@bwalletx/connect 0.5.4 → 0.7.0

package/dist/chunk-EXRQJTXF.js

@@ -1,910 +0,0 @@
-import {
-  ACCESS_PROTOCOL,
-  AccessError,
-  MAX_HOLDING_PROOFS,
-  challengeBytes,
-  parseAccessChallenge
-} from "./chunk-MWD4BCO5.js";
-
-// src/discover.ts
-import { WalletClient, XDM } from "@bsv/sdk";
-var RDNS_EXTENSION = "com.bwalletx.extension";
-var RDNS_MOBILE = "space.bwallet.mobile";
-var BWALLETX_RDNS = [RDNS_EXTENSION, RDNS_MOBILE];
-var DEFAULT_DISCOVER_MS = 300;
-function discoverBwalletX(ms = DEFAULT_DISCOVER_MS) {
-  if (typeof window === "undefined") return Promise.resolve(null);
-  return new Promise((resolve) => {
-    let done = false;
-    let timer;
-    const finish = (r) => {
-      if (done) return;
-      done = true;
-      if (timer !== void 0) clearTimeout(timer);
-      window.removeEventListener("brc100:announceWallet", onAnnounce);
-      resolve(r);
-    };
-    const onAnnounce = (e) => {
-      const d = e.detail;
-      const rdns = d?.info?.rdns ?? "";
-      if (d?.wallet && BWALLETX_RDNS.includes(rdns)) {
-        finish({ wallet: d.wallet, method: rdns === RDNS_EXTENSION ? "extension" : "in-app", rdns });
-      }
-    };
-    const cwiNow = () => {
-      const cwi = window.CWI;
-      if (cwi) finish({ wallet: cwi, method: "in-app", rdns: null });
-      return !!cwi;
-    };
-    window.addEventListener("brc100:announceWallet", onAnnounce);
-    window.dispatchEvent(new Event("brc100:requestWallet"));
-    if (done || cwiNow()) return;
-    if (isFramed()) {
-      void probeXdm(Math.max(ms, 1200)).then((w) => finish(w ? { wallet: w, method: "in-app", rdns: null } : null));
-      return;
-    }
-    timer = setTimeout(() => {
-      timer = void 0;
-      if (!cwiNow()) finish(null);
-    }, ms);
-  });
-}
-async function findBwalletX(ms = DEFAULT_DISCOVER_MS) {
-  return (await discoverBwalletX(ms))?.wallet ?? null;
-}
-var isFramed = () => {
-  try {
-    return window.parent !== window;
-  } catch {
-    return true;
-  }
-};
-var BWALLETX_PARENT_ORIGINS = [
-  "https://web.bwalletx.com",
-  "https://desktop.bwalletx.com",
-  "https://bwalletx.com",
-  "https://www.bwallet.space",
-  "https://bwallet.space",
-  "capacitor://localhost",
-  // iOS app shell
-  "https://localhost",
-  // Android app shell
-  "tauri://localhost",
-  // bWalletX Desktop (macOS)
-  "https://tauri.localhost",
-  // bWalletX Desktop (Windows)
-  "chrome-extension://bombmmcjghjdlbmcclnhjodgcelnehgl"
-  // bWalletX for Chrome (fixed id)
-];
-var parentOrigin = () => {
-  try {
-    const anc = window.location.ancestorOrigins;
-    if (anc && anc.length > 0) return anc[0] ?? null;
-    if (!document.referrer) return null;
-    const u = new URL(document.referrer);
-    return `${u.protocol}//${u.host}`;
-  } catch {
-    return null;
-  }
-};
-async function probeXdm(ms = 1200, allowed = BWALLETX_PARENT_ORIGINS) {
-  const origin = parentOrigin();
-  if (!origin || !allowed.includes(origin)) return null;
-  try {
-    const w = new WalletClient(new XDM(origin));
-    const ok = await Promise.race([
-      w.isAuthenticated({}).then(
-        () => true,
-        () => false
-      ),
-      new Promise((r) => setTimeout(() => r(false), ms))
-    ]);
-    return ok ? w : null;
-  } catch {
-    return null;
-  }
-}
-var warmedAt = 0;
-function prewarmBwalletX() {
-  if (typeof window === "undefined" || Date.now() - warmedAt < 2e4) return;
-  warmedAt = Date.now();
-  void discoverBwalletX(0).then((f) => {
-    if (f && f.method === "extension") void f.wallet.isAuthenticated({}).catch(() => {
-    });
-  });
-}
-function bindPrewarm(el) {
-  const on = () => prewarmBwalletX();
-  const evs = ["pointerenter", "focus", "touchstart"];
-  for (const e of evs) el.addEventListener(e, on, { passive: true });
-  return () => evs.forEach((e) => el.removeEventListener(e, on));
-}
-
-// src/in-order.ts
-function inOrder(handle, onError) {
-  let queue = Promise.resolve();
-  return (frame) => {
-    queue = queue.then(() => handle(frame)).catch((e) => onError?.(e));
-    return queue;
-  };
-}
-
-// src/pair.ts
-import { PrivateKey as PrivateKey2 } from "@bsv/sdk";
-
-// src/protocol.ts
-import { PublicKey } from "@bsv/sdk";
-var PAIR_VERSION = "1";
-var PAIR_INFO = "bwallet-pair-v1";
-var PAIR_HOST = "www.bwallet.space";
-var DEFAULT_RELAY = "relay.bwallet.space";
-var QR_LIFETIME_S = 120;
-var enc = new TextEncoder();
-var dec = new TextDecoder();
-var binary = (bytes) => {
-  let s = "";
-  for (let i = 0; i < bytes.length; i += 32768) s += String.fromCharCode(...bytes.subarray(i, i + 32768));
-  return s;
-};
-var b64url = (bytes) => btoa(binary(bytes)).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
-var fromB64url = (s) => {
-  const t = s.replace(/-/g, "+").replace(/_/g, "/");
-  const bin = atob(t + "=".repeat((4 - t.length % 4) % 4));
-  return Uint8Array.from(bin, (ch) => ch.charCodeAt(0));
-};
-var b64 = (bytes) => btoa(binary(bytes));
-var fromB64 = (s) => Uint8Array.from(atob(s), (ch) => ch.charCodeAt(0));
-var newChannel = () => b64url(crypto.getRandomValues(new Uint8Array(16)));
-function pairUrl(link) {
-  const q = new URLSearchParams({ v: link.v, r: link.r, c: link.c, k: link.k, o: link.o, e: String(link.e) });
-  return `https://${PAIR_HOST}/pair?${q}`;
-}
-var newClaim = () => b64url(crypto.getRandomValues(new Uint8Array(16)));
-var WALLET_CLAIM_INFO = "bwallet-pair-wallet-claim-v1";
-var hex = (b) => Array.from(b, (x) => x.toString(16).padStart(2, "0")).join("");
-async function walletClaimFor(channel, sitePub) {
-  const d = await crypto.subtle.digest("SHA-256", enc.encode(`${WALLET_CLAIM_INFO}|${channel}|${sitePub}`));
-  return b64url(new Uint8Array(d));
-}
-async function claimDigest(claim) {
-  return hex(new Uint8Array(await crypto.subtle.digest("SHA-256", enc.encode(claim))));
-}
-var relaySocketUrl = (relay, channel, role, expiry, claim, walletClaimHash) => {
-  const local = /^(localhost|127\.0\.0\.1)(:\d+)?$/.test(relay);
-  const q = new URLSearchParams({ role });
-  if (expiry) q.set("e", String(expiry));
-  if (claim) q.set("claim", claim);
-  if (walletClaimHash && role === "site") q.set("wc", walletClaimHash);
-  return `${local ? "ws" : "wss"}://${relay}/v1/c/${channel}?${q}`;
-};
-async function deriveSession(mine, theirs, channel) {
-  const point = mine.deriveSharedSecret(PublicKey.fromString(theirs));
-  const ikm = new Uint8Array(point.encode(true));
-  const base = await crypto.subtle.importKey("raw", ikm, "HKDF", false, ["deriveBits"]);
-  const bits = new Uint8Array(
-    await crypto.subtle.deriveBits(
-      { name: "HKDF", hash: "SHA-256", salt: fromB64url(channel), info: enc.encode(PAIR_INFO) },
-      base,
-      256
-    )
-  );
-  const key = await crypto.subtle.importKey("raw", bits, "AES-GCM", false, ["encrypt", "decrypt"]);
-  const h = new Uint8Array(await crypto.subtle.digest("SHA-256", bits));
-  const code = String((h[0] << 8 | h[1]) % 1e4).padStart(4, "0");
-  return { key, code };
-}
-var Sealer = class {
-  constructor(key, me) {
-    this.key = key;
-    this.me = me;
-  }
-  key;
-  me;
-  sent = 0;
-  lastSeen = 0;
-  async seal(msg) {
-    const s = ++this.sent;
-    const n = crypto.getRandomValues(new Uint8Array(12));
-    const ct = new Uint8Array(
-      await crypto.subtle.encrypt(
-        { name: "AES-GCM", iv: n, additionalData: enc.encode(`${this.me}|${s}`) },
-        this.key,
-        enc.encode(JSON.stringify(msg))
-      )
-    );
-    return { s, n: b64(n), d: b64(ct) };
-  }
-  /** Decrypts a frame from the other side; null for replays, reflections or tampering. */
-  async open(f) {
-    if (!Number.isInteger(f.s) || f.s <= this.lastSeen) return null;
-    const from = this.me === "site" ? "wallet" : "site";
-    try {
-      const pt = await crypto.subtle.decrypt(
-        { name: "AES-GCM", iv: fromB64(f.n), additionalData: enc.encode(`${from}|${f.s}`) },
-        this.key,
-        fromB64(f.d)
-      );
-      this.lastSeen = f.s;
-      return JSON.parse(dec.decode(pt));
-    } catch {
-      return null;
-    }
-  }
-  /** For resuming a session after a reload: continue counters where they were. */
-  get counters() {
-    return { sent: this.sent, lastSeen: this.lastSeen };
-  }
-  restore(c) {
-    this.sent = c.sent;
-    this.lastSeen = c.lastSeen;
-  }
-};
-var isSealed = (x) => !!x && typeof x === "object" && "d" in x && "n" in x && "s" in x;
-
-// src/pair.ts
-var DEFAULT_KEY = "bwalletx.connect.pairing.v1";
-var OPEN = 1;
-function memoryStorage() {
-  const m = /* @__PURE__ */ new Map();
-  return { getItem: (k) => m.get(k) ?? null, setItem: (k, v) => void m.set(k, v), removeItem: (k) => void m.delete(k) };
-}
-function defaultStorage() {
-  try {
-    if (typeof localStorage !== "undefined") return localStorage;
-  } catch {
-  }
-  return memoryStorage();
-}
-function defaultSocket() {
-  return (url) => {
-    if (typeof WebSocket === "undefined") throw new Error("No WebSocket here. Pass options.socket.");
-    return new WebSocket(url);
-  };
-}
-function parseStored(raw) {
-  if (!raw) return null;
-  try {
-    const p = JSON.parse(raw);
-    const n = (x) => Number.isInteger(x) && x >= 0;
-    if (p.v !== 1) return null;
-    if (typeof p.c !== "string" || !/^[A-Za-z0-9_-]{22}$/.test(p.c)) return null;
-    if (typeof p.r !== "string" || !/^[a-z0-9.-]+(:\d+)?$/i.test(p.r)) return null;
-    if (typeof p.s !== "string" || !/^[0-9a-f]{64}$/i.test(p.s)) return null;
-    if (typeof p.k !== "string" || !/^0[23][0-9a-f]{64}$/i.test(p.k)) return null;
-    if (!n(p.sent) || !n(p.lastSeen) || !n(p.pairedAt)) return null;
-    if (p.sc !== void 0 && (typeof p.sc !== "string" || !/^[A-Za-z0-9_-]{22,64}$/.test(p.sc))) return null;
-    return p;
-  } catch {
-    return null;
-  }
-}
-var Link = class {
-  constructor(p, sealer, storage, key, socket, timeoutMs) {
-    this.p = p;
-    this.sealer = sealer;
-    this.storage = storage;
-    this.key = key;
-    this.socket = socket;
-    this.timeoutMs = timeoutMs;
-  }
-  p;
-  sealer;
-  storage;
-  key;
-  socket;
-  timeoutMs;
-  ws = null;
-  opening = null;
-  waiting = /* @__PURE__ */ new Map();
-  forgotten = false;
-  /** Take over a socket that is already open (the one pairing used). */
-  adopt(ws) {
-    this.ws = ws;
-    this.wire(ws);
-  }
-  wire(ws) {
-    ws.onmessage = inOrder((ev) => this.onFrame(String(ev.data)));
-    ws.onerror = null;
-    ws.onclose = () => {
-      if (this.ws === ws) this.ws = null;
-      this.failAll(new Error("The connection to bWalletX closed"));
-    };
-  }
-  persist() {
-    if (this.forgotten) return;
-    this.p = { ...this.p, ...this.sealer.counters };
-    void Promise.resolve(this.storage.setItem(this.key, JSON.stringify(this.p))).catch(() => {
-    });
-  }
-  failAll(e) {
-    for (const w of this.waiting.values()) {
-      clearTimeout(w.timer);
-      w.reject(e);
-    }
-    this.waiting.clear();
-  }
-  async ensure() {
-    if (this.forgotten) throw new Error("This pairing was removed. Pair again.");
-    if (this.ws && this.ws.readyState === OPEN) return;
-    this.opening ??= this.reopen().finally(() => this.opening = null);
-    await this.opening;
-  }
-  reopen() {
-    if (!this.p.sc) {
-      this.p = { ...this.p, sc: newClaim() };
-      this.persist();
-    }
-    const e = Math.floor(Date.now() / 1e3) + QR_LIFETIME_S - 10;
-    const ws = this.socket(relaySocketUrl(this.p.r, this.p.c, "site", e, this.p.sc));
-    return new Promise((resolve, reject) => {
-      ws.onopen = () => {
-        this.ws = ws;
-        this.wire(ws);
-        resolve();
-      };
-      ws.onerror = () => reject(new Error("Could not reach the bWalletX pairing service"));
-      ws.onclose = () => reject(new Error("Could not reach the bWalletX pairing service"));
-    });
-  }
-  async onFrame(raw) {
-    let f;
-    try {
-      f = JSON.parse(raw);
-    } catch {
-      return;
-    }
-    const t = f.t;
-    if (t === "relay" && f.error) {
-      return this.failAll(new Error(`bWalletX pairing service: ${f.error}`));
-    }
-    if (!isSealed(f)) return;
-    const msg = await this.sealer.open(f);
-    if (!msg) return;
-    this.persist();
-    if (msg.t === "res") {
-      const w = this.waiting.get(msg.id);
-      if (!w) return;
-      clearTimeout(w.timer);
-      this.waiting.delete(msg.id);
-      if (msg.error) w.reject(Object.assign(new Error(msg.error.message), { code: msg.error.code }));
-      else w.resolve(msg.result);
-    } else if (msg.t === "close") {
-      this.drop();
-      this.failAll(new Error("bWalletX disconnected this site. Pair again."));
-    }
-  }
-  async call(action, params) {
-    await this.ensure();
-    const ws = this.ws;
-    const id = `${action}-${Date.now()}-${Math.random().toString(36).slice(2, 10)}`;
-    const result = new Promise((resolve, reject) => {
-      const timer = setTimeout(() => {
-        if (this.waiting.delete(id)) reject(new Error("No answer from bWalletX. Open it, unlocked, and approve."));
-      }, this.timeoutMs);
-      this.waiting.set(id, { resolve, reject, timer });
-    });
-    ws.send(JSON.stringify(await this.sealer.seal({ t: "req", id, action, params })));
-    this.persist();
-    return result;
-  }
-  close() {
-    const ws = this.ws;
-    this.ws = null;
-    ws?.close();
-  }
-  drop() {
-    this.forgotten = true;
-    void Promise.resolve(this.storage.removeItem(this.key)).catch(() => {
-    });
-    this.close();
-  }
-  async forget() {
-    if (this.forgotten) return;
-    try {
-      if (this.ws && this.ws.readyState === OPEN) {
-        this.ws.send(JSON.stringify(await this.sealer.seal({ t: "close", reason: "site unpaired" })));
-      }
-    } catch {
-    }
-    this.drop();
-  }
-  wallet() {
-    return new Proxy({}, {
-      get: (_t, method) => {
-        if (method === "close") return () => this.close();
-        if (method === "forget") return () => this.forget();
-        if (typeof method !== "string" || method === "then" || method === "toJSON") return void 0;
-        return (params) => this.call(method, params ?? {});
-      }
-    });
-  }
-};
-function pairBwalletX(opts) {
-  const storage = opts.storage === void 0 ? defaultStorage() : opts.storage ?? memoryStorage();
-  const key = opts.storageKey ?? DEFAULT_KEY;
-  const socket = opts.socket ?? defaultSocket();
-  const relay = opts.relay ?? DEFAULT_RELAY;
-  const origin = opts.origin ?? (typeof location !== "undefined" ? location.origin : "");
-  if (!origin) return Promise.reject(new Error("pairBwalletX needs options.origin outside a browser"));
-  const siteKey = PrivateKey2.fromRandom();
-  const channel = newChannel();
-  const expiry = Math.floor(Date.now() / 1e3) + QR_LIFETIME_S;
-  const siteClaim = newClaim();
-  const sitePub = siteKey.toPublicKey().toString();
-  return walletClaimFor(channel, sitePub).then(claimDigest).then((wc) => new Promise((resolve, reject) => {
-    if (opts.signal?.aborted) return reject(new Error("cancelled"));
-    let ws;
-    try {
-      ws = socket(relaySocketUrl(relay, channel, "site", expiry, siteClaim, wc));
-    } catch (e) {
-      return reject(e);
-    }
-    let sealer = null;
-    let walletKey = "";
-    let settled = false;
-    const fail = (e) => {
-      if (settled) return;
-      settled = true;
-      clearTimeout(timer);
-      ws.close();
-      reject(e);
-    };
-    const timer = setTimeout(() => fail(new Error("The pairing code expired. Show a new one.")), QR_LIFETIME_S * 1e3);
-    opts.signal?.addEventListener("abort", () => fail(new Error("cancelled")));
-    ws.onerror = () => fail(new Error("Could not reach the bWalletX pairing service"));
-    ws.onclose = () => fail(new Error("The connection to bWalletX closed before pairing finished"));
-    ws.onmessage = inOrder(async (ev) => {
-      if (settled) return;
-      let f;
-      try {
-        f = JSON.parse(String(ev.data));
-      } catch {
-        return;
-      }
-      if (f.t === "hello" && !sealer) {
-        walletKey = f.k;
-        const s = await deriveSession(siteKey, walletKey, channel);
-        sealer = new Sealer(s.key, "site");
-        opts.onCode(s.code);
-        return;
-      }
-      if (!sealer || !isSealed(f)) return;
-      const msg = await sealer.open(f);
-      if (!msg) return;
-      if (msg.t === "ready") {
-        settled = true;
-        clearTimeout(timer);
-        const p = { v: 1, c: channel, r: relay, s: siteKey.toHex(), k: walletKey, ...sealer.counters, pairedAt: Date.now(), sc: siteClaim };
-        await Promise.resolve(storage.setItem(key, JSON.stringify(p))).catch(() => {
-        });
-        const link = new Link(p, sealer, storage, key, socket, opts.callTimeoutMs ?? 12e4);
-        link.adopt(ws);
-        resolve(link.wallet());
-      } else if (msg.t === "close") {
-        fail(new Error("Pairing was declined in bWalletX"));
-      }
-    });
-    opts.onLink(pairUrl({ v: PAIR_VERSION, r: relay, c: channel, k: sitePub, o: origin, e: expiry }));
-  }));
-}
-async function restorePairing(opts = {}) {
-  const storage = opts.storage === void 0 ? defaultStorage() : opts.storage ?? memoryStorage();
-  const key = opts.storageKey ?? DEFAULT_KEY;
-  const p = parseStored(await Promise.resolve(storage.getItem(key)).catch(() => null));
-  if (!p) return null;
-  const { key: aes } = await deriveSession(PrivateKey2.fromHex(p.s), p.k, p.c);
-  const sealer = new Sealer(aes, "site");
-  sealer.restore({ sent: p.sent, lastSeen: p.lastSeen });
-  return new Link(p, sealer, storage, key, opts.socket ?? defaultSocket(), opts.callTimeoutMs ?? 12e4).wallet();
-}
-async function clearPairing(opts = {}) {
-  const storage = opts.storage === void 0 ? defaultStorage() : opts.storage ?? memoryStorage();
-  await Promise.resolve(storage.removeItem(opts.storageKey ?? DEFAULT_KEY)).catch(() => {
-  });
-}
-
-// src/signin.ts
-var LOGIN_PROTOCOL = [2, "bwallet sign in"];
-async function connectBwalletX(opts = {}) {
-  const status = (s) => {
-    try {
-      opts.onStatus?.(s);
-    } catch {
-    }
-  };
-  if (opts.wallet) {
-    status("opening");
-    return { wallet: opts.wallet, method: "wallet" };
-  }
-  status("finding");
-  const found = await discoverBwalletX(opts.discoverMs ?? DEFAULT_DISCOVER_MS);
-  if (found) {
-    status("opening");
-    return { wallet: found.wallet, method: found.method };
-  }
-  if (opts.reusePairing !== false) {
-    const restored = await restorePairing(opts.pairing ?? {});
-    if (restored) {
-      status("opening");
-      return { wallet: restored, method: "pairing" };
-    }
-  }
-  if (!opts.pairing) {
-    throw Object.assign(new Error("bWalletX was not found in this browser"), { code: "NOT_FOUND" });
-  }
-  status("pairing");
-  return { wallet: await pairBwalletX(opts.pairing), method: "pairing" };
-}
-async function signInWithBwalletX(opts) {
-  const { wallet, method } = await connectBwalletX(opts);
-  if (method !== "pairing") await wallet.waitForAuthentication({}).catch(() => {
-  });
-  const { publicKey: identityKey } = await atStage("identity", () => wallet.getPublicKey({ identityKey: true }));
-  try {
-    opts.onStatus?.("signing");
-  } catch {
-  }
-  const c = await atStage("challenge", () => opts.challenge(identityKey));
-  const { signature } = await atStage(
-    "signature",
-    () => wallet.createSignature({
-      protocolID: c.protocolID ?? LOGIN_PROTOCOL,
-      keyID: c.keyID,
-      counterparty: "anyone",
-      data: Array.from(new TextEncoder().encode(c.message))
-    })
-  );
-  return { identityKey, signature: Array.from(signature), nonce: c.nonce, method, wallet };
-}
-async function atStage(stage, run) {
-  try {
-    return await run();
-  } catch (e) {
-    const err = e instanceof Error ? e : new Error(String(e));
-    if (!err.stage) Object.assign(err, { stage });
-    throw err;
-  }
-}
-
-// src/access-client.ts
-import { Hash, PublicKey as PublicKey2, Utils } from "@bsv/sdk";
-var ONESAT = [0, "onesat"];
-var LEGACY_ONESAT = [0, "p 1sat"];
-function toAccessError(e) {
-  if (e instanceof AccessError) return e;
-  const err = e;
-  const msg = String(err?.message ?? e ?? "");
-  if (err?.code === "NOT_FOUND") return new AccessError("not_installed", msg);
-  if (/reject|denied|declin|cancel|user/i.test(msg) || err?.code === "ERR_USER_REJECTED" || err?.status === 4001) {
-    return new AccessError("user_rejected", msg);
-  }
-  return new AccessError("bad_request", msg || "access failed");
-}
-function throwIfAccessError(body) {
-  const b = body;
-  if (b && typeof b.error === "string") throw new AccessError(b.error, b.message, { have: b.have, need: b.need });
-}
-function hash160FromP2pkh(script) {
-  const m = /^76a914([0-9a-f]{40})88ac$/i.exec(script.slice(-50));
-  return m ? m[1].toLowerCase() : null;
-}
-async function proveHoldings(wallet, challenge, tokenId, basket = "bsv21") {
-  const bare = tokenId.replace(/^bsv21:/, "");
-  const list = await wallet.listOutputs({ basket, include: "locking scripts", includeCustomInstructions: true, limit: 1e4 });
-  const byKey = /* @__PURE__ */ new Map();
-  const data = challengeBytes(challenge);
-  for (const out of list.outputs) {
-    if (byKey.size >= MAX_HOLDING_PROOFS) break;
-    let ci = {};
-    try {
-      ci = JSON.parse(out.customInstructions ?? "{}");
-    } catch {
-      continue;
-    }
-    if (ci.id !== bare || !ci.keyID) continue;
-    const want = out.lockingScript ? hash160FromP2pkh(out.lockingScript) : null;
-    const counterparty = ci.counterparty ?? "self";
-    for (const protocolID of ci.protocolID ? [ci.protocolID] : [ONESAT, LEGACY_ONESAT]) {
-      const { publicKey } = await wallet.getPublicKey({ protocolID, keyID: ci.keyID, counterparty });
-      const h = Utils.toHex(Hash.hash160(PublicKey2.fromString(publicKey).encode(true)));
-      if (want && h !== want) continue;
-      const existing = byKey.get(publicKey);
-      if (existing) {
-        existing.outpoints.push(out.outpoint.replace(".", "_"));
-        break;
-      }
-      const { signature } = await wallet.createSignature({ protocolID, keyID: ci.keyID, counterparty, data });
-      byKey.set(publicKey, { pubkey: publicKey, signature: Array.from(signature), outpoints: [out.outpoint.replace(".", "_")] });
-      break;
-    }
-  }
-  return [...byKey.values()];
-}
-async function requestAccess(o) {
-  let wallet;
-  try {
-    ({ wallet } = await connectBwalletX({ wallet: o.wallet, pairing: o.pairing, discoverMs: o.discoverMs }));
-  } catch (e) {
-    throw e?.code === "NOT_FOUND" ? new AccessError("not_installed") : toAccessError(e);
-  }
-  try {
-    const { publicKey: identityKey } = await wallet.getPublicKey({ identityKey: true });
-    const { challenge } = await o.challenge(identityKey);
-    const c = parseAccessChallenge(challenge);
-    if (c.sub && c.sub !== identityKey.toLowerCase()) throw new AccessError("wrong_account");
-    if (Date.now() / 1e3 >= c.exp) throw new AccessError("expired");
-    const { signature } = await wallet.createSignature({
-      protocolID: ACCESS_PROTOCOL,
-      keyID: c.nonce,
-      counterparty: "anyone",
-      data: challengeBytes(challenge)
-    });
-    const response = { v: 1, challenge, identityKey, signature: Array.from(signature) };
-    if (c.require.token) response.holdings = await proveHoldings(wallet, challenge, c.require.token.id, o.tokenBasket);
-    let verified;
-    if (o.verify) {
-      verified = await o.verify(response);
-      throwIfAccessError(verified);
-    }
-    return { response, verified, wallet };
-  } catch (e) {
-    throw toAccessError(e);
-  }
-}
-
-// src/element.ts
-var SIGNIN_TAG = "bwalletx-signin";
-var GET_URL = "https://bwalletx.com/get";
-var WEB_WALLET_URL = "https://web.bwalletx.com";
-var VERBS = { signin: "Sign in with", continue: "Continue with", connect: "Connect" };
-function signinText(label = "signin", brand = "bWalletX") {
-  return `${VERBS[label] ?? VERBS.signin} ${brand}`;
-}
-var uid = 0;
-function markSvg(px = 20) {
-  const n = ++uid;
-  return `<svg viewBox="23 8 74 100" width="${Math.round(px * 0.74)}" height="${px}" aria-hidden="true" focusable="false"><defs><linearGradient id="bwxg${n}" gradientUnits="userSpaceOnUse" x1="0" y1="12" x2="0" y2="105"><stop offset="0" stop-color="#FFE58A"/><stop offset=".55" stop-color="#FFD24D"/><stop offset="1" stop-color="#C98F00"/></linearGradient><mask id="bwxh${n}"><rect width="140" height="140" fill="#fff"/><circle cx="60" cy="72" r="15" fill="#000"/></mask></defs><g fill="url(#bwxg${n})" mask="url(#bwxh${n})"><polygon points="45,12 45,76 27,76 27,30"/><circle cx="60" cy="72" r="33"/></g></svg>`;
-}
-var SIGNIN_CSS = `
-:host{display:inline-block;vertical-align:middle;font-family:Inter,ui-sans-serif,system-ui,-apple-system,"Segoe UI",Roboto,sans-serif}
-:host([full-width]){display:block;width:100%}
-:host([hidden]){display:none}
-button{all:unset;box-sizing:border-box;display:inline-flex;align-items:center;justify-content:center;gap:12px;width:100%;cursor:pointer;
- padding:16px 20px;border-radius:12px;font-size:16px;font-weight:700;line-height:1.2;text-align:left;
- background:linear-gradient(180deg,#fcd34d,#f59e0b);color:#000;
- box-shadow:0 10px 15px -3px rgba(245,158,11,.2),0 4px 6px -4px rgba(245,158,11,.2);
- transition:background .15s,transform .1s,box-shadow .15s,border-color .15s;-webkit-tap-highlight-color:transparent}
-button:hover{background:linear-gradient(180deg,#fde68a,#fbbf24)}
-button:active{transform:translateY(1px);background:linear-gradient(180deg,#fbbf24,#d97706)}
-button:focus-visible{outline:2px solid #b45309;outline-offset:3px}
-button:disabled{opacity:.6;cursor:not-allowed;transform:none}
-button[aria-busy=true]{cursor:wait}
-.mark{display:inline-flex;align-items:center;justify-content:center;flex:none;width:28px;height:28px;border-radius:50%;background:#000}
-.txt{display:flex;flex-direction:column;align-items:flex-start;min-width:0}
-.txt b{font-weight:700;white-space:nowrap}
-.txt small{font-size:11px;font-weight:500;color:rgba(0,0,0,.65);white-space:nowrap}
-.spin{width:16px;height:16px;border-radius:50%;border:2px solid rgba(255,210,77,.35);border-top-color:#ffd24d;animation:r .8s linear infinite}
-@keyframes r{to{transform:rotate(360deg)}}
-@media (prefers-reduced-motion:reduce){button{transition:none}button:active{transform:none}.spin{animation:none;border-color:#ffd24d;border-right-color:transparent}}
-/* sizes */
-:host([size=md]) button{padding:10px 16px;border-radius:10px;font-size:15px;gap:10px}
-:host([size=md]) .mark{width:24px;height:24px}
-:host([size=md]) .txt small{font-size:10.5px}
-:host([size=sm]) button{padding:6px 12px 6px 6px;border-radius:8px;font-size:13px;gap:8px;min-height:36px}
-:host([size=sm]) .mark{width:22px;height:22px}
-:host([size=icon]) button{width:48px;height:48px;padding:0;border-radius:50%;gap:0}
-:host([size=icon]) .mark{width:34px;height:34px}
-/* themes */
-:host([theme=dark]) button{background:#0a0a0a;color:#fafafa;border:1px solid #3f3f46;box-shadow:none}
-:host([theme=dark]) button:hover{background:#18181b;border-color:rgba(251,191,36,.6)}
-:host([theme=dark]) button:active{background:#000}
-:host([theme=dark]) button:focus-visible{outline-color:#fcd34d}
-:host([theme=dark]) .mark{box-shadow:inset 0 0 0 1px #3f3f46}
-:host([theme=dark]) .txt small{color:rgba(255,255,255,.65)}
-:host([theme=light]) button{background:#fff;color:#09090b;border:1px solid #d4d4d8;box-shadow:0 1px 2px rgba(0,0,0,.06)}
-:host([theme=light]) button:hover{background:#fafafa;border-color:#f59e0b}
-:host([theme=light]) button:active{background:#f4f4f5}
-:host([theme=light]) .txt small{color:#52525b}
-/* not found */
-.nf{margin-top:8px;font-size:12px;line-height:1.4;color:#71717a;text-align:center}
-.nf a{color:inherit;font-weight:600;text-decoration:underline;text-underline-offset:2px}
-.nf a:focus-visible{outline:2px solid #b45309;outline-offset:2px;border-radius:2px}
-:host([theme=dark]) .nf,:host-context(.dark) .nf{color:#a1a1aa}
-.sr{position:absolute;width:1px;height:1px;overflow:hidden;clip:rect(0 0 0 0);white-space:nowrap}
-`;
-function b64url2(bytes) {
-  let s = "";
-  for (const b of bytes) s += String.fromCharCode(b);
-  return btoa(s).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
-}
-async function buildAuthorizeUrl(p) {
-  const rnd = (n) => b64url2(crypto.getRandomValues(new Uint8Array(n)));
-  const verifier = rnd(32);
-  const state = rnd(16);
-  const nonce = rnd(16);
-  const digest = new Uint8Array(await crypto.subtle.digest("SHA-256", new TextEncoder().encode(verifier)));
-  const u = new URL(p.authorizeUrl, typeof location !== "undefined" ? location.href : void 0);
-  const set = (k, v) => {
-    if (v) u.searchParams.set(k, v);
-  };
-  set("response_type", "code");
-  set("client_id", p.clientId);
-  set("redirect_uri", p.redirectUri);
-  set("scope", p.scope || "openid profile");
-  set("state", state);
-  set("nonce", nonce);
-  set("code_challenge", b64url2(digest));
-  set("code_challenge_method", "S256");
-  try {
-    sessionStorage.setItem("bwalletx:oauth", JSON.stringify({ verifier, state, nonce }));
-  } catch {
-  }
-  return u.toString();
-}
-async function postJson(url, body) {
-  const res = await fetch(url, { method: "POST", credentials: "include", headers: { "content-type": "application/json" }, body: JSON.stringify(body) });
-  const data = await res.json().catch(() => ({}));
-  if (!res.ok) throw new Error(data.error ?? `HTTP ${res.status}`);
-  return data;
-}
-async function postAccess(url, body) {
-  const res = await fetch(url, { method: "POST", credentials: "include", headers: { "content-type": "application/json" }, body: JSON.stringify(body) });
-  return res.json().catch(() => ({ error: "bad_request", message: `HTTP ${res.status}` }));
-}
-var OBSERVED = ["size", "theme", "label", "brand", "subtitle", "loading", "disabled", "full-width", "aria-label", "get-url", "web-url"];
-function createClass() {
-  return class BwalletxSigninElement extends HTMLElement {
-    static get observedAttributes() {
-      return OBSERVED;
-    }
-    #root;
-    #notFound = false;
-    #busy = false;
-    constructor() {
-      super();
-      this.#root = this.attachShadow({ mode: "open" });
-    }
-    connectedCallback() {
-      this.#render();
-    }
-    attributeChangedCallback() {
-      if (this.isConnected) this.#render();
-    }
-    /** The inner <button>, for focus() and tests. */
-    get button() {
-      return this.#root.querySelector("button");
-    }
-    get notFound() {
-      return this.#notFound;
-    }
-    focus(opts) {
-      this.button?.focus(opts);
-    }
-    #attr(name) {
-      return this.getAttribute(name);
-    }
-    #render() {
-      const size = this.#attr("size") ?? "lg";
-      const brand = this.#attr("brand") === "bWallet" ? "bWallet" : "bWalletX";
-      const text = signinText(this.#attr("label") ?? "signin", brand);
-      const subAttr = this.#attr("subtitle");
-      const subDefault = brand === "bWalletX" && (size === "lg" || size === "md") ? "also works with bWallet" : null;
-      const subtitle = subAttr === null || subAttr === "" || subAttr === "on" ? subAttr === "on" ? "also works with bWallet" : subDefault : subAttr === "off" ? null : subAttr;
-      const loading = this.hasAttribute("loading") || this.#busy;
-      const disabled = this.hasAttribute("disabled");
-      const markPx = size === "icon" ? 24 : size === "sm" ? 15 : size === "md" ? 17 : 20;
-      const aria = this.#attr("aria-label") ?? (subtitle && size !== "icon" ? `${text}, ${subtitle}` : text);
-      const getUrl = this.#attr("get-url") ?? GET_URL;
-      const webUrl = this.#attr("web-url") ?? WEB_WALLET_URL;
-      const esc = (s) => s.replace(/[&<>"]/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;" })[c]);
-      const label = size === "icon" ? "" : `<span class="txt" part="text"><b part="label">${esc(text)}</b>${subtitle ? `<small part="subtitle">${esc(subtitle)}</small>` : ""}</span>`;
-      const mark = loading ? '<span class="spin" aria-hidden="true"></span>' : markSvg(markPx);
-      const nf = this.#notFound ? `<p class="nf" part="not-found" role="status">bWalletX wasn't found in this browser. <a href="${esc(getUrl)}" target="_blank" rel="noopener">Get ${brand}</a> or <a href="${esc(webUrl)}" target="_blank" rel="noopener">use the web wallet</a>.</p>` : "";
-      this.#root.innerHTML = `<style>${SIGNIN_CSS}</style><button type="button" part="button" aria-label="${esc(aria)}" title="${esc(subtitle ? `${text} (${subtitle})` : text)}"${disabled ? " disabled" : ""}${loading ? ' aria-busy="true"' : ""}><span class="mark" part="mark">${mark}</span>${label}</button>${loading ? '<span class="sr" role="status">Connecting to bWalletX\u2026</span>' : ""}${nf}`;
-      this.button.addEventListener("click", () => void this.#click());
-      bindPrewarm(this.button);
-    }
-    #emit(type, detail, cancelable = false) {
-      return this.dispatchEvent(new CustomEvent(type, { detail, bubbles: true, composed: true, cancelable }));
-    }
-    #setBusy(on) {
-      this.#busy = on;
-      this.#render();
-    }
-    async #click() {
-      if (this.hasAttribute("disabled") || this.hasAttribute("loading") || this.#busy) return;
-      if (!this.#emit("bwalletx-signin", { element: this }, true)) return;
-      const href = this.#attr("href");
-      const authorizeUrl = this.#attr("authorize-url");
-      if (authorizeUrl) {
-        location.assign(await buildAuthorizeUrl({ authorizeUrl, clientId: this.#attr("client-id"), redirectUri: this.#attr("redirect-uri"), scope: this.#attr("scope") }));
-        return;
-      }
-      if (href) {
-        location.assign(href);
-        return;
-      }
-      const challengeUrl = this.#attr("challenge-url");
-      if (!challengeUrl) return;
-      this.#notFound = false;
-      this.#setBusy(true);
-      try {
-        const ms = Number(this.#attr("discover-ms")) || DEFAULT_DISCOVER_MS;
-        const found = await discoverBwalletX(ms);
-        if (!found) {
-          this.#notFound = true;
-          this.#emit("bwalletx-not-found");
-          if (this.#attr("require-token")) this.#emit("bwalletx-access-denied", { code: "not_installed", message: "No wallet found" });
-          return;
-        }
-        const requireToken = this.#attr("require-token");
-        if (requireToken) {
-          const verifyUrl2 = this.#attr("verify-url");
-          const min = this.#attr("min");
-          const minBps = this.#attr("min-bps");
-          const hint = { token: { id: requireToken, ...minBps ? { minBps: Number(minBps) } : { min: min ?? "1" } } };
-          try {
-            const a = await requestAccess({
-              wallet: found.wallet,
-              challenge: (identityKey) => postJson(challengeUrl, { identityKey, require: hint }),
-              verify: verifyUrl2 ? (response2) => postAccess(verifyUrl2, response2) : void 0
-            });
-            this.#emit("bwalletx-access-granted", { identityKey: a.response.identityKey, response: a.verified });
-          } catch (e) {
-            const err = e instanceof AccessError ? e : new AccessError("bad_request", String(e));
-            this.#emit("bwalletx-access-denied", { code: err.code, message: err.message, have: err.have, need: err.need });
-          }
-          return;
-        }
-        const r = await signInWithBwalletX({ wallet: found.wallet, challenge: (identityKey) => postJson(challengeUrl, { identityKey }) });
-        const verifyUrl = this.#attr("verify-url");
-        const response = verifyUrl ? await postJson(verifyUrl, { identityKey: r.identityKey, nonce: r.nonce, signature: r.signature }) : null;
-        this.#emit("bwalletx-signed-in", { identityKey: r.identityKey, method: found.method, nonce: r.nonce, signature: r.signature, response });
-      } catch (error) {
-        this.#emit("bwalletx-error", { error });
-      } finally {
-        this.#setBusy(false);
-      }
-    }
-  };
-}
-function defineBwalletxSignin(tag = SIGNIN_TAG) {
-  if (typeof window === "undefined" || typeof customElements === "undefined") return void 0;
-  const existing = customElements.get(tag);
-  if (existing) return existing;
-  const C = createClass();
-  customElements.define(tag, C);
-  return C;
-}
-
-export {
-  RDNS_EXTENSION,
-  RDNS_MOBILE,
-  BWALLETX_RDNS,
-  DEFAULT_DISCOVER_MS,
-  discoverBwalletX,
-  findBwalletX,
-  prewarmBwalletX,
-  bindPrewarm,
-  inOrder,
-  pairBwalletX,
-  restorePairing,
-  clearPairing,
-  LOGIN_PROTOCOL,
-  connectBwalletX,
-  signInWithBwalletX,
-  atStage,
-  toAccessError,
-  throwIfAccessError,
-  proveHoldings,
-  requestAccess,
-  SIGNIN_TAG,
-  GET_URL,
-  WEB_WALLET_URL,
-  signinText,
-  markSvg,
-  SIGNIN_CSS,
-  buildAuthorizeUrl,
-  defineBwalletxSignin
-};
-//# sourceMappingURL=chunk-EXRQJTXF.js.map