@muhkoo/connect 0.7.0-alpha.3 → 0.7.0-alpha.4

package/README.md

@@ -142,9 +142,10 @@ const client = new Client({
 const user = await client.auth.zk.login("alice", "correct horse battery staple");
 //    └ { username, commitment }
 
-// Storage — per-user persistent KV (collection + id), encrypted at rest.
-await client.storage.set("todos", "t1", { title: "Buy groceries", completed: false });
-const todo = await client.storage.get("todos", "t1");
+// KV — per-user persistent key/value (collection + id); client-side encrypted,
+// the server stores only ciphertext.
+await client.kv.set("todos", "t1", { title: "Buy groceries", completed: false });
+const todo = await client.kv.get("todos", "t1");
 const ids  = await client.storage.list("todos");
 await client.storage.delete("todos", "t1");
 
@@ -169,9 +170,12 @@ online).
 message once with a shared group key so the server can persist + replay it.
 `createChannel(name)` mints + registers a channel (you become its first
 key-holder); `joinChannel(name)` resolves an existing one and is admitted by the
-app's **keeper** — a trusted, always-available member that re-issues the group
-key — so a channel is joinable even when no one else is online. The relay stays
-blind (it only ever sees opaque, ECIES-wrapped key blobs). The space handle was
+app's **keeper** — a server-side process (the app's Durable Object) that holds
+the channel's group key and re-issues it to newcomers — so a channel is joinable
+even when no human member is online. The message **relay** stays blind (it only
+ever sees opaque, ECIES-wrapped key blobs); the **keeper** does hold group keys,
+so channels are *relay-blind*, not fully server-blind. (Enabling a server-side
+agent on a channel likewise gives that agent the group key.) The space handle was
 once `Room`; that name is still exported as an alias, and `client.message.room()`
 returns the same handle.
 
@@ -459,12 +463,6 @@ yarn lint               # eslint ./src
   (true for all of the above; on CF Workers, pre-compile via wrangler's
   `.wasm` import if you want to skip startup cost).
 
-## Related
-
-- [`muhkoo/accelerator`](https://github.com/muhkoo/accelerator) — the CF
-  Workers + DOs backend this SDK targets, including the personal-space DO,
-  message-bus DO, and the bn128.wasm-driven `verifyZkAuthProof`.
-
 ## License
 
-GPL-3.0 — see `LICENSE`.
+MIT — see `LICENSE`.

package/dist/browser/index.js

@@ -4892,7 +4892,7 @@ function base64UrlDecode(s) {
  * expect (and isn't serving a stale cached bundle). Keep this in sync with
  * `package.json` `version`.
  */
-const VERSION = "0.7.0-alpha.3";
+const VERSION = "0.7.0-alpha.4";
 
 /**
  * `HttpClient` — the one place the unified {@link Client} talks to the
@@ -5452,6 +5452,19 @@ class HostedAuth {
             this.location().assign(url);
         return url;
     }
+    /**
+     * (App side) Send the user to centralized account & security management on
+     * the hosted page (auth.muhkoo.dev/security) — manage passkeys, recovery
+     * phrase, email, Google, change password, and remove login methods, all in
+     * one place. `returnUri` (default: the current URL) gives the hosted page a
+     * "Back to app" target. Redirects the browser; resolves to the URL.
+     */
+    async manageAccount(opts = {}) {
+        const ret = opts.returnUri ?? this.location().href;
+        const url = `${this.deps.authBaseUrl}/security?` + new URLSearchParams({ return: ret }).toString();
+        this.location().assign(url);
+        return url;
+    }
     /** Whether the current URL looks like a hosted-auth callback (has code + state). */
     isCallback() {
         try {