chore: upgrade to @trustvc/trustvc

.github/workflows/ARCHITECTURE.md

@@ -90,7 +90,7 @@ This document describes the architecture and flow of the CI/CD pipeline for Open
                ▼
 ┌─────────────────────────────────────────┐
 │   Setup Node.js (actions/setup-node@v4) │
-│   - Version: 18.x                       │
+│   - Version: 22.x                       │
 │   - Cache: npm                          │
 └──────────────┬──────────────────────────┘
                │

.github/workflows/README.md

@@ -253,7 +253,7 @@ Ensure AWS IAM user/role has these permissions:
 ## Version Information
 
 - **GitHub Actions:** v4
-- **Node.js:** 18.x
+- **Node.js:** 22.x
 - **Serverless Framework:** 3.x
 - **AWS Actions:** v4
 

.github/workflows/deploy-dev.yml

@@ -23,7 +23,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: '18.x'
+          node-version: '22.x'
           cache: 'npm'
 
       - name: Install dependencies
@@ -106,6 +106,7 @@ jobs:
       DOMAIN: ${{ secrets.DEV_DOMAIN }}
       CERTIFICATE_DOMAIN: ${{ secrets.DEV_CERTIFICATE_DOMAIN }}
       DISABLE_DOMAIN: ${{ secrets.DEV_DISABLE_DOMAIN }}
+      INFURA_API_KEY: ${{ secrets.INFURA_API_KEY }}
 
   # Deploy Storage Service
   deploy-storage:
@@ -127,6 +128,7 @@ jobs:
       DOMAIN: ${{ secrets.DEV_DOMAIN }}
       CERTIFICATE_DOMAIN: ${{ secrets.DEV_CERTIFICATE_DOMAIN }}
       DISABLE_DOMAIN: ${{ secrets.DEV_DISABLE_DOMAIN }}
+      INFURA_API_KEY: ${{ secrets.INFURA_API_KEY }}
 
   # Deploy Verify Service - Development (Sepolia)
   deploy-verify-dev:
@@ -146,6 +148,7 @@ jobs:
       DOMAIN: ${{ secrets.DEV_DOMAIN }}
       CERTIFICATE_DOMAIN: ${{ secrets.DEV_CERTIFICATE_DOMAIN }}
       DISABLE_DOMAIN: ${{ secrets.DEV_DISABLE_DOMAIN }}
+      INFURA_API_KEY: ${{ secrets.INFURA_API_KEY }}
 
   # Deployment summary
   deployment-summary:

.github/workflows/deploy-service.yml

@@ -53,6 +53,8 @@ on:
         required: false
       DISABLE_DOMAIN:
         required: false
+      INFURA_API_KEY:
+        required: false
 
 jobs:
   deploy:
@@ -66,7 +68,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: '18.x'
+          node-version: '22.x'
           cache: 'npm'
 
       - name: Install dependencies
@@ -95,6 +97,7 @@ jobs:
           DOMAIN=${{ secrets.DOMAIN }}
           CERTIFICATE_DOMAIN=${{ secrets.CERTIFICATE_DOMAIN }}
           DISABLE_DOMAIN=${{ secrets.DISABLE_DOMAIN || 'false' }}
+          INFURA_API_KEY=${{ secrets.INFURA_API_KEY }}
           EOF
 
       - name: Install Serverless Framework

.github/workflows/deploy.yml

@@ -20,7 +20,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: '18.x'
+          node-version: '22.x'
           cache: 'npm'
 
       - name: Install dependencies
@@ -102,27 +102,8 @@ jobs:
       DOMAIN: ${{ secrets.DOMAIN }}
       CERTIFICATE_DOMAIN: ${{ secrets.CERTIFICATE_DOMAIN }}
       DISABLE_DOMAIN: ${{ secrets.DISABLE_DOMAIN }}
-
-  # Deploy Storage Service
-  deploy-storage:
-    name: Deploy Storage Service
-    needs: determine-deployment
-    if: needs.determine-deployment.outputs.deploy-storage == 'true'
-    uses: ./.github/workflows/deploy-service.yml
-    with:
-      service-name: storage
-      service-path: src/storage
-      environment: prod
-    secrets:
-      AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
-      AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
-      AWS_REGION: ${{ secrets.AWS_REGION }}
-      BUCKET_NAME: ${{ secrets.BUCKET_NAME }}
-      OBJECT_TTL: ${{ secrets.OBJECT_TTL }}
-      ENABLE_STORAGE_UPLOAD_API_KEY: ${{ secrets.ENABLE_STORAGE_UPLOAD_API_KEY }}
-      DOMAIN: ${{ secrets.DOMAIN }}
-      CERTIFICATE_DOMAIN: ${{ secrets.CERTIFICATE_DOMAIN }}
-      DISABLE_DOMAIN: ${{ secrets.DISABLE_DOMAIN }}
+      NETWORK: mainnet
+      INFURA_API_KEY: ${{ secrets.INFURA_API_KEY }}
 
   # Deploy Verify Service - Development (Sepolia)
   deploy-verify-dev:
@@ -142,6 +123,7 @@ jobs:
       DOMAIN: ${{ secrets.DOMAIN }}
       CERTIFICATE_DOMAIN: ${{ secrets.CERTIFICATE_DOMAIN }}
       DISABLE_DOMAIN: ${{ secrets.DISABLE_DOMAIN }}
+      INFURA_API_KEY: ${{ secrets.INFURA_API_KEY }}
 
   # Deploy Verify Service - Production (Mainnet)
   deploy-verify-prod:
@@ -161,12 +143,13 @@ jobs:
       DOMAIN: ${{ secrets.DOMAIN }}
       CERTIFICATE_DOMAIN: ${{ secrets.CERTIFICATE_DOMAIN }}
       DISABLE_DOMAIN: ${{ secrets.DISABLE_DOMAIN }}
+      INFURA_API_KEY: ${{ secrets.INFURA_API_KEY }}
 
   # Deployment summary
   deployment-summary:
     name: Deployment Summary
     runs-on: ubuntu-latest
-    needs: [determine-deployment, deploy-email, deploy-storage, deploy-verify-dev, deploy-verify-prod]
+    needs: [determine-deployment, deploy-email, deploy-verify-dev, deploy-verify-prod]
     if: always() && (github.event_name == 'push' || github.event_name == 'workflow_dispatch')
     steps:
       - name: Generate deployment summary
@@ -181,10 +164,6 @@ jobs:
             echo "- **Email Service:** ${{ needs.deploy-email.result }}" >> $GITHUB_STEP_SUMMARY
           fi
 
-          if [ "${{ needs.deploy-storage.result }}" != "skipped" ]; then
-            echo "- **Storage Service:** ${{ needs.deploy-storage.result }}" >> $GITHUB_STEP_SUMMARY
-          fi
-
           if [ "${{ needs.deploy-verify-dev.result }}" != "skipped" ]; then
             echo "- **Verify Service (Dev - Sepolia):** ${{ needs.deploy-verify-dev.result }}" >> $GITHUB_STEP_SUMMARY
           fi

.github/workflows/destroy.yml

@@ -38,7 +38,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: '18.x'
+          node-version: '22.x'
           cache: 'npm'
 
       - name: Install dependencies

.github/workflows/rollback.yml

@@ -40,7 +40,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: '18.x'
+          node-version: '22.x'
           cache: 'npm'
 
       - name: Install dependencies

.github/workflows/tests.yml

@@ -12,7 +12,7 @@ jobs:
     - name: Setup Node.js
       uses: actions/setup-node@v4
       with:
-        node-version: '18.x'
+        node-version: '22.x'
         cache: 'npm'
 
     - name: Install dependencies

.nvmrc

@@ -1 +1 @@
-lts/hydrogen
+22

CICD_SETUP.md

@@ -17,7 +17,7 @@ Before setting up the CI/CD pipeline, ensure you have:
 - [ ] AWS Account with appropriate permissions
 - [ ] GitHub repository with admin access
 - [ ] AWS CLI installed and configured (for initial setup)
-- [ ] Node.js 18.x installed locally
+- [ ] Node.js 22.x installed locally
 - [ ] Serverless Framework knowledge
 
 ## AWS Setup
@@ -447,7 +447,7 @@ aws cloudwatch put-metric-alarm \
 #### 5. Tests Fail in CI but Pass Locally
 
 **Solution:**
-- Check Node.js version matches (18.x)
+- Check Node.js version matches (22.x)
 - Verify all dependencies are in `package.json`
 - Check for environment-specific code
 

_stubs_/core-js-fn/object/assign.js

@@ -0,0 +1 @@
+module.exports = Object.assign;

_stubs_/core-js-fn/object/entries.js

@@ -0,0 +1 @@
+module.exports = Object.entries;

_stubs_/core-js-fn/promise.js

@@ -0,0 +1 @@
+module.exports = Promise;

_stubs_/core-js-fn/symbol.js

@@ -0,0 +1 @@
+module.exports = Symbol;

_stubs_/core-js-fn/symbol/index.js

@@ -0,0 +1 @@
+module.exports = Symbol;

_stubs_/core-js-fn/symbol/to-string-tag.js

@@ -0,0 +1 @@
+module.exports = Symbol.toStringTag;

jest.config.js

@@ -6,5 +6,32 @@ module.exports = {
     "\\.subject": "jest-raw-loader",
     "\\.m?jsx?$": "jest-esm-transformer"
   },
-  transformIgnorePatterns: ["node_modules/(?!(axios)/)"]
+  transformIgnorePatterns: [
+    "/node_modules/(?!(axios|@digitalbazaar|base58-universal|base64url-universal|cborg)/)"
+  ],
+  moduleNameMapper: {
+    "@tradetrust-tt/token-registry-v5/contracts":
+      "<rootDir>/node_modules/@tradetrust-tt/token-registry-v5/dist/contracts/index.js",
+    "@tradetrust-tt/token-registry/contracts":
+      "<rootDir>/node_modules/@tradetrust-tt/token-registry/dist/contracts/index.js",
+    // @digitalbazaar ESM-only packages — point to actual lib/index.js so transformIgnorePatterns can transpile them
+    "@digitalbazaar/bls12-381-multikey":
+      "<rootDir>/node_modules/@digitalbazaar/bls12-381-multikey/lib/index.js",
+    "@digitalbazaar/bbs-signatures":
+      "<rootDir>/node_modules/@digitalbazaar/bbs-signatures/lib/index.js",
+    "@digitalbazaar/ecdsa-multikey":
+      "<rootDir>/node_modules/@digitalbazaar/ecdsa-multikey/lib/index.js",
+    "@digitalbazaar/data-integrity":
+      "<rootDir>/node_modules/@digitalbazaar/data-integrity/lib/index.js",
+    "@digitalbazaar/ecdsa-sd-2023-cryptosuite":
+      "<rootDir>/node_modules/@digitalbazaar/ecdsa-sd-2023-cryptosuite/lib/index.js",
+    "@digitalbazaar/bbs-2023-cryptosuite":
+      "<rootDir>/node_modules/@digitalbazaar/bbs-2023-cryptosuite/lib/index.js",
+    "@digitalbazaar/di-sd-primitives":
+      "<rootDir>/node_modules/@digitalbazaar/di-sd-primitives/lib/index.js",
+    // ESM-only dependencies of @digitalbazaar packages
+    "base58-universal": "<rootDir>/node_modules/base58-universal/lib/index.js",
+    "base64url-universal":
+      "<rootDir>/node_modules/base64url-universal/lib/index.js"
+  }
 };

jest.setup.js

@@ -1,3 +1,14 @@
 require("dotenv").config();
 
+// Polyfill Web Streams API globals for Jest's VM sandbox (undici/jsonld-signatures require these)
+const {
+  ReadableStream,
+  WritableStream,
+  TransformStream
+} = require("node:stream/web");
+
+if (!global.ReadableStream) global.ReadableStream = ReadableStream;
+if (!global.WritableStream) global.WritableStream = WritableStream;
+if (!global.TransformStream) global.TransformStream = TransformStream;
+
 jest.setTimeout(15000); // verify endpoint is a bit slow can take up to 10 seconds