@verana-labs/credo-ts-didcomm-vt-flow 2.0.0-dev.70 → 2.0.0-dev.72

package/build/handlers/OnboardingRequestHandler.js

@@ -1,6 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.OnboardingRequestHandler = void 0;
+const didcomm_1 = require("@credo-ts/didcomm");
+const errors_1 = require("../errors");
 const messages_1 = require("../messages");
 /** Validator-side inbound handler for `onboarding-request`; delegates to `VtFlowService.processReceiveOnboardingRequest`. */
 class OnboardingRequestHandler {
@@ -9,8 +11,15 @@ class OnboardingRequestHandler {
         this.supportedMessages = [messages_1.OnboardingRequestMessage];
     }
     async handle(messageContext) {
-        await this.vtFlowService.processReceiveOnboardingRequest(messageContext);
-        return undefined;
+        try {
+            await this.vtFlowService.processReceiveOnboardingRequest(messageContext);
+            return undefined;
+        }
+        catch (error) {
+            if (!(error instanceof errors_1.VtFlowError))
+                throw error;
+            return new didcomm_1.DidCommOutboundMessageContext((0, errors_1.buildVtFlowProblemReport)({ code: error.code, threadId: messageContext.message.threadId }), { agentContext: messageContext.agentContext, connection: messageContext.assertReadyConnection() });
+        }
     }
 }
 exports.OnboardingRequestHandler = OnboardingRequestHandler;

package/build/handlers/OnboardingRequestHandler.js.map

@@ -1 +1 @@
-{"version":3,"file":"OnboardingRequestHandler.js","sourceRoot":"","sources":["../../src/handlers/OnboardingRequestHandler.ts"],"names":[],"mappings":";;;AAGA,0CAAsD;AAEtD,6HAA6H;AAC7H,MAAa,wBAAwB;IAGnC,YAAoC,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;QAFzD,sBAAiB,GAAG,CAAC,mCAAwB,CAAC,CAAA;IAEc,CAAC;IAE7D,KAAK,CAAC,MAAM,CAAC,cAA6E;QAC/F,MAAM,IAAI,CAAC,aAAa,CAAC,+BAA+B,CAAC,cAAc,CAAC,CAAA;QACxE,OAAO,SAAS,CAAA;IAClB,CAAC;CACF;AATD,4DASC"}
+{"version":3,"file":"OnboardingRequestHandler.js","sourceRoot":"","sources":["../../src/handlers/OnboardingRequestHandler.ts"],"names":[],"mappings":";;;AAGA,+CAAiE;AAEjE,sCAAiE;AACjE,0CAAsD;AAEtD,6HAA6H;AAC7H,MAAa,wBAAwB;IAGnC,YAAoC,aAA4B;QAA5B,kBAAa,GAAb,aAAa,CAAe;QAFzD,sBAAiB,GAAG,CAAC,mCAAwB,CAAC,CAAA;IAEc,CAAC;IAE7D,KAAK,CAAC,MAAM,CAAC,cAA6E;QAC/F,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,CAAC,+BAA+B,CAAC,cAAc,CAAC,CAAA;YACxE,OAAO,SAAS,CAAA;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,oBAAW,CAAC;gBAAE,MAAM,KAAK,CAAA;YAChD,OAAO,IAAI,uCAA6B,CACtC,IAAA,iCAAwB,EAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,cAAc,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,EACzF,EAAE,YAAY,EAAE,cAAc,CAAC,YAAY,EAAE,UAAU,EAAE,cAAc,CAAC,qBAAqB,EAAE,EAAE,CAClG,CAAA;QACH,CAAC;IACH,CAAC;CACF;AAjBD,4DAiBC"}

package/build/index.d.ts

@@ -1,4 +1,4 @@
-export { VtFlowEventTypes, VtFlowMessageType, VtFlowPendingAction, VtFlowRole, VtFlowState, VtFlowSubmission, VtFlowTerminalStates, VtFlowTxReason, VtFlowTxStatus, VtFlowValidatedFromStates, VtFlowVariant, isVtFlowTerminalState, } from './types';
+export { VtFlowEventTypes, VtFlowMessageType, VtFlowPendingAction, VtFlowRole, VtFlowState, VtFlowSubmission, VtFlowTerminalStates, VtFlowTxReason, VtFlowTxStatus, VtFlowValidatedFromStates, VtFlowVariant, isVtFlowRenewable, isVtFlowTerminalState, } from './types';
 export type { NotifyCredentialStateChangeOptions, VtFlowIssuance, VtFlowMessage, VtFlowOobLink, VtFlowTx, VtFlowValidation, OfferCredentialForSessionOptions, ProblemReportDispatchOptions, ResendOnboardingRequestOptions, SendIssuanceRequestOptions, SendOnboardingRequestOptions, SendOobLinkOptions, VtFlowStateChangedEvent, } from './types';
 export { VT_FLOW_PROTOCOL_URI, VT_FLOW_ONBOARDING_REQUEST_TYPE, VT_FLOW_ISSUANCE_REQUEST_TYPE, VT_FLOW_OOB_LINK_TYPE, VT_FLOW_VALIDATING_TYPE, VT_FLOW_CREDENTIAL_STATE_CHANGE_TYPE, OnboardingRequestMessage, IssuanceRequestMessage, OobLinkMessage, ValidatingMessage, CredentialStateChangeMessage, VtCredentialState, } from './messages';
 export type { OnboardingRequestMessageOptions, IssuanceRequestMessageOptions, OobLinkMessageOptions, ValidatingMessageOptions, CredentialStateChangeMessageOptions, } from './messages';
@@ -11,6 +11,6 @@ export type { CreateIssuanceRequestParams, CreateOnboardingRequestParams } from
 export { peerAnchorDid } from './utils';
 export { CredentialStateChangeHandler, IssuanceRequestHandler, OnboardingRequestHandler, OobLinkHandler, ValidatingHandler, } from './handlers';
 export { DEFAULT_DATA_INTEGRITY_CRYPTOSUITE, VtFlowModuleConfig } from './VtFlowModuleConfig';
-export type { VtFlowAssertVerifiableServiceContext, VtFlowAssertVerifiableServiceHook, VtFlowBuildCredentialOfferContext, VtFlowBuildCredentialOfferHook, VtFlowCredentialLifecycleContext, VtFlowCredentialOfferPayload, VtFlowModuleConfigOptions, VtFlowOnCompletedHook, VtFlowRequestPurpose, VtFlowEcsIssuanceExemptionContext, VtFlowEcsIssuanceExemptionHook, VtFlowVerifyCredentialHook, } from './VtFlowModuleConfig';
+export type { VtFlowAssertVerifiableServiceContext, VtFlowAssertVerifiableServiceHook, VtFlowBuildCredentialOfferContext, VtFlowBuildCredentialOfferHook, VtFlowCheckParticipantIdContext, VtFlowCheckParticipantIdHook, VtFlowCredentialLifecycleContext, VtFlowCredentialOfferPayload, VtFlowModuleConfigOptions, VtFlowOnCompletedHook, VtFlowRequestPurpose, VtFlowEcsIssuanceExemptionContext, VtFlowEcsIssuanceExemptionHook, VtFlowVerifyCredentialHook, } from './VtFlowModuleConfig';
 export { VtFlowModule } from './VtFlowModule';
 export { VtFlowApi } from './VtFlowApi';

package/build/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.VtFlowApi = exports.VtFlowModule = exports.VtFlowModuleConfig = exports.DEFAULT_DATA_INTEGRITY_CRYPTOSUITE = exports.ValidatingHandler = exports.OobLinkHandler = exports.OnboardingRequestHandler = exports.IssuanceRequestHandler = exports.CredentialStateChangeHandler = exports.peerAnchorDid = exports.VtFlowService = exports.VtFlowRepository = exports.VtFlowRecord = exports.isVtFlowErrorCode = exports.buildVtFlowProblemReport = exports.VtFlowErrorCode = exports.VT_FLOW_ERROR_INFO = exports.VtCredentialState = exports.CredentialStateChangeMessage = exports.ValidatingMessage = exports.OobLinkMessage = exports.IssuanceRequestMessage = exports.OnboardingRequestMessage = exports.VT_FLOW_CREDENTIAL_STATE_CHANGE_TYPE = exports.VT_FLOW_VALIDATING_TYPE = exports.VT_FLOW_OOB_LINK_TYPE = exports.VT_FLOW_ISSUANCE_REQUEST_TYPE = exports.VT_FLOW_ONBOARDING_REQUEST_TYPE = exports.VT_FLOW_PROTOCOL_URI = exports.isVtFlowTerminalState = exports.VtFlowVariant = exports.VtFlowValidatedFromStates = exports.VtFlowTxStatus = exports.VtFlowTxReason = exports.VtFlowTerminalStates = exports.VtFlowSubmission = exports.VtFlowState = exports.VtFlowRole = exports.VtFlowPendingAction = exports.VtFlowMessageType = exports.VtFlowEventTypes = void 0;
+exports.VtFlowApi = exports.VtFlowModule = exports.VtFlowModuleConfig = exports.DEFAULT_DATA_INTEGRITY_CRYPTOSUITE = exports.ValidatingHandler = exports.OobLinkHandler = exports.OnboardingRequestHandler = exports.IssuanceRequestHandler = exports.CredentialStateChangeHandler = exports.peerAnchorDid = exports.VtFlowService = exports.VtFlowRepository = exports.VtFlowRecord = exports.isVtFlowErrorCode = exports.buildVtFlowProblemReport = exports.VtFlowErrorCode = exports.VT_FLOW_ERROR_INFO = exports.VtCredentialState = exports.CredentialStateChangeMessage = exports.ValidatingMessage = exports.OobLinkMessage = exports.IssuanceRequestMessage = exports.OnboardingRequestMessage = exports.VT_FLOW_CREDENTIAL_STATE_CHANGE_TYPE = exports.VT_FLOW_VALIDATING_TYPE = exports.VT_FLOW_OOB_LINK_TYPE = exports.VT_FLOW_ISSUANCE_REQUEST_TYPE = exports.VT_FLOW_ONBOARDING_REQUEST_TYPE = exports.VT_FLOW_PROTOCOL_URI = exports.isVtFlowTerminalState = exports.isVtFlowRenewable = exports.VtFlowVariant = exports.VtFlowValidatedFromStates = exports.VtFlowTxStatus = exports.VtFlowTxReason = exports.VtFlowTerminalStates = exports.VtFlowSubmission = exports.VtFlowState = exports.VtFlowRole = exports.VtFlowPendingAction = exports.VtFlowMessageType = exports.VtFlowEventTypes = void 0;
 // Types: enums, events, API option interfaces
 var types_1 = require("./types");
 Object.defineProperty(exports, "VtFlowEventTypes", { enumerable: true, get: function () { return types_1.VtFlowEventTypes; } });
@@ -14,6 +14,7 @@ Object.defineProperty(exports, "VtFlowTxReason", { enumerable: true, get: functi
 Object.defineProperty(exports, "VtFlowTxStatus", { enumerable: true, get: function () { return types_1.VtFlowTxStatus; } });
 Object.defineProperty(exports, "VtFlowValidatedFromStates", { enumerable: true, get: function () { return types_1.VtFlowValidatedFromStates; } });
 Object.defineProperty(exports, "VtFlowVariant", { enumerable: true, get: function () { return types_1.VtFlowVariant; } });
+Object.defineProperty(exports, "isVtFlowRenewable", { enumerable: true, get: function () { return types_1.isVtFlowRenewable; } });
 Object.defineProperty(exports, "isVtFlowTerminalState", { enumerable: true, get: function () { return types_1.isVtFlowTerminalState; } });
 // Wire messages
 var messages_1 = require("./messages");

package/build/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,8CAA8C;AAC9C,iCAagB;AAZd,yGAAA,gBAAgB,OAAA;AAChB,0GAAA,iBAAiB,OAAA;AACjB,4GAAA,mBAAmB,OAAA;AACnB,mGAAA,UAAU,OAAA;AACV,oGAAA,WAAW,OAAA;AACX,yGAAA,gBAAgB,OAAA;AAChB,6GAAA,oBAAoB,OAAA;AACpB,uGAAA,cAAc,OAAA;AACd,uGAAA,cAAc,OAAA;AACd,kHAAA,yBAAyB,OAAA;AACzB,sGAAA,aAAa,OAAA;AACb,8GAAA,qBAAqB,OAAA;AAkBvB,gBAAgB;AAChB,uCAamB;AAZjB,gHAAA,oBAAoB,OAAA;AACpB,2HAAA,+BAA+B,OAAA;AAC/B,yHAAA,6BAA6B,OAAA;AAC7B,iHAAA,qBAAqB,OAAA;AACrB,mHAAA,uBAAuB,OAAA;AACvB,gIAAA,oCAAoC,OAAA;AACpC,oHAAA,wBAAwB,OAAA;AACxB,kHAAA,sBAAsB,OAAA;AACtB,0GAAA,cAAc,OAAA;AACd,6GAAA,iBAAiB,OAAA;AACjB,wHAAA,4BAA4B,OAAA;AAC5B,6GAAA,iBAAiB,OAAA;AAUnB,SAAS;AACT,mCAA2G;AAAlG,4GAAA,kBAAkB,OAAA;AAAE,yGAAA,eAAe,OAAA;AAAE,kHAAA,wBAAwB,OAAA;AAAE,2GAAA,iBAAiB,OAAA;AAGzF,sBAAsB;AACtB,2CAA6D;AAApD,0GAAA,YAAY,OAAA;AAAE,8GAAA,gBAAgB,OAAA;AAGvC,UAAU;AACV,uCAA0C;AAAjC,yGAAA,aAAa,OAAA;AAGtB,QAAQ;AACR,iCAAuC;AAA9B,sGAAA,aAAa,OAAA;AAEtB,WAAW;AACX,uCAMmB;AALjB,wHAAA,4BAA4B,OAAA;AAC5B,kHAAA,sBAAsB,OAAA;AACtB,oHAAA,wBAAwB,OAAA;AACxB,0GAAA,cAAc,OAAA;AACd,6GAAA,iBAAiB,OAAA;AAGnB,iBAAiB;AACjB,2DAA6F;AAApF,wIAAA,kCAAkC,OAAA;AAAE,wHAAA,kBAAkB,OAAA;AAgB/D,+CAA6C;AAApC,4GAAA,YAAY,OAAA;AACrB,yCAAuC;AAA9B,sGAAA,SAAS,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,8CAA8C;AAC9C,iCAcgB;AAbd,yGAAA,gBAAgB,OAAA;AAChB,0GAAA,iBAAiB,OAAA;AACjB,4GAAA,mBAAmB,OAAA;AACnB,mGAAA,UAAU,OAAA;AACV,oGAAA,WAAW,OAAA;AACX,yGAAA,gBAAgB,OAAA;AAChB,6GAAA,oBAAoB,OAAA;AACpB,uGAAA,cAAc,OAAA;AACd,uGAAA,cAAc,OAAA;AACd,kHAAA,yBAAyB,OAAA;AACzB,sGAAA,aAAa,OAAA;AACb,0GAAA,iBAAiB,OAAA;AACjB,8GAAA,qBAAqB,OAAA;AAkBvB,gBAAgB;AAChB,uCAamB;AAZjB,gHAAA,oBAAoB,OAAA;AACpB,2HAAA,+BAA+B,OAAA;AAC/B,yHAAA,6BAA6B,OAAA;AAC7B,iHAAA,qBAAqB,OAAA;AACrB,mHAAA,uBAAuB,OAAA;AACvB,gIAAA,oCAAoC,OAAA;AACpC,oHAAA,wBAAwB,OAAA;AACxB,kHAAA,sBAAsB,OAAA;AACtB,0GAAA,cAAc,OAAA;AACd,6GAAA,iBAAiB,OAAA;AACjB,wHAAA,4BAA4B,OAAA;AAC5B,6GAAA,iBAAiB,OAAA;AAUnB,SAAS;AACT,mCAA2G;AAAlG,4GAAA,kBAAkB,OAAA;AAAE,yGAAA,eAAe,OAAA;AAAE,kHAAA,wBAAwB,OAAA;AAAE,2GAAA,iBAAiB,OAAA;AAGzF,sBAAsB;AACtB,2CAA6D;AAApD,0GAAA,YAAY,OAAA;AAAE,8GAAA,gBAAgB,OAAA;AAGvC,UAAU;AACV,uCAA0C;AAAjC,yGAAA,aAAa,OAAA;AAGtB,QAAQ;AACR,iCAAuC;AAA9B,sGAAA,aAAa,OAAA;AAEtB,WAAW;AACX,uCAMmB;AALjB,wHAAA,4BAA4B,OAAA;AAC5B,kHAAA,sBAAsB,OAAA;AACtB,oHAAA,wBAAwB,OAAA;AACxB,0GAAA,cAAc,OAAA;AACd,6GAAA,iBAAiB,OAAA;AAGnB,iBAAiB;AACjB,2DAA6F;AAApF,wIAAA,kCAAkC,OAAA;AAAE,wHAAA,kBAAkB,OAAA;AAkB/D,+CAA6C;AAApC,4GAAA,YAAY,OAAA;AACrB,yCAAuC;AAA9B,sGAAA,SAAS,OAAA"}

package/build/repository/VtFlowRecord.d.ts

@@ -43,6 +43,7 @@ export interface VtFlowStorageProps {
     validation?: VtFlowValidation;
     issuance?: VtFlowIssuance;
     proofsAttach?: DidCommAttachment[];
+    credentialId?: string;
     credentialDigest?: string;
     errorMessage?: string;
     tags?: CustomVtFlowTags;
@@ -74,8 +75,11 @@ export declare class VtFlowRecord extends BaseRecord<DefaultVtFlowTags, CustomVt
     validation?: VtFlowValidation;
     issuance?: VtFlowIssuance;
     proofsAttach?: DidCommAttachment[];
+    credentialId?: string;
     credentialDigest?: string;
     errorMessage?: string;
+    /** Outlives TERMINATED_BY_VALIDATOR when a validation in flight lands, until the applicant re-attaches ([VSA-ADM-VT-FL-REJECT-2]) */
+    connectionTerminated?: boolean;
     constructor(props: VtFlowStorageProps);
     getTags(): DefaultVtFlowTags & CustomVtFlowTags;
     assertRole(expectedRole: VtFlowRole): void;

package/build/repository/VtFlowRecord.js

@@ -34,6 +34,7 @@ class VtFlowRecord extends core_1.BaseRecord {
             this.validation = props.validation;
             this.issuance = props.issuance;
             this.proofsAttach = props.proofsAttach;
+            this.credentialId = props.credentialId;
             this.credentialDigest = props.credentialDigest;
             this.errorMessage = props.errorMessage;
         }

package/build/repository/VtFlowRecord.js.map

@@ -1 +1 @@
-{"version":3,"file":"VtFlowRecord.js","sourceRoot":"","sources":["../../src/repository/VtFlowRecord.ts"],"names":[],"mappings":";;;AAGA,yCAA8D;AAoE9D,uGAAuG;AACvG,MAAa,YAAa,SAAQ,iBAA+C;IAoC/E,YAAmB,KAAyB;;QAC1C,KAAK,EAAE,CAAA;QAnCO,SAAI,GAAG,YAAY,CAAC,IAAI,CAAA;QAqCtC,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,EAAE,GAAG,MAAA,KAAK,CAAC,EAAE,mCAAI,YAAK,CAAC,IAAI,EAAE,CAAA;YAClC,IAAI,CAAC,SAAS,GAAG,MAAA,KAAK,CAAC,SAAS,mCAAI,IAAI,IAAI,EAAE,CAAA;YAC9C,IAAI,CAAC,KAAK,GAAG,MAAA,KAAK,CAAC,IAAI,mCAAI,EAAE,CAAA;YAE7B,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;YAC9B,IAAI,CAAC,oBAAoB,GAAG,KAAK,CAAC,oBAAoB,CAAA;YACtD,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAA;YACtC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;YACtB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;YACxB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAA;YAE5B,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,CAAA;YAClD,IAAI,CAAC,wBAAwB,GAAG,KAAK,CAAC,wBAAwB,CAAA;YAC9D,IAAI,CAAC,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,CAAA;YAEpD,IAAI,CAAC,sBAAsB,GAAG,KAAK,CAAC,sBAAsB,CAAA;YAC1D,IAAI,CAAC,wBAAwB,GAAG,KAAK,CAAC,wBAAwB,CAAA;YAC9D,IAAI,CAAC,sBAAsB,GAAG,KAAK,CAAC,sBAAsB,CAAA;YAC1D,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;YAC9B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;YAE1B,IAAI,CAAC,0BAA0B,GAAG,KAAK,CAAC,0BAA0B,CAAA;YAClE,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC,eAAe,CAAA;YAC5C,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAA;YAEtC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAA;YAC5B,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;YAC9B,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAA;YAClC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;YAC9B,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAA;YACtC,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,CAAA;YAC9C,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAA;QACxC,CAAC;IACH,CAAC;IAEM,OAAO;QACZ,uCACK,IAAI,CAAC,KAAK,KACb,QAAQ,EAAE,IAAI,CAAC,QAAQ,EACvB,oBAAoB,EAAE,IAAI,CAAC,oBAAoB,EAC/C,YAAY,EAAE,IAAI,CAAC,YAAY,EAC/B,IAAI,EAAE,IAAI,CAAC,IAAI,EACf,SAAS,EAAE,IAAI,CAAC,KAAK,EACrB,WAAW,EAAE,IAAI,CAAC,OAAO,EACzB,sBAAsB,EAAE,IAAI,CAAC,sBAAsB,EACnD,sBAAsB,EAAE,IAAI,CAAC,sBAAsB,EACnD,QAAQ,EAAE,IAAI,CAAC,QAAQ,EACvB,0BAA0B,EAAE,IAAI,CAAC,0BAA0B,EAC3D,eAAe,EAAE,IAAI,CAAC,eAAe,IACtC;IACH,CAAC;IAEM,UAAU,CAAC,YAAwB;QACxC,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC/B,MAAM,IAAI,iBAAU,CAAC,6BAA6B,IAAI,CAAC,IAAI,gBAAgB,YAAY,IAAI,CAAC,CAAA;QAC9F,CAAC;IACH,CAAC;IAEM,WAAW,CAAC,cAA2C;QAC5D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAA;QAEjF,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,iBAAU,CAAC,8BAA8B,IAAI,CAAC,KAAK,oBAAoB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACzG,CAAC;IACH,CAAC;IAEM,aAAa,CAAC,eAA8B;QACjD,IAAI,IAAI,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;YACrC,MAAM,IAAI,iBAAU,CAAC,6BAA6B,IAAI,CAAC,OAAO,gBAAgB,eAAe,IAAI,CAAC,CAAA;QACpG,CAAC;IACH,CAAC;;AA9GH,oCA+GC;AA9GwB,iBAAI,GAAG,cAAc,AAAjB,CAAiB"}
+{"version":3,"file":"VtFlowRecord.js","sourceRoot":"","sources":["../../src/repository/VtFlowRecord.ts"],"names":[],"mappings":";;;AAGA,yCAA8D;AAqE9D,uGAAuG;AACvG,MAAa,YAAa,SAAQ,iBAA+C;IAuC/E,YAAmB,KAAyB;;QAC1C,KAAK,EAAE,CAAA;QAtCO,SAAI,GAAG,YAAY,CAAC,IAAI,CAAA;QAwCtC,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,EAAE,GAAG,MAAA,KAAK,CAAC,EAAE,mCAAI,YAAK,CAAC,IAAI,EAAE,CAAA;YAClC,IAAI,CAAC,SAAS,GAAG,MAAA,KAAK,CAAC,SAAS,mCAAI,IAAI,IAAI,EAAE,CAAA;YAC9C,IAAI,CAAC,KAAK,GAAG,MAAA,KAAK,CAAC,IAAI,mCAAI,EAAE,CAAA;YAE7B,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;YAC9B,IAAI,CAAC,oBAAoB,GAAG,KAAK,CAAC,oBAAoB,CAAA;YACtD,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAA;YACtC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAA;YACtB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;YACxB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAA;YAE5B,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,CAAA;YAClD,IAAI,CAAC,wBAAwB,GAAG,KAAK,CAAC,wBAAwB,CAAA;YAC9D,IAAI,CAAC,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,CAAA;YAEpD,IAAI,CAAC,sBAAsB,GAAG,KAAK,CAAC,sBAAsB,CAAA;YAC1D,IAAI,CAAC,wBAAwB,GAAG,KAAK,CAAC,wBAAwB,CAAA;YAC9D,IAAI,CAAC,sBAAsB,GAAG,KAAK,CAAC,sBAAsB,CAAA;YAC1D,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;YAC9B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;YAE1B,IAAI,CAAC,0BAA0B,GAAG,KAAK,CAAC,0BAA0B,CAAA;YAClE,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC,eAAe,CAAA;YAC5C,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAA;YAEtC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAA;YAC5B,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;YAC9B,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAA;YAClC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;YAC9B,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAA;YACtC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAA;YACtC,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,CAAA;YAC9C,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAA;QACxC,CAAC;IACH,CAAC;IAEM,OAAO;QACZ,uCACK,IAAI,CAAC,KAAK,KACb,QAAQ,EAAE,IAAI,CAAC,QAAQ,EACvB,oBAAoB,EAAE,IAAI,CAAC,oBAAoB,EAC/C,YAAY,EAAE,IAAI,CAAC,YAAY,EAC/B,IAAI,EAAE,IAAI,CAAC,IAAI,EACf,SAAS,EAAE,IAAI,CAAC,KAAK,EACrB,WAAW,EAAE,IAAI,CAAC,OAAO,EACzB,sBAAsB,EAAE,IAAI,CAAC,sBAAsB,EACnD,sBAAsB,EAAE,IAAI,CAAC,sBAAsB,EACnD,QAAQ,EAAE,IAAI,CAAC,QAAQ,EACvB,0BAA0B,EAAE,IAAI,CAAC,0BAA0B,EAC3D,eAAe,EAAE,IAAI,CAAC,eAAe,IACtC;IACH,CAAC;IAEM,UAAU,CAAC,YAAwB;QACxC,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC/B,MAAM,IAAI,iBAAU,CAAC,6BAA6B,IAAI,CAAC,IAAI,gBAAgB,YAAY,IAAI,CAAC,CAAA;QAC9F,CAAC;IACH,CAAC;IAEM,WAAW,CAAC,cAA2C;QAC5D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAA;QAEjF,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,iBAAU,CAAC,8BAA8B,IAAI,CAAC,KAAK,oBAAoB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACzG,CAAC;IACH,CAAC;IAEM,aAAa,CAAC,eAA8B;QACjD,IAAI,IAAI,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;YACrC,MAAM,IAAI,iBAAU,CAAC,6BAA6B,IAAI,CAAC,OAAO,gBAAgB,eAAe,IAAI,CAAC,CAAA;QACpG,CAAC;IACH,CAAC;;AAlHH,oCAmHC;AAlHwB,iBAAI,GAAG,cAAc,AAAjB,CAAiB"}

package/build/services/VtFlowService.d.ts

@@ -5,7 +5,7 @@ import { VtFlowModuleConfig, type VtFlowRequestPurpose } from '../VtFlowModuleCo
 import { type BuildVtFlowProblemReportOptions, VtFlowErrorCode, buildVtFlowProblemReport } from '../errors';
 import { CredentialStateChangeMessage, type CredentialStateChangeMessageOptions, IssuanceRequestMessage, OnboardingRequestMessage, OobLinkMessage, type OobLinkMessageOptions, VtFlowProblemReportMessage, ValidatingMessage, type ValidatingMessageOptions } from '../messages';
 import { VtFlowRecord, VtFlowRepository } from '../repository';
-import { type VtFlowMessage, type VtFlowValidation, VtFlowState } from '../types';
+import { type VtFlowIssuance, type VtFlowMessage, type VtFlowValidation, VtFlowState } from '../types';
 export interface CreateOnboardingRequestParams {
     connectionId: string;
     participantSessionId: string;
@@ -71,17 +71,17 @@ export declare class VtFlowService {
     processReceiveValidating(messageContext: DidCommInboundMessageContext<ValidatingMessage>): Promise<VtFlowRecord>;
     /** Applicant-side inbound `credential-state-change`; v1.0 handles `REVOKED` only. */
     processReceiveCredentialStateChange(messageContext: DidCommInboundMessageContext<CredentialStateChangeMessage>): Promise<VtFlowRecord | null>;
-    /** `AWAITING_OR => VALIDATING`; caller is expected to have verified participant/agent/wallet IDs on-chain. */
+    /** `AWAITING_OR => VALIDATING` once the `checkParticipantId` hook accepts the `participant_id`, with no transition and no message once it reports the request settled by a `VALIDATED` entry; caller is expected to have verified agent/wallet IDs on-chain. */
     acceptOnboardingRequest(agentContext: AgentContext, recordId: string): Promise<{
         record: VtFlowRecord;
-        message: ValidatingMessage;
+        message?: ValidatingMessage;
     }>;
     /** DirectIssuance: `AWAITING_IR => VALIDATING`; transient before `CRED_OFFERED`. */
     acceptIssuanceRequest(agentContext: AgentContext, recordId: string): Promise<{
         record: VtFlowRecord;
         message: ValidatingMessage;
     }>;
-    /** Reject with a problem-report; transitions to `TERMINATED_BY_{role}` and marks the connection as `TERMINATED`. */
+    /** Reject with a problem-report; a fatal code moves the sender to the Error Codes state, a retryable one returns a validator to `AWAITING_OR` or `AWAITING_IR`. */
     rejectRequest(agentContext: AgentContext, recordId: string, params: RejectRequestParams): Promise<{
         record: VtFlowRecord;
         problemReport: ReturnType<typeof buildVtFlowProblemReport>;
@@ -117,6 +117,10 @@ export declare class VtFlowService {
     }>;
     /** Record the validation decision or its transaction outcome, moving the flow when `state` is given. */
     recordValidation(agentContext: AgentContext, recordId: string, validation: VtFlowValidation, state?: VtFlowState): Promise<VtFlowRecord>;
+    /** Record the outcome of the `CreateOrUpdateParticipantSession` transaction that anchors the issued credential. */
+    recordIssuance(agentContext: AgentContext, recordId: string, issuance: VtFlowIssuance): Promise<VtFlowRecord>;
+    /** `VALIDATED` => `VALIDATED_PENDING_CLAIMS`, when the claims fail the schema at offer time ([VSA-VTI-FLOW-OP-ISSUE-4]). */
+    markPendingClaims(agentContext: AgentContext, recordId: string): Promise<VtFlowRecord>;
     /** Validator-side states preceding `VALIDATED` => `VALIDATED`; call after `SetParticipantOPtoValidated` lands on-chain. */
     markValidated(agentContext: AgentContext, recordId: string): Promise<VtFlowRecord>;
     /**
@@ -130,7 +134,7 @@ export declare class VtFlowService {
     /** Validator states that an `offer-credential` moves to `CRED_OFFERED`; from `COMPLETED` it starts a new subprotocol run. */
     assertCanOfferCredential(record: VtFlowRecord): void;
     /** Link a Credo exchange record to the session and transition to `CRED_OFFERED`. */
-    attachCredentialExchangeRecord(agentContext: AgentContext, recordId: string, credentialExchangeRecord: DidCommCredentialExchangeRecord, credentialDigest?: string, issuerParticipantId?: number): Promise<VtFlowRecord>;
+    attachCredentialExchangeRecord(agentContext: AgentContext, recordId: string, credentialExchangeRecord: DidCommCredentialExchangeRecord, credentialDigest?: string, issuerParticipantId?: number, credentialId?: string): Promise<VtFlowRecord>;
     setEcsSchemaKey(agentContext: AgentContext, recordId: string, ecsSchemaKey: string): Promise<VtFlowRecord>;
     setCredentialDigest(agentContext: AgentContext, recordId: string, credentialDigest: string): Promise<VtFlowRecord>;
     /** Validator-side `credential-state-change`; `COMPLETED => CRED_REVOKED`, re-notify allowed from `CRED_REVOKED`. */
@@ -162,7 +166,10 @@ export declare class VtFlowService {
     /** Persist record changes without state-transition semantics (no event emitted). */
     updateRecord(agentContext: AgentContext, record: VtFlowRecord): Promise<void>;
     /** participant_session_ids are public on-chain, so only the original peer may re-attach a flow with one. */
+    private isSamePeer;
     private assertSamePeer;
+    /** VS-CONN-VS failure is fatal, so it ends the flow of the request in ERROR unless that flow has ended or belongs to another peer. */
+    private checkRequestFromVerifiableService;
     private emitStateChanged;
     getModuleConfig(): VtFlowModuleConfig;
     getLogger(): Logger;

package/build/services/VtFlowService.js

@@ -41,7 +41,7 @@ let VtFlowService = class VtFlowService {
         message.setThread({ threadId: message.id });
         const existing = await this.repository.findByParticipantSessionId(agentContext, params.participantSessionId, types_1.VtFlowRole.Applicant);
         if (existing) {
-            if (existing.state !== types_1.VtFlowState.Completed && existing.state !== types_1.VtFlowState.CredRevoked) {
+            if (!(0, types_1.isVtFlowRenewable)(existing)) {
                 throw new core_1.CredoError(`vt-flow: participant_session_id '${params.participantSessionId}' already belongs to a flow in state ${existing.state}; use a new session id`);
             }
             existing.connectionId = params.connectionId;
@@ -137,22 +137,40 @@ let VtFlowService = class VtFlowService {
         }
         record.credentialExchangeRecordId = undefined;
         record.subprotocolThid = undefined;
+        record.issuance = undefined;
     }
     /** Validator-side OnboardingProcess: create or re-attach (by `participant_session_id`) a record in `AWAITING_OR` from an inbound `onboarding-request`. */
     async processReceiveOnboardingRequest(messageContext) {
         const { message, agentContext } = messageContext;
         const connection = messageContext.assertReadyConnection();
-        await this.checkIsVerifiableService(agentContext, connection, { participantId: message.participantId });
         const existing = await this.repository.findByParticipantSessionId(agentContext, message.participantSessionId, types_1.VtFlowRole.Validator);
+        const record = existing !== null && existing !== void 0 ? existing : new repository_1.VtFlowRecord({
+            threadId: message.threadId,
+            participantSessionId: message.participantSessionId,
+            connectionId: connection.id,
+            role: types_1.VtFlowRole.Validator,
+            state: types_1.VtFlowState.AwaitingOr,
+            variant: types_1.VtFlowVariant.OnboardingProcess,
+            agentParticipantId: message.agentParticipantId,
+            walletAgentParticipantId: message.walletAgentParticipantId,
+            applicantParticipantId: message.participantId,
+            claims: message.claims,
+            proofsAttach: message.proofsAttach,
+        });
+        await this.checkRequestFromVerifiableService(agentContext, connection, record, !existing, {
+            participantId: message.participantId,
+        });
         if (existing) {
             if ((0, types_1.isVtFlowTerminalState)(existing.state)) {
-                throw new core_1.CredoError(`vt-flow: participant_session_id '${message.participantSessionId}' collides with a terminated flow`);
+                throw new errors_1.VtFlowError(errors_1.VtFlowErrorCode.InvalidParticipantSessionId, `vt-flow: participant_session_id '${message.participantSessionId}' collides with a terminated flow`);
             }
             if (existing.applicantParticipantId !== message.participantId) {
-                throw new core_1.CredoError(`vt-flow: participant_id '${message.participantId}' does not match the flow of participant_session_id '${message.participantSessionId}'`);
+                throw new errors_1.VtFlowError(errors_1.VtFlowErrorCode.InvalidParticipantSessionId, `vt-flow: participant_id '${message.participantId}' does not match the flow of participant_session_id '${message.participantSessionId}'`);
             }
             await this.assertSamePeer(agentContext, existing, connection);
+            const reconnected = existing.connectionTerminated;
             existing.connectionId = connection.id;
+            existing.connectionTerminated = undefined;
             if (existing.threadId !== message.threadId) {
                 existing.threadId = message.threadId;
                 if (message.claims)
@@ -160,9 +178,11 @@ let VtFlowService = class VtFlowService {
                 if (message.proofsAttach)
                     existing.proofsAttach = message.proofsAttach;
             }
-            if (existing.state === types_1.VtFlowState.Completed || existing.state === types_1.VtFlowState.CredRevoked) {
+            if ((0, types_1.isVtFlowRenewable)(existing)) {
                 // A finished flow re-entered with a new OR is a renewal (VSA-VTI-FLOW-OP-RENEW): re-run it.
                 existing.oobLink = undefined;
+                existing.validation = undefined;
+                existing.issuance = undefined;
                 await this.updateState(agentContext, existing, types_1.VtFlowState.AwaitingOr);
             }
             else if (existing.state === types_1.VtFlowState.CredOffered) {
@@ -171,22 +191,14 @@ let VtFlowService = class VtFlowService {
             }
             else {
                 await this.repository.update(agentContext, existing);
+                // [VSA-VTI-FLOW-OP-OR] checks every request, and [VSA-ADM-VT-FL-REJECT-2] issuance waits for this reconnection
+                if (existing.state === types_1.VtFlowState.AwaitingOr ||
+                    (reconnected && existing.state === types_1.VtFlowState.Validated)) {
+                    this.emitStateChanged(agentContext, existing, existing.state);
+                }
             }
             return existing;
         }
-        const record = new repository_1.VtFlowRecord({
-            threadId: message.threadId,
-            participantSessionId: message.participantSessionId,
-            connectionId: connection.id,
-            role: types_1.VtFlowRole.Validator,
-            state: types_1.VtFlowState.AwaitingOr,
-            variant: types_1.VtFlowVariant.OnboardingProcess,
-            agentParticipantId: message.agentParticipantId,
-            walletAgentParticipantId: message.walletAgentParticipantId,
-            applicantParticipantId: message.participantId,
-            claims: message.claims,
-            proofsAttach: message.proofsAttach,
-        });
         await this.repository.save(agentContext, record);
         this.emitStateChanged(agentContext, record, null);
         return record;
@@ -195,14 +207,28 @@ let VtFlowService = class VtFlowService {
     async processReceiveIssuanceRequest(messageContext) {
         const { message, agentContext } = messageContext;
         const connection = messageContext.assertReadyConnection();
-        await this.checkIsVerifiableService(agentContext, connection, { schemaId: message.schemaId });
         const existing = await this.repository.findByParticipantSessionId(agentContext, message.participantSessionId, types_1.VtFlowRole.Validator);
+        const record = existing !== null && existing !== void 0 ? existing : new repository_1.VtFlowRecord({
+            threadId: message.threadId,
+            participantSessionId: message.participantSessionId,
+            connectionId: connection.id,
+            role: types_1.VtFlowRole.Validator,
+            state: types_1.VtFlowState.AwaitingIr,
+            variant: types_1.VtFlowVariant.DirectIssuance,
+            agentParticipantId: message.agentParticipantId,
+            walletAgentParticipantId: message.walletAgentParticipantId,
+            schemaId: message.schemaId,
+            claims: message.claims,
+        });
+        await this.checkRequestFromVerifiableService(agentContext, connection, record, !existing, {
+            schemaId: message.schemaId,
+        });
         if (existing) {
             if ((0, types_1.isVtFlowTerminalState)(existing.state)) {
-                throw new core_1.CredoError(`vt-flow: participant_session_id '${message.participantSessionId}' collides with a terminated flow`);
+                throw new errors_1.VtFlowError(errors_1.VtFlowErrorCode.InvalidParticipantSessionId, `vt-flow: participant_session_id '${message.participantSessionId}' collides with a terminated flow`);
             }
             if (existing.variant !== types_1.VtFlowVariant.DirectIssuance || existing.schemaId !== message.schemaId) {
-                throw new core_1.CredoError(`vt-flow: schema_id '${message.schemaId}' does not match the flow of participant_session_id '${message.participantSessionId}'`);
+                throw new errors_1.VtFlowError(errors_1.VtFlowErrorCode.InvalidParticipantSessionId, `vt-flow: schema_id '${message.schemaId}' does not match the flow of participant_session_id '${message.participantSessionId}'`);
             }
             await this.assertSamePeer(agentContext, existing, connection);
             existing.connectionId = connection.id;
@@ -216,18 +242,6 @@ let VtFlowService = class VtFlowService {
             }
             return existing;
         }
-        const record = new repository_1.VtFlowRecord({
-            threadId: message.threadId,
-            participantSessionId: message.participantSessionId,
-            connectionId: connection.id,
-            role: types_1.VtFlowRole.Validator,
-            state: types_1.VtFlowState.AwaitingIr,
-            variant: types_1.VtFlowVariant.DirectIssuance,
-            agentParticipantId: message.agentParticipantId,
-            walletAgentParticipantId: message.walletAgentParticipantId,
-            schemaId: message.schemaId,
-            claims: message.claims,
-        });
         await this.repository.save(agentContext, record);
         this.emitStateChanged(agentContext, record, null);
         return record;
@@ -267,7 +281,8 @@ let VtFlowService = class VtFlowService {
         messageContext.assertReadyConnection();
         const record = await this.getByThreadId(agentContext, message.threadId);
         this.logger.debug(`[vt-flow] validating received for session ${record.threadId}: ${(_a = message.comment) !== null && _a !== void 0 ? _a : '(no comment)'}`);
-        if (record.role === types_1.VtFlowRole.Applicant && message.comment) {
+        if (record.role === types_1.VtFlowRole.Applicant &&
+            (message.comment || record.state === types_1.VtFlowState.OobPending)) {
             this.appendMessage(record, {
                 type: types_1.VtFlowMessageType.Validating,
                 text: message.comment,
@@ -298,12 +313,24 @@ let VtFlowService = class VtFlowService {
         }
         return record;
     }
-    /** `AWAITING_OR => VALIDATING`; caller is expected to have verified participant/agent/wallet IDs on-chain. */
+    /** `AWAITING_OR => VALIDATING` once the `checkParticipantId` hook accepts the `participant_id`, with no transition and no message once it reports the request settled by a `VALIDATED` entry; caller is expected to have verified agent/wallet IDs on-chain. */
     async acceptOnboardingRequest(agentContext, recordId) {
-        const record = await this.repository.getById(agentContext, recordId);
+        let record = await this.repository.getById(agentContext, recordId);
         record.assertRole(types_1.VtFlowRole.Validator);
         record.assertState(types_1.VtFlowState.AwaitingOr);
         record.assertVariant(types_1.VtFlowVariant.OnboardingProcess);
+        const { checkParticipantId } = this.config;
+        if (checkParticipantId) {
+            const checked = await checkParticipantId({ agentContext, record });
+            if (!checked) {
+                throw new errors_1.VtFlowError(errors_1.VtFlowErrorCode.InvalidParticipantId, `vt-flow: participant_id '${record.applicantParticipantId}' is not a PENDING entry that names this agent as its validator`);
+            }
+            // the check can wait for the indexer while the flow moves on
+            record = await this.repository.getById(agentContext, recordId);
+            if (checked === 'validated')
+                return { record };
+            record.assertState(types_1.VtFlowState.AwaitingOr);
+        }
         await this.updateState(agentContext, record, types_1.VtFlowState.Validating);
         return { record, message: new messages_1.ValidatingMessage({ threadId: record.threadId }) };
     }
@@ -316,21 +343,42 @@ let VtFlowService = class VtFlowService {
         await this.updateState(agentContext, record, types_1.VtFlowState.Validating);
         return { record, message: new messages_1.ValidatingMessage({ threadId: record.threadId }) };
     }
-    /** Reject with a problem-report; transitions to `TERMINATED_BY_{role}` and marks the connection as `TERMINATED`. */
+    /** Reject with a problem-report; a fatal code moves the sender to the Error Codes state, a retryable one returns a validator to `AWAITING_OR` or `AWAITING_IR`. */
     async rejectRequest(agentContext, recordId, params) {
         var _a;
         const record = await this.repository.getById(agentContext, recordId);
+        if ((0, types_1.isVtFlowTerminalState)(record.state)) {
+            throw new core_1.CredoError(`vt-flow: flow '${record.id}' in state ${record.state} cannot be rejected`);
+        }
         const problemReport = (0, errors_1.buildVtFlowProblemReport)({
             code: params.code,
             threadId: record.threadId,
             enDescription: params.enDescription,
             fixHintEn: params.fixHintEn,
         });
-        const nextState = record.role === types_1.VtFlowRole.Validator
-            ? types_1.VtFlowState.TerminatedByValidator
-            : types_1.VtFlowState.TerminatedByApplicant;
-        record.errorMessage = (_a = params.enDescription) !== null && _a !== void 0 ? _a : params.code;
-        await this.updateState(agentContext, record, nextState);
+        const info = errors_1.VT_FLOW_ERROR_INFO[params.code];
+        const receiverRole = record.role === types_1.VtFlowRole.Validator ? types_1.VtFlowRole.Applicant : types_1.VtFlowRole.Validator;
+        // a fatal code lands both parties in the state the table gives the receiver
+        const fatalState = this.resolveErrorFlowState(info.flowState, receiverRole, errors_1.whoRetriesMap[info.whoRetries]);
+        const retryState = record.variant === types_1.VtFlowVariant.OnboardingProcess ? types_1.VtFlowState.AwaitingOr : types_1.VtFlowState.AwaitingIr;
+        if (!fatalState && record.role === types_1.VtFlowRole.Validator) {
+            record.assertState([
+                types_1.VtFlowState.AwaitingOr,
+                types_1.VtFlowState.AwaitingIr,
+                types_1.VtFlowState.Validating,
+                types_1.VtFlowState.OobPending,
+            ]);
+        }
+        if (record.role === types_1.VtFlowRole.Validator) {
+            this.appendMessage(record, {
+                type: types_1.VtFlowMessageType.ProblemReport,
+                text: problemReport.description.en,
+                at: new Date().toISOString(),
+            });
+        }
+        if (fatalState)
+            record.errorMessage = (_a = params.enDescription) !== null && _a !== void 0 ? _a : params.code;
+        await this.updateState(agentContext, record, fatalState !== null && fatalState !== void 0 ? fatalState : (record.role === types_1.VtFlowRole.Validator ? retryState : record.state));
         return { record, problemReport };
     }
     /** Applicant-side termination producing a problem-report and landing in `TERMINATED_BY_APPLICANT`. */
@@ -361,7 +409,7 @@ let VtFlowService = class VtFlowService {
             types_1.VtFlowState.OobPending,
             types_1.VtFlowState.AwaitingValidationTx,
             types_1.VtFlowState.ValidationTxFailed,
-            // VtFlowModule ends the flow here when auto-issue fails, until verana-labs/vs-agent#738
+            // VtFlowModule ends the flow here when auto-issue throws. A failed anchoring stays in CRED_OFFERED instead
             types_1.VtFlowState.CredOffered,
             types_1.VtFlowState.Completed,
         ]);
@@ -373,6 +421,12 @@ let VtFlowService = class VtFlowService {
             fixHintEn: params.fixHintEn,
         });
         record.errorMessage = (_b = params.enDescription) !== null && _b !== void 0 ? _b : code;
+        this.appendMessage(record, {
+            type: types_1.VtFlowMessageType.ProblemReport,
+            text: problemReport.description.en,
+            at: new Date().toISOString(),
+        });
+        record.connectionTerminated = true;
         await this.updateState(agentContext, record, types_1.VtFlowState.TerminatedByValidator);
         return { record, problemReport };
     }
@@ -425,13 +479,11 @@ let VtFlowService = class VtFlowService {
             threadId: record.threadId,
             comment: params.comment,
         });
-        if (params.comment) {
-            this.appendMessage(record, {
-                type: types_1.VtFlowMessageType.Validating,
-                text: params.comment,
-                at: new Date().toISOString(),
-            });
-        }
+        this.appendMessage(record, {
+            type: types_1.VtFlowMessageType.Validating,
+            text: params.comment,
+            at: new Date().toISOString(),
+        });
         await this.updateState(agentContext, record, types_1.VtFlowState.Validating);
         return { record, message };
     }
@@ -446,6 +498,22 @@ let VtFlowService = class VtFlowService {
             await this.updateRecord(agentContext, record);
         return record;
     }
+    /** Record the outcome of the `CreateOrUpdateParticipantSession` transaction that anchors the issued credential. */
+    async recordIssuance(agentContext, recordId, issuance) {
+        const record = await this.repository.getById(agentContext, recordId);
+        record.assertRole(types_1.VtFlowRole.Validator);
+        record.issuance = issuance;
+        await this.updateRecord(agentContext, record);
+        return record;
+    }
+    /** `VALIDATED` => `VALIDATED_PENDING_CLAIMS`, when the claims fail the schema at offer time ([VSA-VTI-FLOW-OP-ISSUE-4]). */
+    async markPendingClaims(agentContext, recordId) {
+        const record = await this.repository.getById(agentContext, recordId);
+        record.assertRole(types_1.VtFlowRole.Validator);
+        record.assertState(types_1.VtFlowState.Validated);
+        await this.updateState(agentContext, record, types_1.VtFlowState.ValidatedPendingClaims);
+        return record;
+    }
     /** Validator-side states preceding `VALIDATED` => `VALIDATED`; call after `SetParticipantOPtoValidated` lands on-chain. */
     async markValidated(agentContext, recordId) {
         const record = await this.repository.getById(agentContext, recordId);
@@ -484,10 +552,11 @@ let VtFlowService = class VtFlowService {
         ]);
     }
     /** Link a Credo exchange record to the session and transition to `CRED_OFFERED`. */
-    async attachCredentialExchangeRecord(agentContext, recordId, credentialExchangeRecord, credentialDigest, issuerParticipantId) {
+    async attachCredentialExchangeRecord(agentContext, recordId, credentialExchangeRecord, credentialDigest, issuerParticipantId, credentialId) {
         const record = await this.repository.getById(agentContext, recordId);
         this.assertCanOfferCredential(record);
         record.credentialExchangeRecordId = credentialExchangeRecord.id;
+        record.credentialId = credentialId;
         if (credentialDigest)
             record.credentialDigest = credentialDigest;
         if (issuerParticipantId !== undefined)
@@ -531,7 +600,16 @@ let VtFlowService = class VtFlowService {
     async updateClaims(agentContext, recordId, claims) {
         const record = await this.repository.getById(agentContext, recordId);
         record.assertRole(types_1.VtFlowRole.Validator);
-        record.assertState([types_1.VtFlowState.AwaitingOr, types_1.VtFlowState.Validating, types_1.VtFlowState.CredRevoked]);
+        record.assertState([
+            types_1.VtFlowState.AwaitingOr,
+            types_1.VtFlowState.OobPending,
+            types_1.VtFlowState.Validating,
+            types_1.VtFlowState.AwaitingValidationTx,
+            types_1.VtFlowState.ValidationTxSubmitted,
+            types_1.VtFlowState.ValidationTxFailed,
+            types_1.VtFlowState.ValidatedPendingClaims,
+            types_1.VtFlowState.CredRevoked,
+        ]);
         record.claims = claims;
         await this.updateRecord(agentContext, record);
         return record;
@@ -552,6 +630,11 @@ let VtFlowService = class VtFlowService {
                 }
                 break;
             case didcomm_1.DidCommCredentialState.OfferReceived:
+                // the offer can beat the chain notification, and an Onboarding Process offers only from VALIDATED
+                if (record.variant === types_1.VtFlowVariant.OnboardingProcess &&
+                    [types_1.VtFlowState.OrSent, types_1.VtFlowState.Validating, types_1.VtFlowState.OobPending].includes(record.state)) {
+                    await this.updateState(agentContext, record, types_1.VtFlowState.Validated);
+                }
                 if (record.state !== types_1.VtFlowState.CredOffered) {
                     await this.updateState(agentContext, record, types_1.VtFlowState.CredOffered);
                 }
@@ -565,6 +648,7 @@ let VtFlowService = class VtFlowService {
                 }
                 break;
             case didcomm_1.DidCommCredentialState.Abandoned:
+            case didcomm_1.DidCommCredentialState.Declined:
                 if (record.state !== types_1.VtFlowState.Error) {
                     record.errorMessage = (_a = record.errorMessage) !== null && _a !== void 0 ? _a : 'Subprotocol abandoned';
                     await this.updateState(agentContext, record, types_1.VtFlowState.Error);
@@ -667,13 +751,43 @@ let VtFlowService = class VtFlowService {
         await this.repository.update(agentContext, record);
     }
     /** participant_session_ids are public on-chain, so only the original peer may re-attach a flow with one. */
-    async assertSamePeer(agentContext, record, connection) {
+    async isSamePeer(agentContext, record, connection) {
         if (record.connectionId === connection.id)
-            return;
+            return true;
         const connectionRepository = agentContext.dependencyManager.resolve(didcomm_1.DidCommConnectionRepository);
         const previous = await connectionRepository.findById(agentContext, record.connectionId);
-        if ((previous === null || previous === void 0 ? void 0 : previous.theirDid) && connection.theirDid && previous.theirDid !== connection.theirDid) {
-            throw new core_1.CredoError(`vt-flow: connection '${connection.id}' peer does not match the original connection of participant_session_id '${record.participantSessionId}'`);
+        return !((previous === null || previous === void 0 ? void 0 : previous.theirDid) && connection.theirDid && previous.theirDid !== connection.theirDid);
+    }
+    async assertSamePeer(agentContext, record, connection) {
+        if (!(await this.isSamePeer(agentContext, record, connection))) {
+            throw new errors_1.VtFlowError(errors_1.VtFlowErrorCode.InvalidParticipantSessionId, `vt-flow: connection '${connection.id}' peer does not match the original connection of participant_session_id '${record.participantSessionId}'`);
+        }
+    }
+    /** VS-CONN-VS failure is fatal, so it ends the flow of the request in ERROR unless that flow has ended or belongs to another peer. */
+    async checkRequestFromVerifiableService(agentContext, connection, record, isNew, purpose) {
+        try {
+            await this.checkIsVerifiableService(agentContext, connection, purpose);
+        }
+        catch (error) {
+            if (error instanceof errors_1.VtFlowError &&
+                (isNew ||
+                    (!(0, types_1.isVtFlowTerminalState)(record.state) && (await this.isSamePeer(agentContext, record, connection))))) {
+                record.errorMessage = error.message;
+                this.appendMessage(record, {
+                    type: types_1.VtFlowMessageType.ProblemReport,
+                    text: (0, errors_1.defaultEnglishDescription)(error.code),
+                    at: new Date().toISOString(),
+                });
+                if (isNew) {
+                    record.state = types_1.VtFlowState.Error;
+                    await this.repository.save(agentContext, record);
+                    this.emitStateChanged(agentContext, record, null);
+                }
+                else {
+                    await this.updateState(agentContext, record, types_1.VtFlowState.Error);
+                }
+            }
+            throw error;
         }
     }
     emitStateChanged(agentContext, record, previousState) {
@@ -726,7 +840,7 @@ let VtFlowService = class VtFlowService {
             this.logger.info(`[vt-flow] peer '${peerDid}' is not (yet) a Verifiable Service, but the request qualifies for the VS-CONN-VS ECS issuance exemption`);
             return;
         }
-        throw new core_1.CredoError(`vt-flow.not-a-verifiable-service: peer '${peerDid}' failed VS-CONN-VS check${failure ? ` (${failure})` : ''}`);
+        throw new errors_1.VtFlowError(errors_1.VtFlowErrorCode.NotAVerifiableService, `vt-flow.not-a-verifiable-service: peer '${peerDid}' failed VS-CONN-VS check${failure ? ` (${failure})` : ''}`);
     }
     async isExemptFromVsConnVs(agentContext, connection, peerDid, purpose) {
         const exemption = this.config.checkEcsIssuanceExemption;