@idos-network/kwil-infra 1.5.0 → 2.2.2

package/dist/xrpl-credentials/index.mjs

@@ -1,224 +1,2 @@
-import { hexEncode, utf8Encode } from "@idos-network/utils/codecs";
-//#region src/xrpl-credentials/accept.ts
-/**
-* Creates a credential acceptance payload for XRPL transactions
-*
-* This function constructs a properly formatted payload for credential acceptance
-* transactions. The credential type is automatically encoded from UTF-8 to hex
-* format as required by XRPL specifications.
-*
-* @param issuerAddress - The XRPL address of the credential issuer
-* @param accountAddress - The XRPL address of the account accepting the credential
-* @param credentialType - The human-readable idOS credential type (e.g., "KYC")
-* @returns A properly formatted CredentialAcceptPayload object
-*
-* @example
-* ```typescript
-* const payload = OriginalCredentialAcceptPayload(
-*   "rIssuerAddress123...",
-*   "rAccountAddress456...",
-*   "KYC"
-* );
-* // Result: {
-* //   TransactionType: "CredentialAccept",
-* //   Issuer: "rIssuerAddress123...",
-* //   Account: "rAccountAddress456...",
-* //   CredentialType: "4B5943" // Hex encoded "KYC"
-* // }
-* ```
-*/
-function OriginalCredentialAcceptPayload(issuerAddress, accountAddress, credentialType) {
-	return {
-		TransactionType: "CredentialAccept",
-		Issuer: issuerAddress,
-		Account: accountAddress,
-		CredentialType: hexEncode(utf8Encode(credentialType))
-	};
-}
-/**
-* Creates a copy credential acceptance payload for XRPL transactions
-*
-* This function constructs a payload for accepting a copy of an existing credential
-* with additional metadata including the original issuer and a timelock period.
-* The CredentialType field is encoded as a composite string containing:
-* - "AG-" prefix (indicating copy credential)
-* - Original credential type
-* - Original issuer address
-* - Timelock period in years
-*
-* @param copyCredentialIssuerAddress - The XRPL address of the issuer created a XRPL Credential object related to idOS credential copy
-* @param accountAddress - The XRPL address of the account accepting the credential copy
-* @param originalCredentialIssuerAddress - The XRPL address of the issuer created a XRPL Credential object related to idOS original credential
-* @param credentialType - The human-readable idOScredential type (e.g., "KYC")
-* @param timelockYears - The number of years for the timelock period (must be non-negative integer)
-* @returns A properly formatted CredentialAcceptPayload object for copy credentials
-* @throws {Error} When timelockYears is not a non-negative integer
-*
-* @example
-* ```typescript
-* const payload = await CopyCredentialAcceptPayload(
-*   "rCopyIssuerAddress123...",
-*   "rAccountAddress456...",
-*   "rOriginalIssuerAddress789...",
-*   "KYC",
-*   2
-* );
-* // Result: {
-* //   TransactionType: "CredentialAccept",
-* //   Issuer: "rCopyIssuerAddress123...",
-* //   Account: "rAccountAddress456...",
-* //   CredentialType: "41472D4B59432D..." // Hex encoded "AG-KYC-{originalIssuer}-2Y"
-* // }
-* ```
-*/
-async function CopyCredentialAcceptPayload(copyCredentialIssuerAddress, accountAddress, originalCredentialIssuerAddress, credentialType, timelockYears) {
-	if (!Number.isInteger(timelockYears) || timelockYears < 0) throw new Error("timelockYears must be a non-negative integer");
-	let decodeAccountID;
-	try {
-		({decodeAccountID} = await import("xrpl"));
-	} catch {
-		throw new Error("Missing optional peer dependency \"xrpl\". Install it to use CopyCredentialAcceptPayload.");
-	}
-	return {
-		TransactionType: "CredentialAccept",
-		Issuer: copyCredentialIssuerAddress,
-		Account: accountAddress,
-		CredentialType: hexEncode(Buffer.concat([
-			utf8Encode("AG"),
-			utf8Encode("-"),
-			utf8Encode(credentialType),
-			utf8Encode("-"),
-			decodeAccountID(originalCredentialIssuerAddress),
-			utf8Encode("-"),
-			utf8Encode(`${timelockYears}Y`)
-		]))
-	};
-}
-//#endregion
-//#region src/xrpl-credentials/create.ts
-/**
-* Service class for creating credentials on the XRPL blockchain
-*
-* This service provides methods to create both original and copy credentials
-* on the XRPL. It handles connection management, transaction submission,
-* and proper encoding of credential data according to XRPL specifications.
-*
-* @example
-* ```typescript
-* const wallet = Wallet.fromSeed("s...");
-* const xrplService = await XrplCredentialsCreate.init("wss://s.devnet.rippletest.net:51233", wallet);
-*
-* // Create original credential
-* await xrplService.createCredentialForOriginal({
-*   credId: "741a9caf-ec53-42c7-aed6-519950dcded5",
-*   credType: "KYC",
-*   userAddress: "rPT1Sjq2YGrBMTttX4GZHjKu9dyf6bpAYe"
-* });
-* ```
-*/
-var XrplCredentialsCreate = class XrplCredentialsCreate {
-	#client;
-	#wallet;
-	#xrpl;
-	constructor(nodeUrl, wallet, xrpl) {
-		this.#xrpl = xrpl;
-		this.#wallet = wallet;
-		this.#client = new this.#xrpl.Client(nodeUrl);
-	}
-	/**
-	* Creates a new XRPL credentials service instance.
-	*
-	* @param nodeUrl - The WebSocket URL of the XRPL node to connect to
-	* @param wallet  - The XRPL wallet to use for signing transactions
-	*/
-	static async init(nodeUrl, wallet) {
-		let xrpl;
-		try {
-			xrpl = await import("xrpl");
-		} catch {
-			throw new Error("Missing optional peer dependency 'xrpl'. Install it to use XrplCredentialsCreate.");
-		}
-		return new XrplCredentialsCreate(nodeUrl, wallet, xrpl);
-	}
-	/**
-	* Creates a credential on the XRPL that reflects an idOS original credential.
-	*
-	* This method creates a new credential with the specified type and assigns it to the given user.
-	* The credential type is encoded as a hex string, and the credential ID is encoded as a hex URI.
-	*
-	* @param params - Parameters for creating the original credential
-	* @returns Promise resolving to the XRPL transaction result
-	*
-	* @example
-	* ```typescript
-	* await xrplService.createCredentialForOriginal({
-	*   credId: "741a9caf-ec53-42c7-aed6-519950dcded5",
-	*   credType: "KYC",
-	*   userAddress: "rPT1Sjq2YGrBMTttX4GZHjKu9dyf6bpAYe"
-	* });
-	* ```
-	*/
-	async createCredentialForOriginal(params) {
-		const { credId, credType, userAddress } = params;
-		await this.#client.connect();
-		const res = await this.#client.submitAndWait({
-			TransactionType: "CredentialCreate",
-			Account: this.#wallet.address,
-			Subject: userAddress,
-			CredentialType: hexEncode(utf8Encode(credType)),
-			URI: hexEncode(utf8Encode(credId))
-		}, { wallet: this.#wallet });
-		await this.#client.disconnect();
-		return res;
-	}
-	/**
-	* Creates a time-locked credential copy on the XRPL.
-	*
-	* This method creates a Credential object in XRPL that reflects an idOS credential copy.
-	* The credential type includes metadata about the original issuer and time-lock duration.
-	* The composite credential type follows the format: "AG-{type}-{originalIssuer}-{timelock}Y"
-	*
-	* @param params - Parameters for creating the time-locked credential copy
-	* @returns Promise resolving to the XRPL transaction result
-	*
-	* @throws {Error} When timelockYears is not a non-negative integer
-	*
-	* @example
-	* ```typescript
-	* const result = await xrplService.createCredentialForCopy({
-	*   credId: "741a9caf-ec53-42c7-aed6-519950dcded5",
-	*   credType: "KYC",
-	*   userAddress: "rPT1Sjq2YGrBMTttX4GZHjKu9dyf6bpAYe",
-	*   timelockYears: 5,
-	*   origCredIssuerAddress: "rU9C67bZ3ZvjXaJYwYqMqjMq1o4ZbwK3YN"
-	* });
-	* ```
-	*/
-	async createCredentialForCopy(params) {
-		const { credId, credType, userAddress, timelockYears, origCredIssuerAddress } = params;
-		if (!Number.isInteger(timelockYears) || timelockYears < 0) throw new Error("timelockYears must be a non-negative integer");
-		await this.#client.connect();
-		const type = Buffer.concat([
-			utf8Encode("AG"),
-			utf8Encode("-"),
-			utf8Encode(credType),
-			utf8Encode("-"),
-			this.#xrpl.decodeAccountID(origCredIssuerAddress),
-			utf8Encode("-"),
-			utf8Encode(`${timelockYears}Y`)
-		]);
-		const res = await this.#client.submitAndWait({
-			TransactionType: "CredentialCreate",
-			Account: this.#wallet.address,
-			Subject: userAddress,
-			CredentialType: hexEncode(type),
-			URI: hexEncode(utf8Encode(credId))
-		}, { wallet: this.#wallet });
-		await this.#client.disconnect();
-		return res;
-	}
-};
-//#endregion
-export { CopyCredentialAcceptPayload, OriginalCredentialAcceptPayload, XrplCredentialsCreate };
-
+import{hexEncode as e,utf8Encode as t}from"@idos-network/utils/codecs";function n(n,r,i){return{TransactionType:`CredentialAccept`,Issuer:n,Account:r,CredentialType:e(t(i))}}async function r(n,r,i,a,o){if(!Number.isInteger(o)||o<0)throw Error(`timelockYears must be a non-negative integer`);let s;try{({decodeAccountID:s}=await import(`xrpl`))}catch{throw Error(`Missing optional peer dependency "xrpl". Install it to use CopyCredentialAcceptPayload.`)}let c=Buffer.concat([t(`AG`),t(`-`),t(a),t(`-`),s(i),t(`-`),t(`${o}Y`)]);return{TransactionType:`CredentialAccept`,Issuer:n,Account:r,CredentialType:e(c)}}var i=class n{#e;#t;#n;constructor(e,t,n){this.#n=n,this.#t=t,this.#e=new this.#n.Client(e)}static async init(e,t){let r;try{r=await import(`xrpl`)}catch{throw Error(`Missing optional peer dependency 'xrpl'. Install it to use XrplCredentialsCreate.`)}return new n(e,t,r)}async createCredentialForOriginal(n){let{credId:r,credType:i,userAddress:a}=n;await this.#e.connect();let o=await this.#e.submitAndWait({TransactionType:`CredentialCreate`,Account:this.#t.address,Subject:a,CredentialType:e(t(i)),URI:e(t(r))},{wallet:this.#t});return await this.#e.disconnect(),o}async createCredentialForCopy(n){let{credId:r,credType:i,userAddress:a,timelockYears:o,origCredIssuerAddress:s}=n;if(!Number.isInteger(o)||o<0)throw Error(`timelockYears must be a non-negative integer`);await this.#e.connect();let c=Buffer.concat([t(`AG`),t(`-`),t(i),t(`-`),this.#n.decodeAccountID(s),t(`-`),t(`${o}Y`)]),l=await this.#e.submitAndWait({TransactionType:`CredentialCreate`,Account:this.#t.address,Subject:a,CredentialType:e(c),URI:e(t(r))},{wallet:this.#t});return await this.#e.disconnect(),l}};export{r as CopyCredentialAcceptPayload,n as OriginalCredentialAcceptPayload,i as XrplCredentialsCreate};
 //# sourceMappingURL=index.mjs.map

package/dist/xrpl-credentials/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":["#client","#wallet","#xrpl"],"sources":["../../src/xrpl-credentials/accept.ts","../../src/xrpl-credentials/create.ts"],"sourcesContent":["import { hexEncode, utf8Encode } from \"@idos-network/utils/codecs\";\n\n/**\n * Payload structure for XRPL CredentialAccept transaction\n *\n * This type defines the required fields for creating a credential acceptance\n * transaction on the XRP Ledger. The CredentialType field is automatically\n * encoded as a hex string from the UTF-8 representation of the credential type.\n */\nexport type CredentialAcceptPayload = {\n  /** Transaction type identifier - must be \"CredentialAccept\" */\n  TransactionType: \"CredentialAccept\";\n  /** The issuer's XRPL address who created the Credential object */\n  Issuer: string;\n  /** The account's XRPL address who is receiving the credential */\n  Account: string;\n  /** The type of credential being accepted (encoded as hex string) */\n  CredentialType: string;\n};\n\n/**\n * Creates a credential acceptance payload for XRPL transactions\n *\n * This function constructs a properly formatted payload for credential acceptance\n * transactions. The credential type is automatically encoded from UTF-8 to hex\n * format as required by XRPL specifications.\n *\n * @param issuerAddress - The XRPL address of the credential issuer\n * @param accountAddress - The XRPL address of the account accepting the credential\n * @param credentialType - The human-readable idOS credential type (e.g., \"KYC\")\n * @returns A properly formatted CredentialAcceptPayload object\n *\n * @example\n * ```typescript\n * const payload = OriginalCredentialAcceptPayload(\n *   \"rIssuerAddress123...\",\n *   \"rAccountAddress456...\",\n *   \"KYC\"\n * );\n * // Result: {\n * //   TransactionType: \"CredentialAccept\",\n * //   Issuer: \"rIssuerAddress123...\",\n * //   Account: \"rAccountAddress456...\",\n * //   CredentialType: \"4B5943\" // Hex encoded \"KYC\"\n * // }\n * ```\n */\nexport function OriginalCredentialAcceptPayload(\n  issuerAddress: string,\n  accountAddress: string,\n  credentialType: string,\n): CredentialAcceptPayload {\n  // Encode the credential type from UTF-8 to hex format\n  // This is required by XRPL for proper transaction processing\n  const encodedCredentialType = hexEncode(utf8Encode(credentialType));\n\n  return {\n    TransactionType: \"CredentialAccept\",\n    Issuer: issuerAddress,\n    Account: accountAddress,\n    CredentialType: encodedCredentialType,\n  };\n}\n\n/**\n * Creates a copy credential acceptance payload for XRPL transactions\n *\n * This function constructs a payload for accepting a copy of an existing credential\n * with additional metadata including the original issuer and a timelock period.\n * The CredentialType field is encoded as a composite string containing:\n * - \"AG-\" prefix (indicating copy credential)\n * - Original credential type\n * - Original issuer address\n * - Timelock period in years\n *\n * @param copyCredentialIssuerAddress - The XRPL address of the issuer created a XRPL Credential object related to idOS credential copy\n * @param accountAddress - The XRPL address of the account accepting the credential copy\n * @param originalCredentialIssuerAddress - The XRPL address of the issuer created a XRPL Credential object related to idOS original credential\n * @param credentialType - The human-readable idOScredential type (e.g., \"KYC\")\n * @param timelockYears - The number of years for the timelock period (must be non-negative integer)\n * @returns A properly formatted CredentialAcceptPayload object for copy credentials\n * @throws {Error} When timelockYears is not a non-negative integer\n *\n * @example\n * ```typescript\n * const payload = await CopyCredentialAcceptPayload(\n *   \"rCopyIssuerAddress123...\",\n *   \"rAccountAddress456...\",\n *   \"rOriginalIssuerAddress789...\",\n *   \"KYC\",\n *   2\n * );\n * // Result: {\n * //   TransactionType: \"CredentialAccept\",\n * //   Issuer: \"rCopyIssuerAddress123...\",\n * //   Account: \"rAccountAddress456...\",\n * //   CredentialType: \"41472D4B59432D...\" // Hex encoded \"AG-KYC-{originalIssuer}-2Y\"\n * // }\n * ```\n */\nexport async function CopyCredentialAcceptPayload(\n  copyCredentialIssuerAddress: string,\n  accountAddress: string,\n  originalCredentialIssuerAddress: string,\n  credentialType: string,\n  timelockYears: number,\n): Promise<CredentialAcceptPayload> {\n  // Validate that timelockYears is a non-negative integer\n  if (!Number.isInteger(timelockYears) || timelockYears < 0) {\n    throw new Error(\"timelockYears must be a non-negative integer\");\n  }\n\n  let decodeAccountID: typeof import(\"xrpl\").decodeAccountID;\n  try {\n    ({ decodeAccountID } = await import(\"xrpl\"));\n  } catch {\n    throw new Error(\n      'Missing optional peer dependency \"xrpl\". Install it to use CopyCredentialAcceptPayload.',\n    );\n  }\n\n  // Create a composite credential type string that includes:\n  // - \"AG-\" prefix (indicating this is a copy credential)\n  // - Original credential type\n  // - Original issuer Account ID (decoded from XRPL address format)\n  // - Timelock period in years\n  const type = Buffer.concat([\n    utf8Encode(\"AG\"),\n    utf8Encode(\"-\"),\n    utf8Encode(credentialType),\n    utf8Encode(\"-\"),\n    decodeAccountID(originalCredentialIssuerAddress),\n    utf8Encode(\"-\"),\n    utf8Encode(`${timelockYears}Y`),\n  ]);\n\n  return {\n    TransactionType: \"CredentialAccept\",\n    Issuer: copyCredentialIssuerAddress,\n    Account: accountAddress,\n    CredentialType: hexEncode(type),\n  };\n}\n","import type { Client, TxResponse, Wallet } from \"xrpl\";\n\nimport { hexEncode, utf8Encode } from \"@idos-network/utils/codecs\";\n\n/**\n * Parameters for creating an original credential on XRPL\n */\nexport type CreateCredentialForOriginalParams = {\n  /** Unique identifier for the idOS credential, like `741a9caf-ec53-42c7-aed6-519950dcded5` */\n  credId: string;\n  /** Type/category of the credential, like `KYC` */\n  credType: string;\n  /** XRPL address of the user receiving the credential, like `rPT1Sjq2YGrBMTttX4GZHjKu9dyf6bpAYe` */\n  userAddress: string;\n};\n\n/**\n * Parameters for creating a time-locked copy credential on XRPL\n */\nexport type CreateCredentialForCopyParams = {\n  /** Unique identifier for the idOS credential */\n  credId: string;\n  /** Type/category of the credential */\n  credType: string;\n  /** XRPL address of the user receiving the credential */\n  userAddress: string;\n  /** Number of years to lock the credential (must be non-negative integer) */\n  timelockYears: number;\n  /** XRPL address of the original credential issuer */\n  origCredIssuerAddress: string;\n};\n\n/**\n * Service class for creating credentials on the XRPL blockchain\n *\n * This service provides methods to create both original and copy credentials\n * on the XRPL. It handles connection management, transaction submission,\n * and proper encoding of credential data according to XRPL specifications.\n *\n * @example\n * ```typescript\n * const wallet = Wallet.fromSeed(\"s...\");\n * const xrplService = await XrplCredentialsCreate.init(\"wss://s.devnet.rippletest.net:51233\", wallet);\n *\n * // Create original credential\n * await xrplService.createCredentialForOriginal({\n *   credId: \"741a9caf-ec53-42c7-aed6-519950dcded5\",\n *   credType: \"KYC\",\n *   userAddress: \"rPT1Sjq2YGrBMTttX4GZHjKu9dyf6bpAYe\"\n * });\n * ```\n */\nexport class XrplCredentialsCreate {\n  readonly #client: Client;\n  readonly #wallet: Wallet;\n  readonly #xrpl: typeof import(\"xrpl\");\n\n  constructor(nodeUrl: string, wallet: Wallet, xrpl: typeof import(\"xrpl\")) {\n    this.#xrpl = xrpl;\n    this.#wallet = wallet;\n    this.#client = new this.#xrpl.Client(nodeUrl);\n  }\n\n  /**\n   * Creates a new XRPL credentials service instance.\n   *\n   * @param nodeUrl - The WebSocket URL of the XRPL node to connect to\n   * @param wallet  - The XRPL wallet to use for signing transactions\n   */\n  static async init(nodeUrl: string, wallet: Wallet): Promise<XrplCredentialsCreate> {\n    let xrpl: typeof import(\"xrpl\");\n\n    try {\n      xrpl = await import(\"xrpl\");\n    } catch {\n      throw new Error(\n        \"Missing optional peer dependency 'xrpl'. Install it to use XrplCredentialsCreate.\",\n      );\n    }\n\n    return new XrplCredentialsCreate(nodeUrl, wallet, xrpl);\n  }\n\n  /**\n   * Creates a credential on the XRPL that reflects an idOS original credential.\n   *\n   * This method creates a new credential with the specified type and assigns it to the given user.\n   * The credential type is encoded as a hex string, and the credential ID is encoded as a hex URI.\n   *\n   * @param params - Parameters for creating the original credential\n   * @returns Promise resolving to the XRPL transaction result\n   *\n   * @example\n   * ```typescript\n   * await xrplService.createCredentialForOriginal({\n   *   credId: \"741a9caf-ec53-42c7-aed6-519950dcded5\",\n   *   credType: \"KYC\",\n   *   userAddress: \"rPT1Sjq2YGrBMTttX4GZHjKu9dyf6bpAYe\"\n   * });\n   * ```\n   */\n  async createCredentialForOriginal(\n    params: CreateCredentialForOriginalParams,\n  ): Promise<TxResponse> {\n    const { credId, credType, userAddress } = params;\n\n    // Connect to the XRPL node\n    await this.#client.connect();\n\n    // Submit the credential creation transaction and wait for confirmation\n    const res = await this.#client.submitAndWait(\n      {\n        TransactionType: \"CredentialCreate\",\n        Account: this.#wallet.address,\n        Subject: userAddress,\n        // Encode credential type as hex string (required by XRPL)\n        CredentialType: hexEncode(utf8Encode(credType)),\n        // Encode credential ID as hex URI (required by XRPL)\n        URI: hexEncode(utf8Encode(credId)),\n      },\n      {\n        wallet: this.#wallet,\n      },\n    );\n\n    // Disconnect from the XRPL node\n    await this.#client.disconnect();\n\n    return res;\n  }\n\n  /**\n   * Creates a time-locked credential copy on the XRPL.\n   *\n   * This method creates a Credential object in XRPL that reflects an idOS credential copy.\n   * The credential type includes metadata about the original issuer and time-lock duration.\n   * The composite credential type follows the format: \"AG-{type}-{originalIssuer}-{timelock}Y\"\n   *\n   * @param params - Parameters for creating the time-locked credential copy\n   * @returns Promise resolving to the XRPL transaction result\n   *\n   * @throws {Error} When timelockYears is not a non-negative integer\n   *\n   * @example\n   * ```typescript\n   * const result = await xrplService.createCredentialForCopy({\n   *   credId: \"741a9caf-ec53-42c7-aed6-519950dcded5\",\n   *   credType: \"KYC\",\n   *   userAddress: \"rPT1Sjq2YGrBMTttX4GZHjKu9dyf6bpAYe\",\n   *   timelockYears: 5,\n   *   origCredIssuerAddress: \"rU9C67bZ3ZvjXaJYwYqMqjMq1o4ZbwK3YN\"\n   * });\n   * ```\n   */\n  async createCredentialForCopy(params: CreateCredentialForCopyParams): Promise<TxResponse> {\n    const { credId, credType, userAddress, timelockYears, origCredIssuerAddress } = params;\n\n    // Validate timelockYears is a non-negative integer\n    if (!Number.isInteger(timelockYears) || timelockYears < 0) {\n      throw new Error(\"timelockYears must be a non-negative integer\");\n    }\n\n    // Connect to the XRPL node\n    await this.#client.connect();\n\n    // Create composite credential type with metadata:\n    // Format: \"AG-{credType}-{originalIssuer}-{timelock}Y\"\n    const type = Buffer.concat([\n      utf8Encode(\"AG\"), // \"AG\" prefix for copy credentials\n      utf8Encode(\"-\"), // Separator\n      utf8Encode(credType), // Original credential type\n      utf8Encode(\"-\"), // Separator\n      this.#xrpl.decodeAccountID(origCredIssuerAddress), // Original issuer address (decoded)\n      utf8Encode(\"-\"), // Separator\n      utf8Encode(`${timelockYears}Y`), // Timelock period in years\n    ]);\n\n    // Submit the credential copy creation transaction and wait for confirmation\n    const res = await this.#client.submitAndWait(\n      {\n        TransactionType: \"CredentialCreate\",\n        Account: this.#wallet.address,\n        Subject: userAddress,\n        // Use the composite credential type with metadata\n        CredentialType: hexEncode(type),\n        // Encode credential ID as hex URI (required by XRPL)\n        URI: hexEncode(utf8Encode(credId)),\n      },\n      {\n        wallet: this.#wallet,\n      },\n    );\n\n    // Disconnect from the XRPL node\n    await this.#client.disconnect();\n\n    return res;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+CA,SAAgB,gCACd,eACA,gBACA,gBACyB;CAKzB,OAAO;EACL,iBAAiB;EACjB,QAAQ;EACR,SAAS;EACT,gBAN4B,UAAU,WAAW,cAAc,CAM3B;CACtC;AACF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsCA,eAAsB,4BACpB,6BACA,gBACA,iCACA,gBACA,eACkC;CAElC,IAAI,CAAC,OAAO,UAAU,aAAa,KAAK,gBAAgB,GACtD,MAAM,IAAI,MAAM,8CAA8C;CAGhE,IAAI;CACJ,IAAI;EACF,CAAC,CAAE,mBAAoB,MAAM,OAAO;CACtC,QAAQ;EACN,MAAM,IAAI,MACR,2FACF;CACF;CAiBA,OAAO;EACL,iBAAiB;EACjB,QAAQ;EACR,SAAS;EACT,gBAAgB,UAdL,OAAO,OAAO;GACzB,WAAW,IAAI;GACf,WAAW,GAAG;GACd,WAAW,cAAc;GACzB,WAAW,GAAG;GACd,gBAAgB,+BAA+B;GAC/C,WAAW,GAAG;GACd,WAAW,GAAG,cAAc,EAAE;EAChC,CAM+B,CAAC;CAChC;AACF;;;;;;;;;;;;;;;;;;;;;;;AC1FA,IAAa,wBAAb,MAAa,sBAAsB;CACjC;CACA;CACA;CAEA,YAAY,SAAiB,QAAgB,MAA6B;EACxE,KAAKE,QAAQ;EACb,KAAKD,UAAU;EACf,KAAKD,UAAU,IAAI,KAAKE,MAAM,OAAO,OAAO;CAC9C;;;;;;;CAQA,aAAa,KAAK,SAAiB,QAAgD;EACjF,IAAI;EAEJ,IAAI;GACF,OAAO,MAAM,OAAO;EACtB,QAAQ;GACN,MAAM,IAAI,MACR,mFACF;EACF;EAEA,OAAO,IAAI,sBAAsB,SAAS,QAAQ,IAAI;CACxD;;;;;;;;;;;;;;;;;;;CAoBA,MAAM,4BACJ,QACqB;EACrB,MAAM,EAAE,QAAQ,UAAU,gBAAgB;EAG1C,MAAM,KAAKF,QAAQ,QAAQ;EAG3B,MAAM,MAAM,MAAM,KAAKA,QAAQ,cAC7B;GACE,iBAAiB;GACjB,SAAS,KAAKC,QAAQ;GACtB,SAAS;GAET,gBAAgB,UAAU,WAAW,QAAQ,CAAC;GAE9C,KAAK,UAAU,WAAW,MAAM,CAAC;EACnC,GACA,EACE,QAAQ,KAAKA,QACf,CACF;EAGA,MAAM,KAAKD,QAAQ,WAAW;EAE9B,OAAO;CACT;;;;;;;;;;;;;;;;;;;;;;;;CAyBA,MAAM,wBAAwB,QAA4D;EACxF,MAAM,EAAE,QAAQ,UAAU,aAAa,eAAe,0BAA0B;EAGhF,IAAI,CAAC,OAAO,UAAU,aAAa,KAAK,gBAAgB,GACtD,MAAM,IAAI,MAAM,8CAA8C;EAIhE,MAAM,KAAKA,QAAQ,QAAQ;EAI3B,MAAM,OAAO,OAAO,OAAO;GACzB,WAAW,IAAI;GACf,WAAW,GAAG;GACd,WAAW,QAAQ;GACnB,WAAW,GAAG;GACd,KAAKE,MAAM,gBAAgB,qBAAqB;GAChD,WAAW,GAAG;GACd,WAAW,GAAG,cAAc,EAAE;EAChC,CAAC;EAGD,MAAM,MAAM,MAAM,KAAKF,QAAQ,cAC7B;GACE,iBAAiB;GACjB,SAAS,KAAKC,QAAQ;GACtB,SAAS;GAET,gBAAgB,UAAU,IAAI;GAE9B,KAAK,UAAU,WAAW,MAAM,CAAC;EACnC,GACA,EACE,QAAQ,KAAKA,QACf,CACF;EAGA,MAAM,KAAKD,QAAQ,WAAW;EAE9B,OAAO;CACT;AACF"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../src/xrpl-credentials/accept.ts","../../src/xrpl-credentials/create.ts"],"sourcesContent":["import { hexEncode, utf8Encode } from \"@idos-network/utils/codecs\";\n\n/**\n * Payload structure for XRPL CredentialAccept transaction\n *\n * This type defines the required fields for creating a credential acceptance\n * transaction on the XRP Ledger. The CredentialType field is automatically\n * encoded as a hex string from the UTF-8 representation of the credential type.\n */\nexport type CredentialAcceptPayload = {\n  /** Transaction type identifier - must be \"CredentialAccept\" */\n  TransactionType: \"CredentialAccept\";\n  /** The issuer's XRPL address who created the Credential object */\n  Issuer: string;\n  /** The account's XRPL address who is receiving the credential */\n  Account: string;\n  /** The type of credential being accepted (encoded as hex string) */\n  CredentialType: string;\n};\n\n/**\n * Creates a credential acceptance payload for XRPL transactions\n *\n * This function constructs a properly formatted payload for credential acceptance\n * transactions. The credential type is automatically encoded from UTF-8 to hex\n * format as required by XRPL specifications.\n *\n * @param issuerAddress - The XRPL address of the credential issuer\n * @param accountAddress - The XRPL address of the account accepting the credential\n * @param credentialType - The human-readable idOS credential type (e.g., \"KYC\")\n * @returns A properly formatted CredentialAcceptPayload object\n *\n * @example\n * ```typescript\n * const payload = OriginalCredentialAcceptPayload(\n *   \"rIssuerAddress123...\",\n *   \"rAccountAddress456...\",\n *   \"KYC\"\n * );\n * // Result: {\n * //   TransactionType: \"CredentialAccept\",\n * //   Issuer: \"rIssuerAddress123...\",\n * //   Account: \"rAccountAddress456...\",\n * //   CredentialType: \"4B5943\" // Hex encoded \"KYC\"\n * // }\n * ```\n */\nexport function OriginalCredentialAcceptPayload(\n  issuerAddress: string,\n  accountAddress: string,\n  credentialType: string,\n): CredentialAcceptPayload {\n  // Encode the credential type from UTF-8 to hex format\n  // This is required by XRPL for proper transaction processing\n  const encodedCredentialType = hexEncode(utf8Encode(credentialType));\n\n  return {\n    TransactionType: \"CredentialAccept\",\n    Issuer: issuerAddress,\n    Account: accountAddress,\n    CredentialType: encodedCredentialType,\n  };\n}\n\n/**\n * Creates a copy credential acceptance payload for XRPL transactions\n *\n * This function constructs a payload for accepting a copy of an existing credential\n * with additional metadata including the original issuer and a timelock period.\n * The CredentialType field is encoded as a composite string containing:\n * - \"AG-\" prefix (indicating copy credential)\n * - Original credential type\n * - Original issuer address\n * - Timelock period in years\n *\n * @param copyCredentialIssuerAddress - The XRPL address of the issuer created a XRPL Credential object related to idOS credential copy\n * @param accountAddress - The XRPL address of the account accepting the credential copy\n * @param originalCredentialIssuerAddress - The XRPL address of the issuer created a XRPL Credential object related to idOS original credential\n * @param credentialType - The human-readable idOScredential type (e.g., \"KYC\")\n * @param timelockYears - The number of years for the timelock period (must be non-negative integer)\n * @returns A properly formatted CredentialAcceptPayload object for copy credentials\n * @throws {Error} When timelockYears is not a non-negative integer\n *\n * @example\n * ```typescript\n * const payload = await CopyCredentialAcceptPayload(\n *   \"rCopyIssuerAddress123...\",\n *   \"rAccountAddress456...\",\n *   \"rOriginalIssuerAddress789...\",\n *   \"KYC\",\n *   2\n * );\n * // Result: {\n * //   TransactionType: \"CredentialAccept\",\n * //   Issuer: \"rCopyIssuerAddress123...\",\n * //   Account: \"rAccountAddress456...\",\n * //   CredentialType: \"41472D4B59432D...\" // Hex encoded \"AG-KYC-{originalIssuer}-2Y\"\n * // }\n * ```\n */\nexport async function CopyCredentialAcceptPayload(\n  copyCredentialIssuerAddress: string,\n  accountAddress: string,\n  originalCredentialIssuerAddress: string,\n  credentialType: string,\n  timelockYears: number,\n): Promise<CredentialAcceptPayload> {\n  // Validate that timelockYears is a non-negative integer\n  if (!Number.isInteger(timelockYears) || timelockYears < 0) {\n    throw new Error(\"timelockYears must be a non-negative integer\");\n  }\n\n  let decodeAccountID: typeof import(\"xrpl\").decodeAccountID;\n  try {\n    ({ decodeAccountID } = await import(\"xrpl\"));\n  } catch {\n    throw new Error(\n      'Missing optional peer dependency \"xrpl\". Install it to use CopyCredentialAcceptPayload.',\n    );\n  }\n\n  // Create a composite credential type string that includes:\n  // - \"AG-\" prefix (indicating this is a copy credential)\n  // - Original credential type\n  // - Original issuer Account ID (decoded from XRPL address format)\n  // - Timelock period in years\n  const type = Buffer.concat([\n    utf8Encode(\"AG\"),\n    utf8Encode(\"-\"),\n    utf8Encode(credentialType),\n    utf8Encode(\"-\"),\n    decodeAccountID(originalCredentialIssuerAddress),\n    utf8Encode(\"-\"),\n    utf8Encode(`${timelockYears}Y`),\n  ]);\n\n  return {\n    TransactionType: \"CredentialAccept\",\n    Issuer: copyCredentialIssuerAddress,\n    Account: accountAddress,\n    CredentialType: hexEncode(type),\n  };\n}\n","import type { Client, TxResponse, Wallet } from \"xrpl\";\n\nimport { hexEncode, utf8Encode } from \"@idos-network/utils/codecs\";\n\n/**\n * Parameters for creating an original credential on XRPL\n */\nexport type CreateCredentialForOriginalParams = {\n  /** Unique identifier for the idOS credential, like `741a9caf-ec53-42c7-aed6-519950dcded5` */\n  credId: string;\n  /** Type/category of the credential, like `KYC` */\n  credType: string;\n  /** XRPL address of the user receiving the credential, like `rPT1Sjq2YGrBMTttX4GZHjKu9dyf6bpAYe` */\n  userAddress: string;\n};\n\n/**\n * Parameters for creating a time-locked copy credential on XRPL\n */\nexport type CreateCredentialForCopyParams = {\n  /** Unique identifier for the idOS credential */\n  credId: string;\n  /** Type/category of the credential */\n  credType: string;\n  /** XRPL address of the user receiving the credential */\n  userAddress: string;\n  /** Number of years to lock the credential (must be non-negative integer) */\n  timelockYears: number;\n  /** XRPL address of the original credential issuer */\n  origCredIssuerAddress: string;\n};\n\n/**\n * Service class for creating credentials on the XRPL blockchain\n *\n * This service provides methods to create both original and copy credentials\n * on the XRPL. It handles connection management, transaction submission,\n * and proper encoding of credential data according to XRPL specifications.\n *\n * @example\n * ```typescript\n * const wallet = Wallet.fromSeed(\"s...\");\n * const xrplService = await XrplCredentialsCreate.init(\"wss://s.devnet.rippletest.net:51233\", wallet);\n *\n * // Create original credential\n * await xrplService.createCredentialForOriginal({\n *   credId: \"741a9caf-ec53-42c7-aed6-519950dcded5\",\n *   credType: \"KYC\",\n *   userAddress: \"rPT1Sjq2YGrBMTttX4GZHjKu9dyf6bpAYe\"\n * });\n * ```\n */\nexport class XrplCredentialsCreate {\n  readonly #client: Client;\n  readonly #wallet: Wallet;\n  readonly #xrpl: typeof import(\"xrpl\");\n\n  constructor(nodeUrl: string, wallet: Wallet, xrpl: typeof import(\"xrpl\")) {\n    this.#xrpl = xrpl;\n    this.#wallet = wallet;\n    this.#client = new this.#xrpl.Client(nodeUrl);\n  }\n\n  /**\n   * Creates a new XRPL credentials service instance.\n   *\n   * @param nodeUrl - The WebSocket URL of the XRPL node to connect to\n   * @param wallet  - The XRPL wallet to use for signing transactions\n   */\n  static async init(nodeUrl: string, wallet: Wallet): Promise<XrplCredentialsCreate> {\n    let xrpl: typeof import(\"xrpl\");\n\n    try {\n      xrpl = await import(\"xrpl\");\n    } catch {\n      throw new Error(\n        \"Missing optional peer dependency 'xrpl'. Install it to use XrplCredentialsCreate.\",\n      );\n    }\n\n    return new XrplCredentialsCreate(nodeUrl, wallet, xrpl);\n  }\n\n  /**\n   * Creates a credential on the XRPL that reflects an idOS original credential.\n   *\n   * This method creates a new credential with the specified type and assigns it to the given user.\n   * The credential type is encoded as a hex string, and the credential ID is encoded as a hex URI.\n   *\n   * @param params - Parameters for creating the original credential\n   * @returns Promise resolving to the XRPL transaction result\n   *\n   * @example\n   * ```typescript\n   * await xrplService.createCredentialForOriginal({\n   *   credId: \"741a9caf-ec53-42c7-aed6-519950dcded5\",\n   *   credType: \"KYC\",\n   *   userAddress: \"rPT1Sjq2YGrBMTttX4GZHjKu9dyf6bpAYe\"\n   * });\n   * ```\n   */\n  async createCredentialForOriginal(\n    params: CreateCredentialForOriginalParams,\n  ): Promise<TxResponse> {\n    const { credId, credType, userAddress } = params;\n\n    // Connect to the XRPL node\n    await this.#client.connect();\n\n    // Submit the credential creation transaction and wait for confirmation\n    const res = await this.#client.submitAndWait(\n      {\n        TransactionType: \"CredentialCreate\",\n        Account: this.#wallet.address,\n        Subject: userAddress,\n        // Encode credential type as hex string (required by XRPL)\n        CredentialType: hexEncode(utf8Encode(credType)),\n        // Encode credential ID as hex URI (required by XRPL)\n        URI: hexEncode(utf8Encode(credId)),\n      },\n      {\n        wallet: this.#wallet,\n      },\n    );\n\n    // Disconnect from the XRPL node\n    await this.#client.disconnect();\n\n    return res;\n  }\n\n  /**\n   * Creates a time-locked credential copy on the XRPL.\n   *\n   * This method creates a Credential object in XRPL that reflects an idOS credential copy.\n   * The credential type includes metadata about the original issuer and time-lock duration.\n   * The composite credential type follows the format: \"AG-{type}-{originalIssuer}-{timelock}Y\"\n   *\n   * @param params - Parameters for creating the time-locked credential copy\n   * @returns Promise resolving to the XRPL transaction result\n   *\n   * @throws {Error} When timelockYears is not a non-negative integer\n   *\n   * @example\n   * ```typescript\n   * const result = await xrplService.createCredentialForCopy({\n   *   credId: \"741a9caf-ec53-42c7-aed6-519950dcded5\",\n   *   credType: \"KYC\",\n   *   userAddress: \"rPT1Sjq2YGrBMTttX4GZHjKu9dyf6bpAYe\",\n   *   timelockYears: 5,\n   *   origCredIssuerAddress: \"rU9C67bZ3ZvjXaJYwYqMqjMq1o4ZbwK3YN\"\n   * });\n   * ```\n   */\n  async createCredentialForCopy(params: CreateCredentialForCopyParams): Promise<TxResponse> {\n    const { credId, credType, userAddress, timelockYears, origCredIssuerAddress } = params;\n\n    // Validate timelockYears is a non-negative integer\n    if (!Number.isInteger(timelockYears) || timelockYears < 0) {\n      throw new Error(\"timelockYears must be a non-negative integer\");\n    }\n\n    // Connect to the XRPL node\n    await this.#client.connect();\n\n    // Create composite credential type with metadata:\n    // Format: \"AG-{credType}-{originalIssuer}-{timelock}Y\"\n    const type = Buffer.concat([\n      utf8Encode(\"AG\"), // \"AG\" prefix for copy credentials\n      utf8Encode(\"-\"), // Separator\n      utf8Encode(credType), // Original credential type\n      utf8Encode(\"-\"), // Separator\n      this.#xrpl.decodeAccountID(origCredIssuerAddress), // Original issuer address (decoded)\n      utf8Encode(\"-\"), // Separator\n      utf8Encode(`${timelockYears}Y`), // Timelock period in years\n    ]);\n\n    // Submit the credential copy creation transaction and wait for confirmation\n    const res = await this.#client.submitAndWait(\n      {\n        TransactionType: \"CredentialCreate\",\n        Account: this.#wallet.address,\n        Subject: userAddress,\n        // Use the composite credential type with metadata\n        CredentialType: hexEncode(type),\n        // Encode credential ID as hex URI (required by XRPL)\n        URI: hexEncode(utf8Encode(credId)),\n      },\n      {\n        wallet: this.#wallet,\n      },\n    );\n\n    // Disconnect from the XRPL node\n    await this.#client.disconnect();\n\n    return res;\n  }\n}\n"],"mappings":"uEA+CA,SAAgB,EACd,EACA,EACA,EACyB,CAKzB,MAAO,CACL,gBAAiB,mBACjB,OAAQ,EACR,QAAS,EACT,eAN4B,EAAU,EAAW,CAAc,CAM3B,CACtC,CACF,CAsCA,eAAsB,EACpB,EACA,EACA,EACA,EACA,EACkC,CAElC,GAAI,CAAC,OAAO,UAAU,CAAa,GAAK,EAAgB,EACtD,MAAU,MAAM,8CAA8C,EAGhE,IAAI,EACJ,GAAI,EACD,oBAAsB,MAAM,OAAO,QACtC,MAAQ,CACN,MAAU,MACR,yFACF,CACF,CAOA,IAAM,EAAO,OAAO,OAAO,CACzB,EAAW,IAAI,EACf,EAAW,GAAG,EACd,EAAW,CAAc,EACzB,EAAW,GAAG,EACd,EAAgB,CAA+B,EAC/C,EAAW,GAAG,EACd,EAAW,GAAG,EAAc,EAAE,CAChC,CAAC,EAED,MAAO,CACL,gBAAiB,mBACjB,OAAQ,EACR,QAAS,EACT,eAAgB,EAAU,CAAI,CAChC,CACF,CC1FA,IAAa,EAAb,MAAa,CAAsB,CACjC,GACA,GACA,GAEA,YAAY,EAAiB,EAAgB,EAA6B,CACxE,KAAK,GAAQ,EACb,KAAK,GAAU,EACf,KAAK,GAAU,IAAI,KAAK,GAAM,OAAO,CAAO,CAC9C,CAQA,aAAa,KAAK,EAAiB,EAAgD,CACjF,IAAI,EAEJ,GAAI,CACF,EAAO,MAAM,OAAO,OACtB,MAAQ,CACN,MAAU,MACR,mFACF,CACF,CAEA,OAAO,IAAI,EAAsB,EAAS,EAAQ,CAAI,CACxD,CAoBA,MAAM,4BACJ,EACqB,CACrB,GAAM,CAAE,SAAQ,WAAU,eAAgB,EAG1C,MAAM,KAAK,GAAQ,QAAQ,EAG3B,IAAM,EAAM,MAAM,KAAK,GAAQ,cAC7B,CACE,gBAAiB,mBACjB,QAAS,KAAK,GAAQ,QACtB,QAAS,EAET,eAAgB,EAAU,EAAW,CAAQ,CAAC,EAE9C,IAAK,EAAU,EAAW,CAAM,CAAC,CACnC,EACA,CACE,OAAQ,KAAK,EACf,CACF,EAKA,OAFA,MAAM,KAAK,GAAQ,WAAW,EAEvB,CACT,CAyBA,MAAM,wBAAwB,EAA4D,CACxF,GAAM,CAAE,SAAQ,WAAU,cAAa,gBAAe,yBAA0B,EAGhF,GAAI,CAAC,OAAO,UAAU,CAAa,GAAK,EAAgB,EACtD,MAAU,MAAM,8CAA8C,EAIhE,MAAM,KAAK,GAAQ,QAAQ,EAI3B,IAAM,EAAO,OAAO,OAAO,CACzB,EAAW,IAAI,EACf,EAAW,GAAG,EACd,EAAW,CAAQ,EACnB,EAAW,GAAG,EACd,KAAK,GAAM,gBAAgB,CAAqB,EAChD,EAAW,GAAG,EACd,EAAW,GAAG,EAAc,EAAE,CAChC,CAAC,EAGK,EAAM,MAAM,KAAK,GAAQ,cAC7B,CACE,gBAAiB,mBACjB,QAAS,KAAK,GAAQ,QACtB,QAAS,EAET,eAAgB,EAAU,CAAI,EAE9B,IAAK,EAAU,EAAW,CAAM,CAAC,CACnC,EACA,CACE,OAAQ,KAAK,EACf,CACF,EAKA,OAFA,MAAM,KAAK,GAAQ,WAAW,EAEvB,CACT,CACF"}

package/package.json

@@ -1,11 +1,12 @@
 {
   "name": "@idos-network/kwil-infra",
-  "version": "1.5.0",
+  "version": "2.2.2",
   "description": "Infrastructure and wallets for idOS",
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "github:idos-network/idos-sdk-js"
+    "url": "git+https://github.com/idos-network/idos-sdk-js.git",
+    "directory": "packages/kwil-infra"
   },
   "type": "module",
   "sideEffects": false,
@@ -42,20 +43,20 @@
     "access": "public"
   },
   "dependencies": {
-    "@idos-network/kwil-js": "0.1.5",
+    "@idos-network/kwil-js": "0.2.1",
+    "@idos-network/utils": "2.2.2",
     "tiny-invariant": "^1.3.3",
     "tweetnacl": "^1.0.3",
-    "zod": "4.4.3",
-    "@idos-network/utils": "1.5.0"
+    "zod": "4.5.4"
   },
   "devDependencies": {
     "@gemwallet/api": "^3.8.0",
     "@types/node": "25.9.5",
-    "@vitest/coverage-v8": "4.1.10",
+    "@vitest/coverage-v8": "4.1.11",
     "jsdom": "^22.1.0",
-    "tsdown": "^0.22.14",
+    "tsdown": "^0.23.0",
     "typescript": "^5.9.3",
-    "vitest": "4.1.10",
+    "vitest": "4.1.11",
     "xumm": "^1.8.0"
   },
   "peerDependencies": {

package/src/actions/actions.test.ts

@@ -0,0 +1,189 @@
+import { describe, expect, it } from "vitest";
+
+import {
+  addWalletMessage,
+  CreatePreliminaryCredentialsByDwgInputSchema,
+  getUser,
+  SharePreliminaryCredentialInputSchema,
+  UpsertWalletAsInserterInputSchema,
+  walletTypeSchema,
+} from "./actions";
+
+const validPreliminaryCredentialsByDwgInput = {
+  request_id: "00000000-0000-4000-8000-000000000001",
+  issuer_auth_public_key: "issuer-auth-public-key",
+  original_encryptor_public_key: "original-encryptor-public-key",
+  original_id: "00000000-0000-4000-8000-000000000002",
+  original_content_uri: "ipfs://bafkreiepinbumzepnoln7co5vea4kf3lcctnqolb3u6bvsellgznymt2uq",
+  original_content_size: 123,
+  original_public_notes: "{}",
+  original_public_notes_signature: "original-public-notes-signature",
+  original_broader_signature: "original-broader-signature",
+  copy_encryptor_public_key: "copy-encryptor-public-key",
+  copy_id: "00000000-0000-4000-8000-000000000003",
+  copy_content_uri: "ipfs://bafkreihdwdcefgh4dqkjv67uzcmw7ojee6xedzdetojuzjevtenxquvyku",
+  copy_content_size: 456,
+  copy_public_notes_signature: "copy-public-notes-signature",
+  copy_broader_signature: "copy-broader-signature",
+  content_hash: "content-hash",
+  dwg_owner: "dwg-owner",
+  dwg_grantee: "dwg-grantee",
+  dwg_issuer_public_key: "dwg-issuer-public-key",
+  dwg_id: "00000000-0000-4000-8000-000000000004",
+  dwg_access_grant_timelock: "2026-01-01T00:00:00Z",
+  dwg_not_before: "2026-01-01T00:00:00Z",
+  dwg_not_after: "2026-12-31T23:59:59Z",
+  dwg_signature: "dwg-signature",
+};
+
+const validShareCredentialInput = {
+  request_id: "00000000-0000-4000-8000-000000000005",
+  copy_id: "00000000-0000-4000-8000-000000000006",
+  original_id: "00000000-0000-4000-8000-000000000007",
+  public_notes: "",
+  public_notes_signature: "public-notes-signature",
+  broader_signature: "broader-signature",
+  content_uri: "ipfs://bafkreihdwdcefgh4dqkjv67uzcmw7ojee6xedzdetojuzjevtenxquvyku",
+  content_size: 456,
+  content_hash: "content-hash",
+  encryptor_public_key: "encryptor-public-key",
+  issuer_auth_public_key: "issuer-auth-public-key",
+  grantee_wallet_identifier: "grantee-wallet-identifier",
+  locked_until: 0,
+};
+
+describe("CreatePreliminaryCredentialsByDwgInputSchema", () => {
+  it("accepts IPFS and UKYC content URIs and positive integer sizes", () => {
+    expect(() =>
+      CreatePreliminaryCredentialsByDwgInputSchema.parse(validPreliminaryCredentialsByDwgInput),
+    ).not.toThrow();
+    expect(() =>
+      CreatePreliminaryCredentialsByDwgInputSchema.parse({
+        ...validPreliminaryCredentialsByDwgInput,
+        original_content_uri: "ukyc://original",
+        copy_content_uri: "ukyc://copy",
+      }),
+    ).not.toThrow();
+  });
+
+  it.each([
+    ["https URI", { original_content_uri: "https://example.com/blob" }],
+    [
+      "bare CID",
+      { copy_content_uri: "bafkreihdwdcefgh4dqkjv67uzcmw7ojee6xedzdetojuzjevtenxquvyku" },
+    ],
+  ])("rejects non-blob content URI (%s)", (_label, override) => {
+    expect(() =>
+      CreatePreliminaryCredentialsByDwgInputSchema.parse({
+        ...validPreliminaryCredentialsByDwgInput,
+        ...override,
+      }),
+    ).toThrow();
+  });
+
+  it.each([
+    ["zero", { original_content_size: 0 }],
+    ["negative", { original_content_size: -1 }],
+    ["non-integer", { copy_content_size: 1.5 }],
+  ])("rejects %s content size", (_label, override) => {
+    expect(() =>
+      CreatePreliminaryCredentialsByDwgInputSchema.parse({
+        ...validPreliminaryCredentialsByDwgInput,
+        ...override,
+      }),
+    ).toThrow();
+  });
+});
+
+describe("SharePreliminaryCredentialInputSchema", () => {
+  it("accepts IPFS and UKYC content URIs and positive integer sizes", () => {
+    expect(() =>
+      SharePreliminaryCredentialInputSchema.parse(validShareCredentialInput),
+    ).not.toThrow();
+    expect(() =>
+      SharePreliminaryCredentialInputSchema.parse({
+        ...validShareCredentialInput,
+        content_uri: "ukyc://copy",
+      }),
+    ).not.toThrow();
+  });
+
+  it("rejects non-blob content URIs", () => {
+    expect(() =>
+      SharePreliminaryCredentialInputSchema.parse({
+        ...validShareCredentialInput,
+        content_uri: "https://example.com/blob",
+      }),
+    ).toThrow();
+  });
+
+  it.each([
+    ["zero", 0],
+    ["negative", -1],
+    ["non-integer", 1.5],
+  ])("rejects %s content size", (_label, content_size) => {
+    expect(() =>
+      SharePreliminaryCredentialInputSchema.parse({
+        ...validShareCredentialInput,
+        content_size,
+      }),
+    ).toThrow();
+  });
+});
+
+describe("MM wallet type schemas", () => {
+  it("accepts MM as a wallet type", () => {
+    expect(walletTypeSchema.parse("MM")).toBe("MM");
+  });
+
+  it("accepts MM wallets created by trusted inserters", () => {
+    expect(() =>
+      UpsertWalletAsInserterInputSchema.parse({
+        id: "00000000-0000-4000-8000-000000000008",
+        user_id: "00000000-0000-4000-8000-000000000009",
+        address: "mm-signing-public-key",
+        public_key: "mm-signing-public-key",
+        wallet_type: "MM",
+        signature: "",
+      }),
+    ).not.toThrow();
+  });
+});
+
+const addWalletMessageInput = {
+  address: "mm-signing-public-key",
+  wallet_type: "MM" as const,
+  user_id: "00000000-0000-4000-8000-000000000001",
+  not_before: "2025-02-13T11:22:06Z",
+  not_after: "2025-02-13T11:37:06Z",
+};
+
+describe("addWalletMessage", () => {
+  it("returns the validated first row", async () => {
+    await expect(
+      addWalletMessage(
+        { call: async () => [{ message: "sign this" }] } as never,
+        addWalletMessageInput,
+      ),
+    ).resolves.toEqual({ message: "sign this" });
+  });
+
+  it("rejects an empty or missing result", async () => {
+    await expect(
+      addWalletMessage({ call: async () => [] } as never, addWalletMessageInput),
+    ).rejects.toThrow();
+    await expect(
+      addWalletMessage({ call: async () => undefined } as never, addWalletMessageInput),
+    ).rejects.toThrow();
+  });
+});
+
+describe("getUser", () => {
+  it("throws an explicit not-found error when the view is empty", async () => {
+    await expect(
+      getUser({
+        call: async () => [],
+      } as never),
+    ).rejects.toThrow("get_user returned no rows");
+  });
+});