@thirtified/eudi-dev 0.0.0-stage → 0.1.1

package/dist/runner.js

@@ -0,0 +1,246 @@
+import { spawn } from 'node:child_process';
+import { mkdtemp, rm, stat, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { EudiDevError, lastLine } from './errors.js';
+import { isPathInput, isUrlInput } from './input.js';
+const STRIPPED_LEGACY_VARS = ['OID4VC_DEV_HOME', 'EUDI_REMOTE_TIMEOUT'];
+/** Builds the environment for a child process. Exported for tests. */
+export function buildEnv(config, base = process.env) {
+    const env = {};
+    for (const [key, value] of Object.entries(base)) {
+        if (value === undefined)
+            continue;
+        if (!config.inheritEudiEnv && (key.startsWith('EUDI_DEV_') || STRIPPED_LEGACY_VARS.includes(key)))
+            continue;
+        env[key] = value;
+    }
+    env.EUDI_DEV_HOME = config.home;
+    env.NO_COLOR = '1';
+    for (const [key, value] of Object.entries(config.env ?? {})) {
+        if (value === undefined)
+            delete env[key];
+        else
+            env[key] = value;
+    }
+    return env;
+}
+/** Collects flags as `--name=value`, so a value starting with `-` is never read as a flag. */
+export class ArgList {
+    args;
+    constructor(...command) {
+        this.args = [...command];
+    }
+    /** `true` → `--name`, `false` → `--name=false`, `undefined` → nothing. */
+    bool(name, value) {
+        if (value === true)
+            this.args.push(`--${name}`);
+        else if (value === false)
+            this.args.push(`--${name}=false`);
+        return this;
+    }
+    /** Only adds `--name` when `value` is true. For flags that default to false. */
+    on(name, value) {
+        if (value)
+            this.args.push(`--${name}`);
+        return this;
+    }
+    value(name, value) {
+        if (value !== undefined && value !== null)
+            this.args.push(`--${name}=${value}`);
+        return this;
+    }
+    /** A repeatable flag: one `--name=value` per entry. */
+    repeat(name, values) {
+        for (const v of values ?? [])
+            this.args.push(`--${name}=${v}`);
+        return this;
+    }
+    /** A comma-separated single flag. */
+    csv(name, values) {
+        if (values && values.length > 0)
+            this.args.push(`--${name}=${values.join(',')}`);
+        return this;
+    }
+    push(...args) {
+        this.args.push(...args);
+        return this;
+    }
+}
+/** Temp files for one call. */
+export class Scratch {
+    dir;
+    n = 0;
+    /** Writes `content` to a private temp file and returns its path. */
+    async write(name, content) {
+        this.dir ??= await mkdtemp(join(tmpdir(), 'eudi-dev-input-'));
+        const path = join(this.dir, `${++this.n}-${name}`);
+        await writeFile(path, content, { mode: 0o600 });
+        return path;
+    }
+    /**
+     * Turns a file-valued option into a flag value. Content is written to a temp
+     * file. `{ url }` is only allowed when `allowUrl` is set.
+     */
+    async file(input, name, opts = {}) {
+        if (isPathInput(input)) {
+            await assertFile(input.path);
+            return input.path;
+        }
+        if (isUrlInput(input)) {
+            if (!opts.allowUrl)
+                throw new TypeError(`${name} does not accept a URL`);
+            assertHttpUrl(input.url);
+            return input.url;
+        }
+        return this.write(name, input);
+    }
+    async cleanup() {
+        if (this.dir)
+            await rm(this.dir, { recursive: true, force: true });
+        this.dir = undefined;
+    }
+}
+async function assertFile(path) {
+    let ok = false;
+    try {
+        ok = (await stat(path)).isFile();
+    }
+    catch {
+        ok = false;
+    }
+    // eudi-dev treats a path that doesn't exist as raw input, which hides typos.
+    if (!ok)
+        throw new TypeError(`${path} is not a file`);
+}
+function assertHttpUrl(url) {
+    if (!/^https?:\/\//i.test(url))
+        throw new TypeError(`${url} is not an http(s) URL`);
+}
+/** Maps an {@link Input} to the positional argument and the stdin content. */
+export async function positionalInput(input) {
+    if (isPathInput(input)) {
+        await assertFile(input.path);
+        return { arg: input.path };
+    }
+    if (isUrlInput(input)) {
+        assertHttpUrl(input.url);
+        return { arg: input.url };
+    }
+    if (typeof input !== 'string' && !(input instanceof Uint8Array)) {
+        throw new TypeError('input must be a string, bytes, { path } or { url }');
+    }
+    return { arg: '-', stdin: input };
+}
+/** Spawns the eudi-dev binary with an isolated environment. */
+export class Runner {
+    bin;
+    home;
+    config;
+    constructor(config) {
+        this.config = config;
+        this.bin = config.bin;
+        this.home = config.home;
+    }
+    /**
+     * Runs `eudi <args> --json --no-color` and parses stdout as exactly one
+     * JSON document. Rejects with {@link EudiDevError} on a non-zero exit, a
+     * timeout, or stdout that is not one JSON document.
+     */
+    async run(args, opts = {}) {
+        const json = opts.json ?? true;
+        const fullArgs = json ? [...args, '--json', '--no-color'] : [...args, '--no-color'];
+        const { exitCode, signal, stdout, stderr, timedOut, spawnError } = await this.spawn(fullArgs, opts);
+        const base = { args: fullArgs, exitCode, signal, stdout, stderr };
+        if (spawnError) {
+            const message = spawnError.name === 'AbortError' ? `eudi ${args[0] ?? ''} was aborted` : `Could not run ${this.bin}: ${spawnError.message}`;
+            throw new EudiDevError(message, { ...base, cause: spawnError });
+        }
+        let document;
+        let parseError;
+        if (json && stdout.trim() !== '') {
+            try {
+                document = JSON.parse(stdout);
+            }
+            catch (err) {
+                parseError = err;
+            }
+        }
+        if (timedOut) {
+            throw new EudiDevError(`eudi ${args[0] ?? ''} timed out`, { ...base, document, timedOut: true });
+        }
+        if (exitCode !== 0) {
+            const reason = lastLine(stderr) || (signal ? `killed by ${signal}` : `exit code ${exitCode}`);
+            throw new EudiDevError(reason, { ...base, document });
+        }
+        if (parseError) {
+            throw new EudiDevError(`eudi ${args.join(' ')} printed stdout that is not one JSON document`, {
+                ...base,
+                cause: parseError,
+            });
+        }
+        return { document: document, stdout, stderr };
+    }
+    spawn(args, opts) {
+        const maxBytes = this.config.maxBufferBytes ?? 64 * 1024 * 1024;
+        const timeoutMs = opts.timeoutMs ?? this.config.timeoutMs ?? 60_000;
+        return new Promise((resolve) => {
+            const child = spawn(this.bin, args, {
+                cwd: this.config.cwd,
+                env: buildEnv(this.config),
+                stdio: [opts.stdin !== undefined ? 'pipe' : 'ignore', 'pipe', 'pipe'],
+                windowsHide: true,
+                ...(opts.signal ? { signal: opts.signal } : {}),
+            });
+            const out = [];
+            const err = [];
+            let bytes = 0;
+            let timedOut = false;
+            let overflow = false;
+            let spawnError;
+            const collect = (sink) => (chunk) => {
+                bytes += chunk.length;
+                if (bytes > maxBytes) {
+                    if (!overflow) {
+                        overflow = true;
+                        child.kill('SIGKILL');
+                    }
+                    return;
+                }
+                sink.push(chunk);
+            };
+            child.stdout?.on('data', collect(out));
+            child.stderr?.on('data', collect(err));
+            const timer = timeoutMs > 0
+                ? setTimeout(() => {
+                    timedOut = true;
+                    child.kill('SIGKILL');
+                }, timeoutMs)
+                : undefined;
+            child.on('error', (e) => {
+                spawnError = e;
+            });
+            child.on('close', (code, signal) => {
+                if (timer)
+                    clearTimeout(timer);
+                let stderr = Buffer.concat(err).toString('utf8');
+                if (overflow)
+                    stderr += `\n[eudi-dev] output exceeded ${maxBytes} bytes, process killed`;
+                const result = {
+                    exitCode: code,
+                    signal,
+                    stdout: Buffer.concat(out).toString('utf8'),
+                    stderr,
+                    timedOut,
+                };
+                resolve(spawnError ? { ...result, spawnError } : result);
+            });
+            if (opts.stdin !== undefined && child.stdin) {
+                // The process may exit before it reads stdin (for example on a flag error).
+                child.stdin.on('error', () => { });
+                child.stdin.end(opts.stdin);
+            }
+        });
+    }
+}
+//# sourceMappingURL=runner.js.map

package/dist/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAA8B,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAuCjF,MAAM,oBAAoB,GAAG,CAAC,iBAAiB,EAAE,qBAAqB,CAAC,CAAC;AAExE,sEAAsE;AACtE,MAAM,UAAU,QAAQ,CACtB,MAA6D,EAC7D,IAAI,GAAsB,OAAO,CAAC,GAAG;IAErC,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,oBAAoB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAAE,SAAS;QAC5G,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IACD,GAAG,CAAC,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC;IAChC,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC;IACnB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;QAC5D,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;;YACpC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACxB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8FAA8F;AAC9F,MAAM,OAAO,OAAO;IACT,IAAI,CAAW;IAExB,YAAY,GAAG,OAAiB;QAC9B,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED,0EAA0E;IAC1E,IAAI,CAAC,IAAY,EAAE,KAA0B;QAC3C,IAAI,KAAK,KAAK,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;aAC3C,IAAI,KAAK,KAAK,KAAK;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gFAAgF;IAChF,EAAE,CAAC,IAAY,EAAE,KAA0B;QACzC,IAAI,KAAK;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,IAAY,EAAE,KAAyC;QAC3D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;QAChF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,uDAAuD;IACvD,MAAM,CAAC,IAAY,EAAE,MAAgD;QACnE,KAAK,MAAM,CAAC,IAAI,MAAM,IAAI,EAAE;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qCAAqC;IACrC,GAAG,CAAC,IAAY,EAAE,MAAqC;QACrD,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,GAAG,IAAc;QACpB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,+BAA+B;AAC/B,MAAM,OAAO,OAAO;IACV,GAAG,CAAqB;IACxB,CAAC,GAAG,CAAC,CAAC;IAEd,oEAAoE;IACpE,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,OAA4B;QACpD,IAAI,CAAC,GAAG,KAAK,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,IAAI,CAAC,KAAgB,EAAE,IAAY,EAAE,IAAI,GAA2B,EAAE;QAC1E,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7B,OAAO,KAAK,CAAC,IAAI,CAAC;QACpB,CAAC;QACD,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACtB,IAAI,CAAC,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,wBAAwB,CAAC,CAAC;YACzE,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACzB,OAAO,KAAK,CAAC,GAAG,CAAC;QACnB,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,GAAG;YAAE,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC;IACvB,CAAC;CACF;AAED,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,EAAE,GAAG,KAAK,CAAC;IACf,IAAI,CAAC;QACH,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,EAAE,GAAG,KAAK,CAAC;IACb,CAAC;IACD,6EAA6E;IAC7E,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,gBAAgB,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,GAAG,wBAAwB,CAAC,CAAC;AACtF,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAY;IAChD,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,CAAC;IACD,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;IAC5B,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,SAAS,CAAC,oDAAoD,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACpC,CAAC;AAED,+DAA+D;AAC/D,MAAM,OAAO,MAAM;IACR,GAAG,CAAS;IACZ,IAAI,CAAS;IACL,MAAM,CAAe;IAEtC,YAAY,MAAoB;QAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;QACtB,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,GAAG,CAAc,IAAuB,EAAE,IAAI,GAAe,EAAE;QACnE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC,CAAC;QACpF,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAEpG,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAClE,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,OAAO,GACX,UAAU,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,iBAAiB,IAAI,CAAC,GAAG,KAAK,UAAU,CAAC,OAAO,EAAE,CAAC;YAC9H,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,QAAiB,CAAC;QACtB,IAAI,UAAmB,CAAC;QACxB,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAChC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,UAAU,GAAG,GAAG,CAAC;YACnB,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,YAAY,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,YAAY,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACnG,CAAC;QACD,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;YACnB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,MAAM,EAAE,CAAC,CAAC,CAAC,aAAa,QAAQ,EAAE,CAAC,CAAC;YAC9F,MAAM,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,IAAI,YAAY,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,+CAA+C,EAAE;gBAC5F,GAAG,IAAI;gBACP,KAAK,EAAE,UAAU;aAClB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,QAAa,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACrD,CAAC;IAEO,KAAK,CACX,IAAc,EACd,IAAgB;QAShB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;QAChE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC;QAEpE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE;gBAClC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG;gBACpB,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC1B,KAAK,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;gBACrE,WAAW,EAAE,IAAI;gBACjB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChD,CAAC,CAAC;YAEH,MAAM,GAAG,GAAa,EAAE,CAAC;YACzB,MAAM,GAAG,GAAa,EAAE,CAAC;YACzB,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,IAAI,UAA6B,CAAC;YAElC,MAAM,OAAO,GAAG,CAAC,IAAc,EAAE,EAAE,CAAC,CAAC,KAAa,EAAE,EAAE;gBACpD,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;gBACtB,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;oBACrB,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACd,QAAQ,GAAG,IAAI,CAAC;wBAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACxB,CAAC;oBACD,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,CAAC,CAAC;YACF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YACvC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAEvC,MAAM,KAAK,GACT,SAAS,GAAG,CAAC;gBACX,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE;oBACd,QAAQ,GAAG,IAAI,CAAC;oBAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACxB,CAAC,EAAE,SAAS,CAAC;gBACf,CAAC,CAAC,SAAS,CAAC;YAEhB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACtB,UAAU,GAAG,CAAC,CAAC;YACjB,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;gBACjC,IAAI,KAAK;oBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;gBAC/B,IAAI,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACjD,IAAI,QAAQ;oBAAE,MAAM,IAAI,gCAAgC,QAAQ,wBAAwB,CAAC;gBACzF,MAAM,MAAM,GAAG;oBACb,QAAQ,EAAE,IAAI;oBACd,MAAM;oBACN,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAC3C,MAAM;oBACN,QAAQ;iBACT,CAAC;gBACF,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC3D,CAAC,CAAC,CAAC;YAEH,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC5C,4EAA4E;gBAC5E,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAClC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/types.d.ts

@@ -0,0 +1,345 @@
+/**
+ * Types for the `--json` documents of eudi-dev v3.
+ *
+ * Written by hand from the Go structs and JSON builders at v3.10.1
+ * (internal/output, internal/validate, internal/statuslist, internal/registrar,
+ * internal/trustedlists, internal/certinfo). Upstream has no OpenAPI or JSON
+ * schema for these documents. Within v3 fields are only added (ADR 0020), so
+ * every object type also accepts unknown keys.
+ */
+/** A JSON object whose shape this package does not pin down. */
+export type JsonObject = {
+    [key: string]: unknown;
+};
+/** Lets an object carry fields added by later v3 releases. */
+type Open = {
+    [key: string]: unknown;
+};
+/**
+ * Like `Partial<T>`, but also accepts an explicit `undefined` under
+ * `exactOptionalPropertyTypes`. Used for objects that callers pass in.
+ */
+export type Loose<T> = {
+    [K in keyof T]?: T[K] | undefined;
+};
+export type CheckStatus = 'pass' | 'fail' | 'warning' | 'skipped';
+/** Check names, in the order `validate` runs them. */
+export type CheckName = 'type' | 'expiry' | 'integrity' | 'trusted list' | 'signature' | 'trust' | 'status' | 'certificate revocation' | 'status list signature' | 'haip' | (string & {});
+/** The trusted list service behind a passing trust or status list signature check. */
+export interface TrustAnchor extends Open {
+    entry?: string;
+    list_url: string;
+    service: string;
+}
+export interface Check extends Open {
+    name: CheckName;
+    status: CheckStatus;
+    detail: string;
+    /** The check was skipped because the validation ran offline. */
+    needsNetwork?: boolean;
+    anchor?: TrustAnchor;
+}
+export interface CertificateExtension extends Open {
+    oid?: string;
+    name?: string;
+    critical?: boolean;
+    value?: unknown;
+}
+export interface CertificateInfo extends Open {
+    subject: string;
+    issuer: string;
+    serialNumber: string;
+    /** RFC 3339 time. */
+    notBefore: string;
+    /** RFC 3339 time. */
+    notAfter: string;
+    selfSigned: boolean;
+    ca: boolean;
+    maxPathLength?: number;
+    publicKey: string;
+    signatureAlgorithm: string;
+    keyUsage?: string[];
+    extendedKeyUsage?: string[];
+    subjectAltNames?: string[];
+    policies?: string[];
+    crlDistributionPoints?: string[];
+    ocspServers?: string[];
+    issuingCertificateURLs?: string[];
+    subjectKeyId?: string;
+    authorityKeyId?: string;
+    extensions: CertificateExtension[];
+    sha256Fingerprint: string;
+    pem: string;
+}
+export interface Disclosure extends Open {
+    name: string;
+    value: unknown;
+    salt: string;
+    digest: string;
+    isArrayEntry: boolean;
+    /** False for a disclosure whose digest the credential does not reference. */
+    referenced: boolean;
+}
+interface DecodedBase extends Open {
+    /** Parser warnings. */
+    warnings?: string[];
+    /** Spec deviations (for example RFC 9901 §7.1 rejection rules). */
+    deviations?: string[];
+    /** The x5c (JWT) or x5chain (mdoc) certificates, leaf first. */
+    certificates?: CertificateInfo[];
+}
+export interface DecodedSdJwt extends DecodedBase {
+    format: 'dc+sd-jwt';
+    header: JsonObject;
+    payload: JsonObject;
+    disclosures: Disclosure[];
+    /** The payload with every disclosure applied. */
+    resolvedClaims: JsonObject;
+    keyBindingJWT?: {
+        header: JsonObject;
+        payload: JsonObject;
+    };
+}
+export interface DecodedJwt extends DecodedBase {
+    format: 'jwt';
+    header: JsonObject;
+    payload: JsonObject;
+}
+export interface MdocValidityInfo extends Open {
+    signed?: string;
+    validFrom?: string;
+    validUntil?: string;
+}
+export interface DecodedMdoc extends DecodedBase {
+    format: 'mso_mdoc';
+    docType: string;
+    /** namespace → element identifier → value. */
+    claims: Record<string, Record<string, unknown>>;
+    isDeviceResponse?: boolean;
+    responseVersion?: string;
+    responseStatus?: number;
+    mso?: {
+        version: string;
+        digestAlgorithm: string;
+        docType: string;
+        validityInfo?: MdocValidityInfo;
+        status?: unknown;
+        /** namespace → digest id → base64url digest. */
+        valueDigests?: Record<string, Record<string, string>>;
+        deviceKeyInfo?: unknown;
+    } & Open;
+    deviceKey?: unknown;
+    issuerAuth?: unknown;
+}
+export interface DecodedCertificates extends Open {
+    format: 'x509';
+    certificates: CertificateInfo[];
+}
+export type DecodedCredential = DecodedSdJwt | DecodedJwt | DecodedMdoc | DecodedCertificates;
+/**
+ * `decode --json` of a credential or certificate. It runs the decoder's
+ * checks offline-capable, so the result carries `validation.checks`.
+ */
+export type DecodeCredentialResult = DecodedCredential & {
+    validation: {
+        checks: Check[];
+    };
+};
+/**
+ * `decode --json` of an OpenID4VCI offer, an OpenID4VP request or a trusted
+ * list. Their documents are not typed by this package.
+ */
+export type DecodeOtherResult = JsonObject;
+export type DecodeResult = DecodeCredentialResult | DecodeOtherResult;
+export interface SignatureVerification extends Open {
+    signatureValid: boolean;
+    expired: boolean;
+    notYetValid: boolean;
+    algorithm?: string;
+    errors?: string[];
+    /** SD-JWT / JWT. */
+    keyId?: string;
+    issuer?: string;
+    expiresAt?: string;
+    issuedAt?: string;
+    notBefore?: string;
+    /** mdoc. */
+    docType?: string;
+    validFrom?: string;
+    validUntil?: string;
+    signed?: string;
+    warnings?: string[];
+}
+export interface StatusResult extends Open {
+    uri: string;
+    index: number;
+    status: number;
+    /** VALID, INVALID, SUSPENDED, an application specific value, or unknown. */
+    statusName: string;
+    isValid: boolean;
+    bitsPerEntry: number;
+    /** "jwt" or "cwt". */
+    format: string;
+    subject?: string;
+    signatureValid?: boolean;
+    trustAnchored: boolean;
+    warnings?: string[];
+    haipFindings?: string[];
+}
+export interface CatalogueTrust extends Open {
+    entry: string;
+    category: string;
+    anchored_by?: string;
+    findings?: string[];
+    warnings?: string[];
+}
+/** `validate --json`: the decoded credential plus the checks at top level. */
+export type ValidateReport = DecodedCredential & {
+    checks: Check[];
+    verification?: SignatureVerification;
+    status?: StatusResult;
+    trust?: CatalogueTrust;
+    /** Present with `--haip` (empty when there are no findings). */
+    haipFindings?: string[];
+};
+export interface DcqlClaimQuery extends Open {
+    id?: string | undefined;
+    path: (string | number | null)[];
+    values?: unknown[] | undefined;
+}
+export interface DcqlCredentialQuery extends Open {
+    id: string;
+    format: 'dc+sd-jwt' | 'jwt_vc_json' | 'mso_mdoc' | (string & {});
+    meta?: ({
+        vct_values?: string[] | undefined;
+        doctype_value?: string | undefined;
+    } & Open) | undefined;
+    claims?: DcqlClaimQuery[] | undefined;
+    claim_sets?: string[][] | undefined;
+}
+export interface DcqlQuery extends Open {
+    credentials: DcqlCredentialQuery[];
+    credential_sets?: unknown[] | undefined;
+}
+/** `issue <format> --json`. `id` is set only when the wallet stored the credential. */
+export interface IssueDocument extends Open {
+    credential: string;
+    id?: string;
+}
+export interface VersionInfo extends Open {
+    name: string;
+    version: string;
+}
+export interface TrustEntity extends Open {
+    id: string;
+    list: string;
+    name: string;
+    certificates: unknown[];
+}
+export interface TrustListLink extends Open {
+    url: string;
+    configured?: boolean;
+    via?: string;
+    error?: string;
+}
+/** `trust list --json`. */
+export interface TrustOverview extends Open {
+    entities: TrustEntity[];
+    entity_lists: string[];
+    lists: TrustListLink[];
+    lists_url: string;
+    relying_party_cas?: string[];
+    trusted_list_cas?: string[];
+    trust_lists: ({
+        id: string;
+        default?: boolean;
+        category?: string;
+        path?: string;
+    } & Open)[];
+}
+/** A JWKS document as `trust ca-cert --jwks` prints it. */
+export interface Jwks extends Open {
+    keys: JsonObject[];
+}
+export interface RegistrarIdentifier extends Open {
+    identifier: string;
+    type?: string;
+}
+export interface MultiLangString extends Open {
+    lang?: string;
+    content?: string;
+}
+export interface IntendedUse extends Open {
+    intendedUseIdentifier: string;
+    purpose: MultiLangString[];
+    privacyPolicy: unknown[];
+    createdAt: string;
+    credentials: unknown[];
+}
+export interface ProvidedAttestation extends Open {
+    format: string;
+    type: string;
+}
+export interface RelyingPartyService extends Open {
+    serviceTradeName: string;
+    serviceIdentifier?: string;
+    supportURI?: string;
+    srvDescription?: unknown;
+    entitlements: string[];
+    providesAttestations?: ProvidedAttestation[];
+    credentialIssuer?: string;
+    isIntermediary: boolean;
+    intendedUses?: IntendedUse[];
+}
+export interface RelyingParty extends Open {
+    identifier: RegistrarIdentifier[];
+    legalPerson: {
+        legalName: string[];
+    } & Open;
+    country: string;
+    tradeName?: string;
+    isPSB: boolean;
+    supervisoryAuthority: JsonObject;
+    registryURI: string;
+    services: RelyingPartyService[];
+}
+export interface RegistrationCertificateResult extends Open {
+    /** The bare registration certificate JWT (typ rc-wrp+jwt). */
+    registrationCertificate: string;
+    /** JSON array as a string, ready for a request's verifier_info parameter. */
+    verifierInfo?: string;
+    /** JSON array as a string, ready for the issuer metadata's issuer_info. */
+    issuerInfo?: string;
+}
+export interface AccessCertificateResult extends Open {
+    /** PEM leaf. */
+    certificate: string;
+    /** PEM leaf followed by the issuing CA. */
+    chain: string;
+    clientIds: string[];
+}
+export interface AccessCertificateRequest extends Open {
+    identifier?: string | undefined;
+    serviceIdentifier?: string | undefined;
+    csr: string;
+    dnsNames?: string[] | undefined;
+    validity?: string | undefined;
+}
+/** Input of `registrar enrol`, as for POST /api/registrar/enrolments. */
+export interface Enrolment extends Open {
+    relyingParty: Loose<RelyingParty> & Open;
+    access?: AccessCertificateRequest | undefined;
+    registration?: JsonObject | undefined;
+}
+export interface EnrolmentResult extends Open {
+    relyingParty: RelyingParty;
+    access?: AccessCertificateResult;
+    registration?: RegistrationCertificateResult;
+}
+/** `registrar verifiers add --to` / `registrar issuers add --to`. */
+export interface RegistrationExtensionResult extends Open {
+    relyingParty: RelyingParty;
+    intendedUse?: string;
+    registration: RegistrationCertificateResult | null;
+}
+export {};

package/dist/types.js

@@ -0,0 +1,11 @@
+/**
+ * Types for the `--json` documents of eudi-dev v3.
+ *
+ * Written by hand from the Go structs and JSON builders at v3.10.1
+ * (internal/output, internal/validate, internal/statuslist, internal/registrar,
+ * internal/trustedlists, internal/certinfo). Upstream has no OpenAPI or JSON
+ * schema for these documents. Within v3 fields are only added (ADR 0020), so
+ * every object type also accepts unknown keys.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}

package/dist/version.d.ts

@@ -0,0 +1,24 @@
+/**
+ * The eudi-dev release this package is written and tested against.
+ *
+ * The `--json` documents only gain fields within a major version (upstream
+ * ADR 0020), so any v3.x binary works. A different major version is refused
+ * unless `allowAnyVersion` is set.
+ */
+export declare const EUDI_DEV_VERSION = "v3.10.1";
+/** The upstream major version whose JSON contract the types describe. */
+export declare const SUPPORTED_MAJOR = 3;
+/** GitHub repository that publishes the release binaries. */
+export declare const UPSTREAM_REPO = "eudi-dev/eudi-dev";
+/**
+ * Parses a version tag such as `v3.10.1` or `v3.0.0-beta.1`. Returns
+ * `undefined` for `dev` builds and anything else that isn't semver-like.
+ */
+export declare function parseVersion(tag: string): {
+    major: number;
+    minor: number;
+    patch: number;
+    prerelease?: string;
+} | undefined;
+/** Normalises `3.10.1` to `v3.10.1`. */
+export declare function normaliseTag(version: string): string;

package/dist/version.js

@@ -0,0 +1,35 @@
+/**
+ * The eudi-dev release this package is written and tested against.
+ *
+ * The `--json` documents only gain fields within a major version (upstream
+ * ADR 0020), so any v3.x binary works. A different major version is refused
+ * unless `allowAnyVersion` is set.
+ */
+export const EUDI_DEV_VERSION = 'v3.10.1';
+/** The upstream major version whose JSON contract the types describe. */
+export const SUPPORTED_MAJOR = 3;
+/** GitHub repository that publishes the release binaries. */
+export const UPSTREAM_REPO = 'eudi-dev/eudi-dev';
+/**
+ * Parses a version tag such as `v3.10.1` or `v3.0.0-beta.1`. Returns
+ * `undefined` for `dev` builds and anything else that isn't semver-like.
+ */
+export function parseVersion(tag) {
+    const m = /^v?(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?$/.exec(tag.trim());
+    if (!m)
+        return undefined;
+    const result = {
+        major: Number(m[1]),
+        minor: Number(m[2]),
+        patch: Number(m[3]),
+    };
+    if (m[4] !== undefined)
+        result.prerelease = m[4];
+    return result;
+}
+/** Normalises `3.10.1` to `v3.10.1`. */
+export function normaliseTag(version) {
+    const v = version.trim();
+    return v.startsWith('v') ? v : `v${v}`;
+}
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,SAAS,CAAC;AAE1C,yEAAyE;AACzE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC;AAEjC,6DAA6D;AAC7D,MAAM,CAAC,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAEjD;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,MAAM,CAAC,GAAG,+CAA+C,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3E,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,MAAM,MAAM,GAAyE;QACnF,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KACpB,CAAC;IACF,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS;QAAE,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IACzB,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AACzC,CAAC"}