@welshare/react 0.0.1-alpha.1 → 0.1.0

package/dist/node_modules/@welshare/react/dist/esm/hooks/use-welshare.js

@@ -1,18 +1,22 @@
-import { useEffect, useState } from "react";
+import { useEffect, useRef, useState } from "react";
+import { encryptAndUploadFile } from "../lib/uploads.js";
 export const useWelshare = (props) => {
     const [storageKey, setStorageKey] = useState();
     const [isDialogOpen, setIsDialogOpen] = useState(false);
     const [dialogWindow, setDialogWindow] = useState(null);
     const [messageIdCounter, setMessageIdCounter] = useState(0);
     const [isSubmitting, setIsSubmitting] = useState(false);
+    const [uploadState, setUploadState] = useState();
+    // (claude opus) Use ref to control current upload in effect without triggering re-renders
+    const currentUploadRef = useRef(null);
     const options = {
         environment: "development",
-        apiBaseUrl: "https://wallet.welshare.health",
+        apiBaseUrl: "https://wallet.welshare.app",
         ...props,
     };
     const WELSHARE_WALLET_URL = `${options.apiBaseUrl}/wallet-external`;
     useEffect(() => {
-        const handleMessage = (event) => {
+        const handleMessage = async (event) => {
             // Verify origin for security
             if (event.origin !== new URL(WELSHARE_WALLET_URL).origin) {
                 return;
@@ -24,6 +28,10 @@ export const useWelshare = (props) => {
                     errorMessage = message.payload.error || "An unknown error occurred";
                     console.error("Welshare Wallet sent an error:", errorMessage);
                     setIsSubmitting(false);
+                    // Reject the promise if there's an ongoing upload
+                    if (currentUploadRef.current?.uploadPromise) {
+                        currentUploadRef.current.uploadPromise.reject(new Error(errorMessage));
+                    }
                     options.callbacks.onError?.(errorMessage);
                     break;
                 case "DIALOG_READY":
@@ -46,6 +54,10 @@ export const useWelshare = (props) => {
                     console.debug("Welshare Wallet Dialog is closing");
                     setStorageKey(undefined);
                     setIsDialogOpen(false);
+                    // Reject any pending upload promises
+                    if (currentUploadRef.current?.uploadPromise) {
+                        currentUploadRef.current.uploadPromise.reject(new Error("Dialog closed before upload completed"));
+                    }
                     options.callbacks.onDialogClosing?.();
                     break;
                 case "DATA_UPLOADED":
@@ -53,6 +65,62 @@ export const useWelshare = (props) => {
                     setIsSubmitting(false);
                     options.callbacks.onUploaded?.(message.payload);
                     break;
+                //todo: make this work for batches, too
+                case "UPLOAD_CREDENTIALS_CREATED":
+                    const credentials = message.payload;
+                    console.debug("upload credentials created", credentials);
+                    if (!currentUploadRef.current) {
+                        throw new Error("No upload in progress");
+                    }
+                    if (!dialogWindow) {
+                        currentUploadRef.current.uploadPromise.reject(new Error("(UPLOAD_CREDENTIALS_CREATED) Dialog window not open"));
+                        return;
+                    }
+                    try {
+                        setUploadState("uploading");
+                        const encodedEncryptionKey = await encryptAndUploadFile(currentUploadRef.current.file, credentials.presignedUrl);
+                        setUploadState("anchoring");
+                        const binarySubmissionPayload = {
+                            timestamp: currentUploadRef.current.timestamp,
+                            applicationId: options.applicationId,
+                            reference: currentUploadRef.current.reference,
+                            fileName: currentUploadRef.current.fileName,
+                            fileType: currentUploadRef.current.fileType,
+                            encryptionKey: encodedEncryptionKey,
+                            fileSize: currentUploadRef.current.file.size,
+                            url: `welshare://${credentials.uploadKey}`,
+                        };
+                        //write to Nillion
+                        const message = {
+                            type: "SUBMIT_BINARY_DATA",
+                            id: String(messageIdCounter),
+                            payload: binarySubmissionPayload,
+                        };
+                        dialogWindow.postMessage(message, WELSHARE_WALLET_URL);
+                        setMessageIdCounter((prev) => prev + 1);
+                    }
+                    catch (error) {
+                        console.error("error uploading file", error);
+                        // Update status to error
+                        currentUploadRef.current.uploadPromise.reject(error);
+                        setUploadState("error");
+                        // Call error callback
+                        const errorMsg = error instanceof Error ? error.message : "Upload failed";
+                        options.callbacks.onError?.(errorMsg);
+                    }
+                    break;
+                //{insertetUid, errors}
+                case "BINARY_DATA_SUBMITTED":
+                    if (!currentUploadRef.current) {
+                        throw new Error("No upload in progress");
+                    }
+                    currentUploadRef.current.uploadPromise.resolve({
+                        url: message.payload.url,
+                        binaryFileUid: message.payload.insertedUid,
+                    });
+                    setUploadState("finished");
+                    options.callbacks.onFileUploaded?.(message.payload.insertedUid, message.payload.url);
+                    break;
                 default:
                     console.log("Received unexpected message from Welshare Wallet:", message);
             }
@@ -61,14 +129,53 @@ export const useWelshare = (props) => {
         return () => {
             window.removeEventListener("message", handleMessage);
         };
-    }, [WELSHARE_WALLET_URL, options.callbacks]);
+    }, [WELSHARE_WALLET_URL, dialogWindow, messageIdCounter, options.applicationId, options.callbacks]);
+    /**
+     * Starts a file upload and returns a promise that resolves with the uploaded file URL
+     * @param file The file to upload
+     * @param reference string A reference identifier for the upload
+     * @returns Promise<{ url: string; binaryFileUid: string }> url usually starts with welshare:// and resolves to an encrypted storage location
+     */
+    const uploadFile = (file, reference) => {
+        return new Promise((resolve, reject) => {
+            if (!dialogWindow) {
+                reject(new Error("(uploadFile) Dialog window not open"));
+                return;
+            }
+            const payload = {
+                timestamp: new Date(),
+                applicationId: options.applicationId,
+                reference: reference,
+                fileName: file.name,
+                fileType: file.type,
+            };
+            setUploadState("preparing");
+            // (claude opus) Store the upload with the file and promise handlers on a ref
+            currentUploadRef.current = {
+                ...payload,
+                file,
+                reference,
+                uploadPromise: { resolve, reject },
+            };
+            const message = {
+                type: "REQUEST_UPLOAD_CREDENTIALS",
+                id: String(messageIdCounter),
+                payload: {
+                    ...payload,
+                    applicationId: options.applicationId,
+                },
+            };
+            dialogWindow.postMessage(message, WELSHARE_WALLET_URL);
+            setMessageIdCounter((prev) => prev + 1);
+        });
+    };
     /**
      * @param schemaType a welshare schema type uid
      * @param submission your submission that validates against the schema type
      */
     const submitData = (schemaId, submission) => {
         if (!dialogWindow) {
-            throw new Error("Dialog window not open");
+            throw new Error("(submitData) Dialog window not open");
         }
         const submissionPayload = {
             applicationId: options.applicationId,
@@ -105,7 +212,9 @@ export const useWelshare = (props) => {
         storageKey,
         openWallet,
         isDialogOpen,
+        uploadFile,
         submitData,
+        uploadState,
         isSubmitting,
     };
 };

package/dist/node_modules/@welshare/react/dist/esm/index.d.ts

@@ -1,7 +1,10 @@
 export { ConnectWelshareButton } from "./components/connect-button.js";
 export { useWelshare } from "./hooks/use-welshare.js";
+export { decodeEncryptionKey, decrypt, encodeEncryptionKey, encryptFile, generateRandomAESKey, type EncryptionKey } from "./lib/encryption.js";
+export { encryptAndUploadFile } from "./lib/uploads.js";
 export declare const Schemas: {
     QuestionnaireResponse: string;
     ReflexSubmission: string;
+    BinaryFile: string;
 };
 //# sourceMappingURL=index.d.ts.map

package/dist/node_modules/@welshare/react/dist/esm/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAEvE,OAAO,EACL,WAAW,EACZ,MAAM,yBAAyB,CAAC;AAGjC,eAAO,MAAM,OAAO;;;CAGnB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAEvE,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAEtD,OAAO,EACL,mBAAmB,EACnB,OAAO,EACP,mBAAmB,EACnB,WAAW,EACX,oBAAoB,EACpB,KAAK,aAAa,EACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD,eAAO,MAAM,OAAO;;;;CAInB,CAAC"}

package/dist/node_modules/@welshare/react/dist/esm/index.js

@@ -3,8 +3,11 @@
 export { ConnectWelshareButton } from "./components/connect-button.js";
 // ---- hooks ----
 export { useWelshare } from "./hooks/use-welshare.js";
+export { decodeEncryptionKey, decrypt, encodeEncryptionKey, encryptFile, generateRandomAESKey } from "./lib/encryption.js";
+export { encryptAndUploadFile } from "./lib/uploads.js";
 //todo: import them from the SDK or a dedicated SDK constants export
 export const Schemas = {
     QuestionnaireResponse: "b14b538f-7de3-4767-ad77-464d755d78bd", //QuestionnaireResponseSchema.schemaUid,
-    ReflexSubmission: "f5cf2d8a-1f78-4f21-b4bd-082e983b830c" //ReflexSubmissionSchema.schemaUid,
+    ReflexSubmission: "f5cf2d8a-1f78-4f21-b4bd-082e983b830c", //ReflexSubmissionSchema.schemaUid,
+    BinaryFile: "9d696baf-483f-4cc0-b748-23a22c1705f5" //BinaryFilesSchema.schemaUid,
 };

package/dist/node_modules/@welshare/react/dist/esm/lib/encryption.d.ts

@@ -0,0 +1,19 @@
+export declare const ALGORITHM = "AES-GCM";
+export type Algorithm = "AES-GCM";
+export declare const generateRandomAESKey: () => Promise<CryptoKey>;
+export declare const encryptFile: (file: File, key: CryptoKey) => Promise<{
+    encryptedData: ArrayBuffer;
+    iv: Uint8Array;
+}>;
+export type EncryptionKey = {
+    algorithm: Algorithm;
+    key: string;
+    iv: string;
+};
+export declare const encodeEncryptionKey: (key: CryptoKey, iv: Uint8Array) => Promise<EncryptionKey>;
+export declare const decodeEncryptionKey: (encryptionKey: EncryptionKey) => {
+    key: Uint8Array<ArrayBuffer>;
+    iv: Uint8Array<ArrayBuffer>;
+};
+export declare const decrypt: (encryptedData: ArrayBuffer, encryptionKey: EncryptionKey) => Promise<ArrayBuffer | null>;
+//# sourceMappingURL=encryption.d.ts.map

package/dist/node_modules/@welshare/react/dist/esm/lib/encryption.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encryption.d.ts","sourceRoot":"","sources":["../../../src/lib/encryption.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,SAAS,YAAY,CAAC;AACnC,MAAM,MAAM,SAAS,GAAG,SAAS,CAAC;AAElC,eAAO,MAAM,oBAAoB,QAAa,OAAO,CAAC,SAAS,CAU9D,CAAC;AAIF,eAAO,MAAM,WAAW,SAChB,IAAI,OACL,SAAS,KACb,OAAO,CAAC;IAAE,aAAa,EAAE,WAAW,CAAC;IAAC,EAAE,EAAE,UAAU,CAAA;CAAE,CAgBxD,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,SAAS,EAAE,SAAS,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;CACZ,CAAC;AAEF,eAAO,MAAM,mBAAmB,QACzB,SAAS,MACV,UAAU,KACb,OAAO,CAAC,aAAa,CAgBvB,CAAC;AAEF,eAAO,MAAM,mBAAmB,kBACf,aAAa,KAC3B;IAAE,GAAG,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;IAAC,EAAE,EAAE,UAAU,CAAC,WAAW,CAAC,CAAA;CAU7D,CAAC;AAGF,eAAO,MAAM,OAAO,kBACH,WAAW,iBACX,aAAa,KAC3B,OAAO,CAAC,WAAW,GAAG,IAAI,CA0B5B,CAAC"}

package/dist/node_modules/@welshare/react/dist/esm/lib/encryption.js

@@ -0,0 +1,61 @@
+export const ALGORITHM = "AES-GCM";
+export const generateRandomAESKey = async () => {
+    // Generate a 256-bit AES-GCM key for file encryption
+    return window.crypto.subtle.generateKey({
+        name: ALGORITHM,
+        length: 256, // 256-bit key
+    }, true, // Key is extractable (needed for storage/transmission)
+    ["encrypt", "decrypt"] // Key usage
+    );
+};
+/// also Generates random IV (12 bytes for AES-GCM)
+/// @return {arraybuffer ciphertext, uint8array iv}
+export const encryptFile = async (file, key) => {
+    // Read file as ArrayBuffer
+    const fileData = await file.arrayBuffer();
+    const iv = window.crypto.getRandomValues(new Uint8Array(12));
+    // Encrypt the file data
+    const encryptedData = await window.crypto.subtle.encrypt({
+        name: ALGORITHM,
+        iv: iv,
+    }, key, fileData);
+    return { encryptedData, iv };
+};
+export const encodeEncryptionKey = async (key, iv) => {
+    // Export the key as raw bytes
+    const exportedKey = await window.crypto.subtle.exportKey("raw", key);
+    const keyHex = Array.from(new Uint8Array(exportedKey))
+        .map((b) => b.toString(16).padStart(2, "0"))
+        .join("");
+    const ivHex = Array.from(iv)
+        .map((b) => b.toString(16).padStart(2, "0"))
+        .join("");
+    return {
+        algorithm: ALGORITHM,
+        key: keyHex,
+        iv: ivHex,
+    };
+};
+export const decodeEncryptionKey = (encryptionKey) => {
+    const keyBytes = new Uint8Array(encryptionKey.key
+        .match(/.{1,2}/g)
+        .map((byte) => parseInt(byte, 16)));
+    const ivBytes = new Uint8Array(encryptionKey.iv.match(/.{1,2}/g).map((byte) => parseInt(byte, 16)));
+    return { key: keyBytes, iv: ivBytes };
+};
+// Helper function to decrypt a file using encoded encryption key
+export const decrypt = async (encryptedData, encryptionKey) => {
+    try {
+        const { key: keyBytes, iv } = decodeEncryptionKey(encryptionKey);
+        const key = await window.crypto.subtle.importKey("raw", keyBytes, { name: ALGORITHM }, false, ["decrypt"]);
+        const decryptedData = await window.crypto.subtle.decrypt({
+            name: ALGORITHM,
+            iv,
+        }, key, encryptedData);
+        return decryptedData;
+    }
+    catch (error) {
+        console.error("Failed to decrypt file:", error);
+        return null;
+    }
+};

package/dist/node_modules/@welshare/react/dist/esm/lib/uploads.d.ts

@@ -0,0 +1,3 @@
+import { EncryptionKey } from "./encryption.js";
+export declare const encryptAndUploadFile: (file: File, presignedUrl: string) => Promise<EncryptionKey>;
+//# sourceMappingURL=uploads.d.ts.map

package/dist/node_modules/@welshare/react/dist/esm/lib/uploads.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"uploads.d.ts","sourceRoot":"","sources":["../../../src/lib/uploads.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,aAAa,EAEd,MAAM,iBAAiB,CAAC;AAEzB,eAAO,MAAM,oBAAoB,SACzB,IAAI,gBACI,MAAM,KACnB,OAAO,CAAC,aAAa,CAkBvB,CAAC"}

package/dist/node_modules/@welshare/react/dist/esm/lib/uploads.js

@@ -0,0 +1,17 @@
+import { encodeEncryptionKey, encryptFile, generateRandomAESKey, } from "./encryption.js";
+export const encryptAndUploadFile = async (file, presignedUrl) => {
+    const encryptionKey = await generateRandomAESKey();
+    const { encryptedData, iv } = await encryptFile(file, encryptionKey);
+    // Upload encrypted file to S3
+    const uploadResponse = await fetch(presignedUrl, {
+        method: "PUT",
+        body: encryptedData,
+        headers: {
+            "Content-Type": file.type,
+        },
+    });
+    if (!uploadResponse.ok) {
+        throw new Error(`Failed to upload file ${uploadResponse.status}`);
+    }
+    return encodeEncryptionKey(encryptionKey, iv);
+};

package/dist/node_modules/@welshare/react/dist/esm/types.d.ts

@@ -1,3 +1,4 @@
+import { EncryptionKey } from "./lib/encryption.js";
 export interface DialogMessage {
     type: string;
     payload?: any;
@@ -14,14 +15,43 @@ export interface SubmissionPayload<T> {
     schemaId: SubmissionSchemaId;
     submission: T;
 }
+export type UploadCredentials = {
+    presignedUrl: string;
+    uploadKey: string;
+};
+export interface RequestUploadCredentialsPayload {
+    timestamp?: Date;
+    applicationId: string;
+    reference: string;
+    fileName: string;
+    fileType: string;
+}
+export interface BinaryFileSubmissionPayload extends RequestUploadCredentialsPayload {
+    encryptionKey: EncryptionKey;
+    fileSize: number;
+    url: string;
+}
+export interface RunningFileUpload extends RequestUploadCredentialsPayload {
+    credentials?: UploadCredentials;
+    file: File;
+    reference: string;
+    uploadPromise: {
+        resolve: (result: {
+            url: string;
+            binaryFileUid: string;
+        }) => void;
+        reject: (error: Error) => void;
+    };
+}
 export interface DataSubmissionDialogMessage extends DialogMessage {
-    payload: SubmissionPayload<unknown>;
+    payload: SubmissionPayload<unknown> | BinaryFileSubmissionPayload | RequestUploadCredentialsPayload;
 }
 export interface WelshareConnectionOptions {
     applicationId: string;
     apiBaseUrl?: string;
     environment?: WelshareEnvironment;
     callbacks: {
+        onFileUploaded?: (insertedUid: string, url: string) => void;
         onUploaded?: (payload: SubmissionPayload<unknown>) => void;
         onError?: (error: string) => void;
         onSessionReady?: (sessionPubKey: string) => void;

package/dist/node_modules/@welshare/react/dist/esm/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,GAAG,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,MAAM,mBAAmB,GAAG,aAAa,GAAG,YAAY,CAAC;AAE/D;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAA;AAEvC,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,UAAU,EAAE,CAAC,CAAC;CACf;AAED,MAAM,WAAW,2BAA4B,SAAQ,aAAa;IAChE,OAAO,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,yBAAyB;IACxC,aAAa,EAAE,MAAM,CAAC;IAEtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAClC,SAAS,EAAE;QACT,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;QAC3D,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;QAClC,cAAc,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,IAAI,CAAC;QACjD,eAAe,CAAC,EAAE,MAAM,IAAI,CAAC;QAC7B,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC;KAC5B,CAAC;CACH"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,GAAG,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,MAAM,mBAAmB,GAAG,aAAa,GAAG,YAAY,CAAC;AAE/D;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAA;AAEvC,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,UAAU,EAAE,CAAC,CAAC;CACf;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAA;AAED,MAAM,WAAW,+BAA+B;IAC9C,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,2BAA4B,SAAQ,+BAA+B;IAClF,aAAa,EAAE,aAAa,CAAC;IAE7B,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,iBAAkB,SAAQ,+BAA+B;IACxE,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,IAAI,EAAE,IAAI,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE;QACb,OAAO,EAAE,CAAC,MAAM,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,aAAa,EAAE,MAAM,CAAA;SAAE,KAAK,IAAI,CAAC;QAClE,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;KAChC,CAAC;CACH;AAED,MAAM,WAAW,2BAA4B,SAAQ,aAAa;IAChE,OAAO,EACH,iBAAiB,CAAC,OAAO,CAAC,GAC1B,2BAA2B,GAC3B,+BAA+B,CAAC;CACrC;AAED,MAAM,WAAW,yBAAyB;IACxC,aAAa,EAAE,MAAM,CAAC;IAEtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAClC,SAAS,EAAE;QACT,cAAc,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;QAC5D,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;QAC3D,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;QAClC,cAAc,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,IAAI,CAAC;QACjD,eAAe,CAAC,EAAE,MAAM,IAAI,CAAC;QAC7B,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC;KAC5B,CAAC;CACH"}

package/dist/node_modules/@welshare/react/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@welshare/react",
-  "version": "0.0.1-alpha.1",
+  "version": "0.1.0",
   "description": "React library for integrating with Welshare's sovereign data sharing platform",
   "keywords": [
     "react",

package/dist/node_modules/@welshare/react/src/hooks/use-welshare.ts

@@ -1,10 +1,15 @@
 import {
+  BinaryFileSubmissionPayload,
   DialogMessage,
+  RequestUploadCredentialsPayload,
+  RunningFileUpload,
   SubmissionPayload,
   SubmissionSchemaId,
+  UploadCredentials,
   WelshareConnectionOptions,
 } from "@/types.js";
-import { useEffect, useState } from "react";
+import { useEffect, useRef, useState } from "react";
+import { encryptAndUploadFile } from "../lib/uploads.js";
 
 export const useWelshare = (props: WelshareConnectionOptions) => {
   const [storageKey, setStorageKey] = useState<string>();
@@ -12,17 +17,23 @@ export const useWelshare = (props: WelshareConnectionOptions) => {
   const [dialogWindow, setDialogWindow] = useState<Window | null>(null);
   const [messageIdCounter, setMessageIdCounter] = useState(0);
   const [isSubmitting, setIsSubmitting] = useState(false);
+  const [uploadState, setUploadState] = useState<
+    "preparing" | "uploading" | "anchoring" | "finished" | "error"
+  >();
+
+  // (claude opus) Use ref to control current upload in effect without triggering re-renders
+  const currentUploadRef = useRef<RunningFileUpload>(null);
 
   const options: WelshareConnectionOptions = {
     environment: "development",
-    apiBaseUrl: "https://wallet.welshare.health",
+    apiBaseUrl: "https://wallet.welshare.app",
     ...props,
   };
 
   const WELSHARE_WALLET_URL = `${options.apiBaseUrl}/wallet-external`;
 
   useEffect(() => {
-    const handleMessage = (event: MessageEvent<DialogMessage>) => {
+    const handleMessage = async (event: MessageEvent<DialogMessage>) => {
       // Verify origin for security
       if (event.origin !== new URL(WELSHARE_WALLET_URL).origin) {
         return;
@@ -35,6 +46,14 @@ export const useWelshare = (props: WelshareConnectionOptions) => {
           errorMessage = message.payload.error || "An unknown error occurred";
           console.error("Welshare Wallet sent an error:", errorMessage);
           setIsSubmitting(false);
+
+          // Reject the promise if there's an ongoing upload
+          if (currentUploadRef.current?.uploadPromise) {
+            currentUploadRef.current.uploadPromise.reject(
+              new Error(errorMessage)
+            );
+          }
+
           options.callbacks.onError?.(errorMessage);
           break;
         case "DIALOG_READY":
@@ -61,6 +80,14 @@ export const useWelshare = (props: WelshareConnectionOptions) => {
           console.debug("Welshare Wallet Dialog is closing");
           setStorageKey(undefined);
           setIsDialogOpen(false);
+
+          // Reject any pending upload promises
+          if (currentUploadRef.current?.uploadPromise) {
+            currentUploadRef.current.uploadPromise.reject(
+              new Error("Dialog closed before upload completed")
+            );
+          }
+
           options.callbacks.onDialogClosing?.();
           break;
 
@@ -69,6 +96,79 @@ export const useWelshare = (props: WelshareConnectionOptions) => {
           setIsSubmitting(false);
           options.callbacks.onUploaded?.(message.payload);
           break;
+
+        //todo: make this work for batches, too
+        case "UPLOAD_CREDENTIALS_CREATED":
+          const credentials: UploadCredentials = message.payload;
+          console.debug("upload credentials created", credentials);
+
+          if (!currentUploadRef.current) {
+            throw new Error("No upload in progress");
+          }
+
+          if (!dialogWindow) {
+            currentUploadRef.current.uploadPromise.reject(
+              new Error("(UPLOAD_CREDENTIALS_CREATED) Dialog window not open")
+            );
+            return;
+          }
+          try {
+            setUploadState("uploading");
+            const encodedEncryptionKey = await encryptAndUploadFile(
+              currentUploadRef.current.file,
+              credentials.presignedUrl
+            );
+
+            setUploadState("anchoring");
+            const binarySubmissionPayload: BinaryFileSubmissionPayload = {
+              timestamp: currentUploadRef.current.timestamp,
+              applicationId: options.applicationId,
+              reference: currentUploadRef.current.reference,
+              fileName: currentUploadRef.current.fileName,
+              fileType: currentUploadRef.current.fileType,
+              encryptionKey: encodedEncryptionKey,
+              fileSize: currentUploadRef.current.file.size,
+              url: `welshare://${credentials.uploadKey}`,
+            };
+
+            //write to Nillion
+            const message: DialogMessage = {
+              type: "SUBMIT_BINARY_DATA",
+              id: String(messageIdCounter),
+              payload: binarySubmissionPayload,
+            };
+
+            dialogWindow.postMessage(message, WELSHARE_WALLET_URL);
+            setMessageIdCounter((prev) => prev + 1);
+          } catch (error) {
+            console.error("error uploading file", error);
+            // Update status to error
+            currentUploadRef.current.uploadPromise.reject(error as Error);
+            setUploadState("error");
+
+            // Call error callback
+            const errorMsg =
+              error instanceof Error ? error.message : "Upload failed";
+            options.callbacks.onError?.(errorMsg);
+          }
+          break;
+        //{insertetUid, errors}
+        case "BINARY_DATA_SUBMITTED":
+          if (!currentUploadRef.current) {
+            throw new Error("No upload in progress");
+          }
+          currentUploadRef.current.uploadPromise.resolve({
+            url: message.payload.url,
+            binaryFileUid: message.payload.insertedUid,
+          });
+
+          setUploadState("finished");
+          options.callbacks.onFileUploaded?.(
+            message.payload.insertedUid,
+            message.payload.url
+          );
+          break;
+
         default:
           console.log(
             "Received unexpected message from Welshare Wallet:",
@@ -82,7 +182,54 @@ export const useWelshare = (props: WelshareConnectionOptions) => {
     return () => {
       window.removeEventListener("message", handleMessage);
     };
-  }, [WELSHARE_WALLET_URL, options.callbacks]);
+  }, [WELSHARE_WALLET_URL, dialogWindow, messageIdCounter, options.applicationId, options.callbacks]);
+
+  /**
+   * Starts a file upload and returns a promise that resolves with the uploaded file URL
+   * @param file The file to upload
+   * @param reference string A reference identifier for the upload
+   * @returns Promise<{ url: string; binaryFileUid: string }> url usually starts with welshare:// and resolves to an encrypted storage location
+   */
+  const uploadFile = (
+    file: File,
+    reference: string
+  ): Promise<{ url: string; binaryFileUid: string }> => {
+    return new Promise((resolve, reject) => {
+      if (!dialogWindow) {
+        reject(new Error("(uploadFile) Dialog window not open"));
+        return;
+      }
+
+      const payload: RequestUploadCredentialsPayload = {
+        timestamp: new Date(),
+        applicationId: options.applicationId,
+        reference: reference,
+        fileName: file.name,
+        fileType: file.type,
+      };
+
+      setUploadState("preparing");
+      // (claude opus) Store the upload with the file and promise handlers on a ref
+      currentUploadRef.current = {
+        ...payload,
+        file,
+        reference,
+        uploadPromise: { resolve, reject },
+      };
+
+      const message: DialogMessage = {
+        type: "REQUEST_UPLOAD_CREDENTIALS",
+        id: String(messageIdCounter),
+        payload: {
+          ...payload,
+          applicationId: options.applicationId,
+        },
+      };
+
+      dialogWindow.postMessage(message, WELSHARE_WALLET_URL);
+      setMessageIdCounter((prev) => prev + 1);
+    });
+  };
 
   /**
    * @param schemaType a welshare schema type uid
@@ -93,7 +240,7 @@ export const useWelshare = (props: WelshareConnectionOptions) => {
     submission: SubmissionPayload<T>
   ) => {
     if (!dialogWindow) {
-      throw new Error("Dialog window not open");
+      throw new Error("(submitData) Dialog window not open");
     }
 
     const submissionPayload = {
@@ -142,7 +289,9 @@ export const useWelshare = (props: WelshareConnectionOptions) => {
     storageKey,
     openWallet,
     isDialogOpen,
+    uploadFile,
     submitData,
+    uploadState,
     isSubmitting,
   };
 };

package/dist/node_modules/@welshare/react/src/index.ts

@@ -2,12 +2,20 @@
 //import { QuestionnaireResponseSchema, ReflexSubmissionSchema } from "@welshare/sdk";
 export { ConnectWelshareButton } from "./components/connect-button.js";
 // ---- hooks ----
-export {
-  useWelshare
-} from "./hooks/use-welshare.js";
+export { useWelshare } from "./hooks/use-welshare.js";
 
+export {
+  decodeEncryptionKey,
+  decrypt,
+  encodeEncryptionKey,
+  encryptFile,
+  generateRandomAESKey,
+  type EncryptionKey
+} from "./lib/encryption.js";
+export { encryptAndUploadFile } from "./lib/uploads.js";
 //todo: import them from the SDK or a dedicated SDK constants export
 export const Schemas = {
   QuestionnaireResponse: "b14b538f-7de3-4767-ad77-464d755d78bd", //QuestionnaireResponseSchema.schemaUid,
-  ReflexSubmission: "f5cf2d8a-1f78-4f21-b4bd-082e983b830c" //ReflexSubmissionSchema.schemaUid,
-};
+  ReflexSubmission: "f5cf2d8a-1f78-4f21-b4bd-082e983b830c", //ReflexSubmissionSchema.schemaUid,
+  BinaryFile: "9d696baf-483f-4cc0-b748-23a22c1705f5" //BinaryFilesSchema.schemaUid,
+};