@tinycloud/sdk-core 3.8.1-beta.2 → 3.9.0-beta.4

package/dist/{credential-admission-DCJhDFFv.d.ts → credential-admission-5iS1yUHN.d.ts}

@@ -3,6 +3,8 @@ import { z } from 'zod';
 
 declare const CREDENTIAL_ACQUISITION_PROTOCOL: "tinycloud.credentials/acquisition/v1";
 declare const HOLDER_BINDING_DOMAIN: "tinycloud.credentials/holder-binding/v1";
+/** Signing domain of the held (account, EIP-191) binding. Equal to `ACCOUNT_BINDING_DOMAIN` of held-credentials. */
+declare const ACCOUNT_HOLDER_BINDING_DOMAIN: "tinycloud.credentials/account-binding/v1";
 declare const CREDENTIAL_CONTRACT_VERSION: 1;
 declare const CREDENTIAL_STEP_REGISTRY_VERSION: 1;
 declare const CREDENTIAL_FORMAT: "vc+sd-jwt";
@@ -65,14 +67,20 @@ interface CredentialFlowDescriptor {
         readonly vct: string;
     };
     readonly claims: readonly CredentialClaimDescriptor[];
-    readonly subjectRelationship: "holder_is_subject";
+    readonly subjectRelationship: "holder_is_subject" | "account_is_subject";
     readonly inputs: readonly CredentialInputDescriptor[];
     readonly steps: readonly CredentialStepDescriptor[];
+    /** Ticket: `{EdDSA, holder-binding/v1}` with `holder_is_subject`. Held: `{EIP191, account-binding/v1}` with `account_is_subject`. */
     readonly holderBinding: {
         readonly required: true;
         readonly alg: "EdDSA";
         readonly domain: typeof HOLDER_BINDING_DOMAIN;
         readonly version: 1;
+    } | {
+        readonly required: true;
+        readonly alg: "EIP191";
+        readonly domain: typeof ACCOUNT_HOLDER_BINDING_DOMAIN;
+        readonly version: 1;
     };
     readonly endpoints: Readonly<Record<"request" | "state" | "challenge" | "proof" | "holderBinding" | "holderSignature" | "issue" | "result", CredentialEndpointId>>;
     readonly lifecycle: {
@@ -108,7 +116,8 @@ interface CredentialRequirement {
     readonly claims: Readonly<Record<string, string>>;
     readonly maxAgeSeconds?: number;
 }
-interface CredentialHolderBinding {
+/** The ticket (did:key, EdDSA) holder binding: 19 fields. */
+interface TicketHolderBinding {
     readonly type: typeof HOLDER_BINDING_DOMAIN;
     readonly protocol: typeof CREDENTIAL_ACQUISITION_PROTOCOL;
     readonly requestId: string;
@@ -129,6 +138,13 @@ interface CredentialHolderBinding {
     readonly issuedAt: string;
     readonly expiresAt: string;
 }
+/** The held (account, EIP-191) holder binding: the ticket fields plus `credentialLifetimeSeconds`, a `urn:uuid` v4 `jti`, the account `type`. 20 fields. */
+interface AccountHolderBinding extends Omit<TicketHolderBinding, "type"> {
+    readonly type: typeof ACCOUNT_HOLDER_BINDING_DOMAIN;
+    readonly credentialLifetimeSeconds: 31_536_000;
+}
+/** A holder binding is exactly one of the two shapes, keyed on `type`. */
+type CredentialHolderBinding = TicketHolderBinding | AccountHolderBinding;
 interface IssuerVerificationKey {
     readonly kid: string;
     readonly alg: "EdDSA";
@@ -929,4 +945,4 @@ interface PolicyCredentialAdmissionV4 {
 /** Accountless admission. The request deliberately has no account custody fields. */
 declare function admitPolicyCredentialV4(input: AdmitPolicyCredentialV4Input): Promise<PolicyCredentialAdmissionV4>;
 
-export { type RegisterPolicyV3Input as $, ATTESTED_ENFORCER_BINDING_V2_SCHEMA as A, type BuildPolicyCredentialPresentationV3Input as B, CONTENT_SOURCE_V1_DOMAIN as C, type PolicyChallengeV3 as D, ED25519_JCS_SIGNATURE_SUITE as E, type PolicyCredentialAdmissionV3 as F, type PolicyCredentialAdmissionV4 as G, type PolicyCredentialPresentationV3 as H, type PolicyCredentialPresentationV4 as I, type JsonObject as J, type PolicyCredentialRequirementV1 as K, LAST_V2_CREATE_AT as L, MAX_LEGACY_ENVELOPE_EXPIRES_AT as M, NATIVE_PROJECTION_V1_DOMAIN as N, type PolicyRootStatusV3 as O, type PolicyEngineRecord as P, type PolicyRootV3 as Q, type PolicySessionUcanFactV1 as R, type SignedObjectSigner as S, type PolicySessionUcanV1 as T, type UnsignedPolicyEngineRecord as U, type PolicyStatus as V, ROOT_REVOCATION_V1_DOMAIN as W, ROOT_REVOCATION_V1_SCHEMA as X, ROOT_STATUS_CHECKPOINT_V1_SCHEMA as Y, ROOT_STATUS_RENEWAL_V1_DOMAIN as Z, ROOT_STATUS_V1_DOMAIN as _, type Policy as a, revokePolicyRootV3 as a$, type RegisterPolicyV3Receipt as a0, type SignCompactUcanAuthorizationInput as a1, type SignCompactUcanRootAuthorizationInput as a2, SignatureMaterialError as a3, type SignatureSuite as a4, SignatureVerificationError as a5, SignedObjectCanonicalizationError as a6, SignedObjectDigestError as a7, type SignedObjectErrorCode as a8, SignedObjectIdError as a9, canonicalizeSignedObjectUnsigned as aA, canonicalizeUnifiedPolicyCapability as aB, compactAttenuationContains as aC, contentSourceDigestHex as aD, createAndSignPolicy as aE, createAndSignPolicyEngineRecord as aF, createAndSignPolicyStatus as aG, createAndSignSignedObject as aH, createCompactPolicyDescendant as aI, createCompactPolicyInvocation as aJ, deriveSignedObjectMaterial as aK, getPolicyRootStatusV3 as aL, issuedCredentialEnvelopeFromVerified as aM, mintPolicySessionV3 as aN, normalizeUnifiedPolicyCapability as aO, parseCompactUcanAuthorization as aP, parsePolicySessionUcan as aQ, parseSignedCompactUcanAttenuation as aR, policyCidFromCanonicalBytes as aS, policyDigestHex as aT, policyIdForDigestHex as aU, policyV2DigestHex as aV, projectUnifiedPolicyCapabilities as aW, projectUnifiedPolicyCapability as aX, registerPolicyV3 as aY, renewPolicyRootStatusV3 as aZ, requestPolicyChallengeV3 as a_, type SignedObjectKind as aa, type SignedObjectMaterial as ab, SignedObjectProfileError as ac, SignedObjectSchemaError as ad, type SignedObjectSignature as ae, type SignedObjectVerificationResult as af, type SignedPolicyObject as ag, SigningKeyBindingError as ah, type UnifiedContentSource as ai, type UnifiedEncryptionCapability as aj, type UnifiedKvCapability as ak, type UnifiedNativeCapability as al, type UnifiedPolicyCapability as am, type UnifiedPolicyV1 as an, type UnifiedPolicyV2 as ao, type UnifiedResourceSelector as ap, type UnsignedPolicy as aq, type UnsignedPolicyCredentialPresentationV4 as ar, type UnsignedPolicyObject as as, type UnsignedPolicyStatus as at, type UnsignedUnifiedPolicyV2 as au, UnsupportedSignatureSuiteError as av, admitPolicyCredentialV3 as aw, admitPolicyCredentialV4 as ax, buildPolicyCredentialPresentationV3 as ay, buildPolicyCredentialPresentationV4 as az, type AdmitPolicyCredentialV3Input as b, signCompactPolicyDescendant as b0, signCompactUcanAuthorization as b1, signCompactUcanRootAuthorization as b2, signPolicyCredentialPresentationV4 as b3, signedObjectIdFor as b4, toSignedObjectError as b5, unifiedNativeProjectionHashHex as b6, unifiedPolicyCapabilityContains as b7, unifiedPolicyCapabilityDigestHex as b8, unifiedPolicyCapabilityFromNative as b9, CREDENTIAL_CONTRACT_VERSION as bA, CREDENTIAL_FORMAT as bB, CREDENTIAL_STEP_REGISTRY_VERSION as bC, type CredentialClaimDescriptor as bD, type CredentialEndpointId as bE, type CredentialInputDescriptor as bF, type CredentialProgressEvent as bG, type CredentialStepDescriptor as bH, type CredentialStepType as bI, type CredentialUxState as bJ, HOLDER_BINDING_DOMAIN as bK, type IssuerVerificationKey as bL, validatePolicyCredentialRequirementV1 as ba, validatePolicyEngineRecordSigned as bb, validatePolicyEngineRecordSignedShape as bc, validatePolicyEngineRecordUnsigned as bd, validatePolicySigned as be, validatePolicySignedShape as bf, validatePolicyStatusSigned as bg, validatePolicyStatusSignedShape as bh, validatePolicyStatusUnsigned as bi, validatePolicyUnsigned as bj, validateUnifiedPolicyV2 as bk, verifyPolicy as bl, verifyPolicyEngineRecord as bm, verifyPolicyRootRevocationV3 as bn, verifyPolicyRootStatusCheckpointV3 as bo, verifyPolicyStatus as bp, verifySignedObject as bq, type CredentialHolderBinding as br, type CredentialFlowDescriptor as bs, type CredentialRequirement as bt, type StoredCredentialRecord as bu, type VerifiedCredential as bv, type CredentialStorageReceipt as bw, type IssuedCredentialEnvelope as bx, type CredentialIssuerMetadata as by, CREDENTIAL_ACQUISITION_PROTOCOL as bz, type AdmitPolicyCredentialV4Input as c, type AttestedEnforcerBindingV2 as d, type BuildPolicyCredentialPresentationV4Input as e, type CompactPolicyDescendantInput as f, type CompactPolicyInvocationInput as g, type CompactUcanAuthorizationV1 as h, EIP191_JCS_SIGNATURE_SUITE as i, LAST_V2_READ_AT as j, POLICY_CAPABILITY_V1_DOMAIN as k, POLICY_CAPABILITY_V1_SCHEMA as l, POLICY_CREDENTIAL_REQUIREMENT_V1_TYPE as m, POLICY_ENFORCEMENT_DELEGATION_V2_SCHEMA as n, POLICY_ENGINE_RECORD_SCHEMA as o, POLICY_PRESENTATION_V3_DOMAIN as p, POLICY_PRESENTATION_V3_SCHEMA as q, POLICY_PRESENTATION_V4_DOMAIN as r, POLICY_PRESENTATION_V4_SCHEMA as s, POLICY_SCHEMA as t, POLICY_SESSION_UCAN_V1_PROFILE as u, POLICY_STATUS_SCHEMA as v, POLICY_V1_DOMAIN as w, POLICY_V1_SCHEMA as x, POLICY_V2_DOMAIN as y, POLICY_V2_SCHEMA as z };
+export { type RegisterPolicyV3Input as $, ATTESTED_ENFORCER_BINDING_V2_SCHEMA as A, type BuildPolicyCredentialPresentationV3Input as B, CONTENT_SOURCE_V1_DOMAIN as C, type PolicyChallengeV3 as D, ED25519_JCS_SIGNATURE_SUITE as E, type PolicyCredentialAdmissionV3 as F, type PolicyCredentialAdmissionV4 as G, type PolicyCredentialPresentationV3 as H, type PolicyCredentialPresentationV4 as I, type JsonObject as J, type PolicyCredentialRequirementV1 as K, LAST_V2_CREATE_AT as L, MAX_LEGACY_ENVELOPE_EXPIRES_AT as M, NATIVE_PROJECTION_V1_DOMAIN as N, type PolicyRootStatusV3 as O, type PolicyEngineRecord as P, type PolicyRootV3 as Q, type PolicySessionUcanFactV1 as R, type SignedObjectSigner as S, type PolicySessionUcanV1 as T, type UnsignedPolicyEngineRecord as U, type PolicyStatus as V, ROOT_REVOCATION_V1_DOMAIN as W, ROOT_REVOCATION_V1_SCHEMA as X, ROOT_STATUS_CHECKPOINT_V1_SCHEMA as Y, ROOT_STATUS_RENEWAL_V1_DOMAIN as Z, ROOT_STATUS_V1_DOMAIN as _, type Policy as a, revokePolicyRootV3 as a$, type RegisterPolicyV3Receipt as a0, type SignCompactUcanAuthorizationInput as a1, type SignCompactUcanRootAuthorizationInput as a2, SignatureMaterialError as a3, type SignatureSuite as a4, SignatureVerificationError as a5, SignedObjectCanonicalizationError as a6, SignedObjectDigestError as a7, type SignedObjectErrorCode as a8, SignedObjectIdError as a9, canonicalizeSignedObjectUnsigned as aA, canonicalizeUnifiedPolicyCapability as aB, compactAttenuationContains as aC, contentSourceDigestHex as aD, createAndSignPolicy as aE, createAndSignPolicyEngineRecord as aF, createAndSignPolicyStatus as aG, createAndSignSignedObject as aH, createCompactPolicyDescendant as aI, createCompactPolicyInvocation as aJ, deriveSignedObjectMaterial as aK, getPolicyRootStatusV3 as aL, issuedCredentialEnvelopeFromVerified as aM, mintPolicySessionV3 as aN, normalizeUnifiedPolicyCapability as aO, parseCompactUcanAuthorization as aP, parsePolicySessionUcan as aQ, parseSignedCompactUcanAttenuation as aR, policyCidFromCanonicalBytes as aS, policyDigestHex as aT, policyIdForDigestHex as aU, policyV2DigestHex as aV, projectUnifiedPolicyCapabilities as aW, projectUnifiedPolicyCapability as aX, registerPolicyV3 as aY, renewPolicyRootStatusV3 as aZ, requestPolicyChallengeV3 as a_, type SignedObjectKind as aa, type SignedObjectMaterial as ab, SignedObjectProfileError as ac, SignedObjectSchemaError as ad, type SignedObjectSignature as ae, type SignedObjectVerificationResult as af, type SignedPolicyObject as ag, SigningKeyBindingError as ah, type UnifiedContentSource as ai, type UnifiedEncryptionCapability as aj, type UnifiedKvCapability as ak, type UnifiedNativeCapability as al, type UnifiedPolicyCapability as am, type UnifiedPolicyV1 as an, type UnifiedPolicyV2 as ao, type UnifiedResourceSelector as ap, type UnsignedPolicy as aq, type UnsignedPolicyCredentialPresentationV4 as ar, type UnsignedPolicyObject as as, type UnsignedPolicyStatus as at, type UnsignedUnifiedPolicyV2 as au, UnsupportedSignatureSuiteError as av, admitPolicyCredentialV3 as aw, admitPolicyCredentialV4 as ax, buildPolicyCredentialPresentationV3 as ay, buildPolicyCredentialPresentationV4 as az, type AdmitPolicyCredentialV3Input as b, signCompactPolicyDescendant as b0, signCompactUcanAuthorization as b1, signCompactUcanRootAuthorization as b2, signPolicyCredentialPresentationV4 as b3, signedObjectIdFor as b4, toSignedObjectError as b5, unifiedNativeProjectionHashHex as b6, unifiedPolicyCapabilityContains as b7, unifiedPolicyCapabilityDigestHex as b8, unifiedPolicyCapabilityFromNative as b9, ACCOUNT_HOLDER_BINDING_DOMAIN as bA, type AccountHolderBinding as bB, CREDENTIAL_ACQUISITION_PROTOCOL as bC, CREDENTIAL_CONTRACT_VERSION as bD, CREDENTIAL_FORMAT as bE, CREDENTIAL_STEP_REGISTRY_VERSION as bF, type CredentialClaimDescriptor as bG, type CredentialEndpointId as bH, type CredentialInputDescriptor as bI, type CredentialProgressEvent as bJ, type CredentialStepDescriptor as bK, type CredentialStepType as bL, type CredentialUxState as bM, HOLDER_BINDING_DOMAIN as bN, type IssuerVerificationKey as bO, validatePolicyCredentialRequirementV1 as ba, validatePolicyEngineRecordSigned as bb, validatePolicyEngineRecordSignedShape as bc, validatePolicyEngineRecordUnsigned as bd, validatePolicySigned as be, validatePolicySignedShape as bf, validatePolicyStatusSigned as bg, validatePolicyStatusSignedShape as bh, validatePolicyStatusUnsigned as bi, validatePolicyUnsigned as bj, validateUnifiedPolicyV2 as bk, verifyPolicy as bl, verifyPolicyEngineRecord as bm, verifyPolicyRootRevocationV3 as bn, verifyPolicyRootStatusCheckpointV3 as bo, verifyPolicyStatus as bp, verifySignedObject as bq, type TicketHolderBinding as br, type CredentialHolderBinding as bs, type CredentialFlowDescriptor as bt, type CredentialRequirement as bu, type StoredCredentialRecord as bv, type VerifiedCredential as bw, type CredentialStorageReceipt as bx, type IssuedCredentialEnvelope as by, type CredentialIssuerMetadata as bz, type AdmitPolicyCredentialV4Input as c, type AttestedEnforcerBindingV2 as d, type BuildPolicyCredentialPresentationV4Input as e, type CompactPolicyDescendantInput as f, type CompactPolicyInvocationInput as g, type CompactUcanAuthorizationV1 as h, EIP191_JCS_SIGNATURE_SUITE as i, LAST_V2_READ_AT as j, POLICY_CAPABILITY_V1_DOMAIN as k, POLICY_CAPABILITY_V1_SCHEMA as l, POLICY_CREDENTIAL_REQUIREMENT_V1_TYPE as m, POLICY_ENFORCEMENT_DELEGATION_V2_SCHEMA as n, POLICY_ENGINE_RECORD_SCHEMA as o, POLICY_PRESENTATION_V3_DOMAIN as p, POLICY_PRESENTATION_V3_SCHEMA as q, POLICY_PRESENTATION_V4_DOMAIN as r, POLICY_PRESENTATION_V4_SCHEMA as s, POLICY_SCHEMA as t, POLICY_SESSION_UCAN_V1_PROFILE as u, POLICY_STATUS_SCHEMA as v, POLICY_V1_DOMAIN as w, POLICY_V1_SCHEMA as x, POLICY_V2_DOMAIN as y, POLICY_V2_SCHEMA as z };

package/dist/{credential-admission-B7_F6Yb3.d.cts → credential-admission-CB37nOWk.d.cts}

@@ -3,6 +3,8 @@ import { z } from 'zod';
 
 declare const CREDENTIAL_ACQUISITION_PROTOCOL: "tinycloud.credentials/acquisition/v1";
 declare const HOLDER_BINDING_DOMAIN: "tinycloud.credentials/holder-binding/v1";
+/** Signing domain of the held (account, EIP-191) binding. Equal to `ACCOUNT_BINDING_DOMAIN` of held-credentials. */
+declare const ACCOUNT_HOLDER_BINDING_DOMAIN: "tinycloud.credentials/account-binding/v1";
 declare const CREDENTIAL_CONTRACT_VERSION: 1;
 declare const CREDENTIAL_STEP_REGISTRY_VERSION: 1;
 declare const CREDENTIAL_FORMAT: "vc+sd-jwt";
@@ -65,14 +67,20 @@ interface CredentialFlowDescriptor {
         readonly vct: string;
     };
     readonly claims: readonly CredentialClaimDescriptor[];
-    readonly subjectRelationship: "holder_is_subject";
+    readonly subjectRelationship: "holder_is_subject" | "account_is_subject";
     readonly inputs: readonly CredentialInputDescriptor[];
     readonly steps: readonly CredentialStepDescriptor[];
+    /** Ticket: `{EdDSA, holder-binding/v1}` with `holder_is_subject`. Held: `{EIP191, account-binding/v1}` with `account_is_subject`. */
     readonly holderBinding: {
         readonly required: true;
         readonly alg: "EdDSA";
         readonly domain: typeof HOLDER_BINDING_DOMAIN;
         readonly version: 1;
+    } | {
+        readonly required: true;
+        readonly alg: "EIP191";
+        readonly domain: typeof ACCOUNT_HOLDER_BINDING_DOMAIN;
+        readonly version: 1;
     };
     readonly endpoints: Readonly<Record<"request" | "state" | "challenge" | "proof" | "holderBinding" | "holderSignature" | "issue" | "result", CredentialEndpointId>>;
     readonly lifecycle: {
@@ -108,7 +116,8 @@ interface CredentialRequirement {
     readonly claims: Readonly<Record<string, string>>;
     readonly maxAgeSeconds?: number;
 }
-interface CredentialHolderBinding {
+/** The ticket (did:key, EdDSA) holder binding: 19 fields. */
+interface TicketHolderBinding {
     readonly type: typeof HOLDER_BINDING_DOMAIN;
     readonly protocol: typeof CREDENTIAL_ACQUISITION_PROTOCOL;
     readonly requestId: string;
@@ -129,6 +138,13 @@ interface CredentialHolderBinding {
     readonly issuedAt: string;
     readonly expiresAt: string;
 }
+/** The held (account, EIP-191) holder binding: the ticket fields plus `credentialLifetimeSeconds`, a `urn:uuid` v4 `jti`, the account `type`. 20 fields. */
+interface AccountHolderBinding extends Omit<TicketHolderBinding, "type"> {
+    readonly type: typeof ACCOUNT_HOLDER_BINDING_DOMAIN;
+    readonly credentialLifetimeSeconds: 31_536_000;
+}
+/** A holder binding is exactly one of the two shapes, keyed on `type`. */
+type CredentialHolderBinding = TicketHolderBinding | AccountHolderBinding;
 interface IssuerVerificationKey {
     readonly kid: string;
     readonly alg: "EdDSA";
@@ -929,4 +945,4 @@ interface PolicyCredentialAdmissionV4 {
 /** Accountless admission. The request deliberately has no account custody fields. */
 declare function admitPolicyCredentialV4(input: AdmitPolicyCredentialV4Input): Promise<PolicyCredentialAdmissionV4>;
 
-export { type RegisterPolicyV3Input as $, ATTESTED_ENFORCER_BINDING_V2_SCHEMA as A, type BuildPolicyCredentialPresentationV3Input as B, CONTENT_SOURCE_V1_DOMAIN as C, type PolicyChallengeV3 as D, ED25519_JCS_SIGNATURE_SUITE as E, type PolicyCredentialAdmissionV3 as F, type PolicyCredentialAdmissionV4 as G, type PolicyCredentialPresentationV3 as H, type PolicyCredentialPresentationV4 as I, type JsonObject as J, type PolicyCredentialRequirementV1 as K, LAST_V2_CREATE_AT as L, MAX_LEGACY_ENVELOPE_EXPIRES_AT as M, NATIVE_PROJECTION_V1_DOMAIN as N, type PolicyRootStatusV3 as O, type PolicyEngineRecord as P, type PolicyRootV3 as Q, type PolicySessionUcanFactV1 as R, type SignedObjectSigner as S, type PolicySessionUcanV1 as T, type UnsignedPolicyEngineRecord as U, type PolicyStatus as V, ROOT_REVOCATION_V1_DOMAIN as W, ROOT_REVOCATION_V1_SCHEMA as X, ROOT_STATUS_CHECKPOINT_V1_SCHEMA as Y, ROOT_STATUS_RENEWAL_V1_DOMAIN as Z, ROOT_STATUS_V1_DOMAIN as _, type Policy as a, revokePolicyRootV3 as a$, type RegisterPolicyV3Receipt as a0, type SignCompactUcanAuthorizationInput as a1, type SignCompactUcanRootAuthorizationInput as a2, SignatureMaterialError as a3, type SignatureSuite as a4, SignatureVerificationError as a5, SignedObjectCanonicalizationError as a6, SignedObjectDigestError as a7, type SignedObjectErrorCode as a8, SignedObjectIdError as a9, canonicalizeSignedObjectUnsigned as aA, canonicalizeUnifiedPolicyCapability as aB, compactAttenuationContains as aC, contentSourceDigestHex as aD, createAndSignPolicy as aE, createAndSignPolicyEngineRecord as aF, createAndSignPolicyStatus as aG, createAndSignSignedObject as aH, createCompactPolicyDescendant as aI, createCompactPolicyInvocation as aJ, deriveSignedObjectMaterial as aK, getPolicyRootStatusV3 as aL, issuedCredentialEnvelopeFromVerified as aM, mintPolicySessionV3 as aN, normalizeUnifiedPolicyCapability as aO, parseCompactUcanAuthorization as aP, parsePolicySessionUcan as aQ, parseSignedCompactUcanAttenuation as aR, policyCidFromCanonicalBytes as aS, policyDigestHex as aT, policyIdForDigestHex as aU, policyV2DigestHex as aV, projectUnifiedPolicyCapabilities as aW, projectUnifiedPolicyCapability as aX, registerPolicyV3 as aY, renewPolicyRootStatusV3 as aZ, requestPolicyChallengeV3 as a_, type SignedObjectKind as aa, type SignedObjectMaterial as ab, SignedObjectProfileError as ac, SignedObjectSchemaError as ad, type SignedObjectSignature as ae, type SignedObjectVerificationResult as af, type SignedPolicyObject as ag, SigningKeyBindingError as ah, type UnifiedContentSource as ai, type UnifiedEncryptionCapability as aj, type UnifiedKvCapability as ak, type UnifiedNativeCapability as al, type UnifiedPolicyCapability as am, type UnifiedPolicyV1 as an, type UnifiedPolicyV2 as ao, type UnifiedResourceSelector as ap, type UnsignedPolicy as aq, type UnsignedPolicyCredentialPresentationV4 as ar, type UnsignedPolicyObject as as, type UnsignedPolicyStatus as at, type UnsignedUnifiedPolicyV2 as au, UnsupportedSignatureSuiteError as av, admitPolicyCredentialV3 as aw, admitPolicyCredentialV4 as ax, buildPolicyCredentialPresentationV3 as ay, buildPolicyCredentialPresentationV4 as az, type AdmitPolicyCredentialV3Input as b, signCompactPolicyDescendant as b0, signCompactUcanAuthorization as b1, signCompactUcanRootAuthorization as b2, signPolicyCredentialPresentationV4 as b3, signedObjectIdFor as b4, toSignedObjectError as b5, unifiedNativeProjectionHashHex as b6, unifiedPolicyCapabilityContains as b7, unifiedPolicyCapabilityDigestHex as b8, unifiedPolicyCapabilityFromNative as b9, CREDENTIAL_CONTRACT_VERSION as bA, CREDENTIAL_FORMAT as bB, CREDENTIAL_STEP_REGISTRY_VERSION as bC, type CredentialClaimDescriptor as bD, type CredentialEndpointId as bE, type CredentialInputDescriptor as bF, type CredentialProgressEvent as bG, type CredentialStepDescriptor as bH, type CredentialStepType as bI, type CredentialUxState as bJ, HOLDER_BINDING_DOMAIN as bK, type IssuerVerificationKey as bL, validatePolicyCredentialRequirementV1 as ba, validatePolicyEngineRecordSigned as bb, validatePolicyEngineRecordSignedShape as bc, validatePolicyEngineRecordUnsigned as bd, validatePolicySigned as be, validatePolicySignedShape as bf, validatePolicyStatusSigned as bg, validatePolicyStatusSignedShape as bh, validatePolicyStatusUnsigned as bi, validatePolicyUnsigned as bj, validateUnifiedPolicyV2 as bk, verifyPolicy as bl, verifyPolicyEngineRecord as bm, verifyPolicyRootRevocationV3 as bn, verifyPolicyRootStatusCheckpointV3 as bo, verifyPolicyStatus as bp, verifySignedObject as bq, type CredentialHolderBinding as br, type CredentialFlowDescriptor as bs, type CredentialRequirement as bt, type StoredCredentialRecord as bu, type VerifiedCredential as bv, type CredentialStorageReceipt as bw, type IssuedCredentialEnvelope as bx, type CredentialIssuerMetadata as by, CREDENTIAL_ACQUISITION_PROTOCOL as bz, type AdmitPolicyCredentialV4Input as c, type AttestedEnforcerBindingV2 as d, type BuildPolicyCredentialPresentationV4Input as e, type CompactPolicyDescendantInput as f, type CompactPolicyInvocationInput as g, type CompactUcanAuthorizationV1 as h, EIP191_JCS_SIGNATURE_SUITE as i, LAST_V2_READ_AT as j, POLICY_CAPABILITY_V1_DOMAIN as k, POLICY_CAPABILITY_V1_SCHEMA as l, POLICY_CREDENTIAL_REQUIREMENT_V1_TYPE as m, POLICY_ENFORCEMENT_DELEGATION_V2_SCHEMA as n, POLICY_ENGINE_RECORD_SCHEMA as o, POLICY_PRESENTATION_V3_DOMAIN as p, POLICY_PRESENTATION_V3_SCHEMA as q, POLICY_PRESENTATION_V4_DOMAIN as r, POLICY_PRESENTATION_V4_SCHEMA as s, POLICY_SCHEMA as t, POLICY_SESSION_UCAN_V1_PROFILE as u, POLICY_STATUS_SCHEMA as v, POLICY_V1_DOMAIN as w, POLICY_V1_SCHEMA as x, POLICY_V2_DOMAIN as y, POLICY_V2_SCHEMA as z };
+export { type RegisterPolicyV3Input as $, ATTESTED_ENFORCER_BINDING_V2_SCHEMA as A, type BuildPolicyCredentialPresentationV3Input as B, CONTENT_SOURCE_V1_DOMAIN as C, type PolicyChallengeV3 as D, ED25519_JCS_SIGNATURE_SUITE as E, type PolicyCredentialAdmissionV3 as F, type PolicyCredentialAdmissionV4 as G, type PolicyCredentialPresentationV3 as H, type PolicyCredentialPresentationV4 as I, type JsonObject as J, type PolicyCredentialRequirementV1 as K, LAST_V2_CREATE_AT as L, MAX_LEGACY_ENVELOPE_EXPIRES_AT as M, NATIVE_PROJECTION_V1_DOMAIN as N, type PolicyRootStatusV3 as O, type PolicyEngineRecord as P, type PolicyRootV3 as Q, type PolicySessionUcanFactV1 as R, type SignedObjectSigner as S, type PolicySessionUcanV1 as T, type UnsignedPolicyEngineRecord as U, type PolicyStatus as V, ROOT_REVOCATION_V1_DOMAIN as W, ROOT_REVOCATION_V1_SCHEMA as X, ROOT_STATUS_CHECKPOINT_V1_SCHEMA as Y, ROOT_STATUS_RENEWAL_V1_DOMAIN as Z, ROOT_STATUS_V1_DOMAIN as _, type Policy as a, revokePolicyRootV3 as a$, type RegisterPolicyV3Receipt as a0, type SignCompactUcanAuthorizationInput as a1, type SignCompactUcanRootAuthorizationInput as a2, SignatureMaterialError as a3, type SignatureSuite as a4, SignatureVerificationError as a5, SignedObjectCanonicalizationError as a6, SignedObjectDigestError as a7, type SignedObjectErrorCode as a8, SignedObjectIdError as a9, canonicalizeSignedObjectUnsigned as aA, canonicalizeUnifiedPolicyCapability as aB, compactAttenuationContains as aC, contentSourceDigestHex as aD, createAndSignPolicy as aE, createAndSignPolicyEngineRecord as aF, createAndSignPolicyStatus as aG, createAndSignSignedObject as aH, createCompactPolicyDescendant as aI, createCompactPolicyInvocation as aJ, deriveSignedObjectMaterial as aK, getPolicyRootStatusV3 as aL, issuedCredentialEnvelopeFromVerified as aM, mintPolicySessionV3 as aN, normalizeUnifiedPolicyCapability as aO, parseCompactUcanAuthorization as aP, parsePolicySessionUcan as aQ, parseSignedCompactUcanAttenuation as aR, policyCidFromCanonicalBytes as aS, policyDigestHex as aT, policyIdForDigestHex as aU, policyV2DigestHex as aV, projectUnifiedPolicyCapabilities as aW, projectUnifiedPolicyCapability as aX, registerPolicyV3 as aY, renewPolicyRootStatusV3 as aZ, requestPolicyChallengeV3 as a_, type SignedObjectKind as aa, type SignedObjectMaterial as ab, SignedObjectProfileError as ac, SignedObjectSchemaError as ad, type SignedObjectSignature as ae, type SignedObjectVerificationResult as af, type SignedPolicyObject as ag, SigningKeyBindingError as ah, type UnifiedContentSource as ai, type UnifiedEncryptionCapability as aj, type UnifiedKvCapability as ak, type UnifiedNativeCapability as al, type UnifiedPolicyCapability as am, type UnifiedPolicyV1 as an, type UnifiedPolicyV2 as ao, type UnifiedResourceSelector as ap, type UnsignedPolicy as aq, type UnsignedPolicyCredentialPresentationV4 as ar, type UnsignedPolicyObject as as, type UnsignedPolicyStatus as at, type UnsignedUnifiedPolicyV2 as au, UnsupportedSignatureSuiteError as av, admitPolicyCredentialV3 as aw, admitPolicyCredentialV4 as ax, buildPolicyCredentialPresentationV3 as ay, buildPolicyCredentialPresentationV4 as az, type AdmitPolicyCredentialV3Input as b, signCompactPolicyDescendant as b0, signCompactUcanAuthorization as b1, signCompactUcanRootAuthorization as b2, signPolicyCredentialPresentationV4 as b3, signedObjectIdFor as b4, toSignedObjectError as b5, unifiedNativeProjectionHashHex as b6, unifiedPolicyCapabilityContains as b7, unifiedPolicyCapabilityDigestHex as b8, unifiedPolicyCapabilityFromNative as b9, ACCOUNT_HOLDER_BINDING_DOMAIN as bA, type AccountHolderBinding as bB, CREDENTIAL_ACQUISITION_PROTOCOL as bC, CREDENTIAL_CONTRACT_VERSION as bD, CREDENTIAL_FORMAT as bE, CREDENTIAL_STEP_REGISTRY_VERSION as bF, type CredentialClaimDescriptor as bG, type CredentialEndpointId as bH, type CredentialInputDescriptor as bI, type CredentialProgressEvent as bJ, type CredentialStepDescriptor as bK, type CredentialStepType as bL, type CredentialUxState as bM, HOLDER_BINDING_DOMAIN as bN, type IssuerVerificationKey as bO, validatePolicyCredentialRequirementV1 as ba, validatePolicyEngineRecordSigned as bb, validatePolicyEngineRecordSignedShape as bc, validatePolicyEngineRecordUnsigned as bd, validatePolicySigned as be, validatePolicySignedShape as bf, validatePolicyStatusSigned as bg, validatePolicyStatusSignedShape as bh, validatePolicyStatusUnsigned as bi, validatePolicyUnsigned as bj, validateUnifiedPolicyV2 as bk, verifyPolicy as bl, verifyPolicyEngineRecord as bm, verifyPolicyRootRevocationV3 as bn, verifyPolicyRootStatusCheckpointV3 as bo, verifyPolicyStatus as bp, verifySignedObject as bq, type TicketHolderBinding as br, type CredentialHolderBinding as bs, type CredentialFlowDescriptor as bt, type CredentialRequirement as bu, type StoredCredentialRecord as bv, type VerifiedCredential as bw, type CredentialStorageReceipt as bx, type IssuedCredentialEnvelope as by, type CredentialIssuerMetadata as bz, type AdmitPolicyCredentialV4Input as c, type AttestedEnforcerBindingV2 as d, type BuildPolicyCredentialPresentationV4Input as e, type CompactPolicyDescendantInput as f, type CompactPolicyInvocationInput as g, type CompactUcanAuthorizationV1 as h, EIP191_JCS_SIGNATURE_SUITE as i, LAST_V2_READ_AT as j, POLICY_CAPABILITY_V1_DOMAIN as k, POLICY_CAPABILITY_V1_SCHEMA as l, POLICY_CREDENTIAL_REQUIREMENT_V1_TYPE as m, POLICY_ENFORCEMENT_DELEGATION_V2_SCHEMA as n, POLICY_ENGINE_RECORD_SCHEMA as o, POLICY_PRESENTATION_V3_DOMAIN as p, POLICY_PRESENTATION_V3_SCHEMA as q, POLICY_PRESENTATION_V4_DOMAIN as r, POLICY_PRESENTATION_V4_SCHEMA as s, POLICY_SCHEMA as t, POLICY_SESSION_UCAN_V1_PROFILE as u, POLICY_STATUS_SCHEMA as v, POLICY_V1_DOMAIN as w, POLICY_V1_SCHEMA as x, POLICY_V2_DOMAIN as y, POLICY_V2_SCHEMA as z };

package/dist/held-credentials/index.cjs

@@ -42,13 +42,18 @@ __export(held_credentials_exports, {
   PRESENTATION_STATEMENT: () => PRESENTATION_STATEMENT,
   SD_HASH_RESOURCE_PREFIX: () => SD_HASH_RESOURCE_PREFIX,
   assertValidAudience: () => assertValidAudience,
+  buildHeldPresentationSiwe: () => buildHeldPresentationSiwe,
+  checkReturnedPresentation: () => checkReturnedPresentation,
   normaliseEmail: () => normaliseEmail,
   parseIssuerSet: () => parseIssuerSet,
   parsePkhDid: () => parsePkhDid,
   pkhPrincipalsEqual: () => pkhPrincipalsEqual,
   randomNonce: () => randomNonce,
   registryKey: () => registryKey,
+  sdHash: () => sdHash,
+  selectDisclosures: () => selectDisclosures,
   toChecksumAddress: () => toChecksumAddress,
+  verifyHeldEmailCredential: () => verifyHeldEmailCredential,
   verifyHeldPresentation: () => verifyHeldPresentation
 });
 module.exports = __toCommonJS(held_credentials_exports);
@@ -502,86 +507,7 @@ function parseIssuerSet(raw, options) {
   return new IssuerSet(CONSTRUCT, raw.version, entries);
 }
 
-// src/held-credentials/siwe.ts
-var PRESENTATION_STATEMENT = "Present a TinyCloud held credential";
-var SD_HASH_RESOURCE_PREFIX = "urn:tinycloud:sd-hash:";
-var RFC3339 = /^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})(?:\.(\d{1,9}))?(?:Z|([+-])(\d{2}):(\d{2}))$/;
-function parseRfc3339(value) {
-  const m = RFC3339.exec(value);
-  if (!m) return null;
-  const [year, month, day, hour, minute, second] = [m[1], m[2], m[3], m[4], m[5], m[6]].map(Number);
-  if (month < 1 || month > 12 || hour > 23 || minute > 59 || second > 59) return null;
-  const date = /* @__PURE__ */ new Date(0);
-  date.setUTCFullYear(year, month - 1, day);
-  if (date.getUTCFullYear() !== year || date.getUTCMonth() !== month - 1 || date.getUTCDate() !== day) return null;
-  let offsetMinutes = 0;
-  if (m[8] !== void 0) {
-    const oh = Number(m[9]), om = Number(m[10]);
-    if (oh > 23 || om > 59) return null;
-    offsetMinutes = (m[8] === "-" ? -1 : 1) * (oh * 60 + om);
-  }
-  const millis = m[7] === void 0 ? 0 : Number(m[7].padEnd(3, "0").slice(0, 3));
-  date.setUTCHours(hour, minute, second, millis);
-  return date.getTime() - offsetMinutes * 6e4;
-}
-var AUDIENCE = /^[a-z0-9](?:[a-z0-9.-]*[a-z0-9])?(?::([1-9][0-9]{0,4}))?$/;
-function assertValidAudience(audience) {
-  const match = AUDIENCE.exec(audience);
-  if (!match || match[1] !== void 0 && (Number(match[1]) > 65535 || match[1] === "443")) {
-    refuse("bad-config", "audience must be a lowercase host[:port] authority without a default port");
-  }
-}
-function parseStrictSiwe(message) {
-  const bad = (why) => refuse("bad-siwe", why);
-  const lines = message.split("\n");
-  const head = /^(\S+) wants you to sign in with your Ethereum account:$/.exec(lines[0] ?? "");
-  if (!head) bad("header line");
-  const address = lines[1] ?? "";
-  if (!/^0x[0-9a-fA-F]{40}$/.test(address)) bad("address");
-  if (toChecksumAddress(address) !== address) bad("address must be EIP-55 checksummed");
-  if (lines[2] !== "") bad("layout");
-  const statement = lines[3];
-  if (statement === void 0 || statement === "") bad("statement");
-  if (lines[4] !== "") bad("layout");
-  let index = 5;
-  const field = (name, optional = false) => {
-    const line = lines[index];
-    const prefix = `${name}: `;
-    if (line === void 0 || !line.startsWith(prefix)) {
-      if (optional) return void 0;
-      return bad(`missing ${name}`);
-    }
-    index += 1;
-    const value = line.slice(prefix.length);
-    if (value === "") bad(`empty ${name}`);
-    return value;
-  };
-  const uri = field("URI");
-  const version = field("Version");
-  const chainId = field("Chain ID");
-  const nonce = field("Nonce");
-  const issuedAt = field("Issued At");
-  const expirationTime = field("Expiration Time", true);
-  const notBefore = field("Not Before", true);
-  if (lines[index]?.startsWith("Request ID: ")) bad("Request ID is not accepted");
-  const resources = [];
-  if (lines[index] === "Resources:") {
-    index += 1;
-    while (lines[index] !== void 0 && lines[index].startsWith("- ")) {
-      resources.push(lines[index].slice(2));
-      index += 1;
-    }
-  }
-  if (index !== lines.length) bad("trailing content");
-  if (!/^[0-9]+$/.test(chainId)) bad("chain id");
-  if (!/^[A-Za-z0-9]{8,}$/.test(nonce)) bad("nonce must be alphanumeric");
-  for (const [name, value] of [["Issued At", issuedAt], ["Expiration Time", expirationTime], ["Not Before", notBefore]]) {
-    if (value !== void 0 && parseRfc3339(value) === null) bad(`${name} is not RFC 3339`);
-  }
-  return { domain: head[1], address, statement, uri, version, chainId, nonce, issuedAt, expirationTime, notBefore, resources };
-}
-
-// src/held-credentials/verify.ts
+// src/held-credentials/credential.ts
 var SHARED_SIGNED = /* @__PURE__ */ new Set(["iss", "sub", "iat", "nbf", "exp", "jti", "vct", "profile", "profileVersion", "holderBinding", "status", "_sd_alg", "_sd"]);
 var RESERVED_CLAIMS = /* @__PURE__ */ new Set([...SHARED_SIGNED, "...", "cnf"]);
 var HELD_LIMITS = {
@@ -597,36 +523,14 @@ var HELD_LIMITS = {
 var HEADER_MEMBERS = /* @__PURE__ */ new Set(["alg", "typ", "kid"]);
 var JTI_UUID_V4 = /^urn:uuid:[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
 function sdHash(sdJwt) {
+  if (typeof sdJwt !== "string" || !isAscii(sdJwt)) refuse("bad-presentation", "sdJwt must be an ASCII string");
   return encodeBase64Url((0, import_sha256.sha256)(asciiBytes(sdJwt)));
 }
 function isSafeInt(value) {
   return typeof value === "number" && Number.isSafeInteger(value);
 }
-async function verifyHeldPresentation(presentation, options) {
-  const { now, issuerSet, acceptedIssuers, acceptedProfiles, didMethods, audience, nonceStore, callerAccount } = options;
-  const rows = options.rows ?? DEFAULT_ROWS;
-  if (!(now instanceof Date) || Number.isNaN(now.getTime())) refuse("bad-config", "now must be a valid Date");
-  if (!IssuerSet.is(issuerSet)) refuse("bad-config", "issuerSet must come from parseIssuerSet");
-  if (!nonceStore || !didMethods || !Array.isArray(didMethods.issuer)) refuse("bad-config", "issuerSet, nonceStore and didMethods are required");
-  if (!Array.isArray(acceptedIssuers) || acceptedIssuers.length === 0) refuse("bad-config", "acceptedIssuers must not be empty");
-  if (!Array.isArray(acceptedProfiles) || acceptedProfiles.length === 0) refuse("bad-config", "acceptedProfiles must not be empty");
-  assertValidAudience(audience);
-  if (parsePkhDid(callerAccount) === null) refuse("bad-config", "callerAccount must be a did:pkh:eip155 account");
-  if (!isObject(presentation) || Object.keys(presentation).sort().join() !== "sdJwt,siwe") refuse("bad-presentation", "unexpected shape");
-  const { sdJwt, siwe } = presentation;
-  if (typeof sdJwt !== "string" || !isAscii(sdJwt)) refuse("bad-presentation", "sdJwt must be an ASCII string");
-  if (!isObject(siwe) || Object.keys(siwe).sort().join() !== "message,signature" || typeof siwe.message !== "string" || typeof siwe.signature !== "string") refuse("bad-presentation", "siwe shape");
-  const sdJwtText = sdJwt;
-  const siweMessage = siwe.message;
-  const siweSignature = siwe.signature;
-  if (sdJwtText.length > HELD_LIMITS.sdJwtChars) refuse("bad-presentation", "sdJwt is too long");
-  if (siweMessage.length > HELD_LIMITS.siweMessageChars) refuse("bad-presentation", "siwe message is too long");
-  if (siweSignature.length > HELD_LIMITS.siweSignatureChars) refuse("bad-presentation", "siwe signature is too long");
-  const message = parseStrictSiwe(siweMessage);
-  if (message.domain !== audience) refuse("bad-siwe", "domain is not this verifier's audience");
-  if (!/^[0-9A-Za-z]{22,}$/.test(message.nonce)) refuse("bad-nonce", "nonce must be at least 22 base62 characters (or 32 hex)");
-  const consumed = await nonceStore.consume(audience, message.nonce, callerAccount);
-  if (!consumed.existed) refuse("nonce-replayed", "nonce is unknown, already used, or bound to another account");
+function checkHeldCredential(sdJwtText, policy) {
+  const { now, issuerSet, acceptedIssuers, acceptedProfiles, didMethods, rows } = policy;
   const parts = sdJwtText.split("~");
   if (parts.length < 2 || parts[parts.length - 1] !== "") refuse("bad-presentation", "sdJwt must end with ~ and carry no key-binding JWT");
   const [jwt, ...disclosureParts] = parts.slice(0, -1);
@@ -713,6 +617,183 @@ async function verifyHeldPresentation(presentation, options) {
     claims[name] = value;
   }
   row.validateDisclosed(claims);
+  return {
+    issuer: issuerDid,
+    subject,
+    subjectPkh,
+    issuedAt: new Date(iat * 1e3),
+    expiresAt: new Date(exp * 1e3),
+    credentialId: payload.jti,
+    profile,
+    profileVersion,
+    vct,
+    claims
+  };
+}
+function toVerifiedCredential(checked) {
+  return {
+    issuer: checked.issuer,
+    subject: canonicalPkhDid(checked.subject),
+    subjectAddress: registryKey(checked.subject),
+    expiresAt: checked.expiresAt,
+    credentialId: checked.credentialId,
+    profile: checked.profile,
+    profileVersion: checked.profileVersion,
+    vct: checked.vct,
+    claims: checked.claims
+  };
+}
+function verifyHeldEmailCredential(sdJwt, options) {
+  const { now, issuerSet, acceptedIssuers, didMethods, owner } = options;
+  if (!(now instanceof Date) || Number.isNaN(now.getTime())) refuse("bad-config", "now must be a valid Date");
+  if (!IssuerSet.is(issuerSet)) refuse("bad-config", "issuerSet must come from parseIssuerSet");
+  if (!didMethods || !Array.isArray(didMethods.issuer)) refuse("bad-config", "didMethods is required");
+  if (!Array.isArray(acceptedIssuers) || acceptedIssuers.length === 0) refuse("bad-config", "acceptedIssuers must not be empty");
+  if (parsePkhDid(owner) === null) refuse("bad-config", "owner must be a did:pkh:eip155 account");
+  if (typeof sdJwt !== "string" || !isAscii(sdJwt)) refuse("bad-presentation", "sdJwt must be an ASCII string");
+  if (sdJwt.length > HELD_LIMITS.sdJwtChars) refuse("bad-presentation", "sdJwt is too long");
+  const checked = checkHeldCredential(sdJwt, {
+    now,
+    issuerSet,
+    acceptedIssuers,
+    didMethods,
+    acceptedProfiles: [{ profile: EMAIL_HELD_ROW.profile, profileVersion: EMAIL_HELD_ROW.profileVersion }],
+    rows: [EMAIL_HELD_ROW]
+  });
+  if (!pkhPrincipalsEqual(owner, checked.subject)) refuse("nonce-account-mismatch", "subject is not the authenticated owner");
+  return { ...toVerifiedCredential(checked), issuedAt: checked.issuedAt };
+}
+function selectDisclosures(sdJwt, names) {
+  if (typeof sdJwt !== "string") refuse("bad-presentation", "sdJwt must be a string");
+  if (names.length === 0 || new Set(names).size !== names.length) refuse("bad-config", "names must be non-empty and unique");
+  const parts = sdJwt.split("~");
+  if (parts.length < 2 || parts[parts.length - 1] !== "") refuse("bad-presentation", "sdJwt must end with ~ and carry no key-binding JWT");
+  const [jwt, ...disclosures] = parts.slice(0, -1);
+  const kept = [];
+  const found = /* @__PURE__ */ new Set();
+  for (const disclosure of disclosures) {
+    const decoded = parseStrictJson(decodeUtf8(decodeBase64Url(disclosure, "bad-disclosure"), "bad-disclosure"), "bad-disclosure");
+    if (!Array.isArray(decoded) || decoded.length !== 3 || typeof decoded[1] !== "string") refuse("bad-disclosure", "disclosure must be [salt, name, value]");
+    const name = decoded[1];
+    if (names.includes(name)) {
+      if (found.has(name)) refuse("bad-disclosure", `duplicate disclosure for ${name}`);
+      kept.push(disclosure);
+      found.add(name);
+    }
+  }
+  for (const name of names) if (!found.has(name)) refuse("bad-disclosure", `no disclosure for ${name}`);
+  return [jwt, ...kept, ""].join("~");
+}
+
+// src/held-credentials/siwe.ts
+var PRESENTATION_STATEMENT = "Present a TinyCloud held credential";
+var SD_HASH_RESOURCE_PREFIX = "urn:tinycloud:sd-hash:";
+var RFC3339 = /^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})(?:\.(\d{1,9}))?(?:Z|([+-])(\d{2}):(\d{2}))$/;
+function parseRfc3339(value) {
+  const m = RFC3339.exec(value);
+  if (!m) return null;
+  const [year, month, day, hour, minute, second] = [m[1], m[2], m[3], m[4], m[5], m[6]].map(Number);
+  if (month < 1 || month > 12 || hour > 23 || minute > 59 || second > 59) return null;
+  const date = /* @__PURE__ */ new Date(0);
+  date.setUTCFullYear(year, month - 1, day);
+  if (date.getUTCFullYear() !== year || date.getUTCMonth() !== month - 1 || date.getUTCDate() !== day) return null;
+  let offsetMinutes = 0;
+  if (m[8] !== void 0) {
+    const oh = Number(m[9]), om = Number(m[10]);
+    if (oh > 23 || om > 59) return null;
+    offsetMinutes = (m[8] === "-" ? -1 : 1) * (oh * 60 + om);
+  }
+  const millis = m[7] === void 0 ? 0 : Number(m[7].padEnd(3, "0").slice(0, 3));
+  date.setUTCHours(hour, minute, second, millis);
+  return date.getTime() - offsetMinutes * 6e4;
+}
+var AUDIENCE = /^[a-z0-9](?:[a-z0-9.-]*[a-z0-9])?(?::([1-9][0-9]{0,4}))?$/;
+function assertValidAudience(audience) {
+  const match = AUDIENCE.exec(audience);
+  if (!match || match[1] !== void 0 && (Number(match[1]) > 65535 || match[1] === "443")) {
+    refuse("bad-config", "audience must be a lowercase host[:port] authority without a default port");
+  }
+}
+function parseStrictSiwe(message) {
+  const bad = (why) => refuse("bad-siwe", why);
+  const lines = message.split("\n");
+  const head = /^(\S+) wants you to sign in with your Ethereum account:$/.exec(lines[0] ?? "");
+  if (!head) bad("header line");
+  const address = lines[1] ?? "";
+  if (!/^0x[0-9a-fA-F]{40}$/.test(address)) bad("address");
+  if (toChecksumAddress(address) !== address) bad("address must be EIP-55 checksummed");
+  if (lines[2] !== "") bad("layout");
+  const statement = lines[3];
+  if (statement === void 0 || statement === "") bad("statement");
+  if (lines[4] !== "") bad("layout");
+  let index = 5;
+  const field = (name, optional = false) => {
+    const line = lines[index];
+    const prefix = `${name}: `;
+    if (line === void 0 || !line.startsWith(prefix)) {
+      if (optional) return void 0;
+      return bad(`missing ${name}`);
+    }
+    index += 1;
+    const value = line.slice(prefix.length);
+    if (value === "") bad(`empty ${name}`);
+    return value;
+  };
+  const uri = field("URI");
+  const version = field("Version");
+  const chainId = field("Chain ID");
+  const nonce = field("Nonce");
+  const issuedAt = field("Issued At");
+  const expirationTime = field("Expiration Time", true);
+  const notBefore = field("Not Before", true);
+  if (lines[index]?.startsWith("Request ID: ")) bad("Request ID is not accepted");
+  const resources = [];
+  if (lines[index] === "Resources:") {
+    index += 1;
+    while (lines[index] !== void 0 && lines[index].startsWith("- ")) {
+      resources.push(lines[index].slice(2));
+      index += 1;
+    }
+  }
+  if (index !== lines.length) bad("trailing content");
+  if (!/^[0-9]+$/.test(chainId)) bad("chain id");
+  if (!/^[A-Za-z0-9]{8,}$/.test(nonce)) bad("nonce must be alphanumeric");
+  for (const [name, value] of [["Issued At", issuedAt], ["Expiration Time", expirationTime], ["Not Before", notBefore]]) {
+    if (value !== void 0 && parseRfc3339(value) === null) bad(`${name} is not RFC 3339`);
+  }
+  return { domain: head[1], address, statement, uri, version, chainId, nonce, issuedAt, expirationTime, notBefore, resources };
+}
+
+// src/held-credentials/verify.ts
+async function verifyHeldPresentation(presentation, options) {
+  const { now, issuerSet, acceptedIssuers, acceptedProfiles, didMethods, audience, nonceStore, callerAccount } = options;
+  const rows = options.rows ?? DEFAULT_ROWS;
+  if (!(now instanceof Date) || Number.isNaN(now.getTime())) refuse("bad-config", "now must be a valid Date");
+  if (!IssuerSet.is(issuerSet)) refuse("bad-config", "issuerSet must come from parseIssuerSet");
+  if (!nonceStore || !didMethods || !Array.isArray(didMethods.issuer)) refuse("bad-config", "issuerSet, nonceStore and didMethods are required");
+  if (!Array.isArray(acceptedIssuers) || acceptedIssuers.length === 0) refuse("bad-config", "acceptedIssuers must not be empty");
+  if (!Array.isArray(acceptedProfiles) || acceptedProfiles.length === 0) refuse("bad-config", "acceptedProfiles must not be empty");
+  assertValidAudience(audience);
+  if (parsePkhDid(callerAccount) === null) refuse("bad-config", "callerAccount must be a did:pkh:eip155 account");
+  if (!isObject(presentation) || Object.keys(presentation).sort().join() !== "sdJwt,siwe") refuse("bad-presentation", "unexpected shape");
+  const { sdJwt, siwe } = presentation;
+  if (typeof sdJwt !== "string" || !isAscii(sdJwt)) refuse("bad-presentation", "sdJwt must be an ASCII string");
+  if (!isObject(siwe) || Object.keys(siwe).sort().join() !== "message,signature" || typeof siwe.message !== "string" || typeof siwe.signature !== "string") refuse("bad-presentation", "siwe shape");
+  const sdJwtText = sdJwt;
+  const siweMessage = siwe.message;
+  const siweSignature = siwe.signature;
+  if (sdJwtText.length > HELD_LIMITS.sdJwtChars) refuse("bad-presentation", "sdJwt is too long");
+  if (siweMessage.length > HELD_LIMITS.siweMessageChars) refuse("bad-presentation", "siwe message is too long");
+  if (siweSignature.length > HELD_LIMITS.siweSignatureChars) refuse("bad-presentation", "siwe signature is too long");
+  const message = parseStrictSiwe(siweMessage);
+  if (message.domain !== audience) refuse("bad-siwe", "domain is not this verifier's audience");
+  if (!/^[0-9A-Za-z]{22,}$/.test(message.nonce)) refuse("bad-nonce", "nonce must be at least 22 base62 characters (or 32 hex)");
+  const consumed = await nonceStore.consume(audience, message.nonce, callerAccount);
+  if (!consumed.existed) refuse("nonce-replayed", "nonce is unknown, already used, or bound to another account");
+  const checked = checkHeldCredential(sdJwtText, { now, issuerSet, acceptedIssuers, acceptedProfiles, didMethods, rows });
+  const subject = checked.subject;
+  const subjectPkh = checked.subjectPkh;
+  const nowMs = now.getTime();
   let origin;
   try {
     const url = new URL(message.uri);
@@ -732,17 +813,7 @@ async function verifyHeldPresentation(presentation, options) {
   const recovered = recoverEip191Address(siweMessage, signatureBytes);
   if (recovered === null || recovered !== subjectPkh.address) refuse("bad-siwe-signature", "signature does not recover the credential subject");
   if (!pkhPrincipalsEqual(callerAccount, subject)) refuse("nonce-account-mismatch", "subject is not the authenticated caller");
-  return {
-    issuer: issuerDid,
-    subject: canonicalPkhDid(subject),
-    subjectAddress: registryKey(subject),
-    expiresAt: new Date(exp * 1e3),
-    credentialId: payload.jti,
-    profile,
-    profileVersion,
-    vct,
-    claims
-  };
+  return toVerifiedCredential(checked);
 }
 
 // src/held-credentials/nonce-store.ts
@@ -790,4 +861,103 @@ function normaliseEmail(email) {
   if (local === "") return null;
   return `${local}@${domain}`;
 }
+
+// src/held-credentials/presentation.ts
+var import_secp256k12 = require("@noble/curves/secp256k1");
+var NONCE_FORMAT = /^[0-9A-Za-z]{22,}$/;
+var SD_HASH_FORMAT = /^[A-Za-z0-9_-]{43}$/;
+var SIGNATURE_FORMAT = /^0x[0-9a-fA-F]{130}$/;
+var SECP256K1_HALF_ORDER = import_secp256k12.secp256k1.CURVE.n / 2n;
+function isValidDate(value) {
+  return value instanceof Date && !Number.isNaN(value.getTime());
+}
+function hasLowS(signature) {
+  return BigInt(`0x${signature.slice(66, 130)}`) <= SECP256K1_HALF_ORDER;
+}
+function wholeSecondRfc3339(value, field) {
+  if (value.getUTCMilliseconds() !== 0) refuse("bad-config", `${field} must be a whole second`);
+  return value.toISOString().replace(".000Z", "Z");
+}
+function rfc3339Millis(value) {
+  const millis = parseRfc3339(value);
+  if (millis === null) refuse("bad-siwe", "SIWE timestamp is not RFC 3339");
+  return millis;
+}
+async function buildHeldPresentationSiwe(input) {
+  const { audience, nonce, sdHash: hash, account, issuedAt, expirationTime, sign } = input;
+  if (typeof audience !== "string") refuse("bad-config", "audience must be a string");
+  assertValidAudience(audience);
+  const subject = parsePkhDid(account);
+  if (subject === null) refuse("bad-config", "account must be a did:pkh:eip155 account");
+  if (subject.chainId !== "1") refuse("bad-config", "held presentations are on chain 1");
+  if (typeof nonce !== "string" || !NONCE_FORMAT.test(nonce)) refuse("bad-config", "nonce must be at least 22 base62 characters");
+  if (typeof hash !== "string" || !SD_HASH_FORMAT.test(hash)) refuse("bad-config", "sdHash must be a base64url SHA-256");
+  if (!isValidDate(issuedAt)) refuse("bad-config", "issuedAt must be a valid Date");
+  if (expirationTime !== void 0 && !isValidDate(expirationTime)) refuse("bad-config", "expirationTime must be a valid Date");
+  if (expirationTime !== void 0 && expirationTime.getTime() <= issuedAt.getTime()) refuse("bad-config", "expirationTime must be after issuedAt");
+  if (typeof sign !== "function") refuse("bad-config", "sign is required");
+  const message = [
+    `${audience} wants you to sign in with your Ethereum account:`,
+    toChecksumAddress(subject.address),
+    "",
+    PRESENTATION_STATEMENT,
+    "",
+    `URI: https://${audience}`,
+    "Version: 1",
+    "Chain ID: 1",
+    `Nonce: ${nonce}`,
+    `Issued At: ${wholeSecondRfc3339(issuedAt, "issuedAt")}`,
+    ...expirationTime === void 0 ? [] : [`Expiration Time: ${wholeSecondRfc3339(expirationTime, "expirationTime")}`],
+    "Resources:",
+    `- ${SD_HASH_RESOURCE_PREFIX}${hash}`
+  ].join("\n");
+  parseStrictSiwe(message);
+  if (message.length > HELD_LIMITS.siweMessageChars) refuse("bad-config", "SIWE message exceeds the node limit");
+  const signature = await sign(message);
+  if (typeof signature !== "string" || !SIGNATURE_FORMAT.test(signature)) refuse("bad-config", "signer must return 0x-prefixed 65-byte hex");
+  if (!hasLowS(signature)) refuse("bad-siwe-signature", "signer must return a low-S signature");
+  const recovered = recoverEip191Address(message, hexToBytes(signature.slice(2), "bad-siwe-signature"));
+  if (recovered !== subject.address) refuse("bad-siwe-signature", "signer does not control the account");
+  return { message, signature };
+}
+function checkReturnedPresentation(presentation, options) {
+  const { now, audience, account } = options;
+  if (!isValidDate(now)) refuse("bad-config", "now must be a valid Date");
+  assertValidAudience(audience);
+  if (parsePkhDid(account) === null) refuse("bad-config", "account must be a did:pkh:eip155 account");
+  if (!isObject(presentation) || Object.keys(presentation).sort().join() !== "sdJwt,siwe") refuse("bad-presentation", "unexpected shape");
+  const { sdJwt, siwe } = presentation;
+  if (typeof sdJwt !== "string" || !isAscii(sdJwt) || sdJwt.length > HELD_LIMITS.sdJwtChars) refuse("bad-presentation", "sdJwt must be a bounded ASCII string");
+  if (!isObject(siwe) || Object.keys(siwe).sort().join() !== "message,signature" || typeof siwe.message !== "string" || typeof siwe.signature !== "string") {
+    refuse("bad-presentation", "siwe must carry message and signature");
+  }
+  const siweMessage = siwe.message;
+  const siweSignature = siwe.signature;
+  if (siweMessage.length > HELD_LIMITS.siweMessageChars) refuse("bad-presentation", "siwe message is too long");
+  if (!SIGNATURE_FORMAT.test(siweSignature) || !hasLowS(siweSignature)) refuse("bad-siwe-signature", "signature must be 0x-prefixed 65-byte low-S hex");
+  const parsed = parseStrictSiwe(siweMessage);
+  if (parsed.domain !== audience) refuse("bad-siwe", "domain is not the audience");
+  let origin;
+  try {
+    const url = new URL(parsed.uri);
+    origin = url.protocol === "https:" && !url.username && !url.password ? url.origin : void 0;
+  } catch {
+    origin = void 0;
+  }
+  if (origin !== `https://${audience}`) refuse("bad-siwe", "uri must be an https origin matching the audience");
+  if (parsed.version !== "1") refuse("bad-siwe", "version must be 1");
+  if (parsed.statement !== PRESENTATION_STATEMENT) refuse("bad-siwe", "unexpected statement");
+  if (parsed.chainId !== "1") refuse("bad-siwe", "chain id must be 1");
+  if (!NONCE_FORMAT.test(parsed.nonce)) refuse("bad-nonce", "nonce must be at least 22 base62 characters");
+  if (parsed.resources.length !== 1 || parsed.resources[0] !== `${SD_HASH_RESOURCE_PREFIX}${sdHash(sdJwt)}`) {
+    refuse("bad-siwe", "resources must be exactly the sd_hash of this presentation");
+  }
+  const nowMs = now.getTime();
+  if (parsed.expirationTime !== void 0 && nowMs >= rfc3339Millis(parsed.expirationTime)) refuse("bad-siwe", "SIWE has expired");
+  if (parsed.notBefore !== void 0 && nowMs < rfc3339Millis(parsed.notBefore)) refuse("bad-siwe", "SIWE is not yet valid");
+  if (!pkhPrincipalsEqual(`did:pkh:eip155:${parsed.chainId}:${parsed.address}`, account)) refuse("bad-siwe", "SIWE address is not the account");
+  const recovered = recoverEip191Address(siweMessage, hexToBytes(siweSignature.slice(2), "bad-siwe-signature"));
+  if (recovered === null || recovered !== parsed.address.toLowerCase()) refuse("bad-siwe-signature", "signature does not recover the SIWE address");
+  return { sdJwt, siwe: { message: siweMessage, signature: siweSignature } };
+}
 //# sourceMappingURL=index.cjs.map