@terminal3/t3n-sdk 3.0.0 → 3.2.0

package/README.md

@@ -27,17 +27,18 @@ import {
   loadWasmComponent,
   createEthAuthInput,
   eth_get_address,
-  eth_sign,
+  metamask_sign,
 } from "@terminal3/t3n-sdk";
 
 const wasmComponent = await loadWasmComponent();
 const privateKey = process.env.T3N_DEMO_KEY!;
+const address = eth_get_address(privateKey);
 
 const client = new T3nClient({
   baseUrl: "https://t3n-node.example.com",
   wasmComponent,
   handlers: {
-    EthSign: eth_sign(privateKey),
+    EthSign: metamask_sign(address, undefined, privateKey),
   },
 });
 
@@ -55,15 +56,16 @@ import {
   T3nClient,
   createEthAuthInput,
   eth_get_address,
-  eth_sign,
+  metamask_sign,
 } from "@terminal3/t3n-sdk";
 
 const privateKey = "0x...";
+const address = eth_get_address(privateKey);
 
 const client = new T3nClient({
   wasmComponent: await loadWasmComponent(),
   handlers: {
-    EthSign: eth_sign(privateKey),
+    EthSign: metamask_sign(address, undefined, privateKey),
   },
 });
 
@@ -306,7 +308,10 @@ interface T3nClientConfig {
 ### Example with Custom Configuration
 
 ```typescript
-import { T3nClient, LogLevel } from '@terminal3/t3n-sdk';
+import { T3nClient, LogLevel, eth_get_address, metamask_sign } from '@terminal3/t3n-sdk';
+
+const privateKey = process.env.T3N_DEMO_KEY!;
+const address = eth_get_address(privateKey);
 
 const client = new T3nClient({
   baseUrl: "https://t3n-node.example.com",
@@ -318,7 +323,7 @@ const client = new T3nClient({
     'X-Custom-Header': 'custom-value'
   },
   handlers: {
-    EthSign: eth_sign(privateKey),
+    EthSign: metamask_sign(address, undefined, privateKey),
     MlKemPublicKey: ml_kem_public_key(),
     Random: random(),
   }
@@ -873,11 +878,13 @@ To use the real WASM component:
 
 ### Mock Component for Testing
 
+`loadWasmComponent()` automatically falls back to a built-in mock when the real WASM file is not present. No extra setup needed in test environments:
+
 ```typescript
-import { createMockWasmComponent } from '@terminal3/t3n-sdk';
+import { loadWasmComponent } from '@terminal3/t3n-sdk';
 
-// Use mock component for testing
-const mockComponent = createMockWasmComponent();
+// In test environments (no real WASM file present), this returns a mock automatically
+const wasmComponent = await loadWasmComponent();
 ```
 
 ### WASM Component Features

package/dist/index.d.ts

@@ -1433,6 +1433,27 @@ declare class T3nClient {
      * 3. Sends `SubmitIdToken` with the nonce-bearing token → receives DID.
      */
     authenticate(authInput: AuthInput): Promise<Did>;
+    /**
+     * Add an Ethereum wallet as an additional authenticator on the
+     * already-authenticated account.
+     *
+     * Proves control of the wallet via SIWE and links it to the session's
+     * EXISTING DID (resolved server-side from the session) — it does NOT
+     * mint a new DID and does NOT change the session: `this.did` and
+     * `this.status` are left untouched, and no new cookie is issued.
+     *
+     * Requires a completed {@link authenticate} first (e.g. an OIDC
+     * login). Only Ethereum is supported — OIDC/email identities are
+     * established at login, not added afterwards.
+     *
+     * Reuses the same client-side eth state machine as login, but posts
+     * to the authenticated `auth.add-authenticator` route. If the wallet
+     * is already linked to a different account, the server rejects with a
+     * typed `eth_auth_map_conflict` error (resolve via account merge).
+     *
+     * @returns the existing DID the wallet was linked to.
+     */
+    addAuthMethod(authInput: EthAuthInput): Promise<Did>;
     /**
      * OIDC two-step authentication with session-binding nonce.
      *
@@ -2833,4 +2854,4 @@ declare function clearKeyCache(): void;
 declare function loadConfig(baseUrl?: string): SdkConfig;
 
 export { AGENT_PUBKEY_LEN, AuthMethod, AuthenticationError, ContractResponseError, DEFAULT_INDIVIDUAL_THRESHOLD_CENTS, DEFAULT_KYC_POLL_CADENCE, DELEGATION_CREDENTIAL_DOMAIN, DELEGATION_INVOCATION_DOMAIN, DelegationCustodialClient, ETH_SIG_LEN, HandshakeError, HttpTransport, KycStatusTimeoutError, LogLevel, MAX_FUNCTIONS_PER_CREDENTIAL, MockTransport, NODE_URLS, NONCE_LEN, OrgDataClient, PAYROLL_FUNCTIONS_V1, REQUEST_HASH_LEN, RpcError, SessionExpiredError, SessionOrgDataClient, SessionStateError, SessionStatus, T3nClient, T3nError, TERMINAL_KYC_STATUSES, UserUpsertError, VC_ID_LEN, WasmError, _b64uEncode, assertShape, b64uDecodeStrict, b64uEncodeBytes, buildDelegationCredential, buildInvocationPreimage, buildPayrollDirectInvocation, buildPayrollInvocation, bytesToString, canonicaliseCredential, canonicaliseRequest, clearKeyCache, compactDidFromBytes, createDefaultHandlers, createEthAuthInput, createLogger, createMlKemPublicKeyHandler, createOidcAuthInput, createOrgDataClientFromSession, createRandomHandler, decodeWasmErrorMessage, eip191Digest, ethRecoverEip191, eth_get_address, extractWasmError, fetchDkgAttestation, fetchMlKemPublicKey, generateRandomString, generateUUID, getEnvironment, getEnvironmentName, getGlobalLogLevel, getLogger, getNodeUrl, getScriptVersion, isDataGetResponse, isDataListResponse, isMutationResponse, isObject, isOrgContractGrants, isOrgPolicyMeta, isOrgWriters, loadConfig, loadWasmComponent, metamask_get_address, metamask_sign, parseContractResponse, redactSecrets, redactSecretsFromJson, requestHash, revokeDelegation, setEnvironment, setGlobalLogLevel, setNodeUrl, signAgentInvocation, signCredential, stringToBytes, validateConfig, validateCredentialBody, verifyDkgAttestation, verifyTdxQuote };
-export type { AgeBand, AuthInput, BuildDelegationCredentialOpts, BuildPayrollDirectInvocationOpts, BuildPayrollInvocationOpts, ClientAuth, ClientHandshake, ConfigValidationResult, ContractResponseSchema, CreatePolicyInput, DataGetInput, DataGetResponse, DataListInput, DataListResponse, DelegationCredential, DelegationCustodialClientOpts, DelegationEnvelope, DeleteDataInput, DeleteGrantsInput, DeleteScopeInput, Did, DkgAttestation, DkgVerifyResult, EmployeeRecord, EmploymentStatus, Environment, EthAuthInput, ExecuteOrgDataActionOptions, ExpenseClaim, GrantsGetInput, GuestToHostHandler, GuestToHostHandlers, HandshakeResult, JsonRpcRequest, JsonRpcResponse, KycPollCadence, KycPollOptions, KycStatus, KycStatusKind, Logger, MutationResponse, OidcAuthInput, OidcCredentials, OrgContractGrants, OrgDataActionWire, OrgDataClientOptions, OrgPolicyMeta, OrgWriters, OtpChannel, OtpMergeSuggestion, OtpRequestInput, OtpRequestResult, OtpVerifyInput, OtpVerifyResult, PayrollInvocation, PayrollInvocationDelegated, PayrollInvocationDirect, PayrollRunRequest, PeerQuoteResult, PolicyGetInput, QuoteVerifyResult, ResidencyCategory, RevokeDelegationOpts, RevokeDelegationResult, SdkConfig, SessionCrypto, SessionId, SetGrantsInput, SetWritersInput, SignCustodialResult, SignDelegationResponse, SubmitUserInputArgs, SubmitUserInputResult, T3nClientConfig, TenantAdmitProjection, TenantAdmitStatus, Transport, UpdateMetaInput, UserGrant, UserInputProfile, UserUpsertErrorKind, WasmComponent, WasmNextResult, WriteDataInput, WritersGetInput };
+export type { AgeBand, AuthInput, BalanceRow, BuildDelegationCredentialOpts, BuildPayrollDirectInvocationOpts, BuildPayrollInvocationOpts, ChargeReason, ClientAuth, ClientHandshake, ConfigValidationResult, ContractResponseSchema, CreatePolicyInput, DataGetInput, DataGetResponse, DataListInput, DataListResponse, DelegationCredential, DelegationCustodialClientOpts, DelegationEnvelope, DeleteDataInput, DeleteGrantsInput, DeleteScopeInput, Did, Direction, DkgAttestation, DkgVerifyResult, EmployeeRecord, EmploymentStatus, Environment, EthAuthInput, ExecuteOrgDataActionOptions, ExpenseClaim, GetUsageOptions, GrantsGetInput, GuestToHostHandler, GuestToHostHandlers, HandshakeResult, JsonRpcRequest, JsonRpcResponse, KycPollCadence, KycPollOptions, KycStatus, KycStatusKind, Logger, MutationResponse, OidcAuthInput, OidcCredentials, OrgContractGrants, OrgDataActionWire, OrgDataClientOptions, OrgPolicyMeta, OrgWriters, OtpChannel, OtpMergeSuggestion, OtpRequestInput, OtpRequestResult, OtpVerifyInput, OtpVerifyResult, PayrollInvocation, PayrollInvocationDelegated, PayrollInvocationDirect, PayrollRunRequest, PeerQuoteResult, PolicyGetInput, QuoteVerifyResult, ResidencyCategory, RevokeDelegationOpts, RevokeDelegationResult, SdkConfig, SessionCrypto, SessionId, SetGrantsInput, SetWritersInput, SignCustodialResult, SignDelegationResponse, SubmitUserInputArgs, SubmitUserInputResult, T3nClientConfig, TenantAdmitProjection, TenantAdmitStatus, TokenTxKind, Transport, UpdateMetaInput, UsageEntry, UsagePage, UserGrant, UserInputProfile, UserUpsertErrorKind, WasmComponent, WasmNextResult, WriteDataInput, WritersGetInput };