@moon-x/core 0.3.0 → 0.5.0

package/README.md

@@ -18,7 +18,7 @@ This package owns everything that's identical between web and mobile:
 - **Headless SDK factories** (`@moon-x/core/sdk`) — platform-agnostic implementations of `signMessage`, `signTransaction`, `sendTransaction`, etc. that take a `Transport` + `PasskeyAssertor` + `KvStorage` via DI. Web and RN both wire their platform impls into these factories.
 - **Web platform impls** (`@moon-x/core/web`) — `createIframeTransport`, `createWebAuthnPasskey`, `createLocalStorageKv`. React-native has its own equivalents inside `@moon-x/react-native-sdk/platform/*`.
 - **Shared React hooks** (`@moon-x/core/react`) — hooks that run identically on web + RN (`useUser`, `useWallets`, `useLogout`, `useLoginWithEmail`, `usePasskeyStatus`, `useAddPasskey`, `useRemovePasskey`, `useCreateWallet`, `useImportKey`, plus per-chain hooks under `@moon-x/core/react/ethereum` and `@moon-x/core/react/solana`). The platform SDKs re-export these directly so consumers never import from core.
-- **Pure utilities** (`@moon-x/core/lib`) — EVM chain/gas helpers (`getEvmGasPrice`, `estimateEvmGas`, `getEvmNonce`, `chains`), `prepareEvmSignTransaction` / `prepareEvmSendTransaction` (chain + RPC + nonce/gas/fee auto-fill), SIWE/SIWS message builders, passkey codec + cache (safe-by-default TTL=0; integrator opts in via `setAssertCacheTtlMs`) + AAGUID registry, Solana transaction log parser, etc.
+- **Pure utilities** (`@moon-x/core/lib`) — EVM chain/gas helpers (`getEvmGasPrice`, `estimateEvmGas`, `getEvmNonce`, `chains`), `prepareEvmSignTransaction` / `prepareEvmSendTransaction` (chain + RPC + nonce/gas/fee auto-fill), SIWE/SIWS message builders, passkey codec + `generatePasskeyUserId`, AAGUID registry, Solana transaction log parser, etc. (The parent-side passkey-assertion cache was removed in Phase 4 of the presence-token gating work — every sensitive op now mints scope-bound single-use tokens via `getInternalPresenceTokens`.)
 
 ## Subpath exports
 

package/dist/{chunk-CDT4MC7S.mjs → chunk-I56GRKAG.mjs}

@@ -100,39 +100,6 @@ var toB64url = (bytes) => {
 };
 
 // src/lib/passkey/passkey-cache.ts
-var cacheTtlMs = 0;
-var cache = null;
-var setAssertCacheTtlMs = (ms) => {
-  cacheTtlMs = Math.max(0, Math.floor(ms));
-  if (cacheTtlMs === 0) {
-    cache = null;
-  }
-};
-var getAssertCacheTtlMs = () => cacheTtlMs;
-var clearParentAssertCache = () => {
-  cache = null;
-};
-var readParentAssertCache = () => {
-  if (cacheTtlMs <= 0) return null;
-  if (!cache) return null;
-  if (Date.now() - cache.ts >= cacheTtlMs) return null;
-  return {
-    userHandleB64url: cache.userHandleB64url,
-    credentialIdB64url: cache.credentialIdB64url
-  };
-};
-var writeParentAssertCache = (entry) => {
-  if (cacheTtlMs <= 0) return;
-  cache = { ...entry, ts: Date.now() };
-};
-var withClearOnFailure = async (fn) => {
-  try {
-    return await fn();
-  } catch (error) {
-    clearParentAssertCache();
-    throw error;
-  }
-};
 var generatePasskeyUserId = () => {
   const bytes = crypto.getRandomValues(new Uint8Array(32));
   return { userIdB64url: toB64url(bytes), userIdBytes: bytes };
@@ -1458,6 +1425,23 @@ var broadcastSolanaSigned = async (rpcUrl, signedBase58) => {
   return result.result;
 };
 
+// src/lib/wallet-algorithm.ts
+function canonicalAlgorithmFor(chain) {
+  switch (chain) {
+    case "ethereum":
+      return "ecdsa";
+    case "solana":
+      return "exportable-ed25519";
+    default:
+      throw new Error(`No canonical algorithm for chain: ${chain}`);
+  }
+}
+function parseDerivationPath(path) {
+  if (!path || path === "m") return new Uint32Array([]);
+  const rest = path.startsWith("m/") ? path.slice(2) : path;
+  return new Uint32Array(rest.split("/").map((s) => Number(s)));
+}
+
 // src/lib/wire-codec.ts
 var arrayLikeToBytes = (value) => {
   if (value instanceof Uint8Array) return value;
@@ -1492,12 +1476,6 @@ export {
   verifyIdToken,
   fromB64url,
   toB64url,
-  setAssertCacheTtlMs,
-  getAssertCacheTtlMs,
-  clearParentAssertCache,
-  readParentAssertCache,
-  writeParentAssertCache,
-  withClearOnFailure,
   generatePasskeyUserId,
   formatPasskeyLabel,
   resolvePasskeyMetadata,
@@ -1527,6 +1505,8 @@ export {
   serializeEthereumTransaction,
   broadcastEthereumRaw,
   broadcastSolanaSigned,
+  canonicalAlgorithmFor,
+  parseDerivationPath,
   arrayLikeToBytes,
   bs58ToBytes
 };

package/dist/{chunk-VVL65GIB.mjs → chunk-JU5MWLXH.mjs}

@@ -51,6 +51,20 @@ var PostMessageMethod = {
   // dispatcher boring.
   SIGN_HASH: "SIGN_HASH",
   SIGN_7702_AUTHORIZATION: "SIGN_7702_AUTHORIZATION",
+  // Provision a SES (Secure Ephemeral Signer) over one or more of the
+  // user's MPC wallets. Iframe verifies the Nitro attestation, decrypts
+  // the selected keyshares, HPKE-seals them to the verified enclave
+  // pubkey, and returns a freshly-generated Ed25519 signer keypair.
+  // MoonX never persists the private key — the parent must hand it to
+  // the user immediately.
+  PROVISION_EPHEMERAL_SIGNER: "PROVISION_EPHEMERAL_SIGNER",
+  // List the user's active provisioned ephemeral signers from the
+  // wallets backend. Read-only; doesn't touch SES or the enclave.
+  LIST_EPHEMERAL_SIGNERS: "LIST_EPHEMERAL_SIGNERS",
+  // Soft-revoke a previously-provisioned ephemeral signer. The wallets
+  // backend updates revoked_at locally and forwards the revoke to SES
+  // so the enclave drops the policy.
+  REVOKE_EPHEMERAL_SIGNER: "REVOKE_EPHEMERAL_SIGNER",
   VERIFY_EMAIL_OTP: "VERIFY_EMAIL_OTP",
   VERIFY_OAUTH: "VERIFY_OAUTH",
   START_OAUTH: "START_OAUTH",

package/dist/index.d.mts

@@ -1,4 +1,3 @@
-export { AccessTokenClaims, AppConfigRequest, AppConfigResponse, AttachOAuthTokenRequest, AttachOAuthTokenResponse, AuthAppearance, AuthFlow, AuthFlowComponent, AuthLoginMethod, AuthProviderConfig, BaseGetBalanceParams, BaseGetBalanceResult, BaseGetTokenAccountsParams, BaseSendTransactionParams, BaseSendTransactionResult, BaseSignMessageParams, BaseSignMessageResult, BaseSignTransactionParams, BaseSignTransactionResult, BaseTokenClaims, BaseUIOptions, BaseWalletHooks, ContractUIOptions, CreateWalletResponse, DefaultFundingMethod, DeleteSessionRequest, DeleteSessionResponse, DetachOAuthTokenRequest, DeviceFingerprint, DisplayMode, EmailOtpConfig, EmailOtpFlowState, EthereumFundingConfig, EthereumGetBalanceParams, EthereumGetBalanceResult, EthereumGetTokenAccountsByOwnerParams, EthereumGetTokenAccountsByOwnerResult, EthereumSendTransactionParams, EthereumSendTransactionRequest, EthereumSendTransactionResult, EthereumSign7702AuthorizationParams, EthereumSign7702AuthorizationResult, EthereumSignHashParams, EthereumSignHashResult, EthereumSignMessageParams, EthereumSignMessageResult, EthereumSignTransactionParams, EthereumSignTransactionResult, EthereumSignTypedDataParams, EthereumSignTypedDataResult, EthereumSwitchChainParams, ExportKeyConfig, Factor, FlexibleTheme, FundWalletConfig, FundingEvents, FundingMethod, FundingUIConfig, GetCurrentSessionRequest, GetCurrentSessionResponse, Hex, IdentityTokenClaims, IdpProvider, IsAuthenticatedRequest, IsAuthenticatedResponse, LoginTokenBundle, LogoutRequest, LogoutResponse, MessageTypeProperty, MessageTypes, MoonKeyThemeConfig, MoonPaySignRequest, MoonPaySignResponse, MpcKeyShares, Network, OAuthRequest, OAuthResponse, OnrampFundingSettings, PasskeyEnrollConfig, PasskeySettings, PreferredCardProvider, PrefillConfig, PresenceTokenClaims, PublicEthereumWallet, PublicSessionData, PublicWallet, RefreshSessionRequest, RefreshSessionResponse, RetrieveWalletKeyRequest, RetrieveWalletKeyResponse, SdkSettings, SendEmailOtpRequest, SendEmailOtpResponse, SendTransactionConfig, SendTransactionRequest, SessionData, SharesDeviceRequest, SharesDeviceResponse, Sign7702AuthorizationError, Sign7702AuthorizationParams, Sign7702AuthorizationResponse, Sign7702AuthorizationResult, SignMessageConfig, SignTransactionConfig, SignTypedDataError, SignTypedDataParams, SignTypedDataResponse, SignTypedDataResult, SmsSettings, SolanaChain, SolanaFundingConfig, SolanaGetBalanceParams, SolanaGetBalanceResult, SolanaGetTokenAccountsByOwnerParams, SolanaGetTokenAccountsByOwnerResult, SolanaSendTransactionParams, SolanaSendTransactionResult, SolanaSignMessageParams, SolanaSignMessageResult, SolanaSignTransactionParams, SolanaSignTransactionResult, TransactionCommitment, TransactionEncoding, TransactionUIOptions, TypedMessage, UseFundWalletInterface, UsersMePublicResponse, UsersMeRequest, UsersMeResponse, VerifiedSession, VerifyEmailOtpRequest, VerifyEmailOtpResponse, VerifyEmailOtpUser, VerifyOAuthTokenRequest, VerifyOAuthTokenResponse, VerifySiweWalletRegistrationRequest, WALLET_ERROR_CODES, Wallet, WalletChain, WalletChainType, WalletConnectConfig, WalletCreationError, WalletError, WalletErrorCode, WalletKeyRequest, WalletListEntry, WalletRegistrationNonceRequest, WalletRegistrationNonceResponse, WalletType, WalletVerifyRequest } from './types/index.mjs';
+export { AccessTokenClaims, AppConfigRequest, AppConfigResponse, AttachOAuthTokenRequest, AttachOAuthTokenResponse, AuthAppearance, AuthFlow, AuthFlowComponent, AuthLoginMethod, AuthProviderConfig, BaseGetBalanceParams, BaseGetBalanceResult, BaseGetTokenAccountsParams, BaseSendTransactionParams, BaseSendTransactionResult, BaseSignMessageParams, BaseSignMessageResult, BaseSignTransactionParams, BaseSignTransactionResult, BaseTokenClaims, BaseUIOptions, BaseWalletHooks, BlockExplorer, Chain, ChainLikeWithId, ContractUIOptions, CreateWalletResponse, DefaultFundingMethod, DeleteSessionRequest, DeleteSessionResponse, DetachOAuthTokenRequest, DeviceFingerprint, DisplayMode, EmailOtpConfig, EmailOtpFlowState, EphemeralSigner, EphemeralSignerChain, EphemeralSignerScheme, EphemeralSignerWallet, EthereumChainConfig, EthereumFundingConfig, EthereumGetBalanceParams, EthereumGetBalanceResult, EthereumGetTokenAccountsByOwnerParams, EthereumGetTokenAccountsByOwnerResult, EthereumSendTransactionParams, EthereumSendTransactionRequest, EthereumSendTransactionResult, EthereumSign7702AuthorizationParams, EthereumSign7702AuthorizationResult, EthereumSignHashParams, EthereumSignHashResult, EthereumSignMessageParams, EthereumSignMessageResult, EthereumSignTransactionParams, EthereumSignTransactionResult, EthereumSignTypedDataParams, EthereumSignTypedDataResult, EthereumSwitchChainParams, ExportKeyConfig, Factor, FlexibleTheme, FundWalletConfig, FundingEvents, FundingMethod, FundingUIConfig, GetCurrentSessionRequest, GetCurrentSessionResponse, Hex, IdentityTokenClaims, IdpProvider, IsAuthenticatedRequest, IsAuthenticatedResponse, ListEphemeralSignersResult, LoginTokenBundle, LogoutRequest, LogoutResponse, MessageTypeProperty, MessageTypes, MoonKeyThemeConfig, MoonPaySignRequest, MoonPaySignResponse, MpcKeyShares, NativeCurrency, Network, OAuthRequest, OAuthResponse, OnrampFundingSettings, PasskeyEnrollConfig, PasskeySettings, PreferredCardProvider, PrefillConfig, PresenceTokenClaims, ProvisionEphemeralSignerParams, ProvisionEphemeralSignerResult, PublicEthereumWallet, PublicSessionData, PublicWallet, RefreshSessionRequest, RefreshSessionResponse, RetrieveWalletKeyRequest, RetrieveWalletKeyResponse, RevokeEphemeralSignerParams, RpcConfig, RpcUrls, SdkSettings, SendEmailOtpRequest, SendEmailOtpResponse, SendTransactionConfig, SendTransactionRequest, SessionData, SharesDeviceRequest, SharesDeviceResponse, Sign7702AuthorizationError, Sign7702AuthorizationParams, Sign7702AuthorizationResponse, Sign7702AuthorizationResult, SignMessageConfig, SignTransactionConfig, SignTypedDataError, SignTypedDataParams, SignTypedDataResponse, SignTypedDataResult, SmsSettings, SolanaChain, SolanaFundingConfig, SolanaGetBalanceParams, SolanaGetBalanceResult, SolanaGetTokenAccountsByOwnerParams, SolanaGetTokenAccountsByOwnerResult, SolanaSendTransactionParams, SolanaSendTransactionResult, SolanaSignMessageParams, SolanaSignMessageResult, SolanaSignTransactionParams, SolanaSignTransactionResult, TransactionCommitment, TransactionEncoding, TransactionUIOptions, TypedMessage, UseFundWalletInterface, UsersMePublicResponse, UsersMeRequest, UsersMeResponse, VerifiedSession, VerifyEmailOtpRequest, VerifyEmailOtpResponse, VerifyEmailOtpUser, VerifyOAuthTokenRequest, VerifyOAuthTokenResponse, VerifySiweWalletRegistrationRequest, WALLET_ERROR_CODES, Wallet, WalletChain, WalletChainType, WalletConnectConfig, WalletCreationError, WalletError, WalletErrorCode, WalletKeyRequest, WalletListEntry, WalletRegistrationNonceRequest, WalletRegistrationNonceResponse, WalletType, WalletVerifyRequest } from './types/index.mjs';
 export { getIframeOrigin, getIframeUrl, getMoonKeyApiUrl } from './utils/index.mjs';
-export { F as FORWARDED_ERROR_FIELDS, P as PostMessageClient, a as PostMessageMethod, b as PostMessageServer, c as PostMessageType } from './post-message-CmgAfkOS.mjs';
-export { B as BlockExplorer, C as Chain, a as ChainLikeWithId, E as EthereumChainConfig, N as NativeCurrency, R as RpcConfig, b as RpcUrls } from './chain-C9dvKXUY.mjs';
+export { F as FORWARDED_ERROR_FIELDS, P as PostMessageClient, a as PostMessageMethod, b as PostMessageServer, c as PostMessageType } from './post-message-Z6cLf0mS.mjs';

package/dist/index.d.ts

@@ -1,4 +1,3 @@
-export { AccessTokenClaims, AppConfigRequest, AppConfigResponse, AttachOAuthTokenRequest, AttachOAuthTokenResponse, AuthAppearance, AuthFlow, AuthFlowComponent, AuthLoginMethod, AuthProviderConfig, BaseGetBalanceParams, BaseGetBalanceResult, BaseGetTokenAccountsParams, BaseSendTransactionParams, BaseSendTransactionResult, BaseSignMessageParams, BaseSignMessageResult, BaseSignTransactionParams, BaseSignTransactionResult, BaseTokenClaims, BaseUIOptions, BaseWalletHooks, ContractUIOptions, CreateWalletResponse, DefaultFundingMethod, DeleteSessionRequest, DeleteSessionResponse, DetachOAuthTokenRequest, DeviceFingerprint, DisplayMode, EmailOtpConfig, EmailOtpFlowState, EthereumFundingConfig, EthereumGetBalanceParams, EthereumGetBalanceResult, EthereumGetTokenAccountsByOwnerParams, EthereumGetTokenAccountsByOwnerResult, EthereumSendTransactionParams, EthereumSendTransactionRequest, EthereumSendTransactionResult, EthereumSign7702AuthorizationParams, EthereumSign7702AuthorizationResult, EthereumSignHashParams, EthereumSignHashResult, EthereumSignMessageParams, EthereumSignMessageResult, EthereumSignTransactionParams, EthereumSignTransactionResult, EthereumSignTypedDataParams, EthereumSignTypedDataResult, EthereumSwitchChainParams, ExportKeyConfig, Factor, FlexibleTheme, FundWalletConfig, FundingEvents, FundingMethod, FundingUIConfig, GetCurrentSessionRequest, GetCurrentSessionResponse, Hex, IdentityTokenClaims, IdpProvider, IsAuthenticatedRequest, IsAuthenticatedResponse, LoginTokenBundle, LogoutRequest, LogoutResponse, MessageTypeProperty, MessageTypes, MoonKeyThemeConfig, MoonPaySignRequest, MoonPaySignResponse, MpcKeyShares, Network, OAuthRequest, OAuthResponse, OnrampFundingSettings, PasskeyEnrollConfig, PasskeySettings, PreferredCardProvider, PrefillConfig, PresenceTokenClaims, PublicEthereumWallet, PublicSessionData, PublicWallet, RefreshSessionRequest, RefreshSessionResponse, RetrieveWalletKeyRequest, RetrieveWalletKeyResponse, SdkSettings, SendEmailOtpRequest, SendEmailOtpResponse, SendTransactionConfig, SendTransactionRequest, SessionData, SharesDeviceRequest, SharesDeviceResponse, Sign7702AuthorizationError, Sign7702AuthorizationParams, Sign7702AuthorizationResponse, Sign7702AuthorizationResult, SignMessageConfig, SignTransactionConfig, SignTypedDataError, SignTypedDataParams, SignTypedDataResponse, SignTypedDataResult, SmsSettings, SolanaChain, SolanaFundingConfig, SolanaGetBalanceParams, SolanaGetBalanceResult, SolanaGetTokenAccountsByOwnerParams, SolanaGetTokenAccountsByOwnerResult, SolanaSendTransactionParams, SolanaSendTransactionResult, SolanaSignMessageParams, SolanaSignMessageResult, SolanaSignTransactionParams, SolanaSignTransactionResult, TransactionCommitment, TransactionEncoding, TransactionUIOptions, TypedMessage, UseFundWalletInterface, UsersMePublicResponse, UsersMeRequest, UsersMeResponse, VerifiedSession, VerifyEmailOtpRequest, VerifyEmailOtpResponse, VerifyEmailOtpUser, VerifyOAuthTokenRequest, VerifyOAuthTokenResponse, VerifySiweWalletRegistrationRequest, WALLET_ERROR_CODES, Wallet, WalletChain, WalletChainType, WalletConnectConfig, WalletCreationError, WalletError, WalletErrorCode, WalletKeyRequest, WalletListEntry, WalletRegistrationNonceRequest, WalletRegistrationNonceResponse, WalletType, WalletVerifyRequest } from './types/index.js';
+export { AccessTokenClaims, AppConfigRequest, AppConfigResponse, AttachOAuthTokenRequest, AttachOAuthTokenResponse, AuthAppearance, AuthFlow, AuthFlowComponent, AuthLoginMethod, AuthProviderConfig, BaseGetBalanceParams, BaseGetBalanceResult, BaseGetTokenAccountsParams, BaseSendTransactionParams, BaseSendTransactionResult, BaseSignMessageParams, BaseSignMessageResult, BaseSignTransactionParams, BaseSignTransactionResult, BaseTokenClaims, BaseUIOptions, BaseWalletHooks, BlockExplorer, Chain, ChainLikeWithId, ContractUIOptions, CreateWalletResponse, DefaultFundingMethod, DeleteSessionRequest, DeleteSessionResponse, DetachOAuthTokenRequest, DeviceFingerprint, DisplayMode, EmailOtpConfig, EmailOtpFlowState, EphemeralSigner, EphemeralSignerChain, EphemeralSignerScheme, EphemeralSignerWallet, EthereumChainConfig, EthereumFundingConfig, EthereumGetBalanceParams, EthereumGetBalanceResult, EthereumGetTokenAccountsByOwnerParams, EthereumGetTokenAccountsByOwnerResult, EthereumSendTransactionParams, EthereumSendTransactionRequest, EthereumSendTransactionResult, EthereumSign7702AuthorizationParams, EthereumSign7702AuthorizationResult, EthereumSignHashParams, EthereumSignHashResult, EthereumSignMessageParams, EthereumSignMessageResult, EthereumSignTransactionParams, EthereumSignTransactionResult, EthereumSignTypedDataParams, EthereumSignTypedDataResult, EthereumSwitchChainParams, ExportKeyConfig, Factor, FlexibleTheme, FundWalletConfig, FundingEvents, FundingMethod, FundingUIConfig, GetCurrentSessionRequest, GetCurrentSessionResponse, Hex, IdentityTokenClaims, IdpProvider, IsAuthenticatedRequest, IsAuthenticatedResponse, ListEphemeralSignersResult, LoginTokenBundle, LogoutRequest, LogoutResponse, MessageTypeProperty, MessageTypes, MoonKeyThemeConfig, MoonPaySignRequest, MoonPaySignResponse, MpcKeyShares, NativeCurrency, Network, OAuthRequest, OAuthResponse, OnrampFundingSettings, PasskeyEnrollConfig, PasskeySettings, PreferredCardProvider, PrefillConfig, PresenceTokenClaims, ProvisionEphemeralSignerParams, ProvisionEphemeralSignerResult, PublicEthereumWallet, PublicSessionData, PublicWallet, RefreshSessionRequest, RefreshSessionResponse, RetrieveWalletKeyRequest, RetrieveWalletKeyResponse, RevokeEphemeralSignerParams, RpcConfig, RpcUrls, SdkSettings, SendEmailOtpRequest, SendEmailOtpResponse, SendTransactionConfig, SendTransactionRequest, SessionData, SharesDeviceRequest, SharesDeviceResponse, Sign7702AuthorizationError, Sign7702AuthorizationParams, Sign7702AuthorizationResponse, Sign7702AuthorizationResult, SignMessageConfig, SignTransactionConfig, SignTypedDataError, SignTypedDataParams, SignTypedDataResponse, SignTypedDataResult, SmsSettings, SolanaChain, SolanaFundingConfig, SolanaGetBalanceParams, SolanaGetBalanceResult, SolanaGetTokenAccountsByOwnerParams, SolanaGetTokenAccountsByOwnerResult, SolanaSendTransactionParams, SolanaSendTransactionResult, SolanaSignMessageParams, SolanaSignMessageResult, SolanaSignTransactionParams, SolanaSignTransactionResult, TransactionCommitment, TransactionEncoding, TransactionUIOptions, TypedMessage, UseFundWalletInterface, UsersMePublicResponse, UsersMeRequest, UsersMeResponse, VerifiedSession, VerifyEmailOtpRequest, VerifyEmailOtpResponse, VerifyEmailOtpUser, VerifyOAuthTokenRequest, VerifyOAuthTokenResponse, VerifySiweWalletRegistrationRequest, WALLET_ERROR_CODES, Wallet, WalletChain, WalletChainType, WalletConnectConfig, WalletCreationError, WalletError, WalletErrorCode, WalletKeyRequest, WalletListEntry, WalletRegistrationNonceRequest, WalletRegistrationNonceResponse, WalletType, WalletVerifyRequest } from './types/index.js';
 export { getIframeOrigin, getIframeUrl, getMoonKeyApiUrl } from './utils/index.js';
-export { F as FORWARDED_ERROR_FIELDS, P as PostMessageClient, a as PostMessageMethod, b as PostMessageServer, c as PostMessageType } from './post-message-CmgAfkOS.js';
-export { B as BlockExplorer, C as Chain, a as ChainLikeWithId, E as EthereumChainConfig, N as NativeCurrency, R as RpcConfig, b as RpcUrls } from './chain-C9dvKXUY.js';
+export { F as FORWARDED_ERROR_FIELDS, P as PostMessageClient, a as PostMessageMethod, b as PostMessageServer, c as PostMessageType } from './post-message-Z6cLf0mS.js';

package/dist/index.js

@@ -177,6 +177,20 @@ var PostMessageMethod = {
   // dispatcher boring.
   SIGN_HASH: "SIGN_HASH",
   SIGN_7702_AUTHORIZATION: "SIGN_7702_AUTHORIZATION",
+  // Provision a SES (Secure Ephemeral Signer) over one or more of the
+  // user's MPC wallets. Iframe verifies the Nitro attestation, decrypts
+  // the selected keyshares, HPKE-seals them to the verified enclave
+  // pubkey, and returns a freshly-generated Ed25519 signer keypair.
+  // MoonX never persists the private key — the parent must hand it to
+  // the user immediately.
+  PROVISION_EPHEMERAL_SIGNER: "PROVISION_EPHEMERAL_SIGNER",
+  // List the user's active provisioned ephemeral signers from the
+  // wallets backend. Read-only; doesn't touch SES or the enclave.
+  LIST_EPHEMERAL_SIGNERS: "LIST_EPHEMERAL_SIGNERS",
+  // Soft-revoke a previously-provisioned ephemeral signer. The wallets
+  // backend updates revoked_at locally and forwards the revoke to SES
+  // so the enclave drops the policy.
+  REVOKE_EPHEMERAL_SIGNER: "REVOKE_EPHEMERAL_SIGNER",
   VERIFY_EMAIL_OTP: "VERIFY_EMAIL_OTP",
   VERIFY_OAUTH: "VERIFY_OAUTH",
   START_OAUTH: "START_OAUTH",

package/dist/index.mjs

@@ -14,7 +14,7 @@ import {
   PostMessageMethod,
   PostMessageServer,
   PostMessageType
-} from "./chunk-VVL65GIB.mjs";
+} from "./chunk-JU5MWLXH.mjs";
 import {
   getMoonKeyApiUrl
 } from "./chunk-GQKIA37O.mjs";

package/dist/{interfaces-Bm7fGOAI.d.ts → interfaces-1vfik3Ef.d.ts}

@@ -1,4 +1,4 @@
-import { c as PostMessageType, a as PostMessageMethod } from './post-message-CmgAfkOS.js';
+import { c as PostMessageType, a as PostMessageMethod } from './post-message-Z6cLf0mS.js';
 
 /**
  * Transport — the bidirectional postMessage channel between the parent
@@ -87,6 +87,29 @@ interface PasskeyAssertor {
     assertForServer(opts: {
         optionsJSON: WebAuthnRequestOptions;
     }): Promise<WebAuthnAssertionResponse>;
+    /**
+     * Internal-use variant of assertForServer. Runs the same WebAuthn
+     * ceremony and returns the same sanitized assertion (userHandle
+     * stripped on the platform boundary), but ALSO surfaces the
+     * captured userHandle + credential id separately for the SDK
+     * orchestrator's downstream postMessage payload — the iframe needs
+     * the userHandle bytes to do AES-GCM unwrap of the DEK after the
+     * presence ceremony mints the scoped tokens.
+     *
+     * DEK hygiene boundary: the sanitized `response` field still has
+     * `response.userHandle === undefined`. The separate
+     * `userHandleB64url` field stays inside the orchestrator and is
+     * postMessaged to the iframe — never sent over the network to the
+     * presence-verify server call. The strip is enforced by the impl;
+     * the separate surfacing is opt-in via this method.
+     */
+    assertForInternalPresence(opts: {
+        optionsJSON: WebAuthnRequestOptions;
+    }): Promise<{
+        response: WebAuthnAssertionResponse;
+        userHandleB64url: string;
+        credentialIdB64url: string;
+    }>;
 }
 /**
  * Subset of `PublicKeyCredentialRequestOptionsJSON` we forward to the

package/dist/{interfaces-CYtJHALV.d.mts → interfaces-BdIeMGGD.d.mts}

@@ -1,4 +1,4 @@
-import { c as PostMessageType, a as PostMessageMethod } from './post-message-CmgAfkOS.mjs';
+import { c as PostMessageType, a as PostMessageMethod } from './post-message-Z6cLf0mS.mjs';
 
 /**
  * Transport — the bidirectional postMessage channel between the parent
@@ -87,6 +87,29 @@ interface PasskeyAssertor {
     assertForServer(opts: {
         optionsJSON: WebAuthnRequestOptions;
     }): Promise<WebAuthnAssertionResponse>;
+    /**
+     * Internal-use variant of assertForServer. Runs the same WebAuthn
+     * ceremony and returns the same sanitized assertion (userHandle
+     * stripped on the platform boundary), but ALSO surfaces the
+     * captured userHandle + credential id separately for the SDK
+     * orchestrator's downstream postMessage payload — the iframe needs
+     * the userHandle bytes to do AES-GCM unwrap of the DEK after the
+     * presence ceremony mints the scoped tokens.
+     *
+     * DEK hygiene boundary: the sanitized `response` field still has
+     * `response.userHandle === undefined`. The separate
+     * `userHandleB64url` field stays inside the orchestrator and is
+     * postMessaged to the iframe — never sent over the network to the
+     * presence-verify server call. The strip is enforced by the impl;
+     * the separate surfacing is opt-in via this method.
+     */
+    assertForInternalPresence(opts: {
+        optionsJSON: WebAuthnRequestOptions;
+    }): Promise<{
+        response: WebAuthnAssertionResponse;
+        userHandleB64url: string;
+        credentialIdB64url: string;
+    }>;
 }
 /**
  * Subset of `PublicKeyCredentialRequestOptionsJSON` we forward to the

package/dist/lib/index.d.mts

@@ -1,6 +1,6 @@
-export { C as CachedAssertion, c as clearParentAssertCache, g as generatePasskeyUserId, a as getAssertCacheTtlMs, r as readParentAssertCache, s as setAssertCacheTtlMs, w as withClearOnFailure, b as writeParentAssertCache } from '../passkey-cache-B9PT3AWX.mjs';
+export { C as CachedAssertion, g as generatePasskeyUserId } from '../passkey-cache-WnDFQ-v4.mjs';
 export { a as PasskeyFormFactor, P as PasskeyMetadata, b as PasskeyMetadataInput, f as formatPasskeyLabel, r as resolvePasskeyMetadata } from '../passkey-metadata-QqFF2SWQ.mjs';
-import { C as Chain } from '../chain-C9dvKXUY.mjs';
+import { Chain, WalletChain } from '../types/index.mjs';
 import { SiweMessage } from 'siwe';
 import { Connection, PublicKey } from '@solana/web3.js';
 
@@ -389,6 +389,36 @@ declare const serializeEthereumTransaction: (transaction: any) => Promise<string
 declare const broadcastEthereumRaw: (rpcUrl: string, signedSerialized: string) => Promise<string>;
 declare const broadcastSolanaSigned: (rpcUrl: string, signedBase58: string) => Promise<string>;
 
+/**
+ * Canonical algorithm name written to `app_user_wallet_keyshares.algorithm`.
+ *
+ * Matches Sodot's Vertex API path segment exactly:
+ *
+ *   ethereum → "ecdsa"
+ *   solana   → "exportable-ed25519"
+ *
+ * `Algorithm.name.toLowerCase()` from the Sodot SDK would give
+ * `"exportableed25519"` (no hyphen) for Solana, which doesn't match
+ * anything else in the stack and causes sign dispatch to fall through
+ * to the default error branch. Use this helper instead.
+ */
+declare function canonicalAlgorithmFor(chain: WalletChain): string;
+/**
+ * Parse the canonical SES wire form of a derivation path into the
+ * integer array the Sodot MPC client expects.
+ *
+ *   "m"                       → [] (root — imports + all
+ *                                   exportable-ed25519 wallets)
+ *   "m/44/60/0/0/0"           → [44, 60, 0, 0, 0]
+ *   ""                        → [] (legacy fallback; same as "m")
+ *
+ * Stays byte-for-byte identical to the Go-side `ParseDerivationPath`
+ * in `apps/wallets/internal/service/wallet.go` — both halves of the
+ * MPC ceremony have to agree on the path or Sodot returns "End-to-end
+ * decryption failed" with no further hint as to which input mismatched.
+ */
+declare function parseDerivationPath(path: string): Uint32Array;
+
 /**
  * Convert any wire representation of a byte array back into Uint8Array.
  * Pass-through for actual `Uint8Array` and regular `number[]`. Used
@@ -407,4 +437,4 @@ declare const arrayLikeToBytes: (value: unknown) => Uint8Array;
  */
 declare const bs58ToBytes: (value: unknown) => Promise<Uint8Array>;
 
-export { type BuildUrlConfig, DEFAULT_AUTH_URL, EthereumSiweMessage, type EthereumSiweMessageProps, type EvmTransactionInput, type EvmTxPrepWallet, type ManualSiweMessageProps, SiwsMessage, SolanaTransactionParser, type VerifyIdTokenResponse, arrayLikeToBytes, authState, broadcastEthereumRaw, broadcastSolanaSigned, bs58ToBytes, buildUrl, createManualSiweMessage, estimateEvmGas, estimateEvmGasReserve, fromB64url, getChainById, getDefaultChain, getEvmGasPrice, getEvmMaxPriorityFeePerGas, getEvmNonce, getInstructionsForHTML, getRpcUrl, getSOLTransfersFromInstructions, getTransferInfoFromInstructions, isChainSupported, prepareEvmSendTransaction, prepareEvmSignTransaction, resolveEvmChain, sanitizeUserData, serializeEthereumTransaction, setChainRpcUrl, toB64url, validateChainConfig, verifyIdToken };
+export { type BuildUrlConfig, DEFAULT_AUTH_URL, EthereumSiweMessage, type EthereumSiweMessageProps, type EvmTransactionInput, type EvmTxPrepWallet, type ManualSiweMessageProps, SiwsMessage, SolanaTransactionParser, type VerifyIdTokenResponse, arrayLikeToBytes, authState, broadcastEthereumRaw, broadcastSolanaSigned, bs58ToBytes, buildUrl, canonicalAlgorithmFor, createManualSiweMessage, estimateEvmGas, estimateEvmGasReserve, fromB64url, getChainById, getDefaultChain, getEvmGasPrice, getEvmMaxPriorityFeePerGas, getEvmNonce, getInstructionsForHTML, getRpcUrl, getSOLTransfersFromInstructions, getTransferInfoFromInstructions, isChainSupported, parseDerivationPath, prepareEvmSendTransaction, prepareEvmSignTransaction, resolveEvmChain, sanitizeUserData, serializeEthereumTransaction, setChainRpcUrl, toB64url, validateChainConfig, verifyIdToken };

package/dist/lib/index.d.ts

@@ -1,6 +1,6 @@
-export { C as CachedAssertion, c as clearParentAssertCache, g as generatePasskeyUserId, a as getAssertCacheTtlMs, r as readParentAssertCache, s as setAssertCacheTtlMs, w as withClearOnFailure, b as writeParentAssertCache } from '../passkey-cache-B9PT3AWX.js';
+export { C as CachedAssertion, g as generatePasskeyUserId } from '../passkey-cache-WnDFQ-v4.js';
 export { a as PasskeyFormFactor, P as PasskeyMetadata, b as PasskeyMetadataInput, f as formatPasskeyLabel, r as resolvePasskeyMetadata } from '../passkey-metadata-QqFF2SWQ.js';
-import { C as Chain } from '../chain-C9dvKXUY.js';
+import { Chain, WalletChain } from '../types/index.js';
 import { SiweMessage } from 'siwe';
 import { Connection, PublicKey } from '@solana/web3.js';
 
@@ -389,6 +389,36 @@ declare const serializeEthereumTransaction: (transaction: any) => Promise<string
 declare const broadcastEthereumRaw: (rpcUrl: string, signedSerialized: string) => Promise<string>;
 declare const broadcastSolanaSigned: (rpcUrl: string, signedBase58: string) => Promise<string>;
 
+/**
+ * Canonical algorithm name written to `app_user_wallet_keyshares.algorithm`.
+ *
+ * Matches Sodot's Vertex API path segment exactly:
+ *
+ *   ethereum → "ecdsa"
+ *   solana   → "exportable-ed25519"
+ *
+ * `Algorithm.name.toLowerCase()` from the Sodot SDK would give
+ * `"exportableed25519"` (no hyphen) for Solana, which doesn't match
+ * anything else in the stack and causes sign dispatch to fall through
+ * to the default error branch. Use this helper instead.
+ */
+declare function canonicalAlgorithmFor(chain: WalletChain): string;
+/**
+ * Parse the canonical SES wire form of a derivation path into the
+ * integer array the Sodot MPC client expects.
+ *
+ *   "m"                       → [] (root — imports + all
+ *                                   exportable-ed25519 wallets)
+ *   "m/44/60/0/0/0"           → [44, 60, 0, 0, 0]
+ *   ""                        → [] (legacy fallback; same as "m")
+ *
+ * Stays byte-for-byte identical to the Go-side `ParseDerivationPath`
+ * in `apps/wallets/internal/service/wallet.go` — both halves of the
+ * MPC ceremony have to agree on the path or Sodot returns "End-to-end
+ * decryption failed" with no further hint as to which input mismatched.
+ */
+declare function parseDerivationPath(path: string): Uint32Array;
+
 /**
  * Convert any wire representation of a byte array back into Uint8Array.
  * Pass-through for actual `Uint8Array` and regular `number[]`. Used
@@ -407,4 +437,4 @@ declare const arrayLikeToBytes: (value: unknown) => Uint8Array;
  */
 declare const bs58ToBytes: (value: unknown) => Promise<Uint8Array>;
 
-export { type BuildUrlConfig, DEFAULT_AUTH_URL, EthereumSiweMessage, type EthereumSiweMessageProps, type EvmTransactionInput, type EvmTxPrepWallet, type ManualSiweMessageProps, SiwsMessage, SolanaTransactionParser, type VerifyIdTokenResponse, arrayLikeToBytes, authState, broadcastEthereumRaw, broadcastSolanaSigned, bs58ToBytes, buildUrl, createManualSiweMessage, estimateEvmGas, estimateEvmGasReserve, fromB64url, getChainById, getDefaultChain, getEvmGasPrice, getEvmMaxPriorityFeePerGas, getEvmNonce, getInstructionsForHTML, getRpcUrl, getSOLTransfersFromInstructions, getTransferInfoFromInstructions, isChainSupported, prepareEvmSendTransaction, prepareEvmSignTransaction, resolveEvmChain, sanitizeUserData, serializeEthereumTransaction, setChainRpcUrl, toB64url, validateChainConfig, verifyIdToken };
+export { type BuildUrlConfig, DEFAULT_AUTH_URL, EthereumSiweMessage, type EthereumSiweMessageProps, type EvmTransactionInput, type EvmTxPrepWallet, type ManualSiweMessageProps, SiwsMessage, SolanaTransactionParser, type VerifyIdTokenResponse, arrayLikeToBytes, authState, broadcastEthereumRaw, broadcastSolanaSigned, bs58ToBytes, buildUrl, canonicalAlgorithmFor, createManualSiweMessage, estimateEvmGas, estimateEvmGasReserve, fromB64url, getChainById, getDefaultChain, getEvmGasPrice, getEvmMaxPriorityFeePerGas, getEvmNonce, getInstructionsForHTML, getRpcUrl, getSOLTransfersFromInstructions, getTransferInfoFromInstructions, isChainSupported, parseDerivationPath, prepareEvmSendTransaction, prepareEvmSignTransaction, resolveEvmChain, sanitizeUserData, serializeEthereumTransaction, setChainRpcUrl, toB64url, validateChainConfig, verifyIdToken };

package/dist/lib/index.js

@@ -40,14 +40,13 @@ __export(lib_exports, {
   broadcastSolanaSigned: () => broadcastSolanaSigned,
   bs58ToBytes: () => bs58ToBytes,
   buildUrl: () => buildUrl,
-  clearParentAssertCache: () => clearParentAssertCache,
+  canonicalAlgorithmFor: () => canonicalAlgorithmFor,
   createManualSiweMessage: () => createManualSiweMessage,
   estimateEvmGas: () => estimateEvmGas,
   estimateEvmGasReserve: () => estimateEvmGasReserve,
   formatPasskeyLabel: () => formatPasskeyLabel,
   fromB64url: () => fromB64url,
   generatePasskeyUserId: () => generatePasskeyUserId,
-  getAssertCacheTtlMs: () => getAssertCacheTtlMs,
   getChainById: () => getChainById,
   getDefaultChain: () => getDefaultChain,
   getEvmGasPrice: () => getEvmGasPrice,
@@ -58,20 +57,17 @@ __export(lib_exports, {
   getSOLTransfersFromInstructions: () => getSOLTransfersFromInstructions,
   getTransferInfoFromInstructions: () => getTransferInfoFromInstructions,
   isChainSupported: () => isChainSupported,
+  parseDerivationPath: () => parseDerivationPath,
   prepareEvmSendTransaction: () => prepareEvmSendTransaction,
   prepareEvmSignTransaction: () => prepareEvmSignTransaction,
-  readParentAssertCache: () => readParentAssertCache,
   resolveEvmChain: () => resolveEvmChain,
   resolvePasskeyMetadata: () => resolvePasskeyMetadata,
   sanitizeUserData: () => sanitizeUserData,
   serializeEthereumTransaction: () => serializeEthereumTransaction,
-  setAssertCacheTtlMs: () => setAssertCacheTtlMs,
   setChainRpcUrl: () => setChainRpcUrl,
   toB64url: () => toB64url,
   validateChainConfig: () => validateChainConfig,
-  verifyIdToken: () => verifyIdToken,
-  withClearOnFailure: () => withClearOnFailure,
-  writeParentAssertCache: () => writeParentAssertCache
+  verifyIdToken: () => verifyIdToken
 });
 module.exports = __toCommonJS(lib_exports);
 
@@ -190,39 +186,6 @@ var toB64url = (bytes) => {
 };
 
 // src/lib/passkey/passkey-cache.ts
-var cacheTtlMs = 0;
-var cache = null;
-var setAssertCacheTtlMs = (ms) => {
-  cacheTtlMs = Math.max(0, Math.floor(ms));
-  if (cacheTtlMs === 0) {
-    cache = null;
-  }
-};
-var getAssertCacheTtlMs = () => cacheTtlMs;
-var clearParentAssertCache = () => {
-  cache = null;
-};
-var readParentAssertCache = () => {
-  if (cacheTtlMs <= 0) return null;
-  if (!cache) return null;
-  if (Date.now() - cache.ts >= cacheTtlMs) return null;
-  return {
-    userHandleB64url: cache.userHandleB64url,
-    credentialIdB64url: cache.credentialIdB64url
-  };
-};
-var writeParentAssertCache = (entry) => {
-  if (cacheTtlMs <= 0) return;
-  cache = { ...entry, ts: Date.now() };
-};
-var withClearOnFailure = async (fn) => {
-  try {
-    return await fn();
-  } catch (error) {
-    clearParentAssertCache();
-    throw error;
-  }
-};
 var generatePasskeyUserId = () => {
   const bytes = crypto.getRandomValues(new Uint8Array(32));
   return { userIdB64url: toB64url(bytes), userIdBytes: bytes };
@@ -1548,6 +1511,23 @@ var broadcastSolanaSigned = async (rpcUrl, signedBase58) => {
   return result.result;
 };
 
+// src/lib/wallet-algorithm.ts
+function canonicalAlgorithmFor(chain) {
+  switch (chain) {
+    case "ethereum":
+      return "ecdsa";
+    case "solana":
+      return "exportable-ed25519";
+    default:
+      throw new Error(`No canonical algorithm for chain: ${chain}`);
+  }
+}
+function parseDerivationPath(path) {
+  if (!path || path === "m") return new Uint32Array([]);
+  const rest = path.startsWith("m/") ? path.slice(2) : path;
+  return new Uint32Array(rest.split("/").map((s) => Number(s)));
+}
+
 // src/lib/wire-codec.ts
 var arrayLikeToBytes = (value) => {
   if (value instanceof Uint8Array) return value;
@@ -1587,14 +1567,13 @@ var bs58ToBytes = async (value) => {
   broadcastSolanaSigned,
   bs58ToBytes,
   buildUrl,
-  clearParentAssertCache,
+  canonicalAlgorithmFor,
   createManualSiweMessage,
   estimateEvmGas,
   estimateEvmGasReserve,
   formatPasskeyLabel,
   fromB64url,
   generatePasskeyUserId,
-  getAssertCacheTtlMs,
   getChainById,
   getDefaultChain,
   getEvmGasPrice,
@@ -1605,18 +1584,15 @@ var bs58ToBytes = async (value) => {
   getSOLTransfersFromInstructions,
   getTransferInfoFromInstructions,
   isChainSupported,
+  parseDerivationPath,
   prepareEvmSendTransaction,
   prepareEvmSignTransaction,
-  readParentAssertCache,
   resolveEvmChain,
   resolvePasskeyMetadata,
   sanitizeUserData,
   serializeEthereumTransaction,
-  setAssertCacheTtlMs,
   setChainRpcUrl,
   toB64url,
   validateChainConfig,
-  verifyIdToken,
-  withClearOnFailure,
-  writeParentAssertCache
+  verifyIdToken
 });

package/dist/lib/index.mjs

@@ -9,14 +9,13 @@ import {
   broadcastSolanaSigned,
   bs58ToBytes,
   buildUrl,
-  clearParentAssertCache,
+  canonicalAlgorithmFor,
   createManualSiweMessage,
   estimateEvmGas,
   estimateEvmGasReserve,
   formatPasskeyLabel,
   fromB64url,
   generatePasskeyUserId,
-  getAssertCacheTtlMs,
   getChainById,
   getDefaultChain,
   getEvmGasPrice,
@@ -27,21 +26,18 @@ import {
   getSOLTransfersFromInstructions,
   getTransferInfoFromInstructions,
   isChainSupported,
+  parseDerivationPath,
   prepareEvmSendTransaction,
   prepareEvmSignTransaction,
-  readParentAssertCache,
   resolveEvmChain,
   resolvePasskeyMetadata,
   sanitizeUserData,
   serializeEthereumTransaction,
-  setAssertCacheTtlMs,
   setChainRpcUrl,
   toB64url,
   validateChainConfig,
-  verifyIdToken,
-  withClearOnFailure,
-  writeParentAssertCache
-} from "../chunk-CDT4MC7S.mjs";
+  verifyIdToken
+} from "../chunk-I56GRKAG.mjs";
 import "../chunk-GQKIA37O.mjs";
 export {
   DEFAULT_AUTH_URL,
@@ -54,14 +50,13 @@ export {
   broadcastSolanaSigned,
   bs58ToBytes,
   buildUrl,
-  clearParentAssertCache,
+  canonicalAlgorithmFor,
   createManualSiweMessage,
   estimateEvmGas,
   estimateEvmGasReserve,
   formatPasskeyLabel,
   fromB64url,
   generatePasskeyUserId,
-  getAssertCacheTtlMs,
   getChainById,
   getDefaultChain,
   getEvmGasPrice,
@@ -72,18 +67,15 @@ export {
   getSOLTransfersFromInstructions,
   getTransferInfoFromInstructions,
   isChainSupported,
+  parseDerivationPath,
   prepareEvmSendTransaction,
   prepareEvmSignTransaction,
-  readParentAssertCache,
   resolveEvmChain,
   resolvePasskeyMetadata,
   sanitizeUserData,
   serializeEthereumTransaction,
-  setAssertCacheTtlMs,
   setChainRpcUrl,
   toB64url,
   validateChainConfig,
-  verifyIdToken,
-  withClearOnFailure,
-  writeParentAssertCache
+  verifyIdToken
 };

package/dist/passkey-cache-WnDFQ-v4.d.mts

@@ -0,0 +1,26 @@
+interface CachedAssertion {
+    userHandleB64url: string;
+    credentialIdB64url: string;
+}
+/**
+ * Generate fresh user.id bytes for a new WebAuthn credential. The
+ * caller overrides `options.user.id` with these bytes before
+ * navigator.credentials.create so the authenticator persists them as
+ * the credential's user.id; on every subsequent assertion they come
+ * back as response.userHandle and serve as the AES-GCM key for that
+ * credential's DEK wrap.
+ *
+ * Returns the bytes both as base64url (what the WebAuthn options
+ * accept and what we ship over postMessage) and as raw bytes (for
+ * any caller that prefers direct binary).
+ *
+ * Requires a working `crypto.getRandomValues`. On RN this is provided
+ * by the `react-native-get-random-values` polyfill that the SDK's
+ * docs ask consumers to import at app entry.
+ */
+declare const generatePasskeyUserId: () => {
+    userIdB64url: string;
+    userIdBytes: Uint8Array;
+};
+
+export { type CachedAssertion as C, generatePasskeyUserId as g };

package/dist/passkey-cache-WnDFQ-v4.d.ts

@@ -0,0 +1,26 @@
+interface CachedAssertion {
+    userHandleB64url: string;
+    credentialIdB64url: string;
+}
+/**
+ * Generate fresh user.id bytes for a new WebAuthn credential. The
+ * caller overrides `options.user.id` with these bytes before
+ * navigator.credentials.create so the authenticator persists them as
+ * the credential's user.id; on every subsequent assertion they come
+ * back as response.userHandle and serve as the AES-GCM key for that
+ * credential's DEK wrap.
+ *
+ * Returns the bytes both as base64url (what the WebAuthn options
+ * accept and what we ship over postMessage) and as raw bytes (for
+ * any caller that prefers direct binary).
+ *
+ * Requires a working `crypto.getRandomValues`. On RN this is provided
+ * by the `react-native-get-random-values` polyfill that the SDK's
+ * docs ask consumers to import at app entry.
+ */
+declare const generatePasskeyUserId: () => {
+    userIdB64url: string;
+    userIdBytes: Uint8Array;
+};
+
+export { type CachedAssertion as C, generatePasskeyUserId as g };

package/dist/{post-message-CmgAfkOS.d.mts → post-message-Z6cLf0mS.d.mts}

@@ -31,6 +31,9 @@ declare const PostMessageMethod: {
     readonly SIGN_TYPED_DATA: "SIGN_TYPED_DATA";
     readonly SIGN_HASH: "SIGN_HASH";
     readonly SIGN_7702_AUTHORIZATION: "SIGN_7702_AUTHORIZATION";
+    readonly PROVISION_EPHEMERAL_SIGNER: "PROVISION_EPHEMERAL_SIGNER";
+    readonly LIST_EPHEMERAL_SIGNERS: "LIST_EPHEMERAL_SIGNERS";
+    readonly REVOKE_EPHEMERAL_SIGNER: "REVOKE_EPHEMERAL_SIGNER";
     readonly VERIFY_EMAIL_OTP: "VERIFY_EMAIL_OTP";
     readonly VERIFY_OAUTH: "VERIFY_OAUTH";
     readonly START_OAUTH: "START_OAUTH";