@interncom/diplomatic 0.13.2 → 0.13.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -47,7 +47,7 @@ export declare class PrfSeedStore implements ISeedStore {
47
47
  /**
48
48
  * PRF UV inside Enclave, seal master, persist meta (no PRF leaves Enclave).
49
49
  */
50
- wrapAndSave(enclave: Enclave, opts?: Pick<PasskeyPrfOpts, "salt" | "credId" | "createCredIfNeeded" | "authenticatorAttachment">): Promise<ValStat<Enclave>>;
50
+ wrapAndSave(enclave: Enclave, opts?: Pick<PasskeyPrfOpts, "salt" | "credId" | "createCredIfNeeded" | "authenticatorAttachment" | "hints">): Promise<ValStat<Enclave>>;
51
51
  load(): Promise<Enclave | void>;
52
52
  /** Passkey UV inside Enclave → new session enclave. */
53
53
  unlock(): Promise<ValStat<Enclave>>;
@@ -7,9 +7,13 @@ export declare const COSE_ALG_EDDSA = -8;
7
7
  export declare const COSE_ALG_RS256 = -257;
8
8
  /** Prefer modern curves; include RS256 for broader authenticator coverage. */
9
9
  export declare const WEBAUTHN_PUB_KEY_PARAMS: PublicKeyCredentialParameters[];
10
+ /** UA preference for the WebAuthn picker. Not exclusive; omit attachment to allow both. */
11
+ export type WebAuthnHint = "security-key" | "client-device" | "hybrid";
10
12
  export type WebAuthnRp = {
11
13
  rpId?: string;
12
14
  rpName?: string;
15
+ /** Level 3 `hints`. Prefer `security-key` so Android offers USB. */
16
+ hints?: WebAuthnHint[];
13
17
  };
14
18
  /**
15
19
  * Default WebAuthn RP ID: the full hostname (no eTLD+1 collapse).