@moon-x/core 0.2.0 → 0.4.0

package/README.md

@@ -18,7 +18,7 @@ This package owns everything that's identical between web and mobile:
 - **Headless SDK factories** (`@moon-x/core/sdk`) — platform-agnostic implementations of `signMessage`, `signTransaction`, `sendTransaction`, etc. that take a `Transport` + `PasskeyAssertor` + `KvStorage` via DI. Web and RN both wire their platform impls into these factories.
 - **Web platform impls** (`@moon-x/core/web`) — `createIframeTransport`, `createWebAuthnPasskey`, `createLocalStorageKv`. React-native has its own equivalents inside `@moon-x/react-native-sdk/platform/*`.
 - **Shared React hooks** (`@moon-x/core/react`) — hooks that run identically on web + RN (`useUser`, `useWallets`, `useLogout`, `useLoginWithEmail`, `usePasskeyStatus`, `useAddPasskey`, `useRemovePasskey`, `useCreateWallet`, `useImportKey`, plus per-chain hooks under `@moon-x/core/react/ethereum` and `@moon-x/core/react/solana`). The platform SDKs re-export these directly so consumers never import from core.
-- **Pure utilities** (`@moon-x/core/lib`) — EVM chain/gas helpers (`getEvmGasPrice`, `estimateEvmGas`, `getEvmNonce`, `chains`), `prepareEvmSignTransaction` / `prepareEvmSendTransaction` (chain + RPC + nonce/gas/fee auto-fill), SIWE/SIWS message builders, passkey codec + cache (safe-by-default TTL=0; integrator opts in via `setAssertCacheTtlMs`) + AAGUID registry, Solana transaction log parser, etc.
+- **Pure utilities** (`@moon-x/core/lib`) — EVM chain/gas helpers (`getEvmGasPrice`, `estimateEvmGas`, `getEvmNonce`, `chains`), `prepareEvmSignTransaction` / `prepareEvmSendTransaction` (chain + RPC + nonce/gas/fee auto-fill), SIWE/SIWS message builders, passkey codec + `generatePasskeyUserId`, AAGUID registry, Solana transaction log parser, etc. (The parent-side passkey-assertion cache was removed in Phase 4 of the presence-token gating work — every sensitive op now mints scope-bound single-use tokens via `getInternalPresenceTokens`.)
 
 ## Subpath exports
 
@@ -36,4 +36,4 @@ This package owns everything that's identical between web and mobile:
 
 ## License
 
-MIT.
+UNLICENSED. All rights reserved.

package/dist/{chunk-CDT4MC7S.mjs → chunk-6LTEG7VN.mjs}

@@ -100,39 +100,6 @@ var toB64url = (bytes) => {
 };
 
 // src/lib/passkey/passkey-cache.ts
-var cacheTtlMs = 0;
-var cache = null;
-var setAssertCacheTtlMs = (ms) => {
-  cacheTtlMs = Math.max(0, Math.floor(ms));
-  if (cacheTtlMs === 0) {
-    cache = null;
-  }
-};
-var getAssertCacheTtlMs = () => cacheTtlMs;
-var clearParentAssertCache = () => {
-  cache = null;
-};
-var readParentAssertCache = () => {
-  if (cacheTtlMs <= 0) return null;
-  if (!cache) return null;
-  if (Date.now() - cache.ts >= cacheTtlMs) return null;
-  return {
-    userHandleB64url: cache.userHandleB64url,
-    credentialIdB64url: cache.credentialIdB64url
-  };
-};
-var writeParentAssertCache = (entry) => {
-  if (cacheTtlMs <= 0) return;
-  cache = { ...entry, ts: Date.now() };
-};
-var withClearOnFailure = async (fn) => {
-  try {
-    return await fn();
-  } catch (error) {
-    clearParentAssertCache();
-    throw error;
-  }
-};
 var generatePasskeyUserId = () => {
   const bytes = crypto.getRandomValues(new Uint8Array(32));
   return { userIdB64url: toB64url(bytes), userIdBytes: bytes };
@@ -1492,12 +1459,6 @@ export {
   verifyIdToken,
   fromB64url,
   toB64url,
-  setAssertCacheTtlMs,
-  getAssertCacheTtlMs,
-  clearParentAssertCache,
-  readParentAssertCache,
-  writeParentAssertCache,
-  withClearOnFailure,
   generatePasskeyUserId,
   formatPasskeyLabel,
   resolvePasskeyMetadata,

package/dist/{chunk-SOKLPX7V.mjs → chunk-VVL65GIB.mjs}

@@ -64,6 +64,16 @@ var PostMessageMethod = {
   // begin/verify HTTP calls (where the session JWT lives).
   PASSKEY_REGISTER_BEGIN: "PASSKEY_REGISTER_BEGIN",
   PASSKEY_REGISTER_VERIFY: "PASSKEY_REGISTER_VERIFY",
+  // Passkey-asserted step-up ("presence token"). Same split as register:
+  // parent owns the WebAuthn API call; iframe owns the begin/verify
+  // HTTP halves (where the session JWT lives). Mints a short-lived
+  // (`tt:"presence"`) JWT app backends can verify over JWKS.
+  // CRITICAL: parent MUST strip response.userHandle from the assertion
+  // before posting PASSKEY_PRESENCE_VERIFY. The userHandle carries DEK
+  // material in MoonX's overloaded model and has no business reaching
+  // the server. The server also defensively never reads it.
+  PASSKEY_PRESENCE_BEGIN: "PASSKEY_PRESENCE_BEGIN",
+  PASSKEY_PRESENCE_VERIFY: "PASSKEY_PRESENCE_VERIFY",
   GET_PASSKEY_STATUS: "GET_PASSKEY_STATUS",
   // Parent-side passkey assertion plumbing. Parent calls GET_DEK_INFO
   // to learn which credential IDs to put in allowCredentials and to

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-export { AccessTokenClaims, AppConfigRequest, AppConfigResponse, AttachOAuthTokenRequest, AttachOAuthTokenResponse, AuthAppearance, AuthFlow, AuthFlowComponent, AuthLoginMethod, AuthProviderConfig, BaseGetBalanceParams, BaseGetBalanceResult, BaseGetTokenAccountsParams, BaseSendTransactionParams, BaseSendTransactionResult, BaseSignMessageParams, BaseSignMessageResult, BaseSignTransactionParams, BaseSignTransactionResult, BaseTokenClaims, BaseUIOptions, BaseWalletHooks, ContractUIOptions, CreateWalletResponse, DefaultFundingMethod, DeleteSessionRequest, DeleteSessionResponse, DetachOAuthTokenRequest, DeviceFingerprint, DisplayMode, EmailOtpConfig, EmailOtpFlowState, EthereumFundingConfig, EthereumGetBalanceParams, EthereumGetBalanceResult, EthereumGetTokenAccountsByOwnerParams, EthereumGetTokenAccountsByOwnerResult, EthereumSendTransactionParams, EthereumSendTransactionRequest, EthereumSendTransactionResult, EthereumSign7702AuthorizationParams, EthereumSign7702AuthorizationResult, EthereumSignHashParams, EthereumSignHashResult, EthereumSignMessageParams, EthereumSignMessageResult, EthereumSignTransactionParams, EthereumSignTransactionResult, EthereumSignTypedDataParams, EthereumSignTypedDataResult, EthereumSwitchChainParams, ExportKeyConfig, Factor, FlexibleTheme, FundWalletConfig, FundingEvents, FundingMethod, FundingUIConfig, GetCurrentSessionRequest, GetCurrentSessionResponse, Hex, IdentityTokenClaims, IdpProvider, IsAuthenticatedRequest, IsAuthenticatedResponse, LoginTokenBundle, LogoutRequest, LogoutResponse, MessageTypeProperty, MessageTypes, MoonKeyThemeConfig, MoonPaySignRequest, MoonPaySignResponse, MpcKeyShares, Network, OAuthRequest, OAuthResponse, OnrampFundingSettings, PasskeyEnrollConfig, PasskeySettings, PreferredCardProvider, PrefillConfig, PublicEthereumWallet, PublicSessionData, PublicWallet, RefreshSessionRequest, RefreshSessionResponse, RetrieveWalletKeyRequest, RetrieveWalletKeyResponse, SdkSettings, SendEmailOtpRequest, SendEmailOtpResponse, SendTransactionConfig, SendTransactionRequest, SessionData, SharesDeviceRequest, SharesDeviceResponse, Sign7702AuthorizationError, Sign7702AuthorizationParams, Sign7702AuthorizationResponse, Sign7702AuthorizationResult, SignMessageConfig, SignTransactionConfig, SignTypedDataError, SignTypedDataParams, SignTypedDataResponse, SignTypedDataResult, SmsSettings, SolanaChain, SolanaFundingConfig, SolanaGetBalanceParams, SolanaGetBalanceResult, SolanaGetTokenAccountsByOwnerParams, SolanaGetTokenAccountsByOwnerResult, SolanaSendTransactionParams, SolanaSendTransactionResult, SolanaSignMessageParams, SolanaSignMessageResult, SolanaSignTransactionParams, SolanaSignTransactionResult, TransactionCommitment, TransactionEncoding, TransactionUIOptions, TypedMessage, UseFundWalletInterface, UsersMePublicResponse, UsersMeRequest, UsersMeResponse, VerifiedSession, VerifyEmailOtpRequest, VerifyEmailOtpResponse, VerifyEmailOtpUser, VerifyOAuthTokenRequest, VerifyOAuthTokenResponse, VerifySiweWalletRegistrationRequest, WALLET_ERROR_CODES, Wallet, WalletChain, WalletChainType, WalletConnectConfig, WalletCreationError, WalletError, WalletErrorCode, WalletKeyRequest, WalletListEntry, WalletRegistrationNonceRequest, WalletRegistrationNonceResponse, WalletType, WalletVerifyRequest } from './types/index.mjs';
+export { AccessTokenClaims, AppConfigRequest, AppConfigResponse, AttachOAuthTokenRequest, AttachOAuthTokenResponse, AuthAppearance, AuthFlow, AuthFlowComponent, AuthLoginMethod, AuthProviderConfig, BaseGetBalanceParams, BaseGetBalanceResult, BaseGetTokenAccountsParams, BaseSendTransactionParams, BaseSendTransactionResult, BaseSignMessageParams, BaseSignMessageResult, BaseSignTransactionParams, BaseSignTransactionResult, BaseTokenClaims, BaseUIOptions, BaseWalletHooks, ContractUIOptions, CreateWalletResponse, DefaultFundingMethod, DeleteSessionRequest, DeleteSessionResponse, DetachOAuthTokenRequest, DeviceFingerprint, DisplayMode, EmailOtpConfig, EmailOtpFlowState, EthereumFundingConfig, EthereumGetBalanceParams, EthereumGetBalanceResult, EthereumGetTokenAccountsByOwnerParams, EthereumGetTokenAccountsByOwnerResult, EthereumSendTransactionParams, EthereumSendTransactionRequest, EthereumSendTransactionResult, EthereumSign7702AuthorizationParams, EthereumSign7702AuthorizationResult, EthereumSignHashParams, EthereumSignHashResult, EthereumSignMessageParams, EthereumSignMessageResult, EthereumSignTransactionParams, EthereumSignTransactionResult, EthereumSignTypedDataParams, EthereumSignTypedDataResult, EthereumSwitchChainParams, ExportKeyConfig, Factor, FlexibleTheme, FundWalletConfig, FundingEvents, FundingMethod, FundingUIConfig, GetCurrentSessionRequest, GetCurrentSessionResponse, Hex, IdentityTokenClaims, IdpProvider, IsAuthenticatedRequest, IsAuthenticatedResponse, LoginTokenBundle, LogoutRequest, LogoutResponse, MessageTypeProperty, MessageTypes, MoonKeyThemeConfig, MoonPaySignRequest, MoonPaySignResponse, MpcKeyShares, Network, OAuthRequest, OAuthResponse, OnrampFundingSettings, PasskeyEnrollConfig, PasskeySettings, PreferredCardProvider, PrefillConfig, PresenceTokenClaims, PublicEthereumWallet, PublicSessionData, PublicWallet, RefreshSessionRequest, RefreshSessionResponse, RetrieveWalletKeyRequest, RetrieveWalletKeyResponse, SdkSettings, SendEmailOtpRequest, SendEmailOtpResponse, SendTransactionConfig, SendTransactionRequest, SessionData, SharesDeviceRequest, SharesDeviceResponse, Sign7702AuthorizationError, Sign7702AuthorizationParams, Sign7702AuthorizationResponse, Sign7702AuthorizationResult, SignMessageConfig, SignTransactionConfig, SignTypedDataError, SignTypedDataParams, SignTypedDataResponse, SignTypedDataResult, SmsSettings, SolanaChain, SolanaFundingConfig, SolanaGetBalanceParams, SolanaGetBalanceResult, SolanaGetTokenAccountsByOwnerParams, SolanaGetTokenAccountsByOwnerResult, SolanaSendTransactionParams, SolanaSendTransactionResult, SolanaSignMessageParams, SolanaSignMessageResult, SolanaSignTransactionParams, SolanaSignTransactionResult, TransactionCommitment, TransactionEncoding, TransactionUIOptions, TypedMessage, UseFundWalletInterface, UsersMePublicResponse, UsersMeRequest, UsersMeResponse, VerifiedSession, VerifyEmailOtpRequest, VerifyEmailOtpResponse, VerifyEmailOtpUser, VerifyOAuthTokenRequest, VerifyOAuthTokenResponse, VerifySiweWalletRegistrationRequest, WALLET_ERROR_CODES, Wallet, WalletChain, WalletChainType, WalletConnectConfig, WalletCreationError, WalletError, WalletErrorCode, WalletKeyRequest, WalletListEntry, WalletRegistrationNonceRequest, WalletRegistrationNonceResponse, WalletType, WalletVerifyRequest } from './types/index.mjs';
 export { getIframeOrigin, getIframeUrl, getMoonKeyApiUrl } from './utils/index.mjs';
-export { F as FORWARDED_ERROR_FIELDS, P as PostMessageClient, a as PostMessageMethod, b as PostMessageServer, c as PostMessageType } from './post-message-C_99BCBh.mjs';
+export { F as FORWARDED_ERROR_FIELDS, P as PostMessageClient, a as PostMessageMethod, b as PostMessageServer, c as PostMessageType } from './post-message-CmgAfkOS.mjs';
 export { B as BlockExplorer, C as Chain, a as ChainLikeWithId, E as EthereumChainConfig, N as NativeCurrency, R as RpcConfig, b as RpcUrls } from './chain-C9dvKXUY.mjs';

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export { AccessTokenClaims, AppConfigRequest, AppConfigResponse, AttachOAuthTokenRequest, AttachOAuthTokenResponse, AuthAppearance, AuthFlow, AuthFlowComponent, AuthLoginMethod, AuthProviderConfig, BaseGetBalanceParams, BaseGetBalanceResult, BaseGetTokenAccountsParams, BaseSendTransactionParams, BaseSendTransactionResult, BaseSignMessageParams, BaseSignMessageResult, BaseSignTransactionParams, BaseSignTransactionResult, BaseTokenClaims, BaseUIOptions, BaseWalletHooks, ContractUIOptions, CreateWalletResponse, DefaultFundingMethod, DeleteSessionRequest, DeleteSessionResponse, DetachOAuthTokenRequest, DeviceFingerprint, DisplayMode, EmailOtpConfig, EmailOtpFlowState, EthereumFundingConfig, EthereumGetBalanceParams, EthereumGetBalanceResult, EthereumGetTokenAccountsByOwnerParams, EthereumGetTokenAccountsByOwnerResult, EthereumSendTransactionParams, EthereumSendTransactionRequest, EthereumSendTransactionResult, EthereumSign7702AuthorizationParams, EthereumSign7702AuthorizationResult, EthereumSignHashParams, EthereumSignHashResult, EthereumSignMessageParams, EthereumSignMessageResult, EthereumSignTransactionParams, EthereumSignTransactionResult, EthereumSignTypedDataParams, EthereumSignTypedDataResult, EthereumSwitchChainParams, ExportKeyConfig, Factor, FlexibleTheme, FundWalletConfig, FundingEvents, FundingMethod, FundingUIConfig, GetCurrentSessionRequest, GetCurrentSessionResponse, Hex, IdentityTokenClaims, IdpProvider, IsAuthenticatedRequest, IsAuthenticatedResponse, LoginTokenBundle, LogoutRequest, LogoutResponse, MessageTypeProperty, MessageTypes, MoonKeyThemeConfig, MoonPaySignRequest, MoonPaySignResponse, MpcKeyShares, Network, OAuthRequest, OAuthResponse, OnrampFundingSettings, PasskeyEnrollConfig, PasskeySettings, PreferredCardProvider, PrefillConfig, PublicEthereumWallet, PublicSessionData, PublicWallet, RefreshSessionRequest, RefreshSessionResponse, RetrieveWalletKeyRequest, RetrieveWalletKeyResponse, SdkSettings, SendEmailOtpRequest, SendEmailOtpResponse, SendTransactionConfig, SendTransactionRequest, SessionData, SharesDeviceRequest, SharesDeviceResponse, Sign7702AuthorizationError, Sign7702AuthorizationParams, Sign7702AuthorizationResponse, Sign7702AuthorizationResult, SignMessageConfig, SignTransactionConfig, SignTypedDataError, SignTypedDataParams, SignTypedDataResponse, SignTypedDataResult, SmsSettings, SolanaChain, SolanaFundingConfig, SolanaGetBalanceParams, SolanaGetBalanceResult, SolanaGetTokenAccountsByOwnerParams, SolanaGetTokenAccountsByOwnerResult, SolanaSendTransactionParams, SolanaSendTransactionResult, SolanaSignMessageParams, SolanaSignMessageResult, SolanaSignTransactionParams, SolanaSignTransactionResult, TransactionCommitment, TransactionEncoding, TransactionUIOptions, TypedMessage, UseFundWalletInterface, UsersMePublicResponse, UsersMeRequest, UsersMeResponse, VerifiedSession, VerifyEmailOtpRequest, VerifyEmailOtpResponse, VerifyEmailOtpUser, VerifyOAuthTokenRequest, VerifyOAuthTokenResponse, VerifySiweWalletRegistrationRequest, WALLET_ERROR_CODES, Wallet, WalletChain, WalletChainType, WalletConnectConfig, WalletCreationError, WalletError, WalletErrorCode, WalletKeyRequest, WalletListEntry, WalletRegistrationNonceRequest, WalletRegistrationNonceResponse, WalletType, WalletVerifyRequest } from './types/index.js';
+export { AccessTokenClaims, AppConfigRequest, AppConfigResponse, AttachOAuthTokenRequest, AttachOAuthTokenResponse, AuthAppearance, AuthFlow, AuthFlowComponent, AuthLoginMethod, AuthProviderConfig, BaseGetBalanceParams, BaseGetBalanceResult, BaseGetTokenAccountsParams, BaseSendTransactionParams, BaseSendTransactionResult, BaseSignMessageParams, BaseSignMessageResult, BaseSignTransactionParams, BaseSignTransactionResult, BaseTokenClaims, BaseUIOptions, BaseWalletHooks, ContractUIOptions, CreateWalletResponse, DefaultFundingMethod, DeleteSessionRequest, DeleteSessionResponse, DetachOAuthTokenRequest, DeviceFingerprint, DisplayMode, EmailOtpConfig, EmailOtpFlowState, EthereumFundingConfig, EthereumGetBalanceParams, EthereumGetBalanceResult, EthereumGetTokenAccountsByOwnerParams, EthereumGetTokenAccountsByOwnerResult, EthereumSendTransactionParams, EthereumSendTransactionRequest, EthereumSendTransactionResult, EthereumSign7702AuthorizationParams, EthereumSign7702AuthorizationResult, EthereumSignHashParams, EthereumSignHashResult, EthereumSignMessageParams, EthereumSignMessageResult, EthereumSignTransactionParams, EthereumSignTransactionResult, EthereumSignTypedDataParams, EthereumSignTypedDataResult, EthereumSwitchChainParams, ExportKeyConfig, Factor, FlexibleTheme, FundWalletConfig, FundingEvents, FundingMethod, FundingUIConfig, GetCurrentSessionRequest, GetCurrentSessionResponse, Hex, IdentityTokenClaims, IdpProvider, IsAuthenticatedRequest, IsAuthenticatedResponse, LoginTokenBundle, LogoutRequest, LogoutResponse, MessageTypeProperty, MessageTypes, MoonKeyThemeConfig, MoonPaySignRequest, MoonPaySignResponse, MpcKeyShares, Network, OAuthRequest, OAuthResponse, OnrampFundingSettings, PasskeyEnrollConfig, PasskeySettings, PreferredCardProvider, PrefillConfig, PresenceTokenClaims, PublicEthereumWallet, PublicSessionData, PublicWallet, RefreshSessionRequest, RefreshSessionResponse, RetrieveWalletKeyRequest, RetrieveWalletKeyResponse, SdkSettings, SendEmailOtpRequest, SendEmailOtpResponse, SendTransactionConfig, SendTransactionRequest, SessionData, SharesDeviceRequest, SharesDeviceResponse, Sign7702AuthorizationError, Sign7702AuthorizationParams, Sign7702AuthorizationResponse, Sign7702AuthorizationResult, SignMessageConfig, SignTransactionConfig, SignTypedDataError, SignTypedDataParams, SignTypedDataResponse, SignTypedDataResult, SmsSettings, SolanaChain, SolanaFundingConfig, SolanaGetBalanceParams, SolanaGetBalanceResult, SolanaGetTokenAccountsByOwnerParams, SolanaGetTokenAccountsByOwnerResult, SolanaSendTransactionParams, SolanaSendTransactionResult, SolanaSignMessageParams, SolanaSignMessageResult, SolanaSignTransactionParams, SolanaSignTransactionResult, TransactionCommitment, TransactionEncoding, TransactionUIOptions, TypedMessage, UseFundWalletInterface, UsersMePublicResponse, UsersMeRequest, UsersMeResponse, VerifiedSession, VerifyEmailOtpRequest, VerifyEmailOtpResponse, VerifyEmailOtpUser, VerifyOAuthTokenRequest, VerifyOAuthTokenResponse, VerifySiweWalletRegistrationRequest, WALLET_ERROR_CODES, Wallet, WalletChain, WalletChainType, WalletConnectConfig, WalletCreationError, WalletError, WalletErrorCode, WalletKeyRequest, WalletListEntry, WalletRegistrationNonceRequest, WalletRegistrationNonceResponse, WalletType, WalletVerifyRequest } from './types/index.js';
 export { getIframeOrigin, getIframeUrl, getMoonKeyApiUrl } from './utils/index.js';
-export { F as FORWARDED_ERROR_FIELDS, P as PostMessageClient, a as PostMessageMethod, b as PostMessageServer, c as PostMessageType } from './post-message-C_99BCBh.js';
+export { F as FORWARDED_ERROR_FIELDS, P as PostMessageClient, a as PostMessageMethod, b as PostMessageServer, c as PostMessageType } from './post-message-CmgAfkOS.js';
 export { B as BlockExplorer, C as Chain, a as ChainLikeWithId, E as EthereumChainConfig, N as NativeCurrency, R as RpcConfig, b as RpcUrls } from './chain-C9dvKXUY.js';

package/dist/index.js

@@ -190,6 +190,16 @@ var PostMessageMethod = {
   // begin/verify HTTP calls (where the session JWT lives).
   PASSKEY_REGISTER_BEGIN: "PASSKEY_REGISTER_BEGIN",
   PASSKEY_REGISTER_VERIFY: "PASSKEY_REGISTER_VERIFY",
+  // Passkey-asserted step-up ("presence token"). Same split as register:
+  // parent owns the WebAuthn API call; iframe owns the begin/verify
+  // HTTP halves (where the session JWT lives). Mints a short-lived
+  // (`tt:"presence"`) JWT app backends can verify over JWKS.
+  // CRITICAL: parent MUST strip response.userHandle from the assertion
+  // before posting PASSKEY_PRESENCE_VERIFY. The userHandle carries DEK
+  // material in MoonX's overloaded model and has no business reaching
+  // the server. The server also defensively never reads it.
+  PASSKEY_PRESENCE_BEGIN: "PASSKEY_PRESENCE_BEGIN",
+  PASSKEY_PRESENCE_VERIFY: "PASSKEY_PRESENCE_VERIFY",
   GET_PASSKEY_STATUS: "GET_PASSKEY_STATUS",
   // Parent-side passkey assertion plumbing. Parent calls GET_DEK_INFO
   // to learn which credential IDs to put in allowCredentials and to

package/dist/index.mjs

@@ -14,7 +14,7 @@ import {
   PostMessageMethod,
   PostMessageServer,
   PostMessageType
-} from "./chunk-SOKLPX7V.mjs";
+} from "./chunk-VVL65GIB.mjs";
 import {
   getMoonKeyApiUrl
 } from "./chunk-GQKIA37O.mjs";

package/dist/interfaces-cdKh3sLA.d.mts

@@ -0,0 +1,192 @@
+import { c as PostMessageType, a as PostMessageMethod } from './post-message-CmgAfkOS.mjs';
+
+/**
+ * Transport — the bidirectional postMessage channel between the parent
+ * (web SDK or RN SDK) and the iframe-app. Web wraps
+ * `createPostMessageClient(iframeRef.current.contentWindow, ...)`; RN
+ * wraps a `WebViewBridge` over react-native-webview.
+ *
+ * `send` resolves with the iframe handler's raw return value and rejects
+ * with the handler's thrown error (canonical envelope, no
+ * {success, data} unwrap at the call site).
+ */
+interface Transport {
+    send<P, R>(type: PostMessageType, method: PostMessageMethod, payload: P): Promise<R>;
+    /**
+     * Register a handler for inbound messages from the iframe-app. Only
+     * needed by the parent-side `*WithUI` flow path, where the modal
+     * postMessages a result back that the SDK's pending Promise needs to
+     * resolve. Returns an unregister fn.
+     */
+    register?<P, R>(type: PostMessageType, method: PostMessageMethod, handler: (payload: P) => Promise<R> | R): () => void;
+    /**
+     * Whether the underlying iframe / WebView is loaded and ready to
+     * receive messages. SDK methods short-circuit with "SDK not ready"
+     * before calling `send` if this returns false.
+     */
+    isReady(): boolean;
+}
+/**
+ * PasskeyAssertor — runs the WebAuthn assertion ceremony in the *parent*
+ * (where user activation lives — cross-origin iframes/WebViews can't
+ * reliably get their own click handler).
+ *
+ * Two methods, two distinct flow shapes:
+ *
+ *  - `assert` is the DEK-unwrap path: empty allowCredentials, harvests
+ *    userHandle (= DEK wrap key in MoonX's overloaded model), consumed
+ *    locally by the iframe-app. Never crosses the server boundary.
+ *
+ *  - `assertForServer` is the server-roundtrip path (presence step-up,
+ *    future passkey sign-in): server issues options, browser asserts,
+ *    server verifies the signature. userHandle is stripped on the
+ *    platform boundary (DEK hygiene) — the strip happens INSIDE the
+ *    assertor impl, not in the orchestrator, so no caller can bypass
+ *    it.
+ *
+ * Registration is handled separately via `@simplewebauthn/browser`'s
+ * `startRegistration` on web / `passkeyCreate` from
+ * `react-native-passkeys` on RN; this interface is assertion-only.
+ */
+interface PasskeyAssertor {
+    /**
+     * Run a WebAuthn assertion (`navigator.credentials.get` on web,
+     * `passkeyGet` from react-native-passkeys on RN). Returns the
+     * platform-decoded base64url forms of the credential id and userHandle.
+     */
+    assert(opts: {
+        rpId: string;
+        challenge: string;
+        /**
+         * The wire `allow_credential_ids_b64url` list from GET_DEK_INFO,
+         * passed through for platforms that want to use it. Note both
+         * platforms today pass an empty array to the underlying API; this
+         * field is informational only (e.g. for telemetry or for a future
+         * platform that prefers non-discoverable login).
+         */
+        allowCredentials: string[];
+    }): Promise<{
+        rawIdB64url: string;
+        userHandleB64url: string;
+    }>;
+    /**
+     * Run a WebAuthn assertion for a SERVER-VERIFIED flow (presence
+     * step-up, future passkey sign-in). Takes a full
+     * `PublicKeyCredentialRequestOptionsJSON` (the server-issued
+     * `optionsJSON`) and returns the standard
+     * `AuthenticationResponseJSON` with `response.userHandle`
+     * **stripped** — DEK hygiene is enforced inside the impl so the
+     * orchestrator (and any future caller) cannot forget it.
+     *
+     * The returned object goes straight onto the wire to /presence/verify
+     * (or the future /login/verify). Each platform-specific impl is
+     * responsible for: (a) running the underlying ceremony, (b)
+     * shaping the result into AuthenticationResponseJSON, and (c) the
+     * userHandle strip.
+     */
+    assertForServer(opts: {
+        optionsJSON: WebAuthnRequestOptions;
+    }): Promise<WebAuthnAssertionResponse>;
+    /**
+     * Internal-use variant of assertForServer. Runs the same WebAuthn
+     * ceremony and returns the same sanitized assertion (userHandle
+     * stripped on the platform boundary), but ALSO surfaces the
+     * captured userHandle + credential id separately for the SDK
+     * orchestrator's downstream postMessage payload — the iframe needs
+     * the userHandle bytes to do AES-GCM unwrap of the DEK after the
+     * presence ceremony mints the scoped tokens.
+     *
+     * DEK hygiene boundary: the sanitized `response` field still has
+     * `response.userHandle === undefined`. The separate
+     * `userHandleB64url` field stays inside the orchestrator and is
+     * postMessaged to the iframe — never sent over the network to the
+     * presence-verify server call. The strip is enforced by the impl;
+     * the separate surfacing is opt-in via this method.
+     */
+    assertForInternalPresence(opts: {
+        optionsJSON: WebAuthnRequestOptions;
+    }): Promise<{
+        response: WebAuthnAssertionResponse;
+        userHandleB64url: string;
+        credentialIdB64url: string;
+    }>;
+}
+/**
+ * Subset of `PublicKeyCredentialRequestOptionsJSON` we forward to the
+ * platform impl. Kept loose-typed so a server adding fields doesn't
+ * require an interface change here.
+ */
+interface WebAuthnRequestOptions {
+    challenge: string;
+    rpId?: string;
+    allowCredentials?: Array<{
+        id: string;
+        type?: string;
+        transports?: string[];
+    }>;
+    userVerification?: string;
+    timeout?: number;
+    extensions?: Record<string, unknown>;
+}
+/**
+ * Standard `AuthenticationResponseJSON` shape, with `userHandle`
+ * deliberately optional because the assertForServer contract is that
+ * impls strip it before returning. The field stays in the type so a
+ * server-side decoder can still parse it (= undefined) without a
+ * union mismatch.
+ */
+interface WebAuthnAssertionResponse {
+    id: string;
+    rawId: string;
+    type: string;
+    response: {
+        clientDataJSON: string;
+        authenticatorData: string;
+        signature: string;
+        userHandle?: undefined;
+    };
+    clientExtensionResults?: Record<string, unknown>;
+    authenticatorAttachment?: string;
+}
+/**
+ * KvStorage — async key/value storage for ID tokens + session metadata.
+ * Web wraps `localStorage` (sync, lifted to a resolved Promise); RN
+ * wraps `@react-native-async-storage/async-storage` (natively async).
+ *
+ * Always async at the interface to unify both platforms.
+ */
+interface KvStorage {
+    get(key: string): Promise<string | null>;
+    set(key: string, value: string): Promise<void>;
+    remove(key: string): Promise<void>;
+}
+/**
+ * OAuthOpener — start an OAuth authorize request and wait for the
+ * provider redirect to return with `code` + `state`. Web uses a
+ * full-page redirect or popup (completion picked up by
+ * `useOAuthCompletion` listening for postMessages); RN uses
+ * `expo-web-browser.openAuthSessionAsync` (single Promise resolves on
+ * deep-link callback).
+ */
+interface OAuthOpener {
+    open(opts: {
+        authorizeUrl: string;
+        redirectUrl: string;
+    }): Promise<{
+        code: string;
+        state: string;
+    }>;
+}
+/**
+ * The bundle of platform impls that the SDK factories accept. Provider
+ * components on each platform construct one of these once and pass it
+ * through to the factories.
+ */
+interface PlatformImpls {
+    transport: Transport;
+    passkey: PasskeyAssertor;
+    storage: KvStorage;
+    oauth: OAuthOpener;
+}
+
+export type { KvStorage as K, OAuthOpener as O, PasskeyAssertor as P, Transport as T, WebAuthnAssertionResponse as W, PlatformImpls as a, WebAuthnRequestOptions as b };

package/dist/interfaces-pNTEOKaK.d.ts

@@ -0,0 +1,192 @@
+import { c as PostMessageType, a as PostMessageMethod } from './post-message-CmgAfkOS.js';
+
+/**
+ * Transport — the bidirectional postMessage channel between the parent
+ * (web SDK or RN SDK) and the iframe-app. Web wraps
+ * `createPostMessageClient(iframeRef.current.contentWindow, ...)`; RN
+ * wraps a `WebViewBridge` over react-native-webview.
+ *
+ * `send` resolves with the iframe handler's raw return value and rejects
+ * with the handler's thrown error (canonical envelope, no
+ * {success, data} unwrap at the call site).
+ */
+interface Transport {
+    send<P, R>(type: PostMessageType, method: PostMessageMethod, payload: P): Promise<R>;
+    /**
+     * Register a handler for inbound messages from the iframe-app. Only
+     * needed by the parent-side `*WithUI` flow path, where the modal
+     * postMessages a result back that the SDK's pending Promise needs to
+     * resolve. Returns an unregister fn.
+     */
+    register?<P, R>(type: PostMessageType, method: PostMessageMethod, handler: (payload: P) => Promise<R> | R): () => void;
+    /**
+     * Whether the underlying iframe / WebView is loaded and ready to
+     * receive messages. SDK methods short-circuit with "SDK not ready"
+     * before calling `send` if this returns false.
+     */
+    isReady(): boolean;
+}
+/**
+ * PasskeyAssertor — runs the WebAuthn assertion ceremony in the *parent*
+ * (where user activation lives — cross-origin iframes/WebViews can't
+ * reliably get their own click handler).
+ *
+ * Two methods, two distinct flow shapes:
+ *
+ *  - `assert` is the DEK-unwrap path: empty allowCredentials, harvests
+ *    userHandle (= DEK wrap key in MoonX's overloaded model), consumed
+ *    locally by the iframe-app. Never crosses the server boundary.
+ *
+ *  - `assertForServer` is the server-roundtrip path (presence step-up,
+ *    future passkey sign-in): server issues options, browser asserts,
+ *    server verifies the signature. userHandle is stripped on the
+ *    platform boundary (DEK hygiene) — the strip happens INSIDE the
+ *    assertor impl, not in the orchestrator, so no caller can bypass
+ *    it.
+ *
+ * Registration is handled separately via `@simplewebauthn/browser`'s
+ * `startRegistration` on web / `passkeyCreate` from
+ * `react-native-passkeys` on RN; this interface is assertion-only.
+ */
+interface PasskeyAssertor {
+    /**
+     * Run a WebAuthn assertion (`navigator.credentials.get` on web,
+     * `passkeyGet` from react-native-passkeys on RN). Returns the
+     * platform-decoded base64url forms of the credential id and userHandle.
+     */
+    assert(opts: {
+        rpId: string;
+        challenge: string;
+        /**
+         * The wire `allow_credential_ids_b64url` list from GET_DEK_INFO,
+         * passed through for platforms that want to use it. Note both
+         * platforms today pass an empty array to the underlying API; this
+         * field is informational only (e.g. for telemetry or for a future
+         * platform that prefers non-discoverable login).
+         */
+        allowCredentials: string[];
+    }): Promise<{
+        rawIdB64url: string;
+        userHandleB64url: string;
+    }>;
+    /**
+     * Run a WebAuthn assertion for a SERVER-VERIFIED flow (presence
+     * step-up, future passkey sign-in). Takes a full
+     * `PublicKeyCredentialRequestOptionsJSON` (the server-issued
+     * `optionsJSON`) and returns the standard
+     * `AuthenticationResponseJSON` with `response.userHandle`
+     * **stripped** — DEK hygiene is enforced inside the impl so the
+     * orchestrator (and any future caller) cannot forget it.
+     *
+     * The returned object goes straight onto the wire to /presence/verify
+     * (or the future /login/verify). Each platform-specific impl is
+     * responsible for: (a) running the underlying ceremony, (b)
+     * shaping the result into AuthenticationResponseJSON, and (c) the
+     * userHandle strip.
+     */
+    assertForServer(opts: {
+        optionsJSON: WebAuthnRequestOptions;
+    }): Promise<WebAuthnAssertionResponse>;
+    /**
+     * Internal-use variant of assertForServer. Runs the same WebAuthn
+     * ceremony and returns the same sanitized assertion (userHandle
+     * stripped on the platform boundary), but ALSO surfaces the
+     * captured userHandle + credential id separately for the SDK
+     * orchestrator's downstream postMessage payload — the iframe needs
+     * the userHandle bytes to do AES-GCM unwrap of the DEK after the
+     * presence ceremony mints the scoped tokens.
+     *
+     * DEK hygiene boundary: the sanitized `response` field still has
+     * `response.userHandle === undefined`. The separate
+     * `userHandleB64url` field stays inside the orchestrator and is
+     * postMessaged to the iframe — never sent over the network to the
+     * presence-verify server call. The strip is enforced by the impl;
+     * the separate surfacing is opt-in via this method.
+     */
+    assertForInternalPresence(opts: {
+        optionsJSON: WebAuthnRequestOptions;
+    }): Promise<{
+        response: WebAuthnAssertionResponse;
+        userHandleB64url: string;
+        credentialIdB64url: string;
+    }>;
+}
+/**
+ * Subset of `PublicKeyCredentialRequestOptionsJSON` we forward to the
+ * platform impl. Kept loose-typed so a server adding fields doesn't
+ * require an interface change here.
+ */
+interface WebAuthnRequestOptions {
+    challenge: string;
+    rpId?: string;
+    allowCredentials?: Array<{
+        id: string;
+        type?: string;
+        transports?: string[];
+    }>;
+    userVerification?: string;
+    timeout?: number;
+    extensions?: Record<string, unknown>;
+}
+/**
+ * Standard `AuthenticationResponseJSON` shape, with `userHandle`
+ * deliberately optional because the assertForServer contract is that
+ * impls strip it before returning. The field stays in the type so a
+ * server-side decoder can still parse it (= undefined) without a
+ * union mismatch.
+ */
+interface WebAuthnAssertionResponse {
+    id: string;
+    rawId: string;
+    type: string;
+    response: {
+        clientDataJSON: string;
+        authenticatorData: string;
+        signature: string;
+        userHandle?: undefined;
+    };
+    clientExtensionResults?: Record<string, unknown>;
+    authenticatorAttachment?: string;
+}
+/**
+ * KvStorage — async key/value storage for ID tokens + session metadata.
+ * Web wraps `localStorage` (sync, lifted to a resolved Promise); RN
+ * wraps `@react-native-async-storage/async-storage` (natively async).
+ *
+ * Always async at the interface to unify both platforms.
+ */
+interface KvStorage {
+    get(key: string): Promise<string | null>;
+    set(key: string, value: string): Promise<void>;
+    remove(key: string): Promise<void>;
+}
+/**
+ * OAuthOpener — start an OAuth authorize request and wait for the
+ * provider redirect to return with `code` + `state`. Web uses a
+ * full-page redirect or popup (completion picked up by
+ * `useOAuthCompletion` listening for postMessages); RN uses
+ * `expo-web-browser.openAuthSessionAsync` (single Promise resolves on
+ * deep-link callback).
+ */
+interface OAuthOpener {
+    open(opts: {
+        authorizeUrl: string;
+        redirectUrl: string;
+    }): Promise<{
+        code: string;
+        state: string;
+    }>;
+}
+/**
+ * The bundle of platform impls that the SDK factories accept. Provider
+ * components on each platform construct one of these once and pass it
+ * through to the factories.
+ */
+interface PlatformImpls {
+    transport: Transport;
+    passkey: PasskeyAssertor;
+    storage: KvStorage;
+    oauth: OAuthOpener;
+}
+
+export type { KvStorage as K, OAuthOpener as O, PasskeyAssertor as P, Transport as T, WebAuthnAssertionResponse as W, PlatformImpls as a, WebAuthnRequestOptions as b };

package/dist/lib/index.d.mts

@@ -1,4 +1,4 @@
-export { C as CachedAssertion, c as clearParentAssertCache, g as generatePasskeyUserId, a as getAssertCacheTtlMs, r as readParentAssertCache, s as setAssertCacheTtlMs, w as withClearOnFailure, b as writeParentAssertCache } from '../passkey-cache-B9PT3AWX.mjs';
+export { C as CachedAssertion, g as generatePasskeyUserId } from '../passkey-cache-WnDFQ-v4.mjs';
 export { a as PasskeyFormFactor, P as PasskeyMetadata, b as PasskeyMetadataInput, f as formatPasskeyLabel, r as resolvePasskeyMetadata } from '../passkey-metadata-QqFF2SWQ.mjs';
 import { C as Chain } from '../chain-C9dvKXUY.mjs';
 import { SiweMessage } from 'siwe';

package/dist/lib/index.d.ts

@@ -1,4 +1,4 @@
-export { C as CachedAssertion, c as clearParentAssertCache, g as generatePasskeyUserId, a as getAssertCacheTtlMs, r as readParentAssertCache, s as setAssertCacheTtlMs, w as withClearOnFailure, b as writeParentAssertCache } from '../passkey-cache-B9PT3AWX.js';
+export { C as CachedAssertion, g as generatePasskeyUserId } from '../passkey-cache-WnDFQ-v4.js';
 export { a as PasskeyFormFactor, P as PasskeyMetadata, b as PasskeyMetadataInput, f as formatPasskeyLabel, r as resolvePasskeyMetadata } from '../passkey-metadata-QqFF2SWQ.js';
 import { C as Chain } from '../chain-C9dvKXUY.js';
 import { SiweMessage } from 'siwe';

package/dist/lib/index.js

@@ -40,14 +40,12 @@ __export(lib_exports, {
   broadcastSolanaSigned: () => broadcastSolanaSigned,
   bs58ToBytes: () => bs58ToBytes,
   buildUrl: () => buildUrl,
-  clearParentAssertCache: () => clearParentAssertCache,
   createManualSiweMessage: () => createManualSiweMessage,
   estimateEvmGas: () => estimateEvmGas,
   estimateEvmGasReserve: () => estimateEvmGasReserve,
   formatPasskeyLabel: () => formatPasskeyLabel,
   fromB64url: () => fromB64url,
   generatePasskeyUserId: () => generatePasskeyUserId,
-  getAssertCacheTtlMs: () => getAssertCacheTtlMs,
   getChainById: () => getChainById,
   getDefaultChain: () => getDefaultChain,
   getEvmGasPrice: () => getEvmGasPrice,
@@ -60,18 +58,14 @@ __export(lib_exports, {
   isChainSupported: () => isChainSupported,
   prepareEvmSendTransaction: () => prepareEvmSendTransaction,
   prepareEvmSignTransaction: () => prepareEvmSignTransaction,
-  readParentAssertCache: () => readParentAssertCache,
   resolveEvmChain: () => resolveEvmChain,
   resolvePasskeyMetadata: () => resolvePasskeyMetadata,
   sanitizeUserData: () => sanitizeUserData,
   serializeEthereumTransaction: () => serializeEthereumTransaction,
-  setAssertCacheTtlMs: () => setAssertCacheTtlMs,
   setChainRpcUrl: () => setChainRpcUrl,
   toB64url: () => toB64url,
   validateChainConfig: () => validateChainConfig,
-  verifyIdToken: () => verifyIdToken,
-  withClearOnFailure: () => withClearOnFailure,
-  writeParentAssertCache: () => writeParentAssertCache
+  verifyIdToken: () => verifyIdToken
 });
 module.exports = __toCommonJS(lib_exports);
 
@@ -190,39 +184,6 @@ var toB64url = (bytes) => {
 };
 
 // src/lib/passkey/passkey-cache.ts
-var cacheTtlMs = 0;
-var cache = null;
-var setAssertCacheTtlMs = (ms) => {
-  cacheTtlMs = Math.max(0, Math.floor(ms));
-  if (cacheTtlMs === 0) {
-    cache = null;
-  }
-};
-var getAssertCacheTtlMs = () => cacheTtlMs;
-var clearParentAssertCache = () => {
-  cache = null;
-};
-var readParentAssertCache = () => {
-  if (cacheTtlMs <= 0) return null;
-  if (!cache) return null;
-  if (Date.now() - cache.ts >= cacheTtlMs) return null;
-  return {
-    userHandleB64url: cache.userHandleB64url,
-    credentialIdB64url: cache.credentialIdB64url
-  };
-};
-var writeParentAssertCache = (entry) => {
-  if (cacheTtlMs <= 0) return;
-  cache = { ...entry, ts: Date.now() };
-};
-var withClearOnFailure = async (fn) => {
-  try {
-    return await fn();
-  } catch (error) {
-    clearParentAssertCache();
-    throw error;
-  }
-};
 var generatePasskeyUserId = () => {
   const bytes = crypto.getRandomValues(new Uint8Array(32));
   return { userIdB64url: toB64url(bytes), userIdBytes: bytes };
@@ -1587,14 +1548,12 @@ var bs58ToBytes = async (value) => {
   broadcastSolanaSigned,
   bs58ToBytes,
   buildUrl,
-  clearParentAssertCache,
   createManualSiweMessage,
   estimateEvmGas,
   estimateEvmGasReserve,
   formatPasskeyLabel,
   fromB64url,
   generatePasskeyUserId,
-  getAssertCacheTtlMs,
   getChainById,
   getDefaultChain,
   getEvmGasPrice,
@@ -1607,16 +1566,12 @@ var bs58ToBytes = async (value) => {
   isChainSupported,
   prepareEvmSendTransaction,
   prepareEvmSignTransaction,
-  readParentAssertCache,
   resolveEvmChain,
   resolvePasskeyMetadata,
   sanitizeUserData,
   serializeEthereumTransaction,
-  setAssertCacheTtlMs,
   setChainRpcUrl,
   toB64url,
   validateChainConfig,
-  verifyIdToken,
-  withClearOnFailure,
-  writeParentAssertCache
+  verifyIdToken
 });