@ic-reactor/react 3.6.0 → 3.8.0

package/dist/auth/createIdentityAttributeHooks.js

@@ -0,0 +1,54 @@
+import { useCallback, useState } from "react";
+export function createIdentityAttributeHooks(identityAttributes) {
+    const useIdentityAttributes = () => {
+        const [attributes, setAttributes] = useState(null);
+        const [isRequestingAttributes, setIsRequestingAttributes] = useState(false);
+        const [attributeError, setAttributeError] = useState(null);
+        const requestAttributes = useCallback(async (params) => {
+            setIsRequestingAttributes(true);
+            setAttributeError(null);
+            try {
+                const result = await identityAttributes.request(params);
+                setAttributes(result);
+                return result;
+            }
+            catch (error) {
+                setAttributeError(error);
+                throw error;
+            }
+            finally {
+                setIsRequestingAttributes(false);
+            }
+        }, []);
+        const requestOpenIdAttributes = useCallback(async (params) => {
+            setIsRequestingAttributes(true);
+            setAttributeError(null);
+            try {
+                const result = await identityAttributes.requestOpenId(params);
+                setAttributes(result);
+                return result;
+            }
+            catch (error) {
+                setAttributeError(error);
+                throw error;
+            }
+            finally {
+                setIsRequestingAttributes(false);
+            }
+        }, []);
+        const clearAttributes = useCallback(() => {
+            setAttributes(null);
+            setAttributeError(null);
+        }, []);
+        return {
+            requestAttributes,
+            requestOpenIdAttributes,
+            attributes,
+            isRequestingAttributes,
+            attributeError,
+            clearAttributes,
+        };
+    };
+    return { useIdentityAttributes };
+}
+//# sourceMappingURL=createIdentityAttributeHooks.js.map

package/dist/auth/createIdentityAttributeHooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createIdentityAttributeHooks.js","sourceRoot":"","sources":["../../src/auth/createIdentityAttributeHooks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAqB7C,MAAM,UAAU,4BAA4B,CAC1C,kBAA6C;IAE7C,MAAM,qBAAqB,GAAG,GAAgC,EAAE;QAC9D,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAC/B,QAAQ,CAAiC,IAAI,CAAC,CAAA;QAChD,MAAM,CAAC,sBAAsB,EAAE,yBAAyB,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;QAC3E,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAe,IAAI,CAAC,CAAA;QAExE,MAAM,iBAAiB,GAAG,WAAW,CACnC,KAAK,EAAE,MAA2C,EAAE,EAAE;YACpD,yBAAyB,CAAC,IAAI,CAAC,CAAA;YAC/B,iBAAiB,CAAC,IAAI,CAAC,CAAA;YACvB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;gBACvD,aAAa,CAAC,MAAM,CAAC,CAAA;gBACrB,OAAO,MAAM,CAAA;YACf,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,iBAAiB,CAAC,KAAc,CAAC,CAAA;gBACjC,MAAM,KAAK,CAAA;YACb,CAAC;oBAAS,CAAC;gBACT,yBAAyB,CAAC,KAAK,CAAC,CAAA;YAClC,CAAC;QACH,CAAC,EACD,EAAE,CACH,CAAA;QAED,MAAM,uBAAuB,GAAG,WAAW,CACzC,KAAK,EAAE,MAAiD,EAAE,EAAE;YAC1D,yBAAyB,CAAC,IAAI,CAAC,CAAA;YAC/B,iBAAiB,CAAC,IAAI,CAAC,CAAA;YACvB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;gBAC7D,aAAa,CAAC,MAAM,CAAC,CAAA;gBACrB,OAAO,MAAM,CAAA;YACf,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,iBAAiB,CAAC,KAAc,CAAC,CAAA;gBACjC,MAAM,KAAK,CAAA;YACb,CAAC;oBAAS,CAAC;gBACT,yBAAyB,CAAC,KAAK,CAAC,CAAA;YAClC,CAAC;QACH,CAAC,EACD,EAAE,CACH,CAAA;QAED,MAAM,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE;YACvC,aAAa,CAAC,IAAI,CAAC,CAAA;YACnB,iBAAiB,CAAC,IAAI,CAAC,CAAA;QACzB,CAAC,EAAE,EAAE,CAAC,CAAA;QAEN,OAAO;YACL,iBAAiB;YACjB,uBAAuB;YACvB,UAAU;YACV,sBAAsB;YACtB,cAAc;YACd,eAAe;SAChB,CAAA;IACH,CAAC,CAAA;IAED,OAAO,EAAE,qBAAqB,EAAE,CAAA;AAClC,CAAC"}

package/dist/auth/identity-attributes-manager.d.ts

@@ -0,0 +1,26 @@
+import type { IdentityAttributeResult, RequestIdentityAttributesParameters, RequestOpenIdIdentityAttributesParameters } from "./types.js";
+import { AuthenticationManager } from "./authentication-manager.js";
+/**
+ * Requests and decodes signed identity attributes for an authenticated
+ * Internet Identity session.
+ *
+ * Await `authentication.prepareClient()` once during startup (the `useAuth`
+ * hook already does) so that {@link request} can open the identity provider
+ * window synchronously from a click handler.
+ *
+ * @example
+ * ```ts
+ * const attributes = new IdentityAttributesManager(authentication)
+ * const result = await attributes.request({
+ *   keys: ["name"],
+ *   nonce: () => fetchNonceFromCanister(),
+ * })
+ * ```
+ */
+export declare class IdentityAttributesManager {
+    readonly authentication: AuthenticationManager;
+    constructor(authentication: AuthenticationManager);
+    request: ({ keys, nonce, signIn, maxTimeToLive, targets, ...clientOptions }: RequestIdentityAttributesParameters) => Promise<IdentityAttributeResult>;
+    requestOpenId: ({ keys, openIdProvider, ...rest }: RequestOpenIdIdentityAttributesParameters) => Promise<IdentityAttributeResult>;
+}
+//# sourceMappingURL=identity-attributes-manager.d.ts.map

package/dist/auth/identity-attributes-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-attributes-manager.d.ts","sourceRoot":"","sources":["../../src/auth/identity-attributes-manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAGV,uBAAuB,EACvB,mCAAmC,EACnC,yCAAyC,EAC1C,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AAOnE;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,yBAAyB;aACR,cAAc,EAAE,qBAAqB;gBAArC,cAAc,EAAE,qBAAqB;IAE1D,OAAO,GAAU,mEAOrB,mCAAmC,KAAG,OAAO,CAAC,uBAAuB,CAAC,CAyDxE;IAEM,aAAa,GAAI,mCAIrB,yCAAyC,KAAG,OAAO,CAAC,uBAAuB,CAAC,CAO9E;CACF"}

package/dist/auth/identity-attributes-manager.js

@@ -0,0 +1,108 @@
+import { decodeIdentityAttributeValues, identityAttributeKeys, normalizeSignedIdentityAttributes, } from "./identity-attributes.js";
+/**
+ * Requests and decodes signed identity attributes for an authenticated
+ * Internet Identity session.
+ *
+ * Await `authentication.prepareClient()` once during startup (the `useAuth`
+ * hook already does) so that {@link request} can open the identity provider
+ * window synchronously from a click handler.
+ *
+ * @example
+ * ```ts
+ * const attributes = new IdentityAttributesManager(authentication)
+ * const result = await attributes.request({
+ *   keys: ["name"],
+ *   nonce: () => fetchNonceFromCanister(),
+ * })
+ * ```
+ */
+export class IdentityAttributesManager {
+    constructor(authentication) {
+        Object.defineProperty(this, "authentication", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: authentication
+        });
+        Object.defineProperty(this, "request", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: async ({ keys, nonce, signIn = true, maxTimeToLive, targets, ...clientOptions }) => {
+                // Nothing may be awaited before `requestAttributes` / `signIn` are invoked:
+                // the ICRC-29 transport only opens the identity provider window while the
+                // browser still considers us inside the user gesture. `getPreparedClient`
+                // is synchronous whenever `prepareClient()` has run.
+                const preparedClient = this.authentication.getPreparedClient(clientOptions);
+                const authClient = preparedClient ?? (await this.authentication.ensureClient(clientOptions));
+                if (!authClient) {
+                    throw new Error("Authentication module is missing or failed to initialize. To request identity attributes, please install @icp-sdk/auth v7 or later, or provide a compatible authClient.");
+                }
+                this.authentication.setAuthenticating();
+                try {
+                    // `signIn` first: it opens the transport channel synchronously, and the
+                    // attribute request then reuses that same channel and window.
+                    const identityPromise = signIn
+                        ? this.authentication.signInOrRecoverIdentity({
+                            maxTimeToLive,
+                            targets,
+                        })
+                        : Promise.resolve(authClient.getIdentity());
+                    const requestPromise = authClient.requestAttributes({
+                        keys,
+                        nonce: toAuthClientNonce(authClient, nonce),
+                    });
+                    const [signedAttributes, identity] = await Promise.all([
+                        requestPromise,
+                        identityPromise,
+                    ]);
+                    const finalIdentity = identity ?? (await authClient.getIdentity());
+                    const isAuthenticated = await authClient.isAuthenticated();
+                    await this.authentication.commitIdentity(finalIdentity, isAuthenticated);
+                    const normalizedSignedAttributes = normalizeSignedIdentityAttributes(signedAttributes);
+                    return {
+                        principal: finalIdentity.getPrincipal().toText(),
+                        requestedKeys: keys,
+                        signedAttributes: normalizedSignedAttributes,
+                        decodedAttributes: decodeIdentityAttributeValues(normalizedSignedAttributes.data, keys),
+                        completedAt: new Date().toISOString(),
+                    };
+                }
+                catch (error) {
+                    this.authentication.setAuthenticationError(error);
+                    throw error;
+                }
+            }
+        });
+        Object.defineProperty(this, "requestOpenId", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: ({ keys, openIdProvider, ...rest }) => {
+                // Called (not awaited) synchronously so the user gesture is preserved.
+                return this.request({
+                    ...rest,
+                    openIdProvider,
+                    keys: identityAttributeKeys({ openIdProvider, keys }),
+                });
+            }
+        });
+    }
+}
+/**
+ * Bridges the two `@icp-sdk/auth` nonce contracts.
+ *
+ * v8 takes `() => Promise<Uint8Array>` (it journals the value so a redirect
+ * flow replays the same bytes); v7 takes `Uint8Array | Promise<Uint8Array>`.
+ * Both open the transport channel synchronously for the deferred forms, so we
+ * always hand over the deferred shape the installed client understands.
+ * `memoize` only exists from v8 onwards, which makes it a reliable marker.
+ */
+function toAuthClientNonce(authClient, nonce) {
+    const supportsNonceThunk = typeof authClient.memoize === "function";
+    if (supportsNonceThunk) {
+        return () => Promise.resolve(typeof nonce === "function" ? nonce() : nonce);
+    }
+    return Promise.resolve(typeof nonce === "function" ? nonce() : nonce);
+}
+//# sourceMappingURL=identity-attributes-manager.js.map

package/dist/auth/identity-attributes-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-attributes-manager.js","sourceRoot":"","sources":["../../src/auth/identity-attributes-manager.ts"],"names":[],"mappings":"AASA,OAAO,EACL,6BAA6B,EAC7B,qBAAqB,EACrB,iCAAiC,GAClC,MAAM,0BAA0B,CAAA;AAEjC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,yBAAyB;IACpC,YAA4B,cAAqC;QAArD;;;;mBAAgB,cAAc;WAAuB;QAE1D;;;;mBAAU,KAAK,EAAE,EACtB,IAAI,EACJ,KAAK,EACL,MAAM,GAAG,IAAI,EACb,aAAa,EACb,OAAO,EACP,GAAG,aAAa,EACoB,EAAoC,EAAE;gBAC1E,4EAA4E;gBAC5E,0EAA0E;gBAC1E,0EAA0E;gBAC1E,qDAAqD;gBACrD,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAA;gBAC3E,MAAM,UAAU,GACd,cAAc,IAAI,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAA;gBAE3E,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,MAAM,IAAI,KAAK,CACb,yKAAyK,CAC1K,CAAA;gBACH,CAAC;gBAED,IAAI,CAAC,cAAc,CAAC,iBAAiB,EAAE,CAAA;gBAEvC,IAAI,CAAC;oBACH,wEAAwE;oBACxE,8DAA8D;oBAC9D,MAAM,eAAe,GAAG,MAAM;wBAC5B,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,uBAAuB,CAAC;4BAC1C,aAAa;4BACb,OAAO;yBACR,CAAC;wBACJ,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;oBAC7C,MAAM,cAAc,GAAG,UAAU,CAAC,iBAAiB,CAAC;wBAClD,IAAI;wBACJ,KAAK,EAAE,iBAAiB,CAAC,UAAU,EAAE,KAAK,CAAC;qBAC5C,CAAC,CAAA;oBAEF,MAAM,CAAC,gBAAgB,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;wBACrD,cAAc;wBACd,eAAe;qBAChB,CAAC,CAAA;oBAEF,MAAM,aAAa,GAAG,QAAQ,IAAI,CAAC,MAAM,UAAU,CAAC,WAAW,EAAE,CAAC,CAAA;oBAClE,MAAM,eAAe,GAAG,MAAM,UAAU,CAAC,eAAe,EAAE,CAAA;oBAC1D,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,aAAa,EAAE,eAAe,CAAC,CAAA;oBAExE,MAAM,0BAA0B,GAC9B,iCAAiC,CAAC,gBAAgB,CAAC,CAAA;oBAErD,OAAO;wBACL,SAAS,EAAE,aAAa,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE;wBAChD,aAAa,EAAE,IAAI;wBACnB,gBAAgB,EAAE,0BAA0B;wBAC5C,iBAAiB,EAAE,6BAA6B,CAC9C,0BAA0B,CAAC,IAAI,EAC/B,IAAI,CACL;wBACD,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;qBACtC,CAAA;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,cAAc,CAAC,sBAAsB,CAAC,KAAc,CAAC,CAAA;oBAC1D,MAAM,KAAK,CAAA;gBACb,CAAC;YACH,CAAC;WAAA;QAEM;;;;mBAAgB,CAAC,EACtB,IAAI,EACJ,cAAc,EACd,GAAG,IAAI,EACmC,EAAoC,EAAE;gBAChF,uEAAuE;gBACvE,OAAO,IAAI,CAAC,OAAO,CAAC;oBAClB,GAAG,IAAI;oBACP,cAAc;oBACd,IAAI,EAAE,qBAAqB,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;iBACtD,CAAC,CAAA;YACJ,CAAC;WAAA;IA/EmE,CAAC;CAgFtE;AAED;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CACxB,UAA0B,EAC1B,KAA6B;IAE7B,MAAM,kBAAkB,GAAG,OAAO,UAAU,CAAC,OAAO,KAAK,UAAU,CAAA;IAEnE,IAAI,kBAAkB,EAAE,CAAC;QACvB,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IAC7E,CAAC;IAED,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;AACvE,CAAC"}

package/dist/auth/identity-attributes.d.ts

@@ -0,0 +1,19 @@
+import type { IdentityAttributeOpenIdProvider, IdentityAttributeValues, SignedIdentityAttributes } from "./types.js";
+export declare const IDENTITY_ATTRIBUTES_PROVIDER = "https://id.ai/authorize";
+/**
+ * @deprecated Use the default ClientManager identity provider or
+ * `IDENTITY_ATTRIBUTES_PROVIDER` instead.
+ */
+export declare const IDENTITY_ATTRIBUTES_BETA_PROVIDER = "https://id.ai/authorize";
+export declare function identityAttributeKeys({ openIdProvider, keys, }: {
+    openIdProvider: IdentityAttributeOpenIdProvider;
+    keys: string[];
+}): string[];
+export declare function normalizeOpenIdProvider(openIdProvider: IdentityAttributeOpenIdProvider): string;
+export declare function resolveIdentityAttributeKeys({ openIdProvider, keys, }: {
+    openIdProvider: IdentityAttributeOpenIdProvider;
+    keys: string[];
+}): Promise<string[]>;
+export declare function decodeIdentityAttributeValues(data: Uint8Array, requestedKeys: string[]): IdentityAttributeValues;
+export declare function normalizeSignedIdentityAttributes(attributes: SignedIdentityAttributes): SignedIdentityAttributes;
+//# sourceMappingURL=identity-attributes.d.ts.map

package/dist/auth/identity-attributes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-attributes.d.ts","sourceRoot":"","sources":["../../src/auth/identity-attributes.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,+BAA+B,EAC/B,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,YAAY,CAAA;AAGnB,eAAO,MAAM,4BAA4B,4BAAgC,CAAA;AAEzE;;;GAGG;AACH,eAAO,MAAM,iCAAiC,4BAA+B,CAAA;AAQ7E,wBAAgB,qBAAqB,CAAC,EACpC,cAAc,EACd,IAAI,GACL,EAAE;IACD,cAAc,EAAE,+BAA+B,CAAA;IAC/C,IAAI,EAAE,MAAM,EAAE,CAAA;CACf,GAAG,MAAM,EAAE,CAGX;AAED,wBAAgB,uBAAuB,CACrC,cAAc,EAAE,+BAA+B,GAC9C,MAAM,CAMR;AAED,wBAAsB,4BAA4B,CAAC,EACjD,cAAc,EACd,IAAI,GACL,EAAE;IACD,cAAc,EAAE,+BAA+B,CAAA;IAC/C,IAAI,EAAE,MAAM,EAAE,CAAA;CACf,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAEpB;AAED,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,UAAU,EAChB,aAAa,EAAE,MAAM,EAAE,GACtB,uBAAuB,CAgBzB;AA6LD,wBAAgB,iCAAiC,CAC/C,UAAU,EAAE,wBAAwB,GACnC,wBAAwB,CAK1B"}

package/dist/auth/identity-attributes.js

@@ -0,0 +1,170 @@
+import { IDL } from "@icp-sdk/core/candid";
+import { IC_INTERNET_IDENTITY_PROVIDER } from "./constants.js";
+export const IDENTITY_ATTRIBUTES_PROVIDER = IC_INTERNET_IDENTITY_PROVIDER;
+/**
+ * @deprecated Use the default ClientManager identity provider or
+ * `IDENTITY_ATTRIBUTES_PROVIDER` instead.
+ */
+export const IDENTITY_ATTRIBUTES_BETA_PROVIDER = IDENTITY_ATTRIBUTES_PROVIDER;
+const OPEN_ID_PROVIDER_URLS = {
+    apple: "https://appleid.apple.com",
+    google: "https://accounts.google.com",
+    microsoft: "https://login.microsoftonline.com/{tid}/v2.0",
+};
+export function identityAttributeKeys({ openIdProvider, keys, }) {
+    const provider = normalizeOpenIdProvider(openIdProvider);
+    return keys.map((key) => `openid:${provider}:${key}`);
+}
+export function normalizeOpenIdProvider(openIdProvider) {
+    return (OPEN_ID_PROVIDER_URLS[openIdProvider] ?? openIdProvider);
+}
+export async function resolveIdentityAttributeKeys({ openIdProvider, keys, }) {
+    return identityAttributeKeys({ openIdProvider, keys });
+}
+export function decodeIdentityAttributeValues(data, requestedKeys) {
+    const requestedKeyMap = requestedKeys.reduce((acc, key) => {
+        acc[key] = identityAttributeDisplayKey(key);
+        acc[identityAttributeDisplayKey(key)] = identityAttributeDisplayKey(key);
+        return acc;
+    }, {});
+    const decodedValues = decodeCandidAttributeValues(data, requestedKeyMap);
+    if (Object.keys(decodedValues).length > 0) {
+        return decodedValues;
+    }
+    return extractPrintableAttributeValues(data, requestedKeys);
+}
+function decodeCandidAttributeValues(data, requestedKeyMap) {
+    const textPairs = IDL.Vec(IDL.Tuple(IDL.Text, IDL.Text));
+    const recordPairs = IDL.Vec(IDL.Record({
+        key: IDL.Text,
+        value: IDL.Text,
+    }));
+    const candidates = [
+        [textPairs],
+        [recordPairs],
+        [IDL.Record({ attributes: textPairs })],
+        [IDL.Record({ values: textPairs })],
+        [IDL.Record({ attributes: recordPairs })],
+        [IDL.Record({ values: recordPairs })],
+    ];
+    for (const candidate of candidates) {
+        try {
+            const decoded = IDL.decode(candidate, data);
+            const values = collectDecodedAttributeValues(decoded, requestedKeyMap);
+            if (Object.keys(values).length > 0) {
+                return values;
+            }
+        }
+        catch {
+            // Try the next known beta payload shape, then fall back to text extraction.
+        }
+    }
+    return {};
+}
+function collectDecodedAttributeValues(value, requestedKeyMap, activeKey) {
+    const values = {};
+    if (typeof value === "string") {
+        const displayKey = requestedKeyMap[value];
+        if (displayKey) {
+            return values;
+        }
+        if (activeKey && isPrintableTextValue(value)) {
+            values[activeKey] = value;
+        }
+        return values;
+    }
+    if (Array.isArray(value)) {
+        if (value.length === 2 && typeof value[0] === "string") {
+            const displayKey = requestedKeyMap[value[0]];
+            if (displayKey &&
+                typeof value[1] === "string" &&
+                isPrintableTextValue(value[1])) {
+                values[displayKey] = value[1];
+                return values;
+            }
+        }
+        for (const item of value) {
+            Object.assign(values, collectDecodedAttributeValues(item, requestedKeyMap, activeKey));
+        }
+        return values;
+    }
+    if (value && typeof value === "object") {
+        const record = value;
+        if (typeof record.key === "string" && typeof record.value === "string") {
+            const displayKey = requestedKeyMap[record.key];
+            if (displayKey && isPrintableTextValue(record.value)) {
+                values[displayKey] = record.value;
+                return values;
+            }
+        }
+        for (const [key, nested] of Object.entries(record)) {
+            const displayKey = requestedKeyMap[key] ?? activeKey;
+            if (displayKey &&
+                typeof nested === "string" &&
+                isPrintableTextValue(nested)) {
+                values[displayKey] = nested;
+                continue;
+            }
+            Object.assign(values, collectDecodedAttributeValues(nested, requestedKeyMap, displayKey));
+        }
+    }
+    return values;
+}
+function extractPrintableAttributeValues(data, requestedKeys) {
+    const text = new TextDecoder().decode(data);
+    const values = {};
+    for (const requestedKey of requestedKeys) {
+        const start = text.indexOf(requestedKey);
+        if (start === -1) {
+            continue;
+        }
+        const tail = text.slice(start + requestedKey.length);
+        const printableRuns = tail.match(/[\x20-\x7E]{2,512}/g) ?? [];
+        const value = printableRuns
+            .map((candidate) => cleanPrintableAttributeValue(candidate, requestedKeys))
+            .find((candidate) => isPrintableTextValue(candidate) &&
+            candidate !== requestedKey &&
+            !candidate.startsWith("openid:"));
+        if (value) {
+            values[identityAttributeDisplayKey(requestedKey)] = value.trim();
+        }
+    }
+    return values;
+}
+function cleanPrintableAttributeValue(value, requestedKeys) {
+    let cleaned = value;
+    for (const requestedKey of requestedKeys) {
+        const nextKeyIndex = cleaned.indexOf(requestedKey);
+        if (nextKeyIndex > 0) {
+            cleaned = cleaned.slice(0, trimCandidTextLengthPrefix(cleaned, nextKeyIndex));
+        }
+    }
+    const nextOpenIdKeyIndex = cleaned.indexOf("openid:");
+    if (nextOpenIdKeyIndex > 0) {
+        cleaned = cleaned.slice(0, trimCandidTextLengthPrefix(cleaned, nextOpenIdKeyIndex));
+    }
+    return cleaned.trim();
+}
+function trimCandidTextLengthPrefix(value, index) {
+    let trimmedIndex = index;
+    while (trimmedIndex > 0 && isAsciiDigit(value.charCodeAt(trimmedIndex - 1))) {
+        trimmedIndex -= 1;
+    }
+    return trimmedIndex;
+}
+function isAsciiDigit(charCode) {
+    return charCode >= 48 && charCode <= 57;
+}
+function identityAttributeDisplayKey(key) {
+    return key.split(":").pop() || key;
+}
+function isPrintableTextValue(value) {
+    return value.length > 0 && value.length <= 512 && /^[\x20-\x7E]+$/.test(value);
+}
+export function normalizeSignedIdentityAttributes(attributes) {
+    return {
+        data: new Uint8Array(attributes.data),
+        signature: new Uint8Array(attributes.signature),
+    };
+}
+//# sourceMappingURL=identity-attributes.js.map

package/dist/auth/identity-attributes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-attributes.js","sourceRoot":"","sources":["../../src/auth/identity-attributes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAA;AAO1C,OAAO,EAAE,6BAA6B,EAAE,MAAM,gBAAgB,CAAA;AAE9D,MAAM,CAAC,MAAM,4BAA4B,GAAG,6BAA6B,CAAA;AAEzE;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,4BAA4B,CAAA;AAE7E,MAAM,qBAAqB,GAAG;IAC5B,KAAK,EAAE,2BAA2B;IAClC,MAAM,EAAE,6BAA6B;IACrC,SAAS,EAAE,8CAA8C;CACjD,CAAA;AAEV,MAAM,UAAU,qBAAqB,CAAC,EACpC,cAAc,EACd,IAAI,GAIL;IACC,MAAM,QAAQ,GAAG,uBAAuB,CAAC,cAAc,CAAC,CAAA;IACxD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,QAAQ,IAAI,GAAG,EAAE,CAAC,CAAA;AACvD,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,cAA+C;IAE/C,OAAO,CACL,qBAAqB,CACnB,cAAoD,CACrD,IAAI,cAAc,CACpB,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,EACjD,cAAc,EACd,IAAI,GAIL;IACC,OAAO,qBAAqB,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAA;AACxD,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,IAAgB,EAChB,aAAuB;IAEvB,MAAM,eAAe,GAAG,aAAa,CAAC,MAAM,CAC1C,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACX,GAAG,CAAC,GAAG,CAAC,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAA;QAC3C,GAAG,CAAC,2BAA2B,CAAC,GAAG,CAAC,CAAC,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAA;QACxE,OAAO,GAAG,CAAA;IACZ,CAAC,EACD,EAAE,CACH,CAAA;IAED,MAAM,aAAa,GAAG,2BAA2B,CAAC,IAAI,EAAE,eAAe,CAAC,CAAA;IACxE,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,OAAO,aAAa,CAAA;IACtB,CAAC;IAED,OAAO,+BAA+B,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;AAC7D,CAAC;AAED,SAAS,2BAA2B,CAClC,IAAgB,EAChB,eAAuC;IAEvC,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;IACxD,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CACzB,GAAG,CAAC,MAAM,CAAC;QACT,GAAG,EAAE,GAAG,CAAC,IAAI;QACb,KAAK,EAAE,GAAG,CAAC,IAAI;KAChB,CAAC,CACH,CAAA;IAED,MAAM,UAAU,GAAG;QACjB,CAAC,SAAS,CAAC;QACX,CAAC,WAAW,CAAC;QACb,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QACvC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACnC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;QACzC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;KACtC,CAAA;IAED,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;YAC3C,MAAM,MAAM,GAAG,6BAA6B,CAAC,OAAO,EAAE,eAAe,CAAC,CAAA;YACtE,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,OAAO,MAAM,CAAA;YACf,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;QAC9E,CAAC;IACH,CAAC;IAED,OAAO,EAAE,CAAA;AACX,CAAC;AAED,SAAS,6BAA6B,CACpC,KAAc,EACd,eAAuC,EACvC,SAAkB;IAElB,MAAM,MAAM,GAA4B,EAAE,CAAA;IAE1C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;QACzC,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,MAAM,CAAA;QACf,CAAC;QACD,IAAI,SAAS,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7C,MAAM,CAAC,SAAS,CAAC,GAAG,KAAK,CAAA;QAC3B,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YACvD,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;YAC5C,IACE,UAAU;gBACV,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ;gBAC5B,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAC9B,CAAC;gBACD,MAAM,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;gBAC7B,OAAO,MAAM,CAAA;YACf,CAAC;QACH,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,CAAC,MAAM,CACX,MAAM,EACN,6BAA6B,CAAC,IAAI,EAAE,eAAe,EAAE,SAAS,CAAC,CAChE,CAAA;QACH,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAED,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,KAAgC,CAAA;QAC/C,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvE,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAC9C,IAAI,UAAU,IAAI,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrD,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,KAAK,CAAA;gBACjC,OAAO,MAAM,CAAA;YACf,CAAC;QACH,CAAC;QAED,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,SAAS,CAAA;YACpD,IACE,UAAU;gBACV,OAAO,MAAM,KAAK,QAAQ;gBAC1B,oBAAoB,CAAC,MAAM,CAAC,EAC5B,CAAC;gBACD,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,CAAA;gBAC3B,SAAQ;YACV,CAAC;YACD,MAAM,CAAC,MAAM,CACX,MAAM,EACN,6BAA6B,CAAC,MAAM,EAAE,eAAe,EAAE,UAAU,CAAC,CACnE,CAAA;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,+BAA+B,CACtC,IAAgB,EAChB,aAAuB;IAEvB,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAC3C,MAAM,MAAM,GAA4B,EAAE,CAAA;IAE1C,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;QACxC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,SAAQ;QACV,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;QACpD,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAA;QAC7D,MAAM,KAAK,GAAG,aAAa;aACxB,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CACjB,4BAA4B,CAAC,SAAS,EAAE,aAAa,CAAC,CACvD;aACA,IAAI,CACH,CAAC,SAAS,EAAE,EAAE,CACZ,oBAAoB,CAAC,SAAS,CAAC;YAC/B,SAAS,KAAK,YAAY;YAC1B,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,CACnC,CAAA;QAEH,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,2BAA2B,CAAC,YAAY,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;QAClE,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,4BAA4B,CACnC,KAAa,EACb,aAAuB;IAEvB,IAAI,OAAO,GAAG,KAAK,CAAA;IAEnB,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;QACzC,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;QAClD,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,GAAG,OAAO,CAAC,KAAK,CACrB,CAAC,EACD,0BAA0B,CAAC,OAAO,EAAE,YAAY,CAAC,CAClD,CAAA;QACH,CAAC;IACH,CAAC;IAED,MAAM,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IACrD,IAAI,kBAAkB,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,GAAG,OAAO,CAAC,KAAK,CACrB,CAAC,EACD,0BAA0B,CAAC,OAAO,EAAE,kBAAkB,CAAC,CACxD,CAAA;IACH,CAAC;IAED,OAAO,OAAO,CAAC,IAAI,EAAE,CAAA;AACvB,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAa,EAAE,KAAa;IAC9D,IAAI,YAAY,GAAG,KAAK,CAAA;IACxB,OAAO,YAAY,GAAG,CAAC,IAAI,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,YAAY,IAAI,CAAC,CAAA;IACnB,CAAC;IACD,OAAO,YAAY,CAAA;AACrB,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB;IACpC,OAAO,QAAQ,IAAI,EAAE,IAAI,QAAQ,IAAI,EAAE,CAAA;AACzC,CAAC;AAED,SAAS,2BAA2B,CAAC,GAAW;IAC9C,OAAO,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,GAAG,CAAA;AACpC,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAChF,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,UAAoC;IAEpC,OAAO;QACL,IAAI,EAAE,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;QACrC,SAAS,EAAE,IAAI,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC;KAChD,CAAA;AACH,CAAC"}

package/dist/auth/index.d.ts

@@ -0,0 +1,8 @@
+export * from "./authentication-manager.js";
+export * from "./identity-attributes-manager.js";
+export * from "./identity-attributes.js";
+export * from "./constants.js";
+export * from "./types.js";
+export * from "../hooks/createAuthHooks.js";
+export * from "./createIdentityAttributeHooks.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,cAAc,6BAA6B,CAAA;AAC3C,cAAc,kCAAkC,CAAA;AAChD,cAAc,0BAA0B,CAAA;AACxC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,YAAY,CAAA;AAC1B,cAAc,6BAA6B,CAAA;AAC3C,cAAc,mCAAmC,CAAA"}

package/dist/auth/index.js

@@ -0,0 +1,8 @@
+export * from "./authentication-manager.js";
+export * from "./identity-attributes-manager.js";
+export * from "./identity-attributes.js";
+export * from "./constants.js";
+export * from "./types.js";
+export * from "../hooks/createAuthHooks.js";
+export * from "./createIdentityAttributeHooks.js";
+//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,cAAc,6BAA6B,CAAA;AAC3C,cAAc,kCAAkC,CAAA;AAChD,cAAc,0BAA0B,CAAA;AACxC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,YAAY,CAAA;AAC1B,cAAc,6BAA6B,CAAA;AAC3C,cAAc,mCAAmC,CAAA"}

package/dist/auth/types.d.ts

@@ -0,0 +1,182 @@
+import type { Identity, SignIdentity } from "@icp-sdk/core/agent";
+import type { PartialIdentity } from "@icp-sdk/core/identity";
+import type { Principal } from "@icp-sdk/core/principal";
+export interface SignedIdentityAttributes {
+    data: Uint8Array;
+    signature: Uint8Array;
+}
+/**
+ * The 32-byte nonce issued by the relying-party canister.
+ *
+ * A function (or promise) lets the Internet Identity window open while the
+ * nonce is still being fetched, so the popup is opened inside the user gesture
+ * instead of after it. `@icp-sdk/auth` v8 requires the function form; v7
+ * accepts the promise form. IC Reactor normalizes whichever you pass to the
+ * shape the installed client expects.
+ */
+export type IdentityAttributeNonce = Uint8Array | Promise<Uint8Array> | (() => Uint8Array | Promise<Uint8Array>);
+export interface IdentityAttributeRequest {
+    keys: string[];
+    nonce: IdentityAttributeNonce;
+}
+export interface IdentityAttributeValues {
+    email?: string;
+    name?: string;
+    verified_email?: string;
+    [key: string]: string | undefined;
+}
+export interface IdentityAttributeResult {
+    principal: string;
+    requestedKeys: string[];
+    signedAttributes: SignedIdentityAttributes;
+    decodedAttributes: IdentityAttributeValues;
+    completedAt: string;
+}
+/**
+ * The providers that Internet Identity supports for one-click sign-in. Only
+ * these three reach the underlying auth client.
+ */
+type IdentityAttributeOpenIdProviderAlias = "google" | "apple" | "microsoft";
+/**
+ * An OpenID provider, either as a well-known alias or as a raw issuer URL.
+ *
+ * The two forms are **not** interchangeable, and what each one does depends on
+ * where it is passed:
+ *
+ * - An alias (`"google" | "apple" | "microsoft"`) is forwarded to the auth
+ *   client, which adds an `openid` search param to the identity provider URL so
+ *   the user signs in through that provider directly.
+ * - Any other string is treated as a raw issuer URL and is **never** forwarded
+ *   to the auth client, so it never affects how the user signs in. It is only
+ *   meaningful when passed to {@link IdentityAttributesManager.requestOpenId}
+ *   (or `identityAttributeKeys`), which scopes the requested keys to
+ *   `openid:<issuer>:<key>`. Passed anywhere else it has no effect at all.
+ */
+export type IdentityAttributeOpenIdProvider = IdentityAttributeOpenIdProviderAlias | (string & {});
+/** Session key algorithm used for each sign-in. */
+export type AuthClientKeyType = "ECDSA" | "Ed25519";
+/** Structural shape of an `@icp-sdk/auth` `AuthClientStorage`. */
+export interface AuthClientStorageLike {
+    get(key: string): Promise<string | CryptoKeyPair | null>;
+    set(key: string, value: string | CryptoKeyPair): Promise<void>;
+    remove(key: string): Promise<void>;
+}
+/** Idle-session configuration forwarded to the underlying AuthClient. */
+export interface AuthClientIdleOptions {
+    /** Called once the user has been idle for `idleTimeout` ms. */
+    onIdle?: () => unknown;
+    /** Idle timeout in ms. @default 600_000 (10 minutes) */
+    idleTimeout?: number;
+    /** Treat scroll events as activity. @default false */
+    captureScroll?: boolean;
+    /** Scroll debounce in ms. @default 100 */
+    scrollDebounce?: number;
+    /** Disable idle detection entirely. @default false */
+    disableIdle?: boolean;
+    /**
+     * Disable the built-in idle callback, which signs the user out and reloads
+     * the page. @default false
+     */
+    disableDefaultIdleCallback?: boolean;
+}
+export interface AuthenticationClientOptions {
+    /** Identity provider URL. @default "https://id.ai/authorize" */
+    identityProvider?: string | URL;
+    /** `window.open` features string for the identity provider popup. */
+    windowOpenerFeatures?: string;
+    /**
+     * Provider for one-click sign-in.
+     *
+     * Only the `"google" | "apple" | "microsoft"` aliases reach the auth client.
+     * Any other value is dropped here and has **no effect** — raw issuer URLs are
+     * only meaningful on `requestOpenId`, where they scope the requested keys.
+     * @see {@link IdentityAttributeOpenIdProvider}
+     */
+    openIdProvider?: IdentityAttributeOpenIdProvider;
+    /**
+     * Derivation origin for the identity provider.
+     *
+     * Required when the app is served from more than one origin (e.g. a custom
+     * domain plus `<canisterId>.icp0.io`) and every origin must resolve to the
+     * same principal.
+     * @see https://github.com/dfinity/internet-identity/blob/main/docs/internet-identity-spec.adoc
+     */
+    derivationOrigin?: string | URL;
+    /** Persistent storage backend. @default IndexedDB */
+    storage?: AuthClientStorageLike;
+    /**
+     * Session key algorithm. Use `"Ed25519"` when the storage backend cannot
+     * hold a `CryptoKey`. @default "ECDSA"
+     */
+    keyType?: AuthClientKeyType;
+    /**
+     * Idle timeout configuration. Pass `{ disableIdle: true }` to opt out of the
+     * default behaviour, which signs the user out and reloads after 10 minutes.
+     */
+    idleOptions?: AuthClientIdleOptions;
+    /** An existing identity to authenticate via delegation. */
+    identity?: SignIdentity | PartialIdentity;
+    /**
+     * How the client talks to the identity provider. `"redirect"` requires
+     * `@icp-sdk/auth` v8 or later and is ignored by older versions.
+     * @default "window"
+     */
+    transport?: "window" | "redirect";
+}
+export interface AuthClientSignInOptions {
+    maxTimeToLive?: bigint;
+    targets?: Principal[];
+}
+export interface AuthenticationSignInOptions extends AuthClientSignInOptions, AuthenticationClientOptions {
+    onSuccess?: () => void | Promise<void>;
+    onError?: (error?: string) => void | Promise<void>;
+}
+export interface RequestIdentityAttributesParameters extends AuthenticationClientOptions {
+    keys: string[];
+    nonce: IdentityAttributeNonce;
+    /**
+     * Sign in as part of the same identity-provider interaction.
+     * @default true
+     */
+    signIn?: boolean;
+    maxTimeToLive?: bigint;
+    targets?: Principal[];
+}
+export interface RequestOpenIdIdentityAttributesParameters extends Omit<RequestIdentityAttributesParameters, "openIdProvider"> {
+    /**
+     * Provider the requested `keys` are scoped to, producing
+     * `openid:<issuer>:<key>`.
+     *
+     * Passing one of the `"google" | "apple" | "microsoft"` aliases additionally
+     * routes sign-in through that provider, so the user grants attribute access
+     * in the same step. A raw issuer URL only scopes the keys.
+     * @see {@link IdentityAttributeOpenIdProvider}
+     */
+    openIdProvider: IdentityAttributeOpenIdProvider;
+}
+/**
+ * Structural subset of `@icp-sdk/auth`'s `AuthClient` that IC Reactor relies
+ * on. Declared locally so `@icp-sdk/auth` stays an optional peer dependency.
+ */
+export interface AuthClientLike {
+    getIdentity(): Promise<Identity> | Identity;
+    isAuthenticated(): Promise<boolean> | boolean;
+    signIn(options?: AuthClientSignInOptions): Promise<Identity>;
+    signOut(options?: {
+        returnTo?: string;
+    }): Promise<void>;
+    requestAttributes(params: {
+        keys: string[];
+        nonce: Uint8Array | Promise<Uint8Array> | (() => Promise<Uint8Array>);
+    }): Promise<SignedIdentityAttributes>;
+    /** Present from `@icp-sdk/auth` v8; used to detect the nonce contract. */
+    memoize?<T>(produce: () => T | Promise<T>): Promise<T>;
+}
+export interface AuthState {
+    identity: Identity | null;
+    isAuthenticating: boolean;
+    isAuthenticated: boolean;
+    error: Error | undefined;
+}
+export {};
+//# sourceMappingURL=types.d.ts.map

package/dist/auth/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACjE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAC7D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAA;AAExD,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,UAAU,CAAA;IAChB,SAAS,EAAE,UAAU,CAAA;CACtB;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,sBAAsB,GAChC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAA;AAE7E,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,KAAK,EAAE,sBAAsB,CAAA;CAC9B;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAA;CAClC;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,gBAAgB,EAAE,wBAAwB,CAAA;IAC1C,iBAAiB,EAAE,uBAAuB,CAAA;IAC1C,WAAW,EAAE,MAAM,CAAA;CACpB;AAED;;;GAGG;AACH,KAAK,oCAAoC,GAAG,QAAQ,GAAG,OAAO,GAAG,WAAW,CAAA;AAE5E;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,+BAA+B,GACzC,oCAAoC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;AAEtD,mDAAmD;AACnD,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,SAAS,CAAA;AAEnD,kEAAkE;AAClE,MAAM,WAAW,qBAAqB;IACpC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,aAAa,GAAG,IAAI,CAAC,CAAA;IACxD,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9D,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACnC;AAED,yEAAyE;AACzE,MAAM,WAAW,qBAAqB;IACpC,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,OAAO,CAAA;IACtB,wDAAwD;IACxD,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,sDAAsD;IACtD,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,0CAA0C;IAC1C,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,sDAAsD;IACtD,WAAW,CAAC,EAAE,OAAO,CAAA;IACrB;;;OAGG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAA;CACrC;AAED,MAAM,WAAW,2BAA2B;IAC1C,gEAAgE;IAChE,gBAAgB,CAAC,EAAE,MAAM,GAAG,GAAG,CAAA;IAC/B,qEAAqE;IACrE,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,+BAA+B,CAAA;IAChD;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,MAAM,GAAG,GAAG,CAAA;IAC/B,qDAAqD;IACrD,OAAO,CAAC,EAAE,qBAAqB,CAAA;IAC/B;;;OAGG;IACH,OAAO,CAAC,EAAE,iBAAiB,CAAA;IAC3B;;;OAGG;IACH,WAAW,CAAC,EAAE,qBAAqB,CAAA;IACnC,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,YAAY,GAAG,eAAe,CAAA;IACzC;;;;OAIG;IACH,SAAS,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAA;CAClC;AAED,MAAM,WAAW,uBAAuB;IACtC,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,OAAO,CAAC,EAAE,SAAS,EAAE,CAAA;CACtB;AAED,MAAM,WAAW,2BACf,SAAQ,uBAAuB,EAAE,2BAA2B;IAC5D,SAAS,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACtC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACnD;AAED,MAAM,WAAW,mCAAoC,SAAQ,2BAA2B;IACtF,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,KAAK,EAAE,sBAAsB,CAAA;IAC7B;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,OAAO,CAAC,EAAE,SAAS,EAAE,CAAA;CACtB;AAED,MAAM,WAAW,yCAA0C,SAAQ,IAAI,CACrE,mCAAmC,EACnC,gBAAgB,CACjB;IACC;;;;;;;;OAQG;IACH,cAAc,EAAE,+BAA+B,CAAA;CAChD;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAA;IAC3C,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAA;IAC7C,MAAM,CAAC,OAAO,CAAC,EAAE,uBAAuB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC5D,OAAO,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvD,iBAAiB,CAAC,MAAM,EAAE;QACxB,IAAI,EAAE,MAAM,EAAE,CAAA;QAId,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,CAAA;KACtE,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAA;IACrC,0EAA0E;IAC1E,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;CACvD;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,QAAQ,GAAG,IAAI,CAAA;IACzB,gBAAgB,EAAE,OAAO,CAAA;IACzB,eAAe,EAAE,OAAO,CAAA;IACxB,KAAK,EAAE,KAAK,GAAG,SAAS,CAAA;CACzB"}

package/dist/auth/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/auth/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":""}