@cooperation/vc-storage 1.0.42 → 1.0.44

package/dist/models/CredentialEngine.js

@@ -1,9 +1,25 @@
-import { Ed25519VerificationKey2020 } from '@digitalbazaar/ed25519-verification-key-2020';
-import { Ed25519Signature2020 } from '@digitalbazaar/ed25519-signature-2020';
-import * as dbVc from '@digitalbazaar/vc';
+import { Ed25519VerificationKey2020 } from '@digitalcredentials/ed25519-verification-key-2020';
+import { Ed25519Signature2020 } from '@digitalcredentials/ed25519-signature-2020';
+import * as dbVc from '@digitalcredentials/vc';
 import { v4 as uuidv4 } from 'uuid';
-import { extractKeyPairFromCredential, generateDIDSchema, generateUnsignedEmployment, generateUnsignedPerformanceReview, generateUnsignedRecommendation, generateUnsignedVC, generateUnsignedVolunteering, } from '../utils/credential.js';
-import { customDocumentLoader } from '../utils/digitalbazaar.js';
+import { extractKeyPairFromCredential, generateDIDSchema, generateUnsignedEmployment, generateUnsignedPerformanceReview, generateUnsignedRecommendation, generateUnsignedSkillClaim, generateUnsignedVC, generateUnsignedVolunteering, } from '../utils/credential.js';
+import { securityLoader } from '@digitalcredentials/security-document-loader';
+import hrContext from 'hr-context';
+// Add hr-context for SkillClaimCredential; patch socCode (@type→@container)
+const hrCtxData = JSON.parse(JSON.stringify(hrContext.CONTEXT_V1));
+if (hrCtxData?.['@context']?.socCode) {
+    delete hrCtxData['@context'].socCode['@type'];
+    hrCtxData['@context'].socCode['@container'] = '@set';
+}
+const loader = securityLoader();
+loader.addStatic(hrContext.CONTEXT_URL_V1, hrCtxData);
+loader.addStatic('https://w3id.org/hr/v1', hrCtxData);
+const builtLoader = loader.build();
+/** Document loader compatible with @digitalcredentials/vc */
+export const documentLoader = async (url) => {
+    const r = await builtLoader(url);
+    return { contextUrl: r.contextUrl ?? null, documentUrl: r.documentUrl ?? url, document: r.document };
+};
 import { saveToGoogleDrive } from '../utils/google.js';
 function delay(ms) {
     return new Promise((resolve) => setTimeout(resolve, ms));
@@ -73,6 +89,33 @@ export class CredentialEngine {
         }));
         return true;
     }
+    /**
+     * For recommendations we need the *target VC DID/URI* (VC `id`) in the payload.
+     * Callers may still pass a Google Drive file id; if so we resolve and extract the VC `id`.
+     */
+    async resolveTargetVcId(vcIdOrFileId) {
+        if (!vcIdOrFileId)
+            throw new Error('Missing target VC reference');
+        // Already a DID/URI
+        if (vcIdOrFileId.startsWith('urn:') || vcIdOrFileId.startsWith('did:')) {
+            return vcIdOrFileId;
+        }
+        // Otherwise assume it's a Google Drive file id and resolve
+        const retrieved = await this.storage.retrieve(vcIdOrFileId);
+        if (!retrieved?.data)
+            throw new Error(`Unable to resolve VC from file id: ${vcIdOrFileId}`);
+        const maybeEnvelope = retrieved.data;
+        const payload = typeof maybeEnvelope?.body === 'string'
+            ? JSON.parse(maybeEnvelope.body)
+            : maybeEnvelope?.body
+                ? maybeEnvelope.body
+                : maybeEnvelope;
+        const resolvedId = payload?.id;
+        if (!resolvedId || typeof resolvedId !== 'string') {
+            throw new Error(`Resolved VC is missing an 'id' (from file id: ${vcIdOrFileId})`);
+        }
+        return resolvedId;
+    }
     /**
      * Create a new DID with Digital Bazaar's Ed25519VerificationKey2020 key pair.
      * @returns {Promise<{didDocument: object, keyPair: object}>} The created DID document and key pair.
@@ -143,8 +186,10 @@ export class CredentialEngine {
             case 'RECOMMENDATION':
                 if (!vcFileId)
                     throw new Error('vcFileId is required for recommendation');
+                // Ensure the Recommendation VC references the target VC DID/URI (not a Drive file id)
+                const targetVcId = await this.resolveTargetVcId(vcFileId);
                 credential = generateUnsignedRecommendation({
-                    vcId: vcFileId,
+                    vcId: targetVcId,
                     recommendation: data,
                     issuerDid: issuerId,
                 });
@@ -162,7 +207,7 @@ export class CredentialEngine {
                 throw new Error(`Unsupported credential type: ${type}`);
         }
         const suite = new Ed25519Signature2020({ key: keyPair, verificationMethod: keyPair.id });
-        return dbVc.issue({ credential, suite, documentLoader: customDocumentLoader });
+        return dbVc.issue({ credential, suite, documentLoader });
     }
     async signEmploymentCredential(data, keyPair, issuerId) {
         return this.signVC({ data, type: 'EMPLOYMENT', keyPair, issuerId });
@@ -173,6 +218,18 @@ export class CredentialEngine {
     async signPerformanceReviewCredential(data, keyPair, issuerId) {
         return this.signVC({ data, type: 'PERFORMANCE_REVIEW', keyPair, issuerId });
     }
+    /**
+     * Sign a SkillClaimCredential using the HR Context data model.
+     * @param {SkillClaimFormDataI} data - The skill claim form data.
+     * @param {KeyPair} keyPair - The key pair to use for signing.
+     * @param {string} issuerId - The issuer DID.
+     * @returns {Promise<any>} The signed SkillClaimCredential.
+     */
+    async signSkillClaimVC(data, keyPair, issuerId) {
+        const credential = generateUnsignedSkillClaim({ formData: data, issuerDid: issuerId });
+        const suite = new Ed25519Signature2020({ key: keyPair, verificationMethod: keyPair.id });
+        return dbVc.issue({ credential, suite, documentLoader });
+    }
     /**
      * Verify a Verifiable Credential (VC)
      * @param {object} credential - The Verifiable Credential to verify.
@@ -189,10 +246,10 @@ export class CredentialEngine {
             const result = await dbVc.verifyCredential({
                 credential,
                 suite,
-                documentLoader: customDocumentLoader,
+                documentLoader,
             });
             console.log(JSON.stringify(result));
-            return result;
+            return result.verified;
         }
         catch (error) {
             console.error('Verification failed:', error);
@@ -244,7 +301,7 @@ export class CredentialEngine {
             const signedVP = await dbVc.signPresentation({
                 presentation,
                 suite,
-                documentLoader: customDocumentLoader,
+                documentLoader,
                 challenge: '', // Provide the challenge if required
             });
             return signedVP;
@@ -318,7 +375,7 @@ export class CredentialEngine {
             const signedVC = await dbVc.issue({
                 credential: unsignedCredential,
                 suite,
-                documentLoader: customDocumentLoader,
+                documentLoader,
             });
             const rootFolders = await this.storage.findFolders();
             // Find or create Credentials folder

package/dist/models/ResumeVC.js

@@ -1,8 +1,8 @@
-import { Ed25519Signature2020 } from '@digitalbazaar/ed25519-signature-2020';
-import { customDocumentLoader } from '../utils/digitalbazaar.js';
+import { Ed25519Signature2020 } from '@digitalcredentials/ed25519-signature-2020';
+import { documentLoader } from './CredentialEngine.js';
 import { v4 as uuidv4 } from 'uuid';
-import * as dbVc from '@digitalbazaar/vc';
-import { Ed25519VerificationKey2020 } from '@digitalbazaar/ed25519-verification-key-2020';
+import * as dbVc from '@digitalcredentials/vc';
+import { Ed25519VerificationKey2020 } from '@digitalcredentials/ed25519-verification-key-2020';
 import { generateDIDSchema } from '../utils/credential.js';
 import { inlineResumeContext } from '../utils/context.js';
 export class ResumeVC {
@@ -20,7 +20,7 @@ export class ResumeVC {
             const signedProfessionalSummaryVC = await dbVc.issue({
                 credential: professionalSummaryVC,
                 suite,
-                documentLoader: customDocumentLoader,
+                documentLoader,
             });
             // Replace the unsigned professional summary with the signed one
             unsignedCredential.credentialSubject.professionalSummary = signedProfessionalSummaryVC;
@@ -28,7 +28,7 @@ export class ResumeVC {
             const signedResumeVC = await dbVc.issue({
                 credential: unsignedCredential,
                 suite,
-                documentLoader: customDocumentLoader,
+                documentLoader,
             });
             console.log('Signed Resume VC:', signedResumeVC);
             return signedResumeVC;
@@ -205,7 +205,6 @@ export class ResumeVC {
         const a = address || keyPair.publicKeyMultibase;
         keyPair.controller = `did:key:${a}`;
         keyPair.id = `${keyPair.controller}#${a}`;
-        keyPair.revoked = false;
         // The `signer` is already provided by the `Ed25519VerificationKey2020` instance
         return keyPair;
     };

package/dist/types/models/CredentialEngine.d.ts

@@ -1,4 +1,12 @@
-import { DidDocument, KeyPair, FormDataI, RecommendationFormDataI, VerifiableCredential, EmploymentFormDataI, PerformanceReviewFormDataI, VolunteeringFormDataI } from '../../types/credential.js';
+/** Document loader compatible with @digitalcredentials/vc */
+export declare const documentLoader: (url: string) => Promise<{
+    contextUrl: string;
+    documentUrl: string;
+    document: any;
+}>;
+import type { IVerifiableCredential } from '@digitalcredentials/ssi';
+import { DidDocument, KeyPair, FormDataI, RecommendationFormDataI, EmploymentFormDataI, PerformanceReviewFormDataI, VolunteeringFormDataI } from '../../types';
+import type { ISkillClaimCredential } from 'hr-context';
 import { GoogleDriveStorage } from './GoogleDriveStorage.js';
 interface SignPropsI {
     data: FormDataI | RecommendationFormDataI | EmploymentFormDataI | VolunteeringFormDataI | PerformanceReviewFormDataI;
@@ -25,6 +33,11 @@ export declare class CredentialEngine {
     private getKeyPair;
     private generateKeyPair;
     private verifyCreds;
+    /**
+     * For recommendations we need the *target VC DID/URI* (VC `id`) in the payload.
+     * Callers may still pass a Google Drive file id; if so we resolve and extract the VC `id`.
+     */
+    private resolveTargetVcId;
     /**
      * Create a new DID with Digital Bazaar's Ed25519VerificationKey2020 key pair.
      * @returns {Promise<{didDocument: object, keyPair: object}>} The created DID document and key pair.
@@ -62,25 +75,33 @@ export declare class CredentialEngine {
     signEmploymentCredential(data: EmploymentFormDataI, keyPair: KeyPair, issuerId: string): Promise<any>;
     signVolunteeringCredential(data: VolunteeringFormDataI, keyPair: KeyPair, issuerId: string): Promise<any>;
     signPerformanceReviewCredential(data: PerformanceReviewFormDataI, keyPair: KeyPair, issuerId: string): Promise<any>;
+    /**
+     * Sign a SkillClaimCredential using the HR Context data model.
+     * @param {SkillClaimFormDataI} data - The skill claim form data.
+     * @param {KeyPair} keyPair - The key pair to use for signing.
+     * @param {string} issuerId - The issuer DID.
+     * @returns {Promise<any>} The signed SkillClaimCredential.
+     */
+    signSkillClaimVC(data: ISkillClaimCredential, keyPair: KeyPair, issuerId: string): Promise<any>;
     /**
      * Verify a Verifiable Credential (VC)
      * @param {object} credential - The Verifiable Credential to verify.
      * @returns {Promise<boolean>} The verification result.
      * @throws Will throw an error if VC verification fails.
      */
-    verifyCredential(credential: VerifiableCredential): Promise<boolean>;
+    verifyCredential(credential: IVerifiableCredential): Promise<boolean>;
     /**
      * Create a Verifiable Presentation (VP)
      * @param verifiableCredential
      * @returns
      */
-    createPresentation(verifiableCredential: VerifiableCredential[]): Promise<any>;
+    createPresentation(verifiableCredential: IVerifiableCredential[]): Promise<object>;
     /**
      * Sign a Verifiable Presentation (VP)
      * @param presentation
      * @returns
      */
-    signPresentation(presentation: any): Promise<any>;
+    signPresentation(presentation: any): Promise<object>;
     /**
      * Generate and sign an email Verifiable Credential (VC)
      * @param {string} email - The email address to create the VC for

package/dist/types/models/ResumeVC.d.ts

@@ -1,3 +1,4 @@
+import { Ed25519VerificationKey2020 } from '@digitalcredentials/ed25519-verification-key-2020';
 export declare class ResumeVC {
     sign({ formData, issuerDid, keyPair }: {
         formData: any;
@@ -20,7 +21,7 @@ export declare class ResumeVC {
         formData: any;
         issuerDid: string;
     }): any;
-    generateKeyPair: (address?: string) => Promise<any>;
+    generateKeyPair: (address?: string) => Promise<Ed25519VerificationKey2020>;
     /**
      * Create a new DID with Digital Bazaar's Ed25519VerificationKey2020 key pair.
      * @returns {Promise<{didDocument: object, keyPair: object}>} The created DID document and key pair.
@@ -28,5 +29,5 @@ export declare class ResumeVC {
      */
     createDID({ keyPair }: {
         keyPair: any;
-    }): Promise<import("../../types/credential.js").DidDocument>;
+    }): Promise<import("../../types/Credential.js").DidDocument>;
 }

package/dist/types/utils/Ed25519Signer.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Ed25519 signer compatible with @wallet.storage/fetch-client.
+ * Uses @digitalcredentials packages instead of @digitalbazaar.
+ */
+import { Ed25519VerificationKey2020 } from '@digitalcredentials/ed25519-verification-key-2020';
+export declare class Ed25519Signer {
+    private readonly keyPair;
+    private readonly verificationMethod;
+    readonly algorithm = "Ed25519";
+    constructor(keyPair: Ed25519VerificationKey2020, verificationMethod: {
+        id: string;
+        type: string;
+        controller: string;
+        publicKeyMultibase: string;
+    });
+    static generate(): Promise<Ed25519Signer>;
+    static fromJSON(json: string): Promise<Ed25519Signer>;
+    get controller(): string;
+    get id(): string;
+    get publicKeyMultibase(): string;
+    sign({ data }: {
+        data: Uint8Array;
+    }): Promise<Uint8Array>;
+    toJSON(): object;
+}