@proofchain/sdk 2.22.0 → 2.23.0

package/dist/index.d.mts

@@ -3520,12 +3520,29 @@ declare class NftClient {
 
 /**
  * Partner Keys Resource - OTT (One-Time Token) auth for partner integrations
+ *
+ * Flow:
+ *   1. Mobile app generates OTT: POST /partner-keys/generate (tenant API key + user JWT)
+ *   2. OTT is passed to partner webview via URL param
+ *   3. Partner backend redeems OTT: POST /partner-keys/redeem (integrator API key)
  */
 
-interface OTTRequestResponse {
+interface OTTGenerateRequest {
+    ttl?: number;
+    session_data_keys?: string[];
+}
+interface OTTGenerateResponse {
     ott: string;
     expires_in: number;
 }
+interface OTTRedeemResponse {
+    user_id: string;
+    tenant_id: string;
+    tenant_name: string | null;
+    session_data: Record<string, unknown>;
+    issued_at: string;
+    expires_at: string;
+}
 interface OTTConfigUpdate {
     ott_enabled?: boolean;
     ott_ttl_seconds?: number;
@@ -3542,21 +3559,40 @@ interface OTTConfigResponse {
     ott_jwt_ttl_seconds: number;
     ott_session_data_keys?: string[];
 }
+/** @deprecated Use OTTGenerateResponse */
+type OTTRequestResponse = OTTGenerateResponse;
 declare class PartnerKeysClient {
     private http;
     constructor(http: HttpClient);
     /**
-     * Request a one-time token for a partner key (end-user JWKS auth).
+     * Generate a one-time token for the authenticated end-user.
+     *
+     * Requires: tenant API key (X-API-Key) + end-user JWT (Authorization: Bearer).
+     * The SDK must be initialised with both `apiKey` and `userToken`.
+     *
+     * @param options.ttl - Token lifetime in seconds (30–3600, default 300)
+     * @param options.session_data_keys - Whitelist of JWT claims to include
+     */
+    generate(options?: OTTGenerateRequest): Promise<OTTGenerateResponse>;
+    /**
+     * Redeem a one-time token to get the user's identity.
+     *
+     * Requires: integrator API key (X-API-Key). The token is single-use
+     * and deleted on successful redemption.
+     *
+     * @param ott - The opaque one-time token
      */
-    requestOTT(keyId: string): Promise<OTTRequestResponse>;
+    redeem(ott: string): Promise<OTTRedeemResponse>;
     /**
-     * Update OTT configuration for a partner key.
+     * Update OTT configuration for a partner key (tenant admin).
      */
     updateOTTConfig(keyId: string, config: OTTConfigUpdate): Promise<OTTConfigResponse>;
     /**
-     * Get OTT configuration for a partner key.
+     * Get OTT configuration for a partner key (tenant admin).
      */
     getOTTConfig(keyId: string): Promise<OTTConfigResponse>;
+    /** @deprecated Use generate() */
+    requestOTT(_keyId: string): Promise<OTTGenerateResponse>;
 }
 
 /**
@@ -4150,4 +4186,4 @@ declare class TimeoutError extends ProofChainError {
     constructor(message?: string);
 }
 
-export { type Achievement, type ActivitySummaryView, type AddNFTRequest, type AnchorResult, type ApiKey, type AttestRequest, type AttestationConfig, type AttestationMode, type Attestation as AttestationRecord, type AttestationResult, type AttestationSchema, AttestationsClient, AuthenticationError, AuthorizationError, type AvailableView, type Badge, type BatchIngestRequest, type BatchIngestResponse, type BatchVerifyResult, type BlockchainProof, type BlockchainStats, type Certificate, type CertificateVerifyResult, CertificatesResource, type Channel, type ChannelState, type ChannelStatus, ChannelsResource, type ClaimNFTResult, type ClaimRewardResult, type CohortDefinition, type CohortGroupStats, CohortLeaderboardClient, type CohortLeaderboardEntry, type CohortLeaderboardOptions, type CohortLeaderboardResponse, type ComprehensiveWalletInfo, type CreateAchievementRequest, type CreateApiKeyRequest, type CreateAttestationRequest, type CreateBadgeRequest, type CreateChannelRequest, type CreateCredentialTypeRequest, type CreateDataViewRequest, type CreateDualWalletsRequest, type CreateEndUserRequest, type CreateEventRequest, type CreatePassportDefinitionRequest, type CreatePassportRequest, type CreateQuestRequest, type CreateQuestStepRequest, type CreateRewardDefinitionRequest, type CreateSchemaRequest, type CreateTemplateFieldRequest, type CreateTemplateRequest, type CreateWalletRequest as CreateUserWalletRequest, type CreateWalletRequest$1 as CreateWalletRequest, type CreateWebhookRequest, type CredentialType, type CredentialVerifyResult, CredentialsClient, type DataViewColumn, type DataViewComputation, type DataViewDetail, type DataViewExecuteResult, type DataViewInfo, type DataViewListResponse, type DataViewPreviewRequest, type DataViewPreviewResult, type DataViewSummary, DataViewsClient, type DistributeResult, DocumentsResource, type DualWallets, type EarnedReward, type EndUser, EndUserIngestionClient, type EndUserIngestionClientOptions, type EndUserListResponse, EndUsersClient, type Event, type EventBatchProof, type EventMetadata, type EventStatus, EventsResource, type ExecuteSwapRequest, type Facet, type FacetsResponse, type FanProfileView, type FanpassGroupStats, FanpassLeaderboardClient, type FanpassLeaderboardEntry, type FanpassLeaderboardOptions, type FanpassLeaderboardResponse, type FanpassUserComparisonResponse, type FieldValue, type GDPRDeletionRequest, type GDPRDeletionResponse, type GDPRPreviewResponse, type IngestEventRequest, type IngestEventResponse, IngestionClient, type IngestionClientOptions, type IssueCertificateRequest, type IssueCredentialRequest, type IssuedCredential, type LeaderboardUserProfile$1 as LeaderboardUserProfile, type LinkWalletRequest, type ListAttestationsOptions, type ListCertificatesRequest, type ListCohortsOptions, type ListEndUsersOptions, type ListEventsRequest, type ListIssuedCredentialsOptions, type ListMintsOptions, type ListMintsResponse, type ListQuestsOptions, type ListRewardsOptions, type ListSchemasOptions, type ListWalletCredentialsOptions, type ManualRewardRequest, type MergeUsersRequest, type Milestone, type MintNFTRequest, type NFT, type NFTMint, NetworkError, NftClient, NotFoundError, type NotificationCallback, type NotificationEvent, type NotificationEventType, NotificationsClient, type OTTConfigResponse, type OTTConfigUpdate, type OTTRequestResponse, PartnerKeysClient, type Passport, PassportClient, type PassportDefinition, type PassportFieldValue, type PassportHistory, type PassportTemplate, type PassportV2Data, type PassportWithFields, ProofChain, ProofChainError, type ProofChainOptions, type ProofVerifyResult, type PushSubscriptionJSON, type Quest, type QuestStep, type QuestWithProgress, QuestsClient, RateLimitError, type RegisterWalletRequest, type RevokeResult, type RewardAsset, type RewardAttestationResult, type RewardDefinition, type RewardEarned, type VerifyResult as RewardVerifyResult, RewardsClient, type Schema, type SchemaDetail, type SchemaField, type SchemaListResponse, type ValidationError$1 as SchemaValidationError, SchemasClient, type SearchFilters, type SearchQueryRequest, type SearchRequest, SearchResource, type SearchResponse, type SearchResult, type SearchStats, ServerError, type SetProfileRequest, type Settlement, type StepCompletionResult, type StepProgress, type StepStartResult, type StreamAck, type StreamEventRequest, type SubscribeOptions, type SwapQuote, type SwapQuoteRequest, type SwapResult, type TemplateField, type TenantInfo, TenantResource, type TierDefinition, TimeoutError, type TokenBalance, type TransferRequest, type TransferResult, type Unsubscribe, type UpdateConfigRequest as UpdateAttestationConfigRequest, type UpdateDataViewRequest, type UpdateEndUserRequest, type UpdatePassportRequest, type UpdateWebhookRequest, type UsageStats, type UserAchievement, type UserActivity, type UserActivityResponse, type UserBadge, type UserBreakdownResponse, type UserCohortBreakdownEntry, type UserCredentialsSummary, type UserQuestProgress, type UserReward$1 as UserReward, type UserRewardsResponse, type UserWalletSummary, type UserWithWallets, type UsersWithWalletsResponse, type ValidateDataRequest, ValidationError, type ValidationErrorDetail, type ValidationResult, type VaultFile, type VaultFolder, type VaultListResponse, VaultResource, type VaultStats, type VaultUploadRequest, type VerificationResult, VerifyResource, type ViewColumn, type ViewTemplate, type Wallet, type WalletBalance, WalletClient, type WalletCreationResult, type WalletCredential, type WalletCredentialVerifySummary, type WalletStats, type Webhook, WebhooksResource };
+export { type Achievement, type ActivitySummaryView, type AddNFTRequest, type AnchorResult, type ApiKey, type AttestRequest, type AttestationConfig, type AttestationMode, type Attestation as AttestationRecord, type AttestationResult, type AttestationSchema, AttestationsClient, AuthenticationError, AuthorizationError, type AvailableView, type Badge, type BatchIngestRequest, type BatchIngestResponse, type BatchVerifyResult, type BlockchainProof, type BlockchainStats, type Certificate, type CertificateVerifyResult, CertificatesResource, type Channel, type ChannelState, type ChannelStatus, ChannelsResource, type ClaimNFTResult, type ClaimRewardResult, type CohortDefinition, type CohortGroupStats, CohortLeaderboardClient, type CohortLeaderboardEntry, type CohortLeaderboardOptions, type CohortLeaderboardResponse, type ComprehensiveWalletInfo, type CreateAchievementRequest, type CreateApiKeyRequest, type CreateAttestationRequest, type CreateBadgeRequest, type CreateChannelRequest, type CreateCredentialTypeRequest, type CreateDataViewRequest, type CreateDualWalletsRequest, type CreateEndUserRequest, type CreateEventRequest, type CreatePassportDefinitionRequest, type CreatePassportRequest, type CreateQuestRequest, type CreateQuestStepRequest, type CreateRewardDefinitionRequest, type CreateSchemaRequest, type CreateTemplateFieldRequest, type CreateTemplateRequest, type CreateWalletRequest as CreateUserWalletRequest, type CreateWalletRequest$1 as CreateWalletRequest, type CreateWebhookRequest, type CredentialType, type CredentialVerifyResult, CredentialsClient, type DataViewColumn, type DataViewComputation, type DataViewDetail, type DataViewExecuteResult, type DataViewInfo, type DataViewListResponse, type DataViewPreviewRequest, type DataViewPreviewResult, type DataViewSummary, DataViewsClient, type DistributeResult, DocumentsResource, type DualWallets, type EarnedReward, type EndUser, EndUserIngestionClient, type EndUserIngestionClientOptions, type EndUserListResponse, EndUsersClient, type Event, type EventBatchProof, type EventMetadata, type EventStatus, EventsResource, type ExecuteSwapRequest, type Facet, type FacetsResponse, type FanProfileView, type FanpassGroupStats, FanpassLeaderboardClient, type FanpassLeaderboardEntry, type FanpassLeaderboardOptions, type FanpassLeaderboardResponse, type FanpassUserComparisonResponse, type FieldValue, type GDPRDeletionRequest, type GDPRDeletionResponse, type GDPRPreviewResponse, type IngestEventRequest, type IngestEventResponse, IngestionClient, type IngestionClientOptions, type IssueCertificateRequest, type IssueCredentialRequest, type IssuedCredential, type LeaderboardUserProfile$1 as LeaderboardUserProfile, type LinkWalletRequest, type ListAttestationsOptions, type ListCertificatesRequest, type ListCohortsOptions, type ListEndUsersOptions, type ListEventsRequest, type ListIssuedCredentialsOptions, type ListMintsOptions, type ListMintsResponse, type ListQuestsOptions, type ListRewardsOptions, type ListSchemasOptions, type ListWalletCredentialsOptions, type ManualRewardRequest, type MergeUsersRequest, type Milestone, type MintNFTRequest, type NFT, type NFTMint, NetworkError, NftClient, NotFoundError, type NotificationCallback, type NotificationEvent, type NotificationEventType, NotificationsClient, type OTTConfigResponse, type OTTConfigUpdate, type OTTGenerateRequest, type OTTGenerateResponse, type OTTRedeemResponse, type OTTRequestResponse, PartnerKeysClient, type Passport, PassportClient, type PassportDefinition, type PassportFieldValue, type PassportHistory, type PassportTemplate, type PassportV2Data, type PassportWithFields, ProofChain, ProofChainError, type ProofChainOptions, type ProofVerifyResult, type PushSubscriptionJSON, type Quest, type QuestStep, type QuestWithProgress, QuestsClient, RateLimitError, type RegisterWalletRequest, type RevokeResult, type RewardAsset, type RewardAttestationResult, type RewardDefinition, type RewardEarned, type VerifyResult as RewardVerifyResult, RewardsClient, type Schema, type SchemaDetail, type SchemaField, type SchemaListResponse, type ValidationError$1 as SchemaValidationError, SchemasClient, type SearchFilters, type SearchQueryRequest, type SearchRequest, SearchResource, type SearchResponse, type SearchResult, type SearchStats, ServerError, type SetProfileRequest, type Settlement, type StepCompletionResult, type StepProgress, type StepStartResult, type StreamAck, type StreamEventRequest, type SubscribeOptions, type SwapQuote, type SwapQuoteRequest, type SwapResult, type TemplateField, type TenantInfo, TenantResource, type TierDefinition, TimeoutError, type TokenBalance, type TransferRequest, type TransferResult, type Unsubscribe, type UpdateConfigRequest as UpdateAttestationConfigRequest, type UpdateDataViewRequest, type UpdateEndUserRequest, type UpdatePassportRequest, type UpdateWebhookRequest, type UsageStats, type UserAchievement, type UserActivity, type UserActivityResponse, type UserBadge, type UserBreakdownResponse, type UserCohortBreakdownEntry, type UserCredentialsSummary, type UserQuestProgress, type UserReward$1 as UserReward, type UserRewardsResponse, type UserWalletSummary, type UserWithWallets, type UsersWithWalletsResponse, type ValidateDataRequest, ValidationError, type ValidationErrorDetail, type ValidationResult, type VaultFile, type VaultFolder, type VaultListResponse, VaultResource, type VaultStats, type VaultUploadRequest, type VerificationResult, VerifyResource, type ViewColumn, type ViewTemplate, type Wallet, type WalletBalance, WalletClient, type WalletCreationResult, type WalletCredential, type WalletCredentialVerifySummary, type WalletStats, type Webhook, WebhooksResource };

package/dist/index.d.ts

@@ -3520,12 +3520,29 @@ declare class NftClient {
 
 /**
  * Partner Keys Resource - OTT (One-Time Token) auth for partner integrations
+ *
+ * Flow:
+ *   1. Mobile app generates OTT: POST /partner-keys/generate (tenant API key + user JWT)
+ *   2. OTT is passed to partner webview via URL param
+ *   3. Partner backend redeems OTT: POST /partner-keys/redeem (integrator API key)
  */
 
-interface OTTRequestResponse {
+interface OTTGenerateRequest {
+    ttl?: number;
+    session_data_keys?: string[];
+}
+interface OTTGenerateResponse {
     ott: string;
     expires_in: number;
 }
+interface OTTRedeemResponse {
+    user_id: string;
+    tenant_id: string;
+    tenant_name: string | null;
+    session_data: Record<string, unknown>;
+    issued_at: string;
+    expires_at: string;
+}
 interface OTTConfigUpdate {
     ott_enabled?: boolean;
     ott_ttl_seconds?: number;
@@ -3542,21 +3559,40 @@ interface OTTConfigResponse {
     ott_jwt_ttl_seconds: number;
     ott_session_data_keys?: string[];
 }
+/** @deprecated Use OTTGenerateResponse */
+type OTTRequestResponse = OTTGenerateResponse;
 declare class PartnerKeysClient {
     private http;
     constructor(http: HttpClient);
     /**
-     * Request a one-time token for a partner key (end-user JWKS auth).
+     * Generate a one-time token for the authenticated end-user.
+     *
+     * Requires: tenant API key (X-API-Key) + end-user JWT (Authorization: Bearer).
+     * The SDK must be initialised with both `apiKey` and `userToken`.
+     *
+     * @param options.ttl - Token lifetime in seconds (30–3600, default 300)
+     * @param options.session_data_keys - Whitelist of JWT claims to include
+     */
+    generate(options?: OTTGenerateRequest): Promise<OTTGenerateResponse>;
+    /**
+     * Redeem a one-time token to get the user's identity.
+     *
+     * Requires: integrator API key (X-API-Key). The token is single-use
+     * and deleted on successful redemption.
+     *
+     * @param ott - The opaque one-time token
      */
-    requestOTT(keyId: string): Promise<OTTRequestResponse>;
+    redeem(ott: string): Promise<OTTRedeemResponse>;
     /**
-     * Update OTT configuration for a partner key.
+     * Update OTT configuration for a partner key (tenant admin).
      */
     updateOTTConfig(keyId: string, config: OTTConfigUpdate): Promise<OTTConfigResponse>;
     /**
-     * Get OTT configuration for a partner key.
+     * Get OTT configuration for a partner key (tenant admin).
      */
     getOTTConfig(keyId: string): Promise<OTTConfigResponse>;
+    /** @deprecated Use generate() */
+    requestOTT(_keyId: string): Promise<OTTGenerateResponse>;
 }
 
 /**
@@ -4150,4 +4186,4 @@ declare class TimeoutError extends ProofChainError {
     constructor(message?: string);
 }
 
-export { type Achievement, type ActivitySummaryView, type AddNFTRequest, type AnchorResult, type ApiKey, type AttestRequest, type AttestationConfig, type AttestationMode, type Attestation as AttestationRecord, type AttestationResult, type AttestationSchema, AttestationsClient, AuthenticationError, AuthorizationError, type AvailableView, type Badge, type BatchIngestRequest, type BatchIngestResponse, type BatchVerifyResult, type BlockchainProof, type BlockchainStats, type Certificate, type CertificateVerifyResult, CertificatesResource, type Channel, type ChannelState, type ChannelStatus, ChannelsResource, type ClaimNFTResult, type ClaimRewardResult, type CohortDefinition, type CohortGroupStats, CohortLeaderboardClient, type CohortLeaderboardEntry, type CohortLeaderboardOptions, type CohortLeaderboardResponse, type ComprehensiveWalletInfo, type CreateAchievementRequest, type CreateApiKeyRequest, type CreateAttestationRequest, type CreateBadgeRequest, type CreateChannelRequest, type CreateCredentialTypeRequest, type CreateDataViewRequest, type CreateDualWalletsRequest, type CreateEndUserRequest, type CreateEventRequest, type CreatePassportDefinitionRequest, type CreatePassportRequest, type CreateQuestRequest, type CreateQuestStepRequest, type CreateRewardDefinitionRequest, type CreateSchemaRequest, type CreateTemplateFieldRequest, type CreateTemplateRequest, type CreateWalletRequest as CreateUserWalletRequest, type CreateWalletRequest$1 as CreateWalletRequest, type CreateWebhookRequest, type CredentialType, type CredentialVerifyResult, CredentialsClient, type DataViewColumn, type DataViewComputation, type DataViewDetail, type DataViewExecuteResult, type DataViewInfo, type DataViewListResponse, type DataViewPreviewRequest, type DataViewPreviewResult, type DataViewSummary, DataViewsClient, type DistributeResult, DocumentsResource, type DualWallets, type EarnedReward, type EndUser, EndUserIngestionClient, type EndUserIngestionClientOptions, type EndUserListResponse, EndUsersClient, type Event, type EventBatchProof, type EventMetadata, type EventStatus, EventsResource, type ExecuteSwapRequest, type Facet, type FacetsResponse, type FanProfileView, type FanpassGroupStats, FanpassLeaderboardClient, type FanpassLeaderboardEntry, type FanpassLeaderboardOptions, type FanpassLeaderboardResponse, type FanpassUserComparisonResponse, type FieldValue, type GDPRDeletionRequest, type GDPRDeletionResponse, type GDPRPreviewResponse, type IngestEventRequest, type IngestEventResponse, IngestionClient, type IngestionClientOptions, type IssueCertificateRequest, type IssueCredentialRequest, type IssuedCredential, type LeaderboardUserProfile$1 as LeaderboardUserProfile, type LinkWalletRequest, type ListAttestationsOptions, type ListCertificatesRequest, type ListCohortsOptions, type ListEndUsersOptions, type ListEventsRequest, type ListIssuedCredentialsOptions, type ListMintsOptions, type ListMintsResponse, type ListQuestsOptions, type ListRewardsOptions, type ListSchemasOptions, type ListWalletCredentialsOptions, type ManualRewardRequest, type MergeUsersRequest, type Milestone, type MintNFTRequest, type NFT, type NFTMint, NetworkError, NftClient, NotFoundError, type NotificationCallback, type NotificationEvent, type NotificationEventType, NotificationsClient, type OTTConfigResponse, type OTTConfigUpdate, type OTTRequestResponse, PartnerKeysClient, type Passport, PassportClient, type PassportDefinition, type PassportFieldValue, type PassportHistory, type PassportTemplate, type PassportV2Data, type PassportWithFields, ProofChain, ProofChainError, type ProofChainOptions, type ProofVerifyResult, type PushSubscriptionJSON, type Quest, type QuestStep, type QuestWithProgress, QuestsClient, RateLimitError, type RegisterWalletRequest, type RevokeResult, type RewardAsset, type RewardAttestationResult, type RewardDefinition, type RewardEarned, type VerifyResult as RewardVerifyResult, RewardsClient, type Schema, type SchemaDetail, type SchemaField, type SchemaListResponse, type ValidationError$1 as SchemaValidationError, SchemasClient, type SearchFilters, type SearchQueryRequest, type SearchRequest, SearchResource, type SearchResponse, type SearchResult, type SearchStats, ServerError, type SetProfileRequest, type Settlement, type StepCompletionResult, type StepProgress, type StepStartResult, type StreamAck, type StreamEventRequest, type SubscribeOptions, type SwapQuote, type SwapQuoteRequest, type SwapResult, type TemplateField, type TenantInfo, TenantResource, type TierDefinition, TimeoutError, type TokenBalance, type TransferRequest, type TransferResult, type Unsubscribe, type UpdateConfigRequest as UpdateAttestationConfigRequest, type UpdateDataViewRequest, type UpdateEndUserRequest, type UpdatePassportRequest, type UpdateWebhookRequest, type UsageStats, type UserAchievement, type UserActivity, type UserActivityResponse, type UserBadge, type UserBreakdownResponse, type UserCohortBreakdownEntry, type UserCredentialsSummary, type UserQuestProgress, type UserReward$1 as UserReward, type UserRewardsResponse, type UserWalletSummary, type UserWithWallets, type UsersWithWalletsResponse, type ValidateDataRequest, ValidationError, type ValidationErrorDetail, type ValidationResult, type VaultFile, type VaultFolder, type VaultListResponse, VaultResource, type VaultStats, type VaultUploadRequest, type VerificationResult, VerifyResource, type ViewColumn, type ViewTemplate, type Wallet, type WalletBalance, WalletClient, type WalletCreationResult, type WalletCredential, type WalletCredentialVerifySummary, type WalletStats, type Webhook, WebhooksResource };
+export { type Achievement, type ActivitySummaryView, type AddNFTRequest, type AnchorResult, type ApiKey, type AttestRequest, type AttestationConfig, type AttestationMode, type Attestation as AttestationRecord, type AttestationResult, type AttestationSchema, AttestationsClient, AuthenticationError, AuthorizationError, type AvailableView, type Badge, type BatchIngestRequest, type BatchIngestResponse, type BatchVerifyResult, type BlockchainProof, type BlockchainStats, type Certificate, type CertificateVerifyResult, CertificatesResource, type Channel, type ChannelState, type ChannelStatus, ChannelsResource, type ClaimNFTResult, type ClaimRewardResult, type CohortDefinition, type CohortGroupStats, CohortLeaderboardClient, type CohortLeaderboardEntry, type CohortLeaderboardOptions, type CohortLeaderboardResponse, type ComprehensiveWalletInfo, type CreateAchievementRequest, type CreateApiKeyRequest, type CreateAttestationRequest, type CreateBadgeRequest, type CreateChannelRequest, type CreateCredentialTypeRequest, type CreateDataViewRequest, type CreateDualWalletsRequest, type CreateEndUserRequest, type CreateEventRequest, type CreatePassportDefinitionRequest, type CreatePassportRequest, type CreateQuestRequest, type CreateQuestStepRequest, type CreateRewardDefinitionRequest, type CreateSchemaRequest, type CreateTemplateFieldRequest, type CreateTemplateRequest, type CreateWalletRequest as CreateUserWalletRequest, type CreateWalletRequest$1 as CreateWalletRequest, type CreateWebhookRequest, type CredentialType, type CredentialVerifyResult, CredentialsClient, type DataViewColumn, type DataViewComputation, type DataViewDetail, type DataViewExecuteResult, type DataViewInfo, type DataViewListResponse, type DataViewPreviewRequest, type DataViewPreviewResult, type DataViewSummary, DataViewsClient, type DistributeResult, DocumentsResource, type DualWallets, type EarnedReward, type EndUser, EndUserIngestionClient, type EndUserIngestionClientOptions, type EndUserListResponse, EndUsersClient, type Event, type EventBatchProof, type EventMetadata, type EventStatus, EventsResource, type ExecuteSwapRequest, type Facet, type FacetsResponse, type FanProfileView, type FanpassGroupStats, FanpassLeaderboardClient, type FanpassLeaderboardEntry, type FanpassLeaderboardOptions, type FanpassLeaderboardResponse, type FanpassUserComparisonResponse, type FieldValue, type GDPRDeletionRequest, type GDPRDeletionResponse, type GDPRPreviewResponse, type IngestEventRequest, type IngestEventResponse, IngestionClient, type IngestionClientOptions, type IssueCertificateRequest, type IssueCredentialRequest, type IssuedCredential, type LeaderboardUserProfile$1 as LeaderboardUserProfile, type LinkWalletRequest, type ListAttestationsOptions, type ListCertificatesRequest, type ListCohortsOptions, type ListEndUsersOptions, type ListEventsRequest, type ListIssuedCredentialsOptions, type ListMintsOptions, type ListMintsResponse, type ListQuestsOptions, type ListRewardsOptions, type ListSchemasOptions, type ListWalletCredentialsOptions, type ManualRewardRequest, type MergeUsersRequest, type Milestone, type MintNFTRequest, type NFT, type NFTMint, NetworkError, NftClient, NotFoundError, type NotificationCallback, type NotificationEvent, type NotificationEventType, NotificationsClient, type OTTConfigResponse, type OTTConfigUpdate, type OTTGenerateRequest, type OTTGenerateResponse, type OTTRedeemResponse, type OTTRequestResponse, PartnerKeysClient, type Passport, PassportClient, type PassportDefinition, type PassportFieldValue, type PassportHistory, type PassportTemplate, type PassportV2Data, type PassportWithFields, ProofChain, ProofChainError, type ProofChainOptions, type ProofVerifyResult, type PushSubscriptionJSON, type Quest, type QuestStep, type QuestWithProgress, QuestsClient, RateLimitError, type RegisterWalletRequest, type RevokeResult, type RewardAsset, type RewardAttestationResult, type RewardDefinition, type RewardEarned, type VerifyResult as RewardVerifyResult, RewardsClient, type Schema, type SchemaDetail, type SchemaField, type SchemaListResponse, type ValidationError$1 as SchemaValidationError, SchemasClient, type SearchFilters, type SearchQueryRequest, type SearchRequest, SearchResource, type SearchResponse, type SearchResult, type SearchStats, ServerError, type SetProfileRequest, type Settlement, type StepCompletionResult, type StepProgress, type StepStartResult, type StreamAck, type StreamEventRequest, type SubscribeOptions, type SwapQuote, type SwapQuoteRequest, type SwapResult, type TemplateField, type TenantInfo, TenantResource, type TierDefinition, TimeoutError, type TokenBalance, type TransferRequest, type TransferResult, type Unsubscribe, type UpdateConfigRequest as UpdateAttestationConfigRequest, type UpdateDataViewRequest, type UpdateEndUserRequest, type UpdatePassportRequest, type UpdateWebhookRequest, type UsageStats, type UserAchievement, type UserActivity, type UserActivityResponse, type UserBadge, type UserBreakdownResponse, type UserCohortBreakdownEntry, type UserCredentialsSummary, type UserQuestProgress, type UserReward$1 as UserReward, type UserRewardsResponse, type UserWalletSummary, type UserWithWallets, type UsersWithWalletsResponse, type ValidateDataRequest, ValidationError, type ValidationErrorDetail, type ValidationResult, type VaultFile, type VaultFolder, type VaultListResponse, VaultResource, type VaultStats, type VaultUploadRequest, type VerificationResult, VerifyResource, type ViewColumn, type ViewTemplate, type Wallet, type WalletBalance, WalletClient, type WalletCreationResult, type WalletCredential, type WalletCredentialVerifySummary, type WalletStats, type Webhook, WebhooksResource };

package/dist/index.js

@@ -137,13 +137,14 @@ var HttpClient = class {
       "Content-Type": "application/json",
       "User-Agent": USER_AGENT
     };
+    if (this.apiKey) {
+      headers["X-API-Key"] = this.apiKey;
+    }
     if (this.userToken) {
       headers["Authorization"] = `Bearer ${this.userToken}`;
       if (this.tenantId) {
         headers["X-Tenant-ID"] = this.tenantId;
       }
-    } else if (this.apiKey) {
-      headers["X-API-Key"] = this.apiKey;
     }
     return headers;
   }
@@ -239,13 +240,14 @@ var HttpClient = class {
     const headers = {
       "User-Agent": USER_AGENT
     };
+    if (this.apiKey) {
+      headers["X-API-Key"] = this.apiKey;
+    }
     if (this.userToken) {
       headers["Authorization"] = `Bearer ${this.userToken}`;
       if (this.tenantId) {
         headers["X-Tenant-ID"] = this.tenantId;
       }
-    } else if (this.apiKey) {
-      headers["X-API-Key"] = this.apiKey;
     }
     return this.fetchWithRetry(url, {
       method: "POST",
@@ -2711,23 +2713,44 @@ var PartnerKeysClient = class {
     this.http = http;
   }
   /**
-   * Request a one-time token for a partner key (end-user JWKS auth).
+   * Generate a one-time token for the authenticated end-user.
+   *
+   * Requires: tenant API key (X-API-Key) + end-user JWT (Authorization: Bearer).
+   * The SDK must be initialised with both `apiKey` and `userToken`.
+   *
+   * @param options.ttl - Token lifetime in seconds (30–3600, default 300)
+   * @param options.session_data_keys - Whitelist of JWT claims to include
+   */
+  async generate(options) {
+    return this.http.post("/partner-keys/generate", options ?? {});
+  }
+  /**
+   * Redeem a one-time token to get the user's identity.
+   *
+   * Requires: integrator API key (X-API-Key). The token is single-use
+   * and deleted on successful redemption.
+   *
+   * @param ott - The opaque one-time token
    */
-  async requestOTT(keyId) {
-    return this.http.post(`/partner-keys/${keyId}/ott/request`);
+  async redeem(ott) {
+    return this.http.post("/partner-keys/redeem", { ott });
   }
   /**
-   * Update OTT configuration for a partner key.
+   * Update OTT configuration for a partner key (tenant admin).
    */
   async updateOTTConfig(keyId, config) {
     return this.http.patch(`/partner-keys/${keyId}/ott-config`, config);
   }
   /**
-   * Get OTT configuration for a partner key.
+   * Get OTT configuration for a partner key (tenant admin).
    */
   async getOTTConfig(keyId) {
     return this.http.get(`/partner-keys/${keyId}/ott-config`);
   }
+  /** @deprecated Use generate() */
+  async requestOTT(_keyId) {
+    return this.generate();
+  }
 };
 
 // src/attestations.ts

package/dist/index.mjs

@@ -77,13 +77,14 @@ var HttpClient = class {
       "Content-Type": "application/json",
       "User-Agent": USER_AGENT
     };
+    if (this.apiKey) {
+      headers["X-API-Key"] = this.apiKey;
+    }
     if (this.userToken) {
       headers["Authorization"] = `Bearer ${this.userToken}`;
       if (this.tenantId) {
         headers["X-Tenant-ID"] = this.tenantId;
       }
-    } else if (this.apiKey) {
-      headers["X-API-Key"] = this.apiKey;
     }
     return headers;
   }
@@ -179,13 +180,14 @@ var HttpClient = class {
     const headers = {
       "User-Agent": USER_AGENT
     };
+    if (this.apiKey) {
+      headers["X-API-Key"] = this.apiKey;
+    }
     if (this.userToken) {
       headers["Authorization"] = `Bearer ${this.userToken}`;
       if (this.tenantId) {
         headers["X-Tenant-ID"] = this.tenantId;
       }
-    } else if (this.apiKey) {
-      headers["X-API-Key"] = this.apiKey;
     }
     return this.fetchWithRetry(url, {
       method: "POST",
@@ -2651,23 +2653,44 @@ var PartnerKeysClient = class {
     this.http = http;
   }
   /**
-   * Request a one-time token for a partner key (end-user JWKS auth).
+   * Generate a one-time token for the authenticated end-user.
+   *
+   * Requires: tenant API key (X-API-Key) + end-user JWT (Authorization: Bearer).
+   * The SDK must be initialised with both `apiKey` and `userToken`.
+   *
+   * @param options.ttl - Token lifetime in seconds (30–3600, default 300)
+   * @param options.session_data_keys - Whitelist of JWT claims to include
+   */
+  async generate(options) {
+    return this.http.post("/partner-keys/generate", options ?? {});
+  }
+  /**
+   * Redeem a one-time token to get the user's identity.
+   *
+   * Requires: integrator API key (X-API-Key). The token is single-use
+   * and deleted on successful redemption.
+   *
+   * @param ott - The opaque one-time token
    */
-  async requestOTT(keyId) {
-    return this.http.post(`/partner-keys/${keyId}/ott/request`);
+  async redeem(ott) {
+    return this.http.post("/partner-keys/redeem", { ott });
   }
   /**
-   * Update OTT configuration for a partner key.
+   * Update OTT configuration for a partner key (tenant admin).
    */
   async updateOTTConfig(keyId, config) {
     return this.http.patch(`/partner-keys/${keyId}/ott-config`, config);
   }
   /**
-   * Get OTT configuration for a partner key.
+   * Get OTT configuration for a partner key (tenant admin).
    */
   async getOTTConfig(keyId) {
     return this.http.get(`/partner-keys/${keyId}/ott-config`);
   }
+  /** @deprecated Use generate() */
+  async requestOTT(_keyId) {
+    return this.generate();
+  }
 };
 
 // src/attestations.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@proofchain/sdk",
-  "version": "2.22.0",
+  "version": "2.23.0",
   "description": "Official JavaScript/TypeScript SDK for ProofChain - blockchain-anchored document attestation",
   "main": "dist/index.js",
   "module": "dist/index.mjs",