@decentnetwork/beagle-connect

npm install @decentnetwork/beagle-connect@0.1.2 @decentnetwork/peer@0.1.172

error during build:
node_modules/@decentnetwork/peer/dist/utils/bytes.js (31:9): "randomBytes" is not exported by "__vite-browser-external", imported by "node_modules/@decentnetwork/peer/dist/utils/bytes.js".

// src/peer-browser.js
// beagle-connect needs only these two functions from @decentnetwork/peer.
// Importing the package root pulls in Node-only transports (dgram, fs, net),
// so point the bundler at the two browser-safe modules instead.
export { verifyDetached } from "@decentnetwork/peer/dist/crypto/sign.js";
export { base58ToBytes } from "@decentnetwork/peer/dist/utils/base58.js";

// vite.config.js
import { defineConfig } from "vite";
import { fileURLToPath } from "node:url";

export default defineConfig({
  resolve: {
    alias: [
      {
        find: /^@decentnetwork\/peer$/,
        replacement: fileURLToPath(new URL("./src/peer-browser.js", import.meta.url)),
      },
    ],
  },
});

<!-- index.html -->
<!doctype html>
<html>
  <head><meta charset="utf-8" /><title>Sign in with Beagle</title></head>
  <body>
    <button id="signin">Sign in with Beagle</button>
    <pre id="out"></pre>
    <script type="module" src="/src/main.js"></script>
  </body>
</html>

// src/main.js
import { signIn, readLaunch, pickUiOrigin } from "@decentnetwork/beagle-connect";

const out = document.getElementById("out");
const show = (x) => (out.textContent += JSON.stringify(x, null, 2) + "\n");

// Arrived from Beagle's Apps tab? (null when there is no #beagle= fragment)
readLaunch().then((who) => who && show({ launch: who })).catch((e) => show({ launchError: e.message }));

// Which Beagle would answer right now?
pickUiOrigin().then((origin) => show({ beagleAt: origin }));

document.getElementById("signin").addEventListener("click", async () => {
  // In production the nonce comes from your server and is single-use.
  const nonce = crypto.randomUUID();
  try {
    const who = await signIn({ nonce }); // opens the popup synchronously, inside the click
    show({ userid: who.userid, address: who.address, name: who.name, uiOrigin: who.uiOrigin });
    // POST `who` to your server and verify it there before minting a session.
  } catch (e) {
    show({ error: e.message });
  }
});

// verify.mjs
// Server-side check of a "Sign in with Beagle" assertion, in plain Node.
// We play the Beagle client here (sign with an X25519 key) so the example is
// self-contained; in production `userid` and `sig` come from signIn().
import { generateKeyPairSync, randomUUID } from "node:crypto";
import { signDetached, bytesToBase58 } from "@decentnetwork/peer";
import { verifySignIn, verifyLaunch, LAUNCH_MAX_AGE_MS, DEFAULT_UI_ORIGINS } from "@decentnetwork/beagle-connect";

const { publicKey, privateKey } = generateKeyPairSync("x25519");
const pub = Buffer.from(publicKey.export({ format: "jwk" }).x, "base64url");
const sec = Buffer.from(privateKey.export({ format: "jwk" }).d, "base64url");
const userid = bytesToBase58(new Uint8Array(pub));            // a Carrier userid IS the public key
const toHex = (b) => Buffer.from(b).toString("hex");

const MY_ORIGIN = "https://your.app";
const nonce = randomUUID();                                     // issued by your server, single use
const sig = toHex(signDetached(new Uint8Array(sec),
  new TextEncoder().encode(`decent-auth\n${MY_ORIGIN}\n${nonce}`)));

console.log("signIn verifies:          ", verifySignIn(userid, MY_ORIGIN, nonce, sig));
console.log("other origin rejected:    ", verifySignIn(userid, "https://evil.example", nonce, sig));
console.log("replayed as launch:       ", verifyLaunch(userid, MY_ORIGIN, nonce, sig));

const ts = Date.now();
const launchSig = toHex(signDetached(new Uint8Array(sec),
  new TextEncoder().encode(`decent-launch\n${MY_ORIGIN}\n${ts}`)));
console.log("launch verifies:          ", verifyLaunch(userid, MY_ORIGIN, ts, launchSig));
console.log("launch max age (ms):      ", LAUNCH_MAX_AGE_MS);
console.log("origins probed:           ", DEFAULT_UI_ORIGINS.join(", "));

$ npx vite build
vite v5.4.10 building for production...
transforming...
✓ 15 modules transformed.
rendering chunks...
computing gzip size...
dist/index.html                 0.28 kB │ gzip:  0.20 kB
dist/assets/index-BO6rXdEv.js  57.60 kB │ gzip: 18.86 kB
✓ built in 212ms

$ node verify.mjs
signIn verifies:           true
other origin rejected:     false
replayed as launch:        false
launch verifies:           true
launch max age (ms):       120000
origins probed:            http://127.0.0.1:8766, http://localhost:8766, https://localhost:8766, https://127.0.0.1:8766, http://localhost:8767, http://localhost:8768, http://localhost:8765, https://app.beagle.chat