@twin.org/identity-connector-entity-storage 0.9.2 → 0.9.3-next.1

package/dist/types/index.d.ts

@@ -3,6 +3,7 @@ export * from "./entities/identityProfile.js";
 export * from "./entityStorageIdentityConnector.js";
 export * from "./entityStorageIdentityProfileConnector.js";
 export * from "./entityStorageIdentityResolverConnector.js";
+export * from "./models/IEntityStorageIdentityConnectorConfig.js";
 export * from "./models/IEntityStorageIdentityConnectorConstructorOptions.js";
 export * from "./models/IEntityStorageIdentityProfileConnectorConstructorOptions.js";
 export * from "./models/IEntityStorageIdentityResolverConnectorConstructorOptions.js";

package/dist/types/models/IEntityStorageIdentityConnectorConfig.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Configuration for the Entity Storage Identity Connector.
+ */
+export interface IEntityStorageIdentityConnectorConfig {
+    /**
+     * TTL in ms for caching DID documents resolved for the connector's own sign/mutate
+     * operations (create/update/revoke on an identity this connector controls). 0 disables
+     * caching. Does not affect proof or credential verification of third-party claims, which
+     * is never cached by this connector. Refreshed by every mutation made through this
+     * connector instance; a mutation made through a different instance or out-of-band is not
+     * observed until the entry's TTL expires.
+     * @default 30000
+     */
+    didResolutionCacheTtlMs?: number;
+    /**
+     * Maximum number of DID documents kept in the own-DID resolution cache.
+     * Only used when didResolutionCacheTtlMs > 0.
+     * @default 1000
+     */
+    didResolutionCacheCapacity?: number;
+    /**
+     * Maximum time in milliseconds to wait for own-DID cache getOrSet mutex acquisition.
+     * Only used when didResolutionCacheTtlMs > 0.
+     */
+    didResolutionCacheMutexTimeoutMs?: number;
+}

package/dist/types/models/IEntityStorageIdentityConnectorConstructorOptions.d.ts

@@ -1,6 +1,11 @@
+import type { IEntityStorageIdentityConnectorConfig } from "./IEntityStorageIdentityConnectorConfig.js";
 import type { IEntityStorageIdentityResolverConnectorConstructorOptions } from "./IEntityStorageIdentityResolverConnectorConstructorOptions.js";
 /**
  * Options for the entity storage identity connector constructor.
  */
 export interface IEntityStorageIdentityConnectorConstructorOptions extends IEntityStorageIdentityResolverConnectorConstructorOptions {
+    /**
+     * Configuration for the connector.
+     */
+    config?: IEntityStorageIdentityConnectorConfig;
 }

package/docs/changelog.md

@@ -1,5 +1,60 @@
 # @twin.org/identity-connector-entity-storage- Changelog
 
+## [0.9.3-next.1](https://github.com/iotaledger/twin-identity/compare/identity-connector-entity-storage-v0.9.3-next.0...identity-connector-entity-storage-v0.9.3-next.1) (2026-08-26)
+
+
+### Features
+
+* add addAlsoKnownAs to identity connector ([#117](https://github.com/iotaledger/twin-identity/issues/117)) ([aa27cff](https://github.com/iotaledger/twin-identity/commit/aa27cff88e61e7c8c6e32aeb437fb01c6ee9f57a))
+* add context id features ([#62](https://github.com/iotaledger/twin-identity/issues/62)) ([e02ecca](https://github.com/iotaledger/twin-identity/commit/e02ecca9c45a849104bfbf7bc18a1f44e6eea8a1))
+* add expiration date option to vc creation ([73e05e1](https://github.com/iotaledger/twin-identity/commit/73e05e1ae61112c7e056889969751f4ff82d9f29))
+* add identity remove ([eebc13f](https://github.com/iotaledger/twin-identity/commit/eebc13f4c2cd994d2d9cce4da2128fb346c80ba7))
+* add optional jwt payload and headers to vc and vp tokens ([#135](https://github.com/iotaledger/twin-identity/issues/135)) ([aa1de0f](https://github.com/iotaledger/twin-identity/commit/aa1de0f63be95ff62bae3c699aabc85ea93d74c2))
+* add own-DID resolution caching to EntityStorageIdentityConnector ([#216](https://github.com/iotaledger/twin-identity/issues/216)) ([a4c170b](https://github.com/iotaledger/twin-identity/commit/a4c170be83d00f2bf53d70056321d53a3b22f940))
+* add proof to vc in entity storage connector ([2a968a1](https://github.com/iotaledger/twin-identity/commit/2a968a1a011cbafb8a0997234e069c91c4eaa793))
+* add proof to vcs and verify vs documents ([#103](https://github.com/iotaledger/twin-identity/issues/103)) ([b60bf0c](https://github.com/iotaledger/twin-identity/commit/b60bf0cb7d453d67574c5c0e4f769e67cf7cd6d1))
+* add validate-locales ([04d74b4](https://github.com/iotaledger/twin-identity/commit/04d74b4d1ebe42672e8ca75a7bdb8e3556afd0be))
+* add vault signing ([#153](https://github.com/iotaledger/twin-identity/issues/153)) ([9458e4c](https://github.com/iotaledger/twin-identity/commit/9458e4c96ce19e0fc704905dfb3aac04dc6cf237))
+* common connector tests ([4f9642c](https://github.com/iotaledger/twin-identity/commit/4f9642ceb09843870909fc6819bf69fb20ef952a))
+* ensure credential subject exists ([3847e82](https://github.com/iotaledger/twin-identity/commit/3847e8250ac5abd1fffcd1a72d3157f32d08478c))
+* eslint migration to flat config ([fd6246d](https://github.com/iotaledger/twin-identity/commit/fd6246d566280b6d5d10a108eb1e92c4b510f2f2))
+* expanded cli methods ([#121](https://github.com/iotaledger/twin-identity/issues/121)) ([80a52b7](https://github.com/iotaledger/twin-identity/commit/80a52b779237cd633d1f2813fa976585cef6e551))
+* health and key removal ([#191](https://github.com/iotaledger/twin-identity/issues/191)) ([8504101](https://github.com/iotaledger/twin-identity/commit/8504101a7a08b2a042a4e59f666c245308527088))
+* identity key separator use slash ([1319d0d](https://github.com/iotaledger/twin-identity/commit/1319d0d07164a36b3ec279e6421b8835ffefc3d3))
+* implement async proof signing with vault security ([#110](https://github.com/iotaledger/twin-identity/issues/110)) ([9651c24](https://github.com/iotaledger/twin-identity/commit/9651c2492d63eca6545735f5638d3191e25bd185))
+* increase resolve timeout ([523e5b6](https://github.com/iotaledger/twin-identity/commit/523e5b6375dbac06278d309bec8ca383a8e81807))
+* re-use vault keys if available ([5a848d7](https://github.com/iotaledger/twin-identity/commit/5a848d7520829d9c891ec889fd773fbc0ee77ba5))
+* remove auth generator ([#98](https://github.com/iotaledger/twin-identity/issues/98)) ([a8969e8](https://github.com/iotaledger/twin-identity/commit/a8969e85a5a2804abfc787406e2d12eb168dd978))
+* typescript 6 update ([e8806ad](https://github.com/iotaledger/twin-identity/commit/e8806ad6858c37be3c0f54c41cf654023773bef3))
+* update contexts ([#100](https://github.com/iotaledger/twin-identity/issues/100)) ([7c17f98](https://github.com/iotaledger/twin-identity/commit/7c17f983110b2fc5db1b19531d0b2a7c53e02aaa))
+* update framework core ([c824497](https://github.com/iotaledger/twin-identity/commit/c82449709af0215eb7af496cf687c93fb30b5ae0))
+* update namespaces and contexts ([#90](https://github.com/iotaledger/twin-identity/issues/90)) ([0c34d64](https://github.com/iotaledger/twin-identity/commit/0c34d64add8cca77856fa2d0357e774d72fbbfc1))
+* use new generateKid method ([f0fe779](https://github.com/iotaledger/twin-identity/commit/f0fe779323b675575bb9f80aa74f1957dc57a094))
+* use shared store mechanism ([#27](https://github.com/iotaledger/twin-identity/issues/27)) ([ce41f3f](https://github.com/iotaledger/twin-identity/commit/ce41f3fc3da1b206ec06da7ea5b2c968f788804d))
+
+
+### Bug Fixes
+
+* add exp to jwt payload in entity storage vc ([41f0fbd](https://github.com/iotaledger/twin-identity/commit/41f0fbd641b4fd1fe3b23f1a16f4748e09b31f50))
+* associate vault keys with document not controller ([#86](https://github.com/iotaledger/twin-identity/issues/86)) ([6430f4b](https://github.com/iotaledger/twin-identity/commit/6430f4b559315a1fe99b60c6db1c661d317bc243))
+* enforce credentialStatus, validity period and assertionMethod scope on object-form verification ([#215](https://github.com/iotaledger/twin-identity/issues/215)) ([8e6eb92](https://github.com/iotaledger/twin-identity/commit/8e6eb920564e0fe4ebdc984bdf682b7779f747d0))
+* identity subject type property ([#146](https://github.com/iotaledger/twin-identity/issues/146)) ([fe71dc6](https://github.com/iotaledger/twin-identity/commit/fe71dc66972120b42f1ff0e1dc8732cb48e1dd2a))
+* Import path and bump version ([#21](https://github.com/iotaledger/twin-identity/issues/21)) ([ccea845](https://github.com/iotaledger/twin-identity/commit/ccea845bf32562267280bc1b3dde1c9af1a00360))
+* Install sdk-wasm ([#20](https://github.com/iotaledger/twin-identity/issues/20)) ([75ec14e](https://github.com/iotaledger/twin-identity/commit/75ec14e072f8c219863a1c028a3b0783802086e9))
+* linting ([08dd93e](https://github.com/iotaledger/twin-identity/commit/08dd93e7b6ba3877c9cd051533f08aff39733a5b))
+* proof verification ([#186](https://github.com/iotaledger/twin-identity/issues/186)) ([6e926be](https://github.com/iotaledger/twin-identity/commit/6e926be25c333ea7df6ead503a9b99e4e46286fe))
+* update vault key naming convention to use document ID prefix ([#94](https://github.com/iotaledger/twin-identity/issues/94)) ([ab125c1](https://github.com/iotaledger/twin-identity/commit/ab125c1b7eb189b5dceaddc69e5e53e33a0886db))
+* use async getStore in tests ([cfc0d87](https://github.com/iotaledger/twin-identity/commit/cfc0d873532e8ab2010f86f05bffaad3bbaf5786))
+* use async getStore in tests ([3424c81](https://github.com/iotaledger/twin-identity/commit/3424c81cf7407ede4a89a026072720d52bf689b2))
+* use nameof for property guards ([9d571cf](https://github.com/iotaledger/twin-identity/commit/9d571cffae8838035fcbca8966795783013e1a99))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @twin.org/identity-models bumped from 0.9.3-next.0 to 0.9.3-next.1
+
 ## [0.9.2](https://github.com/iotaledger/twin-identity/compare/identity-connector-entity-storage-v0.9.2...identity-connector-entity-storage-v0.9.2) (2026-08-24)
 
 

package/docs/reference/classes/EntityStorageIdentityConnector.md

@@ -62,6 +62,33 @@ The class name of the component.
 
 ***
 
+### stop() {#stop}
+
+> **stop**(`nodeLoggingComponentType?`): `Promise`\<`void`\>
+
+Stop the service.
+Destroys in-memory resources owned by this component.
+
+#### Parameters
+
+##### nodeLoggingComponentType?
+
+`string`
+
+The node logging component type.
+
+#### Returns
+
+`Promise`\<`void`\>
+
+A promise that resolves when the service has stopped.
+
+#### Implementation of
+
+`IIdentityConnector.stop`
+
+***
+
 ### createDocument() {#createdocument}
 
 > **createDocument**(`controller`): `Promise`\<`IDidDocument`\>
@@ -704,7 +731,7 @@ The presentation stored in the jwt and the revocation status.
 
 ### createProof() {#createproof}
 
-> **createProof**(`controller`, `verificationMethodId`, `proofType`, `unsecureDocument`): `Promise`\<`IProof`\>
+> **createProof**(`controller`, `verificationMethodId`, `proofType`, `unsecureDocument`, `resolvedDocument?`): `Promise`\<`IProof`\>
 
 Create a proof for arbitrary data with the specified verification method.
 This method uses async signing to ensure the private key never leaves the vault,
@@ -736,6 +763,14 @@ The type of proof to create.
 
 The unsecure document to create the proof for.
 
+##### resolvedDocument?
+
+`IDidDocument`
+
+Optional already-resolved document for the DID, so a caller that
+just resolved it (e.g. createVerifiableCredential) skips a redundant re-resolve. Resolves
+it itself if omitted.
+
 #### Returns
 
 `Promise`\<`IProof`\>

package/docs/reference/index.md

@@ -10,6 +10,7 @@
 
 ## Interfaces
 
+- [IEntityStorageIdentityConnectorConfig](interfaces/IEntityStorageIdentityConnectorConfig.md)
 - [IEntityStorageIdentityConnectorConstructorOptions](interfaces/IEntityStorageIdentityConnectorConstructorOptions.md)
 - [IEntityStorageIdentityProfileConnectorConstructorOptions](interfaces/IEntityStorageIdentityProfileConnectorConstructorOptions.md)
 - [IEntityStorageIdentityResolverConnectorConstructorOptions](interfaces/IEntityStorageIdentityResolverConnectorConstructorOptions.md)

package/docs/reference/interfaces/IEntityStorageIdentityConnectorConfig.md

@@ -0,0 +1,46 @@
+# Interface: IEntityStorageIdentityConnectorConfig
+
+Configuration for the Entity Storage Identity Connector.
+
+## Properties
+
+### didResolutionCacheTtlMs? {#didresolutioncachettlms}
+
+> `optional` **didResolutionCacheTtlMs?**: `number`
+
+TTL in ms for caching DID documents resolved for the connector's own sign/mutate
+operations (create/update/revoke on an identity this connector controls). 0 disables
+caching. Does not affect proof or credential verification of third-party claims, which
+is never cached by this connector. Refreshed by every mutation made through this
+connector instance; a mutation made through a different instance or out-of-band is not
+observed until the entry's TTL expires.
+
+#### Default
+
+```ts
+30000
+```
+
+***
+
+### didResolutionCacheCapacity? {#didresolutioncachecapacity}
+
+> `optional` **didResolutionCacheCapacity?**: `number`
+
+Maximum number of DID documents kept in the own-DID resolution cache.
+Only used when didResolutionCacheTtlMs > 0.
+
+#### Default
+
+```ts
+1000
+```
+
+***
+
+### didResolutionCacheMutexTimeoutMs? {#didresolutioncachemutextimeoutms}
+
+> `optional` **didResolutionCacheMutexTimeoutMs?**: `number`
+
+Maximum time in milliseconds to wait for own-DID cache getOrSet mutex acquisition.
+Only used when didResolutionCacheTtlMs > 0.

package/docs/reference/interfaces/IEntityStorageIdentityConnectorConstructorOptions.md

@@ -8,6 +8,14 @@ Options for the entity storage identity connector constructor.
 
 ## Properties
 
+### config? {#config}
+
+> `optional` **config?**: [`IEntityStorageIdentityConnectorConfig`](IEntityStorageIdentityConnectorConfig.md)
+
+Configuration for the connector.
+
+***
+
 ### didDocumentEntityStorageType? {#diddocumententitystoragetype}
 
 > `optional` **didDocumentEntityStorageType?**: `string`

package/locales/en.json

@@ -17,6 +17,7 @@
 			"createVerifiablePresentationFailed": "Creating the verifiable presentation failed",
 			"documentNotFound": "The document could not be found \"{notFoundId}\"",
 			"invalidAlias": "The alias is invalid it must be a Url or Urn, it is \"{alias}\"",
+			"issuerMismatch": "The credential issuer \"{issuer}\" does not match the DID of the proof verification method \"{method}\"",
 			"jwkSignatureFailed": "The signature on the JWK failed verification",
 			"methodMissing": "The verification method specified does not exist \"{method}\"",
 			"missingDid": "The full id including DID is required",

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@twin.org/identity-connector-entity-storage",
-	"version": "0.9.2",
+	"version": "0.9.3-next.1",
 	"description": "Entity storage connector for persisting and retrieving identity records through a consistent data layer.",
 	"repository": {
 		"type": "git",
@@ -14,16 +14,16 @@
 		"node": ">=24.0.0"
 	},
 	"dependencies": {
-		"@twin.org/core": "^0.9.2",
-		"@twin.org/data-core": "^0.9.2",
-		"@twin.org/data-json-ld": "^0.9.2",
-		"@twin.org/entity": "^0.9.2",
-		"@twin.org/entity-storage-models": "^0.9.2",
-		"@twin.org/identity-models": "^0.9.2",
-		"@twin.org/nameof": "^0.9.2",
-		"@twin.org/standards-w3c-did": "^0.9.2",
-		"@twin.org/vault-models": "^0.9.2",
-		"@twin.org/web": "^0.9.2"
+		"@twin.org/core": "next",
+		"@twin.org/data-core": "next",
+		"@twin.org/data-json-ld": "next",
+		"@twin.org/entity": "next",
+		"@twin.org/entity-storage-models": "next",
+		"@twin.org/identity-models": "0.9.3-next.1",
+		"@twin.org/nameof": "next",
+		"@twin.org/standards-w3c-did": "next",
+		"@twin.org/vault-models": "next",
+		"@twin.org/web": "next"
 	},
 	"main": "./dist/es/index.js",
 	"types": "./dist/types/index.d.ts",