@unifold/core 0.1.49 → 0.1.51

package/dist/index.d.mts

@@ -309,6 +309,7 @@ interface OnrampSessionRequest {
     subdivision_code?: string;
     redirect_url?: string;
     external_id?: string;
+    email?: string;
 }
 interface OnrampSessionResponse {
     url: string;
@@ -401,6 +402,10 @@ interface PaymentNetwork {
     name: string;
     icon_urls: IconUrl[];
 }
+interface BlockedCountrySubdivision {
+    country_code: string;
+    subdivision_codes: string[];
+}
 interface ProjectConfigResponse {
     project_name?: string;
     asset_cdn_url: string;
@@ -411,6 +416,7 @@ interface ProjectConfigResponse {
         networks: PaymentNetwork[];
     };
     blocked_country_codes?: string[];
+    blocked_country_subdivisions?: BlockedCountrySubdivision[];
     pay_with_exchange?: {
         enabled: boolean;
     };
@@ -424,7 +430,9 @@ interface IpAddressResponse {
     alpha2: string;
     alpha3: string;
     country: string;
+    /** @deprecated Use subdivision_code instead */
     state: string | null;
+    subdivision_code: string | null;
     ip_address: string;
 }
 /**
@@ -652,23 +660,94 @@ interface PaymentIntentDepositAddress {
     address_type: string | null;
     address: string;
 }
+/**
+ * Lifecycle status of a payment intent. Default and locked-quote types share
+ * this vocabulary; the `awaiting_refund` / `refunding` / `refunded` /
+ * `refund_failed` states are only reachable for `type === 'locked_quote'` in v1.
+ */
+type PaymentIntentStatus = "requires_payment" | "processing" | "succeeded" | "canceled" | "expired" | "awaiting_refund" | "refunding" | "refunded" | "refund_failed";
+/**
+ * Product mode of a payment intent. `default` is the standard PI flow.
+ * `locked_quote` adds time-boxed rate locking, source-side amount tracking,
+ * an expiration timer, and a refund flow. Same row, different mode.
+ */
+type PaymentIntentType = "default" | "locked_quote";
 interface PaymentIntent {
     id: string;
+    /** Discriminator — `default` for the standard flow, `locked_quote` for rate-locked. */
+    type: PaymentIntentType;
     user_id: string | null;
+    /**
+     * Destination amount in destination-token base units.
+     * @deprecated use `destination_amount` — kept for back-compat.
+     */
     amount: string;
+    /**
+     * USD value of the destination amount at creation/lock time.
+     * @deprecated use `destination_amount_usd` — kept for back-compat.
+     */
     amount_usd: string;
+    /**
+     * Cumulative amount received. For `default` this is destination-token base
+     * units (post-bridge). For `locked_quote` this is source-token base units
+     * accumulated on the deposit wallet.
+     */
     amount_received: string;
+    /** USD value of `amount_received` so far. */
     amount_received_usd: string;
+    /**
+     * Destination currency code lowercased.
+     * @deprecated use `destination_currency` — kept for back-compat.
+     */
     currency: string;
-    status: string;
+    status: PaymentIntentStatus;
     client_secret: string;
+    destination_currency: string;
+    destination_amount: string;
+    destination_amount_usd: string;
+    /**
+     * Cumulative amount received on the destination side, in destination-token
+     * base units. For `default` PIs this is the post-bridge balance landed at
+     * the recipient. For `locked_quote` PIs this is `0` until the atomic payout
+     * confirms, then the full `destination_amount`.
+     */
+    destination_amount_received: string;
+    /** USD value of `destination_amount_received` so far. */
+    destination_amount_received_usd: string;
     destination_network: string | null;
     destination_chain_type: ChainType;
     destination_chain_id: string;
     destination_token_address: string;
-    recipient_address: string;
     destination_token_decimals: number;
+    recipient_address: string;
     deposit_addresses: PaymentIntentDepositAddress[];
+    source_currency: string | null;
+    source_network: string | null;
+    source_chain_type: ChainType | null;
+    source_chain_id: string | null;
+    source_token_address: string | null;
+    /** Decimals of the source token; null on default-mode rows. */
+    source_token_decimals: number | null;
+    source_amount: string | null;
+    source_amount_usd: string | null;
+    /**
+     * Cumulative source-side deposits received, in source-token base units.
+     * Locked-quote only — null on default-mode rows.
+     */
+    source_amount_received: string | null;
+    /** USD value of `source_amount_received` at the locked rate. Locked-quote only. */
+    source_amount_received_usd: string | null;
+    /** Atomic payout (pool → recipient) hash. Locked-quote only; null until broadcast. */
+    transaction_hash: string | null;
+    refund_address: string | null;
+    refund_amount: string | null;
+    refund_amount_usd: string | null;
+    refund_transaction_hash: string | null;
+    refunded_at: string | null;
+    /** Human-readable failure reason for terminal-with-error states. */
+    failure_reason: string | null;
+    /** Timestamp the row was transitioned to EXPIRED. Locked-quote only. */
+    expired_at: string | null;
     metadata: Record<string, string> | null;
     description: string | null;
     livemode: boolean;
@@ -692,6 +771,109 @@ interface PaymentIntentExecutionsResponse {
  * Authenticates via client_secret and publishable key.
  */
 declare function listPaymentIntentExecutions(clientSecret: string, publishableKey?: string): Promise<PaymentIntentExecutionsResponse>;
+/**
+ * One source network on which a `SourceToken` can be received.
+ * Shape mirrors `SourceTokenNetworkDto` from the backend (snake_case on wire).
+ */
+interface SourceTokenNetwork {
+    /** Network slug, e.g. `"ethereum"`, `"base-sepolia"`. Pair with `currency` to identify a source token. */
+    network: string;
+    chain_name: string;
+    chain_type: ChainType;
+    icon_url: string;
+    icon_urls: IconUrl[];
+    /** Token contract address, or `"native"` for native gas tokens. */
+    token_address: string;
+    decimals: number;
+    /** Estimated processing time in seconds. Null = fast (typically < 60s). */
+    estimated_processing_time: number | null;
+    estimated_price_impact_percent: number;
+    max_slippage_percent: number;
+    minimum_deposit_amount_usd: number;
+}
+/**
+ * A source-token entry returned by `getSupportedSourceTokens`. Each token
+ * is keyed by `currency` (lowercased symbol) and lists the networks it can
+ * be received on.
+ */
+interface SourceToken {
+    /** Public-facing currency identifier — token symbol lowercased. */
+    currency: string;
+    symbol: string;
+    name: string;
+    icon_url: string;
+    icon_urls: IconUrl[];
+    networks: SourceTokenNetwork[];
+}
+interface SupportedSourceTokensResponse {
+    data: SourceToken[];
+}
+interface SupportedSourceTokensQuery {
+    destination_currency?: string;
+    destination_network?: string;
+}
+/**
+ * Server-only — `GET /payment_intents/supported_source_tokens` is now behind
+ * SecretKeyGuard. Call it from your backend with `Authorization: Bearer sk_...`.
+ * The browser SDK does not expose a function for it; merchants proxy from their
+ * own server. Types stay here so consumers can type their proxy responses.
+ */
+interface LockedQuotePreviewRequest {
+    /** Source currency lowercased, e.g. `"btc"`, `"eth"`, `"usdc"`. */
+    source_currency: string;
+    /** Source network slug, e.g. `"ethereum"`, `"bitcoin"`, `"base"`. */
+    source_network: string;
+    /**
+     * Destination currency lowercased — what the recipient receives. v1 ships
+     * `"usdc"` only, but the field is required so future destinations don't
+     * break the request shape.
+     */
+    destination_currency: string;
+    /** Destination network slug. v1: `"base"`. */
+    destination_network: string;
+    /** Desired destination amount in destination-token base units. */
+    destination_amount: string;
+}
+/**
+ * Shape returned by `POST /payment_intents/locked_quotes/quote`. Mirrors the
+ * request's `(currency, network)` vocabulary instead of the legacy
+ * `source_token_*` / `destination_token_*` fields used by the standard
+ * `DepositQuote` (which is keyed by raw chain/token tuples).
+ */
+interface LockedQuotePreview {
+    /** `lqq_*` — single-use, expires per `expired_at`. */
+    quote_id: string;
+    /** ISO 8601. */
+    expired_at: string;
+    source_currency: string;
+    source_network: string;
+    /** Source amount in source-currency base units the user must deposit. */
+    source_amount: string;
+    source_amount_usd: string | null;
+    source_currency_decimals: number;
+    destination_currency: string;
+    destination_network: string;
+    /** Destination amount in destination-currency base units. */
+    destination_amount: string;
+    destination_amount_usd: string | null;
+    destination_currency_decimals: number;
+}
+/**
+ * Server-only — `POST /payment_intents/locked_quotes/quote` is now behind
+ * SecretKeyGuard. Call it from your backend with `Authorization: Bearer sk_...`,
+ * then commit the returned `quote_id` via `POST /payment_intents/locked_quotes`.
+ * The browser SDK does not expose a function for it.
+ */
+/**
+ * Server-only — `GET /payment_intents/locked_quotes/limits` is now behind
+ * SecretKeyGuard. Call it from your backend with `Authorization: Bearer sk_...`.
+ * The browser SDK does not expose a function for it; the type stays here so
+ * consumers can type their proxy responses.
+ */
+interface LockedQuoteLimits {
+    minimum_amount: number;
+    maximum_amount: number;
+}
 interface DepositQuoteRequest {
     source_chain_type: string;
     source_chain_id: string;
@@ -702,6 +884,13 @@ interface DepositQuoteRequest {
     destination_token_address: string;
 }
 interface DepositQuote {
+    /**
+     * Opaque quote ID. `q_*` for standard Relay quotes (60s TTL),
+     * `lqq_*` for locked-quote previews (30s TTL, single-use).
+     */
+    quote_id: string;
+    /** ISO timestamp at which this quote stops being valid. */
+    expired_at: string;
     source_amount: string;
     source_amount_usd: string | null;
     source_token_decimals: number;
@@ -802,7 +991,9 @@ interface UserIpInfo {
     alpha2: string;
     alpha3?: string;
     country?: string;
+    /** @deprecated Use subdivisionCode instead */
     state?: string | null;
+    subdivisionCode?: string | null;
     ipAddress?: string;
 }
 /**
@@ -915,4 +1106,4 @@ declare const i18n: {
 };
 type I18nStrings = typeof i18n;
 
-export { ActionType, type AddressBalanceResponse, type AddressBalancesResponse, type AddressValidationFailureCode, type AddressValidationMetadata, type AutoSwapRequest, type AutoSwapResponse, type BuildHypercoreTransactionRequest, type BuildHypercoreTransactionResponse, type BuildSolanaTransactionRequest, type BuildSolanaTransactionResponse, type ChainType, type CreateDepositAddressRequest, type CreateExchangeSessionRequest, type CreateExchangeSessionResponse, type DefaultTokenChain, type DefaultTokenMetadata, type DefaultTokenResponse, type DepositAddressResponse, type DepositEvent, DepositEventType, type DepositQuote, type DepositQuoteRequest, type DestinationToken, type DestinationTokenChain, type ExchangeProviderInfo, type ExchangeProvidersResponse, type ExchangeSessionStartParams, type ExchangeWalletAddress, ExecutionStatus, type FeaturedToken, type FiatCurrenciesResponse, type FiatCurrency, type GetExchangesQuery, type HypercoreActionType, type HypercoreActivationRequest, type HypercoreActivationResponse, type I18nStrings, type IconUrl, IneligibilityReason, type IpAddressResponse, type OnrampQuote, type OnrampQuotesRequest, type OnrampQuotesResponse, type OnrampSessionCreatedData, type OnrampSessionCreatedEvent, type OnrampSessionRequest, type OnrampSessionResponse, type PaymentIntent, type PaymentIntentDepositAddress, type PaymentIntentExecutionsResponse, type PaymentNetwork, type PollExecutionsRequest, type PollExecutionsResponse, type ProjectConfigResponse, type QueryExecutionsRequest, type QueryExecutionsResponse, SOLANA_USDC_ADDRESS, type SendHypercoreTransactionRequest, type SendHypercoreTransactionResponse, type SendSolanaTransactionRequest, type SendSolanaTransactionResponse, type SupportedChain, type SupportedDepositTokensResponse, type SupportedDestinationTokensResponse, type SupportedToken, type TokenBalance, type TokenChain, type TokenChainIconUrl, type TokenChainsResponse, type TokenIconUrl, type TokenInfo, type TokenMetadata, type UserIpInfo, type VerifyAddressRequest, type VerifyAddressResponse, type Wallet, buildHypercoreTransaction, buildSolanaTransaction, checkHypercoreActivation, createDepositAddress, createExchangeSession, createOnrampSession, generatePrefixedKSUID, getAddressBalance, getAddressBalances, getApiBaseUrl, getChainName, getDefaultOnrampToken, getDepositQuote, getExchangeSessionStartUrl, getExchanges, getFiatCurrencies, getIconUrl, getIconUrlWithCdn, getIpAddress, getOnrampQuotes, getOnrampSessionStartUrl, getPreferredIconUrl, getProjectConfig, getSupportedDepositTokens, getSupportedDestinationTokens, getTokenChains, getTokenMetadata, getWalletByChainType, i18n, listPaymentIntentExecutions, pollDirectExecutions, queryExecutions, retrievePaymentIntent, sendHypercoreTransaction, sendSolanaTransaction, setApiConfig, useUserIp, verifyRecipientAddress };
+export { ActionType, type AddressBalanceResponse, type AddressBalancesResponse, type AddressValidationFailureCode, type AddressValidationMetadata, type AutoSwapRequest, type AutoSwapResponse, type BlockedCountrySubdivision, type BuildHypercoreTransactionRequest, type BuildHypercoreTransactionResponse, type BuildSolanaTransactionRequest, type BuildSolanaTransactionResponse, type ChainType, type CreateDepositAddressRequest, type CreateExchangeSessionRequest, type CreateExchangeSessionResponse, type DefaultTokenChain, type DefaultTokenMetadata, type DefaultTokenResponse, type DepositAddressResponse, type DepositEvent, DepositEventType, type DepositQuote, type DepositQuoteRequest, type DestinationToken, type DestinationTokenChain, type ExchangeProviderInfo, type ExchangeProvidersResponse, type ExchangeSessionStartParams, type ExchangeWalletAddress, ExecutionStatus, type FeaturedToken, type FiatCurrenciesResponse, type FiatCurrency, type GetExchangesQuery, type HypercoreActionType, type HypercoreActivationRequest, type HypercoreActivationResponse, type I18nStrings, type IconUrl, IneligibilityReason, type IpAddressResponse, type LockedQuoteLimits, type LockedQuotePreview, type LockedQuotePreviewRequest, type OnrampQuote, type OnrampQuotesRequest, type OnrampQuotesResponse, type OnrampSessionCreatedData, type OnrampSessionCreatedEvent, type OnrampSessionRequest, type OnrampSessionResponse, type PaymentIntent, type PaymentIntentDepositAddress, type PaymentIntentExecutionsResponse, type PaymentIntentStatus, type PaymentIntentType, type PaymentNetwork, type PollExecutionsRequest, type PollExecutionsResponse, type ProjectConfigResponse, type QueryExecutionsRequest, type QueryExecutionsResponse, SOLANA_USDC_ADDRESS, type SendHypercoreTransactionRequest, type SendHypercoreTransactionResponse, type SendSolanaTransactionRequest, type SendSolanaTransactionResponse, type SourceToken, type SourceTokenNetwork, type SupportedChain, type SupportedDepositTokensResponse, type SupportedDestinationTokensResponse, type SupportedSourceTokensQuery, type SupportedSourceTokensResponse, type SupportedToken, type TokenBalance, type TokenChain, type TokenChainIconUrl, type TokenChainsResponse, type TokenIconUrl, type TokenInfo, type TokenMetadata, type UserIpInfo, type VerifyAddressRequest, type VerifyAddressResponse, type Wallet, buildHypercoreTransaction, buildSolanaTransaction, checkHypercoreActivation, createDepositAddress, createExchangeSession, createOnrampSession, generatePrefixedKSUID, getAddressBalance, getAddressBalances, getApiBaseUrl, getChainName, getDefaultOnrampToken, getDepositQuote, getExchangeSessionStartUrl, getExchanges, getFiatCurrencies, getIconUrl, getIconUrlWithCdn, getIpAddress, getOnrampQuotes, getOnrampSessionStartUrl, getPreferredIconUrl, getProjectConfig, getSupportedDepositTokens, getSupportedDestinationTokens, getTokenChains, getTokenMetadata, getWalletByChainType, i18n, listPaymentIntentExecutions, pollDirectExecutions, queryExecutions, retrievePaymentIntent, sendHypercoreTransaction, sendSolanaTransaction, setApiConfig, useUserIp, verifyRecipientAddress };

package/dist/index.d.ts

@@ -309,6 +309,7 @@ interface OnrampSessionRequest {
     subdivision_code?: string;
     redirect_url?: string;
     external_id?: string;
+    email?: string;
 }
 interface OnrampSessionResponse {
     url: string;
@@ -401,6 +402,10 @@ interface PaymentNetwork {
     name: string;
     icon_urls: IconUrl[];
 }
+interface BlockedCountrySubdivision {
+    country_code: string;
+    subdivision_codes: string[];
+}
 interface ProjectConfigResponse {
     project_name?: string;
     asset_cdn_url: string;
@@ -411,6 +416,7 @@ interface ProjectConfigResponse {
         networks: PaymentNetwork[];
     };
     blocked_country_codes?: string[];
+    blocked_country_subdivisions?: BlockedCountrySubdivision[];
     pay_with_exchange?: {
         enabled: boolean;
     };
@@ -424,7 +430,9 @@ interface IpAddressResponse {
     alpha2: string;
     alpha3: string;
     country: string;
+    /** @deprecated Use subdivision_code instead */
     state: string | null;
+    subdivision_code: string | null;
     ip_address: string;
 }
 /**
@@ -652,23 +660,94 @@ interface PaymentIntentDepositAddress {
     address_type: string | null;
     address: string;
 }
+/**
+ * Lifecycle status of a payment intent. Default and locked-quote types share
+ * this vocabulary; the `awaiting_refund` / `refunding` / `refunded` /
+ * `refund_failed` states are only reachable for `type === 'locked_quote'` in v1.
+ */
+type PaymentIntentStatus = "requires_payment" | "processing" | "succeeded" | "canceled" | "expired" | "awaiting_refund" | "refunding" | "refunded" | "refund_failed";
+/**
+ * Product mode of a payment intent. `default` is the standard PI flow.
+ * `locked_quote` adds time-boxed rate locking, source-side amount tracking,
+ * an expiration timer, and a refund flow. Same row, different mode.
+ */
+type PaymentIntentType = "default" | "locked_quote";
 interface PaymentIntent {
     id: string;
+    /** Discriminator — `default` for the standard flow, `locked_quote` for rate-locked. */
+    type: PaymentIntentType;
     user_id: string | null;
+    /**
+     * Destination amount in destination-token base units.
+     * @deprecated use `destination_amount` — kept for back-compat.
+     */
     amount: string;
+    /**
+     * USD value of the destination amount at creation/lock time.
+     * @deprecated use `destination_amount_usd` — kept for back-compat.
+     */
     amount_usd: string;
+    /**
+     * Cumulative amount received. For `default` this is destination-token base
+     * units (post-bridge). For `locked_quote` this is source-token base units
+     * accumulated on the deposit wallet.
+     */
     amount_received: string;
+    /** USD value of `amount_received` so far. */
     amount_received_usd: string;
+    /**
+     * Destination currency code lowercased.
+     * @deprecated use `destination_currency` — kept for back-compat.
+     */
     currency: string;
-    status: string;
+    status: PaymentIntentStatus;
     client_secret: string;
+    destination_currency: string;
+    destination_amount: string;
+    destination_amount_usd: string;
+    /**
+     * Cumulative amount received on the destination side, in destination-token
+     * base units. For `default` PIs this is the post-bridge balance landed at
+     * the recipient. For `locked_quote` PIs this is `0` until the atomic payout
+     * confirms, then the full `destination_amount`.
+     */
+    destination_amount_received: string;
+    /** USD value of `destination_amount_received` so far. */
+    destination_amount_received_usd: string;
     destination_network: string | null;
     destination_chain_type: ChainType;
     destination_chain_id: string;
     destination_token_address: string;
-    recipient_address: string;
     destination_token_decimals: number;
+    recipient_address: string;
     deposit_addresses: PaymentIntentDepositAddress[];
+    source_currency: string | null;
+    source_network: string | null;
+    source_chain_type: ChainType | null;
+    source_chain_id: string | null;
+    source_token_address: string | null;
+    /** Decimals of the source token; null on default-mode rows. */
+    source_token_decimals: number | null;
+    source_amount: string | null;
+    source_amount_usd: string | null;
+    /**
+     * Cumulative source-side deposits received, in source-token base units.
+     * Locked-quote only — null on default-mode rows.
+     */
+    source_amount_received: string | null;
+    /** USD value of `source_amount_received` at the locked rate. Locked-quote only. */
+    source_amount_received_usd: string | null;
+    /** Atomic payout (pool → recipient) hash. Locked-quote only; null until broadcast. */
+    transaction_hash: string | null;
+    refund_address: string | null;
+    refund_amount: string | null;
+    refund_amount_usd: string | null;
+    refund_transaction_hash: string | null;
+    refunded_at: string | null;
+    /** Human-readable failure reason for terminal-with-error states. */
+    failure_reason: string | null;
+    /** Timestamp the row was transitioned to EXPIRED. Locked-quote only. */
+    expired_at: string | null;
     metadata: Record<string, string> | null;
     description: string | null;
     livemode: boolean;
@@ -692,6 +771,109 @@ interface PaymentIntentExecutionsResponse {
  * Authenticates via client_secret and publishable key.
  */
 declare function listPaymentIntentExecutions(clientSecret: string, publishableKey?: string): Promise<PaymentIntentExecutionsResponse>;
+/**
+ * One source network on which a `SourceToken` can be received.
+ * Shape mirrors `SourceTokenNetworkDto` from the backend (snake_case on wire).
+ */
+interface SourceTokenNetwork {
+    /** Network slug, e.g. `"ethereum"`, `"base-sepolia"`. Pair with `currency` to identify a source token. */
+    network: string;
+    chain_name: string;
+    chain_type: ChainType;
+    icon_url: string;
+    icon_urls: IconUrl[];
+    /** Token contract address, or `"native"` for native gas tokens. */
+    token_address: string;
+    decimals: number;
+    /** Estimated processing time in seconds. Null = fast (typically < 60s). */
+    estimated_processing_time: number | null;
+    estimated_price_impact_percent: number;
+    max_slippage_percent: number;
+    minimum_deposit_amount_usd: number;
+}
+/**
+ * A source-token entry returned by `getSupportedSourceTokens`. Each token
+ * is keyed by `currency` (lowercased symbol) and lists the networks it can
+ * be received on.
+ */
+interface SourceToken {
+    /** Public-facing currency identifier — token symbol lowercased. */
+    currency: string;
+    symbol: string;
+    name: string;
+    icon_url: string;
+    icon_urls: IconUrl[];
+    networks: SourceTokenNetwork[];
+}
+interface SupportedSourceTokensResponse {
+    data: SourceToken[];
+}
+interface SupportedSourceTokensQuery {
+    destination_currency?: string;
+    destination_network?: string;
+}
+/**
+ * Server-only — `GET /payment_intents/supported_source_tokens` is now behind
+ * SecretKeyGuard. Call it from your backend with `Authorization: Bearer sk_...`.
+ * The browser SDK does not expose a function for it; merchants proxy from their
+ * own server. Types stay here so consumers can type their proxy responses.
+ */
+interface LockedQuotePreviewRequest {
+    /** Source currency lowercased, e.g. `"btc"`, `"eth"`, `"usdc"`. */
+    source_currency: string;
+    /** Source network slug, e.g. `"ethereum"`, `"bitcoin"`, `"base"`. */
+    source_network: string;
+    /**
+     * Destination currency lowercased — what the recipient receives. v1 ships
+     * `"usdc"` only, but the field is required so future destinations don't
+     * break the request shape.
+     */
+    destination_currency: string;
+    /** Destination network slug. v1: `"base"`. */
+    destination_network: string;
+    /** Desired destination amount in destination-token base units. */
+    destination_amount: string;
+}
+/**
+ * Shape returned by `POST /payment_intents/locked_quotes/quote`. Mirrors the
+ * request's `(currency, network)` vocabulary instead of the legacy
+ * `source_token_*` / `destination_token_*` fields used by the standard
+ * `DepositQuote` (which is keyed by raw chain/token tuples).
+ */
+interface LockedQuotePreview {
+    /** `lqq_*` — single-use, expires per `expired_at`. */
+    quote_id: string;
+    /** ISO 8601. */
+    expired_at: string;
+    source_currency: string;
+    source_network: string;
+    /** Source amount in source-currency base units the user must deposit. */
+    source_amount: string;
+    source_amount_usd: string | null;
+    source_currency_decimals: number;
+    destination_currency: string;
+    destination_network: string;
+    /** Destination amount in destination-currency base units. */
+    destination_amount: string;
+    destination_amount_usd: string | null;
+    destination_currency_decimals: number;
+}
+/**
+ * Server-only — `POST /payment_intents/locked_quotes/quote` is now behind
+ * SecretKeyGuard. Call it from your backend with `Authorization: Bearer sk_...`,
+ * then commit the returned `quote_id` via `POST /payment_intents/locked_quotes`.
+ * The browser SDK does not expose a function for it.
+ */
+/**
+ * Server-only — `GET /payment_intents/locked_quotes/limits` is now behind
+ * SecretKeyGuard. Call it from your backend with `Authorization: Bearer sk_...`.
+ * The browser SDK does not expose a function for it; the type stays here so
+ * consumers can type their proxy responses.
+ */
+interface LockedQuoteLimits {
+    minimum_amount: number;
+    maximum_amount: number;
+}
 interface DepositQuoteRequest {
     source_chain_type: string;
     source_chain_id: string;
@@ -702,6 +884,13 @@ interface DepositQuoteRequest {
     destination_token_address: string;
 }
 interface DepositQuote {
+    /**
+     * Opaque quote ID. `q_*` for standard Relay quotes (60s TTL),
+     * `lqq_*` for locked-quote previews (30s TTL, single-use).
+     */
+    quote_id: string;
+    /** ISO timestamp at which this quote stops being valid. */
+    expired_at: string;
     source_amount: string;
     source_amount_usd: string | null;
     source_token_decimals: number;
@@ -802,7 +991,9 @@ interface UserIpInfo {
     alpha2: string;
     alpha3?: string;
     country?: string;
+    /** @deprecated Use subdivisionCode instead */
     state?: string | null;
+    subdivisionCode?: string | null;
     ipAddress?: string;
 }
 /**
@@ -915,4 +1106,4 @@ declare const i18n: {
 };
 type I18nStrings = typeof i18n;
 
-export { ActionType, type AddressBalanceResponse, type AddressBalancesResponse, type AddressValidationFailureCode, type AddressValidationMetadata, type AutoSwapRequest, type AutoSwapResponse, type BuildHypercoreTransactionRequest, type BuildHypercoreTransactionResponse, type BuildSolanaTransactionRequest, type BuildSolanaTransactionResponse, type ChainType, type CreateDepositAddressRequest, type CreateExchangeSessionRequest, type CreateExchangeSessionResponse, type DefaultTokenChain, type DefaultTokenMetadata, type DefaultTokenResponse, type DepositAddressResponse, type DepositEvent, DepositEventType, type DepositQuote, type DepositQuoteRequest, type DestinationToken, type DestinationTokenChain, type ExchangeProviderInfo, type ExchangeProvidersResponse, type ExchangeSessionStartParams, type ExchangeWalletAddress, ExecutionStatus, type FeaturedToken, type FiatCurrenciesResponse, type FiatCurrency, type GetExchangesQuery, type HypercoreActionType, type HypercoreActivationRequest, type HypercoreActivationResponse, type I18nStrings, type IconUrl, IneligibilityReason, type IpAddressResponse, type OnrampQuote, type OnrampQuotesRequest, type OnrampQuotesResponse, type OnrampSessionCreatedData, type OnrampSessionCreatedEvent, type OnrampSessionRequest, type OnrampSessionResponse, type PaymentIntent, type PaymentIntentDepositAddress, type PaymentIntentExecutionsResponse, type PaymentNetwork, type PollExecutionsRequest, type PollExecutionsResponse, type ProjectConfigResponse, type QueryExecutionsRequest, type QueryExecutionsResponse, SOLANA_USDC_ADDRESS, type SendHypercoreTransactionRequest, type SendHypercoreTransactionResponse, type SendSolanaTransactionRequest, type SendSolanaTransactionResponse, type SupportedChain, type SupportedDepositTokensResponse, type SupportedDestinationTokensResponse, type SupportedToken, type TokenBalance, type TokenChain, type TokenChainIconUrl, type TokenChainsResponse, type TokenIconUrl, type TokenInfo, type TokenMetadata, type UserIpInfo, type VerifyAddressRequest, type VerifyAddressResponse, type Wallet, buildHypercoreTransaction, buildSolanaTransaction, checkHypercoreActivation, createDepositAddress, createExchangeSession, createOnrampSession, generatePrefixedKSUID, getAddressBalance, getAddressBalances, getApiBaseUrl, getChainName, getDefaultOnrampToken, getDepositQuote, getExchangeSessionStartUrl, getExchanges, getFiatCurrencies, getIconUrl, getIconUrlWithCdn, getIpAddress, getOnrampQuotes, getOnrampSessionStartUrl, getPreferredIconUrl, getProjectConfig, getSupportedDepositTokens, getSupportedDestinationTokens, getTokenChains, getTokenMetadata, getWalletByChainType, i18n, listPaymentIntentExecutions, pollDirectExecutions, queryExecutions, retrievePaymentIntent, sendHypercoreTransaction, sendSolanaTransaction, setApiConfig, useUserIp, verifyRecipientAddress };
+export { ActionType, type AddressBalanceResponse, type AddressBalancesResponse, type AddressValidationFailureCode, type AddressValidationMetadata, type AutoSwapRequest, type AutoSwapResponse, type BlockedCountrySubdivision, type BuildHypercoreTransactionRequest, type BuildHypercoreTransactionResponse, type BuildSolanaTransactionRequest, type BuildSolanaTransactionResponse, type ChainType, type CreateDepositAddressRequest, type CreateExchangeSessionRequest, type CreateExchangeSessionResponse, type DefaultTokenChain, type DefaultTokenMetadata, type DefaultTokenResponse, type DepositAddressResponse, type DepositEvent, DepositEventType, type DepositQuote, type DepositQuoteRequest, type DestinationToken, type DestinationTokenChain, type ExchangeProviderInfo, type ExchangeProvidersResponse, type ExchangeSessionStartParams, type ExchangeWalletAddress, ExecutionStatus, type FeaturedToken, type FiatCurrenciesResponse, type FiatCurrency, type GetExchangesQuery, type HypercoreActionType, type HypercoreActivationRequest, type HypercoreActivationResponse, type I18nStrings, type IconUrl, IneligibilityReason, type IpAddressResponse, type LockedQuoteLimits, type LockedQuotePreview, type LockedQuotePreviewRequest, type OnrampQuote, type OnrampQuotesRequest, type OnrampQuotesResponse, type OnrampSessionCreatedData, type OnrampSessionCreatedEvent, type OnrampSessionRequest, type OnrampSessionResponse, type PaymentIntent, type PaymentIntentDepositAddress, type PaymentIntentExecutionsResponse, type PaymentIntentStatus, type PaymentIntentType, type PaymentNetwork, type PollExecutionsRequest, type PollExecutionsResponse, type ProjectConfigResponse, type QueryExecutionsRequest, type QueryExecutionsResponse, SOLANA_USDC_ADDRESS, type SendHypercoreTransactionRequest, type SendHypercoreTransactionResponse, type SendSolanaTransactionRequest, type SendSolanaTransactionResponse, type SourceToken, type SourceTokenNetwork, type SupportedChain, type SupportedDepositTokensResponse, type SupportedDestinationTokensResponse, type SupportedSourceTokensQuery, type SupportedSourceTokensResponse, type SupportedToken, type TokenBalance, type TokenChain, type TokenChainIconUrl, type TokenChainsResponse, type TokenIconUrl, type TokenInfo, type TokenMetadata, type UserIpInfo, type VerifyAddressRequest, type VerifyAddressResponse, type Wallet, buildHypercoreTransaction, buildSolanaTransaction, checkHypercoreActivation, createDepositAddress, createExchangeSession, createOnrampSession, generatePrefixedKSUID, getAddressBalance, getAddressBalances, getApiBaseUrl, getChainName, getDefaultOnrampToken, getDepositQuote, getExchangeSessionStartUrl, getExchanges, getFiatCurrencies, getIconUrl, getIconUrlWithCdn, getIpAddress, getOnrampQuotes, getOnrampSessionStartUrl, getPreferredIconUrl, getProjectConfig, getSupportedDepositTokens, getSupportedDestinationTokens, getTokenChains, getTokenMetadata, getWalletByChainType, i18n, listPaymentIntentExecutions, pollDirectExecutions, queryExecutions, retrievePaymentIntent, sendHypercoreTransaction, sendSolanaTransaction, setApiConfig, useUserIp, verifyRecipientAddress };

package/dist/index.js

@@ -363,6 +363,9 @@ function getOnrampSessionStartUrl(request, publishableKey) {
   if (request.external_id) {
     params.append("external_id", request.external_id);
   }
+  if (request.email) {
+    params.append("email", request.email);
+  }
   return `${API_BASE_URL}/v1/public/onramps/sessions/start?${params.toString()}`;
 }
 async function getDefaultOnrampToken(params, publishableKey) {
@@ -800,11 +803,13 @@ function useUserIp() {
     queryKey: ["unifold", "userIpInfo"],
     queryFn: async () => {
       const data = await getIpAddress();
+      const subdivision = (data.subdivision_code || data.state || "").toLowerCase() || null;
       return {
         alpha2: data.alpha2.toLowerCase(),
         alpha3: data.alpha3?.toLowerCase(),
         country: data.country,
-        state: data.state?.toLowerCase() ?? null,
+        state: subdivision,
+        subdivisionCode: subdivision,
         ipAddress: data.ip_address
       };
     },

package/dist/index.mjs

@@ -295,6 +295,9 @@ function getOnrampSessionStartUrl(request, publishableKey) {
   if (request.external_id) {
     params.append("external_id", request.external_id);
   }
+  if (request.email) {
+    params.append("email", request.email);
+  }
   return `${API_BASE_URL}/v1/public/onramps/sessions/start?${params.toString()}`;
 }
 async function getDefaultOnrampToken(params, publishableKey) {
@@ -732,11 +735,13 @@ function useUserIp() {
     queryKey: ["unifold", "userIpInfo"],
     queryFn: async () => {
       const data = await getIpAddress();
+      const subdivision = (data.subdivision_code || data.state || "").toLowerCase() || null;
       return {
         alpha2: data.alpha2.toLowerCase(),
         alpha3: data.alpha3?.toLowerCase(),
         country: data.country,
-        state: data.state?.toLowerCase() ?? null,
+        state: subdivision,
+        subdivisionCode: subdivision,
         ipAddress: data.ip_address
       };
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unifold/core",
-  "version": "0.1.49",
+  "version": "0.1.51",
   "description": "Unifold Core SDK - Core types, API client, and business logic",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",