@unicitylabs/sphere-sdk 0.18.0-dev.2 → 0.18.0-dev.3

package/dist/core/index.d.cts

@@ -1,5 +1,6 @@
 import { IMintJustificationVerifier } from '@unicitylabs/state-transition-sdk/lib/transaction/verification/IMintJustificationVerifier.js';
 import { Token as Token$1 } from '@unicitylabs/state-transition-sdk/lib/transaction/Token.js';
+import { ITokenIssuanceVerifier } from '@unicitylabs/state-transition-sdk/lib/transaction/verification/ITokenIssuanceVerifier.js';
 import { NostrClient, NostrKeyManager } from '@unicitylabs/nostr-js-sdk';
 
 /**
@@ -230,12 +231,21 @@ interface BurnParams {
     /** The recipient predicate is `BurnPredicate(sha256(reasonBytes))`; the bytes ride in the aux data. */
     readonly reasonBytes: Uint8Array;
 }
+/** The issuance rule of one token type, and the coins no other type may carry. */
+interface TokenIssuancePolicy extends ITokenIssuanceVerifier {
+    /** A token carrying one of these coins counts only when it is of this type and verified. */
+    readonly coinIds: readonly CoinId[];
+    /** Must change whenever the proofs this policy accepts change, a fix to its verification code included, so wallets check held tokens again. */
+    readonly revision?: string;
+}
 /** Mint-reason verifiers keyed by CBOR tag, registered at engine construction. */
 interface TokenPlugin {
     /** Stable identifier for diagnostics, e.g. `'bridge:tron-usdt'`. */
     readonly id: string;
     /** Mint-reason verifiers to register; a duplicate tag across plugins is INVALID_CONFIG. */
     readonly mintJustificationVerifiers?: readonly IMintJustificationVerifier[];
+    /** Issuance policies to register; a duplicate token type or coin across plugins is INVALID_CONFIG. */
+    readonly tokenIssuancePolicies?: readonly TokenIssuancePolicy[];
 }
 /** Plan an NFT mint (#785); `mintDataToken` then mints the plan. */
 interface BuildNftMintParams {
@@ -431,6 +441,8 @@ interface ITokenEngine {
      * read its bytes via `readTokenData`. (Used e.g. for on-chain invoice tokens.)
      */
     mintDataToken(params: MintDataTokenParams, options?: EngineOpOptions): Promise<SphereToken>;
+    /** Throws VALIDATION_ERROR when `mintDataToken` would refuse `params` before submitting, e.g. a reason tag no registered verifier handles. */
+    assertMintable(params: MintDataTokenParams): void;
     /** Plan an NFT mint: encode (and optionally sign as this engine's identity) the payload and derive its token id. No chain op. */
     buildNftMint(params: BuildNftMintParams): Promise<NftMintPlan>;
     /** Spend a token wholesale to a recipient pubkey; returns the recipient's finished token. */
@@ -543,7 +555,7 @@ interface VerificationWorkerConfig {
  * }
  * ```
  */
-type SphereErrorCode = 'NOT_INITIALIZED' | 'ALREADY_INITIALIZED' | 'INVALID_CONFIG' | 'INVALID_IDENTITY' | 'INSUFFICIENT_BALANCE' | 'INVALID_RECIPIENT' | 'TRANSFER_FAILED' | 'TRANSFER_CONFLICT' | 'CERTIFICATION_UNCONFIRMED' | 'CHECKPOINT_PERSIST_FAILED' | 'SPLIT_CHECKPOINT_LOST' | 'CHECKPOINT_TRUSTBASE_MISMATCH' | 'STORAGE_ERROR' | 'SEND_SYNC_PENDING' | 'SEND_PARTIALLY_COMPLETED' | 'TRANSPORT_ERROR' | 'AGGREGATOR_ERROR' | 'VALIDATION_ERROR' | 'INVALID_AMOUNT' | 'NETWORK_ERROR' | 'TIMEOUT' | 'DECRYPTION_ERROR' | 'MODULE_NOT_AVAILABLE' | 'PAYMENTS_NOT_COMPOSED' | 'SIGNING_ERROR' | 'SEND_QUEUE_TIMEOUT' | 'SEND_INSUFFICIENT_BALANCE' | 'SEND_RESERVATION_CANCELLED' | 'SEND_QUEUE_FULL' | 'MODULE_DESTROYED' | 'REENTRANT_GATE' | 'INVOICE_NO_TARGETS' | 'INVOICE_INVALID_ADDRESS' | 'INVOICE_NO_ASSETS' | 'INVOICE_INVALID_ASSET' | 'INVOICE_INVALID_AMOUNT' | 'INVOICE_INVALID_COIN' | 'INVOICE_INVALID_NFT' | 'INVOICE_PAST_DUE_DATE' | 'INVOICE_DUPLICATE_ADDRESS' | 'INVOICE_DUPLICATE_COIN' | 'INVOICE_DUPLICATE_NFT' | 'INVOICE_MINT_FAILED' | 'INVOICE_INVALID_PROOF' | 'INVOICE_WRONG_TOKEN_TYPE' | 'INVOICE_INVALID_DATA' | 'INVOICE_ALREADY_EXISTS' | 'INVOICE_NOT_FOUND' | 'INVOICE_NOT_TARGET' | 'INVOICE_ALREADY_CLOSED' | 'INVOICE_ALREADY_CANCELLED' | 'INVOICE_ORACLE_REQUIRED' | 'INVOICE_TERMINATED' | 'INVOICE_INVALID_TARGET' | 'INVOICE_INVALID_ASSET_INDEX' | 'INVOICE_RETURN_EXCEEDS_BALANCE' | 'INVOICE_INVALID_DELIVERY_METHOD' | 'INVOICE_INVALID_REFUND_ADDRESS' | 'INVOICE_INVALID_CONTACT' | 'INVOICE_INVALID_ID' | 'INVOICE_TOO_MANY_TARGETS' | 'INVOICE_TOO_MANY_ASSETS' | 'INVOICE_MEMO_TOO_LONG' | 'INVOICE_TERMS_TOO_LARGE' | 'INVOICE_NOT_TERMINATED' | 'INVOICE_NOT_CANCELLED' | 'INVOICE_STORAGE_FAILED' | 'RATE_LIMITED' | 'COMMUNICATIONS_UNAVAILABLE' | 'SWAP_INVALID_DEAL' | 'SWAP_INVALID_MANIFEST' | 'SWAP_NOT_FOUND' | 'SWAP_WRONG_STATE' | 'SWAP_RESOLVE_FAILED' | 'SWAP_DM_SEND_FAILED' | 'SWAP_ESCROW_REJECTED' | 'SWAP_DEPOSIT_FAILED' | 'SWAP_PAYOUT_VERIFICATION_FAILED' | 'SWAP_ALREADY_EXISTS' | 'SWAP_ALREADY_COMPLETED' | 'SWAP_ALREADY_CANCELLED' | 'SWAP_TIMEOUT' | 'SWAP_LIMIT_EXCEEDED' | 'SWAP_ALREADY_INITIALIZED' | 'SWAP_MODULE_DESTROYED' | 'SWAP_NOT_INITIALIZED';
+type SphereErrorCode = 'NOT_INITIALIZED' | 'ALREADY_INITIALIZED' | 'INVALID_CONFIG' | 'INVALID_IDENTITY' | 'INSUFFICIENT_BALANCE' | 'INVALID_RECIPIENT' | 'TRANSFER_FAILED' | 'TRANSFER_CONFLICT' | 'CERTIFICATION_UNCONFIRMED' | 'CHECKPOINT_PERSIST_FAILED' | 'SPLIT_CHECKPOINT_LOST' | 'CHECKPOINT_TRUSTBASE_MISMATCH' | 'MINT_REASON_UNVERIFIABLE' | 'STORAGE_ERROR' | 'SEND_SYNC_PENDING' | 'SEND_PARTIALLY_COMPLETED' | 'TRANSPORT_ERROR' | 'AGGREGATOR_ERROR' | 'VALIDATION_ERROR' | 'INVALID_AMOUNT' | 'NETWORK_ERROR' | 'TIMEOUT' | 'DECRYPTION_ERROR' | 'MODULE_NOT_AVAILABLE' | 'PAYMENTS_NOT_COMPOSED' | 'SIGNING_ERROR' | 'SEND_QUEUE_TIMEOUT' | 'SEND_INSUFFICIENT_BALANCE' | 'SEND_RESERVATION_CANCELLED' | 'SEND_QUEUE_FULL' | 'MODULE_DESTROYED' | 'REENTRANT_GATE' | 'INVOICE_NO_TARGETS' | 'INVOICE_INVALID_ADDRESS' | 'INVOICE_NO_ASSETS' | 'INVOICE_INVALID_ASSET' | 'INVOICE_INVALID_AMOUNT' | 'INVOICE_INVALID_COIN' | 'INVOICE_INVALID_NFT' | 'INVOICE_PAST_DUE_DATE' | 'INVOICE_DUPLICATE_ADDRESS' | 'INVOICE_DUPLICATE_COIN' | 'INVOICE_DUPLICATE_NFT' | 'INVOICE_MINT_FAILED' | 'INVOICE_INVALID_PROOF' | 'INVOICE_WRONG_TOKEN_TYPE' | 'INVOICE_INVALID_DATA' | 'INVOICE_ALREADY_EXISTS' | 'INVOICE_NOT_FOUND' | 'INVOICE_NOT_TARGET' | 'INVOICE_ALREADY_CLOSED' | 'INVOICE_ALREADY_CANCELLED' | 'INVOICE_ORACLE_REQUIRED' | 'INVOICE_TERMINATED' | 'INVOICE_INVALID_TARGET' | 'INVOICE_INVALID_ASSET_INDEX' | 'INVOICE_RETURN_EXCEEDS_BALANCE' | 'INVOICE_INVALID_DELIVERY_METHOD' | 'INVOICE_INVALID_REFUND_ADDRESS' | 'INVOICE_INVALID_CONTACT' | 'INVOICE_INVALID_ID' | 'INVOICE_TOO_MANY_TARGETS' | 'INVOICE_TOO_MANY_ASSETS' | 'INVOICE_MEMO_TOO_LONG' | 'INVOICE_TERMS_TOO_LARGE' | 'INVOICE_NOT_TERMINATED' | 'INVOICE_NOT_CANCELLED' | 'INVOICE_STORAGE_FAILED' | 'RATE_LIMITED' | 'COMMUNICATIONS_UNAVAILABLE' | 'SWAP_INVALID_DEAL' | 'SWAP_INVALID_MANIFEST' | 'SWAP_NOT_FOUND' | 'SWAP_WRONG_STATE' | 'SWAP_RESOLVE_FAILED' | 'SWAP_DM_SEND_FAILED' | 'SWAP_ESCROW_REJECTED' | 'SWAP_DEPOSIT_FAILED' | 'SWAP_PAYOUT_VERIFICATION_FAILED' | 'SWAP_ALREADY_EXISTS' | 'SWAP_ALREADY_COMPLETED' | 'SWAP_ALREADY_CANCELLED' | 'SWAP_TIMEOUT' | 'SWAP_LIMIT_EXCEEDED' | 'SWAP_ALREADY_INITIALIZED' | 'SWAP_MODULE_DESTROYED' | 'SWAP_NOT_INITIALIZED';
 declare class SphereError extends Error {
     readonly code: SphereErrorCode;
     readonly cause?: unknown;
@@ -656,6 +668,7 @@ interface BurnResult {
     /** The burned blob, the proof of the burn: persist it, then `acknowledgeBurn(burnId)`. */
     burnedToken?: Uint8Array;
     error?: string;
+    errorCode?: string;
 }
 /** A burn not yet acknowledged: in flight (`burnedToken` null), certified, or settled. */
 interface PendingBurn {
@@ -665,6 +678,10 @@ interface PendingBurn {
     readonly burnedToken: Uint8Array | null;
     readonly settled: boolean;
     readonly createdAt: number;
+    readonly failure?: {
+        readonly code: string;
+        readonly message: string;
+    };
 }
 /** #785: `content` uses ERC-721 field names; `sign` (default true) signs as creator with this wallet's chain key. */
 interface MintNftRequest {
@@ -752,9 +769,13 @@ interface PaymentsV2 {
     prewarmSend(request: SendRequest): Promise<void>;
     discardPrewarm(): void;
     assets(coinId?: string): Promise<Asset[]>;
+    unverifiedAssets(coinId?: string): Promise<Asset[]>;
     tokens(filter?: {
         coinId?: string;
     }): Token[];
+    unverifiedTokens(filter?: {
+        coinId?: string;
+    }): Token[];
     coinless(): CoinlessToken[];
     tokenData(tokenId: string): Promise<Uint8Array | null>;
     /** The genesis mint reason of one held token; null when it was minted without one. Same contract as tokenData. */
@@ -999,6 +1020,7 @@ interface FullIdentity extends Identity {
     readonly privateKey: string;
 }
 type TokenStatus = 'pending' | 'submitted' | 'confirmed' | 'transferring' | 'spent' | 'invalid';
+type Unverified = 'pending' | 'refused';
 interface Token {
     readonly id: string;
     readonly coinId: string;
@@ -1025,6 +1047,8 @@ interface Token {
      * send self-heals instead of wedging on a stale source.
      */
     suspectedSpent?: boolean;
+    /** Carries a coin an issuance policy claims without having passed that policy yet (`pending`) or at all (`refused`): shown, never spent. */
+    readonly unverified?: Unverified;
 }
 /**
  * A holding that names no coin (wallet-api#140) — an NFT. Deliberately NOT a
@@ -1087,6 +1111,8 @@ interface Asset {
     readonly fiatValueUsd: number | null;
     /** Total fiat value in EUR */
     readonly fiatValueEur: number | null;
+    /** Holds tokens of a claimed coin that have not passed its issuance policy yet (`pending`) or at all (`refused`): never spendable, never priced. */
+    readonly unverified?: Unverified;
 }
 type TransferStatus = 'pending' | 'submitted' | 'confirmed' | 'delivered' | 'completed' | 'failed';
 /**
@@ -1123,6 +1149,8 @@ interface IncomingTransfer {
     readonly tokens: Token[];
     /** Arrivals that name no coin (#777). Disjoint from `tokens`, never a zero Token. */
     readonly coinless?: CoinlessToken[];
+    /** Refused arrivals of a claimed coin under another type; never counted, and never in `tokens`. */
+    readonly unverifiedTokens?: Token[];
     readonly memo?: string;
     readonly receivedAt: number;
 }
@@ -3149,6 +3177,7 @@ declare class WalletApiV2Client {
             tokenId: string;
             key: string;
         }[];
+        externalDelivery?: boolean;
     }): Promise<ApplyDeltaWire>;
     fetchBlob(getUrl: string): Promise<Uint8Array>;
     /**

package/dist/core/index.d.ts

@@ -1,5 +1,6 @@
 import { IMintJustificationVerifier } from '@unicitylabs/state-transition-sdk/lib/transaction/verification/IMintJustificationVerifier.js';
 import { Token as Token$1 } from '@unicitylabs/state-transition-sdk/lib/transaction/Token.js';
+import { ITokenIssuanceVerifier } from '@unicitylabs/state-transition-sdk/lib/transaction/verification/ITokenIssuanceVerifier.js';
 import { NostrClient, NostrKeyManager } from '@unicitylabs/nostr-js-sdk';
 
 /**
@@ -230,12 +231,21 @@ interface BurnParams {
     /** The recipient predicate is `BurnPredicate(sha256(reasonBytes))`; the bytes ride in the aux data. */
     readonly reasonBytes: Uint8Array;
 }
+/** The issuance rule of one token type, and the coins no other type may carry. */
+interface TokenIssuancePolicy extends ITokenIssuanceVerifier {
+    /** A token carrying one of these coins counts only when it is of this type and verified. */
+    readonly coinIds: readonly CoinId[];
+    /** Must change whenever the proofs this policy accepts change, a fix to its verification code included, so wallets check held tokens again. */
+    readonly revision?: string;
+}
 /** Mint-reason verifiers keyed by CBOR tag, registered at engine construction. */
 interface TokenPlugin {
     /** Stable identifier for diagnostics, e.g. `'bridge:tron-usdt'`. */
     readonly id: string;
     /** Mint-reason verifiers to register; a duplicate tag across plugins is INVALID_CONFIG. */
     readonly mintJustificationVerifiers?: readonly IMintJustificationVerifier[];
+    /** Issuance policies to register; a duplicate token type or coin across plugins is INVALID_CONFIG. */
+    readonly tokenIssuancePolicies?: readonly TokenIssuancePolicy[];
 }
 /** Plan an NFT mint (#785); `mintDataToken` then mints the plan. */
 interface BuildNftMintParams {
@@ -431,6 +441,8 @@ interface ITokenEngine {
      * read its bytes via `readTokenData`. (Used e.g. for on-chain invoice tokens.)
      */
     mintDataToken(params: MintDataTokenParams, options?: EngineOpOptions): Promise<SphereToken>;
+    /** Throws VALIDATION_ERROR when `mintDataToken` would refuse `params` before submitting, e.g. a reason tag no registered verifier handles. */
+    assertMintable(params: MintDataTokenParams): void;
     /** Plan an NFT mint: encode (and optionally sign as this engine's identity) the payload and derive its token id. No chain op. */
     buildNftMint(params: BuildNftMintParams): Promise<NftMintPlan>;
     /** Spend a token wholesale to a recipient pubkey; returns the recipient's finished token. */
@@ -543,7 +555,7 @@ interface VerificationWorkerConfig {
  * }
  * ```
  */
-type SphereErrorCode = 'NOT_INITIALIZED' | 'ALREADY_INITIALIZED' | 'INVALID_CONFIG' | 'INVALID_IDENTITY' | 'INSUFFICIENT_BALANCE' | 'INVALID_RECIPIENT' | 'TRANSFER_FAILED' | 'TRANSFER_CONFLICT' | 'CERTIFICATION_UNCONFIRMED' | 'CHECKPOINT_PERSIST_FAILED' | 'SPLIT_CHECKPOINT_LOST' | 'CHECKPOINT_TRUSTBASE_MISMATCH' | 'STORAGE_ERROR' | 'SEND_SYNC_PENDING' | 'SEND_PARTIALLY_COMPLETED' | 'TRANSPORT_ERROR' | 'AGGREGATOR_ERROR' | 'VALIDATION_ERROR' | 'INVALID_AMOUNT' | 'NETWORK_ERROR' | 'TIMEOUT' | 'DECRYPTION_ERROR' | 'MODULE_NOT_AVAILABLE' | 'PAYMENTS_NOT_COMPOSED' | 'SIGNING_ERROR' | 'SEND_QUEUE_TIMEOUT' | 'SEND_INSUFFICIENT_BALANCE' | 'SEND_RESERVATION_CANCELLED' | 'SEND_QUEUE_FULL' | 'MODULE_DESTROYED' | 'REENTRANT_GATE' | 'INVOICE_NO_TARGETS' | 'INVOICE_INVALID_ADDRESS' | 'INVOICE_NO_ASSETS' | 'INVOICE_INVALID_ASSET' | 'INVOICE_INVALID_AMOUNT' | 'INVOICE_INVALID_COIN' | 'INVOICE_INVALID_NFT' | 'INVOICE_PAST_DUE_DATE' | 'INVOICE_DUPLICATE_ADDRESS' | 'INVOICE_DUPLICATE_COIN' | 'INVOICE_DUPLICATE_NFT' | 'INVOICE_MINT_FAILED' | 'INVOICE_INVALID_PROOF' | 'INVOICE_WRONG_TOKEN_TYPE' | 'INVOICE_INVALID_DATA' | 'INVOICE_ALREADY_EXISTS' | 'INVOICE_NOT_FOUND' | 'INVOICE_NOT_TARGET' | 'INVOICE_ALREADY_CLOSED' | 'INVOICE_ALREADY_CANCELLED' | 'INVOICE_ORACLE_REQUIRED' | 'INVOICE_TERMINATED' | 'INVOICE_INVALID_TARGET' | 'INVOICE_INVALID_ASSET_INDEX' | 'INVOICE_RETURN_EXCEEDS_BALANCE' | 'INVOICE_INVALID_DELIVERY_METHOD' | 'INVOICE_INVALID_REFUND_ADDRESS' | 'INVOICE_INVALID_CONTACT' | 'INVOICE_INVALID_ID' | 'INVOICE_TOO_MANY_TARGETS' | 'INVOICE_TOO_MANY_ASSETS' | 'INVOICE_MEMO_TOO_LONG' | 'INVOICE_TERMS_TOO_LARGE' | 'INVOICE_NOT_TERMINATED' | 'INVOICE_NOT_CANCELLED' | 'INVOICE_STORAGE_FAILED' | 'RATE_LIMITED' | 'COMMUNICATIONS_UNAVAILABLE' | 'SWAP_INVALID_DEAL' | 'SWAP_INVALID_MANIFEST' | 'SWAP_NOT_FOUND' | 'SWAP_WRONG_STATE' | 'SWAP_RESOLVE_FAILED' | 'SWAP_DM_SEND_FAILED' | 'SWAP_ESCROW_REJECTED' | 'SWAP_DEPOSIT_FAILED' | 'SWAP_PAYOUT_VERIFICATION_FAILED' | 'SWAP_ALREADY_EXISTS' | 'SWAP_ALREADY_COMPLETED' | 'SWAP_ALREADY_CANCELLED' | 'SWAP_TIMEOUT' | 'SWAP_LIMIT_EXCEEDED' | 'SWAP_ALREADY_INITIALIZED' | 'SWAP_MODULE_DESTROYED' | 'SWAP_NOT_INITIALIZED';
+type SphereErrorCode = 'NOT_INITIALIZED' | 'ALREADY_INITIALIZED' | 'INVALID_CONFIG' | 'INVALID_IDENTITY' | 'INSUFFICIENT_BALANCE' | 'INVALID_RECIPIENT' | 'TRANSFER_FAILED' | 'TRANSFER_CONFLICT' | 'CERTIFICATION_UNCONFIRMED' | 'CHECKPOINT_PERSIST_FAILED' | 'SPLIT_CHECKPOINT_LOST' | 'CHECKPOINT_TRUSTBASE_MISMATCH' | 'MINT_REASON_UNVERIFIABLE' | 'STORAGE_ERROR' | 'SEND_SYNC_PENDING' | 'SEND_PARTIALLY_COMPLETED' | 'TRANSPORT_ERROR' | 'AGGREGATOR_ERROR' | 'VALIDATION_ERROR' | 'INVALID_AMOUNT' | 'NETWORK_ERROR' | 'TIMEOUT' | 'DECRYPTION_ERROR' | 'MODULE_NOT_AVAILABLE' | 'PAYMENTS_NOT_COMPOSED' | 'SIGNING_ERROR' | 'SEND_QUEUE_TIMEOUT' | 'SEND_INSUFFICIENT_BALANCE' | 'SEND_RESERVATION_CANCELLED' | 'SEND_QUEUE_FULL' | 'MODULE_DESTROYED' | 'REENTRANT_GATE' | 'INVOICE_NO_TARGETS' | 'INVOICE_INVALID_ADDRESS' | 'INVOICE_NO_ASSETS' | 'INVOICE_INVALID_ASSET' | 'INVOICE_INVALID_AMOUNT' | 'INVOICE_INVALID_COIN' | 'INVOICE_INVALID_NFT' | 'INVOICE_PAST_DUE_DATE' | 'INVOICE_DUPLICATE_ADDRESS' | 'INVOICE_DUPLICATE_COIN' | 'INVOICE_DUPLICATE_NFT' | 'INVOICE_MINT_FAILED' | 'INVOICE_INVALID_PROOF' | 'INVOICE_WRONG_TOKEN_TYPE' | 'INVOICE_INVALID_DATA' | 'INVOICE_ALREADY_EXISTS' | 'INVOICE_NOT_FOUND' | 'INVOICE_NOT_TARGET' | 'INVOICE_ALREADY_CLOSED' | 'INVOICE_ALREADY_CANCELLED' | 'INVOICE_ORACLE_REQUIRED' | 'INVOICE_TERMINATED' | 'INVOICE_INVALID_TARGET' | 'INVOICE_INVALID_ASSET_INDEX' | 'INVOICE_RETURN_EXCEEDS_BALANCE' | 'INVOICE_INVALID_DELIVERY_METHOD' | 'INVOICE_INVALID_REFUND_ADDRESS' | 'INVOICE_INVALID_CONTACT' | 'INVOICE_INVALID_ID' | 'INVOICE_TOO_MANY_TARGETS' | 'INVOICE_TOO_MANY_ASSETS' | 'INVOICE_MEMO_TOO_LONG' | 'INVOICE_TERMS_TOO_LARGE' | 'INVOICE_NOT_TERMINATED' | 'INVOICE_NOT_CANCELLED' | 'INVOICE_STORAGE_FAILED' | 'RATE_LIMITED' | 'COMMUNICATIONS_UNAVAILABLE' | 'SWAP_INVALID_DEAL' | 'SWAP_INVALID_MANIFEST' | 'SWAP_NOT_FOUND' | 'SWAP_WRONG_STATE' | 'SWAP_RESOLVE_FAILED' | 'SWAP_DM_SEND_FAILED' | 'SWAP_ESCROW_REJECTED' | 'SWAP_DEPOSIT_FAILED' | 'SWAP_PAYOUT_VERIFICATION_FAILED' | 'SWAP_ALREADY_EXISTS' | 'SWAP_ALREADY_COMPLETED' | 'SWAP_ALREADY_CANCELLED' | 'SWAP_TIMEOUT' | 'SWAP_LIMIT_EXCEEDED' | 'SWAP_ALREADY_INITIALIZED' | 'SWAP_MODULE_DESTROYED' | 'SWAP_NOT_INITIALIZED';
 declare class SphereError extends Error {
     readonly code: SphereErrorCode;
     readonly cause?: unknown;
@@ -656,6 +668,7 @@ interface BurnResult {
     /** The burned blob, the proof of the burn: persist it, then `acknowledgeBurn(burnId)`. */
     burnedToken?: Uint8Array;
     error?: string;
+    errorCode?: string;
 }
 /** A burn not yet acknowledged: in flight (`burnedToken` null), certified, or settled. */
 interface PendingBurn {
@@ -665,6 +678,10 @@ interface PendingBurn {
     readonly burnedToken: Uint8Array | null;
     readonly settled: boolean;
     readonly createdAt: number;
+    readonly failure?: {
+        readonly code: string;
+        readonly message: string;
+    };
 }
 /** #785: `content` uses ERC-721 field names; `sign` (default true) signs as creator with this wallet's chain key. */
 interface MintNftRequest {
@@ -752,9 +769,13 @@ interface PaymentsV2 {
     prewarmSend(request: SendRequest): Promise<void>;
     discardPrewarm(): void;
     assets(coinId?: string): Promise<Asset[]>;
+    unverifiedAssets(coinId?: string): Promise<Asset[]>;
     tokens(filter?: {
         coinId?: string;
     }): Token[];
+    unverifiedTokens(filter?: {
+        coinId?: string;
+    }): Token[];
     coinless(): CoinlessToken[];
     tokenData(tokenId: string): Promise<Uint8Array | null>;
     /** The genesis mint reason of one held token; null when it was minted without one. Same contract as tokenData. */
@@ -999,6 +1020,7 @@ interface FullIdentity extends Identity {
     readonly privateKey: string;
 }
 type TokenStatus = 'pending' | 'submitted' | 'confirmed' | 'transferring' | 'spent' | 'invalid';
+type Unverified = 'pending' | 'refused';
 interface Token {
     readonly id: string;
     readonly coinId: string;
@@ -1025,6 +1047,8 @@ interface Token {
      * send self-heals instead of wedging on a stale source.
      */
     suspectedSpent?: boolean;
+    /** Carries a coin an issuance policy claims without having passed that policy yet (`pending`) or at all (`refused`): shown, never spent. */
+    readonly unverified?: Unverified;
 }
 /**
  * A holding that names no coin (wallet-api#140) — an NFT. Deliberately NOT a
@@ -1087,6 +1111,8 @@ interface Asset {
     readonly fiatValueUsd: number | null;
     /** Total fiat value in EUR */
     readonly fiatValueEur: number | null;
+    /** Holds tokens of a claimed coin that have not passed its issuance policy yet (`pending`) or at all (`refused`): never spendable, never priced. */
+    readonly unverified?: Unverified;
 }
 type TransferStatus = 'pending' | 'submitted' | 'confirmed' | 'delivered' | 'completed' | 'failed';
 /**
@@ -1123,6 +1149,8 @@ interface IncomingTransfer {
     readonly tokens: Token[];
     /** Arrivals that name no coin (#777). Disjoint from `tokens`, never a zero Token. */
     readonly coinless?: CoinlessToken[];
+    /** Refused arrivals of a claimed coin under another type; never counted, and never in `tokens`. */
+    readonly unverifiedTokens?: Token[];
     readonly memo?: string;
     readonly receivedAt: number;
 }
@@ -3149,6 +3177,7 @@ declare class WalletApiV2Client {
             tokenId: string;
             key: string;
         }[];
+        externalDelivery?: boolean;
     }): Promise<ApplyDeltaWire>;
     fetchBlob(getUrl: string): Promise<Uint8Array>;
     /**