@renown/sdk 6.2.3-dev.5 → 6.2.3-dev.50

package/dist/{browser-key-storage-e3RQsnLS.js → browser-key-storage-wjSwTnhs.js}

@@ -8,7 +8,8 @@ var BrowserKeyStorage = class BrowserKeyStorage {
 		this.#db = db;
 	}
 	static async create(dbName = DEFAULT_DB_NAME) {
-		return new BrowserKeyStorage(await BrowserKeyStorage.#openDatabase(dbName));
+		const db = await BrowserKeyStorage.#openDatabase(dbName);
+		return new BrowserKeyStorage(db);
 	}
 	static #openDatabase(dbName) {
 		return new Promise((resolve, reject) => {
@@ -65,4 +66,4 @@ var BrowserKeyStorage = class BrowserKeyStorage {
 //#endregion
 export { BrowserKeyStorage as t };
 
-//# sourceMappingURL=browser-key-storage-e3RQsnLS.js.map
+//# sourceMappingURL=browser-key-storage-wjSwTnhs.js.map

package/dist/browser-key-storage-wjSwTnhs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-key-storage-wjSwTnhs.js","names":[],"sources":["../src/crypto/browser-key-storage.ts"],"sourcesContent":["import type { JsonWebKeyPairStorage, JwkKeyPair } from \"./types.js\";\n\nconst DEFAULT_DB_NAME = \"renownKeyDB\";\nconst STORE_NAME = \"keyPairs\";\nconst KEY = \"keyPair\";\n\nexport class BrowserKeyStorage implements JsonWebKeyPairStorage {\n  #db: IDBDatabase;\n\n  constructor(db: IDBDatabase) {\n    this.#db = db;\n  }\n\n  static async create(\n    dbName: string = DEFAULT_DB_NAME,\n  ): Promise<BrowserKeyStorage> {\n    const db = await BrowserKeyStorage.#openDatabase(dbName);\n    return new BrowserKeyStorage(db);\n  }\n\n  static #openDatabase(dbName: string): Promise<IDBDatabase> {\n    return new Promise((resolve, reject) => {\n      const req = indexedDB.open(dbName);\n\n      req.onupgradeneeded = (event) => {\n        const db = (event.target as IDBOpenDBRequest).result;\n        if (!db.objectStoreNames.contains(STORE_NAME)) {\n          db.createObjectStore(STORE_NAME);\n        }\n      };\n\n      req.onsuccess = () => {\n        const db = req.result;\n        if (!db.objectStoreNames.contains(STORE_NAME)) {\n          const currentVersion = db.version;\n          db.close();\n          const upgradeReq = indexedDB.open(dbName, currentVersion + 1);\n          upgradeReq.onupgradeneeded = (event) => {\n            const upgradeDb = (event.target as IDBOpenDBRequest).result;\n            if (!upgradeDb.objectStoreNames.contains(STORE_NAME)) {\n              upgradeDb.createObjectStore(STORE_NAME);\n            }\n          };\n          upgradeReq.onsuccess = () => resolve(upgradeReq.result);\n          upgradeReq.onerror = () => reject(upgradeReq.error as Error);\n        } else {\n          resolve(db);\n        }\n      };\n\n      req.onerror = () => reject(req.error as Error);\n    });\n  }\n\n  #useStore(mode: IDBTransactionMode = \"readwrite\") {\n    const transaction = this.#db.transaction(STORE_NAME, mode);\n    return transaction.objectStore(STORE_NAME);\n  }\n\n  async saveKeyPair(keyPair: JwkKeyPair) {\n    const store = this.#useStore();\n    const request = store.put(keyPair, KEY);\n    return new Promise<void>((resolve, reject) => {\n      request.onsuccess = () => resolve();\n      request.onerror = () => reject(new Error(\"Failed to save key pair\"));\n    });\n  }\n\n  async loadKeyPair(): Promise<JwkKeyPair | undefined> {\n    const store = this.#useStore(\"readonly\");\n    const request = store.get(KEY);\n\n    return new Promise<JwkKeyPair | undefined>((resolve, reject) => {\n      request.onsuccess = () => {\n        const keyPair = request.result as JwkKeyPair | undefined;\n        resolve(keyPair);\n      };\n      request.onerror = () => reject(new Error(\"Failed to load key pair\"));\n    });\n  }\n\n  async removeKeyPair(): Promise<void> {\n    const store = this.#useStore();\n    const request = store.delete(KEY);\n\n    return new Promise<void>((resolve, reject) => {\n      request.onsuccess = () => resolve();\n      request.onerror = () => reject(new Error(\"Failed to remove key pair\"));\n    });\n  }\n}\n"],"mappings":";AAEA,MAAM,kBAAkB;AACxB,MAAM,aAAa;AACnB,MAAM,MAAM;AAEZ,IAAa,oBAAb,MAAa,kBAAmD;CAC9D;CAEA,YAAY,IAAiB;EAC3B,KAAK,MAAM;CACb;CAEA,aAAa,OACX,SAAiB,iBACW;EAC5B,MAAM,KAAK,MAAM,kBAAkB,cAAc,MAAM;EACvD,OAAO,IAAI,kBAAkB,EAAE;CACjC;CAEA,OAAO,cAAc,QAAsC;EACzD,OAAO,IAAI,SAAS,SAAS,WAAW;GACtC,MAAM,MAAM,UAAU,KAAK,MAAM;GAEjC,IAAI,mBAAmB,UAAU;IAC/B,MAAM,KAAM,MAAM,OAA4B;IAC9C,IAAI,CAAC,GAAG,iBAAiB,SAAS,UAAU,GAC1C,GAAG,kBAAkB,UAAU;GAEnC;GAEA,IAAI,kBAAkB;IACpB,MAAM,KAAK,IAAI;IACf,IAAI,CAAC,GAAG,iBAAiB,SAAS,UAAU,GAAG;KAC7C,MAAM,iBAAiB,GAAG;KAC1B,GAAG,MAAM;KACT,MAAM,aAAa,UAAU,KAAK,QAAQ,iBAAiB,CAAC;KAC5D,WAAW,mBAAmB,UAAU;MACtC,MAAM,YAAa,MAAM,OAA4B;MACrD,IAAI,CAAC,UAAU,iBAAiB,SAAS,UAAU,GACjD,UAAU,kBAAkB,UAAU;KAE1C;KACA,WAAW,kBAAkB,QAAQ,WAAW,MAAM;KACtD,WAAW,gBAAgB,OAAO,WAAW,KAAc;IAC7D,OACE,QAAQ,EAAE;GAEd;GAEA,IAAI,gBAAgB,OAAO,IAAI,KAAc;EAC/C,CAAC;CACH;CAEA,UAAU,OAA2B,aAAa;EAEhD,OADoB,KAAK,IAAI,YAAY,YAAY,IACpC,CAAC,CAAC,YAAY,UAAU;CAC3C;CAEA,MAAM,YAAY,SAAqB;EAErC,MAAM,UADQ,KAAK,UACC,CAAC,CAAC,IAAI,SAAS,GAAG;EACtC,OAAO,IAAI,SAAe,SAAS,WAAW;GAC5C,QAAQ,kBAAkB,QAAQ;GAClC,QAAQ,gBAAgB,uBAAO,IAAI,MAAM,yBAAyB,CAAC;EACrE,CAAC;CACH;CAEA,MAAM,cAA+C;EAEnD,MAAM,UADQ,KAAK,UAAU,UACT,CAAC,CAAC,IAAI,GAAG;EAE7B,OAAO,IAAI,SAAiC,SAAS,WAAW;GAC9D,QAAQ,kBAAkB;IACxB,MAAM,UAAU,QAAQ;IACxB,QAAQ,OAAO;GACjB;GACA,QAAQ,gBAAgB,uBAAO,IAAI,MAAM,yBAAyB,CAAC;EACrE,CAAC;CACH;CAEA,MAAM,gBAA+B;EAEnC,MAAM,UADQ,KAAK,UACC,CAAC,CAAC,OAAO,GAAG;EAEhC,OAAO,IAAI,SAAe,SAAS,WAAW;GAC5C,QAAQ,kBAAkB,QAAQ;GAClC,QAAQ,gBAAgB,uBAAO,IAAI,MAAM,2BAA2B,CAAC;EACvE,CAAC;CACH;AACF"}

package/dist/{constants-BexAR53F.js → constants-DVOF17NB.js}

@@ -79,4 +79,4 @@ const CREDENTIAL_TYPES = {
 //#endregion
 export { DEFAULT_RENOWN_NETWORK_ID as a, ISSUER_TYPE as c, VERIFIABLE_CREDENTIAL_EIP712_TYPE as d, DEFAULT_RENOWN_CHAIN_ID as i, RENOWN_READ_MODEL_SUBGRAPH as l, CREDENTIAL_SUBJECT_TYPE as n, DEFAULT_RENOWN_URL as o, CREDENTIAL_TYPES as r, DOMAIN_TYPE as s, CREDENTIAL_SCHEMA_EIP712_TYPE as t, RENOWN_SESSION_COOKIE as u };
 
-//# sourceMappingURL=constants-BexAR53F.js.map
+//# sourceMappingURL=constants-DVOF17NB.js.map

package/dist/{constants-BexAR53F.js.map → constants-DVOF17NB.js.map}

@@ -1 +1 @@
-{"version":3,"file":"constants-BexAR53F.js","names":[],"sources":["../src/constants.ts"],"sourcesContent":["export const DEFAULT_RENOWN_URL = \"https://www.renown.id\";\nexport const DEFAULT_RENOWN_NETWORK_ID = \"eip155\";\nexport const DEFAULT_RENOWN_CHAIN_ID = \"1\";\n\n/** Default cookie name for a server-readable Renown session (bearer token). */\nexport const RENOWN_SESSION_COOKIE = \"renown_session\";\n\n/** Subgraph a Switchboard exposes the renown read model under; the queries in\n * `switchboard.ts` are written against it. */\nexport const RENOWN_READ_MODEL_SUBGRAPH = \"renown-read-model\";\n\nexport const DOMAIN_TYPE = [\n  { name: \"version\", type: \"string\" },\n  { name: \"chainId\", type: \"uint256\" },\n] as const;\n\nexport const VERIFIABLE_CREDENTIAL_EIP712_TYPE = [\n  { name: \"@context\", type: \"string[]\" },\n  { name: \"type\", type: \"string[]\" },\n  { name: \"id\", type: \"string\" },\n  { name: \"issuer\", type: \"Issuer\" },\n  { name: \"credentialSubject\", type: \"CredentialSubject\" },\n  { name: \"credentialSchema\", type: \"CredentialSchema\" },\n  { name: \"issuanceDate\", type: \"string\" },\n  { name: \"expirationDate\", type: \"string\" },\n] as const;\n\nexport const CREDENTIAL_SCHEMA_EIP712_TYPE = [\n  { name: \"id\", type: \"string\" },\n  { name: \"type\", type: \"string\" },\n] as const;\n\nexport const CREDENTIAL_SUBJECT_TYPE = [\n  { name: \"app\", type: \"string\" },\n  { name: \"id\", type: \"string\" },\n] as const;\n\nexport const ISSUER_TYPE = [\n  { name: \"id\", type: \"string\" },\n  { name: \"ethereumAddress\", type: \"string\" },\n] as const;\n\nexport const CREDENTIAL_TYPES = {\n  EIP712Domain: DOMAIN_TYPE,\n  VerifiableCredential: VERIFIABLE_CREDENTIAL_EIP712_TYPE,\n  CredentialSchema: CREDENTIAL_SCHEMA_EIP712_TYPE,\n  CredentialSubject: CREDENTIAL_SUBJECT_TYPE,\n  Issuer: ISSUER_TYPE,\n} as const;\n"],"mappings":";AAAA,MAAa,qBAAqB;AAClC,MAAa,4BAA4B;AACzC,MAAa,0BAA0B;;AAGvC,MAAa,wBAAwB;;;AAIrC,MAAa,6BAA6B;AAE1C,MAAa,cAAc,CACzB;CAAE,MAAM;CAAW,MAAM;CAAU,EACnC;CAAE,MAAM;CAAW,MAAM;CAAW,CACrC;AAED,MAAa,oCAAoC;CAC/C;EAAE,MAAM;EAAY,MAAM;EAAY;CACtC;EAAE,MAAM;EAAQ,MAAM;EAAY;CAClC;EAAE,MAAM;EAAM,MAAM;EAAU;CAC9B;EAAE,MAAM;EAAU,MAAM;EAAU;CAClC;EAAE,MAAM;EAAqB,MAAM;EAAqB;CACxD;EAAE,MAAM;EAAoB,MAAM;EAAoB;CACtD;EAAE,MAAM;EAAgB,MAAM;EAAU;CACxC;EAAE,MAAM;EAAkB,MAAM;EAAU;CAC3C;AAED,MAAa,gCAAgC,CAC3C;CAAE,MAAM;CAAM,MAAM;CAAU,EAC9B;CAAE,MAAM;CAAQ,MAAM;CAAU,CACjC;AAED,MAAa,0BAA0B,CACrC;CAAE,MAAM;CAAO,MAAM;CAAU,EAC/B;CAAE,MAAM;CAAM,MAAM;CAAU,CAC/B;AAED,MAAa,cAAc,CACzB;CAAE,MAAM;CAAM,MAAM;CAAU,EAC9B;CAAE,MAAM;CAAmB,MAAM;CAAU,CAC5C;AAED,MAAa,mBAAmB;CAC9B,cAAc;CACd,sBAAsB;CACtB,kBAAkB;CAClB,mBAAmB;CACnB,QAAQ;CACT"}
+{"version":3,"file":"constants-DVOF17NB.js","names":[],"sources":["../src/constants.ts"],"sourcesContent":["export const DEFAULT_RENOWN_URL = \"https://www.renown.id\";\nexport const DEFAULT_RENOWN_NETWORK_ID = \"eip155\";\nexport const DEFAULT_RENOWN_CHAIN_ID = \"1\";\n\n/** Default cookie name for a server-readable Renown session (bearer token). */\nexport const RENOWN_SESSION_COOKIE = \"renown_session\";\n\n/** Subgraph a Switchboard exposes the renown read model under; the queries in\n * `switchboard.ts` are written against it. */\nexport const RENOWN_READ_MODEL_SUBGRAPH = \"renown-read-model\";\n\nexport const DOMAIN_TYPE = [\n  { name: \"version\", type: \"string\" },\n  { name: \"chainId\", type: \"uint256\" },\n] as const;\n\nexport const VERIFIABLE_CREDENTIAL_EIP712_TYPE = [\n  { name: \"@context\", type: \"string[]\" },\n  { name: \"type\", type: \"string[]\" },\n  { name: \"id\", type: \"string\" },\n  { name: \"issuer\", type: \"Issuer\" },\n  { name: \"credentialSubject\", type: \"CredentialSubject\" },\n  { name: \"credentialSchema\", type: \"CredentialSchema\" },\n  { name: \"issuanceDate\", type: \"string\" },\n  { name: \"expirationDate\", type: \"string\" },\n] as const;\n\nexport const CREDENTIAL_SCHEMA_EIP712_TYPE = [\n  { name: \"id\", type: \"string\" },\n  { name: \"type\", type: \"string\" },\n] as const;\n\nexport const CREDENTIAL_SUBJECT_TYPE = [\n  { name: \"app\", type: \"string\" },\n  { name: \"id\", type: \"string\" },\n] as const;\n\nexport const ISSUER_TYPE = [\n  { name: \"id\", type: \"string\" },\n  { name: \"ethereumAddress\", type: \"string\" },\n] as const;\n\nexport const CREDENTIAL_TYPES = {\n  EIP712Domain: DOMAIN_TYPE,\n  VerifiableCredential: VERIFIABLE_CREDENTIAL_EIP712_TYPE,\n  CredentialSchema: CREDENTIAL_SCHEMA_EIP712_TYPE,\n  CredentialSubject: CREDENTIAL_SUBJECT_TYPE,\n  Issuer: ISSUER_TYPE,\n} as const;\n"],"mappings":";AAAA,MAAa,qBAAqB;AAClC,MAAa,4BAA4B;AACzC,MAAa,0BAA0B;;AAGvC,MAAa,wBAAwB;;;AAIrC,MAAa,6BAA6B;AAE1C,MAAa,cAAc,CACzB;CAAE,MAAM;CAAW,MAAM;AAAS,GAClC;CAAE,MAAM;CAAW,MAAM;AAAU,CACrC;AAEA,MAAa,oCAAoC;CAC/C;EAAE,MAAM;EAAY,MAAM;CAAW;CACrC;EAAE,MAAM;EAAQ,MAAM;CAAW;CACjC;EAAE,MAAM;EAAM,MAAM;CAAS;CAC7B;EAAE,MAAM;EAAU,MAAM;CAAS;CACjC;EAAE,MAAM;EAAqB,MAAM;CAAoB;CACvD;EAAE,MAAM;EAAoB,MAAM;CAAmB;CACrD;EAAE,MAAM;EAAgB,MAAM;CAAS;CACvC;EAAE,MAAM;EAAkB,MAAM;CAAS;AAC3C;AAEA,MAAa,gCAAgC,CAC3C;CAAE,MAAM;CAAM,MAAM;AAAS,GAC7B;CAAE,MAAM;CAAQ,MAAM;AAAS,CACjC;AAEA,MAAa,0BAA0B,CACrC;CAAE,MAAM;CAAO,MAAM;AAAS,GAC9B;CAAE,MAAM;CAAM,MAAM;AAAS,CAC/B;AAEA,MAAa,cAAc,CACzB;CAAE,MAAM;CAAM,MAAM;AAAS,GAC7B;CAAE,MAAM;CAAmB,MAAM;AAAS,CAC5C;AAEA,MAAa,mBAAmB;CAC9B,cAAc;CACd,sBAAsB;CACtB,kBAAkB;CAClB,mBAAmB;CACnB,QAAQ;AACV"}

package/dist/crypto.d.ts

@@ -1,3 +1,4 @@
-import { a as JwkKeyPair, i as JsonWebKeyPairStorage, n as IConnectCrypto, r as IRenownCrypto, t as DID } from "./types-BGQKPoUr.js";
-import { a as parseSignatureHashField, c as RenownCryptoBuilder, i as extractResultingHashFromSignature, l as ConnectCrypto, n as RenownCryptoSigner, o as signatureHasResultingHash, r as createSignatureVerifier, s as MemoryKeyStorage, t as BrowserKeyStorage, u as RenownCrypto } from "./index-BLIpkdF7.js";
-export { BrowserKeyStorage, ConnectCrypto, DID, IConnectCrypto, IRenownCrypto, JsonWebKeyPairStorage, JwkKeyPair, MemoryKeyStorage, RenownCrypto, RenownCryptoBuilder, RenownCryptoSigner, createSignatureVerifier, extractResultingHashFromSignature, parseSignatureHashField, signatureHasResultingHash };
+import { a as JwkKeyPair, i as JsonWebKeyPairStorage, n as IConnectCrypto, r as IRenownCrypto, t as DID } from "./types-Ceiz2dkk.js";
+import { a as parseSignatureHashField, c as RenownCryptoBuilder, i as extractResultingHashFromSignature, l as ConnectCrypto, n as RenownCryptoSigner, o as signatureHasResultingHash, r as createSignatureVerifier, s as MemoryKeyStorage, t as BrowserKeyStorage, u as RenownCrypto } from "./index-DbiBjqs6.js";
+export { BrowserKeyStorage, ConnectCrypto, type DID, type IConnectCrypto, type IRenownCrypto, type JsonWebKeyPairStorage, type JwkKeyPair, MemoryKeyStorage, RenownCrypto, RenownCryptoBuilder, RenownCryptoSigner, createSignatureVerifier, extractResultingHashFromSignature, parseSignatureHashField, signatureHasResultingHash };
+export {};

package/dist/crypto.js

@@ -1,3 +1,3 @@
-import { a as signatureHasResultingHash, c as ConnectCrypto, i as parseSignatureHashField, l as RenownCrypto, n as createSignatureVerifier, o as MemoryKeyStorage, r as extractResultingHashFromSignature, s as RenownCryptoBuilder, t as RenownCryptoSigner } from "./signer-DrjINLqt.js";
-import { t as BrowserKeyStorage } from "./browser-key-storage-e3RQsnLS.js";
+import { a as signatureHasResultingHash, c as ConnectCrypto, i as parseSignatureHashField, l as RenownCrypto, n as createSignatureVerifier, o as MemoryKeyStorage, r as extractResultingHashFromSignature, s as RenownCryptoBuilder, t as RenownCryptoSigner } from "./signer-GzTlZLjR.js";
+import { t as BrowserKeyStorage } from "./browser-key-storage-wjSwTnhs.js";
 export { BrowserKeyStorage, ConnectCrypto, MemoryKeyStorage, RenownCrypto, RenownCryptoBuilder, RenownCryptoSigner, createSignatureVerifier, extractResultingHashFromSignature, parseSignatureHashField, signatureHasResultingHash };

package/dist/{index-BLIpkdF7.d.ts → index-DbiBjqs6.d.ts}

@@ -1,6 +1,5 @@
-import { a as JwkKeyPair, i as JsonWebKeyPairStorage, l as CreateBearerTokenOptions, r as IRenownCrypto, t as DID, w as Issuer } from "./types-BGQKPoUr.js";
-import { Action, AppActionSigner, ISigner, Signature, SignatureVerificationHandler, UserActionSigner } from "@powerhousedao/shared/document-model";
-
+import { a as JwkKeyPair, i as JsonWebKeyPairStorage, l as CreateBearerTokenOptions, r as IRenownCrypto, t as DID, w as Issuer } from "./types-Ceiz2dkk.js";
+import { Action, ActionSigningTarget, AppActionSigner, ISigner, Signature, SignatureVerificationHandler, UserActionSigner } from "@powerhousedao/shared/document-model";
 //#region src/crypto/renown-crypto.d.ts
 declare class RenownCrypto implements IRenownCrypto {
   #private;
@@ -57,26 +56,17 @@ declare class RenownCryptoSigner implements ISigner {
   get publicKey(): CryptoKey;
   sign(data: Uint8Array): Promise<Uint8Array>;
   verify(data: Uint8Array, signature: Uint8Array): Promise<void>;
-  signAction(action: Action, abortSignal?: AbortSignal): Promise<Signature>;
+  signAction(action: Action, target: ActionSigningTarget, abortSignal?: AbortSignal): Promise<Signature>;
   /**
-   * Signs an action including a predicted resulting state hash.
-   *
-   * The resulting hash is packed into the signature tuple's 4th element (index 3)
-   * using the format: `${prevStateHash}:${resultingStateHash}`
-   *
-   * This allows offline verification of documents without reducer logic:
-   * - Verifier can check that the signature is valid for the claimed resulting state
-   * - Verifier can compare claimed resulting state to actual operation.hash
-   *
-   * @param action - The action to sign
-   * @param resultingStateHash - The predicted hash of document state AFTER this action runs
-   * @param abortSignal - Optional abort signal
-   * @returns A Signature tuple with the resulting hash encoded in element [3]
+   * Signs an action including a predicted resulting state hash, packed into
+   * element [3] as `${prevStateHash}:${resultingStateHash}`.
    */
-  signActionWithResultingState(action: Action, resultingStateHash: string, abortSignal?: AbortSignal): Promise<Signature>;
+  signActionWithResultingState(action: Action, target: ActionSigningTarget, resultingStateHash: string, abortSignal?: AbortSignal): Promise<Signature>;
   /**
-   * Internal signing implementation shared by signAction and signActionWithResultingState.
+   * The pre-v2 tuple, over scope, type and input only. For peers and tests
+   * that still need one; it binds neither the document nor the signer.
    */
+  signActionLegacy(action: Action, abortSignal?: AbortSignal): Promise<Signature>;
   private _signAction;
   private hashAction;
   private buildSignatureMessage;
@@ -128,4 +118,5 @@ declare class BrowserKeyStorage implements JsonWebKeyPairStorage {
 }
 //#endregion
 export { parseSignatureHashField as a, RenownCryptoBuilder as c, extractResultingHashFromSignature as i, ConnectCrypto as l, RenownCryptoSigner as n, signatureHasResultingHash as o, createSignatureVerifier as r, MemoryKeyStorage as s, BrowserKeyStorage as t, RenownCrypto as u };
-//# sourceMappingURL=index-BLIpkdF7.d.ts.map
+export {};
+//# sourceMappingURL=index-DbiBjqs6.d.ts.map

package/dist/index-DbiBjqs6.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index-DbiBjqs6.d.ts","names":[],"sources":["../src/crypto/renown-crypto.ts","../src/crypto/renown-crypto-builder.ts","../src/crypto/memory-key-storage.ts","../src/crypto/signer.ts","../src/crypto/browser-key-storage.ts"],"mappings":";;;cAUa,wBAAwB;;WAK1B,KAAK;;WAEL;SAEF,WAAS;SACT;;;;;EAEP,YACE,gBAAgB,uBAChB,QAAQ,cACR,SAAS,eACT,KAAK,KACL;MASE,aAAS;EAIP,eACJ,6BACA,UAAU,2BACT;EAUG,aAAa;EAQb,KAAK,MAAM,sBAAsB,QAAQ;EAazC,OAAO,MAAM,YAAY,WAAW,aAAa;MASnD,UAAU;;;;;cAiBH,sBAAsB;;;cC3FtB;;UACH;UACA;UACA;EAER,mBAAmB,SAAS;EAK5B,iBAAiB,QAAQ;EAOzB,YAAY;EAKN,SAAS,QAAQ;;;;cC7BZ,4BAA4B;UAC/B;EAER,YAAY,UAAU;EAItB,eAAW,QAAA;EAIX,YAAY,SAAS,aAAU;EAK/B,iBAAa;;;;cCIF,8BAA8B;mBAItB;mBACA;EACV,OAAO;WALP,KAAK;EAEd,YACmB,QAAQ,eACR,iBACV,OAAO;MAQZ,aAAS;EAIP,KAAK,MAAM,aAAa,QAAQ;EAIhC,OAAO,MAAM,YAAY,WAAW,aAAa;EAOjD,WACJ,QAAQ,QACR,QAAQ,qBACR,cAAc,cACb,QAAQ;;;;;EASL,6BACJ,QAAQ,QACR,QAAQ,qBACR,4BACA,cAAc,cACb,QAAQ;;;;;EAUL,iBACJ,QAAQ,QACR,cAAc,cACb,QAAQ;UAqBG;UAyBA;UAYN;UASA;UAQA;;;;;;iBAcM,wBACd,6BACC;;;;;;;;;;;iBAgNa,wBAAwB;EACtC;EACA;;;;;;;;iBAuBc,kCACd,WAAW;;;;;;;iBAaG,0BAA0B,WAAW;;;cC9ZxC,6BAA6B;;EAGxC,YAAY,IAAI;SAIH,OACX,kBACC,QAAQ;EA4CL,YAAY,SAAS,aAAU;EAS/B,eAAe,QAAQ;EAavB,iBAAiB"}

package/dist/index.d.ts

@@ -1,7 +1,7 @@
-import { A as LoginStatus, B as Service, C as InternalUser, Ct as DOMAIN_TYPE, D as JWTVerifyPolicies, Dt as VERIFIABLE_CREDENTIAL_EIP712_TYPE, E as JWTVerified, Et as RENOWN_SESSION_COOKIE, F as RenownEventEmitter, G as User, H as SignInParams, I as RenownEvents, J as VerificationMethod, K as UserActionSigner, L as RenownProfile, M as PowerhouseVerifiableCredential, N as ProfileFetcher, O as JsonWebKey, P as Proof, Q as BaseStorage, R as RenownStorage, S as IVerifiableCredential, St as DEFAULT_RENOWN_URL, T as JWTPayload, Tt as RENOWN_READ_MODEL_SUBGRAPH, U as Signer, V as ServiceEndpoint, W as Unsubscribe, X as VerifiedJWT, Y as VerifiedCredential, Z as W3CCredential, _ as IPowerhouseCredentialSubject, _t as CREDENTIAL_SCHEMA_EIP712_TYPE, a as JwkKeyPair, at as SignCredentialTypedData, b as IRenown, bt as DEFAULT_RENOWN_CHAIN_ID, c as ConditionWeightedThreshold, ct as buildAndSignCredential, d as DIDDocument, dt as verifyAuthCredential, et as IEventEmitter, f as DIDDocumentMetadata, ft as verifyCredentialSignature, g as IAuthCredentialSubject, gt as SwitchboardSource, h as EcdsaSignature, ht as SwitchboardRequestFn, i as JsonWebKeyPairStorage, it as FetchDelegationCredentialOptions, j as PKHDid, k as KeyCapabilitySection, l as CreateBearerTokenOptions, lt as fetchDelegationCredential, m as DIDResolutionResult, mt as SwitchboardClient, n as IConnectCrypto, nt as CredentialDomain, o as AuthVerifiableCredential, ot as VerifiedAuthCredential, p as DIDResolutionMetadata, pt as MissingSwitchboardError, q as Verifiable, r as IRenownCrypto, rt as CredentialMessage, s as AuthVerifiedCredential, st as VerifyAuthCredentialOptions, t as DID, tt as BuildCredentialParams, u as CredentialStatus, ut as recoverCredentialSigner, v as IPowerhouseIssuerType, vt as CREDENTIAL_SUBJECT_TYPE, w as Issuer, wt as ISSUER_TYPE, x as ISigner, xt as DEFAULT_RENOWN_NETWORK_ID, y as IProof, yt as CREDENTIAL_TYPES, z as RenownStorageMap } from "./types-BGQKPoUr.js";
-import { a as parseSignatureHashField, c as RenownCryptoBuilder, i as extractResultingHashFromSignature, l as ConnectCrypto, n as RenownCryptoSigner, o as signatureHasResultingHash, r as createSignatureVerifier, s as MemoryKeyStorage, t as BrowserKeyStorage, u as RenownCrypto } from "./index-BLIpkdF7.js";
-import { C as resolveSwitchboardEndpoint, S as ResolveSwitchboardEndpointOptions, T as RenownMemoryStorage, _ as CredentialCheck, a as getResolver, b as BaseRenownBuilder, d as RenownSessionProfile, g as fetchRenownProfile, i as createAuthBearerToken, n as VerifyAuthBearerTokenOptions, o as parsePkhDid, r as assertIsAuthCredential, s as verifyAuthBearerToken, t as ILogger, u as RenownSessionCookie, v as LocalCredentialVerifierOptions, w as Renown, x as RenownBuilderOptions, y as createLocalCredentialVerifier } from "./utils-DtWREYeO.js";
-
+import { A as LoginStatus, At as VERIFIABLE_CREDENTIAL_EIP712_TYPE, B as Service, C as InternalUser, Ct as DEFAULT_RENOWN_CHAIN_ID, D as JWTVerifyPolicies, Dt as ISSUER_TYPE, E as JWTVerified, Et as DOMAIN_TYPE, F as RenownEventEmitter, G as User, H as SignInParams, I as RenownEvents, J as VerificationMethod, K as UserActionSigner, L as RenownProfile, M as PowerhouseVerifiableCredential, N as ProfileFetcher, O as JsonWebKey, Ot as RENOWN_READ_MODEL_SUBGRAPH, P as Proof, Q as BaseStorage, R as RenownStorage, S as IVerifiableCredential, St as CREDENTIAL_TYPES, T as JWTPayload, Tt as DEFAULT_RENOWN_URL, U as Signer, V as ServiceEndpoint, W as Unsubscribe, X as VerifiedJWT, Y as VerifiedCredential, Z as W3CCredential, _ as IPowerhouseCredentialSubject, _t as SwitchboardRequestFn, a as JwkKeyPair, at as SignCredentialTypedData, b as IRenown, bt as CREDENTIAL_SCHEMA_EIP712_TYPE, c as ConditionWeightedThreshold, ct as buildAndSignCredential, d as DIDDocument, dt as verifyAuthCredential, et as IEventEmitter, f as DIDDocumentMetadata, ft as verifyCredentialSignature, g as IAuthCredentialSubject, gt as SwitchboardClient, h as EcdsaSignature, ht as RenownWriteAuth, i as JsonWebKeyPairStorage, it as FetchDelegationCredentialOptions, j as PKHDid, k as KeyCapabilitySection, kt as RENOWN_SESSION_COOKIE, l as CreateBearerTokenOptions, lt as fetchDelegationCredential, m as DIDResolutionResult, mt as MissingSwitchboardError, n as IConnectCrypto, nt as CredentialDomain, o as AuthVerifiableCredential, ot as VerifiedAuthCredential, p as DIDResolutionMetadata, pt as verifyDelegationProof, q as Verifiable, r as IRenownCrypto, rt as CredentialMessage, s as AuthVerifiedCredential, st as VerifyAuthCredentialOptions, t as DID, tt as BuildCredentialParams, u as CredentialStatus, ut as recoverCredentialSigner, v as IPowerhouseIssuerType, vt as SwitchboardRequestOptions, w as Issuer, wt as DEFAULT_RENOWN_NETWORK_ID, x as ISigner, xt as CREDENTIAL_SUBJECT_TYPE, y as IProof, yt as SwitchboardSource, z as RenownStorageMap } from "./types-Ceiz2dkk.js";
+import { a as parseSignatureHashField, c as RenownCryptoBuilder, i as extractResultingHashFromSignature, l as ConnectCrypto, n as RenownCryptoSigner, o as signatureHasResultingHash, r as createSignatureVerifier, s as MemoryKeyStorage, t as BrowserKeyStorage, u as RenownCrypto } from "./index-DbiBjqs6.js";
+import { C as BaseRenownBuilder, E as RenownMemoryStorage, S as createLocalCredentialVerifier, T as Renown, _ as profileMessage, a as getResolver, b as CredentialCheck, d as RenownSessionProfile, g as SIGNATURE_WINDOW_MS, i as createAuthBearerToken, n as VerifyAuthBearerTokenOptions, o as parsePkhDid, r as assertIsAuthCredential, s as verifyAuthBearerToken, t as ILogger, u as RenownSessionCookie, v as revokeMessage, w as RenownBuilderOptions, x as LocalCredentialVerifierOptions, y as fetchRenownProfile } from "./utils-DkVxP7Ug.js";
+import { a as ResolveSwitchboardEndpointOptions, i as createRenownTrustPolicy, n as RenownTrustPolicy, o as resolveSwitchboardEndpoint, r as RenownTrustPolicyOptions, t as RenownOwnSigner } from "./signer-trust-FmbMTn39.js";
 //#region src/event/event.browser.d.ts
 declare class BrowserEventEmitter<Events extends Record<string, unknown>> implements IEventEmitter<Events> {
   #private;
@@ -20,10 +20,10 @@ declare class BrowserStorage<T extends Record<string, unknown> = Record<string,
 }
 //#endregion
 //#region src/init.browser.d.ts
-declare class BrowserRenownStorage extends BrowserStorage<RenownStorageMap> {}
-declare class BrowserRenownEventEmitter extends BrowserEventEmitter<RenownEvents> {}
-declare function readPersistedUser(basename?: string): User | undefined;
-interface BrowserRenownBuilderOptions {
+export declare class BrowserRenownStorage extends BrowserStorage<RenownStorageMap> {}
+export declare class BrowserRenownEventEmitter extends BrowserEventEmitter<RenownEvents> {}
+export declare function readPersistedUser(basename?: string): User | undefined;
+export interface BrowserRenownBuilderOptions {
   /** Base path for storage keys (e.g., "/app" for multi-tenant apps) */
   basename?: string;
   /** Renown server URL. Defaults to https://www.renown.id */
@@ -41,7 +41,7 @@ interface BrowserRenownBuilderOptions {
  * Browser-specific Renown builder with pre-configured defaults.
  * Uses localStorage for user data and IndexedDB for key storage.
  */
-declare class RenownBuilder extends BaseRenownBuilder {
+export declare class RenownBuilder extends BaseRenownBuilder {
   #private;
   constructor(appName: string, options?: BrowserRenownBuilderOptions);
   /**
@@ -66,7 +66,8 @@ declare class RenownBuilder extends BaseRenownBuilder {
  * @param options - Browser-specific configuration options
  * @returns Initialized Renown instance
  */
-declare function initRenown(appName: string, options?: BrowserRenownBuilderOptions): Promise<Renown>;
+export declare function initRenown(appName: string, options?: BrowserRenownBuilderOptions): Promise<Renown>;
 //#endregion
-export { AuthVerifiableCredential, AuthVerifiedCredential, BaseRenownBuilder, BrowserKeyStorage, BrowserRenownBuilderOptions, BrowserRenownEventEmitter, BrowserRenownStorage, BuildCredentialParams, CREDENTIAL_SCHEMA_EIP712_TYPE, CREDENTIAL_SUBJECT_TYPE, CREDENTIAL_TYPES, ConditionWeightedThreshold, ConnectCrypto, CreateBearerTokenOptions, CredentialCheck, CredentialDomain, CredentialMessage, CredentialStatus, DEFAULT_RENOWN_CHAIN_ID, DEFAULT_RENOWN_NETWORK_ID, DEFAULT_RENOWN_URL, DID, DIDDocument, DIDDocumentMetadata, DIDResolutionMetadata, DIDResolutionResult, DOMAIN_TYPE, EcdsaSignature, FetchDelegationCredentialOptions, IAuthCredentialSubject, IConnectCrypto, ILogger, IPowerhouseCredentialSubject, IPowerhouseIssuerType, IProof, IRenown, IRenownCrypto, ISSUER_TYPE, ISigner, IVerifiableCredential, InternalUser, Issuer, JWTPayload, JWTVerified, JWTVerifyPolicies, JsonWebKey, JsonWebKeyPairStorage, JwkKeyPair, KeyCapabilitySection, LocalCredentialVerifierOptions, LoginStatus, MemoryKeyStorage, MissingSwitchboardError, PKHDid, PowerhouseVerifiableCredential, ProfileFetcher, Proof, RENOWN_READ_MODEL_SUBGRAPH, RENOWN_SESSION_COOKIE, Renown, RenownBuilder, RenownBuilderOptions, RenownCrypto, RenownCryptoBuilder, RenownCryptoSigner, RenownEventEmitter, RenownEvents, RenownMemoryStorage, RenownProfile, type RenownSessionCookie, type RenownSessionProfile, RenownStorage, RenownStorageMap, ResolveSwitchboardEndpointOptions, Service, ServiceEndpoint, SignCredentialTypedData, SignInParams, Signer, SwitchboardClient, SwitchboardRequestFn, SwitchboardSource, Unsubscribe, User, UserActionSigner, VERIFIABLE_CREDENTIAL_EIP712_TYPE, Verifiable, VerificationMethod, VerifiedAuthCredential, VerifiedCredential, VerifiedJWT, VerifyAuthBearerTokenOptions, VerifyAuthCredentialOptions, W3CCredential, assertIsAuthCredential, buildAndSignCredential, createAuthBearerToken, createLocalCredentialVerifier, createSignatureVerifier, extractResultingHashFromSignature, fetchDelegationCredential, fetchRenownProfile, getResolver, initRenown, parsePkhDid, parseSignatureHashField, readPersistedUser, recoverCredentialSigner, resolveSwitchboardEndpoint, signatureHasResultingHash, verifyAuthBearerToken, verifyAuthCredential, verifyCredentialSignature };
+export { AuthVerifiableCredential, AuthVerifiedCredential, BaseRenownBuilder, BrowserKeyStorage, BuildCredentialParams, CREDENTIAL_SCHEMA_EIP712_TYPE, CREDENTIAL_SUBJECT_TYPE, CREDENTIAL_TYPES, ConditionWeightedThreshold, ConnectCrypto, CreateBearerTokenOptions, CredentialCheck, CredentialDomain, CredentialMessage, CredentialStatus, DEFAULT_RENOWN_CHAIN_ID, DEFAULT_RENOWN_NETWORK_ID, DEFAULT_RENOWN_URL, type DID, DIDDocument, DIDDocumentMetadata, DIDResolutionMetadata, DIDResolutionResult, DOMAIN_TYPE, EcdsaSignature, FetchDelegationCredentialOptions, IAuthCredentialSubject, type IConnectCrypto, ILogger, IPowerhouseCredentialSubject, IPowerhouseIssuerType, IProof, IRenown, type IRenownCrypto, ISSUER_TYPE, type ISigner, IVerifiableCredential, InternalUser, Issuer, JWTPayload, JWTVerified, JWTVerifyPolicies, JsonWebKey, type JsonWebKeyPairStorage, type JwkKeyPair, KeyCapabilitySection, LocalCredentialVerifierOptions, LoginStatus, MemoryKeyStorage, MissingSwitchboardError, PKHDid, PowerhouseVerifiableCredential, ProfileFetcher, Proof, RENOWN_READ_MODEL_SUBGRAPH, RENOWN_SESSION_COOKIE, Renown, RenownBuilderOptions, RenownCrypto, RenownCryptoBuilder, RenownCryptoSigner, RenownEventEmitter, RenownEvents, RenownMemoryStorage, RenownOwnSigner, RenownProfile, type RenownSessionCookie, type RenownSessionProfile, RenownStorage, RenownStorageMap, RenownTrustPolicy, RenownTrustPolicyOptions, RenownWriteAuth, ResolveSwitchboardEndpointOptions, SIGNATURE_WINDOW_MS, Service, ServiceEndpoint, SignCredentialTypedData, SignInParams, Signer, SwitchboardClient, SwitchboardRequestFn, SwitchboardRequestOptions, SwitchboardSource, Unsubscribe, User, type UserActionSigner, VERIFIABLE_CREDENTIAL_EIP712_TYPE, Verifiable, VerificationMethod, VerifiedAuthCredential, VerifiedCredential, VerifiedJWT, VerifyAuthBearerTokenOptions, VerifyAuthCredentialOptions, W3CCredential, assertIsAuthCredential, buildAndSignCredential, createAuthBearerToken, createLocalCredentialVerifier, createRenownTrustPolicy, createSignatureVerifier, extractResultingHashFromSignature, fetchDelegationCredential, fetchRenownProfile, getResolver, parsePkhDid, parseSignatureHashField, profileMessage, recoverCredentialSigner, resolveSwitchboardEndpoint, revokeMessage, signatureHasResultingHash, verifyAuthBearerToken, verifyAuthCredential, verifyCredentialSignature, verifyDelegationProof };
+export {};
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../src/event/event.browser.ts","../src/storage/storage.browser.ts","../src/init.browser.ts"],"mappings":";;;;;cAQa,mBAAA,gBACI,MAAA,8BACJ,aAAA,CAAc,MAAA;EAAA;EAGzB,EAAA,iBAAmB,MAAA,CAAA,CACjB,KAAA,EAAO,CAAA,EACP,QAAA,GAAW,IAAA,EAAM,MAAA,CAAO,CAAA;EAc1B,IAAA,iBAAqB,MAAA,CAAA,CAAQ,KAAA,EAAO,CAAA,EAAG,IAAA,EAAM,MAAA,CAAO,CAAA;AAAA;;;cC3BzC,cAAA,WACD,MAAA,oBAA0B,MAAA,2BAC5B,WAAA,CAAY,CAAA;EAAA;mBACH,SAAA;cAEL,SAAA,UAAmB,QAAA;EAQ/B,GAAA,mBAAsB,CAAA,CAAA,CAAG,GAAA,EAAK,GAAA,GAAM,CAAA,CAAE,GAAA;EAQtC,GAAA,mBAAsB,CAAA,CAAA,CAAG,GAAA,EAAK,GAAA,EAAK,KAAA,GAAQ,CAAA,CAAE,GAAA;EAM7C,MAAA,CAAO,GAAA,QAAW,CAAA;AAAA;;;cCtBP,oBAAA,SAA6B,cAAA,CAAe,gBAAA;AAAA,cAC5C,yBAAA,SAAkC,mBAAA,CAAoB,YAAA;AAAA,iBAInD,iBAAA,CAAkB,QAAA,YAAoB,IAAA;AAAA,UASrC,2BAAA;EFPN;EEST,QAAA;EFR0B;EEU1B,OAAA;EFIoC;EEFpC,cAAA;EFEoD;EEApD,SAAA;EFnBwB;EEqBxB,UAAA;EFtBA;EEwBA,OAAA;AAAA;;;;;cAOW,aAAA,SAAsB,iBAAA;EAAA;cAKrB,OAAA,UAAiB,OAAA,GAAS,2BAAA;EF9BnB;;;EEmDnB,YAAA,CAAa,QAAA;EFrCb;;;;EE+CA,aAAA,CAAc,SAAA;EF/C+B;;;;EEwDvC,KAAA,CAAA,GAAS,OAAA,CAAQ,MAAA;AAAA;;;ADnFzB;;;;;iBC2GgB,UAAA,CACd,OAAA,UACA,OAAA,GAAS,2BAAA,GAAgC,OAAA,CAAA,MAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/event/event.browser.ts","../src/storage/storage.browser.ts","../src/init.browser.ts"],"mappings":";;;;;cAQa,oBACX,eAAe,oCACJ,cAAc;;EAGzB,GAAG,gBAAgB,QACjB,OAAO,GACP,WAAW,MAAM,OAAO;EAc1B,KAAK,gBAAgB,QAAQ,OAAO,GAAG,MAAM,OAAO;;;;cC3BzC,eACX,UAAU,0BAA0B,iCAC5B,YAAY;;mBACH;EAEjB,YAAY,mBAAmB;EAQ/B,IAAI,kBAAkB,GAAG,KAAK,MAAM,EAAE;EAQtC,IAAI,kBAAkB,GAAG,KAAK,KAAK,QAAQ,EAAE;EAM7C,OAAO,WAAW;;;;qBCtBP,6BAA6B,eAAe;qBAC5C,kCAAkC,oBAAoB;wBAInD,kBAAkB,oBAAoB;iBASrC;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA;;;;;;qBAOW,sBAAsB;;EAKjC,YAAY,iBAAiB,UAAS;;;;EAqBtC,aAAa;;;;;EAUb,cAAc;;;;;EASR,SAAS,QAAQ;;;;;;;;;wBAwBT,WACd,iBACA,UAAS,8BAAgC,QAAA"}

package/dist/index.js

@@ -1,7 +1,9 @@
-import { a as DEFAULT_RENOWN_NETWORK_ID, c as ISSUER_TYPE, d as VERIFIABLE_CREDENTIAL_EIP712_TYPE, i as DEFAULT_RENOWN_CHAIN_ID, l as RENOWN_READ_MODEL_SUBGRAPH, n as CREDENTIAL_SUBJECT_TYPE, o as DEFAULT_RENOWN_URL, r as CREDENTIAL_TYPES, s as DOMAIN_TYPE, t as CREDENTIAL_SCHEMA_EIP712_TYPE, u as RENOWN_SESSION_COOKIE } from "./constants-BexAR53F.js";
-import { a as RenownMemoryStorage, c as fetchDelegationCredential, d as verifyCredentialSignature, f as MissingSwitchboardError, i as Renown, l as recoverCredentialSigner, m as resolveSwitchboardEndpoint, n as BaseRenownBuilder, o as BaseStorage, p as SwitchboardClient, r as fetchRenownProfile, s as buildAndSignCredential, t as createLocalCredentialVerifier, u as verifyAuthCredential } from "./local-credential-verifier-CU8hmFlR.js";
-import { a as signatureHasResultingHash, c as ConnectCrypto, d as createAuthBearerToken, f as getResolver, i as parseSignatureHashField, l as RenownCrypto, m as verifyAuthBearerToken, n as createSignatureVerifier, o as MemoryKeyStorage, p as parsePkhDid, r as extractResultingHashFromSignature, s as RenownCryptoBuilder, t as RenownCryptoSigner, u as assertIsAuthCredential } from "./signer-DrjINLqt.js";
-import { t as BrowserKeyStorage } from "./browser-key-storage-e3RQsnLS.js";
+import { a as DEFAULT_RENOWN_NETWORK_ID, c as ISSUER_TYPE, d as VERIFIABLE_CREDENTIAL_EIP712_TYPE, i as DEFAULT_RENOWN_CHAIN_ID, l as RENOWN_READ_MODEL_SUBGRAPH, n as CREDENTIAL_SUBJECT_TYPE, o as DEFAULT_RENOWN_URL, r as CREDENTIAL_TYPES, s as DOMAIN_TYPE, t as CREDENTIAL_SCHEMA_EIP712_TYPE, u as RENOWN_SESSION_COOKIE } from "./constants-DVOF17NB.js";
+import { a as verifyAuthCredential, c as MissingSwitchboardError, i as recoverCredentialSigner, l as SwitchboardClient, n as buildAndSignCredential, o as verifyCredentialSignature, r as fetchDelegationCredential, s as verifyDelegationProof, t as createRenownTrustPolicy, u as resolveSwitchboardEndpoint } from "./signer-trust-H1rNzUcd.js";
+import { a as verifyAuthBearerToken, i as parsePkhDid, n as createAuthBearerToken, r as getResolver, t as assertIsAuthCredential } from "./utils-DLQ5VVqT.js";
+import { a as signatureHasResultingHash, c as ConnectCrypto, i as parseSignatureHashField, l as RenownCrypto, n as createSignatureVerifier, o as MemoryKeyStorage, r as extractResultingHashFromSignature, s as RenownCryptoBuilder, t as RenownCryptoSigner } from "./signer-GzTlZLjR.js";
+import { t as BrowserKeyStorage } from "./browser-key-storage-wjSwTnhs.js";
+import { a as BaseRenownBuilder, c as RenownMemoryStorage, i as createLocalCredentialVerifier, l as BaseStorage, n as profileMessage, o as fetchRenownProfile, r as revokeMessage, s as Renown, t as SIGNATURE_WINDOW_MS } from "./signed-message-Cp5oRPLN.js";
 //#region src/event/event.browser.ts
 var TypedCustomEvent = class extends CustomEvent {
 	constructor(type, detail) {
@@ -101,8 +103,10 @@ var RenownBuilder = class extends BaseRenownBuilder {
 		const keyStorage = await BrowserKeyStorage.create(this.#keyDbName);
 		this.withKeyPairStorage(keyStorage);
 		const renown = await super.build();
-		if (renown.user) if (this.#revalidate === "always") renown.revalidate();
-		else renown.refreshProfile();
+		if (renown.user) {
+			if (this.#revalidate === "always") renown.revalidate();
+			else renown.refreshProfile();
+		}
 		return renown;
 	}
 };
@@ -117,6 +121,6 @@ function initRenown(appName, options = {}) {
 	return new RenownBuilder(appName, options).build();
 }
 //#endregion
-export { BaseRenownBuilder, BrowserKeyStorage, BrowserRenownEventEmitter, BrowserRenownStorage, CREDENTIAL_SCHEMA_EIP712_TYPE, CREDENTIAL_SUBJECT_TYPE, CREDENTIAL_TYPES, ConnectCrypto, DEFAULT_RENOWN_CHAIN_ID, DEFAULT_RENOWN_NETWORK_ID, DEFAULT_RENOWN_URL, DOMAIN_TYPE, ISSUER_TYPE, MemoryKeyStorage, MissingSwitchboardError, RENOWN_READ_MODEL_SUBGRAPH, RENOWN_SESSION_COOKIE, Renown, RenownBuilder, RenownCrypto, RenownCryptoBuilder, RenownCryptoSigner, RenownMemoryStorage, SwitchboardClient, VERIFIABLE_CREDENTIAL_EIP712_TYPE, assertIsAuthCredential, buildAndSignCredential, createAuthBearerToken, createLocalCredentialVerifier, createSignatureVerifier, extractResultingHashFromSignature, fetchDelegationCredential, fetchRenownProfile, getResolver, initRenown, parsePkhDid, parseSignatureHashField, readPersistedUser, recoverCredentialSigner, resolveSwitchboardEndpoint, signatureHasResultingHash, verifyAuthBearerToken, verifyAuthCredential, verifyCredentialSignature };
+export { BaseRenownBuilder, BrowserKeyStorage, BrowserRenownEventEmitter, BrowserRenownStorage, CREDENTIAL_SCHEMA_EIP712_TYPE, CREDENTIAL_SUBJECT_TYPE, CREDENTIAL_TYPES, ConnectCrypto, DEFAULT_RENOWN_CHAIN_ID, DEFAULT_RENOWN_NETWORK_ID, DEFAULT_RENOWN_URL, DOMAIN_TYPE, ISSUER_TYPE, MemoryKeyStorage, MissingSwitchboardError, RENOWN_READ_MODEL_SUBGRAPH, RENOWN_SESSION_COOKIE, Renown, RenownBuilder, RenownCrypto, RenownCryptoBuilder, RenownCryptoSigner, RenownMemoryStorage, SIGNATURE_WINDOW_MS, SwitchboardClient, VERIFIABLE_CREDENTIAL_EIP712_TYPE, assertIsAuthCredential, buildAndSignCredential, createAuthBearerToken, createLocalCredentialVerifier, createRenownTrustPolicy, createSignatureVerifier, extractResultingHashFromSignature, fetchDelegationCredential, fetchRenownProfile, getResolver, initRenown, parsePkhDid, parseSignatureHashField, profileMessage, readPersistedUser, recoverCredentialSigner, resolveSwitchboardEndpoint, revokeMessage, signatureHasResultingHash, verifyAuthBearerToken, verifyAuthCredential, verifyCredentialSignature, verifyDelegationProof };
 
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["#eventTarget","#buildKey","#basename","#keyDbName","#revalidate"],"sources":["../src/event/event.browser.ts","../src/storage/storage.browser.ts","../src/init.browser.ts"],"sourcesContent":["import type { IEventEmitter } from \"./types.js\";\n\nexport class TypedCustomEvent<T> extends CustomEvent<T> {\n  constructor(type: string, detail?: T) {\n    super(type, { detail });\n  }\n}\n\nexport class BrowserEventEmitter<\n  Events extends Record<string, unknown>,\n> implements IEventEmitter<Events> {\n  #eventTarget = new EventTarget();\n\n  on<K extends keyof Events>(\n    event: K,\n    listener: (data: Events[K]) => void,\n  ): () => void {\n    const wrappedListener = (e: Event) => {\n      if (e instanceof TypedCustomEvent) {\n        listener(e.detail as Events[K]);\n      }\n    };\n\n    this.#eventTarget.addEventListener(event.toString(), wrappedListener);\n    return () => {\n      this.#eventTarget.removeEventListener(event.toString(), wrappedListener);\n    };\n  }\n\n  emit<K extends keyof Events>(event: K, data: Events[K]): void {\n    const customEvent = new TypedCustomEvent(event.toString(), data);\n    this.#eventTarget.dispatchEvent(customEvent);\n  }\n}\n","import { BaseStorage } from \"./common.js\";\n\nexport class BrowserStorage<\n  T extends Record<string, unknown> = Record<string, unknown>,\n> extends BaseStorage<T> {\n  private readonly namespace: string;\n\n  constructor(namespace: string, basename: string | undefined) {\n    super();\n    this.namespace = `${basename}:${namespace}`;\n  }\n\n  #buildKey(key: keyof T): string {\n    return `${this.namespace}:${key.toString()}`;\n  }\n  get<Key extends keyof T>(key: Key): T[Key] | undefined {\n    const value = localStorage.getItem(this.#buildKey(key));\n    if (value) {\n      return JSON.parse(value) as T[Key];\n    }\n    return undefined;\n  }\n\n  set<Key extends keyof T>(key: Key, value?: T[Key]): void {\n    return value\n      ? localStorage.setItem(this.#buildKey(key), JSON.stringify(value))\n      : localStorage.removeItem(this.#buildKey(key));\n  }\n\n  delete(key: keyof T): void {\n    return localStorage.removeItem(this.#buildKey(key));\n  }\n}\n","import type { Renown } from \"./common.js\";\nimport { BrowserKeyStorage } from \"./crypto/browser-key-storage.js\";\nimport { BrowserEventEmitter } from \"./event/event.browser.js\";\nimport { BaseRenownBuilder } from \"./renown-builder.js\";\nimport { BrowserStorage } from \"./storage/storage.browser.js\";\nimport type { RenownEvents, RenownStorageMap, User } from \"./types.js\";\n\nexport class BrowserRenownStorage extends BrowserStorage<RenownStorageMap> {}\nexport class BrowserRenownEventEmitter extends BrowserEventEmitter<RenownEvents> {}\n\n// Synchronously read the persisted user from localStorage (browser only) for an\n// instant optimistic first paint, before the async SDK build resolves.\nexport function readPersistedUser(basename?: string): User | undefined {\n  if (typeof localStorage === \"undefined\") return undefined;\n  try {\n    return new BrowserStorage<RenownStorageMap>(\"renown\", basename).get(\"user\");\n  } catch {\n    return undefined;\n  }\n}\n\nexport interface BrowserRenownBuilderOptions {\n  /** Base path for storage keys (e.g., \"/app\" for multi-tenant apps) */\n  basename?: string;\n  /** Renown server URL. Defaults to https://www.renown.id */\n  baseUrl?: string;\n  /** Switchboard GraphQL endpoint for the direct-to-reactor flow. */\n  switchboardUrl?: string;\n  /** IndexedDB database name for key storage. Defaults to \"renownKeyDB\" */\n  keyDbName?: string;\n  /** Re-check a stored credential on build (default \"always\"). */\n  revalidate?: \"always\" | \"never\";\n  /** Chain id credentials are issued on (default 1). It is part of the issuer DID, so `signIn` rejects a session from another chain. */\n  chainId?: number;\n}\n\n/**\n * Browser-specific Renown builder with pre-configured defaults.\n * Uses localStorage for user data and IndexedDB for key storage.\n */\nexport class RenownBuilder extends BaseRenownBuilder {\n  #basename?: string;\n  #keyDbName?: string;\n  #revalidate: \"always\" | \"never\";\n\n  constructor(appName: string, options: BrowserRenownBuilderOptions = {}) {\n    super(appName);\n    this.#basename = options.basename;\n    this.#keyDbName = options.keyDbName;\n    this.#revalidate = options.revalidate ?? \"always\";\n    this.withStorage(new BrowserRenownStorage(\"renown\", this.#basename));\n    this.withEventEmitter(new BrowserRenownEventEmitter());\n    if (options.baseUrl) {\n      this.withBaseUrl(options.baseUrl);\n    }\n    if (options.switchboardUrl) {\n      this.withSwitchboardUrl(options.switchboardUrl);\n    }\n    if (options.chainId !== undefined) {\n      this.withChainId(options.chainId);\n    }\n  }\n\n  /**\n   * Set base path for storage keys (e.g., \"/app\" for multi-tenant apps).\n   */\n  withBasename(basename: string): this {\n    this.#basename = basename;\n    this.withStorage(new BrowserRenownStorage(\"renown\", this.#basename));\n    return this;\n  }\n\n  /**\n   * Set IndexedDB database name for key storage.\n   * Defaults to \"renownKeyDB\".\n   */\n  withKeyDbName(keyDbName: string): this {\n    this.#keyDbName = keyDbName;\n    return this;\n  }\n\n  /**\n   * Build and initialize the Renown instance.\n   * Initializes IndexedDB for key storage before building.\n   */\n  async build(): Promise<Renown> {\n    const keyStorage = await BrowserKeyStorage.create(this.#keyDbName);\n    this.withKeyPairStorage(keyStorage);\n    const renown = await super.build();\n    // Refresh in the background, never blocking the paint. Only the credential\n    // check can log a user out, so it stays gated; the profile refresh always runs.\n    if (renown.user) {\n      if (this.#revalidate === \"always\") {\n        void renown.revalidate();\n      } else {\n        void renown.refreshProfile();\n      }\n    }\n    return renown;\n  }\n}\n\n/**\n * @deprecated Use RenownBuilder directly instead.\n * Initialize a browser-specific Renown instance.\n * @param appName - Application name used for signing context\n * @param options - Browser-specific configuration options\n * @returns Initialized Renown instance\n */\nexport function initRenown(\n  appName: string,\n  options: BrowserRenownBuilderOptions = {},\n) {\n  return new RenownBuilder(appName, options).build();\n}\n"],"mappings":";;;;;AAEA,IAAa,mBAAb,cAAyC,YAAe;CACtD,YAAY,MAAc,QAAY;AACpC,QAAM,MAAM,EAAE,QAAQ,CAAC;;;AAI3B,IAAa,sBAAb,MAEmC;CACjC,eAAe,IAAI,aAAa;CAEhC,GACE,OACA,UACY;EACZ,MAAM,mBAAmB,MAAa;AACpC,OAAI,aAAa,iBACf,UAAS,EAAE,OAAoB;;AAInC,QAAA,YAAkB,iBAAiB,MAAM,UAAU,EAAE,gBAAgB;AACrE,eAAa;AACX,SAAA,YAAkB,oBAAoB,MAAM,UAAU,EAAE,gBAAgB;;;CAI5E,KAA6B,OAAU,MAAuB;EAC5D,MAAM,cAAc,IAAI,iBAAiB,MAAM,UAAU,EAAE,KAAK;AAChE,QAAA,YAAkB,cAAc,YAAY;;;;;AC7BhD,IAAa,iBAAb,cAEU,YAAe;CACvB;CAEA,YAAY,WAAmB,UAA8B;AAC3D,SAAO;AACP,OAAK,YAAY,GAAG,SAAS,GAAG;;CAGlC,UAAU,KAAsB;AAC9B,SAAO,GAAG,KAAK,UAAU,GAAG,IAAI,UAAU;;CAE5C,IAAyB,KAA8B;EACrD,MAAM,QAAQ,aAAa,QAAQ,MAAA,SAAe,IAAI,CAAC;AACvD,MAAI,MACF,QAAO,KAAK,MAAM,MAAM;;CAK5B,IAAyB,KAAU,OAAsB;AACvD,SAAO,QACH,aAAa,QAAQ,MAAA,SAAe,IAAI,EAAE,KAAK,UAAU,MAAM,CAAC,GAChE,aAAa,WAAW,MAAA,SAAe,IAAI,CAAC;;CAGlD,OAAO,KAAoB;AACzB,SAAO,aAAa,WAAW,MAAA,SAAe,IAAI,CAAC;;;;;ACvBvD,IAAa,uBAAb,cAA0C,eAAiC;AAC3E,IAAa,4BAAb,cAA+C,oBAAkC;AAIjF,SAAgB,kBAAkB,UAAqC;AACrE,KAAI,OAAO,iBAAiB,YAAa,QAAO,KAAA;AAChD,KAAI;AACF,SAAO,IAAI,eAAiC,UAAU,SAAS,CAAC,IAAI,OAAO;SACrE;AACN;;;;;;;AAuBJ,IAAa,gBAAb,cAAmC,kBAAkB;CACnD;CACA;CACA;CAEA,YAAY,SAAiB,UAAuC,EAAE,EAAE;AACtE,QAAM,QAAQ;AACd,QAAA,WAAiB,QAAQ;AACzB,QAAA,YAAkB,QAAQ;AAC1B,QAAA,aAAmB,QAAQ,cAAc;AACzC,OAAK,YAAY,IAAI,qBAAqB,UAAU,MAAA,SAAe,CAAC;AACpE,OAAK,iBAAiB,IAAI,2BAA2B,CAAC;AACtD,MAAI,QAAQ,QACV,MAAK,YAAY,QAAQ,QAAQ;AAEnC,MAAI,QAAQ,eACV,MAAK,mBAAmB,QAAQ,eAAe;AAEjD,MAAI,QAAQ,YAAY,KAAA,EACtB,MAAK,YAAY,QAAQ,QAAQ;;;;;CAOrC,aAAa,UAAwB;AACnC,QAAA,WAAiB;AACjB,OAAK,YAAY,IAAI,qBAAqB,UAAU,MAAA,SAAe,CAAC;AACpE,SAAO;;;;;;CAOT,cAAc,WAAyB;AACrC,QAAA,YAAkB;AAClB,SAAO;;;;;;CAOT,MAAM,QAAyB;EAC7B,MAAM,aAAa,MAAM,kBAAkB,OAAO,MAAA,UAAgB;AAClE,OAAK,mBAAmB,WAAW;EACnC,MAAM,SAAS,MAAM,MAAM,OAAO;AAGlC,MAAI,OAAO,KACT,KAAI,MAAA,eAAqB,SAClB,QAAO,YAAY;MAEnB,QAAO,gBAAgB;AAGhC,SAAO;;;;;;;;;;AAWX,SAAgB,WACd,SACA,UAAuC,EAAE,EACzC;AACA,QAAO,IAAI,cAAc,SAAS,QAAQ,CAAC,OAAO"}
+{"version":3,"file":"index.js","names":[],"sources":["../src/event/event.browser.ts","../src/storage/storage.browser.ts","../src/init.browser.ts"],"sourcesContent":["import type { IEventEmitter } from \"./types.js\";\n\nexport class TypedCustomEvent<T> extends CustomEvent<T> {\n  constructor(type: string, detail?: T) {\n    super(type, { detail });\n  }\n}\n\nexport class BrowserEventEmitter<\n  Events extends Record<string, unknown>,\n> implements IEventEmitter<Events> {\n  #eventTarget = new EventTarget();\n\n  on<K extends keyof Events>(\n    event: K,\n    listener: (data: Events[K]) => void,\n  ): () => void {\n    const wrappedListener = (e: Event) => {\n      if (e instanceof TypedCustomEvent) {\n        listener(e.detail as Events[K]);\n      }\n    };\n\n    this.#eventTarget.addEventListener(event.toString(), wrappedListener);\n    return () => {\n      this.#eventTarget.removeEventListener(event.toString(), wrappedListener);\n    };\n  }\n\n  emit<K extends keyof Events>(event: K, data: Events[K]): void {\n    const customEvent = new TypedCustomEvent(event.toString(), data);\n    this.#eventTarget.dispatchEvent(customEvent);\n  }\n}\n","import { BaseStorage } from \"./common.js\";\n\nexport class BrowserStorage<\n  T extends Record<string, unknown> = Record<string, unknown>,\n> extends BaseStorage<T> {\n  private readonly namespace: string;\n\n  constructor(namespace: string, basename: string | undefined) {\n    super();\n    this.namespace = `${basename}:${namespace}`;\n  }\n\n  #buildKey(key: keyof T): string {\n    return `${this.namespace}:${key.toString()}`;\n  }\n  get<Key extends keyof T>(key: Key): T[Key] | undefined {\n    const value = localStorage.getItem(this.#buildKey(key));\n    if (value) {\n      return JSON.parse(value) as T[Key];\n    }\n    return undefined;\n  }\n\n  set<Key extends keyof T>(key: Key, value?: T[Key]): void {\n    return value\n      ? localStorage.setItem(this.#buildKey(key), JSON.stringify(value))\n      : localStorage.removeItem(this.#buildKey(key));\n  }\n\n  delete(key: keyof T): void {\n    return localStorage.removeItem(this.#buildKey(key));\n  }\n}\n","import type { Renown } from \"./common.js\";\nimport { BrowserKeyStorage } from \"./crypto/browser-key-storage.js\";\nimport { BrowserEventEmitter } from \"./event/event.browser.js\";\nimport { BaseRenownBuilder } from \"./renown-builder.js\";\nimport { BrowserStorage } from \"./storage/storage.browser.js\";\nimport type { RenownEvents, RenownStorageMap, User } from \"./types.js\";\n\nexport class BrowserRenownStorage extends BrowserStorage<RenownStorageMap> {}\nexport class BrowserRenownEventEmitter extends BrowserEventEmitter<RenownEvents> {}\n\n// Synchronously read the persisted user from localStorage (browser only) for an\n// instant optimistic first paint, before the async SDK build resolves.\nexport function readPersistedUser(basename?: string): User | undefined {\n  if (typeof localStorage === \"undefined\") return undefined;\n  try {\n    return new BrowserStorage<RenownStorageMap>(\"renown\", basename).get(\"user\");\n  } catch {\n    return undefined;\n  }\n}\n\nexport interface BrowserRenownBuilderOptions {\n  /** Base path for storage keys (e.g., \"/app\" for multi-tenant apps) */\n  basename?: string;\n  /** Renown server URL. Defaults to https://www.renown.id */\n  baseUrl?: string;\n  /** Switchboard GraphQL endpoint for the direct-to-reactor flow. */\n  switchboardUrl?: string;\n  /** IndexedDB database name for key storage. Defaults to \"renownKeyDB\" */\n  keyDbName?: string;\n  /** Re-check a stored credential on build (default \"always\"). */\n  revalidate?: \"always\" | \"never\";\n  /** Chain id credentials are issued on (default 1). It is part of the issuer DID, so `signIn` rejects a session from another chain. */\n  chainId?: number;\n}\n\n/**\n * Browser-specific Renown builder with pre-configured defaults.\n * Uses localStorage for user data and IndexedDB for key storage.\n */\nexport class RenownBuilder extends BaseRenownBuilder {\n  #basename?: string;\n  #keyDbName?: string;\n  #revalidate: \"always\" | \"never\";\n\n  constructor(appName: string, options: BrowserRenownBuilderOptions = {}) {\n    super(appName);\n    this.#basename = options.basename;\n    this.#keyDbName = options.keyDbName;\n    this.#revalidate = options.revalidate ?? \"always\";\n    this.withStorage(new BrowserRenownStorage(\"renown\", this.#basename));\n    this.withEventEmitter(new BrowserRenownEventEmitter());\n    if (options.baseUrl) {\n      this.withBaseUrl(options.baseUrl);\n    }\n    if (options.switchboardUrl) {\n      this.withSwitchboardUrl(options.switchboardUrl);\n    }\n    if (options.chainId !== undefined) {\n      this.withChainId(options.chainId);\n    }\n  }\n\n  /**\n   * Set base path for storage keys (e.g., \"/app\" for multi-tenant apps).\n   */\n  withBasename(basename: string): this {\n    this.#basename = basename;\n    this.withStorage(new BrowserRenownStorage(\"renown\", this.#basename));\n    return this;\n  }\n\n  /**\n   * Set IndexedDB database name for key storage.\n   * Defaults to \"renownKeyDB\".\n   */\n  withKeyDbName(keyDbName: string): this {\n    this.#keyDbName = keyDbName;\n    return this;\n  }\n\n  /**\n   * Build and initialize the Renown instance.\n   * Initializes IndexedDB for key storage before building.\n   */\n  async build(): Promise<Renown> {\n    const keyStorage = await BrowserKeyStorage.create(this.#keyDbName);\n    this.withKeyPairStorage(keyStorage);\n    const renown = await super.build();\n    // Refresh in the background, never blocking the paint. Only the credential\n    // check can log a user out, so it stays gated; the profile refresh always runs.\n    if (renown.user) {\n      if (this.#revalidate === \"always\") {\n        void renown.revalidate();\n      } else {\n        void renown.refreshProfile();\n      }\n    }\n    return renown;\n  }\n}\n\n/**\n * @deprecated Use RenownBuilder directly instead.\n * Initialize a browser-specific Renown instance.\n * @param appName - Application name used for signing context\n * @param options - Browser-specific configuration options\n * @returns Initialized Renown instance\n */\nexport function initRenown(\n  appName: string,\n  options: BrowserRenownBuilderOptions = {},\n) {\n  return new RenownBuilder(appName, options).build();\n}\n"],"mappings":";;;;;;;AAEA,IAAa,mBAAb,cAAyC,YAAe;CACtD,YAAY,MAAc,QAAY;EACpC,MAAM,MAAM,EAAE,OAAO,CAAC;CACxB;AACF;AAEA,IAAa,sBAAb,MAEmC;CACjC,eAAe,IAAI,YAAY;CAE/B,GACE,OACA,UACY;EACZ,MAAM,mBAAmB,MAAa;GACpC,IAAI,aAAa,kBACf,SAAS,EAAE,MAAmB;EAElC;EAEA,KAAK,aAAa,iBAAiB,MAAM,SAAS,GAAG,eAAe;EACpE,aAAa;GACX,KAAK,aAAa,oBAAoB,MAAM,SAAS,GAAG,eAAe;EACzE;CACF;CAEA,KAA6B,OAAU,MAAuB;EAC5D,MAAM,cAAc,IAAI,iBAAiB,MAAM,SAAS,GAAG,IAAI;EAC/D,KAAK,aAAa,cAAc,WAAW;CAC7C;AACF;;;AC/BA,IAAa,iBAAb,cAEU,YAAe;CACvB;CAEA,YAAY,WAAmB,UAA8B;EAC3D,MAAM;EACN,KAAK,YAAY,GAAG,SAAS,GAAG;CAClC;CAEA,UAAU,KAAsB;EAC9B,OAAO,GAAG,KAAK,UAAU,GAAG,IAAI,SAAS;CAC3C;CACA,IAAyB,KAA8B;EACrD,MAAM,QAAQ,aAAa,QAAQ,KAAK,UAAU,GAAG,CAAC;EACtD,IAAI,OACF,OAAO,KAAK,MAAM,KAAK;CAG3B;CAEA,IAAyB,KAAU,OAAsB;EACvD,OAAO,QACH,aAAa,QAAQ,KAAK,UAAU,GAAG,GAAG,KAAK,UAAU,KAAK,CAAC,IAC/D,aAAa,WAAW,KAAK,UAAU,GAAG,CAAC;CACjD;CAEA,OAAO,KAAoB;EACzB,OAAO,aAAa,WAAW,KAAK,UAAU,GAAG,CAAC;CACpD;AACF;;;ACzBA,IAAa,uBAAb,cAA0C,eAAiC,CAAC;AAC5E,IAAa,4BAAb,cAA+C,oBAAkC,CAAC;AAIlF,SAAgB,kBAAkB,UAAqC;CACrE,IAAI,OAAO,iBAAiB,aAAa,OAAO,KAAA;CAChD,IAAI;EACF,OAAO,IAAI,eAAiC,UAAU,QAAQ,CAAC,CAAC,IAAI,MAAM;CAC5E,QAAQ;EACN;CACF;AACF;;;;;AAqBA,IAAa,gBAAb,cAAmC,kBAAkB;CACnD;CACA;CACA;CAEA,YAAY,SAAiB,UAAuC,CAAC,GAAG;EACtE,MAAM,OAAO;EACb,KAAK,YAAY,QAAQ;EACzB,KAAK,aAAa,QAAQ;EAC1B,KAAK,cAAc,QAAQ,cAAc;EACzC,KAAK,YAAY,IAAI,qBAAqB,UAAU,KAAK,SAAS,CAAC;EACnE,KAAK,iBAAiB,IAAI,0BAA0B,CAAC;EACrD,IAAI,QAAQ,SACV,KAAK,YAAY,QAAQ,OAAO;EAElC,IAAI,QAAQ,gBACV,KAAK,mBAAmB,QAAQ,cAAc;EAEhD,IAAI,QAAQ,YAAY,KAAA,GACtB,KAAK,YAAY,QAAQ,OAAO;CAEpC;;;;CAKA,aAAa,UAAwB;EACnC,KAAK,YAAY;EACjB,KAAK,YAAY,IAAI,qBAAqB,UAAU,KAAK,SAAS,CAAC;EACnE,OAAO;CACT;;;;;CAMA,cAAc,WAAyB;EACrC,KAAK,aAAa;EAClB,OAAO;CACT;;;;;CAMA,MAAM,QAAyB;EAC7B,MAAM,aAAa,MAAM,kBAAkB,OAAO,KAAK,UAAU;EACjE,KAAK,mBAAmB,UAAU;EAClC,MAAM,SAAS,MAAM,MAAM,MAAM;EAGjC,IAAI,OAAO,MAAM;GACf,IAAI,KAAK,gBAAgB,UACvB,OAAY,WAAW;QAEvB,OAAY,eAAe;EAE/B;EACA,OAAO;CACT;AACF;;;;;;;;AASA,SAAgB,WACd,SACA,UAAuC,CAAC,GACxC;CACA,OAAO,IAAI,cAAc,SAAS,OAAO,CAAC,CAAC,MAAM;AACnD"}

package/dist/{meta-D-5kvwx8.js → meta-4NmijIbE.js}

@@ -1,4 +1,4 @@
-import { t as LoginMethod } from "./types-C_qc_62W.js";
+import { t as LoginMethod } from "./types-Dwy6khXb.js";
 //#region src/wallet/privy/meta.ts
 const PRIVY_SUPPORTED_METHODS = [
 	LoginMethod.WALLET,
@@ -24,4 +24,4 @@ const privyAdapterMeta = {
 //#endregion
 export { privyAdapterMeta as n, resolvePrivyMethods as r, DEFAULT_PRIVY_METHODS as t };
 
-//# sourceMappingURL=meta-D-5kvwx8.js.map
+//# sourceMappingURL=meta-4NmijIbE.js.map

package/dist/{meta-D-5kvwx8.js.map → meta-4NmijIbE.js.map}

@@ -1 +1 @@
-{"version":3,"file":"meta-D-5kvwx8.js","names":[],"sources":["../src/wallet/privy/meta.ts"],"sourcesContent":["import { LoginMethod, type WalletAdapterMeta } from \"../types.js\";\n\n/** Structural subset of viem's `Chain`, so any `viem/chains` / `wagmi/chains` export fits regardless of the host's viem version. */\nexport interface PrivyChain {\n  id: number;\n  name: string;\n  nativeCurrency: { name: string; symbol: string; decimals: number };\n  rpcUrls: { default: { http: readonly string[] } };\n}\n\n// Login methods the Privy adapter can drive. adapter.ts maps each to a Privy\n// login-method id, so adding one here without mapping it fails to compile.\nexport type PrivyLoginMethod = \"wallet\" | \"google\" | \"apple\" | \"email\";\n\nexport const PRIVY_SUPPORTED_METHODS: PrivyLoginMethod[] = [\n  LoginMethod.WALLET,\n  LoginMethod.GOOGLE,\n  LoginMethod.APPLE,\n  LoginMethod.EMAIL,\n];\n\n// Methods offered when config omits `methods`.\nexport const DEFAULT_PRIVY_METHODS: LoginMethod[] = [\n  LoginMethod.GOOGLE,\n  LoginMethod.EMAIL,\n];\n\n// Config slice for the Privy adapter (mirrors connect.renown.adapters.privy).\nexport interface PHRenownPrivyAdapterConfig {\n  appId: string;\n  clientId?: string;\n  /** Login methods to offer; defaults to [google, email]. */\n  methods?: PrivyLoginMethod[];\n  /** Chain Renown issues credentials on (e.g. `mainnet` from `viem/chains`). Pins the embedded wallet to it: a wallet on another chain is a different DID and is rejected. */\n  chain?: PrivyChain;\n  /** Privy `appearance.walletList`. Defaults to `[\"detected_ethereum_wallets\"]`: with external wallets disabled here (they go through the rainbow adapter), anything else makes Privy fetch the WalletConnect explorer listings (~163 KB) on mount. Set it only if you want those listings. */\n  walletList?: string[];\n}\n\n// Resolve config `methods` to the supported set, falling back to the default.\n// Takes string[] because Connect's config arrives from JSON, unvalidated.\nexport function resolvePrivyMethods(methods?: string[]): LoginMethod[] {\n  if (!methods || methods.length === 0) return [...DEFAULT_PRIVY_METHODS];\n  const resolved: LoginMethod[] = [];\n  for (const method of methods) {\n    const value = method as PrivyLoginMethod;\n    if (!PRIVY_SUPPORTED_METHODS.includes(value)) {\n      throw new Error(`PrivyAdapter cannot support login method \"${method}\"`);\n    }\n    resolved.push(value);\n  }\n  return resolved;\n}\n\n// Dependency-free identity, safe to import eagerly (pulls no wallet library);\n// the heavy factory stays behind the dynamic import in ./index.ts.\nexport const privyAdapterMeta: Omit<WalletAdapterMeta, \"supportedMethods\"> = {\n  id: \"privy\",\n  redirectReturnParams: [\"privy_oauth_code\", \"privy_oauth_state\"],\n};\n"],"mappings":";;AAcA,MAAa,0BAA8C;CACzD,YAAY;CACZ,YAAY;CACZ,YAAY;CACZ,YAAY;CACb;AAGD,MAAa,wBAAuC,CAClD,YAAY,QACZ,YAAY,MACb;AAgBD,SAAgB,oBAAoB,SAAmC;AACrE,KAAI,CAAC,WAAW,QAAQ,WAAW,EAAG,QAAO,CAAC,GAAG,sBAAsB;CACvE,MAAM,WAA0B,EAAE;AAClC,MAAK,MAAM,UAAU,SAAS;EAC5B,MAAM,QAAQ;AACd,MAAI,CAAC,wBAAwB,SAAS,MAAM,CAC1C,OAAM,IAAI,MAAM,6CAA6C,OAAO,GAAG;AAEzE,WAAS,KAAK,MAAM;;AAEtB,QAAO;;AAKT,MAAa,mBAAgE;CAC3E,IAAI;CACJ,sBAAsB,CAAC,oBAAoB,oBAAoB;CAChE"}
+{"version":3,"file":"meta-4NmijIbE.js","names":[],"sources":["../src/wallet/privy/meta.ts"],"sourcesContent":["import { LoginMethod, type WalletAdapterMeta } from \"../types.js\";\n\n/** Structural subset of viem's `Chain`, so any `viem/chains` / `wagmi/chains` export fits regardless of the host's viem version. */\nexport interface PrivyChain {\n  id: number;\n  name: string;\n  nativeCurrency: { name: string; symbol: string; decimals: number };\n  rpcUrls: { default: { http: readonly string[] } };\n}\n\n// Login methods the Privy adapter can drive. adapter.ts maps each to a Privy\n// login-method id, so adding one here without mapping it fails to compile.\nexport type PrivyLoginMethod = \"wallet\" | \"google\" | \"apple\" | \"email\";\n\nexport const PRIVY_SUPPORTED_METHODS: PrivyLoginMethod[] = [\n  LoginMethod.WALLET,\n  LoginMethod.GOOGLE,\n  LoginMethod.APPLE,\n  LoginMethod.EMAIL,\n];\n\n// Methods offered when config omits `methods`.\nexport const DEFAULT_PRIVY_METHODS: LoginMethod[] = [\n  LoginMethod.GOOGLE,\n  LoginMethod.EMAIL,\n];\n\n// Config slice for the Privy adapter (mirrors connect.renown.adapters.privy).\nexport interface PHRenownPrivyAdapterConfig {\n  appId: string;\n  clientId?: string;\n  /** Login methods to offer; defaults to [google, email]. */\n  methods?: PrivyLoginMethod[];\n  /** Chain Renown issues credentials on (e.g. `mainnet` from `viem/chains`). Pins the embedded wallet to it: a wallet on another chain is a different DID and is rejected. */\n  chain?: PrivyChain;\n  /** Privy `appearance.walletList`. Defaults to `[\"detected_ethereum_wallets\"]`: with external wallets disabled here (they go through the rainbow adapter), anything else makes Privy fetch the WalletConnect explorer listings (~163 KB) on mount. Set it only if you want those listings. */\n  walletList?: string[];\n}\n\n// Resolve config `methods` to the supported set, falling back to the default.\n// Takes string[] because Connect's config arrives from JSON, unvalidated.\nexport function resolvePrivyMethods(methods?: string[]): LoginMethod[] {\n  if (!methods || methods.length === 0) return [...DEFAULT_PRIVY_METHODS];\n  const resolved: LoginMethod[] = [];\n  for (const method of methods) {\n    const value = method as PrivyLoginMethod;\n    if (!PRIVY_SUPPORTED_METHODS.includes(value)) {\n      throw new Error(`PrivyAdapter cannot support login method \"${method}\"`);\n    }\n    resolved.push(value);\n  }\n  return resolved;\n}\n\n// Dependency-free identity, safe to import eagerly (pulls no wallet library);\n// the heavy factory stays behind the dynamic import in ./index.ts.\nexport const privyAdapterMeta: Omit<WalletAdapterMeta, \"supportedMethods\"> = {\n  id: \"privy\",\n  redirectReturnParams: [\"privy_oauth_code\", \"privy_oauth_state\"],\n};\n"],"mappings":";;AAcA,MAAa,0BAA8C;CACzD,YAAY;CACZ,YAAY;CACZ,YAAY;CACZ,YAAY;AACd;AAGA,MAAa,wBAAuC,CAClD,YAAY,QACZ,YAAY,KACd;AAgBA,SAAgB,oBAAoB,SAAmC;CACrE,IAAI,CAAC,WAAW,QAAQ,WAAW,GAAG,OAAO,CAAC,GAAG,qBAAqB;CACtE,MAAM,WAA0B,CAAC;CACjC,KAAK,MAAM,UAAU,SAAS;EAC5B,MAAM,QAAQ;EACd,IAAI,CAAC,wBAAwB,SAAS,KAAK,GACzC,MAAM,IAAI,MAAM,6CAA6C,OAAO,EAAE;EAExE,SAAS,KAAK,KAAK;CACrB;CACA,OAAO;AACT;AAIA,MAAa,mBAAgE;CAC3E,IAAI;CACJ,sBAAsB,CAAC,oBAAoB,mBAAmB;AAChE"}

package/dist/{meta-CHgd9Qd0.js → meta-B2fHYlPD.js}

@@ -1,4 +1,4 @@
-import { t as LoginMethod } from "./types-C_qc_62W.js";
+import { t as LoginMethod } from "./types-Dwy6khXb.js";
 //#region src/wallet/mock/meta.ts
 const MOCK_SUPPORTED_METHODS = [
 	LoginMethod.WALLET,
@@ -28,4 +28,4 @@ const mockAdapterMeta = {
 //#endregion
 export { mockAdapterMeta as n, resolveMockMethods as r, DEFAULT_MOCK_METHODS as t };
 
-//# sourceMappingURL=meta-CHgd9Qd0.js.map
+//# sourceMappingURL=meta-B2fHYlPD.js.map

package/dist/{meta-CHgd9Qd0.js.map → meta-B2fHYlPD.js.map}

@@ -1 +1 @@
-{"version":3,"file":"meta-CHgd9Qd0.js","names":[],"sources":["../src/wallet/mock/meta.ts"],"sourcesContent":["import { LoginMethod, type WalletAdapterMeta } from \"../types.js\";\n\nexport type MockLoginMethod = \"wallet\" | \"google\" | \"apple\" | \"email\";\n\nconst MOCK_SUPPORTED_METHODS: MockLoginMethod[] = [\n  LoginMethod.WALLET,\n  LoginMethod.GOOGLE,\n  LoginMethod.APPLE,\n  LoginMethod.EMAIL,\n];\n\n// Methods offered when config omits `methods`.\nexport const DEFAULT_MOCK_METHODS: LoginMethod[] = [\n  LoginMethod.WALLET,\n  LoginMethod.GOOGLE,\n  LoginMethod.EMAIL,\n];\n\n/** Config for the mock wallet adapter. TEST/DEV ONLY — signs with a local key; never enable in production. */\nexport interface PHRenownMockAdapterConfig {\n  /** Signing key; defaults to the well-known Anvil test account #0. */\n  privateKey?: `0x${string}`;\n  /** Chain id reported in the session (default 1). */\n  chainId?: number;\n  /** Methods this adapter answers for; defaults to wallet + google + email. */\n  methods?: MockLoginMethod[];\n}\n\n// Resolve config `methods` to the supported set, falling back to the default.\n// Takes string[] because Connect's config arrives from JSON, unvalidated.\nexport function resolveMockMethods(methods?: string[]): LoginMethod[] {\n  if (!methods || methods.length === 0) return [...DEFAULT_MOCK_METHODS];\n  const resolved: LoginMethod[] = [];\n  for (const method of methods) {\n    const value = method as MockLoginMethod;\n    if (!MOCK_SUPPORTED_METHODS.includes(value)) {\n      throw new Error(`MockAdapter cannot support login method \"${method}\"`);\n    }\n    resolved.push(value);\n  }\n  return resolved;\n}\n\n// Dependency-free identity (see privy/meta.ts). The mock signer has no\n// full-page OAuth redirect.\nexport const mockAdapterMeta: Omit<WalletAdapterMeta, \"supportedMethods\"> = {\n  id: \"mock\",\n  redirectReturnParams: [],\n};\n"],"mappings":";;AAIA,MAAM,yBAA4C;CAChD,YAAY;CACZ,YAAY;CACZ,YAAY;CACZ,YAAY;CACb;AAGD,MAAa,uBAAsC;CACjD,YAAY;CACZ,YAAY;CACZ,YAAY;CACb;AAcD,SAAgB,mBAAmB,SAAmC;AACpE,KAAI,CAAC,WAAW,QAAQ,WAAW,EAAG,QAAO,CAAC,GAAG,qBAAqB;CACtE,MAAM,WAA0B,EAAE;AAClC,MAAK,MAAM,UAAU,SAAS;EAC5B,MAAM,QAAQ;AACd,MAAI,CAAC,uBAAuB,SAAS,MAAM,CACzC,OAAM,IAAI,MAAM,4CAA4C,OAAO,GAAG;AAExE,WAAS,KAAK,MAAM;;AAEtB,QAAO;;AAKT,MAAa,kBAA+D;CAC1E,IAAI;CACJ,sBAAsB,EAAE;CACzB"}
+{"version":3,"file":"meta-B2fHYlPD.js","names":[],"sources":["../src/wallet/mock/meta.ts"],"sourcesContent":["import { LoginMethod, type WalletAdapterMeta } from \"../types.js\";\n\nexport type MockLoginMethod = \"wallet\" | \"google\" | \"apple\" | \"email\";\n\nconst MOCK_SUPPORTED_METHODS: MockLoginMethod[] = [\n  LoginMethod.WALLET,\n  LoginMethod.GOOGLE,\n  LoginMethod.APPLE,\n  LoginMethod.EMAIL,\n];\n\n// Methods offered when config omits `methods`.\nexport const DEFAULT_MOCK_METHODS: LoginMethod[] = [\n  LoginMethod.WALLET,\n  LoginMethod.GOOGLE,\n  LoginMethod.EMAIL,\n];\n\n/** Config for the mock wallet adapter. TEST/DEV ONLY — signs with a local key; never enable in production. */\nexport interface PHRenownMockAdapterConfig {\n  /** Signing key; defaults to the well-known Anvil test account #0. */\n  privateKey?: `0x${string}`;\n  /** Chain id reported in the session (default 1). */\n  chainId?: number;\n  /** Methods this adapter answers for; defaults to wallet + google + email. */\n  methods?: MockLoginMethod[];\n}\n\n// Resolve config `methods` to the supported set, falling back to the default.\n// Takes string[] because Connect's config arrives from JSON, unvalidated.\nexport function resolveMockMethods(methods?: string[]): LoginMethod[] {\n  if (!methods || methods.length === 0) return [...DEFAULT_MOCK_METHODS];\n  const resolved: LoginMethod[] = [];\n  for (const method of methods) {\n    const value = method as MockLoginMethod;\n    if (!MOCK_SUPPORTED_METHODS.includes(value)) {\n      throw new Error(`MockAdapter cannot support login method \"${method}\"`);\n    }\n    resolved.push(value);\n  }\n  return resolved;\n}\n\n// Dependency-free identity (see privy/meta.ts). The mock signer has no\n// full-page OAuth redirect.\nexport const mockAdapterMeta: Omit<WalletAdapterMeta, \"supportedMethods\"> = {\n  id: \"mock\",\n  redirectReturnParams: [],\n};\n"],"mappings":";;AAIA,MAAM,yBAA4C;CAChD,YAAY;CACZ,YAAY;CACZ,YAAY;CACZ,YAAY;AACd;AAGA,MAAa,uBAAsC;CACjD,YAAY;CACZ,YAAY;CACZ,YAAY;AACd;AAcA,SAAgB,mBAAmB,SAAmC;CACpE,IAAI,CAAC,WAAW,QAAQ,WAAW,GAAG,OAAO,CAAC,GAAG,oBAAoB;CACrE,MAAM,WAA0B,CAAC;CACjC,KAAK,MAAM,UAAU,SAAS;EAC5B,MAAM,QAAQ;EACd,IAAI,CAAC,uBAAuB,SAAS,KAAK,GACxC,MAAM,IAAI,MAAM,4CAA4C,OAAO,EAAE;EAEvE,SAAS,KAAK,KAAK;CACrB;CACA,OAAO;AACT;AAIA,MAAa,kBAA+D;CAC1E,IAAI;CACJ,sBAAsB,CAAC;AACzB"}

package/dist/{meta-BesJP74N.d.ts → meta-Dpmn2Ywp.d.ts}

@@ -1,5 +1,4 @@
-import { o as WalletAdapterMeta, t as LoginMethod } from "./types-C-hJrsQg.js";
-
+import { o as WalletAdapterMeta, t as LoginMethod } from "./types-7xgrEnx7.js";
 //#region src/wallet/mock/meta.d.ts
 type MockLoginMethod = "wallet" | "google" | "apple" | "email";
 declare const DEFAULT_MOCK_METHODS: LoginMethod[];
@@ -16,4 +15,5 @@ declare function resolveMockMethods(methods?: string[]): LoginMethod[];
 declare const mockAdapterMeta: Omit<WalletAdapterMeta, "supportedMethods">;
 //#endregion
 export { resolveMockMethods as a, mockAdapterMeta as i, MockLoginMethod as n, PHRenownMockAdapterConfig as r, DEFAULT_MOCK_METHODS as t };
-//# sourceMappingURL=meta-BesJP74N.d.ts.map
+export {};
+//# sourceMappingURL=meta-Dpmn2Ywp.d.ts.map

package/dist/meta-Dpmn2Ywp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"meta-Dpmn2Ywp.d.ts","names":[],"sources":["../src/wallet/mock/meta.ts"],"mappings":";;KAEY;cAUC,sBAAsB;;UAOlB;;EAEf;;EAEA;;EAEA,UAAU;;iBAKI,mBAAmB,qBAAqB;cAe3C,iBAAiB,KAAK"}

package/dist/{meta-bV7L-1yb.d.ts → meta-qadFdiX7.d.ts}

@@ -1,5 +1,4 @@
-import { o as WalletAdapterMeta, t as LoginMethod } from "./types-C-hJrsQg.js";
-
+import { o as WalletAdapterMeta, t as LoginMethod } from "./types-7xgrEnx7.js";
 //#region src/wallet/rainbow/meta.d.ts
 interface PHRenownChain {
   id: number;
@@ -16,4 +15,5 @@ declare const RAINBOW_METHODS: LoginMethod[];
 declare const rainbowAdapterMeta: WalletAdapterMeta;
 //#endregion
 export { rainbowAdapterMeta as i, PHRenownRainbowAdapterConfig as n, RAINBOW_METHODS as r, PHRenownChain as t };
-//# sourceMappingURL=meta-bV7L-1yb.d.ts.map
+export {};
+//# sourceMappingURL=meta-qadFdiX7.d.ts.map

package/dist/meta-qadFdiX7.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"meta-qadFdiX7.d.ts","names":[],"sources":["../src/wallet/rainbow/meta.ts"],"mappings":";;UAIiB;EACf;EACA;;UAKe;EAGf;EACA;EACA;EAGA,mBAAmB,kBAAkB;EAGrC;;cAGW,iBAAiB;cAIjB,oBAAoB"}

package/dist/node.d.ts

@@ -1,17 +1,18 @@
-import { A as LoginStatus, B as Service, C as InternalUser, Ct as DOMAIN_TYPE, D as JWTVerifyPolicies, Dt as VERIFIABLE_CREDENTIAL_EIP712_TYPE, E as JWTVerified, Et as RENOWN_SESSION_COOKIE, F as RenownEventEmitter, G as User, H as SignInParams, I as RenownEvents, J as VerificationMethod, K as UserActionSigner, L as RenownProfile, M as PowerhouseVerifiableCredential, N as ProfileFetcher, O as JsonWebKey, P as Proof, Q as BaseStorage, R as RenownStorage, S as IVerifiableCredential, St as DEFAULT_RENOWN_URL, T as JWTPayload, Tt as RENOWN_READ_MODEL_SUBGRAPH, U as Signer, V as ServiceEndpoint, W as Unsubscribe, X as VerifiedJWT, Y as VerifiedCredential, Z as W3CCredential, _ as IPowerhouseCredentialSubject, _t as CREDENTIAL_SCHEMA_EIP712_TYPE, a as JwkKeyPair, at as SignCredentialTypedData, b as IRenown, bt as DEFAULT_RENOWN_CHAIN_ID, c as ConditionWeightedThreshold, ct as buildAndSignCredential, d as DIDDocument, dt as verifyAuthCredential, et as IEventEmitter, f as DIDDocumentMetadata, ft as verifyCredentialSignature, g as IAuthCredentialSubject, gt as SwitchboardSource, h as EcdsaSignature, ht as SwitchboardRequestFn, i as JsonWebKeyPairStorage, it as FetchDelegationCredentialOptions, j as PKHDid, k as KeyCapabilitySection, l as CreateBearerTokenOptions, lt as fetchDelegationCredential, m as DIDResolutionResult, mt as SwitchboardClient, n as IConnectCrypto, nt as CredentialDomain, o as AuthVerifiableCredential, ot as VerifiedAuthCredential, p as DIDResolutionMetadata, pt as MissingSwitchboardError, q as Verifiable, r as IRenownCrypto, rt as CredentialMessage, s as AuthVerifiedCredential, st as VerifyAuthCredentialOptions, t as DID, tt as BuildCredentialParams, u as CredentialStatus, ut as recoverCredentialSigner, v as IPowerhouseIssuerType, vt as CREDENTIAL_SUBJECT_TYPE, w as Issuer, wt as ISSUER_TYPE, x as ISigner, xt as DEFAULT_RENOWN_NETWORK_ID, y as IProof, yt as CREDENTIAL_TYPES, z as RenownStorageMap } from "./types-BGQKPoUr.js";
-import { a as parseSignatureHashField, c as RenownCryptoBuilder, i as extractResultingHashFromSignature, l as ConnectCrypto, n as RenownCryptoSigner, o as signatureHasResultingHash, r as createSignatureVerifier, s as MemoryKeyStorage, u as RenownCrypto } from "./index-BLIpkdF7.js";
-import { C as resolveSwitchboardEndpoint, S as ResolveSwitchboardEndpointOptions, T as RenownMemoryStorage, _ as CredentialCheck, a as getResolver, b as BaseRenownBuilder, c as RenownSession, d as RenownSessionProfile, f as VerifyRenownSessionOptions, g as fetchRenownProfile, h as verifyRenownSession, i as createAuthBearerToken, l as RenownSessionClaims, m as serializeRenownSessionCookie, n as VerifyAuthBearerTokenOptions, o as parsePkhDid, p as readSessionClaims, r as assertIsAuthCredential, s as verifyAuthBearerToken, t as ILogger, u as RenownSessionCookie, v as LocalCredentialVerifierOptions, w as Renown, x as RenownBuilderOptions, y as createLocalCredentialVerifier } from "./utils-DtWREYeO.js";
-
+import { A as LoginStatus, At as VERIFIABLE_CREDENTIAL_EIP712_TYPE, B as Service, C as InternalUser, Ct as DEFAULT_RENOWN_CHAIN_ID, D as JWTVerifyPolicies, Dt as ISSUER_TYPE, E as JWTVerified, Et as DOMAIN_TYPE, F as RenownEventEmitter, G as User, H as SignInParams, I as RenownEvents, J as VerificationMethod, K as UserActionSigner, L as RenownProfile, M as PowerhouseVerifiableCredential, N as ProfileFetcher, O as JsonWebKey, Ot as RENOWN_READ_MODEL_SUBGRAPH, P as Proof, Q as BaseStorage, R as RenownStorage, S as IVerifiableCredential, St as CREDENTIAL_TYPES, T as JWTPayload, Tt as DEFAULT_RENOWN_URL, U as Signer, V as ServiceEndpoint, W as Unsubscribe, X as VerifiedJWT, Y as VerifiedCredential, Z as W3CCredential, _ as IPowerhouseCredentialSubject, _t as SwitchboardRequestFn, a as JwkKeyPair, at as SignCredentialTypedData, b as IRenown, bt as CREDENTIAL_SCHEMA_EIP712_TYPE, c as ConditionWeightedThreshold, ct as buildAndSignCredential, d as DIDDocument, dt as verifyAuthCredential, et as IEventEmitter, f as DIDDocumentMetadata, ft as verifyCredentialSignature, g as IAuthCredentialSubject, gt as SwitchboardClient, h as EcdsaSignature, ht as RenownWriteAuth, i as JsonWebKeyPairStorage, it as FetchDelegationCredentialOptions, j as PKHDid, k as KeyCapabilitySection, kt as RENOWN_SESSION_COOKIE, l as CreateBearerTokenOptions, lt as fetchDelegationCredential, m as DIDResolutionResult, mt as MissingSwitchboardError, n as IConnectCrypto, nt as CredentialDomain, o as AuthVerifiableCredential, ot as VerifiedAuthCredential, p as DIDResolutionMetadata, pt as verifyDelegationProof, q as Verifiable, r as IRenownCrypto, rt as CredentialMessage, s as AuthVerifiedCredential, st as VerifyAuthCredentialOptions, t as DID, tt as BuildCredentialParams, u as CredentialStatus, ut as recoverCredentialSigner, v as IPowerhouseIssuerType, vt as SwitchboardRequestOptions, w as Issuer, wt as DEFAULT_RENOWN_NETWORK_ID, x as ISigner, xt as CREDENTIAL_SUBJECT_TYPE, y as IProof, yt as SwitchboardSource, z as RenownStorageMap } from "./types-Ceiz2dkk.js";
+import { a as parseSignatureHashField, c as RenownCryptoBuilder, i as extractResultingHashFromSignature, l as ConnectCrypto, n as RenownCryptoSigner, o as signatureHasResultingHash, r as createSignatureVerifier, s as MemoryKeyStorage, u as RenownCrypto } from "./index-DbiBjqs6.js";
+import { C as BaseRenownBuilder, E as RenownMemoryStorage, S as createLocalCredentialVerifier, T as Renown, _ as profileMessage, a as getResolver, b as CredentialCheck, c as RenownSession, d as RenownSessionProfile, f as VerifyRenownSessionOptions, g as SIGNATURE_WINDOW_MS, h as verifyRenownSession, i as createAuthBearerToken, l as RenownSessionClaims, m as serializeRenownSessionCookie, n as VerifyAuthBearerTokenOptions, o as parsePkhDid, p as readSessionClaims, r as assertIsAuthCredential, s as verifyAuthBearerToken, t as ILogger, u as RenownSessionCookie, v as revokeMessage, w as RenownBuilderOptions, x as LocalCredentialVerifierOptions, y as fetchRenownProfile } from "./utils-DkVxP7Ug.js";
+import { a as ResolveSwitchboardEndpointOptions, i as createRenownTrustPolicy, n as RenownTrustPolicy, o as resolveSwitchboardEndpoint, r as RenownTrustPolicyOptions, t as RenownOwnSigner } from "./signer-trust-FmbMTn39.js";
+import { UserActionSigner as UserActionSigner$1 } from "@powerhousedao/shared/document-model";
 //#region src/crypto/node-key-storage.d.ts
-declare const RENOWN_PRIVATE_KEY_ENV = "PH_RENOWN_PRIVATE_KEY";
-declare const DEFAULT_KEYPAIR_PATH = ".ph/.keypair.json";
+export declare const RENOWN_PRIVATE_KEY_ENV = "PH_RENOWN_PRIVATE_KEY";
+export declare const DEFAULT_KEYPAIR_PATH = ".ph/.keypair.json";
 /**
  * Key storage that supports:
  * 1. PH_RENOWN_PRIVATE_KEY environment variable (JSON-encoded JwkKeyPair)
  * 2. Custom file path passed via options
  * 3. Falls back to file storage at .ph/.keypair.json in current working directory
  */
-declare class NodeKeyStorage implements JsonWebKeyPairStorage {
+export declare class NodeKeyStorage implements JsonWebKeyPairStorage {
   #private;
   static readonly DEFAULT_KEYPAIR_PATH = ".ph/.keypair.json";
   static readonly RENOWN_PRIVATE_KEY_ENV = "PH_RENOWN_PRIVATE_KEY";
@@ -24,8 +25,23 @@ declare class NodeKeyStorage implements JsonWebKeyPairStorage {
   removeKeyPair(): Promise<void>;
 }
 //#endregion
+//#region src/crypto/node-signer.d.ts
+type NodeRenownSignerArgs = {
+  appName: string;
+  /** Defaults to `.ph/.keypair.json` in cwd; `PH_RENOWN_PRIVATE_KEY` wins. */
+  keypairPath?: string;
+  user?: UserActionSigner$1;
+  /** The did the stored key must have. */
+  did?: string;
+};
+/**
+ * Rebuilds the signer of a key another thread already holds, for a pooled
+ * reactor worker that cannot be handed the key itself. Never generates a key.
+ */
+export declare function createNodeRenownSigner(args: NodeRenownSignerArgs): Promise<RenownCryptoSigner>;
+//#endregion
 //#region src/event/event.node.d.ts
-declare class NodeEventEmitter<Events extends Record<string, unknown>> implements IEventEmitter<Events> {
+export declare class NodeEventEmitter<Events extends Record<string, unknown>> implements IEventEmitter<Events> {
   #private;
   constructor();
   on<K extends keyof Events>(event: K, listener: (data: Events[K]) => void): () => void;
@@ -33,7 +49,7 @@ declare class NodeEventEmitter<Events extends Record<string, unknown>> implement
 }
 //#endregion
 //#region src/storage/storage.node.d.ts
-declare class NodeStorage<T extends Record<string, unknown> = Record<string, unknown>> extends BaseStorage<T> {
+export declare class NodeStorage<T extends Record<string, unknown> = Record<string, unknown>> extends BaseStorage<T> {
   private readonly filePath;
   constructor(filePath: string);
   private readData;
@@ -44,10 +60,10 @@ declare class NodeStorage<T extends Record<string, unknown> = Record<string, unk
 }
 //#endregion
 //#region src/init.node.d.ts
-declare class NodeRenownEventEmitter extends NodeEventEmitter<RenownEvents> {}
-declare class NodeRenownStorage extends NodeStorage<RenownStorageMap> {}
-declare const DEFAULT_RENOWN_STORAGE_PATH = "./.ph/.renown.json";
-interface NodeRenownBuilderOptions {
+export declare class NodeRenownEventEmitter extends NodeEventEmitter<RenownEvents> {}
+export declare class NodeRenownStorage extends NodeStorage<RenownStorageMap> {}
+export declare const DEFAULT_RENOWN_STORAGE_PATH = "./.ph/.renown.json";
+export interface NodeRenownBuilderOptions {
   /** File path for user storage. Defaults to ".ph/.renown.json" in cwd */
   storagePath?: string;
   /** File path for keypair storage. Defaults to ".ph/.keypair.json" in cwd */
@@ -60,14 +76,14 @@ interface NodeRenownBuilderOptions {
   revalidate?: "always" | "never";
 }
 /** Node.js Renown builder: file-based user + key storage. */
-declare class RenownBuilder extends BaseRenownBuilder {
+export declare class RenownBuilder extends BaseRenownBuilder {
   #private;
   constructor(appName: string, options?: NodeRenownBuilderOptions);
   build(): Promise<Renown>;
 }
 //#endregion
 //#region src/login.node.d.ts
-interface BrowserLoginOptions {
+export interface BrowserLoginOptions {
   /** Renown server URL */
   renownUrl: string;
   /** Timeout in milliseconds. Defaults to 5 minutes. */
@@ -81,11 +97,11 @@ interface BrowserLoginOptions {
   /** AbortSignal to cancel the login flow */
   signal?: AbortSignal;
 }
-interface BrowserLoginResult {
+export interface BrowserLoginResult {
   user: User;
   cliDid: string;
 }
-interface AuthStatusResult {
+export interface AuthStatusResult {
   authenticated: boolean;
   address?: string;
   userDid?: string;
@@ -97,7 +113,7 @@ interface AuthStatusResult {
 /**
  * Open a URL in the default browser (cross-platform).
  */
-declare function openBrowser(url: string): Promise<void>;
+export declare function openBrowser(url: string): Promise<void>;
 /**
  * Perform a browser-based login flow with Renown.
  * Opens the user's browser to authenticate, then polls for completion.
@@ -105,12 +121,12 @@ declare function openBrowser(url: string): Promise<void>;
  * If the browser fails to open, the flow continues polling — callers
  * can use onBrowserOpenFailed to show the URL as a fallback.
  */
-declare function browserLogin(renown: IRenown, options: BrowserLoginOptions): Promise<BrowserLoginResult>;
+export declare function browserLogin(renown: IRenown, options: BrowserLoginOptions): Promise<BrowserLoginResult>;
 /**
  * Get the current authentication status from a Renown instance.
  */
-declare function getAuthStatus(renown: IRenown): AuthStatusResult;
-interface AccessTokenResult {
+export declare function getAuthStatus(renown: IRenown): AuthStatusResult;
+export interface AccessTokenResult {
   token: string;
   did: string;
   address: string;
@@ -121,17 +137,18 @@ interface AccessTokenResult {
  * Requires the user to be authenticated (via browserLogin or equivalent).
  * Throws if not authenticated.
  */
-declare function generateAccessToken(renown: IRenown, options?: CreateBearerTokenOptions): Promise<AccessTokenResult>;
+export declare function generateAccessToken(renown: IRenown, options?: CreateBearerTokenOptions): Promise<AccessTokenResult>;
 /**
  * Parse a human-readable expiry string to seconds.
  * Supports formats: "7d" (days), "24h" (hours), "3600" (seconds), "3600s" (seconds).
  * Only accepts positive integers — decimals like "1.5h" are rejected.
  */
-declare function parseExpiry(expiry: string): number;
+export declare function parseExpiry(expiry: string): number;
 /**
  * Format an expiry duration in seconds to a human-readable string.
  */
-declare function formatExpiry(expiresIn: number): string;
+export declare function formatExpiry(expiresIn: number): string;
 //#endregion
-export { AccessTokenResult, AuthStatusResult, AuthVerifiableCredential, AuthVerifiedCredential, BaseRenownBuilder, BrowserLoginOptions, BrowserLoginResult, BuildCredentialParams, CREDENTIAL_SCHEMA_EIP712_TYPE, CREDENTIAL_SUBJECT_TYPE, CREDENTIAL_TYPES, ConditionWeightedThreshold, ConnectCrypto, CreateBearerTokenOptions, CredentialCheck, CredentialDomain, CredentialMessage, CredentialStatus, DEFAULT_KEYPAIR_PATH, DEFAULT_RENOWN_CHAIN_ID, DEFAULT_RENOWN_NETWORK_ID, DEFAULT_RENOWN_STORAGE_PATH, DEFAULT_RENOWN_URL, DID, DIDDocument, DIDDocumentMetadata, DIDResolutionMetadata, DIDResolutionResult, DOMAIN_TYPE, EcdsaSignature, FetchDelegationCredentialOptions, IAuthCredentialSubject, IConnectCrypto, ILogger, IPowerhouseCredentialSubject, IPowerhouseIssuerType, IProof, IRenown, IRenownCrypto, ISSUER_TYPE, ISigner, IVerifiableCredential, InternalUser, Issuer, JWTPayload, JWTVerified, JWTVerifyPolicies, JsonWebKey, JsonWebKeyPairStorage, JwkKeyPair, KeyCapabilitySection, LocalCredentialVerifierOptions, LoginStatus, MemoryKeyStorage, MissingSwitchboardError, NodeEventEmitter, NodeKeyStorage, NodeRenownBuilderOptions, NodeRenownEventEmitter, NodeRenownStorage, NodeStorage, PKHDid, PowerhouseVerifiableCredential, ProfileFetcher, Proof, RENOWN_PRIVATE_KEY_ENV, RENOWN_READ_MODEL_SUBGRAPH, RENOWN_SESSION_COOKIE, Renown, RenownBuilder, RenownBuilderOptions, RenownCrypto, RenownCryptoBuilder, RenownCryptoSigner, RenownEventEmitter, RenownEvents, RenownMemoryStorage, RenownProfile, RenownSession, RenownSessionClaims, RenownSessionCookie, RenownSessionProfile, RenownStorage, RenownStorageMap, ResolveSwitchboardEndpointOptions, Service, ServiceEndpoint, SignCredentialTypedData, SignInParams, Signer, SwitchboardClient, SwitchboardRequestFn, SwitchboardSource, Unsubscribe, User, UserActionSigner, VERIFIABLE_CREDENTIAL_EIP712_TYPE, Verifiable, VerificationMethod, VerifiedAuthCredential, VerifiedCredential, VerifiedJWT, VerifyAuthBearerTokenOptions, VerifyAuthCredentialOptions, VerifyRenownSessionOptions, W3CCredential, assertIsAuthCredential, browserLogin, buildAndSignCredential, createAuthBearerToken, createLocalCredentialVerifier, createSignatureVerifier, extractResultingHashFromSignature, fetchDelegationCredential, fetchRenownProfile, formatExpiry, generateAccessToken, getAuthStatus, getResolver, openBrowser, parseExpiry, parsePkhDid, parseSignatureHashField, readSessionClaims, recoverCredentialSigner, resolveSwitchboardEndpoint, serializeRenownSessionCookie, signatureHasResultingHash, verifyAuthBearerToken, verifyAuthCredential, verifyCredentialSignature, verifyRenownSession };
+export { AuthVerifiableCredential, AuthVerifiedCredential, BaseRenownBuilder, BuildCredentialParams, CREDENTIAL_SCHEMA_EIP712_TYPE, CREDENTIAL_SUBJECT_TYPE, CREDENTIAL_TYPES, ConditionWeightedThreshold, ConnectCrypto, CreateBearerTokenOptions, CredentialCheck, CredentialDomain, CredentialMessage, CredentialStatus, DEFAULT_RENOWN_CHAIN_ID, DEFAULT_RENOWN_NETWORK_ID, DEFAULT_RENOWN_URL, type DID, DIDDocument, DIDDocumentMetadata, DIDResolutionMetadata, DIDResolutionResult, DOMAIN_TYPE, EcdsaSignature, FetchDelegationCredentialOptions, IAuthCredentialSubject, type IConnectCrypto, ILogger, IPowerhouseCredentialSubject, IPowerhouseIssuerType, IProof, IRenown, type IRenownCrypto, ISSUER_TYPE, type ISigner, IVerifiableCredential, InternalUser, Issuer, JWTPayload, JWTVerified, JWTVerifyPolicies, JsonWebKey, type JsonWebKeyPairStorage, type JwkKeyPair, KeyCapabilitySection, LocalCredentialVerifierOptions, LoginStatus, MemoryKeyStorage, MissingSwitchboardError, type NodeRenownSignerArgs, PKHDid, PowerhouseVerifiableCredential, ProfileFetcher, Proof, RENOWN_READ_MODEL_SUBGRAPH, RENOWN_SESSION_COOKIE, Renown, RenownBuilderOptions, RenownCrypto, RenownCryptoBuilder, RenownCryptoSigner, RenownEventEmitter, RenownEvents, RenownMemoryStorage, RenownOwnSigner, RenownProfile, RenownSession, RenownSessionClaims, RenownSessionCookie, RenownSessionProfile, RenownStorage, RenownStorageMap, RenownTrustPolicy, RenownTrustPolicyOptions, RenownWriteAuth, ResolveSwitchboardEndpointOptions, SIGNATURE_WINDOW_MS, Service, ServiceEndpoint, SignCredentialTypedData, SignInParams, Signer, SwitchboardClient, SwitchboardRequestFn, SwitchboardRequestOptions, SwitchboardSource, Unsubscribe, User, type UserActionSigner, VERIFIABLE_CREDENTIAL_EIP712_TYPE, Verifiable, VerificationMethod, VerifiedAuthCredential, VerifiedCredential, VerifiedJWT, VerifyAuthBearerTokenOptions, VerifyAuthCredentialOptions, VerifyRenownSessionOptions, W3CCredential, assertIsAuthCredential, buildAndSignCredential, createAuthBearerToken, createLocalCredentialVerifier, createRenownTrustPolicy, createSignatureVerifier, extractResultingHashFromSignature, fetchDelegationCredential, fetchRenownProfile, getResolver, parsePkhDid, parseSignatureHashField, profileMessage, readSessionClaims, recoverCredentialSigner, resolveSwitchboardEndpoint, revokeMessage, serializeRenownSessionCookie, signatureHasResultingHash, verifyAuthBearerToken, verifyAuthCredential, verifyCredentialSignature, verifyDelegationProof, verifyRenownSession };
+export {};
 //# sourceMappingURL=node.d.ts.map

package/dist/node.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node.d.ts","names":[],"sources":["../src/crypto/node-key-storage.ts","../src/event/event.node.ts","../src/storage/storage.node.ts","../src/init.node.ts","../src/login.node.ts"],"mappings":";;;;;cAWa,sBAAA;AAAA,cACA,oBAAA;;AADb;;;;;cASa,cAAA,YAA0B,qBAAA;EAAA;kBAKrB,oBAAA;EAAA,gBACA,sBAAA;cAGd,QAAA,WACA,OAAA;IAAW,UAAA;IAAqB,MAAA,GAAS,OAAA;EAAA;EAa3C,WAAA,CAAA,GAAe,OAAA,CAAQ,UAAA;EAyBjB,WAAA,CAAY,OAAA,EAAS,UAAA,GAAa,OAAA;EAWxC,aAAA,CAAA,GAAiB,OAAA;AAAA;;;cC5EN,gBAAA,gBACI,MAAA,8BACJ,aAAA,CAAc,MAAA;EAAA;;EAOzB,EAAA,iBAAmB,MAAA,CAAA,CACjB,KAAA,EAAO,CAAA,EACP,QAAA,GAAW,IAAA,EAAM,MAAA,CAAO,CAAA;EAQ1B,IAAA,iBAAqB,MAAA,CAAA,CAAQ,KAAA,EAAO,CAAA,EAAG,IAAA,EAAM,MAAA,CAAO,CAAA;AAAA;;;cClBzC,WAAA,WACD,MAAA,oBAA0B,MAAA,2BAC5B,WAAA,CAAY,CAAA;EAAA,iBACH,QAAA;cAEL,QAAA;EAAA,QAYJ,QAAA;EAAA,QAKA,SAAA;EAIR,GAAA,mBAAsB,CAAA,CAAA,CAAG,GAAA,EAAK,GAAA,GAAM,CAAA,CAAE,GAAA;EAKtC,GAAA,mBAAsB,CAAA,CAAA,CAAG,GAAA,EAAK,GAAA,EAAK,KAAA,GAAQ,CAAA,CAAE,GAAA;EAU7C,MAAA,CAAO,GAAA,QAAW,CAAA;AAAA;;;cCtCP,sBAAA,SAA+B,gBAAA,CAAiB,YAAA;AAAA,cAChD,iBAAA,SAA0B,WAAA,CAAY,gBAAA;AAAA,cAEtC,2BAAA;AAAA,UAEI,wBAAA;EHAgB;EGE/B,WAAA;EHF+B;EGI/B,OAAA;EHIW;EGFX,OAAA;;EAEA,cAAA;EHuBuB;EGrBvB,UAAA;AAAA;;cAIW,aAAA,SAAsB,iBAAA;EAAA;cAGrB,OAAA,UAAiB,OAAA,GAAS,wBAAA;EAyBhC,KAAA,CAAA,GAAS,OAAA,CAAQ,MAAA;AAAA;;;UChDR,mBAAA;;EAEf,SAAA;;EAEA,SAAA;EJCiC;EICjC,UAAA,IAAc,GAAA,UAAa,SAAA;EJDM;EIGjC,UAAA;EJFW;EIIX,mBAAA,IAAuB,GAAA;;EAEvB,MAAA,GAAS,WAAA;AAAA;AAAA,UAGM,kBAAA;EACf,IAAA,EAAM,IAAA;EACN,MAAA;AAAA;AAAA,UAGe,gBAAA;EACf,aAAA;EACA,OAAA;EACA,OAAA;EACA,OAAA;EACA,MAAA;EACA,eAAA,GAAkB,IAAA;EAClB,OAAA;AAAA;;;;iBA+CoB,WAAA,CAAY,GAAA,WAAc,OAAA;;;;;;;;iBAyD1B,YAAA,CACpB,MAAA,EAAQ,OAAA,EACR,OAAA,EAAS,mBAAA,GACR,OAAA,CAAQ,kBAAA;;;;iBA2CK,aAAA,CAAc,MAAA,EAAQ,OAAA,GAAU,gBAAA;AAAA,UAe/B,iBAAA;EACf,KAAA;EACA,GAAA;EACA,OAAA;EACA,SAAA;AAAA;;AHvMF;;;;iBG+MsB,mBAAA,CACpB,MAAA,EAAQ,OAAA,EACR,OAAA,GAAU,wBAAA,GACT,OAAA,CAAQ,iBAAA;;;;;;iBAuBK,WAAA,CAAY,MAAA;;;;iBAgCZ,YAAA,CAAa,SAAA"}
+{"version":3,"file":"node.d.ts","names":[],"sources":["../src/crypto/node-key-storage.ts","../src/crypto/node-signer.ts","../src/event/event.node.ts","../src/storage/storage.node.ts","../src/init.node.ts","../src/login.node.ts"],"mappings":";;;;;;qBAWa;qBACA;;;;;;;qBAQA,0BAA0B;;kBAKrB;kBACA;EAEhB,YACE,mBACA;IAAW;IAAqB,SAAS;;EAa3C,eAAe,QAAQ;EAyBjB,YAAY,SAAS,aAAa;EAWxC,iBAAiB;;;;KC1EP;EACV;;EAEA;EACA,OAAO;;EAEP;;;;;;wBAOoB,uBACpB,MAAM,uBACL,QAAQ;;;qBCjBE,iBACX,eAAe,oCACJ,cAAc;;EAGzB;EAIA,GAAG,gBAAgB,QACjB,OAAO,GACP,WAAW,MAAM,OAAO;EAQ1B,KAAK,gBAAgB,QAAQ,OAAO,GAAG,MAAM,OAAO;;;;qBClBzC,YACX,UAAU,0BAA0B,iCAC5B,YAAY;mBACH;EAEjB,YAAY;UAYJ;UAKA;EAIR,IAAI,kBAAkB,GAAG,KAAK,MAAM,EAAE;EAKtC,IAAI,kBAAkB,GAAG,KAAK,KAAK,QAAQ,EAAE;EAU7C,OAAO,WAAW;;;;qBCtCP,+BAA+B,iBAAiB;qBAChD,0BAA0B,YAAY;qBAEtC;iBAEI;;EAEf;;EAEA;;EAEA;;EAEA;;EAEA;;;qBAIW,sBAAsB;;EAGjC,YAAY,iBAAiB,UAAS;EAyBhC,SAAS,QAAQ;;;;iBChDR;;EAEf;;EAEA;;EAEA,cAAc,aAAa;;EAE3B;;EAEA,uBAAuB;;EAEvB,SAAS;;iBAGM;EACf,MAAM;EACN;;iBAGe;EACf;EACA;EACA;EACA;EACA;EACA,kBAAkB;EAClB;;;;;wBA+CoB,YAAY,cAAc;;;;;;;;wBAyD1B,aACpB,QAAQ,SACR,SAAS,sBACR,QAAQ;;;;wBA2CK,cAAc,QAAQ,UAAU;iBAe/B;EACf;EACA;EACA;EACA;;;;;;;wBAQoB,oBACpB,QAAQ,SACR,UAAU,2BACT,QAAQ;;;;;;wBAuBK,YAAY;;;;wBAgCZ,aAAa"}