@moon-x/core 0.4.0 → 0.5.0

package/dist/react/index.js

@@ -33,6 +33,7 @@ __export(react_exports, {
   SDKProvider: () => SDKProvider,
   useAddPasskey: () => useAddPasskey,
   useCreateWallet: () => useCreateWallet,
+  useEphemeralSigner: () => useEphemeralSigner,
   useImportKey: () => useImportKey,
   useLoginWithEmail: () => useLoginWithEmail,
   useLogout: () => useLogout,
@@ -221,6 +222,130 @@ var useImportKey = () => {
   };
 };
 
+// src/react/use-ephemeral-signer.ts
+var import_react7 = require("react");
+var useEphemeralSigner = () => {
+  const sdk = useMoonKeySDK();
+  const [signers, setSigners] = (0, import_react7.useState)([]);
+  const [isLoading, setIsLoading] = (0, import_react7.useState)(true);
+  const [isRefreshing, setIsRefreshing] = (0, import_react7.useState)(false);
+  const [hasLoadedOnce, setHasLoadedOnce] = (0, import_react7.useState)(false);
+  const [isProvisioning, setIsProvisioning] = (0, import_react7.useState)(false);
+  const [lastProvisioned, setLastProvisioned] = (0, import_react7.useState)(null);
+  const [isRevoking, setIsRevoking] = (0, import_react7.useState)(false);
+  const [error, setError] = (0, import_react7.useState)(null);
+  const refreshInternal = (0, import_react7.useCallback)(
+    async (setErrorOnFailure) => {
+      if (!sdk.listEphemeralSigners) {
+        const msg = "listEphemeralSigners not available on this SDK";
+        if (setErrorOnFailure) setError(msg);
+        throw new Error(msg);
+      }
+      if (hasLoadedOnce) {
+        setIsRefreshing(true);
+      } else {
+        setIsLoading(true);
+      }
+      try {
+        const next = await sdk.listEphemeralSigners();
+        setSigners(next.signers ?? []);
+        setHasLoadedOnce(true);
+        return next;
+      } catch (err) {
+        if (setErrorOnFailure) {
+          const msg = err instanceof Error ? err.message : String(err);
+          setError(msg);
+        }
+        throw err;
+      } finally {
+        setIsLoading(false);
+        setIsRefreshing(false);
+      }
+    },
+    [sdk, hasLoadedOnce]
+  );
+  const refresh = (0, import_react7.useCallback)(async () => {
+    setError(null);
+    return refreshInternal(true);
+  }, [refreshInternal]);
+  const provision = (0, import_react7.useCallback)(
+    async (params) => {
+      if (!sdk.provisionEphemeralSigner) {
+        const msg = "provisionEphemeralSigner not available on this SDK";
+        setError(msg);
+        throw new Error(msg);
+      }
+      setIsProvisioning(true);
+      setError(null);
+      try {
+        const next = await sdk.provisionEphemeralSigner(
+          params
+        );
+        setLastProvisioned(next);
+        refreshInternal(false).catch(() => {
+        });
+        return next;
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        setError(msg);
+        throw err;
+      } finally {
+        setIsProvisioning(false);
+      }
+    },
+    [sdk, refreshInternal]
+  );
+  const revoke = (0, import_react7.useCallback)(
+    async (params) => {
+      if (!sdk.revokeEphemeralSigner) {
+        const msg = "revokeEphemeralSigner not available on this SDK";
+        setError(msg);
+        throw new Error(msg);
+      }
+      setIsRevoking(true);
+      setError(null);
+      try {
+        await sdk.revokeEphemeralSigner(params);
+        refreshInternal(false).catch(() => {
+        });
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        setError(msg);
+        throw err;
+      } finally {
+        setIsRevoking(false);
+      }
+    },
+    [sdk, refreshInternal]
+  );
+  const reset = (0, import_react7.useCallback)(() => {
+    setLastProvisioned(null);
+    setError(null);
+  }, []);
+  const didAutoFetchRef = (0, import_react7.useRef)(false);
+  (0, import_react7.useEffect)(() => {
+    if (didAutoFetchRef.current) return;
+    if (!sdk.ready) return;
+    if (!sdk.listEphemeralSigners) return;
+    didAutoFetchRef.current = true;
+    refresh().catch(() => {
+    });
+  }, [sdk.ready, sdk.listEphemeralSigners, refresh]);
+  return {
+    signers,
+    isLoading,
+    isRefreshing,
+    refresh,
+    provision,
+    isProvisioning,
+    lastProvisioned,
+    revoke,
+    isRevoking,
+    error,
+    reset
+  };
+};
+
 // src/lib/auth/authentication-state.ts
 var AuthenticationState = class {
   constructor() {
@@ -428,7 +553,7 @@ var import_web3 = require("@solana/web3.js");
 var import_bn = __toESM(require("bn.js"));
 
 // src/react/use-passkey-status.ts
-var import_react7 = require("react");
+var import_react8 = require("react");
 var sharedHasPasskey = null;
 var sharedPasskeys = [];
 var sharedLoading = false;
@@ -493,18 +618,18 @@ async function sharedRefresh(sdk) {
 }
 var usePasskeyStatus = () => {
   const sdk = useMoonKeySDK();
-  const [, forceUpdate] = (0, import_react7.useReducer)((x) => x + 1, 0);
-  (0, import_react7.useEffect)(() => {
+  const [, forceUpdate] = (0, import_react8.useReducer)((x) => x + 1, 0);
+  (0, import_react8.useEffect)(() => {
     const cb = () => forceUpdate();
     subscribers.add(cb);
     return () => {
       subscribers.delete(cb);
     };
   }, []);
-  const refresh = (0, import_react7.useCallback)(async () => {
+  const refresh = (0, import_react8.useCallback)(async () => {
     return sharedRefresh(sdk);
   }, [sdk]);
-  (0, import_react7.useEffect)(() => {
+  (0, import_react8.useEffect)(() => {
     if (!sdk?.getPasskeyStatus) return;
     if (sdk.ready && !sdk.isAuthenticated) {
       resetShared();
@@ -523,12 +648,12 @@ var usePasskeyStatus = () => {
 };
 
 // src/react/use-manage-passkeys.ts
-var import_react8 = require("react");
+var import_react9 = require("react");
 var useAddPasskey = () => {
   const sdk = useMoonKeySDK();
-  const [isAdding, setIsAdding] = (0, import_react8.useState)(false);
-  const [error, setError] = (0, import_react8.useState)(null);
-  const addPasskey = (0, import_react8.useCallback)(
+  const [isAdding, setIsAdding] = (0, import_react9.useState)(false);
+  const [error, setError] = (0, import_react9.useState)(null);
+  const addPasskey = (0, import_react9.useCallback)(
     async (params) => {
       if (!sdk?.addPasskey) throw new Error("SDK not ready");
       setIsAdding(true);
@@ -549,9 +674,9 @@ var useAddPasskey = () => {
 };
 var useRemovePasskey = () => {
   const sdk = useMoonKeySDK();
-  const [isRemoving, setIsRemoving] = (0, import_react8.useState)(false);
-  const [error, setError] = (0, import_react8.useState)(null);
-  const removePasskey = (0, import_react8.useCallback)(
+  const [isRemoving, setIsRemoving] = (0, import_react9.useState)(false);
+  const [error, setError] = (0, import_react9.useState)(null);
+  const removePasskey = (0, import_react9.useCallback)(
     async (credentialIdB64url) => {
       if (!sdk?.removePasskey) throw new Error("SDK not ready");
       setIsRemoving(true);
@@ -575,6 +700,7 @@ var useRemovePasskey = () => {
   SDKProvider,
   useAddPasskey,
   useCreateWallet,
+  useEphemeralSigner,
   useImportKey,
   useLoginWithEmail,
   useLogout,

package/dist/react/index.mjs

@@ -1,7 +1,7 @@
 import {
   formatPasskeyLabel,
   resolvePasskeyMetadata
-} from "../chunk-6LTEG7VN.mjs";
+} from "../chunk-I56GRKAG.mjs";
 import "../chunk-GQKIA37O.mjs";
 import {
   SDKProvider,
@@ -170,8 +170,132 @@ var useImportKey = () => {
   };
 };
 
+// src/react/use-ephemeral-signer.ts
+import { useCallback as useCallback6, useEffect as useEffect3, useRef as useRef3, useState as useState5 } from "react";
+var useEphemeralSigner = () => {
+  const sdk = useMoonKeySDK();
+  const [signers, setSigners] = useState5([]);
+  const [isLoading, setIsLoading] = useState5(true);
+  const [isRefreshing, setIsRefreshing] = useState5(false);
+  const [hasLoadedOnce, setHasLoadedOnce] = useState5(false);
+  const [isProvisioning, setIsProvisioning] = useState5(false);
+  const [lastProvisioned, setLastProvisioned] = useState5(null);
+  const [isRevoking, setIsRevoking] = useState5(false);
+  const [error, setError] = useState5(null);
+  const refreshInternal = useCallback6(
+    async (setErrorOnFailure) => {
+      if (!sdk.listEphemeralSigners) {
+        const msg = "listEphemeralSigners not available on this SDK";
+        if (setErrorOnFailure) setError(msg);
+        throw new Error(msg);
+      }
+      if (hasLoadedOnce) {
+        setIsRefreshing(true);
+      } else {
+        setIsLoading(true);
+      }
+      try {
+        const next = await sdk.listEphemeralSigners();
+        setSigners(next.signers ?? []);
+        setHasLoadedOnce(true);
+        return next;
+      } catch (err) {
+        if (setErrorOnFailure) {
+          const msg = err instanceof Error ? err.message : String(err);
+          setError(msg);
+        }
+        throw err;
+      } finally {
+        setIsLoading(false);
+        setIsRefreshing(false);
+      }
+    },
+    [sdk, hasLoadedOnce]
+  );
+  const refresh = useCallback6(async () => {
+    setError(null);
+    return refreshInternal(true);
+  }, [refreshInternal]);
+  const provision = useCallback6(
+    async (params) => {
+      if (!sdk.provisionEphemeralSigner) {
+        const msg = "provisionEphemeralSigner not available on this SDK";
+        setError(msg);
+        throw new Error(msg);
+      }
+      setIsProvisioning(true);
+      setError(null);
+      try {
+        const next = await sdk.provisionEphemeralSigner(
+          params
+        );
+        setLastProvisioned(next);
+        refreshInternal(false).catch(() => {
+        });
+        return next;
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        setError(msg);
+        throw err;
+      } finally {
+        setIsProvisioning(false);
+      }
+    },
+    [sdk, refreshInternal]
+  );
+  const revoke = useCallback6(
+    async (params) => {
+      if (!sdk.revokeEphemeralSigner) {
+        const msg = "revokeEphemeralSigner not available on this SDK";
+        setError(msg);
+        throw new Error(msg);
+      }
+      setIsRevoking(true);
+      setError(null);
+      try {
+        await sdk.revokeEphemeralSigner(params);
+        refreshInternal(false).catch(() => {
+        });
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        setError(msg);
+        throw err;
+      } finally {
+        setIsRevoking(false);
+      }
+    },
+    [sdk, refreshInternal]
+  );
+  const reset = useCallback6(() => {
+    setLastProvisioned(null);
+    setError(null);
+  }, []);
+  const didAutoFetchRef = useRef3(false);
+  useEffect3(() => {
+    if (didAutoFetchRef.current) return;
+    if (!sdk.ready) return;
+    if (!sdk.listEphemeralSigners) return;
+    didAutoFetchRef.current = true;
+    refresh().catch(() => {
+    });
+  }, [sdk.ready, sdk.listEphemeralSigners, refresh]);
+  return {
+    signers,
+    isLoading,
+    isRefreshing,
+    refresh,
+    provision,
+    isProvisioning,
+    lastProvisioned,
+    revoke,
+    isRevoking,
+    error,
+    reset
+  };
+};
+
 // src/react/use-passkey-status.ts
-import { useCallback as useCallback6, useEffect as useEffect3, useReducer } from "react";
+import { useCallback as useCallback7, useEffect as useEffect4, useReducer } from "react";
 var sharedHasPasskey = null;
 var sharedPasskeys = [];
 var sharedLoading = false;
@@ -237,17 +361,17 @@ async function sharedRefresh(sdk) {
 var usePasskeyStatus = () => {
   const sdk = useMoonKeySDK();
   const [, forceUpdate] = useReducer((x) => x + 1, 0);
-  useEffect3(() => {
+  useEffect4(() => {
     const cb = () => forceUpdate();
     subscribers.add(cb);
     return () => {
       subscribers.delete(cb);
     };
   }, []);
-  const refresh = useCallback6(async () => {
+  const refresh = useCallback7(async () => {
     return sharedRefresh(sdk);
   }, [sdk]);
-  useEffect3(() => {
+  useEffect4(() => {
     if (!sdk?.getPasskeyStatus) return;
     if (sdk.ready && !sdk.isAuthenticated) {
       resetShared();
@@ -266,12 +390,12 @@ var usePasskeyStatus = () => {
 };
 
 // src/react/use-manage-passkeys.ts
-import { useCallback as useCallback7, useState as useState5 } from "react";
+import { useCallback as useCallback8, useState as useState6 } from "react";
 var useAddPasskey = () => {
   const sdk = useMoonKeySDK();
-  const [isAdding, setIsAdding] = useState5(false);
-  const [error, setError] = useState5(null);
-  const addPasskey = useCallback7(
+  const [isAdding, setIsAdding] = useState6(false);
+  const [error, setError] = useState6(null);
+  const addPasskey = useCallback8(
     async (params) => {
       if (!sdk?.addPasskey) throw new Error("SDK not ready");
       setIsAdding(true);
@@ -292,9 +416,9 @@ var useAddPasskey = () => {
 };
 var useRemovePasskey = () => {
   const sdk = useMoonKeySDK();
-  const [isRemoving, setIsRemoving] = useState5(false);
-  const [error, setError] = useState5(null);
-  const removePasskey = useCallback7(
+  const [isRemoving, setIsRemoving] = useState6(false);
+  const [error, setError] = useState6(null);
+  const removePasskey = useCallback8(
     async (credentialIdB64url) => {
       if (!sdk?.removePasskey) throw new Error("SDK not ready");
       setIsRemoving(true);
@@ -317,6 +441,7 @@ export {
   SDKProvider,
   useAddPasskey,
   useCreateWallet,
+  useEphemeralSigner,
   useImportKey,
   useLoginWithEmail,
   useLogout,

package/dist/react/solana.d.mts

@@ -1,5 +1,4 @@
 import { SolanaGetBalanceParams, SolanaGetBalanceResult, SolanaSendTransactionParams, SolanaSendTransactionResult, SolanaSignMessageParams, SolanaSignMessageResult, SolanaSignTransactionParams, SolanaSignTransactionResult } from '../types/index.mjs';
-import '../chain-C9dvKXUY.mjs';
 
 declare const useSignMessage: () => {
     signMessage: (params: SolanaSignMessageParams) => Promise<SolanaSignMessageResult>;

package/dist/react/solana.d.ts

@@ -1,5 +1,4 @@
 import { SolanaGetBalanceParams, SolanaGetBalanceResult, SolanaSendTransactionParams, SolanaSendTransactionResult, SolanaSignMessageParams, SolanaSignMessageResult, SolanaSignTransactionParams, SolanaSignTransactionResult } from '../types/index.js';
-import '../chain-C9dvKXUY.js';
 
 declare const useSignMessage: () => {
     signMessage: (params: SolanaSignMessageParams) => Promise<SolanaSignMessageResult>;

package/dist/sdk/index.d.mts

@@ -1,9 +1,8 @@
-import { T as Transport, P as PasskeyAssertor, K as KvStorage } from '../interfaces-cdKh3sLA.mjs';
-export { O as OAuthOpener, a as PlatformImpls, W as WebAuthnAssertionResponse, b as WebAuthnRequestOptions } from '../interfaces-cdKh3sLA.mjs';
+import { T as Transport, P as PasskeyAssertor, K as KvStorage } from '../interfaces-BdIeMGGD.mjs';
+export { O as OAuthOpener, a as PlatformImpls, W as WebAuthnAssertionResponse, b as WebAuthnRequestOptions } from '../interfaces-BdIeMGGD.mjs';
 import { C as CachedAssertion } from '../passkey-cache-WnDFQ-v4.mjs';
-import { EthereumSignMessageParams, EthereumSignMessageResult, EthereumSignTransactionParams, EthereumSignTransactionResult, EthereumSignTypedDataParams, EthereumSignTypedDataResult, EthereumSignHashParams, EthereumSignHashResult, EthereumSign7702AuthorizationParams, EthereumSign7702AuthorizationResult, EthereumSendTransactionParams, EthereumSendTransactionResult, EthereumGetBalanceParams, EthereumGetBalanceResult, EthereumGetTokenAccountsByOwnerParams, EthereumGetTokenAccountsByOwnerResult, SolanaSignMessageParams, SolanaSignMessageResult, SolanaSignTransactionParams, SolanaSignTransactionResult, SolanaSendTransactionParams, SolanaSendTransactionResult, SolanaGetBalanceParams, SolanaGetBalanceResult, SolanaGetTokenAccountsByOwnerParams, SolanaGetTokenAccountsByOwnerResult, SendEmailOtpResponse, PublicWallet } from '../types/index.mjs';
-import '../post-message-CmgAfkOS.mjs';
-import '../chain-C9dvKXUY.mjs';
+import { EthereumSignMessageParams, EthereumSignMessageResult, EthereumSignTransactionParams, EthereumSignTransactionResult, EthereumSignTypedDataParams, EthereumSignTypedDataResult, EthereumSignHashParams, EthereumSignHashResult, EthereumSign7702AuthorizationParams, EthereumSign7702AuthorizationResult, EthereumSendTransactionParams, EthereumSendTransactionResult, EthereumGetBalanceParams, EthereumGetBalanceResult, EthereumGetTokenAccountsByOwnerParams, EthereumGetTokenAccountsByOwnerResult, SolanaSignMessageParams, SolanaSignMessageResult, SolanaSignTransactionParams, SolanaSignTransactionResult, SolanaSendTransactionParams, SolanaSendTransactionResult, SolanaGetBalanceParams, SolanaGetBalanceResult, SolanaGetTokenAccountsByOwnerParams, SolanaGetTokenAccountsByOwnerResult, SendEmailOtpResponse, PublicWallet, ProvisionEphemeralSignerParams, ProvisionEphemeralSignerResult, ListEphemeralSignersResult, RevokeEphemeralSignerParams } from '../types/index.mjs';
+import '../post-message-Z6cLf0mS.mjs';
 
 type AssertPasskeyInParentResult = CachedAssertion;
 declare const assertPasskeyInParent: ({ transport, passkey, publishableKey, validateCredentialInAllowList, }: {
@@ -30,17 +29,19 @@ interface ScopedPresenceToken {
 }
 interface GetInternalPresenceTokensResult {
     tokens: Record<string, ScopedPresenceToken>;
+    tokenBatches: Record<string, ScopedPresenceToken[]>;
     userHandleB64url: string;
     credentialIdB64url: string;
 }
-declare const getInternalPresenceTokens: ({ transport, passkey, publishableKey, relyingPartyOrigin, scopes, }: {
+declare const getInternalPresenceTokens: ({ transport, passkey, publishableKey, relyingPartyOrigin, scopes, scopeCounts, }: {
     transport: Transport;
     passkey: PasskeyAssertor;
     publishableKey: string;
     relyingPartyOrigin: string;
-    scopes: string[];
+    scopes?: string[];
+    scopeCounts?: Record<string, number>;
 }) => Promise<GetInternalPresenceTokensResult>;
-declare const flattenPresenceTokens: (result: GetInternalPresenceTokensResult) => Record<string, string>;
+declare const flattenPresenceTokens: (result: Pick<GetInternalPresenceTokensResult, "tokens"> & Partial<GetInternalPresenceTokensResult>) => Record<string, string>;
 
 declare const getHeadlessEthereumMethods: ({ transport, passkey, publishableKey, relyingPartyOrigin, }: {
     transport: Transport;
@@ -137,6 +138,9 @@ declare const getHeadlessGeneralMethods: ({ transport, passkey, storage, publish
     importKey: (walletType: "solana" | "ethereum", key: string) => Promise<{
         wallet: PublicWallet;
     }>;
+    provisionEphemeralSigner: (params: ProvisionEphemeralSignerParams) => Promise<ProvisionEphemeralSignerResult>;
+    listEphemeralSigners: () => Promise<ListEphemeralSignersResult>;
+    revokeEphemeralSigner: (params: RevokeEphemeralSignerParams) => Promise<void>;
     getWallets: (walletType: "solana" | "ethereum") => Promise<{
         wallets: unknown[];
         walletType: string;
@@ -154,4 +158,54 @@ declare const getHeadlessGeneralMethods: ({ transport, passkey, storage, publish
     getUser: () => Promise<unknown>;
 };
 
-export { type AssertPasskeyInParentResult, type GetInternalPresenceTokensResult, type GetPresenceTokenResult, KvStorage, type LoginWithCodeParams, PasskeyAssertor, type ScopedPresenceToken, type SendCodeParams, Transport, type VerifyOAuthParams, assertPasskeyInParent, flattenPresenceTokens, getHeadlessAuthenticationMethods, getHeadlessEthereumMethods, getHeadlessGeneralMethods, getHeadlessSolanaMethods, getInternalPresenceTokens, getPresenceToken };
+interface EphemeralSignerSignInput {
+    /** Lowercase-hex 32-byte Ed25519 agent public key (no 0x prefix). */
+    apiPubHex: string;
+    /** Lowercase-hex 32-byte Ed25519 agent private key (no 0x prefix). */
+    apiPrivHex: string;
+    /**
+     * Wallet UUID (from `user.wallets[i].id`) the agent should sign on
+     * behalf of. Must be one of the wallets the agent was provisioned
+     * for. The SDK resolves this internally to the wallet's MPC `key_id`
+     * + stored `derivation_path` — integrators never see those values.
+     */
+    walletId: string;
+    /**
+     * Lowercase-hex digest to sign — keccak256 of the message/tx for
+     * ECDSA, raw bytes for Ed25519. No 0x prefix.
+     */
+    rawSigningPayloadHex: string;
+    /** Defaults to now. SES rejects timestamps further than ±5 min from its clock. */
+    issuedAt?: Date;
+    /** Wallets backend base URL (no trailing slash). */
+    baseUrl: string;
+    /**
+     * MoonX publishable key (`moon_pk_…`). The wallets backend's
+     * /ephemeral-signers/* router group is gated by RequirePublicToken — every
+     * call needs an `Authorization: PublicToken <publishableKey>` header.
+     */
+    publishableKey: string;
+    /** Optional fetch override — e.g. for Next.js route handlers or test stubs. */
+    fetchImpl?: typeof fetch;
+}
+interface EphemeralSignerSignResult {
+    scheme: "ecdsa_secp256k1" | "eddsa_ed25519";
+    signature: {
+        /** ECDSA only. Lowercase-hex 32-byte r. */
+        r?: string;
+        /** ECDSA only. Lowercase-hex 32-byte s. */
+        s?: string;
+        /** ECDSA only. 0..3. */
+        recovery_id?: number;
+        /** Ed25519 only. Lowercase-hex 64-byte signature. */
+        signature?: string;
+    };
+}
+declare class EphemeralSignerSignError extends Error {
+    readonly status?: number | undefined;
+    readonly body?: string | undefined;
+    constructor(message: string, status?: number | undefined, body?: string | undefined);
+}
+declare function signWithEphemeralSigner(input: EphemeralSignerSignInput): Promise<EphemeralSignerSignResult>;
+
+export { type AssertPasskeyInParentResult, EphemeralSignerSignError, type EphemeralSignerSignInput, type EphemeralSignerSignResult, type GetInternalPresenceTokensResult, type GetPresenceTokenResult, KvStorage, type LoginWithCodeParams, PasskeyAssertor, type ScopedPresenceToken, type SendCodeParams, Transport, type VerifyOAuthParams, assertPasskeyInParent, flattenPresenceTokens, getHeadlessAuthenticationMethods, getHeadlessEthereumMethods, getHeadlessGeneralMethods, getHeadlessSolanaMethods, getInternalPresenceTokens, getPresenceToken, signWithEphemeralSigner };

package/dist/sdk/index.d.ts

@@ -1,9 +1,8 @@
-import { T as Transport, P as PasskeyAssertor, K as KvStorage } from '../interfaces-pNTEOKaK.js';
-export { O as OAuthOpener, a as PlatformImpls, W as WebAuthnAssertionResponse, b as WebAuthnRequestOptions } from '../interfaces-pNTEOKaK.js';
+import { T as Transport, P as PasskeyAssertor, K as KvStorage } from '../interfaces-1vfik3Ef.js';
+export { O as OAuthOpener, a as PlatformImpls, W as WebAuthnAssertionResponse, b as WebAuthnRequestOptions } from '../interfaces-1vfik3Ef.js';
 import { C as CachedAssertion } from '../passkey-cache-WnDFQ-v4.js';
-import { EthereumSignMessageParams, EthereumSignMessageResult, EthereumSignTransactionParams, EthereumSignTransactionResult, EthereumSignTypedDataParams, EthereumSignTypedDataResult, EthereumSignHashParams, EthereumSignHashResult, EthereumSign7702AuthorizationParams, EthereumSign7702AuthorizationResult, EthereumSendTransactionParams, EthereumSendTransactionResult, EthereumGetBalanceParams, EthereumGetBalanceResult, EthereumGetTokenAccountsByOwnerParams, EthereumGetTokenAccountsByOwnerResult, SolanaSignMessageParams, SolanaSignMessageResult, SolanaSignTransactionParams, SolanaSignTransactionResult, SolanaSendTransactionParams, SolanaSendTransactionResult, SolanaGetBalanceParams, SolanaGetBalanceResult, SolanaGetTokenAccountsByOwnerParams, SolanaGetTokenAccountsByOwnerResult, SendEmailOtpResponse, PublicWallet } from '../types/index.js';
-import '../post-message-CmgAfkOS.js';
-import '../chain-C9dvKXUY.js';
+import { EthereumSignMessageParams, EthereumSignMessageResult, EthereumSignTransactionParams, EthereumSignTransactionResult, EthereumSignTypedDataParams, EthereumSignTypedDataResult, EthereumSignHashParams, EthereumSignHashResult, EthereumSign7702AuthorizationParams, EthereumSign7702AuthorizationResult, EthereumSendTransactionParams, EthereumSendTransactionResult, EthereumGetBalanceParams, EthereumGetBalanceResult, EthereumGetTokenAccountsByOwnerParams, EthereumGetTokenAccountsByOwnerResult, SolanaSignMessageParams, SolanaSignMessageResult, SolanaSignTransactionParams, SolanaSignTransactionResult, SolanaSendTransactionParams, SolanaSendTransactionResult, SolanaGetBalanceParams, SolanaGetBalanceResult, SolanaGetTokenAccountsByOwnerParams, SolanaGetTokenAccountsByOwnerResult, SendEmailOtpResponse, PublicWallet, ProvisionEphemeralSignerParams, ProvisionEphemeralSignerResult, ListEphemeralSignersResult, RevokeEphemeralSignerParams } from '../types/index.js';
+import '../post-message-Z6cLf0mS.js';
 
 type AssertPasskeyInParentResult = CachedAssertion;
 declare const assertPasskeyInParent: ({ transport, passkey, publishableKey, validateCredentialInAllowList, }: {
@@ -30,17 +29,19 @@ interface ScopedPresenceToken {
 }
 interface GetInternalPresenceTokensResult {
     tokens: Record<string, ScopedPresenceToken>;
+    tokenBatches: Record<string, ScopedPresenceToken[]>;
     userHandleB64url: string;
     credentialIdB64url: string;
 }
-declare const getInternalPresenceTokens: ({ transport, passkey, publishableKey, relyingPartyOrigin, scopes, }: {
+declare const getInternalPresenceTokens: ({ transport, passkey, publishableKey, relyingPartyOrigin, scopes, scopeCounts, }: {
     transport: Transport;
     passkey: PasskeyAssertor;
     publishableKey: string;
     relyingPartyOrigin: string;
-    scopes: string[];
+    scopes?: string[];
+    scopeCounts?: Record<string, number>;
 }) => Promise<GetInternalPresenceTokensResult>;
-declare const flattenPresenceTokens: (result: GetInternalPresenceTokensResult) => Record<string, string>;
+declare const flattenPresenceTokens: (result: Pick<GetInternalPresenceTokensResult, "tokens"> & Partial<GetInternalPresenceTokensResult>) => Record<string, string>;
 
 declare const getHeadlessEthereumMethods: ({ transport, passkey, publishableKey, relyingPartyOrigin, }: {
     transport: Transport;
@@ -137,6 +138,9 @@ declare const getHeadlessGeneralMethods: ({ transport, passkey, storage, publish
     importKey: (walletType: "solana" | "ethereum", key: string) => Promise<{
         wallet: PublicWallet;
     }>;
+    provisionEphemeralSigner: (params: ProvisionEphemeralSignerParams) => Promise<ProvisionEphemeralSignerResult>;
+    listEphemeralSigners: () => Promise<ListEphemeralSignersResult>;
+    revokeEphemeralSigner: (params: RevokeEphemeralSignerParams) => Promise<void>;
     getWallets: (walletType: "solana" | "ethereum") => Promise<{
         wallets: unknown[];
         walletType: string;
@@ -154,4 +158,54 @@ declare const getHeadlessGeneralMethods: ({ transport, passkey, storage, publish
     getUser: () => Promise<unknown>;
 };
 
-export { type AssertPasskeyInParentResult, type GetInternalPresenceTokensResult, type GetPresenceTokenResult, KvStorage, type LoginWithCodeParams, PasskeyAssertor, type ScopedPresenceToken, type SendCodeParams, Transport, type VerifyOAuthParams, assertPasskeyInParent, flattenPresenceTokens, getHeadlessAuthenticationMethods, getHeadlessEthereumMethods, getHeadlessGeneralMethods, getHeadlessSolanaMethods, getInternalPresenceTokens, getPresenceToken };
+interface EphemeralSignerSignInput {
+    /** Lowercase-hex 32-byte Ed25519 agent public key (no 0x prefix). */
+    apiPubHex: string;
+    /** Lowercase-hex 32-byte Ed25519 agent private key (no 0x prefix). */
+    apiPrivHex: string;
+    /**
+     * Wallet UUID (from `user.wallets[i].id`) the agent should sign on
+     * behalf of. Must be one of the wallets the agent was provisioned
+     * for. The SDK resolves this internally to the wallet's MPC `key_id`
+     * + stored `derivation_path` — integrators never see those values.
+     */
+    walletId: string;
+    /**
+     * Lowercase-hex digest to sign — keccak256 of the message/tx for
+     * ECDSA, raw bytes for Ed25519. No 0x prefix.
+     */
+    rawSigningPayloadHex: string;
+    /** Defaults to now. SES rejects timestamps further than ±5 min from its clock. */
+    issuedAt?: Date;
+    /** Wallets backend base URL (no trailing slash). */
+    baseUrl: string;
+    /**
+     * MoonX publishable key (`moon_pk_…`). The wallets backend's
+     * /ephemeral-signers/* router group is gated by RequirePublicToken — every
+     * call needs an `Authorization: PublicToken <publishableKey>` header.
+     */
+    publishableKey: string;
+    /** Optional fetch override — e.g. for Next.js route handlers or test stubs. */
+    fetchImpl?: typeof fetch;
+}
+interface EphemeralSignerSignResult {
+    scheme: "ecdsa_secp256k1" | "eddsa_ed25519";
+    signature: {
+        /** ECDSA only. Lowercase-hex 32-byte r. */
+        r?: string;
+        /** ECDSA only. Lowercase-hex 32-byte s. */
+        s?: string;
+        /** ECDSA only. 0..3. */
+        recovery_id?: number;
+        /** Ed25519 only. Lowercase-hex 64-byte signature. */
+        signature?: string;
+    };
+}
+declare class EphemeralSignerSignError extends Error {
+    readonly status?: number | undefined;
+    readonly body?: string | undefined;
+    constructor(message: string, status?: number | undefined, body?: string | undefined);
+}
+declare function signWithEphemeralSigner(input: EphemeralSignerSignInput): Promise<EphemeralSignerSignResult>;
+
+export { type AssertPasskeyInParentResult, EphemeralSignerSignError, type EphemeralSignerSignInput, type EphemeralSignerSignResult, type GetInternalPresenceTokensResult, type GetPresenceTokenResult, KvStorage, type LoginWithCodeParams, PasskeyAssertor, type ScopedPresenceToken, type SendCodeParams, Transport, type VerifyOAuthParams, assertPasskeyInParent, flattenPresenceTokens, getHeadlessAuthenticationMethods, getHeadlessEthereumMethods, getHeadlessGeneralMethods, getHeadlessSolanaMethods, getInternalPresenceTokens, getPresenceToken, signWithEphemeralSigner };