@dexterai/connect 0.14.0 → 0.15.0

package/dist/{chunk-IUZBHWTP.js → chunk-RLVMYLHC.js}

@@ -124,57 +124,8 @@ function onStorageEvent(e) {
 }
 var ACTIVE_WALLET_STORAGE_KEY = ACTIVE_HANDLE_KEY;
 
-// src/base64.ts
-function base64ToBytes(s) {
-  const bin = atob(s);
-  const out = new Uint8Array(bin.length);
-  for (let i = 0; i < bin.length; i += 1) out[i] = bin.charCodeAt(i);
-  return out;
-}
-function base64urlToBytes(s) {
-  const pad = s.length % 4 === 0 ? "" : "=".repeat(4 - s.length % 4);
-  const b64 = s.replace(/-/g, "+").replace(/_/g, "/") + pad;
-  return base64ToBytes(b64);
-}
-function bytesToBase64(bytes) {
-  let bin = "";
-  for (let i = 0; i < bytes.length; i += 1) bin += String.fromCharCode(bytes[i]);
-  return btoa(bin);
-}
-function bytesToBase64url(bytes) {
-  return bytesToBase64(bytes).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
-}
-function compactSignatureToDer(compact) {
-  if (compact.length !== 64) {
-    throw new Error(`expected 64-byte compact signature, got ${compact.length}`);
-  }
-  const r = derInteger(compact.subarray(0, 32));
-  const s = derInteger(compact.subarray(32, 64));
-  const body = new Uint8Array(r.length + s.length);
-  body.set(r, 0);
-  body.set(s, r.length);
-  const out = new Uint8Array(2 + body.length);
-  out[0] = 48;
-  out[1] = body.length;
-  out.set(body, 2);
-  return out;
-}
-function derInteger(component) {
-  let start = 0;
-  while (start < component.length - 1 && component[start] === 0) start += 1;
-  let content = component.subarray(start);
-  if (content[0] & 128) {
-    const padded = new Uint8Array(content.length + 1);
-    padded[0] = 0;
-    padded.set(content, 1);
-    content = padded;
-  }
-  const out = new Uint8Array(2 + content.length);
-  out[0] = 2;
-  out[1] = content.length;
-  out.set(content, 2);
-  return out;
-}
+// src/enroll.ts
+import { startRegistration } from "@simplewebauthn/browser";
 
 // src/popup.ts
 var DEFAULT_CONNECT_HOST = "https://dexter.cash/connect";
@@ -282,9 +233,19 @@ async function createWallet(config = {}) {
   config.onPhase?.("challenge");
   const options = await fetchEnrollChallenge(apiBase);
   config.onPhase?.("passkey");
-  const credential = await createCredential(options, name, rpId);
+  const optionsJSON = {
+    ...options,
+    rp: { ...options.rp, id: options.rp.id ?? rpId, name: "Dexter" },
+    user: { ...options.user, name, displayName: name }
+  };
+  let regResponse;
+  try {
+    regResponse = await startRegistration({ optionsJSON });
+  } catch (err) {
+    throw new ConnectError("webauthn_failed", err instanceof Error ? err.message : String(err));
+  }
   config.onPhase?.("verifying");
-  const enrolled = await submitEnrollComplete(apiBase, credential);
+  const enrolled = await submitEnrollComplete(apiBase, regResponse);
   config.onPhase?.("finalizing");
   const init = await initializeVault(apiBase, enrolled.userHandle, enrolled.credentialId);
   setActiveHandle(enrolled.userHandle, name, enrolled.credentialId);
@@ -318,38 +279,11 @@ async function fetchEnrollChallenge(apiBase) {
   }
   return data.options;
 }
-async function createCredential(options, name, rpId) {
-  let credential;
-  try {
-    credential = await navigator.credentials.create({
-      publicKey: buildCreationOptions(options, name, rpId)
-    });
-  } catch (err) {
-    throw new ConnectError("webauthn_failed", err instanceof Error ? err.message : String(err));
-  }
-  if (!credential || credential.type !== "public-key") {
-    throw new ConnectError("no_credential", "authenticator returned no credential");
-  }
-  return credential;
-}
-async function submitEnrollComplete(apiBase, credential) {
-  const attestation = credential.response;
-  const credentialJson = {
-    id: credential.id,
-    rawId: bytesToBase64url(new Uint8Array(credential.rawId)),
-    type: credential.type,
-    response: {
-      attestationObject: bytesToBase64url(new Uint8Array(attestation.attestationObject)),
-      clientDataJSON: bytesToBase64url(new Uint8Array(attestation.clientDataJSON)),
-      transports: typeof attestation.getTransports === "function" ? attestation.getTransports() : []
-    },
-    clientExtensionResults: credential.getClientExtensionResults?.() ?? {},
-    authenticatorAttachment: credential.authenticatorAttachment ?? null
-  };
+async function submitEnrollComplete(apiBase, response) {
   const res = await fetch(`${apiBase}/api/passkey-anon/enroll/complete`, {
     method: "POST",
     headers: { "content-type": "application/json" },
-    body: JSON.stringify({ credential: credentialJson })
+    body: JSON.stringify({ credential: response })
   });
   if (!res.ok) throw new ConnectError(await readErrorCode(res), `enroll/complete ${res.status}`);
   return await res.json();
@@ -363,32 +297,6 @@ async function initializeVault(apiBase, userHandle, credentialId) {
   if (!res.ok) throw new ConnectError(await readErrorCode(res), `initialize ${res.status}`);
   return await res.json();
 }
-function toBuf(b64url) {
-  return base64urlToBytes(b64url).buffer.slice(0);
-}
-function buildCreationOptions(o, name, rpId) {
-  return {
-    // rp.name = the site shown in the keychain; user.name/displayName = the
-    // wallet label the user sees. We override the server's user.name (a raw,
-    // unreadable handle) with the chosen wallet name.
-    rp: { id: o.rp.id ?? rpId, name: "Dexter" },
-    user: {
-      id: toBuf(o.user.id),
-      name,
-      displayName: name
-    },
-    challenge: toBuf(o.challenge),
-    pubKeyCredParams: o.pubKeyCredParams,
-    timeout: o.timeout,
-    excludeCredentials: o.excludeCredentials?.map((c) => ({
-      id: toBuf(c.id),
-      type: c.type,
-      transports: c.transports
-    })),
-    authenticatorSelection: o.authenticatorSelection,
-    attestation: o.attestation
-  };
-}
 async function readErrorCode(res) {
   try {
     const body = await res.json();
@@ -399,6 +307,7 @@ async function readErrorCode(res) {
 }
 
 // src/relay.ts
+import { startAuthentication, browserSupportsWebAuthn } from "@simplewebauthn/browser";
 var DEFAULT_API_BASE2 = "https://api.dexter.cash";
 var ANON_SIGN_BASE = "/api/passkey-anon/sign";
 async function passkeyLogin(config = {}, onPhase) {
@@ -408,13 +317,21 @@ async function passkeyLogin(config = {}, onPhase) {
       apiBase: config.apiBase
     });
   }
+  if (!browserSupportsWebAuthn()) {
+    throw new ConnectError("webauthn_unsupported", "WebAuthn unavailable in this environment");
+  }
   const apiBase = (config.apiBase ?? DEFAULT_API_BASE2).replace(/\/$/, "");
   onPhase?.("challenge");
   const options = await fetchLoginChallenge(apiBase);
   onPhase?.("passkey");
-  const credential = await getAssertion(options);
+  let response;
+  try {
+    response = await startAuthentication({ optionsJSON: options });
+  } catch (err) {
+    throw new ConnectError("webauthn_failed", err instanceof Error ? err.message : String(err));
+  }
   onPhase?.("verifying");
-  return submitLogin(apiBase, credential);
+  return submitLogin(apiBase, response);
 }
 async function continueWithDexter(config = {}, onPhase) {
   if (shouldUsePopup(config.transport)) {
@@ -446,47 +363,11 @@ async function fetchLoginChallenge(apiBase) {
   }
   return data.options;
 }
-async function getAssertion(options) {
-  if (typeof navigator === "undefined" || !navigator.credentials) {
-    throw new ConnectError("webauthn_unsupported", "WebAuthn unavailable in this environment");
-  }
-  let credential;
-  try {
-    credential = await navigator.credentials.get({
-      publicKey: {
-        challenge: base64urlToBytes(options.challenge).buffer.slice(0),
-        rpId: options.rpId,
-        timeout: options.timeout ?? 6e4,
-        userVerification: options.userVerification ?? "required"
-        // No allowCredentials — discoverable resident-key login.
-      }
-    });
-  } catch (err) {
-    throw new ConnectError("webauthn_failed", err instanceof Error ? err.message : String(err));
-  }
-  if (!credential || credential.type !== "public-key") {
-    throw new ConnectError("no_credential", "WebAuthn returned no credential");
-  }
-  return credential;
-}
-async function submitLogin(apiBase, credential) {
-  const assertion = credential.response;
-  const credentialJson = {
-    id: credential.id,
-    rawId: bytesToBase64url(new Uint8Array(credential.rawId)),
-    type: credential.type,
-    response: {
-      clientDataJSON: bytesToBase64url(new Uint8Array(assertion.clientDataJSON)),
-      authenticatorData: bytesToBase64url(new Uint8Array(assertion.authenticatorData)),
-      signature: bytesToBase64url(new Uint8Array(assertion.signature)),
-      userHandle: assertion.userHandle ? bytesToBase64url(new Uint8Array(assertion.userHandle)) : null
-    },
-    clientExtensionResults: credential.getClientExtensionResults?.() ?? {}
-  };
+async function submitLogin(apiBase, response) {
   const res = await fetch(`${apiBase}${ANON_SIGN_BASE}/passkey-login`, {
     method: "POST",
     headers: { "content-type": "application/json" },
-    body: JSON.stringify({ credential: credentialJson })
+    body: JSON.stringify({ credential: response })
   });
   if (!res.ok) {
     throw new ConnectError(await readErrorCode2(res), `passkey-login ${res.status}`);
@@ -510,6 +391,58 @@ async function readErrorCode2(res) {
   return `http_${res.status}`;
 }
 
+// src/base64.ts
+function base64ToBytes(s) {
+  const bin = atob(s);
+  const out = new Uint8Array(bin.length);
+  for (let i = 0; i < bin.length; i += 1) out[i] = bin.charCodeAt(i);
+  return out;
+}
+function base64urlToBytes(s) {
+  const pad = s.length % 4 === 0 ? "" : "=".repeat(4 - s.length % 4);
+  const b64 = s.replace(/-/g, "+").replace(/_/g, "/") + pad;
+  return base64ToBytes(b64);
+}
+function bytesToBase64(bytes) {
+  let bin = "";
+  for (let i = 0; i < bytes.length; i += 1) bin += String.fromCharCode(bytes[i]);
+  return btoa(bin);
+}
+function bytesToBase64url(bytes) {
+  return bytesToBase64(bytes).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function compactSignatureToDer(compact) {
+  if (compact.length !== 64) {
+    throw new Error(`expected 64-byte compact signature, got ${compact.length}`);
+  }
+  const r = derInteger(compact.subarray(0, 32));
+  const s = derInteger(compact.subarray(32, 64));
+  const body = new Uint8Array(r.length + s.length);
+  body.set(r, 0);
+  body.set(s, r.length);
+  const out = new Uint8Array(2 + body.length);
+  out[0] = 48;
+  out[1] = body.length;
+  out.set(body, 2);
+  return out;
+}
+function derInteger(component) {
+  let start = 0;
+  while (start < component.length - 1 && component[start] === 0) start += 1;
+  let content = component.subarray(start);
+  if (content[0] & 128) {
+    const padded = new Uint8Array(content.length + 1);
+    padded[0] = 0;
+    padded.set(content, 1);
+    content = padded;
+  }
+  const out = new Uint8Array(2 + content.length);
+  out[0] = 2;
+  out[1] = content.length;
+  out.set(content, 2);
+  return out;
+}
+
 // src/anon-policy.ts
 var DEFAULT_API_BASE3 = "https://api.dexter.cash";
 var ANON_SIGN_BASE2 = "/api/passkey-anon/sign";

package/dist/index.js

@@ -20,7 +20,7 @@ import {
   subscribe,
   switchWallet,
   syncAcceptedPasskeys
-} from "./chunk-IUZBHWTP.js";
+} from "./chunk-RLVMYLHC.js";
 export {
   ACTIVE_WALLET_STORAGE_KEY,
   ConnectError,

package/dist/react.js

@@ -14,7 +14,7 @@ import {
   setActiveHandle,
   subscribe,
   switchWallet
-} from "./chunk-IUZBHWTP.js";
+} from "./chunk-RLVMYLHC.js";
 
 // src/useSignInWithDexter.ts
 import { useCallback, useEffect, useMemo, useState } from "react";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dexterai/connect",
-  "version": "0.14.0",
+  "version": "0.15.0",
   "description": "Sign in with Dexter — passkey connector. Composes @dexterai/vault.",
   "type": "module",
   "exports": {
@@ -32,5 +32,8 @@
     "tsup": "^8.5.0",
     "typescript": "^5.6.2",
     "vitest": "^4.1.9"
+  },
+  "dependencies": {
+    "@simplewebauthn/browser": "^13.3.0"
   }
 }