@hfunlabs/hypurr-connect 0.1.23 → 0.1.25

package/README.md

@@ -49,7 +49,6 @@ const config = {
   grpcUrl: "https://grpc.hypurr.fun",
   telegram: {
     authHubUrl: "https://auth.hypurr.fun/login",
-    // tokenUrl defaults to https://auth.hypurr.fun/token
     scope: [
       "telegram:user:read",
       "telegram:wallet:read",
@@ -127,7 +126,6 @@ interface HypurrConnectConfig {
   isTestnet?: boolean; // Use testnet endpoints (default: false)
   telegram: {
     authHubUrl?: string; // Auth hub URL (default: https://auth.hypurr.fun/login)
-    tokenUrl?: string; // Token exchange URL (default: auth hub /token)
     returnTo?: string | (() => string); // Callback URL (default: current page)
     scope?: string | string[]; // Requested JWT scopes
   };
@@ -157,7 +155,8 @@ for generated protobuf service clients.
 4. The popup callback page posts `{ token, state }` or `{ code, state }` to the
    opener with `postMessage` and closes.
 5. The opener validates `state`. Legacy tokens are stored directly; auth codes
-   are exchanged at the configured token URL with the stored PKCE verifier.
+   are exchanged at the OAuth metadata `token_endpoint` with the stored PKCE
+   verifier.
 6. The SDK calls the Hypurr gRPC backend with `Authorization: Bearer <jwt>`
    metadata.
 7. An `ExchangeClient` is created with `GrpcExchangeTransport`; exchange

package/dist/index.d.ts

@@ -27,8 +27,6 @@ interface HypurrConnectConfig {
     telegram?: {
         /** Auth hub login URL. Defaults to https://auth.hypurr.fun/login. */
         authHubUrl?: string;
-        /** Auth hub token exchange URL. Defaults to the auth hub login URL with `/login` replaced by `/token`. */
-        tokenUrl?: string;
         /** Optional callback URL. Defaults to the current page without auth query params. */
         returnTo?: string | (() => string);
         /** Requested hub scopes. Defaults to the scopes required by this SDK. */

package/dist/index.js

@@ -80,6 +80,28 @@ function saveAgent(masterAddress, agent) {
 function clearAgent(masterAddress) {
   localStorage.removeItem(storageKey(masterAddress));
 }
+function loadAllAgents() {
+  const agents = [];
+  try {
+    for (let i = 0; i < localStorage.length; i++) {
+      const key = localStorage.key(i);
+      if (!key || !key.startsWith(`${AGENT_STORAGE_PREFIX}:`)) continue;
+      const raw = localStorage.getItem(key);
+      if (!raw) continue;
+      try {
+        const agent = JSON.parse(raw);
+        agents.push({
+          ...agent,
+          masterAddress: key.slice(key.indexOf(":") + 1)
+        });
+      } catch {
+      }
+    }
+  } catch {
+    return [];
+  }
+  return agents.sort((a, b) => b.approvedAt - a.approvedAt);
+}
 async function generateAgentKey() {
   const bytes = crypto.getRandomValues(new Uint8Array(32));
   const hex = Array.from(bytes).map((b) => b.toString(16).padStart(2, "0")).join("");
@@ -100,10 +122,7 @@ async function fetchExtraAgents(userAddress, isTestnet) {
   if (!res.ok) return [];
   const agents = await res.json();
   if (!Array.isArray(agents)) return [];
-  return agents.map((agent) => ({
-    ...agent,
-    validUntil: agent.validUntil * 1e3
-  }));
+  return agents;
 }
 async function fetchActiveAgent(userAddress, isTestnet) {
   const nowMs = Date.now();
@@ -542,17 +561,51 @@ function takeTelegramAuthSession(state) {
   sessionStorage.removeItem(returnToKey);
   return { codeVerifier, returnTo };
 }
-function resolveAuthTokenUrl(authHubUrl, tokenUrl) {
-  const configuredTokenUrl = tokenUrl?.trim();
-  if (configuredTokenUrl) return configuredTokenUrl;
+function fallbackAuthTokenUrl(authHubUrl) {
   const url = new URL(authHubUrl || DEFAULT_AUTH_HUB_URL);
-  const pathWithoutTrailingSlash = url.pathname.replace(/\/+$/, "");
-  const basePath = pathWithoutTrailingSlash.replace(/\/[^/]*$/, "");
-  url.pathname = `${basePath}/token`;
+  url.pathname = "/oauth/token";
   url.search = "";
   url.hash = "";
   return url.toString();
 }
+function authMetadataUrls(authHubUrl) {
+  const authUrl = new URL(authHubUrl || DEFAULT_AUTH_HUB_URL);
+  const urls = [
+    new URL("/.well-known/oauth-authorization-server", authUrl).toString(),
+    new URL("/.well-known/openid-configuration", authUrl).toString()
+  ];
+  const authPath = authUrl.pathname.replace(/\/+$/, "");
+  const basePath = authPath.replace(/\/[^/]*$/, "");
+  if (basePath) {
+    urls.push(
+      new URL(
+        `/.well-known/oauth-authorization-server${basePath}`,
+        authUrl
+      ).toString()
+    );
+  }
+  return Array.from(new Set(urls));
+}
+async function tokenUrlFromMetadata(authHubUrl) {
+  for (const metadataUrl of authMetadataUrls(authHubUrl)) {
+    try {
+      const response = await fetch(metadataUrl, {
+        headers: { accept: "application/json" }
+      });
+      if (!response.ok) continue;
+      const metadata = await response.json();
+      const tokenEndpoint = metadata.token_endpoint;
+      if (typeof tokenEndpoint === "string" && tokenEndpoint.trim()) {
+        return tokenEndpoint.trim();
+      }
+    } catch {
+    }
+  }
+  return void 0;
+}
+async function resolveAuthTokenUrl(authHubUrl) {
+  return await tokenUrlFromMetadata(authHubUrl) || fallbackAuthTokenUrl(authHubUrl);
+}
 function getTokenFromExchangeResponse(data) {
   if (typeof data === "string") {
     const token = data.trim();
@@ -570,8 +623,7 @@ async function exchangeTelegramAuthCode({
   clientId,
   code,
   codeVerifier,
-  returnTo,
-  tokenUrl
+  returnTo
 }) {
   const body = new URLSearchParams({
     client_id: clientId,
@@ -580,7 +632,7 @@ async function exchangeTelegramAuthCode({
     grant_type: "authorization_code",
     return_to: returnTo
   });
-  const response = await fetch(resolveAuthTokenUrl(authHubUrl, tokenUrl), {
+  const response = await fetch(await resolveAuthTokenUrl(authHubUrl), {
     method: "POST",
     headers: {
       accept: "application/json",
@@ -697,8 +749,7 @@ function HypurrConnectProvider({
           clientId: normalizeClientId(config.clientId),
           code: callback.code,
           codeVerifier: authSession.codeVerifier,
-          returnTo: authSession.returnTo || currentReturnTo(),
-          tokenUrl: config.telegram?.tokenUrl
+          returnTo: authSession.returnTo || currentReturnTo()
         }).then(acceptTelegramToken).catch(
           (err) => setTgError(err instanceof Error ? err.message : String(err))
         ).finally(() => setTgLoading(false));
@@ -713,8 +764,7 @@ function HypurrConnectProvider({
     [
       acceptTelegramToken,
       config.clientId,
-      config.telegram?.authHubUrl,
-      config.telegram?.tokenUrl
+      config.telegram?.authHubUrl
     ]
   );
   useEffect(() => {
@@ -1715,6 +1765,7 @@ function HypurrConnectProvider({
       agent,
       agentReady,
       clearAgent: handleClearAgent,
+      eoaAddress,
       authDataMap,
       authToken: tgAuthToken,
       telegramRpcOptions,
@@ -1758,6 +1809,7 @@ function HypurrConnectProvider({
       agent,
       agentReady,
       handleClearAgent,
+      eoaAddress,
       authDataMap,
       tgAuthToken,
       telegramRpcOptions,
@@ -3265,7 +3317,7 @@ import { AnimatePresence as AnimatePresence7, motion as motion7 } from "framer-m
 import {
   Fragment as Fragment8,
   useCallback as useCallback9,
-  useMemo as useMemo3,
+  useMemo as useMemo4,
   useState as useState8
 } from "react";
 
@@ -3371,6 +3423,8 @@ function AgentExpiryWarningIcon({
 import { AnimatePresence as AnimatePresence6, motion as motion6 } from "framer-motion";
 import {
   useCallback as useCallback8,
+  useEffect as useEffect3,
+  useMemo as useMemo3,
   useState as useState7
 } from "react";
 
@@ -4329,11 +4383,40 @@ function UserProfileModal({
     wallets: userWallets,
     deleteWallet,
     renameWallet,
-    authMethod
+    authMethod,
+    agent,
+    eoaAddress,
+    clearAgent: clearContextAgent
   } = useHypurrConnectInternal();
   const [settingsTab, setSettingsTab] = useState7("ui");
   const [walletToDelete, setWalletToDelete] = useState7(null);
   const [walletToRename, setWalletToRename] = useState7(null);
+  const [storedAgents, setStoredAgents] = useState7([]);
+  useEffect3(() => {
+    if (isOpen) setStoredAgents(loadAllAgents());
+  }, [isOpen]);
+  const localAgents = useMemo3(() => {
+    const byOwner = /* @__PURE__ */ new Map();
+    for (const a of storedAgents) byOwner.set(a.masterAddress.toLowerCase(), a);
+    if (agent && eoaAddress && !byOwner.has(eoaAddress.toLowerCase())) {
+      byOwner.set(eoaAddress.toLowerCase(), {
+        ...agent,
+        masterAddress: eoaAddress
+      });
+    }
+    return [...byOwner.values()].sort((a, b) => b.approvedAt - a.approvedAt);
+  }, [storedAgents, agent, eoaAddress]);
+  const handleRemoveLocalAgent = useCallback8(
+    (masterAddress) => {
+      if (eoaAddress && masterAddress.toLowerCase() === eoaAddress.toLowerCase()) {
+        clearContextAgent();
+      } else {
+        clearAgent(masterAddress);
+      }
+      setStoredAgents(loadAllAgents());
+    },
+    [eoaAddress, clearContextAgent]
+  );
   const profilePic = user?.photoUrl || "";
   const displayName = user?.displayName || "";
   const hfunScore = user?.hfunScore ?? null;
@@ -4356,10 +4439,11 @@ function UserProfileModal({
     [renameWallet, onWalletRenamed]
   );
   const handleCopyAddress = useCallback8(() => {
-    if (!displayName) return;
-    navigator.clipboard.writeText(displayName);
+    const address = user?.address || eoaAddress || displayName;
+    if (!address) return;
+    navigator.clipboard.writeText(address);
     onNotify?.({ type: "success", message: "Address copied" });
-  }, [displayName, onNotify]);
+  }, [user?.address, eoaAddress, displayName, onNotify]);
   return /* @__PURE__ */ jsxs10("div", { className: "hypurr-connect", style: { display: "contents" }, children: [
     /* @__PURE__ */ jsx11(AnimatePresence6, { children: isOpen && /* @__PURE__ */ jsxs10(Fragment7, { children: [
       /* @__PURE__ */ jsx11(SpinKeyframes, {}),
@@ -4873,7 +4957,51 @@ function UserProfileModal({
                           " linked"
                         ]
                       }
-                    )
+                    ),
+                    localAgents.length > 0 && /* @__PURE__ */ jsxs10("div", { style: { marginTop: 8 }, children: [
+                      /* @__PURE__ */ jsx11(
+                        "p",
+                        {
+                          style: {
+                            margin: "0 0 8px",
+                            color: profileColors.muted,
+                            ...upperLabelStyle
+                          },
+                          children: "Agent wallets"
+                        }
+                      ),
+                      /* @__PURE__ */ jsx11(
+                        "div",
+                        {
+                          style: {
+                            display: "flex",
+                            flexDirection: "column",
+                            gap: 6
+                          },
+                          children: localAgents.map((agent2) => /* @__PURE__ */ jsx11(
+                            LocalAgentRow,
+                            {
+                              agent: agent2,
+                              onRemove: () => handleRemoveLocalAgent(agent2.masterAddress)
+                            },
+                            agent2.masterAddress
+                          ))
+                        }
+                      ),
+                      /* @__PURE__ */ jsx11(
+                        "p",
+                        {
+                          style: {
+                            margin: "8px 0 0",
+                            fontSize: 12.5,
+                            lineHeight: "1rem",
+                            color: profileColors.subdued,
+                            textAlign: "center"
+                          },
+                          children: "Approved on this device"
+                        }
+                      )
+                    ] })
                   ]
                 }
               )
@@ -5117,6 +5245,127 @@ function WalletRow({
     }
   );
 }
+function shortAddress(address) {
+  return `${address.slice(0, 6)}...${address.slice(-4)}`;
+}
+function normalizeExpiryMs(validUntil) {
+  return validUntil > 1e14 ? Math.round(validUntil / 1e3) : validUntil;
+}
+function LocalAgentRow({
+  agent,
+  onRemove
+}) {
+  const [hovered, setHovered] = useState7(false);
+  const expiresAtMs = normalizeExpiryMs(agent.validUntil);
+  const isExpired = expiresAtMs <= Date.now();
+  const agentTypeColor = "rgb(var(--blue-500))";
+  return /* @__PURE__ */ jsxs10(
+    "div",
+    {
+      style: {
+        ...walletRowStyle,
+        background: hovered ? profileColors.surfaceBtnHover : profileColors.surfaceBtn,
+        borderColor: hovered ? profileColors.surfaceBdHover : profileColors.surfaceBd
+      },
+      onMouseEnter: () => setHovered(true),
+      onMouseLeave: () => setHovered(false),
+      children: [
+        /* @__PURE__ */ jsx11(
+          "div",
+          {
+            style: {
+              width: 32,
+              height: 32,
+              borderRadius: 6,
+              background: "rgb(var(--blue-500) / 0.16)",
+              border: "1px solid rgb(var(--blue-500) / 0.34)",
+              display: "flex",
+              alignItems: "center",
+              justifyContent: "center",
+              flexShrink: 0,
+              color: agentTypeColor
+            },
+            children: /* @__PURE__ */ jsx11(Bot, { size: 15 })
+          }
+        ),
+        /* @__PURE__ */ jsxs10("div", { style: { flex: 1, minWidth: 0 }, children: [
+          /* @__PURE__ */ jsx11(
+            "p",
+            {
+              style: {
+                margin: 0,
+                fontSize: 12.5,
+                lineHeight: "1rem",
+                fontWeight: 500,
+                color: profileColors.text,
+                fontFamily: fontFamily.mono,
+                overflow: "hidden",
+                textOverflow: "ellipsis",
+                whiteSpace: "nowrap"
+              },
+              children: shortAddress(agent.address)
+            }
+          ),
+          /* @__PURE__ */ jsxs10(
+            "p",
+            {
+              style: {
+                margin: "2px 0 0",
+                fontSize: 12.5,
+                lineHeight: "1rem",
+                color: isExpired ? EXPIRED_AGENT_COLOR : profileColors.muted
+              },
+              children: [
+                isExpired ? "Expired" : "Valid until",
+                " ",
+                formatAgentExpiry(expiresAtMs)
+              ]
+            }
+          ),
+          /* @__PURE__ */ jsxs10(
+            "p",
+            {
+              style: {
+                margin: "2px 0 0",
+                fontSize: 12.5,
+                lineHeight: "1rem",
+                color: profileColors.subdued,
+                fontFamily: fontFamily.mono
+              },
+              children: [
+                "Owner ",
+                shortAddress(agent.masterAddress)
+              ]
+            }
+          )
+        ] }),
+        /* @__PURE__ */ jsx11(
+          "div",
+          {
+            style: {
+              display: "flex",
+              alignItems: "center",
+              flexShrink: 0,
+              opacity: hovered ? 1 : 0,
+              transition: "opacity 120ms"
+            },
+            children: /* @__PURE__ */ jsx11(
+              IconBtn,
+              {
+                color: "#ef4444",
+                hoverBackgroundColor: "rgba(239,68,68,0.1)",
+                title: "Remove local agent",
+                ariaLabel: `Remove local agent for ${shortAddress(agent.masterAddress)}`,
+                onClick: onRemove,
+                children: /* @__PURE__ */ jsx11(Trash2, { size: 13 })
+              }
+            )
+          }
+        )
+      ]
+    }
+  );
+}
 function IconBtn({
   children,
   color,
@@ -5291,7 +5540,7 @@ function WalletSelectorDropdown({
     setProfileOpen(true);
     onClose();
   }, [onClose]);
-  const walletListEntries = useMemo3(
+  const walletListEntries = useMemo4(
     () => buildWalletListEntries(Array.isArray(wallets) ? wallets : void 0),
     [wallets]
   );