Feat/eid wallet onboarding restructure

infrastructure/eid-wallet/src-tauri/capabilities/mobile.json

@@ -1,25 +1,20 @@
 {
- "$schema": "../gen/schemas/mobile-schema.json",
- "identifier": "mobile-capability",
- "description": "Capability for the main window on mobile",
- "windows": [
- "main"
- ],
- "permissions": [
- "core:default",
- "opener:default",
- "store:default",
- "biometric:default",
- "barcode-scanner:default",
- "barcode-scanner:allow-open-app-settings",
- "deep-link:default",
- "crypto-hw:default",
- "notification:default",
- "process:default",
- "opener:allow-default-urls"
- ],
- "platforms": [
- "iOS",
- "android"
- ]
-}
+ "$schema": "../gen/schemas/mobile-schema.json",
+ "identifier": "mobile-capability",
+ "description": "Capability for the main window on mobile",
+ "windows": ["main"],
+ "permissions": [
+ "core:default",
+ "opener:default",
+ "store:default",
+ "biometric:default",
+ "barcode-scanner:default",
+ "barcode-scanner:allow-open-app-settings",
+ "deep-link:default",
+ "crypto-hw:default",
+ "notification:default",
+ "process:default",
+ "opener:allow-default-urls"
+ ],
+ "platforms": ["iOS", "android"]
+}

infrastructure/eid-wallet/src-tauri/gen/android/app/arm64/release/output-metadata.json

@@ -1,37 +1,33 @@
 {
- "version": 3,
- "artifactType": {
- "type": "APK",
- "kind": "Directory"
- },
- "applicationId": "foundation.metastate.eid_wallet",
- "variantName": "arm64Release",
- "elements": [
- {
- "type": "SINGLE",
- "filters": [],
- "attributes": [],
- "versionCode": 12,
- "versionName": "0.5.0",
- "outputFile": "app-arm64-release.apk"
- }
- ],
- "elementType": "File",
- "baselineProfiles": [
- {
- "minApi": 28,
- "maxApi": 30,
- "baselineProfiles": [
- "baselineProfiles/1/app-arm64-release.dm"
- ]
+ "version": 3,
+ "artifactType": {
+ "type": "APK",
+ "kind": "Directory"
  },
- {
- "minApi": 31,
- "maxApi": 2147483647,
- "baselineProfiles": [
- "baselineProfiles/0/app-arm64-release.dm"
- ]
- }
- ],
- "minSdkVersionForDexing": 24
-}
+ "applicationId": "foundation.metastate.eid_wallet",
+ "variantName": "arm64Release",
+ "elements": [
+ {
+ "type": "SINGLE",
+ "filters": [],
+ "attributes": [],
+ "versionCode": 12,
+ "versionName": "0.5.0",
+ "outputFile": "app-arm64-release.apk"
+ }
+ ],
+ "elementType": "File",
+ "baselineProfiles": [
+ {
+ "minApi": 28,
+ "maxApi": 30,
+ "baselineProfiles": ["baselineProfiles/1/app-arm64-release.dm"]
+ },
+ {
+ "minApi": 31,
+ "maxApi": 2147483647,
+ "baselineProfiles": ["baselineProfiles/0/app-arm64-release.dm"]
+ }
+ ],
+ "minSdkVersionForDexing": 24
+}

infrastructure/eid-wallet/src-tauri/gen/android/buildSrc/src/main/java/foundation/metastate/eid_wallet/kotlin/BuildTask.kt

@@ -21,7 +21,23 @@ open class BuildTask : DefaultTask() {
  runTauriCli(executable)
  } catch (e: Exception) {
  if (Os.isFamily(Os.FAMILY_WINDOWS)) {
- runTauriCli("$executable.cmd")
+ // Try different Windows-specific extensions
+ val fallbacks = listOf(
+ "$executable.exe",
+ "$executable.cmd",
+ "$executable.bat",
+ )
+
+ var lastException: Exception = e
+ for (fallback in fallbacks) {
+ try {
+ runTauriCli(fallback)
+ return
+ } catch (fallbackException: Exception) {
+ lastException = fallbackException
+ }
+ }
+ throw lastException
  } else {
  throw e;
  }

infrastructure/eid-wallet/src/lib/fragments/IdentityCard/IdentityCard.svelte

@@ -43,7 +43,9 @@ $effect(() => {
  usedStorage > 0 ? `${(usedStorage / totalStorage) * 100}%` : "0%";
 });
 
-const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant === "ePassport" ? "bg-primary" : "bg-gray"} rounded-3xl w-full min-h-[100px] text-white overflow-hidden`;
+const baseClasses = $derived(
+ `relative ${variant === "eName" ? "bg-black-900" : variant === "ePassport" ? "bg-primary" : "bg-gray"} rounded-3xl w-full min-h-[100px] text-white overflow-hidden`,
+);
 </script>
 
 <div {...restProps} class={cn(baseClasses, restProps.class)}>
@@ -85,7 +87,13 @@ const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant =
  class="bg-white text-black flex items-center leading-0 justify-center rounded-full h-7 px-5 text-xs font-medium"
  >
  {#if userData}
- {userData.isFake ? "DEMO ID" : "VERIFIED ID"}
+ {#if userData.assuranceLevel === "KYC_VERIFIED"}
+ VERIFIED ID
+ {:else if userData.isFake}
+ DEMO ID
+ {:else}
+ UNVERIFIED
+ {/if}
  {/if}
  </p>
  {#if viewBtn}
@@ -97,7 +105,7 @@ const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant =
  />
  {/if}
  {:else if variant === "eVault"}
- <h3 class="text-black-300 text-3xl font-semibold mb-1 z-[1]">
+ <h3 class="text-black-300 text-3xl font-semibold mb-1 z-1">
  {state.progressWidth} Used
  </h3>
  {/if}
@@ -111,7 +119,7 @@ const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant =
  {:else if variant === "ePassport"}
  <div class="flex gap-2 flex-col">
  {#if userData}
- {#each Object.entries(userData).filter(([f, v]) => f !== "isFake") as [fieldName, value]}
+ {#each Object.entries(userData).filter(([f, v]) => f !== "isFake" && f !== "assuranceLevel") as [fieldName, value]}
  <div class="flex justify-between">
  <p class="text-gray capitalize">{fieldName}</p>
  <p class=" font-medium text-white">{value}</p>
@@ -122,8 +130,8 @@ const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant =
  {:else if variant === "eVault"}
  <div>
  <div class="flex justify-between mb-1">
- <p class="z-[1]">{usedStorage}GB Used</p>
- <p class="z-[1]">{totalStorage}GB total storage</p>
+ <p class="z-1">{usedStorage}GB Used</p>
+ <p class="z-1">{totalStorage}GB total storage</p>
  </div>
  <div
  class="relative w-full h-3 rounded-full overflow-hidden bg-primary-400"

infrastructure/eid-wallet/src/lib/global/controllers/evault.ts

@@ -57,6 +57,7 @@ export class VaultController {
  #walletSdkAdapter: import("wallet-sdk").CryptoAdapter | null = null;
  #profileCreationStatus: "idle" | "loading" | "success" | "failed" = "idle";
  #notificationService: NotificationService;
+ #demoMode = false;
 
  constructor(
  store: Store,
@@ -71,6 +72,23 @@ export class VaultController {
  this.#notificationService = NotificationService.getInstance();
  }
 
+ /**
+ * Enable/disable demo mode
+ * When enabled, skips network operations (sync, notifications, profile creation)
+ */
+ set demoMode(value: boolean) {
+ this.#demoMode = value;
+ if (value) {
+ console.log(
+ "🎭 VaultController: Demo mode enabled - skipping network operations",
+ );
+ }
+ }
+
+ get demoMode() {
+ return this.#demoMode;
+ }
+
  /**
  * Get the current profile creation status
  */
@@ -397,6 +415,16 @@ export class VaultController {
  else if (vault?.ename) {
  this.#store.set("vault", vault);
 
+ // Skip network operations in demo mode
+ if (this.#demoMode) {
+ console.log(
+ "🎭 Demo mode: Skipping network operations for vault",
+ vault.ename,
+ );
+ this.profileCreationStatus = "success";
+ return;
+ }
+
  // Register device for notifications
  this.registerDeviceForNotifications(vault.ename);
 
@@ -468,6 +496,153 @@ export class VaultController {
  return this.#endpoint;
  }
 
+ /**
+ * Create a binding document in the eVault
+ * TODO: Implement when backend endpoint is ready
+ *
+ * @param type - Type of binding document (PHYSICAL_ID, PASSPHRASE, PHOTOGRAPH, FRIEND)
+ * @param data - Binding document data
+ * @param signature - Signature or JWT proving authenticity
+ */
+ async createBindingDocument(
+ type: string,
+ data: Record<string, unknown>,
+ signature: string,
+ ): Promise<void> {
+ console.log("TODO: Create binding document", {
+ type,
+ data,
+ signature: `${signature.substring(0, 50)}...`,
+ });
+
+ // Emit audit event
+ this.emitAuditEvent("BINDING_DOCUMENT_CREATED", {
+ type,
+ timestamp: new Date().toISOString(),
+ });
+
+ // TODO: Call GraphQL mutation when backend is ready
+ // const CREATE_BINDING_DOC = `
+ // mutation CreateBindingDocument($input: BindingDocumentInput!) {
+ // createBindingDocument(input: $input) {
+ // id
+ // type
+ // status
+ // }
+ // }
+ // `;
+ }
+
+ /**
+ * Request ePassport certificate from Remote CA
+ * TODO: Implement when CA endpoint is ready
+ *
+ * @param ename - User's eName
+ * @param publicKey - User's public key
+ */
+ async requestEPassport(ename: string, publicKey: string): Promise<string> {
+ console.log("TODO: Request ePassport from CA", {
+ ename,
+ publicKey: `${publicKey.substring(0, 50)}...`,
+ });
+
+ // Emit audit event
+ this.emitAuditEvent("EPASSPORT_REQUESTED", {
+ ename,
+ timestamp: new Date().toISOString(),
+ });
+
+ // TODO: Call CA endpoint when ready
+ // const response = await axios.post(
+ // new URL("/ca/issue-epassport", PUBLIC_REGISTRY_URL).toString(),
+ // { ename, publicKey }
+ // );
+ // return response.data.certificate;
+
+ return "TODO_EPASSPORT_CERTIFICATE";
+ }
+
+ /**
+ * Emit an audit event
+ * These events are logged for compliance and debugging
+ *
+ * @param eventType - Type of audit event
+ * @param data - Event data
+ */
+ emitAuditEvent(eventType: string, data: Record<string, unknown>): void {
+ const auditEvent = {
+ type: eventType,
+ ...data,
+ timestamp: data.timestamp ?? new Date().toISOString(),
+ };
+
+ console.log("AUDIT:", auditEvent);
+
+ // TODO: Send to backend audit log when endpoint is ready
+ // Store locally for now
+ let existingEvents: unknown[] = [];
+ try {
+ existingEvents = JSON.parse(
+ localStorage.getItem("auditEvents") || "[]",
+ );
+ } catch (parseError) {
+ console.error(
+ "Failed to parse existing audit events, starting fresh",
+ parseError,
+ );
+ existingEvents = [];
+ }
+
+ existingEvents.push(auditEvent);
+
+ // Cap the array to prevent unbounded growth (keep last 1000 entries)
+ const MAX_AUDIT_EVENTS = 1000;
+ const trimmedEvents =
+ existingEvents.length > MAX_AUDIT_EVENTS
+ ? existingEvents.slice(-MAX_AUDIT_EVENTS)
+ : existingEvents;
+
+ try {
+ localStorage.setItem("auditEvents", JSON.stringify(trimmedEvents));
+ } catch (error) {
+ // Handle QuotaExceededError by aggressively trimming
+ if (
+ error instanceof DOMException &&
+ error.name === "QuotaExceededError"
+ ) {
+ console.warn(
+ "localStorage quota exceeded, trimming audit events",
+ );
+ const aggressivelyTrimmed = existingEvents.slice(-500);
+ try {
+ localStorage.setItem(
+ "auditEvents",
+ JSON.stringify(aggressivelyTrimmed),
+ );
+ } catch (retryError) {
+ console.error(
+ "Failed to save audit events even after trimming",
+ retryError,
+ );
+ // Last resort: keep only the most recent 100 events
+ try {
+ localStorage.setItem(
+ "auditEvents",
+ JSON.stringify(existingEvents.slice(-100)),
+ );
+ } catch (finalError) {
+ console.error(
+ "Critical: Unable to save audit events",
+ finalError,
+ );
+ }
+ }
+ } else {
+ console.error("Failed to save audit event", error);
+ }
+ }
+ }
+
  async clear() {
  await this.#store.delete("vault");
  }

infrastructure/eid-wallet/src-tauri/capabilities/mobile.json

@@ -1,25 +1,20 @@
 {
- "$schema": "../gen/schemas/mobile-schema.json",
- "identifier": "mobile-capability",
- "description": "Capability for the main window on mobile",
- "windows": [
- "main"
- ],
- "permissions": [
- "core:default",
- "opener:default",
- "store:default",
- "biometric:default",
- "barcode-scanner:default",
- "barcode-scanner:allow-open-app-settings",
- "deep-link:default",
- "crypto-hw:default",
- "notification:default",
- "process:default",
- "opener:allow-default-urls"
- ],
- "platforms": [
- "iOS",
- "android"
- ]
-}
+ "$schema": "../gen/schemas/mobile-schema.json",
+ "identifier": "mobile-capability",
+ "description": "Capability for the main window on mobile",
+ "windows": ["main"],
+ "permissions": [
+ "core:default",
+ "opener:default",
+ "store:default",
+ "biometric:default",
+ "barcode-scanner:default",
+ "barcode-scanner:allow-open-app-settings",
+ "deep-link:default",
+ "crypto-hw:default",
+ "notification:default",
+ "process:default",
+ "opener:allow-default-urls"
+ ],
+ "platforms": ["iOS", "android"]
+}

infrastructure/eid-wallet/src-tauri/gen/android/app/arm64/release/output-metadata.json

@@ -1,37 +1,33 @@
 {
- "version": 3,
- "artifactType": {
- "type": "APK",
- "kind": "Directory"
- },
- "applicationId": "foundation.metastate.eid_wallet",
- "variantName": "arm64Release",
- "elements": [
- {
- "type": "SINGLE",
- "filters": [],
- "attributes": [],
- "versionCode": 12,
- "versionName": "0.5.0",
- "outputFile": "app-arm64-release.apk"
- }
- ],
- "elementType": "File",
- "baselineProfiles": [
- {
- "minApi": 28,
- "maxApi": 30,
- "baselineProfiles": [
- "baselineProfiles/1/app-arm64-release.dm"
- ]
+ "version": 3,
+ "artifactType": {
+ "type": "APK",
+ "kind": "Directory"
  },
- {
- "minApi": 31,
- "maxApi": 2147483647,
- "baselineProfiles": [
- "baselineProfiles/0/app-arm64-release.dm"
- ]
- }
- ],
- "minSdkVersionForDexing": 24
-}
+ "applicationId": "foundation.metastate.eid_wallet",
+ "variantName": "arm64Release",
+ "elements": [
+ {
+ "type": "SINGLE",
+ "filters": [],
+ "attributes": [],
+ "versionCode": 12,
+ "versionName": "0.5.0",
+ "outputFile": "app-arm64-release.apk"
+ }
+ ],
+ "elementType": "File",
+ "baselineProfiles": [
+ {
+ "minApi": 28,
+ "maxApi": 30,
+ "baselineProfiles": ["baselineProfiles/1/app-arm64-release.dm"]
+ },
+ {
+ "minApi": 31,
+ "maxApi": 2147483647,
+ "baselineProfiles": ["baselineProfiles/0/app-arm64-release.dm"]
+ }
+ ],
+ "minSdkVersionForDexing": 24
+}

infrastructure/eid-wallet/src-tauri/gen/android/buildSrc/src/main/java/foundation/metastate/eid_wallet/kotlin/BuildTask.kt

@@ -21,7 +21,23 @@ open class BuildTask : DefaultTask() {
  runTauriCli(executable)
  } catch (e: Exception) {
  if (Os.isFamily(Os.FAMILY_WINDOWS)) {
- runTauriCli("$executable.cmd")
+ // Try different Windows-specific extensions
+ val fallbacks = listOf(
+ "$executable.exe",
+ "$executable.cmd",
+ "$executable.bat",
+ )
+
+ var lastException: Exception = e
+ for (fallback in fallbacks) {
+ try {
+ runTauriCli(fallback)
+ return
+ } catch (fallbackException: Exception) {
+ lastException = fallbackException
+ }
+ }
+ throw lastException
  } else {
  throw e;
  }

infrastructure/eid-wallet/src/lib/fragments/IdentityCard/IdentityCard.svelte

@@ -43,7 +43,9 @@ $effect(() => {
  usedStorage > 0 ? `${(usedStorage / totalStorage) * 100}%` : "0%";
 });
 
-const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant === "ePassport" ? "bg-primary" : "bg-gray"} rounded-3xl w-full min-h-[100px] text-white overflow-hidden`;
+const baseClasses = $derived(
+ `relative ${variant === "eName" ? "bg-black-900" : variant === "ePassport" ? "bg-primary" : "bg-gray"} rounded-3xl w-full min-h-[100px] text-white overflow-hidden`,
+);
 </script>
 
 <div {...restProps} class={cn(baseClasses, restProps.class)}>
@@ -85,7 +87,13 @@ const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant =
  class="bg-white text-black flex items-center leading-0 justify-center rounded-full h-7 px-5 text-xs font-medium"
  >
  {#if userData}
- {userData.isFake ? "DEMO ID" : "VERIFIED ID"}
+ {#if userData.assuranceLevel === "KYC_VERIFIED"}
+ VERIFIED ID
+ {:else if userData.isFake}
+ DEMO ID
+ {:else}
+ UNVERIFIED
+ {/if}
  {/if}
  </p>
  {#if viewBtn}
@@ -97,7 +105,7 @@ const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant =
  />
  {/if}
  {:else if variant === "eVault"}
- <h3 class="text-black-300 text-3xl font-semibold mb-1 z-[1]">
+ <h3 class="text-black-300 text-3xl font-semibold mb-1 z-1">
  {state.progressWidth} Used
  </h3>
  {/if}
@@ -111,7 +119,7 @@ const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant =
  {:else if variant === "ePassport"}
  <div class="flex gap-2 flex-col">
  {#if userData}
- {#each Object.entries(userData).filter(([f, v]) => f !== "isFake") as [fieldName, value]}
+ {#each Object.entries(userData).filter(([f, v]) => f !== "isFake" && f !== "assuranceLevel") as [fieldName, value]}
  <div class="flex justify-between">
  <p class="text-gray capitalize">{fieldName}</p>
  <p class=" font-medium text-white">{value}</p>
@@ -122,8 +130,8 @@ const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant =
  {:else if variant === "eVault"}
  <div>
  <div class="flex justify-between mb-1">
- <p class="z-[1]">{usedStorage}GB Used</p>
- <p class="z-[1]">{totalStorage}GB total storage</p>
+ <p class="z-1">{usedStorage}GB Used</p>
+ <p class="z-1">{totalStorage}GB total storage</p>
  </div>
  <div
  class="relative w-full h-3 rounded-full overflow-hidden bg-primary-400"

infrastructure/eid-wallet/src/lib/global/controllers/evault.ts

@@ -57,6 +57,7 @@ export class VaultController {
  #walletSdkAdapter: import("wallet-sdk").CryptoAdapter | null = null;
  #profileCreationStatus: "idle" | "loading" | "success" | "failed" = "idle";
  #notificationService: NotificationService;
+ #demoMode = false;
 
  constructor(
  store: Store,
@@ -71,6 +72,23 @@ export class VaultController {
  this.#notificationService = NotificationService.getInstance();
  }
 
+ /**
+ * Enable/disable demo mode
+ * When enabled, skips network operations (sync, notifications, profile creation)
+ */
+ set demoMode(value: boolean) {
+ this.#demoMode = value;
+ if (value) {
+ console.log(
+ "🎭 VaultController: Demo mode enabled - skipping network operations",
+ );
+ }
+ }
+
+ get demoMode() {
+ return this.#demoMode;
+ }
+
  /**
  * Get the current profile creation status
  */
@@ -397,6 +415,16 @@ export class VaultController {
  else if (vault?.ename) {
  this.#store.set("vault", vault);
 
+ // Skip network operations in demo mode
+ if (this.#demoMode) {
+ console.log(
+ "🎭 Demo mode: Skipping network operations for vault",
+ vault.ename,
+ );
+ this.profileCreationStatus = "success";
+ return;
+ }
+
  // Register device for notifications
  this.registerDeviceForNotifications(vault.ename);
 
@@ -468,6 +496,153 @@ export class VaultController {
  return this.#endpoint;
  }
 
+ /**
+ * Create a binding document in the eVault
+ * TODO: Implement when backend endpoint is ready
+ *
+ * @param type - Type of binding document (PHYSICAL_ID, PASSPHRASE, PHOTOGRAPH, FRIEND)
+ * @param data - Binding document data
+ * @param signature - Signature or JWT proving authenticity
+ */
+ async createBindingDocument(
+ type: string,
+ data: Record<string, unknown>,
+ signature: string,
+ ): Promise<void> {
+ console.log("TODO: Create binding document", {
+ type,
+ data,
+ signature: `${signature.substring(0, 50)}...`,
+ });
+
+ // Emit audit event
+ this.emitAuditEvent("BINDING_DOCUMENT_CREATED", {
+ type,
+ timestamp: new Date().toISOString(),
+ });
+
+ // TODO: Call GraphQL mutation when backend is ready
+ // const CREATE_BINDING_DOC = `
+ // mutation CreateBindingDocument($input: BindingDocumentInput!) {
+ // createBindingDocument(input: $input) {
+ // id
+ // type
+ // status
+ // }
+ // }
+ // `;
+ }
+
+ /**
+ * Request ePassport certificate from Remote CA
+ * TODO: Implement when CA endpoint is ready
+ *
+ * @param ename - User's eName
+ * @param publicKey - User's public key
+ */
+ async requestEPassport(ename: string, publicKey: string): Promise<string> {
+ console.log("TODO: Request ePassport from CA", {
+ ename,
+ publicKey: `${publicKey.substring(0, 50)}...`,
+ });
+
+ // Emit audit event
+ this.emitAuditEvent("EPASSPORT_REQUESTED", {
+ ename,
+ timestamp: new Date().toISOString(),
+ });
+
+ // TODO: Call CA endpoint when ready
+ // const response = await axios.post(
+ // new URL("/ca/issue-epassport", PUBLIC_REGISTRY_URL).toString(),
+ // { ename, publicKey }
+ // );
+ // return response.data.certificate;
+
+ return "TODO_EPASSPORT_CERTIFICATE";
+ }
+
+ /**
+ * Emit an audit event
+ * These events are logged for compliance and debugging
+ *
+ * @param eventType - Type of audit event
+ * @param data - Event data
+ */
+ emitAuditEvent(eventType: string, data: Record<string, unknown>): void {
+ const auditEvent = {
+ type: eventType,
+ ...data,
+ timestamp: data.timestamp ?? new Date().toISOString(),
+ };
+
+ console.log("AUDIT:", auditEvent);
+
+ // TODO: Send to backend audit log when endpoint is ready
+ // Store locally for now
+ let existingEvents: unknown[] = [];
+ try {
+ existingEvents = JSON.parse(
+ localStorage.getItem("auditEvents") || "[]",
+ );
+ } catch (parseError) {
+ console.error(
+ "Failed to parse existing audit events, starting fresh",
+ parseError,
+ );
+ existingEvents = [];
+ }
+
+ existingEvents.push(auditEvent);
+
+ // Cap the array to prevent unbounded growth (keep last 1000 entries)
+ const MAX_AUDIT_EVENTS = 1000;
+ const trimmedEvents =
+ existingEvents.length > MAX_AUDIT_EVENTS
+ ? existingEvents.slice(-MAX_AUDIT_EVENTS)
+ : existingEvents;
+
+ try {
+ localStorage.setItem("auditEvents", JSON.stringify(trimmedEvents));
+ } catch (error) {
+ // Handle QuotaExceededError by aggressively trimming
+ if (
+ error instanceof DOMException &&
+ error.name === "QuotaExceededError"
+ ) {
+ console.warn(
+ "localStorage quota exceeded, trimming audit events",
+ );
+ const aggressivelyTrimmed = existingEvents.slice(-500);
+ try {
+ localStorage.setItem(
+ "auditEvents",
+ JSON.stringify(aggressivelyTrimmed),
+ );
+ } catch (retryError) {
+ console.error(
+ "Failed to save audit events even after trimming",
+ retryError,
+ );
+ // Last resort: keep only the most recent 100 events
+ try {
+ localStorage.setItem(
+ "auditEvents",
+ JSON.stringify(existingEvents.slice(-100)),
+ );
+ } catch (finalError) {
+ console.error(
+ "Critical: Unable to save audit events",
+ finalError,
+ );
+ }
+ }
+ } else {
+ console.error("Failed to save audit event", error);
+ }
+ }
+ }
+
  async clear() {
  await this.#store.delete("vault");
  }

infrastructure/eid-wallet/src-tauri/capabilities/mobile.json

@@ -1,25 +1,20 @@
 {
- "$schema": "../gen/schemas/mobile-schema.json",
- "identifier": "mobile-capability",
- "description": "Capability for the main window on mobile",
- "windows": [
- "main"
- ],
- "permissions": [
- "core:default",
- "opener:default",
- "store:default",
- "biometric:default",
- "barcode-scanner:default",
- "barcode-scanner:allow-open-app-settings",
- "deep-link:default",
- "crypto-hw:default",
- "notification:default",
- "process:default",
- "opener:allow-default-urls"
- ],
- "platforms": [
- "iOS",
- "android"
- ]
-}
+ "$schema": "../gen/schemas/mobile-schema.json",
+ "identifier": "mobile-capability",
+ "description": "Capability for the main window on mobile",
+ "windows": ["main"],
+ "permissions": [
+ "core:default",
+ "opener:default",
+ "store:default",
+ "biometric:default",
+ "barcode-scanner:default",
+ "barcode-scanner:allow-open-app-settings",
+ "deep-link:default",
+ "crypto-hw:default",
+ "notification:default",
+ "process:default",
+ "opener:allow-default-urls"
+ ],
+ "platforms": ["iOS", "android"]
+}

infrastructure/eid-wallet/src-tauri/gen/android/app/arm64/release/output-metadata.json

@@ -1,37 +1,33 @@
 {
- "version": 3,
- "artifactType": {
- "type": "APK",
- "kind": "Directory"
- },
- "applicationId": "foundation.metastate.eid_wallet",
- "variantName": "arm64Release",
- "elements": [
- {
- "type": "SINGLE",
- "filters": [],
- "attributes": [],
- "versionCode": 12,
- "versionName": "0.5.0",
- "outputFile": "app-arm64-release.apk"
- }
- ],
- "elementType": "File",
- "baselineProfiles": [
- {
- "minApi": 28,
- "maxApi": 30,
- "baselineProfiles": [
- "baselineProfiles/1/app-arm64-release.dm"
- ]
+ "version": 3,
+ "artifactType": {
+ "type": "APK",
+ "kind": "Directory"
  },
- {
- "minApi": 31,
- "maxApi": 2147483647,
- "baselineProfiles": [
- "baselineProfiles/0/app-arm64-release.dm"
- ]
- }
- ],
- "minSdkVersionForDexing": 24
-}
+ "applicationId": "foundation.metastate.eid_wallet",
+ "variantName": "arm64Release",
+ "elements": [
+ {
+ "type": "SINGLE",
+ "filters": [],
+ "attributes": [],
+ "versionCode": 12,
+ "versionName": "0.5.0",
+ "outputFile": "app-arm64-release.apk"
+ }
+ ],
+ "elementType": "File",
+ "baselineProfiles": [
+ {
+ "minApi": 28,
+ "maxApi": 30,
+ "baselineProfiles": ["baselineProfiles/1/app-arm64-release.dm"]
+ },
+ {
+ "minApi": 31,
+ "maxApi": 2147483647,
+ "baselineProfiles": ["baselineProfiles/0/app-arm64-release.dm"]
+ }
+ ],
+ "minSdkVersionForDexing": 24
+}

infrastructure/eid-wallet/src-tauri/gen/android/buildSrc/src/main/java/foundation/metastate/eid_wallet/kotlin/BuildTask.kt

@@ -21,7 +21,23 @@ open class BuildTask : DefaultTask() {
  runTauriCli(executable)
  } catch (e: Exception) {
  if (Os.isFamily(Os.FAMILY_WINDOWS)) {
- runTauriCli("$executable.cmd")
+ // Try different Windows-specific extensions
+ val fallbacks = listOf(
+ "$executable.exe",
+ "$executable.cmd",
+ "$executable.bat",
+ )
+
+ var lastException: Exception = e
+ for (fallback in fallbacks) {
+ try {
+ runTauriCli(fallback)
+ return
+ } catch (fallbackException: Exception) {
+ lastException = fallbackException
+ }
+ }
+ throw lastException
  } else {
  throw e;
  }

infrastructure/eid-wallet/src/lib/fragments/IdentityCard/IdentityCard.svelte

@@ -43,7 +43,9 @@ $effect(() => {
  usedStorage > 0 ? `${(usedStorage / totalStorage) * 100}%` : "0%";
 });
 
-const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant === "ePassport" ? "bg-primary" : "bg-gray"} rounded-3xl w-full min-h-[100px] text-white overflow-hidden`;
+const baseClasses = $derived(
+ `relative ${variant === "eName" ? "bg-black-900" : variant === "ePassport" ? "bg-primary" : "bg-gray"} rounded-3xl w-full min-h-[100px] text-white overflow-hidden`,
+);
 </script>
 
 <div {...restProps} class={cn(baseClasses, restProps.class)}>
@@ -85,7 +87,13 @@ const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant =
  class="bg-white text-black flex items-center leading-0 justify-center rounded-full h-7 px-5 text-xs font-medium"
  >
  {#if userData}
- {userData.isFake ? "DEMO ID" : "VERIFIED ID"}
+ {#if userData.assuranceLevel === "KYC_VERIFIED"}
+ VERIFIED ID
+ {:else if userData.isFake}
+ DEMO ID
+ {:else}
+ UNVERIFIED
+ {/if}
  {/if}
  </p>
  {#if viewBtn}
@@ -97,7 +105,7 @@ const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant =
  />
  {/if}
  {:else if variant === "eVault"}
- <h3 class="text-black-300 text-3xl font-semibold mb-1 z-[1]">
+ <h3 class="text-black-300 text-3xl font-semibold mb-1 z-1">
  {state.progressWidth} Used
  </h3>
  {/if}
@@ -111,7 +119,7 @@ const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant =
  {:else if variant === "ePassport"}
  <div class="flex gap-2 flex-col">
  {#if userData}
- {#each Object.entries(userData).filter(([f, v]) => f !== "isFake") as [fieldName, value]}
+ {#each Object.entries(userData).filter(([f, v]) => f !== "isFake" && f !== "assuranceLevel") as [fieldName, value]}
  <div class="flex justify-between">
  <p class="text-gray capitalize">{fieldName}</p>
  <p class=" font-medium text-white">{value}</p>
@@ -122,8 +130,8 @@ const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant =
  {:else if variant === "eVault"}
  <div>
  <div class="flex justify-between mb-1">
- <p class="z-[1]">{usedStorage}GB Used</p>
- <p class="z-[1]">{totalStorage}GB total storage</p>
+ <p class="z-1">{usedStorage}GB Used</p>
+ <p class="z-1">{totalStorage}GB total storage</p>
  </div>
  <div
  class="relative w-full h-3 rounded-full overflow-hidden bg-primary-400"

infrastructure/eid-wallet/src/lib/global/controllers/evault.ts

@@ -57,6 +57,7 @@ export class VaultController {
  #walletSdkAdapter: import("wallet-sdk").CryptoAdapter | null = null;
  #profileCreationStatus: "idle" | "loading" | "success" | "failed" = "idle";
  #notificationService: NotificationService;
+ #demoMode = false;
 
  constructor(
  store: Store,
@@ -71,6 +72,23 @@ export class VaultController {
  this.#notificationService = NotificationService.getInstance();
  }
 
+ /**
+ * Enable/disable demo mode
+ * When enabled, skips network operations (sync, notifications, profile creation)
+ */
+ set demoMode(value: boolean) {
+ this.#demoMode = value;
+ if (value) {
+ console.log(
+ "🎭 VaultController: Demo mode enabled - skipping network operations",
+ );
+ }
+ }
+
+ get demoMode() {
+ return this.#demoMode;
+ }
+
  /**
  * Get the current profile creation status
  */
@@ -397,6 +415,16 @@ export class VaultController {
  else if (vault?.ename) {
  this.#store.set("vault", vault);
 
+ // Skip network operations in demo mode
+ if (this.#demoMode) {
+ console.log(
+ "🎭 Demo mode: Skipping network operations for vault",
+ vault.ename,
+ );
+ this.profileCreationStatus = "success";
+ return;
+ }
+
  // Register device for notifications
  this.registerDeviceForNotifications(vault.ename);
 
@@ -468,6 +496,153 @@ export class VaultController {
  return this.#endpoint;
  }
 
+ /**
+ * Create a binding document in the eVault
+ * TODO: Implement when backend endpoint is ready
+ *
+ * @param type - Type of binding document (PHYSICAL_ID, PASSPHRASE, PHOTOGRAPH, FRIEND)
+ * @param data - Binding document data
+ * @param signature - Signature or JWT proving authenticity
+ */
+ async createBindingDocument(
+ type: string,
+ data: Record<string, unknown>,
+ signature: string,
+ ): Promise<void> {
+ console.log("TODO: Create binding document", {
+ type,
+ data,
+ signature: `${signature.substring(0, 50)}...`,
+ });
+
+ // Emit audit event
+ this.emitAuditEvent("BINDING_DOCUMENT_CREATED", {
+ type,
+ timestamp: new Date().toISOString(),
+ });
+
+ // TODO: Call GraphQL mutation when backend is ready
+ // const CREATE_BINDING_DOC = `
+ // mutation CreateBindingDocument($input: BindingDocumentInput!) {
+ // createBindingDocument(input: $input) {
+ // id
+ // type
+ // status
+ // }
+ // }
+ // `;
+ }
+
+ /**
+ * Request ePassport certificate from Remote CA
+ * TODO: Implement when CA endpoint is ready
+ *
+ * @param ename - User's eName
+ * @param publicKey - User's public key
+ */
+ async requestEPassport(ename: string, publicKey: string): Promise<string> {
+ console.log("TODO: Request ePassport from CA", {
+ ename,
+ publicKey: `${publicKey.substring(0, 50)}...`,
+ });
+
+ // Emit audit event
+ this.emitAuditEvent("EPASSPORT_REQUESTED", {
+ ename,
+ timestamp: new Date().toISOString(),
+ });
+
+ // TODO: Call CA endpoint when ready
+ // const response = await axios.post(
+ // new URL("/ca/issue-epassport", PUBLIC_REGISTRY_URL).toString(),
+ // { ename, publicKey }
+ // );
+ // return response.data.certificate;
+
+ return "TODO_EPASSPORT_CERTIFICATE";
+ }
+
+ /**
+ * Emit an audit event
+ * These events are logged for compliance and debugging
+ *
+ * @param eventType - Type of audit event
+ * @param data - Event data
+ */
+ emitAuditEvent(eventType: string, data: Record<string, unknown>): void {
+ const auditEvent = {
+ type: eventType,
+ ...data,
+ timestamp: data.timestamp ?? new Date().toISOString(),
+ };
+
+ console.log("AUDIT:", auditEvent);
+
+ // TODO: Send to backend audit log when endpoint is ready
+ // Store locally for now
+ let existingEvents: unknown[] = [];
+ try {
+ existingEvents = JSON.parse(
+ localStorage.getItem("auditEvents") || "[]",
+ );
+ } catch (parseError) {
+ console.error(
+ "Failed to parse existing audit events, starting fresh",
+ parseError,
+ );
+ existingEvents = [];
+ }
+
+ existingEvents.push(auditEvent);
+
+ // Cap the array to prevent unbounded growth (keep last 1000 entries)
+ const MAX_AUDIT_EVENTS = 1000;
+ const trimmedEvents =
+ existingEvents.length > MAX_AUDIT_EVENTS
+ ? existingEvents.slice(-MAX_AUDIT_EVENTS)
+ : existingEvents;
+
+ try {
+ localStorage.setItem("auditEvents", JSON.stringify(trimmedEvents));
+ } catch (error) {
+ // Handle QuotaExceededError by aggressively trimming
+ if (
+ error instanceof DOMException &&
+ error.name === "QuotaExceededError"
+ ) {
+ console.warn(
+ "localStorage quota exceeded, trimming audit events",
+ );
+ const aggressivelyTrimmed = existingEvents.slice(-500);
+ try {
+ localStorage.setItem(
+ "auditEvents",
+ JSON.stringify(aggressivelyTrimmed),
+ );
+ } catch (retryError) {
+ console.error(
+ "Failed to save audit events even after trimming",
+ retryError,
+ );
+ // Last resort: keep only the most recent 100 events
+ try {
+ localStorage.setItem(
+ "auditEvents",
+ JSON.stringify(existingEvents.slice(-100)),
+ );
+ } catch (finalError) {
+ console.error(
+ "Critical: Unable to save audit events",
+ finalError,
+ );
+ }
+ }
+ } else {
+ console.error("Failed to save audit event", error);
+ }
+ }
+ }
+
  async clear() {
  await this.#store.delete("vault");
  }

infrastructure/eid-wallet/src-tauri/capabilities/mobile.json

@@ -1,25 +1,20 @@
 {
- "$schema": "../gen/schemas/mobile-schema.json",
- "identifier": "mobile-capability",
- "description": "Capability for the main window on mobile",
- "windows": [
- "main"
- ],
- "permissions": [
- "core:default",
- "opener:default",
- "store:default",
- "biometric:default",
- "barcode-scanner:default",
- "barcode-scanner:allow-open-app-settings",
- "deep-link:default",
- "crypto-hw:default",
- "notification:default",
- "process:default",
- "opener:allow-default-urls"
- ],
- "platforms": [
- "iOS",
- "android"
- ]
-}
+ "$schema": "../gen/schemas/mobile-schema.json",
+ "identifier": "mobile-capability",
+ "description": "Capability for the main window on mobile",
+ "windows": ["main"],
+ "permissions": [
+ "core:default",
+ "opener:default",
+ "store:default",
+ "biometric:default",
+ "barcode-scanner:default",
+ "barcode-scanner:allow-open-app-settings",
+ "deep-link:default",
+ "crypto-hw:default",
+ "notification:default",
+ "process:default",
+ "opener:allow-default-urls"
+ ],
+ "platforms": ["iOS", "android"]
+}

infrastructure/eid-wallet/src-tauri/gen/android/app/arm64/release/output-metadata.json

@@ -1,37 +1,33 @@
 {
- "version": 3,
- "artifactType": {
- "type": "APK",
- "kind": "Directory"
- },
- "applicationId": "foundation.metastate.eid_wallet",
- "variantName": "arm64Release",
- "elements": [
- {
- "type": "SINGLE",
- "filters": [],
- "attributes": [],
- "versionCode": 12,
- "versionName": "0.5.0",
- "outputFile": "app-arm64-release.apk"
- }
- ],
- "elementType": "File",
- "baselineProfiles": [
- {
- "minApi": 28,
- "maxApi": 30,
- "baselineProfiles": [
- "baselineProfiles/1/app-arm64-release.dm"
- ]
+ "version": 3,
+ "artifactType": {
+ "type": "APK",
+ "kind": "Directory"
  },
- {
- "minApi": 31,
- "maxApi": 2147483647,
- "baselineProfiles": [
- "baselineProfiles/0/app-arm64-release.dm"
- ]
- }
- ],
- "minSdkVersionForDexing": 24
-}
+ "applicationId": "foundation.metastate.eid_wallet",
+ "variantName": "arm64Release",
+ "elements": [
+ {
+ "type": "SINGLE",
+ "filters": [],
+ "attributes": [],
+ "versionCode": 12,
+ "versionName": "0.5.0",
+ "outputFile": "app-arm64-release.apk"
+ }
+ ],
+ "elementType": "File",
+ "baselineProfiles": [
+ {
+ "minApi": 28,
+ "maxApi": 30,
+ "baselineProfiles": ["baselineProfiles/1/app-arm64-release.dm"]
+ },
+ {
+ "minApi": 31,
+ "maxApi": 2147483647,
+ "baselineProfiles": ["baselineProfiles/0/app-arm64-release.dm"]
+ }
+ ],
+ "minSdkVersionForDexing": 24
+}

infrastructure/eid-wallet/src-tauri/gen/android/buildSrc/src/main/java/foundation/metastate/eid_wallet/kotlin/BuildTask.kt

@@ -21,7 +21,23 @@ open class BuildTask : DefaultTask() {
  runTauriCli(executable)
  } catch (e: Exception) {
  if (Os.isFamily(Os.FAMILY_WINDOWS)) {
- runTauriCli("$executable.cmd")
+ // Try different Windows-specific extensions
+ val fallbacks = listOf(
+ "$executable.exe",
+ "$executable.cmd",
+ "$executable.bat",
+ )
+
+ var lastException: Exception = e
+ for (fallback in fallbacks) {
+ try {
+ runTauriCli(fallback)
+ return
+ } catch (fallbackException: Exception) {
+ lastException = fallbackException
+ }
+ }
+ throw lastException
  } else {
  throw e;
  }

infrastructure/eid-wallet/src/lib/fragments/IdentityCard/IdentityCard.svelte

@@ -43,7 +43,9 @@ $effect(() => {
  usedStorage > 0 ? `${(usedStorage / totalStorage) * 100}%` : "0%";
 });
 
-const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant === "ePassport" ? "bg-primary" : "bg-gray"} rounded-3xl w-full min-h-[100px] text-white overflow-hidden`;
+const baseClasses = $derived(
+ `relative ${variant === "eName" ? "bg-black-900" : variant === "ePassport" ? "bg-primary" : "bg-gray"} rounded-3xl w-full min-h-[100px] text-white overflow-hidden`,
+);
 </script>
 
 <div {...restProps} class={cn(baseClasses, restProps.class)}>
@@ -85,7 +87,13 @@ const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant =
  class="bg-white text-black flex items-center leading-0 justify-center rounded-full h-7 px-5 text-xs font-medium"
  >
  {#if userData}
- {userData.isFake ? "DEMO ID" : "VERIFIED ID"}
+ {#if userData.assuranceLevel === "KYC_VERIFIED"}
+ VERIFIED ID
+ {:else if userData.isFake}
+ DEMO ID
+ {:else}
+ UNVERIFIED
+ {/if}
  {/if}
  </p>
  {#if viewBtn}
@@ -97,7 +105,7 @@ const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant =
  />
  {/if}
  {:else if variant === "eVault"}
- <h3 class="text-black-300 text-3xl font-semibold mb-1 z-[1]">
+ <h3 class="text-black-300 text-3xl font-semibold mb-1 z-1">
  {state.progressWidth} Used
  </h3>
  {/if}
@@ -111,7 +119,7 @@ const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant =
  {:else if variant === "ePassport"}
  <div class="flex gap-2 flex-col">
  {#if userData}
- {#each Object.entries(userData).filter(([f, v]) => f !== "isFake") as [fieldName, value]}
+ {#each Object.entries(userData).filter(([f, v]) => f !== "isFake" && f !== "assuranceLevel") as [fieldName, value]}
  <div class="flex justify-between">
  <p class="text-gray capitalize">{fieldName}</p>
  <p class=" font-medium text-white">{value}</p>
@@ -122,8 +130,8 @@ const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant =
  {:else if variant === "eVault"}
  <div>
  <div class="flex justify-between mb-1">
- <p class="z-[1]">{usedStorage}GB Used</p>
- <p class="z-[1]">{totalStorage}GB total storage</p>
+ <p class="z-1">{usedStorage}GB Used</p>
+ <p class="z-1">{totalStorage}GB total storage</p>
  </div>
  <div
  class="relative w-full h-3 rounded-full overflow-hidden bg-primary-400"

infrastructure/eid-wallet/src/lib/global/controllers/evault.ts

@@ -57,6 +57,7 @@ export class VaultController {
  #walletSdkAdapter: import("wallet-sdk").CryptoAdapter | null = null;
  #profileCreationStatus: "idle" | "loading" | "success" | "failed" = "idle";
  #notificationService: NotificationService;
+ #demoMode = false;
 
  constructor(
  store: Store,
@@ -71,6 +72,23 @@ export class VaultController {
  this.#notificationService = NotificationService.getInstance();
  }
 
+ /**
+ * Enable/disable demo mode
+ * When enabled, skips network operations (sync, notifications, profile creation)
+ */
+ set demoMode(value: boolean) {
+ this.#demoMode = value;
+ if (value) {
+ console.log(
+ "🎭 VaultController: Demo mode enabled - skipping network operations",
+ );
+ }
+ }
+
+ get demoMode() {
+ return this.#demoMode;
+ }
+
  /**
  * Get the current profile creation status
  */
@@ -397,6 +415,16 @@ export class VaultController {
  else if (vault?.ename) {
  this.#store.set("vault", vault);
 
+ // Skip network operations in demo mode
+ if (this.#demoMode) {
+ console.log(
+ "🎭 Demo mode: Skipping network operations for vault",
+ vault.ename,
+ );
+ this.profileCreationStatus = "success";
+ return;
+ }
+
  // Register device for notifications
  this.registerDeviceForNotifications(vault.ename);
 
@@ -468,6 +496,153 @@ export class VaultController {
  return this.#endpoint;
  }
 
+ /**
+ * Create a binding document in the eVault
+ * TODO: Implement when backend endpoint is ready
+ *
+ * @param type - Type of binding document (PHYSICAL_ID, PASSPHRASE, PHOTOGRAPH, FRIEND)
+ * @param data - Binding document data
+ * @param signature - Signature or JWT proving authenticity
+ */
+ async createBindingDocument(
+ type: string,
+ data: Record<string, unknown>,
+ signature: string,
+ ): Promise<void> {
+ console.log("TODO: Create binding document", {
+ type,
+ data,
+ signature: `${signature.substring(0, 50)}...`,
+ });
+
+ // Emit audit event
+ this.emitAuditEvent("BINDING_DOCUMENT_CREATED", {
+ type,
+ timestamp: new Date().toISOString(),
+ });
+
+ // TODO: Call GraphQL mutation when backend is ready
+ // const CREATE_BINDING_DOC = `
+ // mutation CreateBindingDocument($input: BindingDocumentInput!) {
+ // createBindingDocument(input: $input) {
+ // id
+ // type
+ // status
+ // }
+ // }
+ // `;
+ }
+
+ /**
+ * Request ePassport certificate from Remote CA
+ * TODO: Implement when CA endpoint is ready
+ *
+ * @param ename - User's eName
+ * @param publicKey - User's public key
+ */
+ async requestEPassport(ename: string, publicKey: string): Promise<string> {
+ console.log("TODO: Request ePassport from CA", {
+ ename,
+ publicKey: `${publicKey.substring(0, 50)}...`,
+ });
+
+ // Emit audit event
+ this.emitAuditEvent("EPASSPORT_REQUESTED", {
+ ename,
+ timestamp: new Date().toISOString(),
+ });
+
+ // TODO: Call CA endpoint when ready
+ // const response = await axios.post(
+ // new URL("/ca/issue-epassport", PUBLIC_REGISTRY_URL).toString(),
+ // { ename, publicKey }
+ // );
+ // return response.data.certificate;
+
+ return "TODO_EPASSPORT_CERTIFICATE";
+ }
+
+ /**
+ * Emit an audit event
+ * These events are logged for compliance and debugging
+ *
+ * @param eventType - Type of audit event
+ * @param data - Event data
+ */
+ emitAuditEvent(eventType: string, data: Record<string, unknown>): void {
+ const auditEvent = {
+ type: eventType,
+ ...data,
+ timestamp: data.timestamp ?? new Date().toISOString(),
+ };
+
+ console.log("AUDIT:", auditEvent);
+
+ // TODO: Send to backend audit log when endpoint is ready
+ // Store locally for now
+ let existingEvents: unknown[] = [];
+ try {
+ existingEvents = JSON.parse(
+ localStorage.getItem("auditEvents") || "[]",
+ );
+ } catch (parseError) {
+ console.error(
+ "Failed to parse existing audit events, starting fresh",
+ parseError,
+ );
+ existingEvents = [];
+ }
+
+ existingEvents.push(auditEvent);
+
+ // Cap the array to prevent unbounded growth (keep last 1000 entries)
+ const MAX_AUDIT_EVENTS = 1000;
+ const trimmedEvents =
+ existingEvents.length > MAX_AUDIT_EVENTS
+ ? existingEvents.slice(-MAX_AUDIT_EVENTS)
+ : existingEvents;
+
+ try {
+ localStorage.setItem("auditEvents", JSON.stringify(trimmedEvents));
+ } catch (error) {
+ // Handle QuotaExceededError by aggressively trimming
+ if (
+ error instanceof DOMException &&
+ error.name === "QuotaExceededError"
+ ) {
+ console.warn(
+ "localStorage quota exceeded, trimming audit events",
+ );
+ const aggressivelyTrimmed = existingEvents.slice(-500);
+ try {
+ localStorage.setItem(
+ "auditEvents",
+ JSON.stringify(aggressivelyTrimmed),
+ );
+ } catch (retryError) {
+ console.error(
+ "Failed to save audit events even after trimming",
+ retryError,
+ );
+ // Last resort: keep only the most recent 100 events
+ try {
+ localStorage.setItem(
+ "auditEvents",
+ JSON.stringify(existingEvents.slice(-100)),
+ );
+ } catch (finalError) {
+ console.error(
+ "Critical: Unable to save audit events",
+ finalError,
+ );
+ }
+ }
+ } else {
+ console.error("Failed to save audit event", error);
+ }
+ }
+ }
+
  async clear() {
  await this.#store.delete("vault");
  }

infrastructure/eid-wallet/src-tauri/capabilities/mobile.json

@@ -1,25 +1,20 @@
 {
- "$schema": "../gen/schemas/mobile-schema.json",
- "identifier": "mobile-capability",
- "description": "Capability for the main window on mobile",
- "windows": [
- "main"
- ],
- "permissions": [
- "core:default",
- "opener:default",
- "store:default",
- "biometric:default",
- "barcode-scanner:default",
- "barcode-scanner:allow-open-app-settings",
- "deep-link:default",
- "crypto-hw:default",
- "notification:default",
- "process:default",
- "opener:allow-default-urls"
- ],
- "platforms": [
- "iOS",
- "android"
- ]
-}
+ "$schema": "../gen/schemas/mobile-schema.json",
+ "identifier": "mobile-capability",
+ "description": "Capability for the main window on mobile",
+ "windows": ["main"],
+ "permissions": [
+ "core:default",
+ "opener:default",
+ "store:default",
+ "biometric:default",
+ "barcode-scanner:default",
+ "barcode-scanner:allow-open-app-settings",
+ "deep-link:default",
+ "crypto-hw:default",
+ "notification:default",
+ "process:default",
+ "opener:allow-default-urls"
+ ],
+ "platforms": ["iOS", "android"]
+}

infrastructure/eid-wallet/src-tauri/gen/android/app/arm64/release/output-metadata.json

@@ -1,37 +1,33 @@
 {
- "version": 3,
- "artifactType": {
- "type": "APK",
- "kind": "Directory"
- },
- "applicationId": "foundation.metastate.eid_wallet",
- "variantName": "arm64Release",
- "elements": [
- {
- "type": "SINGLE",
- "filters": [],
- "attributes": [],
- "versionCode": 12,
- "versionName": "0.5.0",
- "outputFile": "app-arm64-release.apk"
- }
- ],
- "elementType": "File",
- "baselineProfiles": [
- {
- "minApi": 28,
- "maxApi": 30,
- "baselineProfiles": [
- "baselineProfiles/1/app-arm64-release.dm"
- ]
+ "version": 3,
+ "artifactType": {
+ "type": "APK",
+ "kind": "Directory"
  },
- {
- "minApi": 31,
- "maxApi": 2147483647,
- "baselineProfiles": [
- "baselineProfiles/0/app-arm64-release.dm"
- ]
- }
- ],
- "minSdkVersionForDexing": 24
-}
+ "applicationId": "foundation.metastate.eid_wallet",
+ "variantName": "arm64Release",
+ "elements": [
+ {
+ "type": "SINGLE",
+ "filters": [],
+ "attributes": [],
+ "versionCode": 12,
+ "versionName": "0.5.0",
+ "outputFile": "app-arm64-release.apk"
+ }
+ ],
+ "elementType": "File",
+ "baselineProfiles": [
+ {
+ "minApi": 28,
+ "maxApi": 30,
+ "baselineProfiles": ["baselineProfiles/1/app-arm64-release.dm"]
+ },
+ {
+ "minApi": 31,
+ "maxApi": 2147483647,
+ "baselineProfiles": ["baselineProfiles/0/app-arm64-release.dm"]
+ }
+ ],
+ "minSdkVersionForDexing": 24
+}

infrastructure/eid-wallet/src-tauri/gen/android/buildSrc/src/main/java/foundation/metastate/eid_wallet/kotlin/BuildTask.kt

@@ -21,7 +21,23 @@ open class BuildTask : DefaultTask() {
  runTauriCli(executable)
  } catch (e: Exception) {
  if (Os.isFamily(Os.FAMILY_WINDOWS)) {
- runTauriCli("$executable.cmd")
+ // Try different Windows-specific extensions
+ val fallbacks = listOf(
+ "$executable.exe",
+ "$executable.cmd",
+ "$executable.bat",
+ )
+
+ var lastException: Exception = e
+ for (fallback in fallbacks) {
+ try {
+ runTauriCli(fallback)
+ return
+ } catch (fallbackException: Exception) {
+ lastException = fallbackException
+ }
+ }
+ throw lastException
  } else {
  throw e;
  }

infrastructure/eid-wallet/src/lib/fragments/IdentityCard/IdentityCard.svelte

@@ -43,7 +43,9 @@ $effect(() => {
  usedStorage > 0 ? `${(usedStorage / totalStorage) * 100}%` : "0%";
 });
 
-const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant === "ePassport" ? "bg-primary" : "bg-gray"} rounded-3xl w-full min-h-[100px] text-white overflow-hidden`;
+const baseClasses = $derived(
+ `relative ${variant === "eName" ? "bg-black-900" : variant === "ePassport" ? "bg-primary" : "bg-gray"} rounded-3xl w-full min-h-[100px] text-white overflow-hidden`,
+);
 </script>
 
 <div {...restProps} class={cn(baseClasses, restProps.class)}>
@@ -85,7 +87,13 @@ const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant =
  class="bg-white text-black flex items-center leading-0 justify-center rounded-full h-7 px-5 text-xs font-medium"
  >
  {#if userData}
- {userData.isFake ? "DEMO ID" : "VERIFIED ID"}
+ {#if userData.assuranceLevel === "KYC_VERIFIED"}
+ VERIFIED ID
+ {:else if userData.isFake}
+ DEMO ID
+ {:else}
+ UNVERIFIED
+ {/if}
  {/if}
  </p>
  {#if viewBtn}
@@ -97,7 +105,7 @@ const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant =
  />
  {/if}
  {:else if variant === "eVault"}
- <h3 class="text-black-300 text-3xl font-semibold mb-1 z-[1]">
+ <h3 class="text-black-300 text-3xl font-semibold mb-1 z-1">
  {state.progressWidth} Used
  </h3>
  {/if}
@@ -111,7 +119,7 @@ const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant =
  {:else if variant === "ePassport"}
  <div class="flex gap-2 flex-col">
  {#if userData}
- {#each Object.entries(userData).filter(([f, v]) => f !== "isFake") as [fieldName, value]}
+ {#each Object.entries(userData).filter(([f, v]) => f !== "isFake" && f !== "assuranceLevel") as [fieldName, value]}
  <div class="flex justify-between">
  <p class="text-gray capitalize">{fieldName}</p>
  <p class=" font-medium text-white">{value}</p>
@@ -122,8 +130,8 @@ const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant =
  {:else if variant === "eVault"}
  <div>
  <div class="flex justify-between mb-1">
- <p class="z-[1]">{usedStorage}GB Used</p>
- <p class="z-[1]">{totalStorage}GB total storage</p>
+ <p class="z-1">{usedStorage}GB Used</p>
+ <p class="z-1">{totalStorage}GB total storage</p>
  </div>
  <div
  class="relative w-full h-3 rounded-full overflow-hidden bg-primary-400"

infrastructure/eid-wallet/src/lib/global/controllers/evault.ts

@@ -57,6 +57,7 @@ export class VaultController {
  #walletSdkAdapter: import("wallet-sdk").CryptoAdapter | null = null;
  #profileCreationStatus: "idle" | "loading" | "success" | "failed" = "idle";
  #notificationService: NotificationService;
+ #demoMode = false;
 
  constructor(
  store: Store,
@@ -71,6 +72,23 @@ export class VaultController {
  this.#notificationService = NotificationService.getInstance();
  }
 
+ /**
+ * Enable/disable demo mode
+ * When enabled, skips network operations (sync, notifications, profile creation)
+ */
+ set demoMode(value: boolean) {
+ this.#demoMode = value;
+ if (value) {
+ console.log(
+ "🎭 VaultController: Demo mode enabled - skipping network operations",
+ );
+ }
+ }
+
+ get demoMode() {
+ return this.#demoMode;
+ }
+
  /**
  * Get the current profile creation status
  */
@@ -397,6 +415,16 @@ export class VaultController {
  else if (vault?.ename) {
  this.#store.set("vault", vault);
 
+ // Skip network operations in demo mode
+ if (this.#demoMode) {
+ console.log(
+ "🎭 Demo mode: Skipping network operations for vault",
+ vault.ename,
+ );
+ this.profileCreationStatus = "success";
+ return;
+ }
+
  // Register device for notifications
  this.registerDeviceForNotifications(vault.ename);
 
@@ -468,6 +496,153 @@ export class VaultController {
  return this.#endpoint;
  }
 
+ /**
+ * Create a binding document in the eVault
+ * TODO: Implement when backend endpoint is ready
+ *
+ * @param type - Type of binding document (PHYSICAL_ID, PASSPHRASE, PHOTOGRAPH, FRIEND)
+ * @param data - Binding document data
+ * @param signature - Signature or JWT proving authenticity
+ */
+ async createBindingDocument(
+ type: string,
+ data: Record<string, unknown>,
+ signature: string,
+ ): Promise<void> {
+ console.log("TODO: Create binding document", {
+ type,
+ data,
+ signature: `${signature.substring(0, 50)}...`,
+ });
+
+ // Emit audit event
+ this.emitAuditEvent("BINDING_DOCUMENT_CREATED", {
+ type,
+ timestamp: new Date().toISOString(),
+ });
+
+ // TODO: Call GraphQL mutation when backend is ready
+ // const CREATE_BINDING_DOC = `
+ // mutation CreateBindingDocument($input: BindingDocumentInput!) {
+ // createBindingDocument(input: $input) {
+ // id
+ // type
+ // status
+ // }
+ // }
+ // `;
+ }
+
+ /**
+ * Request ePassport certificate from Remote CA
+ * TODO: Implement when CA endpoint is ready
+ *
+ * @param ename - User's eName
+ * @param publicKey - User's public key
+ */
+ async requestEPassport(ename: string, publicKey: string): Promise<string> {
+ console.log("TODO: Request ePassport from CA", {
+ ename,
+ publicKey: `${publicKey.substring(0, 50)}...`,
+ });
+
+ // Emit audit event
+ this.emitAuditEvent("EPASSPORT_REQUESTED", {
+ ename,
+ timestamp: new Date().toISOString(),
+ });
+
+ // TODO: Call CA endpoint when ready
+ // const response = await axios.post(
+ // new URL("/ca/issue-epassport", PUBLIC_REGISTRY_URL).toString(),
+ // { ename, publicKey }
+ // );
+ // return response.data.certificate;
+
+ return "TODO_EPASSPORT_CERTIFICATE";
+ }
+
+ /**
+ * Emit an audit event
+ * These events are logged for compliance and debugging
+ *
+ * @param eventType - Type of audit event
+ * @param data - Event data
+ */
+ emitAuditEvent(eventType: string, data: Record<string, unknown>): void {
+ const auditEvent = {
+ type: eventType,
+ ...data,
+ timestamp: data.timestamp ?? new Date().toISOString(),
+ };
+
+ console.log("AUDIT:", auditEvent);
+
+ // TODO: Send to backend audit log when endpoint is ready
+ // Store locally for now
+ let existingEvents: unknown[] = [];
+ try {
+ existingEvents = JSON.parse(
+ localStorage.getItem("auditEvents") || "[]",
+ );
+ } catch (parseError) {
+ console.error(
+ "Failed to parse existing audit events, starting fresh",
+ parseError,
+ );
+ existingEvents = [];
+ }
+
+ existingEvents.push(auditEvent);
+
+ // Cap the array to prevent unbounded growth (keep last 1000 entries)
+ const MAX_AUDIT_EVENTS = 1000;
+ const trimmedEvents =
+ existingEvents.length > MAX_AUDIT_EVENTS
+ ? existingEvents.slice(-MAX_AUDIT_EVENTS)
+ : existingEvents;
+
+ try {
+ localStorage.setItem("auditEvents", JSON.stringify(trimmedEvents));
+ } catch (error) {
+ // Handle QuotaExceededError by aggressively trimming
+ if (
+ error instanceof DOMException &&
+ error.name === "QuotaExceededError"
+ ) {
+ console.warn(
+ "localStorage quota exceeded, trimming audit events",
+ );
+ const aggressivelyTrimmed = existingEvents.slice(-500);
+ try {
+ localStorage.setItem(
+ "auditEvents",
+ JSON.stringify(aggressivelyTrimmed),
+ );
+ } catch (retryError) {
+ console.error(
+ "Failed to save audit events even after trimming",
+ retryError,
+ );
+ // Last resort: keep only the most recent 100 events
+ try {
+ localStorage.setItem(
+ "auditEvents",
+ JSON.stringify(existingEvents.slice(-100)),
+ );
+ } catch (finalError) {
+ console.error(
+ "Critical: Unable to save audit events",
+ finalError,
+ );
+ }
+ }
+ } else {
+ console.error("Failed to save audit event", error);
+ }
+ }
+ }
+
  async clear() {
  await this.#store.delete("vault");
  }

infrastructure/eid-wallet/src-tauri/capabilities/mobile.json

@@ -1,25 +1,20 @@
 {
- "$schema": "../gen/schemas/mobile-schema.json",
- "identifier": "mobile-capability",
- "description": "Capability for the main window on mobile",
- "windows": [
- "main"
- ],
- "permissions": [
- "core:default",
- "opener:default",
- "store:default",
- "biometric:default",
- "barcode-scanner:default",
- "barcode-scanner:allow-open-app-settings",
- "deep-link:default",
- "crypto-hw:default",
- "notification:default",
- "process:default",
- "opener:allow-default-urls"
- ],
- "platforms": [
- "iOS",
- "android"
- ]
-}
+ "$schema": "../gen/schemas/mobile-schema.json",
+ "identifier": "mobile-capability",
+ "description": "Capability for the main window on mobile",
+ "windows": ["main"],
+ "permissions": [
+ "core:default",
+ "opener:default",
+ "store:default",
+ "biometric:default",
+ "barcode-scanner:default",
+ "barcode-scanner:allow-open-app-settings",
+ "deep-link:default",
+ "crypto-hw:default",
+ "notification:default",
+ "process:default",
+ "opener:allow-default-urls"
+ ],
+ "platforms": ["iOS", "android"]
+}

infrastructure/eid-wallet/src-tauri/gen/android/app/arm64/release/output-metadata.json

@@ -1,37 +1,33 @@
 {
- "version": 3,
- "artifactType": {
- "type": "APK",
- "kind": "Directory"
- },
- "applicationId": "foundation.metastate.eid_wallet",
- "variantName": "arm64Release",
- "elements": [
- {
- "type": "SINGLE",
- "filters": [],
- "attributes": [],
- "versionCode": 12,
- "versionName": "0.5.0",
- "outputFile": "app-arm64-release.apk"
- }
- ],
- "elementType": "File",
- "baselineProfiles": [
- {
- "minApi": 28,
- "maxApi": 30,
- "baselineProfiles": [
- "baselineProfiles/1/app-arm64-release.dm"
- ]
+ "version": 3,
+ "artifactType": {
+ "type": "APK",
+ "kind": "Directory"
  },
- {
- "minApi": 31,
- "maxApi": 2147483647,
- "baselineProfiles": [
- "baselineProfiles/0/app-arm64-release.dm"
- ]
- }
- ],
- "minSdkVersionForDexing": 24
-}
+ "applicationId": "foundation.metastate.eid_wallet",
+ "variantName": "arm64Release",
+ "elements": [
+ {
+ "type": "SINGLE",
+ "filters": [],
+ "attributes": [],
+ "versionCode": 12,
+ "versionName": "0.5.0",
+ "outputFile": "app-arm64-release.apk"
+ }
+ ],
+ "elementType": "File",
+ "baselineProfiles": [
+ {
+ "minApi": 28,
+ "maxApi": 30,
+ "baselineProfiles": ["baselineProfiles/1/app-arm64-release.dm"]
+ },
+ {
+ "minApi": 31,
+ "maxApi": 2147483647,
+ "baselineProfiles": ["baselineProfiles/0/app-arm64-release.dm"]
+ }
+ ],
+ "minSdkVersionForDexing": 24
+}

infrastructure/eid-wallet/src-tauri/gen/android/buildSrc/src/main/java/foundation/metastate/eid_wallet/kotlin/BuildTask.kt

@@ -21,7 +21,23 @@ open class BuildTask : DefaultTask() {
  runTauriCli(executable)
  } catch (e: Exception) {
  if (Os.isFamily(Os.FAMILY_WINDOWS)) {
- runTauriCli("$executable.cmd")
+ // Try different Windows-specific extensions
+ val fallbacks = listOf(
+ "$executable.exe",
+ "$executable.cmd",
+ "$executable.bat",
+ )
+
+ var lastException: Exception = e
+ for (fallback in fallbacks) {
+ try {
+ runTauriCli(fallback)
+ return
+ } catch (fallbackException: Exception) {
+ lastException = fallbackException
+ }
+ }
+ throw lastException
  } else {
  throw e;
  }

infrastructure/eid-wallet/src/lib/fragments/IdentityCard/IdentityCard.svelte

@@ -43,7 +43,9 @@ $effect(() => {
  usedStorage > 0 ? `${(usedStorage / totalStorage) * 100}%` : "0%";
 });
 
-const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant === "ePassport" ? "bg-primary" : "bg-gray"} rounded-3xl w-full min-h-[100px] text-white overflow-hidden`;
+const baseClasses = $derived(
+ `relative ${variant === "eName" ? "bg-black-900" : variant === "ePassport" ? "bg-primary" : "bg-gray"} rounded-3xl w-full min-h-[100px] text-white overflow-hidden`,
+);
 </script>
 
 <div {...restProps} class={cn(baseClasses, restProps.class)}>
@@ -85,7 +87,13 @@ const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant =
  class="bg-white text-black flex items-center leading-0 justify-center rounded-full h-7 px-5 text-xs font-medium"
  >
  {#if userData}
- {userData.isFake ? "DEMO ID" : "VERIFIED ID"}
+ {#if userData.assuranceLevel === "KYC_VERIFIED"}
+ VERIFIED ID
+ {:else if userData.isFake}
+ DEMO ID
+ {:else}
+ UNVERIFIED
+ {/if}
  {/if}
  </p>
  {#if viewBtn}
@@ -97,7 +105,7 @@ const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant =
  />
  {/if}
  {:else if variant === "eVault"}
- <h3 class="text-black-300 text-3xl font-semibold mb-1 z-[1]">
+ <h3 class="text-black-300 text-3xl font-semibold mb-1 z-1">
  {state.progressWidth} Used
  </h3>
  {/if}
@@ -111,7 +119,7 @@ const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant =
  {:else if variant === "ePassport"}
  <div class="flex gap-2 flex-col">
  {#if userData}
- {#each Object.entries(userData).filter(([f, v]) => f !== "isFake") as [fieldName, value]}
+ {#each Object.entries(userData).filter(([f, v]) => f !== "isFake" && f !== "assuranceLevel") as [fieldName, value]}
  <div class="flex justify-between">
  <p class="text-gray capitalize">{fieldName}</p>
  <p class=" font-medium text-white">{value}</p>
@@ -122,8 +130,8 @@ const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant =
  {:else if variant === "eVault"}
  <div>
  <div class="flex justify-between mb-1">
- <p class="z-[1]">{usedStorage}GB Used</p>
- <p class="z-[1]">{totalStorage}GB total storage</p>
+ <p class="z-1">{usedStorage}GB Used</p>
+ <p class="z-1">{totalStorage}GB total storage</p>
  </div>
  <div
  class="relative w-full h-3 rounded-full overflow-hidden bg-primary-400"

infrastructure/eid-wallet/src/lib/global/controllers/evault.ts

@@ -57,6 +57,7 @@ export class VaultController {
  #walletSdkAdapter: import("wallet-sdk").CryptoAdapter | null = null;
  #profileCreationStatus: "idle" | "loading" | "success" | "failed" = "idle";
  #notificationService: NotificationService;
+ #demoMode = false;
 
  constructor(
  store: Store,
@@ -71,6 +72,23 @@ export class VaultController {
  this.#notificationService = NotificationService.getInstance();
  }
 
+ /**
+ * Enable/disable demo mode
+ * When enabled, skips network operations (sync, notifications, profile creation)
+ */
+ set demoMode(value: boolean) {
+ this.#demoMode = value;
+ if (value) {
+ console.log(
+ "🎭 VaultController: Demo mode enabled - skipping network operations",
+ );
+ }
+ }
+
+ get demoMode() {
+ return this.#demoMode;
+ }
+
  /**
  * Get the current profile creation status
  */
@@ -397,6 +415,16 @@ export class VaultController {
  else if (vault?.ename) {
  this.#store.set("vault", vault);
 
+ // Skip network operations in demo mode
+ if (this.#demoMode) {
+ console.log(
+ "🎭 Demo mode: Skipping network operations for vault",
+ vault.ename,
+ );
+ this.profileCreationStatus = "success";
+ return;
+ }
+
  // Register device for notifications
  this.registerDeviceForNotifications(vault.ename);
 
@@ -468,6 +496,153 @@ export class VaultController {
  return this.#endpoint;
  }
 
+ /**
+ * Create a binding document in the eVault
+ * TODO: Implement when backend endpoint is ready
+ *
+ * @param type - Type of binding document (PHYSICAL_ID, PASSPHRASE, PHOTOGRAPH, FRIEND)
+ * @param data - Binding document data
+ * @param signature - Signature or JWT proving authenticity
+ */
+ async createBindingDocument(
+ type: string,
+ data: Record<string, unknown>,
+ signature: string,
+ ): Promise<void> {
+ console.log("TODO: Create binding document", {
+ type,
+ data,
+ signature: `${signature.substring(0, 50)}...`,
+ });
+
+ // Emit audit event
+ this.emitAuditEvent("BINDING_DOCUMENT_CREATED", {
+ type,
+ timestamp: new Date().toISOString(),
+ });
+
+ // TODO: Call GraphQL mutation when backend is ready
+ // const CREATE_BINDING_DOC = `
+ // mutation CreateBindingDocument($input: BindingDocumentInput!) {
+ // createBindingDocument(input: $input) {
+ // id
+ // type
+ // status
+ // }
+ // }
+ // `;
+ }
+
+ /**
+ * Request ePassport certificate from Remote CA
+ * TODO: Implement when CA endpoint is ready
+ *
+ * @param ename - User's eName
+ * @param publicKey - User's public key
+ */
+ async requestEPassport(ename: string, publicKey: string): Promise<string> {
+ console.log("TODO: Request ePassport from CA", {
+ ename,
+ publicKey: `${publicKey.substring(0, 50)}...`,
+ });
+
+ // Emit audit event
+ this.emitAuditEvent("EPASSPORT_REQUESTED", {
+ ename,
+ timestamp: new Date().toISOString(),
+ });
+
+ // TODO: Call CA endpoint when ready
+ // const response = await axios.post(
+ // new URL("/ca/issue-epassport", PUBLIC_REGISTRY_URL).toString(),
+ // { ename, publicKey }
+ // );
+ // return response.data.certificate;
+
+ return "TODO_EPASSPORT_CERTIFICATE";
+ }
+
+ /**
+ * Emit an audit event
+ * These events are logged for compliance and debugging
+ *
+ * @param eventType - Type of audit event
+ * @param data - Event data
+ */
+ emitAuditEvent(eventType: string, data: Record<string, unknown>): void {
+ const auditEvent = {
+ type: eventType,
+ ...data,
+ timestamp: data.timestamp ?? new Date().toISOString(),
+ };
+
+ console.log("AUDIT:", auditEvent);
+
+ // TODO: Send to backend audit log when endpoint is ready
+ // Store locally for now
+ let existingEvents: unknown[] = [];
+ try {
+ existingEvents = JSON.parse(
+ localStorage.getItem("auditEvents") || "[]",
+ );
+ } catch (parseError) {
+ console.error(
+ "Failed to parse existing audit events, starting fresh",
+ parseError,
+ );
+ existingEvents = [];
+ }
+
+ existingEvents.push(auditEvent);
+
+ // Cap the array to prevent unbounded growth (keep last 1000 entries)
+ const MAX_AUDIT_EVENTS = 1000;
+ const trimmedEvents =
+ existingEvents.length > MAX_AUDIT_EVENTS
+ ? existingEvents.slice(-MAX_AUDIT_EVENTS)
+ : existingEvents;
+
+ try {
+ localStorage.setItem("auditEvents", JSON.stringify(trimmedEvents));
+ } catch (error) {
+ // Handle QuotaExceededError by aggressively trimming
+ if (
+ error instanceof DOMException &&
+ error.name === "QuotaExceededError"
+ ) {
+ console.warn(
+ "localStorage quota exceeded, trimming audit events",
+ );
+ const aggressivelyTrimmed = existingEvents.slice(-500);
+ try {
+ localStorage.setItem(
+ "auditEvents",
+ JSON.stringify(aggressivelyTrimmed),
+ );
+ } catch (retryError) {
+ console.error(
+ "Failed to save audit events even after trimming",
+ retryError,
+ );
+ // Last resort: keep only the most recent 100 events
+ try {
+ localStorage.setItem(
+ "auditEvents",
+ JSON.stringify(existingEvents.slice(-100)),
+ );
+ } catch (finalError) {
+ console.error(
+ "Critical: Unable to save audit events",
+ finalError,
+ );
+ }
+ }
+ } else {
+ console.error("Failed to save audit event", error);
+ }
+ }
+ }
+
  async clear() {
  await this.#store.delete("vault");
  }

infrastructure/eid-wallet/src-tauri/capabilities/mobile.json

@@ -1,25 +1,20 @@
 {
- "$schema": "../gen/schemas/mobile-schema.json",
- "identifier": "mobile-capability",
- "description": "Capability for the main window on mobile",
- "windows": [
- "main"
- ],
- "permissions": [
- "core:default",
- "opener:default",
- "store:default",
- "biometric:default",
- "barcode-scanner:default",
- "barcode-scanner:allow-open-app-settings",
- "deep-link:default",
- "crypto-hw:default",
- "notification:default",
- "process:default",
- "opener:allow-default-urls"
- ],
- "platforms": [
- "iOS",
- "android"
- ]
-}
+ "$schema": "../gen/schemas/mobile-schema.json",
+ "identifier": "mobile-capability",
+ "description": "Capability for the main window on mobile",
+ "windows": ["main"],
+ "permissions": [
+ "core:default",
+ "opener:default",
+ "store:default",
+ "biometric:default",
+ "barcode-scanner:default",
+ "barcode-scanner:allow-open-app-settings",
+ "deep-link:default",
+ "crypto-hw:default",
+ "notification:default",
+ "process:default",
+ "opener:allow-default-urls"
+ ],
+ "platforms": ["iOS", "android"]
+}

infrastructure/eid-wallet/src-tauri/gen/android/app/arm64/release/output-metadata.json

@@ -1,37 +1,33 @@
 {
- "version": 3,
- "artifactType": {
- "type": "APK",
- "kind": "Directory"
- },
- "applicationId": "foundation.metastate.eid_wallet",
- "variantName": "arm64Release",
- "elements": [
- {
- "type": "SINGLE",
- "filters": [],
- "attributes": [],
- "versionCode": 12,
- "versionName": "0.5.0",
- "outputFile": "app-arm64-release.apk"
- }
- ],
- "elementType": "File",
- "baselineProfiles": [
- {
- "minApi": 28,
- "maxApi": 30,
- "baselineProfiles": [
- "baselineProfiles/1/app-arm64-release.dm"
- ]
+ "version": 3,
+ "artifactType": {
+ "type": "APK",
+ "kind": "Directory"
  },
- {
- "minApi": 31,
- "maxApi": 2147483647,
- "baselineProfiles": [
- "baselineProfiles/0/app-arm64-release.dm"
- ]
- }
- ],
- "minSdkVersionForDexing": 24
-}
+ "applicationId": "foundation.metastate.eid_wallet",
+ "variantName": "arm64Release",
+ "elements": [
+ {
+ "type": "SINGLE",
+ "filters": [],
+ "attributes": [],
+ "versionCode": 12,
+ "versionName": "0.5.0",
+ "outputFile": "app-arm64-release.apk"
+ }
+ ],
+ "elementType": "File",
+ "baselineProfiles": [
+ {
+ "minApi": 28,
+ "maxApi": 30,
+ "baselineProfiles": ["baselineProfiles/1/app-arm64-release.dm"]
+ },
+ {
+ "minApi": 31,
+ "maxApi": 2147483647,
+ "baselineProfiles": ["baselineProfiles/0/app-arm64-release.dm"]
+ }
+ ],
+ "minSdkVersionForDexing": 24
+}

infrastructure/eid-wallet/src-tauri/gen/android/buildSrc/src/main/java/foundation/metastate/eid_wallet/kotlin/BuildTask.kt

@@ -21,7 +21,23 @@ open class BuildTask : DefaultTask() {
  runTauriCli(executable)
  } catch (e: Exception) {
  if (Os.isFamily(Os.FAMILY_WINDOWS)) {
- runTauriCli("$executable.cmd")
+ // Try different Windows-specific extensions
+ val fallbacks = listOf(
+ "$executable.exe",
+ "$executable.cmd",
+ "$executable.bat",
+ )
+
+ var lastException: Exception = e
+ for (fallback in fallbacks) {
+ try {
+ runTauriCli(fallback)
+ return
+ } catch (fallbackException: Exception) {
+ lastException = fallbackException
+ }
+ }
+ throw lastException
  } else {
  throw e;
  }

infrastructure/eid-wallet/src/lib/fragments/IdentityCard/IdentityCard.svelte

@@ -43,7 +43,9 @@ $effect(() => {
  usedStorage > 0 ? `${(usedStorage / totalStorage) * 100}%` : "0%";
 });
 
-const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant === "ePassport" ? "bg-primary" : "bg-gray"} rounded-3xl w-full min-h-[100px] text-white overflow-hidden`;
+const baseClasses = $derived(
+ `relative ${variant === "eName" ? "bg-black-900" : variant === "ePassport" ? "bg-primary" : "bg-gray"} rounded-3xl w-full min-h-[100px] text-white overflow-hidden`,
+);
 </script>
 
 <div {...restProps} class={cn(baseClasses, restProps.class)}>
@@ -85,7 +87,13 @@ const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant =
  class="bg-white text-black flex items-center leading-0 justify-center rounded-full h-7 px-5 text-xs font-medium"
  >
  {#if userData}
- {userData.isFake ? "DEMO ID" : "VERIFIED ID"}
+ {#if userData.assuranceLevel === "KYC_VERIFIED"}
+ VERIFIED ID
+ {:else if userData.isFake}
+ DEMO ID
+ {:else}
+ UNVERIFIED
+ {/if}
  {/if}
  </p>
  {#if viewBtn}
@@ -97,7 +105,7 @@ const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant =
  />
  {/if}
  {:else if variant === "eVault"}
- <h3 class="text-black-300 text-3xl font-semibold mb-1 z-[1]">
+ <h3 class="text-black-300 text-3xl font-semibold mb-1 z-1">
  {state.progressWidth} Used
  </h3>
  {/if}
@@ -111,7 +119,7 @@ const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant =
  {:else if variant === "ePassport"}
  <div class="flex gap-2 flex-col">
  {#if userData}
- {#each Object.entries(userData).filter(([f, v]) => f !== "isFake") as [fieldName, value]}
+ {#each Object.entries(userData).filter(([f, v]) => f !== "isFake" && f !== "assuranceLevel") as [fieldName, value]}
  <div class="flex justify-between">
  <p class="text-gray capitalize">{fieldName}</p>
  <p class=" font-medium text-white">{value}</p>
@@ -122,8 +130,8 @@ const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant =
  {:else if variant === "eVault"}
  <div>
  <div class="flex justify-between mb-1">
- <p class="z-[1]">{usedStorage}GB Used</p>
- <p class="z-[1]">{totalStorage}GB total storage</p>
+ <p class="z-1">{usedStorage}GB Used</p>
+ <p class="z-1">{totalStorage}GB total storage</p>
  </div>
  <div
  class="relative w-full h-3 rounded-full overflow-hidden bg-primary-400"

infrastructure/eid-wallet/src/lib/global/controllers/evault.ts

@@ -57,6 +57,7 @@ export class VaultController {
  #walletSdkAdapter: import("wallet-sdk").CryptoAdapter | null = null;
  #profileCreationStatus: "idle" | "loading" | "success" | "failed" = "idle";
  #notificationService: NotificationService;
+ #demoMode = false;
 
  constructor(
  store: Store,
@@ -71,6 +72,23 @@ export class VaultController {
  this.#notificationService = NotificationService.getInstance();
  }
 
+ /**
+ * Enable/disable demo mode
+ * When enabled, skips network operations (sync, notifications, profile creation)
+ */
+ set demoMode(value: boolean) {
+ this.#demoMode = value;
+ if (value) {
+ console.log(
+ "🎭 VaultController: Demo mode enabled - skipping network operations",
+ );
+ }
+ }
+
+ get demoMode() {
+ return this.#demoMode;
+ }
+
  /**
  * Get the current profile creation status
  */
@@ -397,6 +415,16 @@ export class VaultController {
  else if (vault?.ename) {
  this.#store.set("vault", vault);
 
+ // Skip network operations in demo mode
+ if (this.#demoMode) {
+ console.log(
+ "🎭 Demo mode: Skipping network operations for vault",
+ vault.ename,
+ );
+ this.profileCreationStatus = "success";
+ return;
+ }
+
  // Register device for notifications
  this.registerDeviceForNotifications(vault.ename);
 
@@ -468,6 +496,153 @@ export class VaultController {
  return this.#endpoint;
  }
 
+ /**
+ * Create a binding document in the eVault
+ * TODO: Implement when backend endpoint is ready
+ *
+ * @param type - Type of binding document (PHYSICAL_ID, PASSPHRASE, PHOTOGRAPH, FRIEND)
+ * @param data - Binding document data
+ * @param signature - Signature or JWT proving authenticity
+ */
+ async createBindingDocument(
+ type: string,
+ data: Record<string, unknown>,
+ signature: string,
+ ): Promise<void> {
+ console.log("TODO: Create binding document", {
+ type,
+ data,
+ signature: `${signature.substring(0, 50)}...`,
+ });
+
+ // Emit audit event
+ this.emitAuditEvent("BINDING_DOCUMENT_CREATED", {
+ type,
+ timestamp: new Date().toISOString(),
+ });
+
+ // TODO: Call GraphQL mutation when backend is ready
+ // const CREATE_BINDING_DOC = `
+ // mutation CreateBindingDocument($input: BindingDocumentInput!) {
+ // createBindingDocument(input: $input) {
+ // id
+ // type
+ // status
+ // }
+ // }
+ // `;
+ }
+
+ /**
+ * Request ePassport certificate from Remote CA
+ * TODO: Implement when CA endpoint is ready
+ *
+ * @param ename - User's eName
+ * @param publicKey - User's public key
+ */
+ async requestEPassport(ename: string, publicKey: string): Promise<string> {
+ console.log("TODO: Request ePassport from CA", {
+ ename,
+ publicKey: `${publicKey.substring(0, 50)}...`,
+ });
+
+ // Emit audit event
+ this.emitAuditEvent("EPASSPORT_REQUESTED", {
+ ename,
+ timestamp: new Date().toISOString(),
+ });
+
+ // TODO: Call CA endpoint when ready
+ // const response = await axios.post(
+ // new URL("/ca/issue-epassport", PUBLIC_REGISTRY_URL).toString(),
+ // { ename, publicKey }
+ // );
+ // return response.data.certificate;
+
+ return "TODO_EPASSPORT_CERTIFICATE";
+ }
+
+ /**
+ * Emit an audit event
+ * These events are logged for compliance and debugging
+ *
+ * @param eventType - Type of audit event
+ * @param data - Event data
+ */
+ emitAuditEvent(eventType: string, data: Record<string, unknown>): void {
+ const auditEvent = {
+ type: eventType,
+ ...data,
+ timestamp: data.timestamp ?? new Date().toISOString(),
+ };
+
+ console.log("AUDIT:", auditEvent);
+
+ // TODO: Send to backend audit log when endpoint is ready
+ // Store locally for now
+ let existingEvents: unknown[] = [];
+ try {
+ existingEvents = JSON.parse(
+ localStorage.getItem("auditEvents") || "[]",
+ );
+ } catch (parseError) {
+ console.error(
+ "Failed to parse existing audit events, starting fresh",
+ parseError,
+ );
+ existingEvents = [];
+ }
+
+ existingEvents.push(auditEvent);
+
+ // Cap the array to prevent unbounded growth (keep last 1000 entries)
+ const MAX_AUDIT_EVENTS = 1000;
+ const trimmedEvents =
+ existingEvents.length > MAX_AUDIT_EVENTS
+ ? existingEvents.slice(-MAX_AUDIT_EVENTS)
+ : existingEvents;
+
+ try {
+ localStorage.setItem("auditEvents", JSON.stringify(trimmedEvents));
+ } catch (error) {
+ // Handle QuotaExceededError by aggressively trimming
+ if (
+ error instanceof DOMException &&
+ error.name === "QuotaExceededError"
+ ) {
+ console.warn(
+ "localStorage quota exceeded, trimming audit events",
+ );
+ const aggressivelyTrimmed = existingEvents.slice(-500);
+ try {
+ localStorage.setItem(
+ "auditEvents",
+ JSON.stringify(aggressivelyTrimmed),
+ );
+ } catch (retryError) {
+ console.error(
+ "Failed to save audit events even after trimming",
+ retryError,
+ );
+ // Last resort: keep only the most recent 100 events
+ try {
+ localStorage.setItem(
+ "auditEvents",
+ JSON.stringify(existingEvents.slice(-100)),
+ );
+ } catch (finalError) {
+ console.error(
+ "Critical: Unable to save audit events",
+ finalError,
+ );
+ }
+ }
+ } else {
+ console.error("Failed to save audit event", error);
+ }
+ }
+ }
+
  async clear() {
  await this.#store.delete("vault");
  }

infrastructure/eid-wallet/src-tauri/capabilities/mobile.json

@@ -1,25 +1,20 @@
 {
- "$schema": "../gen/schemas/mobile-schema.json",
- "identifier": "mobile-capability",
- "description": "Capability for the main window on mobile",
- "windows": [
- "main"
- ],
- "permissions": [
- "core:default",
- "opener:default",
- "store:default",
- "biometric:default",
- "barcode-scanner:default",
- "barcode-scanner:allow-open-app-settings",
- "deep-link:default",
- "crypto-hw:default",
- "notification:default",
- "process:default",
- "opener:allow-default-urls"
- ],
- "platforms": [
- "iOS",
- "android"
- ]
-}
+ "$schema": "../gen/schemas/mobile-schema.json",
+ "identifier": "mobile-capability",
+ "description": "Capability for the main window on mobile",
+ "windows": ["main"],
+ "permissions": [
+ "core:default",
+ "opener:default",
+ "store:default",
+ "biometric:default",
+ "barcode-scanner:default",
+ "barcode-scanner:allow-open-app-settings",
+ "deep-link:default",
+ "crypto-hw:default",
+ "notification:default",
+ "process:default",
+ "opener:allow-default-urls"
+ ],
+ "platforms": ["iOS", "android"]
+}

infrastructure/eid-wallet/src-tauri/gen/android/app/arm64/release/output-metadata.json

@@ -1,37 +1,33 @@
 {
- "version": 3,
- "artifactType": {
- "type": "APK",
- "kind": "Directory"
- },
- "applicationId": "foundation.metastate.eid_wallet",
- "variantName": "arm64Release",
- "elements": [
- {
- "type": "SINGLE",
- "filters": [],
- "attributes": [],
- "versionCode": 12,
- "versionName": "0.5.0",
- "outputFile": "app-arm64-release.apk"
- }
- ],
- "elementType": "File",
- "baselineProfiles": [
- {
- "minApi": 28,
- "maxApi": 30,
- "baselineProfiles": [
- "baselineProfiles/1/app-arm64-release.dm"
- ]
+ "version": 3,
+ "artifactType": {
+ "type": "APK",
+ "kind": "Directory"
  },
- {
- "minApi": 31,
- "maxApi": 2147483647,
- "baselineProfiles": [
- "baselineProfiles/0/app-arm64-release.dm"
- ]
- }
- ],
- "minSdkVersionForDexing": 24
-}
+ "applicationId": "foundation.metastate.eid_wallet",
+ "variantName": "arm64Release",
+ "elements": [
+ {
+ "type": "SINGLE",
+ "filters": [],
+ "attributes": [],
+ "versionCode": 12,
+ "versionName": "0.5.0",
+ "outputFile": "app-arm64-release.apk"
+ }
+ ],
+ "elementType": "File",
+ "baselineProfiles": [
+ {
+ "minApi": 28,
+ "maxApi": 30,
+ "baselineProfiles": ["baselineProfiles/1/app-arm64-release.dm"]
+ },
+ {
+ "minApi": 31,
+ "maxApi": 2147483647,
+ "baselineProfiles": ["baselineProfiles/0/app-arm64-release.dm"]
+ }
+ ],
+ "minSdkVersionForDexing": 24
+}

infrastructure/eid-wallet/src-tauri/gen/android/buildSrc/src/main/java/foundation/metastate/eid_wallet/kotlin/BuildTask.kt

@@ -21,7 +21,23 @@ open class BuildTask : DefaultTask() {
  runTauriCli(executable)
  } catch (e: Exception) {
  if (Os.isFamily(Os.FAMILY_WINDOWS)) {
- runTauriCli("$executable.cmd")
+ // Try different Windows-specific extensions
+ val fallbacks = listOf(
+ "$executable.exe",
+ "$executable.cmd",
+ "$executable.bat",
+ )
+
+ var lastException: Exception = e
+ for (fallback in fallbacks) {
+ try {
+ runTauriCli(fallback)
+ return
+ } catch (fallbackException: Exception) {
+ lastException = fallbackException
+ }
+ }
+ throw lastException
  } else {
  throw e;
  }

infrastructure/eid-wallet/src/lib/fragments/IdentityCard/IdentityCard.svelte

@@ -43,7 +43,9 @@ $effect(() => {
  usedStorage > 0 ? `${(usedStorage / totalStorage) * 100}%` : "0%";
 });
 
-const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant === "ePassport" ? "bg-primary" : "bg-gray"} rounded-3xl w-full min-h-[100px] text-white overflow-hidden`;
+const baseClasses = $derived(
+ `relative ${variant === "eName" ? "bg-black-900" : variant === "ePassport" ? "bg-primary" : "bg-gray"} rounded-3xl w-full min-h-[100px] text-white overflow-hidden`,
+);
 </script>
 
 <div {...restProps} class={cn(baseClasses, restProps.class)}>
@@ -85,7 +87,13 @@ const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant =
  class="bg-white text-black flex items-center leading-0 justify-center rounded-full h-7 px-5 text-xs font-medium"
  >
  {#if userData}
- {userData.isFake ? "DEMO ID" : "VERIFIED ID"}
+ {#if userData.assuranceLevel === "KYC_VERIFIED"}
+ VERIFIED ID
+ {:else if userData.isFake}
+ DEMO ID
+ {:else}
+ UNVERIFIED
+ {/if}
  {/if}
  </p>
  {#if viewBtn}
@@ -97,7 +105,7 @@ const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant =
  />
  {/if}
  {:else if variant === "eVault"}
- <h3 class="text-black-300 text-3xl font-semibold mb-1 z-[1]">
+ <h3 class="text-black-300 text-3xl font-semibold mb-1 z-1">
  {state.progressWidth} Used
  </h3>
  {/if}
@@ -111,7 +119,7 @@ const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant =
  {:else if variant === "ePassport"}
  <div class="flex gap-2 flex-col">
  {#if userData}
- {#each Object.entries(userData).filter(([f, v]) => f !== "isFake") as [fieldName, value]}
+ {#each Object.entries(userData).filter(([f, v]) => f !== "isFake" && f !== "assuranceLevel") as [fieldName, value]}
  <div class="flex justify-between">
  <p class="text-gray capitalize">{fieldName}</p>
  <p class=" font-medium text-white">{value}</p>
@@ -122,8 +130,8 @@ const baseClasses = `relative ${variant === "eName" ? "bg-black-900" : variant =
  {:else if variant === "eVault"}
  <div>
  <div class="flex justify-between mb-1">
- <p class="z-[1]">{usedStorage}GB Used</p>
- <p class="z-[1]">{totalStorage}GB total storage</p>
+ <p class="z-1">{usedStorage}GB Used</p>
+ <p class="z-1">{totalStorage}GB total storage</p>
  </div>
  <div
  class="relative w-full h-3 rounded-full overflow-hidden bg-primary-400"

infrastructure/eid-wallet/src/lib/global/controllers/evault.ts

@@ -57,6 +57,7 @@ export class VaultController {
  #walletSdkAdapter: import("wallet-sdk").CryptoAdapter | null = null;
  #profileCreationStatus: "idle" | "loading" | "success" | "failed" = "idle";
  #notificationService: NotificationService;
+ #demoMode = false;
 
  constructor(
  store: Store,
@@ -71,6 +72,23 @@ export class VaultController {
  this.#notificationService = NotificationService.getInstance();
  }
 
+ /**
+ * Enable/disable demo mode
+ * When enabled, skips network operations (sync, notifications, profile creation)
+ */
+ set demoMode(value: boolean) {
+ this.#demoMode = value;
+ if (value) {
+ console.log(
+ "🎭 VaultController: Demo mode enabled - skipping network operations",
+ );
+ }
+ }
+
+ get demoMode() {
+ return this.#demoMode;
+ }
+
  /**
  * Get the current profile creation status
  */
@@ -397,6 +415,16 @@ export class VaultController {
  else if (vault?.ename) {
  this.#store.set("vault", vault);
 
+ // Skip network operations in demo mode
+ if (this.#demoMode) {
+ console.log(
+ "🎭 Demo mode: Skipping network operations for vault",
+ vault.ename,
+ );
+ this.profileCreationStatus = "success";
+ return;
+ }
+
  // Register device for notifications
  this.registerDeviceForNotifications(vault.ename);
 
@@ -468,6 +496,153 @@ export class VaultController {
  return this.#endpoint;
  }
 
+ /**
+ * Create a binding document in the eVault
+ * TODO: Implement when backend endpoint is ready
+ *
+ * @param type - Type of binding document (PHYSICAL_ID, PASSPHRASE, PHOTOGRAPH, FRIEND)
+ * @param data - Binding document data
+ * @param signature - Signature or JWT proving authenticity
+ */
+ async createBindingDocument(
+ type: string,
+ data: Record<string, unknown>,
+ signature: string,
+ ): Promise<void> {
+ console.log("TODO: Create binding document", {
+ type,
+ data,
+ signature: `${signature.substring(0, 50)}...`,
+ });
+
+ // Emit audit event
+ this.emitAuditEvent("BINDING_DOCUMENT_CREATED", {
+ type,
+ timestamp: new Date().toISOString(),
+ });
+
+ // TODO: Call GraphQL mutation when backend is ready
+ // const CREATE_BINDING_DOC = `
+ // mutation CreateBindingDocument($input: BindingDocumentInput!) {
+ // createBindingDocument(input: $input) {
+ // id
+ // type
+ // status
+ // }
+ // }
+ // `;
+ }
+
+ /**
+ * Request ePassport certificate from Remote CA
+ * TODO: Implement when CA endpoint is ready
+ *
+ * @param ename - User's eName
+ * @param publicKey - User's public key
+ */
+ async requestEPassport(ename: string, publicKey: string): Promise<string> {
+ console.log("TODO: Request ePassport from CA", {
+ ename,
+ publicKey: `${publicKey.substring(0, 50)}...`,
+ });
+
+ // Emit audit event
+ this.emitAuditEvent("EPASSPORT_REQUESTED", {
+ ename,
+ timestamp: new Date().toISOString(),
+ });
+
+ // TODO: Call CA endpoint when ready
+ // const response = await axios.post(
+ // new URL("/ca/issue-epassport", PUBLIC_REGISTRY_URL).toString(),
+ // { ename, publicKey }
+ // );
+ // return response.data.certificate;
+
+ return "TODO_EPASSPORT_CERTIFICATE";
+ }
+
+ /**
+ * Emit an audit event
+ * These events are logged for compliance and debugging
+ *
+ * @param eventType - Type of audit event
+ * @param data - Event data
+ */
+ emitAuditEvent(eventType: string, data: Record<string, unknown>): void {
+ const auditEvent = {
+ type: eventType,
+ ...data,
+ timestamp: data.timestamp ?? new Date().toISOString(),
+ };
+
+ console.log("AUDIT:", auditEvent);
+
+ // TODO: Send to backend audit log when endpoint is ready
+ // Store locally for now
+ let existingEvents: unknown[] = [];
+ try {
+ existingEvents = JSON.parse(
+ localStorage.getItem("auditEvents") || "[]",
+ );
+ } catch (parseError) {
+ console.error(
+ "Failed to parse existing audit events, starting fresh",
+ parseError,
+ );
+ existingEvents = [];
+ }
+
+ existingEvents.push(auditEvent);
+
+ // Cap the array to prevent unbounded growth (keep last 1000 entries)
+ const MAX_AUDIT_EVENTS = 1000;
+ const trimmedEvents =
+ existingEvents.length > MAX_AUDIT_EVENTS
+ ? existingEvents.slice(-MAX_AUDIT_EVENTS)
+ : existingEvents;
+
+ try {
+ localStorage.setItem("auditEvents", JSON.stringify(trimmedEvents));
+ } catch (error) {
+ // Handle QuotaExceededError by aggressively trimming
+ if (
+ error instanceof DOMException &&
+ error.name === "QuotaExceededError"
+ ) {
+ console.warn(
+ "localStorage quota exceeded, trimming audit events",
+ );
+ const aggressivelyTrimmed = existingEvents.slice(-500);
+ try {
+ localStorage.setItem(
+ "auditEvents",
+ JSON.stringify(aggressivelyTrimmed),
+ );
+ } catch (retryError) {
+ console.error(
+ "Failed to save audit events even after trimming",
+ retryError,
+ );
+ // Last resort: keep only the most recent 100 events
+ try {
+ localStorage.setItem(
+ "auditEvents",
+ JSON.stringify(existingEvents.slice(-100)),
+ );
+ } catch (finalError) {
+ console.error(
+ "Critical: Unable to save audit events",
+ finalError,
+ );
+ }
+ }
+ } else {
+ console.error("Failed to save audit event", error);
+ }
+ }
+ }
+
  async clear() {
  await this.#store.delete("vault");
  }