@interncom/diplomatic 0.13.0 → 0.13.1

package/dist/web/shared/crypto/enclave.d.ts

@@ -9,12 +9,10 @@ import { type PrfCreateOpts, type PrfEvalOpts, type PrfRp } from "../webauthn/pr
 export type { LargeBlobCreateOpts, LargeBlobRp };
 export type { PrfCreateOpts, PrfEvalOpts, PrfRp };
 /** Options for PRF seal/unseal ceremonies (no raw PRF bytes). */
-export type PasskeyPrfOpts = PrfRp & {
-    salt?: Uint8Array;
+export type PasskeyPrfOpts = PrfCreateOpts & {
     credId?: Uint8Array;
     /** Seal only: create a PRF credential first when no credId is known. */
     createCredIfNeeded?: boolean;
-    userName?: string;
 };
 /** Durable PRF-sealed master + public meta (never includes PRF output). */
 export type PrfSealedMaster = {

package/dist/web/shared/webauthn/prf.d.ts

@@ -3,7 +3,10 @@ import { type WebAuthnRp } from "./common.ts";
 export type PrfRp = WebAuthnRp;
 export type PrfCreateOpts = PrfRp & {
     userName?: string;
-    authenticatorAttachment?: string;
+    /** Omit so the UA can offer roaming keys (YubiKey) and third-party providers. */
+    authenticatorAttachment?: "platform" | "cross-platform";
+    /** If set, request PRF eval at create so hmac-secret is actually enabled. */
+    salt?: Uint8Array;
 };
 /** Default salt for DIPLOMATIC PRF eval (UTF-8). */
 export declare const DEFAULT_PRF_SALT: Uint8Array<ArrayBufferLike>;