@tatchi-xyz/sdk 0.16.0 → 0.17.0

package/dist/esm/react/styles/styles.css

@@ -1854,6 +1854,18 @@ body[data-w3a-theme-pulse="1"] .w3a-profile-dropdown-menu {
   cursor: not-allowed;
 }
 
+/* Button-local spinner: match text size inside buttons */
+.w3a-link-device-btn .w3a-spinner {
+  width: 1em;
+  height: 1em;
+  border-width: 2px;
+}
+
+.w3a-link-device-btn-primary .w3a-spinner {
+  border-color: rgba(255, 255, 255, 0.35);
+  border-top-color: #ffffff;
+}
+
 /* Email recovery slide */
 .w3a-email-recovery-content {
   width: 100%;
@@ -1958,6 +1970,7 @@ body[data-w3a-theme-pulse="1"] .w3a-profile-dropdown-menu {
   border: 1px solid var(--w3a-colors-borderPrimary);
   background: var(--w3a-colors-surface);
   color: var(--w3a-colors-textPrimary);
+  margin-bottom: 0.5rem;
 }
 
 .w3a-email-recovery-status.is-error {

package/dist/esm/sdk/{safari-fallbacks-oQKu9xUs.js → WebAuthnFallbacks-Bl4BTsNt.js}

@@ -60,92 +60,75 @@ var init_validation = __esm({ "src/utils/validation.ts": (() => {}) });
 
 //#endregion
 //#region src/react/deviceDetection.ts
-/**
-* Detects the current device type based on multiple indicators
-*/
-const detectDeviceType = () => {
-	const userAgent = navigator.userAgent.toLowerCase();
-	const isMobileUA = /android|iphone|ipod|blackberry|iemobile|opera mini/i.test(userAgent);
-	const isTabletUA = /ipad|tablet|kindle|playbook|silk/i.test(userAgent);
-	const isTouchDevice = navigator.maxTouchPoints > 0;
-	const screenWidth = window.screen.width;
-	const isSmallScreen = screenWidth <= 480;
-	const isMediumScreen = screenWidth <= 1024;
-	const hasOrientation = "orientation" in window;
-	if (isMobileUA || isTouchDevice && isSmallScreen) return "mobile";
-	if (isTabletUA || isTouchDevice && isMediumScreen && hasOrientation) return "tablet";
-	return "desktop";
-};
-/**
-* Basic Safari detection (desktop Safari). Note: all iOS browsers use WebKit,
-* so use isIOS() to capture iOS Safari-like restrictions.
-*/
-const isSafari = () => {
-	try {
-		const ua = navigator.userAgent;
-		const isSafariEngine = /safari/i.test(ua) && !/chrome|crios|crmo|chromium|edg|edge|opr|opera|brave/i.test(ua);
-		return isSafariEngine;
-	} catch {
-		return false;
-	}
-};
-/**
-* Detect iOS (covers iPhone/iPad/iPod and iPadOS with desktop UA).
-* iOS has WebAuthn user-activation quirks that are shared by all iOS browsers.
-*/
-const isIOS = () => {
-	try {
-		const ua = navigator.userAgent;
-		const platform = navigator.platform || "";
-		const maxTouch = Number(navigator.maxTouchPoints || 0);
-		const iOSUA = /iPad|iPhone|iPod/.test(ua);
-		const iPadOSMacLike = /Macintosh/.test(ua) && maxTouch > 1;
-		const iOSPlatform = /iPad|iPhone|iPod/.test(platform);
-		return iOSUA || iPadOSMacLike || iOSPlatform;
-	} catch {
-		return false;
-	}
-};
-/**
-* Returns true when the page currently has a transient user activation
-* (click/tap/key within the allowed time window).
-*/
-const hasActiveUserActivation = () => {
-	try {
-		const ua = navigator.userActivation;
-		return !!(ua && typeof ua.isActive === "boolean" && ua.isActive);
-	} catch {
-		return false;
-	}
-};
-/**
-* Heuristic: when on Safari/iOS or on a mobile device AND no active user
-* activation, we should surface a clickable UI to capture activation.
-*/
-const needsExplicitActivation = () => {
-	try {
-		if (hasActiveUserActivation()) return false;
-		return isIOS() || isMobileDevice() || isSafari();
-	} catch {
-		return false;
-	}
-};
-/**
-* Check if the current device is likely mobile
-*/
-const isMobileDevice = () => {
-	return detectDeviceType() === "mobile";
-};
+var detectDeviceType, isSafari, isIOS, hasActiveUserActivation, needsExplicitActivation, isMobileDevice;
+var init_deviceDetection = __esm({ "src/react/deviceDetection.ts": (() => {
+	detectDeviceType = () => {
+		const userAgent = navigator.userAgent.toLowerCase();
+		const isMobileUA = /android|iphone|ipod|blackberry|iemobile|opera mini/i.test(userAgent);
+		const isTabletUA = /ipad|tablet|kindle|playbook|silk/i.test(userAgent);
+		const isTouchDevice = navigator.maxTouchPoints > 0;
+		const screenWidth = window.screen.width;
+		const isSmallScreen = screenWidth <= 480;
+		const isMediumScreen = screenWidth <= 1024;
+		const hasOrientation = "orientation" in window;
+		if (isMobileUA || isTouchDevice && isSmallScreen) return "mobile";
+		if (isTabletUA || isTouchDevice && isMediumScreen && hasOrientation) return "tablet";
+		return "desktop";
+	};
+	isSafari = () => {
+		try {
+			const ua = navigator.userAgent;
+			const isSafariEngine = /safari/i.test(ua) && !/chrome|crios|crmo|chromium|edg|edge|opr|opera|brave/i.test(ua);
+			return isSafariEngine;
+		} catch {
+			return false;
+		}
+	};
+	isIOS = () => {
+		try {
+			const ua = navigator.userAgent;
+			const platform = navigator.platform || "";
+			const maxTouch = Number(navigator.maxTouchPoints || 0);
+			const iOSUA = /iPad|iPhone|iPod/.test(ua);
+			const iPadOSMacLike = /Macintosh/.test(ua) && maxTouch > 1;
+			const iOSPlatform = /iPad|iPhone|iPod/.test(platform);
+			return iOSUA || iPadOSMacLike || iOSPlatform;
+		} catch {
+			return false;
+		}
+	};
+	hasActiveUserActivation = () => {
+		try {
+			const ua = navigator.userActivation;
+			return !!(ua && typeof ua.isActive === "boolean" && ua.isActive);
+		} catch {
+			return false;
+		}
+	};
+	needsExplicitActivation = () => {
+		try {
+			if (hasActiveUserActivation()) return false;
+			return isIOS() || isMobileDevice() || isSafari();
+		} catch {
+			return false;
+		}
+	};
+	isMobileDevice = () => {
+		return detectDeviceType() === "mobile";
+	};
+}) });
 
 //#endregion
 //#region src/utils/index.ts
-init_encoders();
-init_validation();
-init_errors();
+var init_utils = __esm({ "src/utils/index.ts": (() => {
+	init_encoders();
+	init_validation();
+	init_errors();
+	init_deviceDetection();
+}) });
 
 //#endregion
 //#region src/core/WebAuthnManager/credentialsHelpers.ts
-init_validation$1();
 /**
 * Serialize PublicKeyCredential for both authentication and registration for WASM worker
 * - Uses base64url encoding for WASM compatibility
@@ -419,15 +402,13 @@ function normalizeClientExtensionOutputs(input) {
 	}
 	return out;
 }
+var init_credentialsHelpers = __esm({ "src/core/WebAuthnManager/credentialsHelpers.ts": (() => {
+	init_utils();
+	init_validation$1();
+}) });
 
 //#endregion
 //#region src/core/WebAuthnManager/WebAuthnFallbacks/safari-fallbacks.ts
-const WebAuthnBridgeMessage = {
-	Create: "WALLET_WEBAUTHN_CREATE",
-	Get: "WALLET_WEBAUTHN_GET",
-	CreateResult: "WALLET_WEBAUTHN_CREATE_RESULT",
-	GetResult: "WALLET_WEBAUTHN_GET_RESULT"
-};
 function getResultTypeFor(kind) {
 	return kind === WebAuthnBridgeMessage.Get ? WebAuthnBridgeMessage.GetResult : WebAuthnBridgeMessage.CreateResult;
 }
@@ -530,54 +511,6 @@ async function requestParentDomainWebAuthn(kind, publicKey, client, timeoutMs) {
 	if (kind === "create") return client.request(WebAuthnBridgeMessage.Create, publicKey, timeoutMs);
 	return client.request(WebAuthnBridgeMessage.Get, publicKey, timeoutMs);
 }
-var WindowParentDomainWebAuthnClient = class {
-	async request(kind, publicKey, timeoutMs = 6e4) {
-		const requestId = `${kind}:${Date.now()}:${Math.random().toString(36).slice(2)}`;
-		const resultType = getResultTypeFor(kind);
-		return new Promise((resolve) => {
-			let settled = false;
-			const finish = (val) => {
-				if (!settled) {
-					settled = true;
-					resolve(val);
-				}
-			};
-			const onMessage = (ev) => {
-				const payload = ev?.data;
-				if (!payload || typeof payload.type !== "string") return;
-				const t = payload.type;
-				if (t !== resultType) return;
-				const rid = payload.requestId;
-				if (rid !== requestId) return;
-				window.removeEventListener("message", onMessage);
-				const ok = !!payload.ok;
-				const cred = payload.credential;
-				const err = payload.error;
-				if (ok && cred) return finish({
-					ok: true,
-					credential: cred
-				});
-				return finish({
-					ok: false,
-					error: typeof err === "string" ? err : void 0
-				});
-			};
-			window.addEventListener("message", onMessage);
-			window.parent?.postMessage({
-				type: kind,
-				requestId,
-				publicKey
-			}, "*");
-			setTimeout(() => {
-				window.removeEventListener("message", onMessage);
-				finish({
-					ok: false,
-					timeout: true
-				});
-			}, timeoutMs);
-		});
-	}
-};
 function notAllowedError(message) {
 	const e = new Error(message);
 	e.name = "NotAllowedError";
@@ -614,6 +547,69 @@ async function attemptRefocus(maxRetries = 2, delays = [50, 120]) {
 	}
 	return document.hasFocus();
 }
+var WebAuthnBridgeMessage, WindowParentDomainWebAuthnClient;
+var init_safari_fallbacks = __esm({ "src/core/WebAuthnManager/WebAuthnFallbacks/safari-fallbacks.ts": (() => {
+	WebAuthnBridgeMessage = {
+		Create: "WALLET_WEBAUTHN_CREATE",
+		Get: "WALLET_WEBAUTHN_GET",
+		CreateResult: "WALLET_WEBAUTHN_CREATE_RESULT",
+		GetResult: "WALLET_WEBAUTHN_GET_RESULT"
+	};
+	WindowParentDomainWebAuthnClient = class {
+		async request(kind, publicKey, timeoutMs = 6e4) {
+			const requestId = `${kind}:${Date.now()}:${Math.random().toString(36).slice(2)}`;
+			const resultType = getResultTypeFor(kind);
+			return new Promise((resolve) => {
+				let settled = false;
+				const finish = (val) => {
+					if (!settled) {
+						settled = true;
+						resolve(val);
+					}
+				};
+				const onMessage = (ev) => {
+					const payload = ev?.data;
+					if (!payload || typeof payload.type !== "string") return;
+					const t = payload.type;
+					if (t !== resultType) return;
+					const rid = payload.requestId;
+					if (rid !== requestId) return;
+					window.removeEventListener("message", onMessage);
+					const ok = !!payload.ok;
+					const cred = payload.credential;
+					const err = payload.error;
+					if (ok && cred) return finish({
+						ok: true,
+						credential: cred
+					});
+					return finish({
+						ok: false,
+						error: typeof err === "string" ? err : void 0
+					});
+				};
+				window.addEventListener("message", onMessage);
+				window.parent?.postMessage({
+					type: kind,
+					requestId,
+					publicKey
+				}, "*");
+				setTimeout(() => {
+					window.removeEventListener("message", onMessage);
+					finish({
+						ok: false,
+						timeout: true
+					});
+				}, timeoutMs);
+			});
+		}
+	};
+}) });
+
+//#endregion
+//#region src/core/WebAuthnManager/WebAuthnFallbacks/index.ts
+var init_WebAuthnFallbacks = __esm({ "src/core/WebAuthnManager/WebAuthnFallbacks/index.ts": (() => {
+	init_safari_fallbacks();
+}) });
 
 //#endregion
-export { WebAuthnBridgeMessage, executeWebAuthnWithParentFallbacksSafari, generateChaCha20Salt, generateEd25519Salt, init_validation, isSerializedRegistrationCredential, needsExplicitActivation, normalizeRegistrationCredential, removePrfOutputGuard, serializeAuthenticationCredentialWithPRF, serializeRegistrationCredential, serializeRegistrationCredentialWithPRF, validateNearAccountId };
+export { WebAuthnBridgeMessage, executeWebAuthnWithParentFallbacksSafari, generateChaCha20Salt, generateEd25519Salt, init_WebAuthnFallbacks, init_credentialsHelpers, init_utils, init_validation, isSerializedRegistrationCredential, needsExplicitActivation, normalizeRegistrationCredential, removePrfOutputGuard, serializeAuthenticationCredentialWithPRF, serializeRegistrationCredential, serializeRegistrationCredentialWithPRF, validateNearAccountId };

package/dist/esm/sdk/{createAdapters-pNiL2KNq.js → createAdapters-BumKM2ft.js}

@@ -58,6 +58,7 @@ async function maybeRefreshVrfChallenge(ctx, request, nearAccountId) {
 	const rpId = ctx.touchIdPrompt.getRpId();
 	const vrfWorkerManager = ctx.vrfWorkerManager;
 	if (!vrfWorkerManager) throw new Error("VrfWorkerManager not available");
+	if (!ctx.nonceManager.nearAccountId || !ctx.nonceManager.nearPublicKeyStr || String(ctx.nonceManager.nearAccountId) !== String(nearAccountId)) throw new Error("NonceManager not initialized with user data");
 	const attempts = 3;
 	return await retryWithBackoff(async (attempt) => {
 		const latestCtx = await ctx.nonceManager.getNonceBlockHashAndHeight(ctx.nearClient, { force: true });
@@ -1998,8 +1999,8 @@ var DrawerTxConfirmerElement = class extends LitElementWithProps {
                   ${this.vrfChallenge?.blockHeight ? x`block ${this.vrfChallenge.blockHeight}` : ""}
                 </span>
               </div>
-              ${this.body && this.body.trim() ? x`<div class="rpid-body">${this.body}</div>` : ""}
             </div>
+            ${this.body && this.body.trim() ? x`<div class="confirmation-body">${this.body}</div>` : ""}
           </div>
           <div class="section responsive-card responsive-card-center">
             <w3a-tx-confirm-content
@@ -2435,68 +2436,68 @@ var ModalTxConfirmElement = class extends LitElementWithProps {
         <div class="modal-container-root">
 
           <div class="responsive-card">
-              <div class="hero">
-                <w3a-passkey-halo-loading
-                  .theme=${this.theme}
-                  .animated=${!this.errorMessage ? true : false}
-                  .ringGap=${4}
-                  .ringWidth=${4}
-                  .ringBorderRadius=${"1.125rem"}
-                  .ringBackground=${"var(--w3a-modal__passkey-halo-loading__ring-background)"}
-                  .innerPadding=${"0px"}
-                  .innerBackground=${"var(--w3a-modal__passkey-halo-loading__inner-background)"}
-                  .height=${36}
-                  .width=${36}
-                ></w3a-passkey-halo-loading>
-                <div class="hero-container">
-                  <!-- Hero heading -->
-                  ${(() => {
+            <div class="hero">
+              <w3a-passkey-halo-loading
+                .theme=${this.theme}
+                .animated=${!this.errorMessage ? true : false}
+                .ringGap=${4}
+                .ringWidth=${4}
+                .ringBorderRadius=${"1.125rem"}
+                .ringBackground=${"var(--w3a-modal__passkey-halo-loading__ring-background)"}
+                .innerPadding=${"0px"}
+                .innerBackground=${"var(--w3a-modal__passkey-halo-loading__inner-background)"}
+                .height=${36}
+                .width=${36}
+              ></w3a-passkey-halo-loading>
+              <div class="hero-container">
+                <!-- Hero heading -->
+                ${(() => {
 			const isRegistration = (this.txSigningRequests?.length || 0) === 0;
 			const fallback = isRegistration ? "Register with Passkey" : "Confirm with Passkey";
 			const titleText = (this.title || "").trim();
 			const heading = titleText || fallback;
 			return x`<h2 class="hero-heading">${heading}</h2>`;
 		})()}
-                  ${this.errorMessage ? x`<div class="error-banner">${this.errorMessage}</div>` : ""}
-                  <!-- RpID Section -->
-                  <div class="rpid-wrapper">
-                    <div class="rpid">
-                      <div class="secure-indicator">
-                        <svg xmlns="http://www.w3.org/2000/svg"
-                          class="padlock-icon"
-                          viewBox="0 0 24 24"
-                          fill="none"
-                          stroke="currentColor"
-                          stroke-width="2"
-                          stroke-linecap="round"
-                          stroke-linejoin="round"
-                        >
-                          <rect width="18" height="11" x="3" y="11" rx="2" ry="2"/>
-                          <path d="M7 11V7a5 5 0 0 1 10 0v4"/>
-                        </svg>
-                        ${this.vrfChallenge?.rpId ? x`<span class="domain-text">${this.vrfChallenge.rpId}</span>` : ""}
-                      </div>
-                      <span class="security-details">
-                        <svg xmlns="http://www.w3.org/2000/svg"
-                          class="block-height-icon"
-                          viewBox="0 0 24 24"
-                          fill="none"
-                          stroke="currentColor"
-                          stroke-width="2"
-                          stroke-linecap="round"
-                          stroke-linejoin="round"
-                        >
-                          <path d="M21 8a2 2 0 0 0-1-1.73l-7-4a2 2 0 0 0-2 0l-7 4A 2 2 0 0 0 3 8v8a2 2 0 0 0 1 1.73l7 4a2 2 0 0 0 2 0l7-4A2 2 0 0 0 21 16Z"/>
-                          <path d="m3.3 7 8.7 5 8.7-5"/>
-                          <path d="M12 22V12"/>
-                        </svg>
-                        ${this.vrfChallenge?.blockHeight ? x`block ${this.vrfChallenge.blockHeight}` : ""}
-                      </span>
+                ${this.errorMessage ? x`<div class="error-banner">${this.errorMessage}</div>` : ""}
+                <!-- RpID Section -->
+                <div class="rpid-wrapper">
+                  <div class="rpid">
+                    <div class="secure-indicator">
+                      <svg xmlns="http://www.w3.org/2000/svg"
+                        class="padlock-icon"
+                        viewBox="0 0 24 24"
+                        fill="none"
+                        stroke="currentColor"
+                        stroke-width="2"
+                        stroke-linecap="round"
+                        stroke-linejoin="round"
+                      >
+                        <rect width="18" height="11" x="3" y="11" rx="2" ry="2"/>
+                        <path d="M7 11V7a5 5 0 0 1 10 0v4"/>
+                      </svg>
+                      ${this.vrfChallenge?.rpId ? x`<span class="domain-text">${this.vrfChallenge.rpId}</span>` : ""}
                     </div>
-                    ${this.body && this.body.trim() ? x`<div class="rpid-body">${this.body}</div>` : ""}
+                    <span class="security-details">
+                      <svg xmlns="http://www.w3.org/2000/svg"
+                        class="block-height-icon"
+                        viewBox="0 0 24 24"
+                        fill="none"
+                        stroke="currentColor"
+                        stroke-width="2"
+                        stroke-linecap="round"
+                        stroke-linejoin="round"
+                      >
+                        <path d="M21 8a2 2 0 0 0-1-1.73l-7-4a2 2 0 0 0-2 0l-7 4A 2 2 0 0 0 3 8v8a2 2 0 0 0 1 1.73l7 4a2 2 0 0 0 2 0l7-4A2 2 0 0 0 21 16Z"/>
+                        <path d="m3.3 7 8.7 5 8.7-5"/>
+                        <path d="M12 22V12"/>
+                      </svg>
+                      ${this.vrfChallenge?.blockHeight ? x`block ${this.vrfChallenge.blockHeight}` : ""}
+                    </span>
                   </div>
                 </div>
               </div>
+            </div>
+            ${this.body && this.body.trim() ? x`<div class="confirmation-body">${this.body}</div>` : ""}
           </div>
 
           <div class="responsive-card">
@@ -3081,6 +3082,10 @@ async function collectAuthenticationCredentialWithPRF({ ctx, nearAccountId, vrfC
 	const authenticators = await ctx.indexedDB.clientDB.getAuthenticatorsByUser(toAccountId(nearAccountId));
 	const { authenticatorsForPrompt, wrongPasskeyError } = await ctx.indexedDB.clientDB.ensureCurrentPasskey(toAccountId(nearAccountId), authenticators);
 	if (wrongPasskeyError) throw new Error(wrongPasskeyError);
+	if (authenticatorsForPrompt.length === 1) {
+		const expectedVrfPublicKey = authenticatorsForPrompt[0]?.vrfPublicKey;
+		if (expectedVrfPublicKey && expectedVrfPublicKey !== vrfChallenge.vrfPublicKey) throw new Error("Signing session is using a different passkey/VRF session than the current device. Please log in again and retry.");
+	}
 	onBeforePrompt?.({
 		authenticators,
 		authenticatorsForPrompt,
@@ -3194,4 +3199,4 @@ function createConfirmTxFlowAdapters(ctx) {
 
 //#endregion
 export { createConfirmSession, createConfirmTxFlowAdapters };
-//# sourceMappingURL=createAdapters-pNiL2KNq.js.map
+//# sourceMappingURL=createAdapters-BumKM2ft.js.map