gdc-common-utils-ts 1.0.4 → 1.0.7

package/{src/models/did.ts → dist/models/did.d.ts}

@@ -1,33 +1,27 @@
-// Copyright 2025 Antifraud Services Inc. under the Apache License, Version 2.0.
-// File: crypto-ts/models/did.ts
-
 import { PublicJwk } from "../interfaces/Cryptography.types";
 import { RecipientPublicKey } from "./crypto";
-
 /**
  * The parameters required to construct a service endpoint selector.
  * This is the contract for a specific API method to define its endpoint.
  */
 export interface ServiceEndpointSelector {
-  /** When the organization has its own domain for the connector the apiVersion and sector do not appear in the path */
-  apiVersion?: string;
-  sector?: string;
-  /** Corresponds to <sectionTypeOrCompartmentCodingSystem> */
-  section: string; // entity, individual, ...
-  /** Corresponds to <formatTypeOrCompartmentCodingValue> */
-  format: string;
-  resourceType: string;
-  action: string;
+    /** When the organization has its own domain for the connector the apiVersion and sector do not appear in the path */
+    apiVersion?: string;
+    sector?: string;
+    /** Corresponds to <sectionTypeOrCompartmentCodingSystem> */
+    section: string;
+    /** Corresponds to <formatTypeOrCompartmentCodingValue> */
+    format: string;
+    resourceType: string;
+    action: string;
 }
-
 /**
  * Extends the base selector with authorization information.
  * This is used for endpoints that are not public and require a SMART token.
  */
 export interface SecureServiceEndpointSelector extends ServiceEndpointSelector {
-  requiredScope: string; // The OAuth/SMART scope needed to call this endpoint
+    requiredScope: string;
 }
-
 /**
  * Represents a service endpoint in a DID Document.
  * @see https://www.w3.org/TR/did-core/#service-endpoints
@@ -36,9 +30,8 @@ export interface DidService {
     id: string;
     type: string;
     serviceEndpoint: string;
-    [key: string]: any; // Allow for additional properties
+    [key: string]: any;
 }
-
 /**
  * Represents a DID Document, compliant with the W3C DID Core specification.
  * It describes how to use a DID, including verification methods and service endpoints.
@@ -51,31 +44,29 @@ export interface DidDocument {
     id: string;
     /** Public keys used for verifying digital signatures */
     verificationMethod?: VerificationMethod[];
-    /** 
+    /**
      * Specifies verification methods for making claims. Can be embedded or a string referencing a `verificationMethod`.
      * @see https://www.w3.org/TR/did-core/#assertion
      */
-    assertionMethod?: (string | VerificationMethod)[]; 
-    /** 
+    assertionMethod?: (string | VerificationMethod)[];
+    /**
      * Specifies methods for authentication. Can be embedded or a string referencing a `verificationMethod`.
      * @see https://www.w3.org/TR/did-core/#authentication
      */
-    authentication?: (string | VerificationMethod)[]; 
-    /** 
+    authentication?: (string | VerificationMethod)[];
+    /**
      * Specifies methods for key agreement. Can be embedded or a string referencing a `verificationMethod`.
      * @see https://www.w3.org/TR/did-core/#key-agreement
      */
     keyAgreement?: (string | VerificationMethod)[];
-    /** Service endpoints for interacting with the entity */    
+    /** Service endpoints for interacting with the entity */
     service?: DidService[];
     /** Other properties are allowed. */
     [key: string]: any;
 }
-
-// En src/models/did.ts (o donde esté RecipientPublicKey/VerificationMethod)
 export interface VerificationMethod extends RecipientPublicKey {
-  id: string; // e.g., did:web:example.com#key-1
-  type: string; // e.g., JsonWebKey2020
-  controller: string; // e.g., did:web:example.com
-  publicKeyJwk: PublicJwk;
+    id: string;
+    type: string;
+    controller: string;
+    publicKeyJwk: PublicJwk;
 }

package/dist/models/did.js

@@ -0,0 +1,3 @@
+// Copyright 2025 Antifraud Services Inc. under the Apache License, Version 2.0.
+// File: crypto-ts/models/did.ts
+export {};

package/dist/models/index.js

@@ -0,0 +1,31 @@
+export * from './aes.js';
+export * from './auth.js';
+export * from './bundle.js';
+export * from './comm.js';
+export * from './clinical-sections.js';
+export * from './clinical-sections.en.js';
+export * from './confidential-job.js';
+export * from './confidential-message.js';
+export * from './confidential-storage.js';
+export * from './consent-rule.js';
+export * from './crypto.js';
+export * from './device-license.js';
+export * from './did.js';
+export * from './indexing.js';
+export * from './issue.js';
+export * from './jsonapi.js';
+export * from './jwe.js';
+export * from './jwk.js';
+export * from './jws.js';
+export * from './jwt.js';
+export * from './oidc4ida.common.model.js';
+export * from './oidc4ida.document.model.js';
+export * from './oidc4ida.electronicRecord.model.js';
+export * from './oidc4ida.evidence.model.js';
+export * from './openid-device.js';
+export * from './operation-outcome.js';
+export * from './params.js';
+export * from './resource-document.js';
+export * from './response.js';
+export * from './urlPath.js';
+export * from './verifiable-credential.js';

package/dist/models/indexing.d.ts

@@ -0,0 +1,11 @@
+import { ClaimsOrganizationSchemaorg } from "../constants/schemaorg";
+/**
+ * Defines which claims are allowed to be indexed for different resource types.
+ * This provides a single, strongly-typed source of truth for indexing strategies.
+ */
+export declare const AllowedIndexableClaims: {
+    /**
+     * Defines the claims that can be indexed in the central tenant registry for an Organization.
+     */
+    organizationRegistry: readonly [ClaimsOrganizationSchemaorg.alternateName, ClaimsOrganizationSchemaorg.identifierValue, ClaimsOrganizationSchemaorg.identifierType, ClaimsOrganizationSchemaorg.addressCountry];
+};

package/dist/models/indexing.js

@@ -0,0 +1,18 @@
+// Copyright 2025 Antifraud Services Inc. under the Apache License, Version 2.0.
+// File: src/models/indexing.ts
+import { ClaimsOrganizationSchemaorg } from "../constants/schemaorg.js";
+/**
+ * Defines which claims are allowed to be indexed for different resource types.
+ * This provides a single, strongly-typed source of truth for indexing strategies.
+ */
+export const AllowedIndexableClaims = {
+    /**
+     * Defines the claims that can be indexed in the central tenant registry for an Organization.
+     */
+    organizationRegistry: [
+        ClaimsOrganizationSchemaorg.alternateName,
+        ClaimsOrganizationSchemaorg.identifierValue,
+        ClaimsOrganizationSchemaorg.identifierType,
+        ClaimsOrganizationSchemaorg.addressCountry,
+    ], // Use 'as const' to provide strong typing for the array elements
+};

package/dist/models/issue.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Defines the level of an issue.
+ */
+export declare enum IssueLevel {
+    /** The issue is fatal and the system is in an unstable state. */
+    Fatal = "fatal",
+    /** The issue is an error that prevents the action from completing. */
+    Error = "error",
+    /** The issue is a warning that does not prevent the action from completing. */
+    Warning = "warning",
+    /** The issue is informational and requires no action. */
+    Information = "information"
+}
+/**
+ * Defines the code for the type of issue.
+ * This is a subset of the full FHIR value set, focused on common API scenarios.
+ */
+export declare const IssueType: {
+    /** Content invalid against the specification. */
+    readonly Invalid: "invalid";
+    /** A required element is missing. */
+    readonly Required: "required";
+    /** An element value is invalid. */
+    readonly Value: "value";
+    /** A business rule has been violated. */
+    readonly BusinessRule: "business-rule";
+    /** An authentication/authorization error has occurred. */
+    readonly Login: "login";
+    /** The user is not authorized for the requested action. */
+    readonly Forbidden: "forbidden";
+    /** A security-related issue has been detected. */
+    readonly Security: "security";
+    /** The resource was not found. */
+    readonly NotFound: "not-found";
+    /** The operation led to a conflict. */
+    readonly Conflict: "conflict";
+    /** A duplicate record was detected. */
+    readonly Duplicate: "duplicate";
+    /** The operation is not supported. */
+    readonly NotSupported: "not-supported";
+    /** An internal processing exception occurred. */
+    readonly Exception: "exception";
+    /** The operation has timed out. */
+    readonly Timeout: "timeout";
+    /** The operation was throttled. */
+    readonly Throttled: "throttled";
+};
+/**
+ * A union type derived from the keys of the IssueType object.
+ * This ensures that only defined issue type codes can be used.
+ */
+export type IssueTypeCode = typeof IssueType[keyof typeof IssueType];
+/**
+ * Maps our internal IssueType codes to the appropriate HTTP status code strings.
+ * This provides a single source of truth for error responses.
+ */
+export declare const IssueTypeToHttpStatus: Record<IssueTypeCode, string>;

package/dist/models/issue.js

@@ -0,0 +1,75 @@
+// src/models/issue.ts
+// Copyright 2025 Antifraud Services Inc. under the Apache License, Version 2.0.
+// Source: https://www.hl7.org/fhir/valueset-issue-severity.html
+/**
+ * Defines the level of an issue.
+ */
+export var IssueLevel;
+(function (IssueLevel) {
+    /** The issue is fatal and the system is in an unstable state. */
+    IssueLevel["Fatal"] = "fatal";
+    /** The issue is an error that prevents the action from completing. */
+    IssueLevel["Error"] = "error";
+    /** The issue is a warning that does not prevent the action from completing. */
+    IssueLevel["Warning"] = "warning";
+    /** The issue is informational and requires no action. */
+    IssueLevel["Information"] = "information";
+})(IssueLevel || (IssueLevel = {}));
+// Source: https://www.hl7.org/fhir/valueset-issue-type.html
+/**
+ * Defines the code for the type of issue.
+ * This is a subset of the full FHIR value set, focused on common API scenarios.
+ */
+export const IssueType = {
+    // --- Category: Invalid Content ---
+    /** Content invalid against the specification. */
+    Invalid: 'invalid',
+    /** A required element is missing. */
+    Required: 'required',
+    /** An element value is invalid. */
+    Value: 'value',
+    /** A business rule has been violated. */
+    BusinessRule: 'business-rule',
+    // --- Category: Security ---
+    /** An authentication/authorization error has occurred. */
+    Login: 'login',
+    /** The user is not authorized for the requested action. */
+    Forbidden: 'forbidden',
+    /** A security-related issue has been detected. */
+    Security: 'security',
+    // --- Category: Processing ---
+    /** The resource was not found. */
+    NotFound: 'not-found',
+    /** The operation led to a conflict. */
+    Conflict: 'conflict',
+    /** A duplicate record was detected. */
+    Duplicate: 'duplicate',
+    /** The operation is not supported. */
+    NotSupported: 'not-supported',
+    /** An internal processing exception occurred. */
+    Exception: 'exception',
+    /** The operation has timed out. */
+    Timeout: 'timeout',
+    /** The operation was throttled. */
+    Throttled: 'throttled',
+};
+/**
+ * Maps our internal IssueType codes to the appropriate HTTP status code strings.
+ * This provides a single source of truth for error responses.
+ */
+export const IssueTypeToHttpStatus = {
+    [IssueType.Invalid]: '400',
+    [IssueType.Required]: '400',
+    [IssueType.Value]: '400',
+    [IssueType.BusinessRule]: '400',
+    [IssueType.Login]: '401',
+    [IssueType.Forbidden]: '403',
+    [IssueType.Security]: '403',
+    [IssueType.NotFound]: '404',
+    [IssueType.Conflict]: '409',
+    [IssueType.Duplicate]: '409',
+    [IssueType.NotSupported]: '501',
+    [IssueType.Exception]: '500',
+    [IssueType.Timeout]: '503',
+    [IssueType.Throttled]: '429',
+};

package/dist/models/jsonapi.d.ts

@@ -0,0 +1,13 @@
+import { RecordBase } from "./resource-document";
+/**
+ * Represents a resource object in a JSON:API 'included' array.
+ * The type is made "open" with an index signature to allow for additional properties.
+ */
+export interface IncludedResource extends RecordBase {
+    type: string;
+    meta: {
+        claims: Record<string, any>;
+        [key: string]: any;
+    };
+    [key: string]: any;
+}

package/dist/models/jsonapi.js

@@ -0,0 +1,3 @@
+// Copyright 2025 Antifraud Services Inc. under the Apache License, Version 2.0.
+// File: src/models/jsonapi.ts
+export {};

package/{src/models/jwe.ts → dist/models/jwe.d.ts}

@@ -1,35 +1,28 @@
-// Copyright 2025 Antifraud Services Inc. under the Apache License, Version 2.0.
-// File: crypto-ts/models/jwe.ts
-
 import { JWK } from "./jwk";
-
 /**
  * Represents the core components of a JWE (JSON Web Encryption) structure,
  * based on RFC 7516. This is the standard for encrypted data.
  */
-
 /**
  * Decoded protected header claims in a JWE.
  * @see https://datatracker.ietf.org/doc/html/rfc7516#section-4.1
  */
 export interface ProtectedHeadersJWE {
-    alg?: string; // CEK encryption algorithm
-    enc?: string; // Content encryption algorithm (e.g., "A256GCM")
-    cty?: string; // Content type
-    jwk?: JWK; // Senders JWK
-    typ?: string; // Type, e.g., "didcomm-envelope-enc"
-    kid?: string; // Recipient's key ID
-    skid?: string; // Sender's key ID
-    zip?: string; // Compression algorithm
+    alg?: string;
+    enc?: string;
+    cty?: string;
+    jwk?: JWK;
+    typ?: string;
+    kid?: string;
+    skid?: string;
+    zip?: string;
 }
-
 /**
  * Unprotected headers that are not integrity protected.
  */
 export interface UnprotectedHeadersJWE {
-    jku?: string; // JWK Set URL
+    jku?: string;
 }
-
 /**
  * Represents the data for a single recipient of the JWE.
  */
@@ -40,7 +33,6 @@ export interface RecipientDataJWE {
         kid: string;
     };
 }
-
 /**
  * Represents the protected (integrity-protected) header of a JWE.
  * These parameters are combined with the AAD (Additional Authenticated Data)
@@ -67,7 +59,6 @@ export interface ProtectedHeadersJWE {
     /** Compression algorithm ('DEF' for DEFLATE). */
     zip?: string;
 }
-
 /**
  * Represents the unprotected header of a JWE.
  * These parameters are not integrity-protected.
@@ -76,7 +67,6 @@ export interface UnprotectedHeadersJWE {
     /** JWK Set URL, a URL pointing to a set of keys. */
     jku?: string;
 }
-
 /**
  * Represents the data specific to a single recipient of a JWE.
  */
@@ -91,7 +81,6 @@ export interface RecipientDataJWE {
         kid: string;
     };
 }
-
 /**
  * Represents a JWE object before encryption.
  * It contains the plaintext data and the configuration for encryption.
@@ -103,7 +92,7 @@ export interface UnencryptedJWE {
     unprotected?: UnprotectedHeadersJWE;
     /** The list of recipients for whom the content is encrypted. */
     recipients: RecipientDataJWE[];
-    /** 
+    /**
      * The plaintext data to be encrypted, already serialized.
      * For structured data (like a TenantConfig), this MUST be the result of `JSON.stringify`.
      * For binary data (like a PDF), this MUST be a Uint8Array.
@@ -111,7 +100,6 @@ export interface UnencryptedJWE {
      */
     plaintext: string | Uint8Array;
 }
-
 /**
  * Represents a JWE (JSON Web Encryption) in the General JSON Serialization format.
  * This structure supports multiple recipients.

package/dist/models/jwe.js

@@ -0,0 +1,3 @@
+// Copyright 2025 Antifraud Services Inc. under the Apache License, Version 2.0.
+// File: crypto-ts/models/jwe.ts
+export {};

package/{src/models/jwk.ts → dist/models/jwk.d.ts}

@@ -1,6 +1,3 @@
-// Copyright 2025 Antifraud Services Inc. under the Apache License, Version 2.0.
-// File: crypto-ts/models/jwk.ts
-
 /**
  * Represents a JSON Web Key (JWK), a standard format for representing cryptographic keys.
  * This interface supports both symmetric (oct) and asymmetric keys (EC, RSA, OKP, and Post-Quantum).
@@ -17,8 +14,6 @@ export interface JWK {
     kty?: string;
     /** Public Key Use ('sig' for signature, 'enc' for encryption). */
     use?: string;
-    
-    // --- Asymmetric Key Parameters ---
     /** The curve for an ML-KEM or EC key (e.g., 'P-256'). */
     crv?: string;
     /** The private key component for ML-KEM or EC asymmetric keys. */
@@ -27,21 +22,15 @@ export interface JWK {
     x?: string;
     /** The public 'y' coordinate for an EC key. */
     y?: string;
-
-    // --- Post-Quantum ML-DSA (Dilithium) Parameters ---
     /** The public key component for an ML-DSA key. */
     pub?: string;
     /** The private key component for an ML-DSA key. */
     priv?: string;
-
-    // --- Symmetric Key Parameters ---
     /** The symmetric key value. */
     k?: string;
-    
     /** Any other custom JWK properties. */
     [propName: string]: unknown;
 }
-
 /**
  * Represents a set of JSON Web Keys (JWKs).
  */

package/dist/models/jwk.js

@@ -0,0 +1,3 @@
+// Copyright 2025 Antifraud Services Inc. under the Apache License, Version 2.0.
+// File: crypto-ts/models/jwk.ts
+export {};

package/{src/models/jws.ts → dist/models/jws.d.ts}

@@ -1,8 +1,4 @@
-// Copyright 2025 Antifraud Services Inc. under the Apache License, Version 2.0.
-// File: crypto-ts/models/jws.ts
-
 import { JWK } from './jwk';
-
 /**
  * Represents the header parameters of a JSON Web Signature (JWS).
  */
@@ -18,7 +14,6 @@ export interface JwsHeader {
     /** The full public key, used in bootstrapping scenarios. */
     jwk?: JWK;
 }
-
 /**
  * Represents a signature entry in a JWS using the General JSON Serialization format.
  */
@@ -28,7 +23,6 @@ export interface JwsDetachedSignParts {
     /** The Base64URL encoded signature. */
     signature: string;
 }
-
 /**
  * Represents a JWS (JSON Web Signature) in the General JSON Serialization format.
  * This structure supports multiple signatures.
@@ -39,4 +33,3 @@ export interface JwsMultiSign {
     /** An array of one or more signatures. */
     signatures: JwsDetachedSignParts[];
 }
-

package/dist/models/jws.js

@@ -0,0 +1,3 @@
+// Copyright 2025 Antifraud Services Inc. under the Apache License, Version 2.0.
+// File: crypto-ts/models/jws.ts
+export {};

package/dist/models/jwt.d.ts

@@ -0,0 +1,9 @@
+import { JwsDetachedSignParts } from "./jws";
+export interface JwtCompactParts extends JwsDetachedSignParts {
+    payload: string;
+}
+export interface DataCompactJWT {
+    protected: object;
+    payload: object;
+    signature?: Uint8Array;
+}

package/dist/models/jwt.js

@@ -0,0 +1,3 @@
+// Copyright 2025 Antifraud Services Inc. under the Apache License, Version 2.0.
+// File: crypto-ts/models/jwt.ts
+export {};

package/dist/models/multibase58.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Encode bytes into multibase base58btc string (prefixed with 'z').
+ * Equivalent to multiformats base58btc.encode.
+ */
+export declare function encodeMultibase58btc(data: Uint8Array): string;
+/**
+ * Decode a multibase base58btc string (must start with 'z').
+ * Equivalent to multiformats base58btc.decode.
+ */
+export declare function decodeMultibase58btc(multibaseStr: string): Uint8Array;
+export declare function encodeHexToMultibase58btc(hexStr: string): string;
+export declare function decodeMultibase58btcToHex(b58str: string): string;
+export declare function decodeMultibase58btcToUUID(b58str: string): string;

package/dist/models/multibase58.js

@@ -0,0 +1,40 @@
+// Copyright 2025 Antifraud Services Inc. under the Apache License, Version 2.0.
+// File: crypto-ts/multibase58.ts
+import baseX from "base-x";
+const BASE58_BTC_ALPHABET = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz";
+const base58btc = baseX(BASE58_BTC_ALPHABET);
+/**
+ * Encode bytes into multibase base58btc string (prefixed with 'z').
+ * Equivalent to multiformats base58btc.encode.
+ */
+export function encodeMultibase58btc(data) {
+    return "z" + base58btc.encode(Buffer.from(data));
+}
+/**
+ * Decode a multibase base58btc string (must start with 'z').
+ * Equivalent to multiformats base58btc.decode.
+ */
+export function decodeMultibase58btc(multibaseStr) {
+    if (!multibaseStr.startsWith("z")) {
+        throw new Error("Invalid multibase58btc string: missing 'z' prefix");
+    }
+    return new Uint8Array(base58btc.decode(multibaseStr.slice(1)));
+}
+// HEX ➜ multibase base58btc (quita guiones si los hay)
+export function encodeHexToMultibase58btc(hexStr) {
+    const hexClean = hexStr.replace(/-/g, "").toLowerCase();
+    if (!/^[0-9a-f]{32}$/i.test(hexClean))
+        throw new Error("Invalid 16-byte hex string");
+    const bytes = new Uint8Array(hexClean.match(/.{1,2}/g).map(b => parseInt(b, 16)));
+    return encodeMultibase58btc(bytes);
+}
+// multibase base58btc ➜ hex (no hyppens)
+export function decodeMultibase58btcToHex(b58str) {
+    const bytes = decodeMultibase58btc(b58str);
+    return Array.from(bytes).map(b => b.toString(16).padStart(2, "0")).join("");
+}
+// multibase base58btc ➜ UUID (with hyppens)
+export function decodeMultibase58btcToUUID(b58str) {
+    const hex = decodeMultibase58btcToHex(b58str);
+    return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+}

package/dist/models/oidc4ida.common.model.d.ts

@@ -0,0 +1,33 @@
+/** Digest object represents a cryptographic hash of some bytes (e.g.: the content of a document).
+ *  It has 'alg' and 'value' (Base64 encoded, not hexadecimal such as in W3C format).
+ */
+export interface DigestResultOpenIdData {
+    alg: string;
+    value: string;
+}
+/** Attachment OpenID
+ *  The "digest" is REQUIRED: digest.alg and digest.value (Base64 encoded, not Base64Url).
+ *  The "url" is REQUIRED to be "urn:uuid:<uuidv4>" for the resource/record (same as the FHIR "fullUrl" property with urn:uuid:<uuidv4>).
+ */
+export interface AttachmentExternalDLT {
+    digest: DigestResultOpenIdData;
+    url?: string;
+}
+/** CheckDetails is a JSON array representing the checks done in relation to the evidence.
+ *  The "check_method" is REQUIRED (see https://bitbucket.org/openid/ekyc-ida/wiki/identifiers#check_methods):
+ *  - check_method: REQUIRED. String representing the check done, this includes processes such as checking the authenticity of the document, or verifying the user's biometric against an identity document (e.g.: vcrypt, vdig, vpip, vpvp...)
+ *  - organization: OPTIONAL. String denoting the legal entity that performed the check. This SHOULD be included if the OP did not perform the check itself.
+ *  - txn: OPTIONAL. Identifier referring to the identity verification transaction. The OP MUST ensure that this is present when evidence_ref element is used. The OP MUST ensure that the transaction identifier can be resolved into transaction details during an audit.
+ *  - time: OPTIONAL. Time stamp in ISO 8601 [ISO8601] YYYY-MM-DDThh:mm[:ss]TZD format representing the date when the check was completed.
+ */
+export interface CheckDetails {
+    check_method: string;
+    organization?: string;
+    txn?: string;
+    time?: string;
+}
+/** 'organization' is the organization ID which performed the verification on behalf of the OP */
+export interface VerifierDLT {
+    organization: string;
+    txn?: string;
+}

package/dist/models/oidc4ida.common.model.js

@@ -0,0 +1,3 @@
+// Copyright 2025 Antifraud Services Inc. under the Apache License, Version 2.0.
+// File: crypto-ts/models/oidc4ida.common.model.ts
+export {};

package/dist/models/oidc4ida.document.model.d.ts

@@ -0,0 +1,50 @@
+import { AttachmentExternalDLT, CheckDetails, VerifierDLT } from './oidc4ida.common.model';
+import { IssuerElectronicRecordDLT } from './oidc4ida.electronicRecord.model';
+/** Common for Document and Bill evidences  */
+export interface EvidenceCommonSubElementDLT {
+    method: string;
+    time?: string;
+}
+/** Predefined method values are given in Verification Methods (https://bitbucket.org/openid/ekyc-ida/wiki/identifiers)
+ * - pipp (Physical In-Person Proofing)
+ * - sripp (Supervised remote In-Person Proofing)
+ * - eid (Online verification of an electronic ID card)
+ * - uripp (Unsupervised remote in-person proofing with video capture of the ID document, user self-portrait video and liveness checks).
+ */
+export interface EvidenceDocumentDLT extends EvidenceCommonSubElementDLT {
+    attachments?: AttachmentExternalDLT;
+    check_details?: CheckDetails[];
+    document_details?: DocumentDetailsDLT;
+    method: string;
+    time?: string;
+    type: 'document';
+    verifier: VerifierDLT;
+}
+/** OpenID 'document' evidence sub-element.
+ * - 'type' of the (physical) document (standarized).
+ * - 'date_of_issuance' is the date the document was issued as ISO 8601:2004 YYYY-MM-DD format.
+ * - 'date_of_expiry' is the date the document will expire as ISO 8601:2004 YYYY-MM-DD format.
+ * - 'serial_number' is the model of the document irrespective of any personalization information (usually physical artefacts and is present before personalization).
+ * - 'document_number' is the unique document ID that was issued to the End-User and will change if it is reissued, e.g., a passport number, certificate number, etc.
+ *  Note: number can be used as an alias for 'document_number' for backward compatibilty purposes but will be deprecated in future releases, implementers are recommended to use document_number.
+ */
+export interface DocumentDetailsBase {
+    date_of_expiry?: string;
+    date_of_issuance?: string;
+    document_number?: string;
+    serial_number?: string;
+    type: string;
+}
+/** JSON object representing the document used to perform the identity verification.
+ *  - type: REQUIRED. Standardized values are defined in the Identity Documents section. The OP MAY use other than the predefined values in which case the RPs will either be unable to process the assertion, just store this value for audit purposes, or apply bespoken business logic to it.
+ *  - personal_number: OPTIONAL. It is the subject's DID URI (can be also the holder).
+ *  - issuer: OPTIONAL. JSON object containing information about the issuer of this document.
+ *  - date_of_issuance: REQUIRED. If this attribute exists for the particular type of document. The date the document was issued as ISO 8601:2004 YYYY-MM-DD format.
+ *  - date_of_expiry: REQUIRED. If this attribute exists for the particular type of document. The date the document will expire as ISO 8601:2004 YYYY-MM-DD format.
+ *  - document_number: OPTIONAL. Unique document ID that was issued to the End-User. This is used on one document and will change if it is reissued, e.g., a passport number, certificate number, etc. Note: number can be used as an alias for 'document_number' for backward compatibilty purposes but will be deprecated in future releases, implementers are recommended to use document_number.
+ *  - serial_number: OPTIONAL. Model of document irrespective of any personalization information (usually physical artefacts and is present before personalization).
+ */
+export interface DocumentDetailsDLT extends DocumentDetailsBase {
+    issuer?: IssuerElectronicRecordDLT;
+    personal_number?: string;
+}

package/dist/models/oidc4ida.document.model.js

@@ -0,0 +1,3 @@
+// Copyright 2025 Antifraud Services Inc. under the Apache License, Version 2.0.
+// File: crypto-ts/models/oidc4ida.document.model.ts
+export {};