@enbox/auth 0.3.1

package/dist/esm/flows/local-connect.js

@@ -0,0 +1,141 @@
+/**
+ * Local DID connect flow.
+ *
+ * Creates or reconnects a local identity with vault-protected keys.
+ * This replaces the "Mode D/E" paths in Enbox.connect().
+ * @module
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { applyLocalDwnDiscovery } from './dwn-discovery.js';
+import { AuthSession } from '../identity-session.js';
+import { registerWithDwnEndpoints } from './dwn-registration.js';
+import { INSECURE_DEFAULT_PASSWORD, STORAGE_KEYS } from '../types.js';
+/**
+ * Execute the local connect flow.
+ *
+ * - On first launch: initializes the vault, creates a new DID, returns recovery phrase.
+ * - On subsequent launches: unlocks the vault and reconnects to the existing identity.
+ */
+export function localConnect(ctx_1) {
+    return __awaiter(this, arguments, void 0, function* (ctx, options = {}) {
+        var _a, _b, _c, _d, _e, _f, _g, _h;
+        const { userAgent, emitter, storage } = ctx;
+        const password = (_b = (_a = options.password) !== null && _a !== void 0 ? _a : ctx.defaultPassword) !== null && _b !== void 0 ? _b : INSECURE_DEFAULT_PASSWORD;
+        const sync = (_c = options.sync) !== null && _c !== void 0 ? _c : ctx.defaultSync;
+        const dwnEndpoints = (_e = (_d = options.dwnEndpoints) !== null && _d !== void 0 ? _d : ctx.defaultDwnEndpoints) !== null && _e !== void 0 ? _e : ['https://enbox-dwn.fly.dev'];
+        // Warn if using insecure default.
+        if (password === INSECURE_DEFAULT_PASSWORD) {
+            console.warn('[@enbox/auth] SECURITY WARNING: No password set. Using insecure default. ' +
+                'Set a password via AuthManager.create({ password }) or connect({ password }) ' +
+                'to protect your identity vault.');
+        }
+        let recoveryPhrase;
+        // Initialize vault on first launch.
+        if (yield userAgent.firstLaunch()) {
+            recoveryPhrase = yield userAgent.initialize({
+                password,
+                recoveryPhrase: options.recoveryPhrase,
+                dwnEndpoints,
+            });
+        }
+        // Start the agent (unlocks vault if locked, sets agentDid).
+        yield userAgent.start({ password });
+        emitter.emit('vault-unlocked', {});
+        // Apply local DWN discovery (browser redirect payload or persisted endpoint).
+        yield applyLocalDwnDiscovery(userAgent, storage, emitter);
+        // Find or create the user identity.
+        const identities = yield userAgent.identity.list();
+        let identity = identities[0];
+        let isNewIdentity = false;
+        if (!identity) {
+            isNewIdentity = true;
+            identity = yield userAgent.identity.create({
+                didMethod: 'dht',
+                metadata: { name: (_g = (_f = options.metadata) === null || _f === void 0 ? void 0 : _f.name) !== null && _g !== void 0 ? _g : 'Default' },
+                didOptions: {
+                    services: [
+                        {
+                            id: 'dwn',
+                            type: 'DecentralizedWebNode',
+                            serviceEndpoint: dwnEndpoints,
+                            enc: '#enc',
+                            sig: '#sig',
+                        }
+                    ],
+                    verificationMethods: [
+                        {
+                            algorithm: 'Ed25519',
+                            id: 'sig',
+                            purposes: ['assertionMethod', 'authentication'],
+                        },
+                        {
+                            algorithm: 'X25519',
+                            id: 'enc',
+                            purposes: ['keyAgreement'],
+                        },
+                    ],
+                },
+            });
+        }
+        const connectedDid = (_h = identity.metadata.connectedDid) !== null && _h !== void 0 ? _h : identity.did.uri;
+        const delegateDid = identity.metadata.connectedDid ? identity.did.uri : undefined;
+        // Register with DWN endpoints (if registration options are provided).
+        if (ctx.registration) {
+            yield registerWithDwnEndpoints({
+                userAgent: userAgent,
+                dwnEndpoints,
+                agentDid: userAgent.agentDid.uri,
+                connectedDid,
+            }, ctx.registration);
+        }
+        // Register sync for new identities.
+        if (isNewIdentity && sync !== 'off') {
+            yield userAgent.sync.registerIdentity({
+                did: connectedDid,
+                options: { delegateDid, protocols: [] },
+            });
+        }
+        // Start sync.
+        if (sync !== 'off') {
+            const syncMode = sync === undefined ? 'live' : 'poll';
+            const syncInterval = sync !== null && sync !== void 0 ? sync : (syncMode === 'live' ? '5m' : '2m');
+            userAgent.sync.startSync({ mode: syncMode, interval: syncInterval })
+                .catch((error) => {
+                console.error('[@enbox/auth] Sync failed:', error);
+            });
+        }
+        // Persist session info.
+        yield storage.set(STORAGE_KEYS.PREVIOUSLY_CONNECTED, 'true');
+        yield storage.set(STORAGE_KEYS.ACTIVE_IDENTITY, connectedDid);
+        const identityInfo = {
+            didUri: connectedDid,
+            name: identity.metadata.name,
+            connectedDid: identity.metadata.connectedDid,
+        };
+        const session = new AuthSession({
+            agent: userAgent,
+            did: connectedDid,
+            delegateDid,
+            recoveryPhrase,
+            identity: identityInfo,
+        });
+        emitter.emit('identity-added', { identity: identityInfo });
+        emitter.emit('session-start', {
+            session: {
+                did: session.did,
+                delegateDid,
+                identity: identityInfo,
+            },
+        });
+        return session;
+    });
+}
+//# sourceMappingURL=local-connect.js.map

package/dist/esm/flows/local-connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-connect.js","sourceRoot":"","sources":["../../../src/flows/local-connect.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;;;;;;;;;;AAOH,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,yBAAyB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAatE;;;;;GAKG;AACH,MAAM,UAAgB,YAAY;yDAChC,GAAwB,EACxB,UAA+B,EAAE;;QAEjC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;QAE5C,MAAM,QAAQ,GAAG,MAAA,MAAA,OAAO,CAAC,QAAQ,mCAAI,GAAG,CAAC,eAAe,mCAAI,yBAAyB,CAAC;QACtF,MAAM,IAAI,GAAG,MAAA,OAAO,CAAC,IAAI,mCAAI,GAAG,CAAC,WAAW,CAAC;QAC7C,MAAM,YAAY,GAAG,MAAA,MAAA,OAAO,CAAC,YAAY,mCAAI,GAAG,CAAC,mBAAmB,mCAAI,CAAC,2BAA2B,CAAC,CAAC;QAEtG,kCAAkC;QAClC,IAAI,QAAQ,KAAK,yBAAyB,EAAE,CAAC;YAC3C,OAAO,CAAC,IAAI,CACV,2EAA2E;gBAC3E,+EAA+E;gBAC/E,iCAAiC,CAClC,CAAC;QACJ,CAAC;QAED,IAAI,cAAkC,CAAC;QAEvC,oCAAoC;QACpC,IAAI,MAAM,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;YAClC,cAAc,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC;gBAC1C,QAAQ;gBACR,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,YAAY;aACb,CAAC,CAAC;QACL,CAAC;QAED,4DAA4D;QAC5D,MAAM,SAAS,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;QAEnC,8EAA8E;QAC9E,MAAM,sBAAsB,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAE1D,oCAAoC;QACpC,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnD,IAAI,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,aAAa,GAAG,KAAK,CAAC;QAE1B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,aAAa,GAAG,IAAI,CAAC;YACrB,QAAQ,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACzC,SAAS,EAAI,KAAK;gBAClB,QAAQ,EAAK,EAAE,IAAI,EAAE,MAAA,MAAA,OAAO,CAAC,QAAQ,0CAAE,IAAI,mCAAI,SAAS,EAAE;gBAC1D,UAAU,EAAG;oBACX,QAAQ,EAAE;wBACR;4BACE,EAAE,EAAgB,KAAK;4BACvB,IAAI,EAAc,sBAAsB;4BACxC,eAAe,EAAG,YAAY;4BAC9B,GAAG,EAAe,MAAM;4BACxB,GAAG,EAAe,MAAM;yBACzB;qBACF;oBACD,mBAAmB,EAAE;wBACnB;4BACE,SAAS,EAAG,SAAS;4BACrB,EAAE,EAAU,KAAK;4BACjB,QAAQ,EAAI,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;yBAClD;wBACD;4BACE,SAAS,EAAG,QAAQ;4BACpB,EAAE,EAAU,KAAK;4BACjB,QAAQ,EAAI,CAAC,cAAc,CAAC;yBAC7B;qBACF;iBACF;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,YAAY,GAAG,MAAA,QAAQ,CAAC,QAAQ,CAAC,YAAY,mCAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;QACxE,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAElF,sEAAsE;QACtE,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;YACrB,MAAM,wBAAwB,CAC5B;gBACE,SAAS,EAAG,SAAS;gBACrB,YAAY;gBACZ,QAAQ,EAAI,SAAS,CAAC,QAAQ,CAAC,GAAG;gBAClC,YAAY;aACb,EACD,GAAG,CAAC,YAAY,CACjB,CAAC;QACJ,CAAC;QAED,oCAAoC;QACpC,IAAI,aAAa,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACpC,MAAM,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC;gBACpC,GAAG,EAAO,YAAY;gBACtB,OAAO,EAAG,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,EAAE;aACzC,CAAC,CAAC;QACL,CAAC;QAED,cAAc;QACd,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACnB,MAAM,QAAQ,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YACtD,MAAM,YAAY,GAAG,IAAI,aAAJ,IAAI,cAAJ,IAAI,GAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACjE,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;iBACjE,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBACxB,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;YACrD,CAAC,CAAC,CAAC;QACP,CAAC;QAED,wBAAwB;QACxB,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;QAC7D,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;QAE9D,MAAM,YAAY,GAAG;YACnB,MAAM,EAAS,YAAY;YAC3B,IAAI,EAAW,QAAQ,CAAC,QAAQ,CAAC,IAAI;YACrC,YAAY,EAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY;SAC9C,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC;YAC9B,KAAK,EAAM,SAAS;YACpB,GAAG,EAAQ,YAAY;YACvB,WAAW;YACX,cAAc;YACd,QAAQ,EAAG,YAAY;SACxB,CAAC,CAAC;QAEH,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;QAC3D,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE;YAC5B,OAAO,EAAE;gBACP,GAAG,EAAQ,OAAO,CAAC,GAAG;gBACtB,WAAW;gBACX,QAAQ,EAAG,YAAY;aACxB;SACF,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC;IACjB,CAAC;CAAA"}

package/dist/esm/flows/session-restore.js

@@ -0,0 +1,109 @@
+/**
+ * Session restore flow.
+ *
+ * Restores a previously established session from persisted storage,
+ * replacing the "previouslyConnected" pattern in apps.
+ * @module
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { applyLocalDwnDiscovery } from './dwn-discovery.js';
+import { AuthSession } from '../identity-session.js';
+import { INSECURE_DEFAULT_PASSWORD, STORAGE_KEYS } from '../types.js';
+/**
+ * Attempt to restore a previous session.
+ *
+ * Returns `undefined` if no previous session exists.
+ * Returns an `AuthSession` if the session was successfully restored.
+ */
+export function restoreSession(ctx_1) {
+    return __awaiter(this, arguments, void 0, function* (ctx, options = {}) {
+        var _a, _b, _c;
+        const { userAgent, emitter, storage } = ctx;
+        // Check if there was a previous session.
+        const previouslyConnected = yield storage.get(STORAGE_KEYS.PREVIOUSLY_CONNECTED);
+        if (previouslyConnected !== 'true') {
+            return undefined;
+        }
+        const password = (_b = (_a = options.password) !== null && _a !== void 0 ? _a : ctx.defaultPassword) !== null && _b !== void 0 ? _b : INSECURE_DEFAULT_PASSWORD;
+        // Warn if using insecure default.
+        if (password === INSECURE_DEFAULT_PASSWORD) {
+            console.warn('[@enbox/auth] SECURITY WARNING: No password set. Using insecure default. ' +
+                'Set a password to protect your identity vault.');
+        }
+        // Start the agent (initializes + unlocks vault).
+        if (yield userAgent.firstLaunch()) {
+            // Vault doesn't exist yet — this shouldn't happen if previouslyConnected is true.
+            // Clean up the stale flag and return undefined.
+            yield storage.remove(STORAGE_KEYS.PREVIOUSLY_CONNECTED);
+            return undefined;
+        }
+        yield userAgent.start({ password });
+        emitter.emit('vault-unlocked', {});
+        // Apply local DWN discovery (browser redirect payload or persisted endpoint).
+        yield applyLocalDwnDiscovery(userAgent, storage, emitter);
+        // Determine which identity to reconnect.
+        const activeIdentityDid = yield storage.get(STORAGE_KEYS.ACTIVE_IDENTITY);
+        const storedDelegateDid = yield storage.get(STORAGE_KEYS.DELEGATE_DID);
+        // First try the connected identity (wallet-connected sessions).
+        let identity = yield userAgent.identity.connectedIdentity();
+        if (!identity) {
+            // Try to find the specific active identity.
+            if (activeIdentityDid) {
+                identity = yield userAgent.identity.get({ didUri: activeIdentityDid });
+            }
+            // Fall back to the first available identity.
+            if (!identity) {
+                const identities = yield userAgent.identity.list();
+                identity = identities[0];
+            }
+        }
+        if (!identity) {
+            // No identity found — clean up stale session data.
+            yield storage.remove(STORAGE_KEYS.PREVIOUSLY_CONNECTED);
+            yield storage.remove(STORAGE_KEYS.ACTIVE_IDENTITY);
+            yield storage.remove(STORAGE_KEYS.DELEGATE_DID);
+            yield storage.remove(STORAGE_KEYS.CONNECTED_DID);
+            return undefined;
+        }
+        const connectedDid = (_c = identity.metadata.connectedDid) !== null && _c !== void 0 ? _c : identity.did.uri;
+        const delegateDid = identity.metadata.connectedDid
+            ? identity.did.uri
+            : (storedDelegateDid !== null && storedDelegateDid !== void 0 ? storedDelegateDid : undefined);
+        // Start sync.
+        const sync = ctx.defaultSync;
+        if (sync !== 'off') {
+            const syncMode = sync === undefined ? 'live' : 'poll';
+            const syncInterval = sync !== null && sync !== void 0 ? sync : (syncMode === 'live' ? '5m' : '2m');
+            userAgent.sync.startSync({ mode: syncMode, interval: syncInterval })
+                .catch((err) => {
+                console.error('[@enbox/auth] Sync failed:', err);
+            });
+        }
+        // Update persisted session info.
+        yield storage.set(STORAGE_KEYS.ACTIVE_IDENTITY, connectedDid);
+        const identityInfo = {
+            didUri: connectedDid,
+            name: identity.metadata.name,
+            connectedDid: identity.metadata.connectedDid,
+        };
+        const session = new AuthSession({
+            agent: userAgent,
+            did: connectedDid,
+            delegateDid,
+            identity: identityInfo,
+        });
+        emitter.emit('session-start', {
+            session: { did: connectedDid, delegateDid, identity: identityInfo },
+        });
+        return session;
+    });
+}
+//# sourceMappingURL=session-restore.js.map

package/dist/esm/flows/session-restore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-restore.js","sourceRoot":"","sources":["../../../src/flows/session-restore.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;;;;;;;;;;AAOH,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,yBAAyB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAWtE;;;;;GAKG;AACH,MAAM,UAAgB,cAAc;yDAClC,GAA0B,EAC1B,UAAiC,EAAE;;QAEnC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;QAE5C,yCAAyC;QACzC,MAAM,mBAAmB,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,oBAAoB,CAAC,CAAC;QACjF,IAAI,mBAAmB,KAAK,MAAM,EAAE,CAAC;YACnC,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,QAAQ,GAAG,MAAA,MAAA,OAAO,CAAC,QAAQ,mCAAI,GAAG,CAAC,eAAe,mCAAI,yBAAyB,CAAC;QAEtF,kCAAkC;QAClC,IAAI,QAAQ,KAAK,yBAAyB,EAAE,CAAC;YAC3C,OAAO,CAAC,IAAI,CACV,2EAA2E;gBAC3E,gDAAgD,CACjD,CAAC;QACJ,CAAC;QAED,iDAAiD;QACjD,IAAI,MAAM,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;YAClC,kFAAkF;YAClF,gDAAgD;YAChD,MAAM,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,oBAAoB,CAAC,CAAC;YACxD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,SAAS,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;QAEnC,8EAA8E;QAC9E,MAAM,sBAAsB,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAE1D,yCAAyC;QACzC,MAAM,iBAAiB,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC;QAC1E,MAAM,iBAAiB,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAEvE,gEAAgE;QAChE,IAAI,QAAQ,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QAE5D,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,4CAA4C;YAC5C,IAAI,iBAAiB,EAAE,CAAC;gBACtB,QAAQ,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;YACzE,CAAC;YAED,6CAA6C;YAC7C,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnD,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,mDAAmD;YACnD,MAAM,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,oBAAoB,CAAC,CAAC;YACxD,MAAM,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC;YACnD,MAAM,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;YAChD,MAAM,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;YACjD,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,YAAY,GAAG,MAAA,QAAQ,CAAC,QAAQ,CAAC,YAAY,mCAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;QACxE,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY;YAChD,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG;YAClB,CAAC,CAAC,CAAC,iBAAiB,aAAjB,iBAAiB,cAAjB,iBAAiB,GAAI,SAAS,CAAC,CAAC;QAErC,cAAc;QACd,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,CAAC;QAC7B,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACnB,MAAM,QAAQ,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YACtD,MAAM,YAAY,GAAG,IAAI,aAAJ,IAAI,cAAJ,IAAI,GAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACjE,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;iBACjE,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;gBACtB,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;YACnD,CAAC,CAAC,CAAC;QACP,CAAC;QAED,iCAAiC;QACjC,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;QAE9D,MAAM,YAAY,GAAG;YACnB,MAAM,EAAS,YAAY;YAC3B,IAAI,EAAW,QAAQ,CAAC,QAAQ,CAAC,IAAI;YACrC,YAAY,EAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY;SAC9C,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC;YAC9B,KAAK,EAAM,SAAS;YACpB,GAAG,EAAQ,YAAY;YACvB,WAAW;YACX,QAAQ,EAAG,YAAY;SACxB,CAAC,CAAC;QAEH,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE;YAC5B,OAAO,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE;SACpE,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC;IACjB,CAAC;CAAA"}

package/dist/esm/flows/wallet-connect.js

@@ -0,0 +1,199 @@
+/**
+ * Wallet connect (OIDC/QR) flow.
+ *
+ * Connects to an external wallet via the WalletConnect relay protocol,
+ * importing a delegated DID with permission grants.
+ * This replaces the "Mode B/C" paths in Enbox.connect().
+ * @module
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __rest = (this && this.__rest) || function (s, e) {
+    var t = {};
+    for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)
+        t[p] = s[p];
+    if (s != null && typeof Object.getOwnPropertySymbols === "function")
+        for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {
+            if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))
+                t[p[i]] = s[p[i]];
+        }
+    return t;
+};
+import { Convert } from '@enbox/common';
+import { WalletConnect } from '@enbox/agent';
+import { DwnInterface, DwnPermissionGrant } from '@enbox/agent';
+import { AuthSession } from '../identity-session.js';
+import { registerWithDwnEndpoints } from './dwn-registration.js';
+import { STORAGE_KEYS } from '../types.js';
+/**
+ * Process connected grants by storing them in the local DWN as the owner.
+ *
+ * This is the agent-level equivalent of `Enbox.processConnectedGrants()`.
+ * It stores each grant, signed as owner, and returns the deduplicated
+ * list of protocol URIs represented by the grants.
+ *
+ * @internal
+ */
+export function processConnectedGrants(params) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const { agent, delegateDid, grants } = params;
+        const connectedProtocols = new Set();
+        for (const grantMessage of grants) {
+            const grant = DwnPermissionGrant.parse(grantMessage);
+            // Store the grant as the owner of the DWN so the delegateDid
+            // can use it when impersonating the connectedDid.
+            const { encodedData } = grantMessage, rawMessage = __rest(grantMessage, ["encodedData"]);
+            const dataStream = new Blob([Convert.base64Url(encodedData).toUint8Array()]);
+            const { reply } = yield agent.processDwnRequest({
+                store: true,
+                author: delegateDid,
+                target: delegateDid,
+                messageType: DwnInterface.RecordsWrite,
+                signAsOwner: true,
+                rawMessage,
+                dataStream,
+            });
+            if (reply.status.code !== 202) {
+                throw new Error(`[@enbox/auth] Failed to process connected grant: ${reply.status.detail}`);
+            }
+            const protocol = grant.scope.protocol;
+            if (protocol) {
+                connectedProtocols.add(protocol);
+            }
+        }
+        return [...connectedProtocols];
+    });
+}
+/**
+ * Execute the wallet connect flow.
+ *
+ * 1. Passes the permission requests directly to `WalletConnect.initClient()`.
+ * 2. Imports the delegate DID and processes grants.
+ * 3. Sets up sync and returns an AuthSession.
+ */
+export function walletConnect(ctx, options) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a, _b, _c;
+        const { userAgent, emitter, storage } = ctx;
+        const sync = (_a = options.sync) !== null && _a !== void 0 ? _a : ctx.defaultSync;
+        if (sync === 'off') {
+            throw new Error('[@enbox/auth] Sync must be enabled when using wallet connect. ' +
+                'Remove sync: "off" or set an interval like "15s".');
+        }
+        // Run the full OIDC wallet connect flow.
+        // permissionRequests are already agent-level ConnectPermissionRequest objects.
+        const result = yield WalletConnect.initClient({
+            displayName: options.displayName,
+            connectServerUrl: options.connectServerUrl,
+            walletUri: (_b = options.walletUri) !== null && _b !== void 0 ? _b : 'web5://connect',
+            permissionRequests: options.permissionRequests,
+            onWalletUriReady: options.onWalletUriReady,
+            validatePin: options.validatePin,
+        });
+        if (!result) {
+            throw new Error('[@enbox/auth] Wallet connect flow was cancelled or returned no result.');
+        }
+        const { delegatePortableDid, connectedDid, delegateGrants } = result;
+        // Import the delegated DID as an Identity.
+        let identity;
+        try {
+            identity = yield userAgent.identity.import({
+                portableIdentity: {
+                    portableDid: delegatePortableDid,
+                    metadata: {
+                        connectedDid,
+                        name: 'Default',
+                        uri: delegatePortableDid.uri,
+                        tenant: userAgent.agentDid.uri,
+                    },
+                },
+            });
+            // Process the connected grants using agent primitives.
+            const connectedProtocols = yield processConnectedGrants({
+                agent: userAgent,
+                delegateDid: delegatePortableDid.uri,
+                grants: delegateGrants,
+            });
+            // Register with DWN endpoints (if registration options are provided).
+            if (ctx.registration) {
+                const dwnEndpoints = (_c = ctx.defaultDwnEndpoints) !== null && _c !== void 0 ? _c : ['https://enbox-dwn.fly.dev'];
+                yield registerWithDwnEndpoints({
+                    userAgent: userAgent,
+                    dwnEndpoints,
+                    agentDid: userAgent.agentDid.uri,
+                    connectedDid,
+                }, ctx.registration);
+            }
+            // Register sync for the connected identity.
+            yield userAgent.sync.registerIdentity({
+                did: connectedDid,
+                options: {
+                    delegateDid: delegatePortableDid.uri,
+                    protocols: connectedProtocols,
+                },
+            });
+            // Pull down existing messages from the connected DID's DWN.
+            yield userAgent.sync.sync('pull');
+        }
+        catch (error) {
+            // Clean up on failure.
+            if (identity) {
+                try {
+                    yield userAgent.did.delete({
+                        didUri: identity.did.uri,
+                        tenant: identity.metadata.tenant,
+                        deleteKey: true,
+                    });
+                }
+                catch ( /* best effort */_d) { /* best effort */ }
+                try {
+                    yield userAgent.identity.delete({ didUri: identity.did.uri });
+                }
+                catch ( /* best effort */_e) { /* best effort */ }
+            }
+            const message = error instanceof Error ? error.message : String(error);
+            throw new Error(`[@enbox/auth] Wallet connect failed: ${message}`);
+        }
+        // Start sync.
+        const syncMode = sync === undefined ? 'live' : 'poll';
+        const syncInterval = sync !== null && sync !== void 0 ? sync : (syncMode === 'live' ? '5m' : '2m');
+        userAgent.sync.startSync({ mode: syncMode, interval: syncInterval })
+            .catch((err) => {
+            console.error('[@enbox/auth] Sync failed:', err);
+        });
+        const delegateDid = delegatePortableDid.uri;
+        // Persist session info.
+        yield storage.set(STORAGE_KEYS.PREVIOUSLY_CONNECTED, 'true');
+        yield storage.set(STORAGE_KEYS.ACTIVE_IDENTITY, connectedDid);
+        yield storage.set(STORAGE_KEYS.DELEGATE_DID, delegateDid);
+        yield storage.set(STORAGE_KEYS.CONNECTED_DID, connectedDid);
+        const identityInfo = {
+            didUri: connectedDid,
+            name: identity.metadata.name,
+            connectedDid: identity.metadata.connectedDid,
+        };
+        const session = new AuthSession({
+            agent: userAgent,
+            did: connectedDid,
+            delegateDid,
+            identity: identityInfo,
+        });
+        emitter.emit('identity-added', { identity: identityInfo });
+        emitter.emit('session-start', {
+            session: {
+                did: session.did,
+                delegateDid,
+                identity: identityInfo,
+            },
+        });
+        return session;
+    });
+}
+//# sourceMappingURL=wallet-connect.js.map

package/dist/esm/flows/wallet-connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-connect.js","sourceRoot":"","sources":["../../../src/flows/wallet-connect.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;;;;;;;;;;;;;;;;;;;;;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAGhE,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAa3C;;;;;;;;GAQG;AACH,MAAM,UAAgB,sBAAsB,CAAC,MAI5C;;QACC,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;QAC9C,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;QAE7C,KAAK,MAAM,YAAY,IAAI,MAAM,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAErD,6DAA6D;YAC7D,kDAAkD;YAClD,MAAM,EAAE,WAAW,KAAoB,YAAY,EAA3B,UAAU,UAAK,YAAY,EAA7C,eAA8B,CAAe,CAAC;YACpD,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,YAAY,EAAc,CAAC,CAAC,CAAC;YAEzF,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC;gBAC9C,KAAK,EAAS,IAAI;gBAClB,MAAM,EAAQ,WAAW;gBACzB,MAAM,EAAQ,WAAW;gBACzB,WAAW,EAAG,YAAY,CAAC,YAAY;gBACvC,WAAW,EAAG,IAAI;gBAClB,UAAU;gBACV,UAAU;aACX,CAAC,CAAC;YAEH,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CACb,oDAAoD,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAC1E,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAI,KAAK,CAAC,KAAgE,CAAC,QAAQ,CAAC;YAClG,IAAI,QAAQ,EAAE,CAAC;gBACb,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QAED,OAAO,CAAC,GAAG,kBAAkB,CAAC,CAAC;IACjC,CAAC;CAAA;AAED;;;;;;GAMG;AACH,MAAM,UAAgB,aAAa,CACjC,GAAyB,EACzB,OAA6B;;;QAE7B,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAA,OAAO,CAAC,IAAI,mCAAI,GAAG,CAAC,WAAW,CAAC;QAE7C,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CACb,gEAAgE;gBAChE,mDAAmD,CACpD,CAAC;QACJ,CAAC;QAED,yCAAyC;QACzC,+EAA+E;QAC/E,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC;YAC5C,WAAW,EAAU,OAAO,CAAC,WAAW;YACxC,gBAAgB,EAAK,OAAO,CAAC,gBAAgB;YAC7C,SAAS,EAAY,MAAA,OAAO,CAAC,SAAS,mCAAI,gBAAgB;YAC1D,kBAAkB,EAAG,OAAO,CAAC,kBAAkB;YAC/C,gBAAgB,EAAK,OAAO,CAAC,gBAAgB;YAC7C,WAAW,EAAU,OAAO,CAAC,WAAW;SACzC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;QAC5F,CAAC;QAED,MAAM,EAAE,mBAAmB,EAAE,YAAY,EAAE,cAAc,EAAE,GAAG,MAAM,CAAC;QAErE,2CAA2C;QAC3C,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;gBACzC,gBAAgB,EAAE;oBAChB,WAAW,EAAG,mBAAmB;oBACjC,QAAQ,EAAM;wBACZ,YAAY;wBACZ,IAAI,EAAK,SAAS;wBAClB,GAAG,EAAM,mBAAmB,CAAC,GAAG;wBAChC,MAAM,EAAG,SAAS,CAAC,QAAQ,CAAC,GAAG;qBAChC;iBACF;aACF,CAAC,CAAC;YAEH,uDAAuD;YACvD,MAAM,kBAAkB,GAAG,MAAM,sBAAsB,CAAC;gBACtD,KAAK,EAAS,SAAS;gBACvB,WAAW,EAAG,mBAAmB,CAAC,GAAG;gBACrC,MAAM,EAAQ,cAAc;aAC7B,CAAC,CAAC;YAEH,sEAAsE;YACtE,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;gBACrB,MAAM,YAAY,GAAG,MAAA,GAAG,CAAC,mBAAmB,mCAAI,CAAC,2BAA2B,CAAC,CAAC;gBAC9E,MAAM,wBAAwB,CAC5B;oBACE,SAAS,EAAG,SAAS;oBACrB,YAAY;oBACZ,QAAQ,EAAI,SAAS,CAAC,QAAQ,CAAC,GAAG;oBAClC,YAAY;iBACb,EACD,GAAG,CAAC,YAAY,CACjB,CAAC;YACJ,CAAC;YAED,4CAA4C;YAC5C,MAAM,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC;gBACpC,GAAG,EAAO,YAAY;gBACtB,OAAO,EAAG;oBACR,WAAW,EAAG,mBAAmB,CAAC,GAAG;oBACrC,SAAS,EAAK,kBAAkB;iBACjC;aACF,CAAC,CAAC;YAEH,4DAA4D;YAC5D,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,uBAAuB;YACvB,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC;oBACH,MAAM,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;wBACzB,MAAM,EAAM,QAAQ,CAAC,GAAG,CAAC,GAAG;wBAC5B,MAAM,EAAM,QAAQ,CAAC,QAAQ,CAAC,MAAM;wBACpC,SAAS,EAAG,IAAI;qBACjB,CAAC,CAAC;gBACL,CAAC;gBAAC,QAAQ,iBAAiB,IAAnB,CAAC,CAAC,iBAAiB,CAAC,CAAC;gBAE7B,IAAI,CAAC;oBACH,MAAM,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;gBAChE,CAAC;gBAAC,QAAQ,iBAAiB,IAAnB,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAC/B,CAAC;YAED,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,wCAAwC,OAAO,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,cAAc;QACd,MAAM,QAAQ,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QACtD,MAAM,YAAY,GAAG,IAAI,aAAJ,IAAI,cAAJ,IAAI,GAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACjE,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;aACjE,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YACtB,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;QAEL,MAAM,WAAW,GAAG,mBAAmB,CAAC,GAAG,CAAC;QAE5C,wBAAwB;QACxB,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;QAC7D,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;QAC9D,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;QAC1D,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;QAE5D,MAAM,YAAY,GAAG;YACnB,MAAM,EAAS,YAAY;YAC3B,IAAI,EAAW,QAAQ,CAAC,QAAQ,CAAC,IAAI;YACrC,YAAY,EAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY;SAC9C,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC;YAC9B,KAAK,EAAM,SAAS;YACpB,GAAG,EAAQ,YAAY;YACvB,WAAW;YACX,QAAQ,EAAG,YAAY;SACxB,CAAC,CAAC;QAEH,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;QAC3D,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE;YAC5B,OAAO,EAAE;gBACP,GAAG,EAAQ,OAAO,CAAC,GAAG;gBACtB,WAAW;gBACX,QAAQ,EAAG,YAAY;aACxB;SACF,CAAC,CAAC;QAEH,OAAO,OAAO,CAAC;IACjB,CAAC;CAAA"}

package/dist/esm/identity-session.js

@@ -0,0 +1,33 @@
+/**
+ * AuthSession represents an active, authenticated session with a specific identity.
+ * @module
+ */
+/**
+ * An active, authenticated session bound to a specific identity.
+ *
+ * The session exposes the authenticated **agent**, **did**, and
+ * **delegateDid** — the primitives needed to interact with the DWN
+ * network. Consumers that use `@enbox/api` can construct an `Enbox`
+ * instance from these properties:
+ *
+ * ```ts
+ * import { Enbox } from '@enbox/api';
+ *
+ * const session = await auth.connect();
+ * const enbox = Enbox.connect({
+ *   agent: session.agent,
+ *   connectedDid: session.did,
+ *   delegateDid: session.delegateDid,
+ * });
+ * ```
+ */
+export class AuthSession {
+    constructor(params) {
+        this.agent = params.agent;
+        this.did = params.did;
+        this.delegateDid = params.delegateDid;
+        this.recoveryPhrase = params.recoveryPhrase;
+        this.identity = params.identity;
+    }
+}
+//# sourceMappingURL=identity-session.js.map

package/dist/esm/identity-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-session.js","sourceRoot":"","sources":["../../src/identity-session.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,WAAW;IAuBtB,YAAY,MAMX;QACC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;QACtB,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QACtC,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;QAC5C,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IAClC,CAAC;CACF"}

package/dist/esm/index.js

@@ -0,0 +1,50 @@
+/**
+ * @enbox/auth — Headless authentication and identity management SDK.
+ *
+ * Provides composable, multi-identity-aware authentication that works
+ * in both browser and CLI environments. Depends only on `@enbox/agent`
+ * and can be used standalone or consumed by `@enbox/api`.
+ *
+ * @example Standalone auth
+ * ```ts
+ * import { AuthManager } from '@enbox/auth';
+ *
+ * const auth = await AuthManager.create({ sync: '15s' });
+ * const session = await auth.restoreSession() ?? await auth.connect();
+ *
+ * // session.agent — the authenticated Enbox agent
+ * // session.did   — the connected DID URI
+ * ```
+ *
+ * @example With @enbox/api
+ * ```ts
+ * import { AuthManager } from '@enbox/auth';
+ * import { Enbox } from '@enbox/api';
+ *
+ * const auth = await AuthManager.create({ sync: '15s' });
+ * const session = await auth.connect();
+ *
+ * const enbox = Enbox.connect({
+ *   agent: session.agent,
+ *   connectedDid: session.did,
+ *   delegateDid: session.delegateDid,
+ * });
+ * ```
+ *
+ * @packageDocumentation
+ */
+// Core classes
+export { AuthManager } from './auth-manager.js';
+export { AuthSession } from './identity-session.js';
+export { VaultManager } from './vault/vault-manager.js';
+export { AuthEventEmitter } from './events.js';
+// Re-export agent classes so consumers can construct custom agents/vaults
+// without a direct @enbox/agent dependency.
+export { EnboxUserAgent, HdIdentityVault } from '@enbox/agent';
+// Wallet-connect helpers
+export { processConnectedGrants } from './flows/wallet-connect.js';
+// Local DWN discovery (browser dwn:// protocol integration)
+export { applyLocalDwnDiscovery, checkUrlForDwnDiscoveryPayload, clearLocalDwnEndpoint, persistLocalDwnEndpoint, probeLocalDwn, requestLocalDwnDiscovery, restoreLocalDwnEndpoint, } from './flows/dwn-discovery.js';
+// Storage adapters
+export { BrowserStorage, LevelStorage, MemoryStorage, createDefaultStorage } from './storage/storage.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,eAAe;AACf,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,0EAA0E;AAC1E,4CAA4C;AAC5C,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/D,yBAAyB;AACzB,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAEnE,4DAA4D;AAC5D,OAAO,EACL,sBAAsB,EACtB,8BAA8B,EAC9B,qBAAqB,EACrB,uBAAuB,EACvB,aAAa,EACb,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,0BAA0B,CAAC;AAElC,mBAAmB;AACnB,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC"}