@moon-x/react-sdk 0.1.0 → 0.2.0

package/dist/index.mjs

@@ -837,6 +837,7 @@ var useMoonKey = function useMoonKey() {
             status: "start"
         },
         getSessionTokens: coreSDK.getSessionTokens,
+        getPresenceToken: coreSDK.getPresenceToken,
         start: coreSDK.start || function() {
             return Promise.resolve(null);
         },
@@ -849,7 +850,7 @@ var useMoonKey = function useMoonKey() {
     };
 };
 // src/components/auth-provider.tsx
-import { getIframeOrigin as getIframeOrigin2, getIframeUrl as getIframeUrl3, PostMessageClient as PostMessageClient10, PostMessageMethod as PostMessageMethod28, PostMessageType as PostMessageType29 } from "@moon-x/core/utils";
+import { getIframeOrigin as getIframeOrigin2, getIframeUrl as getIframeUrl3, PostMessageClient as PostMessageClient10, PostMessageMethod as PostMessageMethod27, PostMessageType as PostMessageType28 } from "@moon-x/core/utils";
 import { useCallback as useCallback11, useEffect as useEffect34, useMemo as useMemo4, useRef as useRef18, useState as useState51 } from "react";
 import { createPortal as createPortal2 } from "react-dom";
 // src/hooks/use-close-iframe.ts
@@ -885,13 +886,13 @@ var createPostMessageClient = function createPostMessageClient(contentWindow, _p
 };
 // src/hooks/use-oauth-callback-detection.ts
 var useOAuthCallbackDetection = function useOAuthCallbackDetection(param) {
-    var isMounted = param.isMounted, isReady = param.isReady, publishableKey = param.publishableKey, iframeRef = param.iframeRef, onOAuthSuccess = param.onOAuthSuccess, onOAuthError = param.onOAuthError, setCurrentFlow = param.setCurrentFlow, setFlowData = param.setFlowData, setStartFlow = param.setStartFlow;
+    var isMounted = param.isMounted, isIframeReady = param.isIframeReady, publishableKey = param.publishableKey, iframeRef = param.iframeRef, onOAuthSuccess = param.onOAuthSuccess, onOAuthError = param.onOAuthError, setCurrentFlow = param.setCurrentFlow, setFlowData = param.setFlowData, setStartFlow = param.setStartFlow;
     if (typeof window === "undefined") {
         return;
     }
     useEffect4(function() {
         if (typeof window === "undefined") return;
-        if (!isMounted || !isReady) return;
+        if (!isMounted || !isIframeReady) return;
         var checkForOAuthCallback = function checkForOAuthCallback() {
             if (typeof window === "undefined") return;
             try {
@@ -903,7 +904,7 @@ var useOAuthCallbackDetection = function useOAuthCallbackDetection(param) {
                         token: token
                     });
                     setStartFlow === null || setStartFlow === void 0 ? void 0 : setStartFlow(true);
-                    setTimeout(function() {
+                    void function() {
                         return _async_to_generator(function() {
                             var _iframeRef_current, client, error;
                             return _ts_generator(this, function(_state) {
@@ -950,7 +951,7 @@ var useOAuthCallbackDetection = function useOAuthCallbackDetection(param) {
                                 }
                             });
                         })();
-                    }, 1500);
+                    }();
                     try {
                         var newUrl = new URL(window.location.href);
                         newUrl.searchParams.delete("token");
@@ -970,7 +971,7 @@ var useOAuthCallbackDetection = function useOAuthCallbackDetection(param) {
         };
     }, [
         isMounted,
-        isReady,
+        isIframeReady,
         publishableKey,
         iframeRef,
         onOAuthSuccess,
@@ -1411,7 +1412,7 @@ var getEthereumSDKMethods = function getEthereumSDKMethods(publishableKey, getIs
 // src/sdk/sdk-methods.ts
 import { PostMessageMethod as PostMessageMethod6, PostMessageType as PostMessageType7 } from "@moon-x/core/utils";
 import { clearParentAssertCache } from "@moon-x/core/lib";
-import { getHeadlessGeneralMethods } from "@moon-x/core/sdk";
+import { getHeadlessGeneralMethods, getPresenceToken as headlessGetPresenceToken } from "@moon-x/core/sdk";
 import { createIframeTransport as createIframeTransport3, createLocalStorageKv, createWebAuthnPasskey as createWebAuthnPasskey2 } from "@moon-x/core/web";
 import { authState as authState2 } from "@moon-x/core/lib";
 // src/sdk/sdk-authentication-methods.ts
@@ -1419,7 +1420,7 @@ import { PostMessageMethod as PostMessageMethod5, PostMessageType as PostMessage
 import { getHeadlessAuthenticationMethods } from "@moon-x/core/sdk";
 import { createIframeTransport as createIframeTransport2 } from "@moon-x/core/web";
 import { authState } from "@moon-x/core/lib";
-var getAuthenticationMethods = function getAuthenticationMethods(publishableKey, isMounted, getIsReady, iframeRef, setFlowState, emailConfig, setIsAuthenticated, setUser) {
+var getAuthenticationMethods = function getAuthenticationMethods(publishableKey, isMounted, getIsReady, iframeRef, setFlowState, setIsAuthenticated, setUser) {
     var transport = createIframeTransport2({
         getContentWindow: function getContentWindow() {
             var _ref;
@@ -1434,7 +1435,6 @@ var getAuthenticationMethods = function getAuthenticationMethods(publishableKey,
     var headless = getHeadlessAuthenticationMethods({
         transport: transport,
         publishableKey: publishableKey,
-        emailConfig: emailConfig,
         setIsAuthenticated: setIsAuthenticated,
         setUser: setUser
     });
@@ -1443,12 +1443,12 @@ var getAuthenticationMethods = function getAuthenticationMethods(publishableKey,
      * Send a one-time passcode to the user's email address. Wraps the
      * shared headless `sendCode` with web's setFlowState lifecycle so
      * the email-otp-verify modal can render loading/error/waiting-code
-     * states. Same status names the global machine has used since
-     * before the refactor (for back-compat with `useMoonKey().flowState`
-     * consumers that haven't migrated to the local-state `useLoginWithEmail`).
+     * states. Returns the platform response (including the authoritative
+     * `expires_at` unix timestamp) so headless consumers can render an
+     * accurate countdown without making it up.
      */ sendCode: function sendCode(params) {
             return _async_to_generator(function() {
-                var _iframeRef_current, error, errorObj;
+                var _iframeRef_current, response, error, errorObj;
                 return _ts_generator(this, function(_state) {
                     switch(_state.label){
                         case 0:
@@ -1480,13 +1480,13 @@ var getAuthenticationMethods = function getAuthenticationMethods(publishableKey,
                                 headless.sendCode(params)
                             ];
                         case 2:
-                            _state.sent();
+                            response = _state.sent();
                             setFlowState({
                                 status: "waiting-code-input"
                             });
                             return [
-                                3,
-                                4
+                                2,
+                                response
                             ];
                         case 3:
                             error = _state.sent();
@@ -1778,7 +1778,7 @@ var getAuthenticationMethods = function getAuthenticationMethods(publishableKey,
     };
 };
 // src/sdk/sdk-methods.ts
-var getSDKMethods = function getSDKMethods(publishableKey, isMounted, getIsReady, iframeRef, setCurrentFlow, setFlowData, setStartFlow, setFlowState, emailConfig, setIsAuthenticated, setUser, closeCallbackRef) {
+var getSDKMethods = function getSDKMethods(publishableKey, isMounted, getIsReady, iframeRef, setCurrentFlow, setFlowData, setStartFlow, setFlowState, setIsAuthenticated, setUser, closeCallbackRef) {
     var transport = createIframeTransport3({
         getContentWindow: function getContentWindow() {
             var _ref;
@@ -1800,7 +1800,7 @@ var getSDKMethods = function getSDKMethods(publishableKey, isMounted, getIsReady
         setIsAuthenticated: setIsAuthenticated,
         setUser: setUser
     });
-    return _object_spread_props(_object_spread({}, getAuthenticationMethods(publishableKey, isMounted, getIsReady, iframeRef, setFlowState, emailConfig, setIsAuthenticated, setUser), headless), {
+    return _object_spread_props(_object_spread({}, getAuthenticationMethods(publishableKey, isMounted, getIsReady, iframeRef, setFlowState, setIsAuthenticated, setUser), headless), {
         // Web override: logout must also reset the modal state machine
         // (`setCurrentFlow` / `setFlowData` / `setStartFlow`) AND clear the
         // localStorage id-token (idTokenStorage). The shared logout already
@@ -1873,6 +1873,35 @@ var getSDKMethods = function getSDKMethods(publishableKey, isMounted, getIsReady
         addPasskey: function addPasskey(_params) {
             return Promise.reject(new Error("addPasskey not initialized"));
         },
+        // getPresenceToken: parent-side passkey step-up ceremony. Returns a
+        // short-lived JWT (tt:"presence") that customer backends verify via
+        // the app's JWKS to gate high-risk routes without rolling their own
+        // session/step-up model. Must be invoked from inside a click handler so
+        // transient activation is alive when WebAuthn fires.
+        //
+        // The strip of `response.userHandle` happens INSIDE getPresenceToken
+        // (parent boundary, before iframe roundtrip). DEK material never
+        // crosses the iframe → server boundary.
+        getPresenceToken: function getPresenceToken() {
+            return _async_to_generator(function() {
+                var _iframeRef_current;
+                return _ts_generator(this, function(_state) {
+                    if (!isMounted) throw new Error("SDK not ready");
+                    if (!getIsReady() || !((_iframeRef_current = iframeRef.current) === null || _iframeRef_current === void 0 ? void 0 : _iframeRef_current.contentWindow)) {
+                        throw new Error("SDK not ready");
+                    }
+                    return [
+                        2,
+                        headlessGetPresenceToken({
+                            transport: transport,
+                            passkey: passkey,
+                            publishableKey: publishableKey,
+                            relyingPartyOrigin: window.location.origin
+                        })
+                    ];
+                });
+            })();
+        },
         // hide: web-only — closes the parent-side modal. No shared analogue.
         hide: function hide() {
             if (!isMounted) return;
@@ -2424,7 +2453,7 @@ var createSDKInstance = function createSDKInstance(publishableKey, isMounted, is
         },
         onError: onError,
         onClose: onClose
-    }, getSDKMethods(publishableKey, isMounted, getCurrentIsReady, iframeRef, setCurrentFlow, setFlowData, setStartFlow, setFlowState, authProviderConfig === null || authProviderConfig === void 0 ? void 0 : authProviderConfig.emailConfig, setIsAuthenticated, setUser, closeCallbacksRef), getPasskeyMethods({
+    }, getSDKMethods(publishableKey, isMounted, getCurrentIsReady, iframeRef, setCurrentFlow, setFlowData, setStartFlow, setFlowState, setIsAuthenticated, setUser, closeCallbacksRef), getPasskeyMethods({
         isMounted: isMounted,
         getIsReady: getCurrentIsReady,
         iframeRef: iframeRef,
@@ -2605,6 +2634,8 @@ var getWalletErrorMessage = function getWalletErrorMessage(errorResponse) {
 };
 // src/components/flows/add-passkey/add-passkey.tsx
 import { PostMessageMethod as PostMessageMethod11, PostMessageType as PostMessageType12 } from "@moon-x/core/utils";
+import { assertPasskeyInParent as assertPasskeyInParent4 } from "@moon-x/core/sdk";
+import { createWebAuthnPasskey as createWebAuthnPasskey5 } from "@moon-x/core/web";
 import { startRegistration } from "@simplewebauthn/browser";
 import { CheckCircle2, Fingerprint, KeyRound, Plus } from "lucide-react";
 import { useRef as useRef4, useState as useState11 } from "react";
@@ -2613,6 +2644,7 @@ import { PostMessageMethod as PostMessageMethod10, PostMessageType as PostMessag
 import { useEffect as useEffect5, useState as useState5 } from "react";
 // src/lib/iframe.ts
 import { PostMessageClient, PostMessageMethod as PostMessageMethod9, PostMessageType as PostMessageType10, getIframeOrigin, getIframeUrl } from "@moon-x/core";
+import { createIframeTransport as createIframeTransport6 } from "@moon-x/core/web";
 var getIframeClient = function getIframeClient(publishableKey) {
     var iframeId = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : "moonkey-auth-iframe";
     var iframe = document.getElementById(iframeId);
@@ -2623,6 +2655,20 @@ var getIframeClient = function getIframeClient(publishableKey) {
     var iframeOrigin = getIframeOrigin(iframeUrl);
     return new PostMessageClient(iframe.contentWindow, iframeOrigin);
 };
+var getIframeTransport = function getIframeTransport() {
+    var iframeId = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : "moonkey-auth-iframe";
+    return createIframeTransport6({
+        getContentWindow: function getContentWindow() {
+            var _ref;
+            var iframe = document.getElementById(iframeId);
+            return (_ref = iframe === null || iframe === void 0 ? void 0 : iframe.contentWindow) !== null && _ref !== void 0 ? _ref : null;
+        },
+        isReady: function isReady() {
+            var iframe = document.getElementById(iframeId);
+            return !!(iframe === null || iframe === void 0 ? void 0 : iframe.contentWindow);
+        }
+    });
+};
 var closeIframe = function closeIframe(publishableKey) {
     var iframe = getIframeClient(publishableKey);
     if (!iframe) {
@@ -3638,14 +3684,50 @@ function AddressPill(param) {
     });
 }
 // src/components/vanilla-ui/error-box.tsx
+import { AlertCircle } from "lucide-react";
 import { jsx as jsx11, jsxs as jsxs7 } from "react/jsx-runtime";
 function ErrorBox(param) {
-    var children = param.children, icon = param.icon, className = param.className, style = param.style;
-    return /* @__PURE__ */ jsxs7("div", {
+    var children = param.children, icon = param.icon, _param_variant = param.variant, variant = _param_variant === void 0 ? "boxed" : _param_variant, align = param.align, className = param.className, style = param.style;
+    var a11yProps = {
+        role: "alert",
+        "aria-live": "polite"
+    };
+    if (variant === "inline") {
+        var resolvedAlign = align !== null && align !== void 0 ? align : "left";
+        var resolvedIcon = icon === null ? null : icon !== null && icon !== void 0 ? icon : /* @__PURE__ */ jsx11(AlertCircle, {
+            size: 14,
+            strokeWidth: 2,
+            style: {
+                flexShrink: 0
+            },
+            "aria-hidden": "true"
+        });
+        return /* @__PURE__ */ jsxs7("div", _object_spread_props(_object_spread({}, a11yProps), {
+            className: cx("moonkey-text--error", className),
+            style: _object_spread({
+                fontSize: "0.875rem",
+                color: "var(--moonkey-color-error)",
+                textAlign: resolvedAlign,
+                display: "flex",
+                alignItems: "center",
+                gap: "0.375rem"
+            }, resolvedAlign === "center" && {
+                justifyContent: "center"
+            }, style),
+            children: [
+                resolvedIcon,
+                /* @__PURE__ */ jsx11("span", {
+                    children: children
+                })
+            ]
+        }));
+    }
+    return /* @__PURE__ */ jsxs7("div", _object_spread_props(_object_spread({}, a11yProps), {
         className: cx("moonkey-box moonkey-box--warning", className),
         style: style,
         children: [
             icon && /* @__PURE__ */ jsx11("span", {
+                "aria-hidden": "true",
                 style: {
                     flexShrink: 0,
                     marginTop: "0.125rem",
@@ -3656,14 +3738,17 @@ function ErrorBox(param) {
                 children: icon
             }),
             /* @__PURE__ */ jsx11("span", {
-                style: {
+                style: _object_spread({
                     fontSize: "0.875rem",
                     color: "var(--moonkey-color-error)"
-                },
+                }, align === "center" && {
+                    textAlign: "center",
+                    flex: 1
+                }),
                 children: children
             })
         ]
-    });
+    }));
 }
 // src/components/vanilla-ui/success-box.tsx
 import { jsx as jsx12, jsxs as jsxs8 } from "react/jsx-runtime";
@@ -3778,77 +3863,42 @@ var AddPasskey = function AddPasskey(param) {
     };
     var handleUnlock = function handleUnlock() {
         return _async_to_generator(function() {
-            var client, _dekInfo_allow_credential_ids_b64url, dekInfo, allowList, challenge, credential, assertion, credentialIdB64url, error;
+            var _ref, userHandleB64url, credentialIdB64url, error;
             return _ts_generator(this, function(_state) {
                 switch(_state.label){
                     case 0:
                         setErrorMessage(null);
                         setStep("unlocking");
-                        client = getIframeClient(publishableKey);
-                        if (!client) {
-                            setErrorMessage("SDK not initialized");
-                            setStep("error");
-                            return [
-                                2
-                            ];
-                        }
                         _state.label = 1;
                     case 1:
                         _state.trys.push([
                             1,
-                            4,
+                            3,
                             ,
-                            5
+                            4
                         ]);
                         return [
                             4,
-                            client.send(PostMessageType12.AUTH, PostMessageMethod11.GET_DEK_INFO, {
-                                publishableKey: publishableKey
+                            assertPasskeyInParent4({
+                                transport: getIframeTransport(),
+                                passkey: createWebAuthnPasskey5(),
+                                publishableKey: publishableKey,
+                                requireFreshAssertion: true,
+                                validateCredentialInAllowList: true
                             })
                         ];
                     case 2:
-                        dekInfo = _state.sent();
-                        allowList = (_dekInfo_allow_credential_ids_b64url = dekInfo.allow_credential_ids_b64url) !== null && _dekInfo_allow_credential_ids_b64url !== void 0 ? _dekInfo_allow_credential_ids_b64url : [];
-                        if (allowList.length === 0) {
-                            throw new Error("passkey_required");
-                        }
-                        if (!dekInfo.rp_id) {
-                            throw new Error("webauthn_rp_id_not_configured");
-                        }
-                        challenge = crypto.getRandomValues(new Uint8Array(32));
-                        return [
-                            4,
-                            navigator.credentials.get({
-                                publicKey: {
-                                    challenge: challenge,
-                                    // Configured `webauthn.rp_id` (apex), not the page hostname,
-                                    // so credentials registered under the apex are surfaced even
-                                    // when the SDK is running on a subdomain.
-                                    rpId: dekInfo.rp_id,
-                                    userVerification: "preferred",
-                                    allowCredentials: []
-                                }
-                            })
-                        ];
-                    case 3:
-                        credential = _state.sent();
-                        if (!credential) throw new Error("passkey_assertion_cancelled");
-                        assertion = credential.response;
-                        if (!assertion.userHandle) throw new Error("user_handle_missing");
-                        credentialIdB64url = bytesToB64url(new Uint8Array(credential.rawId));
-                        if (!allowList.includes(credentialIdB64url)) {
-                            throw new Error("unknown_passkey_for_this_account");
-                        }
+                        _ref = _state.sent(), userHandleB64url = _ref.userHandleB64url, credentialIdB64url = _ref.credentialIdB64url;
                         unlockResult.current = {
-                            userHandleB64url: bytesToB64url(new Uint8Array(assertion.userHandle)),
+                            userHandleB64url: userHandleB64url,
                             credentialIdB64url: credentialIdB64url
                         };
                         setStep("enroll-prompt");
                         return [
                             3,
-                            5
+                            4
                         ];
-                    case 4:
+                    case 3:
                         error = _state.sent();
                         setStep("error");
                         if (_instanceof(error, Error)) {
@@ -3864,9 +3914,9 @@ var AddPasskey = function AddPasskey(param) {
                         }
                         return [
                             3,
-                            5
+                            4
                         ];
-                    case 5:
+                    case 4:
                         return [
                             2
                         ];
@@ -4256,7 +4306,7 @@ var formatCurrency = function formatCurrency(value) {
 // src/components/flows/email-otp-flow/email-otp-input.tsx
 import { Fragment as Fragment2, jsx as jsx17, jsxs as jsxs11 } from "react/jsx-runtime";
 var EmailOtpInput = function EmailOtpInput(param) {
-    var publishableKey = param.publishableKey, expiresIn = param.expiresIn, prefillEmail = param.prefillEmail, onSuccess = param.onSuccess, onError = param.onError;
+    var publishableKey = param.publishableKey, prefillEmail = param.prefillEmail, onSuccess = param.onSuccess, onError = param.onError;
     var _useState12 = _sliced_to_array(useState12(false), 2), isProcessing = _useState12[0], setIsProcessing = _useState12[1];
     var _useState121 = _sliced_to_array(useState12(prefillEmail || ""), 2), email = _useState121[0], setEmail = _useState121[1];
     var _useState122 = _sliced_to_array(useState12(false), 2), hasPrefetched = _useState122[0], setHasPrefetched = _useState122[1];
@@ -4291,13 +4341,12 @@ var EmailOtpInput = function EmailOtpInput(param) {
     };
     var handleEmailSubmit = function handleEmailSubmit() {
         return _async_to_generator(function() {
-            var client, error;
+            var client, response, error, errorObj;
             return _ts_generator(this, function(_state) {
                 switch(_state.label){
                     case 0:
                         if (!isEmailValid) return [
-                            3,
-                            4
+                            2
                         ];
                         setIsProcessing(true);
                         _state.label = 1;
@@ -4305,8 +4354,8 @@ var EmailOtpInput = function EmailOtpInput(param) {
                         _state.trys.push([
                             1,
                             3,
-                            ,
-                            4
+                            4,
+                            5
                         ]);
                         client = getIframeClient(publishableKey);
                         if (!client) {
@@ -4319,27 +4368,34 @@ var EmailOtpInput = function EmailOtpInput(param) {
                             4,
                             client.send(PostMessageType13.AUTH, PostMessageMethod12.LOGIN_CREATE, {
                                 publishableKey: publishableKey,
-                                email: email,
-                                expiresIn: expiresIn
+                                email: email
                             })
                         ];
                     case 2:
-                        _state.sent();
-                        onSuccess(email);
+                        response = _state.sent();
+                        onSuccess({
+                            email: email,
+                            expires_at: response === null || response === void 0 ? void 0 : response.expires_at
+                        });
                         return [
                             3,
-                            4
+                            5
                         ];
                     case 3:
                         error = _state.sent();
                         console.error("Failed to send OTP:", error);
-                        setIsProcessing(false);
-                        onError(error);
+                        errorObj = _instanceof(error, Error) ? error : new Error(String(error));
+                        onError(errorObj);
                         return [
                             3,
-                            4
+                            5
                         ];
                     case 4:
+                        setIsProcessing(false);
+                        return [
+                            7
+                        ];
+                    case 5:
                         return [
                             2
                         ];
@@ -4760,16 +4816,17 @@ var i18n_default = i18n;
 // src/components/flows/email-otp-flow/email-otp-verify.tsx
 import { Fragment as Fragment3, jsx as jsx18, jsxs as jsxs12 } from "react/jsx-runtime";
 var EmailOtpVerify = function EmailOtpVerify(param) {
-    var config = param.config, publishableKey = param.publishableKey, language = param.language, expiresIn = param.expiresIn, emailOtpSendResponse = param.emailOtpSendResponse, onSuccess = param.onSuccess, onBackPress = param.onBackPress, onFlowStateChange = param.onFlowStateChange, propsIsDark = param.isDark;
+    var config = param.config, publishableKey = param.publishableKey, language = param.language, emailOtpSendResponse = param.emailOtpSendResponse, onSuccess = param.onSuccess, onBackPress = param.onBackPress, onFlowStateChange = param.onFlowStateChange, propsIsDark = param.isDark;
     var _ref;
     var _config_config, _config_config_appearance, _config_config1, _config_config_appearance1, _config_config2, _config_config3, _config_config4, _config_config_emailConfig, _config_config5, _config_config_emailConfig1, _config_config6;
     var _useState13 = _sliced_to_array(useState13(""), 2), otp = _useState13[0], setOtp = _useState13[1];
     var _useState131 = _sliced_to_array(useState13(false), 2), isLoading = _useState131[0], setIsLoading = _useState131[1];
     var _useState132 = _sliced_to_array(useState13(false), 2), isResending = _useState132[0], setIsResending = _useState132[1];
-    var _useState133 = _sliced_to_array(useState13(expiresIn !== null && expiresIn !== void 0 ? expiresIn : DEFAULT_COUNTDOWN_TIME), 2), countdown = _useState133[0], setCountdown = _useState133[1];
-    var _useState134 = _sliced_to_array(useState13(false), 2), canResend = _useState134[0], setCanResend = _useState134[1];
+    var _useState133 = _sliced_to_array(useState13(false), 2), canResend = _useState133[0], setCanResend = _useState133[1];
+    var _useState134 = _sliced_to_array(useState13(0), 2), resendCooldownEpoch = _useState134[0], setResendCooldownEpoch = _useState134[1];
     var _useState135 = _sliced_to_array(useState13("idle"), 2), validationState = _useState135[0], setValidationState = _useState135[1];
     var _useState136 = _sliced_to_array(useState13(""), 2), errorMessage = _useState136[0], setErrorMessage = _useState136[1];
+    var _useState137 = _sliced_to_array(useState13(null), 2), resendError = _useState137[0], setResendError = _useState137[1];
     var t = useTranslation().t;
     var isDark = propsIsDark !== void 0 ? propsIsDark : isDarkMode(config === null || config === void 0 ? void 0 : (_config_config = config.config) === null || _config_config === void 0 ? void 0 : _config_config.theme, config === null || config === void 0 ? void 0 : (_config_config1 = config.config) === null || _config_config1 === void 0 ? void 0 : (_config_config_appearance = _config_config1.appearance) === null || _config_config_appearance === void 0 ? void 0 : _config_config_appearance.displayMode, config === null || config === void 0 ? void 0 : (_config_config2 = config.config) === null || _config_config2 === void 0 ? void 0 : (_config_config_appearance1 = _config_config2.appearance) === null || _config_config_appearance1 === void 0 ? void 0 : _config_config_appearance1.backgroundColor);
     useEffect9(function() {
@@ -4779,39 +4836,20 @@ var EmailOtpVerify = function EmailOtpVerify(param) {
     }, [
         language
     ]);
-    useEffect9(function() {
-        if (countdown * 60 > 0) {
-            var timer = setTimeout(function() {
-                setCountdown(countdown * 60 - 1);
-            }, 1e3);
-            return function() {
-                return clearTimeout(timer);
-            };
-        } else {
-            setCanResend(true);
-        }
-    }, [
-        countdown
-    ]);
     var calculateResendCodeTime = function calculateResendCodeTime() {
         var _ref;
         var _config_config_emailConfig, _config_config;
         var resendCodeTime = (_ref = config === null || config === void 0 ? void 0 : (_config_config = config.config) === null || _config_config === void 0 ? void 0 : (_config_config_emailConfig = _config_config.emailConfig) === null || _config_config_emailConfig === void 0 ? void 0 : _config_config_emailConfig.resendCodeTime) !== null && _ref !== void 0 ? _ref : DEFAULT_COUNTDOWN_TIME;
-        if (resendCodeTime && resendCodeTime > 1) {
-            return resendCodeTime * 60;
-        }
-        return DEFAULT_COUNTDOWN_TIME * 60;
+        return resendCodeTime > 0 ? resendCodeTime : DEFAULT_COUNTDOWN_TIME;
     };
     var handleResendCode = function handleResendCode() {
         return _async_to_generator(function() {
-            var client, error;
+            var client, error, errorObj;
             return _ts_generator(this, function(_state) {
                 switch(_state.label){
                     case 0:
                         setIsResending(true);
-                        setValidationState("idle");
-                        setErrorMessage("");
-                        setOtp("");
+                        setResendError(null);
                         _state.label = 1;
                     case 1:
                         _state.trys.push([
@@ -4822,8 +4860,11 @@ var EmailOtpVerify = function EmailOtpVerify(param) {
                         ]);
                         client = getIframeClient(publishableKey);
                         if (!client) {
-                            setValidationState("error");
-                            setErrorMessage("Failed to resend OTP");
+                            setResendError("Failed to resend OTP");
+                            setResendCooldownEpoch(function(n) {
+                                return n + 1;
+                            });
+                            setCanResend(false);
                             return [
                                 2
                             ];
@@ -4832,13 +4873,17 @@ var EmailOtpVerify = function EmailOtpVerify(param) {
                             4,
                             client.send(PostMessageType14.AUTH, PostMessageMethod13.LOGIN_CREATE, {
                                 publishableKey: publishableKey,
-                                email: emailOtpSendResponse.email,
-                                expiresIn: expiresIn
+                                email: emailOtpSendResponse.email
                             })
                         ];
                     case 2:
                         _state.sent();
-                        setCountdown(calculateResendCodeTime());
+                        setOtp("");
+                        setValidationState("idle");
+                        setErrorMessage("");
+                        setResendCooldownEpoch(function(n) {
+                            return n + 1;
+                        });
                         setCanResend(false);
                         return [
                             3,
@@ -4846,8 +4891,16 @@ var EmailOtpVerify = function EmailOtpVerify(param) {
                         ];
                     case 3:
                         error = _state.sent();
-                        setValidationState("error");
-                        setErrorMessage("Failed to re-send OTP");
+                        errorObj = _instanceof(error, Error) ? error : new Error(String(error));
+                        setResendError(errorObj.message || "Failed to re-send OTP");
+                        setResendCooldownEpoch(function(n) {
+                            return n + 1;
+                        });
+                        setCanResend(false);
+                        onFlowStateChange === null || onFlowStateChange === void 0 ? void 0 : onFlowStateChange({
+                            status: "error",
+                            error: errorObj
+                        });
                         return [
                             3,
                             5
@@ -5060,12 +5113,10 @@ var EmailOtpVerify = function EmailOtpVerify(param) {
                                             ]
                                         })
                                     }),
-                                    validationState === "error" && /* @__PURE__ */ jsxs12("div", {
-                                        className: "moonkey-text--error moonkey-text--center",
-                                        children: [
-                                            "\u2717 ",
-                                            errorMessage
-                                        ]
+                                    validationState === "error" && /* @__PURE__ */ jsx18(ErrorBox, {
+                                        variant: "inline",
+                                        align: "center",
+                                        children: errorMessage
                                     }),
                                     canResend ? /* @__PURE__ */ jsxs12("div", {
                                         className: "moonkey-center-row",
@@ -5100,6 +5151,11 @@ var EmailOtpVerify = function EmailOtpVerify(param) {
                                         onComplete: function onComplete() {
                                             return setCanResend(true);
                                         }
+                                    }, resendCooldownEpoch),
+                                    resendError && /* @__PURE__ */ jsx18(ErrorBox, {
+                                        variant: "inline",
+                                        align: "center",
+                                        children: resendError
                                     })
                                 ]
                             })
@@ -5288,11 +5344,9 @@ var EmailOtpVerifyFlow = function EmailOtpVerifyFlow(param) {
         onComplete
     ]);
     if (currentStep === "verify") {
-        var _authConfig_config_emailConfig, _authConfig_config;
         return /* @__PURE__ */ jsx21(EmailOtpVerify, {
             config: authConfig,
             publishableKey: authConfig.publishableKey,
-            expiresIn: (_authConfig_config = authConfig.config) === null || _authConfig_config === void 0 ? void 0 : (_authConfig_config_emailConfig = _authConfig_config.emailConfig) === null || _authConfig_config_emailConfig === void 0 ? void 0 : _authConfig_config_emailConfig.expiresIn,
             emailOtpSendResponse: storedEmailOtpSendResponse,
             onSuccess: handleOtpVerifySuccess,
             onBackPress: onBackPress
@@ -5307,15 +5361,12 @@ var EmailOtpVerifyFlow = function EmailOtpVerifyFlow(param) {
     }
 };
 // src/components/flows/export-key/export-key.tsx
-import { getIframeUrl as getIframeUrl2, PostMessageMethod as PostMessageMethod14, PostMessageType as PostMessageType15 } from "@moon-x/core/utils";
+import { getIframeUrl as getIframeUrl2 } from "@moon-x/core/utils";
+import { assertPasskeyInParent as assertPasskeyInParent5 } from "@moon-x/core/sdk";
+import { createWebAuthnPasskey as createWebAuthnPasskey6 } from "@moon-x/core/web";
 import { KeyRound as KeyRound2, ShieldOff, X } from "lucide-react";
 import { useEffect as useEffect11, useRef as useRef6, useState as useState15 } from "react";
 import { Fragment as Fragment4, jsx as jsx22, jsxs as jsxs15 } from "react/jsx-runtime";
-var bytesToB64url2 = function bytesToB64url2(bytes) {
-    var bin = "";
-    for(var i = 0; i < bytes.byteLength; i++)bin += String.fromCharCode(bytes[i]);
-    return btoa(bin).replace(/=/g, "").replace(/\+/g, "-").replace(/\//g, "_");
-};
 var ExportKey = function ExportKey(param) {
     var uiConfig = param.uiConfig, walletId = param.walletId, publishableKey = param.publishableKey, walletType = param.walletType, onCancel = param.onCancel, propsIsDark = param.isDark, propsAppConfig = param.appConfig, config = param.config;
     var _ref;
@@ -5492,78 +5543,51 @@ var ExportKey = function ExportKey(param) {
     };
     var handleReveal = function handleReveal() {
         return _async_to_generator(function() {
-            var client, _dekInfo_allow_credential_ids_b64url, dekInfo, challenge, credential, assertion, err, msg;
+            var _ref, userHandleB64url, credentialIdB64url, err, msg;
             return _ts_generator(this, function(_state) {
                 switch(_state.label){
                     case 0:
                         setRevealError(null);
                         setIsRevealing(true);
-                        client = getIframeClient(publishableKey);
-                        if (!client) {
-                            setRevealError("SDK not initialized");
-                            setIsRevealing(false);
-                            return [
-                                2
-                            ];
-                        }
                         _state.label = 1;
                     case 1:
                         _state.trys.push([
                             1,
+                            3,
                             4,
-                            5,
-                            6
+                            5
                         ]);
                         return [
                             4,
-                            client.send(PostMessageType15.AUTH, PostMessageMethod14.GET_DEK_INFO, {
-                                publishableKey: publishableKey
+                            assertPasskeyInParent5({
+                                transport: getIframeTransport(),
+                                passkey: createWebAuthnPasskey6(),
+                                publishableKey: publishableKey,
+                                requireFreshAssertion: true,
+                                validateCredentialInAllowList: true
                             })
                         ];
                     case 2:
-                        dekInfo = _state.sent();
-                        if (((_dekInfo_allow_credential_ids_b64url = dekInfo.allow_credential_ids_b64url) !== null && _dekInfo_allow_credential_ids_b64url !== void 0 ? _dekInfo_allow_credential_ids_b64url : []).length === 0) {
-                            throw new Error("passkey_required");
-                        }
-                        if (!dekInfo.rp_id) {
-                            throw new Error("webauthn_rp_id_not_configured");
-                        }
-                        challenge = crypto.getRandomValues(new Uint8Array(32));
-                        return [
-                            4,
-                            navigator.credentials.get({
-                                publicKey: {
-                                    challenge: challenge,
-                                    rpId: dekInfo.rp_id,
-                                    userVerification: "preferred",
-                                    allowCredentials: []
-                                }
-                            })
-                        ];
-                    case 3:
-                        credential = _state.sent();
-                        if (!credential) throw new Error("passkey_assertion_cancelled");
-                        assertion = credential.response;
-                        if (!assertion.userHandle) throw new Error("user_handle_missing");
-                        setIframeUrl(getfinalIframeUrl("private_key", bytesToB64url2(new Uint8Array(assertion.userHandle)), bytesToB64url2(new Uint8Array(credential.rawId))));
+                        _ref = _state.sent(), userHandleB64url = _ref.userHandleB64url, credentialIdB64url = _ref.credentialIdB64url;
+                        setIframeUrl(getfinalIframeUrl("private_key", userHandleB64url, credentialIdB64url));
                         return [
                             3,
-                            6
+                            5
                         ];
-                    case 4:
+                    case 3:
                         err = _state.sent();
-                        msg = _instanceof(err, Error) ? err.name === "NotAllowedError" ? "Passkey prompt was cancelled. Click Reveal Key to retry." : err.message === "passkey_required" ? "Enroll a passkey first." : err.message === "user_handle_missing" ? "Your authenticator didn't return a user handle. Pick a different passkey." : err.message : "Couldn't unlock the export.";
+                        msg = _instanceof(err, Error) ? err.name === "NotAllowedError" ? "Passkey prompt was cancelled. Click Reveal Key to retry." : err.message === "passkey_required" ? "Enroll a passkey first." : err.message === "user_handle_missing" ? "Your authenticator didn't return a user handle. Pick a different passkey." : err.message === "unknown_passkey_for_this_account" ? "That passkey isn't recognized for your account on this device. It may belong to a different account. Try again and pick one of your registered passkeys." : err.message : "Couldn't unlock the export.";
                         setRevealError(msg);
                         return [
                             3,
-                            6
+                            5
                         ];
-                    case 5:
+                    case 4:
                         setIsRevealing(false);
                         return [
                             7
                         ];
-                    case 6:
+                    case 5:
                         return [
                             2
                         ];
@@ -7017,7 +7041,7 @@ var FundingFlow = function FundingFlow(param) {
     return null;
 };
 // src/components/flows/import-wallet/import-wallet.tsx
-import { PostMessageMethod as PostMessageMethod15, PostMessageType as PostMessageType16 } from "@moon-x/core";
+import { PostMessageMethod as PostMessageMethod14, PostMessageType as PostMessageType15 } from "@moon-x/core";
 import { CheckCircle2 as CheckCircle23, X as X5 } from "lucide-react";
 import { useState as useState21 } from "react";
 import { jsx as jsx32, jsxs as jsxs24 } from "react/jsx-runtime";
@@ -7069,7 +7093,7 @@ var ImportWallet = function ImportWallet(param) {
                         }
                         return [
                             4,
-                            client.send(PostMessageType16.WALLET, PostMessageMethod15.IMPORT_KEY, {
+                            client.send(PostMessageType15.WALLET, PostMessageMethod14.IMPORT_KEY, {
                                 walletType: walletType,
                                 key: trimmed,
                                 publishableKey: publishableKey,
@@ -7226,7 +7250,7 @@ var ImportWallet = function ImportWallet(param) {
     });
 };
 // src/components/flows/login-landing/login-landing.tsx
-import { PostMessageMethod as PostMessageMethod18, PostMessageType as PostMessageType19 } from "@moon-x/core/utils";
+import { PostMessageMethod as PostMessageMethod17, PostMessageType as PostMessageType18 } from "@moon-x/core/utils";
 import React16 from "react";
 // src/components/social/social-login-button.tsx
 import { useState as useState22 } from "react";
@@ -8293,7 +8317,7 @@ var useWalletConnect = function useWalletConnect(param) {
 // src/components/wallet-connect/components/browser-extension-ui.tsx
 import { useEffect as useEffect16, useRef as useRef9, useState as useState26 } from "react";
 // src/internal/use-ethereum-wallet.ts
-import { PostMessageClient as PostMessageClient2, PostMessageMethod as PostMessageMethod16, PostMessageType as PostMessageType17 } from "@moon-x/core/utils";
+import { PostMessageClient as PostMessageClient2, PostMessageMethod as PostMessageMethod15, PostMessageType as PostMessageType16 } from "@moon-x/core/utils";
 import { useCallback as useCallback8, useState as useState25 } from "react";
 import { createManualSiweMessage } from "@moon-x/core/lib";
 var parseChainId = function parseChainId(chainId) {
@@ -8421,7 +8445,7 @@ var useEthereumWallet = function useEthereumWallet(param) {
                         ]);
                         return [
                             4,
-                            client.send(PostMessageType17.EXTERNAL_WALLET, PostMessageMethod16.WALLET_REGISTRATION_NONCE, {
+                            client.send(PostMessageType16.EXTERNAL_WALLET, PostMessageMethod15.WALLET_REGISTRATION_NONCE, {
                                 publishableKey: publishableKey,
                                 publicAddress: walletAddress,
                                 walletType: "ethereum",
@@ -8498,7 +8522,7 @@ var useEthereumWallet = function useEthereumWallet(param) {
                     case 10:
                         return [
                             4,
-                            client.send(PostMessageType17.EXTERNAL_WALLET, PostMessageMethod16.VERIFY_SIWE_WALLET_REGISTRATION, {
+                            client.send(PostMessageType16.EXTERNAL_WALLET, PostMessageMethod15.VERIFY_SIWE_WALLET_REGISTRATION, {
                                 publishableKey: publishableKey,
                                 publicAddress: walletAddress,
                                 walletType: "ethereum",
@@ -8515,7 +8539,7 @@ var useEthereumWallet = function useEthereumWallet(param) {
                             ];
                         }
                         parentClient = new PostMessageClient2(window.parent, "*");
-                        parentClient.sendOneWay(PostMessageType17.EXTERNAL_WALLET, "WALLET_CONNECTED", _object_spread({}, verifyResult.sessionData));
+                        parentClient.sendOneWay(PostMessageType16.EXTERNAL_WALLET, "WALLET_CONNECTED", _object_spread({}, verifyResult.sessionData));
                         onSuccess === null || onSuccess === void 0 ? void 0 : onSuccess(verifyResult.sessionData);
                         return [
                             3,
@@ -8591,7 +8615,7 @@ var useEthereumWallet = function useEthereumWallet(param) {
                         ]);
                         return [
                             4,
-                            client.send(PostMessageType17.EXTERNAL_WALLET, PostMessageMethod16.WALLET_REGISTRATION_NONCE, {
+                            client.send(PostMessageType16.EXTERNAL_WALLET, PostMessageMethod15.WALLET_REGISTRATION_NONCE, {
                                 publishableKey: publishableKey,
                                 publicAddress: walletAddress,
                                 walletType: "ethereum",
@@ -8668,7 +8692,7 @@ var useEthereumWallet = function useEthereumWallet(param) {
                     case 10:
                         return [
                             4,
-                            client.send(PostMessageType17.EXTERNAL_WALLET, PostMessageMethod16.VERIFY_SIWE_WALLET_REGISTRATION, {
+                            client.send(PostMessageType16.EXTERNAL_WALLET, PostMessageMethod15.VERIFY_SIWE_WALLET_REGISTRATION, {
                                 publishableKey: publishableKey,
                                 publicAddress: walletAddress,
                                 walletType: "ethereum",
@@ -10780,7 +10804,7 @@ var NetworkSelection = function NetworkSelection(param) {
 // src/components/flows/wallets-flow/solana-connection-ui.tsx
 import { useEffect as useEffect20, useRef as useRef12, useState as useState34 } from "react";
 // src/internal/use-solana-wallet.ts
-import { PostMessageClient as PostMessageClient3, PostMessageMethod as PostMessageMethod17, PostMessageType as PostMessageType18 } from "@moon-x/core/utils";
+import { PostMessageClient as PostMessageClient3, PostMessageMethod as PostMessageMethod16, PostMessageType as PostMessageType17 } from "@moon-x/core/utils";
 import { useCallback as useCallback10, useState as useState33 } from "react";
 import { SiwsMessage } from "@moon-x/core/lib";
 var useSolanaWallet = function useSolanaWallet(param) {
@@ -10879,7 +10903,7 @@ var useSolanaWallet = function useSolanaWallet(param) {
                         ]);
                         return [
                             4,
-                            client.send(PostMessageType18.EXTERNAL_WALLET, PostMessageMethod17.WALLET_REGISTRATION_NONCE, {
+                            client.send(PostMessageType17.EXTERNAL_WALLET, PostMessageMethod16.WALLET_REGISTRATION_NONCE, {
                                 publishableKey: publishableKey,
                                 publicAddress: walletAddress,
                                 walletType: "solana",
@@ -10931,7 +10955,7 @@ var useSolanaWallet = function useSolanaWallet(param) {
                         encodedSignature = bs58.default.encode(signatureResponse);
                         return [
                             4,
-                            client.send(PostMessageType18.EXTERNAL_WALLET, PostMessageMethod17.VERIFY_SIWE_WALLET_REGISTRATION, {
+                            client.send(PostMessageType17.EXTERNAL_WALLET, PostMessageMethod16.VERIFY_SIWE_WALLET_REGISTRATION, {
                                 publishableKey: publishableKey,
                                 publicAddress: walletAddress,
                                 walletType: "solana",
@@ -11016,7 +11040,7 @@ var useSolanaWallet = function useSolanaWallet(param) {
                         ]);
                         return [
                             4,
-                            client.send(PostMessageType18.EXTERNAL_WALLET, PostMessageMethod17.WALLET_REGISTRATION_NONCE, {
+                            client.send(PostMessageType17.EXTERNAL_WALLET, PostMessageMethod16.WALLET_REGISTRATION_NONCE, {
                                 publishableKey: publishableKey,
                                 publicAddress: walletAddress,
                                 walletType: "solana",
@@ -11068,7 +11092,7 @@ var useSolanaWallet = function useSolanaWallet(param) {
                         encodedSignature = bs58.default.encode(signatureResponse);
                         return [
                             4,
-                            client.send(PostMessageType18.EXTERNAL_WALLET, PostMessageMethod17.VERIFY_SIWE_WALLET_REGISTRATION, {
+                            client.send(PostMessageType17.EXTERNAL_WALLET, PostMessageMethod16.VERIFY_SIWE_WALLET_REGISTRATION, {
                                 publishableKey: publishableKey,
                                 publicAddress: walletAddress,
                                 walletType: "solana",
@@ -11085,7 +11109,7 @@ var useSolanaWallet = function useSolanaWallet(param) {
                             ];
                         }
                         parentClient = new PostMessageClient3(window.parent, "*");
-                        parentClient.sendOneWay(PostMessageType18.EXTERNAL_WALLET, "WALLET_CONNECTED", _object_spread({}, verifyResult.sessionData));
+                        parentClient.sendOneWay(PostMessageType17.EXTERNAL_WALLET, "WALLET_CONNECTED", _object_spread({}, verifyResult.sessionData));
                         onSuccess === null || onSuccess === void 0 ? void 0 : onSuccess(verifyResult.sessionData);
                         return [
                             3,
@@ -12153,7 +12177,7 @@ var TermsAndPrivacy = function TermsAndPrivacy(param) {
 import { jsx as jsx51, jsxs as jsxs41 } from "react/jsx-runtime";
 var LoginLanding = function LoginLanding(param) {
     var config = param.config, onCancel = param.onCancel, onMethodSelect = param.onMethodSelect, _param_embedded = param.embedded, embedded = _param_embedded === void 0 ? false : _param_embedded, _param_hideClose = param.hideClose, hideClose = _param_hideClose === void 0 ? false : _param_hideClose, propsIsDark = param.isDark, propsAppConfig = param.appConfig;
-    var _config_config, _config_config_appearance, _config_config1, _config_config_appearance1, _config_config2, _config_config3, _config_config4, _appConfig_privacy_policy_url, _appConfig_terms_of_service_url, _config_config5, _config_config6, _config_config_appearance_loginHeaderTitle, _config_config_appearance2, _config_config7, _config_config_appearance3, _config_config8, _config_config_appearance4, _config_config9, _config_config_appearance5, _config_config10, _config_config_emailConfig, _config_config11, _config_config_prefill, _config_config12, _config_config_prefill1, _config_config13;
+    var _config_config, _config_config_appearance, _config_config1, _config_config_appearance1, _config_config2, _config_config3, _config_config4, _appConfig_privacy_policy_url, _appConfig_terms_of_service_url, _config_config5, _config_config6, _config_config_appearance_loginHeaderTitle, _config_config_appearance2, _config_config7, _config_config_appearance3, _config_config8, _config_config_appearance4, _config_config9, _config_config_appearance5, _config_config10, _config_config_prefill, _config_config11, _config_config_prefill1, _config_config12;
     var _useAppConfig = useAppConfig(propsAppConfig ? void 0 : config === null || config === void 0 ? void 0 : config.publishableKey), fetchedAppConfig = _useAppConfig.appConfig;
     var appConfig = propsAppConfig || fetchedAppConfig;
     var t = useTranslation().t;
@@ -12194,20 +12218,23 @@ var LoginLanding = function LoginLanding(param) {
         }
     };
     var _React16_useState = _sliced_to_array(React16.useState(false), 2), acceptedTerms = _React16_useState[0], setAcceptedTerms = _React16_useState[1];
+    var _React16_useState1 = _sliced_to_array(React16.useState(null), 2), loginError = _React16_useState1[0], setLoginError = _React16_useState1[1];
     var hasAnyTermsUrl = !!(appConfig === null || appConfig === void 0 ? void 0 : (_appConfig_privacy_policy_url = appConfig.privacy_policy_url) === null || _appConfig_privacy_policy_url === void 0 ? void 0 : _appConfig_privacy_policy_url.startsWith("https://")) || !!(appConfig === null || appConfig === void 0 ? void 0 : (_appConfig_terms_of_service_url = appConfig.terms_of_service_url) === null || _appConfig_terms_of_service_url === void 0 ? void 0 : _appConfig_terms_of_service_url.startsWith("https://"));
     var requireTerms = (appConfig === null || appConfig === void 0 ? void 0 : appConfig.require_users_accept_terms) === true && hasAnyTermsUrl;
     var loginGated = requireTerms && !acceptedTerms;
     var handleSocialLogin = function handleSocialLogin(provider) {
         return _async_to_generator(function() {
-            var client, data, redirectUrl, url, popup, handleMessage, error;
+            var client, data, redirectUrl, url, popup, handleMessage, error, message;
             return _ts_generator(this, function(_state) {
                 switch(_state.label){
                     case 0:
                         if (loginGated) return [
                             2
                         ];
+                        setLoginError(null);
                         client = getIframeClient(config === null || config === void 0 ? void 0 : config.publishableKey);
                         if (!client) {
+                            setLoginError("Sign-in is not ready yet \u2014 please reload the page and try again.");
                             return [
                                 2
                             ];
@@ -12222,7 +12249,7 @@ var LoginLanding = function LoginLanding(param) {
                         ]);
                         return [
                             4,
-                            client.send(PostMessageType19.AUTH, PostMessageMethod18.START_OAUTH, {
+                            client.send(PostMessageType18.AUTH, PostMessageMethod17.START_OAUTH, {
                                 publishableKey: config === null || config === void 0 ? void 0 : config.publishableKey,
                                 provider: provider,
                                 login_redirect_url: window.location.href
@@ -12240,7 +12267,7 @@ var LoginLanding = function LoginLanding(param) {
                         }
                         popup = window.open(redirectUrl, "_self");
                         if (!popup) {
-                            console.error("Popup blocked");
+                            setLoginError("Your browser blocked the sign-in window. Please allow popups for this site and try again.");
                             return [
                                 2
                             ];
@@ -12262,6 +12289,8 @@ var LoginLanding = function LoginLanding(param) {
                     case 3:
                         error = _state.sent();
                         console.error("OAuth failed:", error);
+                        message = _instanceof(error, Error) ? error.message : "Sign-in failed. Please try again.";
+                        setLoginError(message);
                         return [
                             3,
                             4
@@ -12336,15 +12365,15 @@ var LoginLanding = function LoginLanding(param) {
                                 children: [
                                     showEmail && /* @__PURE__ */ jsx51(EmailOtpInput, {
                                         publishableKey: (config === null || config === void 0 ? void 0 : config.publishableKey) || "",
-                                        expiresIn: config === null || config === void 0 ? void 0 : (_config_config11 = config.config) === null || _config_config11 === void 0 ? void 0 : (_config_config_emailConfig = _config_config11.emailConfig) === null || _config_config_emailConfig === void 0 ? void 0 : _config_config_emailConfig.expiresIn,
-                                        prefillEmail: (config === null || config === void 0 ? void 0 : (_config_config12 = config.config) === null || _config_config12 === void 0 ? void 0 : (_config_config_prefill = _config_config12.prefill) === null || _config_config_prefill === void 0 ? void 0 : _config_config_prefill.type) === "email" ? config === null || config === void 0 ? void 0 : (_config_config13 = config.config) === null || _config_config13 === void 0 ? void 0 : (_config_config_prefill1 = _config_config13.prefill) === null || _config_config_prefill1 === void 0 ? void 0 : _config_config_prefill1.value : void 0,
-                                        onSuccess: function onSuccess(email) {
+                                        prefillEmail: (config === null || config === void 0 ? void 0 : (_config_config11 = config.config) === null || _config_config11 === void 0 ? void 0 : (_config_config_prefill = _config_config11.prefill) === null || _config_config_prefill === void 0 ? void 0 : _config_config_prefill.type) === "email" ? config === null || config === void 0 ? void 0 : (_config_config12 = config.config) === null || _config_config12 === void 0 ? void 0 : (_config_config_prefill1 = _config_config12.prefill) === null || _config_config_prefill1 === void 0 ? void 0 : _config_config_prefill1.value : void 0,
+                                        onSuccess: function onSuccess(response) {
                                             if (loginGated) return;
-                                            onMethodSelect === null || onMethodSelect === void 0 ? void 0 : onMethodSelect("email", {
-                                                email: email
-                                            });
+                                            setLoginError(null);
+                                            onMethodSelect === null || onMethodSelect === void 0 ? void 0 : onMethodSelect("email", response);
                                         },
-                                        onError: function onError() {}
+                                        onError: function onError(err) {
+                                            return setLoginError(err.message);
+                                        }
                                     }),
                                     /* @__PURE__ */ jsxs41("div", {
                                         className: "moonkey-social-buttons moonkey-flex-col",
@@ -12370,6 +12399,11 @@ var LoginLanding = function LoginLanding(param) {
                                     })
                                 ]
                             }),
+                            loginError && /* @__PURE__ */ jsx51(ErrorBox, {
+                                variant: "inline",
+                                align: "center",
+                                children: loginError
+                            }),
                             /* @__PURE__ */ jsx51(TermsAndPrivacy, {
                                 appConfig: appConfig,
                                 accepted: acceptedTerms,
@@ -12474,7 +12508,7 @@ var OAuth = function OAuth(param) {
     });
 };
 // src/components/flows/passkey-enroll/passkey-enroll.tsx
-import { PostMessageMethod as PostMessageMethod19, PostMessageType as PostMessageType20 } from "@moon-x/core/utils";
+import { PostMessageMethod as PostMessageMethod18, PostMessageType as PostMessageType19 } from "@moon-x/core/utils";
 import { startRegistration as startRegistration2 } from "@simplewebauthn/browser";
 import { CheckCircle2 as CheckCircle24, CloudCog, Fingerprint as Fingerprint2, ShieldCheck } from "lucide-react";
 import { useEffect as useEffect23, useRef as useRef13, useState as useState37 } from "react";
@@ -12557,7 +12591,7 @@ var PasskeyEnroll = function PasskeyEnroll(param) {
                             ]);
                             return [
                                 4,
-                                client.send(PostMessageType20.AUTH, PostMessageMethod19.PASSKEY_REGISTER_BEGIN, {
+                                client.send(PostMessageType19.AUTH, PostMessageMethod18.PASSKEY_REGISTER_BEGIN, {
                                     publishableKey: publishableKey,
                                     // Full origin (scheme + host + non-default port). Backend
                                     // pulls the host out for the suffix check against the
@@ -12658,7 +12692,7 @@ var PasskeyEnroll = function PasskeyEnroll(param) {
                         credential = _state.sent();
                         return [
                             4,
-                            client.send(PostMessageType20.AUTH, PostMessageMethod19.PASSKEY_REGISTER_VERIFY, {
+                            client.send(PostMessageType19.AUTH, PostMessageMethod18.PASSKEY_REGISTER_VERIFY, {
                                 publishableKey: publishableKey,
                                 // Must match the value sent at register/begin so the backend
                                 // rebuilds the same RP config the cryptographic verification
@@ -12865,10 +12899,10 @@ var PasskeyEnroll = function PasskeyEnroll(param) {
     });
 };
 // src/components/flows/send-ethereum-transaction-flow/send-ethereum-transaction-flow.tsx
-import { PostMessageClient as PostMessageClient4, PostMessageMethod as PostMessageMethod21, PostMessageType as PostMessageType22 } from "@moon-x/core/utils";
+import { PostMessageClient as PostMessageClient4, PostMessageMethod as PostMessageMethod20, PostMessageType as PostMessageType21 } from "@moon-x/core/utils";
 import { useState as useState40 } from "react";
 // src/components/flows/send-ethereum-transaction-flow/send-ethereum-transaction.tsx
-import { PostMessageMethod as PostMessageMethod20, PostMessageType as PostMessageType21 } from "@moon-x/core/utils";
+import { PostMessageMethod as PostMessageMethod19, PostMessageType as PostMessageType20 } from "@moon-x/core/utils";
 import { ListCheck, X as X11, XCircle as XCircle2 } from "lucide-react";
 import { useEffect as useEffect24, useState as useState38 } from "react";
 import { jsx as jsx54, jsxs as jsxs44 } from "react/jsx-runtime";
@@ -12902,7 +12936,7 @@ var SendEthereumTransaction = function SendEthereumTransaction(param) {
                             ]);
                             return [
                                 4,
-                                client.send(PostMessageType21.WALLET, PostMessageMethod20.GET_CONFIRM_ETHEREUM_TRANSACTION, {
+                                client.send(PostMessageType20.WALLET, PostMessageMethod19.GET_CONFIRM_ETHEREUM_TRANSACTION, {
                                     transaction: transaction,
                                     walletAddress: wallet === null || wallet === void 0 ? void 0 : wallet.public_address,
                                     rpcUrl: rpcUrl,
@@ -13684,7 +13718,7 @@ var SendEthereumTransactionFlow = function SendEthereumTransactionFlow(param) {
                         _ref = _state.sent(), userHandleB64url = _ref.userHandleB64url, credentialIdB64url = _ref.credentialIdB64url;
                         return [
                             4,
-                            client.send(PostMessageType22.WALLET, PostMessageMethod21.SIGN_TRANSACTION, {
+                            client.send(PostMessageType21.WALLET, PostMessageMethod20.SIGN_TRANSACTION, {
                                 publishableKey: publishableKey,
                                 serializedTransaction: sendTransactionRequest.serializedTransaction,
                                 wallet: wallet,
@@ -13732,7 +13766,7 @@ var SendEthereumTransactionFlow = function SendEthereumTransactionFlow(param) {
                         setCurrentStep("success");
                         if (options === null || options === void 0 ? void 0 : (_options_uiOptions = options.uiOptions) === null || _options_uiOptions === void 0 ? void 0 : _options_uiOptions.showWalletUI) {
                             parentClient = new PostMessageClient4(window.parent, "*");
-                            parentClient.sendOneWay(PostMessageType22.WALLET, PostMessageMethod21.SEND_TRANSACTION, {
+                            parentClient.sendOneWay(PostMessageType21.WALLET, PostMessageMethod20.SEND_TRANSACTION, {
                                 success: true,
                                 signature: signed.signature,
                                 transactionHash: hash,
@@ -13777,7 +13811,7 @@ var SendEthereumTransactionFlow = function SendEthereumTransactionFlow(param) {
         setIsSending(false);
         if (options === null || options === void 0 ? void 0 : (_options_uiOptions = options.uiOptions) === null || _options_uiOptions === void 0 ? void 0 : _options_uiOptions.showWalletUI) {
             var parentClient = new PostMessageClient4(window.parent, "*");
-            parentClient.sendOneWay(PostMessageType22.WALLET, PostMessageMethod21.SEND_TRANSACTION, {
+            parentClient.sendOneWay(PostMessageType21.WALLET, PostMessageMethod20.SEND_TRANSACTION, {
                 success: false,
                 cancelled: true,
                 error: "User cancelled transaction"
@@ -13842,10 +13876,10 @@ var SendEthereumTransactionFlow = function SendEthereumTransactionFlow(param) {
     }
 };
 // src/components/flows/send-transaction-flow/send-transaction-flow.tsx
-import { PostMessageClient as PostMessageClient5, PostMessageMethod as PostMessageMethod23, PostMessageType as PostMessageType24 } from "@moon-x/core/utils";
+import { PostMessageClient as PostMessageClient5, PostMessageMethod as PostMessageMethod22, PostMessageType as PostMessageType23 } from "@moon-x/core/utils";
 import { useState as useState43 } from "react";
 // src/components/flows/send-transaction-flow/send-transaction.tsx
-import { PostMessageMethod as PostMessageMethod22, PostMessageType as PostMessageType23 } from "@moon-x/core/utils";
+import { PostMessageMethod as PostMessageMethod21, PostMessageType as PostMessageType22 } from "@moon-x/core/utils";
 import { ListCheck as ListCheck2, X as X14, XCircle as XCircle4 } from "lucide-react";
 import { useEffect as useEffect26, useState as useState41 } from "react";
 import { getTransferInfoFromInstructions } from "@moon-x/core/lib";
@@ -13880,7 +13914,7 @@ var SendTransaction = function SendTransaction(param) {
                             ]);
                             return [
                                 4,
-                                client.send(PostMessageType23.WALLET, PostMessageMethod22.GET_CONFIRM_TRANSACTION, {
+                                client.send(PostMessageType22.WALLET, PostMessageMethod21.GET_CONFIRM_TRANSACTION, {
                                     encodedMessage: encodedMessage,
                                     walletAddress: walletAddress,
                                     transaction: transaction,
@@ -14667,7 +14701,7 @@ var SendTransactionFlow = function SendTransactionFlow(param) {
                         _ref = _state.sent(), userHandleB64url = _ref.userHandleB64url, credentialIdB64url = _ref.credentialIdB64url;
                         return [
                             4,
-                            client.send(PostMessageType24.WALLET, PostMessageMethod23.SIGN_TRANSACTION, {
+                            client.send(PostMessageType23.WALLET, PostMessageMethod22.SIGN_TRANSACTION, {
                                 publishableKey: publishableKey,
                                 serializedTransaction: sendTransactionRequest.transaction,
                                 wallet: wallet,
@@ -14725,7 +14759,7 @@ var SendTransactionFlow = function SendTransactionFlow(param) {
                         setCurrentStep("success");
                         if (options === null || options === void 0 ? void 0 : (_options_uiOptions = options.uiOptions) === null || _options_uiOptions === void 0 ? void 0 : _options_uiOptions.showWalletUI) {
                             parentClient = new PostMessageClient5(window.parent, "*");
-                            parentClient.sendOneWay(PostMessageType24.WALLET, PostMessageMethod23.SEND_TRANSACTION, {
+                            parentClient.sendOneWay(PostMessageType23.WALLET, PostMessageMethod22.SEND_TRANSACTION, {
                                 success: true,
                                 signature: signed.signature,
                                 signedTransaction: signed.signedTransaction,
@@ -14830,7 +14864,7 @@ var SendTransactionFlow = function SendTransactionFlow(param) {
     }
 };
 // src/components/flows/sign-7702-authorization/sign-7702-authorization.tsx
-import { PostMessageClient as PostMessageClient6, PostMessageMethod as PostMessageMethod24, PostMessageType as PostMessageType25 } from "@moon-x/core/utils";
+import { PostMessageClient as PostMessageClient6, PostMessageMethod as PostMessageMethod23, PostMessageType as PostMessageType24 } from "@moon-x/core/utils";
 import { Check as Check2, Copy as Copy2, X as X17, XCircle as XCircle6 } from "lucide-react";
 import { useEffect as useEffect28, useRef as useRef14, useState as useState44 } from "react";
 import { Fragment as Fragment11, jsx as jsx64, jsxs as jsxs52 } from "react/jsx-runtime";
@@ -14949,7 +14983,7 @@ var Sign7702Authorization = function Sign7702Authorization(param) {
                         _ref = _state.sent(), userHandleB64url = _ref.userHandleB64url, credentialIdB64url = _ref.credentialIdB64url;
                         return [
                             4,
-                            client.send(PostMessageType25.WALLET, PostMessageMethod24.SIGN_7702_AUTHORIZATION, {
+                            client.send(PostMessageType24.WALLET, PostMessageMethod23.SIGN_7702_AUTHORIZATION, {
                                 contractAddress: contractAddress,
                                 chainId: chainId,
                                 nonce: nonce,
@@ -14967,7 +15001,7 @@ var Sign7702Authorization = function Sign7702Authorization(param) {
                         setIsSigning(false);
                         if (options === null || options === void 0 ? void 0 : (_options_uiOptions = options.uiOptions) === null || _options_uiOptions === void 0 ? void 0 : _options_uiOptions.showWalletUI) {
                             parentClient = new PostMessageClient6(window.parent, "*");
-                            parentClient.sendOneWay(PostMessageType25.WALLET, PostMessageMethod24.SIGN_7702_AUTHORIZATION, _object_spread({
+                            parentClient.sendOneWay(PostMessageType24.WALLET, PostMessageMethod23.SIGN_7702_AUTHORIZATION, _object_spread({
                                 success: true
                             }, result));
                         }
@@ -15157,7 +15191,7 @@ var Sign7702Authorization = function Sign7702Authorization(param) {
 };
 var sign_7702_authorization_default = Sign7702Authorization;
 // src/components/flows/sign-message-flow/sign-message.tsx
-import { PostMessageClient as PostMessageClient7, PostMessageMethod as PostMessageMethod25, PostMessageType as PostMessageType26 } from "@moon-x/core";
+import { PostMessageClient as PostMessageClient7, PostMessageMethod as PostMessageMethod24, PostMessageType as PostMessageType25 } from "@moon-x/core";
 import { Check as Check3, Copy as Copy3, X as X18, XCircle as XCircle7 } from "lucide-react";
 import { useRef as useRef15, useState as useState45 } from "react";
 import { Fragment as Fragment12, jsx as jsx65, jsxs as jsxs53 } from "react/jsx-runtime";
@@ -15304,7 +15338,7 @@ var SignMessage = function SignMessage(param) {
                         _ref = _state.sent(), userHandleB64url = _ref.userHandleB64url, credentialIdB64url = _ref.credentialIdB64url;
                         return [
                             4,
-                            client.send(PostMessageType26.WALLET, PostMessageMethod25.SIGN_MESSAGE, {
+                            client.send(PostMessageType25.WALLET, PostMessageMethod24.SIGN_MESSAGE, {
                                 message: message,
                                 publishableKey: publishableKey,
                                 uiOptions: uiOptions,
@@ -15325,7 +15359,7 @@ var SignMessage = function SignMessage(param) {
                         processedResponse = _state.sent();
                         if (uiOptions === null || uiOptions === void 0 ? void 0 : uiOptions.showWalletUI) {
                             parentClient = new PostMessageClient7(window.parent, "*");
-                            parentClient.sendOneWay(PostMessageType26.WALLET, PostMessageMethod25.SIGN_MESSAGE, {
+                            parentClient.sendOneWay(PostMessageType25.WALLET, PostMessageMethod24.SIGN_MESSAGE, {
                                 success: true,
                                 signature: result.signature
                             });
@@ -15513,7 +15547,7 @@ var SignMessage = function SignMessage(param) {
     });
 };
 // src/components/flows/sign-transaction-flow/sign-transaction.tsx
-import { PostMessageClient as PostMessageClient8, PostMessageMethod as PostMessageMethod26, PostMessageType as PostMessageType27 } from "@moon-x/core/utils";
+import { PostMessageClient as PostMessageClient8, PostMessageMethod as PostMessageMethod25, PostMessageType as PostMessageType26 } from "@moon-x/core/utils";
 import { Check as Check4, ChevronRight, Copy as Copy4, X as X19, XCircle as XCircle8 } from "lucide-react";
 import { useEffect as useEffect29, useRef as useRef16, useState as useState46 } from "react";
 import { parseTransaction } from "viem";
@@ -15631,7 +15665,7 @@ var SignTransaction = function SignTransaction(param) {
                         _ref = _state.sent(), userHandleB64url = _ref.userHandleB64url, credentialIdB64url = _ref.credentialIdB64url;
                         return [
                             4,
-                            client.send(PostMessageType27.WALLET, PostMessageMethod26.SIGN_TRANSACTION, {
+                            client.send(PostMessageType26.WALLET, PostMessageMethod25.SIGN_TRANSACTION, {
                                 serializedTransaction: serializedTransaction,
                                 publishableKey: publishableKey,
                                 options: options,
@@ -15648,7 +15682,7 @@ var SignTransaction = function SignTransaction(param) {
                         setIsSigning(false);
                         if (options === null || options === void 0 ? void 0 : (_options_uiOptions = options.uiOptions) === null || _options_uiOptions === void 0 ? void 0 : _options_uiOptions.showWalletUI) {
                             parentClient = new PostMessageClient8(window.parent, "*");
-                            parentClient.sendOneWay(PostMessageType27.WALLET, PostMessageMethod26.SIGN_TRANSACTION, _object_spread({
+                            parentClient.sendOneWay(PostMessageType26.WALLET, PostMessageMethod25.SIGN_TRANSACTION, _object_spread({
                                 success: true
                             }, result));
                         }
@@ -15849,7 +15883,7 @@ var SignTransaction = function SignTransaction(param) {
     });
 };
 // src/components/flows/sign-typed-data/sign-typed-data.tsx
-import { PostMessageClient as PostMessageClient9, PostMessageMethod as PostMessageMethod27, PostMessageType as PostMessageType28 } from "@moon-x/core/utils";
+import { PostMessageClient as PostMessageClient9, PostMessageMethod as PostMessageMethod26, PostMessageType as PostMessageType27 } from "@moon-x/core/utils";
 import { Check as Check5, ChevronRight as ChevronRight2, Copy as Copy5, X as X20, XCircle as XCircle9 } from "lucide-react";
 import { useEffect as useEffect30, useRef as useRef17, useState as useState47 } from "react";
 import { Fragment as Fragment14, jsx as jsx67, jsxs as jsxs55 } from "react/jsx-runtime";
@@ -15972,7 +16006,7 @@ var SignTypedData = function SignTypedData(param) {
                         _ref = _state.sent(), userHandleB64url = _ref.userHandleB64url, credentialIdB64url = _ref.credentialIdB64url;
                         return [
                             4,
-                            client.send(PostMessageType28.WALLET, PostMessageMethod27.SIGN_TYPED_DATA, {
+                            client.send(PostMessageType27.WALLET, PostMessageMethod26.SIGN_TYPED_DATA, {
                                 domain: domain,
                                 types: types,
                                 primaryType: primaryType,
@@ -15990,7 +16024,7 @@ var SignTypedData = function SignTypedData(param) {
                         setIsSigning(false);
                         if (options === null || options === void 0 ? void 0 : (_options_uiOptions = options.uiOptions) === null || _options_uiOptions === void 0 ? void 0 : _options_uiOptions.showWalletUI) {
                             parentClient = new PostMessageClient9(window.parent, "*");
-                            parentClient.sendOneWay(PostMessageType28.WALLET, PostMessageMethod27.SIGN_TYPED_DATA, {
+                            parentClient.sendOneWay(PostMessageType27.WALLET, PostMessageMethod26.SIGN_TYPED_DATA, {
                                 success: true,
                                 signature: result.signature
                             });
@@ -17227,12 +17261,17 @@ var AuthProvider = function AuthProvider(param) {
     }), 2), flowState = _useState515[0], setFlowState = _useState515[1];
     var _useState516 = _sliced_to_array(useState51(false), 2), isAuthenticated = _useState516[0], setIsAuthenticated = _useState516[1];
     var _useState517 = _sliced_to_array(useState51(null), 2), user = _useState517[0], setUser = _useState517[1];
-    var _useState518 = _sliced_to_array(useState51("landing"), 2), currentFlow = _useState518[0], setCurrentFlow = _useState518[1];
-    var _useState519 = _sliced_to_array(useState51(null), 2), flowData = _useState519[0], setFlowData = _useState519[1];
-    var _useState5110 = _sliced_to_array(useState51(null), 2), appConfig = _useState5110[0], setAppConfig = _useState5110[1];
-    var _useState5111 = _sliced_to_array(useState51(true), 2), isLoadingConfig = _useState5111[0], setIsLoadingConfig = _useState5111[1];
-    var _useState5112 = _sliced_to_array(useState51(false), 2), isIframeReady = _useState5112[0], setIsIframeReady = _useState5112[1];
-    var _useState5113 = _sliced_to_array(useState51(config === null || config === void 0 ? void 0 : config.appearance), 2), appearance = _useState5113[0], setAppearance = _useState5113[1];
+    var _useState518 = _sliced_to_array(useState51(0), 2), revalidatedAt = _useState518[0], setRevalidatedAt = _useState518[1];
+    var _useState519 = _sliced_to_array(useState51("landing"), 2), currentFlow = _useState519[0], setCurrentFlow = _useState519[1];
+    var _useState5110 = _sliced_to_array(useState51(null), 2), flowData = _useState5110[0], setFlowData = _useState5110[1];
+    var _useState5111 = _sliced_to_array(useState51(null), 2), appConfig = _useState5111[0], setAppConfig = _useState5111[1];
+    var _useState5112 = _sliced_to_array(useState51(true), 2), isLoadingConfig = _useState5112[0], setIsLoadingConfig = _useState5112[1];
+    var _useState5113 = _sliced_to_array(useState51(false), 2), isIframeReady = _useState5113[0], setIsIframeReady = _useState5113[1];
+    var _useState5114 = _sliced_to_array(useState51(function() {
+        if (typeof window === "undefined") return false;
+        return new URLSearchParams(window.location.search).has("token");
+    }), 1), hasOAuthCallbackToken = _useState5114[0];
+    var _useState5115 = _sliced_to_array(useState51(config === null || config === void 0 ? void 0 : config.appearance), 2), appearance = _useState5115[0], setAppearance = _useState5115[1];
     var authCheckCacheRef = useRef18(null);
     var AUTH_CACHE_TTL = 5e3;
     var initialAuthCheckDone = useRef18(false);
@@ -17473,7 +17512,7 @@ var AuthProvider = function AuthProvider(param) {
                         client = createPostMessageClient(iframeRef.current.contentWindow, publishableKey);
                         return [
                             4,
-                            client.send(PostMessageType29.AUTH, PostMessageMethod28.IS_AUTHENTICATED, {
+                            client.send(PostMessageType28.AUTH, PostMessageMethod27.IS_AUTHENTICATED, {
                                 publishableKey: publishableKey
                             })
                         ];
@@ -17487,7 +17526,7 @@ var AuthProvider = function AuthProvider(param) {
                         ];
                         return [
                             4,
-                            client.send(PostMessageType29.AUTH, PostMessageMethod28.GET_USER, {
+                            client.send(PostMessageType28.AUTH, PostMessageMethod27.GET_USER, {
                                 publishableKey: publishableKey
                             })
                         ];
@@ -17535,6 +17574,7 @@ var AuthProvider = function AuthProvider(param) {
     ]);
     var handleAuthSuccess = useCallback11(function(response) {
         setIsAuthenticatedWithRef(true);
+        setIsReady(true);
         var rawUserData = (response === null || response === void 0 ? void 0 : response.data) || response;
         if ((rawUserData === null || rawUserData === void 0 ? void 0 : rawUserData.id_token) || (rawUserData === null || rawUserData === void 0 ? void 0 : rawUserData.idToken)) {
             var idToken = rawUserData.id_token || rawUserData.idToken;
@@ -17565,6 +17605,7 @@ var AuthProvider = function AuthProvider(param) {
     var handleOAuthError = useCallback11(function(error) {
         setStartFlow(false);
         setFlowData(null);
+        setIsReady(true);
         if (errorCallback) {
             errorCallback(error);
         }
@@ -17573,7 +17614,7 @@ var AuthProvider = function AuthProvider(param) {
     ]);
     useOAuthCallbackDetection({
         isMounted: isMounted,
-        isReady: isReady,
+        isIframeReady: isIframeReady,
         publishableKey: publishableKey,
         iframeRef: iframeRef,
         onOAuthSuccess: handleOAuthSuccess,
@@ -17598,7 +17639,7 @@ var AuthProvider = function AuthProvider(param) {
         if (!isMounted) return;
         var handleReadyMessage = function handleReadyMessage(event) {
             var _event_data = event.data, type = _event_data.type, method = _event_data.method;
-            if (type === PostMessageType29.INIT && method === PostMessageMethod28.READY) {
+            if (type === PostMessageType28.INIT && method === PostMessageMethod27.READY) {
                 setIsIframeReady(true);
             }
         };
@@ -17613,6 +17654,10 @@ var AuthProvider = function AuthProvider(param) {
         var _iframeRef_current;
         if (!isIframeReady || !isMounted || !((_iframeRef_current = iframeRef.current) === null || _iframeRef_current === void 0 ? void 0 : _iframeRef_current.contentWindow)) return;
         if (initialAuthCheckDone.current) return;
+        if (hasOAuthCallbackToken) {
+            initialAuthCheckDone.current = true;
+            return;
+        }
         var checkAuthStatus = function checkAuthStatus() {
             return _async_to_generator(function() {
                 var iframeOrigin, client, response, isAuth, userData, rawUserData, error;
@@ -17630,7 +17675,7 @@ var AuthProvider = function AuthProvider(param) {
                             client = new PostMessageClient10(iframeRef.current.contentWindow, iframeOrigin);
                             return [
                                 4,
-                                client.send(PostMessageType29.AUTH, PostMessageMethod28.IS_AUTHENTICATED, {
+                                client.send(PostMessageType28.AUTH, PostMessageMethod27.IS_AUTHENTICATED, {
                                     publishableKey: publishableKey
                                 })
                             ];
@@ -17644,7 +17689,7 @@ var AuthProvider = function AuthProvider(param) {
                             ];
                             return [
                                 4,
-                                client.send(PostMessageType29.AUTH, PostMessageMethod28.GET_USER, {
+                                client.send(PostMessageType28.AUTH, PostMessageMethod27.GET_USER, {
                                     publishableKey: publishableKey
                                 })
                             ];
@@ -17691,7 +17736,8 @@ var AuthProvider = function AuthProvider(param) {
         isIframeReady,
         isMounted,
         publishableKey,
-        setIsAuthenticatedWithRef
+        setIsAuthenticatedWithRef,
+        hasOAuthCallbackToken
     ]);
     var prevStartFlowRef = useRef18(startFlow);
     useEffect34(function() {
@@ -17705,6 +17751,38 @@ var AuthProvider = function AuthProvider(param) {
         startFlow,
         recheckAuthStatus
     ]);
+    var recheckAuthStatusRef = useRef18(recheckAuthStatus);
+    useEffect34(function() {
+        recheckAuthStatusRef.current = recheckAuthStatus;
+    }, [
+        recheckAuthStatus
+    ]);
+    useEffect34(function() {
+        if (typeof window === "undefined" || typeof document === "undefined") {
+            return;
+        }
+        var trigger = function trigger() {
+            setRevalidatedAt(Date.now());
+            recheckAuthStatusRef.current(true);
+        };
+        var onVisibilityChange = function onVisibilityChange() {
+            if (document.visibilityState === "visible") trigger();
+        };
+        var onPageShow = function onPageShow() {
+            return trigger();
+        };
+        var onPopState = function onPopState() {
+            return trigger();
+        };
+        document.addEventListener("visibilitychange", onVisibilityChange);
+        window.addEventListener("pageshow", onPageShow);
+        window.addEventListener("popstate", onPopState);
+        return function() {
+            document.removeEventListener("visibilitychange", onVisibilityChange);
+            window.removeEventListener("pageshow", onPageShow);
+            window.removeEventListener("popstate", onPopState);
+        };
+    }, []);
     var onError = useCallback11(function(callback) {
         if (!isMounted) {
             return;
@@ -17885,6 +17963,7 @@ var AuthProvider = function AuthProvider(param) {
         sdkInstanceRef.current.isAuthenticated = isAuthenticated;
         sdkInstanceRef.current.user = user;
         sdkInstanceRef.current.refreshUser = refreshUser;
+        sdkInstanceRef.current.revalidatedAt = revalidatedAt;
         return sdkInstanceRef.current;
     }, [
         isMounted,
@@ -17895,7 +17974,8 @@ var AuthProvider = function AuthProvider(param) {
         isAuthenticated,
         user,
         setIsAuthenticatedWithRef,
-        refreshUser
+        refreshUser,
+        revalidatedAt
     ]);
     var iframeStyles = getIframeStyles(hideIframe, embeddableId);
     useCloseIframe(function() {
@@ -18001,7 +18081,7 @@ var MoonKeyContext = createContext(null);
 var MoonKeyProvider = function MoonKeyProvider(param) {
     var publishableKey = param.publishableKey, embeddableId = param.embeddableId, config = param.config, children = param.children;
     var _ref;
-    var _config_security, _config_walletConnect, _config_emailConfig, _config_emailConfig1, _config_emailConfig2, _config_emailConfig3, _config_emailConfig4, _config_emailConfig5;
+    var _config_security, _config_walletConnect, _config_emailConfig, _config_emailConfig1, _config_emailConfig2, _config_emailConfig3, _config_emailConfig4;
     if ((config === null || config === void 0 ? void 0 : config.defaultChain) || (config === null || config === void 0 ? void 0 : config.supportedChains)) {
         validateChainConfig({
             defaultChain: config.defaultChain,
@@ -18105,11 +18185,10 @@ var MoonKeyProvider = function MoonKeyProvider(param) {
             theme: config === null || config === void 0 ? void 0 : config.theme,
             emailConfig: {
                 skipVerifiedSuccess: (config === null || config === void 0 ? void 0 : (_config_emailConfig = config.emailConfig) === null || _config_emailConfig === void 0 ? void 0 : _config_emailConfig.skipVerifiedSuccess) || false,
-                expiresIn: (config === null || config === void 0 ? void 0 : (_config_emailConfig1 = config.emailConfig) === null || _config_emailConfig1 === void 0 ? void 0 : _config_emailConfig1.expiresIn) || 10,
-                verifiedDisplayTime: (config === null || config === void 0 ? void 0 : (_config_emailConfig2 = config.emailConfig) === null || _config_emailConfig2 === void 0 ? void 0 : _config_emailConfig2.verifiedDisplayTime) || 3e3,
-                verifyEmailTitle: (config === null || config === void 0 ? void 0 : (_config_emailConfig3 = config.emailConfig) === null || _config_emailConfig3 === void 0 ? void 0 : _config_emailConfig3.verifyEmailTitle) || "Verify email",
-                verifyEmailResendTitle: (config === null || config === void 0 ? void 0 : (_config_emailConfig4 = config.emailConfig) === null || _config_emailConfig4 === void 0 ? void 0 : _config_emailConfig4.verifyEmailResendTitle) || "Resend code",
-                resendCodeTime: (config === null || config === void 0 ? void 0 : (_config_emailConfig5 = config.emailConfig) === null || _config_emailConfig5 === void 0 ? void 0 : _config_emailConfig5.resendCodeTime) || 60
+                verifiedDisplayTime: (config === null || config === void 0 ? void 0 : (_config_emailConfig1 = config.emailConfig) === null || _config_emailConfig1 === void 0 ? void 0 : _config_emailConfig1.verifiedDisplayTime) || 3e3,
+                verifyEmailTitle: (config === null || config === void 0 ? void 0 : (_config_emailConfig2 = config.emailConfig) === null || _config_emailConfig2 === void 0 ? void 0 : _config_emailConfig2.verifyEmailTitle) || "Verify email",
+                verifyEmailResendTitle: (config === null || config === void 0 ? void 0 : (_config_emailConfig3 = config.emailConfig) === null || _config_emailConfig3 === void 0 ? void 0 : _config_emailConfig3.verifyEmailResendTitle) || "Resend code",
+                resendCodeTime: (config === null || config === void 0 ? void 0 : (_config_emailConfig4 = config.emailConfig) === null || _config_emailConfig4 === void 0 ? void 0 : _config_emailConfig4.resendCodeTime) || 60
             },
             passkeyEnrollConfig: config === null || config === void 0 ? void 0 : config.passkeyEnrollConfig,
             signMessageConfig: config === null || config === void 0 ? void 0 : config.signMessageConfig,