@x1id/resolve 0.43.0 → 0.44.0

package/README.md

@@ -312,6 +312,32 @@ for (const a of liveAttestations(atts)) {
 integrator joining a live attestation to its paired text record reads the same
 mapping the program, resolver and app badge use.
 
+## Removing a verification
+
+A name's current authority (owner, or NFT holder if tokenized) can remove any of
+its own attestations with `remove_own_attestation` (registry upgrade 7, live on
+mainnet and testnet). A validator link (kind 6) can also be removed by the
+withdraw authority stored in its `attestor` field, without the owner. The
+account is closed and its rent refunded to whoever paid it:
+
+- kinds 0–5: the stored `attestor`, since it paid the rent;
+- kind 6: the signer.
+
+Any other `recipient` fails with 6238 `AttestationRefundMismatch`.
+
+```ts
+import { buildRemoveOwnAttestationIx } from "@x1id/resolve";
+
+const ix = buildRemoveOwnAttestationIx({
+  programId,
+  signer: wallet,                  // handle authority (or, for kind 6, the stored withdraw authority)
+  handle: handleAccount,
+  attestation: att.account,        // from fetchAttestations
+  recipient: att.kind === 6 ? wallet : att.attestor,
+  holderTokenAccount,              // only when the handle is tokenized and the holder signs
+});
+```
+
 ## Attestation gating (allowlists)
 
 Gate your app, Discord, mint, or airdrop by whether an `@handle` holds a

package/dist/checkout.d.ts

@@ -1,6 +1,6 @@
 /**
  * X1ID Pay checkout widget ([Pay 7], docs/x1id-pay-checkout.md): the
- * postMessage protocol between a merchant page and the X1ID invoice page,
+ * postMessage protocol between a merchant page and the X1 Pay invoice page (app.x1pay.me),
  * plus the merchant-side controller that opens the checkout popup.
  *
  * The widget only PAYS an invoice that already exists on chain. The merchant
@@ -13,7 +13,7 @@
  *
  * Flow (all messages are plain JSON-able objects, see {@link CheckoutMessage}):
  *
- *   merchant page (origin M)              popup: X1ID app (origin A)
+ *   merchant page (origin M)              popup: X1 Pay app (origin A)
  *   ───────────────────────               ──────────────────────────
  *   window.open(A/invoice?address=…&embed=1&origin=M&sid=S)
  *                                    ◀──  ready  {sid, invoice}   (targetOrigin M)
@@ -27,10 +27,10 @@
  *   opener is anything else; it trusts an `ack` only when `event.source` is
  *   its opener and `event.origin` is exactly that origin;
  * - the merchant accepts a message only when `event.source` is the popup it
- *   opened, `event.origin` is exactly the X1ID app origin, and the session id
+ *   opened, `event.origin` is exactly the X1 Pay app origin, and the session id
  *   (`sid`, 128 random bits per checkout) and invoice match.
  *
- * No iframe mode: the X1ID app keeps `frame-ancestors 'none'` /
+ * No iframe mode: the X1 Pay app keeps `frame-ancestors 'none'` /
  * `X-Frame-Options: DENY` (clickjacking), and wallet extensions work in a
  * top-level window.
  *
@@ -42,7 +42,7 @@ export declare const CHECKOUT_PROTOCOL = "x1id-checkout";
 /** Protocol version on every message. */
 export declare const CHECKOUT_VERSION = 1;
 /** Where the hosted checkout lives. */
-export declare const DEFAULT_CHECKOUT_APP_ORIGIN = "https://app.x1id.io";
+export declare const DEFAULT_CHECKOUT_APP_ORIGIN = "https://app.x1pay.me";
 /**
  * - `paid`: the invoice page read the Invoice account back as Paid.
  * - `cancelled`: the payer returned to the merchant without paying.
@@ -181,7 +181,7 @@ export interface OpenCheckoutOptions {
     readonly invoice: string;
     /** Override the hosted checkout origin (e.g. a testnet deployment). */
     readonly appOrigin?: string;
-    /** Called once the popup has proved it is the X1ID app for this checkout. */
+    /** Called once the popup has proved it is the X1 Pay app for this checkout. */
     readonly onReady?: () => void;
     /** Popup size. */
     readonly width?: number;

package/dist/checkout.js

@@ -1,6 +1,6 @@
 /**
  * X1ID Pay checkout widget ([Pay 7], docs/x1id-pay-checkout.md): the
- * postMessage protocol between a merchant page and the X1ID invoice page,
+ * postMessage protocol between a merchant page and the X1 Pay invoice page (app.x1pay.me),
  * plus the merchant-side controller that opens the checkout popup.
  *
  * The widget only PAYS an invoice that already exists on chain. The merchant
@@ -13,7 +13,7 @@
  *
  * Flow (all messages are plain JSON-able objects, see {@link CheckoutMessage}):
  *
- *   merchant page (origin M)              popup: X1ID app (origin A)
+ *   merchant page (origin M)              popup: X1 Pay app (origin A)
  *   ───────────────────────               ──────────────────────────
  *   window.open(A/invoice?address=…&embed=1&origin=M&sid=S)
  *                                    ◀──  ready  {sid, invoice}   (targetOrigin M)
@@ -27,10 +27,10 @@
  *   opener is anything else; it trusts an `ack` only when `event.source` is
  *   its opener and `event.origin` is exactly that origin;
  * - the merchant accepts a message only when `event.source` is the popup it
- *   opened, `event.origin` is exactly the X1ID app origin, and the session id
+ *   opened, `event.origin` is exactly the X1 Pay app origin, and the session id
  *   (`sid`, 128 random bits per checkout) and invoice match.
  *
- * No iframe mode: the X1ID app keeps `frame-ancestors 'none'` /
+ * No iframe mode: the X1 Pay app keeps `frame-ancestors 'none'` /
  * `X-Frame-Options: DENY` (clickjacking), and wallet extensions work in a
  * top-level window.
  *
@@ -42,7 +42,7 @@ export const CHECKOUT_PROTOCOL = "x1id-checkout";
 /** Protocol version on every message. */
 export const CHECKOUT_VERSION = 1;
 /** Where the hosted checkout lives. */
-export const DEFAULT_CHECKOUT_APP_ORIGIN = "https://app.x1id.io";
+export const DEFAULT_CHECKOUT_APP_ORIGIN = "https://app.x1pay.me";
 // ---------------------------------------------------------------------------
 // validation
 // ---------------------------------------------------------------------------
@@ -232,7 +232,7 @@ export function parseCheckoutParams(get) {
  *  straight from a click handler). */
 export class CheckoutPopupBlockedError extends Error {
     constructor() {
-        super("The browser blocked the X1ID checkout window. Open checkout from a click handler.");
+        super("The browser blocked the X1 Pay checkout window. Open checkout from a click handler.");
         this.name = "CheckoutPopupBlockedError";
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@x1id/resolve",
-  "version": "0.43.0",
+  "version": "0.44.0",
   "description": "Resolve @handles and X1NS names on X1. Never silently picks between namespaces.",
   "type": "module",
   "main": "./dist/index.js",