@cavos/kit 0.0.2 → 0.0.4

package/dist/index.d.mts

@@ -1,6 +1,7 @@
-import { A as AuthProvider, I as Identity, W as WalletRegistry, R as RegisteredWallet, D as DevicePublicKey, a as RecoveryClient, P as PendingDeviceRequest, b as DeviceSigner, c as DeviceSignature, C as ChainAdapter, d as ComputeAddressParams, e as ChainCall } from './Cavos-C2KHZxxu.mjs';
-export { f as Cavos, g as CavosSolana, h as CavosWallet, i as Chain, j as ConnectOptions, k as ConnectSolanaOptions, l as ConnectStatus, m as DEVICE_ACCOUNT_PROGRAM_ID, n as InMemoryWalletRegistry, o as InstructionAccount, p as InstructionData, N as NetworkEnv, q as RecoverSolanaOptions, r as RecoveryOptions, S as SECP256R1_PROGRAM_ID, s as SOLANA_NETWORKS, t as SolanaAdapter, u as SolanaAdapterOptions, v as SolanaNetwork, w as SolanaRelayer, x as SolanaRelayerOptions, y as StaticIdentity, z as anchorDiscriminator, B as buildSecp256r1Instruction, E as compressedPubkey, F as encodeLowSSignature, G as serializeInstructions } from './Cavos-C2KHZxxu.mjs';
+import { A as AuthProvider, I as Identity, W as WalletRegistry, R as RegisteredWallet, D as DevicePublicKey, a as RecoveryClient, P as PendingDeviceRequest, b as DeviceSigner, c as DeviceSignature, C as ChainAdapter, d as ComputeAddressParams, e as ChainCall, f as PasskeyAssertion, S as StellarNetwork } from './Cavos-x9qFpOvJ.mjs';
+export { g as Cavos, h as CavosSolana, i as CavosStellar, j as CavosWallet, k as Chain, l as ConnectOptions, m as ConnectSolanaOptions, n as ConnectStatus, o as ConnectStellarOptions, p as DEVICE_ACCOUNT_PROGRAM_ID, q as DEVICE_ACCOUNT_WASM_HASH, E as EnrolledPasskey, F as FACTORY_CONTRACT_ID, r as InMemoryWalletRegistry, s as InstructionAccount, t as InstructionData, N as NATIVE_SAC_ID, u as NetworkEnv, v as PasskeyApprovable, w as PasskeyEnrollParams, x as PasskeySigner, y as PasskeySignerOptions, z as RecoverSolanaOptions, B as RecoverStellarOptions, G as RecoveryOptions, H as SECP256R1_PROGRAM_ID, J as SOLANA_NETWORKS, K as STELLAR_NETWORKS, L as SolanaAdapter, M as SolanaAdapterOptions, O as SolanaNetwork, Q as SolanaRelayer, T as SolanaRelayerOptions, U as StaticIdentity, V as StellarRelayer, X as StellarRelayerOptions, Y as anchorDiscriminator, Z as approveDeviceEverywhere, _ as base64urlEncode, $ as batchChallenge, a0 as buildSecp256r1Instruction, a1 as compressedPubkey, a2 as encodeLowSSignature, a3 as lowS, a4 as recoverCandidatePublicKeys, a5 as serializeInstructions, a6 as webauthnDigest } from './Cavos-x9qFpOvJ.mjs';
 import { Signer, ArraySignatureType } from 'starknet';
+import { rpc, xdr } from '@stellar/stellar-sdk';
 import '@solana/web3.js';
 
 interface CavosAuthOptions {
@@ -91,6 +92,13 @@ declare function deriveAddressSeed({ userId, appSalt }: IdentityInput): bigint;
  * address on each chain (different address spaces, one identity).
  */
 declare function deriveAddressSeedSolana({ userId, appSalt }: IdentityInput): Uint8Array;
+/**
+ * Stellar variant: a 32-byte `address_seed` used as the Soroban account's seed
+ * and folded (with the initial device signer) into the factory deploy salt.
+ * Same identity input as the other chains, SHA-256 hashed, with a Stellar-scoped
+ * domain so the same user maps to a distinct address per chain.
+ */
+declare function deriveAddressSeedStellar({ userId, appSalt }: IdentityInput): Uint8Array;
 
 interface HttpWalletRegistryOptions {
     /** Cavos backend base URL (e.g. https://cavos.xyz). */
@@ -249,6 +257,21 @@ declare class StarknetAdapter implements ChainAdapter {
     buildRemoveSigner(accountAddress: string, signer: DevicePublicKey): ChainCall;
     isAuthorizedSigner(accountAddress: string, signer: DevicePublicKey): Promise<boolean>;
     buildSignature(txHash: bigint): Promise<string[]>;
+    buildAddApprover(accountAddress: string, passkey: DevicePublicKey): ChainCall;
+    buildRemoveApprover(accountAddress: string, passkey: DevicePublicKey): ChainCall;
+    isApprover(accountAddress: string, passkey: DevicePublicKey): Promise<boolean>;
+    /** True if the account has at least one passkey registered as an approver.
+     * Lets the UI decide whether to offer passkey approval before prompting. */
+    hasPasskeyApprover(accountAddress: string): Promise<boolean>;
+    getPasskeyNonce(accountAddress: string): Promise<bigint>;
+    /** This chain's leaf for approving `add_signer(newSigner)` at `nonce`:
+     * `sha256(new_x || new_y || nonce)` (coords 32B BE, nonce 16B BE). The batch
+     * challenge the passkey signs is `sha256(concat(leaves))` across chains. */
+    passkeyLeaf(newSigner: DevicePublicKey, nonce: bigint): Uint8Array;
+    /** Passkey-authorized `add_signer` call. `leaves`/`leafIndex` place this chain's
+     * leaf in the multi-chain batch (single chain → `[leaf]`, index 0). `yParity`
+     * matches the raw `(r, s)` — the contract normalizes high-S internally. */
+    buildAddSignerViaPasskey(accountAddress: string, newSigner: DevicePublicKey, nonce: bigint, leaves: Uint8Array[], leafIndex: number, assertion: PasskeyAssertion, yParity: boolean): ChainCall;
 }
 
 /**
@@ -290,11 +313,114 @@ declare const UDC_ADDRESS = "0x041a78e741e5af2fec34b695679bc6891742439f7afb8484e
  * DeviceAccount class hash, per network. Populated from
  * `account-contracts/starknet/deployments/<network>.json` after declaring.
  *
- * Both networks were re-declared 2026-06-26 (code changed) to the same class
- * hash, so mainnet and sepolia run identical contract source.
+ * Sepolia re-declared 2026-07-01 with the passkey-approval surface + BATCHED
+ * multi-chain challenge (one passkey prompt approves a device on all chains).
+ * Mainnet still runs the prior class (no passkey) until it is re-declared.
  */
 declare const DEVICE_ACCOUNT_CLASS_HASH: Record<StarknetNetwork, string>;
 
+interface StellarAdapterOptions {
+    network: StellarNetwork;
+    /** RPC override (else the network default). */
+    rpcUrl?: string;
+    /** Factory contract id override (else the per-network default). */
+    factoryId?: string;
+    /** The device signer that authorizes account operations. */
+    signer: DeviceSigner;
+}
+/**
+ * Stellar / Soroban implementation of the Cavos device-account surface. Unlike
+ * Starknet (`buildSignature(txHash: bigint)`) the Soroban signing unit is a
+ * 32-byte Soroban *auth-entry* preimage, so — as the Solana adapter did for its
+ * own model — this adapter exposes chain-native methods rather than the generic
+ * `ChainAdapter` shape. Its job:
+ *   - derive the deterministic account address off-chain (matches the factory),
+ *   - build the factory/account/token invocations as host functions, and
+ *   - sign a Soroban authorization entry with the silent P-256 device key,
+ *     producing the `Vec<DeviceSignature>` ScVal that the contract's
+ *     `__check_auth` verifies.
+ */
+declare class StellarAdapter {
+    readonly chain: "stellar";
+    readonly network: StellarNetwork;
+    readonly passphrase: string;
+    private readonly rpcUrl;
+    private readonly factoryId;
+    private readonly signer;
+    private _server?;
+    constructor(opts: StellarAdapterOptions);
+    server(): rpc.Server;
+    private networkId;
+    /**
+     * Deterministic account address for `(addressSeed, initialSigner)` — computed
+     * off-chain, byte-identical to the factory's on-chain `account_address`.
+     * `contractId = sha256(HashIdPreimage(networkId, factory, salt))` with
+     * `salt = sha256(addressSeed || sec1(initialSigner))`.
+     */
+    computeAddress(addressSeed: Uint8Array, initialSigner: DevicePublicKey): string;
+    /** `salt = sha256(addressSeed(32) || sec1(initialSigner)(65))` — matches the factory. */
+    accountSalt(addressSeed: Uint8Array, initialSigner: DevicePublicKey): Buffer;
+    /** Host function: `factory.deploy(address_seed, initial_signer)`. */
+    buildDeploy(addressSeed: Uint8Array, initialSigner: DevicePublicKey): xdr.HostFunction;
+    /** Host function: `account.add_signer(new_signer)` (requires device auth). */
+    buildAddSigner(accountAddress: string, signer: DevicePublicKey): xdr.HostFunction;
+    /** Host function: `account.remove_signer(signer)` (requires device auth). */
+    buildRemoveSigner(accountAddress: string, signer: DevicePublicKey): xdr.HostFunction;
+    /** Host function: `account.add_approver(passkey)` (requires device auth). */
+    buildAddApprover(accountAddress: string, passkey: DevicePublicKey): xdr.HostFunction;
+    /** Host function: `account.remove_approver(passkey)` (requires device auth). */
+    buildRemoveApprover(accountAddress: string, passkey: DevicePublicKey): xdr.HostFunction;
+    /** This chain's leaf for approving `add_signer(newSigner)` at `nonce`:
+     * `sha256(sec1(new_signer) || nonce_be8)`. The batch challenge the passkey signs
+     * is `sha256(concat(leaves))` across chains. */
+    passkeyLeaf(newSigner: DevicePublicKey, nonce: bigint): Uint8Array;
+    /** Host function: passkey-authorized `add_signer_via_passkey` (no device auth —
+     * authorized by the embedded WebAuthn assertion, so any relayer can submit).
+     * `leaves`/`leafIndex` place this chain's leaf in the multi-chain batch. */
+    buildAddSignerViaPasskey(accountAddress: string, newSigner: DevicePublicKey, passkey: DevicePublicKey, nonce: bigint, leaves: Uint8Array[], leafIndex: number, assertion: PasskeyAssertion): xdr.HostFunction;
+    /** Read whether `passkey` is a registered approver (read-only simulation). */
+    /** True if the account has at least one passkey registered as an approver.
+     * Reads the contract's `approvers` view and checks the list is non-empty. */
+    hasPasskeyApprover(accountAddress: string, readSource: string): Promise<boolean>;
+    isApprover(accountAddress: string, passkey: DevicePublicKey, readSource: string): Promise<boolean>;
+    /** Read the current passkey-approval nonce (read-only simulation). */
+    passkeyNonce(accountAddress: string, readSource: string): Promise<bigint>;
+    /** Host function: SEP-41 `token.transfer(from=account, to, amount)` (device auth). */
+    buildTransfer(tokenId: string, accountAddress: string, destination: string, amount: bigint): xdr.HostFunction;
+    /**
+     * Sign a Soroban authorization entry with the silent device key, producing the
+     * `Vec<DeviceSignature>` the account's `__check_auth` verifies. The device
+     * signs `sha256(preimage)` (WebCrypto hashes once more internally), which is
+     * exactly what the contract recomputes. Mutates + returns the entry.
+     */
+    signAuthEntry(entry: xdr.SorobanAuthorizationEntry, validUntilLedger: number): Promise<xdr.SorobanAuthorizationEntry>;
+    /**
+     * Read a SEP-41 token balance of `account` via a read-only simulation of
+     * `token.balance(account)`. Returns 0 when the account isn't deployed or holds
+     * none. `readSource` is any funded G-account (used only for the simulation).
+     */
+    readBalance(tokenId: string, account: string, readSource: string): Promise<bigint>;
+    /** Whether the account contract instance exists on-chain (is deployed). */
+    isDeployed(accountAddress: string): Promise<boolean>;
+    /**
+     * Read whether `signer` is a currently-authorized signer of the account, via a
+     * read-only simulation of `account.is_authorized(signer)`. `readSource` is any
+     * funded G-account (used only for the simulation's source/sequence).
+     */
+    isAuthorizedSigner(accountAddress: string, signer: DevicePublicKey, readSource: string): Promise<boolean>;
+}
+/** SEC-1 uncompressed P-256 public key (65 bytes: 0x04 || X || Y). */
+declare function sec1Pubkey(pk: DevicePublicKey): Uint8Array;
+/** Raw 64-byte `r || s`, normalized to low-S (secp256r1_verify requires it). */
+declare function encodeLowSSignature(sig: DeviceSignature): Uint8Array;
+/**
+ * The `Vec<DeviceSignature>` ScVal the contract's `__check_auth` decodes. Each
+ * element is a struct `{ public_key: BytesN<65>, signature: BytesN<64> }`.
+ * Soroban serializes a struct as a symbol-keyed map sorted by key; `public_key`
+ * precedes `signature`, so `nativeToScVal` (which sorts) yields the exact layout.
+ */
+declare function deviceSignatureScVal(pubkey: DevicePublicKey, sig: DeviceSignature): xdr.ScVal;
+
 /**
  * Serialize a device signature to the felt array for `tx_info.signature`:
  *   [ r_low, r_high, s_low, s_high, y_parity ]
@@ -320,4 +446,4 @@ declare function hexToBytes(hex: string): Uint8Array;
 /** A felt/bigint -> 32-byte big-endian Uint8Array (the tx-hash width). */
 declare function bigIntTo32Bytes(value: bigint): Uint8Array;
 
-export { AuthProvider, BackupSigner, CavosAuth, type CavosAuthOptions, ChainAdapter, ChainCall, ComputeAddressParams, DEVICE_ACCOUNT_CLASS_HASH, DevicePublicKey, DeviceSignature, DeviceSigner, HttpRecoveryClient, type HttpRecoveryClientOptions, HttpWalletRegistry, type HttpWalletRegistryOptions, Identity, type IdentityInput, PendingDeviceRequest, RecoveryClient, RegisteredWallet, STARKNET_NETWORKS, StarknetAdapter, type StarknetAdapterOptions, StarknetDeviceSigner, type StarknetNetwork, UDC_ADDRESS, WalletRegistry, WebCryptoSigner, type WebCryptoSignerOptions, bigIntTo32Bytes, bytesToBigInt, bytesToHex, deriveAddressSeed, deriveAddressSeedSolana, deriveBackupKey, generateRecoveryCode, hexToBytes, recoverYParity, signatureToFelts, u256ToFelts };
+export { AuthProvider, BackupSigner, CavosAuth, type CavosAuthOptions, ChainAdapter, ChainCall, ComputeAddressParams, DEVICE_ACCOUNT_CLASS_HASH, DevicePublicKey, DeviceSignature, DeviceSigner, HttpRecoveryClient, type HttpRecoveryClientOptions, HttpWalletRegistry, type HttpWalletRegistryOptions, Identity, type IdentityInput, PasskeyAssertion, PendingDeviceRequest, RecoveryClient, RegisteredWallet, STARKNET_NETWORKS, StarknetAdapter, type StarknetAdapterOptions, StarknetDeviceSigner, type StarknetNetwork, StellarAdapter, type StellarAdapterOptions, StellarNetwork, UDC_ADDRESS, WalletRegistry, WebCryptoSigner, type WebCryptoSignerOptions, bigIntTo32Bytes, bytesToBigInt, bytesToHex, deriveAddressSeed, deriveAddressSeedSolana, deriveAddressSeedStellar, deriveBackupKey, deviceSignatureScVal, encodeLowSSignature as encodeStellarLowSSignature, generateRecoveryCode, hexToBytes, recoverYParity, sec1Pubkey, signatureToFelts, u256ToFelts };

package/dist/index.d.ts

@@ -1,6 +1,7 @@
-import { A as AuthProvider, I as Identity, W as WalletRegistry, R as RegisteredWallet, D as DevicePublicKey, a as RecoveryClient, P as PendingDeviceRequest, b as DeviceSigner, c as DeviceSignature, C as ChainAdapter, d as ComputeAddressParams, e as ChainCall } from './Cavos-C2KHZxxu.js';
-export { f as Cavos, g as CavosSolana, h as CavosWallet, i as Chain, j as ConnectOptions, k as ConnectSolanaOptions, l as ConnectStatus, m as DEVICE_ACCOUNT_PROGRAM_ID, n as InMemoryWalletRegistry, o as InstructionAccount, p as InstructionData, N as NetworkEnv, q as RecoverSolanaOptions, r as RecoveryOptions, S as SECP256R1_PROGRAM_ID, s as SOLANA_NETWORKS, t as SolanaAdapter, u as SolanaAdapterOptions, v as SolanaNetwork, w as SolanaRelayer, x as SolanaRelayerOptions, y as StaticIdentity, z as anchorDiscriminator, B as buildSecp256r1Instruction, E as compressedPubkey, F as encodeLowSSignature, G as serializeInstructions } from './Cavos-C2KHZxxu.js';
+import { A as AuthProvider, I as Identity, W as WalletRegistry, R as RegisteredWallet, D as DevicePublicKey, a as RecoveryClient, P as PendingDeviceRequest, b as DeviceSigner, c as DeviceSignature, C as ChainAdapter, d as ComputeAddressParams, e as ChainCall, f as PasskeyAssertion, S as StellarNetwork } from './Cavos-x9qFpOvJ.js';
+export { g as Cavos, h as CavosSolana, i as CavosStellar, j as CavosWallet, k as Chain, l as ConnectOptions, m as ConnectSolanaOptions, n as ConnectStatus, o as ConnectStellarOptions, p as DEVICE_ACCOUNT_PROGRAM_ID, q as DEVICE_ACCOUNT_WASM_HASH, E as EnrolledPasskey, F as FACTORY_CONTRACT_ID, r as InMemoryWalletRegistry, s as InstructionAccount, t as InstructionData, N as NATIVE_SAC_ID, u as NetworkEnv, v as PasskeyApprovable, w as PasskeyEnrollParams, x as PasskeySigner, y as PasskeySignerOptions, z as RecoverSolanaOptions, B as RecoverStellarOptions, G as RecoveryOptions, H as SECP256R1_PROGRAM_ID, J as SOLANA_NETWORKS, K as STELLAR_NETWORKS, L as SolanaAdapter, M as SolanaAdapterOptions, O as SolanaNetwork, Q as SolanaRelayer, T as SolanaRelayerOptions, U as StaticIdentity, V as StellarRelayer, X as StellarRelayerOptions, Y as anchorDiscriminator, Z as approveDeviceEverywhere, _ as base64urlEncode, $ as batchChallenge, a0 as buildSecp256r1Instruction, a1 as compressedPubkey, a2 as encodeLowSSignature, a3 as lowS, a4 as recoverCandidatePublicKeys, a5 as serializeInstructions, a6 as webauthnDigest } from './Cavos-x9qFpOvJ.js';
 import { Signer, ArraySignatureType } from 'starknet';
+import { rpc, xdr } from '@stellar/stellar-sdk';
 import '@solana/web3.js';
 
 interface CavosAuthOptions {
@@ -91,6 +92,13 @@ declare function deriveAddressSeed({ userId, appSalt }: IdentityInput): bigint;
  * address on each chain (different address spaces, one identity).
  */
 declare function deriveAddressSeedSolana({ userId, appSalt }: IdentityInput): Uint8Array;
+/**
+ * Stellar variant: a 32-byte `address_seed` used as the Soroban account's seed
+ * and folded (with the initial device signer) into the factory deploy salt.
+ * Same identity input as the other chains, SHA-256 hashed, with a Stellar-scoped
+ * domain so the same user maps to a distinct address per chain.
+ */
+declare function deriveAddressSeedStellar({ userId, appSalt }: IdentityInput): Uint8Array;
 
 interface HttpWalletRegistryOptions {
     /** Cavos backend base URL (e.g. https://cavos.xyz). */
@@ -249,6 +257,21 @@ declare class StarknetAdapter implements ChainAdapter {
     buildRemoveSigner(accountAddress: string, signer: DevicePublicKey): ChainCall;
     isAuthorizedSigner(accountAddress: string, signer: DevicePublicKey): Promise<boolean>;
     buildSignature(txHash: bigint): Promise<string[]>;
+    buildAddApprover(accountAddress: string, passkey: DevicePublicKey): ChainCall;
+    buildRemoveApprover(accountAddress: string, passkey: DevicePublicKey): ChainCall;
+    isApprover(accountAddress: string, passkey: DevicePublicKey): Promise<boolean>;
+    /** True if the account has at least one passkey registered as an approver.
+     * Lets the UI decide whether to offer passkey approval before prompting. */
+    hasPasskeyApprover(accountAddress: string): Promise<boolean>;
+    getPasskeyNonce(accountAddress: string): Promise<bigint>;
+    /** This chain's leaf for approving `add_signer(newSigner)` at `nonce`:
+     * `sha256(new_x || new_y || nonce)` (coords 32B BE, nonce 16B BE). The batch
+     * challenge the passkey signs is `sha256(concat(leaves))` across chains. */
+    passkeyLeaf(newSigner: DevicePublicKey, nonce: bigint): Uint8Array;
+    /** Passkey-authorized `add_signer` call. `leaves`/`leafIndex` place this chain's
+     * leaf in the multi-chain batch (single chain → `[leaf]`, index 0). `yParity`
+     * matches the raw `(r, s)` — the contract normalizes high-S internally. */
+    buildAddSignerViaPasskey(accountAddress: string, newSigner: DevicePublicKey, nonce: bigint, leaves: Uint8Array[], leafIndex: number, assertion: PasskeyAssertion, yParity: boolean): ChainCall;
 }
 
 /**
@@ -290,11 +313,114 @@ declare const UDC_ADDRESS = "0x041a78e741e5af2fec34b695679bc6891742439f7afb8484e
  * DeviceAccount class hash, per network. Populated from
  * `account-contracts/starknet/deployments/<network>.json` after declaring.
  *
- * Both networks were re-declared 2026-06-26 (code changed) to the same class
- * hash, so mainnet and sepolia run identical contract source.
+ * Sepolia re-declared 2026-07-01 with the passkey-approval surface + BATCHED
+ * multi-chain challenge (one passkey prompt approves a device on all chains).
+ * Mainnet still runs the prior class (no passkey) until it is re-declared.
  */
 declare const DEVICE_ACCOUNT_CLASS_HASH: Record<StarknetNetwork, string>;
 
+interface StellarAdapterOptions {
+    network: StellarNetwork;
+    /** RPC override (else the network default). */
+    rpcUrl?: string;
+    /** Factory contract id override (else the per-network default). */
+    factoryId?: string;
+    /** The device signer that authorizes account operations. */
+    signer: DeviceSigner;
+}
+/**
+ * Stellar / Soroban implementation of the Cavos device-account surface. Unlike
+ * Starknet (`buildSignature(txHash: bigint)`) the Soroban signing unit is a
+ * 32-byte Soroban *auth-entry* preimage, so — as the Solana adapter did for its
+ * own model — this adapter exposes chain-native methods rather than the generic
+ * `ChainAdapter` shape. Its job:
+ *   - derive the deterministic account address off-chain (matches the factory),
+ *   - build the factory/account/token invocations as host functions, and
+ *   - sign a Soroban authorization entry with the silent P-256 device key,
+ *     producing the `Vec<DeviceSignature>` ScVal that the contract's
+ *     `__check_auth` verifies.
+ */
+declare class StellarAdapter {
+    readonly chain: "stellar";
+    readonly network: StellarNetwork;
+    readonly passphrase: string;
+    private readonly rpcUrl;
+    private readonly factoryId;
+    private readonly signer;
+    private _server?;
+    constructor(opts: StellarAdapterOptions);
+    server(): rpc.Server;
+    private networkId;
+    /**
+     * Deterministic account address for `(addressSeed, initialSigner)` — computed
+     * off-chain, byte-identical to the factory's on-chain `account_address`.
+     * `contractId = sha256(HashIdPreimage(networkId, factory, salt))` with
+     * `salt = sha256(addressSeed || sec1(initialSigner))`.
+     */
+    computeAddress(addressSeed: Uint8Array, initialSigner: DevicePublicKey): string;
+    /** `salt = sha256(addressSeed(32) || sec1(initialSigner)(65))` — matches the factory. */
+    accountSalt(addressSeed: Uint8Array, initialSigner: DevicePublicKey): Buffer;
+    /** Host function: `factory.deploy(address_seed, initial_signer)`. */
+    buildDeploy(addressSeed: Uint8Array, initialSigner: DevicePublicKey): xdr.HostFunction;
+    /** Host function: `account.add_signer(new_signer)` (requires device auth). */
+    buildAddSigner(accountAddress: string, signer: DevicePublicKey): xdr.HostFunction;
+    /** Host function: `account.remove_signer(signer)` (requires device auth). */
+    buildRemoveSigner(accountAddress: string, signer: DevicePublicKey): xdr.HostFunction;
+    /** Host function: `account.add_approver(passkey)` (requires device auth). */
+    buildAddApprover(accountAddress: string, passkey: DevicePublicKey): xdr.HostFunction;
+    /** Host function: `account.remove_approver(passkey)` (requires device auth). */
+    buildRemoveApprover(accountAddress: string, passkey: DevicePublicKey): xdr.HostFunction;
+    /** This chain's leaf for approving `add_signer(newSigner)` at `nonce`:
+     * `sha256(sec1(new_signer) || nonce_be8)`. The batch challenge the passkey signs
+     * is `sha256(concat(leaves))` across chains. */
+    passkeyLeaf(newSigner: DevicePublicKey, nonce: bigint): Uint8Array;
+    /** Host function: passkey-authorized `add_signer_via_passkey` (no device auth —
+     * authorized by the embedded WebAuthn assertion, so any relayer can submit).
+     * `leaves`/`leafIndex` place this chain's leaf in the multi-chain batch. */
+    buildAddSignerViaPasskey(accountAddress: string, newSigner: DevicePublicKey, passkey: DevicePublicKey, nonce: bigint, leaves: Uint8Array[], leafIndex: number, assertion: PasskeyAssertion): xdr.HostFunction;
+    /** Read whether `passkey` is a registered approver (read-only simulation). */
+    /** True if the account has at least one passkey registered as an approver.
+     * Reads the contract's `approvers` view and checks the list is non-empty. */
+    hasPasskeyApprover(accountAddress: string, readSource: string): Promise<boolean>;
+    isApprover(accountAddress: string, passkey: DevicePublicKey, readSource: string): Promise<boolean>;
+    /** Read the current passkey-approval nonce (read-only simulation). */
+    passkeyNonce(accountAddress: string, readSource: string): Promise<bigint>;
+    /** Host function: SEP-41 `token.transfer(from=account, to, amount)` (device auth). */
+    buildTransfer(tokenId: string, accountAddress: string, destination: string, amount: bigint): xdr.HostFunction;
+    /**
+     * Sign a Soroban authorization entry with the silent device key, producing the
+     * `Vec<DeviceSignature>` the account's `__check_auth` verifies. The device
+     * signs `sha256(preimage)` (WebCrypto hashes once more internally), which is
+     * exactly what the contract recomputes. Mutates + returns the entry.
+     */
+    signAuthEntry(entry: xdr.SorobanAuthorizationEntry, validUntilLedger: number): Promise<xdr.SorobanAuthorizationEntry>;
+    /**
+     * Read a SEP-41 token balance of `account` via a read-only simulation of
+     * `token.balance(account)`. Returns 0 when the account isn't deployed or holds
+     * none. `readSource` is any funded G-account (used only for the simulation).
+     */
+    readBalance(tokenId: string, account: string, readSource: string): Promise<bigint>;
+    /** Whether the account contract instance exists on-chain (is deployed). */
+    isDeployed(accountAddress: string): Promise<boolean>;
+    /**
+     * Read whether `signer` is a currently-authorized signer of the account, via a
+     * read-only simulation of `account.is_authorized(signer)`. `readSource` is any
+     * funded G-account (used only for the simulation's source/sequence).
+     */
+    isAuthorizedSigner(accountAddress: string, signer: DevicePublicKey, readSource: string): Promise<boolean>;
+}
+/** SEC-1 uncompressed P-256 public key (65 bytes: 0x04 || X || Y). */
+declare function sec1Pubkey(pk: DevicePublicKey): Uint8Array;
+/** Raw 64-byte `r || s`, normalized to low-S (secp256r1_verify requires it). */
+declare function encodeLowSSignature(sig: DeviceSignature): Uint8Array;
+/**
+ * The `Vec<DeviceSignature>` ScVal the contract's `__check_auth` decodes. Each
+ * element is a struct `{ public_key: BytesN<65>, signature: BytesN<64> }`.
+ * Soroban serializes a struct as a symbol-keyed map sorted by key; `public_key`
+ * precedes `signature`, so `nativeToScVal` (which sorts) yields the exact layout.
+ */
+declare function deviceSignatureScVal(pubkey: DevicePublicKey, sig: DeviceSignature): xdr.ScVal;
+
 /**
  * Serialize a device signature to the felt array for `tx_info.signature`:
  *   [ r_low, r_high, s_low, s_high, y_parity ]
@@ -320,4 +446,4 @@ declare function hexToBytes(hex: string): Uint8Array;
 /** A felt/bigint -> 32-byte big-endian Uint8Array (the tx-hash width). */
 declare function bigIntTo32Bytes(value: bigint): Uint8Array;
 
-export { AuthProvider, BackupSigner, CavosAuth, type CavosAuthOptions, ChainAdapter, ChainCall, ComputeAddressParams, DEVICE_ACCOUNT_CLASS_HASH, DevicePublicKey, DeviceSignature, DeviceSigner, HttpRecoveryClient, type HttpRecoveryClientOptions, HttpWalletRegistry, type HttpWalletRegistryOptions, Identity, type IdentityInput, PendingDeviceRequest, RecoveryClient, RegisteredWallet, STARKNET_NETWORKS, StarknetAdapter, type StarknetAdapterOptions, StarknetDeviceSigner, type StarknetNetwork, UDC_ADDRESS, WalletRegistry, WebCryptoSigner, type WebCryptoSignerOptions, bigIntTo32Bytes, bytesToBigInt, bytesToHex, deriveAddressSeed, deriveAddressSeedSolana, deriveBackupKey, generateRecoveryCode, hexToBytes, recoverYParity, signatureToFelts, u256ToFelts };
+export { AuthProvider, BackupSigner, CavosAuth, type CavosAuthOptions, ChainAdapter, ChainCall, ComputeAddressParams, DEVICE_ACCOUNT_CLASS_HASH, DevicePublicKey, DeviceSignature, DeviceSigner, HttpRecoveryClient, type HttpRecoveryClientOptions, HttpWalletRegistry, type HttpWalletRegistryOptions, Identity, type IdentityInput, PasskeyAssertion, PendingDeviceRequest, RecoveryClient, RegisteredWallet, STARKNET_NETWORKS, StarknetAdapter, type StarknetAdapterOptions, StarknetDeviceSigner, type StarknetNetwork, StellarAdapter, type StellarAdapterOptions, StellarNetwork, UDC_ADDRESS, WalletRegistry, WebCryptoSigner, type WebCryptoSignerOptions, bigIntTo32Bytes, bytesToBigInt, bytesToHex, deriveAddressSeed, deriveAddressSeedSolana, deriveAddressSeedStellar, deriveBackupKey, deviceSignatureScVal, encodeLowSSignature as encodeStellarLowSSignature, generateRecoveryCode, hexToBytes, recoverYParity, sec1Pubkey, signatureToFelts, u256ToFelts };