@renown/sdk 6.2.2-dev.6 → 6.2.2-dev.61

package/dist/{signer-DYKGoYHB.d.ts → types-DVcz43Fb.d.ts}

@@ -1,9 +1,14 @@
-import { Action, AppActionSigner, ISigner, ISigner as ISigner$1, Signature, SignatureVerificationHandler, User, UserActionSigner } from "@powerhousedao/shared/document-model";
+import { Action, ISigner as ISigner$1, User } from "@powerhousedao/shared/document-model";
 
 //#region src/constants.d.ts
 declare const DEFAULT_RENOWN_URL = "https://www.renown.id";
 declare const DEFAULT_RENOWN_NETWORK_ID = "eip155";
 declare const DEFAULT_RENOWN_CHAIN_ID = "1";
+/** Default cookie name for a server-readable Renown session (bearer token). */
+declare const RENOWN_SESSION_COOKIE = "renown_session";
+/** Subgraph a Switchboard exposes the renown read model under; the queries in
+ * `switchboard.ts` are written against it. */
+declare const RENOWN_READ_MODEL_SUBGRAPH = "renown-read-model";
 declare const DOMAIN_TYPE: readonly [{
   readonly name: "version";
   readonly type: "string";
@@ -113,6 +118,144 @@ declare const CREDENTIAL_TYPES: {
   }];
 };
 //#endregion
+//#region src/switchboard.d.ts
+/** Thrown by `signIn` when the instance has no switchboard to write the
+ * credential to, so a host can fall back to the Renown redirect flow. */
+declare class MissingSwitchboardError extends Error {
+  constructor();
+  /** `instanceof` fails across duplicate SDK copies, so match by name too. */
+  static is(error: unknown): error is MissingSwitchboardError;
+}
+/** Runs a GraphQL document against a Switchboard and resolves its `data`;
+ * throws on transport or GraphQL errors. */
+type SwitchboardRequestFn = (query: string, variables: Record<string, unknown>) => Promise<unknown>;
+/** Where a SwitchboardClient reads from: an HTTP endpoint or a local executor. */
+type SwitchboardSource = string | SwitchboardRequestFn;
+declare class SwitchboardClient {
+  #private;
+  constructor(source: SwitchboardSource);
+  /** The HTTP endpoint, or undefined when reading through a local executor. */
+  get endpoint(): string | undefined;
+  getCredential(params: {
+    address: string;
+    chainId: number;
+    appDid: string;
+  }): Promise<PowerhouseVerifiableCredential | undefined>;
+  getProfileByAddress(address: string): Promise<RenownProfile | undefined>;
+  createEmptyDocument(documentType: string, parentIdentifier?: string): Promise<string>;
+  mutateDocument(documentIdentifier: string, actions: Action[]): Promise<string>;
+  issueCredential(credential: PowerhouseVerifiableCredential, parentIdentifier?: string): Promise<string>;
+  findOrCreateUser(address: string, profile?: {
+    username?: string;
+    userImage?: string;
+  }): Promise<string>;
+  revokeCredential(documentId: string, reason?: string): Promise<void>;
+  profileFetcher: ProfileFetcher;
+}
+//#endregion
+//#region src/credential.d.ts
+type Hex = `0x${string}`;
+type TypedDataDomain = {
+  name?: string;
+  version?: string;
+  chainId?: number;
+  verifyingContract?: Hex;
+  salt?: Hex;
+};
+type TypedDataParameter = {
+  name: string;
+  type: string;
+};
+/** EIP-712 domain as signed by the credential issuer. */
+type CredentialDomain = {
+  version: string;
+  chainId: number;
+};
+/** The credential body that is EIP-712 signed (everything except `proof`). */
+type CredentialMessage = {
+  "@context": string[];
+  type: string[];
+  id: string;
+  issuer: {
+    id: string;
+    ethereumAddress: Hex;
+  };
+  credentialSubject: {
+    id: string;
+    app: string;
+  };
+  credentialSchema: {
+    id: string;
+    type: string;
+  };
+  issuanceDate: string;
+  expirationDate: string;
+};
+/** Typed-data signer; matches the loose shape used by wallet adapters. */
+type SignCredentialTypedData = (args: {
+  domain: TypedDataDomain;
+  types: Record<string, readonly TypedDataParameter[]>;
+  primaryType: string;
+  message: Record<string, unknown>;
+}) => Promise<Hex>;
+interface BuildCredentialParams {
+  signTypedData: SignCredentialTypedData;
+  address: Hex;
+  chainId: number;
+  app: string;
+  /** Credential subject id: the app/client DID the credential delegates to. */
+  appId: string;
+  expiresInDays?: number;
+}
+/** Assemble a Renown delegation VC and sign it with the provided signer. */
+declare function buildAndSignCredential(params: BuildCredentialParams): Promise<PowerhouseVerifiableCredential>;
+/** Recover the address that signed a credential's EIP-712 proof. */
+declare function recoverCredentialSigner(credential: PowerhouseVerifiableCredential): Promise<Hex>;
+/** True when the proof was signed by the credential's declared issuer address. */
+declare function verifyCredentialSignature(credential: PowerhouseVerifiableCredential): Promise<boolean>;
+interface FetchDelegationCredentialOptions {
+  /** Ethereum address that must have issued the credential. */
+  address: string;
+  /** Chain id the credential must be scoped to. */
+  chainId: number;
+  /** App/client DID the credential must delegate to (credentialSubject.id). */
+  appDid: string;
+  /** Renown service base URL. Defaults to DEFAULT_RENOWN_URL. */
+  baseUrl?: string;
+  /** Switchboard GraphQL endpoint; when reachable, read the reactor directly. */
+  switchboardUrl?: string;
+  /** In-process Switchboard reader; wins over any URL and skips discovery. */
+  switchboardRequest?: SwitchboardRequestFn;
+  /** Probe {baseUrl}/api/switchboard for an endpoint (default true). */
+  discover?: boolean;
+  /** Re-verify the EIP-712 proof signature (default true). */
+  verifySignature?: boolean;
+}
+declare function fetchDelegationCredential(options: FetchDelegationCredentialOptions): Promise<PowerhouseVerifiableCredential | undefined>;
+interface VerifiedAuthCredential {
+  address: string;
+  chainId: number;
+  networkId: string;
+  /** Owner identity: the pkh DID (did:pkh:<net>:<chainId>:<address>). */
+  did: string;
+  /** App/client DID the bearer token was issued by. */
+  appDid: string;
+  credential: PowerhouseVerifiableCredential;
+}
+interface VerifyAuthCredentialOptions {
+  /** Expected `aud` claim on the bearer token. */
+  audience?: string;
+  /** Renown service base URL. */
+  renownUrl?: string;
+  /** Switchboard GraphQL endpoint; when reachable, read the reactor directly. */
+  switchboardUrl?: string;
+  /** In-process Switchboard reader; wins over any URL and skips discovery. */
+  switchboardRequest?: SwitchboardRequestFn;
+  /** Re-verify the credential's EIP-712 proof (default true). */
+  verifySignature?: boolean;
+}
+declare function verifyAuthCredential(jwt: string, options?: VerifyAuthCredentialOptions): Promise<VerifiedAuthCredential | undefined>;
+//#endregion
 //#region src/event/types.d.ts
 interface IEventEmitter<Events extends Record<string, unknown>> {
   /**
@@ -302,9 +445,9 @@ type RenownProfile = {
   documentId: string;
   username: string | null;
   ethAddress: string | null;
-  userImage: string | null;
-  createdAt: string;
-  updatedAt: string;
+  userImage: string | null; /** Absent on a profile seeded from the session cookie (see RenownSessionProfile). */
+  createdAt?: string;
+  updatedAt?: string;
 };
 type InternalUser = User & {
   did: string;
@@ -319,6 +462,20 @@ type User$1 = InternalUser;
  * Must not throw — return undefined on failure.
  */
 type ProfileFetcher = (user: User$1, baseUrl: string) => Promise<RenownProfile | undefined>;
+interface SignInParams {
+  /** Ethereum address of the signing wallet. */
+  address: `0x${string}`;
+  /** Chain id the credential is scoped to. */
+  chainId: number;
+  /** Wallet/Privy EIP-712 typed-data signer that authorizes the app key. */
+  signTypedData: SignCredentialTypedData;
+  /** Optional profile username to set on the RenownUser. */
+  username?: string;
+  /** Optional profile image URL to set on the RenownUser. */
+  userImage?: string;
+  /** Delegation credential lifetime in days (default 7). */
+  expiresInDays?: number;
+}
 type Unsubscribe = () => void;
 type LoginStatus = "initial" | "checking" | "authorized" | "not-authorized";
 type RenownStorageMap = {
@@ -335,7 +492,12 @@ interface IRenown extends Pick<RenownEventEmitter, "on"> {
   readonly user: User$1 | undefined;
   readonly status: LoginStatus;
   login: (userDid: string) => Promise<User$1>;
+  signIn: (params: SignInParams) => Promise<User$1>;
   logout: () => Promise<void>;
+  /** Re-check the current credential at the source; logs out if revoked/expired. */
+  revalidate: () => Promise<boolean>;
+  /** Re-read profile attributes at the source; never logs out. Resolves true if they changed. */
+  refreshProfile: () => Promise<boolean>;
   readonly crypto: IRenownCrypto;
   readonly signer: ISigner$1;
   readonly did: string;
@@ -423,6 +585,8 @@ interface JsonWebKeyPairStorage {
 type DID = `did:${string}`;
 interface IRenownCrypto {
   did: DID;
+  /** Chain the bearer token is scoped to. Optional so an external implementation still satisfies this; the builder warns when it differs from the issuing chain. */
+  chainId?: number;
   publicKey: CryptoKey;
   removeDid(): Promise<void>;
   sign: (data: Uint8Array) => Promise<Uint8Array>;
@@ -435,117 +599,5 @@ interface IRenownCrypto {
  */
 interface IConnectCrypto extends IRenownCrypto {}
 //#endregion
-//#region src/crypto/renown-crypto.d.ts
-declare class RenownCrypto implements IRenownCrypto {
-  #private;
-  readonly did: DID;
-  static algorithm: EcKeyAlgorithm;
-  static signAlgorithm: {
-    name: string;
-    namedCurve: string;
-    hash: string;
-  };
-  constructor(keyPairStorage: JsonWebKeyPairStorage, crypto: SubtleCrypto, keyPair: CryptoKeyPair, did: DID);
-  get publicKey(): CryptoKey;
-  getBearerToken(address: string | undefined, options?: CreateBearerTokenOptions): Promise<string>;
-  removeDid(): Promise<void>;
-  sign(data: Uint8Array | string): Promise<Uint8Array>;
-  verify(data: Uint8Array, signature: Uint8Array): Promise<boolean>;
-  get issuer(): Issuer;
-}
-/**
- * @deprecated Use RenownCrypto instead
- */
-declare class ConnectCrypto extends RenownCrypto {}
-//#endregion
-//#region src/crypto/renown-crypto-builder.d.ts
-declare class RenownCryptoBuilder {
-  #private;
-  private keyPairStorage?;
-  private subtleCrypto?;
-  withKeyPairStorage(storage: JsonWebKeyPairStorage): this;
-  withSubtleCrypto(crypto: SubtleCrypto): this;
-  build(): Promise<RenownCrypto>;
-}
-//#endregion
-//#region src/crypto/memory-key-storage.d.ts
-declare class MemoryKeyStorage implements JsonWebKeyPairStorage {
-  private keyPair;
-  constructor(keyPair?: JwkKeyPair);
-  loadKeyPair(): Promise<JwkKeyPair | undefined>;
-  saveKeyPair(keyPair: JwkKeyPair): Promise<void>;
-  removeKeyPair(): Promise<void>;
-}
-//#endregion
-//#region src/crypto/signer.d.ts
-declare class RenownCryptoSigner implements ISigner {
-  private readonly crypto;
-  private readonly appName;
-  user?: UserActionSigner | undefined;
-  readonly app: AppActionSigner;
-  constructor(crypto: IRenownCrypto, appName: string, user?: UserActionSigner | undefined);
-  get publicKey(): CryptoKey;
-  sign(data: Uint8Array): Promise<Uint8Array>;
-  verify(data: Uint8Array, signature: Uint8Array): Promise<void>;
-  signAction(action: Action, abortSignal?: AbortSignal): Promise<Signature>;
-  /**
-   * Signs an action including a predicted resulting state hash.
-   *
-   * The resulting hash is packed into the signature tuple's 4th element (index 3)
-   * using the format: `${prevStateHash}:${resultingStateHash}`
-   *
-   * This allows offline verification of documents without reducer logic:
-   * - Verifier can check that the signature is valid for the claimed resulting state
-   * - Verifier can compare claimed resulting state to actual operation.hash
-   *
-   * @param action - The action to sign
-   * @param resultingStateHash - The predicted hash of document state AFTER this action runs
-   * @param abortSignal - Optional abort signal
-   * @returns A Signature tuple with the resulting hash encoded in element [3]
-   */
-  signActionWithResultingState(action: Action, resultingStateHash: string, abortSignal?: AbortSignal): Promise<Signature>;
-  /**
-   * Internal signing implementation shared by signAction and signActionWithResultingState.
-   */
-  private _signAction;
-  private hashAction;
-  private buildSignatureMessage;
-  private arrayBufferToHex;
-  private arrayBufferToBase64;
-}
-/**
- * Creates a signature verification handler that verifies signatures using the Web Crypto API.
- * The verification uses ECDSA with P-256 curve and SHA-256 hash, matching the RenownCrypto signing algorithm.
- */
-declare function createSignatureVerifier(requireSignature?: boolean): SignatureVerificationHandler;
-/**
- * Parses the hash field (element [3]) from a signature tuple.
- *
- * Supports two formats:
- * - Old format: just `prevStateHash` (no colon)
- * - New format: `prevStateHash:resultingStateHash` (colon-separated)
- *
- * @param hashField - The 4th element of a Signature tuple
- * @returns Object with prevStateHash and optional resultingStateHash
- */
-declare function parseSignatureHashField(hashField: string): {
-  prevStateHash: string;
-  resultingStateHash: string | undefined;
-};
-/**
- * Extracts the resulting state hash from a signature, if present.
- *
- * @param signature - A Signature tuple
- * @returns The resulting state hash, or undefined if not present
- */
-declare function extractResultingHashFromSignature(signature: Signature): string | undefined;
-/**
- * Checks if a signature includes a resulting state hash.
- *
- * @param signature - A Signature tuple
- * @returns true if the signature includes a resulting state hash
- */
-declare function signatureHasResultingHash(signature: Signature): boolean;
-//#endregion
-export { User$1 as $, ISigner$1 as A, PKHDid as B, DIDResolutionResult as C, IPowerhouseIssuerType as D, IPowerhouseCredentialSubject as E, JWTVerified as F, RenownEvents as G, ProfileFetcher as H, JWTVerifyPolicies as I, RenownStorageMap as J, RenownProfile as K, JsonWebKey$1 as L, InternalUser as M, Issuer as N, IProof as O, JWTPayload as P, Unsubscribe as Q, KeyCapabilitySection as R, DIDResolutionMetadata as S, IAuthCredentialSubject as T, Proof as U, PowerhouseVerifiableCredential as V, RenownEventEmitter as W, ServiceEndpoint as X, Service as Y, Signer as Z, ConditionWeightedThreshold as _, signatureHasResultingHash as a, BaseStorage as at, DIDDocument as b, ConnectCrypto as c, CREDENTIAL_SCHEMA_EIP712_TYPE as ct, IConnectCrypto as d, DEFAULT_RENOWN_CHAIN_ID as dt, Verifiable as et, IRenownCrypto as f, DEFAULT_RENOWN_NETWORK_ID as ft, AuthVerifiedCredential as g, VERIFIABLE_CREDENTIAL_EIP712_TYPE as gt, AuthVerifiableCredential as h, ISSUER_TYPE as ht, parseSignatureHashField as i, W3CCredential as it, IVerifiableCredential as j, IRenown as k, RenownCrypto as l, CREDENTIAL_SUBJECT_TYPE as lt, JwkKeyPair as m, DOMAIN_TYPE as mt, createSignatureVerifier as n, VerifiedCredential as nt, MemoryKeyStorage as o, MemoryStorage as ot, JsonWebKeyPairStorage as p, DEFAULT_RENOWN_URL as pt, RenownStorage as q, extractResultingHashFromSignature as r, VerifiedJWT as rt, RenownCryptoBuilder as s, IEventEmitter as st, RenownCryptoSigner as t, VerificationMethod as tt, DID as u, CREDENTIAL_TYPES as ut, CreateBearerTokenOptions as v, EcdsaSignature as w, DIDDocumentMetadata as x, CredentialStatus as y, LoginStatus as z };
-//# sourceMappingURL=signer-DYKGoYHB.d.ts.map
+export { IEventEmitter as $, LoginStatus as A, Service as B, InternalUser as C, ISSUER_TYPE as Ct, JWTVerifyPolicies as D, JWTVerified as E, VERIFIABLE_CREDENTIAL_EIP712_TYPE as Et, RenownEventEmitter as F, User$1 as G, SignInParams as H, RenownEvents as I, VerifiedCredential as J, Verifiable as K, RenownProfile as L, PowerhouseVerifiableCredential as M, ProfileFetcher as N, JsonWebKey$1 as O, Proof as P, MemoryStorage as Q, RenownStorage as R, IVerifiableCredential as S, DOMAIN_TYPE as St, JWTPayload as T, RENOWN_SESSION_COOKIE as Tt, Signer as U, ServiceEndpoint as V, Unsubscribe as W, W3CCredential as X, VerifiedJWT as Y, BaseStorage as Z, IPowerhouseCredentialSubject as _, CREDENTIAL_SUBJECT_TYPE as _t, JwkKeyPair as a, VerifiedAuthCredential as at, IRenown as b, DEFAULT_RENOWN_NETWORK_ID as bt, ConditionWeightedThreshold as c, fetchDelegationCredential as ct, DIDDocument as d, verifyCredentialSignature as dt, BuildCredentialParams as et, DIDDocumentMetadata as f, MissingSwitchboardError as ft, IAuthCredentialSubject as g, CREDENTIAL_SCHEMA_EIP712_TYPE as gt, EcdsaSignature as h, SwitchboardSource as ht, JsonWebKeyPairStorage as i, SignCredentialTypedData as it, PKHDid as j, KeyCapabilitySection as k, CreateBearerTokenOptions as l, recoverCredentialSigner as lt, DIDResolutionResult as m, SwitchboardRequestFn as mt, IConnectCrypto as n, CredentialMessage as nt, AuthVerifiableCredential as o, VerifyAuthCredentialOptions as ot, DIDResolutionMetadata as p, SwitchboardClient as pt, VerificationMethod as q, IRenownCrypto as r, FetchDelegationCredentialOptions as rt, AuthVerifiedCredential as s, buildAndSignCredential as st, DID as t, CredentialDomain as tt, CredentialStatus as u, verifyAuthCredential as ut, IPowerhouseIssuerType as v, CREDENTIAL_TYPES as vt, Issuer as w, RENOWN_READ_MODEL_SUBGRAPH as wt, ISigner$1 as x, DEFAULT_RENOWN_URL as xt, IProof as y, DEFAULT_RENOWN_CHAIN_ID as yt, RenownStorageMap as z };
+//# sourceMappingURL=types-DVcz43Fb.d.ts.map

package/dist/types-DVcz43Fb.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types-DVcz43Fb.d.ts","names":[],"sources":["../src/constants.ts","../src/switchboard.ts","../src/credential.ts","../src/event/types.ts","../src/storage/common.ts","../src/types.ts","../src/crypto/types.ts"],"mappings":";;;cAAa,kBAAA;AAAA,cACA,yBAAA;AAAA,cACA,uBAAA;AAFb;AAAA,cAKa,qBAAA;;;cAIA,0BAAA;AAAA,cAEA,WAAA;EAAA;;;;;;cAKA,iCAAA;EAAA;;;;;;;;;;;;;;;;;;;;;;;;cAWA,6BAAA;EAAA;;;;;;cAKA,uBAAA;EAAA;;;;;;cAKA,WAAA;EAAA;;;;;;cAKA,gBAAA;EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA1Cb;cCaa,uBAAA,SAAgC,KAAA;;EDbd;EAAA,OCsBtB,EAAA,CAAG,KAAA,YAAiB,KAAA,IAAS,uBAAA;AAAA;;;KAoO1B,oBAAA,IACV,KAAA,UACA,SAAA,EAAW,MAAA,sBACR,OAAA;;KAGO,iBAAA,YAA6B,oBAAA;AAAA,cAI5B,iBAAA;EAAA;cAMC,MAAA,EAAQ,iBAAA;EDxQc;EAAA,ICmR9B,QAAA,CAAA;EA2CE,aAAA,CAAc,MAAA;IAClB,OAAA;IACA,OAAA;IACA,MAAA;EAAA,IACE,OAAA,CAAQ,8BAAA;EA4BN,mBAAA,CACJ,OAAA,WACC,OAAA,CAAQ,aAAA;EAuBL,mBAAA,CACJ,YAAA,UACA,gBAAA,YACC,OAAA;EAQG,cAAA,CACJ,kBAAA,UACA,OAAA,EAAS,MAAA,KACR,OAAA;EAoBG,eAAA,CACJ,UAAA,EAAY,8BAAA,EACZ,gBAAA,YACC,OAAA;EA4CG,gBAAA,CACJ,OAAA,UACA,OAAA;IAAW,QAAA;IAAmB,SAAA;EAAA,IAC7B,OAAA;EA6BG,gBAAA,CAAiB,UAAA,UAAoB,MAAA,YAAkB,OAAA;EAW7D,cAAA,EAAgB,cAAA;AAAA;;;KCpeb,GAAA;AAAA,KACA,eAAA;EACH,IAAA;EACA,OAAA;EACA,OAAA;EACA,iBAAA,GAAoB,GAAA;EACpB,IAAA,GAAO,GAAA;AAAA;AAAA,KAEJ,kBAAA;EAAuB,IAAA;EAAc,IAAA;AAAA;;KAG9B,gBAAA;EACV,OAAA;EACA,OAAA;AAAA;;KAIU,iBAAA;EACV,UAAA;EACA,IAAA;EACA,EAAA;EACA,MAAA;IAAU,EAAA;IAAY,eAAA,EAAiB,GAAA;EAAA;EACvC,iBAAA;IAAqB,EAAA;IAAY,GAAA;EAAA;EACjC,gBAAA;IAAoB,EAAA;IAAY,IAAA;EAAA;EAChC,YAAA;EACA,cAAA;AAAA;;KAIU,uBAAA,IAA2B,IAAA;EACrC,MAAA,EAAQ,eAAA;EACR,KAAA,EAAO,MAAA,kBAAwB,kBAAA;EAC/B,WAAA;EACA,OAAA,EAAS,MAAA;AAAA,MACL,OAAA,CAAQ,GAAA;AAAA,UAEG,qBAAA;EACf,aAAA,EAAe,uBAAA;EACf,OAAA,EAAS,GAAA;EACT,OAAA;EACA,GAAA;;EAEA,KAAA;EACA,aAAA;AAAA;;iBAIoB,sBAAA,CACpB,MAAA,EAAQ,qBAAA,GACP,OAAA,CAAQ,8BAAA;;iBA+DW,uBAAA,CACpB,UAAA,EAAY,8BAAA,GACX,OAAA,CAAQ,GAAA;;iBAgBW,yBAAA,CACpB,UAAA,EAAY,8BAAA,GACX,OAAA;AAAA,UAoCc,gCAAA;;EAEf,OAAA;;EAEA,OAAA;;EAEA,MAAA;;EAEA,OAAA;EFjKW;EEmKX,cAAA;;EAEA,kBAAA,GAAqB,oBAAA;;EAErB,QAAA;;EAEA,eAAA;AAAA;AAAA,iBAiEoB,yBAAA,CACpB,OAAA,EAAS,gCAAA,GACR,OAAA,CAAQ,8BAAA;AAAA,UA2CM,sBAAA;EACf,OAAA;EACA,OAAA;EACA,SAAA;;EAEA,GAAA;;EAEA,MAAA;EACA,UAAA,EAAY,8BAAA;AAAA;AAAA,UAGG,2BAAA;EFlRP;EEoRR,QAAA;EFpRQ;EEsRR,SAAA;;EAEA,cAAA;;EAEA,kBAAA,GAAqB,oBAAA;;EAErB,eAAA;AAAA;AAAA,iBAKoB,oBAAA,CACpB,GAAA,UACA,OAAA,GAAS,2BAAA,GACR,OAAA,CAAQ,sBAAA;;;UCpVM,aAAA,gBAA6B,MAAA;;;AHA9C;;;;EGOE,EAAA,iBAAmB,MAAA,EACjB,KAAA,EAAO,CAAA,EACP,QAAA,GAAW,IAAA,EAAM,MAAA,CAAO,CAAA;EHRf;;;;;EGgBX,IAAA,iBAAqB,MAAA,EAAQ,KAAA,EAAO,CAAA,EAAG,IAAA,EAAM,MAAA,CAAO,CAAA;AAAA;;;UCjBrC,QAAA,WACL,MAAA,oBAA0B,MAAA,qCAClB,CAAA,SAAU,CAAA;EAE5B,GAAA,CAAI,GAAA,EAAK,GAAA,GAAM,CAAA,CAAE,GAAA;EACjB,GAAA,CAAI,GAAA,EAAK,GAAA,EAAK,KAAA,GAAQ,CAAA,CAAE,GAAA;EACxB,MAAA,CAAO,GAAA,EAAK,GAAA;AAAA;AAAA,uBAGQ,WAAA,WACV,MAAA,oBAA0B,MAAA,qCAClB,CAAA,SAAU,CAAA,aACjB,QAAA,CAAS,CAAA;EAAA,SACX,GAAA,CAAI,GAAA,EAAK,GAAA,GAAM,CAAA,CAAE,GAAA;EAAA,SACjB,GAAA,CAAI,GAAA,EAAK,GAAA,EAAK,KAAA,GAAQ,CAAA,CAAE,GAAA;EAAA,SACxB,MAAA,CAAO,GAAA,EAAK,GAAA;AAAA;AAAA,cAGV,aAAA,WACD,MAAA,oBAA0B,MAAA,qCAClB,CAAA,SAAU,CAAA,UACpB,WAAA,CAAY,CAAA;EAAA,iBACH,IAAA;EAEjB,GAAA,CAAI,GAAA,EAAK,GAAA,GAAG,CAAA,CAAA,GAAA;EAIZ,GAAA,CAAI,GAAA,EAAK,GAAA,EAAK,KAAA,GAAQ,CAAA,CAAE,GAAA;EAQxB,MAAA,CAAO,GAAA,EAAK,GAAA;AAAA;;;UCbG,cAAA;EACf,CAAA;EACA,CAAA;EACA,aAAA;AAAA;AAAA,KAGU,MAAA,IACV,IAAA,WAAe,UAAA,KACZ,OAAA,CAAQ,cAAA;AAAA,UAEI,UAAA;EACf,GAAA;EACA,GAAA;EACA,GAAA;EACA,GAAA;EACA,GAAA;EACA,GAAA;EACA,IAAA;EAAA,CACC,CAAA;AAAA;AAAA,UAGc,iBAAA;EACf,GAAA;EACA,GAAA;EACA,GAAA;EACA,GAAA;EACA,GAAA;AAAA;AAAA,UAGe,WAAA;EACf,QAAA;EACA,OAAA,EAAS,OAAA,CAAQ,UAAA;EACjB,mBAAA,EAAqB,mBAAA;EACrB,MAAA;EACA,MAAA,EAAQ,kBAAA;EACR,GAAA;EACA,QAAA,GAAW,iBAAA;AAAA;AAAA,UAKI,mBAAA;EACf,UAAA;EACA,qBAAA,EAAuB,qBAAA;EACvB,WAAA,EAAa,WAAA;EACb,mBAAA,EAAqB,mBAAA;AAAA;AAAA,UAGN,qBAAA;EACf,WAAA;EACA,KAAA;EAAA,CAMC,CAAA;AAAA;AAAA,UAGc,mBAAA;EACf,OAAA;EACA,OAAA;EACA,WAAA;EACA,SAAA;EACA,UAAA;EACA,aAAA;EACA,YAAA;EACA,WAAA;EAAA,CACC,CAAA;AAAA;AAAA,KAGS,oBAAA;AAAA,KAOA,WAAA;EACV,UAAA;EACA,EAAA;EACA,WAAA;EACA,UAAA;EACA,kBAAA,GAAqB,kBAAA;EACrB,OAAA,GAAU,OAAA;EAEV,SAAA,GAAY,kBAAA;AAAA,YAEN,oBAAA,cAAkC,kBAAA;AAAA,UAGzB,OAAA;EACf,EAAA;EACA,IAAA;EACA,eAAA,EAAiB,eAAA,GAAkB,eAAA;EAAA,CAClC,CAAA;AAAA;AAAA,KAGS,eAAA,YAA2B,MAAA;AAAA,UAEtB,YAAA;EACf,GAAA;EACA,GAAA;EACA,CAAA;EACA,GAAA;EACA,OAAA;EACA,GAAA;EACA,GAAA;EACA,CAAA;EACA,GAAA;EACA,CAAA;EACA,CAAA;EAAA,CACC,CAAA;AAAA;AAAA,UAGc,kBAAA;EACf,EAAA;EACA,IAAA;EACA,UAAA;EACA,eAAA;EACA,eAAA;EACA,YAAA,GAAe,YAAA;EACf,YAAA;EACA,kBAAA;EACA,mBAAA;EACA,eAAA;EACA,WAAA,GAAc,kBAAA;EACd,YAAA,GAAe,kBAAA;EACf,SAAA;EACA,kBAAA,GAAqB,kBAAA;EACrB,0BAAA,GAA6B,0BAAA;EAC7B,kBAAA;EACA,kBAAA;EACA,iBAAA;EACA,mBAAA;AAAA;AAAA,UAGe,0BAAA;EACf,SAAA,EAAW,kBAAA;EACX,MAAA;AAAA;AAAA,UAKe,MAAA;EACf,GAAA;EACA,MAAA,EAAQ,MAAA;EACR,GAAA;AAAA;AAAA,UAGe,KAAA;EACf,IAAA;EAAA,CACC,CAAA;AAAA;AAAA,KAGS,UAAA,MAAgB,QAAA,CAAS,CAAA;EAAA,SAC1B,KAAA,EAAO,KAAA;AAAA;AAAA,UAGD,gBAAA;EACf,EAAA;EACA,IAAA;AAAA;AAAA,KAGU,aAAA;EACV,UAAA;EACA,EAAA;EACA,IAAA;EACA,MAAA;IAAU,EAAA;IAAA,CAAa,CAAA;EAAA;EACvB,YAAA;EACA,cAAA;EACA,iBAAA;IACE,EAAA;IAAA,CACC,CAAA;EAAA;EAEH,gBAAA,GAAmB,gBAAA;EACnB,QAAA;EACA,UAAA;EAAA,CACC,CAAA;AAAA;AAAA,KAGS,WAAA,GAAc,WAAA;AAAA,KAEd,kBAAA,GAAqB,WAAA;EAC/B,oBAAA,EAAsB,UAAA,CAAW,aAAA;AAAA;AAAA,KAGvB,aAAA;EACV,UAAA;EACA,QAAA;EACA,UAAA;EACA,SAAA,iBJ8C4B;EI5C5B,SAAA;EACA,SAAA;AAAA;AAAA,KAIU,YAAA,GAAe,IAAA;EACzB,GAAA;EACA,UAAA,EAAY,8BAAA;EACZ,OAAA,GAAU,aAAA;AAAA;AAAA,KAIA,MAAA,GAAO,YAAA;;;;;;;KAQP,cAAA,IACV,IAAA,EAAM,MAAA,EACN,OAAA,aACG,OAAA,CAAQ,aAAA;AAAA,UAEI,YAAA;;EAEf,OAAA;EJuBY;EIrBZ,OAAA;EJ2EM;EIzEN,aAAA,EAAe,uBAAA;EJ2Eb;EIzEF,QAAA;EJuEoB;EIrEpB,SAAA;EJyEY;EIvEZ,aAAA;AAAA;AAAA,KAGU,WAAA;AAAA,KAEA,WAAA;AAAA,KAMA,gBAAA;EAAqB,IAAA,EAAM,YAAA;AAAA;AAAA,KAE3B,aAAA,GAAgB,QAAA,CAAS,gBAAA;AAAA,KAEzB,YAAA;EACV,IAAA,EAAM,MAAA;EACN,MAAA,EAAQ,WAAA;AAAA;AAAA,KAGE,kBAAA,GAAqB,aAAA,CAAc,YAAA;AAAA,UAE9B,OAAA,SAAgB,IAAA,CAAK,kBAAA;EAAA,SAC3B,OAAA;EAAA,SACA,IAAA,EAAM,MAAA;EAAA,SACN,MAAA,EAAQ,WAAA;EACjB,KAAA,GAAQ,OAAA,aAAoB,OAAA,CAAQ,MAAA;EACpC,MAAA,GAAS,MAAA,EAAQ,YAAA,KAAiB,OAAA,CAAQ,MAAA;EAC1C,MAAA,QAAc,OAAA;EJmLD;EIjLb,UAAA,QAAkB,OAAA;EJiLhB;EI/KF,cAAA,QAAsB,OAAA;EAAA,SACb,MAAA,EAAQ,aAAA;EAAA,SACR,MAAA,EAAQ,SAAA;EAAA,SACR,GAAA;EAAA,SACA,cAAA,EAAgB,cAAA;EACzB,iBAAA,GAAoB,KAAA,aAAkB,OAAA,SAAgB,kBAAA;EACtD,cAAA,GACE,OAAA,EAAS,wBAAA,EACT,OAAA,eACG,OAAA;AAAA;AAAA,KAGF,UAAA;EACH,EAAA;AAAA,IACE,CAAA;AAAA,KAEC,oBAAA;EACH,EAAA;AAAA,IACE,CAAA;AAAA,UAEM,gBAAA;EACR,EAAA;EACA,IAAA;AAAA;AAAA,UAGQ,4BAAA;EACR,UAAA;EACA,EAAA;EACA,IAAA;EACA,MAAA,EAAQ,UAAA,CAAW,MAAA;EACnB,YAAA;EACA,cAAA;EACA,iBAAA,EAAmB,oBAAA,CAAqB,OAAA;EACxC,gBAAA,GAAmB,gBAAA;EACnB,gBAAA,EAAkB,gBAAA;AAAA;AAAA,UAGH,MAAA;EACf,kBAAA;EACA,eAAA;EACA,OAAA;EACA,YAAA;EACA,IAAA;EACA,UAAA;EACA,MAAA;IACE,MAAA;MACE,OAAA;MACA,OAAA;IAAA;IAEF,KAAA,SAAc,gBAAA;IACd,WAAA;EAAA;AAAA;AAAA,UAIa,qBAAA,0BAGP,4BAAA,CAA6B,OAAA,EAAS,MAAA;EAC9C,KAAA,EAAO,MAAA;AAAA;AAAA,UAGQ,4BAAA;EACf,EAAA;EACA,GAAA;AAAA;AAAA,UAGe,qBAAA;EACf,eAAA;AAAA;AAAA,KAGU,8BAAA,GAAiC,qBAAA,CAC3C,4BAAA,EACA,qBAAA;AAAA,UAGe,sBAAA;EACf,OAAA;EACA,SAAA;EACA,OAAA;AAAA;AAAA,KAGU,wBAAA,GAA2B,qBAAA,CACrC,sBAAA,EACA,MAAA;AAAA,KAGU,sBAAA,GAAyB,kBAAA;EACnC,oBAAA,EAAsB,UAAA,CAAW,wBAAA;AAAA;AAAA,KAGvB,MAAA;EACV,SAAA;EACA,OAAA;EACA,OAAA;AAAA;AAAA,UAGe,wBAAA;EACf,SAAA;EACA,GAAA;AAAA;;;KC7XU,UAAA;EACV,SAAA,EAAW,UAAA;EACX,UAAA,EAAY,UAAA;AAAA;AAAA,UAGG,qBAAA;EACf,WAAA,IAAe,OAAA,CAAQ,UAAA;EACvB,WAAA,CAAY,OAAA,EAAS,UAAA,GAAa,OAAA;EAClC,aAAA,IAAiB,OAAA;AAAA;AAAA,KAGP,GAAA;AAAA,UAEK,aAAA;EACf,GAAA,EAAK,GAAA;ENdM;EMgBX,OAAA;EACA,SAAA,EAAW,SAAA;EACX,SAAA,IAAa,OAAA;EACb,IAAA,GAAO,IAAA,EAAM,UAAA,KAAe,OAAA,CAAQ,UAAA;EACpC,MAAA,GAAS,IAAA,EAAM,UAAA,EAAY,SAAA,EAAW,UAAA,KAAe,OAAA;EACrD,MAAA,EAAQ,MAAA;EACR,cAAA,GACE,OAAA,sBACA,OAAA,GAAU,wBAAA,KACP,OAAA;AAAA;;ANlBP;;UMwBiB,cAAA,SAAuB,aAAA"}

package/dist/types-b2fgIxlx.d.ts

@@ -0,0 +1,59 @@
+import { it as SignCredentialTypedData } from "./types-DVcz43Fb.js";
+import { ComponentType, ReactNode } from "react";
+
+//#region src/wallet/types.d.ts
+declare const LoginMethod: {
+  readonly WALLET: "wallet";
+  readonly GOOGLE: "google";
+  readonly EMAIL: "email";
+  readonly APPLE: "apple";
+};
+type LoginMethod = (typeof LoginMethod)[keyof typeof LoginMethod];
+interface WalletThemeColors {
+  accentColor?: string;
+  accentColorForeground?: string;
+}
+type WalletTheme = "light" | "dark" | ({
+  mode: "light" | "dark";
+} & WalletThemeColors);
+declare function normalizeWalletTheme(theme: WalletTheme | undefined): {
+  mode: "light" | "dark";
+  accentColor?: string;
+  accentColorForeground?: string;
+};
+interface WalletSession {
+  address: `0x${string}`;
+  chainId: number;
+  signTypedData: SignCredentialTypedData;
+  canSignSilently?: boolean;
+}
+interface WalletController {
+  connect(method?: LoginMethod): Promise<WalletSession>;
+  disconnect(): Promise<void>;
+  getSession(): WalletSession | undefined;
+  subscribe?(listener: (session: WalletSession | undefined) => void): () => void;
+}
+interface WalletAdapterMeta {
+  id: string;
+  redirectReturnParams: string[];
+  supportedMethods: LoginMethod[];
+}
+interface WalletAdapterImpl {
+  Provider: ComponentType<{
+    children: ReactNode;
+    theme?: WalletTheme;
+  }>;
+  useController: () => WalletController;
+}
+interface WalletAdapter extends WalletAdapterImpl {
+  meta: WalletAdapterMeta;
+}
+interface WalletAdapterDescriptor {
+  meta: WalletAdapterMeta;
+  load: () => Promise<WalletAdapterImpl>;
+}
+type WalletAdapterFactory<Config = unknown> = (config: Config) => WalletAdapterImpl;
+type WalletAdapterProvider<Config = unknown> = (config: Config) => WalletAdapterDescriptor;
+//#endregion
+export { WalletAdapterImpl as a, WalletController as c, WalletThemeColors as d, normalizeWalletTheme as f, WalletAdapterFactory as i, WalletSession as l, WalletAdapter as n, WalletAdapterMeta as o, WalletAdapterDescriptor as r, WalletAdapterProvider as s, LoginMethod as t, WalletTheme as u };
+//# sourceMappingURL=types-b2fgIxlx.d.ts.map

package/dist/types-b2fgIxlx.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types-b2fgIxlx.d.ts","names":[],"sources":["../src/wallet/types.ts"],"mappings":";;;;cAKa,WAAA;EAAA;;;;;KAOD,WAAA,WAAsB,WAAA,eAA0B,WAAA;AAAA,UAI3C,iBAAA;EACf,WAAA;EACA,qBAAA;AAAA;AAAA,KAIU,WAAA;EAGL,IAAA;AAAA,IAA2B,iBAAA;AAAA,iBAGlB,oBAAA,CAAqB,KAAA,EAAO,WAAA;EAC1C,IAAA;EACA,WAAA;EACA,qBAAA;AAAA;AAAA,UAYe,aAAA;EACf,OAAA;EACA,OAAA;EACA,aAAA,EAAe,uBAAA;EAGf,eAAA;AAAA;AAAA,UAIe,gBAAA;EACf,OAAA,CAAQ,MAAA,GAAS,WAAA,GAAc,OAAA,CAAQ,aAAA;EACvC,UAAA,IAAc,OAAA;EACd,UAAA,IAAc,aAAA;EAGd,SAAA,EACE,QAAA,GAAW,OAAA,EAAS,aAAA;AAAA;AAAA,UAMP,iBAAA;EACf,EAAA;EAGA,oBAAA;EAGA,gBAAA,EAAkB,WAAA;AAAA;AAAA,UAIH,iBAAA;EAGf,QAAA,EAAU,aAAA;IAAgB,QAAA,EAAU,SAAA;IAAW,KAAA,GAAQ,WAAA;EAAA;EAEvD,aAAA,QAAqB,gBAAA;AAAA;AAAA,UAIN,aAAA,SAAsB,iBAAA;EACrC,IAAA,EAAM,iBAAA;AAAA;AAAA,UAKS,uBAAA;EACf,IAAA,EAAM,iBAAA;EACN,IAAA,QAAY,OAAA,CAAQ,iBAAA;AAAA;AAAA,KAGV,oBAAA,sBACV,MAAA,EAAQ,MAAA,KACL,iBAAA;AAAA,KAEO,qBAAA,sBACV,MAAA,EAAQ,MAAA,KACL,uBAAA"}

package/dist/{utils-C9ZgMs_C.d.ts → utils-CrNR-mv8.d.ts}

@@ -1,12 +1,14 @@
-import { $ as User, A as ISigner, B as PKHDid, G as RenownEvents, H as ProfileFetcher, J as RenownStorageMap, M as InternalUser, N as Issuer, V as PowerhouseVerifiableCredential, W as RenownEventEmitter, f as IRenownCrypto, g as AuthVerifiedCredential, k as IRenown, nt as VerifiedCredential, ot as MemoryStorage, p as JsonWebKeyPairStorage, q as RenownStorage, v as CreateBearerTokenOptions, z as LoginStatus } from "./signer-DYKGoYHB.js";
+import { A as LoginStatus, C as InternalUser, F as RenownEventEmitter, G as User, H as SignInParams, I as RenownEvents, J as VerifiedCredential, N as ProfileFetcher, Q as MemoryStorage, R as RenownStorage, b as IRenown, i as JsonWebKeyPairStorage, j as PKHDid, l as CreateBearerTokenOptions, mt as SwitchboardRequestFn, pt as SwitchboardClient, r as IRenownCrypto, s as AuthVerifiedCredential, w as Issuer, x as ISigner, z as RenownStorageMap } from "./types-DVcz43Fb.js";
 import { Resolver } from "did-resolver";
 
 //#region src/common.d.ts
 declare class RenownMemoryStorage extends MemoryStorage<RenownStorageMap> {}
 declare class Renown implements IRenown {
   #private;
-  constructor(store: RenownStorage, eventEmitter: RenownEventEmitter, crypto: IRenownCrypto, appName: string, baseUrl?: string, profileFetcher?: ProfileFetcher);
+  constructor(store: RenownStorage, eventEmitter: RenownEventEmitter, crypto: IRenownCrypto, appName: string, baseUrl?: string, profileFetcher?: ProfileFetcher, switchboard?: SwitchboardClient, chainId?: number);
   get baseUrl(): string;
+  /** Chain id this app issues credentials on; a session from another chain is rejected by {@link signIn}. */
+  get chainId(): number;
   get user(): InternalUser | undefined;
   get status(): LoginStatus;
   get signer(): ISigner;
@@ -14,104 +16,22 @@ declare class Renown implements IRenown {
   get did(): `did:${string}`;
   get profileFetcher(): ProfileFetcher | undefined;
   login(userDid: string): Promise<User>;
+  signIn(params: SignInParams): Promise<User>;
   logout(): Promise<void>;
+  revalidate(): Promise<boolean>;
+  refreshProfile(): Promise<boolean>;
   on<K extends keyof RenownEvents>(event: K, listener: (data: RenownEvents[K]) => void): () => void;
   verifyBearerToken(token: string): Promise<false | AuthVerifiedCredential>;
   getBearerToken(options: CreateBearerTokenOptions): Promise<string>;
 }
 //#endregion
-//#region src/credential.d.ts
-type Hex = `0x${string}`;
-type TypedDataDomain = {
-  name?: string;
-  version?: string;
-  chainId?: number;
-  verifyingContract?: Hex;
-  salt?: Hex;
-};
-type TypedDataParameter = {
-  name: string;
-  type: string;
-};
-/** EIP-712 domain as signed by the credential issuer. */
-type CredentialDomain = {
-  version: string;
-  chainId: number;
-};
-/** The credential body that is EIP-712 signed (everything except `proof`). */
-type CredentialMessage = {
-  "@context": string[];
-  type: string[];
-  id: string;
-  issuer: {
-    id: string;
-    ethereumAddress: Hex;
-  };
-  credentialSubject: {
-    id: string;
-    app: string;
-  };
-  credentialSchema: {
-    id: string;
-    type: string;
-  };
-  issuanceDate: string;
-  expirationDate: string;
-};
-/** Typed-data signer; matches the loose shape used by wallet adapters. */
-type SignCredentialTypedData = (args: {
-  domain: TypedDataDomain;
-  types: Record<string, readonly TypedDataParameter[]>;
-  primaryType: string;
-  message: Record<string, unknown>;
-}) => Promise<Hex>;
-interface BuildCredentialParams {
-  signTypedData: SignCredentialTypedData;
-  address: Hex;
-  chainId: number;
-  app: string;
-  /** Credential subject id: the app/client DID the credential delegates to. */
-  appId: string;
-  expiresInDays?: number;
-}
-/** Assemble a Renown delegation VC and sign it with the provided signer. */
-declare function buildAndSignCredential(params: BuildCredentialParams): Promise<PowerhouseVerifiableCredential>;
-/** Recover the address that signed a credential's EIP-712 proof. */
-declare function recoverCredentialSigner(credential: PowerhouseVerifiableCredential): Promise<Hex>;
-/** True when the proof was signed by the credential's declared issuer address. */
-declare function verifyCredentialSignature(credential: PowerhouseVerifiableCredential): Promise<boolean>;
-interface FetchDelegationCredentialOptions {
-  /** Ethereum address that must have issued the credential. */
-  address: string;
-  /** Chain id the credential must be scoped to. */
-  chainId: number;
-  /** App/client DID the credential must delegate to (credentialSubject.id). */
-  appDid: string;
-  /** Renown service base URL. Defaults to DEFAULT_RENOWN_URL. */
+//#region src/discovery.d.ts
+interface ResolveSwitchboardEndpointOptions {
+  switchboardUrl?: string;
   baseUrl?: string;
-  /** Re-verify the EIP-712 proof signature (default true). */
-  verifySignature?: boolean;
+  timeoutMs?: number;
 }
-declare function fetchDelegationCredential(options: FetchDelegationCredentialOptions): Promise<PowerhouseVerifiableCredential | undefined>;
-interface VerifiedAuthCredential {
-  address: string;
-  chainId: number;
-  networkId: string;
-  /** Owner identity: the pkh DID (did:pkh:<net>:<chainId>:<address>). */
-  did: string;
-  /** App/client DID the bearer token was issued by. */
-  appDid: string;
-  credential: PowerhouseVerifiableCredential;
-}
-interface VerifyAuthCredentialOptions {
-  /** Expected `aud` claim on the bearer token. */
-  audience?: string;
-  /** Renown service base URL. */
-  renownUrl?: string;
-  /** Re-verify the credential's EIP-712 proof (default true). */
-  verifySignature?: boolean;
-}
-declare function verifyAuthCredential(jwt: string, options?: VerifyAuthCredentialOptions): Promise<VerifiedAuthCredential | undefined>;
+declare function resolveSwitchboardEndpoint(options: ResolveSwitchboardEndpointOptions): Promise<string | undefined>;
 //#endregion
 //#region src/renown-builder.d.ts
 interface RenownBuilderOptions {
@@ -121,7 +41,10 @@ interface RenownBuilderOptions {
   crypto?: IRenownCrypto;
   keyPairStorage?: JsonWebKeyPairStorage;
   baseUrl?: string;
+  switchboardUrl?: string;
   profileFetcher?: ProfileFetcher;
+  /** Chain id credentials are issued on (default 1). The issuer DID embeds it, so `signIn` rejects a wallet session from another chain. */
+  chainId?: number;
 }
 /**
  * Base builder for creating Renown instances.
@@ -160,6 +83,8 @@ declare class BaseRenownBuilder {
    * Defaults to https://www.renown.id
    */
   withBaseUrl(baseUrl: string): this;
+  withSwitchboardUrl(switchboardUrl: string): this;
+  withChainId(chainId: number): this;
   /**
    * Set a profile fetcher strategy for enriching user data after login.
    * The fetcher receives the authenticated user and the base URL,
@@ -179,9 +104,71 @@ declare class BaseRenownBuilder {
   static from(options: RenownBuilderOptions): BaseRenownBuilder;
 }
 //#endregion
+//#region src/local-credential-verifier.d.ts
+/** Confirms an authenticated signer's delegation credential is still live. */
+type CredentialCheck = (params: {
+  address: string;
+  chainId: number;
+  appId: string;
+}) => Promise<boolean>;
+interface LocalCredentialVerifierOptions {
+  /** Notified when the read itself fails; the check then fails closed. */
+  onError?: (error: unknown) => void;
+}
+/** A credential check that reads a Switchboard's own renown read model through
+ * `execute`, rather than any Renown or Switchboard over HTTP. */
+declare function createLocalCredentialVerifier(execute: SwitchboardRequestFn, options?: LocalCredentialVerifierOptions): CredentialCheck;
+//#endregion
 //#region src/profile.d.ts
 declare const fetchRenownProfile: ProfileFetcher;
 //#endregion
+//#region src/session.d.ts
+/** Server-side view of an authenticated Renown session. */
+interface RenownSession {
+  /** Authenticated user identity derived from the session token. */
+  user: User;
+  /** App/client DID the token was issued by. */
+  appDid: string;
+  /** Token expiry (epoch seconds), when present. */
+  expiresAt?: number;
+}
+/** Display hint carried alongside the token (unverified; not for auth). */
+interface RenownSessionProfile {
+  name?: string | null;
+  avatar?: string | null;
+  /** Renown profile document id, so SSR can resolve profile links. */
+  documentId?: string | null;
+  username?: string | null;
+  userImage?: string | null;
+}
+/** The `renown_session` cookie payload: the bearer token + a display hint. */
+interface RenownSessionCookie {
+  token: string;
+  profile?: RenownSessionProfile | null;
+}
+interface VerifyRenownSessionOptions {
+  /** Expected `aud` claim on the token. */
+  audience?: string;
+  /** Switchboard GraphQL endpoint used when re-verifying the credential. */
+  switchboardUrl?: string;
+  /** Renown service base URL used when re-verifying the credential. */
+  renownUrl?: string;
+  /** Also re-verify the credential against Switchboard (default false = token-only, no network). */
+  verifyCredential?: boolean;
+}
+/** Claims read from a session token without verifying its signature. */
+interface RenownSessionClaims {
+  address?: string;
+  chainId?: number;
+  networkId?: string;
+  /** Expiry in epoch seconds. */
+  expiresAt?: number;
+}
+/** Serialize a session cookie value (token + optional display hint). */
+declare function serializeRenownSessionCookie(value: RenownSessionCookie): string;
+declare function readSessionClaims(value: string): RenownSessionClaims | undefined;
+declare function verifyRenownSession(value: string, options?: VerifyRenownSessionOptions): Promise<RenownSession | undefined>;
+//#endregion
 //#region src/utils.d.ts
 type ILogger = {
   level: "verbose" | "debug" | "info" | "warn" | "error";
@@ -210,5 +197,5 @@ declare function assertIsAuthCredential(credential: VerifiedCredential): asserts
 declare function createAuthBearerToken(chainId: number, networkId: string, address: string, issuer: Issuer, options?: CreateBearerTokenOptions): Promise<string>;
 declare const getResolver: () => Resolver;
 //#endregion
-export { Renown as C, verifyCredentialSignature as S, VerifyAuthCredentialOptions as _, getResolver as a, recoverCredentialSigner as b, fetchRenownProfile as c, BuildCredentialParams as d, CredentialDomain as f, VerifiedAuthCredential as g, SignCredentialTypedData as h, createAuthBearerToken as i, BaseRenownBuilder as l, FetchDelegationCredentialOptions as m, VerifyAuthBearerTokenOptions as n, parsePkhDid as o, CredentialMessage as p, assertIsAuthCredential as r, verifyAuthBearerToken as s, ILogger as t, RenownBuilderOptions as u, buildAndSignCredential as v, RenownMemoryStorage as w, verifyAuthCredential as x, fetchDelegationCredential as y };
-//# sourceMappingURL=utils-C9ZgMs_C.d.ts.map
+export { resolveSwitchboardEndpoint as C, ResolveSwitchboardEndpointOptions as S, RenownMemoryStorage as T, CredentialCheck as _, getResolver as a, BaseRenownBuilder as b, RenownSession as c, RenownSessionProfile as d, VerifyRenownSessionOptions as f, fetchRenownProfile as g, verifyRenownSession as h, createAuthBearerToken as i, RenownSessionClaims as l, serializeRenownSessionCookie as m, VerifyAuthBearerTokenOptions as n, parsePkhDid as o, readSessionClaims as p, assertIsAuthCredential as r, verifyAuthBearerToken as s, ILogger as t, RenownSessionCookie as u, LocalCredentialVerifierOptions as v, Renown as w, RenownBuilderOptions as x, createLocalCredentialVerifier as y };
+//# sourceMappingURL=utils-CrNR-mv8.d.ts.map

package/dist/utils-CrNR-mv8.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils-CrNR-mv8.d.ts","names":[],"sources":["../src/common.ts","../src/discovery.ts","../src/renown-builder.ts","../src/local-credential-verifier.ts","../src/profile.ts","../src/session.ts","../src/utils.ts"],"mappings":";;;;cAmCa,mBAAA,SAA4B,aAAA,CAAc,gBAAA;AAAA,cAE1C,MAAA,YAAkB,OAAA;EAAA;cAa3B,KAAA,EAAO,aAAA,EACP,YAAA,EAAc,kBAAA,EACd,MAAA,EAAQ,aAAA,EACR,OAAA,UACA,OAAA,WACA,cAAA,GAAiB,cAAA,EACjB,WAAA,GAAc,iBAAA,EACd,OAAA;EAAA,IAwBE,OAAA,CAAA;EA5Cc;EAAA,IAiDd,OAAA,CAAA;EAAA,IAIA,IAAA,CAAA,GAlC6B,YAAA;EAAA,IAsC7B,MAAA,CAAA,GAAM,WAAA;EAAA,IAIN,MAAA,CAAA,GAAM,OAAA;EAAA,IAIN,MAAA,CAAA,GAAM,aAAA;EAAA,IAIN,GAAA,CAAA;EAAA,IAIA,cAAA,CAAA,GAAc,cAAA;EAkBZ,KAAA,CAAM,OAAA,WAAkB,OAAA,CAAQ,IAAA;EAyBhC,MAAA,CAAO,MAAA,EAAQ,YAAA,GAAe,OAAA,CAAQ,IAAA;EAmI5C,MAAA,CAAA,GAAM,OAAA;EAQA,UAAA,CAAA,GAAc,OAAA;EAsBd,cAAA,CAAA,GAAkB,OAAA;EAsCxB,EAAA,iBAAmB,YAAA,CAAA,CACjB,KAAA,EAAO,CAAA,EACP,QAAA,GAAW,IAAA,EAAM,YAAA,CAAa,CAAA;EAkC1B,iBAAA,CAAkB,KAAA,WAAa,OAAA,SAlCJ,sBAAA;EAsC3B,cAAA,CAAe,OAAA,EAAS,wBAAA,GAAwB,OAAA;AAAA;;;UCxYvC,iCAAA;EAEf,cAAA;EAEA,OAAA;EAEA,SAAA;AAAA;AAAA,iBAcoB,0BAAA,CACpB,OAAA,EAAS,iCAAA,GACR,OAAA;;;UCRc,oBAAA;EACf,OAAA;EACA,OAAA,GAAU,aAAA;EACV,YAAA,GAAe,kBAAA;EACf,MAAA,GAAS,aAAA;EACT,cAAA,GAAiB,qBAAA;EACjB,OAAA;EACA,cAAA;EACA,cAAA,GAAiB,cAAA;EF4BR;EE1BT,OAAA;AAAA;;;;;;cAQW,iBAAA;EAAA;EFgG2B;;;cElF1B,OAAA;EF2GwB;;;;EEnGpC,WAAA,CAAY,OAAA,EAAS,aAAA;EF2SZ;;;;EElST,gBAAA,CAAiB,YAAA,EAAc,kBAAA;EFyUD;;;;EEhU9B,UAAA,CAAW,MAAA,EAAQ,aAAA;EFnCU;;;;;EE6C7B,kBAAA,CAAmB,cAAA,EAAgB,qBAAA;EF/BjC;;;;EEwCF,WAAA,CAAY,OAAA;EAOZ,kBAAA,CAAmB,cAAA;EAOnB,WAAA,CAAY,OAAA;EFjDI;;;;;;EE4DhB,kBAAA,CAAmB,cAAA,EAAgB,cAAA;EFtB/B;;;;;EEgCE,KAAA,CAAA,GAAS,OAAA,CAAQ,MAAA;EFpBnB;;;EAAA,OE+EG,IAAA,CAAK,OAAA,EAAS,oBAAA,GAAuB,iBAAA;AAAA;;;;KCrLlC,eAAA,IAAmB,MAAA;EAC7B,OAAA;EACA,OAAA;EACA,KAAA;AAAA,MACI,OAAA;AAAA,UAEW,8BAAA;EHyBsD;EGvBrE,OAAA,IAAW,KAAA;AAAA;;;iBAKG,6BAAA,CACd,OAAA,EAAS,oBAAA,EACT,OAAA,GAAS,8BAAA,GACR,eAAA;;;cClBU,kBAAA,EAAoB,cAAA;;;;UCGhB,aAAA;;EAEf,IAAA,EAAM,IAAA;EL4ByB;EK1B/B,MAAA;EL0BuC;EKxBvC,SAAA;AAAA;;UAIe,oBAAA;EACf,IAAA;EACA,MAAA;ELmCU;EKjCV,UAAA;EACA,QAAA;EACA,SAAA;AAAA;;UAIe,mBAAA;EACf,KAAA;EACA,OAAA,GAAU,oBAAA;AAAA;AAAA,UAGK,0BAAA;EL2H6B;EKzH5C,QAAA;EL4PM;EK1PN,cAAA;ELwRwB;EKtRxB,SAAA;EL6TS;EK3TT,gBAAA;AAAA;;UAIe,mBAAA;EACf,OAAA;EACA,OAAA;EACA,SAAA;ELRoC;EKUpC,SAAA;AAAA;;iBAIc,4BAAA,CACd,KAAA,EAAO,mBAAA;AAAA,iBAwBO,iBAAA,CACd,KAAA,WACC,mBAAA;AAAA,iBA+BmB,mBAAA,CACpB,KAAA,UACA,OAAA,GAAS,0BAAA,GACR,OAAA,CAAQ,aAAA;;;KCnGC,OAAA;EACV,KAAA;EAEA,OAAA,GAAU,OAAA,aAAoB,YAAA;EAC9B,KAAA,GAAQ,OAAA,aAAoB,YAAA;EAC5B,IAAA,GAAO,OAAA,aAAoB,YAAA;EAC3B,IAAA,GAAO,OAAA,aAAoB,YAAA;EAC3B,KAAA,GAAQ,OAAA,aAAoB,YAAA;AAAA;;;;;;;iBASd,WAAA,CAAY,GAAA,WAAc,MAAA;AAAA,UAuBzB,4BAAA;EN0CL;;;;EMrCV,QAAA;AAAA;AAAA,iBAGoB,qBAAA,CACpB,GAAA,UACA,OAAA,GAAU,4BAAA,GACT,OAAA,SAAgB,sBAAA;AAAA,iBA2BH,sBAAA,CACd,UAAA,EAAY,kBAAA,WACH,UAAA,IAAc,sBAAA;AAAA,iBAoBH,qBAAA,CACpB,OAAA,UACA,SAAA,UACA,OAAA,UACA,MAAA,EAAQ,MAAA,EACR,OAAA,GAAU,wBAAA,GAAwB,OAAA;AAAA,cAsBvB,WAAA,QAAW,QAAA"}