@cheqd/did-provider-cheqd 3.6.16 → 3.7.0-develop.1

package/build/cjs/did-manager/cheqd-did-provider.d.ts

@@ -6,6 +6,7 @@ import { DIDDocument } from 'did-resolver';
 import { IIdentifier, IKey, IService } from '@veramo/core';
 import { AbstractIdentifierProvider } from '@veramo/did-manager';
 import { EnglishMnemonic as _ } from '@cosmjs/crypto';
+import { SignInfo } from '@cheqd/ts-proto/cheqd/did/v2/index.js';
 import { LitCompatibleCosmosChain, LitNetwork } from '../dkg-threshold/lit-protocol.js';
 import { IContext } from '../agent/ICheqd.js';
 export declare const DefaultRPCUrls: {
@@ -50,10 +51,69 @@ export type TImportableEd25519Key = Required<Pick<IKey, 'publicKeyHex' | 'privat
     kid: TImportableEd25519Key['publicKeyHex'];
     type: 'Ed25519';
 };
+export declare class CheqdProviderError extends Error {
+    readonly errorCode: string;
+    constructor(message: string, errorCode: string);
+}
+export declare const CheqdProviderErrorCodes: {
+    readonly DeactivatedController: "DeactivatedController";
+    readonly UnresolvedDID: "UnresolvedDID";
+    readonly EmptyVerificationMethod: "EmptyVerificationMethod";
+};
+export type TPublicKeyEd25519 = Required<Pick<IKey, 'publicKeyHex'>> & {
+    kid: TImportableEd25519Key['publicKeyHex'];
+    type: 'Ed25519';
+};
 export type TSupportedKeyType = 'Ed25519' | 'Secp256k1';
+export interface IKeyWithController extends IKey {
+    controller?: string;
+}
+export interface ICheqdIDentifier extends IIdentifier {
+    controllerKeyRefs?: string[];
+    controllerKeys?: IKeyWithController[];
+}
 export declare class EnglishMnemonic extends _ {
     static readonly _mnemonicMatcher: RegExp;
 }
+export declare class CheqdSignInfoProvider {
+    readonly context: IContext;
+    signInfos: SignInfo[];
+    publicKeyHexs: string[];
+    controllers: string[];
+    controllerKeys: IKeyWithController[];
+    controllerKeyRefs: string[];
+    constructor(context: IContext);
+    setPublicKeyHexs(publicKeyHexs: string[]): void;
+    setSignInfos(signInfos: SignInfo[]): void;
+    setControllers(controllers: string[]): void;
+    getSignInfos(): SignInfo[];
+    getPublicKeyHexs(): string[];
+    getControllerKeys(): IKeyWithController[];
+    getControllerKeyRefs(): string[];
+    getControllerKeysForSigning(): IKeyWithController[];
+    compilePublicKeyHexs(controllers: string[], options: {
+        publicKeyHexs?: string[];
+    }): Promise<void>;
+    compileSignInfos(payload: Uint8Array, controllers: string[]): Promise<void>;
+    updateIdentifierCompileSignInfos(didDocument: DIDDocument, options: {
+        versionId?: string;
+        publicKeyHexs?: string[];
+    }): Promise<void>;
+    deactivateIdentifierCompileSignInfos(didDocument: DIDDocument, options: {
+        publicKeyHexs?: string[];
+        versionId?: string;
+    }): Promise<void>;
+    resourceCreateCompileSignInfos(did: string, resourcePayload: ResourcePayload, options: {
+        publicKeyHexs?: string[];
+    }): Promise<void>;
+    keysAreInKMS(publicKeys: string[]): Promise<{
+        placed: boolean;
+        error: string;
+    } | {
+        placed: boolean;
+        error?: undefined;
+    }>;
+}
 /**
  * {@link @veramo/did-manager#DIDManager} identifier provider for `did:cheqd` identifiers.
  * @public
@@ -97,16 +157,16 @@ export declare class CheqdDIDProvider extends AbstractIdentifierProvider {
         document: DIDDocument;
         options: {
             kms: string;
-            keys?: TImportableEd25519Key[];
+            keys?: TImportableEd25519Key[] | TPublicKeyEd25519[];
             versionId?: string;
             fee?: DidStdFee;
         };
-    }, context: IContext): Promise<IIdentifier>;
+    }, context: IContext): Promise<ICheqdIDentifier>;
     deactivateIdentifier({ did, document, options, }: {
         did: string;
         document: DIDDocument;
         options: {
-            keys?: TImportableEd25519Key[];
+            keys?: TImportableEd25519Key[] | TPublicKeyEd25519[];
             fee?: DidStdFee;
             versionId?: string;
         };
@@ -114,7 +174,7 @@ export declare class CheqdDIDProvider extends AbstractIdentifierProvider {
     createResource({ options, }: {
         options: {
             payload: ResourcePayload;
-            signInputs?: ISignInputs[];
+            signInputs?: ISignInputs[] | TPublicKeyEd25519[];
             kms?: string;
             fee?: DidStdFee;
         };

package/build/cjs/did-manager/cheqd-did-provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cheqd-did-provider.d.ts","sourceRoot":"","sources":["../../../src/did-manager/cheqd-did-provider.ts"],"names":[],"mappings":"AAIA,OAAO,EASN,SAAS,EACT,WAAW,EAEX,YAAY,EACZ,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AACtF,OAAO,EAAE,WAAW,EAAE,IAAI,EAAkD,MAAM,uBAAuB,CAAC;AAC1G,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE/D,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EACN,WAAW,EACX,IAAI,EACJ,QAAQ,EAMR,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAGjE,OAAO,EAAE,eAAe,IAAI,CAAC,EAAW,MAAM,gBAAgB,CAAC;AAI/D,OAAO,EACN,wBAAwB,EAExB,UAAU,EAEV,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAI9C,eAAO,MAAM,cAAc;;;CAGjB,CAAC;AAEX,eAAO,MAAM,eAAe;;;CAGlB,CAAC;AAEX,eAAO,MAAM,yBAAyB;;;CAG5B,CAAC;AAEX,eAAO,MAAM,uCAAuC;;;CAG1C,CAAC;AAEX,eAAO,MAAM,kCAAkC;;;;CAIrC,CAAC;AAEX,eAAO,MAAM,8BAA8B;;;;CAIjC,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,OAAO,cAAc,CAAC,CAAC;AAEjF,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,OAAO,eAAe,CAAC,CAAC;AAEpF,MAAM,MAAM,iCAAiC,GAC5C,CAAC,OAAO,kCAAkC,CAAC,CAAC,MAAM,OAAO,kCAAkC,CAAC,CAAC;AAE9F,MAAM,MAAM,sCAAsC,GACjD,CAAC,OAAO,uCAAuC,CAAC,CAAC,MAAM,OAAO,uCAAuC,CAAC,CAAC;AAExG,MAAM,MAAM,6BAA6B,GACxC,CAAC,OAAO,8BAA8B,CAAC,CAAC,MAAM,OAAO,8BAA8B,CAAC,CAAC;AAEtF,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,wBAAwB,EAAE,MAAM,CAAC,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAExF,MAAM,MAAM,eAAe,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;AAEhE,MAAM,MAAM,6BAA6B,GAAG,eAAe,GAAG;IAAE,YAAY,EAAE,iCAAiC,CAAA;CAAE,CAAC;AAElH,MAAM,MAAM,qBAAqB,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,GAAG,eAAe,CAAC,CAAC,GAAG;IAC5F,GAAG,EAAE,qBAAqB,CAAC,cAAc,CAAC,CAAC;IAC3C,IAAI,EAAE,SAAS,CAAC;CAChB,CAAC;AAMF,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,WAAW,CAAC;AAExD,qBAAa,eAAgB,SAAQ,CAAC;IACrC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,SAAwB;CACxD;AAED;;;GAGG;AACH,qBAAa,gBAAiB,SAAQ,0BAA0B;IAC/D,OAAO,CAAC,UAAU,CAAS;IAC3B,SAAgB,OAAO,EAAE,YAAY,CAAC;IACtC,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA2D;IAC7F,SAAgB,UAAU,EAAE;QAC3B,KAAK,EAAE,OAAO,CAAC,wBAAwB,EAAE,cAAc,GAAG,cAAc,CAAC,CAAC;QAC1E,OAAO,EAAE,UAAU,CAAC;KACpB,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,CAAW;IACvB,OAAO,CAAC,GAAG,CAAC,CAAY;IAExB,MAAM,CAAC,QAAQ,CAAC,eAAe,WAAkC;gBAErD,OAAO,EAAE;QACpB,UAAU,EAAE,MAAM,CAAC;QACnB,eAAe,EAAE,MAAM,CAAC;QACxB,WAAW,CAAC,EAAE,YAAY,CAAC;QAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE;YACZ,KAAK,CAAC,EAAE,OAAO,CAAC,wBAAwB,EAAE,cAAc,GAAG,cAAc,CAAC,CAAC;YAC3E,OAAO,CAAC,EAAE,UAAU,CAAC;SACrB,CAAC;KACF;IAuBK,iBAAiB,IAAI,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC;YAI5C,WAAW;IA0BnB,gBAAgB,CACrB,EACC,GAAG,EACH,OAAO,GACP,EAAE;QACF,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,EAAE;YAAE,QAAQ,EAAE,WAAW,CAAC;YAAC,IAAI,CAAC,EAAE,qBAAqB,EAAE,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAC;YAAC,GAAG,CAAC,EAAE,SAAS,CAAA;SAAE,CAAC;KACxG,EACD,OAAO,EAAE,QAAQ,GACf,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IA6DnC,gBAAgB,CACrB,EACC,GAAG,EACH,QAAQ,EACR,OAAO,GACP,EAAE;QACF,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,EAAE,WAAW,CAAC;QACtB,OAAO,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,qBAAqB,EAAE,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAC;YAAC,GAAG,CAAC,EAAE,SAAS,CAAA;SAAE,CAAC;KAC9F,EACD,OAAO,EAAE,QAAQ,GACf,OAAO,CAAC,WAAW,CAAC;IAqEjB,oBAAoB,CACzB,EACC,GAAG,EACH,QAAQ,EACR,OAAO,GACP,EAAE;QACF,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,EAAE,WAAW,CAAC;QACtB,OAAO,EAAE;YAAE,IAAI,CAAC,EAAE,qBAAqB,EAAE,CAAC;YAAC,GAAG,CAAC,EAAE,SAAS,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KACjF,EACD,OAAO,EAAE,QAAQ,GACf,OAAO,CAAC,OAAO,CAAC;IA+Bb,cAAc,CACnB,EACC,OAAO,GACP,EAAE;QAAE,OAAO,EAAE;YAAE,OAAO,EAAE,eAAe,CAAC;YAAC,UAAU,CAAC,EAAE,WAAW,EAAE,CAAC;YAAC,GAAG,CAAC,EAAE,MAAM,CAAC;YAAC,GAAG,CAAC,EAAE,SAAS,CAAA;SAAE,CAAA;KAAE,EACvG,OAAO,EAAE,QAAQ,GACf,OAAO,CAAC,OAAO,CAAC;IAkEb,gBAAgB,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IAO5E,MAAM,CACX,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;QAAE,UAAU,EAAE,WAAW,CAAC;QAAC,GAAG,EAAE,IAAI,CAAC;QAAC,OAAO,CAAC,EAAE,GAAG,CAAA;KAAE,EACnF,OAAO,EAAE,QAAQ,GACf,OAAO,CAAC,GAAG,CAAC;IAIT,UAAU,CACf,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;QAAE,UAAU,EAAE,WAAW,CAAC;QAAC,OAAO,EAAE,QAAQ,CAAC;QAAC,OAAO,CAAC,EAAE,GAAG,CAAA;KAAE,EAC/F,OAAO,EAAE,QAAQ,GACf,OAAO,CAAC,GAAG,CAAC;IAIT,SAAS,CACd,IAAI,EAAE;QACL,UAAU,EAAE,WAAW,CAAC;QACxB,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,CAAC,EAAE,GAAG,CAAC;KACd,EACD,OAAO,EAAE,QAAQ,GACf,OAAO,CAAC,GAAG,CAAC;IAIT,aAAa,CAClB,IAAI,EAAE;QACL,UAAU,EAAE,WAAW,CAAC;QACxB,EAAE,EAAE,MAAM,CAAC;QACX,OAAO,CAAC,EAAE,GAAG,CAAC;KACd,EACD,OAAO,EAAE,QAAQ,GACf,OAAO,CAAC,GAAG,CAAC;IAIT,kBAAkB,CAAC,IAAI,EAAE;QAC9B,gBAAgB,EAAE,MAAM,CAAC;QACzB,MAAM,EAAE,IAAI,CAAC;QACb,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,UAAU,CAAC;QACrB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,cAAc,CAAC,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC,iBAAiB,CAAC;YA+BhB,WAAW;YAsBX,6BAA6B;CAa3C;AAED,wBAAsB,kCAAkC,CACvD,UAAU,EAAE,WAAW,EACvB,SAAS,EAAE,MAAM,GACf,OAAO,CAAC,UAAU,CAAC,CAkBrB;AAED,wBAAsB,sCAAsC,CAC3D,UAAU,EAAE,WAAW,EACvB,SAAS,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,UAAU,CAAC,CAOrB"}
+{"version":3,"file":"cheqd-did-provider.d.ts","sourceRoot":"","sources":["../../../src/did-manager/cheqd-did-provider.ts"],"names":[],"mappings":"AAIA,OAAO,EASN,SAAS,EACT,WAAW,EAEX,YAAY,EACZ,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AACtF,OAAO,EAAE,WAAW,EAAE,IAAI,EAAkD,MAAM,uBAAuB,CAAC;AAC1G,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE/D,OAAO,EAAE,WAAW,EAAuB,MAAM,cAAc,CAAC;AAChE,OAAO,EACN,WAAW,EACX,IAAI,EACJ,QAAQ,EAMR,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAGjE,OAAO,EAAE,eAAe,IAAI,CAAC,EAAW,MAAM,gBAAgB,CAAC;AAE/D,OAAO,EAAsD,QAAQ,EAAE,MAAM,uCAAuC,CAAC;AAErH,OAAO,EACN,wBAAwB,EAExB,UAAU,EAEV,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAK9C,eAAO,MAAM,cAAc;;;CAGjB,CAAC;AAEX,eAAO,MAAM,eAAe;;;CAGlB,CAAC;AAEX,eAAO,MAAM,yBAAyB;;;CAG5B,CAAC;AAEX,eAAO,MAAM,uCAAuC;;;CAG1C,CAAC;AAEX,eAAO,MAAM,kCAAkC;;;;CAIrC,CAAC;AAEX,eAAO,MAAM,8BAA8B;;;;CAIjC,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,OAAO,cAAc,CAAC,CAAC;AAEjF,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,OAAO,eAAe,CAAC,CAAC;AAEpF,MAAM,MAAM,iCAAiC,GAC5C,CAAC,OAAO,kCAAkC,CAAC,CAAC,MAAM,OAAO,kCAAkC,CAAC,CAAC;AAE9F,MAAM,MAAM,sCAAsC,GACjD,CAAC,OAAO,uCAAuC,CAAC,CAAC,MAAM,OAAO,uCAAuC,CAAC,CAAC;AAExG,MAAM,MAAM,6BAA6B,GACxC,CAAC,OAAO,8BAA8B,CAAC,CAAC,MAAM,OAAO,8BAA8B,CAAC,CAAC;AAEtF,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,wBAAwB,EAAE,MAAM,CAAC,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAExF,MAAM,MAAM,eAAe,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;AAEhE,MAAM,MAAM,6BAA6B,GAAG,eAAe,GAAG;IAAE,YAAY,EAAE,iCAAiC,CAAA;CAAE,CAAC;AAElH,MAAM,MAAM,qBAAqB,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,GAAG,eAAe,CAAC,CAAC,GAAG;IAC5F,GAAG,EAAE,qBAAqB,CAAC,cAAc,CAAC,CAAC;IAC3C,IAAI,EAAE,SAAS,CAAC;CAChB,CAAC;AAGF,qBAAa,kBAAmB,SAAQ,KAAK;aACC,SAAS,EAAE,MAAM;gBAAlD,OAAO,EAAE,MAAM,EAAkB,SAAS,EAAE,MAAM;CAI9D;AAED,eAAO,MAAM,uBAAuB;;;;CAI1B,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,GAAG;IACtE,GAAG,EAAE,qBAAqB,CAAC,cAAc,CAAC,CAAC;IAC3C,IAAI,EAAE,SAAS,CAAC;CAChB,CAAC;AAMF,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,WAAW,CAAC;AAExD,MAAM,WAAW,kBAAmB,SAAQ,IAAI;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,gBAAiB,SAAQ,WAAW;IAEpD,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAA;IAE5B,cAAc,CAAC,EAAE,kBAAkB,EAAE,CAAA;CACrC;AAED,qBAAa,eAAgB,SAAQ,CAAC;IACrC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,SAAwB;CACxD;AAED,qBAAa,qBAAqB;IACjC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;IAC3B,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,EAAE,kBAAkB,EAAE,CAAC;IACrC,iBAAiB,EAAE,MAAM,EAAE,CAAC;gBAEf,OAAO,EAAE,QAAQ;IAS9B,gBAAgB,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,IAAI;IAI/C,YAAY,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,IAAI;IAIzC,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,IAAI;IAI3C,YAAY,IAAI,QAAQ,EAAE;IAI1B,gBAAgB,IAAI,MAAM,EAAE;IAI5B,iBAAiB,IAAI,kBAAkB,EAAE;IAIzC,oBAAoB,IAAI,MAAM,EAAE;IAIhC,2BAA2B,IAAI,kBAAkB,EAAE;IAW7C,oBAAoB,CACzB,WAAW,EAAE,MAAM,EAAE,EACrB,OAAO,EAAE;QACR,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;KACzB,GACE,OAAO,CAAC,IAAI,CAAC;IAYX,gBAAgB,CACrB,OAAO,EAAE,UAAU,EACnB,WAAW,EAAE,MAAM,EAAE,GAClB,OAAO,CAAC,IAAI,CAAC;IA0EX,gCAAgC,CACrC,WAAW,EAAE,WAAW,EACxB,OAAO,EAAE;QACR,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;KACzB,GACE,OAAO,CAAC,IAAI,CAAC;IAgCX,oCAAoC,CACzC,WAAW,EAAE,WAAW,EACxB,OAAO,EAAE;QACR,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;QACzB,SAAS,CAAC,EAAE,MAAM,CAAA;KAClB,GAAG,OAAO,CAAC,IAAI,CAAC;IA6BZ,8BAA8B,CACnC,GAAG,EAAE,MAAM,EACX,eAAe,EAAE,eAAe,EAChC,OAAO,EAAE;QACR,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;KACzB,GAAG,OAAO,CAAC,IAAI,CAAC;IA+BZ,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE;;;;;;;CAgBvC;AAED;;;GAGG;AACH,qBAAa,gBAAiB,SAAQ,0BAA0B;IAC/D,OAAO,CAAC,UAAU,CAAS;IAC3B,SAAgB,OAAO,EAAE,YAAY,CAAC;IACtC,SAAgB,MAAM,EAAE,MAAM,CAAC;IAC/B,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA2D;IAC7F,SAAgB,UAAU,EAAE;QAC3B,KAAK,EAAE,OAAO,CAAC,wBAAwB,EAAE,cAAc,GAAG,cAAc,CAAC,CAAC;QAC1E,OAAO,EAAE,UAAU,CAAC;KACpB,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,CAAW;IACvB,OAAO,CAAC,GAAG,CAAC,CAAY;IAExB,MAAM,CAAC,QAAQ,CAAC,eAAe,WAAkC;gBAErD,OAAO,EAAE;QACpB,UAAU,EAAE,MAAM,CAAC;QACnB,eAAe,EAAE,MAAM,CAAC;QACxB,WAAW,CAAC,EAAE,YAAY,CAAC;QAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE;YACZ,KAAK,CAAC,EAAE,OAAO,CAAC,wBAAwB,EAAE,cAAc,GAAG,cAAc,CAAC,CAAC;YAC3E,OAAO,CAAC,EAAE,UAAU,CAAC;SACrB,CAAC;KACF;IAuBK,iBAAiB,IAAI,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC;YAI5C,WAAW;IA0BnB,gBAAgB,CACrB,EACC,GAAG,EACH,OAAO,GACP,EAAE;QACF,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,EAAE;YAAE,QAAQ,EAAE,WAAW,CAAC;YAAC,IAAI,CAAC,EAAE,qBAAqB,EAAE,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAC;YAAC,GAAG,CAAC,EAAE,SAAS,CAAA;SAAE,CAAC;KACxG,EACD,OAAO,EAAE,QAAQ,GACf,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAyEnC,gBAAgB,CACrB,EACC,GAAG,EACH,QAAQ,EACR,OAAO,GACP,EAAE;QACF,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,EAAE,WAAW,CAAC;QACtB,OAAO,EAAE;YACP,GAAG,EAAE,MAAM,CAAC;YACZ,IAAI,CAAC,EAAE,qBAAqB,EAAE,GAAG,iBAAiB,EAAE,CAAC;YACrD,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,GAAG,CAAC,EAAE,SAAS,CAAC;SAChB,CAAC;KACH,EACD,OAAO,EAAE,QAAQ,GACf,OAAO,CAAC,gBAAgB,CAAC;IA6GtB,oBAAoB,CACzB,EACC,GAAG,EACH,QAAQ,EACR,OAAO,GACP,EAAE;QACF,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,EAAE,WAAW,CAAC;QACtB,OAAO,EAAE;YACR,IAAI,CAAC,EAAE,qBAAqB,EAAE,GAAG,iBAAiB,EAAE,CAAC;YACrD,GAAG,CAAC,EAAE,SAAS,CAAC;YAChB,SAAS,CAAC,EAAE,MAAM,CAAA;SAClB,CAAC;KACF,EACD,OAAO,EAAE,QAAQ,GACf,OAAO,CAAC,OAAO,CAAC;IAwDb,cAAc,CACnB,EACC,OAAO,GACP,EAAE;QAAE,OAAO,EAAE;YACb,OAAO,EAAE,eAAe,CAAC;YACzB,UAAU,CAAC,EAAE,WAAW,EAAE,GAAG,iBAAiB,EAAE,CAAC;YACjD,GAAG,CAAC,EAAE,MAAM,CAAC;YACb,GAAG,CAAC,EAAE,SAAS,CAAA;SACf,CAAA;KAAE,EACH,OAAO,EAAE,QAAQ,GACf,OAAO,CAAC,OAAO,CAAC;IAmFb,gBAAgB,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IAO5E,MAAM,CACX,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;QAAE,UAAU,EAAE,WAAW,CAAC;QAAC,GAAG,EAAE,IAAI,CAAC;QAAC,OAAO,CAAC,EAAE,GAAG,CAAA;KAAE,EACnF,OAAO,EAAE,QAAQ,GACf,OAAO,CAAC,GAAG,CAAC;IAIT,UAAU,CACf,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;QAAE,UAAU,EAAE,WAAW,CAAC;QAAC,OAAO,EAAE,QAAQ,CAAC;QAAC,OAAO,CAAC,EAAE,GAAG,CAAA;KAAE,EAC/F,OAAO,EAAE,QAAQ,GACf,OAAO,CAAC,GAAG,CAAC;IAIT,SAAS,CACd,IAAI,EAAE;QACL,UAAU,EAAE,WAAW,CAAC;QACxB,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,CAAC,EAAE,GAAG,CAAC;KACd,EACD,OAAO,EAAE,QAAQ,GACf,OAAO,CAAC,GAAG,CAAC;IAIT,aAAa,CAClB,IAAI,EAAE;QACL,UAAU,EAAE,WAAW,CAAC;QACxB,EAAE,EAAE,MAAM,CAAC;QACX,OAAO,CAAC,EAAE,GAAG,CAAC;KACd,EACD,OAAO,EAAE,QAAQ,GACf,OAAO,CAAC,GAAG,CAAC;IAIT,kBAAkB,CAAC,IAAI,EAAE;QAC9B,gBAAgB,EAAE,MAAM,CAAC;QACzB,MAAM,EAAE,IAAI,CAAC;QACb,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,UAAU,CAAC;QACrB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,cAAc,CAAC,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC,iBAAiB,CAAC;YA+BhB,WAAW;YAsBX,6BAA6B;CAc3C;AAED,wBAAsB,kCAAkC,CACvD,UAAU,EAAE,WAAW,EACvB,SAAS,EAAE,MAAM,GACf,OAAO,CAAC,UAAU,CAAC,CAkBrB;AAED,wBAAsB,sCAAsC,CAC3D,UAAU,EAAE,WAAW,EACvB,SAAS,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,UAAU,CAAC,CAOrB"}

package/build/cjs/did-manager/cheqd-did-provider.js

@@ -3,7 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createMsgDeactivateDidDocPayloadToSign = exports.createMsgCreateDidDocPayloadToSign = exports.CheqdDIDProvider = exports.EnglishMnemonic = exports.DefaultStatusList2021Encodings = exports.DefaultStatusList2021ResourceTypes = exports.DefaultStatusList2021StatusPurposeTypes = exports.DefaultDkgSupportedChains = exports.DefaultRESTUrls = exports.DefaultRPCUrls = void 0;
+exports.createMsgDeactivateDidDocPayloadToSign = exports.createMsgCreateDidDocPayloadToSign = exports.CheqdDIDProvider = exports.CheqdSignInfoProvider = exports.EnglishMnemonic = exports.CheqdProviderErrorCodes = exports.CheqdProviderError = exports.DefaultStatusList2021Encodings = exports.DefaultStatusList2021ResourceTypes = exports.DefaultStatusList2021StatusPurposeTypes = exports.DefaultDkgSupportedChains = exports.DefaultRESTUrls = exports.DefaultRPCUrls = void 0;
 /* eslint-disable @typescript-eslint/no-explicit-any, @typescript-eslint/no-unused-vars, @typescript-eslint/no-non-null-assertion */
 // any is used for extensibility
 // unused vars are kept by convention
@@ -21,6 +21,7 @@ const uint8arrays_1 = require("uint8arrays");
 const index_js_2 = require("@cheqd/ts-proto/cheqd/did/v2/index.js");
 const uuid_1 = require("uuid");
 const lit_protocol_js_1 = require("../dkg-threshold/lit-protocol.js");
+const helpers_js_1 = require("../utils/helpers.js");
 const debug = (0, debug_1.default)('veramo:did-provider-cheqd');
 exports.DefaultRPCUrls = {
     [sdk_1.CheqdNetwork.Mainnet]: 'https://rpc.cheqd.net',
@@ -48,10 +49,227 @@ exports.DefaultStatusList2021Encodings = {
     base64url: 'base64url',
     hex: 'hex',
 };
+class CheqdProviderError extends Error {
+    errorCode;
+    constructor(message, errorCode) {
+        super(message);
+        this.errorCode = errorCode;
+        this.errorCode = errorCode;
+    }
+}
+exports.CheqdProviderError = CheqdProviderError;
+exports.CheqdProviderErrorCodes = {
+    DeactivatedController: 'DeactivatedController',
+    UnresolvedDID: 'UnresolvedDID',
+    EmptyVerificationMethod: 'EmptyVerificationMethod'
+};
 class EnglishMnemonic extends crypto_1.EnglishMnemonic {
     static _mnemonicMatcher = /^[a-z]+( [a-z]+)*$/;
 }
 exports.EnglishMnemonic = EnglishMnemonic;
+class CheqdSignInfoProvider {
+    context;
+    signInfos;
+    publicKeyHexs;
+    controllers;
+    controllerKeys;
+    controllerKeyRefs;
+    constructor(context) {
+        this.signInfos = [];
+        this.publicKeyHexs = [];
+        this.controllerKeys = [];
+        this.controllerKeyRefs = [];
+        this.controllers = [];
+        this.context = context;
+    }
+    setPublicKeyHexs(publicKeyHexs) {
+        this.publicKeyHexs = publicKeyHexs;
+    }
+    setSignInfos(signInfos) {
+        this.signInfos = signInfos;
+    }
+    setControllers(controllers) {
+        this.controllers = controllers;
+    }
+    getSignInfos() {
+        return this.signInfos;
+    }
+    getPublicKeyHexs() {
+        return this.publicKeyHexs;
+    }
+    getControllerKeys() {
+        return this.controllerKeys;
+    }
+    getControllerKeyRefs() {
+        return this.controllerKeyRefs;
+    }
+    getControllerKeysForSigning() {
+        const keys = [];
+        this.controllers.forEach((controller) => {
+            const key = this.controllerKeys.find((key) => key.controller === controller);
+            if (key) {
+                keys.push(key);
+            }
+        });
+        return keys;
+    }
+    async compilePublicKeyHexs(controllers, options) {
+        const publicKeyHexs = options.publicKeyHexs || [];
+        if (publicKeyHexs.length === 0) {
+            for (const controller of controllers) {
+                const key = await this.context.agent.didManagerGet({ did: controller }).then((result) => result.keys[0]);
+                publicKeyHexs.push(key.kid);
+            }
+        }
+        this.setPublicKeyHexs(publicKeyHexs);
+    }
+    async compileSignInfos(payload, controllers) {
+        // 1. Iterate over the contollers and for each - get DIDDocument and get the verificationMethodId associated with one of publicKeyHexs
+        // 1.1 Iterate over the list of verificationMethods and make the checks:
+        // 1.1.1 Iterate over publicKeyHexs and convert each publicKeyHex to the verification Material
+        // 1.1.2 If it compares with the one in the verificationMethod, then we have a match and can store the pair of verificationMethodId and publicKeyHex
+        // 2. Iterate over the pair of verificationMethodIds and publicKeys and create SignInfo§
+        // Setup 
+        const signInfos = [];
+        const publicKeyHexs = this.getPublicKeyHexs();
+        // Get verificationMethodIds
+        const verificationMethodIds = [];
+        // Iterate over list of controllers and tries to get the corresponding verificationMethodId associated with one of publicKeyHexs
+        for (const controller of controllers) {
+            // We need to get here current version of DIDDocument associated with the controller and cannot skip it even if document.id === controller
+            // cause in case of remooving verifcation method we need to sign the payload with the old verification method which is on ledger.
+            const controllerResolutionResult = await this.context.agent.resolveDid({ didUrl: controller });
+            const controllerDidDocument = controllerResolutionResult.didDocument;
+            // Check if controller DID document is resolved
+            if (!controllerDidDocument) {
+                throw new CheqdProviderError('[did-provider-cheqd]: compileSignInfos: Error while resolving the DID document for controller DID: ' + controller, exports.CheqdProviderErrorCodes.UnresolvedDID);
+            }
+            // Check that controller's DIDDocument is active
+            if (controllerResolutionResult.didDocumentMetadata.deactivated) {
+                throw new CheqdProviderError(`[did-provider-cheqd]: compileSignInfos: DIDDocument associated with controller ${controller} is deactivated`, exports.CheqdProviderErrorCodes.DeactivatedController);
+            }
+            // Check if controller DID document contains verification methods
+            if (!controllerDidDocument.verificationMethod) {
+                throw new CheqdProviderError('[did-provider-cheqd]: compileSignInfos: Controller DID document does not contain verification methods', exports.CheqdProviderErrorCodes.EmptyVerificationMethod);
+            }
+            // Iterate over verificationMethods and by comparing publicKeys get the verificationMethod Id
+            for (const vm of controllerDidDocument.verificationMethod) {
+                // Try to match verificationMethod with one of publicKeyHexs		
+                for (const publicKeyHex of publicKeyHexs) {
+                    // Get publicKeyHex from verificationMethod
+                    const vmPublicKey = (0, utils_2.extractPublicKeyHex)(vm);
+                    // Compare publicKeys
+                    if (publicKeyHex === vmPublicKey) {
+                        // Create SignInfo object
+                        signInfos.push({
+                            verificationMethodId: vm.id,
+                            signature: (0, utils_2.base64ToBytes)(await this.context.agent.keyManagerSign({
+                                keyRef: publicKeyHex,
+                                data: (0, uint8arrays_1.toString)(payload, 'hex'),
+                                encoding: 'hex',
+                            })),
+                        });
+                        // Setup controllerKeyRefs
+                        this.controllerKeyRefs.push(publicKeyHex);
+                    }
+                }
+                // Setup key structure for display
+                const kid = (0, utils_2.extractPublicKeyHex)(vm);
+                const key = await this.context.agent.keyManagerGet({ kid });
+                this.controllerKeys.push({ ...key, controller: vm.controller });
+            }
+        }
+        // Setup signInfos
+        this.setSignInfos(signInfos);
+    }
+    async updateIdentifierCompileSignInfos(didDocument, options) {
+        // Steps to solve the issue:
+        // 1. Collect list of controllers. The user can remove, append and reqrite the controller.
+        //   But we need to send all the signatures, old and news
+        // 2. Generate payloads
+        // 3. Compile list of signInfos
+        // Get current version of DIDDocument
+        const actualDIDDocument = await this.context.agent.resolveDid({ didUrl: didDocument.id });
+        if (!actualDIDDocument.didDocument) {
+            throw new Error('[did-provider-cheqd]: updateIdentifierSignInfos: Error while resolving the DID document for updating with error: ' + actualDIDDocument.didResolutionMetadata.error);
+        }
+        // Compile controllers
+        const updatedControllers = (0, helpers_js_1.getControllers)(didDocument);
+        const actualControllers = (0, helpers_js_1.getControllers)(actualDIDDocument.didDocument);
+        const controllers = [...new Set([...updatedControllers, ...actualControllers])];
+        // Generate payload
+        const versionId = options.versionId || (0, uuid_1.v4)();
+        const payload = await createMsgCreateDidDocPayloadToSign(didDocument, versionId);
+        // Setup publicKeyHexs
+        await this.compilePublicKeyHexs(controllers, options);
+        // Setup controllers. Here it's supposed to be a list of controllers which are associated with the DIDDocument
+        this.setControllers(updatedControllers);
+        // Setup SignInfos
+        await this.compileSignInfos(payload, controllers);
+    }
+    async deactivateIdentifierCompileSignInfos(didDocument, options) {
+        // Steps to solve the issue:
+        // 1. Collect list of controllers. The user can remove, append and reqrite the controller.
+        //   But we need to send all the signatures, old and news
+        // Generate payload to sign
+        // 3. Compile list of signInfos
+        // Get Controllers
+        const controllers = (0, helpers_js_1.getControllers)(didDocument);
+        // For did deactivation ledger requires the signature from original DID Document controller
+        // So we need to add the controller to the list of controllers
+        if (!controllers.includes(didDocument.id)) {
+            controllers.push(didDocument.id);
+        }
+        // Generate payload
+        const versionId = options.versionId || (0, uuid_1.v4)();
+        const payload = await createMsgDeactivateDidDocPayloadToSign(didDocument, versionId);
+        // Setup publicKeyHexs
+        await this.compilePublicKeyHexs(controllers, options);
+        // Setup SignInfos
+        await this.compileSignInfos(payload, controllers);
+    }
+    async resourceCreateCompileSignInfos(did, resourcePayload, options) {
+        // Steps to solve the issue:
+        // 1. Collect list of controllers. The user can remove, append and reqrite the controller.
+        //   But we need to send all the signatures, old and news
+        // Generate payload to sign
+        // 3. Compile list of signInfos
+        const didDocument = await this.context.agent.resolveDid({ didUrl: did }).then((result) => result.didDocument);
+        if (!didDocument) {
+            throw new Error('[did-provider-cheqd]: resourceCreateCompileSignInfos: Erro while resolving the DID document for controller DID: ' + did);
+        }
+        // Get Controllers
+        const controllers = (0, helpers_js_1.getControllers)(didDocument);
+        // For resource creation ledger requires the signature from original DID Document controller
+        // So we need to add the controller to the list of controllers
+        if (!controllers.includes(did)) {
+            controllers.push(did);
+        }
+        // Generate payload
+        const payload = await index_js_1.MsgCreateResourcePayload.encode(index_js_1.MsgCreateResourcePayload.fromPartial(resourcePayload)).finish();
+        // Setup publicKeyHexs
+        await this.compilePublicKeyHexs(controllers, options);
+        // Setup SignInfos
+        await this.compileSignInfos(payload, controllers);
+    }
+    async keysAreInKMS(publicKeys) {
+        for (const keyRef of publicKeys) {
+            try {
+                await this.context.agent.keyManagerGet({ kid: keyRef });
+            }
+            catch (e) {
+                return {
+                    placed: false,
+                    error: `PublicKey: ${keyRef} is not placed in kms`
+                };
+            }
+        }
+        return {
+            placed: true
+        };
+    }
+}
+exports.CheqdSignInfoProvider = CheqdSignInfoProvider;
 /**
  * {@link @veramo/did-manager#DIDManager} identifier provider for `did:cheqd` identifiers.
  * @public
@@ -127,10 +345,16 @@ class CheqdDIDProvider extends did_manager_1.AbstractIdentifierProvider {
             sdk: sdk,
         });
         (0, utils_1.assert)(tx.code === 0, `cosmos_transaction: Failed to create DID. Reason: ${tx.rawLog}`);
+        const identifier = {
+            did: options.document.id,
+            keys: [],
+            services: options.document.service || [],
+            provider: options.document.id.split(':').splice(0, 3).join(':'),
+        };
         //* Currently, only one controller key is supported.
         //* We assume that the first key in the list is the controller key.
         //* This is subject to change in the near future.
-        const keys = options.keys
+        identifier.keys = options.keys
             ? await (async function (that) {
                 const scopedKeys = [];
                 for (const key of options.keys) {
@@ -152,35 +376,71 @@ class CheqdDIDProvider extends did_manager_1.AbstractIdentifierProvider {
                 }
                 return scopedKeys;
             })(this)
-            : await this.getKeysFromVerificationMethod(context, options.document.verificationMethod);
-        const controllerKey = keys[0];
-        const identifier = {
-            did: options.document.id,
-            controllerKeyId: controllerKey.kid,
-            keys,
-            services: options.document.service || [],
-            provider: options.document.id.split(':').splice(0, 3).join(':'),
-        };
+            : await (async function (that) {
+                const vmKeys = await that.getKeysFromVerificationMethod(context, options.document.verificationMethod);
+                // Setup controllerKeyRefs
+                identifier.controllerKeyRefs = vmKeys.map((key) => key.kid);
+                // Setup controllerKeys. It's a list of keys to display
+                identifier.controllerKeys = vmKeys.map((key) => ({ ...key, controller: options.document.id }));
+                // Here we are returning all keys associated with the DIDDocument (including keys for controllers)
+                // We already compiled it while discovering the verificationMethodIds
+                return vmKeys;
+            })(this);
+        await this.getKeysFromVerificationMethod(context, options.document.verificationMethod);
+        const controllerKey = identifier.keys[0];
+        identifier.controllerKeyId = controllerKey.kid;
         debug('Created DID', identifier.did);
         return identifier;
     }
     async updateIdentifier({ did, document, options, }, context) {
+        // Handle input parameters
         const sdk = await this.getCheqdSDK(options?.fee);
         const versionId = options.versionId || (0, uuid_1.v4)();
-        const signInputs = options.keys
+        const keys = options.keys || [];
+        const signInfoProvider = new CheqdSignInfoProvider(context);
+        // It answers on question what the keys are actually in input
+        const areKeysImportable = keys.length > 0 && keys.every((key) => {
+            return Object.keys(key).includes('privateKeyHex');
+        });
+        // options.keys may be list of keys with privateKey ibside or just list of publicKeys
+        const publicKeyHexs = areKeysImportable
+            ? []
+            : keys.map((key) => key.publicKeyHex);
+        // Check that publicKeyHexs are placed in kms if the user provides the keys
+        const _r = await signInfoProvider.keysAreInKMS(publicKeyHexs);
+        if (_r.error) {
+            throw Error(`[updateIdentifier]: ${_r.error}`);
+        }
+        // Check that verificationMethod on changed DIDDocument list exists and not empty
+        if (!document.verificationMethod || document.verificationMethod.length === 0) {
+            throw new CheqdProviderError('[updateIdentifier]: VerificationMethod should be placed and not be empty', exports.CheqdProviderErrorCodes.EmptyVerificationMethod);
+        }
+        const signInputs = areKeysImportable
             ? (function () {
+                // We are sure here that keys are placed
                 return options.keys.map((key) => (0, sdk_1.createSignInputsFromImportableEd25519Key)(key, document.verificationMethod || []));
             })()
-            : await (async function (that) {
-                const data = await createMsgCreateDidDocPayloadToSign(document, versionId);
-                return await that.signPayload(context, data, document.verificationMethod);
-            })(this);
+            : await (async function () {
+                await signInfoProvider.updateIdentifierCompileSignInfos(document, {
+                    publicKeyHexs,
+                    versionId
+                });
+                return signInfoProvider.getSignInfos();
+            })();
+        debug(`[updateIdentifier]: DID: ${did}, VerificationMethodIds for signing: ${signInputs.map((signInput) => signInput.verificationMethodId)}`);
         const tx = await sdk.updateDidDocTx(signInputs, document, '', this?.fee, undefined, versionId, { sdk: sdk });
         (0, utils_1.assert)(tx.code === 0, `cosmos_transaction: Failed to update DID. Reason: ${tx.rawLog}`);
-        //* Currently, only one controller key is supported.
-        //* We assume that the first key in the list is the controller key.
-        //* This is subject to change in the near future.
-        const keys = options.keys
+        // Setup return value
+        const identifier = {
+            did: document.id,
+            keys: [],
+            services: document.service || [],
+            provider: document.id.split(':').splice(0, 3).join(':'),
+        };
+        ;
+        // Get keys for updated DIDDocument
+        // Here we are importing only the keys which has privateKey field set up
+        identifier.keys = options.keys && areKeysImportable
             ? await (async function (that) {
                 const scopedKeys = [];
                 for (const key of options.keys) {
@@ -200,31 +460,56 @@ class CheqdDIDProvider extends did_manager_1.AbstractIdentifierProvider {
                         scopedKeys.push(managedKey);
                     }
                 }
+                // Setup controllerKeyId
+                identifier.controllerKeyId = scopedKeys[0].kid;
                 return scopedKeys;
             })(this)
-            : await this.getKeysFromVerificationMethod(context, document.verificationMethod);
-        const controllerKey = keys[0];
-        const identifier = {
-            did: document.id,
-            controllerKeyId: controllerKey.kid,
-            keys,
-            services: document.service || [],
-            provider: document.id.split(':').splice(0, 3).join(':'),
-        };
+            : await (async function (that) {
+                const vmKeys = await that.getKeysFromVerificationMethod(context, document.verificationMethod);
+                // Setup controllerKeyId. It should be asocciated with verificationMethod list
+                identifier.controllerKeyId = vmKeys[0].kid;
+                // Setup controllerKeyRefs. It's a list of keys which were used for signing the transaction
+                identifier.controllerKeyRefs = signInfoProvider.getControllerKeyRefs();
+                // Setup controllerKeys. It's a list of keys to display
+                identifier.controllerKeys = signInfoProvider.getControllerKeysForSigning();
+                // Here we are returning all keys associated with the DIDDocument (including keys for controllers)
+                // We already compiled it while discovering the verificationMethodIds
+                return vmKeys;
+            })(this);
         debug('Updated DID', did);
         return identifier;
     }
     async deactivateIdentifier({ did, document, options, }, context) {
         const sdk = await this.getCheqdSDK(options?.fee);
         const versionId = options.versionId || (0, uuid_1.v4)();
-        const signInputs = options.keys
+        const keys = options.keys || [];
+        // Providr for compiling SignInfos
+        const signInfoProvider = new CheqdSignInfoProvider(context);
+        // It answers on question what the keys are actually in input
+        const areKeysImportable = keys.length > 0 && keys.every((key) => {
+            return Object.keys(key).includes('privateKeyHex');
+        });
+        const publicKeyHexs = areKeysImportable
+            ? []
+            : keys.map((key) => key.publicKeyHex);
+        // Check that publicKeyHexs are placed in kms
+        const _r = await signInfoProvider.keysAreInKMS(publicKeyHexs);
+        if (_r.error) {
+            throw Error(`[deactivateIdentifier]: ${_r.error}`);
+        }
+        const signInputs = areKeysImportable
             ? (function () {
+                // We are sure here that keys are placed
                 return options.keys.map((key) => (0, sdk_1.createSignInputsFromImportableEd25519Key)(key, document.verificationMethod || []));
             })()
-            : await (async function (that) {
-                const data = await createMsgDeactivateDidDocPayloadToSign(document, versionId);
-                return await that.signPayload(context, data, document.verificationMethod);
-            })(this);
+            : await (async function () {
+                await signInfoProvider.deactivateIdentifierCompileSignInfos(document, {
+                    publicKeyHexs,
+                    versionId
+                });
+                return signInfoProvider.getSignInfos();
+            })();
+        debug(`[deactivateIdentifier]: DID: ${did}, VerificationMethodIds for signing: ${signInputs.map((signInput) => signInput.verificationMethodId)}`);
         const tx = await sdk.deactivateDidDocTx(signInputs, document, '', this?.fee, undefined, versionId, { sdk: sdk });
         (0, utils_1.assert)(tx.code === 0, `cosmos_transaction: Failed to update DID. Reason: ${tx.rawLog}`);
         debug('Deactivated DID', did);
@@ -232,13 +517,30 @@ class CheqdDIDProvider extends did_manager_1.AbstractIdentifierProvider {
     }
     async createResource({ options, }, context) {
         const sdk = await this.getCheqdSDK(options?.fee);
-        const signInputs = options.signInputs
+        const signInfoProvider = new CheqdSignInfoProvider(context);
+        const inputKeys = options.signInputs || [];
+        const areSignInputs = inputKeys.length > 0 && inputKeys.every((key) => {
+            return Object.keys(key).includes('privateKeyHex');
+        });
+        // options.signInputs may be list of keys with privateKey ibside or just list of publicKeys
+        const publicKeyHexs = areSignInputs
+            ? []
+            : inputKeys.map((key) => key.publicKeyHex);
+        // Check that publicKeyHexs are placed in kms
+        const _r = await signInfoProvider.keysAreInKMS(publicKeyHexs);
+        if (_r.error) {
+            throw Error(`[updateIdentifier]: ${_r.error}`);
+        }
+        const signInputs = areSignInputs
             ? options.signInputs
             : await (async function (that) {
                 const did = `did:cheqd:${that.network}:${options.payload.collectionId}`;
-                const { didDocument } = await sdk.queryDidDoc(did, { sdk: sdk });
-                return await that.signPayload(context, index_js_1.MsgCreateResourcePayload.encode(index_js_1.MsgCreateResourcePayload.fromPartial(options.payload)).finish(), didDocument?.verificationMethod);
+                await signInfoProvider.resourceCreateCompileSignInfos(did, options.payload, {
+                    publicKeyHexs,
+                });
+                return signInfoProvider.getSignInfos();
             })(this);
+        debug(`[createResource]: DID: did:cheqd:${this.network}:${options.payload.collectionId} , VerificationMethodIds for signing: ${signInputs.map((signInput) => signInput.verificationMethodId)}`);
         const tx = await sdk.createLinkedResourceTx(signInputs, options.payload, '', this?.fee, undefined, {
             sdk: sdk,
         });
@@ -253,8 +555,8 @@ class CheqdDIDProvider extends did_manager_1.AbstractIdentifierProvider {
                     return undefined;
             }
         };
-        if (options.signInputs) {
-            const signInput = options.signInputs.filter((input) => mapKeyType(input.keyType) !== undefined);
+        if (areSignInputs) {
+            const signInput = inputKeys.filter((input) => mapKeyType(input.keyType) !== undefined);
             const keys = [];
             for (const input of signInput) {
                 let managedKey;
@@ -330,7 +632,8 @@ class CheqdDIDProvider extends did_manager_1.AbstractIdentifierProvider {
     async getKeysFromVerificationMethod(context, verificationMethod = []) {
         return Promise.all(verificationMethod.map(async (method) => {
             const kid = (0, utils_2.extractPublicKeyHex)(method);
-            return await context.agent.keyManagerGet({ kid });
+            const key = await context.agent.keyManagerGet({ kid });
+            return { ...key, controller: method.controller };
         })).catch((error) => {
             throw new Error(`Failed to sign payload: ${error}`);
         });