@verana-labs/vs-agent-sdk 2.0.0-dev.6 → 2.0.0-dev.60

package/README.md

@@ -22,7 +22,6 @@ const agent = createVsAgent({
       endpoints: ['https://agent.example.com/didcomm'],
     }),
   ],
-  label: 'My Agent',
   publicApiBaseUrl: 'https://api.example.com',
   dependencies: getNodeHttpServer(),
 })
@@ -138,7 +137,6 @@ const chain = new VeranaChainService({
 const agent = createVsAgent({
   plugins: [...],
   veranaChain: chain,
-  label: 'My Agent',
   publicApiBaseUrl: 'https://api.example.com',
   dependencies: getNodeHttpServer(),
 })

package/build/adminApi/AdminApiError.d.ts

@@ -0,0 +1,25 @@
+export declare enum AdminApiErrorCode {
+    InvalidInput = "INVALID_INPUT",
+    InvalidCursor = "INVALID_CURSOR",
+    Unauthenticated = "UNAUTHENTICATED",
+    Forbidden = "FORBIDDEN",
+    UnknownId = "UNKNOWN_ID",
+    InvalidState = "INVALID_STATE",
+    NoCompatibleCredentials = "NO_COMPATIBLE_CREDENTIALS",
+    InvalidPackage = "INVALID_PACKAGE",
+    UnsupportedFormat = "UNSUPPORTED_FORMAT",
+    NotReady = "NOT_READY",
+    NotAuthorized = "NOT_AUTHORIZED",
+    PeerNotAuthorized = "PEER_NOT_AUTHORIZED",
+    ResolverUnavailable = "RESOLVER_UNAVAILABLE",
+    Internal = "INTERNAL"
+}
+export declare class AdminApiError extends Error {
+    readonly code: string;
+    readonly status: number;
+    constructor(code: string, status: number, message: string);
+}
+export declare function moduleNotServed(module: string): AdminApiError;
+export declare function unknownConnection(connectionId: string): AdminApiError;
+export type TrustDecisionSubject = 'agent' | 'peer';
+export declare function trustDecisionError(error: unknown, subject: TrustDecisionSubject, notDerivableCode?: AdminApiErrorCode): unknown;

package/build/adminApi/AdminApiError.js

@@ -0,0 +1,57 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdminApiError = exports.AdminApiErrorCode = void 0;
+exports.moduleNotServed = moduleNotServed;
+exports.unknownConnection = unknownConnection;
+exports.trustDecisionError = trustDecisionError;
+const blockchain_1 = require("../blockchain");
+const BAD_REQUEST = 400;
+const NOT_FOUND = 404;
+const CONFLICT = 409;
+const SERVICE_UNAVAILABLE = 503;
+var AdminApiErrorCode;
+(function (AdminApiErrorCode) {
+    AdminApiErrorCode["InvalidInput"] = "INVALID_INPUT";
+    AdminApiErrorCode["InvalidCursor"] = "INVALID_CURSOR";
+    AdminApiErrorCode["Unauthenticated"] = "UNAUTHENTICATED";
+    AdminApiErrorCode["Forbidden"] = "FORBIDDEN";
+    AdminApiErrorCode["UnknownId"] = "UNKNOWN_ID";
+    AdminApiErrorCode["InvalidState"] = "INVALID_STATE";
+    AdminApiErrorCode["NoCompatibleCredentials"] = "NO_COMPATIBLE_CREDENTIALS";
+    AdminApiErrorCode["InvalidPackage"] = "INVALID_PACKAGE";
+    AdminApiErrorCode["UnsupportedFormat"] = "UNSUPPORTED_FORMAT";
+    AdminApiErrorCode["NotReady"] = "NOT_READY";
+    AdminApiErrorCode["NotAuthorized"] = "NOT_AUTHORIZED";
+    AdminApiErrorCode["PeerNotAuthorized"] = "PEER_NOT_AUTHORIZED";
+    AdminApiErrorCode["ResolverUnavailable"] = "RESOLVER_UNAVAILABLE";
+    AdminApiErrorCode["Internal"] = "INTERNAL";
+})(AdminApiErrorCode || (exports.AdminApiErrorCode = AdminApiErrorCode = {}));
+class AdminApiError extends Error {
+    constructor(code, status, message) {
+        super(message);
+        this.code = code;
+        this.status = status;
+        this.name = 'AdminApiError';
+    }
+}
+exports.AdminApiError = AdminApiError;
+function moduleNotServed(module) {
+    return new AdminApiError(AdminApiErrorCode.UnknownId, NOT_FOUND, `this deployment does not serve the ${module} module`);
+}
+function unknownConnection(connectionId) {
+    return new AdminApiError(AdminApiErrorCode.UnknownId, NOT_FOUND, `no connection with id "${connectionId}"`);
+}
+function trustDecisionError(error, subject, notDerivableCode) {
+    if (!(error instanceof blockchain_1.AnonCredsTrustError))
+        return error;
+    if (error.reason === blockchain_1.AnonCredsTrustErrorReason.Unavailable) {
+        return new AdminApiError(AdminApiErrorCode.ResolverUnavailable, SERVICE_UNAVAILABLE, error.message);
+    }
+    const unauthorizedCode = subject === 'peer' ? AdminApiErrorCode.PeerNotAuthorized : AdminApiErrorCode.NotAuthorized;
+    if (error.reason === blockchain_1.AnonCredsTrustErrorReason.NotAuthorized) {
+        return new AdminApiError(unauthorizedCode, CONFLICT, error.message);
+    }
+    const code = notDerivableCode !== null && notDerivableCode !== void 0 ? notDerivableCode : unauthorizedCode;
+    return new AdminApiError(code, code === AdminApiErrorCode.InvalidInput ? BAD_REQUEST : CONFLICT, error.message);
+}
+//# sourceMappingURL=AdminApiError.js.map

package/build/adminApi/AdminApiError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AdminApiError.js","sourceRoot":"","sources":["../../src/adminApi/AdminApiError.ts"],"names":[],"mappings":";;;AAmCA,0CAMC;AAED,8CAEC;AAID,gDAyBC;AA1ED,8CAA8E;AAE9E,MAAM,WAAW,GAAG,GAAG,CAAA;AACvB,MAAM,SAAS,GAAG,GAAG,CAAA;AACrB,MAAM,QAAQ,GAAG,GAAG,CAAA;AACpB,MAAM,mBAAmB,GAAG,GAAG,CAAA;AAE/B,IAAY,iBAeX;AAfD,WAAY,iBAAiB;IAC3B,mDAA8B,CAAA;IAC9B,qDAAgC,CAAA;IAChC,wDAAmC,CAAA;IACnC,4CAAuB,CAAA;IACvB,6CAAwB,CAAA;IACxB,mDAA8B,CAAA;IAC9B,0EAAqD,CAAA;IACrD,uDAAkC,CAAA;IAClC,6DAAwC,CAAA;IACxC,2CAAsB,CAAA;IACtB,qDAAgC,CAAA;IAChC,8DAAyC,CAAA;IACzC,iEAA4C,CAAA;IAC5C,0CAAqB,CAAA;AACvB,CAAC,EAfW,iBAAiB,iCAAjB,iBAAiB,QAe5B;AAED,MAAa,aAAc,SAAQ,KAAK;IACtC,YACkB,IAAY,EACZ,MAAc,EAC9B,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAA;QAJE,SAAI,GAAJ,IAAI,CAAQ;QACZ,WAAM,GAAN,MAAM,CAAQ;QAI9B,IAAI,CAAC,IAAI,GAAG,eAAe,CAAA;IAC7B,CAAC;CACF;AATD,sCASC;AAED,SAAgB,eAAe,CAAC,MAAc;IAC5C,OAAO,IAAI,aAAa,CACtB,iBAAiB,CAAC,SAAS,EAC3B,SAAS,EACT,sCAAsC,MAAM,SAAS,CACtD,CAAA;AACH,CAAC;AAED,SAAgB,iBAAiB,CAAC,YAAoB;IACpD,OAAO,IAAI,aAAa,CAAC,iBAAiB,CAAC,SAAS,EAAE,SAAS,EAAE,0BAA0B,YAAY,GAAG,CAAC,CAAA;AAC7G,CAAC;AAID,SAAgB,kBAAkB,CAChC,KAAc,EACd,OAA6B,EAC7B,gBAAoC;IAEpC,IAAI,CAAC,CAAC,KAAK,YAAY,gCAAmB,CAAC;QAAE,OAAO,KAAK,CAAA;IAEzD,IAAI,KAAK,CAAC,MAAM,KAAK,sCAAyB,CAAC,WAAW,EAAE,CAAC;QAC3D,OAAO,IAAI,aAAa,CAAC,iBAAiB,CAAC,mBAAmB,EAAE,mBAAmB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IACrG,CAAC;IAED,MAAM,gBAAgB,GACpB,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAA;IAE5F,IAAI,KAAK,CAAC,MAAM,KAAK,sCAAyB,CAAC,aAAa,EAAE,CAAC;QAC7D,OAAO,IAAI,aAAa,CAAC,gBAAgB,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IACrE,CAAC;IAED,MAAM,IAAI,GAAG,gBAAgB,aAAhB,gBAAgB,cAAhB,gBAAgB,GAAI,gBAAgB,CAAA;IAEjD,OAAO,IAAI,aAAa,CACtB,IAAI,EACJ,IAAI,KAAK,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,EAChE,KAAK,CAAC,OAAO,CACd,CAAA;AACH,CAAC"}

package/build/adminApi/didcommModules.d.ts

@@ -0,0 +1,2 @@
+import type { DidcommModule } from '../types';
+export declare function moduleOf(modules: readonly DidcommModule[], protocol: string): string | undefined;

package/build/adminApi/didcommModules.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.moduleOf = moduleOf;
+function moduleOf(modules, protocol) {
+    var _a;
+    return (_a = modules.find(({ prefixes }) => prefixes.some(prefix => protocol.startsWith(prefix)))) === null || _a === void 0 ? void 0 : _a.module;
+}
+//# sourceMappingURL=didcommModules.js.map

package/build/adminApi/didcommModules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"didcommModules.js","sourceRoot":"","sources":["../../src/adminApi/didcommModules.ts"],"names":[],"mappings":";;AAEA,4BAEC;AAFD,SAAgB,QAAQ,CAAC,OAAiC,EAAE,QAAgB;;IAC1E,OAAO,MAAA,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,0CAAE,MAAM,CAAA;AACrG,CAAC"}

package/build/adminApi/index.d.ts

@@ -0,0 +1,3 @@
+export * from './AdminApiError';
+export * from './didcommModules';
+export * from './moduleEndpoint';

package/build/adminApi/index.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./AdminApiError"), exports);
+__exportStar(require("./didcommModules"), exports);
+__exportStar(require("./moduleEndpoint"), exports);
+//# sourceMappingURL=index.js.map

package/build/adminApi/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/adminApi/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,kDAA+B;AAC/B,mDAAgC;AAChC,mDAAgC"}

package/build/adminApi/moduleEndpoint.d.ts

@@ -0,0 +1,8 @@
+import type { BaseAgentModules, VsAgent } from '../agent/VsAgent';
+import { BaseRecord } from '@credo-ts/core';
+import { DidCommConnectionRecord, DidCommMessage } from '@credo-ts/didcomm';
+type Agent = VsAgent<BaseAgentModules>;
+export declare function moduleService<T>(agent: Agent, service: new (...args: any[]) => T, module: string): T;
+export declare function connectionOf(agent: Agent, connectionId: string): Promise<DidCommConnectionRecord>;
+export declare function sendMessage(agent: Agent, connection: DidCommConnectionRecord, message: DidCommMessage, associatedRecord?: BaseRecord<any, any, any>): Promise<string>;
+export {};

package/build/adminApi/moduleEndpoint.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.moduleService = moduleService;
+exports.connectionOf = connectionOf;
+exports.sendMessage = sendMessage;
+const didcomm_1 = require("@credo-ts/didcomm");
+const AdminApiError_1 = require("./AdminApiError");
+function moduleService(agent, service, module) {
+    const { dependencyManager } = agent.context;
+    if (!dependencyManager.isRegistered(service))
+        throw (0, AdminApiError_1.moduleNotServed)(module);
+    return dependencyManager.resolve(service);
+}
+async function connectionOf(agent, connectionId) {
+    const connection = await agent.didcomm.connections.findById(connectionId);
+    if (!connection)
+        throw (0, AdminApiError_1.unknownConnection)(connectionId);
+    return connection;
+}
+async function sendMessage(agent, connection, message, associatedRecord) {
+    await agent.context.dependencyManager.resolve(didcomm_1.DidCommMessageSender).sendMessage(new didcomm_1.DidCommOutboundMessageContext(message, {
+        agentContext: agent.context,
+        connection,
+        associatedRecord,
+    }));
+    return message.id;
+}
+//# sourceMappingURL=moduleEndpoint.js.map

package/build/adminApi/moduleEndpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"moduleEndpoint.js","sourceRoot":"","sources":["../../src/adminApi/moduleEndpoint.ts"],"names":[],"mappings":";;AAcA,sCAIC;AAED,oCAIC;AAED,kCAcC;AArCD,+CAK0B;AAE1B,mDAAoE;AAIpE,SAAgB,aAAa,CAAI,KAAY,EAAE,OAAkC,EAAE,MAAc;IAC/F,MAAM,EAAE,iBAAiB,EAAE,GAAG,KAAK,CAAC,OAAO,CAAA;IAC3C,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,OAAO,CAAC;QAAE,MAAM,IAAA,+BAAe,EAAC,MAAM,CAAC,CAAA;IAC3E,OAAO,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;AAC3C,CAAC;AAEM,KAAK,UAAU,YAAY,CAAC,KAAY,EAAE,YAAoB;IACnE,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;IACzE,IAAI,CAAC,UAAU;QAAE,MAAM,IAAA,iCAAiB,EAAC,YAAY,CAAC,CAAA;IACtD,OAAO,UAAU,CAAA;AACnB,CAAC;AAEM,KAAK,UAAU,WAAW,CAC/B,KAAY,EACZ,UAAmC,EACnC,OAAuB,EACvB,gBAA4C;IAE5C,MAAM,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,8BAAoB,CAAC,CAAC,WAAW,CAC7E,IAAI,uCAA6B,CAAC,OAAO,EAAE;QACzC,YAAY,EAAE,KAAK,CAAC,OAAO;QAC3B,UAAU;QACV,gBAAgB;KACjB,CAAC,CACH,CAAA;IACD,OAAO,OAAO,CAAC,EAAE,CAAA;AACnB,CAAC"}

package/build/agent/VsAgent.d.ts

@@ -1,21 +1,21 @@
-import { AnonCredsDidCommCredentialFormatService, AnonCredsModule, AnonCredsDidCommProofFormatService, LegacyIndyDidCommCredentialFormatService, LegacyIndyDidCommProofFormatService } from '@credo-ts/anoncreds';
+import { AnonCredsDidCommCredentialFormatService, AnonCredsModule, AnonCredsDidCommProofFormatService } from '@credo-ts/anoncreds';
 import { AskarModule, AskarModuleConfigStoreOptions } from '@credo-ts/askar';
 import { Agent, AgentDependencies, DidsModule, InitConfig, W3cCredentialsModule } from '@credo-ts/core';
-import { DidCommCredentialsModuleConfigOptions, DidCommCredentialV2Protocol, DidCommFeatureQueryOptions, DidCommJsonLdCredentialFormatService, DidCommModule, DidCommModuleConfigOptions, DidCommProofsModuleConfigOptions, DidCommProofV2Protocol } from '@credo-ts/didcomm';
+import { DidCommCredentialsModuleConfigOptions, DidCommCredentialV2Protocol, DidCommDataIntegrityCredentialFormatService, DidCommFeatureQueryOptions, DidCommModule, DidCommModuleConfigOptions, DidCommProofsModuleConfigOptions, DidCommProofV2Protocol } from '@credo-ts/didcomm';
 import { VtFlowModule } from '@verana-labs/credo-ts-didcomm-vt-flow';
+import { AnonCredsTrustService } from '../blockchain/AnonCredsTrustService';
 import { AuthorizationService } from '../blockchain/AuthorizationService';
 import { VeranaChainService } from '../blockchain/VeranaChainService';
+import { VeranaIndexerService } from '../blockchain/VeranaIndexerService';
+import { EcsClaims } from '../utils/ecsClaims';
 type VsAgentDidCommModule = DidCommModule<DidCommModuleConfigOptions & {
     credentials: DidCommCredentialsModuleConfigOptions<[
         DidCommCredentialV2Protocol<[
-            LegacyIndyDidCommCredentialFormatService,
             AnonCredsDidCommCredentialFormatService,
-            DidCommJsonLdCredentialFormatService
+            DidCommDataIntegrityCredentialFormatService
         ]>
     ]>;
-    proofs: DidCommProofsModuleConfigOptions<[
-        DidCommProofV2Protocol<[LegacyIndyDidCommProofFormatService, AnonCredsDidCommProofFormatService]>
-    ]>;
+    proofs: DidCommProofsModuleConfigOptions<[DidCommProofV2Protocol<[AnonCredsDidCommProofFormatService]>]>;
 }>;
 export type BaseAgentModules = {
     askar: AskarModule;
@@ -32,22 +32,23 @@ interface AgentOptions<TModules extends BaseAgentModules> {
 }
 export declare class VsAgent<TModules extends BaseAgentModules = BaseAgentModules> extends Agent<TModules> {
     did?: string;
-    autoDiscloseUserProfile?: boolean;
     publicApiBaseUrl: string;
     adminApiServiceEndpoint?: string;
-    displayPictureUrl?: string;
-    label: string;
     veranaChain?: VeranaChainService;
+    indexer: VeranaIndexerService;
+    trustedEcosystemDids?: string[];
+    ecsClaims?: EcsClaims;
     authorizationService?: AuthorizationService;
     discoveryOptions?: DidCommFeatureQueryOptions[];
+    readonly anonCredsTrust: AnonCredsTrustService;
     constructor(options: AgentOptions<TModules> & {
         did?: string;
-        autoDiscloseUserProfile?: boolean;
         publicApiBaseUrl: string;
         adminApiServiceEndpoint?: string;
-        displayPictureUrl?: string;
-        label: string;
         veranaChain?: VeranaChainService;
+        indexer: VeranaIndexerService;
+        trustedEcosystemDids?: string[];
+        ecsClaims?: EcsClaims;
         authorizationService?: AuthorizationService;
         discoveryOptions?: DidCommFeatureQueryOptions[];
     });
@@ -56,37 +57,18 @@ export declare class VsAgent<TModules extends BaseAgentModules = BaseAgentModule
     private findCreatedDid;
     private findEd25519VerificationMethodId;
     private getDidCommServices;
-    private persistDidDocumentKey;
-    /**
-     * Fix a webvh update-key mapping whose `didDocumentRelativeKeyId` was stored as the full multibase
-     * (e.g. `#z6Mk...`) while the DID document verification method uses a short fragment (e.g. `#BVhGnL79`).
-     * `getKmsKeyIdForVerifiacationMethod` matches by suffix (`vm.id.endsWith(relativeKeyId)`), so the
-     * mismatch leaves the update key unresolvable and every webvh update fails with
-     * "The key ID must be present before the log can be edited." The private key is present in the KMS;
-     * only the mapping label is wrong. Idempotent: a mapping that already correlates to a VM is left alone.
-     */
-    private repairWebvhUpdateKeyMapping;
     private createAndAddDidCommKeysAndServices;
-    private createAndAddLinkedVpServices;
-    /**
-     * Basic implicit webvh services, for the moment pointing to the service VP
-     * and public base URL
-     */
-    private createAndAddWebVhImplicitServices;
-    private createAndAddAnonCredsServices;
+    private addLinkedVpContext;
     private applyAdminApiService;
 }
 export interface VsAgentOptions {
     config: InitConfig;
     did?: string;
-    autoDiscloseUserProfile?: boolean;
     dependencies: AgentDependencies;
     publicApiBaseUrl: string;
     adminApiServiceEndpoint?: string;
     masterListCscaLocation?: string;
     endpoints: string[];
     walletConfig: AskarModuleConfigStoreOptions;
-    displayPictureUrl?: string;
-    label: string;
 }
 export {};