@procivis/react-native-one-core 1.56306.0 → 1.60807.0

package/README.md

@@ -162,7 +162,7 @@ Support for the recently published [FIPS-204][fips] is planned for the near futu
   - [OID4VP over BLE][ble]; optimized version of Draft 00
   - OID4VP over MQTT; proprietary adaptation of "OID4VP over BLE" via MQTT channel
 - ISO/IEC 18013
-  - [18013-5][iso5]: QR code engagement and offline device retrieval over BLE
+  - [18013-5][iso5]: Device engagement using either NFC or QR Code, data retrieval using BLE
   - [18013-7][iso7]: Online data retrieval via OID4VP
 
 ### Key storage

package/android/build.gradle

@@ -70,9 +70,10 @@ dependencies {
     implementation("org.jetbrains.kotlinx:kotlinx-coroutines-android:1.8.1")
     implementation 'com.facebook.react:react-native:+'
 
-    releaseImplementation(name: 'onecore-release', ext: 'aar')
-    debugImplementation(name: 'onecore-debug', ext: 'aar')
-    implementation 'net.java.dev.jna:jna:5.13.0@aar'
+    releaseApi(name: 'onecore-release', ext: 'aar')
+    debugApi(name: 'onecore-debug', ext: 'aar')
+    implementation 'net.java.dev.jna:jna:5.17.0@aar'
+    implementation 'org.greenrobot:eventbus:3.3.1'
     implementation("org.jetbrains.kotlin:kotlin-reflect:${safeExtGet('kotlinVersion', '1.9.0')}")
 
     implementation(name: 'core-reactnative-compatible-2025.0305.1', ext: 'aar')

package/android/build.gradle_opensource

@@ -70,9 +70,10 @@ dependencies {
     implementation("org.jetbrains.kotlinx:kotlinx-coroutines-android:1.8.1")
     implementation 'com.facebook.react:react-native:+'
 
-    releaseImplementation(name: 'onecore-release', ext: 'aar')
-    debugImplementation(name: 'onecore-debug', ext: 'aar')
-    implementation 'net.java.dev.jna:jna:5.13.0@aar'
+    releaseApi(name: 'onecore-release', ext: 'aar')
+    debugApi(name: 'onecore-debug', ext: 'aar')
+    implementation 'net.java.dev.jna:jna:5.17.0@aar'
+    implementation 'org.greenrobot:eventbus:3.3.1'
     implementation("org.jetbrains.kotlin:kotlin-reflect:${safeExtGet('kotlinVersion', '1.9.0')}")
 }
 

package/android/src/main/java/ch/procivis/one/core/ProcivisOneCoreModule.kt

@@ -1,5 +1,7 @@
 package ch.procivis.one.core
 
+import ch.procivis.one.core.nfc.HCE as NfcHCE
+import ch.procivis.one.core.nfc.Scanner as NfcScanner
 import ch.procivis.one.core.Deserialize.construct
 import ch.procivis.one.core.DeserializeSpecific.enumList
 import ch.procivis.one.core.Serialize.convertToRN
@@ -46,16 +48,21 @@ class ProcivisOneCoreModule(reactContext: ReactApplicationContext) :
     @ReactMethod
     fun initialize(configJson: String, promise: Promise) {
         syncCall(promise) {
-            val dataDirPath = this.reactApplicationContext.filesDir.absolutePath
-            ubiqu = ubiqu ?: UbiquKeyStorage(this.reactApplicationContext)
+            val context = this.reactApplicationContext
+            val dataDirPath = context.filesDir.absolutePath
+            ubiqu = ubiqu ?: UbiquKeyStorage(context)
             oneCore =
                 initializeCore(
-                    configJson = configJson,
                     dataDirPath = dataDirPath,
-                    nativeSecureElement = AndroidKeyStoreKeyStorage(this.reactApplicationContext),
-                    remoteSecureElement = ubiqu,
-                    bleCentral = AndroidBLECentral(this.reactApplicationContext),
-                    blePeripheral = AndroidBLEPeripheral(this.reactApplicationContext)
+                    params = InitParamsDto(
+                        configJson = configJson,
+                        nativeSecureElement = AndroidKeyStoreKeyStorage(context),
+                        remoteSecureElement = ubiqu,
+                        bleCentral = AndroidBLECentral(context),
+                        blePeripheral = AndroidBLEPeripheral(context),
+                        nfcHce = NfcHCE(context),
+                        nfcScanner = NfcScanner(context) { context.currentActivity }
+                    )
                 )
             return@syncCall null
         }
@@ -178,14 +185,11 @@ class ProcivisOneCoreModule(reactContext: ReactApplicationContext) :
 
     @ReactMethod
     fun handleInvitation(
-        url: String,
-        organisationId: String,
-        transport: ReadableArray?,
+        request: ReadableMap,
         promise: Promise
     ) {
         asyncCall(promise, scope) {
-            val transportList = transport?.let { DeserializeSpecific.ids(it) }
-            val invitationResult = getCore().handleInvitation(url, organisationId, transportList)
+            val invitationResult = getCore().handleInvitation(construct(request))
             return@asyncCall convertToRN(invitationResult)
         }
     }
@@ -256,12 +260,32 @@ class ProcivisOneCoreModule(reactContext: ReactApplicationContext) :
     ) {
         asyncCall(promise, scope) {
             val submitCredentials =
-                mutableMapOf<String, PresentationSubmitCredentialRequestBindingDto>()
+                mutableMapOf<String, List<PresentationSubmitCredentialRequestBindingDto>>()
             for (entry in credentials.entryIterator) {
-                val credential = entry.value as ReadableMap
-                submitCredentials[entry.key] = construct(credential)
+                val credentialList = when (val credentialValue = entry.value) {
+                    is ReadableMap -> {
+                        // Single credential object - convert to list
+                        listOf(construct<PresentationSubmitCredentialRequestBindingDto>(credentialValue))
+                    }
+                    is ReadableArray -> {
+                        // Array of credentials - convert each one
+                        (0 until credentialValue.size()).map { index ->
+                            construct<PresentationSubmitCredentialRequestBindingDto>(credentialValue.getMap(index)!!)
+                        }
+                    }
+                    else -> {
+                        throw IllegalArgumentException("Credential value must be either a Map or Array")
+                    }
+                }
+                submitCredentials[entry.key] = credentialList
             }
-            getCore().holderSubmitProof(interactionId, submitCredentials, didId, identifierId, keyId)
+            getCore().holderSubmitProof(
+                interactionId,
+                submitCredentials,
+                didId,
+                identifierId,
+                keyId
+            )
             return@asyncCall null
         }
     }
@@ -361,9 +385,10 @@ class ProcivisOneCoreModule(reactContext: ReactApplicationContext) :
     }
 
     @ReactMethod
-    fun proposeProof(exchange: String, organisationId: String, promise: Promise) {
+    fun proposeProof(exchange: String, organisationId: String, engagement: ReadableArray, promise: Promise) {
         asyncCall(promise, scope) {
-            val result = getCore().proposeProof(exchange, organisationId)
+            val engagement = DeserializeSpecific.ids(engagement)
+            val result = getCore().proposeProof(exchange, organisationId, engagement)
             return@asyncCall convertToRN(result)
         }
     }
@@ -588,6 +613,45 @@ class ProcivisOneCoreModule(reactContext: ReactApplicationContext) :
         }
     }
 
+    @ReactMethod
+    fun holderRegisterWalletUnit(request: ReadableMap, promise: Promise) {
+        asyncCall(promise, scope) {
+            val result = getCore().holderRegisterWalletUnit(construct(request))
+            return@asyncCall convertToRN(result)
+        }
+    }
+
+    @ReactMethod
+    fun holderRefreshWalletUnit(request: ReadableMap, promise: Promise) {
+        asyncCall(promise, scope) {
+            getCore().holderRefreshWalletUnit(construct(request))
+            return@asyncCall null
+        }
+    }
+
+    @ReactMethod
+    fun holderGetWalletUnitAttestation(organisationId: String, promise: Promise) {
+        asyncCall(promise, scope) {
+            val result = getCore().holderGetWalletUnitAttestation(organisationId)
+            return@asyncCall convertToRN(result)
+        }
+    }
+
+    @ReactMethod
+    fun nfcReadIsoMdlEngagement(request: ReadableMap, promise: Promise) {
+        asyncCall(promise, scope) {
+            return@asyncCall getCore().nfcReadIsoMdlEngagement(construct(request))
+        }
+    }
+
+    @ReactMethod
+    fun nfcStopIsoMdlEngagement(promise: Promise) {
+        asyncCall(promise, scope) {
+            getCore().nfcStopIsoMdlEngagement()
+            return@asyncCall null
+        }
+    }
+
     @ReactMethod
     fun uninitialize(deleteData: Boolean, promise: Promise) {
         asyncCall(promise, scope) {

package/android/src/main/java/ch/procivis/one/core/SerializeSpecific.kt

@@ -43,6 +43,13 @@ object SerializeSpecific {
 
                 is HistoryMetadataBinding.ErrorMetadata ->
                     return convertToRN(metadata.value) as ReadableMap
+
+                is HistoryMetadataBinding.WalletUnitJwt -> {
+                    val result = Arguments.createMap()
+                    result.putString("jwt", metadata.v1)
+                    return result
+                }
+
             }
         }
 

package/android/src/main/java/ch/procivis/one/core/ubiqu/UbiquKeyStorage.kt

@@ -110,6 +110,18 @@ class UbiquKeyStorage(private val context: ReactApplicationContext) : NativeKeyS
         }
     }
 
+    override suspend fun generateAttestation(keyReference: ByteArray, nonce: String?): List<String> {
+        throw NativeKeyStorageException.Unsupported()
+    }
+
+    override suspend fun signWithAttestationKey(keyReference: ByteArray, message: ByteArray): ByteArray {
+        throw NativeKeyStorageException.Unsupported()
+    }
+
+    override suspend fun generateAttestationKey(keyAlias: String, nonce: String?): GeneratedKeyBindingDto {
+        throw NativeKeyStorageException.Unsupported()
+    }
+
     // ==== public interface
     suspend fun changePin(): String? {
         return exceptionWrapper {

package/android/src/main/java/ch/procivis/one/core/ubiqu/UbiquKeyStorage.kt_opensource

@@ -20,6 +20,18 @@ class UbiquKeyStorage(private val context: ReactApplicationContext) : NativeKeyS
         throw NativeKeyStorageException.Unsupported()
     }
 
+    override suspend fun generateAttestation(keyReference: ByteArray, nonce: String?): List<String> {
+        throw NativeKeyStorageException.Unsupported()
+    }
+
+    override suspend fun generateAttestationKey(keyAlias: String, nonce: String?): GeneratedKeyBindingDto {
+        throw NativeKeyStorageException.Unsupported()
+    }
+
+    override suspend fun signWithAttestationKey(keyReference: ByteArray, message: ByteArray): ByteArray {
+        throw NativeKeyStorageException.Unsupported()
+    }
+
     // ==== public interface
     fun changePin(): String? {
         throw NativeKeyStorageException.Unsupported()

package/core-sdk.json

@@ -1,16 +1,16 @@
 {
   "android": {
     "debug": {
-      "url": "https://onetfstatestorage.blob.core.windows.net/core-sdk/android/56306/onecore-debug.aar",
-      "sha1": "fa86f918237f414fa8a2581bcd0ef33b386acac4"
+      "url": "https://onesdk.blob.core.windows.net/core-sdk/60807/android/onecore-debug.aar",
+      "sha1": "164dfcb986d8f86596e69ceed8a470562d3b0b6f"
     },
     "release": {
-      "url": "https://onetfstatestorage.blob.core.windows.net/core-sdk/android/56306/onecore-release.aar",
-      "sha1": "59a02d824a074e83ddb44ab7b5f29778f0a07fa1"
+      "url": "https://onesdk.blob.core.windows.net/core-sdk/60807/android/onecore-release.aar",
+      "sha1": "da72ce7724c932b14b19df2911ec7c2586c31130"
     }
   },
   "ios": {
-    "url": "https://onetfstatestorage.blob.core.windows.net/core-sdk/ios/56306/deploy.zip",
-    "sha1": "aeb5640771f1cba05bf457f5a60ecb48a5670819"
+    "url": "https://onesdk.blob.core.windows.net/core-sdk/60807/ios/deploy.zip",
+    "sha1": "7b5d19a6621d7e3eb0fcc492e70681001d5f3483"
   }
 }

package/dist/src/config.d.ts

@@ -144,5 +144,7 @@ export interface Config {
     keyStorage: ConfigEntities<KeyStorageCapabilities>;
     trustManagement: ConfigEntities<TrustCapabilities>;
     cacheEntities: ConfigEntities;
+    task: ConfigEntities;
+    credentialIssuer: ConfigEntities<undefined, {}>;
 }
 export {};

package/dist/src/core.d.ts

@@ -1,6 +1,6 @@
 import { BackupCreate, ImportBackupMetadata, UnexportableEntities } from "./backup";
 import { Config } from "./config";
-import { ContinueIssuanceResponse, CredentialDetail, CredentialListItem, CredentialListQuery, CredentialRevocationCheckResponse, InitiateIssuanceRequest, InitiateIssuanceResponse, InvitationResultCredentialIssuance } from "./credential";
+import { AuthorizationCodeFlow, ContinueIssuanceResponse, CredentialDetail, CredentialListItem, CredentialListQuery, CredentialRevocationCheckResponse, InitiateIssuanceRequest, InitiateIssuanceResponse, InvitationResultCredentialIssuance } from "./credential";
 import { CredentialSchema, CredentialSchemaDetail, CredentialSchemaListQuery, ImportCredentialSchemaRequest, ShareCredentialSchemaResponse } from "./credentialSchema";
 import { DidListItem, DidListQuery, DidRequest } from "./did";
 import { HistoryListItem, HistoryListQuery } from "./history";
@@ -12,6 +12,8 @@ import { CreateRemoteTrustEntityRequest, CreateTrustAnchorRequest, CreateTrustEn
 import { CacheType } from "./cache";
 import { CreateOrganisationRequest, UpsertOrganisationRequest } from "./organisation";
 import { CreateIdentifierRequest, IdentifierDetail, IdentifierListItem, IdentifierListQuery } from "./identifier";
+import { HolderAttestationWalletUnitResponse, HolderRefreshWalletUnitRequest, HolderRegisterWalletUnitRequest, HolderRegisterWalletUnitResponse } from "./walletUnit";
+import { NfcScanRequest } from "./nfc";
 export * from "./backup";
 export * from "./cache";
 export * from "./config";
@@ -21,11 +23,13 @@ export * from "./did";
 export * from "./identifier";
 export * from "./history";
 export * from "./key";
+export * from "./nfc";
 export * from "./list";
 export * from "./organisation";
 export * from "./proof";
 export * from "./proofSchema";
 export * from "./trust";
+export * from "./walletUnit";
 export interface Version {
     target: string;
     buildTime: string;
@@ -35,7 +39,22 @@ export interface Version {
     rustVersion: string;
     pipelineId: string;
 }
-export type InvitationResult = InvitationResultCredentialIssuance | InvitationResultProofRequest;
+export type InvitationResult = InvitationResultCredentialIssuance | InvitationResultProofRequest | AuthorizationCodeFlow;
+export interface HandleInvitationRequest {
+    /** Typically encoded as a QR code or deep link by the issuer or
+     * verifier. For example:
+     * "https://example.com/credential-offer" */
+    url: string;
+    organisationId: string;
+    /** For configurations with multiple transport protocols enabled
+     * you can specify which one to use for this interaction. */
+    transport?: string[];
+    /** For issuer-initiated Authorization Code Flows, provide the
+     * authorization server with the URI it should return the user
+     * to once authorization is complete. For example:
+     * "myapp://example". */
+    redirectUri?: string;
+}
 export interface ResolveJsonLdContextResponse {
     context: string;
 }
@@ -51,14 +70,27 @@ export interface ONECore {
     getIdentifiers(query: IdentifierListQuery): Promise<ItemList<IdentifierListItem>>;
     getIdentifier(identifierId: IdentifierListItem["id"]): Promise<IdentifierDetail>;
     deleteIdentifier(identifierId: IdentifierListItem["id"]): Promise<void>;
-    handleInvitation(url: string, organisationId: string, transport: string[] | undefined): Promise<InvitationResult>;
+    /**
+     * For a wallet, handles the interaction once the wallet connects to a share
+     * endpoint URL (for example, scans the QR code of an offered credential or
+     * request for proof).
+     */
+    handleInvitation(request: HandleInvitationRequest): Promise<InvitationResult>;
     holderAcceptCredential(interactionId: InvitationResultCredentialIssuance["interactionId"], didId: DidListItem["id"] | undefined, identifierId: IdentifierListItem["id"] | undefined, keyId: string | undefined, txCode: string | undefined): Promise<void>;
     holderRejectCredential(interactionId: InvitationResultCredentialIssuance["interactionId"]): Promise<void>;
+    /** For wallets, starts the OID4VCI Authorization Code Flow. */
     initiateIssuance(request: InitiateIssuanceRequest): Promise<InitiateIssuanceResponse>;
-    continueIssuance(url: string): Promise<ContinueIssuanceResponse>;
+    /** For wallet-initiated flows, continues the OpenID4VCI issuance process
+     * after completing authorization.
+     */
+    continueIssuance(
+    /** Starts with the `redirectUri` and is used to continue the Authorization
+     * Code Flow issuance process. For example:
+     * "myapp://example/credential-offer?code=xxx&clientId=myWallet&..." */
+    url: string): Promise<ContinueIssuanceResponse>;
     getPresentationDefinition(proofId: ProofDetail["id"]): Promise<PresentationDefinition>;
     holderRejectProof(interactionId: InvitationResultProofRequest["interactionId"]): Promise<void>;
-    holderSubmitProof(interactionId: InvitationResultProofRequest["interactionId"], credentials: Record<PresentationDefinitionRequestedCredential["id"], PresentationSubmitCredentialRequest>, didId: DidListItem["id"] | undefined, identifierId: IdentifierListItem["id"] | undefined, keyId: string | undefined): Promise<void>;
+    holderSubmitProof(interactionId: InvitationResultProofRequest["interactionId"], credentials: Record<PresentationDefinitionRequestedCredential["id"], PresentationSubmitCredentialRequest | PresentationSubmitCredentialRequest[]>, didId: DidListItem["id"] | undefined, identifierId: IdentifierListItem["id"] | undefined, keyId: string | undefined): Promise<void>;
     getCredentials(query: CredentialListQuery): Promise<ItemList<CredentialListItem>>;
     runTask(task: string): Promise<string>;
     deleteProofClaims(proofId: ProofDetail["id"]): Promise<void>;
@@ -68,6 +100,7 @@ export interface ONECore {
     getCredentialSchema(credentialSchemaId: CredentialSchema["id"]): Promise<CredentialSchemaDetail>;
     getCredentialSchemas(query: CredentialSchemaListQuery): Promise<ItemList<CredentialSchema>>;
     deleteCredentialSchema(credentialSchemaId: CredentialSchema["id"]): Promise<void>;
+    /** For verifiers, creates a proof request. */
     createProof(request: CreateProofRequest): Promise<ProofDetail["id"]>;
     shareProof(proofId: ProofDetail["id"], request: ShareProofRequest): Promise<ShareProofResponse>;
     shareProofSchema(proofSchemaId: ProofSchema["id"]): Promise<ShareProofSchemaResponse>;
@@ -75,7 +108,11 @@ export interface ONECore {
     getProof(proofId: ProofDetail["id"]): Promise<ProofDetail>;
     getProofs(query: ProofListQuery): Promise<ItemList<ProofListItem>>;
     deleteProof(proofId: ProofDetail["id"]): Promise<void>;
-    proposeProof(exchange: string, organisationId: string): Promise<ProposeProofResponse>;
+    /** For wallets, initiates device engagement for offline flows.
+     * Reference the `verificationEngagement` entry of your configuration
+     * for your options for `engagement`.
+     */
+    proposeProof(exchange: string, organisationId: string, engagement: string[]): Promise<ProposeProofResponse>;
     createProofSchema(request: CreateProofSchemaRequest): Promise<ProofSchema["id"]>;
     getProofSchemas(query: ProofSchemaListQuery): Promise<ItemList<ProofSchemaListItem>>;
     getProofSchema(proofSchemaId: ProofSchema["id"]): Promise<ProofSchema>;
@@ -121,6 +158,20 @@ export interface ONECore {
      */
     rollbackImport(): Promise<void>;
     resolveJsonldContext(url: string): Promise<ResolveJsonLdContextResponse>;
+    holderRegisterWalletUnit(request: HolderRegisterWalletUnitRequest): Promise<HolderRegisterWalletUnitResponse>;
+    holderRefreshWalletUnit(request: HolderRefreshWalletUnitRequest): Promise<void>;
+    holderGetWalletUnitAttestation(organisationId: string): Promise<HolderAttestationWalletUnitResponse>;
+    /**
+     * Start scanning for ISO 18013-5 NFC engagement
+     *
+     * @param {NfcScanRequest} request system overlay messages to be displayed (iOS only)
+     * @returns {string} encoded NFC engagement to be used for {@link CreateProofRequest.isoMdlEngagement}
+     */
+    nfcReadIsoMdlEngagement(request: NfcScanRequest): Promise<string>;
+    /**
+     * Explicitly stop scan started via {@link nfcReadIsoMdlEngagement}
+     */
+    nfcStopIsoMdlEngagement(): Promise<void>;
     /**
      * Uninitialize the core instance
      *
@@ -130,4 +181,4 @@ export interface ONECore {
      */
     uninitialize(deleteData: boolean): Promise<void>;
 }
-export declare const interfaceMethodNames: readonly ["getVersion", "getConfig", "createOrganisation", "upsertOrganisation", "generateKey", "createDid", "getDids", "createIdentifier", "getIdentifier", "getIdentifiers", "deleteIdentifier", "handleInvitation", "holderAcceptCredential", "holderRejectCredential", "initiateIssuance", "continueIssuance", "getPresentationDefinition", "holderRejectProof", "holderSubmitProof", "getCredentials", "runTask", "deleteProofClaims", "getCredential", "deleteCredential", "importCredentialSchema", "getCredentialSchema", "getCredentialSchemas", "deleteCredentialSchema", "createProof", "shareProof", "shareProofSchema", "shareCredentialSchema", "getProof", "getProofs", "deleteProof", "proposeProof", "createProofSchema", "getProofSchemas", "getProofSchema", "deleteProofSchema", "importProofSchema", "checkRevocation", "createTrustAnchor", "deleteTrustAnchor", "getTrustAnchor", "getTrustAnchors", "createTrustEntity", "getTrustEntity", "getTrustEntities", "getTrustEntityByDid", "resolveTrustEntityByIdentifier", "createRemoteTrustEntity", "getRemoteTrustEntity", "updateRemoteTrustEntity", "getHistory", "getHistoryEntry", "createBackup", "backupInfo", "deleteCache", "unpackBackup", "finalizeImport", "rollbackImport", "resolveJsonldContext", "uninitialize"];
+export declare const interfaceMethodNames: readonly ["getVersion", "getConfig", "createOrganisation", "upsertOrganisation", "generateKey", "createDid", "getDids", "createIdentifier", "getIdentifier", "getIdentifiers", "deleteIdentifier", "handleInvitation", "holderAcceptCredential", "holderRejectCredential", "initiateIssuance", "continueIssuance", "getPresentationDefinition", "holderRejectProof", "holderSubmitProof", "getCredentials", "runTask", "deleteProofClaims", "getCredential", "deleteCredential", "importCredentialSchema", "getCredentialSchema", "getCredentialSchemas", "deleteCredentialSchema", "createProof", "shareProof", "shareProofSchema", "shareCredentialSchema", "getProof", "getProofs", "deleteProof", "proposeProof", "createProofSchema", "getProofSchemas", "getProofSchema", "deleteProofSchema", "importProofSchema", "checkRevocation", "createTrustAnchor", "deleteTrustAnchor", "getTrustAnchor", "getTrustAnchors", "createTrustEntity", "getTrustEntity", "getTrustEntities", "getTrustEntityByDid", "resolveTrustEntityByIdentifier", "createRemoteTrustEntity", "getRemoteTrustEntity", "updateRemoteTrustEntity", "getHistory", "getHistoryEntry", "createBackup", "backupInfo", "deleteCache", "unpackBackup", "finalizeImport", "rollbackImport", "resolveJsonldContext", "holderRegisterWalletUnit", "holderRefreshWalletUnit", "holderGetWalletUnitAttestation", "nfcReadIsoMdlEngagement", "nfcStopIsoMdlEngagement", "uninitialize"];

package/dist/src/core.js

@@ -7,11 +7,13 @@ export * from "./did";
 export * from "./identifier";
 export * from "./history";
 export * from "./key";
+export * from "./nfc";
 export * from "./list";
 export * from "./organisation";
 export * from "./proof";
 export * from "./proofSchema";
 export * from "./trust";
+export * from "./walletUnit";
 // New Architecture bridgeless issue workaround: see https://github.com/facebook/react-native/issues/43221
 export const interfaceMethodNames = [
     "getVersion",
@@ -77,6 +79,11 @@ export const interfaceMethodNames = [
     "finalizeImport",
     "rollbackImport",
     "resolveJsonldContext",
+    "holderRegisterWalletUnit",
+    "holderRefreshWalletUnit",
+    "holderGetWalletUnitAttestation",
+    "nfcReadIsoMdlEngagement",
+    "nfcStopIsoMdlEngagement",
     "uninitialize",
 ];
 // Typescript automatic assertions to keep ONECore and interfaceMethodNames in sync

package/dist/src/credential.d.ts

@@ -99,6 +99,7 @@ export type CredentialListQuery = ListQuery & {
     ids?: Array<CredentialListItem["id"]>;
     status?: CredentialStateEnum[];
     profile?: string;
+    credentialSchemaIds?: Array<CredentialSchema["id"]>;
     include?: CredentialListIncludeEntityType[];
     /** accepts the RFC3339 format, e.g. use the {@link Date.toISOString} */
     createdDateAfter?: string;
@@ -132,9 +133,17 @@ export interface CredentialRevocationCheckResponse {
     reason?: string;
 }
 export interface InvitationResultCredentialIssuance {
+    /** For reference. */
     interactionId: string;
+    /** Offered credential. */
     credentialIds: Array<CredentialListItem["id"]>;
+    /** Metadata for entering a transaction code.
+     * If a pre-authorized code is issued with a transaction code object, the wallet
+     * user must input a transaction code to receive the offered credential. This code
+     * is typically sent through a separate channel such as SMS or email.
+     */
     txCode?: OpenID4VCITxCode;
+    /** Metadata for selecting an appropriate key. */
     credentialConfigurationsSupported: Record<CredentialListItem["id"], CredentialConfigurationSupported>;
 }
 export interface OpenID4VCITxCode {
@@ -146,9 +155,11 @@ export declare enum OpenID4VCITxCodeInputMode {
     NUMERIC = "NUMERIC",
     TEXT = "TEXT"
 }
+/** OID4VCI authorization request parameters. Use either `scope` or `authorizationDetails`. */
 export interface InitiateIssuanceRequest {
     organisationId: string;
     protocol: string;
+    /** Issuer URL */
     issuer: string;
     clientId: string;
     redirectUri?: string;
@@ -163,8 +174,11 @@ export interface InitiateIssuanceResponse {
     url: string;
 }
 export interface ContinueIssuanceResponse {
+    /** For reference. */
     interactionId: string;
+    /** Offered credentials. */
     credentialIds: Array<CredentialListItem["id"]>;
+    /** Metadata for selecting an appropriate key. */
     credentialConfigurationsSupported: Record<CredentialListItem["id"], CredentialConfigurationSupported>;
 }
 export interface CredentialConfigurationSupported {
@@ -173,3 +187,10 @@ export interface CredentialConfigurationSupported {
 export interface OpenID4VCIProofTypeSupported {
     proofSigningAlgValuesSupported: string[];
 }
+export interface AuthorizationCodeFlow {
+    /** For reference. */
+    interactionId: string;
+    /** For issuer-initiated Authorization Code Flows, use this URL to start
+     * the authorization process with the authorization server. */
+    authorizationCodeFlowUrl: string;
+}

package/dist/src/history.d.ts

@@ -38,7 +38,9 @@ export declare enum HistoryEntityTypeEnum {
     ORGANISATION = "ORGANISATION",
     BACKUP = "BACKUP",
     TRUST_ANCHOR = "TRUST_ANCHOR",
-    TRUST_ENTITY = "TRUST_ENTITY"
+    TRUST_ENTITY = "TRUST_ENTITY",
+    WALLET_UNIT = "WALLET_UNIT",
+    WALLET_UNIT_ATTESTATION = "WALLET_UNIT_ATTESTATION"
 }
 export declare enum HistorySearchTypeEnum {
     CLAIM_NAME = "CLAIM_NAME",
@@ -72,7 +74,10 @@ export interface HistoryErrorMetadata {
     errorCode: string;
     message: string;
 }
-export type HistoryMetadata = UnexportableEntities | HistoryErrorMetadata;
+export interface WalletUnitJWT {
+    jwt: string;
+}
+export type HistoryMetadata = UnexportableEntities | HistoryErrorMetadata | WalletUnitJWT;
 export interface HistoryListItem {
     id: string;
     createdDate: string;

package/dist/src/history.js

@@ -39,6 +39,8 @@ export var HistoryEntityTypeEnum;
     HistoryEntityTypeEnum["BACKUP"] = "BACKUP";
     HistoryEntityTypeEnum["TRUST_ANCHOR"] = "TRUST_ANCHOR";
     HistoryEntityTypeEnum["TRUST_ENTITY"] = "TRUST_ENTITY";
+    HistoryEntityTypeEnum["WALLET_UNIT"] = "WALLET_UNIT";
+    HistoryEntityTypeEnum["WALLET_UNIT_ATTESTATION"] = "WALLET_UNIT_ATTESTATION";
 })(HistoryEntityTypeEnum || (HistoryEntityTypeEnum = {}));
 export var HistorySearchTypeEnum;
 (function (HistorySearchTypeEnum) {

package/dist/src/nfc.d.ts

@@ -0,0 +1,5 @@
+export interface NfcScanRequest {
+    inProgressMessage?: string;
+    failureMessage?: string;
+    successMessage?: string;
+}

package/dist/src/nfc.js

@@ -0,0 +1 @@
+export {};

package/dist/src/proof.d.ts

@@ -1,4 +1,4 @@
-import { CredentialDetail, CredentialListItem } from "./credential";
+import { Claim, CredentialDetail, CredentialListItem } from "./credential";
 import { CredentialSchema } from "./credentialSchema";
 import { ListQuery, SortDirection } from "./list";
 import { ProofInputClaimSchema, ProofSchemaListItem } from "./proofSchema";
@@ -45,6 +45,7 @@ export interface ProofDetail {
     completedDate?: string;
     claimsRemovedAt?: string;
     profile?: string;
+    engagement?: string;
 }
 export interface ProofListItem {
     id: string;
@@ -60,7 +61,14 @@ export interface ProofListItem {
     schema?: ProofSchemaListItem;
     retainUntilDate?: string;
     profile?: string;
-}
+    engagement?: string;
+}
+/** If protocol is `ISO_MDL`, specify the device engagement
+ * type by referencing an entry from `verificationEngagement`
+ * of your configurationi. `isoMdlEngagement` accepts either
+ * QR code content (for QR device engagement) or NFC engagement
+ * parameters from {@link nfcReadIsoMdlEngagement}.
+ */
 export interface CreateProofRequest {
     proofSchemaId: ProofSchemaListItem["id"];
     verifierDidId?: DidListItem["id"];
@@ -72,6 +80,7 @@ export interface CreateProofRequest {
     isoMdlEngagement?: string;
     transport?: string[];
     profile?: string;
+    engagement?: string;
 }
 export interface ScanToVerifyRequest {
     credential: string;
@@ -109,6 +118,7 @@ export declare enum PresentationDefinitionRuleTypeEnum {
 export interface PresentationDefinitionRequestedCredential {
     id: string;
     name?: string;
+    multiple?: boolean;
     purpose?: string;
     fields: PresentationDefinitionField[];
     applicableCredentials: Array<CredentialListItem["id"]>;
@@ -120,7 +130,7 @@ export interface PresentationDefinitionField {
     name?: string;
     purpose?: string;
     required: boolean;
-    keyMap: Record<string, string>;
+    keyMap: Record<CredentialListItem["id"], Claim["key"]>;
 }
 export interface PresentationSubmitCredentialRequest {
     credentialId: CredentialListItem["id"];
@@ -165,7 +175,7 @@ export interface ProofListQuery extends ListQuery {
 export interface ProposeProofResponse {
     proofId: string;
     interactionId: string;
-    url: string;
+    url?: string;
 }
 export interface InvitationResultProofRequest {
     interactionId: string;

package/dist/src/walletUnit.d.ts

@@ -0,0 +1,41 @@
+import { KeyListItem } from "./key";
+export declare enum WalletProviderTypeEnum {
+    PROCIVIS_ONE = "PROCIVIS_ONE"
+}
+export declare enum WalletUnitStatusEnum {
+    PENDING = "PENDING",
+    ACTIVE = "ACTIVE",
+    REVOKED = "REVOKED",
+    ERROR = "ERROR"
+}
+export interface WalletProvider {
+    url: string;
+    type: WalletProviderTypeEnum;
+    name: string;
+    appIntegrityCheckRequired: boolean;
+}
+export interface HolderRegisterWalletUnitRequest {
+    organisationId: string;
+    walletProvider: WalletProvider;
+    keyType: KeyListItem["keyType"];
+}
+export interface HolderRegisterWalletUnitResponse {
+    id: string;
+    keyId: KeyListItem["id"];
+}
+export interface HolderRefreshWalletUnitRequest {
+    organisationId: string;
+    appIntegrityCheckRequired: boolean;
+}
+export interface HolderAttestationWalletUnitResponse {
+    id: string;
+    createdDate: string;
+    lastModified: string;
+    expirationDate: string;
+    status: WalletUnitStatusEnum;
+    attestation: string;
+    walletUnitId: string;
+    walletProviderUrl: string;
+    walletProviderType: WalletProviderTypeEnum;
+    walletProviderName: string;
+}

package/dist/src/walletUnit.js

@@ -0,0 +1,11 @@
+export var WalletProviderTypeEnum;
+(function (WalletProviderTypeEnum) {
+    WalletProviderTypeEnum["PROCIVIS_ONE"] = "PROCIVIS_ONE";
+})(WalletProviderTypeEnum || (WalletProviderTypeEnum = {}));
+export var WalletUnitStatusEnum;
+(function (WalletUnitStatusEnum) {
+    WalletUnitStatusEnum["PENDING"] = "PENDING";
+    WalletUnitStatusEnum["ACTIVE"] = "ACTIVE";
+    WalletUnitStatusEnum["REVOKED"] = "REVOKED";
+    WalletUnitStatusEnum["ERROR"] = "ERROR";
+})(WalletUnitStatusEnum || (WalletUnitStatusEnum = {}));

package/ios/ProcivisOneCoreModule.m

@@ -63,9 +63,7 @@ RCT_EXTERN_METHOD(deleteIdentifier:(NSString *)identifierId
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 
-RCT_EXTERN_METHOD(handleInvitation:(NSString *)url
-                  organisationId:(NSString *)organisationId
-                  transport:(NSArray *)transport
+RCT_EXTERN_METHOD(handleInvitation:(NSDictionary *)request
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 
@@ -192,6 +190,7 @@ RCT_EXTERN_METHOD(deleteProof:(NSString *)proofId
 
 RCT_EXTERN_METHOD(proposeProof:(NSString *)exchange
                   organisationId:(NSString *)organisationId
+                  engagement:(NSArray *)engagement
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 
@@ -279,6 +278,25 @@ RCT_EXTERN_METHOD(resolveJsonldContext:(NSString *)url
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 
+RCT_EXTERN_METHOD(holderRegisterWalletUnit:(NSDictionary *)request
+                  resolver:(RCTPromiseResolveBlock)resolve
+                  rejecter:(RCTPromiseRejectBlock)reject)
+
+RCT_EXTERN_METHOD(holderRefreshWalletUnit:(NSDictionary *)request
+                  resolver:(RCTPromiseResolveBlock)resolve
+                  rejecter:(RCTPromiseRejectBlock)reject)
+
+RCT_EXTERN_METHOD(holderGetWalletUnitAttestation:(NSString *)organisationId
+                  resolver:(RCTPromiseResolveBlock)resolve
+                  rejecter:(RCTPromiseRejectBlock)reject)
+
+RCT_EXTERN_METHOD(nfcReadIsoMdlEngagement:(NSDictionary *)request
+                  resolver:(RCTPromiseResolveBlock)resolve
+                  rejecter:(RCTPromiseRejectBlock)reject)
+
+RCT_EXTERN_METHOD(nfcStopIsoMdlEngagement:(RCTPromiseResolveBlock)resolve
+                  rejecter:(RCTPromiseRejectBlock)reject)
+
 RCT_EXTERN_METHOD(uninitialize:(BOOL *)deleteData
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)

package/ios/ProcivisOneCoreModule.swift

@@ -61,12 +61,16 @@ class ProcivisOneCoreModule: RCTEventEmitter {
         }
       }
       self.core = try initializeCore(
-        configJson: configJson,
         dataDirPath: dataDirPath,
-        nativeSecureElement: SecureEnclaveKeyStorage(),
-        remoteSecureElement: rseKeyStorage,
-        bleCentral: IOSBLECentral(),
-        blePeripheral: IOSBLEPeripheral()
+        params: InitParamsDto(
+          configJson: configJson,
+          nativeSecureElement: SecureEnclaveKeyStorage(),
+          remoteSecureElement: rseKeyStorage,
+          bleCentral: IOSBLECentral(),
+          blePeripheral: IOSBLEPeripheral(),
+          nfcHce: nil,
+          nfcScanner: NFCScanner()
+        )
       )
 
       return nil as NSDictionary?
@@ -208,20 +212,14 @@ class ProcivisOneCoreModule: RCTEventEmitter {
     }
   }
 
-  @objc(handleInvitation:organisationId:transport:resolver:rejecter:)
+  @objc(handleInvitation:resolver:rejecter:)
   func handleInvitation(
-    url: String,
-    organisationId: String,
-    transport: NSArray?,
+    request: NSDictionary,
     resolve: @escaping RCTPromiseResolveBlock,
     reject: @escaping RCTPromiseRejectBlock
   ) {
     asyncCall(resolve, reject) {
-      let result = try await self.getCore().handleInvitation(
-        url: url,
-        organisationId: organisationId,
-        transport: try deserializeOpt(transport)
-      )
+      let result = try await self.getCore().handleInvitation(request: try deserialize(request))
       return try serializeAny(result)
     }
   }
@@ -585,17 +583,19 @@ class ProcivisOneCoreModule: RCTEventEmitter {
     }
   }
 
-  @objc(proposeProof:organisationId:resolver:rejecter:)
+  @objc(proposeProof:organisationId:engagement:resolver:rejecter:)
   func proposeProof(
     exchange: String,
     organisationId: String,
+    engagement: NSArray,
     resolve: @escaping RCTPromiseResolveBlock,
     reject: @escaping RCTPromiseRejectBlock
   ) {
     asyncCall(resolve, reject) {
       let result = try await self.getCore().proposeProof(
         exchange: exchange,
-        organisationId: organisationId
+        organisationId: organisationId,
+        engagement: try deserialize(engagement)
       )
       return try serializeAny(result)
     }
@@ -864,6 +864,64 @@ class ProcivisOneCoreModule: RCTEventEmitter {
     }
   }
 
+  @objc(holderRegisterWalletUnit:resolver:rejecter:)
+  func holderRegisterWalletUnit(
+    request: NSDictionary,
+    resolve: @escaping RCTPromiseResolveBlock,
+    reject: @escaping RCTPromiseRejectBlock
+  ) {
+    asyncCall(resolve, reject) {
+      let result = try await self.getCore().holderRegisterWalletUnit(request: try deserialize(request))
+      return try serializeAny(result)
+    }
+  }
+
+  @objc(holderRefreshWalletUnit:resolver:rejecter:)
+  func holderRefreshWalletUnit(
+    request: NSDictionary,
+    resolve: @escaping RCTPromiseResolveBlock,
+    reject: @escaping RCTPromiseRejectBlock
+  ) {
+    asyncCall(resolve, reject) {
+      try await self.getCore().holderRefreshWalletUnit(request: try deserialize(request))
+      return nil as NSDictionary?
+    }
+  }
+
+  @objc(holderGetWalletUnitAttestation:resolver:rejecter:)
+  func holderGetWalletUnitAttestation(
+    organisationId: String,
+    resolve: @escaping RCTPromiseResolveBlock,
+    reject: @escaping RCTPromiseRejectBlock
+  ) {
+    asyncCall(resolve, reject) {
+      let result = try await self.getCore().holderGetWalletUnitAttestation(organisationId: organisationId)
+      return try serializeAny(result)
+    }
+  }
+
+  @objc(nfcReadIsoMdlEngagement:resolver:rejecter:)
+  func nfcReadIsoMdlEngagement(
+    request: NSDictionary,
+    resolve: @escaping RCTPromiseResolveBlock,
+    reject: @escaping RCTPromiseRejectBlock
+  ) {
+    asyncCall(resolve, reject) {
+      return try await self.getCore().nfcReadIsoMdlEngagement(request: try deserialize(request))
+    }
+  }
+
+  @objc(nfcStopIsoMdlEngagement:rejecter:)
+  func nfcStopIsoMdlEngagement(
+    resolve: @escaping RCTPromiseResolveBlock,
+    reject: @escaping RCTPromiseRejectBlock
+  ) {
+    asyncCall(resolve, reject) {
+      try await self.getCore().nfcStopIsoMdlEngagement()
+      return nil as NSDictionary?
+    }
+  }
+
   @objc(uninitialize:resolver:rejecter:)
   func uninitialize(
     deleteData: Bool,

package/ios/RSEKeyStorage.swift

@@ -178,7 +178,19 @@ class RSEKeyStorage: NativeKeyStorage {
         
         return signatureData
     }
-    
+
+    func generateAttestation(keyReference: Data, nonce: String?) async throws -> [String] {
+        throw NativeKeyStorageError.Unsupported
+    }
+
+    func generateAttestationKey(keyAlias: String, nonce: String?) async throws -> ProcivisOneCore.GeneratedKeyBindingDto {
+        throw NativeKeyStorageError.Unsupported
+    }
+
+    func signWithAttestationKey(keyReference: Data, message: Data) async throws -> Data {
+        throw NativeKeyStorageError.Unsupported
+    }
+
     func changePin() async throws {
         guard let asset = UbqSdk.assets.first else {
             throw NativeKeyStorageError.SignatureFailure(reason: "Key does not exist")

package/ios/RSEKeyStorage.swift_opensource

@@ -18,6 +18,18 @@ class RSEKeyStorage: NativeKeyStorage {
     func sign(keyReference: Data, message: Data) async throws -> Data {
         fatalError("sign(keyReference:,message:) has not been implemented")
     }
+
+    func generateAttestation(keyReference: Data, nonce: String?) async throws -> [String] {
+        fatalError("generateAttestation(keyReference:,nonce:) has not been implemented")
+    }
+
+    func generateAttestationKey(keyAlias: String, nonce: String?) async throws -> ProcivisOneCore.GeneratedKeyBindingDto {
+        fatalError("generateAttestationKey(keyAlias:,nonce:) has not been implemented")
+    }
+    
+    func signWithAttestationKey(keyReference: Data, message: Data) async throws -> Data {
+        fatalError("signWithAttestationKey(keyReference:,message:) has not been implemented")
+    }
     
     func changePin() async throws {
         fatalError("changePin() has not been implemented")

package/ios/Serialize.swift

@@ -51,6 +51,8 @@ private func serialize(historyMetadata: HistoryMetadataBinding) throws -> Any {
         return try serializeAny(value);
     case let .errorMetadata(value):
         return try serializeAny(value);
+    case let .walletUnitJwt(value):
+        return ["jwt": value] as NSDictionary;
     }
 }
 
@@ -111,5 +113,11 @@ private func serialize(invitationResponse: HandleInvitationResponseBindingEnum)
             "interactionId": interactionId,
             "proofId": proofId
         ];
+
+    case let .authorizationCodeFlow(interactionId, authorizationCodeFlowUrl):
+        return [
+            "interactionId": interactionId,
+            "authorizationCodeFlowUrl": authorizationCodeFlowUrl
+        ];
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@procivis/react-native-one-core",
-  "version": "1.56306.0",
+  "version": "1.60807.0",
   "author": "Procivis AG (https://procivis.ch)",
   "license": "Apache-2.0",
   "description": "ONE core bindings for React Native",