@aptos-labs/ts-sdk 1.28.0 → 1.29.0

package/dist/common/index.d.ts

@@ -1,5 +1,5 @@
-import { S as Serializable, T as TransactionArgument, H as HexInput, a as Serializer, D as Deserializer, E as EntryFunctionArgument, U as Uint8, b as Uint16, c as Uint32, A as AnyNumber, d as Deserializable, e as Hex, f as AuthenticationKeyScheme, g as AccountAddress, h as AnyPublicKeyVariant, i as EphemeralPublicKeyVariant, N as Network, C as Client, j as ClientConfig, F as FullNodeConfig, I as IndexerConfig, k as FaucetConfig, l as AptosSettings, m as EphemeralCertificateVariant, Z as ZkpVariant, L as LedgerVersionArg, M as MoveModuleId, n as ScriptFunctionArgument, o as MoveFunctionId, p as AccountAddressInput, q as MoveStructId, r as MoveValue, s as MoveFunctionGenericTypeParam, t as SigningSchemeInput, u as SigningScheme, v as AccountData, P as PaginationArgs, w as MoveModuleBytecode, x as TransactionResponse, y as MoveResource, z as TokenStandardArg, O as OrderByArg, G as GetAccountOwnedTokensQueryResponse, B as GetAccountOwnedTokensFromCollectionResponse, J as GetAccountCollectionsWithOwnedTokenResponse, K as GetAccountCoinsDataResponse, W as WhereArg, Q as GetObjectDataQueryResponse, R as GetCollectionDataResponse, V as GetTokenDataResponse, X as GetCurrentTokenOwnershipResponse, Y as GetOwnedTokensResponse, _ as GetTokenActivityResponse, $ as GetEventsResponse, a0 as WaitForTransactionOptions, a1 as UserTransactionResponse, a2 as MoveFunction, a3 as GetFungibleAssetMetadataResponse, a4 as GetFungibleAssetActivitiesResponse, a5 as GetCurrentFungibleAssetBalancesResponse, a6 as LedgerInfo, a7 as Block, a8 as GetChainTopUserTransactionsResponse, a9 as GraphqlQuery, aa as GetProcessorStatusResponse, ab as GetANSNameResponse, ac as GetNumberOfDelegatorsResponse, ad as GetDelegatedStakingActivitiesResponse, ae as PendingTransactionResponse, af as CommittedTransactionResponse, ag as GasEstimation, ah as TableItemRequest, ai as GetTableItemsDataResponse, aj as GetTableItemsMetadataResponse, ak as AptosRequest, al as ClientRequest, am as ClientResponse, an as MimeType } from './accountAddress-OVl7-qVN.js';
-export { aA as AccountAuthenticatorVariant, bj as AccountSignature, ar as AddressInvalidReason, aB as AnySignatureVariant, aT as BlockEndInfo, aU as BlockEpilogueTransactionResponse, aQ as BlockMetadataTransactionResponse, aG as ClientHeadersType, b0 as DecodedTableData, b1 as DeletedTableData, bG as DeriveScheme, bm as DirectWriteSet, b3 as EntryFunctionPayloadResponse, aC as EphemeralSignatureVariant, bo as Event, bn as EventGuid, bJ as GenerateAccount, bH as GenerateAccountWithEd25519, bI as GenerateAccountWithSingleSignerSecp256k1Key, b6 as GenesisPayload, aP as GenesisTransactionResponse, au as HexInvalidReason, bB as MoveAbility, bv as MoveAddressType, bA as MoveFunctionVisibility, bD as MoveModule, bw as MoveObjectType, bx as MoveOptionType, b7 as MoveScriptBytecode, bE as MoveStruct, bC as MoveStructField, by as MoveStructType, bz as MoveType, bt as MoveUint128Type, bq as MoveUint16Type, bu as MoveUint256Type, br as MoveUint32Type, bs as MoveUint64Type, bp as MoveUint8Type, b5 as MultisigPayloadResponse, bS as NetworkToChainId, bP as NetworkToFaucetAPI, bN as NetworkToIndexerAPI, bT as NetworkToNetworkName, bO as NetworkToNodeAPI, bQ as NetworkToPepperAPI, bR as NetworkToProverAPI, bK as OrderBy, bL as OrderByValue, as as ParsingError, at as ParsingResult, bF as RoleType, b4 as ScriptPayloadResponse, aw as ScriptTransactionArgumentVariants, bl as ScriptWriteSet, aR as StateCheckpointTransactionResponse, bM as TokenStandard, az as TransactionAuthenticatorVariant, be as TransactionEd25519Signature, bi as TransactionFeePayerSignature, bh as TransactionMultiAgentSignature, bg as TransactionMultiEd25519Signature, b2 as TransactionPayloadResponse, ax as TransactionPayloadVariants, aH as TransactionResponseType, bf as TransactionSecp256k1Signature, b8 as TransactionSignature, ay as TransactionVariants, av as TypeTagVariants, aE as Uint128, aF as Uint256, aD as Uint64, aS as ValidatorTransactionResponse, bk as WriteSet, aV as WriteSetChange, aW as WriteSetChangeDeleteModule, aX as WriteSetChangeDeleteResource, aY as WriteSetChangeDeleteTableItem, aZ as WriteSetChangeWriteModule, a_ as WriteSetChangeWriteResource, a$ as WriteSetChangeWriteTableItem, ao as ensureBoolean, aO as isBlockEpilogueTransactionResponse, aL as isBlockMetadataTransactionResponse, b9 as isEd25519Signature, bc as isFeePayerSignature, aK as isGenesisTransactionResponse, bb as isMultiAgentSignature, bd as isMultiEd25519Signature, aI as isPendingTransactionResponse, ba as isSecp256k1Signature, aM as isStateCheckpointTransactionResponse, aJ as isUserTransactionResponse, aN as isValidatorTransactionResponse, ap as outOfRangeErrorMessage, aq as validateNumberInRange } from './accountAddress-OVl7-qVN.js';
+import { S as Serializable, T as TransactionArgument, H as HexInput, a as Serializer, D as Deserializer, E as EntryFunctionArgument, U as Uint8, b as Uint16, c as Uint32, A as AnyNumber, d as Deserializable, e as Hex, f as AuthenticationKeyScheme, g as AccountAddress, h as AnyPublicKeyVariant, i as EphemeralPublicKeyVariant, N as Network, C as Client, j as ClientConfig, F as FullNodeConfig, I as IndexerConfig, k as FaucetConfig, l as AptosSettings, m as EphemeralCertificateVariant, Z as ZkpVariant, L as LedgerVersionArg, n as AccountAddressInput, M as MoveModuleId, o as ScriptFunctionArgument, p as MoveFunctionId, q as MoveStructId, r as MoveValue, s as MoveFunctionGenericTypeParam, t as SigningSchemeInput, u as SigningScheme, v as AccountData, P as PaginationArgs, w as MoveModuleBytecode, x as TransactionResponse, y as MoveResource, z as TokenStandardArg, O as OrderByArg, G as GetAccountOwnedTokensQueryResponse, B as GetAccountOwnedTokensFromCollectionResponse, J as GetAccountCollectionsWithOwnedTokenResponse, K as GetAccountCoinsDataResponse, W as WhereArg, Q as GetObjectDataQueryResponse, R as GetCollectionDataResponse, V as GetTokenDataResponse, X as GetCurrentTokenOwnershipResponse, Y as GetOwnedTokensResponse, _ as GetTokenActivityResponse, $ as GetEventsResponse, a0 as WaitForTransactionOptions, a1 as UserTransactionResponse, a2 as MoveFunction, a3 as GetFungibleAssetMetadataResponse, a4 as GetFungibleAssetActivitiesResponse, a5 as GetCurrentFungibleAssetBalancesResponse, a6 as LedgerInfo, a7 as Block, a8 as GetChainTopUserTransactionsResponse, a9 as GraphqlQuery, aa as GetProcessorStatusResponse, ab as GetANSNameResponse, ac as GetNumberOfDelegatorsResponse, ad as GetDelegatedStakingActivitiesResponse, ae as PendingTransactionResponse, af as CommittedTransactionResponse, ag as GasEstimation, ah as TableItemRequest, ai as GetTableItemsDataResponse, aj as GetTableItemsMetadataResponse, ak as AptosRequest, al as ClientRequest, am as ClientResponse, an as MimeType } from './accountAddress-DUCC2ffJ.js';
+export { aA as AccountAuthenticatorVariant, bj as AccountSignature, ar as AddressInvalidReason, aB as AnySignatureVariant, aT as BlockEndInfo, aU as BlockEpilogueTransactionResponse, aQ as BlockMetadataTransactionResponse, aG as ClientHeadersType, b0 as DecodedTableData, b1 as DeletedTableData, bG as DeriveScheme, bm as DirectWriteSet, b3 as EntryFunctionPayloadResponse, aC as EphemeralSignatureVariant, bo as Event, bn as EventGuid, bJ as GenerateAccount, bH as GenerateAccountWithEd25519, bI as GenerateAccountWithSingleSignerSecp256k1Key, b6 as GenesisPayload, aP as GenesisTransactionResponse, au as HexInvalidReason, bB as MoveAbility, bv as MoveAddressType, bA as MoveFunctionVisibility, bD as MoveModule, bw as MoveObjectType, bx as MoveOptionType, b7 as MoveScriptBytecode, bE as MoveStruct, bC as MoveStructField, by as MoveStructType, bz as MoveType, bt as MoveUint128Type, bq as MoveUint16Type, bu as MoveUint256Type, br as MoveUint32Type, bs as MoveUint64Type, bp as MoveUint8Type, b5 as MultisigPayloadResponse, bS as NetworkToChainId, bP as NetworkToFaucetAPI, bN as NetworkToIndexerAPI, bT as NetworkToNetworkName, bO as NetworkToNodeAPI, bQ as NetworkToPepperAPI, bR as NetworkToProverAPI, bK as OrderBy, bL as OrderByValue, as as ParsingError, at as ParsingResult, bF as RoleType, b4 as ScriptPayloadResponse, aw as ScriptTransactionArgumentVariants, bl as ScriptWriteSet, aR as StateCheckpointTransactionResponse, bM as TokenStandard, az as TransactionAuthenticatorVariant, be as TransactionEd25519Signature, bi as TransactionFeePayerSignature, bh as TransactionMultiAgentSignature, bg as TransactionMultiEd25519Signature, b2 as TransactionPayloadResponse, ax as TransactionPayloadVariants, aH as TransactionResponseType, bf as TransactionSecp256k1Signature, b8 as TransactionSignature, ay as TransactionVariants, av as TypeTagVariants, aE as Uint128, aF as Uint256, aD as Uint64, aS as ValidatorTransactionResponse, bk as WriteSet, aV as WriteSetChange, aW as WriteSetChangeDeleteModule, aX as WriteSetChangeDeleteResource, aY as WriteSetChangeDeleteTableItem, aZ as WriteSetChangeWriteModule, a_ as WriteSetChangeWriteResource, a$ as WriteSetChangeWriteTableItem, ao as ensureBoolean, aO as isBlockEpilogueTransactionResponse, aL as isBlockMetadataTransactionResponse, b9 as isEd25519Signature, bc as isFeePayerSignature, aK as isGenesisTransactionResponse, bb as isMultiAgentSignature, bd as isMultiEd25519Signature, aI as isPendingTransactionResponse, ba as isSecp256k1Signature, aM as isStateCheckpointTransactionResponse, aJ as isUserTransactionResponse, aN as isValidatorTransactionResponse, ap as outOfRangeErrorMessage, aq as validateNumberInRange } from './accountAddress-DUCC2ffJ.js';
 import EventEmitter from 'eventemitter3';
 
 type Maybe<T> = T | null;
@@ -1897,6 +1897,100 @@ declare function getKeylessConfig(args: {
     options?: LedgerVersionArg;
 }): Promise<KeylessConfiguration>;
 
+/**
+ * Represents the FederatedKeylessPublicKey public key
+ *
+ * These keys use an onchain address as a source of truth for the JWK used to verify signatures.
+ *
+ * FederatedKeylessPublicKey authentication key is represented in the SDK as `AnyPublicKey`.
+ */
+declare class FederatedKeylessPublicKey extends AccountPublicKey {
+    /**
+     * The address that contains the JWK set to be used for verification.
+     */
+    readonly jwkAddress: AccountAddress;
+    /**
+     * The inner public key which contains the standard Keyless public key.
+     */
+    readonly keylessPublicKey: KeylessPublicKey;
+    constructor(jwkAddress: AccountAddressInput, keylessPublicKey: KeylessPublicKey);
+    /**
+     * Get the authentication key for the federated keyless public key
+     *
+     * @returns AuthenticationKey
+     */
+    authKey(): AuthenticationKey;
+    /**
+     * Get the public key in bytes (Uint8Array).
+     *
+     * @returns Uint8Array representation of the public key
+     */
+    toUint8Array(): Uint8Array;
+    /**
+     * Get the public key as a hex string with the 0x prefix.
+     *
+     * @returns string representation of the public key
+     */
+    toString(): string;
+    /**
+     * Verifies a signed data with a public key
+     *
+     * @param args.message message
+     * @param args.signature The signature
+     * @returns true if the signature is valid
+     */
+    verifySignature(args: {
+        message: HexInput;
+        signature: KeylessSignature;
+    }): boolean;
+    serialize(serializer: Serializer): void;
+    static deserialize(deserializer: Deserializer): FederatedKeylessPublicKey;
+    static isPublicKey(publicKey: PublicKey): publicKey is FederatedKeylessPublicKey;
+    /**
+     * Creates a FederatedKeylessPublicKey from the JWT components plus pepper
+     *
+     * @param args.iss the iss of the identity
+     * @param args.uidKey the key to use to get the uidVal in the JWT token
+     * @param args.uidVal the value of the uidKey in the JWT token
+     * @param args.aud the client ID of the application
+     * @param args.pepper The pepper used to maintain privacy of the account
+     * @returns FederatedKeylessPublicKey
+     */
+    static create(args: {
+        iss: string;
+        uidKey: string;
+        uidVal: string;
+        aud: string;
+        pepper: HexInput;
+        jwkAddress: AccountAddressInput;
+    }): FederatedKeylessPublicKey;
+    static fromJwtAndPepper(args: {
+        jwt: string;
+        pepper: HexInput;
+        jwkAddress: AccountAddressInput;
+        uidKey?: string;
+    }): FederatedKeylessPublicKey;
+    static isInstance(publicKey: PublicKey): boolean;
+}
+
+/**
+ * Hashes a string to a field element via poseidon
+ *
+ * @returns bigint result of the hash
+ */
+declare function hashStrToField(str: string, maxSizeBytes: number): bigint;
+declare function padAndPackBytesWithLen(bytes: Uint8Array, maxSizeBytes: number): bigint[];
+declare function bytesToBigIntLE(bytes: Uint8Array): bigint;
+declare function bigIntToBytesLE(value: bigint | number, length: number): Uint8Array;
+/**
+ * Hashes up to 16 scalar elements via the poseidon hashing algorithm.
+ *
+ * Each element must be scalar fields of the BN254 elliptic curve group.
+ *
+ * @returns bigint result of the hash
+ */
+declare function poseidonHash(inputs: (number | bigint | string)[]): bigint;
+
 /**
  * Represents the Secp256k1 ecdsa public key
  *
@@ -3386,21 +3480,15 @@ declare class EphemeralKeyPair extends Serializable {
 }
 
 /**
- * Account implementation for the Keyless authentication scheme.
- *
- * Used to represent a Keyless based account and sign transactions with it.
- *
- * Use KeylessAccount.fromJWTAndProof to instantiate a KeylessAccount with a JWT, proof and EphemeralKeyPair.
- *
- * When the proof expires or the JWT becomes invalid, the KeylessAccount must be instantiated again with a new JWT,
- * EphemeralKeyPair, and corresponding proof.
+ * Account implementation for the Keyless authentication scheme.  This abstract class is used for standard Keyless Accounts
+ * and Federated Keyless Accounts.
  */
-declare class KeylessAccount extends Serializable implements Account$1 {
+declare abstract class AbstractKeylessAccount extends Serializable implements Account$1 {
     static readonly PEPPER_LENGTH: number;
     /**
      * The KeylessPublicKey associated with the account
      */
-    readonly publicKey: KeylessPublicKey;
+    readonly publicKey: KeylessPublicKey | FederatedKeylessPublicKey;
     /**
      * The EphemeralKeyPair used to generate sign.
      */
@@ -3444,17 +3532,27 @@ declare class KeylessAccount extends Serializable implements Account$1 {
      */
     readonly jwt: string;
     /**
-     * An event emitter used to assist in handling asycronous proof fetching.
+     * An event emitter used to assist in handling asynchronous proof fetching.
      */
     private readonly emitter;
-    private constructor();
+    protected constructor(args: {
+        address?: AccountAddress;
+        ephemeralKeyPair: EphemeralKeyPair;
+        iss: string;
+        uidKey: string;
+        uidVal: string;
+        aud: string;
+        pepper: HexInput;
+        proof: ZeroKnowledgeSig | Promise<ZeroKnowledgeSig>;
+        proofFetchCallback?: ProofFetchCallback;
+        jwt: string;
+    });
     /**
      * This initializes the asyncronous proof fetch
      * @return
      */
     init(promise: Promise<ZeroKnowledgeSig>): Promise<void>;
     serialize(serializer: Serializer): void;
-    static deserialize(deserializer: Deserializer): KeylessAccount;
     /**
      * Checks if the proof is expired.  If so the account must be rederived with a new EphemeralKeyPair
      * and JWT token.
@@ -3483,7 +3581,7 @@ declare class KeylessAccount extends Serializable implements Account$1 {
      * @param message in HexInput format
      * @returns Signature
      */
-    sign(data: HexInput): KeylessSignature;
+    sign(message: HexInput): KeylessSignature;
     /**
      * Sign the given transaction with Keyless.
      * Signs the transaction and proof to guard against proof malleability.
@@ -3506,16 +3604,32 @@ declare class KeylessAccount extends Serializable implements Account$1 {
         message: HexInput;
         signature: KeylessSignature;
     }): boolean;
-    static fromBytes(bytes: Uint8Array): KeylessAccount;
-    static create(args: {
-        address?: AccountAddress;
-        proof: ZeroKnowledgeSig | Promise<ZeroKnowledgeSig>;
-        jwt: string;
-        ephemeralKeyPair: EphemeralKeyPair;
-        pepper: HexInput;
-        uidKey?: string;
-        proofFetchCallback?: ProofFetchCallback;
-    }): KeylessAccount;
+}
+/**
+ * A container class to hold a transaction and a proof.  It implements CryptoHashable which is used to create
+ * the signing message for Keyless transactions.  We sign over the proof to ensure non-malleability.
+ */
+declare class TransactionAndProof extends Serializable {
+    /**
+     * The transaction to sign.
+     */
+    transaction: AnyRawTransactionInstance;
+    /**
+     * The zero knowledge proof used in signing the transaction.
+     */
+    proof?: ZkProof;
+    /**
+     * The domain separator prefix used when hashing.
+     */
+    readonly domainSeparator = "APTOS::TransactionAndProof";
+    constructor(transaction: AnyRawTransactionInstance, proof?: ZkProof);
+    serialize(serializer: Serializer): void;
+    /**
+     * Hashes the bcs serialized from of the class. This is the typescript corollary to the BCSCryptoHash macro in aptos-core.
+     *
+     * @returns Uint8Array
+     */
+    hash(): Uint8Array;
 }
 type ProofFetchSuccess = {
     status: "Success";
@@ -3530,6 +3644,64 @@ interface ProofFetchEvents {
     proofFetchFinish: (status: ProofFetchStatus) => void;
 }
 
+/**
+ * Account implementation for the Keyless authentication scheme.
+ *
+ * Used to represent a Keyless based account and sign transactions with it.
+ *
+ * Use KeylessAccount.create to instantiate a KeylessAccount with a JWT, proof and EphemeralKeyPair.
+ *
+ * When the proof expires or the JWT becomes invalid, the KeylessAccount must be instantiated again with a new JWT,
+ * EphemeralKeyPair, and corresponding proof.
+ */
+declare class KeylessAccount extends AbstractKeylessAccount {
+    private constructor();
+    serialize(serializer: Serializer): void;
+    static deserialize(deserializer: Deserializer): KeylessAccount;
+    static fromBytes(bytes: Uint8Array): KeylessAccount;
+    static create(args: {
+        address?: AccountAddress;
+        proof: ZeroKnowledgeSig | Promise<ZeroKnowledgeSig>;
+        jwt: string;
+        ephemeralKeyPair: EphemeralKeyPair;
+        pepper: HexInput;
+        uidKey?: string;
+        proofFetchCallback?: ProofFetchCallback;
+    }): KeylessAccount;
+}
+
+/**
+ * Account implementation for the FederatedKeyless authentication scheme.
+ *
+ * Used to represent a FederatedKeyless based account and sign transactions with it.
+ *
+ * Use FederatedKeylessAccount.create to instantiate a KeylessAccount with a JWT, proof, EphemeralKeyPair and the
+ * address the JWKs are installed that will be used to verify the JWT.
+ *
+ * When the proof expires or the JWT becomes invalid, the KeylessAccount must be instantiated again with a new JWT,
+ * EphemeralKeyPair, and corresponding proof.
+ */
+declare class FederatedKeylessAccount extends AbstractKeylessAccount {
+    /**
+     * The FederatedKeylessPublicKey associated with the account
+     */
+    readonly publicKey: FederatedKeylessPublicKey;
+    private constructor();
+    serialize(serializer: Serializer): void;
+    static deserialize(deserializer: Deserializer): FederatedKeylessAccount;
+    static fromBytes(bytes: Uint8Array): FederatedKeylessAccount;
+    static create(args: {
+        address?: AccountAddress;
+        proof: ZeroKnowledgeSig | Promise<ZeroKnowledgeSig>;
+        jwt: string;
+        ephemeralKeyPair: EphemeralKeyPair;
+        pepper: HexInput;
+        jwkAddress: AccountAddressInput;
+        uidKey?: string;
+        proofFetchCallback?: ProofFetchCallback;
+    }): FederatedKeylessAccount;
+}
+
 interface VerifyMultiKeySignatureArgs {
     message: HexInput;
     signature: MultiKeySignature;
@@ -5556,6 +5728,24 @@ declare class Staking {
     }): Promise<GetDelegatedStakingActivitiesResponse>;
 }
 
+/**
+ * This file contains the underlying implementations for exposed submission API surface in
+ * the {@link api/transaction}. By moving the methods out into a separate file,
+ * other namespaces and processes can access these methods without depending on the entire
+ * transaction namespace and without having a dependency cycle error.
+ */
+
+type FeePayerOrFeePayerAuthenticatorOrNeither = {
+    feePayer: Account$1;
+    feePayerAuthenticator?: never;
+} | {
+    feePayer?: never;
+    feePayerAuthenticator: AccountAuthenticator;
+} | {
+    feePayer?: never;
+    feePayerAuthenticator?: never;
+};
+
 /**
  * A class to handle all `Build` transaction operations
  */
@@ -6225,10 +6415,33 @@ declare class Transaction {
      *
      * @return PendingTransactionResponse
      */
-    signAndSubmitTransaction(args: {
+    signAndSubmitTransaction(args: FeePayerOrFeePayerAuthenticatorOrNeither & {
         signer: Account$1;
         transaction: AnyRawTransaction;
     }): Promise<PendingTransactionResponse>;
+    /**
+     * Sign and submit a single signer transaction as the fee payer to chain given an authenticator by the sender of the transaction.
+     *
+     * @param args.feePayer The fee payer account to sign the transaction
+     * @param args.senderAuthenticator The AccountAuthenticator signed by the sender of the transaction
+     * @param args.transaction An instance of a RawTransaction, plus optional secondary/fee payer addresses
+     *
+     * @example
+     * const transaction = await aptos.transaction.build.simple({sender: alice.accountAddress, feePayer: true ...})
+     * const senderAuthenticator = alice.signTransactionWithAuthenticator(transaction)
+     * const pendingTransaction = await aptos.signAndSubmitAsFeePayer({
+     *  senderAuthenticator,
+     *  feePayer: bob,
+     *  transaction,
+     * })
+     *
+     * @return PendingTransactionResponse
+     */
+    signAndSubmitAsFeePayer(args: {
+        feePayer: Account$1;
+        senderAuthenticator: AccountAuthenticator;
+        transaction: AnyRawTransaction;
+    }): Promise<PendingTransactionResponse>;
 }
 
 /**
@@ -6345,20 +6558,6 @@ declare class Keyless {
         pepper?: HexInput;
         uidKey?: string;
     }): Promise<ZeroKnowledgeSig>;
-    /**
-     * Derives the Keyless Account from the JWT token and corresponding EphemeralKeyPair.  It will lookup the pepper from
-     * the pepper service if not explicitly provided.  It will compute the proof via the proving service.  It will ch
-     *
-     * @param args.jwt JWT token
-     * @param args.ephemeralKeyPair the EphemeralKeyPair used to generate the nonce in the JWT token
-     * @param args.uidKey a key in the JWT token to use to set the uidVal in the IdCommitment
-     * @param args.pepper the pepper
-     * @param args.proofFetchCallback a callback function that if set, the fetch of the proof will be done in the background. Once
-     * fetching finishes the callback function will be called.  This should be used to provide a more responsive user experience as now
-     * they are not blocked on fetching the proof. Thus the function will return much more quickly.
-     *
-     * @returns A KeylessAccount that can be used to sign transactions
-     */
     deriveKeylessAccount(args: {
         jwt: string;
         ephemeralKeyPair: EphemeralKeyPair;
@@ -6366,6 +6565,31 @@ declare class Keyless {
         pepper?: HexInput;
         proofFetchCallback?: ProofFetchCallback;
     }): Promise<KeylessAccount>;
+    deriveKeylessAccount(args: {
+        jwt: string;
+        ephemeralKeyPair: EphemeralKeyPair;
+        jwkAddress: AccountAddressInput;
+        uidKey?: string;
+        pepper?: HexInput;
+        proofFetchCallback?: ProofFetchCallback;
+    }): Promise<FederatedKeylessAccount>;
+    /**
+     * This installs a set of FederatedJWKs at an address for a given iss.
+     *
+     * It will fetch the JWK set from the well-known endpoint and update the FederatedJWKs at the sender's address
+     * to reflect it.
+     *
+     * @param args.sender The account that will install the JWKs
+     * @param args.iss the iss claim of the federated OIDC provider.
+     * @param args.jwksUrl the URL to find the corresponding JWKs. For supported IDP providers this parameter in not necessary.
+     *
+     * @returns The pending transaction that results from submission.
+     */
+    updateFederatedKeylessJwkSetTransaction(args: {
+        sender: Account$1;
+        iss: string;
+        jwksUrl?: string;
+    }): Promise<SimpleTransaction>;
 }
 
 /**
@@ -6671,4 +6895,4 @@ declare function postAptosFaucet<Req extends {}, Res extends {}>(options: PostAp
 declare function postAptosPepperService<Req extends {}, Res extends {}>(options: PostAptosRequestOptions): Promise<AptosResponse<Req, Res>>;
 declare function postAptosProvingService<Req extends {}, Res extends {}>(options: PostAptosRequestOptions): Promise<AptosResponse<Req, Res>>;
 
-export { APTOS_BIP44_REGEX, APTOS_COIN, APTOS_FA, APTOS_HARDENED_REGEX, Account$1 as Account, AccountAddress, AccountAddressInput, AccountAuthenticator, AccountAuthenticatorEd25519, AccountAuthenticatorMultiEd25519, AccountAuthenticatorMultiKey, AccountAuthenticatorSingleKey, AccountData, AccountPublicKey, AccountSequenceNumber, AnyNumber, AnyPublicKey, AnyPublicKeyVariant, type AnyRawTransaction, type AnyRawTransactionInstance, AnySignature, type AnyTransactionPayloadInstance, Aptos, AptosApiError, AptosApiType, AptosConfig, AptosRequest, type AptosResponse, AptosSettings, AuthenticationKey, AuthenticationKeyScheme, Block, Bool, CKDPriv, ChainId, Client, ClientConfig, ClientRequest, ClientResponse, CommittedTransactionResponse, type CreateAccountFromPrivateKeyArgs, type CreateEd25519AccountFromPrivateKeyArgs, type CreateEd25519SingleKeyAccountFromPrivateKeyArgs, type CreateSingleKeyAccountFromPrivateKeyArgs, DEFAULT_MAX_GAS_AMOUNT, DEFAULT_TXN_EXP_SEC_FROM_NOW, DEFAULT_TXN_TIMEOUT_SEC, type DerivedKeys, Deserializable, type DeserializableClass, Deserializer, EPK_HORIZON_SECS, Ed25519Account, Ed25519PrivateKey, Ed25519PublicKey, Ed25519Signature, type Ed25519SignerConstructorArgs, type Ed25519SignerFromDerivationPathArgs, EntryFunction, type EntryFunctionABI, EntryFunctionArgument, type EntryFunctionArgumentTypes, EntryFunctionBytes, EphemeralCertificate, EphemeralCertificateVariant, EphemeralKeyPair, EphemeralPublicKey, EphemeralPublicKeyVariant, EphemeralSignature, type ExecutionFinishEventData, type FailureEventData, FaucetConfig, FeePayerRawTransaction, FixedBytes, FullNodeConfig, type FunctionABI, GasEstimation, type GenerateAccountArgs, type GenerateEd25519AccountArgs, type GenerateEd25519SingleKeyAccountArgs, type GenerateSingleKeyAccountArgs, GetANSNameResponse, GetAccountCoinsDataResponse, GetAccountCollectionsWithOwnedTokenResponse, GetAccountOwnedTokensFromCollectionResponse, GetAccountOwnedTokensQueryResponse, type GetAptosRequestOptions, GetChainTopUserTransactionsResponse, GetCollectionDataResponse, GetCurrentFungibleAssetBalancesResponse, GetCurrentTokenOwnershipResponse, GetDelegatedStakingActivitiesResponse, GetEventsResponse, GetFungibleAssetActivitiesResponse, GetFungibleAssetMetadataResponse, GetNumberOfDelegatorsResponse, GetObjectDataQueryResponse, GetOwnedTokensResponse, GetProcessorStatusResponse, type GetRequestOptions, GetTableItemsDataResponse, GetTableItemsMetadataResponse, GetTokenActivityResponse, GetTokenDataResponse, GraphqlQuery, Groth16Zkp, HARDENED_OFFSET, Hex, HexInput, Identifier, IndexerConfig, type InputEntryFunctionData, type InputEntryFunctionDataWithABI, type InputEntryFunctionDataWithRemoteABI, type InputGenerateMultiAgentRawTransactionArgs, type InputGenerateMultiAgentRawTransactionData, type InputGenerateRawTransactionArgs, type InputGenerateSingleSignerRawTransactionArgs, type InputGenerateSingleSignerRawTransactionData, type InputGenerateTransactionData, type InputGenerateTransactionOptions, type InputGenerateTransactionPayloadData, type InputGenerateTransactionPayloadDataWithABI, type InputGenerateTransactionPayloadDataWithRemoteABI, type InputMultiSigData, type InputMultiSigDataWithABI, type InputMultiSigDataWithRemoteABI, type InputScriptData, type InputSimulateTransactionData, type InputSimulateTransactionOptions, type InputSubmitTransactionData, type InputViewFunctionData, type InputViewFunctionDataWithABI, type InputViewFunctionDataWithRemoteABI, type InputViewFunctionJsonData, KeyType, KeylessAccount, KeylessConfiguration, KeylessPublicKey, KeylessSignature, LedgerInfo, LedgerVersionArg, MAX_AUD_VAL_BYTES, MAX_COMMITED_EPK_BYTES, MAX_EXTRA_FIELD_BYTES, MAX_ISS_VAL_BYTES, MAX_JWT_HEADER_B64_BYTES, MAX_UID_KEY_BYTES, MAX_UID_VAL_BYTES, MimeType, ModuleId, MoveFunction, MoveFunctionGenericTypeParam, MoveFunctionId, MoveModuleBytecode, MoveModuleId, MoveOption, MoveResource, MoveString, MoveStructId, MoveValue, MoveVector, MultiAgentRawTransaction, MultiAgentTransaction, MultiEd25519PublicKey, MultiEd25519Signature, MultiKey, MultiKeyAccount, MultiKeySignature, MultiSig, MultiSigTransactionPayload, Network, OrderByArg, PaginationArgs, PendingTransactionResponse, type PostAptosRequestOptions, type PostRequestOptions, type PrivateKey, type PrivateKeyFromDerivationPathArgs, ProcessorType, type ProofFetchCallback, type ProofFetchEvents, type ProofFetchFailure, type ProofFetchStatus, type ProofFetchSuccess, PublicKey, RAW_TRANSACTION_SALT, RAW_TRANSACTION_WITH_DATA_SALT, RawTransaction, RawTransactionWithData, RotationProofChallenge, Script, ScriptFunctionArgument, type ScriptFunctionArgumentTypes, Secp256k1PrivateKey, Secp256k1PublicKey, Secp256k1Signature, Serializable, Serialized, Serializer, Signature, SignedTransaction, SigningScheme, SigningSchemeInput, type SimpleEntryFunctionArgumentTypes, SimpleTransaction, SingleKeyAccount, type SingleKeySignerConstructorArgs, type SingleKeySignerFromDerivationPathArgs, type SingleKeySignerGenerateArgs, StructTag, type SuccessEventData, TableItemRequest, TokenStandardArg, TransactionArgument, TransactionAuthenticator, TransactionAuthenticatorEd25519, TransactionAuthenticatorFeePayer, TransactionAuthenticatorMultiAgent, TransactionAuthenticatorMultiEd25519, TransactionAuthenticatorSingleSender, TransactionPayload, TransactionPayloadEntryFunction, TransactionPayloadMultiSig, TransactionPayloadScript, TransactionResponse, TransactionWorker, type TransactionWorkerEvents, TransactionWorkerEventsEnum, type TypeArgument, TypeTag, TypeTagAddress, TypeTagBool, TypeTagGeneric, TypeTagParserError, TypeTagParserErrorType, TypeTagReference, TypeTagSigner, TypeTagStruct, TypeTagU128, TypeTagU16, TypeTagU256, TypeTagU32, TypeTagU64, TypeTagU8, TypeTagVector, U128, U16, U256, U32, U64, U8, Uint16, Uint32, Uint8, UserTransactionResponse, type VerifyEd25519SignatureArgs, type VerifyMultiKeySignatureArgs, type VerifySignatureArgs, type VerifySingleKeySignatureArgs, type ViewFunctionABI, type ViewFunctionJsonPayload, WaitForTransactionOptions, WhereArg, ZeroKnowledgeSig, ZkProof, ZkpVariant, aptosCoinStructTag, aptosRequest, base64UrlDecode, buildTransaction, checkOrConvertArgument, convertAmountFromHumanReadableToOnChain, convertAmountFromOnChainToHumanReadable, convertArgument, convertNumber, createObjectAddress, createResourceAddress, createTokenAddress, deriveKey, deriveTransactionType, deserializeFromScriptArgument, fetchEntryFunctionAbi, fetchFunctionAbi, fetchViewFunctionAbi, findFirstNonSignerArg, floorToWholeHour, generateRawTransaction, generateSignedTransaction, generateSignedTransactionForSimulation, generateSigningMessage, generateSigningMessageForSerializable, generateSigningMessageForTransaction, generateTransactionPayload, generateTransactionPayloadWithABI, generateUserTransactionHash, generateViewFunctionPayload, generateViewFunctionPayloadWithABI, get, getAptosFullNode, getAptosPepperService, getAuthenticatorForSimulation, getFunctionParts, getKeylessConfig, hashValues, isBcsAddress, isBcsBool, isBcsFixedBytes, isBcsString, isBcsU128, isBcsU16, isBcsU256, isBcsU32, isBcsU64, isBcsU8, isBool, isCanonicalEd25519Signature, isEmptyOption, isEncodedEntryFunctionArgument, isEncodedStruct, isLargeNumber, isNumber, isScriptDataInput, isString, isValidBIP44Path, isValidHardenedPath, mnemonicToSeed, normalizeBundle, nowInSeconds, objectStructTag, optionStructTag, paginateWithCursor, parseEncodedStruct, parseTypeTag, post, postAptosFaucet, postAptosFullNode, postAptosIndexer, postAptosPepperService, postAptosProvingService, promiseFulfilledStatus, request, sleep, splitPath, standardizeTypeTags, stringStructTag, throwTypeMismatch };
+export { APTOS_BIP44_REGEX, APTOS_COIN, APTOS_FA, APTOS_HARDENED_REGEX, AbstractKeylessAccount, Account$1 as Account, AccountAddress, AccountAddressInput, AccountAuthenticator, AccountAuthenticatorEd25519, AccountAuthenticatorMultiEd25519, AccountAuthenticatorMultiKey, AccountAuthenticatorSingleKey, AccountData, AccountPublicKey, AccountSequenceNumber, AnyNumber, AnyPublicKey, AnyPublicKeyVariant, type AnyRawTransaction, type AnyRawTransactionInstance, AnySignature, type AnyTransactionPayloadInstance, Aptos, AptosApiError, AptosApiType, AptosConfig, AptosRequest, type AptosResponse, AptosSettings, AuthenticationKey, AuthenticationKeyScheme, Block, Bool, CKDPriv, ChainId, Client, ClientConfig, ClientRequest, ClientResponse, CommittedTransactionResponse, type CreateAccountFromPrivateKeyArgs, type CreateEd25519AccountFromPrivateKeyArgs, type CreateEd25519SingleKeyAccountFromPrivateKeyArgs, type CreateSingleKeyAccountFromPrivateKeyArgs, DEFAULT_MAX_GAS_AMOUNT, DEFAULT_TXN_EXP_SEC_FROM_NOW, DEFAULT_TXN_TIMEOUT_SEC, type DerivedKeys, Deserializable, type DeserializableClass, Deserializer, EPK_HORIZON_SECS, Ed25519Account, Ed25519PrivateKey, Ed25519PublicKey, Ed25519Signature, type Ed25519SignerConstructorArgs, type Ed25519SignerFromDerivationPathArgs, EntryFunction, type EntryFunctionABI, EntryFunctionArgument, type EntryFunctionArgumentTypes, EntryFunctionBytes, EphemeralCertificate, EphemeralCertificateVariant, EphemeralKeyPair, EphemeralPublicKey, EphemeralPublicKeyVariant, EphemeralSignature, type ExecutionFinishEventData, type FailureEventData, FaucetConfig, FederatedKeylessAccount, FederatedKeylessPublicKey, FeePayerRawTransaction, FixedBytes, FullNodeConfig, type FunctionABI, GasEstimation, type GenerateAccountArgs, type GenerateEd25519AccountArgs, type GenerateEd25519SingleKeyAccountArgs, type GenerateSingleKeyAccountArgs, GetANSNameResponse, GetAccountCoinsDataResponse, GetAccountCollectionsWithOwnedTokenResponse, GetAccountOwnedTokensFromCollectionResponse, GetAccountOwnedTokensQueryResponse, type GetAptosRequestOptions, GetChainTopUserTransactionsResponse, GetCollectionDataResponse, GetCurrentFungibleAssetBalancesResponse, GetCurrentTokenOwnershipResponse, GetDelegatedStakingActivitiesResponse, GetEventsResponse, GetFungibleAssetActivitiesResponse, GetFungibleAssetMetadataResponse, GetNumberOfDelegatorsResponse, GetObjectDataQueryResponse, GetOwnedTokensResponse, GetProcessorStatusResponse, type GetRequestOptions, GetTableItemsDataResponse, GetTableItemsMetadataResponse, GetTokenActivityResponse, GetTokenDataResponse, GraphqlQuery, Groth16Zkp, HARDENED_OFFSET, Hex, HexInput, Identifier, IndexerConfig, type InputEntryFunctionData, type InputEntryFunctionDataWithABI, type InputEntryFunctionDataWithRemoteABI, type InputGenerateMultiAgentRawTransactionArgs, type InputGenerateMultiAgentRawTransactionData, type InputGenerateRawTransactionArgs, type InputGenerateSingleSignerRawTransactionArgs, type InputGenerateSingleSignerRawTransactionData, type InputGenerateTransactionData, type InputGenerateTransactionOptions, type InputGenerateTransactionPayloadData, type InputGenerateTransactionPayloadDataWithABI, type InputGenerateTransactionPayloadDataWithRemoteABI, type InputMultiSigData, type InputMultiSigDataWithABI, type InputMultiSigDataWithRemoteABI, type InputScriptData, type InputSimulateTransactionData, type InputSimulateTransactionOptions, type InputSubmitTransactionData, type InputViewFunctionData, type InputViewFunctionDataWithABI, type InputViewFunctionDataWithRemoteABI, type InputViewFunctionJsonData, KeyType, KeylessAccount, KeylessConfiguration, KeylessPublicKey, KeylessSignature, LedgerInfo, LedgerVersionArg, MAX_AUD_VAL_BYTES, MAX_COMMITED_EPK_BYTES, MAX_EXTRA_FIELD_BYTES, MAX_ISS_VAL_BYTES, MAX_JWT_HEADER_B64_BYTES, MAX_UID_KEY_BYTES, MAX_UID_VAL_BYTES, MimeType, ModuleId, MoveFunction, MoveFunctionGenericTypeParam, MoveFunctionId, MoveModuleBytecode, MoveModuleId, MoveOption, MoveResource, MoveString, MoveStructId, MoveValue, MoveVector, MultiAgentRawTransaction, MultiAgentTransaction, MultiEd25519PublicKey, MultiEd25519Signature, MultiKey, MultiKeyAccount, MultiKeySignature, MultiSig, MultiSigTransactionPayload, Network, OrderByArg, PaginationArgs, PendingTransactionResponse, type PostAptosRequestOptions, type PostRequestOptions, type PrivateKey, type PrivateKeyFromDerivationPathArgs, ProcessorType, type ProofFetchCallback, type ProofFetchEvents, type ProofFetchFailure, type ProofFetchStatus, type ProofFetchSuccess, PublicKey, RAW_TRANSACTION_SALT, RAW_TRANSACTION_WITH_DATA_SALT, RawTransaction, RawTransactionWithData, RotationProofChallenge, Script, ScriptFunctionArgument, type ScriptFunctionArgumentTypes, Secp256k1PrivateKey, Secp256k1PublicKey, Secp256k1Signature, Serializable, Serialized, Serializer, Signature, SignedTransaction, SigningScheme, SigningSchemeInput, type SimpleEntryFunctionArgumentTypes, SimpleTransaction, SingleKeyAccount, type SingleKeySignerConstructorArgs, type SingleKeySignerFromDerivationPathArgs, type SingleKeySignerGenerateArgs, StructTag, type SuccessEventData, TableItemRequest, TokenStandardArg, TransactionAndProof, TransactionArgument, TransactionAuthenticator, TransactionAuthenticatorEd25519, TransactionAuthenticatorFeePayer, TransactionAuthenticatorMultiAgent, TransactionAuthenticatorMultiEd25519, TransactionAuthenticatorSingleSender, TransactionPayload, TransactionPayloadEntryFunction, TransactionPayloadMultiSig, TransactionPayloadScript, TransactionResponse, TransactionWorker, type TransactionWorkerEvents, TransactionWorkerEventsEnum, type TypeArgument, TypeTag, TypeTagAddress, TypeTagBool, TypeTagGeneric, TypeTagParserError, TypeTagParserErrorType, TypeTagReference, TypeTagSigner, TypeTagStruct, TypeTagU128, TypeTagU16, TypeTagU256, TypeTagU32, TypeTagU64, TypeTagU8, TypeTagVector, U128, U16, U256, U32, U64, U8, Uint16, Uint32, Uint8, UserTransactionResponse, type VerifyEd25519SignatureArgs, type VerifyMultiKeySignatureArgs, type VerifySignatureArgs, type VerifySingleKeySignatureArgs, type ViewFunctionABI, type ViewFunctionJsonPayload, WaitForTransactionOptions, WhereArg, ZeroKnowledgeSig, ZkProof, ZkpVariant, aptosCoinStructTag, aptosRequest, base64UrlDecode, bigIntToBytesLE, buildTransaction, bytesToBigIntLE, checkOrConvertArgument, convertAmountFromHumanReadableToOnChain, convertAmountFromOnChainToHumanReadable, convertArgument, convertNumber, createObjectAddress, createResourceAddress, createTokenAddress, deriveKey, deriveTransactionType, deserializeFromScriptArgument, fetchEntryFunctionAbi, fetchFunctionAbi, fetchViewFunctionAbi, findFirstNonSignerArg, floorToWholeHour, generateRawTransaction, generateSignedTransaction, generateSignedTransactionForSimulation, generateSigningMessage, generateSigningMessageForSerializable, generateSigningMessageForTransaction, generateTransactionPayload, generateTransactionPayloadWithABI, generateUserTransactionHash, generateViewFunctionPayload, generateViewFunctionPayloadWithABI, get, getAptosFullNode, getAptosPepperService, getAuthenticatorForSimulation, getFunctionParts, getKeylessConfig, hashStrToField, hashValues, isBcsAddress, isBcsBool, isBcsFixedBytes, isBcsString, isBcsU128, isBcsU16, isBcsU256, isBcsU32, isBcsU64, isBcsU8, isBool, isCanonicalEd25519Signature, isEmptyOption, isEncodedEntryFunctionArgument, isEncodedStruct, isLargeNumber, isNumber, isScriptDataInput, isString, isValidBIP44Path, isValidHardenedPath, mnemonicToSeed, normalizeBundle, nowInSeconds, objectStructTag, optionStructTag, padAndPackBytesWithLen, paginateWithCursor, parseEncodedStruct, parseTypeTag, poseidonHash, post, postAptosFaucet, postAptosFullNode, postAptosIndexer, postAptosPepperService, postAptosProvingService, promiseFulfilledStatus, request, sleep, splitPath, standardizeTypeTags, stringStructTag, throwTypeMismatch };