@twin.org/node 0.0.3-next.53 → 0.0.3-next.55

package/dist/locales/en.json

@@ -18,10 +18,11 @@
 		},
 		"bootstrapLegacy": {
 			"noFeaturesEnabled": "No features are enabled in legacy bootstrap mode, at least one feature must be enabled.",
-			"organizationNotSet": "The organisation identity has not been set. Run bootstrap with the \"node-identity\" feature first."
+			"organizationNotSet": "The organisation identity has not been set. Run \"set-node-org-id\"."
 		},
 		"identityCreate": {
 			"invalidMnemonic": "The mnemonic is invalid, it should be 24 words from the standard wordlist.",
+			"onlyOneAssignmentOptionAllowed": "Only one of node-id, node-organization-id, or tenant-organization-id can be set at the same time.",
 			"nodeOrganizationIdNotAvailableInMultiTenantMode": "The node-organization-id option is not available in multi-tenant mode, use tenant-organization-id instead."
 		},
 		"identityImport": {
@@ -61,8 +62,7 @@
 			"notAvailableInMultiTenantMode": "The set-node-org-id command is not available in multi-tenant mode, use set-tenant-org-id instead."
 		},
 		"applyOrganizationIdToTenant": {
-			"tenantAdminComponentNotRegistered": "Multi-tenant support must be enabled to use this command.",
-			"organizationIdAlreadyInUse": "The organization ID \"{organizationId}\" is already assigned to tenant \"{conflictingTenantId}\"."
+			"tenantAdminComponentNotRegistered": "Multi-tenant support must be enabled to use this command."
 		},
 		"removeTenantOrgAlias": {
 			"tenantAdminComponentNotRegistered": "Multi-tenant support must be enabled to use this command.",
@@ -236,6 +236,11 @@
 			"lockTimeout": "Failed to acquire lock for key \"{key}\" within the timeout of {timeout} milliseconds",
 			"bufferFetchFailed": "Failed to retrieve shared buffer for key \"{key}\" from the main thread"
 		},
+		"sharedObjectBuffer": {
+			"notCreated": "The shared buffer for object \"{objectId}\" has not been created",
+			"capacityExceeded": "The payload size of {required} bytes exceeds the maximum capacity of {capacity} bytes for object \"{objectId}\"",
+			"bufferFetchFailed": "Failed to retrieve shared buffer for object \"{objectId}\" from the main thread"
+		},
 		"fetchHelper": {
 			"decodingJSON": "Decoding JSON failed for route \"{url}\"",
 			"failureStatusText": "The request to the API failed: \"{statusText}\"",
@@ -349,7 +354,9 @@
 		},
 		"tenantAdminService": {
 			"apiKeyAlreadyInUse": "The provided API key is already in use by another tenant.",
-			"tenantNotFound": "Tenant with ID \"{notFoundId}\" not found."
+			"tenantAlreadyExists": "Tenant with ID \"{existingId}\" already exists.",
+			"tenantNotFound": "Tenant with ID \"{notFoundId}\" not found.",
+			"organizationIdAlreadyExists": "A tenant with organization ID \"{existingId}\" already exists."
 		},
 		"commands": {
 			"common": {
@@ -383,9 +390,6 @@
 			"failedLoading": "Failed to load file state storage from \"{filename}\"",
 			"failedSaving": "Failed to save file state storage to \"{filename}\""
 		},
-		"engineModuleHelper": {
-			"moduleNotClass": "The module \"{moduleName}\" does not export a class \"{className}\""
-		},
 		"moduleHelper": {
 			"moduleNotFound": "Failed to load module \"{module}\"",
 			"entryNotFound": "Failed to load entry \"{entry}\" from module \"{module}\"",
@@ -740,8 +744,11 @@
 		"fileEntityStorageConnector": {
 			"directoryCreateFailed": "Creating directory \"{directory}\" failed",
 			"emptyFailed": "Unable to empty entity storage",
+			"readStoreCorrupt": "The entity storage store file in directory \"{directory}\" contains corrupt JSON",
+			"readStoreFailed": "Unable to read the entity storage store file in directory \"{directory}\"",
 			"removeBatchFailed": "Unable to remove batch of entities",
-			"teardownFailed": "Unable to teardown entity storage"
+			"teardownFailed": "Unable to teardown entity storage",
+			"writeStoreFailed": "Unable to write the entity storage store file in directory \"{directory}\""
 		},
 		"firestoreEntityStorageConnector": {
 			"firestoreCreationFailed": "Failed to connect to Firestore",
@@ -1228,7 +1235,8 @@
 		},
 		"policyNegotiationAdminPointService": {
 			"policyNotFound": "Contract negotiation with id: \"{notFoundId}\" not found",
-			"cleanupFailed": "Failed to cleanup old negotiations"
+			"cleanupFailed": "Failed to cleanup old negotiations",
+			"negotiationAlreadyExists": "Contract negotiation with correlationId: \"{existingId}\" already exists"
 		},
 		"policyExecutionPointService": {
 			"actionExecutionFailed": "Action execution failed for id: \"{actionId}\", at stage \"{stage}\", policy id: \"{policyId}\""
@@ -1376,14 +1384,12 @@
 						"nodeIdentityCreate": "Creating node identity",
 						"nodeAuthKeyCreate": "Creating node auth key",
 						"trustVerificationMethodCreate": "Creating trust verification method for organisation identity",
-						"nodeIdentitySet": "Setting node identity",
 						"nodeTenantCreate": "Creating node tenant",
 						"organisationCreate": "Creating organisation identity",
 						"blobStorageKeyCreate": "Creating blob storage encryption key for organisation identity",
 						"attestationMethodCreate": "Creating attestation method for organisation identity",
 						"immutableProofMethodCreate": "Creating immutable proof method for organisation identity",
 						"nodeOrganizationIdSet": "Setting node organisation ID",
-						"tenantOrganizationIdSet": "Setting tenant organisation ID",
 						"adminIdentityCreate": "Creating admin user identity",
 						"adminUserCreate": "Creating admin user",
 						"tenantFallback": "No Node-labelled tenant found; using first available tenant"
@@ -1420,6 +1426,9 @@
 						"output-env-prefix": {
 							"description": "Prefix to use for variables in the output .env file."
 						},
+						"node-id": {
+							"description": "If true, set the created identity DID as the node identity."
+						},
 						"node-organization-id": {
 							"description": "If true, set the created identity DID as the node organization ID (not available in multi-tenant mode)."
 						},
@@ -1432,12 +1441,12 @@
 						"processingMnemonic": "Processing mnemonic",
 						"readingMnemonic": "Reading mnemonic",
 						"storingMnemonic": "Storing mnemonic",
-						"existingMnemonic": "Mnemonic already exists",
+						"existingMnemonic": "Mnemonic already exists, skipping creation",
 						"noExistingMnemonic": "No existing mnemonic found",
 						"generatingMnemonic": "Generating mnemonic",
 						"processingIdentity": "Processing identity",
 						"resolvingIdentity": "Resolving identity",
-						"existingIdentity": "Identity already exists",
+						"existingIdentity": "Identity already exists, skipping creation",
 						"noIdentityFound": "No identity found",
 						"creatingIdentity": "Creating identity",
 						"createdIdentity": "Created identity",
@@ -1614,7 +1623,8 @@
 					},
 					"labels": {
 						"resolvingIdentity": "Resolving identity",
-						"stored": "The node identity has been stored"
+						"stored": "The node identity has been stored",
+						"skipping": "The node identity has not changed, skipping"
 					}
 				},
 				"tenant-create": {
@@ -1663,7 +1673,7 @@
 				},
 				"tenant-import": {
 					"description": "Import a tenant with associated api key",
-					"example": "tenant-import --tenant-id=\"0011..aabb\" --api-key=\"aabb..0099\" --label=\"My Tenant\" --public-origin=\"https://example.com:1234\"",
+					"example": "tenant-import --tenant-id=\"0011..aabb\" --api-key=\"aabb..0099\" --organization-id=\"did:iota:...\" --label=\"My Tenant\" --public-origin=\"https://example.com:1234\"",
 					"params": {
 						"env-prefix": {
 							"description": "Prefix to use for standard .env files e.g. TWIN_."
@@ -1674,6 +1684,9 @@
 						"api-key": {
 							"description": "The API key to associate with the tenant id."
 						},
+						"organization-id": {
+							"description": "The organization DID to associate with the tenant."
+						},
 						"label": {
 							"description": "A descriptive label for the tenant."
 						},
@@ -1702,6 +1715,9 @@
 						"api-key": {
 							"description": "The API key to associate with the tenant id."
 						},
+						"organization-id": {
+							"description": "The organization DID to associate with the tenant."
+						},
 						"label": {
 							"description": "A descriptive label for the tenant."
 						},
@@ -2253,6 +2269,9 @@
 			"retrieving": "Retrieving policies for locator \"locator\"",
 			"retrieved": "Retrieved {count} policies for locator \"locator\"."
 		},
+		"policyNegotiationAdminPointService": {
+			"negotiationCreated": "Contract negotiation pre-registered (id: \"{id}\")"
+		},
 		"policyExecutionPointService": {
 			"executingActions": "Executing actions for stage: \"{stage}\", policy id: \"{policyId}\"",
 			"executingAction": "Executing action for stage: \"{stage}\", policy id: \"{policyId}\""
@@ -2312,6 +2331,9 @@
 		},
 		"policyNegotiationAdminPointService": {
 			"sendTerminateFailed": "Failed to send terminate to consumer for negotiation id: \"{id}\", correlation id: \"{correlationId}\""
+		},
+		"policyNegotiationPointService": {
+			"terminatedCallbackFailed": "Failed to notify requester via terminated() for negotiation id: \"{negotiationId}\""
 		}
 	},
 	"cli": {

package/docs/changelog.md

@@ -1,5 +1,33 @@
 # Changelog
 
+## [0.0.3-next.55](https://github.com/iotaledger/twin-node/compare/node-v0.0.3-next.54...node-v0.0.3-next.55) (2026-06-16)
+
+
+### Miscellaneous Chores
+
+* **node:** Synchronize repo versions
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @twin.org/node-core bumped from 0.0.3-next.54 to 0.0.3-next.55
+
+## [0.0.3-next.54](https://github.com/iotaledger/twin-node/compare/node-v0.0.3-next.53...node-v0.0.3-next.54) (2026-06-12)
+
+
+### Features
+
+* improved cli commands ([#206](https://github.com/iotaledger/twin-node/issues/206)) ([cf00850](https://github.com/iotaledger/twin-node/commit/cf0085023a66e187aaaaf3889128c845c73a1faf))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @twin.org/node-core bumped from 0.0.3-next.53 to 0.0.3-next.54
+
 ## [0.0.3-next.53](https://github.com/iotaledger/twin-node/compare/node-v0.0.3-next.52...node-v0.0.3-next.53) (2026-06-11)
 
 

package/docs/open-api/spec.json

@@ -18243,9 +18243,17 @@
 									"papQueryResponseExample": {
 										"value": [
 											{
-												"@context": "http://www.w3.org/ns/odrl.jsonld",
+												"@context": [
+													"http://www.w3.org/ns/odrl.jsonld",
+													{
+														"dateCreated": "https://schema.org/dateCreated",
+														"dateModified": "https://schema.org/dateModified"
+													}
+												],
 												"@type": "Set",
 												"@id": "urn:rights-management:abc123def456",
+												"dateCreated": "2025-09-03T00:00:00.000Z",
+												"dateModified": "2025-09-03T00:00:00.000Z",
 												"permission": [
 													{
 														"target": "http://example.com/asset/1",
@@ -18468,9 +18476,17 @@
 								"examples": {
 									"papGetResponseExample": {
 										"value": {
-											"@context": "http://www.w3.org/ns/odrl.jsonld",
+											"@context": [
+												"http://www.w3.org/ns/odrl.jsonld",
+												{
+													"dateCreated": "https://schema.org/dateCreated",
+													"dateModified": "https://schema.org/dateModified"
+												}
+											],
 											"@type": "Set",
 											"@id": "urn:rights-management:abc123def456",
+											"dateCreated": "2025-09-03T00:00:00.000Z",
+											"dateModified": "2025-09-03T00:00:00.000Z",
 											"permission": [
 												{
 													"target": "http://example.com/asset/1",
@@ -18661,14 +18677,22 @@
 						"content": {
 							"application/json": {
 								"schema": {
-									"$ref": "https://schema.twindev.org/dataspace-protocol/DataspaceProtocolAgreement"
+									"$ref": "#/components/schemas/RightsManagementAgreement"
 								},
 								"examples": {
 									"papGetResponseExample": {
 										"value": {
-											"@context": "http://www.w3.org/ns/odrl.jsonld",
+											"@context": [
+												"http://www.w3.org/ns/odrl.jsonld",
+												{
+													"dateCreated": "https://schema.org/dateCreated",
+													"dateModified": "https://schema.org/dateModified"
+												}
+											],
 											"@type": "Agreement",
 											"@id": "urn:rights-management:abc123def456",
+											"dateCreated": "2025-09-03T00:00:00.000Z",
+											"dateModified": "2025-09-03T00:00:00.000Z",
 											"permission": [
 												{
 													"target": "http://example.com/asset/1",
@@ -18774,14 +18798,22 @@
 						"content": {
 							"application/json": {
 								"schema": {
-									"$ref": "https://schema.twindev.org/dataspace-protocol/DataspaceProtocolOffer"
+									"$ref": "#/components/schemas/RightsManagementOffer"
 								},
 								"examples": {
 									"papGetResponseExample": {
 										"value": {
-											"@context": "http://www.w3.org/ns/odrl.jsonld",
+											"@context": [
+												"http://www.w3.org/ns/odrl.jsonld",
+												{
+													"dateCreated": "https://schema.org/dateCreated",
+													"dateModified": "https://schema.org/dateModified"
+												}
+											],
 											"@type": "Offer",
 											"@id": "urn:rights-management:abc123def456",
+											"dateCreated": "2025-09-03T00:00:00.000Z",
+											"dateModified": "2025-09-03T00:00:00.000Z",
 											"permission": [
 												{
 													"target": "http://example.com/asset/1",
@@ -18887,14 +18919,22 @@
 						"content": {
 							"application/json": {
 								"schema": {
-									"$ref": "https://schema.twindev.org/dataspace-protocol/DataspaceProtocolSet"
+									"$ref": "#/components/schemas/RightsManagementSet"
 								},
 								"examples": {
 									"papGetResponseExample": {
 										"value": {
-											"@context": "http://www.w3.org/ns/odrl.jsonld",
+											"@context": [
+												"http://www.w3.org/ns/odrl.jsonld",
+												{
+													"dateCreated": "https://schema.org/dateCreated",
+													"dateModified": "https://schema.org/dateModified"
+												}
+											],
 											"@type": "Set",
 											"@id": "urn:rights-management:abc123def456",
+											"dateCreated": "2025-09-03T00:00:00.000Z",
+											"dateModified": "2025-09-03T00:00:00.000Z",
 											"permission": [
 												{
 													"target": "http://example.com/asset/1",
@@ -20003,24 +20043,133 @@
 				}
 			}
 		},
-		"/rights-management/negotiations/admin/{policyId}": {
+		"/rights-management/negotiations/admin": {
+			"post": {
+				"operationId": "pnapCreate",
+				"summary": "Pre-register a consumer-side policy negotiation entry",
+				"tags": [
+					"Policy Negotiation Administration Point"
+				],
+				"security": [
+					{
+						"jwtBearerAuthScheme": []
+					}
+				],
+				"requestBody": {
+					"description": "The request structure for creating a policy negotiation entry.",
+					"required": true,
+					"content": {
+						"application/json": {
+							"schema": {
+								"$ref": "#/components/schemas/PnapCreateRequest"
+							},
+							"examples": {
+								"pnapCreateRequestExample": {
+									"value": {
+										"id": "urn:contract-negotiation:consumer-pid"
+									}
+								}
+							}
+						}
+					}
+				},
+				"responses": {
+					"201": {
+						"description": "The rest request ended in created response.",
+						"headers": {
+							"location": {
+								"schema": {
+									"type": "string"
+								},
+								"description": "e.g. urn:contract-negotiation:01970000-0000-7000-8000-000000000000"
+							}
+						}
+					},
+					"400": {
+						"description": "The server cannot process the request, see the content for more details.",
+						"content": {
+							"application/json": {
+								"schema": {
+									"$ref": "#/components/schemas/Error"
+								},
+								"examples": {
+									"exampleResponse": {
+										"value": {
+											"name": "GeneralError",
+											"message": "errorMessage",
+											"properties": {
+												"foo": "bar"
+											}
+										}
+									}
+								}
+							}
+						}
+					},
+					"401": {
+						"description": "You are not authorized to use the API or no credentials were supplied, see the content for more details.",
+						"content": {
+							"application/json": {
+								"schema": {
+									"$ref": "#/components/schemas/Error"
+								},
+								"examples": {
+									"exampleResponse": {
+										"value": {
+											"name": "UnauthorizedError",
+											"message": "errorMessage"
+										}
+									}
+								}
+							}
+						}
+					},
+					"500": {
+						"description": "The server has encountered a situation it does not know how to handle, see the content for more details.",
+						"content": {
+							"application/json": {
+								"schema": {
+									"$ref": "#/components/schemas/Error"
+								},
+								"examples": {
+									"exampleResponse": {
+										"value": {
+											"name": "InternalServerError",
+											"message": "errorMessage"
+										}
+									}
+								}
+							}
+						}
+					}
+				}
+			},
 			"get": {
-				"operationId": "pnapGet",
-				"summary": "Get a policy negotiation",
+				"operationId": "pnapQuery",
+				"summary": "Query policy negotiations",
 				"tags": [
 					"Policy Negotiation Administration Point"
 				],
 				"parameters": [
 					{
-						"name": "policyId",
-						"description": "The ID of the policy being requested.",
-						"in": "path",
-						"required": true,
+						"name": "state",
+						"description": "The state of the policy negotiations.",
+						"in": "query",
+						"required": false,
+						"schema": {
+							"$ref": "https://schema.twindev.org/dataspace-protocol/DataspaceProtocolContractNegotiationStateType"
+						},
+						"example": "ACCEPTED"
+					},
+					{
+						"name": "cursor",
+						"description": "The cursor for pagination.",
+						"in": "query",
+						"required": false,
 						"schema": {
 							"type": "string"
 						},
-						"style": "simple",
-						"example": "policy-1"
+						"example": "next-cursor"
 					}
 				],
 				"security": [
@@ -20030,21 +20179,23 @@
 				],
 				"responses": {
 					"200": {
-						"description": "The response structure for policy negotiation request.",
+						"description": "The response structure for querying manual policy negotiations.",
 						"content": {
 							"application/json": {
 								"schema": {
-									"$ref": "#/components/schemas/PolicyNegotiation"
+									"$ref": "#/components/schemas/PnapQueryResponse"
 								},
 								"examples": {
-									"pnapGetResponseExample": {
-										"value": {
-											"id": "pid",
-											"correlationId": "cid",
-											"dateCreated": "2025-09-03T00:00:00.000Z",
-											"state": "REQUESTED",
-											"organizationIdentity": "did:iota:123456789abcdefghi"
-										}
+									"pnapQueryResponseExample": {
+										"value": [
+											{
+												"id": "pid",
+												"correlationId": "cid",
+												"dateCreated": "2025-09-03T00:00:00.000Z",
+												"state": "REQUESTED",
+												"organizationIdentity": "did:iota:123456789abcdefghi"
+											}
+										]
 									}
 								}
 							}
@@ -20108,10 +20259,12 @@
 						}
 					}
 				}
-			},
-			"put": {
-				"operationId": "pnapSet",
-				"summary": "Set a policy negotiation",
+			}
+		},
+		"/rights-management/negotiations/admin/{policyId}": {
+			"get": {
+				"operationId": "pnapGet",
+				"summary": "Get a policy negotiation",
 				"tags": [
 					"Policy Negotiation Administration Point"
 				],
@@ -20133,31 +20286,27 @@
 						"jwtBearerAuthScheme": []
 					}
 				],
-				"requestBody": {
-					"description": "The request structure for setting a policy negotiation.",
-					"required": true,
-					"content": {
-						"application/json": {
-							"schema": {
-								"$ref": "#/components/schemas/PolicyNegotiation"
-							},
-							"examples": {
-								"pnapSetRequestExample": {
-									"value": {
-										"id": "pid",
-										"correlationId": "cid",
-										"dateCreated": "2025-09-03T00:00:00.000Z",
-										"state": "REQUESTED",
-										"organizationIdentity": "did:iota:123456789abcdefghi"
+				"responses": {
+					"200": {
+						"description": "The response structure for policy negotiation request.",
+						"content": {
+							"application/json": {
+								"schema": {
+									"$ref": "#/components/schemas/PolicyNegotiation"
+								},
+								"examples": {
+									"pnapGetResponseExample": {
+										"value": {
+											"id": "pid",
+											"correlationId": "cid",
+											"dateCreated": "2025-09-03T00:00:00.000Z",
+											"state": "REQUESTED",
+											"organizationIdentity": "did:iota:123456789abcdefghi"
+										}
 									}
 								}
 							}
 						}
-					}
-				},
-				"responses": {
-					"204": {
-						"description": "The rest request ended in success with no data."
 					},
 					"400": {
 						"description": "The server cannot process the request, see the content for more details.",
@@ -20218,16 +20367,16 @@
 					}
 				}
 			},
-			"delete": {
-				"operationId": "pnapRemove",
-				"summary": "Remove a policy negotiation",
+			"put": {
+				"operationId": "pnapSet",
+				"summary": "Set a policy negotiation",
 				"tags": [
 					"Policy Negotiation Administration Point"
 				],
 				"parameters": [
 					{
 						"name": "policyId",
-						"description": "The ID of the policy being removed.",
+						"description": "The ID of the policy being requested.",
 						"in": "path",
 						"required": true,
 						"schema": {
@@ -20242,6 +20391,28 @@
 						"jwtBearerAuthScheme": []
 					}
 				],
+				"requestBody": {
+					"description": "The request structure for setting a policy negotiation.",
+					"required": true,
+					"content": {
+						"application/json": {
+							"schema": {
+								"$ref": "#/components/schemas/PolicyNegotiation"
+							},
+							"examples": {
+								"pnapSetRequestExample": {
+									"value": {
+										"id": "pid",
+										"correlationId": "cid",
+										"dateCreated": "2025-09-03T00:00:00.000Z",
+										"state": "REQUESTED",
+										"organizationIdentity": "did:iota:123456789abcdefghi"
+									}
+								}
+							}
+						}
+					}
+				},
 				"responses": {
 					"204": {
 						"description": "The rest request ended in success with no data."
@@ -20304,35 +20475,24 @@
 						}
 					}
 				}
-			}
-		},
-		"/rights-management/negotiations/admin": {
-			"get": {
-				"operationId": "pnapQuery",
-				"summary": "Query policy negotiations",
+			},
+			"delete": {
+				"operationId": "pnapRemove",
+				"summary": "Remove a policy negotiation",
 				"tags": [
 					"Policy Negotiation Administration Point"
 				],
 				"parameters": [
 					{
-						"name": "state",
-						"description": "The state of the policy negotiations.",
-						"in": "query",
-						"required": false,
-						"schema": {
-							"$ref": "https://schema.twindev.org/dataspace-protocol/DataspaceProtocolContractNegotiationStateType"
-						},
-						"example": "ACCEPTED"
-					},
-					{
-						"name": "cursor",
-						"description": "The cursor for pagination.",
-						"in": "query",
-						"required": false,
+						"name": "policyId",
+						"description": "The ID of the policy being removed.",
+						"in": "path",
+						"required": true,
 						"schema": {
 							"type": "string"
 						},
-						"example": "next-cursor"
+						"style": "simple",
+						"example": "policy-1"
 					}
 				],
 				"security": [
@@ -20341,28 +20501,8 @@
 					}
 				],
 				"responses": {
-					"200": {
-						"description": "The response structure for querying manual policy negotiations.",
-						"content": {
-							"application/json": {
-								"schema": {
-									"$ref": "#/components/schemas/PnapQueryResponse"
-								},
-								"examples": {
-									"pnapQueryResponseExample": {
-										"value": [
-											{
-												"id": "pid",
-												"correlationId": "cid",
-												"dateCreated": "2025-09-03T00:00:00.000Z",
-												"state": "REQUESTED",
-												"organizationIdentity": "did:iota:123456789abcdefghi"
-											}
-										]
-									}
-								}
-							}
-						}
+					"204": {
+						"description": "The rest request ended in success with no data."
 					},
 					"400": {
 						"description": "The server cannot process the request, see the content for more details.",
@@ -22595,6 +22735,14 @@
 				"description": "The body of the request - the policy to create (id will be auto-generated if not provided).",
 				"type": "object",
 				"properties": {
+					"dateCreated": {
+						"type": "string",
+						"description": "schema.org dateCreated — ISO 8601 date-time set by PAP on create."
+					},
+					"dateModified": {
+						"type": "string",
+						"description": "schema.org dateModified — ISO 8601 date-time set by PAP on create and update."
+					},
 					"@context": {
 						"$ref": "https://schema.twindev.org/w3c-odrl/OdrlContextType"
 					},
@@ -22811,6 +22959,19 @@
 				},
 				"description": "The body of the response."
 			},
+			"PnapCreateRequest": {
+				"type": "object",
+				"properties": {
+					"id": {
+						"type": "string",
+						"description": "The consumer-side negotiation identifier (DSP consumerPid)."
+					}
+				},
+				"required": [
+					"id"
+				],
+				"description": "The partial negotiation to pre-register."
+			},
 			"PnapQueryResponse": {
 				"type": "array",
 				"items": {
@@ -22971,6 +23132,30 @@
 				],
 				"description": "Transfer Process (DSP compliant) with state REQUESTED, or error."
 			},
+			"RightsManagementAgreement": {
+				"description": "Agreement policy returned by PAP, including optional PAP-managed lifecycle metadata.",
+				"type": "object",
+				"allOf": [
+					{
+						"$ref": "https://schema.twindev.org/dataspace-protocol/DataspaceProtocolAgreement"
+					},
+					{
+						"$ref": "#/components/schemas/RightsManagementPolicyMetadata"
+					}
+				]
+			},
+			"RightsManagementOffer": {
+				"description": "Offer policy returned by PAP, including optional PAP-managed lifecycle metadata.",
+				"type": "object",
+				"allOf": [
+					{
+						"$ref": "https://schema.twindev.org/dataspace-protocol/DataspaceProtocolOffer"
+					},
+					{
+						"$ref": "#/components/schemas/RightsManagementPolicyMetadata"
+					}
+				]
+			},
 			"RightsManagementPolicy": {
 				"description": "Base type for any ODRL policy stored and managed by the TWIN rights-management PAP.",
 				"type": "object",
@@ -23183,6 +23368,37 @@
 					"@context",
 					"@id",
 					"@type"
+				],
+				"allOf": [
+					{
+						"$ref": "#/components/schemas/RightsManagementPolicyMetadata"
+					}
+				]
+			},
+			"RightsManagementPolicyMetadata": {
+				"description": "PAP-managed metadata attached to stored and returned ODRL policies.",
+				"type": "object",
+				"properties": {
+					"dateCreated": {
+						"type": "string",
+						"description": "schema.org dateCreated — ISO 8601 date-time set by PAP on create."
+					},
+					"dateModified": {
+						"type": "string",
+						"description": "schema.org dateModified — ISO 8601 date-time set by PAP on create and update."
+					}
+				}
+			},
+			"RightsManagementSet": {
+				"description": "Set policy returned by PAP, including optional PAP-managed lifecycle metadata.",
+				"type": "object",
+				"allOf": [
+					{
+						"$ref": "https://schema.twindev.org/dataspace-protocol/DataspaceProtocolSet"
+					},
+					{
+						"$ref": "#/components/schemas/RightsManagementPolicyMetadata"
+					}
 				]
 			},
 			"Rule": {

package/docs/usage.md

@@ -44,6 +44,45 @@ vault-key-create: Create a vault key for an identity
 vault-key-import: Import a vault key for an identity
 ```
 
+## Server Configuration
+
+Key environment variables that control how the node server handles authentication. A full reference is in the `.env` example files.
+
+| Variable                   | Default        | Description                                    |
+| -------------------------- | -------------- | ---------------------------------------------- |
+| `TWIN_AUTH_API_KEY_HEADER` | `x-api-key`    | HTTP header name for the API key on requests.  |
+| `TWIN_AUTH_SIGNING_KEY_ID` | `auth-signing` | Vault key ID used to sign authentication JWTs. |
+
+## bootstrap-legacy --help
+
+```text
+bootstrap-legacy: Bootstrap in legacy mode for backwards compatibility, **will be deprecated in future versions**
+
+env-prefix: (string, optional)
+Prefix to use for standard .env files e.g. TWIN_.
+
+load-env: (string, optional)
+Comma separated list of paths to .env files to read input parameters from.
+
+Example: bootstrap-legacy --load-env=".env.bootstrap-legacy"
+```
+
+The command reads the following environment variables (use `load-env` to supply them from a file):
+
+| Variable                     | Default                        | Description                                                                 |
+| ---------------------------- | ------------------------------ | --------------------------------------------------------------------------- |
+| `TWIN_NODE_IDENTITY`         | generated                      | The DID of the node identity.                                               |
+| `TWIN_NODE_MNEMONIC`         | randomly generated             | The Bip39 mnemonic for the node identity seed.                              |
+| `TWIN_FEATURES`              | `admin-user,wallet`            | Comma-separated feature flags: `admin-user`, `wallet`.                      |
+| `TWIN_ORGANIZATION_IDENTITY` | generated                      | The DID to use for the organisation identity.                               |
+| `TWIN_ORGANIZATION_MNEMONIC` | randomly generated             | The Bip39 mnemonic for the organisation identity seed.                      |
+| `TWIN_TENANT_ID`             | generated                      | The tenant ID for the node tenant (multi-tenant only).                      |
+| `TWIN_TENANT_API_KEY`        | generated                      | The API key for the node tenant (multi-tenant only).                        |
+| `TWIN_ADMIN_USER_IDENTITY`   | generated                      | The DID for the admin user identity (`admin-user` feature).                 |
+| `TWIN_ADMIN_USER_MNEMONIC`   | randomly generated             | The Bip39 mnemonic for the admin user identity seed (`admin-user` feature). |
+| `TWIN_ADMIN_USER_NAME`       | `admin@node` or `admin@tenant` | The email/username for the admin user (`admin-user` feature).               |
+| `TWIN_ADMIN_USER_PASSWORD`   | randomly generated             | The password for the admin user (`admin-user` feature).                     |
+
 ## identity-create --help
 
 ```text
@@ -76,145 +115,146 @@ Path to a .env file to store the command output.
 output-env-prefix: (string, optional)
 Prefix to use for variables in the output .env file.
 
+node-id: (boolean, default: 'false', optional)
+If true, set the created identity DID as the node identity.
+
+node-organization-id: (boolean, default: 'false', optional)
+If true, set the created identity DID as the node organization ID (not available in multi-tenant mode).
+
+tenant-organization-id: (string, hex(32), optional)
+The tenant ID to set the created identity DID as the organization ID for (requires multi-tenant mode).
+
 Example: identity-create --mnemonic="..." --fund-wallet=true
 ```
 
 ## Example
 
-### Bootstrap legacy mode will be deprecated in future versions
+### Bootstrap legacy (single command)
+
+Runs the complete bootstrap sequence in one step using values from `.env.bootstrap-legacy`:
 
 ```shell
 twin-node bootstrap-legacy --load-env=".env.bootstrap-legacy"
 ```
 
-### Create the identity for the node
+The sections below show the equivalent step-by-step commands that replicate the bootstrap-legacy process.
 
-```shell
-twin-node identity-create --fund-wallet=true --output-json="node-identity.json" --output-env="node-identity.env" --output-env-prefix=node
-```
-
-### Import existing identity details
+---
 
-```shell
-twin-node identity-import --load-env="my-identity.env" --identity=!MY_DID --mnemonic=!MY_MNEMONIC
-```
+### Step 1 - Create the node identity and associate it with the node
 
-### Associate the identity with the node
+Supply `--fund-wallet=true` when the `wallet` feature is enabled. `--node-id=true` sets the created identity as the node identity in the same step.
 
 ```shell
-twin-node node-set-identity --load-env="node-identity.env" --identity=!NODE_DID
+twin-node identity-create --node-id=true --fund-wallet=true --output-json="node-identity.json" --output-env="node-identity.env" --output-env-prefix=node
 ```
 
-### Add a key associated with the node identity for use in authentication signing
+### Step 2 - Create the authentication signing key for the node
 
 ```shell
-twin-node vault-key-create --load-env="node-identity.env" --identity=!NODE_DID --key-id=!TWIN_AUTH_SIGNING_KEY_ID --output-json="node-auth-key.json" --output-env="node-auth-key.env"
+twin-node vault-key-create --load-env="node-identity.env" --identity=!NODE_DID --key-type=Ed25519 --key-id=!TWIN_AUTH_SIGNING_KEY_ID --overwrite-mode=skip --output-json="node-auth-key.json" --output-env="node-auth-key.env"
 ```
 
-### Import existing authentication signing key details
+To import an existing authentication signing key instead:
 
 ```shell
 twin-node vault-key-import --load-env="node-identity.env,node-auth-key.json" --identity=!NODE_DID --key-id=!TWIN_AUTH_SIGNING_KEY_ID --key-type=!KEY_TYPE --private-key-hex=!PRIVATE_KEY_HEX
 ```
 
-### Import an existing key associated with the node identity for use in authentication signing
+### Step 3 - Create the organisation identity
 
 ```shell
-twin-node vault-key-import --load-env="node-identity.env,my-key.json" --identity=!NODE_DID --key-id=!TWIN_AUTH_SIGNING_KEY_ID --key-type=!KEY_TYPE --private-key-hex=!PRIVATE_KEY_HEX
+twin-node identity-create --load-env="node-identity.env" --fund-wallet=true --output-json="organization-identity.json" --output-env="organization-identity.env" --output-env-prefix=organization
 ```
 
-### Create an organisation identity
+### Step 4 - Add the trust verification method to the organisation identity
 
 ```shell
-twin-node identity-create --load-env="node-identity.env" --fund-wallet=true --output-json="organization-identity.json" --output-env="organization-identity.env" --output-env-prefix=organization
+twin-node identity-verification-method-create --load-env="node-identity.env,organization-identity.env" --identity=!ORGANIZATION_DID --verification-method-type=assertionMethod --verification-method-id=!TWIN_TRUST_VERIFICATION_METHOD_ID --overwrite-mode=skip --output-json="organization-trust.json" --output-env="organization-trust.env"
 ```
 
-### Create a tenant to be used by the node
+### Step 5 - Set the organisation identity on the node (single-tenant)
 
 ```shell
-twin-node tenant-create --load-env="organization-identity.env" --label="node" --public-origin="https://api.example.com" --organization-id=!ORGANIZATION_DID --output-env-prefix=node --output-json="node-tenant.json" --output-env="node-tenant.env"
+twin-node set-node-org-id --load-env="organization-identity.env" --organization-id=!ORGANIZATION_DID
 ```
 
-### Import a tenant to be used by the node
+### Step 6 - Create the node tenant and associate the organisation (multi-tenant only)
 
 ```shell
-twin-node tenant-import --load-env="node-tenant.json" --tenant-id=!NODE_TENANT_ID --api-key=!NODE_API_KEY --label=!NODE_LABEL --public-origin="https://api.example.com"
+twin-node tenant-create --load-env="node-identity.env" --label="Node" --output-json="node-tenant.json" --output-env="node-tenant.env" --output-env-prefix=node
 ```
 
-### Update a tenant to be used by the node
-
 ```shell
-twin-node tenant-update --load-env="node-tenant.json" --tenant-id=!NODE_TENANT_ID --label="New Label"
+twin-node set-tenant-org-id --load-env="node-tenant.env,organization-identity.env" --tenant-id=!NODE_TENANT_ID --organization-id=!ORGANIZATION_DID
 ```
 
-### Set the organization ID on the node
+To import an existing tenant instead:
 
 ```shell
-twin-node set-node-org-id --load-env="organization-identity.env" --organization-id=!ORGANIZATION_DID
+twin-node tenant-import --load-env="node-tenant.json" --tenant-id=!NODE_TENANT_ID --api-key=!NODE_API_KEY --label=!NODE_LABEL --public-origin="https://api.example.com"
 ```
 
-### Set the organization ID on a tenant
+To update an existing tenant:
 
 ```shell
-twin-node set-tenant-org-id --load-env="node-tenant.env,organization-identity.env" --tenant-id=!NODE_TENANT_ID --organization-id=!ORGANIZATION_DID
+twin-node tenant-update --load-env="node-tenant.json" --tenant-id=!NODE_TENANT_ID --label="New Label"
 ```
 
-### Remove an alias from the tenant organization ID legacy list
+To remove a stale organisation alias from a tenant:
 
 ```shell
 twin-node remove-tenant-org-alias --load-env="node-tenant.env" --tenant-id=!NODE_TENANT_ID --alias=!OLD_ORGANIZATION_DID
 ```
 
-### Add a verification method to the organisation identity for attestation
+---
 
-```shell
-twin-node identity-verification-method-create --load-env="node-identity.env,organization-identity.env" --identity=!ORGANIZATION_DID --controller=!NODE_DID --verification-method-id=!TWIN_ATTESTATION_VERIFICATION_METHOD_ID --output-json="organization-attestation.json" --output-env="organization-attestation.env"
-```
+The following steps run when the `admin-user` feature is enabled.
 
-### Import an attestation verification method for the organisation identity
+### Step 7 - Add the blob encryption key to the organisation (if blob encryption is enabled)
 
 ```shell
-twin-node identity-verification-method-import --load-env="node-identity.env,organization-identity.env,organization-attestation.env" --identity=!ORGANIZATION_DID --controller=!NODE_DID --verification-method-id=!DID_VERIFICATION_METHOD_ID --private-key-hex=!DID_VERIFICATION_METHOD_PRIVATE_KEY_HEX
+twin-node vault-key-create --load-env="organization-identity.env" --identity=!ORGANIZATION_DID --key-type=ChaCha20Poly1305 --key-id=!TWIN_BLOB_STORAGE_ENCRYPTION_KEY_ID --overwrite-mode=skip --output-json="organization-blob-encryption.json" --output-env="organization-blob-encryption.env"
 ```
 
-### Create a verifiable credential based on the organisation attestation verification method
+### Step 8 - Add the attestation verification method to the organisation (if attestation is enabled)
 
 ```shell
-twin-node identity-verifiable-credential-create --load-env="organization-identity.env,organization-attestation.env" --identity=!ORGANIZATION_DID --verification-method-id=!TWIN_ATTESTATION_VERIFICATION_METHOD_ID --subject-json="subject.json" --output-json="organization-attestation-credential.json" --output-env="organization-attestation-credential.env"
+twin-node identity-verification-method-create --load-env="node-identity.env,organization-identity.env" --identity=!ORGANIZATION_DID --verification-method-type=assertionMethod --verification-method-id=!TWIN_ATTESTATION_VERIFICATION_METHOD_ID --overwrite-mode=skip --output-json="organization-attestation.json" --output-env="organization-attestation.env"
 ```
 
-### Add a verification method to the organisation identity for immutable proofs
+To import an existing attestation verification method:
 
 ```shell
-twin-node identity-verification-method-create --load-env="node-identity.env,organization-identity.env" --identity=!ORGANIZATION_DID --controller=!NODE_DID --verification-method-id=!TWIN_IMMUTABLE_PROOF_VERIFICATION_METHOD_ID --output-json="organization-immutable-proof.json" --output-env="organization-immutable-proof.env"
+twin-node identity-verification-method-import --load-env="node-identity.env,organization-identity.env,organization-attestation.env" --identity=!ORGANIZATION_DID --verification-method-id=!DID_VERIFICATION_METHOD_ID --private-key-hex=!DID_VERIFICATION_METHOD_PRIVATE_KEY_HEX
 ```
 
-### Add a verification method to the organisation identity for trust verification
+To create a verifiable credential using the attestation verification method:
 
 ```shell
-twin-node identity-verification-method-create --load-env="node-identity.env,organization-identity.env" --identity=!ORGANIZATION_DID --controller=!NODE_DID --verification-method-id=!TWIN_TRUST_VERIFICATION_METHOD_ID --output-json="organization-trust.json" --output-env="organization-trust.env"
+twin-node identity-verifiable-credential-create --load-env="organization-identity.env,organization-attestation.env" --identity=!ORGANIZATION_DID --verification-method-id=!TWIN_ATTESTATION_VERIFICATION_METHOD_ID --subject-json="subject.json" --output-json="organization-attestation-credential.json" --output-env="organization-attestation-credential.env"
 ```
 
-### Add a key associated with the organisation to be used for blob encryption
+### Step 9 - Add the immutable proof verification method to the organisation (if immutable proofs are enabled)
 
 ```shell
-twin-node vault-key-create --load-env="organization-identity.env" --identity=!ORGANIZATION_DID --key-id=!TWIN_BLOB_STORAGE_ENCRYPTION_KEY_ID --key-type=ChaCha20Poly1305 --output-json="organization-blob-encryption.json" --output-env="organization-blob-encryption.env"
+twin-node identity-verification-method-create --load-env="node-identity.env,organization-identity.env" --identity=!ORGANIZATION_DID --verification-method-type=assertionMethod --verification-method-id=!TWIN_IMMUTABLE_PROOF_VERIFICATION_METHOD_ID --overwrite-mode=skip --output-json="organization-immutable-proof.json" --output-env="organization-immutable-proof.env"
 ```
 
-### Create an identity associated with the organisation
+### Step 10 - Create the admin user identity
 
 ```shell
-twin-node identity-create --load-env="organization-identity.env" --controller=!ORGANIZATION_DID --output-json="user-identity.json" --output-env="user-identity.env" --output-env-prefix=user
+twin-node identity-create --load-env="organization-identity.env" --controller=!ORGANIZATION_DID --output-json="admin-user-identity.json" --output-env="admin-user-identity.env" --output-env-prefix=admin_user
 ```
 
-### Create a user login associated with the user identity
+### Step 11 - Create the admin user account
 
 ```shell
-twin-node user-create --load-env="organization-identity.env,user-identity.env,node-tenant.env" --user-identity=!USER_DID --organization-identity=!ORGANIZATION_DID --email="admin@node" --scope="tenant-admin" --output-json="user-account-admin.json" --output-env="user-account-admin.env" --output-env-prefix=admin
+twin-node user-create --load-env="organization-identity.env,admin-user-identity.env,node-tenant.env" --user-identity=!ADMIN_USER_DID --organization-identity=!ORGANIZATION_DID --email="admin@node" --given-name="Node" --family-name="Admin" --scope="tenant-admin,user-admin" --output-json="user-account-admin.json" --output-env="user-account-admin.env" --output-env-prefix=admin
 ```
 
-### Update a user login associated with the user identity
+To update an existing user:
 
 ```shell
-twin-node user-update --load-env="organization-identity.env,user-identity.env,node-tenant.env" --email="admin@node" --scope="tenant-admin,foo"
+twin-node user-update --load-env="organization-identity.env,admin-user-identity.env,node-tenant.env" --email="admin@node" --scope="tenant-admin,user-admin,foo"
 ```

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@twin.org/node",
-	"version": "0.0.3-next.53",
+	"version": "0.0.3-next.55",
 	"description": "TWIN Node serving APIs using the specified configuration",
 	"repository": {
 		"type": "git",
@@ -14,7 +14,7 @@
 		"node": ">=20.0.0"
 	},
 	"dependencies": {
-		"@twin.org/node-core": "0.0.3-next.53"
+		"@twin.org/node-core": "0.0.3-next.55"
 	},
 	"bugs": {
 		"url": "git+https://github.com/iotaledger/twin-node/issues"