@moon-x/react-sdk 0.1.0 → 0.3.0

package/dist/index.mjs

@@ -389,8 +389,8 @@ function _ts_generator(thisArg, body) {
         };
     }
 }
-import { ethereum_exports } from "./chunk-7BCQAHO6.mjs";
-import { solana_exports } from "./chunk-MYWXMCMO.mjs";
+import { ethereum_exports } from "./chunk-Y6HSLN2H.mjs";
+import { solana_exports } from "./chunk-RFAKWGRF.mjs";
 import { AuthContext, useAuthSDK } from "./chunk-PCEN5CH6.mjs";
 // src/index.ts
 import { useAddPasskey, useLoginWithEmail, usePasskeyStatus, useRegisterPasskey, useRemovePasskey, useUser } from "@moon-x/core/react";
@@ -837,6 +837,7 @@ var useMoonKey = function useMoonKey() {
             status: "start"
         },
         getSessionTokens: coreSDK.getSessionTokens,
+        getPresenceToken: coreSDK.getPresenceToken,
         start: coreSDK.start || function() {
             return Promise.resolve(null);
         },
@@ -885,13 +886,13 @@ var createPostMessageClient = function createPostMessageClient(contentWindow, _p
 };
 // src/hooks/use-oauth-callback-detection.ts
 var useOAuthCallbackDetection = function useOAuthCallbackDetection(param) {
-    var isMounted = param.isMounted, isReady = param.isReady, publishableKey = param.publishableKey, iframeRef = param.iframeRef, onOAuthSuccess = param.onOAuthSuccess, onOAuthError = param.onOAuthError, setCurrentFlow = param.setCurrentFlow, setFlowData = param.setFlowData, setStartFlow = param.setStartFlow;
+    var isMounted = param.isMounted, isIframeReady = param.isIframeReady, publishableKey = param.publishableKey, iframeRef = param.iframeRef, onOAuthSuccess = param.onOAuthSuccess, onOAuthError = param.onOAuthError, setCurrentFlow = param.setCurrentFlow, setFlowData = param.setFlowData, setStartFlow = param.setStartFlow;
     if (typeof window === "undefined") {
         return;
     }
     useEffect4(function() {
         if (typeof window === "undefined") return;
-        if (!isMounted || !isReady) return;
+        if (!isMounted || !isIframeReady) return;
         var checkForOAuthCallback = function checkForOAuthCallback() {
             if (typeof window === "undefined") return;
             try {
@@ -903,7 +904,7 @@ var useOAuthCallbackDetection = function useOAuthCallbackDetection(param) {
                         token: token
                     });
                     setStartFlow === null || setStartFlow === void 0 ? void 0 : setStartFlow(true);
-                    setTimeout(function() {
+                    void function() {
                         return _async_to_generator(function() {
                             var _iframeRef_current, client, error;
                             return _ts_generator(this, function(_state) {
@@ -950,7 +951,7 @@ var useOAuthCallbackDetection = function useOAuthCallbackDetection(param) {
                                 }
                             });
                         })();
-                    }, 1500);
+                    }();
                     try {
                         var newUrl = new URL(window.location.href);
                         newUrl.searchParams.delete("token");
@@ -970,7 +971,7 @@ var useOAuthCallbackDetection = function useOAuthCallbackDetection(param) {
         };
     }, [
         isMounted,
-        isReady,
+        isIframeReady,
         publishableKey,
         iframeRef,
         onOAuthSuccess,
@@ -1111,13 +1112,12 @@ var idTokenStorage = {
 import { sanitizeUserData, verifyIdToken } from "@moon-x/core/lib";
 // src/sdk/create-sdk-instance.ts
 import { PostMessageMethod as PostMessageMethod8, PostMessageType as PostMessageType9 } from "@moon-x/core/utils";
-import { withClearOnFailure as withClearOnFailure3 } from "@moon-x/core/lib";
-import { assertPasskeyInParent as assertPasskeyInParent3 } from "@moon-x/core/sdk";
+import { flattenPresenceTokens as flattenPresenceTokens3, getInternalPresenceTokens as getInternalPresenceTokens3 } from "@moon-x/core/sdk";
 import { createIframeTransport as createIframeTransport5, createWebAuthnPasskey as createWebAuthnPasskey4 } from "@moon-x/core/web";
 // src/sdk/sdk-ethereum-methods.ts
 import { PostMessageMethod as PostMessageMethod4, PostMessageType as PostMessageType5 } from "@moon-x/core/utils";
-import { serializeEthereumTransaction, withClearOnFailure } from "@moon-x/core/lib";
-import { assertPasskeyInParent, getHeadlessEthereumMethods } from "@moon-x/core/sdk";
+import { serializeEthereumTransaction } from "@moon-x/core/lib";
+import { flattenPresenceTokens, getHeadlessEthereumMethods, getInternalPresenceTokens } from "@moon-x/core/sdk";
 import { createIframeTransport, createWebAuthnPasskey } from "@moon-x/core/web";
 // src/sdk/register-one-shot.ts
 import { PostMessageServer as PostMessageServer4 } from "@moon-x/core/utils";
@@ -1136,6 +1136,10 @@ var registerOneShot = function registerOneShot(type, method, handler) {
     });
 };
 // src/sdk/sdk-ethereum-methods.ts
+var SCOPES_SIGN = [
+    "keyshare_read",
+    "sign"
+];
 var getEthereumSDKMethods = function getEthereumSDKMethods(publishableKey, getIsReady, iframeRef, setCurrentFlow, setFlowData, setStartFlow) {
     var transport = createIframeTransport({
         getContentWindow: function getContentWindow() {
@@ -1152,7 +1156,8 @@ var getEthereumSDKMethods = function getEthereumSDKMethods(publishableKey, getIs
     var headless = getHeadlessEthereumMethods({
         transport: transport,
         passkey: passkey,
-        publishableKey: publishableKey
+        publishableKey: publishableKey,
+        relyingPartyOrigin: typeof window !== "undefined" ? window.location.origin : ""
     });
     return _object_spread_props(_object_spread({}, headless), {
         // *WithUI variants stay here — they orchestrate parent React state
@@ -1163,45 +1168,62 @@ var getEthereumSDKMethods = function getEthereumSDKMethods(publishableKey, getIs
         // (not before they've seen what they're authorizing).
         signEthereumMessageWithUI: function signEthereumMessageWithUI(params) {
             return _async_to_generator(function() {
+                var _iframeRef_current, onAssertPasskey;
                 return _ts_generator(this, function(_state) {
+                    if (!((_iframeRef_current = iframeRef.current) === null || _iframeRef_current === void 0 ? void 0 : _iframeRef_current.contentWindow)) throw new Error("SDK not ready");
+                    onAssertPasskey = function onAssertPasskey() {
+                        return _async_to_generator(function() {
+                            var _ref, userHandleB64url, credentialIdB64url, tokens;
+                            return _ts_generator(this, function(_state) {
+                                switch(_state.label){
+                                    case 0:
+                                        return [
+                                            4,
+                                            getInternalPresenceTokens({
+                                                transport: transport,
+                                                passkey: passkey,
+                                                publishableKey: publishableKey,
+                                                relyingPartyOrigin: typeof window !== "undefined" ? window.location.origin : "",
+                                                scopes: SCOPES_SIGN
+                                            })
+                                        ];
+                                    case 1:
+                                        _ref = _state.sent(), userHandleB64url = _ref.userHandleB64url, credentialIdB64url = _ref.credentialIdB64url, tokens = _ref.tokens;
+                                        return [
+                                            2,
+                                            {
+                                                userHandleB64url: userHandleB64url,
+                                                credentialIdB64url: credentialIdB64url,
+                                                presenceTokens: flattenPresenceTokens({
+                                                    tokens: tokens,
+                                                    userHandleB64url: userHandleB64url,
+                                                    credentialIdB64url: credentialIdB64url
+                                                })
+                                            }
+                                        ];
+                                }
+                            });
+                        })();
+                    };
                     return [
                         2,
-                        withClearOnFailure(function() {
-                            return _async_to_generator(function() {
-                                var _iframeRef_current, onAssertPasskey;
-                                return _ts_generator(this, function(_state) {
-                                    if (!((_iframeRef_current = iframeRef.current) === null || _iframeRef_current === void 0 ? void 0 : _iframeRef_current.contentWindow)) throw new Error("SDK not ready");
-                                    onAssertPasskey = function onAssertPasskey() {
-                                        return assertPasskeyInParent({
-                                            transport: transport,
-                                            passkey: passkey,
-                                            publishableKey: publishableKey,
-                                            requireFreshAssertion: params.requireFreshAssertion
-                                        });
-                                    };
-                                    return [
-                                        2,
-                                        new Promise(function(resolve, reject) {
-                                            var _params_options;
-                                            registerOneShot(PostMessageType5.WALLET, PostMessageMethod4.SIGN_MESSAGE, function(payload) {
-                                                var _payload_signature;
-                                                if (payload.success) resolve({
-                                                    signature: (_payload_signature = payload.signature) !== null && _payload_signature !== void 0 ? _payload_signature : ""
-                                                });
-                                                else reject(new Error(payload.error || "Sign message failed"));
-                                            });
-                                            setCurrentFlow("sign-message");
-                                            setFlowData({
-                                                message: params.message,
-                                                wallet: params.wallet,
-                                                uiOptions: (_params_options = params.options) === null || _params_options === void 0 ? void 0 : _params_options.uiOptions,
-                                                onAssertPasskey: onAssertPasskey
-                                            });
-                                            setStartFlow(true);
-                                        })
-                                    ];
+                        new Promise(function(resolve, reject) {
+                            var _params_options;
+                            registerOneShot(PostMessageType5.WALLET, PostMessageMethod4.SIGN_MESSAGE, function(payload) {
+                                var _payload_signature;
+                                if (payload.success) resolve({
+                                    signature: (_payload_signature = payload.signature) !== null && _payload_signature !== void 0 ? _payload_signature : ""
                                 });
-                            })();
+                                else reject(new Error(payload.error || "Sign message failed"));
+                            });
+                            setCurrentFlow("sign-message");
+                            setFlowData({
+                                message: params.message,
+                                wallet: params.wallet,
+                                uiOptions: (_params_options = params.options) === null || _params_options === void 0 ? void 0 : _params_options.uiOptions,
+                                onAssertPasskey: onAssertPasskey
+                            });
+                            setStartFlow(true);
                         })
                     ];
                 });
@@ -1209,46 +1231,63 @@ var getEthereumSDKMethods = function getEthereumSDKMethods(publishableKey, getIs
         },
         signEthereumTransactionWithUI: function signEthereumTransactionWithUI(params) {
             return _async_to_generator(function() {
+                var _iframeRef_current, onAssertPasskey;
                 return _ts_generator(this, function(_state) {
+                    if (!((_iframeRef_current = iframeRef.current) === null || _iframeRef_current === void 0 ? void 0 : _iframeRef_current.contentWindow)) throw new Error("SDK not ready");
+                    onAssertPasskey = function onAssertPasskey() {
+                        return _async_to_generator(function() {
+                            var _ref, userHandleB64url, credentialIdB64url, tokens;
+                            return _ts_generator(this, function(_state) {
+                                switch(_state.label){
+                                    case 0:
+                                        return [
+                                            4,
+                                            getInternalPresenceTokens({
+                                                transport: transport,
+                                                passkey: passkey,
+                                                publishableKey: publishableKey,
+                                                relyingPartyOrigin: typeof window !== "undefined" ? window.location.origin : "",
+                                                scopes: SCOPES_SIGN
+                                            })
+                                        ];
+                                    case 1:
+                                        _ref = _state.sent(), userHandleB64url = _ref.userHandleB64url, credentialIdB64url = _ref.credentialIdB64url, tokens = _ref.tokens;
+                                        return [
+                                            2,
+                                            {
+                                                userHandleB64url: userHandleB64url,
+                                                credentialIdB64url: credentialIdB64url,
+                                                presenceTokens: flattenPresenceTokens({
+                                                    tokens: tokens,
+                                                    userHandleB64url: userHandleB64url,
+                                                    credentialIdB64url: credentialIdB64url
+                                                })
+                                            }
+                                        ];
+                                }
+                            });
+                        })();
+                    };
                     return [
                         2,
-                        withClearOnFailure(function() {
-                            return _async_to_generator(function() {
-                                var _iframeRef_current, onAssertPasskey;
-                                return _ts_generator(this, function(_state) {
-                                    if (!((_iframeRef_current = iframeRef.current) === null || _iframeRef_current === void 0 ? void 0 : _iframeRef_current.contentWindow)) throw new Error("SDK not ready");
-                                    onAssertPasskey = function onAssertPasskey() {
-                                        return assertPasskeyInParent({
-                                            transport: transport,
-                                            passkey: passkey,
-                                            publishableKey: publishableKey,
-                                            requireFreshAssertion: params.requireFreshAssertion
-                                        });
-                                    };
-                                    return [
-                                        2,
-                                        new Promise(function(resolve, reject) {
-                                            registerOneShot(PostMessageType5.WALLET, PostMessageMethod4.SIGN_TRANSACTION, function(payload) {
-                                                var _payload_signature;
-                                                if (payload.success) resolve({
-                                                    signature: (_payload_signature = payload.signature) !== null && _payload_signature !== void 0 ? _payload_signature : "",
-                                                    serializedSigned: payload.serializedSigned,
-                                                    hash: payload.hash
-                                                });
-                                                else reject(new Error(payload.error || "Sign transaction failed"));
-                                            });
-                                            setCurrentFlow("sign-transaction");
-                                            setFlowData({
-                                                serializedTransaction: params.transaction,
-                                                wallet: params.wallet,
-                                                options: params.options,
-                                                onAssertPasskey: onAssertPasskey
-                                            });
-                                            setStartFlow(true);
-                                        })
-                                    ];
+                        new Promise(function(resolve, reject) {
+                            registerOneShot(PostMessageType5.WALLET, PostMessageMethod4.SIGN_TRANSACTION, function(payload) {
+                                var _payload_signature;
+                                if (payload.success) resolve({
+                                    signature: (_payload_signature = payload.signature) !== null && _payload_signature !== void 0 ? _payload_signature : "",
+                                    serializedSigned: payload.serializedSigned,
+                                    hash: payload.hash
                                 });
-                            })();
+                                else reject(new Error(payload.error || "Sign transaction failed"));
+                            });
+                            setCurrentFlow("sign-transaction");
+                            setFlowData({
+                                serializedTransaction: params.transaction,
+                                wallet: params.wallet,
+                                options: params.options,
+                                onAssertPasskey: onAssertPasskey
+                            });
+                            setStartFlow(true);
                         })
                     ];
                 });
@@ -1256,47 +1295,64 @@ var getEthereumSDKMethods = function getEthereumSDKMethods(publishableKey, getIs
         },
         signEthereumTypedDataWithUI: function signEthereumTypedDataWithUI(params) {
             return _async_to_generator(function() {
+                var _iframeRef_current, onAssertPasskey;
                 return _ts_generator(this, function(_state) {
+                    if (!((_iframeRef_current = iframeRef.current) === null || _iframeRef_current === void 0 ? void 0 : _iframeRef_current.contentWindow)) throw new Error("SDK not ready");
+                    onAssertPasskey = function onAssertPasskey() {
+                        return _async_to_generator(function() {
+                            var _ref, userHandleB64url, credentialIdB64url, tokens;
+                            return _ts_generator(this, function(_state) {
+                                switch(_state.label){
+                                    case 0:
+                                        return [
+                                            4,
+                                            getInternalPresenceTokens({
+                                                transport: transport,
+                                                passkey: passkey,
+                                                publishableKey: publishableKey,
+                                                relyingPartyOrigin: typeof window !== "undefined" ? window.location.origin : "",
+                                                scopes: SCOPES_SIGN
+                                            })
+                                        ];
+                                    case 1:
+                                        _ref = _state.sent(), userHandleB64url = _ref.userHandleB64url, credentialIdB64url = _ref.credentialIdB64url, tokens = _ref.tokens;
+                                        return [
+                                            2,
+                                            {
+                                                userHandleB64url: userHandleB64url,
+                                                credentialIdB64url: credentialIdB64url,
+                                                presenceTokens: flattenPresenceTokens({
+                                                    tokens: tokens,
+                                                    userHandleB64url: userHandleB64url,
+                                                    credentialIdB64url: credentialIdB64url
+                                                })
+                                            }
+                                        ];
+                                }
+                            });
+                        })();
+                    };
                     return [
                         2,
-                        withClearOnFailure(function() {
-                            return _async_to_generator(function() {
-                                var _iframeRef_current, onAssertPasskey;
-                                return _ts_generator(this, function(_state) {
-                                    if (!((_iframeRef_current = iframeRef.current) === null || _iframeRef_current === void 0 ? void 0 : _iframeRef_current.contentWindow)) throw new Error("SDK not ready");
-                                    onAssertPasskey = function onAssertPasskey() {
-                                        return assertPasskeyInParent({
-                                            transport: transport,
-                                            passkey: passkey,
-                                            publishableKey: publishableKey,
-                                            requireFreshAssertion: params.requireFreshAssertion
-                                        });
-                                    };
-                                    return [
-                                        2,
-                                        new Promise(function(resolve, reject) {
-                                            registerOneShot(PostMessageType5.WALLET, PostMessageMethod4.SIGN_TYPED_DATA, function(payload) {
-                                                var _payload_signature;
-                                                if (payload.success) resolve({
-                                                    signature: (_payload_signature = payload.signature) !== null && _payload_signature !== void 0 ? _payload_signature : ""
-                                                });
-                                                else reject(new Error(payload.error || "Sign typed data failed"));
-                                            });
-                                            setCurrentFlow("sign-typed-data");
-                                            setFlowData({
-                                                domain: params.domain,
-                                                types: params.types,
-                                                primaryType: params.primaryType,
-                                                message: params.message,
-                                                wallet: params.wallet,
-                                                options: params.options,
-                                                onAssertPasskey: onAssertPasskey
-                                            });
-                                            setStartFlow(true);
-                                        })
-                                    ];
+                        new Promise(function(resolve, reject) {
+                            registerOneShot(PostMessageType5.WALLET, PostMessageMethod4.SIGN_TYPED_DATA, function(payload) {
+                                var _payload_signature;
+                                if (payload.success) resolve({
+                                    signature: (_payload_signature = payload.signature) !== null && _payload_signature !== void 0 ? _payload_signature : ""
                                 });
-                            })();
+                                else reject(new Error(payload.error || "Sign typed data failed"));
+                            });
+                            setCurrentFlow("sign-typed-data");
+                            setFlowData({
+                                domain: params.domain,
+                                types: params.types,
+                                primaryType: params.primaryType,
+                                message: params.message,
+                                wallet: params.wallet,
+                                options: params.options,
+                                onAssertPasskey: onAssertPasskey
+                            });
+                            setStartFlow(true);
                         })
                     ];
                 });
@@ -1304,44 +1360,61 @@ var getEthereumSDKMethods = function getEthereumSDKMethods(publishableKey, getIs
         },
         signEthereum7702AuthorizationWithUI: function signEthereum7702AuthorizationWithUI(params) {
             return _async_to_generator(function() {
+                var _iframeRef_current, onAssertPasskey;
                 return _ts_generator(this, function(_state) {
+                    if (!((_iframeRef_current = iframeRef.current) === null || _iframeRef_current === void 0 ? void 0 : _iframeRef_current.contentWindow)) throw new Error("SDK not ready");
+                    onAssertPasskey = function onAssertPasskey() {
+                        return _async_to_generator(function() {
+                            var _ref, userHandleB64url, credentialIdB64url, tokens;
+                            return _ts_generator(this, function(_state) {
+                                switch(_state.label){
+                                    case 0:
+                                        return [
+                                            4,
+                                            getInternalPresenceTokens({
+                                                transport: transport,
+                                                passkey: passkey,
+                                                publishableKey: publishableKey,
+                                                relyingPartyOrigin: typeof window !== "undefined" ? window.location.origin : "",
+                                                scopes: SCOPES_SIGN
+                                            })
+                                        ];
+                                    case 1:
+                                        _ref = _state.sent(), userHandleB64url = _ref.userHandleB64url, credentialIdB64url = _ref.credentialIdB64url, tokens = _ref.tokens;
+                                        return [
+                                            2,
+                                            {
+                                                userHandleB64url: userHandleB64url,
+                                                credentialIdB64url: credentialIdB64url,
+                                                presenceTokens: flattenPresenceTokens({
+                                                    tokens: tokens,
+                                                    userHandleB64url: userHandleB64url,
+                                                    credentialIdB64url: credentialIdB64url
+                                                })
+                                            }
+                                        ];
+                                }
+                            });
+                        })();
+                    };
                     return [
                         2,
-                        withClearOnFailure(function() {
-                            return _async_to_generator(function() {
-                                var _iframeRef_current, onAssertPasskey;
-                                return _ts_generator(this, function(_state) {
-                                    if (!((_iframeRef_current = iframeRef.current) === null || _iframeRef_current === void 0 ? void 0 : _iframeRef_current.contentWindow)) throw new Error("SDK not ready");
-                                    onAssertPasskey = function onAssertPasskey() {
-                                        return assertPasskeyInParent({
-                                            transport: transport,
-                                            passkey: passkey,
-                                            publishableKey: publishableKey,
-                                            requireFreshAssertion: params.requireFreshAssertion
-                                        });
-                                    };
-                                    return [
-                                        2,
-                                        new Promise(function(resolve, reject) {
-                                            registerOneShot(PostMessageType5.WALLET, PostMessageMethod4.SIGN_7702_AUTHORIZATION, function(payload) {
-                                                if (payload.success) resolve(payload);
-                                                else reject(new Error(payload.error || "Sign EIP-7702 authorization failed"));
-                                            });
-                                            setCurrentFlow("sign-7702-authorization");
-                                            setFlowData({
-                                                contractAddress: params.contractAddress,
-                                                chainId: params.chainId,
-                                                nonce: params.nonce,
-                                                executor: params.executor,
-                                                wallet: params.wallet,
-                                                options: params.options,
-                                                onAssertPasskey: onAssertPasskey
-                                            });
-                                            setStartFlow(true);
-                                        })
-                                    ];
-                                });
-                            })();
+                        new Promise(function(resolve, reject) {
+                            registerOneShot(PostMessageType5.WALLET, PostMessageMethod4.SIGN_7702_AUTHORIZATION, function(payload) {
+                                if (payload.success) resolve(payload);
+                                else reject(new Error(payload.error || "Sign EIP-7702 authorization failed"));
+                            });
+                            setCurrentFlow("sign-7702-authorization");
+                            setFlowData({
+                                contractAddress: params.contractAddress,
+                                chainId: params.chainId,
+                                nonce: params.nonce,
+                                executor: params.executor,
+                                wallet: params.wallet,
+                                options: params.options,
+                                onAssertPasskey: onAssertPasskey
+                            });
+                            setStartFlow(true);
                         })
                     ];
                 });
@@ -1349,60 +1422,77 @@ var getEthereumSDKMethods = function getEthereumSDKMethods(publishableKey, getIs
         },
         sendEthereumTransactionWithUI: function sendEthereumTransactionWithUI(params) {
             return _async_to_generator(function() {
+                var _iframeRef_current, onAssertPasskey, serializedTransaction;
                 return _ts_generator(this, function(_state) {
-                    return [
-                        2,
-                        withClearOnFailure(function() {
-                            return _async_to_generator(function() {
-                                var _iframeRef_current, onAssertPasskey, serializedTransaction;
-                                return _ts_generator(this, function(_state) {
-                                    switch(_state.label){
-                                        case 0:
-                                            if (!((_iframeRef_current = iframeRef.current) === null || _iframeRef_current === void 0 ? void 0 : _iframeRef_current.contentWindow)) throw new Error("SDK not ready");
-                                            onAssertPasskey = function onAssertPasskey() {
-                                                return assertPasskeyInParent({
-                                                    transport: transport,
-                                                    passkey: passkey,
-                                                    publishableKey: publishableKey,
-                                                    requireFreshAssertion: params.requireFreshAssertion
-                                                });
-                                            };
-                                            return [
-                                                4,
-                                                serializeEthereumTransaction(params.transaction)
-                                            ];
-                                        case 1:
-                                            serializedTransaction = _state.sent();
-                                            return [
-                                                2,
-                                                new Promise(function(resolve, reject) {
-                                                    var _params_options;
-                                                    registerOneShot(PostMessageType5.WALLET, PostMessageMethod4.SEND_TRANSACTION, function(payload) {
-                                                        var _payload_hash;
-                                                        if (payload.success) resolve({
-                                                            hash: (_payload_hash = payload.hash) !== null && _payload_hash !== void 0 ? _payload_hash : ""
-                                                        });
-                                                        else if (payload.cancelled) reject(new Error("User cancelled transaction"));
-                                                        else reject(new Error(payload.error || "Send transaction failed"));
-                                                    });
-                                                    setCurrentFlow("send-ethereum-transaction");
-                                                    setFlowData({
-                                                        transaction: params.transaction,
-                                                        serializedTransaction: serializedTransaction,
-                                                        wallet: params.wallet,
-                                                        options: params.options,
-                                                        rpcUrl: params.rpcUrl,
-                                                        network: (_params_options = params.options) === null || _params_options === void 0 ? void 0 : _params_options.network,
-                                                        onAssertPasskey: onAssertPasskey
-                                                    });
-                                                    setStartFlow(true);
-                                                })
-                                            ];
-                                    }
-                                });
-                            })();
-                        })
-                    ];
+                    switch(_state.label){
+                        case 0:
+                            if (!((_iframeRef_current = iframeRef.current) === null || _iframeRef_current === void 0 ? void 0 : _iframeRef_current.contentWindow)) throw new Error("SDK not ready");
+                            onAssertPasskey = function onAssertPasskey() {
+                                return _async_to_generator(function() {
+                                    var _ref, userHandleB64url, credentialIdB64url, tokens;
+                                    return _ts_generator(this, function(_state) {
+                                        switch(_state.label){
+                                            case 0:
+                                                return [
+                                                    4,
+                                                    getInternalPresenceTokens({
+                                                        transport: transport,
+                                                        passkey: passkey,
+                                                        publishableKey: publishableKey,
+                                                        relyingPartyOrigin: typeof window !== "undefined" ? window.location.origin : "",
+                                                        scopes: SCOPES_SIGN
+                                                    })
+                                                ];
+                                            case 1:
+                                                _ref = _state.sent(), userHandleB64url = _ref.userHandleB64url, credentialIdB64url = _ref.credentialIdB64url, tokens = _ref.tokens;
+                                                return [
+                                                    2,
+                                                    {
+                                                        userHandleB64url: userHandleB64url,
+                                                        credentialIdB64url: credentialIdB64url,
+                                                        presenceTokens: flattenPresenceTokens({
+                                                            tokens: tokens,
+                                                            userHandleB64url: userHandleB64url,
+                                                            credentialIdB64url: credentialIdB64url
+                                                        })
+                                                    }
+                                                ];
+                                        }
+                                    });
+                                })();
+                            };
+                            return [
+                                4,
+                                serializeEthereumTransaction(params.transaction)
+                            ];
+                        case 1:
+                            serializedTransaction = _state.sent();
+                            return [
+                                2,
+                                new Promise(function(resolve, reject) {
+                                    var _params_options;
+                                    registerOneShot(PostMessageType5.WALLET, PostMessageMethod4.SEND_TRANSACTION, function(payload) {
+                                        var _payload_hash;
+                                        if (payload.success) resolve({
+                                            hash: (_payload_hash = payload.hash) !== null && _payload_hash !== void 0 ? _payload_hash : ""
+                                        });
+                                        else if (payload.cancelled) reject(new Error("User cancelled transaction"));
+                                        else reject(new Error(payload.error || "Send transaction failed"));
+                                    });
+                                    setCurrentFlow("send-ethereum-transaction");
+                                    setFlowData({
+                                        transaction: params.transaction,
+                                        serializedTransaction: serializedTransaction,
+                                        wallet: params.wallet,
+                                        options: params.options,
+                                        rpcUrl: params.rpcUrl,
+                                        network: (_params_options = params.options) === null || _params_options === void 0 ? void 0 : _params_options.network,
+                                        onAssertPasskey: onAssertPasskey
+                                    });
+                                    setStartFlow(true);
+                                })
+                            ];
+                    }
                 });
             })();
         }
@@ -1410,8 +1500,7 @@ var getEthereumSDKMethods = function getEthereumSDKMethods(publishableKey, getIs
 };
 // src/sdk/sdk-methods.ts
 import { PostMessageMethod as PostMessageMethod6, PostMessageType as PostMessageType7 } from "@moon-x/core/utils";
-import { clearParentAssertCache } from "@moon-x/core/lib";
-import { getHeadlessGeneralMethods } from "@moon-x/core/sdk";
+import { getHeadlessGeneralMethods, getPresenceToken as headlessGetPresenceToken } from "@moon-x/core/sdk";
 import { createIframeTransport as createIframeTransport3, createLocalStorageKv, createWebAuthnPasskey as createWebAuthnPasskey2 } from "@moon-x/core/web";
 import { authState as authState2 } from "@moon-x/core/lib";
 // src/sdk/sdk-authentication-methods.ts
@@ -1419,7 +1508,7 @@ import { PostMessageMethod as PostMessageMethod5, PostMessageType as PostMessage
 import { getHeadlessAuthenticationMethods } from "@moon-x/core/sdk";
 import { createIframeTransport as createIframeTransport2 } from "@moon-x/core/web";
 import { authState } from "@moon-x/core/lib";
-var getAuthenticationMethods = function getAuthenticationMethods(publishableKey, isMounted, getIsReady, iframeRef, setFlowState, emailConfig, setIsAuthenticated, setUser) {
+var getAuthenticationMethods = function getAuthenticationMethods(publishableKey, isMounted, getIsReady, iframeRef, setFlowState, setIsAuthenticated, setUser) {
     var transport = createIframeTransport2({
         getContentWindow: function getContentWindow() {
             var _ref;
@@ -1434,7 +1523,6 @@ var getAuthenticationMethods = function getAuthenticationMethods(publishableKey,
     var headless = getHeadlessAuthenticationMethods({
         transport: transport,
         publishableKey: publishableKey,
-        emailConfig: emailConfig,
         setIsAuthenticated: setIsAuthenticated,
         setUser: setUser
     });
@@ -1443,12 +1531,12 @@ var getAuthenticationMethods = function getAuthenticationMethods(publishableKey,
      * Send a one-time passcode to the user's email address. Wraps the
      * shared headless `sendCode` with web's setFlowState lifecycle so
      * the email-otp-verify modal can render loading/error/waiting-code
-     * states. Same status names the global machine has used since
-     * before the refactor (for back-compat with `useMoonKey().flowState`
-     * consumers that haven't migrated to the local-state `useLoginWithEmail`).
+     * states. Returns the platform response (including the authoritative
+     * `expires_at` unix timestamp) so headless consumers can render an
+     * accurate countdown without making it up.
      */ sendCode: function sendCode(params) {
             return _async_to_generator(function() {
-                var _iframeRef_current, error, errorObj;
+                var _iframeRef_current, response, error, errorObj;
                 return _ts_generator(this, function(_state) {
                     switch(_state.label){
                         case 0:
@@ -1480,13 +1568,13 @@ var getAuthenticationMethods = function getAuthenticationMethods(publishableKey,
                                 headless.sendCode(params)
                             ];
                         case 2:
-                            _state.sent();
+                            response = _state.sent();
                             setFlowState({
                                 status: "waiting-code-input"
                             });
                             return [
-                                3,
-                                4
+                                2,
+                                response
                             ];
                         case 3:
                             error = _state.sent();
@@ -1778,7 +1866,7 @@ var getAuthenticationMethods = function getAuthenticationMethods(publishableKey,
     };
 };
 // src/sdk/sdk-methods.ts
-var getSDKMethods = function getSDKMethods(publishableKey, isMounted, getIsReady, iframeRef, setCurrentFlow, setFlowData, setStartFlow, setFlowState, emailConfig, setIsAuthenticated, setUser, closeCallbackRef) {
+var getSDKMethods = function getSDKMethods(publishableKey, isMounted, getIsReady, iframeRef, setCurrentFlow, setFlowData, setStartFlow, setFlowState, setIsAuthenticated, setUser, closeCallbackRef) {
     var transport = createIframeTransport3({
         getContentWindow: function getContentWindow() {
             var _ref;
@@ -1797,10 +1885,14 @@ var getSDKMethods = function getSDKMethods(publishableKey, isMounted, getIsReady
         passkey: passkey,
         storage: storage,
         publishableKey: publishableKey,
+        // window is defined in the browser context where this hook runs.
+        // SSR rendering never reaches the factory because the SDK is gated
+        // on the MoonKeyProvider's `useEffect`-mounted lifecycle.
+        relyingPartyOrigin: typeof window !== "undefined" ? window.location.origin : "",
         setIsAuthenticated: setIsAuthenticated,
         setUser: setUser
     });
-    return _object_spread_props(_object_spread({}, getAuthenticationMethods(publishableKey, isMounted, getIsReady, iframeRef, setFlowState, emailConfig, setIsAuthenticated, setUser), headless), {
+    return _object_spread_props(_object_spread({}, getAuthenticationMethods(publishableKey, isMounted, getIsReady, iframeRef, setFlowState, setIsAuthenticated, setUser), headless), {
         // Web override: logout must also reset the modal state machine
         // (`setCurrentFlow` / `setFlowData` / `setStartFlow`) AND clear the
         // localStorage id-token (idTokenStorage). The shared logout already
@@ -1839,7 +1931,6 @@ var getSDKMethods = function getSDKMethods(publishableKey, isMounted, getIsReady
                         case 2:
                             result = _state.sent();
                             authState2.clear();
-                            clearParentAssertCache();
                             idTokenStorage.remove();
                             setFlowData(null);
                             setCurrentFlow("landing");
@@ -1873,6 +1964,35 @@ var getSDKMethods = function getSDKMethods(publishableKey, isMounted, getIsReady
         addPasskey: function addPasskey(_params) {
             return Promise.reject(new Error("addPasskey not initialized"));
         },
+        // getPresenceToken: parent-side passkey step-up ceremony. Returns a
+        // short-lived JWT (tt:"presence") that customer backends verify via
+        // the app's JWKS to gate high-risk routes without rolling their own
+        // session/step-up model. Must be invoked from inside a click handler so
+        // transient activation is alive when WebAuthn fires.
+        //
+        // The strip of `response.userHandle` happens INSIDE getPresenceToken
+        // (parent boundary, before iframe roundtrip). DEK material never
+        // crosses the iframe → server boundary.
+        getPresenceToken: function getPresenceToken() {
+            return _async_to_generator(function() {
+                var _iframeRef_current;
+                return _ts_generator(this, function(_state) {
+                    if (!isMounted) throw new Error("SDK not ready");
+                    if (!getIsReady() || !((_iframeRef_current = iframeRef.current) === null || _iframeRef_current === void 0 ? void 0 : _iframeRef_current.contentWindow)) {
+                        throw new Error("SDK not ready");
+                    }
+                    return [
+                        2,
+                        headlessGetPresenceToken({
+                            transport: transport,
+                            passkey: passkey,
+                            publishableKey: publishableKey,
+                            relyingPartyOrigin: window.location.origin
+                        })
+                    ];
+                });
+            })();
+        },
         // hide: web-only — closes the parent-side modal. No shared analogue.
         hide: function hide() {
             if (!isMounted) return;
@@ -2066,9 +2186,13 @@ var getPasskeyMethods = function getPasskeyMethods(param) {
 };
 // src/sdk/sdk-solana-methods.ts
 import { PostMessageMethod as PostMessageMethod7, PostMessageType as PostMessageType8 } from "@moon-x/core/utils";
-import { bs58ToBytes, withClearOnFailure as withClearOnFailure2 } from "@moon-x/core/lib";
-import { assertPasskeyInParent as assertPasskeyInParent2, getHeadlessSolanaMethods } from "@moon-x/core/sdk";
+import { bs58ToBytes } from "@moon-x/core/lib";
+import { flattenPresenceTokens as flattenPresenceTokens2, getHeadlessSolanaMethods, getInternalPresenceTokens as getInternalPresenceTokens2 } from "@moon-x/core/sdk";
 import { createIframeTransport as createIframeTransport4, createWebAuthnPasskey as createWebAuthnPasskey3 } from "@moon-x/core/web";
+var SCOPES_SIGN2 = [
+    "keyshare_read",
+    "sign"
+];
 var getSolanaSDKMethods = function getSolanaSDKMethods(publishableKey, getIsReady, iframeRef, setCurrentFlow, setFlowData, setStartFlow) {
     var transport = createIframeTransport4({
         getContentWindow: function getContentWindow() {
@@ -2085,7 +2209,8 @@ var getSolanaSDKMethods = function getSolanaSDKMethods(publishableKey, getIsRead
     var headless = getHeadlessSolanaMethods({
         transport: transport,
         passkey: passkey,
-        publishableKey: publishableKey
+        publishableKey: publishableKey,
+        relyingPartyOrigin: typeof window !== "undefined" ? window.location.origin : ""
     });
     return _object_spread_props(_object_spread({}, headless), {
         // WithUI variants — drive the auth-flow-renderer modal. Result
@@ -2093,72 +2218,89 @@ var getSolanaSDKMethods = function getSolanaSDKMethods(publishableKey, getIsRead
         // SolanaSign*Result's typed Uint8Array.
         signSolanaMessageWithUI: function signSolanaMessageWithUI(params) {
             return _async_to_generator(function() {
+                var _iframeRef_current, onAssertPasskey;
                 return _ts_generator(this, function(_state) {
+                    if (!((_iframeRef_current = iframeRef.current) === null || _iframeRef_current === void 0 ? void 0 : _iframeRef_current.contentWindow)) throw new Error("SDK not ready");
+                    onAssertPasskey = function onAssertPasskey() {
+                        return _async_to_generator(function() {
+                            var _ref, userHandleB64url, credentialIdB64url, tokens;
+                            return _ts_generator(this, function(_state) {
+                                switch(_state.label){
+                                    case 0:
+                                        return [
+                                            4,
+                                            getInternalPresenceTokens2({
+                                                transport: transport,
+                                                passkey: passkey,
+                                                publishableKey: publishableKey,
+                                                relyingPartyOrigin: typeof window !== "undefined" ? window.location.origin : "",
+                                                scopes: SCOPES_SIGN2
+                                            })
+                                        ];
+                                    case 1:
+                                        _ref = _state.sent(), userHandleB64url = _ref.userHandleB64url, credentialIdB64url = _ref.credentialIdB64url, tokens = _ref.tokens;
+                                        return [
+                                            2,
+                                            {
+                                                userHandleB64url: userHandleB64url,
+                                                credentialIdB64url: credentialIdB64url,
+                                                presenceTokens: flattenPresenceTokens2({
+                                                    tokens: tokens,
+                                                    userHandleB64url: userHandleB64url,
+                                                    credentialIdB64url: credentialIdB64url
+                                                })
+                                            }
+                                        ];
+                                }
+                            });
+                        })();
+                    };
                     return [
                         2,
-                        withClearOnFailure2(function() {
-                            return _async_to_generator(function() {
-                                var _iframeRef_current, onAssertPasskey;
-                                return _ts_generator(this, function(_state) {
-                                    if (!((_iframeRef_current = iframeRef.current) === null || _iframeRef_current === void 0 ? void 0 : _iframeRef_current.contentWindow)) throw new Error("SDK not ready");
-                                    onAssertPasskey = function onAssertPasskey() {
-                                        return assertPasskeyInParent2({
-                                            transport: transport,
-                                            passkey: passkey,
-                                            publishableKey: publishableKey,
-                                            requireFreshAssertion: params.requireFreshAssertion
-                                        });
-                                    };
-                                    return [
-                                        2,
-                                        new Promise(function(resolve, reject) {
-                                            var _params_options;
-                                            registerOneShot(PostMessageType8.WALLET, PostMessageMethod7.SIGN_MESSAGE, function(payload) {
-                                                return _async_to_generator(function() {
-                                                    var _tmp;
-                                                    return _ts_generator(this, function(_state) {
-                                                        switch(_state.label){
-                                                            case 0:
-                                                                if (!payload.success) return [
-                                                                    3,
-                                                                    2
-                                                                ];
-                                                                _tmp = {};
-                                                                return [
-                                                                    4,
-                                                                    bs58ToBytes(payload.signature)
-                                                                ];
-                                                            case 1:
-                                                                resolve.apply(void 0, [
-                                                                    (_tmp.signature = _state.sent(), _tmp)
-                                                                ]);
-                                                                return [
-                                                                    3,
-                                                                    3
-                                                                ];
-                                                            case 2:
-                                                                reject(new Error(payload.error || "Sign message failed"));
-                                                                _state.label = 3;
-                                                            case 3:
-                                                                return [
-                                                                    2
-                                                                ];
-                                                        }
-                                                    });
-                                                })();
-                                            });
-                                            setCurrentFlow("sign-message");
-                                            setFlowData({
-                                                message: params.message,
-                                                wallet: params.wallet,
-                                                uiOptions: (_params_options = params.options) === null || _params_options === void 0 ? void 0 : _params_options.uiOptions,
-                                                onAssertPasskey: onAssertPasskey
-                                            });
-                                            setStartFlow(true);
-                                        })
-                                    ];
-                                });
-                            })();
+                        new Promise(function(resolve, reject) {
+                            var _params_options;
+                            registerOneShot(PostMessageType8.WALLET, PostMessageMethod7.SIGN_MESSAGE, function(payload) {
+                                return _async_to_generator(function() {
+                                    var _tmp;
+                                    return _ts_generator(this, function(_state) {
+                                        switch(_state.label){
+                                            case 0:
+                                                if (!payload.success) return [
+                                                    3,
+                                                    2
+                                                ];
+                                                _tmp = {};
+                                                return [
+                                                    4,
+                                                    bs58ToBytes(payload.signature)
+                                                ];
+                                            case 1:
+                                                resolve.apply(void 0, [
+                                                    (_tmp.signature = _state.sent(), _tmp)
+                                                ]);
+                                                return [
+                                                    3,
+                                                    3
+                                                ];
+                                            case 2:
+                                                reject(new Error(payload.error || "Sign message failed"));
+                                                _state.label = 3;
+                                            case 3:
+                                                return [
+                                                    2
+                                                ];
+                                        }
+                                    });
+                                })();
+                            });
+                            setCurrentFlow("sign-message");
+                            setFlowData({
+                                message: params.message,
+                                wallet: params.wallet,
+                                uiOptions: (_params_options = params.options) === null || _params_options === void 0 ? void 0 : _params_options.uiOptions,
+                                onAssertPasskey: onAssertPasskey
+                            });
+                            setStartFlow(true);
                         })
                     ];
                 });
@@ -2166,71 +2308,88 @@ var getSolanaSDKMethods = function getSolanaSDKMethods(publishableKey, getIsRead
         },
         signSolanaTransactionWithUI: function signSolanaTransactionWithUI(params) {
             return _async_to_generator(function() {
+                var _iframeRef_current, onAssertPasskey;
                 return _ts_generator(this, function(_state) {
+                    if (!((_iframeRef_current = iframeRef.current) === null || _iframeRef_current === void 0 ? void 0 : _iframeRef_current.contentWindow)) throw new Error("SDK not ready");
+                    onAssertPasskey = function onAssertPasskey() {
+                        return _async_to_generator(function() {
+                            var _ref, userHandleB64url, credentialIdB64url, tokens;
+                            return _ts_generator(this, function(_state) {
+                                switch(_state.label){
+                                    case 0:
+                                        return [
+                                            4,
+                                            getInternalPresenceTokens2({
+                                                transport: transport,
+                                                passkey: passkey,
+                                                publishableKey: publishableKey,
+                                                relyingPartyOrigin: typeof window !== "undefined" ? window.location.origin : "",
+                                                scopes: SCOPES_SIGN2
+                                            })
+                                        ];
+                                    case 1:
+                                        _ref = _state.sent(), userHandleB64url = _ref.userHandleB64url, credentialIdB64url = _ref.credentialIdB64url, tokens = _ref.tokens;
+                                        return [
+                                            2,
+                                            {
+                                                userHandleB64url: userHandleB64url,
+                                                credentialIdB64url: credentialIdB64url,
+                                                presenceTokens: flattenPresenceTokens2({
+                                                    tokens: tokens,
+                                                    userHandleB64url: userHandleB64url,
+                                                    credentialIdB64url: credentialIdB64url
+                                                })
+                                            }
+                                        ];
+                                }
+                            });
+                        })();
+                    };
                     return [
                         2,
-                        withClearOnFailure2(function() {
-                            return _async_to_generator(function() {
-                                var _iframeRef_current, onAssertPasskey;
-                                return _ts_generator(this, function(_state) {
-                                    if (!((_iframeRef_current = iframeRef.current) === null || _iframeRef_current === void 0 ? void 0 : _iframeRef_current.contentWindow)) throw new Error("SDK not ready");
-                                    onAssertPasskey = function onAssertPasskey() {
-                                        return assertPasskeyInParent2({
-                                            transport: transport,
-                                            passkey: passkey,
-                                            publishableKey: publishableKey,
-                                            requireFreshAssertion: params.requireFreshAssertion
-                                        });
-                                    };
-                                    return [
-                                        2,
-                                        new Promise(function(resolve, reject) {
-                                            registerOneShot(PostMessageType8.WALLET, PostMessageMethod7.SIGN_TRANSACTION, function(payload) {
-                                                return _async_to_generator(function() {
-                                                    var _tmp;
-                                                    return _ts_generator(this, function(_state) {
-                                                        switch(_state.label){
-                                                            case 0:
-                                                                if (!payload.success) return [
-                                                                    3,
-                                                                    2
-                                                                ];
-                                                                _tmp = {};
-                                                                return [
-                                                                    4,
-                                                                    bs58ToBytes(payload.signedTransaction)
-                                                                ];
-                                                            case 1:
-                                                                resolve.apply(void 0, [
-                                                                    (_tmp.signedTransaction = _state.sent(), _tmp)
-                                                                ]);
-                                                                return [
-                                                                    3,
-                                                                    3
-                                                                ];
-                                                            case 2:
-                                                                reject(new Error(payload.error || "Sign transaction failed"));
-                                                                _state.label = 3;
-                                                            case 3:
-                                                                return [
-                                                                    2
-                                                                ];
-                                                        }
-                                                    });
-                                                })();
-                                            });
-                                            setCurrentFlow("sign-transaction");
-                                            setFlowData({
-                                                serializedTransaction: params.transaction,
-                                                wallet: params.wallet,
-                                                options: params.options,
-                                                onAssertPasskey: onAssertPasskey
-                                            });
-                                            setStartFlow(true);
-                                        })
-                                    ];
-                                });
-                            })();
+                        new Promise(function(resolve, reject) {
+                            registerOneShot(PostMessageType8.WALLET, PostMessageMethod7.SIGN_TRANSACTION, function(payload) {
+                                return _async_to_generator(function() {
+                                    var _tmp;
+                                    return _ts_generator(this, function(_state) {
+                                        switch(_state.label){
+                                            case 0:
+                                                if (!payload.success) return [
+                                                    3,
+                                                    2
+                                                ];
+                                                _tmp = {};
+                                                return [
+                                                    4,
+                                                    bs58ToBytes(payload.signedTransaction)
+                                                ];
+                                            case 1:
+                                                resolve.apply(void 0, [
+                                                    (_tmp.signedTransaction = _state.sent(), _tmp)
+                                                ]);
+                                                return [
+                                                    3,
+                                                    3
+                                                ];
+                                            case 2:
+                                                reject(new Error(payload.error || "Sign transaction failed"));
+                                                _state.label = 3;
+                                            case 3:
+                                                return [
+                                                    2
+                                                ];
+                                        }
+                                    });
+                                })();
+                            });
+                            setCurrentFlow("sign-transaction");
+                            setFlowData({
+                                serializedTransaction: params.transaction,
+                                wallet: params.wallet,
+                                options: params.options,
+                                onAssertPasskey: onAssertPasskey
+                            });
+                            setStartFlow(true);
                         })
                     ];
                 });
@@ -2238,73 +2397,90 @@ var getSolanaSDKMethods = function getSolanaSDKMethods(publishableKey, getIsRead
         },
         sendSolanaTransactionWithUI: function sendSolanaTransactionWithUI(params) {
             return _async_to_generator(function() {
+                var _iframeRef_current, onAssertPasskey;
                 return _ts_generator(this, function(_state) {
+                    if (!((_iframeRef_current = iframeRef.current) === null || _iframeRef_current === void 0 ? void 0 : _iframeRef_current.contentWindow)) throw new Error("SDK not ready");
+                    onAssertPasskey = function onAssertPasskey() {
+                        return _async_to_generator(function() {
+                            var _ref, userHandleB64url, credentialIdB64url, tokens;
+                            return _ts_generator(this, function(_state) {
+                                switch(_state.label){
+                                    case 0:
+                                        return [
+                                            4,
+                                            getInternalPresenceTokens2({
+                                                transport: transport,
+                                                passkey: passkey,
+                                                publishableKey: publishableKey,
+                                                relyingPartyOrigin: typeof window !== "undefined" ? window.location.origin : "",
+                                                scopes: SCOPES_SIGN2
+                                            })
+                                        ];
+                                    case 1:
+                                        _ref = _state.sent(), userHandleB64url = _ref.userHandleB64url, credentialIdB64url = _ref.credentialIdB64url, tokens = _ref.tokens;
+                                        return [
+                                            2,
+                                            {
+                                                userHandleB64url: userHandleB64url,
+                                                credentialIdB64url: credentialIdB64url,
+                                                presenceTokens: flattenPresenceTokens2({
+                                                    tokens: tokens,
+                                                    userHandleB64url: userHandleB64url,
+                                                    credentialIdB64url: credentialIdB64url
+                                                })
+                                            }
+                                        ];
+                                }
+                            });
+                        })();
+                    };
                     return [
                         2,
-                        withClearOnFailure2(function() {
-                            return _async_to_generator(function() {
-                                var _iframeRef_current, onAssertPasskey;
-                                return _ts_generator(this, function(_state) {
-                                    if (!((_iframeRef_current = iframeRef.current) === null || _iframeRef_current === void 0 ? void 0 : _iframeRef_current.contentWindow)) throw new Error("SDK not ready");
-                                    onAssertPasskey = function onAssertPasskey() {
-                                        return assertPasskeyInParent2({
-                                            transport: transport,
-                                            passkey: passkey,
-                                            publishableKey: publishableKey,
-                                            requireFreshAssertion: params.requireFreshAssertion
-                                        });
-                                    };
-                                    return [
-                                        2,
-                                        new Promise(function(resolve, reject) {
-                                            registerOneShot(PostMessageType8.WALLET, PostMessageMethod7.SEND_TRANSACTION, function(payload) {
-                                                return _async_to_generator(function() {
-                                                    var _tmp;
-                                                    return _ts_generator(this, function(_state) {
-                                                        switch(_state.label){
-                                                            case 0:
-                                                                if (!payload.success) return [
-                                                                    3,
-                                                                    2
-                                                                ];
-                                                                _tmp = {};
-                                                                return [
-                                                                    4,
-                                                                    bs58ToBytes(payload.signature)
-                                                                ];
-                                                            case 1:
-                                                                resolve.apply(void 0, [
-                                                                    (_tmp.signature = _state.sent(), _tmp)
-                                                                ]);
-                                                                return [
-                                                                    3,
-                                                                    3
-                                                                ];
-                                                            case 2:
-                                                                reject(new Error(payload.error || "Send transaction failed"));
-                                                                _state.label = 3;
-                                                            case 3:
-                                                                return [
-                                                                    2
-                                                                ];
-                                                        }
-                                                    });
-                                                })();
-                                            });
-                                            setCurrentFlow("send-transaction");
-                                            setFlowData({
-                                                serializedTransaction: params.transaction,
-                                                walletAddress: params.wallet.public_address,
-                                                rpcUrl: params.rpcUrl,
-                                                wallet: params.wallet,
-                                                options: params.options,
-                                                onAssertPasskey: onAssertPasskey
-                                            });
-                                            setStartFlow(true);
-                                        })
-                                    ];
-                                });
-                            })();
+                        new Promise(function(resolve, reject) {
+                            registerOneShot(PostMessageType8.WALLET, PostMessageMethod7.SEND_TRANSACTION, function(payload) {
+                                return _async_to_generator(function() {
+                                    var _tmp;
+                                    return _ts_generator(this, function(_state) {
+                                        switch(_state.label){
+                                            case 0:
+                                                if (!payload.success) return [
+                                                    3,
+                                                    2
+                                                ];
+                                                _tmp = {};
+                                                return [
+                                                    4,
+                                                    bs58ToBytes(payload.signature)
+                                                ];
+                                            case 1:
+                                                resolve.apply(void 0, [
+                                                    (_tmp.signature = _state.sent(), _tmp)
+                                                ]);
+                                                return [
+                                                    3,
+                                                    3
+                                                ];
+                                            case 2:
+                                                reject(new Error(payload.error || "Send transaction failed"));
+                                                _state.label = 3;
+                                            case 3:
+                                                return [
+                                                    2
+                                                ];
+                                        }
+                                    });
+                                })();
+                            });
+                            setCurrentFlow("send-transaction");
+                            setFlowData({
+                                serializedTransaction: params.transaction,
+                                walletAddress: params.wallet.public_address,
+                                rpcUrl: params.rpcUrl,
+                                wallet: params.wallet,
+                                options: params.options,
+                                onAssertPasskey: onAssertPasskey
+                            });
+                            setStartFlow(true);
                         })
                     ];
                 });
@@ -2313,6 +2489,10 @@ var getSolanaSDKMethods = function getSolanaSDKMethods(publishableKey, getIsRead
     });
 };
 // src/sdk/create-sdk-instance.ts
+var IMPORT_KEY_SCOPES = [
+    "dek_bootstrap",
+    "keyshare_write"
+];
 var createSDKInstance = function createSDKInstance(publishableKey, isMounted, isReady, flowState, iframeRef, onError, onClose, setFlowState, setStartFlow, setCurrentFlow, setFlowData, authProviderConfig, getCurrentIsReady, setIsAuthenticated, setUser, closeCallbacksRef, getStartFlow, setAppearance, refreshUser) {
     var currentSuccessCallback = null;
     var currentErrorCallback = null;
@@ -2424,7 +2604,7 @@ var createSDKInstance = function createSDKInstance(publishableKey, isMounted, is
         },
         onError: onError,
         onClose: onClose
-    }, getSDKMethods(publishableKey, isMounted, getCurrentIsReady, iframeRef, setCurrentFlow, setFlowData, setStartFlow, setFlowState, authProviderConfig === null || authProviderConfig === void 0 ? void 0 : authProviderConfig.emailConfig, setIsAuthenticated, setUser, closeCallbacksRef), getPasskeyMethods({
+    }, getSDKMethods(publishableKey, isMounted, getCurrentIsReady, iframeRef, setCurrentFlow, setFlowData, setStartFlow, setFlowState, setIsAuthenticated, setUser, closeCallbacksRef), getPasskeyMethods({
         isMounted: isMounted,
         getIsReady: getCurrentIsReady,
         iframeRef: iframeRef,
@@ -2440,100 +2620,103 @@ var createSDKInstance = function createSDKInstance(publishableKey, isMounted, is
         // Override getSDKMethods' importKey to support both headless and UI
         // modes. With a key provided, we forward straight to the iframe and
         // never open the modal. Without a key, we open the ImportWallet flow
-        // and resolve once the user submits inside the modal.
+        // and let it run its own assert-on-CTA ceremony — minting tokens
+        // here would mean the 30s single-use JWTs expire while the user
+        // sits on the modal.
         //
         // Return shape MUST be { wallet: PublicWallet } to match the headless
         // contract in @moon-x/core/sdk/headless-general.ts → importKey. The
         // wrapper in wallets/ethereum.ts and wallets/solana.ts does
         // `result.wallet`, so a bare PublicWallet here causes downstream
         // `wallet.public_address` accesses to throw on undefined.
-        importKey: function importKey(walletType, key, options) {
-            var _iframeRef_current;
-            if (!isMounted) {
-                return Promise.reject(new Error("SDK not ready"));
-            }
-            if (!getCurrentIsReady() || !((_iframeRef_current = iframeRef.current) === null || _iframeRef_current === void 0 ? void 0 : _iframeRef_current.contentWindow)) {
-                return Promise.reject(new Error("SDK not ready"));
-            }
-            return withClearOnFailure3(function() {
-                return _async_to_generator(function() {
-                    var _ref, userHandleB64url, credentialIdB64url, client, wallet;
-                    return _ts_generator(this, function(_state) {
-                        switch(_state.label){
-                            case 0:
-                                return [
-                                    4,
-                                    assertPasskeyInParent3({
-                                        transport: createIframeTransport5({
-                                            getContentWindow: function getContentWindow() {
-                                                var _ref;
-                                                var _iframeRef_current;
-                                                return (_ref = (_iframeRef_current = iframeRef.current) === null || _iframeRef_current === void 0 ? void 0 : _iframeRef_current.contentWindow) !== null && _ref !== void 0 ? _ref : null;
-                                            },
-                                            isReady: function isReady() {
-                                                var _iframeRef_current;
-                                                return !!((_iframeRef_current = iframeRef.current) === null || _iframeRef_current === void 0 ? void 0 : _iframeRef_current.contentWindow);
-                                            }
-                                        }),
-                                        passkey: createWebAuthnPasskey4(),
-                                        publishableKey: publishableKey,
-                                        requireFreshAssertion: options === null || options === void 0 ? void 0 : options.requireFreshAssertion
-                                    })
-                                ];
-                            case 1:
-                                _ref = _state.sent(), userHandleB64url = _ref.userHandleB64url, credentialIdB64url = _ref.credentialIdB64url;
-                                if (!(key !== void 0)) return [
-                                    3,
-                                    3
-                                ];
-                                client = createPostMessageClient(iframeRef.current.contentWindow, publishableKey);
-                                return [
-                                    4,
-                                    client.send(PostMessageType9.WALLET, PostMessageMethod8.IMPORT_KEY, {
-                                        walletType: walletType,
-                                        key: key,
-                                        publishableKey: publishableKey,
-                                        userHandleB64url: userHandleB64url,
-                                        credentialIdB64url: credentialIdB64url
-                                    })
-                                ];
-                            case 2:
-                                wallet = _state.sent();
-                                return [
-                                    2,
-                                    {
-                                        wallet: wallet
-                                    }
-                                ];
-                            case 3:
-                                setCurrentFlow("import-key");
-                                setFlowData({
+        importKey: function importKey(walletType, key) {
+            return _async_to_generator(function() {
+                var _iframeRef_current, transport, _ref, userHandleB64url, credentialIdB64url, tokens, presenceTokens, client, wallet;
+                return _ts_generator(this, function(_state) {
+                    switch(_state.label){
+                        case 0:
+                            if (!isMounted) throw new Error("SDK not ready");
+                            if (!getCurrentIsReady() || !((_iframeRef_current = iframeRef.current) === null || _iframeRef_current === void 0 ? void 0 : _iframeRef_current.contentWindow)) {
+                                throw new Error("SDK not ready");
+                            }
+                            if (!(key !== void 0)) return [
+                                3,
+                                3
+                            ];
+                            transport = createIframeTransport5({
+                                getContentWindow: function getContentWindow() {
+                                    var _ref;
+                                    var _iframeRef_current;
+                                    return (_ref = (_iframeRef_current = iframeRef.current) === null || _iframeRef_current === void 0 ? void 0 : _iframeRef_current.contentWindow) !== null && _ref !== void 0 ? _ref : null;
+                                },
+                                isReady: function isReady() {
+                                    var _iframeRef_current;
+                                    return !!((_iframeRef_current = iframeRef.current) === null || _iframeRef_current === void 0 ? void 0 : _iframeRef_current.contentWindow);
+                                }
+                            });
+                            return [
+                                4,
+                                getInternalPresenceTokens3({
+                                    transport: transport,
+                                    passkey: createWebAuthnPasskey4(),
+                                    publishableKey: publishableKey,
+                                    relyingPartyOrigin: typeof window !== "undefined" ? window.location.origin : "",
+                                    scopes: IMPORT_KEY_SCOPES
+                                })
+                            ];
+                        case 1:
+                            _ref = _state.sent(), userHandleB64url = _ref.userHandleB64url, credentialIdB64url = _ref.credentialIdB64url, tokens = _ref.tokens;
+                            presenceTokens = flattenPresenceTokens3({
+                                tokens: tokens,
+                                userHandleB64url: userHandleB64url,
+                                credentialIdB64url: credentialIdB64url
+                            });
+                            client = createPostMessageClient(iframeRef.current.contentWindow, publishableKey);
+                            return [
+                                4,
+                                client.send(PostMessageType9.WALLET, PostMessageMethod8.IMPORT_KEY, {
                                     walletType: walletType,
+                                    key: key,
+                                    publishableKey: publishableKey,
                                     userHandleB64url: userHandleB64url,
-                                    credentialIdB64url: credentialIdB64url
-                                });
-                                setStartFlow(true);
-                                return [
-                                    2,
-                                    new Promise(function(resolve, reject) {
-                                        currentSuccessCallback = function(data) {
-                                            currentSuccessCallback = null;
-                                            currentErrorCallback = null;
-                                            resolve({
-                                                wallet: data
-                                            });
-                                        };
-                                        currentErrorCallback = function(error) {
-                                            currentSuccessCallback = null;
-                                            currentErrorCallback = null;
-                                            reject(error);
-                                        };
-                                    })
-                                ];
-                        }
-                    });
-                })();
-            });
+                                    credentialIdB64url: credentialIdB64url,
+                                    presenceTokens: presenceTokens
+                                })
+                            ];
+                        case 2:
+                            wallet = _state.sent();
+                            return [
+                                2,
+                                {
+                                    wallet: wallet
+                                }
+                            ];
+                        case 3:
+                            setCurrentFlow("import-key");
+                            setFlowData({
+                                walletType: walletType
+                            });
+                            setStartFlow(true);
+                            return [
+                                2,
+                                new Promise(function(resolve, reject) {
+                                    currentSuccessCallback = function(data) {
+                                        currentSuccessCallback = null;
+                                        currentErrorCallback = null;
+                                        resolve({
+                                            wallet: data
+                                        });
+                                    };
+                                    currentErrorCallback = function(error) {
+                                        currentSuccessCallback = null;
+                                        currentErrorCallback = null;
+                                        reject(error);
+                                    };
+                                })
+                            ];
+                    }
+                });
+            })();
         }
     }), getSolanaSDKMethods(publishableKey, getCurrentIsReady, iframeRef, setCurrentFlow, setFlowData, setStartFlow), getEthereumSDKMethods(publishableKey, getCurrentIsReady, iframeRef, setCurrentFlow, setFlowData, setStartFlow));
 };
@@ -2605,6 +2788,8 @@ var getWalletErrorMessage = function getWalletErrorMessage(errorResponse) {
 };
 // src/components/flows/add-passkey/add-passkey.tsx
 import { PostMessageMethod as PostMessageMethod11, PostMessageType as PostMessageType12 } from "@moon-x/core/utils";
+import { flattenPresenceTokens as flattenPresenceTokens4, getInternalPresenceTokens as getInternalPresenceTokens4 } from "@moon-x/core/sdk";
+import { createWebAuthnPasskey as createWebAuthnPasskey5 } from "@moon-x/core/web";
 import { startRegistration } from "@simplewebauthn/browser";
 import { CheckCircle2, Fingerprint, KeyRound, Plus } from "lucide-react";
 import { useRef as useRef4, useState as useState11 } from "react";
@@ -2613,6 +2798,7 @@ import { PostMessageMethod as PostMessageMethod10, PostMessageType as PostMessag
 import { useEffect as useEffect5, useState as useState5 } from "react";
 // src/lib/iframe.ts
 import { PostMessageClient, PostMessageMethod as PostMessageMethod9, PostMessageType as PostMessageType10, getIframeOrigin, getIframeUrl } from "@moon-x/core";
+import { createIframeTransport as createIframeTransport6 } from "@moon-x/core/web";
 var getIframeClient = function getIframeClient(publishableKey) {
     var iframeId = arguments.length > 1 && arguments[1] !== void 0 ? arguments[1] : "moonkey-auth-iframe";
     var iframe = document.getElementById(iframeId);
@@ -2623,6 +2809,20 @@ var getIframeClient = function getIframeClient(publishableKey) {
     var iframeOrigin = getIframeOrigin(iframeUrl);
     return new PostMessageClient(iframe.contentWindow, iframeOrigin);
 };
+var getIframeTransport = function getIframeTransport() {
+    var iframeId = arguments.length > 0 && arguments[0] !== void 0 ? arguments[0] : "moonkey-auth-iframe";
+    return createIframeTransport6({
+        getContentWindow: function getContentWindow() {
+            var _ref;
+            var iframe = document.getElementById(iframeId);
+            return (_ref = iframe === null || iframe === void 0 ? void 0 : iframe.contentWindow) !== null && _ref !== void 0 ? _ref : null;
+        },
+        isReady: function isReady() {
+            var iframe = document.getElementById(iframeId);
+            return !!(iframe === null || iframe === void 0 ? void 0 : iframe.contentWindow);
+        }
+    });
+};
 var closeIframe = function closeIframe(publishableKey) {
     var iframe = getIframeClient(publishableKey);
     if (!iframe) {
@@ -3638,14 +3838,50 @@ function AddressPill(param) {
     });
 }
 // src/components/vanilla-ui/error-box.tsx
+import { AlertCircle } from "lucide-react";
 import { jsx as jsx11, jsxs as jsxs7 } from "react/jsx-runtime";
 function ErrorBox(param) {
-    var children = param.children, icon = param.icon, className = param.className, style = param.style;
-    return /* @__PURE__ */ jsxs7("div", {
+    var children = param.children, icon = param.icon, _param_variant = param.variant, variant = _param_variant === void 0 ? "boxed" : _param_variant, align = param.align, className = param.className, style = param.style;
+    var a11yProps = {
+        role: "alert",
+        "aria-live": "polite"
+    };
+    if (variant === "inline") {
+        var resolvedAlign = align !== null && align !== void 0 ? align : "left";
+        var resolvedIcon = icon === null ? null : icon !== null && icon !== void 0 ? icon : /* @__PURE__ */ jsx11(AlertCircle, {
+            size: 14,
+            strokeWidth: 2,
+            style: {
+                flexShrink: 0
+            },
+            "aria-hidden": "true"
+        });
+        return /* @__PURE__ */ jsxs7("div", _object_spread_props(_object_spread({}, a11yProps), {
+            className: cx("moonkey-text--error", className),
+            style: _object_spread({
+                fontSize: "0.875rem",
+                color: "var(--moonkey-color-error)",
+                textAlign: resolvedAlign,
+                display: "flex",
+                alignItems: "center",
+                gap: "0.375rem"
+            }, resolvedAlign === "center" && {
+                justifyContent: "center"
+            }, style),
+            children: [
+                resolvedIcon,
+                /* @__PURE__ */ jsx11("span", {
+                    children: children
+                })
+            ]
+        }));
+    }
+    return /* @__PURE__ */ jsxs7("div", _object_spread_props(_object_spread({}, a11yProps), {
         className: cx("moonkey-box moonkey-box--warning", className),
         style: style,
         children: [
             icon && /* @__PURE__ */ jsx11("span", {
+                "aria-hidden": "true",
                 style: {
                     flexShrink: 0,
                     marginTop: "0.125rem",
@@ -3656,14 +3892,17 @@ function ErrorBox(param) {
                 children: icon
             }),
             /* @__PURE__ */ jsx11("span", {
-                style: {
+                style: _object_spread({
                     fontSize: "0.875rem",
                     color: "var(--moonkey-color-error)"
-                },
+                }, align === "center" && {
+                    textAlign: "center",
+                    flex: 1
+                }),
                 children: children
             })
         ]
-    });
+    }));
 }
 // src/components/vanilla-ui/success-box.tsx
 import { jsx as jsx12, jsxs as jsxs8 } from "react/jsx-runtime";
@@ -3732,6 +3971,10 @@ function DetailRow(param) {
 }
 // src/components/flows/add-passkey/add-passkey.tsx
 import { jsx as jsx16, jsxs as jsxs10 } from "react/jsx-runtime";
+var ADD_PASSKEY_SCOPES = [
+    "passkey_enroll",
+    "wrap_add"
+];
 var SUCCESS_AUTO_CLOSE_MS = 3e3;
 var generateUserIdB64url = function generateUserIdB64url() {
     var bytes = crypto.getRandomValues(new Uint8Array(32));
@@ -3778,20 +4021,12 @@ var AddPasskey = function AddPasskey(param) {
     };
     var handleUnlock = function handleUnlock() {
         return _async_to_generator(function() {
-            var client, _dekInfo_allow_credential_ids_b64url, dekInfo, allowList, challenge, credential, assertion, credentialIdB64url, error;
+            var _dekInfo_allow_credential_ids_b64url, transport, dekInfo, allowList, _ref, userHandleB64url, credentialIdB64url, tokens, error;
             return _ts_generator(this, function(_state) {
                 switch(_state.label){
                     case 0:
                         setErrorMessage(null);
                         setStep("unlocking");
-                        client = getIframeClient(publishableKey);
-                        if (!client) {
-                            setErrorMessage("SDK not initialized");
-                            setStep("error");
-                            return [
-                                2
-                            ];
-                        }
                         _state.label = 1;
                     case 1:
                         _state.trys.push([
@@ -3800,48 +4035,39 @@ var AddPasskey = function AddPasskey(param) {
                             ,
                             5
                         ]);
+                        transport = getIframeTransport();
                         return [
                             4,
-                            client.send(PostMessageType12.AUTH, PostMessageMethod11.GET_DEK_INFO, {
+                            transport.send(PostMessageType12.AUTH, PostMessageMethod11.GET_DEK_INFO, {
                                 publishableKey: publishableKey
                             })
                         ];
                     case 2:
                         dekInfo = _state.sent();
                         allowList = (_dekInfo_allow_credential_ids_b64url = dekInfo.allow_credential_ids_b64url) !== null && _dekInfo_allow_credential_ids_b64url !== void 0 ? _dekInfo_allow_credential_ids_b64url : [];
-                        if (allowList.length === 0) {
-                            throw new Error("passkey_required");
-                        }
-                        if (!dekInfo.rp_id) {
-                            throw new Error("webauthn_rp_id_not_configured");
-                        }
-                        challenge = crypto.getRandomValues(new Uint8Array(32));
                         return [
                             4,
-                            navigator.credentials.get({
-                                publicKey: {
-                                    challenge: challenge,
-                                    // Configured `webauthn.rp_id` (apex), not the page hostname,
-                                    // so credentials registered under the apex are surfaced even
-                                    // when the SDK is running on a subdomain.
-                                    rpId: dekInfo.rp_id,
-                                    userVerification: "preferred",
-                                    allowCredentials: []
-                                }
+                            getInternalPresenceTokens4({
+                                transport: transport,
+                                passkey: createWebAuthnPasskey5(),
+                                publishableKey: publishableKey,
+                                relyingPartyOrigin: window.location.origin,
+                                scopes: ADD_PASSKEY_SCOPES
                             })
                         ];
                     case 3:
-                        credential = _state.sent();
-                        if (!credential) throw new Error("passkey_assertion_cancelled");
-                        assertion = credential.response;
-                        if (!assertion.userHandle) throw new Error("user_handle_missing");
-                        credentialIdB64url = bytesToB64url(new Uint8Array(credential.rawId));
+                        _ref = _state.sent(), userHandleB64url = _ref.userHandleB64url, credentialIdB64url = _ref.credentialIdB64url, tokens = _ref.tokens;
                         if (!allowList.includes(credentialIdB64url)) {
                             throw new Error("unknown_passkey_for_this_account");
                         }
                         unlockResult.current = {
-                            userHandleB64url: bytesToB64url(new Uint8Array(assertion.userHandle)),
-                            credentialIdB64url: credentialIdB64url
+                            userHandleB64url: userHandleB64url,
+                            credentialIdB64url: credentialIdB64url,
+                            presenceTokens: flattenPresenceTokens4({
+                                tokens: tokens,
+                                userHandleB64url: userHandleB64url,
+                                credentialIdB64url: credentialIdB64url
+                            })
                         };
                         setStep("enroll-prompt");
                         return [
@@ -3936,7 +4162,11 @@ var AddPasskey = function AddPasskey(param) {
                                 publishableKey: publishableKey,
                                 relyingPartyOrigin: window.location.origin,
                                 token: beginResult.token,
-                                credential: newCredential
+                                credential: newCredential,
+                                // passkey_enroll token from the unlock assertion. Server's
+                                // RequirePresenceUnlessFirstCredential middleware enforces
+                                // presence on second-and-onwards enrollments.
+                                presenceTokens: unlockResult.current.presenceTokens
                             })
                         ];
                     case 4:
@@ -3949,7 +4179,11 @@ var AddPasskey = function AddPasskey(param) {
                                 unlockUserHandleB64url: unlockResult.current.userHandleB64url,
                                 unlockCredentialIdB64url: unlockResult.current.credentialIdB64url,
                                 newUserHandleB64url: newUserHandleB64url,
-                                newCredentialIdB64url: newCredentialIdB64url
+                                newCredentialIdB64url: newCredentialIdB64url,
+                                // wrap_add token from the unlock assertion. Single-use; once
+                                // /auth/wallet/wraps POST consumes it, replay is rejected by
+                                // the jti burn table.
+                                presenceTokens: unlockResult.current.presenceTokens
                             })
                         ];
                     case 5:
@@ -4256,7 +4490,7 @@ var formatCurrency = function formatCurrency(value) {
 // src/components/flows/email-otp-flow/email-otp-input.tsx
 import { Fragment as Fragment2, jsx as jsx17, jsxs as jsxs11 } from "react/jsx-runtime";
 var EmailOtpInput = function EmailOtpInput(param) {
-    var publishableKey = param.publishableKey, expiresIn = param.expiresIn, prefillEmail = param.prefillEmail, onSuccess = param.onSuccess, onError = param.onError;
+    var publishableKey = param.publishableKey, prefillEmail = param.prefillEmail, onSuccess = param.onSuccess, onError = param.onError;
     var _useState12 = _sliced_to_array(useState12(false), 2), isProcessing = _useState12[0], setIsProcessing = _useState12[1];
     var _useState121 = _sliced_to_array(useState12(prefillEmail || ""), 2), email = _useState121[0], setEmail = _useState121[1];
     var _useState122 = _sliced_to_array(useState12(false), 2), hasPrefetched = _useState122[0], setHasPrefetched = _useState122[1];
@@ -4291,13 +4525,12 @@ var EmailOtpInput = function EmailOtpInput(param) {
     };
     var handleEmailSubmit = function handleEmailSubmit() {
         return _async_to_generator(function() {
-            var client, error;
+            var client, response, error, errorObj;
             return _ts_generator(this, function(_state) {
                 switch(_state.label){
                     case 0:
                         if (!isEmailValid) return [
-                            3,
-                            4
+                            2
                         ];
                         setIsProcessing(true);
                         _state.label = 1;
@@ -4305,8 +4538,8 @@ var EmailOtpInput = function EmailOtpInput(param) {
                         _state.trys.push([
                             1,
                             3,
-                            ,
-                            4
+                            4,
+                            5
                         ]);
                         client = getIframeClient(publishableKey);
                         if (!client) {
@@ -4319,27 +4552,34 @@ var EmailOtpInput = function EmailOtpInput(param) {
                             4,
                             client.send(PostMessageType13.AUTH, PostMessageMethod12.LOGIN_CREATE, {
                                 publishableKey: publishableKey,
-                                email: email,
-                                expiresIn: expiresIn
+                                email: email
                             })
                         ];
                     case 2:
-                        _state.sent();
-                        onSuccess(email);
+                        response = _state.sent();
+                        onSuccess({
+                            email: email,
+                            expires_at: response === null || response === void 0 ? void 0 : response.expires_at
+                        });
                         return [
                             3,
-                            4
+                            5
                         ];
                     case 3:
                         error = _state.sent();
                         console.error("Failed to send OTP:", error);
-                        setIsProcessing(false);
-                        onError(error);
+                        errorObj = _instanceof(error, Error) ? error : new Error(String(error));
+                        onError(errorObj);
                         return [
                             3,
-                            4
+                            5
                         ];
                     case 4:
+                        setIsProcessing(false);
+                        return [
+                            7
+                        ];
+                    case 5:
                         return [
                             2
                         ];
@@ -4760,16 +5000,17 @@ var i18n_default = i18n;
 // src/components/flows/email-otp-flow/email-otp-verify.tsx
 import { Fragment as Fragment3, jsx as jsx18, jsxs as jsxs12 } from "react/jsx-runtime";
 var EmailOtpVerify = function EmailOtpVerify(param) {
-    var config = param.config, publishableKey = param.publishableKey, language = param.language, expiresIn = param.expiresIn, emailOtpSendResponse = param.emailOtpSendResponse, onSuccess = param.onSuccess, onBackPress = param.onBackPress, onFlowStateChange = param.onFlowStateChange, propsIsDark = param.isDark;
+    var config = param.config, publishableKey = param.publishableKey, language = param.language, emailOtpSendResponse = param.emailOtpSendResponse, onSuccess = param.onSuccess, onBackPress = param.onBackPress, onFlowStateChange = param.onFlowStateChange, propsIsDark = param.isDark;
     var _ref;
     var _config_config, _config_config_appearance, _config_config1, _config_config_appearance1, _config_config2, _config_config3, _config_config4, _config_config_emailConfig, _config_config5, _config_config_emailConfig1, _config_config6;
     var _useState13 = _sliced_to_array(useState13(""), 2), otp = _useState13[0], setOtp = _useState13[1];
     var _useState131 = _sliced_to_array(useState13(false), 2), isLoading = _useState131[0], setIsLoading = _useState131[1];
     var _useState132 = _sliced_to_array(useState13(false), 2), isResending = _useState132[0], setIsResending = _useState132[1];
-    var _useState133 = _sliced_to_array(useState13(expiresIn !== null && expiresIn !== void 0 ? expiresIn : DEFAULT_COUNTDOWN_TIME), 2), countdown = _useState133[0], setCountdown = _useState133[1];
-    var _useState134 = _sliced_to_array(useState13(false), 2), canResend = _useState134[0], setCanResend = _useState134[1];
+    var _useState133 = _sliced_to_array(useState13(false), 2), canResend = _useState133[0], setCanResend = _useState133[1];
+    var _useState134 = _sliced_to_array(useState13(0), 2), resendCooldownEpoch = _useState134[0], setResendCooldownEpoch = _useState134[1];
     var _useState135 = _sliced_to_array(useState13("idle"), 2), validationState = _useState135[0], setValidationState = _useState135[1];
     var _useState136 = _sliced_to_array(useState13(""), 2), errorMessage = _useState136[0], setErrorMessage = _useState136[1];
+    var _useState137 = _sliced_to_array(useState13(null), 2), resendError = _useState137[0], setResendError = _useState137[1];
     var t = useTranslation().t;
     var isDark = propsIsDark !== void 0 ? propsIsDark : isDarkMode(config === null || config === void 0 ? void 0 : (_config_config = config.config) === null || _config_config === void 0 ? void 0 : _config_config.theme, config === null || config === void 0 ? void 0 : (_config_config1 = config.config) === null || _config_config1 === void 0 ? void 0 : (_config_config_appearance = _config_config1.appearance) === null || _config_config_appearance === void 0 ? void 0 : _config_config_appearance.displayMode, config === null || config === void 0 ? void 0 : (_config_config2 = config.config) === null || _config_config2 === void 0 ? void 0 : (_config_config_appearance1 = _config_config2.appearance) === null || _config_config_appearance1 === void 0 ? void 0 : _config_config_appearance1.backgroundColor);
     useEffect9(function() {
@@ -4779,39 +5020,20 @@ var EmailOtpVerify = function EmailOtpVerify(param) {
     }, [
         language
     ]);
-    useEffect9(function() {
-        if (countdown * 60 > 0) {
-            var timer = setTimeout(function() {
-                setCountdown(countdown * 60 - 1);
-            }, 1e3);
-            return function() {
-                return clearTimeout(timer);
-            };
-        } else {
-            setCanResend(true);
-        }
-    }, [
-        countdown
-    ]);
     var calculateResendCodeTime = function calculateResendCodeTime() {
         var _ref;
         var _config_config_emailConfig, _config_config;
         var resendCodeTime = (_ref = config === null || config === void 0 ? void 0 : (_config_config = config.config) === null || _config_config === void 0 ? void 0 : (_config_config_emailConfig = _config_config.emailConfig) === null || _config_config_emailConfig === void 0 ? void 0 : _config_config_emailConfig.resendCodeTime) !== null && _ref !== void 0 ? _ref : DEFAULT_COUNTDOWN_TIME;
-        if (resendCodeTime && resendCodeTime > 1) {
-            return resendCodeTime * 60;
-        }
-        return DEFAULT_COUNTDOWN_TIME * 60;
+        return resendCodeTime > 0 ? resendCodeTime : DEFAULT_COUNTDOWN_TIME;
     };
     var handleResendCode = function handleResendCode() {
         return _async_to_generator(function() {
-            var client, error;
+            var client, error, errorObj;
             return _ts_generator(this, function(_state) {
                 switch(_state.label){
                     case 0:
                         setIsResending(true);
-                        setValidationState("idle");
-                        setErrorMessage("");
-                        setOtp("");
+                        setResendError(null);
                         _state.label = 1;
                     case 1:
                         _state.trys.push([
@@ -4822,8 +5044,11 @@ var EmailOtpVerify = function EmailOtpVerify(param) {
                         ]);
                         client = getIframeClient(publishableKey);
                         if (!client) {
-                            setValidationState("error");
-                            setErrorMessage("Failed to resend OTP");
+                            setResendError("Failed to resend OTP");
+                            setResendCooldownEpoch(function(n) {
+                                return n + 1;
+                            });
+                            setCanResend(false);
                             return [
                                 2
                             ];
@@ -4832,13 +5057,17 @@ var EmailOtpVerify = function EmailOtpVerify(param) {
                             4,
                             client.send(PostMessageType14.AUTH, PostMessageMethod13.LOGIN_CREATE, {
                                 publishableKey: publishableKey,
-                                email: emailOtpSendResponse.email,
-                                expiresIn: expiresIn
+                                email: emailOtpSendResponse.email
                             })
                         ];
                     case 2:
                         _state.sent();
-                        setCountdown(calculateResendCodeTime());
+                        setOtp("");
+                        setValidationState("idle");
+                        setErrorMessage("");
+                        setResendCooldownEpoch(function(n) {
+                            return n + 1;
+                        });
                         setCanResend(false);
                         return [
                             3,
@@ -4846,8 +5075,16 @@ var EmailOtpVerify = function EmailOtpVerify(param) {
                         ];
                     case 3:
                         error = _state.sent();
-                        setValidationState("error");
-                        setErrorMessage("Failed to re-send OTP");
+                        errorObj = _instanceof(error, Error) ? error : new Error(String(error));
+                        setResendError(errorObj.message || "Failed to re-send OTP");
+                        setResendCooldownEpoch(function(n) {
+                            return n + 1;
+                        });
+                        setCanResend(false);
+                        onFlowStateChange === null || onFlowStateChange === void 0 ? void 0 : onFlowStateChange({
+                            status: "error",
+                            error: errorObj
+                        });
                         return [
                             3,
                             5
@@ -5060,12 +5297,10 @@ var EmailOtpVerify = function EmailOtpVerify(param) {
                                             ]
                                         })
                                     }),
-                                    validationState === "error" && /* @__PURE__ */ jsxs12("div", {
-                                        className: "moonkey-text--error moonkey-text--center",
-                                        children: [
-                                            "\u2717 ",
-                                            errorMessage
-                                        ]
+                                    validationState === "error" && /* @__PURE__ */ jsx18(ErrorBox, {
+                                        variant: "inline",
+                                        align: "center",
+                                        children: errorMessage
                                     }),
                                     canResend ? /* @__PURE__ */ jsxs12("div", {
                                         className: "moonkey-center-row",
@@ -5100,6 +5335,11 @@ var EmailOtpVerify = function EmailOtpVerify(param) {
                                         onComplete: function onComplete() {
                                             return setCanResend(true);
                                         }
+                                    }, resendCooldownEpoch),
+                                    resendError && /* @__PURE__ */ jsx18(ErrorBox, {
+                                        variant: "inline",
+                                        align: "center",
+                                        children: resendError
                                     })
                                 ]
                             })
@@ -5288,11 +5528,9 @@ var EmailOtpVerifyFlow = function EmailOtpVerifyFlow(param) {
         onComplete
     ]);
     if (currentStep === "verify") {
-        var _authConfig_config_emailConfig, _authConfig_config;
         return /* @__PURE__ */ jsx21(EmailOtpVerify, {
             config: authConfig,
             publishableKey: authConfig.publishableKey,
-            expiresIn: (_authConfig_config = authConfig.config) === null || _authConfig_config === void 0 ? void 0 : (_authConfig_config_emailConfig = _authConfig_config.emailConfig) === null || _authConfig_config_emailConfig === void 0 ? void 0 : _authConfig_config_emailConfig.expiresIn,
             emailOtpSendResponse: storedEmailOtpSendResponse,
             onSuccess: handleOtpVerifySuccess,
             onBackPress: onBackPress
@@ -5308,14 +5546,14 @@ var EmailOtpVerifyFlow = function EmailOtpVerifyFlow(param) {
 };
 // src/components/flows/export-key/export-key.tsx
 import { getIframeUrl as getIframeUrl2, PostMessageMethod as PostMessageMethod14, PostMessageType as PostMessageType15 } from "@moon-x/core/utils";
+import { flattenPresenceTokens as flattenPresenceTokens5, getInternalPresenceTokens as getInternalPresenceTokens5 } from "@moon-x/core/sdk";
+import { createWebAuthnPasskey as createWebAuthnPasskey6 } from "@moon-x/core/web";
 import { KeyRound as KeyRound2, ShieldOff, X } from "lucide-react";
 import { useEffect as useEffect11, useRef as useRef6, useState as useState15 } from "react";
 import { Fragment as Fragment4, jsx as jsx22, jsxs as jsxs15 } from "react/jsx-runtime";
-var bytesToB64url2 = function bytesToB64url2(bytes) {
-    var bin = "";
-    for(var i = 0; i < bytes.byteLength; i++)bin += String.fromCharCode(bytes[i]);
-    return btoa(bin).replace(/=/g, "").replace(/\+/g, "-").replace(/\//g, "_");
-};
+var EXPORT_KEY_SCOPES = [
+    "keyshare_read"
+];
 var ExportKey = function ExportKey(param) {
     var uiConfig = param.uiConfig, walletId = param.walletId, publishableKey = param.publishableKey, walletType = param.walletType, onCancel = param.onCancel, propsIsDark = param.isDark, propsAppConfig = param.appConfig, config = param.config;
     var _ref;
@@ -5429,7 +5667,7 @@ var ExportKey = function ExportKey(param) {
         }
         return themeVars;
     };
-    var getfinalIframeUrl = function getfinalIframeUrl(entropyType2, userHandleB64url, credentialIdB64url) {
+    var getfinalIframeUrl = function getfinalIframeUrl(entropyType2, userHandleB64url, credentialIdB64url, keyshareReadToken) {
         var baseUrl = getIframeUrl2("/export-key");
         var url = new URL(baseUrl);
         url.searchParams.append("publishableKey", publishableKey);
@@ -5439,6 +5677,7 @@ var ExportKey = function ExportKey(param) {
         url.searchParams.append("displayMode", isDark ? "dark" : "light");
         url.searchParams.append("user_handle_b64url", userHandleB64url);
         url.searchParams.append("credential_id_b64url", credentialIdB64url);
+        url.searchParams.append("keyshare_read_token", keyshareReadToken);
         var themeVars = buildThemeParams();
         if (Object.keys(themeVars).length > 0) {
             url.searchParams.append("theme", JSON.stringify(themeVars));
@@ -5492,20 +5731,12 @@ var ExportKey = function ExportKey(param) {
     };
     var handleReveal = function handleReveal() {
         return _async_to_generator(function() {
-            var client, _dekInfo_allow_credential_ids_b64url, dekInfo, challenge, credential, assertion, err, msg;
+            var _dekInfo_allow_credential_ids_b64url, transport, dekInfo, allowList, _ref, userHandleB64url, credentialIdB64url, tokens, flat, err, msg;
             return _ts_generator(this, function(_state) {
                 switch(_state.label){
                     case 0:
                         setRevealError(null);
                         setIsRevealing(true);
-                        client = getIframeClient(publishableKey);
-                        if (!client) {
-                            setRevealError("SDK not initialized");
-                            setIsRevealing(false);
-                            return [
-                                2
-                            ];
-                        }
                         _state.label = 1;
                     case 1:
                         _state.trys.push([
@@ -5514,45 +5745,44 @@ var ExportKey = function ExportKey(param) {
                             5,
                             6
                         ]);
+                        transport = getIframeTransport();
                         return [
                             4,
-                            client.send(PostMessageType15.AUTH, PostMessageMethod14.GET_DEK_INFO, {
+                            transport.send(PostMessageType15.AUTH, PostMessageMethod14.GET_DEK_INFO, {
                                 publishableKey: publishableKey
                             })
                         ];
                     case 2:
                         dekInfo = _state.sent();
-                        if (((_dekInfo_allow_credential_ids_b64url = dekInfo.allow_credential_ids_b64url) !== null && _dekInfo_allow_credential_ids_b64url !== void 0 ? _dekInfo_allow_credential_ids_b64url : []).length === 0) {
-                            throw new Error("passkey_required");
-                        }
-                        if (!dekInfo.rp_id) {
-                            throw new Error("webauthn_rp_id_not_configured");
-                        }
-                        challenge = crypto.getRandomValues(new Uint8Array(32));
+                        allowList = (_dekInfo_allow_credential_ids_b64url = dekInfo.allow_credential_ids_b64url) !== null && _dekInfo_allow_credential_ids_b64url !== void 0 ? _dekInfo_allow_credential_ids_b64url : [];
                         return [
                             4,
-                            navigator.credentials.get({
-                                publicKey: {
-                                    challenge: challenge,
-                                    rpId: dekInfo.rp_id,
-                                    userVerification: "preferred",
-                                    allowCredentials: []
-                                }
+                            getInternalPresenceTokens5({
+                                transport: transport,
+                                passkey: createWebAuthnPasskey6(),
+                                publishableKey: publishableKey,
+                                relyingPartyOrigin: window.location.origin,
+                                scopes: EXPORT_KEY_SCOPES
                             })
                         ];
                     case 3:
-                        credential = _state.sent();
-                        if (!credential) throw new Error("passkey_assertion_cancelled");
-                        assertion = credential.response;
-                        if (!assertion.userHandle) throw new Error("user_handle_missing");
-                        setIframeUrl(getfinalIframeUrl("private_key", bytesToB64url2(new Uint8Array(assertion.userHandle)), bytesToB64url2(new Uint8Array(credential.rawId))));
+                        _ref = _state.sent(), userHandleB64url = _ref.userHandleB64url, credentialIdB64url = _ref.credentialIdB64url, tokens = _ref.tokens;
+                        if (!allowList.includes(credentialIdB64url)) {
+                            throw new Error("unknown_passkey_for_this_account");
+                        }
+                        flat = flattenPresenceTokens5({
+                            tokens: tokens,
+                            userHandleB64url: userHandleB64url,
+                            credentialIdB64url: credentialIdB64url
+                        });
+                        setIframeUrl(getfinalIframeUrl("private_key", userHandleB64url, credentialIdB64url, flat.keyshare_read));
                         return [
                             3,
                             6
                         ];
                     case 4:
                         err = _state.sent();
-                        msg = _instanceof(err, Error) ? err.name === "NotAllowedError" ? "Passkey prompt was cancelled. Click Reveal Key to retry." : err.message === "passkey_required" ? "Enroll a passkey first." : err.message === "user_handle_missing" ? "Your authenticator didn't return a user handle. Pick a different passkey." : err.message : "Couldn't unlock the export.";
+                        msg = _instanceof(err, Error) ? err.name === "NotAllowedError" ? "Passkey prompt was cancelled. Click Reveal Key to retry." : err.message === "passkey_required" ? "Enroll a passkey first." : err.message === "user_handle_missing" ? "Your authenticator didn't return a user handle. Pick a different passkey." : err.message === "unknown_passkey_for_this_account" ? "That passkey isn't recognized for your account on this device. It may belong to a different account. Try again and pick one of your registered passkeys." : err.message : "Couldn't unlock the export.";
                         setRevealError(msg);
                         return [
                             3,
@@ -7018,11 +7248,17 @@ var FundingFlow = function FundingFlow(param) {
 };
 // src/components/flows/import-wallet/import-wallet.tsx
 import { PostMessageMethod as PostMessageMethod15, PostMessageType as PostMessageType16 } from "@moon-x/core";
+import { flattenPresenceTokens as flattenPresenceTokens6, getInternalPresenceTokens as getInternalPresenceTokens6 } from "@moon-x/core/sdk";
+import { createWebAuthnPasskey as createWebAuthnPasskey7 } from "@moon-x/core/web";
 import { CheckCircle2 as CheckCircle23, X as X5 } from "lucide-react";
 import { useState as useState21 } from "react";
 import { jsx as jsx32, jsxs as jsxs24 } from "react/jsx-runtime";
+var IMPORT_KEY_SCOPES2 = [
+    "dek_bootstrap",
+    "keyshare_write"
+];
 var ImportWallet = function ImportWallet(param) {
-    var publishableKey = param.publishableKey, walletType = param.walletType, uiConfig = param.uiConfig, userHandleB64url = param.userHandleB64url, credentialIdB64url = param.credentialIdB64url, onComplete = param.onComplete, onCancel = param.onCancel, propsIsDark = param.isDark, config = param.config;
+    var publishableKey = param.publishableKey, walletType = param.walletType, uiConfig = param.uiConfig, onComplete = param.onComplete, onCancel = param.onCancel, propsIsDark = param.isDark, config = param.config;
     var _ref, _ref1, _ref2, _ref3, _ref4, _ref5;
     var _config_config, _config_config_appearance, _config_config1, _config_config_appearance1, _config_config2, _config_config3, _config_config4;
     var t = useTranslation().t;
@@ -7039,7 +7275,7 @@ var ImportWallet = function ImportWallet(param) {
     var successText = (_ref5 = uiConfig === null || uiConfig === void 0 ? void 0 : uiConfig.successText) !== null && _ref5 !== void 0 ? _ref5 : "Wallet imported";
     var handleSubmit = function handleSubmit() {
         return _async_to_generator(function() {
-            var trimmed, _ref, client, response, wallet, err, raw, friendly;
+            var trimmed, _ref, client, _ref1, userHandleB64url, credentialIdB64url, tokens, presenceTokens, response, wallet, err, raw, friendly;
             return _ts_generator(this, function(_state) {
                 switch(_state.label){
                     case 0:
@@ -7056,9 +7292,9 @@ var ImportWallet = function ImportWallet(param) {
                     case 1:
                         _state.trys.push([
                             1,
-                            3,
                             4,
-                            5
+                            5,
+                            6
                         ]);
                         client = getIframeClient(publishableKey);
                         if (!client) {
@@ -7067,19 +7303,35 @@ var ImportWallet = function ImportWallet(param) {
                                 2
                             ];
                         }
+                        return [
+                            4,
+                            getInternalPresenceTokens6({
+                                transport: getIframeTransport(),
+                                passkey: createWebAuthnPasskey7(),
+                                publishableKey: publishableKey,
+                                relyingPartyOrigin: window.location.origin,
+                                scopes: IMPORT_KEY_SCOPES2
+                            })
+                        ];
+                    case 2:
+                        _ref1 = _state.sent(), userHandleB64url = _ref1.userHandleB64url, credentialIdB64url = _ref1.credentialIdB64url, tokens = _ref1.tokens;
+                        presenceTokens = flattenPresenceTokens6({
+                            tokens: tokens,
+                            userHandleB64url: userHandleB64url,
+                            credentialIdB64url: credentialIdB64url
+                        });
                         return [
                             4,
                             client.send(PostMessageType16.WALLET, PostMessageMethod15.IMPORT_KEY, {
                                 walletType: walletType,
                                 key: trimmed,
                                 publishableKey: publishableKey,
-                                // Parent-asserted passkey userHandle — see ImportWalletProps
-                                // for context.
                                 userHandleB64url: userHandleB64url,
-                                credentialIdB64url: credentialIdB64url
+                                credentialIdB64url: credentialIdB64url,
+                                presenceTokens: presenceTokens
                             })
                         ];
-                    case 2:
+                    case 3:
                         response = _state.sent();
                         wallet = (_ref = response === null || response === void 0 ? void 0 : response.data) !== null && _ref !== void 0 ? _ref : response;
                         if (!wallet || !wallet.public_address) {
@@ -7093,23 +7345,23 @@ var ImportWallet = function ImportWallet(param) {
                         onComplete(wallet);
                         return [
                             3,
-                            5
+                            6
                         ];
-                    case 3:
+                    case 4:
                         err = _state.sent();
                         raw = _instanceof(err, Error) ? err.message : String(err);
                         friendly = raw === "passkey_required" ? "A passkey is required before importing a wallet. Register one first." : raw;
                         setErrorMessage(friendly);
                         return [
                             3,
-                            5
+                            6
                         ];
-                    case 4:
+                    case 5:
                         setSubmitting(false);
                         return [
                             7
                         ];
-                    case 5:
+                    case 6:
                         return [
                             2
                         ];
@@ -12153,7 +12405,7 @@ var TermsAndPrivacy = function TermsAndPrivacy(param) {
 import { jsx as jsx51, jsxs as jsxs41 } from "react/jsx-runtime";
 var LoginLanding = function LoginLanding(param) {
     var config = param.config, onCancel = param.onCancel, onMethodSelect = param.onMethodSelect, _param_embedded = param.embedded, embedded = _param_embedded === void 0 ? false : _param_embedded, _param_hideClose = param.hideClose, hideClose = _param_hideClose === void 0 ? false : _param_hideClose, propsIsDark = param.isDark, propsAppConfig = param.appConfig;
-    var _config_config, _config_config_appearance, _config_config1, _config_config_appearance1, _config_config2, _config_config3, _config_config4, _appConfig_privacy_policy_url, _appConfig_terms_of_service_url, _config_config5, _config_config6, _config_config_appearance_loginHeaderTitle, _config_config_appearance2, _config_config7, _config_config_appearance3, _config_config8, _config_config_appearance4, _config_config9, _config_config_appearance5, _config_config10, _config_config_emailConfig, _config_config11, _config_config_prefill, _config_config12, _config_config_prefill1, _config_config13;
+    var _config_config, _config_config_appearance, _config_config1, _config_config_appearance1, _config_config2, _config_config3, _config_config4, _appConfig_privacy_policy_url, _appConfig_terms_of_service_url, _config_config5, _config_config6, _config_config_appearance_loginHeaderTitle, _config_config_appearance2, _config_config7, _config_config_appearance3, _config_config8, _config_config_appearance4, _config_config9, _config_config_appearance5, _config_config10, _config_config_prefill, _config_config11, _config_config_prefill1, _config_config12;
     var _useAppConfig = useAppConfig(propsAppConfig ? void 0 : config === null || config === void 0 ? void 0 : config.publishableKey), fetchedAppConfig = _useAppConfig.appConfig;
     var appConfig = propsAppConfig || fetchedAppConfig;
     var t = useTranslation().t;
@@ -12194,20 +12446,23 @@ var LoginLanding = function LoginLanding(param) {
         }
     };
     var _React16_useState = _sliced_to_array(React16.useState(false), 2), acceptedTerms = _React16_useState[0], setAcceptedTerms = _React16_useState[1];
+    var _React16_useState1 = _sliced_to_array(React16.useState(null), 2), loginError = _React16_useState1[0], setLoginError = _React16_useState1[1];
     var hasAnyTermsUrl = !!(appConfig === null || appConfig === void 0 ? void 0 : (_appConfig_privacy_policy_url = appConfig.privacy_policy_url) === null || _appConfig_privacy_policy_url === void 0 ? void 0 : _appConfig_privacy_policy_url.startsWith("https://")) || !!(appConfig === null || appConfig === void 0 ? void 0 : (_appConfig_terms_of_service_url = appConfig.terms_of_service_url) === null || _appConfig_terms_of_service_url === void 0 ? void 0 : _appConfig_terms_of_service_url.startsWith("https://"));
     var requireTerms = (appConfig === null || appConfig === void 0 ? void 0 : appConfig.require_users_accept_terms) === true && hasAnyTermsUrl;
     var loginGated = requireTerms && !acceptedTerms;
     var handleSocialLogin = function handleSocialLogin(provider) {
         return _async_to_generator(function() {
-            var client, data, redirectUrl, url, popup, handleMessage, error;
+            var client, data, redirectUrl, url, popup, handleMessage, error, message;
             return _ts_generator(this, function(_state) {
                 switch(_state.label){
                     case 0:
                         if (loginGated) return [
                             2
                         ];
+                        setLoginError(null);
                         client = getIframeClient(config === null || config === void 0 ? void 0 : config.publishableKey);
                         if (!client) {
+                            setLoginError("Sign-in is not ready yet \u2014 please reload the page and try again.");
                             return [
                                 2
                             ];
@@ -12240,7 +12495,7 @@ var LoginLanding = function LoginLanding(param) {
                         }
                         popup = window.open(redirectUrl, "_self");
                         if (!popup) {
-                            console.error("Popup blocked");
+                            setLoginError("Your browser blocked the sign-in window. Please allow popups for this site and try again.");
                             return [
                                 2
                             ];
@@ -12262,6 +12517,8 @@ var LoginLanding = function LoginLanding(param) {
                     case 3:
                         error = _state.sent();
                         console.error("OAuth failed:", error);
+                        message = _instanceof(error, Error) ? error.message : "Sign-in failed. Please try again.";
+                        setLoginError(message);
                         return [
                             3,
                             4
@@ -12336,15 +12593,15 @@ var LoginLanding = function LoginLanding(param) {
                                 children: [
                                     showEmail && /* @__PURE__ */ jsx51(EmailOtpInput, {
                                         publishableKey: (config === null || config === void 0 ? void 0 : config.publishableKey) || "",
-                                        expiresIn: config === null || config === void 0 ? void 0 : (_config_config11 = config.config) === null || _config_config11 === void 0 ? void 0 : (_config_config_emailConfig = _config_config11.emailConfig) === null || _config_config_emailConfig === void 0 ? void 0 : _config_config_emailConfig.expiresIn,
-                                        prefillEmail: (config === null || config === void 0 ? void 0 : (_config_config12 = config.config) === null || _config_config12 === void 0 ? void 0 : (_config_config_prefill = _config_config12.prefill) === null || _config_config_prefill === void 0 ? void 0 : _config_config_prefill.type) === "email" ? config === null || config === void 0 ? void 0 : (_config_config13 = config.config) === null || _config_config13 === void 0 ? void 0 : (_config_config_prefill1 = _config_config13.prefill) === null || _config_config_prefill1 === void 0 ? void 0 : _config_config_prefill1.value : void 0,
-                                        onSuccess: function onSuccess(email) {
+                                        prefillEmail: (config === null || config === void 0 ? void 0 : (_config_config11 = config.config) === null || _config_config11 === void 0 ? void 0 : (_config_config_prefill = _config_config11.prefill) === null || _config_config_prefill === void 0 ? void 0 : _config_config_prefill.type) === "email" ? config === null || config === void 0 ? void 0 : (_config_config12 = config.config) === null || _config_config12 === void 0 ? void 0 : (_config_config_prefill1 = _config_config12.prefill) === null || _config_config_prefill1 === void 0 ? void 0 : _config_config_prefill1.value : void 0,
+                                        onSuccess: function onSuccess(response) {
                                             if (loginGated) return;
-                                            onMethodSelect === null || onMethodSelect === void 0 ? void 0 : onMethodSelect("email", {
-                                                email: email
-                                            });
+                                            setLoginError(null);
+                                            onMethodSelect === null || onMethodSelect === void 0 ? void 0 : onMethodSelect("email", response);
                                         },
-                                        onError: function onError() {}
+                                        onError: function onError(err) {
+                                            return setLoginError(err.message);
+                                        }
                                     }),
                                     /* @__PURE__ */ jsxs41("div", {
                                         className: "moonkey-social-buttons moonkey-flex-col",
@@ -12370,6 +12627,11 @@ var LoginLanding = function LoginLanding(param) {
                                     })
                                 ]
                             }),
+                            loginError && /* @__PURE__ */ jsx51(ErrorBox, {
+                                variant: "inline",
+                                align: "center",
+                                children: loginError
+                            }),
                             /* @__PURE__ */ jsx51(TermsAndPrivacy, {
                                 appConfig: appConfig,
                                 accepted: acceptedTerms,
@@ -13658,7 +13920,7 @@ var SendEthereumTransactionFlow = function SendEthereumTransactionFlow(param) {
     };
     var handleSend = function handleSend() {
         return _async_to_generator(function() {
-            var _options_uiOptions, client, _ref, userHandleB64url, credentialIdB64url, signed, broadcastResponse, broadcast, hash, parentClient, error;
+            var _options_uiOptions, client, _ref, userHandleB64url, credentialIdB64url, presenceTokens, signed, broadcastResponse, broadcast, hash, parentClient, error;
             return _ts_generator(this, function(_state) {
                 switch(_state.label){
                     case 0:
@@ -13681,7 +13943,7 @@ var SendEthereumTransactionFlow = function SendEthereumTransactionFlow(param) {
                             onAssertPasskey()
                         ];
                     case 1:
-                        _ref = _state.sent(), userHandleB64url = _ref.userHandleB64url, credentialIdB64url = _ref.credentialIdB64url;
+                        _ref = _state.sent(), userHandleB64url = _ref.userHandleB64url, credentialIdB64url = _ref.credentialIdB64url, presenceTokens = _ref.presenceTokens;
                         return [
                             4,
                             client.send(PostMessageType22.WALLET, PostMessageMethod21.SIGN_TRANSACTION, {
@@ -13690,7 +13952,8 @@ var SendEthereumTransactionFlow = function SendEthereumTransactionFlow(param) {
                                 wallet: wallet,
                                 options: options,
                                 userHandleB64url: userHandleB64url,
-                                credentialIdB64url: credentialIdB64url
+                                credentialIdB64url: credentialIdB64url,
+                                presenceTokens: presenceTokens
                             })
                         ];
                     case 2:
@@ -14643,7 +14906,7 @@ var SendTransactionFlow = function SendTransactionFlow(param) {
     };
     var handleSign = function handleSign() {
         return _async_to_generator(function() {
-            var _options_uiOptions, client, _ref, userHandleB64url, credentialIdB64url, signed, bs58, transactionBytes, base64Transaction, broadcastResponse, broadcast, parentClient, error;
+            var _options_uiOptions, client, _ref, userHandleB64url, credentialIdB64url, presenceTokens, signed, bs58, transactionBytes, base64Transaction, broadcastResponse, broadcast, parentClient, error;
             return _ts_generator(this, function(_state) {
                 switch(_state.label){
                     case 0:
@@ -14664,7 +14927,7 @@ var SendTransactionFlow = function SendTransactionFlow(param) {
                             onAssertPasskey()
                         ];
                     case 1:
-                        _ref = _state.sent(), userHandleB64url = _ref.userHandleB64url, credentialIdB64url = _ref.credentialIdB64url;
+                        _ref = _state.sent(), userHandleB64url = _ref.userHandleB64url, credentialIdB64url = _ref.credentialIdB64url, presenceTokens = _ref.presenceTokens;
                         return [
                             4,
                             client.send(PostMessageType24.WALLET, PostMessageMethod23.SIGN_TRANSACTION, {
@@ -14672,7 +14935,8 @@ var SendTransactionFlow = function SendTransactionFlow(param) {
                                 serializedTransaction: sendTransactionRequest.transaction,
                                 wallet: wallet,
                                 userHandleB64url: userHandleB64url,
-                                credentialIdB64url: credentialIdB64url
+                                credentialIdB64url: credentialIdB64url,
+                                presenceTokens: presenceTokens
                             })
                         ];
                     case 2:
@@ -14920,7 +15184,7 @@ var Sign7702Authorization = function Sign7702Authorization(param) {
     };
     var handleSign = function handleSign() {
         return _async_to_generator(function() {
-            var _options_uiOptions, client, _ref, userHandleB64url, credentialIdB64url, result, parentClient, error;
+            var _options_uiOptions, client, _ref, userHandleB64url, credentialIdB64url, presenceTokens, result, parentClient, error;
             return _ts_generator(this, function(_state) {
                 switch(_state.label){
                     case 0:
@@ -14946,7 +15210,7 @@ var Sign7702Authorization = function Sign7702Authorization(param) {
                             onAssertPasskey()
                         ];
                     case 2:
-                        _ref = _state.sent(), userHandleB64url = _ref.userHandleB64url, credentialIdB64url = _ref.credentialIdB64url;
+                        _ref = _state.sent(), userHandleB64url = _ref.userHandleB64url, credentialIdB64url = _ref.credentialIdB64url, presenceTokens = _ref.presenceTokens;
                         return [
                             4,
                             client.send(PostMessageType25.WALLET, PostMessageMethod24.SIGN_7702_AUTHORIZATION, {
@@ -14958,7 +15222,8 @@ var Sign7702Authorization = function Sign7702Authorization(param) {
                                 options: options,
                                 wallet: wallet,
                                 userHandleB64url: userHandleB64url,
-                                credentialIdB64url: credentialIdB64url
+                                credentialIdB64url: credentialIdB64url,
+                                presenceTokens: presenceTokens
                             })
                         ];
                     case 3:
@@ -15275,7 +15540,7 @@ var SignMessage = function SignMessage(param) {
     };
     var handleSign = function handleSign() {
         return _async_to_generator(function() {
-            var client, _ref, userHandleB64url, credentialIdB64url, result, processedResponse, parentClient, error;
+            var client, _ref, userHandleB64url, credentialIdB64url, presenceTokens, result, processedResponse, parentClient, error;
             return _ts_generator(this, function(_state) {
                 switch(_state.label){
                     case 0:
@@ -15301,7 +15566,7 @@ var SignMessage = function SignMessage(param) {
                             onAssertPasskey()
                         ];
                     case 2:
-                        _ref = _state.sent(), userHandleB64url = _ref.userHandleB64url, credentialIdB64url = _ref.credentialIdB64url;
+                        _ref = _state.sent(), userHandleB64url = _ref.userHandleB64url, credentialIdB64url = _ref.credentialIdB64url, presenceTokens = _ref.presenceTokens;
                         return [
                             4,
                             client.send(PostMessageType26.WALLET, PostMessageMethod25.SIGN_MESSAGE, {
@@ -15310,7 +15575,8 @@ var SignMessage = function SignMessage(param) {
                                 uiOptions: uiOptions,
                                 wallet: wallet,
                                 userHandleB64url: userHandleB64url,
-                                credentialIdB64url: credentialIdB64url
+                                credentialIdB64url: credentialIdB64url,
+                                presenceTokens: presenceTokens
                             })
                         ];
                     case 3:
@@ -15602,7 +15868,7 @@ var SignTransaction = function SignTransaction(param) {
     };
     var handleSign = function handleSign() {
         return _async_to_generator(function() {
-            var _options_uiOptions, client, _ref, userHandleB64url, credentialIdB64url, result, parentClient, error;
+            var _options_uiOptions, client, _ref, userHandleB64url, credentialIdB64url, presenceTokens, result, parentClient, error;
             return _ts_generator(this, function(_state) {
                 switch(_state.label){
                     case 0:
@@ -15628,7 +15894,7 @@ var SignTransaction = function SignTransaction(param) {
                             onAssertPasskey()
                         ];
                     case 2:
-                        _ref = _state.sent(), userHandleB64url = _ref.userHandleB64url, credentialIdB64url = _ref.credentialIdB64url;
+                        _ref = _state.sent(), userHandleB64url = _ref.userHandleB64url, credentialIdB64url = _ref.credentialIdB64url, presenceTokens = _ref.presenceTokens;
                         return [
                             4,
                             client.send(PostMessageType27.WALLET, PostMessageMethod26.SIGN_TRANSACTION, {
@@ -15639,7 +15905,8 @@ var SignTransaction = function SignTransaction(param) {
                                 // Parent-asserted passkey userHandle — see sign-message.tsx
                                 // for context.
                                 userHandleB64url: userHandleB64url,
-                                credentialIdB64url: credentialIdB64url
+                                credentialIdB64url: credentialIdB64url,
+                                presenceTokens: presenceTokens
                             })
                         ];
                     case 3:
@@ -15943,7 +16210,7 @@ var SignTypedData = function SignTypedData(param) {
     };
     var handleSign = function handleSign() {
         return _async_to_generator(function() {
-            var _options_uiOptions, client, _ref, userHandleB64url, credentialIdB64url, result, parentClient, error;
+            var _options_uiOptions, client, _ref, userHandleB64url, credentialIdB64url, presenceTokens, result, parentClient, error;
             return _ts_generator(this, function(_state) {
                 switch(_state.label){
                     case 0:
@@ -15969,7 +16236,7 @@ var SignTypedData = function SignTypedData(param) {
                             onAssertPasskey()
                         ];
                     case 2:
-                        _ref = _state.sent(), userHandleB64url = _ref.userHandleB64url, credentialIdB64url = _ref.credentialIdB64url;
+                        _ref = _state.sent(), userHandleB64url = _ref.userHandleB64url, credentialIdB64url = _ref.credentialIdB64url, presenceTokens = _ref.presenceTokens;
                         return [
                             4,
                             client.send(PostMessageType28.WALLET, PostMessageMethod27.SIGN_TYPED_DATA, {
@@ -15981,7 +16248,8 @@ var SignTypedData = function SignTypedData(param) {
                                 options: options,
                                 wallet: wallet,
                                 userHandleB64url: userHandleB64url,
-                                credentialIdB64url: credentialIdB64url
+                                credentialIdB64url: credentialIdB64url,
+                                presenceTokens: presenceTokens
                             })
                         ];
                     case 3:
@@ -17117,8 +17385,6 @@ var AuthFlowRenderer = function AuthFlowRenderer(param) {
                 return /* @__PURE__ */ jsx71(ImportWallet, {
                     publishableKey: authConfig.publishableKey,
                     walletType: walletType1,
-                    userHandleB64url: flowData === null || flowData === void 0 ? void 0 : flowData.userHandleB64url,
-                    credentialIdB64url: flowData === null || flowData === void 0 ? void 0 : flowData.credentialIdB64url,
                     onComplete: function onComplete(wallet) {
                         var _sdkInstance_getCurrentSuccessCallback;
                         var successCallback = sdkInstance === null || sdkInstance === void 0 ? void 0 : (_sdkInstance_getCurrentSuccessCallback = sdkInstance.getCurrentSuccessCallback) === null || _sdkInstance_getCurrentSuccessCallback === void 0 ? void 0 : _sdkInstance_getCurrentSuccessCallback.call(sdkInstance);
@@ -17227,12 +17493,17 @@ var AuthProvider = function AuthProvider(param) {
     }), 2), flowState = _useState515[0], setFlowState = _useState515[1];
     var _useState516 = _sliced_to_array(useState51(false), 2), isAuthenticated = _useState516[0], setIsAuthenticated = _useState516[1];
     var _useState517 = _sliced_to_array(useState51(null), 2), user = _useState517[0], setUser = _useState517[1];
-    var _useState518 = _sliced_to_array(useState51("landing"), 2), currentFlow = _useState518[0], setCurrentFlow = _useState518[1];
-    var _useState519 = _sliced_to_array(useState51(null), 2), flowData = _useState519[0], setFlowData = _useState519[1];
-    var _useState5110 = _sliced_to_array(useState51(null), 2), appConfig = _useState5110[0], setAppConfig = _useState5110[1];
-    var _useState5111 = _sliced_to_array(useState51(true), 2), isLoadingConfig = _useState5111[0], setIsLoadingConfig = _useState5111[1];
-    var _useState5112 = _sliced_to_array(useState51(false), 2), isIframeReady = _useState5112[0], setIsIframeReady = _useState5112[1];
-    var _useState5113 = _sliced_to_array(useState51(config === null || config === void 0 ? void 0 : config.appearance), 2), appearance = _useState5113[0], setAppearance = _useState5113[1];
+    var _useState518 = _sliced_to_array(useState51(0), 2), revalidatedAt = _useState518[0], setRevalidatedAt = _useState518[1];
+    var _useState519 = _sliced_to_array(useState51("landing"), 2), currentFlow = _useState519[0], setCurrentFlow = _useState519[1];
+    var _useState5110 = _sliced_to_array(useState51(null), 2), flowData = _useState5110[0], setFlowData = _useState5110[1];
+    var _useState5111 = _sliced_to_array(useState51(null), 2), appConfig = _useState5111[0], setAppConfig = _useState5111[1];
+    var _useState5112 = _sliced_to_array(useState51(true), 2), isLoadingConfig = _useState5112[0], setIsLoadingConfig = _useState5112[1];
+    var _useState5113 = _sliced_to_array(useState51(false), 2), isIframeReady = _useState5113[0], setIsIframeReady = _useState5113[1];
+    var _useState5114 = _sliced_to_array(useState51(function() {
+        if (typeof window === "undefined") return false;
+        return new URLSearchParams(window.location.search).has("token");
+    }), 1), hasOAuthCallbackToken = _useState5114[0];
+    var _useState5115 = _sliced_to_array(useState51(config === null || config === void 0 ? void 0 : config.appearance), 2), appearance = _useState5115[0], setAppearance = _useState5115[1];
     var authCheckCacheRef = useRef18(null);
     var AUTH_CACHE_TTL = 5e3;
     var initialAuthCheckDone = useRef18(false);
@@ -17535,6 +17806,7 @@ var AuthProvider = function AuthProvider(param) {
     ]);
     var handleAuthSuccess = useCallback11(function(response) {
         setIsAuthenticatedWithRef(true);
+        setIsReady(true);
         var rawUserData = (response === null || response === void 0 ? void 0 : response.data) || response;
         if ((rawUserData === null || rawUserData === void 0 ? void 0 : rawUserData.id_token) || (rawUserData === null || rawUserData === void 0 ? void 0 : rawUserData.idToken)) {
             var idToken = rawUserData.id_token || rawUserData.idToken;
@@ -17565,6 +17837,7 @@ var AuthProvider = function AuthProvider(param) {
     var handleOAuthError = useCallback11(function(error) {
         setStartFlow(false);
         setFlowData(null);
+        setIsReady(true);
         if (errorCallback) {
             errorCallback(error);
         }
@@ -17573,7 +17846,7 @@ var AuthProvider = function AuthProvider(param) {
     ]);
     useOAuthCallbackDetection({
         isMounted: isMounted,
-        isReady: isReady,
+        isIframeReady: isIframeReady,
         publishableKey: publishableKey,
         iframeRef: iframeRef,
         onOAuthSuccess: handleOAuthSuccess,
@@ -17613,6 +17886,10 @@ var AuthProvider = function AuthProvider(param) {
         var _iframeRef_current;
         if (!isIframeReady || !isMounted || !((_iframeRef_current = iframeRef.current) === null || _iframeRef_current === void 0 ? void 0 : _iframeRef_current.contentWindow)) return;
         if (initialAuthCheckDone.current) return;
+        if (hasOAuthCallbackToken) {
+            initialAuthCheckDone.current = true;
+            return;
+        }
         var checkAuthStatus = function checkAuthStatus() {
             return _async_to_generator(function() {
                 var iframeOrigin, client, response, isAuth, userData, rawUserData, error;
@@ -17691,7 +17968,8 @@ var AuthProvider = function AuthProvider(param) {
         isIframeReady,
         isMounted,
         publishableKey,
-        setIsAuthenticatedWithRef
+        setIsAuthenticatedWithRef,
+        hasOAuthCallbackToken
     ]);
     var prevStartFlowRef = useRef18(startFlow);
     useEffect34(function() {
@@ -17705,6 +17983,38 @@ var AuthProvider = function AuthProvider(param) {
         startFlow,
         recheckAuthStatus
     ]);
+    var recheckAuthStatusRef = useRef18(recheckAuthStatus);
+    useEffect34(function() {
+        recheckAuthStatusRef.current = recheckAuthStatus;
+    }, [
+        recheckAuthStatus
+    ]);
+    useEffect34(function() {
+        if (typeof window === "undefined" || typeof document === "undefined") {
+            return;
+        }
+        var trigger = function trigger() {
+            setRevalidatedAt(Date.now());
+            recheckAuthStatusRef.current(true);
+        };
+        var onVisibilityChange = function onVisibilityChange() {
+            if (document.visibilityState === "visible") trigger();
+        };
+        var onPageShow = function onPageShow() {
+            return trigger();
+        };
+        var onPopState = function onPopState() {
+            return trigger();
+        };
+        document.addEventListener("visibilitychange", onVisibilityChange);
+        window.addEventListener("pageshow", onPageShow);
+        window.addEventListener("popstate", onPopState);
+        return function() {
+            document.removeEventListener("visibilitychange", onVisibilityChange);
+            window.removeEventListener("pageshow", onPageShow);
+            window.removeEventListener("popstate", onPopState);
+        };
+    }, []);
     var onError = useCallback11(function(callback) {
         if (!isMounted) {
             return;
@@ -17885,6 +18195,7 @@ var AuthProvider = function AuthProvider(param) {
         sdkInstanceRef.current.isAuthenticated = isAuthenticated;
         sdkInstanceRef.current.user = user;
         sdkInstanceRef.current.refreshUser = refreshUser;
+        sdkInstanceRef.current.revalidatedAt = revalidatedAt;
         return sdkInstanceRef.current;
     }, [
         isMounted,
@@ -17895,7 +18206,8 @@ var AuthProvider = function AuthProvider(param) {
         isAuthenticated,
         user,
         setIsAuthenticatedWithRef,
-        refreshUser
+        refreshUser,
+        revalidatedAt
     ]);
     var iframeStyles = getIframeStyles(hideIframe, embeddableId);
     useCloseIframe(function() {
@@ -17984,7 +18296,7 @@ import { jsx as jsx73 } from "react/jsx-runtime";
 import { useContext as useContext4 } from "react";
 // src/provider.tsx
 import { createContext, useContext as useContext5, useEffect as useEffect36, useMemo as useMemo5, useRef as useRef19, useState as useState52 } from "react";
-import { setAssertCacheTtlMs, validateChainConfig } from "@moon-x/core/lib";
+import { validateChainConfig } from "@moon-x/core/lib";
 // src/wallets/walletconnect-client.ts
 var setWalletConnectClient = function setWalletConnectClient(client) {
     if (typeof window !== "undefined") {
@@ -18000,15 +18312,13 @@ var WalletConnectContext = createContext({
 var MoonKeyContext = createContext(null);
 var MoonKeyProvider = function MoonKeyProvider(param) {
     var publishableKey = param.publishableKey, embeddableId = param.embeddableId, config = param.config, children = param.children;
-    var _ref;
-    var _config_security, _config_walletConnect, _config_emailConfig, _config_emailConfig1, _config_emailConfig2, _config_emailConfig3, _config_emailConfig4, _config_emailConfig5;
+    var _config_walletConnect, _config_emailConfig, _config_emailConfig1, _config_emailConfig2, _config_emailConfig3, _config_emailConfig4;
     if ((config === null || config === void 0 ? void 0 : config.defaultChain) || (config === null || config === void 0 ? void 0 : config.supportedChains)) {
         validateChainConfig({
             defaultChain: config.defaultChain,
             supportedChains: config.supportedChains
         });
     }
-    setAssertCacheTtlMs((_ref = config === null || config === void 0 ? void 0 : (_config_security = config.security) === null || _config_security === void 0 ? void 0 : _config_security.assertionCacheTtlMs) !== null && _ref !== void 0 ? _ref : 0);
     var _useState52 = _sliced_to_array(useState52(null), 2), walletConnectClient = _useState52[0], setWalletConnectClient2 = _useState52[1];
     var _useState521 = _sliced_to_array(useState52(false), 2), isInitializing = _useState521[0], setIsInitializing = _useState521[1];
     var initializationAttempted = useRef19(false);
@@ -18105,11 +18415,10 @@ var MoonKeyProvider = function MoonKeyProvider(param) {
             theme: config === null || config === void 0 ? void 0 : config.theme,
             emailConfig: {
                 skipVerifiedSuccess: (config === null || config === void 0 ? void 0 : (_config_emailConfig = config.emailConfig) === null || _config_emailConfig === void 0 ? void 0 : _config_emailConfig.skipVerifiedSuccess) || false,
-                expiresIn: (config === null || config === void 0 ? void 0 : (_config_emailConfig1 = config.emailConfig) === null || _config_emailConfig1 === void 0 ? void 0 : _config_emailConfig1.expiresIn) || 10,
-                verifiedDisplayTime: (config === null || config === void 0 ? void 0 : (_config_emailConfig2 = config.emailConfig) === null || _config_emailConfig2 === void 0 ? void 0 : _config_emailConfig2.verifiedDisplayTime) || 3e3,
-                verifyEmailTitle: (config === null || config === void 0 ? void 0 : (_config_emailConfig3 = config.emailConfig) === null || _config_emailConfig3 === void 0 ? void 0 : _config_emailConfig3.verifyEmailTitle) || "Verify email",
-                verifyEmailResendTitle: (config === null || config === void 0 ? void 0 : (_config_emailConfig4 = config.emailConfig) === null || _config_emailConfig4 === void 0 ? void 0 : _config_emailConfig4.verifyEmailResendTitle) || "Resend code",
-                resendCodeTime: (config === null || config === void 0 ? void 0 : (_config_emailConfig5 = config.emailConfig) === null || _config_emailConfig5 === void 0 ? void 0 : _config_emailConfig5.resendCodeTime) || 60
+                verifiedDisplayTime: (config === null || config === void 0 ? void 0 : (_config_emailConfig1 = config.emailConfig) === null || _config_emailConfig1 === void 0 ? void 0 : _config_emailConfig1.verifiedDisplayTime) || 3e3,
+                verifyEmailTitle: (config === null || config === void 0 ? void 0 : (_config_emailConfig2 = config.emailConfig) === null || _config_emailConfig2 === void 0 ? void 0 : _config_emailConfig2.verifyEmailTitle) || "Verify email",
+                verifyEmailResendTitle: (config === null || config === void 0 ? void 0 : (_config_emailConfig3 = config.emailConfig) === null || _config_emailConfig3 === void 0 ? void 0 : _config_emailConfig3.verifyEmailResendTitle) || "Resend code",
+                resendCodeTime: (config === null || config === void 0 ? void 0 : (_config_emailConfig4 = config.emailConfig) === null || _config_emailConfig4 === void 0 ? void 0 : _config_emailConfig4.resendCodeTime) || 60
             },
             passkeyEnrollConfig: config === null || config === void 0 ? void 0 : config.passkeyEnrollConfig,
             signMessageConfig: config === null || config === void 0 ? void 0 : config.signMessageConfig,