@vess-id/ai-identity 0.0.3 → 0.2.0

package/dist/index.d.mts

@@ -1,8 +1,8 @@
 import { VerifiablePresentation, VPRequest, Agent, DIDDocument, VCTemplate, ConnectorResponse, ToolPermissionRequest, OrganizationConfig, Grant, CreateGrantRequest, GrantStatus, CheckGrantPermissionRequest, CheckGrantPermissionResult, UpdateGrantRequest, CredentialType, IssueSDJWTVCRequest, IssueSDJWTVCResult, VerifySDJWTVCResult, GrantConstraints, EvaluationContext, ConstraintEvaluationResult, ConstraintViolation, ConstraintWarning, TimeWindowConstraint, RiskLevel } from '@vess-id/ai-identity-types';
 export * from '@vess-id/ai-identity-types';
-import Ajv from 'ajv';
 import * as jose from 'jose';
 import { JWK } from 'jose';
+import Ajv from 'ajv';
 import { SDJwtVcInstance } from '@sd-jwt/sd-jwt-vc';
 import { DisclosureFrame } from '@sd-jwt/types';
 
@@ -730,6 +730,16 @@ declare class AgentDIDManager {
     private deleteAgentDIDMapping;
 }
 
+interface KeyPairGenerationResult {
+    did: string;
+    publicKey: JWK;
+    privateKey: JWK;
+}
+declare class UserKeyPairManager {
+    generateKeyPair(): Promise<KeyPairGenerationResult>;
+    extractPublicKeyInfo(did: string): JWK;
+}
+
 interface OrganizationDisclosureConfig {
     organizationDid: string;
     defaultFields: string[];
@@ -3001,4 +3011,4 @@ declare function getKeyIdFromDid(did: string): string;
 
 declare const version = "0.0.1";
 
-export { type ABACPolicyEngine, ACTION_REGISTRY, AIdentityClient, type AIdentityConfig, APIVCManager, type AbacDecision, type AbacInput, type ActionMeta, type ActionRegistry, AgentDIDManager, AgentManager, AllowAllAbac, type CapabilityMeta, type CheckPermissionInput, type CheckPermissionResult, ConstraintEvaluator, type ConstraintEvaluatorOptions, type CredentialDisclosureConfig, type CredentialRef, type CredentialStatusInfo, type CredentialStore, type DecisionTrace, DisclosureConfigManager, DummyCreds, DummyVpVerifier, FilesystemKeyStorage, type JsonSchema, KeyManager, type KeyRotationConfig, type KeyRotationInfo, KeyRotationManager, type KeyStorageConfig, type KeyStorageProvider, type MemoryDocument, MemoryKeyStorage, MemoryManager, type MemoryQuery, type MemoryQueryResult, MetricsManager, type OperationMetric, type OrganizationDisclosureConfig, type PlanDelegationInput, type PlanDelegationResult, type Provider, type ReBACChecker, type Relation, type ResourceRef, type ResourceScope, type ResourceType, type RevocationList, type RevocationListEntry, RevocationManager, type SDJWTMetrics, SDJwtClient, SimpleRebac, type ToolDefinition, ToolManager, UserIdentityManager, VCManager, VPManager, type VerifiedVcClaims, type VpVerifier, checkPermissionWithVP, configure, createAjv, createDidJwk, defaultConstraintEvaluator, evaluateConstraints, extractPublicKey, extractPublicKeyFromDid, generateKeyPair, generateNonce, getClient, getKeyIdFromDid, getRequiredRelations, getRequiredScopes, indexActions, indexCapabilities, isValidDidJwk, loadActionRegistryFromFile, loadActionRegistryFromObject, planDelegationForVC, resolveActionsFromSelection, signJWT, validateRegistryObject, verifyJWT, version };
+export { type ABACPolicyEngine, ACTION_REGISTRY, AIdentityClient, type AIdentityConfig, APIVCManager, type AbacDecision, type AbacInput, type ActionMeta, type ActionRegistry, AgentDIDManager, AgentManager, AllowAllAbac, type CapabilityMeta, type CheckPermissionInput, type CheckPermissionResult, ConstraintEvaluator, type ConstraintEvaluatorOptions, type CredentialDisclosureConfig, type CredentialRef, type CredentialStatusInfo, type CredentialStore, type DecisionTrace, DisclosureConfigManager, DummyCreds, DummyVpVerifier, FilesystemKeyStorage, type JsonSchema, KeyManager, type KeyPairGenerationResult, type KeyRotationConfig, type KeyRotationInfo, KeyRotationManager, type KeyStorageConfig, type KeyStorageProvider, type MemoryDocument, MemoryKeyStorage, MemoryManager, type MemoryQuery, type MemoryQueryResult, MetricsManager, type OperationMetric, type OrganizationDisclosureConfig, type PlanDelegationInput, type PlanDelegationResult, type Provider, type ReBACChecker, type Relation, type ResourceRef, type ResourceScope, type ResourceType, type RevocationList, type RevocationListEntry, RevocationManager, type SDJWTMetrics, SDJwtClient, SimpleRebac, type ToolDefinition, ToolManager, UserIdentityManager, UserKeyPairManager, VCManager, VPManager, type VerifiedVcClaims, type VpVerifier, checkPermissionWithVP, configure, createAjv, createDidJwk, defaultConstraintEvaluator, evaluateConstraints, extractPublicKey, extractPublicKeyFromDid, generateKeyPair, generateNonce, getClient, getKeyIdFromDid, getRequiredRelations, getRequiredScopes, indexActions, indexCapabilities, isValidDidJwk, loadActionRegistryFromFile, loadActionRegistryFromObject, planDelegationForVC, resolveActionsFromSelection, signJWT, validateRegistryObject, verifyJWT, version };

package/dist/index.d.ts

@@ -1,8 +1,8 @@
 import { VerifiablePresentation, VPRequest, Agent, DIDDocument, VCTemplate, ConnectorResponse, ToolPermissionRequest, OrganizationConfig, Grant, CreateGrantRequest, GrantStatus, CheckGrantPermissionRequest, CheckGrantPermissionResult, UpdateGrantRequest, CredentialType, IssueSDJWTVCRequest, IssueSDJWTVCResult, VerifySDJWTVCResult, GrantConstraints, EvaluationContext, ConstraintEvaluationResult, ConstraintViolation, ConstraintWarning, TimeWindowConstraint, RiskLevel } from '@vess-id/ai-identity-types';
 export * from '@vess-id/ai-identity-types';
-import Ajv from 'ajv';
 import * as jose from 'jose';
 import { JWK } from 'jose';
+import Ajv from 'ajv';
 import { SDJwtVcInstance } from '@sd-jwt/sd-jwt-vc';
 import { DisclosureFrame } from '@sd-jwt/types';
 
@@ -730,6 +730,16 @@ declare class AgentDIDManager {
     private deleteAgentDIDMapping;
 }
 
+interface KeyPairGenerationResult {
+    did: string;
+    publicKey: JWK;
+    privateKey: JWK;
+}
+declare class UserKeyPairManager {
+    generateKeyPair(): Promise<KeyPairGenerationResult>;
+    extractPublicKeyInfo(did: string): JWK;
+}
+
 interface OrganizationDisclosureConfig {
     organizationDid: string;
     defaultFields: string[];
@@ -3001,4 +3011,4 @@ declare function getKeyIdFromDid(did: string): string;
 
 declare const version = "0.0.1";
 
-export { type ABACPolicyEngine, ACTION_REGISTRY, AIdentityClient, type AIdentityConfig, APIVCManager, type AbacDecision, type AbacInput, type ActionMeta, type ActionRegistry, AgentDIDManager, AgentManager, AllowAllAbac, type CapabilityMeta, type CheckPermissionInput, type CheckPermissionResult, ConstraintEvaluator, type ConstraintEvaluatorOptions, type CredentialDisclosureConfig, type CredentialRef, type CredentialStatusInfo, type CredentialStore, type DecisionTrace, DisclosureConfigManager, DummyCreds, DummyVpVerifier, FilesystemKeyStorage, type JsonSchema, KeyManager, type KeyRotationConfig, type KeyRotationInfo, KeyRotationManager, type KeyStorageConfig, type KeyStorageProvider, type MemoryDocument, MemoryKeyStorage, MemoryManager, type MemoryQuery, type MemoryQueryResult, MetricsManager, type OperationMetric, type OrganizationDisclosureConfig, type PlanDelegationInput, type PlanDelegationResult, type Provider, type ReBACChecker, type Relation, type ResourceRef, type ResourceScope, type ResourceType, type RevocationList, type RevocationListEntry, RevocationManager, type SDJWTMetrics, SDJwtClient, SimpleRebac, type ToolDefinition, ToolManager, UserIdentityManager, VCManager, VPManager, type VerifiedVcClaims, type VpVerifier, checkPermissionWithVP, configure, createAjv, createDidJwk, defaultConstraintEvaluator, evaluateConstraints, extractPublicKey, extractPublicKeyFromDid, generateKeyPair, generateNonce, getClient, getKeyIdFromDid, getRequiredRelations, getRequiredScopes, indexActions, indexCapabilities, isValidDidJwk, loadActionRegistryFromFile, loadActionRegistryFromObject, planDelegationForVC, resolveActionsFromSelection, signJWT, validateRegistryObject, verifyJWT, version };
+export { type ABACPolicyEngine, ACTION_REGISTRY, AIdentityClient, type AIdentityConfig, APIVCManager, type AbacDecision, type AbacInput, type ActionMeta, type ActionRegistry, AgentDIDManager, AgentManager, AllowAllAbac, type CapabilityMeta, type CheckPermissionInput, type CheckPermissionResult, ConstraintEvaluator, type ConstraintEvaluatorOptions, type CredentialDisclosureConfig, type CredentialRef, type CredentialStatusInfo, type CredentialStore, type DecisionTrace, DisclosureConfigManager, DummyCreds, DummyVpVerifier, FilesystemKeyStorage, type JsonSchema, KeyManager, type KeyPairGenerationResult, type KeyRotationConfig, type KeyRotationInfo, KeyRotationManager, type KeyStorageConfig, type KeyStorageProvider, type MemoryDocument, MemoryKeyStorage, MemoryManager, type MemoryQuery, type MemoryQueryResult, MetricsManager, type OperationMetric, type OrganizationDisclosureConfig, type PlanDelegationInput, type PlanDelegationResult, type Provider, type ReBACChecker, type Relation, type ResourceRef, type ResourceScope, type ResourceType, type RevocationList, type RevocationListEntry, RevocationManager, type SDJWTMetrics, SDJwtClient, SimpleRebac, type ToolDefinition, ToolManager, UserIdentityManager, UserKeyPairManager, VCManager, VPManager, type VerifiedVcClaims, type VpVerifier, checkPermissionWithVP, configure, createAjv, createDidJwk, defaultConstraintEvaluator, evaluateConstraints, extractPublicKey, extractPublicKeyFromDid, generateKeyPair, generateNonce, getClient, getKeyIdFromDid, getRequiredRelations, getRequiredScopes, indexActions, indexCapabilities, isValidDidJwk, loadActionRegistryFromFile, loadActionRegistryFromObject, planDelegationForVC, resolveActionsFromSelection, signJWT, validateRegistryObject, verifyJWT, version };

package/dist/index.js

@@ -52,6 +52,7 @@ __export(index_exports, {
   SimpleRebac: () => SimpleRebac,
   ToolManager: () => ToolManager,
   UserIdentityManager: () => UserIdentityManager,
+  UserKeyPairManager: () => UserKeyPairManager,
   VCManager: () => VCManager,
   VPManager: () => VPManager,
   checkPermissionWithVP: () => checkPermissionWithVP,
@@ -158,7 +159,7 @@ var os = __toESM(require("os"));
 var FilesystemKeyStorage = class {
   keyStorePath;
   constructor(config) {
-    this.keyStorePath = config?.options?.path || path.join(os.homedir(), ".vess", "keys");
+    this.keyStorePath = config?.options?.path || path.join(os.homedir(), ".vess-aidentity", "keys");
   }
   async store(id, encryptedKey) {
     await this.ensureKeyStoreExists();
@@ -967,7 +968,7 @@ var AgentDIDManager = class {
     const fs3 = await import("fs/promises");
     const path3 = await import("path");
     const os2 = await import("os");
-    const mappingDir = path3.join(os2.homedir(), ".vess", "agent-dids");
+    const mappingDir = path3.join(os2.homedir(), ".vess-aidentity", "agent-dids");
     try {
       const files = await fs3.readdir(mappingDir);
       const results = [];
@@ -993,7 +994,7 @@ var AgentDIDManager = class {
     const fs3 = await import("fs/promises");
     const path3 = await import("path");
     const os2 = await import("os");
-    const mappingDir = path3.join(os2.homedir(), ".vess", "agent-dids");
+    const mappingDir = path3.join(os2.homedir(), ".vess-aidentity", "agent-dids");
     await fs3.mkdir(mappingDir, { recursive: true });
     const mappingFile = path3.join(mappingDir, `${agentId}.did`);
     await fs3.writeFile(mappingFile, did, "utf-8");
@@ -1296,7 +1297,7 @@ var UserIdentityManager = class {
     const fs3 = await import("fs/promises");
     const path3 = await import("path");
     const os2 = await import("os");
-    const configDir = path3.join(os2.homedir(), ".vess");
+    const configDir = path3.join(os2.homedir(), ".vess-aidentity");
     await fs3.mkdir(configDir, { recursive: true });
     const userDIDFile = path3.join(configDir, "user-did.txt");
     await fs3.writeFile(userDIDFile, did, "utf-8");
@@ -1308,7 +1309,7 @@ var UserIdentityManager = class {
     const fs3 = await import("fs/promises");
     const path3 = await import("path");
     const os2 = await import("os");
-    const userDIDFile = path3.join(os2.homedir(), ".vess", "user-did.txt");
+    const userDIDFile = path3.join(os2.homedir(), ".vess-aidentity", "user-did.txt");
     try {
       return await fs3.readFile(userDIDFile, "utf-8");
     } catch {
@@ -1322,7 +1323,7 @@ var UserIdentityManager = class {
     const fs3 = await import("fs/promises");
     const path3 = await import("path");
     const os2 = await import("os");
-    const userDIDFile = path3.join(os2.homedir(), ".vess", "user-did.txt");
+    const userDIDFile = path3.join(os2.homedir(), ".vess-aidentity", "user-did.txt");
     try {
       await fs3.unlink(userDIDFile);
     } catch {
@@ -2811,6 +2812,32 @@ function getClient(config, password) {
   return defaultClient;
 }
 
+// src/identity/user-key-pair-manager.ts
+var UserKeyPairManager = class {
+  /**
+   * Generate a new key pair and create a did:jwk DID
+   */
+  async generateKeyPair() {
+    const keyPair = await SDJwtClient.generateKeyPair();
+    const did = createDidJwk(keyPair.publicKey);
+    return {
+      did,
+      publicKey: keyPair.publicKey,
+      privateKey: keyPair.privateKey
+    };
+  }
+  /**
+   * Extract public key info from a did:jwk DID
+   * @throws Error if the DID is not in did:jwk format
+   */
+  extractPublicKeyInfo(did) {
+    if (!did.startsWith("did:jwk:")) {
+      throw new Error("Only did:jwk format is supported");
+    }
+    return extractPublicKeyFromDid(did);
+  }
+};
+
 // src/vc/api-vc-manager.ts
 var import_ai_identity_types2 = require("@vess-id/ai-identity-types");
 
@@ -4753,6 +4780,7 @@ var version = "0.0.1";
   SimpleRebac,
   ToolManager,
   UserIdentityManager,
+  UserKeyPairManager,
   VCManager,
   VPManager,
   checkPermissionWithVP,