@hyperauth/sdk 0.0.1

package/README.md

@@ -0,0 +1,250 @@
+# Motr Enclave
+
+Extism WASM plugin providing encrypted key storage for the Nebula wallet. Built with Go 1.25+ for `wasip1` target.
+
+## Features
+
+- **WebAuthn Integration** - Device-bound credentials with PRF key derivation
+- **MPC Key Shares** - Secure threshold signature key storage
+- **Multi-Chain Support** - BIP44 derivation for Sonr, Ethereum, Bitcoin
+- **UCAN v1.0.0-rc.1** - Capability-based authorization with CID-indexed delegations
+- **Encryption at Rest** - AES-256-GCM encrypted database serialization
+- **SQLite Functions** - Custom functions for address derivation and signing
+
+## Quick Start
+
+```bash
+make start
+```
+
+This single command:
+1. Installs dependencies (Go, Bun)
+2. Builds the WASM plugin
+3. Builds the TypeScript SDK
+4. Starts the dev server at http://localhost:8080
+
+## Manual Setup
+
+```bash
+make deps      # Install tooling
+make build     # Build WASM plugin
+make sdk       # Build TypeScript SDK
+make dev       # Start dev server
+```
+
+## Library Quickstart
+
+### Installation
+
+```bash
+npm install @hyperauth/sdk
+# or
+bun add @hyperauth/sdk
+```
+
+### 1. Initialize the Enclave
+
+```typescript
+import { createEnclave, createSecureStorage } from '@hyperauth/sdk';
+
+// Create enclave instance (loads WASM)
+const enclave = await createEnclave('/enclave.wasm', {
+  debug: true,              // Enable logging
+  autoLockTimeout: 300000,  // Auto-lock after 5 minutes of inactivity
+});
+
+// Create encrypted browser storage for persisting the database
+const storage = await createSecureStorage();
+```
+
+### 2. Create a New Identity
+
+```typescript
+// After WebAuthn registration, pass the credential
+const credential = btoa(JSON.stringify(webAuthnCredential));
+const result = await enclave.generate(credential);
+
+console.log(result.did);        // "did:sonr:abc123..."
+console.log(result.enclave_id); // MPC enclave identifier
+console.log(result.accounts);   // Default accounts (Sonr, Ethereum, Bitcoin)
+
+// Persist the database for later sessions
+await storage.set('vault', result.database);
+```
+
+### 3. Load an Existing Identity
+
+```typescript
+// On app startup, check for existing vault
+const database = await storage.get('vault');
+
+if (database) {
+  const loaded = await enclave.load(database);
+  if (loaded.success) {
+    console.log(`Loaded identity: ${loaded.did}`);
+  }
+}
+```
+
+### 4. Work with Accounts
+
+```typescript
+// List all accounts
+const accounts = await enclave.exec('resource:accounts action:list');
+console.log(accounts.result);
+
+// Get a specific account
+const account = await enclave.exec('resource:accounts action:get subject:sonr1abc...');
+
+// Or use the typed execute method
+const result = await enclave.execute('accounts', 'list');
+```
+
+### 5. Sign Data
+
+```typescript
+// Sign arbitrary data with the MPC enclave
+const dataHex = Buffer.from('Hello, World!').toString('hex');
+const signature = await enclave.exec(
+  `resource:enclaves action:sign subject:${enclaveId}:${dataHex}`
+);
+
+console.log(signature.result); // 64-byte signature
+```
+
+### 6. Lock/Unlock Flow
+
+```typescript
+// Set callback for auto-lock events
+enclave.setAutoLockCallback(async (database) => {
+  await storage.set('vault', database);
+  console.log('Vault auto-locked and saved');
+});
+
+// Manual lock (returns serialized database)
+const lockResult = await enclave.lock();
+if (lockResult.success && lockResult.database) {
+  await storage.set('vault', lockResult.database);
+}
+
+// Check status
+const status = await enclave.status();
+console.log(status.locked);      // true/false
+console.log(status.initialized); // true if identity exists
+
+// Unlock with stored database
+const database = await storage.get('vault');
+const unlockResult = await enclave.unlock(database);
+```
+
+### 7. Query DID Document
+
+```typescript
+const didDoc = await enclave.query();
+
+console.log(didDoc.did);                   // DID identifier
+console.log(didDoc.verification_methods);  // Public keys
+console.log(didDoc.accounts);              // Blockchain addresses
+console.log(didDoc.credentials);           // WebAuthn credentials
+```
+
+### 8. Cleanup
+
+```typescript
+// Close enclave when done
+await enclave.close();
+await storage.close();
+```
+
+### CLI Testing
+
+```bash
+make test-plugin
+```
+
+## Plugin Functions
+
+| Function | Input | Output |
+|----------|-------|--------|
+| `ping` | Message string | Echo response |
+| `generate` | WebAuthn credential (base64) | DID, enclave_id, public_key, accounts[], database |
+| `load` | Database buffer | Success status, DID |
+| `exec` | Filter string | Action result |
+| `query` | DID (optional) | DID document |
+
+### Exec Resources & Actions
+
+| Resource | Actions |
+|----------|---------|
+| `accounts` | list, get, sign |
+| `enclaves` | list, get, sign, rotate, archive, delete |
+| `credentials` | list, get |
+| `sessions` | list, revoke |
+| `grants` | list, revoke |
+| `delegations` | list, list_received, list_command, get, revoke, verify, cleanup |
+| `verification_methods` | list, get, delete |
+| `services` | list, get, get_by_id |
+
+### Filter Syntax
+
+```
+resource:<name> action:<action> [subject:<value>]
+```
+
+Examples:
+```bash
+# List all accounts
+resource:accounts action:list
+
+# Get specific account
+resource:accounts action:get subject:sonr1abc...
+
+# Sign with enclave
+resource:enclaves action:sign subject:enc_123:48656c6c6f
+
+# List delegations by command
+resource:delegations action:list_command subject:/vault/read
+```
+
+## Architecture
+
+The enclave uses SQLite as a computation engine with custom functions:
+
+| Function | Purpose |
+|----------|---------|
+| `bip44_derive(pubkey, chain)` | Derive address from public key |
+| `bip44_derive_from_enclave(id, chain)` | Derive address from stored enclave |
+
+Supported chains: `sonr` (Cosmos 118), `ethereum` (60), `bitcoin` (0)
+
+## Project Structure
+
+```
+motr-enclave/
+├── cmd/enclave/          # WASM plugin entry point
+├── internal/
+│   ├── keybase/          # Database layer + SQLite functions
+│   ├── crypto/mpc/       # MPC key operations
+│   ├── crypto/ucan/      # UCAN v1.0.0-rc.1 builders
+│   └── migrations/       # Schema + queries
+├── src/                  # TypeScript SDK
+├── dist/                 # Built SDK
+├── example/              # Browser demo
+└── Makefile
+```
+
+## Development
+
+```bash
+make test      # Run Go tests
+make lint      # Run linter
+make clean     # Remove build artifacts
+make generate  # Regenerate SQLC code
+```
+
+## Documentation
+
+- [AGENTS.md](./AGENTS.md) - Architecture and coding guidelines
+- [TODO.md](./TODO.md) - Remaining implementation tasks
+- [CHANGELOG.md](./CHANGELOG.md) - Version history
+- [MIGRATION.md](./MIGRATION.md) - Original schema design

package/dist/enclave.d.ts

@@ -0,0 +1,38 @@
+import type { EnclaveOptions, GenerateOutput, LoadOutput, ExecOutput, QueryOutput, LockOutput, UnlockOutput, StatusOutput, Resource, CreateRegistrationInput, RegistrationResult } from './types';
+export declare class Enclave {
+    private plugin;
+    private logger;
+    private debug;
+    private autoLockTimeout;
+    private activityTimer?;
+    private onAutoLock?;
+    private constructor();
+    setAutoLockCallback(callback: (database: number[]) => void): void;
+    setAutoLockTimeout(ms: number): void;
+    private resetActivityTimer;
+    private clearActivityTimer;
+    static create(wasm: string | Uint8Array, options?: EnclaveOptions): Promise<Enclave>;
+    generate(credential: string): Promise<GenerateOutput>;
+    load(source: Uint8Array | number[]): Promise<LoadOutput>;
+    exec(filter: string, token?: string): Promise<ExecOutput>;
+    execute(resource: Resource, action: string, options?: {
+        subject?: string;
+        token?: string;
+    }): Promise<ExecOutput>;
+    createRegistration(input: CreateRegistrationInput): Promise<RegistrationResult>;
+    query(did?: string): Promise<QueryOutput>;
+    ping(message?: string): Promise<{
+        success: boolean;
+        message: string;
+        echo: string;
+    }>;
+    lock(): Promise<LockOutput>;
+    unlock(source: Uint8Array | number[]): Promise<UnlockOutput>;
+    status(): Promise<StatusOutput>;
+    isLocked(): Promise<boolean>;
+    reset(): Promise<void>;
+    close(): Promise<void>;
+    private log;
+}
+export declare function createEnclave(wasm: string | Uint8Array, options?: EnclaveOptions): Promise<Enclave>;
+//# sourceMappingURL=enclave.d.ts.map

package/dist/enclave.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enclave.d.ts","sourceRoot":"","sources":["../src/enclave.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,cAAc,EACd,cAAc,EACd,UAAU,EACV,UAAU,EACV,WAAW,EACX,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,QAAQ,EACR,uBAAuB,EACvB,kBAAkB,EACnB,MAAM,SAAS,CAAC;AAEjB,qBAAa,OAAO;IAClB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,MAAM,CAA2B;IACzC,OAAO,CAAC,KAAK,CAAU;IACvB,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,aAAa,CAAC,CAAgC;IACtD,OAAO,CAAC,UAAU,CAAC,CAA+B;IAElD,OAAO;IAOP,mBAAmB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,IAAI,GAAG,IAAI;IAIjE,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAKpC,OAAO,CAAC,kBAAkB;IAgB1B,OAAO,CAAC,kBAAkB;WAOb,MAAM,CACjB,IAAI,EAAE,MAAM,GAAG,UAAU,EACzB,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,OAAO,CAAC;IA2Bb,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAkBrD,IAAI,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC;IA0BxD,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAmBzD,OAAO,CACX,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GACjD,OAAO,CAAC,UAAU,CAAC;IAQhB,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAiB/E,KAAK,CAAC,GAAG,GAAE,MAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAiB7C,IAAI,CAAC,OAAO,GAAE,MAAgB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAe7F,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC;IAgB3B,MAAM,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAqB5D,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC;IAY/B,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC;IAK5B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAKtB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAK5B,OAAO,CAAC,GAAG;CAKZ;AAED,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,GAAG,UAAU,EACzB,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,OAAO,CAAC,CAElB"}

package/dist/enclave.js

@@ -0,0 +1,420 @@
+// src/enclave.ts
+import createPlugin, { CAPABILITIES } from "@extism/extism";
+
+class Enclave {
+  plugin;
+  logger;
+  debug;
+  autoLockTimeout;
+  activityTimer;
+  onAutoLock;
+  constructor(plugin, options = {}) {
+    this.plugin = plugin;
+    this.logger = options.logger ?? console;
+    this.debug = options.debug ?? false;
+    this.autoLockTimeout = options.autoLockTimeout ?? 5 * 60 * 1000;
+  }
+  setAutoLockCallback(callback) {
+    this.onAutoLock = callback;
+  }
+  setAutoLockTimeout(ms) {
+    this.autoLockTimeout = ms;
+    this.resetActivityTimer();
+  }
+  resetActivityTimer() {
+    if (this.activityTimer) {
+      clearTimeout(this.activityTimer);
+      this.activityTimer = undefined;
+    }
+    if (this.autoLockTimeout > 0) {
+      this.activityTimer = setTimeout(async () => {
+        this.log("auto-lock: inactivity timeout reached");
+        const result = await this.lock();
+        if (result.success && result.database && this.onAutoLock) {
+          this.onAutoLock(result.database);
+        }
+      }, this.autoLockTimeout);
+    }
+  }
+  clearActivityTimer() {
+    if (this.activityTimer) {
+      clearTimeout(this.activityTimer);
+      this.activityTimer = undefined;
+    }
+  }
+  static async create(wasm, options = {}) {
+    const manifest = typeof wasm === "string" ? { wasm: [{ url: wasm }] } : { wasm: [{ data: wasm }] };
+    const config = {};
+    if (options.contracts) {
+      const c = options.contracts;
+      config["registry_address"] = c.didRegistry;
+      config["factory_address"] = c.hyperAuthFactory;
+      config["account_helper_address"] = c.accountHelper;
+      config["session_sbt_address"] = c.sessionSBT;
+      config["entry_point_address"] = c.entryPoint;
+      config["chain_id"] = String(c.chainId);
+    }
+    const plugin = await createPlugin(manifest, {
+      useWasi: true,
+      runInWorker: CAPABILITIES.hasWorkerCapability,
+      logger: options.debug ? options.logger : undefined,
+      config
+    });
+    return new Enclave(plugin, options);
+  }
+  async generate(credential) {
+    const input = JSON.stringify({ credential });
+    try {
+      const result = await this.plugin.call("generate", input);
+      if (!result) {
+        throw new Error("generate: plugin returned no output");
+      }
+      const output = result.json();
+      this.resetActivityTimer();
+      return output;
+    } catch (err) {
+      const msg = toErrorMessage(err);
+      this.log(`generate: failed - ${msg}`, "error");
+      throw new Error(`generate: ${msg}`);
+    }
+  }
+  async load(source) {
+    this.log("load: loading database");
+    const database = source instanceof Uint8Array ? Array.from(source) : source;
+    const input = JSON.stringify({ database });
+    try {
+      const result = await this.plugin.call("load", input);
+      if (!result) {
+        return { success: false, error: "plugin returned no output" };
+      }
+      const output = result.json();
+      if (output.success) {
+        this.log(`load: loaded database for DID ${output.did}`);
+        this.resetActivityTimer();
+      } else {
+        this.log(`load: failed - ${output.error}`, "error");
+      }
+      return output;
+    } catch (err) {
+      const msg = toErrorMessage(err);
+      this.log(`load: failed - ${msg}`, "error");
+      return { success: false, error: msg };
+    }
+  }
+  async exec(filter, token) {
+    this.log(`exec: ${filter}`);
+    this.resetActivityTimer();
+    const input = JSON.stringify({ filter, token });
+    try {
+      const result = await this.plugin.call("exec", input);
+      if (!result) {
+        return { success: false, error: "plugin returned no output" };
+      }
+      return result.json();
+    } catch (err) {
+      const msg = toErrorMessage(err);
+      this.log(`exec: failed - ${msg}`, "error");
+      return { success: false, error: msg };
+    }
+  }
+  async execute(resource, action, options = {}) {
+    let filter = `resource:${resource} action:${action}`;
+    if (options.subject) {
+      filter += ` subject:${options.subject}`;
+    }
+    return this.exec(filter, options.token);
+  }
+  async createRegistration(input) {
+    this.resetActivityTimer();
+    const subject = JSON.stringify({
+      sender: input.sender,
+      cid: input.cid ?? "",
+      did: input.did ?? ""
+    });
+    const result = await this.execute("accounts", "create_registration", { subject });
+    if (!result.success) {
+      throw new Error(`createRegistration: ${result.error}`);
+    }
+    return result.result;
+  }
+  async query(did = "") {
+    this.resetActivityTimer();
+    const input = JSON.stringify({ did });
+    try {
+      const result = await this.plugin.call("query", input);
+      if (!result) {
+        throw new Error("query: plugin returned no output");
+      }
+      return result.json();
+    } catch (err) {
+      const msg = toErrorMessage(err);
+      this.log(`query: failed - ${msg}`, "error");
+      throw new Error(`query: ${msg}`);
+    }
+  }
+  async ping(message = "hello") {
+    const input = JSON.stringify({ message });
+    try {
+      const result = await this.plugin.call("ping", input);
+      if (!result) {
+        throw new Error("ping: plugin returned no output");
+      }
+      return result.json();
+    } catch (err) {
+      const msg = toErrorMessage(err);
+      throw new Error(`ping: ${msg}`);
+    }
+  }
+  async lock() {
+    this.clearActivityTimer();
+    try {
+      const result = await this.plugin.call("lock", "{}");
+      if (!result) {
+        return { success: false, error: "plugin returned no output" };
+      }
+      return result.json();
+    } catch (err) {
+      const msg = toErrorMessage(err);
+      this.log(`lock: failed - ${msg}`, "error");
+      return { success: false, error: msg };
+    }
+  }
+  async unlock(source) {
+    const database = source instanceof Uint8Array ? Array.from(source) : source;
+    const input = JSON.stringify({ database });
+    try {
+      const result = await this.plugin.call("unlock", input);
+      if (!result) {
+        return { success: false, error: "plugin returned no output" };
+      }
+      const output = result.json();
+      if (output.success) {
+        this.resetActivityTimer();
+      }
+      return output;
+    } catch (err) {
+      const msg = toErrorMessage(err);
+      this.log(`unlock: failed - ${msg}`, "error");
+      return { success: false, error: msg };
+    }
+  }
+  async status() {
+    try {
+      const result = await this.plugin.call("status", "{}");
+      if (!result) {
+        return { locked: true, initialized: false };
+      }
+      return result.json();
+    } catch {
+      return { locked: true, initialized: false };
+    }
+  }
+  async isLocked() {
+    const s = await this.status();
+    return s.locked;
+  }
+  async reset() {
+    this.clearActivityTimer();
+    await this.plugin.reset();
+  }
+  async close() {
+    this.clearActivityTimer();
+    await this.plugin.close();
+  }
+  log(message, level = "debug") {
+    if (this.debug && this.logger) {
+      this.logger[level](`[Enclave] ${message}`);
+    }
+  }
+}
+async function createEnclave(wasm, options = {}) {
+  return Enclave.create(wasm, options);
+}
+function toErrorMessage(err) {
+  if (err instanceof Error)
+    return err.message;
+  if (typeof err === "string")
+    return err;
+  try {
+    return JSON.stringify(err);
+  } catch {
+    return String(err);
+  }
+}
+// src/storage.ts
+var DB_NAME = "motr-enclave";
+var DB_VERSION = 1;
+var STORE_NAME = "vault";
+var CEK_KEY = "__cek__";
+
+class SecureStorage {
+  db = null;
+  cek = null;
+  async init() {
+    this.db = await this.openDatabase();
+    this.cek = await this.getOrCreateCEK();
+  }
+  openDatabase() {
+    return new Promise((resolve, reject) => {
+      const request = indexedDB.open(DB_NAME, DB_VERSION);
+      request.onerror = () => reject(request.error);
+      request.onsuccess = () => resolve(request.result);
+      request.onupgradeneeded = (event) => {
+        const db = event.target.result;
+        if (!db.objectStoreNames.contains(STORE_NAME)) {
+          db.createObjectStore(STORE_NAME);
+        }
+      };
+    });
+  }
+  async getOrCreateCEK() {
+    const stored = await this.getRaw(CEK_KEY);
+    if (stored) {
+      return crypto.subtle.importKey("raw", stored.buffer, { name: "AES-GCM", length: 256 }, false, ["encrypt", "decrypt"]);
+    }
+    const cek = await crypto.subtle.generateKey({ name: "AES-GCM", length: 256 }, true, ["encrypt", "decrypt"]);
+    const exported = await crypto.subtle.exportKey("raw", cek);
+    await this.setRaw(CEK_KEY, new Uint8Array(exported));
+    return crypto.subtle.importKey("raw", exported, { name: "AES-GCM", length: 256 }, false, ["encrypt", "decrypt"]);
+  }
+  getRaw(key) {
+    return new Promise((resolve, reject) => {
+      if (!this.db) {
+        reject(new Error("Database not initialized"));
+        return;
+      }
+      const tx = this.db.transaction(STORE_NAME, "readonly");
+      const store = tx.objectStore(STORE_NAME);
+      const request = store.get(key);
+      request.onerror = () => reject(request.error);
+      request.onsuccess = () => {
+        resolve(request.result ? new Uint8Array(request.result) : null);
+      };
+    });
+  }
+  setRaw(key, value) {
+    return new Promise((resolve, reject) => {
+      if (!this.db) {
+        reject(new Error("Database not initialized"));
+        return;
+      }
+      const tx = this.db.transaction(STORE_NAME, "readwrite");
+      const store = tx.objectStore(STORE_NAME);
+      const request = store.put(value.buffer, key);
+      request.onerror = () => reject(request.error);
+      request.onsuccess = () => resolve();
+    });
+  }
+  async set(key, data) {
+    if (!this.cek)
+      throw new Error("Storage not initialized");
+    const bytes = data instanceof Uint8Array ? data : new Uint8Array(data);
+    const iv = crypto.getRandomValues(new Uint8Array(12));
+    const encrypted = await crypto.subtle.encrypt({ name: "AES-GCM", iv }, this.cek, bytes.buffer);
+    const blob = { iv: Array.from(iv), data: encrypted };
+    await this.setEncrypted(key, blob);
+  }
+  async get(key) {
+    if (!this.cek)
+      throw new Error("Storage not initialized");
+    const blob = await this.getEncrypted(key);
+    if (!blob)
+      return null;
+    const iv = new Uint8Array(blob.iv);
+    const decrypted = await crypto.subtle.decrypt({ name: "AES-GCM", iv }, this.cek, blob.data);
+    return new Uint8Array(decrypted);
+  }
+  async getAsArray(key) {
+    const data = await this.get(key);
+    return data ? Array.from(data) : null;
+  }
+  async delete(key) {
+    return new Promise((resolve, reject) => {
+      if (!this.db) {
+        reject(new Error("Database not initialized"));
+        return;
+      }
+      const tx = this.db.transaction(STORE_NAME, "readwrite");
+      const store = tx.objectStore(STORE_NAME);
+      const request = store.delete(`enc:${key}`);
+      request.onerror = () => reject(request.error);
+      request.onsuccess = () => resolve();
+    });
+  }
+  async clear() {
+    return new Promise((resolve, reject) => {
+      if (!this.db) {
+        reject(new Error("Database not initialized"));
+        return;
+      }
+      const tx = this.db.transaction(STORE_NAME, "readwrite");
+      const store = tx.objectStore(STORE_NAME);
+      const request = store.clear();
+      request.onerror = () => reject(request.error);
+      request.onsuccess = () => resolve();
+    });
+  }
+  getEncrypted(key) {
+    return new Promise((resolve, reject) => {
+      if (!this.db) {
+        reject(new Error("Database not initialized"));
+        return;
+      }
+      const tx = this.db.transaction(STORE_NAME, "readonly");
+      const store = tx.objectStore(STORE_NAME);
+      const request = store.get(`enc:${key}`);
+      request.onerror = () => reject(request.error);
+      request.onsuccess = () => {
+        const result = request.result;
+        if (result && result.iv && result.data) {
+          resolve({ iv: result.iv, data: result.data });
+        } else {
+          resolve(null);
+        }
+      };
+    });
+  }
+  setEncrypted(key, blob) {
+    return new Promise((resolve, reject) => {
+      if (!this.db) {
+        reject(new Error("Database not initialized"));
+        return;
+      }
+      const tx = this.db.transaction(STORE_NAME, "readwrite");
+      const store = tx.objectStore(STORE_NAME);
+      const request = store.put({ iv: blob.iv, data: blob.data }, `enc:${key}`);
+      request.onerror = () => reject(request.error);
+      request.onsuccess = () => resolve();
+    });
+  }
+  async close() {
+    if (this.db) {
+      this.db.close();
+      this.db = null;
+    }
+    this.cek = null;
+  }
+}
+async function createSecureStorage() {
+  const storage = new SecureStorage;
+  await storage.init();
+  return storage;
+}
+// src/types.ts
+var defaultContracts = {
+  chainId: 84532,
+  entryPoint: "0x0000000071727De22E5E9d8BAf0edAc6f37da032",
+  didRegistry: "0x42582746954724b983df6a80701c57887037fe07",
+  accountHelper: "0x5001a32196533baf5a67ed8667c1d40c6ed24684",
+  sessionSBT: "0xdae5a3eb3d3a9d097f0449960921981e46f01a27",
+  hyperAuthFactory: "0x1d45db62953cb90ae37abefce427dc3c4dd951b4"
+};
+export {
+  defaultContracts,
+  createSecureStorage,
+  createEnclave,
+  SecureStorage,
+  Enclave
+};
+
+//# debugId=29514AB559B2F93364756E2164756E21

package/dist/enclave.js.map

@@ -0,0 +1,12 @@
+{
+  "version": 3,
+  "sources": ["../src/enclave.ts", "../src/storage.ts", "../src/types.ts"],
+  "sourcesContent": [
+    "import createPlugin, { CAPABILITIES, type Plugin } from '@extism/extism';\nimport type {\n  EnclaveOptions,\n  GenerateOutput,\n  LoadOutput,\n  ExecOutput,\n  QueryOutput,\n  LockOutput,\n  UnlockOutput,\n  StatusOutput,\n  Resource,\n  CreateRegistrationInput,\n  RegistrationResult,\n} from './types';\n\nexport class Enclave {\n  private plugin: Plugin;\n  private logger: EnclaveOptions['logger'];\n  private debug: boolean;\n  private autoLockTimeout: number;\n  private activityTimer?: ReturnType<typeof setTimeout>;\n  private onAutoLock?: (database: number[]) => void;\n\n  private constructor(plugin: Plugin, options: EnclaveOptions = {}) {\n    this.plugin = plugin;\n    this.logger = options.logger ?? console;\n    this.debug = options.debug ?? false;\n    this.autoLockTimeout = options.autoLockTimeout ?? 5 * 60 * 1000;\n  }\n\n  setAutoLockCallback(callback: (database: number[]) => void): void {\n    this.onAutoLock = callback;\n  }\n\n  setAutoLockTimeout(ms: number): void {\n    this.autoLockTimeout = ms;\n    this.resetActivityTimer();\n  }\n\n  private resetActivityTimer(): void {\n    if (this.activityTimer) {\n      clearTimeout(this.activityTimer);\n      this.activityTimer = undefined;\n    }\n    if (this.autoLockTimeout > 0) {\n      this.activityTimer = setTimeout(async () => {\n        this.log('auto-lock: inactivity timeout reached');\n        const result = await this.lock();\n        if (result.success && result.database && this.onAutoLock) {\n          this.onAutoLock(result.database);\n        }\n      }, this.autoLockTimeout);\n    }\n  }\n\n  private clearActivityTimer(): void {\n    if (this.activityTimer) {\n      clearTimeout(this.activityTimer);\n      this.activityTimer = undefined;\n    }\n  }\n\n  static async create(\n    wasm: string | Uint8Array,\n    options: EnclaveOptions = {}\n  ): Promise<Enclave> {\n    const manifest =\n      typeof wasm === 'string'\n        ? { wasm: [{ url: wasm }] }\n        : { wasm: [{ data: wasm }] };\n\n    const config: Record<string, string> = {};\n    if (options.contracts) {\n      const c = options.contracts;\n      config['registry_address'] = c.didRegistry;\n      config['factory_address'] = c.hyperAuthFactory;\n      config['account_helper_address'] = c.accountHelper;\n      config['session_sbt_address'] = c.sessionSBT;\n      config['entry_point_address'] = c.entryPoint;\n      config['chain_id'] = String(c.chainId);\n    }\n\n    const plugin = await createPlugin(manifest, {\n      useWasi: true,\n      runInWorker: CAPABILITIES.hasWorkerCapability,\n      logger: options.debug ? (options.logger as Console) : undefined,\n      config,\n    });\n\n    return new Enclave(plugin, options);\n  }\n\n  async generate(credential: string): Promise<GenerateOutput> {\n    const input = JSON.stringify({ credential });\n    \n    try {\n      const result = await this.plugin.call('generate', input);\n      if (!result) {\n        throw new Error('generate: plugin returned no output');\n      }\n      const output = result.json() as GenerateOutput;\n      this.resetActivityTimer();\n      return output;\n    } catch (err) {\n      const msg = toErrorMessage(err);\n      this.log(`generate: failed - ${msg}`, 'error');\n      throw new Error(`generate: ${msg}`);\n    }\n  }\n\n  async load(source: Uint8Array | number[]): Promise<LoadOutput> {\n    this.log('load: loading database');\n\n    const database = source instanceof Uint8Array ? Array.from(source) : source;\n    const input = JSON.stringify({ database });\n\n    try {\n      const result = await this.plugin.call('load', input);\n      if (!result) {\n        return { success: false, error: 'plugin returned no output' };\n      }\n      const output = result.json() as LoadOutput;\n      if (output.success) {\n        this.log(`load: loaded database for DID ${output.did}`);\n        this.resetActivityTimer();\n      } else {\n        this.log(`load: failed - ${output.error}`, 'error');\n      }\n      return output;\n    } catch (err) {\n      const msg = toErrorMessage(err);\n      this.log(`load: failed - ${msg}`, 'error');\n      return { success: false, error: msg };\n    }\n  }\n\n  async exec(filter: string, token?: string): Promise<ExecOutput> {\n    this.log(`exec: ${filter}`);\n    this.resetActivityTimer();\n\n    const input = JSON.stringify({ filter, token });\n\n    try {\n      const result = await this.plugin.call('exec', input);\n      if (!result) {\n        return { success: false, error: 'plugin returned no output' };\n      }\n      return result.json() as ExecOutput;\n    } catch (err) {\n      const msg = toErrorMessage(err);\n      this.log(`exec: failed - ${msg}`, 'error');\n      return { success: false, error: msg };\n    }\n  }\n\n  async execute(\n    resource: Resource,\n    action: string,\n    options: { subject?: string; token?: string } = {}\n  ): Promise<ExecOutput> {\n    let filter = `resource:${resource} action:${action}`;\n    if (options.subject) {\n      filter += ` subject:${options.subject}`;\n    }\n    return this.exec(filter, options.token);\n  }\n\n  async createRegistration(input: CreateRegistrationInput): Promise<RegistrationResult> {\n    this.resetActivityTimer();\n\n    const subject = JSON.stringify({\n      sender: input.sender,\n      cid: input.cid ?? '',\n      did: input.did ?? '',\n    });\n\n    const result = await this.execute('accounts', 'create_registration', { subject });\n    if (!result.success) {\n      throw new Error(`createRegistration: ${result.error}`);\n    }\n\n    return result.result as RegistrationResult;\n  }\n\n  async query(did: string = ''): Promise<QueryOutput> {\n    this.resetActivityTimer();\n    const input = JSON.stringify({ did });\n\n    try {\n      const result = await this.plugin.call('query', input);\n      if (!result) {\n        throw new Error('query: plugin returned no output');\n      }\n      return result.json() as QueryOutput;\n    } catch (err) {\n      const msg = toErrorMessage(err);\n      this.log(`query: failed - ${msg}`, 'error');\n      throw new Error(`query: ${msg}`);\n    }\n  }\n\n  async ping(message: string = 'hello'): Promise<{ success: boolean; message: string; echo: string }> {\n    const input = JSON.stringify({ message });\n\n    try {\n      const result = await this.plugin.call('ping', input);\n      if (!result) {\n        throw new Error('ping: plugin returned no output');\n      }\n      return result.json() as { success: boolean; message: string; echo: string };\n    } catch (err) {\n      const msg = toErrorMessage(err);\n      throw new Error(`ping: ${msg}`);\n    }\n  }\n\n  async lock(): Promise<LockOutput> {\n    this.clearActivityTimer();\n\n    try {\n      const result = await this.plugin.call('lock', '{}');\n      if (!result) {\n        return { success: false, error: 'plugin returned no output' };\n      }\n      return result.json() as LockOutput;\n    } catch (err) {\n      const msg = toErrorMessage(err);\n      this.log(`lock: failed - ${msg}`, 'error');\n      return { success: false, error: msg };\n    }\n  }\n\n  async unlock(source: Uint8Array | number[]): Promise<UnlockOutput> {\n    const database = source instanceof Uint8Array ? Array.from(source) : source;\n    const input = JSON.stringify({ database });\n\n    try {\n      const result = await this.plugin.call('unlock', input);\n      if (!result) {\n        return { success: false, error: 'plugin returned no output' };\n      }\n      const output = result.json() as UnlockOutput;\n      if (output.success) {\n        this.resetActivityTimer();\n      }\n      return output;\n    } catch (err) {\n      const msg = toErrorMessage(err);\n      this.log(`unlock: failed - ${msg}`, 'error');\n      return { success: false, error: msg };\n    }\n  }\n\n  async status(): Promise<StatusOutput> {\n    try {\n      const result = await this.plugin.call('status', '{}');\n      if (!result) {\n        return { locked: true, initialized: false };\n      }\n      return result.json() as StatusOutput;\n    } catch {\n      return { locked: true, initialized: false };\n    }\n  }\n\n  async isLocked(): Promise<boolean> {\n    const s = await this.status();\n    return s.locked;\n  }\n\n  async reset(): Promise<void> {\n    this.clearActivityTimer();\n    await this.plugin.reset();\n  }\n\n  async close(): Promise<void> {\n    this.clearActivityTimer();\n    await this.plugin.close();\n  }\n\n  private log(message: string, level: 'log' | 'error' | 'warn' | 'info' | 'debug' = 'debug'): void {\n    if (this.debug && this.logger) {\n      this.logger[level](`[Enclave] ${message}`);\n    }\n  }\n}\n\nexport async function createEnclave(\n  wasm: string | Uint8Array,\n  options: EnclaveOptions = {}\n): Promise<Enclave> {\n  return Enclave.create(wasm, options);\n}\n\nfunction toErrorMessage(err: unknown): string {\n  if (err instanceof Error) return err.message;\n  if (typeof err === 'string') return err;\n  try {\n    return JSON.stringify(err);\n  } catch {\n    return String(err);\n  }\n}\n",
+    "const DB_NAME = 'motr-enclave';\nconst DB_VERSION = 1;\nconst STORE_NAME = 'vault';\nconst CEK_KEY = '__cek__';\n\ninterface EncryptedBlob {\n  iv: number[];\n  data: ArrayBuffer;\n}\n\nexport class SecureStorage {\n  private db: IDBDatabase | null = null;\n  private cek: CryptoKey | null = null;\n\n  async init(): Promise<void> {\n    this.db = await this.openDatabase();\n    this.cek = await this.getOrCreateCEK();\n  }\n\n  private openDatabase(): Promise<IDBDatabase> {\n    return new Promise((resolve, reject) => {\n      const request = indexedDB.open(DB_NAME, DB_VERSION);\n\n      request.onerror = () => reject(request.error);\n      request.onsuccess = () => resolve(request.result);\n\n      request.onupgradeneeded = (event) => {\n        const db = (event.target as IDBOpenDBRequest).result;\n        if (!db.objectStoreNames.contains(STORE_NAME)) {\n          db.createObjectStore(STORE_NAME);\n        }\n      };\n    });\n  }\n\n  private async getOrCreateCEK(): Promise<CryptoKey> {\n    const stored = await this.getRaw(CEK_KEY);\n\n    if (stored) {\n      return crypto.subtle.importKey(\n        'raw',\n        stored.buffer as ArrayBuffer,\n        { name: 'AES-GCM', length: 256 },\n        false,\n        ['encrypt', 'decrypt']\n      );\n    }\n\n    const cek = await crypto.subtle.generateKey(\n      { name: 'AES-GCM', length: 256 },\n      true,\n      ['encrypt', 'decrypt']\n    );\n\n    const exported = await crypto.subtle.exportKey('raw', cek);\n    await this.setRaw(CEK_KEY, new Uint8Array(exported));\n\n    return crypto.subtle.importKey(\n      'raw',\n      exported,\n      { name: 'AES-GCM', length: 256 },\n      false,\n      ['encrypt', 'decrypt']\n    );\n  }\n\n  private getRaw(key: string): Promise<Uint8Array | null> {\n    return new Promise((resolve, reject) => {\n      if (!this.db) {\n        reject(new Error('Database not initialized'));\n        return;\n      }\n\n      const tx = this.db.transaction(STORE_NAME, 'readonly');\n      const store = tx.objectStore(STORE_NAME);\n      const request = store.get(key);\n\n      request.onerror = () => reject(request.error);\n      request.onsuccess = () => {\n        resolve(request.result ? new Uint8Array(request.result) : null);\n      };\n    });\n  }\n\n  private setRaw(key: string, value: Uint8Array): Promise<void> {\n    return new Promise((resolve, reject) => {\n      if (!this.db) {\n        reject(new Error('Database not initialized'));\n        return;\n      }\n\n      const tx = this.db.transaction(STORE_NAME, 'readwrite');\n      const store = tx.objectStore(STORE_NAME);\n      const request = store.put(value.buffer, key);\n\n      request.onerror = () => reject(request.error);\n      request.onsuccess = () => resolve();\n    });\n  }\n\n  async set(key: string, data: Uint8Array | number[]): Promise<void> {\n    if (!this.cek) throw new Error('Storage not initialized');\n\n    const bytes = data instanceof Uint8Array ? data : new Uint8Array(data);\n    const iv = crypto.getRandomValues(new Uint8Array(12));\n    const encrypted = await crypto.subtle.encrypt(\n      { name: 'AES-GCM', iv },\n      this.cek,\n      bytes.buffer as ArrayBuffer\n    );\n\n    const blob: EncryptedBlob = { iv: Array.from(iv), data: encrypted };\n    await this.setEncrypted(key, blob);\n  }\n\n  async get(key: string): Promise<Uint8Array | null> {\n    if (!this.cek) throw new Error('Storage not initialized');\n\n    const blob = await this.getEncrypted(key);\n    if (!blob) return null;\n\n    const iv = new Uint8Array(blob.iv);\n    const decrypted = await crypto.subtle.decrypt(\n      { name: 'AES-GCM', iv },\n      this.cek,\n      blob.data\n    );\n\n    return new Uint8Array(decrypted);\n  }\n\n  async getAsArray(key: string): Promise<number[] | null> {\n    const data = await this.get(key);\n    return data ? Array.from(data) : null;\n  }\n\n  async delete(key: string): Promise<void> {\n    return new Promise((resolve, reject) => {\n      if (!this.db) {\n        reject(new Error('Database not initialized'));\n        return;\n      }\n\n      const tx = this.db.transaction(STORE_NAME, 'readwrite');\n      const store = tx.objectStore(STORE_NAME);\n      const request = store.delete(`enc:${key}`);\n\n      request.onerror = () => reject(request.error);\n      request.onsuccess = () => resolve();\n    });\n  }\n\n  async clear(): Promise<void> {\n    return new Promise((resolve, reject) => {\n      if (!this.db) {\n        reject(new Error('Database not initialized'));\n        return;\n      }\n\n      const tx = this.db.transaction(STORE_NAME, 'readwrite');\n      const store = tx.objectStore(STORE_NAME);\n      const request = store.clear();\n\n      request.onerror = () => reject(request.error);\n      request.onsuccess = () => resolve();\n    });\n  }\n\n  private getEncrypted(key: string): Promise<EncryptedBlob | null> {\n    return new Promise((resolve, reject) => {\n      if (!this.db) {\n        reject(new Error('Database not initialized'));\n        return;\n      }\n\n      const tx = this.db.transaction(STORE_NAME, 'readonly');\n      const store = tx.objectStore(STORE_NAME);\n      const request = store.get(`enc:${key}`);\n\n      request.onerror = () => reject(request.error);\n      request.onsuccess = () => {\n        const result = request.result;\n        if (result && result.iv && result.data) {\n          resolve({ iv: result.iv, data: result.data });\n        } else {\n          resolve(null);\n        }\n      };\n    });\n  }\n\n  private setEncrypted(key: string, blob: EncryptedBlob): Promise<void> {\n    return new Promise((resolve, reject) => {\n      if (!this.db) {\n        reject(new Error('Database not initialized'));\n        return;\n      }\n\n      const tx = this.db.transaction(STORE_NAME, 'readwrite');\n      const store = tx.objectStore(STORE_NAME);\n      const request = store.put(\n        { iv: blob.iv, data: blob.data },\n        `enc:${key}`\n      );\n\n      request.onerror = () => reject(request.error);\n      request.onsuccess = () => resolve();\n    });\n  }\n\n  async close(): Promise<void> {\n    if (this.db) {\n      this.db.close();\n      this.db = null;\n    }\n    this.cek = null;\n  }\n}\n\nexport async function createSecureStorage(): Promise<SecureStorage> {\n  const storage = new SecureStorage();\n  await storage.init();\n  return storage;\n}\n",
+    "export interface GenerateInput {\n  credential: string;\n}\n\nexport interface GenerateOutput {\n  did: string;\n  database: number[];\n  enclave_id: string;\n  public_key: string;\n  pubkey_x?: string;\n  pubkey_y?: string;\n  accounts: AccountInfo[];\n}\n\nexport interface AccountInfo {\n  address: string;\n  chain_id: string;\n}\n\nexport interface LoadInput {\n  database: number[];\n}\n\nexport interface LoadOutput {\n  success: boolean;\n  did?: string;\n  error?: string;\n}\n\nexport interface ExecInput {\n  filter: string;\n  token?: string;\n}\n\nexport interface ExecOutput {\n  success: boolean;\n  result?: unknown;\n  error?: string;\n}\n\nexport interface QueryInput {\n  did: string;\n}\n\nexport interface QueryOutput {\n  did: string;\n  controller: string;\n  verification_methods: VerificationMethod[];\n  accounts: Account[];\n  credentials: Credential[];\n}\n\nexport interface VerificationMethod {\n  id: string;\n  type: string;\n  controller: string;\n  public_key: string;\n  purpose: string;\n}\n\nexport interface Account {\n  address: string;\n  chain_id: string;\n  coin_type: number;\n  account_index: number;\n  address_index: number;\n  label: string;\n  is_default: boolean;\n}\n\nexport interface Credential {\n  credential_id: string;\n  device_name: string;\n  device_type: string;\n  authenticator: string;\n  transports: string[];\n  created_at: string;\n  last_used: string;\n}\n\nexport interface CreateRegistrationInput {\n  sender: string;\n  cid?: string;\n  did?: string;\n}\n\nexport interface UserOp {\n  sender: string;\n  nonce: string;\n  initCode: string;\n  callData: string;\n  callGasLimit: string;\n  verificationGasLimit: string;\n  preVerificationGas: string;\n  maxFeePerGas: string;\n  maxPriorityFeePerGas: string;\n  paymasterAndData: string;\n  signature: string;\n}\n\nexport interface RegistrationResult {\n  user_op: UserOp;\n  did_hash: string;\n  metadata_cid: string;\n  call_data: string;\n  entry_point: string;\n  registry_addr: string;\n}\n\nexport interface LockOutput {\n  success: boolean;\n  database?: number[];\n  error?: string;\n}\n\nexport interface UnlockInput {\n  database: number[];\n}\n\nexport interface UnlockOutput {\n  success: boolean;\n  did?: string;\n  error?: string;\n}\n\nexport interface StatusOutput {\n  locked: boolean;\n  initialized: boolean;\n  did?: string;\n  last_activity?: string;\n}\n\nexport interface ContractsConfig {\n  chainId: number;\n  entryPoint: string;\n  didRegistry: string;\n  accountHelper: string;\n  sessionSBT: string;\n  hyperAuthFactory: string;\n}\n\nexport const defaultContracts: ContractsConfig = {\n  chainId: 84532,\n  entryPoint: '0x0000000071727De22E5E9d8BAf0edAc6f37da032',\n  didRegistry: '0x42582746954724b983df6a80701c57887037fe07',\n  accountHelper: '0x5001a32196533baf5a67ed8667c1d40c6ed24684',\n  sessionSBT: '0xdae5a3eb3d3a9d097f0449960921981e46f01a27',\n  hyperAuthFactory: '0x1d45db62953cb90ae37abefce427dc3c4dd951b4',\n};\n\nexport interface EnclaveOptions {\n  logger?: Pick<Console, 'log' | 'error' | 'warn' | 'info' | 'debug'>;\n  debug?: boolean;\n  autoLockTimeout?: number;\n  contracts?: ContractsConfig;\n}\n\nexport type Resource =\n  | 'accounts'\n  | 'credentials'\n  | 'sessions'\n  | 'grants'\n  | 'enclaves'\n  | 'delegations'\n  | 'ucans'\n  | 'verification_methods'\n  | 'services'\n  | 'chains';\n"
+  ],
+  "mappings": ";AAAA;AAAA;AAeO,MAAM,QAAQ;AAAA,EACX;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA,WAAW,CAAC,QAAgB,UAA0B,CAAC,GAAG;AAAA,IAChE,KAAK,SAAS;AAAA,IACd,KAAK,SAAS,QAAQ,UAAU;AAAA,IAChC,KAAK,QAAQ,QAAQ,SAAS;AAAA,IAC9B,KAAK,kBAAkB,QAAQ,mBAAmB,IAAI,KAAK;AAAA;AAAA,EAG7D,mBAAmB,CAAC,UAA8C;AAAA,IAChE,KAAK,aAAa;AAAA;AAAA,EAGpB,kBAAkB,CAAC,IAAkB;AAAA,IACnC,KAAK,kBAAkB;AAAA,IACvB,KAAK,mBAAmB;AAAA;AAAA,EAGlB,kBAAkB,GAAS;AAAA,IACjC,IAAI,KAAK,eAAe;AAAA,MACtB,aAAa,KAAK,aAAa;AAAA,MAC/B,KAAK,gBAAgB;AAAA,IACvB;AAAA,IACA,IAAI,KAAK,kBAAkB,GAAG;AAAA,MAC5B,KAAK,gBAAgB,WAAW,YAAY;AAAA,QAC1C,KAAK,IAAI,uCAAuC;AAAA,QAChD,MAAM,SAAS,MAAM,KAAK,KAAK;AAAA,QAC/B,IAAI,OAAO,WAAW,OAAO,YAAY,KAAK,YAAY;AAAA,UACxD,KAAK,WAAW,OAAO,QAAQ;AAAA,QACjC;AAAA,SACC,KAAK,eAAe;AAAA,IACzB;AAAA;AAAA,EAGM,kBAAkB,GAAS;AAAA,IACjC,IAAI,KAAK,eAAe;AAAA,MACtB,aAAa,KAAK,aAAa;AAAA,MAC/B,KAAK,gBAAgB;AAAA,IACvB;AAAA;AAAA,cAGW,OAAM,CACjB,MACA,UAA0B,CAAC,GACT;AAAA,IAClB,MAAM,WACJ,OAAO,SAAS,WACZ,EAAE,MAAM,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,IACxB,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,CAAC,EAAE;AAAA,IAE/B,MAAM,SAAiC,CAAC;AAAA,IACxC,IAAI,QAAQ,WAAW;AAAA,MACrB,MAAM,IAAI,QAAQ;AAAA,MAClB,OAAO,sBAAsB,EAAE;AAAA,MAC/B,OAAO,qBAAqB,EAAE;AAAA,MAC9B,OAAO,4BAA4B,EAAE;AAAA,MACrC,OAAO,yBAAyB,EAAE;AAAA,MAClC,OAAO,yBAAyB,EAAE;AAAA,MAClC,OAAO,cAAc,OAAO,EAAE,OAAO;AAAA,IACvC;AAAA,IAEA,MAAM,SAAS,MAAM,aAAa,UAAU;AAAA,MAC1C,SAAS;AAAA,MACT,aAAa,aAAa;AAAA,MAC1B,QAAQ,QAAQ,QAAS,QAAQ,SAAqB;AAAA,MACtD;AAAA,IACF,CAAC;AAAA,IAED,OAAO,IAAI,QAAQ,QAAQ,OAAO;AAAA;AAAA,OAG9B,SAAQ,CAAC,YAA6C;AAAA,IAC1D,MAAM,QAAQ,KAAK,UAAU,EAAE,WAAW,CAAC;AAAA,IAE3C,IAAI;AAAA,MACF,MAAM,SAAS,MAAM,KAAK,OAAO,KAAK,YAAY,KAAK;AAAA,MACvD,IAAI,CAAC,QAAQ;AAAA,QACX,MAAM,IAAI,MAAM,qCAAqC;AAAA,MACvD;AAAA,MACA,MAAM,SAAS,OAAO,KAAK;AAAA,MAC3B,KAAK,mBAAmB;AAAA,MACxB,OAAO;AAAA,MACP,OAAO,KAAK;AAAA,MACZ,MAAM,MAAM,eAAe,GAAG;AAAA,MAC9B,KAAK,IAAI,sBAAsB,OAAO,OAAO;AAAA,MAC7C,MAAM,IAAI,MAAM,aAAa,KAAK;AAAA;AAAA;AAAA,OAIhC,KAAI,CAAC,QAAoD;AAAA,IAC7D,KAAK,IAAI,wBAAwB;AAAA,IAEjC,MAAM,WAAW,kBAAkB,aAAa,MAAM,KAAK,MAAM,IAAI;AAAA,IACrE,MAAM,QAAQ,KAAK,UAAU,EAAE,SAAS,CAAC;AAAA,IAEzC,IAAI;AAAA,MACF,MAAM,SAAS,MAAM,KAAK,OAAO,KAAK,QAAQ,KAAK;AAAA,MACnD,IAAI,CAAC,QAAQ;AAAA,QACX,OAAO,EAAE,SAAS,OAAO,OAAO,4BAA4B;AAAA,MAC9D;AAAA,MACA,MAAM,SAAS,OAAO,KAAK;AAAA,MAC3B,IAAI,OAAO,SAAS;AAAA,QAClB,KAAK,IAAI,iCAAiC,OAAO,KAAK;AAAA,QACtD,KAAK,mBAAmB;AAAA,MAC1B,EAAO;AAAA,QACL,KAAK,IAAI,kBAAkB,OAAO,SAAS,OAAO;AAAA;AAAA,MAEpD,OAAO;AAAA,MACP,OAAO,KAAK;AAAA,MACZ,MAAM,MAAM,eAAe,GAAG;AAAA,MAC9B,KAAK,IAAI,kBAAkB,OAAO,OAAO;AAAA,MACzC,OAAO,EAAE,SAAS,OAAO,OAAO,IAAI;AAAA;AAAA;AAAA,OAIlC,KAAI,CAAC,QAAgB,OAAqC;AAAA,IAC9D,KAAK,IAAI,SAAS,QAAQ;AAAA,IAC1B,KAAK,mBAAmB;AAAA,IAExB,MAAM,QAAQ,KAAK,UAAU,EAAE,QAAQ,MAAM,CAAC;AAAA,IAE9C,IAAI;AAAA,MACF,MAAM,SAAS,MAAM,KAAK,OAAO,KAAK,QAAQ,KAAK;AAAA,MACnD,IAAI,CAAC,QAAQ;AAAA,QACX,OAAO,EAAE,SAAS,OAAO,OAAO,4BAA4B;AAAA,MAC9D;AAAA,MACA,OAAO,OAAO,KAAK;AAAA,MACnB,OAAO,KAAK;AAAA,MACZ,MAAM,MAAM,eAAe,GAAG;AAAA,MAC9B,KAAK,IAAI,kBAAkB,OAAO,OAAO;AAAA,MACzC,OAAO,EAAE,SAAS,OAAO,OAAO,IAAI;AAAA;AAAA;AAAA,OAIlC,QAAO,CACX,UACA,QACA,UAAgD,CAAC,GAC5B;AAAA,IACrB,IAAI,SAAS,YAAY,mBAAmB;AAAA,IAC5C,IAAI,QAAQ,SAAS;AAAA,MACnB,UAAU,YAAY,QAAQ;AAAA,IAChC;AAAA,IACA,OAAO,KAAK,KAAK,QAAQ,QAAQ,KAAK;AAAA;AAAA,OAGlC,mBAAkB,CAAC,OAA6D;AAAA,IACpF,KAAK,mBAAmB;AAAA,IAExB,MAAM,UAAU,KAAK,UAAU;AAAA,MAC7B,QAAQ,MAAM;AAAA,MACd,KAAK,MAAM,OAAO;AAAA,MAClB,KAAK,MAAM,OAAO;AAAA,IACpB,CAAC;AAAA,IAED,MAAM,SAAS,MAAM,KAAK,QAAQ,YAAY,uBAAuB,EAAE,QAAQ,CAAC;AAAA,IAChF,IAAI,CAAC,OAAO,SAAS;AAAA,MACnB,MAAM,IAAI,MAAM,uBAAuB,OAAO,OAAO;AAAA,IACvD;AAAA,IAEA,OAAO,OAAO;AAAA;AAAA,OAGV,MAAK,CAAC,MAAc,IAA0B;AAAA,IAClD,KAAK,mBAAmB;AAAA,IACxB,MAAM,QAAQ,KAAK,UAAU,EAAE,IAAI,CAAC;AAAA,IAEpC,IAAI;AAAA,MACF,MAAM,SAAS,MAAM,KAAK,OAAO,KAAK,SAAS,KAAK;AAAA,MACpD,IAAI,CAAC,QAAQ;AAAA,QACX,MAAM,IAAI,MAAM,kCAAkC;AAAA,MACpD;AAAA,MACA,OAAO,OAAO,KAAK;AAAA,MACnB,OAAO,KAAK;AAAA,MACZ,MAAM,MAAM,eAAe,GAAG;AAAA,MAC9B,KAAK,IAAI,mBAAmB,OAAO,OAAO;AAAA,MAC1C,MAAM,IAAI,MAAM,UAAU,KAAK;AAAA;AAAA;AAAA,OAI7B,KAAI,CAAC,UAAkB,SAAuE;AAAA,IAClG,MAAM,QAAQ,KAAK,UAAU,EAAE,QAAQ,CAAC;AAAA,IAExC,IAAI;AAAA,MACF,MAAM,SAAS,MAAM,KAAK,OAAO,KAAK,QAAQ,KAAK;AAAA,MACnD,IAAI,CAAC,QAAQ;AAAA,QACX,MAAM,IAAI,MAAM,iCAAiC;AAAA,MACnD;AAAA,MACA,OAAO,OAAO,KAAK;AAAA,MACnB,OAAO,KAAK;AAAA,MACZ,MAAM,MAAM,eAAe,GAAG;AAAA,MAC9B,MAAM,IAAI,MAAM,SAAS,KAAK;AAAA;AAAA;AAAA,OAI5B,KAAI,GAAwB;AAAA,IAChC,KAAK,mBAAmB;AAAA,IAExB,IAAI;AAAA,MACF,MAAM,SAAS,MAAM,KAAK,OAAO,KAAK,QAAQ,IAAI;AAAA,MAClD,IAAI,CAAC,QAAQ;AAAA,QACX,OAAO,EAAE,SAAS,OAAO,OAAO,4BAA4B;AAAA,MAC9D;AAAA,MACA,OAAO,OAAO,KAAK;AAAA,MACnB,OAAO,KAAK;AAAA,MACZ,MAAM,MAAM,eAAe,GAAG;AAAA,MAC9B,KAAK,IAAI,kBAAkB,OAAO,OAAO;AAAA,MACzC,OAAO,EAAE,SAAS,OAAO,OAAO,IAAI;AAAA;AAAA;AAAA,OAIlC,OAAM,CAAC,QAAsD;AAAA,IACjE,MAAM,WAAW,kBAAkB,aAAa,MAAM,KAAK,MAAM,IAAI;AAAA,IACrE,MAAM,QAAQ,KAAK,UAAU,EAAE,SAAS,CAAC;AAAA,IAEzC,IAAI;AAAA,MACF,MAAM,SAAS,MAAM,KAAK,OAAO,KAAK,UAAU,KAAK;AAAA,MACrD,IAAI,CAAC,QAAQ;AAAA,QACX,OAAO,EAAE,SAAS,OAAO,OAAO,4BAA4B;AAAA,MAC9D;AAAA,MACA,MAAM,SAAS,OAAO,KAAK;AAAA,MAC3B,IAAI,OAAO,SAAS;AAAA,QAClB,KAAK,mBAAmB;AAAA,MAC1B;AAAA,MACA,OAAO;AAAA,MACP,OAAO,KAAK;AAAA,MACZ,MAAM,MAAM,eAAe,GAAG;AAAA,MAC9B,KAAK,IAAI,oBAAoB,OAAO,OAAO;AAAA,MAC3C,OAAO,EAAE,SAAS,OAAO,OAAO,IAAI;AAAA;AAAA;AAAA,OAIlC,OAAM,GAA0B;AAAA,IACpC,IAAI;AAAA,MACF,MAAM,SAAS,MAAM,KAAK,OAAO,KAAK,UAAU,IAAI;AAAA,MACpD,IAAI,CAAC,QAAQ;AAAA,QACX,OAAO,EAAE,QAAQ,MAAM,aAAa,MAAM;AAAA,MAC5C;AAAA,MACA,OAAO,OAAO,KAAK;AAAA,MACnB,MAAM;AAAA,MACN,OAAO,EAAE,QAAQ,MAAM,aAAa,MAAM;AAAA;AAAA;AAAA,OAIxC,SAAQ,GAAqB;AAAA,IACjC,MAAM,IAAI,MAAM,KAAK,OAAO;AAAA,IAC5B,OAAO,EAAE;AAAA;AAAA,OAGL,MAAK,GAAkB;AAAA,IAC3B,KAAK,mBAAmB;AAAA,IACxB,MAAM,KAAK,OAAO,MAAM;AAAA;AAAA,OAGpB,MAAK,GAAkB;AAAA,IAC3B,KAAK,mBAAmB;AAAA,IACxB,MAAM,KAAK,OAAO,MAAM;AAAA;AAAA,EAGlB,GAAG,CAAC,SAAiB,QAAqD,SAAe;AAAA,IAC/F,IAAI,KAAK,SAAS,KAAK,QAAQ;AAAA,MAC7B,KAAK,OAAO,OAAO,aAAa,SAAS;AAAA,IAC3C;AAAA;AAEJ;AAEA,eAAsB,aAAa,CACjC,MACA,UAA0B,CAAC,GACT;AAAA,EAClB,OAAO,QAAQ,OAAO,MAAM,OAAO;AAAA;AAGrC,SAAS,cAAc,CAAC,KAAsB;AAAA,EAC5C,IAAI,eAAe;AAAA,IAAO,OAAO,IAAI;AAAA,EACrC,IAAI,OAAO,QAAQ;AAAA,IAAU,OAAO;AAAA,EACpC,IAAI;AAAA,IACF,OAAO,KAAK,UAAU,GAAG;AAAA,IACzB,MAAM;AAAA,IACN,OAAO,OAAO,GAAG;AAAA;AAAA;;AC5SrB,IAAM,UAAU;AAChB,IAAM,aAAa;AACnB,IAAM,aAAa;AACnB,IAAM,UAAU;AAAA;AAOT,MAAM,cAAc;AAAA,EACjB,KAAyB;AAAA,EACzB,MAAwB;AAAA,OAE1B,KAAI,GAAkB;AAAA,IAC1B,KAAK,KAAK,MAAM,KAAK,aAAa;AAAA,IAClC,KAAK,MAAM,MAAM,KAAK,eAAe;AAAA;AAAA,EAG/B,YAAY,GAAyB;AAAA,IAC3C,OAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AAAA,MACtC,MAAM,UAAU,UAAU,KAAK,SAAS,UAAU;AAAA,MAElD,QAAQ,UAAU,MAAM,OAAO,QAAQ,KAAK;AAAA,MAC5C,QAAQ,YAAY,MAAM,QAAQ,QAAQ,MAAM;AAAA,MAEhD,QAAQ,kBAAkB,CAAC,UAAU;AAAA,QACnC,MAAM,KAAM,MAAM,OAA4B;AAAA,QAC9C,IAAI,CAAC,GAAG,iBAAiB,SAAS,UAAU,GAAG;AAAA,UAC7C,GAAG,kBAAkB,UAAU;AAAA,QACjC;AAAA;AAAA,KAEH;AAAA;AAAA,OAGW,eAAc,GAAuB;AAAA,IACjD,MAAM,SAAS,MAAM,KAAK,OAAO,OAAO;AAAA,IAExC,IAAI,QAAQ;AAAA,MACV,OAAO,OAAO,OAAO,UACnB,OACA,OAAO,QACP,EAAE,MAAM,WAAW,QAAQ,IAAI,GAC/B,OACA,CAAC,WAAW,SAAS,CACvB;AAAA,IACF;AAAA,IAEA,MAAM,MAAM,MAAM,OAAO,OAAO,YAC9B,EAAE,MAAM,WAAW,QAAQ,IAAI,GAC/B,MACA,CAAC,WAAW,SAAS,CACvB;AAAA,IAEA,MAAM,WAAW,MAAM,OAAO,OAAO,UAAU,OAAO,GAAG;AAAA,IACzD,MAAM,KAAK,OAAO,SAAS,IAAI,WAAW,QAAQ,CAAC;AAAA,IAEnD,OAAO,OAAO,OAAO,UACnB,OACA,UACA,EAAE,MAAM,WAAW,QAAQ,IAAI,GAC/B,OACA,CAAC,WAAW,SAAS,CACvB;AAAA;AAAA,EAGM,MAAM,CAAC,KAAyC;AAAA,IACtD,OAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AAAA,MACtC,IAAI,CAAC,KAAK,IAAI;AAAA,QACZ,OAAO,IAAI,MAAM,0BAA0B,CAAC;AAAA,QAC5C;AAAA,MACF;AAAA,MAEA,MAAM,KAAK,KAAK,GAAG,YAAY,YAAY,UAAU;AAAA,MACrD,MAAM,QAAQ,GAAG,YAAY,UAAU;AAAA,MACvC,MAAM,UAAU,MAAM,IAAI,GAAG;AAAA,MAE7B,QAAQ,UAAU,MAAM,OAAO,QAAQ,KAAK;AAAA,MAC5C,QAAQ,YAAY,MAAM;AAAA,QACxB,QAAQ,QAAQ,SAAS,IAAI,WAAW,QAAQ,MAAM,IAAI,IAAI;AAAA;AAAA,KAEjE;AAAA;AAAA,EAGK,MAAM,CAAC,KAAa,OAAkC;AAAA,IAC5D,OAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AAAA,MACtC,IAAI,CAAC,KAAK,IAAI;AAAA,QACZ,OAAO,IAAI,MAAM,0BAA0B,CAAC;AAAA,QAC5C;AAAA,MACF;AAAA,MAEA,MAAM,KAAK,KAAK,GAAG,YAAY,YAAY,WAAW;AAAA,MACtD,MAAM,QAAQ,GAAG,YAAY,UAAU;AAAA,MACvC,MAAM,UAAU,MAAM,IAAI,MAAM,QAAQ,GAAG;AAAA,MAE3C,QAAQ,UAAU,MAAM,OAAO,QAAQ,KAAK;AAAA,MAC5C,QAAQ,YAAY,MAAM,QAAQ;AAAA,KACnC;AAAA;AAAA,OAGG,IAAG,CAAC,KAAa,MAA4C;AAAA,IACjE,IAAI,CAAC,KAAK;AAAA,MAAK,MAAM,IAAI,MAAM,yBAAyB;AAAA,IAExD,MAAM,QAAQ,gBAAgB,aAAa,OAAO,IAAI,WAAW,IAAI;AAAA,IACrE,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC;AAAA,IACpD,MAAM,YAAY,MAAM,OAAO,OAAO,QACpC,EAAE,MAAM,WAAW,GAAG,GACtB,KAAK,KACL,MAAM,MACR;AAAA,IAEA,MAAM,OAAsB,EAAE,IAAI,MAAM,KAAK,EAAE,GAAG,MAAM,UAAU;AAAA,IAClE,MAAM,KAAK,aAAa,KAAK,IAAI;AAAA;AAAA,OAG7B,IAAG,CAAC,KAAyC;AAAA,IACjD,IAAI,CAAC,KAAK;AAAA,MAAK,MAAM,IAAI,MAAM,yBAAyB;AAAA,IAExD,MAAM,OAAO,MAAM,KAAK,aAAa,GAAG;AAAA,IACxC,IAAI,CAAC;AAAA,MAAM,OAAO;AAAA,IAElB,MAAM,KAAK,IAAI,WAAW,KAAK,EAAE;AAAA,IACjC,MAAM,YAAY,MAAM,OAAO,OAAO,QACpC,EAAE,MAAM,WAAW,GAAG,GACtB,KAAK,KACL,KAAK,IACP;AAAA,IAEA,OAAO,IAAI,WAAW,SAAS;AAAA;AAAA,OAG3B,WAAU,CAAC,KAAuC;AAAA,IACtD,MAAM,OAAO,MAAM,KAAK,IAAI,GAAG;AAAA,IAC/B,OAAO,OAAO,MAAM,KAAK,IAAI,IAAI;AAAA;AAAA,OAG7B,OAAM,CAAC,KAA4B;AAAA,IACvC,OAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AAAA,MACtC,IAAI,CAAC,KAAK,IAAI;AAAA,QACZ,OAAO,IAAI,MAAM,0BAA0B,CAAC;AAAA,QAC5C;AAAA,MACF;AAAA,MAEA,MAAM,KAAK,KAAK,GAAG,YAAY,YAAY,WAAW;AAAA,MACtD,MAAM,QAAQ,GAAG,YAAY,UAAU;AAAA,MACvC,MAAM,UAAU,MAAM,OAAO,OAAO,KAAK;AAAA,MAEzC,QAAQ,UAAU,MAAM,OAAO,QAAQ,KAAK;AAAA,MAC5C,QAAQ,YAAY,MAAM,QAAQ;AAAA,KACnC;AAAA;AAAA,OAGG,MAAK,GAAkB;AAAA,IAC3B,OAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AAAA,MACtC,IAAI,CAAC,KAAK,IAAI;AAAA,QACZ,OAAO,IAAI,MAAM,0BAA0B,CAAC;AAAA,QAC5C;AAAA,MACF;AAAA,MAEA,MAAM,KAAK,KAAK,GAAG,YAAY,YAAY,WAAW;AAAA,MACtD,MAAM,QAAQ,GAAG,YAAY,UAAU;AAAA,MACvC,MAAM,UAAU,MAAM,MAAM;AAAA,MAE5B,QAAQ,UAAU,MAAM,OAAO,QAAQ,KAAK;AAAA,MAC5C,QAAQ,YAAY,MAAM,QAAQ;AAAA,KACnC;AAAA;AAAA,EAGK,YAAY,CAAC,KAA4C;AAAA,IAC/D,OAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AAAA,MACtC,IAAI,CAAC,KAAK,IAAI;AAAA,QACZ,OAAO,IAAI,MAAM,0BAA0B,CAAC;AAAA,QAC5C;AAAA,MACF;AAAA,MAEA,MAAM,KAAK,KAAK,GAAG,YAAY,YAAY,UAAU;AAAA,MACrD,MAAM,QAAQ,GAAG,YAAY,UAAU;AAAA,MACvC,MAAM,UAAU,MAAM,IAAI,OAAO,KAAK;AAAA,MAEtC,QAAQ,UAAU,MAAM,OAAO,QAAQ,KAAK;AAAA,MAC5C,QAAQ,YAAY,MAAM;AAAA,QACxB,MAAM,SAAS,QAAQ;AAAA,QACvB,IAAI,UAAU,OAAO,MAAM,OAAO,MAAM;AAAA,UACtC,QAAQ,EAAE,IAAI,OAAO,IAAI,MAAM,OAAO,KAAK,CAAC;AAAA,QAC9C,EAAO;AAAA,UACL,QAAQ,IAAI;AAAA;AAAA;AAAA,KAGjB;AAAA;AAAA,EAGK,YAAY,CAAC,KAAa,MAAoC;AAAA,IACpE,OAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AAAA,MACtC,IAAI,CAAC,KAAK,IAAI;AAAA,QACZ,OAAO,IAAI,MAAM,0BAA0B,CAAC;AAAA,QAC5C;AAAA,MACF;AAAA,MAEA,MAAM,KAAK,KAAK,GAAG,YAAY,YAAY,WAAW;AAAA,MACtD,MAAM,QAAQ,GAAG,YAAY,UAAU;AAAA,MACvC,MAAM,UAAU,MAAM,IACpB,EAAE,IAAI,KAAK,IAAI,MAAM,KAAK,KAAK,GAC/B,OAAO,KACT;AAAA,MAEA,QAAQ,UAAU,MAAM,OAAO,QAAQ,KAAK;AAAA,MAC5C,QAAQ,YAAY,MAAM,QAAQ;AAAA,KACnC;AAAA;AAAA,OAGG,MAAK,GAAkB;AAAA,IAC3B,IAAI,KAAK,IAAI;AAAA,MACX,KAAK,GAAG,MAAM;AAAA,MACd,KAAK,KAAK;AAAA,IACZ;AAAA,IACA,KAAK,MAAM;AAAA;AAEf;AAEA,eAAsB,mBAAmB,GAA2B;AAAA,EAClE,MAAM,UAAU,IAAI;AAAA,EACpB,MAAM,QAAQ,KAAK;AAAA,EACnB,OAAO;AAAA;;ACjFF,IAAM,mBAAoC;AAAA,EAC/C,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,eAAe;AAAA,EACf,YAAY;AAAA,EACZ,kBAAkB;AACpB;",
+  "debugId": "29514AB559B2F93364756E2164756E21",
+  "names": []
+}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export { Enclave, createEnclave } from './enclave';
+export { SecureStorage, createSecureStorage } from './storage';
+export { defaultContracts } from './types';
+export type { GenerateInput, GenerateOutput, LoadInput, LoadOutput, ExecInput, ExecOutput, QueryInput, QueryOutput, LockOutput, UnlockInput, UnlockOutput, StatusOutput, VerificationMethod, Account, Credential, ContractsConfig, EnclaveOptions, Resource, } from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,YAAY,EACV,aAAa,EACb,cAAc,EACd,SAAS,EACT,UAAU,EACV,SAAS,EACT,UAAU,EACV,UAAU,EACV,WAAW,EACX,UAAU,EACV,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,kBAAkB,EAClB,OAAO,EACP,UAAU,EACV,eAAe,EACf,cAAc,EACd,QAAQ,GACT,MAAM,SAAS,CAAC"}

package/dist/storage.d.ts

@@ -0,0 +1,19 @@
+export declare class SecureStorage {
+    private db;
+    private cek;
+    init(): Promise<void>;
+    private openDatabase;
+    private getOrCreateCEK;
+    private getRaw;
+    private setRaw;
+    set(key: string, data: Uint8Array | number[]): Promise<void>;
+    get(key: string): Promise<Uint8Array | null>;
+    getAsArray(key: string): Promise<number[] | null>;
+    delete(key: string): Promise<void>;
+    clear(): Promise<void>;
+    private getEncrypted;
+    private setEncrypted;
+    close(): Promise<void>;
+}
+export declare function createSecureStorage(): Promise<SecureStorage>;
+//# sourceMappingURL=storage.d.ts.map

package/dist/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":"AAUA,qBAAa,aAAa;IACxB,OAAO,CAAC,EAAE,CAA4B;IACtC,OAAO,CAAC,GAAG,CAA0B;IAE/B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAK3B,OAAO,CAAC,YAAY;YAgBN,cAAc;IA+B5B,OAAO,CAAC,MAAM;IAkBd,OAAO,CAAC,MAAM;IAgBR,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAe5D,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAgB5C,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC;IAKjD,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBlC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAgB5B,OAAO,CAAC,YAAY;IAuBpB,OAAO,CAAC,YAAY;IAmBd,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAO7B;AAED,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,aAAa,CAAC,CAIlE"}

package/dist/types.d.ts

@@ -0,0 +1,130 @@
+export interface GenerateInput {
+    credential: string;
+}
+export interface GenerateOutput {
+    did: string;
+    database: number[];
+    enclave_id: string;
+    public_key: string;
+    pubkey_x?: string;
+    pubkey_y?: string;
+    accounts: AccountInfo[];
+}
+export interface AccountInfo {
+    address: string;
+    chain_id: string;
+}
+export interface LoadInput {
+    database: number[];
+}
+export interface LoadOutput {
+    success: boolean;
+    did?: string;
+    error?: string;
+}
+export interface ExecInput {
+    filter: string;
+    token?: string;
+}
+export interface ExecOutput {
+    success: boolean;
+    result?: unknown;
+    error?: string;
+}
+export interface QueryInput {
+    did: string;
+}
+export interface QueryOutput {
+    did: string;
+    controller: string;
+    verification_methods: VerificationMethod[];
+    accounts: Account[];
+    credentials: Credential[];
+}
+export interface VerificationMethod {
+    id: string;
+    type: string;
+    controller: string;
+    public_key: string;
+    purpose: string;
+}
+export interface Account {
+    address: string;
+    chain_id: string;
+    coin_type: number;
+    account_index: number;
+    address_index: number;
+    label: string;
+    is_default: boolean;
+}
+export interface Credential {
+    credential_id: string;
+    device_name: string;
+    device_type: string;
+    authenticator: string;
+    transports: string[];
+    created_at: string;
+    last_used: string;
+}
+export interface CreateRegistrationInput {
+    sender: string;
+    cid?: string;
+    did?: string;
+}
+export interface UserOp {
+    sender: string;
+    nonce: string;
+    initCode: string;
+    callData: string;
+    callGasLimit: string;
+    verificationGasLimit: string;
+    preVerificationGas: string;
+    maxFeePerGas: string;
+    maxPriorityFeePerGas: string;
+    paymasterAndData: string;
+    signature: string;
+}
+export interface RegistrationResult {
+    user_op: UserOp;
+    did_hash: string;
+    metadata_cid: string;
+    call_data: string;
+    entry_point: string;
+    registry_addr: string;
+}
+export interface LockOutput {
+    success: boolean;
+    database?: number[];
+    error?: string;
+}
+export interface UnlockInput {
+    database: number[];
+}
+export interface UnlockOutput {
+    success: boolean;
+    did?: string;
+    error?: string;
+}
+export interface StatusOutput {
+    locked: boolean;
+    initialized: boolean;
+    did?: string;
+    last_activity?: string;
+}
+export interface ContractsConfig {
+    chainId: number;
+    entryPoint: string;
+    didRegistry: string;
+    accountHelper: string;
+    sessionSBT: string;
+    hyperAuthFactory: string;
+}
+export declare const defaultContracts: ContractsConfig;
+export interface EnclaveOptions {
+    logger?: Pick<Console, 'log' | 'error' | 'warn' | 'info' | 'debug'>;
+    debug?: boolean;
+    autoLockTimeout?: number;
+    contracts?: ContractsConfig;
+}
+export type Resource = 'accounts' | 'credentials' | 'sessions' | 'grants' | 'enclaves' | 'delegations' | 'ucans' | 'verification_methods' | 'services' | 'chains';
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,WAAW,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,oBAAoB,EAAE,kBAAkB,EAAE,CAAC;IAC3C,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,WAAW,EAAE,UAAU,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,MAAM;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,eAAO,MAAM,gBAAgB,EAAE,eAO9B,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IACpE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,eAAe,CAAC;CAC7B;AAED,MAAM,MAAM,QAAQ,GAChB,UAAU,GACV,aAAa,GACb,UAAU,GACV,QAAQ,GACR,UAAU,GACV,aAAa,GACb,OAAO,GACP,sBAAsB,GACtB,UAAU,GACV,QAAQ,CAAC"}

package/package.json

@@ -0,0 +1,38 @@
+{
+  "name": "@hyperauth/sdk",
+  "version": "0.0.1",
+  "type": "module",
+  "workspaces": [
+    "examples/base"
+  ],
+  "main": "./dist/enclave.js",
+  "module": "./dist/enclave.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/enclave.js"
+      }
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "bun build ./src/index.ts --outdir ./dist --format esm --target browser --sourcemap=external --external @extism/extism --entry-naming enclave.js && bun run tsc --emitDeclarationOnly --declaration -p src/tsconfig.json --outDir dist",
+    "build:cdn": "bun build ./src/index.ts --outdir ./dist --format esm --target browser --sourcemap=external --minify --entry-naming enclave.cdn.js && bun run tsc --emitDeclarationOnly --declaration -p src/tsconfig.json --outDir dist",
+    "typecheck": "tsc --noEmit -p src/tsconfig.json",
+    "clean": "rm -rf dist"
+  },
+  "dependencies": {
+    "@extism/extism": "^2.0.0-rc13"
+  },
+  "devDependencies": {
+    "@types/bun": "latest",
+    "typescript": "^5.0.0"
+  },
+  "peerDependencies": {
+    "@extism/extism": "^2.0.0-rc13"
+  }
+}