@idos-network/kwil-infra 1.5.0 → 2.2.2

package/src/actions/actions.ts

@@ -3,20 +3,33 @@ import * as z from "zod";
 
 import type { KwilActionClient } from "../";
 
+// Any changes you make will be overwritten.
 // This file is generated by the generator. Do not edit it manually.
+// WARNING:
 export const DataType: typeof Utils.DataType = Utils.DataType;
-export const WALLET_TYPES = ["EVM", "NEAR", "XRPL", "Stellar", "FaceSign"] as const;
+export const WALLET_TYPES = ["EVM", "NEAR", "XRPL", "Stellar", "FaceSign", "MM"] as const;
 
 export type WalletType = (typeof WALLET_TYPES)[number];
 
 export const walletTypeSchema: z.ZodType<WalletType> = z.enum(WALLET_TYPES);
-export const ENCRYPTION_PASSWORD_STORES = ["user", "mpc"] as const;
+export const ENCRYPTION_PASSWORD_STORES = ["user", "mpc", "mm"] as const;
 
 export type EncryptionPasswordStore = (typeof ENCRYPTION_PASSWORD_STORES)[number];
 
 export const encryptionPasswordStoreSchema: z.ZodType<EncryptionPasswordStore> = z.enum(
   ENCRYPTION_PASSWORD_STORES,
 );
+const IPFS_URI_PREFIX = "ipfs://",
+  UKYC_URI_PREFIX = "ukyc://";
+const blobContentUriSchema = z
+  .string()
+  .refine(
+    (value) => value.startsWith(IPFS_URI_PREFIX) || value.startsWith(UKYC_URI_PREFIX),
+    `content_uri must start with ${IPFS_URI_PREFIX} or ${UKYC_URI_PREFIX}`,
+  );
+
+const contentSizeSchema = z.number().int().positive();
+const rfc3339DateTimeSchema = z.iso.datetime({ precision: 0 });
 
 export type ActionSchemaElement = {
   name: string;
@@ -24,38 +37,6 @@ export type ActionSchemaElement = {
 };
 
 export const actionSchema: Record<string, ActionSchemaElement[]> = {
-  add_inserter_as_owner: [
-    {
-      name: "id",
-      type: DataType.Uuid,
-    },
-    {
-      name: "name",
-      type: DataType.Text,
-    },
-  ],
-  delete_inserter_as_owner: [
-    {
-      name: "id",
-      type: DataType.Uuid,
-    },
-  ],
-  add_delegate_as_owner: [
-    {
-      name: "address",
-      type: DataType.Text,
-    },
-    {
-      name: "inserter_id",
-      type: DataType.Uuid,
-    },
-  ],
-  delete_delegate_as_owner: [
-    {
-      name: "address",
-      type: DataType.Text,
-    },
-  ],
   add_user_as_inserter: [
     {
       name: "id",
@@ -113,25 +94,21 @@ export const actionSchema: Record<string, ActionSchemaElement[]> = {
       type: DataType.Text,
     },
     {
-      name: "message",
+      name: "not_before",
       type: DataType.Text,
     },
     {
-      name: "signature",
+      name: "not_after",
       type: DataType.Text,
     },
-  ],
-  add_wallet: [
-    {
-      name: "id",
-      type: DataType.Uuid,
-    },
     {
-      name: "address",
+      name: "signature",
       type: DataType.Text,
     },
+  ],
+  add_wallet_message: [
     {
-      name: "public_key",
+      name: "address",
       type: DataType.Text,
     },
     {
@@ -139,101 +116,84 @@ export const actionSchema: Record<string, ActionSchemaElement[]> = {
       type: DataType.Text,
     },
     {
-      name: "message",
-      type: DataType.Text,
+      name: "user_id",
+      type: DataType.Uuid,
     },
     {
-      name: "signature",
+      name: "not_before",
       type: DataType.Text,
     },
-  ],
-  get_wallets: [],
-  remove_wallet: [
     {
-      name: "id",
-      type: DataType.Uuid,
+      name: "not_after",
+      type: DataType.Text,
     },
   ],
-  upsert_credential_as_inserter: [
+  add_wallet: [
     {
       name: "id",
       type: DataType.Uuid,
     },
     {
-      name: "user_id",
-      type: DataType.Uuid,
-    },
-    {
-      name: "issuer_auth_public_key",
+      name: "address",
       type: DataType.Text,
     },
     {
-      name: "encryptor_public_key",
+      name: "public_key",
       type: DataType.Text,
     },
     {
-      name: "content",
+      name: "wallet_type",
       type: DataType.Text,
     },
     {
-      name: "public_notes",
+      name: "not_before",
       type: DataType.Text,
     },
     {
-      name: "public_notes_signature",
+      name: "not_after",
       type: DataType.Text,
     },
     {
-      name: "broader_signature",
+      name: "signature",
       type: DataType.Text,
     },
   ],
-  add_credential: [
+  get_wallets: [],
+  remove_wallet: [
     {
       name: "id",
       type: DataType.Uuid,
     },
+  ],
+  create_preliminary_credential: [
     {
-      name: "issuer_auth_public_key",
-      type: DataType.Text,
-    },
-    {
-      name: "encryptor_public_key",
-      type: DataType.Text,
+      name: "request_id",
+      type: DataType.Uuid,
     },
     {
-      name: "content",
-      type: DataType.Text,
+      name: "credential_id",
+      type: DataType.Uuid,
     },
     {
-      name: "public_notes",
+      name: "issuer_auth_public_key",
       type: DataType.Text,
     },
     {
-      name: "public_notes_signature",
+      name: "encryptor_public_key",
       type: DataType.Text,
     },
     {
-      name: "broader_signature",
+      name: "content_uri",
       type: DataType.Text,
     },
-  ],
-  get_credentials: [],
-  get_credentials_shared_by_user: [
     {
-      name: "user_id",
-      type: DataType.Uuid,
+      name: "content_size",
+      type: DataType.Int,
     },
     {
-      name: "original_issuer_auth_public_key",
+      name: "content_hash",
       type: DataType.Text,
     },
-  ],
-  edit_credential: [
-    {
-      name: "id",
-      type: DataType.Uuid,
-    },
     {
       name: "public_notes",
       type: DataType.Text,
@@ -246,16 +206,15 @@ export const actionSchema: Record<string, ActionSchemaElement[]> = {
       name: "broader_signature",
       type: DataType.Text,
     },
+  ],
+  get_credentials: [],
+  get_credentials_shared_by_user: [
     {
-      name: "content",
-      type: DataType.Text,
-    },
-    {
-      name: "encryptor_public_key",
-      type: DataType.Text,
+      name: "user_id",
+      type: DataType.Uuid,
     },
     {
-      name: "issuer_auth_public_key",
+      name: "original_issuer_auth_public_key",
       type: DataType.Text,
     },
   ],
@@ -281,13 +240,17 @@ export const actionSchema: Record<string, ActionSchemaElement[]> = {
       type: DataType.Uuid,
     },
   ],
-  share_credential: [
+  share_preliminary_credential: [
     {
-      name: "id",
+      name: "request_id",
+      type: DataType.Uuid,
+    },
+    {
+      name: "copy_id",
       type: DataType.Uuid,
     },
     {
-      name: "original_credential_id",
+      name: "original_id",
       type: DataType.Uuid,
     },
     {
@@ -303,9 +266,13 @@ export const actionSchema: Record<string, ActionSchemaElement[]> = {
       type: DataType.Text,
     },
     {
-      name: "content",
+      name: "content_uri",
       type: DataType.Text,
     },
+    {
+      name: "content_size",
+      type: DataType.Int,
+    },
     {
       name: "content_hash",
       type: DataType.Text,
@@ -327,7 +294,11 @@ export const actionSchema: Record<string, ActionSchemaElement[]> = {
       type: DataType.Int,
     },
   ],
-  create_credentials_by_dwg: [
+  create_preliminary_credentials_by_dwg: [
+    {
+      name: "request_id",
+      type: DataType.Uuid,
+    },
     {
       name: "issuer_auth_public_key",
       type: DataType.Text,
@@ -337,13 +308,17 @@ export const actionSchema: Record<string, ActionSchemaElement[]> = {
       type: DataType.Text,
     },
     {
-      name: "original_credential_id",
+      name: "original_id",
       type: DataType.Uuid,
     },
     {
-      name: "original_content",
+      name: "original_content_uri",
       type: DataType.Text,
     },
+    {
+      name: "original_content_size",
+      type: DataType.Int,
+    },
     {
       name: "original_public_notes",
       type: DataType.Text,
@@ -361,13 +336,17 @@ export const actionSchema: Record<string, ActionSchemaElement[]> = {
       type: DataType.Text,
     },
     {
-      name: "copy_credential_id",
+      name: "copy_id",
       type: DataType.Uuid,
     },
     {
-      name: "copy_content",
+      name: "copy_content_uri",
       type: DataType.Text,
     },
+    {
+      name: "copy_content_size",
+      type: DataType.Int,
+    },
     {
       name: "copy_public_notes_signature",
       type: DataType.Text,
@@ -571,61 +550,31 @@ export const actionSchema: Record<string, ActionSchemaElement[]> = {
       type: DataType.Uuid,
     },
   ],
-  dag_message: [
-    {
-      name: "dag_owner_wallet_identifier",
-      type: DataType.Text,
-    },
-    {
-      name: "dag_grantee_wallet_identifier",
-      type: DataType.Text,
-    },
+  get_access_grants_for_credential: [
     {
-      name: "dag_data_id",
+      name: "credential_id",
       type: DataType.Uuid,
     },
-    {
-      name: "dag_locked_until",
-      type: DataType.Int,
-    },
-    {
-      name: "dag_content_hash",
-      type: DataType.Text,
-    },
   ],
-  create_ag_by_dag_for_copy: [
-    {
-      name: "dag_owner_wallet_identifier",
-      type: DataType.Text,
-    },
-    {
-      name: "dag_grantee_wallet_identifier",
-      type: DataType.Text,
-    },
-    {
-      name: "dag_data_id",
-      type: DataType.Uuid,
-    },
-    {
-      name: "dag_locked_until",
-      type: DataType.Int,
-    },
+  has_profile: [
     {
-      name: "dag_content_hash",
+      name: "address",
       type: DataType.Text,
     },
+  ],
+  set_caller_payer: [
     {
-      name: "dag_signature",
+      name: "address",
       type: DataType.Text,
     },
   ],
-  get_access_grants_for_credential: [
+  check_caller_payer: [
     {
-      name: "credential_id",
-      type: DataType.Uuid,
+      name: "address",
+      type: DataType.Text,
     },
   ],
-  has_profile: [
+  unset_caller_payer: [
     {
       name: "address",
       type: DataType.Text,
@@ -646,6 +595,10 @@ export const actionSchema: Record<string, ActionSchemaElement[]> = {
       name: "token",
       type: DataType.Text,
     },
+    {
+      name: "minimum_balance",
+      type: DataType.Int,
+    },
   ],
   request_withdrawal: [
     {
@@ -684,91 +637,6 @@ export const actionSchema: Record<string, ActionSchemaElement[]> = {
     },
   ],
 };
-export const AddInserterAsOwnerInputSchema: z.ZodObject<{
-  id: z.ZodUUID;
-  name: z.ZodString;
-}> = z.object({
-  id: z.uuid(),
-  name: z.string(),
-});
-
-export type AddInserterAsOwnerInput = z.infer<typeof AddInserterAsOwnerInputSchema>;
-
-/**  INSERTER AND DELEGATE ACTIONS */
-export async function addInserterAsOwner(
-  kwilClient: KwilActionClient,
-  params: AddInserterAsOwnerInput,
-): Promise<void> {
-  const inputs = AddInserterAsOwnerInputSchema.parse(params);
-  await kwilClient.execute({
-    name: "add_inserter_as_owner",
-    inputs,
-    description: "Add inserter as owner",
-  });
-}
-
-export const DeleteInserterAsOwnerInputSchema: z.ZodObject<{
-  id: z.ZodUUID;
-}> = z.object({
-  id: z.uuid(),
-});
-
-export type DeleteInserterAsOwnerInput = z.infer<typeof DeleteInserterAsOwnerInputSchema>;
-
-export async function deleteInserterAsOwner(
-  kwilClient: KwilActionClient,
-  params: DeleteInserterAsOwnerInput,
-): Promise<void> {
-  const inputs = DeleteInserterAsOwnerInputSchema.parse(params);
-  await kwilClient.execute({
-    name: "delete_inserter_as_owner",
-    inputs,
-    description: "Delete inserter as owner",
-  });
-}
-
-export const AddDelegateAsOwnerInputSchema: z.ZodObject<{
-  address: z.ZodString;
-  inserter_id: z.ZodUUID;
-}> = z.object({
-  address: z.string(),
-  inserter_id: z.uuid(),
-});
-
-export type AddDelegateAsOwnerInput = z.infer<typeof AddDelegateAsOwnerInputSchema>;
-
-export async function addDelegateAsOwner(
-  kwilClient: KwilActionClient,
-  params: AddDelegateAsOwnerInput,
-): Promise<void> {
-  const inputs = AddDelegateAsOwnerInputSchema.parse(params);
-  await kwilClient.execute({
-    name: "add_delegate_as_owner",
-    inputs,
-    description: "Add a delegate as owner",
-  });
-}
-
-export const DeleteDelegateAsOwnerInputSchema: z.ZodObject<{
-  address: z.ZodString;
-}> = z.object({
-  address: z.string(),
-});
-
-export type DeleteDelegateAsOwnerInput = z.infer<typeof DeleteDelegateAsOwnerInputSchema>;
-
-export async function deleteDelegateAsOwner(
-  kwilClient: KwilActionClient,
-  params: DeleteDelegateAsOwnerInput,
-): Promise<void> {
-  const inputs = DeleteDelegateAsOwnerInputSchema.parse(params);
-  await kwilClient.execute({
-    name: "delete_delegate_as_owner",
-    inputs,
-    description: "Delete a delegate from idOS",
-  });
-}
-
 export const AddUserAsInserterInputSchema: z.ZodObject<{
   id: z.ZodUUID;
   recipient_encryption_public_key: z.ZodString;
@@ -837,7 +705,10 @@ export async function getUser(kwilClient: KwilActionClient): Promise<GetUserOutp
       name: "get_user",
       inputs: {},
     })
-    .then((result) => result[0]);
+    .then((result) => {
+      if (!result[0]) throw new Error("get_user returned no rows");
+      return result[0];
+    });
 }
 
 export const GetUserAsInserterInputSchema: z.ZodObject<{
@@ -879,19 +750,30 @@ export const UpsertWalletAsInserterInputSchema: z.ZodObject<{
   id: z.ZodUUID;
   user_id: z.ZodUUID;
   address: z.ZodString;
-  public_key: z.ZodNullable<z.ZodString>;
+  public_key: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   wallet_type: z.ZodType<WalletType>;
-  message: z.ZodString;
+  not_before: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
+  not_after: z.ZodOptional<z.ZodNullable<z.ZodISODateTime>>;
   signature: z.ZodString;
-}> = z.object({
-  id: z.uuid(),
-  user_id: z.uuid(),
-  address: z.string(),
-  public_key: z.string().nullable(),
-  wallet_type: walletTypeSchema,
-  message: z.string(),
-  signature: z.string(),
-});
+}> = z
+  .object({
+    id: z.uuid(),
+    user_id: z.uuid(),
+    address: z.string(),
+    public_key: z.string().nullish(),
+    wallet_type: walletTypeSchema,
+    not_before: rfc3339DateTimeSchema.nullish(),
+    not_after: rfc3339DateTimeSchema.nullish(),
+    signature: z.string(),
+  })
+  .refine((v) => (v.wallet_type === "MM") === (v.not_before == null), {
+    path: ["not_before"],
+    message: "not_before must be null when wallet_type is MM, and set otherwise",
+  })
+  .refine((v) => (v.wallet_type === "MM") === (v.not_after == null), {
+    path: ["not_after"],
+    message: "not_after must be null when wallet_type is MM, and set otherwise",
+  });
 
 export type UpsertWalletAsInserterInput = z.infer<typeof UpsertWalletAsInserterInputSchema>;
 
@@ -908,19 +790,61 @@ export async function upsertWalletAsInserter(
   });
 }
 
+export const AddWalletMessageInputSchema: z.ZodObject<{
+  address: z.ZodString;
+  wallet_type: z.ZodType<WalletType>;
+  user_id: z.ZodUUID;
+  not_before: z.ZodISODateTime;
+  not_after: z.ZodISODateTime;
+}> = z.object({
+  address: z.string(),
+  wallet_type: walletTypeSchema,
+  user_id: z.uuid(),
+  not_before: rfc3339DateTimeSchema,
+  not_after: rfc3339DateTimeSchema,
+});
+
+export type AddWalletMessageInput = z.infer<typeof AddWalletMessageInputSchema>;
+
+export const AddWalletMessageOutputSchema: z.ZodObject<{
+  message: z.ZodString;
+}> = z.object({
+  message: z.string(),
+});
+
+export type AddWalletMessageOutput = z.infer<typeof AddWalletMessageOutputSchema>;
+
+export async function addWalletMessage(
+  kwilClient: KwilActionClient,
+  params: AddWalletMessageInput,
+): Promise<AddWalletMessageOutput> {
+  const inputs = AddWalletMessageInputSchema.parse(params);
+  return await kwilClient
+    .call<AddWalletMessageOutput[]>({
+      name: "add_wallet_message",
+      inputs,
+    })
+    .then((result) => {
+      if (!result[0]) throw new Error("add_wallet_message returned no rows");
+      return result[0];
+    });
+}
+
 export const AddWalletInputSchema: z.ZodObject<{
   id: z.ZodUUID;
   address: z.ZodString;
-  public_key: z.ZodNullable<z.ZodString>;
+  public_key: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   wallet_type: z.ZodType<WalletType>;
-  message: z.ZodString;
+  not_before: z.ZodISODateTime;
+  not_after: z.ZodISODateTime;
   signature: z.ZodString;
 }> = z.object({
   id: z.uuid(),
   address: z.string(),
-  public_key: z.string().nullable(),
+  public_key: z.string().nullish(),
   wallet_type: walletTypeSchema,
-  message: z.string(),
+  not_before: rfc3339DateTimeSchema,
+  not_after: rfc3339DateTimeSchema,
   signature: z.string(),
 });
 
@@ -987,74 +911,44 @@ export async function removeWallet(
   });
 }
 
-export const UpsertCredentialAsInserterInputSchema: z.ZodObject<{
-  id: z.ZodUUID;
-  user_id: z.ZodUUID;
-  issuer_auth_public_key: z.ZodString;
-  encryptor_public_key: z.ZodString;
-  content: z.ZodString;
-  public_notes: z.ZodString;
-  public_notes_signature: z.ZodString;
-  broader_signature: z.ZodString;
-}> = z.object({
-  id: z.uuid(),
-  user_id: z.uuid(),
-  issuer_auth_public_key: z.string(),
-  encryptor_public_key: z.string(),
-  content: z.string(),
-  public_notes: z.string(),
-  public_notes_signature: z.string(),
-  broader_signature: z.string(),
-});
-
-export type UpsertCredentialAsInserterInput = z.infer<typeof UpsertCredentialAsInserterInputSchema>;
-
-/**
- *  CREDENTIAL ACTIONS
- *  throw an error if not authorized
- */
-export async function upsertCredentialAsInserter(
-  kwilClient: KwilActionClient,
-  params: UpsertCredentialAsInserterInput,
-): Promise<void> {
-  const inputs = UpsertCredentialAsInserterInputSchema.parse(params);
-  await kwilClient.execute({
-    name: "upsert_credential_as_inserter",
-    inputs,
-    description:
-      "Add or update a credential in idOS on behalf of a user by permissioned profile creator (inserter) ",
-  });
-}
-
-export const AddCredentialInputSchema: z.ZodObject<{
-  id: z.ZodUUID;
+export const CreatePreliminaryCredentialInputSchema: z.ZodObject<{
+  request_id: z.ZodUUID;
+  credential_id: z.ZodUUID;
   issuer_auth_public_key: z.ZodString;
   encryptor_public_key: z.ZodString;
-  content: z.ZodString;
+  content_uri: z.ZodString;
+  content_size: z.ZodNumber;
+  content_hash: z.ZodString;
   public_notes: z.ZodString;
   public_notes_signature: z.ZodString;
   broader_signature: z.ZodString;
 }> = z.object({
-  id: z.uuid(),
+  request_id: z.uuid(),
+  credential_id: z.uuid(),
   issuer_auth_public_key: z.string(),
   encryptor_public_key: z.string(),
-  content: z.string(),
+  content_uri: blobContentUriSchema,
+  content_size: contentSizeSchema,
+  content_hash: z.string(),
   public_notes: z.string(),
   public_notes_signature: z.string(),
   broader_signature: z.string(),
 });
 
-export type AddCredentialInput = z.infer<typeof AddCredentialInputSchema>;
+export type CreatePreliminaryCredentialInput = z.infer<
+  typeof CreatePreliminaryCredentialInputSchema
+>;
 
-export async function addCredential(
+/**  CREDENTIAL ACTIONS */
+export async function createPreliminaryCredential(
   kwilClient: KwilActionClient,
-  params: AddCredentialInput,
+  params: CreatePreliminaryCredentialInput,
 ): Promise<void> {
-  const inputs = AddCredentialInputSchema.parse(params);
+  const inputs = CreatePreliminaryCredentialInputSchema.parse(params);
   await kwilClient.execute({
-    name: "add_credential",
+    name: "create_preliminary_credential",
     inputs,
-    description: "Add a new credential",
+    description: "Create a new preliminary credential",
   });
 }
 
@@ -1062,15 +956,21 @@ export const GetCredentialsOutputSchema: z.ZodObject<{
   id: z.ZodUUID;
   user_id: z.ZodUUID;
   public_notes: z.ZodString;
+  content_uri: z.ZodNullable<z.ZodString>;
+  content_size: z.ZodNullable<z.ZodNumber>;
   issuer_auth_public_key: z.ZodString;
-  inserter: z.ZodNullable<z.ZodString>;
+  inserter_type: z.ZodNullable<z.ZodString>;
+  inserter_id: z.ZodNullable<z.ZodString>;
   original_id: z.ZodNullable<z.ZodUUID>;
 }> = z.object({
   id: z.uuid(),
   user_id: z.uuid(),
   public_notes: z.string(),
+  content_uri: z.string().nullable(),
+  content_size: z.number().nullable(),
   issuer_auth_public_key: z.string(),
-  inserter: z.string().nullable(),
+  inserter_type: z.string().nullable(),
+  inserter_id: z.string().nullable(),
   original_id: z.uuid().nullable(),
 });
 
@@ -1087,10 +987,10 @@ export async function getCredentials(
 
 export const GetCredentialsSharedByUserInputSchema: z.ZodObject<{
   user_id: z.ZodUUID;
-  original_issuer_auth_public_key: z.ZodNullable<z.ZodString>;
+  original_issuer_auth_public_key: z.ZodOptional<z.ZodNullable<z.ZodString>>;
 }> = z.object({
   user_id: z.uuid(),
-  original_issuer_auth_public_key: z.string().nullable(),
+  original_issuer_auth_public_key: z.string().nullish(),
 });
 
 export type GetCredentialsSharedByUserInput = z.infer<typeof GetCredentialsSharedByUserInputSchema>;
@@ -1101,7 +1001,8 @@ export const GetCredentialsSharedByUserOutputSchema: z.ZodObject<{
   public_notes: z.ZodString;
   encryptor_public_key: z.ZodString;
   issuer_auth_public_key: z.ZodString;
-  inserter: z.ZodNullable<z.ZodString>;
+  inserter_type: z.ZodNullable<z.ZodString>;
+  inserter_id: z.ZodNullable<z.ZodString>;
   original_id: z.ZodNullable<z.ZodUUID>;
 }> = z.object({
   id: z.uuid(),
@@ -1109,7 +1010,8 @@ export const GetCredentialsSharedByUserOutputSchema: z.ZodObject<{
   public_notes: z.string(),
   encryptor_public_key: z.string(),
   issuer_auth_public_key: z.string(),
-  inserter: z.string().nullable(),
+  inserter_type: z.string().nullable(),
+  inserter_id: z.string().nullable(),
   original_id: z.uuid().nullable(),
 });
 
@@ -1128,43 +1030,6 @@ export async function getCredentialsSharedByUser(
   });
 }
 
-export const EditCredentialInputSchema: z.ZodObject<{
-  id: z.ZodUUID;
-  public_notes: z.ZodString;
-  public_notes_signature: z.ZodString;
-  broader_signature: z.ZodString;
-  content: z.ZodString;
-  encryptor_public_key: z.ZodString;
-  issuer_auth_public_key: z.ZodString;
-}> = z.object({
-  id: z.uuid(),
-  public_notes: z.string(),
-  public_notes_signature: z.string(),
-  broader_signature: z.string(),
-  content: z.string(),
-  encryptor_public_key: z.string(),
-  issuer_auth_public_key: z.string(),
-});
-
-export type EditCredentialInput = z.infer<typeof EditCredentialInputSchema>;
-
-/**
- *  we forbid to edit a copy
- *  only copies can have AGs, so data_id in AGs is id of a copy
- *  if $id is shared_credentials.copy_id - it is a copy
- */
-export async function editCredential(
-  kwilClient: KwilActionClient,
-  params: EditCredentialInput,
-): Promise<void> {
-  const inputs = EditCredentialInputSchema.parse(params);
-  await kwilClient.execute({
-    name: "edit_credential",
-    inputs,
-    description: "Edit a credential",
-  });
-}
-
 export const EditPublicNotesAsIssuerInputSchema: z.ZodObject<{
   public_notes_id: z.ZodString;
   public_notes: z.ZodString;
@@ -1200,6 +1065,12 @@ export const RemoveCredentialInputSchema: z.ZodObject<{
 
 export type RemoveCredentialInput = z.infer<typeof RemoveCredentialInputSchema>;
 
+/**
+ *  Already requested: succeed so the client can retry the blob DELETE.
+ *  A second insert is impossible (credential_id is the primary key).
+ *  Legacy inline credentials (no blob): delete immediately.
+ *  Blob-backed: record intent; credential stays live until gateway finalizes.
+ */
 export async function removeCredential(
   kwilClient: KwilActionClient,
   params: RemoveCredentialInput,
@@ -1220,6 +1091,10 @@ export const RescindSharedCredentialInputSchema: z.ZodObject<{
 
 export type RescindSharedCredentialInput = z.infer<typeof RescindSharedCredentialInputSchema>;
 
+/**
+ *  Already requested: succeed so the client can retry the blob DELETE.
+ *  Legacy inline credentials (no blob): delete immediately.
+ */
 export async function rescindSharedCredential(
   kwilClient: KwilActionClient,
   params: RescindSharedCredentialInput,
@@ -1232,25 +1107,29 @@ export async function rescindSharedCredential(
   });
 }
 
-export const ShareCredentialInputSchema: z.ZodObject<{
-  id: z.ZodUUID;
-  original_credential_id: z.ZodUUID;
+export const SharePreliminaryCredentialInputSchema: z.ZodObject<{
+  request_id: z.ZodUUID;
+  copy_id: z.ZodUUID;
+  original_id: z.ZodUUID;
   public_notes: z.ZodString;
   public_notes_signature: z.ZodString;
   broader_signature: z.ZodString;
-  content: z.ZodString;
+  content_uri: z.ZodString;
+  content_size: z.ZodNumber;
   content_hash: z.ZodString;
   encryptor_public_key: z.ZodString;
   issuer_auth_public_key: z.ZodString;
   grantee_wallet_identifier: z.ZodString;
   locked_until: z.ZodNumber;
 }> = z.object({
-  id: z.uuid(),
-  original_credential_id: z.uuid(),
+  request_id: z.uuid(),
+  copy_id: z.uuid(),
+  original_id: z.uuid(),
   public_notes: z.string(),
   public_notes_signature: z.string(),
   broader_signature: z.string(),
-  content: z.string(),
+  content_uri: blobContentUriSchema,
+  content_size: contentSizeSchema,
   content_hash: z.string(),
   encryptor_public_key: z.string(),
   issuer_auth_public_key: z.string(),
@@ -1258,31 +1137,34 @@ export const ShareCredentialInputSchema: z.ZodObject<{
   locked_until: z.number(),
 });
 
-export type ShareCredentialInput = z.infer<typeof ShareCredentialInputSchema>;
+export type SharePreliminaryCredentialInput = z.infer<typeof SharePreliminaryCredentialInputSchema>;
 
-export async function shareCredential(
+export async function sharePreliminaryCredential(
   kwilClient: KwilActionClient,
-  params: ShareCredentialInput,
+  params: SharePreliminaryCredentialInput,
 ): Promise<void> {
-  const inputs = ShareCredentialInputSchema.parse(params);
+  const inputs = SharePreliminaryCredentialInputSchema.parse(params);
   await kwilClient.execute({
-    name: "share_credential",
+    name: "share_preliminary_credential",
     inputs,
     description: "Share a credential with creating AG",
   });
 }
 
-export const CreateCredentialsByDwgInputSchema: z.ZodObject<{
+export const CreatePreliminaryCredentialsByDwgInputSchema: z.ZodObject<{
+  request_id: z.ZodUUID;
   issuer_auth_public_key: z.ZodString;
   original_encryptor_public_key: z.ZodString;
-  original_credential_id: z.ZodUUID;
-  original_content: z.ZodString;
+  original_id: z.ZodUUID;
+  original_content_uri: z.ZodString;
+  original_content_size: z.ZodNumber;
   original_public_notes: z.ZodString;
   original_public_notes_signature: z.ZodString;
   original_broader_signature: z.ZodString;
   copy_encryptor_public_key: z.ZodString;
-  copy_credential_id: z.ZodUUID;
-  copy_content: z.ZodString;
+  copy_id: z.ZodUUID;
+  copy_content_uri: z.ZodString;
+  copy_content_size: z.ZodNumber;
   copy_public_notes_signature: z.ZodString;
   copy_broader_signature: z.ZodString;
   content_hash: z.ZodString;
@@ -1290,21 +1172,24 @@ export const CreateCredentialsByDwgInputSchema: z.ZodObject<{
   dwg_grantee: z.ZodString;
   dwg_issuer_public_key: z.ZodString;
   dwg_id: z.ZodUUID;
-  dwg_access_grant_timelock: z.ZodString;
-  dwg_not_before: z.ZodString;
-  dwg_not_after: z.ZodString;
+  dwg_access_grant_timelock: z.ZodISODateTime;
+  dwg_not_before: z.ZodISODateTime;
+  dwg_not_after: z.ZodISODateTime;
   dwg_signature: z.ZodString;
 }> = z.object({
+  request_id: z.uuid(),
   issuer_auth_public_key: z.string(),
   original_encryptor_public_key: z.string(),
-  original_credential_id: z.uuid(),
-  original_content: z.string(),
+  original_id: z.uuid(),
+  original_content_uri: blobContentUriSchema,
+  original_content_size: contentSizeSchema,
   original_public_notes: z.string(),
   original_public_notes_signature: z.string(),
   original_broader_signature: z.string(),
   copy_encryptor_public_key: z.string(),
-  copy_credential_id: z.uuid(),
-  copy_content: z.string(),
+  copy_id: z.uuid(),
+  copy_content_uri: blobContentUriSchema,
+  copy_content_size: contentSizeSchema,
   copy_public_notes_signature: z.string(),
   copy_broader_signature: z.string(),
   content_hash: z.string(),
@@ -1312,18 +1197,29 @@ export const CreateCredentialsByDwgInputSchema: z.ZodObject<{
   dwg_grantee: z.string(),
   dwg_issuer_public_key: z.string(),
   dwg_id: z.uuid(),
-  dwg_access_grant_timelock: z.string(),
-  dwg_not_before: z.string(),
-  dwg_not_after: z.string(),
+  dwg_access_grant_timelock: rfc3339DateTimeSchema,
+  dwg_not_before: rfc3339DateTimeSchema,
+  dwg_not_after: rfc3339DateTimeSchema,
   dwg_signature: z.string(),
 });
 
-export type CreateCredentialsByDwgInput = z.infer<typeof CreateCredentialsByDwgInputSchema>;
+export type CreatePreliminaryCredentialsByDwgInput = z.infer<
+  typeof CreatePreliminaryCredentialsByDwgInputSchema
+>;
 
 /**
  *  Delegated write credential actions
  *  For access grant
- *  Check the content creator (encryptor) of credentials is the issuer that user delegated to issue the credentials
+ *  We will use the same ids for preliminary credentials as for credentials, so we need to check if they already exist
+ *  We capture gas upfront to prevent the real credential from being created if the gas is not enough
+ *  The gas can be refunded fully or partially
+ *  Temporary: an issuer is not an inserter/caller. A user grants a DWG to an issuer_key;
+ *  the issuer must issue the credential and sign the proof with that same issuer_key.
+ *  Today we approximate "same issuer" via delegates sharing an inserter_id.
+ *  TODO: once the SDK distinguishes issuer_key from delegate_key, replace with:
+ *    if $issuer_auth_public_key != $dwg_issuer_public_key {
+ *        error('credentials issuer must be an issuer of delegated write grant');
+ *    }
  *  Get the wallet type and public key for XRPL/NEAR wallets from database
  *  Will fail if not in the RFC3339 format
  *  Check the format and precedence
@@ -1331,16 +1227,14 @@ export type CreateCredentialsByDwgInput = z.infer<typeof CreateCredentialsByDwgI
  *  @block_timestamp is a timestamp of previous block, which is can be a few seconds earlier
  *  (max is 6 seconds in current network consensus settings) then a time on a requester's machine.
  *  Also, if requester's machine has wrong time, it can be an issue.
- *  Insert original credential
- *  Insert copy credential
  */
-export async function createCredentialsByDwg(
+export async function createPreliminaryCredentialsByDwg(
   kwilClient: KwilActionClient,
-  params: CreateCredentialsByDwgInput,
+  params: CreatePreliminaryCredentialsByDwgInput,
 ): Promise<void> {
-  const inputs = CreateCredentialsByDwgInputSchema.parse(params);
+  const inputs = CreatePreliminaryCredentialsByDwgInputSchema.parse(params);
   await kwilClient.execute({
-    name: "create_credentials_by_dwg",
+    name: "create_preliminary_credentials_by_dwg",
     inputs,
     description:
       "Add original credential and copy credential with AG on behalf of a user (using delegated write grant given by the user)",
@@ -1388,18 +1282,24 @@ export const GetCredentialOwnedOutputSchema: z.ZodObject<{
   id: z.ZodUUID;
   user_id: z.ZodUUID;
   public_notes: z.ZodString;
-  content: z.ZodString;
+  content: z.ZodNullable<z.ZodString>;
+  content_uri: z.ZodNullable<z.ZodString>;
+  content_size: z.ZodNullable<z.ZodNumber>;
   encryptor_public_key: z.ZodString;
   issuer_auth_public_key: z.ZodString;
-  inserter: z.ZodNullable<z.ZodString>;
+  inserter_type: z.ZodNullable<z.ZodString>;
+  inserter_id: z.ZodNullable<z.ZodString>;
 }> = z.object({
   id: z.uuid(),
   user_id: z.uuid(),
   public_notes: z.string(),
-  content: z.string(),
+  content: z.string().nullable(),
+  content_uri: z.string().nullable(),
+  content_size: z.number().nullable(),
   encryptor_public_key: z.string(),
   issuer_auth_public_key: z.string(),
-  inserter: z.string().nullable(),
+  inserter_type: z.string().nullable(),
+  inserter_id: z.string().nullable(),
 });
 
 export type GetCredentialOwnedOutput = z.infer<typeof GetCredentialOwnedOutputSchema>;
@@ -1427,18 +1327,24 @@ export const GetCredentialSharedOutputSchema: z.ZodObject<{
   id: z.ZodUUID;
   user_id: z.ZodUUID;
   public_notes: z.ZodString;
-  content: z.ZodString;
+  content: z.ZodNullable<z.ZodString>;
+  content_uri: z.ZodNullable<z.ZodString>;
+  content_size: z.ZodNullable<z.ZodNumber>;
   encryptor_public_key: z.ZodString;
   issuer_auth_public_key: z.ZodString;
-  inserter: z.ZodNullable<z.ZodString>;
+  inserter_type: z.ZodNullable<z.ZodString>;
+  inserter_id: z.ZodNullable<z.ZodString>;
 }> = z.object({
   id: z.uuid(),
   user_id: z.uuid(),
   public_notes: z.string(),
-  content: z.string(),
+  content: z.string().nullable(),
+  content_uri: z.string().nullable(),
+  content_size: z.number().nullable(),
   encryptor_public_key: z.string(),
   issuer_auth_public_key: z.string(),
-  inserter: z.string().nullable(),
+  inserter_type: z.string().nullable(),
+  inserter_id: z.string().nullable(),
 });
 
 export type GetCredentialSharedOutput = z.infer<typeof GetCredentialSharedOutputSchema>;
@@ -1633,17 +1539,17 @@ export const DwgMessageInputSchema: z.ZodObject<{
   grantee_wallet_identifier: z.ZodString;
   issuer_public_key: z.ZodString;
   id: z.ZodUUID;
-  access_grant_timelock: z.ZodString;
-  not_usable_before: z.ZodString;
-  not_usable_after: z.ZodString;
+  access_grant_timelock: z.ZodISODateTime;
+  not_usable_before: z.ZodISODateTime;
+  not_usable_after: z.ZodISODateTime;
 }> = z.object({
   owner_wallet_identifier: z.string(),
   grantee_wallet_identifier: z.string(),
   issuer_public_key: z.string(),
   id: z.uuid(),
-  access_grant_timelock: z.string(),
-  not_usable_before: z.string(),
-  not_usable_after: z.string(),
+  access_grant_timelock: rfc3339DateTimeSchema,
+  not_usable_before: rfc3339DateTimeSchema,
+  not_usable_after: rfc3339DateTimeSchema,
 });
 
 export type DwgMessageInput = z.infer<typeof DwgMessageInputSchema>;
@@ -1730,11 +1636,11 @@ export async function getAccessGrantsOwned(
 }
 
 export const GetAccessGrantsGrantedInputSchema: z.ZodObject<{
-  user_id: z.ZodNullable<z.ZodUUID>;
+  user_id: z.ZodOptional<z.ZodNullable<z.ZodUUID>>;
   page: z.ZodNumber;
   size: z.ZodNumber;
 }> = z.object({
-  user_id: z.uuid().nullable(),
+  user_id: z.uuid().nullish(),
   page: z.number(),
   size: z.number(),
 });
@@ -1780,9 +1686,9 @@ export async function getAccessGrantsGranted(
 }
 
 export const GetAccessGrantsGrantedCountInputSchema: z.ZodObject<{
-  user_id: z.ZodNullable<z.ZodUUID>;
+  user_id: z.ZodOptional<z.ZodNullable<z.ZodUUID>>;
 }> = z.object({
-  user_id: z.uuid().nullable(),
+  user_id: z.uuid().nullish(),
 });
 
 export type GetAccessGrantsGrantedCountInput = z.infer<
@@ -1841,77 +1747,6 @@ export async function hasLockedAccessGrants(
     .then((result) => result[0]);
 }
 
-export const DagMessageInputSchema: z.ZodObject<{
-  dag_owner_wallet_identifier: z.ZodString;
-  dag_grantee_wallet_identifier: z.ZodString;
-  dag_data_id: z.ZodUUID;
-  dag_locked_until: z.ZodNumber;
-  dag_content_hash: z.ZodString;
-}> = z.object({
-  dag_owner_wallet_identifier: z.string(),
-  dag_grantee_wallet_identifier: z.string(),
-  dag_data_id: z.uuid(),
-  dag_locked_until: z.number(),
-  dag_content_hash: z.string(),
-});
-
-export type DagMessageInput = z.infer<typeof DagMessageInputSchema>;
-
-export const DagMessageOutputSchema: z.ZodObject<{
-  message: z.ZodString;
-}> = z.object({
-  message: z.string(),
-});
-
-export type DagMessageOutput = z.infer<typeof DagMessageOutputSchema>;
-
-export async function dagMessage(
-  kwilClient: KwilActionClient,
-  params: DagMessageInput,
-): Promise<DagMessageOutput> {
-  const inputs = DagMessageInputSchema.parse(params);
-  return await kwilClient
-    .call<DagMessageOutput[]>({
-      name: "dag_message",
-      inputs,
-    })
-    .then((result) => result[0]);
-}
-
-export const CreateAgByDagForCopyInputSchema: z.ZodObject<{
-  dag_owner_wallet_identifier: z.ZodString;
-  dag_grantee_wallet_identifier: z.ZodString;
-  dag_data_id: z.ZodUUID;
-  dag_locked_until: z.ZodNumber;
-  dag_content_hash: z.ZodString;
-  dag_signature: z.ZodString;
-}> = z.object({
-  dag_owner_wallet_identifier: z.string(),
-  dag_grantee_wallet_identifier: z.string(),
-  dag_data_id: z.uuid(),
-  dag_locked_until: z.number(),
-  dag_content_hash: z.string(),
-  dag_signature: z.string(),
-});
-
-export type CreateAgByDagForCopyInput = z.infer<typeof CreateAgByDagForCopyInputSchema>;
-
-/**
- *  Get the wallet type and public key for XRPL/NEAR wallets from database
- *  This works for EVM-compatible signatures only
- */
-export async function createAgByDagForCopy(
-  kwilClient: KwilActionClient,
-  params: CreateAgByDagForCopyInput,
-): Promise<void> {
-  const inputs = CreateAgByDagForCopyInputSchema.parse(params);
-  await kwilClient.execute({
-    name: "create_ag_by_dag_for_copy",
-    inputs,
-    description: "Create an Access Grant in idOS",
-  });
-}
-
 export const GetAccessGrantsForCredentialInputSchema: z.ZodObject<{
   credential_id: z.ZodUUID;
 }> = z.object({
@@ -1993,6 +1828,75 @@ export async function hasProfile(
     .then((result) => result[0]);
 }
 
+export const SetCallerPayerInputSchema: z.ZodObject<{
+  address: z.ZodString;
+}> = z.object({
+  address: z.string(),
+});
+
+export type SetCallerPayerInput = z.infer<typeof SetCallerPayerInputSchema>;
+
+export async function setCallerPayer(
+  kwilClient: KwilActionClient,
+  params: SetCallerPayerInput,
+): Promise<void> {
+  const inputs = SetCallerPayerInputSchema.parse(params);
+  await kwilClient.execute({
+    name: "set_caller_payer",
+    inputs,
+    description: "Set the caller as a payer for a specific EVM address",
+  });
+}
+
+export const CheckCallerPayerInputSchema: z.ZodObject<{
+  address: z.ZodString;
+}> = z.object({
+  address: z.string(),
+});
+
+export type CheckCallerPayerInput = z.infer<typeof CheckCallerPayerInputSchema>;
+
+export const CheckCallerPayerOutputSchema: z.ZodObject<{
+  is_payer: z.ZodBoolean;
+}> = z.object({
+  is_payer: z.boolean(),
+});
+
+export type CheckCallerPayerOutput = z.infer<typeof CheckCallerPayerOutputSchema>;
+
+export async function checkCallerPayer(
+  kwilClient: KwilActionClient,
+  params: CheckCallerPayerInput,
+): Promise<CheckCallerPayerOutput> {
+  const inputs = CheckCallerPayerInputSchema.parse(params);
+  return await kwilClient
+    .call<CheckCallerPayerOutput[]>({
+      name: "check_caller_payer",
+      inputs,
+    })
+    .then((result) => result[0]);
+}
+
+export const UnsetCallerPayerInputSchema: z.ZodObject<{
+  address: z.ZodString;
+}> = z.object({
+  address: z.string(),
+});
+
+export type UnsetCallerPayerInput = z.infer<typeof UnsetCallerPayerInputSchema>;
+
+export async function unsetCallerPayer(
+  kwilClient: KwilActionClient,
+  params: UnsetCallerPayerInput,
+): Promise<void> {
+  const inputs = UnsetCallerPayerInputSchema.parse(params);
+  await kwilClient.execute({
+    name: "unset_caller_payer",
+    inputs,
+    description: "Remove the caller as a payer for a specific EVM address",
+  });
+}
+
 export const CheckBalanceInputSchema: z.ZodObject<{
   address: z.ZodString;
   token: z.ZodString;
@@ -2011,7 +1915,6 @@ export const CheckBalanceOutputSchema: z.ZodObject<{
 
 export type CheckBalanceOutput = z.infer<typeof CheckBalanceOutputSchema>;
 
-/**  GAS AND FEES */
 export async function checkBalance(
   kwilClient: KwilActionClient,
   params: CheckBalanceInput,
@@ -2027,8 +1930,10 @@ export async function checkBalance(
 
 export const GetWalletWithBalanceInputSchema: z.ZodObject<{
   token: z.ZodString;
+  minimum_balance: z.ZodNumber;
 }> = z.object({
   token: z.string(),
+  minimum_balance: z.number(),
 });
 
 export type GetWalletWithBalanceInput = z.infer<typeof GetWalletWithBalanceInputSchema>;
@@ -2041,10 +1946,6 @@ export const GetWalletWithBalanceOutputSchema: z.ZodObject<{
 
 export type GetWalletWithBalanceOutput = z.infer<typeof GetWalletWithBalanceOutputSchema>;
 
-/**
- *  even if the @caller is not EVM address, there is no harm to try to get the balance, it will return nothing
- *  because bridge.balance can only have records with EVM addresses (it is filled from EVM-compatible contract events)
- */
 export async function getWalletWithBalance(
   kwilClient: KwilActionClient,
   params: GetWalletWithBalanceInput,