@orangecheck/auth-client 2.6.0 → 2.7.0

package/dist/index.mjs

@@ -867,7 +867,8 @@ function OcLinkedIdentities({
         onDone: afterChange,
         onCancel: () => setShowBtcLink(false)
       }
-    )
+    ),
+    hasBtc && resp.did_oc && /* @__PURE__ */ jsx(OcIdentityBond, { didOc: resp.did_oc, btc: btcRows.find((i) => !!i.value).value })
   ] });
 }
 function IdentityGroup({
@@ -1352,6 +1353,185 @@ function TransferConfirm({
     ] })
   ] });
 }
+function OcIdentityBond({
+  didOc,
+  btc,
+  className
+}) {
+  const [stage, setStage] = React3.useState("idle");
+  const [message, setMessage] = React3.useState("");
+  const [err, setErr] = React3.useState(null);
+  const [result, setResult] = React3.useState(null);
+  function nip07() {
+    if (typeof window === "undefined") return null;
+    const w = window;
+    return w.nostr ?? null;
+  }
+  async function begin() {
+    setErr(null);
+    const nostr = nip07();
+    if (!nostr) {
+      setErr(
+        "no Nostr signer found \xB7 install a NIP-07 extension (Alby, nos2x) to counter-sign the bond"
+      );
+      return;
+    }
+    try {
+      const sdk = await loadSdk();
+      const pubkeyHex = (await nostr.getPublicKey()).toLowerCase();
+      const npub = sdk.xOnlyHexToNpub(pubkeyHex);
+      const msg = sdk.buildBindingMessage({
+        principal: didOc,
+        btc,
+        nostr: npub,
+        nonce: randomNonceHex(),
+        issued_at: (/* @__PURE__ */ new Date()).toISOString().replace(/\.\d{3}Z$/, "Z")
+      });
+      setMessage(msg);
+      setStage("sign-btc");
+    } catch (e) {
+      setErr(e instanceof Error ? e.message : "could not start the bond ceremony");
+    }
+  }
+  async function afterBtcSign(btcSignature) {
+    setErr(null);
+    setStage("sign-nostr");
+    try {
+      const nostr = nip07();
+      if (!nostr) throw new Error("Nostr extension went away \xB7 retry");
+      const sdk = await loadSdk();
+      const pubkeyHex = (await nostr.getPublicKey()).toLowerCase();
+      const template = sdk.buildBindingEventTemplate({
+        message,
+        btcSignature,
+        nostrPubkeyHex: pubkeyHex,
+        btc
+      });
+      const signedEvent = await nostr.signEvent(template);
+      const envelope = sdk.assembleBindingEnvelope({
+        message,
+        btcSignature,
+        btcScheme: "bip322",
+        nostrEvent: signedEvent
+      });
+      const check = sdk.verifyBinding(envelope);
+      if (!check.valid) {
+        throw new Error(`assembled bond failed local verification (${check.status})`);
+      }
+      setStage("publishing");
+      const { publishEvent } = await loadNostrCore();
+      const results = await publishEvent(signedEvent);
+      const ok = results.filter((r) => r.ok).length;
+      if (ok === 0) {
+        throw new Error("no relay accepted the bond \xB7 check your connection and retry");
+      }
+      setResult({
+        bindingId: check.valid ? check.binding_id : sdk.bindingId(message),
+        relays: ok,
+        relaysTotal: results.length
+      });
+      setStage("done");
+    } catch (e) {
+      setErr(e instanceof Error ? e.message : "bond publish failed");
+      setStage("sign-btc");
+    }
+  }
+  return /* @__PURE__ */ jsxs("div", { className, style: panelStyle("accent"), "data-oc-identity-bond": "", children: [
+    /* @__PURE__ */ jsx(SectionLabel, { children: "\xA7 identity bond \xB7 publish to nostr" }),
+    stage === "idle" && /* @__PURE__ */ jsxs(Fragment, { children: [
+      /* @__PURE__ */ jsxs("p", { style: bodyStyle, children: [
+        "Publish a ",
+        /* @__PURE__ */ jsx("strong", { children: "Binding Attestation" }),
+        " \u2014 a Bitcoin-signed, Nostr-signed proof that this address and your Nostr key are one identity. It lives on Nostr, verifies with zero trust in OrangeCheck, and means your identity survives even if OC's database does not. Two signatures: your Bitcoin wallet, then your Nostr extension."
+      ] }),
+      /* @__PURE__ */ jsx(FormButtons, { children: /* @__PURE__ */ jsx(
+        "button",
+        {
+          type: "button",
+          onClick: () => void begin(),
+          style: primaryBtnStyle(false),
+          children: "create & publish bond"
+        }
+      ) })
+    ] }),
+    stage === "sign-btc" && /* @__PURE__ */ jsxs(Fragment, { children: [
+      /* @__PURE__ */ jsxs("p", { style: bodyStyle, children: [
+        "Step 1 of 2 \u2014 sign the binding message with the Bitcoin wallet that controls ",
+        /* @__PURE__ */ jsx("span", { style: { fontFamily: MONO, wordBreak: "break-all" }, children: btc }),
+        "."
+      ] }),
+      /* @__PURE__ */ jsx(
+        LazyWalletButton,
+        {
+          address: btc,
+          message,
+          showManual: true,
+          layout: "list",
+          heading: null,
+          onSigned: (sig) => void afterBtcSign(sig),
+          onError: (e) => setErr(e?.message ?? "wallet rejected the signature")
+        }
+      )
+    ] }),
+    (stage === "sign-nostr" || stage === "publishing") && /* @__PURE__ */ jsx("p", { style: bodyStyle, children: stage === "sign-nostr" ? "Step 2 of 2 \u2014 approve the signature in your Nostr extension\u2026" : "Publishing the bond to Nostr\u2026" }),
+    stage === "done" && result && /* @__PURE__ */ jsxs(Fragment, { children: [
+      /* @__PURE__ */ jsx(SectionLabel, { tone: "success", children: "\xA7 bond published" }),
+      /* @__PURE__ */ jsxs("p", { style: bodyStyle, children: [
+        "Your identity bond is live on ",
+        result.relays,
+        "/",
+        result.relaysTotal,
+        " ",
+        "relay",
+        result.relays === 1 ? "" : "s",
+        ". Anyone can now verify the BTC \u21C4 Nostr binding offline."
+      ] }),
+      /* @__PURE__ */ jsxs(
+        "div",
+        {
+          style: {
+            fontFamily: MONO,
+            fontSize: 11,
+            color: V.muted,
+            wordBreak: "break-all"
+          },
+          children: [
+            "binding_id: ",
+            result.bindingId
+          ]
+        }
+      )
+    ] }),
+    err && /* @__PURE__ */ jsx(ErrorLine, { children: err })
+  ] });
+}
+function randomNonceHex() {
+  const b = new Uint8Array(16);
+  if (typeof crypto !== "undefined" && crypto.getRandomValues) {
+    crypto.getRandomValues(b);
+  } else {
+    for (let i = 0; i < 16; i++) b[i] = Math.floor(Math.random() * 256);
+  }
+  let out = "";
+  for (const x of b) out += x.toString(16).padStart(2, "0");
+  return out;
+}
+async function loadSdk() {
+  try {
+    return await import('@orangecheck/sdk');
+  } catch {
+    throw new Error("@orangecheck/sdk not installed \xB7 add it to your site to publish bonds");
+  }
+}
+async function loadNostrCore() {
+  try {
+    return await import('@orangecheck/nostr-core');
+  } catch {
+    throw new Error(
+      "@orangecheck/nostr-core not installed \xB7 add it to your site to publish bonds"
+    );
+  }
+}
 function LazyWalletButton(props) {
   const [Comp, setComp] = React3.useState(null);
   const [failed, setFailed] = React3.useState(false);
@@ -2346,6 +2526,6 @@ function handleSudoRequired(body, args = {}) {
   return false;
 }
 
-export { DEFAULT_CONFIG, OcAccountChip, OcAccountPill, OcAddressInput, OcLinkedIdentities, OcSessionProvider, OcSignIn, OcSignInButton, buildSignInUrl, handleSudoRequired, redirectToSudo, useOcAddressSuggestion, useOcSession, useOptionalOcSession, useStepUpAuth, useWebAuthnList, useWebAuthnRegister };
+export { DEFAULT_CONFIG, OcAccountChip, OcAccountPill, OcAddressInput, OcIdentityBond, OcLinkedIdentities, OcSessionProvider, OcSignIn, OcSignInButton, buildSignInUrl, handleSudoRequired, redirectToSudo, useOcAddressSuggestion, useOcSession, useOptionalOcSession, useStepUpAuth, useWebAuthnList, useWebAuthnRegister };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map