAEb,aAAa,CAAC,CAAC;IACzCc,GAAG,EAAEjB,CAAC,CAACY,MAAM,CAAC,CAAC;IACfM,GAAG,EAAElB,CAAC,CAACY,MAAM,CAAC,CAAC;IACfO,WAAW,EAAEnB,CAAC,CAACoB,KAAK,CAACpB,CAAC,CAACY,MAAM,CAAC,CAAC,CAAC,CAACS,QAAQ,CAAC,CAAC;IAC3CC,GAAG,EAAEtB,CAAC,CAACoB,KAAK,CAACpB,CAAC,CAACY,MAAM,CAAC,CAAC,CAAC,CAACS,QAAQ,CAAC,CAAC;IACnCE,IAAI,EAAEvB,CAAC,CAACoB,KAAK,CAACpB,CAAC,CAACY,MAAM,CAAC,CAAC,CAAC,CAACS,QAAQ,CAAC;EACrC,CAAC,CAAC;EACFG,OAAO,EAAExB,CAAC,CAACK,MAAM,CAAC;IAChBoB,GAAG,EAAEzB,CAAC,CAACoB,KAAK,CAACpB,CAAC,CAACY,MAAM,CAAC,CAAC,CAAC;IACxBc,OAAO,EAAE1B,CAAC,CAACO,OAAO,CAAC,SAAS,CAAC;IAC7BoB,GAAG,EAAE3B,CAAC,CAACY,MAAM,CAAC,CAAC;IACfgB,GAAG,EAAE5B,CAAC,CAACY,MAAM,CAAC,CAAC;IACfiB,GAAG,EAAE5B,QAAQ,CAACoB,QAAQ,CAAC,CAAC;IACxBS,GAAG,EAAE7B,QAAQ;IACb8B,GAAG,EAAE/B,CAAC,CAACK,MAAM,CAAC;MACZ2B,GAAG,EAAE9B;IACP,CAAC,CAAC;IACF+B,MAAM,EAAEjC,CAAC,CAACkC,KAAK,CAAC,CACdlC,CAAC,CAACK,MAAM,CAAC;MACP8B,WAAW,EAAE3B;IACf,CAAC,CAAC,EACFR,CAAC,CAACK,MAAM,CAAC;MACP;MACA+B,gBAAgB,EAAEhC;IACpB,CAAC,CAAC,CACH,CAAC;IACFiC,GAAG,EAAErC,CAAC,CAACY,MAAM,CAAC,CAAC;IACf,eAAe,EAAEZ,CAAC,CAACY,MAAM,CAAC,CAAC,CAACS,QAAQ,CAAC;EACvC,CAAC;AACH,CAAC,CAAC;;AAEF;AACA;AACA;AACA;;AAEA,OAAO,MAAMiB,YAAY,GAAGtC,CAAC,CAACK,MAAM,CAAC;EACnCkC,eAAe,EAAEvC,CAAC,CAACY,MAAM,CAAC,CAAC;EAC3B4B,eAAe,EAAExC,CAAC,CAACY,MAAM,CAAC;AAC5B,CAAC,CAAC;;AAEF;AACA;AACA;AACA;AACA;;AAEA,OAAO,MAAM6B,YAAY,GAAGzC,CAAC,CAACK,MAAM,CAAC;EACnCqC,IAAI,EAAE1C,CAAC,CAACY,MAAM,CAAC,CAAC;EAChB+B,WAAW,EAAE3C,CAAC,CAACY,MAAM,CAAC,CAAC;EACvBgC,WAAW,EAAE5C,CAAC,CAACK,MAAM,CAAC;IACpBkC,eAAe,EAAEvC,CAAC,CAACY,MAAM,CAAC,CAAC;IAC3BiC,gBAAgB,EAAE7C,CAAC,CAACK,MAAM,CAAC;MACzByC,iBAAiB,EAAE9C,CAAC,CAACY,MAAM,CAAC,CAAC;MAC7BmC,iBAAiB,EAAE/C,CAAC,CAACY,MAAM,CAAC,CAAC;MAC7BoC,QAAQ,EAAEhD,CAAC,CAACoB,KAAK,CAACpB,CAAC,CAACY,MAAM,CAAC,CAAC,CAAC;MAC7BqC,YAAY,EAAEjD,CAAC,CAACY,MAAM,CAAC,CAAC,CAACsC,GAAG,CAAC,CAAC;MAC9BC,QAAQ,EAAEnD,CAAC,CAACY,MAAM,CAAC,CAAC,CAACsC,GAAG,CAAC;IAC3B,CAAC;EACH,CAAC;AACH,CAAC,CAAC"}
+{"version":3,"names":["z","JWK","UnixTime","LEGACY_SD_JWT","StatusAssertion","object","credential_hash_alg","literal","StatusList","idx","number","uri","string","SdJwt4VCBase","header","alg","kid","trust_chain","array","optional","typ","enum","vctm","x5c","payload","_sd","_sd_alg","cnf","jwk","exp","iat","iss","status","union","status_list","status_assertion","sub","vct","Verification","assurance_level","trust_framework","TypeMetadata","data_source","authentic_source","contacts","homepage_uri","url","logo_uri","organization_code","organization_name","description","name"],"sourceRoot":"../../../src","sources":["sd-jwt/types.ts"],"mappings":"AAAA,SAASA,CAAC,QAAQ,KAAK;AAEvB,SAASC,GAAG,QAAQ,cAAc;AAClC,SAASC,QAAQ,QAAQ,cAAc;;AAEvC;AACA;AACA;AACA;;AAEA,OAAO,MAAMC,aAAa,GAAG,WAAW;AAExC,MAAMC,eAAe,GAAGJ,CAAC,CAACK,MAAM,CAAC;EAC/BC,mBAAmB,EAAEN,CAAC,CAACO,OAAO,CAAC,SAAS;AAC1C,CAAC,CAAC;AAEF,MAAMC,UAAU,GAAGR,CAAC,CAACK,MAAM,CAAC;EAC1BI,GAAG,EAAET,CAAC,CAACU,MAAM,CAAC,CAAC;EACfC,GAAG,EAAEX,CAAC,CAACY,MAAM,CAAC;AAChB,CAAC,CAAC;;AAEF;AACA;AACA;AACA;;AAEA,OAAO,MAAMC,YAAY,GAAGb,CAAC,CAACK,MAAM,CAAC;EACnCS,MAAM,EAAEd,CAAC,CAACK,MAAM,CAAC;IACfU,GAAG,EAAEf,CAAC,CAACY,MAAM,CAAC,CAAC;IACfI,GAAG,EAAEhB,CAAC,CAACY,MAAM,CAAC,CAAC;IACfK,WAAW,EAAEjB,CAAC,CAACkB,KAAK,CAAClB,CAAC,CAACY,MAAM,CAAC,CAAC,CAAC,CAACO,QAAQ,CAAC,CAAC;IAC3CC,GAAG,EAAEpB,CAAC,CAACqB,IAAI,CAAC,CAAC,WAAW,EAAElB,aAAa,CAAC,CAAC;IACzCmB,IAAI,EAAEtB,CAAC,CAACkB,KAAK,CAAClB,CAAC,CAACY,MAAM,CAAC,CAAC,CAAC,CAACO,QAAQ,CAAC,CAAC;IACpCI,GAAG,EAAEvB,CAAC,CAACkB,KAAK,CAAClB,CAAC,CAACY,MAAM,CAAC,CAAC,CAAC,CAACO,QAAQ,CAAC;EACpC,CAAC,CAAC;EACFK,OAAO,EAAExB,CAAC,CAACK,MAAM,CAAC;IAChBoB,GAAG,EAAEzB,CAAC,CAACkB,KAAK,CAAClB,CAAC,CAACY,MAAM,CAAC,CAAC,CAAC;IACxBc,OAAO,EAAE1B,CAAC,CAACO,OAAO,CAAC,SAAS,CAAC;IAC7BoB,GAAG,EAAE3B,CAAC,CAACK,MAAM,CAAC;MACZuB,GAAG,EAAE3B;IACP,CAAC,CAAC;IACF4B,GAAG,EAAE3B,QAAQ;IACb4B,GAAG,EAAE5B,QAAQ,CAACiB,QAAQ,CAAC,CAAC;IACxBY,GAAG,EAAE/B,CAAC,CAACY,MAAM,CAAC,CAAC;IACfoB,MAAM,EAAEhC,CAAC,CAACiC,KAAK,CAAC,CACdjC,CAAC,CAACK,MAAM,CAAC;MACP6B,WAAW,EAAE1B;IACf,CAAC,CAAC,EACFR,CAAC,CAACK,MAAM,CAAC;MACP;MACA8B,gBAAgB,EAAE/B;IACpB,CAAC,CAAC,CACH,CAAC;IACFgC,GAAG,EAAEpC,CAAC,CAACY,MAAM,CAAC,CAAC;IACfyB,GAAG,EAAErC,CAAC,CAACY,MAAM,CAAC,CAAC;IACf,eAAe,EAAEZ,CAAC,CAACY,MAAM,CAAC,CAAC,CAACO,QAAQ,CAAC;EACvC,CAAC;AACH,CAAC,CAAC;;AAEF;AACA;AACA;AACA;;AAEA,OAAO,MAAMmB,YAAY,GAAGtC,CAAC,CAACK,MAAM,CAAC;EACnCkC,eAAe,EAAEvC,CAAC,CAACY,MAAM,CAAC,CAAC;EAC3B4B,eAAe,EAAExC,CAAC,CAACY,MAAM,CAAC;AAC5B,CAAC,CAAC;;AAEF;AACA;AACA;AACA;AACA;;AAEA,OAAO,MAAM6B,YAAY,GAAGzC,CAAC,CAACK,MAAM,CAAC;EACnCqC,WAAW,EAAE1C,CAAC,CAACK,MAAM,CAAC;IACpBsC,gBAAgB,EAAE3C,CAAC,CAACK,MAAM,CAAC;MACzBuC,QAAQ,EAAE5C,CAAC,CAACkB,KAAK,CAAClB,CAAC,CAACY,MAAM,CAAC,CAAC,CAAC;MAC7BiC,YAAY,EAAE7C,CAAC,CAACY,MAAM,CAAC,CAAC,CAACkC,GAAG,CAAC,CAAC;MAC9BC,QAAQ,EAAE/C,CAAC,CAACY,MAAM,CAAC,CAAC,CAACkC,GAAG,CAAC,CAAC;MAC1BE,iBAAiB,EAAEhD,CAAC,CAACY,MAAM,CAAC,CAAC;MAC7BqC,iBAAiB,EAAEjD,CAAC,CAACY,MAAM,CAAC;IAC9B,CAAC,CAAC;IACF4B,eAAe,EAAExC,CAAC,CAACY,MAAM,CAAC;EAC5B,CAAC,CAAC;EACFsC,WAAW,EAAElD,CAAC,CAACY,MAAM,CAAC,CAAC;EACvBuC,IAAI,EAAEnD,CAAC,CAACY,MAAM,CAAC;AACjB,CAAC,CAAC"}

package/lib/module/sd-jwt/utils.js

@@ -1,10 +1,10 @@
 import { sha256ToBase64 } from "@pagopa/io-react-native-jwt";
-import { decodeSdJwtSync, getClaimsSync } from "@sd-jwt/decode";
 import { digest } from "@sd-jwt/crypto-nodejs";
+import { decodeSdJwtSync, getClaimsSync } from "@sd-jwt/decode";
+import { fixLegacyCredentialSdJwt } from "../utils/credentials";
+import { IoWalletError, IssuerResponseError, ValidationFailed } from "../utils/errors";
 import { hasStatusOrThrow } from "../utils/misc";
 import { TypeMetadata, Verification } from "./types";
-import { IoWalletError, IssuerResponseError, ValidationFailed } from "../utils/errors";
-import { fixLegacyCredentialSdJwt } from "../utils/credentials";
 
 /**
  * Retrieve the Type Metadata for a credential and verify its integrity.

package/lib/module/sd-jwt/utils.js.map

@@ -1 +1 @@
-{"version":3,"names":["sha256ToBase64","decodeSdJwtSync","getClaimsSync","digest","hasStatusOrThrow","TypeMetadata","Verification","IoWalletError","IssuerResponseError","ValidationFailed","fixLegacyCredentialSdJwt","fetchTypeMetadata","vct","vctIntegrity","context","arguments","length","undefined","appFetch","fetch","origin","pathname","URL","metadata","headers","then","res","json","parse","alg","hash","split","metadataHash","JSON","stringify","message","reason","getVerification","credentialSdJwt","decoded","claims","jwt","payload","disclosures","verification"],"sourceRoot":"../../../src","sources":["sd-jwt/utils.ts"],"mappings":"AAAA,SAASA,cAAc,QAAQ,6BAA6B;AAC5D,SAASC,eAAe,EAAEC,aAAa,QAAQ,gBAAgB;AAC/D,SAASC,MAAM,QAAQ,uBAAuB;AAC9C,SAASC,gBAAgB,QAAQ,eAAe;AAChD,SAASC,YAAY,EAAEC,YAAY,QAAQ,SAAS;AACpD,SACEC,aAAa,EACbC,mBAAmB,EACnBC,gBAAgB,QACX,iBAAiB;AACxB,SAASC,wBAAwB,QAAQ,sBAAsB;;AAE/D;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,iBAAiB,GAAG,eAAAA,CAC/BC,GAAW,EACXC,YAAoB,EAIM;EAAA,IAH1BC,OAEC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEN,MAAM;IAAEG,QAAQ,GAAGC;EAAM,CAAC,GAAGL,OAAO;EACpC,MAAM;IAAEM,MAAM;IAAEC;EAAS,CAAC,GAAG,IAAIC,GAAG,CAACV,GAAG,CAAC;EAEzC,MAAMW,QAAQ,GAAG,MAAML,QAAQ,CAAE,GAAEE,MAAO,mBAAkBC,QAAS,EAAC,EAAE;IACtEG,OAAO,EAAE;MACP,cAAc,EAAE;IAClB;EACF,CAAC,CAAC,CACCC,IAAI,CAACrB,gBAAgB,CAAC,GAAG,EAAEI,mBAAmB,CAAC,CAAC,CAChDiB,IAAI,CAAEC,GAAG,IAAKA,GAAG,CAACC,IAAI,CAAC,CAAC,CAAC,CACzBF,IAAI,CAACpB,YAAY,CAACuB,KAAK,CAAC;EAE3B,MAAM,CAACC,GAAG,EAAEC,IAAI,CAAC,GAAGjB,YAAY,CAACkB,KAAK,CAAC,QAAQ,CAAC;EAEhD,IAAIF,GAAG,KAAK,QAAQ,EAAE;IACpB,MAAM,IAAItB,aAAa,CAAE,GAAEsB,GAAI,6BAA4B,CAAC;EAC9D;;EAEA;EACA,MAAMG,YAAY,GAAG,MAAMhC,cAAc,CAACiC,IAAI,CAACC,SAAS,CAACX,QAAQ,CAAC,CAAC;EAEnE,IAAIS,YAAY,KAAKF,IAAI,EAAE;IACzB,MAAM,IAAIrB,gBAAgB,CAAC;MACzB0B,OAAO,EAAE,gCAAgC;MACzCC,MAAM,EAAE;IACV,CAAC,CAAC;EACJ;EAEA,OAAOb,QAAQ;AACjB,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMc,eAAe,GAC1BC,eAAuB,IACM;EAC7B,MAAMC,OAAO,GAAGtC,eAAe,CAC7BS,wBAAwB,CAAC4B,eAAe,CAAC,EACzCnC,MACF,CAAC;EAED,MAAMqC,MAAM,GAAGtC,aAAa,CAC1BqC,OAAO,CAACE,GAAG,CAACC,OAAO,EACnBH,OAAO,CAACI,WAAW,EACnBxC,MACF,CAAC;EAED,OAAOqC,MAAM,CAACI,YAAY,GACtBtC,YAAY,CAACsB,KAAK,CAACY,MAAM,CAACI,YAAY,CAAC,GACvC3B,SAAS;AACf,CAAC"}
+{"version":3,"names":["sha256ToBase64","digest","decodeSdJwtSync","getClaimsSync","fixLegacyCredentialSdJwt","IoWalletError","IssuerResponseError","ValidationFailed","hasStatusOrThrow","TypeMetadata","Verification","fetchTypeMetadata","vct","vctIntegrity","context","arguments","length","undefined","appFetch","fetch","origin","pathname","URL","metadata","headers","then","res","json","parse","alg","hash","split","metadataHash","JSON","stringify","message","reason","getVerification","credentialSdJwt","decoded","claims","jwt","payload","disclosures","verification"],"sourceRoot":"../../../src","sources":["sd-jwt/utils.ts"],"mappings":"AAAA,SAASA,cAAc,QAAQ,6BAA6B;AAC5D,SAASC,MAAM,QAAQ,uBAAuB;AAC9C,SAASC,eAAe,EAAEC,aAAa,QAAQ,gBAAgB;AAE/D,SAASC,wBAAwB,QAAQ,sBAAsB;AAC/D,SACEC,aAAa,EACbC,mBAAmB,EACnBC,gBAAgB,QACX,iBAAiB;AACxB,SAASC,gBAAgB,QAAQ,eAAe;AAChD,SAASC,YAAY,EAAEC,YAAY,QAAQ,SAAS;;AAEpD;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,iBAAiB,GAAG,eAAAA,CAC/BC,GAAW,EACXC,YAAoB,EAIM;EAAA,IAH1BC,OAEC,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,CAAC,CAAC;EAEN,MAAM;IAAEG,QAAQ,GAAGC;EAAM,CAAC,GAAGL,OAAO;EACpC,MAAM;IAAEM,MAAM;IAAEC;EAAS,CAAC,GAAG,IAAIC,GAAG,CAACV,GAAG,CAAC;EAEzC,MAAMW,QAAQ,GAAG,MAAML,QAAQ,CAAE,GAAEE,MAAO,mBAAkBC,QAAS,EAAC,EAAE;IACtEG,OAAO,EAAE;MACP,cAAc,EAAE;IAClB;EACF,CAAC,CAAC,CACCC,IAAI,CAACjB,gBAAgB,CAAC,GAAG,EAAEF,mBAAmB,CAAC,CAAC,CAChDmB,IAAI,CAAEC,GAAG,IAAKA,GAAG,CAACC,IAAI,CAAC,CAAC,CAAC,CACzBF,IAAI,CAAChB,YAAY,CAACmB,KAAK,CAAC;EAE3B,MAAM,CAACC,GAAG,EAAEC,IAAI,CAAC,GAAGjB,YAAY,CAACkB,KAAK,CAAC,QAAQ,CAAC;EAEhD,IAAIF,GAAG,KAAK,QAAQ,EAAE;IACpB,MAAM,IAAIxB,aAAa,CAAE,GAAEwB,GAAI,6BAA4B,CAAC;EAC9D;;EAEA;EACA,MAAMG,YAAY,GAAG,MAAMhC,cAAc,CAACiC,IAAI,CAACC,SAAS,CAACX,QAAQ,CAAC,CAAC;EAEnE,IAAIS,YAAY,KAAKF,IAAI,EAAE;IACzB,MAAM,IAAIvB,gBAAgB,CAAC;MACzB4B,OAAO,EAAE,gCAAgC;MACzCC,MAAM,EAAE;IACV,CAAC,CAAC;EACJ;EAEA,OAAOb,QAAQ;AACjB,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMc,eAAe,GAC1BC,eAAuB,IACM;EAC7B,MAAMC,OAAO,GAAGrC,eAAe,CAC7BE,wBAAwB,CAACkC,eAAe,CAAC,EACzCrC,MACF,CAAC;EAED,MAAMuC,MAAM,GAAGrC,aAAa,CAC1BoC,OAAO,CAACE,GAAG,CAACC,OAAO,EACnBH,OAAO,CAACI,WAAW,EACnB1C,MACF,CAAC;EAED,OAAOuC,MAAM,CAACI,YAAY,GACtBlC,YAAY,CAACkB,KAAK,CAACY,MAAM,CAACI,YAAY,CAAC,GACvC3B,SAAS;AACf,CAAC"}

package/lib/module/trust/api/TrustAnchorConfig.js

@@ -8,14 +8,14 @@ import { FederationEntityMetadata } from "../common/types";
  */
 
 export const TrustAnchorConfig = z.object({
+  federation_entity: FederationEntityMetadata,
   jwt: z.object({
     header: z.object({
-      typ: z.literal("entity-statement+jwt"),
       alg: z.string(),
-      kid: z.string()
+      kid: z.string(),
+      typ: z.literal("entity-statement+jwt")
     })
   }),
-  keys: z.array(JWK),
-  federation_entity: FederationEntityMetadata
+  keys: z.array(JWK)
 });
 //# sourceMappingURL=TrustAnchorConfig.js.map

package/lib/module/trust/api/TrustAnchorConfig.js.map

@@ -1 +1 @@
-{"version":3,"names":["z","JWK","FederationEntityMetadata","TrustAnchorConfig","object","jwt","header","typ","literal","alg","string","kid","keys","array","federation_entity"],"sourceRoot":"../../../../src","sources":["trust/api/TrustAnchorConfig.ts"],"mappings":"AAAA,OAAO,KAAKA,CAAC,MAAM,KAAK;AACxB,SAASC,GAAG,QAAQ,iBAAiB;AACrC,SAASC,wBAAwB,QAAQ,iBAAiB;;AAE1D;AACA;AACA;AACA;;AAEA,OAAO,MAAMC,iBAAiB,GAAGH,CAAC,CAACI,MAAM,CAAC;EACxCC,GAAG,EAAEL,CAAC,CAACI,MAAM,CAAC;IACZE,MAAM,EAAEN,CAAC,CAACI,MAAM,CAAC;MACfG,GAAG,EAAEP,CAAC,CAACQ,OAAO,CAAC,sBAAsB,CAAC;MACtCC,GAAG,EAAET,CAAC,CAACU,MAAM,CAAC,CAAC;MACfC,GAAG,EAAEX,CAAC,CAACU,MAAM,CAAC;IAChB,CAAC;EACH,CAAC,CAAC;EACFE,IAAI,EAAEZ,CAAC,CAACa,KAAK,CAACZ,GAAG,CAAC;EAClBa,iBAAiB,EAAEZ;AACrB,CAAC,CAAC"}
+{"version":3,"names":["z","JWK","FederationEntityMetadata","TrustAnchorConfig","object","federation_entity","jwt","header","alg","string","kid","typ","literal","keys","array"],"sourceRoot":"../../../../src","sources":["trust/api/TrustAnchorConfig.ts"],"mappings":"AAAA,OAAO,KAAKA,CAAC,MAAM,KAAK;AAExB,SAASC,GAAG,QAAQ,iBAAiB;AACrC,SAASC,wBAAwB,QAAQ,iBAAiB;;AAE1D;AACA;AACA;AACA;;AAEA,OAAO,MAAMC,iBAAiB,GAAGH,CAAC,CAACI,MAAM,CAAC;EACxCC,iBAAiB,EAAEH,wBAAwB;EAC3CI,GAAG,EAAEN,CAAC,CAACI,MAAM,CAAC;IACZG,MAAM,EAAEP,CAAC,CAACI,MAAM,CAAC;MACfI,GAAG,EAAER,CAAC,CAACS,MAAM,CAAC,CAAC;MACfC,GAAG,EAAEV,CAAC,CAACS,MAAM,CAAC,CAAC;MACfE,GAAG,EAAEX,CAAC,CAACY,OAAO,CAAC,sBAAsB;IACvC,CAAC;EACH,CAAC,CAAC;EACFC,IAAI,EAAEb,CAAC,CAACc,KAAK,CAACb,GAAG;AACnB,CAAC,CAAC"}

package/lib/module/trust/common/build-chain.js

@@ -22,8 +22,8 @@ export function createBuildTrustChain(config) {
       });
       if (!federationList.includes(relyingPartyEntityBaseUrl)) {
         throw new RelyingPartyNotAuthorizedError("Relying Party entity base URL is not authorized by the Trust Anchor's federation list.", {
-          relyingPartyUrl: relyingPartyEntityBaseUrl,
-          federationListEndpoint
+          federationListEndpoint,
+          relyingPartyUrl: relyingPartyEntityBaseUrl
         });
       }
     }
@@ -80,6 +80,9 @@ export function createGatherTrustChain(_ref) {
       return chain;
     }
     const parentEntityBaseUrl = authorityHints[0];
+    if (!parentEntityBaseUrl) {
+      throw new Error("AuthorityHints array is empty.");
+    }
 
     // Fetch parent EC
     const parentECJwt = await getSignedEntityConfiguration(parentEntityBaseUrl, {

package/lib/module/trust/common/build-chain.js.map

@@ -1 +1 @@
-{"version":3,"names":["BuildTrustChainError","MissingFederationFetchEndpointError","RelyingPartyNotAuthorizedError","TrustAnchorKidMissingError","decode","getFederationList","getSignedEntityConfiguration","getSignedEntityStatement","verify","createBuildTrustChain","config","buildTrustChain","relyingPartyEntityBaseUrl","trustAnchorConfig","appFetch","arguments","length","undefined","fetch","trustAnchorKey","keys","federationListEndpoint","federation_entity","federation_list_endpoint","federationList","includes","relyingPartyUrl","gatherTrustChain","createGatherTrustChain","trustChain","chainTrustAnchorJwt","kid","_ref","EntityConfigurationShape","EntityStatementShape","entityBaseUrl","isLeaf","chain","entityECJwt","entityEC","parse","push","authorityHints","payload","authority_hints","parentEntityBaseUrl","parentECJwt","parentEC","federationFetchEndpoint","metadata","federation_fetch_endpoint","missingInEntityUrl","entityStatementJwt","parentChain","concat"],"sourceRoot":"../../../../src","sources":["trust/common/build-chain.ts"],"mappings":"AAAA,SACEA,oBAAoB,EACpBC,mCAAmC,EACnCC,8BAA8B,EAC9BC,0BAA0B,QACrB,UAAU;AACjB,SACEC,MAAM,EACNC,iBAAiB,EACjBC,4BAA4B,EAC5BC,wBAAwB,EACxBC,MAAM,QACD,SAAS;AAUhB;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,qBAAqBA,CACnCC,MAAqB,EACQ;EAC7B,OAAO,eAAeC,eAAeA,CACnCC,yBAAyB,EACzBC,iBAAiB,EAEjB;IAAA,IADAC,QAAQ,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAGG,KAAK;IAEhB;IACA;IACA;IACA,MAAMC,cAAc,GAAGN,iBAAiB,CAACO,IAAI,CAAC,CAAC,CAAC;IAEhD,IAAI,CAACD,cAAc,EAAE;MACnB,MAAM,IAAInB,oBAAoB,CAC5B,0EACF,CAAC;IACH;IAEA,MAAMqB,sBAAsB,GAC1BR,iBAAiB,CAACS,iBAAiB,CAACC,wBAAwB;IAE9D,IAAIF,sBAAsB,EAAE;MAC1B,MAAMG,cAAc,GAAG,MAAMnB,iBAAiB,CAACgB,sBAAsB,EAAE;QACrEP;MACF,CAAC,CAAC;MAEF,IAAI,CAACU,cAAc,CAACC,QAAQ,CAACb,yBAAyB,CAAC,EAAE;QACvD,MAAM,IAAIV,8BAA8B,CACtC,wFAAwF,EACxF;UAAEwB,eAAe,EAAEd,yBAAyB;UAAES;QAAuB,CACvE,CAAC;MACH;IACF;IAEA,MAAMM,gBAAgB,GAAGC,sBAAsB,CAAClB,MAAM,CAAC;;IAEvD;IACA,MAAMmB,UAAU,GAAG,MAAMF,gBAAgB,CACvCf,yBAAyB,EACzBE,QACF,CAAC;IACD;IACA,MAAMgB,mBAAmB,GAAGD,UAAU,CAACA,UAAU,CAACb,MAAM,GAAG,CAAC,CAAC;IAC7D,IAAI,CAACc,mBAAmB,EAAE;MACxB,MAAM,IAAI9B,oBAAoB,CAC5B,6EAA6E,EAC7E;QAAE0B,eAAe,EAAEd;MAA0B,CAC/C,CAAC;IACH;IAEA,IAAI,CAACO,cAAc,CAACY,GAAG,EAAE;MACvB,MAAM,IAAI5B,0BAA0B,CAAC,CAAC;IACxC;IAEA,MAAMK,MAAM,CAACsB,mBAAmB,EAAEX,cAAc,CAACY,GAAG,EAAE,CAACZ,cAAc,CAAC,CAAC;IAEvE,OAAOU,UAAU;EACnB,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASD,sBAAsBA,CAAAI,IAAA,EAGpB;EAAA,IAHqB;IACrCC,wBAAwB;IACxBC;EACa,CAAC,GAAAF,IAAA;EACd,OAAO,eAAeL,gBAAgBA,CACpCQ,aAAqB,EACrBrB,QAA8B,EAEX;IAAA,IADnBsB,MAAe,GAAArB,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,IAAI;IAEtB,MAAMsB,KAAe,GAAG,EAAE;;IAE1B;IACA,MAAMC,WAAW,GAAG,MAAMhC,4BAA4B,CAAC6B,aAAa,EAAE;MACpErB;IACF,CAAC,CAAC;IACF,MAAMyB,QAAQ,GAAGN,wBAAwB,CAACO,KAAK,CAACpC,MAAM,CAACkC,WAAW,CAAC,CAAC;IACpE,IAAIF,MAAM,EAAE;MACV;MACAC,KAAK,CAACI,IAAI,CAACH,WAAW,CAAC;IACzB;;IAEA;IACA,MAAMI,cAAc,GAAGH,QAAQ,CAACI,OAAO,CAACC,eAAe,IAAI,EAAE;IAC7D,IAAIF,cAAc,CAAC1B,MAAM,KAAK,CAAC,EAAE;MAC/B;MACA,IAAI,CAACoB,MAAM,EAAE;QACXC,KAAK,CAACI,IAAI,CAACH,WAAW,CAAC;MACzB;MACA,OAAOD,KAAK;IACd;IACA,MAAMQ,mBAAmB,GAAGH,cAAc,CAAC,CAAC,CAAE;;IAE9C;IACA,MAAMI,WAAW,GAAG,MAAMxC,4BAA4B,CACpDuC,mBAAmB,EACnB;MAAE/B;IAAS,CACb,CAAC;IACD,MAAMiC,QAAQ,GAAGd,wBAAwB,CAACO,KAAK,CAACpC,MAAM,CAAC0C,WAAW,CAAC,CAAC;IACpE;IACA,MAAME,uBAAuB,GAC3BD,QAAQ,CAACJ,OAAO,CAACM,QAAQ,CAAC3B,iBAAiB,CAAC4B,yBAAyB;IACvE,IAAI,CAACF,uBAAuB,EAAE;MAC5B,MAAM,IAAI/C,mCAAmC,CAC1C,kDAAiD4C,mBAAoB,4CAA2CV,aAAc,GAAE,EACjI;QAAEA,aAAa;QAAEgB,kBAAkB,EAAEN;MAAoB,CAC3D,CAAC;IACH;IACA,MAAMO,kBAAkB,GAAG,MAAM7C,wBAAwB,CACvDyC,uBAAuB,EACvBb,aAAa,EACb;MAAErB;IAAS,CACb,CAAC;IACD;IACAoB,oBAAoB,CAACM,KAAK,CAACpC,MAAM,CAACgD,kBAAkB,CAAC,CAAC;;IAEtD;IACAf,KAAK,CAACI,IAAI,CAACW,kBAAkB,CAAC;;IAE9B;IACA,MAAMC,WAAW,GAAG,MAAM1B,gBAAgB,CACxCkB,mBAAmB,EACnB/B,QAAQ,EACR,KACF,CAAC;IAED,OAAOuB,KAAK,CAACiB,MAAM,CAACD,WAAW,CAAC;EAClC,CAAC;AACH"}
+{"version":3,"names":["BuildTrustChainError","MissingFederationFetchEndpointError","RelyingPartyNotAuthorizedError","TrustAnchorKidMissingError","decode","getFederationList","getSignedEntityConfiguration","getSignedEntityStatement","verify","createBuildTrustChain","config","buildTrustChain","relyingPartyEntityBaseUrl","trustAnchorConfig","appFetch","arguments","length","undefined","fetch","trustAnchorKey","keys","federationListEndpoint","federation_entity","federation_list_endpoint","federationList","includes","relyingPartyUrl","gatherTrustChain","createGatherTrustChain","trustChain","chainTrustAnchorJwt","kid","_ref","EntityConfigurationShape","EntityStatementShape","entityBaseUrl","isLeaf","chain","entityECJwt","entityEC","parse","push","authorityHints","payload","authority_hints","parentEntityBaseUrl","Error","parentECJwt","parentEC","federationFetchEndpoint","metadata","federation_fetch_endpoint","missingInEntityUrl","entityStatementJwt","parentChain","concat"],"sourceRoot":"../../../../src","sources":["trust/common/build-chain.ts"],"mappings":"AAKA,SACEA,oBAAoB,EACpBC,mCAAmC,EACnCC,8BAA8B,EAC9BC,0BAA0B,QACrB,UAAU;AACjB,SACEC,MAAM,EACNC,iBAAiB,EACjBC,4BAA4B,EAC5BC,wBAAwB,EACxBC,MAAM,QACD,SAAS;AAOhB;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,qBAAqBA,CACnCC,MAAqB,EACQ;EAC7B,OAAO,eAAeC,eAAeA,CACnCC,yBAAyB,EACzBC,iBAAiB,EAEjB;IAAA,IADAC,QAAQ,GAAAC,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAGG,KAAK;IAEhB;IACA;IACA;IACA,MAAMC,cAAc,GAAGN,iBAAiB,CAACO,IAAI,CAAC,CAAC,CAAC;IAEhD,IAAI,CAACD,cAAc,EAAE;MACnB,MAAM,IAAInB,oBAAoB,CAC5B,0EACF,CAAC;IACH;IAEA,MAAMqB,sBAAsB,GAC1BR,iBAAiB,CAACS,iBAAiB,CAACC,wBAAwB;IAE9D,IAAIF,sBAAsB,EAAE;MAC1B,MAAMG,cAAc,GAAG,MAAMnB,iBAAiB,CAACgB,sBAAsB,EAAE;QACrEP;MACF,CAAC,CAAC;MAEF,IAAI,CAACU,cAAc,CAACC,QAAQ,CAACb,yBAAyB,CAAC,EAAE;QACvD,MAAM,IAAIV,8BAA8B,CACtC,wFAAwF,EACxF;UACEmB,sBAAsB;UACtBK,eAAe,EAAEd;QACnB,CACF,CAAC;MACH;IACF;IAEA,MAAMe,gBAAgB,GAAGC,sBAAsB,CAAClB,MAAM,CAAC;;IAEvD;IACA,MAAMmB,UAAU,GAAG,MAAMF,gBAAgB,CACvCf,yBAAyB,EACzBE,QACF,CAAC;IACD;IACA,MAAMgB,mBAAmB,GAAGD,UAAU,CAACA,UAAU,CAACb,MAAM,GAAG,CAAC,CAAC;IAC7D,IAAI,CAACc,mBAAmB,EAAE;MACxB,MAAM,IAAI9B,oBAAoB,CAC5B,6EAA6E,EAC7E;QAAE0B,eAAe,EAAEd;MAA0B,CAC/C,CAAC;IACH;IAEA,IAAI,CAACO,cAAc,CAACY,GAAG,EAAE;MACvB,MAAM,IAAI5B,0BAA0B,CAAC,CAAC;IACxC;IAEA,MAAMK,MAAM,CAACsB,mBAAmB,EAAEX,cAAc,CAACY,GAAG,EAAE,CAACZ,cAAc,CAAC,CAAC;IAEvE,OAAOU,UAAU;EACnB,CAAC;AACH;;AAEA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASD,sBAAsBA,CAAAI,IAAA,EAGpB;EAAA,IAHqB;IACrCC,wBAAwB;IACxBC;EACa,CAAC,GAAAF,IAAA;EACd,OAAO,eAAeL,gBAAgBA,CACpCQ,aAAqB,EACrBrB,QAA8B,EAEX;IAAA,IADnBsB,MAAM,GAAArB,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,IAAI;IAEb,MAAMsB,KAAe,GAAG,EAAE;;IAE1B;IACA,MAAMC,WAAW,GAAG,MAAMhC,4BAA4B,CAAC6B,aAAa,EAAE;MACpErB;IACF,CAAC,CAAC;IACF,MAAMyB,QAAQ,GAAGN,wBAAwB,CAACO,KAAK,CAACpC,MAAM,CAACkC,WAAW,CAAC,CAAC;IACpE,IAAIF,MAAM,EAAE;MACV;MACAC,KAAK,CAACI,IAAI,CAACH,WAAW,CAAC;IACzB;;IAEA;IACA,MAAMI,cAAc,GAAGH,QAAQ,CAACI,OAAO,CAACC,eAAe,IAAI,EAAE;IAC7D,IAAIF,cAAc,CAAC1B,MAAM,KAAK,CAAC,EAAE;MAC/B;MACA,IAAI,CAACoB,MAAM,EAAE;QACXC,KAAK,CAACI,IAAI,CAACH,WAAW,CAAC;MACzB;MACA,OAAOD,KAAK;IACd;IAEA,MAAMQ,mBAAmB,GAAGH,cAAc,CAAC,CAAC,CAAC;IAE7C,IAAI,CAACG,mBAAmB,EAAE;MACxB,MAAM,IAAIC,KAAK,CAAC,gCAAgC,CAAC;IACnD;;IAEA;IACA,MAAMC,WAAW,GAAG,MAAMzC,4BAA4B,CACpDuC,mBAAmB,EACnB;MAAE/B;IAAS,CACb,CAAC;IACD,MAAMkC,QAAQ,GAAGf,wBAAwB,CAACO,KAAK,CAACpC,MAAM,CAAC2C,WAAW,CAAC,CAAC;IACpE;IACA,MAAME,uBAAuB,GAC3BD,QAAQ,CAACL,OAAO,CAACO,QAAQ,CAAC5B,iBAAiB,CAAC6B,yBAAyB;IACvE,IAAI,CAACF,uBAAuB,EAAE;MAC5B,MAAM,IAAIhD,mCAAmC,CAC1C,kDAAiD4C,mBAAoB,4CAA2CV,aAAc,GAAE,EACjI;QAAEA,aAAa;QAAEiB,kBAAkB,EAAEP;MAAoB,CAC3D,CAAC;IACH;IACA,MAAMQ,kBAAkB,GAAG,MAAM9C,wBAAwB,CACvD0C,uBAAuB,EACvBd,aAAa,EACb;MAAErB;IAAS,CACb,CAAC;IACD;IACAoB,oBAAoB,CAACM,KAAK,CAACpC,MAAM,CAACiD,kBAAkB,CAAC,CAAC;;IAEtD;IACAhB,KAAK,CAACI,IAAI,CAACY,kBAAkB,CAAC;;IAE9B;IACA,MAAMC,WAAW,GAAG,MAAM3B,gBAAgB,CACxCkB,mBAAmB,EACnB/B,QAAQ,EACR,KACF,CAAC;IAED,OAAOuB,KAAK,CAACkB,MAAM,CAACD,WAAW,CAAC;EAClC,CAAC;AACH"}

package/lib/module/trust/common/errors.js

@@ -1,5 +1,7 @@
-import { IoWalletError, serializeAttrs } from "../../utils/errors";
 // Ensure this path is correct
+
+import { IoWalletError, serializeAttrs } from "../../utils/errors";
+
 /**
  * Base class for all federation-specific errors.
  */
@@ -15,48 +17,50 @@ export class FederationError extends IoWalletError {
 }
 
 /**
- * Error thrown when a trust chain is unexpectedly empty.
+ * General error thrown during the trust chain building process.
  */
-export class TrustChainEmptyError extends FederationError {
-  code = "ERR_FED_TRUST_CHAIN_EMPTY";
-  constructor() {
-    let message = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : "Trust chain cannot be empty.";
-    super(message, undefined);
+export class BuildTrustChainError extends FederationError {
+  code = "ERR_FED_BUILD_TRUST_CHAIN_FAILED";
+  // eslint-disable-next-line @typescript-eslint/no-useless-constructor -- narrows the `details` type for this error subclass
+  constructor(message, details) {
+    super(message, details);
   }
 }
-
-/**
- * Error thrown when a token is unexpectedly missing from a trust chain during processing.
- */
-export class TrustChainTokenMissingError extends FederationError {
-  code = "ERR_FED_TRUST_CHAIN_TOKEN_MISSING";
+export class FederationListParseError extends FederationError {
+  code = "ERR_FED_FEDERATION_LIST_PARSE_FAILED";
+  // eslint-disable-next-line @typescript-eslint/no-useless-constructor -- narrows the `details` type for this error subclass
   constructor(message, details) {
     super(message, details);
   }
 }
 
 /**
- * Error thrown when renewing a trust chain fails.
- * This class itself might be used or could be considered a more general renewal error.
+ * Error thrown when a 'federation_fetch_endpoint' is missing in an entity's configuration.
  */
-export class TrustChainRenewalError extends FederationError {
-  code = "ERR_FED_TRUST_CHAIN_RENEWAL_FAILED";
+export class MissingFederationFetchEndpointError extends FederationError {
+  code = "ERR_FED_MISSING_FEDERATION_FETCH_ENDPOINT";
+  // eslint-disable-next-line @typescript-eslint/no-useless-constructor -- narrows the `details` type for this error subclass
   constructor(message, details) {
     super(message, details);
   }
 }
-export class FederationListParseError extends FederationError {
-  code = "ERR_FED_FEDERATION_LIST_PARSE_FAILED";
-  constructor(message, details) {
-    super(message, details);
+
+/**
+ * Error thrown when the X.509 certificate chain is missing in an entity's configuration.
+ */
+export class MissingX509CertsError extends FederationError {
+  code = "ERR_FED_MISSING_X509_CERTS";
+  constructor(message) {
+    super(message, undefined);
   }
 }
 
 /**
- * General error thrown during the trust chain building process.
+ * Error thrown if the Relying Party is not found in the Trust Anchor's federation list.
  */
-export class BuildTrustChainError extends FederationError {
-  code = "ERR_FED_BUILD_TRUST_CHAIN_FAILED";
+export class RelyingPartyNotAuthorizedError extends FederationError {
+  code = "ERR_FED_RELYING_PARTY_NOT_AUTHORIZED";
+  // eslint-disable-next-line @typescript-eslint/no-useless-constructor -- narrows the `details` type for this error subclass
   constructor(message, details) {
     super(message, details);
   }
@@ -74,32 +78,36 @@ export class TrustAnchorKidMissingError extends FederationError {
 }
 
 /**
- * Error thrown if the Relying Party is not found in the Trust Anchor's federation list.
+ * Error thrown when a trust chain is unexpectedly empty.
  */
-export class RelyingPartyNotAuthorizedError extends FederationError {
-  code = "ERR_FED_RELYING_PARTY_NOT_AUTHORIZED";
-  constructor(message, details) {
-    super(message, details);
+export class TrustChainEmptyError extends FederationError {
+  code = "ERR_FED_TRUST_CHAIN_EMPTY";
+  constructor() {
+    let message = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : "Trust chain cannot be empty.";
+    super(message, undefined);
   }
 }
 
 /**
- * Error thrown when a 'federation_fetch_endpoint' is missing in an entity's configuration.
+ * Error thrown when renewing a trust chain fails.
+ * This class itself might be used or could be considered a more general renewal error.
  */
-export class MissingFederationFetchEndpointError extends FederationError {
-  code = "ERR_FED_MISSING_FEDERATION_FETCH_ENDPOINT";
+export class TrustChainRenewalError extends FederationError {
+  code = "ERR_FED_TRUST_CHAIN_RENEWAL_FAILED";
+  // eslint-disable-next-line @typescript-eslint/no-useless-constructor -- narrows the `details` type for this error subclass
   constructor(message, details) {
     super(message, details);
   }
 }
 
 /**
- * Error thrown when the X.509 certificate chain is missing in an entity's configuration.
+ * Error thrown when a token is unexpectedly missing from a trust chain during processing.
  */
-export class MissingX509CertsError extends FederationError {
-  code = "ERR_FED_MISSING_X509_CERTS";
-  constructor(message) {
-    super(message, undefined);
+export class TrustChainTokenMissingError extends FederationError {
+  code = "ERR_FED_TRUST_CHAIN_TOKEN_MISSING";
+  // eslint-disable-next-line @typescript-eslint/no-useless-constructor -- narrows the `details` type for this error subclass
+  constructor(message, details) {
+    super(message, details);
   }
 }
 
@@ -109,6 +117,7 @@ export class MissingX509CertsError extends FederationError {
  */
 export class X509ValidationError extends FederationError {
   code = "ERR_FED_X509_VALIDATION_FAILED";
+  // eslint-disable-next-line @typescript-eslint/no-useless-constructor -- narrows the `details` type for this error subclass
   constructor(message, details) {
     super(message, details);
   }

package/lib/module/trust/common/errors.js.map

@@ -1 +1 @@
-{"version":3,"names":["IoWalletError","serializeAttrs","FederationError","constructor","message","details","name","TrustChainEmptyError","code","arguments","length","undefined","TrustChainTokenMissingError","TrustChainRenewalError","FederationListParseError","BuildTrustChainError","TrustAnchorKidMissingError","RelyingPartyNotAuthorizedError","MissingFederationFetchEndpointError","MissingX509CertsError","X509ValidationError"],"sourceRoot":"../../../../src","sources":["trust/common/errors.ts"],"mappings":"AAAA,SAASA,aAAa,EAAEC,cAAc,QAAQ,oBAAoB;AACiB;AAEnF;AACA;AACA;AACA,OAAO,MAAMC,eAAe,SAASF,aAAa,CAAC;EAEjDG,WAAWA,CAACC,OAAe,EAAEC,OAAiC,EAAE;IAC9D,KAAK,CAACA,OAAO,GAAGJ,cAAc,CAAC;MAAEG,OAAO;MAAE,GAAGC;IAAQ,CAAC,CAAC,GAAGD,OAAO,CAAC;IAClE,IAAI,CAACE,IAAI,GAAG,IAAI,CAACH,WAAW,CAACG,IAAI;IACjC,IAAI,CAACD,OAAO,GAAGA,OAAO;EACxB;AACF;;AAEA;AACA;AACA;AACA,OAAO,MAAME,oBAAoB,SAASL,eAAe,CAAC;EACxDM,IAAI,GAAG,2BAA2B;EAClCL,WAAWA,CAAA,EAA2C;IAAA,IAA1CC,OAAO,GAAAK,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,8BAA8B;IAClD,KAAK,CAACL,OAAO,EAAEO,SAAS,CAAC;EAC3B;AACF;;AAEA;AACA;AACA;AACA,OAAO,MAAMC,2BAA2B,SAASV,eAAe,CAAC;EAC/DM,IAAI,GAAG,mCAAmC;EAC1CL,WAAWA,CAACC,OAAe,EAAEC,OAA4B,EAAE;IACzD,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;;AAEA;AACA;AACA;AACA;AACA,OAAO,MAAMQ,sBAAsB,SAASX,eAAe,CAAC;EAC1DM,IAAI,GAAG,oCAAoC;EAC3CL,WAAWA,CACTC,OAAe,EACfC,OAA8D,EAC9D;IACA,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;AAEA,OAAO,MAAMS,wBAAwB,SAASZ,eAAe,CAAC;EAC5DM,IAAI,GAAG,sCAAsC;EAC7CL,WAAWA,CAACC,OAAe,EAAEC,OAA6C,EAAE;IAC1E,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;;AAEA;AACA;AACA;AACA,OAAO,MAAMU,oBAAoB,SAASb,eAAe,CAAC;EACxDM,IAAI,GAAG,kCAAkC;EACzCL,WAAWA,CACTC,OAAe,EACfC,OAIC,EACD;IACA,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;;AAEA;AACA;AACA;AACA,OAAO,MAAMW,0BAA0B,SAASd,eAAe,CAAC;EAC9DM,IAAI,GAAG,kCAAkC;EACzCL,WAAWA,CAAA,EAA0D;IAAA,IAAzDC,OAAO,GAAAK,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAE,SAAA,GAAAF,SAAA,MAAG,6CAA6C;IACjE,KAAK,CAACL,OAAO,EAAEO,SAAS,CAAC;EAC3B;AACF;;AAEA;AACA;AACA;AACA,OAAO,MAAMM,8BAA8B,SAASf,eAAe,CAAC;EAClEM,IAAI,GAAG,sCAAsC;EAC7CL,WAAWA,CACTC,OAAe,EACfC,OAAqE,EACrE;IACA,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;;AAEA;AACA;AACA;AACA,OAAO,MAAMa,mCAAmC,SAAShB,eAAe,CAAC;EACvEM,IAAI,GAAG,2CAA2C;EAClDL,WAAWA,CACTC,OAAe,EACfC,OAA8D,EAC9D;IACA,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;;AAEA;AACA;AACA;AACA,OAAO,MAAMc,qBAAqB,SAASjB,eAAe,CAAC;EACzDM,IAAI,GAAG,4BAA4B;EACnCL,WAAWA,CAACC,OAAe,EAAE;IAC3B,KAAK,CAACA,OAAO,EAAEO,SAAS,CAAC;EAC3B;AACF;;AAEA;AACA;AACA;AACA;AACA,OAAO,MAAMS,mBAAmB,SAASlB,eAAe,CAAC;EACvDM,IAAI,GAAG,gCAAgC;EACvCL,WAAWA,CACTC,OAAe,EACfC,OAMC,EACD;IACA,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF"}
+{"version":3,"names":["IoWalletError","serializeAttrs","FederationError","constructor","message","details","name","BuildTrustChainError","code","FederationListParseError","MissingFederationFetchEndpointError","MissingX509CertsError","undefined","RelyingPartyNotAuthorizedError","TrustAnchorKidMissingError","arguments","length","TrustChainEmptyError","TrustChainRenewalError","TrustChainTokenMissingError","X509ValidationError"],"sourceRoot":"../../../../src","sources":["trust/common/errors.ts"],"mappings":"AAAmF;;AAEnF,SAASA,aAAa,EAAEC,cAAc,QAAQ,oBAAoB;;AAElE;AACA;AACA;AACA,OAAO,MAAMC,eAAe,SAASF,aAAa,CAAC;EAEjDG,WAAWA,CAACC,OAAe,EAAEC,OAAiC,EAAE;IAC9D,KAAK,CAACA,OAAO,GAAGJ,cAAc,CAAC;MAAEG,OAAO;MAAE,GAAGC;IAAQ,CAAC,CAAC,GAAGD,OAAO,CAAC;IAClE,IAAI,CAACE,IAAI,GAAG,IAAI,CAACH,WAAW,CAACG,IAAI;IACjC,IAAI,CAACD,OAAO,GAAGA,OAAO;EACxB;AACF;;AAEA;AACA;AACA;AACA,OAAO,MAAME,oBAAoB,SAASL,eAAe,CAAC;EACxDM,IAAI,GAAG,kCAAkC;EACzC;EACAL,WAAWA,CACTC,OAAe,EACfC,OAIC,EACD;IACA,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;AAEA,OAAO,MAAMI,wBAAwB,SAASP,eAAe,CAAC;EAC5DM,IAAI,GAAG,sCAAsC;EAC7C;EACAL,WAAWA,CAACC,OAAe,EAAEC,OAA6C,EAAE;IAC1E,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;;AAEA;AACA;AACA;AACA,OAAO,MAAMK,mCAAmC,SAASR,eAAe,CAAC;EACvEM,IAAI,GAAG,2CAA2C;EAClD;EACAL,WAAWA,CACTC,OAAe,EACfC,OAA8D,EAC9D;IACA,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;;AAEA;AACA;AACA;AACA,OAAO,MAAMM,qBAAqB,SAAST,eAAe,CAAC;EACzDM,IAAI,GAAG,4BAA4B;EACnCL,WAAWA,CAACC,OAAe,EAAE;IAC3B,KAAK,CAACA,OAAO,EAAEQ,SAAS,CAAC;EAC3B;AACF;;AAEA;AACA;AACA;AACA,OAAO,MAAMC,8BAA8B,SAASX,eAAe,CAAC;EAClEM,IAAI,GAAG,sCAAsC;EAC7C;EACAL,WAAWA,CACTC,OAAe,EACfC,OAAqE,EACrE;IACA,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;;AAEA;AACA;AACA;AACA,OAAO,MAAMS,0BAA0B,SAASZ,eAAe,CAAC;EAC9DM,IAAI,GAAG,kCAAkC;EACzCL,WAAWA,CAAA,EAA0D;IAAA,IAAzDC,OAAO,GAAAW,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAH,SAAA,GAAAG,SAAA,MAAG,6CAA6C;IACjE,KAAK,CAACX,OAAO,EAAEQ,SAAS,CAAC;EAC3B;AACF;;AAEA;AACA;AACA;AACA,OAAO,MAAMK,oBAAoB,SAASf,eAAe,CAAC;EACxDM,IAAI,GAAG,2BAA2B;EAClCL,WAAWA,CAAA,EAA2C;IAAA,IAA1CC,OAAO,GAAAW,SAAA,CAAAC,MAAA,QAAAD,SAAA,QAAAH,SAAA,GAAAG,SAAA,MAAG,8BAA8B;IAClD,KAAK,CAACX,OAAO,EAAEQ,SAAS,CAAC;EAC3B;AACF;;AAEA;AACA;AACA;AACA;AACA,OAAO,MAAMM,sBAAsB,SAAShB,eAAe,CAAC;EAC1DM,IAAI,GAAG,oCAAoC;EAC3C;EACAL,WAAWA,CACTC,OAAe,EACfC,OAA8D,EAC9D;IACA,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;;AAEA;AACA;AACA;AACA,OAAO,MAAMc,2BAA2B,SAASjB,eAAe,CAAC;EAC/DM,IAAI,GAAG,mCAAmC;EAC1C;EACAL,WAAWA,CAACC,OAAe,EAAEC,OAA4B,EAAE;IACzD,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF;;AAEA;AACA;AACA;AACA;AACA,OAAO,MAAMe,mBAAmB,SAASlB,eAAe,CAAC;EACvDM,IAAI,GAAG,gCAAgC;EACvC;EACAL,WAAWA,CACTC,OAAe,EACfC,OAMC,EACD;IACA,KAAK,CAACD,OAAO,EAAEC,OAAO,CAAC;EACzB;AACF"}