gdc-sdk-node-ts 2.7.4 → 2.7.6

package/dist/node-managed-wallet.d.ts

@@ -20,6 +20,8 @@ export type NodeProfessionalIdentityVpInput = Readonly<{
     sameAs?: string | readonly string[];
     telephone?: string;
     credentialMaterial?: string;
+    /** Server-authorized credentials appended after the professional identity VC. */
+    additionalCredentials?: ReadonlyArray<object>;
 }>;
 export type NodeCommunicationWalletInitialization = {
     /**

package/dist/node-managed-wallet.js

@@ -4,7 +4,7 @@ import { CryptographyService } from 'gdc-common-utils-ts/CryptographyService';
 import { Content } from 'gdc-common-utils-ts/utils/content';
 import { createJwtSigner } from 'gdc-common-utils-ts/utils/jwt-signer';
 import { buildJwtCompact, prepareJwtForSignature } from 'gdc-common-utils-ts/utils/jwt';
-import { buildProfessionalIdentityVpPayload } from 'gdc-common-utils-ts/utils/professional-smart';
+import { buildProfessionalIdentityVpPayload, getProfessionalIdentityVC, } from 'gdc-common-utils-ts/utils/professional-smart';
 import { NodeCryptoHelper } from './node-crypto-helper.js';
 const DEFAULT_POLICY = {
     defaults: {
@@ -359,6 +359,19 @@ export class NodeManagedWallet {
             ...(input.sameAs ? { sameAs: input.sameAs } : {}),
             ...(input.telephone ? { telephone: input.telephone } : {}),
             ...(input.credentialMaterial ? { credentialMaterial: input.credentialMaterial } : {}),
+            ...(input.additionalCredentials?.length ? {
+                verifiableCredential: [
+                    getProfessionalIdentityVC({
+                        actorDid: input.actorDid,
+                        role: input.role,
+                        ...(input.email ? { email: input.email } : {}),
+                        ...(input.sameAs ? { sameAs: input.sameAs } : {}),
+                        ...(input.telephone ? { telephone: input.telephone } : {}),
+                        ...(input.credentialMaterial ? { credentialMaterial: input.credentialMaterial } : {}),
+                    }),
+                    ...input.additionalCredentials.map(credential => credential),
+                ],
+            } : {}),
         });
         return this.signCompactJws(context, {
             header: { typ: 'JWT', jwk: vpSigningKey.publicJwk },

package/dist/server-profile-session.d.ts

@@ -281,6 +281,13 @@ export type ServerProfessionalOpenInput = Readonly<{
     pin?: string;
     /** Server-only seed already authorized by a product passkey/session policy. */
     authorizedWalletSeed?: string;
+    /** Provider tenant selected by a server-authorized inter-tenant workflow. */
+    target?: Readonly<{
+        providerDid: string;
+        routeContext: RouteContext;
+    }>;
+    /** Verified access credentials appended to the managed professional VP. */
+    accessCredentials?: ReadonlyArray<object>;
 }>;
 /** Business authorization requested from SMART; OpenID/JWT fields stay SDK-owned. */
 export type ServerProfessionalSmartTokenInput = Readonly<{

package/dist/server-profile-session.js

@@ -582,13 +582,17 @@ export class ServerProfileSessionManager {
         const wallet = await this.createWallet(walletKeyDerivationId, seed);
         const context = walletContext(walletKeyDerivationId);
         await requireRegisteredProfileKeys(wallet, context, profile);
+        const targetProviderDid = String(input.target?.providerDid || profile.providerDid).trim();
+        const targetRouteContext = input.target?.routeContext || profile.routeContext;
+        if (!targetProviderDid)
+            throw new Error('Opening a professional requires a target provider DID.');
         const secureTransportAdapter = {
-            pack: (message) => wallet.packForRecipientWithContext(bindOrganizationControllerTransport(message, profile), profile.providerDid, { context }),
+            pack: (message) => wallet.packForRecipientWithContext(bindOrganizationControllerTransport(message, { ...profile, providerDid: targetProviderDid }), targetProviderDid, { context }),
             unpack: async (jwe) => (await wallet.unpackWithContext(jwe, { context })).content,
         };
         const operationalClient = new NodeHttpClient({
             baseUrl: this.options.gatewayBaseUrl,
-            ctx: profile.routeContext,
+            ctx: targetRouteContext,
             bearerToken: idToken,
             fetchImpl: this.options.fetchImpl,
             appInfo: this.options.appInfo,
@@ -608,7 +612,7 @@ export class ServerProfileSessionManager {
             const now = this.now();
             const audience = [
                 this.options.gatewayBaseUrl.replace(/\/+$/, ''),
-                buildIdentityOpenIdSmartTokenPath(profile.routeContext),
+                buildIdentityOpenIdSmartTokenPath(targetRouteContext),
             ].join('');
             const clientAssertion = await buildWalletClientAssertion(wallet, profile, audience, now);
             const vpToken = await buildManagedProfessionalVp(wallet, context, {
@@ -617,9 +621,10 @@ export class ServerProfileSessionManager {
                 profileDid: profile.profileDid,
                 ...input.professionalProof,
                 role,
+                additionalCredentials: input.accessCredentials,
             });
             return smartSdk.requestSmartToken({
-                ...profile.routeContext,
+                ...targetRouteContext,
                 actorDid: profile.actorDid,
                 subjectDid: String(smart.subjectDid || '').trim() || undefined,
                 clientId: profile.clientId,
@@ -654,7 +659,7 @@ export class ServerProfileSessionManager {
             searchDigitalTwins: (search) => {
                 if (!digitalTwinAccessToken)
                     throw new Error('Digital twin SMART token has not been granted.');
-                return digitalTwin.search(profile.routeContext, { ...search, accessToken: digitalTwinAccessToken });
+                return digitalTwin.search(targetRouteContext, { ...search, accessToken: digitalTwinAccessToken });
             },
         };
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gdc-sdk-node-ts",
-  "version": "2.7.4",
+  "version": "2.7.6",
   "description": "Next-generation Node runtime package for the GDC SDK family",
   "license": "Apache-2.0",
   "author": "Antifraud Services Inc.",
@@ -38,7 +38,7 @@
     "test:e2e:live-gw:clean": "bash ./scripts/run-live-gw-clean.sh"
   },
   "dependencies": {
-    "gdc-common-utils-ts": "2.8.3",
+    "gdc-common-utils-ts": "2.8.5",
     "gdc-sdk-core-ts": "2.5.4"
   },
   "devDependencies": {