@ic-reactor/react 3.13.0 → 4.0.0-beta.2

package/dist/auth/identity-attributes.js

@@ -1,227 +0,0 @@
-import { IDL } from "@icp-sdk/core/candid";
-import { IC_INTERNET_IDENTITY_PROVIDER } from "./constants.js";
-export const IDENTITY_ATTRIBUTES_PROVIDER = IC_INTERNET_IDENTITY_PROVIDER;
-/**
- * @deprecated Use the default ClientManager identity provider or
- * `IDENTITY_ATTRIBUTES_PROVIDER` instead.
- */
-export const IDENTITY_ATTRIBUTES_BETA_PROVIDER = IDENTITY_ATTRIBUTES_PROVIDER;
-const OPEN_ID_PROVIDER_URLS = {
-    apple: "https://appleid.apple.com",
-    google: "https://accounts.google.com",
-    microsoft: "https://login.microsoftonline.com/{tid}/v2.0",
-};
-export function identityAttributeKeys({ openIdProvider, keys, }) {
-    const provider = normalizeOpenIdProvider(openIdProvider);
-    return keys.map((key) => `openid:${provider}:${key}`);
-}
-export function normalizeOpenIdProvider(openIdProvider) {
-    return (OPEN_ID_PROVIDER_URLS[openIdProvider] ?? openIdProvider);
-}
-export async function resolveIdentityAttributeKeys({ openIdProvider, keys, }) {
-    return identityAttributeKeys({ openIdProvider, keys });
-}
-export function decodeIdentityAttributeValues(data, requestedKeys) {
-    const requestedKeyMap = requestedKeys.reduce((acc, key) => {
-        acc[key] = identityAttributeDisplayKey(key);
-        acc[identityAttributeDisplayKey(key)] = identityAttributeDisplayKey(key);
-        return acc;
-    }, {});
-    // Internet Identity's own format, read by its type. Once a message is known
-    // to be one, a key it does not hold is absent: the text fallback below
-    // cannot add anything true, only a neighbouring value under the wrong name.
-    const icrc3Entries = decodeIcrc3AttributeMap(data);
-    if (icrc3Entries) {
-        return collectIcrc3TextValues(icrc3Entries, requestedKeyMap);
-    }
-    const decodedValues = decodeCandidAttributeValues(data, requestedKeyMap);
-    if (Object.keys(decodedValues).length > 0) {
-        return decodedValues;
-    }
-    return extractPrintableAttributeValues(data, requestedKeys);
-}
-/**
- * The entries of an Internet Identity attribute message, or `undefined` when
- * `data` is not one.
- *
- * The canister certifies `Encode!(&Icrc3Value::Map(..))`: the requested
- * attributes under the keys they were requested by (bare, such as `email`, for
- * an unscoped request), plus `implicit:nonce`, `implicit:origin` and
- * `implicit:issued_at_timestamp_ns`. None of the shapes
- * {@link decodeCandidAttributeValues} tries match it, so without this every
- * real response was read by scraping printable text, which returned the
- * neighbouring length byte as part of a value, cut names at the first
- * non-ASCII character, and matched keys inside other values.
- *
- * @see https://github.com/dfinity/ICRC-1/blob/main/standards/ICRC-3/README.md
- */
-function decodeIcrc3AttributeMap(data) {
-    const value = IDL.Rec();
-    value.fill(IDL.Variant({
-        Nat: IDL.Nat,
-        Int: IDL.Int,
-        Blob: IDL.Vec(IDL.Nat8),
-        Text: IDL.Text,
-        Array: IDL.Vec(value),
-        Map: IDL.Vec(IDL.Tuple(IDL.Text, value)),
-    }));
-    try {
-        const [decoded] = IDL.decode([value], data);
-        return "Map" in decoded ? decoded.Map : undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-/**
- * The requested attributes in an ICRC-3 map, as certified.
- *
- * Only `Text` entries are attribute values; the `implicit:` entries are there
- * for the verifier and are returned only if asked for by name.
- */
-function collectIcrc3TextValues(entries, requestedKeyMap) {
-    const values = {};
-    for (const [key, value] of entries) {
-        if (!Object.prototype.hasOwnProperty.call(requestedKeyMap, key))
-            continue;
-        if ("Text" in value) {
-            values[requestedKeyMap[key]] = value.Text;
-        }
-    }
-    return values;
-}
-function decodeCandidAttributeValues(data, requestedKeyMap) {
-    const textPairs = IDL.Vec(IDL.Tuple(IDL.Text, IDL.Text));
-    const recordPairs = IDL.Vec(IDL.Record({
-        key: IDL.Text,
-        value: IDL.Text,
-    }));
-    const candidates = [
-        [textPairs],
-        [recordPairs],
-        [IDL.Record({ attributes: textPairs })],
-        [IDL.Record({ values: textPairs })],
-        [IDL.Record({ attributes: recordPairs })],
-        [IDL.Record({ values: recordPairs })],
-    ];
-    for (const candidate of candidates) {
-        try {
-            const decoded = IDL.decode(candidate, data);
-            const values = collectDecodedAttributeValues(decoded, requestedKeyMap);
-            if (Object.keys(values).length > 0) {
-                return values;
-            }
-        }
-        catch {
-            // Try the next known beta payload shape, then fall back to text extraction.
-        }
-    }
-    return {};
-}
-function collectDecodedAttributeValues(value, requestedKeyMap, activeKey) {
-    const values = {};
-    if (typeof value === "string") {
-        const displayKey = requestedKeyMap[value];
-        if (displayKey) {
-            return values;
-        }
-        if (activeKey && isPrintableTextValue(value)) {
-            values[activeKey] = value;
-        }
-        return values;
-    }
-    if (Array.isArray(value)) {
-        if (value.length === 2 && typeof value[0] === "string") {
-            const displayKey = requestedKeyMap[value[0]];
-            if (displayKey &&
-                typeof value[1] === "string" &&
-                isPrintableTextValue(value[1])) {
-                values[displayKey] = value[1];
-                return values;
-            }
-        }
-        for (const item of value) {
-            Object.assign(values, collectDecodedAttributeValues(item, requestedKeyMap, activeKey));
-        }
-        return values;
-    }
-    if (value && typeof value === "object") {
-        const record = value;
-        if (typeof record.key === "string" && typeof record.value === "string") {
-            const displayKey = requestedKeyMap[record.key];
-            if (displayKey && isPrintableTextValue(record.value)) {
-                values[displayKey] = record.value;
-                return values;
-            }
-        }
-        for (const [key, nested] of Object.entries(record)) {
-            const displayKey = requestedKeyMap[key] ?? activeKey;
-            if (displayKey &&
-                typeof nested === "string" &&
-                isPrintableTextValue(nested)) {
-                values[displayKey] = nested;
-                continue;
-            }
-            Object.assign(values, collectDecodedAttributeValues(nested, requestedKeyMap, displayKey));
-        }
-    }
-    return values;
-}
-function extractPrintableAttributeValues(data, requestedKeys) {
-    const text = new TextDecoder().decode(data);
-    const values = {};
-    for (const requestedKey of requestedKeys) {
-        const start = text.indexOf(requestedKey);
-        if (start === -1) {
-            continue;
-        }
-        const tail = text.slice(start + requestedKey.length);
-        const printableRuns = tail.match(/[\x20-\x7E]{2,512}/g) ?? [];
-        const value = printableRuns
-            .map((candidate) => cleanPrintableAttributeValue(candidate, requestedKeys))
-            .find((candidate) => isPrintableTextValue(candidate) &&
-            candidate !== requestedKey &&
-            !candidate.startsWith("openid:"));
-        if (value) {
-            values[identityAttributeDisplayKey(requestedKey)] = value.trim();
-        }
-    }
-    return values;
-}
-function cleanPrintableAttributeValue(value, requestedKeys) {
-    let cleaned = value;
-    for (const requestedKey of requestedKeys) {
-        const nextKeyIndex = cleaned.indexOf(requestedKey);
-        if (nextKeyIndex > 0) {
-            cleaned = cleaned.slice(0, trimCandidTextLengthPrefix(cleaned, nextKeyIndex));
-        }
-    }
-    const nextOpenIdKeyIndex = cleaned.indexOf("openid:");
-    if (nextOpenIdKeyIndex > 0) {
-        cleaned = cleaned.slice(0, trimCandidTextLengthPrefix(cleaned, nextOpenIdKeyIndex));
-    }
-    return cleaned.trim();
-}
-function trimCandidTextLengthPrefix(value, index) {
-    let trimmedIndex = index;
-    while (trimmedIndex > 0 && isAsciiDigit(value.charCodeAt(trimmedIndex - 1))) {
-        trimmedIndex -= 1;
-    }
-    return trimmedIndex;
-}
-function isAsciiDigit(charCode) {
-    return charCode >= 48 && charCode <= 57;
-}
-function identityAttributeDisplayKey(key) {
-    return key.split(":").pop() || key;
-}
-function isPrintableTextValue(value) {
-    return value.length > 0 && value.length <= 512 && /^[\x20-\x7E]+$/.test(value);
-}
-export function normalizeSignedIdentityAttributes(attributes) {
-    return {
-        data: new Uint8Array(attributes.data),
-        signature: new Uint8Array(attributes.signature),
-    };
-}
-//# sourceMappingURL=identity-attributes.js.map

package/dist/auth/identity-attributes.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"identity-attributes.js","sourceRoot":"","sources":["../../src/auth/identity-attributes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAA;AAO1C,OAAO,EAAE,6BAA6B,EAAE,MAAM,gBAAgB,CAAA;AAE9D,MAAM,CAAC,MAAM,4BAA4B,GAAG,6BAA6B,CAAA;AAEzE;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,4BAA4B,CAAA;AAE7E,MAAM,qBAAqB,GAAG;IAC5B,KAAK,EAAE,2BAA2B;IAClC,MAAM,EAAE,6BAA6B;IACrC,SAAS,EAAE,8CAA8C;CACjD,CAAA;AAEV,MAAM,UAAU,qBAAqB,CAAC,EACpC,cAAc,EACd,IAAI,GAIL;IACC,MAAM,QAAQ,GAAG,uBAAuB,CAAC,cAAc,CAAC,CAAA;IACxD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,QAAQ,IAAI,GAAG,EAAE,CAAC,CAAA;AACvD,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,cAA+C;IAE/C,OAAO,CACL,qBAAqB,CACnB,cAAoD,CACrD,IAAI,cAAc,CACpB,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,EACjD,cAAc,EACd,IAAI,GAIL;IACC,OAAO,qBAAqB,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAA;AACxD,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,IAAgB,EAChB,aAAuB;IAEvB,MAAM,eAAe,GAAG,aAAa,CAAC,MAAM,CAC1C,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACX,GAAG,CAAC,GAAG,CAAC,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAA;QAC3C,GAAG,CAAC,2BAA2B,CAAC,GAAG,CAAC,CAAC,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAA;QACxE,OAAO,GAAG,CAAA;IACZ,CAAC,EACD,EAAE,CACH,CAAA;IAED,4EAA4E;IAC5E,uEAAuE;IACvE,4EAA4E;IAC5E,MAAM,YAAY,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAA;IAClD,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,sBAAsB,CAAC,YAAY,EAAE,eAAe,CAAC,CAAA;IAC9D,CAAC;IAED,MAAM,aAAa,GAAG,2BAA2B,CAAC,IAAI,EAAE,eAAe,CAAC,CAAA;IACxE,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,OAAO,aAAa,CAAA;IACtB,CAAC;IAED,OAAO,+BAA+B,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;AAC7D,CAAC;AAWD;;;;;;;;;;;;;;GAcG;AACH,SAAS,uBAAuB,CAC9B,IAAgB;IAEhB,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,EAAE,CAAA;IACvB,KAAK,CAAC,IAAI,CACR,GAAG,CAAC,OAAO,CAAC;QACV,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;QACvB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;QACrB,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;KACzC,CAAC,CACH,CAAA;IAED,IAAI,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,EAAE,IAAI,CAAiB,CAAA;QAC3D,OAAO,KAAK,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,sBAAsB,CAC7B,OAAoC,EACpC,eAAuC;IAEvC,MAAM,MAAM,GAA4B,EAAE,CAAA;IAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,CAAC;YAAE,SAAQ;QACzE,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;YACpB,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAA;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,2BAA2B,CAClC,IAAgB,EAChB,eAAuC;IAEvC,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;IACxD,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CACzB,GAAG,CAAC,MAAM,CAAC;QACT,GAAG,EAAE,GAAG,CAAC,IAAI;QACb,KAAK,EAAE,GAAG,CAAC,IAAI;KAChB,CAAC,CACH,CAAA;IAED,MAAM,UAAU,GAAG;QACjB,CAAC,SAAS,CAAC;QACX,CAAC,WAAW,CAAC;QACb,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QACvC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACnC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;QACzC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;KACtC,CAAA;IAED,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;YAC3C,MAAM,MAAM,GAAG,6BAA6B,CAAC,OAAO,EAAE,eAAe,CAAC,CAAA;YACtE,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,OAAO,MAAM,CAAA;YACf,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;QAC9E,CAAC;IACH,CAAC;IAED,OAAO,EAAE,CAAA;AACX,CAAC;AAED,SAAS,6BAA6B,CACpC,KAAc,EACd,eAAuC,EACvC,SAAkB;IAElB,MAAM,MAAM,GAA4B,EAAE,CAAA;IAE1C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;QACzC,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,MAAM,CAAA;QACf,CAAC;QACD,IAAI,SAAS,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7C,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAA;QAC3B,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YACvD,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;YAC5C,IACE,UAAU;gBACV,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ;gBAC5B,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAC9B,CAAC;gBACD,MAAM,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;gBAC7B,OAAO,MAAM,CAAA;YACf,CAAC;QACH,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,CAAC,MAAM,CACX,MAAM,EACN,6BAA6B,CAAC,IAAI,EAAE,eAAe,EAAE,SAAS,CAAC,CAChE,CAAA;QACH,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAED,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,KAAgC,CAAA;QAC/C,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvE,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAC9C,IAAI,UAAU,IAAI,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrD,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,KAAK,CAAA;gBACjC,OAAO,MAAM,CAAA;YACf,CAAC;QACH,CAAC;QAED,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,SAAS,CAAA;YACpD,IACE,UAAU;gBACV,OAAO,MAAM,KAAK,QAAQ;gBAC1B,oBAAoB,CAAC,MAAM,CAAC,EAC5B,CAAC;gBACD,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,CAAA;gBAC3B,SAAQ;YACV,CAAC;YACD,MAAM,CAAC,MAAM,CACX,MAAM,EACN,6BAA6B,CAAC,MAAM,EAAE,eAAe,EAAE,UAAU,CAAC,CACnE,CAAA;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,+BAA+B,CACtC,IAAgB,EAChB,aAAuB;IAEvB,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAC3C,MAAM,MAAM,GAA4B,EAAE,CAAA;IAE1C,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;QACxC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,SAAQ;QACV,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;QACpD,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAA;QAC7D,MAAM,KAAK,GAAG,aAAa;aACxB,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CACjB,4BAA4B,CAAC,SAAS,EAAE,aAAa,CAAC,CACvD;aACA,IAAI,CACH,CAAC,SAAS,EAAE,EAAE,CACZ,oBAAoB,CAAC,SAAS,CAAC;YAC/B,SAAS,KAAK,YAAY;YAC1B,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,CACnC,CAAA;QAEH,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,2BAA2B,CAAC,YAAY,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;QAClE,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,4BAA4B,CACnC,KAAa,EACb,aAAuB;IAEvB,IAAI,OAAO,GAAG,KAAK,CAAA;IAEnB,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;QACzC,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;QAClD,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,GAAG,OAAO,CAAC,KAAK,CACrB,CAAC,EACD,0BAA0B,CAAC,OAAO,EAAE,YAAY,CAAC,CAClD,CAAA;QACH,CAAC;IACH,CAAC;IAED,MAAM,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IACrD,IAAI,kBAAkB,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,GAAG,OAAO,CAAC,KAAK,CACrB,CAAC,EACD,0BAA0B,CAAC,OAAO,EAAE,kBAAkB,CAAC,CACxD,CAAA;IACH,CAAC;IAED,OAAO,OAAO,CAAC,IAAI,EAAE,CAAA;AACvB,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAa,EAAE,KAAa;IAC9D,IAAI,YAAY,GAAG,KAAK,CAAA;IACxB,OAAO,YAAY,GAAG,CAAC,IAAI,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,YAAY,IAAI,CAAC,CAAA;IACnB,CAAC;IACD,OAAO,YAAY,CAAA;AACrB,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB;IACpC,OAAO,QAAQ,IAAI,EAAE,IAAI,QAAQ,IAAI,EAAE,CAAA;AACzC,CAAC;AAED,SAAS,2BAA2B,CAAC,GAAW;IAC9C,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,GAAG,CAAA;AACpC,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAChF,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,UAAoC;IAEpC,OAAO;QACL,IAAI,EAAE,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;QACrC,SAAS,EAAE,IAAI,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC;KAChD,CAAA;AACH,CAAC"}

package/dist/auth/index.d.ts

@@ -1,8 +0,0 @@
-export * from "./authentication-manager.js";
-export * from "./identity-attributes-manager.js";
-export * from "./identity-attributes.js";
-export * from "./constants.js";
-export * from "./types.js";
-export * from "../hooks/createAuthHooks.js";
-export * from "./createIdentityAttributeHooks.js";
-//# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,cAAc,6BAA6B,CAAA;AAC3C,cAAc,kCAAkC,CAAA;AAChD,cAAc,0BAA0B,CAAA;AACxC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,YAAY,CAAA;AAC1B,cAAc,6BAA6B,CAAA;AAC3C,cAAc,mCAAmC,CAAA"}

package/dist/auth/index.js

@@ -1,8 +0,0 @@
-export * from "./authentication-manager.js";
-export * from "./identity-attributes-manager.js";
-export * from "./identity-attributes.js";
-export * from "./constants.js";
-export * from "./types.js";
-export * from "../hooks/createAuthHooks.js";
-export * from "./createIdentityAttributeHooks.js";
-//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,cAAc,6BAA6B,CAAA;AAC3C,cAAc,kCAAkC,CAAA;AAChD,cAAc,0BAA0B,CAAA;AACxC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,YAAY,CAAA;AAC1B,cAAc,6BAA6B,CAAA;AAC3C,cAAc,mCAAmC,CAAA"}

package/dist/auth/local-ii-probe.d.ts

@@ -1,57 +0,0 @@
-/**
- * Ask a locally deployed Internet Identity canister what it actually serves.
- *
- * `localInternetIdentityProvider` builds `http://<id>.localhost:<port>/authorize`,
- * the id.ai-era path. Whether that works depends on which Internet Identity
- * build is installed, and the window is narrow:
- *
- * - up to `release-2025-03-07`, the SPA lived at `/` and used a `#authorize`
- *   fragment; `/authorize` is not an asset
- * - `release-2026-01-05` through `release-2026-03-16` serve `/authorize`
- * - from `release-2026-03-23` the frontend left the canister entirely (the id.ai
- *   split), so `/authorize` 404s even on `.raw`
- *
- * Outside that window the login popup renders the gateway's
- * "Response Verification Error" page and the app simply waits until the user
- * closes it. Nothing points at the cause.
- *
- * Asking the canister over the agent avoids the gateway, so the answer is about
- * the canister's assets rather than about how the gateway felt about them.
- */
-import { type HttpAgent } from "@icp-sdk/core/agent";
-import type { AuthClientFlavor } from "./auth-client-compat.js";
-/** Where a given Internet Identity build expects the sign-in flow to start. */
-export type AuthorizePath = "/authorize" | "/#authorize";
-export interface LocalIiProbe {
-    /** The path that works, or `null` when the canister serves no sign-in UI. */
-    path: AuthorizePath | null;
-    /**
-     * The probe could not reach a conclusion — the canister was unreachable, or
-     * it does not expose `http_request` at all. Callers keep their existing
-     * behaviour rather than blocking a login that might well work.
-     */
-    inconclusive: boolean;
-}
-/**
- * Determine which authorize path a locally deployed Internet Identity serves.
- *
- * Never throws. A probe that cannot answer returns `inconclusive`, because a
- * diagnostic that blocks a working setup is worse than the failure it explains.
- */
-export declare function probeLocalInternetIdentity(agent: HttpAgent, canisterId: string): Promise<LocalIiProbe>;
-/**
- * The error a login gets when the installed build serves no sign-in UI, in
- * place of a 503 page inside a popup the app cannot see.
- *
- * The fix depends on the installed `@icp-sdk/auth` major. v8 signs in through
- * the page the canister serves, so an older build that still serves one works.
- * v10 signs in through `ii_session_delegation` and mints with
- * `app_prepare_delegation`, which Internet Identity gained only after its
- * frontend left the canister (#561). No build serves both, so a v10 app needs
- * the frontend from somewhere else, and older builds cannot help it.
- *
- * @param flavor - The installed client's contract. Defaults to `legacy` (v8),
- *   whose advice this error gave before it knew about v10.
- */
-export declare function localInternetIdentityUnavailableError(canisterId: string, flavor?: AuthClientFlavor): Error;
-//# sourceMappingURL=local-ii-probe.d.ts.map

package/dist/auth/local-ii-probe.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"local-ii-probe.d.ts","sourceRoot":"","sources":["../../src/auth/local-ii-probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAS,KAAK,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAE3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAoC/D,+EAA+E;AAC/E,MAAM,MAAM,aAAa,GAAG,YAAY,GAAG,aAAa,CAAA;AAExD,MAAM,WAAW,YAAY;IAC3B,6EAA6E;IAC7E,IAAI,EAAE,aAAa,GAAG,IAAI,CAAA;IAC1B;;;;OAIG;IACH,YAAY,EAAE,OAAO,CAAA;CACtB;AAmBD;;;;;GAKG;AACH,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,SAAS,EAChB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,YAAY,CAAC,CA+BvB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qCAAqC,CACnD,UAAU,EAAE,MAAM,EAClB,MAAM,GAAE,gBAA2B,GAClC,KAAK,CAuBP"}

package/dist/auth/local-ii-probe.js

@@ -1,121 +0,0 @@
-/**
- * Ask a locally deployed Internet Identity canister what it actually serves.
- *
- * `localInternetIdentityProvider` builds `http://<id>.localhost:<port>/authorize`,
- * the id.ai-era path. Whether that works depends on which Internet Identity
- * build is installed, and the window is narrow:
- *
- * - up to `release-2025-03-07`, the SPA lived at `/` and used a `#authorize`
- *   fragment; `/authorize` is not an asset
- * - `release-2026-01-05` through `release-2026-03-16` serve `/authorize`
- * - from `release-2026-03-23` the frontend left the canister entirely (the id.ai
- *   split), so `/authorize` 404s even on `.raw`
- *
- * Outside that window the login popup renders the gateway's
- * "Response Verification Error" page and the app simply waits until the user
- * closes it. Nothing points at the cause.
- *
- * Asking the canister over the agent avoids the gateway, so the answer is about
- * the canister's assets rather than about how the gateway felt about them.
- */
-import { Actor } from "@icp-sdk/core/agent";
-/** The `http_request` query every asset-serving canister exposes. */
-const httpInterface = ({ IDL }) => {
-    const HeaderField = IDL.Tuple(IDL.Text, IDL.Text);
-    return IDL.Service({
-        http_request: IDL.Func([
-            IDL.Record({
-                method: IDL.Text,
-                url: IDL.Text,
-                headers: IDL.Vec(HeaderField),
-                body: IDL.Vec(IDL.Nat8),
-            }),
-        ], [
-            IDL.Record({
-                status_code: IDL.Nat16,
-                headers: IDL.Vec(HeaderField),
-                body: IDL.Vec(IDL.Nat8),
-            }),
-        ], ["query"]),
-    });
-};
-async function statusOf(actor, url) {
-    try {
-        const response = await actor.http_request({
-            method: "GET",
-            url,
-            headers: [],
-            body: new Uint8Array(),
-        });
-        return response.status_code;
-    }
-    catch {
-        return undefined;
-    }
-}
-/**
- * Determine which authorize path a locally deployed Internet Identity serves.
- *
- * Never throws. A probe that cannot answer returns `inconclusive`, because a
- * diagnostic that blocks a working setup is worse than the failure it explains.
- */
-export async function probeLocalInternetIdentity(agent, canisterId) {
-    let actor;
-    try {
-        actor = Actor.createActor(httpInterface, {
-            agent,
-            canisterId,
-        });
-    }
-    catch {
-        return { path: "/authorize", inconclusive: true };
-    }
-    const authorize = await statusOf(actor, "/authorize");
-    // The canister does not answer http_request at all — not an asset canister,
-    // not deployed, or the replica is down. Not our call to make.
-    if (authorize === undefined) {
-        return { path: "/authorize", inconclusive: true };
-    }
-    if (authorize >= 200 && authorize < 300) {
-        return { path: "/authorize", inconclusive: false };
-    }
-    // Pre-2026 builds serve the SPA at the root and drive the flow from a
-    // `#authorize` fragment, which is a path the gateway never sees.
-    const root = await statusOf(actor, "/");
-    if (root !== undefined && root >= 200 && root < 300) {
-        return { path: "/#authorize", inconclusive: false };
-    }
-    return { path: null, inconclusive: false };
-}
-/**
- * The error a login gets when the installed build serves no sign-in UI, in
- * place of a 503 page inside a popup the app cannot see.
- *
- * The fix depends on the installed `@icp-sdk/auth` major. v8 signs in through
- * the page the canister serves, so an older build that still serves one works.
- * v10 signs in through `ii_session_delegation` and mints with
- * `app_prepare_delegation`, which Internet Identity gained only after its
- * frontend left the canister (#561). No build serves both, so a v10 app needs
- * the frontend from somewhere else, and older builds cannot help it.
- *
- * @param flavor - The installed client's contract. Defaults to `legacy` (v8),
- *   whose advice this error gave before it knew about v10.
- */
-export function localInternetIdentityUnavailableError(canisterId, flavor = "legacy") {
-    const problem = `[ic-reactor] The Internet Identity canister ${canisterId} does not serve a sign-in UI: ` +
-        `neither /authorize nor / returned a page. `;
-    if (flavor === "session") {
-        return new Error(problem +
-            `With @icp-sdk/auth v10, local sign-in needs an Internet Identity frontend served ` +
-            `separately, because no Internet Identity canister build both serves /authorize and ` +
-            `supports v10 sessions. Set \`identityProvider\` to that frontend's authorize URL and ` +
-            `\`internetIdentityId\` to the local Internet Identity canister that mints its delegations.`);
-    }
-    return new Error(problem +
-        `Internet Identity builds from ` +
-        `release-2026-03-23 onward moved their frontend out of the canister (the id.ai split) ` +
-        `and cannot be used locally. Install internet_identity_dev.wasm from release-2026-03-16, ` +
-        `the newest build that still self-serves /authorize, or point \`identityProvider\` at a ` +
-        `provider you host yourself.`);
-}
-//# sourceMappingURL=local-ii-probe.js.map

package/dist/auth/local-ii-probe.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"local-ii-probe.js","sourceRoot":"","sources":["../../src/auth/local-ii-probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,KAAK,EAAkB,MAAM,qBAAqB,CAAA;AAI3D,qEAAqE;AACrE,MAAM,aAAa,GAAyB,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE;IACtD,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAA;IACjD,OAAO,GAAG,CAAC,OAAO,CAAC;QACjB,YAAY,EAAE,GAAG,CAAC,IAAI,CACpB;YACE,GAAG,CAAC,MAAM,CAAC;gBACT,MAAM,EAAE,GAAG,CAAC,IAAI;gBAChB,GAAG,EAAE,GAAG,CAAC,IAAI;gBACb,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC;gBAC7B,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;aACxB,CAAC;SACH,EACD;YACE,GAAG,CAAC,MAAM,CAAC;gBACT,WAAW,EAAE,GAAG,CAAC,KAAK;gBACtB,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC;gBAC7B,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;aACxB,CAAC;SACH,EACD,CAAC,OAAO,CAAC,CACV;KACF,CAAC,CAAA;AACJ,CAAC,CAAA;AAyBD,KAAK,UAAU,QAAQ,CACrB,KAAuB,EACvB,GAAW;IAEX,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC;YACxC,MAAM,EAAE,KAAK;YACb,GAAG;YACH,OAAO,EAAE,EAAE;YACX,IAAI,EAAE,IAAI,UAAU,EAAE;SACvB,CAAC,CAAA;QACF,OAAO,QAAQ,CAAC,WAAW,CAAA;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,KAAgB,EAChB,UAAkB;IAElB,IAAI,KAAuB,CAAA;IAC3B,IAAI,CAAC;QACH,KAAK,GAAG,KAAK,CAAC,WAAW,CAAmB,aAAa,EAAE;YACzD,KAAK;YACL,UAAU;SACX,CAAC,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,IAAI,EAAE,CAAA;IACnD,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC,CAAA;IAErD,4EAA4E;IAC5E,8DAA8D;IAC9D,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,IAAI,EAAE,CAAA;IACnD,CAAC;IAED,IAAI,SAAS,IAAI,GAAG,IAAI,SAAS,GAAG,GAAG,EAAE,CAAC;QACxC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,KAAK,EAAE,CAAA;IACpD,CAAC;IAED,sEAAsE;IACtE,iEAAiE;IACjE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IACvC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,IAAI,GAAG,IAAI,IAAI,GAAG,GAAG,EAAE,CAAC;QACpD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE,KAAK,EAAE,CAAA;IACrD,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAA;AAC5C,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,qCAAqC,CACnD,UAAkB,EAClB,SAA2B,QAAQ;IAEnC,MAAM,OAAO,GACX,+CAA+C,UAAU,gCAAgC;QACzF,4CAA4C,CAAA;IAE9C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,IAAI,KAAK,CACd,OAAO;YACL,mFAAmF;YACnF,qFAAqF;YACrF,uFAAuF;YACvF,4FAA4F,CAC/F,CAAA;IACH,CAAC;IAED,OAAO,IAAI,KAAK,CACd,OAAO;QACL,gCAAgC;QAChC,uFAAuF;QACvF,0FAA0F;QAC1F,yFAAyF;QACzF,6BAA6B,CAChC,CAAA;AACH,CAAC"}