@dexterai/connect 0.12.0 → 0.14.0

package/dist/{chunk-6NIGGPVI.js → chunk-IUZBHWTP.js}

@@ -8,6 +8,122 @@ var ConnectError = class extends Error {
   }
 };
 
+// src/walletStore.ts
+var ACTIVE_HANDLE_KEY = "dexter:passkey:userHandle";
+var ROSTER_KEY = "dexter:passkey:wallets";
+var listeners = /* @__PURE__ */ new Set();
+function hasStorage() {
+  try {
+    return typeof window !== "undefined" && !!window.localStorage;
+  } catch {
+    return false;
+  }
+}
+function readRoster() {
+  if (!hasStorage()) return [];
+  try {
+    const raw = window.localStorage.getItem(ROSTER_KEY);
+    if (!raw) return [];
+    const parsed = JSON.parse(raw);
+    if (!Array.isArray(parsed)) return [];
+    return parsed.filter(
+      (w) => !!w && typeof w === "object" && typeof w.handle === "string"
+    );
+  } catch {
+    return [];
+  }
+}
+function writeRoster(wallets) {
+  if (!hasStorage()) return;
+  try {
+    window.localStorage.setItem(ROSTER_KEY, JSON.stringify(wallets));
+  } catch {
+  }
+}
+function emit() {
+  for (const l of listeners) {
+    try {
+      l();
+    } catch {
+    }
+  }
+}
+function getActiveHandle() {
+  if (!hasStorage()) return null;
+  try {
+    return window.localStorage.getItem(ACTIVE_HANDLE_KEY);
+  } catch {
+    return null;
+  }
+}
+function setActiveHandle(handle, label, credentialId) {
+  if (!hasStorage() || !handle) return;
+  try {
+    window.localStorage.setItem(ACTIVE_HANDLE_KEY, handle);
+  } catch {
+    return;
+  }
+  const roster = readRoster();
+  const existing = roster.find((w) => w.handle === handle);
+  const now = Date.now();
+  if (existing) {
+    existing.lastUsedAt = now;
+    if (label !== void 0) existing.label = label;
+    if (credentialId !== void 0) existing.credentialId = credentialId;
+  } else {
+    roster.push({ handle, label, credentialId, lastUsedAt: now });
+  }
+  writeRoster(roster);
+  emit();
+}
+function getCredentialId(handle) {
+  return readRoster().find((w) => w.handle === handle)?.credentialId;
+}
+function ejectActiveWallet(opts) {
+  if (!hasStorage()) return;
+  const current = getActiveHandle();
+  try {
+    window.localStorage.removeItem(ACTIVE_HANDLE_KEY);
+  } catch {
+  }
+  if (opts?.forget && current) {
+    writeRoster(readRoster().filter((w) => w.handle !== current));
+  }
+  emit();
+}
+function listWallets() {
+  return readRoster().sort((a, b) => (b.lastUsedAt ?? 0) - (a.lastUsedAt ?? 0));
+}
+function switchWallet(handle) {
+  if (!readRoster().some((w) => w.handle === handle)) return false;
+  setActiveHandle(handle);
+  return true;
+}
+function forgetWallet(handle) {
+  if (getActiveHandle() === handle) {
+    ejectActiveWallet({ forget: true });
+    return;
+  }
+  writeRoster(readRoster().filter((w) => w.handle !== handle));
+  emit();
+}
+function subscribe(listener) {
+  listeners.add(listener);
+  if (hasStorage() && listeners.size === 1) {
+    window.addEventListener("storage", onStorageEvent);
+  }
+  return () => {
+    listeners.delete(listener);
+    if (hasStorage() && listeners.size === 0) {
+      window.removeEventListener("storage", onStorageEvent);
+    }
+  };
+}
+function onStorageEvent(e) {
+  if (e.key === ACTIVE_HANDLE_KEY || e.key === ROSTER_KEY || e.key === null) emit();
+}
+var ACTIVE_WALLET_STORAGE_KEY = ACTIVE_HANDLE_KEY;
+
 // src/base64.ts
 function base64ToBytes(s) {
   const bin = atob(s);
@@ -145,8 +261,145 @@ function makeNonce() {
   return `rid-${new URL(location.href).searchParams.get("v") ?? ""}-${typeof performance !== "undefined" ? performance.now() : 0}`;
 }
 
-// src/relay.ts
+// src/enroll.ts
 var DEFAULT_API_BASE = "https://api.dexter.cash";
+var DEFAULT_RP_ID = "dexter.cash";
+var DEFAULT_WALLET_NAME = "Dexter Wallet";
+async function createWallet(config = {}) {
+  if (shouldUsePopup(config.transport)) {
+    return openCeremonyPopup("create", {
+      connectHost: config.connectHost,
+      name: config.name,
+      apiBase: config.apiBase
+    });
+  }
+  if (typeof navigator === "undefined" || !navigator.credentials) {
+    throw new ConnectError("webauthn_unsupported", "WebAuthn unavailable in this environment");
+  }
+  const apiBase = (config.apiBase ?? DEFAULT_API_BASE).replace(/\/$/, "");
+  const rpId = config.rpId ?? DEFAULT_RP_ID;
+  const name = config.name && config.name.trim() || DEFAULT_WALLET_NAME;
+  config.onPhase?.("challenge");
+  const options = await fetchEnrollChallenge(apiBase);
+  config.onPhase?.("passkey");
+  const credential = await createCredential(options, name, rpId);
+  config.onPhase?.("verifying");
+  const enrolled = await submitEnrollComplete(apiBase, credential);
+  config.onPhase?.("finalizing");
+  const init = await initializeVault(apiBase, enrolled.userHandle, enrolled.credentialId);
+  setActiveHandle(enrolled.userHandle, name, enrolled.credentialId);
+  return {
+    handle: enrolled.userHandle,
+    credentialId: enrolled.credentialId,
+    vault: {
+      vaultPda: init.vaultPda,
+      swigAddress: init.swigStateAddress,
+      // FAIL SAFE: never invent a receive address — null until the server returns
+      // one (depositing to the config PDA would strand funds).
+      receiveAddress: init.receiveAddress ?? null,
+      usdcAta: null,
+      // swig not deployed yet (counterfactual pattern)
+      publicKey: enrolled.publicKey,
+      userHandle: enrolled.userHandle,
+      credentialId: enrolled.credentialId
+    }
+  };
+}
+async function fetchEnrollChallenge(apiBase) {
+  const res = await fetch(`${apiBase}/api/passkey-anon/enroll/challenge`, {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: "{}"
+  });
+  if (!res.ok) throw new ConnectError("enroll_challenge_failed", `enroll/challenge ${res.status}`);
+  const data = await res.json();
+  if (!data?.options?.challenge) {
+    throw new ConnectError("enroll_challenge_malformed", "no creation options in response");
+  }
+  return data.options;
+}
+async function createCredential(options, name, rpId) {
+  let credential;
+  try {
+    credential = await navigator.credentials.create({
+      publicKey: buildCreationOptions(options, name, rpId)
+    });
+  } catch (err) {
+    throw new ConnectError("webauthn_failed", err instanceof Error ? err.message : String(err));
+  }
+  if (!credential || credential.type !== "public-key") {
+    throw new ConnectError("no_credential", "authenticator returned no credential");
+  }
+  return credential;
+}
+async function submitEnrollComplete(apiBase, credential) {
+  const attestation = credential.response;
+  const credentialJson = {
+    id: credential.id,
+    rawId: bytesToBase64url(new Uint8Array(credential.rawId)),
+    type: credential.type,
+    response: {
+      attestationObject: bytesToBase64url(new Uint8Array(attestation.attestationObject)),
+      clientDataJSON: bytesToBase64url(new Uint8Array(attestation.clientDataJSON)),
+      transports: typeof attestation.getTransports === "function" ? attestation.getTransports() : []
+    },
+    clientExtensionResults: credential.getClientExtensionResults?.() ?? {},
+    authenticatorAttachment: credential.authenticatorAttachment ?? null
+  };
+  const res = await fetch(`${apiBase}/api/passkey-anon/enroll/complete`, {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify({ credential: credentialJson })
+  });
+  if (!res.ok) throw new ConnectError(await readErrorCode(res), `enroll/complete ${res.status}`);
+  return await res.json();
+}
+async function initializeVault(apiBase, userHandle, credentialId) {
+  const res = await fetch(`${apiBase}/api/passkey-vault-anon/initialize`, {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify({ userHandle, credentialId, coolingOffSeconds: 0 })
+  });
+  if (!res.ok) throw new ConnectError(await readErrorCode(res), `initialize ${res.status}`);
+  return await res.json();
+}
+function toBuf(b64url) {
+  return base64urlToBytes(b64url).buffer.slice(0);
+}
+function buildCreationOptions(o, name, rpId) {
+  return {
+    // rp.name = the site shown in the keychain; user.name/displayName = the
+    // wallet label the user sees. We override the server's user.name (a raw,
+    // unreadable handle) with the chosen wallet name.
+    rp: { id: o.rp.id ?? rpId, name: "Dexter" },
+    user: {
+      id: toBuf(o.user.id),
+      name,
+      displayName: name
+    },
+    challenge: toBuf(o.challenge),
+    pubKeyCredParams: o.pubKeyCredParams,
+    timeout: o.timeout,
+    excludeCredentials: o.excludeCredentials?.map((c) => ({
+      id: toBuf(c.id),
+      type: c.type,
+      transports: c.transports
+    })),
+    authenticatorSelection: o.authenticatorSelection,
+    attestation: o.attestation
+  };
+}
+async function readErrorCode(res) {
+  try {
+    const body = await res.json();
+    if (body?.error) return body.error;
+  } catch {
+  }
+  return `http_${res.status}`;
+}
+
+// src/relay.ts
+var DEFAULT_API_BASE2 = "https://api.dexter.cash";
 var ANON_SIGN_BASE = "/api/passkey-anon/sign";
 async function passkeyLogin(config = {}, onPhase) {
   if (shouldUsePopup(config.transport)) {
@@ -155,7 +408,7 @@ async function passkeyLogin(config = {}, onPhase) {
       apiBase: config.apiBase
     });
   }
-  const apiBase = (config.apiBase ?? DEFAULT_API_BASE).replace(/\/$/, "");
+  const apiBase = (config.apiBase ?? DEFAULT_API_BASE2).replace(/\/$/, "");
   onPhase?.("challenge");
   const options = await fetchLoginChallenge(apiBase);
   onPhase?.("passkey");
@@ -163,6 +416,21 @@ async function passkeyLogin(config = {}, onPhase) {
   onPhase?.("verifying");
   return submitLogin(apiBase, credential);
 }
+async function continueWithDexter(config = {}, onPhase) {
+  if (shouldUsePopup(config.transport)) {
+    return openCeremonyPopup("continue", {
+      connectHost: config.connectHost,
+      name: config.name,
+      apiBase: config.apiBase
+    });
+  }
+  if (getActiveHandle()) {
+    const result2 = await passkeyLogin(config, onPhase);
+    return { kind: "signin", ...result2 };
+  }
+  const result = await createWallet({ ...config, onPhase });
+  return { kind: "create", ...result };
+}
 async function fetchLoginChallenge(apiBase) {
   const res = await fetch(`${apiBase}${ANON_SIGN_BASE}/login-challenge`, {
     method: "POST",
@@ -221,7 +489,7 @@ async function submitLogin(apiBase, credential) {
     body: JSON.stringify({ credential: credentialJson })
   });
   if (!res.ok) {
-    throw new ConnectError(await readErrorCode(res), `passkey-login ${res.status}`);
+    throw new ConnectError(await readErrorCode2(res), `passkey-login ${res.status}`);
   }
   const data = await res.json();
   const session = {
@@ -233,7 +501,7 @@ async function submitLogin(apiBase, credential) {
   };
   return data.vault ? { session, vault: data.vault } : { session };
 }
-async function readErrorCode(res) {
+async function readErrorCode2(res) {
   try {
     const body = await res.json();
     if (body?.error) return body.error;
@@ -243,9 +511,9 @@ async function readErrorCode(res) {
 }
 
 // src/anon-policy.ts
-var DEFAULT_API_BASE2 = "https://api.dexter.cash";
+var DEFAULT_API_BASE3 = "https://api.dexter.cash";
 var ANON_SIGN_BASE2 = "/api/passkey-anon/sign";
-function createAnonServerPolicy(apiBase = DEFAULT_API_BASE2) {
+function createAnonServerPolicy(apiBase = DEFAULT_API_BASE3) {
   const base = apiBase.replace(/\/$/, "");
   return {
     async issueChallenge({ userHandle, operationHash }) {
@@ -257,7 +525,7 @@ function createAnonServerPolicy(apiBase = DEFAULT_API_BASE2) {
           operationHash: bytesToBase64url(operationHash)
         })
       });
-      if (!res.ok) throw new ConnectError(await readErrorCode2(res), `challenge ${res.status}`);
+      if (!res.ok) throw new ConnectError(await readErrorCode3(res), `challenge ${res.status}`);
       const data = await res.json();
       const options = data?.options;
       if (!options?.challenge) {
@@ -294,7 +562,7 @@ function createAnonServerPolicy(apiBase = DEFAULT_API_BASE2) {
         headers: { "content-type": "application/json" },
         body: JSON.stringify({ credential, userHandle: bytesToBase64url(userHandle) })
       });
-      if (!res.ok) throw new ConnectError(await readErrorCode2(res), `verify ${res.status}`);
+      if (!res.ok) throw new ConnectError(await readErrorCode3(res), `verify ${res.status}`);
       const data = await res.json();
       if (data?.verified === false) {
         throw new ConnectError("verification_failed", "server returned verified=false");
@@ -302,7 +570,7 @@ function createAnonServerPolicy(apiBase = DEFAULT_API_BASE2) {
     }
   };
 }
-async function readErrorCode2(res) {
+async function readErrorCode3(res) {
   try {
     const body = await res.json();
     if (body?.error) return body.error;
@@ -336,122 +604,6 @@ function resolveIdentity(input) {
   return { kind, userHandle, accountToken, hasPasskeyVault, hasAccount, hasWallet };
 }
 
-// src/walletStore.ts
-var ACTIVE_HANDLE_KEY = "dexter:passkey:userHandle";
-var ROSTER_KEY = "dexter:passkey:wallets";
-var listeners = /* @__PURE__ */ new Set();
-function hasStorage() {
-  try {
-    return typeof window !== "undefined" && !!window.localStorage;
-  } catch {
-    return false;
-  }
-}
-function readRoster() {
-  if (!hasStorage()) return [];
-  try {
-    const raw = window.localStorage.getItem(ROSTER_KEY);
-    if (!raw) return [];
-    const parsed = JSON.parse(raw);
-    if (!Array.isArray(parsed)) return [];
-    return parsed.filter(
-      (w) => !!w && typeof w === "object" && typeof w.handle === "string"
-    );
-  } catch {
-    return [];
-  }
-}
-function writeRoster(wallets) {
-  if (!hasStorage()) return;
-  try {
-    window.localStorage.setItem(ROSTER_KEY, JSON.stringify(wallets));
-  } catch {
-  }
-}
-function emit() {
-  for (const l of listeners) {
-    try {
-      l();
-    } catch {
-    }
-  }
-}
-function getActiveHandle() {
-  if (!hasStorage()) return null;
-  try {
-    return window.localStorage.getItem(ACTIVE_HANDLE_KEY);
-  } catch {
-    return null;
-  }
-}
-function setActiveHandle(handle, label, credentialId) {
-  if (!hasStorage() || !handle) return;
-  try {
-    window.localStorage.setItem(ACTIVE_HANDLE_KEY, handle);
-  } catch {
-    return;
-  }
-  const roster = readRoster();
-  const existing = roster.find((w) => w.handle === handle);
-  const now = Date.now();
-  if (existing) {
-    existing.lastUsedAt = now;
-    if (label !== void 0) existing.label = label;
-    if (credentialId !== void 0) existing.credentialId = credentialId;
-  } else {
-    roster.push({ handle, label, credentialId, lastUsedAt: now });
-  }
-  writeRoster(roster);
-  emit();
-}
-function getCredentialId(handle) {
-  return readRoster().find((w) => w.handle === handle)?.credentialId;
-}
-function ejectActiveWallet(opts) {
-  if (!hasStorage()) return;
-  const current = getActiveHandle();
-  try {
-    window.localStorage.removeItem(ACTIVE_HANDLE_KEY);
-  } catch {
-  }
-  if (opts?.forget && current) {
-    writeRoster(readRoster().filter((w) => w.handle !== current));
-  }
-  emit();
-}
-function listWallets() {
-  return readRoster().sort((a, b) => (b.lastUsedAt ?? 0) - (a.lastUsedAt ?? 0));
-}
-function switchWallet(handle) {
-  if (!readRoster().some((w) => w.handle === handle)) return false;
-  setActiveHandle(handle);
-  return true;
-}
-function forgetWallet(handle) {
-  if (getActiveHandle() === handle) {
-    ejectActiveWallet({ forget: true });
-    return;
-  }
-  writeRoster(readRoster().filter((w) => w.handle !== handle));
-  emit();
-}
-function subscribe(listener) {
-  listeners.add(listener);
-  if (hasStorage() && listeners.size === 1) {
-    window.addEventListener("storage", onStorageEvent);
-  }
-  return () => {
-    listeners.delete(listener);
-    if (hasStorage() && listeners.size === 0) {
-      window.removeEventListener("storage", onStorageEvent);
-    }
-  };
-}
-function onStorageEvent(e) {
-  if (e.key === ACTIVE_HANDLE_KEY || e.key === ROSTER_KEY || e.key === null) emit();
-}
-var ACTIVE_WALLET_STORAGE_KEY = ACTIVE_HANDLE_KEY;
-
 // src/phase.ts
 var PHASE_LABEL = {
   challenge: "Preparing\u2026",
@@ -525,14 +677,6 @@ async function syncAcceptedPasskeys(args) {
 
 export {
   ConnectError,
-  base64urlToBytes,
-  bytesToBase64url,
-  shouldUsePopup,
-  openCeremonyPopup,
-  passkeyLogin,
-  createAnonServerPolicy,
-  createPasskeySigner,
-  resolveIdentity,
   getActiveHandle,
   setActiveHandle,
   getCredentialId,
@@ -542,6 +686,12 @@ export {
   forgetWallet,
   subscribe,
   ACTIVE_WALLET_STORAGE_KEY,
+  createWallet,
+  passkeyLogin,
+  continueWithDexter,
+  createAnonServerPolicy,
+  createPasskeySigner,
+  resolveIdentity,
   ceremonyPhaseLabel,
   passkeySignalSupport,
   renamePasskey,

package/dist/index.d.ts

@@ -1,7 +1,33 @@
-import { D as DexterConnectConfig, C as CeremonyPhase, S as SignInResult, a as ConnectVault } from './signals-DM7IQdq6.js';
-export { A as ACTIVE_WALLET_STORAGE_KEY, b as ConnectError, I as IdentityInput, c as IdentityKind, P as PasskeyLoginTokens, d as PasskeySignalSupport, R as ResolvedIdentity, e as StoredWallet, f as ejectActiveWallet, g as forgetWallet, h as getActiveHandle, i as getCredentialId, l as listWallets, p as passkeySignalSupport, j as prunePasskey, r as renamePasskey, k as resolveIdentity, s as setActiveHandle, m as subscribeWallet, n as switchWallet, o as syncAcceptedPasskeys } from './signals-DM7IQdq6.js';
+import { C as ConnectVault, D as DexterConnectConfig, a as CeremonyPhase, S as SignInResult } from './signals-BuP-7inZ.js';
+export { A as ACTIVE_WALLET_STORAGE_KEY, b as ConnectError, I as IdentityInput, c as IdentityKind, P as PasskeyLoginTokens, d as PasskeySignalSupport, R as ResolvedIdentity, e as StoredWallet, f as ejectActiveWallet, g as forgetWallet, h as getActiveHandle, i as getCredentialId, l as listWallets, p as passkeySignalSupport, j as prunePasskey, r as renamePasskey, k as resolveIdentity, s as setActiveHandle, m as subscribeWallet, n as switchWallet, o as syncAcceptedPasskeys } from './signals-BuP-7inZ.js';
 import { DexterApiBrowserPasskeySigner } from '@dexterai/vault/signers/browser';
 
+interface CreateWalletConfig extends DexterConnectConfig {
+    /** Label for the passkey in the OS keychain AND the wallet roster. Set at
+     *  creation — the only moment naming is guaranteed to stick. Default "Dexter Wallet". */
+    name?: string;
+    /** RP id for the new credential. Default "dexter.cash". */
+    rpId?: string;
+    /** Called as the ceremony progresses, for live "connecting steps" UI:
+     *  challenge → passkey → verifying → finalizing. */
+    onPhase?: (phase: CeremonyPhase) => void;
+}
+interface CreateWalletResult {
+    /** Server-minted 16-byte user handle, base64url — the vault identity. */
+    handle: string;
+    /** base64url credential id of the new passkey. */
+    credentialId: string;
+    /** The freshly initialized vault (swig not yet deployed; deploys lazily). */
+    vault: ConnectVault;
+}
+/**
+ * Mint a brand-new Dexter wallet (passkey + vault) and make it the active wallet.
+ *
+ * One passkey approval. Throws ConnectError on any failed leg (the `code` is the
+ * server's error string, or webauthn_failed / no_credential for the ceremony).
+ */
+declare function createWallet(config?: CreateWalletConfig): Promise<CreateWalletResult>;
+
 /**
  * "Sign in with Dexter" — the discoverable-credential login ceremony.
  *
@@ -16,6 +42,12 @@ import { DexterApiBrowserPasskeySigner } from '@dexterai/vault/signers/browser';
  * Supabase session, so the Supabase-gated router would 401.
  */
 declare function passkeyLogin(config?: DexterConnectConfig, onPhase?: (phase: CeremonyPhase) => void): Promise<SignInResult>;
+type ContinueResult = ({
+    kind: 'signin';
+} & SignInResult) | ({
+    kind: 'create';
+} & CreateWalletResult);
+declare function continueWithDexter(config?: CreateWalletConfig, onPhase?: (phase: CeremonyPhase) => void): Promise<ContinueResult>;
 
 /** What `issueChallenge` returns to the SDK signer. */
 interface AnonChallengeResult {
@@ -76,32 +108,6 @@ declare function createPasskeySigner(vault: ConnectVault, apiBase?: string, opts
     __assertion?: AssertionLike;
 }): DexterApiBrowserPasskeySigner;
 
-interface CreateWalletConfig extends DexterConnectConfig {
-    /** Label for the passkey in the OS keychain AND the wallet roster. Set at
-     *  creation — the only moment naming is guaranteed to stick. Default "Dexter Wallet". */
-    name?: string;
-    /** RP id for the new credential. Default "dexter.cash". */
-    rpId?: string;
-    /** Called as the ceremony progresses, for live "connecting steps" UI:
-     *  challenge → passkey → verifying → finalizing. */
-    onPhase?: (phase: CeremonyPhase) => void;
-}
-interface CreateWalletResult {
-    /** Server-minted 16-byte user handle, base64url — the vault identity. */
-    handle: string;
-    /** base64url credential id of the new passkey. */
-    credentialId: string;
-    /** The freshly initialized vault (swig not yet deployed; deploys lazily). */
-    vault: ConnectVault;
-}
-/**
- * Mint a brand-new Dexter wallet (passkey + vault) and make it the active wallet.
- *
- * One passkey approval. Throws ConnectError on any failed leg (the `code` is the
- * server's error string, or webauthn_failed / no_credential for the ceremony).
- */
-declare function createWallet(config?: CreateWalletConfig): Promise<CreateWalletResult>;
-
 /**
  * Human-readable label for a ceremony phase — the live "connecting step" copy.
  * ONE source of truth so sign-in (SignInWithDexter) and create (consumer setup
@@ -110,4 +116,4 @@ declare function createWallet(config?: CreateWalletConfig): Promise<CreateWallet
  */
 declare function ceremonyPhaseLabel(phase: CeremonyPhase): string;
 
-export { type AnonChallengeResult, type AnonServerPolicy, CeremonyPhase, ConnectVault, type CreateWalletConfig, type CreateWalletResult, DexterConnectConfig, SignInResult, ceremonyPhaseLabel, createAnonServerPolicy, createPasskeySigner, createWallet, passkeyLogin };
+export { type AnonChallengeResult, type AnonServerPolicy, CeremonyPhase, ConnectVault, type ContinueResult, type CreateWalletConfig, type CreateWalletResult, DexterConnectConfig, SignInResult, ceremonyPhaseLabel, continueWithDexter, createAnonServerPolicy, createPasskeySigner, createWallet, passkeyLogin };

package/dist/index.js

@@ -1,169 +1,31 @@
 import {
   ACTIVE_WALLET_STORAGE_KEY,
   ConnectError,
-  base64urlToBytes,
-  bytesToBase64url,
   ceremonyPhaseLabel,
+  continueWithDexter,
   createAnonServerPolicy,
   createPasskeySigner,
+  createWallet,
   ejectActiveWallet,
   forgetWallet,
   getActiveHandle,
   getCredentialId,
   listWallets,
-  openCeremonyPopup,
   passkeyLogin,
   passkeySignalSupport,
   prunePasskey,
   renamePasskey,
   resolveIdentity,
   setActiveHandle,
-  shouldUsePopup,
   subscribe,
   switchWallet,
   syncAcceptedPasskeys
-} from "./chunk-6NIGGPVI.js";
-
-// src/enroll.ts
-var DEFAULT_API_BASE = "https://api.dexter.cash";
-var DEFAULT_RP_ID = "dexter.cash";
-var DEFAULT_WALLET_NAME = "Dexter Wallet";
-async function createWallet(config = {}) {
-  if (shouldUsePopup(config.transport)) {
-    return openCeremonyPopup("create", {
-      connectHost: config.connectHost,
-      name: config.name,
-      apiBase: config.apiBase
-    });
-  }
-  if (typeof navigator === "undefined" || !navigator.credentials) {
-    throw new ConnectError("webauthn_unsupported", "WebAuthn unavailable in this environment");
-  }
-  const apiBase = (config.apiBase ?? DEFAULT_API_BASE).replace(/\/$/, "");
-  const rpId = config.rpId ?? DEFAULT_RP_ID;
-  const name = config.name && config.name.trim() || DEFAULT_WALLET_NAME;
-  config.onPhase?.("challenge");
-  const options = await fetchEnrollChallenge(apiBase);
-  config.onPhase?.("passkey");
-  const credential = await createCredential(options, name, rpId);
-  config.onPhase?.("verifying");
-  const enrolled = await submitEnrollComplete(apiBase, credential);
-  config.onPhase?.("finalizing");
-  const init = await initializeVault(apiBase, enrolled.userHandle, enrolled.credentialId);
-  setActiveHandle(enrolled.userHandle, name, enrolled.credentialId);
-  return {
-    handle: enrolled.userHandle,
-    credentialId: enrolled.credentialId,
-    vault: {
-      vaultPda: init.vaultPda,
-      swigAddress: init.swigStateAddress,
-      // FAIL SAFE: never invent a receive address — null until the server returns
-      // one (depositing to the config PDA would strand funds).
-      receiveAddress: init.receiveAddress ?? null,
-      usdcAta: null,
-      // swig not deployed yet (counterfactual pattern)
-      publicKey: enrolled.publicKey,
-      userHandle: enrolled.userHandle,
-      credentialId: enrolled.credentialId
-    }
-  };
-}
-async function fetchEnrollChallenge(apiBase) {
-  const res = await fetch(`${apiBase}/api/passkey-anon/enroll/challenge`, {
-    method: "POST",
-    headers: { "content-type": "application/json" },
-    body: "{}"
-  });
-  if (!res.ok) throw new ConnectError("enroll_challenge_failed", `enroll/challenge ${res.status}`);
-  const data = await res.json();
-  if (!data?.options?.challenge) {
-    throw new ConnectError("enroll_challenge_malformed", "no creation options in response");
-  }
-  return data.options;
-}
-async function createCredential(options, name, rpId) {
-  let credential;
-  try {
-    credential = await navigator.credentials.create({
-      publicKey: buildCreationOptions(options, name, rpId)
-    });
-  } catch (err) {
-    throw new ConnectError("webauthn_failed", err instanceof Error ? err.message : String(err));
-  }
-  if (!credential || credential.type !== "public-key") {
-    throw new ConnectError("no_credential", "authenticator returned no credential");
-  }
-  return credential;
-}
-async function submitEnrollComplete(apiBase, credential) {
-  const attestation = credential.response;
-  const credentialJson = {
-    id: credential.id,
-    rawId: bytesToBase64url(new Uint8Array(credential.rawId)),
-    type: credential.type,
-    response: {
-      attestationObject: bytesToBase64url(new Uint8Array(attestation.attestationObject)),
-      clientDataJSON: bytesToBase64url(new Uint8Array(attestation.clientDataJSON)),
-      transports: typeof attestation.getTransports === "function" ? attestation.getTransports() : []
-    },
-    clientExtensionResults: credential.getClientExtensionResults?.() ?? {},
-    authenticatorAttachment: credential.authenticatorAttachment ?? null
-  };
-  const res = await fetch(`${apiBase}/api/passkey-anon/enroll/complete`, {
-    method: "POST",
-    headers: { "content-type": "application/json" },
-    body: JSON.stringify({ credential: credentialJson })
-  });
-  if (!res.ok) throw new ConnectError(await readErrorCode(res), `enroll/complete ${res.status}`);
-  return await res.json();
-}
-async function initializeVault(apiBase, userHandle, credentialId) {
-  const res = await fetch(`${apiBase}/api/passkey-vault-anon/initialize`, {
-    method: "POST",
-    headers: { "content-type": "application/json" },
-    body: JSON.stringify({ userHandle, credentialId, coolingOffSeconds: 0 })
-  });
-  if (!res.ok) throw new ConnectError(await readErrorCode(res), `initialize ${res.status}`);
-  return await res.json();
-}
-function toBuf(b64url) {
-  return base64urlToBytes(b64url).buffer.slice(0);
-}
-function buildCreationOptions(o, name, rpId) {
-  return {
-    // rp.name = the site shown in the keychain; user.name/displayName = the
-    // wallet label the user sees. We override the server's user.name (a raw,
-    // unreadable handle) with the chosen wallet name.
-    rp: { id: o.rp.id ?? rpId, name: "Dexter" },
-    user: {
-      id: toBuf(o.user.id),
-      name,
-      displayName: name
-    },
-    challenge: toBuf(o.challenge),
-    pubKeyCredParams: o.pubKeyCredParams,
-    timeout: o.timeout,
-    excludeCredentials: o.excludeCredentials?.map((c) => ({
-      id: toBuf(c.id),
-      type: c.type,
-      transports: c.transports
-    })),
-    authenticatorSelection: o.authenticatorSelection,
-    attestation: o.attestation
-  };
-}
-async function readErrorCode(res) {
-  try {
-    const body = await res.json();
-    if (body?.error) return body.error;
-  } catch {
-  }
-  return `http_${res.status}`;
-}
+} from "./chunk-IUZBHWTP.js";
 export {
   ACTIVE_WALLET_STORAGE_KEY,
   ConnectError,
   ceremonyPhaseLabel,
+  continueWithDexter,
   createAnonServerPolicy,
   createPasskeySigner,
   createWallet,

package/dist/react.d.ts

@@ -1,5 +1,5 @@
 import { DexterApiBrowserPasskeySigner } from '@dexterai/vault/signers/browser';
-import { C as CeremonyPhase, S as SignInResult, P as PasskeyLoginTokens, a as ConnectVault, b as ConnectError, e as StoredWallet, d as PasskeySignalSupport, R as ResolvedIdentity } from './signals-DM7IQdq6.js';
+import { a as CeremonyPhase, S as SignInResult, P as PasskeyLoginTokens, C as ConnectVault, b as ConnectError, e as StoredWallet, d as PasskeySignalSupport, R as ResolvedIdentity } from './signals-BuP-7inZ.js';
 import { ReactElement, ReactNode } from 'react';
 
 type ConnectStatus = 'idle' | 'pending' | 'done' | 'error';
@@ -124,6 +124,43 @@ interface UseDexterWallet {
 }
 declare function useDexterWallet(): UseDexterWallet;
 
+interface DexterWalletChipProps {
+    /** Connected (a wallet/account is present) → avatar + label; else signed-out label only. */
+    connected: boolean;
+    /** What to show: account name, wallet label, or the signed-out prompt (e.g. "Log in"). */
+    label: string;
+    /** Avatar image (e.g. a linked X avatar); falls back to the initial. */
+    avatarUrl?: string | null;
+    /** Single-character avatar fallback (defaults to the first letter of `label`). */
+    avatarInitial?: string;
+    onClick?: () => void;
+    /** Extra className composed after the brand classes. */
+    className?: string;
+    /** Reflected to aria-expanded (when the chip toggles a menu). */
+    ariaExpanded?: boolean;
+}
+/** The branded wallet/account chip. Wire it to open your menu via `onClick`. */
+declare function DexterWalletChip(props: DexterWalletChipProps): ReactElement;
+
+interface DexterWalletMenuProps {
+    /** The wallet's display name (nickname, else "Dexter Wallet"). */
+    walletLabel: string;
+    /** Avatar initial (defaults to the first letter of walletLabel). */
+    avatarInitial?: string;
+    /** "Manage wallet" → the consumer's wallet page. Row hidden if omitted. */
+    onManageWallet?: () => void;
+    /** "Start fresh" → the consumer ejects/resets (guard + perform on its side). Row hidden if omitted. */
+    onStartFresh?: () => void;
+    /** Sign-in/save UI revealed when "Save your wallet" is tapped (e.g. <SignInWithDexter/>). Row hidden if omitted. */
+    saveSlot?: ReactNode;
+    /** Short hint shown above the save UI. */
+    saveHint?: string;
+    /** Extra className composed after the brand classes. */
+    className?: string;
+}
+/** The branded wallet dropdown. */
+declare function DexterWalletMenu(props: DexterWalletMenuProps): ReactElement;
+
 interface UseIdentityConfig {
     /** The account session token (e.g. a Supabase access_token), or null when the
      *  user has no account session. The SDK is auth-agnostic — pass your own. */
@@ -131,4 +168,4 @@ interface UseIdentityConfig {
 }
 declare function useIdentity({ accountToken }: UseIdentityConfig): ResolvedIdentity;
 
-export { type ConnectStatus, DexterButton, type DexterButtonProps, DexterMark, SignInWithDexter, type SignInWithDexterProps, type UseDexterWallet, type UseIdentityConfig, type UseSignInWithDexter, type UseSignInWithDexterConfig, useDexterWallet, useIdentity, useSignInWithDexter };
+export { type ConnectStatus, DexterButton, type DexterButtonProps, DexterMark, DexterWalletChip, type DexterWalletChipProps, DexterWalletMenu, type DexterWalletMenuProps, SignInWithDexter, type SignInWithDexterProps, type UseDexterWallet, type UseIdentityConfig, type UseSignInWithDexter, type UseSignInWithDexterConfig, useDexterWallet, useIdentity, useSignInWithDexter };

package/dist/react.js

@@ -14,7 +14,7 @@ import {
   setActiveHandle,
   subscribe,
   switchWallet
-} from "./chunk-6NIGGPVI.js";
+} from "./chunk-IUZBHWTP.js";
 
 // src/useSignInWithDexter.ts
 import { useCallback, useEffect, useMemo, useState } from "react";
@@ -323,6 +323,136 @@ function useDexterWallet() {
   };
 }
 
+// src/DexterWalletChip.tsx
+import { useEffect as useEffect5 } from "react";
+
+// src/walletKitStyles.ts
+var STYLE_ID2 = "dexter-connect-wallet-kit-styles";
+var WALLET_KIT_CSS = `
+.dx-wchip{
+  --dx-ember:#f26c18; --dx-ember-2:#ba3a00; --dx-fg:#fff4ea; --dx-radius:0px;
+  display:inline-flex; align-items:center; gap:9px; max-width:240px;
+  padding:6px 12px 6px 7px; font:inherit; font-weight:600; font-size:.74rem;
+  letter-spacing:.1em; text-transform:uppercase; cursor:pointer; background:transparent;
+  color:inherit; border:1px solid color-mix(in srgb,var(--dx-ember) 42%,transparent);
+  border-radius:var(--dx-radius); -webkit-tap-highlight-color:transparent;
+  transition:filter .16s ease, box-shadow .16s ease, border-color .16s ease;
+}
+.dx-wchip:hover{ filter:brightness(1.08); box-shadow:0 8px 18px color-mix(in srgb,var(--dx-ember) 18%,transparent); }
+.dx-wchip:focus-visible{ outline:none; box-shadow:0 0 0 3px color-mix(in srgb,var(--dx-ember) 34%,transparent); }
+.dx-wchip--signedout{ border-color:color-mix(in srgb,currentColor 22%,transparent); padding-left:12px; }
+.dx-wchip__avatar{
+  width:22px; height:22px; flex-shrink:0; display:inline-flex; align-items:center; justify-content:center;
+  border-radius:50%; overflow:hidden; font-size:.72rem; font-weight:700; letter-spacing:0; line-height:1;
+  background:linear-gradient(135deg,var(--dx-ember),var(--dx-ember-2)); color:var(--dx-fg);
+}
+.dx-wchip__avatar img{ width:100%; height:100%; object-fit:cover; }
+.dx-wchip__label{ overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
+
+.dx-wmenu{ --dx-ember:#f26c18; --dx-ember-2:#ba3a00; --dx-fg:#fff4ea; display:flex; flex-direction:column; min-width:248px; }
+.dx-wmenu__id{ display:flex; align-items:center; gap:10px; padding:13px 15px; border-bottom:1px solid color-mix(in srgb,currentColor 12%,transparent); }
+.dx-wmenu__avatar{ width:32px; height:32px; flex-shrink:0; display:inline-flex; align-items:center; justify-content:center; border-radius:50%; font-weight:700; font-size:.85rem; line-height:1; background:linear-gradient(135deg,var(--dx-ember),var(--dx-ember-2)); color:var(--dx-fg); }
+.dx-wmenu__meta{ display:flex; flex-direction:column; gap:2px; min-width:0; }
+.dx-wmenu__name{ font-weight:700; font-size:.9rem; overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
+.dx-wmenu__sub{ font-size:.66rem; letter-spacing:.12em; text-transform:uppercase; opacity:.55; }
+.dx-wmenu__list{ display:flex; flex-direction:column; padding:6px; }
+.dx-wmenu__item{ display:flex; align-items:center; justify-content:space-between; gap:10px; width:100%; padding:10px 12px; font:inherit; font-size:.82rem; font-weight:600; text-align:left; background:transparent; border:none; color:inherit; cursor:pointer; transition:background .12s ease; }
+.dx-wmenu__item:hover{ background:color-mix(in srgb,var(--dx-ember) 10%,transparent); }
+.dx-wmenu__item--danger{ color:#e5552e; }
+.dx-wmenu__icon{ opacity:.45; font-size:.9rem; }
+.dx-wmenu__back{ border-bottom:1px solid color-mix(in srgb,currentColor 10%,transparent); opacity:.85; }
+.dx-wmenu__save{ display:flex; flex-direction:column; gap:9px; padding:13px 15px; }
+.dx-wmenu__savehint{ font-size:.78rem; line-height:1.4; opacity:.7; }
+`;
+function ensureWalletKitStyles() {
+  if (typeof document === "undefined") return;
+  if (document.getElementById(STYLE_ID2)) return;
+  const el = document.createElement("style");
+  el.id = STYLE_ID2;
+  el.textContent = WALLET_KIT_CSS;
+  document.head.appendChild(el);
+}
+ensureWalletKitStyles();
+
+// src/DexterWalletChip.tsx
+import { jsx as jsx3, jsxs as jsxs3 } from "react/jsx-runtime";
+function DexterWalletChip(props) {
+  const { connected, label, avatarUrl, avatarInitial, onClick, className, ariaExpanded } = props;
+  useEffect5(ensureWalletKitStyles, []);
+  const initial = (avatarInitial ?? label.trim().charAt(0) ?? "D").toUpperCase();
+  return /* @__PURE__ */ jsxs3(
+    "button",
+    {
+      type: "button",
+      className: cx("dx-wchip", !connected && "dx-wchip--signedout", className),
+      onClick,
+      "aria-expanded": ariaExpanded,
+      children: [
+        connected ? /* @__PURE__ */ jsx3("span", { className: "dx-wchip__avatar", "aria-hidden": "true", children: avatarUrl ? /* @__PURE__ */ jsx3("img", { src: avatarUrl, alt: "" }) : initial }) : null,
+        /* @__PURE__ */ jsx3("span", { className: "dx-wchip__label", children: label })
+      ]
+    }
+  );
+}
+
+// src/DexterWalletMenu.tsx
+import { useEffect as useEffect6, useState as useState3 } from "react";
+import { jsx as jsx4, jsxs as jsxs4 } from "react/jsx-runtime";
+function DexterWalletMenu(props) {
+  const { walletLabel, avatarInitial, onManageWallet, onStartFresh, saveSlot, saveHint, className } = props;
+  useEffect6(ensureWalletKitStyles, []);
+  const [showSave, setShowSave] = useState3(false);
+  const initial = (avatarInitial ?? walletLabel.trim().charAt(0) ?? "D").toUpperCase();
+  if (showSave && saveSlot) {
+    return /* @__PURE__ */ jsxs4("div", { className: cx("dx-wmenu", className), children: [
+      /* @__PURE__ */ jsx4(
+        "button",
+        {
+          type: "button",
+          className: "dx-wmenu__item dx-wmenu__back",
+          onClick: () => setShowSave(false),
+          children: /* @__PURE__ */ jsx4("span", { children: "\u2190 Back to wallet" })
+        }
+      ),
+      /* @__PURE__ */ jsxs4("div", { className: "dx-wmenu__save", children: [
+        saveHint ? /* @__PURE__ */ jsx4("span", { className: "dx-wmenu__savehint", children: saveHint }) : null,
+        saveSlot
+      ] })
+    ] });
+  }
+  return /* @__PURE__ */ jsxs4("div", { className: cx("dx-wmenu", className), children: [
+    /* @__PURE__ */ jsxs4("div", { className: "dx-wmenu__id", children: [
+      /* @__PURE__ */ jsx4("span", { className: "dx-wmenu__avatar", "aria-hidden": "true", children: initial }),
+      /* @__PURE__ */ jsxs4("span", { className: "dx-wmenu__meta", children: [
+        /* @__PURE__ */ jsx4("span", { className: "dx-wmenu__name", children: walletLabel }),
+        /* @__PURE__ */ jsx4("span", { className: "dx-wmenu__sub", children: "Your Dexter Wallet" })
+      ] })
+    ] }),
+    /* @__PURE__ */ jsxs4("div", { className: "dx-wmenu__list", children: [
+      onManageWallet ? /* @__PURE__ */ jsxs4("button", { type: "button", className: "dx-wmenu__item", onClick: onManageWallet, children: [
+        /* @__PURE__ */ jsx4("span", { children: "Manage wallet" }),
+        /* @__PURE__ */ jsx4("span", { className: "dx-wmenu__icon", "aria-hidden": "true", children: "\u2197" })
+      ] }) : null,
+      saveSlot ? /* @__PURE__ */ jsxs4("button", { type: "button", className: "dx-wmenu__item", onClick: () => setShowSave(true), children: [
+        /* @__PURE__ */ jsx4("span", { children: "Save your wallet" }),
+        /* @__PURE__ */ jsx4("span", { className: "dx-wmenu__icon", "aria-hidden": "true", children: "\u2197" })
+      ] }) : null,
+      onStartFresh ? /* @__PURE__ */ jsxs4(
+        "button",
+        {
+          type: "button",
+          className: "dx-wmenu__item dx-wmenu__item--danger",
+          onClick: onStartFresh,
+          children: [
+            /* @__PURE__ */ jsx4("span", { children: "Start fresh" }),
+            /* @__PURE__ */ jsx4("span", { className: "dx-wmenu__icon", "aria-hidden": "true", children: "\u27F5" })
+          ]
+        }
+      ) : null
+    ] })
+  ] });
+}
+
 // src/useIdentity.ts
 import { useMemo as useMemo2 } from "react";
 function useIdentity({ accountToken }) {
@@ -338,6 +468,8 @@ function useIdentity({ accountToken }) {
 export {
   DexterButton,
   DexterMark,
+  DexterWalletChip,
+  DexterWalletMenu,
   SignInWithDexter,
   useDexterWallet,
   useIdentity,

package/dist/{signals-DM7IQdq6.d.ts → signals-BuP-7inZ.d.ts}

@@ -180,4 +180,4 @@ declare function syncAcceptedPasskeys(args: {
     rpId?: string;
 }): Promise<boolean>;
 
-export { ACTIVE_WALLET_STORAGE_KEY as A, type CeremonyPhase as C, type DexterConnectConfig as D, type IdentityInput as I, type PasskeyLoginTokens as P, type ResolvedIdentity as R, type SignInResult as S, type ConnectVault as a, ConnectError as b, type IdentityKind as c, type PasskeySignalSupport as d, type StoredWallet as e, ejectActiveWallet as f, forgetWallet as g, getActiveHandle as h, getCredentialId as i, prunePasskey as j, resolveIdentity as k, listWallets as l, subscribe as m, switchWallet as n, syncAcceptedPasskeys as o, passkeySignalSupport as p, renamePasskey as r, setActiveHandle as s };
+export { ACTIVE_WALLET_STORAGE_KEY as A, type ConnectVault as C, type DexterConnectConfig as D, type IdentityInput as I, type PasskeyLoginTokens as P, type ResolvedIdentity as R, type SignInResult as S, type CeremonyPhase as a, ConnectError as b, type IdentityKind as c, type PasskeySignalSupport as d, type StoredWallet as e, ejectActiveWallet as f, forgetWallet as g, getActiveHandle as h, getCredentialId as i, prunePasskey as j, resolveIdentity as k, listWallets as l, subscribe as m, switchWallet as n, syncAcceptedPasskeys as o, passkeySignalSupport as p, renamePasskey as r, setActiveHandle as s };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dexterai/connect",
-  "version": "0.12.0",
+  "version": "0.14.0",
   "description": "Sign in with Dexter — passkey connector. Composes @dexterai/vault.",
   "type": "module",
   "exports": {