@dexterai/connect 0.15.0 → 0.17.0

package/dist/chunk-S7G2ZZOO.js

@@ -0,0 +1,107 @@
+// src/DexterButton.tsx
+import { useEffect } from "react";
+import { Fragment, jsx, jsxs } from "react/jsx-runtime";
+var STYLE_ID = "dexter-connect-button-styles";
+var BUTTON_CSS = `
+@keyframes dx-spin { to { transform: rotate(360deg); } }
+@keyframes dx-pulse { 0%,100% { opacity: 1; } 50% { opacity: .6; } }
+.dx-btn{
+  --dx-ember:#f26c18; --dx-ember-2:#ba3a00; --dx-fg:#fff4ea; --dx-radius:0px;
+  position:relative; display:inline-flex; align-items:center; justify-content:center; gap:10px;
+  padding:11px 22px; border:1px solid color-mix(in srgb,var(--dx-ember) 55%,transparent);
+  border-radius:var(--dx-radius);
+  background:linear-gradient(135deg,var(--dx-ember),var(--dx-ember-2));
+  color:var(--dx-fg); font:inherit; font-weight:600; font-size:.78rem; letter-spacing:.12em;
+  text-transform:uppercase; cursor:pointer; -webkit-tap-highlight-color:transparent;
+  box-shadow:0 14px 26px color-mix(in srgb,var(--dx-ember) 24%,transparent);
+  transition:transform .16s ease, box-shadow .16s ease, filter .16s ease, background .16s ease;
+}
+.dx-btn:hover{ transform:translateY(-1px); filter:brightness(1.07); box-shadow:0 20px 34px color-mix(in srgb,var(--dx-ember) 32%,transparent); }
+.dx-btn:active{ transform:translateY(0); filter:brightness(.97); box-shadow:0 8px 16px color-mix(in srgb,var(--dx-ember) 22%,transparent); }
+.dx-btn:focus-visible{ outline:none; box-shadow:0 0 0 3px color-mix(in srgb,var(--dx-ember) 38%,transparent); }
+.dx-btn:disabled{ cursor:default; filter:saturate(.85) brightness(.98); }
+.dx-btn--secondary{ background:transparent; color:var(--dx-ember); box-shadow:none; border-color:color-mix(in srgb,var(--dx-ember) 45%,transparent); }
+.dx-btn--secondary:hover{ background:color-mix(in srgb,var(--dx-ember) 9%,transparent); filter:none; box-shadow:none; }
+.dx-btn--block{ width:100%; }
+.dx-btn__mark{ flex-shrink:0; }
+.dx-btn__spin{ width:15px; height:15px; flex-shrink:0; border-radius:50%;
+  border:2px solid color-mix(in srgb,currentColor 30%,transparent); border-top-color:currentColor;
+  animation:dx-spin .7s linear infinite; }
+.dx-btn__doing{ animation:dx-pulse 1.4s ease-in-out infinite; }
+.dx-chip{ display:inline-flex; align-items:center; gap:8px; padding:6px 10px; font:inherit;
+  font-variant-numeric:tabular-nums; border-radius:var(--dx-radius,0);
+  border:1px solid color-mix(in srgb,var(--dx-ember,#f26c18) 35%,transparent); }
+.dx-chip__dot{ width:7px; height:7px; border-radius:50%; background:var(--dx-ember,#f26c18); }
+.dx-chip__bal{ font-weight:600; opacity:.85; }
+.dx-chip__x{ margin-left:2px; border:none; background:transparent; color:inherit; cursor:pointer; font-size:16px; line-height:1; opacity:.6; }
+.dx-chip__x:hover{ opacity:1; }
+`;
+function ensureDexterButtonStyles() {
+  if (typeof document === "undefined") return;
+  if (document.getElementById(STYLE_ID)) return;
+  const el = document.createElement("style");
+  el.id = STYLE_ID;
+  el.textContent = BUTTON_CSS;
+  document.head.appendChild(el);
+}
+ensureDexterButtonStyles();
+function cx(...parts) {
+  return parts.filter(Boolean).join(" ");
+}
+function DexterMark() {
+  return /* @__PURE__ */ jsxs(
+    "svg",
+    {
+      className: "dx-btn__mark",
+      width: "18",
+      height: "18",
+      viewBox: "0 0 300 300",
+      fill: "currentColor",
+      "aria-hidden": "true",
+      children: [
+        /* @__PURE__ */ jsx("path", { d: "M143.18,22.65c35.41,7.66,68.19,23.6,94.89,48.28,5.22,4.86,11.17,10.45,15.18,16.1,1.38,1.93,1.94,3.6.99,5.23-1.08,1.92-4.22,3.41-6.56,4.17-28.39,9.43-61.55,8.26-88.62-4.69-13.81-7.66-17.02-5.76-31.67-3.48-21.89,2.38-46.67.37-65.06-12.31-6.07-4.99-9.33-12.71-8.8-20.52-.16-9.4,4.25-18.12,11.47-24.06,21.29-17.85,52.64-14.45,78-8.77l.18.04h0Z" }),
+        /* @__PURE__ */ jsx("path", { d: "M46.08,129.98c1.06-1.03,3.52-1.07,5.29-1.04,48.98-.05,98.1-.06,146.83-.1,17.53.14,35.01-.31,52.49.18,2.13.18,3.89.74,4.73,2.05,1.46,2.38.35,6.09-1.98,7.6-3.66,2.05-8.62,1.33-12.86,1.74-2.85.12-5.45.13-7.02,2.02-.91,1.07-1.28,2.56-1.56,3.95-.57,3.23-1.16,6.52-1.89,9.62-2.81,12.43-8.68,24.65-19.76,31.56-9.49,5.59-20.42,6.86-31.2,5.75-11.88-1.69-22.15-8.81-29.11-18.28-3.51-4.81-4.92-10.5-5.8-16.29-.47-2.56-.51-5.87-1.35-8-1.16-3.38-6.14-2.59-9.25-1.92-4.21.95-4.39,5.7-5.14,9.19-2.25,11.18-6.84,20.68-16.15,27.65-1.31,1.05-2.91,2.03-2.12,3.66,2.5,3.21,6.65,4.49,10.44,5.97,3.26,1.17,6.86,2.41,7.18,6.06.05,8.18-11.97,3.46-16.32,1.85-3.95-1.55-7.4-4.27-10.42-7.26-3.92-4.28-9.66-4.5-15.16-4.45-3.45-.07-6.99-.19-10.45-.82-21.29-4-31.08-21.3-30.9-42.01-.08-4.63.03-9.32.09-13.91.04-1.69.07-3.46,1.28-4.67l.1-.09h0Z" }),
+        /* @__PURE__ */ jsx("path", { d: "M173.06,203.11c9.24-.06,21.6,4.49,22.85,14.84.3,2.12-.67,4.34-2.92,4.73-1.38.29-2.88-.05-4.09-.75-1.64-.9-2.97-2.86-4.19-3.05-1.33-.2-1.99.81-2.93,1.94-10.27,13.34-28.04,20.92-44.83,20.42-15.41-.33-31.89-5.95-43.53-17.34-3.15-3.39-1.55-9.88,3.61-9.19,1.83.32,3.29,1.45,4.76,2.65,10.49,10.12,24.85,14.04,39.12,13.03,10.55-1.23,20.38-5.47,28.74-11.92,1.11-1.06,4.45-3.63,3.5-5.12-.76-.85-4.31-.47-5.92-2.01-2.25-1.92-1.39-6.22,1.16-7.36,1.36-.65,2.96-.81,4.47-.86h.2,0Z" })
+      ]
+    }
+  );
+}
+function DexterButton(props) {
+  const {
+    children,
+    loading = false,
+    loadingLabel = "Connecting\u2026",
+    variant = "primary",
+    block = false,
+    withMark = true,
+    onClick,
+    disabled = false,
+    className,
+    type = "button"
+  } = props;
+  useEffect(ensureDexterButtonStyles, []);
+  return /* @__PURE__ */ jsx(
+    "button",
+    {
+      type,
+      className: cx("dx-btn", variant === "secondary" && "dx-btn--secondary", block && "dx-btn--block", className),
+      onClick,
+      disabled: disabled || loading,
+      "aria-busy": loading,
+      children: loading ? /* @__PURE__ */ jsxs(Fragment, { children: [
+        /* @__PURE__ */ jsx("span", { className: "dx-btn__spin", "aria-hidden": true }),
+        /* @__PURE__ */ jsx("span", { className: "dx-btn__doing", children: loadingLabel })
+      ] }) : /* @__PURE__ */ jsxs(Fragment, { children: [
+        withMark && /* @__PURE__ */ jsx(DexterMark, {}),
+        children
+      ] })
+    }
+  );
+}
+
+export {
+  ensureDexterButtonStyles,
+  cx,
+  DexterMark,
+  DexterButton
+};

package/dist/{chunk-RLVMYLHC.js → chunk-Y22JFT53.js}

@@ -411,6 +411,10 @@ function bytesToBase64(bytes) {
 function bytesToBase64url(bytes) {
   return bytesToBase64(bytes).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
+function base64urlToBase64(s) {
+  const t = s.replace(/-/g, "+").replace(/_/g, "/");
+  return t + "=".repeat((4 - t.length % 4) % 4);
+}
 function compactSignatureToDer(compact) {
   if (compact.length !== 64) {
     throw new Error(`expected 64-byte compact signature, got ${compact.length}`);
@@ -622,6 +626,8 @@ export {
   createWallet,
   passkeyLogin,
   continueWithDexter,
+  bytesToBase64url,
+  base64urlToBase64,
   createAnonServerPolicy,
   createPasskeySigner,
   resolveIdentity,

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { C as ConnectVault, D as DexterConnectConfig, a as CeremonyPhase, S as SignInResult } from './signals-BuP-7inZ.js';
-export { A as ACTIVE_WALLET_STORAGE_KEY, b as ConnectError, I as IdentityInput, c as IdentityKind, P as PasskeyLoginTokens, d as PasskeySignalSupport, R as ResolvedIdentity, e as StoredWallet, f as ejectActiveWallet, g as forgetWallet, h as getActiveHandle, i as getCredentialId, l as listWallets, p as passkeySignalSupport, j as prunePasskey, r as renamePasskey, k as resolveIdentity, s as setActiveHandle, m as subscribeWallet, n as switchWallet, o as syncAcceptedPasskeys } from './signals-BuP-7inZ.js';
+import { C as ConnectVault, D as DexterConnectConfig, a as CeremonyPhase, S as SignInResult, I as IdentityKind } from './signals-BaXobUfB.js';
+export { A as ACTIVE_WALLET_STORAGE_KEY, b as ConnectError, c as IdentityInput, P as PasskeyLoginTokens, d as PasskeySignalSupport, R as ResolvedIdentity, e as StoredWallet, f as ejectActiveWallet, g as forgetWallet, h as getActiveHandle, i as getCredentialId, l as listWallets, p as passkeySignalSupport, j as prunePasskey, r as renamePasskey, k as resolveIdentity, s as setActiveHandle, m as subscribeWallet, n as switchWallet, o as syncAcceptedPasskeys } from './signals-BaXobUfB.js';
 import { DexterApiBrowserPasskeySigner } from '@dexterai/vault/signers/browser';
 
 interface CreateWalletConfig extends DexterConnectConfig {
@@ -116,4 +116,135 @@ declare function createPasskeySigner(vault: ConnectVault, apiBase?: string, opts
  */
 declare function ceremonyPhaseLabel(phase: CeremonyPhase): string;
 
-export { type AnonChallengeResult, type AnonServerPolicy, CeremonyPhase, ConnectVault, type ContinueResult, type CreateWalletConfig, type CreateWalletResult, DexterConnectConfig, SignInResult, ceremonyPhaseLabel, continueWithDexter, createAnonServerPolicy, createPasskeySigner, createWallet, passkeyLogin };
+/** The automatic role-2 agent-spend rail. */
+interface AutomaticAgentSpend {
+    /** true = agent-spend is ON (not revoked). Derived from revokedAt === null. */
+    active: boolean;
+    /** ISO timestamp the rail was revoked, or null when active. */
+    revokedAt: string | null;
+    /**
+     * On-chain role-2 arm state, decoded from authority.signer by the backend:
+     *   true  = armed (the rail is live and can spend)
+     *   false = dormant (granted but not yet armed — arms on first pay)
+     *   null  = indeterminate (vault not activated, or a transient chain read failed)
+     * NEVER derived from liveSessionCount (that counts the wrong session model).
+     */
+    armed: boolean | null;
+    spentTodayAtomic?: string;
+    dailyCapAtomic?: string;
+    perCallCapAtomic?: string;
+    lifetimeSpentAtomic?: string;
+}
+/** One explicit user-opened Tab (a V6 per-counterparty session). */
+interface AgentSpendTab {
+    /** The session pubkey — the handle a Tab revoke targets. */
+    id: string;
+    /** The counterparty (agent/app) address this Tab authorizes. */
+    counterparty: string;
+    /** Display label: the Dexter-verified app name, else a shortened address. */
+    label: string;
+    /** Whether the Tab is currently live (not expired/spent-out/revoked). */
+    live: boolean;
+    /** Spent so far against this Tab's cap, atomic USDC (6dp) string. */
+    spentAtomic: string;
+    /** This Tab's spending cap, atomic USDC (6dp) string. */
+    capAtomic: string;
+    /** Unix seconds when the Tab expires. */
+    expiresAt: number;
+}
+/** The honest two-mode status: one balance, two separately-accounted rails. */
+interface AgentSpendStatus {
+    /** Vault USDC balance, atomic (6dp) string — the ONE pool both rails draw. */
+    balanceAtomic: string | null;
+    /** The automatic role-2 rail. */
+    automatic: AutomaticAgentSpend;
+    /** The explicit Tabs. */
+    tabs: AgentSpendTab[];
+}
+/** The fields of GET /status the two-mode read consumes. */
+interface RawAgentSpendStatus {
+    /** ISO timestamp when revoked, null when active. Top-level on /status. */
+    agentSpendRevokedAt?: string | null;
+    /** On-chain armed read (authority.signer). true/false/null. Top-level on /status. */
+    agentSpendArmed?: boolean | null;
+    /** On-chain block; usdcAtomic is the vault balance. */
+    onchain?: {
+        usdcAtomic?: string | null;
+        /** Present but DELIBERATELY UNUSED here — counts the wrong session model. */
+        liveSessionCount?: number;
+    } | null;
+    agentSpendDaily?: {
+        spentTodayAtomic?: string;
+        dailyCapAtomic?: string;
+        perCallCapAtomic?: string;
+        lifetimeSpentAtomic?: string;
+    } | null;
+}
+/** The fields of one GET /sessions row the Tabs rail consumes. */
+interface RawAgentSpendSession {
+    sessionPubkey: string;
+    counterparty: string;
+    appName?: string | null;
+    live: boolean;
+    spent: string;
+    maxAmount: string;
+    expiresAt: number;
+}
+/**
+ * Assemble the honest two-mode agent-spend status from the raw /status response
+ * and the raw /sessions rows. Pure: no fetch, no clock, no I/O.
+ */
+declare function assembleAgentSpendStatus(status: RawAgentSpendStatus, sessions?: RawAgentSpendSession[]): AgentSpendStatus;
+/**
+ * The minimal identity the off/on switch needs: WHO is active + the wallet
+ * handle the anon router keys on. Structurally satisfied by connect's
+ * ResolvedIdentity (pass it straight through), or hand-build `{ kind, userHandle }`.
+ */
+interface AgentSpendIdentity {
+    /** Passkey-vault-first identity axis. Agent-spend is Dexter-Wallet-only. */
+    kind: IdentityKind;
+    /** The passkey-vault user handle the anon router addresses, or null. */
+    userHandle: string | null;
+}
+/** Typed error whose `code` is the server's snake_case error string. */
+declare class AgentSpendError extends Error {
+    readonly code: string;
+    constructor(code: string, message?: string);
+}
+/** Map an AgentSpendError.code to plain, user-facing copy. */
+declare function describeAgentSpendError(code: string): string;
+interface RevokeAgentSpendResult {
+    revoked: boolean;
+}
+/**
+ * Revoke the AUTOMATIC role-2 agent-spend rail — the off-switch. Takes effect on
+ * the very next agent payment (the spend path reads agent_spend_revoked_at fresh
+ * per spend). Dexter-Wallet (anon-vault) only; `credentialId` (base64url) targets
+ * the biometric prompt.
+ *
+ * @param id            WHO is active — must be the passkey-vault (Dexter Wallet).
+ * @param vaultPda      The vault PDA, base58 string. Becomes the signed message.
+ * @param apiOrigin     The dexter-api origin (e.g. https://api.dexter.cash). The
+ *                      caller owns env; connect reads none.
+ * @param credentialId  The wallet's passkey credential id (base64url), to make
+ *                      the assertion a direct biometric, not an account picker.
+ */
+declare function revokeAgentSpend(id: AgentSpendIdentity, vaultPda: string, apiOrigin: string, credentialId?: string | null): Promise<RevokeAgentSpendResult>;
+interface EnableAgentSpendResult {
+    enabled: boolean;
+}
+/**
+ * Re-enable the AUTOMATIC role-2 agent-spend rail — the ON switch. Turning spend
+ * back ON is the dangerous direction, so it is a two-step, replay-protected nonce
+ * flow: fetch a server-minted nonce+expiry (inert until redeemed), sign
+ * enableAgentSpendMessage over those EXACT values as the WebAuthn challenge,
+ * submit. Dexter-Wallet (anon-vault) only.
+ *
+ * @param id            WHO is active — must be the passkey-vault (Dexter Wallet).
+ * @param vaultPda      The vault PDA, base58 string.
+ * @param apiOrigin     The dexter-api origin (e.g. https://api.dexter.cash).
+ * @param credentialId  The wallet's passkey credential id (base64url).
+ */
+declare function enableAgentSpend(id: AgentSpendIdentity, vaultPda: string, apiOrigin: string, credentialId?: string | null): Promise<EnableAgentSpendResult>;
+
+export { AgentSpendError, type AgentSpendIdentity, type AgentSpendStatus, type AgentSpendTab, type AnonChallengeResult, type AnonServerPolicy, type AutomaticAgentSpend, CeremonyPhase, ConnectVault, type ContinueResult, type CreateWalletConfig, type CreateWalletResult, DexterConnectConfig, type EnableAgentSpendResult, IdentityKind, type RawAgentSpendSession, type RawAgentSpendStatus, type RevokeAgentSpendResult, SignInResult, assembleAgentSpendStatus, ceremonyPhaseLabel, continueWithDexter, createAnonServerPolicy, createPasskeySigner, createWallet, describeAgentSpendError, enableAgentSpend, passkeyLogin, revokeAgentSpend };

package/dist/index.js

@@ -1,6 +1,8 @@
 import {
   ACTIVE_WALLET_STORAGE_KEY,
   ConnectError,
+  base64urlToBase64,
+  bytesToBase64url,
   ceremonyPhaseLabel,
   continueWithDexter,
   createAnonServerPolicy,
@@ -20,16 +22,168 @@ import {
   subscribe,
   switchWallet,
   syncAcceptedPasskeys
-} from "./chunk-RLVMYLHC.js";
+} from "./chunk-Y22JFT53.js";
+
+// src/agentSpend.ts
+import { PublicKey } from "@solana/web3.js";
+import { startAuthentication } from "@simplewebauthn/browser";
+import { revokeAgentSpendMessage, enableAgentSpendMessage } from "@dexterai/vault/messages";
+import { DEXTER_VAULT_PROGRAM_ID } from "@dexterai/vault/constants";
+function shortCounterparty(a) {
+  return a.length > 12 ? `${a.slice(0, 4)}\u2026${a.slice(-4)}` : a;
+}
+function assembleAgentSpendStatus(status, sessions = []) {
+  const revokedAt = status.agentSpendRevokedAt ?? null;
+  const daily = status.agentSpendDaily ?? null;
+  const automatic = {
+    active: revokedAt === null,
+    revokedAt,
+    // THE honest read: the dedicated armed field, never liveSessionCount.
+    armed: status.agentSpendArmed ?? null
+  };
+  if (daily) {
+    if (daily.spentTodayAtomic !== void 0) automatic.spentTodayAtomic = daily.spentTodayAtomic;
+    if (daily.dailyCapAtomic !== void 0) automatic.dailyCapAtomic = daily.dailyCapAtomic;
+    if (daily.perCallCapAtomic !== void 0) automatic.perCallCapAtomic = daily.perCallCapAtomic;
+    if (daily.lifetimeSpentAtomic !== void 0) automatic.lifetimeSpentAtomic = daily.lifetimeSpentAtomic;
+  }
+  return {
+    balanceAtomic: status.onchain?.usdcAtomic ?? null,
+    automatic,
+    tabs: sessions.map((s) => ({
+      id: s.sessionPubkey,
+      counterparty: s.counterparty,
+      label: s.appName?.trim() || shortCounterparty(s.counterparty),
+      live: s.live,
+      spentAtomic: s.spent,
+      capAtomic: s.maxAmount,
+      expiresAt: s.expiresAt
+    }))
+  };
+}
+var AgentSpendError = class extends Error {
+  code;
+  constructor(code, message) {
+    super(message ?? code);
+    this.code = code;
+    this.name = "AgentSpendError";
+  }
+};
+function describeAgentSpendError(code) {
+  switch (code) {
+    case "verification_failed":
+      return "That passkey didn't verify \u2014 try again.";
+    case "missing_fields":
+      return "The request was incomplete \u2014 try again.";
+    case "vault_not_found":
+      return "No wallet found for this passkey.";
+    case "nonce_not_found":
+    case "nonce_already_used":
+      return "That confirmation expired \u2014 tap again to retry.";
+    case "revoke_failed":
+    case "enable_failed":
+      return "The server couldn't complete it \u2014 try again shortly.";
+    case "not_guest":
+      return "This control is only available on a Dexter Wallet.";
+    default:
+      return code;
+  }
+}
+async function agentSpendError(res) {
+  let code = `http_${res.status}`;
+  try {
+    const body = await res.json();
+    if (body?.error) code = String(body.error);
+  } catch {
+  }
+  return new AgentSpendError(code, `agent-spend ${res.status}: ${code}`);
+}
+function assertDexterWallet(id) {
+  if (id.kind !== "passkey-vault") {
+    throw new AgentSpendError("not_guest", "agent-spend off/on switch is Dexter Wallet only");
+  }
+}
+function normalizeOrigin(apiOrigin) {
+  return apiOrigin.trim().replace(/\/$/, "");
+}
+function rpId() {
+  return typeof window !== "undefined" ? window.location.hostname : "dexter.cash";
+}
+async function assertOverMessage(messageBytes, credentialId) {
+  const resp = await startAuthentication({
+    optionsJSON: {
+      challenge: bytesToBase64url(messageBytes),
+      rpId: rpId(),
+      userVerification: "required",
+      ...credentialId ? { allowCredentials: [{ id: credentialId, type: "public-key" }] } : {}
+    }
+  });
+  return {
+    clientDataJSON: base64urlToBase64(resp.response.clientDataJSON),
+    authenticatorData: base64urlToBase64(resp.response.authenticatorData),
+    signature: base64urlToBase64(resp.response.signature)
+  };
+}
+async function revokeAgentSpend(id, vaultPda, apiOrigin, credentialId) {
+  assertDexterWallet(id);
+  const origin = normalizeOrigin(apiOrigin);
+  const message = revokeAgentSpendMessage({
+    programId: DEXTER_VAULT_PROGRAM_ID,
+    vaultPda: new PublicKey(vaultPda)
+  });
+  const signed = await assertOverMessage(message, credentialId);
+  const res = await fetch(`${origin}/api/passkey-vault-anon/revoke-agent-spend`, {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify({ userHandle: id.userHandle, signedPasskeyPayload: signed })
+  });
+  if (!res.ok) throw await agentSpendError(res);
+  return await res.json();
+}
+async function enableAgentSpend(id, vaultPda, apiOrigin, credentialId) {
+  assertDexterWallet(id);
+  const origin = normalizeOrigin(apiOrigin);
+  const challengeRes = await fetch(
+    `${origin}/api/passkey-vault-anon/enable-agent-spend/challenge`,
+    {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ userHandle: id.userHandle })
+    }
+  );
+  if (!challengeRes.ok) throw await agentSpendError(challengeRes);
+  const { nonce, expiry } = await challengeRes.json();
+  const message = enableAgentSpendMessage({
+    programId: DEXTER_VAULT_PROGRAM_ID,
+    vaultPda: new PublicKey(vaultPda),
+    nonce: BigInt(nonce),
+    expiry: BigInt(expiry)
+  });
+  const signed = await assertOverMessage(message, credentialId);
+  const verifyRes = await fetch(
+    `${origin}/api/passkey-vault-anon/enable-agent-spend/verify`,
+    {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ userHandle: id.userHandle, nonce, signedPasskeyPayload: signed })
+    }
+  );
+  if (!verifyRes.ok) throw await agentSpendError(verifyRes);
+  return await verifyRes.json();
+}
 export {
   ACTIVE_WALLET_STORAGE_KEY,
+  AgentSpendError,
   ConnectError,
+  assembleAgentSpendStatus,
   ceremonyPhaseLabel,
   continueWithDexter,
   createAnonServerPolicy,
   createPasskeySigner,
   createWallet,
+  describeAgentSpendError,
   ejectActiveWallet,
+  enableAgentSpend,
   forgetWallet,
   getActiveHandle,
   getCredentialId,
@@ -39,6 +193,7 @@ export {
   prunePasskey,
   renamePasskey,
   resolveIdentity,
+  revokeAgentSpend,
   setActiveHandle,
   subscribe as subscribeWallet,
   switchWallet,

package/dist/react.d.ts

@@ -1,5 +1,5 @@
 import { DexterApiBrowserPasskeySigner } from '@dexterai/vault/signers/browser';
-import { a as CeremonyPhase, S as SignInResult, P as PasskeyLoginTokens, C as ConnectVault, b as ConnectError, e as StoredWallet, d as PasskeySignalSupport, R as ResolvedIdentity } from './signals-BuP-7inZ.js';
+import { a as CeremonyPhase, S as SignInResult, P as PasskeyLoginTokens, C as ConnectVault, b as ConnectError, e as StoredWallet, d as PasskeySignalSupport, R as ResolvedIdentity } from './signals-BaXobUfB.js';
 import { ReactElement, ReactNode } from 'react';
 
 type ConnectStatus = 'idle' | 'pending' | 'done' | 'error';

package/dist/react.js

@@ -14,7 +14,13 @@ import {
   setActiveHandle,
   subscribe,
   switchWallet
-} from "./chunk-RLVMYLHC.js";
+} from "./chunk-Y22JFT53.js";
+import {
+  DexterButton,
+  DexterMark,
+  cx,
+  ensureDexterButtonStyles
+} from "./chunk-S7G2ZZOO.js";
 
 // src/useSignInWithDexter.ts
 import { useCallback, useEffect, useMemo, useState } from "react";
@@ -123,111 +129,8 @@ function useSignInWithDexter(config = {}) {
 }
 
 // src/SignInWithDexter.tsx
-import { useEffect as useEffect3 } from "react";
-
-// src/DexterButton.tsx
 import { useEffect as useEffect2 } from "react";
-import { Fragment, jsx, jsxs } from "react/jsx-runtime";
-var STYLE_ID = "dexter-connect-button-styles";
-var BUTTON_CSS = `
-@keyframes dx-spin { to { transform: rotate(360deg); } }
-@keyframes dx-pulse { 0%,100% { opacity: 1; } 50% { opacity: .6; } }
-.dx-btn{
-  --dx-ember:#f26c18; --dx-ember-2:#ba3a00; --dx-fg:#fff4ea; --dx-radius:0px;
-  position:relative; display:inline-flex; align-items:center; justify-content:center; gap:10px;
-  padding:11px 22px; border:1px solid color-mix(in srgb,var(--dx-ember) 55%,transparent);
-  border-radius:var(--dx-radius);
-  background:linear-gradient(135deg,var(--dx-ember),var(--dx-ember-2));
-  color:var(--dx-fg); font:inherit; font-weight:600; font-size:.78rem; letter-spacing:.12em;
-  text-transform:uppercase; cursor:pointer; -webkit-tap-highlight-color:transparent;
-  box-shadow:0 14px 26px color-mix(in srgb,var(--dx-ember) 24%,transparent);
-  transition:transform .16s ease, box-shadow .16s ease, filter .16s ease, background .16s ease;
-}
-.dx-btn:hover{ transform:translateY(-1px); filter:brightness(1.07); box-shadow:0 20px 34px color-mix(in srgb,var(--dx-ember) 32%,transparent); }
-.dx-btn:active{ transform:translateY(0); filter:brightness(.97); box-shadow:0 8px 16px color-mix(in srgb,var(--dx-ember) 22%,transparent); }
-.dx-btn:focus-visible{ outline:none; box-shadow:0 0 0 3px color-mix(in srgb,var(--dx-ember) 38%,transparent); }
-.dx-btn:disabled{ cursor:default; filter:saturate(.85) brightness(.98); }
-.dx-btn--secondary{ background:transparent; color:var(--dx-ember); box-shadow:none; border-color:color-mix(in srgb,var(--dx-ember) 45%,transparent); }
-.dx-btn--secondary:hover{ background:color-mix(in srgb,var(--dx-ember) 9%,transparent); filter:none; box-shadow:none; }
-.dx-btn--block{ width:100%; }
-.dx-btn__mark{ flex-shrink:0; }
-.dx-btn__spin{ width:15px; height:15px; flex-shrink:0; border-radius:50%;
-  border:2px solid color-mix(in srgb,currentColor 30%,transparent); border-top-color:currentColor;
-  animation:dx-spin .7s linear infinite; }
-.dx-btn__doing{ animation:dx-pulse 1.4s ease-in-out infinite; }
-.dx-chip{ display:inline-flex; align-items:center; gap:8px; padding:6px 10px; font:inherit;
-  font-variant-numeric:tabular-nums; border-radius:var(--dx-radius,0);
-  border:1px solid color-mix(in srgb,var(--dx-ember,#f26c18) 35%,transparent); }
-.dx-chip__dot{ width:7px; height:7px; border-radius:50%; background:var(--dx-ember,#f26c18); }
-.dx-chip__bal{ font-weight:600; opacity:.85; }
-.dx-chip__x{ margin-left:2px; border:none; background:transparent; color:inherit; cursor:pointer; font-size:16px; line-height:1; opacity:.6; }
-.dx-chip__x:hover{ opacity:1; }
-`;
-function ensureDexterButtonStyles() {
-  if (typeof document === "undefined") return;
-  if (document.getElementById(STYLE_ID)) return;
-  const el = document.createElement("style");
-  el.id = STYLE_ID;
-  el.textContent = BUTTON_CSS;
-  document.head.appendChild(el);
-}
-ensureDexterButtonStyles();
-function cx(...parts) {
-  return parts.filter(Boolean).join(" ");
-}
-function DexterMark() {
-  return /* @__PURE__ */ jsxs(
-    "svg",
-    {
-      className: "dx-btn__mark",
-      width: "18",
-      height: "18",
-      viewBox: "0 0 300 300",
-      fill: "currentColor",
-      "aria-hidden": "true",
-      children: [
-        /* @__PURE__ */ jsx("path", { d: "M143.18,22.65c35.41,7.66,68.19,23.6,94.89,48.28,5.22,4.86,11.17,10.45,15.18,16.1,1.38,1.93,1.94,3.6.99,5.23-1.08,1.92-4.22,3.41-6.56,4.17-28.39,9.43-61.55,8.26-88.62-4.69-13.81-7.66-17.02-5.76-31.67-3.48-21.89,2.38-46.67.37-65.06-12.31-6.07-4.99-9.33-12.71-8.8-20.52-.16-9.4,4.25-18.12,11.47-24.06,21.29-17.85,52.64-14.45,78-8.77l.18.04h0Z" }),
-        /* @__PURE__ */ jsx("path", { d: "M46.08,129.98c1.06-1.03,3.52-1.07,5.29-1.04,48.98-.05,98.1-.06,146.83-.1,17.53.14,35.01-.31,52.49.18,2.13.18,3.89.74,4.73,2.05,1.46,2.38.35,6.09-1.98,7.6-3.66,2.05-8.62,1.33-12.86,1.74-2.85.12-5.45.13-7.02,2.02-.91,1.07-1.28,2.56-1.56,3.95-.57,3.23-1.16,6.52-1.89,9.62-2.81,12.43-8.68,24.65-19.76,31.56-9.49,5.59-20.42,6.86-31.2,5.75-11.88-1.69-22.15-8.81-29.11-18.28-3.51-4.81-4.92-10.5-5.8-16.29-.47-2.56-.51-5.87-1.35-8-1.16-3.38-6.14-2.59-9.25-1.92-4.21.95-4.39,5.7-5.14,9.19-2.25,11.18-6.84,20.68-16.15,27.65-1.31,1.05-2.91,2.03-2.12,3.66,2.5,3.21,6.65,4.49,10.44,5.97,3.26,1.17,6.86,2.41,7.18,6.06.05,8.18-11.97,3.46-16.32,1.85-3.95-1.55-7.4-4.27-10.42-7.26-3.92-4.28-9.66-4.5-15.16-4.45-3.45-.07-6.99-.19-10.45-.82-21.29-4-31.08-21.3-30.9-42.01-.08-4.63.03-9.32.09-13.91.04-1.69.07-3.46,1.28-4.67l.1-.09h0Z" }),
-        /* @__PURE__ */ jsx("path", { d: "M173.06,203.11c9.24-.06,21.6,4.49,22.85,14.84.3,2.12-.67,4.34-2.92,4.73-1.38.29-2.88-.05-4.09-.75-1.64-.9-2.97-2.86-4.19-3.05-1.33-.2-1.99.81-2.93,1.94-10.27,13.34-28.04,20.92-44.83,20.42-15.41-.33-31.89-5.95-43.53-17.34-3.15-3.39-1.55-9.88,3.61-9.19,1.83.32,3.29,1.45,4.76,2.65,10.49,10.12,24.85,14.04,39.12,13.03,10.55-1.23,20.38-5.47,28.74-11.92,1.11-1.06,4.45-3.63,3.5-5.12-.76-.85-4.31-.47-5.92-2.01-2.25-1.92-1.39-6.22,1.16-7.36,1.36-.65,2.96-.81,4.47-.86h.2,0Z" })
-      ]
-    }
-  );
-}
-function DexterButton(props) {
-  const {
-    children,
-    loading = false,
-    loadingLabel = "Connecting\u2026",
-    variant = "primary",
-    block = false,
-    withMark = true,
-    onClick,
-    disabled = false,
-    className,
-    type = "button"
-  } = props;
-  useEffect2(ensureDexterButtonStyles, []);
-  return /* @__PURE__ */ jsx(
-    "button",
-    {
-      type,
-      className: cx("dx-btn", variant === "secondary" && "dx-btn--secondary", block && "dx-btn--block", className),
-      onClick,
-      disabled: disabled || loading,
-      "aria-busy": loading,
-      children: loading ? /* @__PURE__ */ jsxs(Fragment, { children: [
-        /* @__PURE__ */ jsx("span", { className: "dx-btn__spin", "aria-hidden": true }),
-        /* @__PURE__ */ jsx("span", { className: "dx-btn__doing", children: loadingLabel })
-      ] }) : /* @__PURE__ */ jsxs(Fragment, { children: [
-        withMark && /* @__PURE__ */ jsx(DexterMark, {}),
-        children
-      ] })
-    }
-  );
-}
-
-// src/SignInWithDexter.tsx
-import { jsx as jsx2, jsxs as jsxs2 } from "react/jsx-runtime";
+import { jsx, jsxs } from "react/jsx-runtime";
 function shortAddress(addr) {
   return addr.length > 10 ? `${addr.slice(0, 4)}\u2026${addr.slice(-4)}` : addr;
 }
@@ -245,7 +148,7 @@ function SignInWithDexter(props) {
     showConnectedChip = true,
     ...config
   } = props;
-  useEffect3(ensureDexterButtonStyles, []);
+  useEffect2(ensureDexterButtonStyles, []);
   const c = useSignInWithDexter(config);
   const handleClick = async () => {
     try {
@@ -256,17 +159,17 @@ function SignInWithDexter(props) {
   };
   if (c.isVaultConnected) {
     if (!showConnectedChip) return null;
-    return /* @__PURE__ */ jsxs2("span", { className: cx("dx-chip", className), children: [
-      /* @__PURE__ */ jsx2("span", { className: "dx-chip__dot", "aria-hidden": true }),
-      /* @__PURE__ */ jsx2("span", { children: c.vaultAddress ? shortAddress(c.vaultAddress) : "Connected" }),
-      c.usdcBalance !== null && /* @__PURE__ */ jsxs2("span", { className: "dx-chip__bal", children: [
+    return /* @__PURE__ */ jsxs("span", { className: cx("dx-chip", className), children: [
+      /* @__PURE__ */ jsx("span", { className: "dx-chip__dot", "aria-hidden": true }),
+      /* @__PURE__ */ jsx("span", { children: c.vaultAddress ? shortAddress(c.vaultAddress) : "Connected" }),
+      c.usdcBalance !== null && /* @__PURE__ */ jsxs("span", { className: "dx-chip__bal", children: [
         formatUsd(c.usdcBalance),
         " available"
       ] }),
-      /* @__PURE__ */ jsx2("button", { type: "button", className: "dx-chip__x", onClick: c.disconnect, "aria-label": "Disconnect", children: "\xD7" })
+      /* @__PURE__ */ jsx("button", { type: "button", className: "dx-chip__x", onClick: c.disconnect, "aria-label": "Disconnect", children: "\xD7" })
     ] });
   }
-  return /* @__PURE__ */ jsx2(
+  return /* @__PURE__ */ jsx(
     DexterButton,
     {
       loading: c.status === "pending",
@@ -281,13 +184,13 @@ function SignInWithDexter(props) {
 }
 
 // src/useDexterWallet.ts
-import { useCallback as useCallback2, useEffect as useEffect4, useState as useState2 } from "react";
+import { useCallback as useCallback2, useEffect as useEffect3, useState as useState2 } from "react";
 var NO_SUPPORT = { rename: false, prune: false, syncAccepted: false };
 function useDexterWallet() {
   const [activeHandle, setHandle] = useState2(() => getActiveHandle());
   const [wallets, setWallets] = useState2(() => listWallets());
   const [support, setSupport] = useState2(NO_SUPPORT);
-  useEffect4(() => {
+  useEffect3(() => {
     const sync = () => {
       setHandle(getActiveHandle());
       setWallets(listWallets());
@@ -324,10 +227,10 @@ function useDexterWallet() {
 }
 
 // src/DexterWalletChip.tsx
-import { useEffect as useEffect5 } from "react";
+import { useEffect as useEffect4 } from "react";
 
 // src/walletKitStyles.ts
-var STYLE_ID2 = "dexter-connect-wallet-kit-styles";
+var STYLE_ID = "dexter-connect-wallet-kit-styles";
 var WALLET_KIT_CSS = `
 .dx-wchip{
   --dx-ember:#f26c18; --dx-ember-2:#ba3a00; --dx-fg:#fff4ea; --dx-radius:0px;
@@ -366,21 +269,21 @@ var WALLET_KIT_CSS = `
 `;
 function ensureWalletKitStyles() {
   if (typeof document === "undefined") return;
-  if (document.getElementById(STYLE_ID2)) return;
+  if (document.getElementById(STYLE_ID)) return;
   const el = document.createElement("style");
-  el.id = STYLE_ID2;
+  el.id = STYLE_ID;
   el.textContent = WALLET_KIT_CSS;
   document.head.appendChild(el);
 }
 ensureWalletKitStyles();
 
 // src/DexterWalletChip.tsx
-import { jsx as jsx3, jsxs as jsxs3 } from "react/jsx-runtime";
+import { jsx as jsx2, jsxs as jsxs2 } from "react/jsx-runtime";
 function DexterWalletChip(props) {
   const { connected, label, avatarUrl, avatarInitial, onClick, className, ariaExpanded } = props;
-  useEffect5(ensureWalletKitStyles, []);
+  useEffect4(ensureWalletKitStyles, []);
   const initial = (avatarInitial ?? label.trim().charAt(0) ?? "D").toUpperCase();
-  return /* @__PURE__ */ jsxs3(
+  return /* @__PURE__ */ jsxs2(
     "button",
     {
       type: "button",
@@ -388,64 +291,64 @@ function DexterWalletChip(props) {
       onClick,
       "aria-expanded": ariaExpanded,
       children: [
-        connected ? /* @__PURE__ */ jsx3("span", { className: "dx-wchip__avatar", "aria-hidden": "true", children: avatarUrl ? /* @__PURE__ */ jsx3("img", { src: avatarUrl, alt: "" }) : initial }) : null,
-        /* @__PURE__ */ jsx3("span", { className: "dx-wchip__label", children: label })
+        connected ? /* @__PURE__ */ jsx2("span", { className: "dx-wchip__avatar", "aria-hidden": "true", children: avatarUrl ? /* @__PURE__ */ jsx2("img", { src: avatarUrl, alt: "" }) : initial }) : null,
+        /* @__PURE__ */ jsx2("span", { className: "dx-wchip__label", children: label })
       ]
     }
   );
 }
 
 // src/DexterWalletMenu.tsx
-import { useEffect as useEffect6, useState as useState3 } from "react";
-import { jsx as jsx4, jsxs as jsxs4 } from "react/jsx-runtime";
+import { useEffect as useEffect5, useState as useState3 } from "react";
+import { jsx as jsx3, jsxs as jsxs3 } from "react/jsx-runtime";
 function DexterWalletMenu(props) {
   const { walletLabel, avatarInitial, onManageWallet, onStartFresh, saveSlot, saveHint, className } = props;
-  useEffect6(ensureWalletKitStyles, []);
+  useEffect5(ensureWalletKitStyles, []);
   const [showSave, setShowSave] = useState3(false);
   const initial = (avatarInitial ?? walletLabel.trim().charAt(0) ?? "D").toUpperCase();
   if (showSave && saveSlot) {
-    return /* @__PURE__ */ jsxs4("div", { className: cx("dx-wmenu", className), children: [
-      /* @__PURE__ */ jsx4(
+    return /* @__PURE__ */ jsxs3("div", { className: cx("dx-wmenu", className), children: [
+      /* @__PURE__ */ jsx3(
         "button",
         {
           type: "button",
           className: "dx-wmenu__item dx-wmenu__back",
           onClick: () => setShowSave(false),
-          children: /* @__PURE__ */ jsx4("span", { children: "\u2190 Back to wallet" })
+          children: /* @__PURE__ */ jsx3("span", { children: "\u2190 Back to wallet" })
         }
       ),
-      /* @__PURE__ */ jsxs4("div", { className: "dx-wmenu__save", children: [
-        saveHint ? /* @__PURE__ */ jsx4("span", { className: "dx-wmenu__savehint", children: saveHint }) : null,
+      /* @__PURE__ */ jsxs3("div", { className: "dx-wmenu__save", children: [
+        saveHint ? /* @__PURE__ */ jsx3("span", { className: "dx-wmenu__savehint", children: saveHint }) : null,
         saveSlot
       ] })
     ] });
   }
-  return /* @__PURE__ */ jsxs4("div", { className: cx("dx-wmenu", className), children: [
-    /* @__PURE__ */ jsxs4("div", { className: "dx-wmenu__id", children: [
-      /* @__PURE__ */ jsx4("span", { className: "dx-wmenu__avatar", "aria-hidden": "true", children: initial }),
-      /* @__PURE__ */ jsxs4("span", { className: "dx-wmenu__meta", children: [
-        /* @__PURE__ */ jsx4("span", { className: "dx-wmenu__name", children: walletLabel }),
-        /* @__PURE__ */ jsx4("span", { className: "dx-wmenu__sub", children: "Your Dexter Wallet" })
+  return /* @__PURE__ */ jsxs3("div", { className: cx("dx-wmenu", className), children: [
+    /* @__PURE__ */ jsxs3("div", { className: "dx-wmenu__id", children: [
+      /* @__PURE__ */ jsx3("span", { className: "dx-wmenu__avatar", "aria-hidden": "true", children: initial }),
+      /* @__PURE__ */ jsxs3("span", { className: "dx-wmenu__meta", children: [
+        /* @__PURE__ */ jsx3("span", { className: "dx-wmenu__name", children: walletLabel }),
+        /* @__PURE__ */ jsx3("span", { className: "dx-wmenu__sub", children: "Your Dexter Wallet" })
       ] })
     ] }),
-    /* @__PURE__ */ jsxs4("div", { className: "dx-wmenu__list", children: [
-      onManageWallet ? /* @__PURE__ */ jsxs4("button", { type: "button", className: "dx-wmenu__item", onClick: onManageWallet, children: [
-        /* @__PURE__ */ jsx4("span", { children: "Manage wallet" }),
-        /* @__PURE__ */ jsx4("span", { className: "dx-wmenu__icon", "aria-hidden": "true", children: "\u2197" })
+    /* @__PURE__ */ jsxs3("div", { className: "dx-wmenu__list", children: [
+      onManageWallet ? /* @__PURE__ */ jsxs3("button", { type: "button", className: "dx-wmenu__item", onClick: onManageWallet, children: [
+        /* @__PURE__ */ jsx3("span", { children: "Manage wallet" }),
+        /* @__PURE__ */ jsx3("span", { className: "dx-wmenu__icon", "aria-hidden": "true", children: "\u2197" })
       ] }) : null,
-      saveSlot ? /* @__PURE__ */ jsxs4("button", { type: "button", className: "dx-wmenu__item", onClick: () => setShowSave(true), children: [
-        /* @__PURE__ */ jsx4("span", { children: "Save your wallet" }),
-        /* @__PURE__ */ jsx4("span", { className: "dx-wmenu__icon", "aria-hidden": "true", children: "\u2197" })
+      saveSlot ? /* @__PURE__ */ jsxs3("button", { type: "button", className: "dx-wmenu__item", onClick: () => setShowSave(true), children: [
+        /* @__PURE__ */ jsx3("span", { children: "Save your wallet" }),
+        /* @__PURE__ */ jsx3("span", { className: "dx-wmenu__icon", "aria-hidden": "true", children: "\u2197" })
       ] }) : null,
-      onStartFresh ? /* @__PURE__ */ jsxs4(
+      onStartFresh ? /* @__PURE__ */ jsxs3(
         "button",
         {
           type: "button",
           className: "dx-wmenu__item dx-wmenu__item--danger",
           onClick: onStartFresh,
           children: [
-            /* @__PURE__ */ jsx4("span", { children: "Start fresh" }),
-            /* @__PURE__ */ jsx4("span", { className: "dx-wmenu__icon", "aria-hidden": "true", children: "\u27F5" })
+            /* @__PURE__ */ jsx3("span", { children: "Start fresh" }),
+            /* @__PURE__ */ jsx3("span", { className: "dx-wmenu__icon", "aria-hidden": "true", children: "\u27F5" })
           ]
         }
       ) : null

package/dist/{signals-BuP-7inZ.d.ts → signals-BaXobUfB.d.ts}

@@ -180,4 +180,4 @@ declare function syncAcceptedPasskeys(args: {
     rpId?: string;
 }): Promise<boolean>;
 
-export { ACTIVE_WALLET_STORAGE_KEY as A, type ConnectVault as C, type DexterConnectConfig as D, type IdentityInput as I, type PasskeyLoginTokens as P, type ResolvedIdentity as R, type SignInResult as S, type CeremonyPhase as a, ConnectError as b, type IdentityKind as c, type PasskeySignalSupport as d, type StoredWallet as e, ejectActiveWallet as f, forgetWallet as g, getActiveHandle as h, getCredentialId as i, prunePasskey as j, resolveIdentity as k, listWallets as l, subscribe as m, switchWallet as n, syncAcceptedPasskeys as o, passkeySignalSupport as p, renamePasskey as r, setActiveHandle as s };
+export { ACTIVE_WALLET_STORAGE_KEY as A, type ConnectVault as C, type DexterConnectConfig as D, type IdentityKind as I, type PasskeyLoginTokens as P, type ResolvedIdentity as R, type SignInResult as S, type CeremonyPhase as a, ConnectError as b, type IdentityInput as c, type PasskeySignalSupport as d, type StoredWallet as e, ejectActiveWallet as f, forgetWallet as g, getActiveHandle as h, getCredentialId as i, prunePasskey as j, resolveIdentity as k, listWallets as l, subscribe as m, switchWallet as n, syncAcceptedPasskeys as o, passkeySignalSupport as p, renamePasskey as r, setActiveHandle as s };

package/dist/worldid.d.ts

@@ -0,0 +1,61 @@
+import { ReactElement } from 'react';
+import { IDKitResult } from '@worldcoin/idkit';
+
+type VerifyPersonhoodPhase = 'loading' | 'ready' | 'rp_error' | 'verified';
+interface VerifyPersonhoodConfig {
+    /** World ID app id (`app_…`), from the developer portal. */
+    appId: `app_${string}`;
+    /** The registered action (e.g. `dexter-credit-root-v2`) — pins the nullifier namespace. */
+    action: string;
+    /** `production` | `staging`. Default `production`. */
+    environment?: 'production' | 'staging';
+    /**
+     * URL that returns the SERVER-SIGNED RP context as `{ rp_context: RpContext }`.
+     * The RP signing key is server-side only (never the browser), so the consumer
+     * exposes an endpoint that signs the request and returns just the signed
+     * context. Mirrors the capture rig's `/api/rp-context`.
+     */
+    rpContextUrl: string;
+    /** Optional `fetch` init for the RP-context request (auth headers, etc.). */
+    rpContextInit?: RequestInit;
+}
+interface UseVerifyPersonhood {
+    phase: VerifyPersonhoodPhase;
+    error: string | null;
+    result: IDKitResult | null;
+    /** Open the World App verification sheet. No-op until phase is 'ready'/'verified'. */
+    open: () => void;
+    /** The IDKitRequestWidget element to render (null until the RP context loads). */
+    widget: ReactElement | null;
+}
+/**
+ * Headless hook: manages the RP-context fetch + IDKit lifecycle and hands back
+ * the raw proof. Render `widget` and call `open()` from your own UI, or use the
+ * turnkey <VerifyPersonhood> below.
+ */
+declare function useVerifyPersonhood(config: VerifyPersonhoodConfig, onProof?: (result: IDKitResult) => void, onError?: (error: Error) => void): UseVerifyPersonhood;
+interface VerifyPersonhoodProps extends VerifyPersonhoodConfig {
+    /** Fired with the raw World ID v4 proof the moment verification completes. */
+    onProof?: (result: IDKitResult) => void;
+    /** Fired with the typed error if RP signing or verification fails. */
+    onError?: (error: Error) => void;
+    /** Button label when armed. Default "Verify your personhood". */
+    label?: string;
+    /** Label after a proof is captured. Default "Verify again". */
+    verifiedLabel?: string;
+    /** 'primary' = filled ember (default), 'secondary' = outline. */
+    variant?: 'primary' | 'secondary';
+    /** Full-width button. */
+    block?: boolean;
+    /** Extra className composed after the brand classes. */
+    className?: string;
+}
+/**
+ * Turnkey "Verify your personhood" element — the personhood sibling of
+ * <SignInWithDexter>. Renders the branded DexterButton (loading while the RP
+ * context signs server-side) that opens World App; on success hands the raw
+ * IDKitResult to `onProof`. Brand voice: no emojis. Themeable via --dx-* vars.
+ */
+declare function VerifyPersonhood(props: VerifyPersonhoodProps): ReactElement;
+
+export { type UseVerifyPersonhood, VerifyPersonhood, type VerifyPersonhoodConfig, type VerifyPersonhoodPhase, type VerifyPersonhoodProps, useVerifyPersonhood };

package/dist/worldid.js

@@ -0,0 +1,108 @@
+import {
+  DexterButton,
+  ensureDexterButtonStyles
+} from "./chunk-S7G2ZZOO.js";
+
+// src/worldid.tsx
+import { useEffect, useState } from "react";
+import {
+  IDKitRequestWidget,
+  proofOfHuman
+} from "@worldcoin/idkit";
+import { Fragment, jsx, jsxs } from "react/jsx-runtime";
+function useVerifyPersonhood(config, onProof, onError) {
+  const { appId, action, environment = "production", rpContextUrl, rpContextInit } = config;
+  const [phase, setPhase] = useState("loading");
+  const [error, setError] = useState(null);
+  const [rpContext, setRpContext] = useState(null);
+  const [isOpen, setIsOpen] = useState(false);
+  const [result, setResult] = useState(null);
+  useEffect(() => {
+    let cancelled = false;
+    void (async () => {
+      try {
+        const res = await fetch(rpContextUrl, { cache: "no-store", ...rpContextInit });
+        const data = await res.json();
+        if (!res.ok) throw new Error(data?.message ?? `RP context fetch failed (HTTP ${res.status})`);
+        if (cancelled) return;
+        setRpContext(data.rp_context);
+        setPhase("ready");
+      } catch (e) {
+        if (cancelled) return;
+        const err = e instanceof Error ? e : new Error(String(e));
+        setError(err.message);
+        setPhase("rp_error");
+        onError?.(err);
+      }
+    })();
+    return () => {
+      cancelled = true;
+    };
+  }, [rpContextUrl]);
+  const widget = rpContext ? /* @__PURE__ */ jsx(
+    IDKitRequestWidget,
+    {
+      app_id: appId,
+      action,
+      rp_context: rpContext,
+      preset: proofOfHuman(),
+      allow_legacy_proofs: false,
+      environment,
+      open: isOpen,
+      onOpenChange: setIsOpen,
+      onSuccess: (res) => {
+        setResult(res);
+        setPhase("verified");
+        onProof?.(res);
+      },
+      onError: (code) => {
+        const err = new Error(`World App error: ${code}`);
+        setError(err.message);
+        onError?.(err);
+      }
+    }
+  ) : null;
+  return {
+    phase,
+    error,
+    result,
+    open: () => {
+      if (phase === "ready" || phase === "verified") setIsOpen(true);
+    },
+    widget
+  };
+}
+function VerifyPersonhood(props) {
+  const {
+    onProof,
+    onError,
+    label = "Verify your personhood",
+    verifiedLabel = "Verify again",
+    variant = "primary",
+    block = false,
+    className,
+    ...config
+  } = props;
+  useEffect(ensureDexterButtonStyles, []);
+  const v = useVerifyPersonhood(config, onProof, onError);
+  return /* @__PURE__ */ jsxs(Fragment, { children: [
+    /* @__PURE__ */ jsx(
+      DexterButton,
+      {
+        onClick: v.open,
+        loading: v.phase === "loading",
+        loadingLabel: "Preparing\u2026",
+        variant,
+        block,
+        className,
+        disabled: v.phase === "rp_error",
+        children: v.phase === "verified" ? verifiedLabel : label
+      }
+    ),
+    v.widget
+  ] });
+}
+export {
+  VerifyPersonhood,
+  useVerifyPersonhood
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dexterai/connect",
-  "version": "0.15.0",
+  "version": "0.17.0",
   "description": "Sign in with Dexter — passkey connector. Composes @dexterai/vault.",
   "type": "module",
   "exports": {
@@ -11,6 +11,10 @@
     "./react": {
       "types": "./dist/react.d.ts",
       "import": "./dist/react.js"
+    },
+    "./worldid": {
+      "types": "./dist/worldid.d.ts",
+      "import": "./dist/worldid.js"
     }
   },
   "files": [
@@ -22,12 +26,24 @@
     "typecheck": "tsc --noEmit"
   },
   "peerDependencies": {
-    "@dexterai/vault": ">=0.19",
+    "@dexterai/vault": ">=0.22",
+    "@solana/web3.js": "^1.98.0",
+    "@worldcoin/idkit": "^4.1.8",
     "react": ">=18"
   },
+  "peerDependenciesMeta": {
+    "@solana/web3.js": {
+      "optional": true
+    },
+    "@worldcoin/idkit": {
+      "optional": true
+    }
+  },
   "devDependencies": {
-    "@dexterai/vault": "^0.19.0",
+    "@dexterai/vault": "^0.24.0",
+    "@solana/web3.js": "^1.98.4",
     "@types/react": "^19.1.12",
+    "@worldcoin/idkit": "^4.1.8",
     "react": "^19.2.5",
     "tsup": "^8.5.0",
     "typescript": "^5.6.2",