@moon-x/core 0.4.0 → 0.5.0

package/dist/sdk/index.mjs

@@ -1,7 +1,7 @@
 import {
   PostMessageMethod,
   PostMessageType
-} from "../chunk-VVL65GIB.mjs";
+} from "../chunk-JU5MWLXH.mjs";
 import {
   arrayLikeToBytes,
   authState,
@@ -10,7 +10,7 @@ import {
   bs58ToBytes,
   serializeEthereumTransaction,
   toB64url
-} from "../chunk-6LTEG7VN.mjs";
+} from "../chunk-I56GRKAG.mjs";
 import "../chunk-GQKIA37O.mjs";
 
 // src/sdk/parent-passkey-assert.ts
@@ -84,7 +84,8 @@ var getInternalPresenceTokens = async ({
   passkey,
   publishableKey,
   relyingPartyOrigin,
-  scopes
+  scopes,
+  scopeCounts
 }) => {
   const { token, optionsJSON } = await transport.send(
     PostMessageType.AUTH,
@@ -92,24 +93,36 @@ var getInternalPresenceTokens = async ({
     { publishableKey, relyingPartyOrigin }
   );
   const { response, userHandleB64url, credentialIdB64url } = await passkey.assertForInternalPresence({ optionsJSON });
+  const verifyPayload = {
+    publishableKey,
+    relyingPartyOrigin,
+    token,
+    response,
+    purpose: "internal"
+  };
+  if (scopes && scopes.length > 0) verifyPayload.scopes = scopes;
+  if (scopeCounts && Object.keys(scopeCounts).length > 0) {
+    verifyPayload.scope_counts = scopeCounts;
+  }
   const verify = await transport.send(
     PostMessageType.AUTH,
     PostMessageMethod.PASSKEY_PRESENCE_VERIFY,
-    {
-      publishableKey,
-      relyingPartyOrigin,
-      token,
-      response,
-      purpose: "internal",
-      scopes
-    }
+    verifyPayload
   );
   const out = {};
   for (const [scope, t] of Object.entries(verify.tokens ?? {})) {
     out[scope] = { token: t.token, expiresAt: t.expires_at };
   }
+  const outBatches = {};
+  for (const [scope, batch] of Object.entries(verify.token_batches ?? {})) {
+    outBatches[scope] = batch.map((t) => ({
+      token: t.token,
+      expiresAt: t.expires_at
+    }));
+  }
   return {
     tokens: out,
+    tokenBatches: outBatches,
     userHandleB64url,
     credentialIdB64url
   };
@@ -556,6 +569,8 @@ var getHeadlessAuthenticationMethods = ({
 var SCOPES_CREATE_WALLET = ["dek_bootstrap", "keyshare_write"];
 var SCOPES_IMPORT_KEY = ["dek_bootstrap", "keyshare_write"];
 var SCOPES_REMOVE_PASSKEY = ["passkey_remove"];
+var SCOPES_PROVISION_EPHEMERAL_SIGNER = ["keyshare_read"];
+var SCOPES_REVOKE_EPHEMERAL_SIGNER = ["ephemeral_signer_revoke"];
 var getHeadlessGeneralMethods = ({
   transport,
   passkey,
@@ -571,7 +586,11 @@ var getHeadlessGeneralMethods = ({
     { publishableKey }
   ),
   removePasskey: async (credentialIdB64url) => {
-    const { tokens, userHandleB64url, credentialIdB64url: assertedCredId } = await getInternalPresenceTokens({
+    const {
+      tokens,
+      userHandleB64url,
+      credentialIdB64url: assertedCredId
+    } = await getInternalPresenceTokens({
       transport,
       passkey,
       publishableKey,
@@ -644,6 +663,83 @@ var getHeadlessGeneralMethods = ({
     );
     return { wallet };
   },
+  provisionEphemeralSigner: async (params) => {
+    const walletCount = params.walletIds.length;
+    if (walletCount === 0) {
+      throw new Error(
+        "provisionEphemeralSigner: at least one walletId required"
+      );
+    }
+    const { userHandleB64url, credentialIdB64url, tokenBatches } = await getInternalPresenceTokens({
+      transport,
+      passkey,
+      publishableKey,
+      relyingPartyOrigin,
+      scopeCounts: { [SCOPES_PROVISION_EPHEMERAL_SIGNER[0]]: walletCount }
+    });
+    const keyshareReadBatch = (tokenBatches[SCOPES_PROVISION_EPHEMERAL_SIGNER[0]] ?? []).map((t) => t.token);
+    if (keyshareReadBatch.length !== walletCount) {
+      throw new Error(
+        `provisionEphemeralSigner: server returned ${keyshareReadBatch.length} tokens, expected ${walletCount}`
+      );
+    }
+    return transport.send(
+      PostMessageType.WALLET,
+      PostMessageMethod.PROVISION_EPHEMERAL_SIGNER,
+      {
+        publishableKey,
+        userHandleB64url,
+        credentialIdB64url,
+        // One keyshare_read token per wallet, parallel to params.walletIds
+        // (iframe consumes them positionally after wallet resolution).
+        presenceTokenBatches: {
+          [SCOPES_PROVISION_EPHEMERAL_SIGNER[0]]: keyshareReadBatch
+        },
+        walletIds: params.walletIds,
+        expiresAt: params.expiresAt?.toISOString(),
+        label: params.label
+      }
+    );
+  },
+  // Read-only: list the user's active (non-revoked) provisioned agents
+  // for the current app. No WebAuthn ceremony needed — the wallet
+  // session JWT is enough since this exposes only metadata (api_pub,
+  // key_ids, expiry) and not the private agent material.
+  listEphemeralSigners: async () => {
+    return transport.send(
+      PostMessageType.WALLET,
+      PostMessageMethod.LIST_EPHEMERAL_SIGNERS,
+      { publishableKey }
+    );
+  },
+  // Soft-revoke a signer (and forward the revoke to SES). Requires a
+  // fresh WebAuthn-bound presence token: ephemeral_signer_revoke scope. Wallet JWT
+  // alone isn't enough because revoke is destructive (DoS-grade) — the
+  // presence proof confirms it's really the user driving it.
+  revokeEphemeralSigner: async (params) => {
+    const { userHandleB64url, credentialIdB64url, tokens } = await getInternalPresenceTokens({
+      transport,
+      passkey,
+      publishableKey,
+      relyingPartyOrigin,
+      scopes: SCOPES_REVOKE_EPHEMERAL_SIGNER
+    });
+    await transport.send(
+      PostMessageType.WALLET,
+      PostMessageMethod.REVOKE_EPHEMERAL_SIGNER,
+      {
+        publishableKey,
+        apiPubHex: params.apiPubHex,
+        userHandleB64url,
+        credentialIdB64url,
+        presenceTokens: flattenPresenceTokens({
+          tokens,
+          userHandleB64url,
+          credentialIdB64url
+        })
+      }
+    );
+  },
   getWallets: async (walletType) => {
     const { wallets } = await transport.send(
       PostMessageType.WALLET,
@@ -660,11 +756,9 @@ var getHeadlessGeneralMethods = ({
   // silently extend session lifetime.
   getSessionTokens: async () => {
     try {
-      const session = await transport.send(
-        PostMessageType.AUTH,
-        PostMessageMethod.GET_CURRENT_SESSION,
-        { publishableKey }
-      );
+      const session = await transport.send(PostMessageType.AUTH, PostMessageMethod.GET_CURRENT_SESSION, {
+        publishableKey
+      });
       return session ? {
         accessToken: session.accessToken,
         identityToken: session.identityToken,
@@ -728,7 +822,149 @@ var getHeadlessGeneralMethods = ({
     }
   }
 });
+
+// src/sdk/ephemeral-signer-sign.ts
+import { ed25519 } from "@noble/curves/ed25519";
+import { bytesToHex, hexToBytes } from "@noble/hashes/utils";
+function normalizeBase(url) {
+  return url.replace(/\/+$/, "");
+}
+var EphemeralSignerSignError = class extends Error {
+  constructor(message, status, body) {
+    super(message);
+    this.status = status;
+    this.body = body;
+    this.name = "EphemeralSignerSignError";
+  }
+};
+var bindingsCache = /* @__PURE__ */ new Map();
+async function resolveBinding(input) {
+  const cached = bindingsCache.get(input.apiPubHex);
+  if (cached) {
+    const hit2 = cached.find((b) => b.walletId === input.walletId);
+    if (hit2) return hit2;
+  }
+  const issuedAt = (/* @__PURE__ */ new Date()).toISOString();
+  const signedBodyBytes = new TextEncoder().encode(
+    JSON.stringify({ issued_at: issuedAt })
+  );
+  const apiPrivBytes = hexToBytes(input.apiPrivHex);
+  const agentSig = ed25519.sign(signedBodyBytes, apiPrivBytes);
+  const url = `${normalizeBase(input.baseUrl)}/v0/wallets/ephemeral-signers/me/wallets`;
+  const fetchFn = input.fetchImpl ?? fetch;
+  let response;
+  try {
+    response = await fetchFn(url, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `PublicToken ${input.publishableKey}`
+      },
+      body: JSON.stringify({
+        api_pub: input.apiPubHex,
+        signed_body: bytesToHex(signedBodyBytes),
+        agent_signature: bytesToHex(agentSig)
+      })
+    });
+  } catch (e) {
+    throw new EphemeralSignerSignError(
+      `wallet binding fetch failed: ${e instanceof Error ? e.message : String(e)}`
+    );
+  }
+  if (!response.ok) {
+    const body = await response.text().catch(() => "");
+    throw new EphemeralSignerSignError(
+      `wallet binding fetch failed: ${response.status}`,
+      response.status,
+      body
+    );
+  }
+  const json = await response.json();
+  const bindings = json.wallets.map((w) => ({
+    walletId: w.wallet_id,
+    keyId: w.key_id,
+    derivationPath: w.derivation_path
+  }));
+  bindingsCache.set(input.apiPubHex, bindings);
+  const hit = bindings.find((b) => b.walletId === input.walletId);
+  if (!hit) {
+    throw new EphemeralSignerSignError(
+      `walletId ${input.walletId} is not authorized for this agent`
+    );
+  }
+  return hit;
+}
+async function signWithEphemeralSigner(input) {
+  if (!/^[0-9a-f]{64}$/i.test(input.apiPubHex)) {
+    throw new EphemeralSignerSignError(
+      "apiPubHex must be 64 lowercase hex chars (32-byte Ed25519 pubkey)"
+    );
+  }
+  if (!/^[0-9a-f]{64}$/i.test(input.apiPrivHex)) {
+    throw new EphemeralSignerSignError(
+      "apiPrivHex must be 64 lowercase hex chars (32-byte Ed25519 privkey)"
+    );
+  }
+  if (!input.walletId) {
+    throw new EphemeralSignerSignError("walletId is required");
+  }
+  if (!input.rawSigningPayloadHex || !/^[0-9a-f]+$/i.test(input.rawSigningPayloadHex)) {
+    throw new EphemeralSignerSignError(
+      "rawSigningPayloadHex must be a non-empty lowercase hex string"
+    );
+  }
+  if (!input.publishableKey) {
+    throw new EphemeralSignerSignError(
+      "publishableKey is required \u2014 wallets backend gates /ephemeral-signers/* with RequirePublicToken"
+    );
+  }
+  const binding = await resolveBinding(input);
+  const issuedAt = (input.issuedAt ?? /* @__PURE__ */ new Date()).toISOString();
+  const signedPayload = {
+    raw_signing_payload: input.rawSigningPayloadHex,
+    key_id: binding.keyId,
+    derivation_path: binding.derivationPath,
+    issued_at: issuedAt
+  };
+  const signedBodyBytes = new TextEncoder().encode(
+    JSON.stringify(signedPayload)
+  );
+  const apiPrivBytes = hexToBytes(input.apiPrivHex);
+  const agentSig = ed25519.sign(signedBodyBytes, apiPrivBytes);
+  const requestBody = {
+    api_pub: input.apiPubHex,
+    signed_body: bytesToHex(signedBodyBytes),
+    agent_signature: bytesToHex(agentSig)
+  };
+  const url = `${normalizeBase(input.baseUrl)}/v0/wallets/ephemeral-signers/sign`;
+  const fetchFn = input.fetchImpl ?? fetch;
+  let response;
+  try {
+    response = await fetchFn(url, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `PublicToken ${input.publishableKey}`
+      },
+      body: JSON.stringify(requestBody)
+    });
+  } catch (e) {
+    throw new EphemeralSignerSignError(
+      `transport failure: ${e instanceof Error ? e.message : String(e)}`
+    );
+  }
+  if (!response.ok) {
+    const body = await response.text().catch(() => "");
+    throw new EphemeralSignerSignError(
+      `ephemeral signer sign failed: ${response.status}`,
+      response.status,
+      body
+    );
+  }
+  return await response.json();
+}
 export {
+  EphemeralSignerSignError,
   assertPasskeyInParent,
   flattenPresenceTokens,
   getHeadlessAuthenticationMethods,
@@ -736,5 +972,6 @@ export {
   getHeadlessGeneralMethods,
   getHeadlessSolanaMethods,
   getInternalPresenceTokens,
-  getPresenceToken
+  getPresenceToken,
+  signWithEphemeralSigner
 };

package/dist/types/index.d.mts

@@ -1,5 +1,49 @@
-import { a as ChainLikeWithId, C as Chain } from '../chain-C9dvKXUY.mjs';
-export { B as BlockExplorer, E as EthereumChainConfig, N as NativeCurrency, R as RpcConfig, b as RpcUrls } from '../chain-C9dvKXUY.mjs';
+type RpcUrls = {
+    http: readonly string[];
+    webSocket?: readonly string[];
+};
+type NativeCurrency = {
+    name: string;
+    symbol: string;
+    decimals: number;
+};
+type BlockExplorer = {
+    name: string;
+    url: string;
+};
+type Chain = {
+    id: number;
+    name: string;
+    network?: string;
+    nativeCurrency: NativeCurrency;
+    blockExplorers?: {
+        [key: string]: BlockExplorer;
+        default: BlockExplorer;
+    };
+    rpcUrls: {
+        [key: string]: RpcUrls;
+        default: RpcUrls;
+    };
+    testnet?: boolean;
+};
+type ChainLikeWithId = {
+    id: number;
+};
+type RpcConfig = {
+    rpcUrls?: {
+        [chainId: number]: string;
+    };
+    rpcTimeout?: number;
+};
+interface EthereumChainConfig {
+    defaultChain?: any;
+    supportedChains?: any[];
+    rpcs?: {
+        'ethereum:mainnet': {
+            rpc: string;
+        };
+    };
+}
 
 interface PublicWallet {
     id: string;
@@ -619,6 +663,94 @@ interface SolanaGetTokenAccountsByOwnerResult {
     tokenAccounts: any[];
 }
 
+type EphemeralSignerScheme = "ecdsa_secp256k1" | "eddsa_ed25519";
+type EphemeralSignerChain = "ethereum" | "solana";
+interface ProvisionEphemeralSignerParams {
+    /**
+     * Wallet IDs (from `user.wallets[i].id`) the agent will be authorized
+     * over. The iframe resolves each ID to its `key_id`, chain → MPC
+     * scheme, and stored `derivation_path` — integrator code doesn't need
+     * to know about MPC internals or BIP-32 path formatting.
+     */
+    walletIds: string[];
+    /**
+     * Optional expiration. If set, the SES enclave refuses sign requests
+     * issued after this timestamp. Omit for an open-ended provisioning
+     * the user can revoke later.
+     */
+    expiresAt?: Date;
+    /**
+     * Optional user-facing name ("DCA bot"). Stored on the wallets
+     * backend for the manage view — not sealed into the SES AAD, so
+     * renaming later is a DB-only edit and doesn't invalidate the
+     * provisioned signer.
+     */
+    label?: string;
+}
+/**
+ * Per-wallet display entry inside an EphemeralSigner. The list
+ * response is deliberately slim — schemes / derivation paths stay
+ * server-side (SES enforces them) and are exposed via a per-signer
+ * detail endpoint if ever needed.
+ */
+interface EphemeralSignerWallet {
+    /** Wallet's public address/key, as stored in `platform.wallets.public_key`. */
+    address: string;
+    /** "ethereum", "solana", etc. */
+    chain: string;
+}
+/**
+ * One previously-provisioned ephemeral signer as returned by the list
+ * endpoint. Lighter than ProvisionEphemeralSignerResult — no enclave
+ * attestation metadata, no priv key. Drives the manage view.
+ */
+interface EphemeralSigner {
+    /** Lowercase-hex Ed25519 public key. Unique within the app. */
+    api_pub: string;
+    label?: string;
+    /** One entry per wallet the signer is authorized over, in provisioning order. */
+    wallets: EphemeralSignerWallet[];
+    /** RFC3339. Omitted if the signer has no expiration. */
+    expires_at?: string;
+    /** RFC3339. When the row was created. */
+    provisioned_at: string;
+}
+interface ListEphemeralSignersResult {
+    signers: EphemeralSigner[];
+}
+interface RevokeEphemeralSignerParams {
+    /** Lowercase-hex Ed25519 signer public key, no 0x. */
+    apiPubHex: string;
+}
+interface ProvisionEphemeralSignerResult {
+    /** 32-byte Ed25519 signer public key (lowercase hex, no 0x). Already provisioned in the SES enclave. */
+    apiPubHex: string;
+    /**
+     * 32-byte Ed25519 signer private key (lowercase hex, no 0x). MoonX
+     * does not persist this — the caller is responsible for surfacing it
+     * to the user exactly once and never storing it server-side.
+     */
+    apiPrivHex: string;
+    /** AWS Nitro module ID from the verified attestation (e.g. `i-…-enc…`). */
+    moduleId: string;
+    /** PCR indices that matched the operator-pinned allowlist (typically [0,1,2]). */
+    pcrsMatched: number[];
+    /**
+     * The exact ProvisionAad JSON the iframe sealed to the enclave —
+     * useful for rendering a confirmation summary in the parent UI
+     * without rebuilding it from `wallets`.
+     */
+    aad: {
+        api_pub: string;
+        shares: Array<{
+            key_id: string;
+            scheme: EphemeralSignerScheme;
+            allowed_derivation_paths: string[];
+        }>;
+        expires_at: string | null;
+    };
+}
+
 type EmailOtpFlowState = {
     status: "start";
 } | {
@@ -1194,4 +1326,4 @@ interface WalletVerifyRequest {
     sessionExpiresIn: number;
 }
 
-export { type AccessTokenClaims, type AppConfigRequest, type AppConfigResponse, type AttachOAuthTokenRequest, type AttachOAuthTokenResponse, type AuthAppearance, type AuthFlow, type AuthFlowComponent, type AuthLoginMethod, type AuthProviderConfig, type BaseGetBalanceParams, type BaseGetBalanceResult, type BaseGetTokenAccountsParams, type BaseSendTransactionParams, type BaseSendTransactionResult, type BaseSignMessageParams, type BaseSignMessageResult, type BaseSignTransactionParams, type BaseSignTransactionResult, type BaseTokenClaims, type BaseUIOptions, type BaseWalletHooks, Chain, ChainLikeWithId, type ContractUIOptions, type CreateWalletResponse, type DefaultFundingMethod, type DeleteSessionRequest, type DeleteSessionResponse, type DetachOAuthTokenRequest, type DeviceFingerprint, type DisplayMode, type EmailOtpConfig, type EmailOtpFlowState, type EthereumFundingConfig, type EthereumGetBalanceParams, type EthereumGetBalanceResult, type EthereumGetTokenAccountsByOwnerParams, type EthereumGetTokenAccountsByOwnerResult, type EthereumSendTransactionParams, type EthereumSendTransactionRequest, type EthereumSendTransactionResult, type EthereumSign7702AuthorizationParams, type EthereumSign7702AuthorizationResult, type EthereumSignHashParams, type EthereumSignHashResult, type EthereumSignMessageParams, type EthereumSignMessageResult, type EthereumSignTransactionParams, type EthereumSignTransactionResult, type EthereumSignTypedDataParams, type EthereumSignTypedDataResult, type EthereumSwitchChainParams, type ExportKeyConfig, type Factor, type FlexibleTheme, type FundWalletConfig, type FundingEvents, type FundingMethod, type FundingUIConfig, type GetCurrentSessionRequest, type GetCurrentSessionResponse, type Hex, type IdentityTokenClaims, type IdpProvider, type IsAuthenticatedRequest, type IsAuthenticatedResponse, type LoginTokenBundle, type LogoutRequest, type LogoutResponse, type MessageTypeProperty, type MessageTypes, type MoonKeyThemeConfig, type MoonPaySignRequest, type MoonPaySignResponse, type MpcKeyShares, Network, type OAuthRequest, type OAuthResponse, type OnrampFundingSettings, type PasskeyEnrollConfig, type PasskeySettings, type PreferredCardProvider, type PrefillConfig, type PresenceTokenClaims, type PublicEthereumWallet, type PublicSessionData, type PublicWallet, type RefreshSessionRequest, type RefreshSessionResponse, type RetrieveWalletKeyRequest, type RetrieveWalletKeyResponse, type SdkSettings, type SendEmailOtpRequest, type SendEmailOtpResponse, type SendTransactionConfig, type SendTransactionRequest, type SessionData, type SharesDeviceRequest, type SharesDeviceResponse, type Sign7702AuthorizationError, type Sign7702AuthorizationParams, type Sign7702AuthorizationResponse, type Sign7702AuthorizationResult, type SignMessageConfig, type SignTransactionConfig, type SignTypedDataError, type SignTypedDataParams, type SignTypedDataResponse, type SignTypedDataResult, type SmsSettings, type SolanaChain, type SolanaFundingConfig, type SolanaGetBalanceParams, type SolanaGetBalanceResult, type SolanaGetTokenAccountsByOwnerParams, type SolanaGetTokenAccountsByOwnerResult, type SolanaSendTransactionParams, type SolanaSendTransactionResult, type SolanaSignMessageParams, type SolanaSignMessageResult, type SolanaSignTransactionParams, type SolanaSignTransactionResult, type TransactionCommitment, type TransactionEncoding, type TransactionUIOptions, type TypedMessage, type UseFundWalletInterface, type UsersMePublicResponse, type UsersMeRequest, type UsersMeResponse, type VerifiedSession, type VerifyEmailOtpRequest, type VerifyEmailOtpResponse, type VerifyEmailOtpUser, type VerifyOAuthTokenRequest, type VerifyOAuthTokenResponse, type VerifySiweWalletRegistrationRequest, WALLET_ERROR_CODES, type Wallet, type WalletChain, type WalletChainType, type WalletConnectConfig, WalletCreationError, type WalletError, type WalletErrorCode, type WalletKeyRequest, type WalletListEntry, type WalletRegistrationNonceRequest, type WalletRegistrationNonceResponse, type WalletType, type WalletVerifyRequest };
+export { type AccessTokenClaims, type AppConfigRequest, type AppConfigResponse, type AttachOAuthTokenRequest, type AttachOAuthTokenResponse, type AuthAppearance, type AuthFlow, type AuthFlowComponent, type AuthLoginMethod, type AuthProviderConfig, type BaseGetBalanceParams, type BaseGetBalanceResult, type BaseGetTokenAccountsParams, type BaseSendTransactionParams, type BaseSendTransactionResult, type BaseSignMessageParams, type BaseSignMessageResult, type BaseSignTransactionParams, type BaseSignTransactionResult, type BaseTokenClaims, type BaseUIOptions, type BaseWalletHooks, type BlockExplorer, type Chain, type ChainLikeWithId, type ContractUIOptions, type CreateWalletResponse, type DefaultFundingMethod, type DeleteSessionRequest, type DeleteSessionResponse, type DetachOAuthTokenRequest, type DeviceFingerprint, type DisplayMode, type EmailOtpConfig, type EmailOtpFlowState, type EphemeralSigner, type EphemeralSignerChain, type EphemeralSignerScheme, type EphemeralSignerWallet, type EthereumChainConfig, type EthereumFundingConfig, type EthereumGetBalanceParams, type EthereumGetBalanceResult, type EthereumGetTokenAccountsByOwnerParams, type EthereumGetTokenAccountsByOwnerResult, type EthereumSendTransactionParams, type EthereumSendTransactionRequest, type EthereumSendTransactionResult, type EthereumSign7702AuthorizationParams, type EthereumSign7702AuthorizationResult, type EthereumSignHashParams, type EthereumSignHashResult, type EthereumSignMessageParams, type EthereumSignMessageResult, type EthereumSignTransactionParams, type EthereumSignTransactionResult, type EthereumSignTypedDataParams, type EthereumSignTypedDataResult, type EthereumSwitchChainParams, type ExportKeyConfig, type Factor, type FlexibleTheme, type FundWalletConfig, type FundingEvents, type FundingMethod, type FundingUIConfig, type GetCurrentSessionRequest, type GetCurrentSessionResponse, type Hex, type IdentityTokenClaims, type IdpProvider, type IsAuthenticatedRequest, type IsAuthenticatedResponse, type ListEphemeralSignersResult, type LoginTokenBundle, type LogoutRequest, type LogoutResponse, type MessageTypeProperty, type MessageTypes, type MoonKeyThemeConfig, type MoonPaySignRequest, type MoonPaySignResponse, type MpcKeyShares, type NativeCurrency, Network, type OAuthRequest, type OAuthResponse, type OnrampFundingSettings, type PasskeyEnrollConfig, type PasskeySettings, type PreferredCardProvider, type PrefillConfig, type PresenceTokenClaims, type ProvisionEphemeralSignerParams, type ProvisionEphemeralSignerResult, type PublicEthereumWallet, type PublicSessionData, type PublicWallet, type RefreshSessionRequest, type RefreshSessionResponse, type RetrieveWalletKeyRequest, type RetrieveWalletKeyResponse, type RevokeEphemeralSignerParams, type RpcConfig, type RpcUrls, type SdkSettings, type SendEmailOtpRequest, type SendEmailOtpResponse, type SendTransactionConfig, type SendTransactionRequest, type SessionData, type SharesDeviceRequest, type SharesDeviceResponse, type Sign7702AuthorizationError, type Sign7702AuthorizationParams, type Sign7702AuthorizationResponse, type Sign7702AuthorizationResult, type SignMessageConfig, type SignTransactionConfig, type SignTypedDataError, type SignTypedDataParams, type SignTypedDataResponse, type SignTypedDataResult, type SmsSettings, type SolanaChain, type SolanaFundingConfig, type SolanaGetBalanceParams, type SolanaGetBalanceResult, type SolanaGetTokenAccountsByOwnerParams, type SolanaGetTokenAccountsByOwnerResult, type SolanaSendTransactionParams, type SolanaSendTransactionResult, type SolanaSignMessageParams, type SolanaSignMessageResult, type SolanaSignTransactionParams, type SolanaSignTransactionResult, type TransactionCommitment, type TransactionEncoding, type TransactionUIOptions, type TypedMessage, type UseFundWalletInterface, type UsersMePublicResponse, type UsersMeRequest, type UsersMeResponse, type VerifiedSession, type VerifyEmailOtpRequest, type VerifyEmailOtpResponse, type VerifyEmailOtpUser, type VerifyOAuthTokenRequest, type VerifyOAuthTokenResponse, type VerifySiweWalletRegistrationRequest, WALLET_ERROR_CODES, type Wallet, type WalletChain, type WalletChainType, type WalletConnectConfig, WalletCreationError, type WalletError, type WalletErrorCode, type WalletKeyRequest, type WalletListEntry, type WalletRegistrationNonceRequest, type WalletRegistrationNonceResponse, type WalletType, type WalletVerifyRequest };

package/dist/types/index.d.ts

@@ -1,5 +1,49 @@
-import { a as ChainLikeWithId, C as Chain } from '../chain-C9dvKXUY.js';
-export { B as BlockExplorer, E as EthereumChainConfig, N as NativeCurrency, R as RpcConfig, b as RpcUrls } from '../chain-C9dvKXUY.js';
+type RpcUrls = {
+    http: readonly string[];
+    webSocket?: readonly string[];
+};
+type NativeCurrency = {
+    name: string;
+    symbol: string;
+    decimals: number;
+};
+type BlockExplorer = {
+    name: string;
+    url: string;
+};
+type Chain = {
+    id: number;
+    name: string;
+    network?: string;
+    nativeCurrency: NativeCurrency;
+    blockExplorers?: {
+        [key: string]: BlockExplorer;
+        default: BlockExplorer;
+    };
+    rpcUrls: {
+        [key: string]: RpcUrls;
+        default: RpcUrls;
+    };
+    testnet?: boolean;
+};
+type ChainLikeWithId = {
+    id: number;
+};
+type RpcConfig = {
+    rpcUrls?: {
+        [chainId: number]: string;
+    };
+    rpcTimeout?: number;
+};
+interface EthereumChainConfig {
+    defaultChain?: any;
+    supportedChains?: any[];
+    rpcs?: {
+        'ethereum:mainnet': {
+            rpc: string;
+        };
+    };
+}
 
 interface PublicWallet {
     id: string;
@@ -619,6 +663,94 @@ interface SolanaGetTokenAccountsByOwnerResult {
     tokenAccounts: any[];
 }
 
+type EphemeralSignerScheme = "ecdsa_secp256k1" | "eddsa_ed25519";
+type EphemeralSignerChain = "ethereum" | "solana";
+interface ProvisionEphemeralSignerParams {
+    /**
+     * Wallet IDs (from `user.wallets[i].id`) the agent will be authorized
+     * over. The iframe resolves each ID to its `key_id`, chain → MPC
+     * scheme, and stored `derivation_path` — integrator code doesn't need
+     * to know about MPC internals or BIP-32 path formatting.
+     */
+    walletIds: string[];
+    /**
+     * Optional expiration. If set, the SES enclave refuses sign requests
+     * issued after this timestamp. Omit for an open-ended provisioning
+     * the user can revoke later.
+     */
+    expiresAt?: Date;
+    /**
+     * Optional user-facing name ("DCA bot"). Stored on the wallets
+     * backend for the manage view — not sealed into the SES AAD, so
+     * renaming later is a DB-only edit and doesn't invalidate the
+     * provisioned signer.
+     */
+    label?: string;
+}
+/**
+ * Per-wallet display entry inside an EphemeralSigner. The list
+ * response is deliberately slim — schemes / derivation paths stay
+ * server-side (SES enforces them) and are exposed via a per-signer
+ * detail endpoint if ever needed.
+ */
+interface EphemeralSignerWallet {
+    /** Wallet's public address/key, as stored in `platform.wallets.public_key`. */
+    address: string;
+    /** "ethereum", "solana", etc. */
+    chain: string;
+}
+/**
+ * One previously-provisioned ephemeral signer as returned by the list
+ * endpoint. Lighter than ProvisionEphemeralSignerResult — no enclave
+ * attestation metadata, no priv key. Drives the manage view.
+ */
+interface EphemeralSigner {
+    /** Lowercase-hex Ed25519 public key. Unique within the app. */
+    api_pub: string;
+    label?: string;
+    /** One entry per wallet the signer is authorized over, in provisioning order. */
+    wallets: EphemeralSignerWallet[];
+    /** RFC3339. Omitted if the signer has no expiration. */
+    expires_at?: string;
+    /** RFC3339. When the row was created. */
+    provisioned_at: string;
+}
+interface ListEphemeralSignersResult {
+    signers: EphemeralSigner[];
+}
+interface RevokeEphemeralSignerParams {
+    /** Lowercase-hex Ed25519 signer public key, no 0x. */
+    apiPubHex: string;
+}
+interface ProvisionEphemeralSignerResult {
+    /** 32-byte Ed25519 signer public key (lowercase hex, no 0x). Already provisioned in the SES enclave. */
+    apiPubHex: string;
+    /**
+     * 32-byte Ed25519 signer private key (lowercase hex, no 0x). MoonX
+     * does not persist this — the caller is responsible for surfacing it
+     * to the user exactly once and never storing it server-side.
+     */
+    apiPrivHex: string;
+    /** AWS Nitro module ID from the verified attestation (e.g. `i-…-enc…`). */
+    moduleId: string;
+    /** PCR indices that matched the operator-pinned allowlist (typically [0,1,2]). */
+    pcrsMatched: number[];
+    /**
+     * The exact ProvisionAad JSON the iframe sealed to the enclave —
+     * useful for rendering a confirmation summary in the parent UI
+     * without rebuilding it from `wallets`.
+     */
+    aad: {
+        api_pub: string;
+        shares: Array<{
+            key_id: string;
+            scheme: EphemeralSignerScheme;
+            allowed_derivation_paths: string[];
+        }>;
+        expires_at: string | null;
+    };
+}
+
 type EmailOtpFlowState = {
     status: "start";
 } | {
@@ -1194,4 +1326,4 @@ interface WalletVerifyRequest {
     sessionExpiresIn: number;
 }
 
-export { type AccessTokenClaims, type AppConfigRequest, type AppConfigResponse, type AttachOAuthTokenRequest, type AttachOAuthTokenResponse, type AuthAppearance, type AuthFlow, type AuthFlowComponent, type AuthLoginMethod, type AuthProviderConfig, type BaseGetBalanceParams, type BaseGetBalanceResult, type BaseGetTokenAccountsParams, type BaseSendTransactionParams, type BaseSendTransactionResult, type BaseSignMessageParams, type BaseSignMessageResult, type BaseSignTransactionParams, type BaseSignTransactionResult, type BaseTokenClaims, type BaseUIOptions, type BaseWalletHooks, Chain, ChainLikeWithId, type ContractUIOptions, type CreateWalletResponse, type DefaultFundingMethod, type DeleteSessionRequest, type DeleteSessionResponse, type DetachOAuthTokenRequest, type DeviceFingerprint, type DisplayMode, type EmailOtpConfig, type EmailOtpFlowState, type EthereumFundingConfig, type EthereumGetBalanceParams, type EthereumGetBalanceResult, type EthereumGetTokenAccountsByOwnerParams, type EthereumGetTokenAccountsByOwnerResult, type EthereumSendTransactionParams, type EthereumSendTransactionRequest, type EthereumSendTransactionResult, type EthereumSign7702AuthorizationParams, type EthereumSign7702AuthorizationResult, type EthereumSignHashParams, type EthereumSignHashResult, type EthereumSignMessageParams, type EthereumSignMessageResult, type EthereumSignTransactionParams, type EthereumSignTransactionResult, type EthereumSignTypedDataParams, type EthereumSignTypedDataResult, type EthereumSwitchChainParams, type ExportKeyConfig, type Factor, type FlexibleTheme, type FundWalletConfig, type FundingEvents, type FundingMethod, type FundingUIConfig, type GetCurrentSessionRequest, type GetCurrentSessionResponse, type Hex, type IdentityTokenClaims, type IdpProvider, type IsAuthenticatedRequest, type IsAuthenticatedResponse, type LoginTokenBundle, type LogoutRequest, type LogoutResponse, type MessageTypeProperty, type MessageTypes, type MoonKeyThemeConfig, type MoonPaySignRequest, type MoonPaySignResponse, type MpcKeyShares, Network, type OAuthRequest, type OAuthResponse, type OnrampFundingSettings, type PasskeyEnrollConfig, type PasskeySettings, type PreferredCardProvider, type PrefillConfig, type PresenceTokenClaims, type PublicEthereumWallet, type PublicSessionData, type PublicWallet, type RefreshSessionRequest, type RefreshSessionResponse, type RetrieveWalletKeyRequest, type RetrieveWalletKeyResponse, type SdkSettings, type SendEmailOtpRequest, type SendEmailOtpResponse, type SendTransactionConfig, type SendTransactionRequest, type SessionData, type SharesDeviceRequest, type SharesDeviceResponse, type Sign7702AuthorizationError, type Sign7702AuthorizationParams, type Sign7702AuthorizationResponse, type Sign7702AuthorizationResult, type SignMessageConfig, type SignTransactionConfig, type SignTypedDataError, type SignTypedDataParams, type SignTypedDataResponse, type SignTypedDataResult, type SmsSettings, type SolanaChain, type SolanaFundingConfig, type SolanaGetBalanceParams, type SolanaGetBalanceResult, type SolanaGetTokenAccountsByOwnerParams, type SolanaGetTokenAccountsByOwnerResult, type SolanaSendTransactionParams, type SolanaSendTransactionResult, type SolanaSignMessageParams, type SolanaSignMessageResult, type SolanaSignTransactionParams, type SolanaSignTransactionResult, type TransactionCommitment, type TransactionEncoding, type TransactionUIOptions, type TypedMessage, type UseFundWalletInterface, type UsersMePublicResponse, type UsersMeRequest, type UsersMeResponse, type VerifiedSession, type VerifyEmailOtpRequest, type VerifyEmailOtpResponse, type VerifyEmailOtpUser, type VerifyOAuthTokenRequest, type VerifyOAuthTokenResponse, type VerifySiweWalletRegistrationRequest, WALLET_ERROR_CODES, type Wallet, type WalletChain, type WalletChainType, type WalletConnectConfig, WalletCreationError, type WalletError, type WalletErrorCode, type WalletKeyRequest, type WalletListEntry, type WalletRegistrationNonceRequest, type WalletRegistrationNonceResponse, type WalletType, type WalletVerifyRequest };
+export { type AccessTokenClaims, type AppConfigRequest, type AppConfigResponse, type AttachOAuthTokenRequest, type AttachOAuthTokenResponse, type AuthAppearance, type AuthFlow, type AuthFlowComponent, type AuthLoginMethod, type AuthProviderConfig, type BaseGetBalanceParams, type BaseGetBalanceResult, type BaseGetTokenAccountsParams, type BaseSendTransactionParams, type BaseSendTransactionResult, type BaseSignMessageParams, type BaseSignMessageResult, type BaseSignTransactionParams, type BaseSignTransactionResult, type BaseTokenClaims, type BaseUIOptions, type BaseWalletHooks, type BlockExplorer, type Chain, type ChainLikeWithId, type ContractUIOptions, type CreateWalletResponse, type DefaultFundingMethod, type DeleteSessionRequest, type DeleteSessionResponse, type DetachOAuthTokenRequest, type DeviceFingerprint, type DisplayMode, type EmailOtpConfig, type EmailOtpFlowState, type EphemeralSigner, type EphemeralSignerChain, type EphemeralSignerScheme, type EphemeralSignerWallet, type EthereumChainConfig, type EthereumFundingConfig, type EthereumGetBalanceParams, type EthereumGetBalanceResult, type EthereumGetTokenAccountsByOwnerParams, type EthereumGetTokenAccountsByOwnerResult, type EthereumSendTransactionParams, type EthereumSendTransactionRequest, type EthereumSendTransactionResult, type EthereumSign7702AuthorizationParams, type EthereumSign7702AuthorizationResult, type EthereumSignHashParams, type EthereumSignHashResult, type EthereumSignMessageParams, type EthereumSignMessageResult, type EthereumSignTransactionParams, type EthereumSignTransactionResult, type EthereumSignTypedDataParams, type EthereumSignTypedDataResult, type EthereumSwitchChainParams, type ExportKeyConfig, type Factor, type FlexibleTheme, type FundWalletConfig, type FundingEvents, type FundingMethod, type FundingUIConfig, type GetCurrentSessionRequest, type GetCurrentSessionResponse, type Hex, type IdentityTokenClaims, type IdpProvider, type IsAuthenticatedRequest, type IsAuthenticatedResponse, type ListEphemeralSignersResult, type LoginTokenBundle, type LogoutRequest, type LogoutResponse, type MessageTypeProperty, type MessageTypes, type MoonKeyThemeConfig, type MoonPaySignRequest, type MoonPaySignResponse, type MpcKeyShares, type NativeCurrency, Network, type OAuthRequest, type OAuthResponse, type OnrampFundingSettings, type PasskeyEnrollConfig, type PasskeySettings, type PreferredCardProvider, type PrefillConfig, type PresenceTokenClaims, type ProvisionEphemeralSignerParams, type ProvisionEphemeralSignerResult, type PublicEthereumWallet, type PublicSessionData, type PublicWallet, type RefreshSessionRequest, type RefreshSessionResponse, type RetrieveWalletKeyRequest, type RetrieveWalletKeyResponse, type RevokeEphemeralSignerParams, type RpcConfig, type RpcUrls, type SdkSettings, type SendEmailOtpRequest, type SendEmailOtpResponse, type SendTransactionConfig, type SendTransactionRequest, type SessionData, type SharesDeviceRequest, type SharesDeviceResponse, type Sign7702AuthorizationError, type Sign7702AuthorizationParams, type Sign7702AuthorizationResponse, type Sign7702AuthorizationResult, type SignMessageConfig, type SignTransactionConfig, type SignTypedDataError, type SignTypedDataParams, type SignTypedDataResponse, type SignTypedDataResult, type SmsSettings, type SolanaChain, type SolanaFundingConfig, type SolanaGetBalanceParams, type SolanaGetBalanceResult, type SolanaGetTokenAccountsByOwnerParams, type SolanaGetTokenAccountsByOwnerResult, type SolanaSendTransactionParams, type SolanaSendTransactionResult, type SolanaSignMessageParams, type SolanaSignMessageResult, type SolanaSignTransactionParams, type SolanaSignTransactionResult, type TransactionCommitment, type TransactionEncoding, type TransactionUIOptions, type TypedMessage, type UseFundWalletInterface, type UsersMePublicResponse, type UsersMeRequest, type UsersMeResponse, type VerifiedSession, type VerifyEmailOtpRequest, type VerifyEmailOtpResponse, type VerifyEmailOtpUser, type VerifyOAuthTokenRequest, type VerifyOAuthTokenResponse, type VerifySiweWalletRegistrationRequest, WALLET_ERROR_CODES, type Wallet, type WalletChain, type WalletChainType, type WalletConnectConfig, WalletCreationError, type WalletError, type WalletErrorCode, type WalletKeyRequest, type WalletListEntry, type WalletRegistrationNonceRequest, type WalletRegistrationNonceResponse, type WalletType, type WalletVerifyRequest };

package/dist/utils/index.d.mts

@@ -1,4 +1,4 @@
-export { F as FORWARDED_ERROR_FIELDS, P as PostMessageClient, a as PostMessageMethod, b as PostMessageServer, c as PostMessageType } from '../post-message-CmgAfkOS.mjs';
+export { F as FORWARDED_ERROR_FIELDS, P as PostMessageClient, a as PostMessageMethod, b as PostMessageServer, c as PostMessageType } from '../post-message-Z6cLf0mS.mjs';
 
 /**
  * Get the appropriate MoonKey API URL based on environment configuration