@abraca/dabra 1.3.0 → 1.3.2

package/dist/abracadabra-provider.cjs

@@ -31,6 +31,7 @@ yjs = __toESM(yjs);
 let _lifeomic_attempt = require("@lifeomic/attempt");
 let _noble_ed25519 = require("@noble/ed25519");
 _noble_ed25519 = __toESM(_noble_ed25519);
+let _scure_bip39 = require("@scure/bip39");
 
 //#region packages/provider/src/awarenessStatesToArray.ts
 const awarenessStatesToArray = (states) => {
@@ -3252,6 +3253,30 @@ var AbracadabraClient = class {
 			auth: false
 		});
 	}
+	/** Request a device session token after successful crypto auth. Requires valid JWT. */
+	async requestDeviceSession(opts) {
+		return this.request("POST", "/auth/device-session", { body: {
+			publicKey: opts.publicKey,
+			deviceName: opts.deviceName
+		} });
+	}
+	/** Exchange a device session token for a fresh JWT. No biometric/passkey needed. */
+	async refreshWithDeviceSession(sessionToken) {
+		const res = await this.request("POST", "/auth/refresh", {
+			body: { sessionToken },
+			auth: false
+		});
+		this.token = res.token;
+		return res.token;
+	}
+	/** List active device sessions for the authenticated user. */
+	async listDeviceSessions() {
+		return (await this.request("GET", "/auth/device-session")).sessions;
+	}
+	/** Revoke a device session by ID. */
+	async revokeDeviceSession(sessionId) {
+		await this.request("DELETE", `/auth/device-session/${encodeURIComponent(sessionId)}`);
+	}
 	/**
 	* Fetch a short-lived anonymous pairing token for WebRTC signaling.
 	* No authentication required. The token only grants access to `__pairing_*` rooms.
@@ -7096,23 +7121,2202 @@ const ristretto255_oprf = createORPF({
 	hashToScalar: ristretto255_hasher.hashToScalar
 });
 
+//#endregion
+//#region node_modules/@scure/bip39/esm/wordlists/english.js
+const wordlist = `abandon
+ability
+able
+about
+above
+absent
+absorb
+abstract
+absurd
+abuse
+access
+accident
+account
+accuse
+achieve
+acid
+acoustic
+acquire
+across
+act
+action
+actor
+actress
+actual
+adapt
+add
+addict
+address
+adjust
+admit
+adult
+advance
+advice
+aerobic
+affair
+afford
+afraid
+again
+age
+agent
+agree
+ahead
+aim
+air
+airport
+aisle
+alarm
+album
+alcohol
+alert
+alien
+all
+alley
+allow
+almost
+alone
+alpha
+already
+also
+alter
+always
+amateur
+amazing
+among
+amount
+amused
+analyst
+anchor
+ancient
+anger
+angle
+angry
+animal
+ankle
+announce
+annual
+another
+answer
+antenna
+antique
+anxiety
+any
+apart
+apology
+appear
+apple
+approve
+april
+arch
+arctic
+area
+arena
+argue
+arm
+armed
+armor
+army
+around
+arrange
+arrest
+arrive
+arrow
+art
+artefact
+artist
+artwork
+ask
+aspect
+assault
+asset
+assist
+assume
+asthma
+athlete
+atom
+attack
+attend
+attitude
+attract
+auction
+audit
+august
+aunt
+author
+auto
+autumn
+average
+avocado
+avoid
+awake
+aware
+away
+awesome
+awful
+awkward
+axis
+baby
+bachelor
+bacon
+badge
+bag
+balance
+balcony
+ball
+bamboo
+banana
+banner
+bar
+barely
+bargain
+barrel
+base
+basic
+basket
+battle
+beach
+bean
+beauty
+because
+become
+beef
+before
+begin
+behave
+behind
+believe
+below
+belt
+bench
+benefit
+best
+betray
+better
+between
+beyond
+bicycle
+bid
+bike
+bind
+biology
+bird
+birth
+bitter
+black
+blade
+blame
+blanket
+blast
+bleak
+bless
+blind
+blood
+blossom
+blouse
+blue
+blur
+blush
+board
+boat
+body
+boil
+bomb
+bone
+bonus
+book
+boost
+border
+boring
+borrow
+boss
+bottom
+bounce
+box
+boy
+bracket
+brain
+brand
+brass
+brave
+bread
+breeze
+brick
+bridge
+brief
+bright
+bring
+brisk
+broccoli
+broken
+bronze
+broom
+brother
+brown
+brush
+bubble
+buddy
+budget
+buffalo
+build
+bulb
+bulk
+bullet
+bundle
+bunker
+burden
+burger
+burst
+bus
+business
+busy
+butter
+buyer
+buzz
+cabbage
+cabin
+cable
+cactus
+cage
+cake
+call
+calm
+camera
+camp
+can
+canal
+cancel
+candy
+cannon
+canoe
+canvas
+canyon
+capable
+capital
+captain
+car
+carbon
+card
+cargo
+carpet
+carry
+cart
+case
+cash
+casino
+castle
+casual
+cat
+catalog
+catch
+category
+cattle
+caught
+cause
+caution
+cave
+ceiling
+celery
+cement
+census
+century
+cereal
+certain
+chair
+chalk
+champion
+change
+chaos
+chapter
+charge
+chase
+chat
+cheap
+check
+cheese
+chef
+cherry
+chest
+chicken
+chief
+child
+chimney
+choice
+choose
+chronic
+chuckle
+chunk
+churn
+cigar
+cinnamon
+circle
+citizen
+city
+civil
+claim
+clap
+clarify
+claw
+clay
+clean
+clerk
+clever
+click
+client
+cliff
+climb
+clinic
+clip
+clock
+clog
+close
+cloth
+cloud
+clown
+club
+clump
+cluster
+clutch
+coach
+coast
+coconut
+code
+coffee
+coil
+coin
+collect
+color
+column
+combine
+come
+comfort
+comic
+common
+company
+concert
+conduct
+confirm
+congress
+connect
+consider
+control
+convince
+cook
+cool
+copper
+copy
+coral
+core
+corn
+correct
+cost
+cotton
+couch
+country
+couple
+course
+cousin
+cover
+coyote
+crack
+cradle
+craft
+cram
+crane
+crash
+crater
+crawl
+crazy
+cream
+credit
+creek
+crew
+cricket
+crime
+crisp
+critic
+crop
+cross
+crouch
+crowd
+crucial
+cruel
+cruise
+crumble
+crunch
+crush
+cry
+crystal
+cube
+culture
+cup
+cupboard
+curious
+current
+curtain
+curve
+cushion
+custom
+cute
+cycle
+dad
+damage
+damp
+dance
+danger
+daring
+dash
+daughter
+dawn
+day
+deal
+debate
+debris
+decade
+december
+decide
+decline
+decorate
+decrease
+deer
+defense
+define
+defy
+degree
+delay
+deliver
+demand
+demise
+denial
+dentist
+deny
+depart
+depend
+deposit
+depth
+deputy
+derive
+describe
+desert
+design
+desk
+despair
+destroy
+detail
+detect
+develop
+device
+devote
+diagram
+dial
+diamond
+diary
+dice
+diesel
+diet
+differ
+digital
+dignity
+dilemma
+dinner
+dinosaur
+direct
+dirt
+disagree
+discover
+disease
+dish
+dismiss
+disorder
+display
+distance
+divert
+divide
+divorce
+dizzy
+doctor
+document
+dog
+doll
+dolphin
+domain
+donate
+donkey
+donor
+door
+dose
+double
+dove
+draft
+dragon
+drama
+drastic
+draw
+dream
+dress
+drift
+drill
+drink
+drip
+drive
+drop
+drum
+dry
+duck
+dumb
+dune
+during
+dust
+dutch
+duty
+dwarf
+dynamic
+eager
+eagle
+early
+earn
+earth
+easily
+east
+easy
+echo
+ecology
+economy
+edge
+edit
+educate
+effort
+egg
+eight
+either
+elbow
+elder
+electric
+elegant
+element
+elephant
+elevator
+elite
+else
+embark
+embody
+embrace
+emerge
+emotion
+employ
+empower
+empty
+enable
+enact
+end
+endless
+endorse
+enemy
+energy
+enforce
+engage
+engine
+enhance
+enjoy
+enlist
+enough
+enrich
+enroll
+ensure
+enter
+entire
+entry
+envelope
+episode
+equal
+equip
+era
+erase
+erode
+erosion
+error
+erupt
+escape
+essay
+essence
+estate
+eternal
+ethics
+evidence
+evil
+evoke
+evolve
+exact
+example
+excess
+exchange
+excite
+exclude
+excuse
+execute
+exercise
+exhaust
+exhibit
+exile
+exist
+exit
+exotic
+expand
+expect
+expire
+explain
+expose
+express
+extend
+extra
+eye
+eyebrow
+fabric
+face
+faculty
+fade
+faint
+faith
+fall
+false
+fame
+family
+famous
+fan
+fancy
+fantasy
+farm
+fashion
+fat
+fatal
+father
+fatigue
+fault
+favorite
+feature
+february
+federal
+fee
+feed
+feel
+female
+fence
+festival
+fetch
+fever
+few
+fiber
+fiction
+field
+figure
+file
+film
+filter
+final
+find
+fine
+finger
+finish
+fire
+firm
+first
+fiscal
+fish
+fit
+fitness
+fix
+flag
+flame
+flash
+flat
+flavor
+flee
+flight
+flip
+float
+flock
+floor
+flower
+fluid
+flush
+fly
+foam
+focus
+fog
+foil
+fold
+follow
+food
+foot
+force
+forest
+forget
+fork
+fortune
+forum
+forward
+fossil
+foster
+found
+fox
+fragile
+frame
+frequent
+fresh
+friend
+fringe
+frog
+front
+frost
+frown
+frozen
+fruit
+fuel
+fun
+funny
+furnace
+fury
+future
+gadget
+gain
+galaxy
+gallery
+game
+gap
+garage
+garbage
+garden
+garlic
+garment
+gas
+gasp
+gate
+gather
+gauge
+gaze
+general
+genius
+genre
+gentle
+genuine
+gesture
+ghost
+giant
+gift
+giggle
+ginger
+giraffe
+girl
+give
+glad
+glance
+glare
+glass
+glide
+glimpse
+globe
+gloom
+glory
+glove
+glow
+glue
+goat
+goddess
+gold
+good
+goose
+gorilla
+gospel
+gossip
+govern
+gown
+grab
+grace
+grain
+grant
+grape
+grass
+gravity
+great
+green
+grid
+grief
+grit
+grocery
+group
+grow
+grunt
+guard
+guess
+guide
+guilt
+guitar
+gun
+gym
+habit
+hair
+half
+hammer
+hamster
+hand
+happy
+harbor
+hard
+harsh
+harvest
+hat
+have
+hawk
+hazard
+head
+health
+heart
+heavy
+hedgehog
+height
+hello
+helmet
+help
+hen
+hero
+hidden
+high
+hill
+hint
+hip
+hire
+history
+hobby
+hockey
+hold
+hole
+holiday
+hollow
+home
+honey
+hood
+hope
+horn
+horror
+horse
+hospital
+host
+hotel
+hour
+hover
+hub
+huge
+human
+humble
+humor
+hundred
+hungry
+hunt
+hurdle
+hurry
+hurt
+husband
+hybrid
+ice
+icon
+idea
+identify
+idle
+ignore
+ill
+illegal
+illness
+image
+imitate
+immense
+immune
+impact
+impose
+improve
+impulse
+inch
+include
+income
+increase
+index
+indicate
+indoor
+industry
+infant
+inflict
+inform
+inhale
+inherit
+initial
+inject
+injury
+inmate
+inner
+innocent
+input
+inquiry
+insane
+insect
+inside
+inspire
+install
+intact
+interest
+into
+invest
+invite
+involve
+iron
+island
+isolate
+issue
+item
+ivory
+jacket
+jaguar
+jar
+jazz
+jealous
+jeans
+jelly
+jewel
+job
+join
+joke
+journey
+joy
+judge
+juice
+jump
+jungle
+junior
+junk
+just
+kangaroo
+keen
+keep
+ketchup
+key
+kick
+kid
+kidney
+kind
+kingdom
+kiss
+kit
+kitchen
+kite
+kitten
+kiwi
+knee
+knife
+knock
+know
+lab
+label
+labor
+ladder
+lady
+lake
+lamp
+language
+laptop
+large
+later
+latin
+laugh
+laundry
+lava
+law
+lawn
+lawsuit
+layer
+lazy
+leader
+leaf
+learn
+leave
+lecture
+left
+leg
+legal
+legend
+leisure
+lemon
+lend
+length
+lens
+leopard
+lesson
+letter
+level
+liar
+liberty
+library
+license
+life
+lift
+light
+like
+limb
+limit
+link
+lion
+liquid
+list
+little
+live
+lizard
+load
+loan
+lobster
+local
+lock
+logic
+lonely
+long
+loop
+lottery
+loud
+lounge
+love
+loyal
+lucky
+luggage
+lumber
+lunar
+lunch
+luxury
+lyrics
+machine
+mad
+magic
+magnet
+maid
+mail
+main
+major
+make
+mammal
+man
+manage
+mandate
+mango
+mansion
+manual
+maple
+marble
+march
+margin
+marine
+market
+marriage
+mask
+mass
+master
+match
+material
+math
+matrix
+matter
+maximum
+maze
+meadow
+mean
+measure
+meat
+mechanic
+medal
+media
+melody
+melt
+member
+memory
+mention
+menu
+mercy
+merge
+merit
+merry
+mesh
+message
+metal
+method
+middle
+midnight
+milk
+million
+mimic
+mind
+minimum
+minor
+minute
+miracle
+mirror
+misery
+miss
+mistake
+mix
+mixed
+mixture
+mobile
+model
+modify
+mom
+moment
+monitor
+monkey
+monster
+month
+moon
+moral
+more
+morning
+mosquito
+mother
+motion
+motor
+mountain
+mouse
+move
+movie
+much
+muffin
+mule
+multiply
+muscle
+museum
+mushroom
+music
+must
+mutual
+myself
+mystery
+myth
+naive
+name
+napkin
+narrow
+nasty
+nation
+nature
+near
+neck
+need
+negative
+neglect
+neither
+nephew
+nerve
+nest
+net
+network
+neutral
+never
+news
+next
+nice
+night
+noble
+noise
+nominee
+noodle
+normal
+north
+nose
+notable
+note
+nothing
+notice
+novel
+now
+nuclear
+number
+nurse
+nut
+oak
+obey
+object
+oblige
+obscure
+observe
+obtain
+obvious
+occur
+ocean
+october
+odor
+off
+offer
+office
+often
+oil
+okay
+old
+olive
+olympic
+omit
+once
+one
+onion
+online
+only
+open
+opera
+opinion
+oppose
+option
+orange
+orbit
+orchard
+order
+ordinary
+organ
+orient
+original
+orphan
+ostrich
+other
+outdoor
+outer
+output
+outside
+oval
+oven
+over
+own
+owner
+oxygen
+oyster
+ozone
+pact
+paddle
+page
+pair
+palace
+palm
+panda
+panel
+panic
+panther
+paper
+parade
+parent
+park
+parrot
+party
+pass
+patch
+path
+patient
+patrol
+pattern
+pause
+pave
+payment
+peace
+peanut
+pear
+peasant
+pelican
+pen
+penalty
+pencil
+people
+pepper
+perfect
+permit
+person
+pet
+phone
+photo
+phrase
+physical
+piano
+picnic
+picture
+piece
+pig
+pigeon
+pill
+pilot
+pink
+pioneer
+pipe
+pistol
+pitch
+pizza
+place
+planet
+plastic
+plate
+play
+please
+pledge
+pluck
+plug
+plunge
+poem
+poet
+point
+polar
+pole
+police
+pond
+pony
+pool
+popular
+portion
+position
+possible
+post
+potato
+pottery
+poverty
+powder
+power
+practice
+praise
+predict
+prefer
+prepare
+present
+pretty
+prevent
+price
+pride
+primary
+print
+priority
+prison
+private
+prize
+problem
+process
+produce
+profit
+program
+project
+promote
+proof
+property
+prosper
+protect
+proud
+provide
+public
+pudding
+pull
+pulp
+pulse
+pumpkin
+punch
+pupil
+puppy
+purchase
+purity
+purpose
+purse
+push
+put
+puzzle
+pyramid
+quality
+quantum
+quarter
+question
+quick
+quit
+quiz
+quote
+rabbit
+raccoon
+race
+rack
+radar
+radio
+rail
+rain
+raise
+rally
+ramp
+ranch
+random
+range
+rapid
+rare
+rate
+rather
+raven
+raw
+razor
+ready
+real
+reason
+rebel
+rebuild
+recall
+receive
+recipe
+record
+recycle
+reduce
+reflect
+reform
+refuse
+region
+regret
+regular
+reject
+relax
+release
+relief
+rely
+remain
+remember
+remind
+remove
+render
+renew
+rent
+reopen
+repair
+repeat
+replace
+report
+require
+rescue
+resemble
+resist
+resource
+response
+result
+retire
+retreat
+return
+reunion
+reveal
+review
+reward
+rhythm
+rib
+ribbon
+rice
+rich
+ride
+ridge
+rifle
+right
+rigid
+ring
+riot
+ripple
+risk
+ritual
+rival
+river
+road
+roast
+robot
+robust
+rocket
+romance
+roof
+rookie
+room
+rose
+rotate
+rough
+round
+route
+royal
+rubber
+rude
+rug
+rule
+run
+runway
+rural
+sad
+saddle
+sadness
+safe
+sail
+salad
+salmon
+salon
+salt
+salute
+same
+sample
+sand
+satisfy
+satoshi
+sauce
+sausage
+save
+say
+scale
+scan
+scare
+scatter
+scene
+scheme
+school
+science
+scissors
+scorpion
+scout
+scrap
+screen
+script
+scrub
+sea
+search
+season
+seat
+second
+secret
+section
+security
+seed
+seek
+segment
+select
+sell
+seminar
+senior
+sense
+sentence
+series
+service
+session
+settle
+setup
+seven
+shadow
+shaft
+shallow
+share
+shed
+shell
+sheriff
+shield
+shift
+shine
+ship
+shiver
+shock
+shoe
+shoot
+shop
+short
+shoulder
+shove
+shrimp
+shrug
+shuffle
+shy
+sibling
+sick
+side
+siege
+sight
+sign
+silent
+silk
+silly
+silver
+similar
+simple
+since
+sing
+siren
+sister
+situate
+six
+size
+skate
+sketch
+ski
+skill
+skin
+skirt
+skull
+slab
+slam
+sleep
+slender
+slice
+slide
+slight
+slim
+slogan
+slot
+slow
+slush
+small
+smart
+smile
+smoke
+smooth
+snack
+snake
+snap
+sniff
+snow
+soap
+soccer
+social
+sock
+soda
+soft
+solar
+soldier
+solid
+solution
+solve
+someone
+song
+soon
+sorry
+sort
+soul
+sound
+soup
+source
+south
+space
+spare
+spatial
+spawn
+speak
+special
+speed
+spell
+spend
+sphere
+spice
+spider
+spike
+spin
+spirit
+split
+spoil
+sponsor
+spoon
+sport
+spot
+spray
+spread
+spring
+spy
+square
+squeeze
+squirrel
+stable
+stadium
+staff
+stage
+stairs
+stamp
+stand
+start
+state
+stay
+steak
+steel
+stem
+step
+stereo
+stick
+still
+sting
+stock
+stomach
+stone
+stool
+story
+stove
+strategy
+street
+strike
+strong
+struggle
+student
+stuff
+stumble
+style
+subject
+submit
+subway
+success
+such
+sudden
+suffer
+sugar
+suggest
+suit
+summer
+sun
+sunny
+sunset
+super
+supply
+supreme
+sure
+surface
+surge
+surprise
+surround
+survey
+suspect
+sustain
+swallow
+swamp
+swap
+swarm
+swear
+sweet
+swift
+swim
+swing
+switch
+sword
+symbol
+symptom
+syrup
+system
+table
+tackle
+tag
+tail
+talent
+talk
+tank
+tape
+target
+task
+taste
+tattoo
+taxi
+teach
+team
+tell
+ten
+tenant
+tennis
+tent
+term
+test
+text
+thank
+that
+theme
+then
+theory
+there
+they
+thing
+this
+thought
+three
+thrive
+throw
+thumb
+thunder
+ticket
+tide
+tiger
+tilt
+timber
+time
+tiny
+tip
+tired
+tissue
+title
+toast
+tobacco
+today
+toddler
+toe
+together
+toilet
+token
+tomato
+tomorrow
+tone
+tongue
+tonight
+tool
+tooth
+top
+topic
+topple
+torch
+tornado
+tortoise
+toss
+total
+tourist
+toward
+tower
+town
+toy
+track
+trade
+traffic
+tragic
+train
+transfer
+trap
+trash
+travel
+tray
+treat
+tree
+trend
+trial
+tribe
+trick
+trigger
+trim
+trip
+trophy
+trouble
+truck
+true
+truly
+trumpet
+trust
+truth
+try
+tube
+tuition
+tumble
+tuna
+tunnel
+turkey
+turn
+turtle
+twelve
+twenty
+twice
+twin
+twist
+two
+type
+typical
+ugly
+umbrella
+unable
+unaware
+uncle
+uncover
+under
+undo
+unfair
+unfold
+unhappy
+uniform
+unique
+unit
+universe
+unknown
+unlock
+until
+unusual
+unveil
+update
+upgrade
+uphold
+upon
+upper
+upset
+urban
+urge
+usage
+use
+used
+useful
+useless
+usual
+utility
+vacant
+vacuum
+vague
+valid
+valley
+valve
+van
+vanish
+vapor
+various
+vast
+vault
+vehicle
+velvet
+vendor
+venture
+venue
+verb
+verify
+version
+very
+vessel
+veteran
+viable
+vibrant
+vicious
+victory
+video
+view
+village
+vintage
+violin
+virtual
+virus
+visa
+visit
+visual
+vital
+vivid
+vocal
+voice
+void
+volcano
+volume
+vote
+voyage
+wage
+wagon
+wait
+walk
+wall
+walnut
+want
+warfare
+warm
+warrior
+wash
+wasp
+waste
+water
+wave
+way
+wealth
+weapon
+wear
+weasel
+weather
+web
+wedding
+weekend
+weird
+welcome
+west
+wet
+whale
+what
+wheat
+wheel
+when
+where
+whip
+whisper
+wide
+width
+wife
+wild
+will
+win
+window
+wine
+wing
+wink
+winner
+winter
+wire
+wisdom
+wise
+wish
+witness
+wolf
+woman
+wonder
+wood
+wool
+word
+work
+world
+worry
+worth
+wrap
+wreck
+wrestle
+wrist
+write
+wrong
+yard
+year
+yellow
+you
+young
+youth
+zebra
+zero
+zone
+zoo`.split("\n");
+
+//#endregion
+//#region packages/provider/src/MnemonicKeyDerivation.ts
+/**
+* MnemonicKeyDerivation
+*
+* Pure, stateless functions for BIP-39 mnemonic-based Ed25519 identity
+* derivation and AES-256-GCM seed wrapping. No IndexedDB, no WebAuthn,
+* no DOM access — fully unit-testable.
+*
+* Derivation chain:
+*   BIP-39 Mnemonic (+optional passphrase)
+*     → PBKDF2-HMAC-SHA512 (2048 rounds, per BIP-39 spec)
+*     → first 32 bytes as IKM
+*     → HKDF-SHA256(salt="abracadabra-mnemonic-v1", info="abracadabra-identity-v1")
+*     → Ed25519 seed (32 bytes)
+*     → Ed25519 keypair + X25519 (Montgomery conversion)
+*
+* The HKDF salt differs from the passkey PRF path (which uses PRF_SALT),
+* providing domain separation: identical raw input bytes can never produce
+* the same Ed25519 seed across the two derivation methods.
+*
+* Dependencies: @scure/bip39, @noble/ed25519, @noble/hashes, @noble/curves
+*/
+/** HKDF salt for mnemonic → Ed25519 seed derivation. */
+const MNEMONIC_HKDF_SALT = /* @__PURE__ */ new TextEncoder().encode("abracadabra-mnemonic-v1");
+/** HKDF info string — intentionally matches the passkey path's HKDF_INFO. */
+const MNEMONIC_HKDF_INFO = /* @__PURE__ */ new TextEncoder().encode("abracadabra-identity-v1");
+/** HKDF info string for deriving the AES-GCM seed-wrapping key from PRF output. */
+const SEED_WRAP_INFO = /* @__PURE__ */ new TextEncoder().encode("abracadabra-seed-wrap-v1");
+function toBase64url$1(bytes) {
+	return btoa(String.fromCharCode(...bytes)).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
+}
+/**
+* Generate a new BIP-39 mnemonic phrase.
+* @param strength 128 for 12 words (default), 256 for 24 words.
+*/
+function generateMnemonic(strength = 128) {
+	return (0, _scure_bip39.generateMnemonic)(wordlist, strength);
+}
+/**
+* Validate a BIP-39 mnemonic (wordlist + checksum).
+*/
+function validateMnemonic(mnemonic) {
+	return (0, _scure_bip39.validateMnemonic)(mnemonic, wordlist);
+}
+/**
+* Derive a 32-byte Ed25519 seed from a BIP-39 mnemonic.
+*
+* Chain: mnemonic → PBKDF2-HMAC-SHA512 (2048 rounds) → first 32 bytes →
+*        HKDF-SHA256(salt, info) → 32-byte seed.
+*
+* @param mnemonic  Valid BIP-39 mnemonic (12 or 24 words).
+* @param passphrase  Optional BIP-39 passphrase ("25th word").
+* @returns 32-byte Ed25519 seed. Caller MUST wipe after use: `seed.fill(0)`.
+*/
+function mnemonicToEd25519Seed(mnemonic, passphrase) {
+	const bip39Seed = (0, _scure_bip39.mnemonicToSeedSync)(mnemonic, passphrase ?? "");
+	const seed = hkdf(sha256, bip39Seed.subarray(0, 32), MNEMONIC_HKDF_SALT, MNEMONIC_HKDF_INFO, 32);
+	bip39Seed.fill(0);
+	return seed;
+}
+/**
+* Derive the full Ed25519 + X25519 keypair from a BIP-39 mnemonic.
+*
+* @param mnemonic  Valid BIP-39 mnemonic.
+* @param passphrase  Optional BIP-39 passphrase.
+* @returns Keys and seed. Caller MUST wipe `seed` after use.
+*/
+async function mnemonicToKeyPair(mnemonic, passphrase) {
+	const seed = mnemonicToEd25519Seed(mnemonic, passphrase);
+	const publicKey = await _noble_ed25519.getPublicKeyAsync(seed);
+	const publicKeyB64 = toBase64url$1(publicKey);
+	const x25519PublicKey = ed25519.utils.toMontgomery(publicKey);
+	return {
+		seed,
+		publicKey,
+		publicKeyB64,
+		x25519PublicKey,
+		x25519PublicKeyB64: toBase64url$1(x25519PublicKey)
+	};
+}
+/**
+* Derive a 32-byte AES-256-GCM key from WebAuthn PRF output for seed wrapping.
+*
+* @param prfOutput  Raw PRF output from WebAuthn assertion (32 bytes typical).
+* @param wrapSalt   Random 32-byte salt, stored alongside the ciphertext.
+*/
+function deriveSeedWrappingKey(prfOutput, wrapSalt) {
+	return hkdf(sha256, new Uint8Array(prfOutput), wrapSalt, SEED_WRAP_INFO, 32);
+}
+/**
+* Encrypt an Ed25519 seed with AES-256-GCM.
+*
+* @param seed  32-byte Ed25519 seed to protect.
+* @param wrappingKeyBytes  32-byte AES key from `deriveSeedWrappingKey`.
+* @returns Ciphertext (48 bytes: 32 plaintext + 16 auth tag) and 12-byte IV.
+*/
+async function wrapSeed(seed, wrappingKeyBytes) {
+	const iv = crypto.getRandomValues(new Uint8Array(12));
+	const key = await crypto.subtle.importKey("raw", wrappingKeyBytes, "AES-GCM", false, ["encrypt"]);
+	return {
+		ciphertext: await crypto.subtle.encrypt({
+			name: "AES-GCM",
+			iv
+		}, key, seed),
+		iv
+	};
+}
+/**
+* Decrypt an Ed25519 seed from AES-256-GCM ciphertext.
+*
+* @param ciphertext  Encrypted seed (48 bytes).
+* @param iv  12-byte GCM nonce.
+* @param wrappingKeyBytes  32-byte AES key from `deriveSeedWrappingKey`.
+* @returns 32-byte Ed25519 seed. Caller MUST wipe after use.
+* @throws If the auth tag is invalid (wrong key or tampered data).
+*/
+async function unwrapSeed(ciphertext, iv, wrappingKeyBytes) {
+	const key = await crypto.subtle.importKey("raw", wrappingKeyBytes, "AES-GCM", false, ["decrypt"]);
+	const plaintext = await crypto.subtle.decrypt({
+		name: "AES-GCM",
+		iv
+	}, key, ciphertext);
+	return new Uint8Array(plaintext);
+}
+
 //#endregion
 //#region packages/provider/src/CryptoIdentityKeystore.ts
 /**
 * CryptoIdentityKeystore
 *
-* Per-user Ed25519 keypair derived deterministically from a synced WebAuthn
-* passkey's PRF extension output. The same passkey on any device produces the
-* same identity — no private key storage needed.
+* Ed25519 identity management with two derivation modes:
 *
-* Derivation chain:
-*   Synced Passkey → PRF(constant salt) → HKDF-SHA256 → Ed25519 seed → keypair
+* 1. **Passkey-only (legacy)**: PRF output → HKDF → Ed25519 seed.
+*    The passkey IS the identity source.
+*
+* 2. **Mnemonic-rooted**: BIP-39 mnemonic → Ed25519 seed, encrypted by
+*    passkey PRF for day-to-day convenience. The mnemonic IS the identity
+*    source; the passkey is a convenience wrapper. Recovery via mnemonic
+*    re-derives the exact same key.
 *
-* IndexedDB is used only as a lightweight cache for the public key and
-* credential ID. Loss of IndexedDB is non-catastrophic — a passkey assertion
-* re-derives everything.
+* Both modes coexist. IndexedDB records with `encryptedSeed` use mode 2;
+* records without it use mode 1 (backward compatible).
 *
-* Dependencies: @noble/ed25519, @noble/hashes (for HKDF), @noble/curves (for X25519)
+* Dependencies: @noble/ed25519, @noble/hashes, @noble/curves, @scure/bip39
 */
 /**
 * Fixed PRF eval salt. Must be constant across all devices so the same synced
@@ -7168,7 +9372,7 @@ const DB_NAME = "abracadabra:identity";
 const STORE_NAME = "identity";
 function openDb$4() {
 	return new Promise((resolve, reject) => {
-		const req = indexedDB.open(DB_NAME, 2);
+		const req = indexedDB.open(DB_NAME, 3);
 		req.onupgradeneeded = () => {
 			const db = req.result;
 			if (!db.objectStoreNames.contains(STORE_NAME)) db.createObjectStore(STORE_NAME);
@@ -7440,6 +9644,169 @@ var CryptoIdentityKeystore = class {
 		}
 	}
 	/**
+	* Register a new identity rooted in a BIP-39 mnemonic. Optionally wraps the
+	* derived seed with a passkey for biometric day-to-day access.
+	*
+	* @param username - Display name for the identity.
+	* @param mnemonic - Valid BIP-39 mnemonic (12 or 24 words).
+	* @param passphrase - Optional BIP-39 passphrase ("25th word").
+	* @param rpId - WebAuthn relying party ID (omit to skip passkey wrapping).
+	* @param rpName - WebAuthn relying party display name.
+	* @returns Public keys and optional credential ID.
+	*/
+	async registerWithMnemonic(username, mnemonic, passphrase, rpId, rpName) {
+		const kp = await mnemonicToKeyPair(mnemonic, passphrase);
+		try {
+			if (rpId && rpName) {
+				const credential = await navigator.credentials.create({ publicKey: {
+					challenge: crypto.getRandomValues(new Uint8Array(32)),
+					rp: {
+						id: rpId,
+						name: rpName
+					},
+					user: {
+						id: new TextEncoder().encode(username),
+						name: username,
+						displayName: username
+					},
+					pubKeyCredParams: [{
+						alg: -7,
+						type: "public-key"
+					}, {
+						alg: -257,
+						type: "public-key"
+					}],
+					authenticatorSelection: {
+						residentKey: "required",
+						requireResidentKey: true,
+						userVerification: "required"
+					},
+					extensions: { prf: { eval: { first: PRF_SALT.buffer } } }
+				} });
+				if (!credential) throw new Error("WebAuthn credential creation cancelled");
+				const prfOutput = extractPrfOutput(credential);
+				const wrapSalt = crypto.getRandomValues(new Uint8Array(32));
+				const wrapKey = deriveSeedWrappingKey(prfOutput, wrapSalt);
+				const { ciphertext, iv } = await wrapSeed(kp.seed, wrapKey);
+				wrapKey.fill(0);
+				const credentialIdB64 = toBase64url(new Uint8Array(credential.rawId));
+				const db = await openDb$4();
+				await dbPut(db, credentialIdB64, {
+					username,
+					publicKey: kp.publicKeyB64,
+					credentialId: credential.rawId,
+					encryptedSeed: ciphertext,
+					seedIv: iv,
+					wrapSalt,
+					authMethod: "mnemonic"
+				});
+				db.close();
+				return {
+					publicKey: kp.publicKeyB64,
+					x25519PublicKey: kp.x25519PublicKeyB64,
+					credentialId: credentialIdB64
+				};
+			}
+			return {
+				publicKey: kp.publicKeyB64,
+				x25519PublicKey: kp.x25519PublicKeyB64
+			};
+		} finally {
+			kp.seed.fill(0);
+		}
+	}
+	/**
+	* Wrap an existing mnemonic-derived seed with a new passkey. Use this when
+	* a user logged in via mnemonic and wants to add biometric convenience.
+	*
+	* @param mnemonic - The user's BIP-39 mnemonic.
+	* @param passphrase - Optional BIP-39 passphrase.
+	* @param rpId - WebAuthn relying party ID.
+	* @param rpName - WebAuthn relying party display name.
+	* @returns The new credential ID.
+	*/
+	async wrapSeedWithPasskey(mnemonic, passphrase, rpId, rpName) {
+		const kp = await mnemonicToKeyPair(mnemonic, passphrase);
+		try {
+			const credential = await navigator.credentials.create({ publicKey: {
+				challenge: crypto.getRandomValues(new Uint8Array(32)),
+				rp: {
+					id: rpId,
+					name: rpName
+				},
+				user: {
+					id: fromBase64url(kp.publicKeyB64),
+					name: kp.publicKeyB64.slice(0, 16),
+					displayName: kp.publicKeyB64.slice(0, 16)
+				},
+				pubKeyCredParams: [{
+					alg: -7,
+					type: "public-key"
+				}, {
+					alg: -257,
+					type: "public-key"
+				}],
+				authenticatorSelection: {
+					residentKey: "required",
+					requireResidentKey: true,
+					userVerification: "required"
+				},
+				extensions: { prf: { eval: { first: PRF_SALT.buffer } } }
+			} });
+			if (!credential) throw new Error("WebAuthn credential creation cancelled");
+			const prfOutput = extractPrfOutput(credential);
+			const wrapSalt = crypto.getRandomValues(new Uint8Array(32));
+			const wrapKey = deriveSeedWrappingKey(prfOutput, wrapSalt);
+			const { ciphertext, iv } = await wrapSeed(kp.seed, wrapKey);
+			wrapKey.fill(0);
+			const credentialIdB64 = toBase64url(new Uint8Array(credential.rawId));
+			let username = "";
+			try {
+				const db = await openDb$4();
+				const existing = (await dbGetAll(db)).find((e) => e.value.publicKey === kp.publicKeyB64);
+				if (existing) username = existing.value.username;
+				db.close();
+			} catch {}
+			const db = await openDb$4();
+			await dbPut(db, credentialIdB64, {
+				username,
+				publicKey: kp.publicKeyB64,
+				credentialId: credential.rawId,
+				encryptedSeed: ciphertext,
+				seedIv: iv,
+				wrapSalt,
+				authMethod: "mnemonic"
+			});
+			db.close();
+			return { credentialId: credentialIdB64 };
+		} finally {
+			kp.seed.fill(0);
+		}
+	}
+	/**
+	* Sign a challenge directly with a provided seed. No WebAuthn prompt.
+	* For ephemeral mnemonic sessions where the seed is held in memory.
+	*
+	* The caller manages the seed lifecycle (wiping on session end).
+	*/
+	static async signWithSeed(challengeB64, seed) {
+		const challengeBytes = fromBase64url(challengeB64);
+		return toBase64url(await _noble_ed25519.signAsync(challengeBytes, seed));
+	}
+	/**
+	* Stateless mnemonic sign: derive seed, sign, wipe. No IndexedDB, no WebAuthn.
+	* Useful for CLI or one-shot operations.
+	*/
+	static async signWithMnemonic(mnemonic, challengeB64, passphrase) {
+		const seed = mnemonicToEd25519Seed(mnemonic, passphrase);
+		try {
+			const challengeBytes = fromBase64url(challengeB64);
+			return toBase64url(await _noble_ed25519.signAsync(challengeBytes, seed));
+		} finally {
+			seed.fill(0);
+		}
+	}
+	/**
 	* Perform a WebAuthn assertion with PRF, derive the Ed25519 seed, and
 	* update the IndexedDB cache. Returns the seed (caller MUST wipe it).
 	*/
@@ -7465,15 +9832,32 @@ var CryptoIdentityKeystore = class {
 			extensions: { prf: { eval: { first: PRF_SALT.buffer } } }
 		} });
 		if (!assertion) throw new Error("WebAuthn assertion cancelled");
-		const seed = deriveEd25519Seed(extractPrfOutput(assertion));
-		const publicKeyB64 = toBase64url(await _noble_ed25519.getPublicKeyAsync(seed));
+		const prfOutput = extractPrfOutput(assertion);
 		const credentialIdB64 = toBase64url(new Uint8Array(assertion.rawId));
+		let stored;
 		try {
 			const db = await openDb$4();
+			stored = await dbGet(db, credentialIdB64);
+			db.close();
+		} catch {}
+		let seed;
+		if (stored?.encryptedSeed && stored.seedIv && stored.wrapSalt) {
+			const wrapKey = deriveSeedWrappingKey(prfOutput, stored.wrapSalt);
+			seed = await unwrapSeed(stored.encryptedSeed, stored.seedIv, wrapKey);
+			wrapKey.fill(0);
+		} else seed = deriveEd25519Seed(prfOutput);
+		const publicKeyB64 = toBase64url(await _noble_ed25519.getPublicKeyAsync(seed));
+		try {
+			const db = await openDb$4();
+			const existing = await dbGet(db, credentialIdB64);
 			await dbPut(db, credentialIdB64, {
-				username: (await dbGet(db, credentialIdB64))?.username ?? "",
+				username: existing?.username ?? "",
 				publicKey: publicKeyB64,
-				credentialId: assertion.rawId
+				credentialId: assertion.rawId,
+				encryptedSeed: existing?.encryptedSeed,
+				seedIv: existing?.seedIv,
+				wrapSalt: existing?.wrapSalt,
+				authMethod: existing?.authMethod
 			});
 			db.close();
 		} catch {}
@@ -10150,6 +12534,8 @@ var AbracadabraWebRTC = class AbracadabraWebRTC extends EventEmitter {
 			this.signaling.destroy();
 			this.signaling = null;
 		}
+		this._resolvedE2ee = null;
+		this._resolveE2eePromise = null;
 		this.removeAllListeners();
 	}
 	setMuted(muted) {
@@ -10291,28 +12677,54 @@ var AbracadabraWebRTC = class AbracadabraWebRTC extends EventEmitter {
 		return this._resolvedE2ee;
 	}
 	attachDataHandlers(peerId, pc) {
-		if (this.config.e2ee) this.resolveE2ee().then((identity) => {
+		if (!this.config.e2ee) {
+			this.startDataSync(peerId, pc);
+			return;
+		}
+		let e2ee = null;
+		const pendingMessages = [];
+		let pendingKeyExchangeChannel = null;
+		pc.router.on("channelMessage", async ({ name, data }) => {
+			if (name !== KEY_EXCHANGE_CHANNEL) return;
+			const buf = data instanceof ArrayBuffer ? new Uint8Array(data) : data;
+			if (!e2ee) {
+				pendingMessages.push(buf);
+				return;
+			}
+			try {
+				await e2ee.handleKeyExchange(buf);
+			} catch (err) {
+				this.emit("e2eeFailed", {
+					peerId,
+					error: err
+				});
+			}
+		});
+		pc.router.on("channelOpen", ({ name, channel }) => {
+			if (name !== KEY_EXCHANGE_CHANNEL) return;
+			if (!e2ee) {
+				pendingKeyExchangeChannel = channel;
+				return;
+			}
+			channel.send(e2ee.getKeyExchangeMessage());
+		});
+		this.resolveE2ee().then(async (identity) => {
 			if (!identity) {
 				this.startDataSync(peerId, pc);
 				return;
 			}
-			const e2ee = new E2EEChannel(identity, this.config.docId);
+			e2ee = new E2EEChannel(identity, this.config.docId);
 			this.e2eeChannels.set(peerId, e2ee);
 			pc.router.setEncryptor(e2ee);
-			pc.router.on("channelMessage", async ({ name, data }) => {
-				if (name === KEY_EXCHANGE_CHANNEL) try {
-					const buf = data instanceof ArrayBuffer ? new Uint8Array(data) : data;
-					await e2ee.handleKeyExchange(buf);
-				} catch (err) {
-					this.emit("e2eeFailed", {
-						peerId,
-						error: err
-					});
-				}
-			});
-			pc.router.on("channelOpen", ({ name, channel }) => {
-				if (name === KEY_EXCHANGE_CHANNEL) channel.send(e2ee.getKeyExchangeMessage());
-			});
+			if (pendingKeyExchangeChannel) pendingKeyExchangeChannel.send(e2ee.getKeyExchangeMessage());
+			for (const msg of pendingMessages) try {
+				await e2ee.handleKeyExchange(msg);
+			} catch (err) {
+				this.emit("e2eeFailed", {
+					peerId,
+					error: err
+				});
+			}
 			e2ee.on("established", () => {
 				this.emit("e2eeEstablished", { peerId });
 				this.startDataSync(peerId, pc);
@@ -10330,7 +12742,6 @@ var AbracadabraWebRTC = class AbracadabraWebRTC extends EventEmitter {
 			});
 			this.startDataSync(peerId, pc);
 		});
-		else this.startDataSync(peerId, pc);
 	}
 	startDataSync(peerId, pc) {
 		if (this.config.document && this.config.enableDocSync) {
@@ -11661,12 +14072,20 @@ exports.WsReadyStates = WsReadyStates;
 exports.YjsDataChannel = YjsDataChannel;
 exports.attachUpdatedAtObserver = attachUpdatedAtObserver;
 exports.awarenessStatesToArray = awarenessStatesToArray;
+exports.bip39Wordlist = wordlist;
 exports.decryptField = decryptField;
 exports.deriveIdentityDocId = deriveIdentityDocId;
+exports.deriveSeedWrappingKey = deriveSeedWrappingKey;
 exports.encryptField = encryptField;
+exports.generateMnemonic = generateMnemonic;
 exports.makeEncryptedYMap = makeEncryptedYMap;
 exports.makeEncryptedYText = makeEncryptedYText;
+exports.mnemonicToEd25519Seed = mnemonicToEd25519Seed;
+exports.mnemonicToKeyPair = mnemonicToKeyPair;
 exports.readAuthMessage = readAuthMessage;
+exports.unwrapSeed = unwrapSeed;
+exports.validateMnemonic = validateMnemonic;
+exports.wrapSeed = wrapSeed;
 exports.writeAuthenticated = writeAuthenticated;
 exports.writeAuthentication = writeAuthentication;
 exports.writePermissionDenied = writePermissionDenied;