@tinycloud/node-sdk 3.9.0-beta.3 → 3.9.0-beta.4

package/dist/credentials.d.ts

@@ -1,4 +1,36 @@
 export { CredentialAcquisitionTheme, CredentialAcquisitionTransport, CredentialBrowserInteractionAdapter, CredentialClient, CredentialInlineInteractionAdapter, CredentialInputRequest, CredentialInteractionAdapter, CredentialInteractionKind, CredentialInteractionSurface, CredentialProofSubject, CredentialRedirectResumeState, CredentialRedirectStore, CredentialRequestState, CredentialSigningAdapter, CredentialsAcquireOptions, CredentialsEnsureOptions, CredentialsEnsureResult, CredentialsOperationOptions, CredentialsPolicyAdmissionOptions, CredentialsPolicyAdmissionResult, HolderSignatureKey, InlineCredentialProofHandler, InlineCredentialProofRequest, OpenCredentialsHttpTransport, PrimitiveStepHandler, PrimitiveStepResult, ReceiverCredentialCustody, interpretCredentialFlow, mailboxSubject } from './credentials-core.js';
-export { D as DEFAULT_EMAIL_PROOF_PROFILE, E as EMAIL_PROOF_CREDENTIAL_TYPE, a as EMAIL_PROOF_PENDING_MAX_MS, b as EmailProofAcquireInput, c as EmailProofAcquisition, d as EmailProofError, e as EmailProofErrorCode, f as EmailProofOptions, g as EmailProofPending, h as EmailProofPendingStore, i as EmailProofProfileId, j as EmailProofRequestInput, k as EmailProofResult, l as EmailProofStep, H as HolderAlgorithm, m as HolderSigner, S as StoredEmailProofInput, n as StoredEmailProofRecord, o as acquireEmailProof, p as completeEmailProof, q as createEd25519HolderSigner, r as createMemoryEmailProofPendingStore, s as emailProofRequirement, t as requestEmailProofCode, v as verifyStoredEmailProof } from './email-proof-D0r_WShV.js';
+export { D as DEFAULT_EMAIL_PROOF_PROFILE, b as EMAIL_PROOF_CREDENTIAL_TYPE, c as EMAIL_PROOF_PENDING_MAX_MS, d as EmailProofAcquireInput, e as EmailProofAcquisition, f as EmailProofError, g as EmailProofErrorCode, h as EmailProofOptions, a as EmailProofPending, E as EmailProofPendingStore, i as EmailProofProfileId, j as EmailProofRequestInput, k as EmailProofResult, l as EmailProofStep, H as HolderAlgorithm, m as HolderSigner, S as StoredEmailProofInput, n as StoredEmailProofRecord, o as acquireEmailProof, p as completeEmailProof, q as createEd25519HolderSigner, r as createMemoryEmailProofPendingStore, s as emailProofRequirement, t as isTicketEmailProofResult, u as requestEmailProofCode, v as verifyStoredEmailProof } from './email-proof-BaOqVlB-.js';
 import '@tinycloud/sdk-core';
 import './delegation-Ckc3UETl.js';
+import '@tinycloud/sdk-core/held-credentials';
+
+/** Production pins. Credentials verify only against these values. Tests pin them literally. */
+declare const EMAIL_PROOF_PINS: Readonly<{
+    readonly witnessOrigin: "https://witness.credentials.org";
+    readonly issuerDid: "did:web:issuer.credentials.org";
+    readonly issuerKid: "did:web:issuer.credentials.org#controller";
+    readonly issuerX: "eEJI4xEobto4HtQ7Pg9R1vBOwcpfGRTlXDG5QfqLnGQ";
+    readonly descriptorDigest: "1tg-qphmKBVtNwzVg9xyz-xxqt_xtMXAsQyXw46m8S0";
+}>;
+/**
+ * The static fields of the held account binding (contract A2.4). One frozen object: the create request body, the binding checks
+ * the SDK runs on the witness's binding (S11 (a)) and the account signer's guard all read these values, so the three cannot drift.
+ * The per-request fields (`requestId`, `challengeNonce`, the digests of the request, `jti`, `issuedAt`, `expiresAt`) and the
+ * signer's own `holderDid` are not static and are not here.
+ */
+declare const HELD_ACCOUNT_BINDING_PINS: Readonly<{
+    readonly type: "tinycloud.credentials/account-binding/v1";
+    readonly protocol: "tinycloud.credentials/acquisition/v1";
+    readonly profile: "tinycloud.email-held/v1";
+    readonly profileVersion: 1;
+    readonly descriptorDigest: "dc3_DuvzipXwYkTfjKqTaK1c3VS0YSPnaBsYSQriC0w";
+    readonly issuer: "did:web:issuer.credentials.org";
+    readonly issuerKid: "did:web:issuer.credentials.org#controller";
+    readonly audience: "tinycloud://credentials";
+    readonly openerOrigin: "https://localhost";
+    readonly completionOrigin: "https://localhost";
+    readonly completionContext: "sdk-acquisition";
+    readonly credentialLifetimeSeconds: 31536000;
+}>;
+
+export { EMAIL_PROOF_PINS, HELD_ACCOUNT_BINDING_PINS };