@moon-x/core 0.5.0 → 0.7.0

package/dist/{interfaces-BdIeMGGD.d.mts → interfaces-BWxOajnD.d.mts}

@@ -148,6 +148,21 @@ interface WebAuthnAssertionResponse {
     clientExtensionResults?: Record<string, unknown>;
     authenticatorAttachment?: string;
 }
+/**
+ * RelyingPartyOriginInput — the WebAuthn relying-party origin the
+ * presence/register orchestrators thread to `/presence/begin` so the
+ * server can rebuild the per-app RP config.
+ *
+ * Web passes a plain string (`window.location.origin`) — the browser
+ * always has an ambient origin. RN has none, so it passes a thunk that
+ * derives `https://<rp_id>` from the iframe's `GET_DEK_INFO` (and
+ * memoizes the round-trip). Resolved lazily at call time via
+ * `resolveRelyingPartyOrigin` — i.e. always after auth, when
+ * `GET_DEK_INFO` is answerable.
+ */
+type RelyingPartyOriginInput = string | (() => string | Promise<string>);
+/** Resolve a {@link RelyingPartyOriginInput} to its string value. */
+declare const resolveRelyingPartyOrigin: (input: RelyingPartyOriginInput) => Promise<string>;
 /**
  * KvStorage — async key/value storage for ID tokens + session metadata.
  * Web wraps `localStorage` (sync, lifted to a resolved Promise); RN
@@ -189,4 +204,4 @@ interface PlatformImpls {
     oauth: OAuthOpener;
 }
 
-export type { KvStorage as K, OAuthOpener as O, PasskeyAssertor as P, Transport as T, WebAuthnAssertionResponse as W, PlatformImpls as a, WebAuthnRequestOptions as b };
+export { type KvStorage as K, type OAuthOpener as O, type PasskeyAssertor as P, type RelyingPartyOriginInput as R, type Transport as T, type WebAuthnAssertionResponse as W, type PlatformImpls as a, type WebAuthnRequestOptions as b, resolveRelyingPartyOrigin as r };

package/dist/{interfaces-1vfik3Ef.d.ts → interfaces-BZ5GMWS9.d.ts}

@@ -148,6 +148,21 @@ interface WebAuthnAssertionResponse {
     clientExtensionResults?: Record<string, unknown>;
     authenticatorAttachment?: string;
 }
+/**
+ * RelyingPartyOriginInput — the WebAuthn relying-party origin the
+ * presence/register orchestrators thread to `/presence/begin` so the
+ * server can rebuild the per-app RP config.
+ *
+ * Web passes a plain string (`window.location.origin`) — the browser
+ * always has an ambient origin. RN has none, so it passes a thunk that
+ * derives `https://<rp_id>` from the iframe's `GET_DEK_INFO` (and
+ * memoizes the round-trip). Resolved lazily at call time via
+ * `resolveRelyingPartyOrigin` — i.e. always after auth, when
+ * `GET_DEK_INFO` is answerable.
+ */
+type RelyingPartyOriginInput = string | (() => string | Promise<string>);
+/** Resolve a {@link RelyingPartyOriginInput} to its string value. */
+declare const resolveRelyingPartyOrigin: (input: RelyingPartyOriginInput) => Promise<string>;
 /**
  * KvStorage — async key/value storage for ID tokens + session metadata.
  * Web wraps `localStorage` (sync, lifted to a resolved Promise); RN
@@ -189,4 +204,4 @@ interface PlatformImpls {
     oauth: OAuthOpener;
 }
 
-export type { KvStorage as K, OAuthOpener as O, PasskeyAssertor as P, Transport as T, WebAuthnAssertionResponse as W, PlatformImpls as a, WebAuthnRequestOptions as b };
+export { type KvStorage as K, type OAuthOpener as O, type PasskeyAssertor as P, type RelyingPartyOriginInput as R, type Transport as T, type WebAuthnAssertionResponse as W, type PlatformImpls as a, type WebAuthnRequestOptions as b, resolveRelyingPartyOrigin as r };

package/dist/react/index.d.mts

@@ -93,9 +93,9 @@ declare const useLoginWithEmail: (callbacks?: UseLoginWithEmailCallbacks) => {
 };
 
 interface RegisterPasskeyResult {
-    /** RN headless path */
+    /** Credential id of the enrolled passkey (RN headless + web modal paths) */
     credential_id?: string;
-    /** Web modal path: true on enroll, false on skip */
+    /** true on successful enroll (both platforms); false only on web skip */
     passkey_registered?: boolean;
 }
 interface UseRegisterPasskeyResult {

package/dist/react/index.d.ts

@@ -93,9 +93,9 @@ declare const useLoginWithEmail: (callbacks?: UseLoginWithEmailCallbacks) => {
 };
 
 interface RegisterPasskeyResult {
-    /** RN headless path */
+    /** Credential id of the enrolled passkey (RN headless + web modal paths) */
     credential_id?: string;
-    /** Web modal path: true on enroll, false on skip */
+    /** true on successful enroll (both platforms); false only on web skip */
     passkey_registered?: boolean;
 }
 interface UseRegisterPasskeyResult {

package/dist/sdk/index.d.mts

@@ -1,5 +1,5 @@
-import { T as Transport, P as PasskeyAssertor, K as KvStorage } from '../interfaces-BdIeMGGD.mjs';
-export { O as OAuthOpener, a as PlatformImpls, W as WebAuthnAssertionResponse, b as WebAuthnRequestOptions } from '../interfaces-BdIeMGGD.mjs';
+import { T as Transport, P as PasskeyAssertor, R as RelyingPartyOriginInput, K as KvStorage } from '../interfaces-BWxOajnD.mjs';
+export { O as OAuthOpener, a as PlatformImpls, W as WebAuthnAssertionResponse, b as WebAuthnRequestOptions, r as resolveRelyingPartyOrigin } from '../interfaces-BWxOajnD.mjs';
 import { C as CachedAssertion } from '../passkey-cache-WnDFQ-v4.mjs';
 import { EthereumSignMessageParams, EthereumSignMessageResult, EthereumSignTransactionParams, EthereumSignTransactionResult, EthereumSignTypedDataParams, EthereumSignTypedDataResult, EthereumSignHashParams, EthereumSignHashResult, EthereumSign7702AuthorizationParams, EthereumSign7702AuthorizationResult, EthereumSendTransactionParams, EthereumSendTransactionResult, EthereumGetBalanceParams, EthereumGetBalanceResult, EthereumGetTokenAccountsByOwnerParams, EthereumGetTokenAccountsByOwnerResult, SolanaSignMessageParams, SolanaSignMessageResult, SolanaSignTransactionParams, SolanaSignTransactionResult, SolanaSendTransactionParams, SolanaSendTransactionResult, SolanaGetBalanceParams, SolanaGetBalanceResult, SolanaGetTokenAccountsByOwnerParams, SolanaGetTokenAccountsByOwnerResult, SendEmailOtpResponse, PublicWallet, ProvisionEphemeralSignerParams, ProvisionEphemeralSignerResult, ListEphemeralSignersResult, RevokeEphemeralSignerParams } from '../types/index.mjs';
 import '../post-message-Z6cLf0mS.mjs';
@@ -16,11 +16,12 @@ interface GetPresenceTokenResult {
     presenceToken: string;
     expiresAt: number;
 }
-declare const getPresenceToken: ({ transport, passkey, publishableKey, relyingPartyOrigin, }: {
+declare const getPresenceToken: ({ transport, passkey, publishableKey, relyingPartyOrigin, expiresInSecs, }: {
     transport: Transport;
     passkey: PasskeyAssertor;
     publishableKey: string;
-    relyingPartyOrigin: string;
+    relyingPartyOrigin: RelyingPartyOriginInput;
+    expiresInSecs?: number;
 }) => Promise<GetPresenceTokenResult>;
 
 interface ScopedPresenceToken {
@@ -37,7 +38,7 @@ declare const getInternalPresenceTokens: ({ transport, passkey, publishableKey,
     transport: Transport;
     passkey: PasskeyAssertor;
     publishableKey: string;
-    relyingPartyOrigin: string;
+    relyingPartyOrigin: RelyingPartyOriginInput;
     scopes?: string[];
     scopeCounts?: Record<string, number>;
 }) => Promise<GetInternalPresenceTokensResult>;
@@ -47,7 +48,7 @@ declare const getHeadlessEthereumMethods: ({ transport, passkey, publishableKey,
     transport: Transport;
     passkey: PasskeyAssertor;
     publishableKey: string;
-    relyingPartyOrigin: string;
+    relyingPartyOrigin: RelyingPartyOriginInput;
 }) => {
     signEthereumMessageHeadless: (params: EthereumSignMessageParams) => Promise<EthereumSignMessageResult>;
     signEthereumTransactionHeadless: (params: EthereumSignTransactionParams) => Promise<EthereumSignTransactionResult>;
@@ -69,7 +70,7 @@ declare const getHeadlessSolanaMethods: ({ transport, passkey, publishableKey, r
     transport: Transport;
     passkey: PasskeyAssertor;
     publishableKey: string;
-    relyingPartyOrigin: string;
+    relyingPartyOrigin: RelyingPartyOriginInput;
 }) => {
     signSolanaMessageHeadless: (params: SolanaSignMessageParams) => Promise<SolanaSignMessageResult>;
     signSolanaTransactionHeadless: (params: SolanaSignTransactionParams) => Promise<SolanaSignTransactionResult>;
@@ -123,7 +124,7 @@ declare const getHeadlessGeneralMethods: ({ transport, passkey, storage, publish
     passkey: PasskeyAssertor;
     storage: KvStorage;
     publishableKey: string;
-    relyingPartyOrigin: string;
+    relyingPartyOrigin: RelyingPartyOriginInput;
     setIsAuthenticated?: (isAuth: boolean) => void;
     setUser?: (user: unknown | null) => void;
 }) => {
@@ -208,4 +209,4 @@ declare class EphemeralSignerSignError extends Error {
 }
 declare function signWithEphemeralSigner(input: EphemeralSignerSignInput): Promise<EphemeralSignerSignResult>;
 
-export { type AssertPasskeyInParentResult, EphemeralSignerSignError, type EphemeralSignerSignInput, type EphemeralSignerSignResult, type GetInternalPresenceTokensResult, type GetPresenceTokenResult, KvStorage, type LoginWithCodeParams, PasskeyAssertor, type ScopedPresenceToken, type SendCodeParams, Transport, type VerifyOAuthParams, assertPasskeyInParent, flattenPresenceTokens, getHeadlessAuthenticationMethods, getHeadlessEthereumMethods, getHeadlessGeneralMethods, getHeadlessSolanaMethods, getInternalPresenceTokens, getPresenceToken, signWithEphemeralSigner };
+export { type AssertPasskeyInParentResult, EphemeralSignerSignError, type EphemeralSignerSignInput, type EphemeralSignerSignResult, type GetInternalPresenceTokensResult, type GetPresenceTokenResult, KvStorage, type LoginWithCodeParams, PasskeyAssertor, RelyingPartyOriginInput, type ScopedPresenceToken, type SendCodeParams, Transport, type VerifyOAuthParams, assertPasskeyInParent, flattenPresenceTokens, getHeadlessAuthenticationMethods, getHeadlessEthereumMethods, getHeadlessGeneralMethods, getHeadlessSolanaMethods, getInternalPresenceTokens, getPresenceToken, signWithEphemeralSigner };

package/dist/sdk/index.d.ts

@@ -1,5 +1,5 @@
-import { T as Transport, P as PasskeyAssertor, K as KvStorage } from '../interfaces-1vfik3Ef.js';
-export { O as OAuthOpener, a as PlatformImpls, W as WebAuthnAssertionResponse, b as WebAuthnRequestOptions } from '../interfaces-1vfik3Ef.js';
+import { T as Transport, P as PasskeyAssertor, R as RelyingPartyOriginInput, K as KvStorage } from '../interfaces-BZ5GMWS9.js';
+export { O as OAuthOpener, a as PlatformImpls, W as WebAuthnAssertionResponse, b as WebAuthnRequestOptions, r as resolveRelyingPartyOrigin } from '../interfaces-BZ5GMWS9.js';
 import { C as CachedAssertion } from '../passkey-cache-WnDFQ-v4.js';
 import { EthereumSignMessageParams, EthereumSignMessageResult, EthereumSignTransactionParams, EthereumSignTransactionResult, EthereumSignTypedDataParams, EthereumSignTypedDataResult, EthereumSignHashParams, EthereumSignHashResult, EthereumSign7702AuthorizationParams, EthereumSign7702AuthorizationResult, EthereumSendTransactionParams, EthereumSendTransactionResult, EthereumGetBalanceParams, EthereumGetBalanceResult, EthereumGetTokenAccountsByOwnerParams, EthereumGetTokenAccountsByOwnerResult, SolanaSignMessageParams, SolanaSignMessageResult, SolanaSignTransactionParams, SolanaSignTransactionResult, SolanaSendTransactionParams, SolanaSendTransactionResult, SolanaGetBalanceParams, SolanaGetBalanceResult, SolanaGetTokenAccountsByOwnerParams, SolanaGetTokenAccountsByOwnerResult, SendEmailOtpResponse, PublicWallet, ProvisionEphemeralSignerParams, ProvisionEphemeralSignerResult, ListEphemeralSignersResult, RevokeEphemeralSignerParams } from '../types/index.js';
 import '../post-message-Z6cLf0mS.js';
@@ -16,11 +16,12 @@ interface GetPresenceTokenResult {
     presenceToken: string;
     expiresAt: number;
 }
-declare const getPresenceToken: ({ transport, passkey, publishableKey, relyingPartyOrigin, }: {
+declare const getPresenceToken: ({ transport, passkey, publishableKey, relyingPartyOrigin, expiresInSecs, }: {
     transport: Transport;
     passkey: PasskeyAssertor;
     publishableKey: string;
-    relyingPartyOrigin: string;
+    relyingPartyOrigin: RelyingPartyOriginInput;
+    expiresInSecs?: number;
 }) => Promise<GetPresenceTokenResult>;
 
 interface ScopedPresenceToken {
@@ -37,7 +38,7 @@ declare const getInternalPresenceTokens: ({ transport, passkey, publishableKey,
     transport: Transport;
     passkey: PasskeyAssertor;
     publishableKey: string;
-    relyingPartyOrigin: string;
+    relyingPartyOrigin: RelyingPartyOriginInput;
     scopes?: string[];
     scopeCounts?: Record<string, number>;
 }) => Promise<GetInternalPresenceTokensResult>;
@@ -47,7 +48,7 @@ declare const getHeadlessEthereumMethods: ({ transport, passkey, publishableKey,
     transport: Transport;
     passkey: PasskeyAssertor;
     publishableKey: string;
-    relyingPartyOrigin: string;
+    relyingPartyOrigin: RelyingPartyOriginInput;
 }) => {
     signEthereumMessageHeadless: (params: EthereumSignMessageParams) => Promise<EthereumSignMessageResult>;
     signEthereumTransactionHeadless: (params: EthereumSignTransactionParams) => Promise<EthereumSignTransactionResult>;
@@ -69,7 +70,7 @@ declare const getHeadlessSolanaMethods: ({ transport, passkey, publishableKey, r
     transport: Transport;
     passkey: PasskeyAssertor;
     publishableKey: string;
-    relyingPartyOrigin: string;
+    relyingPartyOrigin: RelyingPartyOriginInput;
 }) => {
     signSolanaMessageHeadless: (params: SolanaSignMessageParams) => Promise<SolanaSignMessageResult>;
     signSolanaTransactionHeadless: (params: SolanaSignTransactionParams) => Promise<SolanaSignTransactionResult>;
@@ -123,7 +124,7 @@ declare const getHeadlessGeneralMethods: ({ transport, passkey, storage, publish
     passkey: PasskeyAssertor;
     storage: KvStorage;
     publishableKey: string;
-    relyingPartyOrigin: string;
+    relyingPartyOrigin: RelyingPartyOriginInput;
     setIsAuthenticated?: (isAuth: boolean) => void;
     setUser?: (user: unknown | null) => void;
 }) => {
@@ -208,4 +209,4 @@ declare class EphemeralSignerSignError extends Error {
 }
 declare function signWithEphemeralSigner(input: EphemeralSignerSignInput): Promise<EphemeralSignerSignResult>;
 
-export { type AssertPasskeyInParentResult, EphemeralSignerSignError, type EphemeralSignerSignInput, type EphemeralSignerSignResult, type GetInternalPresenceTokensResult, type GetPresenceTokenResult, KvStorage, type LoginWithCodeParams, PasskeyAssertor, type ScopedPresenceToken, type SendCodeParams, Transport, type VerifyOAuthParams, assertPasskeyInParent, flattenPresenceTokens, getHeadlessAuthenticationMethods, getHeadlessEthereumMethods, getHeadlessGeneralMethods, getHeadlessSolanaMethods, getInternalPresenceTokens, getPresenceToken, signWithEphemeralSigner };
+export { type AssertPasskeyInParentResult, EphemeralSignerSignError, type EphemeralSignerSignInput, type EphemeralSignerSignResult, type GetInternalPresenceTokensResult, type GetPresenceTokenResult, KvStorage, type LoginWithCodeParams, PasskeyAssertor, RelyingPartyOriginInput, type ScopedPresenceToken, type SendCodeParams, Transport, type VerifyOAuthParams, assertPasskeyInParent, flattenPresenceTokens, getHeadlessAuthenticationMethods, getHeadlessEthereumMethods, getHeadlessGeneralMethods, getHeadlessSolanaMethods, getInternalPresenceTokens, getPresenceToken, signWithEphemeralSigner };

package/dist/sdk/index.js

@@ -39,10 +39,14 @@ __export(sdk_exports, {
   getHeadlessSolanaMethods: () => getHeadlessSolanaMethods,
   getInternalPresenceTokens: () => getInternalPresenceTokens,
   getPresenceToken: () => getPresenceToken,
+  resolveRelyingPartyOrigin: () => resolveRelyingPartyOrigin,
   signWithEphemeralSigner: () => signWithEphemeralSigner
 });
 module.exports = __toCommonJS(sdk_exports);
 
+// src/sdk/interfaces.ts
+var resolveRelyingPartyOrigin = async (input) => typeof input === "function" ? input() : input;
+
 // src/lib/auth/authentication-state.ts
 var AuthenticationState = class {
   constructor() {
@@ -343,12 +347,14 @@ var getPresenceToken = async ({
   transport,
   passkey,
   publishableKey,
-  relyingPartyOrigin
+  relyingPartyOrigin,
+  expiresInSecs
 }) => {
+  const rpOrigin = await resolveRelyingPartyOrigin(relyingPartyOrigin);
   const { token, optionsJSON } = await transport.send(
     PostMessageType.AUTH,
     PostMessageMethod.PASSKEY_PRESENCE_BEGIN,
-    { publishableKey, relyingPartyOrigin }
+    { publishableKey, relyingPartyOrigin: rpOrigin }
   );
   const response = await passkey.assertForServer({ optionsJSON });
   const verify = await transport.send(
@@ -356,9 +362,10 @@ var getPresenceToken = async ({
     PostMessageMethod.PASSKEY_PRESENCE_VERIFY,
     {
       publishableKey,
-      relyingPartyOrigin,
+      relyingPartyOrigin: rpOrigin,
       token,
-      response
+      response,
+      ...typeof expiresInSecs === "number" && expiresInSecs > 0 ? { ttl_secs: expiresInSecs } : {}
     }
   );
   return {
@@ -376,15 +383,16 @@ var getInternalPresenceTokens = async ({
   scopes,
   scopeCounts
 }) => {
+  const rpOrigin = await resolveRelyingPartyOrigin(relyingPartyOrigin);
   const { token, optionsJSON } = await transport.send(
     PostMessageType.AUTH,
     PostMessageMethod.PASSKEY_PRESENCE_BEGIN,
-    { publishableKey, relyingPartyOrigin }
+    { publishableKey, relyingPartyOrigin: rpOrigin }
   );
   const { response, userHandleB64url, credentialIdB64url } = await passkey.assertForInternalPresence({ optionsJSON });
   const verifyPayload = {
     publishableKey,
-    relyingPartyOrigin,
+    relyingPartyOrigin: rpOrigin,
     token,
     response,
     purpose: "internal"
@@ -1263,5 +1271,6 @@ async function signWithEphemeralSigner(input) {
   getHeadlessSolanaMethods,
   getInternalPresenceTokens,
   getPresenceToken,
+  resolveRelyingPartyOrigin,
   signWithEphemeralSigner
 });

package/dist/sdk/index.mjs

@@ -13,6 +13,9 @@ import {
 } from "../chunk-I56GRKAG.mjs";
 import "../chunk-GQKIA37O.mjs";
 
+// src/sdk/interfaces.ts
+var resolveRelyingPartyOrigin = async (input) => typeof input === "function" ? input() : input;
+
 // src/sdk/parent-passkey-assert.ts
 var assertPasskeyInParent = async ({
   transport,
@@ -54,12 +57,14 @@ var getPresenceToken = async ({
   transport,
   passkey,
   publishableKey,
-  relyingPartyOrigin
+  relyingPartyOrigin,
+  expiresInSecs
 }) => {
+  const rpOrigin = await resolveRelyingPartyOrigin(relyingPartyOrigin);
   const { token, optionsJSON } = await transport.send(
     PostMessageType.AUTH,
     PostMessageMethod.PASSKEY_PRESENCE_BEGIN,
-    { publishableKey, relyingPartyOrigin }
+    { publishableKey, relyingPartyOrigin: rpOrigin }
   );
   const response = await passkey.assertForServer({ optionsJSON });
   const verify = await transport.send(
@@ -67,9 +72,10 @@ var getPresenceToken = async ({
     PostMessageMethod.PASSKEY_PRESENCE_VERIFY,
     {
       publishableKey,
-      relyingPartyOrigin,
+      relyingPartyOrigin: rpOrigin,
       token,
-      response
+      response,
+      ...typeof expiresInSecs === "number" && expiresInSecs > 0 ? { ttl_secs: expiresInSecs } : {}
     }
   );
   return {
@@ -87,15 +93,16 @@ var getInternalPresenceTokens = async ({
   scopes,
   scopeCounts
 }) => {
+  const rpOrigin = await resolveRelyingPartyOrigin(relyingPartyOrigin);
   const { token, optionsJSON } = await transport.send(
     PostMessageType.AUTH,
     PostMessageMethod.PASSKEY_PRESENCE_BEGIN,
-    { publishableKey, relyingPartyOrigin }
+    { publishableKey, relyingPartyOrigin: rpOrigin }
   );
   const { response, userHandleB64url, credentialIdB64url } = await passkey.assertForInternalPresence({ optionsJSON });
   const verifyPayload = {
     publishableKey,
-    relyingPartyOrigin,
+    relyingPartyOrigin: rpOrigin,
     token,
     response,
     purpose: "internal"
@@ -973,5 +980,6 @@ export {
   getHeadlessSolanaMethods,
   getInternalPresenceTokens,
   getPresenceToken,
+  resolveRelyingPartyOrigin,
   signWithEphemeralSigner
 };

package/dist/web/index.d.mts

@@ -1,5 +1,5 @@
 import { P as PostMessageClient } from '../post-message-Z6cLf0mS.mjs';
-import { T as Transport, P as PasskeyAssertor, K as KvStorage } from '../interfaces-BdIeMGGD.mjs';
+import { T as Transport, P as PasskeyAssertor, K as KvStorage } from '../interfaces-BWxOajnD.mjs';
 
 declare const getCachedPostMessageClient: (contentWindow: Window) => PostMessageClient;
 /**

package/dist/web/index.d.ts

@@ -1,5 +1,5 @@
 import { P as PostMessageClient } from '../post-message-Z6cLf0mS.js';
-import { T as Transport, P as PasskeyAssertor, K as KvStorage } from '../interfaces-1vfik3Ef.js';
+import { T as Transport, P as PasskeyAssertor, K as KvStorage } from '../interfaces-BZ5GMWS9.js';
 
 declare const getCachedPostMessageClient: (contentWindow: Window) => PostMessageClient;
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moon-x/core",
-  "version": "0.5.0",
+  "version": "0.7.0",
   "license": "UNLICENSED",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",