@sparkvault/sdk-mobile 7.1.11 → 7.1.13

package/dist/types.d.ts

@@ -42,14 +42,8 @@ export interface ApiErrorBody {
         details?: Record<string, unknown>;
     };
     message?: string;
-    data?: unknown;
     meta?: ApiMeta;
 }
-export interface RateLimitInfo {
-    limit: number;
-    remaining: number;
-    reset: number;
-}
 /** Account-scoped role. Owners and admins manage the organization and team. */
 export type OrgRole = 'owner' | 'admin' | 'user';
 export interface SparkVaultUser {
@@ -248,7 +242,6 @@ export interface IdentityBranding {
     companyName: string | null;
     logoLight: string | null;
     logoDark: string | null;
-    backdrop_blur?: boolean;
     themeMode?: 'light' | 'dark';
 }
 export interface IdentityConfig {
@@ -337,44 +330,32 @@ export interface VerifyOtpRequest {
     pin: string;
     recipient: string;
 }
-export interface RequestPinRequest {
-    email: string;
-    organization_name?: string;
-}
-export interface RequestPinResponse {
+/** A code sent: the kindling its verify names, and when the code expires (Unix seconds). */
+export interface SendOtpResponse {
     kindling: string;
     expires_at: number;
-    retry_after?: number;
-    is_signup: boolean;
 }
 export interface PinVerifyLoginResponse {
     access_token: string;
     refresh_token: string;
-    token_type: 'Bearer';
-    expires_in: number;
     user: SparkVaultUser;
 }
+/**
+ * A verified identity with no SparkVault user yet: `signup_token` (an
+ * identity-only access token) authorizes `account.completeSignup`.
+ */
 export interface PinVerifySignupPendingResponse {
     verified: true;
     needs_signup_info: true;
     signup_token: string;
-    expires_at: number;
 }
 /**
- * Variant of the Core exchange result indicating the account has 2FA enabled:
- * the caller must collect a second factor via
- * `products.identity.submitSecondFactor({ ticket, code })` and re-exchange the
- * resulting Identity token via `account.exchangeIdentityToken`.
+ * The Core exchange of a verified Identity token. A second factor is collected
+ * at the Identity Product before its token exists (`products.identity.verifyOtp`
+ * throws for it, and `submitSecondFactor` finishes it), so the exchange is a
+ * login or a pending signup, never a second-factor challenge.
  */
-export interface PinVerifySecondFactorPendingResponse {
-    verified: false;
-    second_factor_required: true;
-    /** Opaque pending-login handle to submit the second factor against. */
-    ticket: string;
-    /** Methods the user may use, e.g. ['authenticator','recovery_code']. */
-    methods: string[];
-}
-export type PinVerifyResponse = PinVerifyLoginResponse | PinVerifySignupPendingResponse | PinVerifySecondFactorPendingResponse;
+export type PinVerifyResponse = PinVerifyLoginResponse | PinVerifySignupPendingResponse;
 export interface SubmitSecondFactorRequest {
     /** Pending-login ticket from a second_factor_required response. */
     ticket: string;
@@ -388,8 +369,6 @@ export interface CompleteSignupRequest {
 export interface CompleteSignupResponse {
     access_token: string;
     refresh_token: string;
-    token_type?: 'Bearer';
-    expires_in?: number;
     user: SparkVaultUser;
     account: SparkVaultAccount;
 }
@@ -398,10 +377,14 @@ export interface PasskeyAuthOptions {
     challenge: string;
     timeout: number;
     rpId: string;
+    /**
+     * The person's credentials when the ceremony is scoped to an identifier:
+     * ids only, since a transport list would hand an unauthenticated probe a
+     * device fingerprint.
+     */
     allowCredentials?: Array<{
         id: string;
         type: 'public-key';
-        transports?: string[];
     }>;
     userVerification: 'required' | 'preferred' | 'discouraged';
 }
@@ -462,14 +445,14 @@ export interface PasskeyCredential {
 }
 export interface PasskeyStatus {
     has_passkey: boolean;
-    registered_at?: number;
-    last_used_at?: number;
 }
+/**
+ * POST /auth/identity/verify: a session for the verified identity's member, or,
+ * with `user` and `account` null, an identity-only token for a signup.
+ */
 export interface IdentitySessionResponse {
     access_token: string;
     refresh_token: string;
-    token_type?: 'Bearer';
-    expires_in?: number;
     user: SparkVaultUser | null;
     account: SparkVaultAccount | null;
 }
@@ -485,17 +468,15 @@ export interface Vault {
     last_unsealed_at?: number;
     unseal_count?: number;
 }
+/** A vault is created with its name alone; a description is set with `update`. */
 export interface CreateVaultRequest {
     name: string;
-    description?: string;
 }
 export interface CreateVaultResponse {
     vault_id: string;
     name: string;
-    description?: string;
     vmk: string;
     vmk_warning: string;
-    status: 'sealed';
     created_at: number;
 }
 export interface UpdateVaultRequest {
@@ -616,7 +597,6 @@ export interface Ingot {
     name: string;
     content_type: string;
     size_bytes: number;
-    storage_location: 'dynamodb' | 's3';
     /** `uploading` until Forge activates the upload, then `active`. */
     status?: 'uploading' | 'active';
     folder_id?: string | null;
@@ -628,10 +608,7 @@ export interface Ingot {
      */
     managed_by?: string | null;
     created_at: number;
-    accessed_at?: number;
-    last_accessed_at?: number;
     access_count?: number;
-    expires_at?: number;
     /**
      * Client-computed, vault-keyed HMAC of the plaintext (43-char base64url),
      * or null when the uploader did not supply one. Used for upload dedup and
@@ -649,9 +626,14 @@ export interface HashCheckMatch {
 export interface HashCheckResponse {
     found: HashCheckMatch[];
 }
+/**
+ * One page of GET /vaults/:id/ingots or /ingots/search. `count` is this
+ * page's length: the server reports no total.
+ */
 export interface ListIngotsResponse {
     ingots: Ingot[];
-    total: number;
+    count: number;
+    has_more: boolean;
     next_cursor?: string;
 }
 /**
@@ -680,7 +662,6 @@ export interface UploadResult {
      */
     name: string;
     size_bytes: number;
-    storage_location: 's3';
     /**
      * Whether this upload minted the ingot (true) or went into an existing row
      * (false): the one holding the name, as the create's name-conflict policy
@@ -756,8 +737,6 @@ export interface IngotAccessLog {
 }
 export interface IngotAccessStats {
     total_downloads: number;
-    unique_visitors?: number;
-    last_accessed_at?: number;
 }
 /** A folder as every folder route answers it (Core's FolderRepository.toPublicFormat). */
 export interface Folder {
@@ -794,13 +773,10 @@ export interface TokenStorageAdapter {
     clearTokens(): Promise<void>;
     getUser?<T = SparkVaultUser>(): Promise<T | null>;
     setUser?<T = SparkVaultUser>(user: T): Promise<void>;
-    getAccount?<T = SparkVaultAccount>(): Promise<T | null>;
     setAccount?<T = SparkVaultAccount>(account: T): Promise<void>;
-    clearAll?(): Promise<void>;
 }
 export type FetchLike = (url: string, options?: RequestInit & {
     timeoutMs?: number;
-    responseType?: XMLHttpRequestResponseType;
 }) => Promise<Response>;
 export interface SparkVaultLogger {
     debug(message: string, context?: Record<string, unknown>): void;
@@ -998,7 +974,6 @@ export interface MobileFileDownloader {
 }
 export interface DebugLogger {
     log(message: string): void;
-    warn(message: string): void;
     error(message: string): void;
     success(message: string): void;
 }

package/dist/vaults.d.ts

@@ -5,7 +5,6 @@ export declare class MobileVaultsClient {
     constructor(http: MobileHttpClient);
     create(request: CreateVaultRequest): Promise<CreateVaultResponse>;
     list(options?: {
-        status?: 'sealed' | 'unsealed';
         limit?: number;
         cursor?: string;
     }): Promise<ListVaultsResponse>;
@@ -15,9 +14,7 @@ export declare class MobileVaultsClient {
      * filtered down to nothing still carries a cursor. A failed page fails the
      * listing: a vault picker must never show a silently partial account.
      */
-    listAll(options?: {
-        status?: 'sealed' | 'unsealed';
-    }): Promise<Vault[]>;
+    listAll(): Promise<Vault[]>;
     get(vaultId: string): Promise<Vault>;
     update(vaultId: string, request: UpdateVaultRequest): Promise<UpdateVaultResponse>;
     /**

package/dist/vaults.js

@@ -13,7 +13,7 @@ export class MobileVaultsClient {
     }
     async list(options) {
         const response = await this.http.get(apiPath `/vaults`, {
-            query: { status: options?.status, limit: options?.limit || undefined, cursor: options?.cursor },
+            query: { limit: options?.limit || undefined, cursor: options?.cursor },
         });
         return response.data;
     }
@@ -23,11 +23,11 @@ export class MobileVaultsClient {
      * filtered down to nothing still carries a cursor. A failed page fails the
      * listing: a vault picker must never show a silently partial account.
      */
-    async listAll(options) {
+    async listAll() {
         const vaults = [];
         let cursor;
         do {
-            const page = await this.list({ ...options, limit: VAULT_LIST_PAGE_LIMIT, cursor });
+            const page = await this.list({ limit: VAULT_LIST_PAGE_LIMIT, cursor });
             vaults.push(...page.vaults);
             cursor = page.has_more ? page.next_cursor : undefined;
         } while (cursor);

package/dist/vaults.js.map

@@ -1 +1 @@
-{"version":3,"file":"vaults.js","sourceRoot":"","sources":["../src/vaults.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAE5C,uEAAuE;AACvE,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAElC,MAAM,OAAO,kBAAkB;IAG7B,YAAY,IAAsB;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAA2B;QACtC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAsB,OAAO,CAAA,SAAS,EAAE,OAAO,CAAC,CAAC;QACtF,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAIV;QACC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAqB,OAAO,CAAA,SAAS,EAAE;YACzE,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE;SAChG,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CAAC,OAA4C;QACxD,MAAM,MAAM,GAAY,EAAE,CAAC;QAC3B,IAAI,MAA0B,CAAC;QAC/B,GAAG,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,CAAC,CAAC;YACnF,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;YAC5B,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;QACxD,CAAC,QAAQ,MAAM,EAAE;QACjB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAAe;QACvB,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAQ,OAAO,CAAA,WAAW,OAAO,EAAE,CAAC,CAAC;QACzE,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,OAA2B;QACvD,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAsB,OAAO,CAAA,WAAW,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;QAChG,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,IAAY;QACxC,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAA,WAAW,OAAO,EAAE,EAAE;YAClD,OAAO,EAAE,EAAE,oBAAoB,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE;SAC1D,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,OAA2B;QACvD,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAsB,OAAO,CAAA,WAAW,OAAO,SAAS,EAAE,OAAO,CAAC,CAAC;QACxG,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI,CAAC,OAAe;QACxB,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAA,WAAW,OAAO,OAAO,CAAC,CAAC;IACzD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,UAAU,CAAC,OAAe,EAAE,GAAW;QAC3C,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAA,WAAW,OAAO,UAAU,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,OAAe;QACpC,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAqB,OAAO,CAAA,WAAW,OAAO,UAAU,CAAC,CAAC;QAC9F,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,OAAe,EACf,GAAW,EACX,OAA6B;QAE7B,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAA6B,OAAO,CAAA,WAAW,OAAO,iBAAiB,EAAE;YAC5G,GAAG;YACH,iBAAiB,EAAE,OAAO,EAAE,iBAAiB;YAC7C,sBAAsB,EAAE,OAAO,EAAE,sBAAsB;SACxD,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAe;QAClC,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAA8B,OAAO,CAAA,WAAW,OAAO,kBAAkB,CAAC,CAAC;QAChH,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,mBAAmB,CACvB,OAAe,EACf,MAA2B,EAC3B,GAAY;QAEZ,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAA6B,OAAO,CAAA,WAAW,OAAO,UAAU,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACvH,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,OAAe;QACzC,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAqB,OAAO,CAAA,WAAW,OAAO,uBAAuB,CAAC,CAAC;QAC3G,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,wBAAwB,CAC5B,OAAe,EACf,gBAAwB;QAExB,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAmC,OAAO,CAAA,WAAW,OAAO,uBAAuB,EAAE;YACvH,4BAA4B,EAAE,gBAAgB;SAC/C,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,OAAe;QACnC,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAe,OAAO,CAAA,WAAW,OAAO,SAAS,CAAC,CAAC;QACvF,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,OAAe,EAAE,GAAW;QACnD,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAsB,OAAO,CAAA,WAAW,OAAO,uBAAuB,EAAE;YAC3G,GAAG;SACJ,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,OAAe;QACvC,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAuB,OAAO,CAAA,WAAW,OAAO,wBAAwB,CAAC,CAAC;QAC/G,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,OAAe,EAAE,GAAW;QACnD,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAsB,OAAO,CAAA,WAAW,OAAO,uBAAuB,EAAE;YAC3G,GAAG;SACJ,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,OAAe;QACvC,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAuB,OAAO,CAAA,WAAW,OAAO,wBAAwB,CAAC,CAAC;QAC/G,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,OAAe,EACf,MAGC;QAED,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAqB,OAAO,CAAA,WAAW,OAAO,SAAS,EAAE,MAAM,CAAC,CAAC;QACrG,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;CACF"}
+{"version":3,"file":"vaults.js","sourceRoot":"","sources":["../src/vaults.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAE5C,uEAAuE;AACvE,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAElC,MAAM,OAAO,kBAAkB;IAG7B,YAAY,IAAsB;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAA2B;QACtC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAsB,OAAO,CAAA,SAAS,EAAE,OAAO,CAAC,CAAC;QACtF,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAA6C;QACtD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAqB,OAAO,CAAA,SAAS,EAAE;YACzE,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE;SACvE,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,MAAM,GAAY,EAAE,CAAC;QAC3B,IAAI,MAA0B,CAAC;QAC/B,GAAG,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,MAAM,EAAE,CAAC,CAAC;YACvE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;YAC5B,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;QACxD,CAAC,QAAQ,MAAM,EAAE;QACjB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,OAAe;QACvB,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAQ,OAAO,CAAA,WAAW,OAAO,EAAE,CAAC,CAAC;QACzE,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,OAA2B;QACvD,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAsB,OAAO,CAAA,WAAW,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;QAChG,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,IAAY;QACxC,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAA,WAAW,OAAO,EAAE,EAAE;YAClD,OAAO,EAAE,EAAE,oBAAoB,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE;SAC1D,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,OAA2B;QACvD,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAsB,OAAO,CAAA,WAAW,OAAO,SAAS,EAAE,OAAO,CAAC,CAAC;QACxG,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI,CAAC,OAAe;QACxB,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAA,WAAW,OAAO,OAAO,CAAC,CAAC;IACzD,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,UAAU,CAAC,OAAe,EAAE,GAAW;QAC3C,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAA,WAAW,OAAO,UAAU,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,OAAe;QACpC,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAqB,OAAO,CAAA,WAAW,OAAO,UAAU,CAAC,CAAC;QAC9F,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,OAAe,EACf,GAAW,EACX,OAA6B;QAE7B,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAA6B,OAAO,CAAA,WAAW,OAAO,iBAAiB,EAAE;YAC5G,GAAG;YACH,iBAAiB,EAAE,OAAO,EAAE,iBAAiB;YAC7C,sBAAsB,EAAE,OAAO,EAAE,sBAAsB;SACxD,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAe;QAClC,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAA8B,OAAO,CAAA,WAAW,OAAO,kBAAkB,CAAC,CAAC;QAChH,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,mBAAmB,CACvB,OAAe,EACf,MAA2B,EAC3B,GAAY;QAEZ,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAA6B,OAAO,CAAA,WAAW,OAAO,UAAU,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACvH,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,OAAe;QACzC,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAqB,OAAO,CAAA,WAAW,OAAO,uBAAuB,CAAC,CAAC;QAC3G,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,wBAAwB,CAC5B,OAAe,EACf,gBAAwB;QAExB,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAmC,OAAO,CAAA,WAAW,OAAO,uBAAuB,EAAE;YACvH,4BAA4B,EAAE,gBAAgB;SAC/C,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,OAAe;QACnC,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAe,OAAO,CAAA,WAAW,OAAO,SAAS,CAAC,CAAC;QACvF,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,OAAe,EAAE,GAAW;QACnD,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAsB,OAAO,CAAA,WAAW,OAAO,uBAAuB,EAAE;YAC3G,GAAG;SACJ,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,OAAe;QACvC,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAuB,OAAO,CAAA,WAAW,OAAO,wBAAwB,CAAC,CAAC;QAC/G,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,OAAe,EAAE,GAAW;QACnD,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAsB,OAAO,CAAA,WAAW,OAAO,uBAAuB,EAAE;YAC3G,GAAG;SACJ,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,OAAe;QACvC,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAuB,OAAO,CAAA,WAAW,OAAO,wBAAwB,CAAC,CAAC;QAC/G,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,OAAe,EACf,MAGC;QAED,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAqB,OAAO,CAAA,WAAW,OAAO,SAAS,EAAE,MAAM,CAAC,CAAC;QACrG,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;CACF"}

package/dist/vaults.test-d.d.ts

@@ -7,16 +7,19 @@
  * `*.test.ts`, which tsconfig excludes.
  *
  * Mirrored server sources: apps/api/src/folders/list.js (listFolders answers
- * `{ folders }`, the whole list and nothing else) and apps/api/src/vaults/list.js
- * (one page: `{ vaults, count, has_more, next_cursor? }`).
+ * `{ folders }`, the whole list and nothing else), apps/api/src/vaults/list.js
+ * (one page: `{ vaults, count, has_more, next_cursor? }`) and
+ * apps/api/src/vaults/create.js (createVault answers `{ vault_id, name, vmk,
+ * vmk_warning, created_at }`).
  */
-import type { ListFoldersResponse, ListVaultsResponse } from './types.js';
+import type { CreateVaultResponse, ListFoldersResponse, ListVaultsResponse } from './types.js';
 /** Fails to compile unless `T` resolves to exactly `true`. */
 type Assert<T extends true> = T;
 /** Invariant type equality: the SAME type, not merely mutually assignable. */
 type Equals<A, B> = (<T>() => T extends A ? 1 : 2) extends <T>() => T extends B ? 1 : 2 ? true : false;
 export type VaultsWireContract = [
     Assert<Equals<keyof ListFoldersResponse, 'folders'>>,
-    Assert<Equals<keyof ListVaultsResponse, 'vaults' | 'count' | 'has_more' | 'next_cursor'>>
+    Assert<Equals<keyof ListVaultsResponse, 'vaults' | 'count' | 'has_more' | 'next_cursor'>>,
+    Assert<Equals<keyof CreateVaultResponse, 'vault_id' | 'name' | 'vmk' | 'vmk_warning' | 'created_at'>>
 ];
 export {};

package/dist/vaults.test-d.js

@@ -7,8 +7,10 @@
  * `*.test.ts`, which tsconfig excludes.
  *
  * Mirrored server sources: apps/api/src/folders/list.js (listFolders answers
- * `{ folders }`, the whole list and nothing else) and apps/api/src/vaults/list.js
- * (one page: `{ vaults, count, has_more, next_cursor? }`).
+ * `{ folders }`, the whole list and nothing else), apps/api/src/vaults/list.js
+ * (one page: `{ vaults, count, has_more, next_cursor? }`) and
+ * apps/api/src/vaults/create.js (createVault answers `{ vault_id, name, vmk,
+ * vmk_warning, created_at }`).
  */
 export {};
 //# sourceMappingURL=vaults.test-d.js.map

package/dist/vaults.test-d.js.map

@@ -1 +1 @@
-{"version":3,"file":"vaults.test-d.js","sourceRoot":"","sources":["../src/vaults.test-d.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG"}
+{"version":3,"file":"vaults.test-d.js","sourceRoot":"","sources":["../src/vaults.test-d.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sparkvault/sdk-mobile",
-  "version": "7.1.11",
+  "version": "7.1.13",
   "description": "Mobile SDK for SparkVault Identity, vault, folder, and ingot workflows",
   "type": "module",
   "main": "./dist/index.js",

package/src/account.test-d.ts

@@ -0,0 +1,39 @@
+/**
+ * Core session wire-contract assertions — COMPILE-TIME ONLY.
+ *
+ * These types have no runtime, so a unit test can never catch them drifting from
+ * the server: the transpiler strips them and every assertion passes. `tsc
+ * --noEmit` (`pnpm typecheck`) is the gate instead. It is deliberately NOT a
+ * `*.test.ts`, which tsconfig excludes.
+ *
+ * Mirrored server sources: apps/api/src/auth/auth-with-identity.js
+ * (handleIdentityVerify answers `{ access_token, refresh_token, user, account }`,
+ * with `user` and `account` null for an identity that has no member yet) and
+ * apps/api/src/auth/complete-signup.js (the same four fields). Neither names a
+ * token type or lifetime: a field the server never sends reads as undefined
+ * wherever an app trusts it.
+ */
+
+import type {
+  CompleteSignupResponse,
+  IdentitySessionResponse,
+  PinVerifyLoginResponse,
+  PinVerifyResponse,
+  PinVerifySignupPendingResponse,
+} from './types.js';
+
+/** Fails to compile unless `T` resolves to exactly `true`. */
+type Assert<T extends true> = T;
+
+/** Invariant type equality: the SAME type, not merely mutually assignable. */
+type Equals<A, B> = (<T>() => T extends A ? 1 : 2) extends <T>() => T extends B ? 1 : 2
+  ? true
+  : false;
+
+export type AccountWireContract = [
+  Assert<Equals<keyof IdentitySessionResponse, 'access_token' | 'refresh_token' | 'user' | 'account'>>,
+  Assert<Equals<keyof CompleteSignupResponse, 'access_token' | 'refresh_token' | 'user' | 'account'>>,
+  // The exchange is a login or a pending signup: a second factor is collected
+  // at the Identity Product before its token exists.
+  Assert<Equals<PinVerifyResponse, PinVerifyLoginResponse | PinVerifySignupPendingResponse>>,
+];

package/src/account.ts

@@ -68,8 +68,6 @@ export class MobileAccountClient {
       return {
         access_token: session.access_token,
         refresh_token: session.refresh_token,
-        token_type: session.token_type ?? 'Bearer',
-        expires_in: session.expires_in ?? 3600,
         user: session.user,
       };
     }
@@ -78,7 +76,6 @@ export class MobileAccountClient {
       verified: true,
       needs_signup_info: true,
       signup_token: session.access_token,
-      expires_at: Math.floor(Date.now() / 1000) + (session.expires_in ?? 3600),
     };
   }
 
@@ -99,17 +96,6 @@ export class MobileAccountClient {
     return response.data;
   }
 
-  async signup(params: {
-    signup_token: string;
-    organization_name: string;
-    full_name?: string;
-  }): Promise<CompleteSignupResponse> {
-    return this.completeSignup(params.signup_token, {
-      organization_name: params.organization_name,
-      full_name: params.full_name,
-    });
-  }
-
   async getProfile(): Promise<SparkVaultUser> {
     const response = await this.http.get<SparkVaultUser>(apiPath`/profile`);
     if (this.config.tokenStorage.setUser) {

package/src/errors.ts

@@ -51,14 +51,6 @@ export class SparkVaultAuthenticationError extends SparkVaultMobileError {
   }
 }
 
-export class SparkVaultAuthorizationError extends SparkVaultMobileError {
-  constructor(message = 'Forbidden', details?: Record<string, unknown>) {
-    super(message, { code: 'authorization_error', statusCode: 403, details });
-    this.name = 'SparkVaultAuthorizationError';
-    Object.setPrototypeOf(this, SparkVaultAuthorizationError.prototype);
-  }
-}
-
 /**
  * Thrown on a 402 PLAN_REQUIRED gate: the account has no active subscription
  * and attempted a billable action. Callers route the user into the in-app

package/src/http.ts

@@ -10,7 +10,7 @@ import {
 import { isTransientHttpStatus } from './app-sdk/transient.js';
 import { createDedupMutex } from './mutex.js';
 import { queryString, type ApiPath, type QueryParams } from './request-path.js';
-import type { ApiErrorBody, ApiMeta, ApiResponse, RateLimitInfo } from './types.js';
+import type { ApiErrorBody, ApiMeta, ApiResponse } from './types.js';
 
 export type HttpMethod = 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';
 
@@ -21,7 +21,6 @@ export interface RequestOptions {
   query?: QueryParams;
   skipAuth?: boolean;
   vat?: string;
-  timeoutMs?: number;
 }
 
 export type AuthEvent = 'logout' | 'token_refreshed';
@@ -72,24 +71,11 @@ export class MobileHttpClient {
   private readonly authListeners = new Set<AuthEventListener>();
   private readonly refreshMutex = createDedupMutex<RefreshOutcome>();
   private lastMeta: ApiMeta | null = null;
-  private rateLimitInfo: RateLimitInfo | null = null;
 
   constructor(config: ResolvedMobileConfig) {
     this.config = config;
   }
 
-  get baseUrl(): string {
-    return this.config.apiBaseUrl;
-  }
-
-  get meta(): ApiMeta | null {
-    return this.lastMeta;
-  }
-
-  get rateLimit(): RateLimitInfo | null {
-    return this.rateLimitInfo;
-  }
-
   onAuthEvent(listener: AuthEventListener): () => void {
     this.authListeners.add(listener);
     return () => this.authListeners.delete(listener);
@@ -133,32 +119,6 @@ export class MobileHttpClient {
     return headers;
   }
 
-  private parseRateLimitHeaders(headers: Headers): void {
-    const limit = headers.get('X-RateLimit-Limit');
-    const remaining = headers.get('X-RateLimit-Remaining');
-    const reset = headers.get('X-RateLimit-Reset');
-
-    if (!limit || !remaining || !reset) return;
-
-    const parsedLimit = parseInt(limit, 10);
-    const parsedRemaining = parseInt(remaining, 10);
-    const parsedReset = parseInt(reset, 10);
-
-    if (
-      Number.isFinite(parsedLimit) &&
-      Number.isFinite(parsedRemaining) &&
-      Number.isFinite(parsedReset)
-    ) {
-      this.rateLimitInfo = {
-        limit: parsedLimit,
-        remaining: parsedRemaining,
-        reset: parsedReset,
-      };
-    } else {
-      this.config.logger.warn('Malformed rate limit headers', { limit, remaining, reset });
-    }
-  }
-
   /** The SDK error for a request the fetch adapter rejected (no HTTP response). */
   private transportError(err: unknown): SparkVaultMobileError {
     if (err instanceof SparkVaultMobileError) {
@@ -181,12 +141,6 @@ export class MobileHttpClient {
     return new SparkVaultMobileError(err instanceof Error ? err.message : 'Unknown request error');
   }
 
-  /**
-   * Single mapping for non-OK responses: 402s become typed gate errors
-   * (PlanRequiredError / QuotaExceededError) so the subscribe / add-on UX keys
-   * off one set of types; everything else becomes a SparkVaultMobileError
-   * carrying the server code, status, details, and meta.
-   */
   /** An error response's JSON body, or an empty one when it has none. */
   private async readErrorBody(response: Response): Promise<ApiErrorBody> {
     try {
@@ -209,6 +163,12 @@ export class MobileHttpClient {
     }
   }
 
+  /**
+   * Single mapping for non-OK responses: 402s become typed gate errors
+   * (PlanRequiredError / QuotaExceededError) so the subscribe / add-on UX keys
+   * off one set of types; everything else becomes a SparkVaultMobileError
+   * carrying the server code, status, details, and meta.
+   */
   private httpError(status: number, errorBody: ApiErrorBody): SparkVaultMobileError {
     if (errorBody.meta) {
       this.lastMeta = errorBody.meta;
@@ -358,7 +318,7 @@ export class MobileHttpClient {
 
   async request<T>(method: HttpMethod, path: ApiPath, options: RequestOptions = {}): Promise<ApiResponse<T>> {
     const url = this.makeUrl(path, options.query);
-    const timeoutMs = options.timeoutMs ?? this.config.timeoutMs;
+    const timeoutMs = this.config.timeoutMs;
     const body = method === 'GET' ? undefined : this.serializeBody(options.body);
     let headers = await this.getHeaders({ ...options, body: options.body });
 
@@ -368,7 +328,6 @@ export class MobileHttpClient {
     } catch (err) {
       throw this.transportError(err);
     }
-    this.parseRateLimitHeaders(response.headers);
 
     if (response.status === 401 && !options.skipAuth) {
       await this.throwIfVatRefused(response);
@@ -379,7 +338,6 @@ export class MobileHttpClient {
       } catch (err) {
         throw this.transportError(err);
       }
-      this.parseRateLimitHeaders(response.headers);
     }
 
     if (response.status === 204) {

package/src/index.ts

@@ -133,7 +133,6 @@ export {
   vatRefusalReason,
   QuotaExceededError,
   SparkVaultAuthenticationError,
-  SparkVaultAuthorizationError,
   SparkVaultMobileError,
   SparkVaultNetworkError,
   SparkVaultTimeoutError,

package/src/ingots.test-d.ts

@@ -6,13 +6,16 @@
  * and every assertion would pass. `tsc --noEmit` (`pnpm typecheck`) is the gate
  * instead. It is deliberately NOT a `*.test.ts`, which tsconfig excludes.
  *
- * Mirrored server source: apps/api/src/ingots/sharing.js (`formatSharingConfig`,
- * the one shape GET and PUT /vaults/:id/ingots/:ingot_id/sharing answer). A
- * field the server never sends reads as undefined wherever an app trusts it:
- * a link section keyed on it never renders.
+ * Mirrored server sources: apps/api/src/ingots/sharing.js (`formatSharingConfig`,
+ * the one shape GET and PUT /vaults/:id/ingots/:ingot_id/sharing answer),
+ * apps/api/src/repositories/IngotRepository.js (`toPublicFormat`, the one
+ * projection every ingot answer uses) and apps/api/src/lib/pagination.js
+ * (`buildPaginatedResponse`: one page, `{ ingots, count, has_more,
+ * next_cursor? }`). A field the server never sends reads as undefined wherever
+ * an app trusts it: a link section keyed on it never renders.
  */
 
-import type { IngotSharingConfig } from './types.js';
+import type { Ingot, IngotSharingConfig, ListIngotsResponse } from './types.js';
 
 /** Fails to compile unless `T` resolves to exactly `true`. */
 type Assert<T extends true> = T;
@@ -43,4 +46,24 @@ export type IngotsWireContract = [
   Assert<Equals<IngotSharingConfig['public_url'], string | null>>,
   Assert<Equals<IngotSharingConfig['link_code'], string | null>>,
   Assert<Equals<IngotSharingConfig['visibility'], 'invite_only' | 'authenticated' | 'public' | null>>,
+  // A page reports its own length and whether more follow; it carries no total.
+  Assert<Equals<keyof ListIngotsResponse, 'ingots' | 'count' | 'has_more' | 'next_cursor'>>,
+  // Fields toPublicFormat projects, and none it keeps to the row (storage
+  // location, last access, the abandoned-upload expiry).
+  Assert<
+    Equals<
+      keyof Ingot,
+      | 'ingot_id'
+      | 'name'
+      | 'content_type'
+      | 'size_bytes'
+      | 'status'
+      | 'folder_id'
+      | 'managed_by'
+      | 'created_at'
+      | 'access_count'
+      | 'content_hmac'
+      | 'content_version'
+    >
+  >,
 ];