@pagopa/io-react-native-wallet 3.7.4 → 3.8.3

package/lib/typescript/module/credential/presentation/api/types.d.ts

@@ -0,0 +1,147 @@
+import type { CryptoContext } from "@pagopa/io-react-native-jwt";
+import type { jsonWebKeySet } from "@pagopa/io-wallet-oid-federation";
+import type { DcqlQuery as DcqlQueryLib } from "dcql";
+import * as z from "zod";
+import type { SupportedSdJwtLegacyFormat } from "../../../sd-jwt/types.js";
+export type PresentationParams = z.infer<typeof PresentationParams>;
+export declare const PresentationParams: z.ZodObject<{
+    client_id: z.ZodString;
+    request: z.ZodOptional<z.ZodString>;
+    request_uri: z.ZodOptional<z.ZodURL>;
+    request_uri_method: z.ZodOptional<z.ZodEnum<{
+        get: "get";
+        post: "post";
+    }>>;
+    state: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type WalletMetadata = z.infer<typeof WalletMetadata>;
+export declare const WalletMetadata: z.ZodObject<{
+    authorization_endpoint: z.ZodURL;
+    client_id_prefixes_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    client_id_schemes_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    request_object_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    response_modes_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    response_types_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    vp_formats_supported: z.ZodRecord<z.ZodString, z.ZodObject<{
+        "sd-jwt_alg_values": z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+/**
+ * Wallet capabilities that must be submitted to get the Request Object
+ * via POST request when the `request_uri_method` is `post`.
+ */
+export type RequestObjectWalletCapabilities = z.infer<typeof RequestObjectWalletCapabilities>;
+export declare const RequestObjectWalletCapabilities: z.ZodObject<{
+    wallet_metadata: z.ZodObject<{
+        authorization_endpoint: z.ZodURL;
+        client_id_prefixes_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        client_id_schemes_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        request_object_signing_alg_values_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        response_modes_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        response_types_supported: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        vp_formats_supported: z.ZodRecord<z.ZodString, z.ZodObject<{
+            "sd-jwt_alg_values": z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+    wallet_nonce: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/**
+ * This type models the possible error responses the OpenID4VP protocol allows for a presentation of a credential.
+ * When the Wallet encounters one of these errors, it will notify the Relying Party through the `response_uri` endpoint.
+ * See https://italia.github.io/eid-wallet-it-docs/versione-corrente/en/pid-eaa-presentation.html#authorization-response-errors for more information.
+ */
+export type ErrorResponse = z.infer<typeof ErrorResponse>;
+export declare const ErrorResponse: z.ZodEnum<{
+    invalid_request_object: "invalid_request_object";
+    invalid_request_uri: "invalid_request_uri";
+    vp_formats_not_supported: "vp_formats_not_supported";
+    invalid_request: "invalid_request";
+    access_denied: "access_denied";
+    invalid_client: "invalid_client";
+}>;
+export interface AuthorizationResponse {
+    redirect_uri?: string;
+}
+/**
+ * A pair that associate a key tag with a credential, used in DCQL queries
+ */
+export type Credential4Dcql = [string, string];
+export type CredentialFormat = {
+    doctype: string;
+    format: "mso_mdoc";
+} | {
+    format: "dc+sd-jwt";
+    vct: string;
+} | {
+    format: SupportedSdJwtLegacyFormat;
+    vct: string;
+};
+export type DcqlQuery = DcqlQueryLib.Input;
+export interface EvaluatedDisclosure {
+    name: string;
+    namespace?: string;
+    value: unknown;
+}
+/**
+ * A pair that associate a tokenized Verified Credential with the claims presented or requested to present.
+ */
+export type Presentation = [
+    string,
+    PresentationFrame,
+    CryptoContext
+];
+/**
+ * An object that defines claims to disclose. Nested claims must use a nested structure.
+ * @example { name: true, address: { country: true } }
+ */
+export interface PresentationFrame {
+    [k: string]: boolean | PresentationFrame | undefined;
+}
+/**
+ * A object that associate the information needed to multiple remote presentation
+ */
+export interface RemotePresentation {
+    generatedNonce?: string;
+    presentations: {
+        credentialId: string;
+        format: string;
+        requestedClaims: string[];
+        vpToken: string;
+    }[];
+}
+/**
+ * A object that associate the information needed to multiple remote presentation
+ * Used with DCQL queries
+ */
+export interface RemotePresentationDetails {
+    credentialId: string;
+    requestedClaims: string[];
+    vpToken: string;
+}
+/**
+ * Common Request Object type, decoupled from specific IT-Wallet versions
+ */
+export type RequestObject = {
+    client_id: string;
+    client_metadata?: ClientMetadata;
+    dcql_query: Record<string, unknown>;
+    iss: string;
+    nonce: string;
+    response_mode: "direct_post.jwt";
+    response_type: "vp_token";
+    response_uri: string;
+    state?: string;
+    trust_chain?: string[];
+    x5c?: string[];
+};
+type ClientMetadata = {
+    client_name?: string;
+    encrypted_response_enc_values_supported: string[];
+    jwks: jsonWebKeySet;
+    logo_uri?: string;
+    vp_formats_supported: Record<string, {
+        "sd-jwt_alg_values"?: string[];
+    }>;
+};
+export {};
+//# sourceMappingURL=types.d.ts.map

package/lib/typescript/module/credential/presentation/api/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../src/credential/presentation/api/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,KAAK,EAAE,SAAS,IAAI,YAAY,EAAE,MAAM,MAAM,CAAC;AAEtD,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAEzB,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,0BAAuB,CAAC;AAExE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACpE,eAAO,MAAM,kBAAkB;;;;;;;;;iBAM7B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAC5D,eAAO,MAAM,cAAc;;;;;;;;;;iBAazB,CAAC;AAEH;;;GAGG;AACH,MAAM,MAAM,+BAA+B,GAAG,CAAC,CAAC,KAAK,CACnD,OAAO,+BAA+B,CACvC,CAAC;AACF,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;iBAG1C,CAAC;AAEH;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAC1D,eAAO,MAAM,aAAa;;;;;;;EAOxB,CAAC;AAEH,MAAM,WAAW,qBAAqB;IACpC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,MAAM,EAAe,MAAM,CAAkB,CAAC;AAE7E,MAAM,MAAM,gBAAgB,GACxB;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,GACvC;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,MAAM,EAAE,0BAA0B,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAExD,MAAM,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AAE3C,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG;IACO,MAAM;IACzB,iBAAiB;IAC6B,aAAa;CACzE,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,iBAAiB,GAAG,SAAS,CAAC;CACtD;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,cAAc,CAAC,EAAE,MAAM,CAAyD;IAChF,aAAa,EAAE;QACb,YAAY,EAAE,MAAM,CAAC;QACrB,MAAM,EAAE,MAAM,CAAC;QACf,eAAe,EAAE,MAAM,EAAE,CAAC;QAC1B,OAAO,EAAE,MAAM,CAAC;KACjB,EAAE,CAAC;CACL;AAED;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,cAAc,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,iBAAiB,CAAC;IACjC,aAAa,EAAE,UAAU,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;CAChB,CAAC;AAEF,KAAK,cAAc,GAAG;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uCAAuC,EAAE,MAAM,EAAE,CAAC;IAClD,IAAI,EAAE,aAAa,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;CAC1E,CAAC"}

package/lib/typescript/module/credential/presentation/common/errors.d.ts

@@ -0,0 +1,80 @@
+import type { SupportedSdJwtLegacyFormat } from "../../../sd-jwt/types.js";
+import { IoWalletError } from "../../../utils/errors.js";
+export { DcqlError } from "dcql";
+export type NotFoundDetail = ({
+    doctypeValue?: string;
+    format: "mso_mdoc";
+} | {
+    format: "dc+sd-jwt" | SupportedSdJwtLegacyFormat;
+    vctValues?: string[];
+}) & {
+    id: string;
+    issues?: string[];
+    reason?: string;
+};
+/**
+ * An error subclass thrown when auth request decode fail
+ *
+ */
+export declare class AuthRequestDecodeError extends IoWalletError {
+    /** The Claim for which the validation failed. */
+    claim: string;
+    code: string;
+    /** Reason code for the validation failure. */
+    reason: string;
+    constructor(message: string, claim?: string, reason?: string);
+}
+/**
+ * Error thrown when one or more credentials cannot be found in the wallet
+ * and the presentation request cannot be satisfied.
+ */
+export declare class CredentialsNotFoundError extends IoWalletError {
+    code: string;
+    details: NotFoundDetail[];
+    /**
+     * @param details The details of the credentials that could not be found.
+     */
+    constructor(details: NotFoundDetail[]);
+}
+/**
+ * When a QR code is not valid.
+ *
+ */
+export declare class InvalidQRCodeError extends IoWalletError {
+    code: string;
+    /** Detailed reason for the QR code validation failure. */
+    reason: string;
+    constructor(reason: string);
+}
+/**
+ * When the Request Object sent by the Relying Party is not valid
+ */
+export declare class InvalidRequestObjectError extends IoWalletError {
+    code: string;
+    /** Detailed reason for the Request Object validation failure. */
+    reason: string;
+    constructor(message: string, reason?: string);
+}
+/**
+ * When some required data is missing to continue because certain attributes are not contained inside the wallet.
+ *
+ */
+export declare class MissingDataError extends IoWalletError {
+    code: string;
+    /**
+     * @param missingAttributes An array or description of the attributes that are missing.
+     */
+    constructor(missingAttributes: string);
+}
+/**
+ * When selecting a public key from an entity configuration, and no one meets the requirements for the scenario
+ *
+ */
+export declare class NoSuitableKeysFoundInEntityConfiguration extends IoWalletError {
+    code: string;
+    /**
+     * @param scenario describe the scenario in which the error arise
+     */
+    constructor(scenario: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/lib/typescript/module/credential/presentation/common/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../../../../src/credential/presentation/common/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,0BAAuB,CAAC;AAExE,OAAO,EAAE,aAAa,EAAkB,MAAM,0BAAuB,CAAC;AACtE,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAEjC,MAAM,MAAM,cAAc,GAAG,CACzB;IAAE,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,GAC7C;IAAE,MAAM,EAAE,WAAW,GAAG,0BAA0B,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAC7E,GAAG;IACF,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF;;;GAGG;AACH,qBAAa,sBAAuB,SAAQ,aAAa;IACvD,iDAAiD;IACjD,KAAK,EAAE,MAAM,CAAC;IAEL,IAAI,SAAwD;IAErE,8CAA8C;IAC9C,MAAM,EAAE,MAAM,CAAC;gBAEH,OAAO,EAAE,MAAM,EAAE,KAAK,SAAgB,EAAE,MAAM,SAAgB;CAK3E;AAED;;;GAGG;AACH,qBAAa,wBAAyB,SAAQ,aAAa;IAChD,IAAI,SAA+B;IAC5C,OAAO,EAAE,cAAc,EAAE,CAAC;IAE1B;;OAEG;gBACS,OAAO,EAAE,cAAc,EAAE;CAItC;AAED;;;GAGG;AACH,qBAAa,kBAAmB,SAAQ,aAAa;IAC1C,IAAI,SAAyB;IAEtC,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;gBAEH,MAAM,EAAE,MAAM;CAI3B;AAED;;GAEG;AACH,qBAAa,yBAA0B,SAAQ,aAAa;IACjD,IAAI,SAAgC;IAE7C,iEAAiE;IACjE,MAAM,EAAE,MAAM,CAAC;gBAEH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAgB;CAIpD;AAED;;;GAGG;AACH,qBAAa,gBAAiB,SAAQ,aAAa;IACxC,IAAI,SAAsB;IAEnC;;OAEG;gBACS,iBAAiB,EAAE,MAAM;CAItC;AAED;;;GAGG;AACH,qBAAa,wCAAyC,SAAQ,aAAa;IAChE,IAAI,SAAoC;IAEjD;;OAEG;gBACS,QAAQ,EAAE,MAAM;CAI7B"}

package/lib/typescript/module/credential/presentation/common/utils/dcql.d.ts

@@ -0,0 +1,54 @@
+import { DcqlQuery, DcqlQueryResult } from "dcql";
+import type { EvaluatedDisclosure, PresentationFrame } from "../../api/types.js";
+import type { NotFoundDetail } from "../errors.js";
+type DcqlMatchSuccess = Extract<DcqlQueryResult.CredentialMatch, {
+    success: true;
+}>;
+/**
+ * Extract only successful matches from the DCQL query result.
+ */
+export declare const getDcqlQueryMatches: (result: DcqlQueryResult) => [string, DcqlMatchSuccess][];
+/**
+ * Extract details related to failed credentials
+ */
+export declare const extractFailedCredentialsDetails: (queryResult: DcqlQueryResult) => NotFoundDetail[];
+/**
+ * Extract a compact list of claims from the `dcql` result.
+ * @param match The DCQL query match
+ * @returns The list of claims in {@link EvaluatedDisclosure} format
+ */
+export declare const getClaimsFromDcqlMatch: (match: DcqlQueryResult.CredentialMatch) => EvaluatedDisclosure[];
+/**
+ * Recursively convert a claim path to a {@link PresentationFrame} for `@sd-jwt/core`
+ * @param path The claim path array
+ * @param claim The decoded claim
+ * @returns A presentation frame compatible with `@sd-jwt/core`
+ */
+export declare const pathToPresentationFrame: (path: (null | number | string)[], claim: Record<string, unknown>) => PresentationFrame;
+/**
+ * Build a presentation frame from the `dcql` result to use for disclosing the requested claims.
+ * @param match The DCQL query match
+ * @param originalQuery The original DCQL query
+ * @returns A presentation frame compatible with `@sd-jwt/core`
+ */
+export declare const getPresentationFrameFromDcqlMatch: (match: DcqlQueryResult.CredentialMatch, originalQuery: DcqlQuery) => PresentationFrame;
+/**
+ * Extract valid claims from a successful `dcql` match. The extracted claims
+ * come directly from the library, without any processing.
+ * @param match The DCQL query match
+ * @returns A list of raw `dcql` claims
+ */
+export declare const getValidDcqlClaims: (match: DcqlQueryResult.CredentialMatch) => {
+    success: true;
+    claim_index: number;
+    claim_id?: string | undefined;
+    output: {
+        [x: string]: {
+            [x: string]: unknown;
+        };
+    } | {
+        [x: string]: import("dcql").Json;
+    };
+}[];
+export {};
+//# sourceMappingURL=dcql.d.ts.map

package/lib/typescript/module/credential/presentation/common/utils/dcql.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dcql.d.ts","sourceRoot":"","sources":["../../../../../../../src/credential/presentation/common/utils/dcql.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,SAAS,EAAE,eAAe,EAAE,MAAM,MAAM,CAAC;AAEnE,OAAO,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,oBAAiB,CAAC;AAC9E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAW,CAAC;AAWhD,KAAK,gBAAgB,GAAG,OAAO,CAC7B,eAAe,CAAC,eAAe,EAC/B;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,CAClB,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,mBAAmB,GAAI,QAAQ,eAAe,KAGpD,CAAC,MAAM,EAAE,gBAAgB,CAAC,EAAE,CAAC;AAUpC;;GAEG;AACH,eAAO,MAAM,+BAA+B,GAC1C,aAAa,eAAe,KAC3B,cAAc,EAwCb,CAAC;AAEL;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,GACjC,OAAO,eAAe,CAAC,eAAe,KACrC,mBAAmB,EAGnB,CAAC;AAEJ;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,GAClC,MAAM,CAAC,IAAI,GAAG,MAAM,GAAG,MAAM,CAAC,EAAE,EAChC,OAAO,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC7B,iBAyBF,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,iCAAiC,GAC5C,OAAO,eAAe,CAAC,eAAe,EACtC,eAAe,SAAS,KACvB,iBAyBF,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,GAAI,OAAO,eAAe,CAAC,eAAe;;;;;;;;;;;GAmBxE,CAAC"}

package/lib/typescript/module/credential/presentation/common/utils/http.d.ts

@@ -0,0 +1,11 @@
+import type { RequestObject } from "../../api/index.js";
+import type { DirectAuthorizationBodyPayload } from "../../v1.0.0/types.js";
+/**
+ * Builds a URL-encoded form body for a direct POST response without encryption.
+ *
+ * @param requestObject - Contains state, nonce, and other relevant info.
+ * @param payload - Object that contains either the VP token to encrypt and the stringified mapping of the credential disclosures or the error code
+ * @returns A URL-encoded string suitable for an `application/x-www-form-urlencoded` POST body.
+ */
+export declare const buildDirectPostBody: ({ state }: RequestObject, payload: DirectAuthorizationBodyPayload) => Promise<string>;
+//# sourceMappingURL=http.d.ts.map

package/lib/typescript/module/credential/presentation/common/utils/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../../../../../../src/credential/presentation/common/utils/http.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAW,CAAC;AAC/C,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,uBAAoB,CAAC;AAEzE;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,GAC9B,WAAW,aAAa,EACxB,SAAS,8BAA8B,KACtC,OAAO,CAAC,MAAM,CAgBhB,CAAC"}

package/lib/typescript/module/credential/presentation/common/utils/mdoc.d.ts

@@ -0,0 +1,28 @@
+import type { DcqlMdocCredential, DcqlQueryResult } from "dcql";
+import type { Credential4Dcql, EvaluatedDisclosure, PresentationFrame } from "../../api/index.js";
+type CustomDcqlMdocCredential = DcqlMdocCredential & {
+    original_credential: Credential4Dcql;
+};
+/**
+ * Convert a list of credential in mdoc format to a list of objects
+ * with namespaces for correct parsing by the `dcql` library.
+ * @param credentials The raw mdoc credentials
+ * @returns List of `dcql` compatible objects
+ */
+export declare const mapCredentialsToObj: (credentialsMdoc: Credential4Dcql[]) => Promise<CustomDcqlMdocCredential[]>;
+/**
+ * Extract a compact list of claims from the `dcql` result.
+ * @param match The DCQL query match
+ * @returns The list of claims in {@link EvaluatedDisclosure} format
+ */
+export declare const getClaimsFromDcqlMatch: (match: DcqlQueryResult.CredentialMatch) => EvaluatedDisclosure[];
+/**
+ * Build a presentation frame from the requested claims for selective disclosure.
+ * @param requestedClaims Claims in {@link EvaluatedDisclosure} format
+ * @param docType mdoc doctype
+ * @returns A presentation frame for ISO18013
+ * @example { "org.iso.18013.5.1.mDL": { "org.iso.18013.5.1": { first_name: true } } }
+ */
+export declare const getPresentationFrameFromClaims: (requestedClaims: EvaluatedDisclosure[], docType: string) => PresentationFrame;
+export {};
+//# sourceMappingURL=mdoc.d.ts.map

package/lib/typescript/module/credential/presentation/common/utils/mdoc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mdoc.d.ts","sourceRoot":"","sources":["../../../../../../../src/credential/presentation/common/utils/mdoc.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,MAAM,CAAC;AAKhE,OAAO,KAAK,EACV,eAAe,EACf,mBAAmB,EACnB,iBAAiB,EAClB,MAAM,oBAAW,CAAC;AAInB,KAAK,wBAAwB,GAAG,kBAAkB,GAAG;IACnD,mBAAmB,EAAE,eAAe,CAAC;CACtC,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,GAC9B,iBAAiB,eAAe,EAAE,KACjC,OAAO,CAAC,wBAAwB,EAAE,CAiClC,CAAC;AAEJ;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,GACjC,OAAO,eAAe,CAAC,eAAe,KACrC,mBAAmB,EASnB,CAAC;AAEJ;;;;;;GAMG;AACH,eAAO,MAAM,8BAA8B,GACzC,iBAAiB,mBAAmB,EAAE,EACtC,SAAS,MAAM,KACd,iBAWD,CAAC"}

package/lib/typescript/module/credential/presentation/common/utils/sd-jwt.d.ts

@@ -0,0 +1,14 @@
+import type { DcqlSdJwtVcCredential } from "dcql";
+import type { Credential4Dcql } from "../../api/index.js";
+type CustomDcqlSdJwtVcCredential = DcqlSdJwtVcCredential & {
+    original_credential: Credential4Dcql;
+};
+/**
+ * Convert a list of credential in SD-JWT format to a list of objects
+ * with claims for correct parsing by the `dcql` library.
+ * @param credentials The raw SD-JWT credentials
+ * @returns List of `dcql` compatible objects
+ */
+export declare const mapCredentialsToObj: (credentials: Credential4Dcql[]) => Promise<CustomDcqlSdJwtVcCredential[]>;
+export {};
+//# sourceMappingURL=sd-jwt.d.ts.map

package/lib/typescript/module/credential/presentation/common/utils/sd-jwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sd-jwt.d.ts","sourceRoot":"","sources":["../../../../../../../src/credential/presentation/common/utils/sd-jwt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,MAAM,CAAC;AAKlD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAW,CAAC;AAMjD,KAAK,2BAA2B,GAAG,qBAAqB,GAAG;IACzD,mBAAmB,EAAE,eAAe,CAAC;CACtC,CAAC;AA4BF;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,GAC9B,aAAa,eAAe,EAAE,KAC7B,OAAO,CAAC,2BAA2B,EAAE,CAuBvC,CAAC"}

package/lib/typescript/module/credential/presentation/index.d.ts

@@ -0,0 +1,6 @@
+import * as Errors from "./common/errors.js";
+export { Errors };
+export type * from "./api/index.js";
+export { RemotePresentation as V1_0_0 } from "./v1.0.0/index.js";
+export { RemotePresentation as V1_4_6 } from "./v1.4.6/index.js";
+//# sourceMappingURL=index.d.ts.map

package/lib/typescript/module/credential/presentation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/credential/presentation/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,oBAAiB,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,CAAC;AAClB,mBAAmB,gBAAO,CAAC;AAC3B,OAAO,EAAE,kBAAkB,IAAI,MAAM,EAAE,MAAM,mBAAU,CAAC;AACxD,OAAO,EAAE,kBAAkB,IAAI,MAAM,EAAE,MAAM,mBAAU,CAAC"}

package/lib/typescript/module/credential/presentation/v1.0.0/01-start-flow.d.ts

@@ -0,0 +1,3 @@
+import type { RemotePresentationApi } from "../api/index.js";
+export declare const startFlowFromQR: RemotePresentationApi["startFlowFromQR"];
+//# sourceMappingURL=01-start-flow.d.ts.map

package/lib/typescript/module/credential/presentation/v1.0.0/01-start-flow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"01-start-flow.d.ts","sourceRoot":"","sources":["../../../../../../src/credential/presentation/v1.0.0/01-start-flow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAQ,CAAC;AAKpD,eAAO,MAAM,eAAe,EAAE,qBAAqB,CAAC,iBAAiB,CAiBpE,CAAC"}

package/lib/typescript/module/credential/presentation/v1.0.0/02-evaluate-rp-trust.d.ts

@@ -0,0 +1,3 @@
+import type { RemotePresentationApi } from "../api/index.js";
+export declare const evaluateRelyingPartyTrust: RemotePresentationApi["evaluateRelyingPartyTrust"];
+//# sourceMappingURL=02-evaluate-rp-trust.d.ts.map

package/lib/typescript/module/credential/presentation/v1.0.0/02-evaluate-rp-trust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"02-evaluate-rp-trust.d.ts","sourceRoot":"","sources":["../../../../../../src/credential/presentation/v1.0.0/02-evaluate-rp-trust.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAQ,CAAC;AAKpD,eAAO,MAAM,yBAAyB,EAAE,qBAAqB,CAAC,2BAA2B,CAStF,CAAC"}

package/lib/typescript/module/credential/presentation/v1.0.0/03-get-request-object.d.ts

@@ -0,0 +1,3 @@
+import type { RemotePresentationApi } from "../api/index.js";
+export declare const getRequestObject: RemotePresentationApi["getRequestObject"];
+//# sourceMappingURL=03-get-request-object.d.ts.map

package/lib/typescript/module/credential/presentation/v1.0.0/03-get-request-object.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"03-get-request-object.d.ts","sourceRoot":"","sources":["../../../../../../src/credential/presentation/v1.0.0/03-get-request-object.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAQ,CAAC;AAOpD,eAAO,MAAM,gBAAgB,EAAE,qBAAqB,CAAC,kBAAkB,CAsDpE,CAAC"}

package/lib/typescript/module/credential/presentation/v1.0.0/05-verify-request-object.d.ts

@@ -0,0 +1,3 @@
+import type { RemotePresentationApi } from "../api/index.js";
+export declare const verifyRequestObject: RemotePresentationApi["verifyRequestObject"];
+//# sourceMappingURL=05-verify-request-object.d.ts.map

package/lib/typescript/module/credential/presentation/v1.0.0/05-verify-request-object.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"05-verify-request-object.d.ts","sourceRoot":"","sources":["../../../../../../src/credential/presentation/v1.0.0/05-verify-request-object.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAsB,qBAAqB,EAAE,MAAM,iBAAQ,CAAC;AAQxE,eAAO,MAAM,mBAAmB,EAAE,qBAAqB,CAAC,qBAAqB,CAgD1E,CAAC"}

package/lib/typescript/module/credential/presentation/v1.0.0/06-evaluate-dcql-query.d.ts

@@ -0,0 +1,3 @@
+import type { RemotePresentationApi } from "../api/index.js";
+export declare const evaluateDcqlQuery: RemotePresentationApi["evaluateDcqlQuery"];
+//# sourceMappingURL=06-evaluate-dcql-query.d.ts.map

package/lib/typescript/module/credential/presentation/v1.0.0/06-evaluate-dcql-query.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"06-evaluate-dcql-query.d.ts","sourceRoot":"","sources":["../../../../../../src/credential/presentation/v1.0.0/06-evaluate-dcql-query.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAmB,qBAAqB,EAAE,MAAM,iBAAQ,CAAC;AAcrE,eAAO,MAAM,iBAAiB,EAAE,qBAAqB,CAAC,mBAAmB,CA0FtE,CAAC"}

package/lib/typescript/module/credential/presentation/v1.0.0/07-send-authorization-response.d.ts

@@ -0,0 +1,26 @@
+import type { JWK } from "../../../utils/jwk.js";
+import type { RelyingPartyConfig, RemotePresentationApi } from "../api/index.js";
+import type { RequestObject } from "../api/types.js";
+import { DirectAuthorizationBodyPayload } from "./types.js";
+/**
+ * Selects a public key (with `use = enc`) from the set of JWK keys
+ * offered by the Relying Party (RP) for encryption.
+ *
+ * @param rpJwkKeys - The array of JWKs retrieved from the RP entity configuration.
+ * @returns The first suitable public key found in the list.
+ * @throws {NoSuitableKeysFoundInEntityConfiguration} If no suitable encryption key is found.
+ */
+export declare const choosePublicKeyToEncrypt: (rpJwkKeys: JWK[]) => JWK;
+/**
+ * Builds a URL-encoded form body for a direct POST response using JWT encryption.
+ *
+ * @param jwkKeys - Array of JWKs from the Relying Party for encryption.
+ * @param requestObject - Contains state, nonce, and other relevant info.
+ * @param payload - Object that contains the VP token to encrypt and the mapping of the credential disclosures
+ * @returns A URL-encoded string for an `application/x-www-form-urlencoded` POST body, where `response` contains the encrypted JWE.
+ */
+export declare const buildDirectPostJwtBody: (requestObject: RequestObject, rpConf: RelyingPartyConfig, payload: DirectAuthorizationBodyPayload) => Promise<string>;
+export declare const prepareRemotePresentations: RemotePresentationApi["prepareRemotePresentations"];
+export declare const sendAuthorizationResponse: RemotePresentationApi["sendAuthorizationResponse"];
+export declare const sendAuthorizationErrorResponse: RemotePresentationApi["sendAuthorizationErrorResponse"];
+//# sourceMappingURL=07-send-authorization-response.d.ts.map

package/lib/typescript/module/credential/presentation/v1.0.0/07-send-authorization-response.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"07-send-authorization-response.d.ts","sourceRoot":"","sources":["../../../../../../src/credential/presentation/v1.0.0/07-send-authorization-response.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,uBAAoB,CAAC;AAC9C,OAAO,KAAK,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,iBAAQ,CAAC;AACxE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAc,CAAC;AAclD,OAAO,EAAyB,8BAA8B,EAAE,MAAM,YAAS,CAAC;AAGhF;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,GAAI,WAAW,GAAG,EAAE,KAAG,GAW3D,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,GACjC,eAAe,aAAa,EAC5B,QAAQ,kBAAkB,EAC1B,SAAS,8BAA8B,KACtC,OAAO,CAAC,MAAM,CAkChB,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,qBAAqB,CAAC,4BAA4B,CAwBxF,CAAC;AAEJ,eAAO,MAAM,yBAAyB,EAAE,qBAAqB,CAAC,2BAA2B,CAqCtF,CAAC;AAEJ,eAAO,MAAM,8BAA8B,EAAE,qBAAqB,CAAC,gCAAgC,CAqBhG,CAAC"}

package/lib/typescript/module/credential/presentation/v1.0.0/index.d.ts

@@ -0,0 +1,3 @@
+import type { RemotePresentationApi } from "../api/index.js";
+export declare const RemotePresentation: RemotePresentationApi;
+//# sourceMappingURL=index.d.ts.map

package/lib/typescript/module/credential/presentation/v1.0.0/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/credential/presentation/v1.0.0/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAQ,CAAC;AAapD,eAAO,MAAM,kBAAkB,EAAE,qBAShC,CAAC"}

package/lib/typescript/module/credential/presentation/v1.0.0/mappers.d.ts

@@ -0,0 +1,149 @@
+import type { RequestObject } from "../api/types.js";
+export declare const mapToRelyingPartyConfig: (input: {
+    header: {
+        alg: string;
+        kid: string;
+        typ: "entity-statement+jwt";
+    };
+    payload: {
+        [x: string]: unknown;
+        exp: number;
+        iat: number;
+        iss: string;
+        jwks: {
+            keys: {
+                kty: "RSA" | "EC";
+                alg?: string | undefined;
+                crv?: string | undefined;
+                d?: string | undefined;
+                dp?: string | undefined;
+                dq?: string | undefined;
+                e?: string | undefined;
+                ext?: boolean | undefined;
+                k?: string | undefined;
+                key_ops?: string[] | undefined;
+                kid?: string | undefined;
+                n?: string | undefined;
+                p?: string | undefined;
+                q?: string | undefined;
+                qi?: string | undefined;
+                use?: string | undefined;
+                x?: string | undefined;
+                x5c?: string[] | undefined;
+                x5t?: string | undefined;
+                "x5t#S256"?: string | undefined;
+                x5u?: string | undefined;
+                y?: string | undefined;
+            }[];
+        };
+        metadata: {
+            [x: string]: unknown;
+            federation_entity: {
+                [x: string]: unknown;
+                contacts?: string[] | undefined;
+                endpoint_auth_signing_alg_values_supported?: string | undefined;
+                federation_fetch_endpoint?: string | undefined;
+                federation_historical_keys_endpoint?: string | undefined;
+                federation_list_endpoint?: string | undefined;
+                federation_resolve_endpoint?: string | undefined;
+                federation_trust_mark_endpoint?: string | undefined;
+                federation_trust_mark_list_endpoint?: string | undefined;
+                federation_trust_mark_status_endpoint?: string | undefined;
+                homepage_uri?: string | undefined;
+                logo_uri?: string | undefined;
+                organization_name?: string | undefined;
+                policy_uri?: string | undefined;
+            };
+        };
+        sub: string;
+        authority_hints?: string[] | undefined;
+    };
+} & {
+    payload: {
+        metadata: {
+            openid_credential_verifier: {
+                jwks: {
+                    keys: {
+                        [x: string]: unknown;
+                        kid: string;
+                        kty: string;
+                        alg?: string | undefined;
+                        key_ops?: string[] | undefined;
+                        use?: string | undefined;
+                        x5c?: string[] | undefined;
+                        x5t?: string | undefined;
+                        "x5t#S256"?: string | undefined;
+                        x5u?: string | undefined;
+                    }[];
+                };
+                application_type?: string | undefined;
+                authorization_encrypted_response_alg?: string | undefined;
+                authorization_encrypted_response_enc?: string | undefined;
+                authorization_signed_response_alg?: string | undefined;
+                client_id?: string | undefined;
+                client_name?: string | undefined;
+                contacts?: string[] | undefined;
+                request_uris?: string[] | undefined;
+            };
+        };
+    };
+}) => {
+    federation_entity: {
+        [x: string]: unknown;
+        contacts?: string[] | undefined;
+        endpoint_auth_signing_alg_values_supported?: string | undefined;
+        federation_fetch_endpoint?: string | undefined;
+        federation_historical_keys_endpoint?: string | undefined;
+        federation_list_endpoint?: string | undefined;
+        federation_resolve_endpoint?: string | undefined;
+        federation_trust_mark_endpoint?: string | undefined;
+        federation_trust_mark_list_endpoint?: string | undefined;
+        federation_trust_mark_status_endpoint?: string | undefined;
+        homepage_uri?: string | undefined;
+        logo_uri?: string | undefined;
+        organization_name?: string | undefined;
+        policy_uri?: string | undefined;
+    };
+    jwks: {
+        keys: {
+            [x: string]: unknown;
+            kid: string;
+            kty: string;
+            alg?: string | undefined;
+            key_ops?: string[] | undefined;
+            use?: string | undefined;
+            x5c?: string[] | undefined;
+            x5t?: string | undefined;
+            "x5t#S256"?: string | undefined;
+            x5u?: string | undefined;
+        }[];
+    };
+    authorization_encrypted_response_alg?: string | undefined;
+    authorization_encrypted_response_enc?: string | undefined;
+    encrypted_response_enc_values_supported?: string[] | undefined;
+    subject?: string | undefined;
+};
+export declare const mapToRequestObject: (input: {
+    header: {
+        alg: string;
+        kid: string;
+        typ: "oauth-authz-req+jwt";
+        trust_chain?: string[] | undefined;
+    };
+    payload: {
+        client_id: string;
+        dcql_query: Record<string, any>;
+        exp: number;
+        iat: number;
+        iss: string;
+        nonce: string;
+        response_mode: "direct_post.jwt";
+        response_type: "vp_token";
+        response_uri: string;
+        state: string;
+        request_uri_method?: string | undefined;
+        scope?: string | undefined;
+        wallet_nonce?: string | undefined;
+    };
+}) => RequestObject;
+//# sourceMappingURL=mappers.d.ts.map

package/lib/typescript/module/credential/presentation/v1.0.0/mappers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mappers.d.ts","sourceRoot":"","sources":["../../../../../../src/credential/presentation/v1.0.0/mappers.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAc,CAAC;AAMlD,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAclC,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;mBAY9B,CAAC"}