@bwalletx/connect 0.5.6 → 0.7.0

package/dist/{chunk-LS6AYEBO.js → chunk-6EFFOIHK.js}

@@ -17,7 +17,7 @@ function discoverBwalletX(ms = DEFAULT_DISCOVER_MS) {
   return new Promise((resolve) => {
     let done = false;
     let timer;
-    const finish = (r) => {
+    const finish2 = (r) => {
       if (done) return;
       done = true;
       if (timer !== void 0) clearTimeout(timer);
@@ -28,19 +28,19 @@ function discoverBwalletX(ms = DEFAULT_DISCOVER_MS) {
       const d = e.detail;
       const rdns = d?.info?.rdns ?? "";
       if (d?.wallet && BWALLETX_RDNS.includes(rdns)) {
-        finish({ wallet: d.wallet, method: rdns === RDNS_EXTENSION ? "extension" : "in-app", rdns });
+        finish2({ wallet: d.wallet, method: rdns === RDNS_EXTENSION ? "extension" : "in-app", rdns });
       }
     };
     window.addEventListener("brc100:announceWallet", onAnnounce);
     window.dispatchEvent(new Event("brc100:requestWallet"));
     if (done) return;
     if (isFramed()) {
-      void probeXdm(Math.max(ms, 1200)).then((w) => finish(w ? { wallet: w, method: "in-app", rdns: null } : null));
+      void probeXdm(Math.max(ms, 1200)).then((w) => finish2(w ? { wallet: w, method: "in-app", rdns: null } : null));
       return;
     }
     timer = setTimeout(() => {
       timer = void 0;
-      finish(null);
+      finish2(null);
     }, ms);
   });
 }
@@ -733,15 +733,20 @@ function desktopOption(ms = 1500) {
   return opt;
 }
 function autoChoice(list, force = false) {
-  const detected = list.filter((w) => w.kind === "brc100");
-  const others = list.filter((w) => w.kind === "handcash" || w.kind === "custom");
-  if (force) return detected[0] ?? list.find((w) => w.kind !== "pairing") ?? list[0] ?? null;
+  const auto = list.filter((w) => !isLocalDesktop(w));
+  const detected = auto.filter((w) => w.kind === "brc100");
+  const others = auto.filter((w) => w.kind === "handcash" || w.kind === "custom");
+  const hasLocal = auto.length !== list.length;
+  if (force) return detected[0] ?? auto.find((w) => w.kind !== "pairing") ?? auto[0] ?? null;
   if (!list.length) return null;
-  if (list.length === 1) return list[0];
-  if (detected.length === 1 && others.length === 0) return detected[0];
-  if (detected.length === 0 && others.length === 0) return list[0];
+  if (list.length === 1) return hasLocal ? void 0 : list[0];
+  if (detected.length === 1 && others.length === 0 && !hasLocal) return detected[0];
+  if (detected.length === 0 && others.length === 0) return auto[0] ?? void 0;
   return void 0;
 }
+function isLocalDesktop(w) {
+  return w.substrate === "json-api" || w.substrate === "cicada" || w.id === "localhost:3321" || w.id === "localhost:3301" || w.id === DESKTOP_OPTION_ID;
+}
 
 // src/account.ts
 var PAYMAIL_LOOKUP_URL = "https://pay.bwallet.space/api/paymail/lookup?key=";
@@ -777,6 +782,7 @@ function isUserRejection(e) {
 }
 function signInErrorText(e) {
   if (isUserRejection(e)) return "Sign-in cancelled";
+  if (e?.name === "MetanetUnreachableError") return e.message;
   const code = e?.code;
   if (code === "NOT_FOUND") return "bWalletX was not found in this browser";
   const msg = e instanceof Error ? e.message : String(e ?? "");
@@ -810,6 +816,173 @@ function rememberIdentity(key) {
   }
 }
 
+// src/device.ts
+function isTouchDevice(env = globalThis) {
+  const nav = env.navigator;
+  if (!nav) return false;
+  const ua = nav.userAgent ?? "";
+  if (/Android|iPhone|iPad|iPod|Mobile|Silk|Kindle/i.test(ua)) return true;
+  if (/Macintosh/.test(ua) && (nav.maxTouchPoints ?? 0) > 1) return true;
+  try {
+    return !!env.matchMedia?.("(pointer: coarse)").matches && !env.matchMedia?.("(hover: hover)").matches;
+  } catch {
+    return false;
+  }
+}
+
+// src/metanet.ts
+import { WalletClient as WalletClient3 } from "@bsv/sdk";
+var METANET_TYPE = "metanet";
+var METANET_OPTION_ID = METANET_TYPE;
+var METANET_JSON_API = "http://localhost:3321";
+var METANET_LABEL = "Use Metanet Desktop or another BRC-100 wallet";
+var METANET_NOTE = "Metanet Desktop must be running on this computer";
+var METANET_REMEMBERED_NOTE = "Signs in with Metanet Desktop on this computer.";
+var NOT_YOU_LABEL = "Not you? Use another wallet";
+var METANET_UNREACHABLE = "We couldn\u2019t reach Metanet Desktop. Open it, then try again.";
+var METANET_ANSWER_MS = 4e3;
+var METANET_SILENT_MS = 2e3;
+var MetanetUnreachableError = class extends Error {
+  code = "NOT_FOUND";
+  constructor() {
+    super(METANET_UNREACHABLE);
+    this.name = "MetanetUnreachableError";
+  }
+};
+function inAnyFrame(win = typeof window === "undefined" ? void 0 : window) {
+  if (!win) return false;
+  try {
+    return win.top !== win.self;
+  } catch {
+    return true;
+  }
+}
+function metanetOffered(env = {}) {
+  const win = env.window ?? (typeof window === "undefined" ? void 0 : window);
+  if (!win) return false;
+  const nav = env.navigator ?? (typeof navigator === "undefined" ? void 0 : navigator);
+  const mm = env.matchMedia ?? (typeof matchMedia === "undefined" ? void 0 : (q) => matchMedia(q));
+  return !isTouchDevice({ navigator: nav, matchMedia: mm }) && !inAnyFrame(win);
+}
+function client(o) {
+  if (o.make) return o.make();
+  const originator = o.originator ?? (typeof location !== "undefined" && location.host ? location.host : void 0);
+  return new WalletClient3("json-api", originator);
+}
+async function answers(wallet) {
+  return Promise.resolve().then(() => wallet.getVersion({})).then((v) => typeof v?.version === "string", () => false);
+}
+async function connectMetanetDesktop(o = {}) {
+  let wallet;
+  try {
+    wallet = client(o);
+  } catch {
+    throw new MetanetUnreachableError();
+  }
+  let timer;
+  const ok = await Promise.race([answers(wallet), new Promise((r) => timer = setTimeout(() => r(false), o.timeoutMs ?? METANET_ANSWER_MS))]);
+  clearTimeout(timer);
+  if (!ok) throw new MetanetUnreachableError();
+  return wallet;
+}
+function metanetOption(o = {}) {
+  const opt = {
+    id: METANET_OPTION_ID,
+    name: METANET_LABEL,
+    kind: "brc100",
+    isBwalletX: false,
+    substrate: "json-api",
+    async connect() {
+      const wallet = await connectMetanetDesktop(o);
+      opt.wallet = wallet;
+      await waitIfLocked(wallet);
+      const { publicKey } = await wallet.getPublicKey({ identityKey: true });
+      return { wallet, payer: wallet, identityKey: publicKey, optionId: opt.id, kind: "brc100" };
+    }
+  };
+  return opt;
+}
+var KNOWN_KEYS_KEY = "bwx:known-keys";
+var KEY_RE = /^0[23][0-9a-f]{64}$/;
+var MAX_KNOWN = 8;
+function knownIdentityKeys() {
+  try {
+    const v = JSON.parse(globalThis.localStorage?.getItem(KNOWN_KEYS_KEY) || "[]");
+    return Array.isArray(v) ? v.filter((k) => typeof k === "string" && KEY_RE.test(k)) : [];
+  } catch {
+    return [];
+  }
+}
+function isKnownIdentityKey(key) {
+  if (!key) return false;
+  const k = key.toLowerCase();
+  if (!KEY_RE.test(k)) return false;
+  return knownIdentityKeys().includes(k) || rememberedIdentity()?.toLowerCase() === k;
+}
+function rememberKnownIdentityKey(key) {
+  const k = (key ?? "").toLowerCase();
+  if (!KEY_RE.test(k)) return;
+  try {
+    const list = [k, ...knownIdentityKeys().filter((x) => x !== k)].slice(0, MAX_KNOWN);
+    globalThis.localStorage?.setItem(KNOWN_KEYS_KEY, JSON.stringify(list));
+  } catch {
+  }
+}
+var triedThisLoad = false;
+function silentAttemptUsed() {
+  return triedThisLoad;
+}
+function claimSilentAttempt() {
+  if (triedThisLoad) return false;
+  triedThisLoad = true;
+  return true;
+}
+function resetSilentAttempt() {
+  triedThisLoad = false;
+}
+async function trySilentMetanet(o = {}) {
+  if (!metanetOffered()) return { ok: false, stop: "not-here" };
+  if (!claimSilentAttempt()) return { ok: false, stop: "used" };
+  const run = async () => {
+    let wallet;
+    try {
+      wallet = client(o);
+    } catch {
+      return { ok: false, stop: "unreachable" };
+    }
+    if (!await answers(wallet)) return { ok: false, stop: "unreachable" };
+    const unlocked = await Promise.resolve().then(() => wallet.isAuthenticated({})).then((r2) => r2?.authenticated === true, () => false);
+    if (!unlocked) return { ok: false, stop: "locked" };
+    const identityKey = await Promise.resolve().then(() => wallet.getPublicKey({ identityKey: true })).then((r2) => r2.publicKey, () => null);
+    if (!identityKey) return { ok: false, stop: "unreachable" };
+    if (!isKnownIdentityKey(identityKey)) return { ok: false, stop: "unknown-key" };
+    return { ok: true, wallet, identityKey };
+  };
+  let timer;
+  const r = await Promise.race([
+    run().catch(() => ({ ok: false, stop: "unreachable" })),
+    new Promise((res) => timer = setTimeout(() => res({ ok: false, stop: "slow" }), o.windowMs ?? METANET_SILENT_MS))
+  ]);
+  clearTimeout(timer);
+  return r;
+}
+var warnedLogout = false;
+var isProduction = () => {
+  try {
+    return globalThis.process?.env?.NODE_ENV === "production";
+  } catch {
+    return false;
+  }
+};
+function warnIfNoLogout(o) {
+  if (!o.verifyUrl || o.logoutUrl || warnedLogout || isProduction() || typeof console === "undefined") return false;
+  warnedLogout = true;
+  console.warn(
+    `@bwalletx/connect: ${o.where} has a verify URL but no logout URL. Set it: "Not you? Use another wallet" and Disconnect must be able to end a session the verify route created.`
+  );
+  return true;
+}
+
 // src/choice.ts
 var BWALLETX_TYPE = "bwalletx";
 function substrateOf(o) {
@@ -851,6 +1024,10 @@ function decideWallet(list, o = {}) {
     const a = autoChoice([...list], o.picker === false);
     return a === void 0 ? { option: null, reason: "chooser" } : a === null ? { option: null, reason: "none" } : { option: a, reason: "legacy" };
   }
+  if (o.remembered && !o.preferBwalletX) {
+    const m = matchRemembered(list, o.remembered);
+    if (m) return { option: m, reason: "remembered" };
+  }
   const b = list.find(isPresentBwalletX);
   if (b) return { option: b, reason: "bwalletx" };
   if (o.picker === false) {
@@ -881,6 +1058,74 @@ function reportAttempt(hook, a) {
   } catch {
   }
 }
+var WALLET_CHOICE_KEY = "bwx:wallet";
+var SUBSTRATES = ["extension", "in-app", "xdm", "injected", "window.CWI", "json-api", "cicada", "pairing", "adapter"];
+var TYPE_RE = /^[A-Za-z0-9._:-]{1,64}$/;
+var KEY_LIKE = /^(0[23][0-9a-f]{64}|04[0-9a-f]{128}|[13][1-9A-HJ-NP-Za-km-z]{25,34})$/i;
+function isRememberable(o) {
+  const t = walletTypeOf(o);
+  return substrateOf(o) !== "window.CWI" && TYPE_RE.test(t) && !KEY_LIKE.test(t);
+}
+function isExplicitPick(o, reason) {
+  return o.isBwalletX || reason === "chooser" || reason === "requested" || reason === "remembered";
+}
+function rememberWalletChoice(o) {
+  try {
+    if (!o) return void globalThis.localStorage?.removeItem(WALLET_CHOICE_KEY);
+    if (!isRememberable(o)) return;
+    const v = { type: walletTypeOf(o), substrate: substrateOf(o), v: 1 };
+    globalThis.localStorage?.setItem(WALLET_CHOICE_KEY, JSON.stringify(v));
+  } catch {
+  }
+}
+function rememberedWalletChoice() {
+  try {
+    const raw = globalThis.localStorage?.getItem(WALLET_CHOICE_KEY);
+    if (!raw) return null;
+    const j = JSON.parse(raw);
+    if (typeof j.type !== "string" || !TYPE_RE.test(j.type) || KEY_LIKE.test(j.type)) return null;
+    if (!SUBSTRATES.includes(j.substrate) || j.substrate === "window.CWI") return null;
+    return { type: j.type, substrate: j.substrate };
+  } catch {
+    return null;
+  }
+}
+function forgetWalletChoice() {
+  rememberWalletChoice(null);
+}
+function needsBwalletX(type) {
+  return !!type && type !== BWALLETX_TYPE;
+}
+function tapGoesElsewhere(type) {
+  return needsBwalletX(type) && type !== METANET_TYPE && type !== DESKTOP_OPTION_ID;
+}
+function isLocalDesktopType(r) {
+  return r.type === METANET_TYPE || r.type === DESKTOP_OPTION_ID || r.substrate === "json-api" || r.substrate === "cicada";
+}
+function matchRemembered(list, r) {
+  if (isLocalDesktopType(r)) return null;
+  if (r.type === BWALLETX_TYPE) {
+    return (r.substrate === "pairing" ? list.find((o) => o.kind === "pairing") : list.find(isPresentBwalletX)) ?? null;
+  }
+  return list.find((o) => !o.isBwalletX && !isLocalDesktop(o) && isRememberable(o) && walletTypeOf(o) === r.type) ?? null;
+}
+var ATTACHABLE = ["extension", "in-app", "xdm", "injected"];
+function planAutoConnect(o) {
+  const r = o.remembered;
+  if (!r || o.enabled === false) return { action: "none", remembered: r, needsBwalletX: false };
+  if (r.type === METANET_TYPE) {
+    return { action: o.metanetHere ?? metanetOffered() ? "silent-metanet" : "none", remembered: r, needsBwalletX: false };
+  }
+  if (isLocalDesktopType(r)) return { action: "none", remembered: r, needsBwalletX: false };
+  const action = o.signedIn && ATTACHABLE.includes(r.substrate) ? "attach" : "wait-for-tap";
+  return { action, remembered: r, needsBwalletX: needsBwalletX(r.type) };
+}
+async function attachRemembered(r, o = {}) {
+  if (!ATTACHABLE.includes(r.substrate)) return null;
+  const list = await discoverWallets({ ms: o.ms });
+  const m = matchRemembered(list, r);
+  return m && m.kind === "brc100" && m.wallet && ATTACHABLE.includes(substrateOf(m)) ? m : null;
+}
 
 // src/modal.ts
 import qrcode from "qrcode-generator";
@@ -971,6 +1216,114 @@ async function requestAccess(o) {
   }
 }
 
+// src/connect-flow.ts
+async function runConnect(o) {
+  const started = Date.now();
+  const { list } = o;
+  let choice = null;
+  let reason = "none";
+  try {
+    if (o.metanet) {
+      if (!metanetOffered()) throw Object.assign(new Error("Metanet Desktop runs on a computer, outside any frame."), { code: "NOT_SUPPORTED" });
+      choice = metanetOption(typeof o.metanet === "object" ? o.metanet : {});
+      reason = "requested";
+      return await finish(o, choice, reason, started);
+    }
+    const d = decideWallet(list, {
+      walletId: o.walletId,
+      chooser: o.chooser,
+      picker: o.picker,
+      fastPath: o.fastPath,
+      remembered: o.remembered,
+      preferBwalletX: o.preferBwalletX
+    });
+    choice = d.option;
+    reason = d.reason;
+    if (!choice && d.reason === "chooser") choice = await o.pick(list);
+    if (!choice) {
+      if (d.reason === "none" || !list.length) throw Object.assign(new Error("No wallet found. Get bWalletX at bwalletx.com."), { code: "NOT_FOUND" });
+      reportAttempt(o.onAttempt, attemptFor(null, "cancelled", started));
+      return null;
+    }
+    return await finish(o, choice, reason, started);
+  } catch (e) {
+    reportAttempt(o.onAttempt, attemptFor(choice, outcomeOf(e), started));
+    throw e;
+  }
+}
+async function finish(o, choice, reason, started) {
+  const signIn = !!(o.challengeUrl && o.verifyUrl) && choice.kind !== "handcash";
+  const cw = await choice.connect(signIn ? { identity: false } : void 0);
+  let handle = cw.handle ?? null;
+  let paymail = cw.paymail ?? null;
+  let identityKey = cw.identityKey;
+  let signedIn = false;
+  if (cw.wallet && signIn) {
+    const { result, verified } = await signInAndVerify({
+      wallet: cw.wallet,
+      identityKey: cw.identityKey ?? void 0,
+      // Metanet's connect() just checked the lock: don't ask again (rule 7, the minimum).
+      skipWaitForAuthentication: choice.id === METANET_OPTION_ID,
+      // The key that signed in here last time: a repeat sign-in is then the signature alone.
+      identityKeyHint: rememberedIdentity(),
+      challengeNeedsIdentityKey: o.challengeNeedsIdentityKey,
+      challenge: (key) => o.post(o.challengeUrl, key ? { identityKey: key } : {}),
+      verify: (r) => o.post(o.verifyUrl, { identityKey: r.identityKey, nonce: r.nonce, signature: r.signature })
+    });
+    rememberIdentity(result.identityKey);
+    identityKey = result.identityKey;
+    handle = verified.handle ?? handle;
+    paymail = verified.paymail ?? paymail;
+    signedIn = true;
+  } else if (cw.wallet && !identityKey) {
+    identityKey = (await cw.wallet.getPublicKey({ identityKey: true })).publicKey;
+  }
+  if (o.remember && isExplicitPick(choice, reason)) rememberWalletChoice(choice);
+  if (o.remember && signedIn) rememberKnownIdentityKey(identityKey);
+  reportAttempt(o.onAttempt, attemptFor(choice, signedIn ? "signed-in" : "connected", started));
+  return { connected: cw, identityKey, handle, paymail, signedIn, walletType: walletTypeOf(choice), substrate: substrateOf(choice), reason };
+}
+async function runSilentMetanet(o = {}) {
+  const s = await trySilentMetanet(o);
+  if (!s.ok || o.isAbandoned?.()) return null;
+  const started = Date.now();
+  const opt = metanetOption(o);
+  opt.wallet = s.wallet;
+  const cw = { wallet: s.wallet, payer: s.wallet, identityKey: s.identityKey, optionId: METANET_OPTION_ID, kind: "brc100" };
+  const done = (signedIn, handle = null, paymail = null) => {
+    rememberWalletChoice(opt);
+    if (signedIn) rememberKnownIdentityKey(s.identityKey);
+    reportAttempt(o.onAttempt, attemptFor(opt, signedIn ? "signed-in" : "connected", started));
+    return { connected: cw, identityKey: s.identityKey, handle, paymail, signedIn, walletType: walletTypeOf(opt), substrate: "json-api", reason: "remembered" };
+  };
+  if (o.sessionKey !== void 0 && o.sessionKey !== null) {
+    return o.sessionKey.toLowerCase() === s.identityKey.toLowerCase() ? done(true) : null;
+  }
+  if (!o.challengeUrl || !o.verifyUrl || !o.post) return done(false);
+  if (!isKnownIdentityKey(s.identityKey)) return null;
+  try {
+    o.onSignIn?.();
+    const post = o.post;
+    const { result, verified } = await signInAndVerify({
+      wallet: s.wallet,
+      identityKey: s.identityKey,
+      skipWaitForAuthentication: true,
+      // trySilentMetanet just saw it unlocked
+      challenge: (key) => post(o.challengeUrl, key ? { identityKey: key } : {}),
+      verify: (r) => post(o.verifyUrl, { identityKey: r.identityKey, nonce: r.nonce, signature: r.signature })
+    });
+    if (o.isAbandoned?.()) {
+      await Promise.resolve(o.logout?.()).catch(() => void 0);
+      return null;
+    }
+    rememberIdentity(result.identityKey);
+    return done(true, verified.handle ?? null, verified.paymail ?? null);
+  } catch (e) {
+    reportAttempt(o.onAttempt, attemptFor(opt, outcomeOf(e), started));
+    return null;
+  }
+}
+
 // src/element.ts
 var SIGNIN_TAG = "bwalletx-signin";
 var GET_URL = "https://bwalletx.com/get";
@@ -1036,6 +1389,11 @@ button[aria-busy=true]{cursor:wait}
 /* "Other wallets" (0.5.6): one small link under the button */
 .ow{margin:8px 0 0;width:0;min-width:100%;font-size:12px;line-height:1.4;color:#71717a;text-align:center}
 :host([theme=dark]) .ow,:host-context(.dark) .ow{color:#a1a1aa}
+.sw{margin:8px 0 0;width:0;min-width:100%;font-size:12px;line-height:1.4;color:#a16207;text-align:center}
+:host([theme=dark]) .sw,:host-context(.dark) .sw{color:#fcd34d}
+.mn{margin:8px 0 0;width:0;min-width:100%;font-size:12px;line-height:1.4;color:#71717a;text-align:center}
+.mn small{display:block;font-size:11px;opacity:.85}
+:host([theme=dark]) .mn,:host-context(.dark) .mn{color:#a1a1aa}
 .lnk{all:unset;cursor:pointer;color:inherit;font-weight:600;text-decoration:underline;text-underline-offset:2px}
 .lnk:focus-visible{outline:2px solid #b45309;outline-offset:2px;border-radius:2px}
 /* error: one line plus Retry */
@@ -1074,6 +1432,11 @@ var MENU_CSS = `
 var PENDING_NOTE = "Sign in: shares only your public identity key, moves no money";
 var PENDING_LABEL = "Approve in bWalletX\u2026";
 var PENDING_LABEL_OTHER = "Approve in your wallet\u2026";
+var SWITCH_NOTE = "Some features need bWalletX";
+var CONTINUE_OTHER_LABEL = "Continue with your wallet";
+function walletGlyph(px) {
+  return `<svg viewBox="0 0 24 24" width="${px}" height="${px}" aria-hidden="true" focusable="false" fill="none" stroke="#FFD24D" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M19 7V5a1 1 0 0 0-1-1H5a2 2 0 0 0 0 4h15a1 1 0 0 1 1 1v4h-3a2 2 0 0 0 0 4h3a1 1 0 0 0 1-1v-2"/><path d="M3 6v12a2 2 0 0 0 2 2h15a1 1 0 0 0 1-1v-3"/></svg>`;
+}
 function b64url2(bytes) {
   let s = "";
   for (const b of bytes) s += String.fromCharCode(b);
@@ -1113,7 +1476,7 @@ async function postAccess(url, body) {
   const res = await fetch(url, { method: "POST", credentials: "include", headers: { "content-type": "application/json" }, body: JSON.stringify(body) });
   return res.json().catch(() => ({ error: "bad_request", message: `HTTP ${res.status}` }));
 }
-var OBSERVED = ["size", "theme", "label", "brand", "subtitle", "loading", "disabled", "full-width", "aria-label", "get-url", "web-url", "state", "identity-key", "paymail", "handle", "avatar-url", "error", "other-wallets", "challenge-url"];
+var OBSERVED = ["size", "theme", "label", "brand", "subtitle", "loading", "disabled", "full-width", "aria-label", "get-url", "web-url", "state", "identity-key", "paymail", "handle", "avatar-url", "error", "other-wallets", "challenge-url", "wallet-type", "switch-note", "remember", "metanet"];
 var STATES = ["signed-out", "restoring", "pending", "signed-in", "error"];
 function createClass() {
   return class BwalletxSigninElement extends HTMLElement {
@@ -1128,14 +1491,21 @@ function createClass() {
     #error = "";
     #restored = false;
     #pendingLabel = PENDING_LABEL;
+    /** The wallet type signed in with here (0.6.0), for the Switch note. */
+    #signedType = null;
     #menu = null;
+    /** (0.7.0) A Metanet sign-in (tapped or silent) is in flight. */
+    #viaMetanet = false;
+    /** (0.7.0) Bumped by "Not you?": a Metanet sign-in started before it lands nobody. */
+    #run = 0;
     constructor() {
       super();
       this.#root = this.attachShadow({ mode: "open" });
     }
     connectedCallback() {
+      if (!this.#controlled && this.#stateful) warnIfNoLogout({ verifyUrl: this.#attr("verify-url"), logoutUrl: this.#attr("logout-url"), where: "<bwalletx-signin>" });
       this.#render();
-      void this.#restore();
+      void this.#restore().then(() => this.#silentMetanet());
     }
     disconnectedCallback() {
       this.#menu?.close(false);
@@ -1241,10 +1611,11 @@ function createClass() {
       const restoring = state === "restoring";
       const error = state === "error";
       const pendingLabel = this.#controlled ? PENDING_LABEL : this.#pendingLabel;
-      const text = pending ? pendingLabel : error ? "Retry" : signinText(this.#attr("label") ?? "signin", brand);
+      const elsewhere = state === "signed-out" && tapGoesElsewhere(this.#walletType());
+      const text = pending ? pendingLabel : error ? "Retry" : elsewhere ? CONTINUE_OTHER_LABEL : signinText(this.#attr("label") ?? "signin", brand);
       const subAttr = this.#attr("subtitle");
       const subDefault = brand === "bWalletX" && (size === "lg" || size === "md") ? "also works with bWallet" : null;
-      const subtitle = pending || error ? null : subAttr === null || subAttr === "" || subAttr === "on" ? subAttr === "on" ? "also works with bWallet" : subDefault : subAttr === "off" ? null : subAttr;
+      const subtitle = pending || error || elsewhere ? null : subAttr === null || subAttr === "" || subAttr === "on" ? subAttr === "on" ? "also works with bWallet" : subDefault : subAttr === "off" ? null : subAttr;
       const loading = this.hasAttribute("loading") || this.#busy || pending || restoring;
       const disabled = this.hasAttribute("disabled");
       const markPx = size === "icon" ? 24 : size === "sm" ? 15 : size === "md" ? 17 : 20;
@@ -1253,18 +1624,26 @@ function createClass() {
       const webUrl = this.#attr("web-url") ?? WEB_WALLET_URL;
       const errText = error ? (this.#controlled ? this.#attr("error") : this.#error) || "Sign-in failed" : "";
       const label = size === "icon" ? "" : `<span class="txt" part="text"><b part="label">${esc(text)}</b>${subtitle ? `<small part="subtitle">${esc(subtitle)}</small>` : ""}</span>`;
-      const mark = loading ? '<span class="spin" aria-hidden="true"></span>' : markSvg(markPx);
+      const mark = loading ? '<span class="spin" aria-hidden="true"></span>' : elsewhere ? walletGlyph(markPx - 4) : markSvg(markPx);
       const otherOff = this.#attr("other-wallets") === "off";
       const otherLink = '<button type="button" class="lnk" data-act="other" part="other-wallets-link">Other wallets</button>';
       const nf = this.#notFound ? `<p class="nf" part="not-found" role="status">bWalletX wasn't found in this browser. <a href="${esc(getUrl)}" target="_blank" rel="noopener">Get ${brand}</a> or <a href="${esc(webUrl)}" target="_blank" rel="noopener">use the web wallet</a>.${otherOff ? "" : ` ${otherLink}`}</p>` : "";
       const ow = !this.#notFound && !pending && !restoring && this.#otherWalletsShown(size) ? `<p class="ow" part="other-wallets">${otherLink}</p>` : "";
+      const sw = !pending && !restoring && this.#switchNoteShown(size) ? `<p class="sw" part="switch-note">${esc(SWITCH_NOTE)} \xB7 <button type="button" class="lnk" data-act="switch" part="switch-link">Switch</button></p>` : "";
       const err = error ? `<p class="err" part="error" role="alert">${esc(errText)}</p>` : "";
+      const mnHere = this.#metanetShown(size);
+      const mnRemembered = mnHere && (pending ? this.#metanetPending() : !restoring && this.#walletType() === METANET_TYPE);
+      const notYou = `<button type="button" class="lnk" data-act="not-you" part="not-you-link">${esc(NOT_YOU_LABEL)}</button>`;
+      const mn = !mnHere ? "" : pending ? mnRemembered ? `<p class="mn" part="metanet">${esc(METANET_REMEMBERED_NOTE)} ${notYou}</p>` : "" : restoring ? "" : `<p class="mn" part="metanet"><button type="button" class="lnk" data-act="metanet" part="metanet-link" title="Connects to Metanet Desktop on this computer, never to a browser extension.">${esc(METANET_LABEL)}</button><small>${esc(METANET_NOTE)}</small>${mnRemembered ? `<small>${esc(METANET_REMEMBERED_NOTE)} ${notYou}</small>` : ""}</p>`;
       const compact = size === "sm" || size === "icon";
       const note = pending && !compact ? `<p class="note" part="note">${esc(PENDING_NOTE)}</p>` : "";
       const status = pending ? `<span class="sr" role="status">${esc(pendingLabel)}</span>` : loading ? '<span class="sr" role="status">Connecting to bWalletX\u2026</span>' : "";
-      this.#root.innerHTML = `<style>${SIGNIN_CSS}</style>${err}<button type="button" part="button" aria-label="${esc(aria)}" title="${esc(subtitle ? `${text} (${subtitle})` : text)}"${disabled ? " disabled" : ""}${loading ? ' aria-busy="true"' : ""}><span class="mark" part="mark">${mark}</span>${label}</button>${status}${note}${ow}${nf}`;
+      this.#root.innerHTML = `<style>${SIGNIN_CSS}</style>${err}<button type="button" part="button" aria-label="${esc(aria)}" title="${esc(subtitle ? `${text} (${subtitle})` : text)}"${disabled ? " disabled" : ""}${loading ? ' aria-busy="true"' : ""}><span class="mark" part="mark">${mark}</span>${label}</button>${status}${note}${sw}${mn}${ow}${nf}`;
       this.button.addEventListener("click", () => void this.#click());
       for (const l of Array.from(this.#root.querySelectorAll("[data-act=other]"))) l.addEventListener("click", () => void this.otherWallets());
+      this.#root.querySelector("[data-act=switch]")?.addEventListener("click", () => void this.switchToBwalletX());
+      this.#root.querySelector("[data-act=metanet]")?.addEventListener("click", () => void this.useMetanet());
+      this.#root.querySelector("[data-act=not-you]")?.addEventListener("click", () => this.notYou());
       bindPrewarm(this.button);
       if (pending && compact) this.#showTip(PENDING_NOTE);
       else this.#hideTip();
@@ -1332,7 +1711,20 @@ function createClass() {
         close(false);
         void this.signOut();
       });
-      menu.append(who, copy, out);
+      const items = [copy, out];
+      menu.append(who);
+      if (needsBwalletX(this.#walletType())) {
+        const sw = item("Switch to bWalletX", () => {
+          close(false);
+          void this.switchToBwalletX();
+        });
+        const line = document.createElement("div");
+        line.className = "who";
+        line.textContent = SWITCH_NOTE;
+        menu.append(line, sw);
+        items.unshift(sw);
+      }
+      menu.append(copy, out);
       root.append(style, menu);
       document.body.appendChild(host);
       const place = () => {
@@ -1348,7 +1740,6 @@ function createClass() {
         menu.style.top = `${below + h > vh && r.top - 8 - h > 0 ? r.top - 8 - h : below}px`;
       };
       place();
-      const items = [copy, out];
       const focusAt = (i) => items[(i + items.length) % items.length].focus();
       const onKey = (e) => {
         const i = items.indexOf(root.activeElement);
@@ -1403,6 +1794,8 @@ function createClass() {
       if (this.#controlled) return;
       const url = this.#attr("logout-url");
       if (url) await fetch(url, { method: "POST", credentials: "include", headers: { "content-type": "application/json" }, body: "{}" }).catch(() => void 0);
+      if (this.#remember) forgetWalletChoice();
+      this.#signedType = null;
       this.#account = null;
       this.#set("signed-out");
       this.#emit("bwalletx-signed-out");
@@ -1422,6 +1815,110 @@ function createClass() {
     otherWallets() {
       return this.#click("chooser");
     }
+    /** (0.6.0) "Switch": sign in with bWalletX (its sheet when here, else the chooser with Get bWalletX first). */
+    switchToBwalletX() {
+      return this.#click("bwalletx");
+    }
+    get #remember() {
+      return this.#attr("remember") !== "off";
+    }
+    /**
+     * (0.7.0) "Use Metanet Desktop or another BRC-100 wallet" is offered: metanet on, or auto at lg/md when this
+     * element signs in or follows a provider. Never on a phone or inside a frame.
+     */
+    #metanetShown(size) {
+      const a = this.#attr("metanet");
+      if (a === "off" || !metanetOffered()) return false;
+      if (a === "on") return true;
+      return (size === "lg" || size === "md") && (this.#controlled || !!this.#attr("challenge-url"));
+    }
+    /** A Metanet sign-in is on screen: our own, or (driven) the provider's with Metanet remembered. */
+    #metanetPending() {
+      return this.#controlled ? this.#attr("wallet-type") === METANET_TYPE : this.#viaMetanet;
+    }
+    /** (0.7.0) The Metanet link: connect to Metanet Desktop on localhost:3321 (after this tap, never before). */
+    useMetanet() {
+      return this.#click("metanet");
+    }
+    /**
+     * (0.7.0) "Not you? Use another wallet": forget the remembered wallet here, and drop a Metanet sign-in in flight
+     * (if its verify already set a session, logout-url ends it). Emits bwalletx-not-you (cancelable).
+     */
+    notYou() {
+      if (!this.#emit("bwalletx-not-you", { element: this }, true)) return;
+      this.#run++;
+      if (this.#remember) forgetWalletChoice();
+      this.#signedType = null;
+      if (this.#viaMetanet && !this.#controlled) {
+        this.#viaMetanet = false;
+        this.#busy = false;
+        if (this.#phase === "pending") this.#phase = "signed-out";
+      }
+      this.#render();
+    }
+    /**
+     * (0.7.0) Rule 4: back with Metanet remembered and no session, ONE silent attempt per page load (2 s, a known
+     * identity key only), then the signature alone. Any stop or failure is silent: the normal button stays.
+     */
+    async #silentMetanet() {
+      if (this.#controlled || !this.#stateful || !this.#remember || this.#attr("require-token")) return;
+      if (!this.#metanetShown(this.#attr("size") ?? "lg")) return;
+      const challengeUrl = this.#attr("challenge-url");
+      const verifyUrl = this.#attr("verify-url");
+      if (!challengeUrl || !verifyUrl || this.#phase !== "signed-out" || this.#busy || silentAttemptUsed()) return;
+      if (rememberedWalletChoice()?.type !== METANET_TYPE || !metanetOffered()) return;
+      const run = ++this.#run;
+      const live = () => run === this.#run;
+      const started = Date.now();
+      const r = await runSilentMetanet({
+        challengeUrl,
+        verifyUrl,
+        post: (url, body) => postJson(url, body),
+        isAbandoned: () => !live(),
+        logout: async () => {
+          const out = this.#attr("logout-url");
+          if (out) await fetch(out, { method: "POST", credentials: "include", headers: { "content-type": "application/json" }, body: "{}" }).catch(() => void 0);
+        },
+        onSignIn: () => {
+          if (!live() || this.#phase !== "signed-out" || this.#busy) return;
+          this.#viaMetanet = true;
+          this.#busy = true;
+          this.#pendingLabel = PENDING_LABEL_OTHER;
+          this.#set("pending");
+        },
+        onAttempt: (a) => this.#emit("bwalletx-attempt", a)
+      });
+      if (!live()) return;
+      this.#viaMetanet = false;
+      this.#busy = false;
+      if (!r) {
+        if (this.#phase === "pending") this.#set("signed-out");
+        return;
+      }
+      this.#signedType = r.walletType;
+      this.#signedIn({ identityKey: r.identityKey, handle: r.handle, paymail: r.paymail });
+      this.#emit("bwalletx-signed-in", { identityKey: r.identityKey, method: "wallet", nonce: null, signature: null, response: { handle: r.handle, paymail: r.paymail }, silent: true, ms: Date.now() - started });
+    }
+    /** The wallet type the Switch note judges: the provider's, else what signed in here, else the remembered one. */
+    #walletType() {
+      if (this.#controlled) return this.#attr("wallet-type");
+      return this.#signedType ?? (this.#remember ? rememberedWalletChoice()?.type ?? null : null);
+    }
+    #switchNoteShown(size) {
+      const a = this.#attr("switch-note");
+      if (a === "off" || !tapGoesElsewhere(this.#walletType())) return false;
+      return a === "on" || size === "lg" || size === "md";
+    }
+    /**
+     * Signed in: note the wallet type, and remember it for this origin when the user picked it (0.6.0), plus the
+     * identity key as known here (0.7.0, public keys only: Metanet's silent attempt goes on only for these). Pass a key
+     * only after the site's verify route accepted it.
+     */
+    #picked(option, reason, identityKey) {
+      this.#signedType = walletTypeOf(option);
+      if (this.#remember && isExplicitPick(option, reason)) rememberWalletChoice(option);
+      if (this.#remember) rememberKnownIdentityKey(identityKey);
+    }
     #attempt(option, outcome, started) {
       this.#emit("bwalletx-attempt", attemptFor(option, outcome, started));
     }
@@ -1430,16 +1927,24 @@ function createClass() {
      * when another wallet is here or the user asked; otherwise 'not-found'. null: the chooser was closed.
      */
     async #choose(mode, ms, pairing) {
+      if (mode === "metanet") return { option: metanetOption(), reason: "requested" };
+      const r = mode === "signin" && this.#remember ? rememberedWalletChoice() : null;
+      if (r && r.type !== METANET_TYPE && !(r.type === BWALLETX_TYPE && r.substrate !== "pairing")) {
+        const m = matchRemembered(await discoverWallets({ ms, pairing: () => pairing }), r);
+        if (m) return { option: m, reason: "remembered" };
+      }
       if (mode !== "chooser") {
         const f = await discoverBwalletX(ms);
         if (f) {
           const substrate = f.rdns === RDNS_EXTENSION ? "extension" : f.rdns === RDNS_MOBILE ? "in-app" : "xdm";
-          return brc100Option(f.wallet, { id: f.rdns ?? "bwalletx-xdm", rdns: f.rdns ?? void 0, name: "bWalletX", isBwalletX: true, substrate });
+          const option = brc100Option(f.wallet, { id: f.rdns ?? "bwalletx-xdm", rdns: f.rdns ?? void 0, name: "bWalletX", isBwalletX: true, substrate });
+          return { option, reason: "bwalletx" };
         }
       }
       const list = await discoverWallets({ ms: 50, pairing: () => pairing });
       if (mode !== "chooser" && !hasBwalletX(list) && !otherDetected(list).length) return "not-found";
-      return chooseWallet(list, { getUrl: this.#attr("get-url") ?? void 0 });
+      const picked = await chooseWallet(list, { getUrl: this.#attr("get-url") ?? void 0 });
+      return picked ? { option: picked, reason: "chooser" } : null;
     }
     async #click(mode = "signin") {
       if (this.hasAttribute("disabled") || this.hasAttribute("loading") || this.#busy || this.state === "pending") return;
@@ -1463,9 +1968,12 @@ function createClass() {
       const started = Date.now();
       const pairing = pairingModal();
       let option = null;
+      const run = ++this.#run;
+      const live = () => run === this.#run;
       this.#notFound = false;
       this.#busy = true;
-      this.#pendingLabel = PENDING_LABEL;
+      this.#viaMetanet = mode === "metanet";
+      this.#pendingLabel = mode === "metanet" ? PENDING_LABEL_OTHER : PENDING_LABEL;
       if (own) this.#set("pending");
       else this.#render();
       try {
@@ -1484,12 +1992,14 @@ function createClass() {
           this.#attempt(null, "cancelled", started);
           return;
         }
-        option = picked;
+        option = picked.option;
+        const reason = picked.reason;
         if (!option.isBwalletX) {
           this.#pendingLabel = PENDING_LABEL_OTHER;
           if (own) this.#render();
         }
         const cw = await option.connect({ identity: false });
+        if (!live()) return;
         const wallet = cw.wallet;
         if (!wallet) throw Object.assign(new Error("This wallet cannot sign in here"), { code: "NOT_SUPPORTED" });
         const sub = substrateOf(option);
@@ -1507,6 +2017,7 @@ function createClass() {
               challenge: (identityKey) => postJson(challengeUrl, { identityKey, require: hint }),
               verify: verifyUrl2 ? (response2) => postAccess(verifyUrl2, response2) : void 0
             });
+            this.#picked(option, reason, verifyUrl2 ? a.response.identityKey : null);
             this.#attempt(option, "signed-in", started);
             this.#emit("bwalletx-access-granted", { identityKey: a.response.identityKey, response: a.verified });
           } catch (e) {
@@ -1519,18 +2030,29 @@ function createClass() {
         const verifyUrl = this.#attr("verify-url");
         const { result: r, verified } = await signInAndVerify({
           wallet,
+          // Metanet hands over its key on connect (one request at a time), so its sign-in is the signature alone.
+          identityKey: cw.identityKey ?? void 0,
+          skipWaitForAuthentication: option.id === METANET_OPTION_ID,
+          // its connect() just checked the lock
           identityKeyHint: verifyUrl ? rememberedIdentity() : void 0,
           challenge: (identityKey) => postJson(challengeUrl, identityKey ? { identityKey } : {}),
           verify: async (res) => verifyUrl ? await postJson(verifyUrl, { identityKey: res.identityKey, nonce: res.nonce, signature: res.signature }) : {}
         });
+        if (!live()) {
+          const out = this.#attr("logout-url");
+          if (verifyUrl && out) await fetch(out, { method: "POST", credentials: "include", headers: { "content-type": "application/json" }, body: "{}" }).catch(() => void 0);
+          return;
+        }
         if (verifyUrl) rememberIdentity(r.identityKey);
         const response = verifyUrl ? verified : null;
+        this.#picked(option, reason, verifyUrl ? r.identityKey : null);
         if (own) this.#signedIn({ identityKey: r.identityKey, handle: response?.handle ?? null, paymail: response?.paymail ?? null });
         this.#attempt(option, "signed-in", started);
         this.#emit("bwalletx-signed-in", { identityKey: r.identityKey, method, nonce: r.nonce, signature: r.signature, response });
       } catch (error) {
         const outcome = outcomeOf(error);
         this.#attempt(option, outcome, started);
+        if (!live()) return;
         const closedQr = outcome === "cancelled" && option?.kind === "pairing";
         if (own) {
           if (closedQr) this.#phase = prev;
@@ -1541,12 +2063,15 @@ function createClass() {
         }
         if (!closedQr) this.#emit("bwalletx-error", { error });
       } finally {
-        this.#busy = false;
         try {
           pairing.close();
         } catch {
         }
-        this.#render();
+        if (live()) {
+          this.#busy = false;
+          this.#viaMetanet = false;
+          this.#render();
+        }
       }
     }
   };
@@ -1619,18 +2144,6 @@ function qrSvg(text) {
   q.make();
   return q.createSvgTag({ cellSize: 4, margin: 2, scalable: true });
 }
-function isTouchDevice(env = globalThis) {
-  const nav = env.navigator;
-  if (!nav) return false;
-  const ua = nav.userAgent ?? "";
-  if (/Android|iPhone|iPad|iPod|Mobile|Silk|Kindle/i.test(ua)) return true;
-  if (/Macintosh/.test(ua) && (nav.maxTouchPoints ?? 0) > 1) return true;
-  try {
-    return !!env.matchMedia?.("(pointer: coarse)").matches && !env.matchMedia?.("(hover: hover)").matches;
-  } catch {
-    return false;
-  }
-}
 function pairingModal(o = {}) {
   const ac = new AbortController();
   let ui = null;
@@ -1791,10 +2304,11 @@ function chooseWallet(options, o = {}) {
       row2.onclick = () => done(w);
       list.append(row2);
     }
-    if (o.desktop !== false && !options.some((w) => w.substrate === "json-api" || w.substrate === "cicada")) {
+    if (o.desktop !== false && metanetOffered() && !options.some((w) => w.substrate === "json-api" || w.substrate === "cicada")) {
       if (!here && !sep) list.append(el("p", "bwx-sep", "Or use"));
-      const d = desktopOption();
-      const row2 = optionRow(d, false, "Metanet or BSV Desktop on this computer", "Fewer features");
+      const d = metanetOption();
+      const row2 = optionRow(d, false, METANET_NOTE);
+      row2.title = "Connects to Metanet Desktop on this computer, never to a browser extension.";
       row2.onclick = () => done(d);
       list.append(row2);
     }
@@ -1839,6 +2353,7 @@ export {
   DESKTOP_OPTION_ID,
   desktopOption,
   autoChoice,
+  isLocalDesktop,
   PAYMAIL_LOOKUP_URL,
   BAVATAR_URL,
   shortKey,
@@ -1850,6 +2365,31 @@ export {
   IDENTITY_HINT_KEY,
   rememberedIdentity,
   rememberIdentity,
+  isTouchDevice,
+  METANET_TYPE,
+  METANET_OPTION_ID,
+  METANET_JSON_API,
+  METANET_LABEL,
+  METANET_NOTE,
+  METANET_REMEMBERED_NOTE,
+  NOT_YOU_LABEL,
+  METANET_UNREACHABLE,
+  METANET_ANSWER_MS,
+  METANET_SILENT_MS,
+  MetanetUnreachableError,
+  inAnyFrame,
+  metanetOffered,
+  connectMetanetDesktop,
+  metanetOption,
+  KNOWN_KEYS_KEY,
+  knownIdentityKeys,
+  isKnownIdentityKey,
+  rememberKnownIdentityKey,
+  silentAttemptUsed,
+  claimSilentAttempt,
+  resetSilentAttempt,
+  trySilentMetanet,
+  warnIfNoLogout,
   BWALLETX_TYPE,
   substrateOf,
   walletTypeOf,
@@ -1861,8 +2401,19 @@ export {
   outcomeOf,
   attemptFor,
   reportAttempt,
+  WALLET_CHOICE_KEY,
+  isRememberable,
+  isExplicitPick,
+  rememberWalletChoice,
+  rememberedWalletChoice,
+  forgetWalletChoice,
+  needsBwalletX,
+  tapGoesElsewhere,
+  isLocalDesktopType,
+  matchRemembered,
+  planAutoConnect,
+  attachRemembered,
   qrSvg,
-  isTouchDevice,
   pairingModal,
   pickWallet,
   chooseWallet,
@@ -1870,6 +2421,8 @@ export {
   throwIfAccessError,
   proveHoldings,
   requestAccess,
+  runConnect,
+  runSilentMetanet,
   SIGNIN_TAG,
   GET_URL,
   WEB_WALLET_URL,
@@ -1880,7 +2433,9 @@ export {
   PENDING_NOTE,
   PENDING_LABEL,
   PENDING_LABEL_OTHER,
+  SWITCH_NOTE,
+  CONTINUE_OTHER_LABEL,
   buildAuthorizeUrl,
   defineBwalletxSignin
 };
-//# sourceMappingURL=chunk-LS6AYEBO.js.map
+//# sourceMappingURL=chunk-6EFFOIHK.js.map