@invisible-labs/sdk 0.6.0-devnet.3 → 0.6.0-devnet.4

package/dist/presets.d.ts

@@ -1,43 +1,6 @@
-import { C as CoordinatorEndpoint } from './types.generated-BSEBz4jR.js';
+/** Public coordinator URL conveniences. Policy construction stays internal. */
+declare function invisibleProd(): string;
+declare function invisibleProdAzure(): string;
+declare function invisibleDevnet(): string;
 
-/**
- * `@invisible-labs/sdk/presets` - optional Invisible coordinator endpoint presets.
- *
- * This is the ONLY module permitted to name an `invisible.exchange` host (spec
- * section 6.2). Partners who self-host ignore it entirely and pass their own
- * `CoordinatorEndpoint[]` to `createSession`. The core never imports this module.
- *
- * Production presets embed an approved Azure TDX boot measurement and trust
- * roots. The caller must provide the separately approved coordinator binary
- * hash before a production endpoint can be constructed. Dormant or
- * development targets keep placeholders until approval.
- */
-
-/**
- * Production GCP TDX coordinator endpoint.
- *
- * Currently dormant: GCP is neither the live production nor development TEE
- * path. Kept only for a future explicit GCP relight, or a partner self-hosting
- * on GCP.
- */
-declare function invisibleProdGcp(): CoordinatorEndpoint[];
-/** Production Azure TDX coordinator endpoint for the current prod/devnet release. */
-declare function invisibleProdAzure(approvedBinaryHash: string): CoordinatorEndpoint[];
-/**
- * The currently-active Invisible production preset. Integrators that just want
- * "Invisible prod" use this and stay on whichever cloud is live.
- *
- * Switching the prod target between Azure and GCP is this one line:
- * `export const invisibleProd = invisibleProdAzure` -> `invisibleProdGcp`.
- */
-declare const invisibleProd: typeof invisibleProdAzure;
-/** Public Invisible devnet, served by the simplified Azure prod coordinator. */
-declare const invisibleDevnet: typeof invisibleProdAzure;
-/** Dormant GCP development coordinator endpoint. Not the active dev target today. */
-declare function invisibleDevGcp(): CoordinatorEndpoint[];
-/** Azure development coordinator endpoint. The active dev TEE today. */
-declare function invisibleDevAzure(): CoordinatorEndpoint[];
-/** The currently-active Invisible development preset. */
-declare const invisibleDev: typeof invisibleDevAzure;
-
-export { invisibleDev, invisibleDevAzure, invisibleDevGcp, invisibleDevnet, invisibleProd, invisibleProdAzure, invisibleProdGcp };
+export { invisibleDevnet, invisibleProd, invisibleProdAzure };

package/dist/presets.js

@@ -1,77 +1,19 @@
-import { INTEL_SGX_ROOT_CA_FINGERPRINT_SHA256 } from './chunk-DIA6U2CV.js';
+import { AZURE_PROD_COORDINATOR_URL } from './chunk-BRDLLGCZ.js';
+import './chunk-DIA6U2CV.js';
 import './chunk-GHBQF3A7.js';
 import './chunk-VR6T6OJS.js';
 
-// src/presets/azure-prod-maa.generated.ts
-var AZURE_PROD_MAA_TRUST = {
-  issuer: "https://sharedweu.weu.attest.azure.net",
-  jwksUrl: "https://sharedweu.weu.attest.azure.net/certs",
-  policyHash: "9NY0VnTQ-IiBriBplVUpFbczcDaEBUwsiFYAzHu_gco"};
-
-// src/presets/index.ts
-var PLACEHOLDER_PIN = {
-  mrtd: "",
-  intelRootFingerprint: ""
-};
-var BINARY_HASH_HEX = /^[0-9a-f]{64}$/i;
-var AZURE_PROD_RELEASE_PIN = {
-  mrtd: "a2e61f1316e9e367e9c1f7a0adc98c48eb13875c399c85d286cee5ea2b05e57f2df9f61d903b0ae7ac5607d843dfffc1",
-  runtimeProfile: "prod-devnet-simplified",
-  intelRootFingerprint: INTEL_SGX_ROOT_CA_FINGERPRINT_SHA256,
-  azureMaa: {
-    issuer: AZURE_PROD_MAA_TRUST.issuer,
-    jwksUrl: AZURE_PROD_MAA_TRUST.jwksUrl,
-    policyHash: AZURE_PROD_MAA_TRUST.policyHash
-  }
-};
-function invisibleProdGcp() {
-  return [
-    {
-      wsUrl: "wss://tee.invisible.exchange/ws-noise",
-      expectedHostname: "tee.invisible.exchange",
-      releasePin: { ...PLACEHOLDER_PIN },
-      requiredMode: "prod"
-    }
-  ];
-}
-function invisibleProdAzure(approvedBinaryHash) {
-  const binaryHash = typeof approvedBinaryHash === "string" ? approvedBinaryHash.toLowerCase() : "";
-  if (!BINARY_HASH_HEX.test(binaryHash)) {
-    throw new Error("invisibleProdAzure requires an approved 64-character binary SHA-256 hash");
-  }
-  return [
-    {
-      wsUrl: "wss://tee-azure.invisible.exchange/ws-noise",
-      expectedHostname: "tee-azure.invisible.exchange",
-      releasePin: { ...AZURE_PROD_RELEASE_PIN, binaryHash },
-      requiredMode: "prod"
-    }
-  ];
+// src/public-presets.ts
+function invisibleProd() {
+  return AZURE_PROD_COORDINATOR_URL;
 }
-var invisibleProd = invisibleProdAzure;
-var invisibleDevnet = invisibleProdAzure;
-function invisibleDevGcp() {
-  return [
-    {
-      wsUrl: "wss://tee-dev.invisible.exchange/ws-noise",
-      expectedHostname: "tee-dev.invisible.exchange",
-      releasePin: { ...PLACEHOLDER_PIN },
-      requiredMode: "dev"
-    }
-  ];
+function invisibleProdAzure() {
+  return AZURE_PROD_COORDINATOR_URL;
 }
-function invisibleDevAzure() {
-  return [
-    {
-      wsUrl: "wss://tee-azure-dev.invisible.exchange/ws-noise",
-      expectedHostname: "tee-azure-dev.invisible.exchange",
-      releasePin: { ...PLACEHOLDER_PIN },
-      requiredMode: "dev"
-    }
-  ];
+function invisibleDevnet() {
+  return AZURE_PROD_COORDINATOR_URL;
 }
-var invisibleDev = invisibleDevAzure;
 
-export { invisibleDev, invisibleDevAzure, invisibleDevGcp, invisibleDevnet, invisibleProd, invisibleProdAzure, invisibleProdGcp };
+export { invisibleDevnet, invisibleProd, invisibleProdAzure };
 //# sourceMappingURL=presets.js.map
 //# sourceMappingURL=presets.js.map

package/dist/presets.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/presets/azure-prod-maa.generated.ts","../src/presets/index.ts"],"names":[],"mappings":";;;;;AACO,IAAM,oBAAA,GAAuB;AAAA,EAClC,MAAA,EAAQ,wCAAA;AAAA,EACR,OAAA,EAAS,8CAAA;AAAA,EACT,UAAA,EAAY,6CAEd,CAAA;;;ACWA,IAAM,eAAA,GAAkB;AAAA,EACtB,IAAA,EAAM,EAAA;AAAA,EACN,oBAAA,EAAsB;AACxB,CAAA;AAEA,IAAM,eAAA,GAAkB,iBAAA;AAExB,IAAM,sBAAA,GAAyB;AAAA,EAC7B,IAAA,EAAM,kGAAA;AAAA,EACN,cAAA,EAAgB,wBAAA;AAAA,EAChB,oBAAA,EAAsB,oCAAA;AAAA,EACtB,QAAA,EAAU;AAAA,IACR,QAAQ,oBAAA,CAAqB,MAAA;AAAA,IAC7B,SAAS,oBAAA,CAAqB,OAAA;AAAA,IAC9B,YAAY,oBAAA,CAAqB;AAAA;AAErC,CAAA;AASO,SAAS,gBAAA,GAA0C;AACxD,EAAA,OAAO;AAAA,IACL;AAAA,MACE,KAAA,EAAO,uCAAA;AAAA,MACP,gBAAA,EAAkB,wBAAA;AAAA,MAClB,UAAA,EAAY,EAAE,GAAG,eAAA,EAAgB;AAAA,MACjC,YAAA,EAAc;AAAA;AAChB,GACF;AACF;AAGO,SAAS,mBAAmB,kBAAA,EAAmD;AACpF,EAAA,MAAM,aAAa,OAAO,kBAAA,KAAuB,QAAA,GAAW,kBAAA,CAAmB,aAAY,GAAI,EAAA;AAC/F,EAAA,IAAI,CAAC,eAAA,CAAgB,IAAA,CAAK,UAAU,CAAA,EAAG;AACrC,IAAA,MAAM,IAAI,MAAM,0EAA0E,CAAA;AAAA,EAC5F;AACA,EAAA,OAAO;AAAA,IACL;AAAA,MACE,KAAA,EAAO,6CAAA;AAAA,MACP,gBAAA,EAAkB,8BAAA;AAAA,MAClB,UAAA,EAAY,EAAE,GAAG,sBAAA,EAAwB,UAAA,EAAW;AAAA,MACpD,YAAA,EAAc;AAAA;AAChB,GACF;AACF;AASO,IAAM,aAAA,GAAgB;AAGtB,IAAM,eAAA,GAAkB;AAGxB,SAAS,eAAA,GAAyC;AACvD,EAAA,OAAO;AAAA,IACL;AAAA,MACE,KAAA,EAAO,2CAAA;AAAA,MACP,gBAAA,EAAkB,4BAAA;AAAA,MAClB,UAAA,EAAY,EAAE,GAAG,eAAA,EAAgB;AAAA,MACjC,YAAA,EAAc;AAAA;AAChB,GACF;AACF;AAGO,SAAS,iBAAA,GAA2C;AACzD,EAAA,OAAO;AAAA,IACL;AAAA,MACE,KAAA,EAAO,iDAAA;AAAA,MACP,gBAAA,EAAkB,kCAAA;AAAA,MAClB,UAAA,EAAY,EAAE,GAAG,eAAA,EAAgB;AAAA,MACjC,YAAA,EAAc;AAAA;AAChB,GACF;AACF;AAGO,IAAM,YAAA,GAAe","file":"presets.js","sourcesContent":["// Generated by npm run release:trust-policy:generate-sdk. Do not edit.\nexport const AZURE_PROD_MAA_TRUST = {\n  issuer: \"https://sharedweu.weu.attest.azure.net\",\n  jwksUrl: \"https://sharedweu.weu.attest.azure.net/certs\",\n  policyHash: \"9NY0VnTQ-IiBriBplVUpFbczcDaEBUwsiFYAzHu_gco\",\n  trustSetVersion: \"azure-prod-maa-v1\",\n} as const;\n","/**\n * `@invisible-labs/sdk/presets` - optional Invisible coordinator endpoint presets.\n *\n * This is the ONLY module permitted to name an `invisible.exchange` host (spec\n * section 6.2). Partners who self-host ignore it entirely and pass their own\n * `CoordinatorEndpoint[]` to `createSession`. The core never imports this module.\n *\n * Production presets embed an approved Azure TDX boot measurement and trust\n * roots. The caller must provide the separately approved coordinator binary\n * hash before a production endpoint can be constructed. Dormant or\n * development targets keep placeholders until approval.\n */\n\nimport { INTEL_SGX_ROOT_CA_FINGERPRINT_SHA256 } from \"../attestation/verifier.js\";\nimport type { CoordinatorEndpoint } from \"../schemas/types.generated.js\";\nimport { AZURE_PROD_MAA_TRUST } from \"./azure-prod-maa.generated.js\";\n\nconst PLACEHOLDER_PIN = {\n  mrtd: \"\",\n  intelRootFingerprint: \"\",\n} as const;\n\nconst BINARY_HASH_HEX = /^[0-9a-f]{64}$/i;\n\nconst AZURE_PROD_RELEASE_PIN = {\n  mrtd: \"a2e61f1316e9e367e9c1f7a0adc98c48eb13875c399c85d286cee5ea2b05e57f2df9f61d903b0ae7ac5607d843dfffc1\",\n  runtimeProfile: \"prod-devnet-simplified\",\n  intelRootFingerprint: INTEL_SGX_ROOT_CA_FINGERPRINT_SHA256,\n  azureMaa: {\n    issuer: AZURE_PROD_MAA_TRUST.issuer,\n    jwksUrl: AZURE_PROD_MAA_TRUST.jwksUrl,\n    policyHash: AZURE_PROD_MAA_TRUST.policyHash,\n  },\n} as const;\n\n/**\n * Production GCP TDX coordinator endpoint.\n *\n * Currently dormant: GCP is neither the live production nor development TEE\n * path. Kept only for a future explicit GCP relight, or a partner self-hosting\n * on GCP.\n */\nexport function invisibleProdGcp(): CoordinatorEndpoint[] {\n  return [\n    {\n      wsUrl: \"wss://tee.invisible.exchange/ws-noise\",\n      expectedHostname: \"tee.invisible.exchange\",\n      releasePin: { ...PLACEHOLDER_PIN },\n      requiredMode: \"prod\",\n    },\n  ];\n}\n\n/** Production Azure TDX coordinator endpoint for the current prod/devnet release. */\nexport function invisibleProdAzure(approvedBinaryHash: string): CoordinatorEndpoint[] {\n  const binaryHash = typeof approvedBinaryHash === \"string\" ? approvedBinaryHash.toLowerCase() : \"\";\n  if (!BINARY_HASH_HEX.test(binaryHash)) {\n    throw new Error(\"invisibleProdAzure requires an approved 64-character binary SHA-256 hash\");\n  }\n  return [\n    {\n      wsUrl: \"wss://tee-azure.invisible.exchange/ws-noise\",\n      expectedHostname: \"tee-azure.invisible.exchange\",\n      releasePin: { ...AZURE_PROD_RELEASE_PIN, binaryHash },\n      requiredMode: \"prod\",\n    },\n  ];\n}\n\n/**\n * The currently-active Invisible production preset. Integrators that just want\n * \"Invisible prod\" use this and stay on whichever cloud is live.\n *\n * Switching the prod target between Azure and GCP is this one line:\n * `export const invisibleProd = invisibleProdAzure` -> `invisibleProdGcp`.\n */\nexport const invisibleProd = invisibleProdAzure;\n\n/** Public Invisible devnet, served by the simplified Azure prod coordinator. */\nexport const invisibleDevnet = invisibleProdAzure;\n\n/** Dormant GCP development coordinator endpoint. Not the active dev target today. */\nexport function invisibleDevGcp(): CoordinatorEndpoint[] {\n  return [\n    {\n      wsUrl: \"wss://tee-dev.invisible.exchange/ws-noise\",\n      expectedHostname: \"tee-dev.invisible.exchange\",\n      releasePin: { ...PLACEHOLDER_PIN },\n      requiredMode: \"dev\",\n    },\n  ];\n}\n\n/** Azure development coordinator endpoint. The active dev TEE today. */\nexport function invisibleDevAzure(): CoordinatorEndpoint[] {\n  return [\n    {\n      wsUrl: \"wss://tee-azure-dev.invisible.exchange/ws-noise\",\n      expectedHostname: \"tee-azure-dev.invisible.exchange\",\n      releasePin: { ...PLACEHOLDER_PIN },\n      requiredMode: \"dev\",\n    },\n  ];\n}\n\n/** The currently-active Invisible development preset. */\nexport const invisibleDev = invisibleDevAzure;\n"]}
+{"version":3,"sources":["../src/public-presets.ts"],"names":[],"mappings":";;;;;;AAIO,SAAS,aAAA,GAAwB;AACtC,EAAA,OAAO,0BAAA;AACT;AAEO,SAAS,kBAAA,GAA6B;AAC3C,EAAA,OAAO,0BAAA;AACT;AAEO,SAAS,eAAA,GAA0B;AACxC,EAAA,OAAO,0BAAA;AACT","file":"presets.js","sourcesContent":["/** Public coordinator URL conveniences. Policy construction stays internal. */\n\nimport { AZURE_PROD_COORDINATOR_URL } from \"./presets/production.js\";\n\nexport function invisibleProd(): string {\n  return AZURE_PROD_COORDINATOR_URL;\n}\n\nexport function invisibleProdAzure(): string {\n  return AZURE_PROD_COORDINATOR_URL;\n}\n\nexport function invisibleDevnet(): string {\n  return AZURE_PROD_COORDINATOR_URL;\n}\n"]}

package/dist/{errors-N2touVm4.d.ts → types.generated-DJBTjLpP.d.ts}

@@ -122,4 +122,40 @@ declare function isInvisibleError(value: unknown): value is InvisibleError;
  */
 declare function normalizeError(error: unknown, fallback?: string): string;
 
-export { AttestationError as A, CommandError as C, InvalidDepositAmountError as I, LpLifecycleError as L, NotImplementedError as N, PolicyValidationError as P, RoutingError as R, StorageError as S, TransportError as T, WalletError as W, type AttestationErrorCode as a, type CommandErrorCode as b, type CommandErrorOptions as c, type CoordinatorWireErrorCode as d, InvisibleError as e, type InvisibleErrorCode as f, type InvisibleErrorOptions as g, type LpLifecycleErrorCode as h, type NotImplementedErrorCode as i, type PolicyValidationErrorCode as j, type RoutingErrorCode as k, type StorageErrorCode as l, type TransportErrorCode as m, type WalletErrorCode as n, isInvisibleError as o, normalizeError as p };
+type LpPositionView = {
+    readonly id: string;
+    readonly status: "dkg_pending" | "active" | "withdrawing" | "closed";
+    readonly targetShardCount: number;
+    readonly authPublicKey: string;
+    readonly refillPublicKey: string;
+    readonly withdrawalCommitment: string;
+    readonly committedLamports: number;
+    readonly earnedLamports: number;
+    readonly refillThreshold: number;
+    readonly shards: readonly {
+        readonly [key: string]: unknown;
+    }[];
+    readonly createdAt: number;
+};
+type PayoutDestination = {
+    readonly address: string;
+    readonly sharePercent: number;
+    readonly minDelayMs?: number;
+    readonly maxDelayMs?: number;
+    readonly minLamports?: number;
+};
+type PayoutPolicy = {
+    readonly destinations: readonly PayoutDestination[];
+    readonly totalDeadlineMs?: number;
+    readonly batchExclusionId?: string;
+};
+type StorageEnvelope = {
+    readonly namespace: string;
+    readonly key: string;
+    readonly alg: "AES-GCM" | "none";
+    readonly ciphertext: string;
+    readonly iv?: string;
+    readonly createdAtMs: number;
+};
+
+export { AttestationError as A, CommandError as C, InvalidDepositAmountError as I, LpLifecycleError as L, NotImplementedError as N, type PayoutPolicy as P, RoutingError as R, type StorageEnvelope as S, TransportError as T, WalletError as W, type AttestationErrorCode as a, type CommandErrorCode as b, type CommandErrorOptions as c, type CoordinatorWireErrorCode as d, InvisibleError as e, type InvisibleErrorCode as f, type InvisibleErrorOptions as g, type LpLifecycleErrorCode as h, type LpPositionView as i, type NotImplementedErrorCode as j, type PayoutDestination as k, PolicyValidationError as l, type PolicyValidationErrorCode as m, type RoutingErrorCode as n, StorageError as o, type StorageErrorCode as p, type TransportErrorCode as q, type WalletErrorCode as r, isInvisibleError as s, normalizeError as t };

package/dist/user.d.ts

@@ -1,6 +1,6 @@
 import { S as Session } from './session-DFuy54C-.js';
-import { P as PayoutPolicy } from './types.generated-BSEBz4jR.js';
-export { I as InvalidDepositAmountError } from './errors-N2touVm4.js';
+import { P as PayoutPolicy } from './types.generated-DJBTjLpP.js';
+export { I as InvalidDepositAmountError } from './types.generated-DJBTjLpP.js';
 
 /**
  * Acceptance receipts (spec section 8.2).
@@ -19,6 +19,15 @@ interface AcceptanceReceipt {
 }
 
 type ClientSwapState = "new" | "awaiting_dkg" | "awaiting_deposit" | "awaiting_delegation" | "awaiting_delegate_ack" | "awaiting_delegate_ack_after_deposit" | "ready_for_settlement" | "settling" | "completed" | "refunded" | "failed";
+type PayoutSpec = {
+    readonly mode: "instant";
+    readonly destination_address: string;
+} | {
+    readonly mode: "scheduled";
+    readonly num_fragments: number;
+    readonly window_seconds: number;
+    readonly destination_addresses: readonly string[];
+};
 type SpendingPolicySnapshot = {
     readonly asset: "SOL";
     readonly entry_amount_lamports: number;
@@ -62,14 +71,16 @@ type PayoutWindowSyncSnapshot = {
     readonly deadline_ms: number | null;
 };
 type NormalUserContractStatus = "deposit" | "activating" | "active" | "settling" | "completed" | "refunded" | "expired";
-type NormalUserSettlementPhase = "awaiting_deposit" | "activating" | "waiting_for_liquidity" | "matched_scheduled" | "locked_pending_payout" | "submitted" | "confirming" | "completed" | "refund_pending" | "refunded" | "expired";
+type NormalUserSettlementPhase = "awaiting_deposit" | "activating" | "waiting_for_liquidity" | "retry_delayed" | "recovery_required" | "matched_scheduled" | "locked_pending_payout" | "submitted" | "confirming" | "completed" | "refund_pending" | "refunded" | "expired";
 type NormalUserRefundability = "available_now" | "request_pending" | "blocked_by_lock" | "stale" | "unavailable";
+type NormalUserRefundStatus = "queued" | "reserved" | "submitted" | "confirming" | "retrying" | "finalized" | "failed" | "partial" | "canceled";
 type SourceLiquidityUse = "not_materialized" | "available" | "locked_for_payout" | "pending_finality" | "spent" | "released";
 type NormalUserContractSyncSnapshot = {
     readonly contract_id: string;
     readonly status: NormalUserContractStatus;
     readonly settlement_phase: NormalUserSettlementPhase;
     readonly refundability: NormalUserRefundability;
+    readonly refund_status: NormalUserRefundStatus | null;
     readonly source_liquidity_use: SourceLiquidityUse;
     readonly destination_wallet: string | null;
     readonly deposit_amount_lamports: number;
@@ -79,6 +90,7 @@ type NormalUserContractSyncSnapshot = {
     readonly settled_amount_lamports: number;
     readonly protocol_fee_lamports: number;
     readonly network_fee_lost_lamports: readonly number[];
+    readonly recovery_refund_remaining_lamports: number;
     readonly withdrawal_requested_lamports: number;
     readonly withdrawal_landed_lamports: number;
     readonly withdrawal_landed_fee_lamports: number;
@@ -115,6 +127,45 @@ type RefundAcceptanceReceipt = AcceptanceReceipt & {
     readonly amountLamports: number;
     readonly acceptedAtMs?: number;
 };
+type RunSwapParams = {
+    amountLamports: number;
+    payoutSpec: PayoutSpec;
+    payoutDeadlineMs?: number;
+    onPolicySnapshot?: (policy: SpendingPolicySnapshot) => void;
+    recoveryCommitment?: Uint8Array;
+    syncSecret?: Uint8Array;
+    onSyncSecretReady?: (info: {
+        secretHex: string;
+    }) => void | Promise<void>;
+    resumeSecret?: Uint8Array;
+    onResumeSecretReady?: (info: {
+        secretHex: string;
+    }) => void | Promise<void>;
+    onSwapAllocated?: (info: {
+        swapId: string;
+        syncSecretHex: string;
+        resumeSecretHex: string;
+    }) => void | Promise<void>;
+    onRecoveryCodeReady?: (info: {
+        codeHex: string;
+    }) => void | Promise<void>;
+    onDelegateShareReady?: (info: {
+        swapId: string;
+        delegateShare: Uint8Array;
+    }) => void | Promise<void>;
+    delegateShare?: Uint8Array;
+    onDepositAddressReady?: (info: {
+        swapId: string;
+        jointPublicKey: Uint8Array;
+        amountLamports: number;
+        depositExpiresAtMs: number;
+        coordinatorTimestampMs: number;
+    }) => void | Promise<void>;
+    onDepositConfirmed?: (info: {
+        originAddress: string | undefined;
+    }) => void | Promise<void>;
+    payoutWindowMs?: number;
+};
 /**
  * Details returned once the coordinator has accepted, initialized, and
  * durably delegated a contract, but before the user's deposit is observed.
@@ -134,11 +185,34 @@ type ContractRequestResult = {
     /** The read-only status secret. The caller must persist it if it needs sync. */
     readonly syncSecret: Uint8Array;
     readonly syncSecretHex: string;
+    /** The pre-delegation mutation secret. Persist it only for resume/recovery workflows. */
+    readonly resumeSecret: Uint8Array;
+    readonly resumeSecretHex: string;
     /** Present when the SDK generated the Recovery Code for this request. */
     readonly recoveryCodeHex?: string;
     readonly policySnapshot: SpendingPolicySnapshot;
     readonly delegatePolicySnapshot: SpendingPolicySnapshot;
 };
+/** Inputs for resuming an already allocated pre-delegation contract. */
+type ResumePreDelegationParams = {
+    readonly swapId: string;
+    readonly resumeSecret: Uint8Array;
+    readonly syncSecret?: Uint8Array;
+    readonly recoveryCommitment: Uint8Array;
+    /** The policy snapshot persisted when the contract was first allocated. */
+    readonly policySnapshot: SpendingPolicySnapshot;
+    /** Called before DkgRound2 so recovery can persist the generated Alice share. */
+    readonly onDelegateShareReady?: RunSwapParams["onDelegateShareReady"];
+    /** Supply the previously generated Alice share when DKG was already sealed. */
+    readonly delegateShare?: Uint8Array;
+};
+type ResumePreDelegationResult = {
+    readonly swapId: string;
+    readonly jointPublicKey?: Uint8Array;
+    readonly depositExpiresAtMs?: number;
+    readonly coordinatorTimestampMs?: number;
+    readonly delegatedAtMs: number;
+};
 
 /**
  * Payout policy validation (spec sections 4.3.1 and 10.1).
@@ -214,12 +288,29 @@ interface ContractRequestArgs {
     readonly onSyncSecretReady?: (info: {
         secretHex: string;
     }) => void | Promise<void>;
+    /** Optional precomputed pre-delegation mutation secret, copied before it reaches the wire. */
+    readonly resumeSecret?: Uint8Array;
+    /** Called before ContractRequest so the caller can persist the resume secret. */
+    readonly onResumeSecretReady?: (info: {
+        secretHex: string;
+    }) => void | Promise<void>;
+    /** Called after allocation so the caller can persist both secrets with the swap id. */
+    readonly onSwapAllocated?: (info: {
+        swapId: string;
+        syncSecretHex: string;
+        resumeSecretHex: string;
+    }) => void | Promise<void>;
     /** Optional precomputed Recovery Code commitment for caller-managed recovery. */
     readonly recoveryCommitment?: Uint8Array;
     /** Called before DelegateShare so the caller can persist the generated code. */
     readonly onRecoveryCodeReady?: (info: {
         codeHex: string;
     }) => void | Promise<void>;
+    /** Called before DkgRound2 so the caller can persist the generated Alice share. */
+    readonly onDelegateShareReady?: (info: {
+        swapId: string;
+        delegateShare: Uint8Array;
+    }) => void | Promise<void>;
 }
 /**
  * Start a new pool entry through the current normal-user coordinator flow.
@@ -235,18 +326,26 @@ interface ContractRequestArgs {
  *   session cannot complete the DKG/delegation boundary.
  */
 declare function contractRequest(session: Session, args: ContractRequestArgs): Promise<ContractRequestResult>;
+/** Resume pre-delegation DKG or delegation on a caller-owned Session. */
+declare function resumePreDelegation(session: Session, args: ResumePreDelegationParams): Promise<ResumePreDelegationResult>;
 /** Read the actor-scoped lifecycle projection for a normal-user contract. */
 declare function sync(session: Session, contractId: string, syncSecret: Uint8Array, timeoutMs?: number): Promise<SyncUserResponse>;
 /** Arguments to refund a pool entry with the Recovery Code preimage. */
 interface RequestRefundArgs {
+    /** Optional contract correlation required when multiple contracts share one Session. */
+    readonly swapId?: string;
+    /** Optional status secret used to restore the correlated contract context. */
+    readonly syncSecret?: Uint8Array;
     /** The 32-byte Recovery Code preimage. */
     readonly recoveryCode: Uint8Array;
 }
 /**
- * Submit a normal-user `withdraw_request` with only the Recovery Code preimage
- * (`{ recovery_code }`). The coordinator queues a durable origin-bound
- * withdrawal intent and terminal outcome is recovered through sync/status
- * reads. No caller-supplied destination is accepted.
+ * Submit a normal-user `withdraw_request` with the Recovery Code preimage
+ * (`{ recovery_code }`). Pass `swapId` and `syncSecret` when multiple contracts
+ * share one Session so the request is correlated to the intended contract.
+ * The coordinator queues a durable origin-bound withdrawal intent and terminal
+ * outcome is recovered through sync/status reads. No caller-supplied destination
+ * is accepted.
  *
  * @returns An acceptance receipt keyed by the resolved V0 `swapId`, including
  *   the coordinator-authoritative amount accepted for withdrawal. The
@@ -257,4 +356,4 @@ interface RequestRefundArgs {
  */
 declare function requestRefund(session: Session, args: RequestRefundArgs): Promise<RefundAcceptanceReceipt>;
 
-export { type ContractRequestArgs, type ContractRequestResult, INSTANT_PAYOUT_WINDOW_MS, MAX_ENTRY_AMOUNT_LAMPORTS, MIN_ENTRY_AMOUNT_LAMPORTS, type NormalUserActorSyncSnapshot, type NormalUserRefundability, type NormalUserSettlementPhase, PAYOUT_WINDOW_MILLISECONDS_PER_SECOND, type PayoutExecutedPayload, RECOVERY_CODE_BYTE_LENGTH, type RefundAcceptanceReceipt, type RefundExecutedPayload, type RequestRefundArgs, SUPPORTED_TOTAL_DEADLINE_MS, type SourceLiquidityUse, type SpendingPolicySnapshot, type SyncUserResponse, type SyncUserResponsePayload, type WithdrawExecutedPayload, commitmentFromCode, contractRequest, generateRecoveryCode, recoveryCodeFromHex, recoveryCodeFromUserInput, recoveryCodeToHex, requestRefund, sync };
+export { type ContractRequestArgs, type ContractRequestResult, INSTANT_PAYOUT_WINDOW_MS, MAX_ENTRY_AMOUNT_LAMPORTS, MIN_ENTRY_AMOUNT_LAMPORTS, type NormalUserActorSyncSnapshot, type NormalUserRefundability, type NormalUserSettlementPhase, PAYOUT_WINDOW_MILLISECONDS_PER_SECOND, type PayoutExecutedPayload, RECOVERY_CODE_BYTE_LENGTH, type RefundAcceptanceReceipt, type RefundExecutedPayload, type RequestRefundArgs, type ResumePreDelegationParams, type ResumePreDelegationResult, SUPPORTED_TOTAL_DEADLINE_MS, type SourceLiquidityUse, type SpendingPolicySnapshot, type SyncUserResponse, type SyncUserResponsePayload, type WithdrawExecutedPayload, commitmentFromCode, contractRequest, generateRecoveryCode, recoveryCodeFromHex, recoveryCodeFromUserInput, recoveryCodeToHex, requestRefund, resumePreDelegation, sync };