@swype-org/react-sdk 0.1.83 → 0.1.85

package/dist/index.d.cts

@@ -199,7 +199,7 @@ interface UserConfig {
 /** Theme mode */
 type ThemeMode = 'light' | 'dark';
 /** Steps in the payment flow */
-type PaymentStep = 'login' | 'otp-verify' | 'create-passkey' | 'wallet-picker' | 'open-wallet' | 'confirm-sign' | 'deposit' | 'low-balance' | 'processing' | 'select-source' | 'success';
+type PaymentStep = 'login' | 'otp-verify' | 'create-passkey' | 'verify-passkey' | 'wallet-picker' | 'open-wallet' | 'confirm-sign' | 'deposit' | 'low-balance' | 'processing' | 'select-source' | 'success';
 /** User-selected advanced settings for chain/asset override */
 interface AdvancedSettings {
     /** Override asset (e.g. 'USDC', 'USDT'). Null = let backend decide. */
@@ -422,6 +422,10 @@ interface PasskeyPopupOptions {
     timeout?: number;
     /** Populated by `createPasskeyViaPopup`; not set by callers. */
     channelId?: string;
+    /** Privy JWT so the popup can register the passkey server-side. */
+    authToken?: string;
+    /** Core API base URL for server-side passkey registration. */
+    apiBaseUrl?: string;
 }
 /**
  * Opens a same-origin pop-up window on the Swype domain to perform
@@ -433,15 +437,46 @@ interface PasskeyPopupOptions {
  * Falls back to `window.postMessage` for browsers that preserve the
  * opener reference.
  *
+ * When both client-side channels are blocked (Safari ITP partitions
+ * BroadcastChannel by top-level origin), the popup registers the
+ * passkey directly with the backend. On popup close, this function
+ * checks the server for newly registered passkeys as a final fallback.
+ *
  * Must be called from a user-gesture handler (e.g. button click) to
  * avoid the browser's pop-up blocker.
+ *
+ * @param existingCredentialIds - Credential IDs known before the popup
+ *   opens. Used to diff against server state when the popup closes
+ *   without delivering a client-side result.
  */
-declare function createPasskeyViaPopup(options: PasskeyPopupOptions): Promise<{
+declare function createPasskeyViaPopup(options: PasskeyPopupOptions, existingCredentialIds?: string[]): Promise<{
     credentialId: string;
     publicKey: string;
 }>;
+interface PasskeyVerifyPopupOptions {
+    credentialIds: string[];
+    rpId: string;
+    /** Populated by `findDevicePasskeyViaPopup`; not set by callers. */
+    channelId?: string;
+}
+/**
+ * Opens a same-origin pop-up window on the Swype domain to check whether
+ * any of the given passkey credential IDs exist on this device.
+ *
+ * Used as a fallback when Safari blocks `navigator.credentials.get()`
+ * inside a cross-origin iframe. The popup runs on the Swype domain where
+ * the rpId matches, so WebAuthn works.
+ *
+ * Must be called from a user-gesture handler (e.g. button click) to
+ * avoid the browser's pop-up blocker.
+ *
+ * @returns The matching credential ID, or `null` if none matched or the
+ *   popup was closed before completing.
+ */
+declare function findDevicePasskeyViaPopup(options: PasskeyVerifyPopupOptions): Promise<string | null>;
 
 type AccessTokenGetter = () => Promise<string | null | undefined>;
+declare function resolvePasskeyRpId(): string;
 /**
  * Creates a WebAuthn passkey credential.
  * Used for upfront passkey registration before the authorization flow.
@@ -464,10 +499,16 @@ declare function createPasskeyCredential(params: {
  * Builds the {@link PasskeyPopupOptions} for a user. Called by the UI
  * layer when it needs to open the passkey creation pop-up after
  * `createPasskeyCredential` throws {@link PasskeyIframeBlockedError}.
+ *
+ * @param params.authToken - Privy JWT so the popup can register the
+ *   passkey server-side (Safari fallback when BroadcastChannel is blocked).
+ * @param params.apiBaseUrl - Core API base URL for server-side registration.
  */
 declare function buildPasskeyPopupOptions(params: {
     userId: string;
     displayName: string;
+    authToken?: string;
+    apiBaseUrl?: string;
 }): PasskeyPopupOptions;
 /**
  * @deprecated Use {@link findDevicePasskey} instead, which checks all
@@ -707,4 +748,4 @@ interface AdvancedSourceScreenProps {
 }
 declare function AdvancedSourceScreen({ choices, selectedChainName, selectedTokenSymbol, onSelectSource, onBack, }: AdvancedSourceScreenProps): react_jsx_runtime.JSX.Element;
 
-export { type Account, type ActionExecutionResult, type AdvancedSettings, AdvancedSourceScreen, type Amount, type AuthorizationAction, type AuthorizationSession, type AuthorizationSessionDetail, type Chain, CreatePasskeyScreen, type Destination, type ErrorResponse, IconCircle, InfoBanner, type ListResponse, type MerchantAuthorization, type MerchantPublicKey, OutlineButton, PasskeyIframeBlockedError, type PaymentStep, PoweredByFooter, PrimaryButton, type Provider, ScreenHeader, ScreenLayout, SelectSourceScreen, SettingsMenu, SetupScreen, type SourceOption, type SourceSelection, type SourceType, Spinner, type StepItem, StepList, SwypePayment, type SwypePaymentProps, SwypeProvider, type SwypeProviderProps, type ThemeMode, type ThemeTokens, type TokenBalance, type Transfer, type TransferDestination, type UserConfig, type Wallet, type WalletSource, type WalletToken, buildPasskeyPopupOptions, createPasskeyCredential, createPasskeyViaPopup, darkTheme, deviceHasPasskey, findDevicePasskey, getTheme, lightTheme, api as swypeApi, useAuthorizationExecutor, useSwypeConfig, useSwypeDepositAmount, useTransferPolling, useTransferSigning };
+export { type Account, type ActionExecutionResult, type AdvancedSettings, AdvancedSourceScreen, type Amount, type AuthorizationAction, type AuthorizationSession, type AuthorizationSessionDetail, type Chain, CreatePasskeyScreen, type Destination, type ErrorResponse, IconCircle, InfoBanner, type ListResponse, type MerchantAuthorization, type MerchantPublicKey, OutlineButton, PasskeyIframeBlockedError, type PaymentStep, PoweredByFooter, PrimaryButton, type Provider, ScreenHeader, ScreenLayout, SelectSourceScreen, SettingsMenu, SetupScreen, type SourceOption, type SourceSelection, type SourceType, Spinner, type StepItem, StepList, SwypePayment, type SwypePaymentProps, SwypeProvider, type SwypeProviderProps, type ThemeMode, type ThemeTokens, type TokenBalance, type Transfer, type TransferDestination, type UserConfig, type Wallet, type WalletSource, type WalletToken, buildPasskeyPopupOptions, createPasskeyCredential, createPasskeyViaPopup, darkTheme, deviceHasPasskey, findDevicePasskey, findDevicePasskeyViaPopup, getTheme, lightTheme, resolvePasskeyRpId, api as swypeApi, useAuthorizationExecutor, useSwypeConfig, useSwypeDepositAmount, useTransferPolling, useTransferSigning };

package/dist/index.d.ts

@@ -199,7 +199,7 @@ interface UserConfig {
 /** Theme mode */
 type ThemeMode = 'light' | 'dark';
 /** Steps in the payment flow */
-type PaymentStep = 'login' | 'otp-verify' | 'create-passkey' | 'wallet-picker' | 'open-wallet' | 'confirm-sign' | 'deposit' | 'low-balance' | 'processing' | 'select-source' | 'success';
+type PaymentStep = 'login' | 'otp-verify' | 'create-passkey' | 'verify-passkey' | 'wallet-picker' | 'open-wallet' | 'confirm-sign' | 'deposit' | 'low-balance' | 'processing' | 'select-source' | 'success';
 /** User-selected advanced settings for chain/asset override */
 interface AdvancedSettings {
     /** Override asset (e.g. 'USDC', 'USDT'). Null = let backend decide. */
@@ -422,6 +422,10 @@ interface PasskeyPopupOptions {
     timeout?: number;
     /** Populated by `createPasskeyViaPopup`; not set by callers. */
     channelId?: string;
+    /** Privy JWT so the popup can register the passkey server-side. */
+    authToken?: string;
+    /** Core API base URL for server-side passkey registration. */
+    apiBaseUrl?: string;
 }
 /**
  * Opens a same-origin pop-up window on the Swype domain to perform
@@ -433,15 +437,46 @@ interface PasskeyPopupOptions {
  * Falls back to `window.postMessage` for browsers that preserve the
  * opener reference.
  *
+ * When both client-side channels are blocked (Safari ITP partitions
+ * BroadcastChannel by top-level origin), the popup registers the
+ * passkey directly with the backend. On popup close, this function
+ * checks the server for newly registered passkeys as a final fallback.
+ *
  * Must be called from a user-gesture handler (e.g. button click) to
  * avoid the browser's pop-up blocker.
+ *
+ * @param existingCredentialIds - Credential IDs known before the popup
+ *   opens. Used to diff against server state when the popup closes
+ *   without delivering a client-side result.
  */
-declare function createPasskeyViaPopup(options: PasskeyPopupOptions): Promise<{
+declare function createPasskeyViaPopup(options: PasskeyPopupOptions, existingCredentialIds?: string[]): Promise<{
     credentialId: string;
     publicKey: string;
 }>;
+interface PasskeyVerifyPopupOptions {
+    credentialIds: string[];
+    rpId: string;
+    /** Populated by `findDevicePasskeyViaPopup`; not set by callers. */
+    channelId?: string;
+}
+/**
+ * Opens a same-origin pop-up window on the Swype domain to check whether
+ * any of the given passkey credential IDs exist on this device.
+ *
+ * Used as a fallback when Safari blocks `navigator.credentials.get()`
+ * inside a cross-origin iframe. The popup runs on the Swype domain where
+ * the rpId matches, so WebAuthn works.
+ *
+ * Must be called from a user-gesture handler (e.g. button click) to
+ * avoid the browser's pop-up blocker.
+ *
+ * @returns The matching credential ID, or `null` if none matched or the
+ *   popup was closed before completing.
+ */
+declare function findDevicePasskeyViaPopup(options: PasskeyVerifyPopupOptions): Promise<string | null>;
 
 type AccessTokenGetter = () => Promise<string | null | undefined>;
+declare function resolvePasskeyRpId(): string;
 /**
  * Creates a WebAuthn passkey credential.
  * Used for upfront passkey registration before the authorization flow.
@@ -464,10 +499,16 @@ declare function createPasskeyCredential(params: {
  * Builds the {@link PasskeyPopupOptions} for a user. Called by the UI
  * layer when it needs to open the passkey creation pop-up after
  * `createPasskeyCredential` throws {@link PasskeyIframeBlockedError}.
+ *
+ * @param params.authToken - Privy JWT so the popup can register the
+ *   passkey server-side (Safari fallback when BroadcastChannel is blocked).
+ * @param params.apiBaseUrl - Core API base URL for server-side registration.
  */
 declare function buildPasskeyPopupOptions(params: {
     userId: string;
     displayName: string;
+    authToken?: string;
+    apiBaseUrl?: string;
 }): PasskeyPopupOptions;
 /**
  * @deprecated Use {@link findDevicePasskey} instead, which checks all
@@ -707,4 +748,4 @@ interface AdvancedSourceScreenProps {
 }
 declare function AdvancedSourceScreen({ choices, selectedChainName, selectedTokenSymbol, onSelectSource, onBack, }: AdvancedSourceScreenProps): react_jsx_runtime.JSX.Element;
 
-export { type Account, type ActionExecutionResult, type AdvancedSettings, AdvancedSourceScreen, type Amount, type AuthorizationAction, type AuthorizationSession, type AuthorizationSessionDetail, type Chain, CreatePasskeyScreen, type Destination, type ErrorResponse, IconCircle, InfoBanner, type ListResponse, type MerchantAuthorization, type MerchantPublicKey, OutlineButton, PasskeyIframeBlockedError, type PaymentStep, PoweredByFooter, PrimaryButton, type Provider, ScreenHeader, ScreenLayout, SelectSourceScreen, SettingsMenu, SetupScreen, type SourceOption, type SourceSelection, type SourceType, Spinner, type StepItem, StepList, SwypePayment, type SwypePaymentProps, SwypeProvider, type SwypeProviderProps, type ThemeMode, type ThemeTokens, type TokenBalance, type Transfer, type TransferDestination, type UserConfig, type Wallet, type WalletSource, type WalletToken, buildPasskeyPopupOptions, createPasskeyCredential, createPasskeyViaPopup, darkTheme, deviceHasPasskey, findDevicePasskey, getTheme, lightTheme, api as swypeApi, useAuthorizationExecutor, useSwypeConfig, useSwypeDepositAmount, useTransferPolling, useTransferSigning };
+export { type Account, type ActionExecutionResult, type AdvancedSettings, AdvancedSourceScreen, type Amount, type AuthorizationAction, type AuthorizationSession, type AuthorizationSessionDetail, type Chain, CreatePasskeyScreen, type Destination, type ErrorResponse, IconCircle, InfoBanner, type ListResponse, type MerchantAuthorization, type MerchantPublicKey, OutlineButton, PasskeyIframeBlockedError, type PaymentStep, PoweredByFooter, PrimaryButton, type Provider, ScreenHeader, ScreenLayout, SelectSourceScreen, SettingsMenu, SetupScreen, type SourceOption, type SourceSelection, type SourceType, Spinner, type StepItem, StepList, SwypePayment, type SwypePaymentProps, SwypeProvider, type SwypeProviderProps, type ThemeMode, type ThemeTokens, type TokenBalance, type Transfer, type TransferDestination, type UserConfig, type Wallet, type WalletSource, type WalletToken, buildPasskeyPopupOptions, createPasskeyCredential, createPasskeyViaPopup, darkTheme, deviceHasPasskey, findDevicePasskey, findDevicePasskeyViaPopup, getTheme, lightTheme, resolvePasskeyRpId, api as swypeApi, useAuthorizationExecutor, useSwypeConfig, useSwypeDepositAmount, useTransferPolling, useTransferSigning };