@flow-industries/id 0.26.4 → 0.26.5

package/contracts/v1/sdk-exports.json

@@ -197,6 +197,11 @@
         "type": false,
         "value": true
       },
+      {
+        "name": "createNoteTransport",
+        "type": false,
+        "value": true
+      },
       {
         "name": "createProfileButton",
         "type": false,
@@ -252,6 +257,11 @@
         "type": false,
         "value": true
       },
+      {
+        "name": "evaluatePasskeyPrf",
+        "type": false,
+        "value": true
+      },
       {
         "name": "fieldsCoveredBySubjects",
         "type": false,
@@ -347,6 +357,11 @@
         "type": false,
         "value": true
       },
+      {
+        "name": "getConnectedPasskey",
+        "type": false,
+        "value": true
+      },
       {
         "name": "getFlow",
         "type": false,
@@ -427,6 +442,46 @@
         "type": false,
         "value": true
       },
+      {
+        "name": "NoteBlob",
+        "type": true,
+        "value": false
+      },
+      {
+        "name": "NoteCollection",
+        "type": true,
+        "value": false
+      },
+      {
+        "name": "NoteOperation",
+        "type": true,
+        "value": false
+      },
+      {
+        "name": "NoteRecord",
+        "type": true,
+        "value": false
+      },
+      {
+        "name": "NoteResponses",
+        "type": true,
+        "value": false
+      },
+      {
+        "name": "NoteStoredRecord",
+        "type": true,
+        "value": false
+      },
+      {
+        "name": "NoteTransportError",
+        "type": true,
+        "value": true
+      },
+      {
+        "name": "NoteVaultHeader",
+        "type": true,
+        "value": false
+      },
       {
         "name": "NotificationCounts",
         "type": true,
@@ -462,6 +517,16 @@
         "type": true,
         "value": false
       },
+      {
+        "name": "PasskeyPrfError",
+        "type": true,
+        "value": true
+      },
+      {
+        "name": "PasskeyPrfOptions",
+        "type": true,
+        "value": false
+      },
       {
         "name": "ProfileButtonHandle",
         "type": true,

package/dist/sdk/client/index.d.ts

@@ -1,5 +1,6 @@
 export { defaultIdHost, isLocalHostname } from "../id-host";
-export type { AccessKeyOptions, ActionCatalogEntry, ActionCatalogResponse, ActionCurve, ActionEventRequest, ActionEventResponse, ActionSubjectRef, ActionSurface, ActionsApi, ActionTransitionKind, ActiveAction, ActiveActionResponse, ActiveSessionConflict, AdditionalSession, Address, AtprotoApi, AtprotoResolution, AtprotoResolutionFailure, AtprotoResolveOptions, BrowserAccount, BrowserAccounts, CatalogFieldRef, ClockAnchor, ConnectCapabilities, ConnectResponse, CreateFlowOptions, CreateStudySubjectInput, CurrentAction, DialogHost, FinishActionRequest, FinishActionResponse, FinishedSummary, Flow, FlowCredential, FlowSessionState, FlowState, FlowUser, FlowWidgetHandle, FlowWidgetName, FocusApi, FocusPhase, FocusSessionEvent, FocusSessionState, ListStudySessionsOptions, ListStudySubjectsOptions, LoginOptions, MarkNotificationsReadInput, MethodName, MountFlowWidgetOptions, MountProfileOptions, NotificationCounts, NotificationEntry, NotificationPage, NotificationReadResult, NotificationRefusal, OpenProfileOptions, ProfileButtonHandle, ProfilePosition, RoomMemberEntry, Session, StartActionInput, StartActionResponse, StartActionResult, StartFocusRequest, StudyApi, StudyCatalog, StudyCategory, StudyCategoryTotals, StudyField, StudyRange, StudySearchHit, StudySessionEntry, StudySessionPage, StudySubject, StudySubjectList, StudySubjectRefusal, StudySubjectRemovalResponse, StudySubjectResponse, StudySubjectTotals, StudySummary, SwitchAccountOptions, UpdateStudySubjectInput, UserActionSurface, XpEstimateContext, XpMode, } from "../types";
+export type { AccessKeyOptions, ActionCatalogEntry, ActionCatalogResponse, ActionCurve, ActionEventRequest, ActionEventResponse, ActionSubjectRef, ActionSurface, ActionsApi, ActionTransitionKind, ActiveAction, ActiveActionResponse, ActiveSessionConflict, AdditionalSession, Address, AtprotoApi, AtprotoResolution, AtprotoResolutionFailure, AtprotoResolveOptions, BrowserAccount, BrowserAccounts, CatalogFieldRef, ClockAnchor, ConnectCapabilities, ConnectResponse, CreateFlowOptions, CreateStudySubjectInput, CurrentAction, DialogHost, FinishActionRequest, FinishActionResponse, FinishedSummary, Flow, FlowCredential, FlowSessionState, FlowState, FlowUser, FlowWidgetHandle, FlowWidgetName, FocusApi, FocusPhase, FocusSessionEvent, FocusSessionState, ListStudySessionsOptions, ListStudySubjectsOptions, LoginOptions, MarkNotificationsReadInput, MethodName, MountFlowWidgetOptions, MountProfileOptions, NotificationCounts, NotificationEntry, NotificationPage, NotificationReadResult, NotificationRefusal, OpenProfileOptions, PasskeyPrfOptions, ProfileButtonHandle, ProfilePosition, RoomMemberEntry, Session, StartActionInput, StartActionResponse, StartActionResult, StartFocusRequest, StudyApi, StudyCatalog, StudyCategory, StudyCategoryTotals, StudyField, StudyRange, StudySearchHit, StudySessionEntry, StudySessionPage, StudySubject, StudySubjectList, StudySubjectRefusal, StudySubjectRemovalResponse, StudySubjectResponse, StudySubjectTotals, StudySummary, SwitchAccountOptions, UpdateStudySubjectInput, UserActionSurface, XpEstimateContext, XpMode, } from "../types";
+export type { NoteBlob, NoteCollection, NoteOperation, NoteRecord, NoteResponses, NoteStoredRecord, NoteVaultHeader, } from "../types/note-transport";
 export { consistencyCurve, estimateActionXp, FLOW_SCORE_MAX, flowMultiplier, } from "../xp/curve";
 export { ActionsRequestError, createActionsApi, isActiveSessionConflict, } from "./actions";
 export { AtprotoRequestError, createAtprotoApi } from "./atproto-resolver";
@@ -8,10 +9,13 @@ export { createDialogHost } from "./dialog-host";
 export { createFlowWidget } from "./flow-widget";
 export { actionHeadline, anchorFor, catalogFieldIndex, createFocusApi, elapsedSeconds, fieldsCoveredBySubjects, focusSessionReducer, formatElapsed, hitLabel, INITIAL_FOCUS_STATE, MEDITATION_SOURCE, matchScore, normalizeSearchText, REANCHOR_TOLERANCE_SECONDS, recentSubjects, STUDY_SOURCE, searchStudy, shouldReanchor, } from "./focus";
 export { METHODS } from "./methods";
+export { createNoteTransport, NoteTransportError } from "./note-transport";
 export { closeProfile, openProfile } from "./open-profile";
+export { evaluatePasskeyPrf, PasskeyPrfError } from "./passkey-prf";
 export { createProfileButton } from "./profile-button";
 export type { ReportOperation, ReportRequest, ReportResponse } from "./reports";
 export { createReportsApi, ReportRequestError } from "./reports";
 export { createRoomsApi, RoomsRequestError } from "./rooms";
+export { getConnectedPasskey } from "./session";
 export { createStaticFlow } from "./static-flow";
 export { createStudyApi, StudyRequestError } from "./study";

package/dist/sdk/client/index.js

@@ -7,9 +7,12 @@ export { createDialogHost } from "./dialog-host";
 export { createFlowWidget } from "./flow-widget";
 export { actionHeadline, anchorFor, catalogFieldIndex, createFocusApi, elapsedSeconds, fieldsCoveredBySubjects, focusSessionReducer, formatElapsed, hitLabel, INITIAL_FOCUS_STATE, MEDITATION_SOURCE, matchScore, normalizeSearchText, REANCHOR_TOLERANCE_SECONDS, recentSubjects, STUDY_SOURCE, searchStudy, shouldReanchor, } from "./focus";
 export { METHODS } from "./methods";
+export { createNoteTransport, NoteTransportError } from "./note-transport";
 export { closeProfile, openProfile } from "./open-profile";
+export { evaluatePasskeyPrf, PasskeyPrfError } from "./passkey-prf";
 export { createProfileButton } from "./profile-button";
 export { createReportsApi, ReportRequestError } from "./reports";
 export { createRoomsApi, RoomsRequestError } from "./rooms";
+export { getConnectedPasskey } from "./session";
 export { createStaticFlow } from "./static-flow";
 export { createStudyApi, StudyRequestError } from "./study";

package/dist/sdk/client/note-transport.d.ts

@@ -0,0 +1,15 @@
+import type { AtprotoApi, AtprotoResolution } from "../types/atproto";
+import type { NoteBlob, NoteOperation, NoteResponses } from "../types/note-transport";
+export declare class NoteTransportError extends Error {
+    readonly code: string;
+    readonly status: number;
+    constructor(code: string, status: number);
+}
+/** Ciphertext-only Auth transport; the browser never receives provider tokens or DPoP keys. */
+export declare function createNoteTransport(host: string, getToken: () => Promise<string | null>, getUserId: () => string | null, getSessionVersion: () => number, resolver: AtprotoApi, expectedIdentity: Pick<AtprotoResolution, "did" | "identityVersion">): {
+    records<T extends NoteOperation>(operation: T, signal?: AbortSignal): Promise<NoteResponses[T["method"]]>;
+    download(cid: string, signal?: AbortSignal): Promise<Uint8Array<ArrayBuffer>>;
+    upload(bytes: Uint8Array<ArrayBuffer>, signal?: AbortSignal): Promise<{
+        blob: NoteBlob;
+    }>;
+};

package/dist/sdk/client/note-transport.js

@@ -0,0 +1,104 @@
+import { z } from "zod";
+export class NoteTransportError extends Error {
+    code;
+    status;
+    constructor(code, status) {
+        super(code);
+        this.code = code;
+        this.status = status;
+        this.name = "NoteTransportError";
+    }
+}
+/** Ciphertext-only Auth transport; the browser never receives provider tokens or DPoP keys. */
+export function createNoteTransport(host, getToken, getUserId, getSessionVersion, resolver, expectedIdentity) {
+    const pinnedIdentity = { ...expectedIdentity };
+    async function request(action, body, signal) {
+        signal?.throwIfAborted();
+        const userId = getUserId();
+        const version = getSessionVersion();
+        if (!userId)
+            throw new NoteTransportError("SIGN_IN_REQUIRED", 401);
+        const unchanged = () => {
+            if (getUserId() !== userId || getSessionVersion() !== version)
+                throw new NoteTransportError("ACCOUNT_CHANGED", 409);
+        };
+        const resolution = await resolver.resolve({ freshness: "refresh", signal });
+        unchanged();
+        if (resolution.did !== pinnedIdentity.did ||
+            resolution.identityVersion !== pinnedIdentity.identityVersion) {
+            resolver.invalidate();
+            throw new NoteTransportError("ACCOUNT_CHANGED", 409);
+        }
+        if (resolution.lifecycle !== "active" ||
+            resolution.authorization !== "connected")
+            throw new NoteTransportError("RECONNECT_REQUIRED", 403);
+        const token = await getToken();
+        unchanged();
+        if (!token)
+            throw new NoteTransportError("SIGN_IN_REQUIRED", 401);
+        let response;
+        try {
+            response = await fetch(`${host}/api/atproto/note/${action}`, {
+                method: "POST",
+                headers: {
+                    Authorization: `Bearer ${token}`,
+                    "X-Flow-User-Id": userId,
+                    "X-Flow-At-Did": pinnedIdentity.did,
+                    "X-Flow-Identity-Version": pinnedIdentity.identityVersion,
+                    "Content-Type": action === "upload"
+                        ? "application/octet-stream"
+                        : "application/json",
+                },
+                body,
+                signal,
+            });
+        }
+        catch {
+            signal?.throwIfAborted();
+            unchanged();
+            throw new NoteTransportError("PDS_UNAVAILABLE", 503);
+        }
+        const data = action === "download" && response.ok
+            ? new Uint8Array(await response.arrayBuffer())
+            : await response.json().catch(() => null);
+        signal?.throwIfAborted();
+        unchanged();
+        if (!response.ok) {
+            const parsed = z.object({ code: z.string() }).safeParse(data);
+            const code = parsed.success ? parsed.data.code : "PDS_UNAVAILABLE";
+            if (code === "ACCOUNT_CHANGED" || code === "RECONNECT_REQUIRED")
+                resolver.invalidate();
+            throw new NoteTransportError(code, response.status);
+        }
+        const after = await resolver.resolve({ freshness: "refresh", signal });
+        unchanged();
+        if (after.did !== pinnedIdentity.did ||
+            after.identityVersion !== pinnedIdentity.identityVersion) {
+            resolver.invalidate();
+            throw new NoteTransportError("ACCOUNT_CHANGED", 409);
+        }
+        if (data instanceof Uint8Array)
+            return new Uint8Array(data);
+        const parsed = z.record(z.string(), z.unknown()).safeParse(data);
+        if (!parsed.success)
+            throw new NoteTransportError("INVALID_RESPONSE", 502);
+        // SAFETY: Auth validates method-specific ciphertext schemas and strips provider secrets; the SDK preserves those named contracts.
+        return parsed.data;
+    }
+    return {
+        async records(operation, signal) {
+            // SAFETY: Auth validates the selected operation's named response schema.
+            return (await request("records", JSON.stringify(operation), signal));
+        },
+        async download(cid, signal) {
+            const result = await request("download", JSON.stringify({ cid }), signal);
+            if (!(result instanceof Uint8Array))
+                throw new NoteTransportError("INVALID_RESPONSE", 502);
+            return result;
+        },
+        async upload(bytes, signal) {
+            // SAFETY: Auth validates the upload response as a single standard octet-stream blob reference.
+            return (await request("upload", bytes, signal));
+        },
+    };
+}

package/dist/sdk/client/passkey-prf.d.ts

@@ -0,0 +1,8 @@
+import type { FlowCredential } from "../types/auth";
+import type { PasskeyPrfOptions } from "../types/sdk";
+export declare class PasskeyPrfError extends Error {
+    readonly code: "PASSKEY_REQUIRED" | "PRF_UNAVAILABLE" | "ACCOUNT_CHANGED" | "INVALID_INPUT";
+    constructor(code: "PASSKEY_REQUIRED" | "PRF_UNAVAILABLE" | "ACCOUNT_CHANGED" | "INVALID_INPUT");
+}
+/** Evaluate only the connected passkey. Output is client-only key material: never serialize or log it. */
+export declare function evaluatePasskeyPrf(getCredential: () => FlowCredential | null, getUserId: () => string | null, getSessionVersion: () => number, options: PasskeyPrfOptions): Promise<Uint8Array<ArrayBuffer>>;

package/dist/sdk/client/passkey-prf.js

@@ -0,0 +1,67 @@
+export class PasskeyPrfError extends Error {
+    code;
+    constructor(code) {
+        super(code);
+        this.code = code;
+        this.name = "PasskeyPrfError";
+    }
+}
+/** Evaluate only the connected passkey. Output is client-only key material: never serialize or log it. */
+export async function evaluatePasskeyPrf(getCredential, getUserId, getSessionVersion, options) {
+    options.signal?.throwIfAborted();
+    const credential = getCredential();
+    const userId = getUserId();
+    const sessionVersion = getSessionVersion();
+    if (!credential || !userId)
+        throw new PasskeyPrfError("PASSKEY_REQUIRED");
+    if (options.input.byteLength !== 32 || !options.rpId)
+        throw new PasskeyPrfError("INVALID_INPUT");
+    let id;
+    try {
+        if (!/^[A-Za-z0-9_-]+$/.test(credential.id))
+            throw new Error();
+        id = Uint8Array.from(atob(credential.id.replace(/-/g, "+").replace(/_/g, "/")), (character) => character.charCodeAt(0));
+    }
+    catch {
+        throw new PasskeyPrfError("INVALID_INPUT");
+    }
+    const unchanged = () => {
+        if (getSessionVersion() !== sessionVersion ||
+            getUserId() !== userId ||
+            getCredential()?.id !== credential.id)
+            throw new PasskeyPrfError("ACCOUNT_CHANGED");
+    };
+    if (!globalThis.navigator?.credentials || !globalThis.PublicKeyCredential)
+        throw new PasskeyPrfError("PRF_UNAVAILABLE");
+    let assertion;
+    try {
+        assertion = await navigator.credentials.get({
+            publicKey: {
+                challenge: crypto.getRandomValues(new Uint8Array(32)),
+                rpId: options.rpId,
+                allowCredentials: [{ type: "public-key", id }],
+                userVerification: "required",
+                timeout: 60_000,
+                extensions: { prf: { eval: { first: options.input.slice().buffer } } },
+            },
+            signal: options.signal,
+        });
+    }
+    catch {
+        options.signal?.throwIfAborted();
+        unchanged();
+        throw new PasskeyPrfError("PRF_UNAVAILABLE");
+    }
+    options.signal?.throwIfAborted();
+    unchanged();
+    if (!(assertion instanceof PublicKeyCredential))
+        throw new PasskeyPrfError("PRF_UNAVAILABLE");
+    const actualId = new Uint8Array(assertion.rawId);
+    if (actualId.length !== id.length ||
+        actualId.some((byte, i) => byte !== id[i]))
+        throw new PasskeyPrfError("PRF_UNAVAILABLE");
+    const result = assertion.getClientExtensionResults().prf?.results?.first;
+    if (!(result instanceof ArrayBuffer) || result.byteLength !== 32)
+        throw new PasskeyPrfError("PRF_UNAVAILABLE");
+    return new Uint8Array(result.slice(0));
+}

package/dist/sdk/client/session.d.ts

@@ -1,4 +1,6 @@
 import type { Address, FlowCredential, FlowState, Store } from "../types";
+/** Reads cached public passkey metadata only; this does not establish a signed-in session or evaluate PRF. */
+export declare function getConnectedPasskey(): Promise<FlowCredential | null>;
 /**
  * Reads the active credential from IndexedDB and seeds the in-memory store
  * with `{ credential, address }`. Run on every page load so signing operations

package/dist/sdk/client/session.js

@@ -1,9 +1,32 @@
 import * as OxAddress from "ox/Address";
 import * as PublicKey from "ox/PublicKey";
+import { z } from "zod";
 import { hex0x } from "../hex";
 import { idb } from "./idb";
 import { initialFlowState } from "./store";
 const CREDENTIAL_KEY = "flow.activeCredential";
+const cachedCredentialSchema = z
+    .object({
+    id: z
+        .string()
+        .min(1)
+        .max(2048)
+        .regex(/^[A-Za-z0-9_-]+$/),
+    publicKey: z.string().regex(/^(?:0x)?(?:04)?[a-fA-F0-9]{128}$/),
+})
+    .strict();
+/** Reads cached public passkey metadata only; this does not establish a signed-in session or evaluate PRF. */
+export async function getConnectedPasskey() {
+    if (!globalThis.indexedDB)
+        return null;
+    try {
+        const parsed = cachedCredentialSchema.safeParse(await idb.get(CREDENTIAL_KEY));
+        return parsed.success ? parsed.data : null;
+    }
+    catch {
+        return null;
+    }
+}
 /**
  * Reads the active credential from IndexedDB and seeds the in-memory store
  * with `{ credential, address }`. Run on every page load so signing operations

package/dist/sdk/types/atproto.d.ts

@@ -4,6 +4,7 @@ export type AtprotoStartRequest = {
     intent: "login" | "link";
     transaction?: string;
     expectedUserId?: string;
+    noteConsent?: true;
 };
 export type AtprotoCompletion = {
     user: {
@@ -15,6 +16,7 @@ export type AtprotoCompletion = {
     linked: true;
 };
 export type AtprotoStatus = {
+    noteConsentEnabled?: boolean;
     enabled: boolean;
     connection: {
         did: string;

package/dist/sdk/types/index.d.ts

@@ -16,6 +16,7 @@ export type { HostingQuotaAdmission, HostingQuotaLedger, HostingQuotaPolicy, Hos
 export type { AccountProfileData } from "./landing";
 export type * from "./managed-provisioning";
 export type { Bridge, BridgeParameters, FlowAccount, FlowRemote, FlowRemoteConfig, FromWindowOptions, MessageResponse, Messenger, OneOf, Payload, QueuedRequest, ReadyOptions, RemoteFlowState, RemoteState, Schema, Storage, Topic, WithReady, } from "./messenger";
+export type { NoteBlob, NoteCollection, NoteOperation, NoteRecord, NoteResponses, NoteStoredRecord, NoteTransportDeps, NoteVaultHeader, } from "./note-transport";
 export type { MarkNotificationsReadInput, NotificationCounts, NotificationEntry, NotificationPage, NotificationReadResult, NotificationRefusal, } from "./notifications";
 export type { OtpVerificationFailure, OtpVerificationResult, VerificationAdapter, } from "./otp";
 export type { Call, ConnectCapabilities, ConnectResponse, MethodName, MethodParams, MethodResult, RestoreResponse, RpcRequest, SendCallsParams, SendCallsRequest, SendCallsResponse, SendTransactionParams, SendTransactionRequest, SendTransactionResponse, SignMessageRequest, SignMessageResponse, SignTypedDataRequest, SignTypedDataResponse, TransactionArgs, TypedData, TypedDataDomain, TypedDataField, } from "./protocol";
@@ -23,7 +24,7 @@ export { isPersonalSignParams, isSendCallsParams, isSendTransactionParams, } fro
 export type { ReportOperation, ReportRequest, ReportResponse, ReportsApi, ReportTransport, } from "./reports";
 export type { CreateRoomEventInput, RoomEventArchive, RoomEventAttendance, RoomEventFrequency, RoomEventInstance, RoomEventInterest, RoomEventInterestState, RoomEventList, RoomEventOccurrence, RoomEventRecurrence, RoomEventRoomRef, RoomEventRun, RoomEventSeries, RoomEventStatus, SetInterestInput, UpdateRoomEventInput, } from "./room-events";
 export type { CreateRoomInput, GlobalRole, ModerationSubject, MyRooms, PlayerPositionReport, RoleChangeVerdict, RoomCapabilities, RoomCapability, RoomChannel, RoomDetail, RoomList, RoomMemberEntry, RoomMembers, RoomOccupancy, RoomOwner, RoomPlayerPosition, RoomPresenceEntry, RoomPresenceSnapshot, RoomRestrictionKind, RoomRole, RoomSummary, RoomSurfaceSettings, RoomsApi, RoomVisibility, StaffEntry, UpdateRoomInput, VerifyRoomContext, Viewer, VoiceDecisionReason, VoiceDecisionSubject, VoiceRoomDecision, } from "./rooms";
-export type { AccessKeyOptions, AccessKeyPreparation, AccountMenuProps, Address, ColorScheme, CreateDialogHostOptions, CreateFlowOptions, DialogHost, DialogOpenOptions, FinalizeAccessKeyParams, Flow, FlowConnectorParameters, FlowCookieNames, FlowIdProviderProps, FlowProfileButtonProps, FlowSessionState, FlowState, FlowWidgetHandle, FlowWidgetName, FlowWidgetProps, Listener, LoginOptions, MountFlowWidgetOptions, MountProfileOptions, OpenProfileOptions, PrepareArgsWithAuth, PrepareTransactionRequestPhase, ProfileButtonHandle, ProfileButtonProps, ProfileMenuMountOptions, ProfilePosition, ResolveAccountParams, ResolvedAccessKeyOptions, RootCredential, SendCallsArgs, SendTransactionArgs, Session, SigningContext, SignMessageArgs, SignTypedDataArgs, Store, StoredAccessKey, SwitchAccountOptions, UseOpenProfileOptions, WagmiConnectCapabilities, WagmiConnectParams, } from "./sdk";
+export type { AccessKeyOptions, AccessKeyPreparation, AccountMenuProps, Address, ColorScheme, CreateDialogHostOptions, CreateFlowOptions, DialogHost, DialogOpenOptions, FinalizeAccessKeyParams, Flow, FlowConnectorParameters, FlowCookieNames, FlowIdProviderProps, FlowProfileButtonProps, FlowSessionState, FlowState, FlowWidgetHandle, FlowWidgetName, FlowWidgetProps, Listener, LoginOptions, MountFlowWidgetOptions, MountProfileOptions, OpenProfileOptions, PasskeyPrfOptions, PrepareArgsWithAuth, PrepareTransactionRequestPhase, ProfileButtonHandle, ProfileButtonProps, ProfileMenuMountOptions, ProfilePosition, ResolveAccountParams, ResolvedAccessKeyOptions, RootCredential, SendCallsArgs, SendTransactionArgs, Session, SigningContext, SignMessageArgs, SignTypedDataArgs, Store, StoredAccessKey, SwitchAccountOptions, UseOpenProfileOptions, WagmiConnectCapabilities, WagmiConnectParams, } from "./sdk";
 export type { GracefulShutdownCleanup, GracefulShutdownOptions, GracefulShutdownServer, GracefulShutdownSignal, ResolvedFlowSession, ResolveSessionOptions, SessionRouteOptions, SessionRouteResponse, SessionRouteSession, } from "./server";
 export type { CosmeticOffer, PaintDescriptor, SettingDescriptor, Settings, SettingsMigration, StoredSettings, SurfaceRegistry, } from "./settings";
 export type { CreateStudySubjectInput, ListStudySessionsInput, StudyCatalog, StudyCategory, StudyCategoryTotals, StudyField, StudyRange, StudySessionEntry, StudySessionPage, StudySessionsResult, StudySubject, StudySubjectCreation, StudySubjectList, StudySubjectRefusal, StudySubjectRemoval, StudySubjectRemovalResponse, StudySubjectTotals, StudySubjectUpdate, StudySummary, UpdateStudySubjectInput, } from "./study";

package/dist/sdk/types/note-transport.d.ts

@@ -0,0 +1,140 @@
+import type { Context } from "hono";
+import type { Caller } from "../caller";
+import type { AtprotoResolution } from "./atproto";
+import type { AtprotoMapping } from "./atproto-resolver";
+export type NoteCollection = "game.flow.note.item" | "game.flow.note.tombstone" | "game.flow.note.vault";
+export type NoteBlob = {
+    $type: "blob";
+    ref: {
+        $link: string;
+    };
+    mimeType: "application/octet-stream";
+    size: number;
+};
+export type NoteItemRecord = {
+    $type: "game.flow.note.item" | "game.flow.note.tombstone";
+    id: string;
+    revision: string;
+    envelope: {
+        version: 1;
+        nonce: string;
+        ciphertext: string;
+    };
+    blobs: NoteBlob[];
+    chunkHashes?: string[];
+};
+export type NoteVaultHeader = {
+    verifier: {
+        version: 1;
+        nonce: string;
+        ciphertext: string;
+    };
+    version: 1;
+    vault: string;
+    epoch: number;
+    access: {
+        keyId: string;
+        prfInput: number[];
+        wrapped: {
+            version: 1;
+            salt: string;
+            envelope: {
+                version: 1;
+                nonce: string;
+                ciphertext: string;
+            };
+        };
+    }[];
+};
+export type NoteRecord = NoteItemRecord | {
+    $type: "game.flow.note.vault";
+    header: NoteVaultHeader;
+};
+export type NoteOperation = {
+    method: "head";
+} | {
+    method: "list";
+    collection: NoteCollection;
+    cursor?: string;
+} | {
+    method: "read";
+    collection: NoteCollection;
+    rkey: string;
+} | {
+    method: "put";
+    collection: NoteCollection;
+    rkey: string;
+    record: NoteRecord;
+    swapRecord: string | null;
+} | {
+    method: "delete";
+    collection: NoteCollection;
+    rkey: string;
+    swapRecord: string;
+} | {
+    method: "batch";
+    swapCommit: string;
+    writes: ({
+        action: "create" | "update";
+        collection: NoteCollection;
+        rkey: string;
+        record: NoteRecord;
+    } | {
+        action: "delete";
+        collection: NoteCollection;
+        rkey: string;
+    })[];
+};
+export type NoteTransportDeps = {
+    enabled: boolean;
+    originAllowed: (origin: string) => boolean;
+    resolveCaller: (context: Context) => Promise<Caller | null>;
+    admit: (userId: string) => Promise<boolean>;
+    readMapping: (userId: string) => Promise<AtprotoMapping>;
+    resolve: (mapping: AtprotoMapping, signal: AbortSignal) => Promise<AtprotoResolution>;
+    session: (resolution: AtprotoResolution) => Promise<{
+        info: () => Promise<{
+            sub: string;
+            aud: string;
+            scope: string;
+        }>;
+        fetch: (path: string, init: RequestInit) => Promise<Response>;
+    }>;
+};
+export type NoteStoredRecord = {
+    uri: string;
+    cid: string;
+    value: NoteRecord;
+};
+export type NoteResponses = {
+    head: {
+        cid: string;
+        rev: string;
+    };
+    read: NoteStoredRecord;
+    list: {
+        records: NoteStoredRecord[];
+        cursor?: string;
+    };
+    put: {
+        uri: string;
+        cid: string;
+    };
+    delete: {
+        commit?: {
+            cid: string;
+            rev: string;
+        };
+    };
+    batch: {
+        commit: {
+            cid: string;
+            rev: string;
+        };
+        results: {
+            $type: string;
+            uri?: string;
+            cid?: string;
+        }[];
+    };
+};

package/dist/sdk/types/sdk.d.ts

@@ -450,3 +450,8 @@ export type FlowProfileButtonProps = ProfileButtonProps & {
     flow: Flow;
 };
 export type ProfileMenuMountOptions = Omit<FlowProfileButtonProps, "className">;
+export type PasskeyPrfOptions = {
+    rpId: string;
+    input: Uint8Array<ArrayBuffer>;
+    signal?: AbortSignal;
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flow-industries/id",
-  "version": "0.26.4",
+  "version": "0.26.5",
   "license": "MIT",
   "repository": {
     "type": "git",