gdc-sdk-front-ts 2.2.1 → 2.3.0

package/dist/gdc-common-utils-ts/src/models/verifiable-credential.d.ts

@@ -1,45 +0,0 @@
-import { EvidenceObjectDLT } from "./oidc4ida.evidence.model";
-/**
- * Defines the JSON-LD context URI for W3C Verifiable Credentials Data Model v2.0.
- * This constant MUST be used for all V2 credential creations to ensure consistency.
- * @see https://www.w3.org/TR/vc-data-model-2.0/#contexts
- */
-export declare const VC_CONTEXT_V2 = "https://www.w3.org/ns/credentials/v2";
-/** ProofEBSIv2 foresees the possibility to use different types of proofs for Verifiable Credentials,
- *  such as proofs derived from eIDAS keys (qualified) to DID keys (unqualified).
- *  In EBSI 2.0, every V-ID will only contain a single proof, which must be derived from eIDAS keys.
- *  Definition: https://www.w3.org/TR/vc-data-model/#proofs-signatures
- *  See https://ec.europa.eu/digital-building-blocks/wikis/display/EBSIDOC/Verifiable+Attestation
- *  - 'created' is REQURED, it is the ISO 8601 original timestamp of the signature, it is not the same as credential.issued (tx timestamp) (in Aries go framework use *util.TimeWithTrailingZeroMsec instead of time.Time)
- *  - 'jws' is REQUIRED, it defines the detached JWS signature string "<base64url(protectedheader)>..<base64url(signature)>"
- *  - 'proofPurpose' is REQUIRED, e.g.: assertionMethod, authentication, keyAgreement, contractAgreement, capabilityInvocation, capabilityDelegation
- *  - 'type' is REQUIRED, e.g.: "JsonWebSignature2020", "BbsBlsSignature2020", "BbsBlsSignatureProof2020".
- *  - 'verificationMethod' is REQUIRED, it is the 'urndid#keyId' to verify the signature by using the issuer's public signature key.
- */
-export interface ProofEBSIv2 {
-    created?: string;
-    jws?: string;
-    proofPurpose?: string;
-    type: string;
-    verificationMethod?: string;
-}
-/**
- * Defines the structure for a W3C Verifiable Credential.
- * The credentialSubject can be any object containing the claims.
- * @see https://www.w3.org/TR/vc-data-model-2.0/#verifiable-credentials
- */
-export interface VerifiableCredentialV2 {
-    '@context': string[];
-    id?: string;
-    type: string[];
-    /** Claims about the subject, such as the "identifier" or subject's URN */
-    credentialSubject: Record<string, any>;
-    /** Evidence for Identity Assurance: https://openid.net/specs/openid-ida-verified-claims-1_0-final.html#section-5.4.4 */
-    evidence?: EvidenceObjectDLT[];
-    /** The issuer is the creator (e.g., "did:web:gateway.example.com"), but could be distinct to the signer of a proof */
-    issuer: string;
-    /** Proof is optional during creation, but required for a signed VC */
-    proof?: ProofEBSIv2 | ProofEBSIv2[];
-    validFrom: string;
-    validUntil?: string;
-}

package/dist/gdc-common-utils-ts/src/models/verifiable-credential.js

@@ -1,8 +0,0 @@
-// Copyright 2025 Antifraud Services Inc. under the Apache License, Version 2.0.
-// File: crypto-ts/models/verifiable-credential.ts
-/**
- * Defines the JSON-LD context URI for W3C Verifiable Credentials Data Model v2.0.
- * This constant MUST be used for all V2 credential creations to ensure consistency.
- * @see https://www.w3.org/TR/vc-data-model-2.0/#contexts
- */
-export const VC_CONTEXT_V2 = 'https://www.w3.org/ns/credentials/v2';

package/dist/gdc-common-utils-ts/src/storage/IVaultRepository.d.ts

@@ -1,53 +0,0 @@
-import { RecordBase, VaultConfig } from '../models/resource-document';
-export interface VaultQueryCondition {
-    attribute: string;
-    equals?: unknown;
-    in?: unknown[];
-}
-export interface VaultQuery {
-    where?: VaultQueryCondition[];
-    orderBy?: {
-        attribute: string;
-        direction: 'asc' | 'desc';
-    };
-    limit?: number;
-    offset?: number;
-}
-export declare abstract class IVaultRepository {
-    /** Writes one or more records into a collection. */
-    abstract put<T extends RecordBase>(collectionName: string, containers: T | T[]): Promise<boolean>;
-    /** Reads a single record by id. */
-    abstract get<T extends RecordBase>(collectionName: string, containerId: string): Promise<T | undefined>;
-    /** Queries records by structured conditions. */
-    abstract query<T extends RecordBase>(collectionName: string, query: VaultQuery): Promise<T[]>;
-    /** Marks a record as deleted. */
-    abstract delete(collectionName: string, containerId: string): Promise<boolean>;
-}
-export declare abstract class IServerVaultRepository extends IVaultRepository {
-    /** Creates a new physical vault/collection. */
-    abstract createNewVault(vaultConfig: VaultConfig): Promise<boolean>;
-    /** Checks if a tenant's logical registration record exists. */
-    abstract vaultExists(vaultId: string): Promise<boolean>;
-    /** Retrieves configuration for a specific vault. */
-    abstract getVaultConfig(vaultId: string): Promise<VaultConfig | undefined>;
-    /** Creates a new section within a vault. */
-    abstract createNewSection(collectionName: string, sectionId: string): Promise<boolean>;
-    /** Updates or creates a section with the provided records. */
-    abstract updateSection(collectionName: string, sectionId: string, containers?: RecordBase[]): Promise<boolean>;
-    /** Retrieves all section IDs from a vault. */
-    abstract getAllSections(collectionName: string): Promise<string[]>;
-    /** Checks if a section exists within a vault. */
-    abstract sectionExists(collectionName: string, sectionId: string): Promise<boolean>;
-    /** Retrieves a list of record identifiers from a section. */
-    abstract getContainersListInSection(collectionName: string, sectionId: string): Promise<string[]>;
-    /** Retrieves full records from a section. */
-    abstract getContainersInSection<T extends RecordBase>(collectionName: string, sectionId: string, excludeRecordTypes?: string[]): Promise<T[]>;
-    /** Section-aware put — sectionId optional for backwards compat. */
-    abstract put<T extends RecordBase>(collectionName: string, containers: T | T[], sectionId?: string): Promise<boolean>;
-    /** Section-aware get — sectionId optional. */
-    abstract get<T extends RecordBase>(collectionName: string, containerId: string, sectionId?: string): Promise<T | undefined>;
-    /** Retrieves all versions of a record by id. */
-    abstract getHistory(collectionName: string, containerId: string): Promise<RecordBase[]>;
-    /** Permanently removes records marked as deleted. */
-    abstract purge(collectionName: string): Promise<boolean>;
-}

package/dist/gdc-common-utils-ts/src/storage/IVaultRepository.js

@@ -1,25 +0,0 @@
-// Copyright 2025 Antifraud Services Inc. under the Apache License, Version 2.0.
-// File: src/storage/IVaultRepository.ts
-// ---------------------------------------------------------------------------
-// Base contract — used by all channels (voice, chat, mobile)
-//
-// Each vault instance is scoped to a single actor/session context
-// (e.g. callSid for voice, userId for text channels).
-//
-// collectionName → logical bucket within the vault (e.g. 'tokens', 'session')
-// containerId    → unique record id within the bucket
-// ---------------------------------------------------------------------------
-export class IVaultRepository {
-}
-// ---------------------------------------------------------------------------
-// Server/multi-tenant extension — used by GW nodes (gdc-unid-node-ts, gwtemplate-node-ts)
-//
-// Adds multi-vault management, sections, history, and purge operations
-// needed by server-side vault repositories (Firestore, Postgres, Mem-backend).
-//
-// TODO: migrate gdc-unid-node-ts and gwtemplate-node-ts vault.repository.ts
-//       to extend this interface once storage-sdk-firestore-ts and
-//       storage-sdk-postgres-ts are created as separate packages.
-// ---------------------------------------------------------------------------
-export class IServerVaultRepository extends IVaultRepository {
-}

package/dist/gdc-common-utils-ts/src/storage/VaultMemRepository.d.ts

@@ -1,30 +0,0 @@
-import { RecordBase } from '../models/resource-document';
-import { IVaultRepository, VaultQuery } from './IVaultRepository';
-/**
- * In-memory implementation of IVaultRepository.
- *
- * Intended for:
- * - Unit/integration tests across all packages
- * - Short-lived runtime contexts (voice calls, transient sessions)
- *
- * Each instance is independent — instantiate one per actor/session context
- * (e.g. one per CallSid in uhc-unid-chat-node) and discard on cleanup.
- *
- * TODO: For text channels with persistent sessions, use:
- *   - storage-sdk-firestore-ts → FirestoreVaultRepository (Google Cloud)
- *   - storage-sdk-postgres-ts  → PostgresVaultRepository  (Cloud SQL / self-hosted)
- *   - storage-sdk-sqlite-ts    → SqliteVaultRepository    (mobile / expo-sqlite)
- *   - storage-sdk-indexeddb-ts → IndexedDbVaultRepository (browser)
- *   - storage-sdk-py           → Python equivalents
- * All of the above will import IVaultRepository from gdc-common-utils-ts/storage.
- */
-export declare class VaultMemRepository extends IVaultRepository {
-    private readonly collections;
-    private ensureCollection;
-    /** Clears all state. Useful for test teardown or call-end cleanup. */
-    clear(): void;
-    put<T extends RecordBase>(collectionName: string, containers: T | T[]): Promise<boolean>;
-    get<T extends RecordBase>(collectionName: string, containerId: string): Promise<T | undefined>;
-    query<T extends RecordBase>(collectionName: string, query: VaultQuery): Promise<T[]>;
-    delete(collectionName: string, containerId: string): Promise<boolean>;
-}

package/dist/gdc-common-utils-ts/src/storage/VaultMemRepository.js

@@ -1,81 +0,0 @@
-// Copyright 2025 Antifraud Services Inc. under the Apache License, Version 2.0.
-// File: src/storage/VaultMemRepository.ts
-import { IVaultRepository } from './IVaultRepository';
-/**
- * In-memory implementation of IVaultRepository.
- *
- * Intended for:
- * - Unit/integration tests across all packages
- * - Short-lived runtime contexts (voice calls, transient sessions)
- *
- * Each instance is independent — instantiate one per actor/session context
- * (e.g. one per CallSid in uhc-unid-chat-node) and discard on cleanup.
- *
- * TODO: For text channels with persistent sessions, use:
- *   - storage-sdk-firestore-ts → FirestoreVaultRepository (Google Cloud)
- *   - storage-sdk-postgres-ts  → PostgresVaultRepository  (Cloud SQL / self-hosted)
- *   - storage-sdk-sqlite-ts    → SqliteVaultRepository    (mobile / expo-sqlite)
- *   - storage-sdk-indexeddb-ts → IndexedDbVaultRepository (browser)
- *   - storage-sdk-py           → Python equivalents
- * All of the above will import IVaultRepository from gdc-common-utils-ts/storage.
- */
-export class VaultMemRepository extends IVaultRepository {
-    constructor() {
-        super(...arguments);
-        this.collections = new Map();
-    }
-    ensureCollection(collectionName) {
-        if (!this.collections.has(collectionName)) {
-            this.collections.set(collectionName, new Map());
-        }
-        return this.collections.get(collectionName);
-    }
-    /** Clears all state. Useful for test teardown or call-end cleanup. */
-    clear() {
-        this.collections.clear();
-    }
-    async put(collectionName, containers) {
-        const col = this.ensureCollection(collectionName);
-        const items = Array.isArray(containers) ? containers : [containers];
-        for (const item of items) {
-            col.set(item.id, item);
-        }
-        return true;
-    }
-    async get(collectionName, containerId) {
-        return this.collections.get(collectionName)?.get(containerId);
-    }
-    async query(collectionName, query) {
-        const col = this.collections.get(collectionName);
-        if (!col)
-            return [];
-        let results = Array.from(col.values());
-        if (query.where?.length) {
-            results = results.filter((doc) => query.where.every((cond) => {
-                const val = doc[cond.attribute];
-                if (cond.equals !== undefined)
-                    return val === cond.equals;
-                if (cond.in !== undefined)
-                    return cond.in.includes(val);
-                return true;
-            }));
-        }
-        if (query.orderBy) {
-            const { attribute, direction } = query.orderBy;
-            results.sort((a, b) => {
-                const av = a[attribute];
-                const bv = b[attribute];
-                const cmp = av < bv ? -1 : av > bv ? 1 : 0;
-                return direction === 'asc' ? cmp : -cmp;
-            });
-        }
-        if (query.offset)
-            results = results.slice(query.offset);
-        if (query.limit)
-            results = results.slice(0, query.limit);
-        return results;
-    }
-    async delete(collectionName, containerId) {
-        return this.collections.get(collectionName)?.delete(containerId) ?? false;
-    }
-}

package/dist/gdc-common-utils-ts/src/storage/index.d.ts

@@ -1,3 +0,0 @@
-export { IVaultRepository, IServerVaultRepository } from './IVaultRepository';
-export type { VaultQuery, VaultQueryCondition } from './IVaultRepository';
-export { VaultMemRepository } from './VaultMemRepository';

package/dist/gdc-common-utils-ts/src/storage/index.js

@@ -1,4 +0,0 @@
-// Copyright 2025 Antifraud Services Inc. under the Apache License, Version 2.0.
-// File: src/storage/index.ts
-export { IVaultRepository, IServerVaultRepository } from './IVaultRepository';
-export { VaultMemRepository } from './VaultMemRepository';

package/dist/gdc-common-utils-ts/src/utils/activation-policy.d.ts

@@ -1,86 +0,0 @@
-export type ActivationRepresentativePolicyErrorCode = 'MISSING_REPRESENTATIVE_DID_WEB' | 'MISSING_REPRESENTATIVE_ROLE_RESPRSN' | 'MISSING_REPRESENTATIVE_CREDENTIAL_BINDING' | 'REPRESENTATIVE_TAXID_MISMATCH';
-export type ActivationRepresentativePolicyError = {
-    code: ActivationRepresentativePolicyErrorCode;
-    message: string;
-};
-/**
- * Extracts `credentialSubject` from a VC-like object.
- *
- * @param credential Candidate VC-like object.
- */
-export declare function extractCredentialSubject(credential: unknown): Record<string, unknown> | undefined;
-/**
- * Normalizes a tax identifier into uppercase trimmed form.
- *
- * @param value Raw tax identifier value.
- */
-export declare function normalizeTaxIdentifier(value: unknown): string | undefined;
-/**
- * Extracts an organization tax id from a VC-like organization credential.
- *
- * @param organizationCredential Candidate organization credential.
- */
-export declare function extractOrganizationTaxId(organizationCredential: unknown): string | undefined;
-/**
- * Extracts the `memberOf` tax id from a representative credential.
- *
- * @param representativeCredential Candidate representative credential.
- */
-export declare function extractRepresentativeMemberOfTaxId(representativeCredential: unknown): string | undefined;
-/**
- * Extracts the representative role code from `credentialSubject.hasOccupation`.
- *
- * @param representativeCredential Candidate representative credential.
- */
-export declare function extractRepresentativeRoleCode(representativeCredential: unknown): string | undefined;
-/**
- * Checks whether a role code contains the required code, ignoring prefixes such as `SYSTEM|`.
- *
- * @param roleCode Candidate role code.
- * @param requiredCode Required normalized code, defaults to `RESPRSN`.
- */
-export declare function hasRoleCode(roleCode: string | undefined, requiredCode?: string): boolean;
-/**
- * Extracts representative signing/binding continuity data from `credentialSubject.hasCredential`.
- *
- * Compatibility rules:
- * - legacy VC payloads may still carry `hasCredential.material`
- * - newer payloads may carry the same semantic value in `hasCredential.value`
- *   or `hasCredential.identifier.value`
- *
- * @param representativeCredential Candidate representative credential.
- */
-export declare function extractRepresentativeCredentialBinding(representativeCredential: unknown): string | undefined;
-/**
- * Extracts a `did:web:` identifier from a VC-like credential.
- *
- * @param credential Candidate credential.
- */
-export declare function extractDidWebFromCredential(credential: unknown): string | undefined;
-/**
- * Builds a deterministic member DID under an owner DID namespace.
- *
- * @param ownerDidWeb Owner DID.
- * @param memberId Member identifier fragment.
- * @param roleCode Role code fragment.
- */
-export declare function buildMemberDidWeb(ownerDidWeb: string, memberId: string, roleCode: string): string;
-/**
- * Checks whether a member DID is scoped under an owner DID namespace.
- *
- * @param memberDidWeb Candidate member DID.
- * @param ownerDidWeb Owner DID namespace.
- */
-export declare function isMemberDidWebUnderOwner(memberDidWeb: string, ownerDidWeb: string): boolean;
-/**
- * Validates the activation representative policy against organization and representative credentials.
- *
- * @param input.organizationCredential Candidate organization credential.
- * @param input.representativeCredential Candidate representative credential.
- * @param input.requiredRoleCode Required representative role, defaults to `RESPRSN`.
- */
-export declare function validateActivationRepresentativePolicy(input: {
-    organizationCredential?: unknown;
-    representativeCredential?: unknown;
-    requiredRoleCode?: string;
-}): ActivationRepresentativePolicyError[];

package/dist/gdc-common-utils-ts/src/utils/activation-policy.js

@@ -1,218 +0,0 @@
-function asObject(value) {
-    if (!value || typeof value !== 'object')
-        return undefined;
-    return value;
-}
-/**
- * Extracts `credentialSubject` from a VC-like object.
- *
- * @param credential Candidate VC-like object.
- */
-export function extractCredentialSubject(credential) {
-    const obj = asObject(credential);
-    if (!obj)
-        return undefined;
-    const subject = obj.credentialSubject;
-    if (Array.isArray(subject))
-        return asObject(subject[0]);
-    return asObject(subject);
-}
-/**
- * Normalizes a tax identifier into uppercase trimmed form.
- *
- * @param value Raw tax identifier value.
- */
-export function normalizeTaxIdentifier(value) {
-    const normalized = String(value || '').trim().toUpperCase();
-    return normalized || undefined;
-}
-/**
- * Extracts an organization tax id from a VC-like organization credential.
- *
- * @param organizationCredential Candidate organization credential.
- */
-export function extractOrganizationTaxId(organizationCredential) {
-    const subject = extractCredentialSubject(organizationCredential) || {};
-    const identifier = asObject(subject.identifier);
-    return (normalizeTaxIdentifier(subject.taxID)
-        || normalizeTaxIdentifier(subject.taxId)
-        || normalizeTaxIdentifier(identifier?.value)
-        || normalizeTaxIdentifier(subject.identifierValue));
-}
-/**
- * Extracts the `memberOf` tax id from a representative credential.
- *
- * @param representativeCredential Candidate representative credential.
- */
-export function extractRepresentativeMemberOfTaxId(representativeCredential) {
-    const subject = extractCredentialSubject(representativeCredential) || {};
-    const memberOf = asObject(subject.memberOf) || {};
-    const identifier = asObject(memberOf.identifier);
-    return (normalizeTaxIdentifier(memberOf.taxID)
-        || normalizeTaxIdentifier(memberOf.taxId)
-        || normalizeTaxIdentifier(identifier?.value)
-        || normalizeTaxIdentifier(memberOf.identifierValue));
-}
-/**
- * Extracts the representative role code from `credentialSubject.hasOccupation`.
- *
- * @param representativeCredential Candidate representative credential.
- */
-export function extractRepresentativeRoleCode(representativeCredential) {
-    const subject = extractCredentialSubject(representativeCredential) || {};
-    const occupation = subject.hasOccupation;
-    if (typeof occupation === 'string')
-        return occupation.trim() || undefined;
-    if (occupation && typeof occupation === 'object') {
-        const occ = occupation;
-        const idRaw = occ.identifier;
-        if (typeof idRaw === 'string' && idRaw.trim())
-            return idRaw.trim();
-        if (idRaw && typeof idRaw === 'object') {
-            const idObj = idRaw;
-            const idValue = String(idObj.value || '').trim();
-            if (idValue)
-                return idValue;
-        }
-        const idValue = String(occ.value || '').trim();
-        if (idValue)
-            return idValue;
-        const name = String(occ.name || '').trim();
-        if (name)
-            return name;
-    }
-    return undefined;
-}
-/**
- * Checks whether a role code contains the required code, ignoring prefixes such as `SYSTEM|`.
- *
- * @param roleCode Candidate role code.
- * @param requiredCode Required normalized code, defaults to `RESPRSN`.
- */
-export function hasRoleCode(roleCode, requiredCode = 'RESPRSN') {
-    const normalizedRole = String(roleCode || '')
-        .trim()
-        .toUpperCase()
-        .replace(/^.*\|/, '')
-        .replace(/^[|:]+/, '');
-    const normalizedRequired = String(requiredCode || '').trim().toUpperCase();
-    return normalizedRole.includes(normalizedRequired);
-}
-/**
- * Extracts representative signing/binding continuity data from `credentialSubject.hasCredential`.
- *
- * Compatibility rules:
- * - legacy VC payloads may still carry `hasCredential.material`
- * - newer payloads may carry the same semantic value in `hasCredential.value`
- *   or `hasCredential.identifier.value`
- *
- * @param representativeCredential Candidate representative credential.
- */
-export function extractRepresentativeCredentialBinding(representativeCredential) {
-    const subject = extractCredentialSubject(representativeCredential) || {};
-    const credentialData = subject.hasCredential;
-    if (typeof credentialData === 'string')
-        return credentialData.trim() || undefined;
-    if (Array.isArray(credentialData)) {
-        for (const item of credentialData) {
-            const candidate = extractCredentialBindingValue(item);
-            if (candidate)
-                return candidate;
-        }
-    }
-    if (credentialData && typeof credentialData === 'object') {
-        const candidate = extractCredentialBindingValue(credentialData);
-        if (candidate)
-            return candidate;
-    }
-    return undefined;
-}
-function extractCredentialBindingValue(value) {
-    const obj = asObject(value) || {};
-    const identifier = asObject(obj.identifier);
-    const candidate = String(obj.material
-        || obj.value
-        || identifier?.value
-        || '').trim();
-    return candidate || undefined;
-}
-/**
- * Extracts a `did:web:` identifier from a VC-like credential.
- *
- * @param credential Candidate credential.
- */
-export function extractDidWebFromCredential(credential) {
-    const obj = asObject(credential);
-    if (!obj)
-        return undefined;
-    const subject = extractCredentialSubject(obj);
-    const didCandidate = String(subject?.id || obj.id || '').trim();
-    return didCandidate.startsWith('did:web:') ? didCandidate : undefined;
-}
-/**
- * Builds a deterministic member DID under an owner DID namespace.
- *
- * @param ownerDidWeb Owner DID.
- * @param memberId Member identifier fragment.
- * @param roleCode Role code fragment.
- */
-export function buildMemberDidWeb(ownerDidWeb, memberId, roleCode) {
-    return `${String(ownerDidWeb).trim()}:member:${String(memberId).trim()}:${String(roleCode).trim()}`;
-}
-/**
- * Checks whether a member DID is scoped under an owner DID namespace.
- *
- * @param memberDidWeb Candidate member DID.
- * @param ownerDidWeb Owner DID namespace.
- */
-export function isMemberDidWebUnderOwner(memberDidWeb, ownerDidWeb) {
-    const did = String(memberDidWeb || '').trim();
-    const owner = String(ownerDidWeb || '').trim();
-    if (!did.startsWith('did:web:') || !owner.startsWith('did:web:'))
-        return false;
-    return did.startsWith(`${owner}:member:`);
-}
-/**
- * Validates the activation representative policy against organization and representative credentials.
- *
- * @param input.organizationCredential Candidate organization credential.
- * @param input.representativeCredential Candidate representative credential.
- * @param input.requiredRoleCode Required representative role, defaults to `RESPRSN`.
- */
-export function validateActivationRepresentativePolicy(input) {
-    const errors = [];
-    const representativeDid = input.representativeCredential
-        ? extractDidWebFromCredential(input.representativeCredential)
-        : undefined;
-    if (input.representativeCredential && !representativeDid) {
-        errors.push({
-            code: 'MISSING_REPRESENTATIVE_DID_WEB',
-            message: 'ICA-issued representative credential is missing credentialSubject.id did:web.',
-        });
-    }
-    if (!input.representativeCredential)
-        return errors;
-    const orgTax = extractOrganizationTaxId(input.organizationCredential);
-    const repTax = extractRepresentativeMemberOfTaxId(input.representativeCredential);
-    if (orgTax && repTax && orgTax !== repTax) {
-        errors.push({
-            code: 'REPRESENTATIVE_TAXID_MISMATCH',
-            message: 'ICA-issued representative credential memberOf.taxID must match organization credential taxID.',
-        });
-    }
-    const roleCode = extractRepresentativeRoleCode(input.representativeCredential);
-    if (!hasRoleCode(roleCode, input.requiredRoleCode || 'RESPRSN')) {
-        errors.push({
-            code: 'MISSING_REPRESENTATIVE_ROLE_RESPRSN',
-            message: 'ICA-issued representative credential must include Responsible Party role (RESPRSN) in credentialSubject.hasOccupation.',
-        });
-    }
-    const binding = extractRepresentativeCredentialBinding(input.representativeCredential);
-    if (!binding) {
-        errors.push({
-            code: 'MISSING_REPRESENTATIVE_CREDENTIAL_BINDING',
-            message: 'ICA-issued representative credential is missing credentialSubject.hasCredential binding data (material, value, or identifier.value).',
-        });
-    }
-    return errors;
-}

package/dist/gdc-common-utils-ts/src/utils/activation-request.d.ts

@@ -1,81 +0,0 @@
-import { ControllerBindingInput, IdentityBootstrapValidationResult, OrganizationActivationRequest, OrganizationBindingInput } from '../models/identity-bootstrap';
-import { JwkSet } from '../models/jwk';
-/**
- * Builder input for the canonical organization/service activation payload.
- */
-export interface BuildOrganizationActivationRequestInput {
-    /** Canonical VP JWT carrying the activation evidence. */
-    vpToken: string;
-    /** Explicit controller/person key binding for DID publication. */
-    controller?: ControllerBindingInput;
-    /** Optional organization/provider key binding for DID publication. */
-    organization?: OrganizationBindingInput;
-    /** Optional OIDC/OID4VP presentation submission descriptor. */
-    presentationSubmission?: Record<string, unknown>;
-    /** Auxiliary application-specific payload entries. */
-    data?: Array<Record<string, unknown>>;
-    /** @deprecated Legacy compatibility input. Canonical proof must be carried in `vpToken`. */
-    organizationCredential?: unknown;
-    /** @deprecated Legacy compatibility input. Canonical proof must be carried in `vpToken`. */
-    representativeCredential?: unknown;
-}
-export interface BuildControllerBindingInputInput {
-    /** Public DID to publish or bind for the controller/person. */
-    did?: string;
-    /** Additional public alias such as `mailto:`. */
-    sameAs?: string;
-    /** Primary controller signing key. */
-    publicSignKey?: Record<string, unknown>;
-    /** Optional additional public keys, typically DidComm encryption keys. */
-    publicKeys?: JwkSet | {
-        keys: Array<Record<string, unknown>>;
-    } | Array<Record<string, unknown>>;
-}
-export interface BuildOrganizationBindingInputInput {
-    /** Public DID to publish or bind for the organization/provider. */
-    did?: string;
-    /** Public URL associated with the organization identity. */
-    url?: string;
-    /** Primary organization signing key. */
-    publicSignKey?: Record<string, unknown>;
-    /** Optional additional public keys. */
-    publicKeys?: JwkSet | {
-        keys: Array<Record<string, unknown>>;
-    } | Array<Record<string, unknown>>;
-}
-/**
- * Builds the canonical controller/person binding from semantic variables.
- *
- * Use this when your integration starts from variables such as:
- * - `controllerDid`
- * - `controllerEmail` converted to `sameAs`
- * - `publicSignKey`
- * - `publicKeys`
- *
- * so the caller does not have to manually shape `controller.publicKeyJwk` and
- * `controller.jwks`.
- */
-export declare function buildControllerBindingInput(input: BuildControllerBindingInputInput): ControllerBindingInput;
-/**
- * Builds the canonical organization/provider binding from semantic variables.
- */
-export declare function buildOrganizationBindingInput(input: BuildOrganizationBindingInputInput): OrganizationBindingInput;
-/**
- * Builds the canonical `_activate` request payload shared by SDK and GW helpers.
- *
- * The resulting object intentionally preserves deprecated compatibility fields
- * when supplied, so callers can keep legacy flows alive while validators and
- * runtime layers flag that debt explicitly.
- */
-export declare function buildOrganizationActivationRequest(input: BuildOrganizationActivationRequestInput): OrganizationActivationRequest;
-/**
- * Validates the canonical activation request contract.
- *
- * Priority rules:
- * 1. `vp_token` is mandatory as the canonical activation proof.
- * 2. `controller.*` is optional, but if a controller DID/alias is provided then
- *    matching public key material must also be present so a DID Document can be published.
- * 3. Legacy `organizationCredential` and `representativeCredential` are tolerated
- *    only as deprecated compatibility inputs and therefore produce warnings.
- */
-export declare function validateOrganizationActivationRequest(request: OrganizationActivationRequest): IdentityBootstrapValidationResult;