@waaskey/sdk 0.4.0 → 0.4.1

package/dist/index.d.cts

@@ -1679,6 +1679,23 @@ interface RecoveryChallengeResponse {
      * and single-use with this session — feed it to `passkeyFactorVerification`.
      */
     passkeyChallenge?: string;
+    /**
+     * The non-secret inputs that reproduce the backup's PRF key — present only when the backup carries
+     * a `passkey_prf` wrap (#510).
+     *
+     * Pass `salt` + `credentialId` to `PasskeyPrfSecretProvider.unlock(...)` to obtain the
+     * `passkeySecret` that {@link RecoverParams} takes. They arrive HERE, on the challenge, because the
+     * salt is an INPUT to the authenticator ceremony while the wraps themselves are released only after
+     * every factor passes — so a device that lost its local storage (which is the recovery case) would
+     * otherwise have no way to use its passkey at all.
+     *
+     * Neither value is a secret: the credential id is public by WebAuthn design, and the salt is
+     * meaningless without the authenticator and a user-verified ceremony.
+     */
+    passkeyWrap?: {
+        salt: string;
+        credentialId: string;
+    };
 }
 /**
  * How the key that opens a backup was wrapped (backend `RecoveryKeyWrap`, #510).

package/dist/index.d.ts

@@ -1679,6 +1679,23 @@ interface RecoveryChallengeResponse {
      * and single-use with this session — feed it to `passkeyFactorVerification`.
      */
     passkeyChallenge?: string;
+    /**
+     * The non-secret inputs that reproduce the backup's PRF key — present only when the backup carries
+     * a `passkey_prf` wrap (#510).
+     *
+     * Pass `salt` + `credentialId` to `PasskeyPrfSecretProvider.unlock(...)` to obtain the
+     * `passkeySecret` that {@link RecoverParams} takes. They arrive HERE, on the challenge, because the
+     * salt is an INPUT to the authenticator ceremony while the wraps themselves are released only after
+     * every factor passes — so a device that lost its local storage (which is the recovery case) would
+     * otherwise have no way to use its passkey at all.
+     *
+     * Neither value is a secret: the credential id is public by WebAuthn design, and the salt is
+     * meaningless without the authenticator and a user-verified ceremony.
+     */
+    passkeyWrap?: {
+        salt: string;
+        credentialId: string;
+    };
 }
 /**
  * How the key that opens a backup was wrapped (backend `RecoveryKeyWrap`, #510).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@waaskey/sdk",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "WAASKey — embedded, non-custodial MPC wallets for your app. Official TypeScript SDK.",
   "license": "MIT",
   "author": "Waaskey",