@x1id/resolve 0.23.0 → 0.44.0

package/dist/giftLink.js

@@ -0,0 +1,452 @@
+/**
+ * Open gift links (docs/specs/gift-links.md): send XNT or a prepaid `@name` to
+ * whoever opens a link. Instruction builders, the `GiftLink` decoder, the PDA
+ * finder and the client helpers that make / parse the link itself.
+ *
+ * # How it works
+ *
+ * 1. The sender's client generates a fresh EPHEMERAL ed25519 keypair
+ *    ({@link newGiftLinkKey}). Its public key is the `gift_key`; its secret
+ *    goes ONLY into the link's URL fragment ({@link giftLinkUrl}):
+ *    `https://app.x1id.io/gift/link#k=<base58 64-byte secret key>`. A fragment
+ *    is never sent to a server.
+ * 2. `create_gift_link` (sender + gift key sign) escrows the value under
+ *    `["gift", gift_key]` ({@link findGiftLinkPda}).
+ * 3. The recipient opens the link ({@link parseGiftLinkUrl}) and submits
+ *    `claim_gift_link` (XNT) or `claim_gift_link_name` (a name, minted as a
+ *    pNFT) SIGNED BY THE GIFT KEY, naming their own wallet as destination.
+ *    Any wallet may pay the fee (a relayer works). Because the destination is
+ *    part of the gift-key-signed message, nobody who sees the claim in flight
+ *    can redirect it (unlike the removed open vouchers, audit S6).
+ * 4. Unclaimed: the sender may cancel ({@link buildRefundGiftLinkIx}) any time;
+ *    after `expiresAt` anyone may return it to the sender.
+ *
+ * Whoever holds the link can claim the gift: treat it like cash. Never reuse a
+ * gift key (generate one per link).
+ *
+ * Routed through the program's `fallback` (`extra_ix`): `sha256("global:<name>")
+ * [..8]` + raw Borsh, accounts exactly in the order of the program's
+ * `Accounts` structs. Hand-rolled, no web3.js. Key generation uses WebCrypto
+ * Ed25519 (Node 20+, current browsers); pass your own key if unavailable.
+ */
+import { encodeBase58, decodeBase58, decodeBase58_32 } from "./base58.js";
+import { buildTokenizedTailKeys } from "./mintNft.js";
+// Imported WITHOUT re-export (voucher.ts owns them) so `export *` can't collide.
+import { MAX_VOUCHER_DURATION_SECS } from "./voucher.js";
+// ---------------------------------------------------------------------------
+// constants (mirror programs/x1-handles/src/{lib,state}.rs)
+// ---------------------------------------------------------------------------
+/** Seed prefix of the escrow PDA: `["gift", gift_key]`. */
+export const GIFT_LINK_SEED = "gift";
+/** Allocated size of a `GiftLink` (8-byte discriminator + `INIT_SPACE`). */
+export const GIFT_LINK_ACCOUNT_LEN = 8 + 160;
+/** Longest a gift link may stay open (same cap as vouchers: 366 days). */
+export const MAX_GIFT_LINK_DURATION_SECS = MAX_VOUCHER_DURATION_SECS;
+/** Where the app opens gift links. The secret goes after `#k=`. */
+export const GIFT_LINK_BASE_URL = "https://app.x1id.io/gift/link";
+/** A sensible client default for `expiresAt`: 30 days. */
+export const DEFAULT_GIFT_LINK_TTL_SECS = 30 * 24 * 60 * 60;
+/** Compute-unit limit to request for `claim_gift_link_name` (measured
+ *  ~307k on litesvm with the real Metaplex program; same headroom as
+ *  `REGISTER_TOKENIZED_CU_LIMIT`). */
+export const CLAIM_GIFT_LINK_NAME_CU_LIMIT = 420_000;
+/** `GiftLink.kind` (Borsh enum index). */
+export const GIFT_KIND = { Xnt: 0, Name: 1 };
+const d8 = (...b) => Uint8Array.from(b);
+/** `sha256("global:create_gift_link")[..8]`. */
+export const CREATE_GIFT_LINK_DISCRIMINATOR = d8(22, 78, 111, 117, 203, 197, 112, 35);
+/** `sha256("global:claim_gift_link")[..8]`. */
+export const CLAIM_GIFT_LINK_DISCRIMINATOR = d8(4, 52, 143, 19, 13, 156, 134, 62);
+/** `sha256("global:claim_gift_link_name")[..8]`. */
+export const CLAIM_GIFT_LINK_NAME_DISCRIMINATOR = d8(63, 204, 162, 126, 81, 187, 255, 7);
+/** `sha256("global:refund_gift_link")[..8]`. */
+export const REFUND_GIFT_LINK_DISCRIMINATOR = d8(193, 56, 128, 242, 206, 118, 202, 148);
+/** `sha256("account:GiftLink")[..8]`. */
+export const GIFT_LINK_ACCOUNT_DISCRIMINATOR = d8(87, 159, 144, 200, 207, 135, 54, 251);
+/** Byte offsets inside a raw `GiftLink` (fixed up to `integrator`), for
+ *  `getProgramAccounts` `memcmp` filters (e.g. a sender's open links). */
+export const GIFT_LINK_OFFSETS = {
+    version: 8,
+    sender: 9,
+    giftKey: 41,
+    kind: 73,
+    amount: 74,
+    name: 82,
+    nameLen: 114,
+    handleType: 115,
+    integrator: 116,
+};
+/** Program error codes added for gift links (`RegistryError`). Gift links
+ *  also reuse `VoucherNameRegistered` (6057), `BadVoucherExpiry` (6058),
+ *  `PriceBelowRent` (6086), `ProtocolLockedDown` (6102) and
+ *  `VoucherExpiryTooFar` (6112). */
+export const GIFT_LINK_ERRORS = {
+    GiftAmountInvalid: 6151,
+    GiftLinkExpired: 6152,
+    GiftLinkWrongKind: 6153,
+    GiftLinkBadDestination: 6154,
+    GiftLinkNotRefundable: 6155,
+    GiftLinkNameReserved: 6156,
+    /** `gift_key == sender` (Sentinel run-011; 6158-6229 are upgrade 6's). */
+    GiftLinkKeyIsSender: 6231,
+};
+const SYSTEM_PROGRAM = "11111111111111111111111111111111";
+const TE = new TextEncoder();
+const U64_MAX = 0xffffffffffffffffn;
+const I64_MAX = 0x7fffffffffffffffn;
+// ---------------------------------------------------------------------------
+// encoding helpers
+// ---------------------------------------------------------------------------
+function toBytes32(v, what) {
+    if (typeof v === "string") {
+        const b = decodeBase58_32(v);
+        if (!b)
+            throw new Error(`${what} is not a valid base58 address`);
+        return b;
+    }
+    if (v.length !== 32)
+        throw new Error(`${what} must be exactly 32 bytes`);
+    return v;
+}
+function toBase58(v, what) {
+    return encodeBase58(toBytes32(v, what));
+}
+function key(pubkey, what, isSigner, isWritable) {
+    return { pubkey: toBase58(pubkey, what), isSigner, isWritable };
+}
+function concat(...parts) {
+    const out = new Uint8Array(parts.reduce((a, p) => a + p.length, 0));
+    let o = 0;
+    for (const p of parts) {
+        out.set(p, o);
+        o += p.length;
+    }
+    return out;
+}
+function u64le(v) {
+    const out = new Uint8Array(8);
+    new DataView(out.buffer).setBigUint64(0, v, true);
+    return out;
+}
+function i64le(v) {
+    const out = new Uint8Array(8);
+    new DataView(out.buffer).setBigInt64(0, v, true);
+    return out;
+}
+function encString(s) {
+    const bytes = TE.encode(s);
+    const out = new Uint8Array(4 + bytes.length);
+    new DataView(out.buffer).setUint32(0, bytes.length, true);
+    out.set(bytes, 4);
+    return out;
+}
+function subtle() {
+    const c = globalThis.crypto;
+    if (!c?.subtle)
+        throw new Error("WebCrypto is not available; pass your own gift key");
+    return c.subtle;
+}
+/** PKCS#8 prefix of an Ed25519 private key (RFC 8410): the 32-byte seed follows. */
+const PKCS8_ED25519_PREFIX = Uint8Array.from([
+    0x30, 0x2e, 0x02, 0x01, 0x00, 0x30, 0x05, 0x06, 0x03, 0x2b, 0x65, 0x70, 0x04, 0x22, 0x04, 0x20,
+]);
+function b64urlToBytes(s) {
+    const b64 = s.replace(/-/g, "+").replace(/_/g, "/") + "===".slice((s.length + 3) % 4);
+    const bin = atob(b64);
+    const out = new Uint8Array(bin.length);
+    for (let i = 0; i < bin.length; i++)
+        out[i] = bin.charCodeAt(i);
+    return out;
+}
+/** Derive the ed25519 public key of a 32-byte seed (WebCrypto). */
+export async function giftKeyFromSeed(seed) {
+    if (seed.length !== 32)
+        throw new Error("gift key seed must be exactly 32 bytes");
+    const s = subtle();
+    const priv = await s.importKey("pkcs8", concat(PKCS8_ED25519_PREFIX, seed), { name: "Ed25519" }, true, ["sign"]);
+    const jwk = (await s.exportKey("jwk", priv));
+    if (!jwk.x)
+        throw new Error("WebCrypto did not return the Ed25519 public key");
+    const pub = b64urlToBytes(jwk.x);
+    if (pub.length !== 32)
+        throw new Error("unexpected Ed25519 public key length");
+    return { giftKey: encodeBase58(pub), secretKey: concat(seed, pub) };
+}
+/**
+ * Generate a fresh ephemeral gift key (CSPRNG seed, WebCrypto Ed25519). One
+ * per link; never reuse it.
+ */
+export async function newGiftLinkKey() {
+    const c = globalThis.crypto;
+    if (!c?.getRandomValues)
+        throw new Error("WebCrypto is not available; pass your own gift key");
+    const seed = c.getRandomValues(new Uint8Array(32));
+    try {
+        return await giftKeyFromSeed(seed);
+    }
+    finally {
+        seed.fill(0);
+    }
+}
+/** The shareable link: `<base>#k=<base58 64-byte secret key>`. The secret is
+ *  in the FRAGMENT so it never reaches a server log. */
+export function giftLinkUrl(key, base = GIFT_LINK_BASE_URL) {
+    if (key.secretKey.length !== 64)
+        throw new Error("secretKey must be the 64-byte form");
+    if (base.includes("#"))
+        throw new Error("base URL must not carry a fragment");
+    return `${base}#k=${encodeBase58(key.secretKey)}`;
+}
+/**
+ * Read the gift key back out of a link (or a bare `#k=...` fragment). Accepts
+ * the 64-byte secret key (what {@link giftLinkUrl} writes) or a 32-byte seed.
+ * Re-derives the public key (WebCrypto) and, for the 64-byte form, refuses a
+ * secret whose embedded public key does not match its seed. Null when the
+ * link has no well-formed key.
+ */
+export async function parseGiftLinkUrl(link) {
+    const hash = link.includes("#") ? link.slice(link.indexOf("#") + 1) : link;
+    let k = null;
+    for (const part of hash.split("&")) {
+        if (part.startsWith("k="))
+            k = decodeURIComponent(part.slice(2));
+    }
+    if (!k)
+        return null;
+    const raw = decodeBase58(k);
+    if (!raw || (raw.length !== 32 && raw.length !== 64))
+        return null;
+    const derived = await giftKeyFromSeed(raw.slice(0, 32));
+    if (raw.length === 64 && encodeBase58(raw.slice(32)) !== derived.giftKey)
+        return null;
+    return derived;
+}
+// ---------------------------------------------------------------------------
+// PDA + decoder
+// ---------------------------------------------------------------------------
+/** The escrow: `["gift", gift_key]`. */
+export async function findGiftLinkPda(find, programId, giftKey) {
+    return find([TE.encode(GIFT_LINK_SEED), toBytes32(giftKey, "giftKey")], toBase58(programId, "programId"));
+}
+/**
+ * Decode a raw `GiftLink` (discriminator included) in the Borsh order of
+ * state.rs: version u8 | sender | gift_key | kind u8 | amount u64 |
+ * name [u8;32] | name_len u8 | handle_type u8 | integrator Option<Pubkey> |
+ * integrator_rate_bps u16 | expires_at i64 | created_at i64 | bump u8.
+ * Null when the bytes are not a `GiftLink`.
+ */
+export function decodeGiftLink(data) {
+    if (data.length < 8 + 1 + 32 + 32 + 1 + 8 + 32 + 1 + 1 + 1 + 2 + 8 + 8 + 1)
+        return null;
+    for (let i = 0; i < 8; i++)
+        if (data[i] !== GIFT_LINK_ACCOUNT_DISCRIMINATOR[i])
+            return null;
+    const view = new DataView(data.buffer, data.byteOffset, data.byteLength);
+    let o = 8;
+    const version = data[o];
+    o += 1;
+    const sender = encodeBase58(data.slice(o, o + 32));
+    o += 32;
+    const giftKey = encodeBase58(data.slice(o, o + 32));
+    o += 32;
+    const kindByte = data[o];
+    o += 1;
+    if (kindByte > 1)
+        return null;
+    const amount = view.getBigUint64(o, true);
+    o += 8;
+    const nameBytes = data.slice(o, o + 32);
+    o += 32;
+    const nameLen = data[o];
+    o += 1;
+    if (nameLen > 32)
+        return null;
+    const handleType = data[o];
+    o += 1;
+    const tag = data[o];
+    o += 1;
+    let integrator = null;
+    if (tag === 1) {
+        if (data.length < o + 32 + 2 + 8 + 8 + 1)
+            return null;
+        integrator = encodeBase58(data.slice(o, o + 32));
+        o += 32;
+    }
+    else if (tag !== 0)
+        return null;
+    const integratorRateBps = view.getUint16(o, true);
+    o += 2;
+    const expiresAt = view.getBigInt64(o, true);
+    o += 8;
+    const createdAt = view.getBigInt64(o, true);
+    o += 8;
+    const bump = data[o];
+    return {
+        version,
+        sender,
+        giftKey,
+        kind: kindByte === 0 ? "xnt" : "name",
+        amount,
+        name: new TextDecoder().decode(nameBytes.slice(0, nameLen)),
+        handleType,
+        integrator,
+        integratorRateBps,
+        expiresAt,
+        createdAt,
+        bump,
+    };
+}
+/** Fetch + decode a gift link by its escrow address (null if absent: never
+ *  created, or already claimed / refunded). */
+export async function fetchGiftLink(rpc, address, opts = {}) {
+    const addr = toBase58(address, "address");
+    const res = (await rpc("getAccountInfo", [addr, { encoding: "base64", commitment: opts.commitment ?? "confirmed" }]));
+    const v = res?.value;
+    if (!v)
+        return null;
+    if (opts.programId !== undefined && v.owner !== toBase58(opts.programId, "programId")) {
+        throw new Error("account is not owned by the registry program");
+    }
+    const bin = atob(v.data[0]);
+    const data = new Uint8Array(bin.length);
+    for (let i = 0; i < bin.length; i++)
+        data[i] = bin.charCodeAt(i);
+    const gift = decodeGiftLink(data);
+    if (!gift)
+        throw new Error("account is not an X1ID gift link");
+    return { address: addr, gift, lamports: BigInt(v.lamports) };
+}
+/** `now >= expiresAt`: claims fail, anyone may refund to the sender. */
+export function isGiftLinkExpired(g, nowSecs) {
+    return BigInt(nowSecs) >= g.expiresAt;
+}
+// ---------------------------------------------------------------------------
+// instruction builders
+// ---------------------------------------------------------------------------
+/** The Borsh arguments of `create_gift_link` (after the discriminator):
+ *  `kind u8, amount u64, name String, handle_type u8, expires_at i64`. */
+export function encodeCreateGiftLinkArgs(a) {
+    if (typeof a.amount !== "bigint" || a.amount < 0n || a.amount > U64_MAX)
+        throw new Error("amount must be a u64 bigint");
+    if (typeof a.expiresAt !== "bigint" || a.expiresAt <= 0n || a.expiresAt > I64_MAX) {
+        throw new Error("expiresAt must be a positive i64 bigint (unix seconds)");
+    }
+    if (!Number.isInteger(a.handleType) || a.handleType < 0 || a.handleType > 255)
+        throw new Error("handleType must be a u8");
+    return concat(Uint8Array.of(GIFT_KIND[a.kind === "xnt" ? "Xnt" : "Name"]), u64le(a.amount), encString(a.name), Uint8Array.of(a.handleType), i64le(a.expiresAt));
+}
+/**
+ * `create_gift_link(kind, amount, name, handle_type, expires_at)`. Accounts
+ * (`CreateGiftLink`): sender(s,w), gift_key(s), config, gift(w),
+ * system_program, then (name gifts) handle, voucher and the optional
+ * integrator pair. A name gift's escrow is priced by the program (the live
+ * price snapshot); `amount` is sent as 0.
+ */
+export function buildCreateGiftLinkIx(p) {
+    const sender = toBase58(p.sender, "sender");
+    const giftKey = toBase58(p.giftKey, "giftKey");
+    if (sender === giftKey)
+        throw new Error("the gift key must be a fresh key, not the sender");
+    const keys = [
+        key(sender, "sender", true, true),
+        key(giftKey, "giftKey", true, false),
+        key(p.config, "config", false, false),
+        key(p.gift, "gift", false, true),
+        key(SYSTEM_PROGRAM, "systemProgram", false, false),
+    ];
+    let args;
+    if (p.kind === "xnt") {
+        if (typeof p.amount !== "bigint" || p.amount <= 0n)
+            throw new Error("amount must be a positive bigint (lamports)");
+        args = encodeCreateGiftLinkArgs({ kind: "xnt", amount: p.amount, name: "", handleType: 0, expiresAt: p.expiresAt });
+    }
+    else {
+        if (!p.name || p.name.startsWith("@"))
+            throw new Error("name must be the canonical bare name (no @)");
+        keys.push(key(p.handle, "handle", false, false), key(p.voucher, "voucher", false, false));
+        if (p.integratorAccounts)
+            keys.push(...p.integratorAccounts);
+        args = encodeCreateGiftLinkArgs({
+            kind: "name",
+            amount: 0n,
+            name: p.name,
+            handleType: p.handleType,
+            expiresAt: p.expiresAt,
+        });
+    }
+    return { programId: toBase58(p.programId, "programId"), keys, data: concat(CREATE_GIFT_LINK_DISCRIMINATOR, args) };
+}
+/** `claim_gift_link()` (XNT gifts). Accounts (`ClaimGiftLink`): gift_key(s),
+ *  config, gift(w), sender(w), destination(w). The fee payer is whoever
+ *  submits (not an account of this instruction). */
+export function buildClaimGiftLinkIx(p) {
+    const giftKey = toBase58(p.giftKey, "giftKey");
+    const destination = toBase58(p.destination, "destination");
+    if (destination === giftKey)
+        throw new Error("destination must not be the gift key (its secret is in the link)");
+    return {
+        programId: toBase58(p.programId, "programId"),
+        keys: [
+            key(giftKey, "giftKey", true, false),
+            key(p.config, "config", false, false),
+            key(p.gift, "gift", false, true),
+            key(p.sender, "sender", false, true),
+            key(destination, "destination", false, true),
+        ],
+        data: CLAIM_GIFT_LINK_DISCRIMINATOR.slice(),
+    };
+}
+/**
+ * `claim_gift_link_name(name)` (name gifts): registers the name to `owner` as
+ * a tokenized pNFT, exactly like `claim_voucher_tokenized`. Accounts
+ * (`ClaimGiftLinkName`): claimer(s,w), gift_key(s), config(w), treasury(w),
+ * gift(w), sender(w), owner, handle(w), then the 14-account pNFT tail, then
+ * the optional integrator(w). Prepend a ComputeBudget
+ * `SetComputeUnitLimit(CLAIM_GIFT_LINK_NAME_CU_LIMIT)`.
+ */
+export function buildClaimGiftLinkNameIx(p) {
+    const giftKey = toBase58(p.giftKey, "giftKey");
+    const owner = toBase58(p.owner, "owner");
+    if (owner === giftKey)
+        throw new Error("owner must not be the gift key (its secret is in the link)");
+    const keys = [
+        key(p.claimer, "claimer", true, true),
+        key(giftKey, "giftKey", true, false),
+        key(p.config, "config", false, true),
+        key(p.treasury, "treasury", false, true),
+        key(p.gift, "gift", false, true),
+        key(p.sender, "sender", false, true),
+        key(owner, "owner", false, false),
+        key(p.handle, "handle", false, true),
+        ...buildTokenizedTailKeys(p),
+    ];
+    if (p.integrator !== undefined)
+        keys.push(key(p.integrator, "integrator", false, true));
+    return {
+        programId: toBase58(p.programId, "programId"),
+        keys,
+        data: concat(CLAIM_GIFT_LINK_NAME_DISCRIMINATOR, encString(p.name)),
+    };
+}
+/** `refund_gift_link()`. Accounts (`RefundGiftLink`): caller(s), gift(w),
+ *  sender(w). */
+export function buildRefundGiftLinkIx(p) {
+    return {
+        programId: toBase58(p.programId, "programId"),
+        keys: [key(p.caller, "caller", true, false), key(p.gift, "gift", false, true), key(p.sender, "sender", false, true)],
+        data: REFUND_GIFT_LINK_DISCRIMINATOR.slice(),
+    };
+}
+/** Plain-language sentence for a gift-link error code (6151-6156, 6231), or null. */
+export function giftLinkErrorMessage(code) {
+    switch (code) {
+        case 6151: return "The gift amount is too small (an XNT gift must be at least about 0.00089 XNT).";
+        case 6152: return "This gift link has expired.";
+        case 6153: return "This gift link holds something else (XNT vs a name).";
+        case 6154: return "That wallet can't receive this gift.";
+        case 6155: return "Only the sender can cancel this gift before it expires.";
+        case 6156: return "This name already has a pending gift voucher.";
+        case 6231: return "The gift link needs its own fresh key, not your wallet.";
+        default: return null;
+    }
+}

package/dist/index.d.ts

@@ -38,6 +38,7 @@ export * from "./gate.js";
 export * from "./gateClient.js";
 export * from "./textRecords.js";
 export * from "./lock.js";
+export * from "./recovery.js";
 export * from "./integrator.js";
 export * from "./voucher.js";
 export * from "./agent.js";
@@ -48,6 +49,7 @@ export * from "./lease.js";
 export * from "./accounts.js";
 export * from "./pause.js";
 export * from "./x402.js";
+export * from "./x402Receipt.js";
 export * from "./recordWrite.js";
 export * from "./clearRecords.js";
 export * from "./commitReveal.js";
@@ -58,6 +60,7 @@ export * from "./signin.js";
 export * from "./connect.js";
 export * from "./siws.js";
 export * from "./domainProof.js";
+export * from "./shield.js";
 export { scopedTldCandidate, namespaceIsActive, makeScopedHandleDeriver, type ScopedCandidate, type ScopedHandleDeriver, } from "./scoped.js";
 import { type Chain, type Resolved } from "./types.js";
 import { type ScopedHandleDeriver } from "./scoped.js";
@@ -128,4 +131,14 @@ export declare function createResolver(config: ResolverConfig): Resolver;
 export * from "./adminMarket.js";
 export * from "./namespaceOverride.js";
 export * from "./namespacePricing.js";
+export * from "./pay.js";
+export * from "./subscription.js";
+export * from "./giftLink.js";
+export * from "./credentials.js";
+export * from "./agentPolicy.js";
+export * from "./recoveryNft.js";
+export * from "./nsGate.js";
+export * from "./checkout.js";
 export * from "./universal.js";
+export * from "./oidc.js";
+export * from "./loginButton.js";

package/dist/index.js

@@ -38,6 +38,9 @@ export * from "./gate.js";
 export * from "./gateClient.js";
 export * from "./textRecords.js";
 export * from "./lock.js";
+// Recovery 2 (WP 8868): set/initiate/cancel/complete_recovery builders +
+// fetchRecoveryState (recovery + lock state with time remaining).
+export * from "./recovery.js";
 export * from "./integrator.js";
 export * from "./voucher.js";
 export * from "./agent.js";
@@ -55,6 +58,9 @@ export * from "./lease.js";
 export * from "./accounts.js";
 export * from "./pause.js";
 export * from "./x402.js";
+// x402 payment receipts on chain (#8324 / [Pay 10]): record_x402_receipt,
+// its X402ReceiptRecorded event and the AgentPaymentStats tally.
+export * from "./x402Receipt.js";
 export * from "./recordWrite.js";
 export * from "./clearRecords.js";
 export * from "./commitReveal.js";
@@ -65,6 +71,7 @@ export * from "./signin.js";
 export * from "./connect.js";
 export * from "./siws.js";
 export * from "./domainProof.js";
+export * from "./shield.js";
 // Named (not `export *`): `NAMESPACE_MAX_LEN` is already exported by
 // adminMarket.js, and two `export *` sharing a name would make it ambiguous
 // (dropped from the package's public surface). Re-export the scoped API, minus
@@ -818,7 +825,32 @@ export function createResolver(config) {
 export * from "./adminMarket.js";
 export * from "./namespaceOverride.js";
 export * from "./namespacePricing.js";
+// X1ID Pay phase 1: on-chain invoices (docs/specs/x1id-pay-onchain.md).
+export * from "./pay.js";
+// X1ID Pay phase 2: SPL pull subscriptions (docs/specs/x1id-pay-onchain.md).
+export * from "./subscription.js";
+// Open gift links: XNT or a prepaid name, claimed by the link's ephemeral key
+// (docs/specs/gift-links.md).
+export * from "./giftLink.js";
+// X1ID Verify: third-party credentials (docs/specs/x1id-credentials.md,
+// program upgrade 6). Never a blue tick; gate with `{ credential }` (gate.ts).
+export * from "./credentials.js";
+// Program upgrade 6: agent spend policies (docs/specs/agent-spend-policy.md),
+// recovery for tokenized names (docs/specs/recovery-tokenized.md) and the TLD
+// token gate (docs/specs/tld-communities.md §2).
+export * from "./agentPolicy.js";
+export * from "./recoveryNft.js";
+export * from "./nsGate.js";
+// [Pay 7] checkout widget: the merchant ↔ X1ID popup postMessage protocol
+// (docs/x1id-pay-checkout.md). Server-side verification is `verifyInvoicePaid`.
+export * from "./checkout.js";
 // The X1ID Universal Resolver (#8475): cross-namespace resolution (.sol via SNS,
 // .eth via ENS) alongside the native path. Additive — the native resolver above
 // is untouched; `createUniversalResolver` composes it with external adapters.
 export * from "./universal.js";
+// [Auth 9] "Sign in with X1ID": OpenID Connect relying-party client for
+// auth.x1id.io (code + PKCE S256, state, nonce, ID-token verification against
+// the JWKS, /me) and the framework-free button (no DOM access at import).
+// Also importable on their own: `@x1id/resolve/oidc`, `@x1id/resolve/login-button`.
+export * from "./oidc.js";
+export * from "./loginButton.js";

package/dist/loginButton.d.ts

@@ -0,0 +1,69 @@
+/**
+ * The "Sign in with X1ID" button — framework-free (no React), for the OIDC
+ * flow in ./oidc.ts. Two forms:
+ *
+ * ```ts
+ * // 1. A function that returns a <button> (append it anywhere):
+ * const client = createX1idOidcClient({ clientId: "x1c_…", redirectUri: "https://app.example/callback" });
+ * document.querySelector("#login")!.append(createX1idLoginButton({ client }));
+ *
+ * // 2. A custom element (register once, then use markup):
+ * defineX1idLoginButton();
+ * // <x1id-login-button client-id="x1c_…" redirect-uri="https://app.example/callback"></x1id-login-button>
+ * ```
+ *
+ * Nothing touches the DOM at import time (safe to import on a server, and
+ * tree-shaken away if unused). Accessible by construction: a native
+ * `<button type="button">` (keyboard + focus for free), a visible
+ * `:focus-visible` ring, `aria-busy` while the redirect starts, the mark is
+ * decorative (`alt=""`), light/dark follow `prefers-color-scheme` unless forced,
+ * Windows high-contrast (`forced-colors`) and `prefers-reduced-motion` are
+ * honored. Styles go in a constructable stylesheet where supported (not
+ * blocked by a strict `style-src` CSP), else one `<style>` element.
+ *
+ * Brand: the label is "Sign in with X1ID" — X1ID is one word, uppercase. Don't
+ * recolor or redraw the mark.
+ */
+import { type X1idAuthorizationOptions, type X1idOidcClient, type X1idOidcConfig } from "./oidc.js";
+export declare const X1ID_LOGIN_LABEL = "Sign in with X1ID";
+export declare const X1ID_LOGIN_BUTTON_TAG = "x1id-login-button";
+export type X1idButtonTheme = "auto" | "light" | "dark";
+export interface X1idLoginButtonOptions {
+    /** Click starts the redirect flow with this client ({@link beginX1idLogin}). */
+    readonly client?: X1idOidcClient;
+    /** Per-request authorization options (prompt, scope, …). */
+    readonly authorization?: X1idAuthorizationOptions;
+    /** Your own click handler instead of `client` (e.g. a server-side login
+     *  route: `() => location.assign("/auth/x1id/start")`). */
+    readonly onClick?: (ev: MouseEvent) => void | Promise<void>;
+    /** Called if starting the login fails (default: console.error). The button
+     *  is re-enabled. */
+    readonly onError?: (err: unknown) => void;
+    /** "auto" (default) follows prefers-color-scheme; "light"/"dark" force it. */
+    readonly theme?: X1idButtonTheme;
+    /** Translated label. Keep the brand as "X1ID". Default "Sign in with X1ID". */
+    readonly label?: string;
+    readonly disabled?: boolean;
+    /** Injected document (tests). Default `globalThis.document`. */
+    readonly document?: Document;
+}
+export declare const X1ID_LOGIN_BUTTON_CSS = "\n:host{display:inline-block}\n:host([hidden]){display:none}\n.x1id-login{display:inline-flex;align-items:center;justify-content:center;gap:.6em;\n  box-sizing:border-box;min-height:44px;margin:0;padding:.6em 1.1em;\n  font:inherit;font-size:1rem;font-weight:600;line-height:1.2;letter-spacing:0;\n  cursor:pointer;border-radius:8px;border:1px solid rgba(15,20,32,.16);\n  background:#fff;color:#0f1420;-webkit-font-smoothing:antialiased;\n  transition:background-color .12s ease,border-color .12s ease}\n.x1id-login:hover{background:#f6f8fb;border-color:rgba(15,20,32,.28)}\n.x1id-login:active{background:#eef1f6}\n.x1id-login:focus-visible{outline:2px solid #0a84ff;outline-offset:2px}\n.x1id-login:disabled{opacity:.55;cursor:default}\n.x1id-login[aria-busy=\"true\"]{cursor:progress}\n.x1id-login-logo{width:20px;height:20px;border-radius:5px;flex:0 0 auto;display:block}\n.x1id-login-label{white-space:nowrap}\n.x1id-login--dark{background:#161b26;color:#f3f6fb;border-color:rgba(255,255,255,.16)}\n.x1id-login--dark:hover{background:#1d2431;border-color:rgba(255,255,255,.28)}\n.x1id-login--dark:active{background:#131822}\n@media (prefers-color-scheme:dark){\n  .x1id-login:not(.x1id-login--light){background:#161b26;color:#f3f6fb;border-color:rgba(255,255,255,.16)}\n  .x1id-login:not(.x1id-login--light):hover{background:#1d2431;border-color:rgba(255,255,255,.28)}\n  .x1id-login:not(.x1id-login--light):active{background:#131822}\n}\n@media (prefers-reduced-motion:reduce){.x1id-login{transition:none}}\n@media (forced-colors:active){.x1id-login{border-color:ButtonText}.x1id-login:focus-visible{outline-color:Highlight}}\n";
+/**
+ * Build a "Sign in with X1ID" `<button>`. Pass `client` (click → redirect to
+ * auth.x1id.io) or your own `onClick`. Injects its stylesheet once.
+ */
+export declare function createX1idLoginButton(opts?: X1idLoginButtonOptions): HTMLButtonElement;
+/** The custom element's attributes → client config (pure; exported for tests). */
+export declare function loginButtonAttributes(get: (name: string) => string | null): {
+    config: X1idOidcConfig | null;
+    authorization: X1idAuthorizationOptions;
+    theme: X1idButtonTheme;
+    label: string | undefined;
+};
+/**
+ * Register `<x1id-login-button>` (idempotent). Attributes: `client-id`,
+ * `redirect-uri` (required unless you set `el.client`), `issuer`, `scope`,
+ * `prompt`, `theme` (auto|light|dark), `label`, `disabled`. A failure to start
+ * dispatches a bubbling `x1id-error` CustomEvent (`detail` = the error).
+ */
+export declare function defineX1idLoginButton(tagName?: string): void;