@thurinlabs/identity-kit 1.3.6 → 1.4.0

package/dist/core.d.ts

@@ -19,9 +19,24 @@ interface Attestation {
     pgpPublicKey: string | null;
     verification: PGPVerification | null;
 }
+/** Why a claim does or doesn't count, in a form a UI can word (see CLAIM_CHECK_LABEL). Since 1.4.0. */
+type ClaimCheckKind = 'verified' | 'expired' | 'signing-key-expired' | 'revoked' | 'compromised' | 'signing-key-revoked' | 'unsupported' | 'bad-signature';
 interface PGPVerification {
     verified: boolean;
+    /** The underlying library message, for logs; show `kind` to people instead. */
     reason?: string;
+    /** Since 1.4.0. */
+    kind?: ClaimCheckKind;
+    /** ISO date that goes with `kind`: when the key or subkey expired or was revoked. */
+    at?: string | null;
+    /** The owner's revocation reason (their words, or the reason code's name). */
+    revocationReason?: string | null;
+    /** Fingerprint of the key or subkey that made the claim's signature. */
+    signingKey?: string | null;
+    /** When verified: the earlier expiry of the key and the signing subkey (ISO), or null if neither expires. */
+    expiresAt?: string | null;
+    /** For `unsupported`: the algorithm, e.g. "DSA 2048". */
+    algorithm?: string | null;
 }
 interface PGPKeyInfo {
     fingerprint: string;
@@ -90,7 +105,10 @@ interface ThurinIdentity {
 type Theme = 'thurin' | 'dark' | 'light';
 interface IdentityKitConfig {
     rpcUrl?: string;
+    /** Optional: read Farcaster proofs through Neynar's hub with this key. Not needed since 1.3.7. */
     neynarApiKey?: string;
+    /** A Farcaster node's HTTP API for Farcaster proofs. Default: Quilibrium's public Hypersnap node (keyless). */
+    farcasterHub?: string;
     baseUrl?: string;
     /** Which PGPRegistry deployment to read: 'mainnet' (default) or 'sepolia'. */
     network?: 'mainnet' | 'sepolia' | 'local';
@@ -1715,7 +1733,24 @@ declare function identifyProof(notation: Notation): Proof | null;
 declare function displayUrl(proof: Proof): string;
 declare function proofHref(proof: Proof): string | null;
 declare function proofSecondaryHref(proof: Proof): string | null;
-declare function verifyProof(proof: Proof, fingerprint: string, neynarApiKey?: string): Promise<PGPVerification>;
+/**
+ * Farcaster proofs are read from a Farcaster node's HTTP API (`/v1/userNameProofByName`,
+ * `/v1/castsByFid`). The default is Quilibrium's public Hypersnap node, which needs no key and
+ * allows browser requests; it sees the visitor's IP and which account was checked. Point
+ * `farcasterHub` at your own node to avoid that, or pass a Neynar key to use Neynar's hub.
+ */
+declare const FARCASTER_HUB = "https://haatz.quilibrium.com";
+interface ProofOptions {
+    /** A Farcaster node's HTTP API base URL. Default: FARCASTER_HUB (keyless). */
+    farcasterHub?: string;
+    /** Optional: read Farcaster through Neynar's hub with this key instead. */
+    neynarApiKey?: string;
+}
+/**
+ * Check one proof. The third argument is options; a plain string is still accepted as a
+ * Neynar API key (the pre-1.3.7 signature).
+ */
+declare function verifyProof(proof: Proof, fingerprint: string, opts?: ProofOptions | string): Promise<PGPVerification>;
 
 declare function parsePgpKey(armoredKey: string): Promise<PGPKeyInfo | null>;
 /**
@@ -1802,6 +1837,54 @@ declare function needsRpcProbe(s: Omit<IdentityLookupState, 'rpcAnswered'>): boo
 declare function identityErrorKind(s: IdentityLookupState): IdentityErrorKind | null;
 declare const IDENTITY_ERROR_TEXT: Record<IdentityErrorKind, string>;
 
+/**
+ * Plain words for a claim's state, shared by thurin.id, the CLI, and anyone embedding the kit,
+ * so every surface says the same thing. `sentence` is for visitors; `fix` is for the owner only
+ * (thurin.id shows it when the connected wallet owns the claim).
+ */
+/** Badge text for each check result. */
+declare const CLAIM_CHECK_LABEL: Record<ClaimCheckKind, string>;
+/** "Mar 5, 2029", in UTC so every viewer sees the same day. */
+declare function formatClaimDate(isoOrSeconds: string | number | null | undefined): string;
+interface ClaimCheckText {
+    kind: ClaimCheckKind;
+    label: string;
+    sentence: string;
+    /** What the owner can do about it, when there is something. */
+    fix: string | null;
+}
+/** Label, visitor sentence, and owner fix for a verification result. */
+declare function claimCheckText(v: PGPVerification, formatDate?: (iso: string | null | undefined) => string): ClaimCheckText;
+/** Days until a verified claim's key (or signing subkey) expires, when that is within `withinDays`. */
+declare function expiresSoon(v: PGPVerification | null | undefined, now?: number, withinDays?: number): {
+    days: number;
+    at: string;
+} | null;
+/** "Key expires in 12 days (Mar 6, 2027)." */
+declare function expiresSoonText(soon: {
+    days: number;
+    at: string;
+}, formatDate?: (iso: string) => string): string;
+type ClaimFate = {
+    state: 'active';
+} | {
+    state: 'revoked';
+    at: number;
+} | {
+    state: 'replaced';
+    at: number;
+    by: number;
+};
+/**
+ * Active, revoked, or replaced, for each of one owner's claims (keyed by index). `reattest`
+ * revokes and attests in one transaction, so a claim revoked at the very second a newer claim
+ * of the same owner was created counts as replaced by it. The contract has no "superseded"
+ * event; this reads the same fact from the stored timestamps.
+ */
+declare function claimFates(claims: Pick<Attestation, 'index' | 'createdAt' | 'revokedAt'>[]): Map<number, ClaimFate>;
+/** "Revoked by its owner on Oct 3, 2026." / "Replaced by claim #2 on Oct 3, 2026." */
+declare function claimFateText(fate: ClaimFate, formatDate?: (seconds: number) => string): string | null;
+
 /**
  * ENS avatars without the tracking pixel. The `avatar` record is a link the name's owner
  * chooses; loading an ordinary https:// link would tell that owner's server the IP and time of
@@ -1875,4 +1958,4 @@ declare function keyIdOf(fingerprint: string): Hex;
 /** A 16-hex long key ID (spaces/0x tolerated) → `bytes8`. */
 declare function keyIdToBytes(keyId: string): Hex | null;
 
-export { ARWEAVE_GATEWAY, AUTHORIZATION_TYPES, type AttestAuthorization, type Attestation, type AuthorizationAction, type EFPGraph, EIP712_NAME, EIP712_VERSION, ENS_HINT_KEY, ENS_TEXT_RESOLVER_ABI, type EnsHint, type EnsHintState, type EnsTextReader, IDENTITY_ERROR_TEXT, IDENTITY_KINDS, IPFS_GATEWAY, IPFS_GATEWAYS, type IdentityErrorKind, type IdentityKitConfig, type IdentityLookupState, KNOWN_KINDS, type KnownKind, MAX_RECORD_BYTES, NETWORKS, NFT_AVATAR_ABI, type NetworkName, type NftAvatar, type Notation, type PGPKeyInfo, type PGPVerification, type ParsedRecord, type PointerEntry, type PointerRecord, type Proof, type ProofResult, REGISTRY_ABI, REGISTRY_ADDRESS, type ReattestAuthorization, type RecordData, type RecordReader, type RegistryDeployment, type RevokeAuthorization, type SetRecordAuthorization, type StrippedKey, type SubkeyInfo, type Theme, type ThurinIdentity, type UpdateKeyAuthorization, addPointer, attestTypedData, authorizationDigest, avatarFallbacks, avatarUrl, bytesToFingerprint, chainFor, decodeRecord, displayUrl, encodeRecord, ensHintFor, ensHintValue, ensHintWrite, fetchEFPGraph, fetchEnsHint, fetchRecords, fingerprintHash, fingerprintToBytes, getRegistry, hasEmailUserID, identifyProof, identityErrorKind, isNetworkName, keyIdOf, keyIdToBytes, kindName, needsRpcProbe, nftAvatarImage, normalizeFingerprint, parseNftAvatar, parsePgpKey, parsePointer, parseRecord, proofHref, proofSecondaryHref, reattestTypedData, recordKind, registryDomain, renderPointer, revokeTypedData, setRecordTypedData, stripEmailUserIDs, updateKeyTypedData, verifyAttestation, verifyClearsigned, verifyProof };
+export { ARWEAVE_GATEWAY, AUTHORIZATION_TYPES, type AttestAuthorization, type Attestation, type AuthorizationAction, CLAIM_CHECK_LABEL, type ClaimCheckKind, type ClaimCheckText, type ClaimFate, type EFPGraph, EIP712_NAME, EIP712_VERSION, ENS_HINT_KEY, ENS_TEXT_RESOLVER_ABI, type EnsHint, type EnsHintState, type EnsTextReader, FARCASTER_HUB, IDENTITY_ERROR_TEXT, IDENTITY_KINDS, IPFS_GATEWAY, IPFS_GATEWAYS, type IdentityErrorKind, type IdentityKitConfig, type IdentityLookupState, KNOWN_KINDS, type KnownKind, MAX_RECORD_BYTES, NETWORKS, NFT_AVATAR_ABI, type NetworkName, type NftAvatar, type Notation, type PGPKeyInfo, type PGPVerification, type ParsedRecord, type PointerEntry, type PointerRecord, type Proof, type ProofOptions, type ProofResult, REGISTRY_ABI, REGISTRY_ADDRESS, type ReattestAuthorization, type RecordData, type RecordReader, type RegistryDeployment, type RevokeAuthorization, type SetRecordAuthorization, type StrippedKey, type SubkeyInfo, type Theme, type ThurinIdentity, type UpdateKeyAuthorization, addPointer, attestTypedData, authorizationDigest, avatarFallbacks, avatarUrl, bytesToFingerprint, chainFor, claimCheckText, claimFateText, claimFates, decodeRecord, displayUrl, encodeRecord, ensHintFor, ensHintValue, ensHintWrite, expiresSoon, expiresSoonText, fetchEFPGraph, fetchEnsHint, fetchRecords, fingerprintHash, fingerprintToBytes, formatClaimDate, getRegistry, hasEmailUserID, identifyProof, identityErrorKind, isNetworkName, keyIdOf, keyIdToBytes, kindName, needsRpcProbe, nftAvatarImage, normalizeFingerprint, parseNftAvatar, parsePgpKey, parsePointer, parseRecord, proofHref, proofSecondaryHref, reattestTypedData, recordKind, registryDomain, renderPointer, revokeTypedData, setRecordTypedData, stripEmailUserIDs, updateKeyTypedData, verifyAttestation, verifyClearsigned, verifyProof };

package/dist/core.js

@@ -1,10 +1,12 @@
 import {
   ARWEAVE_GATEWAY,
   AUTHORIZATION_TYPES,
+  CLAIM_CHECK_LABEL,
   EIP712_NAME,
   EIP712_VERSION,
   ENS_HINT_KEY,
   ENS_TEXT_RESOLVER_ABI,
+  FARCASTER_HUB,
   IDENTITY_ERROR_TEXT,
   IDENTITY_KINDS,
   IPFS_GATEWAY,
@@ -22,17 +24,23 @@ import {
   avatarUrl,
   bytesToFingerprint,
   chainFor,
+  claimCheckText,
+  claimFateText,
+  claimFates,
   decodeRecord,
   displayUrl,
   encodeRecord,
   ensHintFor,
   ensHintValue,
   ensHintWrite,
+  expiresSoon,
+  expiresSoonText,
   fetchEFPGraph,
   fetchEnsHint,
   fetchRecords,
   fingerprintHash,
   fingerprintToBytes,
+  formatClaimDate,
   getRegistry,
   hasEmailUserID,
   identifyProof,
@@ -61,14 +69,16 @@ import {
   verifyAttestation,
   verifyClearsigned,
   verifyProof
-} from "./chunk-HDBHNN4I.js";
+} from "./chunk-ZAQ2EPF5.js";
 export {
   ARWEAVE_GATEWAY,
   AUTHORIZATION_TYPES,
+  CLAIM_CHECK_LABEL,
   EIP712_NAME,
   EIP712_VERSION,
   ENS_HINT_KEY,
   ENS_TEXT_RESOLVER_ABI,
+  FARCASTER_HUB,
   IDENTITY_ERROR_TEXT,
   IDENTITY_KINDS,
   IPFS_GATEWAY,
@@ -86,17 +96,23 @@ export {
   avatarUrl,
   bytesToFingerprint,
   chainFor,
+  claimCheckText,
+  claimFateText,
+  claimFates,
   decodeRecord,
   displayUrl,
   encodeRecord,
   ensHintFor,
   ensHintValue,
   ensHintWrite,
+  expiresSoon,
+  expiresSoonText,
   fetchEFPGraph,
   fetchEnsHint,
   fetchRecords,
   fingerprintHash,
   fingerprintToBytes,
+  formatClaimDate,
   getRegistry,
   hasEmailUserID,
   identifyProof,

package/dist/embed.global.js

@@ -30400,13 +30400,14 @@ ${prettyStateOverride(stateOverride)}`;
     children,
     rpcUrl,
     neynarApiKey,
+    farcasterHub,
     baseUrl = "https://thurin.id",
     network = "mainnet",
     registryAddress
   }) {
     const config = (0, import_react8.useMemo)(
-      () => ({ rpcUrl, neynarApiKey, baseUrl, network, registryAddress }),
-      [rpcUrl, neynarApiKey, baseUrl, network, registryAddress]
+      () => ({ rpcUrl, neynarApiKey, farcasterHub, baseUrl, network, registryAddress }),
+      [rpcUrl, neynarApiKey, farcasterHub, baseUrl, network, registryAddress]
     );
     return /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(IdentityKitContext.Provider, { value: config, children: /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(WagmiDetector, { rpcUrl, network, children }) });
   }
@@ -31341,6 +31342,61 @@ ${prettyStateOverride(stateOverride)}`;
       return { verified: false, reason: err instanceof Error ? err.message : "Verification failed", text: "" };
     }
   }
+  var REVOCATION_REASON = {
+    // 0 = "no reason specified", gpg's default: say nothing rather than "(reason: no reason given)"
+    1: "replaced by a newer key",
+    2: "compromised",
+    3: "no longer used",
+    32: "a user ID is no longer valid"
+  };
+  var iso = (d2) => d2 instanceof Date ? d2.toISOString() : typeof d2 === "number" && Number.isFinite(d2) ? new Date(d2).toISOString() : null;
+  function revocationOf(sigs) {
+    const sig = [...sigs ?? []].sort((a2, b2) => (b2.created?.getTime?.() ?? 0) - (a2.created?.getTime?.() ?? 0))[0];
+    const flag = sig?.reasonForRevocationFlag ?? null;
+    return {
+      at: iso(sig?.created),
+      compromised: flag === 2,
+      revocationReason: sig?.reasonForRevocationString || (flag !== null ? REVOCATION_REASON[flag] ?? null : null)
+    };
+  }
+  async function keyLife(openpgp, key, clearsigned, config) {
+    const now = /* @__PURE__ */ new Date();
+    let issuer = null;
+    try {
+      issuer = (await openpgp.readCleartextMessage({ cleartextMessage: clearsigned })).signature.packets[0]?.issuerKeyID ?? null;
+    } catch {
+    }
+    const signer = issuer && !key.getKeyID().equals(issuer) ? key.subkeys.find((s2) => s2.getKeyID().equals(issuer)) ?? null : key;
+    const signingKey = signer ? signer.getFingerprint().toUpperCase() : null;
+    const safe = async (f2, fallback2) => {
+      try {
+        return await f2();
+      } catch {
+        return fallback2;
+      }
+    };
+    const keyRevoked = await safe(() => key.isRevoked(void 0, void 0, now, config), false);
+    const keyExp = await safe(() => key.getExpirationTime(void 0, config), null);
+    const isSub = signer && signer !== key;
+    const subRevoked = isSub ? await safe(() => signer.isRevoked(null, key.keyPacket, now, config), false) : false;
+    const subExp = isSub ? await safe(() => signer.getExpirationTime(null, config), null) : null;
+    const finite = (d2) => d2 instanceof Date && Number.isFinite(d2.getTime()) ? d2 : null;
+    const kExp = finite(keyExp), sExp = finite(subExp);
+    let problem = null;
+    if (keyRevoked) {
+      const r2 = revocationOf(key.revocationSignatures);
+      problem = { kind: r2.compromised ? "compromised" : "revoked", at: r2.at, revocationReason: r2.revocationReason };
+    } else if (kExp && kExp <= now) {
+      problem = { kind: "expired", at: kExp.toISOString() };
+    } else if (subRevoked) {
+      const r2 = revocationOf(signer.revocationSignatures);
+      problem = { kind: r2.compromised ? "compromised" : "signing-key-revoked", at: r2.at, revocationReason: r2.revocationReason };
+    } else if (sExp && sExp <= now) {
+      problem = { kind: "signing-key-expired", at: sExp.toISOString() };
+    }
+    const earliest = [kExp, sExp].filter(Boolean).sort((a2, b2) => a2 - b2)[0];
+    return { problem, signingKey, expiresAt: earliest ? earliest.toISOString() : null, algorithm: algorithmName(signer ?? key) };
+  }
   async function verifyAttestation({
     pgpPublicKey,
     pgpSignature,
@@ -31349,24 +31405,31 @@ ${prettyStateOverride(stateOverride)}`;
   }) {
     try {
       if (!pgpPublicKey || !pgpSignature) {
-        return { verified: false, reason: "Missing PGP data" };
+        return { verified: false, reason: "Missing PGP data", kind: "bad-signature" };
       }
       const openpgp = await Promise.resolve().then(() => (init_openpgp_min(), openpgp_min_exports));
       const { readKey } = openpgp;
       const publicKey = await readKey({ armoredKey: pgpPublicKey });
       const keyFingerprint = publicKey.getFingerprint().toUpperCase();
       if (keyFingerprint !== fingerprint.toUpperCase()) {
-        return { verified: false, reason: "Key fingerprint mismatch" };
+        return { verified: false, reason: "Key fingerprint mismatch", kind: "bad-signature" };
       }
+      const life = await keyLife(openpgp, publicKey, pgpSignature, pgpConfig(openpgp));
       const v2 = await verifyClearsigned({ armoredKey: pgpPublicKey, clearsigned: pgpSignature });
-      if (!v2.verified) return { verified: false, reason: v2.reason };
+      if (!v2.verified) {
+        if (life.problem) return { verified: false, reason: v2.reason, signingKey: life.signingKey, ...life.problem };
+        if (/too weak|reject|unsupported|not supported|unknown (curve|algorithm)/i.test(v2.reason || "")) {
+          return { verified: false, reason: v2.reason, kind: "unsupported", algorithm: life.algorithm, signingKey: life.signingKey };
+        }
+        return { verified: false, reason: v2.reason, kind: "bad-signature", signingKey: life.signingKey };
+      }
       const signedText = v2.text;
       if (!signedText.toLowerCase().includes(ethAddress.toLowerCase())) {
-        return { verified: false, reason: "Signed message does not contain ETH address" };
+        return { verified: false, reason: "Signed message does not contain ETH address", kind: "bad-signature", signingKey: life.signingKey };
       }
-      return { verified: true };
+      return { verified: true, kind: "verified", signingKey: life.signingKey, expiresAt: life.expiresAt };
     } catch {
-      return { verified: false, reason: "Signature verification failed" };
+      return { verified: false, reason: "Signature verification failed", kind: "bad-signature" };
     }
   }
 
@@ -31640,29 +31703,27 @@ ${prettyStateOverride(stateOverride)}`;
       return { verified: false, reason: `DNS fetch failed: ${err.message}` };
     }
   }
+  var FARCASTER_HUB = "https://haatz.quilibrium.com";
   var NEYNAR_HUB = "https://hub-api.neynar.com";
-  async function resolveFid(username, apiKey) {
-    const resp = await fetch(
-      `${NEYNAR_HUB}/v1/userNameProofByName?name=${encodeURIComponent(username)}`,
-      { headers: { "x-api-key": apiKey } }
-    );
-    if (!resp.ok) return null;
-    const data = await resp.json();
-    return data.fid ?? null;
-  }
-  async function verifyFarcaster(proof, fingerprint, neynarApiKey) {
-    if (!neynarApiKey) {
-      return { verified: false, reason: "Farcaster verification requires a Neynar API key" };
-    }
+  function farcasterSource(opts) {
+    if (opts.farcasterHub) return { base: opts.farcasterHub.replace(/\/+$/, ""), headers: {} };
+    if (opts.neynarApiKey) return { base: NEYNAR_HUB, headers: { "x-api-key": opts.neynarApiKey } };
+    return { base: FARCASTER_HUB, headers: {} };
+  }
+  async function verifyFarcaster(proof, fingerprint, opts = {}) {
+    const { base, headers } = farcasterSource(opts);
+    const host = base.replace(/^https?:\/\//, "");
     try {
-      const fid = await resolveFid(proof.user, neynarApiKey);
+      const nameResp = await fetch(`${base}/v1/userNameProofByName?name=${encodeURIComponent(proof.user)}`, { headers });
+      if (nameResp.status === 404) return { verified: false, reason: `Could not resolve Farcaster user "${proof.user}"` };
+      if (!nameResp.ok) return { verified: false, reason: `Couldn't check: the Farcaster node (${host}) returned ${nameResp.status}` };
+      const fid = (await nameResp.json()).fid;
       if (!fid) return { verified: false, reason: `Could not resolve Farcaster user "${proof.user}"` };
-      const headers = { "x-api-key": neynarApiKey };
       let pageToken = "";
       for (let page = 0; page < 5; page++) {
-        const url = `${NEYNAR_HUB}/v1/castsByFid?fid=${fid}&pageSize=100&reverse=true${pageToken ? `&pageToken=${pageToken}` : ""}`;
+        const url = `${base}/v1/castsByFid?fid=${fid}&pageSize=100&reverse=true${pageToken ? `&pageToken=${pageToken}` : ""}`;
         const resp = await fetch(url, { headers });
-        if (!resp.ok) return { verified: false, reason: `Farcaster Hub returned ${resp.status}` };
+        if (!resp.ok) return { verified: false, reason: `Couldn't check: the Farcaster node (${host}) returned ${resp.status}` };
         const data = await resp.json();
         for (const msg of data.messages || []) {
           if (msg.hash && msg.hash.startsWith(proof.castHash)) {
@@ -31677,7 +31738,7 @@ ${prettyStateOverride(stateOverride)}`;
       }
       return { verified: false, reason: "Cast not found" };
     } catch (err) {
-      return { verified: false, reason: `Farcaster fetch failed: ${err.message}` };
+      return { verified: false, reason: `Couldn't check: the Farcaster node (${host}) didn't answer (${err.message})` };
     }
   }
   async function verifyCodeberg(proof, fingerprint) {
@@ -31730,10 +31791,10 @@ ${prettyStateOverride(stateOverride)}`;
     codeberg: verifyCodeberg,
     mastodon: verifyMastodon
   };
-  async function verifyProof(proof, fingerprint, neynarApiKey) {
+  async function verifyProof(proof, fingerprint, opts) {
     const fn2 = verifiers[proof.provider];
     if (!fn2) return { verified: false, reason: "Unknown provider" };
-    return fn2(proof, fingerprint, neynarApiKey);
+    return fn2(proof, fingerprint, typeof opts === "string" ? { neynarApiKey: opts } : opts ?? {});
   }
 
   // src/hooks/usePGPProofs.ts
@@ -31750,7 +31811,7 @@ ${prettyStateOverride(stateOverride)}`;
         const identified = keyInfo.notations.map((n2) => identifyProof(n2)).filter((p2) => p2 !== null && p2.provider !== "unknown");
         const proofs = await Promise.all(
           identified.map(async (proof) => {
-            const result = await verifyProof(proof, fingerprint, config.neynarApiKey);
+            const result = await verifyProof(proof, fingerprint, { neynarApiKey: config.neynarApiKey, farcasterHub: config.farcasterHub });
             return {
               provider: proof.provider,
               label: proof.label,
@@ -32054,6 +32115,7 @@ ${prettyStateOverride(stateOverride)}`;
       const theme = el2.dataset.theme || "thurin";
       const rpcUrl = el2.dataset.rpcUrl;
       const neynarApiKey = el2.dataset.neynarKey;
+      const farcasterHub = el2.dataset.farcasterHub;
       const baseUrl = el2.dataset.baseUrl;
       const network = isNetworkName(el2.dataset.network) ? el2.dataset.network : "mainnet";
       const registryAddress = el2.dataset.registryAddress;
@@ -32066,7 +32128,7 @@ ${prettyStateOverride(stateOverride)}`;
       shadow.appendChild(container);
       const root = (0, import_client.createRoot)(container);
       const render = (t2) => root.render(
-        /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(IdentityKitProvider, { rpcUrl, neynarApiKey, network, registryAddress, baseUrl, children: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(ThurinCard, { ...props, theme: t2 }) })
+        /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(IdentityKitProvider, { rpcUrl, neynarApiKey, farcasterHub, network, registryAddress, baseUrl, children: /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(ThurinCard, { ...props, theme: t2 }) })
       );
       render(theme);
       new MutationObserver(() => {