@procivis/react-native-one-core 1.115964.0 → 1.119306.0

package/README.md

@@ -86,61 +86,24 @@ regulatory ecosystems.
 We continue to look for more opportunities for interoperability testing as the standards
 and regulations mature and harden.
 
-## Supported standards
-
-### Credential models
-
-#### IETF SD-JWT VC
-
-- [IETF SD-JWT-based Verifiable Credentials][sdjwtvc]:
-
-| Standard       | Supported representations | Supported proof/signature types                                                                                                          |
-| -------------- | ------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------- |
-| IETF SD-JWT VC | SD-JWT                    | <ul><li>JOSE / ECDSA [ES256][es2]</li><li>JOSE / EdDSA [Ed25519][ed255]</li><li>JOSE / [ML-DSA-65 (FIPS 204)][fips]\*</li></ul> |
-
-#### ISO mdoc
-
-- [ISO/IEC 18013-5:2021][iso5] standard for mdoc credentials in the following variations:
-
-| Standard             | Supported representations | Supported proof/signature types                                                   |
-| -------------------- | ------------------------- | --------------------------------------------------------------------------------- |
-| ISO/IEC 18013-5:2021 | mdoc                      | <ul><li>COSE / ECDSA [ES256][es2]</li><li>COSE / EdDSA [Ed25519][ed255]</li></ul> |
-
-#### W3C VC
-
-- [W3C Verifiable Credentials Data Model 2.0][vcdm] in the following variations:
-
-| Securing mechanism                           | Supported representations                           | Supported proof/signature types                                                                                                                                                                                                                                       |
-| -------------------------------------------- | --------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| [W3C Data Integrity Proofs][vcdi] (embedded) | [JSON-LD][jld] in Compacted Document Form           | <ul><li>[W3C Data Integrity ECDSA Cryptosuites v1.0][ecd] / [ecdsa-rdfc-2019][ecd2019]</li><li>[W3C Data Integrity EdDSA Cryptosuites v1.0][edd] / [eddsa-rdfc-2022][edd2022]</li><li>[W3C Data Integrity BBS Cryptosuites v1.0][bbs] / [bbs-2023][bbs2023]</li></ul> |
-| [W3C VC-JOSE-COSE][jose] (enveloping)        | <ul><li>[SD-JWT][sdjwt]</li><li>[JWT][jw]</li></ul> | <ul><li>JOSE / ECDSA [ES256][es2]</li><li>JOSE / EdDSA [Ed25519][ed255]</li><li>JOSE / [ML-DSA-65 (FIPS 204)][fips]\*</li></ul>                                                                                                                              |
-
-- **Backwards compatibility**: Procivis One supports verification of proofs which use VCDM 1.1.
-
-### Exchange and transport
-
-- OpenID4VCI (Issuance)
-  - [v1.0][vci1]
-- OpenID4VP (Verification)
-  - [v1.0][vp1.0]
-  - [Draft 25][vp25]
-  - [Draft 20][vp20]
-  - [OID4VP over BLE][ble]; optimized version of Draft 00
-  - OID4VP over MQTT; proprietary adaptation of "OID4VP over BLE" via MQTT channel
-- ISO/IEC 18013 (Verification)
-  - [18013-5][iso5]: Device engagement using either NFC or QR Code, data retrieval using BLE
-  - [18013-7 Annex B][iso7]: Online data retrieval via OID4VP
-
-### Key storage
-
-- Secure Enclave (iOS) and Android Keystore (TEE or Strongbox)
-- Internal encrypted database
-
-### Revocation methods
-
-- [Bitstring Status List v1.0][sl]
-- [Token Status List - Draft 03][tsl]
-- [Certificate Revocation List][crl]
+## Standards and technologies
+
+| Category | Supported |
+| -------- | --------- |
+| Credential formats | SD-JWT VC, ISO mdoc, W3C VC |
+| Issuance protocol | OpenID4VCI |
+| Presentation protocols | OpenID4VP, ISO/IEC 18013-5, ISO/IEC 18013-7 |
+| Transport and engagement | BLE, MQTT, NFC, QR code |
+| Revocation | Bitstring Status List, Token Status List, CRL |
+| Key storage | Secure Enclave, Android Keystore, Azure Key Vault, HSM, internal database |
+| DID methods | did\:key, did\:web, did\:jwk, did\:webvh |
+| Trust infrastructure | ETSI Trusted Lists, Lists of Trusted Lists (LoTL), and Lists of Trusted Entities (LoTE), EUDI Access and Registration Certificates |
+| Cryptographic suites | ES256, Ed25519, ML-DSA-65, BBS |
+| Wallet attestations | Wallet Unit Attestation (WUA) and Wallet Instance Attestation (WIA) |
+
+For the full list of supported standards, specifications, protocol versions, and
+ETSI coverage, see the [Supported Standards and Technologies][supptech] page in
+the Procivis One documentation.
 
 ## Support
 
@@ -160,44 +123,15 @@ Version 2.0](./LICENSE).
 © Procivis AG, [https://www.procivis.ch](https://www.procivis.ch).
 
 [archi]: https://github.com/procivis#architecture
-[bbs]: https://www.w3.org/TR/vc-di-bbs/
-[bbs2023]: https://www.w3.org/TR/vc-di-bbs/#bbs-2023
-[ble]: https://openid.net/specs/openid-4-verifiable-presentations-over-ble-1_0.html
 [canivc]: https://canivc.com/implementations/procivis-one-core/
 [comp]: https://github.com/procivis/one-react-native-components
 [core]: https://github.com/procivis/one-core
-[cose]: https://www.rfc-editor.org/rfc/rfc9052
-[crl]: https://www.ietf.org/rfc/rfc5280.txt
 [docs]: https://docs.procivis.ch/
-[ecd]: https://www.w3.org/TR/vc-di-ecdsa/
-[ecd2019]: https://www.w3.org/TR/vc-di-ecdsa/#ecdsa-rdfc-2019
-[edd]: https://www.w3.org/TR/vc-di-eddsa/
-[edd2022]: https://www.w3.org/TR/vc-di-eddsa/#eddsa-rdfc-2022
-[ed255]: https://datatracker.ietf.org/doc/html/rfc8037
-[es2]: https://datatracker.ietf.org/doc/html/rfc7518
 [eudiwi]: https://issuer.eudiw.dev/
 [eudiwv]: https://verifier.eudiw.dev/home
-[fips]: https://csrc.nist.gov/pubs/fips/204/final
-[iso5]: https://www.iso.org/standard/69084.html
-[iso7]: https://www.iso.org/standard/82772.html
-[jld]: https://www.w3.org/TR/json-ld11/
-[jose]: https://w3c.github.io/vc-jose-cose/
-[jw]: https://datatracker.ietf.org/doc/html/rfc7519
 [key]: https://github.com/procivis#key-features
 [lvvc]: https://eprint.iacr.org/2022/1658.pdf
 [owf]: https://github.com/openwallet-foundation-labs/identity-credential
 [pow]: https://github.com/procivis/one-wallet
-[pqc]: https://csrc.nist.gov/pqc-standardization
-[rncore]: https://github.com/procivis/react-native-one-core
-[sdjwt]: https://www.ietf.org/archive/id/draft-ietf-oauth-selective-disclosure-jwt-12.html
-[sdjwtvc]: https://www.ietf.org/archive/id/draft-ietf-oauth-sd-jwt-vc-05.html
 [sdkref]: https://docs.procivis.ch/sdk
-[sl]: https://www.w3.org/TR/vc-bitstring-status-list/
 [trial]: https://docs.procivis.ch/trial
-[tsl]: https://datatracker.ietf.org/doc/html/draft-ietf-oauth-status-list-03
-[vcdi]: https://www.w3.org/TR/vc-data-integrity/
-[vcdm]: https://www.w3.org/TR/vc-data-model-2.0/
-[vci1]: https://openid.net/specs/openid-4-verifiable-credential-issuance-1_0.html
-[vp1.0]: https://openid.net/specs/openid-4-verifiable-presentations-1_0-final.html
-[vp20]: https://openid.net/specs/openid-4-verifiable-presentations-1_0-20.html
-[vp25]: https://openid.net/specs/openid-4-verifiable-presentations-1_0-25.html

package/android/src/main/java/ch/procivis/one/core/ProcivisOneCoreModule.kt

@@ -138,6 +138,14 @@ class ProcivisOneCoreModule(reactContext: ReactApplicationContext) :
         }
     }
 
+    @ReactMethod
+    fun getOrganisationTrustCollections(organisationId: String, promise: Promise) {
+        asyncCall(promise, scope) {
+            val result = getCore().getOrganisationTrustCollections(organisationId)
+            return@asyncCall convertToRN(result)
+        }
+    }
+
     @ReactMethod
     fun generateKey(keyRequest: ReadableMap, promise: Promise) {
         asyncCall(promise, scope) {
@@ -580,73 +588,33 @@ class ProcivisOneCoreModule(reactContext: ReactApplicationContext) :
     }
 
     @ReactMethod
-    fun holderRegisterWalletUnit(request: ReadableMap, promise: Promise) {
-        asyncCall(promise, scope) {
-            val result = getCore().holderRegisterWalletUnit(construct(request))
-            return@asyncCall convertToRN(result)
-        }
-    }
-
-    @ReactMethod
-    fun holderActivateWalletUnit(id: String, request: ReadableMap, promise: Promise) {
-        asyncCall(promise, scope) {
-            getCore().holderActivateWalletUnit(id, construct(request))
-            return@asyncCall null
-        }
-    }
-
-    @ReactMethod
-    fun holderWalletUnitStatus(walletUnitId: String, promise: Promise) {
-        asyncCall(promise, scope) {
-            getCore().holderWalletUnitStatus(walletUnitId)
-            return@asyncCall null
-        }
-    }
-
-    @ReactMethod
-    fun holderWalletUnitUpdate(walletUnitId: String, request: ReadableMap, promise: Promise) {
-        asyncCall(promise, scope) {
-            getCore().holderWalletUnitUpdate(walletUnitId, construct(request))
-            return@asyncCall null
-        }
-    }
-
-    @ReactMethod
-    fun holderGetWalletUnit(walletUnitId: String, promise: Promise) {
-        asyncCall(promise, scope) {
-            val result = getCore().holderGetWalletUnit(walletUnitId)
-            return@asyncCall convertToRN(result)
-        }
-    }
-
-    @ReactMethod
-    fun holderGetWalletUnitTrustCollections(walletUnitId: String, promise: Promise) {
+    fun holderRegisterInstance(request: ReadableMap, promise: Promise) {
         asyncCall(promise, scope) {
-            val result = getCore().holderGetWalletUnitTrustCollections(walletUnitId)
+            val result = getCore().holderRegisterInstance(construct(request))
             return@asyncCall convertToRN(result)
         }
     }
 
     @ReactMethod
-    fun registerVerifierInstance(request: ReadableMap, promise: Promise) {
+    fun holderActivateInstance(id: String, request: ReadableMap, promise: Promise) {
         asyncCall(promise, scope) {
-            val result = getCore().registerVerifierInstance(construct(request))
+            val result = getCore().holderActivateInstance(id, construct(request))
             return@asyncCall convertToRN(result)
         }
     }
 
     @ReactMethod
-    fun updateVerifierInstance(verifierInstanceId: String, request: ReadableMap, promise: Promise) {
+    fun holderInstanceStatus(id: String, promise: Promise) {
         asyncCall(promise, scope) {
-            getCore().updateVerifierInstance(verifierInstanceId, construct(request))
+            getCore().holderInstanceStatus(id)
             return@asyncCall null
         }
     }
 
     @ReactMethod
-    fun getVerifierInstanceTrustCollections(verifierInstanceId: String, promise: Promise) {
+    fun holderGetInstance(id: String, promise: Promise) {
         asyncCall(promise, scope) {
-            val result = getCore().getVerifierInstanceTrustCollections(verifierInstanceId)
+            val result = getCore().holderGetInstance(id)
             return@asyncCall convertToRN(result)
         }
     }

package/core-sdk.json

@@ -1,16 +1,16 @@
 {
   "android": {
     "debug": {
-      "url": "https://onesdk.blob.core.windows.net/core-sdk/115964/android/onecore-debug.aar",
-      "sha1": "c31bdc53088d93e4cf00205e3b7b13b6c7adbe30"
+      "url": "https://onesdk.blob.core.windows.net/core-sdk/119306/android/onecore-debug.aar",
+      "sha1": "ff7e6e928cc3b0c3865c2a966e210a86023310a4"
     },
     "release": {
-      "url": "https://onesdk.blob.core.windows.net/core-sdk/115964/android/onecore-release.aar",
-      "sha1": "7115c6c8fd0715181890a7613a44318800e530e0"
+      "url": "https://onesdk.blob.core.windows.net/core-sdk/119306/android/onecore-release.aar",
+      "sha1": "f9c2489cfedeea5546ad37e6806d6ec013534a99"
     }
   },
   "ios": {
-    "url": "https://onesdk.blob.core.windows.net/core-sdk/115964/ios/deploy.zip",
-    "sha1": "c16efa7d89daccfbaf4b0566742dc33e1f0bafd9"
+    "url": "https://onesdk.blob.core.windows.net/core-sdk/119306/ios/deploy.zip",
+    "sha1": "aca46be28fe64660882327d62a3200bd17339b2a"
   }
 }

package/dist/src/core.d.ts

@@ -10,4 +10,4 @@ export interface ONECore extends Omit<OneCore, "version" | "getConfig"> {
  * @hidden
  * New Architecture bridgeless issue workaround: see https://github.com/facebook/react-native/issues/43221
  */
-export declare const interfaceMethodNames: readonly ["getVersion", "getConfig", "createOrganisation", "upsertOrganisation", "getOrganisation", "generateKey", "createDid", "listDids", "createIdentifier", "getIdentifier", "listIdentifiers", "deleteIdentifier", "handleInvitation", "holderAcceptCredential", "holderRejectCredential", "holderRefreshCredential", "initiateIssuance", "continueIssuance", "getPresentationDefinitionV2", "holderRejectProof", "holderSubmitProofV2", "listCredentials", "runTask", "deleteProofClaims", "getCredential", "getCredentialTrustInformation", "deleteCredential", "importCredentialSchema", "getCredentialSchema", "createCredentialSchema", "listCredentialSchemas", "deleteCredentialSchema", "createProof", "shareProof", "shareProofSchema", "shareCredentialSchema", "getProof", "getProofTrustInformation", "holderGetTransactionData", "listProofs", "deleteProof", "proposeProof", "qesAuthorize", "qesSign", "createProofSchema", "listProofSchemas", "getProofSchema", "deleteProofSchema", "importProofSchema", "checkRevocation", "listHistory", "getHistoryEntry", "createBackup", "backupInfo", "deleteCache", "unpackBackup", "finalizeImport", "rollbackImport", "resolveJsonldContext", "holderRegisterWalletUnit", "holderActivateWalletUnit", "holderWalletUnitStatus", "holderGetWalletUnit", "holderWalletUnitUpdate", "holderGetWalletUnitTrustCollections", "registerVerifierInstance", "updateVerifierInstance", "getVerifierInstanceTrustCollections", "nfcReadIsoMdlEngagement", "nfcStopIsoMdlEngagement", "uninitialize"];
+export declare const interfaceMethodNames: readonly ["getVersion", "getConfig", "createOrganisation", "upsertOrganisation", "getOrganisation", "getOrganisationTrustCollections", "generateKey", "createDid", "listDids", "createIdentifier", "getIdentifier", "listIdentifiers", "deleteIdentifier", "handleInvitation", "holderAcceptCredential", "holderRejectCredential", "holderRefreshCredential", "initiateIssuance", "continueIssuance", "getPresentationDefinitionV2", "holderRejectProof", "holderSubmitProofV2", "listCredentials", "runTask", "deleteProofClaims", "getCredential", "getCredentialTrustInformation", "deleteCredential", "importCredentialSchema", "getCredentialSchema", "createCredentialSchema", "listCredentialSchemas", "deleteCredentialSchema", "createProof", "shareProof", "shareProofSchema", "shareCredentialSchema", "getProof", "getProofTrustInformation", "holderGetTransactionData", "listProofs", "deleteProof", "proposeProof", "qesAuthorize", "qesSign", "createProofSchema", "listProofSchemas", "getProofSchema", "deleteProofSchema", "importProofSchema", "checkRevocation", "listHistory", "getHistoryEntry", "createBackup", "backupInfo", "deleteCache", "unpackBackup", "finalizeImport", "rollbackImport", "resolveJsonldContext", "holderRegisterInstance", "holderActivateInstance", "holderInstanceStatus", "holderGetInstance", "nfcReadIsoMdlEngagement", "nfcStopIsoMdlEngagement", "uninitialize"];

package/dist/src/core.js

@@ -10,6 +10,7 @@ export const interfaceMethodNames = [
     "createOrganisation",
     "upsertOrganisation",
     "getOrganisation",
+    "getOrganisationTrustCollections",
     "generateKey",
     "createDid",
     "listDids",
@@ -64,21 +65,16 @@ export const interfaceMethodNames = [
     "finalizeImport",
     "rollbackImport",
     "resolveJsonldContext",
-    "holderRegisterWalletUnit",
-    "holderActivateWalletUnit",
-    "holderWalletUnitStatus",
-    "holderGetWalletUnit",
-    "holderWalletUnitUpdate",
-    "holderGetWalletUnitTrustCollections",
-    "registerVerifierInstance",
-    "updateVerifierInstance",
-    "getVerifierInstanceTrustCollections",
+    "holderRegisterInstance",
+    "holderActivateInstance",
+    "holderInstanceStatus",
+    "holderGetInstance",
     "nfcReadIsoMdlEngagement",
     "nfcStopIsoMdlEngagement",
     "uninitialize",
 ];
 // Typescript automatic assertions to keep ONECore and interfaceMethodNames in sync
 /** assert that all method names listed in {@link interfaceMethodNames} exist in {@link ONECore} interface */
-const methodNamesCheck = interfaceMethodNames;
+const missingMethodsCheck = interfaceMethodNames;
 /** assert that all {@link ONECore} interface methods are listed in {@link interfaceMethodNames} */
-const interfaceMethodsCheck = null;
+const extraMethodsCheck = null;

package/dist/src/one-core-uniffi-intf.d.ts

@@ -357,6 +357,7 @@ export interface CredentialListItem {
     consumedAt?: string;
     type: CredentialType;
     parentId?: string;
+    redirectUri?: string;
 }
 export interface CredentialListQuery {
     /** Page number to retrieve (0-based indexing). */
@@ -878,73 +879,52 @@ export interface HolderAcceptCredentialRequest {
     /** User-provided transaction code. */
     txCode?: string;
 }
-export interface HolderActivateWalletUnitRequest {
+export interface HolderActivateInstanceRequest {
     /** Key type for the authentication key generated during activation. */
     keyType: string;
     /** Identity token obtained from the identity provider after user authentication. */
     userIdToken?: string;
+    /** Access token obtained from the identity provider after user authentication. */
+    userAccessToken?: string;
+}
+export interface HolderActivateInstanceResponse {
+    /** IdentifierId with provisioned access certificate (if any) */
+    accessCertificateIdentifierId?: string;
+}
+export interface HolderInstance {
+    id: string;
+    createdDate: string;
+    lastModified: string;
+    role: InstanceRole;
+    providerInstanceId: string;
+    providerUrl: string;
+    providerType: InstanceProviderType;
+    providerName: string;
+    status: InstanceStatus;
+    authenticationKey?: KeyListItem;
+    userNonce?: string;
 }
 export interface HolderRefreshCredentialResponse {
     credentialIds: Array<string>;
 }
-export interface HolderRegisterWalletUnitRequest {
-    /** The wallet unit's organization. */
+export interface HolderRegisterInstanceRequest {
+    /** The instance's organization. */
     organisationId: string;
-    /** Wallet Provider details. */
-    walletProvider: WalletProvider;
+    /** Role of the instance being registered. */
+    role: InstanceRole;
+    /** Provider details. */
+    provider: InstanceProvider;
     /**
      * Choose a key type and the system will generate a key to use for
      * registration.
      */
     keyType: string;
-    /**
-     * When true, the wallet will only interact with entities that can be
-     * verified as trusted. Requires the Wallet Provider to have the
-     * `trustEcosystemsEnabled` feature flag enabled.
-     */
-    trustedRpRequired: boolean;
-}
-export interface HolderRegisterWalletUnitResponse {
-    id: string;
-    status: WalletUnitStatus;
-    userNonce?: string;
 }
-export interface HolderWalletInstanceDetail {
+export interface HolderRegisterInstanceResponse {
     id: string;
-    trustedRpRequired: boolean;
-    walletProviderUrl: string;
-    walletProviderName: string;
-    authenticationKeyType: string;
-}
-export interface HolderWalletUnit {
-    id: string;
-    createdDate: string;
-    lastModified: string;
-    providerWalletUnitId: string;
-    walletProviderUrl: string;
-    walletProviderType: WalletProviderType;
-    walletProviderName: string;
-    status: WalletUnitStatus;
-    authenticationKey?: KeyListItem;
-    trustedRpRequired: boolean;
+    status: InstanceStatus;
     userNonce?: string;
 }
-export interface HolderWalletUnitUpdateRequest {
-    /**
-     * The trust collections the wallet subscribes to, selected from those
-     * made available by the Wallet Provider. The wallet will evaluate trust
-     * against the lists contained in these collections. To keep subscribed
-     * collections in sync with the Wallet Provider, run the
-     * `TRUST_COLLECTION_SYNC` task.
-     */
-    trustCollections?: Array<string>;
-    /**
-     * When true, the wallet will only interact with entities that can be
-     * verified as trusted. Requires the Wallet Provider to have the
-     * `trustEcosystemsEnabled` feature flag enabled.
-     */
-    trustedRpRequired?: boolean;
-}
 export interface IdentifierDetail {
     id: string;
     createdDate: string;
@@ -1144,6 +1124,22 @@ export interface InitiateIssuanceRequest {
 export interface InitiateIssuanceResponse {
     url: string;
 }
+export interface InstanceDetail {
+    id: string;
+    providerUrl: string;
+    providerName: string;
+    authenticationKeyType: string;
+}
+export interface InstanceProvider {
+    /**
+     * Full URL for the GET provider metadata endpoint, for example:
+     * <domain>/ssi/wallet-provider/v1/<provider> or
+     * <domain>/ssi/verifier-provider/v1/<provider>
+     */
+    url: string;
+    /** Choose the provider implementation. */
+    type: InstanceProviderType;
+}
 export interface KeyDetail {
     id: string;
     createdDate: string;
@@ -1194,6 +1190,23 @@ export interface OpenId4vciTxCode {
      */
     description?: string;
 }
+export interface OrganisationConfiguration {
+    /**
+     * When true, the verifier will only validate presentations of
+     * credentials issued by trusted issuers.
+     */
+    trustedIssuerRequired: boolean;
+    /**
+     * When true, the wallet only accepts presentation requests from
+     * trusted relying parties.
+     */
+    trustedRpRequired: boolean;
+    /**
+     * When true, the issuer will only issue credentials requiring wallet
+     * attestations to wallets of trusted wallet providers.
+     */
+    trustedWalletProviderRequired: boolean;
+}
 export interface OrganisationDetail {
     id: string;
     createdDate: string;
@@ -1204,17 +1217,20 @@ export interface OrganisationDetail {
      * configuration from, if any.
      */
     parentOrganisation?: string;
+    /** Policy-level configuration for this organization. */
+    configuration?: OrganisationConfiguration;
     walletProvider?: WalletProviderDetail;
+    verifierProvider?: VerifierProviderDetail;
     /**
      * Wallet registration details for this organization's Business
      * Wallet.
      */
-    walletInstance?: HolderWalletInstanceDetail;
+    walletInstance?: InstanceDetail;
     /**
-     * Wallet registration details for this organization's Business
-     * Wallet.
+     * Verifier registration details for this organization's Business
+     * Verifier.
      */
-    verifierInstance?: VerifierInstanceDetail;
+    verifierInstance?: InstanceDetail;
 }
 export interface PeripheralDiscoveryData {
     deviceAddress: string;
@@ -1384,6 +1400,7 @@ export interface ProofListItem {
     retainUntilDate?: string;
     /** Country profile associated with this request. */
     profile?: string;
+    redirectUri?: string;
 }
 export interface ProofListQuery {
     /** Page number to retrieve (0-based indexing). */
@@ -1593,24 +1610,6 @@ export interface QesSignResponse {
     /** Base64-encoded signed document returned by the QES provider. */
     signedDocument: string;
 }
-export interface RegisterVerifierInstanceRequest {
-    /** The verifier unit's organization. */
-    organisationId: string;
-    /** The Verifier Provider's reference URL. */
-    verifierProviderUrl: string;
-    /** Reference a configured `verifierProvider` instance. */
-    type: string;
-    /**
-     * When true, the verifier will only validate presentations of
-     * credentials issued by trusted issuers. Requires the Verifier
-     * Provider to have the `trustEcosystemsEnabled` feature flag
-     * enabled.
-     */
-    trustedIssuerRequired: boolean;
-}
-export interface RegisterVerifierInstanceResponse {
-    id: string;
-}
 export interface ResolvedJsonLdContext {
     context: string;
 }
@@ -1641,7 +1640,6 @@ export interface TransactionDataDisplay {
 }
 export interface TransactionDataDisplayAttribute {
     key: string;
-    /** The attribute value, encoded as a JSON string. */
     value: string;
 }
 /** Transaction data attached to a proof request. */
@@ -1654,7 +1652,7 @@ export interface TransactionDataResponse {
     data?: string;
 }
 export interface TrustCollectionInfo {
-    /** When true, the wallet is subscribed to this trust collection. */
+    /** When true, the organization is subscribed to this trust collection. */
     selected: boolean;
     id: string;
     name: string;
@@ -1663,10 +1661,6 @@ export interface TrustCollectionInfo {
     description: Array<DisplayName>;
     defaultSelected?: boolean;
 }
-export interface TrustCollections {
-    /** Trust collections available from the Wallet Provider. */
-    trustCollections: Array<TrustCollectionInfo>;
-}
 export interface TrustInformation {
     receivedAt: string;
     name?: string;
@@ -1692,22 +1686,22 @@ export interface UnexportableEntities {
     totalDids: number;
     totalIdentifiers: number;
 }
-export interface UpdateVerifierInstanceRequest {
-    /**
-     * The trust collections the verifier subscribes to, selected from
-     * those made available by the Verifier Provider. The verifier will
-     * evaluate trust against the lists contained in these collections.
-     * To keep subscribed collections in sync with the Verifier Provider,
-     * run the `TRUST_COLLECTION_SYNC` task.
-     */
-    trustCollections?: Array<string>;
+export interface UpsertOrganisationConfiguration {
     /**
      * When true, the verifier will only validate presentations of
-     * credentials issued by trusted issuers. Requires the Verifier
-     * Provider to have the `trustEcosystemsEnabled` feature flag
-     * enabled.
+     * credentials issued by trusted issuers.
      */
     trustedIssuerRequired?: boolean;
+    /**
+     * When true, the wallet only accepts presentation requests from
+     * trusted relying parties.
+     */
+    trustedRpRequired?: boolean;
+    /**
+     * When true, the issuer will only issue credentials requiring wallet
+     * attestations to wallets of trusted wallet providers.
+     */
+    trustedWalletProviderRequired?: boolean;
 }
 export interface UpsertOrganisationRequest {
     /** Unique identifier of the organization to create or update. */
@@ -1718,21 +1712,32 @@ export interface UpsertOrganisationRequest {
     walletProvider?: string | null;
     /** Wallet Provider use only. */
     walletProviderIssuer?: string | null;
+    /** Verifier Provider use only. */
+    verifierProvider?: string | null;
+    /** Verifier Provider use only. */
+    verifierProviderIssuer?: string | null;
+    /** Policy-level configuration for this organization. */
+    configuration?: UpsertOrganisationConfiguration;
+    /**
+     * The trust collections this organization's wallet subscribes to,
+     * selected from those made available by the Wallet Provider. Omit to
+     * leave the current selection unchanged.
+     */
+    trustCollections?: Array<string>;
     /**
      * The parent organization this organization inherits policy-level
      * configuration from, if any.
      */
     parentOrganisation?: string | null;
 }
-export interface VerifierInstanceDetail {
-    id: string;
+export interface VerifierProviderDetail {
+    /** Verifier Provider configuration used by this organization. */
+    providerName?: string;
     /**
-     * When true, the verifier will only validate presentations of
-     * credentials issued by trusted issuers. Requires the Verifier
-     * Provider to have the `trustEcosystemsEnabled` feature flag
-     * enabled.
+     * Identifier used by this organization to authenticate to the
+     * verifier provider.
      */
-    trustedIssuerRequired: boolean;
+    issuer?: IdentifierListItem;
 }
 export interface Version {
     target: string;
@@ -1743,15 +1748,6 @@ export interface Version {
     rustVersion: string;
     pipelineId: string;
 }
-export interface WalletProvider {
-    /**
-     * Full URL for the GET Wallet Provider metadata endpoint,
-     * for example: <domain>/ssi/wallet-provider/v1/<walletProvider>
-     */
-    url: string;
-    /** Choose the Wallet Provider implementation. */
-    type: WalletProviderType;
-}
 export interface WalletProviderDetail {
     /**
      * Wallet Provider configuration used by this organization to provide
@@ -2061,7 +2057,6 @@ export declare enum HistoryEntityType {
     TRUST_LIST_PUBLICATION = "TRUST_LIST_PUBLICATION",
     TRUST_COLLECTION = "TRUST_COLLECTION",
     TRUST_LIST_SUBSCRIPTION = "TRUST_LIST_SUBSCRIPTION",
-    VERIFIER_INSTANCE = "VERIFIER_INSTANCE",
     QES_DOCUMENT = "QES_DOCUMENT"
 }
 export type HistoryMetadata = {
@@ -2107,6 +2102,20 @@ export declare enum IdentifierType {
     CERTIFICATE = "CERTIFICATE",
     CERTIFICATE_AUTHORITY = "CERTIFICATE_AUTHORITY"
 }
+export declare enum InstanceProviderType {
+    PROCIVIS_ONE = "PROCIVIS_ONE"
+}
+export declare enum InstanceRole {
+    WALLET = "WALLET",
+    VERIFIER = "VERIFIER"
+}
+export declare enum InstanceStatus {
+    PENDING = "PENDING",
+    ACTIVE = "ACTIVE",
+    REVOKED = "REVOKED",
+    UNATTESTED = "UNATTESTED",
+    ERROR = "ERROR"
+}
 export declare enum KeyRole {
     AUTHENTICATION = "AUTHENTICATION",
     ASSERTION_METHOD = "ASSERTION_METHOD",
@@ -2259,16 +2268,6 @@ export declare enum TrustResolutionResult {
     UNTRUSTED = "UNTRUSTED",
     UNKNOWN = "UNKNOWN"
 }
-export declare enum WalletProviderType {
-    PROCIVIS_ONE = "PROCIVIS_ONE"
-}
-export declare enum WalletUnitStatus {
-    PENDING = "PENDING",
-    ACTIVE = "ACTIVE",
-    REVOKED = "REVOKED",
-    UNATTESTED = "UNATTESTED",
-    ERROR = "ERROR"
-}
 export interface BleCentral {
     connect(peripheral: string): Promise<number>;
     disconnect(peripheral: string): Promise<void>;
@@ -2449,6 +2448,7 @@ export interface OneCore {
     getIdentifier(id: string): Promise<IdentifierDetail>;
     /** Returns details of an existing organization. */
     getOrganisation(id: string): Promise<OrganisationDetail>;
+    getOrganisationTrustCollections(id: string): Promise<Array<TrustCollectionInfo>>;
     getPresentationDefinitionV2(proofId: string): Promise<PresentationDefinitionV2>;
     /** Returns detailed information about a proof request. */
     getProof(proofId: string): Promise<ProofDetail>;
@@ -2458,8 +2458,6 @@ export interface OneCore {
      * proof request.
      */
     getProofTrustInformation(proofId: string): Promise<TrustInformationDetail>;
-    /** Returns trust collections curated by the Verifier Provider. */
-    getVerifierInstanceTrustCollections(id: string): Promise<TrustCollections>;
     /**
      * For a wallet, handles the interaction once the wallet connects to a share
      * endpoint URL (for example, scans the QR code of an offered credential or
@@ -2472,8 +2470,10 @@ export interface OneCore {
      * you can specify an existing identifier.
      */
     holderAcceptCredential(request: HolderAcceptCredentialRequest): Promise<string>;
-    /** Activates the wallet instance with the Wallet Provider after user authentication. */
-    holderActivateWalletUnit(id: string, request: HolderActivateWalletUnitRequest): Promise<void>;
+    /** Activates the instance with the provider after user authentication. */
+    holderActivateInstance(id: string, request: HolderActivateInstanceRequest): Promise<HolderActivateInstanceResponse>;
+    /** Returns instance registration details from the provider. */
+    holderGetInstance(id: string): Promise<HolderInstance>;
     /**
      * For wallets; returns the details of a single transaction data entry of a
      * proof request, including human-readable display data and the raw
@@ -2481,14 +2481,15 @@ export interface OneCore {
      * obtained from `getPresentationDefinitionv2`.
      */
     holderGetTransactionData(proofId: string, transactionDataId: string): Promise<ProofTransactionData>;
-    /** Returns wallet registration details from the Wallet Provider. */
-    holderGetWalletUnit(id: string): Promise<HolderWalletUnit>;
-    /** Returns trust collections curated by the Wallet Provider. */
-    holderGetWalletUnitTrustCollections(id: string): Promise<TrustCollections>;
+    /**
+     * Check status of the instance with the provider. Will return an error
+     * if the instance has been revoked.
+     */
+    holderInstanceStatus(id: string): Promise<void>;
     /** Receive a new credential batch */
     holderRefreshCredential(interactionId: string): Promise<HolderRefreshCredentialResponse>;
-    /** Registers the wallet unit with a Wallet Provider. */
-    holderRegisterWalletUnit(request: HolderRegisterWalletUnitRequest): Promise<HolderRegisterWalletUnitResponse>;
+    /** Registers the instance with a Wallet or Verifier Provider. */
+    holderRegisterInstance(request: HolderRegisterInstanceRequest): Promise<HolderRegisterInstanceResponse>;
     /** Rejects an offered credential. */
     holderRejectCredential(interactionId: string): Promise<void>;
     /** Rejects a proof request. */
@@ -2498,13 +2499,6 @@ export interface OneCore {
      * be used after `getPresentationDefinitionv2`.
      */
     holderSubmitProofV2(interactionId: string, submission: Record<string, Array<PresentationSubmitV2CredentialRequest>>): Promise<void>;
-    /**
-     * Check status of wallet unit with the Wallet Provider. Will return an error
-     * if the unit has been revoked.
-     */
-    holderWalletUnitStatus(id: string): Promise<void>;
-    /** Modifies wallet unit's settings. */
-    holderWalletUnitUpdate(id: string, request: HolderWalletUnitUpdateRequest): Promise<void>;
     /**
      * Imports a credential schema shared from another mobile verifier device
      * using the one-core.
@@ -2549,8 +2543,6 @@ export interface OneCore {
      * from `qesAuthorize` for a signed document.
      */
     qesSign(request: QesSignRequest): Promise<QesSignResponse>;
-    /** Registers the verifier unit with a Verifier Provider. */
-    registerVerifierInstance(request: RegisterVerifierInstanceRequest): Promise<RegisterVerifierInstanceResponse>;
     /**
      * Returns the JSON-LD context document for a given URI. This is a
      * [cached entity](https://docs.procivis.ch/configure/caching).
@@ -2585,8 +2577,6 @@ export interface OneCore {
      * Follow by calling either `finalizeImport` or `rollbackImport`.
      */
     unpackBackup(password: string, inputPath: string): Promise<Metadata>;
-    /** Modifies verifier unit's settings. */
-    updateVerifierInstance(id: string, request: UpdateVerifierInstanceRequest): Promise<void>;
     /**
      * Updates or deactivates an organization if it exists, otherwise
      * creates a new organization using the provided UUID and name.

package/dist/src/one-core-uniffi-intf.js

@@ -207,7 +207,6 @@ export var HistoryEntityType;
     HistoryEntityType["TRUST_LIST_PUBLICATION"] = "TRUST_LIST_PUBLICATION";
     HistoryEntityType["TRUST_COLLECTION"] = "TRUST_COLLECTION";
     HistoryEntityType["TRUST_LIST_SUBSCRIPTION"] = "TRUST_LIST_SUBSCRIPTION";
-    HistoryEntityType["VERIFIER_INSTANCE"] = "VERIFIER_INSTANCE";
     HistoryEntityType["QES_DOCUMENT"] = "QES_DOCUMENT";
 })(HistoryEntityType || (HistoryEntityType = {}));
 export var HistorySearchType;
@@ -242,6 +241,23 @@ export var IdentifierType;
     IdentifierType["CERTIFICATE"] = "CERTIFICATE";
     IdentifierType["CERTIFICATE_AUTHORITY"] = "CERTIFICATE_AUTHORITY";
 })(IdentifierType || (IdentifierType = {}));
+export var InstanceProviderType;
+(function (InstanceProviderType) {
+    InstanceProviderType["PROCIVIS_ONE"] = "PROCIVIS_ONE";
+})(InstanceProviderType || (InstanceProviderType = {}));
+export var InstanceRole;
+(function (InstanceRole) {
+    InstanceRole["WALLET"] = "WALLET";
+    InstanceRole["VERIFIER"] = "VERIFIER";
+})(InstanceRole || (InstanceRole = {}));
+export var InstanceStatus;
+(function (InstanceStatus) {
+    InstanceStatus["PENDING"] = "PENDING";
+    InstanceStatus["ACTIVE"] = "ACTIVE";
+    InstanceStatus["REVOKED"] = "REVOKED";
+    InstanceStatus["UNATTESTED"] = "UNATTESTED";
+    InstanceStatus["ERROR"] = "ERROR";
+})(InstanceStatus || (InstanceStatus = {}));
 export var KeyRole;
 (function (KeyRole) {
     KeyRole["AUTHENTICATION"] = "AUTHENTICATION";
@@ -357,15 +373,3 @@ export var TrustResolutionResult;
     TrustResolutionResult["UNTRUSTED"] = "UNTRUSTED";
     TrustResolutionResult["UNKNOWN"] = "UNKNOWN";
 })(TrustResolutionResult || (TrustResolutionResult = {}));
-export var WalletProviderType;
-(function (WalletProviderType) {
-    WalletProviderType["PROCIVIS_ONE"] = "PROCIVIS_ONE";
-})(WalletProviderType || (WalletProviderType = {}));
-export var WalletUnitStatus;
-(function (WalletUnitStatus) {
-    WalletUnitStatus["PENDING"] = "PENDING";
-    WalletUnitStatus["ACTIVE"] = "ACTIVE";
-    WalletUnitStatus["REVOKED"] = "REVOKED";
-    WalletUnitStatus["UNATTESTED"] = "UNATTESTED";
-    WalletUnitStatus["ERROR"] = "ERROR";
-})(WalletUnitStatus || (WalletUnitStatus = {}));

package/ios/ProcivisOneCoreModule.m

@@ -39,6 +39,10 @@ RCT_EXTERN_METHOD(getOrganisation:(NSString *)organisationId
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 
+RCT_EXTERN_METHOD(getOrganisationTrustCollections:(NSString *)organisationId
+                  resolver:(RCTPromiseResolveBlock)resolve
+                  rejecter:(RCTPromiseRejectBlock)reject)
+
 RCT_EXTERN_METHOD(generateKey:(NSDictionary *)keyRequest
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
@@ -255,42 +259,20 @@ RCT_EXTERN_METHOD(resolveJsonldContext:(NSString *)url
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 
-RCT_EXTERN_METHOD(holderRegisterWalletUnit:(NSDictionary *)request
-                  resolver:(RCTPromiseResolveBlock)resolve
-                  rejecter:(RCTPromiseRejectBlock)reject)
-
-RCT_EXTERN_METHOD(holderActivateWalletUnit:(NSString *)unitId
-                  request:(NSDictionary *)request
-                  resolver:(RCTPromiseResolveBlock)resolve
-                  rejecter:(RCTPromiseRejectBlock)reject)
-
-RCT_EXTERN_METHOD(holderWalletUnitStatus:(NSString *)walletUnitId
+RCT_EXTERN_METHOD(holderRegisterInstance:(NSDictionary *)request
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 
-RCT_EXTERN_METHOD(holderGetWalletUnit:(NSString *)walletUnitId
-                  resolver:(RCTPromiseResolveBlock)resolve
-                  rejecter:(RCTPromiseRejectBlock)reject)
-
-RCT_EXTERN_METHOD(holderWalletUnitUpdate:(NSString *)walletUnitId
+RCT_EXTERN_METHOD(holderActivateInstance:(NSString *)instanceId
                   request:(NSDictionary *)request
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 
-RCT_EXTERN_METHOD(holderGetWalletUnitTrustCollections:(NSString *)walletUnitId
-                  resolver:(RCTPromiseResolveBlock)resolve
-                  rejecter:(RCTPromiseRejectBlock)reject)
-
-RCT_EXTERN_METHOD(registerVerifierInstance:(NSDictionary *)request
-                  resolver:(RCTPromiseResolveBlock)resolve
-                  rejecter:(RCTPromiseRejectBlock)reject)
-
-RCT_EXTERN_METHOD(updateVerifierInstance:(NSString *)verifierInstanceId
-                  request:(NSDictionary *)request
+RCT_EXTERN_METHOD(holderInstanceStatus:(NSString *)instanceId
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 
-RCT_EXTERN_METHOD(getVerifierInstanceTrustCollections:(NSString *)verifierInstanceId
+RCT_EXTERN_METHOD(holderGetInstance:(NSString *)instanceId
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 

package/ios/ProcivisOneCoreModule.swift

@@ -788,113 +788,63 @@ class ProcivisOneCoreModule: RCTEventEmitter {
     }
   }
 
-  @objc(holderRegisterWalletUnit:resolver:rejecter:)
-  func holderRegisterWalletUnit(
+  @objc(holderRegisterInstance:resolver:rejecter:)
+  func holderRegisterInstance(
     request: NSDictionary,
     resolve: @escaping RCTPromiseResolveBlock,
     reject: @escaping RCTPromiseRejectBlock
   ) {
     asyncCall(resolve, reject) {
-      let result = try await self.getCore().holderRegisterWalletUnit(request: try deserialize(request))
+      let result = try await self.getCore().holderRegisterInstance(request: try deserialize(request))
       return try serializeAny(result)
     }
   }
 
-  @objc(holderActivateWalletUnit:request:resolver:rejecter:)
-  func holderActivateWalletUnit(
+  @objc(holderActivateInstance:request:resolver:rejecter:)
+  func holderActivateInstance(
     id: String,
     request: NSDictionary,
     resolve: @escaping RCTPromiseResolveBlock,
     reject: @escaping RCTPromiseRejectBlock
   ) {
     asyncCall(resolve, reject) {
-      try await self.getCore().holderActivateWalletUnit(id: id, request: try deserialize(request))
-      return nil as NSDictionary?
-    }
-  }
-
-  @objc(holderWalletUnitStatus:resolver:rejecter:)
-  func holderWalletUnitStatus(
-    walletUnitId: String,
-    resolve: @escaping RCTPromiseResolveBlock,
-    reject: @escaping RCTPromiseRejectBlock
-  ) {
-    asyncCall(resolve, reject) {
-      try await self.getCore().holderWalletUnitStatus(id: walletUnitId)
-      return nil as NSDictionary?
-    }
-  }
-
-  @objc(holderWalletUnitUpdate:request:resolver:rejecter:)
-  func holderWalletUnitUpdate(
-    walletUnitId: String,
-    request: NSDictionary,
-    resolve: @escaping RCTPromiseResolveBlock,
-    reject: @escaping RCTPromiseRejectBlock
-  ) {
-    asyncCall(resolve, reject) {
-      try await self.getCore().holderWalletUnitUpdate(id: walletUnitId, request: try deserialize(request))
-      return nil as NSDictionary?
-    }
-  }
-
-  @objc(holderGetWalletUnit:resolver:rejecter:)
-  func holderGetWalletUnit(
-    walletUnitId: String,
-    resolve: @escaping RCTPromiseResolveBlock,
-    reject: @escaping RCTPromiseRejectBlock
-  ) {
-    asyncCall(resolve, reject) {
-      let result = try await self.getCore().holderGetWalletUnit(id: walletUnitId)
+      let result = try await self.getCore().holderActivateInstance(id: id, request: try deserialize(request))
       return try serializeAny(result)
     }
   }
 
-  @objc(holderGetWalletUnitTrustCollections:resolver:rejecter:)
-  func holderGetWalletUnitTrustCollections(
-    walletUnitId: String,
+  @objc(holderInstanceStatus:resolver:rejecter:)
+  func holderInstanceStatus(
+    instanceId: String,
     resolve: @escaping RCTPromiseResolveBlock,
     reject: @escaping RCTPromiseRejectBlock
   ) {
     asyncCall(resolve, reject) {
-      let result = try await self.getCore().holderGetWalletUnitTrustCollections(id: walletUnitId)
-      return try serializeAny(result)
+      try await self.getCore().holderInstanceStatus(id: instanceId)
+      return nil as NSDictionary?
     }
   }
 
-  @objc(registerVerifierInstance:resolver:rejecter:)
-  func registerVerifierInstance(
-    request: NSDictionary,
+  @objc(holderGetInstance:resolver:rejecter:)
+  func holderGetInstance(
+    instanceId: String,
     resolve: @escaping RCTPromiseResolveBlock,
     reject: @escaping RCTPromiseRejectBlock
   ) {
     asyncCall(resolve, reject) {
-      let result = try await self.getCore().registerVerifierInstance(request: try deserialize(request))
+      let result = try await self.getCore().holderGetInstance(id: instanceId)
       return try serializeAny(result)
     }
   }
 
-  @objc(updateVerifierInstance:request:resolver:rejecter:)
-  func updateVerifierInstance(
-    verifierInstanceId: String,
-    request: NSDictionary,
-    resolve: @escaping RCTPromiseResolveBlock,
-    reject: @escaping RCTPromiseRejectBlock
-  ) {
-    asyncCall(resolve, reject) {
-      try await self.getCore().updateVerifierInstance(id: verifierInstanceId, request: try deserialize(request))
-      return nil as NSDictionary?
-    }
-  }
-
-  @objc(getVerifierInstanceTrustCollections:resolver:rejecter:)
-  func getVerifierInstanceTrustCollections(
-    verifierInstanceId: String,
+  @objc(getOrganisationTrustCollections:resolver:rejecter:)
+  func getOrganisationTrustCollections(
+    organisationId: String,
     resolve: @escaping RCTPromiseResolveBlock,
     reject: @escaping RCTPromiseRejectBlock
   ) {
     asyncCall(resolve, reject) {
-      let result = try await self.getCore().getVerifierInstanceTrustCollections(id: verifierInstanceId)
+      let result = try await self.getCore().getOrganisationTrustCollections(id: organisationId)
       return try serializeAny(result)
     }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@procivis/react-native-one-core",
-  "version": "1.115964.0",
+  "version": "1.119306.0",
   "author": "Procivis AG (https://procivis.ch)",
   "license": "Apache-2.0",
   "description": "ONE core bindings for React Native",
@@ -37,7 +37,7 @@
     "babel-jest": "^29.5.0",
     "husky": "^7.0.4",
     "jest": "^29.5.0",
-    "react-native": "0.72.17",
+    "react-native": "0.83.0",
     "typedoc": "^0.28.6",
     "typescript": "^5.1.6"
   },