@solarpunkltd/swarm-id 0.8.1 → 0.9.0

package/dist/utils/storage-probe.d.ts

@@ -1,13 +1,16 @@
 /**
- * Whether the proxy iframe can read the trusted domain's first-party store —
+ * Whether a Swarm ID frame can read the trusted domain's first-party store,
  * asked BEFORE authentication, because it decides which transport the auth
- * popup has to take (#613).
+ * popup has to take (#613). Both frames a site embeds read it: the session
+ * frame, to tell the client whether `connect()` can work, and the button
+ * frame, to decide whether to leave the popup's challenge in storage.
  *
  * The mirror image of the probe the connect popup already runs: there, the
- * iframe writes a challenge and the popup checks whether it can read it back
- * first-party (`ui/src/lib/stores/connect.svelte.ts`). That answer arrives far
- * too late to choose a transport, so the same question is asked the other way
- * round — the first-party app leaves a marker, and the iframe reads it back.
+ * button frame writes a challenge and the popup checks whether it can read it
+ * back first-party (`ui/src/lib/stores/connect.svelte.ts`). That answer
+ * arrives far too late to choose a transport, so the same question is asked
+ * the other way round: the first-party app leaves a marker, and the frames
+ * read it back.
  *
  * Deliberately NOT any of these:
  *
@@ -24,7 +27,14 @@
  * The marker only ever answers YES with certainty. Absent means "not proven
  * shared" — a partitioned iframe, or a browser that has never had the SwarmID
  * site open at the top level — and the caller treats that as partitioned,
- * which is the safe direction: the delegated transport works in both modes.
+ * which is the safe direction: the handover through the Swarm ID button works
+ * in both modes.
+ *
+ * The marker is sealed, because the keys in that store are: a frame that sees
+ * the store but not the IndexedDB key that opens it sees no session in it.
+ * Playwright's WebKit gives a cross-site frame exactly that, one
+ * `localStorage` and its own IndexedDB (measured 2026-10-15), and a plain
+ * marker had it wait for a storage write it could never read.
  */
 export declare const STORAGE_SHARED_KEY = "swarm-id-first-party";
 /**
@@ -35,6 +45,6 @@ export declare const STORAGE_SHARED_KEY = "swarm-id-first-party";
  * bucket and make the iframe report itself shared — the one wrong answer this
  * must never give.
  */
-export declare function markFirstPartyStorage(): void;
-/** Whether this context can see the marker a first-party page left. */
-export declare function isStorageShared(): boolean;
+export declare function markFirstPartyStorage(): Promise<void>;
+/** Whether this context can see, and open, the marker a first-party page left. */
+export declare function isStorageShared(): Promise<boolean>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solarpunkltd/swarm-id",
-  "version": "0.8.1",
+  "version": "0.9.0",
   "type": "module",
   "description": "Swarm ID library for authentication and Bee API operations",
   "main": "dist/swarm-id.esm.js",
@@ -19,6 +19,25 @@
   "files": [
     "dist"
   ],
+  "scripts": {
+    "build": "rollup -c",
+    "build:watch": "rollup -c -w",
+    "clean": "rm -rf dist",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:integration": "vitest run --config vitest.integration.config.ts",
+    "test:live": "vitest run --config vitest.live.config.ts",
+    "test:ui": "vitest --ui",
+    "test:coverage": "vitest run --coverage",
+    "lint": "eslint .",
+    "lint:fix": "eslint . --fix",
+    "format": "prettier --write \"src/**/*.ts\" \"test/**/*.ts\"",
+    "format:check": "prettier --check \"src/**/*.ts\" \"test/**/*.ts\"",
+    "typecheck": "tsc --noEmit -p tsconfig.check.json",
+    "check:all": "pnpm format:check && pnpm lint && pnpm typecheck && pnpm test",
+    "prepack": "npm run clean && npm run build",
+    "check:pack": "node dev/check-pack.js"
+  },
   "keywords": [
     "swarm",
     "identity",
@@ -52,6 +71,8 @@
     "@rollup/plugin-replace": "6.0.3",
     "@rollup/plugin-terser": "0.4.4",
     "@rollup/plugin-typescript": "12.3.0",
+    "@swarm-id/eslint-rules": "workspace:*",
+    "@swarm-id/signaling": "workspace:*",
     "@types/node": "24.10.1",
     "@typescript-eslint/eslint-plugin": "8.69.0",
     "@typescript-eslint/parser": "8.69.0",
@@ -62,9 +83,7 @@
     "rollup": "4.53.3",
     "tslib": "2.8.1",
     "typescript": "5.8.3",
-    "vitest": "4.0.14",
-    "@swarm-id/signaling": "0.1.0",
-    "@swarm-id/eslint-rules": "0.0.0"
+    "vitest": "4.0.14"
   },
   "engines": {
     "node": ">=22",
@@ -72,23 +91,5 @@
   },
   "publishConfig": {
     "access": "public"
-  },
-  "scripts": {
-    "build": "rollup -c",
-    "build:watch": "rollup -c -w",
-    "clean": "rm -rf dist",
-    "test": "vitest run",
-    "test:watch": "vitest",
-    "test:integration": "vitest run --config vitest.integration.config.ts",
-    "test:live": "vitest run --config vitest.live.config.ts",
-    "test:ui": "vitest --ui",
-    "test:coverage": "vitest run --coverage",
-    "lint": "eslint .",
-    "lint:fix": "eslint . --fix",
-    "format": "prettier --write \"src/**/*.ts\" \"test/**/*.ts\"",
-    "format:check": "prettier --check \"src/**/*.ts\" \"test/**/*.ts\"",
-    "typecheck": "tsc --noEmit -p tsconfig.check.json",
-    "check:all": "pnpm format:check && pnpm lint && pnpm typecheck && pnpm test",
-    "check:pack": "node dev/check-pack.js"
   }
-}
+}