@orangecheck/auth-client 2.29.0 → 2.30.1

package/dist/index.mjs

@@ -3185,6 +3185,297 @@ function Hint({ children }) {
     }
   );
 }
+var DEFAULT_AUTH_ORIGIN2 = "https://ochk.io";
+var MIN_CONFIRMATIONS = 6;
+var n = (v) => v.toLocaleString("en-US");
+function bondFloorsText(f) {
+  const sats = f.sats_floor > 0 ? `at least ${n(f.sats_floor)} sats` : "under 1,000 sats";
+  const days = f.days_floor > 0 ? `held ${f.days_floor} days or more` : "held under 7 days";
+  return `${sats}, ${days}`;
+}
+var short = (outpoint) => {
+  const [txid = "", vout = ""] = outpoint.split(":");
+  return `${txid.slice(0, 8)}\u2026${txid.slice(-4)}:${vout}`;
+};
+var REFUSAL = {
+  invalid_address: "that isn't a Bitcoin address we can read",
+  chain_unavailable: "couldn't read the chain just now \xB7 nothing changed, try again in a minute",
+  sig_invalid: "that signature isn't from this coin's address \xB7 sign with the wallet that holds it",
+  bond_expired: "the message expired \xB7 start again",
+  bond_not_yet_valid: "your device's clock looks wrong",
+  bond_subject_mismatch: "that message was for another account \xB7 start again",
+  bond_malformed: "the signed message changed on the way \xB7 start again",
+  coin_not_found: "that coin doesn't exist on-chain",
+  coin_address_mismatch: "that coin isn't at this address",
+  coin_unconfirmed: "that coin isn't confirmed yet",
+  coin_too_recent: "that coin needs six confirmations first, about an hour",
+  coin_spent: "that coin has been spent \xB7 pick one still in your wallet",
+  coin_backs_another_account: "that coin already backs another orangecheck account",
+  not_authenticated: "your session ended \xB7 sign in again"
+};
+var refusal = (reason) => reason && REFUSAL[reason] || "your backing didn't save \xB7 nothing changed, try again";
+async function fetchOcBond(opts) {
+  const r = await fetch(`${opts?.authOrigin ?? DEFAULT_AUTH_ORIGIN2}/api/auth/bond`, {
+    credentials: "include"
+  });
+  const j = await r.json().catch(() => ({}));
+  if (!r.ok || !j.ok) throw new Error(`http_${r.status}`);
+  return j.bond ?? null;
+}
+function OcBond({
+  authOrigin = DEFAULT_AUTH_ORIGIN2,
+  onChange,
+  className
+}) {
+  const [bond, setBond] = React4.useState(void 0);
+  const [loadErr, setLoadErr] = React4.useState(false);
+  const [nonce, setNonce] = React4.useState(0);
+  const [adding, setAdding] = React4.useState(false);
+  const [busy, setBusy] = React4.useState(false);
+  const [err, setErr] = React4.useState(null);
+  React4.useEffect(() => {
+    let alive = true;
+    fetchOcBond({ authOrigin }).then(
+      (b) => alive && setBond(b),
+      () => alive && setLoadErr(true)
+    );
+    return () => {
+      alive = false;
+    };
+  }, [authOrigin, nonce]);
+  const call = React4.useCallback(
+    async (method, body) => {
+      const r = await fetch(`${authOrigin}/api/auth/bond`, {
+        method,
+        credentials: "include",
+        headers: body ? { "Content-Type": "application/json" } : void 0,
+        body: body ? JSON.stringify(body) : void 0
+      });
+      const j = await r.json().catch(() => ({}));
+      return { ok: r.ok && j.ok === true, ...j };
+    },
+    [authOrigin]
+  );
+  async function release() {
+    setBusy(true);
+    setErr(null);
+    const j = await call("DELETE").catch(() => ({ ok: false, reason: "network" }));
+    setBusy(false);
+    if (!j.ok) return setErr(refusal(j.reason));
+    setBond(null);
+    onChange?.(null);
+  }
+  if (loadErr) {
+    return /* @__PURE__ */ jsxs("div", { className, "data-oc-bond": "", style: panelStyle("warn"), role: "alert", children: [
+      /* @__PURE__ */ jsx("p", { style: bodyStyle, children: "couldn't read your backing \xB7 nothing was changed" }),
+      /* @__PURE__ */ jsx(
+        "button",
+        {
+          type: "button",
+          style: ghostBtnStyle(false),
+          onClick: () => {
+            setLoadErr(false);
+            setNonce((x) => x + 1);
+          },
+          children: "try again"
+        }
+      )
+    ] });
+  }
+  if (bond === void 0) {
+    return /* @__PURE__ */ jsx("div", { className, "data-oc-bond": "", style: panelStyle(), children: /* @__PURE__ */ jsxs("span", { style: hintStyle, children: [
+      "> ",
+      "reading your backing\u2026"
+    ] }) });
+  }
+  return /* @__PURE__ */ jsxs("div", { className, "data-oc-bond": "", style: { display: "grid", gap: 16 }, children: [
+    bond && !adding ? /* @__PURE__ */ jsxs("div", { style: panelStyle("success"), children: [
+      /* @__PURE__ */ jsx(SectionLabel, { tone: "success", children: "\xA7 backed by bitcoin" }),
+      /* @__PURE__ */ jsxs("p", { style: { ...bodyStyle, color: V.foreground }, children: [
+        "apps see a coin ",
+        bondFloorsText(bond),
+        "."
+      ] }),
+      /* @__PURE__ */ jsxs("p", { style: bodyStyle, children: [
+        "coin ",
+        short(bond.outpoint),
+        ", ",
+        n(bond.sats),
+        " sats \xB7 last found unspent at block ",
+        n(bond.checked_height),
+        " \xB7 only you and orangecheck see this line"
+      ] }),
+      /* @__PURE__ */ jsxs(FormButtons, { children: [
+        /* @__PURE__ */ jsx("button", { type: "button", style: ghostBtnStyle(busy), disabled: busy, onClick: () => setAdding(true), children: "use another coin" }),
+        /* @__PURE__ */ jsx("button", { type: "button", style: dangerBtnStyle(busy), disabled: busy, onClick: () => void release(), children: "stop backing" })
+      ] }),
+      err ? /* @__PURE__ */ jsx(ErrorLine, { children: err }) : null
+    ] }) : null,
+    !bond && !adding ? /* @__PURE__ */ jsxs("div", { style: panelStyle(), children: [
+      /* @__PURE__ */ jsx(SectionLabel, { children: "\xA7 not backed" }),
+      /* @__PURE__ */ jsx("p", { style: bodyStyle, children: "your account works everywhere as it is. apps that want to keep out bots can ask for a backed account: one coin you hold, that never moves and that they never see." }),
+      /* @__PURE__ */ jsx("button", { type: "button", style: primaryBtnStyle(false), onClick: () => setAdding(true), children: "back it with a coin" })
+    ] }) : null,
+    adding ? /* @__PURE__ */ jsx(
+      BondForm,
+      {
+        call,
+        onCancel: () => setAdding(false),
+        onDone: (b) => {
+          setBond(b);
+          setAdding(false);
+          onChange?.(b);
+        }
+      }
+    ) : null,
+    /* @__PURE__ */ jsxs("p", { style: hintStyle, children: [
+      "> ",
+      "apps see that a coin backs you, in rough steps, and a number unique to each app, so they can't compare notes. an app can block that number; getting past it means moving the coin, and a moved coin starts its age again."
+    ] })
+  ] });
+}
+function BondForm({
+  call,
+  onCancel,
+  onDone
+}) {
+  const [address, setAddress] = React4.useState("");
+  const [coins, setCoins] = React4.useState(null);
+  const [chosen, setChosen] = React4.useState("");
+  const [message, setMessage] = React4.useState(null);
+  const [busy, setBusy] = React4.useState(false);
+  const [err, setErr] = React4.useState(null);
+  async function run(fn) {
+    setBusy(true);
+    setErr(null);
+    try {
+      await fn();
+    } catch {
+      setErr(refusal("chain_unavailable"));
+    } finally {
+      setBusy(false);
+    }
+  }
+  const findCoins = () => run(async () => {
+    const j = await call("POST", { action: "coins", address: address.trim() });
+    if (!j.ok) return setErr(refusal(j.reason));
+    const list = j.coins ?? [];
+    setCoins(list);
+    setChosen(list.find((c) => c.age_blocks >= MIN_CONFIRMATIONS)?.outpoint ?? "");
+  });
+  const getMessage = () => run(async () => {
+    const j = await call("POST", { action: "message", address: address.trim(), outpoint: chosen });
+    if (!j.ok || typeof j.message !== "string") return setErr(refusal(j.reason));
+    setMessage(j.message);
+  });
+  const submit = (signature) => run(async () => {
+    const j = await call("POST", { action: "bond", message, signature });
+    if (!j.ok || !j.bond) return setErr(refusal(j.reason));
+    onDone(j.bond);
+  });
+  return /* @__PURE__ */ jsxs("div", { style: panelStyle("accent"), "data-oc-bond-form": "", children: [
+    /* @__PURE__ */ jsx(SectionLabel, { children: "\xA7 back your account with a coin" }),
+    message ? /* @__PURE__ */ jsxs(Fragment, { children: [
+      /* @__PURE__ */ jsxs("p", { style: bodyStyle, children: [
+        "sign with the wallet that holds",
+        " ",
+        /* @__PURE__ */ jsx("span", { style: { wordBreak: "break-all", color: V.foreground }, children: address.trim() }),
+        ". the coin doesn't move and nothing is spent."
+      ] }),
+      /* @__PURE__ */ jsx(
+        LazyWalletButton,
+        {
+          address: address.trim(),
+          message,
+          showManual: true,
+          onSigned: (sig) => void submit(sig),
+          onError: (e) => setErr(e.message ?? "the wallet refused to sign")
+        }
+      )
+    ] }) : coins ? coins.length === 0 ? /* @__PURE__ */ jsx("p", { style: bodyStyle, children: "no confirmed coins at that address \xB7 send some sats there and wait for six confirmations, about an hour. the longer a coin sits, the more it says." }) : /* @__PURE__ */ jsxs("div", { role: "radiogroup", "aria-label": "pick one coin", style: { display: "grid", gap: 8 }, children: [
+      /* @__PURE__ */ jsx("p", { style: bodyStyle, children: "pick one coin \xB7 value spread over several coins doesn't add up" }),
+      coins.map((c) => {
+        const young = c.age_blocks < MIN_CONFIRMATIONS;
+        return /* @__PURE__ */ jsxs(
+          "label",
+          {
+            style: {
+              ...panelStyle(chosen === c.outpoint ? "accent" : "default"),
+              padding: "0.75rem",
+              display: "flex",
+              gap: 10,
+              alignItems: "flex-start",
+              cursor: young ? "not-allowed" : "pointer",
+              opacity: young ? 0.6 : 1
+            },
+            children: [
+              /* @__PURE__ */ jsx(
+                "input",
+                {
+                  type: "radio",
+                  name: "oc-bond-coin",
+                  value: c.outpoint,
+                  checked: chosen === c.outpoint,
+                  disabled: young,
+                  onChange: () => setChosen(c.outpoint)
+                }
+              ),
+              /* @__PURE__ */ jsxs("span", { style: { display: "grid", gap: 2, minWidth: 0 }, children: [
+                /* @__PURE__ */ jsxs("span", { style: { color: V.foreground, fontSize: 13 }, children: [
+                  n(c.sats),
+                  " sats, held ",
+                  Math.floor(c.age_blocks / 144),
+                  " days"
+                ] }),
+                /* @__PURE__ */ jsx("span", { style: hintStyle, children: young ? "too recent: needs six confirmations" : `apps would see ${bondFloorsText(c)}` }),
+                /* @__PURE__ */ jsx("span", { style: { ...hintStyle, wordBreak: "break-all" }, children: short(c.outpoint) })
+              ] })
+            ]
+          },
+          c.outpoint
+        );
+      })
+    ] }) : /* @__PURE__ */ jsxs(Fragment, { children: [
+      /* @__PURE__ */ jsx("p", { style: bodyStyle, children: "which address holds the coin? use one that holds nothing else of yours: orangecheck learns its address and amount. apps never do." }),
+      /* @__PURE__ */ jsx(
+        "input",
+        {
+          style: inputStyle,
+          value: address,
+          onChange: (e) => setAddress(e.target.value),
+          placeholder: "bc1q\u2026",
+          spellCheck: false,
+          autoComplete: "off",
+          "aria-label": "Bitcoin address"
+        }
+      )
+    ] }),
+    err ? /* @__PURE__ */ jsx(ErrorLine, { children: err }) : null,
+    /* @__PURE__ */ jsxs(FormButtons, { children: [
+      !coins && !message ? /* @__PURE__ */ jsx(
+        "button",
+        {
+          type: "button",
+          style: primaryBtnStyle(busy || address.trim().length < 14),
+          disabled: busy || address.trim().length < 14,
+          onClick: () => void findCoins(),
+          children: "find its coins"
+        }
+      ) : null,
+      coins && coins.length > 0 && !message ? /* @__PURE__ */ jsx(
+        "button",
+        {
+          type: "button",
+          style: primaryBtnStyle(busy || !chosen),
+          disabled: busy || !chosen,
+          onClick: () => void getMessage(),
+          children: "continue"
+        }
+      ) : null,
+      /* @__PURE__ */ jsx("button", { type: "button", style: ghostBtnStyle(busy), disabled: busy, onClick: onCancel, children: "cancel" })
+    ] })
+  ] });
+}
 function resolveAuthOrigin(opts) {
   if (!opts) return resolveConfig(void 0).authOrigin;
   return resolveConfig(opts).authOrigin;
@@ -3419,6 +3710,6 @@ function useStepUpAuth(opts) {
   return { status, error, stepUp, reset };
 }
 
-export { DEFAULT_CONFIG, DISPLAY_IDENTITY_KINDS, OcAccountChip, OcAccountPill, OcAddressInput, OcLinkedIdentities, OcSessionProvider, OcSignIn, OcSignInButton, SUDO_ACCOUNT_MISMATCH_MESSAGE, TAB_ACCOUNT_HINT_KEY, TAB_ADOPT_HASH, TAB_SESSION_HEADER, TAB_SESSION_STORAGE_KEY, buildAddAccountUrl, buildSignInUrl, clearTabSession, consumeTabAccountHint, consumeTabAdoptMarker, familyReturnTarget, fetchOcLinkedIdentities, handleSudoRequired, installTabFetchInterceptor, installTabLinkDecorator, isSudoAccountMismatch, readTabSession, redirectToSudo, safeReturnTo, tabSessionHeader, useOcAddressSuggestion, useOcSession, useOptionalOcSession, useStepUpAuth, useWebAuthnList, useWebAuthnRegister, writeTabSession };
+export { DEFAULT_CONFIG, DISPLAY_IDENTITY_KINDS, OcAccountChip, OcAccountPill, OcAddressInput, OcBond, OcLinkedIdentities, OcSessionProvider, OcSignIn, OcSignInButton, SUDO_ACCOUNT_MISMATCH_MESSAGE, TAB_ACCOUNT_HINT_KEY, TAB_ADOPT_HASH, TAB_SESSION_HEADER, TAB_SESSION_STORAGE_KEY, bondFloorsText, buildAddAccountUrl, buildSignInUrl, clearTabSession, consumeTabAccountHint, consumeTabAdoptMarker, familyReturnTarget, fetchOcBond, fetchOcLinkedIdentities, handleSudoRequired, installTabFetchInterceptor, installTabLinkDecorator, isSudoAccountMismatch, readTabSession, redirectToSudo, safeReturnTo, tabSessionHeader, useOcAddressSuggestion, useOcSession, useOptionalOcSession, useStepUpAuth, useWebAuthnList, useWebAuthnRegister, writeTabSession };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map