gdc-common-utils-ts 2.5.1 → 2.5.2

package/dist/utils/organization-registration-authorization.d.ts

@@ -10,8 +10,9 @@ export declare const PostalActivationLicenseStatuses: Readonly<{
 export type PostalActivationLicenseStatus = typeof PostalActivationLicenseStatuses[keyof typeof PostalActivationLicenseStatuses];
 /**
  * Public binding recorded for the activation licence. The activation code is
- * deliberately absent: storage implementations retain only its protected
- * value/index and never place the secret inside a VC.
+ * deliberately absent. The VC carries only a salted, pepper-dependent scrypt
+ * binding so the host can verify the same code later without disclosing it or
+ * enabling offline guessing from the credential alone.
  */
 export type PostalActivationLicenseBinding = Readonly<{
     licenseId: string;
@@ -20,6 +21,11 @@ export type PostalActivationLicenseBinding = Readonly<{
     controllerEmail: string;
     controllerKeyMaterial: string;
     postalAddressHash: string;
+    protectedCode: Readonly<{
+        algorithm: 'scrypt-v1';
+        salt: string;
+        digest: string;
+    }>;
     hostDid: string;
     network: 'test-network' | 'network';
     status: PostalActivationLicenseStatus;

package/dist/utils/organization-registration-authorization.js

@@ -58,6 +58,11 @@ export function buildOrganizationRegistrationAuthorizationCredential(input) {
                 status: input.postalLicense.status,
                 postalAddressHash: required(input.postalLicense.postalAddressHash, 'postalLicense.postalAddressHash'),
                 deliveredAt: required(input.postalLicense.deliveredAt, 'postalLicense.deliveredAt'),
+                protectedCode: {
+                    algorithm: input.postalLicense.protectedCode.algorithm,
+                    salt: required(input.postalLicense.protectedCode.salt, 'postalLicense.protectedCode.salt'),
+                    digest: required(input.postalLicense.protectedCode.digest, 'postalLicense.protectedCode.digest'),
+                },
             },
         },
         validFrom: required(input.validFrom, 'validFrom'),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gdc-common-utils-ts",
-  "version": "2.5.1",
+  "version": "2.5.2",
   "publishConfig": {
     "access": "public"
   },