@universal-everything/sdk-core 1.1.0-dev.8381768 → 1.1.0-dev.c4a79b9

package/dist/index.d.ts

@@ -313,6 +313,11 @@ type NonceResponse = {
     nonce: string;
     issuedAt: string;
 };
+/** `POST /v1/ipfs/upload-token` — a short-lived bearer for the IPFS upload service. */
+type IpfsUploadTokenResponse = {
+    token: string;
+    expiresAt: string;
+};
 type DeployProfileBase = {
     chainId: number;
     label?: string | null;
@@ -331,10 +336,17 @@ type DeployProfileBase = {
  * Deploy a sponsored Universal Profile. Two mutually-exclusive controller
  * modes:
  * - **custody**: `controllerWalletId` — a relayer-held wallet row.
- * - **external (A1)**: `controllerAddress` + `controlProof` — a user-held key
- *   (a Privy embedded wallet, or an extension/mobile key) that proves control
- *   by signing a nonce-bound challenge. Build the proof with
+ * - **external (A1)**: `controllerAddress` (+ `controlProof`) — a user-held key
+ *   (a Privy embedded wallet, or an extension/mobile key). The proof is a
+ *   signature by that key over a nonce-bound challenge; build it with
  *   `@universal-everything/sdk-core-viem`'s `buildControlProof`.
+ *
+ * On `/v1` the proof is **optional**: a first-time user has only a social
+ * login, and the extension / mobile app holding the new controller cannot sign
+ * for a not-yet-deployed profile. When present it is always verified. The next
+ * API version makes it mandatory for everyone (relayer
+ * `docs/DESIGN_2026-09-10_control-proof-versioning.md`), so callers that CAN
+ * sign (a Privy embedded wallet) should always send it.
  */
 type DeployProfileInput = (DeployProfileBase & {
     controllerWalletId: string;
@@ -342,7 +354,7 @@ type DeployProfileInput = (DeployProfileBase & {
     controlProof?: never;
 }) | (DeployProfileBase & {
     controllerAddress: Hex;
-    controlProof: ControlProof;
+    controlProof?: ControlProof;
     controllerWalletId?: never;
 });
 type DeployProfileSingleChainResponse = {
@@ -475,6 +487,14 @@ declare class WalletKitClient {
      * bind an A1 control proof for an external-controller {@link deployProfile}.
      */
     getNonce(): Promise<NonceResponse>;
+    /**
+     * Mint a short-lived (~120s) HS256 token for the IPFS upload service
+     * (`POST /v1/ipfs/upload-token`, authenticated). Fetch one per upload:
+     * the token is meant to expire within the service's 600s window (which the
+     * service does not enforce today — see the relayer's routes/ipfs.ts). 503
+     * when the relayer has no upload secret configured.
+     */
+    getIpfsUploadToken(): Promise<IpfsUploadTokenResponse>;
     importProfile(input: {
         address: Hex;
         chainId: number;
@@ -539,4 +559,4 @@ declare class IdentityError extends Error {
     constructor(code: IdentityErrorCode, message: string);
 }
 
-export { type ChainStatus, type CheckoutSession, type ControlProof, type ControllerSummary, type DeployProfileInput, type DeployProfileMultiChainResponse, type DeployProfileResponse, type DeployProfileSingleChainResponse, type DeployQueueStatus, type ExportCompleteResponse, type ExportRequestInput, type ExportRequestResponse, type ExportedKey, type FreeDefaultSnapshot, type Hex, IdentityError, type IdentityErrorCode, type IdentityProvider, type ImportBeginResponse, type ImportCompleteInput, type ImportCompleteResponse, KeyCustodyError, type KeyCustodyErrorCode, type KeyCustodyOpContext, type KeyCustodyProvider, type NonceResponse, type OpContext, type OpenCheckoutInput, type Profile, type ProfileStatus, type ProfileWithChains, type QuotaSnapshot, type RelaySponsoredInput, type RelaySponsoredResponse, type SignLsp25Input, type SignLsp25Response, type SignMessageResponse, type SignTransactionInput, type SignTransactionResponse, type SignTxRequest, type Subject, type SubscriptionResponse, type SubscriptionSnapshot, TIER_ERROR_CODES, TierError, type VerifiedToken, type VerifyOptions, type Wallet, type WalletInfo, WalletKitClient, type WalletKitClientConfig, WalletKitError, createWalletKitClient };
+export { type ChainStatus, type CheckoutSession, type ControlProof, type ControllerSummary, type DeployProfileInput, type DeployProfileMultiChainResponse, type DeployProfileResponse, type DeployProfileSingleChainResponse, type DeployQueueStatus, type ExportCompleteResponse, type ExportRequestInput, type ExportRequestResponse, type ExportedKey, type FreeDefaultSnapshot, type Hex, IdentityError, type IdentityErrorCode, type IdentityProvider, type ImportBeginResponse, type ImportCompleteInput, type ImportCompleteResponse, type IpfsUploadTokenResponse, KeyCustodyError, type KeyCustodyErrorCode, type KeyCustodyOpContext, type KeyCustodyProvider, type NonceResponse, type OpContext, type OpenCheckoutInput, type Profile, type ProfileStatus, type ProfileWithChains, type QuotaSnapshot, type RelaySponsoredInput, type RelaySponsoredResponse, type SignLsp25Input, type SignLsp25Response, type SignMessageResponse, type SignTransactionInput, type SignTransactionResponse, type SignTxRequest, type Subject, type SubscriptionResponse, type SubscriptionSnapshot, TIER_ERROR_CODES, TierError, type VerifiedToken, type VerifyOptions, type Wallet, type WalletInfo, WalletKitClient, type WalletKitClientConfig, WalletKitError, createWalletKitClient };

package/dist/index.js

@@ -121,6 +121,16 @@ var WalletKitClient = class {
   async getNonce() {
     return this.#request("POST", "/v1/auth/nonce");
   }
+  /**
+   * Mint a short-lived (~120s) HS256 token for the IPFS upload service
+   * (`POST /v1/ipfs/upload-token`, authenticated). Fetch one per upload:
+   * the token is meant to expire within the service's 600s window (which the
+   * service does not enforce today — see the relayer's routes/ipfs.ts). 503
+   * when the relayer has no upload secret configured.
+   */
+  async getIpfsUploadToken() {
+    return this.#request("POST", "/v1/ipfs/upload-token");
+  }
   async importProfile(input) {
     return this.#request("POST", "/v1/profiles/import", input);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@universal-everything/sdk-core",
-  "version": "1.1.0-dev.8381768",
+  "version": "1.1.0-dev.c4a79b9",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/universal-everything/universal-relayer.git",