@procivis/react-native-one-core 1.58802.0 → 1.60807.0

package/README.md

@@ -162,7 +162,7 @@ Support for the recently published [FIPS-204][fips] is planned for the near futu
   - [OID4VP over BLE][ble]; optimized version of Draft 00
   - OID4VP over MQTT; proprietary adaptation of "OID4VP over BLE" via MQTT channel
 - ISO/IEC 18013
-  - [18013-5][iso5]: QR code engagement and offline device retrieval over BLE
+  - [18013-5][iso5]: Device engagement using either NFC or QR Code, data retrieval using BLE
   - [18013-7][iso7]: Online data retrieval via OID4VP
 
 ### Key storage

package/android/build.gradle

@@ -70,9 +70,10 @@ dependencies {
     implementation("org.jetbrains.kotlinx:kotlinx-coroutines-android:1.8.1")
     implementation 'com.facebook.react:react-native:+'
 
-    releaseImplementation(name: 'onecore-release', ext: 'aar')
-    debugImplementation(name: 'onecore-debug', ext: 'aar')
-    implementation 'net.java.dev.jna:jna:5.13.0@aar'
+    releaseApi(name: 'onecore-release', ext: 'aar')
+    debugApi(name: 'onecore-debug', ext: 'aar')
+    implementation 'net.java.dev.jna:jna:5.17.0@aar'
+    implementation 'org.greenrobot:eventbus:3.3.1'
     implementation("org.jetbrains.kotlin:kotlin-reflect:${safeExtGet('kotlinVersion', '1.9.0')}")
 
     implementation(name: 'core-reactnative-compatible-2025.0305.1', ext: 'aar')

package/android/build.gradle_opensource

@@ -70,9 +70,10 @@ dependencies {
     implementation("org.jetbrains.kotlinx:kotlinx-coroutines-android:1.8.1")
     implementation 'com.facebook.react:react-native:+'
 
-    releaseImplementation(name: 'onecore-release', ext: 'aar')
-    debugImplementation(name: 'onecore-debug', ext: 'aar')
-    implementation 'net.java.dev.jna:jna:5.13.0@aar'
+    releaseApi(name: 'onecore-release', ext: 'aar')
+    debugApi(name: 'onecore-debug', ext: 'aar')
+    implementation 'net.java.dev.jna:jna:5.17.0@aar'
+    implementation 'org.greenrobot:eventbus:3.3.1'
     implementation("org.jetbrains.kotlin:kotlin-reflect:${safeExtGet('kotlinVersion', '1.9.0')}")
 }
 

package/android/src/main/java/ch/procivis/one/core/ProcivisOneCoreModule.kt

@@ -1,5 +1,7 @@
 package ch.procivis.one.core
 
+import ch.procivis.one.core.nfc.HCE as NfcHCE
+import ch.procivis.one.core.nfc.Scanner as NfcScanner
 import ch.procivis.one.core.Deserialize.construct
 import ch.procivis.one.core.DeserializeSpecific.enumList
 import ch.procivis.one.core.Serialize.convertToRN
@@ -46,16 +48,21 @@ class ProcivisOneCoreModule(reactContext: ReactApplicationContext) :
     @ReactMethod
     fun initialize(configJson: String, promise: Promise) {
         syncCall(promise) {
-            val dataDirPath = this.reactApplicationContext.filesDir.absolutePath
-            ubiqu = ubiqu ?: UbiquKeyStorage(this.reactApplicationContext)
+            val context = this.reactApplicationContext
+            val dataDirPath = context.filesDir.absolutePath
+            ubiqu = ubiqu ?: UbiquKeyStorage(context)
             oneCore =
                 initializeCore(
-                    configJson = configJson,
                     dataDirPath = dataDirPath,
-                    nativeSecureElement = AndroidKeyStoreKeyStorage(this.reactApplicationContext),
-                    remoteSecureElement = ubiqu,
-                    bleCentral = AndroidBLECentral(this.reactApplicationContext),
-                    blePeripheral = AndroidBLEPeripheral(this.reactApplicationContext)
+                    params = InitParamsDto(
+                        configJson = configJson,
+                        nativeSecureElement = AndroidKeyStoreKeyStorage(context),
+                        remoteSecureElement = ubiqu,
+                        bleCentral = AndroidBLECentral(context),
+                        blePeripheral = AndroidBLEPeripheral(context),
+                        nfcHce = NfcHCE(context),
+                        nfcScanner = NfcScanner(context) { context.currentActivity }
+                    )
                 )
             return@syncCall null
         }
@@ -253,12 +260,32 @@ class ProcivisOneCoreModule(reactContext: ReactApplicationContext) :
     ) {
         asyncCall(promise, scope) {
             val submitCredentials =
-                mutableMapOf<String, PresentationSubmitCredentialRequestBindingDto>()
+                mutableMapOf<String, List<PresentationSubmitCredentialRequestBindingDto>>()
             for (entry in credentials.entryIterator) {
-                val credential = entry.value as ReadableMap
-                submitCredentials[entry.key] = construct(credential)
+                val credentialList = when (val credentialValue = entry.value) {
+                    is ReadableMap -> {
+                        // Single credential object - convert to list
+                        listOf(construct<PresentationSubmitCredentialRequestBindingDto>(credentialValue))
+                    }
+                    is ReadableArray -> {
+                        // Array of credentials - convert each one
+                        (0 until credentialValue.size()).map { index ->
+                            construct<PresentationSubmitCredentialRequestBindingDto>(credentialValue.getMap(index)!!)
+                        }
+                    }
+                    else -> {
+                        throw IllegalArgumentException("Credential value must be either a Map or Array")
+                    }
+                }
+                submitCredentials[entry.key] = credentialList
             }
-            getCore().holderSubmitProof(interactionId, submitCredentials, didId, identifierId, keyId)
+            getCore().holderSubmitProof(
+                interactionId,
+                submitCredentials,
+                didId,
+                identifierId,
+                keyId
+            )
             return@asyncCall null
         }
     }
@@ -358,9 +385,10 @@ class ProcivisOneCoreModule(reactContext: ReactApplicationContext) :
     }
 
     @ReactMethod
-    fun proposeProof(exchange: String, organisationId: String, promise: Promise) {
+    fun proposeProof(exchange: String, organisationId: String, engagement: ReadableArray, promise: Promise) {
         asyncCall(promise, scope) {
-            val result = getCore().proposeProof(exchange, organisationId)
+            val engagement = DeserializeSpecific.ids(engagement)
+            val result = getCore().proposeProof(exchange, organisationId, engagement)
             return@asyncCall convertToRN(result)
         }
     }
@@ -588,8 +616,8 @@ class ProcivisOneCoreModule(reactContext: ReactApplicationContext) :
     @ReactMethod
     fun holderRegisterWalletUnit(request: ReadableMap, promise: Promise) {
         asyncCall(promise, scope) {
-            getCore().holderRegisterWalletUnit(construct(request))
-            return@asyncCall null
+            val result = getCore().holderRegisterWalletUnit(construct(request))
+            return@asyncCall convertToRN(result)
         }
     }
 
@@ -609,6 +637,21 @@ class ProcivisOneCoreModule(reactContext: ReactApplicationContext) :
         }
     }
 
+    @ReactMethod
+    fun nfcReadIsoMdlEngagement(request: ReadableMap, promise: Promise) {
+        asyncCall(promise, scope) {
+            return@asyncCall getCore().nfcReadIsoMdlEngagement(construct(request))
+        }
+    }
+
+    @ReactMethod
+    fun nfcStopIsoMdlEngagement(promise: Promise) {
+        asyncCall(promise, scope) {
+            getCore().nfcStopIsoMdlEngagement()
+            return@asyncCall null
+        }
+    }
+
     @ReactMethod
     fun uninitialize(deleteData: Boolean, promise: Promise) {
         asyncCall(promise, scope) {

package/android/src/main/java/ch/procivis/one/core/ubiqu/UbiquKeyStorage.kt

@@ -110,6 +110,18 @@ class UbiquKeyStorage(private val context: ReactApplicationContext) : NativeKeyS
         }
     }
 
+    override suspend fun generateAttestation(keyReference: ByteArray, nonce: String?): List<String> {
+        throw NativeKeyStorageException.Unsupported()
+    }
+
+    override suspend fun signWithAttestationKey(keyReference: ByteArray, message: ByteArray): ByteArray {
+        throw NativeKeyStorageException.Unsupported()
+    }
+
+    override suspend fun generateAttestationKey(keyAlias: String, nonce: String?): GeneratedKeyBindingDto {
+        throw NativeKeyStorageException.Unsupported()
+    }
+
     // ==== public interface
     suspend fun changePin(): String? {
         return exceptionWrapper {

package/android/src/main/java/ch/procivis/one/core/ubiqu/UbiquKeyStorage.kt_opensource

@@ -20,6 +20,18 @@ class UbiquKeyStorage(private val context: ReactApplicationContext) : NativeKeyS
         throw NativeKeyStorageException.Unsupported()
     }
 
+    override suspend fun generateAttestation(keyReference: ByteArray, nonce: String?): List<String> {
+        throw NativeKeyStorageException.Unsupported()
+    }
+
+    override suspend fun generateAttestationKey(keyAlias: String, nonce: String?): GeneratedKeyBindingDto {
+        throw NativeKeyStorageException.Unsupported()
+    }
+
+    override suspend fun signWithAttestationKey(keyReference: ByteArray, message: ByteArray): ByteArray {
+        throw NativeKeyStorageException.Unsupported()
+    }
+
     // ==== public interface
     fun changePin(): String? {
         throw NativeKeyStorageException.Unsupported()

package/core-sdk.json

@@ -1,16 +1,16 @@
 {
   "android": {
     "debug": {
-      "url": "https://onetfstatestorage.blob.core.windows.net/core-sdk/android/58802/onecore-debug.aar",
-      "sha1": "42ea4049778b8b3b842e51682291e1ef445ce695"
+      "url": "https://onesdk.blob.core.windows.net/core-sdk/60807/android/onecore-debug.aar",
+      "sha1": "164dfcb986d8f86596e69ceed8a470562d3b0b6f"
     },
     "release": {
-      "url": "https://onetfstatestorage.blob.core.windows.net/core-sdk/android/58802/onecore-release.aar",
-      "sha1": "c7891e923cfe5501b278e80b3298ba901ae20825"
+      "url": "https://onesdk.blob.core.windows.net/core-sdk/60807/android/onecore-release.aar",
+      "sha1": "da72ce7724c932b14b19df2911ec7c2586c31130"
     }
   },
   "ios": {
-    "url": "https://onetfstatestorage.blob.core.windows.net/core-sdk/ios/58802/deploy.zip",
-    "sha1": "a2b9e352b1960121eacf6345326e4ad75734675b"
+    "url": "https://onesdk.blob.core.windows.net/core-sdk/60807/ios/deploy.zip",
+    "sha1": "7b5d19a6621d7e3eb0fcc492e70681001d5f3483"
   }
 }

package/dist/src/core.d.ts

@@ -12,7 +12,8 @@ import { CreateRemoteTrustEntityRequest, CreateTrustAnchorRequest, CreateTrustEn
 import { CacheType } from "./cache";
 import { CreateOrganisationRequest, UpsertOrganisationRequest } from "./organisation";
 import { CreateIdentifierRequest, IdentifierDetail, IdentifierListItem, IdentifierListQuery } from "./identifier";
-import { HolderAttestationWalletUnitResponse, HolderRefreshWalletUnitRequest, HolderRegisterWalletUnitRequest } from "./walletUnit";
+import { HolderAttestationWalletUnitResponse, HolderRefreshWalletUnitRequest, HolderRegisterWalletUnitRequest, HolderRegisterWalletUnitResponse } from "./walletUnit";
+import { NfcScanRequest } from "./nfc";
 export * from "./backup";
 export * from "./cache";
 export * from "./config";
@@ -22,6 +23,7 @@ export * from "./did";
 export * from "./identifier";
 export * from "./history";
 export * from "./key";
+export * from "./nfc";
 export * from "./list";
 export * from "./organisation";
 export * from "./proof";
@@ -39,9 +41,18 @@ export interface Version {
 }
 export type InvitationResult = InvitationResultCredentialIssuance | InvitationResultProofRequest | AuthorizationCodeFlow;
 export interface HandleInvitationRequest {
+    /** Typically encoded as a QR code or deep link by the issuer or
+     * verifier. For example:
+     * "https://example.com/credential-offer" */
     url: string;
     organisationId: string;
+    /** For configurations with multiple transport protocols enabled
+     * you can specify which one to use for this interaction. */
     transport?: string[];
+    /** For issuer-initiated Authorization Code Flows, provide the
+     * authorization server with the URI it should return the user
+     * to once authorization is complete. For example:
+     * "myapp://example". */
     redirectUri?: string;
 }
 export interface ResolveJsonLdContextResponse {
@@ -59,6 +70,11 @@ export interface ONECore {
     getIdentifiers(query: IdentifierListQuery): Promise<ItemList<IdentifierListItem>>;
     getIdentifier(identifierId: IdentifierListItem["id"]): Promise<IdentifierDetail>;
     deleteIdentifier(identifierId: IdentifierListItem["id"]): Promise<void>;
+    /**
+     * For a wallet, handles the interaction once the wallet connects to a share
+     * endpoint URL (for example, scans the QR code of an offered credential or
+     * request for proof).
+     */
     handleInvitation(request: HandleInvitationRequest): Promise<InvitationResult>;
     holderAcceptCredential(interactionId: InvitationResultCredentialIssuance["interactionId"], didId: DidListItem["id"] | undefined, identifierId: IdentifierListItem["id"] | undefined, keyId: string | undefined, txCode: string | undefined): Promise<void>;
     holderRejectCredential(interactionId: InvitationResultCredentialIssuance["interactionId"]): Promise<void>;
@@ -67,10 +83,14 @@ export interface ONECore {
     /** For wallet-initiated flows, continues the OpenID4VCI issuance process
      * after completing authorization.
      */
-    continueIssuance(url: string): Promise<ContinueIssuanceResponse>;
+    continueIssuance(
+    /** Starts with the `redirectUri` and is used to continue the Authorization
+     * Code Flow issuance process. For example:
+     * "myapp://example/credential-offer?code=xxx&clientId=myWallet&..." */
+    url: string): Promise<ContinueIssuanceResponse>;
     getPresentationDefinition(proofId: ProofDetail["id"]): Promise<PresentationDefinition>;
     holderRejectProof(interactionId: InvitationResultProofRequest["interactionId"]): Promise<void>;
-    holderSubmitProof(interactionId: InvitationResultProofRequest["interactionId"], credentials: Record<PresentationDefinitionRequestedCredential["id"], PresentationSubmitCredentialRequest>, didId: DidListItem["id"] | undefined, identifierId: IdentifierListItem["id"] | undefined, keyId: string | undefined): Promise<void>;
+    holderSubmitProof(interactionId: InvitationResultProofRequest["interactionId"], credentials: Record<PresentationDefinitionRequestedCredential["id"], PresentationSubmitCredentialRequest | PresentationSubmitCredentialRequest[]>, didId: DidListItem["id"] | undefined, identifierId: IdentifierListItem["id"] | undefined, keyId: string | undefined): Promise<void>;
     getCredentials(query: CredentialListQuery): Promise<ItemList<CredentialListItem>>;
     runTask(task: string): Promise<string>;
     deleteProofClaims(proofId: ProofDetail["id"]): Promise<void>;
@@ -80,6 +100,7 @@ export interface ONECore {
     getCredentialSchema(credentialSchemaId: CredentialSchema["id"]): Promise<CredentialSchemaDetail>;
     getCredentialSchemas(query: CredentialSchemaListQuery): Promise<ItemList<CredentialSchema>>;
     deleteCredentialSchema(credentialSchemaId: CredentialSchema["id"]): Promise<void>;
+    /** For verifiers, creates a proof request. */
     createProof(request: CreateProofRequest): Promise<ProofDetail["id"]>;
     shareProof(proofId: ProofDetail["id"], request: ShareProofRequest): Promise<ShareProofResponse>;
     shareProofSchema(proofSchemaId: ProofSchema["id"]): Promise<ShareProofSchemaResponse>;
@@ -87,7 +108,11 @@ export interface ONECore {
     getProof(proofId: ProofDetail["id"]): Promise<ProofDetail>;
     getProofs(query: ProofListQuery): Promise<ItemList<ProofListItem>>;
     deleteProof(proofId: ProofDetail["id"]): Promise<void>;
-    proposeProof(exchange: string, organisationId: string): Promise<ProposeProofResponse>;
+    /** For wallets, initiates device engagement for offline flows.
+     * Reference the `verificationEngagement` entry of your configuration
+     * for your options for `engagement`.
+     */
+    proposeProof(exchange: string, organisationId: string, engagement: string[]): Promise<ProposeProofResponse>;
     createProofSchema(request: CreateProofSchemaRequest): Promise<ProofSchema["id"]>;
     getProofSchemas(query: ProofSchemaListQuery): Promise<ItemList<ProofSchemaListItem>>;
     getProofSchema(proofSchemaId: ProofSchema["id"]): Promise<ProofSchema>;
@@ -133,9 +158,20 @@ export interface ONECore {
      */
     rollbackImport(): Promise<void>;
     resolveJsonldContext(url: string): Promise<ResolveJsonLdContextResponse>;
-    holderRegisterWalletUnit(request: HolderRegisterWalletUnitRequest): Promise<void>;
+    holderRegisterWalletUnit(request: HolderRegisterWalletUnitRequest): Promise<HolderRegisterWalletUnitResponse>;
     holderRefreshWalletUnit(request: HolderRefreshWalletUnitRequest): Promise<void>;
     holderGetWalletUnitAttestation(organisationId: string): Promise<HolderAttestationWalletUnitResponse>;
+    /**
+     * Start scanning for ISO 18013-5 NFC engagement
+     *
+     * @param {NfcScanRequest} request system overlay messages to be displayed (iOS only)
+     * @returns {string} encoded NFC engagement to be used for {@link CreateProofRequest.isoMdlEngagement}
+     */
+    nfcReadIsoMdlEngagement(request: NfcScanRequest): Promise<string>;
+    /**
+     * Explicitly stop scan started via {@link nfcReadIsoMdlEngagement}
+     */
+    nfcStopIsoMdlEngagement(): Promise<void>;
     /**
      * Uninitialize the core instance
      *
@@ -145,4 +181,4 @@ export interface ONECore {
      */
     uninitialize(deleteData: boolean): Promise<void>;
 }
-export declare const interfaceMethodNames: readonly ["getVersion", "getConfig", "createOrganisation", "upsertOrganisation", "generateKey", "createDid", "getDids", "createIdentifier", "getIdentifier", "getIdentifiers", "deleteIdentifier", "handleInvitation", "holderAcceptCredential", "holderRejectCredential", "initiateIssuance", "continueIssuance", "getPresentationDefinition", "holderRejectProof", "holderSubmitProof", "getCredentials", "runTask", "deleteProofClaims", "getCredential", "deleteCredential", "importCredentialSchema", "getCredentialSchema", "getCredentialSchemas", "deleteCredentialSchema", "createProof", "shareProof", "shareProofSchema", "shareCredentialSchema", "getProof", "getProofs", "deleteProof", "proposeProof", "createProofSchema", "getProofSchemas", "getProofSchema", "deleteProofSchema", "importProofSchema", "checkRevocation", "createTrustAnchor", "deleteTrustAnchor", "getTrustAnchor", "getTrustAnchors", "createTrustEntity", "getTrustEntity", "getTrustEntities", "getTrustEntityByDid", "resolveTrustEntityByIdentifier", "createRemoteTrustEntity", "getRemoteTrustEntity", "updateRemoteTrustEntity", "getHistory", "getHistoryEntry", "createBackup", "backupInfo", "deleteCache", "unpackBackup", "finalizeImport", "rollbackImport", "resolveJsonldContext", "holderRegisterWalletUnit", "holderRefreshWalletUnit", "holderGetWalletUnitAttestation", "uninitialize"];
+export declare const interfaceMethodNames: readonly ["getVersion", "getConfig", "createOrganisation", "upsertOrganisation", "generateKey", "createDid", "getDids", "createIdentifier", "getIdentifier", "getIdentifiers", "deleteIdentifier", "handleInvitation", "holderAcceptCredential", "holderRejectCredential", "initiateIssuance", "continueIssuance", "getPresentationDefinition", "holderRejectProof", "holderSubmitProof", "getCredentials", "runTask", "deleteProofClaims", "getCredential", "deleteCredential", "importCredentialSchema", "getCredentialSchema", "getCredentialSchemas", "deleteCredentialSchema", "createProof", "shareProof", "shareProofSchema", "shareCredentialSchema", "getProof", "getProofs", "deleteProof", "proposeProof", "createProofSchema", "getProofSchemas", "getProofSchema", "deleteProofSchema", "importProofSchema", "checkRevocation", "createTrustAnchor", "deleteTrustAnchor", "getTrustAnchor", "getTrustAnchors", "createTrustEntity", "getTrustEntity", "getTrustEntities", "getTrustEntityByDid", "resolveTrustEntityByIdentifier", "createRemoteTrustEntity", "getRemoteTrustEntity", "updateRemoteTrustEntity", "getHistory", "getHistoryEntry", "createBackup", "backupInfo", "deleteCache", "unpackBackup", "finalizeImport", "rollbackImport", "resolveJsonldContext", "holderRegisterWalletUnit", "holderRefreshWalletUnit", "holderGetWalletUnitAttestation", "nfcReadIsoMdlEngagement", "nfcStopIsoMdlEngagement", "uninitialize"];

package/dist/src/core.js

@@ -7,6 +7,7 @@ export * from "./did";
 export * from "./identifier";
 export * from "./history";
 export * from "./key";
+export * from "./nfc";
 export * from "./list";
 export * from "./organisation";
 export * from "./proof";
@@ -81,6 +82,8 @@ export const interfaceMethodNames = [
     "holderRegisterWalletUnit",
     "holderRefreshWalletUnit",
     "holderGetWalletUnitAttestation",
+    "nfcReadIsoMdlEngagement",
+    "nfcStopIsoMdlEngagement",
     "uninitialize",
 ];
 // Typescript automatic assertions to keep ONECore and interfaceMethodNames in sync

package/dist/src/credential.d.ts

@@ -99,6 +99,7 @@ export type CredentialListQuery = ListQuery & {
     ids?: Array<CredentialListItem["id"]>;
     status?: CredentialStateEnum[];
     profile?: string;
+    credentialSchemaIds?: Array<CredentialSchema["id"]>;
     include?: CredentialListIncludeEntityType[];
     /** accepts the RFC3339 format, e.g. use the {@link Date.toISOString} */
     createdDateAfter?: string;
@@ -132,9 +133,17 @@ export interface CredentialRevocationCheckResponse {
     reason?: string;
 }
 export interface InvitationResultCredentialIssuance {
+    /** For reference. */
     interactionId: string;
+    /** Offered credential. */
     credentialIds: Array<CredentialListItem["id"]>;
+    /** Metadata for entering a transaction code.
+     * If a pre-authorized code is issued with a transaction code object, the wallet
+     * user must input a transaction code to receive the offered credential. This code
+     * is typically sent through a separate channel such as SMS or email.
+     */
     txCode?: OpenID4VCITxCode;
+    /** Metadata for selecting an appropriate key. */
     credentialConfigurationsSupported: Record<CredentialListItem["id"], CredentialConfigurationSupported>;
 }
 export interface OpenID4VCITxCode {
@@ -165,9 +174,11 @@ export interface InitiateIssuanceResponse {
     url: string;
 }
 export interface ContinueIssuanceResponse {
+    /** For reference. */
     interactionId: string;
+    /** Offered credentials. */
     credentialIds: Array<CredentialListItem["id"]>;
-    /** Informs client of API about valid options for issuance including applicable signing algorithms. */
+    /** Metadata for selecting an appropriate key. */
     credentialConfigurationsSupported: Record<CredentialListItem["id"], CredentialConfigurationSupported>;
 }
 export interface CredentialConfigurationSupported {
@@ -177,6 +188,9 @@ export interface OpenID4VCIProofTypeSupported {
     proofSigningAlgValuesSupported: string[];
 }
 export interface AuthorizationCodeFlow {
+    /** For reference. */
     interactionId: string;
+    /** For issuer-initiated Authorization Code Flows, use this URL to start
+     * the authorization process with the authorization server. */
     authorizationCodeFlowUrl: string;
 }

package/dist/src/nfc.d.ts

@@ -0,0 +1,5 @@
+export interface NfcScanRequest {
+    inProgressMessage?: string;
+    failureMessage?: string;
+    successMessage?: string;
+}

package/dist/src/nfc.js

@@ -0,0 +1 @@
+export {};

package/dist/src/proof.d.ts

@@ -45,6 +45,7 @@ export interface ProofDetail {
     completedDate?: string;
     claimsRemovedAt?: string;
     profile?: string;
+    engagement?: string;
 }
 export interface ProofListItem {
     id: string;
@@ -60,7 +61,14 @@ export interface ProofListItem {
     schema?: ProofSchemaListItem;
     retainUntilDate?: string;
     profile?: string;
-}
+    engagement?: string;
+}
+/** If protocol is `ISO_MDL`, specify the device engagement
+ * type by referencing an entry from `verificationEngagement`
+ * of your configurationi. `isoMdlEngagement` accepts either
+ * QR code content (for QR device engagement) or NFC engagement
+ * parameters from {@link nfcReadIsoMdlEngagement}.
+ */
 export interface CreateProofRequest {
     proofSchemaId: ProofSchemaListItem["id"];
     verifierDidId?: DidListItem["id"];
@@ -72,6 +80,7 @@ export interface CreateProofRequest {
     isoMdlEngagement?: string;
     transport?: string[];
     profile?: string;
+    engagement?: string;
 }
 export interface ScanToVerifyRequest {
     credential: string;
@@ -109,6 +118,7 @@ export declare enum PresentationDefinitionRuleTypeEnum {
 export interface PresentationDefinitionRequestedCredential {
     id: string;
     name?: string;
+    multiple?: boolean;
     purpose?: string;
     fields: PresentationDefinitionField[];
     applicableCredentials: Array<CredentialListItem["id"]>;
@@ -165,7 +175,7 @@ export interface ProofListQuery extends ListQuery {
 export interface ProposeProofResponse {
     proofId: string;
     interactionId: string;
-    url: string;
+    url?: string;
 }
 export interface InvitationResultProofRequest {
     interactionId: string;

package/dist/src/walletUnit.d.ts

@@ -3,21 +3,29 @@ export declare enum WalletProviderTypeEnum {
     PROCIVIS_ONE = "PROCIVIS_ONE"
 }
 export declare enum WalletUnitStatusEnum {
+    PENDING = "PENDING",
     ACTIVE = "ACTIVE",
-    REVOKED = "REVOKED"
+    REVOKED = "REVOKED",
+    ERROR = "ERROR"
 }
 export interface WalletProvider {
     url: string;
     type: WalletProviderTypeEnum;
     name: string;
+    appIntegrityCheckRequired: boolean;
 }
 export interface HolderRegisterWalletUnitRequest {
     organisationId: string;
     walletProvider: WalletProvider;
+    keyType: KeyListItem["keyType"];
+}
+export interface HolderRegisterWalletUnitResponse {
+    id: string;
     keyId: KeyListItem["id"];
 }
 export interface HolderRefreshWalletUnitRequest {
     organisationId: string;
+    appIntegrityCheckRequired: boolean;
 }
 export interface HolderAttestationWalletUnitResponse {
     id: string;

package/dist/src/walletUnit.js

@@ -4,6 +4,8 @@ export var WalletProviderTypeEnum;
 })(WalletProviderTypeEnum || (WalletProviderTypeEnum = {}));
 export var WalletUnitStatusEnum;
 (function (WalletUnitStatusEnum) {
+    WalletUnitStatusEnum["PENDING"] = "PENDING";
     WalletUnitStatusEnum["ACTIVE"] = "ACTIVE";
     WalletUnitStatusEnum["REVOKED"] = "REVOKED";
+    WalletUnitStatusEnum["ERROR"] = "ERROR";
 })(WalletUnitStatusEnum || (WalletUnitStatusEnum = {}));

package/ios/ProcivisOneCoreModule.m

@@ -190,6 +190,7 @@ RCT_EXTERN_METHOD(deleteProof:(NSString *)proofId
 
 RCT_EXTERN_METHOD(proposeProof:(NSString *)exchange
                   organisationId:(NSString *)organisationId
+                  engagement:(NSArray *)engagement
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 
@@ -289,6 +290,13 @@ RCT_EXTERN_METHOD(holderGetWalletUnitAttestation:(NSString *)organisationId
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 
+RCT_EXTERN_METHOD(nfcReadIsoMdlEngagement:(NSDictionary *)request
+                  resolver:(RCTPromiseResolveBlock)resolve
+                  rejecter:(RCTPromiseRejectBlock)reject)
+
+RCT_EXTERN_METHOD(nfcStopIsoMdlEngagement:(RCTPromiseResolveBlock)resolve
+                  rejecter:(RCTPromiseRejectBlock)reject)
+
 RCT_EXTERN_METHOD(uninitialize:(BOOL *)deleteData
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)

package/ios/ProcivisOneCoreModule.swift

@@ -61,12 +61,16 @@ class ProcivisOneCoreModule: RCTEventEmitter {
         }
       }
       self.core = try initializeCore(
-        configJson: configJson,
         dataDirPath: dataDirPath,
-        nativeSecureElement: SecureEnclaveKeyStorage(),
-        remoteSecureElement: rseKeyStorage,
-        bleCentral: IOSBLECentral(),
-        blePeripheral: IOSBLEPeripheral()
+        params: InitParamsDto(
+          configJson: configJson,
+          nativeSecureElement: SecureEnclaveKeyStorage(),
+          remoteSecureElement: rseKeyStorage,
+          bleCentral: IOSBLECentral(),
+          blePeripheral: IOSBLEPeripheral(),
+          nfcHce: nil,
+          nfcScanner: NFCScanner()
+        )
       )
 
       return nil as NSDictionary?
@@ -579,17 +583,19 @@ class ProcivisOneCoreModule: RCTEventEmitter {
     }
   }
 
-  @objc(proposeProof:organisationId:resolver:rejecter:)
+  @objc(proposeProof:organisationId:engagement:resolver:rejecter:)
   func proposeProof(
     exchange: String,
     organisationId: String,
+    engagement: NSArray,
     resolve: @escaping RCTPromiseResolveBlock,
     reject: @escaping RCTPromiseRejectBlock
   ) {
     asyncCall(resolve, reject) {
       let result = try await self.getCore().proposeProof(
         exchange: exchange,
-        organisationId: organisationId
+        organisationId: organisationId,
+        engagement: try deserialize(engagement)
       )
       return try serializeAny(result)
     }
@@ -865,8 +871,8 @@ class ProcivisOneCoreModule: RCTEventEmitter {
     reject: @escaping RCTPromiseRejectBlock
   ) {
     asyncCall(resolve, reject) {
-      try await self.getCore().holderRegisterWalletUnit(request: try deserialize(request))
-      return nil as NSDictionary?
+      let result = try await self.getCore().holderRegisterWalletUnit(request: try deserialize(request))
+      return try serializeAny(result)
     }
   }
 
@@ -894,6 +900,28 @@ class ProcivisOneCoreModule: RCTEventEmitter {
     }
   }
 
+  @objc(nfcReadIsoMdlEngagement:resolver:rejecter:)
+  func nfcReadIsoMdlEngagement(
+    request: NSDictionary,
+    resolve: @escaping RCTPromiseResolveBlock,
+    reject: @escaping RCTPromiseRejectBlock
+  ) {
+    asyncCall(resolve, reject) {
+      return try await self.getCore().nfcReadIsoMdlEngagement(request: try deserialize(request))
+    }
+  }
+
+  @objc(nfcStopIsoMdlEngagement:rejecter:)
+  func nfcStopIsoMdlEngagement(
+    resolve: @escaping RCTPromiseResolveBlock,
+    reject: @escaping RCTPromiseRejectBlock
+  ) {
+    asyncCall(resolve, reject) {
+      try await self.getCore().nfcStopIsoMdlEngagement()
+      return nil as NSDictionary?
+    }
+  }
+
   @objc(uninitialize:resolver:rejecter:)
   func uninitialize(
     deleteData: Bool,

package/ios/RSEKeyStorage.swift

@@ -178,7 +178,19 @@ class RSEKeyStorage: NativeKeyStorage {
         
         return signatureData
     }
-    
+
+    func generateAttestation(keyReference: Data, nonce: String?) async throws -> [String] {
+        throw NativeKeyStorageError.Unsupported
+    }
+
+    func generateAttestationKey(keyAlias: String, nonce: String?) async throws -> ProcivisOneCore.GeneratedKeyBindingDto {
+        throw NativeKeyStorageError.Unsupported
+    }
+
+    func signWithAttestationKey(keyReference: Data, message: Data) async throws -> Data {
+        throw NativeKeyStorageError.Unsupported
+    }
+
     func changePin() async throws {
         guard let asset = UbqSdk.assets.first else {
             throw NativeKeyStorageError.SignatureFailure(reason: "Key does not exist")

package/ios/RSEKeyStorage.swift_opensource

@@ -18,6 +18,18 @@ class RSEKeyStorage: NativeKeyStorage {
     func sign(keyReference: Data, message: Data) async throws -> Data {
         fatalError("sign(keyReference:,message:) has not been implemented")
     }
+
+    func generateAttestation(keyReference: Data, nonce: String?) async throws -> [String] {
+        fatalError("generateAttestation(keyReference:,nonce:) has not been implemented")
+    }
+
+    func generateAttestationKey(keyAlias: String, nonce: String?) async throws -> ProcivisOneCore.GeneratedKeyBindingDto {
+        fatalError("generateAttestationKey(keyAlias:,nonce:) has not been implemented")
+    }
+    
+    func signWithAttestationKey(keyReference: Data, message: Data) async throws -> Data {
+        fatalError("signWithAttestationKey(keyReference:,message:) has not been implemented")
+    }
     
     func changePin() async throws {
         fatalError("changePin() has not been implemented")

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@procivis/react-native-one-core",
-  "version": "1.58802.0",
+  "version": "1.60807.0",
   "author": "Procivis AG (https://procivis.ch)",
   "license": "Apache-2.0",
   "description": "ONE core bindings for React Native",