@dexterai/connect 0.10.0 → 0.11.0

package/dist/{chunk-ZHJ557FI.js → chunk-YCA2UT4N.js}

@@ -60,10 +60,101 @@ function derInteger(component) {
   return out;
 }
 
+// src/popup.ts
+var DEFAULT_CONNECT_HOST = "https://dexter.cash/connect";
+var POPUP_TIMEOUT_MS = 12e4;
+var CANONICAL_ORIGIN = "https://dexter.cash";
+function shouldUsePopup(transport) {
+  if (transport === "popup") return true;
+  if (transport === "inline") return false;
+  if (typeof window === "undefined") return false;
+  return window.location.origin !== CANONICAL_ORIGIN;
+}
+function openCeremonyPopup(op, config = {}) {
+  if (typeof window === "undefined") {
+    return Promise.reject(new ConnectError("not_browser", "popup ceremony requires a browser"));
+  }
+  const host = (config.connectHost ?? DEFAULT_CONNECT_HOST).replace(/\/$/, "");
+  const hostOrigin = new URL(host).origin;
+  const openerOrigin = window.location.origin;
+  const requestId = makeNonce();
+  const params = new URLSearchParams({ v: "1", op, requestId, origin: openerOrigin });
+  if (config.name) params.set("name", config.name);
+  if (config.apiBase) params.set("apiBase", config.apiBase);
+  const url = `${host}?${params.toString()}`;
+  return new Promise((resolve, reject) => {
+    const popup = window.open(url, "dexter-connect", popupFeatures());
+    if (!popup) {
+      reject(
+        new ConnectError("popup_blocked", "the Dexter sign-in popup was blocked \u2014 allow popups for this site")
+      );
+      return;
+    }
+    let settled = false;
+    const onMessage = (event) => {
+      if (event.origin !== hostOrigin) return;
+      const data = event.data;
+      if (!data || data.type !== "dexter-connect:result" || data.requestId !== requestId) return;
+      if (data.ok) finish(() => resolve(data.result));
+      else
+        finish(
+          () => reject(new ConnectError(data.error?.code ?? "popup_failed", data.error?.message))
+        );
+    };
+    const closedTimer = window.setInterval(() => {
+      if (popup.closed) finish(() => reject(new ConnectError("popup_closed", "the sign-in window was closed")));
+    }, 500);
+    const timeout = window.setTimeout(
+      () => finish(() => reject(new ConnectError("popup_timeout", "the sign-in window timed out"))),
+      POPUP_TIMEOUT_MS
+    );
+    function finish(act) {
+      if (settled) return;
+      settled = true;
+      window.removeEventListener("message", onMessage);
+      window.clearInterval(closedTimer);
+      window.clearTimeout(timeout);
+      try {
+        popup?.close();
+      } catch {
+      }
+      act();
+    }
+    window.addEventListener("message", onMessage);
+  });
+}
+function popupFeatures() {
+  const w = 420;
+  const h = 660;
+  const sy = typeof window !== "undefined" ? window.screenY || 0 : 0;
+  const sx = typeof window !== "undefined" ? window.screenX || 0 : 0;
+  const sh = typeof window !== "undefined" ? window.screen?.height ?? h : h;
+  const sw = typeof window !== "undefined" ? window.screen?.width ?? w : w;
+  const top = Math.max(0, Math.round((sh - h) / 2 + sy));
+  const left = Math.max(0, Math.round((sw - w) / 2 + sx));
+  return `popup,width=${w},height=${h},left=${left},top=${top}`;
+}
+function makeNonce() {
+  const c = typeof crypto !== "undefined" ? crypto : void 0;
+  if (c?.randomUUID) return c.randomUUID();
+  if (c?.getRandomValues) {
+    const a = new Uint8Array(16);
+    c.getRandomValues(a);
+    return Array.from(a, (b) => b.toString(16).padStart(2, "0")).join("");
+  }
+  return `rid-${new URL(location.href).searchParams.get("v") ?? ""}-${typeof performance !== "undefined" ? performance.now() : 0}`;
+}
+
 // src/relay.ts
 var DEFAULT_API_BASE = "https://api.dexter.cash";
 var ANON_SIGN_BASE = "/api/passkey-anon/sign";
 async function passkeyLogin(config = {}, onPhase) {
+  if (shouldUsePopup(config.transport)) {
+    return openCeremonyPopup("signin", {
+      connectHost: config.connectHost,
+      apiBase: config.apiBase
+    });
+  }
   const apiBase = (config.apiBase ?? DEFAULT_API_BASE).replace(/\/$/, "");
   onPhase?.("challenge");
   const options = await fetchLoginChallenge(apiBase);
@@ -422,6 +513,8 @@ export {
   ConnectError,
   base64urlToBytes,
   bytesToBase64url,
+  shouldUsePopup,
+  openCeremonyPopup,
   passkeyLogin,
   createAnonServerPolicy,
   createPasskeySigner,

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { D as DexterConnectConfig, C as CeremonyPhase, S as SignInResult, a as ConnectVault } from './signals-CXkNJfIo.js';
-export { A as ACTIVE_WALLET_STORAGE_KEY, b as ConnectError, P as PasskeyLoginTokens, c as PasskeySignalSupport, d as StoredWallet, e as ejectActiveWallet, f as forgetWallet, g as getActiveHandle, h as getCredentialId, l as listWallets, p as passkeySignalSupport, i as prunePasskey, r as renamePasskey, s as setActiveHandle, j as subscribeWallet, k as switchWallet, m as syncAcceptedPasskeys } from './signals-CXkNJfIo.js';
+import { D as DexterConnectConfig, C as CeremonyPhase, S as SignInResult, a as ConnectVault } from './signals-B7GXneoj.js';
+export { A as ACTIVE_WALLET_STORAGE_KEY, b as ConnectError, P as PasskeyLoginTokens, c as PasskeySignalSupport, d as StoredWallet, e as ejectActiveWallet, f as forgetWallet, g as getActiveHandle, h as getCredentialId, l as listWallets, p as passkeySignalSupport, i as prunePasskey, r as renamePasskey, s as setActiveHandle, j as subscribeWallet, k as switchWallet, m as syncAcceptedPasskeys } from './signals-B7GXneoj.js';
 import { DexterApiBrowserPasskeySigner } from '@dexterai/vault/signers/browser';
 
 /**

package/dist/index.js

@@ -11,21 +11,30 @@ import {
   getActiveHandle,
   getCredentialId,
   listWallets,
+  openCeremonyPopup,
   passkeyLogin,
   passkeySignalSupport,
   prunePasskey,
   renamePasskey,
   setActiveHandle,
+  shouldUsePopup,
   subscribe,
   switchWallet,
   syncAcceptedPasskeys
-} from "./chunk-ZHJ557FI.js";
+} from "./chunk-YCA2UT4N.js";
 
 // src/enroll.ts
 var DEFAULT_API_BASE = "https://api.dexter.cash";
 var DEFAULT_RP_ID = "dexter.cash";
 var DEFAULT_WALLET_NAME = "Dexter Wallet";
 async function createWallet(config = {}) {
+  if (shouldUsePopup(config.transport)) {
+    return openCeremonyPopup("create", {
+      connectHost: config.connectHost,
+      name: config.name,
+      apiBase: config.apiBase
+    });
+  }
   if (typeof navigator === "undefined" || !navigator.credentials) {
     throw new ConnectError("webauthn_unsupported", "WebAuthn unavailable in this environment");
   }

package/dist/react.d.ts

@@ -1,5 +1,5 @@
 import { DexterApiBrowserPasskeySigner } from '@dexterai/vault/signers/browser';
-import { C as CeremonyPhase, S as SignInResult, P as PasskeyLoginTokens, a as ConnectVault, b as ConnectError, d as StoredWallet, c as PasskeySignalSupport } from './signals-CXkNJfIo.js';
+import { C as CeremonyPhase, S as SignInResult, P as PasskeyLoginTokens, a as ConnectVault, b as ConnectError, d as StoredWallet, c as PasskeySignalSupport } from './signals-B7GXneoj.js';
 import { ReactElement, ReactNode } from 'react';
 
 type ConnectStatus = 'idle' | 'pending' | 'done' | 'error';

package/dist/react.js

@@ -13,7 +13,7 @@ import {
   setActiveHandle,
   subscribe,
   switchWallet
-} from "./chunk-ZHJ557FI.js";
+} from "./chunk-YCA2UT4N.js";
 
 // src/useSignInWithDexter.ts
 import { useCallback, useEffect, useMemo, useState } from "react";

package/dist/{signals-CXkNJfIo.d.ts → signals-B7GXneoj.d.ts}

@@ -41,6 +41,18 @@ type CeremonyPhase = 'challenge' | 'passkey' | 'verifying' | 'finalizing';
 interface DexterConnectConfig {
     /** dexter-api base. Default https://api.dexter.cash. */
     apiBase?: string;
+    /**
+     * Where the WebAuthn ceremony runs:
+     *  - 'auto' (default): inline on the canonical Dexter origin (dexter.cash),
+     *    popup on ANY other origin — so a third-party site works without the
+     *    WebAuthn rpId-origin problem (in-page only works on dexter.cash).
+     *  - 'popup': always via the hosted popup (works on any website).
+     *  - 'inline': always in-page — only valid on a Dexter origin; this is what
+     *    the hosted ceremony page itself uses.
+     */
+    transport?: 'auto' | 'popup' | 'inline';
+    /** Hosted ceremony page (popup transport). Default https://dexter.cash/connect. */
+    connectHost?: string;
 }
 /** Typed error whose `code` is the server's snake_case error string. */
 declare class ConnectError extends Error {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dexterai/connect",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "description": "Sign in with Dexter — passkey connector. Composes @dexterai/vault.",
   "type": "module",
   "exports": {