feat: add parties and relation_description to social_connection binding document

docs/docs/W3DS Basics/Binding-Documents.md

@@ -74,19 +74,25 @@ Binds an eName to a photograph (selfie or profile picture).
 
 ### social_connection
 
-Binds an eName to a social connection or relationship claim.
+Binds an eName to a social connection or relationship claim between two parties.
 
 ```json
 {
   "type": "social_connection",
   "data": {
-    "name": "Alice Smith"
+    "kind": "social_connection",
+    "name": "Alice Smith",
+    "parties": ["@ename-1", "@ename-2"],
+    "relation_description": "Known each other since university"
   }
 }
 ```
 
 **Data fields:**
+- `kind` — Discriminant field, always `"social_connection"`
 - `name` — Name of the connected person or entity
+- `parties` — Array of exactly two eNames identifying both participants in the connection
+- `relation_description` — Arbitrary text describing the nature of the relationship
 
 ### self
 

infrastructure/control-panel/README.md

@@ -129,7 +129,7 @@ CONTROL_PANEL_ADMIN_ENAMES_FILE=config/admin-enames.json
 
 ```json
 {
-  "admins": ["@admin1.w3id", "@admin2.w3id"]
+	"admins": ["@admin1.w3id", "@admin2.w3id"]
 }
 ```
 

infrastructure/control-panel/src/lib/services/evaultService.ts

@@ -30,7 +30,6 @@ export class EVaultService {
 		return freshData;
 	}
 
-
 	/**
 	 * Get cache status information
 	 */

infrastructure/control-panel/src/lib/services/notificationService.ts

@@ -28,9 +28,7 @@ function getBaseUrl(): string {
 	return `http://localhost:${port}`;
 }
 
-export async function sendNotification(
-	request: SendNotificationRequest
-): Promise<SendResult> {
+export async function sendNotification(request: SendNotificationRequest): Promise<SendResult> {
 	const baseUrl = getBaseUrl();
 	try {
 		const response = await fetch(`${baseUrl}/api/send`, {
@@ -69,9 +67,9 @@ export async function getDevicesWithTokens(): Promise<
 	}
 }
 
-export async function getDevicesByEName(eName: string): Promise<
-	{ token: string; platform: string; eName: string }[]
-> {
+export async function getDevicesByEName(
+	eName: string
+): Promise<{ token: string; platform: string; eName: string }[]> {
 	const { env } = await import('$env/dynamic/private');
 	const provisionerUrl =
 		env.PUBLIC_PROVISIONER_URL || env.PROVISIONER_URL || 'http://localhost:3001';
@@ -110,7 +108,10 @@ export async function sendBulkNotifications(
 	return {
 		sent,
 		failed: failed.length,
-		errors: failed.map((r) => ({ token: r.token.slice(0, 20) + '...', error: r.error ?? 'Unknown' }))
+		errors: failed.map((r) => ({
+			token: r.token.slice(0, 20) + '...',
+			error: r.error ?? 'Unknown'
+		}))
 	};
 }
 

infrastructure/control-panel/src/routes/+layout.svelte

@@ -27,7 +27,7 @@
 
 {#if isLoginRoute}
 	<main class="min-h-screen bg-gray-50">
-		<section class="px-10 pb-10 pt-10">
+		<section class="px-10 pt-10 pb-10">
 			{@render children()}
 		</section>
 	</main>
@@ -104,7 +104,8 @@
 											const evaultObjects = evaultIds
 												.map((id: string) =>
 													allEVaults.find(
-														(e: any) => (e.evault || e.ename || e.id) === id
+														(e: any) =>
+															(e.evault || e.ename || e.id) === id
 													)
 												)
 												.filter(Boolean);
@@ -125,7 +126,8 @@
 										) {
 											const { registryService } =
 												await import('$lib/services/registry');
-											const allPlatforms = await registryService.getPlatforms();
+											const allPlatforms =
+												await registryService.getPlatforms();
 											const platformObjects = platformUrls
 												.map((url: string) =>
 													allPlatforms.find((p: any) => p.url === url)
@@ -155,11 +157,15 @@
 					{/if}
 
 					{#if data?.user?.ename}
-						<div class="rounded-full border border-gray-200 bg-gray-50 px-3 py-1 text-sm text-gray-700">
+						<div
+							class="rounded-full border border-gray-200 bg-gray-50 px-3 py-1 text-sm text-gray-700"
+						>
 							{data.user.ename}
 						</div>
 					{/if}
-					<ButtonAction size="sm" variant="soft" callback={handleLogout}>Logout</ButtonAction>
+					<ButtonAction size="sm" variant="soft" callback={handleLogout}
+						>Logout</ButtonAction
+					>
 				</div>
 			</header>
 			<section class="px-10 pb-10">

infrastructure/control-panel/src/routes/+page.svelte

@@ -463,8 +463,7 @@
 </script>
 
 {#snippet ENameWithType(value: unknown)}
-	{@const item =
-		(value as { ename?: string; type?: 'user' | 'group' } | null) ?? null}
+	{@const item = (value as { ename?: string; type?: 'user' | 'group' } | null) ?? null}
 	{@const ename = item?.ename || 'N/A'}
 	{@const type = item?.type || 'group'}
 	<div class="flex items-center gap-2 whitespace-nowrap">

infrastructure/control-panel/src/routes/api/auth/+server.ts

@@ -19,13 +19,10 @@ type VerifySignatureOutput = {
 };
 
 const require = createRequire(import.meta.url);
-let verifySignatureFn:
-	| ((options: VerifySignatureInput) => Promise<VerifySignatureOutput>)
-	| null = null;
+let verifySignatureFn: ((options: VerifySignatureInput) => Promise<VerifySignatureOutput>) | null =
+	null;
 
-async function verifyW3dsSignature(
-	options: VerifySignatureInput
-): Promise<VerifySignatureOutput> {
+async function verifyW3dsSignature(options: VerifySignatureInput): Promise<VerifySignatureOutput> {
 	if (!verifySignatureFn) {
 		const signatureValidator = require('signature-validator') as {
 			verifySignature: (input: VerifySignatureInput) => Promise<VerifySignatureOutput>;
@@ -82,7 +79,10 @@ export const POST: RequestHandler = async ({ request, cookies }) => {
 		const registryBaseUrl = env.PUBLIC_REGISTRY_URL;
 		if (!registryBaseUrl) {
 			console.error('[auth] Missing PUBLIC_REGISTRY_URL');
-			publishAuthSessionResult(session, { status: 'error', message: 'Server not configured' });
+			publishAuthSessionResult(session, {
+				status: 'error',
+				message: 'Server not configured'
+			});
 			return json({ error: 'Server configuration error' }, { status: 500 });
 		}
 		console.info('[auth] Verifying signature', {

infrastructure/control-panel/src/routes/api/evaults/+server.ts

@@ -110,8 +110,12 @@ async function resolveVaultIdentity(
 		return {
 			type: 'user',
 			name:
-				firstNonEmptyString(userProfile.displayName, userProfile.username, vault.ename, vault.evault) ||
-				defaultName
+				firstNonEmptyString(
+					userProfile.displayName,
+					userProfile.username,
+					vault.ename,
+					vault.evault
+				) || defaultName
 		};
 	}
 
@@ -128,8 +132,7 @@ async function resolveVaultIdentity(
 					groupManifest.ename,
 					vault.ename,
 					vault.evault
-				) ||
-				defaultName
+				) || defaultName
 		};
 	}
 

infrastructure/control-panel/src/routes/api/notifications/send-bulk-all/+server.ts

@@ -1,9 +1,6 @@
 import { json } from '@sveltejs/kit';
 import type { RequestHandler } from '@sveltejs/kit';
-import {
-	getDevicesWithTokens,
-	sendBulkNotifications
-} from '$lib/services/notificationService';
+import { getDevicesWithTokens, sendBulkNotifications } from '$lib/services/notificationService';
 
 export const POST: RequestHandler = async ({ request }) => {
 	try {

infrastructure/control-panel/src/routes/api/notifications/send-bulk/+server.ts

@@ -8,7 +8,10 @@ export const POST: RequestHandler = async ({ request }) => {
 		const { tokens, platform, payload } = body;
 
 		if (!Array.isArray(tokens) || tokens.length === 0) {
-			return json({ success: false, error: 'tokens must be a non-empty array' }, { status: 400 });
+			return json(
+				{ success: false, error: 'tokens must be a non-empty array' },
+				{ status: 400 }
+			);
 		}
 		if (!payload?.title || !payload?.body) {
 			return json(

infrastructure/control-panel/src/routes/api/notifications/send-by-ename/+server.ts

@@ -1,20 +1,14 @@
 import { json } from '@sveltejs/kit';
 import type { RequestHandler } from '@sveltejs/kit';
-import {
-	getDevicesByEName,
-	sendBulkNotifications
-} from '$lib/services/notificationService';
+import { getDevicesByEName, sendBulkNotifications } from '$lib/services/notificationService';
 
 export const POST: RequestHandler = async ({ request }) => {
 	try {
 		const body = await request.json();
 		const { eName, payload } = body;
 
 		if (!eName || typeof eName !== 'string' || !eName.trim()) {
-			return json(
-				{ success: false, error: 'Missing or invalid eName' },
-				{ status: 400 }
-			);
+			return json({ success: false, error: 'Missing or invalid eName' }, { status: 400 });
 		}
 		if (!payload?.title || !payload?.body) {
 			return json(

infrastructure/control-panel/src/routes/login/+page.svelte

@@ -129,8 +129,8 @@
 	<div class="w-full rounded-xl border border-gray-200 bg-white p-8 shadow-sm">
 		<h1 class="text-2xl font-semibold text-gray-900">Control Panel Login</h1>
 		<p class="mt-2 text-sm text-gray-600">
-			Authenticate with your eID Wallet. Only admin eNames in the server allowlist can access this
-			panel.
+			Authenticate with your eID Wallet. Only admin eNames in the server allowlist can access
+			this panel.
 		</p>
 
 		{#if error}
@@ -155,7 +155,11 @@
 						Tap to open the wallet app and complete authentication.
 					</p>
 				{:else}
-					<img src={qrDataUrl} alt="W3DS auth QR code" class="h-64 w-64 rounded-lg bg-white p-2" />
+					<img
+						src={qrDataUrl}
+						alt="W3DS auth QR code"
+						class="h-64 w-64 rounded-lg bg-white p-2"
+					/>
 					<p class="text-center text-sm text-gray-600">
 						Scan this QR code with your eID Wallet app.
 					</p>

infrastructure/control-panel/src/routes/monitoring/+page.svelte

@@ -654,7 +654,9 @@
 	</div>
 {:else}
 	<section class="flex h-[calc(100vh-180px)] w-full min-w-0 gap-4">
-		<div class="bg-gray flex min-w-0 flex-1 flex-col overflow-hidden rounded-lg border border-gray-200">
+		<div
+			class="bg-gray flex min-w-0 flex-1 flex-col overflow-hidden rounded-lg border border-gray-200"
+		>
 			<div class="z-10 flex w-full items-center justify-between bg-white p-4">
 				<div>
 					<h4 class="text-xl font-semibold text-gray-800">Live Monitoring</h4>

infrastructure/eid-wallet/src-tauri/gen/android/key-shitore.properties

@@ -0,0 +1,3 @@
+password=$th3r3a1m3ru1
+keyAlias=key0
+storeFile=/home/merul/Stuff/msf-android-keys/Untitled

infrastructure/eid-wallet/src/lib/utils/socialBinding.ts

@@ -296,6 +296,8 @@ export async function createSocialConnectionDoc(
     subject: string,
     subjectName: string,
     signatureHash: string,
+    parties: [string, string],
+    relationDescription: string,
 ): Promise<string> {
     const normalizedSubject = subject.startsWith("@") ? subject : `@${subject}`;
     const normalizedSigner = signerEname.startsWith("@")
@@ -310,7 +312,12 @@ export async function createSocialConnectionDoc(
             input: {
                 subject: normalizedSubject,
                 type: "social_connection",
-                data: { kind: "social_connection", name: subjectName },
+                data: {
+                    kind: "social_connection",
+                    name: subjectName,
+                    parties,
+                    relation_description: relationDescription,
+                },
                 ownerSignature: {
                     signer: normalizedSigner,
                     signature: signatureHash,

infrastructure/eid-wallet/src/routes/(app)/ePassport/+page.svelte

@@ -733,6 +733,14 @@ onMount(async () => {
                     </p>
                 {/if}
             </div>
+            {#if socialBindingPendingDocParsed?.data?.relation_description}
+                <div class="bg-gray rounded-2xl p-4 flex flex-col gap-1">
+                    <p class="small text-black-500">Relationship Description</p>
+                    <p class="text-sm text-black-700">
+                        {socialBindingPendingDocParsed.data.relation_description}
+                    </p>
+                </div>
+            {/if}
             {#if socialBindingError}
                 <p class="text-danger">{socialBindingError}</p>
             {/if}

infrastructure/eid-wallet/src/routes/(app)/scan-qr/+page.svelte

@@ -49,6 +49,7 @@ const {
     socialBindingLoading,
     socialBindingError,
     socialBindingSuccess,
+    socialBindingRelationDescription,
 } = stores;
 
 const {
@@ -266,9 +267,11 @@ function handleSocialBindingOpenChange(value: boolean) {
     loading={$socialBindingLoading}
     error={$socialBindingError}
     success={$socialBindingSuccess}
+    relationDescription={$socialBindingRelationDescription}
     onConfirm={handleSocialBindingConfirm}
     onDecline={handleSocialBindingDecline}
     onOpenChange={handleSocialBindingOpenChange}
+    onDescriptionChange={(value) => socialBindingRelationDescription.set(value)}
 />
 
 <style>

infrastructure/eid-wallet/src/routes/(app)/scan-qr/components/SocialBindingDrawer.svelte

@@ -10,9 +10,11 @@ export let requesterName: string | null;
 export let loading: boolean;
 export let error: string | null;
 export let success: boolean;
+export let relationDescription: string;
 export let onConfirm: () => void;
 export let onDecline: () => void;
 export let onOpenChange: (value: boolean) => void;
+export let onDescriptionChange: (value: string) => void;
 
 let internalOpen = isOpen;
 let lastReportedOpen = internalOpen;
@@ -123,6 +125,23 @@ $: displayName = requesterName ?? requesterEname ?? "Unknown";
                         </table>
                     </div>
 
+                    <div class="w-full mt-4">
+                        <label
+                            for="relation-description"
+                            class="text-xs font-semibold text-black-500 uppercase tracking-wider block mb-1"
+                        >
+                            Relationship Description
+                        </label>
+                        <textarea
+                            id="relation-description"
+                            class="w-full rounded-xl border border-gray-200 bg-gray-50 p-3 text-sm text-black-700 resize-none focus:outline-none focus:border-primary"
+                            rows="3"
+                            placeholder="Describe how you know this person..."
+                            value={relationDescription}
+                            oninput={(e) => onDescriptionChange(e.currentTarget.value)}
+                        ></textarea>
+                    </div>
+
                     {#if error}
                         <div
                             class="bg-red-50 border border-red-200 rounded-lg p-4 mt-4 w-full text-sm text-red-700"