w3pk 0.10.3 → 0.10.4

package/README.md

@@ -512,11 +512,4 @@ GPL-3.0
 
 ## Contact
 
-**Julien Béranger** ([GitHub](https://github.com/julienbrg))
-- Element: [@julienbrg:matrix.org](https://matrix.to/#/@julienbrg:matrix.org)
-- Farcaster: [julien-](https://warpcast.com/julien-)
-- Telegram: [@julienbrg](https://t.me/julienbrg)
-- Twitter: [@julienbrg](https://twitter.com/julienbrg)
-
-
-<img src="https://bafkreid5xwxz4bed67bxb2wjmwsec4uhlcjviwy7pkzwoyu5oesjd3sp64.ipfs.w3s.link" alt="built-with-ethereum-w3hc" width="100"/>
+Questions or feedback? Get in touch with [Julien](https://github.com/julienbrg): [https://julienberanger.com/contact](https://julienberanger.com/contact)

package/dist/chainlist/index.d.mts

@@ -0,0 +1,96 @@
+/**
+ * Chainlist types
+ */
+interface Chain {
+    name: string;
+    chain: string;
+    icon?: string;
+    rpc: string[];
+    features?: Array<{
+        name: string;
+    }>;
+    faucets: string[];
+    nativeCurrency: {
+        name: string;
+        symbol: string;
+        decimals: number;
+    };
+    infoURL: string;
+    shortName: string;
+    chainId: number;
+    networkId: number;
+    slip44?: number;
+    ens?: {
+        registry: string;
+    };
+    explorers?: Array<{
+        name: string;
+        url: string;
+        icon?: string;
+        standard: string;
+    }>;
+    title?: string;
+    status?: string;
+    redFlags?: string[];
+}
+interface ChainlistOptions {
+    /**
+     * Custom URL for chains.json data
+     * @default 'https://chainid.network/chains.json'
+     */
+    chainsJsonUrl?: string;
+    /**
+     * Cache duration in milliseconds
+     * @default 3600000 (1 hour)
+     */
+    cacheDuration?: number;
+}
+
+/**
+ * Chainlist module for fetching RPC endpoints
+ */
+
+/**
+ * Get RPC endpoints for a specific chain ID, excluding those that require API keys
+ *
+ * @param chainId - The chain ID to get endpoints for
+ * @param options - Optional configuration
+ * @returns Array of RPC URLs that don't require API keys
+ *
+ * @example
+ * ```typescript
+ * import { getEndpoints } from 'w3pk/chainlist'
+ *
+ * // Get Ethereum mainnet RPCs
+ * const endpoints = await getEndpoints(1)
+ * console.log(endpoints)
+ * // [
+ * //   "https://api.mycryptoapi.com/eth",
+ * //   "https://cloudflare-eth.com",
+ * //   "https://ethereum-rpc.publicnode.com",
+ * //   ...
+ * // ]
+ * ```
+ */
+declare function getEndpoints(chainId: number, options?: ChainlistOptions): Promise<string[]>;
+/**
+ * Get all available chains
+ *
+ * @param options - Optional configuration
+ * @returns Array of all chains
+ */
+declare function getAllChains(options?: ChainlistOptions): Promise<Chain[]>;
+/**
+ * Get chain information by chain ID
+ *
+ * @param chainId - The chain ID to get information for
+ * @param options - Optional configuration
+ * @returns Chain information or undefined if not found
+ */
+declare function getChainById(chainId: number, options?: ChainlistOptions): Promise<Chain | undefined>;
+/**
+ * Clear the chains data cache
+ */
+declare function clearCache(): void;
+
+export { type Chain, type ChainlistOptions, clearCache, getAllChains, getChainById, getEndpoints };

package/dist/chainlist/index.d.ts

@@ -0,0 +1,96 @@
+/**
+ * Chainlist types
+ */
+interface Chain {
+    name: string;
+    chain: string;
+    icon?: string;
+    rpc: string[];
+    features?: Array<{
+        name: string;
+    }>;
+    faucets: string[];
+    nativeCurrency: {
+        name: string;
+        symbol: string;
+        decimals: number;
+    };
+    infoURL: string;
+    shortName: string;
+    chainId: number;
+    networkId: number;
+    slip44?: number;
+    ens?: {
+        registry: string;
+    };
+    explorers?: Array<{
+        name: string;
+        url: string;
+        icon?: string;
+        standard: string;
+    }>;
+    title?: string;
+    status?: string;
+    redFlags?: string[];
+}
+interface ChainlistOptions {
+    /**
+     * Custom URL for chains.json data
+     * @default 'https://chainid.network/chains.json'
+     */
+    chainsJsonUrl?: string;
+    /**
+     * Cache duration in milliseconds
+     * @default 3600000 (1 hour)
+     */
+    cacheDuration?: number;
+}
+
+/**
+ * Chainlist module for fetching RPC endpoints
+ */
+
+/**
+ * Get RPC endpoints for a specific chain ID, excluding those that require API keys
+ *
+ * @param chainId - The chain ID to get endpoints for
+ * @param options - Optional configuration
+ * @returns Array of RPC URLs that don't require API keys
+ *
+ * @example
+ * ```typescript
+ * import { getEndpoints } from 'w3pk/chainlist'
+ *
+ * // Get Ethereum mainnet RPCs
+ * const endpoints = await getEndpoints(1)
+ * console.log(endpoints)
+ * // [
+ * //   "https://api.mycryptoapi.com/eth",
+ * //   "https://cloudflare-eth.com",
+ * //   "https://ethereum-rpc.publicnode.com",
+ * //   ...
+ * // ]
+ * ```
+ */
+declare function getEndpoints(chainId: number, options?: ChainlistOptions): Promise<string[]>;
+/**
+ * Get all available chains
+ *
+ * @param options - Optional configuration
+ * @returns Array of all chains
+ */
+declare function getAllChains(options?: ChainlistOptions): Promise<Chain[]>;
+/**
+ * Get chain information by chain ID
+ *
+ * @param chainId - The chain ID to get information for
+ * @param options - Optional configuration
+ * @returns Chain information or undefined if not found
+ */
+declare function getChainById(chainId: number, options?: ChainlistOptions): Promise<Chain | undefined>;
+/**
+ * Clear the chains data cache
+ */
+declare function clearCache(): void;
+
+export { type Chain, type ChainlistOptions, clearCache, getAllChains, getChainById, getEndpoints };

package/dist/index.d.mts

@@ -246,6 +246,47 @@ declare class StealthAddressModule {
     get isAvailable(): boolean;
 }
 
+/** Client extension results consumed by w3pk (subset of the WebAuthn spec) */
+interface PrfExtensionResults {
+    prf?: {
+        enabled?: boolean;
+        results?: {
+            first?: ArrayBuffer;
+        };
+    };
+}
+/**
+ * Native WebAuthn credential response (authentication)
+ */
+interface AuthenticationCredential {
+    id: string;
+    rawId: ArrayBuffer;
+    type: 'public-key';
+    response: {
+        clientDataJSON: ArrayBuffer;
+        authenticatorData: ArrayBuffer;
+        signature: ArrayBuffer;
+        userHandle?: ArrayBuffer;
+    };
+    getClientExtensionResults(): PrfExtensionResults;
+}
+
+/**
+ * WebAuthn PRF evaluation
+ *
+ * The PRF extension releases HMAC(credential secret, salt) only on a live,
+ * user-verified assertion. The browser hashes each input as
+ * SHA-256("WebAuthn PRF" || 0x00 || input) before it reaches the
+ * authenticator, so inputs here can be any bytes.
+ */
+
+interface PrfSecret {
+    /** 32-byte secret for this origin and tag */
+    secret: Uint8Array;
+    /** Credential the secret is bound to; a new credential gives a new secret */
+    credentialId: string;
+}
+
 /**
  * Shared types used across the SDK
  */
@@ -396,6 +437,23 @@ declare class WalletMissingError extends Web3PasskeyError {
     ethereumAddress: string;
     constructor(credentialId: string, ethereumAddress: string);
 }
+type SyncBootstrapReason = "PASSKEY_BACKUP" | "NO_CREDENTIAL" | "CREDENTIAL_MISMATCH" | "PUBLIC_KEY_MISMATCH";
+/**
+ * A sync can't set up this device's passkey metadata from the backup.
+ */
+declare class SyncBootstrapError extends Web3PasskeyError {
+    reason: SyncBootstrapReason;
+    credentialId: string;
+    constructor(reason: SyncBootstrapReason, credentialId: string);
+}
+/**
+ * The authenticator returned no WebAuthn PRF output, so no
+ * passkey-bound secret can be derived. There is no fallback.
+ */
+declare class PrfUnsupportedError extends Web3PasskeyError {
+    credentialId: string;
+    constructor(credentialId: string);
+}
 
 /**
  * Persistent Session Storage
@@ -487,6 +545,7 @@ interface Web3PasskeyConfig {
 type BackupMethod = 'file' | 'qr' | 'phrase';
 interface BackupStatus {
     hasBackup: boolean;
+    evictionRisk: boolean;
     lastBackupAt?: string;
     methods: BackupMethod[];
     passkeySync: PasskeySyncStatus;
@@ -622,6 +681,7 @@ declare class Web3Passkey {
         address: string;
         username: string;
         hasBackup: boolean;
+        evictionRisk: boolean;
     }>;
     /**
      * Login with WebAuthn using resident credentials
@@ -1007,6 +1067,7 @@ declare class Web3Passkey {
         blob: Blob;
         filename: string;
     }>;
+    private backupCredential;
     /**
      * Set up social recovery by splitting backup file among guardians
      * Uses Shamir Secret Sharing to split the backup - requires M-of-N guardians to recover
@@ -1066,6 +1127,9 @@ declare class Web3Passkey {
      *
      * This allows the user to use the same PRIMARY mode webauthn account on multiple devices.
      *
+     * A PRF backup (from exportForSync()) takes a single assertion restricted
+     * to its passkey and no password.
+     *
      * @param backupData - Backup file (JSON string or Blob) - can be pasted by user
      * @param password - Password to decrypt backup (if password-encrypted)
      * @returns Restored wallet info
@@ -1074,6 +1138,18 @@ declare class Web3Passkey {
         mnemonic: string;
         ethereumAddress: string;
     }>;
+    /**
+     * Restore a PRF backup with its passkey and set this device up for it.
+     * The public key is this device's when it has the passkey's metadata,
+     * else the backup's, checked against the assertion's signature.
+     */
+    private restorePrfBackup;
+    /**
+     * Set this device up for a passkey and a synced wallet: saves the
+     * passkey's metadata (or points it at the wallet), stores the wallet
+     * under the passkey-derived key and starts a session
+     */
+    private bootstrapCredential;
     /**
      * Register new passkey with wallet from backup file
      * Use case: Fresh device, user has backup file but no passkey yet
@@ -1094,16 +1170,30 @@ declare class Web3Passkey {
     getSyncStatus(): Promise<any>;
     /**
      * Export wallet for syncing to another device
-     * Uses passkey encryption so it works on devices where the passkey is synced
+     *
+     * Prompts for the passkey and encrypts with a key derived from its WebAuthn
+     * PRF output (`encryptionMethod: 'prf'`): a device where the passkey synced
+     * restores it with one prompt and no password. Where the authenticator has
+     * no PRF support, `password` makes it fall back to a password backup.
+     *
+     * @param password - Fallback password when PRF is unavailable
+     * @throws PrfUnsupportedError when PRF is unavailable and no password is given
      */
-    exportForSync(): Promise<{
+    exportForSync(password?: string): Promise<{
         blob: Blob;
         filename: string;
         qrCode?: string;
     }>;
     /**
      * Import wallet from another device (sync wallet to this device)
-     * Use case: User has passkey on both devices, wallet only on one
+     *
+     * Takes a PRF backup from exportForSync(): one assertion restricted to
+     * the backup's passkey decrypts it, with no password, on any device where
+     * the passkey synced, including one with no data for it. Works without a
+     * login. For a password backup (exportForSync()'s fallback), use
+     * syncWalletWithPasskey().
+     *
+     * @throws SyncBootstrapError ('CREDENTIAL_MISMATCH') when logged in with another passkey
      */
     importFromSync(syncData: string | Blob): Promise<{
         ethereumAddress: string;
@@ -1158,6 +1248,23 @@ declare class Web3Passkey {
      * @param hours - Duration in hours
      */
     setPersistentSessionDuration(hours: number): void;
+    /**
+     * Derive a 32-byte secret bound to the passkey, separate per origin and tag
+     *
+     * Evaluates the WebAuthn PRF extension on a fresh user-verified assertion
+     * and runs HKDF-SHA256 on the output. The secret is never derived from or
+     * stored with the mnemonic, so it never appears in backups, recovery
+     * phrases, sessions or storage. When logged in, the assertion is
+     * restricted to the current user's passkey.
+     *
+     * @param tag - Non-empty label without ':', e.g. "zk-identity"
+     * @returns The secret and the credential it is bound to
+     * @throws PrfUnsupportedError when the authenticator doesn't support PRF
+     *
+     * @example
+     * const { secret, credentialId } = await w3pk.derivePrfSecret("zk-identity")
+     */
+    derivePrfSecret(tag: string): Promise<PrfSecret>;
     /**
      * Derive ML-KEM-1024 public key from the current wallet
      *
@@ -1443,31 +1550,6 @@ declare function verifyEIP7702Authorization(chainId: bigint, contractAddress: st
     s: string;
 } | string, expectedSigner: string): boolean;
 
-/** Client extension results consumed by w3pk (subset of the WebAuthn spec) */
-interface PrfExtensionResults {
-    prf?: {
-        enabled?: boolean;
-        results?: {
-            first?: ArrayBuffer;
-        };
-    };
-}
-/**
- * Native WebAuthn credential response (authentication)
- */
-interface AuthenticationCredential {
-    id: string;
-    rawId: ArrayBuffer;
-    type: 'public-key';
-    response: {
-        clientDataJSON: ArrayBuffer;
-        authenticatorData: ArrayBuffer;
-        signature: ArrayBuffer;
-        userHandle?: ArrayBuffer;
-    };
-    getClientExtensionResults(): PrfExtensionResults;
-}
-
 /**
  * Sync Authentication Helper
  * Handles passkey selection and authentication for cross-device sync scenarios
@@ -1477,6 +1559,9 @@ interface PasskeySelectionResult {
     credentialId: string;
     publicKey: string;
     ethereumAddress?: string;
+    username?: string;
+    /** The selection assertion, to verify against a public key from a backup */
+    assertion: AuthenticationCredential;
 }
 /**
  * Prompts the user to select a passkey/webauthn credential
@@ -2352,4 +2437,4 @@ declare function mlkemDecryptWithKey(payload: EncryptedPayload, privateKey: stri
 
 declare function createWeb3Passkey(config?: Web3PasskeyConfig): Web3Passkey;
 
-export { ApiError, AuthenticationError, type BackupMethod, type BackupStatus, type BrowserInspectOptions, type BrowserInspectResult, CryptoError, DEFAULT_MODE, DEFAULT_TAG, type DeviceInfo, type EIP1193Provider, type EIP7702Authorization, type EncryptedBackupInfo, type EncryptedPayload, type Guardian, type GuardianInvite, type MLKemKeypair, type PasskeySelectionResult, type QRBackupOptions, type RecoveryProgress, type RecoveryScenario, type RecoveryShare, RecoverySimulator, RegistrationError, type SecurityScore, type SignAuthorizationParams, type SimulationResult, type SiweMessage, type SocialRecoveryConfig, SocialRecoveryManager, type StealthAddressConfig, StealthAddressModule, type StealthAddressResult, type StealthKeys, StorageError, type SyncCapabilities, SyncRequiredError, type SyncStatus, type SyncVault, type UserInfo, WalletError, type WalletInfo, WalletMissingError, Web3Passkey, type Web3PasskeyConfig, Web3PasskeyError, arrayBufferToBase64Url, assertEthereumAddress, assertMnemonic, assertUsername, authenticateWithPasskey, base64ToArrayBuffer, base64UrlDecode, base64UrlToArrayBuffer, canControlStealthAddress, checkStealthAddress, clearCache, computeStealthPrivateKey, createSiweMessage, createWalletFromMnemonic, createWeb3Passkey, createWeb3Passkey as default, deriveAddressFromP256PublicKey, deriveIndexFromOriginModeAndTag, deriveMLKemKeypair, deriveStealthKeys, deriveWalletFromMnemonic, detectWalletProvider, encodeEIP7702AuthorizationMessage, extractRS, generateBIP39Wallet, generateSiweNonce, generateStealthAddress, getAllChains, getAllTopics, getChainById, getCurrentBuildHash, getCurrentOrigin, getDefaultProvider, getEndpoints, getExplainer, getOriginSpecificAddress, getPackageVersion, getW3pkBuildHash, hashEIP7702AuthorizationMessage, inspect, inspectNow, isStrongPassword, mlkemDecrypt, mlkemDecryptWithKey, mlkemEncrypt, mlkemEncryptWithKey, normalizeOrigin, parseSiweMessage, promptPasskeySelection, requestExternalWalletAuthorization, safeAtob, safeBtoa, searchExplainers, supportsEIP7702Authorization, validateEthereumAddress, validateMnemonic, validateSiweMessage, validateUsername, verifyBuildHash, verifyEIP7702Authorization, verifySiweSignature };
+export { ApiError, AuthenticationError, type BackupMethod, type BackupStatus, type BrowserInspectOptions, type BrowserInspectResult, CryptoError, DEFAULT_MODE, DEFAULT_TAG, type DeviceInfo, type EIP1193Provider, type EIP7702Authorization, type EncryptedBackupInfo, type EncryptedPayload, type Guardian, type GuardianInvite, type MLKemKeypair, type PasskeySelectionResult, type PrfSecret, PrfUnsupportedError, type QRBackupOptions, type RecoveryProgress, type RecoveryScenario, type RecoveryShare, RecoverySimulator, RegistrationError, type SecurityScore, type SignAuthorizationParams, type SimulationResult, type SiweMessage, type SocialRecoveryConfig, SocialRecoveryManager, type StealthAddressConfig, StealthAddressModule, type StealthAddressResult, type StealthKeys, StorageError, SyncBootstrapError, type SyncBootstrapReason, type SyncCapabilities, SyncRequiredError, type SyncStatus, type SyncVault, type UserInfo, WalletError, type WalletInfo, WalletMissingError, Web3Passkey, type Web3PasskeyConfig, Web3PasskeyError, arrayBufferToBase64Url, assertEthereumAddress, assertMnemonic, assertUsername, authenticateWithPasskey, base64ToArrayBuffer, base64UrlDecode, base64UrlToArrayBuffer, canControlStealthAddress, checkStealthAddress, clearCache, computeStealthPrivateKey, createSiweMessage, createWalletFromMnemonic, createWeb3Passkey, createWeb3Passkey as default, deriveAddressFromP256PublicKey, deriveIndexFromOriginModeAndTag, deriveMLKemKeypair, deriveStealthKeys, deriveWalletFromMnemonic, detectWalletProvider, encodeEIP7702AuthorizationMessage, extractRS, generateBIP39Wallet, generateSiweNonce, generateStealthAddress, getAllChains, getAllTopics, getChainById, getCurrentBuildHash, getCurrentOrigin, getDefaultProvider, getEndpoints, getExplainer, getOriginSpecificAddress, getPackageVersion, getW3pkBuildHash, hashEIP7702AuthorizationMessage, inspect, inspectNow, isStrongPassword, mlkemDecrypt, mlkemDecryptWithKey, mlkemEncrypt, mlkemEncryptWithKey, normalizeOrigin, parseSiweMessage, promptPasskeySelection, requestExternalWalletAuthorization, safeAtob, safeBtoa, searchExplainers, supportsEIP7702Authorization, validateEthereumAddress, validateMnemonic, validateSiweMessage, validateUsername, verifyBuildHash, verifyEIP7702Authorization, verifySiweSignature };

package/dist/index.d.ts

@@ -246,6 +246,47 @@ declare class StealthAddressModule {
     get isAvailable(): boolean;
 }
 
+/** Client extension results consumed by w3pk (subset of the WebAuthn spec) */
+interface PrfExtensionResults {
+    prf?: {
+        enabled?: boolean;
+        results?: {
+            first?: ArrayBuffer;
+        };
+    };
+}
+/**
+ * Native WebAuthn credential response (authentication)
+ */
+interface AuthenticationCredential {
+    id: string;
+    rawId: ArrayBuffer;
+    type: 'public-key';
+    response: {
+        clientDataJSON: ArrayBuffer;
+        authenticatorData: ArrayBuffer;
+        signature: ArrayBuffer;
+        userHandle?: ArrayBuffer;
+    };
+    getClientExtensionResults(): PrfExtensionResults;
+}
+
+/**
+ * WebAuthn PRF evaluation
+ *
+ * The PRF extension releases HMAC(credential secret, salt) only on a live,
+ * user-verified assertion. The browser hashes each input as
+ * SHA-256("WebAuthn PRF" || 0x00 || input) before it reaches the
+ * authenticator, so inputs here can be any bytes.
+ */
+
+interface PrfSecret {
+    /** 32-byte secret for this origin and tag */
+    secret: Uint8Array;
+    /** Credential the secret is bound to; a new credential gives a new secret */
+    credentialId: string;
+}
+
 /**
  * Shared types used across the SDK
  */
@@ -396,6 +437,23 @@ declare class WalletMissingError extends Web3PasskeyError {
     ethereumAddress: string;
     constructor(credentialId: string, ethereumAddress: string);
 }
+type SyncBootstrapReason = "PASSKEY_BACKUP" | "NO_CREDENTIAL" | "CREDENTIAL_MISMATCH" | "PUBLIC_KEY_MISMATCH";
+/**
+ * A sync can't set up this device's passkey metadata from the backup.
+ */
+declare class SyncBootstrapError extends Web3PasskeyError {
+    reason: SyncBootstrapReason;
+    credentialId: string;
+    constructor(reason: SyncBootstrapReason, credentialId: string);
+}
+/**
+ * The authenticator returned no WebAuthn PRF output, so no
+ * passkey-bound secret can be derived. There is no fallback.
+ */
+declare class PrfUnsupportedError extends Web3PasskeyError {
+    credentialId: string;
+    constructor(credentialId: string);
+}
 
 /**
  * Persistent Session Storage
@@ -487,6 +545,7 @@ interface Web3PasskeyConfig {
 type BackupMethod = 'file' | 'qr' | 'phrase';
 interface BackupStatus {
     hasBackup: boolean;
+    evictionRisk: boolean;
     lastBackupAt?: string;
     methods: BackupMethod[];
     passkeySync: PasskeySyncStatus;
@@ -622,6 +681,7 @@ declare class Web3Passkey {
         address: string;
         username: string;
         hasBackup: boolean;
+        evictionRisk: boolean;
     }>;
     /**
      * Login with WebAuthn using resident credentials
@@ -1007,6 +1067,7 @@ declare class Web3Passkey {
         blob: Blob;
         filename: string;
     }>;
+    private backupCredential;
     /**
      * Set up social recovery by splitting backup file among guardians
      * Uses Shamir Secret Sharing to split the backup - requires M-of-N guardians to recover
@@ -1066,6 +1127,9 @@ declare class Web3Passkey {
      *
      * This allows the user to use the same PRIMARY mode webauthn account on multiple devices.
      *
+     * A PRF backup (from exportForSync()) takes a single assertion restricted
+     * to its passkey and no password.
+     *
      * @param backupData - Backup file (JSON string or Blob) - can be pasted by user
      * @param password - Password to decrypt backup (if password-encrypted)
      * @returns Restored wallet info
@@ -1074,6 +1138,18 @@ declare class Web3Passkey {
         mnemonic: string;
         ethereumAddress: string;
     }>;
+    /**
+     * Restore a PRF backup with its passkey and set this device up for it.
+     * The public key is this device's when it has the passkey's metadata,
+     * else the backup's, checked against the assertion's signature.
+     */
+    private restorePrfBackup;
+    /**
+     * Set this device up for a passkey and a synced wallet: saves the
+     * passkey's metadata (or points it at the wallet), stores the wallet
+     * under the passkey-derived key and starts a session
+     */
+    private bootstrapCredential;
     /**
      * Register new passkey with wallet from backup file
      * Use case: Fresh device, user has backup file but no passkey yet
@@ -1094,16 +1170,30 @@ declare class Web3Passkey {
     getSyncStatus(): Promise<any>;
     /**
      * Export wallet for syncing to another device
-     * Uses passkey encryption so it works on devices where the passkey is synced
+     *
+     * Prompts for the passkey and encrypts with a key derived from its WebAuthn
+     * PRF output (`encryptionMethod: 'prf'`): a device where the passkey synced
+     * restores it with one prompt and no password. Where the authenticator has
+     * no PRF support, `password` makes it fall back to a password backup.
+     *
+     * @param password - Fallback password when PRF is unavailable
+     * @throws PrfUnsupportedError when PRF is unavailable and no password is given
      */
-    exportForSync(): Promise<{
+    exportForSync(password?: string): Promise<{
         blob: Blob;
         filename: string;
         qrCode?: string;
     }>;
     /**
      * Import wallet from another device (sync wallet to this device)
-     * Use case: User has passkey on both devices, wallet only on one
+     *
+     * Takes a PRF backup from exportForSync(): one assertion restricted to
+     * the backup's passkey decrypts it, with no password, on any device where
+     * the passkey synced, including one with no data for it. Works without a
+     * login. For a password backup (exportForSync()'s fallback), use
+     * syncWalletWithPasskey().
+     *
+     * @throws SyncBootstrapError ('CREDENTIAL_MISMATCH') when logged in with another passkey
      */
     importFromSync(syncData: string | Blob): Promise<{
         ethereumAddress: string;
@@ -1158,6 +1248,23 @@ declare class Web3Passkey {
      * @param hours - Duration in hours
      */
     setPersistentSessionDuration(hours: number): void;
+    /**
+     * Derive a 32-byte secret bound to the passkey, separate per origin and tag
+     *
+     * Evaluates the WebAuthn PRF extension on a fresh user-verified assertion
+     * and runs HKDF-SHA256 on the output. The secret is never derived from or
+     * stored with the mnemonic, so it never appears in backups, recovery
+     * phrases, sessions or storage. When logged in, the assertion is
+     * restricted to the current user's passkey.
+     *
+     * @param tag - Non-empty label without ':', e.g. "zk-identity"
+     * @returns The secret and the credential it is bound to
+     * @throws PrfUnsupportedError when the authenticator doesn't support PRF
+     *
+     * @example
+     * const { secret, credentialId } = await w3pk.derivePrfSecret("zk-identity")
+     */
+    derivePrfSecret(tag: string): Promise<PrfSecret>;
     /**
      * Derive ML-KEM-1024 public key from the current wallet
      *
@@ -1443,31 +1550,6 @@ declare function verifyEIP7702Authorization(chainId: bigint, contractAddress: st
     s: string;
 } | string, expectedSigner: string): boolean;
 
-/** Client extension results consumed by w3pk (subset of the WebAuthn spec) */
-interface PrfExtensionResults {
-    prf?: {
-        enabled?: boolean;
-        results?: {
-            first?: ArrayBuffer;
-        };
-    };
-}
-/**
- * Native WebAuthn credential response (authentication)
- */
-interface AuthenticationCredential {
-    id: string;
-    rawId: ArrayBuffer;
-    type: 'public-key';
-    response: {
-        clientDataJSON: ArrayBuffer;
-        authenticatorData: ArrayBuffer;
-        signature: ArrayBuffer;
-        userHandle?: ArrayBuffer;
-    };
-    getClientExtensionResults(): PrfExtensionResults;
-}
-
 /**
  * Sync Authentication Helper
  * Handles passkey selection and authentication for cross-device sync scenarios
@@ -1477,6 +1559,9 @@ interface PasskeySelectionResult {
     credentialId: string;
     publicKey: string;
     ethereumAddress?: string;
+    username?: string;
+    /** The selection assertion, to verify against a public key from a backup */
+    assertion: AuthenticationCredential;
 }
 /**
  * Prompts the user to select a passkey/webauthn credential
@@ -2352,4 +2437,4 @@ declare function mlkemDecryptWithKey(payload: EncryptedPayload, privateKey: stri
 
 declare function createWeb3Passkey(config?: Web3PasskeyConfig): Web3Passkey;
 
-export { ApiError, AuthenticationError, type BackupMethod, type BackupStatus, type BrowserInspectOptions, type BrowserInspectResult, CryptoError, DEFAULT_MODE, DEFAULT_TAG, type DeviceInfo, type EIP1193Provider, type EIP7702Authorization, type EncryptedBackupInfo, type EncryptedPayload, type Guardian, type GuardianInvite, type MLKemKeypair, type PasskeySelectionResult, type QRBackupOptions, type RecoveryProgress, type RecoveryScenario, type RecoveryShare, RecoverySimulator, RegistrationError, type SecurityScore, type SignAuthorizationParams, type SimulationResult, type SiweMessage, type SocialRecoveryConfig, SocialRecoveryManager, type StealthAddressConfig, StealthAddressModule, type StealthAddressResult, type StealthKeys, StorageError, type SyncCapabilities, SyncRequiredError, type SyncStatus, type SyncVault, type UserInfo, WalletError, type WalletInfo, WalletMissingError, Web3Passkey, type Web3PasskeyConfig, Web3PasskeyError, arrayBufferToBase64Url, assertEthereumAddress, assertMnemonic, assertUsername, authenticateWithPasskey, base64ToArrayBuffer, base64UrlDecode, base64UrlToArrayBuffer, canControlStealthAddress, checkStealthAddress, clearCache, computeStealthPrivateKey, createSiweMessage, createWalletFromMnemonic, createWeb3Passkey, createWeb3Passkey as default, deriveAddressFromP256PublicKey, deriveIndexFromOriginModeAndTag, deriveMLKemKeypair, deriveStealthKeys, deriveWalletFromMnemonic, detectWalletProvider, encodeEIP7702AuthorizationMessage, extractRS, generateBIP39Wallet, generateSiweNonce, generateStealthAddress, getAllChains, getAllTopics, getChainById, getCurrentBuildHash, getCurrentOrigin, getDefaultProvider, getEndpoints, getExplainer, getOriginSpecificAddress, getPackageVersion, getW3pkBuildHash, hashEIP7702AuthorizationMessage, inspect, inspectNow, isStrongPassword, mlkemDecrypt, mlkemDecryptWithKey, mlkemEncrypt, mlkemEncryptWithKey, normalizeOrigin, parseSiweMessage, promptPasskeySelection, requestExternalWalletAuthorization, safeAtob, safeBtoa, searchExplainers, supportsEIP7702Authorization, validateEthereumAddress, validateMnemonic, validateSiweMessage, validateUsername, verifyBuildHash, verifyEIP7702Authorization, verifySiweSignature };
+export { ApiError, AuthenticationError, type BackupMethod, type BackupStatus, type BrowserInspectOptions, type BrowserInspectResult, CryptoError, DEFAULT_MODE, DEFAULT_TAG, type DeviceInfo, type EIP1193Provider, type EIP7702Authorization, type EncryptedBackupInfo, type EncryptedPayload, type Guardian, type GuardianInvite, type MLKemKeypair, type PasskeySelectionResult, type PrfSecret, PrfUnsupportedError, type QRBackupOptions, type RecoveryProgress, type RecoveryScenario, type RecoveryShare, RecoverySimulator, RegistrationError, type SecurityScore, type SignAuthorizationParams, type SimulationResult, type SiweMessage, type SocialRecoveryConfig, SocialRecoveryManager, type StealthAddressConfig, StealthAddressModule, type StealthAddressResult, type StealthKeys, StorageError, SyncBootstrapError, type SyncBootstrapReason, type SyncCapabilities, SyncRequiredError, type SyncStatus, type SyncVault, type UserInfo, WalletError, type WalletInfo, WalletMissingError, Web3Passkey, type Web3PasskeyConfig, Web3PasskeyError, arrayBufferToBase64Url, assertEthereumAddress, assertMnemonic, assertUsername, authenticateWithPasskey, base64ToArrayBuffer, base64UrlDecode, base64UrlToArrayBuffer, canControlStealthAddress, checkStealthAddress, clearCache, computeStealthPrivateKey, createSiweMessage, createWalletFromMnemonic, createWeb3Passkey, createWeb3Passkey as default, deriveAddressFromP256PublicKey, deriveIndexFromOriginModeAndTag, deriveMLKemKeypair, deriveStealthKeys, deriveWalletFromMnemonic, detectWalletProvider, encodeEIP7702AuthorizationMessage, extractRS, generateBIP39Wallet, generateSiweNonce, generateStealthAddress, getAllChains, getAllTopics, getChainById, getCurrentBuildHash, getCurrentOrigin, getDefaultProvider, getEndpoints, getExplainer, getOriginSpecificAddress, getPackageVersion, getW3pkBuildHash, hashEIP7702AuthorizationMessage, inspect, inspectNow, isStrongPassword, mlkemDecrypt, mlkemDecryptWithKey, mlkemEncrypt, mlkemEncryptWithKey, normalizeOrigin, parseSiweMessage, promptPasskeySelection, requestExternalWalletAuthorization, safeAtob, safeBtoa, searchExplainers, supportsEIP7702Authorization, validateEthereumAddress, validateMnemonic, validateSiweMessage, validateUsername, verifyBuildHash, verifyEIP7702Authorization, verifySiweSignature };