@welshare/react 0.4.0 → 0.5.0

package/README.md

@@ -84,16 +84,9 @@ export function QuestionnaireForm() {
 
 ### Binary file uploads (e.g. images)
 
-The package provides two ways to upload binary files:
-
-1. **`useWelshare` hook** - Upload via the wallet dialog (external wallet flow)
-2. **`useBinaryUploads` hook** - Upload directly with your own session keypair
-
 Before data hits any server, the SDK encrypts all files with a new random symmetric AES (GCM / 256 bits) key. Users request a presigned upload url and post the encrypted file to an S3 compatible API that's currently operated by Welshare. Ultimately, they encrypt the encryption key for a Nillion _owned_ BinaryData collection and store it across Nillion nodes (no single node can recover the key). At the time of insertion, they currently also grant ACL read rights for the application (Technically, this is the welshare builder keypair at the moment).
 
-#### Option 1: Upload via Wallet Dialog (`useWelshare`)
-
-This works best for applications that **don't** manage their own keypairs. It delegates the heavy lifting to the welshare wallet dialog frame.
+#### Upload via Wallet Dialog
 
 ```ts
 const { isConnected, openWallet, uploadFile, submitData } = useWelshare({
@@ -122,55 +115,10 @@ const responseItem = {
 };
 ```
 
-#### Option 2: Direct Upload (`useBinaryUploads`)
-
-For applications that manage storage keypairs directly:
-
-```ts
-import {
-  useBinaryUploads,
-  encryptAndUploadFile,
-  Schemas,
-} from "@welshare/react";
-import { WelshareApi } from "@welshare/sdk";
-
-const { createUploadCredentials, downloadAndDecryptFile, isRunning, error } =
-  useBinaryUploads({
-    keypair: storageKeyPair, // storage keypairs are derived by users
-    environment: "production",
-  });
-
-// Get presigned URL
-const { presignedUrl, uploadKey } = await createUploadCredentials({
-  applicationId: "your-app-id",
-  reference: `questionnaire/${questionnaireId}/photo`,
-  fileName: file.name,
-  fileType: file.type,
-});
-
-// Encrypt & upload to S3, then submit metadata to Nillion
-const { encryptionKey } = await encryptAndUploadFile(file, presignedUrl);
-await WelshareApi.submitBinaryData(
-  storageKeyPair,
-  {
-    encryption_key: JSON.stringify(encryptionKey),
-    reference: `questionnaire/${questionnaireId}/photo`,
-    file_name: file.name,
-    file_size: file.size,
-    file_type: file.type,
-    controller_did: storageKeyPair.toDidString(),
-    url: `welshare://${uploadKey}`,
-  },
-  "production",
-  applicationId
-);
-
-// Download and decrypt owned files
-const decryptedFile = await downloadAndDecryptFile(documentId);
-```
-
 Binary files are addressed as `valueAttachment` items in FHIR. See https://www.hl7.org/fhir/questionnaireresponse.html
 
+For applications that manage storage keypairs directly and need more control over the upload process, see the [Binary File Uploads section in the SDK documentation](../welshare/README.md#binary-file-uploads).
+
 ## API
 
 ### supported callbacks

package/dist/esm/index.d.ts

@@ -1,10 +1,8 @@
 export { ConnectWelshareButton } from "./components/connect-button.js";
 export { WelshareLogo } from "./components/welshare-logo.js";
 export { useWelshare } from "./hooks/use-welshare.js";
-export { useBinaryUploads, type UseBinaryUploadsOptions, type UseBinaryUploadsResult, } from "./hooks/use-binary-uploads.js";
 export { WELSHARE_API_ENVIRONMENT, resolveEnvironment, getBaseUrl, type WelshareApiEnvironment, type WelshareEnvironmentName, type NillionClusterConfig, } from "@welshare/sdk/environment";
-export { decrypt, encodeEncryptionKey, encryptFile, generateRandomAESKey, } from "./lib/encryption.js";
-export { decodeEncryptionKey, type EncryptionKey } from "./utils.js";
+export { decrypt, encodeEncryptionKey, encryptFile, generateRandomAESKey, decodeEncryptionKey, ALGORITHM, type EncryptionKey, type Algorithm, } from "@welshare/sdk";
 export { browserDownload, encryptAndUploadFile } from "./lib/uploads.js";
 export declare const Schemas: {
     QuestionnaireResponse: string;

package/dist/esm/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAG7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EACL,gBAAgB,EAChB,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,GAC5B,MAAM,+BAA+B,CAAC;AAGvC,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EAClB,UAAU,EACV,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,GAC1B,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EACL,OAAO,EACP,mBAAmB,EACnB,WAAW,EACX,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAErE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAGzE,eAAO,MAAM,OAAO;;;;CAInB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAG7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAGtD,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EAClB,UAAU,EACV,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,GAC1B,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EACL,OAAO,EACP,mBAAmB,EACnB,WAAW,EACX,oBAAoB,EACpB,mBAAmB,EACnB,SAAS,EACT,KAAK,aAAa,EAClB,KAAK,SAAS,GACf,MAAM,eAAe,CAAC;AAGvB,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAGzE,eAAO,MAAM,OAAO;;;;CAInB,CAAC"}

package/dist/esm/index.js

@@ -3,12 +3,11 @@ export { ConnectWelshareButton } from "./components/connect-button.js";
 export { WelshareLogo } from "./components/welshare-logo.js";
 // ---- Hooks ----
 export { useWelshare } from "./hooks/use-welshare.js";
-export { useBinaryUploads, } from "./hooks/use-binary-uploads.js";
 // ---- Environment (re-exported from @welshare/sdk) ----
 export { WELSHARE_API_ENVIRONMENT, resolveEnvironment, getBaseUrl, } from "@welshare/sdk/environment";
-// ---- Utils ----
-export { decrypt, encodeEncryptionKey, encryptFile, generateRandomAESKey, } from "./lib/encryption.js";
-export { decodeEncryptionKey } from "./utils.js";
+// ---- Encryption utilities (re-exported from @welshare/sdk) ----
+export { decrypt, encodeEncryptionKey, encryptFile, generateRandomAESKey, decodeEncryptionKey, ALGORITHM, } from "@welshare/sdk";
+// ---- Upload utilities (local, for frame-based upload flow) ----
 export { browserDownload, encryptAndUploadFile } from "./lib/uploads.js";
 //todo: import them from the SDK
 export const Schemas = {

package/dist/esm/lib/uploads.d.ts

@@ -1,4 +1,4 @@
-import { EncryptionKey } from "@/utils.js";
+import { type EncryptionKey } from "@welshare/sdk";
 export declare const encryptAndUploadFile: (file: File, presignedUrl: string) => Promise<EncryptionKey>;
 export declare const browserDownload: (decryptedFile: File) => void;
 //# sourceMappingURL=uploads.d.ts.map

package/dist/esm/lib/uploads.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"uploads.d.ts","sourceRoot":"","sources":["../../../src/lib/uploads.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAO3C,eAAO,MAAM,oBAAoB,SACzB,IAAI,gBACI,MAAM,KACnB,OAAO,CAAC,aAAa,CAgBvB,CAAC;AAEF,eAAO,MAAM,eAAe,kBAAmB,IAAI,SASlD,CAAC"}
+{"version":3,"file":"uploads.d.ts","sourceRoot":"","sources":["../../../src/lib/uploads.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAInB,MAAM,eAAe,CAAC;AAEvB,eAAO,MAAM,oBAAoB,SACzB,IAAI,gBACI,MAAM,KACnB,OAAO,CAAC,aAAa,CAgBvB,CAAC;AAEF,eAAO,MAAM,eAAe,kBAAmB,IAAI,SASlD,CAAC"}

package/dist/esm/lib/uploads.js

@@ -1,4 +1,4 @@
-import { encodeEncryptionKey, encryptFile, generateRandomAESKey, } from "./encryption.js";
+import { encodeEncryptionKey, encryptFile, generateRandomAESKey, } from "@welshare/sdk";
 export const encryptAndUploadFile = async (file, presignedUrl) => {
     const encryptionKey = await generateRandomAESKey();
     const { encryptedData, iv } = await encryptFile(file, encryptionKey);

package/dist/esm/types.d.ts

@@ -1,4 +1,4 @@
-import { EncryptionKey } from "./utils.js";
+import type { EncryptionKey } from "@welshare/sdk";
 import type { WelshareApiEnvironment, WelshareEnvironmentName } from "@welshare/sdk/environment";
 export interface DialogMessage {
     type: string;

package/dist/esm/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EACV,sBAAsB,EACtB,uBAAuB,EACxB,MAAM,2BAA2B,CAAC;AAEnC,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,GAAG,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAExC,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,UAAU,EAAE,CAAC,CAAC;CACf;AAED,MAAM,MAAM,iBAAiB,GAAG;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5E,MAAM,WAAW,+BAA+B;IAC9C,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,2BACf,SAAQ,+BAA+B;IACvC,aAAa,EAAE,aAAa,CAAC;IAE7B,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,iBAAkB,SAAQ,+BAA+B;IACxE,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,IAAI,EAAE,IAAI,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE;QACb,OAAO,EAAE,CAAC,MAAM,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,aAAa,EAAE,MAAM,CAAA;SAAE,KAAK,IAAI,CAAC;QAClE,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;KAChC,CAAC;CACH;AAED,MAAM,WAAW,2BAA4B,SAAQ,aAAa;IAChE,OAAO,EACH,iBAAiB,CAAC,OAAO,CAAC,GAC1B,2BAA2B,GAC3B,+BAA+B,CAAC;CACrC;AAED,MAAM,WAAW,yBAAyB;IACxC,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE;QACnB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF;;;;OAIG;IACH,WAAW,CAAC,EAAE,sBAAsB,GAAG,uBAAuB,CAAC;IAC/D;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE;QACT,cAAc,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;QAC5D,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;QAC3D,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;QAClC,cAAc,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,IAAI,CAAC;QACjD,eAAe,CAAC,EAAE,MAAM,IAAI,CAAC;QAC7B,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC;KAC5B,CAAC;CACH"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,KAAK,EACV,sBAAsB,EACtB,uBAAuB,EACxB,MAAM,2BAA2B,CAAC;AAEnC,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,GAAG,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAExC,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,UAAU,EAAE,CAAC,CAAC;CACf;AAED,MAAM,MAAM,iBAAiB,GAAG;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5E,MAAM,WAAW,+BAA+B;IAC9C,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,2BACf,SAAQ,+BAA+B;IACvC,aAAa,EAAE,aAAa,CAAC;IAE7B,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,iBAAkB,SAAQ,+BAA+B;IACxE,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,IAAI,EAAE,IAAI,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE;QACb,OAAO,EAAE,CAAC,MAAM,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,aAAa,EAAE,MAAM,CAAA;SAAE,KAAK,IAAI,CAAC;QAClE,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;KAChC,CAAC;CACH;AAED,MAAM,WAAW,2BAA4B,SAAQ,aAAa;IAChE,OAAO,EACH,iBAAiB,CAAC,OAAO,CAAC,GAC1B,2BAA2B,GAC3B,+BAA+B,CAAC;CACrC;AAED,MAAM,WAAW,yBAAyB;IACxC,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE;QACnB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF;;;;OAIG;IACH,WAAW,CAAC,EAAE,sBAAsB,GAAG,uBAAuB,CAAC;IAC/D;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE;QACT,cAAc,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;QAC5D,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;QAC3D,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;QAClC,cAAc,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,IAAI,CAAC;QACjD,eAAe,CAAC,EAAE,MAAM,IAAI,CAAC;QAC7B,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC;KAC5B,CAAC;CACH"}

package/dist/node_modules/@welshare/react/.turbo/turbo-lint.log

@@ -1,5 +1,5 @@
 
-> @welshare/react@0.3.0 lint /Users/stadolf/work/welshare/workspace/surveys-monorepo/packages/welshare-react
+> @welshare/react@0.4.0 lint /Users/stadolf/work/welshare/workspace/surveys-monorepo/packages/welshare-react
 > eslint . --max-warnings 25
 
 

package/dist/node_modules/@welshare/react/README.md

@@ -84,16 +84,9 @@ export function QuestionnaireForm() {
 
 ### Binary file uploads (e.g. images)
 
-The package provides two ways to upload binary files:
-
-1. **`useWelshare` hook** - Upload via the wallet dialog (external wallet flow)
-2. **`useBinaryUploads` hook** - Upload directly with your own session keypair
-
 Before data hits any server, the SDK encrypts all files with a new random symmetric AES (GCM / 256 bits) key. Users request a presigned upload url and post the encrypted file to an S3 compatible API that's currently operated by Welshare. Ultimately, they encrypt the encryption key for a Nillion _owned_ BinaryData collection and store it across Nillion nodes (no single node can recover the key). At the time of insertion, they currently also grant ACL read rights for the application (Technically, this is the welshare builder keypair at the moment).
 
-#### Option 1: Upload via Wallet Dialog (`useWelshare`)
-
-This works best for applications that **don't** manage their own keypairs. It delegates the heavy lifting to the welshare wallet dialog frame.
+#### Upload via Wallet Dialog
 
 ```ts
 const { isConnected, openWallet, uploadFile, submitData } = useWelshare({
@@ -122,55 +115,10 @@ const responseItem = {
 };
 ```
 
-#### Option 2: Direct Upload (`useBinaryUploads`)
-
-For applications that manage storage keypairs directly:
-
-```ts
-import {
-  useBinaryUploads,
-  encryptAndUploadFile,
-  Schemas,
-} from "@welshare/react";
-import { WelshareApi } from "@welshare/sdk";
-
-const { createUploadCredentials, downloadAndDecryptFile, isRunning, error } =
-  useBinaryUploads({
-    keypair: storageKeyPair, // storage keypairs are derived by users
-    environment: "production",
-  });
-
-// Get presigned URL
-const { presignedUrl, uploadKey } = await createUploadCredentials({
-  applicationId: "your-app-id",
-  reference: `questionnaire/${questionnaireId}/photo`,
-  fileName: file.name,
-  fileType: file.type,
-});
-
-// Encrypt & upload to S3, then submit metadata to Nillion
-const { encryptionKey } = await encryptAndUploadFile(file, presignedUrl);
-await WelshareApi.submitBinaryData(
-  storageKeyPair,
-  {
-    encryption_key: JSON.stringify(encryptionKey),
-    reference: `questionnaire/${questionnaireId}/photo`,
-    file_name: file.name,
-    file_size: file.size,
-    file_type: file.type,
-    controller_did: storageKeyPair.toDidString(),
-    url: `welshare://${uploadKey}`,
-  },
-  "production",
-  applicationId
-);
-
-// Download and decrypt owned files
-const decryptedFile = await downloadAndDecryptFile(documentId);
-```
-
 Binary files are addressed as `valueAttachment` items in FHIR. See https://www.hl7.org/fhir/questionnaireresponse.html
 
+For applications that manage storage keypairs directly and need more control over the upload process, see the [Binary File Uploads section in the SDK documentation](../welshare/README.md#binary-file-uploads).
+
 ## API
 
 ### supported callbacks

package/dist/node_modules/@welshare/react/dist/esm/index.d.ts

@@ -1,10 +1,8 @@
 export { ConnectWelshareButton } from "./components/connect-button.js";
 export { WelshareLogo } from "./components/welshare-logo.js";
 export { useWelshare } from "./hooks/use-welshare.js";
-export { useBinaryUploads, type UseBinaryUploadsOptions, type UseBinaryUploadsResult, } from "./hooks/use-binary-uploads.js";
 export { WELSHARE_API_ENVIRONMENT, resolveEnvironment, getBaseUrl, type WelshareApiEnvironment, type WelshareEnvironmentName, type NillionClusterConfig, } from "@welshare/sdk/environment";
-export { decrypt, encodeEncryptionKey, encryptFile, generateRandomAESKey, } from "./lib/encryption.js";
-export { decodeEncryptionKey, type EncryptionKey } from "./utils.js";
+export { decrypt, encodeEncryptionKey, encryptFile, generateRandomAESKey, decodeEncryptionKey, ALGORITHM, type EncryptionKey, type Algorithm, } from "@welshare/sdk";
 export { browserDownload, encryptAndUploadFile } from "./lib/uploads.js";
 export declare const Schemas: {
     QuestionnaireResponse: string;

package/dist/node_modules/@welshare/react/dist/esm/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAG7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EACL,gBAAgB,EAChB,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,GAC5B,MAAM,+BAA+B,CAAC;AAGvC,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EAClB,UAAU,EACV,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,GAC1B,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EACL,OAAO,EACP,mBAAmB,EACnB,WAAW,EACX,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAErE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAGzE,eAAO,MAAM,OAAO;;;;CAInB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAG7D,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAGtD,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EAClB,UAAU,EACV,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,GAC1B,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EACL,OAAO,EACP,mBAAmB,EACnB,WAAW,EACX,oBAAoB,EACpB,mBAAmB,EACnB,SAAS,EACT,KAAK,aAAa,EAClB,KAAK,SAAS,GACf,MAAM,eAAe,CAAC;AAGvB,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAGzE,eAAO,MAAM,OAAO;;;;CAInB,CAAC"}

package/dist/node_modules/@welshare/react/dist/esm/index.js

@@ -3,12 +3,11 @@ export { ConnectWelshareButton } from "./components/connect-button.js";
 export { WelshareLogo } from "./components/welshare-logo.js";
 // ---- Hooks ----
 export { useWelshare } from "./hooks/use-welshare.js";
-export { useBinaryUploads, } from "./hooks/use-binary-uploads.js";
 // ---- Environment (re-exported from @welshare/sdk) ----
 export { WELSHARE_API_ENVIRONMENT, resolveEnvironment, getBaseUrl, } from "@welshare/sdk/environment";
-// ---- Utils ----
-export { decrypt, encodeEncryptionKey, encryptFile, generateRandomAESKey, } from "./lib/encryption.js";
-export { decodeEncryptionKey } from "./utils.js";
+// ---- Encryption utilities (re-exported from @welshare/sdk) ----
+export { decrypt, encodeEncryptionKey, encryptFile, generateRandomAESKey, decodeEncryptionKey, ALGORITHM, } from "@welshare/sdk";
+// ---- Upload utilities (local, for frame-based upload flow) ----
 export { browserDownload, encryptAndUploadFile } from "./lib/uploads.js";
 //todo: import them from the SDK
 export const Schemas = {

package/dist/node_modules/@welshare/react/dist/esm/lib/uploads.d.ts

@@ -1,4 +1,4 @@
-import { EncryptionKey } from "@/utils.js";
+import { type EncryptionKey } from "@welshare/sdk";
 export declare const encryptAndUploadFile: (file: File, presignedUrl: string) => Promise<EncryptionKey>;
 export declare const browserDownload: (decryptedFile: File) => void;
 //# sourceMappingURL=uploads.d.ts.map

package/dist/node_modules/@welshare/react/dist/esm/lib/uploads.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"uploads.d.ts","sourceRoot":"","sources":["../../../src/lib/uploads.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAO3C,eAAO,MAAM,oBAAoB,SACzB,IAAI,gBACI,MAAM,KACnB,OAAO,CAAC,aAAa,CAgBvB,CAAC;AAEF,eAAO,MAAM,eAAe,kBAAmB,IAAI,SASlD,CAAC"}
+{"version":3,"file":"uploads.d.ts","sourceRoot":"","sources":["../../../src/lib/uploads.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAInB,MAAM,eAAe,CAAC;AAEvB,eAAO,MAAM,oBAAoB,SACzB,IAAI,gBACI,MAAM,KACnB,OAAO,CAAC,aAAa,CAgBvB,CAAC;AAEF,eAAO,MAAM,eAAe,kBAAmB,IAAI,SASlD,CAAC"}

package/dist/node_modules/@welshare/react/dist/esm/lib/uploads.js

@@ -1,4 +1,4 @@
-import { encodeEncryptionKey, encryptFile, generateRandomAESKey, } from "./encryption.js";
+import { encodeEncryptionKey, encryptFile, generateRandomAESKey, } from "@welshare/sdk";
 export const encryptAndUploadFile = async (file, presignedUrl) => {
     const encryptionKey = await generateRandomAESKey();
     const { encryptedData, iv } = await encryptFile(file, encryptionKey);

package/dist/node_modules/@welshare/react/dist/esm/types.d.ts

@@ -1,4 +1,4 @@
-import { EncryptionKey } from "./utils.js";
+import type { EncryptionKey } from "@welshare/sdk";
 import type { WelshareApiEnvironment, WelshareEnvironmentName } from "@welshare/sdk/environment";
 export interface DialogMessage {
     type: string;

package/dist/node_modules/@welshare/react/dist/esm/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EACV,sBAAsB,EACtB,uBAAuB,EACxB,MAAM,2BAA2B,CAAC;AAEnC,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,GAAG,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAExC,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,UAAU,EAAE,CAAC,CAAC;CACf;AAED,MAAM,MAAM,iBAAiB,GAAG;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5E,MAAM,WAAW,+BAA+B;IAC9C,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,2BACf,SAAQ,+BAA+B;IACvC,aAAa,EAAE,aAAa,CAAC;IAE7B,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,iBAAkB,SAAQ,+BAA+B;IACxE,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,IAAI,EAAE,IAAI,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE;QACb,OAAO,EAAE,CAAC,MAAM,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,aAAa,EAAE,MAAM,CAAA;SAAE,KAAK,IAAI,CAAC;QAClE,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;KAChC,CAAC;CACH;AAED,MAAM,WAAW,2BAA4B,SAAQ,aAAa;IAChE,OAAO,EACH,iBAAiB,CAAC,OAAO,CAAC,GAC1B,2BAA2B,GAC3B,+BAA+B,CAAC;CACrC;AAED,MAAM,WAAW,yBAAyB;IACxC,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE;QACnB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF;;;;OAIG;IACH,WAAW,CAAC,EAAE,sBAAsB,GAAG,uBAAuB,CAAC;IAC/D;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE;QACT,cAAc,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;QAC5D,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;QAC3D,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;QAClC,cAAc,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,IAAI,CAAC;QACjD,eAAe,CAAC,EAAE,MAAM,IAAI,CAAC;QAC7B,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC;KAC5B,CAAC;CACH"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,KAAK,EACV,sBAAsB,EACtB,uBAAuB,EACxB,MAAM,2BAA2B,CAAC;AAEnC,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,GAAG,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAExC,MAAM,WAAW,iBAAiB,CAAC,CAAC;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,UAAU,EAAE,CAAC,CAAC;CACf;AAED,MAAM,MAAM,iBAAiB,GAAG;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5E,MAAM,WAAW,+BAA+B;IAC9C,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,2BACf,SAAQ,+BAA+B;IACvC,aAAa,EAAE,aAAa,CAAC;IAE7B,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,iBAAkB,SAAQ,+BAA+B;IACxE,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,IAAI,EAAE,IAAI,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE;QACb,OAAO,EAAE,CAAC,MAAM,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,aAAa,EAAE,MAAM,CAAA;SAAE,KAAK,IAAI,CAAC;QAClE,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;KAChC,CAAC;CACH;AAED,MAAM,WAAW,2BAA4B,SAAQ,aAAa;IAChE,OAAO,EACH,iBAAiB,CAAC,OAAO,CAAC,GAC1B,2BAA2B,GAC3B,+BAA+B,CAAC;CACrC;AAED,MAAM,WAAW,yBAAyB;IACxC,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE;QACnB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IACF;;;;OAIG;IACH,WAAW,CAAC,EAAE,sBAAsB,GAAG,uBAAuB,CAAC;IAC/D;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE;QACT,cAAc,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;QAC5D,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;QAC3D,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;QAClC,cAAc,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,IAAI,CAAC;QACjD,eAAe,CAAC,EAAE,MAAM,IAAI,CAAC;QAC7B,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC;KAC5B,CAAC;CACH"}

package/dist/node_modules/@welshare/react/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@welshare/react",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "React library for integrating with Welshare's sovereign data sharing platform",
   "keywords": [
     "react",
@@ -61,7 +61,6 @@
     "exports": {
       "./package.json": "./package.json",
       "./types": "./src/types.ts",
-      "./utils": "./src/utils.ts",
       ".": "./src/index.ts"
     }
   },
@@ -73,12 +72,6 @@
         "default": "./dist/esm/types.js"
       }
     },
-    "./utils": {
-      "import": {
-        "types": "./dist/esm/utils.d.ts",
-        "default": "./dist/esm/utils.js"
-      }
-    },
     ".": {
       "import": {
         "types": "./dist/esm/index.d.ts",

package/dist/node_modules/@welshare/react/src/index.ts

@@ -4,11 +4,6 @@ export { WelshareLogo } from "./components/welshare-logo.js";
 
 // ---- Hooks ----
 export { useWelshare } from "./hooks/use-welshare.js";
-export {
-  useBinaryUploads,
-  type UseBinaryUploadsOptions,
-  type UseBinaryUploadsResult,
-} from "./hooks/use-binary-uploads.js";
 
 // ---- Environment (re-exported from @welshare/sdk) ----
 export {
@@ -20,15 +15,19 @@ export {
   type NillionClusterConfig,
 } from "@welshare/sdk/environment";
 
-// ---- Utils ----
+// ---- Encryption utilities (re-exported from @welshare/sdk) ----
 export {
   decrypt,
   encodeEncryptionKey,
   encryptFile,
   generateRandomAESKey,
-} from "./lib/encryption.js";
-export { decodeEncryptionKey, type EncryptionKey } from "./utils.js";
+  decodeEncryptionKey,
+  ALGORITHM,
+  type EncryptionKey,
+  type Algorithm,
+} from "@welshare/sdk";
 
+// ---- Upload utilities (local, for frame-based upload flow) ----
 export { browserDownload, encryptAndUploadFile } from "./lib/uploads.js";
 
 //todo: import them from the SDK

package/dist/node_modules/@welshare/react/src/lib/uploads.ts

@@ -1,9 +1,9 @@
-import { EncryptionKey } from "@/utils.js";
 import {
+  type EncryptionKey,
   encodeEncryptionKey,
   encryptFile,
   generateRandomAESKey,
-} from "./encryption.js";
+} from "@welshare/sdk";
 
 export const encryptAndUploadFile = async (
   file: File,

package/dist/node_modules/@welshare/react/src/types.ts

@@ -1,4 +1,4 @@
-import { EncryptionKey } from "./utils.js";
+import type { EncryptionKey } from "@welshare/sdk";
 import type {
   WelshareApiEnvironment,
   WelshareEnvironmentName,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@welshare/react",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "React library for integrating with Welshare's sovereign data sharing platform",
   "keywords": [
     "react",
@@ -23,7 +23,7 @@
   "homepage": "https://welshare.health",
   "type": "module",
   "dependencies": {
-    "@welshare/sdk": "0.2.0"
+    "@welshare/sdk": "0.3.0"
   },
   "peerDependencies": {
     "react": "^19",
@@ -52,7 +52,6 @@
     "exports": {
       "./package.json": "./package.json",
       "./types": "./src/types.ts",
-      "./utils": "./src/utils.ts",
       ".": "./src/index.ts"
     }
   },
@@ -64,12 +63,6 @@
         "default": "./dist/esm/types.js"
       }
     },
-    "./utils": {
-      "import": {
-        "types": "./dist/esm/utils.d.ts",
-        "default": "./dist/esm/utils.js"
-      }
-    },
     ".": {
       "import": {
         "types": "./dist/esm/index.d.ts",

package/dist/esm/hooks/use-binary-uploads.d.ts

@@ -1,59 +0,0 @@
-import type { RequestUploadCredentialsPayload, UploadCredentials } from "../types.js";
-import { Nillion, type WelshareApiEnvironment, type WelshareEnvironmentName } from "@welshare/sdk";
-export interface UseBinaryUploadsOptions {
-    /**
-     * The user's session keypair for authentication.
-     */
-    keypair: Nillion.Keypair | null | undefined;
-    /**
-     * The Welshare environment to use for API calls.
-     */
-    environment: WelshareApiEnvironment | WelshareEnvironmentName;
-}
-export interface UseBinaryUploadsResult {
-    /**
-     * Request upload credentials (presigned URL) for uploading an encrypted file.
-     */
-    createUploadCredentials: (payload: RequestUploadCredentialsPayload) => Promise<UploadCredentials>;
-    /**
-     * Download and decrypt a file by its document ID.
-     * Only works for files owned by the current user.
-     */
-    downloadAndDecryptFile: (documentId: string) => Promise<File | undefined>;
-    /**
-     * Whether an operation is currently running.
-     */
-    isRunning: boolean;
-    /**
-     * Error message if the last operation failed.
-     */
-    error: string | null;
-}
-/**
- * Hook for managing binary file uploads and downloads with Welshare.
- *
- * This hook provides functionality to:
- * - Request presigned URLs for uploading encrypted files to S3
- * - Download and decrypt files from Nillion storage
- *
- * @example
- * ```tsx
- * const { createUploadCredentials, downloadAndDecryptFile, isRunning, error } = useBinaryUploads({
- *   keypair: sessionKeyPair,
- *   environment: 'production',
- * });
- *
- * // Upload flow: get credentials, encrypt, upload to S3, then submit metadata via submitBinaryData
- * const credentials = await createUploadCredentials({
- *   applicationId: 'my-app',
- *   reference: 'user-photo',
- *   fileName: 'photo.jpg',
- *   fileType: 'image/jpeg',
- * });
- *
- * // Download and decrypt
- * const file = await downloadAndDecryptFile(documentId);
- * ```
- */
-export declare const useBinaryUploads: (options: UseBinaryUploadsOptions) => UseBinaryUploadsResult;
-//# sourceMappingURL=use-binary-uploads.d.ts.map

package/dist/esm/hooks/use-binary-uploads.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"use-binary-uploads.d.ts","sourceRoot":"","sources":["../../../src/hooks/use-binary-uploads.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,+BAA+B,EAC/B,iBAAiB,EAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,OAAO,EAGP,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC7B,MAAM,eAAe,CAAC;AAEvB,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,OAAO,EAAE,OAAO,CAAC,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC;IAC5C;;OAEG;IACH,WAAW,EAAE,sBAAsB,GAAG,uBAAuB,CAAC;CAC/D;AAED,MAAM,WAAW,sBAAsB;IACrC;;OAEG;IACH,uBAAuB,EAAE,CACvB,OAAO,EAAE,+BAA+B,KACrC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAEhC;;;OAGG;IACH,sBAAsB,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC,CAAC;IAC1E;;OAEG;IACH,SAAS,EAAE,OAAO,CAAC;IACnB;;OAEG;IACH,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,gBAAgB,YAClB,uBAAuB,KAC/B,sBAuGF,CAAC"}

package/dist/esm/hooks/use-binary-uploads.js

@@ -1,93 +0,0 @@
-import { useCallback, useEffect, useMemo, useRef, useState } from "react";
-import { decrypt } from "../lib/encryption.js";
-import { WelshareApi, resolveEnvironment, } from "@welshare/sdk";
-/**
- * Hook for managing binary file uploads and downloads with Welshare.
- *
- * This hook provides functionality to:
- * - Request presigned URLs for uploading encrypted files to S3
- * - Download and decrypt files from Nillion storage
- *
- * @example
- * ```tsx
- * const { createUploadCredentials, downloadAndDecryptFile, isRunning, error } = useBinaryUploads({
- *   keypair: sessionKeyPair,
- *   environment: 'production',
- * });
- *
- * // Upload flow: get credentials, encrypt, upload to S3, then submit metadata via submitBinaryData
- * const credentials = await createUploadCredentials({
- *   applicationId: 'my-app',
- *   reference: 'user-photo',
- *   fileName: 'photo.jpg',
- *   fileType: 'image/jpeg',
- * });
- *
- * // Download and decrypt
- * const file = await downloadAndDecryptFile(documentId);
- * ```
- */
-export const useBinaryUploads = (options) => {
-    const [isRunning, setIsRunning] = useState(false);
-    const [error, setError] = useState(null);
-    const mountedRef = useRef(true);
-    useEffect(() => {
-        mountedRef.current = true;
-        return () => {
-            mountedRef.current = false;
-        };
-    }, []);
-    const resolvedEnvironment = useMemo(() => resolveEnvironment(options.environment), [options.environment]);
-    const { keypair } = options;
-    const createUploadCredentials = useCallback(async (payload) => {
-        if (!keypair) {
-            throw new Error("No keypair available");
-        }
-        const { reference, fileName, fileType } = payload;
-        const { presignedUrl, uploadKey } = await WelshareApi.fetchS3WriteDelegation(keypair, { reference, fileName, fileType }, resolvedEnvironment);
-        return { presignedUrl, uploadKey };
-    }, [keypair, resolvedEnvironment]);
-    /**
-     * Downloads and decrypts a file by its document ID from Nillion.
-     */
-    const downloadAndDecryptFile = useCallback(async (documentId) => {
-        if (!keypair) {
-            throw new Error("No keypair available");
-        }
-        try {
-            setIsRunning(true);
-            setError(null);
-            const { binaryFile, data: downloadResponse } = await WelshareApi.fetchBinaryData(keypair, resolvedEnvironment, documentId);
-            const encodedEncryptionKey = JSON.parse(binaryFile.encryption_key);
-            const decryptedData = await decrypt(await downloadResponse, encodedEncryptionKey);
-            if (!decryptedData) {
-                throw new Error("Failed to decrypt file (received null)");
-            }
-            const decryptedFile = new File([decryptedData], binaryFile.file_name, {
-                type: binaryFile.file_type,
-            });
-            return decryptedFile;
-        }
-        catch (err) {
-            console.error("Error during file download/decryption:", err);
-            const errorMessage = err instanceof Error
-                ? err.message
-                : "Failed to download/decrypt file";
-            if (mountedRef.current) {
-                setError(errorMessage);
-            }
-            return undefined;
-        }
-        finally {
-            if (mountedRef.current) {
-                setIsRunning(false);
-            }
-        }
-    }, [keypair, resolvedEnvironment]);
-    return {
-        createUploadCredentials,
-        downloadAndDecryptFile,
-        isRunning,
-        error,
-    };
-};

package/dist/esm/lib/encryption.d.ts

@@ -1,9 +0,0 @@
-import { EncryptionKey } from "../utils.js";
-export declare const generateRandomAESKey: () => Promise<CryptoKey>;
-export declare const encryptFile: (file: File, key: CryptoKey) => Promise<{
-    encryptedData: ArrayBuffer;
-    iv: Uint8Array;
-}>;
-export declare const encodeEncryptionKey: (key: CryptoKey, iv: Uint8Array) => Promise<EncryptionKey>;
-export declare const decrypt: (encryptedData: ArrayBuffer, encryptionKey: EncryptionKey) => Promise<ArrayBuffer | null>;
-//# sourceMappingURL=encryption.d.ts.map

package/dist/esm/lib/encryption.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"encryption.d.ts","sourceRoot":"","sources":["../../../src/lib/encryption.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,aAAa,EAAuB,MAAM,aAAa,CAAC;AAE5E,eAAO,MAAM,oBAAoB,QAAa,OAAO,CAAC,SAAS,CAU9D,CAAC;AAIF,eAAO,MAAM,WAAW,SAChB,IAAI,OACL,SAAS,KACb,OAAO,CAAC;IAAE,aAAa,EAAE,WAAW,CAAC;IAAC,EAAE,EAAE,UAAU,CAAA;CAAE,CAaxD,CAAC;AAEF,eAAO,MAAM,mBAAmB,QACzB,SAAS,MACV,UAAU,KACb,OAAO,CAAC,aAAa,CAYvB,CAAC;AAGF,eAAO,MAAM,OAAO,kBACH,WAAW,iBACX,aAAa,KAC3B,OAAO,CAAC,WAAW,GAAG,IAAI,CAuB5B,CAAC"}

package/dist/esm/lib/encryption.js

@@ -1,44 +0,0 @@
-import { ALGORITHM, decodeEncryptionKey } from "../utils.js";
-export const generateRandomAESKey = async () => {
-    // Generate a 256-bit AES-GCM key for file encryption
-    return window.crypto.subtle.generateKey({
-        name: ALGORITHM,
-        length: 256, // 256-bit key
-    }, true, // Key is extractable (needed for storage/transmission)
-    ["encrypt", "decrypt"] // Key usage
-    );
-};
-/// also Generates random IV (12 bytes for AES-GCM)
-/// @return {arraybuffer ciphertext, uint8array iv}
-export const encryptFile = async (file, key) => {
-    // Read file as ArrayBuffer
-    const fileData = await file.arrayBuffer();
-    const iv = window.crypto.getRandomValues(new Uint8Array(12));
-    // Encrypt the file data
-    const encryptedData = await window.crypto.subtle.encrypt({ name: ALGORITHM, iv: iv }, key, fileData);
-    return { encryptedData, iv };
-};
-export const encodeEncryptionKey = async (key, iv) => {
-    // Export the key as raw bytes
-    const exportedKey = await window.crypto.subtle.exportKey("raw", key);
-    const keyHex = Array.from(new Uint8Array(exportedKey))
-        .map((b) => b.toString(16).padStart(2, "0"))
-        .join("");
-    const ivHex = Array.from(iv)
-        .map((b) => b.toString(16).padStart(2, "0"))
-        .join("");
-    return { algorithm: ALGORITHM, key: keyHex, iv: ivHex };
-};
-// Helper function to decrypt a file using encoded encryption key
-export const decrypt = async (encryptedData, encryptionKey) => {
-    try {
-        const { key: keyBytes, iv } = decodeEncryptionKey(encryptionKey);
-        const key = await window.crypto.subtle.importKey("raw", keyBytes, { name: ALGORITHM }, false, ["decrypt"]);
-        const decryptedData = await window.crypto.subtle.decrypt({ name: ALGORITHM, iv: iv }, key, encryptedData);
-        return decryptedData;
-    }
-    catch (error) {
-        console.error("Failed to decrypt file:", error);
-        return null;
-    }
-};

package/dist/esm/utils.d.ts

@@ -1,12 +0,0 @@
-export declare const ALGORITHM = "AES-GCM";
-export type Algorithm = "AES-GCM";
-export type EncryptionKey = {
-    algorithm: Algorithm;
-    key: string;
-    iv: string;
-};
-export declare const decodeEncryptionKey: (encryptionKey: EncryptionKey) => {
-    key: BufferSource;
-    iv: BufferSource;
-};
-//# sourceMappingURL=utils.d.ts.map

package/dist/esm/utils.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/utils.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,SAAS,YAAY,CAAC;AACnC,MAAM,MAAM,SAAS,GAAG,SAAS,CAAC;AAElC,MAAM,MAAM,aAAa,GAAG;IAAE,SAAS,EAAE,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9E,eAAO,MAAM,mBAAmB,kBACf,aAAa,KAC3B;IAAE,GAAG,EAAE,YAAY,CAAC;IAAC,EAAE,EAAE,YAAY,CAAA;CAUvC,CAAC"}

package/dist/esm/utils.js

@@ -1,8 +0,0 @@
-export const ALGORITHM = "AES-GCM";
-export const decodeEncryptionKey = (encryptionKey) => {
-    const keyBytes = new Uint8Array(encryptionKey.key
-        .match(/.{1,2}/g)
-        .map((byte) => parseInt(byte, 16)));
-    const ivBytes = new Uint8Array(encryptionKey.iv.match(/.{1,2}/g).map((byte) => parseInt(byte, 16)));
-    return { key: keyBytes, iv: ivBytes };
-};

package/dist/node_modules/@welshare/react/dist/esm/hooks/use-binary-uploads.d.ts

@@ -1,59 +0,0 @@
-import type { RequestUploadCredentialsPayload, UploadCredentials } from "../types.js";
-import { Nillion, type WelshareApiEnvironment, type WelshareEnvironmentName } from "@welshare/sdk";
-export interface UseBinaryUploadsOptions {
-    /**
-     * The user's session keypair for authentication.
-     */
-    keypair: Nillion.Keypair | null | undefined;
-    /**
-     * The Welshare environment to use for API calls.
-     */
-    environment: WelshareApiEnvironment | WelshareEnvironmentName;
-}
-export interface UseBinaryUploadsResult {
-    /**
-     * Request upload credentials (presigned URL) for uploading an encrypted file.
-     */
-    createUploadCredentials: (payload: RequestUploadCredentialsPayload) => Promise<UploadCredentials>;
-    /**
-     * Download and decrypt a file by its document ID.
-     * Only works for files owned by the current user.
-     */
-    downloadAndDecryptFile: (documentId: string) => Promise<File | undefined>;
-    /**
-     * Whether an operation is currently running.
-     */
-    isRunning: boolean;
-    /**
-     * Error message if the last operation failed.
-     */
-    error: string | null;
-}
-/**
- * Hook for managing binary file uploads and downloads with Welshare.
- *
- * This hook provides functionality to:
- * - Request presigned URLs for uploading encrypted files to S3
- * - Download and decrypt files from Nillion storage
- *
- * @example
- * ```tsx
- * const { createUploadCredentials, downloadAndDecryptFile, isRunning, error } = useBinaryUploads({
- *   keypair: sessionKeyPair,
- *   environment: 'production',
- * });
- *
- * // Upload flow: get credentials, encrypt, upload to S3, then submit metadata via submitBinaryData
- * const credentials = await createUploadCredentials({
- *   applicationId: 'my-app',
- *   reference: 'user-photo',
- *   fileName: 'photo.jpg',
- *   fileType: 'image/jpeg',
- * });
- *
- * // Download and decrypt
- * const file = await downloadAndDecryptFile(documentId);
- * ```
- */
-export declare const useBinaryUploads: (options: UseBinaryUploadsOptions) => UseBinaryUploadsResult;
-//# sourceMappingURL=use-binary-uploads.d.ts.map

package/dist/node_modules/@welshare/react/dist/esm/hooks/use-binary-uploads.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"use-binary-uploads.d.ts","sourceRoot":"","sources":["../../../src/hooks/use-binary-uploads.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,+BAA+B,EAC/B,iBAAiB,EAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,OAAO,EAGP,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC7B,MAAM,eAAe,CAAC;AAEvB,MAAM,WAAW,uBAAuB;IACtC;;OAEG;IACH,OAAO,EAAE,OAAO,CAAC,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC;IAC5C;;OAEG;IACH,WAAW,EAAE,sBAAsB,GAAG,uBAAuB,CAAC;CAC/D;AAED,MAAM,WAAW,sBAAsB;IACrC;;OAEG;IACH,uBAAuB,EAAE,CACvB,OAAO,EAAE,+BAA+B,KACrC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAEhC;;;OAGG;IACH,sBAAsB,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC,CAAC;IAC1E;;OAEG;IACH,SAAS,EAAE,OAAO,CAAC;IACnB;;OAEG;IACH,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,gBAAgB,YAClB,uBAAuB,KAC/B,sBAuGF,CAAC"}

package/dist/node_modules/@welshare/react/dist/esm/hooks/use-binary-uploads.js

@@ -1,93 +0,0 @@
-import { useCallback, useEffect, useMemo, useRef, useState } from "react";
-import { decrypt } from "../lib/encryption.js";
-import { WelshareApi, resolveEnvironment, } from "@welshare/sdk";
-/**
- * Hook for managing binary file uploads and downloads with Welshare.
- *
- * This hook provides functionality to:
- * - Request presigned URLs for uploading encrypted files to S3
- * - Download and decrypt files from Nillion storage
- *
- * @example
- * ```tsx
- * const { createUploadCredentials, downloadAndDecryptFile, isRunning, error } = useBinaryUploads({
- *   keypair: sessionKeyPair,
- *   environment: 'production',
- * });
- *
- * // Upload flow: get credentials, encrypt, upload to S3, then submit metadata via submitBinaryData
- * const credentials = await createUploadCredentials({
- *   applicationId: 'my-app',
- *   reference: 'user-photo',
- *   fileName: 'photo.jpg',
- *   fileType: 'image/jpeg',
- * });
- *
- * // Download and decrypt
- * const file = await downloadAndDecryptFile(documentId);
- * ```
- */
-export const useBinaryUploads = (options) => {
-    const [isRunning, setIsRunning] = useState(false);
-    const [error, setError] = useState(null);
-    const mountedRef = useRef(true);
-    useEffect(() => {
-        mountedRef.current = true;
-        return () => {
-            mountedRef.current = false;
-        };
-    }, []);
-    const resolvedEnvironment = useMemo(() => resolveEnvironment(options.environment), [options.environment]);
-    const { keypair } = options;
-    const createUploadCredentials = useCallback(async (payload) => {
-        if (!keypair) {
-            throw new Error("No keypair available");
-        }
-        const { reference, fileName, fileType } = payload;
-        const { presignedUrl, uploadKey } = await WelshareApi.fetchS3WriteDelegation(keypair, { reference, fileName, fileType }, resolvedEnvironment);
-        return { presignedUrl, uploadKey };
-    }, [keypair, resolvedEnvironment]);
-    /**
-     * Downloads and decrypts a file by its document ID from Nillion.
-     */
-    const downloadAndDecryptFile = useCallback(async (documentId) => {
-        if (!keypair) {
-            throw new Error("No keypair available");
-        }
-        try {
-            setIsRunning(true);
-            setError(null);
-            const { binaryFile, data: downloadResponse } = await WelshareApi.fetchBinaryData(keypair, resolvedEnvironment, documentId);
-            const encodedEncryptionKey = JSON.parse(binaryFile.encryption_key);
-            const decryptedData = await decrypt(await downloadResponse, encodedEncryptionKey);
-            if (!decryptedData) {
-                throw new Error("Failed to decrypt file (received null)");
-            }
-            const decryptedFile = new File([decryptedData], binaryFile.file_name, {
-                type: binaryFile.file_type,
-            });
-            return decryptedFile;
-        }
-        catch (err) {
-            console.error("Error during file download/decryption:", err);
-            const errorMessage = err instanceof Error
-                ? err.message
-                : "Failed to download/decrypt file";
-            if (mountedRef.current) {
-                setError(errorMessage);
-            }
-            return undefined;
-        }
-        finally {
-            if (mountedRef.current) {
-                setIsRunning(false);
-            }
-        }
-    }, [keypair, resolvedEnvironment]);
-    return {
-        createUploadCredentials,
-        downloadAndDecryptFile,
-        isRunning,
-        error,
-    };
-};

package/dist/node_modules/@welshare/react/dist/esm/lib/encryption.d.ts

@@ -1,9 +0,0 @@
-import { EncryptionKey } from "../utils.js";
-export declare const generateRandomAESKey: () => Promise<CryptoKey>;
-export declare const encryptFile: (file: File, key: CryptoKey) => Promise<{
-    encryptedData: ArrayBuffer;
-    iv: Uint8Array;
-}>;
-export declare const encodeEncryptionKey: (key: CryptoKey, iv: Uint8Array) => Promise<EncryptionKey>;
-export declare const decrypt: (encryptedData: ArrayBuffer, encryptionKey: EncryptionKey) => Promise<ArrayBuffer | null>;
-//# sourceMappingURL=encryption.d.ts.map

package/dist/node_modules/@welshare/react/dist/esm/lib/encryption.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"encryption.d.ts","sourceRoot":"","sources":["../../../src/lib/encryption.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,aAAa,EAAuB,MAAM,aAAa,CAAC;AAE5E,eAAO,MAAM,oBAAoB,QAAa,OAAO,CAAC,SAAS,CAU9D,CAAC;AAIF,eAAO,MAAM,WAAW,SAChB,IAAI,OACL,SAAS,KACb,OAAO,CAAC;IAAE,aAAa,EAAE,WAAW,CAAC;IAAC,EAAE,EAAE,UAAU,CAAA;CAAE,CAaxD,CAAC;AAEF,eAAO,MAAM,mBAAmB,QACzB,SAAS,MACV,UAAU,KACb,OAAO,CAAC,aAAa,CAYvB,CAAC;AAGF,eAAO,MAAM,OAAO,kBACH,WAAW,iBACX,aAAa,KAC3B,OAAO,CAAC,WAAW,GAAG,IAAI,CAuB5B,CAAC"}

package/dist/node_modules/@welshare/react/dist/esm/lib/encryption.js

@@ -1,44 +0,0 @@
-import { ALGORITHM, decodeEncryptionKey } from "../utils.js";
-export const generateRandomAESKey = async () => {
-    // Generate a 256-bit AES-GCM key for file encryption
-    return window.crypto.subtle.generateKey({
-        name: ALGORITHM,
-        length: 256, // 256-bit key
-    }, true, // Key is extractable (needed for storage/transmission)
-    ["encrypt", "decrypt"] // Key usage
-    );
-};
-/// also Generates random IV (12 bytes for AES-GCM)
-/// @return {arraybuffer ciphertext, uint8array iv}
-export const encryptFile = async (file, key) => {
-    // Read file as ArrayBuffer
-    const fileData = await file.arrayBuffer();
-    const iv = window.crypto.getRandomValues(new Uint8Array(12));
-    // Encrypt the file data
-    const encryptedData = await window.crypto.subtle.encrypt({ name: ALGORITHM, iv: iv }, key, fileData);
-    return { encryptedData, iv };
-};
-export const encodeEncryptionKey = async (key, iv) => {
-    // Export the key as raw bytes
-    const exportedKey = await window.crypto.subtle.exportKey("raw", key);
-    const keyHex = Array.from(new Uint8Array(exportedKey))
-        .map((b) => b.toString(16).padStart(2, "0"))
-        .join("");
-    const ivHex = Array.from(iv)
-        .map((b) => b.toString(16).padStart(2, "0"))
-        .join("");
-    return { algorithm: ALGORITHM, key: keyHex, iv: ivHex };
-};
-// Helper function to decrypt a file using encoded encryption key
-export const decrypt = async (encryptedData, encryptionKey) => {
-    try {
-        const { key: keyBytes, iv } = decodeEncryptionKey(encryptionKey);
-        const key = await window.crypto.subtle.importKey("raw", keyBytes, { name: ALGORITHM }, false, ["decrypt"]);
-        const decryptedData = await window.crypto.subtle.decrypt({ name: ALGORITHM, iv: iv }, key, encryptedData);
-        return decryptedData;
-    }
-    catch (error) {
-        console.error("Failed to decrypt file:", error);
-        return null;
-    }
-};

package/dist/node_modules/@welshare/react/dist/esm/utils.d.ts

@@ -1,12 +0,0 @@
-export declare const ALGORITHM = "AES-GCM";
-export type Algorithm = "AES-GCM";
-export type EncryptionKey = {
-    algorithm: Algorithm;
-    key: string;
-    iv: string;
-};
-export declare const decodeEncryptionKey: (encryptionKey: EncryptionKey) => {
-    key: BufferSource;
-    iv: BufferSource;
-};
-//# sourceMappingURL=utils.d.ts.map

package/dist/node_modules/@welshare/react/dist/esm/utils.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/utils.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,SAAS,YAAY,CAAC;AACnC,MAAM,MAAM,SAAS,GAAG,SAAS,CAAC;AAElC,MAAM,MAAM,aAAa,GAAG;IAAE,SAAS,EAAE,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9E,eAAO,MAAM,mBAAmB,kBACf,aAAa,KAC3B;IAAE,GAAG,EAAE,YAAY,CAAC;IAAC,EAAE,EAAE,YAAY,CAAA;CAUvC,CAAC"}

package/dist/node_modules/@welshare/react/dist/esm/utils.js

@@ -1,8 +0,0 @@
-export const ALGORITHM = "AES-GCM";
-export const decodeEncryptionKey = (encryptionKey) => {
-    const keyBytes = new Uint8Array(encryptionKey.key
-        .match(/.{1,2}/g)
-        .map((byte) => parseInt(byte, 16)));
-    const ivBytes = new Uint8Array(encryptionKey.iv.match(/.{1,2}/g).map((byte) => parseInt(byte, 16)));
-    return { key: keyBytes, iv: ivBytes };
-};

package/dist/node_modules/@welshare/react/src/hooks/use-binary-uploads.ts

@@ -1,181 +0,0 @@
-import { useCallback, useEffect, useMemo, useRef, useState } from "react";
-import { decrypt } from "../lib/encryption.js";
-import { type EncryptionKey } from "../utils.js";
-import type {
-  RequestUploadCredentialsPayload,
-  UploadCredentials,
-} from "../types.js";
-import {
-  Nillion,
-  WelshareApi,
-  resolveEnvironment,
-  type WelshareApiEnvironment,
-  type WelshareEnvironmentName,
-} from "@welshare/sdk";
-
-export interface UseBinaryUploadsOptions {
-  /**
-   * The user's session keypair for authentication.
-   */
-  keypair: Nillion.Keypair | null | undefined;
-  /**
-   * The Welshare environment to use for API calls.
-   */
-  environment: WelshareApiEnvironment | WelshareEnvironmentName;
-}
-
-export interface UseBinaryUploadsResult {
-  /**
-   * Request upload credentials (presigned URL) for uploading an encrypted file.
-   */
-  createUploadCredentials: (
-    payload: RequestUploadCredentialsPayload
-  ) => Promise<UploadCredentials>;
-
-  /**
-   * Download and decrypt a file by its document ID.
-   * Only works for files owned by the current user.
-   */
-  downloadAndDecryptFile: (documentId: string) => Promise<File | undefined>;
-  /**
-   * Whether an operation is currently running.
-   */
-  isRunning: boolean;
-  /**
-   * Error message if the last operation failed.
-   */
-  error: string | null;
-}
-
-/**
- * Hook for managing binary file uploads and downloads with Welshare.
- *
- * This hook provides functionality to:
- * - Request presigned URLs for uploading encrypted files to S3
- * - Download and decrypt files from Nillion storage
- *
- * @example
- * ```tsx
- * const { createUploadCredentials, downloadAndDecryptFile, isRunning, error } = useBinaryUploads({
- *   keypair: sessionKeyPair,
- *   environment: 'production',
- * });
- *
- * // Upload flow: get credentials, encrypt, upload to S3, then submit metadata via submitBinaryData
- * const credentials = await createUploadCredentials({
- *   applicationId: 'my-app',
- *   reference: 'user-photo',
- *   fileName: 'photo.jpg',
- *   fileType: 'image/jpeg',
- * });
- *
- * // Download and decrypt
- * const file = await downloadAndDecryptFile(documentId);
- * ```
- */
-export const useBinaryUploads = (
-  options: UseBinaryUploadsOptions
-): UseBinaryUploadsResult => {
-  const [isRunning, setIsRunning] = useState(false);
-  const [error, setError] = useState<string | null>(null);
-  const mountedRef = useRef(true);
-
-  useEffect(() => {
-    mountedRef.current = true;
-    return () => {
-      mountedRef.current = false;
-    };
-  }, []);
-
-  const resolvedEnvironment = useMemo(
-    () => resolveEnvironment(options.environment),
-    [options.environment]
-  );
-  const { keypair } = options;
-
-  const createUploadCredentials = useCallback(
-    async (
-      payload: RequestUploadCredentialsPayload
-    ): Promise<UploadCredentials> => {
-      if (!keypair) {
-        throw new Error("No keypair available");
-      }
-
-      const { reference, fileName, fileType } = payload;
-
-      const { presignedUrl, uploadKey } =
-        await WelshareApi.fetchS3WriteDelegation(
-          keypair,
-          { reference, fileName, fileType },
-          resolvedEnvironment
-        );
-
-      return { presignedUrl, uploadKey };
-    },
-    [keypair, resolvedEnvironment]
-  );
-
-  /**
-   * Downloads and decrypts a file by its document ID from Nillion.
-   */
-  const downloadAndDecryptFile = useCallback(
-    async (documentId: string): Promise<File | undefined> => {
-      if (!keypair) {
-        throw new Error("No keypair available");
-      }
-
-      try {
-        setIsRunning(true);
-        setError(null);
-
-        const { binaryFile, data: downloadResponse } =
-          await WelshareApi.fetchBinaryData(
-            keypair,
-            resolvedEnvironment,
-            documentId
-          );
-
-        const encodedEncryptionKey: EncryptionKey = JSON.parse(
-          binaryFile.encryption_key
-        );
-
-        const decryptedData = await decrypt(
-          await downloadResponse,
-          encodedEncryptionKey
-        );
-
-        if (!decryptedData) {
-          throw new Error("Failed to decrypt file (received null)");
-        }
-
-        const decryptedFile = new File([decryptedData], binaryFile.file_name, {
-          type: binaryFile.file_type,
-        });
-
-        return decryptedFile;
-      } catch (err) {
-        console.error("Error during file download/decryption:", err);
-        const errorMessage =
-          err instanceof Error
-            ? err.message
-            : "Failed to download/decrypt file";
-        if (mountedRef.current) {
-          setError(errorMessage);
-        }
-        return undefined;
-      } finally {
-        if (mountedRef.current) {
-          setIsRunning(false);
-        }
-      }
-    },
-    [keypair, resolvedEnvironment]
-  );
-
-  return {
-    createUploadCredentials,
-    downloadAndDecryptFile,
-    isRunning,
-    error,
-  };
-};

package/dist/node_modules/@welshare/react/src/lib/encryption.ts

@@ -1,79 +0,0 @@
-import { ALGORITHM, EncryptionKey, decodeEncryptionKey } from "../utils.js";
-
-export const generateRandomAESKey = async (): Promise<CryptoKey> => {
-  // Generate a 256-bit AES-GCM key for file encryption
-  return window.crypto.subtle.generateKey(
-    {
-      name: ALGORITHM,
-      length: 256, // 256-bit key
-    },
-    true, // Key is extractable (needed for storage/transmission)
-    ["encrypt", "decrypt"] // Key usage
-  );
-};
-
-/// also Generates random IV (12 bytes for AES-GCM)
-/// @return {arraybuffer ciphertext, uint8array iv}
-export const encryptFile = async (
-  file: File,
-  key: CryptoKey
-): Promise<{ encryptedData: ArrayBuffer; iv: Uint8Array }> => {
-  // Read file as ArrayBuffer
-  const fileData = await file.arrayBuffer();
-  const iv = window.crypto.getRandomValues(new Uint8Array(12));
-
-  // Encrypt the file data
-  const encryptedData = await window.crypto.subtle.encrypt(
-    { name: ALGORITHM, iv: iv },
-    key,
-    fileData
-  );
-
-  return { encryptedData, iv };
-};
-
-export const encodeEncryptionKey = async (
-  key: CryptoKey,
-  iv: Uint8Array
-): Promise<EncryptionKey> => {
-  // Export the key as raw bytes
-  const exportedKey = await window.crypto.subtle.exportKey("raw", key);
-  const keyHex = Array.from(new Uint8Array(exportedKey))
-    .map((b) => b.toString(16).padStart(2, "0"))
-    .join("");
-
-  const ivHex = Array.from(iv)
-    .map((b) => b.toString(16).padStart(2, "0"))
-    .join("");
-
-  return { algorithm: ALGORITHM, key: keyHex, iv: ivHex };
-};
-
-// Helper function to decrypt a file using encoded encryption key
-export const decrypt = async (
-  encryptedData: ArrayBuffer,
-  encryptionKey: EncryptionKey
-): Promise<ArrayBuffer | null> => {
-  try {
-    const { key: keyBytes, iv } = decodeEncryptionKey(encryptionKey);
-
-    const key = await window.crypto.subtle.importKey(
-      "raw",
-      keyBytes as BufferSource,
-      { name: ALGORITHM },
-      false,
-      ["decrypt"]
-    );
-
-    const decryptedData = await window.crypto.subtle.decrypt(
-      { name: ALGORITHM, iv: iv as BufferSource },
-      key,
-      encryptedData
-    );
-
-    return decryptedData;
-  } catch (error) {
-    console.error("Failed to decrypt file:", error);
-    return null;
-  }
-};

package/dist/node_modules/@welshare/react/src/utils.ts

@@ -1,18 +0,0 @@
-export const ALGORITHM = "AES-GCM";
-export type Algorithm = "AES-GCM";
-
-export type EncryptionKey = { algorithm: Algorithm; key: string; iv: string };
-
-export const decodeEncryptionKey = (
-  encryptionKey: EncryptionKey
-): { key: BufferSource; iv: BufferSource } => {
-  const keyBytes = new Uint8Array(
-    encryptionKey.key
-      .match(/.{1,2}/g)!
-      .map((byte: string) => parseInt(byte, 16))
-  );
-  const ivBytes = new Uint8Array(
-    encryptionKey.iv.match(/.{1,2}/g)!.map((byte: string) => parseInt(byte, 16))
-  );
-  return { key: keyBytes, iv: ivBytes };
-};