@tsg-dsp/tsg-sdk 0.0.0-stage → 0.20.1

package/dist/vendor/common-dtos/dcql.dto.js

@@ -0,0 +1,450 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { ApiProperty, ApiPropertyOptional } from "@nestjs/swagger";
+import { Transform, Type } from "class-transformer";
+import { IsArray, IsBoolean, IsIn, IsObject, IsOptional, IsString, ValidateNested } from "class-validator";
+/**
+ * DCQL Claims Path Pointer - points to specific claims within a credential
+ * Supports JSON path syntax with strings, numbers, and null for array selection
+ */
+export class ClaimsPathPointer {
+    path;
+}
+__decorate([
+    ApiProperty({
+        type: [String],
+        example: ["credentialSubject", "familyName"],
+        description: "Array representing path to claim in credential"
+    }),
+    IsArray(),
+    __metadata("design:type", Array)
+], ClaimsPathPointer.prototype, "path", void 0);
+/**
+ * Claims Query - specifies individual claims to request from a credential
+ */
+export class ClaimsQuery {
+    id;
+    path;
+    values;
+}
+__decorate([
+    ApiPropertyOptional({
+        example: "family_name_claim",
+        description: "Unique identifier for this claim query"
+    }),
+    IsOptional(),
+    IsString(),
+    __metadata("design:type", String)
+], ClaimsQuery.prototype, "id", void 0);
+__decorate([
+    ApiProperty({
+        type: [String],
+        example: ["credentialSubject", "familyName"],
+        description: "Array representing path to claim in credential"
+    }),
+    IsArray(),
+    __metadata("design:type", Array)
+], ClaimsQuery.prototype, "path", void 0);
+__decorate([
+    ApiPropertyOptional({
+        type: [String],
+        example: ["Doe", "Smith"],
+        description: "Expected values for value matching"
+    }),
+    IsOptional(),
+    IsArray(),
+    __metadata("design:type", Array)
+], ClaimsQuery.prototype, "values", void 0);
+/**
+ * Trusted Authorities Query - specifies trusted issuers or trust frameworks
+ */
+export class TrustedAuthoritiesQuery {
+    type;
+    values;
+}
+__decorate([
+    ApiProperty({
+        enum: ["aki", "etsi_tl", "openid_federation"],
+        example: "openid_federation",
+        description: "Type of trusted authority mechanism"
+    }),
+    IsString(),
+    IsIn(["aki", "etsi_tl", "openid_federation"]),
+    __metadata("design:type", String)
+], TrustedAuthoritiesQuery.prototype, "type", void 0);
+__decorate([
+    ApiProperty({
+        type: [String],
+        example: ["https://trustanchor.example.com"],
+        description: "Array of trusted authority identifiers"
+    }),
+    IsArray(),
+    IsString({ each: true }),
+    __metadata("design:type", Array)
+], TrustedAuthoritiesQuery.prototype, "values", void 0);
+/**
+ * Meta parameters for credential queries - format-specific metadata
+ */
+export class CredentialMeta {
+    vct_values;
+    type_values;
+    doctype_value;
+}
+__decorate([
+    ApiPropertyOptional({
+        type: [String],
+        example: ["https://credentials.example.com/identity_credential"],
+        description: "For SD-JWT VC: allowed vct values"
+    }),
+    IsOptional(),
+    IsArray(),
+    IsString({ each: true }),
+    __metadata("design:type", Array)
+], CredentialMeta.prototype, "vct_values", void 0);
+__decorate([
+    ApiPropertyOptional({
+        type: "array",
+        items: {
+            type: "array",
+            items: { type: "string" }
+        },
+        example: [["VerifiableCredential", "IDCredential"]],
+        description: "For W3C VC: allowed type values"
+    }),
+    IsOptional(),
+    IsArray(),
+    __metadata("design:type", Array)
+], CredentialMeta.prototype, "type_values", void 0);
+__decorate([
+    ApiPropertyOptional({
+        example: "org.iso.18013.5.1.mDL",
+        description: "For mdoc: document type value"
+    }),
+    IsOptional(),
+    IsString(),
+    __metadata("design:type", String)
+], CredentialMeta.prototype, "doctype_value", void 0);
+/**
+ * Credential Query - specifies requirements for a single credential
+ */
+export class CredentialQuery {
+    id;
+    format;
+    multiple = false;
+    meta;
+    trusted_authorities;
+    require_cryptographic_holder_binding;
+    claims;
+    claim_sets;
+}
+__decorate([
+    ApiProperty({
+        example: "identity_credential",
+        description: "Unique identifier for this credential query"
+    }),
+    IsString(),
+    __metadata("design:type", String)
+], CredentialQuery.prototype, "id", void 0);
+__decorate([
+    ApiProperty({
+        example: "jwt_vc_json",
+        description: "Credential format identifier",
+        enum: ["jwt_vc_json", "ldp_vc", "dc+sd-jwt", "mso_mdoc"]
+    }),
+    IsString(),
+    __metadata("design:type", String)
+], CredentialQuery.prototype, "format", void 0);
+__decorate([
+    ApiPropertyOptional({
+        example: false,
+        description: "Whether multiple credentials can be returned for this query"
+    }),
+    IsOptional(),
+    IsBoolean(),
+    __metadata("design:type", Boolean)
+], CredentialQuery.prototype, "multiple", void 0);
+__decorate([
+    ApiProperty({
+        type: CredentialMeta,
+        description: "Format-specific metadata and constraints"
+    }),
+    ValidateNested(),
+    Type(() => CredentialMeta),
+    __metadata("design:type", CredentialMeta)
+], CredentialQuery.prototype, "meta", void 0);
+__decorate([
+    ApiPropertyOptional({
+        type: [TrustedAuthoritiesQuery],
+        description: "Trusted authorities or trust frameworks"
+    }),
+    IsOptional(),
+    IsArray(),
+    ValidateNested({ each: true }),
+    Type(() => TrustedAuthoritiesQuery),
+    __metadata("design:type", Array)
+], CredentialQuery.prototype, "trusted_authorities", void 0);
+__decorate([
+    ApiPropertyOptional({
+        example: true,
+        description: "Whether cryptographic holder binding is required"
+    }),
+    IsOptional(),
+    IsBoolean(),
+    __metadata("design:type", Boolean)
+], CredentialQuery.prototype, "require_cryptographic_holder_binding", void 0);
+__decorate([
+    ApiPropertyOptional({
+        type: [ClaimsQuery],
+        description: "Specific claims to request from the credential"
+    }),
+    IsOptional(),
+    IsArray(),
+    ValidateNested({ each: true }),
+    Type(() => ClaimsQuery),
+    __metadata("design:type", Array)
+], CredentialQuery.prototype, "claims", void 0);
+__decorate([
+    ApiPropertyOptional({
+        type: "array",
+        items: {
+            type: "array",
+            items: { type: "string" }
+        },
+        example: [["claim1", "claim2"], ["claim3"]],
+        description: "Alternative combinations of claims"
+    }),
+    IsOptional(),
+    IsArray(),
+    __metadata("design:type", Array)
+], CredentialQuery.prototype, "claim_sets", void 0);
+/**
+ * Credential Set Query - specifies alternative credential combinations
+ */
+export class CredentialSetQuery {
+    options;
+    required = true;
+}
+__decorate([
+    ApiProperty({
+        type: "array",
+        items: {
+            type: "array",
+            items: { type: "string" }
+        },
+        example: [["identity_cred"], ["passport_cred", "visa_cred"]],
+        description: "Array of credential ID combinations that satisfy the requirement"
+    }),
+    IsArray(),
+    __metadata("design:type", Array)
+], CredentialSetQuery.prototype, "options", void 0);
+__decorate([
+    ApiPropertyOptional({
+        example: true,
+        description: "Whether this credential set is required"
+    }),
+    IsOptional(),
+    IsBoolean(),
+    __metadata("design:type", Boolean)
+], CredentialSetQuery.prototype, "required", void 0);
+/**
+ * Digital Credentials Query Language (DCQL) main query object
+ */
+export class DcqlQuery {
+    credentials;
+    credential_sets;
+}
+__decorate([
+    ApiProperty({
+        type: [CredentialQuery],
+        description: "Array of credential queries"
+    }),
+    IsArray(),
+    ValidateNested({ each: true }),
+    Type(() => CredentialQuery),
+    __metadata("design:type", Array)
+], DcqlQuery.prototype, "credentials", void 0);
+__decorate([
+    ApiPropertyOptional({
+        type: [CredentialSetQuery],
+        description: "Optional credential set constraints"
+    }),
+    IsOptional(),
+    IsArray(),
+    ValidateNested({ each: true }),
+    Type(() => CredentialSetQuery),
+    __metadata("design:type", Array)
+], DcqlQuery.prototype, "credential_sets", void 0);
+/**
+ * Enhanced Authorization Request with DCQL support
+ */
+export class OID4VPAuthorizationRequest {
+    response_type;
+    response_mode;
+    client_id;
+    redirect_uri;
+    response_uri;
+    dcql_query;
+    nonce;
+    state;
+    client_metadata;
+    transaction_data;
+    verifier_info;
+    request_uri_method;
+}
+__decorate([
+    ApiProperty({
+        example: "vp_token",
+        description: "Response type - must be vp_token for OID4VP"
+    }),
+    IsString(),
+    IsIn(["vp_token", "vp_token id_token"]),
+    __metadata("design:type", String)
+], OID4VPAuthorizationRequest.prototype, "response_type", void 0);
+__decorate([
+    ApiProperty({
+        example: "direct_post",
+        description: "Response mode - how the response should be delivered"
+    }),
+    IsString(),
+    IsIn(["direct_post", "direct_post.jwt", "fragment"]),
+    __metadata("design:type", String)
+], OID4VPAuthorizationRequest.prototype, "response_mode", void 0);
+__decorate([
+    ApiProperty({
+        example: "x509_san_dns:client.example.org",
+        description: "Client identifier with optional prefix"
+    }),
+    IsString(),
+    __metadata("design:type", String)
+], OID4VPAuthorizationRequest.prototype, "client_id", void 0);
+__decorate([
+    ApiPropertyOptional({
+        example: "https://client.example.org/callback",
+        description: "Redirect URI (only if response_mode is not direct_post)"
+    }),
+    IsOptional(),
+    IsString(),
+    __metadata("design:type", String)
+], OID4VPAuthorizationRequest.prototype, "redirect_uri", void 0);
+__decorate([
+    ApiPropertyOptional({
+        example: "https://client.example.org/response",
+        description: "Response URI (only if response_mode is direct_post)"
+    }),
+    IsOptional(),
+    IsString(),
+    __metadata("design:type", String)
+], OID4VPAuthorizationRequest.prototype, "response_uri", void 0);
+__decorate([
+    ApiProperty({
+        type: DcqlQuery,
+        description: "DCQL query specifying credential requirements"
+    }),
+    ValidateNested(),
+    Type(() => DcqlQuery),
+    __metadata("design:type", DcqlQuery)
+], OID4VPAuthorizationRequest.prototype, "dcql_query", void 0);
+__decorate([
+    ApiProperty({
+        example: "n-0S6_WzA2Mj",
+        description: "Cryptographically random nonce for replay protection"
+    }),
+    IsString(),
+    __metadata("design:type", String)
+], OID4VPAuthorizationRequest.prototype, "nonce", void 0);
+__decorate([
+    ApiPropertyOptional({
+        example: "state123",
+        description: "State parameter for request/response binding"
+    }),
+    IsOptional(),
+    IsString(),
+    __metadata("design:type", String)
+], OID4VPAuthorizationRequest.prototype, "state", void 0);
+__decorate([
+    ApiPropertyOptional({
+        type: Object,
+        description: "Client metadata object"
+    }),
+    IsOptional(),
+    IsObject(),
+    __metadata("design:type", Object)
+], OID4VPAuthorizationRequest.prototype, "client_metadata", void 0);
+__decorate([
+    ApiPropertyOptional({
+        type: [String],
+        example: ["eyJhbGciOiJSUzI1NiJ9..."],
+        description: "Transaction data for binding user authorization"
+    }),
+    IsOptional(),
+    IsArray(),
+    IsString({ each: true }),
+    __metadata("design:type", Array)
+], OID4VPAuthorizationRequest.prototype, "transaction_data", void 0);
+__decorate([
+    ApiPropertyOptional({
+        type: [Object],
+        description: "Verifier attestations and metadata"
+    }),
+    IsOptional(),
+    IsArray(),
+    __metadata("design:type", Array)
+], OID4VPAuthorizationRequest.prototype, "verifier_info", void 0);
+__decorate([
+    ApiPropertyOptional({
+        example: "post",
+        description: "HTTP method for request_uri (get or post)"
+    }),
+    IsOptional(),
+    IsString(),
+    IsIn(["get", "post"]),
+    __metadata("design:type", String)
+], OID4VPAuthorizationRequest.prototype, "request_uri_method", void 0);
+/**
+ * VP Token structure according to OID4VP 1.0-final
+ */
+export class VpToken {
+}
+/**
+ * Enhanced Authorization Response with VP Token
+ */
+export class OID4VPAuthorizationResponse {
+    vp_token;
+    state;
+}
+__decorate([
+    ApiProperty({
+        type: VpToken,
+        example: { identity_credential: ["eyJhbGciOiJFUzI1NiJ9..."] },
+        description: "VP Token with credential ID to presentations mapping"
+    }),
+    Transform(({ value }) => {
+        if (typeof value === "string") {
+            try {
+                return JSON.parse(value);
+            }
+            catch {
+                throw new Error("vp_token must be valid JSON");
+            }
+        }
+        return value;
+    }),
+    IsObject(),
+    __metadata("design:type", VpToken)
+], OID4VPAuthorizationResponse.prototype, "vp_token", void 0);
+__decorate([
+    ApiProperty({
+        example: "state123",
+        description: "State parameter from the authorization request"
+    }),
+    IsString(),
+    __metadata("design:type", String)
+], OID4VPAuthorizationResponse.prototype, "state", void 0);
+//# sourceMappingURL=dcql.dto.js.map

package/dist/vendor/common-dtos/did.schemas.d.ts

@@ -0,0 +1,40 @@
+import { DIDDocument, JsonWebKey, Service, ServiceEndpoint, VerificationMethod } from "did-resolver";
+export declare class JsonWebKeyDto implements JsonWebKey {
+    alg?: string;
+    crv?: string;
+    e?: string;
+    ext?: boolean;
+    key_ops?: string[];
+    kid?: string;
+    kty: string;
+    n?: string;
+    use?: string;
+    x?: string;
+    y?: string;
+}
+export declare class VerificationMethodDto implements VerificationMethod {
+    id: string;
+    type: string;
+    controller: string;
+    publicKeyJwk?: JsonWebKeyDto;
+}
+export declare class ServiceDto implements Service {
+    id: string;
+    type: string;
+    serviceEndpoint: ServiceEndpoint | ServiceEndpoint[];
+}
+export declare class DIDDocumentDto implements DIDDocument {
+    "@context"?: string | string[];
+    id: string;
+    alsoKnownAs?: string[];
+    controller?: string | string[];
+    verificationMethod?: VerificationMethod[];
+    service?: Service[];
+    publicKey?: VerificationMethod[];
+    authentication?: (string | VerificationMethod)[];
+    assertionMethod?: (string | VerificationMethod)[];
+    keyAgreement?: (string | VerificationMethod)[];
+    capabilityInvocation?: (string | VerificationMethod)[];
+    capabilityDelegation?: (string | VerificationMethod)[];
+}
+//# sourceMappingURL=did.schemas.d.ts.map