@moon-x/node-sdk 0.2.0 → 0.4.0

package/dist/index.d.mts

@@ -1,5 +1,7 @@
 import { AccessTokenClaims, IdentityTokenClaims, PresenceTokenClaims, VerifiedSession } from '@moon-x/core/types';
 export { AccessTokenClaims, BaseTokenClaims, IdentityTokenClaims, PresenceTokenClaims, VerifiedSession } from '@moon-x/core/types';
+import { EphemeralSignerSignResult } from '@moon-x/core/sdk';
+export { EphemeralSignerSignError, EphemeralSignerSignResult } from '@moon-x/core/sdk';
 
 interface AuthOptions {
     baseUrl: string;
@@ -100,6 +102,41 @@ interface MoonXClientConfig {
     fetch?: typeof fetch;
 }
 
+interface EphemeralSignersConfig {
+    baseUrl: string;
+    /** MoonX publishable key — required for the Authorization header on /ephemeral-signers/* calls. */
+    publishableKey: string;
+    fetchImpl?: typeof fetch;
+}
+interface SignEphemeralSignerParams {
+    /** Lowercase-hex 32-byte Ed25519 signer public key, no 0x prefix. */
+    apiPubHex: string;
+    /** Lowercase-hex 32-byte Ed25519 signer private key, no 0x prefix. Never crosses the network. */
+    apiPrivHex: string;
+    /**
+     * Wallet UUID (from `user.wallets[i].id`) the agent should sign on
+     * behalf of. The SDK resolves this to the wallet's MPC `key_id` +
+     * stored `derivation_path` via /ephemeral-signers/me/wallets and
+     * caches the lookup per-process — integrators never see MPC or
+     * BIP-32 internals.
+     */
+    walletId: string;
+    /** Lowercase-hex digest to sign. No 0x prefix. */
+    rawSigningPayloadHex: string;
+    /** Defaults to `now`. SES rejects timestamps further than ±5 min from its clock. */
+    issuedAt?: Date;
+}
+declare class EphemeralSigners {
+    private readonly cfg;
+    constructor(cfg: EphemeralSignersConfig);
+    /**
+     * Sign a digest on behalf of a previously-provisioned ephemeral signer.
+     * Returns the wallet's signature (NOT the Ed25519 sig over the body
+     * — that's an implementation detail consumed by SES internally).
+     */
+    sign(params: SignEphemeralSignerParams): Promise<EphemeralSignerSignResult>;
+}
+
 /**
  * MoonXClient is the entry point for the node SDK. Construct once per
  * process and reuse across requests — the client holds in-memory caches
@@ -128,6 +165,7 @@ interface MoonXClientConfig {
  */
 declare class MoonXClient {
     readonly auth: Auth;
+    readonly ephemeralSigners: EphemeralSigners;
     constructor(input: MoonXClientConfig);
 }
 
@@ -170,4 +208,4 @@ declare class ConfigurationError extends MoonXError {
     constructor(message: string);
 }
 
-export { AppResolutionError, AudienceMismatchError, ConfigurationError, ExpiredTokenError, InvalidTokenError, IssuerMismatchError, JwksFetchError, KidMismatchError, MalformedTokenError, MoonXClient, type MoonXClientConfig, MoonXError, type MoonXErrorCode, SubjectMismatchError, UnsupportedAlgorithmError };
+export { AppResolutionError, AudienceMismatchError, ConfigurationError, EphemeralSigners, ExpiredTokenError, InvalidTokenError, IssuerMismatchError, JwksFetchError, KidMismatchError, MalformedTokenError, MoonXClient, type MoonXClientConfig, MoonXError, type MoonXErrorCode, type SignEphemeralSignerParams, SubjectMismatchError, UnsupportedAlgorithmError };

package/dist/index.d.ts

@@ -1,5 +1,7 @@
 import { AccessTokenClaims, IdentityTokenClaims, PresenceTokenClaims, VerifiedSession } from '@moon-x/core/types';
 export { AccessTokenClaims, BaseTokenClaims, IdentityTokenClaims, PresenceTokenClaims, VerifiedSession } from '@moon-x/core/types';
+import { EphemeralSignerSignResult } from '@moon-x/core/sdk';
+export { EphemeralSignerSignError, EphemeralSignerSignResult } from '@moon-x/core/sdk';
 
 interface AuthOptions {
     baseUrl: string;
@@ -100,6 +102,41 @@ interface MoonXClientConfig {
     fetch?: typeof fetch;
 }
 
+interface EphemeralSignersConfig {
+    baseUrl: string;
+    /** MoonX publishable key — required for the Authorization header on /ephemeral-signers/* calls. */
+    publishableKey: string;
+    fetchImpl?: typeof fetch;
+}
+interface SignEphemeralSignerParams {
+    /** Lowercase-hex 32-byte Ed25519 signer public key, no 0x prefix. */
+    apiPubHex: string;
+    /** Lowercase-hex 32-byte Ed25519 signer private key, no 0x prefix. Never crosses the network. */
+    apiPrivHex: string;
+    /**
+     * Wallet UUID (from `user.wallets[i].id`) the agent should sign on
+     * behalf of. The SDK resolves this to the wallet's MPC `key_id` +
+     * stored `derivation_path` via /ephemeral-signers/me/wallets and
+     * caches the lookup per-process — integrators never see MPC or
+     * BIP-32 internals.
+     */
+    walletId: string;
+    /** Lowercase-hex digest to sign. No 0x prefix. */
+    rawSigningPayloadHex: string;
+    /** Defaults to `now`. SES rejects timestamps further than ±5 min from its clock. */
+    issuedAt?: Date;
+}
+declare class EphemeralSigners {
+    private readonly cfg;
+    constructor(cfg: EphemeralSignersConfig);
+    /**
+     * Sign a digest on behalf of a previously-provisioned ephemeral signer.
+     * Returns the wallet's signature (NOT the Ed25519 sig over the body
+     * — that's an implementation detail consumed by SES internally).
+     */
+    sign(params: SignEphemeralSignerParams): Promise<EphemeralSignerSignResult>;
+}
+
 /**
  * MoonXClient is the entry point for the node SDK. Construct once per
  * process and reuse across requests — the client holds in-memory caches
@@ -128,6 +165,7 @@ interface MoonXClientConfig {
  */
 declare class MoonXClient {
     readonly auth: Auth;
+    readonly ephemeralSigners: EphemeralSigners;
     constructor(input: MoonXClientConfig);
 }
 
@@ -170,4 +208,4 @@ declare class ConfigurationError extends MoonXError {
     constructor(message: string);
 }
 
-export { AppResolutionError, AudienceMismatchError, ConfigurationError, ExpiredTokenError, InvalidTokenError, IssuerMismatchError, JwksFetchError, KidMismatchError, MalformedTokenError, MoonXClient, type MoonXClientConfig, MoonXError, type MoonXErrorCode, SubjectMismatchError, UnsupportedAlgorithmError };
+export { AppResolutionError, AudienceMismatchError, ConfigurationError, EphemeralSigners, ExpiredTokenError, InvalidTokenError, IssuerMismatchError, JwksFetchError, KidMismatchError, MalformedTokenError, MoonXClient, type MoonXClientConfig, MoonXError, type MoonXErrorCode, type SignEphemeralSignerParams, SubjectMismatchError, UnsupportedAlgorithmError };

package/dist/index.js

@@ -23,6 +23,8 @@ __export(src_exports, {
   AppResolutionError: () => AppResolutionError,
   AudienceMismatchError: () => AudienceMismatchError,
   ConfigurationError: () => ConfigurationError,
+  EphemeralSignerSignError: () => import_sdk2.EphemeralSignerSignError,
+  EphemeralSigners: () => EphemeralSigners,
   ExpiredTokenError: () => ExpiredTokenError,
   InvalidTokenError: () => InvalidTokenError,
   IssuerMismatchError: () => IssuerMismatchError,
@@ -500,6 +502,27 @@ function resolveConfig(input) {
   };
 }
 
+// src/ephemeral-signers/index.ts
+var import_sdk = require("@moon-x/core/sdk");
+var EphemeralSigners = class {
+  constructor(cfg) {
+    this.cfg = cfg;
+  }
+  /**
+   * Sign a digest on behalf of a previously-provisioned ephemeral signer.
+   * Returns the wallet's signature (NOT the Ed25519 sig over the body
+   * — that's an implementation detail consumed by SES internally).
+   */
+  async sign(params) {
+    return (0, import_sdk.signWithEphemeralSigner)({
+      ...params,
+      baseUrl: this.cfg.baseUrl,
+      publishableKey: this.cfg.publishableKey,
+      fetchImpl: this.cfg.fetchImpl
+    });
+  }
+};
+
 // src/client.ts
 var MoonXClient = class {
   constructor(input) {
@@ -512,13 +535,23 @@ var MoonXClient = class {
       appResolveTtlMs: cfg.appResolveTtlMs,
       fetch: cfg.fetch
     });
+    this.ephemeralSigners = new EphemeralSigners({
+      baseUrl: cfg.baseUrl,
+      publishableKey: cfg.publishableKey,
+      fetchImpl: cfg.fetch
+    });
   }
 };
+
+// src/index.ts
+var import_sdk2 = require("@moon-x/core/sdk");
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AppResolutionError,
   AudienceMismatchError,
   ConfigurationError,
+  EphemeralSignerSignError,
+  EphemeralSigners,
   ExpiredTokenError,
   InvalidTokenError,
   IssuerMismatchError,

package/dist/index.mjs

@@ -462,6 +462,29 @@ function resolveConfig(input) {
   };
 }
 
+// src/ephemeral-signers/index.ts
+import {
+  signWithEphemeralSigner
+} from "@moon-x/core/sdk";
+var EphemeralSigners = class {
+  constructor(cfg) {
+    this.cfg = cfg;
+  }
+  /**
+   * Sign a digest on behalf of a previously-provisioned ephemeral signer.
+   * Returns the wallet's signature (NOT the Ed25519 sig over the body
+   * — that's an implementation detail consumed by SES internally).
+   */
+  async sign(params) {
+    return signWithEphemeralSigner({
+      ...params,
+      baseUrl: this.cfg.baseUrl,
+      publishableKey: this.cfg.publishableKey,
+      fetchImpl: this.cfg.fetchImpl
+    });
+  }
+};
+
 // src/client.ts
 var MoonXClient = class {
   constructor(input) {
@@ -474,12 +497,24 @@ var MoonXClient = class {
       appResolveTtlMs: cfg.appResolveTtlMs,
       fetch: cfg.fetch
     });
+    this.ephemeralSigners = new EphemeralSigners({
+      baseUrl: cfg.baseUrl,
+      publishableKey: cfg.publishableKey,
+      fetchImpl: cfg.fetch
+    });
   }
 };
+
+// src/index.ts
+import {
+  EphemeralSignerSignError
+} from "@moon-x/core/sdk";
 export {
   AppResolutionError,
   AudienceMismatchError,
   ConfigurationError,
+  EphemeralSignerSignError,
+  EphemeralSigners,
   ExpiredTokenError,
   InvalidTokenError,
   IssuerMismatchError,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moon-x/node-sdk",
-  "version": "0.2.0",
+  "version": "0.4.0",
   "description": "MoonX server-side SDK for Node.js. Verify MoonX-issued access + identity tokens with zero runtime dependencies.",
   "main": "dist/index.js",
   "module": "dist/index.mjs",
@@ -30,7 +30,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@moon-x/core": "0.3.0"
+    "@moon-x/core": "0.5.0"
   },
   "devDependencies": {
     "tsup": "8.5.1",