signet-login 0.10.1 → 0.10.2

package/README.md

@@ -6,7 +6,8 @@ Published as `signet-login`.
 
 **Signet Access** is a drop-in auth and signer-access SDK for Nostr-aware websites. One picker, one session shape, multiple ways to prove identity and, when available, keep a live signer:
 
-- **Sign in with Signet** on this device or by cross-device QR
+- **Local Signet** on this device, against hosted or local-dev Signet
+- **Remote Signet** by cross-device QR, so a phone or second machine can approve
 - **Browser extension** via NIP-07 (bark, Alby, nos2x, Flamingo, ...)
 - **Connect a Nostr signer** via app-initiated NIP-46 / NostrConnect
 - **Paste or scan bunker URI** for Heartwood, nsecBunker, Amber, or compatible signers
@@ -88,8 +89,10 @@ interface SignetStorage {
 
 type LoginPickerMethod =
   | 'nip07'
-  | 'redirect'      // same-device Signet, relay delivery
-  | 'qr'            // cross-device Signet QR
+  | 'local-signet'  // same-device Signet, relay delivery
+  | 'remote-signet' // cross-device Signet QR
+  | 'redirect'      // legacy alias for local-signet
+  | 'qr'            // legacy alias for remote-signet
   | 'bunker'        // paste bunker://
   | 'nostrconnect'  // show nostrconnect:// QR
   | 'amber'         // Android NIP-55
@@ -110,7 +113,14 @@ By default, the picker shows ordinary user-facing methods first and groups `bunk
 ```js
 await Signet.login({
   appName: 'My Game',
-  methods: ['redirect', 'qr', 'nip07'],
+  methods: ['local-signet', 'remote-signet', 'nip07'],
+});
+
+await Signet.login({
+  appName: 'My Local Dev Game',
+  preferredMethod: 'local-signet',
+  signetAppOrigin: 'http://localhost:5174',
+  relayUrl: 'ws://localhost:7777',
 });
 
 await Signet.login({
@@ -121,6 +131,8 @@ await Signet.login({
 });
 ```
 
+`redirect` and `qr` remain supported picker aliases for existing apps, but new integrations should use `local-signet` and `remote-signet`.
+
 When camera APIs are available, the bunker URI screen can scan `bunker://` QR codes directly. Paste remains the fallback.
 
 ### Headless/custom UI

package/dist/modal.js

@@ -14,7 +14,8 @@ import { bytesToHex } from '@noble/hashes/utils';
 import QRCode from 'qrcode';
 import jsQR from 'jsqr';
 const QR_BUNKER_CONNECT_TIMEOUT_MS = 8000;
-const DEFAULT_PICKER_METHODS = ['nip07', 'amber', 'redirect', 'qr', 'bunker', 'nostrconnect', 'nsec'];
+const DEFAULT_PICKER_METHODS = ['nip07', 'amber', 'local-signet', 'remote-signet', 'bunker', 'nostrconnect', 'nsec'];
+const ALL_PICKER_METHODS = [...DEFAULT_PICKER_METHODS, 'redirect', 'qr'];
 const DEFAULT_ADVANCED_METHODS = ['bunker', 'nostrconnect', 'nsec'];
 const DEFAULT_NOSTR_CONNECT_PERMS = ['sign_event', 'nip44_encrypt', 'nip44_decrypt'];
 function escapeHtml(str) {
@@ -254,12 +255,28 @@ async function startCameraQrScanner(input) {
 const METHOD_META = {
     nip07: { icon: '🌐', title: 'Browser extension', hint: 'bark, Alby, nos2x' },
     amber: { icon: '🤖', title: 'Sign in with Amber', hint: 'Android signer (NIP-55)' },
-    redirect: { icon: '🪪', title: 'Sign in with Signet', hint: 'Open Signet on this device' },
-    qr: { icon: '📱', title: 'Signet on another device', hint: 'Scan QR with your phone' },
+    'local-signet': { icon: '🪪', title: 'Local Signet', hint: 'Open Signet on this device' },
+    'remote-signet': { icon: '📱', title: 'Remote Signet', hint: 'Scan with Signet on another device' },
+    redirect: { icon: '🪪', title: 'Local Signet', hint: 'Open Signet on this device' },
+    qr: { icon: '📱', title: 'Remote Signet', hint: 'Scan with Signet on another device' },
     bunker: { icon: '🔑', title: 'Paste bunker URI', hint: 'For NIP-46 power users' },
     nostrconnect: { icon: '📡', title: 'Connect a Nostr signer', hint: 'Scan with nsec.app, Amber, Keychat...' },
     nsec: { icon: '⚠️', title: 'Paste private key', hint: 'In-memory only - risky, last resort' },
 };
+function pickerMethodKey(method) {
+    if (method === 'local-signet' || method === 'redirect')
+        return 'local-signet';
+    if (method === 'remote-signet' || method === 'qr')
+        return 'remote-signet';
+    return method;
+}
+function routePickerChoice(choice) {
+    if (choice === 'local-signet')
+        return 'redirect';
+    if (choice === 'remote-signet')
+        return 'qr';
+    return choice;
+}
 function isMethodAvailable(method) {
     if (method === 'nip07')
         return hasNip07();
@@ -277,9 +294,9 @@ function renderPicker(refs, opts) {
     return new Promise(resolve => {
         let advancedOpen = false;
         const availableMethods = opts.methods.filter(isMethodAvailable);
-        const advancedSet = new Set(opts.advancedMethods);
-        const primaryMethods = availableMethods.filter(method => !advancedSet.has(method));
-        const advancedMethods = availableMethods.filter(method => advancedSet.has(method));
+        const advancedSet = new Set(opts.advancedMethods.map(pickerMethodKey));
+        const primaryMethods = availableMethods.filter(method => !advancedSet.has(pickerMethodKey(method)));
+        const advancedMethods = availableMethods.filter(method => advancedSet.has(pickerMethodKey(method)));
         const attachChoiceHandlers = () => {
             refs.dialog.querySelectorAll('button[data-choice]').forEach(btn => {
                 btn.addEventListener('click', () => {
@@ -806,20 +823,25 @@ async function runNsecFlow(refs, opts) {
 }
 function uniquePickerMethods(input, fallback) {
     const source = input ?? fallback;
-    const allowed = new Set(DEFAULT_PICKER_METHODS);
+    const allowed = new Set(ALL_PICKER_METHODS);
+    const seen = new Set();
     const out = [];
     for (const method of source) {
         if (!allowed.has(method))
             continue;
-        if (!out.includes(method))
-            out.push(method);
+        const key = pickerMethodKey(method);
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        out.push(method);
     }
     return input === undefined && out.length === 0 ? [...fallback] : out;
 }
 function resolveMethodConfig(opts) {
     const methods = uniquePickerMethods(opts.methods, DEFAULT_PICKER_METHODS);
+    const methodKeys = new Set(methods.map(pickerMethodKey));
     const advancedMethods = uniquePickerMethods(opts.advancedMethods, DEFAULT_ADVANCED_METHODS)
-        .filter(method => methods.includes(method));
+        .filter(method => methodKeys.has(pickerMethodKey(method)));
     return { methods, advancedMethods };
 }
 function resolveRelayUrls(opts) {
@@ -895,11 +917,12 @@ async function runLoginModal(opts) {
             const choice = resolved.preferredMethod
                 ? resolved.preferredMethod
                 : await Promise.race([renderPicker(refs, resolved), aborted]);
+            const routeChoice = choice === null ? null : routePickerChoice(choice);
             if (userAborted)
                 return null;
-            if (choice === null || choice === 'cancel')
+            if (routeChoice === null || routeChoice === 'cancel')
                 return null;
-            if (choice === 'nip07') {
+            if (routeChoice === 'nip07') {
                 const result = await Promise.race([runNip07Flow(refs, resolved), aborted]);
                 if (userAborted)
                     return null;
@@ -919,7 +942,7 @@ async function runLoginModal(opts) {
                     authEvent: result.authEvent,
                 };
             }
-            if (choice === 'redirect') {
+            if (routeChoice === 'redirect') {
                 // Same-device Signet in the modal must keep this app tab alive and keep
                 // the My Signet tab alive as the ongoing bunker. Use the relay-backed
                 // auth response path here; explicit `login({ mode: 'redirect' })`
@@ -942,7 +965,7 @@ async function runLoginModal(opts) {
                 }
                 return session;
             }
-            if (choice === 'amber') {
+            if (routeChoice === 'amber') {
                 // Same-tab navigation to a `nostrsigner:` URL. Android dispatches
                 // it to Amber; the page comes back via callbackUrl with the signed
                 // event in `?event=`. Picked up on next boot by handleRedirectCallback.
@@ -955,7 +978,7 @@ async function runLoginModal(opts) {
                 });
                 return null; // unreachable
             }
-            if (choice === 'qr') {
+            if (routeChoice === 'qr') {
                 const result = await Promise.race([runRedirectFlow(refs, resolved), aborted]);
                 if (userAborted)
                     return null;
@@ -974,7 +997,7 @@ async function runLoginModal(opts) {
                 }
                 return session;
             }
-            if (choice === 'bunker') {
+            if (routeChoice === 'bunker') {
                 const signer = await Promise.race([runBunkerFlow(refs, resolved), aborted]);
                 if (userAborted)
                     return null;
@@ -1000,7 +1023,7 @@ async function runLoginModal(opts) {
                     authEvent,
                 };
             }
-            if (choice === 'nostrconnect') {
+            if (routeChoice === 'nostrconnect') {
                 const signer = await Promise.race([runNostrConnectFlow(refs, resolved), aborted]);
                 if (userAborted)
                     return null;
@@ -1029,7 +1052,7 @@ async function runLoginModal(opts) {
                     authEvent,
                 };
             }
-            if (choice === 'nsec') {
+            if (routeChoice === 'nsec') {
                 const signer = await Promise.race([runNsecFlow(refs, resolved), aborted]);
                 if (userAborted)
                     return null;