@dexterai/connect 0.9.0 → 0.11.0

package/dist/{chunk-W5ISTMTY.js → chunk-YCA2UT4N.js}

@@ -60,10 +60,101 @@ function derInteger(component) {
   return out;
 }
 
+// src/popup.ts
+var DEFAULT_CONNECT_HOST = "https://dexter.cash/connect";
+var POPUP_TIMEOUT_MS = 12e4;
+var CANONICAL_ORIGIN = "https://dexter.cash";
+function shouldUsePopup(transport) {
+  if (transport === "popup") return true;
+  if (transport === "inline") return false;
+  if (typeof window === "undefined") return false;
+  return window.location.origin !== CANONICAL_ORIGIN;
+}
+function openCeremonyPopup(op, config = {}) {
+  if (typeof window === "undefined") {
+    return Promise.reject(new ConnectError("not_browser", "popup ceremony requires a browser"));
+  }
+  const host = (config.connectHost ?? DEFAULT_CONNECT_HOST).replace(/\/$/, "");
+  const hostOrigin = new URL(host).origin;
+  const openerOrigin = window.location.origin;
+  const requestId = makeNonce();
+  const params = new URLSearchParams({ v: "1", op, requestId, origin: openerOrigin });
+  if (config.name) params.set("name", config.name);
+  if (config.apiBase) params.set("apiBase", config.apiBase);
+  const url = `${host}?${params.toString()}`;
+  return new Promise((resolve, reject) => {
+    const popup = window.open(url, "dexter-connect", popupFeatures());
+    if (!popup) {
+      reject(
+        new ConnectError("popup_blocked", "the Dexter sign-in popup was blocked \u2014 allow popups for this site")
+      );
+      return;
+    }
+    let settled = false;
+    const onMessage = (event) => {
+      if (event.origin !== hostOrigin) return;
+      const data = event.data;
+      if (!data || data.type !== "dexter-connect:result" || data.requestId !== requestId) return;
+      if (data.ok) finish(() => resolve(data.result));
+      else
+        finish(
+          () => reject(new ConnectError(data.error?.code ?? "popup_failed", data.error?.message))
+        );
+    };
+    const closedTimer = window.setInterval(() => {
+      if (popup.closed) finish(() => reject(new ConnectError("popup_closed", "the sign-in window was closed")));
+    }, 500);
+    const timeout = window.setTimeout(
+      () => finish(() => reject(new ConnectError("popup_timeout", "the sign-in window timed out"))),
+      POPUP_TIMEOUT_MS
+    );
+    function finish(act) {
+      if (settled) return;
+      settled = true;
+      window.removeEventListener("message", onMessage);
+      window.clearInterval(closedTimer);
+      window.clearTimeout(timeout);
+      try {
+        popup?.close();
+      } catch {
+      }
+      act();
+    }
+    window.addEventListener("message", onMessage);
+  });
+}
+function popupFeatures() {
+  const w = 420;
+  const h = 660;
+  const sy = typeof window !== "undefined" ? window.screenY || 0 : 0;
+  const sx = typeof window !== "undefined" ? window.screenX || 0 : 0;
+  const sh = typeof window !== "undefined" ? window.screen?.height ?? h : h;
+  const sw = typeof window !== "undefined" ? window.screen?.width ?? w : w;
+  const top = Math.max(0, Math.round((sh - h) / 2 + sy));
+  const left = Math.max(0, Math.round((sw - w) / 2 + sx));
+  return `popup,width=${w},height=${h},left=${left},top=${top}`;
+}
+function makeNonce() {
+  const c = typeof crypto !== "undefined" ? crypto : void 0;
+  if (c?.randomUUID) return c.randomUUID();
+  if (c?.getRandomValues) {
+    const a = new Uint8Array(16);
+    c.getRandomValues(a);
+    return Array.from(a, (b) => b.toString(16).padStart(2, "0")).join("");
+  }
+  return `rid-${new URL(location.href).searchParams.get("v") ?? ""}-${typeof performance !== "undefined" ? performance.now() : 0}`;
+}
+
 // src/relay.ts
 var DEFAULT_API_BASE = "https://api.dexter.cash";
 var ANON_SIGN_BASE = "/api/passkey-anon/sign";
 async function passkeyLogin(config = {}, onPhase) {
+  if (shouldUsePopup(config.transport)) {
+    return openCeremonyPopup("signin", {
+      connectHost: config.connectHost,
+      apiBase: config.apiBase
+    });
+  }
   const apiBase = (config.apiBase ?? DEFAULT_API_BASE).replace(/\/$/, "");
   onPhase?.("challenge");
   const options = await fetchLoginChallenge(apiBase);
@@ -347,6 +438,17 @@ function onStorageEvent(e) {
 }
 var ACTIVE_WALLET_STORAGE_KEY = ACTIVE_HANDLE_KEY;
 
+// src/phase.ts
+var PHASE_LABEL = {
+  challenge: "Preparing\u2026",
+  passkey: "Waiting for your passkey\u2026",
+  verifying: "Verifying\u2026",
+  finalizing: "Finishing\u2026"
+};
+function ceremonyPhaseLabel(phase) {
+  return PHASE_LABEL[phase];
+}
+
 // src/signals.ts
 function pkc() {
   if (typeof window === "undefined") return null;
@@ -411,6 +513,8 @@ export {
   ConnectError,
   base64urlToBytes,
   bytesToBase64url,
+  shouldUsePopup,
+  openCeremonyPopup,
   passkeyLogin,
   createAnonServerPolicy,
   createPasskeySigner,
@@ -423,6 +527,7 @@ export {
   forgetWallet,
   subscribe,
   ACTIVE_WALLET_STORAGE_KEY,
+  ceremonyPhaseLabel,
   passkeySignalSupport,
   renamePasskey,
   prunePasskey,

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { D as DexterConnectConfig, C as CeremonyPhase, S as SignInResult, a as ConnectVault } from './signals-CXkNJfIo.js';
-export { A as ACTIVE_WALLET_STORAGE_KEY, b as ConnectError, P as PasskeyLoginTokens, c as PasskeySignalSupport, d as StoredWallet, e as ejectActiveWallet, f as forgetWallet, g as getActiveHandle, h as getCredentialId, l as listWallets, p as passkeySignalSupport, i as prunePasskey, r as renamePasskey, s as setActiveHandle, j as subscribeWallet, k as switchWallet, m as syncAcceptedPasskeys } from './signals-CXkNJfIo.js';
+import { D as DexterConnectConfig, C as CeremonyPhase, S as SignInResult, a as ConnectVault } from './signals-B7GXneoj.js';
+export { A as ACTIVE_WALLET_STORAGE_KEY, b as ConnectError, P as PasskeyLoginTokens, c as PasskeySignalSupport, d as StoredWallet, e as ejectActiveWallet, f as forgetWallet, g as getActiveHandle, h as getCredentialId, l as listWallets, p as passkeySignalSupport, i as prunePasskey, r as renamePasskey, s as setActiveHandle, j as subscribeWallet, k as switchWallet, m as syncAcceptedPasskeys } from './signals-B7GXneoj.js';
 import { DexterApiBrowserPasskeySigner } from '@dexterai/vault/signers/browser';
 
 /**
@@ -102,4 +102,12 @@ interface CreateWalletResult {
  */
 declare function createWallet(config?: CreateWalletConfig): Promise<CreateWalletResult>;
 
-export { type AnonChallengeResult, type AnonServerPolicy, ConnectVault, type CreateWalletConfig, type CreateWalletResult, DexterConnectConfig, SignInResult, createAnonServerPolicy, createPasskeySigner, createWallet, passkeyLogin };
+/**
+ * Human-readable label for a ceremony phase — the live "connecting step" copy.
+ * ONE source of truth so sign-in (SignInWithDexter) and create (consumer setup
+ * flows) show identical wording. Consumers surfacing createWallet's `onPhase`
+ * should use this instead of hand-rolling their own strings (Rule #7).
+ */
+declare function ceremonyPhaseLabel(phase: CeremonyPhase): string;
+
+export { type AnonChallengeResult, type AnonServerPolicy, CeremonyPhase, ConnectVault, type CreateWalletConfig, type CreateWalletResult, DexterConnectConfig, SignInResult, ceremonyPhaseLabel, createAnonServerPolicy, createPasskeySigner, createWallet, passkeyLogin };

package/dist/index.js

@@ -3,6 +3,7 @@ import {
   ConnectError,
   base64urlToBytes,
   bytesToBase64url,
+  ceremonyPhaseLabel,
   createAnonServerPolicy,
   createPasskeySigner,
   ejectActiveWallet,
@@ -10,21 +11,30 @@ import {
   getActiveHandle,
   getCredentialId,
   listWallets,
+  openCeremonyPopup,
   passkeyLogin,
   passkeySignalSupport,
   prunePasskey,
   renamePasskey,
   setActiveHandle,
+  shouldUsePopup,
   subscribe,
   switchWallet,
   syncAcceptedPasskeys
-} from "./chunk-W5ISTMTY.js";
+} from "./chunk-YCA2UT4N.js";
 
 // src/enroll.ts
 var DEFAULT_API_BASE = "https://api.dexter.cash";
 var DEFAULT_RP_ID = "dexter.cash";
 var DEFAULT_WALLET_NAME = "Dexter Wallet";
 async function createWallet(config = {}) {
+  if (shouldUsePopup(config.transport)) {
+    return openCeremonyPopup("create", {
+      connectHost: config.connectHost,
+      name: config.name,
+      apiBase: config.apiBase
+    });
+  }
   if (typeof navigator === "undefined" || !navigator.credentials) {
     throw new ConnectError("webauthn_unsupported", "WebAuthn unavailable in this environment");
   }
@@ -152,6 +162,7 @@ async function readErrorCode(res) {
 export {
   ACTIVE_WALLET_STORAGE_KEY,
   ConnectError,
+  ceremonyPhaseLabel,
   createAnonServerPolicy,
   createPasskeySigner,
   createWallet,

package/dist/react.d.ts

@@ -1,5 +1,5 @@
 import { DexterApiBrowserPasskeySigner } from '@dexterai/vault/signers/browser';
-import { C as CeremonyPhase, S as SignInResult, P as PasskeyLoginTokens, a as ConnectVault, b as ConnectError, d as StoredWallet, c as PasskeySignalSupport } from './signals-CXkNJfIo.js';
+import { C as CeremonyPhase, S as SignInResult, P as PasskeyLoginTokens, a as ConnectVault, b as ConnectError, d as StoredWallet, c as PasskeySignalSupport } from './signals-B7GXneoj.js';
 import { ReactElement, ReactNode } from 'react';
 
 type ConnectStatus = 'idle' | 'pending' | 'done' | 'error';

package/dist/react.js

@@ -1,5 +1,6 @@
 import {
   ConnectError,
+  ceremonyPhaseLabel,
   createPasskeySigner,
   ejectActiveWallet,
   getActiveHandle,
@@ -12,7 +13,7 @@ import {
   setActiveHandle,
   subscribe,
   switchWallet
-} from "./chunk-W5ISTMTY.js";
+} from "./chunk-YCA2UT4N.js";
 
 // src/useSignInWithDexter.ts
 import { useCallback, useEffect, useMemo, useState } from "react";
@@ -226,12 +227,6 @@ function DexterButton(props) {
 
 // src/SignInWithDexter.tsx
 import { jsx as jsx2, jsxs as jsxs2 } from "react/jsx-runtime";
-var PHASE_LABEL = {
-  challenge: "Preparing\u2026",
-  passkey: "Waiting for your passkey\u2026",
-  verifying: "Verifying\u2026",
-  finalizing: "Finishing\u2026"
-};
 function shortAddress(addr) {
   return addr.length > 10 ? `${addr.slice(0, 4)}\u2026${addr.slice(-4)}` : addr;
 }
@@ -274,7 +269,7 @@ function SignInWithDexter(props) {
     DexterButton,
     {
       loading: c.status === "pending",
-      loadingLabel: c.phase ? PHASE_LABEL[c.phase] : "Connecting\u2026",
+      loadingLabel: c.phase ? ceremonyPhaseLabel(c.phase) : "Connecting\u2026",
       variant,
       block,
       className,

package/dist/{signals-CXkNJfIo.d.ts → signals-B7GXneoj.d.ts}

@@ -41,6 +41,18 @@ type CeremonyPhase = 'challenge' | 'passkey' | 'verifying' | 'finalizing';
 interface DexterConnectConfig {
     /** dexter-api base. Default https://api.dexter.cash. */
     apiBase?: string;
+    /**
+     * Where the WebAuthn ceremony runs:
+     *  - 'auto' (default): inline on the canonical Dexter origin (dexter.cash),
+     *    popup on ANY other origin — so a third-party site works without the
+     *    WebAuthn rpId-origin problem (in-page only works on dexter.cash).
+     *  - 'popup': always via the hosted popup (works on any website).
+     *  - 'inline': always in-page — only valid on a Dexter origin; this is what
+     *    the hosted ceremony page itself uses.
+     */
+    transport?: 'auto' | 'popup' | 'inline';
+    /** Hosted ceremony page (popup transport). Default https://dexter.cash/connect. */
+    connectHost?: string;
 }
 /** Typed error whose `code` is the server's snake_case error string. */
 declare class ConnectError extends Error {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dexterai/connect",
-  "version": "0.9.0",
+  "version": "0.11.0",
   "description": "Sign in with Dexter — passkey connector. Composes @dexterai/vault.",
   "type": "module",
   "exports": {