@tinycloud/web-sdk 3.0.0-beta.11 → 3.0.0-beta.13

package/dist/credentials/element.d.ts

@@ -1,5 +1,5 @@
 import { type CredentialFlowDescriptor } from "@tinycloud/sdk-core";
-import type { CredentialAcquisitionTheme, CredentialInteractionSurface, CredentialProofSubject, InlineCredentialProofRequest, PrimitiveStepResult } from "./types";
+import type { CredentialAcquisitionTheme, CredentialInputRequest, CredentialInteractionSurface, CredentialProofSubject, InlineCredentialProofRequest, PrimitiveStepResult } from "./types";
 export declare const TINYCLOUD_CREDENTIAL_ACQUISITION_TAG = "tinycloud-credential-acquisition";
 /** Length of the mailbox code OpenCredentials issues for the `mailbox_otp` step. */
 export declare const MAILBOX_OTP_LENGTH = 8;
@@ -14,9 +14,11 @@ export declare function normalizeMailboxCode(value: string): string;
 export declare class TinyCloudCredentialAcquisitionElement extends ElementBase {
     private root?;
     private resolver?;
+    private inputResolver?;
     private rejecter?;
     private closed;
     private subject?;
+    private mailboxDomain?;
     private codeTtlSeconds?;
     connectedCallback(): void;
     disconnectedCallback(): void;
@@ -24,15 +26,21 @@ export declare class TinyCloudCredentialAcquisitionElement extends ElementBase {
     /** Context known before the first proof request, used for the opening state. */
     prepare(input: {
         readonly subject?: CredentialProofSubject;
+        readonly mailboxDomain?: string;
         readonly codeTtlSeconds?: number;
     }): void;
     requestProof(request: InlineCredentialProofRequest): Promise<PrimitiveStepResult>;
+    /** Collects inputs the requirement does not carry, such as the recipient's own mailbox. */
+    requestInputs(request: CredentialInputRequest): Promise<Readonly<Record<string, string>>>;
     report(state: "signing" | "verifying" | "saving" | "success" | "recovery", message?: string): void;
     finish(): void;
     cancel(): void;
     isClosed(): boolean;
     private renderShell;
     private renderPrompt;
+    private settleInputs;
+    private mailboxEntryForm;
+    private collectForm;
     private settle;
     private actions;
     private mailboxForm;
@@ -49,6 +57,7 @@ export declare class CredentialAcquisitionController {
         readonly mountTarget?: Element | string;
         readonly theme?: CredentialAcquisitionTheme;
         readonly subject?: CredentialProofSubject;
+        readonly mailboxDomain?: string;
     });
     start(input: {
         readonly signal?: AbortSignal;

package/dist/credentials/transport.d.ts

@@ -16,6 +16,7 @@ export declare class OpenCredentialsHttpTransport implements CredentialAcquisiti
         holderDid: string;
         openerOrigin: string;
         completionVerifierChallenge: string;
+        inputs?: Readonly<Record<string, string>>;
         signal?: AbortSignal;
     }): Promise<{
         requestId: string;

package/dist/credentials/types.d.ts

@@ -100,6 +100,22 @@ export interface CredentialInteractionSurface {
      * acquisition locator, request verifier, or transport capability.
      */
     readonly requestProof?: InlineCredentialProofHandler;
+    /**
+     * Collects descriptor inputs the requirement does not already supply, such
+     * as the recipient's own mailbox for an email-domain requirement. It
+     * receives only the input schema and the public domain constraint.
+     */
+    readonly requestInputs?: (request: CredentialInputRequest) => Promise<Readonly<Record<string, string>>>;
+}
+export interface CredentialInputRequest {
+    readonly inputs: readonly {
+        readonly id: string;
+        readonly label: string;
+        readonly schema: CredentialFlowDescriptor["inputs"][number]["schema"];
+    }[];
+    /** The exact canonical domain the entered mailbox must belong to. */
+    readonly mailboxDomain?: string;
+    readonly signal?: AbortSignal;
 }
 /** A browser-owned interaction that navigates to the OpenCredentials locator. */
 export interface CredentialBrowserInteractionAdapter {
@@ -164,6 +180,7 @@ export interface CredentialAcquisitionTransport {
         readonly holderDid: string;
         readonly openerOrigin: string;
         readonly completionVerifierChallenge: string;
+        readonly inputs?: Readonly<Record<string, string>>;
         readonly signal?: AbortSignal;
     }): Promise<{
         readonly requestId: string;
@@ -207,6 +224,12 @@ export interface CredentialsAcquireOptions extends CredentialsOperationOptions {
     readonly openerOrigin?: string;
     /** Same-origin, request-scoped persistence used to resume a full-page redirect. */
     readonly redirectStore?: CredentialRedirectStore;
+    /**
+     * Acquisition inputs the requirement does not carry (for example a
+     * recipient-chosen mailbox for an email-domain requirement). When omitted,
+     * an inline surface collects them.
+     */
+    readonly inputs?: Readonly<Record<string, string>>;
 }
 export interface CredentialAcquisitionTheme {
     readonly accentColor?: string;