cabalspy-id 0.0.0-stage → 0.5.2

package/dist/widget.cjs

@@ -0,0 +1,233 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+
+var _chunkABFIPCBYcjs = require('./chunk-ABFIPCBY.cjs');
+
+// src/widget.ts
+var WIDGET_SRC = "https://id.cabalspy.xyz/widget.js";
+var isBrowser = () => typeof window !== "undefined" && typeof document !== "undefined";
+var loaders = /* @__PURE__ */ new Map();
+function loadCabalSpyIDWidget(src = WIDGET_SRC) {
+  if (!isBrowser()) return Promise.reject(new Error("CabalSpy ID widget needs a browser"));
+  if (_optionalChain([window, 'access', _ => _.CSID, 'optionalAccess', _2 => _2.__loaded])) return Promise.resolve(window.CSID);
+  let p = loaders.get(src);
+  if (p && !document.querySelector(`script[src="${src}"]`)) {
+    loaders.delete(src);
+    p = void 0;
+  }
+  if (!p) {
+    p = new Promise((resolve, reject) => {
+      const done = () => window.CSID ? resolve(window.CSID) : reject(new Error("widget.js loaded but window.CSID is missing"));
+      let script = document.querySelector(`script[src="${src}"]`);
+      if (script && window.CSID) return done();
+      if (!script) {
+        script = document.createElement("script");
+        script.src = src;
+        script.async = true;
+        document.head.appendChild(script);
+      }
+      script.addEventListener("load", done, { once: true });
+      script.addEventListener(
+        "error",
+        () => {
+          loaders.delete(src);
+          reject(new Error(`Could not load ${src}`));
+        },
+        { once: true }
+      );
+    });
+    loaders.set(src, p);
+  }
+  return p;
+}
+function audOf(idToken) {
+  try {
+    const part = idToken.split(".")[1].replace(/-/g, "+").replace(/_/g, "/");
+    const aud = JSON.parse(atob(part + "=".repeat((4 - part.length % 4) % 4))).aud;
+    return Array.isArray(aud) ? aud[0] : aud;
+  } catch (e2) {
+    return void 0;
+  }
+}
+var bool = (v) => v === void 0 ? void 0 : v ? "true" : "false";
+var num = (v) => v === void 0 ? void 0 : String(v);
+function loginButtonAttributes(o) {
+  return {
+    "data-csid-login": "",
+    "data-client-id": o.clientId,
+    "data-theme": o.theme,
+    "data-color": o.color,
+    "data-text-color": o.textColor,
+    "data-shape": o.shape,
+    "data-size": o.size,
+    "data-label": o.label,
+    "data-full-width": bool(o.fullWidth),
+    "data-show-logo": bool(o.showLogo),
+    "data-href": o.href,
+    "data-redirect-uri": o.redirectUri,
+    "data-scope": Array.isArray(o.scope) ? o.scope.join(" ") : o.scope,
+    "data-user": o.user,
+    "data-logout-href": o.logoutHref
+  };
+}
+function thesisWidgetAttributes(o) {
+  if (typeof _optionalChain([o, 'optionalAccess', _3 => _3.clientId]) !== "string" || !o.clientId.trim()) {
+    throw new (0, _chunkABFIPCBYcjs.AuthenticationError)(
+      "The theses widget needs your instance's public client_id (csid_..., shown in the dashboard next to the API key): { clientId: 'csid_...' }. It is not the API key; never put the API key in a browser.",
+      { code: "client_id_required", parameter: "clientId", docs: "https://docs.cabalspy.xyz/cabalspy-id/errors#client_id_required" }
+    );
+  }
+  return {
+    "data-csid-thesis": "",
+    "data-chain": o.chain,
+    "data-mint": o.mint,
+    "data-client-id": o.clientId.trim(),
+    "data-theme": o.theme,
+    "data-scope": o.scope,
+    "data-sort": o.sort,
+    "data-font": o.font,
+    "data-radius": num(o.radius),
+    "data-bg": o.bg,
+    "data-card": o.card,
+    "data-text": o.text,
+    "data-muted": o.muted,
+    "data-border": o.border,
+    "data-accent": o.accent,
+    "data-accent-text": o.accentText,
+    "data-bull": o.bull,
+    "data-bear": o.bear,
+    "data-show-header": bool(o.showHeader),
+    "data-show-sentiment": bool(o.showSentiment),
+    "data-compact": bool(o.compact),
+    "data-height": num(o.height)
+  };
+}
+function onWidgetEvents(handlers, clientId) {
+  if (!isBrowser()) return () => void 0;
+  const login = (e) => {
+    const d = e.detail;
+    const aud = _optionalChain([d, 'optionalAccess', _4 => _4.idToken]) ? audOf(d.idToken) : void 0;
+    if (clientId && aud !== void 0 && aud !== clientId) return;
+    _optionalChain([handlers, 'access', _5 => _5.onLogin, 'optionalCall', _6 => _6(d)]);
+  };
+  const logout = (e) => {
+    const d = e.detail;
+    if (clientId && _optionalChain([d, 'optionalAccess', _7 => _7.clientId]) && d.clientId !== clientId) return;
+    _optionalChain([handlers, 'access', _8 => _8.onLogout, 'optionalCall', _9 => _9(d)]);
+  };
+  const error = (e) => _optionalChain([handlers, 'access', _10 => _10.onError, 'optionalCall', _11 => _11(e.detail)]);
+  window.addEventListener("csid:login", login);
+  window.addEventListener("csid:logout", logout);
+  window.addEventListener("csid:error", error);
+  return () => {
+    window.removeEventListener("csid:login", login);
+    window.removeEventListener("csid:logout", logout);
+    window.removeEventListener("csid:error", error);
+  };
+}
+function resolveTarget(target) {
+  if (!isBrowser()) throw new Error("CabalSpy ID widget needs a browser");
+  const el = typeof target === "string" ? document.querySelector(target) : target;
+  if (!el) throw new Error(`CabalSpy ID widget: no element matches ${String(target)}`);
+  return el;
+}
+function applyAttributes(el, attrs) {
+  for (const [k, v] of Object.entries(attrs)) if (v !== void 0) el.setAttribute(k, v);
+}
+function mountWith(target, options, attributes, after, scriptSrc, onLoadError) {
+  const host = resolveTarget(target);
+  let current = options;
+  let el = document.createElement("div");
+  const render = () => {
+    const next = document.createElement("div");
+    applyAttributes(next, attributes(current));
+    if (el.parentNode) el.replaceWith(next);
+    else host.appendChild(next);
+    el = next;
+    loadCabalSpyIDWidget(scriptSrc).then(
+      (csid) => {
+        if (el.isConnected) {
+          csid.mount();
+          after(csid, current);
+        }
+      },
+      (err) => _optionalChain([onLoadError, 'optionalCall', _12 => _12(err)])
+    );
+  };
+  render();
+  return {
+    get element() {
+      return el;
+    },
+    update(partial) {
+      current = { ...current, ...partial };
+      render();
+    },
+    remove() {
+      el.remove();
+    }
+  };
+}
+function mountLoginButton(target, options) {
+  const stop = onWidgetEvents(options, options.clientId);
+  const mounted = mountWith(
+    target,
+    options,
+    loginButtonAttributes,
+    () => void 0,
+    options.scriptSrc,
+    (err) => _optionalChain([options, 'access', _13 => _13.onError, 'optionalCall', _14 => _14({ error: "widget_load_failed", description: err.message })])
+  );
+  return {
+    get element() {
+      return mounted.element;
+    },
+    update: (o) => mounted.update(o),
+    remove() {
+      stop();
+      mounted.remove();
+    }
+  };
+}
+function mountTheses(target, options) {
+  return mountWith(
+    target,
+    options,
+    thesisWidgetAttributes,
+    (csid) => {
+      if (options.accessToken !== void 0) _optionalChain([csid, 'access', _15 => _15.thesis, 'optionalAccess', _16 => _16.setAccessToken, 'call', _17 => _17(options.accessToken)]);
+    },
+    options.scriptSrc
+  );
+}
+async function setThesisAccessToken(token, scriptSrc) {
+  const csid = await loadCabalSpyIDWidget(scriptSrc);
+  _optionalChain([csid, 'access', _18 => _18.thesis, 'optionalAccess', _19 => _19.setAccessToken, 'call', _20 => _20(token)]);
+}
+async function setThesisSignInHandler(handler, scriptSrc) {
+  if (!isBrowser()) return;
+  const csid = await loadCabalSpyIDWidget(scriptSrc);
+  _optionalChain([csid, 'access', _21 => _21.thesis, 'optionalAccess', _22 => _22.setSignInHandler, 'optionalCall', _23 => _23(handler)]);
+}
+async function startLogin(options, scriptSrc) {
+  const csid = await loadCabalSpyIDWidget(scriptSrc);
+  await csid.login({
+    clientId: options.clientId,
+    redirectUri: options.redirectUri,
+    scope: Array.isArray(options.scope) ? options.scope.join(" ") : options.scope
+  });
+}
+
+
+
+
+
+
+
+
+
+
+
+
+
+exports.WIDGET_SRC = WIDGET_SRC; exports.audOf = audOf; exports.isBrowser = isBrowser; exports.loadCabalSpyIDWidget = loadCabalSpyIDWidget; exports.loginButtonAttributes = loginButtonAttributes; exports.mountLoginButton = mountLoginButton; exports.mountTheses = mountTheses; exports.onWidgetEvents = onWidgetEvents; exports.setThesisAccessToken = setThesisAccessToken; exports.setThesisSignInHandler = setThesisSignInHandler; exports.startLogin = startLogin; exports.thesisWidgetAttributes = thesisWidgetAttributes;
+//# sourceMappingURL=widget.cjs.map

package/dist/widget.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/home/runner/work/cabalspy-id-js/cabalspy-id-js/dist/widget.cjs","../src/widget.ts"],"names":[],"mappings":"AAAA;AACE;AACF,wDAA6B;AAC7B;AACA;ACYO,IAAM,WAAA,EAAa,mCAAA;AAqEnB,IAAM,UAAA,EAAY,CAAA,EAAA,GAAM,OAAO,OAAA,IAAW,YAAA,GAAe,OAAO,SAAA,IAAa,WAAA;AAEpF,IAAM,QAAA,kBAAU,IAAI,GAAA,CAAiC,CAAA;AAG9C,SAAS,oBAAA,CAAqB,IAAA,EAAc,UAAA,EAAiC;AAClF,EAAA,GAAA,CAAI,CAAC,SAAA,CAAU,CAAA,EAAG,OAAO,OAAA,CAAQ,MAAA,CAAO,IAAI,KAAA,CAAM,oCAAoC,CAAC,CAAA;AACvF,EAAA,GAAA,iBAAI,MAAA,mBAAO,IAAA,6BAAM,UAAA,EAAU,OAAO,OAAA,CAAQ,OAAA,CAAQ,MAAA,CAAO,IAAI,CAAA;AAC7D,EAAA,IAAI,EAAA,EAAI,OAAA,CAAQ,GAAA,CAAI,GAAG,CAAA;AAEvB,EAAA,GAAA,CAAI,EAAA,GAAK,CAAC,QAAA,CAAS,aAAA,CAAc,CAAA,YAAA,EAAe,GAAG,CAAA,EAAA,CAAI,CAAA,EAAG;AACxD,IAAA,OAAA,CAAQ,MAAA,CAAO,GAAG,CAAA;AAClB,IAAA,EAAA,EAAI,KAAA,CAAA;AAAA,EACN;AACA,EAAA,GAAA,CAAI,CAAC,CAAA,EAAG;AACN,IAAA,EAAA,EAAI,IAAI,OAAA,CAAoB,CAAC,OAAA,EAAS,MAAA,EAAA,GAAW;AAC/C,MAAA,MAAM,KAAA,EAAO,CAAA,EAAA,GAAO,MAAA,CAAO,KAAA,EAAO,OAAA,CAAQ,MAAA,CAAO,IAAI,EAAA,EAAI,MAAA,CAAO,IAAI,KAAA,CAAM,6CAA6C,CAAC,CAAA;AACxH,MAAA,IAAI,OAAA,EAAS,QAAA,CAAS,aAAA,CAAiC,CAAA,YAAA,EAAe,GAAG,CAAA,EAAA,CAAI,CAAA;AAC7E,MAAA,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,IAAA,EAAM,OAAO,IAAA,CAAK,CAAA;AACvC,MAAA,GAAA,CAAI,CAAC,MAAA,EAAQ;AACX,QAAA,OAAA,EAAS,QAAA,CAAS,aAAA,CAAc,QAAQ,CAAA;AACxC,QAAA,MAAA,CAAO,IAAA,EAAM,GAAA;AACb,QAAA,MAAA,CAAO,MAAA,EAAQ,IAAA;AACf,QAAA,QAAA,CAAS,IAAA,CAAK,WAAA,CAAY,MAAM,CAAA;AAAA,MAClC;AACA,MAAA,MAAA,CAAO,gBAAA,CAAiB,MAAA,EAAQ,IAAA,EAAM,EAAE,IAAA,EAAM,KAAK,CAAC,CAAA;AACpD,MAAA,MAAA,CAAO,gBAAA;AAAA,QACL,OAAA;AAAA,QACA,CAAA,EAAA,GAAM;AACJ,UAAA,OAAA,CAAQ,MAAA,CAAO,GAAG,CAAA;AAClB,UAAA,MAAA,CAAO,IAAI,KAAA,CAAM,CAAA,eAAA,EAAkB,GAAG,CAAA,CAAA;AACxC,QAAA;AACa,QAAA;AACf,MAAA;AACD,IAAA;AACiB,IAAA;AACpB,EAAA;AACO,EAAA;AACT;AAG2D;AACrD,EAAA;AAC0C,IAAA;AACJ,IAAA;AACH,IAAA;AAC/B,EAAA;AACC,IAAA;AACT,EAAA;AACF;AAE4E;AACE;AA+EmB;AACxF,EAAA;AACc,IAAA;AACC,IAAA;AACJ,IAAA;AACA,IAAA;AACK,IAAA;AACL,IAAA;AACD,IAAA;AACC,IAAA;AACmB,IAAA;AACF,IAAA;AAClB,IAAA;AACQ,IAAA;AACkB,IAAA;AAC1B,IAAA;AACO,IAAA;AACxB,EAAA;AACF;AAGmG;AACvD,EAAA;AAC9B,IAAA;AACR,MAAA;AAEyC,MAAA;AAC3C,IAAA;AACF,EAAA;AACO,EAAA;AACe,IAAA;AACJ,IAAA;AACD,IAAA;AACmB,IAAA;AAClB,IAAA;AACA,IAAA;AACD,IAAA;AACA,IAAA;AACY,IAAA;AACd,IAAA;AACE,IAAA;AACA,IAAA;AACC,IAAA;AACC,IAAA;AACA,IAAA;AACK,IAAA;AACP,IAAA;AACA,IAAA;AACsB,IAAA;AACM,IAAA;AACb,IAAA;AACH,IAAA;AAC7B,EAAA;AACF;AAiB6F;AAC5D,EAAA;AACH,EAAA;AACoB,IAAA;AACF,IAAA;AACC,IAAA;AACzB,oBAAA;AACtB,EAAA;AAC6B,EAAA;AACyB,IAAA;AACnB,IAAA;AACZ,oBAAA;AACvB,EAAA;AACwF,EAAA;AAC7C,EAAA;AACE,EAAA;AACF,EAAA;AAC9B,EAAA;AAC8B,IAAA;AACC,IAAA;AACD,IAAA;AAC3C,EAAA;AACF;AAa0D;AACtB,EAAA;AACM,EAAA;AACf,EAAA;AAClB,EAAA;AACT;AAE2F;AAC7C,EAAA;AAC9C;AAME;AAIiC,EAAA;AACnB,EAAA;AACuB,EAAA;AAChB,EAAA;AACsB,IAAA;AACA,IAAA;AACH,IAAA;AACZ,IAAA;AACrB,IAAA;AAC2B,IAAA;AACpB,MAAA;AACY,QAAA;AACP,UAAA;AACQ,UAAA;AACrB,QAAA;AACF,MAAA;AACiC,MAAA;AACnC,IAAA;AACF,EAAA;AACO,EAAA;AACA,EAAA;AACS,IAAA;AACL,MAAA;AACT,IAAA;AACgB,IAAA;AACqB,MAAA;AAC5B,MAAA;AACT,IAAA;AACS,IAAA;AACG,MAAA;AACZ,IAAA;AACF,EAAA;AACF;AASqC;AACU,EAAA;AAC7B,EAAA;AACd,IAAA;AACA,IAAA;AACA,IAAA;AACM,IAAA;AACE,IAAA;AAC4B,IAAA;AACtC,EAAA;AACO,EAAA;AACS,IAAA;AACG,MAAA;AACjB,IAAA;AAC+B,IAAA;AACtB,IAAA;AACF,MAAA;AACU,MAAA;AACjB,IAAA;AACF,EAAA;AACF;AAUsC;AAC7B,EAAA;AACL,IAAA;AACA,IAAA;AACA,IAAA;AACU,IAAA;AACoC,MAAA;AAC9C,IAAA;AACQ,IAAA;AACV,EAAA;AACF;AAMiE;AACvB,EAAA;AACP,kBAAA;AACnC;AAgBkF;AAC9D,EAAA;AACsB,EAAA;AACD,kBAAA;AACzC;AAMiB;AACyB,EAAA;AACvB,EAAA;AACG,IAAA;AACG,IAAA;AACiB,IAAA;AACvC,EAAA;AACH;ADrPiD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA","file":"/home/runner/work/cabalspy-id-js/cabalspy-id-js/dist/widget.cjs","sourcesContent":[null,"/**\n * CabalSpy ID widgets for any web page (browser only, no framework):\n * the \"Sign in with CabalSpy ID\" button and the token theses widget.\n *\n *   import { mountLoginButton, mountTheses } from 'cabalspy-id/widget';\n *\n *   mountLoginButton('#login', { clientId: 'csid_…', onLogin: ({ idToken }) => sendToBackend(idToken) });\n *   mountTheses('#theses', { chain: 'solana', mint, clientId: 'csid_…', theme: 'dark' });\n *\n * Loads https://id.cabalspy.xyz/widget.js once and maps options to its data-*\n * attributes. React components: `cabalspy-id/react` (also `cabalspy-id/widget/react`).\n */\n\nimport { AuthenticationError } from './errors';\nimport type { CabalSpyIDClaims, Chain, OidcScope } from './types';\n\nexport const WIDGET_SRC = 'https://id.cabalspy.xyz/widget.js';\n\n/** Detail of the widget's `csid:login` event. */\nexport interface CabalSpyIDLogin {\n  /** userinfo claims; `limited: true` (anonymous sub) when the platform is over its plan's user limit. */\n  user: CabalSpyIDClaims;\n  /** Send this to your backend and verify it there. */\n  idToken: string;\n  accessToken: string;\n  /** Seconds. */\n  expiresIn: number;\n}\n\nexport interface CabalSpyIDLogoutEvent {\n  clientId: string;\n}\n\nexport interface CabalSpyIDErrorEvent {\n  error: string;\n  description?: string;\n}\n\n/** The signed-in person as the widget remembers them on this device. */\nexport interface CabalSpyIDUserSummary {\n  sub: string;\n  username?: string;\n  name?: string | null;\n  picture?: string | null;\n  kol_badge?: boolean;\n  limited?: boolean;\n}\n\n/** The global the widget defines (window.CSID). */\nexport interface CSIDGlobal {\n  __loaded: true;\n  user: CabalSpyIDLogin | null;\n  mount(): void;\n  login(opts: { clientId: string; redirectUri?: string; scope?: string }): Promise<void>;\n  setUser(clientId: string, user: CabalSpyIDUserSummary | CabalSpyIDClaims): void;\n  signOut(clientId: string): void;\n  onLogin(cb: (r: CabalSpyIDLogin) => void): void;\n  /** Thesis widgets on the page (data-csid-thesis). */\n  thesis?: {\n    /** Lets thesis widgets write as this user (access token with the scope \"thesis\"). */\n    setAccessToken(token: string | null): void;\n    /**\n     * Your own sign-in for the widget's \"Sign in to write\" (null removes it).\n     * See {@link setThesisSignInHandler}.\n     */\n    setSignInHandler?(handler: ThesisSignInHandler | null): void;\n    clear(): void;\n  };\n}\n\n/**\n * Your page's sign-in for thesis widgets: obtain a thesis-capable access token\n * for the person (e.g. your platform's own CabalSpy ID access token with the\n * scope \"thesis\", from your backend), call `setThesisAccessToken(token)` (or\n * `CSID.thesis.setAccessToken(token)`) and resolve `true`; resolve `false` when\n * the person is not signed in.\n */\nexport type ThesisSignInHandler = () => Promise<boolean> | boolean;\n\ndeclare global {\n  interface Window {\n    CSID?: CSIDGlobal;\n  }\n}\n\nexport const isBrowser = () => typeof window !== 'undefined' && typeof document !== 'undefined';\n\nconst loaders = new Map<string, Promise<CSIDGlobal>>();\n\n/** Loads widget.js once per page. Resolves with window.CSID. */\nexport function loadCabalSpyIDWidget(src: string = WIDGET_SRC): Promise<CSIDGlobal> {\n  if (!isBrowser()) return Promise.reject(new Error('CabalSpy ID widget needs a browser'));\n  if (window.CSID?.__loaded) return Promise.resolve(window.CSID);\n  let p = loaders.get(src);\n  // The script tag was removed (e.g. by a test or a head manager): load again.\n  if (p && !document.querySelector(`script[src=\"${src}\"]`)) {\n    loaders.delete(src);\n    p = undefined;\n  }\n  if (!p) {\n    p = new Promise<CSIDGlobal>((resolve, reject) => {\n      const done = () => (window.CSID ? resolve(window.CSID) : reject(new Error('widget.js loaded but window.CSID is missing')));\n      let script = document.querySelector<HTMLScriptElement>(`script[src=\"${src}\"]`);\n      if (script && window.CSID) return done();\n      if (!script) {\n        script = document.createElement('script');\n        script.src = src;\n        script.async = true;\n        document.head.appendChild(script);\n      }\n      script.addEventListener('load', done, { once: true });\n      script.addEventListener(\n        'error',\n        () => {\n          loaders.delete(src);\n          reject(new Error(`Could not load ${src}`));\n        },\n        { once: true },\n      );\n    });\n    loaders.set(src, p);\n  }\n  return p;\n}\n\n/** The `aud` of an (unverified) ID token, to route widget events to the right client. */\nexport function audOf(idToken: string): string | undefined {\n  try {\n    const part = idToken.split('.')[1]!.replace(/-/g, '+').replace(/_/g, '/');\n    const aud = (JSON.parse(atob(part + '='.repeat((4 - (part.length % 4)) % 4))) as { aud?: string | string[] }).aud;\n    return Array.isArray(aud) ? aud[0] : aud;\n  } catch {\n    return undefined;\n  }\n}\n\nconst bool = (v: boolean | undefined) => (v === undefined ? undefined : v ? 'true' : 'false');\nconst num = (v: number | undefined) => (v === undefined ? undefined : String(v));\n\n// ── options ──────────────────────────────────────────────────────────────────\n\n/** Design and behaviour of the login button. */\nexport interface LoginButtonOptions {\n  /** Your instance's client_id (`csid_…`). */\n  clientId: string;\n  /** Button design overrides; defaults come from the dashboard's button builder. */\n  theme?: 'dark' | 'light' | (string & {});\n  color?: string;\n  textColor?: string;\n  shape?: 'square' | 'rounded' | 'pill';\n  size?: 'sm' | 'md' | 'lg';\n  label?: string;\n  fullWidth?: boolean;\n  showLogo?: boolean;\n  /**\n   * Server-side apps: your own login route that starts the OIDC flow with your\n   * client secret. Without it, a public client runs PKCE in the browser.\n   */\n  href?: string;\n  /** Browser apps: redirect URI (default: the current page). */\n  redirectUri?: string;\n  /**\n   * Browser apps: requested scopes (default: openid profile). Add `thesis` so\n   * the person can write in thesis widgets on your page right after sign-in.\n   */\n  scope?: string | OidcScope[];\n  /** Server-side apps: the signed-in person's `sub`, to show the avatar menu. */\n  user?: string;\n  /** Server-side apps: where \"Sign out\" goes. */\n  logoutHref?: string;\n}\n\n/** Design and data of the token theses widget. */\nexport interface ThesisWidgetOptions {\n  /** solana | bnb | base | eth | rh */\n  chain: Chain;\n  /** Token mint / contract address. */\n  mint: string;\n  /**\n   * Required. Your instance's PUBLIC client_id (`csid_...`, shown in the\n   * dashboard next to the API key; not the API key). The widget sends it on\n   * every thesis API call; it also loads the design saved in the dashboard (the\n   * options below override it), credits posts to your app and enables `scope: 'instance'`.\n   */\n  clientId: string;\n  /** Default: dark */\n  theme?: 'dark' | 'light';\n  /** `global` (default): theses from every platform. `instance`: only the ones written on your instance. */\n  scope?: 'global' | 'instance';\n  /** Initial order. Default: new */\n  sort?: 'new' | 'top';\n  /** Font family, e.g. \"Inter\". */\n  font?: string;\n  /** Corner radius in px. Default: 12 */\n  radius?: number;\n  /** Colors (CSS colors, e.g. \"#0d0f12\"). */\n  bg?: string;\n  card?: string;\n  text?: string;\n  muted?: string;\n  border?: string;\n  accent?: string;\n  accentText?: string;\n  bull?: string;\n  bear?: string;\n  /** Show the token header. Default: true */\n  showHeader?: boolean;\n  /** Show the bull/bear sentiment bar. */\n  showSentiment?: boolean;\n  /** Denser layout. Default: false */\n  compact?: boolean;\n  /** Initial height in px; the widget then sizes itself to its content. Default: 520 */\n  height?: number;\n}\n\n/** The widget's data-* attributes for a login button. */\nexport function loginButtonAttributes(o: LoginButtonOptions): Record<string, string | undefined> {\n  return {\n    'data-csid-login': '',\n    'data-client-id': o.clientId,\n    'data-theme': o.theme,\n    'data-color': o.color,\n    'data-text-color': o.textColor,\n    'data-shape': o.shape,\n    'data-size': o.size,\n    'data-label': o.label,\n    'data-full-width': bool(o.fullWidth),\n    'data-show-logo': bool(o.showLogo),\n    'data-href': o.href,\n    'data-redirect-uri': o.redirectUri,\n    'data-scope': Array.isArray(o.scope) ? o.scope.join(' ') : o.scope,\n    'data-user': o.user,\n    'data-logout-href': o.logoutHref,\n  };\n}\n\n/** The widget's data-* attributes for a theses widget. Throws `client_id_required` without `clientId`. */\nexport function thesisWidgetAttributes(o: ThesisWidgetOptions): Record<string, string | undefined> {\n  if (typeof o?.clientId !== 'string' || !o.clientId.trim()) {\n    throw new AuthenticationError(\n      \"The theses widget needs your instance's public client_id (csid_..., shown in the dashboard next to the API key): \" +\n        \"{ clientId: 'csid_...' }. It is not the API key; never put the API key in a browser.\",\n      { code: 'client_id_required', parameter: 'clientId', docs: 'https://docs.cabalspy.xyz/cabalspy-id/errors#client_id_required' },\n    );\n  }\n  return {\n    'data-csid-thesis': '',\n    'data-chain': o.chain,\n    'data-mint': o.mint,\n    'data-client-id': o.clientId.trim(),\n    'data-theme': o.theme,\n    'data-scope': o.scope,\n    'data-sort': o.sort,\n    'data-font': o.font,\n    'data-radius': num(o.radius),\n    'data-bg': o.bg,\n    'data-card': o.card,\n    'data-text': o.text,\n    'data-muted': o.muted,\n    'data-border': o.border,\n    'data-accent': o.accent,\n    'data-accent-text': o.accentText,\n    'data-bull': o.bull,\n    'data-bear': o.bear,\n    'data-show-header': bool(o.showHeader),\n    'data-show-sentiment': bool(o.showSentiment),\n    'data-compact': bool(o.compact),\n    'data-height': num(o.height),\n  };\n}\n\n// ── events ───────────────────────────────────────────────────────────────────\n\nexport interface WidgetEventHandlers {\n  /** A browser-app login finished (window event `csid:login`). */\n  onLogin?: (result: CabalSpyIDLogin) => void;\n  /** The person signed out from the menu (window event `csid:logout`). */\n  onLogout?: (event: CabalSpyIDLogoutEvent) => void;\n  /** The browser flow failed (window event `csid:error`). */\n  onError?: (event: CabalSpyIDErrorEvent) => void;\n}\n\n/**\n * Listens to the widget's window events. With `clientId`, logins and logouts of\n * other clients on the same page are ignored. Returns a function that stops listening.\n */\nexport function onWidgetEvents(handlers: WidgetEventHandlers, clientId?: string): () => void {\n  if (!isBrowser()) return () => undefined;\n  const login = (e: Event) => {\n    const d = (e as CustomEvent<CabalSpyIDLogin>).detail;\n    const aud = d?.idToken ? audOf(d.idToken) : undefined;\n    if (clientId && aud !== undefined && aud !== clientId) return;\n    handlers.onLogin?.(d);\n  };\n  const logout = (e: Event) => {\n    const d = (e as CustomEvent<CabalSpyIDLogoutEvent>).detail;\n    if (clientId && d?.clientId && d.clientId !== clientId) return;\n    handlers.onLogout?.(d);\n  };\n  const error = (e: Event) => handlers.onError?.((e as CustomEvent<CabalSpyIDErrorEvent>).detail);\n  window.addEventListener('csid:login', login);\n  window.addEventListener('csid:logout', logout);\n  window.addEventListener('csid:error', error);\n  return () => {\n    window.removeEventListener('csid:login', login);\n    window.removeEventListener('csid:logout', logout);\n    window.removeEventListener('csid:error', error);\n  };\n}\n\n// ── mounting (vanilla) ───────────────────────────────────────────────────────\n\nexport interface MountedWidget<O> {\n  /** The element carrying the data-* attributes. */\n  readonly element: HTMLElement;\n  /** Re-renders with new options (a fresh element, so the widget mounts it again). */\n  update(options: Partial<O>): void;\n  /** Removes the widget and its event listeners. */\n  remove(): void;\n}\n\nfunction resolveTarget(target: Element | string): Element {\n  if (!isBrowser()) throw new Error('CabalSpy ID widget needs a browser');\n  const el = typeof target === 'string' ? document.querySelector(target) : target;\n  if (!el) throw new Error(`CabalSpy ID widget: no element matches ${String(target)}`);\n  return el;\n}\n\nfunction applyAttributes(el: HTMLElement, attrs: Record<string, string | undefined>): void {\n  for (const [k, v] of Object.entries(attrs)) if (v !== undefined) el.setAttribute(k, v);\n}\n\nfunction mountWith<O>(\n  target: Element | string,\n  options: O,\n  attributes: (o: O) => Record<string, string | undefined>,\n  after: (csid: CSIDGlobal, o: O) => void,\n  scriptSrc: string | undefined,\n  onLoadError?: (err: Error) => void,\n): MountedWidget<O> {\n  const host = resolveTarget(target);\n  let current = options;\n  let el = document.createElement('div');\n  const render = () => {\n    const next = document.createElement('div');\n    applyAttributes(next, attributes(current));\n    if (el.parentNode) el.replaceWith(next);\n    else host.appendChild(next);\n    el = next;\n    loadCabalSpyIDWidget(scriptSrc).then(\n      (csid) => {\n        if (el.isConnected) {\n          csid.mount();\n          after(csid, current);\n        }\n      },\n      (err: Error) => onLoadError?.(err),\n    );\n  };\n  render();\n  return {\n    get element() {\n      return el;\n    },\n    update(partial) {\n      current = { ...current, ...partial };\n      render();\n    },\n    remove() {\n      el.remove();\n    },\n  };\n}\n\n/**\n * Mounts the \"Sign in with CabalSpy ID\" button into `target` (an element or a\n * CSS selector).\n */\nexport function mountLoginButton(\n  target: Element | string,\n  options: LoginButtonOptions & WidgetEventHandlers & { scriptSrc?: string },\n): MountedWidget<LoginButtonOptions> {\n  const stop = onWidgetEvents(options, options.clientId);\n  const mounted = mountWith<LoginButtonOptions>(\n    target,\n    options,\n    loginButtonAttributes,\n    () => undefined,\n    options.scriptSrc,\n    (err) => options.onError?.({ error: 'widget_load_failed', description: err.message }),\n  );\n  return {\n    get element() {\n      return mounted.element;\n    },\n    update: (o) => mounted.update(o),\n    remove() {\n      stop();\n      mounted.remove();\n    },\n  };\n}\n\n/**\n * Mounts the token theses widget into `target` (an element or a CSS selector).\n * `clientId` (your instance's public client_id) is required. `accessToken`\n * (scope `thesis`) lets the signed-in person write right away.\n */\nexport function mountTheses(\n  target: Element | string,\n  options: ThesisWidgetOptions & { accessToken?: string | null; scriptSrc?: string },\n): MountedWidget<ThesisWidgetOptions> {\n  return mountWith<ThesisWidgetOptions>(\n    target,\n    options,\n    thesisWidgetAttributes,\n    (csid) => {\n      if (options.accessToken !== undefined) csid.thesis?.setAccessToken(options.accessToken);\n    },\n    options.scriptSrc,\n  );\n}\n\n/**\n * Lets thesis widgets on the page write as this user (an access token with the\n * scope `thesis`), or signs them out with `null`.\n */\nexport async function setThesisAccessToken(token: string | null, scriptSrc?: string): Promise<void> {\n  const csid = await loadCabalSpyIDWidget(scriptSrc);\n  csid.thesis?.setAccessToken(token);\n}\n\n/**\n * Lets your page handle the thesis widgets' \"Sign in to write\": the widget\n * calls `handler` instead of the page's login button / popup. While a handler\n * is set, the widget treats the page as the source of truth for sign-in (signed\n * out on the page = signed out in the widget). `null` removes it. Waits for\n * widget.js when it is not loaded yet; a no-op on the server.\n *\n *   setThesisSignInHandler(async () => {\n *     const token = await fetch('/api/csid-thesis-token').then((r) => (r.ok ? r.text() : null));\n *     if (!token) return false;\n *     await setThesisAccessToken(token);\n *     return true;\n *   });\n */\nexport async function setThesisSignInHandler(handler: ThesisSignInHandler | null, scriptSrc?: string): Promise<void> {\n  if (!isBrowser()) return; // server rendering: nothing to register\n  const csid = await loadCabalSpyIDWidget(scriptSrc);\n  csid.thesis?.setSignInHandler?.(handler);\n}\n\n/** Starts the browser (public client) login flow. */\nexport async function startLogin(\n  options: { clientId: string; redirectUri?: string; scope?: string | OidcScope[] },\n  scriptSrc?: string,\n): Promise<void> {\n  const csid = await loadCabalSpyIDWidget(scriptSrc);\n  await csid.login({\n    clientId: options.clientId,\n    redirectUri: options.redirectUri,\n    scope: Array.isArray(options.scope) ? options.scope.join(' ') : options.scope,\n  });\n}\n"]}

package/dist/widget.d.cts

@@ -0,0 +1,226 @@
+import { c as CabalSpyIDClaims, O as OidcScope, d as Chain } from './types-UZeY9n1e.cjs';
+
+/**
+ * CabalSpy ID widgets for any web page (browser only, no framework):
+ * the "Sign in with CabalSpy ID" button and the token theses widget.
+ *
+ *   import { mountLoginButton, mountTheses } from 'cabalspy-id/widget';
+ *
+ *   mountLoginButton('#login', { clientId: 'csid_…', onLogin: ({ idToken }) => sendToBackend(idToken) });
+ *   mountTheses('#theses', { chain: 'solana', mint, clientId: 'csid_…', theme: 'dark' });
+ *
+ * Loads https://id.cabalspy.xyz/widget.js once and maps options to its data-*
+ * attributes. React components: `cabalspy-id/react` (also `cabalspy-id/widget/react`).
+ */
+
+declare const WIDGET_SRC = "https://id.cabalspy.xyz/widget.js";
+/** Detail of the widget's `csid:login` event. */
+interface CabalSpyIDLogin {
+    /** userinfo claims; `limited: true` (anonymous sub) when the platform is over its plan's user limit. */
+    user: CabalSpyIDClaims;
+    /** Send this to your backend and verify it there. */
+    idToken: string;
+    accessToken: string;
+    /** Seconds. */
+    expiresIn: number;
+}
+interface CabalSpyIDLogoutEvent {
+    clientId: string;
+}
+interface CabalSpyIDErrorEvent {
+    error: string;
+    description?: string;
+}
+/** The signed-in person as the widget remembers them on this device. */
+interface CabalSpyIDUserSummary {
+    sub: string;
+    username?: string;
+    name?: string | null;
+    picture?: string | null;
+    kol_badge?: boolean;
+    limited?: boolean;
+}
+/** The global the widget defines (window.CSID). */
+interface CSIDGlobal {
+    __loaded: true;
+    user: CabalSpyIDLogin | null;
+    mount(): void;
+    login(opts: {
+        clientId: string;
+        redirectUri?: string;
+        scope?: string;
+    }): Promise<void>;
+    setUser(clientId: string, user: CabalSpyIDUserSummary | CabalSpyIDClaims): void;
+    signOut(clientId: string): void;
+    onLogin(cb: (r: CabalSpyIDLogin) => void): void;
+    /** Thesis widgets on the page (data-csid-thesis). */
+    thesis?: {
+        /** Lets thesis widgets write as this user (access token with the scope "thesis"). */
+        setAccessToken(token: string | null): void;
+        /**
+         * Your own sign-in for the widget's "Sign in to write" (null removes it).
+         * See {@link setThesisSignInHandler}.
+         */
+        setSignInHandler?(handler: ThesisSignInHandler | null): void;
+        clear(): void;
+    };
+}
+/**
+ * Your page's sign-in for thesis widgets: obtain a thesis-capable access token
+ * for the person (e.g. your platform's own CabalSpy ID access token with the
+ * scope "thesis", from your backend), call `setThesisAccessToken(token)` (or
+ * `CSID.thesis.setAccessToken(token)`) and resolve `true`; resolve `false` when
+ * the person is not signed in.
+ */
+type ThesisSignInHandler = () => Promise<boolean> | boolean;
+declare global {
+    interface Window {
+        CSID?: CSIDGlobal;
+    }
+}
+declare const isBrowser: () => boolean;
+/** Loads widget.js once per page. Resolves with window.CSID. */
+declare function loadCabalSpyIDWidget(src?: string): Promise<CSIDGlobal>;
+/** The `aud` of an (unverified) ID token, to route widget events to the right client. */
+declare function audOf(idToken: string): string | undefined;
+/** Design and behaviour of the login button. */
+interface LoginButtonOptions {
+    /** Your instance's client_id (`csid_…`). */
+    clientId: string;
+    /** Button design overrides; defaults come from the dashboard's button builder. */
+    theme?: 'dark' | 'light' | (string & {});
+    color?: string;
+    textColor?: string;
+    shape?: 'square' | 'rounded' | 'pill';
+    size?: 'sm' | 'md' | 'lg';
+    label?: string;
+    fullWidth?: boolean;
+    showLogo?: boolean;
+    /**
+     * Server-side apps: your own login route that starts the OIDC flow with your
+     * client secret. Without it, a public client runs PKCE in the browser.
+     */
+    href?: string;
+    /** Browser apps: redirect URI (default: the current page). */
+    redirectUri?: string;
+    /**
+     * Browser apps: requested scopes (default: openid profile). Add `thesis` so
+     * the person can write in thesis widgets on your page right after sign-in.
+     */
+    scope?: string | OidcScope[];
+    /** Server-side apps: the signed-in person's `sub`, to show the avatar menu. */
+    user?: string;
+    /** Server-side apps: where "Sign out" goes. */
+    logoutHref?: string;
+}
+/** Design and data of the token theses widget. */
+interface ThesisWidgetOptions {
+    /** solana | bnb | base | eth | rh */
+    chain: Chain;
+    /** Token mint / contract address. */
+    mint: string;
+    /**
+     * Required. Your instance's PUBLIC client_id (`csid_...`, shown in the
+     * dashboard next to the API key; not the API key). The widget sends it on
+     * every thesis API call; it also loads the design saved in the dashboard (the
+     * options below override it), credits posts to your app and enables `scope: 'instance'`.
+     */
+    clientId: string;
+    /** Default: dark */
+    theme?: 'dark' | 'light';
+    /** `global` (default): theses from every platform. `instance`: only the ones written on your instance. */
+    scope?: 'global' | 'instance';
+    /** Initial order. Default: new */
+    sort?: 'new' | 'top';
+    /** Font family, e.g. "Inter". */
+    font?: string;
+    /** Corner radius in px. Default: 12 */
+    radius?: number;
+    /** Colors (CSS colors, e.g. "#0d0f12"). */
+    bg?: string;
+    card?: string;
+    text?: string;
+    muted?: string;
+    border?: string;
+    accent?: string;
+    accentText?: string;
+    bull?: string;
+    bear?: string;
+    /** Show the token header. Default: true */
+    showHeader?: boolean;
+    /** Show the bull/bear sentiment bar. */
+    showSentiment?: boolean;
+    /** Denser layout. Default: false */
+    compact?: boolean;
+    /** Initial height in px; the widget then sizes itself to its content. Default: 520 */
+    height?: number;
+}
+/** The widget's data-* attributes for a login button. */
+declare function loginButtonAttributes(o: LoginButtonOptions): Record<string, string | undefined>;
+/** The widget's data-* attributes for a theses widget. Throws `client_id_required` without `clientId`. */
+declare function thesisWidgetAttributes(o: ThesisWidgetOptions): Record<string, string | undefined>;
+interface WidgetEventHandlers {
+    /** A browser-app login finished (window event `csid:login`). */
+    onLogin?: (result: CabalSpyIDLogin) => void;
+    /** The person signed out from the menu (window event `csid:logout`). */
+    onLogout?: (event: CabalSpyIDLogoutEvent) => void;
+    /** The browser flow failed (window event `csid:error`). */
+    onError?: (event: CabalSpyIDErrorEvent) => void;
+}
+/**
+ * Listens to the widget's window events. With `clientId`, logins and logouts of
+ * other clients on the same page are ignored. Returns a function that stops listening.
+ */
+declare function onWidgetEvents(handlers: WidgetEventHandlers, clientId?: string): () => void;
+interface MountedWidget<O> {
+    /** The element carrying the data-* attributes. */
+    readonly element: HTMLElement;
+    /** Re-renders with new options (a fresh element, so the widget mounts it again). */
+    update(options: Partial<O>): void;
+    /** Removes the widget and its event listeners. */
+    remove(): void;
+}
+/**
+ * Mounts the "Sign in with CabalSpy ID" button into `target` (an element or a
+ * CSS selector).
+ */
+declare function mountLoginButton(target: Element | string, options: LoginButtonOptions & WidgetEventHandlers & {
+    scriptSrc?: string;
+}): MountedWidget<LoginButtonOptions>;
+/**
+ * Mounts the token theses widget into `target` (an element or a CSS selector).
+ * `clientId` (your instance's public client_id) is required. `accessToken`
+ * (scope `thesis`) lets the signed-in person write right away.
+ */
+declare function mountTheses(target: Element | string, options: ThesisWidgetOptions & {
+    accessToken?: string | null;
+    scriptSrc?: string;
+}): MountedWidget<ThesisWidgetOptions>;
+/**
+ * Lets thesis widgets on the page write as this user (an access token with the
+ * scope `thesis`), or signs them out with `null`.
+ */
+declare function setThesisAccessToken(token: string | null, scriptSrc?: string): Promise<void>;
+/**
+ * Lets your page handle the thesis widgets' "Sign in to write": the widget
+ * calls `handler` instead of the page's login button / popup. While a handler
+ * is set, the widget treats the page as the source of truth for sign-in (signed
+ * out on the page = signed out in the widget). `null` removes it. Waits for
+ * widget.js when it is not loaded yet; a no-op on the server.
+ *
+ *   setThesisSignInHandler(async () => {
+ *     const token = await fetch('/api/csid-thesis-token').then((r) => (r.ok ? r.text() : null));
+ *     if (!token) return false;
+ *     await setThesisAccessToken(token);
+ *     return true;
+ *   });
+ */
+declare function setThesisSignInHandler(handler: ThesisSignInHandler | null, scriptSrc?: string): Promise<void>;
+/** Starts the browser (public client) login flow. */
+declare function startLogin(options: {
+    clientId: string;
+    redirectUri?: string;
+    scope?: string | OidcScope[];
+}, scriptSrc?: string): Promise<void>;
+
+export { type CSIDGlobal, type CabalSpyIDErrorEvent, type CabalSpyIDLogin, type CabalSpyIDLogoutEvent, type CabalSpyIDUserSummary, type LoginButtonOptions, type MountedWidget, type ThesisSignInHandler, type ThesisWidgetOptions, WIDGET_SRC, type WidgetEventHandlers, audOf, isBrowser, loadCabalSpyIDWidget, loginButtonAttributes, mountLoginButton, mountTheses, onWidgetEvents, setThesisAccessToken, setThesisSignInHandler, startLogin, thesisWidgetAttributes };