w3pk 0.10.2 → 0.10.4

package/README.md

@@ -512,11 +512,4 @@ GPL-3.0
 
 ## Contact
 
-**Julien Béranger** ([GitHub](https://github.com/julienbrg))
-- Element: [@julienbrg:matrix.org](https://matrix.to/#/@julienbrg:matrix.org)
-- Farcaster: [julien-](https://warpcast.com/julien-)
-- Telegram: [@julienbrg](https://t.me/julienbrg)
-- Twitter: [@julienbrg](https://twitter.com/julienbrg)
-
-
-<img src="https://bafkreid5xwxz4bed67bxb2wjmwsec4uhlcjviwy7pkzwoyu5oesjd3sp64.ipfs.w3s.link" alt="built-with-ethereum-w3hc" width="100"/>
+Questions or feedback? Get in touch with [Julien](https://github.com/julienbrg): [https://julienberanger.com/contact](https://julienberanger.com/contact)

package/dist/chainlist/index.d.mts

@@ -0,0 +1,96 @@
+/**
+ * Chainlist types
+ */
+interface Chain {
+    name: string;
+    chain: string;
+    icon?: string;
+    rpc: string[];
+    features?: Array<{
+        name: string;
+    }>;
+    faucets: string[];
+    nativeCurrency: {
+        name: string;
+        symbol: string;
+        decimals: number;
+    };
+    infoURL: string;
+    shortName: string;
+    chainId: number;
+    networkId: number;
+    slip44?: number;
+    ens?: {
+        registry: string;
+    };
+    explorers?: Array<{
+        name: string;
+        url: string;
+        icon?: string;
+        standard: string;
+    }>;
+    title?: string;
+    status?: string;
+    redFlags?: string[];
+}
+interface ChainlistOptions {
+    /**
+     * Custom URL for chains.json data
+     * @default 'https://chainid.network/chains.json'
+     */
+    chainsJsonUrl?: string;
+    /**
+     * Cache duration in milliseconds
+     * @default 3600000 (1 hour)
+     */
+    cacheDuration?: number;
+}
+
+/**
+ * Chainlist module for fetching RPC endpoints
+ */
+
+/**
+ * Get RPC endpoints for a specific chain ID, excluding those that require API keys
+ *
+ * @param chainId - The chain ID to get endpoints for
+ * @param options - Optional configuration
+ * @returns Array of RPC URLs that don't require API keys
+ *
+ * @example
+ * ```typescript
+ * import { getEndpoints } from 'w3pk/chainlist'
+ *
+ * // Get Ethereum mainnet RPCs
+ * const endpoints = await getEndpoints(1)
+ * console.log(endpoints)
+ * // [
+ * //   "https://api.mycryptoapi.com/eth",
+ * //   "https://cloudflare-eth.com",
+ * //   "https://ethereum-rpc.publicnode.com",
+ * //   ...
+ * // ]
+ * ```
+ */
+declare function getEndpoints(chainId: number, options?: ChainlistOptions): Promise<string[]>;
+/**
+ * Get all available chains
+ *
+ * @param options - Optional configuration
+ * @returns Array of all chains
+ */
+declare function getAllChains(options?: ChainlistOptions): Promise<Chain[]>;
+/**
+ * Get chain information by chain ID
+ *
+ * @param chainId - The chain ID to get information for
+ * @param options - Optional configuration
+ * @returns Chain information or undefined if not found
+ */
+declare function getChainById(chainId: number, options?: ChainlistOptions): Promise<Chain | undefined>;
+/**
+ * Clear the chains data cache
+ */
+declare function clearCache(): void;
+
+export { type Chain, type ChainlistOptions, clearCache, getAllChains, getChainById, getEndpoints };

package/dist/chainlist/index.d.ts

@@ -0,0 +1,96 @@
+/**
+ * Chainlist types
+ */
+interface Chain {
+    name: string;
+    chain: string;
+    icon?: string;
+    rpc: string[];
+    features?: Array<{
+        name: string;
+    }>;
+    faucets: string[];
+    nativeCurrency: {
+        name: string;
+        symbol: string;
+        decimals: number;
+    };
+    infoURL: string;
+    shortName: string;
+    chainId: number;
+    networkId: number;
+    slip44?: number;
+    ens?: {
+        registry: string;
+    };
+    explorers?: Array<{
+        name: string;
+        url: string;
+        icon?: string;
+        standard: string;
+    }>;
+    title?: string;
+    status?: string;
+    redFlags?: string[];
+}
+interface ChainlistOptions {
+    /**
+     * Custom URL for chains.json data
+     * @default 'https://chainid.network/chains.json'
+     */
+    chainsJsonUrl?: string;
+    /**
+     * Cache duration in milliseconds
+     * @default 3600000 (1 hour)
+     */
+    cacheDuration?: number;
+}
+
+/**
+ * Chainlist module for fetching RPC endpoints
+ */
+
+/**
+ * Get RPC endpoints for a specific chain ID, excluding those that require API keys
+ *
+ * @param chainId - The chain ID to get endpoints for
+ * @param options - Optional configuration
+ * @returns Array of RPC URLs that don't require API keys
+ *
+ * @example
+ * ```typescript
+ * import { getEndpoints } from 'w3pk/chainlist'
+ *
+ * // Get Ethereum mainnet RPCs
+ * const endpoints = await getEndpoints(1)
+ * console.log(endpoints)
+ * // [
+ * //   "https://api.mycryptoapi.com/eth",
+ * //   "https://cloudflare-eth.com",
+ * //   "https://ethereum-rpc.publicnode.com",
+ * //   ...
+ * // ]
+ * ```
+ */
+declare function getEndpoints(chainId: number, options?: ChainlistOptions): Promise<string[]>;
+/**
+ * Get all available chains
+ *
+ * @param options - Optional configuration
+ * @returns Array of all chains
+ */
+declare function getAllChains(options?: ChainlistOptions): Promise<Chain[]>;
+/**
+ * Get chain information by chain ID
+ *
+ * @param chainId - The chain ID to get information for
+ * @param options - Optional configuration
+ * @returns Chain information or undefined if not found
+ */
+declare function getChainById(chainId: number, options?: ChainlistOptions): Promise<Chain | undefined>;
+/**
+ * Clear the chains data cache
+ */
+declare function clearCache(): void;
+
+export { type Chain, type ChainlistOptions, clearCache, getAllChains, getChainById, getEndpoints };

package/dist/index.d.mts

@@ -246,6 +246,47 @@ declare class StealthAddressModule {
     get isAvailable(): boolean;
 }
 
+/** Client extension results consumed by w3pk (subset of the WebAuthn spec) */
+interface PrfExtensionResults {
+    prf?: {
+        enabled?: boolean;
+        results?: {
+            first?: ArrayBuffer;
+        };
+    };
+}
+/**
+ * Native WebAuthn credential response (authentication)
+ */
+interface AuthenticationCredential {
+    id: string;
+    rawId: ArrayBuffer;
+    type: 'public-key';
+    response: {
+        clientDataJSON: ArrayBuffer;
+        authenticatorData: ArrayBuffer;
+        signature: ArrayBuffer;
+        userHandle?: ArrayBuffer;
+    };
+    getClientExtensionResults(): PrfExtensionResults;
+}
+
+/**
+ * WebAuthn PRF evaluation
+ *
+ * The PRF extension releases HMAC(credential secret, salt) only on a live,
+ * user-verified assertion. The browser hashes each input as
+ * SHA-256("WebAuthn PRF" || 0x00 || input) before it reaches the
+ * authenticator, so inputs here can be any bytes.
+ */
+
+interface PrfSecret {
+    /** 32-byte secret for this origin and tag */
+    secret: Uint8Array;
+    /** Credential the secret is bound to; a new credential gives a new secret */
+    credentialId: string;
+}
+
 /**
  * Shared types used across the SDK
  */
@@ -379,6 +420,40 @@ declare class ApiError extends Web3PasskeyError {
     statusCode?: number | undefined;
     constructor(message: string, statusCode?: number | undefined, originalError?: unknown);
 }
+/**
+ * The passkey authenticated, but this device has no credential metadata.
+ * The app should start a sync or restore flow.
+ */
+declare class SyncRequiredError extends Web3PasskeyError {
+    credentialId: string;
+    constructor(credentialId: string);
+}
+/**
+ * The credential metadata is on this device, but the wallet record is gone.
+ * The app should offer a restore from backup.
+ */
+declare class WalletMissingError extends Web3PasskeyError {
+    credentialId: string;
+    ethereumAddress: string;
+    constructor(credentialId: string, ethereumAddress: string);
+}
+type SyncBootstrapReason = "PASSKEY_BACKUP" | "NO_CREDENTIAL" | "CREDENTIAL_MISMATCH" | "PUBLIC_KEY_MISMATCH";
+/**
+ * A sync can't set up this device's passkey metadata from the backup.
+ */
+declare class SyncBootstrapError extends Web3PasskeyError {
+    reason: SyncBootstrapReason;
+    credentialId: string;
+    constructor(reason: SyncBootstrapReason, credentialId: string);
+}
+/**
+ * The authenticator returned no WebAuthn PRF output, so no
+ * passkey-bound secret can be derived. There is no fallback.
+ */
+declare class PrfUnsupportedError extends Web3PasskeyError {
+    credentialId: string;
+    constructor(credentialId: string);
+}
 
 /**
  * Persistent Session Storage
@@ -391,9 +466,11 @@ declare class ApiError extends Web3PasskeyError {
  *   user-verified assertion. Nothing stored on disk can re-derive it.
  * - requireReauth: true  → the key is NOT stored; every restore re-evaluates
  *   the PRF on a live assertion. The blob is hardware-bound at rest.
- * - requireReauth: false → the key is stored as a NON-EXTRACTABLE CryptoKey
- *   so silent restore works without a prompt. Scripts can use it but never
- *   read its bytes; it is refreshed at every real (prompted) login.
+ * - requireReauth: false → the raw key is stored next to the blob so silent
+ *   restore works without a prompt, and re-imported as non-extractable. Any
+ *   script on the origin can read it, which adds little: it could already
+ *   use a stored key to decrypt. It is refreshed at every real (prompted)
+ *   login.
  * - Authenticators without PRF get no persistent sessions (in-memory only) —
  *   there is deliberately no weaker fallback encryption.
  * - Only enabled for STANDARD and YOLO modes (STRICT mode excluded)
@@ -462,6 +539,90 @@ interface Web3PasskeyConfig {
     zkProofs?: ZKProofConfig;
 }
 
+/**
+ * Backup and Recovery Type Definitions
+ */
+type BackupMethod = 'file' | 'qr' | 'phrase';
+interface BackupStatus {
+    hasBackup: boolean;
+    evictionRisk: boolean;
+    lastBackupAt?: string;
+    methods: BackupMethod[];
+    passkeySync: PasskeySyncStatus;
+    recoveryPhrase: RecoveryPhraseStatus;
+    socialRecovery?: SocialRecoveryStatus;
+    securityScore: SecurityScore;
+}
+interface PasskeySyncStatus {
+    enabled: boolean;
+    deviceCount: number;
+    lastSyncTime?: string;
+    platform: 'apple' | 'google' | 'microsoft' | 'unknown';
+}
+interface RecoveryPhraseStatus {
+    verified: boolean;
+    verificationCount: number;
+    lastVerified?: string;
+    encryptedBackups: EncryptedBackupInfo[];
+}
+interface EncryptedBackupInfo {
+    id: string;
+    method: 'qr' | 'file';
+    location: string;
+    createdAt: string;
+    deviceFingerprint?: string;
+}
+interface SocialRecoveryStatus {
+    enabled: boolean;
+    guardians: Guardian$1[];
+    threshold: number;
+    sharesDistributed: number;
+    verifiedGuardians: number;
+}
+interface Guardian$1 {
+    id: string;
+    name: string;
+    email?: string;
+    publicKey?: string;
+    shareEncrypted: string;
+    status: 'pending' | 'active' | 'revoked';
+    addedAt: string;
+    lastVerified?: string;
+}
+interface SecurityScore {
+    total: number;
+    breakdown: {
+        passkeyActive: number;
+        passkeyMultiDevice: number;
+        phraseVerified: number;
+        encryptedBackup: number;
+        socialRecovery: number;
+    };
+    level: 'vulnerable' | 'protected' | 'secured' | 'fort-knox';
+    nextMilestone: string;
+}
+interface QRBackupOptions {
+    password?: string;
+    errorCorrection?: 'L' | 'M' | 'Q' | 'H';
+}
+interface RecoveryScenario {
+    type: 'lost-device' | 'lost-phrase' | 'lost-both' | 'switch-platform';
+    description: string;
+}
+interface SimulationResult {
+    scenario: RecoveryScenario;
+    success: boolean;
+    availableMethods: RecoveryMethod[];
+    timeEstimate: string;
+    educationalNote: string;
+}
+interface RecoveryMethod {
+    method: string;
+    success: boolean;
+    time: string;
+    requirements: string[];
+}
+
 /**
  * Main Web3Passkey SDK
  *
@@ -495,6 +656,7 @@ declare class Web3Passkey {
     private walletStorage;
     private currentUser;
     private currentWallet;
+    private persisted;
     private sessionManager;
     stealth?: StealthAddressModule;
     private zkModule?;
@@ -518,6 +680,8 @@ declare class Web3Passkey {
     }): Promise<{
         address: string;
         username: string;
+        hasBackup: boolean;
+        evictionRisk: boolean;
     }>;
     /**
      * Login with WebAuthn using resident credentials
@@ -540,6 +704,14 @@ declare class Web3Passkey {
     logout(): Promise<void>;
     get isAuthenticated(): boolean;
     get user(): UserInfo | null;
+    /**
+     * Whether the browser granted persistent storage (`navigator.storage.persist()`),
+     * requested after each register, login and restore: true means the origin's
+     * storage is exempt from storage-pressure eviction. null until the browser
+     * answers (Firefox asks the user), or where the API is missing.
+     */
+    get storagePersisted(): boolean | null;
+    private requestPersistentStorage;
     /**
      * List existing credentials (usernames and addresses)
      * Useful for allowing users to select which wallet to login to
@@ -874,7 +1046,12 @@ declare class Web3Passkey {
     /**
      * Get backup status
      */
-    getBackupStatus(): Promise<any>;
+    getBackupStatus(): Promise<BackupStatus>;
+    /**
+     * Record that the user wrote down their recovery phrase
+     * Call it once the user confirms, so getBackupStatus() reports a backup
+     */
+    confirmRecoveryPhraseBackup(): Promise<void>;
     /**
      * Create simplified backup file
      * This backup can be used to:
@@ -890,6 +1067,7 @@ declare class Web3Passkey {
         blob: Blob;
         filename: string;
     }>;
+    private backupCredential;
     /**
      * Set up social recovery by splitting backup file among guardians
      * Uses Shamir Secret Sharing to split the backup - requires M-of-N guardians to recover
@@ -949,6 +1127,9 @@ declare class Web3Passkey {
      *
      * This allows the user to use the same PRIMARY mode webauthn account on multiple devices.
      *
+     * A PRF backup (from exportForSync()) takes a single assertion restricted
+     * to its passkey and no password.
+     *
      * @param backupData - Backup file (JSON string or Blob) - can be pasted by user
      * @param password - Password to decrypt backup (if password-encrypted)
      * @returns Restored wallet info
@@ -957,6 +1138,18 @@ declare class Web3Passkey {
         mnemonic: string;
         ethereumAddress: string;
     }>;
+    /**
+     * Restore a PRF backup with its passkey and set this device up for it.
+     * The public key is this device's when it has the passkey's metadata,
+     * else the backup's, checked against the assertion's signature.
+     */
+    private restorePrfBackup;
+    /**
+     * Set this device up for a passkey and a synced wallet: saves the
+     * passkey's metadata (or points it at the wallet), stores the wallet
+     * under the passkey-derived key and starts a session
+     */
+    private bootstrapCredential;
     /**
      * Register new passkey with wallet from backup file
      * Use case: Fresh device, user has backup file but no passkey yet
@@ -977,16 +1170,30 @@ declare class Web3Passkey {
     getSyncStatus(): Promise<any>;
     /**
      * Export wallet for syncing to another device
-     * Uses passkey encryption so it works on devices where the passkey is synced
+     *
+     * Prompts for the passkey and encrypts with a key derived from its WebAuthn
+     * PRF output (`encryptionMethod: 'prf'`): a device where the passkey synced
+     * restores it with one prompt and no password. Where the authenticator has
+     * no PRF support, `password` makes it fall back to a password backup.
+     *
+     * @param password - Fallback password when PRF is unavailable
+     * @throws PrfUnsupportedError when PRF is unavailable and no password is given
      */
-    exportForSync(): Promise<{
+    exportForSync(password?: string): Promise<{
         blob: Blob;
         filename: string;
         qrCode?: string;
     }>;
     /**
      * Import wallet from another device (sync wallet to this device)
-     * Use case: User has passkey on both devices, wallet only on one
+     *
+     * Takes a PRF backup from exportForSync(): one assertion restricted to
+     * the backup's passkey decrypts it, with no password, on any device where
+     * the passkey synced, including one with no data for it. Works without a
+     * login. For a password backup (exportForSync()'s fallback), use
+     * syncWalletWithPasskey().
+     *
+     * @throws SyncBootstrapError ('CREDENTIAL_MISMATCH') when logged in with another passkey
      */
     importFromSync(syncData: string | Blob): Promise<{
         ethereumAddress: string;
@@ -1023,7 +1230,7 @@ declare class Web3Passkey {
     extendSession(): void;
     /**
      * Clear active session
-     * Also clears ALL persistent sessions from IndexedDB
+     * Also clears ALL persistent sessions from localStorage
      *
      * @throws {StorageError} if persistent sessions could not be cleared
      */
@@ -1041,6 +1248,23 @@ declare class Web3Passkey {
      * @param hours - Duration in hours
      */
     setPersistentSessionDuration(hours: number): void;
+    /**
+     * Derive a 32-byte secret bound to the passkey, separate per origin and tag
+     *
+     * Evaluates the WebAuthn PRF extension on a fresh user-verified assertion
+     * and runs HKDF-SHA256 on the output. The secret is never derived from or
+     * stored with the mnemonic, so it never appears in backups, recovery
+     * phrases, sessions or storage. When logged in, the assertion is
+     * restricted to the current user's passkey.
+     *
+     * @param tag - Non-empty label without ':', e.g. "zk-identity"
+     * @returns The secret and the credential it is bound to
+     * @throws PrfUnsupportedError when the authenticator doesn't support PRF
+     *
+     * @example
+     * const { secret, credentialId } = await w3pk.derivePrfSecret("zk-identity")
+     */
+    derivePrfSecret(tag: string): Promise<PrfSecret>;
     /**
      * Derive ML-KEM-1024 public key from the current wallet
      *
@@ -1326,31 +1550,6 @@ declare function verifyEIP7702Authorization(chainId: bigint, contractAddress: st
     s: string;
 } | string, expectedSigner: string): boolean;
 
-/** Client extension results consumed by w3pk (subset of the WebAuthn spec) */
-interface PrfExtensionResults {
-    prf?: {
-        enabled?: boolean;
-        results?: {
-            first?: ArrayBuffer;
-        };
-    };
-}
-/**
- * Native WebAuthn credential response (authentication)
- */
-interface AuthenticationCredential {
-    id: string;
-    rawId: ArrayBuffer;
-    type: 'public-key';
-    response: {
-        clientDataJSON: ArrayBuffer;
-        authenticatorData: ArrayBuffer;
-        signature: ArrayBuffer;
-        userHandle?: ArrayBuffer;
-    };
-    getClientExtensionResults(): PrfExtensionResults;
-}
-
 /**
  * Sync Authentication Helper
  * Handles passkey selection and authentication for cross-device sync scenarios
@@ -1360,6 +1559,9 @@ interface PasskeySelectionResult {
     credentialId: string;
     publicKey: string;
     ethereumAddress?: string;
+    username?: string;
+    /** The selection assertion, to verify against a public key from a backup */
+    assertion: AuthenticationCredential;
 }
 /**
  * Prompts the user to select a passkey/webauthn credential
@@ -1417,85 +1619,6 @@ declare function getCurrentOrigin(): string;
  */
 declare function deriveAddressFromP256PublicKey(publicKeySpki: string): Promise<string>;
 
-/**
- * Backup and Recovery Type Definitions
- */
-interface BackupStatus {
-    passkeySync: PasskeySyncStatus;
-    recoveryPhrase: RecoveryPhraseStatus;
-    socialRecovery?: SocialRecoveryStatus;
-    securityScore: SecurityScore;
-}
-interface PasskeySyncStatus {
-    enabled: boolean;
-    deviceCount: number;
-    lastSyncTime?: string;
-    platform: 'apple' | 'google' | 'microsoft' | 'unknown';
-}
-interface RecoveryPhraseStatus {
-    verified: boolean;
-    verificationCount: number;
-    lastVerified?: string;
-    encryptedBackups: EncryptedBackupInfo[];
-}
-interface EncryptedBackupInfo {
-    id: string;
-    method: 'qr' | 'file';
-    location: string;
-    createdAt: string;
-    deviceFingerprint?: string;
-}
-interface SocialRecoveryStatus {
-    enabled: boolean;
-    guardians: Guardian$1[];
-    threshold: number;
-    sharesDistributed: number;
-    verifiedGuardians: number;
-}
-interface Guardian$1 {
-    id: string;
-    name: string;
-    email?: string;
-    publicKey?: string;
-    shareEncrypted: string;
-    status: 'pending' | 'active' | 'revoked';
-    addedAt: string;
-    lastVerified?: string;
-}
-interface SecurityScore {
-    total: number;
-    breakdown: {
-        passkeyActive: number;
-        passkeyMultiDevice: number;
-        phraseVerified: number;
-        encryptedBackup: number;
-        socialRecovery: number;
-    };
-    level: 'vulnerable' | 'protected' | 'secured' | 'fort-knox';
-    nextMilestone: string;
-}
-interface QRBackupOptions {
-    password?: string;
-    errorCorrection?: 'L' | 'M' | 'Q' | 'H';
-}
-interface RecoveryScenario {
-    type: 'lost-device' | 'lost-phrase' | 'lost-both' | 'switch-platform';
-    description: string;
-}
-interface SimulationResult {
-    scenario: RecoveryScenario;
-    success: boolean;
-    availableMethods: RecoveryMethod[];
-    timeEstimate: string;
-    educationalNote: string;
-}
-interface RecoveryMethod {
-    method: string;
-    success: boolean;
-    time: string;
-    requirements: string[];
-}
-
 /**
  * Recovery Scenario Simulator
  * Educational tool to help users understand recovery options
@@ -2217,6 +2340,7 @@ interface MLKemKeypair {
     privateKey: Uint8Array;
 }
 interface EncryptedPayload {
+    version?: 2;
     recipients: Array<{
         publicKey: string;
         ciphertext: string;
@@ -2313,4 +2437,4 @@ declare function mlkemDecryptWithKey(payload: EncryptedPayload, privateKey: stri
 
 declare function createWeb3Passkey(config?: Web3PasskeyConfig): Web3Passkey;
 
-export { ApiError, AuthenticationError, type BackupStatus, type BrowserInspectOptions, type BrowserInspectResult, CryptoError, DEFAULT_MODE, DEFAULT_TAG, type DeviceInfo, type EIP1193Provider, type EIP7702Authorization, type EncryptedBackupInfo, type EncryptedPayload, type Guardian, type GuardianInvite, type MLKemKeypair, type PasskeySelectionResult, type QRBackupOptions, type RecoveryProgress, type RecoveryScenario, type RecoveryShare, RecoverySimulator, RegistrationError, type SecurityScore, type SignAuthorizationParams, type SimulationResult, type SiweMessage, type SocialRecoveryConfig, SocialRecoveryManager, type StealthAddressConfig, StealthAddressModule, type StealthAddressResult, type StealthKeys, StorageError, type SyncCapabilities, type SyncStatus, type SyncVault, type UserInfo, WalletError, type WalletInfo, Web3Passkey, type Web3PasskeyConfig, Web3PasskeyError, arrayBufferToBase64Url, assertEthereumAddress, assertMnemonic, assertUsername, authenticateWithPasskey, base64ToArrayBuffer, base64UrlDecode, base64UrlToArrayBuffer, canControlStealthAddress, checkStealthAddress, clearCache, computeStealthPrivateKey, createSiweMessage, createWalletFromMnemonic, createWeb3Passkey, createWeb3Passkey as default, deriveAddressFromP256PublicKey, deriveIndexFromOriginModeAndTag, deriveMLKemKeypair, deriveStealthKeys, deriveWalletFromMnemonic, detectWalletProvider, encodeEIP7702AuthorizationMessage, extractRS, generateBIP39Wallet, generateSiweNonce, generateStealthAddress, getAllChains, getAllTopics, getChainById, getCurrentBuildHash, getCurrentOrigin, getDefaultProvider, getEndpoints, getExplainer, getOriginSpecificAddress, getPackageVersion, getW3pkBuildHash, hashEIP7702AuthorizationMessage, inspect, inspectNow, isStrongPassword, mlkemDecrypt, mlkemDecryptWithKey, mlkemEncrypt, mlkemEncryptWithKey, normalizeOrigin, parseSiweMessage, promptPasskeySelection, requestExternalWalletAuthorization, safeAtob, safeBtoa, searchExplainers, supportsEIP7702Authorization, validateEthereumAddress, validateMnemonic, validateSiweMessage, validateUsername, verifyBuildHash, verifyEIP7702Authorization, verifySiweSignature };
+export { ApiError, AuthenticationError, type BackupMethod, type BackupStatus, type BrowserInspectOptions, type BrowserInspectResult, CryptoError, DEFAULT_MODE, DEFAULT_TAG, type DeviceInfo, type EIP1193Provider, type EIP7702Authorization, type EncryptedBackupInfo, type EncryptedPayload, type Guardian, type GuardianInvite, type MLKemKeypair, type PasskeySelectionResult, type PrfSecret, PrfUnsupportedError, type QRBackupOptions, type RecoveryProgress, type RecoveryScenario, type RecoveryShare, RecoverySimulator, RegistrationError, type SecurityScore, type SignAuthorizationParams, type SimulationResult, type SiweMessage, type SocialRecoveryConfig, SocialRecoveryManager, type StealthAddressConfig, StealthAddressModule, type StealthAddressResult, type StealthKeys, StorageError, SyncBootstrapError, type SyncBootstrapReason, type SyncCapabilities, SyncRequiredError, type SyncStatus, type SyncVault, type UserInfo, WalletError, type WalletInfo, WalletMissingError, Web3Passkey, type Web3PasskeyConfig, Web3PasskeyError, arrayBufferToBase64Url, assertEthereumAddress, assertMnemonic, assertUsername, authenticateWithPasskey, base64ToArrayBuffer, base64UrlDecode, base64UrlToArrayBuffer, canControlStealthAddress, checkStealthAddress, clearCache, computeStealthPrivateKey, createSiweMessage, createWalletFromMnemonic, createWeb3Passkey, createWeb3Passkey as default, deriveAddressFromP256PublicKey, deriveIndexFromOriginModeAndTag, deriveMLKemKeypair, deriveStealthKeys, deriveWalletFromMnemonic, detectWalletProvider, encodeEIP7702AuthorizationMessage, extractRS, generateBIP39Wallet, generateSiweNonce, generateStealthAddress, getAllChains, getAllTopics, getChainById, getCurrentBuildHash, getCurrentOrigin, getDefaultProvider, getEndpoints, getExplainer, getOriginSpecificAddress, getPackageVersion, getW3pkBuildHash, hashEIP7702AuthorizationMessage, inspect, inspectNow, isStrongPassword, mlkemDecrypt, mlkemDecryptWithKey, mlkemEncrypt, mlkemEncryptWithKey, normalizeOrigin, parseSiweMessage, promptPasskeySelection, requestExternalWalletAuthorization, safeAtob, safeBtoa, searchExplainers, supportsEIP7702Authorization, validateEthereumAddress, validateMnemonic, validateSiweMessage, validateUsername, verifyBuildHash, verifyEIP7702Authorization, verifySiweSignature };