@notabene/javascript-sdk 2.8.0 → 2.9.0-next.2

package/docs/types/type-aliases/CryptoCredential.md

@@ -12,4 +12,4 @@ A crypto credential
 
 ## Defined in
 
-[types.ts:192](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/27e5c6c27d8a3a0bdafefd6e32c1654e964838a3/src/types.ts#L192)
+[types.ts:192](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/69cd8d08514af027712db73539fbd0247649c123/src/types.ts#L192)

package/docs/types/type-aliases/DID.md

@@ -12,4 +12,4 @@ A Decentralized Identifier
 
 ## Defined in
 
-[types.ts:220](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/27e5c6c27d8a3a0bdafefd6e32c1654e964838a3/src/types.ts#L220)
+[types.ts:220](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/69cd8d08514af027712db73539fbd0247649c123/src/types.ts#L220)

package/docs/types/type-aliases/DTI.md

@@ -35,4 +35,4 @@ Format: `DTI[NNNNN]` where N is a digit
 
 ## Defined in
 
-[types.ts:118](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/27e5c6c27d8a3a0bdafefd6e32c1654e964838a3/src/types.ts#L118)
+[types.ts:118](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/69cd8d08514af027712db73539fbd0247649c123/src/types.ts#L118)

package/docs/types/type-aliases/Destination.md

@@ -12,4 +12,4 @@ The destination of a transaction either a blockchain address, a CAIP-19 address,
 
 ## Defined in
 
-[types.ts:198](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/27e5c6c27d8a3a0bdafefd6e32c1654e964838a3/src/types.ts#L198)
+[types.ts:198](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/69cd8d08514af027712db73539fbd0247649c123/src/types.ts#L198)

package/docs/types/type-aliases/Error.md

@@ -42,4 +42,4 @@ Identifier code of the error message
 
 ## Defined in
 
-[types.ts:902](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/27e5c6c27d8a3a0bdafefd6e32c1654e964838a3/src/types.ts#L902)
+[types.ts:902](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/69cd8d08514af027712db73539fbd0247649c123/src/types.ts#L902)

package/docs/types/type-aliases/FieldOptions.md

@@ -12,4 +12,4 @@ Field properties
 
 ## Defined in
 
-[types.ts:742](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/27e5c6c27d8a3a0bdafefd6e32c1654e964838a3/src/types.ts#L742)
+[types.ts:742](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/69cd8d08514af027712db73539fbd0247649c123/src/types.ts#L742)

package/docs/types/type-aliases/FieldTypes.md

@@ -22,4 +22,4 @@ Field type configuration
 
 ## Defined in
 
-[types.ts:755](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/27e5c6c27d8a3a0bdafefd6e32c1654e964838a3/src/types.ts#L755)
+[types.ts:755](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/69cd8d08514af027712db73539fbd0247649c123/src/types.ts#L755)

package/docs/types/type-aliases/HostMessage.md

@@ -34,4 +34,4 @@ without requiring full reinitialization.
 
 ## Defined in
 
-[types.ts:1014](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/27e5c6c27d8a3a0bdafefd6e32c1654e964838a3/src/types.ts#L1014)
+[types.ts:1014](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/69cd8d08514af027712db73539fbd0247649c123/src/types.ts#L1014)

package/docs/types/type-aliases/ISOCurrency.md

@@ -12,4 +12,4 @@
 
 ## Defined in
 
-[types.ts:232](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/27e5c6c27d8a3a0bdafefd6e32c1654e964838a3/src/types.ts#L232)
+[types.ts:232](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/69cd8d08514af027712db73539fbd0247649c123/src/types.ts#L232)

package/docs/types/type-aliases/InvalidValue.md

@@ -42,4 +42,4 @@ Array of validation errors
 
 ## Defined in
 
-[types.ts:924](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/27e5c6c27d8a3a0bdafefd6e32c1654e964838a3/src/types.ts#L924)
+[types.ts:924](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/69cd8d08514af027712db73539fbd0247649c123/src/types.ts#L924)

package/docs/types/type-aliases/LEI.md

@@ -12,4 +12,4 @@ A LEI Legal Entity Identifier
 
 ## Defined in
 
-[types.ts:226](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/27e5c6c27d8a3a0bdafefd6e32c1654e964838a3/src/types.ts#L226)
+[types.ts:226](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/69cd8d08514af027712db73539fbd0247649c123/src/types.ts#L226)

package/docs/types/type-aliases/LegalPersonFieldName.md

@@ -10,4 +10,4 @@
 
 ## Defined in
 
-[types.ts:449](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/27e5c6c27d8a3a0bdafefd6e32c1654e964838a3/src/types.ts#L449)
+[types.ts:449](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/69cd8d08514af027712db73539fbd0247649c123/src/types.ts#L449)

package/docs/types/type-aliases/LegalPersonFields.md

@@ -12,4 +12,4 @@ Field properties for legal person fields
 
 ## Defined in
 
-[types.ts:463](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/27e5c6c27d8a3a0bdafefd6e32c1654e964838a3/src/types.ts#L463)
+[types.ts:463](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/69cd8d08514af027712db73539fbd0247649c123/src/types.ts#L463)

package/docs/types/type-aliases/NationalIdentifierTypeFieldOptions.md

@@ -18,4 +18,4 @@ Field properties for national identifier type selection
 
 ## Defined in
 
-[types.ts:399](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/27e5c6c27d8a3a0bdafefd6e32c1654e964838a3/src/types.ts#L399)
+[types.ts:399](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/69cd8d08514af027712db73539fbd0247649c123/src/types.ts#L399)

package/docs/types/type-aliases/NaturalPersonFieldName.md

@@ -12,4 +12,4 @@ Field names for NaturalPerson
 
 ## Defined in
 
-[types.ts:384](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/27e5c6c27d8a3a0bdafefd6e32c1654e964838a3/src/types.ts#L384)
+[types.ts:384](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/69cd8d08514af027712db73539fbd0247649c123/src/types.ts#L384)

package/docs/types/type-aliases/NaturalPersonFields.md

@@ -12,4 +12,4 @@ Field properties for natural person fields
 
 ## Defined in
 
-[types.ts:407](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/27e5c6c27d8a3a0bdafefd6e32c1654e964838a3/src/types.ts#L407)
+[types.ts:407](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/69cd8d08514af027712db73539fbd0247649c123/src/types.ts#L407)

package/docs/types/type-aliases/NotabeneAsset.md

@@ -33,4 +33,4 @@ system that may be used alongside CAIP-19 and DTI identifiers.
 
 ## Defined in
 
-[types.ts:140](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/27e5c6c27d8a3a0bdafefd6e32c1654e964838a3/src/types.ts#L140)
+[types.ts:140](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/69cd8d08514af027712db73539fbd0247649c123/src/types.ts#L140)

package/docs/types/type-aliases/Ready.md

@@ -18,4 +18,4 @@ Represents a ready component message
 
 ## Defined in
 
-[types.ts:871](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/27e5c6c27d8a3a0bdafefd6e32c1654e964838a3/src/types.ts#L871)
+[types.ts:871](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/69cd8d08514af027712db73539fbd0247649c123/src/types.ts#L871)

package/docs/types/type-aliases/ResizeRequest.md

@@ -24,4 +24,4 @@ Represents a resize request component message. This is handled by the library.
 
 ## Defined in
 
-[types.ts:879](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/27e5c6c27d8a3a0bdafefd6e32c1654e964838a3/src/types.ts#L879)
+[types.ts:879](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/69cd8d08514af027712db73539fbd0247649c123/src/types.ts#L879)

package/docs/types/type-aliases/Source.md

@@ -12,4 +12,4 @@ The source of a transaction
 
 ## Defined in
 
-[types.ts:208](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/27e5c6c27d8a3a0bdafefd6e32c1654e964838a3/src/types.ts#L208)
+[types.ts:208](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/69cd8d08514af027712db73539fbd0247649c123/src/types.ts#L208)

package/docs/types/type-aliases/Theme.md

@@ -34,4 +34,4 @@ The theme of the Notabene SDK
 
 ## Defined in
 
-[types.ts:238](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/27e5c6c27d8a3a0bdafefd6e32c1654e964838a3/src/types.ts#L238)
+[types.ts:238](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/69cd8d08514af027712db73539fbd0247649c123/src/types.ts#L238)

package/docs/types/type-aliases/TransactionAsset.md

@@ -12,4 +12,4 @@ The asset of a transaction either a Notabene asset, a CAIP-19 asset, or a DTI.
 
 ## Defined in
 
-[types.ts:146](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/27e5c6c27d8a3a0bdafefd6e32c1654e964838a3/src/types.ts#L146)
+[types.ts:146](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/69cd8d08514af027712db73539fbd0247649c123/src/types.ts#L146)

package/docs/types/type-aliases/TravelAddress.md

@@ -34,4 +34,4 @@ VASPs and blockchain networks while maintaining privacy.
 
 ## Defined in
 
-[types.ts:187](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/27e5c6c27d8a3a0bdafefd6e32c1654e964838a3/src/types.ts#L187)
+[types.ts:187](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/69cd8d08514af027712db73539fbd0247649c123/src/types.ts#L187)

package/docs/types/type-aliases/URI.md

@@ -12,4 +12,4 @@ A Uniform Resource Identifier
 
 ## Defined in
 
-[types.ts:214](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/27e5c6c27d8a3a0bdafefd6e32c1654e964838a3/src/types.ts#L214)
+[types.ts:214](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/69cd8d08514af027712db73539fbd0247649c123/src/types.ts#L214)

package/docs/types/type-aliases/UUID.md

@@ -24,4 +24,4 @@ Format: 8-4-4-4-12 hexadecimal digits
 
 ## Defined in
 
-[types.ts:40](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/27e5c6c27d8a3a0bdafefd6e32c1654e964838a3/src/types.ts#L40)
+[types.ts:40](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/69cd8d08514af027712db73539fbd0247649c123/src/types.ts#L40)

package/docs/types/type-aliases/UpdateValue.md

@@ -51,4 +51,4 @@ and its configuration without requiring a full reload/reinitialize.
 
 ## Defined in
 
-[types.ts:992](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/27e5c6c27d8a3a0bdafefd6e32c1654e964838a3/src/types.ts#L992)
+[types.ts:992](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/69cd8d08514af027712db73539fbd0247649c123/src/types.ts#L992)

package/docs/types/type-aliases/V1Asset.md

@@ -33,4 +33,4 @@ Used for backwards compatibility with V1 API transaction payloads:
 
 ## Defined in
 
-[types.ts:657](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/27e5c6c27d8a3a0bdafefd6e32c1654e964838a3/src/types.ts#L657)
+[types.ts:657](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/69cd8d08514af027712db73539fbd0247649c123/src/types.ts#L657)

package/docs/types/type-aliases/V1Transaction.md

@@ -54,4 +54,4 @@ Transaction payload suitable for calling Notabene v1 tx/create
 
 ## Defined in
 
-[types.ts:663](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/27e5c6c27d8a3a0bdafefd6e32c1654e964838a3/src/types.ts#L663)
+[types.ts:663](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/69cd8d08514af027712db73539fbd0247649c123/src/types.ts#L663)

package/docs/types/type-aliases/VASPOptions.md

@@ -26,4 +26,4 @@ Options for which VASPs to be searchable
 
 ## Defined in
 
-[types.ts:777](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/27e5c6c27d8a3a0bdafefd6e32c1654e964838a3/src/types.ts#L777)
+[types.ts:777](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/69cd8d08514af027712db73539fbd0247649c123/src/types.ts#L777)

package/docs/types/type-aliases/ValidationError.md

@@ -22,4 +22,4 @@ Validation error
 
 ## Defined in
 
-[types.ts:733](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/27e5c6c27d8a3a0bdafefd6e32c1654e964838a3/src/types.ts#L733)
+[types.ts:733](https://gitlab.com/notabene/open-source/javascript-sdk/-/blob/69cd8d08514af027712db73539fbd0247649c123/src/types.ts#L733)

package/package.json

@@ -10,7 +10,7 @@
   "author": "Notabene <developers@notabene.id>",
   "license": "MIT",
   "packageManager": "yarn@4.5.1",
-  "version": "2.8.0",
+  "version": "2.9.0-next.2",
   "source": "src/notabene.ts",
   "main": "dist/cjs/notabene.cjs",
   "module": "dist/esm/notabene.js",

package/src/notabene.ts

@@ -39,6 +39,7 @@ import type {
   NotabeneAsset,
   OwnershipProof,
   Ready,
+  RefreshSource,
   ResizeRequest,
   ScreenshotProof,
   SignatureProof,
@@ -75,9 +76,12 @@ import { decodeFragmentToObject, encodeObjectToFragment } from './utils/urls';
 export { default as EmbeddedComponent } from './components/EmbeddedComponent';
 export {
   ConnectionManager,
+  getRefreshResult,
   type ConnectionData,
   type ConnectionMetadata,
   type ConnectionResponse,
+  type ConnectionResult,
+  type ConnectionStatus,
   type TransactionType,
 } from './utils/connections';
 export {
@@ -134,6 +138,7 @@ export type {
   NotabeneAsset,
   OwnershipProof,
   Ready,
+  RefreshSource,
   ResizeRequest,
   ScreenshotProof,
   SignatureProof,

package/src/types.ts

@@ -1055,6 +1055,7 @@ export enum ProofStatus {
  * - TIP191: Tron message signing
  * - ED25519: Ed25519 signature (used in Solana)
  * - XRP_ED25519: Ed25519 signature (used in XRP)
+ * - XLM_ED25519: Ed25519 signature (used in Stellar)
  * - XPUB: Extended public key signature for HD wallets
  * - MicroTransfer: Proof via small blockchain transaction
  * - Screenshot: Image proof of ownership/access
@@ -1079,6 +1080,7 @@ export enum ProofTypes {
   TIP191 = 'tip-191',
   ED25519 = 'ed25519',
   XRP_ED25519 = 'xrp-ed25519',
+  XLM_ED25519 = 'xlm-ed25519',
   CIP8 = 'cip-8',
   MicroTransfer = 'microtransfer',
   Screenshot = 'screenshot',
@@ -1143,7 +1145,8 @@ export interface SignatureProof extends OwnershipProof {
     | ProofTypes.SIWX
     | ProofTypes.SIWE
     | ProofTypes.CIP8
-    | ProofTypes.XRP_ED25519;
+    | ProofTypes.XRP_ED25519
+    | ProofTypes.XLM_ED25519;
 
   proof: string;
   attestation: string;

package/src/utils/__tests__/connections.test.ts

@@ -68,6 +68,7 @@ describe('ConnectionManager', () => {
             const mockResponse = {
               id: 'test-id',
               version: 1,
+              status: 'active',
               metadata,
               sealed: ['encrypted-data'],
             };
@@ -92,6 +93,7 @@ describe('ConnectionManager', () => {
             expect(result).toEqual({
               id: mockResponse.id,
               metadata: mockResponse.metadata,
+              status: mockResponse.status,
               version: mockResponse.version,
               data: request,
               key: expect.any(String),
@@ -124,6 +126,9 @@ describe('ConnectionManager', () => {
 
   describe('update', () => {
     it('should successfully update an existing connection', async () => {
+      const testData = { requestId: 'test-123' };
+      const sealed = await seal(testData);
+
       await fc.assert(
         fc.asyncProperty(
           fc.uuid(),
@@ -134,8 +139,9 @@ describe('ConnectionManager', () => {
             const mockResponse = {
               id,
               metadata: arbConnectionMetadata,
+              status: 'completed',
               version: version + 1,
-              sealed: ['new-encrypted-data'],
+              sealed: [sealed.ciphertext],
             };
 
             fetchMock.mockResolvedValueOnce({
@@ -143,7 +149,13 @@ describe('ConnectionManager', () => {
               json: async () => mockResponse,
             });
 
-            const result = await manager.update(id, request, version);
+            const result = await manager.update(
+              id,
+              request,
+              version,
+              'completed',
+              sealed.key,
+            );
 
             // Verify fetch was called correctly
             expect(fetchMock).toHaveBeenCalledWith(`${testEndpoint}/${id}`, {
@@ -158,16 +170,19 @@ describe('ConnectionManager', () => {
             expect(result).toEqual({
               id: mockResponse.id,
               version: mockResponse.version,
+              status: mockResponse.status,
               metadata: mockResponse.metadata,
               data: request,
-              key: expect.any(String),
+              key: sealed.key,
             });
           },
         ),
       );
     });
 
-    it('should throw error on failed update', async () => {
+    it('should throw error on failed update due to invalid key', async () => {
+      const { key: newKey } = await seal('testData');
+
       await fc.assert(
         fc.asyncProperty(
           fc.uuid(),
@@ -180,9 +195,9 @@ describe('ConnectionManager', () => {
               text: async () => 'Update failed',
             });
 
-            await expect(manager.update(id, request, version)).rejects.toThrow(
-              'Failed to update connection',
-            );
+            await expect(
+              manager.update(id, request, version, 'active', newKey),
+            ).rejects.toThrow('Failed to update connection');
           },
         ),
       );
@@ -201,6 +216,7 @@ describe('ConnectionManager', () => {
           const mockResponse = {
             id,
             version: 1,
+            status: 'active',
             metadata: arbConnectionMetadata,
             sealed: [sealed.ciphertext], // Use the real ciphertext
           };
@@ -221,6 +237,7 @@ describe('ConnectionManager', () => {
           expect(result).toEqual({
             id: mockResponse.id,
             version: mockResponse.version,
+            status: mockResponse.status,
             metadata: mockResponse.metadata,
             data: testData, // Should match our original test data
             key: sealed.key,

package/src/utils/connections.ts

@@ -1,11 +1,19 @@
-import type { ComponentRequest, TransactionOptions, UUID } from '../types';
+import type {
+  ComponentRequest,
+  RefreshSource,
+  TransactionOptions,
+  TransactionResponse,
+  UUID,
+} from '../types';
 import { seal, unseal } from './encryption';
 
 export type TransactionType = 'withdraw' | 'deposit';
+export type ConnectionStatus = 'active' | 'completed' | 'closed';
 export interface ConnectionData<T extends ComponentRequest> {
   tx: T;
   authToken?: string;
   txOptions?: TransactionOptions;
+  result?: TransactionResponse<T>;
 }
 
 export interface ConnectionMetadata {
@@ -16,11 +24,55 @@ export interface ConnectionMetadata {
 export interface ConnectionResponse<T extends ComponentRequest> {
   id: UUID;
   version: number;
+  status: ConnectionStatus;
   metadata: ConnectionMetadata;
   data: ConnectionData<T>;
   key: string;
 }
 
+export interface ConnectionResult<T extends ComponentRequest> {
+  id: UUID;
+  metadata: ConnectionMetadata;
+  status: ConnectionStatus;
+  tx: T;
+  result?: TransactionResponse<T>;
+}
+
+export async function getRefreshResult<T extends ComponentRequest>(
+  refreshSource: RefreshSource,
+): Promise<ConnectionResult<T>> {
+  const response = await fetch(refreshSource.url, {
+    method: 'GET',
+  });
+
+  if (!response.ok) {
+    throw new Error(`Failed to get connection: ${await response.text()}`);
+  }
+
+  const result = await response.json();
+
+  if (!result.sealed) {
+    throw new Error('No data found');
+  }
+
+  // Get the latest sealed data
+  const latestSealed = result.sealed[result.sealed.length - 1];
+
+  // Decrypt the data
+  const data = await unseal<ConnectionData<T>>({
+    ciphertext: latestSealed,
+    key: refreshSource.key,
+  });
+
+  return {
+    id: result.id,
+    metadata: result.metadata,
+    status: result.status,
+    tx: data.tx,
+    result: data.result,
+  };
+}
+
 /**
  * Manages encrypted connections using Cloudflare Durable Objects
  */
@@ -68,6 +120,7 @@ export class ConnectionManager {
     return {
       id: result.id,
       version: result.version,
+      status: result.status,
       metadata: metadata,
       data: data,
       key: sealed.key,
@@ -85,14 +138,17 @@ export class ConnectionManager {
     id: UUID,
     data: ConnectionData<T>,
     version: number,
+    status: ConnectionStatus,
+    key: string,
   ): Promise<ConnectionResponse<T>> {
     // Encrypt the new data
-    const sealed = await seal(data);
+    const sealed = await seal(data, key);
 
     // Prepare the request body
     const body = {
       sealed: sealed.ciphertext,
       version,
+      status,
     };
 
     // Update the connection
@@ -114,6 +170,7 @@ export class ConnectionManager {
       id: result.id,
       metadata: result.metadata,
       version: result.version,
+      status: result.status,
       data: data,
       key: sealed.key,
     };
@@ -151,6 +208,7 @@ export class ConnectionManager {
 
     return {
       id: result.id,
+      status: result.status,
       version: result.version,
       metadata: result.metadata,
       data,

package/src/utils/encryption.ts

@@ -14,13 +14,15 @@ export interface Sealed {
  * @param data Data to encrypt
  * @returns Promise resolving to a Sealed object containing ciphertext and key
  */
-export async function seal<T>(data: T): Promise<Sealed> {
+export async function seal<T>(data: T, existingKey?: string): Promise<Sealed> {
   // Convert the object to a JSON string
   const plaintext = JSON.stringify(data);
   const encoder = new TextEncoder();
 
-  // Generate a random encryption key and IV
-  const rawKey = crypto.getRandomValues(new Uint8Array(32)); // 256-bit key
+  // Restore or generate a random encryption key
+  const rawKey = existingKey
+    ? base64ToUint8Array(existingKey)
+    : crypto.getRandomValues(new Uint8Array(32));
   const key = await crypto.subtle.importKey(
     'raw',
     rawKey,