@bwalletx/connect 0.0.0-stage → 0.1.0

package/dist/index.js

@@ -0,0 +1,486 @@
+// src/discover.ts
+var RDNS_EXTENSION = "com.bwalletx.extension";
+var RDNS_MOBILE = "space.bwallet.mobile";
+var BWALLETX_RDNS = [RDNS_EXTENSION, RDNS_MOBILE];
+function discoverBwalletX(ms = 1200) {
+  if (typeof window === "undefined") return Promise.resolve(null);
+  return new Promise((resolve) => {
+    let done = false;
+    const finish = (r) => {
+      if (done) return;
+      done = true;
+      window.removeEventListener("brc100:announceWallet", onAnnounce);
+      resolve(r);
+    };
+    const onAnnounce = (e) => {
+      const d = e.detail;
+      const rdns = d?.info?.rdns ?? "";
+      if (d?.wallet && BWALLETX_RDNS.includes(rdns)) {
+        finish({ wallet: d.wallet, method: rdns === RDNS_EXTENSION ? "extension" : "in-app", rdns });
+      }
+    };
+    window.addEventListener("brc100:announceWallet", onAnnounce);
+    window.dispatchEvent(new Event("brc100:requestWallet"));
+    setTimeout(() => {
+      const cwi = window.CWI;
+      finish(cwi ? { wallet: cwi, method: "in-app", rdns: null } : null);
+    }, ms);
+  });
+}
+async function findBwalletX(ms = 1200) {
+  return (await discoverBwalletX(ms))?.wallet ?? null;
+}
+
+// src/pair.ts
+import { PrivateKey as PrivateKey2 } from "@bsv/sdk";
+
+// src/in-order.ts
+function inOrder(handle, onError) {
+  let queue = Promise.resolve();
+  return (frame) => {
+    queue = queue.then(() => handle(frame)).catch((e) => onError?.(e));
+    return queue;
+  };
+}
+
+// src/protocol.ts
+import { PublicKey } from "@bsv/sdk";
+var PAIR_VERSION = "1";
+var PAIR_INFO = "bwallet-pair-v1";
+var PAIR_HOST = "www.bwallet.space";
+var DEFAULT_RELAY = "relay.bwallet.space";
+var QR_LIFETIME_S = 120;
+var enc = new TextEncoder();
+var dec = new TextDecoder();
+var binary = (bytes) => {
+  let s = "";
+  for (let i = 0; i < bytes.length; i += 32768) s += String.fromCharCode(...bytes.subarray(i, i + 32768));
+  return s;
+};
+var b64url = (bytes) => btoa(binary(bytes)).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+var fromB64url = (s) => {
+  const t = s.replace(/-/g, "+").replace(/_/g, "/");
+  const bin = atob(t + "=".repeat((4 - t.length % 4) % 4));
+  return Uint8Array.from(bin, (ch) => ch.charCodeAt(0));
+};
+var b64 = (bytes) => btoa(binary(bytes));
+var fromB64 = (s) => Uint8Array.from(atob(s), (ch) => ch.charCodeAt(0));
+var newChannel = () => b64url(crypto.getRandomValues(new Uint8Array(16)));
+function pairUrl(link) {
+  const q = new URLSearchParams({ v: link.v, r: link.r, c: link.c, k: link.k, o: link.o, e: String(link.e) });
+  return `https://${PAIR_HOST}/pair?${q}`;
+}
+var relaySocketUrl = (relay, channel, role, expiry) => {
+  const local = /^(localhost|127\.0\.0\.1)(:\d+)?$/.test(relay);
+  const q = new URLSearchParams({ role });
+  if (expiry) q.set("e", String(expiry));
+  return `${local ? "ws" : "wss"}://${relay}/v1/c/${channel}?${q}`;
+};
+async function deriveSession(mine, theirs, channel) {
+  const point = mine.deriveSharedSecret(PublicKey.fromString(theirs));
+  const ikm = new Uint8Array(point.encode(true));
+  const base = await crypto.subtle.importKey("raw", ikm, "HKDF", false, ["deriveBits"]);
+  const bits = new Uint8Array(
+    await crypto.subtle.deriveBits(
+      { name: "HKDF", hash: "SHA-256", salt: fromB64url(channel), info: enc.encode(PAIR_INFO) },
+      base,
+      256
+    )
+  );
+  const key = await crypto.subtle.importKey("raw", bits, "AES-GCM", false, ["encrypt", "decrypt"]);
+  const h = new Uint8Array(await crypto.subtle.digest("SHA-256", bits));
+  const code = String((h[0] << 8 | h[1]) % 1e4).padStart(4, "0");
+  return { key, code };
+}
+var Sealer = class {
+  constructor(key, me) {
+    this.key = key;
+    this.me = me;
+  }
+  key;
+  me;
+  sent = 0;
+  lastSeen = 0;
+  async seal(msg) {
+    const s = ++this.sent;
+    const n = crypto.getRandomValues(new Uint8Array(12));
+    const ct = new Uint8Array(
+      await crypto.subtle.encrypt(
+        { name: "AES-GCM", iv: n, additionalData: enc.encode(`${this.me}|${s}`) },
+        this.key,
+        enc.encode(JSON.stringify(msg))
+      )
+    );
+    return { s, n: b64(n), d: b64(ct) };
+  }
+  /** Decrypts a frame from the other side; null for replays, reflections or tampering. */
+  async open(f) {
+    if (!Number.isInteger(f.s) || f.s <= this.lastSeen) return null;
+    const from = this.me === "site" ? "wallet" : "site";
+    try {
+      const pt = await crypto.subtle.decrypt(
+        { name: "AES-GCM", iv: fromB64(f.n), additionalData: enc.encode(`${from}|${f.s}`) },
+        this.key,
+        fromB64(f.d)
+      );
+      this.lastSeen = f.s;
+      return JSON.parse(dec.decode(pt));
+    } catch {
+      return null;
+    }
+  }
+  /** For resuming a session after a reload: continue counters where they were. */
+  get counters() {
+    return { sent: this.sent, lastSeen: this.lastSeen };
+  }
+  restore(c) {
+    this.sent = c.sent;
+    this.lastSeen = c.lastSeen;
+  }
+};
+var isSealed = (x) => !!x && typeof x === "object" && "d" in x && "n" in x && "s" in x;
+
+// src/pair.ts
+var DEFAULT_KEY = "bwalletx.connect.pairing.v1";
+var OPEN = 1;
+function memoryStorage() {
+  const m = /* @__PURE__ */ new Map();
+  return { getItem: (k) => m.get(k) ?? null, setItem: (k, v) => void m.set(k, v), removeItem: (k) => void m.delete(k) };
+}
+function defaultStorage() {
+  try {
+    if (typeof localStorage !== "undefined") return localStorage;
+  } catch {
+  }
+  return memoryStorage();
+}
+function defaultSocket() {
+  return (url) => {
+    if (typeof WebSocket === "undefined") throw new Error("No WebSocket here. Pass options.socket.");
+    return new WebSocket(url);
+  };
+}
+function parseStored(raw) {
+  if (!raw) return null;
+  try {
+    const p = JSON.parse(raw);
+    const n = (x) => Number.isInteger(x) && x >= 0;
+    if (p.v !== 1) return null;
+    if (typeof p.c !== "string" || !/^[A-Za-z0-9_-]{22}$/.test(p.c)) return null;
+    if (typeof p.r !== "string" || !/^[a-z0-9.-]+(:\d+)?$/i.test(p.r)) return null;
+    if (typeof p.s !== "string" || !/^[0-9a-f]{64}$/i.test(p.s)) return null;
+    if (typeof p.k !== "string" || !/^0[23][0-9a-f]{64}$/i.test(p.k)) return null;
+    if (!n(p.sent) || !n(p.lastSeen) || !n(p.pairedAt)) return null;
+    return p;
+  } catch {
+    return null;
+  }
+}
+var Link = class {
+  constructor(p, sealer, storage, key, socket, timeoutMs) {
+    this.p = p;
+    this.sealer = sealer;
+    this.storage = storage;
+    this.key = key;
+    this.socket = socket;
+    this.timeoutMs = timeoutMs;
+  }
+  p;
+  sealer;
+  storage;
+  key;
+  socket;
+  timeoutMs;
+  ws = null;
+  opening = null;
+  waiting = /* @__PURE__ */ new Map();
+  forgotten = false;
+  /** Take over a socket that is already open (the one pairing used). */
+  adopt(ws) {
+    this.ws = ws;
+    this.wire(ws);
+  }
+  wire(ws) {
+    ws.onmessage = inOrder((ev) => this.onFrame(String(ev.data)));
+    ws.onerror = null;
+    ws.onclose = () => {
+      if (this.ws === ws) this.ws = null;
+      this.failAll(new Error("The connection to bWalletX closed"));
+    };
+  }
+  persist() {
+    if (this.forgotten) return;
+    this.p = { ...this.p, ...this.sealer.counters };
+    void Promise.resolve(this.storage.setItem(this.key, JSON.stringify(this.p))).catch(() => {
+    });
+  }
+  failAll(e) {
+    for (const w of this.waiting.values()) {
+      clearTimeout(w.timer);
+      w.reject(e);
+    }
+    this.waiting.clear();
+  }
+  async ensure() {
+    if (this.forgotten) throw new Error("This pairing was removed. Pair again.");
+    if (this.ws && this.ws.readyState === OPEN) return;
+    this.opening ??= this.reopen().finally(() => this.opening = null);
+    await this.opening;
+  }
+  reopen() {
+    const ws = this.socket(relaySocketUrl(this.p.r, this.p.c, "site", Math.floor(Date.now() / 1e3) + QR_LIFETIME_S - 10));
+    return new Promise((resolve, reject) => {
+      ws.onopen = () => {
+        this.ws = ws;
+        this.wire(ws);
+        resolve();
+      };
+      ws.onerror = () => reject(new Error("Could not reach the bWalletX pairing service"));
+      ws.onclose = () => reject(new Error("Could not reach the bWalletX pairing service"));
+    });
+  }
+  async onFrame(raw) {
+    let f;
+    try {
+      f = JSON.parse(raw);
+    } catch {
+      return;
+    }
+    const t = f.t;
+    if (t === "relay" && f.error) {
+      return this.failAll(new Error(`bWalletX pairing service: ${f.error}`));
+    }
+    if (!isSealed(f)) return;
+    const msg = await this.sealer.open(f);
+    if (!msg) return;
+    this.persist();
+    if (msg.t === "res") {
+      const w = this.waiting.get(msg.id);
+      if (!w) return;
+      clearTimeout(w.timer);
+      this.waiting.delete(msg.id);
+      if (msg.error) w.reject(Object.assign(new Error(msg.error.message), { code: msg.error.code }));
+      else w.resolve(msg.result);
+    } else if (msg.t === "close") {
+      this.drop();
+      this.failAll(new Error("bWalletX disconnected this site. Pair again."));
+    }
+  }
+  async call(action, params) {
+    await this.ensure();
+    const ws = this.ws;
+    const id = `${action}-${Date.now()}-${Math.random().toString(36).slice(2, 10)}`;
+    const result = new Promise((resolve, reject) => {
+      const timer = setTimeout(() => {
+        if (this.waiting.delete(id)) reject(new Error("No answer from bWalletX. Open it, unlocked, and approve."));
+      }, this.timeoutMs);
+      this.waiting.set(id, { resolve, reject, timer });
+    });
+    ws.send(JSON.stringify(await this.sealer.seal({ t: "req", id, action, params })));
+    this.persist();
+    return result;
+  }
+  close() {
+    const ws = this.ws;
+    this.ws = null;
+    ws?.close();
+  }
+  drop() {
+    this.forgotten = true;
+    void Promise.resolve(this.storage.removeItem(this.key)).catch(() => {
+    });
+    this.close();
+  }
+  async forget() {
+    if (this.forgotten) return;
+    try {
+      if (this.ws && this.ws.readyState === OPEN) {
+        this.ws.send(JSON.stringify(await this.sealer.seal({ t: "close", reason: "site unpaired" })));
+      }
+    } catch {
+    }
+    this.drop();
+  }
+  wallet() {
+    return new Proxy({}, {
+      get: (_t, method) => {
+        if (method === "close") return () => this.close();
+        if (method === "forget") return () => this.forget();
+        if (typeof method !== "string" || method === "then" || method === "toJSON") return void 0;
+        return (params) => this.call(method, params ?? {});
+      }
+    });
+  }
+};
+function pairBwalletX(opts) {
+  const storage = opts.storage === void 0 ? defaultStorage() : opts.storage ?? memoryStorage();
+  const key = opts.storageKey ?? DEFAULT_KEY;
+  const socket = opts.socket ?? defaultSocket();
+  const relay = opts.relay ?? DEFAULT_RELAY;
+  const origin = opts.origin ?? (typeof location !== "undefined" ? location.origin : "");
+  if (!origin) return Promise.reject(new Error("pairBwalletX needs options.origin outside a browser"));
+  const siteKey = PrivateKey2.fromRandom();
+  const channel = newChannel();
+  const expiry = Math.floor(Date.now() / 1e3) + QR_LIFETIME_S;
+  return new Promise((resolve, reject) => {
+    if (opts.signal?.aborted) return reject(new Error("cancelled"));
+    let ws;
+    try {
+      ws = socket(relaySocketUrl(relay, channel, "site", expiry));
+    } catch (e) {
+      return reject(e);
+    }
+    let sealer = null;
+    let walletKey = "";
+    let settled = false;
+    const fail = (e) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      ws.close();
+      reject(e);
+    };
+    const timer = setTimeout(() => fail(new Error("The pairing code expired. Show a new one.")), QR_LIFETIME_S * 1e3);
+    opts.signal?.addEventListener("abort", () => fail(new Error("cancelled")));
+    ws.onerror = () => fail(new Error("Could not reach the bWalletX pairing service"));
+    ws.onclose = () => fail(new Error("The connection to bWalletX closed before pairing finished"));
+    ws.onmessage = inOrder(async (ev) => {
+      if (settled) return;
+      let f;
+      try {
+        f = JSON.parse(String(ev.data));
+      } catch {
+        return;
+      }
+      if (f.t === "hello" && !sealer) {
+        walletKey = f.k;
+        const s = await deriveSession(siteKey, walletKey, channel);
+        sealer = new Sealer(s.key, "site");
+        opts.onCode(s.code);
+        return;
+      }
+      if (!sealer || !isSealed(f)) return;
+      const msg = await sealer.open(f);
+      if (!msg) return;
+      if (msg.t === "ready") {
+        settled = true;
+        clearTimeout(timer);
+        const p = { v: 1, c: channel, r: relay, s: siteKey.toHex(), k: walletKey, ...sealer.counters, pairedAt: Date.now() };
+        await Promise.resolve(storage.setItem(key, JSON.stringify(p))).catch(() => {
+        });
+        const link = new Link(p, sealer, storage, key, socket, opts.callTimeoutMs ?? 12e4);
+        link.adopt(ws);
+        resolve(link.wallet());
+      } else if (msg.t === "close") {
+        fail(new Error("Pairing was declined in bWalletX"));
+      }
+    });
+    opts.onLink(pairUrl({ v: PAIR_VERSION, r: relay, c: channel, k: siteKey.toPublicKey().toString(), o: origin, e: expiry }));
+  });
+}
+async function restorePairing(opts = {}) {
+  const storage = opts.storage === void 0 ? defaultStorage() : opts.storage ?? memoryStorage();
+  const key = opts.storageKey ?? DEFAULT_KEY;
+  const p = parseStored(await Promise.resolve(storage.getItem(key)).catch(() => null));
+  if (!p) return null;
+  const { key: aes } = await deriveSession(PrivateKey2.fromHex(p.s), p.k, p.c);
+  const sealer = new Sealer(aes, "site");
+  sealer.restore({ sent: p.sent, lastSeen: p.lastSeen });
+  return new Link(p, sealer, storage, key, opts.socket ?? defaultSocket(), opts.callTimeoutMs ?? 12e4).wallet();
+}
+async function clearPairing(opts = {}) {
+  const storage = opts.storage === void 0 ? defaultStorage() : opts.storage ?? memoryStorage();
+  await Promise.resolve(storage.removeItem(opts.storageKey ?? DEFAULT_KEY)).catch(() => {
+  });
+}
+
+// src/signin.ts
+var LOGIN_PROTOCOL = [2, "bwallet sign in"];
+async function connectBwalletX(opts = {}) {
+  if (opts.wallet) return { wallet: opts.wallet, method: "wallet" };
+  const found = await discoverBwalletX(opts.discoverMs);
+  if (found) return { wallet: found.wallet, method: found.method };
+  if (opts.reusePairing !== false) {
+    const restored = await restorePairing(opts.pairing ?? {});
+    if (restored) return { wallet: restored, method: "pairing" };
+  }
+  if (!opts.pairing) {
+    throw Object.assign(new Error("bWalletX was not found in this browser"), { code: "NOT_FOUND" });
+  }
+  return { wallet: await pairBwalletX(opts.pairing), method: "pairing" };
+}
+async function signInWithBwalletX(opts) {
+  const { wallet, method } = await connectBwalletX(opts);
+  if (method !== "pairing") await wallet.waitForAuthentication({}).catch(() => {
+  });
+  const { publicKey: identityKey } = await wallet.getPublicKey({ identityKey: true });
+  const c = await opts.challenge(identityKey);
+  const { signature } = await wallet.createSignature({
+    protocolID: c.protocolID ?? LOGIN_PROTOCOL,
+    keyID: c.keyID,
+    counterparty: "anyone",
+    data: Array.from(new TextEncoder().encode(c.message))
+  });
+  return { identityKey, signature: Array.from(signature), nonce: c.nonce, method, wallet };
+}
+
+// src/button.ts
+var CSS = `
+.bwx-signin{display:inline-flex;align-items:center;gap:12px;min-height:48px;padding:10px 22px 10px 10px;border:0;border-radius:12px;cursor:pointer;background:linear-gradient(180deg,#fcd34d,#f59e0b);color:#000;text-align:left;font:700 16px/1.2 system-ui,-apple-system,"Segoe UI",sans-serif;box-shadow:0 8px 24px rgba(245,158,11,.2)}
+.bwx-signin:hover{background:linear-gradient(180deg,#fde68a,#fbbf24)}
+.bwx-signin:focus-visible{outline:2px solid #ffd24d;outline-offset:3px}
+.bwx-signin:disabled{opacity:.6;cursor:wait}
+.bwx-signin .bwx-mark{display:inline-flex;align-items:center;justify-content:center;width:32px;height:32px;border-radius:50%;background:#000;flex:none}
+.bwx-signin small{display:block;font-size:11px;font-weight:500;color:rgba(0,0,0,.6)}`;
+var LOGO_URL = "https://bwalletx.com/logo.svg";
+function renderButton(el, opts = {}) {
+  const host = typeof el === "string" ? document.querySelector(el) : el;
+  if (!host) throw new Error(`renderButton: no element ${String(el)}`);
+  if (!document.getElementById("bwx-signin-css")) {
+    const style = document.createElement("style");
+    style.id = "bwx-signin-css";
+    style.textContent = CSS;
+    document.head.appendChild(style);
+  }
+  const b = document.createElement("button");
+  b.type = "button";
+  b.className = "bwx-signin";
+  const mark = document.createElement("span");
+  mark.className = "bwx-mark";
+  const img = document.createElement("img");
+  img.src = LOGO_URL;
+  img.alt = "";
+  img.width = 15;
+  img.height = 20;
+  mark.appendChild(img);
+  const label = document.createElement("span");
+  label.className = "bwx-label";
+  label.textContent = "Sign in with bWalletX";
+  const sub = opts.subtitle === void 0 ? "also works with bWallet" : opts.subtitle;
+  if (sub) {
+    const small = document.createElement("small");
+    small.textContent = sub;
+    label.appendChild(small);
+  }
+  b.append(mark, label);
+  if (opts.onClick) b.addEventListener("click", () => opts.onClick(b));
+  host.replaceChildren(b);
+  return b;
+}
+export {
+  BWALLETX_RDNS,
+  LOGIN_PROTOCOL,
+  LOGO_URL,
+  RDNS_EXTENSION,
+  RDNS_MOBILE,
+  clearPairing,
+  connectBwalletX,
+  discoverBwalletX,
+  findBwalletX,
+  inOrder,
+  pairBwalletX,
+  renderButton,
+  restorePairing,
+  signInWithBwalletX
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/discover.ts","../src/pair.ts","../src/in-order.ts","../src/protocol.ts","../src/signin.ts","../src/button.ts"],"sourcesContent":["import type { WalletInterface } from '@bsv/sdk';\n\n/** Ids bWalletX announces in BRC-100 wallet discovery. */\nexport const RDNS_EXTENSION = 'com.bwalletx.extension';\nexport const RDNS_MOBILE = 'space.bwallet.mobile';\nexport const BWALLETX_RDNS = [RDNS_EXTENSION, RDNS_MOBILE] as const;\n\nexport type FoundBy = 'extension' | 'in-app';\n\nexport interface FoundWallet {\n  wallet: WalletInterface;\n  /** 'extension' for the Chrome extension; 'in-app' inside the bWalletX app's own browser. */\n  method: FoundBy;\n  rdns: string | null;\n}\n\n/**\n * Like findBwalletX, but also says which bWalletX answered.\n * Order: a BRC-100 announcement with a bWalletX rdns; then `window.CWI` (set by the in-app\n * browser, and by older builds that do not announce); otherwise null.\n */\nexport function discoverBwalletX(ms = 1200): Promise<FoundWallet | null> {\n  if (typeof window === 'undefined') return Promise.resolve(null);\n  return new Promise((resolve) => {\n    let done = false;\n    const finish = (r: FoundWallet | null) => {\n      if (done) return;\n      done = true;\n      window.removeEventListener('brc100:announceWallet', onAnnounce);\n      resolve(r);\n    };\n    const onAnnounce = (e: Event) => {\n      const d = (e as CustomEvent).detail as { info?: { rdns?: string }; wallet?: WalletInterface } | undefined;\n      const rdns = d?.info?.rdns ?? '';\n      if (d?.wallet && (BWALLETX_RDNS as readonly string[]).includes(rdns)) {\n        finish({ wallet: d.wallet, method: rdns === RDNS_EXTENSION ? 'extension' : 'in-app', rdns });\n      }\n    };\n    window.addEventListener('brc100:announceWallet', onAnnounce);\n    window.dispatchEvent(new Event('brc100:requestWallet'));\n    setTimeout(() => {\n      const cwi = (window as unknown as { CWI?: WalletInterface }).CWI;\n      finish(cwi ? { wallet: cwi, method: 'in-app', rdns: null } : null);\n    }, ms);\n  });\n}\n\n/**\n * Find bWalletX in this page: the extension on a computer, or the wallet itself when the page is\n * open in bWalletX's in-app browser. Resolves null if nothing answered within `ms`.\n */\nexport async function findBwalletX(ms = 1200): Promise<WalletInterface | null> {\n  return (await discoverBwalletX(ms))?.wallet ?? null;\n}\n","import { PrivateKey, type WalletInterface } from '@bsv/sdk';\nimport { inOrder } from './in-order.js';\nimport {\n  DEFAULT_RELAY,\n  PAIR_VERSION,\n  QR_LIFETIME_S,\n  Sealer,\n  deriveSession,\n  isSealed,\n  newChannel,\n  pairUrl,\n  relaySocketUrl,\n  type HelloFrame,\n  type PairMessage,\n} from './protocol.js';\n\n/** localStorage-shaped storage. Methods may be sync or async. */\nexport interface PairStorage {\n  getItem(key: string): string | null | Promise<string | null>;\n  setItem(key: string, value: string): void | Promise<void>;\n  removeItem(key: string): void | Promise<void>;\n}\n\n/** The minimum of the browser WebSocket API this package uses (the `ws` package also fits). */\nexport interface SocketLike {\n  readonly readyState: number;\n  onopen: ((ev: unknown) => void) | null;\n  onmessage: ((ev: { data: unknown }) => void) | null;\n  onerror: ((ev: unknown) => void) | null;\n  onclose: ((ev: unknown) => void) | null;\n  send(data: string): void;\n  close(): void;\n}\nexport type SocketFactory = (url: string) => SocketLike;\n\nexport interface PairConnectionOptions {\n  /** Where the pairing is kept so it survives a reload. Default: localStorage, else memory only. */\n  storage?: PairStorage | null;\n  /** Storage key. Default 'bwalletx.connect.pairing.v1'. */\n  storageKey?: string;\n  /** Opens a socket. Default: the global WebSocket. Pass one to run in Node or to test. */\n  socket?: SocketFactory;\n  /** Per-call timeout in ms. Default 120000. */\n  callTimeoutMs?: number;\n}\n\nexport interface PairingOptions extends PairConnectionOptions {\n  /** Show this link as a QR code, and as text to copy (web.bwalletx.com takes it pasted). */\n  onLink: (link: string) => void;\n  /** Show this 4-digit code. The wallet shows the same one; the user checks they match. */\n  onCode: (code: string) => void;\n  signal?: AbortSignal;\n  /** Relay host. Default relay.bwallet.space. */\n  relay?: string;\n  /** This page's origin, as the relay will see it. Default location.origin. */\n  origin?: string;\n}\n\n/** A BRC-100 wallet whose every call goes, end-to-end encrypted, to the paired phone or web wallet. */\nexport type PairedWallet = WalletInterface & {\n  /** Close the relay connection. The pairing stays stored; the next call reconnects. */\n  close(): void;\n  /** Tell the wallet to unpair, close, and delete the stored pairing. */\n  forget(): Promise<void>;\n};\n\ninterface StoredPairing {\n  v: 1;\n  c: string; // channel\n  r: string; // relay host\n  s: string; // our pairing private key (hex). Random; not a wallet key.\n  k: string; // the wallet's pairing public key\n  sent: number;\n  lastSeen: number;\n  pairedAt: number;\n}\n\nconst DEFAULT_KEY = 'bwalletx.connect.pairing.v1';\nconst OPEN = 1;\n\nfunction memoryStorage(): PairStorage {\n  const m = new Map<string, string>();\n  return { getItem: (k) => m.get(k) ?? null, setItem: (k, v) => void m.set(k, v), removeItem: (k) => void m.delete(k) };\n}\n\nfunction defaultStorage(): PairStorage {\n  try {\n    if (typeof localStorage !== 'undefined') return localStorage;\n  } catch {\n    /* blocked storage */\n  }\n  return memoryStorage();\n}\n\nfunction defaultSocket(): SocketFactory {\n  return (url) => {\n    if (typeof WebSocket === 'undefined') throw new Error('No WebSocket here. Pass options.socket.');\n    return new WebSocket(url) as unknown as SocketLike;\n  };\n}\n\nfunction parseStored(raw: string | null): StoredPairing | null {\n  if (!raw) return null;\n  try {\n    const p = JSON.parse(raw) as Partial<StoredPairing>;\n    const n = (x: unknown) => Number.isInteger(x) && (x as number) >= 0;\n    if (p.v !== 1) return null;\n    if (typeof p.c !== 'string' || !/^[A-Za-z0-9_-]{22}$/.test(p.c)) return null;\n    if (typeof p.r !== 'string' || !/^[a-z0-9.-]+(:\\d+)?$/i.test(p.r)) return null;\n    if (typeof p.s !== 'string' || !/^[0-9a-f]{64}$/i.test(p.s)) return null;\n    if (typeof p.k !== 'string' || !/^0[23][0-9a-f]{64}$/i.test(p.k)) return null;\n    if (!n(p.sent) || !n(p.lastSeen) || !n(p.pairedAt)) return null;\n    return p as StoredPairing;\n  } catch {\n    return null;\n  }\n}\n\nclass Link {\n  private ws: SocketLike | null = null;\n  private opening: Promise<void> | null = null;\n  private waiting = new Map<string, { resolve: (v: unknown) => void; reject: (e: Error) => void; timer: ReturnType<typeof setTimeout> }>();\n  private forgotten = false;\n\n  constructor(\n    private p: StoredPairing,\n    private sealer: Sealer,\n    private storage: PairStorage,\n    private key: string,\n    private socket: SocketFactory,\n    private timeoutMs: number,\n  ) {}\n\n  /** Take over a socket that is already open (the one pairing used). */\n  adopt(ws: SocketLike) {\n    this.ws = ws;\n    this.wire(ws);\n  }\n\n  private wire(ws: SocketLike) {\n    ws.onmessage = inOrder((ev: { data: unknown }) => this.onFrame(String(ev.data)));\n    ws.onerror = null;\n    ws.onclose = () => {\n      if (this.ws === ws) this.ws = null;\n      this.failAll(new Error('The connection to bWalletX closed'));\n    };\n  }\n\n  private persist() {\n    if (this.forgotten) return;\n    this.p = { ...this.p, ...this.sealer.counters };\n    void Promise.resolve(this.storage.setItem(this.key, JSON.stringify(this.p))).catch(() => {});\n  }\n\n  private failAll(e: Error) {\n    for (const w of this.waiting.values()) {\n      clearTimeout(w.timer);\n      w.reject(e);\n    }\n    this.waiting.clear();\n  }\n\n  private async ensure() {\n    if (this.forgotten) throw new Error('This pairing was removed. Pair again.');\n    if (this.ws && this.ws.readyState === OPEN) return;\n    this.opening ??= this.reopen().finally(() => (this.opening = null));\n    await this.opening;\n  }\n\n  private reopen() {\n    // A fresh expiry lets the relay recreate the channel if it was dropped; the wallet rejoins on its own.\n    const ws = this.socket(relaySocketUrl(this.p.r, this.p.c, 'site', Math.floor(Date.now() / 1000) + QR_LIFETIME_S - 10));\n    return new Promise<void>((resolve, reject) => {\n      ws.onopen = () => {\n        this.ws = ws;\n        this.wire(ws);\n        resolve();\n      };\n      ws.onerror = () => reject(new Error('Could not reach the bWalletX pairing service'));\n      ws.onclose = () => reject(new Error('Could not reach the bWalletX pairing service'));\n    });\n  }\n\n  private async onFrame(raw: string) {\n    let f: unknown;\n    try {\n      f = JSON.parse(raw);\n    } catch {\n      return;\n    }\n    const t = (f as { t?: string; error?: string }).t;\n    if (t === 'relay' && (f as { error?: string }).error) {\n      return this.failAll(new Error(`bWalletX pairing service: ${(f as { error: string }).error}`));\n    }\n    if (!isSealed(f)) return;\n    const msg = await this.sealer.open(f);\n    if (!msg) return;\n    this.persist();\n    if (msg.t === 'res') {\n      const w = this.waiting.get(msg.id);\n      if (!w) return;\n      clearTimeout(w.timer);\n      this.waiting.delete(msg.id);\n      if (msg.error) w.reject(Object.assign(new Error(msg.error.message), { code: msg.error.code }));\n      else w.resolve(msg.result);\n    } else if (msg.t === 'close') {\n      this.drop();\n      this.failAll(new Error('bWalletX disconnected this site. Pair again.'));\n    }\n  }\n\n  async call(action: string, params: unknown): Promise<unknown> {\n    await this.ensure();\n    const ws = this.ws!;\n    const id = `${action}-${Date.now()}-${Math.random().toString(36).slice(2, 10)}`;\n    const result = new Promise<unknown>((resolve, reject) => {\n      const timer = setTimeout(() => {\n        if (this.waiting.delete(id)) reject(new Error('No answer from bWalletX. Open it, unlocked, and approve.'));\n      }, this.timeoutMs);\n      this.waiting.set(id, { resolve, reject, timer });\n    });\n    ws.send(JSON.stringify(await this.sealer.seal({ t: 'req', id, action, params } satisfies PairMessage)));\n    this.persist();\n    return result;\n  }\n\n  close() {\n    const ws = this.ws;\n    this.ws = null;\n    ws?.close();\n  }\n\n  private drop() {\n    this.forgotten = true;\n    void Promise.resolve(this.storage.removeItem(this.key)).catch(() => {});\n    this.close();\n  }\n\n  async forget() {\n    if (this.forgotten) return;\n    try {\n      if (this.ws && this.ws.readyState === OPEN) {\n        this.ws.send(JSON.stringify(await this.sealer.seal({ t: 'close', reason: 'site unpaired' })));\n      }\n    } catch {\n      /* best effort */\n    }\n    this.drop();\n  }\n\n  wallet(): PairedWallet {\n    return new Proxy({} as PairedWallet, {\n      get: (_t, method) => {\n        if (method === 'close') return () => this.close();\n        if (method === 'forget') return () => this.forget();\n        if (typeof method !== 'string' || method === 'then' || method === 'toJSON') return undefined;\n        return (params: unknown) => this.call(method, params ?? {});\n      },\n    });\n  }\n}\n\n/**\n * Pair with bWalletX on a phone (scan the QR) or web.bwalletx.com (paste the link).\n * Resolves with a wallet once the user taps Connect. The pairing is stored (see `storage`) so\n * `restorePairing()` can reconnect after a reload without a new QR.\n */\nexport function pairBwalletX(opts: PairingOptions): Promise<PairedWallet> {\n  const storage = opts.storage === undefined ? defaultStorage() : (opts.storage ?? memoryStorage());\n  const key = opts.storageKey ?? DEFAULT_KEY;\n  const socket = opts.socket ?? defaultSocket();\n  const relay = opts.relay ?? DEFAULT_RELAY;\n  const origin = opts.origin ?? (typeof location !== 'undefined' ? location.origin : '');\n  if (!origin) return Promise.reject(new Error('pairBwalletX needs options.origin outside a browser'));\n\n  const siteKey = PrivateKey.fromRandom(); // a throwaway pairing key, not a wallet key\n  const channel = newChannel();\n  const expiry = Math.floor(Date.now() / 1000) + QR_LIFETIME_S;\n\n  return new Promise<PairedWallet>((resolve, reject) => {\n    if (opts.signal?.aborted) return reject(new Error('cancelled'));\n    let ws: SocketLike;\n    try {\n      ws = socket(relaySocketUrl(relay, channel, 'site', expiry));\n    } catch (e) {\n      return reject(e);\n    }\n    let sealer: Sealer | null = null;\n    let walletKey = '';\n    let settled = false;\n    const fail = (e: Error) => {\n      if (settled) return;\n      settled = true;\n      clearTimeout(timer);\n      ws.close();\n      reject(e);\n    };\n    const timer = setTimeout(() => fail(new Error('The pairing code expired. Show a new one.')), QR_LIFETIME_S * 1000);\n    opts.signal?.addEventListener('abort', () => fail(new Error('cancelled')));\n    ws.onerror = () => fail(new Error('Could not reach the bWalletX pairing service'));\n    ws.onclose = () => fail(new Error('The connection to bWalletX closed before pairing finished'));\n    ws.onmessage = inOrder(async (ev: { data: unknown }) => {\n      if (settled) return;\n      let f: unknown;\n      try {\n        f = JSON.parse(String(ev.data));\n      } catch {\n        return;\n      }\n      if ((f as HelloFrame).t === 'hello' && !sealer) {\n        walletKey = (f as HelloFrame).k;\n        const s = await deriveSession(siteKey, walletKey, channel);\n        sealer = new Sealer(s.key, 'site');\n        opts.onCode(s.code);\n        return;\n      }\n      if (!sealer || !isSealed(f)) return;\n      const msg = await sealer.open(f);\n      if (!msg) return;\n      if (msg.t === 'ready') {\n        settled = true;\n        clearTimeout(timer);\n        const p: StoredPairing = { v: 1, c: channel, r: relay, s: siteKey.toHex(), k: walletKey, ...sealer.counters, pairedAt: Date.now() };\n        await Promise.resolve(storage.setItem(key, JSON.stringify(p))).catch(() => {});\n        const link = new Link(p, sealer, storage, key, socket, opts.callTimeoutMs ?? 120_000);\n        link.adopt(ws);\n        resolve(link.wallet());\n      } else if (msg.t === 'close') {\n        fail(new Error('Pairing was declined in bWalletX'));\n      }\n    });\n    opts.onLink(pairUrl({ v: PAIR_VERSION, r: relay, c: channel, k: siteKey.toPublicKey().toString(), o: origin, e: expiry }));\n  });\n}\n\n/**\n * The wallet from a pairing stored by an earlier `pairBwalletX`, or null if there is none.\n * It connects on the first call. The wallet must still have this site paired.\n */\nexport async function restorePairing(opts: PairConnectionOptions = {}): Promise<PairedWallet | null> {\n  const storage = opts.storage === undefined ? defaultStorage() : (opts.storage ?? memoryStorage());\n  const key = opts.storageKey ?? DEFAULT_KEY;\n  const p = parseStored(await Promise.resolve(storage.getItem(key)).catch(() => null));\n  if (!p) return null;\n  const { key: aes } = await deriveSession(PrivateKey.fromHex(p.s), p.k, p.c);\n  const sealer = new Sealer(aes, 'site');\n  sealer.restore({ sent: p.sent, lastSeen: p.lastSeen });\n  return new Link(p, sealer, storage, key, opts.socket ?? defaultSocket(), opts.callTimeoutMs ?? 120_000).wallet();\n}\n\n/** Delete the stored pairing without telling the wallet. */\nexport async function clearPairing(opts: Pick<PairConnectionOptions, 'storage' | 'storageKey'> = {}) {\n  const storage = opts.storage === undefined ? defaultStorage() : (opts.storage ?? memoryStorage());\n  await Promise.resolve(storage.removeItem(opts.storageKey ?? DEFAULT_KEY)).catch(() => {});\n}\n","/**\n * Wrap an async frame handler so frames are handled one at a time, in arrival order.\n *\n * WebSocket `onmessage` does not wait for an async handler. The phone sends its plain `hello`\n * and then, as soon as the user taps Connect, a sealed `ready`. If the handler for `hello` is\n * still deriving the session key when `ready` arrives, a naive handler sees no key yet and drops\n * `ready`, so pairing never finishes. Chaining every frame onto one promise fixes that.\n */\nexport function inOrder<T>(handle: (frame: T) => Promise<void> | void, onError?: (e: unknown) => void) {\n  let queue: Promise<void> = Promise.resolve();\n  return (frame: T): Promise<void> => {\n    queue = queue.then(() => handle(frame)).catch((e) => onError?.(e));\n    return queue;\n  };\n}\n","/**\n * Phone pairing protocol (tokenblaster.lol docs/wallet-connect.md §4), shared by the site side and\n * bWallet. Kept dependency-light (@bsv/sdk + WebCrypto) so the same file can be copied into sites\n * until it ships as @b0ase/wallet.\n *\n *   QR:     https://www.bwallet.space/pair?v=1&r=<relay host>&c=<channel>&k=<site pubkey>&o=<origin>&e=<expiry>\n *   key:    ECDH(secp256k1) → HKDF-SHA256(salt = channel bytes, info = \"bwallet-pair-v1\") → AES-256-GCM\n *   frame:  { s: seq, n: nonce b64, d: ciphertext b64 }, AAD = \"<sender role>|<s>\", s strictly increasing\n *   code:   first 2 bytes of SHA-256(key bits) → 4 digits, shown on both screens\n */\nimport { PrivateKey, PublicKey } from '@bsv/sdk';\n\nexport const PAIR_VERSION = '1';\nexport const PAIR_INFO = 'bwallet-pair-v1';\n// www: the bare domain redirects there, and app-link checks (Apple's AASA) don't follow redirects.\nexport const PAIR_HOST = 'www.bwallet.space';\nconst PAIR_HOSTS = new Set([PAIR_HOST, 'bwallet.space']);\nexport const DEFAULT_RELAY = 'relay.bwallet.space';\nexport const QR_LIFETIME_S = 120;\n\nexport type Role = 'site' | 'wallet';\nexport type WalletInfo = { name: string; icon?: string; rdns: string };\n\nexport type PairLink = { v: string; r: string; c: string; k: string; o: string; e: number };\n\n/** Plaintext messages inside encrypted frames. */\nexport type PairMessage =\n  | { t: 'req'; id: string; action: string; params: unknown }\n  | { t: 'res'; id: string; result?: unknown; error?: { code: string; message: string } }\n  | { t: 'ready' }\n  | { t: 'ping' }\n  | { t: 'close'; reason: string };\n\n/** Unencrypted frames: from the relay, and the phone's hello (its key isn't shared yet). */\nexport type RelayFrame = { t: 'relay'; verifiedOrigin?: string; peer?: 'joined' | 'left'; role?: Role; error?: string };\nexport type HelloFrame = { t: 'hello'; k: string; info: WalletInfo };\nexport type SealedFrame = { s: number; n: string; d: string };\n\nconst enc = new TextEncoder();\nconst dec = new TextDecoder();\n\n// Chunked: String.fromCharCode(...bytes) overflows the call stack on large frames (signed transactions).\nconst binary = (bytes: Uint8Array) => {\n  let s = '';\n  for (let i = 0; i < bytes.length; i += 0x8000) s += String.fromCharCode(...bytes.subarray(i, i + 0x8000));\n  return s;\n};\nexport const b64url = (bytes: Uint8Array) =>\n  btoa(binary(bytes)).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=+$/, '');\nexport const fromB64url = (s: string) => {\n  const t = s.replace(/-/g, '+').replace(/_/g, '/');\n  const bin = atob(t + '='.repeat((4 - (t.length % 4)) % 4));\n  return Uint8Array.from(bin, (ch) => ch.charCodeAt(0));\n};\nconst b64 = (bytes: Uint8Array) => btoa(binary(bytes));\nconst fromB64 = (s: string) => Uint8Array.from(atob(s), (ch) => ch.charCodeAt(0));\n\nexport const newChannel = () => b64url(crypto.getRandomValues(new Uint8Array(16)));\n\nexport function pairUrl(link: PairLink): string {\n  const q = new URLSearchParams({ v: link.v, r: link.r, c: link.c, k: link.k, o: link.o, e: String(link.e) });\n  return `https://${PAIR_HOST}/pair?${q}`;\n}\n\n/** Parse a scanned QR (https link or bwallet:// fallback). Throws on anything else. */\nexport function parsePairUrl(text: string, nowS = Math.floor(Date.now() / 1000)): PairLink {\n  const u = new URL(text.trim());\n  const ok =\n    (u.protocol === 'https:' && PAIR_HOSTS.has(u.host) && u.pathname === '/pair') ||\n    (u.protocol === 'bwallet:' && /pair/.test(u.href));\n  if (!ok) throw new Error('Not a bWallet pairing code');\n  const g = (k: string) => u.searchParams.get(k) ?? '';\n  const link: PairLink = { v: g('v'), r: g('r'), c: g('c'), k: g('k'), o: g('o'), e: Number(g('e')) };\n  if (link.v !== PAIR_VERSION) throw new Error('This pairing code needs a newer bWallet');\n  if (!/^[A-Za-z0-9_-]{22}$/.test(link.c)) throw new Error('Bad pairing code');\n  if (!/^0[23][0-9a-f]{64}$/i.test(link.k)) throw new Error('Bad pairing code');\n  if (!/^[a-z0-9.-]+(:\\d+)?$/i.test(link.r)) throw new Error('Bad pairing code');\n  const o = new URL(link.o);\n  if (o.origin !== link.o) throw new Error('Bad pairing code');\n  if (!Number.isFinite(link.e) || link.e < nowS) throw new Error('This code has expired. Ask the site for a new one.');\n  return link;\n}\n\nexport const relaySocketUrl = (relay: string, channel: string, role: Role, expiry?: number) => {\n  const local = /^(localhost|127\\.0\\.0\\.1)(:\\d+)?$/.test(relay);\n  const q = new URLSearchParams({ role });\n  if (expiry) q.set('e', String(expiry));\n  return `${local ? 'ws' : 'wss'}://${relay}/v1/c/${channel}?${q}`;\n};\n\n/** Shared AES key + 4-digit comparison code from my private key and their public key. */\nexport async function deriveSession(mine: PrivateKey, theirs: string, channel: string) {\n  const point = mine.deriveSharedSecret(PublicKey.fromString(theirs));\n  const ikm = new Uint8Array(point.encode(true) as number[]);\n  const base = await crypto.subtle.importKey('raw', ikm, 'HKDF', false, ['deriveBits']);\n  const bits = new Uint8Array(\n    await crypto.subtle.deriveBits(\n      { name: 'HKDF', hash: 'SHA-256', salt: fromB64url(channel), info: enc.encode(PAIR_INFO) },\n      base,\n      256,\n    ),\n  );\n  const key = await crypto.subtle.importKey('raw', bits, 'AES-GCM', false, ['encrypt', 'decrypt']);\n  const h = new Uint8Array(await crypto.subtle.digest('SHA-256', bits));\n  const code = String(((h[0] << 8) | h[1]) % 10000).padStart(4, '0');\n  return { key, code };\n}\n\n/** One direction-aware encrypted pipe. `me` is the sender role used in the AAD. */\nexport class Sealer {\n  private sent = 0;\n  private lastSeen = 0;\n  constructor(\n    private key: CryptoKey,\n    private me: Role,\n  ) {}\n\n  async seal(msg: PairMessage): Promise<SealedFrame> {\n    const s = ++this.sent;\n    const n = crypto.getRandomValues(new Uint8Array(12));\n    const ct = new Uint8Array(\n      await crypto.subtle.encrypt(\n        { name: 'AES-GCM', iv: n, additionalData: enc.encode(`${this.me}|${s}`) },\n        this.key,\n        enc.encode(JSON.stringify(msg)),\n      ),\n    );\n    return { s, n: b64(n), d: b64(ct) };\n  }\n\n  /** Decrypts a frame from the other side; null for replays, reflections or tampering. */\n  async open(f: SealedFrame): Promise<PairMessage | null> {\n    if (!Number.isInteger(f.s) || f.s <= this.lastSeen) return null;\n    const from: Role = this.me === 'site' ? 'wallet' : 'site';\n    try {\n      const pt = await crypto.subtle.decrypt(\n        { name: 'AES-GCM', iv: fromB64(f.n), additionalData: enc.encode(`${from}|${f.s}`) },\n        this.key,\n        fromB64(f.d),\n      );\n      this.lastSeen = f.s;\n      return JSON.parse(dec.decode(pt)) as PairMessage;\n    } catch {\n      return null;\n    }\n  }\n\n  /** For resuming a session after a reload: continue counters where they were. */\n  get counters() {\n    return { sent: this.sent, lastSeen: this.lastSeen };\n  }\n  restore(c: { sent: number; lastSeen: number }) {\n    this.sent = c.sent;\n    this.lastSeen = c.lastSeen;\n  }\n}\n\nexport const isSealed = (x: unknown): x is SealedFrame =>\n  !!x && typeof x === 'object' && 'd' in x && 'n' in x && 's' in x;\n","import type { WalletInterface, WalletProtocol } from '@bsv/sdk';\nimport { discoverBwalletX } from './discover.js';\nimport { pairBwalletX, restorePairing, type PairingOptions } from './pair.js';\n\n/** Security level 2, a protocol name used for nothing else. */\nexport const LOGIN_PROTOCOL: WalletProtocol = [2, 'bwallet sign in'];\n\n/** What your server's challenge route returns (createChallenge from '@bwalletx/connect/server'). */\nexport interface Challenge {\n  nonce: string;\n  message: string;\n  keyID: string;\n  protocolID?: WalletProtocol;\n}\n\nexport type SignInMethod = 'extension' | 'in-app' | 'pairing' | 'wallet';\n\nexport interface SignInOptions {\n  /** Ask your server for a challenge for this identity key. */\n  challenge: (identityKey: string) => Promise<Challenge>;\n  /** Use this wallet instead of looking for one. `method` is then 'wallet'. */\n  wallet?: WalletInterface;\n  /** How to show the QR and code if pairing is needed. Without it, pairing is not tried. */\n  pairing?: PairingOptions;\n  /** Reuse a pairing stored by an earlier sign-in before showing a new QR. Default true. */\n  reusePairing?: boolean;\n  /** How long to wait for the extension or in-app browser to answer, in ms. Default 1200. */\n  discoverMs?: number;\n}\n\nexport interface SignInResult {\n  identityKey: string;\n  /** DER signature as number[], ready to post to verifySignIn. */\n  signature: number[];\n  nonce: string;\n  method: SignInMethod;\n  /** The wallet that signed. Keep it to make more calls. */\n  wallet: WalletInterface;\n}\n\n/** Find a wallet: extension or in-app browser first, then a stored pairing, then a new pairing. */\nexport async function connectBwalletX(\n  opts: Pick<SignInOptions, 'wallet' | 'pairing' | 'reusePairing' | 'discoverMs'> = {},\n): Promise<{ wallet: WalletInterface; method: SignInMethod }> {\n  if (opts.wallet) return { wallet: opts.wallet, method: 'wallet' };\n  const found = await discoverBwalletX(opts.discoverMs);\n  if (found) return { wallet: found.wallet, method: found.method };\n  if (opts.reusePairing !== false) {\n    const restored = await restorePairing(opts.pairing ?? {});\n    if (restored) return { wallet: restored, method: 'pairing' };\n  }\n  if (!opts.pairing) {\n    throw Object.assign(new Error('bWalletX was not found in this browser'), { code: 'NOT_FOUND' });\n  }\n  return { wallet: await pairBwalletX(opts.pairing), method: 'pairing' };\n}\n\n/**\n * Sign the server's challenge with the user's bWalletX identity key. Post the result's\n * identityKey, nonce and signature to your verify route.\n */\nexport async function signInWithBwalletX(opts: SignInOptions): Promise<SignInResult> {\n  const { wallet, method } = await connectBwalletX(opts);\n  if (method !== 'pairing') await wallet.waitForAuthentication({}).catch(() => {});\n  const { publicKey: identityKey } = await wallet.getPublicKey({ identityKey: true });\n  const c = await opts.challenge(identityKey);\n  const { signature } = await wallet.createSignature({\n    protocolID: c.protocolID ?? LOGIN_PROTOCOL,\n    keyID: c.keyID,\n    counterparty: 'anyone',\n    data: Array.from(new TextEncoder().encode(c.message)),\n  });\n  return { identityKey, signature: Array.from(signature), nonce: c.nonce, method, wallet };\n}\n","const CSS = `\n.bwx-signin{display:inline-flex;align-items:center;gap:12px;min-height:48px;padding:10px 22px 10px 10px;border:0;border-radius:12px;cursor:pointer;background:linear-gradient(180deg,#fcd34d,#f59e0b);color:#000;text-align:left;font:700 16px/1.2 system-ui,-apple-system,\"Segoe UI\",sans-serif;box-shadow:0 8px 24px rgba(245,158,11,.2)}\n.bwx-signin:hover{background:linear-gradient(180deg,#fde68a,#fbbf24)}\n.bwx-signin:focus-visible{outline:2px solid #ffd24d;outline-offset:3px}\n.bwx-signin:disabled{opacity:.6;cursor:wait}\n.bwx-signin .bwx-mark{display:inline-flex;align-items:center;justify-content:center;width:32px;height:32px;border-radius:50%;background:#000;flex:none}\n.bwx-signin small{display:block;font-size:11px;font-weight:500;color:rgba(0,0,0,.6)}`;\n\nexport const LOGO_URL = 'https://bwalletx.com/logo.svg';\n\nexport interface ButtonOptions {\n  /** Second line under the label. Default \"also works with bWallet\". false hides it. */\n  subtitle?: string | false;\n  onClick?: (button: HTMLButtonElement) => void;\n}\n\n/** Put the gold \"Sign in with bWalletX\" button into `el` (replacing its contents). */\nexport function renderButton(el: HTMLElement | string, opts: ButtonOptions = {}): HTMLButtonElement {\n  const host = typeof el === 'string' ? document.querySelector<HTMLElement>(el) : el;\n  if (!host) throw new Error(`renderButton: no element ${String(el)}`);\n  if (!document.getElementById('bwx-signin-css')) {\n    const style = document.createElement('style');\n    style.id = 'bwx-signin-css';\n    style.textContent = CSS;\n    document.head.appendChild(style);\n  }\n  const b = document.createElement('button');\n  b.type = 'button';\n  b.className = 'bwx-signin';\n  const mark = document.createElement('span');\n  mark.className = 'bwx-mark';\n  const img = document.createElement('img');\n  img.src = LOGO_URL;\n  img.alt = '';\n  img.width = 15;\n  img.height = 20;\n  mark.appendChild(img);\n  const label = document.createElement('span');\n  label.className = 'bwx-label';\n  label.textContent = 'Sign in with bWalletX';\n  const sub = opts.subtitle === undefined ? 'also works with bWallet' : opts.subtitle;\n  if (sub) {\n    const small = document.createElement('small');\n    small.textContent = sub;\n    label.appendChild(small);\n  }\n  b.append(mark, label);\n  if (opts.onClick) b.addEventListener('click', () => opts.onClick!(b));\n  host.replaceChildren(b);\n  return b;\n}\n"],"mappings":";AAGO,IAAM,iBAAiB;AACvB,IAAM,cAAc;AACpB,IAAM,gBAAgB,CAAC,gBAAgB,WAAW;AAgBlD,SAAS,iBAAiB,KAAK,MAAmC;AACvE,MAAI,OAAO,WAAW,YAAa,QAAO,QAAQ,QAAQ,IAAI;AAC9D,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,QAAI,OAAO;AACX,UAAM,SAAS,CAAC,MAA0B;AACxC,UAAI,KAAM;AACV,aAAO;AACP,aAAO,oBAAoB,yBAAyB,UAAU;AAC9D,cAAQ,CAAC;AAAA,IACX;AACA,UAAM,aAAa,CAAC,MAAa;AAC/B,YAAM,IAAK,EAAkB;AAC7B,YAAM,OAAO,GAAG,MAAM,QAAQ;AAC9B,UAAI,GAAG,UAAW,cAAoC,SAAS,IAAI,GAAG;AACpE,eAAO,EAAE,QAAQ,EAAE,QAAQ,QAAQ,SAAS,iBAAiB,cAAc,UAAU,KAAK,CAAC;AAAA,MAC7F;AAAA,IACF;AACA,WAAO,iBAAiB,yBAAyB,UAAU;AAC3D,WAAO,cAAc,IAAI,MAAM,sBAAsB,CAAC;AACtD,eAAW,MAAM;AACf,YAAM,MAAO,OAAgD;AAC7D,aAAO,MAAM,EAAE,QAAQ,KAAK,QAAQ,UAAU,MAAM,KAAK,IAAI,IAAI;AAAA,IACnE,GAAG,EAAE;AAAA,EACP,CAAC;AACH;AAMA,eAAsB,aAAa,KAAK,MAAuC;AAC7E,UAAQ,MAAM,iBAAiB,EAAE,IAAI,UAAU;AACjD;;;ACrDA,SAAS,cAAAA,mBAAwC;;;ACQ1C,SAAS,QAAW,QAA4C,SAAgC;AACrG,MAAI,QAAuB,QAAQ,QAAQ;AAC3C,SAAO,CAAC,UAA4B;AAClC,YAAQ,MAAM,KAAK,MAAM,OAAO,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,UAAU,CAAC,CAAC;AACjE,WAAO;AAAA,EACT;AACF;;;ACJA,SAAqB,iBAAiB;AAE/B,IAAM,eAAe;AACrB,IAAM,YAAY;AAElB,IAAM,YAAY;AAElB,IAAM,gBAAgB;AACtB,IAAM,gBAAgB;AAoB7B,IAAM,MAAM,IAAI,YAAY;AAC5B,IAAM,MAAM,IAAI,YAAY;AAG5B,IAAM,SAAS,CAAC,UAAsB;AACpC,MAAI,IAAI;AACR,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK,MAAQ,MAAK,OAAO,aAAa,GAAG,MAAM,SAAS,GAAG,IAAI,KAAM,CAAC;AACxG,SAAO;AACT;AACO,IAAM,SAAS,CAAC,UACrB,KAAK,OAAO,KAAK,CAAC,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,EAAE;AACxE,IAAM,aAAa,CAAC,MAAc;AACvC,QAAM,IAAI,EAAE,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG;AAChD,QAAM,MAAM,KAAK,IAAI,IAAI,QAAQ,IAAK,EAAE,SAAS,KAAM,CAAC,CAAC;AACzD,SAAO,WAAW,KAAK,KAAK,CAAC,OAAO,GAAG,WAAW,CAAC,CAAC;AACtD;AACA,IAAM,MAAM,CAAC,UAAsB,KAAK,OAAO,KAAK,CAAC;AACrD,IAAM,UAAU,CAAC,MAAc,WAAW,KAAK,KAAK,CAAC,GAAG,CAAC,OAAO,GAAG,WAAW,CAAC,CAAC;AAEzE,IAAM,aAAa,MAAM,OAAO,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,CAAC;AAE1E,SAAS,QAAQ,MAAwB;AAC9C,QAAM,IAAI,IAAI,gBAAgB,EAAE,GAAG,KAAK,GAAG,GAAG,KAAK,GAAG,GAAG,KAAK,GAAG,GAAG,KAAK,GAAG,GAAG,KAAK,GAAG,GAAG,OAAO,KAAK,CAAC,EAAE,CAAC;AAC1G,SAAO,WAAW,SAAS,SAAS,CAAC;AACvC;AAqBO,IAAM,iBAAiB,CAAC,OAAe,SAAiB,MAAY,WAAoB;AAC7F,QAAM,QAAQ,oCAAoC,KAAK,KAAK;AAC5D,QAAM,IAAI,IAAI,gBAAgB,EAAE,KAAK,CAAC;AACtC,MAAI,OAAQ,GAAE,IAAI,KAAK,OAAO,MAAM,CAAC;AACrC,SAAO,GAAG,QAAQ,OAAO,KAAK,MAAM,KAAK,SAAS,OAAO,IAAI,CAAC;AAChE;AAGA,eAAsB,cAAc,MAAkB,QAAgB,SAAiB;AACrF,QAAM,QAAQ,KAAK,mBAAmB,UAAU,WAAW,MAAM,CAAC;AAClE,QAAM,MAAM,IAAI,WAAW,MAAM,OAAO,IAAI,CAAa;AACzD,QAAM,OAAO,MAAM,OAAO,OAAO,UAAU,OAAO,KAAK,QAAQ,OAAO,CAAC,YAAY,CAAC;AACpF,QAAM,OAAO,IAAI;AAAA,IACf,MAAM,OAAO,OAAO;AAAA,MAClB,EAAE,MAAM,QAAQ,MAAM,WAAW,MAAM,WAAW,OAAO,GAAG,MAAM,IAAI,OAAO,SAAS,EAAE;AAAA,MACxF;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,QAAM,MAAM,MAAM,OAAO,OAAO,UAAU,OAAO,MAAM,WAAW,OAAO,CAAC,WAAW,SAAS,CAAC;AAC/F,QAAM,IAAI,IAAI,WAAW,MAAM,OAAO,OAAO,OAAO,WAAW,IAAI,CAAC;AACpE,QAAM,OAAO,QAAS,EAAE,CAAC,KAAK,IAAK,EAAE,CAAC,KAAK,GAAK,EAAE,SAAS,GAAG,GAAG;AACjE,SAAO,EAAE,KAAK,KAAK;AACrB;AAGO,IAAM,SAAN,MAAa;AAAA,EAGlB,YACU,KACA,IACR;AAFQ;AACA;AAAA,EACP;AAAA,EAFO;AAAA,EACA;AAAA,EAJF,OAAO;AAAA,EACP,WAAW;AAAA,EAMnB,MAAM,KAAK,KAAwC;AACjD,UAAM,IAAI,EAAE,KAAK;AACjB,UAAM,IAAI,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC;AACnD,UAAM,KAAK,IAAI;AAAA,MACb,MAAM,OAAO,OAAO;AAAA,QAClB,EAAE,MAAM,WAAW,IAAI,GAAG,gBAAgB,IAAI,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE;AAAA,QACxE,KAAK;AAAA,QACL,IAAI,OAAO,KAAK,UAAU,GAAG,CAAC;AAAA,MAChC;AAAA,IACF;AACA,WAAO,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,GAAG,IAAI,EAAE,EAAE;AAAA,EACpC;AAAA;AAAA,EAGA,MAAM,KAAK,GAA6C;AACtD,QAAI,CAAC,OAAO,UAAU,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,SAAU,QAAO;AAC3D,UAAM,OAAa,KAAK,OAAO,SAAS,WAAW;AACnD,QAAI;AACF,YAAM,KAAK,MAAM,OAAO,OAAO;AAAA,QAC7B,EAAE,MAAM,WAAW,IAAI,QAAQ,EAAE,CAAC,GAAG,gBAAgB,IAAI,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE;AAAA,QAClF,KAAK;AAAA,QACL,QAAQ,EAAE,CAAC;AAAA,MACb;AACA,WAAK,WAAW,EAAE;AAClB,aAAO,KAAK,MAAM,IAAI,OAAO,EAAE,CAAC;AAAA,IAClC,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA;AAAA,EAGA,IAAI,WAAW;AACb,WAAO,EAAE,MAAM,KAAK,MAAM,UAAU,KAAK,SAAS;AAAA,EACpD;AAAA,EACA,QAAQ,GAAuC;AAC7C,SAAK,OAAO,EAAE;AACd,SAAK,WAAW,EAAE;AAAA,EACpB;AACF;AAEO,IAAM,WAAW,CAAC,MACvB,CAAC,CAAC,KAAK,OAAO,MAAM,YAAY,OAAO,KAAK,OAAO,KAAK,OAAO;;;AFjFjE,IAAM,cAAc;AACpB,IAAM,OAAO;AAEb,SAAS,gBAA6B;AACpC,QAAM,IAAI,oBAAI,IAAoB;AAClC,SAAO,EAAE,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,MAAM,SAAS,CAAC,GAAG,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,GAAG,YAAY,CAAC,MAAM,KAAK,EAAE,OAAO,CAAC,EAAE;AACtH;AAEA,SAAS,iBAA8B;AACrC,MAAI;AACF,QAAI,OAAO,iBAAiB,YAAa,QAAO;AAAA,EAClD,QAAQ;AAAA,EAER;AACA,SAAO,cAAc;AACvB;AAEA,SAAS,gBAA+B;AACtC,SAAO,CAAC,QAAQ;AACd,QAAI,OAAO,cAAc,YAAa,OAAM,IAAI,MAAM,yCAAyC;AAC/F,WAAO,IAAI,UAAU,GAAG;AAAA,EAC1B;AACF;AAEA,SAAS,YAAY,KAA0C;AAC7D,MAAI,CAAC,IAAK,QAAO;AACjB,MAAI;AACF,UAAM,IAAI,KAAK,MAAM,GAAG;AACxB,UAAM,IAAI,CAAC,MAAe,OAAO,UAAU,CAAC,KAAM,KAAgB;AAClE,QAAI,EAAE,MAAM,EAAG,QAAO;AACtB,QAAI,OAAO,EAAE,MAAM,YAAY,CAAC,sBAAsB,KAAK,EAAE,CAAC,EAAG,QAAO;AACxE,QAAI,OAAO,EAAE,MAAM,YAAY,CAAC,wBAAwB,KAAK,EAAE,CAAC,EAAG,QAAO;AAC1E,QAAI,OAAO,EAAE,MAAM,YAAY,CAAC,kBAAkB,KAAK,EAAE,CAAC,EAAG,QAAO;AACpE,QAAI,OAAO,EAAE,MAAM,YAAY,CAAC,uBAAuB,KAAK,EAAE,CAAC,EAAG,QAAO;AACzE,QAAI,CAAC,EAAE,EAAE,IAAI,KAAK,CAAC,EAAE,EAAE,QAAQ,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAG,QAAO;AAC3D,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,IAAM,OAAN,MAAW;AAAA,EAMT,YACU,GACA,QACA,SACA,KACA,QACA,WACR;AANQ;AACA;AACA;AACA;AACA;AACA;AAAA,EACP;AAAA,EANO;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAXF,KAAwB;AAAA,EACxB,UAAgC;AAAA,EAChC,UAAU,oBAAI,IAAiH;AAAA,EAC/H,YAAY;AAAA;AAAA,EAYpB,MAAM,IAAgB;AACpB,SAAK,KAAK;AACV,SAAK,KAAK,EAAE;AAAA,EACd;AAAA,EAEQ,KAAK,IAAgB;AAC3B,OAAG,YAAY,QAAQ,CAAC,OAA0B,KAAK,QAAQ,OAAO,GAAG,IAAI,CAAC,CAAC;AAC/E,OAAG,UAAU;AACb,OAAG,UAAU,MAAM;AACjB,UAAI,KAAK,OAAO,GAAI,MAAK,KAAK;AAC9B,WAAK,QAAQ,IAAI,MAAM,mCAAmC,CAAC;AAAA,IAC7D;AAAA,EACF;AAAA,EAEQ,UAAU;AAChB,QAAI,KAAK,UAAW;AACpB,SAAK,IAAI,EAAE,GAAG,KAAK,GAAG,GAAG,KAAK,OAAO,SAAS;AAC9C,SAAK,QAAQ,QAAQ,KAAK,QAAQ,QAAQ,KAAK,KAAK,KAAK,UAAU,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EAC7F;AAAA,EAEQ,QAAQ,GAAU;AACxB,eAAW,KAAK,KAAK,QAAQ,OAAO,GAAG;AACrC,mBAAa,EAAE,KAAK;AACpB,QAAE,OAAO,CAAC;AAAA,IACZ;AACA,SAAK,QAAQ,MAAM;AAAA,EACrB;AAAA,EAEA,MAAc,SAAS;AACrB,QAAI,KAAK,UAAW,OAAM,IAAI,MAAM,uCAAuC;AAC3E,QAAI,KAAK,MAAM,KAAK,GAAG,eAAe,KAAM;AAC5C,SAAK,YAAY,KAAK,OAAO,EAAE,QAAQ,MAAO,KAAK,UAAU,IAAK;AAClE,UAAM,KAAK;AAAA,EACb;AAAA,EAEQ,SAAS;AAEf,UAAM,KAAK,KAAK,OAAO,eAAe,KAAK,EAAE,GAAG,KAAK,EAAE,GAAG,QAAQ,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,IAAI,gBAAgB,EAAE,CAAC;AACrH,WAAO,IAAI,QAAc,CAAC,SAAS,WAAW;AAC5C,SAAG,SAAS,MAAM;AAChB,aAAK,KAAK;AACV,aAAK,KAAK,EAAE;AACZ,gBAAQ;AAAA,MACV;AACA,SAAG,UAAU,MAAM,OAAO,IAAI,MAAM,8CAA8C,CAAC;AACnF,SAAG,UAAU,MAAM,OAAO,IAAI,MAAM,8CAA8C,CAAC;AAAA,IACrF,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,QAAQ,KAAa;AACjC,QAAI;AACJ,QAAI;AACF,UAAI,KAAK,MAAM,GAAG;AAAA,IACpB,QAAQ;AACN;AAAA,IACF;AACA,UAAM,IAAK,EAAqC;AAChD,QAAI,MAAM,WAAY,EAAyB,OAAO;AACpD,aAAO,KAAK,QAAQ,IAAI,MAAM,6BAA8B,EAAwB,KAAK,EAAE,CAAC;AAAA,IAC9F;AACA,QAAI,CAAC,SAAS,CAAC,EAAG;AAClB,UAAM,MAAM,MAAM,KAAK,OAAO,KAAK,CAAC;AACpC,QAAI,CAAC,IAAK;AACV,SAAK,QAAQ;AACb,QAAI,IAAI,MAAM,OAAO;AACnB,YAAM,IAAI,KAAK,QAAQ,IAAI,IAAI,EAAE;AACjC,UAAI,CAAC,EAAG;AACR,mBAAa,EAAE,KAAK;AACpB,WAAK,QAAQ,OAAO,IAAI,EAAE;AAC1B,UAAI,IAAI,MAAO,GAAE,OAAO,OAAO,OAAO,IAAI,MAAM,IAAI,MAAM,OAAO,GAAG,EAAE,MAAM,IAAI,MAAM,KAAK,CAAC,CAAC;AAAA,UACxF,GAAE,QAAQ,IAAI,MAAM;AAAA,IAC3B,WAAW,IAAI,MAAM,SAAS;AAC5B,WAAK,KAAK;AACV,WAAK,QAAQ,IAAI,MAAM,8CAA8C,CAAC;AAAA,IACxE;AAAA,EACF;AAAA,EAEA,MAAM,KAAK,QAAgB,QAAmC;AAC5D,UAAM,KAAK,OAAO;AAClB,UAAM,KAAK,KAAK;AAChB,UAAM,KAAK,GAAG,MAAM,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC;AAC7E,UAAM,SAAS,IAAI,QAAiB,CAAC,SAAS,WAAW;AACvD,YAAM,QAAQ,WAAW,MAAM;AAC7B,YAAI,KAAK,QAAQ,OAAO,EAAE,EAAG,QAAO,IAAI,MAAM,0DAA0D,CAAC;AAAA,MAC3G,GAAG,KAAK,SAAS;AACjB,WAAK,QAAQ,IAAI,IAAI,EAAE,SAAS,QAAQ,MAAM,CAAC;AAAA,IACjD,CAAC;AACD,OAAG,KAAK,KAAK,UAAU,MAAM,KAAK,OAAO,KAAK,EAAE,GAAG,OAAO,IAAI,QAAQ,OAAO,CAAuB,CAAC,CAAC;AACtG,SAAK,QAAQ;AACb,WAAO;AAAA,EACT;AAAA,EAEA,QAAQ;AACN,UAAM,KAAK,KAAK;AAChB,SAAK,KAAK;AACV,QAAI,MAAM;AAAA,EACZ;AAAA,EAEQ,OAAO;AACb,SAAK,YAAY;AACjB,SAAK,QAAQ,QAAQ,KAAK,QAAQ,WAAW,KAAK,GAAG,CAAC,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AACtE,SAAK,MAAM;AAAA,EACb;AAAA,EAEA,MAAM,SAAS;AACb,QAAI,KAAK,UAAW;AACpB,QAAI;AACF,UAAI,KAAK,MAAM,KAAK,GAAG,eAAe,MAAM;AAC1C,aAAK,GAAG,KAAK,KAAK,UAAU,MAAM,KAAK,OAAO,KAAK,EAAE,GAAG,SAAS,QAAQ,gBAAgB,CAAC,CAAC,CAAC;AAAA,MAC9F;AAAA,IACF,QAAQ;AAAA,IAER;AACA,SAAK,KAAK;AAAA,EACZ;AAAA,EAEA,SAAuB;AACrB,WAAO,IAAI,MAAM,CAAC,GAAmB;AAAA,MACnC,KAAK,CAAC,IAAI,WAAW;AACnB,YAAI,WAAW,QAAS,QAAO,MAAM,KAAK,MAAM;AAChD,YAAI,WAAW,SAAU,QAAO,MAAM,KAAK,OAAO;AAClD,YAAI,OAAO,WAAW,YAAY,WAAW,UAAU,WAAW,SAAU,QAAO;AACnF,eAAO,CAAC,WAAoB,KAAK,KAAK,QAAQ,UAAU,CAAC,CAAC;AAAA,MAC5D;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAOO,SAAS,aAAa,MAA6C;AACxE,QAAM,UAAU,KAAK,YAAY,SAAY,eAAe,IAAK,KAAK,WAAW,cAAc;AAC/F,QAAM,MAAM,KAAK,cAAc;AAC/B,QAAM,SAAS,KAAK,UAAU,cAAc;AAC5C,QAAM,QAAQ,KAAK,SAAS;AAC5B,QAAM,SAAS,KAAK,WAAW,OAAO,aAAa,cAAc,SAAS,SAAS;AACnF,MAAI,CAAC,OAAQ,QAAO,QAAQ,OAAO,IAAI,MAAM,qDAAqD,CAAC;AAEnG,QAAM,UAAUC,YAAW,WAAW;AACtC,QAAM,UAAU,WAAW;AAC3B,QAAM,SAAS,KAAK,MAAM,KAAK,IAAI,IAAI,GAAI,IAAI;AAE/C,SAAO,IAAI,QAAsB,CAAC,SAAS,WAAW;AACpD,QAAI,KAAK,QAAQ,QAAS,QAAO,OAAO,IAAI,MAAM,WAAW,CAAC;AAC9D,QAAI;AACJ,QAAI;AACF,WAAK,OAAO,eAAe,OAAO,SAAS,QAAQ,MAAM,CAAC;AAAA,IAC5D,SAAS,GAAG;AACV,aAAO,OAAO,CAAC;AAAA,IACjB;AACA,QAAI,SAAwB;AAC5B,QAAI,YAAY;AAChB,QAAI,UAAU;AACd,UAAM,OAAO,CAAC,MAAa;AACzB,UAAI,QAAS;AACb,gBAAU;AACV,mBAAa,KAAK;AAClB,SAAG,MAAM;AACT,aAAO,CAAC;AAAA,IACV;AACA,UAAM,QAAQ,WAAW,MAAM,KAAK,IAAI,MAAM,2CAA2C,CAAC,GAAG,gBAAgB,GAAI;AACjH,SAAK,QAAQ,iBAAiB,SAAS,MAAM,KAAK,IAAI,MAAM,WAAW,CAAC,CAAC;AACzE,OAAG,UAAU,MAAM,KAAK,IAAI,MAAM,8CAA8C,CAAC;AACjF,OAAG,UAAU,MAAM,KAAK,IAAI,MAAM,2DAA2D,CAAC;AAC9F,OAAG,YAAY,QAAQ,OAAO,OAA0B;AACtD,UAAI,QAAS;AACb,UAAI;AACJ,UAAI;AACF,YAAI,KAAK,MAAM,OAAO,GAAG,IAAI,CAAC;AAAA,MAChC,QAAQ;AACN;AAAA,MACF;AACA,UAAK,EAAiB,MAAM,WAAW,CAAC,QAAQ;AAC9C,oBAAa,EAAiB;AAC9B,cAAM,IAAI,MAAM,cAAc,SAAS,WAAW,OAAO;AACzD,iBAAS,IAAI,OAAO,EAAE,KAAK,MAAM;AACjC,aAAK,OAAO,EAAE,IAAI;AAClB;AAAA,MACF;AACA,UAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAG;AAC7B,YAAM,MAAM,MAAM,OAAO,KAAK,CAAC;AAC/B,UAAI,CAAC,IAAK;AACV,UAAI,IAAI,MAAM,SAAS;AACrB,kBAAU;AACV,qBAAa,KAAK;AAClB,cAAM,IAAmB,EAAE,GAAG,GAAG,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,MAAM,GAAG,GAAG,WAAW,GAAG,OAAO,UAAU,UAAU,KAAK,IAAI,EAAE;AAClI,cAAM,QAAQ,QAAQ,QAAQ,QAAQ,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AAC7E,cAAM,OAAO,IAAI,KAAK,GAAG,QAAQ,SAAS,KAAK,QAAQ,KAAK,iBAAiB,IAAO;AACpF,aAAK,MAAM,EAAE;AACb,gBAAQ,KAAK,OAAO,CAAC;AAAA,MACvB,WAAW,IAAI,MAAM,SAAS;AAC5B,aAAK,IAAI,MAAM,kCAAkC,CAAC;AAAA,MACpD;AAAA,IACF,CAAC;AACD,SAAK,OAAO,QAAQ,EAAE,GAAG,cAAc,GAAG,OAAO,GAAG,SAAS,GAAG,QAAQ,YAAY,EAAE,SAAS,GAAG,GAAG,QAAQ,GAAG,OAAO,CAAC,CAAC;AAAA,EAC3H,CAAC;AACH;AAMA,eAAsB,eAAe,OAA8B,CAAC,GAAiC;AACnG,QAAM,UAAU,KAAK,YAAY,SAAY,eAAe,IAAK,KAAK,WAAW,cAAc;AAC/F,QAAM,MAAM,KAAK,cAAc;AAC/B,QAAM,IAAI,YAAY,MAAM,QAAQ,QAAQ,QAAQ,QAAQ,GAAG,CAAC,EAAE,MAAM,MAAM,IAAI,CAAC;AACnF,MAAI,CAAC,EAAG,QAAO;AACf,QAAM,EAAE,KAAK,IAAI,IAAI,MAAM,cAAcA,YAAW,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;AAC1E,QAAM,SAAS,IAAI,OAAO,KAAK,MAAM;AACrC,SAAO,QAAQ,EAAE,MAAM,EAAE,MAAM,UAAU,EAAE,SAAS,CAAC;AACrD,SAAO,IAAI,KAAK,GAAG,QAAQ,SAAS,KAAK,KAAK,UAAU,cAAc,GAAG,KAAK,iBAAiB,IAAO,EAAE,OAAO;AACjH;AAGA,eAAsB,aAAa,OAA8D,CAAC,GAAG;AACnG,QAAM,UAAU,KAAK,YAAY,SAAY,eAAe,IAAK,KAAK,WAAW,cAAc;AAC/F,QAAM,QAAQ,QAAQ,QAAQ,WAAW,KAAK,cAAc,WAAW,CAAC,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AAC1F;;;AG7VO,IAAM,iBAAiC,CAAC,GAAG,iBAAiB;AAoCnE,eAAsB,gBACpB,OAAkF,CAAC,GACvB;AAC5D,MAAI,KAAK,OAAQ,QAAO,EAAE,QAAQ,KAAK,QAAQ,QAAQ,SAAS;AAChE,QAAM,QAAQ,MAAM,iBAAiB,KAAK,UAAU;AACpD,MAAI,MAAO,QAAO,EAAE,QAAQ,MAAM,QAAQ,QAAQ,MAAM,OAAO;AAC/D,MAAI,KAAK,iBAAiB,OAAO;AAC/B,UAAM,WAAW,MAAM,eAAe,KAAK,WAAW,CAAC,CAAC;AACxD,QAAI,SAAU,QAAO,EAAE,QAAQ,UAAU,QAAQ,UAAU;AAAA,EAC7D;AACA,MAAI,CAAC,KAAK,SAAS;AACjB,UAAM,OAAO,OAAO,IAAI,MAAM,wCAAwC,GAAG,EAAE,MAAM,YAAY,CAAC;AAAA,EAChG;AACA,SAAO,EAAE,QAAQ,MAAM,aAAa,KAAK,OAAO,GAAG,QAAQ,UAAU;AACvE;AAMA,eAAsB,mBAAmB,MAA4C;AACnF,QAAM,EAAE,QAAQ,OAAO,IAAI,MAAM,gBAAgB,IAAI;AACrD,MAAI,WAAW,UAAW,OAAM,OAAO,sBAAsB,CAAC,CAAC,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AAC/E,QAAM,EAAE,WAAW,YAAY,IAAI,MAAM,OAAO,aAAa,EAAE,aAAa,KAAK,CAAC;AAClF,QAAM,IAAI,MAAM,KAAK,UAAU,WAAW;AAC1C,QAAM,EAAE,UAAU,IAAI,MAAM,OAAO,gBAAgB;AAAA,IACjD,YAAY,EAAE,cAAc;AAAA,IAC5B,OAAO,EAAE;AAAA,IACT,cAAc;AAAA,IACd,MAAM,MAAM,KAAK,IAAI,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC;AAAA,EACtD,CAAC;AACD,SAAO,EAAE,aAAa,WAAW,MAAM,KAAK,SAAS,GAAG,OAAO,EAAE,OAAO,QAAQ,OAAO;AACzF;;;ACzEA,IAAM,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAQL,IAAM,WAAW;AASjB,SAAS,aAAa,IAA0B,OAAsB,CAAC,GAAsB;AAClG,QAAM,OAAO,OAAO,OAAO,WAAW,SAAS,cAA2B,EAAE,IAAI;AAChF,MAAI,CAAC,KAAM,OAAM,IAAI,MAAM,4BAA4B,OAAO,EAAE,CAAC,EAAE;AACnE,MAAI,CAAC,SAAS,eAAe,gBAAgB,GAAG;AAC9C,UAAM,QAAQ,SAAS,cAAc,OAAO;AAC5C,UAAM,KAAK;AACX,UAAM,cAAc;AACpB,aAAS,KAAK,YAAY,KAAK;AAAA,EACjC;AACA,QAAM,IAAI,SAAS,cAAc,QAAQ;AACzC,IAAE,OAAO;AACT,IAAE,YAAY;AACd,QAAM,OAAO,SAAS,cAAc,MAAM;AAC1C,OAAK,YAAY;AACjB,QAAM,MAAM,SAAS,cAAc,KAAK;AACxC,MAAI,MAAM;AACV,MAAI,MAAM;AACV,MAAI,QAAQ;AACZ,MAAI,SAAS;AACb,OAAK,YAAY,GAAG;AACpB,QAAM,QAAQ,SAAS,cAAc,MAAM;AAC3C,QAAM,YAAY;AAClB,QAAM,cAAc;AACpB,QAAM,MAAM,KAAK,aAAa,SAAY,4BAA4B,KAAK;AAC3E,MAAI,KAAK;AACP,UAAM,QAAQ,SAAS,cAAc,OAAO;AAC5C,UAAM,cAAc;AACpB,UAAM,YAAY,KAAK;AAAA,EACzB;AACA,IAAE,OAAO,MAAM,KAAK;AACpB,MAAI,KAAK,QAAS,GAAE,iBAAiB,SAAS,MAAM,KAAK,QAAS,CAAC,CAAC;AACpE,OAAK,gBAAgB,CAAC;AACtB,SAAO;AACT;","names":["PrivateKey","PrivateKey"]}