@structured-id/ui-core 1.2.0 → 1.3.0

package/README.md

@@ -5,18 +5,22 @@ Shared UI package for StructuredID applications. Provides Vue 3 composables, Pin
 ## What's Inside
 
 - **Proto clients** -- gRPC-Web clients generated from [proto](https://github.com/structured-id/proto) via protobuf-ts
-- **Composables** -- `useAuth`, `useAuthApi`, `useAccountApi`, `useIdentityApi`, `useSecurityLevel`, `useOpaqueAuth`
+- **Composables** -- `createAuth` (password ceremonies over an injected ZKPP client), `useAuthApi`, `useAccountApi`, `useIdentityApi`, `useSecurityLevel`
 - **Components** -- `SidLoginForm`, `SidRegistrationForm`, `SidMfaChallenge`, `SidPrincipalInput`, profile management pages
 - **Utilities** -- `normalizePrincipal`, `detectLoginInputType`, validators, formatters
 
 ## Usage
 
 ```ts
-import { useAuth, getTransport, initGrpc } from "@structured-id/ui-core";
-import { SidLoginForm } from "@structured-id/ui-core/profile";
+import { getTransport, initGrpc } from "@structured-id/ui-core";
+import { SidLoginForm, createAuth } from "@structured-id/ui-core/profile";
+import { loadZkppClient } from "@structured-id/opaque-zkpp";
 
 // Initialize gRPC transport
 initGrpc({ baseUrl: "http://localhost:9080" });
+
+// Password ceremonies (register, login, change, reset) on the app's client
+const { login } = createAuth(() => loadZkppClient());
 ```
 
 ## Development
@@ -32,11 +36,11 @@ yarn typecheck   # vue-tsc --noEmit
 
 ```
 src/
-  composables/     # Vue 3 composition API (useAuth, useAuthApi)
+  composables/     # Vue 3 composition API
   stores/          # Pinia stores (auth)
   profile/         # Profile components and composables
     components/    # SidLoginForm, SidRegistrationForm, SidMfaChallenge
-    composables/   # useOpaqueAuth, useAccountApi, useIdentityApi
+    composables/   # createAuth, useAuthApi, useAccountApi, useIdentityApi
   utils/           # normalizePrincipal, validators, formatters
   generated/       # protobuf-ts generated clients (do not edit)
   proto/           # Proto definitions submodule

package/dist/browser-vp/index.d.cts

@@ -1,7 +1,5 @@
 /**
  * Browser VP types.
- *
- * See arch/auth/browser-vp.md for full specification.
  */
 /** VP strategy — automatically selected based on browser capabilities. */
 type VpStrategy = "prf" | "device-key";
@@ -88,8 +86,6 @@ interface BrowserVpContext {
  * PRF (Pseudo-Random Function) extension allows deriving
  * deterministic secrets from a passkey. Same passkey on any
  * synced device produces the same PRF output → same keys.
- *
- * See arch/auth/browser-vp.md § Strategy A: Passkey-Derived PPK.
  */
 /**
  * Detect whether the browser supports WebAuthn PRF extension.
@@ -125,7 +121,6 @@ declare function createPasskeyWithPrf(userId: ArrayBuffer, userName: string, rpN
  * Cryptographic primitives for Browser VP.
  *
  * All operations use Web Crypto API. Keys are non-extractable.
- * See arch/auth/browser-vp.md § Key derivation.
  */
 
 /**
@@ -188,8 +183,6 @@ declare function sha256(data: ArrayBuffer): Promise<string>;
  * Database: sid-browser-vp
  *   ├── bindings       — per-service binding entries (key: service_sector)
  *   └── profile-state  — profile state + encrypted blob (key: profile_id)
- *
- * See arch/auth/browser-vp.md § IndexedDB Storage Schema.
  */
 
 /** Save or update profile state. */
@@ -218,8 +211,6 @@ declare function isIndexedDbAvailable(): boolean;
  *
  * Builds and signs VPs using cached keys and profile blob.
  * VP creation is fully offline (~50ms with biometric cache).
- *
- * See arch/auth/browser-vp.md § VP Creation.
  */
 
 /**
@@ -256,8 +247,6 @@ declare function getExpiringSoon(): Promise<Array<{
  * - **Strategy B (device-key):** Random WebCrypto key, wrapped for sync.
  *   Each browser = separate device. Fallback for non-PRF browsers.
  *
- * See arch/auth/browser-vp.md for full specification.
- *
  * Reference: Prudnikov, D. (2026). "Client-Side Verifiable Presentation System
  * with Passkey-Derived Persistent Keys and Pairwise Service Bindings."
  * doi:10.5281/zenodo.19387768 — https://doi.org/10.5281/zenodo.19387768

package/dist/browser-vp/index.d.ts

@@ -1,7 +1,5 @@
 /**
  * Browser VP types.
- *
- * See arch/auth/browser-vp.md for full specification.
  */
 /** VP strategy — automatically selected based on browser capabilities. */
 type VpStrategy = "prf" | "device-key";
@@ -88,8 +86,6 @@ interface BrowserVpContext {
  * PRF (Pseudo-Random Function) extension allows deriving
  * deterministic secrets from a passkey. Same passkey on any
  * synced device produces the same PRF output → same keys.
- *
- * See arch/auth/browser-vp.md § Strategy A: Passkey-Derived PPK.
  */
 /**
  * Detect whether the browser supports WebAuthn PRF extension.
@@ -125,7 +121,6 @@ declare function createPasskeyWithPrf(userId: ArrayBuffer, userName: string, rpN
  * Cryptographic primitives for Browser VP.
  *
  * All operations use Web Crypto API. Keys are non-extractable.
- * See arch/auth/browser-vp.md § Key derivation.
  */
 
 /**
@@ -188,8 +183,6 @@ declare function sha256(data: ArrayBuffer): Promise<string>;
  * Database: sid-browser-vp
  *   ├── bindings       — per-service binding entries (key: service_sector)
  *   └── profile-state  — profile state + encrypted blob (key: profile_id)
- *
- * See arch/auth/browser-vp.md § IndexedDB Storage Schema.
  */
 
 /** Save or update profile state. */
@@ -218,8 +211,6 @@ declare function isIndexedDbAvailable(): boolean;
  *
  * Builds and signs VPs using cached keys and profile blob.
  * VP creation is fully offline (~50ms with biometric cache).
- *
- * See arch/auth/browser-vp.md § VP Creation.
  */
 
 /**
@@ -256,8 +247,6 @@ declare function getExpiringSoon(): Promise<Array<{
  * - **Strategy B (device-key):** Random WebCrypto key, wrapped for sync.
  *   Each browser = separate device. Fallback for non-PRF browsers.
  *
- * See arch/auth/browser-vp.md for full specification.
- *
  * Reference: Prudnikov, D. (2026). "Client-Side Verifiable Presentation System
  * with Passkey-Derived Persistent Keys and Pairwise Service Bindings."
  * doi:10.5281/zenodo.19387768 — https://doi.org/10.5281/zenodo.19387768