@moon-x/core 0.4.0 → 0.5.0

package/dist/{chunk-6LTEG7VN.mjs → chunk-I56GRKAG.mjs}

@@ -1425,6 +1425,23 @@ var broadcastSolanaSigned = async (rpcUrl, signedBase58) => {
   return result.result;
 };
 
+// src/lib/wallet-algorithm.ts
+function canonicalAlgorithmFor(chain) {
+  switch (chain) {
+    case "ethereum":
+      return "ecdsa";
+    case "solana":
+      return "exportable-ed25519";
+    default:
+      throw new Error(`No canonical algorithm for chain: ${chain}`);
+  }
+}
+function parseDerivationPath(path) {
+  if (!path || path === "m") return new Uint32Array([]);
+  const rest = path.startsWith("m/") ? path.slice(2) : path;
+  return new Uint32Array(rest.split("/").map((s) => Number(s)));
+}
+
 // src/lib/wire-codec.ts
 var arrayLikeToBytes = (value) => {
   if (value instanceof Uint8Array) return value;
@@ -1488,6 +1505,8 @@ export {
   serializeEthereumTransaction,
   broadcastEthereumRaw,
   broadcastSolanaSigned,
+  canonicalAlgorithmFor,
+  parseDerivationPath,
   arrayLikeToBytes,
   bs58ToBytes
 };

package/dist/{chunk-VVL65GIB.mjs → chunk-JU5MWLXH.mjs}

@@ -51,6 +51,20 @@ var PostMessageMethod = {
   // dispatcher boring.
   SIGN_HASH: "SIGN_HASH",
   SIGN_7702_AUTHORIZATION: "SIGN_7702_AUTHORIZATION",
+  // Provision a SES (Secure Ephemeral Signer) over one or more of the
+  // user's MPC wallets. Iframe verifies the Nitro attestation, decrypts
+  // the selected keyshares, HPKE-seals them to the verified enclave
+  // pubkey, and returns a freshly-generated Ed25519 signer keypair.
+  // MoonX never persists the private key — the parent must hand it to
+  // the user immediately.
+  PROVISION_EPHEMERAL_SIGNER: "PROVISION_EPHEMERAL_SIGNER",
+  // List the user's active provisioned ephemeral signers from the
+  // wallets backend. Read-only; doesn't touch SES or the enclave.
+  LIST_EPHEMERAL_SIGNERS: "LIST_EPHEMERAL_SIGNERS",
+  // Soft-revoke a previously-provisioned ephemeral signer. The wallets
+  // backend updates revoked_at locally and forwards the revoke to SES
+  // so the enclave drops the policy.
+  REVOKE_EPHEMERAL_SIGNER: "REVOKE_EPHEMERAL_SIGNER",
   VERIFY_EMAIL_OTP: "VERIFY_EMAIL_OTP",
   VERIFY_OAUTH: "VERIFY_OAUTH",
   START_OAUTH: "START_OAUTH",

package/dist/index.d.mts

@@ -1,4 +1,3 @@
-export { AccessTokenClaims, AppConfigRequest, AppConfigResponse, AttachOAuthTokenRequest, AttachOAuthTokenResponse, AuthAppearance, AuthFlow, AuthFlowComponent, AuthLoginMethod, AuthProviderConfig, BaseGetBalanceParams, BaseGetBalanceResult, BaseGetTokenAccountsParams, BaseSendTransactionParams, BaseSendTransactionResult, BaseSignMessageParams, BaseSignMessageResult, BaseSignTransactionParams, BaseSignTransactionResult, BaseTokenClaims, BaseUIOptions, BaseWalletHooks, ContractUIOptions, CreateWalletResponse, DefaultFundingMethod, DeleteSessionRequest, DeleteSessionResponse, DetachOAuthTokenRequest, DeviceFingerprint, DisplayMode, EmailOtpConfig, EmailOtpFlowState, EthereumFundingConfig, EthereumGetBalanceParams, EthereumGetBalanceResult, EthereumGetTokenAccountsByOwnerParams, EthereumGetTokenAccountsByOwnerResult, EthereumSendTransactionParams, EthereumSendTransactionRequest, EthereumSendTransactionResult, EthereumSign7702AuthorizationParams, EthereumSign7702AuthorizationResult, EthereumSignHashParams, EthereumSignHashResult, EthereumSignMessageParams, EthereumSignMessageResult, EthereumSignTransactionParams, EthereumSignTransactionResult, EthereumSignTypedDataParams, EthereumSignTypedDataResult, EthereumSwitchChainParams, ExportKeyConfig, Factor, FlexibleTheme, FundWalletConfig, FundingEvents, FundingMethod, FundingUIConfig, GetCurrentSessionRequest, GetCurrentSessionResponse, Hex, IdentityTokenClaims, IdpProvider, IsAuthenticatedRequest, IsAuthenticatedResponse, LoginTokenBundle, LogoutRequest, LogoutResponse, MessageTypeProperty, MessageTypes, MoonKeyThemeConfig, MoonPaySignRequest, MoonPaySignResponse, MpcKeyShares, Network, OAuthRequest, OAuthResponse, OnrampFundingSettings, PasskeyEnrollConfig, PasskeySettings, PreferredCardProvider, PrefillConfig, PresenceTokenClaims, PublicEthereumWallet, PublicSessionData, PublicWallet, RefreshSessionRequest, RefreshSessionResponse, RetrieveWalletKeyRequest, RetrieveWalletKeyResponse, SdkSettings, SendEmailOtpRequest, SendEmailOtpResponse, SendTransactionConfig, SendTransactionRequest, SessionData, SharesDeviceRequest, SharesDeviceResponse, Sign7702AuthorizationError, Sign7702AuthorizationParams, Sign7702AuthorizationResponse, Sign7702AuthorizationResult, SignMessageConfig, SignTransactionConfig, SignTypedDataError, SignTypedDataParams, SignTypedDataResponse, SignTypedDataResult, SmsSettings, SolanaChain, SolanaFundingConfig, SolanaGetBalanceParams, SolanaGetBalanceResult, SolanaGetTokenAccountsByOwnerParams, SolanaGetTokenAccountsByOwnerResult, SolanaSendTransactionParams, SolanaSendTransactionResult, SolanaSignMessageParams, SolanaSignMessageResult, SolanaSignTransactionParams, SolanaSignTransactionResult, TransactionCommitment, TransactionEncoding, TransactionUIOptions, TypedMessage, UseFundWalletInterface, UsersMePublicResponse, UsersMeRequest, UsersMeResponse, VerifiedSession, VerifyEmailOtpRequest, VerifyEmailOtpResponse, VerifyEmailOtpUser, VerifyOAuthTokenRequest, VerifyOAuthTokenResponse, VerifySiweWalletRegistrationRequest, WALLET_ERROR_CODES, Wallet, WalletChain, WalletChainType, WalletConnectConfig, WalletCreationError, WalletError, WalletErrorCode, WalletKeyRequest, WalletListEntry, WalletRegistrationNonceRequest, WalletRegistrationNonceResponse, WalletType, WalletVerifyRequest } from './types/index.mjs';
+export { AccessTokenClaims, AppConfigRequest, AppConfigResponse, AttachOAuthTokenRequest, AttachOAuthTokenResponse, AuthAppearance, AuthFlow, AuthFlowComponent, AuthLoginMethod, AuthProviderConfig, BaseGetBalanceParams, BaseGetBalanceResult, BaseGetTokenAccountsParams, BaseSendTransactionParams, BaseSendTransactionResult, BaseSignMessageParams, BaseSignMessageResult, BaseSignTransactionParams, BaseSignTransactionResult, BaseTokenClaims, BaseUIOptions, BaseWalletHooks, BlockExplorer, Chain, ChainLikeWithId, ContractUIOptions, CreateWalletResponse, DefaultFundingMethod, DeleteSessionRequest, DeleteSessionResponse, DetachOAuthTokenRequest, DeviceFingerprint, DisplayMode, EmailOtpConfig, EmailOtpFlowState, EphemeralSigner, EphemeralSignerChain, EphemeralSignerScheme, EphemeralSignerWallet, EthereumChainConfig, EthereumFundingConfig, EthereumGetBalanceParams, EthereumGetBalanceResult, EthereumGetTokenAccountsByOwnerParams, EthereumGetTokenAccountsByOwnerResult, EthereumSendTransactionParams, EthereumSendTransactionRequest, EthereumSendTransactionResult, EthereumSign7702AuthorizationParams, EthereumSign7702AuthorizationResult, EthereumSignHashParams, EthereumSignHashResult, EthereumSignMessageParams, EthereumSignMessageResult, EthereumSignTransactionParams, EthereumSignTransactionResult, EthereumSignTypedDataParams, EthereumSignTypedDataResult, EthereumSwitchChainParams, ExportKeyConfig, Factor, FlexibleTheme, FundWalletConfig, FundingEvents, FundingMethod, FundingUIConfig, GetCurrentSessionRequest, GetCurrentSessionResponse, Hex, IdentityTokenClaims, IdpProvider, IsAuthenticatedRequest, IsAuthenticatedResponse, ListEphemeralSignersResult, LoginTokenBundle, LogoutRequest, LogoutResponse, MessageTypeProperty, MessageTypes, MoonKeyThemeConfig, MoonPaySignRequest, MoonPaySignResponse, MpcKeyShares, NativeCurrency, Network, OAuthRequest, OAuthResponse, OnrampFundingSettings, PasskeyEnrollConfig, PasskeySettings, PreferredCardProvider, PrefillConfig, PresenceTokenClaims, ProvisionEphemeralSignerParams, ProvisionEphemeralSignerResult, PublicEthereumWallet, PublicSessionData, PublicWallet, RefreshSessionRequest, RefreshSessionResponse, RetrieveWalletKeyRequest, RetrieveWalletKeyResponse, RevokeEphemeralSignerParams, RpcConfig, RpcUrls, SdkSettings, SendEmailOtpRequest, SendEmailOtpResponse, SendTransactionConfig, SendTransactionRequest, SessionData, SharesDeviceRequest, SharesDeviceResponse, Sign7702AuthorizationError, Sign7702AuthorizationParams, Sign7702AuthorizationResponse, Sign7702AuthorizationResult, SignMessageConfig, SignTransactionConfig, SignTypedDataError, SignTypedDataParams, SignTypedDataResponse, SignTypedDataResult, SmsSettings, SolanaChain, SolanaFundingConfig, SolanaGetBalanceParams, SolanaGetBalanceResult, SolanaGetTokenAccountsByOwnerParams, SolanaGetTokenAccountsByOwnerResult, SolanaSendTransactionParams, SolanaSendTransactionResult, SolanaSignMessageParams, SolanaSignMessageResult, SolanaSignTransactionParams, SolanaSignTransactionResult, TransactionCommitment, TransactionEncoding, TransactionUIOptions, TypedMessage, UseFundWalletInterface, UsersMePublicResponse, UsersMeRequest, UsersMeResponse, VerifiedSession, VerifyEmailOtpRequest, VerifyEmailOtpResponse, VerifyEmailOtpUser, VerifyOAuthTokenRequest, VerifyOAuthTokenResponse, VerifySiweWalletRegistrationRequest, WALLET_ERROR_CODES, Wallet, WalletChain, WalletChainType, WalletConnectConfig, WalletCreationError, WalletError, WalletErrorCode, WalletKeyRequest, WalletListEntry, WalletRegistrationNonceRequest, WalletRegistrationNonceResponse, WalletType, WalletVerifyRequest } from './types/index.mjs';
 export { getIframeOrigin, getIframeUrl, getMoonKeyApiUrl } from './utils/index.mjs';
-export { F as FORWARDED_ERROR_FIELDS, P as PostMessageClient, a as PostMessageMethod, b as PostMessageServer, c as PostMessageType } from './post-message-CmgAfkOS.mjs';
-export { B as BlockExplorer, C as Chain, a as ChainLikeWithId, E as EthereumChainConfig, N as NativeCurrency, R as RpcConfig, b as RpcUrls } from './chain-C9dvKXUY.mjs';
+export { F as FORWARDED_ERROR_FIELDS, P as PostMessageClient, a as PostMessageMethod, b as PostMessageServer, c as PostMessageType } from './post-message-Z6cLf0mS.mjs';

package/dist/index.d.ts

@@ -1,4 +1,3 @@
-export { AccessTokenClaims, AppConfigRequest, AppConfigResponse, AttachOAuthTokenRequest, AttachOAuthTokenResponse, AuthAppearance, AuthFlow, AuthFlowComponent, AuthLoginMethod, AuthProviderConfig, BaseGetBalanceParams, BaseGetBalanceResult, BaseGetTokenAccountsParams, BaseSendTransactionParams, BaseSendTransactionResult, BaseSignMessageParams, BaseSignMessageResult, BaseSignTransactionParams, BaseSignTransactionResult, BaseTokenClaims, BaseUIOptions, BaseWalletHooks, ContractUIOptions, CreateWalletResponse, DefaultFundingMethod, DeleteSessionRequest, DeleteSessionResponse, DetachOAuthTokenRequest, DeviceFingerprint, DisplayMode, EmailOtpConfig, EmailOtpFlowState, EthereumFundingConfig, EthereumGetBalanceParams, EthereumGetBalanceResult, EthereumGetTokenAccountsByOwnerParams, EthereumGetTokenAccountsByOwnerResult, EthereumSendTransactionParams, EthereumSendTransactionRequest, EthereumSendTransactionResult, EthereumSign7702AuthorizationParams, EthereumSign7702AuthorizationResult, EthereumSignHashParams, EthereumSignHashResult, EthereumSignMessageParams, EthereumSignMessageResult, EthereumSignTransactionParams, EthereumSignTransactionResult, EthereumSignTypedDataParams, EthereumSignTypedDataResult, EthereumSwitchChainParams, ExportKeyConfig, Factor, FlexibleTheme, FundWalletConfig, FundingEvents, FundingMethod, FundingUIConfig, GetCurrentSessionRequest, GetCurrentSessionResponse, Hex, IdentityTokenClaims, IdpProvider, IsAuthenticatedRequest, IsAuthenticatedResponse, LoginTokenBundle, LogoutRequest, LogoutResponse, MessageTypeProperty, MessageTypes, MoonKeyThemeConfig, MoonPaySignRequest, MoonPaySignResponse, MpcKeyShares, Network, OAuthRequest, OAuthResponse, OnrampFundingSettings, PasskeyEnrollConfig, PasskeySettings, PreferredCardProvider, PrefillConfig, PresenceTokenClaims, PublicEthereumWallet, PublicSessionData, PublicWallet, RefreshSessionRequest, RefreshSessionResponse, RetrieveWalletKeyRequest, RetrieveWalletKeyResponse, SdkSettings, SendEmailOtpRequest, SendEmailOtpResponse, SendTransactionConfig, SendTransactionRequest, SessionData, SharesDeviceRequest, SharesDeviceResponse, Sign7702AuthorizationError, Sign7702AuthorizationParams, Sign7702AuthorizationResponse, Sign7702AuthorizationResult, SignMessageConfig, SignTransactionConfig, SignTypedDataError, SignTypedDataParams, SignTypedDataResponse, SignTypedDataResult, SmsSettings, SolanaChain, SolanaFundingConfig, SolanaGetBalanceParams, SolanaGetBalanceResult, SolanaGetTokenAccountsByOwnerParams, SolanaGetTokenAccountsByOwnerResult, SolanaSendTransactionParams, SolanaSendTransactionResult, SolanaSignMessageParams, SolanaSignMessageResult, SolanaSignTransactionParams, SolanaSignTransactionResult, TransactionCommitment, TransactionEncoding, TransactionUIOptions, TypedMessage, UseFundWalletInterface, UsersMePublicResponse, UsersMeRequest, UsersMeResponse, VerifiedSession, VerifyEmailOtpRequest, VerifyEmailOtpResponse, VerifyEmailOtpUser, VerifyOAuthTokenRequest, VerifyOAuthTokenResponse, VerifySiweWalletRegistrationRequest, WALLET_ERROR_CODES, Wallet, WalletChain, WalletChainType, WalletConnectConfig, WalletCreationError, WalletError, WalletErrorCode, WalletKeyRequest, WalletListEntry, WalletRegistrationNonceRequest, WalletRegistrationNonceResponse, WalletType, WalletVerifyRequest } from './types/index.js';
+export { AccessTokenClaims, AppConfigRequest, AppConfigResponse, AttachOAuthTokenRequest, AttachOAuthTokenResponse, AuthAppearance, AuthFlow, AuthFlowComponent, AuthLoginMethod, AuthProviderConfig, BaseGetBalanceParams, BaseGetBalanceResult, BaseGetTokenAccountsParams, BaseSendTransactionParams, BaseSendTransactionResult, BaseSignMessageParams, BaseSignMessageResult, BaseSignTransactionParams, BaseSignTransactionResult, BaseTokenClaims, BaseUIOptions, BaseWalletHooks, BlockExplorer, Chain, ChainLikeWithId, ContractUIOptions, CreateWalletResponse, DefaultFundingMethod, DeleteSessionRequest, DeleteSessionResponse, DetachOAuthTokenRequest, DeviceFingerprint, DisplayMode, EmailOtpConfig, EmailOtpFlowState, EphemeralSigner, EphemeralSignerChain, EphemeralSignerScheme, EphemeralSignerWallet, EthereumChainConfig, EthereumFundingConfig, EthereumGetBalanceParams, EthereumGetBalanceResult, EthereumGetTokenAccountsByOwnerParams, EthereumGetTokenAccountsByOwnerResult, EthereumSendTransactionParams, EthereumSendTransactionRequest, EthereumSendTransactionResult, EthereumSign7702AuthorizationParams, EthereumSign7702AuthorizationResult, EthereumSignHashParams, EthereumSignHashResult, EthereumSignMessageParams, EthereumSignMessageResult, EthereumSignTransactionParams, EthereumSignTransactionResult, EthereumSignTypedDataParams, EthereumSignTypedDataResult, EthereumSwitchChainParams, ExportKeyConfig, Factor, FlexibleTheme, FundWalletConfig, FundingEvents, FundingMethod, FundingUIConfig, GetCurrentSessionRequest, GetCurrentSessionResponse, Hex, IdentityTokenClaims, IdpProvider, IsAuthenticatedRequest, IsAuthenticatedResponse, ListEphemeralSignersResult, LoginTokenBundle, LogoutRequest, LogoutResponse, MessageTypeProperty, MessageTypes, MoonKeyThemeConfig, MoonPaySignRequest, MoonPaySignResponse, MpcKeyShares, NativeCurrency, Network, OAuthRequest, OAuthResponse, OnrampFundingSettings, PasskeyEnrollConfig, PasskeySettings, PreferredCardProvider, PrefillConfig, PresenceTokenClaims, ProvisionEphemeralSignerParams, ProvisionEphemeralSignerResult, PublicEthereumWallet, PublicSessionData, PublicWallet, RefreshSessionRequest, RefreshSessionResponse, RetrieveWalletKeyRequest, RetrieveWalletKeyResponse, RevokeEphemeralSignerParams, RpcConfig, RpcUrls, SdkSettings, SendEmailOtpRequest, SendEmailOtpResponse, SendTransactionConfig, SendTransactionRequest, SessionData, SharesDeviceRequest, SharesDeviceResponse, Sign7702AuthorizationError, Sign7702AuthorizationParams, Sign7702AuthorizationResponse, Sign7702AuthorizationResult, SignMessageConfig, SignTransactionConfig, SignTypedDataError, SignTypedDataParams, SignTypedDataResponse, SignTypedDataResult, SmsSettings, SolanaChain, SolanaFundingConfig, SolanaGetBalanceParams, SolanaGetBalanceResult, SolanaGetTokenAccountsByOwnerParams, SolanaGetTokenAccountsByOwnerResult, SolanaSendTransactionParams, SolanaSendTransactionResult, SolanaSignMessageParams, SolanaSignMessageResult, SolanaSignTransactionParams, SolanaSignTransactionResult, TransactionCommitment, TransactionEncoding, TransactionUIOptions, TypedMessage, UseFundWalletInterface, UsersMePublicResponse, UsersMeRequest, UsersMeResponse, VerifiedSession, VerifyEmailOtpRequest, VerifyEmailOtpResponse, VerifyEmailOtpUser, VerifyOAuthTokenRequest, VerifyOAuthTokenResponse, VerifySiweWalletRegistrationRequest, WALLET_ERROR_CODES, Wallet, WalletChain, WalletChainType, WalletConnectConfig, WalletCreationError, WalletError, WalletErrorCode, WalletKeyRequest, WalletListEntry, WalletRegistrationNonceRequest, WalletRegistrationNonceResponse, WalletType, WalletVerifyRequest } from './types/index.js';
 export { getIframeOrigin, getIframeUrl, getMoonKeyApiUrl } from './utils/index.js';
-export { F as FORWARDED_ERROR_FIELDS, P as PostMessageClient, a as PostMessageMethod, b as PostMessageServer, c as PostMessageType } from './post-message-CmgAfkOS.js';
-export { B as BlockExplorer, C as Chain, a as ChainLikeWithId, E as EthereumChainConfig, N as NativeCurrency, R as RpcConfig, b as RpcUrls } from './chain-C9dvKXUY.js';
+export { F as FORWARDED_ERROR_FIELDS, P as PostMessageClient, a as PostMessageMethod, b as PostMessageServer, c as PostMessageType } from './post-message-Z6cLf0mS.js';

package/dist/index.js

@@ -177,6 +177,20 @@ var PostMessageMethod = {
   // dispatcher boring.
   SIGN_HASH: "SIGN_HASH",
   SIGN_7702_AUTHORIZATION: "SIGN_7702_AUTHORIZATION",
+  // Provision a SES (Secure Ephemeral Signer) over one or more of the
+  // user's MPC wallets. Iframe verifies the Nitro attestation, decrypts
+  // the selected keyshares, HPKE-seals them to the verified enclave
+  // pubkey, and returns a freshly-generated Ed25519 signer keypair.
+  // MoonX never persists the private key — the parent must hand it to
+  // the user immediately.
+  PROVISION_EPHEMERAL_SIGNER: "PROVISION_EPHEMERAL_SIGNER",
+  // List the user's active provisioned ephemeral signers from the
+  // wallets backend. Read-only; doesn't touch SES or the enclave.
+  LIST_EPHEMERAL_SIGNERS: "LIST_EPHEMERAL_SIGNERS",
+  // Soft-revoke a previously-provisioned ephemeral signer. The wallets
+  // backend updates revoked_at locally and forwards the revoke to SES
+  // so the enclave drops the policy.
+  REVOKE_EPHEMERAL_SIGNER: "REVOKE_EPHEMERAL_SIGNER",
   VERIFY_EMAIL_OTP: "VERIFY_EMAIL_OTP",
   VERIFY_OAUTH: "VERIFY_OAUTH",
   START_OAUTH: "START_OAUTH",

package/dist/index.mjs

@@ -14,7 +14,7 @@ import {
   PostMessageMethod,
   PostMessageServer,
   PostMessageType
-} from "./chunk-VVL65GIB.mjs";
+} from "./chunk-JU5MWLXH.mjs";
 import {
   getMoonKeyApiUrl
 } from "./chunk-GQKIA37O.mjs";

package/dist/{interfaces-pNTEOKaK.d.ts → interfaces-1vfik3Ef.d.ts}

@@ -1,4 +1,4 @@
-import { c as PostMessageType, a as PostMessageMethod } from './post-message-CmgAfkOS.js';
+import { c as PostMessageType, a as PostMessageMethod } from './post-message-Z6cLf0mS.js';
 
 /**
  * Transport — the bidirectional postMessage channel between the parent

package/dist/{interfaces-cdKh3sLA.d.mts → interfaces-BdIeMGGD.d.mts}

@@ -1,4 +1,4 @@
-import { c as PostMessageType, a as PostMessageMethod } from './post-message-CmgAfkOS.mjs';
+import { c as PostMessageType, a as PostMessageMethod } from './post-message-Z6cLf0mS.mjs';
 
 /**
  * Transport — the bidirectional postMessage channel between the parent

package/dist/lib/index.d.mts

@@ -1,6 +1,6 @@
 export { C as CachedAssertion, g as generatePasskeyUserId } from '../passkey-cache-WnDFQ-v4.mjs';
 export { a as PasskeyFormFactor, P as PasskeyMetadata, b as PasskeyMetadataInput, f as formatPasskeyLabel, r as resolvePasskeyMetadata } from '../passkey-metadata-QqFF2SWQ.mjs';
-import { C as Chain } from '../chain-C9dvKXUY.mjs';
+import { Chain, WalletChain } from '../types/index.mjs';
 import { SiweMessage } from 'siwe';
 import { Connection, PublicKey } from '@solana/web3.js';
 
@@ -389,6 +389,36 @@ declare const serializeEthereumTransaction: (transaction: any) => Promise<string
 declare const broadcastEthereumRaw: (rpcUrl: string, signedSerialized: string) => Promise<string>;
 declare const broadcastSolanaSigned: (rpcUrl: string, signedBase58: string) => Promise<string>;
 
+/**
+ * Canonical algorithm name written to `app_user_wallet_keyshares.algorithm`.
+ *
+ * Matches Sodot's Vertex API path segment exactly:
+ *
+ *   ethereum → "ecdsa"
+ *   solana   → "exportable-ed25519"
+ *
+ * `Algorithm.name.toLowerCase()` from the Sodot SDK would give
+ * `"exportableed25519"` (no hyphen) for Solana, which doesn't match
+ * anything else in the stack and causes sign dispatch to fall through
+ * to the default error branch. Use this helper instead.
+ */
+declare function canonicalAlgorithmFor(chain: WalletChain): string;
+/**
+ * Parse the canonical SES wire form of a derivation path into the
+ * integer array the Sodot MPC client expects.
+ *
+ *   "m"                       → [] (root — imports + all
+ *                                   exportable-ed25519 wallets)
+ *   "m/44/60/0/0/0"           → [44, 60, 0, 0, 0]
+ *   ""                        → [] (legacy fallback; same as "m")
+ *
+ * Stays byte-for-byte identical to the Go-side `ParseDerivationPath`
+ * in `apps/wallets/internal/service/wallet.go` — both halves of the
+ * MPC ceremony have to agree on the path or Sodot returns "End-to-end
+ * decryption failed" with no further hint as to which input mismatched.
+ */
+declare function parseDerivationPath(path: string): Uint32Array;
+
 /**
  * Convert any wire representation of a byte array back into Uint8Array.
  * Pass-through for actual `Uint8Array` and regular `number[]`. Used
@@ -407,4 +437,4 @@ declare const arrayLikeToBytes: (value: unknown) => Uint8Array;
  */
 declare const bs58ToBytes: (value: unknown) => Promise<Uint8Array>;
 
-export { type BuildUrlConfig, DEFAULT_AUTH_URL, EthereumSiweMessage, type EthereumSiweMessageProps, type EvmTransactionInput, type EvmTxPrepWallet, type ManualSiweMessageProps, SiwsMessage, SolanaTransactionParser, type VerifyIdTokenResponse, arrayLikeToBytes, authState, broadcastEthereumRaw, broadcastSolanaSigned, bs58ToBytes, buildUrl, createManualSiweMessage, estimateEvmGas, estimateEvmGasReserve, fromB64url, getChainById, getDefaultChain, getEvmGasPrice, getEvmMaxPriorityFeePerGas, getEvmNonce, getInstructionsForHTML, getRpcUrl, getSOLTransfersFromInstructions, getTransferInfoFromInstructions, isChainSupported, prepareEvmSendTransaction, prepareEvmSignTransaction, resolveEvmChain, sanitizeUserData, serializeEthereumTransaction, setChainRpcUrl, toB64url, validateChainConfig, verifyIdToken };
+export { type BuildUrlConfig, DEFAULT_AUTH_URL, EthereumSiweMessage, type EthereumSiweMessageProps, type EvmTransactionInput, type EvmTxPrepWallet, type ManualSiweMessageProps, SiwsMessage, SolanaTransactionParser, type VerifyIdTokenResponse, arrayLikeToBytes, authState, broadcastEthereumRaw, broadcastSolanaSigned, bs58ToBytes, buildUrl, canonicalAlgorithmFor, createManualSiweMessage, estimateEvmGas, estimateEvmGasReserve, fromB64url, getChainById, getDefaultChain, getEvmGasPrice, getEvmMaxPriorityFeePerGas, getEvmNonce, getInstructionsForHTML, getRpcUrl, getSOLTransfersFromInstructions, getTransferInfoFromInstructions, isChainSupported, parseDerivationPath, prepareEvmSendTransaction, prepareEvmSignTransaction, resolveEvmChain, sanitizeUserData, serializeEthereumTransaction, setChainRpcUrl, toB64url, validateChainConfig, verifyIdToken };

package/dist/lib/index.d.ts

@@ -1,6 +1,6 @@
 export { C as CachedAssertion, g as generatePasskeyUserId } from '../passkey-cache-WnDFQ-v4.js';
 export { a as PasskeyFormFactor, P as PasskeyMetadata, b as PasskeyMetadataInput, f as formatPasskeyLabel, r as resolvePasskeyMetadata } from '../passkey-metadata-QqFF2SWQ.js';
-import { C as Chain } from '../chain-C9dvKXUY.js';
+import { Chain, WalletChain } from '../types/index.js';
 import { SiweMessage } from 'siwe';
 import { Connection, PublicKey } from '@solana/web3.js';
 
@@ -389,6 +389,36 @@ declare const serializeEthereumTransaction: (transaction: any) => Promise<string
 declare const broadcastEthereumRaw: (rpcUrl: string, signedSerialized: string) => Promise<string>;
 declare const broadcastSolanaSigned: (rpcUrl: string, signedBase58: string) => Promise<string>;
 
+/**
+ * Canonical algorithm name written to `app_user_wallet_keyshares.algorithm`.
+ *
+ * Matches Sodot's Vertex API path segment exactly:
+ *
+ *   ethereum → "ecdsa"
+ *   solana   → "exportable-ed25519"
+ *
+ * `Algorithm.name.toLowerCase()` from the Sodot SDK would give
+ * `"exportableed25519"` (no hyphen) for Solana, which doesn't match
+ * anything else in the stack and causes sign dispatch to fall through
+ * to the default error branch. Use this helper instead.
+ */
+declare function canonicalAlgorithmFor(chain: WalletChain): string;
+/**
+ * Parse the canonical SES wire form of a derivation path into the
+ * integer array the Sodot MPC client expects.
+ *
+ *   "m"                       → [] (root — imports + all
+ *                                   exportable-ed25519 wallets)
+ *   "m/44/60/0/0/0"           → [44, 60, 0, 0, 0]
+ *   ""                        → [] (legacy fallback; same as "m")
+ *
+ * Stays byte-for-byte identical to the Go-side `ParseDerivationPath`
+ * in `apps/wallets/internal/service/wallet.go` — both halves of the
+ * MPC ceremony have to agree on the path or Sodot returns "End-to-end
+ * decryption failed" with no further hint as to which input mismatched.
+ */
+declare function parseDerivationPath(path: string): Uint32Array;
+
 /**
  * Convert any wire representation of a byte array back into Uint8Array.
  * Pass-through for actual `Uint8Array` and regular `number[]`. Used
@@ -407,4 +437,4 @@ declare const arrayLikeToBytes: (value: unknown) => Uint8Array;
  */
 declare const bs58ToBytes: (value: unknown) => Promise<Uint8Array>;
 
-export { type BuildUrlConfig, DEFAULT_AUTH_URL, EthereumSiweMessage, type EthereumSiweMessageProps, type EvmTransactionInput, type EvmTxPrepWallet, type ManualSiweMessageProps, SiwsMessage, SolanaTransactionParser, type VerifyIdTokenResponse, arrayLikeToBytes, authState, broadcastEthereumRaw, broadcastSolanaSigned, bs58ToBytes, buildUrl, createManualSiweMessage, estimateEvmGas, estimateEvmGasReserve, fromB64url, getChainById, getDefaultChain, getEvmGasPrice, getEvmMaxPriorityFeePerGas, getEvmNonce, getInstructionsForHTML, getRpcUrl, getSOLTransfersFromInstructions, getTransferInfoFromInstructions, isChainSupported, prepareEvmSendTransaction, prepareEvmSignTransaction, resolveEvmChain, sanitizeUserData, serializeEthereumTransaction, setChainRpcUrl, toB64url, validateChainConfig, verifyIdToken };
+export { type BuildUrlConfig, DEFAULT_AUTH_URL, EthereumSiweMessage, type EthereumSiweMessageProps, type EvmTransactionInput, type EvmTxPrepWallet, type ManualSiweMessageProps, SiwsMessage, SolanaTransactionParser, type VerifyIdTokenResponse, arrayLikeToBytes, authState, broadcastEthereumRaw, broadcastSolanaSigned, bs58ToBytes, buildUrl, canonicalAlgorithmFor, createManualSiweMessage, estimateEvmGas, estimateEvmGasReserve, fromB64url, getChainById, getDefaultChain, getEvmGasPrice, getEvmMaxPriorityFeePerGas, getEvmNonce, getInstructionsForHTML, getRpcUrl, getSOLTransfersFromInstructions, getTransferInfoFromInstructions, isChainSupported, parseDerivationPath, prepareEvmSendTransaction, prepareEvmSignTransaction, resolveEvmChain, sanitizeUserData, serializeEthereumTransaction, setChainRpcUrl, toB64url, validateChainConfig, verifyIdToken };

package/dist/lib/index.js

@@ -40,6 +40,7 @@ __export(lib_exports, {
   broadcastSolanaSigned: () => broadcastSolanaSigned,
   bs58ToBytes: () => bs58ToBytes,
   buildUrl: () => buildUrl,
+  canonicalAlgorithmFor: () => canonicalAlgorithmFor,
   createManualSiweMessage: () => createManualSiweMessage,
   estimateEvmGas: () => estimateEvmGas,
   estimateEvmGasReserve: () => estimateEvmGasReserve,
@@ -56,6 +57,7 @@ __export(lib_exports, {
   getSOLTransfersFromInstructions: () => getSOLTransfersFromInstructions,
   getTransferInfoFromInstructions: () => getTransferInfoFromInstructions,
   isChainSupported: () => isChainSupported,
+  parseDerivationPath: () => parseDerivationPath,
   prepareEvmSendTransaction: () => prepareEvmSendTransaction,
   prepareEvmSignTransaction: () => prepareEvmSignTransaction,
   resolveEvmChain: () => resolveEvmChain,
@@ -1509,6 +1511,23 @@ var broadcastSolanaSigned = async (rpcUrl, signedBase58) => {
   return result.result;
 };
 
+// src/lib/wallet-algorithm.ts
+function canonicalAlgorithmFor(chain) {
+  switch (chain) {
+    case "ethereum":
+      return "ecdsa";
+    case "solana":
+      return "exportable-ed25519";
+    default:
+      throw new Error(`No canonical algorithm for chain: ${chain}`);
+  }
+}
+function parseDerivationPath(path) {
+  if (!path || path === "m") return new Uint32Array([]);
+  const rest = path.startsWith("m/") ? path.slice(2) : path;
+  return new Uint32Array(rest.split("/").map((s) => Number(s)));
+}
+
 // src/lib/wire-codec.ts
 var arrayLikeToBytes = (value) => {
   if (value instanceof Uint8Array) return value;
@@ -1548,6 +1567,7 @@ var bs58ToBytes = async (value) => {
   broadcastSolanaSigned,
   bs58ToBytes,
   buildUrl,
+  canonicalAlgorithmFor,
   createManualSiweMessage,
   estimateEvmGas,
   estimateEvmGasReserve,
@@ -1564,6 +1584,7 @@ var bs58ToBytes = async (value) => {
   getSOLTransfersFromInstructions,
   getTransferInfoFromInstructions,
   isChainSupported,
+  parseDerivationPath,
   prepareEvmSendTransaction,
   prepareEvmSignTransaction,
   resolveEvmChain,

package/dist/lib/index.mjs

@@ -9,6 +9,7 @@ import {
   broadcastSolanaSigned,
   bs58ToBytes,
   buildUrl,
+  canonicalAlgorithmFor,
   createManualSiweMessage,
   estimateEvmGas,
   estimateEvmGasReserve,
@@ -25,6 +26,7 @@ import {
   getSOLTransfersFromInstructions,
   getTransferInfoFromInstructions,
   isChainSupported,
+  parseDerivationPath,
   prepareEvmSendTransaction,
   prepareEvmSignTransaction,
   resolveEvmChain,
@@ -35,7 +37,7 @@ import {
   toB64url,
   validateChainConfig,
   verifyIdToken
-} from "../chunk-6LTEG7VN.mjs";
+} from "../chunk-I56GRKAG.mjs";
 import "../chunk-GQKIA37O.mjs";
 export {
   DEFAULT_AUTH_URL,
@@ -48,6 +50,7 @@ export {
   broadcastSolanaSigned,
   bs58ToBytes,
   buildUrl,
+  canonicalAlgorithmFor,
   createManualSiweMessage,
   estimateEvmGas,
   estimateEvmGasReserve,
@@ -64,6 +67,7 @@ export {
   getSOLTransfersFromInstructions,
   getTransferInfoFromInstructions,
   isChainSupported,
+  parseDerivationPath,
   prepareEvmSendTransaction,
   prepareEvmSignTransaction,
   resolveEvmChain,

package/dist/{post-message-CmgAfkOS.d.mts → post-message-Z6cLf0mS.d.mts}

@@ -31,6 +31,9 @@ declare const PostMessageMethod: {
     readonly SIGN_TYPED_DATA: "SIGN_TYPED_DATA";
     readonly SIGN_HASH: "SIGN_HASH";
     readonly SIGN_7702_AUTHORIZATION: "SIGN_7702_AUTHORIZATION";
+    readonly PROVISION_EPHEMERAL_SIGNER: "PROVISION_EPHEMERAL_SIGNER";
+    readonly LIST_EPHEMERAL_SIGNERS: "LIST_EPHEMERAL_SIGNERS";
+    readonly REVOKE_EPHEMERAL_SIGNER: "REVOKE_EPHEMERAL_SIGNER";
     readonly VERIFY_EMAIL_OTP: "VERIFY_EMAIL_OTP";
     readonly VERIFY_OAUTH: "VERIFY_OAUTH";
     readonly START_OAUTH: "START_OAUTH";

package/dist/{post-message-CmgAfkOS.d.ts → post-message-Z6cLf0mS.d.ts}

@@ -31,6 +31,9 @@ declare const PostMessageMethod: {
     readonly SIGN_TYPED_DATA: "SIGN_TYPED_DATA";
     readonly SIGN_HASH: "SIGN_HASH";
     readonly SIGN_7702_AUTHORIZATION: "SIGN_7702_AUTHORIZATION";
+    readonly PROVISION_EPHEMERAL_SIGNER: "PROVISION_EPHEMERAL_SIGNER";
+    readonly LIST_EPHEMERAL_SIGNERS: "LIST_EPHEMERAL_SIGNERS";
+    readonly REVOKE_EPHEMERAL_SIGNER: "REVOKE_EPHEMERAL_SIGNER";
     readonly VERIFY_EMAIL_OTP: "VERIFY_EMAIL_OTP";
     readonly VERIFY_OAUTH: "VERIFY_OAUTH";
     readonly START_OAUTH: "START_OAUTH";

package/dist/react/ethereum.d.mts

@@ -1,5 +1,4 @@
 import { EthereumGetBalanceParams, EthereumGetBalanceResult, EthereumSendTransactionParams, EthereumSendTransactionResult, EthereumSign7702AuthorizationParams, EthereumSign7702AuthorizationResult, EthereumSignHashParams, EthereumSignHashResult, EthereumSignMessageParams, EthereumSignMessageResult, EthereumSignTransactionParams, EthereumSignTransactionResult, EthereumSignTypedDataParams, EthereumSignTypedDataResult } from '../types/index.mjs';
-import '../chain-C9dvKXUY.mjs';
 
 declare const useSignMessage: () => {
     signMessage: (params: EthereumSignMessageParams) => Promise<EthereumSignMessageResult>;

package/dist/react/ethereum.d.ts

@@ -1,5 +1,4 @@
 import { EthereumGetBalanceParams, EthereumGetBalanceResult, EthereumSendTransactionParams, EthereumSendTransactionResult, EthereumSign7702AuthorizationParams, EthereumSign7702AuthorizationResult, EthereumSignHashParams, EthereumSignHashResult, EthereumSignMessageParams, EthereumSignMessageResult, EthereumSignTransactionParams, EthereumSignTransactionResult, EthereumSignTypedDataParams, EthereumSignTypedDataResult } from '../types/index.js';
-import '../chain-C9dvKXUY.js';
 
 declare const useSignMessage: () => {
     signMessage: (params: EthereumSignMessageParams) => Promise<EthereumSignMessageResult>;

package/dist/react/index.d.mts

@@ -1,7 +1,6 @@
 import * as react from 'react';
-import { PublicWallet } from '../types/index.mjs';
+import { PublicWallet, EphemeralSigner, ListEphemeralSignersResult, ProvisionEphemeralSignerParams, ProvisionEphemeralSignerResult, RevokeEphemeralSignerParams } from '../types/index.mjs';
 import { P as PasskeyMetadata } from '../passkey-metadata-QqFF2SWQ.mjs';
-import '../chain-C9dvKXUY.mjs';
 
 /**
  * The minimal SDK surface the shared hooks rely on. Both platform
@@ -37,6 +36,9 @@ interface MoonKeyHookSDK {
     logout: () => Promise<unknown>;
     getPasskeyStatus: () => Promise<unknown>;
     removePasskey: (credentialIdB64url: string) => Promise<unknown>;
+    provisionEphemeralSigner: (params: unknown) => Promise<unknown>;
+    listEphemeralSigners: () => Promise<unknown>;
+    revokeEphemeralSigner: (params: unknown) => Promise<unknown>;
     sendCode: (params: {
         email: string;
         disableSignup?: boolean;
@@ -139,6 +141,42 @@ declare const useImportKey: () => {
     }>;
 };
 
+interface UseEphemeralSignerResult {
+    /** Active (non-revoked) ephemeral signers for the current user + app. */
+    signers: EphemeralSigner[];
+    /** True only on the very first load; false during background re-fetches. */
+    isLoading: boolean;
+    /** True during background re-fetches (e.g. after provision/revoke). */
+    isRefreshing: boolean;
+    /** Manual re-fetch. Usually unnecessary — provision/revoke trigger it automatically. */
+    refresh: () => Promise<ListEphemeralSignersResult>;
+    /**
+     * Provision a new ephemeral signer. Resolves to the full result
+     * (including the one-time api_priv hex). Triggers a list refresh on
+     * success.
+     */
+    provision: (params: ProvisionEphemeralSignerParams) => Promise<ProvisionEphemeralSignerResult>;
+    isProvisioning: boolean;
+    /**
+     * The most recent successful provision result. Stays populated so
+     * the caller can render the one-time priv-key surface until they
+     * call `reset()`.
+     */
+    lastProvisioned: ProvisionEphemeralSignerResult | null;
+    /**
+     * Soft-revoke an ephemeral signer (and forward the revoke to SES).
+     * Triggers a list refresh on success. Requires a fresh WebAuthn-bound
+     * presence token — the SDK handles the ceremony internally.
+     */
+    revoke: (params: RevokeEphemeralSignerParams) => Promise<void>;
+    isRevoking: boolean;
+    /** Most recent error across list/provision/revoke. Cleared by reset() or by the next successful op. */
+    error: string | null;
+    /** Clear `lastProvisioned` + `error`. Use after dismissing the success surface. */
+    reset: () => void;
+}
+declare const useEphemeralSigner: () => UseEphemeralSignerResult;
+
 interface PasskeyStatusEntry {
     id: string;
     credential_id: string;
@@ -180,4 +218,4 @@ interface UseRemovePasskeyResult {
 }
 declare const useRemovePasskey: () => UseRemovePasskeyResult;
 
-export { type LoginWithEmailState, type MoonKeyHookSDK, type PasskeyStatusEntry, type RegisterPasskeyResult, SDKProvider, type UseAddPasskeyResult, type UseLoginWithEmailCallbacks, type UsePasskeyStatusResult, type UseRemovePasskeyResult, useAddPasskey, useCreateWallet, useImportKey, useLoginWithEmail, useLogout, useMoonKeySDK, usePasskeyStatus, useRegisterPasskey, useRemovePasskey, useUser, useWallets };
+export { type LoginWithEmailState, type MoonKeyHookSDK, type PasskeyStatusEntry, type RegisterPasskeyResult, SDKProvider, type UseAddPasskeyResult, type UseEphemeralSignerResult, type UseLoginWithEmailCallbacks, type UsePasskeyStatusResult, type UseRemovePasskeyResult, useAddPasskey, useCreateWallet, useEphemeralSigner, useImportKey, useLoginWithEmail, useLogout, useMoonKeySDK, usePasskeyStatus, useRegisterPasskey, useRemovePasskey, useUser, useWallets };

package/dist/react/index.d.ts

@@ -1,7 +1,6 @@
 import * as react from 'react';
-import { PublicWallet } from '../types/index.js';
+import { PublicWallet, EphemeralSigner, ListEphemeralSignersResult, ProvisionEphemeralSignerParams, ProvisionEphemeralSignerResult, RevokeEphemeralSignerParams } from '../types/index.js';
 import { P as PasskeyMetadata } from '../passkey-metadata-QqFF2SWQ.js';
-import '../chain-C9dvKXUY.js';
 
 /**
  * The minimal SDK surface the shared hooks rely on. Both platform
@@ -37,6 +36,9 @@ interface MoonKeyHookSDK {
     logout: () => Promise<unknown>;
     getPasskeyStatus: () => Promise<unknown>;
     removePasskey: (credentialIdB64url: string) => Promise<unknown>;
+    provisionEphemeralSigner: (params: unknown) => Promise<unknown>;
+    listEphemeralSigners: () => Promise<unknown>;
+    revokeEphemeralSigner: (params: unknown) => Promise<unknown>;
     sendCode: (params: {
         email: string;
         disableSignup?: boolean;
@@ -139,6 +141,42 @@ declare const useImportKey: () => {
     }>;
 };
 
+interface UseEphemeralSignerResult {
+    /** Active (non-revoked) ephemeral signers for the current user + app. */
+    signers: EphemeralSigner[];
+    /** True only on the very first load; false during background re-fetches. */
+    isLoading: boolean;
+    /** True during background re-fetches (e.g. after provision/revoke). */
+    isRefreshing: boolean;
+    /** Manual re-fetch. Usually unnecessary — provision/revoke trigger it automatically. */
+    refresh: () => Promise<ListEphemeralSignersResult>;
+    /**
+     * Provision a new ephemeral signer. Resolves to the full result
+     * (including the one-time api_priv hex). Triggers a list refresh on
+     * success.
+     */
+    provision: (params: ProvisionEphemeralSignerParams) => Promise<ProvisionEphemeralSignerResult>;
+    isProvisioning: boolean;
+    /**
+     * The most recent successful provision result. Stays populated so
+     * the caller can render the one-time priv-key surface until they
+     * call `reset()`.
+     */
+    lastProvisioned: ProvisionEphemeralSignerResult | null;
+    /**
+     * Soft-revoke an ephemeral signer (and forward the revoke to SES).
+     * Triggers a list refresh on success. Requires a fresh WebAuthn-bound
+     * presence token — the SDK handles the ceremony internally.
+     */
+    revoke: (params: RevokeEphemeralSignerParams) => Promise<void>;
+    isRevoking: boolean;
+    /** Most recent error across list/provision/revoke. Cleared by reset() or by the next successful op. */
+    error: string | null;
+    /** Clear `lastProvisioned` + `error`. Use after dismissing the success surface. */
+    reset: () => void;
+}
+declare const useEphemeralSigner: () => UseEphemeralSignerResult;
+
 interface PasskeyStatusEntry {
     id: string;
     credential_id: string;
@@ -180,4 +218,4 @@ interface UseRemovePasskeyResult {
 }
 declare const useRemovePasskey: () => UseRemovePasskeyResult;
 
-export { type LoginWithEmailState, type MoonKeyHookSDK, type PasskeyStatusEntry, type RegisterPasskeyResult, SDKProvider, type UseAddPasskeyResult, type UseLoginWithEmailCallbacks, type UsePasskeyStatusResult, type UseRemovePasskeyResult, useAddPasskey, useCreateWallet, useImportKey, useLoginWithEmail, useLogout, useMoonKeySDK, usePasskeyStatus, useRegisterPasskey, useRemovePasskey, useUser, useWallets };
+export { type LoginWithEmailState, type MoonKeyHookSDK, type PasskeyStatusEntry, type RegisterPasskeyResult, SDKProvider, type UseAddPasskeyResult, type UseEphemeralSignerResult, type UseLoginWithEmailCallbacks, type UsePasskeyStatusResult, type UseRemovePasskeyResult, useAddPasskey, useCreateWallet, useEphemeralSigner, useImportKey, useLoginWithEmail, useLogout, useMoonKeySDK, usePasskeyStatus, useRegisterPasskey, useRemovePasskey, useUser, useWallets };