@kingdomchain/wallet-client 0.4.1 → 0.5.0

package/README.md

@@ -6,6 +6,7 @@ Self-contained TypeScript package for constructing, signing, and broadcasting Ki
 
 - **MsgSubmitApplication** (citizenship application)
 - **MsgSubmitRecoveryAttestation** (wallet recovery attestation)
+- **MsgClaimReward** + citizen wallet helpers (v0.5.0) — balance query, unclaimed rewards, send/claim tx builders, feegrant granter lookup, `broadcastAndConfirmTx`
 - **Browser wallet connector** (`src/browserSigner.ts`) — Keplr / Leap / Cosmostation via `experimentalSuggestChain` + `OfflineDirectSigner`
 - **WalletConnect mobile signer** (`src/walletConnectSigner.ts`) — WalletConnect v2 `OfflineDirectSigner` adapter
 - **Embedded passkey wallet** (`src/embeddedWallet/`) — WebAuthn PRF + PBKDF2 fallback, IndexedDB vault, mandatory backup gate
@@ -82,9 +83,9 @@ Optional Vite env overrides (prefix `VITE_`):
 
 The demo signs the provider attestation off-chain (devnet seed) and broadcasts `MsgSubmitApplication` using your connected wallet as the on-chain tx signer.
 
-## Kingdom OS / Base44 reference wiring
+## Kingdom OS / Vercel reference wiring
 
-Copy-paste React integration lives in `clients/kingdom-os-reference/`:
+Copy-paste React integration lives in `clients/kingdom-os-reference/` (for the **kingdom-os** Vercel app — Base44 is superseded):
 
 - `useKingdomWallet.js` — unified hook for Keplr, Leap, Cosmostation, WalletConnect, embedded passkey
 - `WalletStep.jsx` — onboarding UI with side-by-side connect buttons

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import { Registry, OfflineDirectSigner, DirectSecp256k1Wallet, EncodeObject } from '@cosmjs/proto-signing';
-import { SigningStargateClient } from '@cosmjs/stargate';
+import { SigningStargateClient, DeliverTxResponse, IndexedTx, StdFee } from '@cosmjs/stargate';
 import SignClient from '@walletconnect/sign-client';
 import { SessionTypes, ProposalTypes } from '@walletconnect/types';
 import { BinaryWriter, BinaryReader } from '@bufbuild/protobuf/wire';
@@ -46,7 +46,7 @@ interface MsgSubmitApplication {
     expires_at?: Date | undefined;
     signature: string;
 }
-declare const MsgSubmitApplication: MessageFns<MsgSubmitApplication>;
+declare const MsgSubmitApplication: MessageFns$2<MsgSubmitApplication>;
 interface MsgSubmitRecoveryAttestation {
     applicant_wallet: string;
     recovery_case_id: string;
@@ -64,16 +64,16 @@ interface MsgSubmitRecoveryAttestation {
     expires_at?: Date | undefined;
     signature: string;
 }
-declare const MsgSubmitRecoveryAttestation: MessageFns<MsgSubmitRecoveryAttestation>;
-type Builtin = Date | Function | Uint8Array | string | number | boolean | bigint | undefined;
-type DeepPartial<T> = T extends bigint ? string | number | bigint : T extends Builtin ? T : T extends globalThis.Array<infer U> ? globalThis.Array<DeepPartial<U>> : T extends ReadonlyArray<infer U> ? ReadonlyArray<DeepPartial<U>> : T extends {} ? {
-    [K in keyof T]?: DeepPartial<T[K]>;
+declare const MsgSubmitRecoveryAttestation: MessageFns$2<MsgSubmitRecoveryAttestation>;
+type Builtin$2 = Date | Function | Uint8Array | string | number | boolean | bigint | undefined;
+type DeepPartial$2<T> = T extends bigint ? string | number | bigint : T extends Builtin$2 ? T : T extends globalThis.Array<infer U> ? globalThis.Array<DeepPartial$2<U>> : T extends ReadonlyArray<infer U> ? ReadonlyArray<DeepPartial$2<U>> : T extends {} ? {
+    [K in keyof T]?: DeepPartial$2<T[K]>;
 } : Partial<T>;
-interface MessageFns<T> {
+interface MessageFns$2<T> {
     encode(message: T, writer?: BinaryWriter): BinaryWriter;
     decode(input: BinaryReader | Uint8Array, length?: number): T;
-    create(base?: DeepPartial<T>): T;
-    fromPartial(object: DeepPartial<T>): T;
+    create(base?: DeepPartial$2<T>): T;
+    fromPartial(object: DeepPartial$2<T>): T;
 }
 
 declare enum ApplicationStatus {
@@ -93,7 +93,7 @@ declare enum RecoveryAttestationStatus {
     UNRECOGNIZED = -1
 }
 
-/** CosmJS registry: standard Cosmos SDK types + Kingdom Chain citizen/compliance messages. */
+/** CosmJS registry: standard Cosmos SDK types + Kingdom Chain citizen/compliance/rewards messages. */
 declare function createKingdomChainRegistry(): Registry;
 
 /** Keplr/Leap-compatible currency entry. */
@@ -301,6 +301,11 @@ declare class EmbeddedWalletBackupRequiredError extends Error {
 declare class EmbeddedWalletVaultError extends Error {
     constructor(message: string, cause?: unknown);
 }
+/** Thrown when AES-GCM decryption fails (wrong KEK or tampered ciphertext). */
+declare class EmbeddedWalletDecryptError extends EmbeddedWalletVaultError {
+    readonly code: "decrypt_failed";
+    constructor(cause?: unknown);
+}
 type PasscodeStrengthLabel = "weak" | "fair" | "good" | "strong";
 type PasscodeBlockReason = "denylist" | "too_weak" | "numeric_short";
 /** Thrown when too many failed passcode unlock attempts trigger a timed lockout. */
@@ -402,14 +407,21 @@ declare function decodeCredentialId(encoded: string): Uint8Array;
 declare function embeddedPlaintextToSigner(plaintext: EmbeddedWalletPlaintext, prefix?: string): Promise<DirectSecp256k1Wallet>;
 declare function defaultEmbeddedHdPath(): string;
 
+/** Legacy unscoped vault key used before per-account scoping shipped. */
+declare const VAULT_LEGACY_KEY = "primary";
+interface VaultStorageOptions {
+    /** When set, vault is stored under this account-scoped key instead of {@link VAULT_LEGACY_KEY}. */
+    scopeId?: string;
+}
 interface PasscodeLockoutRecord {
     failedAttempts: number;
     lockoutTier: number;
     lockedUntil: string | null;
 }
-declare function saveVaultToIndexedDb(vault: EmbeddedWalletVaultV1): Promise<void>;
-declare function loadVaultFromIndexedDb(): Promise<EmbeddedWalletVaultV1 | null>;
-declare function clearVaultFromIndexedDb(): Promise<void>;
+declare function resolveVaultStorageKey(scopeId?: string): string;
+declare function saveVaultToIndexedDb(vault: EmbeddedWalletVaultV1, options?: VaultStorageOptions): Promise<void>;
+declare function loadVaultFromIndexedDb(options?: VaultStorageOptions): Promise<EmbeddedWalletVaultV1 | null>;
+declare function clearVaultFromIndexedDb(options?: VaultStorageOptions): Promise<void>;
 declare function loadPasscodeLockoutRecord(publicAddress: string): Promise<PasscodeLockoutRecord | null>;
 declare function savePasscodeLockoutRecord(publicAddress: string, record: PasscodeLockoutRecord): Promise<void>;
 declare function clearPasscodeLockoutRecord(publicAddress: string): Promise<void>;
@@ -420,6 +432,8 @@ declare const PASSCODE_LOCKOUT_FAILURE_THRESHOLD = 5;
 declare const PASSCODE_LOCKOUT_INITIAL_MS = 30000;
 /** Maximum lockout duration (15 minutes). */
 declare const PASSCODE_LOCKOUT_MAX_MS = 900000;
+/** Pure lockout duration for a tier (exported for property tests). */
+declare function computePasscodeLockoutDurationMs(tier: number): number;
 /** Throws when the vault is temporarily locked after too many failed unlock attempts. */
 declare function assertPasscodeUnlockAllowed(publicAddress: string): Promise<void>;
 /** Record a failed passcode unlock attempt; triggers lockout at threshold. */
@@ -429,8 +443,6 @@ declare function recordPasscodeUnlockSuccess(publicAddress: string): Promise<voi
 declare function getPasscodeLockoutState(publicAddress: string): Promise<PasscodeLockoutRecord & {
     retryAfterMs: number;
 }>;
-/** @internal Test helper — reset lockout without clearing vault. */
-declare function clearPasscodeLockoutForTests(publicAddress: string): Promise<void>;
 
 interface PasscodeStrengthResult {
     score: 0 | 1 | 2 | 3 | 4;
@@ -453,8 +465,8 @@ declare const EMBEDDED_WALLET_PASSCODE_MAX_LENGTH = 128;
  * Uses native Web Crypto — no WASM bundle required.
  */
 declare const EMBEDDED_WALLET_PIN_PBKDF2_ITERATIONS = 600000;
-/** Legacy passkey PBKDF2 fallback iteration count (pre-PIN vaults). */
-declare const EMBEDDED_WALLET_PASSKEY_PBKDF2_ITERATIONS = 310000;
+/** Passkey PBKDF2 fallback iteration count (matches PIN path; OWASP 2023 guidance). */
+declare const EMBEDDED_WALLET_PASSKEY_PBKDF2_ITERATIONS = 600000;
 declare function normalizePasscode(passcode: string): string;
 /** Validate citizen-chosen passcode before KDF. */
 declare function assertValidPasscode(passcode: string): void;
@@ -479,16 +491,20 @@ declare function recoveryMnemonicAddress(mnemonic: string, keyType: EmbeddedWall
 /** Build the recovery phrase for an unlocked plaintext payload. */
 declare function recoveryMnemonicFromPlaintext(plaintext: EmbeddedWalletPlaintext): string;
 
-interface CreateEmbeddedWalletOptions {
+interface EmbeddedWalletScopeOptions {
+    /** Supabase user id or other account key — scopes IndexedDB vault storage per account. */
+    scopeId?: string;
+}
+interface CreateEmbeddedWalletOptions extends EmbeddedWalletScopeOptions {
     passcode: string;
 }
-interface UnlockEmbeddedWalletOptions {
+interface UnlockEmbeddedWalletOptions extends EmbeddedWalletScopeOptions {
     passcode?: string;
 }
-interface RevealEmbeddedRecoveryPhraseOptions {
+interface RevealEmbeddedRecoveryPhraseOptions extends EmbeddedWalletScopeOptions {
     passcode?: string;
 }
-interface RecoverEmbeddedWalletOptions {
+interface RecoverEmbeddedWalletOptions extends EmbeddedWalletScopeOptions {
     passcode: string;
     mnemonic: string;
     /** When omitted, inferred from expectedAddress or defaults to hd-derived. */
@@ -499,13 +515,25 @@ interface RecoverEmbeddedWalletOptions {
     /** When true, replaces an existing vault on this device (e.g. after device loss). */
     replaceExisting?: boolean;
 }
-interface EnableEmbeddedPasskeyUnlockOptions {
+interface EnableEmbeddedPasskeyUnlockOptions extends EmbeddedWalletScopeOptions {
     passcode: string;
     userId: Uint8Array;
     userName: string;
     displayName: string;
     rpId?: string;
 }
+interface MigrateLegacyEmbeddedWalletOptions extends EmbeddedWalletScopeOptions {
+    scopeId: string;
+    passcode?: string;
+}
+interface ImportEmbeddedBackupOptions extends EmbeddedWalletScopeOptions {
+    /** When true, replaces an existing vault on this device (e.g. intentional restore). */
+    replaceExisting?: boolean;
+}
+interface ClearEmbeddedWalletOptions extends EmbeddedWalletScopeOptions {
+}
+interface AcknowledgeEmbeddedBackupOptions extends EmbeddedWalletScopeOptions {
+}
 interface EmbeddedWalletSession {
     address: string;
     vault: EmbeddedWalletVaultV1;
@@ -513,8 +541,15 @@ interface EmbeddedWalletSession {
 }
 declare function vaultUsesPasskeyUnlock(vault: EmbeddedWalletVaultV1): boolean;
 declare function vaultUsesPasscodeUnlock(vault: EmbeddedWalletVaultV1): boolean;
-/** Returns true if an encrypted vault exists in IndexedDB. */
-declare function hasEmbeddedWallet(): Promise<boolean>;
+/** Returns true if an encrypted vault exists under the given scope (not the legacy key). */
+declare function hasEmbeddedWallet(options?: EmbeddedWalletScopeOptions): Promise<boolean>;
+/** Returns true if an unscoped legacy vault still exists under the "primary" key. */
+declare function hasLegacyEmbeddedWallet(): Promise<boolean>;
+/**
+ * Verify ownership of a legacy "primary" vault, copy it to a scoped key, and remove the legacy entry.
+ * Does not run automatically — callers must confirm with the user first.
+ */
+declare function migrateLegacyEmbeddedWallet(options: MigrateLegacyEmbeddedWalletOptions): Promise<EmbeddedWalletSession>;
 /** Create passcode-protected encrypted vault; does not unlock signer until backup is acknowledged. */
 declare function createEmbeddedWallet(options: CreateEmbeddedWalletOptions): Promise<{
     address: string;
@@ -551,11 +586,11 @@ declare function getEmbeddedWalletSession(): EmbeddedWalletSession | null;
 /** Offline signer for CosmJS; enforces backup gate before signing. */
 declare function getEmbeddedOfflineSigner(): OfflineDirectSigner;
 /** Mark backup downloaded/acknowledged and persist. Returns backup file payload. */
-declare function acknowledgeEmbeddedBackup(): Promise<EmbeddedWalletBackupFileV1>;
+declare function acknowledgeEmbeddedBackup(options?: AcknowledgeEmbeddedBackupOptions): Promise<EmbeddedWalletBackupFileV1>;
 declare function downloadEmbeddedBackupFile(backup: EmbeddedWalletBackupFileV1, filename?: string): void;
 /** Restore vault from user-held backup file (requires passcode or passkey to decrypt). */
-declare function importEmbeddedBackup(json: string): Promise<EmbeddedWalletVaultV1>;
-declare function clearEmbeddedWallet(): Promise<void>;
+declare function importEmbeddedBackup(json: string, options?: ImportEmbeddedBackupOptions): Promise<EmbeddedWalletVaultV1>;
+declare function clearEmbeddedWallet(options?: ClearEmbeddedWalletOptions): Promise<void>;
 
 /**
  * Kingdom Chain on-chain denom and display metadata.
@@ -599,4 +634,109 @@ declare function signCitizenshipAttestation(params: SubmitApplicationParams): Pr
     input: AttestationPayloadInput;
 }>;
 
-export { ATTESTATION_TYPE_CITIZENSHIP_APPLICATION, ATTESTATION_TYPE_RECOVERY, ApplicationStatus, type AttestationPayloadInput, BECH32_PREFIX, type BrowserWalletApi, CHAIN_COIN_TYPE, type ChainCurrency, type ChainInfo, type CosmostationWindowApi, type CreateEmbeddedWalletOptions, DEFAULT_CHAIN_ID, DEFAULT_REST_URL, DEFAULT_RPC_URL, EMBEDDED_WALLET_KDF_PBKDF2, EMBEDDED_WALLET_KDF_PIN, EMBEDDED_WALLET_KDF_PRF, EMBEDDED_WALLET_KEY_DIRECT_ENTROPY, EMBEDDED_WALLET_KEY_HD_DERIVED, EMBEDDED_WALLET_PASSCODE_MAX_LENGTH, EMBEDDED_WALLET_PASSCODE_MIN_LENGTH, EMBEDDED_WALLET_PASSKEY_PBKDF2_ITERATIONS, EMBEDDED_WALLET_PIN_PBKDF2_ITERATIONS, EMBEDDED_WALLET_RECOVERY_PHRASE_DIRECT_ENTROPY_WARNING, EMBEDDED_WALLET_RECOVERY_PHRASE_GENERAL_WARNING, EMBEDDED_WALLET_VAULT_VERSION, type EmbeddedWalletBackupFileV1, EmbeddedWalletBackupRequiredError, type EmbeddedWalletKdf, type EmbeddedWalletKeyType, EmbeddedWalletLockoutError, type EmbeddedWalletPlaintext, type EmbeddedWalletRecoveryPhraseReveal, type EmbeddedWalletRecoveryPhraseWarning, type EmbeddedWalletSession, EmbeddedWalletVaultError, type EmbeddedWalletVaultV1, EmbeddedWalletWeakPasscodeError, type EnableEmbeddedPasskeyUnlockOptions, type EncryptWalletOptions, InvalidChainConfigError, MsgSubmitApplication, MsgSubmitRecoveryAttestation, PASSCODE_LOCKOUT_FAILURE_THRESHOLD, PASSCODE_LOCKOUT_INITIAL_MS, PASSCODE_LOCKOUT_MAX_MS, type PasscodeBlockReason, type PasscodeLockoutRecord, type PasscodeStrengthLabel, type PasscodeStrengthResult, type PasskeyAssertionResult, type PasskeyRegistrationResult, type RecoverEmbeddedWalletOptions, RecoveryAttestationStatus, type RevealEmbeddedRecoveryPhraseOptions, RpcConnectionError, type SubmitApplicationParams, UKDR_DECIMALS, UKDR_DISPLAY_DENOM, UKDR_MINIMAL_DENOM, type UnlockEmbeddedWalletOptions, WALLETCONNECT_COSMOS_METHODS, WALLETCONNECT_COSMOS_NAMESPACE, WEBAUTHN_RP_NAME, WalletAccountError, type WalletConnectChainConfig, type WalletConnectConnectResult, type WalletConnectMetadata, WalletConnectNotInitializedError, WalletConnectSessionError, WalletConnectSigningError, WalletConnectionError, WalletConnectionRejectedError, WalletNotInstalledError, type WebAuthnPrfCapabilities, WebAuthnUnavailableError, WebAuthnUserCancelledError, acknowledgeEmbeddedBackup, addressFromHdMnemonic, addressFromPrivateKey, assertPasscodeAllowedForCreation, assertPasscodeUnlockAllowed, assertPasskey, assertValidPasscode, assertValidRecoveryMnemonic, assertVaultPermitsTransaction, attestationSignPayload, buildKingdomChainInfo, buildRequiredCosmosNamespaces, buildSubmitApplicationMsg, clearEmbeddedWallet, clearPasscodeLockoutForTests, clearPasscodeLockoutRecord, clearVaultFromIndexedDb, connectCosmostation, connectKeplr, connectLeap, connectWalletConnect, createBrowserSigningClient, createEmbeddedWallet, createHdDerivedPlaintext, createKingdomChainRegistry, createPasskeyMaterialFromAssertion, createPbkdf2Salt, createWalletConnectOfflineSigner, decodeCredentialId, decodeDirectEntropyMnemonic, decryptWalletPayload, defaultEmbeddedHdPath, deriveKekFromPasscode, deriveKekFromPbkdf2, deriveKekFromPrf, derivePrivateKeyFromHdMnemonic, detectRecoveryMnemonicKeyType, detectWebAuthnPrfCapabilities, disconnectWalletConnect, downloadEmbeddedBackupFile, embeddedPlaintextToSigner, enableEmbeddedPasskeyUnlock, encodeCredentialId, encodeDirectEntropyMnemonic, encryptWalletPayload, evaluatePasscodeStrength, exportEncryptedBackup, getCosmostationKeplrApi, getEmbeddedOfflineSigner, getEmbeddedWalletSession, getPasscodeLockoutState, hasEmbeddedWallet, hasMixedCharacterClasses, importEmbeddedBackup, initWalletConnectClient, isCosmostationAvailable, isKeplrAvailable, isLeapAvailable, loadPasscodeLockoutRecord, loadVaultFromIndexedDb, lockEmbeddedWallet, markVaultBackupAcknowledged, normalizePasscode, normalizeRecoveryMnemonic, parseEncryptedBackup, parseWalletConnectAccount, plaintextFromRecoveryMnemonic, providerSeedFromHex, publicKeyFromPrivateSeed, readPrfOutput, recordPasscodeUnlockFailure, recordPasscodeUnlockSuccess, recoverEmbeddedWalletFromMnemonic, recoveryMnemonicAddress, recoveryMnemonicFromPlaintext, registerPasskey, resolvePlaintextKeyType, restoreWalletConnectSession, revealEmbeddedRecoveryPhrase, savePasscodeLockoutRecord, saveVaultToIndexedDb, selectEmbeddedWalletKdf, serializeBackupFile, signAttestationPayload, signCitizenshipAttestation, suggestAndConnect, toWalletConnectCosmosChainId, unlockEmbeddedWallet, validateChainConfig, vaultUsesPasscodeUnlock, vaultUsesPasskeyUnlock };
+/** Parse a human KDR amount (e.g. "2" or "2.5") into ukdr base units string. */
+declare function parseKdrToUkdr(amountKdr: string): string;
+/** Format ukdr base units as KDR with up to 6 decimal places (trailing zeros trimmed). */
+declare function formatUkdrAsKdr(amountUkdr: string | bigint): string;
+declare function ukdrCoin(amountUkdr: string | bigint): {
+    denom: string;
+    amount: string;
+};
+
+/** FinalizedReward is a server-computed claimable reward for one citizen-day. */
+interface FinalizedReward {
+    day_id: bigint;
+    citizen_id: bigint;
+    claimant: string;
+    consistency_multiplier_bps: number;
+    raw_reward_ukdr: string;
+    final_reward_ukdr: string;
+    claimed: boolean;
+    expires_at_day_id: bigint;
+}
+declare const FinalizedReward: MessageFns$1<FinalizedReward>;
+type Builtin$1 = Date | Function | Uint8Array | string | number | boolean | bigint | undefined;
+type DeepPartial$1<T> = T extends bigint ? string | number | bigint : T extends Builtin$1 ? T : T extends globalThis.Array<infer U> ? globalThis.Array<DeepPartial$1<U>> : T extends ReadonlyArray<infer U> ? ReadonlyArray<DeepPartial$1<U>> : T extends {} ? {
+    [K in keyof T]?: DeepPartial$1<T[K]>;
+} : Partial<T>;
+interface MessageFns$1<T> {
+    encode(message: T, writer?: BinaryWriter): BinaryWriter;
+    decode(input: BinaryReader | Uint8Array, length?: number): T;
+    create(base?: DeepPartial$1<T>): T;
+    fromPartial(object: DeepPartial$1<T>): T;
+}
+
+declare class RestQueryError extends Error {
+    readonly status?: number | undefined;
+    constructor(message: string, status?: number | undefined, cause?: unknown);
+}
+interface BankBalanceResponse {
+    balances: Array<{
+        denom: string;
+        amount: string;
+    }>;
+}
+/** Fetch ukdr balance for an address via LCD bank query. */
+declare function fetchUkdrBalance(restUrl: string, address: string): Promise<string>;
+interface UnclaimedRewardsResponse {
+    rewards: FinalizedReward[];
+}
+/** List finalized, unexpired, unclaimed rewards for a citizen wallet. */
+declare function fetchUnclaimedFinalizedRewards(restUrl: string, address: string): Promise<FinalizedReward[]>;
+interface FeeGrantAllowancesResponse {
+    allowances: Array<{
+        granter: string;
+        grantee: string;
+        allowance?: unknown;
+    }>;
+}
+/**
+ * Returns the first active feegrant granter for grantee, if any.
+ * Kingdom OS should grant claim gas via DEC-010 hot wallet before first claim.
+ */
+declare function fetchFeeGrantGranter(restUrl: string, grantee: string): Promise<string | null>;
+
+declare class CitizenTxError extends Error {
+    readonly code: CitizenTxErrorCode;
+    constructor(message: string, code: CitizenTxErrorCode, cause?: unknown);
+}
+type CitizenTxErrorCode = "INSUFFICIENT_FEE" | "INSUFFICIENT_BALANCE" | "SEQUENCE_MISMATCH" | "TX_FAILED" | "TIMEOUT" | "INVALID_INPUT";
+interface BroadcastConfirmOptions {
+    /** Poll interval while waiting for inclusion (default 1500ms). */
+    pollIntervalMs?: number;
+    /** Max wait after broadcast before TIMEOUT (default 90s). */
+    timeoutMs?: number;
+}
+interface BroadcastConfirmResult {
+    hash: string;
+    height: number;
+    code: number;
+    rawLog: string;
+    /** Tx result after broadcast (DeliverTxResponse) or re-indexed confirmation (IndexedTx). */
+    deliverTx: DeliverTxResponse | IndexedTx;
+}
+declare function buildSendUkdrMsg(fromAddress: string, toAddress: string, amountKdr: string): EncodeObject;
+declare function buildClaimRewardMsg(claimer: string, dayId: bigint | number): EncodeObject;
+declare function defaultUkdrTxFee(feeUkdr?: string, feeGranter?: string): StdFee;
+declare function citizenTxErrorMessage(code: CitizenTxErrorCode): string;
+/** Broadcast a signed tx and wait until it is indexed with a definitive result code. */
+declare function broadcastAndConfirmTx(client: SigningStargateClient, signerAddress: string, messages: readonly EncodeObject[], fee: StdFee | "auto" | number, memo?: string, options?: BroadcastConfirmOptions): Promise<BroadcastConfirmResult>;
+
+/** MsgClaimReward claims a finalized reward for the given reward day. */
+interface MsgClaimReward {
+    claimer: string;
+    day_id: bigint;
+}
+declare const MsgClaimReward: MessageFns<MsgClaimReward>;
+type Builtin = Date | Function | Uint8Array | string | number | boolean | bigint | undefined;
+type DeepPartial<T> = T extends bigint ? string | number | bigint : T extends Builtin ? T : T extends globalThis.Array<infer U> ? globalThis.Array<DeepPartial<U>> : T extends ReadonlyArray<infer U> ? ReadonlyArray<DeepPartial<U>> : T extends {} ? {
+    [K in keyof T]?: DeepPartial<T[K]>;
+} : Partial<T>;
+interface MessageFns<T> {
+    encode(message: T, writer?: BinaryWriter): BinaryWriter;
+    decode(input: BinaryReader | Uint8Array, length?: number): T;
+    create(base?: DeepPartial<T>): T;
+    fromPartial(object: DeepPartial<T>): T;
+}
+
+export { ATTESTATION_TYPE_CITIZENSHIP_APPLICATION, ATTESTATION_TYPE_RECOVERY, type AcknowledgeEmbeddedBackupOptions, ApplicationStatus, type AttestationPayloadInput, BECH32_PREFIX, type BankBalanceResponse, type BroadcastConfirmOptions, type BroadcastConfirmResult, type BrowserWalletApi, CHAIN_COIN_TYPE, type ChainCurrency, type ChainInfo, CitizenTxError, type CitizenTxErrorCode, type ClearEmbeddedWalletOptions, type CosmostationWindowApi, type CreateEmbeddedWalletOptions, DEFAULT_CHAIN_ID, DEFAULT_REST_URL, DEFAULT_RPC_URL, EMBEDDED_WALLET_KDF_PBKDF2, EMBEDDED_WALLET_KDF_PIN, EMBEDDED_WALLET_KDF_PRF, EMBEDDED_WALLET_KEY_DIRECT_ENTROPY, EMBEDDED_WALLET_KEY_HD_DERIVED, EMBEDDED_WALLET_PASSCODE_MAX_LENGTH, EMBEDDED_WALLET_PASSCODE_MIN_LENGTH, EMBEDDED_WALLET_PASSKEY_PBKDF2_ITERATIONS, EMBEDDED_WALLET_PIN_PBKDF2_ITERATIONS, EMBEDDED_WALLET_RECOVERY_PHRASE_DIRECT_ENTROPY_WARNING, EMBEDDED_WALLET_RECOVERY_PHRASE_GENERAL_WARNING, EMBEDDED_WALLET_VAULT_VERSION, type EmbeddedWalletBackupFileV1, EmbeddedWalletBackupRequiredError, EmbeddedWalletDecryptError, type EmbeddedWalletKdf, type EmbeddedWalletKeyType, EmbeddedWalletLockoutError, type EmbeddedWalletPlaintext, type EmbeddedWalletRecoveryPhraseReveal, type EmbeddedWalletRecoveryPhraseWarning, type EmbeddedWalletScopeOptions, type EmbeddedWalletSession, EmbeddedWalletVaultError, type EmbeddedWalletVaultV1, EmbeddedWalletWeakPasscodeError, type EnableEmbeddedPasskeyUnlockOptions, type EncryptWalletOptions, type FeeGrantAllowancesResponse, FinalizedReward, type ImportEmbeddedBackupOptions, InvalidChainConfigError, type MigrateLegacyEmbeddedWalletOptions, MsgClaimReward, MsgSubmitApplication, MsgSubmitRecoveryAttestation, PASSCODE_LOCKOUT_FAILURE_THRESHOLD, PASSCODE_LOCKOUT_INITIAL_MS, PASSCODE_LOCKOUT_MAX_MS, type PasscodeBlockReason, type PasscodeLockoutRecord, type PasscodeStrengthLabel, type PasscodeStrengthResult, type PasskeyAssertionResult, type PasskeyRegistrationResult, type RecoverEmbeddedWalletOptions, RecoveryAttestationStatus, RestQueryError, type RevealEmbeddedRecoveryPhraseOptions, RpcConnectionError, type SubmitApplicationParams, UKDR_DECIMALS, UKDR_DISPLAY_DENOM, UKDR_MINIMAL_DENOM, type UnclaimedRewardsResponse, type UnlockEmbeddedWalletOptions, VAULT_LEGACY_KEY, type VaultStorageOptions, WALLETCONNECT_COSMOS_METHODS, WALLETCONNECT_COSMOS_NAMESPACE, WEBAUTHN_RP_NAME, WalletAccountError, type WalletConnectChainConfig, type WalletConnectConnectResult, type WalletConnectMetadata, WalletConnectNotInitializedError, WalletConnectSessionError, WalletConnectSigningError, WalletConnectionError, WalletConnectionRejectedError, WalletNotInstalledError, type WebAuthnPrfCapabilities, WebAuthnUnavailableError, WebAuthnUserCancelledError, acknowledgeEmbeddedBackup, addressFromHdMnemonic, addressFromPrivateKey, assertPasscodeAllowedForCreation, assertPasscodeUnlockAllowed, assertPasskey, assertValidPasscode, assertValidRecoveryMnemonic, assertVaultPermitsTransaction, attestationSignPayload, broadcastAndConfirmTx, buildClaimRewardMsg, buildKingdomChainInfo, buildRequiredCosmosNamespaces, buildSendUkdrMsg, buildSubmitApplicationMsg, citizenTxErrorMessage, clearEmbeddedWallet, clearPasscodeLockoutRecord, clearVaultFromIndexedDb, computePasscodeLockoutDurationMs, connectCosmostation, connectKeplr, connectLeap, connectWalletConnect, createBrowserSigningClient, createEmbeddedWallet, createHdDerivedPlaintext, createKingdomChainRegistry, createPasskeyMaterialFromAssertion, createPbkdf2Salt, createWalletConnectOfflineSigner, decodeCredentialId, decodeDirectEntropyMnemonic, decryptWalletPayload, defaultEmbeddedHdPath, defaultUkdrTxFee, deriveKekFromPasscode, deriveKekFromPbkdf2, deriveKekFromPrf, derivePrivateKeyFromHdMnemonic, detectRecoveryMnemonicKeyType, detectWebAuthnPrfCapabilities, disconnectWalletConnect, downloadEmbeddedBackupFile, embeddedPlaintextToSigner, enableEmbeddedPasskeyUnlock, encodeCredentialId, encodeDirectEntropyMnemonic, encryptWalletPayload, evaluatePasscodeStrength, exportEncryptedBackup, fetchFeeGrantGranter, fetchUkdrBalance, fetchUnclaimedFinalizedRewards, formatUkdrAsKdr, getCosmostationKeplrApi, getEmbeddedOfflineSigner, getEmbeddedWalletSession, getPasscodeLockoutState, hasEmbeddedWallet, hasLegacyEmbeddedWallet, hasMixedCharacterClasses, importEmbeddedBackup, initWalletConnectClient, isCosmostationAvailable, isKeplrAvailable, isLeapAvailable, loadPasscodeLockoutRecord, loadVaultFromIndexedDb, lockEmbeddedWallet, markVaultBackupAcknowledged, migrateLegacyEmbeddedWallet, normalizePasscode, normalizeRecoveryMnemonic, parseEncryptedBackup, parseKdrToUkdr, parseWalletConnectAccount, plaintextFromRecoveryMnemonic, providerSeedFromHex, publicKeyFromPrivateSeed, readPrfOutput, recordPasscodeUnlockFailure, recordPasscodeUnlockSuccess, recoverEmbeddedWalletFromMnemonic, recoveryMnemonicAddress, recoveryMnemonicFromPlaintext, registerPasskey, resolvePlaintextKeyType, resolveVaultStorageKey, restoreWalletConnectSession, revealEmbeddedRecoveryPhrase, savePasscodeLockoutRecord, saveVaultToIndexedDb, selectEmbeddedWalletKdf, serializeBackupFile, signAttestationPayload, signCitizenshipAttestation, suggestAndConnect, toWalletConnectCosmosChainId, ukdrCoin, unlockEmbeddedWallet, validateChainConfig, vaultUsesPasscodeUnlock, vaultUsesPasskeyUnlock };