@dexterai/connect 0.10.0 → 0.12.0

package/dist/{chunk-ZHJ557FI.js → chunk-6NIGGPVI.js}

@@ -60,10 +60,101 @@ function derInteger(component) {
   return out;
 }
 
+// src/popup.ts
+var DEFAULT_CONNECT_HOST = "https://dexter.cash/connect";
+var POPUP_TIMEOUT_MS = 12e4;
+var CANONICAL_ORIGIN = "https://dexter.cash";
+function shouldUsePopup(transport) {
+  if (transport === "popup") return true;
+  if (transport === "inline") return false;
+  if (typeof window === "undefined") return false;
+  return window.location.origin !== CANONICAL_ORIGIN;
+}
+function openCeremonyPopup(op, config = {}) {
+  if (typeof window === "undefined") {
+    return Promise.reject(new ConnectError("not_browser", "popup ceremony requires a browser"));
+  }
+  const host = (config.connectHost ?? DEFAULT_CONNECT_HOST).replace(/\/$/, "");
+  const hostOrigin = new URL(host).origin;
+  const openerOrigin = window.location.origin;
+  const requestId = makeNonce();
+  const params = new URLSearchParams({ v: "1", op, requestId, origin: openerOrigin });
+  if (config.name) params.set("name", config.name);
+  if (config.apiBase) params.set("apiBase", config.apiBase);
+  const url = `${host}?${params.toString()}`;
+  return new Promise((resolve, reject) => {
+    const popup = window.open(url, "dexter-connect", popupFeatures());
+    if (!popup) {
+      reject(
+        new ConnectError("popup_blocked", "the Dexter sign-in popup was blocked \u2014 allow popups for this site")
+      );
+      return;
+    }
+    let settled = false;
+    const onMessage = (event) => {
+      if (event.origin !== hostOrigin) return;
+      const data = event.data;
+      if (!data || data.type !== "dexter-connect:result" || data.requestId !== requestId) return;
+      if (data.ok) finish(() => resolve(data.result));
+      else
+        finish(
+          () => reject(new ConnectError(data.error?.code ?? "popup_failed", data.error?.message))
+        );
+    };
+    const closedTimer = window.setInterval(() => {
+      if (popup.closed) finish(() => reject(new ConnectError("popup_closed", "the sign-in window was closed")));
+    }, 500);
+    const timeout = window.setTimeout(
+      () => finish(() => reject(new ConnectError("popup_timeout", "the sign-in window timed out"))),
+      POPUP_TIMEOUT_MS
+    );
+    function finish(act) {
+      if (settled) return;
+      settled = true;
+      window.removeEventListener("message", onMessage);
+      window.clearInterval(closedTimer);
+      window.clearTimeout(timeout);
+      try {
+        popup?.close();
+      } catch {
+      }
+      act();
+    }
+    window.addEventListener("message", onMessage);
+  });
+}
+function popupFeatures() {
+  const w = 420;
+  const h = 660;
+  const sy = typeof window !== "undefined" ? window.screenY || 0 : 0;
+  const sx = typeof window !== "undefined" ? window.screenX || 0 : 0;
+  const sh = typeof window !== "undefined" ? window.screen?.height ?? h : h;
+  const sw = typeof window !== "undefined" ? window.screen?.width ?? w : w;
+  const top = Math.max(0, Math.round((sh - h) / 2 + sy));
+  const left = Math.max(0, Math.round((sw - w) / 2 + sx));
+  return `popup,width=${w},height=${h},left=${left},top=${top}`;
+}
+function makeNonce() {
+  const c = typeof crypto !== "undefined" ? crypto : void 0;
+  if (c?.randomUUID) return c.randomUUID();
+  if (c?.getRandomValues) {
+    const a = new Uint8Array(16);
+    c.getRandomValues(a);
+    return Array.from(a, (b) => b.toString(16).padStart(2, "0")).join("");
+  }
+  return `rid-${new URL(location.href).searchParams.get("v") ?? ""}-${typeof performance !== "undefined" ? performance.now() : 0}`;
+}
+
 // src/relay.ts
 var DEFAULT_API_BASE = "https://api.dexter.cash";
 var ANON_SIGN_BASE = "/api/passkey-anon/sign";
 async function passkeyLogin(config = {}, onPhase) {
+  if (shouldUsePopup(config.transport)) {
+    return openCeremonyPopup("signin", {
+      connectHost: config.connectHost,
+      apiBase: config.apiBase
+    });
+  }
   const apiBase = (config.apiBase ?? DEFAULT_API_BASE).replace(/\/$/, "");
   onPhase?.("challenge");
   const options = await fetchLoginChallenge(apiBase);
@@ -231,6 +322,20 @@ function createPasskeySigner(vault, apiBase, opts = {}) {
   });
 }
 
+// src/identity.ts
+function presentOrNull(value) {
+  return value && value.length > 0 ? value : null;
+}
+function resolveIdentity(input) {
+  const userHandle = presentOrNull(input.userHandle);
+  const accountToken = presentOrNull(input.accountToken);
+  const hasPasskeyVault = userHandle !== null;
+  const hasAccount = accountToken !== null;
+  const hasWallet = hasPasskeyVault || hasAccount;
+  const kind = hasPasskeyVault ? "passkey-vault" : hasAccount ? "account" : "none";
+  return { kind, userHandle, accountToken, hasPasskeyVault, hasAccount, hasWallet };
+}
+
 // src/walletStore.ts
 var ACTIVE_HANDLE_KEY = "dexter:passkey:userHandle";
 var ROSTER_KEY = "dexter:passkey:wallets";
@@ -422,9 +527,12 @@ export {
   ConnectError,
   base64urlToBytes,
   bytesToBase64url,
+  shouldUsePopup,
+  openCeremonyPopup,
   passkeyLogin,
   createAnonServerPolicy,
   createPasskeySigner,
+  resolveIdentity,
   getActiveHandle,
   setActiveHandle,
   getCredentialId,

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { D as DexterConnectConfig, C as CeremonyPhase, S as SignInResult, a as ConnectVault } from './signals-CXkNJfIo.js';
-export { A as ACTIVE_WALLET_STORAGE_KEY, b as ConnectError, P as PasskeyLoginTokens, c as PasskeySignalSupport, d as StoredWallet, e as ejectActiveWallet, f as forgetWallet, g as getActiveHandle, h as getCredentialId, l as listWallets, p as passkeySignalSupport, i as prunePasskey, r as renamePasskey, s as setActiveHandle, j as subscribeWallet, k as switchWallet, m as syncAcceptedPasskeys } from './signals-CXkNJfIo.js';
+import { D as DexterConnectConfig, C as CeremonyPhase, S as SignInResult, a as ConnectVault } from './signals-DM7IQdq6.js';
+export { A as ACTIVE_WALLET_STORAGE_KEY, b as ConnectError, I as IdentityInput, c as IdentityKind, P as PasskeyLoginTokens, d as PasskeySignalSupport, R as ResolvedIdentity, e as StoredWallet, f as ejectActiveWallet, g as forgetWallet, h as getActiveHandle, i as getCredentialId, l as listWallets, p as passkeySignalSupport, j as prunePasskey, r as renamePasskey, k as resolveIdentity, s as setActiveHandle, m as subscribeWallet, n as switchWallet, o as syncAcceptedPasskeys } from './signals-DM7IQdq6.js';
 import { DexterApiBrowserPasskeySigner } from '@dexterai/vault/signers/browser';
 
 /**

package/dist/index.js

@@ -11,21 +11,31 @@ import {
   getActiveHandle,
   getCredentialId,
   listWallets,
+  openCeremonyPopup,
   passkeyLogin,
   passkeySignalSupport,
   prunePasskey,
   renamePasskey,
+  resolveIdentity,
   setActiveHandle,
+  shouldUsePopup,
   subscribe,
   switchWallet,
   syncAcceptedPasskeys
-} from "./chunk-ZHJ557FI.js";
+} from "./chunk-6NIGGPVI.js";
 
 // src/enroll.ts
 var DEFAULT_API_BASE = "https://api.dexter.cash";
 var DEFAULT_RP_ID = "dexter.cash";
 var DEFAULT_WALLET_NAME = "Dexter Wallet";
 async function createWallet(config = {}) {
+  if (shouldUsePopup(config.transport)) {
+    return openCeremonyPopup("create", {
+      connectHost: config.connectHost,
+      name: config.name,
+      apiBase: config.apiBase
+    });
+  }
   if (typeof navigator === "undefined" || !navigator.credentials) {
     throw new ConnectError("webauthn_unsupported", "WebAuthn unavailable in this environment");
   }
@@ -166,6 +176,7 @@ export {
   passkeySignalSupport,
   prunePasskey,
   renamePasskey,
+  resolveIdentity,
   setActiveHandle,
   subscribe as subscribeWallet,
   switchWallet,

package/dist/react.d.ts

@@ -1,5 +1,5 @@
 import { DexterApiBrowserPasskeySigner } from '@dexterai/vault/signers/browser';
-import { C as CeremonyPhase, S as SignInResult, P as PasskeyLoginTokens, a as ConnectVault, b as ConnectError, d as StoredWallet, c as PasskeySignalSupport } from './signals-CXkNJfIo.js';
+import { C as CeremonyPhase, S as SignInResult, P as PasskeyLoginTokens, a as ConnectVault, b as ConnectError, e as StoredWallet, d as PasskeySignalSupport, R as ResolvedIdentity } from './signals-DM7IQdq6.js';
 import { ReactElement, ReactNode } from 'react';
 
 type ConnectStatus = 'idle' | 'pending' | 'done' | 'error';
@@ -124,4 +124,11 @@ interface UseDexterWallet {
 }
 declare function useDexterWallet(): UseDexterWallet;
 
-export { type ConnectStatus, DexterButton, type DexterButtonProps, DexterMark, SignInWithDexter, type SignInWithDexterProps, type UseDexterWallet, type UseSignInWithDexter, type UseSignInWithDexterConfig, useDexterWallet, useSignInWithDexter };
+interface UseIdentityConfig {
+    /** The account session token (e.g. a Supabase access_token), or null when the
+     *  user has no account session. The SDK is auth-agnostic — pass your own. */
+    accountToken: string | null;
+}
+declare function useIdentity({ accountToken }: UseIdentityConfig): ResolvedIdentity;
+
+export { type ConnectStatus, DexterButton, type DexterButtonProps, DexterMark, SignInWithDexter, type SignInWithDexterProps, type UseDexterWallet, type UseIdentityConfig, type UseSignInWithDexter, type UseSignInWithDexterConfig, useDexterWallet, useIdentity, useSignInWithDexter };

package/dist/react.js

@@ -10,10 +10,11 @@ import {
   passkeySignalSupport,
   prunePasskey,
   renamePasskey,
+  resolveIdentity,
   setActiveHandle,
   subscribe,
   switchWallet
-} from "./chunk-ZHJ557FI.js";
+} from "./chunk-6NIGGPVI.js";
 
 // src/useSignInWithDexter.ts
 import { useCallback, useEffect, useMemo, useState } from "react";
@@ -321,10 +322,24 @@ function useDexterWallet() {
     rename
   };
 }
+
+// src/useIdentity.ts
+import { useMemo as useMemo2 } from "react";
+function useIdentity({ accountToken }) {
+  const { activeHandle } = useDexterWallet();
+  return useMemo2(
+    () => resolveIdentity({
+      accountToken: accountToken ?? null,
+      userHandle: activeHandle ?? null
+    }),
+    [accountToken, activeHandle]
+  );
+}
 export {
   DexterButton,
   DexterMark,
   SignInWithDexter,
   useDexterWallet,
+  useIdentity,
   useSignInWithDexter
 };

package/dist/{signals-CXkNJfIo.d.ts → signals-DM7IQdq6.d.ts}

@@ -41,6 +41,18 @@ type CeremonyPhase = 'challenge' | 'passkey' | 'verifying' | 'finalizing';
 interface DexterConnectConfig {
     /** dexter-api base. Default https://api.dexter.cash. */
     apiBase?: string;
+    /**
+     * Where the WebAuthn ceremony runs:
+     *  - 'auto' (default): inline on the canonical Dexter origin (dexter.cash),
+     *    popup on ANY other origin — so a third-party site works without the
+     *    WebAuthn rpId-origin problem (in-page only works on dexter.cash).
+     *  - 'popup': always via the hosted popup (works on any website).
+     *  - 'inline': always in-page — only valid on a Dexter origin; this is what
+     *    the hosted ceremony page itself uses.
+     */
+    transport?: 'auto' | 'popup' | 'inline';
+    /** Hosted ceremony page (popup transport). Default https://dexter.cash/connect. */
+    connectHost?: string;
 }
 /** Typed error whose `code` is the server's snake_case error string. */
 declare class ConnectError extends Error {
@@ -48,6 +60,29 @@ declare class ConnectError extends Error {
     constructor(code: string, message?: string);
 }
 
+type IdentityKind = 'passkey-vault' | 'account' | 'none';
+interface IdentityInput {
+    /** An account session token (e.g. Supabase access_token) when present, else null. */
+    accountToken: string | null;
+    /** The passkey-vault user handle (the connect wallet store), else null. */
+    userHandle: string | null;
+}
+interface ResolvedIdentity {
+    /** The primary identity axis, passkey-vault-first. */
+    kind: IdentityKind;
+    /** Passkey-vault identity (FIRST-CLASS): the wallet handle, or null. */
+    userHandle: string | null;
+    /** Account identity (secondary/legacy axis): bearer for account-scoped fetches, or null. */
+    accountToken: string | null;
+    /** A passkey vault is present on this device. */
+    hasPasskeyVault: boolean;
+    /** An account session is present. */
+    hasAccount: boolean;
+    /** Any identity at all — drives "show the wallet" vs "Sign in with Dexter". */
+    hasWallet: boolean;
+}
+declare function resolveIdentity(input: IdentityInput): ResolvedIdentity;
+
 /** A wallet this browser knows about. `handle` is the identity; the rest is UX. */
 interface StoredWallet {
     /** base64url 16-byte user handle — the vault identity. */
@@ -145,4 +180,4 @@ declare function syncAcceptedPasskeys(args: {
     rpId?: string;
 }): Promise<boolean>;
 
-export { ACTIVE_WALLET_STORAGE_KEY as A, type CeremonyPhase as C, type DexterConnectConfig as D, type PasskeyLoginTokens as P, type SignInResult as S, type ConnectVault as a, ConnectError as b, type PasskeySignalSupport as c, type StoredWallet as d, ejectActiveWallet as e, forgetWallet as f, getActiveHandle as g, getCredentialId as h, prunePasskey as i, subscribe as j, switchWallet as k, listWallets as l, syncAcceptedPasskeys as m, passkeySignalSupport as p, renamePasskey as r, setActiveHandle as s };
+export { ACTIVE_WALLET_STORAGE_KEY as A, type CeremonyPhase as C, type DexterConnectConfig as D, type IdentityInput as I, type PasskeyLoginTokens as P, type ResolvedIdentity as R, type SignInResult as S, type ConnectVault as a, ConnectError as b, type IdentityKind as c, type PasskeySignalSupport as d, type StoredWallet as e, ejectActiveWallet as f, forgetWallet as g, getActiveHandle as h, getCredentialId as i, prunePasskey as j, resolveIdentity as k, listWallets as l, subscribe as m, switchWallet as n, syncAcceptedPasskeys as o, passkeySignalSupport as p, renamePasskey as r, setActiveHandle as s };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dexterai/connect",
-  "version": "0.10.0",
+  "version": "0.12.0",
   "description": "Sign in with Dexter — passkey connector. Composes @dexterai/vault.",
   "type": "module",
   "exports": {