- We generate an Ed25519 key inside the audited crypto core and wrap its seed
- under this master password. The seed never leaves the core.
+ We generate an Ed25519 key inside the audited crypto core and wrap its seed under this
+ master password. The seed never leaves the core.
- Each passport is a fresh WebID + pod on a server, all controlled by your
- one master DID.
+ Each passport is a fresh WebID + pod on a server, all controlled by your one master DID.
{passports.length === 0 && (
@@ -397,7 +387,7 @@ function SessionBindingCard({
setStatus(
result.ok
? "Verified: this WebID is controlled by your DID — checked locally, no server."
- : `Not verified: ${result.reason ?? "unknown"}.`
+ : `Not verified: ${result.reason ?? "unknown"}.`,
);
} catch (e) {
setVerdict("fail");
@@ -412,8 +402,8 @@ function SessionBindingCard({
This session
{webId}
- Prove your master DID controls the WebID you're signed in as, by writing a
- signed binding into this pod.
+ Prove your master DID controls the WebID you're signed in as, by writing a signed binding
+ into this pod.
void bind()} disabled={busy !== ""}>
@@ -465,7 +455,7 @@ function PassportRow({
// definite yes; otherwise we probe once so the UI only offers DID login where
// it can actually work — no dead-end clicks against stock CSS. null = checking.
const [didSupported, setDidSupported] = useState(
- passport.didLinked ? true : null
+ passport.didLinked ? true : null,
);
const podRoot = passport.podRoots[0];
@@ -522,7 +512,7 @@ function PassportRow({
setStatus(
e instanceof Error
? `Couldn't write the binding: ${e.message} (sign in as this passport to bind it).`
- : "Couldn't write the binding."
+ : "Couldn't write the binding.",
);
} finally {
setBusy("");
@@ -536,7 +526,9 @@ function PassportRow({
try {
const { result } = await readAndVerify(podRoot, did);
setVerdict(result.ok ? "ok" : "fail");
- setStatus(result.ok ? "Verified — controlled by your DID." : `Not verified: ${result.reason}.`);
+ setStatus(
+ result.ok ? "Verified — controlled by your DID." : `Not verified: ${result.reason}.`,
+ );
} catch (e) {
setVerdict("fail");
setStatus(e instanceof Error ? e.message : "Verification failed.");
@@ -554,7 +546,11 @@ function PassportRow({
setDidMsg(null);
setDidVerdict(null);
try {
- const { token, webId } = await loginWithDid({ did, sign: walletSign, server: passport.server });
+ const { token, webId } = await loginWithDid({
+ did,
+ sign: walletSign,
+ server: passport.server,
+ });
// Positive confirmation, server-agnostically: a DID-session server
// (solid-server-rs) returns the authenticated WebID directly; the CSS
// DID-fork returns no WebID, so we confirm the token unlocks the account
@@ -572,7 +568,7 @@ function PassportRow({
setDidMsg(
webId
? `Authenticated as ${webId} by signing a challenge — no password.`
- : "Authenticated to this account by signing a challenge — no password. A fresh account token was minted."
+ : "Authenticated to this account by signing a challenge — no password. A fresh account token was minted.",
);
// A successful login proves the DID is linked; remember it for the badge.
if (!passport.didLinked) await updatePassport(passport.id, { didLinked: true });
@@ -596,9 +592,7 @@ function PassportRow({
setStatus("Opened in the rail.");
} catch (e) {
setStatus(
- e instanceof Error
- ? `Couldn't open: ${e.message}`
- : "Couldn't open this passport's pod."
+ e instanceof Error ? `Couldn't open: ${e.message}` : "Couldn't open this passport's pod.",
);
} finally {
setBusy("");
@@ -653,22 +647,18 @@ function PassportRow({
) : canSwitch ? (
- Sign in as this passport — the shell holds its key, so no password and
- no redirect. Then you can write its binding or open its pod.
+ Sign in as this passport — the shell holds its key, so no password and no redirect. Then
+ you can write its binding or open its pod.
-
void switchTo()}
- disabled={busy !== ""}
- >
+ void switchTo()} disabled={busy !== ""}>
{busy === "switch" ? "Signing in…" : "Switch to this passport"}
) : (
- This passport was captured manually (no stored key). Sign in as it the
- usual way to write its binding or open its pod.
+ This passport was captured manually (no stored key). Sign in as it the usual way to
+ write its binding or open its pod.
Sign in as this passport
@@ -690,14 +680,14 @@ function PassportRow({
{didSupported === false ? (
- This server is stock CSS — it doesn't accept DID login. The shell
- signs you in here with this passport's stored key instead.
+ This server is stock CSS — it doesn't accept DID login. The shell signs you in here
+ with this passport's stored key instead.
) : (
<>
- Prove control of your master DID by signing a one-time challenge and
- get a fresh account session — no password, no redirect.
+ Prove control of your master DID by signing a one-time challenge and get a fresh
+ account session — no password, no redirect.
void
Add a passport
- Mint a fresh WebID + pod on a server, or capture an existing one. Either
- way your one master DID controls it.
+ Mint a fresh WebID + pod on a server, or capture an existing one. Either way your one
+ master DID controls it.
@@ -847,8 +837,8 @@ function AddPassportDialog({ did, onClose }: { did: string; onClose: () => void
)}
{serverDid === "no" && (
- Stock CSS — no DID login here. The passport still works via its
- stored key (password-less switch).
+ Stock CSS — no DID login here. The passport still works via its stored key
+ (password-less switch).
)}
@@ -864,10 +854,9 @@ function AddPassportDialog({ did, onClose }: { did: string; onClose: () => void
The shell creates a brand-new account on the server with a fresh WebID,
- generates a strong password for you (you never type or
- see one), and stores a key so it can sign you in later with no password
- and no redirect. The key is sealed in your encrypted wallet — never
- written to a pod.
+ generates a strong password for you (you never type or see one), and
+ stores a key so it can sign you in later with no password and no redirect. The key is
+ sealed in your encrypted wallet — never written to a pod.
) : (
@@ -925,9 +914,8 @@ function Field({
function XssCaveat() {
return (
- Prototype note: in the browser, your unlocked seed lives in memory for the
- session (a documented XSS tradeoff). The hardened native build custodies it
- in the OS keychain.
+ Prototype note: in the browser, your unlocked seed lives in memory for the session (a
+ documented XSS tradeoff). The hardened native build custodies it in the OS keychain.
);
}
diff --git a/src/apps/identity/useWallet.ts b/src/apps/identity/useWallet.ts
index 5054b60..692a233 100644
--- a/src/apps/identity/useWallet.ts
+++ b/src/apps/identity/useWallet.ts
@@ -1,8 +1,8 @@
"use client";
import { useEffect, useState } from "react";
-import { getView, subscribe } from "@/lib/identity/wallet";
import type { WalletView } from "@/lib/identity/types";
+import { getView, subscribe } from "@/lib/identity/wallet";
/**
* Subscribe a component to the process-wide wallet singleton. Re-renders on every
diff --git a/src/apps/registry.tsx b/src/apps/registry.tsx
index 15e56fc..0faf681 100644
--- a/src/apps/registry.tsx
+++ b/src/apps/registry.tsx
@@ -1,6 +1,6 @@
"use client";
-import { lazy, type ComponentType } from "react";
+import { type ComponentType, lazy } from "react";
/**
* Registry of in-process apps the shell can render in the app body (PRD §3:
diff --git a/src/apps/vault/ItemDetail.tsx b/src/apps/vault/ItemDetail.tsx
index c31375f..bf26030 100644
--- a/src/apps/vault/ItemDetail.tsx
+++ b/src/apps/vault/ItemDetail.tsx
@@ -1,10 +1,10 @@
"use client";
-import { useCallback, useEffect, useState } from "react";
import { Button, Separator } from "@mind-studio/ui";
+import { useCallback, useEffect, useState } from "react";
import type { AsyncCryptoCore } from "@/lib/platform";
-import type { VaultItemMeta, VaultItemSecret } from "@/lib/vault/model";
import { copyWithAutoClear } from "@/lib/vault/clipboard";
+import type { VaultItemMeta, VaultItemSecret } from "@/lib/vault/model";
const TOTP_PERIOD = 30;
const TOTP_DIGITS = 6;
diff --git a/src/apps/vault/ItemEditor.tsx b/src/apps/vault/ItemEditor.tsx
index c7d95a1..e9176f3 100644
--- a/src/apps/vault/ItemEditor.tsx
+++ b/src/apps/vault/ItemEditor.tsx
@@ -1,22 +1,22 @@
"use client";
-import { useEffect, useState } from "react";
import {
Button,
- Input,
- Label,
Dialog,
DialogContent,
- DialogHeader,
- DialogTitle,
DialogDescription,
DialogFooter,
+ DialogHeader,
+ DialogTitle,
+ Input,
+ Label,
Select,
- SelectTrigger,
- SelectValue,
SelectContent,
SelectItem,
+ SelectTrigger,
+ SelectValue,
} from "@mind-studio/ui";
+import { useEffect, useState } from "react";
import type { AsyncCryptoCore } from "@/lib/platform";
import type { VaultItemKind, VaultItemMeta, VaultItemSecret } from "@/lib/vault/model";
import { PasswordGenerator } from "./PasswordGenerator";
@@ -215,7 +215,7 @@ export function ItemEditor({
digits: true,
symbols: true,
avoidAmbiguous: true,
- })
+ }),
);
} catch {
// Panel still opens; its own Generate surfaces errors.
diff --git a/src/apps/vault/PasswordGenerator.tsx b/src/apps/vault/PasswordGenerator.tsx
index 3824b06..951fb67 100644
--- a/src/apps/vault/PasswordGenerator.tsx
+++ b/src/apps/vault/PasswordGenerator.tsx
@@ -1,7 +1,16 @@
"use client";
+import {
+ Button,
+ Checkbox,
+ Input,
+ Label,
+ Tabs,
+ TabsContent,
+ TabsList,
+ TabsTrigger,
+} from "@mind-studio/ui";
import { useCallback, useState } from "react";
-import { Button, Input, Label, Checkbox, Tabs, TabsList, TabsTrigger, TabsContent } from "@mind-studio/ui";
import type { AsyncCryptoCore } from "@/lib/platform";
import { copyWithAutoClear } from "@/lib/vault/clipboard";
@@ -34,7 +43,7 @@ export function PasswordGenerator({
setError(null);
try {
setValue(
- await core.generatePassword({ length, upper, lower, digits, symbols, avoidAmbiguous })
+ await core.generatePassword({ length, upper, lower, digits, symbols, avoidAmbiguous }),
);
} catch (e) {
setError(e instanceof Error ? e.message : "Could not generate");
diff --git a/src/apps/vault/ProviderAccounts.tsx b/src/apps/vault/ProviderAccounts.tsx
index bcf36de..bbe301e 100644
--- a/src/apps/vault/ProviderAccounts.tsx
+++ b/src/apps/vault/ProviderAccounts.tsx
@@ -15,25 +15,22 @@
* carries the reusable-login warning (PRD-PROVIDER-ACCOUNTS §3 tradeoff).
*/
-import { useEffect, useState } from "react";
import { Button, Input, Separator } from "@mind-studio/ui";
+import { useEffect, useState } from "react";
import {
- getView,
- getPassports,
- subscribe,
- markEmailVerified,
- addManualProviderAccount,
-} from "@/lib/identity/wallet";
-import {
- projectProviderAccounts,
- type ProviderAccount,
-} from "@/lib/identity/provider-accounts";
-import {
- validateManualAccount,
isManualAccountValid,
type ManualAccountDraft,
+ validateManualAccount,
} from "@/lib/identity/manual-account";
+import { type ProviderAccount, projectProviderAccounts } from "@/lib/identity/provider-accounts";
import { planProviderEntry } from "@/lib/identity/provider-entry";
+import {
+ addManualProviderAccount,
+ getPassports,
+ getView,
+ markEmailVerified,
+ subscribe,
+} from "@/lib/identity/wallet";
import { brokeredHandoffAvailable } from "@/lib/shell/brokered-bridge";
import { useShell } from "@/lib/shell/context";
import { copyWithAutoClear } from "@/lib/vault/clipboard";
@@ -70,9 +67,7 @@ export function ProviderAccounts() {
{accounts.length}
-
- logins for your other pods
-
+
logins for your other pods
{open && (
@@ -86,8 +81,8 @@ export function ProviderAccounts() {
))}
{accounts.length === 0 && (
- No saved logins yet. Add one for a provider you registered yourself
- (e.g. Inrupt PodSpaces) to keep its login here.
+ No saved logins yet. Add one for a provider you registered yourself (e.g. Inrupt
+ PodSpaces) to keep its login here.
)}
@@ -147,14 +142,11 @@ function AddLoginForm() {
};
return (
-