@cavos/kit 0.0.3 → 0.0.4

package/dist/index.d.mts

@@ -1,5 +1,5 @@
-import { A as AuthProvider, I as Identity, W as WalletRegistry, R as RegisteredWallet, D as DevicePublicKey, a as RecoveryClient, P as PendingDeviceRequest, b as DeviceSigner, c as DeviceSignature, C as ChainAdapter, d as ComputeAddressParams, e as ChainCall, f as PasskeyAssertion, S as StellarNetwork } from './Cavos-BH2_tOQ2.mjs';
-export { g as Cavos, h as CavosSolana, i as CavosStellar, j as CavosWallet, k as Chain, l as ConnectOptions, m as ConnectSolanaOptions, n as ConnectStatus, o as ConnectStellarOptions, p as DEVICE_ACCOUNT_PROGRAM_ID, q as DEVICE_ACCOUNT_WASM_HASH, E as EnrolledPasskey, F as FACTORY_CONTRACT_ID, r as InMemoryWalletRegistry, s as InstructionAccount, t as InstructionData, N as NATIVE_SAC_ID, u as NetworkEnv, v as PasskeyApprovable, w as PasskeyEnrollParams, x as PasskeySigner, y as PasskeySignerOptions, z as RecoverSolanaOptions, B as RecoverStellarOptions, G as RecoveryOptions, H as SECP256R1_PROGRAM_ID, J as SOLANA_NETWORKS, K as STELLAR_NETWORKS, L as SolanaAdapter, M as SolanaAdapterOptions, O as SolanaNetwork, Q as SolanaRelayer, T as SolanaRelayerOptions, U as StaticIdentity, V as StellarRelayer, X as StellarRelayerOptions, Y as anchorDiscriminator, Z as approveDeviceEverywhere, _ as base64urlEncode, $ as batchChallenge, a0 as buildSecp256r1Instruction, a1 as compressedPubkey, a2 as encodeLowSSignature, a3 as lowS, a4 as recoverCandidatePublicKeys, a5 as serializeInstructions, a6 as webauthnDigest } from './Cavos-BH2_tOQ2.mjs';
+import { A as AuthProvider, I as Identity, W as WalletRegistry, R as RegisteredWallet, D as DevicePublicKey, a as RecoveryClient, P as PendingDeviceRequest, b as DeviceSigner, c as DeviceSignature, C as ChainAdapter, d as ComputeAddressParams, e as ChainCall, f as PasskeyAssertion, S as StellarNetwork } from './Cavos-x9qFpOvJ.mjs';
+export { g as Cavos, h as CavosSolana, i as CavosStellar, j as CavosWallet, k as Chain, l as ConnectOptions, m as ConnectSolanaOptions, n as ConnectStatus, o as ConnectStellarOptions, p as DEVICE_ACCOUNT_PROGRAM_ID, q as DEVICE_ACCOUNT_WASM_HASH, E as EnrolledPasskey, F as FACTORY_CONTRACT_ID, r as InMemoryWalletRegistry, s as InstructionAccount, t as InstructionData, N as NATIVE_SAC_ID, u as NetworkEnv, v as PasskeyApprovable, w as PasskeyEnrollParams, x as PasskeySigner, y as PasskeySignerOptions, z as RecoverSolanaOptions, B as RecoverStellarOptions, G as RecoveryOptions, H as SECP256R1_PROGRAM_ID, J as SOLANA_NETWORKS, K as STELLAR_NETWORKS, L as SolanaAdapter, M as SolanaAdapterOptions, O as SolanaNetwork, Q as SolanaRelayer, T as SolanaRelayerOptions, U as StaticIdentity, V as StellarRelayer, X as StellarRelayerOptions, Y as anchorDiscriminator, Z as approveDeviceEverywhere, _ as base64urlEncode, $ as batchChallenge, a0 as buildSecp256r1Instruction, a1 as compressedPubkey, a2 as encodeLowSSignature, a3 as lowS, a4 as recoverCandidatePublicKeys, a5 as serializeInstructions, a6 as webauthnDigest } from './Cavos-x9qFpOvJ.mjs';
 import { Signer, ArraySignatureType } from 'starknet';
 import { rpc, xdr } from '@stellar/stellar-sdk';
 import '@solana/web3.js';
@@ -260,6 +260,9 @@ declare class StarknetAdapter implements ChainAdapter {
     buildAddApprover(accountAddress: string, passkey: DevicePublicKey): ChainCall;
     buildRemoveApprover(accountAddress: string, passkey: DevicePublicKey): ChainCall;
     isApprover(accountAddress: string, passkey: DevicePublicKey): Promise<boolean>;
+    /** True if the account has at least one passkey registered as an approver.
+     * Lets the UI decide whether to offer passkey approval before prompting. */
+    hasPasskeyApprover(accountAddress: string): Promise<boolean>;
     getPasskeyNonce(accountAddress: string): Promise<bigint>;
     /** This chain's leaf for approving `add_signer(newSigner)` at `nonce`:
      * `sha256(new_x || new_y || nonce)` (coords 32B BE, nonce 16B BE). The batch
@@ -376,6 +379,9 @@ declare class StellarAdapter {
      * `leaves`/`leafIndex` place this chain's leaf in the multi-chain batch. */
     buildAddSignerViaPasskey(accountAddress: string, newSigner: DevicePublicKey, passkey: DevicePublicKey, nonce: bigint, leaves: Uint8Array[], leafIndex: number, assertion: PasskeyAssertion): xdr.HostFunction;
     /** Read whether `passkey` is a registered approver (read-only simulation). */
+    /** True if the account has at least one passkey registered as an approver.
+     * Reads the contract's `approvers` view and checks the list is non-empty. */
+    hasPasskeyApprover(accountAddress: string, readSource: string): Promise<boolean>;
     isApprover(accountAddress: string, passkey: DevicePublicKey, readSource: string): Promise<boolean>;
     /** Read the current passkey-approval nonce (read-only simulation). */
     passkeyNonce(accountAddress: string, readSource: string): Promise<bigint>;

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { A as AuthProvider, I as Identity, W as WalletRegistry, R as RegisteredWallet, D as DevicePublicKey, a as RecoveryClient, P as PendingDeviceRequest, b as DeviceSigner, c as DeviceSignature, C as ChainAdapter, d as ComputeAddressParams, e as ChainCall, f as PasskeyAssertion, S as StellarNetwork } from './Cavos-BH2_tOQ2.js';
-export { g as Cavos, h as CavosSolana, i as CavosStellar, j as CavosWallet, k as Chain, l as ConnectOptions, m as ConnectSolanaOptions, n as ConnectStatus, o as ConnectStellarOptions, p as DEVICE_ACCOUNT_PROGRAM_ID, q as DEVICE_ACCOUNT_WASM_HASH, E as EnrolledPasskey, F as FACTORY_CONTRACT_ID, r as InMemoryWalletRegistry, s as InstructionAccount, t as InstructionData, N as NATIVE_SAC_ID, u as NetworkEnv, v as PasskeyApprovable, w as PasskeyEnrollParams, x as PasskeySigner, y as PasskeySignerOptions, z as RecoverSolanaOptions, B as RecoverStellarOptions, G as RecoveryOptions, H as SECP256R1_PROGRAM_ID, J as SOLANA_NETWORKS, K as STELLAR_NETWORKS, L as SolanaAdapter, M as SolanaAdapterOptions, O as SolanaNetwork, Q as SolanaRelayer, T as SolanaRelayerOptions, U as StaticIdentity, V as StellarRelayer, X as StellarRelayerOptions, Y as anchorDiscriminator, Z as approveDeviceEverywhere, _ as base64urlEncode, $ as batchChallenge, a0 as buildSecp256r1Instruction, a1 as compressedPubkey, a2 as encodeLowSSignature, a3 as lowS, a4 as recoverCandidatePublicKeys, a5 as serializeInstructions, a6 as webauthnDigest } from './Cavos-BH2_tOQ2.js';
+import { A as AuthProvider, I as Identity, W as WalletRegistry, R as RegisteredWallet, D as DevicePublicKey, a as RecoveryClient, P as PendingDeviceRequest, b as DeviceSigner, c as DeviceSignature, C as ChainAdapter, d as ComputeAddressParams, e as ChainCall, f as PasskeyAssertion, S as StellarNetwork } from './Cavos-x9qFpOvJ.js';
+export { g as Cavos, h as CavosSolana, i as CavosStellar, j as CavosWallet, k as Chain, l as ConnectOptions, m as ConnectSolanaOptions, n as ConnectStatus, o as ConnectStellarOptions, p as DEVICE_ACCOUNT_PROGRAM_ID, q as DEVICE_ACCOUNT_WASM_HASH, E as EnrolledPasskey, F as FACTORY_CONTRACT_ID, r as InMemoryWalletRegistry, s as InstructionAccount, t as InstructionData, N as NATIVE_SAC_ID, u as NetworkEnv, v as PasskeyApprovable, w as PasskeyEnrollParams, x as PasskeySigner, y as PasskeySignerOptions, z as RecoverSolanaOptions, B as RecoverStellarOptions, G as RecoveryOptions, H as SECP256R1_PROGRAM_ID, J as SOLANA_NETWORKS, K as STELLAR_NETWORKS, L as SolanaAdapter, M as SolanaAdapterOptions, O as SolanaNetwork, Q as SolanaRelayer, T as SolanaRelayerOptions, U as StaticIdentity, V as StellarRelayer, X as StellarRelayerOptions, Y as anchorDiscriminator, Z as approveDeviceEverywhere, _ as base64urlEncode, $ as batchChallenge, a0 as buildSecp256r1Instruction, a1 as compressedPubkey, a2 as encodeLowSSignature, a3 as lowS, a4 as recoverCandidatePublicKeys, a5 as serializeInstructions, a6 as webauthnDigest } from './Cavos-x9qFpOvJ.js';
 import { Signer, ArraySignatureType } from 'starknet';
 import { rpc, xdr } from '@stellar/stellar-sdk';
 import '@solana/web3.js';
@@ -260,6 +260,9 @@ declare class StarknetAdapter implements ChainAdapter {
     buildAddApprover(accountAddress: string, passkey: DevicePublicKey): ChainCall;
     buildRemoveApprover(accountAddress: string, passkey: DevicePublicKey): ChainCall;
     isApprover(accountAddress: string, passkey: DevicePublicKey): Promise<boolean>;
+    /** True if the account has at least one passkey registered as an approver.
+     * Lets the UI decide whether to offer passkey approval before prompting. */
+    hasPasskeyApprover(accountAddress: string): Promise<boolean>;
     getPasskeyNonce(accountAddress: string): Promise<bigint>;
     /** This chain's leaf for approving `add_signer(newSigner)` at `nonce`:
      * `sha256(new_x || new_y || nonce)` (coords 32B BE, nonce 16B BE). The batch
@@ -376,6 +379,9 @@ declare class StellarAdapter {
      * `leaves`/`leafIndex` place this chain's leaf in the multi-chain batch. */
     buildAddSignerViaPasskey(accountAddress: string, newSigner: DevicePublicKey, passkey: DevicePublicKey, nonce: bigint, leaves: Uint8Array[], leafIndex: number, assertion: PasskeyAssertion): xdr.HostFunction;
     /** Read whether `passkey` is a registered approver (read-only simulation). */
+    /** True if the account has at least one passkey registered as an approver.
+     * Reads the contract's `approvers` view and checks the list is non-empty. */
+    hasPasskeyApprover(accountAddress: string, readSource: string): Promise<boolean>;
     isApprover(accountAddress: string, passkey: DevicePublicKey, readSource: string): Promise<boolean>;
     /** Read the current passkey-approval nonce (read-only simulation). */
     passkeyNonce(accountAddress: string, readSource: string): Promise<bigint>;

package/dist/index.js

@@ -262,6 +262,17 @@ var StarknetAdapter = class {
     });
     return BigInt(res[0] ?? 0) !== 0n;
   }
+  /** True if the account has at least one passkey registered as an approver.
+   * Lets the UI decide whether to offer passkey approval before prompting. */
+  async hasPasskeyApprover(accountAddress) {
+    if (!this.opts.provider) throw new Error("kit/starknet: provider required for reads");
+    const res = await this.opts.provider.callContract({
+      contractAddress: accountAddress,
+      entrypoint: "get_approver_count",
+      calldata: []
+    });
+    return BigInt(res[0] ?? 0) > 0n;
+  }
   async getPasskeyNonce(accountAddress) {
     if (!this.opts.provider) throw new Error("kit/starknet: provider required for reads");
     const res = await this.opts.provider.callContract({
@@ -600,6 +611,11 @@ var SolanaAdapter = class {
     return [precompileIx, ix];
   }
   /** Read whether `passkey` is a registered approver. */
+  /** True if the account has at least one passkey registered as an approver. */
+  async hasPasskeyApprover(account) {
+    const approvers = await this.fetchApprovers(new web3_js.PublicKey(account));
+    return approvers.length > 0;
+  }
   async isApprover(account, passkey) {
     const approvers = await this.fetchApprovers(new web3_js.PublicKey(account));
     const target = Buffer.from(compressedPubkey(passkey)).toString("hex");
@@ -1292,6 +1308,8 @@ var CavosSolana = class _CavosSolana {
     this.feePayer = feePayer;
     /** Discriminant for the `CavosWallet` union — narrows `execute()` per chain. */
     this.chain = "solana";
+    /** True when this connect just created a brand-new account (first sign-up). */
+    this.isNewAccount = false;
   }
   get publicKey() {
     return this.devicePubkey;
@@ -1342,7 +1360,7 @@ var CavosSolana = class _CavosSolana {
     }
     await registry.register({ userId: identity.userId, address, initialSigner: devicePubkey });
     const isSigner = await adapter.isAuthorizedSigner(address, devicePubkey);
-    return new _CavosSolana(
+    const wallet = new _CavosSolana(
       identity,
       address,
       isSigner ? "ready" : "needs-device-approval",
@@ -1352,6 +1370,8 @@ var CavosSolana = class _CavosSolana {
       relayer,
       opts.feePayer
     );
+    wallet.isNewAccount = !deployed && isSigner;
+    return wallet;
   }
   /** Authorize an additional device signer (device-signed via precompile). */
   async addSigner(pubkey) {
@@ -1378,6 +1398,16 @@ var CavosSolana = class _CavosSolana {
     const transactionHash = await this.send(ixs);
     return { transactionHash };
   }
+  /** True if this account already has a passkey enrolled as an approver, so a
+   * new device can be approved with the passkey instead of the email flow. */
+  async hasPasskey() {
+    return this.adapter.hasPasskeyApprover(this.address);
+  }
+  /** Re-read (from chain) whether THIS device is now an authorized signer.
+   * Used to poll for readiness after a passkey approval before it's indexed. */
+  async isReady() {
+    return this.adapter.isAuthorizedSigner(this.address, this.devicePubkey);
+  }
   /**
    * From a fresh browser (status `needs-device-approval`), approve adding THIS
    * device with the user's synced passkey. Gasless via the relayer — the bundle
@@ -1669,6 +1699,25 @@ var StellarAdapter = class {
     ]);
   }
   /** Read whether `passkey` is a registered approver (read-only simulation). */
+  /** True if the account has at least one passkey registered as an approver.
+   * Reads the contract's `approvers` view and checks the list is non-empty. */
+  async hasPasskeyApprover(accountAddress, readSource) {
+    if (!await this.isDeployed(accountAddress)) return false;
+    const { Account: Account3, TransactionBuilder: TransactionBuilder2, BASE_FEE: BASE_FEE2 } = await import('@stellar/stellar-sdk');
+    const src = new Account3(readSource, "0");
+    const op = stellarSdk.Operation.invokeHostFunction({
+      func: invokeFunc(accountAddress, "approvers", []),
+      auth: []
+    });
+    const tx2 = new TransactionBuilder2(src, { fee: BASE_FEE2, networkPassphrase: this.passphrase }).addOperation(op).setTimeout(30).build();
+    const sim = await this.server().simulateTransaction(tx2);
+    if (stellarSdk.rpc.Api.isSimulationError(sim)) {
+      throw new Error(`kit/stellar: approvers simulation failed: ${sim.error}`);
+    }
+    if (!sim.result?.retval) return false;
+    const list = stellarSdk.scValToNative(sim.result.retval);
+    return Array.isArray(list) && list.length > 0;
+  }
   async isApprover(accountAddress, passkey, readSource) {
     if (!await this.isDeployed(accountAddress)) return false;
     const { Account: Account3, TransactionBuilder: TransactionBuilder2, BASE_FEE: BASE_FEE2 } = await import('@stellar/stellar-sdk');
@@ -1873,6 +1922,8 @@ var CavosStellar = class _CavosStellar {
     this.sourceKeypair = sourceKeypair;
     /** Discriminant for the `CavosWallet` union — narrows `execute()` per chain. */
     this.chain = "stellar";
+    /** True when this connect just created a brand-new account (first sign-up). */
+    this.isNewAccount = false;
   }
   get publicKey() {
     return this.devicePubkey;
@@ -1901,13 +1952,16 @@ var CavosStellar = class _CavosStellar {
       return build(existing.address, isSigner2 ? "ready" : "needs-device-approval");
     }
     const address = adapter.computeAddress(addressSeed, devicePubkey);
-    if (!await adapter.isDeployed(address)) {
+    const wasDeployed = await adapter.isDeployed(address);
+    if (!wasDeployed) {
       const func = adapter.buildDeploy(addressSeed, devicePubkey);
       await self.submitHostFunction(func, void 0);
     }
     await registry.register({ userId: identity.userId, address, initialSigner: devicePubkey });
     const isSigner = await adapter.isAuthorizedSigner(address, devicePubkey, readSource);
-    return build(address, isSigner ? "ready" : "needs-device-approval");
+    const wallet = build(address, isSigner ? "ready" : "needs-device-approval");
+    wallet.isNewAccount = !wasDeployed && isSigner;
+    return wallet;
   }
   /** Authorize an additional device signer (device-signed via `__check_auth`). */
   async addSigner(pubkey) {
@@ -1935,6 +1989,18 @@ var CavosStellar = class _CavosStellar {
     const transactionHash = await this.submitHostFunction(func, this.address);
     return { transactionHash };
   }
+  /** True if this account already has a passkey enrolled as an approver, so a
+   * new device can be approved with the passkey instead of the email flow. */
+  async hasPasskey() {
+    const readSource = await this.resolveSource();
+    return this.adapter.hasPasskeyApprover(this.address, readSource);
+  }
+  /** Re-read (from chain) whether THIS device is now an authorized signer.
+   * Used to poll for readiness after a passkey approval before it's indexed. */
+  async isReady() {
+    const readSource = await this.resolveSource();
+    return this.adapter.isAuthorizedSigner(this.address, this.devicePubkey, readSource);
+  }
   /**
    * From a fresh browser (status `needs-device-approval`), approve adding THIS
    * device using the user's synced passkey. Gasless via the relayer — the call
@@ -2244,6 +2310,9 @@ var Cavos = class _Cavos {
     this.chain = "starknet";
     /** Request id of the pending device-addition, when status is needs-device-approval. */
     this.pendingRequestId = null;
+    /** True when this connect just created & deployed a brand-new account (first
+     * sign-up), so the UI can offer a one-time "secure your account" step. */
+    this.isNewAccount = false;
   }
   /**
    * Unified entry point. Pick a `chain` and an `network` environment; the kit
@@ -2339,7 +2408,7 @@ var Cavos = class _Cavos {
     if (existing) {
       const account2 = makeAccount(existing.address);
       const isSigner2 = await adapter.isAuthorizedSigner(existing.address, devicePubkey);
-      const cavos = new _Cavos(
+      const cavos2 = new _Cavos(
         identity,
         existing.address,
         isSigner2 ? "ready" : "needs-device-approval",
@@ -2353,7 +2422,7 @@ var Cavos = class _Cavos {
         const fresh = dedup && Date.now() - dedup.requestedAt < DEVICE_REQUEST_DEDUP_MS;
         try {
           if (fresh) {
-            cavos.pendingRequestId = dedup.requestId;
+            cavos2.pendingRequestId = dedup.requestId;
           } else {
             const { requestId } = await recovery.requestDeviceAddition({
               userId: identity.userId,
@@ -2361,14 +2430,14 @@ var Cavos = class _Cavos {
               newSigner: devicePubkey,
               ...identity.email ? { email: identity.email } : {}
             });
-            cavos.pendingRequestId = requestId;
+            cavos2.pendingRequestId = requestId;
             lastDeviceRequest.set(identity.userId, { requestId, requestedAt: Date.now() });
           }
         } catch (e) {
           console.warn("[Cavos] requestDeviceAddition failed:", e);
         }
       }
-      return cavos;
+      return cavos2;
     }
     const address = adapter.computeAddress({ addressSeed, initialSigner: devicePubkey });
     const account = makeAccount(address);
@@ -2399,7 +2468,7 @@ var Cavos = class _Cavos {
       console.warn("[Cavos] isAuthorizedSigner read failed:", e);
       isSigner = !alreadyDeployed;
     }
-    return new _Cavos(
+    const cavos = new _Cavos(
       identity,
       address,
       isSigner ? "ready" : "needs-device-approval",
@@ -2408,6 +2477,8 @@ var Cavos = class _Cavos {
       devicePubkey,
       paymasterConfig
     );
+    cavos.isNewAccount = !alreadyDeployed && isSigner;
+    return cavos;
   }
   /** This device's public key (e.g. to request addition to an existing wallet). */
   get publicKey() {
@@ -2453,8 +2524,24 @@ var Cavos = class _Cavos {
     const { transactionHash } = await this.execute([
       this.adapter.buildAddApprover(this.address, pubkey)
     ]);
+    try {
+      await this.account.waitForTransaction(transactionHash);
+    } catch (e) {
+      console.warn("[Cavos] add_approver receipt wait failed:", e);
+    }
     return { transactionHash };
   }
+  /** True if this account already has a passkey enrolled as an approver, so a
+   * new device can be approved with the passkey instead of the email flow. */
+  async hasPasskey() {
+    return this.adapter.hasPasskeyApprover(this.address);
+  }
+  /** Re-read (from chain) whether THIS device is now an authorized signer.
+   * Cheap and side-effect free — used to poll for readiness after a passkey /
+   * device approval submits, before the new signer is indexed. */
+  async isReady() {
+    return this.adapter.isAuthorizedSigner(this.address, this.devicePubkey);
+  }
   /**
    * From a brand-new browser (status `needs-device-approval`), use the user's
    * synced passkey to authorize adding THIS device — no trip back to an already-
@@ -2606,17 +2693,15 @@ async function approveDeviceEverywhere(wallets, passkey) {
   const infos = await Promise.all(targets.map((w) => w.passkeyLeafForThisDevice()));
   const leaves = infos.map((i) => i.leaf);
   const assertion = await passkey.assert(batchChallenge(leaves));
-  const out = [];
-  for (let i = 0; i < targets.length; i++) {
-    const { transactionHash } = await targets[i].submitPasskeyApproval(
-      assertion,
-      leaves,
-      i,
-      infos[i].nonce
-    );
-    out.push({ chain: targets[i].chain, transactionHash });
-  }
-  return out;
+  const settled = await Promise.allSettled(
+    targets.map((w, i) => w.submitPasskeyApproval(assertion, leaves, i, infos[i].nonce))
+  );
+  return settled.map(
+    (r, i) => r.status === "fulfilled" ? { chain: targets[i].chain, transactionHash: r.value.transactionHash } : {
+      chain: targets[i].chain,
+      error: r.reason instanceof Error ? r.reason.message : String(r.reason)
+    }
+  );
 }
 async function paymasterExecuteDirect(paymaster, userAddress, call) {
   const body = {