@moon-x/core 0.3.0 → 0.5.0

package/dist/sdk/index.d.mts

@@ -1,16 +1,14 @@
-import { T as Transport, P as PasskeyAssertor, K as KvStorage } from '../interfaces-CYtJHALV.mjs';
-export { O as OAuthOpener, a as PlatformImpls, W as WebAuthnAssertionResponse, b as WebAuthnRequestOptions } from '../interfaces-CYtJHALV.mjs';
-import { C as CachedAssertion } from '../passkey-cache-B9PT3AWX.mjs';
-import { EthereumSignMessageParams, EthereumSignMessageResult, EthereumSignTransactionParams, EthereumSignTransactionResult, EthereumSignTypedDataParams, EthereumSignTypedDataResult, EthereumSignHashParams, EthereumSignHashResult, EthereumSign7702AuthorizationParams, EthereumSign7702AuthorizationResult, EthereumSendTransactionParams, EthereumSendTransactionResult, EthereumGetBalanceParams, EthereumGetBalanceResult, EthereumGetTokenAccountsByOwnerParams, EthereumGetTokenAccountsByOwnerResult, SolanaSignMessageParams, SolanaSignMessageResult, SolanaSignTransactionParams, SolanaSignTransactionResult, SolanaSendTransactionParams, SolanaSendTransactionResult, SolanaGetBalanceParams, SolanaGetBalanceResult, SolanaGetTokenAccountsByOwnerParams, SolanaGetTokenAccountsByOwnerResult, SendEmailOtpResponse, PublicWallet } from '../types/index.mjs';
-import '../post-message-CmgAfkOS.mjs';
-import '../chain-C9dvKXUY.mjs';
+import { T as Transport, P as PasskeyAssertor, K as KvStorage } from '../interfaces-BdIeMGGD.mjs';
+export { O as OAuthOpener, a as PlatformImpls, W as WebAuthnAssertionResponse, b as WebAuthnRequestOptions } from '../interfaces-BdIeMGGD.mjs';
+import { C as CachedAssertion } from '../passkey-cache-WnDFQ-v4.mjs';
+import { EthereumSignMessageParams, EthereumSignMessageResult, EthereumSignTransactionParams, EthereumSignTransactionResult, EthereumSignTypedDataParams, EthereumSignTypedDataResult, EthereumSignHashParams, EthereumSignHashResult, EthereumSign7702AuthorizationParams, EthereumSign7702AuthorizationResult, EthereumSendTransactionParams, EthereumSendTransactionResult, EthereumGetBalanceParams, EthereumGetBalanceResult, EthereumGetTokenAccountsByOwnerParams, EthereumGetTokenAccountsByOwnerResult, SolanaSignMessageParams, SolanaSignMessageResult, SolanaSignTransactionParams, SolanaSignTransactionResult, SolanaSendTransactionParams, SolanaSendTransactionResult, SolanaGetBalanceParams, SolanaGetBalanceResult, SolanaGetTokenAccountsByOwnerParams, SolanaGetTokenAccountsByOwnerResult, SendEmailOtpResponse, PublicWallet, ProvisionEphemeralSignerParams, ProvisionEphemeralSignerResult, ListEphemeralSignersResult, RevokeEphemeralSignerParams } from '../types/index.mjs';
+import '../post-message-Z6cLf0mS.mjs';
 
 type AssertPasskeyInParentResult = CachedAssertion;
-declare const assertPasskeyInParent: ({ transport, passkey, publishableKey, requireFreshAssertion, validateCredentialInAllowList, }: {
+declare const assertPasskeyInParent: ({ transport, passkey, publishableKey, validateCredentialInAllowList, }: {
     transport: Transport;
     passkey: PasskeyAssertor;
     publishableKey: string;
-    requireFreshAssertion?: boolean;
     validateCredentialInAllowList?: boolean;
 }) => Promise<AssertPasskeyInParentResult>;
 
@@ -25,10 +23,31 @@ declare const getPresenceToken: ({ transport, passkey, publishableKey, relyingPa
     relyingPartyOrigin: string;
 }) => Promise<GetPresenceTokenResult>;
 
-declare const getHeadlessEthereumMethods: ({ transport, passkey, publishableKey, }: {
+interface ScopedPresenceToken {
+    token: string;
+    expiresAt: number;
+}
+interface GetInternalPresenceTokensResult {
+    tokens: Record<string, ScopedPresenceToken>;
+    tokenBatches: Record<string, ScopedPresenceToken[]>;
+    userHandleB64url: string;
+    credentialIdB64url: string;
+}
+declare const getInternalPresenceTokens: ({ transport, passkey, publishableKey, relyingPartyOrigin, scopes, scopeCounts, }: {
+    transport: Transport;
+    passkey: PasskeyAssertor;
+    publishableKey: string;
+    relyingPartyOrigin: string;
+    scopes?: string[];
+    scopeCounts?: Record<string, number>;
+}) => Promise<GetInternalPresenceTokensResult>;
+declare const flattenPresenceTokens: (result: Pick<GetInternalPresenceTokensResult, "tokens"> & Partial<GetInternalPresenceTokensResult>) => Record<string, string>;
+
+declare const getHeadlessEthereumMethods: ({ transport, passkey, publishableKey, relyingPartyOrigin, }: {
     transport: Transport;
     passkey: PasskeyAssertor;
     publishableKey: string;
+    relyingPartyOrigin: string;
 }) => {
     signEthereumMessageHeadless: (params: EthereumSignMessageParams) => Promise<EthereumSignMessageResult>;
     signEthereumTransactionHeadless: (params: EthereumSignTransactionParams) => Promise<EthereumSignTransactionResult>;
@@ -46,10 +65,11 @@ declare const getHeadlessEthereumMethods: ({ transport, passkey, publishableKey,
     }) => Promise<unknown>;
 };
 
-declare const getHeadlessSolanaMethods: ({ transport, passkey, publishableKey, }: {
+declare const getHeadlessSolanaMethods: ({ transport, passkey, publishableKey, relyingPartyOrigin, }: {
     transport: Transport;
     passkey: PasskeyAssertor;
     publishableKey: string;
+    relyingPartyOrigin: string;
 }) => {
     signSolanaMessageHeadless: (params: SolanaSignMessageParams) => Promise<SolanaSignMessageResult>;
     signSolanaTransactionHeadless: (params: SolanaSignTransactionParams) => Promise<SolanaSignTransactionResult>;
@@ -98,11 +118,12 @@ declare const getHeadlessAuthenticationMethods: ({ transport, publishableKey, se
     verifyOAuth: (params: VerifyOAuthParams) => Promise<unknown>;
 };
 
-declare const getHeadlessGeneralMethods: ({ transport, passkey, storage, publishableKey, setIsAuthenticated, setUser, }: {
+declare const getHeadlessGeneralMethods: ({ transport, passkey, storage, publishableKey, relyingPartyOrigin, setIsAuthenticated, setUser, }: {
     transport: Transport;
     passkey: PasskeyAssertor;
     storage: KvStorage;
     publishableKey: string;
+    relyingPartyOrigin: string;
     setIsAuthenticated?: (isAuth: boolean) => void;
     setUser?: (user: unknown | null) => void;
 }) => {
@@ -111,15 +132,15 @@ declare const getHeadlessGeneralMethods: ({ transport, passkey, storage, publish
     createWallet: (walletType: "solana" | "ethereum", options?: {
         createAdditional?: boolean;
         walletIndex?: number;
-        requireFreshAssertion?: boolean;
     }) => Promise<{
         wallet: PublicWallet;
     }>;
-    importKey: (walletType: "solana" | "ethereum", key: string, options?: {
-        requireFreshAssertion?: boolean;
-    }) => Promise<{
+    importKey: (walletType: "solana" | "ethereum", key: string) => Promise<{
         wallet: PublicWallet;
     }>;
+    provisionEphemeralSigner: (params: ProvisionEphemeralSignerParams) => Promise<ProvisionEphemeralSignerResult>;
+    listEphemeralSigners: () => Promise<ListEphemeralSignersResult>;
+    revokeEphemeralSigner: (params: RevokeEphemeralSignerParams) => Promise<void>;
     getWallets: (walletType: "solana" | "ethereum") => Promise<{
         wallets: unknown[];
         walletType: string;
@@ -137,4 +158,54 @@ declare const getHeadlessGeneralMethods: ({ transport, passkey, storage, publish
     getUser: () => Promise<unknown>;
 };
 
-export { type AssertPasskeyInParentResult, type GetPresenceTokenResult, KvStorage, type LoginWithCodeParams, PasskeyAssertor, type SendCodeParams, Transport, type VerifyOAuthParams, assertPasskeyInParent, getHeadlessAuthenticationMethods, getHeadlessEthereumMethods, getHeadlessGeneralMethods, getHeadlessSolanaMethods, getPresenceToken };
+interface EphemeralSignerSignInput {
+    /** Lowercase-hex 32-byte Ed25519 agent public key (no 0x prefix). */
+    apiPubHex: string;
+    /** Lowercase-hex 32-byte Ed25519 agent private key (no 0x prefix). */
+    apiPrivHex: string;
+    /**
+     * Wallet UUID (from `user.wallets[i].id`) the agent should sign on
+     * behalf of. Must be one of the wallets the agent was provisioned
+     * for. The SDK resolves this internally to the wallet's MPC `key_id`
+     * + stored `derivation_path` — integrators never see those values.
+     */
+    walletId: string;
+    /**
+     * Lowercase-hex digest to sign — keccak256 of the message/tx for
+     * ECDSA, raw bytes for Ed25519. No 0x prefix.
+     */
+    rawSigningPayloadHex: string;
+    /** Defaults to now. SES rejects timestamps further than ±5 min from its clock. */
+    issuedAt?: Date;
+    /** Wallets backend base URL (no trailing slash). */
+    baseUrl: string;
+    /**
+     * MoonX publishable key (`moon_pk_…`). The wallets backend's
+     * /ephemeral-signers/* router group is gated by RequirePublicToken — every
+     * call needs an `Authorization: PublicToken <publishableKey>` header.
+     */
+    publishableKey: string;
+    /** Optional fetch override — e.g. for Next.js route handlers or test stubs. */
+    fetchImpl?: typeof fetch;
+}
+interface EphemeralSignerSignResult {
+    scheme: "ecdsa_secp256k1" | "eddsa_ed25519";
+    signature: {
+        /** ECDSA only. Lowercase-hex 32-byte r. */
+        r?: string;
+        /** ECDSA only. Lowercase-hex 32-byte s. */
+        s?: string;
+        /** ECDSA only. 0..3. */
+        recovery_id?: number;
+        /** Ed25519 only. Lowercase-hex 64-byte signature. */
+        signature?: string;
+    };
+}
+declare class EphemeralSignerSignError extends Error {
+    readonly status?: number | undefined;
+    readonly body?: string | undefined;
+    constructor(message: string, status?: number | undefined, body?: string | undefined);
+}
+declare function signWithEphemeralSigner(input: EphemeralSignerSignInput): Promise<EphemeralSignerSignResult>;
+
+export { type AssertPasskeyInParentResult, EphemeralSignerSignError, type EphemeralSignerSignInput, type EphemeralSignerSignResult, type GetInternalPresenceTokensResult, type GetPresenceTokenResult, KvStorage, type LoginWithCodeParams, PasskeyAssertor, type ScopedPresenceToken, type SendCodeParams, Transport, type VerifyOAuthParams, assertPasskeyInParent, flattenPresenceTokens, getHeadlessAuthenticationMethods, getHeadlessEthereumMethods, getHeadlessGeneralMethods, getHeadlessSolanaMethods, getInternalPresenceTokens, getPresenceToken, signWithEphemeralSigner };

package/dist/sdk/index.d.ts

@@ -1,16 +1,14 @@
-import { T as Transport, P as PasskeyAssertor, K as KvStorage } from '../interfaces-Bm7fGOAI.js';
-export { O as OAuthOpener, a as PlatformImpls, W as WebAuthnAssertionResponse, b as WebAuthnRequestOptions } from '../interfaces-Bm7fGOAI.js';
-import { C as CachedAssertion } from '../passkey-cache-B9PT3AWX.js';
-import { EthereumSignMessageParams, EthereumSignMessageResult, EthereumSignTransactionParams, EthereumSignTransactionResult, EthereumSignTypedDataParams, EthereumSignTypedDataResult, EthereumSignHashParams, EthereumSignHashResult, EthereumSign7702AuthorizationParams, EthereumSign7702AuthorizationResult, EthereumSendTransactionParams, EthereumSendTransactionResult, EthereumGetBalanceParams, EthereumGetBalanceResult, EthereumGetTokenAccountsByOwnerParams, EthereumGetTokenAccountsByOwnerResult, SolanaSignMessageParams, SolanaSignMessageResult, SolanaSignTransactionParams, SolanaSignTransactionResult, SolanaSendTransactionParams, SolanaSendTransactionResult, SolanaGetBalanceParams, SolanaGetBalanceResult, SolanaGetTokenAccountsByOwnerParams, SolanaGetTokenAccountsByOwnerResult, SendEmailOtpResponse, PublicWallet } from '../types/index.js';
-import '../post-message-CmgAfkOS.js';
-import '../chain-C9dvKXUY.js';
+import { T as Transport, P as PasskeyAssertor, K as KvStorage } from '../interfaces-1vfik3Ef.js';
+export { O as OAuthOpener, a as PlatformImpls, W as WebAuthnAssertionResponse, b as WebAuthnRequestOptions } from '../interfaces-1vfik3Ef.js';
+import { C as CachedAssertion } from '../passkey-cache-WnDFQ-v4.js';
+import { EthereumSignMessageParams, EthereumSignMessageResult, EthereumSignTransactionParams, EthereumSignTransactionResult, EthereumSignTypedDataParams, EthereumSignTypedDataResult, EthereumSignHashParams, EthereumSignHashResult, EthereumSign7702AuthorizationParams, EthereumSign7702AuthorizationResult, EthereumSendTransactionParams, EthereumSendTransactionResult, EthereumGetBalanceParams, EthereumGetBalanceResult, EthereumGetTokenAccountsByOwnerParams, EthereumGetTokenAccountsByOwnerResult, SolanaSignMessageParams, SolanaSignMessageResult, SolanaSignTransactionParams, SolanaSignTransactionResult, SolanaSendTransactionParams, SolanaSendTransactionResult, SolanaGetBalanceParams, SolanaGetBalanceResult, SolanaGetTokenAccountsByOwnerParams, SolanaGetTokenAccountsByOwnerResult, SendEmailOtpResponse, PublicWallet, ProvisionEphemeralSignerParams, ProvisionEphemeralSignerResult, ListEphemeralSignersResult, RevokeEphemeralSignerParams } from '../types/index.js';
+import '../post-message-Z6cLf0mS.js';
 
 type AssertPasskeyInParentResult = CachedAssertion;
-declare const assertPasskeyInParent: ({ transport, passkey, publishableKey, requireFreshAssertion, validateCredentialInAllowList, }: {
+declare const assertPasskeyInParent: ({ transport, passkey, publishableKey, validateCredentialInAllowList, }: {
     transport: Transport;
     passkey: PasskeyAssertor;
     publishableKey: string;
-    requireFreshAssertion?: boolean;
     validateCredentialInAllowList?: boolean;
 }) => Promise<AssertPasskeyInParentResult>;
 
@@ -25,10 +23,31 @@ declare const getPresenceToken: ({ transport, passkey, publishableKey, relyingPa
     relyingPartyOrigin: string;
 }) => Promise<GetPresenceTokenResult>;
 
-declare const getHeadlessEthereumMethods: ({ transport, passkey, publishableKey, }: {
+interface ScopedPresenceToken {
+    token: string;
+    expiresAt: number;
+}
+interface GetInternalPresenceTokensResult {
+    tokens: Record<string, ScopedPresenceToken>;
+    tokenBatches: Record<string, ScopedPresenceToken[]>;
+    userHandleB64url: string;
+    credentialIdB64url: string;
+}
+declare const getInternalPresenceTokens: ({ transport, passkey, publishableKey, relyingPartyOrigin, scopes, scopeCounts, }: {
+    transport: Transport;
+    passkey: PasskeyAssertor;
+    publishableKey: string;
+    relyingPartyOrigin: string;
+    scopes?: string[];
+    scopeCounts?: Record<string, number>;
+}) => Promise<GetInternalPresenceTokensResult>;
+declare const flattenPresenceTokens: (result: Pick<GetInternalPresenceTokensResult, "tokens"> & Partial<GetInternalPresenceTokensResult>) => Record<string, string>;
+
+declare const getHeadlessEthereumMethods: ({ transport, passkey, publishableKey, relyingPartyOrigin, }: {
     transport: Transport;
     passkey: PasskeyAssertor;
     publishableKey: string;
+    relyingPartyOrigin: string;
 }) => {
     signEthereumMessageHeadless: (params: EthereumSignMessageParams) => Promise<EthereumSignMessageResult>;
     signEthereumTransactionHeadless: (params: EthereumSignTransactionParams) => Promise<EthereumSignTransactionResult>;
@@ -46,10 +65,11 @@ declare const getHeadlessEthereumMethods: ({ transport, passkey, publishableKey,
     }) => Promise<unknown>;
 };
 
-declare const getHeadlessSolanaMethods: ({ transport, passkey, publishableKey, }: {
+declare const getHeadlessSolanaMethods: ({ transport, passkey, publishableKey, relyingPartyOrigin, }: {
     transport: Transport;
     passkey: PasskeyAssertor;
     publishableKey: string;
+    relyingPartyOrigin: string;
 }) => {
     signSolanaMessageHeadless: (params: SolanaSignMessageParams) => Promise<SolanaSignMessageResult>;
     signSolanaTransactionHeadless: (params: SolanaSignTransactionParams) => Promise<SolanaSignTransactionResult>;
@@ -98,11 +118,12 @@ declare const getHeadlessAuthenticationMethods: ({ transport, publishableKey, se
     verifyOAuth: (params: VerifyOAuthParams) => Promise<unknown>;
 };
 
-declare const getHeadlessGeneralMethods: ({ transport, passkey, storage, publishableKey, setIsAuthenticated, setUser, }: {
+declare const getHeadlessGeneralMethods: ({ transport, passkey, storage, publishableKey, relyingPartyOrigin, setIsAuthenticated, setUser, }: {
     transport: Transport;
     passkey: PasskeyAssertor;
     storage: KvStorage;
     publishableKey: string;
+    relyingPartyOrigin: string;
     setIsAuthenticated?: (isAuth: boolean) => void;
     setUser?: (user: unknown | null) => void;
 }) => {
@@ -111,15 +132,15 @@ declare const getHeadlessGeneralMethods: ({ transport, passkey, storage, publish
     createWallet: (walletType: "solana" | "ethereum", options?: {
         createAdditional?: boolean;
         walletIndex?: number;
-        requireFreshAssertion?: boolean;
     }) => Promise<{
         wallet: PublicWallet;
     }>;
-    importKey: (walletType: "solana" | "ethereum", key: string, options?: {
-        requireFreshAssertion?: boolean;
-    }) => Promise<{
+    importKey: (walletType: "solana" | "ethereum", key: string) => Promise<{
         wallet: PublicWallet;
     }>;
+    provisionEphemeralSigner: (params: ProvisionEphemeralSignerParams) => Promise<ProvisionEphemeralSignerResult>;
+    listEphemeralSigners: () => Promise<ListEphemeralSignersResult>;
+    revokeEphemeralSigner: (params: RevokeEphemeralSignerParams) => Promise<void>;
     getWallets: (walletType: "solana" | "ethereum") => Promise<{
         wallets: unknown[];
         walletType: string;
@@ -137,4 +158,54 @@ declare const getHeadlessGeneralMethods: ({ transport, passkey, storage, publish
     getUser: () => Promise<unknown>;
 };
 
-export { type AssertPasskeyInParentResult, type GetPresenceTokenResult, KvStorage, type LoginWithCodeParams, PasskeyAssertor, type SendCodeParams, Transport, type VerifyOAuthParams, assertPasskeyInParent, getHeadlessAuthenticationMethods, getHeadlessEthereumMethods, getHeadlessGeneralMethods, getHeadlessSolanaMethods, getPresenceToken };
+interface EphemeralSignerSignInput {
+    /** Lowercase-hex 32-byte Ed25519 agent public key (no 0x prefix). */
+    apiPubHex: string;
+    /** Lowercase-hex 32-byte Ed25519 agent private key (no 0x prefix). */
+    apiPrivHex: string;
+    /**
+     * Wallet UUID (from `user.wallets[i].id`) the agent should sign on
+     * behalf of. Must be one of the wallets the agent was provisioned
+     * for. The SDK resolves this internally to the wallet's MPC `key_id`
+     * + stored `derivation_path` — integrators never see those values.
+     */
+    walletId: string;
+    /**
+     * Lowercase-hex digest to sign — keccak256 of the message/tx for
+     * ECDSA, raw bytes for Ed25519. No 0x prefix.
+     */
+    rawSigningPayloadHex: string;
+    /** Defaults to now. SES rejects timestamps further than ±5 min from its clock. */
+    issuedAt?: Date;
+    /** Wallets backend base URL (no trailing slash). */
+    baseUrl: string;
+    /**
+     * MoonX publishable key (`moon_pk_…`). The wallets backend's
+     * /ephemeral-signers/* router group is gated by RequirePublicToken — every
+     * call needs an `Authorization: PublicToken <publishableKey>` header.
+     */
+    publishableKey: string;
+    /** Optional fetch override — e.g. for Next.js route handlers or test stubs. */
+    fetchImpl?: typeof fetch;
+}
+interface EphemeralSignerSignResult {
+    scheme: "ecdsa_secp256k1" | "eddsa_ed25519";
+    signature: {
+        /** ECDSA only. Lowercase-hex 32-byte r. */
+        r?: string;
+        /** ECDSA only. Lowercase-hex 32-byte s. */
+        s?: string;
+        /** ECDSA only. 0..3. */
+        recovery_id?: number;
+        /** Ed25519 only. Lowercase-hex 64-byte signature. */
+        signature?: string;
+    };
+}
+declare class EphemeralSignerSignError extends Error {
+    readonly status?: number | undefined;
+    readonly body?: string | undefined;
+    constructor(message: string, status?: number | undefined, body?: string | undefined);
+}
+declare function signWithEphemeralSigner(input: EphemeralSignerSignInput): Promise<EphemeralSignerSignResult>;
+
+export { type AssertPasskeyInParentResult, EphemeralSignerSignError, type EphemeralSignerSignInput, type EphemeralSignerSignResult, type GetInternalPresenceTokensResult, type GetPresenceTokenResult, KvStorage, type LoginWithCodeParams, PasskeyAssertor, type ScopedPresenceToken, type SendCodeParams, Transport, type VerifyOAuthParams, assertPasskeyInParent, flattenPresenceTokens, getHeadlessAuthenticationMethods, getHeadlessEthereumMethods, getHeadlessGeneralMethods, getHeadlessSolanaMethods, getInternalPresenceTokens, getPresenceToken, signWithEphemeralSigner };