@orbinum/sdk 2.1.0 → 3.0.0

package/dist/{secretStore-CF6Nse__.d.ts → secretStore-CCYo4hna.d.mts}

@@ -79,6 +79,16 @@ interface VaultConfigRecord {
         nextIndex: number;
         addedAt: number;
     }>;
+    /**
+     * Next index in the OUTGOING sequence — the ephemerals this wallet publishes
+     * on the notes it sends.
+     *
+     * Monotonic for the same reason as the others. Unlike `pairwiseCounterparties`
+     * this one is recoverable from chain data (the sender can predict every
+     * ephPk they published), so a restore rebuilds it instead of degrading to a
+     * random ephemeral — see `reserveOutgoingIndex`.
+     */
+    outgoingEphCounter?: number;
     createdAt: number;
     updatedAt: number;
 }
@@ -226,11 +236,10 @@ interface VaultStorage extends NoteStorage, NullifierCache, TxHistoryStore {
 /**
  * A fresh AES-GCM-256 device key.
  *
- * `extractable` defaults to false and should stay that way. Passing true is for
- * the platforms described above — the ones that cannot persist a key handle and
- * must export raw bytes into a secure enclave. Anywhere a handle survives a
- * restart, an extractable key is strictly worse: the material becomes readable
- * by any code in the context.
+ * `extractable` defaults to false and should stay that way — true is only for
+ * the platforms above, which cannot persist a handle and must export bytes into
+ * an enclave. Where a handle survives a restart, extractable is strictly worse:
+ * the material becomes readable by any code in the context.
  */
 declare function generateDeviceKey(extractable?: boolean): Promise<CryptoKey>;
 /**
@@ -251,12 +260,7 @@ interface DeviceKeyStore {
     load(): Promise<CryptoKey | null>;
     save(key: CryptoKey): Promise<void>;
 }
-/**
- * The device key, generating and persisting it on first use.
- *
- * Cached in memory per process: generating a second key would silently orphan
- * every secret encrypted under the first.
- */
+/** The device key, generating and persisting it on first use. */
 declare function createDeviceKeyProvider(store: DeviceKeyStore): () => Promise<CryptoKey>;
 
 /**

package/dist/{secretStore-CF6Nse__.d.mts → secretStore-CCYo4hna.d.ts}

@@ -79,6 +79,16 @@ interface VaultConfigRecord {
         nextIndex: number;
         addedAt: number;
     }>;
+    /**
+     * Next index in the OUTGOING sequence — the ephemerals this wallet publishes
+     * on the notes it sends.
+     *
+     * Monotonic for the same reason as the others. Unlike `pairwiseCounterparties`
+     * this one is recoverable from chain data (the sender can predict every
+     * ephPk they published), so a restore rebuilds it instead of degrading to a
+     * random ephemeral — see `reserveOutgoingIndex`.
+     */
+    outgoingEphCounter?: number;
     createdAt: number;
     updatedAt: number;
 }
@@ -226,11 +236,10 @@ interface VaultStorage extends NoteStorage, NullifierCache, TxHistoryStore {
 /**
  * A fresh AES-GCM-256 device key.
  *
- * `extractable` defaults to false and should stay that way. Passing true is for
- * the platforms described above — the ones that cannot persist a key handle and
- * must export raw bytes into a secure enclave. Anywhere a handle survives a
- * restart, an extractable key is strictly worse: the material becomes readable
- * by any code in the context.
+ * `extractable` defaults to false and should stay that way — true is only for
+ * the platforms above, which cannot persist a handle and must export bytes into
+ * an enclave. Where a handle survives a restart, extractable is strictly worse:
+ * the material becomes readable by any code in the context.
  */
 declare function generateDeviceKey(extractable?: boolean): Promise<CryptoKey>;
 /**
@@ -251,12 +260,7 @@ interface DeviceKeyStore {
     load(): Promise<CryptoKey | null>;
     save(key: CryptoKey): Promise<void>;
 }
-/**
- * The device key, generating and persisting it on first use.
- *
- * Cached in memory per process: generating a second key would silently orphan
- * every secret encrypted under the first.
- */
+/** The device key, generating and persisting it on first use. */
 declare function createDeviceKeyProvider(store: DeviceKeyStore): () => Promise<CryptoKey>;
 
 /**

package/dist/wallet/worker/index.d.mts

@@ -1 +1 @@
-export { d as DECRYPT_YIELD_EVERY, e as DecryptBatchResult, b as DecryptPool, f as DecryptRequest, E as EMPTY_BATCH_RESULT, K as KnownEphEntry, g as KnownEphWindow, M as MAX_WORKERS, h as MatchSource, P as PAIRWISE_EPH_WINDOW, j as SELF_EPH_WINDOW, c as ScanKeys, W as WORKER_CRASHED, k as WorkerFactory, l as WorkerLike, m as WorkerMessage, n as clearKnownEphWindow, o as createDecryptPool, p as createMainThreadPool, q as createWorkerPool, r as decryptHintBatch, s as getKnownEphWindow } from '../../index-CLpM1984.mjs';
+export { e as DECRYPT_YIELD_EVERY, f as DecryptBatchResult, c as DecryptPool, g as DecryptRequest, E as EMPTY_BATCH_RESULT, K as KnownEphEntry, h as KnownEphWindow, M as MAX_WORKERS, O as OUTGOING_EPH_WINDOW, P as PAIRWISE_EPH_WINDOW, j as SELF_EPH_WINDOW, d as ScanKeys, b as SentNoteMatch, U as UnmatchedSentHint, W as WORKER_CRASHED, l as WorkerFactory, m as WorkerLike, n as WorkerMessage, o as clearKnownEphWindow, p as createDecryptPool, q as createMainThreadPool, r as createWorkerPool, s as decryptHintBatch, t as getKnownEphWindow } from '../../index-B-dbSIPN.mjs';

package/dist/wallet/worker/index.d.ts

@@ -1 +1 @@
-export { d as DECRYPT_YIELD_EVERY, e as DecryptBatchResult, b as DecryptPool, f as DecryptRequest, E as EMPTY_BATCH_RESULT, K as KnownEphEntry, g as KnownEphWindow, M as MAX_WORKERS, h as MatchSource, P as PAIRWISE_EPH_WINDOW, j as SELF_EPH_WINDOW, c as ScanKeys, W as WORKER_CRASHED, k as WorkerFactory, l as WorkerLike, m as WorkerMessage, n as clearKnownEphWindow, o as createDecryptPool, p as createMainThreadPool, q as createWorkerPool, r as decryptHintBatch, s as getKnownEphWindow } from '../../index-CLpM1984.js';
+export { e as DECRYPT_YIELD_EVERY, f as DecryptBatchResult, c as DecryptPool, g as DecryptRequest, E as EMPTY_BATCH_RESULT, K as KnownEphEntry, h as KnownEphWindow, M as MAX_WORKERS, O as OUTGOING_EPH_WINDOW, P as PAIRWISE_EPH_WINDOW, j as SELF_EPH_WINDOW, d as ScanKeys, b as SentNoteMatch, U as UnmatchedSentHint, W as WORKER_CRASHED, l as WorkerFactory, m as WorkerLike, n as WorkerMessage, o as clearKnownEphWindow, p as createDecryptPool, q as createMainThreadPool, r as createWorkerPool, s as decryptHintBatch, t as getKnownEphWindow } from '../../index-B-dbSIPN.js';