cassproject 5.0.15 → 5.0.17

package/package.json

@@ -1,15 +1,24 @@
 {
 	"name": "cassproject",
-	"version": "5.0.15",
+	"version": "5.0.17",
 	"description": "Competency and Skills Service",
 	"main": "index.js",
 	"scripts": {
-		"test": "concurrently --maxProcesses=1 --kill-others-on-fail \"npm run test16HttpsFips\" \"npm run test16Https11Fips\" \"npm run test16Https\" \"npm run test16Https11\" \"npm run test16Fips\" \"npm run test16\" \"npm run test15HttpsFips\" \"npm run test15Https11Fips\" \"npm run test15Https\" \"npm run test15Https11\" \"npm run test15Fips\" \"npm run test15\"",
+		"test": "concurrently --maxProcesses=1 --kill-others-on-fail \"npm run test17HttpsFips\" \"npm run test17Https11Fips\" \"npm run test17Https\" \"npm run test17Https11\" \"npm run test17Fips\" \"npm run test17\" \"npm run test16HttpsFips\" \"npm run test16Https11Fips\" \"npm run test16Https\" \"npm run test16Https11\" \"npm run test16Fips\" \"npm run test16\" \"npm run test15HttpsFips\" \"npm run test15Https11Fips\" \"npm run test15Https\" \"npm run test15Https11\" \"npm run test15Fips\" \"npm run test15\"",
 		"testActionCypress": "npm run testkill && export CASS_LOOPBACK=http://cass-test15/api/|| set CASS_LOOPBACK=http://cass-test15/api/&& npm run testkill15 && docker run -d --network cass-net -e CASS_LOOPBACK --name cass-test15 -p80:80 cassproject/cass:1.5.75 && wait-on http://localhost/api/ping && concurrently --kill-others-on-fail \"npm run testCypress\"",
 		"testCustom": "npm run test14 && npm run test13 && npm run test12",
 		"multitest": "concurrently --kill-others-on-fail \"npm run test15\" \"npm run test14\" \"npm run test13\" \"npm run test12\"",
 		"testCassTest": "npm run testkill && docker run -d --network cass-net --name cass-test -p80:80 -e CASS_LOOPBACK cass-test && wait-on http://localhost/api/ping && npm run testNode18 && npm run testNode18Fips && npm run testCypressEdge && npm run testCypress && npm run testkill",
 		"testDevHttps": "npm run testkill && docker run -d --network cass-net --name cass-test -p443:80 -e CASS_LOOPBACK -e HTTPS=true cassproject/cass:dev && wait-on https://localhost/api/ping && npm run testNode18HttpsFips && npm run testNode18Https && npm run testCypressEdgeHttps && npm run testCypressHttps",
+		"test17HttpsFips": "export CASS_LOOPBACK=https://cass-testsf17/api/|| set CASS_LOOPBACK=https://cass-testsf17/api/&& npm run testkillsf17 && docker run -d --network cass-net --name cass-testsf17 -p454:443 -e CASS_LOOPBACK -e HTTPS=true --pull always cassproject/cass:1.7 && wait-on https://localhost:454/api/ping && concurrently --kill-others-on-fail \"npm run testCypressHttps\" \"npm run testNode24Https\" \"npm run testNode24HttpsFips\" \"npm run testNode24HttpsForceFips\" \"npm run testNode22Https\" \"npm run testNode22HttpsFips\" \"npm run testNode22HttpsForceFips\" \"npm run testNode20Https\" \"npm run testNode20HttpsFips\" \"npm run testNode20HttpsForceFips\" \"npm run testNode18Https\" && npm run testkillsf17",
+		"test17Https11Fips": "export CASS_LOOPBACK=https://cass-testsf1117/api/|| set CASS_LOOPBACK=https://cass-testsf1117/api/&& npm run testkillsf1117 && docker run -d --network cass-net --name cass-testsf1117 -p453:443 -e CASS_LOOPBACK -e HTTPS=true -e HTTP2=false cassproject/cass:1.7 && wait-on https://localhost:453/api/ping && concurrently --kill-others-on-fail \"npm run testCypressHttps\" \"npm run testNode24Https\" \"npm run testNode24HttpsFips\" \"npm run testNode24HttpsForceFips\" \"npm run testNode22Https\" \"npm run testNode22HttpsFips\" \"npm run testNode22HttpsForceFips\" \"npm run testNode20Https\" \"npm run testNode20HttpsFips\" \"npm run testNode20HttpsForceFips\" \"npm run testNode18Https\" && npm run testkillsf1117",
+		"test17Https": "export CASS_LOOPBACK=https://cass-tests17/api/|| set CASS_LOOPBACK=https://cass-tests17/api/&& npm run testkills17 && docker run -d --network cass-net --name cass-tests17 -p452:443 -e CASS_LOOPBACK -e HTTPS=true cassproject/cass:1.7 && wait-on https://localhost:452/api/ping && concurrently --kill-others-on-fail \"npm run testCypressHttps\" \"npm run testNode24Https\" \"npm run testNode24HttpsFips\" \"npm run testNode22Https\" \"npm run testNode22HttpsFips\" \"npm run testNode20Https\" \"npm run testNode20HttpsFips\" \"npm run testNode18Https\" && npm run testkills17",
+		"test17HttpsNoFips": "export CASS_LOOPBACK=https://cass-tests17/api/|| set CASS_LOOPBACK=https://cass-tests17/api/&& npm run testkills17 && docker run -d --network cass-net --name cass-tests17 -p452:443 -e CASS_LOOPBACK -e HTTPS=true cassproject/cass:1.7 && wait-on https://localhost:452/api/ping && concurrently --kill-others-on-fail \"npm run testCypressHttps\" \"npm run testNode24Https\" \"npm run testNode22Https\" \"npm run testNode20Https\" \"npm run testNode18Https\" && npm run testkills17",
+		"test17Https11": "export CASS_LOOPBACK=https://cass-tests1117/api/|| set CASS_LOOPBACK=https://cass-tests1117/api/&& npm run testkills1117 && docker run -d --network cass-net --name cass-tests1117 -p455:443 -e CASS_LOOPBACK -e HTTPS=true -e HTTP2=false cassproject/cass:1.7 && wait-on https://localhost:455/api/ping && concurrently --kill-others-on-fail \"npm run testCypressHttps\" \"npm run testNode24Https\" \"npm run testNode24HttpsFips\" \"npm run testNode22Https\" \"npm run testNode22HttpsFips\" \"npm run testNode20Https\" \"npm run testNode20HttpsFips\" \"npm run testNode18Https\" && npm run testkills1117",
+		"test17Https11NoFips": "export CASS_LOOPBACK=https://cass-tests1117/api/|| set CASS_LOOPBACK=https://cass-tests1117/api/&& npm run testkills1117 && docker run -d --network cass-net --name cass-tests1117 -p455:443 -e CASS_LOOPBACK -e HTTPS=true -e HTTP2=false cassproject/cass:1.7 && wait-on https://localhost:455/api/ping && concurrently --kill-others-on-fail \"npm run testCypressHttps\" \"npm run testNode24Https\" \"npm run testNode22Https\" \"npm run testNode20Https\" \"npm run testNode18Https\" && npm run testkills1117",
+		"test17Fips": "export CASS_LOOPBACK=http://cass-testf17/api/|| set CASS_LOOPBACK=http://cass-testf17/api/&& npm run testkillf17 && docker run -d --network cass-net -e CASS_LOOPBACK --name cass-testf17 -p85:80 cassproject/cass:1.7 && wait-on http://localhost:85/api/ping && concurrently --kill-others-on-fail \"npm run testCypress\" \"npm run testNode24\" \"npm run testNode24Fips\" \"npm run testNode24ForceFips\" \"npm run testNode22\" \"npm run testNode22Fips\" \"npm run testNode22ForceFips\" \"npm run testNode20\" \"npm run testNode20Fips\" \"npm run testNode20ForceFips\" \"npm run testNode18\" && npm run testkillf17",
+		"test17": "export CASS_LOOPBACK=http://cass-test17/api/|| set CASS_LOOPBACK=http://cass-test17/api/&& npm run testkill17 && docker run -d --network cass-net -e CASS_LOOPBACK --name cass-test17 -p84:80 cassproject/cass:1.7 && wait-on http://localhost:84/api/ping && concurrently --kill-others-on-fail \"npm run testCypress\" \"npm run testNode24\" \"npm run testNode24Fips\" \"npm run testNode22\" \"npm run testNode22Fips\" \"npm run testNode20\" \"npm run testNode20Fips\" \"npm run testNode18\" && npm run testkill17",
+		"test17NoFips": "export CASS_LOOPBACK=http://cass-test17/api/|| set CASS_LOOPBACK=http://cass-test17/api/&& npm run testkill17 && docker run -d --network cass-net -e CASS_LOOPBACK --name cass-test17 -p84:80 cassproject/cass:1.7 && wait-on http://localhost:84/api/ping && concurrently --kill-others-on-fail \"npm run testCypress\" \"npm run testNode24\" \"npm run testNode22\" \"npm run testNode20\" \"npm run testNode18\" && npm run testkill17",
 		"test16HttpsFips": "export CASS_LOOPBACK=https://cass-testsf16/api/|| set CASS_LOOPBACK=https://cass-testsf16/api/&& npm run testkillsf16 && docker run -d --network cass-net --name cass-testsf16 -p450:443 -e CASS_LOOPBACK -e HTTPS=true --pull always cassproject/cass:1.6 && wait-on https://localhost:450/api/ping && concurrently --kill-others-on-fail \"npm run testCypressHttps\" \"npm run testNode24Https\" \"npm run testNode24HttpsFips\" \"npm run testNode24HttpsForceFips\" \"npm run testNode22Https\" \"npm run testNode22HttpsFips\" \"npm run testNode22HttpsForceFips\" \"npm run testNode20Https\" \"npm run testNode20HttpsFips\" \"npm run testNode20HttpsForceFips\" \"npm run testNode18Https\" && npm run testkillsf16",
 		"test16Https11Fips": "export CASS_LOOPBACK=https://cass-testsf1116/api/|| set CASS_LOOPBACK=https://cass-testsf1116/api/&& npm run testkillsf1116 && docker run -d --network cass-net --name cass-testsf1116 -p449:443 -e CASS_LOOPBACK -e HTTPS=true -e HTTP2=false cassproject/cass:1.6 && wait-on https://localhost:449/api/ping && concurrently --kill-others-on-fail \"npm run testCypressHttps\" \"npm run testNode24Https\" \"npm run testNode24HttpsFips\" \"npm run testNode24HttpsForceFips\" \"npm run testNode22Https\" \"npm run testNode22HttpsFips\" \"npm run testNode22HttpsForceFips\" \"npm run testNode20Https\" \"npm run testNode20HttpsFips\" \"npm run testNode20HttpsForceFips\" \"npm run testNode18Https\" && npm run testkillsf1116",
 		"test16Https": "export CASS_LOOPBACK=https://cass-tests16/api/|| set CASS_LOOPBACK=https://cass-tests16/api/&& npm run testkills16 && docker run -d --network cass-net --name cass-tests16 -p448:443 -e CASS_LOOPBACK -e HTTPS=true cassproject/cass:1.6 && wait-on https://localhost:448/api/ping && concurrently --kill-others-on-fail \"npm run testCypressHttps\" \"npm run testNode24Https\" \"npm run testNode24HttpsFips\" \"npm run testNode22Https\" \"npm run testNode22HttpsFips\" \"npm run testNode20Https\" \"npm run testNode20HttpsFips\" \"npm run testNode18Https\" && npm run testkills16",
@@ -31,6 +40,12 @@
 		"test14": "npm run testkill14 && docker run -d --network cass-net -e CASS_LOOPBACK --name cass-test14 -p80:80 cassproject/cass:1.4.4 && wait-on http://localhost/api/ping && concurrently --kill-others-on-fail \"npm run testCypress\" \"npm run testNode16\" && npm run testkill14",
 		"test13": "npm run testkill13 && docker run -d --network cass-net -e CASS_LOOPBACK --name cass-test13 -p80:80 cassproject/cass:1.3.18 && wait-on http://localhost/api/ping && concurrently --kill-others-on-fail \"npm run testCypress\" \"npm run testNode16\" && npm run testkill13",
 		"test12": "npm run testkill12 && docker run -d --network cass-net -e CASS_LOOPBACK --name cass-test12 -p80:80 cassproject/cass:1.2.44 && wait-on http://localhost/api/ping && concurrently --kill-others-on-fail \"npm run testCypress\" \"npm run testNode16\" && npm run testkill12",
+		"testkillsf17": "docker kill cass-testsf17 | exit 0 && docker rm cass-testsf17 | exit 0 && docker network create cass-net | exit 0",
+		"testkillsf1117": "(docker kill cass-testsf1117 | exit 0) && (docker rm cass-testsf1117 | exit 0) && docker network create cass-net | exit 0",
+		"testkills17": "docker kill cass-tests17 | exit 0 && docker rm cass-tests17 | exit 0 && docker network create cass-net | exit 0",
+		"testkills1117": "docker kill cass-tests1117 | exit 0 && docker rm cass-tests1117 | exit 0 && docker network create cass-net | exit 0",
+		"testkillf17": "docker kill cass-testf17 | exit 0 && docker rm cass-testf17 | exit 0 && docker network create cass-net | exit 0",
+		"testkill17": "docker kill cass-test17 | exit 0 && docker rm cass-test17 | exit 0 && docker network create cass-net | exit 0",
 		"testkillsf16": "docker kill cass-testsf16 | exit 0 && docker rm cass-testsf16 | exit 0 && docker network create cass-net | exit 0",
 		"testkillsf1116": "(docker kill cass-testsf1116 | exit 0) && (docker rm cass-testsf1116 | exit 0) && docker network create cass-net | exit 0",
 		"testkills16": "docker kill cass-tests16 | exit 0 && docker rm cass-tests16 | exit 0 && docker network create cass-net | exit 0",
@@ -143,7 +158,7 @@
 		"base64-arraybuffer": "^1.0.2",
 		"jsonld": "^9.0.0",
 		"node-forge": "^1.4.0",
-		"papaparse": "^5.5.3",
+		"papaparse": "^5.5.4",
 		"promise-worker": "^2.0.1",
 		"web-worker": "1.3.0"
 	},
@@ -169,20 +184,20 @@
 	},
 	"homepage": "https://github.com/cassproject/cass-npm#readme",
 	"devDependencies": {
-		"@cypress/webpack-preprocessor": "^7.1.0",
+		"@cypress/webpack-preprocessor": "^7.1.1",
 		"chai": "^4.5.0",
-		"concurrently": "^10.0.0",
-		"cypress": "^15.16.0",
+		"concurrently": "^10.0.4",
+		"cypress": "15.19.0",
 		"cypress-fail-fast": "^8.1.0",
-		"eslint": "^10.4.1",
+		"eslint": "^10.8.0",
 		"fake-indexeddb": "^6.2.5",
 		"mocha": "^11.7.6",
 		"node-polyfill-webpack-plugin": "^4.1.0",
 		"nodemon": "^3.1.14",
 		"nyc": "^18.0.0",
 		"sinon": "^21.1.2",
-		"wait-on": "^9.0.10",
-		"webpack": "^5.107.2"
+		"wait-on": "^9.1.0",
+		"webpack": "^5.109.1"
 	},
 	"packageManager": "npm@11.3.0+sha512.96eb611483f49c55f7fa74df61b588de9e213f80a256728e6798ddc67176c7b07e4a1cfc7de8922422cbce02543714367037536955221fa451b0c4fefaf20c66"
 }

package/src/com/eduworks/ec/crypto/EcCrypto.js

@@ -1,4 +1,3 @@
-const { v4: uuidv4 } = require('uuid');
 let forge = require("node-forge");
 /**
  *  @author Fritz
@@ -71,9 +70,19 @@ module.exports = class EcCrypto {
 		return new TextEncoder("utf-8").encode(str).buffer;
 	}
 	static generateUUID()
-	{  
-		let uuid = uuidv4();
-		uuid = uuid.substr(0,9)+'c455'+uuid.substr(13);
-		return uuid;
+	{
+		var d = new Date().getTime(); //Timestamp
+		var d2 = ((typeof performance !== 'undefined') && performance.now && (performance.now() * 1000)) || 0;//Time in microseconds since page-load or 0 if unsupported
+		return 'xxxxxxxx-c455-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, function (c) {
+			var r = Math.random() * 16;//random number between 0 and 16
+			if (d > 0) {//Use timestamp until depleted
+				r = (d + r) % 16 | 0;
+				d = Math.floor(d / 16);
+			} else {//Use microseconds since page-load if supported
+				r = (d2 + r) % 16 | 0;
+				d2 = Math.floor(d2 / 16);
+			}
+			return (c === 'x' ? r : (r & 0x3 | 0x8)).toString(16);
+		});
 	}
 };

package/src/index/env.js

@@ -4,16 +4,19 @@ if (typeof window !== "undefined" && window) {
 }
 
 global.generateUUID = function () {
-    let d = new Date().getTime();
-    if (typeof window !== "undefined" && window && window.performance && typeof window.performance.now === "function") {
-        d += performance.now(); // use high-precision timer if available
-    }
-    let uuid = 'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, function (c) {
-        let r = (d + Math.random() * 16) % 16 | 0;
-        d = Math.floor(d / 16);
-        return (c == 'x' ? r : r & 0x3 | 0x8).toString(16);
+    var d = new Date().getTime(); //Timestamp
+    var d2 = ((typeof performance !== 'undefined') && performance.now && (performance.now() * 1000)) || 0;//Time in microseconds since page-load or 0 if unsupported
+    return 'xxxxxxxx-c455-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, function (c) {
+        var r = Math.random() * 16;//random number between 0 and 16
+        if (d > 0) {//Use timestamp until depleted
+            r = (d + r) % 16 | 0;
+            d = Math.floor(d / 16);
+        } else {//Use microseconds since page-load if supported
+            r = (d2 + r) % 16 | 0;
+            d2 = Math.floor(d2 / 16);
+        }
+        return (c === 'x' ? r : (r & 0x3 | 0x8)).toString(16);
     });
-    return uuid;
 };
 
 try {

package/src/org/cass/competency/EcLevel.js

@@ -122,13 +122,12 @@ module.exports = class EcLevel extends Level {
 		repo, eim
 	) {
 		let a = new EcAlignment();
-		a.source = this.id;
-		a.target = targetLevel.id;
+		a.source = this.shortId();
+		a.target = targetLevel.shortId();
 		a.relationType = alignmentType;
 		a.addOwner(identity.toPk());
 		if (repo?.selectedServer != null)
 			a.generateId(repo.selectedServer);
-		await a.signWith(identity);
 		await a.save(success, failure, repo, eim);
 		return a;
 	}

package/src/org/cassproject/ebac/repository/EcRepository.js

@@ -134,6 +134,23 @@ module.exports = class EcRepository {
 			return Reflect.deleteProperty(...arguments);
 		}
 	});
+	/**
+	 *  Empties the in-memory cache and, if L2 caching is enabled, the
+	 *  IndexedDB backing store. Do not reassign cacheBacking to clear the
+	 *  cache -- the cache proxy permanently wraps the original object.
+	 *
+	 *  @memberOf EcRepository
+	 *  @method clearCache
+	 *  @static
+	 */
+	static clearCache = () => {
+		for (let prop of Object.keys(EcRepository.cacheBacking))
+			delete EcRepository.cacheBacking[prop];
+		if (EcRepository.cachingL2 == true && EcRepository.cacheDB != null) {
+			const transaction = EcRepository.cacheDB.transaction(EcRepository.LONGIDS, "readwrite");
+			transaction.objectStore(EcRepository.LONGIDS).clear();
+		}
+	};
 	static fetching = {};
 	static repos = [];
 	static defaultPlugins = [];
@@ -146,7 +163,9 @@ module.exports = class EcRepository {
 	postMaxSize = null;
 	init(selectedServer, success, failure, loginObjectCallback) {
 		this.selectedServer = selectedServer;
-		return this.negotiateTimeOffset(success, failure, loginObjectCallback);
+		return this.negotiateTimeOffset(success, failure, loginObjectCallback).then(()=>{
+			return this.fetchServerAdminKeys()
+		});
 	}
 	negotiateTimeOffset = function (success, failure, loginObjectCallback) {
 		let oldTimeout = EcRemote.timeout;
@@ -781,16 +800,7 @@ module.exports = class EcRepository {
 		} else {
 			offset = repo.timeOffset;
 		}
-		if (data.owner != null && data.owner.length > 0) {
-			p = eim.signatureSheetFor(
-				data.owner,
-				300000 + offset,
-				data.id,
-				null, null, repo != null ? repo.signatureSheetHashAlgorithm : null
-			);
-		} else {
-			p = eim.signatureSheet(300000 + offset, data.id, null, null, repo != null ? repo.signatureSheetHashAlgorithm : null);
-		}
+		p = eim.signatureSheet(300000 + offset, data.id, null, null, repo != null ? repo.signatureSheetHashAlgorithm : null);
 		p = p.then((signatureSheet) => {
 			let fd = new FormData();
 			fd.append("data", data.toJson());
@@ -895,23 +905,18 @@ module.exports = class EcRepository {
 		let targetUrl;
 		targetUrl = data.shortId();
 		let offset = this.setOffset(data.id);
-		if (data.owner != null && data.owner.length > 0) {
-			return eim.signatureSheetFor(
-				data.owner,
-				300000 + offset,
-				data.id,
-				null, null, repo != null ? repo.signatureSheetHashAlgorithm : null
-			).then((signatureSheet) => {
-				return EcRemote._delete(
-					targetUrl,
-					signatureSheet,
-					success,
-					failure
-				);
-			});
-		} else {
-			return EcRemote._delete(targetUrl, [], success, failure);
-		}
+		return eim.signatureSheet(
+			300000 + offset,
+			data.id,
+			null, null, repo != null ? repo.signatureSheetHashAlgorithm : null
+		).then((signatureSheet) => {
+			return EcRemote._delete(
+				targetUrl,
+				signatureSheet,
+				success,
+				failure
+			);
+		});
 	};
 	/**
 	 *  Attempts to delete a piece of data.
@@ -965,23 +970,18 @@ module.exports = class EcRepository {
 				EcCrypto.md5(data.shortId())
 			);
 		let offset = EcRepository.setOffset(data.id);
-		if (data.owner != null && data.owner.length > 0) {
-			return eim.signatureSheetFor(
-				data.owner,
-				300000 + offset,
-				data.id,
-				null, null, this != null ? this.signatureSheetHashAlgorithm : null
-			).then((signatureSheet) => {
-				return EcRemote._delete(
-					targetUrl,
-					signatureSheet,
-					success,
-					failure
-				);
-			});
-		} else {
-			return EcRemote._delete(targetUrl, [], success, failure);
-		}
+		return eim.signatureSheet(
+			300000 + offset,
+			data.id,
+			null, null, this != null ? this.signatureSheetHashAlgorithm : null
+		).then((signatureSheet) => {
+			return EcRemote._delete(
+				targetUrl,
+				signatureSheet,
+				success,
+				failure
+			);
+		});
 	};
 	/**
 	 *  Attempts to save many pieces of data. Does some checks before saving to
@@ -1001,7 +1001,6 @@ module.exports = class EcRepository {
 	multiput = function (data, success, failure, eim) {
 		if (eim === undefined || eim == null)
 			eim = EcIdentityManager.default;
-		let allOwners = [];
 		for (let d of data) {
 			if (d.invalid())
 				throw new Error("Cannot save data. It is missing a vital component.");
@@ -1034,9 +1033,6 @@ module.exports = class EcRepository {
 					)
 				];
 			}
-			if (d.owner != null)
-				for (let j = 0; j < d.owner.length; j++)
-					EcArray.setAdd(allOwners, d.owner[j]);
 		}
 		let encryptionAndSigningPromises = data.map((d) => {
 			return cassReturnAsPromise(d)
@@ -1064,19 +1060,10 @@ module.exports = class EcRepository {
 		return Promise.all(encryptionAndSigningPromises)
 			.then((readyToSendData) => {
 				preparedData = readyToSendData;
-				if (allOwners != null && allOwners.length > 0) {
-					return eim.signatureSheetFor(
-						allOwners,
-						300000 + this.timeOffset,
-						this.selectedServer,
-						null, null, this.signatureSheetHashAlgorithm
-					);
-				} else {
-					return eim.signatureSheet(
-						300000 + this.timeOffset,
-						this.selectedServer, null, null, this.signatureSheetHashAlgorithm
-					);
-				}
+				return eim.signatureSheet(
+					300000 + this.timeOffset,
+					this.selectedServer, null, null, this.signatureSheetHashAlgorithm
+				);
 			})
 			.then((signatureSheet) => {
 				let fd = new FormData();
@@ -1950,7 +1937,7 @@ module.exports = class EcRepository {
 			service = "/sky/admin";
 		}
 		let me = this;
-		EcRemote.getExpectingObject(
+		return EcRemote.getExpectingObject(
 			this.selectedServer,
 			service,
 			function (p1) {
@@ -1959,10 +1946,16 @@ module.exports = class EcRepository {
 				for (let i = 0; i < ary.length; i++) {
 					me.adminKeys.push(ary[i]);
 				}
-				success(ary);
+				if (success != null)
+					success(ary);
+				else 
+					return ary;
 			},
 			function (p1) {
-				failure("");
+				if (failure != null)
+					failure(p1);
+				else 
+					throw new Error(p1);
 			}
 		);
 	};
@@ -1981,9 +1974,7 @@ module.exports = class EcRepository {
 				} else
 					return p1;
 			}
-			p1 = await EcEncryptedValue.fromEncryptedValue(
-				p1, null, null, eim
-			);
+			p1 = await EcEncryptedValue.fromEncryptedValue(p1, null, null, eim);
 			if (p1.isAny(result.getTypes())) {
 				result.copyFrom(p1, eim);
 				if (this.caching) {

package/src/test/1.EcRepository.cache.test.js

@@ -0,0 +1,179 @@
+require('fake-indexeddb/auto');
+
+const schema = {
+    "Thing": require('../org/schema/Thing.js')
+};
+
+let chai = require("chai");
+const EcRepository = require('../org/cassproject/ebac/repository/EcRepository.js');
+const EcCrypto = require('../com/eduworks/ec/crypto/EcCrypto.js');
+const EcRemoteLinkedData = require('../org/cassproject/schema/general/EcRemoteLinkedData.js');
+
+let assert = chai.assert;
+
+const TEST_DB = "EcRepositoryCacheTest";
+
+// Ids that contain /api/data/ and end in /<digits> are "versioned" and eligible
+// for L2 caching; anything else is L1-only.
+let versionedId = () => "http://localhost/api/data/schema.org.Thing/" + EcCrypto.generateUUID() + "/1690000000000";
+let unversionedId = () => "http://localhost/api/data/schema.org.Thing/" + EcCrypto.generateUUID();
+
+let makeThing = (id) => {
+    let thing = new schema.Thing();
+    thing.id = id;
+    thing.setName("Some Thing " + EcCrypto.generateUUID());
+    return thing;
+};
+
+let openTestDb = () => new Promise((resolve, reject) => {
+    const request = indexedDB.open(TEST_DB, 3);
+    request.onerror = reject;
+    request.onupgradeneeded = (event) => {
+        event.target.result.createObjectStore(EcRepository.LONGIDS, { keyPath: "id" });
+    };
+    request.onsuccess = (event) => resolve(event.target.result);
+});
+
+// Reads straight from IndexedDB, bypassing L1, to observe what the proxy wrote.
+let l2Get = (id) => new Promise((resolve, reject) => {
+    const transaction = EcRepository.cacheDB.transaction(EcRepository.LONGIDS, "readonly");
+    const request = transaction.objectStore(EcRepository.LONGIDS).get(id);
+    request.onerror = () => reject(request.error);
+    request.onsuccess = () => resolve(request.result == null ? null : request.result);
+});
+
+let l2Count = () => new Promise((resolve, reject) => {
+    const transaction = EcRepository.cacheDB.transaction(EcRepository.LONGIDS, "readonly");
+    const request = transaction.objectStore(EcRepository.LONGIDS).count();
+    request.onerror = () => reject(request.error);
+    request.onsuccess = () => resolve(request.result);
+});
+
+describe("EcRepository (Cache Management)", () => {
+    before(async () => {
+        EcRepository.caching = true;
+        EcRepository.cachingL2 = false;
+        EcRepository.clearCache();
+        EcRepository.cacheDB = await openTestDb();
+    });
+    after(() => {
+        EcRepository.cachingL2 = true;
+        EcRepository.clearCache();
+        EcRepository.caching = false;
+        EcRepository.cachingL2 = false;
+        EcRepository.cacheDB.close();
+        EcRepository.cacheDB = null;
+        indexedDB.deleteDatabase(TEST_DB);
+    });
+
+    describe("L1", () => {
+        before(() => {
+            EcRepository.cachingL2 = false;
+        });
+        it('cache proxy reads and writes the cacheBacking object', async () => {
+            let id = unversionedId();
+            let thing = makeThing(id);
+            EcRepository.cache[id] = thing;
+            assert.strictEqual(EcRepository.cacheBacking[id], thing, "Write through proxy did not land in cacheBacking.");
+            EcRepository.cacheBacking[id + "/direct"] = thing;
+            assert.strictEqual(EcRepository.cache[id + "/direct"], thing, "Write to cacheBacking not visible through proxy.");
+            assert.strictEqual(await EcRepository.cacheGet(id), thing);
+            delete EcRepository.cache[id + "/direct"];
+        });
+        it('delete through the proxy removes the entry', async () => {
+            let id = unversionedId();
+            EcRepository.cache[id] = makeThing(id);
+            delete EcRepository.cache[id];
+            assert.isUndefined(EcRepository.cacheBacking[id]);
+            assert.isUndefined(await EcRepository.cacheGet(id));
+        });
+        it('clearCache empties L1', async () => {
+            let ids = [unversionedId(), unversionedId(), versionedId()];
+            for (let id of ids)
+                EcRepository.cache[id] = makeThing(id);
+            EcRepository.clearCache();
+            assert.equal(Object.keys(EcRepository.cacheBacking).length, 0);
+            for (let id of ids)
+                assert.isUndefined(await EcRepository.cacheGet(id));
+        });
+    });
+
+    describe("L2", () => {
+        before(() => {
+            EcRepository.cachingL2 = true;
+        });
+        it('versioned writes go to both L1 and IndexedDB', async () => {
+            let id = versionedId();
+            EcRepository.cache[id] = makeThing(id);
+            assert.isDefined(EcRepository.cacheBacking[id], "Entry missing from L1.");
+            let stored = await l2Get(id);
+            assert.isNotNull(stored, "Entry missing from IndexedDB.");
+            assert.equal(stored.id, id);
+        });
+        it('unversioned writes stay in L1 only', async () => {
+            let id = unversionedId();
+            EcRepository.cache[id] = makeThing(id);
+            assert.isDefined(EcRepository.cacheBacking[id], "Entry missing from L1.");
+            assert.isNull(await l2Get(id), "Unversioned entry should not be in IndexedDB.");
+        });
+        it('cacheGet falls back to IndexedDB on L1 miss', async () => {
+            let id = versionedId();
+            let thing = makeThing(id);
+            EcRepository.cache[id] = thing;
+            // Evict from L1 only; a proxy delete would also remove the L2 copy.
+            delete EcRepository.cacheBacking[id];
+            let got = await EcRepository.cacheGet(id);
+            assert.instanceOf(got, EcRemoteLinkedData);
+            assert.equal(got.id, id);
+            assert.equal(got.getName(), thing.getName());
+        });
+        it('delete through the proxy removes the entry from both layers', async () => {
+            let id = versionedId();
+            EcRepository.cache[id] = makeThing(id);
+            delete EcRepository.cache[id];
+            assert.isUndefined(EcRepository.cacheBacking[id], "Entry still in L1.");
+            assert.isNull(await l2Get(id), "Entry still in IndexedDB.");
+            assert.isUndefined(await EcRepository.cacheGet(id));
+        });
+        it('setting an entry to null removes it from IndexedDB', async () => {
+            let id = versionedId();
+            EcRepository.cache[id] = makeThing(id);
+            assert.isNotNull(await l2Get(id));
+            EcRepository.cache[id] = null;
+            assert.isNull(await l2Get(id), "Entry still in IndexedDB.");
+            assert.isNull(EcRepository.cacheBacking[id], "L1 should hold the null marker.");
+            delete EcRepository.cache[id];
+        });
+    });
+
+    describe("clearCache", () => {
+        it('clears both L1 and L2 when L2 caching is enabled', async () => {
+            EcRepository.cachingL2 = true;
+            let vId = versionedId();
+            let uId = unversionedId();
+            EcRepository.cache[vId] = makeThing(vId);
+            EcRepository.cache[uId] = makeThing(uId);
+            assert.isAbove(await l2Count(), 0);
+            EcRepository.clearCache();
+            assert.equal(Object.keys(EcRepository.cacheBacking).length, 0);
+            assert.equal(await l2Count(), 0, "IndexedDB store not emptied.");
+            assert.isUndefined(await EcRepository.cacheGet(vId));
+            assert.isUndefined(await EcRepository.cacheGet(uId));
+        });
+        it('clears only L1 when L2 caching is disabled', async () => {
+            EcRepository.cachingL2 = true;
+            let id = versionedId();
+            EcRepository.cache[id] = makeThing(id);
+            EcRepository.cachingL2 = false;
+            EcRepository.clearCache();
+            assert.equal(Object.keys(EcRepository.cacheBacking).length, 0);
+            assert.isNotNull(await l2Get(id), "IndexedDB copy should survive an L1-only clear.");
+            // The surviving L2 copy is served again once L2 caching is re-enabled.
+            EcRepository.cachingL2 = true;
+            let got = await EcRepository.cacheGet(id);
+            assert.instanceOf(got, EcRemoteLinkedData);
+            assert.equal(got.id, id);
+            EcRepository.clearCache();
+        });
+    });
+});

package/src/test/2.EcLevel.test.js

@@ -9,128 +9,6 @@ const EcIdentityManager = require('../org/cassproject/ebac/identity/EcIdentityMa
 const { expect } = chai;
 
 describe('EcLevel', () => {
-    let sandbox;
-
-    beforeEach(() => {
-        sandbox = sinon.createSandbox();
-    });
-
-    afterEach(() => {
-        sandbox.restore();
-    });
-
-    describe('get', () => {
-        it('should retrieve a level by ID', (done) => {
-            const id = 'testId';
-            const success = sinon.spy();
-            const failure = sinon.spy();
-            const repo = {};
-            const eim = {};
-
-            sandbox.stub(EcRepository, 'getAs').callsFake((id, level, successCallback, failureCallback, repo, eim) => {
-                successCallback(level);
-            });
-
-            EcLevel.get(id, success, failure, repo, eim);
-
-            expect(success.calledOnce).to.be.true;
-            expect(failure.called).to.be.false;
-            done();
-        });
-    });
-
-    describe('getBlocking', () => {
-        it('should retrieve a level by ID synchronously', () => {
-            const id = 'testId';
-            const repo = {};
-            const eim = {};
-
-            sandbox.stub(EcRepository, 'getAs').returns(new EcLevel());
-
-            const result = EcLevel.getBlocking(id, repo, eim);
-
-            expect(result).to.be.instanceOf(EcLevel);
-        });
-    });
-
-    describe('search', () => {
-        it('should search for levels with a query', (done) => {
-            const repo = {};
-            const query = 'testQuery';
-            const success = sinon.spy();
-            const failure = sinon.spy();
-            const paramObj = {};
-            const eim = {};
-
-            sandbox.stub(EcRepository, 'searchAs').callsFake((repo, query, levelFactory, successCallback, failureCallback, paramObj, eim) => {
-                successCallback([new EcLevel()]);
-            });
-
-            EcLevel.search(repo, query, success, failure, paramObj, eim);
-
-            expect(success.calledOnce).to.be.true;
-            expect(failure.called).to.be.false;
-            done();
-        });
-    });
-
-    describe('searchByCompetency', () => {
-        it('should search for levels by competency ID', (done) => {
-            const repo = {};
-            const competencyId = 'testCompetencyId';
-            const success = sinon.spy();
-            const failure = sinon.spy();
-            const paramObj = {};
-            const eim = {};
-
-            sandbox.stub(EcLevel, 'search').callsFake((repo, query, successCallback, failureCallback, paramObj, eim) => {
-                successCallback([new EcLevel()]);
-            });
-
-            EcLevel.searchByCompetency(repo, competencyId, success, failure, paramObj, eim);
-
-            expect(success.calledOnce).to.be.true;
-            expect(failure.called).to.be.false;
-            done();
-        });
-
-        it('should call failure callback if no competency ID is provided', () => {
-            const repo = {};
-            const competencyId = '';
-            const success = sinon.spy();
-            const failure = sinon.spy();
-            const paramObj = {};
-            const eim = {};
-
-            EcLevel.searchByCompetency(repo, competencyId, success, failure, paramObj, eim);
-
-            expect(failure.calledOnce).to.be.true;
-            expect(success.called).to.be.false;
-        });
-    });
-
-    describe('addRelationship', () => {
-        it('should add a relationship between levels', async () => {
-            const level = new EcLevel();
-            level.id = 'sourceId';
-            const targetLevel = new EcLevel();
-            targetLevel.id = 'targetId';
-            const alignmentType = 'testType';
-            const identity = EcPpk.generateKey();
-            const success = sinon.spy();
-            const failure = sinon.spy();
-            const repo = new EcRepository();
-            await repo.init(process.env.CASS_LOOPBACK || 'http://localhost/api/');
-            const eim = EcIdentityManager.default;
-
-            let a = await level.addRelationship(targetLevel, alignmentType, identity, success, failure, repo, eim);
-
-            expect(a.source).to.equal(level.id);
-            expect(a.target).to.equal(targetLevel.id);
-            expect(a.relationType).to.equal(alignmentType);
-        });
-    });
-
     describe('setName', () => {
         it('should set the name of the level', () => {
             const level = new EcLevel();