@moon-x/core 0.3.0 → 0.4.0

package/README.md

@@ -18,7 +18,7 @@ This package owns everything that's identical between web and mobile:
 - **Headless SDK factories** (`@moon-x/core/sdk`) — platform-agnostic implementations of `signMessage`, `signTransaction`, `sendTransaction`, etc. that take a `Transport` + `PasskeyAssertor` + `KvStorage` via DI. Web and RN both wire their platform impls into these factories.
 - **Web platform impls** (`@moon-x/core/web`) — `createIframeTransport`, `createWebAuthnPasskey`, `createLocalStorageKv`. React-native has its own equivalents inside `@moon-x/react-native-sdk/platform/*`.
 - **Shared React hooks** (`@moon-x/core/react`) — hooks that run identically on web + RN (`useUser`, `useWallets`, `useLogout`, `useLoginWithEmail`, `usePasskeyStatus`, `useAddPasskey`, `useRemovePasskey`, `useCreateWallet`, `useImportKey`, plus per-chain hooks under `@moon-x/core/react/ethereum` and `@moon-x/core/react/solana`). The platform SDKs re-export these directly so consumers never import from core.
-- **Pure utilities** (`@moon-x/core/lib`) — EVM chain/gas helpers (`getEvmGasPrice`, `estimateEvmGas`, `getEvmNonce`, `chains`), `prepareEvmSignTransaction` / `prepareEvmSendTransaction` (chain + RPC + nonce/gas/fee auto-fill), SIWE/SIWS message builders, passkey codec + cache (safe-by-default TTL=0; integrator opts in via `setAssertCacheTtlMs`) + AAGUID registry, Solana transaction log parser, etc.
+- **Pure utilities** (`@moon-x/core/lib`) — EVM chain/gas helpers (`getEvmGasPrice`, `estimateEvmGas`, `getEvmNonce`, `chains`), `prepareEvmSignTransaction` / `prepareEvmSendTransaction` (chain + RPC + nonce/gas/fee auto-fill), SIWE/SIWS message builders, passkey codec + `generatePasskeyUserId`, AAGUID registry, Solana transaction log parser, etc. (The parent-side passkey-assertion cache was removed in Phase 4 of the presence-token gating work — every sensitive op now mints scope-bound single-use tokens via `getInternalPresenceTokens`.)
 
 ## Subpath exports
 

package/dist/{chunk-CDT4MC7S.mjs → chunk-6LTEG7VN.mjs}

@@ -100,39 +100,6 @@ var toB64url = (bytes) => {
 };
 
 // src/lib/passkey/passkey-cache.ts
-var cacheTtlMs = 0;
-var cache = null;
-var setAssertCacheTtlMs = (ms) => {
-  cacheTtlMs = Math.max(0, Math.floor(ms));
-  if (cacheTtlMs === 0) {
-    cache = null;
-  }
-};
-var getAssertCacheTtlMs = () => cacheTtlMs;
-var clearParentAssertCache = () => {
-  cache = null;
-};
-var readParentAssertCache = () => {
-  if (cacheTtlMs <= 0) return null;
-  if (!cache) return null;
-  if (Date.now() - cache.ts >= cacheTtlMs) return null;
-  return {
-    userHandleB64url: cache.userHandleB64url,
-    credentialIdB64url: cache.credentialIdB64url
-  };
-};
-var writeParentAssertCache = (entry) => {
-  if (cacheTtlMs <= 0) return;
-  cache = { ...entry, ts: Date.now() };
-};
-var withClearOnFailure = async (fn) => {
-  try {
-    return await fn();
-  } catch (error) {
-    clearParentAssertCache();
-    throw error;
-  }
-};
 var generatePasskeyUserId = () => {
   const bytes = crypto.getRandomValues(new Uint8Array(32));
   return { userIdB64url: toB64url(bytes), userIdBytes: bytes };
@@ -1492,12 +1459,6 @@ export {
   verifyIdToken,
   fromB64url,
   toB64url,
-  setAssertCacheTtlMs,
-  getAssertCacheTtlMs,
-  clearParentAssertCache,
-  readParentAssertCache,
-  writeParentAssertCache,
-  withClearOnFailure,
   generatePasskeyUserId,
   formatPasskeyLabel,
   resolvePasskeyMetadata,

package/dist/{interfaces-CYtJHALV.d.mts → interfaces-cdKh3sLA.d.mts}

@@ -87,6 +87,29 @@ interface PasskeyAssertor {
     assertForServer(opts: {
         optionsJSON: WebAuthnRequestOptions;
     }): Promise<WebAuthnAssertionResponse>;
+    /**
+     * Internal-use variant of assertForServer. Runs the same WebAuthn
+     * ceremony and returns the same sanitized assertion (userHandle
+     * stripped on the platform boundary), but ALSO surfaces the
+     * captured userHandle + credential id separately for the SDK
+     * orchestrator's downstream postMessage payload — the iframe needs
+     * the userHandle bytes to do AES-GCM unwrap of the DEK after the
+     * presence ceremony mints the scoped tokens.
+     *
+     * DEK hygiene boundary: the sanitized `response` field still has
+     * `response.userHandle === undefined`. The separate
+     * `userHandleB64url` field stays inside the orchestrator and is
+     * postMessaged to the iframe — never sent over the network to the
+     * presence-verify server call. The strip is enforced by the impl;
+     * the separate surfacing is opt-in via this method.
+     */
+    assertForInternalPresence(opts: {
+        optionsJSON: WebAuthnRequestOptions;
+    }): Promise<{
+        response: WebAuthnAssertionResponse;
+        userHandleB64url: string;
+        credentialIdB64url: string;
+    }>;
 }
 /**
  * Subset of `PublicKeyCredentialRequestOptionsJSON` we forward to the

package/dist/{interfaces-Bm7fGOAI.d.ts → interfaces-pNTEOKaK.d.ts}

@@ -87,6 +87,29 @@ interface PasskeyAssertor {
     assertForServer(opts: {
         optionsJSON: WebAuthnRequestOptions;
     }): Promise<WebAuthnAssertionResponse>;
+    /**
+     * Internal-use variant of assertForServer. Runs the same WebAuthn
+     * ceremony and returns the same sanitized assertion (userHandle
+     * stripped on the platform boundary), but ALSO surfaces the
+     * captured userHandle + credential id separately for the SDK
+     * orchestrator's downstream postMessage payload — the iframe needs
+     * the userHandle bytes to do AES-GCM unwrap of the DEK after the
+     * presence ceremony mints the scoped tokens.
+     *
+     * DEK hygiene boundary: the sanitized `response` field still has
+     * `response.userHandle === undefined`. The separate
+     * `userHandleB64url` field stays inside the orchestrator and is
+     * postMessaged to the iframe — never sent over the network to the
+     * presence-verify server call. The strip is enforced by the impl;
+     * the separate surfacing is opt-in via this method.
+     */
+    assertForInternalPresence(opts: {
+        optionsJSON: WebAuthnRequestOptions;
+    }): Promise<{
+        response: WebAuthnAssertionResponse;
+        userHandleB64url: string;
+        credentialIdB64url: string;
+    }>;
 }
 /**
  * Subset of `PublicKeyCredentialRequestOptionsJSON` we forward to the

package/dist/lib/index.d.mts

@@ -1,4 +1,4 @@
-export { C as CachedAssertion, c as clearParentAssertCache, g as generatePasskeyUserId, a as getAssertCacheTtlMs, r as readParentAssertCache, s as setAssertCacheTtlMs, w as withClearOnFailure, b as writeParentAssertCache } from '../passkey-cache-B9PT3AWX.mjs';
+export { C as CachedAssertion, g as generatePasskeyUserId } from '../passkey-cache-WnDFQ-v4.mjs';
 export { a as PasskeyFormFactor, P as PasskeyMetadata, b as PasskeyMetadataInput, f as formatPasskeyLabel, r as resolvePasskeyMetadata } from '../passkey-metadata-QqFF2SWQ.mjs';
 import { C as Chain } from '../chain-C9dvKXUY.mjs';
 import { SiweMessage } from 'siwe';

package/dist/lib/index.d.ts

@@ -1,4 +1,4 @@
-export { C as CachedAssertion, c as clearParentAssertCache, g as generatePasskeyUserId, a as getAssertCacheTtlMs, r as readParentAssertCache, s as setAssertCacheTtlMs, w as withClearOnFailure, b as writeParentAssertCache } from '../passkey-cache-B9PT3AWX.js';
+export { C as CachedAssertion, g as generatePasskeyUserId } from '../passkey-cache-WnDFQ-v4.js';
 export { a as PasskeyFormFactor, P as PasskeyMetadata, b as PasskeyMetadataInput, f as formatPasskeyLabel, r as resolvePasskeyMetadata } from '../passkey-metadata-QqFF2SWQ.js';
 import { C as Chain } from '../chain-C9dvKXUY.js';
 import { SiweMessage } from 'siwe';

package/dist/lib/index.js

@@ -40,14 +40,12 @@ __export(lib_exports, {
   broadcastSolanaSigned: () => broadcastSolanaSigned,
   bs58ToBytes: () => bs58ToBytes,
   buildUrl: () => buildUrl,
-  clearParentAssertCache: () => clearParentAssertCache,
   createManualSiweMessage: () => createManualSiweMessage,
   estimateEvmGas: () => estimateEvmGas,
   estimateEvmGasReserve: () => estimateEvmGasReserve,
   formatPasskeyLabel: () => formatPasskeyLabel,
   fromB64url: () => fromB64url,
   generatePasskeyUserId: () => generatePasskeyUserId,
-  getAssertCacheTtlMs: () => getAssertCacheTtlMs,
   getChainById: () => getChainById,
   getDefaultChain: () => getDefaultChain,
   getEvmGasPrice: () => getEvmGasPrice,
@@ -60,18 +58,14 @@ __export(lib_exports, {
   isChainSupported: () => isChainSupported,
   prepareEvmSendTransaction: () => prepareEvmSendTransaction,
   prepareEvmSignTransaction: () => prepareEvmSignTransaction,
-  readParentAssertCache: () => readParentAssertCache,
   resolveEvmChain: () => resolveEvmChain,
   resolvePasskeyMetadata: () => resolvePasskeyMetadata,
   sanitizeUserData: () => sanitizeUserData,
   serializeEthereumTransaction: () => serializeEthereumTransaction,
-  setAssertCacheTtlMs: () => setAssertCacheTtlMs,
   setChainRpcUrl: () => setChainRpcUrl,
   toB64url: () => toB64url,
   validateChainConfig: () => validateChainConfig,
-  verifyIdToken: () => verifyIdToken,
-  withClearOnFailure: () => withClearOnFailure,
-  writeParentAssertCache: () => writeParentAssertCache
+  verifyIdToken: () => verifyIdToken
 });
 module.exports = __toCommonJS(lib_exports);
 
@@ -190,39 +184,6 @@ var toB64url = (bytes) => {
 };
 
 // src/lib/passkey/passkey-cache.ts
-var cacheTtlMs = 0;
-var cache = null;
-var setAssertCacheTtlMs = (ms) => {
-  cacheTtlMs = Math.max(0, Math.floor(ms));
-  if (cacheTtlMs === 0) {
-    cache = null;
-  }
-};
-var getAssertCacheTtlMs = () => cacheTtlMs;
-var clearParentAssertCache = () => {
-  cache = null;
-};
-var readParentAssertCache = () => {
-  if (cacheTtlMs <= 0) return null;
-  if (!cache) return null;
-  if (Date.now() - cache.ts >= cacheTtlMs) return null;
-  return {
-    userHandleB64url: cache.userHandleB64url,
-    credentialIdB64url: cache.credentialIdB64url
-  };
-};
-var writeParentAssertCache = (entry) => {
-  if (cacheTtlMs <= 0) return;
-  cache = { ...entry, ts: Date.now() };
-};
-var withClearOnFailure = async (fn) => {
-  try {
-    return await fn();
-  } catch (error) {
-    clearParentAssertCache();
-    throw error;
-  }
-};
 var generatePasskeyUserId = () => {
   const bytes = crypto.getRandomValues(new Uint8Array(32));
   return { userIdB64url: toB64url(bytes), userIdBytes: bytes };
@@ -1587,14 +1548,12 @@ var bs58ToBytes = async (value) => {
   broadcastSolanaSigned,
   bs58ToBytes,
   buildUrl,
-  clearParentAssertCache,
   createManualSiweMessage,
   estimateEvmGas,
   estimateEvmGasReserve,
   formatPasskeyLabel,
   fromB64url,
   generatePasskeyUserId,
-  getAssertCacheTtlMs,
   getChainById,
   getDefaultChain,
   getEvmGasPrice,
@@ -1607,16 +1566,12 @@ var bs58ToBytes = async (value) => {
   isChainSupported,
   prepareEvmSendTransaction,
   prepareEvmSignTransaction,
-  readParentAssertCache,
   resolveEvmChain,
   resolvePasskeyMetadata,
   sanitizeUserData,
   serializeEthereumTransaction,
-  setAssertCacheTtlMs,
   setChainRpcUrl,
   toB64url,
   validateChainConfig,
-  verifyIdToken,
-  withClearOnFailure,
-  writeParentAssertCache
+  verifyIdToken
 });

package/dist/lib/index.mjs

@@ -9,14 +9,12 @@ import {
   broadcastSolanaSigned,
   bs58ToBytes,
   buildUrl,
-  clearParentAssertCache,
   createManualSiweMessage,
   estimateEvmGas,
   estimateEvmGasReserve,
   formatPasskeyLabel,
   fromB64url,
   generatePasskeyUserId,
-  getAssertCacheTtlMs,
   getChainById,
   getDefaultChain,
   getEvmGasPrice,
@@ -29,19 +27,15 @@ import {
   isChainSupported,
   prepareEvmSendTransaction,
   prepareEvmSignTransaction,
-  readParentAssertCache,
   resolveEvmChain,
   resolvePasskeyMetadata,
   sanitizeUserData,
   serializeEthereumTransaction,
-  setAssertCacheTtlMs,
   setChainRpcUrl,
   toB64url,
   validateChainConfig,
-  verifyIdToken,
-  withClearOnFailure,
-  writeParentAssertCache
-} from "../chunk-CDT4MC7S.mjs";
+  verifyIdToken
+} from "../chunk-6LTEG7VN.mjs";
 import "../chunk-GQKIA37O.mjs";
 export {
   DEFAULT_AUTH_URL,
@@ -54,14 +48,12 @@ export {
   broadcastSolanaSigned,
   bs58ToBytes,
   buildUrl,
-  clearParentAssertCache,
   createManualSiweMessage,
   estimateEvmGas,
   estimateEvmGasReserve,
   formatPasskeyLabel,
   fromB64url,
   generatePasskeyUserId,
-  getAssertCacheTtlMs,
   getChainById,
   getDefaultChain,
   getEvmGasPrice,
@@ -74,16 +66,12 @@ export {
   isChainSupported,
   prepareEvmSendTransaction,
   prepareEvmSignTransaction,
-  readParentAssertCache,
   resolveEvmChain,
   resolvePasskeyMetadata,
   sanitizeUserData,
   serializeEthereumTransaction,
-  setAssertCacheTtlMs,
   setChainRpcUrl,
   toB64url,
   validateChainConfig,
-  verifyIdToken,
-  withClearOnFailure,
-  writeParentAssertCache
+  verifyIdToken
 };

package/dist/passkey-cache-WnDFQ-v4.d.mts

@@ -0,0 +1,26 @@
+interface CachedAssertion {
+    userHandleB64url: string;
+    credentialIdB64url: string;
+}
+/**
+ * Generate fresh user.id bytes for a new WebAuthn credential. The
+ * caller overrides `options.user.id` with these bytes before
+ * navigator.credentials.create so the authenticator persists them as
+ * the credential's user.id; on every subsequent assertion they come
+ * back as response.userHandle and serve as the AES-GCM key for that
+ * credential's DEK wrap.
+ *
+ * Returns the bytes both as base64url (what the WebAuthn options
+ * accept and what we ship over postMessage) and as raw bytes (for
+ * any caller that prefers direct binary).
+ *
+ * Requires a working `crypto.getRandomValues`. On RN this is provided
+ * by the `react-native-get-random-values` polyfill that the SDK's
+ * docs ask consumers to import at app entry.
+ */
+declare const generatePasskeyUserId: () => {
+    userIdB64url: string;
+    userIdBytes: Uint8Array;
+};
+
+export { type CachedAssertion as C, generatePasskeyUserId as g };

package/dist/passkey-cache-WnDFQ-v4.d.ts

@@ -0,0 +1,26 @@
+interface CachedAssertion {
+    userHandleB64url: string;
+    credentialIdB64url: string;
+}
+/**
+ * Generate fresh user.id bytes for a new WebAuthn credential. The
+ * caller overrides `options.user.id` with these bytes before
+ * navigator.credentials.create so the authenticator persists them as
+ * the credential's user.id; on every subsequent assertion they come
+ * back as response.userHandle and serve as the AES-GCM key for that
+ * credential's DEK wrap.
+ *
+ * Returns the bytes both as base64url (what the WebAuthn options
+ * accept and what we ship over postMessage) and as raw bytes (for
+ * any caller that prefers direct binary).
+ *
+ * Requires a working `crypto.getRandomValues`. On RN this is provided
+ * by the `react-native-get-random-values` polyfill that the SDK's
+ * docs ask consumers to import at app entry.
+ */
+declare const generatePasskeyUserId: () => {
+    userIdB64url: string;
+    userIdBytes: Uint8Array;
+};
+
+export { type CachedAssertion as C, generatePasskeyUserId as g };

package/dist/react/index.mjs

@@ -1,7 +1,7 @@
 import {
   formatPasskeyLabel,
   resolvePasskeyMetadata
-} from "../chunk-CDT4MC7S.mjs";
+} from "../chunk-6LTEG7VN.mjs";
 import "../chunk-GQKIA37O.mjs";
 import {
   SDKProvider,

package/dist/sdk/index.d.mts

@@ -1,16 +1,15 @@
-import { T as Transport, P as PasskeyAssertor, K as KvStorage } from '../interfaces-CYtJHALV.mjs';
-export { O as OAuthOpener, a as PlatformImpls, W as WebAuthnAssertionResponse, b as WebAuthnRequestOptions } from '../interfaces-CYtJHALV.mjs';
-import { C as CachedAssertion } from '../passkey-cache-B9PT3AWX.mjs';
+import { T as Transport, P as PasskeyAssertor, K as KvStorage } from '../interfaces-cdKh3sLA.mjs';
+export { O as OAuthOpener, a as PlatformImpls, W as WebAuthnAssertionResponse, b as WebAuthnRequestOptions } from '../interfaces-cdKh3sLA.mjs';
+import { C as CachedAssertion } from '../passkey-cache-WnDFQ-v4.mjs';
 import { EthereumSignMessageParams, EthereumSignMessageResult, EthereumSignTransactionParams, EthereumSignTransactionResult, EthereumSignTypedDataParams, EthereumSignTypedDataResult, EthereumSignHashParams, EthereumSignHashResult, EthereumSign7702AuthorizationParams, EthereumSign7702AuthorizationResult, EthereumSendTransactionParams, EthereumSendTransactionResult, EthereumGetBalanceParams, EthereumGetBalanceResult, EthereumGetTokenAccountsByOwnerParams, EthereumGetTokenAccountsByOwnerResult, SolanaSignMessageParams, SolanaSignMessageResult, SolanaSignTransactionParams, SolanaSignTransactionResult, SolanaSendTransactionParams, SolanaSendTransactionResult, SolanaGetBalanceParams, SolanaGetBalanceResult, SolanaGetTokenAccountsByOwnerParams, SolanaGetTokenAccountsByOwnerResult, SendEmailOtpResponse, PublicWallet } from '../types/index.mjs';
 import '../post-message-CmgAfkOS.mjs';
 import '../chain-C9dvKXUY.mjs';
 
 type AssertPasskeyInParentResult = CachedAssertion;
-declare const assertPasskeyInParent: ({ transport, passkey, publishableKey, requireFreshAssertion, validateCredentialInAllowList, }: {
+declare const assertPasskeyInParent: ({ transport, passkey, publishableKey, validateCredentialInAllowList, }: {
     transport: Transport;
     passkey: PasskeyAssertor;
     publishableKey: string;
-    requireFreshAssertion?: boolean;
     validateCredentialInAllowList?: boolean;
 }) => Promise<AssertPasskeyInParentResult>;
 
@@ -25,10 +24,29 @@ declare const getPresenceToken: ({ transport, passkey, publishableKey, relyingPa
     relyingPartyOrigin: string;
 }) => Promise<GetPresenceTokenResult>;
 
-declare const getHeadlessEthereumMethods: ({ transport, passkey, publishableKey, }: {
+interface ScopedPresenceToken {
+    token: string;
+    expiresAt: number;
+}
+interface GetInternalPresenceTokensResult {
+    tokens: Record<string, ScopedPresenceToken>;
+    userHandleB64url: string;
+    credentialIdB64url: string;
+}
+declare const getInternalPresenceTokens: ({ transport, passkey, publishableKey, relyingPartyOrigin, scopes, }: {
+    transport: Transport;
+    passkey: PasskeyAssertor;
+    publishableKey: string;
+    relyingPartyOrigin: string;
+    scopes: string[];
+}) => Promise<GetInternalPresenceTokensResult>;
+declare const flattenPresenceTokens: (result: GetInternalPresenceTokensResult) => Record<string, string>;
+
+declare const getHeadlessEthereumMethods: ({ transport, passkey, publishableKey, relyingPartyOrigin, }: {
     transport: Transport;
     passkey: PasskeyAssertor;
     publishableKey: string;
+    relyingPartyOrigin: string;
 }) => {
     signEthereumMessageHeadless: (params: EthereumSignMessageParams) => Promise<EthereumSignMessageResult>;
     signEthereumTransactionHeadless: (params: EthereumSignTransactionParams) => Promise<EthereumSignTransactionResult>;
@@ -46,10 +64,11 @@ declare const getHeadlessEthereumMethods: ({ transport, passkey, publishableKey,
     }) => Promise<unknown>;
 };
 
-declare const getHeadlessSolanaMethods: ({ transport, passkey, publishableKey, }: {
+declare const getHeadlessSolanaMethods: ({ transport, passkey, publishableKey, relyingPartyOrigin, }: {
     transport: Transport;
     passkey: PasskeyAssertor;
     publishableKey: string;
+    relyingPartyOrigin: string;
 }) => {
     signSolanaMessageHeadless: (params: SolanaSignMessageParams) => Promise<SolanaSignMessageResult>;
     signSolanaTransactionHeadless: (params: SolanaSignTransactionParams) => Promise<SolanaSignTransactionResult>;
@@ -98,11 +117,12 @@ declare const getHeadlessAuthenticationMethods: ({ transport, publishableKey, se
     verifyOAuth: (params: VerifyOAuthParams) => Promise<unknown>;
 };
 
-declare const getHeadlessGeneralMethods: ({ transport, passkey, storage, publishableKey, setIsAuthenticated, setUser, }: {
+declare const getHeadlessGeneralMethods: ({ transport, passkey, storage, publishableKey, relyingPartyOrigin, setIsAuthenticated, setUser, }: {
     transport: Transport;
     passkey: PasskeyAssertor;
     storage: KvStorage;
     publishableKey: string;
+    relyingPartyOrigin: string;
     setIsAuthenticated?: (isAuth: boolean) => void;
     setUser?: (user: unknown | null) => void;
 }) => {
@@ -111,13 +131,10 @@ declare const getHeadlessGeneralMethods: ({ transport, passkey, storage, publish
     createWallet: (walletType: "solana" | "ethereum", options?: {
         createAdditional?: boolean;
         walletIndex?: number;
-        requireFreshAssertion?: boolean;
     }) => Promise<{
         wallet: PublicWallet;
     }>;
-    importKey: (walletType: "solana" | "ethereum", key: string, options?: {
-        requireFreshAssertion?: boolean;
-    }) => Promise<{
+    importKey: (walletType: "solana" | "ethereum", key: string) => Promise<{
         wallet: PublicWallet;
     }>;
     getWallets: (walletType: "solana" | "ethereum") => Promise<{
@@ -137,4 +154,4 @@ declare const getHeadlessGeneralMethods: ({ transport, passkey, storage, publish
     getUser: () => Promise<unknown>;
 };
 
-export { type AssertPasskeyInParentResult, type GetPresenceTokenResult, KvStorage, type LoginWithCodeParams, PasskeyAssertor, type SendCodeParams, Transport, type VerifyOAuthParams, assertPasskeyInParent, getHeadlessAuthenticationMethods, getHeadlessEthereumMethods, getHeadlessGeneralMethods, getHeadlessSolanaMethods, getPresenceToken };
+export { type AssertPasskeyInParentResult, type GetInternalPresenceTokensResult, type GetPresenceTokenResult, KvStorage, type LoginWithCodeParams, PasskeyAssertor, type ScopedPresenceToken, type SendCodeParams, Transport, type VerifyOAuthParams, assertPasskeyInParent, flattenPresenceTokens, getHeadlessAuthenticationMethods, getHeadlessEthereumMethods, getHeadlessGeneralMethods, getHeadlessSolanaMethods, getInternalPresenceTokens, getPresenceToken };

package/dist/sdk/index.d.ts

@@ -1,16 +1,15 @@
-import { T as Transport, P as PasskeyAssertor, K as KvStorage } from '../interfaces-Bm7fGOAI.js';
-export { O as OAuthOpener, a as PlatformImpls, W as WebAuthnAssertionResponse, b as WebAuthnRequestOptions } from '../interfaces-Bm7fGOAI.js';
-import { C as CachedAssertion } from '../passkey-cache-B9PT3AWX.js';
+import { T as Transport, P as PasskeyAssertor, K as KvStorage } from '../interfaces-pNTEOKaK.js';
+export { O as OAuthOpener, a as PlatformImpls, W as WebAuthnAssertionResponse, b as WebAuthnRequestOptions } from '../interfaces-pNTEOKaK.js';
+import { C as CachedAssertion } from '../passkey-cache-WnDFQ-v4.js';
 import { EthereumSignMessageParams, EthereumSignMessageResult, EthereumSignTransactionParams, EthereumSignTransactionResult, EthereumSignTypedDataParams, EthereumSignTypedDataResult, EthereumSignHashParams, EthereumSignHashResult, EthereumSign7702AuthorizationParams, EthereumSign7702AuthorizationResult, EthereumSendTransactionParams, EthereumSendTransactionResult, EthereumGetBalanceParams, EthereumGetBalanceResult, EthereumGetTokenAccountsByOwnerParams, EthereumGetTokenAccountsByOwnerResult, SolanaSignMessageParams, SolanaSignMessageResult, SolanaSignTransactionParams, SolanaSignTransactionResult, SolanaSendTransactionParams, SolanaSendTransactionResult, SolanaGetBalanceParams, SolanaGetBalanceResult, SolanaGetTokenAccountsByOwnerParams, SolanaGetTokenAccountsByOwnerResult, SendEmailOtpResponse, PublicWallet } from '../types/index.js';
 import '../post-message-CmgAfkOS.js';
 import '../chain-C9dvKXUY.js';
 
 type AssertPasskeyInParentResult = CachedAssertion;
-declare const assertPasskeyInParent: ({ transport, passkey, publishableKey, requireFreshAssertion, validateCredentialInAllowList, }: {
+declare const assertPasskeyInParent: ({ transport, passkey, publishableKey, validateCredentialInAllowList, }: {
     transport: Transport;
     passkey: PasskeyAssertor;
     publishableKey: string;
-    requireFreshAssertion?: boolean;
     validateCredentialInAllowList?: boolean;
 }) => Promise<AssertPasskeyInParentResult>;
 
@@ -25,10 +24,29 @@ declare const getPresenceToken: ({ transport, passkey, publishableKey, relyingPa
     relyingPartyOrigin: string;
 }) => Promise<GetPresenceTokenResult>;
 
-declare const getHeadlessEthereumMethods: ({ transport, passkey, publishableKey, }: {
+interface ScopedPresenceToken {
+    token: string;
+    expiresAt: number;
+}
+interface GetInternalPresenceTokensResult {
+    tokens: Record<string, ScopedPresenceToken>;
+    userHandleB64url: string;
+    credentialIdB64url: string;
+}
+declare const getInternalPresenceTokens: ({ transport, passkey, publishableKey, relyingPartyOrigin, scopes, }: {
+    transport: Transport;
+    passkey: PasskeyAssertor;
+    publishableKey: string;
+    relyingPartyOrigin: string;
+    scopes: string[];
+}) => Promise<GetInternalPresenceTokensResult>;
+declare const flattenPresenceTokens: (result: GetInternalPresenceTokensResult) => Record<string, string>;
+
+declare const getHeadlessEthereumMethods: ({ transport, passkey, publishableKey, relyingPartyOrigin, }: {
     transport: Transport;
     passkey: PasskeyAssertor;
     publishableKey: string;
+    relyingPartyOrigin: string;
 }) => {
     signEthereumMessageHeadless: (params: EthereumSignMessageParams) => Promise<EthereumSignMessageResult>;
     signEthereumTransactionHeadless: (params: EthereumSignTransactionParams) => Promise<EthereumSignTransactionResult>;
@@ -46,10 +64,11 @@ declare const getHeadlessEthereumMethods: ({ transport, passkey, publishableKey,
     }) => Promise<unknown>;
 };
 
-declare const getHeadlessSolanaMethods: ({ transport, passkey, publishableKey, }: {
+declare const getHeadlessSolanaMethods: ({ transport, passkey, publishableKey, relyingPartyOrigin, }: {
     transport: Transport;
     passkey: PasskeyAssertor;
     publishableKey: string;
+    relyingPartyOrigin: string;
 }) => {
     signSolanaMessageHeadless: (params: SolanaSignMessageParams) => Promise<SolanaSignMessageResult>;
     signSolanaTransactionHeadless: (params: SolanaSignTransactionParams) => Promise<SolanaSignTransactionResult>;
@@ -98,11 +117,12 @@ declare const getHeadlessAuthenticationMethods: ({ transport, publishableKey, se
     verifyOAuth: (params: VerifyOAuthParams) => Promise<unknown>;
 };
 
-declare const getHeadlessGeneralMethods: ({ transport, passkey, storage, publishableKey, setIsAuthenticated, setUser, }: {
+declare const getHeadlessGeneralMethods: ({ transport, passkey, storage, publishableKey, relyingPartyOrigin, setIsAuthenticated, setUser, }: {
     transport: Transport;
     passkey: PasskeyAssertor;
     storage: KvStorage;
     publishableKey: string;
+    relyingPartyOrigin: string;
     setIsAuthenticated?: (isAuth: boolean) => void;
     setUser?: (user: unknown | null) => void;
 }) => {
@@ -111,13 +131,10 @@ declare const getHeadlessGeneralMethods: ({ transport, passkey, storage, publish
     createWallet: (walletType: "solana" | "ethereum", options?: {
         createAdditional?: boolean;
         walletIndex?: number;
-        requireFreshAssertion?: boolean;
     }) => Promise<{
         wallet: PublicWallet;
     }>;
-    importKey: (walletType: "solana" | "ethereum", key: string, options?: {
-        requireFreshAssertion?: boolean;
-    }) => Promise<{
+    importKey: (walletType: "solana" | "ethereum", key: string) => Promise<{
         wallet: PublicWallet;
     }>;
     getWallets: (walletType: "solana" | "ethereum") => Promise<{
@@ -137,4 +154,4 @@ declare const getHeadlessGeneralMethods: ({ transport, passkey, storage, publish
     getUser: () => Promise<unknown>;
 };
 
-export { type AssertPasskeyInParentResult, type GetPresenceTokenResult, KvStorage, type LoginWithCodeParams, PasskeyAssertor, type SendCodeParams, Transport, type VerifyOAuthParams, assertPasskeyInParent, getHeadlessAuthenticationMethods, getHeadlessEthereumMethods, getHeadlessGeneralMethods, getHeadlessSolanaMethods, getPresenceToken };
+export { type AssertPasskeyInParentResult, type GetInternalPresenceTokensResult, type GetPresenceTokenResult, KvStorage, type LoginWithCodeParams, PasskeyAssertor, type ScopedPresenceToken, type SendCodeParams, Transport, type VerifyOAuthParams, assertPasskeyInParent, flattenPresenceTokens, getHeadlessAuthenticationMethods, getHeadlessEthereumMethods, getHeadlessGeneralMethods, getHeadlessSolanaMethods, getInternalPresenceTokens, getPresenceToken };