@bwalletx/connect 0.5.4 → 0.5.6

package/dist/server.d.ts

@@ -316,6 +316,7 @@ declare function checkTokenHolding(require: AccessRequirement, addresses: string
 declare const LOGIN_PROTOCOL: WalletProtocol;
 declare const CHALLENGE_LIFETIME_MS: number;
 interface PendingChallenge {
+    /** The key the challenge was made for, or '' when none was given (verifySignIn then binds the claimed key). */
     identityKey: string;
     origin: string;
     message: string;
@@ -342,8 +343,12 @@ declare function loginMessage(origin: string, nonce: string, expiresAt: number):
 interface CreateChallengeOptions {
     /** YOUR site's origin from config, e.g. "https://example.com". Never take it from the request. */
     origin: string;
-    /** The identity key the browser claims. Checked again at verify. */
-    identityKey: unknown;
+    /**
+     * The identity key the browser claims, checked again at verify. Optional since 0.5.5: leave it out so the browser
+     * can ask the wallet for the key and the signature in ONE sheet; verifySignIn then binds the key the browser claims,
+     * and the signature only verifies for that key. A challenge made WITH a key still only verifies for that key.
+     */
+    identityKey?: unknown;
     /** Default: a process-wide in-memory store (dev only). */
     store?: NonceStore;
 }
@@ -354,7 +359,7 @@ interface ChallengeResponse {
     keyID: string;
     expiresAt: number;
 }
-/** Step 1. Throws if identityKey is not a valid compressed public key. Send the result to the browser. */
+/** Step 1. Throws if an identityKey is given and is not a valid compressed public key. Send the result to the browser. */
 declare function createChallenge(opts: CreateChallengeOptions): Promise<ChallengeResponse>;
 interface VerifySignInOptions {
     /** YOUR site's origin from config. Must equal the origin the challenge was made for. */

package/dist/server.js

@@ -26,7 +26,7 @@ import {
   verifyPayment,
   verifySession,
   verifySignIn
-} from "./chunk-QRXFL66W.js";
+} from "./chunk-A2WLGS25.js";
 import {
   ACCESS_CHALLENGE_LIFETIME_S,
   ACCESS_ERROR_STATUS,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bwalletx/connect",
-  "version": "0.5.4",
+  "version": "0.5.6",
   "description": "Sign in with bWalletX or any BRC-100 wallet: button, React provider, Next.js sessions, nonce stores, pay/tip helpers, payment verification, wallet picker, and the bApp shell",
   "license": "MIT",
   "repository": {
@@ -129,6 +129,14 @@
   "engines": {
     "node": ">=20"
   },
+  "scripts": {
+    "build": "tsup",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "test:live": "LIVE_RELAY=1 vitest run test/live-relay.test.ts",
+    "prepublishOnly": "pnpm typecheck && pnpm lint && pnpm test && pnpm build",
+    "lint": "eslint src test"
+  },
   "peerDependencies": {
     "@bsv/sdk": ">=2.2.0 <4",
     "next": ">=14",
@@ -159,12 +167,5 @@
   },
   "dependencies": {
     "qrcode-generator": "^1.5.2"
-  },
-  "scripts": {
-    "build": "tsup",
-    "typecheck": "tsc --noEmit",
-    "test": "vitest run",
-    "test:live": "LIVE_RELAY=1 vitest run test/live-relay.test.ts",
-    "lint": "eslint src test"
   }
-}
+}