@idos-network/issuer 3.1.0 → 5.0.0

package/dist/index.d.mts

@@ -8,10 +8,7 @@ import "@idos-network/utils/blob-gateway";
 type DelegatedWriteGrantParams = DelegatedWriteGrantBaseParams & {
   signature: string;
 };
-type CredentialByDelegatedWriteGrantBaseParams = Omit<BuildPreliminaryIDOSCredentialArgs, "issuerSigningSecretKey" | "contentUri"> & {
-  originalContentUri?: string;
-  copyContentUri?: string;
-};
+type CredentialByDelegatedWriteGrantBaseParams = Omit<BuildPreliminaryIDOSCredentialArgs, "issuerSigningSecretKey" | "broaderMessageFor" | "ukycStorageId">;
 //#endregion
 //#region src/services/user.service.d.ts
 type CreateProfileReqParams = Omit<idOSUser$1, "id"> & {

package/dist/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../src/services/credential.service.ts","../src/services/user.service.ts","../src/index.ts"],"mappings":";;;;;;;KA2BY,4BAA4B;EACtC;;KAGU,4CAA4C,KACtD;EAGA;EACA;;;;KCtBU,yBAAyB,KAAK;EACxC;;KAGU,wBAAwB,KAAK;EACvC;;KAGU,wBAAwB,KAAK;EACvC;;;;KCYG;EACH;EACA;EACA;EACA,gBAAgB;;qBAGL;;SAIE,KAAK,QAAQ,qBAAqB,QAAQ;UAqB/C;EAMR,WAAiB,sBAAsB;EAIvC,kBAAwB,QAAQ,yBAAyB,QAAQ;EAIjE,uBAA6B,QAAQ,wBAAwB,QAAQ;EAIrE,iBAAuB,QAAQ,wBAAwB;EAIvD,WACE,MAAM,wBACN,QAAQ,wBACP,SAAS,UAAU;EAItB,QAAc,aAAa,QAAQ;EAInC,kCAAwC,QAAQ,0BAA0B;EAI1E,sCACE,kBAAkB,2CAClB,qBAAqB,2BACrB,6BAA6B,aAC5B;IACD,oBAAoB,KAAK;IACzB,gBAAgB,KAAK;;EASvB,uBACE,uBACA,sBACC,QAAQ;EAIX,6BAAmC,sBAAsB;EAIzD,oBAA0B,aAAa,QAAQ"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../src/services/credential.service.ts","../src/services/user.service.ts","../src/index.ts"],"mappings":";;;;;;;KA4BY,4BAA4B;EACtC;;KAIU,4CAA4C,KACtD;;;KCpBU,yBAAyB,KAAK;EACxC;;KAGU,wBAAwB,KAAK;EACvC;;KAGU,wBAAwB,KAAK;EACvC;;;;KCYG;EACH;EACA;EACA;EACA,gBAAgB;;qBAGL;;SAIE,KAAK,QAAQ,qBAAqB,QAAQ;UAqB/C;EAMR,WAAiB,sBAAsB;EAIvC,kBAAwB,QAAQ,yBAAyB,QAAQ;EAIjE,uBAA6B,QAAQ,wBAAwB,QAAQ;EAIrE,iBAAuB,QAAQ,wBAAwB;EAIvD,WACE,MAAM,wBACN,QAAQ,wBACP,SAAS,UAAU;EAItB,QAAc,aAAa,QAAQ;EAInC,kCAAwC,QAAQ,0BAA0B;EAI1E,sCACE,kBAAkB,2CAClB,qBAAqB,2BACrB,6BAA6B,aAC5B;IACD,oBAAoB,KAAK;IACzB,gBAAgB,KAAK;;EASvB,uBACE,uBACA,sBACC,QAAQ;EAIX,6BAAmC,sBAAsB;EAIzD,oBAA0B,aAAa,QAAQ"}

package/dist/index.mjs

@@ -1,2 +1,2 @@
-import{createKgwAuthenticatedBlobGateway as e,createNodeKwilClient as t,createServerKwilSigner as n}from"@idos-network/kwil-infra";import{buildPreliminaryIDOSCredential as r,mapPreliminaryToIDOSCredential as i}from"@idos-network/credentials/utils";import{addUserAsInserter as a,addWalletMessage as o,createPreliminaryCredentialsByDwg as s,dwgMessage as c,editPublicNotesAsIssuer as l,getCredentialShared as u,getSiblingCredentialId as d,getUserAsInserter as f,hasProfile as p,toDelegatedWriteGrantBaseParams as m,upsertWalletAsInserter as h}from"@idos-network/kwil-infra/actions";import{hexEncodeSha256Hash as g}from"@idos-network/utils/codecs";var _=process.env.NODE_ENV===`production`,v=`Invariant failed`;function y(e,t){if(!e){if(_)throw Error(v);var n=typeof t==`function`?t():t,r=n?`${v}: ${n}`:v;throw Error(r)}}var b=class{#e;#t;#n;constructor(e,t,n){this.#e=e,this.#t=t,this.#n=n}async requestDelegatedWriteGrantMessage(e){return c(this.#e,e).then(e=>e.message)}async createCredentialByDelegatedWriteGrant(e,t,n){let{originalContentUri:a,copyContentUri:o,...c}=e,l={...await r({...c,contentUri:a,issuerSigningSecretKey:this.#t.secretKey}),id:crypto.randomUUID()},u=g(e.plaintextContent),d={...await r({...c,contentUri:o,publicNotes:``,recipientEncryptionPublicKey:n,issuerSigningSecretKey:this.#t.secretKey}),id:crypto.randomUUID()};y(l.contentUri!==d.contentUri,`Original and copy credentials must use distinct content URIs`);let f=crypto.randomUUID(),p={request_id:f,issuer_auth_public_key:l.issuerAuthPublicKey,original_encryptor_public_key:l.encryptorPublicKey,original_id:l.id,original_content_uri:l.contentUri,original_content_size:l.contentSize,original_public_notes:l.publicNotes,original_public_notes_signature:l.publicNotesSignature,original_broader_signature:l.broaderSignature,copy_encryptor_public_key:d.encryptorPublicKey,copy_id:d.id,copy_content_uri:d.contentUri,copy_content_size:d.contentSize,copy_public_notes_signature:d.publicNotesSignature,copy_broader_signature:d.broaderSignature,content_hash:u,dwg_owner:t.ownerWalletIdentifier,dwg_grantee:t.consumerWalletIdentifier,dwg_issuer_public_key:t.issuerPublicKey,dwg_id:t.id,dwg_access_grant_timelock:t.accessGrantTimelock,dwg_not_before:t.notUsableBefore,dwg_not_after:t.notUsableAfter,dwg_signature:t.signature};return await s(this.#e,p),await this.#n.uploadCredentialBlobs({requestId:f,original:l.encryptedContent,copy:d.encryptedContent}),{originalCredential:i(l),copyCredential:i(d)}}async editCredentialAsIssuer(e,t){let n={public_notes_id:e,public_notes:t};return await l(this.#e,n),n}async getCredentialIdByContentHash(e){let t=await d(this.#e,{content_hash:e}).then(e=>e.id);return y(t,"Required `idOSCredential` id not found"),t}async getCredentialShared(e){return await u(this.#e,{id:e}).then(e=>e[0])??null}},x=class{#e;constructor(e){this.#e=e}#t(e){return e.id||=crypto.randomUUID(),e}async hasProfile(e){return p(this.#e,{address:e}).then(e=>e.has_profile)}async createUserProfile(e){let t=this.#t(e);return await a(this.#e,t),t}async upsertWalletAsInserter(e){let t=this.#t(e);return await h(this.#e,t),t}async addWalletMessage(e){return(await o(this.#e,e)).message}async getUser(e){return f(this.#e,this.#t(e))}async createUser(e,t){let n=e.id??crypto.randomUUID(),r=t.id??crypto.randomUUID(),i={...e,id:n},a=await this.createUserProfile(i),o={...t,user_id:n,id:r};return[a,await this.upsertWalletAsInserter(o)]}},S=class r{#e;#t;static async init(i){let a=await t({nodeUrl:i.nodeUrl,chainId:i.chainId}),[o]=await n(i.signingKeyPair);a.setSigner(o);let s=e({url:i.blobGatewayUrl??i.nodeUrl,kwilClient:a,signer:o}),c=new b(a,i.signingKeyPair,s),l=new x(a);return new r(c,l)}constructor(e,t){this.#e=e,this.#t=t}async hasProfile(e){return this.#t.hasProfile(e)}async createUserProfile(e){return this.#t.createUserProfile(e)}async upsertWalletAsInserter(e){return this.#t.upsertWalletAsInserter(e)}async addWalletMessage(e){return this.#t.addWalletMessage(e)}async createUser(e,t){return this.#t.createUser(e,t)}async getUser(e){return this.#t.getUser({id:e})}async requestDelegatedWriteGrantMessage(e){return this.#e.requestDelegatedWriteGrantMessage(e)}async createCredentialByDelegatedWriteGrant(e,t,n){return this.#e.createCredentialByDelegatedWriteGrant(e,t,n)}async editCredentialAsIssuer(e,t){return this.#e.editCredentialAsIssuer(e,t)}async getCredentialIdByContentHash(e){return this.#e.getCredentialIdByContentHash(e)}async getCredentialShared(e){return this.#e.getCredentialShared(e)}};export{S as idOSIssuer,m as toDelegatedWriteGrantBaseParams};
+import{createKgwAuthenticatedBlobGateway as e,createNodeKwilClient as t,createServerKwilSigner as n}from"@idos-network/kwil-infra";import{buildPreliminaryIDOSCredential as r,mapPreliminaryToIDOSCredential as i}from"@idos-network/credentials/utils";import{addUserAsInserter as a,addWalletMessage as o,createPreliminaryCredentialsByDwg as s,credentialBroaderMessage as c,dwgMessage as l,editPublicNotesAsIssuer as u,getCredentialShared as d,getSiblingCredentialId as f,getUserAsInserter as p,hasProfile as m,toDelegatedWriteGrantBaseParams as h,upsertWalletAsInserter as g}from"@idos-network/kwil-infra/actions";import{hexEncodeSha256Hash as _}from"@idos-network/utils/codecs";var v=process.env.NODE_ENV===`production`,y=`Invariant failed`;function b(e,t){if(!e){if(v)throw Error(y);var n=typeof t==`function`?t():t,r=n?`${y}: ${n}`:y;throw Error(r)}}var x=class{#e;#t;#n;constructor(e,t,n){this.#e=e,this.#t=t,this.#n=n}async requestDelegatedWriteGrantMessage(e){return l(this.#e,e).then(e=>{if(!e)throw Error(`dwg_message returned no rows`);return e.message})}async createCredentialByDelegatedWriteGrant(e,t,n){let a=(e,n)=>c(this.#e,{public_notes_signature:e,content_uri:n,recipient_wallet:t.ownerWalletIdentifier}).then(e=>e.message),o={...await r({...e,broaderMessageFor:a,issuerSigningSecretKey:this.#t.secretKey}),id:crypto.randomUUID()},l=_(e.plaintextContent),u={...await r({...e,publicNotes:``,recipientEncryptionPublicKey:n,broaderMessageFor:a,issuerSigningSecretKey:this.#t.secretKey}),id:crypto.randomUUID()};b(o.contentUri!==u.contentUri,`Original and copy credentials must use distinct content URIs`);let d=crypto.randomUUID(),f={request_id:d,issuer_auth_public_key:o.issuerAuthPublicKey,original_encryptor_public_key:o.encryptorPublicKey,original_id:o.id,original_content_uri:o.contentUri,original_content_size:o.contentSize,original_public_notes:o.publicNotes,original_public_notes_signature:o.publicNotesSignature,original_broader_signature:o.broaderSignature,copy_encryptor_public_key:u.encryptorPublicKey,copy_id:u.id,copy_content_uri:u.contentUri,copy_content_size:u.contentSize,copy_public_notes_signature:u.publicNotesSignature,copy_broader_signature:u.broaderSignature,content_hash:l,dwg_owner:t.ownerWalletIdentifier,dwg_grantee:t.consumerWalletIdentifier,dwg_issuer_public_key:t.issuerPublicKey,dwg_id:t.id,dwg_access_grant_timelock:t.accessGrantTimelock,dwg_not_before:t.notUsableBefore,dwg_not_after:t.notUsableAfter,dwg_signature:t.signature};return await s(this.#e,f),await this.#n.uploadCredentialBlobs({requestId:d,credentialIds:[o.id,u.id],original:o.encryptedContent,copy:u.encryptedContent}),{originalCredential:i(o),copyCredential:i(u)}}async editCredentialAsIssuer(e,t){let n={public_notes_id:e,public_notes:t};return await u(this.#e,n),n}async getCredentialIdByContentHash(e){let t=await f(this.#e,{content_hash:e}).then(e=>e?.id);return b(t,"Required `idOSCredential` id not found"),t}async getCredentialShared(e){return await d(this.#e,{id:e}).then(e=>e[0])??null}},S=class{#e;constructor(e){this.#e=e}#t(e){return e.id||=crypto.randomUUID(),e}async hasProfile(e){return m(this.#e,{address:e}).then(e=>{if(!e)throw Error(`has_profile returned no rows`);return e.has_profile})}async createUserProfile(e){let t=this.#t(e);return await a(this.#e,t),t}async upsertWalletAsInserter(e){let t=this.#t(e);return await g(this.#e,t),t}async addWalletMessage(e){return(await o(this.#e,e)).message}async getUser(e){let t=await p(this.#e,this.#t(e));if(!t)throw Error(`get_user_as_inserter returned no rows`);return t}async createUser(e,t){let n=e.id??crypto.randomUUID(),r=t.id??crypto.randomUUID(),i={...e,id:n},a=await this.createUserProfile(i),o={...t,user_id:n,id:r};return[a,await this.upsertWalletAsInserter(o)]}},C=class r{#e;#t;static async init(i){let a=await t({nodeUrl:i.nodeUrl,chainId:i.chainId}),[o]=await n(i.signingKeyPair);a.setSigner(o);let s=e({url:i.blobGatewayUrl??i.nodeUrl,kwilClient:a,signer:o}),c=new x(a,i.signingKeyPair,s),l=new S(a);return new r(c,l)}constructor(e,t){this.#e=e,this.#t=t}async hasProfile(e){return this.#t.hasProfile(e)}async createUserProfile(e){return this.#t.createUserProfile(e)}async upsertWalletAsInserter(e){return this.#t.upsertWalletAsInserter(e)}async addWalletMessage(e){return this.#t.addWalletMessage(e)}async createUser(e,t){return this.#t.createUser(e,t)}async getUser(e){return this.#t.getUser({id:e})}async requestDelegatedWriteGrantMessage(e){return this.#e.requestDelegatedWriteGrantMessage(e)}async createCredentialByDelegatedWriteGrant(e,t,n){return this.#e.createCredentialByDelegatedWriteGrant(e,t,n)}async editCredentialAsIssuer(e,t){return this.#e.editCredentialAsIssuer(e,t)}async getCredentialIdByContentHash(e){return this.#e.getCredentialIdByContentHash(e)}async getCredentialShared(e){return this.#e.getCredentialShared(e)}};export{C as idOSIssuer,h as toDelegatedWriteGrantBaseParams};
 //# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":["_hasProfile","_upsertWalletAsInserter","_addWalletMessage"],"sources":["../../../node_modules/.pnpm/tiny-invariant@1.3.3/node_modules/tiny-invariant/dist/esm/tiny-invariant.js","../src/services/credential.service.ts","../src/services/user.service.ts","../src/index.ts"],"sourcesContent":["var isProduction = process.env.NODE_ENV === 'production';\nvar prefix = 'Invariant failed';\nfunction invariant(condition, message) {\n    if (condition) {\n        return;\n    }\n    if (isProduction) {\n        throw new Error(prefix);\n    }\n    var provided = typeof message === 'function' ? message() : message;\n    var value = provided ? \"\".concat(prefix, \": \").concat(provided) : prefix;\n    throw new Error(value);\n}\n\nexport { invariant as default };\n","import type { idOSCredential, idOSCredentialRecord } from \"@idos-network/credentials/types\";\nimport type { KwilActionClient } from \"@idos-network/kwil-infra\";\n\nimport {\n  buildPreliminaryIDOSCredential,\n  BuildPreliminaryIDOSCredentialArgs,\n  mapPreliminaryToIDOSCredential,\n  PreliminaryIDOSCredential,\n} from \"@idos-network/credentials/utils\";\nimport {\n  type CreatePreliminaryCredentialsByDwgInput,\n  createPreliminaryCredentialsByDwg,\n  dwgMessage,\n  type EditPublicNotesAsIssuerInput,\n  editPublicNotesAsIssuer,\n  getCredentialShared,\n  getSiblingCredentialId,\n  type idOSDelegatedWriteGrant,\n  type DelegatedWriteGrantBaseParams,\n} from \"@idos-network/kwil-infra/actions\";\nimport { BlobGateway } from \"@idos-network/utils/blob-gateway\";\nimport { hexEncodeSha256Hash } from \"@idos-network/utils/codecs\";\nimport invariant from \"tiny-invariant\";\nimport nacl from \"tweetnacl\";\n\nexport type { DelegatedWriteGrantBaseParams };\n\nexport type DelegatedWriteGrantParams = DelegatedWriteGrantBaseParams & {\n  signature: string;\n};\n\nexport type CredentialByDelegatedWriteGrantBaseParams = Omit<\n  BuildPreliminaryIDOSCredentialArgs,\n  \"issuerSigningSecretKey\" | \"contentUri\"\n> & {\n  originalContentUri?: string;\n  copyContentUri?: string;\n};\n\nexport class CredentialService {\n  readonly #kwilClient: KwilActionClient;\n  readonly #signingKeyPair: nacl.SignKeyPair;\n  readonly #blobGateway: BlobGateway;\n\n  constructor(\n    kwilClient: KwilActionClient,\n    signingKeyPair: nacl.SignKeyPair,\n    blobGateway: BlobGateway,\n  ) {\n    this.#kwilClient = kwilClient;\n    this.#signingKeyPair = signingKeyPair;\n    this.#blobGateway = blobGateway;\n  }\n\n  async requestDelegatedWriteGrantMessage(params: idOSDelegatedWriteGrant): Promise<string> {\n    return dwgMessage(this.#kwilClient, params).then((res) => res.message);\n  }\n\n  async createCredentialByDelegatedWriteGrant(\n    credentialParams: CredentialByDelegatedWriteGrantBaseParams,\n    delegatedWriteGrant: DelegatedWriteGrantParams,\n    consumerEncryptionPublicKey: Uint8Array,\n  ): Promise<{\n    originalCredential: Omit<idOSCredential, \"user_id\">;\n    copyCredential: Omit<idOSCredential, \"user_id\">;\n  }> {\n    const { originalContentUri, copyContentUri, ...sharedCredentialParams } = credentialParams;\n    const originalCredential: PreliminaryIDOSCredential = {\n      ...(await buildPreliminaryIDOSCredential({\n        ...sharedCredentialParams,\n        contentUri: originalContentUri,\n        issuerSigningSecretKey: this.#signingKeyPair.secretKey,\n      })),\n      id: crypto.randomUUID(),\n    };\n\n    const contentHash = hexEncodeSha256Hash(credentialParams.plaintextContent);\n\n    const copyCredential: PreliminaryIDOSCredential = {\n      ...(await buildPreliminaryIDOSCredential({\n        ...sharedCredentialParams,\n        contentUri: copyContentUri,\n        publicNotes: \"\",\n        recipientEncryptionPublicKey: consumerEncryptionPublicKey,\n        issuerSigningSecretKey: this.#signingKeyPair.secretKey,\n      })),\n      id: crypto.randomUUID(),\n    };\n\n    invariant(\n      originalCredential.contentUri !== copyCredential.contentUri,\n      \"Original and copy credentials must use distinct content URIs\",\n    );\n\n    const requestId = crypto.randomUUID();\n    const payload: CreatePreliminaryCredentialsByDwgInput = {\n      request_id: requestId,\n      issuer_auth_public_key: originalCredential.issuerAuthPublicKey,\n      original_encryptor_public_key: originalCredential.encryptorPublicKey,\n      original_id: originalCredential.id,\n      original_content_uri: originalCredential.contentUri,\n      original_content_size: originalCredential.contentSize,\n      original_public_notes: originalCredential.publicNotes,\n      original_public_notes_signature: originalCredential.publicNotesSignature,\n      original_broader_signature: originalCredential.broaderSignature,\n      copy_encryptor_public_key: copyCredential.encryptorPublicKey,\n      copy_id: copyCredential.id,\n      copy_content_uri: copyCredential.contentUri,\n      copy_content_size: copyCredential.contentSize,\n      copy_public_notes_signature: copyCredential.publicNotesSignature,\n      copy_broader_signature: copyCredential.broaderSignature,\n      content_hash: contentHash,\n      dwg_owner: delegatedWriteGrant.ownerWalletIdentifier,\n      dwg_grantee: delegatedWriteGrant.consumerWalletIdentifier,\n      dwg_issuer_public_key: delegatedWriteGrant.issuerPublicKey,\n      dwg_id: delegatedWriteGrant.id,\n      dwg_access_grant_timelock: delegatedWriteGrant.accessGrantTimelock,\n      dwg_not_before: delegatedWriteGrant.notUsableBefore,\n      dwg_not_after: delegatedWriteGrant.notUsableAfter,\n      dwg_signature: delegatedWriteGrant.signature,\n    };\n\n    await createPreliminaryCredentialsByDwg(this.#kwilClient, payload);\n\n    await this.#blobGateway.uploadCredentialBlobs({\n      requestId,\n      original: originalCredential.encryptedContent,\n      copy: copyCredential.encryptedContent,\n    });\n\n    return {\n      originalCredential: mapPreliminaryToIDOSCredential(originalCredential),\n      copyCredential: mapPreliminaryToIDOSCredential(copyCredential),\n    };\n  }\n\n  async editCredentialAsIssuer(\n    publicNotesId: string,\n    publicNotes: string,\n  ): Promise<EditPublicNotesAsIssuerInput | null> {\n    const payload = {\n      public_notes_id: publicNotesId,\n      public_notes: publicNotes,\n    };\n\n    await editPublicNotesAsIssuer(this.#kwilClient, payload);\n\n    return payload;\n  }\n\n  async getCredentialIdByContentHash(contentHash: string): Promise<string | null> {\n    const id = await getSiblingCredentialId(this.#kwilClient, { content_hash: contentHash }).then(\n      (res) => res.id,\n    );\n\n    invariant(id, \"Required `idOSCredential` id not found\");\n\n    return id;\n  }\n\n  async getCredentialShared(id: string): Promise<idOSCredentialRecord | null> {\n    const result = await getCredentialShared(this.#kwilClient, { id }).then((res) => res[0]);\n\n    return result ?? null;\n  }\n}\n","import type { KwilActionClient } from \"@idos-network/kwil-infra\";\n\nimport {\n  hasProfile as _hasProfile,\n  upsertWalletAsInserter as _upsertWalletAsInserter,\n  addUserAsInserter,\n  addWalletMessage as _addWalletMessage,\n  type AddWalletMessageInput,\n  type GetUserAsInserterInput,\n  getUserAsInserter,\n  type idOSUser,\n  type idOSWallet,\n} from \"@idos-network/kwil-infra/actions\";\n\nexport type CreateProfileReqParams = Omit<idOSUser, \"id\"> & {\n  id?: string;\n};\n\nexport type UpsertWalletReqParams = Omit<idOSWallet, \"id\"> & {\n  id?: string;\n};\n\nexport type CreateWalletReqParams = Omit<UpsertWalletReqParams, \"user_id\"> & {\n  id?: string;\n};\n\nexport class UserService {\n  readonly #kwilClient: KwilActionClient;\n\n  constructor(kwilClient: KwilActionClient) {\n    this.#kwilClient = kwilClient;\n  }\n\n  #ensureEntityId<T extends { id?: string }>(entity: T): T & { id: string } {\n    if (!entity.id) {\n      (entity as T & { id: string }).id = crypto.randomUUID();\n    }\n    return entity as T & { id: string };\n  }\n\n  async hasProfile(address: string): Promise<boolean> {\n    return _hasProfile(this.#kwilClient, { address }).then((res) => res.has_profile);\n  }\n\n  async createUserProfile(params: CreateProfileReqParams): Promise<idOSUser> {\n    const payload = this.#ensureEntityId(params);\n    await addUserAsInserter(this.#kwilClient, payload);\n    return payload;\n  }\n\n  async upsertWalletAsInserter(params: UpsertWalletReqParams): Promise<idOSWallet> {\n    const payload = this.#ensureEntityId(params);\n    await _upsertWalletAsInserter(this.#kwilClient, payload);\n    return payload;\n  }\n\n  async addWalletMessage(params: AddWalletMessageInput): Promise<string> {\n    const result = await _addWalletMessage(this.#kwilClient, params);\n    return result.message;\n  }\n\n  /// Useful to understand if a user id already exists.\n  async getUser(params: GetUserAsInserterInput): Promise<idOSUser> {\n    return getUserAsInserter(this.#kwilClient, this.#ensureEntityId(params));\n  }\n\n  async createUser(\n    user: CreateProfileReqParams,\n    wallet: CreateWalletReqParams,\n  ): Promise<[idOSUser, idOSWallet]> {\n    const user_id = user.id ?? crypto.randomUUID();\n    const wallet_id = wallet.id ?? crypto.randomUUID();\n\n    const userReqParams = {\n      ...user,\n      id: user_id,\n    };\n\n    const userResponse = await this.createUserProfile(userReqParams);\n\n    const walletReqParams = {\n      ...wallet,\n      user_id,\n      id: wallet_id,\n    };\n\n    const walletResponse = await this.upsertWalletAsInserter(walletReqParams);\n\n    return [userResponse, walletResponse];\n  }\n}\n","import type {\n  AvailableIssuerType,\n  idOSCredential,\n  idOSCredentialRecord,\n} from \"@idos-network/credentials/types\";\nimport type {\n  AddWalletMessageInput,\n  EditPublicNotesAsIssuerInput,\n  idOSDelegatedWriteGrant,\n  idOSGrant,\n  idOSUser,\n  idOSUserAttribute,\n  idOSWallet,\n} from \"@idos-network/kwil-infra/actions\";\nimport type { SignKeyPair } from \"tweetnacl\";\n\nimport {\n  createKgwAuthenticatedBlobGateway,\n  createNodeKwilClient,\n  createServerKwilSigner,\n} from \"@idos-network/kwil-infra\";\n\nimport {\n  CredentialService,\n  type CredentialByDelegatedWriteGrantBaseParams,\n  type DelegatedWriteGrantBaseParams,\n  type DelegatedWriteGrantParams,\n} from \"./services/credential.service\";\nimport {\n  type CreateProfileReqParams,\n  type CreateWalletReqParams,\n  type UpsertWalletReqParams,\n  UserService,\n} from \"./services/user.service\";\n\ntype CreateIssuerParams = {\n  chainId?: string;\n  nodeUrl: string;\n  blobGatewayUrl?: string;\n  signingKeyPair: SignKeyPair;\n};\n\nexport class idOSIssuer {\n  readonly #credentialService: CredentialService;\n  readonly #userService: UserService;\n\n  static async init(params: CreateIssuerParams): Promise<idOSIssuer> {\n    const kwilClient = await createNodeKwilClient({\n      nodeUrl: params.nodeUrl,\n      chainId: params.chainId,\n    });\n\n    const [signer] = await createServerKwilSigner(params.signingKeyPair);\n    kwilClient.setSigner(signer);\n\n    const blobGateway = createKgwAuthenticatedBlobGateway({\n      url: params.blobGatewayUrl ?? params.nodeUrl,\n      kwilClient,\n      signer,\n    });\n\n    const credentialService = new CredentialService(kwilClient, params.signingKeyPair, blobGateway);\n    const userService = new UserService(kwilClient);\n\n    return new idOSIssuer(credentialService, userService);\n  }\n\n  private constructor(credentialService: CredentialService, userService: UserService) {\n    this.#credentialService = credentialService;\n    this.#userService = userService;\n  }\n\n  // User Service facade methods\n  async hasProfile(userAddress: string): Promise<boolean> {\n    return this.#userService.hasProfile(userAddress);\n  }\n\n  async createUserProfile(params: CreateProfileReqParams): Promise<idOSUser> {\n    return this.#userService.createUserProfile(params);\n  }\n\n  async upsertWalletAsInserter(params: UpsertWalletReqParams): Promise<idOSWallet> {\n    return this.#userService.upsertWalletAsInserter(params);\n  }\n\n  async addWalletMessage(params: AddWalletMessageInput): Promise<string> {\n    return this.#userService.addWalletMessage(params);\n  }\n\n  async createUser(\n    user: CreateProfileReqParams,\n    wallet: CreateWalletReqParams,\n  ): Promise<[idOSUser, idOSWallet]> {\n    return this.#userService.createUser(user, wallet);\n  }\n\n  async getUser(id: string): Promise<idOSUser> {\n    return this.#userService.getUser({ id });\n  }\n\n  async requestDelegatedWriteGrantMessage(params: idOSDelegatedWriteGrant): Promise<string> {\n    return this.#credentialService.requestDelegatedWriteGrantMessage(params);\n  }\n\n  async createCredentialByDelegatedWriteGrant(\n    credentialParams: CredentialByDelegatedWriteGrantBaseParams,\n    delegatedWriteGrant: DelegatedWriteGrantParams,\n    consumerEncryptionPublicKey: Uint8Array,\n  ): Promise<{\n    originalCredential: Omit<idOSCredential, \"user_id\">;\n    copyCredential: Omit<idOSCredential, \"user_id\">;\n  }> {\n    return this.#credentialService.createCredentialByDelegatedWriteGrant(\n      credentialParams,\n      delegatedWriteGrant,\n      consumerEncryptionPublicKey,\n    );\n  }\n\n  async editCredentialAsIssuer(\n    publicNotesId: string,\n    publicNotes: string,\n  ): Promise<EditPublicNotesAsIssuerInput | null> {\n    return this.#credentialService.editCredentialAsIssuer(publicNotesId, publicNotes);\n  }\n\n  async getCredentialIdByContentHash(contentHash: string): Promise<string | null> {\n    return this.#credentialService.getCredentialIdByContentHash(contentHash);\n  }\n\n  async getCredentialShared(id: string): Promise<idOSCredentialRecord | null> {\n    return this.#credentialService.getCredentialShared(id);\n  }\n}\n\nexport type {\n  idOSCredential,\n  idOSGrant,\n  idOSUser,\n  idOSUserAttribute,\n  idOSDelegatedWriteGrant,\n  idOSWallet,\n  AvailableIssuerType,\n  CredentialByDelegatedWriteGrantBaseParams,\n  DelegatedWriteGrantBaseParams,\n  DelegatedWriteGrantParams,\n};\n\nexport { toDelegatedWriteGrantBaseParams } from \"@idos-network/kwil-infra/actions\";\n"],"x_google_ignoreList":[0],"mappings":"qoBAAA,IAAI,EAAe,QAAQ,IAAI,WAAa,aACxC,EAAS,mBACb,SAAS,EAAU,EAAW,EAAS,CAC/B,MAGJ,IAAI,EACA,MAAU,MAAM,CAAM,EAE1B,IAAI,EAAW,OAAO,GAAY,WAAa,EAAQ,EAAI,EACvD,EAAQ,EAAW,GAAU,MAAqB,IAAY,EAClE,MAAU,MAAM,CAAK,CAJK,CAK9B,CC2BA,IAAa,EAAb,KAA+B,CAC7B,GACA,GACA,GAEA,YACE,EACA,EACA,EACA,CACA,KAAK,GAAc,EACnB,KAAK,GAAkB,EACvB,KAAK,GAAe,CACtB,CAEA,MAAM,kCAAkC,EAAkD,CACxF,OAAO,EAAW,KAAK,GAAa,CAAM,CAAC,CAAC,KAAM,GAAQ,EAAI,OAAO,CACvE,CAEA,MAAM,sCACJ,EACA,EACA,EAIC,CACD,GAAM,CAAE,qBAAoB,iBAAgB,GAAG,GAA2B,EACpE,EAAgD,CACpD,GAAI,MAAM,EAA+B,CACvC,GAAG,EACH,WAAY,EACZ,uBAAwB,KAAK,GAAgB,SAC/C,CAAC,EACD,GAAI,OAAO,WAAW,CACxB,EAEM,EAAc,EAAoB,EAAiB,gBAAgB,EAEnE,EAA4C,CAChD,GAAI,MAAM,EAA+B,CACvC,GAAG,EACH,WAAY,EACZ,YAAa,GACb,6BAA8B,EAC9B,uBAAwB,KAAK,GAAgB,SAC/C,CAAC,EACD,GAAI,OAAO,WAAW,CACxB,EAEA,EACE,EAAmB,aAAe,EAAe,WACjD,8DACF,EAEA,IAAM,EAAY,OAAO,WAAW,EAC9B,EAAkD,CACtD,WAAY,EACZ,uBAAwB,EAAmB,oBAC3C,8BAA+B,EAAmB,mBAClD,YAAa,EAAmB,GAChC,qBAAsB,EAAmB,WACzC,sBAAuB,EAAmB,YAC1C,sBAAuB,EAAmB,YAC1C,gCAAiC,EAAmB,qBACpD,2BAA4B,EAAmB,iBAC/C,0BAA2B,EAAe,mBAC1C,QAAS,EAAe,GACxB,iBAAkB,EAAe,WACjC,kBAAmB,EAAe,YAClC,4BAA6B,EAAe,qBAC5C,uBAAwB,EAAe,iBACvC,aAAc,EACd,UAAW,EAAoB,sBAC/B,YAAa,EAAoB,yBACjC,sBAAuB,EAAoB,gBAC3C,OAAQ,EAAoB,GAC5B,0BAA2B,EAAoB,oBAC/C,eAAgB,EAAoB,gBACpC,cAAe,EAAoB,eACnC,cAAe,EAAoB,SACrC,EAUA,OARA,MAAM,EAAkC,KAAK,GAAa,CAAO,EAEjE,MAAM,KAAK,GAAa,sBAAsB,CAC5C,YACA,SAAU,EAAmB,iBAC7B,KAAM,EAAe,gBACvB,CAAC,EAEM,CACL,mBAAoB,EAA+B,CAAkB,EACrE,eAAgB,EAA+B,CAAc,CAC/D,CACF,CAEA,MAAM,uBACJ,EACA,EAC8C,CAC9C,IAAM,EAAU,CACd,gBAAiB,EACjB,aAAc,CAChB,EAIA,OAFA,MAAM,EAAwB,KAAK,GAAa,CAAO,EAEhD,CACT,CAEA,MAAM,6BAA6B,EAA6C,CAC9E,IAAM,EAAK,MAAM,EAAuB,KAAK,GAAa,CAAE,aAAc,CAAY,CAAC,CAAC,CAAC,KACtF,GAAQ,EAAI,EACf,EAIA,OAFA,EAAU,EAAI,wCAAwC,EAE/C,CACT,CAEA,MAAM,oBAAoB,EAAkD,CAG1E,OAAO,MAFc,EAAoB,KAAK,GAAa,CAAE,IAAG,CAAC,CAAC,CAAC,KAAM,GAAQ,EAAI,EAAE,GAEtE,IACnB,CACF,EC3Ia,EAAb,KAAyB,CACvB,GAEA,YAAY,EAA8B,CACxC,KAAK,GAAc,CACrB,CAEA,GAA2C,EAA+B,CAIxE,MAHA,CACE,EAA+B,KAAK,OAAO,WAAW,EAEjD,CACT,CAEA,MAAM,WAAW,EAAmC,CAClD,OAAOA,EAAY,KAAK,GAAa,CAAE,SAAQ,CAAC,CAAC,CAAC,KAAM,GAAQ,EAAI,WAAW,CACjF,CAEA,MAAM,kBAAkB,EAAmD,CACzE,IAAM,EAAU,KAAK,GAAgB,CAAM,EAE3C,OADA,MAAM,EAAkB,KAAK,GAAa,CAAO,EAC1C,CACT,CAEA,MAAM,uBAAuB,EAAoD,CAC/E,IAAM,EAAU,KAAK,GAAgB,CAAM,EAE3C,OADA,MAAMC,EAAwB,KAAK,GAAa,CAAO,EAChD,CACT,CAEA,MAAM,iBAAiB,EAAgD,CAErE,OAAO,MADcC,EAAkB,KAAK,GAAa,CAAM,EAAA,CACjD,OAChB,CAGA,MAAM,QAAQ,EAAmD,CAC/D,OAAO,EAAkB,KAAK,GAAa,KAAK,GAAgB,CAAM,CAAC,CACzE,CAEA,MAAM,WACJ,EACA,EACiC,CACjC,IAAM,EAAU,EAAK,IAAM,OAAO,WAAW,EACvC,EAAY,EAAO,IAAM,OAAO,WAAW,EAE3C,EAAgB,CACpB,GAAG,EACH,GAAI,CACN,EAEM,EAAe,MAAM,KAAK,kBAAkB,CAAa,EAEzD,EAAkB,CACtB,GAAG,EACH,UACA,GAAI,CACN,EAIA,MAAO,CAAC,EAAc,MAFO,KAAK,uBAAuB,CAAe,CAEpC,CACtC,CACF,EChDa,EAAb,MAAa,CAAW,CACtB,GACA,GAEA,aAAa,KAAK,EAAiD,CACjE,IAAM,EAAa,MAAM,EAAqB,CAC5C,QAAS,EAAO,QAChB,QAAS,EAAO,OAClB,CAAC,EAEK,CAAC,GAAU,MAAM,EAAuB,EAAO,cAAc,EACnE,EAAW,UAAU,CAAM,EAE3B,IAAM,EAAc,EAAkC,CACpD,IAAK,EAAO,gBAAkB,EAAO,QACrC,aACA,QACF,CAAC,EAEK,EAAoB,IAAI,EAAkB,EAAY,EAAO,eAAgB,CAAW,EACxF,EAAc,IAAI,EAAY,CAAU,EAE9C,OAAO,IAAI,EAAW,EAAmB,CAAW,CACtD,CAEA,YAAoB,EAAsC,EAA0B,CAClF,KAAK,GAAqB,EAC1B,KAAK,GAAe,CACtB,CAGA,MAAM,WAAW,EAAuC,CACtD,OAAO,KAAK,GAAa,WAAW,CAAW,CACjD,CAEA,MAAM,kBAAkB,EAAmD,CACzE,OAAO,KAAK,GAAa,kBAAkB,CAAM,CACnD,CAEA,MAAM,uBAAuB,EAAoD,CAC/E,OAAO,KAAK,GAAa,uBAAuB,CAAM,CACxD,CAEA,MAAM,iBAAiB,EAAgD,CACrE,OAAO,KAAK,GAAa,iBAAiB,CAAM,CAClD,CAEA,MAAM,WACJ,EACA,EACiC,CACjC,OAAO,KAAK,GAAa,WAAW,EAAM,CAAM,CAClD,CAEA,MAAM,QAAQ,EAA+B,CAC3C,OAAO,KAAK,GAAa,QAAQ,CAAE,IAAG,CAAC,CACzC,CAEA,MAAM,kCAAkC,EAAkD,CACxF,OAAO,KAAK,GAAmB,kCAAkC,CAAM,CACzE,CAEA,MAAM,sCACJ,EACA,EACA,EAIC,CACD,OAAO,KAAK,GAAmB,sCAC7B,EACA,EACA,CACF,CACF,CAEA,MAAM,uBACJ,EACA,EAC8C,CAC9C,OAAO,KAAK,GAAmB,uBAAuB,EAAe,CAAW,CAClF,CAEA,MAAM,6BAA6B,EAA6C,CAC9E,OAAO,KAAK,GAAmB,6BAA6B,CAAW,CACzE,CAEA,MAAM,oBAAoB,EAAkD,CAC1E,OAAO,KAAK,GAAmB,oBAAoB,CAAE,CACvD,CACF"}
+{"version":3,"file":"index.mjs","names":["_hasProfile","_upsertWalletAsInserter","_addWalletMessage"],"sources":["../../../node_modules/.pnpm/tiny-invariant@1.3.3/node_modules/tiny-invariant/dist/esm/tiny-invariant.js","../src/services/credential.service.ts","../src/services/user.service.ts","../src/index.ts"],"sourcesContent":["var isProduction = process.env.NODE_ENV === 'production';\nvar prefix = 'Invariant failed';\nfunction invariant(condition, message) {\n    if (condition) {\n        return;\n    }\n    if (isProduction) {\n        throw new Error(prefix);\n    }\n    var provided = typeof message === 'function' ? message() : message;\n    var value = provided ? \"\".concat(prefix, \": \").concat(provided) : prefix;\n    throw new Error(value);\n}\n\nexport { invariant as default };\n","import type { idOSCredential, idOSCredentialRecord } from \"@idos-network/credentials/types\";\nimport type { KwilActionClient } from \"@idos-network/kwil-infra\";\n\nimport {\n  buildPreliminaryIDOSCredential,\n  BuildPreliminaryIDOSCredentialArgs,\n  mapPreliminaryToIDOSCredential,\n  PreliminaryIDOSCredential,\n} from \"@idos-network/credentials/utils\";\nimport {\n  type CreatePreliminaryCredentialsByDwgInput,\n  createPreliminaryCredentialsByDwg,\n  credentialBroaderMessage,\n  dwgMessage,\n  type EditPublicNotesAsIssuerInput,\n  editPublicNotesAsIssuer,\n  getCredentialShared,\n  getSiblingCredentialId,\n  type idOSDelegatedWriteGrant,\n  type DelegatedWriteGrantBaseParams,\n} from \"@idos-network/kwil-infra/actions\";\nimport { BlobGateway } from \"@idos-network/utils/blob-gateway\";\nimport { hexEncodeSha256Hash } from \"@idos-network/utils/codecs\";\nimport invariant from \"tiny-invariant\";\nimport nacl from \"tweetnacl\";\n\nexport type { DelegatedWriteGrantBaseParams };\n\nexport type DelegatedWriteGrantParams = DelegatedWriteGrantBaseParams & {\n  signature: string;\n};\n\n// MM users' ukyc:// credentials are created by their MM operator only (@idos-network/mm-operator).\nexport type CredentialByDelegatedWriteGrantBaseParams = Omit<\n  BuildPreliminaryIDOSCredentialArgs,\n  \"issuerSigningSecretKey\" | \"broaderMessageFor\" | \"ukycStorageId\"\n>;\n\nexport class CredentialService {\n  readonly #kwilClient: KwilActionClient;\n  readonly #signingKeyPair: nacl.SignKeyPair;\n  readonly #blobGateway: BlobGateway;\n\n  constructor(\n    kwilClient: KwilActionClient,\n    signingKeyPair: nacl.SignKeyPair,\n    blobGateway: BlobGateway,\n  ) {\n    this.#kwilClient = kwilClient;\n    this.#signingKeyPair = signingKeyPair;\n    this.#blobGateway = blobGateway;\n  }\n\n  async requestDelegatedWriteGrantMessage(params: idOSDelegatedWriteGrant): Promise<string> {\n    return dwgMessage(this.#kwilClient, params).then((res) => {\n      if (!res) throw new Error(\"dwg_message returned no rows\");\n      return res.message;\n    });\n  }\n\n  async createCredentialByDelegatedWriteGrant(\n    credentialParams: CredentialByDelegatedWriteGrantBaseParams,\n    delegatedWriteGrant: DelegatedWriteGrantParams,\n    consumerEncryptionPublicKey: Uint8Array,\n  ): Promise<{\n    originalCredential: Omit<idOSCredential, \"user_id\">;\n    copyCredential: Omit<idOSCredential, \"user_id\">;\n  }> {\n    const broaderMessageFor = (publicNotesSignature: string, contentUri: string) =>\n      credentialBroaderMessage(this.#kwilClient, {\n        public_notes_signature: publicNotesSignature,\n        content_uri: contentUri,\n        recipient_wallet: delegatedWriteGrant.ownerWalletIdentifier,\n      }).then((row) => row.message);\n    const originalCredential: PreliminaryIDOSCredential = {\n      ...(await buildPreliminaryIDOSCredential({\n        ...credentialParams,\n        broaderMessageFor,\n        issuerSigningSecretKey: this.#signingKeyPair.secretKey,\n      })),\n      id: crypto.randomUUID(),\n    };\n\n    const contentHash = hexEncodeSha256Hash(credentialParams.plaintextContent);\n\n    const copyCredential: PreliminaryIDOSCredential = {\n      ...(await buildPreliminaryIDOSCredential({\n        ...credentialParams,\n        publicNotes: \"\",\n        recipientEncryptionPublicKey: consumerEncryptionPublicKey,\n        broaderMessageFor,\n        issuerSigningSecretKey: this.#signingKeyPair.secretKey,\n      })),\n      id: crypto.randomUUID(),\n    };\n\n    invariant(\n      originalCredential.contentUri !== copyCredential.contentUri,\n      \"Original and copy credentials must use distinct content URIs\",\n    );\n\n    const requestId = crypto.randomUUID();\n    const payload: CreatePreliminaryCredentialsByDwgInput = {\n      request_id: requestId,\n      issuer_auth_public_key: originalCredential.issuerAuthPublicKey,\n      original_encryptor_public_key: originalCredential.encryptorPublicKey,\n      original_id: originalCredential.id,\n      original_content_uri: originalCredential.contentUri,\n      original_content_size: originalCredential.contentSize,\n      original_public_notes: originalCredential.publicNotes,\n      original_public_notes_signature: originalCredential.publicNotesSignature,\n      original_broader_signature: originalCredential.broaderSignature,\n      copy_encryptor_public_key: copyCredential.encryptorPublicKey,\n      copy_id: copyCredential.id,\n      copy_content_uri: copyCredential.contentUri,\n      copy_content_size: copyCredential.contentSize,\n      copy_public_notes_signature: copyCredential.publicNotesSignature,\n      copy_broader_signature: copyCredential.broaderSignature,\n      content_hash: contentHash,\n      dwg_owner: delegatedWriteGrant.ownerWalletIdentifier,\n      dwg_grantee: delegatedWriteGrant.consumerWalletIdentifier,\n      dwg_issuer_public_key: delegatedWriteGrant.issuerPublicKey,\n      dwg_id: delegatedWriteGrant.id,\n      dwg_access_grant_timelock: delegatedWriteGrant.accessGrantTimelock,\n      dwg_not_before: delegatedWriteGrant.notUsableBefore,\n      dwg_not_after: delegatedWriteGrant.notUsableAfter,\n      dwg_signature: delegatedWriteGrant.signature,\n    };\n\n    await createPreliminaryCredentialsByDwg(this.#kwilClient, payload);\n\n    await this.#blobGateway.uploadCredentialBlobs({\n      requestId,\n      credentialIds: [originalCredential.id, copyCredential.id],\n      original: originalCredential.encryptedContent,\n      copy: copyCredential.encryptedContent,\n    });\n\n    return {\n      originalCredential: mapPreliminaryToIDOSCredential(originalCredential),\n      copyCredential: mapPreliminaryToIDOSCredential(copyCredential),\n    };\n  }\n\n  async editCredentialAsIssuer(\n    publicNotesId: string,\n    publicNotes: string,\n  ): Promise<EditPublicNotesAsIssuerInput | null> {\n    const payload = {\n      public_notes_id: publicNotesId,\n      public_notes: publicNotes,\n    };\n\n    await editPublicNotesAsIssuer(this.#kwilClient, payload);\n\n    return payload;\n  }\n\n  async getCredentialIdByContentHash(contentHash: string): Promise<string | null> {\n    const id = await getSiblingCredentialId(this.#kwilClient, { content_hash: contentHash }).then(\n      (res) => res?.id,\n    );\n\n    invariant(id, \"Required `idOSCredential` id not found\");\n\n    return id;\n  }\n\n  async getCredentialShared(id: string): Promise<idOSCredentialRecord | null> {\n    const result = await getCredentialShared(this.#kwilClient, { id }).then((res) => res[0]);\n\n    return result ?? null;\n  }\n}\n","import type { KwilActionClient } from \"@idos-network/kwil-infra\";\n\nimport {\n  hasProfile as _hasProfile,\n  upsertWalletAsInserter as _upsertWalletAsInserter,\n  addUserAsInserter,\n  addWalletMessage as _addWalletMessage,\n  type AddWalletMessageInput,\n  type GetUserAsInserterInput,\n  getUserAsInserter,\n  type idOSUser,\n  type idOSWallet,\n} from \"@idos-network/kwil-infra/actions\";\n\nexport type CreateProfileReqParams = Omit<idOSUser, \"id\"> & {\n  id?: string;\n};\n\nexport type UpsertWalletReqParams = Omit<idOSWallet, \"id\"> & {\n  id?: string;\n};\n\nexport type CreateWalletReqParams = Omit<UpsertWalletReqParams, \"user_id\"> & {\n  id?: string;\n};\n\nexport class UserService {\n  readonly #kwilClient: KwilActionClient;\n\n  constructor(kwilClient: KwilActionClient) {\n    this.#kwilClient = kwilClient;\n  }\n\n  #ensureEntityId<T extends { id?: string }>(entity: T): T & { id: string } {\n    if (!entity.id) {\n      (entity as T & { id: string }).id = crypto.randomUUID();\n    }\n    return entity as T & { id: string };\n  }\n\n  async hasProfile(address: string): Promise<boolean> {\n    return _hasProfile(this.#kwilClient, { address }).then((res) => {\n      if (!res) throw new Error(\"has_profile returned no rows\");\n      return res.has_profile;\n    });\n  }\n\n  async createUserProfile(params: CreateProfileReqParams): Promise<idOSUser> {\n    const payload = this.#ensureEntityId(params);\n    await addUserAsInserter(this.#kwilClient, payload);\n    return payload;\n  }\n\n  async upsertWalletAsInserter(params: UpsertWalletReqParams): Promise<idOSWallet> {\n    const payload = this.#ensureEntityId(params);\n    await _upsertWalletAsInserter(this.#kwilClient, payload);\n    return payload;\n  }\n\n  async addWalletMessage(params: AddWalletMessageInput): Promise<string> {\n    const result = await _addWalletMessage(this.#kwilClient, params);\n    return result.message;\n  }\n\n  /// Useful to understand if a user id already exists.\n  async getUser(params: GetUserAsInserterInput): Promise<idOSUser> {\n    const user = await getUserAsInserter(this.#kwilClient, this.#ensureEntityId(params));\n    if (!user) throw new Error(\"get_user_as_inserter returned no rows\");\n    return user;\n  }\n\n  async createUser(\n    user: CreateProfileReqParams,\n    wallet: CreateWalletReqParams,\n  ): Promise<[idOSUser, idOSWallet]> {\n    const user_id = user.id ?? crypto.randomUUID();\n    const wallet_id = wallet.id ?? crypto.randomUUID();\n\n    const userReqParams = {\n      ...user,\n      id: user_id,\n    };\n\n    const userResponse = await this.createUserProfile(userReqParams);\n\n    const walletReqParams = {\n      ...wallet,\n      user_id,\n      id: wallet_id,\n    };\n\n    const walletResponse = await this.upsertWalletAsInserter(walletReqParams);\n\n    return [userResponse, walletResponse];\n  }\n}\n","import type {\n  AvailableIssuerType,\n  idOSCredential,\n  idOSCredentialRecord,\n} from \"@idos-network/credentials/types\";\nimport type {\n  AddWalletMessageInput,\n  EditPublicNotesAsIssuerInput,\n  idOSDelegatedWriteGrant,\n  idOSGrant,\n  idOSUser,\n  idOSUserAttribute,\n  idOSWallet,\n} from \"@idos-network/kwil-infra/actions\";\nimport type { SignKeyPair } from \"tweetnacl\";\n\nimport {\n  createKgwAuthenticatedBlobGateway,\n  createNodeKwilClient,\n  createServerKwilSigner,\n} from \"@idos-network/kwil-infra\";\n\nimport {\n  CredentialService,\n  type CredentialByDelegatedWriteGrantBaseParams,\n  type DelegatedWriteGrantBaseParams,\n  type DelegatedWriteGrantParams,\n} from \"./services/credential.service\";\nimport {\n  type CreateProfileReqParams,\n  type CreateWalletReqParams,\n  type UpsertWalletReqParams,\n  UserService,\n} from \"./services/user.service\";\n\ntype CreateIssuerParams = {\n  chainId?: string;\n  nodeUrl: string;\n  blobGatewayUrl?: string;\n  signingKeyPair: SignKeyPair;\n};\n\nexport class idOSIssuer {\n  readonly #credentialService: CredentialService;\n  readonly #userService: UserService;\n\n  static async init(params: CreateIssuerParams): Promise<idOSIssuer> {\n    const kwilClient = await createNodeKwilClient({\n      nodeUrl: params.nodeUrl,\n      chainId: params.chainId,\n    });\n\n    const [signer] = await createServerKwilSigner(params.signingKeyPair);\n    kwilClient.setSigner(signer);\n\n    const blobGateway = createKgwAuthenticatedBlobGateway({\n      url: params.blobGatewayUrl ?? params.nodeUrl,\n      kwilClient,\n      signer,\n    });\n\n    const credentialService = new CredentialService(kwilClient, params.signingKeyPair, blobGateway);\n    const userService = new UserService(kwilClient);\n\n    return new idOSIssuer(credentialService, userService);\n  }\n\n  private constructor(credentialService: CredentialService, userService: UserService) {\n    this.#credentialService = credentialService;\n    this.#userService = userService;\n  }\n\n  // User Service facade methods\n  async hasProfile(userAddress: string): Promise<boolean> {\n    return this.#userService.hasProfile(userAddress);\n  }\n\n  async createUserProfile(params: CreateProfileReqParams): Promise<idOSUser> {\n    return this.#userService.createUserProfile(params);\n  }\n\n  async upsertWalletAsInserter(params: UpsertWalletReqParams): Promise<idOSWallet> {\n    return this.#userService.upsertWalletAsInserter(params);\n  }\n\n  async addWalletMessage(params: AddWalletMessageInput): Promise<string> {\n    return this.#userService.addWalletMessage(params);\n  }\n\n  async createUser(\n    user: CreateProfileReqParams,\n    wallet: CreateWalletReqParams,\n  ): Promise<[idOSUser, idOSWallet]> {\n    return this.#userService.createUser(user, wallet);\n  }\n\n  async getUser(id: string): Promise<idOSUser> {\n    return this.#userService.getUser({ id });\n  }\n\n  async requestDelegatedWriteGrantMessage(params: idOSDelegatedWriteGrant): Promise<string> {\n    return this.#credentialService.requestDelegatedWriteGrantMessage(params);\n  }\n\n  async createCredentialByDelegatedWriteGrant(\n    credentialParams: CredentialByDelegatedWriteGrantBaseParams,\n    delegatedWriteGrant: DelegatedWriteGrantParams,\n    consumerEncryptionPublicKey: Uint8Array,\n  ): Promise<{\n    originalCredential: Omit<idOSCredential, \"user_id\">;\n    copyCredential: Omit<idOSCredential, \"user_id\">;\n  }> {\n    return this.#credentialService.createCredentialByDelegatedWriteGrant(\n      credentialParams,\n      delegatedWriteGrant,\n      consumerEncryptionPublicKey,\n    );\n  }\n\n  async editCredentialAsIssuer(\n    publicNotesId: string,\n    publicNotes: string,\n  ): Promise<EditPublicNotesAsIssuerInput | null> {\n    return this.#credentialService.editCredentialAsIssuer(publicNotesId, publicNotes);\n  }\n\n  async getCredentialIdByContentHash(contentHash: string): Promise<string | null> {\n    return this.#credentialService.getCredentialIdByContentHash(contentHash);\n  }\n\n  async getCredentialShared(id: string): Promise<idOSCredentialRecord | null> {\n    return this.#credentialService.getCredentialShared(id);\n  }\n}\n\nexport type {\n  idOSCredential,\n  idOSGrant,\n  idOSUser,\n  idOSUserAttribute,\n  idOSDelegatedWriteGrant,\n  idOSWallet,\n  AvailableIssuerType,\n  CredentialByDelegatedWriteGrantBaseParams,\n  DelegatedWriteGrantBaseParams,\n  DelegatedWriteGrantParams,\n};\n\nexport { toDelegatedWriteGrantBaseParams } from \"@idos-network/kwil-infra/actions\";\n"],"x_google_ignoreList":[0],"mappings":"mqBAAA,IAAI,EAAe,QAAQ,IAAI,WAAa,aACxC,EAAS,mBACb,SAAS,EAAU,EAAW,EAAS,CAC/B,MAGJ,IAAI,EACA,MAAU,MAAM,CAAM,EAE1B,IAAI,EAAW,OAAO,GAAY,WAAa,EAAQ,EAAI,EACvD,EAAQ,EAAW,GAAU,MAAqB,IAAY,EAClE,MAAU,MAAM,CAAK,CAJK,CAK9B,CC0BA,IAAa,EAAb,KAA+B,CAC7B,GACA,GACA,GAEA,YACE,EACA,EACA,EACA,CACA,KAAK,GAAc,EACnB,KAAK,GAAkB,EACvB,KAAK,GAAe,CACtB,CAEA,MAAM,kCAAkC,EAAkD,CACxF,OAAO,EAAW,KAAK,GAAa,CAAM,CAAC,CAAC,KAAM,GAAQ,CACxD,GAAI,CAAC,EAAK,MAAU,MAAM,8BAA8B,EACxD,OAAO,EAAI,OACb,CAAC,CACH,CAEA,MAAM,sCACJ,EACA,EACA,EAIC,CACD,IAAM,GAAqB,EAA8B,IACvD,EAAyB,KAAK,GAAa,CACzC,uBAAwB,EACxB,YAAa,EACb,iBAAkB,EAAoB,qBACxC,CAAC,CAAC,CAAC,KAAM,GAAQ,EAAI,OAAO,EACxB,EAAgD,CACpD,GAAI,MAAM,EAA+B,CACvC,GAAG,EACH,oBACA,uBAAwB,KAAK,GAAgB,SAC/C,CAAC,EACD,GAAI,OAAO,WAAW,CACxB,EAEM,EAAc,EAAoB,EAAiB,gBAAgB,EAEnE,EAA4C,CAChD,GAAI,MAAM,EAA+B,CACvC,GAAG,EACH,YAAa,GACb,6BAA8B,EAC9B,oBACA,uBAAwB,KAAK,GAAgB,SAC/C,CAAC,EACD,GAAI,OAAO,WAAW,CACxB,EAEA,EACE,EAAmB,aAAe,EAAe,WACjD,8DACF,EAEA,IAAM,EAAY,OAAO,WAAW,EAC9B,EAAkD,CACtD,WAAY,EACZ,uBAAwB,EAAmB,oBAC3C,8BAA+B,EAAmB,mBAClD,YAAa,EAAmB,GAChC,qBAAsB,EAAmB,WACzC,sBAAuB,EAAmB,YAC1C,sBAAuB,EAAmB,YAC1C,gCAAiC,EAAmB,qBACpD,2BAA4B,EAAmB,iBAC/C,0BAA2B,EAAe,mBAC1C,QAAS,EAAe,GACxB,iBAAkB,EAAe,WACjC,kBAAmB,EAAe,YAClC,4BAA6B,EAAe,qBAC5C,uBAAwB,EAAe,iBACvC,aAAc,EACd,UAAW,EAAoB,sBAC/B,YAAa,EAAoB,yBACjC,sBAAuB,EAAoB,gBAC3C,OAAQ,EAAoB,GAC5B,0BAA2B,EAAoB,oBAC/C,eAAgB,EAAoB,gBACpC,cAAe,EAAoB,eACnC,cAAe,EAAoB,SACrC,EAWA,OATA,MAAM,EAAkC,KAAK,GAAa,CAAO,EAEjE,MAAM,KAAK,GAAa,sBAAsB,CAC5C,YACA,cAAe,CAAC,EAAmB,GAAI,EAAe,EAAE,EACxD,SAAU,EAAmB,iBAC7B,KAAM,EAAe,gBACvB,CAAC,EAEM,CACL,mBAAoB,EAA+B,CAAkB,EACrE,eAAgB,EAA+B,CAAc,CAC/D,CACF,CAEA,MAAM,uBACJ,EACA,EAC8C,CAC9C,IAAM,EAAU,CACd,gBAAiB,EACjB,aAAc,CAChB,EAIA,OAFA,MAAM,EAAwB,KAAK,GAAa,CAAO,EAEhD,CACT,CAEA,MAAM,6BAA6B,EAA6C,CAC9E,IAAM,EAAK,MAAM,EAAuB,KAAK,GAAa,CAAE,aAAc,CAAY,CAAC,CAAC,CAAC,KACtF,GAAQ,GAAK,EAChB,EAIA,OAFA,EAAU,EAAI,wCAAwC,EAE/C,CACT,CAEA,MAAM,oBAAoB,EAAkD,CAG1E,OAAO,MAFc,EAAoB,KAAK,GAAa,CAAE,IAAG,CAAC,CAAC,CAAC,KAAM,GAAQ,EAAI,EAAE,GAEtE,IACnB,CACF,ECnJa,EAAb,KAAyB,CACvB,GAEA,YAAY,EAA8B,CACxC,KAAK,GAAc,CACrB,CAEA,GAA2C,EAA+B,CAIxE,MAHA,CACE,EAA+B,KAAK,OAAO,WAAW,EAEjD,CACT,CAEA,MAAM,WAAW,EAAmC,CAClD,OAAOA,EAAY,KAAK,GAAa,CAAE,SAAQ,CAAC,CAAC,CAAC,KAAM,GAAQ,CAC9D,GAAI,CAAC,EAAK,MAAU,MAAM,8BAA8B,EACxD,OAAO,EAAI,WACb,CAAC,CACH,CAEA,MAAM,kBAAkB,EAAmD,CACzE,IAAM,EAAU,KAAK,GAAgB,CAAM,EAE3C,OADA,MAAM,EAAkB,KAAK,GAAa,CAAO,EAC1C,CACT,CAEA,MAAM,uBAAuB,EAAoD,CAC/E,IAAM,EAAU,KAAK,GAAgB,CAAM,EAE3C,OADA,MAAMC,EAAwB,KAAK,GAAa,CAAO,EAChD,CACT,CAEA,MAAM,iBAAiB,EAAgD,CAErE,OAAO,MADcC,EAAkB,KAAK,GAAa,CAAM,EAAA,CACjD,OAChB,CAGA,MAAM,QAAQ,EAAmD,CAC/D,IAAM,EAAO,MAAM,EAAkB,KAAK,GAAa,KAAK,GAAgB,CAAM,CAAC,EACnF,GAAI,CAAC,EAAM,MAAU,MAAM,uCAAuC,EAClE,OAAO,CACT,CAEA,MAAM,WACJ,EACA,EACiC,CACjC,IAAM,EAAU,EAAK,IAAM,OAAO,WAAW,EACvC,EAAY,EAAO,IAAM,OAAO,WAAW,EAE3C,EAAgB,CACpB,GAAG,EACH,GAAI,CACN,EAEM,EAAe,MAAM,KAAK,kBAAkB,CAAa,EAEzD,EAAkB,CACtB,GAAG,EACH,UACA,GAAI,CACN,EAIA,MAAO,CAAC,EAAc,MAFO,KAAK,uBAAuB,CAAe,CAEpC,CACtC,CACF,ECrDa,EAAb,MAAa,CAAW,CACtB,GACA,GAEA,aAAa,KAAK,EAAiD,CACjE,IAAM,EAAa,MAAM,EAAqB,CAC5C,QAAS,EAAO,QAChB,QAAS,EAAO,OAClB,CAAC,EAEK,CAAC,GAAU,MAAM,EAAuB,EAAO,cAAc,EACnE,EAAW,UAAU,CAAM,EAE3B,IAAM,EAAc,EAAkC,CACpD,IAAK,EAAO,gBAAkB,EAAO,QACrC,aACA,QACF,CAAC,EAEK,EAAoB,IAAI,EAAkB,EAAY,EAAO,eAAgB,CAAW,EACxF,EAAc,IAAI,EAAY,CAAU,EAE9C,OAAO,IAAI,EAAW,EAAmB,CAAW,CACtD,CAEA,YAAoB,EAAsC,EAA0B,CAClF,KAAK,GAAqB,EAC1B,KAAK,GAAe,CACtB,CAGA,MAAM,WAAW,EAAuC,CACtD,OAAO,KAAK,GAAa,WAAW,CAAW,CACjD,CAEA,MAAM,kBAAkB,EAAmD,CACzE,OAAO,KAAK,GAAa,kBAAkB,CAAM,CACnD,CAEA,MAAM,uBAAuB,EAAoD,CAC/E,OAAO,KAAK,GAAa,uBAAuB,CAAM,CACxD,CAEA,MAAM,iBAAiB,EAAgD,CACrE,OAAO,KAAK,GAAa,iBAAiB,CAAM,CAClD,CAEA,MAAM,WACJ,EACA,EACiC,CACjC,OAAO,KAAK,GAAa,WAAW,EAAM,CAAM,CAClD,CAEA,MAAM,QAAQ,EAA+B,CAC3C,OAAO,KAAK,GAAa,QAAQ,CAAE,IAAG,CAAC,CACzC,CAEA,MAAM,kCAAkC,EAAkD,CACxF,OAAO,KAAK,GAAmB,kCAAkC,CAAM,CACzE,CAEA,MAAM,sCACJ,EACA,EACA,EAIC,CACD,OAAO,KAAK,GAAmB,sCAC7B,EACA,EACA,CACF,CACF,CAEA,MAAM,uBACJ,EACA,EAC8C,CAC9C,OAAO,KAAK,GAAmB,uBAAuB,EAAe,CAAW,CAClF,CAEA,MAAM,6BAA6B,EAA6C,CAC9E,OAAO,KAAK,GAAmB,6BAA6B,CAAW,CACzE,CAEA,MAAM,oBAAoB,EAAkD,CAC1E,OAAO,KAAK,GAAmB,oBAAoB,CAAE,CACvD,CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@idos-network/issuer",
-  "version": "3.1.0",
+  "version": "5.0.0",
   "description": "idOS Issuer JavaScript SDK for server environments",
   "homepage": "https://idos.network",
   "license": "MIT",
@@ -28,10 +28,10 @@
     "access": "public"
   },
   "dependencies": {
-    "@idos-network/credentials": "3.1.0",
-    "@idos-network/kwil-infra": "3.0.1",
+    "@idos-network/credentials": "4.0.1",
+    "@idos-network/kwil-infra": "5.0.0",
     "@idos-network/kwil-js": "0.2.2",
-    "@idos-network/utils": "3.0.1",
+    "@idos-network/utils": "3.2.0",
     "tweetnacl": "^1.0.3"
   },
   "devDependencies": {

package/src/index.test.ts

@@ -5,11 +5,13 @@ import { idOSIssuer, toDelegatedWriteGrantBaseParams } from "./index.js";
 
 const mocks = vi.hoisted(() => ({
   blobGateway: { fetchBlob: vi.fn(), uploadCredentialBlobs: vi.fn() },
+  credentialBroaderMessage: vi.fn(async () => ({ message: "credential-message" })),
   createPreliminaryCredentialsByDwg: vi.fn(),
   addWalletMessage: vi.fn(async () => ({ message: "add-wallet-message" })),
   dwgMessage: vi.fn(async () => ({ message: "dwg-message-string" })),
   kwilClient: {
     setSigner: vi.fn(),
+    call: vi.fn(),
   },
   signer: { publicKey: "signer" },
 }));
@@ -24,6 +26,7 @@ vi.mock("@idos-network/kwil-infra/actions", async (importOriginal) => ({
   ...((await importOriginal()) as object),
   addWalletMessage: mocks.addWalletMessage,
   createPreliminaryCredentialsByDwg: mocks.createPreliminaryCredentialsByDwg,
+  credentialBroaderMessage: mocks.credentialBroaderMessage,
   dwgMessage: mocks.dwgMessage,
 }));
 
@@ -88,6 +91,7 @@ describe("idOSIssuer", () => {
     expect(payload.copy_content_size).toBeGreaterThan(0);
     expect(mocks.blobGateway.uploadCredentialBlobs).toHaveBeenCalledWith({
       requestId: payload.request_id,
+      credentialIds: [payload.original_id, payload.copy_id],
       original: expect.any(Uint8Array),
       copy: expect.any(Uint8Array),
     });
@@ -106,55 +110,6 @@ describe("idOSIssuer", () => {
     );
   });
 
-  it("uses and enforces distinct custom content URIs for delegated write grants", async () => {
-    const issuer = await idOSIssuer.init({
-      nodeUrl: "https://nodes.example",
-      blobGatewayUrl: "https://blob.example",
-      signingKeyPair: nacl.sign.keyPair(),
-    });
-    const originalContentUri = "ukyc://storage-abc/blobs/original";
-    const copyContentUri = "ukyc://storage-abc/blobs/copy";
-    const credentialParams = {
-      publicNotes: "{}",
-      plaintextContent: new Uint8Array([1, 2, 3]),
-      recipientEncryptionPublicKey: nacl.box.keyPair().publicKey,
-      originalContentUri,
-      copyContentUri,
-    };
-    const delegatedWriteGrant = {
-      id: crypto.randomUUID(),
-      ownerWalletIdentifier: "owner",
-      consumerWalletIdentifier: "consumer",
-      issuerPublicKey: "issuer",
-      accessGrantTimelock: "2026-01-01T00:00:00Z",
-      notUsableBefore: "2026-01-01T00:00:00Z",
-      notUsableAfter: "2026-01-02T00:00:00Z",
-      signature: "signature",
-    };
-    const consumerEncryptionPublicKey = nacl.box.keyPair().publicKey;
-
-    const result = await issuer.createCredentialByDelegatedWriteGrant(
-      credentialParams,
-      delegatedWriteGrant,
-      consumerEncryptionPublicKey,
-    );
-
-    const payload = mocks.createPreliminaryCredentialsByDwg.mock.calls[0]?.[1];
-    expect(payload.original_content_uri).toBe(originalContentUri);
-    expect(payload.copy_content_uri).toBe(copyContentUri);
-    expect(result.originalCredential.content_uri).toBe(originalContentUri);
-    expect(result.copyCredential.content_uri).toBe(copyContentUri);
-
-    await expect(
-      issuer.createCredentialByDelegatedWriteGrant(
-        { ...credentialParams, copyContentUri: originalContentUri },
-        delegatedWriteGrant,
-        consumerEncryptionPublicKey,
-      ),
-    ).rejects.toThrow("Original and copy credentials must use distinct content URIs");
-    expect(mocks.createPreliminaryCredentialsByDwg).toHaveBeenCalledOnce();
-  });
-
   it("maps request params for createCredentialByDelegatedWriteGrant via toDelegatedWriteGrantBaseParams", async () => {
     const issuer = await idOSIssuer.init({
       nodeUrl: "https://nodes.example",

package/src/services/credential.service.ts

@@ -10,6 +10,7 @@ import {
 import {
   type CreatePreliminaryCredentialsByDwgInput,
   createPreliminaryCredentialsByDwg,
+  credentialBroaderMessage,
   dwgMessage,
   type EditPublicNotesAsIssuerInput,
   editPublicNotesAsIssuer,
@@ -29,13 +30,11 @@ export type DelegatedWriteGrantParams = DelegatedWriteGrantBaseParams & {
   signature: string;
 };
 
+// MM users' ukyc:// credentials are created by their MM operator only (@idos-network/mm-operator).
 export type CredentialByDelegatedWriteGrantBaseParams = Omit<
   BuildPreliminaryIDOSCredentialArgs,
-  "issuerSigningSecretKey" | "contentUri"
-> & {
-  originalContentUri?: string;
-  copyContentUri?: string;
-};
+  "issuerSigningSecretKey" | "broaderMessageFor" | "ukycStorageId"
+>;
 
 export class CredentialService {
   readonly #kwilClient: KwilActionClient;
@@ -53,7 +52,10 @@ export class CredentialService {
   }
 
   async requestDelegatedWriteGrantMessage(params: idOSDelegatedWriteGrant): Promise<string> {
-    return dwgMessage(this.#kwilClient, params).then((res) => res.message);
+    return dwgMessage(this.#kwilClient, params).then((res) => {
+      if (!res) throw new Error("dwg_message returned no rows");
+      return res.message;
+    });
   }
 
   async createCredentialByDelegatedWriteGrant(
@@ -64,11 +66,16 @@ export class CredentialService {
     originalCredential: Omit<idOSCredential, "user_id">;
     copyCredential: Omit<idOSCredential, "user_id">;
   }> {
-    const { originalContentUri, copyContentUri, ...sharedCredentialParams } = credentialParams;
+    const broaderMessageFor = (publicNotesSignature: string, contentUri: string) =>
+      credentialBroaderMessage(this.#kwilClient, {
+        public_notes_signature: publicNotesSignature,
+        content_uri: contentUri,
+        recipient_wallet: delegatedWriteGrant.ownerWalletIdentifier,
+      }).then((row) => row.message);
     const originalCredential: PreliminaryIDOSCredential = {
       ...(await buildPreliminaryIDOSCredential({
-        ...sharedCredentialParams,
-        contentUri: originalContentUri,
+        ...credentialParams,
+        broaderMessageFor,
         issuerSigningSecretKey: this.#signingKeyPair.secretKey,
       })),
       id: crypto.randomUUID(),
@@ -78,10 +85,10 @@ export class CredentialService {
 
     const copyCredential: PreliminaryIDOSCredential = {
       ...(await buildPreliminaryIDOSCredential({
-        ...sharedCredentialParams,
-        contentUri: copyContentUri,
+        ...credentialParams,
         publicNotes: "",
         recipientEncryptionPublicKey: consumerEncryptionPublicKey,
+        broaderMessageFor,
         issuerSigningSecretKey: this.#signingKeyPair.secretKey,
       })),
       id: crypto.randomUUID(),
@@ -124,6 +131,7 @@ export class CredentialService {
 
     await this.#blobGateway.uploadCredentialBlobs({
       requestId,
+      credentialIds: [originalCredential.id, copyCredential.id],
       original: originalCredential.encryptedContent,
       copy: copyCredential.encryptedContent,
     });
@@ -150,7 +158,7 @@ export class CredentialService {
 
   async getCredentialIdByContentHash(contentHash: string): Promise<string | null> {
     const id = await getSiblingCredentialId(this.#kwilClient, { content_hash: contentHash }).then(
-      (res) => res.id,
+      (res) => res?.id,
     );
 
     invariant(id, "Required `idOSCredential` id not found");

package/src/services/user.service.ts

@@ -39,7 +39,10 @@ export class UserService {
   }
 
   async hasProfile(address: string): Promise<boolean> {
-    return _hasProfile(this.#kwilClient, { address }).then((res) => res.has_profile);
+    return _hasProfile(this.#kwilClient, { address }).then((res) => {
+      if (!res) throw new Error("has_profile returned no rows");
+      return res.has_profile;
+    });
   }
 
   async createUserProfile(params: CreateProfileReqParams): Promise<idOSUser> {
@@ -61,7 +64,9 @@ export class UserService {
 
   /// Useful to understand if a user id already exists.
   async getUser(params: GetUserAsInserterInput): Promise<idOSUser> {
-    return getUserAsInserter(this.#kwilClient, this.#ensureEntityId(params));
+    const user = await getUserAsInserter(this.#kwilClient, this.#ensureEntityId(params));
+    if (!user) throw new Error("get_user_as_inserter returned no rows");
+    return user;
   }
 
   async createUser(