@interncom/diplomatic 0.14.0 → 0.14.1

package/dist/web/shared/webauthn/common.d.ts

@@ -1,6 +1,10 @@
 import { Status } from "../consts.ts";
 import { type ValStat } from "../valstat.ts";
 export declare const WEBAUTHN_CHAL_LEN = 32;
+/** Default RP name shown in the WebAuthn picker. */
+export declare const DEFAULT_WEBAUTHN_RP_NAME = "DIPLOMATIC";
+/** WebAuthn PublicKeyCredentialType. */
+export declare const WEBAUTHN_CRED_TYPE: "public-key";
 /** COSE algorithm identifiers for WebAuthn `pubKeyCredParams`. */
 export declare const COSE_ALG_ES256 = -7;
 export declare const COSE_ALG_EDDSA = -8;

package/dist/web/shared/webauthn/prf.d.ts

@@ -2,10 +2,13 @@ import { type ValStat } from "../valstat.ts";
 import { type AuthenticatorAttachmentName, type WebAuthnRp } from "./common.ts";
 export type PrfRp = WebAuthnRp;
 export type PrfCreateOpts = PrfRp & {
+    /** WebAuthn user.name — stable account id. */
     userName?: string;
+    /** WebAuthn user.displayName — human nick. */
+    displayName?: string;
     /** Omit so the UA can offer roaming keys (YubiKey) and third-party providers. */
     authenticatorAttachment?: "platform" | "cross-platform";
-    /** Seal salt (eval is on get, not create — some UAs throw on create-time eval). */
+    /** PRF salt. Tried at create; some UAs only eval on get(). */
     salt?: Uint8Array;
     /** Already-bound cred ids so create does not assert an existing key. */
     excludeCredentials?: readonly Uint8Array[];
@@ -26,6 +29,8 @@ export type PrfCeremony = {
 };
 export type PrfCreateResult = PrfCeremony & {
     prfEnabled: boolean;
+    /** Present when the UA evaluated PRF during create (no second get). */
+    prf?: Uint8Array;
 };
 /** Internal: PRF output + cred id. For Enclave only — do not re-export to apps. */
 export type PrfEvalResult = PrfCeremony & {