@asseteragmbh/wallet-connector 0.2.0 → 0.2.2

package/dist/protocol.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/protocol.ts"],"names":[],"mappings":";;;AA4CO,IAAM,gBAAA,GAAmB;AAGzB,IAAM,YAAA,GAAe;AAGrB,IAAM,YAAA,GAAe;AAGrB,IAAM,cAAA,GAAiB;AAMvB,IAAM,iBAAA,GAAoB;AAAA,EAC/B,qBAAA;AAAA,EACA,cAAA;AAAA,EACA,aAAA;AAAA,EACA,4BAAA;AAAA,EACA,eAAA;AAAA,EACA,sBAAA;AAAA,EACA;AACF;AAIO,SAAS,kBAAkB,MAAA,EAA2C;AAC3E,EAAA,OAAQ,iBAAA,CAAwC,SAAS,MAAM,CAAA;AACjE;AAGO,IAAM,YAAA,GAAe;AAAA;AAAA,EAE1B,YAAA,EAAc,IAAA;AAAA;AAAA,EAEd,YAAA,EAAc,IAAA;AAAA;AAAA,EAEd,iBAAA,EAAmB,IAAA;AAAA;AAAA,EAEnB,YAAA,EAAc,IAAA;AAAA;AAAA,EAEd,iBAAA,EAAmB,IAAA;AAAA;AAAA,EAEnB,aAAA,EAAe,MAAA;AAAA;AAAA,EAEf,QAAA,EAAU;AACZ;AA+FA,SAAS,SAAS,KAAA,EAAkD;AAClE,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,IAAA;AAChD;AAEA,SAAS,OAAA,CAAQ,OAAgB,MAAA,EAAkD;AACjF,EAAA,OAAO,QAAA,CAAS,KAAK,CAAA,IAAK,KAAA,CAAM,IAAA,KAAS,CAAA,EAAG,cAAc,CAAA,EAAG,MAAM,CAAA,CAAA,IAAM,KAAA,CAAM,CAAA,KAAM,gBAAA;AACvF;AAEO,SAAS,eAAe,KAAA,EAAuC;AACpE,EAAA,OAAO,OAAA,CAAQ,OAAO,OAAO,CAAA;AAC/B;AAEO,SAAS,kBAAkB,KAAA,EAA0C;AAC1E,EAAA,OACE,QAAQ,KAAA,EAAO,UAAU,CAAA,IACzB,OAAO,MAAM,EAAA,KAAO,QAAA,KACnB,QAAA,IAAY,KAAA,IAAU,SAAS,KAAA,CAAM,KAAK,KAAK,OAAO,KAAA,CAAM,MAAM,IAAA,KAAS,QAAA,CAAA;AAEhF;AAEO,SAAS,eAAe,KAAA,EAAuC;AACpE,EAAA,OACE,OAAA,CAAQ,KAAA,EAAO,OAAO,CAAA,KACrB,KAAA,CAAM,KAAA,KAAU,iBAAA,IAAqB,KAAA,CAAM,KAAA,KAAU,cAAA,IAAkB,KAAA,CAAM,KAAA,KAAU,YAAA,CAAA;AAE5F;AAEO,SAAS,iBAAiB,KAAA,EAAyC;AACxE,EAAA,OAAO,OAAA,CAAQ,KAAA,EAAO,SAAS,CAAA,IAAK,OAAO,MAAM,EAAA,KAAO,QAAA,IAAY,OAAO,KAAA,CAAM,MAAA,KAAW,QAAA;AAC9F;AAEO,SAAS,oBAAoB,KAAA,EAA4C;AAC9E,EAAA,OAAO,OAAA,CAAQ,OAAO,YAAY,CAAA;AACpC;AAGA,IAAM,cAAA,GAAiB,qBAAA;AAEhB,SAAS,mBAAmB,KAAA,EAA2C;AAC5E,EAAA,OACE,OAAA,CAAQ,KAAA,EAAO,WAAW,CAAA,IAC1B,OAAO,KAAA,CAAM,OAAA,KAAY,QAAA,IACzB,cAAA,CAAe,KAAK,KAAA,CAAM,OAAO,CAAA,IACjC,OAAO,MAAM,KAAA,KAAU,QAAA;AAAA,GAEtB,OAAO,MAAM,OAAA,KAAY,SAAA,IAAa,MAAM,MAAA,KAAW,UAAA,IAAc,MAAM,MAAA,KAAW,SAAA,CAAA;AAE3F;AAEO,SAAS,0BAA0B,KAAA,EAAkD;AAC1F,EAAA,OACE,OAAA,CAAQ,KAAA,EAAO,mBAAmB,CAAA,KACjC,KAAA,CAAM,MAAA,KAAW,MAAA,IAAU,KAAA,CAAM,MAAA,KAAW,SAAA,IAAa,KAAA,CAAM,MAAA,KAAW,OAAA,CAAA;AAE/E;AAGO,SAAS,gBAAgB,KAAA,EAAwB;AACtD,EAAA,OAAO,mBAAA,CAAoB,KAAK,KAAK,CAAA;AACvC;AAGO,SAAS,UAAA,CAAW,WAAmB,aAAA,EAA+B;AAC3E,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,YAAA,EAAc,SAAS,CAAA;AAC3C,EAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,QAAA,EAAU,aAAa,CAAA;AAC5C,EAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,GAAA,EAAK,MAAA,CAAO,gBAAgB,CAAC,CAAA;AAClD,EAAA,OAAO,IAAI,QAAA,EAAS;AACtB;AAOO,SAAS,UAAA,CACd,SAAA,EACA,aAAA,EACA,OAAA,EACQ;AACR,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,YAAA,EAAc,SAAS,CAAA;AAC3C,EAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,QAAA,EAAU,aAAa,CAAA;AAC5C,EAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,GAAA,EAAK,MAAA,CAAO,gBAAgB,CAAC,CAAA;AAClD,EAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,OAAA,EAAS,OAAA,CAAQ,KAAK,CAAA;AAC3C,EAAA,IAAI,OAAA,CAAQ,WAAW,MAAA,EAAW,GAAA,CAAI,aAAa,GAAA,CAAI,MAAA,EAAQ,QAAQ,MAAM,CAAA;AAC7E,EAAA,IAAI,QAAQ,GAAA,EAAK,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,OAAO,GAAG,CAAA;AAChD,EAAA,OAAO,IAAI,QAAA,EAAS;AACtB","file":"protocol.cjs","sourcesContent":["/**\n * The pop-up protocol between a partner page (the opener) and the Assetera Wallet (the pop-up) — ADR-0054 D3/D4.\n *\n * This file is the CONTRACT. The connector in this package speaks the opener side; AsseteraWalletFront's\n * `/connect` page speaks the pop-up side and imports these types from `@asseteragmbh/wallet-connector/protocol`.\n * Change it only in a backwards-compatible way, or bump `PROTOCOL_VERSION` and support both on the wallet side:\n * partner sites upgrade on their own schedule.\n *\n * ## The handshake\n *\n * 1. The partner opens `${walletUrl}${CONNECT_PATH}?origin=<partner origin>&v=<version>` from a user click.\n * 2. The pop-up checks the claimed origin against its allowlist (D4). If listed, it posts `ready` to\n *    `window.opener` with `targetOrigin` = that origin. The browser delivers it ONLY if the opener really is\n *    that origin, so a page cannot claim someone else's origin and still hear the answer.\n * 3. The opener waits for `ready` from the wallet origin, then sends `request`s with `targetOrigin` = the wallet\n *    origin. The pop-up accepts a message only when `event.origin` is the allowed origin from step 2 AND\n *    `event.source === window.opener`, and answers with `targetOrigin` = that origin. Nothing else is accepted.\n *\n * ## Lifetime\n *\n * The pop-up stays open while the partner uses the wallet (ADR-0054, \"the wallet tab must stay open\"). When it is\n * closed, the opener sees `disconnect` (or notices `popup.closed`) and must reconnect from a user click.\n *\n * ## Onboarding\n *\n * Onboarding is a second flow on the same wallet origin, for a partner that wants the client to get an Assetera\n * Wallet (a new one, or the one the client already has). The partner opens\n * `${walletUrl}${ONBOARD_PATH}?origin=<partner origin>&v=<version>&chain=<CAIP-2 chain id>[&add=1]` from a user\n * click. The pop-up checks the claimed origin against its partner list, signs the client in through SSO, runs the\n * wizard (accept the wallet terms, create the wallet) and then posts `onboarded` (or `onboard-cancelled`) to\n * `window.opener` with `targetOrigin` = the partner origin. `add=1` asks for one more wallet even when the client\n * already has one.\n *\n * After `onboarded` the pop-up STAYS OPEN and answers `request` messages for `personal_sign` by the onboarded\n * address (plus `eth_accounts` and `eth_chainId`), with the same `response` messages as `/connect`. That is how\n * the partner gets the ownership signature it needs to register the wallet with its own compliance service: the\n * wallet itself never calls a regulated service (ADR-0059 D3), and a second `window.open` after an asynchronous\n * step would be blocked by the browser. The partner closes the pop-up when it is done.\n *\n * The opener accepts messages only when `event.origin` is the wallet origin AND `event.source` is the pop-up\n * it opened. The wizard never returns a private key or a token, only the wallet address and signatures the\n * client approved.\n */\n\nexport const PROTOCOL_VERSION = 1 as const;\n\n/** The pop-up route on the wallet origin. */\nexport const CONNECT_PATH = \"/connect\";\n\n/** The onboarding wizard route on the wallet origin. */\nexport const ONBOARD_PATH = \"/onboard\";\n\n/** Every message carries this prefix in `type`, so both sides can ignore unrelated `postMessage` traffic. */\nexport const MESSAGE_PREFIX = \"assetera-wallet:\" as const;\n\n/**\n * The EIP-1193 methods the pop-up answers (ADR-0054 D3). Anything else is refused with 4200. Read-only chain\n * calls (`eth_call`, `eth_getBalance`, …) do not go through the pop-up; wagmi sends them to its own transports.\n */\nexport const SUPPORTED_METHODS = [\n  \"eth_requestAccounts\",\n  \"eth_accounts\",\n  \"eth_chainId\",\n  \"wallet_switchEthereumChain\",\n  \"personal_sign\",\n  \"eth_signTypedData_v4\",\n  \"eth_sendTransaction\",\n] as const;\n\nexport type SupportedMethod = (typeof SUPPORTED_METHODS)[number];\n\nexport function isSupportedMethod(method: string): method is SupportedMethod {\n  return (SUPPORTED_METHODS as readonly string[]).includes(method);\n}\n\n/** EIP-1193 / EIP-1474 error codes the pop-up uses. */\nexport const RpcErrorCode = {\n  /** The client rejected the request in the pop-up. */\n  UserRejected: 4001,\n  /** Not connected yet (no `eth_requestAccounts` approved in this pop-up). */\n  Unauthorized: 4100,\n  /** The method is not in SUPPORTED_METHODS. */\n  UnsupportedMethod: 4200,\n  /** The pop-up closed, or the wallet session ended. */\n  Disconnected: 4900,\n  /** `wallet_switchEthereumChain` to a chain the wallet does not offer. */\n  UnrecognizedChain: 4902,\n  /** Malformed params. */\n  InvalidParams: -32602,\n  /** Anything unexpected inside the wallet. */\n  Internal: -32603,\n} as const;\n\nexport type RpcErrorCode = (typeof RpcErrorCode)[keyof typeof RpcErrorCode];\n\nexport interface RpcError {\n  code: number;\n  message: string;\n  data?: unknown;\n}\n\n// --- pop-up → opener ---------------------------------------------------------------------------------\n\n/** The pop-up is loaded and accepts requests from this opener. */\nexport interface ReadyMessage {\n  type: `${typeof MESSAGE_PREFIX}ready`;\n  v: typeof PROTOCOL_VERSION;\n  /** Shown to the partner for diagnostics only; the partner must not rely on it for anything. */\n  walletVersion?: string;\n}\n\n/** The answer to one `request`, matched by `id`. Exactly one of `result` / `error`. */\nexport type ResponseMessage =\n  | { type: `${typeof MESSAGE_PREFIX}response`; v: typeof PROTOCOL_VERSION; id: string; result: unknown }\n  | { type: `${typeof MESSAGE_PREFIX}response`; v: typeof PROTOCOL_VERSION; id: string; error: RpcError };\n\n/** EIP-1193 provider events, forwarded to the partner. */\nexport type EventMessage =\n  | {\n      type: `${typeof MESSAGE_PREFIX}event`;\n      v: typeof PROTOCOL_VERSION;\n      event: \"accountsChanged\";\n      data: `0x${string}`[];\n    }\n  | {\n      type: `${typeof MESSAGE_PREFIX}event`;\n      v: typeof PROTOCOL_VERSION;\n      event: \"chainChanged\";\n      data: `0x${string}`;\n    }\n  | {\n      type: `${typeof MESSAGE_PREFIX}event`;\n      v: typeof PROTOCOL_VERSION;\n      event: \"disconnect\";\n      data: RpcError;\n    };\n\n/**\n * The onboarding wizard finished: the client accepted the wallet terms and has an Assetera Wallet on `chain`.\n * `created` is `true` when the wallet was created in this run, `false` when the wizard returned the client's\n * existing wallet. The wallet is not registered with any compliance service; that is the partner's step.\n */\nexport interface OnboardedMessage {\n  type: `${typeof MESSAGE_PREFIX}onboarded`;\n  v: typeof PROTOCOL_VERSION;\n  address: `0x${string}`;\n  chain: string;\n  created: boolean;\n  /**\n   * @deprecated Sent by wallet versions that registered the wallet themselves (before ADR-0059). Ignored.\n   */\n  status?: \"approved\" | \"pending\";\n}\n\n/** The onboarding wizard did not produce a wallet. `message` is optional diagnostics for the partner. */\nexport interface OnboardCancelledMessage {\n  type: `${typeof MESSAGE_PREFIX}onboard-cancelled`;\n  v: typeof PROTOCOL_VERSION;\n  reason: \"user\" | \"refused\" | \"error\";\n  message?: string;\n}\n\nexport type WalletToPartnerMessage =\n  ReadyMessage | ResponseMessage | EventMessage | OnboardedMessage | OnboardCancelledMessage;\n\n// --- opener → pop-up ---------------------------------------------------------------------------------\n\nexport interface RequestMessage {\n  type: `${typeof MESSAGE_PREFIX}request`;\n  v: typeof PROTOCOL_VERSION;\n  /** Unique per request within one connection; the response carries it back. */\n  id: string;\n  method: string;\n  params?: unknown[] | Record<string, unknown>;\n}\n\n/** The partner disconnects (for example the user clicked \"Disconnect\" in the partner page). */\nexport interface DisconnectMessage {\n  type: `${typeof MESSAGE_PREFIX}disconnect`;\n  v: typeof PROTOCOL_VERSION;\n}\n\nexport type PartnerToWalletMessage = RequestMessage | DisconnectMessage;\n\n// --- guards ------------------------------------------------------------------------------------------\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null;\n}\n\nfunction hasType(value: unknown, suffix: string): value is Record<string, unknown> {\n  return isRecord(value) && value.type === `${MESSAGE_PREFIX}${suffix}` && value.v === PROTOCOL_VERSION;\n}\n\nexport function isReadyMessage(value: unknown): value is ReadyMessage {\n  return hasType(value, \"ready\");\n}\n\nexport function isResponseMessage(value: unknown): value is ResponseMessage {\n  return (\n    hasType(value, \"response\") &&\n    typeof value.id === \"string\" &&\n    (\"result\" in value || (isRecord(value.error) && typeof value.error.code === \"number\"))\n  );\n}\n\nexport function isEventMessage(value: unknown): value is EventMessage {\n  return (\n    hasType(value, \"event\") &&\n    (value.event === \"accountsChanged\" || value.event === \"chainChanged\" || value.event === \"disconnect\")\n  );\n}\n\nexport function isRequestMessage(value: unknown): value is RequestMessage {\n  return hasType(value, \"request\") && typeof value.id === \"string\" && typeof value.method === \"string\";\n}\n\nexport function isDisconnectMessage(value: unknown): value is DisconnectMessage {\n  return hasType(value, \"disconnect\");\n}\n\n/** `0x` followed by exactly 40 hexadecimal digits, the shape of an EVM address. */\nconst EVM_ADDRESS_RE = /^0x[0-9a-fA-F]{40}$/;\n\nexport function isOnboardedMessage(value: unknown): value is OnboardedMessage {\n  return (\n    hasType(value, \"onboarded\") &&\n    typeof value.address === \"string\" &&\n    EVM_ADDRESS_RE.test(value.address) &&\n    typeof value.chain === \"string\" &&\n    // `created` is new; an older wallet sent `status` instead and always created or reused a wallet.\n    (typeof value.created === \"boolean\" || value.status === \"approved\" || value.status === \"pending\")\n  );\n}\n\nexport function isOnboardCancelledMessage(value: unknown): value is OnboardCancelledMessage {\n  return (\n    hasType(value, \"onboard-cancelled\") &&\n    (value.reason === \"user\" || value.reason === \"refused\" || value.reason === \"error\")\n  );\n}\n\n/** A CAIP-2 EVM chain id, for example `eip155:80002` (Polygon Amoy) or `eip155:1` (mainnet). */\nexport function isCaip2EvmChain(value: string): boolean {\n  return /^eip155:\\d{1,32}$/.test(value);\n}\n\n/** The URL the partner opens. `partnerOrigin` is `window.location.origin` of the partner page. */\nexport function connectUrl(walletUrl: string, partnerOrigin: string): string {\n  const url = new URL(CONNECT_PATH, walletUrl);\n  url.searchParams.set(\"origin\", partnerOrigin);\n  url.searchParams.set(\"v\", String(PROTOCOL_VERSION));\n  return url.toString();\n}\n\n/**\n * The URL the partner opens for the onboarding wizard. `partnerOrigin` is `window.location.origin` of the\n * partner page; `chain` is the CAIP-2 chain id the new wallet should be created on; `locale` is passed as `lang`\n * when the partner wants a specific wizard language.\n */\nexport function onboardUrl(\n  walletUrl: string,\n  partnerOrigin: string,\n  options: { chain: string; locale?: string; add?: boolean },\n): string {\n  const url = new URL(ONBOARD_PATH, walletUrl);\n  url.searchParams.set(\"origin\", partnerOrigin);\n  url.searchParams.set(\"v\", String(PROTOCOL_VERSION));\n  url.searchParams.set(\"chain\", options.chain);\n  if (options.locale !== undefined) url.searchParams.set(\"lang\", options.locale);\n  if (options.add) url.searchParams.set(\"add\", \"1\");\n  return url.toString();\n}\n"]}
+{"version":3,"sources":["../src/protocol.ts"],"names":[],"mappings":";;;AAqEO,IAAM,gBAAA,GAAmB;AAGzB,IAAM,YAAA,GAAe;AAGrB,IAAM,YAAA,GAAe;AAGrB,IAAM,WAAA,GAAc;AAGpB,IAAM,aAAA,GAAgB,CAAC,sBAAsB;AAM7C,SAAS,aAAa,KAAA,EAAqC;AAChE,EAAA,OAAQ,aAAA,CAAqC,SAAS,KAAK,CAAA;AAC7D;AAGO,IAAM,cAAA,GAAiB;AAMvB,IAAM,iBAAA,GAAoB;AAAA,EAC/B,qBAAA;AAAA,EACA,cAAA;AAAA,EACA,aAAA;AAAA,EACA,4BAAA;AAAA,EACA,eAAA;AAAA,EACA,sBAAA;AAAA,EACA;AACF;AAIO,SAAS,kBAAkB,MAAA,EAA2C;AAC3E,EAAA,OAAQ,iBAAA,CAAwC,SAAS,MAAM,CAAA;AACjE;AAGO,IAAM,YAAA,GAAe;AAAA;AAAA,EAE1B,YAAA,EAAc,IAAA;AAAA;AAAA,EAEd,YAAA,EAAc,IAAA;AAAA;AAAA,EAEd,iBAAA,EAAmB,IAAA;AAAA;AAAA,EAEnB,YAAA,EAAc,IAAA;AAAA;AAAA,EAEd,iBAAA,EAAmB,IAAA;AAAA;AAAA,EAEnB,aAAA,EAAe,MAAA;AAAA;AAAA,EAEf,QAAA,EAAU;AACZ;AAqJA,SAAS,SAAS,KAAA,EAAkD;AAClE,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,IAAA;AAChD;AAEA,SAAS,OAAA,CAAQ,OAAgB,MAAA,EAAkD;AACjF,EAAA,OAAO,QAAA,CAAS,KAAK,CAAA,IAAK,KAAA,CAAM,IAAA,KAAS,CAAA,EAAG,cAAc,CAAA,EAAG,MAAM,CAAA,CAAA,IAAM,KAAA,CAAM,CAAA,KAAM,gBAAA;AACvF;AAEO,SAAS,eAAe,KAAA,EAAuC;AACpE,EAAA,OAAO,OAAA,CAAQ,OAAO,OAAO,CAAA;AAC/B;AAEO,SAAS,kBAAkB,KAAA,EAA0C;AAC1E,EAAA,OACE,QAAQ,KAAA,EAAO,UAAU,CAAA,IACzB,OAAO,MAAM,EAAA,KAAO,QAAA,KACnB,QAAA,IAAY,KAAA,IAAU,SAAS,KAAA,CAAM,KAAK,KAAK,OAAO,KAAA,CAAM,MAAM,IAAA,KAAS,QAAA,CAAA;AAEhF;AAEO,SAAS,eAAe,KAAA,EAAuC;AACpE,EAAA,OACE,OAAA,CAAQ,KAAA,EAAO,OAAO,CAAA,KACrB,KAAA,CAAM,KAAA,KAAU,iBAAA,IAAqB,KAAA,CAAM,KAAA,KAAU,cAAA,IAAkB,KAAA,CAAM,KAAA,KAAU,YAAA,CAAA;AAE5F;AAEA,IAAM,kBAAA,GAAkD;AAAA,EACtD,SAAA;AAAA,EACA,YAAA;AAAA,EACA,YAAA;AAAA,EACA,cAAA;AAAA,EACA;AACF,CAAA;AAGA,SAAS,QAAQ,KAAA,EAAiC;AAChD,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,OAAO,SAAA,CAAU,KAAK,KAAK,KAAA,IAAS,CAAA;AAC1E;AAGO,SAAS,kBAAkB,KAAA,EAA0C;AAC1E,EAAA,IAAI,CAAC,OAAA,CAAQ,KAAA,EAAO,UAAU,GAAG,OAAO,KAAA;AACxC,EAAA,MAAM,OAAO,KAAA,CAAM,IAAA;AACnB,EAAA,OACE,SAAS,IAAI,CAAA,IACb,OAAO,IAAA,CAAK,UAAA,KAAe,YAC1B,kBAAA,CAAyC,QAAA,CAAS,IAAA,CAAK,UAAU,KAClE,OAAA,CAAQ,IAAA,CAAK,QAAQ,CAAA,IACrB,OAAA,CAAQ,KAAK,iBAAiB,CAAA;AAElC;AAGA,IAAM,iBAAA,GAAoB,EAAA;AAG1B,SAAS,oBAAoB,KAAA,EAAwB;AACnD,EAAA,KAAA,MAAW,aAAa,KAAA,EAAO;AAC7B,IAAA,MAAM,IAAA,GAAO,SAAA,CAAU,WAAA,CAAY,CAAC,CAAA,IAAK,CAAA;AACzC,IAAA,IAAI,QAAQ,EAAA,IAAS,IAAA,IAAQ,GAAA,IAAQ,IAAA,IAAQ,KAAO,OAAO,IAAA;AAAA,EAC7D;AACA,EAAA,OAAO,KAAA;AACT;AAGA,SAAS,cAAc,KAAA,EAAiC;AACtD,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,OAAO,KAAA;AACtC,EAAA,IAAI,mBAAA,CAAoB,KAAK,CAAA,EAAG,OAAO,KAAA;AACvC,EAAA,MAAM,OAAA,GAAU,MAAM,IAAA,EAAK;AAC3B,EAAA,OAAO,OAAA,CAAQ,MAAA,IAAU,CAAA,IAAK,OAAA,CAAQ,MAAA,IAAU,EAAA;AAClD;AAGO,SAAS,kBAAkB,KAAA,EAA0C;AAC1E,EAAA,IAAI,CAAC,OAAA,CAAQ,KAAA,EAAO,UAAU,GAAG,OAAO,KAAA;AACxC,EAAA,MAAM,OAAO,KAAA,CAAM,IAAA;AACnB,EAAA,OACE,MAAM,OAAA,CAAQ,IAAI,KAClB,IAAA,CAAK,MAAA,IAAU,qBACf,IAAA,CAAK,KAAA;AAAA,IACH,CAAC,KAAA,KACC,QAAA,CAAS,KAAK,CAAA,IACd,OAAO,KAAA,CAAM,OAAA,KAAY,QAAA,IACzB,cAAA,CAAe,KAAK,KAAA,CAAM,OAAO,CAAA,IACjC,aAAA,CAAc,MAAM,IAAI;AAAA,GAC5B;AAEJ;AAEO,SAAS,iBAAiB,KAAA,EAAyC;AACxE,EAAA,OAAO,OAAA,CAAQ,KAAA,EAAO,SAAS,CAAA,IAAK,OAAO,MAAM,EAAA,KAAO,QAAA,IAAY,OAAO,KAAA,CAAM,MAAA,KAAW,QAAA;AAC9F;AAEO,SAAS,oBAAoB,KAAA,EAA4C;AAC9E,EAAA,OAAO,OAAA,CAAQ,OAAO,YAAY,CAAA;AACpC;AAGA,IAAM,cAAA,GAAiB,qBAAA;AAEhB,SAAS,mBAAmB,KAAA,EAA2C;AAC5E,EAAA,OACE,OAAA,CAAQ,KAAA,EAAO,WAAW,CAAA,IAC1B,OAAO,KAAA,CAAM,OAAA,KAAY,QAAA,IACzB,cAAA,CAAe,KAAK,KAAA,CAAM,OAAO,CAAA,IACjC,OAAO,MAAM,KAAA,KAAU,QAAA;AAAA,GAEtB,OAAO,MAAM,OAAA,KAAY,SAAA,IAAa,MAAM,MAAA,KAAW,UAAA,IAAc,MAAM,MAAA,KAAW,SAAA,CAAA;AAE3F;AAEO,SAAS,0BAA0B,KAAA,EAAkD;AAC1F,EAAA,OACE,OAAA,CAAQ,KAAA,EAAO,mBAAmB,CAAA,KACjC,KAAA,CAAM,MAAA,KAAW,MAAA,IAAU,KAAA,CAAM,MAAA,KAAW,SAAA,IAAa,KAAA,CAAM,MAAA,KAAW,OAAA,CAAA;AAE/E;AAGO,SAAS,gBAAgB,KAAA,EAAwB;AACtD,EAAA,OAAO,mBAAA,CAAoB,KAAK,KAAK,CAAA;AACvC;AAMO,SAAS,UAAA,CAAW,SAAA,EAAmB,aAAA,EAAuB,MAAA,EAA6B;AAChG,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,YAAA,EAAc,SAAS,CAAA;AAC3C,EAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,QAAA,EAAU,aAAa,CAAA;AAC5C,EAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,GAAA,EAAK,MAAA,CAAO,gBAAgB,CAAC,CAAA;AAClD,EAAA,IAAI,WAAW,MAAA,EAAW,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,UAAU,MAAM,CAAA;AAC/D,EAAA,OAAO,IAAI,QAAA,EAAS;AACtB;AAQO,SAAS,UAAA,CACd,SAAA,EACA,aAAA,EACA,OAAA,EACQ;AACR,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,YAAA,EAAc,SAAS,CAAA;AAC3C,EAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,QAAA,EAAU,aAAa,CAAA;AAC5C,EAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,GAAA,EAAK,MAAA,CAAO,gBAAgB,CAAC,CAAA;AAClD,EAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,OAAA,EAAS,OAAA,CAAQ,KAAK,CAAA;AAC3C,EAAA,IAAI,OAAA,CAAQ,WAAW,MAAA,EAAW,GAAA,CAAI,aAAa,GAAA,CAAI,MAAA,EAAQ,QAAQ,MAAM,CAAA;AAC7E,EAAA,IAAI,QAAQ,GAAA,EAAK,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,OAAO,GAAG,CAAA;AAChD,EAAA,IAAI,OAAA,CAAQ,WAAW,MAAA,EAAW,GAAA,CAAI,aAAa,GAAA,CAAI,QAAA,EAAU,QAAQ,MAAM,CAAA;AAC/E,EAAA,OAAO,IAAI,QAAA,EAAS;AACtB;AAOO,SAAS,SAAA,CACd,SAAA,EACA,aAAA,EACA,OAAA,GAAoD,EAAC,EAC7C;AACR,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,WAAA,EAAa,SAAS,CAAA;AAC1C,EAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,QAAA,EAAU,aAAa,CAAA;AAC5C,EAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,GAAA,EAAK,MAAA,CAAO,gBAAgB,CAAC,CAAA;AAClD,EAAA,IAAI,OAAA,CAAQ,WAAW,MAAA,EAAW,GAAA,CAAI,aAAa,GAAA,CAAI,MAAA,EAAQ,QAAQ,MAAM,CAAA;AAC7E,EAAA,IAAI,OAAA,CAAQ,WAAW,MAAA,EAAW,GAAA,CAAI,aAAa,GAAA,CAAI,QAAA,EAAU,QAAQ,MAAM,CAAA;AAC/E,EAAA,OAAO,IAAI,QAAA,EAAS;AACtB","file":"protocol.cjs","sourcesContent":["/**\n * The pop-up protocol between a partner page (the opener) and the Assetera Wallet (the pop-up) — ADR-0054 D3/D4.\n *\n * This file is the CONTRACT. The connector in this package speaks the opener side; AsseteraWalletFront's\n * `/connect` page speaks the pop-up side and imports these types from `@asseteragmbh/wallet-connector/protocol`.\n * Change it only in a backwards-compatible way, or bump `PROTOCOL_VERSION` and support both on the wallet side:\n * partner sites upgrade on their own schedule.\n *\n * ## The handshake\n *\n * 1. The partner opens `${walletUrl}${CONNECT_PATH}?origin=<partner origin>&v=<version>` from a user click.\n * 2. The pop-up checks the claimed origin against its allowlist (D4). If listed, it posts `ready` to\n *    `window.opener` with `targetOrigin` = that origin. The browser delivers it ONLY if the opener really is\n *    that origin, so a page cannot claim someone else's origin and still hear the answer.\n * 3. The opener waits for `ready` from the wallet origin, then sends `request`s with `targetOrigin` = the wallet\n *    origin. The pop-up accepts a message only when `event.origin` is the allowed origin from step 2 AND\n *    `event.source === window.opener`, and answers with `targetOrigin` = that origin. Nothing else is accepted.\n *\n * ## Sign-in hint\n *\n * A partner may tell the wallet how the client signed in at the partner, through the optional `signIn` URL\n * parameter (`SIGN_IN_HINTS`). The hint only names an identity provider: the wallet checks it against its own\n * list, may ignore it and then falls back to its own login page. The hint never carries a token, an identity or\n * any other credential.\n *\n * ## Lifetime\n *\n * The pop-up is not guaranteed to stay open. The wallet site may close the `/connect` pop-up after it connected\n * or answered a request. The provider keeps the last `accounts` and `chainId` it saw, so the partner page still\n * looks connected after the pop-up closes, and it opens the pop-up again on the next request from a user click.\n * (ADR-0054, \"the wallet tab must stay open\", no longer holds.)\n *\n * ## Onboarding\n *\n * Onboarding is a second flow on the same wallet origin, for a partner that wants the client to get an Assetera\n * Wallet (a new one, or the one the client already has). The partner opens\n * `${walletUrl}${ONBOARD_PATH}?origin=<partner origin>&v=<version>&chain=<CAIP-2 chain id>[&add=1]` from a user\n * click. The pop-up checks the claimed origin against its partner list, signs the client in through SSO, runs the\n * wizard (accept the wallet terms, create the wallet) and then posts `onboarded` (or `onboard-cancelled`) to\n * `window.opener` with `targetOrigin` = the partner origin. `add=1` asks for one more wallet even when the client\n * already has one.\n *\n * After `onboarded` the pop-up STAYS OPEN and answers `request` messages for `personal_sign` by the onboarded\n * address (plus `eth_accounts` and `eth_chainId`), with the same `response` messages as `/connect`. That is how\n * the partner gets the ownership signature it needs to register the wallet with its own compliance service: the\n * wallet itself never calls a regulated service (ADR-0059 D3), and a second `window.open` after an asynchronous\n * step would be blocked by the browser. The partner closes the pop-up when it is done.\n *\n * The opener accepts messages only when `event.origin` is the wallet origin AND `event.source` is the pop-up\n * it opened. The wizard never returns a private key or a token, only the wallet address and signatures the\n * client approved.\n *\n * ## Manage\n *\n * The partner can open `${walletUrl}${MANAGE_PATH}?origin=<partner origin>&v=<version>[&lang=<locale>][&signIn=<hint>]`\n * from a user click, so the client can see and change the wallet accounts and the wallet security (passkeys,\n * authenticator app, recovery codes). The pop-up checks the claimed origin against its partner list, posts\n * `ready` to `window.opener` (the same message as `/connect`) and then posts `security` messages. It never\n * answers `request` messages.\n *\n * ## Account names\n *\n * While a pop-up is open it may also post `accounts` messages. Each entry names one account the client has\n * already shared with THIS partner, so the partner can show a name next to the address. The wallet never sends\n * an account the partner does not already know. A manage pop-up may send the message, and an onboarding pop-up\n * may send it after it reported the address. The message is only sent while a pop-up is open, never on request\n * of the partner. It carries no token and no other data.\n */\n\nexport const PROTOCOL_VERSION = 1 as const;\n\n/** The pop-up route on the wallet origin. */\nexport const CONNECT_PATH = \"/connect\";\n\n/** The onboarding wizard route on the wallet origin. */\nexport const ONBOARD_PATH = \"/onboard\";\n\n/** The manage wallet route on the wallet origin. */\nexport const MANAGE_PATH = \"/manage\";\n\n/** The identity providers a partner can name in the `signIn` hint. */\nexport const SIGN_IN_HINTS = [\"assetera-marketplace\"] as const;\n\n/** A named identity provider the wallet may use for a silent sign-in. */\nexport type SignInHint = (typeof SIGN_IN_HINTS)[number];\n\n/** True when `value` is one of {@link SIGN_IN_HINTS}. */\nexport function isSignInHint(value: unknown): value is SignInHint {\n  return (SIGN_IN_HINTS as readonly unknown[]).includes(value);\n}\n\n/** Every message carries this prefix in `type`, so both sides can ignore unrelated `postMessage` traffic. */\nexport const MESSAGE_PREFIX = \"assetera-wallet:\" as const;\n\n/**\n * The EIP-1193 methods the pop-up answers (ADR-0054 D3). Anything else is refused with 4200. Read-only chain\n * calls (`eth_call`, `eth_getBalance`, …) do not go through the pop-up; wagmi sends them to its own transports.\n */\nexport const SUPPORTED_METHODS = [\n  \"eth_requestAccounts\",\n  \"eth_accounts\",\n  \"eth_chainId\",\n  \"wallet_switchEthereumChain\",\n  \"personal_sign\",\n  \"eth_signTypedData_v4\",\n  \"eth_sendTransaction\",\n] as const;\n\nexport type SupportedMethod = (typeof SUPPORTED_METHODS)[number];\n\nexport function isSupportedMethod(method: string): method is SupportedMethod {\n  return (SUPPORTED_METHODS as readonly string[]).includes(method);\n}\n\n/** EIP-1193 / EIP-1474 error codes the pop-up uses. */\nexport const RpcErrorCode = {\n  /** The client rejected the request in the pop-up. */\n  UserRejected: 4001,\n  /** Not connected yet (no `eth_requestAccounts` approved in this pop-up). */\n  Unauthorized: 4100,\n  /** The method is not in SUPPORTED_METHODS. */\n  UnsupportedMethod: 4200,\n  /** The pop-up closed, or the wallet session ended. */\n  Disconnected: 4900,\n  /** `wallet_switchEthereumChain` to a chain the wallet does not offer. */\n  UnrecognizedChain: 4902,\n  /** Malformed params. */\n  InvalidParams: -32602,\n  /** Anything unexpected inside the wallet. */\n  Internal: -32603,\n} as const;\n\nexport type RpcErrorCode = (typeof RpcErrorCode)[keyof typeof RpcErrorCode];\n\nexport interface RpcError {\n  code: number;\n  message: string;\n  data?: unknown;\n}\n\n// --- pop-up → opener ---------------------------------------------------------------------------------\n\n/** The pop-up is loaded and accepts requests from this opener. */\nexport interface ReadyMessage {\n  type: `${typeof MESSAGE_PREFIX}ready`;\n  v: typeof PROTOCOL_VERSION;\n  /** Shown to the partner for diagnostics only; the partner must not rely on it for anything. */\n  walletVersion?: string;\n}\n\n/** The answer to one `request`, matched by `id`. Exactly one of `result` / `error`. */\nexport type ResponseMessage =\n  | { type: `${typeof MESSAGE_PREFIX}response`; v: typeof PROTOCOL_VERSION; id: string; result: unknown }\n  | { type: `${typeof MESSAGE_PREFIX}response`; v: typeof PROTOCOL_VERSION; id: string; error: RpcError };\n\n/** EIP-1193 provider events, forwarded to the partner. */\nexport type EventMessage =\n  | {\n      type: `${typeof MESSAGE_PREFIX}event`;\n      v: typeof PROTOCOL_VERSION;\n      event: \"accountsChanged\";\n      data: `0x${string}`[];\n    }\n  | {\n      type: `${typeof MESSAGE_PREFIX}event`;\n      v: typeof PROTOCOL_VERSION;\n      event: \"chainChanged\";\n      data: `0x${string}`;\n    }\n  | {\n      type: `${typeof MESSAGE_PREFIX}event`;\n      v: typeof PROTOCOL_VERSION;\n      event: \"disconnect\";\n      data: RpcError;\n    };\n\n/**\n * How well the client's Assetera Wallet is protected. The values are the ones the wallet site shows:\n *\n * - `add-factor`: there is no passkey and no authenticator app yet.\n * - `save-codes`: recovery codes exist, but the client has not confirmed saving them.\n * - `create-codes`: a factor exists, but there are no recovery codes.\n * - `protected`: a factor exists and the recovery codes are saved.\n * - `unknown`: the wallet could not read the state.\n */\nexport type WalletProtection = \"unknown\" | \"add-factor\" | \"save-codes\" | \"create-codes\" | \"protected\";\n\n/** The wallet security status sent by a manage (or connect) pop-up. */\nexport interface WalletSecurityStatus {\n  /** Overall result, the same values the wallet site shows. */\n  protection: WalletProtection;\n  /** Passkeys registered for signing (Dynamic step-up), not sign-in factors. */\n  passkeys: number;\n  /** Authenticator apps (TOTP) registered for signing (Dynamic step-up). */\n  authenticatorApps: number;\n}\n\n/**\n * The wallet reports the security status while a pop-up is open. The partner cannot ask for it. It never\n * carries a token, an identity or a credential.\n */\nexport interface SecurityMessage {\n  type: `${typeof MESSAGE_PREFIX}security`;\n  v: typeof PROTOCOL_VERSION;\n  data: WalletSecurityStatus;\n}\n\n/** One account of the Assetera Wallet that the client already shared with this partner, with its name. */\nexport interface WalletAccountName {\n  address: `0x${string}`;\n  name: string;\n}\n\n/**\n * The wallet reports the names of the accounts the client already shared with this partner. The partner cannot\n * ask for it and the wallet never names an account the partner does not already know. It never carries a token\n * or any other data.\n */\nexport interface AccountsMessage {\n  type: `${typeof MESSAGE_PREFIX}accounts`;\n  v: typeof PROTOCOL_VERSION;\n  data: WalletAccountName[];\n}\n\n/**\n * The onboarding wizard finished: the client accepted the wallet terms and has an Assetera Wallet on `chain`.\n * `created` is `true` when the wallet was created in this run, `false` when the wizard returned the client's\n * existing wallet. The wallet is not registered with any compliance service; that is the partner's step.\n */\nexport interface OnboardedMessage {\n  type: `${typeof MESSAGE_PREFIX}onboarded`;\n  v: typeof PROTOCOL_VERSION;\n  address: `0x${string}`;\n  chain: string;\n  created: boolean;\n  /**\n   * @deprecated Sent by wallet versions that registered the wallet themselves (before ADR-0059). Ignored.\n   */\n  status?: \"approved\" | \"pending\";\n}\n\n/** The onboarding wizard did not produce a wallet. `message` is optional diagnostics for the partner. */\nexport interface OnboardCancelledMessage {\n  type: `${typeof MESSAGE_PREFIX}onboard-cancelled`;\n  v: typeof PROTOCOL_VERSION;\n  reason: \"user\" | \"refused\" | \"error\";\n  message?: string;\n}\n\nexport type WalletToPartnerMessage =\n  | ReadyMessage\n  | ResponseMessage\n  | EventMessage\n  | SecurityMessage\n  | AccountsMessage\n  | OnboardedMessage\n  | OnboardCancelledMessage;\n\n// --- opener → pop-up ---------------------------------------------------------------------------------\n\nexport interface RequestMessage {\n  type: `${typeof MESSAGE_PREFIX}request`;\n  v: typeof PROTOCOL_VERSION;\n  /** Unique per request within one connection; the response carries it back. */\n  id: string;\n  method: string;\n  params?: unknown[] | Record<string, unknown>;\n}\n\n/** The partner disconnects (for example the user clicked \"Disconnect\" in the partner page). */\nexport interface DisconnectMessage {\n  type: `${typeof MESSAGE_PREFIX}disconnect`;\n  v: typeof PROTOCOL_VERSION;\n}\n\nexport type PartnerToWalletMessage = RequestMessage | DisconnectMessage;\n\n// --- guards ------------------------------------------------------------------------------------------\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null;\n}\n\nfunction hasType(value: unknown, suffix: string): value is Record<string, unknown> {\n  return isRecord(value) && value.type === `${MESSAGE_PREFIX}${suffix}` && value.v === PROTOCOL_VERSION;\n}\n\nexport function isReadyMessage(value: unknown): value is ReadyMessage {\n  return hasType(value, \"ready\");\n}\n\nexport function isResponseMessage(value: unknown): value is ResponseMessage {\n  return (\n    hasType(value, \"response\") &&\n    typeof value.id === \"string\" &&\n    (\"result\" in value || (isRecord(value.error) && typeof value.error.code === \"number\"))\n  );\n}\n\nexport function isEventMessage(value: unknown): value is EventMessage {\n  return (\n    hasType(value, \"event\") &&\n    (value.event === \"accountsChanged\" || value.event === \"chainChanged\" || value.event === \"disconnect\")\n  );\n}\n\nconst WALLET_PROTECTIONS: readonly WalletProtection[] = [\n  \"unknown\",\n  \"add-factor\",\n  \"save-codes\",\n  \"create-codes\",\n  \"protected\",\n];\n\n/** A factor count: a whole number, zero or more. */\nfunction isCount(value: unknown): value is number {\n  return typeof value === \"number\" && Number.isInteger(value) && value >= 0;\n}\n\n/** True for a `security` message with a known `protection` value and whole, non-negative factor counts. */\nexport function isSecurityMessage(value: unknown): value is SecurityMessage {\n  if (!hasType(value, \"security\")) return false;\n  const data = value.data;\n  return (\n    isRecord(data) &&\n    typeof data.protection === \"string\" &&\n    (WALLET_PROTECTIONS as readonly string[]).includes(data.protection) &&\n    isCount(data.passkeys) &&\n    isCount(data.authenticatorApps)\n  );\n}\n\n/** The largest number of accounts one `accounts` message may carry. */\nconst MAX_ACCOUNT_NAMES = 50;\n\n/** True when `value` has a control character: C0, DEL or C1. */\nfunction hasControlCharacter(value: string): boolean {\n  for (const character of value) {\n    const code = character.codePointAt(0) ?? 0;\n    if (code <= 0x1f || (code >= 0x7f && code <= 0x9f)) return true;\n  }\n  return false;\n}\n\n/** A name: a string whose trimmed length is 1 to 64 and that has no control characters. */\nfunction isAccountName(value: unknown): value is string {\n  if (typeof value !== \"string\") return false;\n  if (hasControlCharacter(value)) return false;\n  const trimmed = value.trim();\n  return trimmed.length >= 1 && trimmed.length <= 64;\n}\n\n/** True for an `accounts` message with at most 50 named accounts. */\nexport function isAccountsMessage(value: unknown): value is AccountsMessage {\n  if (!hasType(value, \"accounts\")) return false;\n  const data = value.data;\n  return (\n    Array.isArray(data) &&\n    data.length <= MAX_ACCOUNT_NAMES &&\n    data.every(\n      (entry: unknown) =>\n        isRecord(entry) &&\n        typeof entry.address === \"string\" &&\n        EVM_ADDRESS_RE.test(entry.address) &&\n        isAccountName(entry.name),\n    )\n  );\n}\n\nexport function isRequestMessage(value: unknown): value is RequestMessage {\n  return hasType(value, \"request\") && typeof value.id === \"string\" && typeof value.method === \"string\";\n}\n\nexport function isDisconnectMessage(value: unknown): value is DisconnectMessage {\n  return hasType(value, \"disconnect\");\n}\n\n/** `0x` followed by exactly 40 hexadecimal digits, the shape of an EVM address. */\nconst EVM_ADDRESS_RE = /^0x[0-9a-fA-F]{40}$/;\n\nexport function isOnboardedMessage(value: unknown): value is OnboardedMessage {\n  return (\n    hasType(value, \"onboarded\") &&\n    typeof value.address === \"string\" &&\n    EVM_ADDRESS_RE.test(value.address) &&\n    typeof value.chain === \"string\" &&\n    // `created` is new; an older wallet sent `status` instead and always created or reused a wallet.\n    (typeof value.created === \"boolean\" || value.status === \"approved\" || value.status === \"pending\")\n  );\n}\n\nexport function isOnboardCancelledMessage(value: unknown): value is OnboardCancelledMessage {\n  return (\n    hasType(value, \"onboard-cancelled\") &&\n    (value.reason === \"user\" || value.reason === \"refused\" || value.reason === \"error\")\n  );\n}\n\n/** A CAIP-2 EVM chain id, for example `eip155:80002` (Polygon Amoy) or `eip155:1` (mainnet). */\nexport function isCaip2EvmChain(value: string): boolean {\n  return /^eip155:\\d{1,32}$/.test(value);\n}\n\n/**\n * The URL the partner opens. `partnerOrigin` is `window.location.origin` of the partner page. `signIn` adds the\n * optional sign-in hint; it is only a hint and the wallet may ignore it.\n */\nexport function connectUrl(walletUrl: string, partnerOrigin: string, signIn?: SignInHint): string {\n  const url = new URL(CONNECT_PATH, walletUrl);\n  url.searchParams.set(\"origin\", partnerOrigin);\n  url.searchParams.set(\"v\", String(PROTOCOL_VERSION));\n  if (signIn !== undefined) url.searchParams.set(\"signIn\", signIn);\n  return url.toString();\n}\n\n/**\n * The URL the partner opens for the onboarding wizard. `partnerOrigin` is `window.location.origin` of the\n * partner page; `chain` is the CAIP-2 chain id the new wallet should be created on; `locale` is passed as `lang`\n * when the partner wants a specific wizard language. `signIn` adds the optional sign-in hint; it is only a hint\n * and the wallet may ignore it.\n */\nexport function onboardUrl(\n  walletUrl: string,\n  partnerOrigin: string,\n  options: { chain: string; locale?: string; add?: boolean; signIn?: SignInHint },\n): string {\n  const url = new URL(ONBOARD_PATH, walletUrl);\n  url.searchParams.set(\"origin\", partnerOrigin);\n  url.searchParams.set(\"v\", String(PROTOCOL_VERSION));\n  url.searchParams.set(\"chain\", options.chain);\n  if (options.locale !== undefined) url.searchParams.set(\"lang\", options.locale);\n  if (options.add) url.searchParams.set(\"add\", \"1\");\n  if (options.signIn !== undefined) url.searchParams.set(\"signIn\", options.signIn);\n  return url.toString();\n}\n\n/**\n * The URL the partner opens to manage the wallet. `partnerOrigin` is `window.location.origin` of the partner\n * page. `locale` is passed as `lang` when the partner wants a specific language. `signIn` adds the optional\n * sign-in hint; it is only a hint and the wallet may ignore it.\n */\nexport function manageUrl(\n  walletUrl: string,\n  partnerOrigin: string,\n  options: { locale?: string; signIn?: SignInHint } = {},\n): string {\n  const url = new URL(MANAGE_PATH, walletUrl);\n  url.searchParams.set(\"origin\", partnerOrigin);\n  url.searchParams.set(\"v\", String(PROTOCOL_VERSION));\n  if (options.locale !== undefined) url.searchParams.set(\"lang\", options.locale);\n  if (options.signIn !== undefined) url.searchParams.set(\"signIn\", options.signIn);\n  return url.toString();\n}\n"]}

package/dist/protocol.d.cts

@@ -16,10 +16,19 @@
  *    origin. The pop-up accepts a message only when `event.origin` is the allowed origin from step 2 AND
  *    `event.source === window.opener`, and answers with `targetOrigin` = that origin. Nothing else is accepted.
  *
+ * ## Sign-in hint
+ *
+ * A partner may tell the wallet how the client signed in at the partner, through the optional `signIn` URL
+ * parameter (`SIGN_IN_HINTS`). The hint only names an identity provider: the wallet checks it against its own
+ * list, may ignore it and then falls back to its own login page. The hint never carries a token, an identity or
+ * any other credential.
+ *
  * ## Lifetime
  *
- * The pop-up stays open while the partner uses the wallet (ADR-0054, "the wallet tab must stay open"). When it is
- * closed, the opener sees `disconnect` (or notices `popup.closed`) and must reconnect from a user click.
+ * The pop-up is not guaranteed to stay open. The wallet site may close the `/connect` pop-up after it connected
+ * or answered a request. The provider keeps the last `accounts` and `chainId` it saw, so the partner page still
+ * looks connected after the pop-up closes, and it opens the pop-up again on the next request from a user click.
+ * (ADR-0054, "the wallet tab must stay open", no longer holds.)
  *
  * ## Onboarding
  *
@@ -40,12 +49,36 @@
  * The opener accepts messages only when `event.origin` is the wallet origin AND `event.source` is the pop-up
  * it opened. The wizard never returns a private key or a token, only the wallet address and signatures the
  * client approved.
+ *
+ * ## Manage
+ *
+ * The partner can open `${walletUrl}${MANAGE_PATH}?origin=<partner origin>&v=<version>[&lang=<locale>][&signIn=<hint>]`
+ * from a user click, so the client can see and change the wallet accounts and the wallet security (passkeys,
+ * authenticator app, recovery codes). The pop-up checks the claimed origin against its partner list, posts
+ * `ready` to `window.opener` (the same message as `/connect`) and then posts `security` messages. It never
+ * answers `request` messages.
+ *
+ * ## Account names
+ *
+ * While a pop-up is open it may also post `accounts` messages. Each entry names one account the client has
+ * already shared with THIS partner, so the partner can show a name next to the address. The wallet never sends
+ * an account the partner does not already know. A manage pop-up may send the message, and an onboarding pop-up
+ * may send it after it reported the address. The message is only sent while a pop-up is open, never on request
+ * of the partner. It carries no token and no other data.
  */
 declare const PROTOCOL_VERSION: 1;
 /** The pop-up route on the wallet origin. */
 declare const CONNECT_PATH = "/connect";
 /** The onboarding wizard route on the wallet origin. */
 declare const ONBOARD_PATH = "/onboard";
+/** The manage wallet route on the wallet origin. */
+declare const MANAGE_PATH = "/manage";
+/** The identity providers a partner can name in the `signIn` hint. */
+declare const SIGN_IN_HINTS: readonly ["assetera-marketplace"];
+/** A named identity provider the wallet may use for a silent sign-in. */
+type SignInHint = (typeof SIGN_IN_HINTS)[number];
+/** True when `value` is one of {@link SIGN_IN_HINTS}. */
+declare function isSignInHint(value: unknown): value is SignInHint;
 /** Every message carries this prefix in `type`, so both sides can ignore unrelated `postMessage` traffic. */
 declare const MESSAGE_PREFIX: "assetera-wallet:";
 /**
@@ -114,6 +147,49 @@ type EventMessage = {
     event: "disconnect";
     data: RpcError;
 };
+/**
+ * How well the client's Assetera Wallet is protected. The values are the ones the wallet site shows:
+ *
+ * - `add-factor`: there is no passkey and no authenticator app yet.
+ * - `save-codes`: recovery codes exist, but the client has not confirmed saving them.
+ * - `create-codes`: a factor exists, but there are no recovery codes.
+ * - `protected`: a factor exists and the recovery codes are saved.
+ * - `unknown`: the wallet could not read the state.
+ */
+type WalletProtection = "unknown" | "add-factor" | "save-codes" | "create-codes" | "protected";
+/** The wallet security status sent by a manage (or connect) pop-up. */
+interface WalletSecurityStatus {
+    /** Overall result, the same values the wallet site shows. */
+    protection: WalletProtection;
+    /** Passkeys registered for signing (Dynamic step-up), not sign-in factors. */
+    passkeys: number;
+    /** Authenticator apps (TOTP) registered for signing (Dynamic step-up). */
+    authenticatorApps: number;
+}
+/**
+ * The wallet reports the security status while a pop-up is open. The partner cannot ask for it. It never
+ * carries a token, an identity or a credential.
+ */
+interface SecurityMessage {
+    type: `${typeof MESSAGE_PREFIX}security`;
+    v: typeof PROTOCOL_VERSION;
+    data: WalletSecurityStatus;
+}
+/** One account of the Assetera Wallet that the client already shared with this partner, with its name. */
+interface WalletAccountName {
+    address: `0x${string}`;
+    name: string;
+}
+/**
+ * The wallet reports the names of the accounts the client already shared with this partner. The partner cannot
+ * ask for it and the wallet never names an account the partner does not already know. It never carries a token
+ * or any other data.
+ */
+interface AccountsMessage {
+    type: `${typeof MESSAGE_PREFIX}accounts`;
+    v: typeof PROTOCOL_VERSION;
+    data: WalletAccountName[];
+}
 /**
  * The onboarding wizard finished: the client accepted the wallet terms and has an Assetera Wallet on `chain`.
  * `created` is `true` when the wallet was created in this run, `false` when the wizard returned the client's
@@ -137,7 +213,7 @@ interface OnboardCancelledMessage {
     reason: "user" | "refused" | "error";
     message?: string;
 }
-type WalletToPartnerMessage = ReadyMessage | ResponseMessage | EventMessage | OnboardedMessage | OnboardCancelledMessage;
+type WalletToPartnerMessage = ReadyMessage | ResponseMessage | EventMessage | SecurityMessage | AccountsMessage | OnboardedMessage | OnboardCancelledMessage;
 interface RequestMessage {
     type: `${typeof MESSAGE_PREFIX}request`;
     v: typeof PROTOCOL_VERSION;
@@ -155,23 +231,41 @@ type PartnerToWalletMessage = RequestMessage | DisconnectMessage;
 declare function isReadyMessage(value: unknown): value is ReadyMessage;
 declare function isResponseMessage(value: unknown): value is ResponseMessage;
 declare function isEventMessage(value: unknown): value is EventMessage;
+/** True for a `security` message with a known `protection` value and whole, non-negative factor counts. */
+declare function isSecurityMessage(value: unknown): value is SecurityMessage;
+/** True for an `accounts` message with at most 50 named accounts. */
+declare function isAccountsMessage(value: unknown): value is AccountsMessage;
 declare function isRequestMessage(value: unknown): value is RequestMessage;
 declare function isDisconnectMessage(value: unknown): value is DisconnectMessage;
 declare function isOnboardedMessage(value: unknown): value is OnboardedMessage;
 declare function isOnboardCancelledMessage(value: unknown): value is OnboardCancelledMessage;
 /** A CAIP-2 EVM chain id, for example `eip155:80002` (Polygon Amoy) or `eip155:1` (mainnet). */
 declare function isCaip2EvmChain(value: string): boolean;
-/** The URL the partner opens. `partnerOrigin` is `window.location.origin` of the partner page. */
-declare function connectUrl(walletUrl: string, partnerOrigin: string): string;
+/**
+ * The URL the partner opens. `partnerOrigin` is `window.location.origin` of the partner page. `signIn` adds the
+ * optional sign-in hint; it is only a hint and the wallet may ignore it.
+ */
+declare function connectUrl(walletUrl: string, partnerOrigin: string, signIn?: SignInHint): string;
 /**
  * The URL the partner opens for the onboarding wizard. `partnerOrigin` is `window.location.origin` of the
  * partner page; `chain` is the CAIP-2 chain id the new wallet should be created on; `locale` is passed as `lang`
- * when the partner wants a specific wizard language.
+ * when the partner wants a specific wizard language. `signIn` adds the optional sign-in hint; it is only a hint
+ * and the wallet may ignore it.
  */
 declare function onboardUrl(walletUrl: string, partnerOrigin: string, options: {
     chain: string;
     locale?: string;
     add?: boolean;
+    signIn?: SignInHint;
+}): string;
+/**
+ * The URL the partner opens to manage the wallet. `partnerOrigin` is `window.location.origin` of the partner
+ * page. `locale` is passed as `lang` when the partner wants a specific language. `signIn` adds the optional
+ * sign-in hint; it is only a hint and the wallet may ignore it.
+ */
+declare function manageUrl(walletUrl: string, partnerOrigin: string, options?: {
+    locale?: string;
+    signIn?: SignInHint;
 }): string;
 
-export { CONNECT_PATH, type DisconnectMessage, type EventMessage, MESSAGE_PREFIX, ONBOARD_PATH, type OnboardCancelledMessage, type OnboardedMessage, PROTOCOL_VERSION, type PartnerToWalletMessage, type ReadyMessage, type RequestMessage, type ResponseMessage, type RpcError, RpcErrorCode, SUPPORTED_METHODS, type SupportedMethod, type WalletToPartnerMessage, connectUrl, isCaip2EvmChain, isDisconnectMessage, isEventMessage, isOnboardCancelledMessage, isOnboardedMessage, isReadyMessage, isRequestMessage, isResponseMessage, isSupportedMethod, onboardUrl };
+export { type AccountsMessage, CONNECT_PATH, type DisconnectMessage, type EventMessage, MANAGE_PATH, MESSAGE_PREFIX, ONBOARD_PATH, type OnboardCancelledMessage, type OnboardedMessage, PROTOCOL_VERSION, type PartnerToWalletMessage, type ReadyMessage, type RequestMessage, type ResponseMessage, type RpcError, RpcErrorCode, SIGN_IN_HINTS, SUPPORTED_METHODS, type SecurityMessage, type SignInHint, type SupportedMethod, type WalletAccountName, type WalletProtection, type WalletSecurityStatus, type WalletToPartnerMessage, connectUrl, isAccountsMessage, isCaip2EvmChain, isDisconnectMessage, isEventMessage, isOnboardCancelledMessage, isOnboardedMessage, isReadyMessage, isRequestMessage, isResponseMessage, isSecurityMessage, isSignInHint, isSupportedMethod, manageUrl, onboardUrl };

package/dist/protocol.d.ts

@@ -16,10 +16,19 @@
  *    origin. The pop-up accepts a message only when `event.origin` is the allowed origin from step 2 AND
  *    `event.source === window.opener`, and answers with `targetOrigin` = that origin. Nothing else is accepted.
  *
+ * ## Sign-in hint
+ *
+ * A partner may tell the wallet how the client signed in at the partner, through the optional `signIn` URL
+ * parameter (`SIGN_IN_HINTS`). The hint only names an identity provider: the wallet checks it against its own
+ * list, may ignore it and then falls back to its own login page. The hint never carries a token, an identity or
+ * any other credential.
+ *
  * ## Lifetime
  *
- * The pop-up stays open while the partner uses the wallet (ADR-0054, "the wallet tab must stay open"). When it is
- * closed, the opener sees `disconnect` (or notices `popup.closed`) and must reconnect from a user click.
+ * The pop-up is not guaranteed to stay open. The wallet site may close the `/connect` pop-up after it connected
+ * or answered a request. The provider keeps the last `accounts` and `chainId` it saw, so the partner page still
+ * looks connected after the pop-up closes, and it opens the pop-up again on the next request from a user click.
+ * (ADR-0054, "the wallet tab must stay open", no longer holds.)
  *
  * ## Onboarding
  *
@@ -40,12 +49,36 @@
  * The opener accepts messages only when `event.origin` is the wallet origin AND `event.source` is the pop-up
  * it opened. The wizard never returns a private key or a token, only the wallet address and signatures the
  * client approved.
+ *
+ * ## Manage
+ *
+ * The partner can open `${walletUrl}${MANAGE_PATH}?origin=<partner origin>&v=<version>[&lang=<locale>][&signIn=<hint>]`
+ * from a user click, so the client can see and change the wallet accounts and the wallet security (passkeys,
+ * authenticator app, recovery codes). The pop-up checks the claimed origin against its partner list, posts
+ * `ready` to `window.opener` (the same message as `/connect`) and then posts `security` messages. It never
+ * answers `request` messages.
+ *
+ * ## Account names
+ *
+ * While a pop-up is open it may also post `accounts` messages. Each entry names one account the client has
+ * already shared with THIS partner, so the partner can show a name next to the address. The wallet never sends
+ * an account the partner does not already know. A manage pop-up may send the message, and an onboarding pop-up
+ * may send it after it reported the address. The message is only sent while a pop-up is open, never on request
+ * of the partner. It carries no token and no other data.
  */
 declare const PROTOCOL_VERSION: 1;
 /** The pop-up route on the wallet origin. */
 declare const CONNECT_PATH = "/connect";
 /** The onboarding wizard route on the wallet origin. */
 declare const ONBOARD_PATH = "/onboard";
+/** The manage wallet route on the wallet origin. */
+declare const MANAGE_PATH = "/manage";
+/** The identity providers a partner can name in the `signIn` hint. */
+declare const SIGN_IN_HINTS: readonly ["assetera-marketplace"];
+/** A named identity provider the wallet may use for a silent sign-in. */
+type SignInHint = (typeof SIGN_IN_HINTS)[number];
+/** True when `value` is one of {@link SIGN_IN_HINTS}. */
+declare function isSignInHint(value: unknown): value is SignInHint;
 /** Every message carries this prefix in `type`, so both sides can ignore unrelated `postMessage` traffic. */
 declare const MESSAGE_PREFIX: "assetera-wallet:";
 /**
@@ -114,6 +147,49 @@ type EventMessage = {
     event: "disconnect";
     data: RpcError;
 };
+/**
+ * How well the client's Assetera Wallet is protected. The values are the ones the wallet site shows:
+ *
+ * - `add-factor`: there is no passkey and no authenticator app yet.
+ * - `save-codes`: recovery codes exist, but the client has not confirmed saving them.
+ * - `create-codes`: a factor exists, but there are no recovery codes.
+ * - `protected`: a factor exists and the recovery codes are saved.
+ * - `unknown`: the wallet could not read the state.
+ */
+type WalletProtection = "unknown" | "add-factor" | "save-codes" | "create-codes" | "protected";
+/** The wallet security status sent by a manage (or connect) pop-up. */
+interface WalletSecurityStatus {
+    /** Overall result, the same values the wallet site shows. */
+    protection: WalletProtection;
+    /** Passkeys registered for signing (Dynamic step-up), not sign-in factors. */
+    passkeys: number;
+    /** Authenticator apps (TOTP) registered for signing (Dynamic step-up). */
+    authenticatorApps: number;
+}
+/**
+ * The wallet reports the security status while a pop-up is open. The partner cannot ask for it. It never
+ * carries a token, an identity or a credential.
+ */
+interface SecurityMessage {
+    type: `${typeof MESSAGE_PREFIX}security`;
+    v: typeof PROTOCOL_VERSION;
+    data: WalletSecurityStatus;
+}
+/** One account of the Assetera Wallet that the client already shared with this partner, with its name. */
+interface WalletAccountName {
+    address: `0x${string}`;
+    name: string;
+}
+/**
+ * The wallet reports the names of the accounts the client already shared with this partner. The partner cannot
+ * ask for it and the wallet never names an account the partner does not already know. It never carries a token
+ * or any other data.
+ */
+interface AccountsMessage {
+    type: `${typeof MESSAGE_PREFIX}accounts`;
+    v: typeof PROTOCOL_VERSION;
+    data: WalletAccountName[];
+}
 /**
  * The onboarding wizard finished: the client accepted the wallet terms and has an Assetera Wallet on `chain`.
  * `created` is `true` when the wallet was created in this run, `false` when the wizard returned the client's
@@ -137,7 +213,7 @@ interface OnboardCancelledMessage {
     reason: "user" | "refused" | "error";
     message?: string;
 }
-type WalletToPartnerMessage = ReadyMessage | ResponseMessage | EventMessage | OnboardedMessage | OnboardCancelledMessage;
+type WalletToPartnerMessage = ReadyMessage | ResponseMessage | EventMessage | SecurityMessage | AccountsMessage | OnboardedMessage | OnboardCancelledMessage;
 interface RequestMessage {
     type: `${typeof MESSAGE_PREFIX}request`;
     v: typeof PROTOCOL_VERSION;
@@ -155,23 +231,41 @@ type PartnerToWalletMessage = RequestMessage | DisconnectMessage;
 declare function isReadyMessage(value: unknown): value is ReadyMessage;
 declare function isResponseMessage(value: unknown): value is ResponseMessage;
 declare function isEventMessage(value: unknown): value is EventMessage;
+/** True for a `security` message with a known `protection` value and whole, non-negative factor counts. */
+declare function isSecurityMessage(value: unknown): value is SecurityMessage;
+/** True for an `accounts` message with at most 50 named accounts. */
+declare function isAccountsMessage(value: unknown): value is AccountsMessage;
 declare function isRequestMessage(value: unknown): value is RequestMessage;
 declare function isDisconnectMessage(value: unknown): value is DisconnectMessage;
 declare function isOnboardedMessage(value: unknown): value is OnboardedMessage;
 declare function isOnboardCancelledMessage(value: unknown): value is OnboardCancelledMessage;
 /** A CAIP-2 EVM chain id, for example `eip155:80002` (Polygon Amoy) or `eip155:1` (mainnet). */
 declare function isCaip2EvmChain(value: string): boolean;
-/** The URL the partner opens. `partnerOrigin` is `window.location.origin` of the partner page. */
-declare function connectUrl(walletUrl: string, partnerOrigin: string): string;
+/**
+ * The URL the partner opens. `partnerOrigin` is `window.location.origin` of the partner page. `signIn` adds the
+ * optional sign-in hint; it is only a hint and the wallet may ignore it.
+ */
+declare function connectUrl(walletUrl: string, partnerOrigin: string, signIn?: SignInHint): string;
 /**
  * The URL the partner opens for the onboarding wizard. `partnerOrigin` is `window.location.origin` of the
  * partner page; `chain` is the CAIP-2 chain id the new wallet should be created on; `locale` is passed as `lang`
- * when the partner wants a specific wizard language.
+ * when the partner wants a specific wizard language. `signIn` adds the optional sign-in hint; it is only a hint
+ * and the wallet may ignore it.
  */
 declare function onboardUrl(walletUrl: string, partnerOrigin: string, options: {
     chain: string;
     locale?: string;
     add?: boolean;
+    signIn?: SignInHint;
+}): string;
+/**
+ * The URL the partner opens to manage the wallet. `partnerOrigin` is `window.location.origin` of the partner
+ * page. `locale` is passed as `lang` when the partner wants a specific language. `signIn` adds the optional
+ * sign-in hint; it is only a hint and the wallet may ignore it.
+ */
+declare function manageUrl(walletUrl: string, partnerOrigin: string, options?: {
+    locale?: string;
+    signIn?: SignInHint;
 }): string;
 
-export { CONNECT_PATH, type DisconnectMessage, type EventMessage, MESSAGE_PREFIX, ONBOARD_PATH, type OnboardCancelledMessage, type OnboardedMessage, PROTOCOL_VERSION, type PartnerToWalletMessage, type ReadyMessage, type RequestMessage, type ResponseMessage, type RpcError, RpcErrorCode, SUPPORTED_METHODS, type SupportedMethod, type WalletToPartnerMessage, connectUrl, isCaip2EvmChain, isDisconnectMessage, isEventMessage, isOnboardCancelledMessage, isOnboardedMessage, isReadyMessage, isRequestMessage, isResponseMessage, isSupportedMethod, onboardUrl };
+export { type AccountsMessage, CONNECT_PATH, type DisconnectMessage, type EventMessage, MANAGE_PATH, MESSAGE_PREFIX, ONBOARD_PATH, type OnboardCancelledMessage, type OnboardedMessage, PROTOCOL_VERSION, type PartnerToWalletMessage, type ReadyMessage, type RequestMessage, type ResponseMessage, type RpcError, RpcErrorCode, SIGN_IN_HINTS, SUPPORTED_METHODS, type SecurityMessage, type SignInHint, type SupportedMethod, type WalletAccountName, type WalletProtection, type WalletSecurityStatus, type WalletToPartnerMessage, connectUrl, isAccountsMessage, isCaip2EvmChain, isDisconnectMessage, isEventMessage, isOnboardCancelledMessage, isOnboardedMessage, isReadyMessage, isRequestMessage, isResponseMessage, isSecurityMessage, isSignInHint, isSupportedMethod, manageUrl, onboardUrl };

package/dist/protocol.js

@@ -1,3 +1,3 @@
-export { CONNECT_PATH, MESSAGE_PREFIX, ONBOARD_PATH, PROTOCOL_VERSION, RpcErrorCode, SUPPORTED_METHODS, connectUrl, isCaip2EvmChain, isDisconnectMessage, isEventMessage, isOnboardCancelledMessage, isOnboardedMessage, isReadyMessage, isRequestMessage, isResponseMessage, isSupportedMethod, onboardUrl } from './chunk-SU2ZKBZD.js';
+export { CONNECT_PATH, MANAGE_PATH, MESSAGE_PREFIX, ONBOARD_PATH, PROTOCOL_VERSION, RpcErrorCode, SIGN_IN_HINTS, SUPPORTED_METHODS, connectUrl, isAccountsMessage, isCaip2EvmChain, isDisconnectMessage, isEventMessage, isOnboardCancelledMessage, isOnboardedMessage, isReadyMessage, isRequestMessage, isResponseMessage, isSecurityMessage, isSignInHint, isSupportedMethod, manageUrl, onboardUrl } from './chunk-ZEOGKINA.js';
 //# sourceMappingURL=protocol.js.map
 //# sourceMappingURL=protocol.js.map

package/dist/{provider-BEIsX3q_.d.ts → provider-BroYZ3LY.d.cts}

@@ -1,10 +1,20 @@
+import { WalletSecurityStatus, WalletAccountName, SignInHint } from './protocol.cjs';
+
+/**
+ * EIP-1193 provider for the Assetera Wallet pop-up — the opener side of the ADR-0054 D3/D4 protocol.
+ *
+ * The provider owns a single pop-up (`window.open(connectUrl(...), "assetera-wallet", ...)`) and speaks the
+ * wire format defined in `./protocol`. It never touches Dynamic, React, wagmi or viem, so a partner can use it
+ * on its own or through the wagmi / RainbowKit adapters in this package.
+ */
+
 /** Arguments accepted by `request`, mirroring EIP-1193. */
 interface RequestArguments {
     method: string;
     params?: unknown[] | Record<string, unknown>;
 }
-/** EIP-1193 provider events emitted by the pop-up. */
-type ProviderEvent = "accountsChanged" | "chainChanged" | "connect" | "disconnect";
+/** EIP-1193 provider events emitted by the pop-up, plus the wallet security status and account names. */
+type ProviderEvent = "accountsChanged" | "chainChanged" | "connect" | "disconnect" | "assetera_security" | "assetera_accounts";
 /**
  * Listener shape for EIP-1193 provider events. `never[]` accepts a listener with any concrete parameter list
  * (for example wagmi's `(accounts: string[]) => void`), while internal emission stays type-safe via a cast.
@@ -16,15 +26,27 @@ interface AsseteraWalletProvider {
     on(event: ProviderEvent, listener: ProviderListener): void;
     removeListener(event: ProviderEvent, listener: ProviderListener): void;
     disconnect(): void;
+    /**
+     * The last security status reported by a wallet pop-up, or `undefined` when none arrived yet. A closed pop-up
+     * does not clear it.
+     */
+    lastSecurityStatus(): WalletSecurityStatus | undefined;
+    /**
+     * The last account names reported by a wallet pop-up, or `undefined` when none arrived yet. The returned list
+     * is a copy. A closed pop-up does not clear it.
+     */
+    lastAccountNames(): WalletAccountName[] | undefined;
 }
 /** Options for {@link createAsseteraWalletProvider}. */
 interface AsseteraWalletProviderOptions {
-    /** Base URL of the wallet origin, e.g. `https://wallet.playground.assetera.com`. */
+    /** Base URL of the wallet origin, e.g. `https://wallet.wallet-staging.assetera.com`. */
     walletUrl: string;
     /** Chain id used before the wallet reports one, and as the local `eth_chainId` fallback. */
     defaultChainId: number;
     /** `window.open` feature string. Defaults to `"popup,width=420,height=720"`. */
     popupFeatures?: string;
+    /** Sign-in hint passed as `signIn`. Only a hint; the wallet may ignore it. */
+    signIn?: SignInHint;
 }
 /**
  * EIP-1193 error carrying a JSON-RPC `code` (and optional `data`). This is what every rejected `request`

package/dist/{provider-BEIsX3q_.d.cts → provider-LBsymT4P.d.ts}

@@ -1,10 +1,20 @@
+import { WalletSecurityStatus, WalletAccountName, SignInHint } from './protocol.js';
+
+/**
+ * EIP-1193 provider for the Assetera Wallet pop-up — the opener side of the ADR-0054 D3/D4 protocol.
+ *
+ * The provider owns a single pop-up (`window.open(connectUrl(...), "assetera-wallet", ...)`) and speaks the
+ * wire format defined in `./protocol`. It never touches Dynamic, React, wagmi or viem, so a partner can use it
+ * on its own or through the wagmi / RainbowKit adapters in this package.
+ */
+
 /** Arguments accepted by `request`, mirroring EIP-1193. */
 interface RequestArguments {
     method: string;
     params?: unknown[] | Record<string, unknown>;
 }
-/** EIP-1193 provider events emitted by the pop-up. */
-type ProviderEvent = "accountsChanged" | "chainChanged" | "connect" | "disconnect";
+/** EIP-1193 provider events emitted by the pop-up, plus the wallet security status and account names. */
+type ProviderEvent = "accountsChanged" | "chainChanged" | "connect" | "disconnect" | "assetera_security" | "assetera_accounts";
 /**
  * Listener shape for EIP-1193 provider events. `never[]` accepts a listener with any concrete parameter list
  * (for example wagmi's `(accounts: string[]) => void`), while internal emission stays type-safe via a cast.
@@ -16,15 +26,27 @@ interface AsseteraWalletProvider {
     on(event: ProviderEvent, listener: ProviderListener): void;
     removeListener(event: ProviderEvent, listener: ProviderListener): void;
     disconnect(): void;
+    /**
+     * The last security status reported by a wallet pop-up, or `undefined` when none arrived yet. A closed pop-up
+     * does not clear it.
+     */
+    lastSecurityStatus(): WalletSecurityStatus | undefined;
+    /**
+     * The last account names reported by a wallet pop-up, or `undefined` when none arrived yet. The returned list
+     * is a copy. A closed pop-up does not clear it.
+     */
+    lastAccountNames(): WalletAccountName[] | undefined;
 }
 /** Options for {@link createAsseteraWalletProvider}. */
 interface AsseteraWalletProviderOptions {
-    /** Base URL of the wallet origin, e.g. `https://wallet.playground.assetera.com`. */
+    /** Base URL of the wallet origin, e.g. `https://wallet.wallet-staging.assetera.com`. */
     walletUrl: string;
     /** Chain id used before the wallet reports one, and as the local `eth_chainId` fallback. */
     defaultChainId: number;
     /** `window.open` feature string. Defaults to `"popup,width=420,height=720"`. */
     popupFeatures?: string;
+    /** Sign-in hint passed as `signIn`. Only a hint; the wallet may ignore it. */
+    signIn?: SignInHint;
 }
 /**
  * EIP-1193 error carrying a JSON-RPC `code` (and optional `data`). This is what every rejected `request`