@moon-x/core 0.5.0 → 0.6.0

package/dist/{interfaces-BdIeMGGD.d.mts → interfaces-BWxOajnD.d.mts}

@@ -148,6 +148,21 @@ interface WebAuthnAssertionResponse {
     clientExtensionResults?: Record<string, unknown>;
     authenticatorAttachment?: string;
 }
+/**
+ * RelyingPartyOriginInput — the WebAuthn relying-party origin the
+ * presence/register orchestrators thread to `/presence/begin` so the
+ * server can rebuild the per-app RP config.
+ *
+ * Web passes a plain string (`window.location.origin`) — the browser
+ * always has an ambient origin. RN has none, so it passes a thunk that
+ * derives `https://<rp_id>` from the iframe's `GET_DEK_INFO` (and
+ * memoizes the round-trip). Resolved lazily at call time via
+ * `resolveRelyingPartyOrigin` — i.e. always after auth, when
+ * `GET_DEK_INFO` is answerable.
+ */
+type RelyingPartyOriginInput = string | (() => string | Promise<string>);
+/** Resolve a {@link RelyingPartyOriginInput} to its string value. */
+declare const resolveRelyingPartyOrigin: (input: RelyingPartyOriginInput) => Promise<string>;
 /**
  * KvStorage — async key/value storage for ID tokens + session metadata.
  * Web wraps `localStorage` (sync, lifted to a resolved Promise); RN
@@ -189,4 +204,4 @@ interface PlatformImpls {
     oauth: OAuthOpener;
 }
 
-export type { KvStorage as K, OAuthOpener as O, PasskeyAssertor as P, Transport as T, WebAuthnAssertionResponse as W, PlatformImpls as a, WebAuthnRequestOptions as b };
+export { type KvStorage as K, type OAuthOpener as O, type PasskeyAssertor as P, type RelyingPartyOriginInput as R, type Transport as T, type WebAuthnAssertionResponse as W, type PlatformImpls as a, type WebAuthnRequestOptions as b, resolveRelyingPartyOrigin as r };

package/dist/{interfaces-1vfik3Ef.d.ts → interfaces-BZ5GMWS9.d.ts}

@@ -148,6 +148,21 @@ interface WebAuthnAssertionResponse {
     clientExtensionResults?: Record<string, unknown>;
     authenticatorAttachment?: string;
 }
+/**
+ * RelyingPartyOriginInput — the WebAuthn relying-party origin the
+ * presence/register orchestrators thread to `/presence/begin` so the
+ * server can rebuild the per-app RP config.
+ *
+ * Web passes a plain string (`window.location.origin`) — the browser
+ * always has an ambient origin. RN has none, so it passes a thunk that
+ * derives `https://<rp_id>` from the iframe's `GET_DEK_INFO` (and
+ * memoizes the round-trip). Resolved lazily at call time via
+ * `resolveRelyingPartyOrigin` — i.e. always after auth, when
+ * `GET_DEK_INFO` is answerable.
+ */
+type RelyingPartyOriginInput = string | (() => string | Promise<string>);
+/** Resolve a {@link RelyingPartyOriginInput} to its string value. */
+declare const resolveRelyingPartyOrigin: (input: RelyingPartyOriginInput) => Promise<string>;
 /**
  * KvStorage — async key/value storage for ID tokens + session metadata.
  * Web wraps `localStorage` (sync, lifted to a resolved Promise); RN
@@ -189,4 +204,4 @@ interface PlatformImpls {
     oauth: OAuthOpener;
 }
 
-export type { KvStorage as K, OAuthOpener as O, PasskeyAssertor as P, Transport as T, WebAuthnAssertionResponse as W, PlatformImpls as a, WebAuthnRequestOptions as b };
+export { type KvStorage as K, type OAuthOpener as O, type PasskeyAssertor as P, type RelyingPartyOriginInput as R, type Transport as T, type WebAuthnAssertionResponse as W, type PlatformImpls as a, type WebAuthnRequestOptions as b, resolveRelyingPartyOrigin as r };

package/dist/sdk/index.d.mts

@@ -1,5 +1,5 @@
-import { T as Transport, P as PasskeyAssertor, K as KvStorage } from '../interfaces-BdIeMGGD.mjs';
-export { O as OAuthOpener, a as PlatformImpls, W as WebAuthnAssertionResponse, b as WebAuthnRequestOptions } from '../interfaces-BdIeMGGD.mjs';
+import { T as Transport, P as PasskeyAssertor, R as RelyingPartyOriginInput, K as KvStorage } from '../interfaces-BWxOajnD.mjs';
+export { O as OAuthOpener, a as PlatformImpls, W as WebAuthnAssertionResponse, b as WebAuthnRequestOptions, r as resolveRelyingPartyOrigin } from '../interfaces-BWxOajnD.mjs';
 import { C as CachedAssertion } from '../passkey-cache-WnDFQ-v4.mjs';
 import { EthereumSignMessageParams, EthereumSignMessageResult, EthereumSignTransactionParams, EthereumSignTransactionResult, EthereumSignTypedDataParams, EthereumSignTypedDataResult, EthereumSignHashParams, EthereumSignHashResult, EthereumSign7702AuthorizationParams, EthereumSign7702AuthorizationResult, EthereumSendTransactionParams, EthereumSendTransactionResult, EthereumGetBalanceParams, EthereumGetBalanceResult, EthereumGetTokenAccountsByOwnerParams, EthereumGetTokenAccountsByOwnerResult, SolanaSignMessageParams, SolanaSignMessageResult, SolanaSignTransactionParams, SolanaSignTransactionResult, SolanaSendTransactionParams, SolanaSendTransactionResult, SolanaGetBalanceParams, SolanaGetBalanceResult, SolanaGetTokenAccountsByOwnerParams, SolanaGetTokenAccountsByOwnerResult, SendEmailOtpResponse, PublicWallet, ProvisionEphemeralSignerParams, ProvisionEphemeralSignerResult, ListEphemeralSignersResult, RevokeEphemeralSignerParams } from '../types/index.mjs';
 import '../post-message-Z6cLf0mS.mjs';
@@ -20,7 +20,7 @@ declare const getPresenceToken: ({ transport, passkey, publishableKey, relyingPa
     transport: Transport;
     passkey: PasskeyAssertor;
     publishableKey: string;
-    relyingPartyOrigin: string;
+    relyingPartyOrigin: RelyingPartyOriginInput;
 }) => Promise<GetPresenceTokenResult>;
 
 interface ScopedPresenceToken {
@@ -37,7 +37,7 @@ declare const getInternalPresenceTokens: ({ transport, passkey, publishableKey,
     transport: Transport;
     passkey: PasskeyAssertor;
     publishableKey: string;
-    relyingPartyOrigin: string;
+    relyingPartyOrigin: RelyingPartyOriginInput;
     scopes?: string[];
     scopeCounts?: Record<string, number>;
 }) => Promise<GetInternalPresenceTokensResult>;
@@ -47,7 +47,7 @@ declare const getHeadlessEthereumMethods: ({ transport, passkey, publishableKey,
     transport: Transport;
     passkey: PasskeyAssertor;
     publishableKey: string;
-    relyingPartyOrigin: string;
+    relyingPartyOrigin: RelyingPartyOriginInput;
 }) => {
     signEthereumMessageHeadless: (params: EthereumSignMessageParams) => Promise<EthereumSignMessageResult>;
     signEthereumTransactionHeadless: (params: EthereumSignTransactionParams) => Promise<EthereumSignTransactionResult>;
@@ -69,7 +69,7 @@ declare const getHeadlessSolanaMethods: ({ transport, passkey, publishableKey, r
     transport: Transport;
     passkey: PasskeyAssertor;
     publishableKey: string;
-    relyingPartyOrigin: string;
+    relyingPartyOrigin: RelyingPartyOriginInput;
 }) => {
     signSolanaMessageHeadless: (params: SolanaSignMessageParams) => Promise<SolanaSignMessageResult>;
     signSolanaTransactionHeadless: (params: SolanaSignTransactionParams) => Promise<SolanaSignTransactionResult>;
@@ -123,7 +123,7 @@ declare const getHeadlessGeneralMethods: ({ transport, passkey, storage, publish
     passkey: PasskeyAssertor;
     storage: KvStorage;
     publishableKey: string;
-    relyingPartyOrigin: string;
+    relyingPartyOrigin: RelyingPartyOriginInput;
     setIsAuthenticated?: (isAuth: boolean) => void;
     setUser?: (user: unknown | null) => void;
 }) => {
@@ -208,4 +208,4 @@ declare class EphemeralSignerSignError extends Error {
 }
 declare function signWithEphemeralSigner(input: EphemeralSignerSignInput): Promise<EphemeralSignerSignResult>;
 
-export { type AssertPasskeyInParentResult, EphemeralSignerSignError, type EphemeralSignerSignInput, type EphemeralSignerSignResult, type GetInternalPresenceTokensResult, type GetPresenceTokenResult, KvStorage, type LoginWithCodeParams, PasskeyAssertor, type ScopedPresenceToken, type SendCodeParams, Transport, type VerifyOAuthParams, assertPasskeyInParent, flattenPresenceTokens, getHeadlessAuthenticationMethods, getHeadlessEthereumMethods, getHeadlessGeneralMethods, getHeadlessSolanaMethods, getInternalPresenceTokens, getPresenceToken, signWithEphemeralSigner };
+export { type AssertPasskeyInParentResult, EphemeralSignerSignError, type EphemeralSignerSignInput, type EphemeralSignerSignResult, type GetInternalPresenceTokensResult, type GetPresenceTokenResult, KvStorage, type LoginWithCodeParams, PasskeyAssertor, RelyingPartyOriginInput, type ScopedPresenceToken, type SendCodeParams, Transport, type VerifyOAuthParams, assertPasskeyInParent, flattenPresenceTokens, getHeadlessAuthenticationMethods, getHeadlessEthereumMethods, getHeadlessGeneralMethods, getHeadlessSolanaMethods, getInternalPresenceTokens, getPresenceToken, signWithEphemeralSigner };

package/dist/sdk/index.d.ts

@@ -1,5 +1,5 @@
-import { T as Transport, P as PasskeyAssertor, K as KvStorage } from '../interfaces-1vfik3Ef.js';
-export { O as OAuthOpener, a as PlatformImpls, W as WebAuthnAssertionResponse, b as WebAuthnRequestOptions } from '../interfaces-1vfik3Ef.js';
+import { T as Transport, P as PasskeyAssertor, R as RelyingPartyOriginInput, K as KvStorage } from '../interfaces-BZ5GMWS9.js';
+export { O as OAuthOpener, a as PlatformImpls, W as WebAuthnAssertionResponse, b as WebAuthnRequestOptions, r as resolveRelyingPartyOrigin } from '../interfaces-BZ5GMWS9.js';
 import { C as CachedAssertion } from '../passkey-cache-WnDFQ-v4.js';
 import { EthereumSignMessageParams, EthereumSignMessageResult, EthereumSignTransactionParams, EthereumSignTransactionResult, EthereumSignTypedDataParams, EthereumSignTypedDataResult, EthereumSignHashParams, EthereumSignHashResult, EthereumSign7702AuthorizationParams, EthereumSign7702AuthorizationResult, EthereumSendTransactionParams, EthereumSendTransactionResult, EthereumGetBalanceParams, EthereumGetBalanceResult, EthereumGetTokenAccountsByOwnerParams, EthereumGetTokenAccountsByOwnerResult, SolanaSignMessageParams, SolanaSignMessageResult, SolanaSignTransactionParams, SolanaSignTransactionResult, SolanaSendTransactionParams, SolanaSendTransactionResult, SolanaGetBalanceParams, SolanaGetBalanceResult, SolanaGetTokenAccountsByOwnerParams, SolanaGetTokenAccountsByOwnerResult, SendEmailOtpResponse, PublicWallet, ProvisionEphemeralSignerParams, ProvisionEphemeralSignerResult, ListEphemeralSignersResult, RevokeEphemeralSignerParams } from '../types/index.js';
 import '../post-message-Z6cLf0mS.js';
@@ -20,7 +20,7 @@ declare const getPresenceToken: ({ transport, passkey, publishableKey, relyingPa
     transport: Transport;
     passkey: PasskeyAssertor;
     publishableKey: string;
-    relyingPartyOrigin: string;
+    relyingPartyOrigin: RelyingPartyOriginInput;
 }) => Promise<GetPresenceTokenResult>;
 
 interface ScopedPresenceToken {
@@ -37,7 +37,7 @@ declare const getInternalPresenceTokens: ({ transport, passkey, publishableKey,
     transport: Transport;
     passkey: PasskeyAssertor;
     publishableKey: string;
-    relyingPartyOrigin: string;
+    relyingPartyOrigin: RelyingPartyOriginInput;
     scopes?: string[];
     scopeCounts?: Record<string, number>;
 }) => Promise<GetInternalPresenceTokensResult>;
@@ -47,7 +47,7 @@ declare const getHeadlessEthereumMethods: ({ transport, passkey, publishableKey,
     transport: Transport;
     passkey: PasskeyAssertor;
     publishableKey: string;
-    relyingPartyOrigin: string;
+    relyingPartyOrigin: RelyingPartyOriginInput;
 }) => {
     signEthereumMessageHeadless: (params: EthereumSignMessageParams) => Promise<EthereumSignMessageResult>;
     signEthereumTransactionHeadless: (params: EthereumSignTransactionParams) => Promise<EthereumSignTransactionResult>;
@@ -69,7 +69,7 @@ declare const getHeadlessSolanaMethods: ({ transport, passkey, publishableKey, r
     transport: Transport;
     passkey: PasskeyAssertor;
     publishableKey: string;
-    relyingPartyOrigin: string;
+    relyingPartyOrigin: RelyingPartyOriginInput;
 }) => {
     signSolanaMessageHeadless: (params: SolanaSignMessageParams) => Promise<SolanaSignMessageResult>;
     signSolanaTransactionHeadless: (params: SolanaSignTransactionParams) => Promise<SolanaSignTransactionResult>;
@@ -123,7 +123,7 @@ declare const getHeadlessGeneralMethods: ({ transport, passkey, storage, publish
     passkey: PasskeyAssertor;
     storage: KvStorage;
     publishableKey: string;
-    relyingPartyOrigin: string;
+    relyingPartyOrigin: RelyingPartyOriginInput;
     setIsAuthenticated?: (isAuth: boolean) => void;
     setUser?: (user: unknown | null) => void;
 }) => {
@@ -208,4 +208,4 @@ declare class EphemeralSignerSignError extends Error {
 }
 declare function signWithEphemeralSigner(input: EphemeralSignerSignInput): Promise<EphemeralSignerSignResult>;
 
-export { type AssertPasskeyInParentResult, EphemeralSignerSignError, type EphemeralSignerSignInput, type EphemeralSignerSignResult, type GetInternalPresenceTokensResult, type GetPresenceTokenResult, KvStorage, type LoginWithCodeParams, PasskeyAssertor, type ScopedPresenceToken, type SendCodeParams, Transport, type VerifyOAuthParams, assertPasskeyInParent, flattenPresenceTokens, getHeadlessAuthenticationMethods, getHeadlessEthereumMethods, getHeadlessGeneralMethods, getHeadlessSolanaMethods, getInternalPresenceTokens, getPresenceToken, signWithEphemeralSigner };
+export { type AssertPasskeyInParentResult, EphemeralSignerSignError, type EphemeralSignerSignInput, type EphemeralSignerSignResult, type GetInternalPresenceTokensResult, type GetPresenceTokenResult, KvStorage, type LoginWithCodeParams, PasskeyAssertor, RelyingPartyOriginInput, type ScopedPresenceToken, type SendCodeParams, Transport, type VerifyOAuthParams, assertPasskeyInParent, flattenPresenceTokens, getHeadlessAuthenticationMethods, getHeadlessEthereumMethods, getHeadlessGeneralMethods, getHeadlessSolanaMethods, getInternalPresenceTokens, getPresenceToken, signWithEphemeralSigner };

package/dist/sdk/index.js

@@ -39,10 +39,14 @@ __export(sdk_exports, {
   getHeadlessSolanaMethods: () => getHeadlessSolanaMethods,
   getInternalPresenceTokens: () => getInternalPresenceTokens,
   getPresenceToken: () => getPresenceToken,
+  resolveRelyingPartyOrigin: () => resolveRelyingPartyOrigin,
   signWithEphemeralSigner: () => signWithEphemeralSigner
 });
 module.exports = __toCommonJS(sdk_exports);
 
+// src/sdk/interfaces.ts
+var resolveRelyingPartyOrigin = async (input) => typeof input === "function" ? input() : input;
+
 // src/lib/auth/authentication-state.ts
 var AuthenticationState = class {
   constructor() {
@@ -345,10 +349,11 @@ var getPresenceToken = async ({
   publishableKey,
   relyingPartyOrigin
 }) => {
+  const rpOrigin = await resolveRelyingPartyOrigin(relyingPartyOrigin);
   const { token, optionsJSON } = await transport.send(
     PostMessageType.AUTH,
     PostMessageMethod.PASSKEY_PRESENCE_BEGIN,
-    { publishableKey, relyingPartyOrigin }
+    { publishableKey, relyingPartyOrigin: rpOrigin }
   );
   const response = await passkey.assertForServer({ optionsJSON });
   const verify = await transport.send(
@@ -356,7 +361,7 @@ var getPresenceToken = async ({
     PostMessageMethod.PASSKEY_PRESENCE_VERIFY,
     {
       publishableKey,
-      relyingPartyOrigin,
+      relyingPartyOrigin: rpOrigin,
       token,
       response
     }
@@ -376,15 +381,16 @@ var getInternalPresenceTokens = async ({
   scopes,
   scopeCounts
 }) => {
+  const rpOrigin = await resolveRelyingPartyOrigin(relyingPartyOrigin);
   const { token, optionsJSON } = await transport.send(
     PostMessageType.AUTH,
     PostMessageMethod.PASSKEY_PRESENCE_BEGIN,
-    { publishableKey, relyingPartyOrigin }
+    { publishableKey, relyingPartyOrigin: rpOrigin }
   );
   const { response, userHandleB64url, credentialIdB64url } = await passkey.assertForInternalPresence({ optionsJSON });
   const verifyPayload = {
     publishableKey,
-    relyingPartyOrigin,
+    relyingPartyOrigin: rpOrigin,
     token,
     response,
     purpose: "internal"
@@ -1263,5 +1269,6 @@ async function signWithEphemeralSigner(input) {
   getHeadlessSolanaMethods,
   getInternalPresenceTokens,
   getPresenceToken,
+  resolveRelyingPartyOrigin,
   signWithEphemeralSigner
 });

package/dist/sdk/index.mjs

@@ -13,6 +13,9 @@ import {
 } from "../chunk-I56GRKAG.mjs";
 import "../chunk-GQKIA37O.mjs";
 
+// src/sdk/interfaces.ts
+var resolveRelyingPartyOrigin = async (input) => typeof input === "function" ? input() : input;
+
 // src/sdk/parent-passkey-assert.ts
 var assertPasskeyInParent = async ({
   transport,
@@ -56,10 +59,11 @@ var getPresenceToken = async ({
   publishableKey,
   relyingPartyOrigin
 }) => {
+  const rpOrigin = await resolveRelyingPartyOrigin(relyingPartyOrigin);
   const { token, optionsJSON } = await transport.send(
     PostMessageType.AUTH,
     PostMessageMethod.PASSKEY_PRESENCE_BEGIN,
-    { publishableKey, relyingPartyOrigin }
+    { publishableKey, relyingPartyOrigin: rpOrigin }
   );
   const response = await passkey.assertForServer({ optionsJSON });
   const verify = await transport.send(
@@ -67,7 +71,7 @@ var getPresenceToken = async ({
     PostMessageMethod.PASSKEY_PRESENCE_VERIFY,
     {
       publishableKey,
-      relyingPartyOrigin,
+      relyingPartyOrigin: rpOrigin,
       token,
       response
     }
@@ -87,15 +91,16 @@ var getInternalPresenceTokens = async ({
   scopes,
   scopeCounts
 }) => {
+  const rpOrigin = await resolveRelyingPartyOrigin(relyingPartyOrigin);
   const { token, optionsJSON } = await transport.send(
     PostMessageType.AUTH,
     PostMessageMethod.PASSKEY_PRESENCE_BEGIN,
-    { publishableKey, relyingPartyOrigin }
+    { publishableKey, relyingPartyOrigin: rpOrigin }
   );
   const { response, userHandleB64url, credentialIdB64url } = await passkey.assertForInternalPresence({ optionsJSON });
   const verifyPayload = {
     publishableKey,
-    relyingPartyOrigin,
+    relyingPartyOrigin: rpOrigin,
     token,
     response,
     purpose: "internal"
@@ -973,5 +978,6 @@ export {
   getHeadlessSolanaMethods,
   getInternalPresenceTokens,
   getPresenceToken,
+  resolveRelyingPartyOrigin,
   signWithEphemeralSigner
 };

package/dist/web/index.d.mts

@@ -1,5 +1,5 @@
 import { P as PostMessageClient } from '../post-message-Z6cLf0mS.mjs';
-import { T as Transport, P as PasskeyAssertor, K as KvStorage } from '../interfaces-BdIeMGGD.mjs';
+import { T as Transport, P as PasskeyAssertor, K as KvStorage } from '../interfaces-BWxOajnD.mjs';
 
 declare const getCachedPostMessageClient: (contentWindow: Window) => PostMessageClient;
 /**

package/dist/web/index.d.ts

@@ -1,5 +1,5 @@
 import { P as PostMessageClient } from '../post-message-Z6cLf0mS.js';
-import { T as Transport, P as PasskeyAssertor, K as KvStorage } from '../interfaces-1vfik3Ef.js';
+import { T as Transport, P as PasskeyAssertor, K as KvStorage } from '../interfaces-BZ5GMWS9.js';
 
 declare const getCachedPostMessageClient: (contentWindow: Window) => PostMessageClient;
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moon-x/core",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "license": "UNLICENSED",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",