@moon-x/react-sdk 0.1.0 → 0.3.0

package/README.md

@@ -89,7 +89,7 @@ function SignDemo() {
 | `solana.rpcs` | `{ [cluster]: { rpc, rpcSubscriptions? } }` | Solana RPC endpoints per cluster. |
 | `walletConnect.projectId` | `string` | WalletConnect v2 project ID for external-wallet flows. |
 | `emailConfig`, `passkeyEnrollConfig`, `signMessageConfig`, `signTransactionConfig`, `sendTransactionConfig`, `exportKeyConfig` | various | Per-flow UI overrides — titles, button text, etc. |
-| `security.assertionCacheTtlMs` | `number` | Parent-side passkey-assertion cache TTL in milliseconds. **Defaults to `0` (no cache — every sensitive op forces a fresh biometric).** Set to a positive value (e.g. `5 * 60 * 1000`) to opt into a warm window where routine ops skip the OS picker. See [Security: assertion cache + `requireFreshAssertion`](#security-assertion-cache--requirefreshassertion) below for the trade-off. |
+| `security` | `Record<string, never>` | Reserved for future per-app security knobs. The previously-configurable `assertionCacheTtlMs` was removed in Phase 4 of the presence-token gating work — every sensitive op now does a fresh WebAuthn ceremony and mints scope-bound single-use JWTs via the iframe's internal orchestrator, so there is no parent-side cache left to configure. See [Security](#security) below. |
 | `theme` | `MoonKeyThemeConfig` | Low-level token overrides — fine-grained color palette, full borderRadius scale. Most apps don't need this; `appearance` is the recommended surface. |
 
 ## Hooks
@@ -149,38 +149,20 @@ import { useSignMessage as useSignSolanaMessage } from "@moon-x/react-sdk/solana
 
 Every signing hook accepts `options.uiOptions.showWalletUI` to toggle modal vs headless mode. With UI, the user sees the message/transaction in a modal and the biometric prompt fires only on the Sign tap. Headless skips the modal entirely.
 
-Every signing hook also accepts a top-level `requireFreshAssertion?: boolean` flag. When `true`, that single call bypasses any parent-side assertion cache and forces a fresh biometric — useful for high-value transactions in an otherwise-warm flow. See [Security](#security-assertion-cache--requirefreshassertion) below.
+Every sensitive op now does a fresh WebAuthn ceremony per call — the previous per-call `requireFreshAssertion?: boolean` flag was removed from the param types since it has no behavior left to opt into. See [Security](#security) below.
 
-### Security: assertion cache + `requireFreshAssertion`
+### Security
 
-MoonX's parent-side assertion cache holds the WebAuthn assertion result (`userHandleB64url` — the AES-GCM key that wraps the user's DEK) in JS memory for an integrator-configured TTL. Within that window, routine wallet ops skip the OS passkey picker.
+Every sensitive operation (`signMessage`, `signTransaction`, `signTypedData`, `signHash`, `sign7702Authorization`, `sendTransaction`, `createWallet`, `importKey`, `exportKey`, `addPasskey`, `removePasskey`) drives this server-verified ceremony per call:
 
-**The default is `assertionCacheTtlMs: 0` — no cache.** Every sensitive op fires a fresh biometric and the raw userHandle never lingers in the parent JS heap past the moment of use. This is the safe posture: a parent-page XSS can't lift a cached key because there is no cache.
+1. **Server-issued challenge.** SDK posts to `/auth/passkey/presence/begin`, server inserts a row in `app_user_passkey_challenges` and returns the WebAuthn options.
+2. **Fresh WebAuthn assertion.** The parent runs `navigator.credentials.get`; the user does a biometric. The assertor strips `response.userHandle` from the server-bound payload (DEK hygiene) and surfaces the userHandle separately for the iframe's local AES-GCM unwrap.
+3. **Scope-bound, single-use JWT mint.** SDK posts to `/auth/passkey/presence/verify` with `purpose: "internal"` and the scope set this op needs (e.g. `["keyshare_read", "sign"]`). Server consumes the challenge, verifies the signature against the credential's stored public key, mints one short-lived JWT per scope with a unique `jti`.
+4. **Per-endpoint enforcement.** Each scoped JWT carries the `X-MoonX-Presence` header on its matching gated endpoint. MoonX middleware pins the JWT's `op` claim to the endpoint, then burns the `jti` in `platform.app_presence_jti_used` via `INSERT ... ON CONFLICT DO NOTHING`. Replay of the same token is rejected as `presence token already consumed`. Tokens have a 30-second TTL.
 
-Integrators who want a warm-UX trade-off opt back in:
+What this closes: **captured userHandle + session JWT no longer unlocks DEK material offline.** Even with both, an attacker can't fetch wraps / keyshares / drive the co-signer without producing a fresh WebAuthn signature for each op — which requires the credential's private key in the user's authenticator. See `apps/platform/docs/notes/passkeys/presence-tokens.md` (in the backend repo) for the full threat model and scope matrix.
 
-```tsx
-<MoonKeyProvider
-  publishableKey={pk}
-  config={{ security: { assertionCacheTtlMs: 5 * 60 * 1000 } }}
->
-  ...
-</MoonKeyProvider>
-```
-
-With the cache on, parent-coresident JS (including XSS) can drive cached ops without re-prompting for the duration of the window. The TTL bounds the exposure but doesn't eliminate it. Pick the trade-off deliberately.
-
-Per-call escape hatch — works regardless of the global setting:
-
-```tsx
-await signTransaction({
-  transaction: tx,
-  wallet,
-  requireFreshAssertion: true,   // force a fresh biometric for THIS op
-});
-```
-
-Sensitive lifecycle ops (`exportKey`, `addPasskey`, `removePasskey`) ignore the cache unconditionally — they always re-prompt.
+The previously-configurable `security.assertionCacheTtlMs` and per-call `requireFreshAssertion` were removed entirely when presence-token gating shipped — they no longer exist on the public TypeScript surface. Every op is always-fresh by construction.
 
 ### Theming
 
@@ -238,4 +220,4 @@ For React Native apps, use [`@moon-x/react-native-sdk`](https://www.npmjs.com/pa
 
 ## License
 
-MIT.
+UNLICENSED. All rights reserved.

package/dist/{chunk-73TEXNFX.js → chunk-4YS67FSE.js}

@@ -690,7 +690,6 @@ var useSendTransaction = function useSendTransaction() {
                                         transaction: transactionString,
                                         wallet: params.wallet,
                                         rpcUrl: rpcUrl,
-                                        requireFreshAssertion: params.requireFreshAssertion,
                                         options: _object_spread_props(_object_spread({}, params.options), {
                                             wsEndpoint: wsEndpoint
                                         })

package/dist/{chunk-MYWXMCMO.mjs → chunk-RFAKWGRF.mjs}

@@ -450,7 +450,6 @@ var useSendTransaction = function useSendTransaction() {
                                         transaction: transactionString,
                                         wallet: params.wallet,
                                         rpcUrl: rpcUrl,
-                                        requireFreshAssertion: params.requireFreshAssertion,
                                         options: _object_spread_props(_object_spread({}, params.options), {
                                             wsEndpoint: wsEndpoint
                                         })

package/dist/{chunk-7BCQAHO6.mjs → chunk-Y6HSLN2H.mjs}

@@ -1126,7 +1126,7 @@ var useSignTransaction = function useSignTransaction() {
     var shared = useSharedEthSignTransaction();
     return {
         signTransaction: function signTransaction(param) {
-            var transaction = param.transaction, wallet = param.wallet, requireFreshAssertion = param.requireFreshAssertion, options = param.options;
+            var transaction = param.transaction, wallet = param.wallet, options = param.options;
             return _async_to_generator(function() {
                 var _coreSDK_config_ethereum, _coreSDK_config, _coreSDK_config_ethereum1, _coreSDK_config1, _coreSDK_config_signTransactionConfig, _coreSDK_config2, serializedTransaction, showWalletUI, error;
                 return _ts_generator(this, function(_state) {
@@ -1159,7 +1159,6 @@ var useSignTransaction = function useSignTransaction() {
                                     params: {
                                         transaction: serializedTransaction,
                                         wallet: stripWalletMethods(wallet),
-                                        requireFreshAssertion: requireFreshAssertion,
                                         options: {
                                             uiOptions: options === null || options === void 0 ? void 0 : options.uiOptions
                                         }
@@ -1286,7 +1285,7 @@ var useSign7702Authorization = function useSign7702Authorization() {
     var coreSDK = useAuthSDK();
     return {
         signAuthorization: function signAuthorization(param) {
-            var contractAddress = param.contractAddress, nonce = param.nonce, executor = param.executor, wallet = param.wallet, requireFreshAssertion = param.requireFreshAssertion, options = param.options;
+            var contractAddress = param.contractAddress, nonce = param.nonce, executor = param.executor, wallet = param.wallet, options = param.options;
             return _async_to_generator(function() {
                 var _coreSDK_config_ethereum, _coreSDK_config, walletChainId, targetChain, _coreSDK_config_ethereum1, _coreSDK_config1, derivedChainId, _coreSDK_config_signMessageConfig, _coreSDK_config2, showWalletUI, error;
                 return _ts_generator(this, function(_state) {
@@ -1322,7 +1321,6 @@ var useSign7702Authorization = function useSign7702Authorization() {
                                         nonce: nonce,
                                         executor: executor,
                                         wallet: stripWalletMethods(wallet),
-                                        requireFreshAssertion: requireFreshAssertion,
                                         options: {
                                             uiOptions: options === null || options === void 0 ? void 0 : options.uiOptions
                                         }
@@ -1357,7 +1355,7 @@ var useSendTransaction = function useSendTransaction() {
     var shared = useSharedEthSendTransaction();
     return {
         sendTransaction: function sendTransaction(param) {
-            var transaction = param.transaction, wallet = param.wallet, requireFreshAssertion = param.requireFreshAssertion, options = param.options;
+            var transaction = param.transaction, wallet = param.wallet, options = param.options;
             return _async_to_generator(function() {
                 var _coreSDK_config_ethereum, _coreSDK_config, _coreSDK_config_ethereum1, _coreSDK_config1, _coreSDK_config_signMessageConfig, _coreSDK_config2, _ref, preparedTx, rpcUrl, showWalletUI, response, error;
                 return _ts_generator(this, function(_state) {
@@ -1391,7 +1389,6 @@ var useSendTransaction = function useSendTransaction() {
                                         transaction: preparedTx,
                                         wallet: stripWalletMethods(wallet),
                                         rpcUrl: rpcUrl,
-                                        requireFreshAssertion: requireFreshAssertion,
                                         options: {
                                             uiOptions: options === null || options === void 0 ? void 0 : options.uiOptions
                                         }

package/dist/{chunk-CDSNBPXB.js → chunk-YFGHPPR5.js}

@@ -1321,7 +1321,7 @@ var useSignTransaction = function useSignTransaction() {
     var shared = _ethereum.useSignTransaction.call(void 0);
     return {
         signTransaction: function signTransaction(param) {
-            var transaction = param.transaction, wallet = param.wallet, requireFreshAssertion = param.requireFreshAssertion, options = param.options;
+            var transaction = param.transaction, wallet = param.wallet, options = param.options;
             return _async_to_generator(function() {
                 var serializedTransaction, showWalletUI, error;
                 return _ts_generator(this, function(_state) {
@@ -1402,7 +1402,6 @@ var useSignTransaction = function useSignTransaction() {
                                     params: {
                                         transaction: serializedTransaction,
                                         wallet: stripWalletMethods(wallet),
-                                        requireFreshAssertion: requireFreshAssertion,
                                         options: {
                                             uiOptions: _optionalChain([
                                                 options,
@@ -1559,7 +1558,7 @@ var useSign7702Authorization = function useSign7702Authorization() {
     var coreSDK = _chunkSPXMMQ7Zjs.useAuthSDK.call(void 0);
     return {
         signAuthorization: function signAuthorization(param) {
-            var contractAddress = param.contractAddress, nonce = param.nonce, executor = param.executor, wallet = param.wallet, requireFreshAssertion = param.requireFreshAssertion, options = param.options;
+            var contractAddress = param.contractAddress, nonce = param.nonce, executor = param.executor, wallet = param.wallet, options = param.options;
             return _async_to_generator(function() {
                 var walletChainId, targetChain, derivedChainId, showWalletUI, error;
                 return _ts_generator(this, function(_state) {
@@ -1642,7 +1641,6 @@ var useSign7702Authorization = function useSign7702Authorization() {
                                         nonce: nonce,
                                         executor: executor,
                                         wallet: stripWalletMethods(wallet),
-                                        requireFreshAssertion: requireFreshAssertion,
                                         options: {
                                             uiOptions: _optionalChain([
                                                 options,
@@ -1683,7 +1681,7 @@ var useSendTransaction = function useSendTransaction() {
     var shared = _ethereum.useSendTransaction.call(void 0);
     return {
         sendTransaction: function sendTransaction(param) {
-            var transaction = param.transaction, wallet = param.wallet, requireFreshAssertion = param.requireFreshAssertion, options = param.options;
+            var transaction = param.transaction, wallet = param.wallet, options = param.options;
             return _async_to_generator(function() {
                 var _ref, preparedTx, rpcUrl, showWalletUI, response, error;
                 return _ts_generator(this, function(_state) {
@@ -1765,7 +1763,6 @@ var useSendTransaction = function useSendTransaction() {
                                         transaction: preparedTx,
                                         wallet: stripWalletMethods(wallet),
                                         rpcUrl: rpcUrl,
-                                        requireFreshAssertion: requireFreshAssertion,
                                         options: {
                                             uiOptions: _optionalChain([
                                                 options,

package/dist/{ethereum-DobH9IQl.d.mts → ethereum-CGSlkQOw.d.mts}

@@ -155,7 +155,6 @@ declare const useSignMessage: () => {
     signMessage: (params: {
         message: string;
         wallet: PublicWallet;
-        requireFreshAssertion?: boolean;
         options?: {
             uiOptions?: SignMessageUIOptions;
         };
@@ -166,10 +165,9 @@ declare const useSignMessage: () => {
     error: undefined;
 };
 declare const useSignTransaction: () => {
-    signTransaction: ({ transaction, wallet, requireFreshAssertion, options, }: {
+    signTransaction: ({ transaction, wallet, options, }: {
         transaction: string | object;
         wallet: PublicWallet;
-        requireFreshAssertion?: boolean;
         options?: {
             uiOptions?: SignTransactionUIOptions;
         };
@@ -185,7 +183,6 @@ declare const useSignHash: () => {
     signHash: (params: {
         hash: `0x${string}` | string;
         wallet: PublicWallet;
-        requireFreshAssertion?: boolean;
         options?: {
             uiOptions?: any;
         };
@@ -202,7 +199,6 @@ declare const useSignTypedData: () => {
         primaryType: string;
         message: any;
         wallet: PublicWallet;
-        requireFreshAssertion?: boolean;
         options?: {
             uiOptions?: any;
         };
@@ -213,12 +209,11 @@ declare const useSignTypedData: () => {
     error: undefined;
 };
 declare const useSign7702Authorization: () => {
-    signAuthorization: ({ contractAddress, nonce, executor, wallet, requireFreshAssertion, options, }: {
+    signAuthorization: ({ contractAddress, nonce, executor, wallet, options, }: {
         contractAddress: `0x${string}`;
         nonce?: number;
         executor?: "self" | `0x${string}`;
         wallet: PublicWallet | PublicEthereumWallet;
-        requireFreshAssertion?: boolean;
         options?: {
             uiOptions?: any;
         };
@@ -235,7 +230,7 @@ declare const useSign7702Authorization: () => {
     error: undefined;
 };
 declare const useSendTransaction: () => {
-    sendTransaction: ({ transaction, wallet, requireFreshAssertion, options, }: {
+    sendTransaction: ({ transaction, wallet, options, }: {
         transaction: {
             to?: string;
             value?: string | number | bigint;
@@ -249,7 +244,6 @@ declare const useSendTransaction: () => {
             maxFeePerGas?: string | number | bigint;
         };
         wallet: PublicWallet | PublicEthereumWallet;
-        requireFreshAssertion?: boolean;
         options?: {
             uiOptions?: any;
         };

package/dist/{ethereum-BRGKpUFH.d.ts → ethereum-CWhbeptv.d.ts}

@@ -155,7 +155,6 @@ declare const useSignMessage: () => {
     signMessage: (params: {
         message: string;
         wallet: PublicWallet;
-        requireFreshAssertion?: boolean;
         options?: {
             uiOptions?: SignMessageUIOptions;
         };
@@ -166,10 +165,9 @@ declare const useSignMessage: () => {
     error: undefined;
 };
 declare const useSignTransaction: () => {
-    signTransaction: ({ transaction, wallet, requireFreshAssertion, options, }: {
+    signTransaction: ({ transaction, wallet, options, }: {
         transaction: string | object;
         wallet: PublicWallet;
-        requireFreshAssertion?: boolean;
         options?: {
             uiOptions?: SignTransactionUIOptions;
         };
@@ -185,7 +183,6 @@ declare const useSignHash: () => {
     signHash: (params: {
         hash: `0x${string}` | string;
         wallet: PublicWallet;
-        requireFreshAssertion?: boolean;
         options?: {
             uiOptions?: any;
         };
@@ -202,7 +199,6 @@ declare const useSignTypedData: () => {
         primaryType: string;
         message: any;
         wallet: PublicWallet;
-        requireFreshAssertion?: boolean;
         options?: {
             uiOptions?: any;
         };
@@ -213,12 +209,11 @@ declare const useSignTypedData: () => {
     error: undefined;
 };
 declare const useSign7702Authorization: () => {
-    signAuthorization: ({ contractAddress, nonce, executor, wallet, requireFreshAssertion, options, }: {
+    signAuthorization: ({ contractAddress, nonce, executor, wallet, options, }: {
         contractAddress: `0x${string}`;
         nonce?: number;
         executor?: "self" | `0x${string}`;
         wallet: PublicWallet | PublicEthereumWallet;
-        requireFreshAssertion?: boolean;
         options?: {
             uiOptions?: any;
         };
@@ -235,7 +230,7 @@ declare const useSign7702Authorization: () => {
     error: undefined;
 };
 declare const useSendTransaction: () => {
-    sendTransaction: ({ transaction, wallet, requireFreshAssertion, options, }: {
+    sendTransaction: ({ transaction, wallet, options, }: {
         transaction: {
             to?: string;
             value?: string | number | bigint;
@@ -249,7 +244,6 @@ declare const useSendTransaction: () => {
             maxFeePerGas?: string | number | bigint;
         };
         wallet: PublicWallet | PublicEthereumWallet;
-        requireFreshAssertion?: boolean;
         options?: {
             uiOptions?: any;
         };

package/dist/index.d.mts

@@ -1,9 +1,9 @@
 export { LoginWithEmailState, PasskeyStatusEntry, RegisterPasskeyResult, UseAddPasskeyResult, UseLoginWithEmailCallbacks, UsePasskeyStatusResult, UseRemovePasskeyResult, useAddPasskey, useLoginWithEmail, usePasskeyStatus, useRegisterPasskey, useRemovePasskey, useUser } from '@moon-x/core/react';
-import { WalletListEntry, AuthAppearance, PrefillConfig, WalletChainType, MoonKeyThemeConfig, PasskeyEnrollConfig, SignMessageConfig, ExportKeyConfig, SignTransactionConfig, SendTransactionConfig, Chain, LogoutResponse, EmailOtpFlowState, Wallet } from '@moon-x/core/types';
+import { WalletListEntry, AuthAppearance, PrefillConfig, WalletChainType, MoonKeyThemeConfig, PasskeyEnrollConfig, SignMessageConfig, ExportKeyConfig, SignTransactionConfig, SendTransactionConfig, Chain, LogoutResponse, EmailOtpFlowState, SendEmailOtpResponse, Wallet } from '@moon-x/core/types';
 export { Chain, Factor, IdpProvider, Network, PublicEthereumWallet, PublicWallet, WalletConnectConfig, WalletListEntry } from '@moon-x/core/types';
 import React$1, { ReactNode } from 'react';
-export { e as ethereum } from './ethereum-DobH9IQl.mjs';
-export { s as solana } from './solana-CzXRbze_.mjs';
+export { e as ethereum } from './ethereum-CGSlkQOw.mjs';
+export { s as solana } from './solana-Cr7r3wi8.mjs';
 export { estimateEvmGas, estimateEvmGasReserve, getChainById, getDefaultChain, getEvmGasPrice, getEvmMaxPriorityFeePerGas, getEvmNonce, getRpcUrl, isChainSupported, setChainRpcUrl, validateChainConfig } from '@moon-x/core/lib';
 export { arbitrum, arbitrumSepolia, avalanche, avalancheFuji, base, baseSepolia, bsc, bscTestnet, goerli, holesky, mainnet, optimism, optimismSepolia, polygon, polygonAmoy, sepolia } from 'viem/chains';
 import './base-wallet-CzJLpndu.mjs';
@@ -120,37 +120,20 @@ interface MoonKeyConfig {
     appearance?: AuthAppearance;
     loginMethods?: ("email" | "google" | "apple" | "wallet")[];
     /**
-     * Security-policy knobs. Safe defaults (the entire `security` object
-     * can be omitted for the strictest posture).
+     * Reserved for future per-app security knobs. Currently has no
+     * fields — the previously-configurable `assertionCacheTtlMs` was
+     * removed when presence-token gating shipped. Every sensitive op
+     * now drives a fresh WebAuthn ceremony via the internal orchestrator,
+     * so there is nothing left to configure here today. Future knobs
+     * (e.g. presence-token TTL overrides) would slot in here.
      */
-    security?: {
-        /**
-         * TTL in milliseconds for the parent-side passkey assertion cache.
-         *
-         * Default: 0 (no cache — every sensitive op forces a fresh
-         * biometric prompt). This is the safe-by-default posture; the raw
-         * userHandle (the AES-GCM KEK that unwraps the user's DEK) never
-         * lingers in the parent JS heap past the moment of use.
-         *
-         * Set to a positive number (e.g. 5 * 60 * 1000) only if the
-         * integrating app has a UX that genuinely benefits from skipping
-         * the OS passkey prompt on routine ops within a window. The
-         * trade-off: during the warm window, parent-coresident JS that
-         * can reach the SDK can drive wallet ops without re-prompting.
-         *
-         * Sensitive operations (export, addPasskey, removePasskey, and
-         * any call passing `requireFreshAssertion: true`) bypass the
-         * cache regardless of this setting.
-         */
-        assertionCacheTtlMs?: number;
-    };
+    security?: Record<string, never>;
     prefill?: PrefillConfig;
     walletChainType?: WalletChainType;
     isDark?: boolean;
     theme?: MoonKeyThemeConfig;
     emailConfig?: {
         skipVerifiedSuccess?: boolean;
-        expiresIn?: number;
         verifiedDisplayTime?: number;
         verifyEmailTitle?: string;
         verifyEmailResendTitle?: string;
@@ -212,6 +195,29 @@ interface MoonKeyInstance {
         refreshToken: string;
         expiresAt: number;
     } | null>;
+    /**
+     * Run a passkey-asserted step-up ceremony and return a short-lived
+     * presence token. The token (JWT, `tt:"presence"`) is signed with
+     * the app's JWKS key and intended to be passed to your backend in a
+     * header (e.g. `X-MoonX-Presence`) on high-risk routes. Your backend
+     * verifies it via `@moon-x/node-sdk`'s
+     * `client.auth.verifyPresenceToken(token)`.
+     *
+     * Must be invoked synchronously from a click handler — WebAuthn
+     * requires transient activation. Throws if the user has no
+     * enrolled passkey or cancels the prompt.
+     *
+     * @example
+     * const { presenceToken } = await getPresenceToken();
+     * await fetch('/api/sensitive', {
+     *   method: 'POST',
+     *   headers: { 'X-MoonX-Presence': presenceToken },
+     * });
+     */
+    getPresenceToken: () => Promise<{
+        presenceToken: string;
+        expiresAt: number;
+    }>;
     /**
      * Start authentication flow (UI-based)
      * @param params - Optional configuration to override provider-level config
@@ -241,10 +247,15 @@ interface MoonKeyInstance {
      */
     setAppearance: (appearance: AuthAppearance) => void;
     publishableKey: string;
+    /**
+     * Send the OTP. Returns the platform response — including the
+     * authoritative `expires_at` (unix seconds) so headless consumers
+     * can render an accurate countdown without inventing their own TTL.
+     */
     sendCode: (params: {
         email: string;
         disableSignup?: boolean;
-    }) => Promise<void>;
+    }) => Promise<SendEmailOtpResponse>;
     loginWithCode: (params: {
         code: string;
     }) => Promise<void>;

package/dist/index.d.ts

@@ -1,9 +1,9 @@
 export { LoginWithEmailState, PasskeyStatusEntry, RegisterPasskeyResult, UseAddPasskeyResult, UseLoginWithEmailCallbacks, UsePasskeyStatusResult, UseRemovePasskeyResult, useAddPasskey, useLoginWithEmail, usePasskeyStatus, useRegisterPasskey, useRemovePasskey, useUser } from '@moon-x/core/react';
-import { WalletListEntry, AuthAppearance, PrefillConfig, WalletChainType, MoonKeyThemeConfig, PasskeyEnrollConfig, SignMessageConfig, ExportKeyConfig, SignTransactionConfig, SendTransactionConfig, Chain, LogoutResponse, EmailOtpFlowState, Wallet } from '@moon-x/core/types';
+import { WalletListEntry, AuthAppearance, PrefillConfig, WalletChainType, MoonKeyThemeConfig, PasskeyEnrollConfig, SignMessageConfig, ExportKeyConfig, SignTransactionConfig, SendTransactionConfig, Chain, LogoutResponse, EmailOtpFlowState, SendEmailOtpResponse, Wallet } from '@moon-x/core/types';
 export { Chain, Factor, IdpProvider, Network, PublicEthereumWallet, PublicWallet, WalletConnectConfig, WalletListEntry } from '@moon-x/core/types';
 import React$1, { ReactNode } from 'react';
-export { e as ethereum } from './ethereum-BRGKpUFH.js';
-export { s as solana } from './solana-D7BgQ4c0.js';
+export { e as ethereum } from './ethereum-CWhbeptv.js';
+export { s as solana } from './solana-nUvZo4Zp.js';
 export { estimateEvmGas, estimateEvmGasReserve, getChainById, getDefaultChain, getEvmGasPrice, getEvmMaxPriorityFeePerGas, getEvmNonce, getRpcUrl, isChainSupported, setChainRpcUrl, validateChainConfig } from '@moon-x/core/lib';
 export { arbitrum, arbitrumSepolia, avalanche, avalancheFuji, base, baseSepolia, bsc, bscTestnet, goerli, holesky, mainnet, optimism, optimismSepolia, polygon, polygonAmoy, sepolia } from 'viem/chains';
 import './base-wallet-CzJLpndu.js';
@@ -120,37 +120,20 @@ interface MoonKeyConfig {
     appearance?: AuthAppearance;
     loginMethods?: ("email" | "google" | "apple" | "wallet")[];
     /**
-     * Security-policy knobs. Safe defaults (the entire `security` object
-     * can be omitted for the strictest posture).
+     * Reserved for future per-app security knobs. Currently has no
+     * fields — the previously-configurable `assertionCacheTtlMs` was
+     * removed when presence-token gating shipped. Every sensitive op
+     * now drives a fresh WebAuthn ceremony via the internal orchestrator,
+     * so there is nothing left to configure here today. Future knobs
+     * (e.g. presence-token TTL overrides) would slot in here.
      */
-    security?: {
-        /**
-         * TTL in milliseconds for the parent-side passkey assertion cache.
-         *
-         * Default: 0 (no cache — every sensitive op forces a fresh
-         * biometric prompt). This is the safe-by-default posture; the raw
-         * userHandle (the AES-GCM KEK that unwraps the user's DEK) never
-         * lingers in the parent JS heap past the moment of use.
-         *
-         * Set to a positive number (e.g. 5 * 60 * 1000) only if the
-         * integrating app has a UX that genuinely benefits from skipping
-         * the OS passkey prompt on routine ops within a window. The
-         * trade-off: during the warm window, parent-coresident JS that
-         * can reach the SDK can drive wallet ops without re-prompting.
-         *
-         * Sensitive operations (export, addPasskey, removePasskey, and
-         * any call passing `requireFreshAssertion: true`) bypass the
-         * cache regardless of this setting.
-         */
-        assertionCacheTtlMs?: number;
-    };
+    security?: Record<string, never>;
     prefill?: PrefillConfig;
     walletChainType?: WalletChainType;
     isDark?: boolean;
     theme?: MoonKeyThemeConfig;
     emailConfig?: {
         skipVerifiedSuccess?: boolean;
-        expiresIn?: number;
         verifiedDisplayTime?: number;
         verifyEmailTitle?: string;
         verifyEmailResendTitle?: string;
@@ -212,6 +195,29 @@ interface MoonKeyInstance {
         refreshToken: string;
         expiresAt: number;
     } | null>;
+    /**
+     * Run a passkey-asserted step-up ceremony and return a short-lived
+     * presence token. The token (JWT, `tt:"presence"`) is signed with
+     * the app's JWKS key and intended to be passed to your backend in a
+     * header (e.g. `X-MoonX-Presence`) on high-risk routes. Your backend
+     * verifies it via `@moon-x/node-sdk`'s
+     * `client.auth.verifyPresenceToken(token)`.
+     *
+     * Must be invoked synchronously from a click handler — WebAuthn
+     * requires transient activation. Throws if the user has no
+     * enrolled passkey or cancels the prompt.
+     *
+     * @example
+     * const { presenceToken } = await getPresenceToken();
+     * await fetch('/api/sensitive', {
+     *   method: 'POST',
+     *   headers: { 'X-MoonX-Presence': presenceToken },
+     * });
+     */
+    getPresenceToken: () => Promise<{
+        presenceToken: string;
+        expiresAt: number;
+    }>;
     /**
      * Start authentication flow (UI-based)
      * @param params - Optional configuration to override provider-level config
@@ -241,10 +247,15 @@ interface MoonKeyInstance {
      */
     setAppearance: (appearance: AuthAppearance) => void;
     publishableKey: string;
+    /**
+     * Send the OTP. Returns the platform response — including the
+     * authoritative `expires_at` (unix seconds) so headless consumers
+     * can render an accurate countdown without inventing their own TTL.
+     */
     sendCode: (params: {
         email: string;
         disableSignup?: boolean;
-    }) => Promise<void>;
+    }) => Promise<SendEmailOtpResponse>;
     loginWithCode: (params: {
         code: string;
     }) => Promise<void>;