@multiplatform.one/web3 8.2.2 → 8.3.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@multiplatform.one/web3",
-  "version": "8.2.2",
+  "version": "8.3.0",
   "description": "Web3 wallet integration for multiplatform.one ecosystem with ConnectKit and wagmi",
   "keywords": [
     "connectkit",
@@ -120,10 +120,10 @@
     "@aave/account": "^0.2.1",
     "@coinbase/wallet-sdk": "^4.4.0",
     "@metamask/connect-evm": "^2.1.1",
-    "@multiplatform.one/connectkit": "^8.2.2",
-    "@multiplatform.one/gpg": "^8.2.2",
-    "@multiplatform.one/platform": "^8.2.2",
-    "@multiplatform.one/theme": "^8.2.2",
+    "@multiplatform.one/connectkit": "^8.3.0",
+    "@multiplatform.one/gpg": "^8.3.0",
+    "@multiplatform.one/platform": "^8.3.0",
+    "@multiplatform.one/theme": "^8.3.0",
     "@noble/ciphers": "^1.3.0",
     "@noble/curves": "^1.9.7",
     "@phosphor-icons/react": "^2.1.10",
@@ -147,8 +147,8 @@
     "wagmi": "^3.7.1"
   },
   "devDependencies": {
-    "@multiplatform.one/config": "8.2.2",
-    "@multiplatform.one/test-utils": "8.2.2",
+    "@multiplatform.one/config": "8.3.0",
+    "@multiplatform.one/test-utils": "8.3.0",
     "@tamagui/build": "2.7.6",
     "@tanstack/react-query": "^5.104.3",
     "@testing-library/jest-dom": "^7.0.1",

package/src/connectkit/siwe/SIWEContext.tsx

@@ -61,6 +61,8 @@ export type SIWEContextValue = Required<Omit<SIWEConfig, "onSign" | "subscribeNo
     nonce: ReturnType<typeof useQuery<string | null>>;
     session: ReturnType<typeof useQuery<SIWESession | null>>;
     status: StatusState;
+    /** What ended the last sign-in, while status is ERROR or REJECTED. */
+    error: Error | null;
     signIn: () => Promise<SIWESession | false>;
     resetStatus: () => void;
   };

package/src/connectkit/siwe/SIWEProvider.tsx

@@ -26,6 +26,20 @@ const b64 = (s: string) => window.btoa(unescape(encodeURIComponent(s)));
  * connection store holds: `<SignInProvider {...kc.signInConfig(onSign)}>`,
  * or Web3Provider's `signIn` prop.
  */
+// A transport wraps the wallet's own refusal (viem's HttpRequestError around a
+// 4001), so the code can sit anywhere down the cause chain.
+function isUserRejection(error: unknown): boolean {
+  for (
+    let cause = error as { code?: unknown; cause?: unknown } | undefined, depth = 0;
+    cause && depth < 8;
+    cause = cause.cause as typeof cause, depth++
+  ) {
+    if (cause.code === -32000 || cause.code === 4001 || cause.code === "ACTION_REJECTED")
+      return true;
+  }
+  return false;
+}
+
 export const SIWEProvider = ({
   children,
   enabled = true,
@@ -39,7 +53,11 @@ export const SIWEProvider = ({
   ...siweConfig
 }: Props) => {
   const [status, setStatus] = useState<StatusState>(StatusState.READY);
-  const resetStatus = () => setStatus(StatusState.READY);
+  const [error, setError] = useState<Error | null>(null);
+  const resetStatus = () => {
+    setStatus(StatusState.READY);
+    setError(null);
+  };
 
   // Only allow for mounting SIWEProvider once, so we avoid weird global state
   // collisions.
@@ -111,15 +129,8 @@ export const SIWEProvider = ({
 
   const onError = (error: any) => {
     console.error("signIn error", error, error.message);
-    switch (error.code) {
-      case -32000: // user rejected, as some wallets report it
-      case 4001: // MetaMask: user rejected
-      case "ACTION_REJECTED": // MetaMask: user rejected
-        setStatus(StatusState.REJECTED);
-        break;
-      default:
-        setStatus(StatusState.ERROR);
-    }
+    setError(error instanceof Error ? error : new Error(String(error)));
+    setStatus(isUserRejection(error) ? StatusState.REJECTED : StatusState.ERROR);
   };
 
   const signIn = async () => {
@@ -135,6 +146,7 @@ export const SIWEProvider = ({
       if (!chainId) throw new Error("No chainId found");
 
       setStatus(StatusState.LOADING);
+      setError(null);
 
       // Fetch this sign-in's own nonce. A server that consumes its nonce on
       // verify refuses the one cached at mount the second time, so a cached
@@ -249,6 +261,7 @@ export const SIWEProvider = ({
         signIn,
         signOut: signOutAndRefetch,
         status,
+        error,
         resetStatus,
       }}
     >

package/src/keycloak/KeycloakWalletLogin.spec.tsx

@@ -423,3 +423,113 @@ describe("KeycloakWalletLogin after the page reloads during the wallet trip", ()
     expect(screen.queryByText("Mock Connector")).toBeNull();
   });
 });
+
+describe("KeycloakWalletLogin when a sign-in fails (FZ-1825)", () => {
+  function failingFetch(answer: { nonce?: () => Response; sign?: Error }) {
+    vi.stubGlobal(
+      "fetch",
+      vi.fn(async (input: RequestInfo | URL, init?: RequestInit) => {
+        if (String(input).endsWith("/nonce"))
+          return answer.nonce?.() ?? new Response("nonce123abc");
+        const body = String(
+          init?.body ?? (input instanceof Request ? await input.clone().text() : ""),
+        );
+        if (answer.sign && /"method":"(eth_sign|personal_sign)"/.test(body)) throw answer.sign;
+        return new Response("not found", { status: 404 });
+      }),
+    );
+  }
+
+  async function connectedLogin() {
+    const rendered = renderLogin({ wagmiConfig: makeConfig(memoryStorage(), true) });
+    await waitFor(() => expect(rendered.config.state.status).toBe("connected"));
+    return rendered;
+  }
+
+  it("keeps an empty live region under the wallet button before anything fails", async () => {
+    await connectedLogin();
+    const region = document.getElementById("mpo-wallet-login-error");
+    expect(region?.getAttribute("aria-live")).toBe("polite");
+    expect(region?.textContent).toBe("");
+  });
+
+  it("a rejected signature says so under the button, which stays usable", async () => {
+    failingFetch({
+      sign: Object.assign(new Error("User rejected the request."), { code: 4001 }),
+    });
+    const { walletButton } = await connectedLogin();
+    const region = document.getElementById("mpo-wallet-login-error")!;
+
+    fireEvent.click(walletButton);
+    await waitFor(() => expect(region.textContent).toBe("You declined the signature. Try again."));
+    expect(document.getElementById("mpo-wallet-login-error")).toBe(region);
+    expect(walletButton.disabled).toBe(false);
+    expect(walletButton.textContent).toBe("Sign in with Wallet");
+
+    failingFetch({});
+    fireEvent.click(walletButton);
+    await waitFor(() => expect(region.textContent).toBe(""));
+  });
+
+  // The sign-in joins the page's mount-time nonce fetch, which react-query
+  // retries three times with backoff before it fails (about seven seconds).
+  it.each([
+    ["a 503 nonce", () => new Response("down", { status: 503 })],
+    ["an empty siww nonce", () => new Response("")],
+    [
+      "an unreachable server",
+      () => {
+        throw new TypeError("Failed to fetch");
+      },
+    ],
+  ] as const)(
+    "%s says the sign-in server couldn't be reached, in plain words",
+    { timeout: 20_000 },
+    async (_case, nonce) => {
+      const logged = vi.spyOn(console, "error").mockImplementation(() => {});
+      failingFetch({ nonce });
+      const { walletButton } = await connectedLogin();
+
+      fireEvent.click(walletButton);
+      const region = document.getElementById("mpo-wallet-login-error")!;
+      await waitFor(
+        () => expect(region.textContent).toBe("Couldn't reach the sign-in server. Try again."),
+        { timeout: 15_000 },
+      );
+      expect(region.textContent).not.toMatch(/keycloak|nonce|\d{3}/i);
+      expect(walletButton.disabled).toBe(false);
+      expect(logged.mock.calls.some(([label]) => label === "signIn error")).toBe(true);
+    },
+  );
+
+  it("any other failure says the sign-in failed, without the server's words", async () => {
+    failingFetch({
+      sign: Object.assign(new Error("Internal JSON-RPC error."), { code: -32603 }),
+    });
+    const { walletButton } = await connectedLogin();
+
+    fireEvent.click(walletButton);
+    const region = document.getElementById("mpo-wallet-login-error")!;
+    await waitFor(() => expect(region.textContent).toBe("Couldn't sign in. Try again."));
+  });
+
+  it("paints the failure line in the field error ink, or the page's own class", async () => {
+    failingFetch({
+      sign: Object.assign(new Error("User rejected the request."), { code: 4001 }),
+    });
+    const { walletButton } = await connectedLogin();
+    fireEvent.click(walletButton);
+    const region = document.getElementById("mpo-wallet-login-error")!;
+    await waitFor(() => expect(region.textContent).not.toBe(""));
+    // jsdom drops light-dark() colours; the Storybook shots on FZ-1825 measure the ink.
+    expect(region.style.colorScheme).toBe("light dark");
+    cleanup();
+
+    renderLogin({ wagmiConfig: makeConfig(memoryStorage(), true), errorClassName: "kc-error" });
+    const themed = document.getElementById("mpo-wallet-login-error")!;
+    expect(themed.className).toBe("");
+    fireEvent.click(document.getElementById("mpo-wallet-login") as HTMLButtonElement);
+    await waitFor(() => expect(themed.className).toBe("kc-error"));
+    expect(themed.getAttribute("style")).toBeNull();
+  });
+});

package/src/keycloak/KeycloakWalletLogin.stories.tsx

@@ -0,0 +1,93 @@
+import type { ReactElement } from "react";
+import { userEvent, within } from "storybook/test";
+import { createConfig, createStorage, http } from "wagmi";
+import { mainnet } from "wagmi/chains";
+import { mock } from "wagmi/connectors";
+import { KeycloakWalletLogin } from "./KeycloakWalletLogin";
+
+const KEYCLOAK = "https://keycloak-wallet-login.mock.test";
+const ACCOUNT = "0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045";
+
+function memoryStorage() {
+  const map = new Map<string, string>();
+  return {
+    getItem: (key: string) => map.get(key) ?? null,
+    setItem: (key: string, value: string) => void map.set(key, value),
+    removeItem: (key: string) => void map.delete(key),
+  };
+}
+
+function connectedWallet() {
+  return createConfig({
+    chains: [mainnet],
+    connectors: [
+      mock({ accounts: [ACCOUNT], features: { reconnect: true, defaultConnected: true } }),
+    ],
+    transports: { [mainnet.id]: http() },
+    storage: createStorage({ storage: memoryStorage() }),
+  });
+}
+
+function answerKeycloak(nonce: () => Response) {
+  return () => {
+    const realFetch = window.fetch;
+    window.fetch = async (input: RequestInfo | URL, init?: RequestInit) => {
+      const url =
+        typeof input === "string" ? input : input instanceof URL ? input.toString() : input.url;
+      if (url.endsWith("/nonce")) return nonce();
+      const body = String(init?.body ?? "");
+      if (/"method":"(eth_sign|personal_sign)"/.test(body)) {
+        throw Object.assign(new Error("User rejected the request."), { code: 4001 });
+      }
+      if (!url.startsWith(KEYCLOAK)) return realFetch(input, init);
+      return new Response("not found", { status: 404 });
+    };
+    return () => {
+      window.fetch = realFetch;
+    };
+  };
+}
+
+async function pressWallet({ canvasElement }: { canvasElement: HTMLElement }) {
+  const canvas = within(canvasElement);
+  await userEvent.click(await canvas.findByRole("button", { name: /sign in with wallet/i }));
+  await canvas.findByText(/try again/i, {}, { timeout: 20_000 });
+}
+
+const meta = {
+  title: "Web3/KeycloakWalletLogin",
+  component: KeycloakWalletLogin,
+  tags: ["!test"],
+  parameters: { layout: "centered" },
+  decorators: [
+    (Story: () => ReactElement) => (
+      <div style={{ width: 320 }}>
+        <Story />
+      </div>
+    ),
+  ],
+};
+export default meta;
+
+export const Idle = {
+  beforeEach: answerKeycloak(() => new Response("nonce123abc")),
+  render: () => (
+    <KeycloakWalletLogin baseUrl={KEYCLOAK} realm="main" wagmiConfig={connectedWallet()} />
+  ),
+};
+
+export const Declined = {
+  beforeEach: answerKeycloak(() => new Response("nonce123abc")),
+  render: () => (
+    <KeycloakWalletLogin baseUrl={KEYCLOAK} realm="main" wagmiConfig={connectedWallet()} />
+  ),
+  play: pressWallet,
+};
+
+export const ServerUnreachable = {
+  beforeEach: answerKeycloak(() => new Response("down", { status: 503 })),
+  render: () => (
+    <KeycloakWalletLogin baseUrl={KEYCLOAK} realm="main" wagmiConfig={connectedWallet()} />
+  ),
+  play: pressWallet,
+};

package/src/keycloak/KeycloakWalletLogin.tsx

@@ -14,7 +14,7 @@ import type { MobileConnectOptions } from "../connectkit/openConnector";
 import { ConnectKitProvider } from "../connectkit/web3Provider";
 import type { BrowserFlowOptions } from "./browserFlow";
 import { deriveKeycloakFromLocation, keycloakWallet } from "./keycloakWallet";
-import type { KeycloakWalletResource } from "./types";
+import { KeycloakWalletError, type KeycloakWalletResource } from "./types";
 import { useWalletLogin } from "./useWalletLogin";
 
 export interface KeycloakWalletLoginProps {
@@ -44,6 +44,8 @@ export interface KeycloakWalletLoginProps {
   className?: string;
   /** Replaces the built-in button look, e.g. the theme's `kcButtonClass`. */
   buttonClassName?: string;
+  /** Replaces the built-in failure line look, e.g. the theme's `kcInputErrorMessageClass`. */
+  errorClassName?: string;
   /** The wagmi config to sign with; built from the app props and `chains` when absent. */
   wagmiConfig?: Config;
 }
@@ -97,6 +99,31 @@ const buttonStyle: CSSProperties = {
 const themeScopeStyle: CSSProperties = { display: "block" };
 
 const noticeStyle: CSSProperties = { margin: "8px 0 0", fontSize: 13 };
+const hiddenNoticeStyle: CSSProperties = { margin: 0 };
+// MPO's field error ink ($red10 light and dark, form-colors.md) for a page that brings no class of its own.
+const errorStyle: CSSProperties = {
+  ...noticeStyle,
+  colorScheme: "light dark",
+  color: "light-dark(#dc3e42, #ec5d5e)",
+};
+
+const declinedMessage = "You declined the signature. Try again.";
+const unreachableMessage = "Couldn't reach the sign-in server. Try again.";
+const failedMessage = "Couldn't sign in. Try again.";
+
+/** The words a failed wallet sign-in shows; the raw reason stays on the error and in the console. */
+export function walletLoginFailureMessage(
+  status: StatusState,
+  error: Error | null,
+): string | undefined {
+  if (status === StatusState.REJECTED) return declinedMessage;
+  if (status !== StatusState.ERROR) return undefined;
+  if (error instanceof TypeError) return unreachableMessage;
+  if (error instanceof KeycloakWalletError && (error.status < 300 || error.status >= 500)) {
+    return unreachableMessage;
+  }
+  return failedMessage;
+}
 
 const themedNoticeStyle: CSSProperties = { ...noticeStyle, color: "var(--ck-body-color)" };
 
@@ -180,11 +207,13 @@ function LoginButtons({
   gpgLabel = "Sign in with GPG",
   className,
   buttonClassName,
+  errorClassName,
 }: KeycloakWalletLoginProps) {
-  const { login, status, dropped } = useWalletLogin();
+  const { login, status, dropped, error } = useWalletLogin();
   const { openGpg } = useWeb3Modal();
   const style = buttonClassName ? undefined : buttonStyle;
   const busy = status === StatusState.LOADING || status === StatusState.SUCCESS;
+  const failure = dropped || busy ? undefined : walletLoginFailureMessage(status, error);
   const buttons = (
     <div className={className ?? "mpo-keycloak-wallet-login"}>
       <button
@@ -201,6 +230,14 @@ function LoginButtons({
         <WalletIcon />
         <span>{busy ? "Signing…" : walletLabel}</span>
       </button>
+      <p
+        id="mpo-wallet-login-error"
+        aria-live="polite"
+        className={failure ? errorClassName : undefined}
+        style={!failure ? hiddenNoticeStyle : errorClassName ? undefined : errorStyle}
+      >
+        {failure}
+      </p>
       {dropped && !busy && (
         <p
           id="mpo-wallet-login-dropped"

package/src/keycloak/useWalletLogin.ts

@@ -29,6 +29,8 @@ export interface UseWalletLoginResult {
    * connects afresh and clears it.
    */
   dropped: boolean;
+  /** What ended the last signature, while status is ERROR or REJECTED. */
+  error: Error | null;
 }
 
 function readIntent(key: string, ttl: number): boolean {
@@ -98,7 +100,8 @@ export function useWalletLogin(opts: UseWalletLoginOptions = {}): UseWalletLogin
     setDropped(false);
     // A failed signature leaves SIWE on ERROR, which the sign-in step would
     // show the next attempt as "Unknown Error".
-    if (!signIn && siwe?.status === StatusState.ERROR) siwe.resetStatus();
+    if (!signIn && (siwe?.status === StatusState.ERROR || siwe?.status === StatusState.REJECTED))
+      siwe.resetStatus();
     if (isConnected) {
       await sign();
       return;
@@ -129,5 +132,6 @@ export function useWalletLogin(opts: UseWalletLoginOptions = {}): UseWalletLogin
     isConnected,
     address,
     dropped,
+    error: signIn ? null : (siwe?.error ?? null),
   };
 }

package/types/connectkit/siwe/SIWEContext.d.ts

@@ -42,6 +42,8 @@ export type SIWEContextValue = Required<Omit<SIWEConfig, "onSign" | "subscribeNo
     nonce: ReturnType<typeof useQuery<string | null>>;
     session: ReturnType<typeof useQuery<SIWESession | null>>;
     status: StatusState;
+    /** What ended the last sign-in, while status is ERROR or REJECTED. */
+    error: Error | null;
     signIn: () => Promise<SIWESession | false>;
     resetStatus: () => void;
 };

package/types/connectkit/siwe/SIWEContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SIWEContext.d.ts","sourceRoot":"","sources":["../../../src/connectkit/siwe/SIWEContext.tsx"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAE/B,eAAO,MAAM,WAAW;;;;;;CAMd,CAAC;AACX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAEzE,MAAM,MAAM,WAAW,GAAG;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IAKvB,QAAQ,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAChC,aAAa,EAAE,CAAC,IAAI,EAAE;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;KACjB,KAAK,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IAC/B,aAAa,EAAE,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAClF,UAAU,EAAE,MAAM,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAC9C,OAAO,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAGhC,OAAO,CAAC,EAAE,OAAO,CAAC;IAIlB,oBAAoB,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IACtC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,sBAAsB,CAAC,EAAE,OAAO,CAAC;IAKjC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;KACjB,KAAK,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,OAAO,GAAG,IAAI,CAAC;IAI/C,mBAAmB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,IAAI,KAAK,MAAM,IAAI,CAAC;CAC5D,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,GAAG,qBAAqB,CAAC,CAAC,GACzF,IAAI,CAAC,UAAU,EAAE,QAAQ,GAAG,qBAAqB,CAAC,GAAG;IACnD,KAAK,EAAE,UAAU,CAAC,OAAO,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;IAClD,OAAO,EAAE,UAAU,CAAC,OAAO,QAAQ,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC;IACzD,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,MAAM,OAAO,CAAC,WAAW,GAAG,KAAK,CAAC,CAAC;IAC3C,WAAW,EAAE,MAAM,IAAI,CAAC;CACzB,CAAC;AAEJ,eAAO,MAAM,WAAW,kDAA+C,CAAC"}
+{"version":3,"file":"SIWEContext.d.ts","sourceRoot":"","sources":["../../../src/connectkit/siwe/SIWEContext.tsx"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAE/B,eAAO,MAAM,WAAW;;;;;;CAMd,CAAC;AACX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAEzE,MAAM,MAAM,WAAW,GAAG;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IAKvB,QAAQ,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAChC,aAAa,EAAE,CAAC,IAAI,EAAE;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;KACjB,KAAK,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IAC/B,aAAa,EAAE,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAClF,UAAU,EAAE,MAAM,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAC9C,OAAO,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAGhC,OAAO,CAAC,EAAE,OAAO,CAAC;IAIlB,oBAAoB,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IACtC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,sBAAsB,CAAC,EAAE,OAAO,CAAC;IAKjC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;KACjB,KAAK,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,OAAO,GAAG,IAAI,CAAC;IAI/C,mBAAmB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,IAAI,KAAK,MAAM,IAAI,CAAC;CAC5D,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,GAAG,qBAAqB,CAAC,CAAC,GACzF,IAAI,CAAC,UAAU,EAAE,QAAQ,GAAG,qBAAqB,CAAC,GAAG;IACnD,KAAK,EAAE,UAAU,CAAC,OAAO,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;IAClD,OAAO,EAAE,UAAU,CAAC,OAAO,QAAQ,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC;IACzD,MAAM,EAAE,WAAW,CAAC;IACpB,sEAAsE;IACtE,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,OAAO,CAAC,WAAW,GAAG,KAAK,CAAC,CAAC;IAC3C,WAAW,EAAE,MAAM,IAAI,CAAC;CACzB,CAAC;AAEJ,eAAO,MAAM,WAAW,kDAA+C,CAAC"}

package/types/connectkit/siwe/SIWEProvider.d.ts

@@ -7,12 +7,6 @@ type Props = SIWEConfig & {
 };
 export declare const SIWE_NONCE_QUERY_KEY = "ckSiweNonce";
 export declare const SIWE_SESSION_QUERY_KEY = "ckSiweSession";
-/**
- * Sign-in over wagmi's account, mounted outside ConnectKitProvider.
- * @deprecated Goes in a later major. `SignInProvider` signs with whichever family the
- * connection store holds: `<SignInProvider {...kc.signInConfig(onSign)}>`,
- * or Web3Provider's `signIn` prop.
- */
 export declare const SIWEProvider: ({ children, enabled, nonceRefetchInterval, sessionRefetchInterval, signOutOnDisconnect, signOutOnAccountChange, signOutOnNetworkChange, onSignIn, onSignOut, ...siweConfig }: Props) => import("react/jsx-runtime").JSX.Element;
 export {};
 //# sourceMappingURL=SIWEProvider.d.ts.map

package/types/connectkit/siwe/SIWEProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SIWEProvider.d.ts","sourceRoot":"","sources":["../../../src/connectkit/siwe/SIWEProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAmC,MAAM,OAAO,CAAC;AAMnE,OAAO,EAAe,UAAU,EAAe,WAAW,EAAE,MAAM,eAAe,CAAC;AAIlF,KAAK,KAAK,GAAG,UAAU,GAAG;IACxB,QAAQ,EAAE,SAAS,CAAC;IACpB,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,KAAK,IAAI,CAAC;IACxC,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;CACxB,CAAC;AAEF,eAAO,MAAM,oBAAoB,gBAAgB,CAAC;AAClD,eAAO,MAAM,sBAAsB,kBAAkB,CAAC;AAKtD;;;;;GAKG;AACH,eAAO,MAAM,YAAY,GAAI,8KAW1B,KAAK,4CA0NP,CAAC"}
+{"version":3,"file":"SIWEProvider.d.ts","sourceRoot":"","sources":["../../../src/connectkit/siwe/SIWEProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAmC,MAAM,OAAO,CAAC;AAMnE,OAAO,EAAe,UAAU,EAAe,WAAW,EAAE,MAAM,eAAe,CAAC;AAIlF,KAAK,KAAK,GAAG,UAAU,GAAG;IACxB,QAAQ,EAAE,SAAS,CAAC;IACpB,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,KAAK,IAAI,CAAC;IACxC,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;CACxB,CAAC;AAEF,eAAO,MAAM,oBAAoB,gBAAgB,CAAC;AAClD,eAAO,MAAM,sBAAsB,kBAAkB,CAAC;AAyBtD,eAAO,MAAM,YAAY,GAAI,8KAW1B,KAAK,4CAyNP,CAAC"}

package/types/keycloak/KeycloakWalletLogin.d.ts

@@ -1,8 +1,9 @@
 import type { Chain } from "viem";
 import { type Config } from "wagmi";
+import { StatusState } from "../connectkit/siwe/SIWEContext";
 import type { MobileConnectOptions } from "../connectkit/openConnector";
 import type { BrowserFlowOptions } from "./browserFlow";
-import type { KeycloakWalletResource } from "./types";
+import { type KeycloakWalletResource } from "./types";
 export interface KeycloakWalletLoginProps {
     /** Defaults to the Keycloak base of the page it runs on. */
     baseUrl?: string;
@@ -30,11 +31,15 @@ export interface KeycloakWalletLoginProps {
     className?: string;
     /** Replaces the built-in button look, e.g. the theme's `kcButtonClass`. */
     buttonClassName?: string;
+    /** Replaces the built-in failure line look, e.g. the theme's `kcInputErrorMessageClass`. */
+    errorClassName?: string;
     /** The wagmi config to sign with; built from the app props and `chains` when absent. */
     wagmiConfig?: Config;
 }
 /** The wagmi config `<KeycloakWalletLogin>` builds when it is given none. */
 export declare function createKeycloakWalletConfig({ appName, appDescription, appUrl, appIcon, chains, }?: Pick<KeycloakWalletLoginProps, "appName" | "appDescription" | "appUrl" | "appIcon" | "chains">): Config;
+/** The words a failed wallet sign-in shows; the raw reason stays on the error and in the console. */
+export declare function walletLoginFailureMessage(status: StatusState, error: Error | null): string | undefined;
 /**
  * Wallet and GPG sign-in for a Keycloak login page, on the browser flow: the
  * signed credential posts to the page's authenticator. Carries its own wagmi,

package/types/keycloak/KeycloakWalletLogin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"KeycloakWalletLogin.d.ts","sourceRoot":"","sources":["../../src/keycloak/KeycloakWalletLogin.tsx"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAClC,OAAO,EAAE,KAAK,MAAM,EAA+B,MAAM,OAAO,CAAC;AAOjE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAExE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAGtD,MAAM,WAAW,wBAAwB;IACvC,4DAA4D;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,WAAW,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,SAAS,CAAC,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;IACtC,kFAAkF;IAClF,GAAG,CAAC,EAAE,OAAO,CAAC;IACd;;;OAGG;IACH,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2EAA2E;IAC3E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,wFAAwF;IACxF,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAID,6EAA6E;AAC7E,wBAAgB,0BAA0B,CAAC,EACzC,OAAmB,EACnB,cAA2C,EAC3C,MAAuE,EACvE,OAAO,EACP,MAAsB,GACvB,GAAE,IAAI,CACL,wBAAwB,EACxB,SAAS,GAAG,gBAAgB,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAC1D,GAAG,MAAM,CAgBd;AAwBD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,2CAkElE"}
+{"version":3,"file":"KeycloakWalletLogin.d.ts","sourceRoot":"","sources":["../../src/keycloak/KeycloakWalletLogin.tsx"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAClC,OAAO,EAAE,KAAK,MAAM,EAA+B,MAAM,OAAO,CAAC;AAKjE,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAE7D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAExE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,OAAO,EAAuB,KAAK,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAG3E,MAAM,WAAW,wBAAwB;IACvC,4DAA4D;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,WAAW,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,SAAS,CAAC,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;IACtC,kFAAkF;IAClF,GAAG,CAAC,EAAE,OAAO,CAAC;IACd;;;OAGG;IACH,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2EAA2E;IAC3E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,4FAA4F;IAC5F,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wFAAwF;IACxF,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAID,6EAA6E;AAC7E,wBAAgB,0BAA0B,CAAC,EACzC,OAAmB,EACnB,cAA2C,EAC3C,MAAuE,EACvE,OAAO,EACP,MAAsB,GACvB,GAAE,IAAI,CACL,wBAAwB,EACxB,SAAS,GAAG,gBAAgB,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAC1D,GAAG,MAAM,CAgBd;AAiCD,qGAAqG;AACrG,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,WAAW,EACnB,KAAK,EAAE,KAAK,GAAG,IAAI,GAClB,MAAM,GAAG,SAAS,CAQpB;AAID;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,2CAkElE"}

package/types/keycloak/useWalletLogin.d.ts

@@ -20,6 +20,8 @@ export interface UseWalletLoginResult {
      * connects afresh and clears it.
      */
     dropped: boolean;
+    /** What ended the last signature, while status is ERROR or REJECTED. */
+    error: Error | null;
 }
 /**
  * A wallet login button's behaviour. Pressing it while disconnected opens the

package/types/keycloak/useWalletLogin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useWalletLogin.d.ts","sourceRoot":"","sources":["../../src/keycloak/useWalletLogin.ts"],"names":[],"mappings":"AAIA,OAAO,EAAe,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAK1E,MAAM,WAAW,qBAAqB;IACpC,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2FAA2F;IAC3F,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,OAAO,EAAE,OAAO,CAAC;CAClB;AAuBD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAAC,IAAI,GAAE,qBAA0B,GAAG,oBAAoB,CAgErF"}
+{"version":3,"file":"useWalletLogin.d.ts","sourceRoot":"","sources":["../../src/keycloak/useWalletLogin.ts"],"names":[],"mappings":"AAIA,OAAO,EAAe,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAK1E,MAAM,WAAW,qBAAqB;IACpC,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2FAA2F;IAC3F,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,EAAE,OAAO,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB,wEAAwE;IACxE,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC;CACrB;AAuBD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAAC,IAAI,GAAE,qBAA0B,GAAG,oBAAoB,CAkErF"}