@tsg-dsp/tsg-sdk 0.0.0-stage → 0.21.0

package/dist/wallet/wallet.sdk.d.ts

@@ -0,0 +1,285 @@
+import type { VerifiablePresentationJwt } from "@tsg-dsp/common-dsp";
+import type { CreatePresentationJwtRequest, CredentialStatusRequest, DIDDocumentDto, ServiceDto, SignedJwtResponse, SignRequestJwt, ValidateJWTRequest, VerifiedCredentialStatus } from "../vendor/common-dtos/index.js";
+import type { AddScope, CredentialOffer, CredentialOfferRequest, CredentialOfferStatus, DCPCredentialRequestInitiation, KeyInfo, ScopeDto } from "../vendor/wallet-dtos/index.js";
+import type { components as WalletComponents } from "../.generated/wallet.js";
+import type { WalletClient } from "../client.js";
+import { type JsonObject } from "../utils/shape-validation.js";
+type WalletSchemas = WalletComponents["schemas"];
+/**
+ * Definition of a DID service entry, as accepted by the wallet when
+ * registering or updating a service in the DID document.
+ */
+export type DidServiceConfig = WalletSchemas["DidServiceConfigDto"];
+/**
+ * Manage cryptographic keys, verifiable credentials, DIDs, and credential
+ * issuance through the TSG Wallet.
+ *
+ * Requires `walletBaseUrl` to be set in the SDK configuration.
+ * @example
+ * ```ts
+ * const keys = await sdk.wallet.listKeys();
+ * const did = await sdk.wallet.getDidDocument();
+ * const signed = await sdk.wallet.signJwt({ body: payload, audience: "did:web:other" });
+ * ```
+ */
+export declare class WalletSdk {
+    private readonly client;
+    constructor(client: WalletClient);
+    /**
+     * Request a JWT signature from the wallet using a managed key.
+     * @param request - The signing request containing the JWT body, audience, key ID, etc.
+     * @returns A validated {@link SignedJwtResponse} containing the signed JWT.
+     */
+    signJwt(request: SignRequestJwt): Promise<SignedJwtResponse>;
+    /**
+     * Validate a JWT using the wallet's key material and trust configuration.
+     * @param request - The validation request containing the JWT string to verify.
+     * @returns The validation result.
+     */
+    validateJwt(request: ValidateJWTRequest): Promise<JsonObject>;
+    /**
+     * Create a VP-JWT from wallet credentials using the wallet's presentation service.
+     * @param request - Credential IDs and optional signing options for the presentation.
+     * @returns A validated {@link VerifiablePresentationJwt} containing the signed VP-JWT.
+     */
+    createPresentationJwt(request: CreatePresentationJwtRequest): Promise<VerifiablePresentationJwt>;
+    /**
+     * Store an immutable, versioned Presentation Definition for DCP scope resolution.
+     * @param scope - Scope alias, immutable revision metadata, and compiled definition.
+     * @returns The persisted wallet scope.
+     */
+    addPresentationScope(scope: AddScope): Promise<ScopeDto>;
+    /**
+     * List presentation scopes, optionally selecting an immutable revision.
+     * @param alias - Optional scope alias filter.
+     * @param revision - Optional immutable revision filter.
+     * @returns The paginated wallet scope response.
+     */
+    listPresentationScopes(alias?: string, revision?: number): Promise<{
+        data: ScopeDto[];
+        total: number;
+    }>;
+    /**
+     * Verify a bitstring status-list entry through the wallet.
+     * @param request - Status-list credential URL and entry index.
+     * @returns The validated revocation or suspension status.
+     */
+    verifyCredentialStatus(request: CredentialStatusRequest): Promise<VerifiedCredentialStatus>;
+    /**
+     * List all verifiable credentials stored in the wallet.
+     * @returns An array of credential objects.
+     */
+    listCredentials(): Promise<{
+        id: string;
+        targetDid: string;
+        credential: WalletComponents["schemas"]["Credential"];
+        proof: WalletComponents["schemas"]["DataIntegrityProof"][];
+        jwt?: string;
+        selfIssued: boolean;
+        revoked: boolean;
+        statusListIndex?: number;
+        createdDate: string;
+        modifiedDate: string;
+        deletedDate?: string;
+    }[]>;
+    /**
+     * Issue a new credential within this wallet.
+     * @param credentialConfig - Wallet credential configuration.
+     * @returns The created credential record.
+     */
+    addCredential(credentialConfig: WalletSchemas["CredentialConfigDto"]): Promise<{
+        id: string;
+        targetDid: string;
+        credential: WalletComponents["schemas"]["Credential"];
+        proof: WalletComponents["schemas"]["DataIntegrityProof"][];
+        jwt?: string;
+        selfIssued: boolean;
+        revoked: boolean;
+        statusListIndex?: number;
+        createdDate: string;
+        modifiedDate: string;
+        deletedDate?: string;
+    }>;
+    /**
+     * Import an externally issued credential into this wallet.
+     * @param credential - Verifiable Credential document to import.
+     * @returns The imported credential record.
+     */
+    importCredential(credential: WalletSchemas["VerifiableCredential"]): Promise<{
+        id: string;
+        targetDid: string;
+        credential: WalletComponents["schemas"]["Credential"];
+        proof: WalletComponents["schemas"]["DataIntegrityProof"][];
+        jwt?: string;
+        selfIssued: boolean;
+        revoked: boolean;
+        statusListIndex?: number;
+        createdDate: string;
+        modifiedDate: string;
+        deletedDate?: string;
+    }>;
+    /**
+     * Get a specific verifiable credential by its ID.
+     * @param credentialId - The credential identifier.
+     * @returns The credential object.
+     * @throws Throws an {@link SdkError} with code {@link SdkErrorCode.NOT_FOUND} if the credential does not exist.
+     */
+    getCredential(credentialId: string): Promise<{
+        id: string;
+        targetDid: string;
+        credential: WalletComponents["schemas"]["Credential"];
+        proof: WalletComponents["schemas"]["DataIntegrityProof"][];
+        jwt?: string;
+        selfIssued: boolean;
+        revoked: boolean;
+        statusListIndex?: number;
+        createdDate: string;
+        modifiedDate: string;
+        deletedDate?: string;
+    }>;
+    /**
+     * Delete a verifiable credential from the wallet.
+     * @param credentialId - The credential identifier.
+     * @returns The deletion response.
+     * @throws Throws an {@link SdkError} with code {@link SdkErrorCode.NOT_FOUND} if the credential does not exist.
+     */
+    deleteCredential(credentialId: string): Promise<undefined>;
+    /**
+     * Revoke a verifiable credential, making it invalid for future verification.
+     * @param credentialId - The credential identifier.
+     * @returns The revocation response.
+     */
+    revokeCredential(credentialId: string): Promise<undefined>;
+    /**
+     * Get the credential configuration, including trust anchors and issuer settings.
+     * @returns The credential configuration object.
+     */
+    getCredentialConfig(): Promise<JsonObject>;
+    /**
+     * List all dataspace-scoped verifiable credentials.
+     *
+     * Dataspace credentials are a subset of credentials specifically used
+     * for dataspace membership and trust establishment.
+     * @returns An array of dataspace credential objects.
+     */
+    listDataspaceCredentials(): Promise<{
+        id: string;
+        targetDid: string;
+        credential: WalletComponents["schemas"]["Credential"];
+        proof: WalletComponents["schemas"]["DataIntegrityProof"][];
+        jwt?: string;
+        selfIssued: boolean;
+        revoked: boolean;
+        statusListIndex?: number;
+        createdDate: string;
+        modifiedDate: string;
+        deletedDate?: string;
+    }[]>;
+    /**
+     * Get the DID document of this wallet's identity.
+     * @returns A validated {@link DIDDocumentDto}.
+     */
+    getDidDocument(): Promise<DIDDocumentDto>;
+    /**
+     * Get all DID services registered in the DID document.
+     * @returns An array of validated {@link ServiceDto} instances.
+     */
+    getDidServices(): Promise<ServiceDto[]>;
+    /**
+     * Register a new DID service in this wallet's DID document.
+     *
+     * Applications use this to advertise their own endpoints (an orchestration
+     * inbox, a connector address) so that peers can discover them by resolving
+     * the DID document instead of being configured with a static URL.
+     * @param service - Service identifier, type and endpoint.
+     * @returns A validated {@link ServiceDto} describing the registered service.
+     * @throws Throws an {@link SdkError} with code {@link SdkErrorCode.CONFLICT} if a service with the same id already exists.
+     */
+    addDidService(service: DidServiceConfig): Promise<ServiceDto>;
+    /**
+     * Update an already registered DID service.
+     * @param id - Identifier of the service to update.
+     * @param service - The new service definition.
+     * @returns A validated {@link ServiceDto} describing the updated service.
+     * @throws Throws an {@link SdkError} with code {@link SdkErrorCode.NOT_FOUND} if the service does not exist.
+     */
+    updateDidService(id: string, service: DidServiceConfig): Promise<ServiceDto>;
+    /**
+     * Remove a DID service from this wallet's DID document.
+     * @param id - Identifier of the service to remove.
+     * @throws Throws an {@link SdkError} with code {@link SdkErrorCode.NOT_FOUND} if the service does not exist.
+     */
+    removeDidService(id: string): Promise<void>;
+    /**
+     * List all cryptographic keys managed by the wallet.
+     * @returns An array of validated {@link KeyInfo} instances.
+     */
+    listKeys(): Promise<KeyInfo[]>;
+    /**
+     * Generate a new wallet key from the provided configuration.
+     * @param keyConfig - Wallet key configuration.
+     * @returns A validated {@link KeyInfo}.
+     */
+    addKey(keyConfig: WalletSchemas["KeyConfigDto"]): Promise<KeyInfo>;
+    /**
+     * Get a specific key by its ID.
+     * @param keyId - The key identifier.
+     * @returns A validated {@link KeyInfo}.
+     * @throws Throws an {@link SdkError} with code {@link SdkErrorCode.NOT_FOUND} if the key does not exist.
+     */
+    getKey(keyId: string): Promise<KeyInfo>;
+    /**
+     * Delete a cryptographic key from the wallet.
+     * @param keyId - The key identifier.
+     * @returns The deletion response.
+     * @throws Throws an {@link SdkError} with code {@link SdkErrorCode.NOT_FOUND} if the key does not exist.
+     */
+    deleteKey(keyId: string): Promise<undefined>;
+    /**
+     * Set a key as the default signing key for this wallet.
+     * @param keyId - The key identifier to make default.
+     * @returns The update response.
+     */
+    setDefaultKey(keyId: string): Promise<undefined>;
+    /**
+     * Create a new credential offer for issuance to another party.
+     * @param request - The credential offer details.
+     * @returns A validated {@link CredentialOffer}.
+     */
+    createOffer(request: CredentialOfferRequest): Promise<CredentialOffer>;
+    /**
+     * Request a credential offer via the Decentralized Claims Protocol (DCP).
+     *
+     * This initiates the issuance flow by sending a credential request to
+     * a remote issuer using the DCP standard.
+     * @param request - The DCP credential request initiation details.
+     */
+    requestOfferViaDcp(request: DCPCredentialRequestInitiation): Promise<void>;
+    /**
+     * Get the status and details of a credential offer.
+     * @param id - The credential offer identifier.
+     * @returns A validated {@link CredentialOfferStatus}.
+     * @throws Throws an {@link SdkError} with code {@link SdkErrorCode.NOT_FOUND} if the offer does not exist.
+     */
+    getOffer(id: string): Promise<CredentialOfferStatus>;
+    /**
+     * Revoke a credential offer, preventing it from being claimed.
+     * @param id - The credential offer identifier.
+     * @returns The revocation response.
+     */
+    revokeOffer(id: string): Promise<{
+        id: string;
+        createdDate: string;
+        preAuthorizedCode: string;
+        holderId?: string;
+        credentialType: string;
+        credentialId?: string;
+        revoked: boolean;
+        credentialSubject: {
+            id: string;
+        };
+        remoteId?: string;
+    } | undefined>;
+}
+export {};
+//# sourceMappingURL=wallet.sdk.d.ts.map

package/dist/wallet/wallet.sdk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet.sdk.d.ts","sourceRoot":"","sources":["../../src/wallet/wallet.sdk.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,KAAK,EACV,4BAA4B,EAC5B,uBAAuB,EACvB,cAAc,EACd,UAAU,EACV,iBAAiB,EACjB,cAAc,EACd,kBAAkB,EAClB,wBAAwB,EACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EACV,QAAQ,EACR,eAAe,EACf,sBAAsB,EACtB,qBAAqB,EACrB,8BAA8B,EAC9B,OAAO,EACP,QAAQ,EACT,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,UAAU,IAAI,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACjF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAML,KAAK,UAAU,EAIhB,MAAM,8BAA8B,CAAC;AAEtC,KAAK,aAAa,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;AAEjD;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,aAAa,CAAC,qBAAqB,CAAC,CAAC;AAEpE;;;;;;;;;;;GAWG;AACH,qBAAa,SAAS;IACR,OAAO,CAAC,QAAQ,CAAC,MAAM;IAAnC,YAA6B,MAAM,EAAE,YAAY,EAAI;IAIrD;;;;OAIG;IACG,OAAO,CAAC,OAAO,EAAE,cAAc,8BAUpC;IAED;;;;OAIG;IACG,WAAW,CAAC,OAAO,EAAE,kBAAkB,uBAQ5C;IAED;;;;OAIG;IACG,qBAAqB,CAAC,OAAO,EAAE,4BAA4B,sCAUhE;IAED;;;;OAIG;IACG,oBAAoB,CAAC,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAK7D;IAED;;;;;OAKG;IACG,sBAAsB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM;cAUpD,QAAQ,EAAE;eACT,MAAM;OAShB;IAED;;;;OAIG;IACG,sBAAsB,CAC1B,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,wBAAwB,CAAC,CAanC;IAID;;;OAGG;IACG,eAAe;;;;;;;;;;;;SAOpB;IAED;;;;OAIG;IACG,aAAa,CAAC,gBAAgB,EAAE,aAAa,CAAC,qBAAqB,CAAC;;;;;;;;;;;;OASzE;IAED;;;;OAIG;IACG,gBAAgB,CAAC,UAAU,EAAE,aAAa,CAAC,sBAAsB,CAAC;;;;;;;;;;;;OASvE;IAED;;;;;OAKG;IACG,aAAa,CAAC,YAAY,EAAE,MAAM;;;;;;;;;;;;OAYvC;IAED;;;;;OAKG;IACG,gBAAgB,CAAC,YAAY,EAAE,MAAM,sBAQ1C;IAED;;;;OAIG;IACG,gBAAgB,CAAC,YAAY,EAAE,MAAM,sBAQ1C;IAED;;;OAGG;IACG,mBAAmB,wBAGxB;IAED;;;;;;OAMG;IACG,wBAAwB;;;;;;;;;;;;SAO7B;IAID;;;OAGG;IACG,cAAc,4BAOnB;IAED;;;OAGG;IACG,cAAc,0BAOnB;IAED;;;;;;;;;OASG;IACG,aAAa,CAAC,OAAO,EAAE,gBAAgB,uBAK5C;IAED;;;;;;OAMG;IACG,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,uBAM3D;IAED;;;;OAIG;IACG,gBAAgB,CAAC,EAAE,EAAE,MAAM,iBAIhC;IAID;;;OAGG;IACG,QAAQ,uBAGb;IAED;;;;OAIG;IACG,MAAM,CAAC,SAAS,EAAE,aAAa,CAAC,cAAc,CAAC,oBAKpD;IAED;;;;;OAKG;IACG,MAAM,CAAC,KAAK,EAAE,MAAM,oBAKzB;IAED;;;;;OAKG;IACG,SAAS,CAAC,KAAK,EAAE,MAAM,sBAK5B;IAED;;;;OAIG;IACG,aAAa,CAAC,KAAK,EAAE,MAAM,sBAKhC;IAID;;;;OAIG;IACG,WAAW,CAAC,OAAO,EAAE,sBAAsB,4BAWhD;IAED;;;;;;OAMG;IACG,kBAAkB,CAAC,OAAO,EAAE,8BAA8B,iBAI/D;IAED;;;;;OAKG;IACG,QAAQ,CAAC,EAAE,EAAE,MAAM,kCAYxB;IAED;;;;OAIG;IACG,WAAW,CAAC,EAAE,EAAE,MAAM;;;;;;;;;;;;mBAQ3B;CACF"}

package/dist/wallet/wallet.sdk.js

@@ -0,0 +1,384 @@
+import { hasArray, hasBoolean, hasNumber, hasString, isObject, requireArrayResponse, requireObject, requireObjectResponse } from "../utils/shape-validation.js";
+/**
+ * Manage cryptographic keys, verifiable credentials, DIDs, and credential
+ * issuance through the TSG Wallet.
+ *
+ * Requires `walletBaseUrl` to be set in the SDK configuration.
+ * @example
+ * ```ts
+ * const keys = await sdk.wallet.listKeys();
+ * const did = await sdk.wallet.getDidDocument();
+ * const signed = await sdk.wallet.signJwt({ body: payload, audience: "did:web:other" });
+ * ```
+ */
+export class WalletSdk {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    // ── Signing ────────────────────────────────────────────────────────────
+    /**
+     * Request a JWT signature from the wallet using a managed key.
+     * @param request - The signing request containing the JWT body, audience, key ID, etc.
+     * @returns A validated {@link SignedJwtResponse} containing the signed JWT.
+     */
+    async signJwt(request) {
+        const { data } = await this.client.POST("/management/signature/sign/jwt", {
+            body: request
+        });
+        return requireObjectResponse(data, "SignedJwtResponse", (value) => hasString(value, "jwt"));
+    }
+    /**
+     * Validate a JWT using the wallet's key material and trust configuration.
+     * @param request - The validation request containing the JWT string to verify.
+     * @returns The validation result.
+     */
+    async validateJwt(request) {
+        const { data } = await this.client.POST("/management/signature/validate/jwt", {
+            body: request
+        });
+        return requireObject(data, "JWT validation");
+    }
+    /**
+     * Create a VP-JWT from wallet credentials using the wallet's presentation service.
+     * @param request - Credential IDs and optional signing options for the presentation.
+     * @returns A validated {@link VerifiablePresentationJwt} containing the signed VP-JWT.
+     */
+    async createPresentationJwt(request) {
+        const { data } = await this.client.POST("/management/presentation/jwt", {
+            body: request
+        });
+        return requireObjectResponse(data, "VerifiablePresentationJwt", (value) => hasString(value, "vp"));
+    }
+    /**
+     * Store an immutable, versioned Presentation Definition for DCP scope resolution.
+     * @param scope - Scope alias, immutable revision metadata, and compiled definition.
+     * @returns The persisted wallet scope.
+     */
+    async addPresentationScope(scope) {
+        const { data } = await this.client.POST("/management/presentation/scopes", {
+            body: scope
+        });
+        return requireObjectResponse(data, "ScopeDto", isScope);
+    }
+    /**
+     * List presentation scopes, optionally selecting an immutable revision.
+     * @param alias - Optional scope alias filter.
+     * @param revision - Optional immutable revision filter.
+     * @returns The paginated wallet scope response.
+     */
+    async listPresentationScopes(alias, revision) {
+        const { data } = await this.client.GET("/management/presentation/scopes", {
+            params: {
+                query: {
+                    ...(alias ? { alias } : {}),
+                    ...(revision ? { revision } : {})
+                }
+            }
+        });
+        return requireObjectResponse(data, "ScopeDtoPage", (value) => hasNumber(value, "total") &&
+            hasArray(value, "data") &&
+            value.data.every((item) => isObject(item) && isScope(item)));
+    }
+    /**
+     * Verify a bitstring status-list entry through the wallet.
+     * @param request - Status-list credential URL and entry index.
+     * @returns The validated revocation or suspension status.
+     */
+    async verifyCredentialStatus(request) {
+        const { data } = await this.client.POST("/management/presentation/status", {
+            body: request
+        });
+        return requireObjectResponse(data, "VerifiedCredentialStatus", (value) => hasString(value, "statusListCredential") &&
+            hasString(value, "statusListIndex") &&
+            hasString(value, "statusPurpose") &&
+            hasBoolean(value, "status"));
+    }
+    // ── Credentials ────────────────────────────────────────────────────────
+    /**
+     * List all verifiable credentials stored in the wallet.
+     * @returns An array of credential objects.
+     */
+    async listCredentials() {
+        const { data } = await this.client.GET("/management/credentials");
+        return requireArrayResponse(data ?? [], "CredentialsDto[]", isCredentialRecord);
+    }
+    /**
+     * Issue a new credential within this wallet.
+     * @param credentialConfig - Wallet credential configuration.
+     * @returns The created credential record.
+     */
+    async addCredential(credentialConfig) {
+        const { data } = await this.client.POST("/management/credentials", {
+            body: credentialConfig
+        });
+        return requireObjectResponse(data, "CredentialsDto", isCredentialRecord);
+    }
+    /**
+     * Import an externally issued credential into this wallet.
+     * @param credential - Verifiable Credential document to import.
+     * @returns The imported credential record.
+     */
+    async importCredential(credential) {
+        const { data } = await this.client.POST("/management/credentials/import", {
+            body: credential
+        });
+        return requireObjectResponse(data, "CredentialsDto", isCredentialRecord);
+    }
+    /**
+     * Get a specific verifiable credential by its ID.
+     * @param credentialId - The credential identifier.
+     * @returns The credential object.
+     * @throws Throws an {@link SdkError} with code {@link SdkErrorCode.NOT_FOUND} if the credential does not exist.
+     */
+    async getCredential(credentialId) {
+        const { data } = await this.client.GET("/management/credentials/{credentialId}", {
+            params: { path: { credentialId } }
+        });
+        return requireObjectResponse(data, "CredentialsDto", isCredentialRecord);
+    }
+    /**
+     * Delete a verifiable credential from the wallet.
+     * @param credentialId - The credential identifier.
+     * @returns The deletion response.
+     * @throws Throws an {@link SdkError} with code {@link SdkErrorCode.NOT_FOUND} if the credential does not exist.
+     */
+    async deleteCredential(credentialId) {
+        const { data } = await this.client.DELETE("/management/credentials/{credentialId}", {
+            params: { path: { credentialId } }
+        });
+        return data;
+    }
+    /**
+     * Revoke a verifiable credential, making it invalid for future verification.
+     * @param credentialId - The credential identifier.
+     * @returns The revocation response.
+     */
+    async revokeCredential(credentialId) {
+        const { data } = await this.client.POST("/management/credentials/{credentialId}/revoke", {
+            params: { path: { credentialId } }
+        });
+        return data;
+    }
+    /**
+     * Get the credential configuration, including trust anchors and issuer settings.
+     * @returns The credential configuration object.
+     */
+    async getCredentialConfig() {
+        const { data } = await this.client.GET("/management/credentials/config");
+        return requireObject(data, "CredentialConfigDto");
+    }
+    /**
+     * List all dataspace-scoped verifiable credentials.
+     *
+     * Dataspace credentials are a subset of credentials specifically used
+     * for dataspace membership and trust establishment.
+     * @returns An array of dataspace credential objects.
+     */
+    async listDataspaceCredentials() {
+        const { data } = await this.client.GET("/management/credentials/dataspace");
+        return requireArrayResponse(data ?? [], "CredentialsDto[]", isCredentialRecord);
+    }
+    // ── DID Management ─────────────────────────────────────────────────────
+    /**
+     * Get the DID document of this wallet's identity.
+     * @returns A validated {@link DIDDocumentDto}.
+     */
+    async getDidDocument() {
+        const { data } = await this.client.GET("/management/did");
+        return requireObjectResponse(data, "DIDDocumentDto", (value) => hasString(value, "id"));
+    }
+    /**
+     * Get all DID services registered in the DID document.
+     * @returns An array of validated {@link ServiceDto} instances.
+     */
+    async getDidServices() {
+        const { data } = await this.client.GET("/management/did/services");
+        return requireArrayResponse(data ?? [], "ServiceDto[]", isServiceDto);
+    }
+    /**
+     * Register a new DID service in this wallet's DID document.
+     *
+     * Applications use this to advertise their own endpoints (an orchestration
+     * inbox, a connector address) so that peers can discover them by resolving
+     * the DID document instead of being configured with a static URL.
+     * @param service - Service identifier, type and endpoint.
+     * @returns A validated {@link ServiceDto} describing the registered service.
+     * @throws Throws an {@link SdkError} with code {@link SdkErrorCode.CONFLICT} if a service with the same id already exists.
+     */
+    async addDidService(service) {
+        const { data } = await this.client.POST("/management/did/services", {
+            body: service
+        });
+        return requireObjectResponse(data, "ServiceDto", isServiceDto);
+    }
+    /**
+     * Update an already registered DID service.
+     * @param id - Identifier of the service to update.
+     * @param service - The new service definition.
+     * @returns A validated {@link ServiceDto} describing the updated service.
+     * @throws Throws an {@link SdkError} with code {@link SdkErrorCode.NOT_FOUND} if the service does not exist.
+     */
+    async updateDidService(id, service) {
+        const { data } = await this.client.PUT("/management/did/services/{id}", {
+            params: { path: { id } },
+            body: service
+        });
+        return requireObjectResponse(data, "ServiceDto", isServiceDto);
+    }
+    /**
+     * Remove a DID service from this wallet's DID document.
+     * @param id - Identifier of the service to remove.
+     * @throws Throws an {@link SdkError} with code {@link SdkErrorCode.NOT_FOUND} if the service does not exist.
+     */
+    async removeDidService(id) {
+        await this.client.DELETE("/management/did/services/{id}", {
+            params: { path: { id } }
+        });
+    }
+    // ── Key Management ─────────────────────────────────────────────────────
+    /**
+     * List all cryptographic keys managed by the wallet.
+     * @returns An array of validated {@link KeyInfo} instances.
+     */
+    async listKeys() {
+        const { data } = await this.client.GET("/management/keys");
+        return requireArrayResponse(data ?? [], "KeyInfo[]", isKeyInfo);
+    }
+    /**
+     * Generate a new wallet key from the provided configuration.
+     * @param keyConfig - Wallet key configuration.
+     * @returns A validated {@link KeyInfo}.
+     */
+    async addKey(keyConfig) {
+        const { data } = await this.client.POST("/management/keys", {
+            body: keyConfig
+        });
+        return requireObjectResponse(data, "KeyInfo", isKeyInfo);
+    }
+    /**
+     * Get a specific key by its ID.
+     * @param keyId - The key identifier.
+     * @returns A validated {@link KeyInfo}.
+     * @throws Throws an {@link SdkError} with code {@link SdkErrorCode.NOT_FOUND} if the key does not exist.
+     */
+    async getKey(keyId) {
+        const { data } = await this.client.GET("/management/keys/{keyId}", {
+            params: { path: { keyId } }
+        });
+        return requireObjectResponse(data, "KeyInfo", isKeyInfo);
+    }
+    /**
+     * Delete a cryptographic key from the wallet.
+     * @param keyId - The key identifier.
+     * @returns The deletion response.
+     * @throws Throws an {@link SdkError} with code {@link SdkErrorCode.NOT_FOUND} if the key does not exist.
+     */
+    async deleteKey(keyId) {
+        const { data } = await this.client.DELETE("/management/keys/{keyId}", {
+            params: { path: { keyId } }
+        });
+        return data;
+    }
+    /**
+     * Set a key as the default signing key for this wallet.
+     * @param keyId - The key identifier to make default.
+     * @returns The update response.
+     */
+    async setDefaultKey(keyId) {
+        const { data } = await this.client.PUT("/management/keys/{keyId}/default", {
+            params: { path: { keyId } }
+        });
+        return data;
+    }
+    // ── Issuance ───────────────────────────────────────────────────────────
+    /**
+     * Create a new credential offer for issuance to another party.
+     * @param request - The credential offer details.
+     * @returns A validated {@link CredentialOffer}.
+     */
+    async createOffer(request) {
+        const { data } = await this.client.POST("/management/issuance/offers", {
+            body: request
+        });
+        return requireObjectResponse(data, "CredentialOffer", (value) => hasString(value, "credential_issuer") &&
+            hasArray(value, "credential_configuration_ids"));
+    }
+    /**
+     * Request a credential offer via the Decentralized Claims Protocol (DCP).
+     *
+     * This initiates the issuance flow by sending a credential request to
+     * a remote issuer using the DCP standard.
+     * @param request - The DCP credential request initiation details.
+     */
+    async requestOfferViaDcp(request) {
+        await this.client.POST("/management/issuance/request/dcp", {
+            body: request
+        });
+    }
+    /**
+     * Get the status and details of a credential offer.
+     * @param id - The credential offer identifier.
+     * @returns A validated {@link CredentialOfferStatus}.
+     * @throws Throws an {@link SdkError} with code {@link SdkErrorCode.NOT_FOUND} if the offer does not exist.
+     */
+    async getOffer(id) {
+        const { data } = await this.client.GET("/management/issuance/offers/{id}", {
+            params: { path: { id } }
+        });
+        return requireObjectResponse(data, "CredentialOfferStatus", (value) => hasString(value, "id") &&
+            hasString(value, "credentialType") &&
+            hasBoolean(value, "revoked"));
+    }
+    /**
+     * Revoke a credential offer, preventing it from being claimed.
+     * @param id - The credential offer identifier.
+     * @returns The revocation response.
+     */
+    async revokeOffer(id) {
+        const { data } = await this.client.PUT("/management/issuance/offers/{id}/revoke", {
+            params: { path: { id } }
+        });
+        return data;
+    }
+}
+/**
+ * Check the required shape of a DID service entry.
+ * @param value - Candidate response object.
+ * @returns Whether the candidate has the required fields.
+ */
+function isServiceDto(value) {
+    return hasString(value, "id") && hasString(value, "type");
+}
+/**
+ * Check the required shape of a wallet scope.
+ * @param value - Candidate response object.
+ * @returns Whether the candidate has the required fields.
+ */
+function isScope(value) {
+    return (hasString(value, "id") &&
+        hasString(value, "alias") &&
+        hasString(value, "discriminator") &&
+        hasString(value, "description") &&
+        isObject(value.presentationDefinition));
+}
+/**
+ * Check the required shape of a wallet key.
+ * @param value - Candidate response object.
+ * @returns Whether the candidate has the required fields.
+ */
+function isKeyInfo(value) {
+    return (hasString(value, "id") &&
+        ["EdDSA", "ES384", "X509"].includes(String(value.type)) &&
+        hasBoolean(value, "default") &&
+        isObject(value.publicKey));
+}
+/**
+ * Check the required shape of a wallet credential record.
+ * @param value - Candidate response object.
+ * @returns Whether the candidate contains a credential identifier.
+ */
+function isCredentialRecord(value) {
+    return hasString(value, "id");
+}
+//# sourceMappingURL=wallet.sdk.js.map