@idos-network/client 1.2.0 → 1.5.0

package/dist/index.d.ts

@@ -6,7 +6,6 @@ import { BaseProvider, EnclaveOptions, EncryptionPasswordStore, PublicEncryption
 import { KwilSigner } from "@idos-network/kwil-js";
 import { idOSCredential as idOSCredential$1 } from "@idos-network/credentials/types";
 import { AddAddressMessageToSign, AddAddressSignatureMessage, RemoveAddressMessageToSign, RemoveAddressSignatureMessage } from "@idos-network/enclave/mpc";
-
 //#region src/enclave/iframe-enclave.d.ts
 interface IframeEnclaveOptions extends EnclaveOptions {
   container: string;
@@ -56,7 +55,7 @@ declare class IframeEnclave extends BaseProvider<IframeEnclaveOptions> {
 }
 //#endregion
 //#region src/index.d.ts
-type Properties<T> = { [K in keyof T as Exclude<T[K], Function> extends never ? never : K]: T[K] };
+type Properties<T> = { [K in keyof T as Exclude<T[K], Function> extends never ? never : K]: T[K]; };
 type idOSClient = idOSClientConfiguration | idOSClientIdle | idOSClientWithUserSigner | idOSClientLoggedIn;
 declare class idOSClientConfiguration<Provider extends BaseProvider = IframeEnclave> {
   readonly state: "configuration";
@@ -160,11 +159,7 @@ declare class idOSClientLoggedIn implements Omit<Properties<idOSClientWithUserSi
       requiredAddons: ("liveness" | "email" | "phoneNumber")[];
     };
   }): Promise<idOSCredentialListItem[]>;
-  requestAccessGrant(credentialId: string, {
-    consumerEncryptionPublicKey,
-    consumerAuthPublicKey,
-    lockedUntil
-  }: {
+  requestAccessGrant(credentialId: string, { consumerEncryptionPublicKey, consumerAuthPublicKey, lockedUntil }: {
     consumerEncryptionPublicKey: string;
     consumerAuthPublicKey: string;
     lockedUntil?: number;

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../src/enclave/iframe-enclave.ts","../src/index.ts"],"mappings":";;;;;;;;;;UAgBiB,oBAAA,SAA6B,cAAA;EAC5C,SAAA;EACA,GAAA;EACA,uBAAA;AAAA;AAAA,cAGW,aAAA,SAAsB,YAAA,CAAa,oBAAA;EAAA,QACtC,SAAA;EAAA,QACA,MAAA;EAAA,QACA,OAAA;EAAA,QACA,KAAA;EAER,WAAA,CAAY,OAAA,EAAS,oBAAA;;EAcrB,IAAA,CAAA,GAAc,OAAA;;EAed,KAAA,CAAA,GAAe,OAAA;;EAKf,WAAA,CAAkB,OAAA,GAAS,IAAA,CAAK,oBAAA,yBAAkD,OAAA;EAxCpF;EA8CE,OAAA,CAAc,OAAA,WAAkB,OAAA;;EAchC,iBAAA,CACE,WAAA,EAAa,gBAAA,IACb,mBAAA;IAAuB,IAAA,EAAM,MAAA;IAA2B,IAAA,EAAM,MAAA;EAAA,IAC7D,OAAA,CAAQ,gBAAA;;EAKX,OAAA,CACE,OAAA,EAAS,UAAA,EACT,iBAAA,EAAmB,UAAA,GAClB,OAAA;IAAU,OAAA,EAAS,UAAA;IAAY,kBAAA,EAAoB,UAAA;EAAA;;EAKtD,OAAA,CACE,OAAA,EAAS,UAAA,EACT,eAAA,EAAiB,UAAA,GAChB,OAAA,CAAQ,UAAA,CAAW,eAAA;;EAKtB,2BAAA,CAAA,GAAqC,OAAA;;EAarC,2BAAA,CAAA,GAAqC,OAAA,CAAQ,uBAAA;EAU7C,uBAAA,CACE,OAAA,UACA,SAAA,sBACA,gBAAA,WACC,OAAA,CAAQ,uBAAA;EAIX,0BAAA,CACE,OAAA,UACA,SAAA,sBACA,mBAAA,WACC,OAAA,CAAQ,0BAAA;EASX,qBAAA,CACE,MAAA,UACA,OAAA,EAAS,0BAAA,EACT,SAAA,WACC,OAAA;EAIH,0BAAA,CACE,MAAA,UACA,OAAA,EAAS,6BAAA,EACT,SAAA,WACC,OAAA;EAAA,QAIW,mBAAA;EAAA,QA2DN,WAAA;EAAA,QAKA,WAAA;EAAA,QAKM,gBAAA;EAAA,QAyBN,mBAAA;EAAA,QAKM,SAAA;AAAA;;;KCtMX,UAAA,oBAES,CAAA,IAAK,OAAA,CAAQ,CAAA,CAAE,CAAA,GAAI,QAAA,0BAAkC,CAAA,GAAI,CAAA,CAAE,CAAA;AAAA,KAG7D,UAAA,GACR,uBAAA,GACA,cAAA,GACA,wBAAA,GACA,kBAAA;AAAA,cAES,uBAAA,kBAAyC,YAAA,GAAe,aAAA;EAAA,SAC1D,KAAA;EAAA,SACA,OAAA;EAAA,SACA,OAAA;EAAA,SACA,cAAA,EAAgB,IAAA,CAAK,QAAA;EAAA,SACrB,KAAA,EAAO,KAAA;EAAA,SACP,eAAA,EAAiB,YAAA;EAE1B,WAAA,CAAY,MAAA;IACV,OAAA;IACA,OAAA;IACA,cAAA,EAAgB,IAAA,CAAK,QAAA;IACrB,eAAA,QAAuB,OAAA,EAAS,IAAA,CAAK,QAAA,yBAAiC,QAAA;IACtE,KAAA,GAAQ,KAAA;EAAA;EAqBV,YAAA,CAAA,GAAsB,OAAA,CAAQ,cAAA;AAAA;AAAA,cAKnB,cAAA;EAAA,SACF,KAAA;EAAA,SACA,KAAA,EAAO,KAAA;EAAA,SACP,UAAA,EAAY,gBAAA;EAAA,SACZ,eAAA,EAAiB,YAAA;EAE1B,WAAA,CAAY,KAAA,EAAO,KAAA,EAAO,UAAA,EAAY,gBAAA,EAAkB,eAAA,EAAiB,YAAA;EAAA,OAO5D,UAAA,CAAW,MAAA,EAAQ,uBAAA,CAAwB,YAAA,IAAgB,OAAA,CAAQ,cAAA;EAWhF,iBAAA,CAAwB,OAAA,WAAkB,OAAA;EAI1C,cAAA,CAAqB,OAAA,EAAS,MAAA,GAAS,OAAA,CAAQ,wBAAA;EA8B/C,MAAA,CAAA,GAAgB,OAAA,CAAQ,cAAA;AAAA;AAAA,cAKb,wBAAA,YAAoC,IAAA,CAAK,UAAA,CAAW,cAAA;EAAA,SACtD,KAAA;EAAA,SACA,KAAA,EAAO,KAAA;EAAA,SACP,UAAA,EAAY,gBAAA;EAAA,SACZ,eAAA,EAAiB,YAAA;EAAA,SACjB,MAAA,EAAQ,MAAA;EAAA,SACR,UAAA,EAAY,UAAA;EAAA,SACZ,gBAAA;EAAA,SACA,eAAA;EAAA,SACA,UAAA,EAAY,UAAA;EAErB,WAAA,CACE,cAAA,EAAgB,cAAA,EAChB,MAAA,EAAQ,MAAA,EACR,UAAA,EAAY,UAAA,EACZ,gBAAA,UACA,eAAA,sBACA,UAAA,EAAY,UAAA;EAed,MAAA,CAAA,GAAgB,OAAA,CAAQ,cAAA;EAKxB,UAAA,CAAA,GAAoB,OAAA;EAMpB,2BAAA,CACE,MAAA,UACA,4BAAA,GAA+B,uBAAA,GAC9B,OAAA,CAAQ,uBAAA;EAcX,KAAA,CAAA,GAAe,OAAA,CAAQ,kBAAA;AAAA;AAAA,cAmBZ,kBAAA,YAA8B,IAAA,CAAK,UAAA,CAAW,wBAAA;EAAA,SAChD,KAAA;EAAA,SACA,KAAA,EAAO,KAAA;EAAA,SACP,UAAA,EAAY,gBAAA;EAAA,SACZ,eAAA,EAAiB,YAAA;EAAA,SACjB,MAAA,EAAQ,MAAA;EAAA,SACR,UAAA,EAAY,UAAA;EAAA,SACZ,gBAAA;EAAA,SACA,eAAA;EAAA,SACA,UAAA,EAAY,UAAA;EAAA,SACZ,IAAA,EAAM,QAAA;EAEf,WAAA,CAAY,wBAAA,EAA0B,wBAAA,EAA0B,IAAA,EAAM,QAAA;EAatE,MAAA,CAAA,GAAgB,OAAA,CAAQ,cAAA;EAKxB,iBAAA,CAAwB,MAAA,EAAQ,uBAAA,GAA0B,OAAA;EAI1D,gBAAA,CAAuB,EAAA,WAAa,OAAA;IAAU,EAAA;EAAA;EAK9C,iBAAA,CAAwB,EAAA,WAAa,OAAA,CAAQ,cAAA;EAI7C,eAAA,CAAsB,UAAA,EAAY,oBAAA,GAAuB,OAAA,CAAQ,oBAAA;EAKjE,iBAAA,CAAA,GAA2B,OAAA,CAAQ,sBAAA;EAInC,oBAAA,CAAA,GAA8B,OAAA,CAAQ,SAAA;EAItC,aAAA,CAAA,GAAuB,OAAA,CAAQ,iBAAA;EAI/B,eAAA,CAAsB,SAAA,EAAW,iBAAA,GAAoB,OAAA,CAAQ,iBAAA;EAK7D,8BAAA,CAAqC,EAAA,WAAa,OAAA;EAelD,oBAAA,CAA2B,EAAA,WAAa,OAAA;EAexC,iBAAA,CAAwB,MAAA,EAAQ,eAAA,GAAkB,OAAA;EAIlD,SAAA,CACE,MAAA,EAAQ,OAAA,CAAQ,2BAAA,IACf,OAAA;IAAU,MAAA,EAAQ,SAAA;IAAa,UAAA;EAAA;EAOlC,UAAA,CAAiB,MAAA,EAAQ,cAAA,KAAmB,OAAA,CAAQ,cAAA;EAKpD,cAAA,CAAA,GAAwB,OAAA;EAMxB,mBAAA,CAA0B,EAAA,WAAa,OAAA,CAAQ,cAAA;EAI/C,iBAAA,CAAwB,EAAA,WAAa,OAAA;IAAU,EAAA;EAAA;EAK/C,SAAA,CAAgB,MAAA,EAAQ,cAAA,GAAiB,OAAA,CAAQ,cAAA;EAsCjD,UAAA,CAAA,GAAoB,OAAA,CAAQ,gBAAA;EAI5B,YAAA,CAAmB,EAAA,WAAa,OAAA;IAAU,EAAA;EAAA;EAqC1C,aAAA,CAAoB,GAAA,aAAgB,OAAA;EAQpC,iBAAA,CAAwB,YAAA;IACtB,eAAA;MACE,aAAA;IAAA;IAEF,uBAAA;MACE,IAAA,EAAM,UAAA,QAAkB,YAAA;MACxB,IAAA,EAAM,UAAA,QAAkB,YAAA;IAAA;IAE1B,mBAAA;MACE,IAAA,EAAM,UAAA,QAAkB,YAAA;MACxB,IAAA,EAAM,UAAA,QAAkB,YAAA;IAAA;IAE1B,6BAAA;MACE,SAAA;MACA,cAAA;IAAA;EAAA,IAEA,OAAA,CAAQ,sBAAA;EAuFZ,kBAAA,CACE,YAAA;IAEE,2BAAA;IACA,qBAAA;IACA;EAAA;IAEA,2BAAA;IACA,qBAAA;IACA,WAAA;EAAA,IAED,OAAA,CAAQ,oBAAA;AAAA;AAAA,iBAqDG,gBAAA,CAAiB,MAAA;EAC/B,OAAA;EACA,cAAA,EAAgB,IAAA,CAAK,aAAA;AAAA,IACnB,uBAAA,CAAwB,aAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/enclave/iframe-enclave.ts","../src/index.ts"],"mappings":";;;;;;;;;UAgBiB,6BAA6B;EAC5C;EACA;EACA;;cAGW,sBAAsB,aAAa;UACtC;UACA;UACA;UACA;EAER,YAAY,SAAS;;EAcrB,QAAc;;EAed,SAAe;;EAKf,YAAkB,UAAS,KAAK,6CAAkD;;EAMlF,QAAc,kBAAkB;;EAchC,kBACE,aAAa,oBACb;IAAuB,MAAM;IAA2B,MAAM;MAC7D,QAAQ;;EAKX,QACE,SAAS,YACT,mBAAmB,aAClB;IAAU,SAAS;IAAY,oBAAoB;;;EAKtD,QACE,SAAS,YACT,iBAAiB,aAChB,QAAQ,WAAW;;EAKtB,+BAAqC;;EAarC,+BAAqC,QAAQ;EAU7C,wBACE,iBACA,+BACA,2BACC,QAAQ;EAIX,2BACE,iBACA,+BACA,8BACC,QAAQ;EASX,sBACE,gBACA,SAAS,4BACT,oBACC;EAIH,2BACE,gBACA,SAAS,+BACT,oBACC;UAIW;UA2DN;UAKA;UAKM;UAyBN;UAKM;;;;KCtMX,WAAW,QAEb,WAAW,KAAK,QAAQ,EAAE,IAAI,kCAAkC,IAAI,EAAE;KAG7D,aACR,0BACA,iBACA,2BACA;cAES,wBAAwB,iBAAiB,eAAe;WAC1D;WACA;WACA;WACA,gBAAgB,KAAK;WACrB,OAAO;WACP,iBAAiB;EAE1B,YAAY;IACV;IACA;IACA,gBAAgB,KAAK;IACrB,uBAAuB,SAAS,KAAK,iCAAiC;IACtE,QAAQ;;EAqBV,gBAAsB,QAAQ;;cAKnB;WACF;WACA,OAAO;WACP,YAAY;WACZ,iBAAiB;EAE1B,YAAY,OAAO,OAAO,YAAY,kBAAkB,iBAAiB;SAO5D,WAAW,QAAQ,wBAAwB,gBAAgB,QAAQ;EAWhF,kBAAwB,kBAAkB;EAI1C,eAAqB,SAAS,SAAS,QAAQ;EA8B/C,UAAgB,QAAQ;;cAKb,oCAAoC,KAAK,WAAW;WACtD;WACA,OAAO;WACP,YAAY;WACZ,iBAAiB;WACjB,QAAQ;WACR,YAAY;WACZ;WACA;WACA,YAAY;EAErB,YACE,gBAAgB,gBAChB,QAAQ,QACR,YAAY,YACZ,0BACA,qCACA,YAAY;EAed,UAAgB,QAAQ;EAKxB,cAAoB;EAMpB,4BACE,gBACA,+BAA+B,0BAC9B,QAAQ;EAcX,SAAe,QAAQ;;cAmBZ,8BAA8B,KAAK,WAAW;WAChD;WACA,OAAO;WACP,YAAY;WACZ,iBAAiB;WACjB,QAAQ;WACR,YAAY;WACZ;WACA;WACA,YAAY;WACZ,MAAM;EAEf,YAAY,0BAA0B,0BAA0B,MAAM;EAatE,UAAgB,QAAQ;EAKxB,kBAAwB,QAAQ,0BAA0B;EAI1D,iBAAuB,aAAa;IAAU;;EAK9C,kBAAwB,aAAa,QAAQ;EAI7C,gBAAsB,YAAY,uBAAuB,QAAQ;EAKjE,qBAA2B,QAAQ;EAInC,wBAA8B,QAAQ;EAItC,iBAAuB,QAAQ;EAI/B,gBAAsB,WAAW,oBAAoB,QAAQ;EAK7D,+BAAqC,aAAa;EAelD,qBAA2B,aAAa;EAexC,kBAAwB,QAAQ,kBAAkB;EAIlD,UACE,QAAQ,QAAQ,+BACf;IAAU,QAAQ;IAAa;;EAOlC,WAAiB,QAAQ,mBAAmB,QAAQ;EAKpD,kBAAwB;EAMxB,oBAA0B,aAAa,QAAQ;EAI/C,kBAAwB,aAAa;IAAU;;EAK/C,UAAgB,QAAQ,iBAAiB,QAAQ;EAsCjD,cAAoB,QAAQ;EAI5B,aAAmB,aAAa;IAAU;;EAqC1C,cAAoB,gBAAgB;EAQpC,kBAAwB;IACtB;MACE;;IAEF;MACE,MAAM,kBAAkB;MACxB,MAAM,kBAAkB;;IAE1B;MACE,MAAM,kBAAkB;MACxB,MAAM,kBAAkB;;IAE1B;MACE;MACA;;MAEA,QAAQ;EAuFZ,mBACE,wBAEE,6BACA,uBACA;IAEA;IACA;IACA;MAED,QAAQ;;iBAqDG,iBAAiB;EAC/B;EACA,gBAAgB,KAAK;IACnB,wBAAwB"}

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["createAttribute"],"sources":["../src/enclave/iframe-enclave.ts","../src/index.ts"],"sourcesContent":["import type { idOSCredential } from \"@idos-network/credentials/types\";\nimport type {\n  AddAddressMessageToSign,\n  AddAddressSignatureMessage,\n  RemoveAddressMessageToSign,\n  RemoveAddressSignatureMessage,\n} from \"@idos-network/enclave/mpc\";\n\nimport {\n  BaseProvider,\n  type EnclaveOptions,\n  type PublicEncryptionProfile,\n} from \"@idos-network/enclave\";\n\nimport type { BaseProviderMethodArgs, BaseProviderMethodReturn } from \"./helpers\";\n\nexport interface IframeEnclaveOptions extends EnclaveOptions {\n  container: string;\n  url?: string;\n  throwOnUserCancelUnlock?: boolean;\n}\n\nexport class IframeEnclave extends BaseProvider<IframeEnclaveOptions> {\n  private container: string;\n  private iframe: HTMLIFrameElement;\n  private hostUrl: URL;\n  private bound = false;\n\n  constructor(options: IframeEnclaveOptions) {\n    super(options);\n\n    if (!this.options.container) {\n      throw new Error(\"container is required\");\n    }\n\n    this.container = this.options.container;\n    this.hostUrl = new URL(this.options.url ?? \"https://enclave.idos.network\");\n    this.iframe = document.createElement(\"iframe\");\n    this.iframe.id = \"idos-enclave-iframe\";\n  }\n\n  /** @see parent method */\n  async load(): Promise<void> {\n    // First we have to create and load the iframe\n    await this.createAndLoadIframe();\n\n    // Load the enclave from the store (trigger load() method in the iframe)\n    await this.requestToEnclave(\"load\");\n\n    // Pass current options\n    await this.reconfigure();\n\n    // Bind the message listener to the iframe (in case iframe -> enclave comm)\n    await this.bindMessageListener();\n  }\n\n  /** @override parent method to call iframe */\n  async reset(): Promise<void> {\n    this.requestToEnclave(\"reset\");\n  }\n\n  /** @override parent method to call iframe */\n  async reconfigure(options: Omit<IframeEnclaveOptions, \"container\" | \"url\"> = {}): Promise<void> {\n    super.reconfigure(options);\n    await this.requestToEnclave(\"reconfigure\", this.options);\n  }\n\n  /** @override parent method to call iframe */\n  async confirm(message: string): Promise<boolean> {\n    this.showEnclave();\n\n    try {\n      return await this.requestToEnclave(\"confirm\", message);\n    } catch (error) {\n      console.error(error);\n      return false;\n    } finally {\n      this.hideEnclave();\n    }\n  }\n\n  /** @override parent method to call iframe */\n  async filterCredentials(\n    credentials: idOSCredential[],\n    privateFieldFilters: { pick: Record<string, unknown[]>; omit: Record<string, unknown[]> },\n  ): Promise<idOSCredential[]> {\n    return await this.requestToEnclave(\"filterCredentials\", credentials, privateFieldFilters);\n  }\n\n  /** @override parent method to call iframe */\n  async encrypt(\n    message: Uint8Array,\n    receiverPublicKey: Uint8Array,\n  ): Promise<{ content: Uint8Array; encryptorPublicKey: Uint8Array }> {\n    return this.requestToEnclave(\"encrypt\", message, receiverPublicKey);\n  }\n\n  /** @override parent method to call iframe */\n  async decrypt(\n    message: Uint8Array,\n    senderPublicKey: Uint8Array,\n  ): Promise<Uint8Array<ArrayBufferLike>> {\n    return this.requestToEnclave(\"decrypt\", message, senderPublicKey);\n  }\n\n  /** @override parent method to call iframe */\n  async backupUserEncryptionProfile(): Promise<void> {\n    this.showEnclave();\n\n    try {\n      await this.requestToEnclave(\"backupUserEncryptionProfile\");\n    } catch (error) {\n      console.error(error);\n    } finally {\n      this.hideEnclave();\n    }\n  }\n\n  /** @override parent method to call iframe */\n  async ensureUserEncryptionProfile(): Promise<PublicEncryptionProfile> {\n    this.showEnclave();\n\n    try {\n      return await this.requestToEnclave(\"ensureUserEncryptionProfile\");\n    } finally {\n      this.hideEnclave();\n    }\n  }\n\n  async addAddressMessageToSign(\n    address: string,\n    publicKey: string | undefined,\n    addressToAddType: string,\n  ): Promise<AddAddressMessageToSign> {\n    return this.requestToEnclave(\"addAddressMessageToSign\", address, publicKey, addressToAddType);\n  }\n\n  async removeAddressMessageToSign(\n    address: string,\n    publicKey: string | undefined,\n    addressToRemoveType: string,\n  ): Promise<RemoveAddressMessageToSign> {\n    return this.requestToEnclave(\n      \"removeAddressMessageToSign\",\n      address,\n      publicKey,\n      addressToRemoveType,\n    );\n  }\n\n  async addAddressToMpcSecret(\n    userId: string,\n    message: AddAddressSignatureMessage,\n    signature: string,\n  ): Promise<string> {\n    return this.requestToEnclave(\"addAddressToMpcSecret\", userId, message, signature);\n  }\n\n  async removeAddressFromMpcSecret(\n    userId: string,\n    message: RemoveAddressSignatureMessage,\n    signature: string,\n  ): Promise<string> {\n    return this.requestToEnclave(\"removeAddressFromMpcSecret\", userId, message, signature);\n  }\n\n  private async createAndLoadIframe(): Promise<void> {\n    const container = document.querySelector(this.container);\n\n    if (!container) {\n      throw new Error(`Can't find container with selector ${this.container}`);\n    }\n\n    // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy#directives\n    const permissionsPolicies = [\"publickey-credentials-get\", \"storage-access\"];\n\n    // https://developer.mozilla.org/en-US/docs/Web/HTML/Element/iframe#sandbox\n    const liftedSandboxRestrictions = [\n      \"forms\",\n      \"modals\",\n      \"popups\",\n      \"popups-to-escape-sandbox\",\n      \"same-origin\",\n      \"scripts\",\n    ].map((toLift) => `allow-${toLift}`);\n\n    // https://developer.mozilla.org/en-US/docs/Web/HTML/Element/iframe#referrerpolicy\n    const referrerPolicy = \"origin\";\n\n    const styles = {\n      \"aspect-ratio\": \"4/1\",\n      \"background-color\": \"transparent\",\n      border: \"none\",\n      display: \"block\",\n      overflow: \"hidden\",\n      width: \"100%\",\n    };\n\n    this.iframe.allow = permissionsPolicies.join(\"; \");\n    this.iframe.referrerPolicy = referrerPolicy;\n    this.iframe.sandbox.add(...liftedSandboxRestrictions);\n    this.iframe.src = this.hostUrl.toString();\n    for (const [k, v] of Object.entries(styles)) {\n      this.iframe.style.setProperty(k, v);\n    }\n\n    let el: HTMLElement | null;\n    // oxlint-disable-next-line no-cond-assign -- it's on purpose\n    while ((el = document.getElementById(this.iframe.id))) {\n      console.log(\"reinstalling idOS iframe...\");\n      container.removeChild(el);\n    }\n    container.appendChild(this.iframe);\n\n    return new Promise((resolve) =>\n      this.iframe.addEventListener(\n        \"load\",\n        () => {\n          resolve();\n        },\n        { once: true },\n      ),\n    );\n  }\n\n  private showEnclave(): void {\n    // oxlint-disable-next-line typescript/no-non-null-assertion -- Make the explosion visible.\n    this.iframe.parentElement!.classList.add(\"visible\");\n  }\n\n  private hideEnclave(): void {\n    // oxlint-disable-next-line typescript/no-non-null-assertion -- Make the explosion visible.\n    this.iframe.parentElement!.classList.remove(\"visible\");\n  }\n\n  private async requestToEnclave<TMethod extends keyof BaseProviderMethodArgs>(\n    method: TMethod,\n    ...args: BaseProviderMethodArgs[TMethod]\n  ): Promise<BaseProviderMethodReturn[TMethod]> {\n    return new Promise((resolve, reject) => {\n      const { port1, port2 } = new MessageChannel();\n\n      port1.onmessage = ({ data }) => {\n        port1.close();\n        // oxlint-disable-next-line no-unused-expressions\n        data.error ? reject(data.error) : resolve(data.result);\n      };\n\n      // oxlint-disable-next-line typescript/no-non-null-assertion -- Make the explosion visible.\n      this.iframe.contentWindow!.postMessage(\n        {\n          method,\n          data: args,\n        },\n        this.hostUrl.origin,\n        [port2],\n      );\n    });\n  }\n\n  private bindMessageListener(): void {\n    if (!this.bound) window.addEventListener(\"message\", this.onMessage.bind(this));\n    this.bound = true;\n  }\n\n  private async onMessage(message: MessageEvent): Promise<void> {\n    // We can't be sure about the message and the content\n    // so we have to validate it carefully.\n    if (!message || !message.data || typeof message.data !== \"object\") return;\n\n    if (message.data.type !== \"idOS:signTypedData\" || message.origin !== this.hostUrl.origin)\n      return;\n\n    const payload = message.data.payload;\n    const signature = await this.signTypedData(payload.domain, payload.types, payload.value);\n    await this.requestToEnclave(\"signTypedDataResponse\", signature);\n  }\n}\n","import type {\n  BaseProvider,\n  EncryptionPasswordStore,\n  PublicEncryptionProfile,\n} from \"@idos-network/enclave\";\nimport type { KwilSigner } from \"@idos-network/kwil-js\";\n\nimport {\n  buildInsertableIDOSCredential,\n  matchLevelOrHigher,\n  recordFilter,\n} from \"@idos-network/credentials/utils\";\nimport {\n  createClientKwilSigner,\n  createWebKwilClient,\n  type KwilActionClient,\n  signNearMessage,\n  type Wallet,\n} from \"@idos-network/kwil-infra\";\nimport {\n  type AddAttributeInput,\n  type AddWalletInput,\n  addWallet,\n  addWallets,\n  addAttribute as createAttribute,\n  type DagMessageInput,\n  dagMessage,\n  dwgMessage,\n  type GetAccessGrantsGrantedInput,\n  type GetWalletsOutput,\n  getAccessGrantsGrantedCount,\n  getAccessGrantsOwned,\n  getAttributes,\n  getCredentialOwned,\n  getCredentialShared,\n  getCredentials,\n  getGrants,\n  getUser,\n  getWallets,\n  hasProfile,\n  type idOSCredential,\n  type idOSCredentialListItem,\n  type idOSDelegatedWriteGrant,\n  type idOSGrant,\n  type idOSUser,\n  type idOSUserAttribute,\n  type idOSWallet,\n  removeCredential,\n  removeWallet,\n  revokeAccessGrant,\n  type ShareCredentialInput,\n  shareCredential,\n  type WalletType,\n} from \"@idos-network/kwil-infra/actions\";\nimport {\n  base64Decode,\n  base64Encode,\n  hexEncodeSha256Hash,\n  utf8Decode,\n  utf8Encode,\n} from \"@idos-network/utils/codecs\";\nimport { LocalStorageStore, type Store } from \"@idos-network/utils/store\";\nimport invariant from \"tiny-invariant\";\n\nimport { IframeEnclave } from \"./enclave/iframe-enclave\";\nexport { IframeEnclave };\n\ntype Properties<T> = {\n  // oxlint-disable-next-line typescript/no-restricted-types -- All functions are to be removed.\n  [K in keyof T as Exclude<T[K], Function> extends never ? never : K]: T[K];\n};\n\nexport type idOSClient =\n  | idOSClientConfiguration\n  | idOSClientIdle\n  | idOSClientWithUserSigner\n  | idOSClientLoggedIn;\n\nexport class idOSClientConfiguration<Provider extends BaseProvider = IframeEnclave> {\n  readonly state: \"configuration\";\n  readonly chainId?: string;\n  readonly nodeUrl: string;\n  readonly enclaveOptions: Omit<Provider[\"options\"], \"mode\">;\n  readonly store: Store;\n  readonly enclaveProvider: BaseProvider;\n\n  constructor(params: {\n    chainId?: string;\n    nodeUrl: string;\n    enclaveOptions: Omit<Provider[\"options\"], \"mode\">;\n    enclaveProvider?: new (options: Omit<Provider[\"options\"], \"mode\">) => Provider;\n    store?: Store;\n  }) {\n    this.state = \"configuration\";\n    this.chainId = params.chainId;\n    this.nodeUrl = params.nodeUrl;\n    this.enclaveOptions = params.enclaveOptions;\n    this.store = params.store ?? new LocalStorageStore();\n\n    // TODO: This is a mess because of types...\n    if (params.enclaveProvider) {\n      this.enclaveProvider = new params.enclaveProvider({\n        ...params.enclaveOptions,\n        // Some of enclave providers require store to be passed in constructor\n        store: this.store,\n      });\n    } else {\n      // @ts-expect-error - In case of missing \"container\" in options, enclave will blow up\n      this.enclaveProvider = new IframeEnclave(params.enclaveOptions);\n    }\n  }\n\n  async createClient(): Promise<idOSClientIdle> {\n    return idOSClientIdle.fromConfig(this);\n  }\n}\n\nexport class idOSClientIdle {\n  readonly state: \"idle\";\n  readonly store: Store;\n  readonly kwilClient: KwilActionClient;\n  readonly enclaveProvider: BaseProvider;\n\n  constructor(store: Store, kwilClient: KwilActionClient, enclaveProvider: BaseProvider) {\n    this.state = \"idle\";\n    this.store = store;\n    this.kwilClient = kwilClient;\n    this.enclaveProvider = enclaveProvider;\n  }\n\n  static async fromConfig(params: idOSClientConfiguration<BaseProvider>): Promise<idOSClientIdle> {\n    const kwilClient = await createWebKwilClient({\n      nodeUrl: params.nodeUrl,\n      chainId: params.chainId,\n    });\n\n    await params.enclaveProvider.load();\n\n    return new idOSClientIdle(params.store, kwilClient, params.enclaveProvider);\n  }\n\n  async addressHasProfile(address: string): Promise<boolean> {\n    return hasProfile(this.kwilClient, { address }).then((res) => res.has_profile);\n  }\n\n  async withUserSigner(_signer: Wallet): Promise<idOSClientWithUserSigner> {\n    let signer = _signer;\n    const [kwilSigner, walletIdentifier, walletPublicKey, walletType] =\n      await createClientKwilSigner(this.store, this.kwilClient, signer);\n\n    this.kwilClient.setSigner(kwilSigner);\n\n    if (walletType === \"NEAR\") {\n      const originalSigner = signer;\n      signer = {\n        signMessage: async (message: string) => {\n          const signature = await signNearMessage(\n            originalSigner as Parameters<typeof signNearMessage>[0],\n            message,\n          );\n          return { signedMessage: signature } as { signedMessage: string };\n        },\n      } as unknown as Wallet;\n    }\n\n    return new idOSClientWithUserSigner(\n      this,\n      signer,\n      kwilSigner,\n      walletIdentifier,\n      walletPublicKey,\n      walletType,\n    );\n  }\n\n  async logOut(): Promise<idOSClientIdle> {\n    return this;\n  }\n}\n\nexport class idOSClientWithUserSigner implements Omit<Properties<idOSClientIdle>, \"state\"> {\n  readonly state: \"with-user-signer\";\n  readonly store: Store;\n  readonly kwilClient: KwilActionClient;\n  readonly enclaveProvider: BaseProvider;\n  readonly signer: Wallet;\n  readonly kwilSigner: KwilSigner;\n  readonly walletIdentifier: string;\n  readonly walletPublicKey: string | undefined;\n  readonly walletType: WalletType;\n\n  constructor(\n    idOSClientIdle: idOSClientIdle,\n    signer: Wallet,\n    kwilSigner: KwilSigner,\n    walletIdentifier: string,\n    walletPublicKey: string | undefined,\n    walletType: WalletType,\n  ) {\n    this.state = \"with-user-signer\";\n    this.store = idOSClientIdle.store;\n    this.kwilClient = idOSClientIdle.kwilClient;\n    this.enclaveProvider = idOSClientIdle.enclaveProvider;\n    this.signer = signer;\n    this.kwilSigner = kwilSigner;\n    this.walletIdentifier = walletIdentifier;\n    this.walletPublicKey = walletPublicKey;\n    this.walletType = walletType;\n    // @ts-expect-error - TODO: Fix this\n    this.enclaveProvider.setSigner(this.signer);\n  }\n\n  async logOut(): Promise<idOSClientIdle> {\n    this.kwilClient.setSigner(undefined);\n    return new idOSClientIdle(this.store, this.kwilClient, this.enclaveProvider);\n  }\n\n  async hasProfile(): Promise<boolean> {\n    return hasProfile(this.kwilClient, { address: this.walletIdentifier }).then(\n      (x) => x.has_profile,\n    );\n  }\n\n  async createUserEncryptionProfile(\n    userId: string,\n    forceEncryptionPasswordStore?: EncryptionPasswordStore,\n  ): Promise<PublicEncryptionProfile> {\n    await this.enclaveProvider.reconfigure({\n      mode: \"new\",\n      userId,\n      walletAddress: this.walletIdentifier,\n      walletPublicKey: this.walletPublicKey,\n      walletType: this.walletType,\n      encryptionPasswordStore: forceEncryptionPasswordStore,\n      expectedUserEncryptionPublicKey: undefined,\n    });\n\n    return this.enclaveProvider.ensureUserEncryptionProfile();\n  }\n\n  async logIn(): Promise<idOSClientLoggedIn> {\n    if (!(await this.hasProfile())) throw new Error(\"User does not have a profile\");\n\n    const kwilUser = await getUser(this.kwilClient);\n\n    await this.enclaveProvider.reconfigure({\n      mode: \"existing\",\n      userId: kwilUser.id,\n      expectedUserEncryptionPublicKey: kwilUser.recipient_encryption_public_key,\n      walletAddress: this.walletIdentifier,\n      walletType: this.walletType,\n      encryptionPasswordStore: kwilUser.encryption_password_store,\n      walletPublicKey: this.walletPublicKey,\n    });\n\n    return new idOSClientLoggedIn(this, kwilUser);\n  }\n}\n\nexport class idOSClientLoggedIn implements Omit<Properties<idOSClientWithUserSigner>, \"state\"> {\n  readonly state: \"logged-in\";\n  readonly store: Store;\n  readonly kwilClient: KwilActionClient;\n  readonly enclaveProvider: BaseProvider;\n  readonly signer: Wallet;\n  readonly kwilSigner: KwilSigner;\n  readonly walletIdentifier: string;\n  readonly walletPublicKey: string | undefined;\n  readonly walletType: WalletType;\n  readonly user: idOSUser;\n\n  constructor(idOSClientWithUserSigner: idOSClientWithUserSigner, user: idOSUser) {\n    this.state = \"logged-in\";\n    this.store = idOSClientWithUserSigner.store;\n    this.kwilClient = idOSClientWithUserSigner.kwilClient;\n    this.enclaveProvider = idOSClientWithUserSigner.enclaveProvider;\n    this.signer = idOSClientWithUserSigner.signer;\n    this.kwilSigner = idOSClientWithUserSigner.kwilSigner;\n    this.walletIdentifier = idOSClientWithUserSigner.walletIdentifier;\n    this.walletPublicKey = idOSClientWithUserSigner.walletPublicKey;\n    this.walletType = idOSClientWithUserSigner.walletType;\n    this.user = user;\n  }\n\n  async logOut(): Promise<idOSClientIdle> {\n    this.kwilClient.setSigner(undefined);\n    return new idOSClientIdle(this.store, this.kwilClient, this.enclaveProvider);\n  }\n\n  async requestDWGMessage(params: idOSDelegatedWriteGrant): Promise<string> {\n    return dwgMessage(this.kwilClient, params).then((res) => res.message);\n  }\n\n  async removeCredential(id: string): Promise<{ id: string }> {\n    await removeCredential(this.kwilClient, { id });\n    return { id };\n  }\n\n  async getCredentialById(id: string): Promise<idOSCredential | undefined> {\n    return getCredentialOwned(this.kwilClient, { id }).then((res) => res[0]);\n  }\n\n  async shareCredential(credential: ShareCredentialInput): Promise<ShareCredentialInput> {\n    await shareCredential(this.kwilClient, credential);\n    return credential;\n  }\n\n  async getAllCredentials(): Promise<idOSCredentialListItem[]> {\n    return getCredentials(this.kwilClient);\n  }\n\n  async getAccessGrantsOwned(): Promise<idOSGrant[]> {\n    return getAccessGrantsOwned(this.kwilClient);\n  }\n\n  async getAttributes(): Promise<idOSUserAttribute[]> {\n    return getAttributes(this.kwilClient);\n  }\n\n  async createAttribute(attribute: AddAttributeInput): Promise<AddAttributeInput> {\n    await createAttribute(this.kwilClient, attribute);\n    return attribute;\n  }\n\n  async getCredentialContentSha256Hash(id: string): Promise<string> {\n    const credential = await this.getCredentialById(id);\n\n    invariant(credential, `\"idOSCredential\" with id ${id} not found`);\n\n    await this.enclaveProvider.ensureUserEncryptionProfile();\n\n    const plaintext = await this.enclaveProvider.decrypt(\n      base64Decode(credential.content),\n      base64Decode(credential.encryptor_public_key),\n    );\n\n    return hexEncodeSha256Hash(plaintext);\n  }\n\n  async getCredentialContent(id: string): Promise<string> {\n    const credential = await this.getCredentialById(id);\n\n    invariant(credential, `\"idOSCredential\" with id ${id} not found`);\n\n    await this.enclaveProvider.ensureUserEncryptionProfile();\n\n    const plaintext = await this.enclaveProvider.decrypt(\n      base64Decode(credential.content),\n      base64Decode(credential.encryptor_public_key),\n    );\n\n    return utf8Decode(plaintext);\n  }\n\n  async requestDAGMessage(params: DagMessageInput): Promise<string> {\n    return dagMessage(this.kwilClient, params).then((res) => res.message);\n  }\n\n  async getGrants(\n    params: Partial<GetAccessGrantsGrantedInput>,\n  ): Promise<{ grants: idOSGrant[]; totalCount: number }> {\n    return {\n      grants: await getGrants(this.kwilClient, params),\n      totalCount: await this.getGrantsCount(),\n    };\n  }\n\n  async addWallets(params: AddWalletInput[]): Promise<AddWalletInput[]> {\n    await addWallets(this.kwilClient, params);\n    return params;\n  }\n\n  async getGrantsCount(): Promise<number> {\n    return getAccessGrantsGrantedCount(this.kwilClient, {\n      user_id: null,\n    }).then((res) => res.count);\n  }\n\n  async getCredentialShared(id: string): Promise<idOSCredential | undefined> {\n    return getCredentialShared(this.kwilClient, { id }).then((res) => res[0]);\n  }\n\n  async revokeAccessGrant(id: string): Promise<{ id: string }> {\n    await revokeAccessGrant(this.kwilClient, { id });\n    return { id };\n  }\n\n  async addWallet(params: AddWalletInput): Promise<AddWalletInput> {\n    await addWallet(this.kwilClient, params);\n\n    // we don't need to add the wallet to MPC if the user is not using MPC\n    if (this.user.encryption_password_store !== \"mpc\") {\n      console.log(\"MPC is not enabled or the user is not using MPC\");\n      return params;\n    }\n\n    if (!params.wallet_type) {\n      throw new Error(\"Wallet type is required for MPC users\");\n    }\n\n    const messageToSign = await this.enclaveProvider.addAddressMessageToSign(\n      params.address,\n      params.public_key ?? undefined,\n      params.wallet_type,\n    );\n\n    const signature = await this.enclaveProvider.signTypedData(\n      messageToSign.domain,\n      messageToSign.types,\n      messageToSign.value,\n    );\n\n    const result = await this.enclaveProvider.addAddressToMpcSecret(\n      this.user.id,\n      messageToSign.value,\n      signature,\n    );\n\n    if (result !== \"success\") {\n      console.error(`Failed to add wallet to MPC: ${result}`);\n    }\n\n    return params;\n  }\n\n  async getWallets(): Promise<GetWalletsOutput[]> {\n    return getWallets(this.kwilClient);\n  }\n\n  async removeWallet(id: string): Promise<{ id: string }> {\n    const wallets = await this.getWallets();\n    const wallet = wallets.find((wallet) => wallet.id === id);\n    if (!wallet) {\n      throw new Error(`Wallet with id ${id} not found`);\n    }\n\n    await removeWallet(this.kwilClient, { id });\n\n    // we don't need to add the wallet to MPC if the user is not using MPC\n    if (this.user.encryption_password_store !== \"mpc\") {\n      console.log(\"MPC is not enabled or the user is not using MPC\");\n      return { id };\n    }\n\n    const messageToSign = await this.enclaveProvider.removeAddressMessageToSign(\n      wallet.address,\n      wallet.public_key ?? undefined,\n      wallet.wallet_type,\n    );\n    const signature = await this.enclaveProvider.signTypedData(\n      messageToSign.domain,\n      messageToSign.types,\n      messageToSign.value,\n    );\n    const result = await this.enclaveProvider.removeAddressFromMpcSecret(\n      wallet.user_id,\n      messageToSign.value,\n      signature,\n    );\n    if (result !== \"success\") {\n      console.error(`Failed to add wallet to MPC: ${result}`);\n    }\n\n    return { id };\n  }\n\n  async removeWallets(ids: string[]): Promise<string[]> {\n    for (const id of ids) {\n      await this.removeWallet(id);\n    }\n\n    return ids;\n  }\n\n  async filterCredentials(requirements: {\n    acceptedIssuers: {\n      authPublicKey: string;\n    }[];\n    publicNotesFieldFilters?: {\n      pick: Parameters<typeof recordFilter>[1];\n      omit: Parameters<typeof recordFilter>[2];\n    };\n    privateFieldFilters?: {\n      pick: Parameters<typeof recordFilter>[1];\n      omit: Parameters<typeof recordFilter>[2];\n    };\n    credentialLevelOrHigherFilter?: {\n      userLevel: \"basic\" | \"plus\";\n      requiredAddons: (\"liveness\" | \"email\" | \"phoneNumber\")[];\n    };\n  }): Promise<idOSCredentialListItem[]> {\n    const credentials = await this.getAllCredentials();\n    const originalCredentials = credentials.filter(\n      (cred) => !cred.original_id && !!cred.public_notes,\n    );\n\n    // invariant(originalCredentials.length, \"No original credentials found\");\n    let result = originalCredentials.filter((cred) => {\n      return requirements.acceptedIssuers?.some(\n        (issuer) => issuer.authPublicKey === cred.issuer_auth_public_key,\n      );\n    });\n\n    const publicNotesFieldFilters = requirements.publicNotesFieldFilters;\n    const credentialLevelOrHigherFilter = requirements.credentialLevelOrHigherFilter;\n    const privateFieldFilters = requirements.privateFieldFilters;\n\n    if (credentialLevelOrHigherFilter) {\n      result = result.filter((credential) => {\n        let publicNotes: Record<string, string>;\n\n        try {\n          publicNotes = JSON.parse(credential.public_notes);\n        } catch (_) {\n          throw new Error(`Credential ${credential.id} has non-JSON public notes.`);\n        }\n\n        return matchLevelOrHigher(\n          credentialLevelOrHigherFilter.userLevel,\n          credentialLevelOrHigherFilter.requiredAddons,\n          publicNotes.level,\n        );\n      });\n    }\n\n    if (\n      publicNotesFieldFilters &&\n      (Object.keys(publicNotesFieldFilters.pick).length > 0 ||\n        Object.keys(publicNotesFieldFilters.omit).length > 0)\n    ) {\n      result = result.filter((credential) => {\n        let publicNotes: Record<string, string>;\n\n        try {\n          publicNotes = JSON.parse(credential.public_notes);\n        } catch (_) {\n          throw new Error(`Credential ${credential.id} has non-JSON public notes.`);\n        }\n\n        return recordFilter(\n          publicNotes,\n          publicNotesFieldFilters.pick,\n          publicNotesFieldFilters.omit,\n        );\n      });\n    }\n\n    // Private field filtering requires decryption and the full idOS credential content\n    // it's most \"expensive\", since it requires a roundtrip to the nodes and roundtrip to enclave.\n    if (\n      privateFieldFilters &&\n      (Object.keys(privateFieldFilters.pick).length > 0 ||\n        Object.keys(privateFieldFilters.omit).length > 0)\n    ) {\n      const fullCredentials = await Promise.all(\n        result.map((credential) => this.getCredentialById(credential.id)),\n      );\n\n      // Check for undefined, it will be sign of some internal error\n      invariant(\n        fullCredentials.every((cred) => cred !== undefined),\n        \"Some credentials could not be fetched in full form for private field filtering\",\n      );\n\n      const matches = await this.enclaveProvider.filterCredentials(\n        fullCredentials,\n        privateFieldFilters,\n      );\n\n      result = result.filter((credential) =>\n        matches.some((matchedCredential) => matchedCredential.id === credential.id),\n      );\n    }\n\n    return result;\n  }\n\n  async requestAccessGrant(\n    credentialId: string,\n    {\n      consumerEncryptionPublicKey,\n      consumerAuthPublicKey,\n      lockedUntil = 0,\n    }: {\n      consumerEncryptionPublicKey: string;\n      consumerAuthPublicKey: string;\n      lockedUntil?: number;\n    },\n  ): Promise<ShareCredentialInput> {\n    const credential = await this.getCredentialById(credentialId);\n    const contentHash = await this.getCredentialContentSha256Hash(credentialId);\n\n    invariant(credential, `\"idOSCredential\" with id ${credentialId} not found`);\n\n    const plaintextContent = utf8Decode(\n      await this.enclaveProvider.decrypt(\n        base64Decode(credential.content),\n        base64Decode(credential.encryptor_public_key),\n      ),\n    );\n\n    await this.enclaveProvider.ensureUserEncryptionProfile();\n\n    const { content, encryptorPublicKey } = await this.enclaveProvider.encrypt(\n      utf8Encode(plaintextContent),\n      base64Decode(consumerEncryptionPublicKey),\n    );\n\n    const insertableCredential: ShareCredentialInput = {\n      ...credential,\n      ...buildInsertableIDOSCredential(\n        credential.user_id,\n        \"\",\n        base64Encode(content),\n        base64Encode(encryptorPublicKey),\n      ),\n      original_credential_id: credential.id,\n      id: crypto.randomUUID(),\n      grantee_wallet_identifier: consumerAuthPublicKey,\n      locked_until: lockedUntil,\n      content_hash: contentHash,\n    };\n\n    await this.shareCredential(insertableCredential);\n\n    return insertableCredential;\n  }\n}\n\nexport type {\n  idOSDelegatedWriteGrant,\n  idOSCredential,\n  idOSCredentialListItem,\n  idOSGrant,\n  idOSUser,\n  idOSUserAttribute,\n  idOSWallet,\n};\n\nexport { signNearMessage };\n\nexport function createIDOSClient(params: {\n  nodeUrl: string;\n  enclaveOptions: Omit<IframeEnclave[\"options\"], \"mode\">;\n}): idOSClientConfiguration<IframeEnclave> {\n  return new idOSClientConfiguration({\n    nodeUrl: params.nodeUrl,\n    enclaveOptions: params.enclaveOptions,\n  });\n}\n"],"mappings":";;;;;;;;AAsBA,IAAa,gBAAb,cAAmC,aAAmC;CACpE;CACA;CACA;CACA,QAAgB;CAEhB,YAAY,SAA+B;EACzC,MAAM,QAAQ;EAEd,IAAI,CAAC,KAAK,QAAQ,WAChB,MAAM,IAAI,MAAM,wBAAwB;EAG1C,KAAK,YAAY,KAAK,QAAQ;EAC9B,KAAK,UAAU,IAAI,IAAI,KAAK,QAAQ,OAAO,+BAA+B;EAC1E,KAAK,SAAS,SAAS,cAAc,SAAS;EAC9C,KAAK,OAAO,KAAK;;;CAInB,MAAM,OAAsB;EAE1B,MAAM,KAAK,qBAAqB;EAGhC,MAAM,KAAK,iBAAiB,OAAO;EAGnC,MAAM,KAAK,aAAa;EAGxB,MAAM,KAAK,qBAAqB;;;CAIlC,MAAM,QAAuB;EAC3B,KAAK,iBAAiB,QAAQ;;;CAIhC,MAAM,YAAY,UAA2D,EAAE,EAAiB;EAC9F,MAAM,YAAY,QAAQ;EAC1B,MAAM,KAAK,iBAAiB,eAAe,KAAK,QAAQ;;;CAI1D,MAAM,QAAQ,SAAmC;EAC/C,KAAK,aAAa;EAElB,IAAI;GACF,OAAO,MAAM,KAAK,iBAAiB,WAAW,QAAQ;WAC/C,OAAO;GACd,QAAQ,MAAM,MAAM;GACpB,OAAO;YACC;GACR,KAAK,aAAa;;;;CAKtB,MAAM,kBACJ,aACA,qBAC2B;EAC3B,OAAO,MAAM,KAAK,iBAAiB,qBAAqB,aAAa,oBAAoB;;;CAI3F,MAAM,QACJ,SACA,mBACkE;EAClE,OAAO,KAAK,iBAAiB,WAAW,SAAS,kBAAkB;;;CAIrE,MAAM,QACJ,SACA,iBACsC;EACtC,OAAO,KAAK,iBAAiB,WAAW,SAAS,gBAAgB;;;CAInE,MAAM,8BAA6C;EACjD,KAAK,aAAa;EAElB,IAAI;GACF,MAAM,KAAK,iBAAiB,8BAA8B;WACnD,OAAO;GACd,QAAQ,MAAM,MAAM;YACZ;GACR,KAAK,aAAa;;;;CAKtB,MAAM,8BAAgE;EACpE,KAAK,aAAa;EAElB,IAAI;GACF,OAAO,MAAM,KAAK,iBAAiB,8BAA8B;YACzD;GACR,KAAK,aAAa;;;CAItB,MAAM,wBACJ,SACA,WACA,kBACkC;EAClC,OAAO,KAAK,iBAAiB,2BAA2B,SAAS,WAAW,iBAAiB;;CAG/F,MAAM,2BACJ,SACA,WACA,qBACqC;EACrC,OAAO,KAAK,iBACV,8BACA,SACA,WACA,oBACD;;CAGH,MAAM,sBACJ,QACA,SACA,WACiB;EACjB,OAAO,KAAK,iBAAiB,yBAAyB,QAAQ,SAAS,UAAU;;CAGnF,MAAM,2BACJ,QACA,SACA,WACiB;EACjB,OAAO,KAAK,iBAAiB,8BAA8B,QAAQ,SAAS,UAAU;;CAGxF,MAAc,sBAAqC;EACjD,MAAM,YAAY,SAAS,cAAc,KAAK,UAAU;EAExD,IAAI,CAAC,WACH,MAAM,IAAI,MAAM,sCAAsC,KAAK,YAAY;EAIzE,MAAM,sBAAsB,CAAC,6BAA6B,iBAAiB;EAG3E,MAAM,4BAA4B;GAChC;GACA;GACA;GACA;GACA;GACA;GACD,CAAC,KAAK,WAAW,SAAS,SAAS;EAGpC,MAAM,iBAAiB;EAEvB,MAAM,SAAS;GACb,gBAAgB;GAChB,oBAAoB;GACpB,QAAQ;GACR,SAAS;GACT,UAAU;GACV,OAAO;GACR;EAED,KAAK,OAAO,QAAQ,oBAAoB,KAAK,KAAK;EAClD,KAAK,OAAO,iBAAiB;EAC7B,KAAK,OAAO,QAAQ,IAAI,GAAG,0BAA0B;EACrD,KAAK,OAAO,MAAM,KAAK,QAAQ,UAAU;EACzC,KAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,OAAO,EACzC,KAAK,OAAO,MAAM,YAAY,GAAG,EAAE;EAGrC,IAAI;EAEJ,OAAQ,KAAK,SAAS,eAAe,KAAK,OAAO,GAAG,EAAG;GACrD,QAAQ,IAAI,8BAA8B;GAC1C,UAAU,YAAY,GAAG;;EAE3B,UAAU,YAAY,KAAK,OAAO;EAElC,OAAO,IAAI,SAAS,YAClB,KAAK,OAAO,iBACV,cACM;GACJ,SAAS;KAEX,EAAE,MAAM,MAAM,CACf,CACF;;CAGH,cAA4B;EAE1B,KAAK,OAAO,cAAe,UAAU,IAAI,UAAU;;CAGrD,cAA4B;EAE1B,KAAK,OAAO,cAAe,UAAU,OAAO,UAAU;;CAGxD,MAAc,iBACZ,QACA,GAAG,MACyC;EAC5C,OAAO,IAAI,SAAS,SAAS,WAAW;GACtC,MAAM,EAAE,OAAO,UAAU,IAAI,gBAAgB;GAE7C,MAAM,aAAa,EAAE,WAAW;IAC9B,MAAM,OAAO;IAEb,KAAK,QAAQ,OAAO,KAAK,MAAM,GAAG,QAAQ,KAAK,OAAO;;GAIxD,KAAK,OAAO,cAAe,YACzB;IACE;IACA,MAAM;IACP,EACD,KAAK,QAAQ,QACb,CAAC,MAAM,CACR;IACD;;CAGJ,sBAAoC;EAClC,IAAI,CAAC,KAAK,OAAO,OAAO,iBAAiB,WAAW,KAAK,UAAU,KAAK,KAAK,CAAC;EAC9E,KAAK,QAAQ;;CAGf,MAAc,UAAU,SAAsC;EAG5D,IAAI,CAAC,WAAW,CAAC,QAAQ,QAAQ,OAAO,QAAQ,SAAS,UAAU;EAEnE,IAAI,QAAQ,KAAK,SAAS,wBAAwB,QAAQ,WAAW,KAAK,QAAQ,QAChF;EAEF,MAAM,UAAU,QAAQ,KAAK;EAC7B,MAAM,YAAY,MAAM,KAAK,cAAc,QAAQ,QAAQ,QAAQ,OAAO,QAAQ,MAAM;EACxF,MAAM,KAAK,iBAAiB,yBAAyB,UAAU;;;;;ACrMnE,IAAa,0BAAb,MAAoF;CAClF;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,QAMT;EACD,KAAK,QAAQ;EACb,KAAK,UAAU,OAAO;EACtB,KAAK,UAAU,OAAO;EACtB,KAAK,iBAAiB,OAAO;EAC7B,KAAK,QAAQ,OAAO,SAAS,IAAI,mBAAmB;EAGpD,IAAI,OAAO,iBACT,KAAK,kBAAkB,IAAI,OAAO,gBAAgB;GAChD,GAAG,OAAO;GAEV,OAAO,KAAK;GACb,CAAC;OAGF,KAAK,kBAAkB,IAAI,cAAc,OAAO,eAAe;;CAInE,MAAM,eAAwC;EAC5C,OAAO,eAAe,WAAW,KAAK;;;AAI1C,IAAa,iBAAb,MAAa,eAAe;CAC1B;CACA;CACA;CACA;CAEA,YAAY,OAAc,YAA8B,iBAA+B;EACrF,KAAK,QAAQ;EACb,KAAK,QAAQ;EACb,KAAK,aAAa;EAClB,KAAK,kBAAkB;;CAGzB,aAAa,WAAW,QAAwE;EAC9F,MAAM,aAAa,MAAM,oBAAoB;GAC3C,SAAS,OAAO;GAChB,SAAS,OAAO;GACjB,CAAC;EAEF,MAAM,OAAO,gBAAgB,MAAM;EAEnC,OAAO,IAAI,eAAe,OAAO,OAAO,YAAY,OAAO,gBAAgB;;CAG7E,MAAM,kBAAkB,SAAmC;EACzD,OAAO,WAAW,KAAK,YAAY,EAAE,SAAS,CAAC,CAAC,MAAM,QAAQ,IAAI,YAAY;;CAGhF,MAAM,eAAe,SAAoD;EACvE,IAAI,SAAS;EACb,MAAM,CAAC,YAAY,kBAAkB,iBAAiB,cACpD,MAAM,uBAAuB,KAAK,OAAO,KAAK,YAAY,OAAO;EAEnE,KAAK,WAAW,UAAU,WAAW;EAErC,IAAI,eAAe,QAAQ;GACzB,MAAM,iBAAiB;GACvB,SAAS,EACP,aAAa,OAAO,YAAoB;IAKtC,OAAO,EAAE,eAAe,MAJA,gBACtB,gBACA,QACD,EACkC;MAEtC;;EAGH,OAAO,IAAI,yBACT,MACA,QACA,YACA,kBACA,iBACA,WACD;;CAGH,MAAM,SAAkC;EACtC,OAAO;;;AAIX,IAAa,2BAAb,MAA2F;CACzF;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YACE,gBACA,QACA,YACA,kBACA,iBACA,YACA;EACA,KAAK,QAAQ;EACb,KAAK,QAAQ,eAAe;EAC5B,KAAK,aAAa,eAAe;EACjC,KAAK,kBAAkB,eAAe;EACtC,KAAK,SAAS;EACd,KAAK,aAAa;EAClB,KAAK,mBAAmB;EACxB,KAAK,kBAAkB;EACvB,KAAK,aAAa;EAElB,KAAK,gBAAgB,UAAU,KAAK,OAAO;;CAG7C,MAAM,SAAkC;EACtC,KAAK,WAAW,UAAU,KAAA,EAAU;EACpC,OAAO,IAAI,eAAe,KAAK,OAAO,KAAK,YAAY,KAAK,gBAAgB;;CAG9E,MAAM,aAA+B;EACnC,OAAO,WAAW,KAAK,YAAY,EAAE,SAAS,KAAK,kBAAkB,CAAC,CAAC,MACpE,MAAM,EAAE,YACV;;CAGH,MAAM,4BACJ,QACA,8BACkC;EAClC,MAAM,KAAK,gBAAgB,YAAY;GACrC,MAAM;GACN;GACA,eAAe,KAAK;GACpB,iBAAiB,KAAK;GACtB,YAAY,KAAK;GACjB,yBAAyB;GACzB,iCAAiC,KAAA;GAClC,CAAC;EAEF,OAAO,KAAK,gBAAgB,6BAA6B;;CAG3D,MAAM,QAAqC;EACzC,IAAI,CAAE,MAAM,KAAK,YAAY,EAAG,MAAM,IAAI,MAAM,+BAA+B;EAE/E,MAAM,WAAW,MAAM,QAAQ,KAAK,WAAW;EAE/C,MAAM,KAAK,gBAAgB,YAAY;GACrC,MAAM;GACN,QAAQ,SAAS;GACjB,iCAAiC,SAAS;GAC1C,eAAe,KAAK;GACpB,YAAY,KAAK;GACjB,yBAAyB,SAAS;GAClC,iBAAiB,KAAK;GACvB,CAAC;EAEF,OAAO,IAAI,mBAAmB,MAAM,SAAS;;;AAIjD,IAAa,qBAAb,MAA+F;CAC7F;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,0BAAoD,MAAgB;EAC9E,KAAK,QAAQ;EACb,KAAK,QAAQ,yBAAyB;EACtC,KAAK,aAAa,yBAAyB;EAC3C,KAAK,kBAAkB,yBAAyB;EAChD,KAAK,SAAS,yBAAyB;EACvC,KAAK,aAAa,yBAAyB;EAC3C,KAAK,mBAAmB,yBAAyB;EACjD,KAAK,kBAAkB,yBAAyB;EAChD,KAAK,aAAa,yBAAyB;EAC3C,KAAK,OAAO;;CAGd,MAAM,SAAkC;EACtC,KAAK,WAAW,UAAU,KAAA,EAAU;EACpC,OAAO,IAAI,eAAe,KAAK,OAAO,KAAK,YAAY,KAAK,gBAAgB;;CAG9E,MAAM,kBAAkB,QAAkD;EACxE,OAAO,WAAW,KAAK,YAAY,OAAO,CAAC,MAAM,QAAQ,IAAI,QAAQ;;CAGvE,MAAM,iBAAiB,IAAqC;EAC1D,MAAM,iBAAiB,KAAK,YAAY,EAAE,IAAI,CAAC;EAC/C,OAAO,EAAE,IAAI;;CAGf,MAAM,kBAAkB,IAAiD;EACvE,OAAO,mBAAmB,KAAK,YAAY,EAAE,IAAI,CAAC,CAAC,MAAM,QAAQ,IAAI,GAAG;;CAG1E,MAAM,gBAAgB,YAAiE;EACrF,MAAM,gBAAgB,KAAK,YAAY,WAAW;EAClD,OAAO;;CAGT,MAAM,oBAAuD;EAC3D,OAAO,eAAe,KAAK,WAAW;;CAGxC,MAAM,uBAA6C;EACjD,OAAO,qBAAqB,KAAK,WAAW;;CAG9C,MAAM,gBAA8C;EAClD,OAAO,cAAc,KAAK,WAAW;;CAGvC,MAAM,gBAAgB,WAA0D;EAC9E,MAAMA,aAAgB,KAAK,YAAY,UAAU;EACjD,OAAO;;CAGT,MAAM,+BAA+B,IAA6B;EAChE,MAAM,aAAa,MAAM,KAAK,kBAAkB,GAAG;EAEnD,UAAU,YAAY,4BAA4B,GAAG,YAAY;EAEjE,MAAM,KAAK,gBAAgB,6BAA6B;EAOxD,OAAO,oBAAoB,MALH,KAAK,gBAAgB,QAC3C,aAAa,WAAW,QAAQ,EAChC,aAAa,WAAW,qBAAqB,CAC9C,CAEoC;;CAGvC,MAAM,qBAAqB,IAA6B;EACtD,MAAM,aAAa,MAAM,KAAK,kBAAkB,GAAG;EAEnD,UAAU,YAAY,4BAA4B,GAAG,YAAY;EAEjE,MAAM,KAAK,gBAAgB,6BAA6B;EAOxD,OAAO,WAAW,MALM,KAAK,gBAAgB,QAC3C,aAAa,WAAW,QAAQ,EAChC,aAAa,WAAW,qBAAqB,CAC9C,CAE2B;;CAG9B,MAAM,kBAAkB,QAA0C;EAChE,OAAO,WAAW,KAAK,YAAY,OAAO,CAAC,MAAM,QAAQ,IAAI,QAAQ;;CAGvE,MAAM,UACJ,QACsD;EACtD,OAAO;GACL,QAAQ,MAAM,UAAU,KAAK,YAAY,OAAO;GAChD,YAAY,MAAM,KAAK,gBAAgB;GACxC;;CAGH,MAAM,WAAW,QAAqD;EACpE,MAAM,WAAW,KAAK,YAAY,OAAO;EACzC,OAAO;;CAGT,MAAM,iBAAkC;EACtC,OAAO,4BAA4B,KAAK,YAAY,EAClD,SAAS,MACV,CAAC,CAAC,MAAM,QAAQ,IAAI,MAAM;;CAG7B,MAAM,oBAAoB,IAAiD;EACzE,OAAO,oBAAoB,KAAK,YAAY,EAAE,IAAI,CAAC,CAAC,MAAM,QAAQ,IAAI,GAAG;;CAG3E,MAAM,kBAAkB,IAAqC;EAC3D,MAAM,kBAAkB,KAAK,YAAY,EAAE,IAAI,CAAC;EAChD,OAAO,EAAE,IAAI;;CAGf,MAAM,UAAU,QAAiD;EAC/D,MAAM,UAAU,KAAK,YAAY,OAAO;EAGxC,IAAI,KAAK,KAAK,8BAA8B,OAAO;GACjD,QAAQ,IAAI,kDAAkD;GAC9D,OAAO;;EAGT,IAAI,CAAC,OAAO,aACV,MAAM,IAAI,MAAM,wCAAwC;EAG1D,MAAM,gBAAgB,MAAM,KAAK,gBAAgB,wBAC/C,OAAO,SACP,OAAO,cAAc,KAAA,GACrB,OAAO,YACR;EAED,MAAM,YAAY,MAAM,KAAK,gBAAgB,cAC3C,cAAc,QACd,cAAc,OACd,cAAc,MACf;EAED,MAAM,SAAS,MAAM,KAAK,gBAAgB,sBACxC,KAAK,KAAK,IACV,cAAc,OACd,UACD;EAED,IAAI,WAAW,WACb,QAAQ,MAAM,gCAAgC,SAAS;EAGzD,OAAO;;CAGT,MAAM,aAA0C;EAC9C,OAAO,WAAW,KAAK,WAAW;;CAGpC,MAAM,aAAa,IAAqC;EAEtD,MAAM,UAAS,MADO,KAAK,YAAY,EAChB,MAAM,WAAW,OAAO,OAAO,GAAG;EACzD,IAAI,CAAC,QACH,MAAM,IAAI,MAAM,kBAAkB,GAAG,YAAY;EAGnD,MAAM,aAAa,KAAK,YAAY,EAAE,IAAI,CAAC;EAG3C,IAAI,KAAK,KAAK,8BAA8B,OAAO;GACjD,QAAQ,IAAI,kDAAkD;GAC9D,OAAO,EAAE,IAAI;;EAGf,MAAM,gBAAgB,MAAM,KAAK,gBAAgB,2BAC/C,OAAO,SACP,OAAO,cAAc,KAAA,GACrB,OAAO,YACR;EACD,MAAM,YAAY,MAAM,KAAK,gBAAgB,cAC3C,cAAc,QACd,cAAc,OACd,cAAc,MACf;EACD,MAAM,SAAS,MAAM,KAAK,gBAAgB,2BACxC,OAAO,SACP,cAAc,OACd,UACD;EACD,IAAI,WAAW,WACb,QAAQ,MAAM,gCAAgC,SAAS;EAGzD,OAAO,EAAE,IAAI;;CAGf,MAAM,cAAc,KAAkC;EACpD,KAAK,MAAM,MAAM,KACf,MAAM,KAAK,aAAa,GAAG;EAG7B,OAAO;;CAGT,MAAM,kBAAkB,cAgBc;EAOpC,IAAI,UALwB,MADF,KAAK,mBAAmB,EACV,QACrC,SAAS,CAAC,KAAK,eAAe,CAAC,CAAC,KAAK,aAIR,CAAC,QAAQ,SAAS;GAChD,OAAO,aAAa,iBAAiB,MAClC,WAAW,OAAO,kBAAkB,KAAK,uBAC3C;IACD;EAEF,MAAM,0BAA0B,aAAa;EAC7C,MAAM,gCAAgC,aAAa;EACnD,MAAM,sBAAsB,aAAa;EAEzC,IAAI,+BACF,SAAS,OAAO,QAAQ,eAAe;GACrC,IAAI;GAEJ,IAAI;IACF,cAAc,KAAK,MAAM,WAAW,aAAa;YAC1C,GAAG;IACV,MAAM,IAAI,MAAM,cAAc,WAAW,GAAG,6BAA6B;;GAG3E,OAAO,mBACL,8BAA8B,WAC9B,8BAA8B,gBAC9B,YAAY,MACb;IACD;EAGJ,IACE,4BACC,OAAO,KAAK,wBAAwB,KAAK,CAAC,SAAS,KAClD,OAAO,KAAK,wBAAwB,KAAK,CAAC,SAAS,IAErD,SAAS,OAAO,QAAQ,eAAe;GACrC,IAAI;GAEJ,IAAI;IACF,cAAc,KAAK,MAAM,WAAW,aAAa;YAC1C,GAAG;IACV,MAAM,IAAI,MAAM,cAAc,WAAW,GAAG,6BAA6B;;GAG3E,OAAO,aACL,aACA,wBAAwB,MACxB,wBAAwB,KACzB;IACD;EAKJ,IACE,wBACC,OAAO,KAAK,oBAAoB,KAAK,CAAC,SAAS,KAC9C,OAAO,KAAK,oBAAoB,KAAK,CAAC,SAAS,IACjD;GACA,MAAM,kBAAkB,MAAM,QAAQ,IACpC,OAAO,KAAK,eAAe,KAAK,kBAAkB,WAAW,GAAG,CAAC,CAClE;GAGD,UACE,gBAAgB,OAAO,SAAS,SAAS,KAAA,EAAU,EACnD,iFACD;GAED,MAAM,UAAU,MAAM,KAAK,gBAAgB,kBACzC,iBACA,oBACD;GAED,SAAS,OAAO,QAAQ,eACtB,QAAQ,MAAM,sBAAsB,kBAAkB,OAAO,WAAW,GAAG,CAC5E;;EAGH,OAAO;;CAGT,MAAM,mBACJ,cACA,EACE,6BACA,uBACA,cAAc,KAMe;EAC/B,MAAM,aAAa,MAAM,KAAK,kBAAkB,aAAa;EAC7D,MAAM,cAAc,MAAM,KAAK,+BAA+B,aAAa;EAE3E,UAAU,YAAY,4BAA4B,aAAa,YAAY;EAE3E,MAAM,mBAAmB,WACvB,MAAM,KAAK,gBAAgB,QACzB,aAAa,WAAW,QAAQ,EAChC,aAAa,WAAW,qBAAqB,CAC9C,CACF;EAED,MAAM,KAAK,gBAAgB,6BAA6B;EAExD,MAAM,EAAE,SAAS,uBAAuB,MAAM,KAAK,gBAAgB,QACjE,WAAW,iBAAiB,EAC5B,aAAa,4BAA4B,CAC1C;EAED,MAAM,uBAA6C;GACjD,GAAG;GACH,GAAG,8BACD,WAAW,SACX,IACA,aAAa,QAAQ,EACrB,aAAa,mBAAmB,CACjC;GACD,wBAAwB,WAAW;GACnC,IAAI,OAAO,YAAY;GACvB,2BAA2B;GAC3B,cAAc;GACd,cAAc;GACf;EAED,MAAM,KAAK,gBAAgB,qBAAqB;EAEhD,OAAO;;;AAgBX,SAAgB,iBAAiB,QAGU;CACzC,OAAO,IAAI,wBAAwB;EACjC,SAAS,OAAO;EAChB,gBAAgB,OAAO;EACxB,CAAC"}
+{"version":3,"file":"index.js","names":["createAttribute"],"sources":["../src/enclave/iframe-enclave.ts","../src/index.ts"],"sourcesContent":["import type { idOSCredential } from \"@idos-network/credentials/types\";\nimport type {\n  AddAddressMessageToSign,\n  AddAddressSignatureMessage,\n  RemoveAddressMessageToSign,\n  RemoveAddressSignatureMessage,\n} from \"@idos-network/enclave/mpc\";\n\nimport {\n  BaseProvider,\n  type EnclaveOptions,\n  type PublicEncryptionProfile,\n} from \"@idos-network/enclave\";\n\nimport type { BaseProviderMethodArgs, BaseProviderMethodReturn } from \"./helpers\";\n\nexport interface IframeEnclaveOptions extends EnclaveOptions {\n  container: string;\n  url?: string;\n  throwOnUserCancelUnlock?: boolean;\n}\n\nexport class IframeEnclave extends BaseProvider<IframeEnclaveOptions> {\n  private container: string;\n  private iframe: HTMLIFrameElement;\n  private hostUrl: URL;\n  private bound = false;\n\n  constructor(options: IframeEnclaveOptions) {\n    super(options);\n\n    if (!this.options.container) {\n      throw new Error(\"container is required\");\n    }\n\n    this.container = this.options.container;\n    this.hostUrl = new URL(this.options.url ?? \"https://enclave.idos.network\");\n    this.iframe = document.createElement(\"iframe\");\n    this.iframe.id = \"idos-enclave-iframe\";\n  }\n\n  /** @see parent method */\n  async load(): Promise<void> {\n    // First we have to create and load the iframe\n    await this.createAndLoadIframe();\n\n    // Load the enclave from the store (trigger load() method in the iframe)\n    await this.requestToEnclave(\"load\");\n\n    // Pass current options\n    await this.reconfigure();\n\n    // Bind the message listener to the iframe (in case iframe -> enclave comm)\n    await this.bindMessageListener();\n  }\n\n  /** @override parent method to call iframe */\n  async reset(): Promise<void> {\n    this.requestToEnclave(\"reset\");\n  }\n\n  /** @override parent method to call iframe */\n  async reconfigure(options: Omit<IframeEnclaveOptions, \"container\" | \"url\"> = {}): Promise<void> {\n    super.reconfigure(options);\n    await this.requestToEnclave(\"reconfigure\", this.options);\n  }\n\n  /** @override parent method to call iframe */\n  async confirm(message: string): Promise<boolean> {\n    this.showEnclave();\n\n    try {\n      return await this.requestToEnclave(\"confirm\", message);\n    } catch (error) {\n      console.error(error);\n      return false;\n    } finally {\n      this.hideEnclave();\n    }\n  }\n\n  /** @override parent method to call iframe */\n  async filterCredentials(\n    credentials: idOSCredential[],\n    privateFieldFilters: { pick: Record<string, unknown[]>; omit: Record<string, unknown[]> },\n  ): Promise<idOSCredential[]> {\n    return await this.requestToEnclave(\"filterCredentials\", credentials, privateFieldFilters);\n  }\n\n  /** @override parent method to call iframe */\n  async encrypt(\n    message: Uint8Array,\n    receiverPublicKey: Uint8Array,\n  ): Promise<{ content: Uint8Array; encryptorPublicKey: Uint8Array }> {\n    return this.requestToEnclave(\"encrypt\", message, receiverPublicKey);\n  }\n\n  /** @override parent method to call iframe */\n  async decrypt(\n    message: Uint8Array,\n    senderPublicKey: Uint8Array,\n  ): Promise<Uint8Array<ArrayBufferLike>> {\n    return this.requestToEnclave(\"decrypt\", message, senderPublicKey);\n  }\n\n  /** @override parent method to call iframe */\n  async backupUserEncryptionProfile(): Promise<void> {\n    this.showEnclave();\n\n    try {\n      await this.requestToEnclave(\"backupUserEncryptionProfile\");\n    } catch (error) {\n      console.error(error);\n    } finally {\n      this.hideEnclave();\n    }\n  }\n\n  /** @override parent method to call iframe */\n  async ensureUserEncryptionProfile(): Promise<PublicEncryptionProfile> {\n    this.showEnclave();\n\n    try {\n      return await this.requestToEnclave(\"ensureUserEncryptionProfile\");\n    } finally {\n      this.hideEnclave();\n    }\n  }\n\n  async addAddressMessageToSign(\n    address: string,\n    publicKey: string | undefined,\n    addressToAddType: string,\n  ): Promise<AddAddressMessageToSign> {\n    return this.requestToEnclave(\"addAddressMessageToSign\", address, publicKey, addressToAddType);\n  }\n\n  async removeAddressMessageToSign(\n    address: string,\n    publicKey: string | undefined,\n    addressToRemoveType: string,\n  ): Promise<RemoveAddressMessageToSign> {\n    return this.requestToEnclave(\n      \"removeAddressMessageToSign\",\n      address,\n      publicKey,\n      addressToRemoveType,\n    );\n  }\n\n  async addAddressToMpcSecret(\n    userId: string,\n    message: AddAddressSignatureMessage,\n    signature: string,\n  ): Promise<string> {\n    return this.requestToEnclave(\"addAddressToMpcSecret\", userId, message, signature);\n  }\n\n  async removeAddressFromMpcSecret(\n    userId: string,\n    message: RemoveAddressSignatureMessage,\n    signature: string,\n  ): Promise<string> {\n    return this.requestToEnclave(\"removeAddressFromMpcSecret\", userId, message, signature);\n  }\n\n  private async createAndLoadIframe(): Promise<void> {\n    const container = document.querySelector(this.container);\n\n    if (!container) {\n      throw new Error(`Can't find container with selector ${this.container}`);\n    }\n\n    // https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy#directives\n    const permissionsPolicies = [\"publickey-credentials-get\", \"storage-access\"];\n\n    // https://developer.mozilla.org/en-US/docs/Web/HTML/Element/iframe#sandbox\n    const liftedSandboxRestrictions = [\n      \"forms\",\n      \"modals\",\n      \"popups\",\n      \"popups-to-escape-sandbox\",\n      \"same-origin\",\n      \"scripts\",\n    ].map((toLift) => `allow-${toLift}`);\n\n    // https://developer.mozilla.org/en-US/docs/Web/HTML/Element/iframe#referrerpolicy\n    const referrerPolicy = \"origin\";\n\n    const styles = {\n      \"aspect-ratio\": \"4/1\",\n      \"background-color\": \"transparent\",\n      border: \"none\",\n      display: \"block\",\n      overflow: \"hidden\",\n      width: \"100%\",\n    };\n\n    this.iframe.allow = permissionsPolicies.join(\"; \");\n    this.iframe.referrerPolicy = referrerPolicy;\n    this.iframe.sandbox.add(...liftedSandboxRestrictions);\n    this.iframe.src = this.hostUrl.toString();\n    for (const [k, v] of Object.entries(styles)) {\n      this.iframe.style.setProperty(k, v);\n    }\n\n    let el: HTMLElement | null;\n    // oxlint-disable-next-line no-cond-assign -- it's on purpose\n    while ((el = document.getElementById(this.iframe.id))) {\n      console.log(\"reinstalling idOS iframe...\");\n      container.removeChild(el);\n    }\n    container.appendChild(this.iframe);\n\n    return new Promise((resolve) =>\n      this.iframe.addEventListener(\n        \"load\",\n        () => {\n          resolve();\n        },\n        { once: true },\n      ),\n    );\n  }\n\n  private showEnclave(): void {\n    // oxlint-disable-next-line typescript/no-non-null-assertion -- Make the explosion visible.\n    this.iframe.parentElement!.classList.add(\"visible\");\n  }\n\n  private hideEnclave(): void {\n    // oxlint-disable-next-line typescript/no-non-null-assertion -- Make the explosion visible.\n    this.iframe.parentElement!.classList.remove(\"visible\");\n  }\n\n  private async requestToEnclave<TMethod extends keyof BaseProviderMethodArgs>(\n    method: TMethod,\n    ...args: BaseProviderMethodArgs[TMethod]\n  ): Promise<BaseProviderMethodReturn[TMethod]> {\n    return new Promise((resolve, reject) => {\n      const { port1, port2 } = new MessageChannel();\n\n      port1.onmessage = ({ data }) => {\n        port1.close();\n        // oxlint-disable-next-line no-unused-expressions\n        data.error ? reject(data.error) : resolve(data.result);\n      };\n\n      // oxlint-disable-next-line typescript/no-non-null-assertion -- Make the explosion visible.\n      this.iframe.contentWindow!.postMessage(\n        {\n          method,\n          data: args,\n        },\n        this.hostUrl.origin,\n        [port2],\n      );\n    });\n  }\n\n  private bindMessageListener(): void {\n    if (!this.bound) window.addEventListener(\"message\", this.onMessage.bind(this));\n    this.bound = true;\n  }\n\n  private async onMessage(message: MessageEvent): Promise<void> {\n    // We can't be sure about the message and the content\n    // so we have to validate it carefully.\n    if (!message || !message.data || typeof message.data !== \"object\") return;\n\n    if (message.data.type !== \"idOS:signTypedData\" || message.origin !== this.hostUrl.origin)\n      return;\n\n    const payload = message.data.payload;\n    const signature = await this.signTypedData(payload.domain, payload.types, payload.value);\n    await this.requestToEnclave(\"signTypedDataResponse\", signature);\n  }\n}\n","import type {\n  BaseProvider,\n  EncryptionPasswordStore,\n  PublicEncryptionProfile,\n} from \"@idos-network/enclave\";\nimport type { KwilSigner } from \"@idos-network/kwil-js\";\n\nimport {\n  buildInsertableIDOSCredential,\n  matchLevelOrHigher,\n  recordFilter,\n} from \"@idos-network/credentials/utils\";\nimport {\n  createClientKwilSigner,\n  createWebKwilClient,\n  type KwilActionClient,\n  signNearMessage,\n  type Wallet,\n} from \"@idos-network/kwil-infra\";\nimport {\n  type AddAttributeInput,\n  type AddWalletInput,\n  addWallet,\n  addWallets,\n  addAttribute as createAttribute,\n  type DagMessageInput,\n  dagMessage,\n  dwgMessage,\n  type GetAccessGrantsGrantedInput,\n  type GetWalletsOutput,\n  getAccessGrantsGrantedCount,\n  getAccessGrantsOwned,\n  getAttributes,\n  getCredentialOwned,\n  getCredentialShared,\n  getCredentials,\n  getGrants,\n  getUser,\n  getWallets,\n  hasProfile,\n  type idOSCredential,\n  type idOSCredentialListItem,\n  type idOSDelegatedWriteGrant,\n  type idOSGrant,\n  type idOSUser,\n  type idOSUserAttribute,\n  type idOSWallet,\n  removeCredential,\n  removeWallet,\n  revokeAccessGrant,\n  type ShareCredentialInput,\n  shareCredential,\n  type WalletType,\n} from \"@idos-network/kwil-infra/actions\";\nimport {\n  base64Decode,\n  base64Encode,\n  hexEncodeSha256Hash,\n  utf8Decode,\n  utf8Encode,\n} from \"@idos-network/utils/codecs\";\nimport { LocalStorageStore, type Store } from \"@idos-network/utils/store\";\nimport invariant from \"tiny-invariant\";\n\nimport { IframeEnclave } from \"./enclave/iframe-enclave\";\nexport { IframeEnclave };\n\ntype Properties<T> = {\n  // oxlint-disable-next-line typescript/no-restricted-types -- All functions are to be removed.\n  [K in keyof T as Exclude<T[K], Function> extends never ? never : K]: T[K];\n};\n\nexport type idOSClient =\n  | idOSClientConfiguration\n  | idOSClientIdle\n  | idOSClientWithUserSigner\n  | idOSClientLoggedIn;\n\nexport class idOSClientConfiguration<Provider extends BaseProvider = IframeEnclave> {\n  readonly state: \"configuration\";\n  readonly chainId?: string;\n  readonly nodeUrl: string;\n  readonly enclaveOptions: Omit<Provider[\"options\"], \"mode\">;\n  readonly store: Store;\n  readonly enclaveProvider: BaseProvider;\n\n  constructor(params: {\n    chainId?: string;\n    nodeUrl: string;\n    enclaveOptions: Omit<Provider[\"options\"], \"mode\">;\n    enclaveProvider?: new (options: Omit<Provider[\"options\"], \"mode\">) => Provider;\n    store?: Store;\n  }) {\n    this.state = \"configuration\";\n    this.chainId = params.chainId;\n    this.nodeUrl = params.nodeUrl;\n    this.enclaveOptions = params.enclaveOptions;\n    this.store = params.store ?? new LocalStorageStore();\n\n    // TODO: This is a mess because of types...\n    if (params.enclaveProvider) {\n      this.enclaveProvider = new params.enclaveProvider({\n        ...params.enclaveOptions,\n        // Some of enclave providers require store to be passed in constructor\n        store: this.store,\n      });\n    } else {\n      // @ts-expect-error - In case of missing \"container\" in options, enclave will blow up\n      this.enclaveProvider = new IframeEnclave(params.enclaveOptions);\n    }\n  }\n\n  async createClient(): Promise<idOSClientIdle> {\n    return idOSClientIdle.fromConfig(this);\n  }\n}\n\nexport class idOSClientIdle {\n  readonly state: \"idle\";\n  readonly store: Store;\n  readonly kwilClient: KwilActionClient;\n  readonly enclaveProvider: BaseProvider;\n\n  constructor(store: Store, kwilClient: KwilActionClient, enclaveProvider: BaseProvider) {\n    this.state = \"idle\";\n    this.store = store;\n    this.kwilClient = kwilClient;\n    this.enclaveProvider = enclaveProvider;\n  }\n\n  static async fromConfig(params: idOSClientConfiguration<BaseProvider>): Promise<idOSClientIdle> {\n    const kwilClient = await createWebKwilClient({\n      nodeUrl: params.nodeUrl,\n      chainId: params.chainId,\n    });\n\n    await params.enclaveProvider.load();\n\n    return new idOSClientIdle(params.store, kwilClient, params.enclaveProvider);\n  }\n\n  async addressHasProfile(address: string): Promise<boolean> {\n    return hasProfile(this.kwilClient, { address }).then((res) => res.has_profile);\n  }\n\n  async withUserSigner(_signer: Wallet): Promise<idOSClientWithUserSigner> {\n    let signer = _signer;\n    const [kwilSigner, walletIdentifier, walletPublicKey, walletType] =\n      await createClientKwilSigner(this.store, this.kwilClient, signer);\n\n    this.kwilClient.setSigner(kwilSigner);\n\n    if (walletType === \"NEAR\") {\n      const originalSigner = signer;\n      signer = {\n        signMessage: async (message: string) => {\n          const signature = await signNearMessage(\n            originalSigner as Parameters<typeof signNearMessage>[0],\n            message,\n          );\n          return { signedMessage: signature } as { signedMessage: string };\n        },\n      } as unknown as Wallet;\n    }\n\n    return new idOSClientWithUserSigner(\n      this,\n      signer,\n      kwilSigner,\n      walletIdentifier,\n      walletPublicKey,\n      walletType,\n    );\n  }\n\n  async logOut(): Promise<idOSClientIdle> {\n    return this;\n  }\n}\n\nexport class idOSClientWithUserSigner implements Omit<Properties<idOSClientIdle>, \"state\"> {\n  readonly state: \"with-user-signer\";\n  readonly store: Store;\n  readonly kwilClient: KwilActionClient;\n  readonly enclaveProvider: BaseProvider;\n  readonly signer: Wallet;\n  readonly kwilSigner: KwilSigner;\n  readonly walletIdentifier: string;\n  readonly walletPublicKey: string | undefined;\n  readonly walletType: WalletType;\n\n  constructor(\n    idOSClientIdle: idOSClientIdle,\n    signer: Wallet,\n    kwilSigner: KwilSigner,\n    walletIdentifier: string,\n    walletPublicKey: string | undefined,\n    walletType: WalletType,\n  ) {\n    this.state = \"with-user-signer\";\n    this.store = idOSClientIdle.store;\n    this.kwilClient = idOSClientIdle.kwilClient;\n    this.enclaveProvider = idOSClientIdle.enclaveProvider;\n    this.signer = signer;\n    this.kwilSigner = kwilSigner;\n    this.walletIdentifier = walletIdentifier;\n    this.walletPublicKey = walletPublicKey;\n    this.walletType = walletType;\n    // @ts-expect-error - TODO: Fix this\n    this.enclaveProvider.setSigner(this.signer);\n  }\n\n  async logOut(): Promise<idOSClientIdle> {\n    this.kwilClient.setSigner(undefined);\n    return new idOSClientIdle(this.store, this.kwilClient, this.enclaveProvider);\n  }\n\n  async hasProfile(): Promise<boolean> {\n    return hasProfile(this.kwilClient, { address: this.walletIdentifier }).then(\n      (x) => x.has_profile,\n    );\n  }\n\n  async createUserEncryptionProfile(\n    userId: string,\n    forceEncryptionPasswordStore?: EncryptionPasswordStore,\n  ): Promise<PublicEncryptionProfile> {\n    await this.enclaveProvider.reconfigure({\n      mode: \"new\",\n      userId,\n      walletAddress: this.walletIdentifier,\n      walletPublicKey: this.walletPublicKey,\n      walletType: this.walletType,\n      encryptionPasswordStore: forceEncryptionPasswordStore,\n      expectedUserEncryptionPublicKey: undefined,\n    });\n\n    return this.enclaveProvider.ensureUserEncryptionProfile();\n  }\n\n  async logIn(): Promise<idOSClientLoggedIn> {\n    if (!(await this.hasProfile())) throw new Error(\"User does not have a profile\");\n\n    const kwilUser = await getUser(this.kwilClient);\n\n    await this.enclaveProvider.reconfigure({\n      mode: \"existing\",\n      userId: kwilUser.id,\n      expectedUserEncryptionPublicKey: kwilUser.recipient_encryption_public_key,\n      walletAddress: this.walletIdentifier,\n      walletType: this.walletType,\n      encryptionPasswordStore: kwilUser.encryption_password_store,\n      walletPublicKey: this.walletPublicKey,\n    });\n\n    return new idOSClientLoggedIn(this, kwilUser);\n  }\n}\n\nexport class idOSClientLoggedIn implements Omit<Properties<idOSClientWithUserSigner>, \"state\"> {\n  readonly state: \"logged-in\";\n  readonly store: Store;\n  readonly kwilClient: KwilActionClient;\n  readonly enclaveProvider: BaseProvider;\n  readonly signer: Wallet;\n  readonly kwilSigner: KwilSigner;\n  readonly walletIdentifier: string;\n  readonly walletPublicKey: string | undefined;\n  readonly walletType: WalletType;\n  readonly user: idOSUser;\n\n  constructor(idOSClientWithUserSigner: idOSClientWithUserSigner, user: idOSUser) {\n    this.state = \"logged-in\";\n    this.store = idOSClientWithUserSigner.store;\n    this.kwilClient = idOSClientWithUserSigner.kwilClient;\n    this.enclaveProvider = idOSClientWithUserSigner.enclaveProvider;\n    this.signer = idOSClientWithUserSigner.signer;\n    this.kwilSigner = idOSClientWithUserSigner.kwilSigner;\n    this.walletIdentifier = idOSClientWithUserSigner.walletIdentifier;\n    this.walletPublicKey = idOSClientWithUserSigner.walletPublicKey;\n    this.walletType = idOSClientWithUserSigner.walletType;\n    this.user = user;\n  }\n\n  async logOut(): Promise<idOSClientIdle> {\n    this.kwilClient.setSigner(undefined);\n    return new idOSClientIdle(this.store, this.kwilClient, this.enclaveProvider);\n  }\n\n  async requestDWGMessage(params: idOSDelegatedWriteGrant): Promise<string> {\n    return dwgMessage(this.kwilClient, params).then((res) => res.message);\n  }\n\n  async removeCredential(id: string): Promise<{ id: string }> {\n    await removeCredential(this.kwilClient, { id });\n    return { id };\n  }\n\n  async getCredentialById(id: string): Promise<idOSCredential | undefined> {\n    return getCredentialOwned(this.kwilClient, { id }).then((res) => res[0]);\n  }\n\n  async shareCredential(credential: ShareCredentialInput): Promise<ShareCredentialInput> {\n    await shareCredential(this.kwilClient, credential);\n    return credential;\n  }\n\n  async getAllCredentials(): Promise<idOSCredentialListItem[]> {\n    return getCredentials(this.kwilClient);\n  }\n\n  async getAccessGrantsOwned(): Promise<idOSGrant[]> {\n    return getAccessGrantsOwned(this.kwilClient);\n  }\n\n  async getAttributes(): Promise<idOSUserAttribute[]> {\n    return getAttributes(this.kwilClient);\n  }\n\n  async createAttribute(attribute: AddAttributeInput): Promise<AddAttributeInput> {\n    await createAttribute(this.kwilClient, attribute);\n    return attribute;\n  }\n\n  async getCredentialContentSha256Hash(id: string): Promise<string> {\n    const credential = await this.getCredentialById(id);\n\n    invariant(credential, `\"idOSCredential\" with id ${id} not found`);\n\n    await this.enclaveProvider.ensureUserEncryptionProfile();\n\n    const plaintext = await this.enclaveProvider.decrypt(\n      base64Decode(credential.content),\n      base64Decode(credential.encryptor_public_key),\n    );\n\n    return hexEncodeSha256Hash(plaintext);\n  }\n\n  async getCredentialContent(id: string): Promise<string> {\n    const credential = await this.getCredentialById(id);\n\n    invariant(credential, `\"idOSCredential\" with id ${id} not found`);\n\n    await this.enclaveProvider.ensureUserEncryptionProfile();\n\n    const plaintext = await this.enclaveProvider.decrypt(\n      base64Decode(credential.content),\n      base64Decode(credential.encryptor_public_key),\n    );\n\n    return utf8Decode(plaintext);\n  }\n\n  async requestDAGMessage(params: DagMessageInput): Promise<string> {\n    return dagMessage(this.kwilClient, params).then((res) => res.message);\n  }\n\n  async getGrants(\n    params: Partial<GetAccessGrantsGrantedInput>,\n  ): Promise<{ grants: idOSGrant[]; totalCount: number }> {\n    return {\n      grants: await getGrants(this.kwilClient, params),\n      totalCount: await this.getGrantsCount(),\n    };\n  }\n\n  async addWallets(params: AddWalletInput[]): Promise<AddWalletInput[]> {\n    await addWallets(this.kwilClient, params);\n    return params;\n  }\n\n  async getGrantsCount(): Promise<number> {\n    return getAccessGrantsGrantedCount(this.kwilClient, {\n      user_id: null,\n    }).then((res) => res.count);\n  }\n\n  async getCredentialShared(id: string): Promise<idOSCredential | undefined> {\n    return getCredentialShared(this.kwilClient, { id }).then((res) => res[0]);\n  }\n\n  async revokeAccessGrant(id: string): Promise<{ id: string }> {\n    await revokeAccessGrant(this.kwilClient, { id });\n    return { id };\n  }\n\n  async addWallet(params: AddWalletInput): Promise<AddWalletInput> {\n    await addWallet(this.kwilClient, params);\n\n    // we don't need to add the wallet to MPC if the user is not using MPC\n    if (this.user.encryption_password_store !== \"mpc\") {\n      console.log(\"MPC is not enabled or the user is not using MPC\");\n      return params;\n    }\n\n    if (!params.wallet_type) {\n      throw new Error(\"Wallet type is required for MPC users\");\n    }\n\n    const messageToSign = await this.enclaveProvider.addAddressMessageToSign(\n      params.address,\n      params.public_key ?? undefined,\n      params.wallet_type,\n    );\n\n    const signature = await this.enclaveProvider.signTypedData(\n      messageToSign.domain,\n      messageToSign.types,\n      messageToSign.value,\n    );\n\n    const result = await this.enclaveProvider.addAddressToMpcSecret(\n      this.user.id,\n      messageToSign.value,\n      signature,\n    );\n\n    if (result !== \"success\") {\n      console.error(`Failed to add wallet to MPC: ${result}`);\n    }\n\n    return params;\n  }\n\n  async getWallets(): Promise<GetWalletsOutput[]> {\n    return getWallets(this.kwilClient);\n  }\n\n  async removeWallet(id: string): Promise<{ id: string }> {\n    const wallets = await this.getWallets();\n    const wallet = wallets.find((wallet) => wallet.id === id);\n    if (!wallet) {\n      throw new Error(`Wallet with id ${id} not found`);\n    }\n\n    await removeWallet(this.kwilClient, { id });\n\n    // we don't need to add the wallet to MPC if the user is not using MPC\n    if (this.user.encryption_password_store !== \"mpc\") {\n      console.log(\"MPC is not enabled or the user is not using MPC\");\n      return { id };\n    }\n\n    const messageToSign = await this.enclaveProvider.removeAddressMessageToSign(\n      wallet.address,\n      wallet.public_key ?? undefined,\n      wallet.wallet_type,\n    );\n    const signature = await this.enclaveProvider.signTypedData(\n      messageToSign.domain,\n      messageToSign.types,\n      messageToSign.value,\n    );\n    const result = await this.enclaveProvider.removeAddressFromMpcSecret(\n      wallet.user_id,\n      messageToSign.value,\n      signature,\n    );\n    if (result !== \"success\") {\n      console.error(`Failed to add wallet to MPC: ${result}`);\n    }\n\n    return { id };\n  }\n\n  async removeWallets(ids: string[]): Promise<string[]> {\n    for (const id of ids) {\n      await this.removeWallet(id);\n    }\n\n    return ids;\n  }\n\n  async filterCredentials(requirements: {\n    acceptedIssuers: {\n      authPublicKey: string;\n    }[];\n    publicNotesFieldFilters?: {\n      pick: Parameters<typeof recordFilter>[1];\n      omit: Parameters<typeof recordFilter>[2];\n    };\n    privateFieldFilters?: {\n      pick: Parameters<typeof recordFilter>[1];\n      omit: Parameters<typeof recordFilter>[2];\n    };\n    credentialLevelOrHigherFilter?: {\n      userLevel: \"basic\" | \"plus\";\n      requiredAddons: (\"liveness\" | \"email\" | \"phoneNumber\")[];\n    };\n  }): Promise<idOSCredentialListItem[]> {\n    const credentials = await this.getAllCredentials();\n    const originalCredentials = credentials.filter(\n      (cred) => !cred.original_id && !!cred.public_notes,\n    );\n\n    // invariant(originalCredentials.length, \"No original credentials found\");\n    let result = originalCredentials.filter((cred) => {\n      return requirements.acceptedIssuers?.some(\n        (issuer) => issuer.authPublicKey === cred.issuer_auth_public_key,\n      );\n    });\n\n    const publicNotesFieldFilters = requirements.publicNotesFieldFilters;\n    const credentialLevelOrHigherFilter = requirements.credentialLevelOrHigherFilter;\n    const privateFieldFilters = requirements.privateFieldFilters;\n\n    if (credentialLevelOrHigherFilter) {\n      result = result.filter((credential) => {\n        let publicNotes: Record<string, string>;\n\n        try {\n          publicNotes = JSON.parse(credential.public_notes);\n        } catch (_) {\n          throw new Error(`Credential ${credential.id} has non-JSON public notes.`);\n        }\n\n        return matchLevelOrHigher(\n          credentialLevelOrHigherFilter.userLevel,\n          credentialLevelOrHigherFilter.requiredAddons,\n          publicNotes.level,\n        );\n      });\n    }\n\n    if (\n      publicNotesFieldFilters &&\n      (Object.keys(publicNotesFieldFilters.pick).length > 0 ||\n        Object.keys(publicNotesFieldFilters.omit).length > 0)\n    ) {\n      result = result.filter((credential) => {\n        let publicNotes: Record<string, string>;\n\n        try {\n          publicNotes = JSON.parse(credential.public_notes);\n        } catch (_) {\n          throw new Error(`Credential ${credential.id} has non-JSON public notes.`);\n        }\n\n        return recordFilter(\n          publicNotes,\n          publicNotesFieldFilters.pick,\n          publicNotesFieldFilters.omit,\n        );\n      });\n    }\n\n    // Private field filtering requires decryption and the full idOS credential content\n    // it's most \"expensive\", since it requires a roundtrip to the nodes and roundtrip to enclave.\n    if (\n      privateFieldFilters &&\n      (Object.keys(privateFieldFilters.pick).length > 0 ||\n        Object.keys(privateFieldFilters.omit).length > 0)\n    ) {\n      const fullCredentials = await Promise.all(\n        result.map((credential) => this.getCredentialById(credential.id)),\n      );\n\n      // Check for undefined, it will be sign of some internal error\n      invariant(\n        fullCredentials.every((cred) => cred !== undefined),\n        \"Some credentials could not be fetched in full form for private field filtering\",\n      );\n\n      const matches = await this.enclaveProvider.filterCredentials(\n        fullCredentials,\n        privateFieldFilters,\n      );\n\n      result = result.filter((credential) =>\n        matches.some((matchedCredential) => matchedCredential.id === credential.id),\n      );\n    }\n\n    return result;\n  }\n\n  async requestAccessGrant(\n    credentialId: string,\n    {\n      consumerEncryptionPublicKey,\n      consumerAuthPublicKey,\n      lockedUntil = 0,\n    }: {\n      consumerEncryptionPublicKey: string;\n      consumerAuthPublicKey: string;\n      lockedUntil?: number;\n    },\n  ): Promise<ShareCredentialInput> {\n    const credential = await this.getCredentialById(credentialId);\n    const contentHash = await this.getCredentialContentSha256Hash(credentialId);\n\n    invariant(credential, `\"idOSCredential\" with id ${credentialId} not found`);\n\n    const plaintextContent = utf8Decode(\n      await this.enclaveProvider.decrypt(\n        base64Decode(credential.content),\n        base64Decode(credential.encryptor_public_key),\n      ),\n    );\n\n    await this.enclaveProvider.ensureUserEncryptionProfile();\n\n    const { content, encryptorPublicKey } = await this.enclaveProvider.encrypt(\n      utf8Encode(plaintextContent),\n      base64Decode(consumerEncryptionPublicKey),\n    );\n\n    const insertableCredential: ShareCredentialInput = {\n      ...credential,\n      ...buildInsertableIDOSCredential(\n        credential.user_id,\n        \"\",\n        base64Encode(content),\n        base64Encode(encryptorPublicKey),\n      ),\n      original_credential_id: credential.id,\n      id: crypto.randomUUID(),\n      grantee_wallet_identifier: consumerAuthPublicKey,\n      locked_until: lockedUntil,\n      content_hash: contentHash,\n    };\n\n    await this.shareCredential(insertableCredential);\n\n    return insertableCredential;\n  }\n}\n\nexport type {\n  idOSDelegatedWriteGrant,\n  idOSCredential,\n  idOSCredentialListItem,\n  idOSGrant,\n  idOSUser,\n  idOSUserAttribute,\n  idOSWallet,\n};\n\nexport { signNearMessage };\n\nexport function createIDOSClient(params: {\n  nodeUrl: string;\n  enclaveOptions: Omit<IframeEnclave[\"options\"], \"mode\">;\n}): idOSClientConfiguration<IframeEnclave> {\n  return new idOSClientConfiguration({\n    nodeUrl: params.nodeUrl,\n    enclaveOptions: params.enclaveOptions,\n  });\n}\n"],"mappings":";;;;;;;;AAsBA,IAAa,gBAAb,cAAmC,aAAmC;CACpE;CACA;CACA;CACA,QAAgB;CAEhB,YAAY,SAA+B;EACzC,MAAM,OAAO;EAEb,IAAI,CAAC,KAAK,QAAQ,WAChB,MAAM,IAAI,MAAM,uBAAuB;EAGzC,KAAK,YAAY,KAAK,QAAQ;EAC9B,KAAK,UAAU,IAAI,IAAI,KAAK,QAAQ,OAAO,8BAA8B;EACzE,KAAK,SAAS,SAAS,cAAc,QAAQ;EAC7C,KAAK,OAAO,KAAK;CACnB;;CAGA,MAAM,OAAsB;EAE1B,MAAM,KAAK,oBAAoB;EAG/B,MAAM,KAAK,iBAAiB,MAAM;EAGlC,MAAM,KAAK,YAAY;EAGvB,MAAM,KAAK,oBAAoB;CACjC;;CAGA,MAAM,QAAuB;EAC3B,KAAK,iBAAiB,OAAO;CAC/B;;CAGA,MAAM,YAAY,UAA2D,CAAC,GAAkB;EAC9F,MAAM,YAAY,OAAO;EACzB,MAAM,KAAK,iBAAiB,eAAe,KAAK,OAAO;CACzD;;CAGA,MAAM,QAAQ,SAAmC;EAC/C,KAAK,YAAY;EAEjB,IAAI;GACF,OAAO,MAAM,KAAK,iBAAiB,WAAW,OAAO;EACvD,SAAS,OAAO;GACd,QAAQ,MAAM,KAAK;GACnB,OAAO;EACT,UAAU;GACR,KAAK,YAAY;EACnB;CACF;;CAGA,MAAM,kBACJ,aACA,qBAC2B;EAC3B,OAAO,MAAM,KAAK,iBAAiB,qBAAqB,aAAa,mBAAmB;CAC1F;;CAGA,MAAM,QACJ,SACA,mBACkE;EAClE,OAAO,KAAK,iBAAiB,WAAW,SAAS,iBAAiB;CACpE;;CAGA,MAAM,QACJ,SACA,iBACsC;EACtC,OAAO,KAAK,iBAAiB,WAAW,SAAS,eAAe;CAClE;;CAGA,MAAM,8BAA6C;EACjD,KAAK,YAAY;EAEjB,IAAI;GACF,MAAM,KAAK,iBAAiB,6BAA6B;EAC3D,SAAS,OAAO;GACd,QAAQ,MAAM,KAAK;EACrB,UAAU;GACR,KAAK,YAAY;EACnB;CACF;;CAGA,MAAM,8BAAgE;EACpE,KAAK,YAAY;EAEjB,IAAI;GACF,OAAO,MAAM,KAAK,iBAAiB,6BAA6B;EAClE,UAAU;GACR,KAAK,YAAY;EACnB;CACF;CAEA,MAAM,wBACJ,SACA,WACA,kBACkC;EAClC,OAAO,KAAK,iBAAiB,2BAA2B,SAAS,WAAW,gBAAgB;CAC9F;CAEA,MAAM,2BACJ,SACA,WACA,qBACqC;EACrC,OAAO,KAAK,iBACV,8BACA,SACA,WACA,mBACF;CACF;CAEA,MAAM,sBACJ,QACA,SACA,WACiB;EACjB,OAAO,KAAK,iBAAiB,yBAAyB,QAAQ,SAAS,SAAS;CAClF;CAEA,MAAM,2BACJ,QACA,SACA,WACiB;EACjB,OAAO,KAAK,iBAAiB,8BAA8B,QAAQ,SAAS,SAAS;CACvF;CAEA,MAAc,sBAAqC;EACjD,MAAM,YAAY,SAAS,cAAc,KAAK,SAAS;EAEvD,IAAI,CAAC,WACH,MAAM,IAAI,MAAM,sCAAsC,KAAK,WAAW;EAIxE,MAAM,sBAAsB,CAAC,6BAA6B,gBAAgB;EAG1E,MAAM,4BAA4B;GAChC;GACA;GACA;GACA;GACA;GACA;EACF,CAAC,CAAC,KAAK,WAAW,SAAS,QAAQ;EAGnC,MAAM,iBAAiB;EAEvB,MAAM,SAAS;GACb,gBAAgB;GAChB,oBAAoB;GACpB,QAAQ;GACR,SAAS;GACT,UAAU;GACV,OAAO;EACT;EAEA,KAAK,OAAO,QAAQ,oBAAoB,KAAK,IAAI;EACjD,KAAK,OAAO,iBAAiB;EAC7B,KAAK,OAAO,QAAQ,IAAI,GAAG,yBAAyB;EACpD,KAAK,OAAO,MAAM,KAAK,QAAQ,SAAS;EACxC,KAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,MAAM,GACxC,KAAK,OAAO,MAAM,YAAY,GAAG,CAAC;EAGpC,IAAI;EAEJ,OAAQ,KAAK,SAAS,eAAe,KAAK,OAAO,EAAE,GAAI;GACrD,QAAQ,IAAI,6BAA6B;GACzC,UAAU,YAAY,EAAE;EAC1B;EACA,UAAU,YAAY,KAAK,MAAM;EAEjC,OAAO,IAAI,SAAS,YAClB,KAAK,OAAO,iBACV,cACM;GACJ,QAAQ;EACV,GACA,EAAE,MAAM,KAAK,CACf,CACF;CACF;CAEA,cAA4B;EAE1B,KAAK,OAAO,cAAe,UAAU,IAAI,SAAS;CACpD;CAEA,cAA4B;EAE1B,KAAK,OAAO,cAAe,UAAU,OAAO,SAAS;CACvD;CAEA,MAAc,iBACZ,QACA,GAAG,MACyC;EAC5C,OAAO,IAAI,SAAS,SAAS,WAAW;GACtC,MAAM,EAAE,OAAO,UAAU,IAAI,eAAe;GAE5C,MAAM,aAAa,EAAE,WAAW;IAC9B,MAAM,MAAM;IAEZ,KAAK,QAAQ,OAAO,KAAK,KAAK,IAAI,QAAQ,KAAK,MAAM;GACvD;GAGA,KAAK,OAAO,cAAe,YACzB;IACE;IACA,MAAM;GACR,GACA,KAAK,QAAQ,QACb,CAAC,KAAK,CACR;EACF,CAAC;CACH;CAEA,sBAAoC;EAClC,IAAI,CAAC,KAAK,OAAO,OAAO,iBAAiB,WAAW,KAAK,UAAU,KAAK,IAAI,CAAC;EAC7E,KAAK,QAAQ;CACf;CAEA,MAAc,UAAU,SAAsC;EAG5D,IAAI,CAAC,WAAW,CAAC,QAAQ,QAAQ,OAAO,QAAQ,SAAS,UAAU;EAEnE,IAAI,QAAQ,KAAK,SAAS,wBAAwB,QAAQ,WAAW,KAAK,QAAQ,QAChF;EAEF,MAAM,UAAU,QAAQ,KAAK;EAC7B,MAAM,YAAY,MAAM,KAAK,cAAc,QAAQ,QAAQ,QAAQ,OAAO,QAAQ,KAAK;EACvF,MAAM,KAAK,iBAAiB,yBAAyB,SAAS;CAChE;AACF;;;ACvMA,IAAa,0BAAb,MAAoF;CAClF;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,QAMT;EACD,KAAK,QAAQ;EACb,KAAK,UAAU,OAAO;EACtB,KAAK,UAAU,OAAO;EACtB,KAAK,iBAAiB,OAAO;EAC7B,KAAK,QAAQ,OAAO,SAAS,IAAI,kBAAkB;EAGnD,IAAI,OAAO,iBACT,KAAK,kBAAkB,IAAI,OAAO,gBAAgB;GAChD,GAAG,OAAO;GAEV,OAAO,KAAK;EACd,CAAC;OAGD,KAAK,kBAAkB,IAAI,cAAc,OAAO,cAAc;CAElE;CAEA,MAAM,eAAwC;EAC5C,OAAO,eAAe,WAAW,IAAI;CACvC;AACF;AAEA,IAAa,iBAAb,MAAa,eAAe;CAC1B;CACA;CACA;CACA;CAEA,YAAY,OAAc,YAA8B,iBAA+B;EACrF,KAAK,QAAQ;EACb,KAAK,QAAQ;EACb,KAAK,aAAa;EAClB,KAAK,kBAAkB;CACzB;CAEA,aAAa,WAAW,QAAwE;EAC9F,MAAM,aAAa,MAAM,oBAAoB;GAC3C,SAAS,OAAO;GAChB,SAAS,OAAO;EAClB,CAAC;EAED,MAAM,OAAO,gBAAgB,KAAK;EAElC,OAAO,IAAI,eAAe,OAAO,OAAO,YAAY,OAAO,eAAe;CAC5E;CAEA,MAAM,kBAAkB,SAAmC;EACzD,OAAO,WAAW,KAAK,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,QAAQ,IAAI,WAAW;CAC/E;CAEA,MAAM,eAAe,SAAoD;EACvE,IAAI,SAAS;EACb,MAAM,CAAC,YAAY,kBAAkB,iBAAiB,cACpD,MAAM,uBAAuB,KAAK,OAAO,KAAK,YAAY,MAAM;EAElE,KAAK,WAAW,UAAU,UAAU;EAEpC,IAAI,eAAe,QAAQ;GACzB,MAAM,iBAAiB;GACvB,SAAS,EACP,aAAa,OAAO,YAAoB;IAKtC,OAAO,EAAE,eAAe,MAJA,gBACtB,gBACA,OACF,EACkC;GACpC,EACF;EACF;EAEA,OAAO,IAAI,yBACT,MACA,QACA,YACA,kBACA,iBACA,UACF;CACF;CAEA,MAAM,SAAkC;EACtC,OAAO;CACT;AACF;AAEA,IAAa,2BAAb,MAA2F;CACzF;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YACE,gBACA,QACA,YACA,kBACA,iBACA,YACA;EACA,KAAK,QAAQ;EACb,KAAK,QAAQ,eAAe;EAC5B,KAAK,aAAa,eAAe;EACjC,KAAK,kBAAkB,eAAe;EACtC,KAAK,SAAS;EACd,KAAK,aAAa;EAClB,KAAK,mBAAmB;EACxB,KAAK,kBAAkB;EACvB,KAAK,aAAa;EAElB,KAAK,gBAAgB,UAAU,KAAK,MAAM;CAC5C;CAEA,MAAM,SAAkC;EACtC,KAAK,WAAW,UAAU,KAAA,CAAS;EACnC,OAAO,IAAI,eAAe,KAAK,OAAO,KAAK,YAAY,KAAK,eAAe;CAC7E;CAEA,MAAM,aAA+B;EACnC,OAAO,WAAW,KAAK,YAAY,EAAE,SAAS,KAAK,iBAAiB,CAAC,CAAC,CAAC,MACpE,MAAM,EAAE,WACX;CACF;CAEA,MAAM,4BACJ,QACA,8BACkC;EAClC,MAAM,KAAK,gBAAgB,YAAY;GACrC,MAAM;GACN;GACA,eAAe,KAAK;GACpB,iBAAiB,KAAK;GACtB,YAAY,KAAK;GACjB,yBAAyB;GACzB,iCAAiC,KAAA;EACnC,CAAC;EAED,OAAO,KAAK,gBAAgB,4BAA4B;CAC1D;CAEA,MAAM,QAAqC;EACzC,IAAI,CAAE,MAAM,KAAK,WAAW,GAAI,MAAM,IAAI,MAAM,8BAA8B;EAE9E,MAAM,WAAW,MAAM,QAAQ,KAAK,UAAU;EAE9C,MAAM,KAAK,gBAAgB,YAAY;GACrC,MAAM;GACN,QAAQ,SAAS;GACjB,iCAAiC,SAAS;GAC1C,eAAe,KAAK;GACpB,YAAY,KAAK;GACjB,yBAAyB,SAAS;GAClC,iBAAiB,KAAK;EACxB,CAAC;EAED,OAAO,IAAI,mBAAmB,MAAM,QAAQ;CAC9C;AACF;AAEA,IAAa,qBAAb,MAA+F;CAC7F;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,0BAAoD,MAAgB;EAC9E,KAAK,QAAQ;EACb,KAAK,QAAQ,yBAAyB;EACtC,KAAK,aAAa,yBAAyB;EAC3C,KAAK,kBAAkB,yBAAyB;EAChD,KAAK,SAAS,yBAAyB;EACvC,KAAK,aAAa,yBAAyB;EAC3C,KAAK,mBAAmB,yBAAyB;EACjD,KAAK,kBAAkB,yBAAyB;EAChD,KAAK,aAAa,yBAAyB;EAC3C,KAAK,OAAO;CACd;CAEA,MAAM,SAAkC;EACtC,KAAK,WAAW,UAAU,KAAA,CAAS;EACnC,OAAO,IAAI,eAAe,KAAK,OAAO,KAAK,YAAY,KAAK,eAAe;CAC7E;CAEA,MAAM,kBAAkB,QAAkD;EACxE,OAAO,WAAW,KAAK,YAAY,MAAM,CAAC,CAAC,MAAM,QAAQ,IAAI,OAAO;CACtE;CAEA,MAAM,iBAAiB,IAAqC;EAC1D,MAAM,iBAAiB,KAAK,YAAY,EAAE,GAAG,CAAC;EAC9C,OAAO,EAAE,GAAG;CACd;CAEA,MAAM,kBAAkB,IAAiD;EACvE,OAAO,mBAAmB,KAAK,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,QAAQ,IAAI,EAAE;CACzE;CAEA,MAAM,gBAAgB,YAAiE;EACrF,MAAM,gBAAgB,KAAK,YAAY,UAAU;EACjD,OAAO;CACT;CAEA,MAAM,oBAAuD;EAC3D,OAAO,eAAe,KAAK,UAAU;CACvC;CAEA,MAAM,uBAA6C;EACjD,OAAO,qBAAqB,KAAK,UAAU;CAC7C;CAEA,MAAM,gBAA8C;EAClD,OAAO,cAAc,KAAK,UAAU;CACtC;CAEA,MAAM,gBAAgB,WAA0D;EAC9E,MAAMA,aAAgB,KAAK,YAAY,SAAS;EAChD,OAAO;CACT;CAEA,MAAM,+BAA+B,IAA6B;EAChE,MAAM,aAAa,MAAM,KAAK,kBAAkB,EAAE;EAElD,UAAU,YAAY,4BAA4B,GAAG,WAAW;EAEhE,MAAM,KAAK,gBAAgB,4BAA4B;EAOvD,OAAO,oBAAoB,MALH,KAAK,gBAAgB,QAC3C,aAAa,WAAW,OAAO,GAC/B,aAAa,WAAW,oBAAoB,CAC9C,CAEoC;CACtC;CAEA,MAAM,qBAAqB,IAA6B;EACtD,MAAM,aAAa,MAAM,KAAK,kBAAkB,EAAE;EAElD,UAAU,YAAY,4BAA4B,GAAG,WAAW;EAEhE,MAAM,KAAK,gBAAgB,4BAA4B;EAOvD,OAAO,WAAW,MALM,KAAK,gBAAgB,QAC3C,aAAa,WAAW,OAAO,GAC/B,aAAa,WAAW,oBAAoB,CAC9C,CAE2B;CAC7B;CAEA,MAAM,kBAAkB,QAA0C;EAChE,OAAO,WAAW,KAAK,YAAY,MAAM,CAAC,CAAC,MAAM,QAAQ,IAAI,OAAO;CACtE;CAEA,MAAM,UACJ,QACsD;EACtD,OAAO;GACL,QAAQ,MAAM,UAAU,KAAK,YAAY,MAAM;GAC/C,YAAY,MAAM,KAAK,eAAe;EACxC;CACF;CAEA,MAAM,WAAW,QAAqD;EACpE,MAAM,WAAW,KAAK,YAAY,MAAM;EACxC,OAAO;CACT;CAEA,MAAM,iBAAkC;EACtC,OAAO,4BAA4B,KAAK,YAAY,EAClD,SAAS,KACX,CAAC,CAAC,CAAC,MAAM,QAAQ,IAAI,KAAK;CAC5B;CAEA,MAAM,oBAAoB,IAAiD;EACzE,OAAO,oBAAoB,KAAK,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,QAAQ,IAAI,EAAE;CAC1E;CAEA,MAAM,kBAAkB,IAAqC;EAC3D,MAAM,kBAAkB,KAAK,YAAY,EAAE,GAAG,CAAC;EAC/C,OAAO,EAAE,GAAG;CACd;CAEA,MAAM,UAAU,QAAiD;EAC/D,MAAM,UAAU,KAAK,YAAY,MAAM;EAGvC,IAAI,KAAK,KAAK,8BAA8B,OAAO;GACjD,QAAQ,IAAI,iDAAiD;GAC7D,OAAO;EACT;EAEA,IAAI,CAAC,OAAO,aACV,MAAM,IAAI,MAAM,uCAAuC;EAGzD,MAAM,gBAAgB,MAAM,KAAK,gBAAgB,wBAC/C,OAAO,SACP,OAAO,cAAc,KAAA,GACrB,OAAO,WACT;EAEA,MAAM,YAAY,MAAM,KAAK,gBAAgB,cAC3C,cAAc,QACd,cAAc,OACd,cAAc,KAChB;EAEA,MAAM,SAAS,MAAM,KAAK,gBAAgB,sBACxC,KAAK,KAAK,IACV,cAAc,OACd,SACF;EAEA,IAAI,WAAW,WACb,QAAQ,MAAM,gCAAgC,QAAQ;EAGxD,OAAO;CACT;CAEA,MAAM,aAA0C;EAC9C,OAAO,WAAW,KAAK,UAAU;CACnC;CAEA,MAAM,aAAa,IAAqC;EAEtD,MAAM,UAAS,MADO,KAAK,WAAW,EAAA,CACf,MAAM,WAAW,OAAO,OAAO,EAAE;EACxD,IAAI,CAAC,QACH,MAAM,IAAI,MAAM,kBAAkB,GAAG,WAAW;EAGlD,MAAM,aAAa,KAAK,YAAY,EAAE,GAAG,CAAC;EAG1C,IAAI,KAAK,KAAK,8BAA8B,OAAO;GACjD,QAAQ,IAAI,iDAAiD;GAC7D,OAAO,EAAE,GAAG;EACd;EAEA,MAAM,gBAAgB,MAAM,KAAK,gBAAgB,2BAC/C,OAAO,SACP,OAAO,cAAc,KAAA,GACrB,OAAO,WACT;EACA,MAAM,YAAY,MAAM,KAAK,gBAAgB,cAC3C,cAAc,QACd,cAAc,OACd,cAAc,KAChB;EACA,MAAM,SAAS,MAAM,KAAK,gBAAgB,2BACxC,OAAO,SACP,cAAc,OACd,SACF;EACA,IAAI,WAAW,WACb,QAAQ,MAAM,gCAAgC,QAAQ;EAGxD,OAAO,EAAE,GAAG;CACd;CAEA,MAAM,cAAc,KAAkC;EACpD,KAAK,MAAM,MAAM,KACf,MAAM,KAAK,aAAa,EAAE;EAG5B,OAAO;CACT;CAEA,MAAM,kBAAkB,cAgBc;EAOpC,IAAI,UALwB,MADF,KAAK,kBAAkB,EAAA,CACT,QACrC,SAAS,CAAC,KAAK,eAAe,CAAC,CAAC,KAAK,YAIT,CAAC,CAAC,QAAQ,SAAS;GAChD,OAAO,aAAa,iBAAiB,MAClC,WAAW,OAAO,kBAAkB,KAAK,sBAC5C;EACF,CAAC;EAED,MAAM,0BAA0B,aAAa;EAC7C,MAAM,gCAAgC,aAAa;EACnD,MAAM,sBAAsB,aAAa;EAEzC,IAAI,+BACF,SAAS,OAAO,QAAQ,eAAe;GACrC,IAAI;GAEJ,IAAI;IACF,cAAc,KAAK,MAAM,WAAW,YAAY;GAClD,SAAS,GAAG;IACV,MAAM,IAAI,MAAM,cAAc,WAAW,GAAG,4BAA4B;GAC1E;GAEA,OAAO,mBACL,8BAA8B,WAC9B,8BAA8B,gBAC9B,YAAY,KACd;EACF,CAAC;EAGH,IACE,4BACC,OAAO,KAAK,wBAAwB,IAAI,CAAC,CAAC,SAAS,KAClD,OAAO,KAAK,wBAAwB,IAAI,CAAC,CAAC,SAAS,IAErD,SAAS,OAAO,QAAQ,eAAe;GACrC,IAAI;GAEJ,IAAI;IACF,cAAc,KAAK,MAAM,WAAW,YAAY;GAClD,SAAS,GAAG;IACV,MAAM,IAAI,MAAM,cAAc,WAAW,GAAG,4BAA4B;GAC1E;GAEA,OAAO,aACL,aACA,wBAAwB,MACxB,wBAAwB,IAC1B;EACF,CAAC;EAKH,IACE,wBACC,OAAO,KAAK,oBAAoB,IAAI,CAAC,CAAC,SAAS,KAC9C,OAAO,KAAK,oBAAoB,IAAI,CAAC,CAAC,SAAS,IACjD;GACA,MAAM,kBAAkB,MAAM,QAAQ,IACpC,OAAO,KAAK,eAAe,KAAK,kBAAkB,WAAW,EAAE,CAAC,CAClE;GAGA,UACE,gBAAgB,OAAO,SAAS,SAAS,KAAA,CAAS,GAClD,gFACF;GAEA,MAAM,UAAU,MAAM,KAAK,gBAAgB,kBACzC,iBACA,mBACF;GAEA,SAAS,OAAO,QAAQ,eACtB,QAAQ,MAAM,sBAAsB,kBAAkB,OAAO,WAAW,EAAE,CAC5E;EACF;EAEA,OAAO;CACT;CAEA,MAAM,mBACJ,cACA,EACE,6BACA,uBACA,cAAc,KAMe;EAC/B,MAAM,aAAa,MAAM,KAAK,kBAAkB,YAAY;EAC5D,MAAM,cAAc,MAAM,KAAK,+BAA+B,YAAY;EAE1E,UAAU,YAAY,4BAA4B,aAAa,WAAW;EAE1E,MAAM,mBAAmB,WACvB,MAAM,KAAK,gBAAgB,QACzB,aAAa,WAAW,OAAO,GAC/B,aAAa,WAAW,oBAAoB,CAC9C,CACF;EAEA,MAAM,KAAK,gBAAgB,4BAA4B;EAEvD,MAAM,EAAE,SAAS,uBAAuB,MAAM,KAAK,gBAAgB,QACjE,WAAW,gBAAgB,GAC3B,aAAa,2BAA2B,CAC1C;EAEA,MAAM,uBAA6C;GACjD,GAAG;GACH,GAAG,8BACD,WAAW,SACX,IACA,aAAa,OAAO,GACpB,aAAa,kBAAkB,CACjC;GACA,wBAAwB,WAAW;GACnC,IAAI,OAAO,WAAW;GACtB,2BAA2B;GAC3B,cAAc;GACd,cAAc;EAChB;EAEA,MAAM,KAAK,gBAAgB,oBAAoB;EAE/C,OAAO;CACT;AACF;AAcA,SAAgB,iBAAiB,QAGU;CACzC,OAAO,IAAI,wBAAwB;EACjC,SAAS,OAAO;EAChB,gBAAgB,OAAO;CACzB,CAAC;AACH"}

package/package.json

@@ -1,10 +1,13 @@
 {
   "name": "@idos-network/client",
-  "version": "1.2.0",
+  "version": "1.5.0",
   "description": "idOS Client JavaScript SDK for browser environments",
   "homepage": "https://idos.network",
   "license": "MIT",
-  "repository": "github:idos-network/idos-sdk-js",
+  "repository": {
+    "type": "git",
+    "url": "github:idos-network/idos-sdk-js"
+  },
   "files": [
     "dist/**/*",
     "src/**/*"
@@ -24,15 +27,15 @@
     "access": "public"
   },
   "dependencies": {
-    "@idos-network/kwil-js": "0.1.3",
+    "@idos-network/kwil-js": "0.1.5",
     "tiny-invariant": "^1.3.3",
-    "@idos-network/credentials": "1.2.0",
-    "@idos-network/kwil-infra": "1.2.0",
-    "@idos-network/utils": "1.2.0",
-    "@idos-network/enclave": "1.2.0"
+    "@idos-network/credentials": "1.5.0",
+    "@idos-network/enclave": "1.5.0",
+    "@idos-network/kwil-infra": "1.5.0",
+    "@idos-network/utils": "1.5.0"
   },
   "devDependencies": {
-    "tsdown": "^0.22.0"
+    "tsdown": "^0.22.14"
   },
   "engines": {
     "node": ">=22.19.0"