@procivis/react-native-one-core 1.126524.0 → 1.134079.0

package/android/src/main/java/ch/procivis/one/core/ProcivisOneCoreModule.kt

@@ -30,6 +30,7 @@ class ProcivisOneCoreModule(reactContext: ReactApplicationContext) :
             ErrorResponse(
                 "BR_0184",
                 "core not initialized",
+                null,
                 null
             )
         )
@@ -41,6 +42,7 @@ class ProcivisOneCoreModule(reactContext: ReactApplicationContext) :
             ErrorResponse(
                 "BR_0184",
                 "ubiqu not initialized",
+                null,
                 null
             )
         )

package/android/src/main/java/ch/procivis/one/core/SerializeSpecific.kt

@@ -71,8 +71,15 @@ object SerializeSpecific {
                     )
                 }
 
-                is HistoryMetadata.WalletUnitJwt -> {
-                    result.putString("type_", "WALLET_UNIT_JWT")
+                is HistoryMetadata.ManagedInstanceAttestation -> {
+                    result.putString("type_", "MANAGED_INSTANCE_ATTESTATION")
+                    val values = Arguments.createArray()
+                    values.pushString(metadata.v1)
+                    result.putArray("value", values)
+                }
+
+                is HistoryMetadata.WalletAttestation -> {
+                    result.putString("type_", "WALLET_ATTESTATION")
                     val values = Arguments.createArray()
                     values.pushString(metadata.v1)
                     result.putArray("value", values)

package/android/src/main/java/ch/procivis/one/core/Util.kt

@@ -1,12 +1,18 @@
 package ch.procivis.one.core
 
+import android.annotation.SuppressLint
+import android.util.Log
+import ch.procivis.one.core.Serialize.convertToRN
 import com.facebook.react.bridge.Arguments
 import com.facebook.react.bridge.Promise
 import com.facebook.react.bridge.ReadableMap
 import kotlinx.coroutines.CoroutineScope
 import kotlinx.coroutines.launch
 
+@SuppressLint("LogNotTimber")
 object Util {
+    private const val TAG = "ch.procivis.one.core.Util"
+
     // error handling + running core code outside JS thread
     fun syncCall(promise: Promise, function: () -> Any?) {
         object : Thread() {
@@ -36,11 +42,19 @@ object Util {
 
     private fun handleBindingException(promise: Promise, error: OneCoreException.Response) {
         val userInfo = Arguments.createMap()
-        val cause = error.data.cause?.message
-        if (!cause.isNullOrEmpty()) {
-            userInfo.putString("cause", cause)
-        }
 
+        try {
+            error.data.cause?.let { cause ->
+                userInfo.putMap("cause", convertToRN(cause) as ReadableMap)
+            }
+
+            error.data.data?.let { data ->
+                userInfo.putMap("data", convertToRN(data) as ReadableMap)
+            }
+        } catch (error: Throwable) {
+            Log.w(TAG, "Failed to parse error userInfo: $error")
+        }
+        
         promise.reject(
             error.data.code,
             error.data.message,

package/core-sdk.json

@@ -1,16 +1,16 @@
 {
   "android": {
     "debug": {
-      "url": "https://onesdk.blob.core.windows.net/core-sdk/126524/android/onecore-debug.aar",
-      "sha1": "feef82a3e79882cda0339fdcf8fd9e086fb7a349"
+      "url": "https://onesdk.blob.core.windows.net/core-sdk/134079/android/onecore-debug.aar",
+      "sha1": "20b32091288c6ec07e8f92e016ce9824badb4f5d"
     },
     "release": {
-      "url": "https://onesdk.blob.core.windows.net/core-sdk/126524/android/onecore-release.aar",
-      "sha1": "fce0244e6bcb8abb19495818adbed33f17688326"
+      "url": "https://onesdk.blob.core.windows.net/core-sdk/134079/android/onecore-release.aar",
+      "sha1": "6333d2e66b1677a5769863cf502c963894d030b8"
     }
   },
   "ios": {
-    "url": "https://onesdk.blob.core.windows.net/core-sdk/126524/ios/deploy.zip",
-    "sha1": "2b1b11c6f9d1ead1713b92a0819f1d97c58de114"
+    "url": "https://onesdk.blob.core.windows.net/core-sdk/134079/ios/deploy.zip",
+    "sha1": "5a619709874ecd86916d7797ca97ce65194d6f82"
   }
 }

package/dist/index.js

@@ -1,6 +1,6 @@
 import { NativeModules } from "react-native";
 import { OneError } from "./src/error";
-import { interfaceMethodNames } from "./src/core";
+import { interfaceMethodNames, } from "./src/core";
 import * as ubiqu from "./src/ubiqu";
 export * from "./src/core";
 export * from "./src/error";
@@ -18,7 +18,7 @@ if (originalGetConfig) {
         const parsed = objectMap(providers, (entityValue) => objectMap(entityValue, (json) => JSON.parse(json)));
         return {
             globalSettings,
-            ...parsed
+            ...parsed,
         };
     });
 }
@@ -40,18 +40,22 @@ const objectMap = (obj, fn) => Object.fromEntries(Object.entries(obj).map(([k, v
 function wrapFn(fn, operation) {
     return (...args) => {
         const errHandler = (e) => {
-            if (e instanceof Error && "code" in e) {
+            if (e instanceof Error && "code" in e && typeof e.code === "string") {
                 const userInfo = "userInfo" in e && typeof e.userInfo === "object"
                     ? e.userInfo
                     : undefined;
-                const cause = userInfo && "cause" in userInfo && typeof userInfo.cause === "string"
+                const cause = userInfo && "cause" in userInfo && typeof userInfo.cause === "object"
                     ? userInfo.cause
                     : undefined;
+                const data = userInfo && "data" in userInfo && typeof userInfo.data === "object"
+                    ? userInfo.data
+                    : undefined;
                 throw new OneError({
                     operation,
                     code: e.code,
                     message: e.message,
                     cause,
+                    data,
                     originalError: e,
                 });
                 // iOS additional fields: "nativeStackIOS"

package/dist/src/error.d.ts

@@ -1,16 +1,19 @@
+import { ErrorData, Cause } from "./core";
 /**
  * Specific errors being thrown from the {@link ONECore} functions
  */
 export declare class OneError extends Error {
     readonly operation: string;
     readonly code: string;
-    readonly cause?: string;
+    readonly cause?: Cause;
+    readonly data?: ErrorData;
     readonly originalError: Error;
     constructor(params: {
         operation: string;
         code: string;
         message: string;
-        cause?: string;
+        cause?: Cause;
+        data?: ErrorData;
         originalError: Error;
     });
 }

package/dist/src/error.js

@@ -5,12 +5,14 @@ export class OneError extends Error {
     operation;
     code;
     cause;
+    data;
     originalError;
     constructor(params) {
         super(params.message);
         this.operation = params.operation;
         this.code = params.code;
         this.cause = params.cause;
+        this.data = params.data;
         this.originalError = params.originalError;
     }
 }

package/dist/src/one-core-uniffi-intf.d.ts

@@ -102,6 +102,10 @@ export interface Config {
      * management, trust collections, and feature flags.
      */
     walletProvider: Record<string, string>;
+    /**
+     * Configurations from the Verifier Provider, incluiding
+     * version management, ecosystems, and feature flags.
+     */
     verifierProvider: Record<string, string>;
     /** Transaction data types and their capabilities. */
     transactionDataProvider: Record<string, string>;
@@ -110,7 +114,7 @@ export interface Config {
     globalSettings: GlobalSettings;
 }
 export interface ContinueIssuanceResponse {
-    /** For reference. */
+    /** Use with `holderAcceptCredential` and `holderRejectCredential`. */
     interactionId: string;
     /** Key storage required to complete issuance. */
     keyStorageSecurityLevels?: Array<KeyStorageSecurity>;
@@ -120,6 +124,7 @@ export interface ContinueIssuanceResponse {
     requiresWalletInstanceAttestation: boolean;
     /** Protocol used for issuance. */
     protocol: string;
+    /** Ecosystem applied to this interaction. */
     ecosystem?: string;
 }
 export interface CreateCertificateAuthorityRequest {
@@ -139,12 +144,11 @@ export interface CreateCredentialSchemaRequest {
     formats: Array<CredentialSchemaFormatRequest>;
     organisationId: string;
     claims: Array<CredentialClaimSchemaRequest>;
-    keyStorageSecurity?: KeyStorageSecurity;
+    walletAttestation?: CredentialSchemaWalletAttestation;
     layoutProperties?: CredentialSchemaLayoutProperties;
     allowSuspension?: boolean;
     allowRevocation?: boolean;
     batchSize?: number;
-    requiresWalletInstanceAttestation: boolean;
     transactionCode?: CredentialSchemaTransactionCodeRequest;
     translations?: CredentialSchemaTranslations;
     embeddedDisclosurePolicy?: DisclosurePolicyCreateRequest;
@@ -188,20 +192,26 @@ export interface CreateOrganisationRequest {
     /** If no UUID is passed, one will be created. */
     id?: string;
     parentOrganisation?: string;
+    /** Policy-level configuration for this organization. */
+    configuration?: SetOrganisationConfiguration;
 }
 /**
- * If protocol is `ISO_MDL`, specify the device engagement type
- * by referencing an entry from `verificationEngagement` of your
- * configuration. `iso_mdl_engagement` accepts either QR code content
- * (for QR device engagement) or NFC engagement parameters from
- * `nfc_read_iso_mdl_engagement`.
+ * If `protocol` is `ISO_MDL`, also set `engagement`, `isoMdlEngagement`,
+ * and `transport`.
  */
 export interface CreateProofRequest {
     /** Choose a proof schema to use. */
     proofSchemaId: string;
     /** Deprecated. Use `verifierIdentifierId`. */
     verifierDidId?: string;
-    /** Choose the identifier to use to make the request. */
+    /**
+     * Choose the identifier to use to make the request. Either this or
+     * the deprecated `verifierDidId` must be set.
+     *
+     * For `ISO_MDL`, a certificate identifier enables reader
+     * authentication, so the wallet can verify who is asking. Key
+     * identifiers are not allowed.
+     */
     verifierIdentifierId?: string;
     /**
      * Choose the protocol to use for verification. Check the
@@ -223,27 +233,56 @@ export interface CreateProofRequest {
     verifierKey?: string;
     /**
      * If the identifier contains multiple certificates, use this to
-     * specify which key to use. If omitted, the first suitable
+     * specify which certificate to use. If omitted, the first suitable
      * certificate is used.
      */
     verifierCertificate?: string;
-    /** Use to specify device engagement type. */
+    /**
+     * For `ISO_MDL`, the device engagement data received from the
+     * wallet: the scanned QR code content, or the result of
+     * `nfcReadIsoMdlEngagement`.
+     */
     isoMdlEngagement?: string;
     /**
      * Choose the transport protocol for the exchange. Check the
      * `transport` object of your configuration for supported
-     * options and reference the configuration instance.
+     * options and reference the configuration instance. For
+     * `ISO_MDL`, use `BLE`.
      */
     transport?: Array<string>;
-    /** Country profile to associate with this request. */
+    /**
+     * Country profile to associate with this request. See
+     * [Country Profiles](https://docs.procivis.ch/profiles) for more
+     * information.
+     */
     profile?: string;
-    /** Use for ISO mDL verification over BLE. */
+    /**
+     * For `ISO_MDL`, the device engagement method used to receive
+     * `isoMdlEngagement`, such as `NFC` or `QR_CODE`. Reference an
+     * entry from the `verificationEngagement` object of your configuration.
+     */
     engagement?: string;
-    /** Optional transaction data to request authorization for. */
+    /**
+     * Optional transaction data to request authorization for. Only
+     * supported for OpenID4VP. See
+     * [Transaction Authorization for Verifiers](https://docs.procivis.ch/verify/transaction-authorization)
+     * for more information.
+     */
     transactionData?: Array<ProofRequestTransactionData>;
+    /**
+     * Use this to enforce the constraints of a regulatory ecosystem
+     * for this request. See
+     * [Enforcing an Ecosystem as a Verifier](https://docs.procivis.ch/verify/ecosystem-enforcement)
+     * for more information.
+     */
     ecosystem?: string;
 }
 export interface CreateProofSchemaInput {
+    /**
+     * Formatter provider names selected for this input. If omitted, all
+     * formats of the credential schema are selected.
+     */
+    formats?: Array<string>;
     credentialSchemaId: string;
     claimSchemas: Array<CreateProofSchemaInputClaim>;
 }
@@ -331,7 +370,8 @@ export interface CredentialDetail {
     trustInformation?: TrustInformation;
     consumedAt?: string;
     type: CredentialType;
-    remainingBatchItemCount?: number;
+    remainingBatchItemCount?: Record<string, number>;
+    format?: string;
     parentId?: string;
     ecosystem?: string;
 }
@@ -368,6 +408,7 @@ export interface CredentialListItem {
     profile?: string;
     consumedAt?: string;
     type: CredentialType;
+    format?: string;
     parentId?: string;
     redirectUri?: string;
     ecosystem?: string;
@@ -387,6 +428,8 @@ export interface CredentialListQuery {
     name?: string;
     /** Filter by one or more country profiles. */
     profiles?: Array<string>;
+    /** Filter by one or more formatter configuration names. */
+    formats?: Array<string>;
     /** Search for a string. */
     searchText?: string;
     /**
@@ -459,7 +502,12 @@ export interface CredentialListQuery {
     revocationDateBefore?: string;
 }
 export interface CredentialQuery {
+    /** Whether more than one credential can be submitted for this query. */
     multiple: boolean;
+    /**
+     * Either the wallet's credentials that match this query, or the
+     * reason no credential matches.
+     */
     credentialOrFailureHint: ApplicableCredentialOrFailureHint;
 }
 export interface CredentialQueryFailureHint {
@@ -488,13 +536,12 @@ export interface CredentialSchemaDetail {
     formats: Array<CredentialSchemaFormatResponse>;
     organisationId: string;
     claims: Array<ClaimSchema>;
-    keyStorageSecurity?: KeyStorageSecurity;
+    walletAttestation: CredentialSchemaWalletAttestation;
     importedSourceUrl: string;
     layoutProperties?: CredentialSchemaLayoutProperties;
     allowSuspension: boolean;
     allowRevocation?: boolean;
     batchSize?: number;
-    requiresWalletInstanceAttestation: boolean;
     transactionCode?: CredentialSchemaTransactionCode;
     translations: CredentialSchemaTranslations;
     expiration?: number;
@@ -558,13 +605,12 @@ export interface CredentialSchemaListItem {
     lastModified: string;
     name: string;
     formats: Array<CredentialSchemaFormatResponse>;
-    keyStorageSecurity?: KeyStorageSecurity;
+    walletAttestation: CredentialSchemaWalletAttestation;
     importedSourceUrl: string;
     layoutProperties?: CredentialSchemaLayoutProperties;
     allowSuspension: boolean;
     allowRevocation?: boolean;
     batchSize?: number;
-    requiresWalletInstanceAttestation: boolean;
     expiration?: number;
     ecosystem?: string;
     translations?: CredentialSchemaTranslations;
@@ -611,8 +657,22 @@ export interface CredentialSchemaTranslations {
     name: Record<string, string>;
     description?: Record<string, string>;
 }
+export interface CredentialSchemaWalletAttestation {
+    requireInstanceAttestation: boolean;
+    keyStorageSecurityLevel?: KeyStorageSecurity;
+    preferredKeyStorageAttestationLifetime?: number;
+    preferredInstanceAttestationLifetime?: number;
+}
 export interface CredentialSet {
+    /**
+     * Whether this set must be satisfied for the request to be
+     * satisfied.
+     */
     required: boolean;
+    /**
+     * Alternative combinations of credential query IDs. Satisfying any
+     * one combination satisfies the set.
+     */
     options: Array<Array<string>>;
 }
 export interface DeviceInfo {
@@ -723,15 +783,21 @@ export interface EcosystemOutcome {
     /** Why the provider did not trust the interaction. `None` when it did. */
     error?: HistoryErrorMetadata;
 }
+export interface ErrorData {
+    ecosystemErrors?: Record<string, EcosystemOutcome>;
+}
 export interface ErrorResponse {
     code: string;
     message: string;
     cause?: Cause;
+    /** Only set when ecosystems rejected the interaction */
+    data?: ErrorData;
 }
 export interface EudiIntermediary {
     name?: string;
     identifier: string;
-    website: string;
+    supportUrl?: string;
+    infoUrl?: string;
     email?: string;
     phone?: string;
     country: string;
@@ -743,7 +809,9 @@ export interface EudiSupervisoryAuthority {
 }
 export interface EudiTrustInformation {
     name: string;
-    website: string;
+    supportUrl?: string;
+    infoUrl?: string;
+    privacyPolicyUrl?: string;
     email?: string;
     phone?: string;
     country: string;
@@ -800,6 +868,13 @@ export interface HandleInvitationRequest {
      * "myapp://example".
      */
     redirectUri?: string;
+    /**
+     * Use this to enforce the constraints of a regulatory ecosystem
+     * for this interaction. If omitted, every ecosystem available to
+     * the wallet checks the interaction. See
+     * [Enforcing an Ecosystem as a Wallet](https://docs.procivis.ch/hold/ecosystem-enforcement)
+     * for more information.
+     */
     ecosystem?: string;
 }
 export interface HistoryErrorMetadata {
@@ -901,6 +976,15 @@ export interface HolderAcceptCredentialRequest {
     interactionId: string;
     /** Deprecated. Use `identifierId`. */
     didId?: string;
+    /**
+     * Pass nothing here for the recommended key auto-generation. See
+     * [Auto-generate Keys for Issuance](https://docs.procivis.ch/configure/auto-generate-keys)
+     * for more information.
+     *
+     * Alternatively, choose an existing identifier to hold the credential.
+     * If neither this nor the deprecated `didId` is set, the system generates
+     * a new identifier that matches the issuer's restrictions.
+     */
     identifierId?: string;
     /**
      * If you are using an identifier with multiple keys for authentication,
@@ -919,7 +1003,7 @@ export interface HolderAcceptCredentialResponse {
      * Only set when several configurations were offered.
      */
     partiallySuccessful?: boolean;
-    /** One entry per ecosystem provider consulted, keyed by provider id. */
+    /** One entry per ecosystem provider that rejected the artifact, keyed by provider id. */
     ecosystemErrors: Record<string, EcosystemOutcome>;
 }
 export interface HolderActivateInstanceRequest {
@@ -1086,11 +1170,10 @@ export interface ImportCredentialSchemaRequestSchema {
     formats: Array<ImportCredentialSchemaFormat>;
     organisationId: string;
     claims: Array<ImportCredentialSchemaClaimSchema>;
-    keyStorageSecurity?: KeyStorageSecurity;
+    walletAttestation?: CredentialSchemaWalletAttestation;
     importedSourceUrl: string;
     layoutProperties?: ImportCredentialSchemaLayoutProperties;
     allowSuspension?: boolean;
-    requiresWalletInstanceAttestation?: boolean;
     transactionCode?: ImportCredentialSchemaTransactionCode;
     allowRevocation?: boolean;
     batchSize?: number;
@@ -1121,6 +1204,7 @@ export interface ImportProofSchema {
     importedSourceUrl: string;
     /** Set of all claims to request. */
     proofInputSchemas: Array<ImportProofSchemaInputSchema>;
+    ecosystem?: string;
 }
 export interface ImportProofSchemaClaimSchema {
     id: string;
@@ -1145,8 +1229,14 @@ export interface ImportProofSchemaCredentialSchema {
     layoutProperties?: CredentialSchemaLayoutProperties;
     allowSuspension?: boolean;
     requiresWalletInstanceAttestation?: boolean;
+    ecosystem?: string;
 }
 export interface ImportProofSchemaInputSchema {
+    /**
+     * Formatter provider names selected for this input. Defaulting
+     * to all formats of the resolved credential schema if omitted.
+     */
+    formats?: Array<string>;
     claimSchemas: Array<ImportProofSchemaClaimSchema>;
     credentialSchema: ImportProofSchemaCredentialSchema;
 }
@@ -1185,6 +1275,12 @@ export interface InitiateIssuanceRequest {
     scope?: Array<string>;
     /** OpenID4VCI authorization request parameter. */
     authorizationDetails?: Array<InitiateIssuanceAuthorizationDetail>;
+    /**
+     * Use this to enforce the constraints of a regulatory ecosystem
+     * for this issuance. See
+     * [Enforcing an Ecosystem as a Wallet](https://docs.procivis.ch/hold/ecosystem-enforcement)
+     * for more information.
+     */
     ecosystem?: string;
 }
 export interface InitiateIssuanceResponse {
@@ -1313,16 +1409,39 @@ export interface PresentationDefinitionTransactionData {
     type: string;
     credentialQueryIds: Array<string>;
 }
+/**
+ * What a proof request asks for, together with the wallet's credentials
+ * that can satisfy it.
+ */
 export interface PresentationDefinitionV2 {
+    /**
+     * One entry per requested credential, keyed by credential query ID.
+     * Use these IDs as the keys of the submission for
+     * `holderSubmitProofV2`.
+     */
     credentialQueries: Record<string, CredentialQuery>;
+    /** Combinations of credential queries that satisfy the request. */
     credentialSets: Array<CredentialSet>;
+    /**
+     * Transaction data entries attached to the request. Get the details
+     * of an entry with `holderGetTransactionData`.
+     */
     transactionData: Array<PresentationDefinitionTransactionData>;
 }
 export interface PresentationDefinitionV2Claim {
+    /** Path of the claim. Use it in `userSelections` when submitting. */
     path: string;
     schema: ClaimSchemaInfo;
     value: PresentationDefinitionV2ClaimValue;
+    /**
+     * Whether the holder can choose whether to share this claim. To
+     * share it, include its `path` in `userSelections` when submitting.
+     */
     userSelection: boolean;
+    /**
+     * Whether the verifier marked this claim as required. Always
+     * `false` for `ISO_MDL` requests.
+     */
     required: boolean;
 }
 export interface PresentationDefinitionV2Credential {
@@ -1343,6 +1462,7 @@ export interface PresentationDefinitionV2Credential {
     mdocMsoValidity?: MdocMsoValidity;
     protocol: string;
     profile?: string;
+    format?: string;
     /**
      * Present when the relying party's certificates do not satisfy
      * the embedded disclosure policy attached to the requested
@@ -1364,9 +1484,11 @@ export interface PresentationSubmitV2CredentialRequest {
     userSelections?: Array<string>;
     /**
      * Optional ids of transaction-data entries to bind to this credential.
-     * Entries not listed here are auto-assigned. Ids must reference transaction
+     * Entries not listed here are auto-assigned. IDs must reference transaction
      * data applicable to this credential. Omit entirely or use an empty array
-     * to auto-assign all transaction data.
+     * to auto-assign all transaction data. See
+     * [Transaction Authorization for Wallets](https://docs.procivis.ch/hold/transaction-authorization)
+     * for more information.
      */
     transactionDataIds?: Array<string>;
 }
@@ -1419,12 +1541,26 @@ export interface ProofDetail {
     completedDate?: string;
     /** When claim data was deleted. */
     claimsRemovedAt?: string;
-    /** Country profile associated with this request. */
+    /**
+     * Country profile associated with this request. See
+     * [Country Profiles](https://docs.procivis.ch/profiles) for more
+     * information.
+     */
     profile?: string;
     /** Trust information of the verifier, if any. */
     trustInformation?: TrustInformation;
-    /** Transaction data attached to this proof request. Present only if the proof role is `VERIFIER`. */
+    /**
+     * Transaction data attached to this proof request. Present only if the proof
+     * role is `VERIFIER`. See
+     * [Transaction Authorization for Verifiers](https://docs.procivis.ch/verify/transaction-authorization)
+     * for more information.
+     */
     transactionData?: Array<TransactionDataResponse>;
+    /**
+     * Ecosystem applied to this request. See
+     * [Ecosystems](https://docs.procivis.ch/ecosystems)
+     * for more information.
+     */
     ecosystem?: string;
 }
 export interface ProofInput {
@@ -1438,6 +1574,8 @@ export interface ProofInput {
     trustInformation?: TrustInformation;
 }
 export interface ProofInputSchema {
+    /** Formatter provider names saved for this proof input. */
+    formats: Array<string>;
     claimSchemas: Array<ProofClaimSchema>;
     credentialSchema: CredentialSchemaInfo;
 }
@@ -1471,8 +1609,17 @@ export interface ProofListItem {
      * proof schema.
      */
     retainUntilDate?: string;
-    /** Country profile associated with this request. */
+    /**
+     * Country profile associated with this request. See
+     * [Country Profiles](https://docs.procivis.ch/profiles) for more
+     * information.
+     */
     profile?: string;
+    /**
+     * Ecosystem applied to this request. See
+     * [Ecosystems](https://docs.procivis.ch/ecosystems)
+     * for more information.
+     */
     ecosystem?: string;
     redirectUri?: string;
 }
@@ -1489,8 +1636,17 @@ export interface ProofListQuery {
     sortDirection?: SortDirection;
     /** Return only proof requests with a name starting with this string. */
     name?: string;
-    /** Filter by one or more country profiles. */
+    /**
+     * Filter by one or more country profiles. See
+     * [Country Profiles](https://docs.procivis.ch/profiles) for more
+     * information.
+     */
     profiles?: Array<string>;
+    /**
+     * Filter by ecosystem applied to proof. See
+     * [Ecosystems](https://docs.procivis.ch/ecosystems)
+     * for more information.
+     */
     ecosystems?: Array<string>;
     /** Filter by one or more UUIDs. */
     ids?: Array<string>;
@@ -1536,12 +1692,12 @@ export interface ProofListQuery {
      */
     requestedDateBefore?: string;
     /**
-     * Return only proofs requested completed after this time. Timestamp in
+     * Return only proofs completed after this time. Timestamp in
      * RFC 3339 format (for example `2023-06-09T14:19:57.000Z`).
      */
     completedDateAfter?: string;
     /**
-     * Return only proofs requested completed before this time. Timestamp in
+     * Return only proofs completed before this time. Timestamp in
      * RFC 3339 format (for example `2023-06-09T14:19:57.000Z`).
      */
     completedDateBefore?: string;
@@ -1633,15 +1789,44 @@ export interface ProofTransactionData {
     rawTransactionData?: string;
 }
 export interface ProposeProofRequest {
+    /**
+     * Choose the protocol to use. Check the `verificationProtocol`
+     * object of your configuration for supported options and reference
+     * the configuration instance.
+     */
     protocol: string;
+    /** Specifies the organizational context for this operation. */
     organisationId: string;
+    /**
+     * The device engagement method to offer. Reference one or more entries
+     * from the `verificationEngagement` object of your configuration.
+     */
     engagement: Array<string>;
+    /**
+     * Text shown on the iOS system overlay during NFC engagement. Has
+     * no effect for QR code engagement or on Android.
+     */
     uiMessage?: string;
+    /**
+     * Use this to enforce the constraints of a regulatory ecosystem
+     * for this presentation. See
+     * [Enforcing an Ecosystem as a Wallet](https://docs.procivis.ch/hold/ecosystem-enforcement)
+     * for more information.
+     */
     ecosystem?: string;
 }
 export interface ProposeProofResponse {
+    /**
+     * ID of the proof, created in `PENDING` state. Use it with
+     * `getProof` and `getPresentationDefinitionV2`.
+     */
     proofId: string;
+    /** Use with `holderSubmitProofV2` and `holderRejectProof`. */
     interactionId: string;
+    /**
+     * For QR code engagement, the device engagement data to display as a
+     * QR code. Not returned for NFC engagement.
+     */
     url?: string;
 }
 export interface QesAuthorizeRequest {
@@ -1698,6 +1883,25 @@ export interface ServiceDescription {
     advertisedServiceData?: number[];
     characteristics: Array<CharacteristicSettings>;
 }
+export interface SetOrganisationConfiguration {
+    selectedEcosystems?: Array<string>;
+    /**
+     * When true, the issuer will only issue credentials to wallet units of one of
+     * the selected ecosystems.
+     */
+    enforceEcosystemAsIssuer?: boolean;
+    /**
+     * When true, the wallet only accepts issuance and presentation requests
+     * from members of one of the selected ecosystems.
+     */
+    enforceEcosystemAsHolder?: boolean;
+    /**
+     * When true, the verifier will only accept presentations of credentials
+     * issued by issuers of the selected ecosystems. Ecosystems must be consistent
+     * across presentations belonging to the same proof request.
+     */
+    enforceEcosystemAsVerifier?: boolean;
+}
 export interface ShareProofRequest {
     params?: ShareProofRequestParams;
 }
@@ -1734,14 +1938,14 @@ export interface TrustInformation {
     receivedAt: string;
     name?: string;
     result: TrustResolutionResult;
-    /** One entry per ecosystem provider consulted, keyed by provider id. */
+    /** One entry per ecosystem provider that rejected the artifact, keyed by provider id. */
     ecosystemErrors: Record<string, EcosystemOutcome>;
 }
 export interface TrustInformationDetail {
     ecosystem?: string;
     issuer?: TrustInformationDetailInfo;
     verifier?: TrustInformationDetailInfo;
-    /** One entry per ecosystem provider consulted, keyed by provider id. */
+    /** One entry per ecosystem provider that rejected the artifact, keyed by provider id. */
     ecosystemErrors: Record<string, EcosystemOutcome>;
 }
 export interface TrustResolutionMetadata {
@@ -1757,25 +1961,6 @@ export interface UnexportableEntities {
     totalDids: number;
     totalIdentifiers: number;
 }
-export interface UpsertOrganisationConfiguration {
-    selectedEcosystems?: Array<string>;
-    /**
-     * When true, the issuer will only issue credentials to wallet units of one of
-     * the selected ecosystems.
-     */
-    enforceEcosystemAsIssuer?: boolean;
-    /**
-     * When true, the wallet only accepts issuance and presentation requests
-     * from members of one of the selected ecosystems.
-     */
-    enforceEcosystemAsHolder?: boolean;
-    /**
-     * When true, the verifier will only accept presentations of credentials
-     * issued by issuers of the selected ecosystems. Ecosystems must be consistent
-     * across presentations belonging to the same proof request.
-     */
-    enforceEcosystemAsVerifier?: boolean;
-}
 export interface UpsertOrganisationRequest {
     /** Unique identifier of the organization to create or update. */
     id: string;
@@ -1790,7 +1975,7 @@ export interface UpsertOrganisationRequest {
     /** Verifier Provider use only. */
     verifierProviderIssuer?: string | null;
     /** Policy-level configuration for this organization. */
-    configuration?: UpsertOrganisationConfiguration;
+    configuration?: SetOrganisationConfiguration;
     /**
      * The trust collections this organization's wallet subscribes to,
      * selected from those made available by the Wallet Provider. Omit to
@@ -1862,11 +2047,15 @@ export interface WalletProviderDetail {
 export interface WalletRelyingPartyMetadata {
     name?: string;
 }
-export type ApplicableCredentialOrFailureHint = {
+export type ApplicableCredentialOrFailureHint = 
+/** The wallet's credentials that match the query. */
+{
     type_: "APPLICABLE_CREDENTIALS";
     applicableCredentials: Array<PresentationDefinitionV2Credential>;
     purpose?: Record<string, string>;
-} | {
+}
+/** Why no credential in the wallet matches the query. */
+ | {
     type_: "FAILURE_HINT";
     failureHint: CredentialQueryFailureHint;
 };
@@ -2012,8 +2201,17 @@ export declare enum CredentialListQuerySearchType {
     CREDENTIAL_SCHEMA_NAME = "CREDENTIAL_SCHEMA_NAME"
 }
 export declare enum CredentialQueryFailureReason {
+    /** The wallet holds no credential of the requested type. */
     NO_CREDENTIAL = "NO_CREDENTIAL",
+    /**
+     * Credentials of the requested type exist, but none is currently
+     * valid.
+     */
     VALIDITY = "VALIDITY",
+    /**
+     * Credentials of the requested type exist, but none satisfies the
+     * constraints of the request.
+     */
     CONSTRAINT = "CONSTRAINT"
 }
 export declare enum CredentialRole {
@@ -2074,7 +2272,7 @@ export declare enum EcosystemTrustResult {
 }
 export type HandleInvitationResponse = {
     type_: "CREDENTIAL_ISSUANCE";
-    /** For reference. */
+    /** Use with `holderAcceptCredential` and `holderRejectCredential`. */
     interactionId: string;
     /** Key storage required to complete issuance. */
     keyStorageSecurityLevels?: Array<KeyStorageSecurity>;
@@ -2091,8 +2289,9 @@ export type HandleInvitationResponse = {
     protocol: string;
     /** Whether a valid WIA is required to complete issuance. */
     requiresWalletInstanceAttestation: boolean;
+    /** Ecosystem applied to this interaction. */
     ecosystem?: string;
-    /** One entry per ecosystem provider consulted, keyed by provider id. */
+    /** One entry per ecosystem provider that rejected the artifact, keyed by provider id. */
     ecosystemErrors: Record<string, EcosystemOutcome>;
 } | {
     type_: "AUTHORIZATION_CODE_FLOW";
@@ -2105,19 +2304,24 @@ export type HandleInvitationResponse = {
     authorizationCodeFlowUrl: string;
     /** Protocol used for issuance. */
     protocol: string;
+    /** Ecosystem applied to this interaction. */
     ecosystem?: string;
-    /** One entry per ecosystem provider consulted, keyed by provider id. */
+    /** One entry per ecosystem provider that rejected the artifact, keyed by provider id. */
     ecosystemErrors: Record<string, EcosystemOutcome>;
 } | {
     type_: "PROOF_REQUEST";
-    /** For reference. */
+    /** Use with `holderSubmitProofV2` and `holderRejectProof`. */
     interactionId: string;
-    /** Proof request. */
+    /**
+     * ID of the proof request. Use it with `getProof` and
+     * `getPresentationDefinitionV2`.
+     */
     proofId: string;
     /** Protocol used for issuance. */
     protocol: string;
+    /** Ecosystem applied to this interaction. */
     ecosystem?: string;
-    /** One entry per ecosystem provider consulted, keyed by provider id. */
+    /** One entry per ecosystem provider that rejected the artifact, keyed by provider id. */
     ecosystemErrors: Record<string, EcosystemOutcome>;
 };
 export declare enum HistoryAction {
@@ -2156,7 +2360,10 @@ export declare enum HistoryAction {
     TRUST_RESOLVED = "TRUST_RESOLVED",
     ECOSYSTEMS_RESOLVED = "ECOSYSTEMS_RESOLVED",
     REFRESHED = "REFRESHED",
-    SIGNED = "SIGNED"
+    SIGNED = "SIGNED",
+    KA_CREATED = "KA_CREATED",
+    WIA_CREATED = "WIA_CREATED",
+    CLIENT_SECRET_REGENERATED = "CLIENT_SECRET_REGENERATED"
 }
 export declare enum HistoryEntityType {
     KEY = "KEY",
@@ -2169,7 +2376,8 @@ export declare enum HistoryEntityType {
     PROOF_SCHEMA = "PROOF_SCHEMA",
     ORGANISATION = "ORGANISATION",
     BACKUP = "BACKUP",
-    WALLET_UNIT = "WALLET_UNIT",
+    INSTANCE = "INSTANCE",
+    MANAGED_INSTANCE = "MANAGED_INSTANCE",
     USER = "USER",
     PROVIDER = "PROVIDER",
     WALLET_RELYING_PARTY = "WALLET_RELYING_PARTY",
@@ -2193,7 +2401,10 @@ export type HistoryMetadata = {
     type_: "ERROR_METADATA";
     value: HistoryErrorMetadata;
 } | {
-    type_: "WALLET_UNIT_JWT";
+    type_: "MANAGED_INSTANCE_ATTESTATION";
+    value: [string];
+} | {
+    type_: "WALLET_ATTESTATION";
     value: [string];
 } | {
     type_: "WALLET_RELYING_PARTY";
@@ -2201,10 +2412,9 @@ export type HistoryMetadata = {
 } | {
     type_: "TRUST_RESOLUTION";
     value: TrustResolutionMetadata;
-}
-/** One entry per ecosystem provider consulted, keyed by provider id. */
- | {
+} | {
     type_: "ECOSYSTEMS_RESOLVED";
+    /** One entry per ecosystem provider consulted, keyed by provider id. */
     value: Record<string, EcosystemOutcome>;
 };
 export declare enum HistorySearchType {
@@ -2328,20 +2538,62 @@ export declare enum ProofListQueryExactColumn {
     NAME = "NAME"
 }
 export declare enum ProofRole {
+    /** The system received this request. */
     HOLDER = "HOLDER",
+    /** The system made this request. */
     VERIFIER = "VERIFIER"
 }
 export declare enum ProofSchemaListQueryExactColumn {
     NAME = "NAME"
 }
+/**
+ * State of a proof request. Some states mean something different
+ * depending on whether the system is the holder or the verifier of the
+ * request. See [Proof States as a Verifier](https://docs.procivis.ch/verify/states)
+ * and [Proof States as a Holder](https://docs.procivis.ch/hold/manage-credentials-requests#proof-request-states-as-a-holder)
+ * for complete state diagrams.
+ */
 export declare enum ProofState {
+    /**
+     * For verifiers, the request was created but not yet shared with a
+     * wallet.
+     */
     CREATED = "CREATED",
+    /**
+     * Waiting for the other party. For verifiers, the request was shared
+     * or, for `ISO_MDL`, created from the wallet's engagement data. For
+     * holders, device engagement was started with `proposeProof`.
+     */
     PENDING = "PENDING",
+    /**
+     * The request reached the wallet and is waiting for the holder to
+     * respond.
+     */
     REQUESTED = "REQUESTED",
+    /**
+     * For verifiers, the presentation was received and verified. For
+     * holders, the presentation was submitted.
+     */
     ACCEPTED = "ACCEPTED",
+    /**
+     * The holder rejected the request. Not all protocols report a
+     * rejection to the verifier.
+     */
     REJECTED = "REJECTED",
+    /**
+     * The request was cancelled with `deleteProof` after it reached
+     * `REQUESTED`. The history of the interaction is retained.
+     */
     RETRACTED = "RETRACTED",
+    /**
+     * A technical error occurred or, for verifiers, the presentation
+     * could not be verified.
+     */
     ERROR = "ERROR",
+    /**
+     * For verifiers, the shared request expired before a wallet
+     * connected. Share it again with `shareProof`.
+     */
     INTERACTION_EXPIRED = "INTERACTION_EXPIRED"
 }
 export declare enum SortDirection {
@@ -2526,9 +2778,15 @@ export interface OneCore {
     /** Creates an organization. */
     createOrganisation(request: CreateOrganisationRequest): Promise<string>;
     /**
-     * For verifiers, creates a proof request. Choose what information to
-     * request via a proof schema, an identifier, and which protocol to use
-     * for making the request.
+     * For verifiers, creates a proof request and returns its ID. Choose
+     * what information to request via a proof schema, an identifier, and
+     * which protocol to use for making the request.
+     *
+     * For online protocols, the request is created in `CREATED` state;
+     * share it with the wallet using `shareProof`. For `ISO_MDL`, the
+     * wallet starts the exchange: pass the device engagement data from the
+     * wallet in `isoMdlEngagement`. The request is created directly in
+     * `PENDING` state and needs no sharing.
      */
     createProof(request: CreateProofRequest): Promise<string>;
     /**
@@ -2551,8 +2809,16 @@ export interface OneCore {
     /**
      * Deletes an incomplete proof request. If the request is in `REQUESTED`
      * state the proof is retracted instead, retaining history of the interaction.
+     *
+     * For `ISO_MDL`, this also closes the BLE session.
      */
     deleteProof(proofId: string): Promise<void>;
+    /**
+     * Deletes the claim data shared by the wallet holder for a proof
+     * request, without waiting for the retention period set by the
+     * `expireDuration` of the proof schema. The proof request itself is
+     * kept, and `claimsRemovedAt` records when the claims were deleted.
+     */
     deleteProofClaims(proofId: string): Promise<void>;
     deleteProofSchema(proofSchemaId: string): Promise<void>;
     /**
@@ -2587,8 +2853,21 @@ export interface OneCore {
      * offered to it.
      */
     getOrganisation(id: string): Promise<OrganisationDetail>;
+    /**
+     * For wallets, returns what a proof request asks for and which of the
+     * wallet's credentials can satisfy it. Use the result to build the
+     * submission for `holderSubmitProofV2`.
+     *
+     * For `ISO_MDL` requests, every claim has `required: false`, since the
+     * protocol cannot mark claims as mandatory. An incomplete submission
+     * may be rejected if the verifier requires claims not submitted.
+     */
     getPresentationDefinitionV2(proofId: string): Promise<PresentationDefinitionV2>;
-    /** Returns detailed information about a proof request. */
+    /**
+     * Returns detailed information about a proof request.
+     *
+     * Poll this method to follow the state of the request.
+     */
     getProof(proofId: string): Promise<ProofDetail>;
     getProofSchema(proofSchemaId: string): Promise<ProofSchemaDetail>;
     /**
@@ -2600,6 +2879,9 @@ export interface OneCore {
      * For a wallet, handles the interaction once the wallet connects to a share
      * endpoint URL (for example, scans the QR code of an offered credential or
      * request for proof).
+     *
+     * Not for use with `ISO_MDL` proximity flows, where the wallet initiates the
+     * flow using `proposeProof` instead.
      */
     handleInvitation(request: HandleInvitationRequest): Promise<HandleInvitationResponse>;
     /**
@@ -2616,25 +2898,41 @@ export interface OneCore {
      * For wallets; returns the details of a single transaction data entry of a
      * proof request, including human-readable display data and the raw
      * transaction data received from the verifier. The `transactionDataId` is
-     * obtained from `getPresentationDefinitionv2`.
+     * obtained from `getPresentationDefinitionV2`. See
+     * [Transaction Authorization for Wallets](https://docs.procivis.ch/hold/transaction-authorization)
+     * for more information.
      */
     holderGetTransactionData(proofId: string, transactionDataId: string): Promise<ProofTransactionData>;
     /**
-     * Check status of the instance with the provider. Will return an error
-     * if the instance has been revoked.
+     * Checks the status of an instance with the provider. Successful calls return `204`.
+     * To see the result, call `holderGetInstance`.
      */
     holderInstanceStatus(id: string): Promise<void>;
-    /** Receive a new credential batch */
+    /** Request a new credential batch. */
     holderRefreshCredential(interactionId: string): Promise<HolderRefreshCredentialResponse>;
     /** Registers the instance with a Wallet or Verifier Provider. */
     holderRegisterInstance(request: HolderRegisterInstanceRequest): Promise<HolderRegisterInstanceResponse>;
-    /** Rejects offered credentials. Without `credential_ids`, all credentials of the interaction are rejected. */
+    /**
+     * Rejects credentials or individual batch items. Selecting a batch parent rejects all its items.
+     * Without `credential_ids`, all credentials of the interaction are rejected.
+     * A batch format is notified as rejected and excluded from refreshes only when all its items are rejected.
+     */
     holderRejectCredential(interactionId: string, credentialIds: Array<string> | undefined): Promise<void>;
-    /** Rejects a proof request. */
+    /**
+     * For wallets, rejects a proof request. Pass the `interactionId` of
+     * the request, not the proof ID.
+     *
+     * For `ISO_MDL`, the wallet sends an empty response to the verifier and
+     * closes the BLE session.
+     */
     holderRejectProof(interactionId: string): Promise<void>;
     /**
-     * Submits a presentation using DCQL as a query language; this should
-     * be used after `getPresentationDefinitionv2`.
+     * For wallets, submits a presentation using DCQL as a query language.
+     * Use this after `getPresentationDefinitionV2`. Pass the
+     * `interactionId` of the request, not the proof ID.
+     *
+     * `submission` maps each credential query ID from the presentation
+     * definition to the credentials chosen for it.
      */
     holderSubmitProofV2(interactionId: string, submission: Record<string, Array<PresentationSubmitV2CredentialRequest>>): Promise<void>;
     /**
@@ -2666,6 +2964,11 @@ export interface OneCore {
      * For wallets, initiates device engagement for offline flows. Reference
      * the `verificationEngagement` entry of your configuration for your
      * options for `engagement`.
+     *
+     * For `ISO_MDL`, this creates a proof in `PENDING` state and starts BLE
+     * according to the `bleMode` set in your configuration. Poll `getProof`
+     * until the state is `REQUESTED`, then call
+     * `getPresentationDefinitionV2`.
      */
     proposeProof(request: ProposeProofRequest): Promise<ProposeProofResponse>;
     /**
@@ -2701,7 +3004,7 @@ export interface OneCore {
     shareCredentialSchema(credentialSchemaId: string): Promise<CredentialSchemaShareResponse>;
     /**
      * Creates a share URL from a proof request. A wallet holder can use this
-     * URL to access the request.
+     * URL to access the request. Not used for the `ISO_MDL` proximity flow.
      */
     shareProof(proofId: string, params: ShareProofRequest): Promise<ShareProofResponse>;
     shareProofSchema(proofSchemaId: string): Promise<ProofSchemaShareResponse>;

package/dist/src/one-core-uniffi-intf.js

@@ -89,8 +89,17 @@ export var CredentialListQuerySearchType;
 })(CredentialListQuerySearchType || (CredentialListQuerySearchType = {}));
 export var CredentialQueryFailureReason;
 (function (CredentialQueryFailureReason) {
+    /** The wallet holds no credential of the requested type. */
     CredentialQueryFailureReason["NO_CREDENTIAL"] = "NO_CREDENTIAL";
+    /**
+     * Credentials of the requested type exist, but none is currently
+     * valid.
+     */
     CredentialQueryFailureReason["VALIDITY"] = "VALIDITY";
+    /**
+     * Credentials of the requested type exist, but none satisfies the
+     * constraints of the request.
+     */
     CredentialQueryFailureReason["CONSTRAINT"] = "CONSTRAINT";
 })(CredentialQueryFailureReason || (CredentialQueryFailureReason = {}));
 export var CredentialRole;
@@ -197,6 +206,9 @@ export var HistoryAction;
     HistoryAction["ECOSYSTEMS_RESOLVED"] = "ECOSYSTEMS_RESOLVED";
     HistoryAction["REFRESHED"] = "REFRESHED";
     HistoryAction["SIGNED"] = "SIGNED";
+    HistoryAction["KA_CREATED"] = "KA_CREATED";
+    HistoryAction["WIA_CREATED"] = "WIA_CREATED";
+    HistoryAction["CLIENT_SECRET_REGENERATED"] = "CLIENT_SECRET_REGENERATED";
 })(HistoryAction || (HistoryAction = {}));
 export var HistoryEntityType;
 (function (HistoryEntityType) {
@@ -210,7 +222,8 @@ export var HistoryEntityType;
     HistoryEntityType["PROOF_SCHEMA"] = "PROOF_SCHEMA";
     HistoryEntityType["ORGANISATION"] = "ORGANISATION";
     HistoryEntityType["BACKUP"] = "BACKUP";
-    HistoryEntityType["WALLET_UNIT"] = "WALLET_UNIT";
+    HistoryEntityType["INSTANCE"] = "INSTANCE";
+    HistoryEntityType["MANAGED_INSTANCE"] = "MANAGED_INSTANCE";
     HistoryEntityType["USER"] = "USER";
     HistoryEntityType["PROVIDER"] = "PROVIDER";
     HistoryEntityType["WALLET_RELYING_PARTY"] = "WALLET_RELYING_PARTY";
@@ -307,22 +320,64 @@ export var ProofListQueryExactColumn;
 })(ProofListQueryExactColumn || (ProofListQueryExactColumn = {}));
 export var ProofRole;
 (function (ProofRole) {
+    /** The system received this request. */
     ProofRole["HOLDER"] = "HOLDER";
+    /** The system made this request. */
     ProofRole["VERIFIER"] = "VERIFIER";
 })(ProofRole || (ProofRole = {}));
 export var ProofSchemaListQueryExactColumn;
 (function (ProofSchemaListQueryExactColumn) {
     ProofSchemaListQueryExactColumn["NAME"] = "NAME";
 })(ProofSchemaListQueryExactColumn || (ProofSchemaListQueryExactColumn = {}));
+/**
+ * State of a proof request. Some states mean something different
+ * depending on whether the system is the holder or the verifier of the
+ * request. See [Proof States as a Verifier](https://docs.procivis.ch/verify/states)
+ * and [Proof States as a Holder](https://docs.procivis.ch/hold/manage-credentials-requests#proof-request-states-as-a-holder)
+ * for complete state diagrams.
+ */
 export var ProofState;
 (function (ProofState) {
+    /**
+     * For verifiers, the request was created but not yet shared with a
+     * wallet.
+     */
     ProofState["CREATED"] = "CREATED";
+    /**
+     * Waiting for the other party. For verifiers, the request was shared
+     * or, for `ISO_MDL`, created from the wallet's engagement data. For
+     * holders, device engagement was started with `proposeProof`.
+     */
     ProofState["PENDING"] = "PENDING";
+    /**
+     * The request reached the wallet and is waiting for the holder to
+     * respond.
+     */
     ProofState["REQUESTED"] = "REQUESTED";
+    /**
+     * For verifiers, the presentation was received and verified. For
+     * holders, the presentation was submitted.
+     */
     ProofState["ACCEPTED"] = "ACCEPTED";
+    /**
+     * The holder rejected the request. Not all protocols report a
+     * rejection to the verifier.
+     */
     ProofState["REJECTED"] = "REJECTED";
+    /**
+     * The request was cancelled with `deleteProof` after it reached
+     * `REQUESTED`. The history of the interaction is retained.
+     */
     ProofState["RETRACTED"] = "RETRACTED";
+    /**
+     * A technical error occurred or, for verifiers, the presentation
+     * could not be verified.
+     */
     ProofState["ERROR"] = "ERROR";
+    /**
+     * For verifiers, the shared request expired before a wallet
+     * connected. Share it again with `shareProof`.
+     */
     ProofState["INTERACTION_EXPIRED"] = "INTERACTION_EXPIRED";
 })(ProofState || (ProofState = {}));
 export var SortDirection;

package/ios/ProcivisOneCoreModule.swift

@@ -35,7 +35,8 @@ class ProcivisOneCoreModule: RCTEventEmitter {
           data: ErrorResponse(
             code: "BR_0183",
             message: "core already initialized",
-            cause: nil
+            cause: nil,
+            data: nil
           )
         )
       }
@@ -70,7 +71,7 @@ class ProcivisOneCoreModule: RCTEventEmitter {
   private func getCore() throws -> OneCoreProtocol {
     guard let result = core else {
       throw OneCoreError.Response(
-        data: ErrorResponse(code: "BR_0184", message: "core not initialized", cause: nil)
+        data: ErrorResponse(code: "BR_0184", message: "core not initialized", cause: nil, data: nil)
       )
     }
     return result
@@ -906,7 +907,8 @@ class ProcivisOneCoreModule: RCTEventEmitter {
           data: ErrorResponse(
             code: "BR_0184",
             message: "ubiqu not initialized",
-            cause: nil
+            cause: nil,
+            data: nil
           )
         )
       }
@@ -926,7 +928,8 @@ class ProcivisOneCoreModule: RCTEventEmitter {
           data: ErrorResponse(
             code: "BR_0184",
             message: "ubiqu not initialized",
-            cause: nil
+            cause: nil,
+            data: nil
           )
         )
       }
@@ -945,7 +948,8 @@ class ProcivisOneCoreModule: RCTEventEmitter {
           data: ErrorResponse(
             code: "BR_0184",
             message: "ubiqu not initialized",
-            cause: nil
+            cause: nil,
+            data: nil
           )
         )
       }
@@ -965,7 +969,8 @@ class ProcivisOneCoreModule: RCTEventEmitter {
           data: ErrorResponse(
             code: "BR_0184",
             message: "ubiqu not initialized",
-            cause: nil
+            cause: nil,
+            data: nil
           )
         )
       }
@@ -1002,7 +1007,8 @@ class ProcivisOneCoreModule: RCTEventEmitter {
           data: ErrorResponse(
             code: "BR_0184",
             message: "ubiqu not initialized",
-            cause: nil
+            cause: nil,
+            data: nil
           )
         )
       }

package/ios/Serialize.swift

@@ -61,9 +61,14 @@ private func serialize(historyMetadata: HistoryMetadata) throws -> NSDictionary
             "type_": "ERROR_METADATA",
             "value": try serializeAny(value)
         ];
-    case let .walletUnitJwt(value):
+    case let .managedInstanceAttestation(value):
         return [
-            "type_": "WALLET_UNIT_JWT",
+            "type_": "MANAGED_INSTANCE_ATTESTATION",
+            "value": [value]
+        ];
+    case let .walletAttestation(value):
+        return [
+            "type_": "WALLET_ATTESTATION",
             "value": [value]
         ];
     case let .walletRelyingParty(value):

package/ios/Util.swift

@@ -38,8 +38,15 @@ func asyncCall<Result>(
 private func handleError(error: Error, _ reject: @escaping RCTPromiseRejectBlock) {
   if case OneCoreError.Response(data: let errorResponse) = error {
     var userInfo: [String: Any] = [NSUnderlyingErrorKey: error]
-    if let cause = errorResponse.cause?.message {
-      userInfo["cause"] = cause
+    do {
+      if let cause = errorResponse.cause {
+        userInfo["cause"] = try serializeAny(cause)
+      }
+      if let data = errorResponse.data {
+        userInfo["data"] = try serializeAny(data)
+      }
+    } catch {
+      print("error: while parsing OneCoreError: \(error).")
     }
 
     reject(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@procivis/react-native-one-core",
-  "version": "1.126524.0",
+  "version": "1.134079.0",
   "author": "Procivis AG (https://procivis.ch)",
   "license": "Apache-2.0",
   "description": "ONE core bindings for React Native",