@1shotapi/ows-signer 0.3.0 → 0.3.1

package/README.md

@@ -40,7 +40,7 @@ Only accepts messages when `event.source === window.parent`. Replies use the par
 | `createCredential` | `name`, `options?` (incl. ceremony UI) | `KeyDerived`, `CredentialCreated` |
 | `signDigest` | `digests[]`, `credentialId?`, ceremony UI? | `KeyDerived` (PRF path), `DigestSigned` (`results[]`) |
 | `executeBatch` | batch fields + ceremony UI? | `KeyDerived` (when keys derived), `BatchExecuted` |
-| `revealPrivateKey` | `credentialId?`, ceremony UI? | `KeyDerived` (+ DOM display) |
+| `revealPrivateKey` | `credentialId?`, ceremony UI? | `KeyDerived`, then `PrivateKeyRevealed` (after user dismisses DOM key UI) |
 | `createRecoveryData` | passphrase fields + ceremony UI? | `KeyDerived`, `RecoveryDataCreated` |
 | `recoverKey` | envelope + passphrase fields + ceremony UI? | DOM display; `RecoverySessionStarted` or re-bind → `RecoverySessionCleared` |
 | `getPublicKey` | `credentialId?`, `challenge?`, ceremony UI? | `KeyDerived`, `PublicKey`, `ChallengeSigned?` |

package/html/index.html

@@ -77,6 +77,12 @@
       flex-wrap: wrap;
       gap: 8px;
     }
+    .ows-actions {
+      flex: 0 0 auto;
+      display: flex;
+      flex-wrap: wrap;
+      gap: 8px;
+    }
     .ows-copy,
     .ows-confirm,
     .ows-deny {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@1shotapi/ows-signer",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "OWS Signing Layer — plain JavaScript WebAuthn PRF key custody with curve-based signing (on-chain via EIP-8244)",
   "type": "module",
   "files": [

package/src/handlers.js

@@ -445,9 +445,21 @@ async function handleRevealPrivateKey(params, correlationId, targetOrigin) {
       keys.secp256k1PublicKey,
       keys.ed25519PublicKey,
     );
-    showPrivateKey(keys.secp256k1PrivateKey);
-    zeroize(keys.secp256k1PrivateKey);
+    try {
+      const dismiss = showPrivateKey(keys.secp256k1PrivateKey);
+      zeroize(keys.secp256k1PrivateKey);
+      await dismiss;
+    } finally {
+      zeroize(keys.secp256k1PrivateKey);
+    }
   });
+  emitEvent(
+    window.parent,
+    targetOrigin,
+    "PrivateKeyRevealed",
+    correlationId,
+    {},
+  );
 }
 
 /**

package/src/ui.js

@@ -225,23 +225,43 @@ export function promptCeremonyConfirm(fields, runOnConfirm) {
 }
 
 /**
+ * Show the private key hex with Copy + Done. Resolves when the user clicks Done
+ * (or the UI is cleared), so Branding can keep the ceremony panel open.
+ *
  * @param {Uint8Array} privateKey
+ * @returns {Promise<void>}
  */
 export function showPrivateKey(privateKey) {
-  if (!root) return;
+  if (!root) {
+    return Promise.reject(new Error("uiNotInitialized"));
+  }
   cancelPendingCeremonyConfirm();
   clearUi();
-  const pre = document.createElement("pre");
-  pre.className = "ows-key";
-  pre.textContent = to0xHex(privateKey);
-  const copyBtn = document.createElement("button");
-  copyBtn.type = "button";
-  copyBtn.className = "ows-copy";
-  copyBtn.textContent = "Copy";
-  copyBtn.addEventListener("click", async () => {
-    await navigator.clipboard.writeText(pre.textContent ?? "");
+  const hex = to0xHex(privateKey);
+  return new Promise((resolve) => {
+    const pre = document.createElement("pre");
+    pre.className = "ows-key";
+    pre.textContent = hex;
+    const copyBtn = document.createElement("button");
+    copyBtn.type = "button";
+    copyBtn.className = "ows-copy";
+    copyBtn.textContent = "Copy";
+    copyBtn.addEventListener("click", async () => {
+      await navigator.clipboard.writeText(pre.textContent ?? "");
+    });
+    const doneBtn = document.createElement("button");
+    doneBtn.type = "button";
+    doneBtn.className = "ows-confirm";
+    doneBtn.textContent = "Done";
+    doneBtn.addEventListener("click", () => {
+      clearUi();
+      resolve();
+    });
+    const actions = document.createElement("div");
+    actions.className = "ows-actions";
+    actions.append(copyBtn, doneBtn);
+    root.append(pre, actions);
   });
-  root.append(pre, copyBtn);
 }
 
 /**