@cavos/kit 0.0.1

package/dist/react/index.js

@@ -0,0 +1,2055 @@
+'use strict';
+
+var react = require('react');
+var starknet = require('starknet');
+var sha256 = require('@noble/hashes/sha256');
+var p256 = require('@noble/curves/p256');
+var hkdf = require('@noble/hashes/hkdf');
+var pbkdf2 = require('@noble/hashes/pbkdf2');
+var utils = require('@noble/hashes/utils');
+var jsxRuntime = require('react/jsx-runtime');
+
+// src/react/CavosProvider.tsx
+
+// src/crypto/encoding.ts
+var U128_MASK = (1n << 128n) - 1n;
+function u256ToFelts(value) {
+  return [value & U128_MASK, value >> 128n];
+}
+function bytesToBigInt(bytes) {
+  let out = 0n;
+  for (const b of bytes) out = out << 8n | BigInt(b);
+  return out;
+}
+function bigIntTo32Bytes(value) {
+  const out = new Uint8Array(32);
+  let v = value;
+  for (let i = 31; i >= 0; i--) {
+    out[i] = Number(v & 0xffn);
+    v >>= 8n;
+  }
+  return out;
+}
+function signatureToFelts(sig) {
+  const [rLow, rHigh] = u256ToFelts(sig.r);
+  const [sLow, sHigh] = u256ToFelts(sig.s);
+  return [rLow, rHigh, sLow, sHigh, sig.yParity ? 1n : 0n];
+}
+function recoverYParity(r, s, digest, pubkey) {
+  for (const bit of [0, 1]) {
+    try {
+      const candidate = new p256.p256.Signature(r, s).addRecoveryBit(bit);
+      const point = candidate.recoverPublicKey(digest).toAffine();
+      if (point.x === pubkey.x && point.y === pubkey.y) {
+        return bit === 1;
+      }
+    } catch {
+    }
+  }
+  throw new Error("kit/signature: could not recover parity for the given pubkey");
+}
+
+// src/signer/WebCryptoSigner.ts
+var IDB_NAME = "cavos-kit";
+var IDB_STORE = "device-keys";
+var WebCryptoSigner = class _WebCryptoSigner {
+  constructor(privateKey, publicKey, keyId) {
+    this.privateKey = privateKey;
+    this.publicKey = publicKey;
+    this.keyId = keyId;
+  }
+  /** Create a fresh device key (first run on this device) and persist it. */
+  static async create(opts) {
+    assertSecureContext();
+    const pair = await crypto.subtle.generateKey(
+      { name: "ECDSA", namedCurve: "P-256" },
+      false,
+      // private key is NON-extractable
+      ["sign", "verify"]
+    );
+    const publicKey = await exportPublicKey(pair.publicKey);
+    await idbPut(opts.keyId, { privateKey: pair.privateKey, x: publicKey.x, y: publicKey.y });
+    return new _WebCryptoSigner(pair.privateKey, publicKey, opts.keyId);
+  }
+  /** Load an existing device key from storage, or null if none exists yet. */
+  static async load(opts) {
+    const rec = await idbGet(opts.keyId);
+    if (!rec) return null;
+    return new _WebCryptoSigner(rec.privateKey, { x: rec.x, y: rec.y }, opts.keyId);
+  }
+  /** Load the device key, creating one on first use. */
+  static async loadOrCreate(opts) {
+    return await _WebCryptoSigner.load(opts) ?? await _WebCryptoSigner.create(opts);
+  }
+  async getPublicKey() {
+    return this.publicKey;
+  }
+  async sign(txHash) {
+    const raw = new Uint8Array(
+      await crypto.subtle.sign(
+        { name: "ECDSA", hash: "SHA-256" },
+        this.privateKey,
+        txHash
+      )
+    );
+    const r = bytesToBigInt(raw.subarray(0, 32));
+    const s = bytesToBigInt(raw.subarray(32, 64));
+    const digest = sha256.sha256(txHash);
+    const yParity = recoverYParity(r, s, digest, this.publicKey);
+    return { r, s, yParity };
+  }
+};
+async function exportPublicKey(publicKey) {
+  const raw = new Uint8Array(await crypto.subtle.exportKey("raw", publicKey));
+  return { x: bytesToBigInt(raw.subarray(1, 33)), y: bytesToBigInt(raw.subarray(33, 65)) };
+}
+function assertSecureContext() {
+  const ok = typeof crypto !== "undefined" && typeof crypto.subtle !== "undefined" && (typeof window === "undefined" || window.isSecureContext);
+  if (!ok) {
+    throw new Error(
+      "Cavos: WebCrypto is unavailable. Device keys require a secure context \u2014 use HTTPS, or http://localhost. (For LAN/mobile dev testing, run `next dev --experimental-https`.)"
+    );
+  }
+}
+function openDb() {
+  return new Promise((resolve, reject) => {
+    const req = indexedDB.open(IDB_NAME, 1);
+    req.onupgradeneeded = () => req.result.createObjectStore(IDB_STORE);
+    req.onsuccess = () => resolve(req.result);
+    req.onerror = () => reject(req.error);
+  });
+}
+async function idbPut(keyId, value) {
+  const db = await openDb();
+  await tx(db, "readwrite", (store) => store.put(value, keyId));
+  db.close();
+}
+async function idbGet(keyId) {
+  const db = await openDb();
+  const result = await tx(db, "readonly", (store) => store.get(keyId));
+  db.close();
+  return result ?? null;
+}
+function tx(db, mode, run) {
+  return new Promise((resolve, reject) => {
+    const store = db.transaction(IDB_STORE, mode).objectStore(IDB_STORE);
+    const req = run(store);
+    req.onsuccess = () => resolve(req.result);
+    req.onerror = () => reject(req.error);
+  });
+}
+
+// src/chains/starknet/constants.ts
+var STARKNET_NETWORKS = {
+  sepolia: {
+    chainId: "0x534e5f5345504f4c4941",
+    // SN_SEPOLIA
+    rpcUrl: "https://api.cartridge.gg/x/starknet/sepolia"
+  },
+  mainnet: {
+    chainId: "0x534e5f4d41494e",
+    // SN_MAIN
+    rpcUrl: "https://api.cartridge.gg/x/starknet/mainnet"
+  }
+};
+var UDC_ADDRESS = "0x041a78e741e5af2fec34b695679bc6891742439f7afb8484ecd7766661ad02bf";
+var CAVOS_PAYMASTER_URL = {
+  sepolia: "https://sepolia-paymaster.cavos.xyz",
+  mainnet: "https://paymaster.cavos.xyz"
+};
+var DEVICE_ACCOUNT_CLASS_HASH = {
+  sepolia: "0x6c3c3426667b6d4adda18a0b8d8cc34c495a1ace7276c4470068ad4c324876d",
+  mainnet: ""
+};
+
+// src/chains/starknet/StarknetAdapter.ts
+var StarknetAdapter = class {
+  constructor(opts) {
+    this.opts = opts;
+    this.chain = "starknet";
+  }
+  computeAddress({ addressSeed, initialSigner, salt }) {
+    return starknet.hash.calculateContractAddressFromHash(
+      starknet.num.toHex(salt ?? addressSeed),
+      this.opts.classHash,
+      this.constructorCalldata(addressSeed, initialSigner),
+      0
+      // deployerAddress 0 => deterministic counterfactual address
+    );
+  }
+  /** Single UDC deploy; the constructor registers the first device signer, so
+   * the account is ready the moment it is deployed (fits the paymaster's
+   * deploy + execute_from_outside bundle). */
+  buildDeploy(params) {
+    const salt = params.salt ?? params.addressSeed;
+    const calldata = this.constructorCalldata(params.addressSeed, params.initialSigner);
+    return [
+      {
+        contractAddress: UDC_ADDRESS,
+        entrypoint: "deployContract",
+        calldata: [
+          this.opts.classHash,
+          starknet.num.toHex(salt),
+          "0x0",
+          // unique = false -> deployer-independent address
+          starknet.num.toHex(calldata.length),
+          ...calldata
+        ]
+      }
+    ];
+  }
+  /** Constructor calldata: [address_seed, pub_x_low, pub_x_high, pub_y_low, pub_y_high]. */
+  constructorCalldata(addressSeed, initialSigner) {
+    return [starknet.num.toHex(addressSeed), ...pubkeyCalldata(initialSigner)];
+  }
+  buildAddSigner(accountAddress, signer) {
+    return { contractAddress: accountAddress, entrypoint: "add_signer", calldata: pubkeyCalldata(signer) };
+  }
+  buildRemoveSigner(accountAddress, signer) {
+    return { contractAddress: accountAddress, entrypoint: "remove_signer", calldata: pubkeyCalldata(signer) };
+  }
+  async isAuthorizedSigner(accountAddress, signer) {
+    if (!this.opts.provider) throw new Error("kit/starknet: provider required for reads");
+    const res = await this.opts.provider.callContract({
+      contractAddress: accountAddress,
+      entrypoint: "is_authorized_signer",
+      calldata: pubkeyCalldata(signer)
+    });
+    return BigInt(res[0] ?? 0) !== 0n;
+  }
+  async buildSignature(txHash) {
+    if (!this.opts.signer) throw new Error("kit/starknet: signer required to sign");
+    const sig = await this.opts.signer.sign(bigIntTo32Bytes(txHash));
+    return signatureToFelts(sig).map((f) => starknet.num.toHex(f));
+  }
+};
+function pubkeyCalldata(pk) {
+  const [xl, xh] = u256ToFelts(pk.x);
+  const [yl, yh] = u256ToFelts(pk.y);
+  return [starknet.num.toHex(xl), starknet.num.toHex(xh), starknet.num.toHex(yl), starknet.num.toHex(yh)];
+}
+var StarknetDeviceSigner = class extends starknet.Signer {
+  constructor(device) {
+    super("0x1");
+    this.device = device;
+  }
+  /** Device accounts are not controlled by a single Stark pubkey. */
+  async getPubKey() {
+    return "0x0";
+  }
+  /** Sign the computed tx hash silently with the device signer. */
+  async signRaw(msgHash) {
+    const sig = await this.device.sign(bigIntTo32Bytes(BigInt(msgHash)));
+    return signatureToFelts(sig).map((f) => starknet.num.toHex(f));
+  }
+};
+
+// src/registry/WalletRegistry.ts
+var InMemoryWalletRegistry = class {
+  constructor() {
+    this.wallets = /* @__PURE__ */ new Map();
+  }
+  async lookup(userId) {
+    return this.wallets.get(userId) ?? null;
+  }
+  async register(params) {
+    this.wallets.set(params.userId, { address: params.address, devices: [params.initialSigner] });
+  }
+  async addDevice(params) {
+    const w = this.wallets.get(params.userId);
+    if (w) w.devices = [...w.devices ?? [], params.signer];
+  }
+};
+
+// src/registry/HttpWalletRegistry.ts
+function toHex(n) {
+  return "0x" + n.toString(16);
+}
+function fromHex(s) {
+  return BigInt(s);
+}
+var HttpWalletRegistry = class {
+  constructor(opts) {
+    this.opts = opts;
+  }
+  async lookup(userId) {
+    const url = new URL("/api/wallets", this.opts.baseUrl);
+    url.searchParams.set("app_id", this.opts.appId);
+    url.searchParams.set("user_social_id", userId);
+    url.searchParams.set("network", this.opts.network);
+    const res = await fetch(url, { headers: { "Content-Type": "application/json" } });
+    if (!res.ok) throw new Error(`registry lookup failed: ${res.status}`);
+    const data = await res.json();
+    if (!data.found || !data.address) return null;
+    const devices = Array.isArray(data.devices) ? data.devices.map((d) => ({
+      x: fromHex(d.pub_x),
+      y: fromHex(d.pub_y)
+    })) : void 0;
+    return { address: data.address, devices };
+  }
+  async register(params) {
+    const res = await fetch(new URL("/api/wallets", this.opts.baseUrl), {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        app_id: this.opts.appId,
+        user_social_id: params.userId,
+        network: this.opts.network,
+        address: params.address,
+        // Device-signer wallets send their initial signer (no encrypted blob).
+        devices: [{ x: toHex(params.initialSigner.x), y: toHex(params.initialSigner.y) }]
+      })
+    });
+    if (!res.ok) {
+      const t = await res.text().catch(() => "");
+      throw new Error(`registry register failed: ${res.status} ${t}`);
+    }
+  }
+  async addDevice(params) {
+  }
+};
+
+// src/recovery/HttpRecoveryClient.ts
+function toHex2(n) {
+  return "0x" + n.toString(16);
+}
+function fromHex2(s) {
+  return BigInt(s);
+}
+function deviceLabel() {
+  if (typeof navigator !== "undefined") {
+    return navigator.userAgent || "a new device";
+  }
+  return "a new device";
+}
+var HttpRecoveryClient = class {
+  constructor(opts) {
+    this.opts = opts;
+  }
+  async requestDeviceAddition(params) {
+    const res = await fetch(new URL("/api/devices/request", this.opts.baseUrl), {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        app_id: this.opts.appId,
+        wallet_address: params.accountAddress,
+        new_pub_x: toHex2(params.newSigner.x),
+        new_pub_y: toHex2(params.newSigner.y),
+        device_label: params.deviceLabel ?? deviceLabel(),
+        ...params.email ? { email: params.email } : {}
+      })
+    });
+    if (!res.ok) {
+      const t = await res.text().catch(() => "");
+      throw new Error(`requestDeviceAddition failed: ${res.status} ${t}`);
+    }
+    const data = await res.json();
+    return { requestId: data.request_id };
+  }
+  async getPendingRequest(requestId) {
+    const url = new URL("/api/devices/request", this.opts.baseUrl);
+    url.searchParams.set("id", requestId);
+    const res = await fetch(url, { headers: { "Content-Type": "application/json" } });
+    if (!res.ok) throw new Error(`getPendingRequest failed: ${res.status}`);
+    const data = await res.json();
+    if (!data.found) return null;
+    const status = data.status;
+    return {
+      requestId: data.request_id,
+      appId: data.app_id,
+      userId: "",
+      // the approving device already knows its own identity
+      accountAddress: data.wallet_address,
+      newSigner: { x: fromHex2(data.new_pub_x), y: fromHex2(data.new_pub_y) },
+      createdAt: data.created_at,
+      status
+    };
+  }
+  async confirmDeviceAddition(params) {
+    const res = await fetch(
+      new URL(`/api/devices/request/${params.requestId}/confirm`, this.opts.baseUrl),
+      {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ tx_hash: params.txHash })
+      }
+    );
+    if (!res.ok) {
+      const t = await res.text().catch(() => "");
+      throw new Error(`confirmDeviceAddition failed: ${res.status} ${t}`);
+    }
+  }
+};
+var BACKUP_KDF_SALT = "cavos-recovery-v1";
+var BACKUP_PBKDF2_ITERATIONS = 21e4;
+var BACKUP_HKDF_INFO = "cavos-backup-signer";
+var CODE_WORDS = 16;
+function generateRecoveryCode() {
+  const bytes = utils.randomBytes(CODE_WORDS);
+  const words = [];
+  for (const b of bytes) words.push(WORDLIST[b]);
+  return words.join(" ");
+}
+function deriveBackupKey(code) {
+  const normalised = code.trim().replace(/\s+/g, " ").toLowerCase();
+  if (!normalised) throw new Error("kit: recovery code is empty");
+  const stretched = pbkdf2.pbkdf2(
+    sha256.sha256,
+    new TextEncoder().encode(normalised),
+    new TextEncoder().encode(BACKUP_KDF_SALT),
+    { c: BACKUP_PBKDF2_ITERATIONS, dkLen: 32 }
+  );
+  const seed = hkdf.hkdf(sha256.sha256, stretched, void 0, BACKUP_HKDF_INFO, 32);
+  const d = bytesToBigInt(seed) % p256.p256.CURVE.n;
+  if (d === 0n) throw new Error("kit: derived backup key is zero (retry with a new code)");
+  const priv = bigIntTo32Bytes(d);
+  const pub = p256.p256.getPublicKey(priv, false);
+  return {
+    privateKey: priv,
+    publicKey: { x: bytesToBigInt(pub.subarray(1, 33)), y: bytesToBigInt(pub.subarray(33, 65)) }
+  };
+}
+var BackupSigner = class _BackupSigner {
+  constructor(privateKey, publicKey) {
+    this.privateKey = privateKey;
+    this.publicKeyValue = publicKey;
+  }
+  /** Build a signer from a recovery code (derive + wrap in one step). */
+  static fromCode(code) {
+    const { privateKey, publicKey } = deriveBackupKey(code);
+    return new _BackupSigner(privateKey, publicKey);
+  }
+  async getPublicKey() {
+    return this.publicKeyValue;
+  }
+  async sign(txHash) {
+    const digest = sha256.sha256(txHash);
+    const sig = p256.p256.sign(digest, this.privateKey);
+    const yParity = recoverYParity(sig.r, sig.s, digest, this.publicKeyValue);
+    return { r: sig.r, s: sig.s, yParity };
+  }
+};
+var WORDLIST = [
+  "able",
+  "acid",
+  "amber",
+  "apple",
+  "arch",
+  "arrow",
+  "ashen",
+  "atlas",
+  "axis",
+  "badge",
+  "baker",
+  "balm",
+  "banner",
+  "basin",
+  "beacon",
+  "bench",
+  "beryl",
+  "birch",
+  "blade",
+  "bloom",
+  "bluer",
+  "border",
+  "brave",
+  "brick",
+  "brook",
+  "cabin",
+  "candle",
+  "carbon",
+  "cargo",
+  "cedar",
+  "chalk",
+  "charm",
+  "chrome",
+  "cipher",
+  "clam",
+  "clasp",
+  "cliff",
+  "clock",
+  "cobia",
+  "comet",
+  "coral",
+  "cotton",
+  "coves",
+  "crane",
+  "crest",
+  "crow",
+  "crystal",
+  "curio",
+  "dawn",
+  "delta",
+  "denim",
+  "depth",
+  "dewy",
+  "digger",
+  "docks",
+  "dover",
+  "drift",
+  "dunes",
+  "eagle",
+  "ember",
+  "echo",
+  "eden",
+  "elite",
+  "ethic",
+  "fable",
+  "falcon",
+  "fawn",
+  "feather",
+  "fern",
+  "fjord",
+  "flame",
+  "flint",
+  "forest",
+  "forge",
+  "frost",
+  "garnet",
+  "gemini",
+  "glade",
+  "glider",
+  "glow",
+  "granite",
+  "grove",
+  "guppy",
+  "harbor",
+  "haven",
+  "hazel",
+  "helio",
+  "heron",
+  "hickory",
+  "honey",
+  "horizon",
+  "ivory",
+  "jade",
+  "jasper",
+  "kestrel",
+  "knot",
+  "lagoon",
+  "lattice",
+  "laurel",
+  "lavender",
+  "lemon",
+  "linden",
+  "loon",
+  "luger",
+  "lumen",
+  "lunar",
+  "mango",
+  "maple",
+  "marble",
+  "marsh",
+  "meadow",
+  "mercy",
+  "mistle",
+  "monsoon",
+  "morning",
+  "moss",
+  "nacre",
+  "nectar",
+  "needle",
+  "nimbus",
+  "nova",
+  "ocean",
+  "onyx",
+  "orbit",
+  "otter",
+  "palm",
+  "panda",
+  "pansy",
+  "papaya",
+  "passage",
+  "pebble",
+  "pelican",
+  "pepper",
+  "petal",
+  "piano",
+  "pierce",
+  "pilot",
+  "pioneer",
+  "platinum",
+  "plume",
+  "poplar",
+  "porpoise",
+  "prairie",
+  "prism",
+  "pulsar",
+  "quartz",
+  "quasar",
+  "quill",
+  "quiver",
+  "raven",
+  "reef",
+  "relic",
+  "ridge",
+  "ripple",
+  "robin",
+  "rocket",
+  "rouge",
+  "ruby",
+  "saffron",
+  "sage",
+  "sail",
+  "salmon",
+  "sapphire",
+  "scarab",
+  "shadow",
+  "shale",
+  "sienna",
+  "silica",
+  "silver",
+  "skyline",
+  "slate",
+  "sonar",
+  "spruce",
+  "starling",
+  "stone",
+  "sugar",
+  "summit",
+  "sunset",
+  "swan",
+  "tangent",
+  "tarragon",
+  "temple",
+  "thistle",
+  "thrush",
+  "tiger",
+  "topaz",
+  "tundra",
+  "turtle",
+  "umber",
+  "union",
+  "valley",
+  "vapor",
+  "vector",
+  "velvet",
+  "violet",
+  "vortex",
+  "walnut",
+  "whale",
+  "winter",
+  "wisp",
+  "wisteria",
+  "xenon",
+  "yarrow",
+  "zephyr",
+  "zinc",
+  "zodiac",
+  "anchor",
+  "basil",
+  "cider",
+  "daisy",
+  "elfin",
+  "ferry",
+  "gimlet",
+  "halcyon",
+  "indigo",
+  "juniper",
+  "kindle",
+  "lilac",
+  "mantis",
+  "nylon",
+  "oracle",
+  "parch",
+  "quokka",
+  "ramble",
+  "thatch",
+  "ultra",
+  "vivid",
+  "xylo",
+  "yodel",
+  "zesty",
+  "arbor",
+  "bliss",
+  "calyx",
+  "dwindle",
+  "folio",
+  "globe",
+  "hymn",
+  "ionic",
+  "jolly",
+  "knack",
+  "lyric",
+  "myrtle",
+  "noble",
+  "plumb",
+  "quaint",
+  "rustic",
+  "satin",
+  "timber",
+  "urge",
+  "vault",
+  "whimsy",
+  "yearn",
+  "zenith",
+  "ash",
+  "beach",
+  "dusk"
+];
+function deriveAddressSeed({ userId, appSalt }) {
+  const h = starknet.hash.computePoseidonHashOnElements([feltFromString(userId), feltFromString(appSalt)]);
+  return BigInt(h);
+}
+function feltFromString(s) {
+  const bytes = new TextEncoder().encode(s);
+  const chunks = [];
+  for (let i = 0; i < bytes.length; i += 31) {
+    let w = 0n;
+    for (const b of bytes.subarray(i, i + 31)) w = w << 8n | BigInt(b);
+    chunks.push(w);
+  }
+  if (chunks.length === 0) return 0n;
+  if (chunks.length === 1) return chunks[0];
+  return BigInt(starknet.hash.computePoseidonHashOnElements(chunks));
+}
+
+// src/Cavos.ts
+var Cavos = class _Cavos {
+  constructor(identity, address, status, account, adapter, devicePubkey) {
+    this.identity = identity;
+    this.address = address;
+    this.status = status;
+    this.account = account;
+    this.adapter = adapter;
+    this.devicePubkey = devicePubkey;
+    /** Request id of the pending device-addition, when status is needs-device-approval. */
+    this.pendingRequestId = null;
+  }
+  static async connect(opts) {
+    const identity = opts.identity ?? await opts.auth?.authenticate();
+    if (!identity) throw new Error("kit: connect requires `identity` or `auth`");
+    const classHash = opts.classHash ?? DEVICE_ACCOUNT_CLASS_HASH[opts.network];
+    if (!classHash) throw new Error(`kit: no DeviceAccount class hash for ${opts.network}`);
+    const provider = new starknet.RpcProvider({
+      nodeUrl: opts.rpcUrl ?? STARKNET_NETWORKS[opts.network].rpcUrl
+    });
+    const paymaster = new starknet.PaymasterRpc({
+      nodeUrl: opts.paymasterUrl ?? CAVOS_PAYMASTER_URL[opts.network],
+      headers: { "x-paymaster-api-key": opts.paymasterApiKey }
+    });
+    const addressSeed = deriveAddressSeed({ userId: identity.userId, appSalt: opts.appSalt });
+    const signer = opts.createSigner ? await opts.createSigner(`${identity.userId}:${opts.appSalt}`) : await WebCryptoSigner.loadOrCreate({ keyId: `${identity.userId}:${opts.appSalt}` });
+    const devicePubkey = await signer.getPublicKey();
+    const adapter = new StarknetAdapter({ classHash, signer, provider });
+    const makeAccount = (address2) => new starknet.Account({
+      provider,
+      address: address2,
+      signer: new StarknetDeviceSigner(signer),
+      paymaster,
+      cairoVersion: "1"
+    });
+    const backendUrl = opts.backendUrl ?? "https://cavos.xyz";
+    const registry = opts.registry ?? (opts.appId ? new HttpWalletRegistry({ baseUrl: backendUrl, appId: opts.appId, network: opts.network }) : defaultRegistry);
+    const recovery = opts.recovery ?? (opts.appId ? new HttpRecoveryClient({ baseUrl: backendUrl, appId: opts.appId }) : null);
+    const existing = await registry.lookup(identity.userId);
+    if (existing) {
+      const account2 = makeAccount(existing.address);
+      const isSigner2 = await adapter.isAuthorizedSigner(existing.address, devicePubkey);
+      const cavos = new _Cavos(
+        identity,
+        existing.address,
+        isSigner2 ? "ready" : "needs-device-approval",
+        account2,
+        adapter,
+        devicePubkey
+      );
+      if (!isSigner2 && recovery) {
+        const dedup = lastDeviceRequest.get(identity.userId);
+        const fresh = dedup && Date.now() - dedup.requestedAt < DEVICE_REQUEST_DEDUP_MS;
+        try {
+          if (fresh) {
+            cavos.pendingRequestId = dedup.requestId;
+          } else {
+            const { requestId } = await recovery.requestDeviceAddition({
+              userId: identity.userId,
+              accountAddress: existing.address,
+              newSigner: devicePubkey,
+              ...identity.email ? { email: identity.email } : {}
+            });
+            cavos.pendingRequestId = requestId;
+            lastDeviceRequest.set(identity.userId, { requestId, requestedAt: Date.now() });
+          }
+        } catch (e) {
+          console.warn("[Cavos] requestDeviceAddition failed:", e);
+        }
+      }
+      return cavos;
+    }
+    const address = adapter.computeAddress({ addressSeed, initialSigner: devicePubkey });
+    const account = makeAccount(address);
+    const alreadyDeployed = await isDeployed(provider, address);
+    if (!alreadyDeployed) {
+      const deploymentData = {
+        address,
+        class_hash: classHash,
+        salt: starknet.num.toHex(addressSeed),
+        calldata: adapter.constructorCalldata(addressSeed, devicePubkey),
+        version: 1
+      };
+      const deployRes = await account.executePaymasterTransaction([], {
+        feeMode: { mode: "sponsored" },
+        deploymentData
+      });
+      try {
+        await provider.waitForTransaction(deployRes.transaction_hash);
+      } catch (e) {
+        console.warn("[Cavos] deploy receipt wait failed:", e);
+      }
+    }
+    await registry.register({ userId: identity.userId, address, initialSigner: devicePubkey });
+    let isSigner;
+    try {
+      isSigner = await adapter.isAuthorizedSigner(address, devicePubkey);
+    } catch (e) {
+      console.warn("[Cavos] isAuthorizedSigner read failed:", e);
+      isSigner = !alreadyDeployed;
+    }
+    return new _Cavos(
+      identity,
+      address,
+      isSigner ? "ready" : "needs-device-approval",
+      account,
+      adapter,
+      devicePubkey
+    );
+  }
+  /** This device's public key (e.g. to request addition to an existing wallet). */
+  get publicKey() {
+    return this.devicePubkey;
+  }
+  /** Execute a sponsored (gasless) multicall, signed silently by the device. */
+  async execute(calls) {
+    if (this.status !== "ready") {
+      throw new Error("kit: this device is not yet an authorized signer of the wallet");
+    }
+    const res = await this.account.executePaymasterTransaction(calls, {
+      feeMode: { mode: "sponsored" }
+    });
+    return { transactionHash: res.transaction_hash };
+  }
+  /** Authorize an additional device signer (sponsored). Self-submitted. */
+  async addSigner(pubkey) {
+    return this.execute([this.adapter.buildAddSigner(this.address, pubkey)]);
+  }
+  /**
+   * Register a self-custodial backup signer derived from `code`, so the account
+   * can be recovered after the user loses every device. Idempotent: if the
+   * derived backup key is already an authorised signer, this is a no-op.
+   *
+   * The code never leaves the device — only its deterministic public key is
+   * added on-chain as an ordinary signer. Sponsor this like any other
+   * add_signer (gasless). Returns the transaction hash (or undefined when the
+   * backup was already set up).
+   */
+  async setupRecovery(code) {
+    const { publicKey: backupPubkey } = deriveBackupKey(code);
+    const already = await this.adapter.isAuthorizedSigner(this.address, backupPubkey);
+    if (already) return void 0;
+    return this.addSigner(backupPubkey);
+  }
+  /**
+   * Recover an account after losing every device signer. Derives the backup key
+   * from `code`, uses it (not the new device key) to sign an `add_signer` for
+   * the new device, and returns a ready Cavos bound to the new device. The
+   * account address is unchanged.
+   *
+   * Self-custodial: only someone holding the code (i.e. the rightful owner) can
+   * re-derive the backup key. The backend never sees the code.
+   */
+  static async recover(opts) {
+    const classHash = opts.classHash ?? DEVICE_ACCOUNT_CLASS_HASH[opts.network];
+    if (!classHash) throw new Error(`kit: no DeviceAccount class hash for ${opts.network}`);
+    const provider = new starknet.RpcProvider({
+      nodeUrl: opts.rpcUrl ?? STARKNET_NETWORKS[opts.network].rpcUrl
+    });
+    const paymaster = new starknet.PaymasterRpc({
+      nodeUrl: opts.paymasterUrl ?? CAVOS_PAYMASTER_URL[opts.network],
+      headers: { "x-paymaster-api-key": opts.paymasterApiKey }
+    });
+    const signer = opts.createSigner ? await opts.createSigner(`${opts.identity.userId}:${opts.appSalt}`) : await WebCryptoSigner.loadOrCreate({ keyId: `${opts.identity.userId}:${opts.appSalt}` });
+    const devicePubkey = await signer.getPublicKey();
+    const backup = BackupSigner.fromCode(opts.code);
+    const backupAdapter = new StarknetAdapter({ classHash, signer: backup, provider });
+    const backendUrl = opts.backendUrl ?? "https://cavos.xyz";
+    const registry = opts.registry ?? (opts.appId ? new HttpWalletRegistry({ baseUrl: backendUrl, appId: opts.appId, network: opts.network }) : defaultRegistry);
+    const existing = await registry.lookup(opts.identity.userId);
+    if (!existing) {
+      throw new Error("kit: no account found for this identity \u2014 nothing to recover");
+    }
+    const backupAccount = new starknet.Account({
+      provider,
+      address: existing.address,
+      signer: new StarknetDeviceSigner(backup),
+      paymaster,
+      cairoVersion: "1"
+    });
+    const alreadyAuthed = await backupAdapter.isAuthorizedSigner(existing.address, devicePubkey);
+    if (!alreadyAuthed) {
+      const res = await backupAccount.executePaymasterTransaction(
+        [backupAdapter.buildAddSigner(existing.address, devicePubkey)],
+        { feeMode: { mode: "sponsored" } }
+      );
+      try {
+        await provider.waitForTransaction(res.transaction_hash);
+      } catch (e) {
+        console.warn("[Cavos] recovery add_signer receipt wait failed:", e);
+      }
+    }
+    const adapter = new StarknetAdapter({ classHash, signer, provider });
+    const account = new starknet.Account({
+      provider,
+      address: existing.address,
+      signer: new StarknetDeviceSigner(signer),
+      paymaster,
+      cairoVersion: "1"
+    });
+    return new _Cavos(opts.identity, existing.address, "ready", account, adapter, devicePubkey);
+  }
+};
+var defaultRegistry = new InMemoryWalletRegistry();
+var DEVICE_REQUEST_DEDUP_MS = 5 * 60 * 1e3;
+var lastDeviceRequest = /* @__PURE__ */ new Map();
+async function isDeployed(provider, address) {
+  try {
+    const classHash = await provider.getClassHashAt(address);
+    return !!classHash && classHash !== "0x0";
+  } catch {
+    return false;
+  }
+}
+var CavosAuth = class {
+  constructor(opts = {}) {
+    this.opts = opts;
+    /** Most recent nonce sent to the backend (for the pending OAuth/OTP request). */
+    this.pendingNonce = null;
+    this.last = null;
+    this.backendUrl = opts.backendUrl ?? "https://cavos.xyz";
+  }
+  /** Redirect URL for Google login (open it; user returns to your redirectUri). */
+  async getGoogleOAuthUrl(redirectUri) {
+    return this.oauthUrl("google", redirectUri);
+  }
+  /** Redirect URL for Apple login. */
+  async getAppleOAuthUrl(redirectUri) {
+    return this.oauthUrl("apple", redirectUri);
+  }
+  async oauthUrl(provider, redirectUri) {
+    if (typeof window === "undefined") throw new Error("kit/auth: OAuth requires a browser");
+    const params = new URLSearchParams({
+      nonce: this.freshNonce(),
+      redirect_uri: redirectUri ?? window.location.href,
+      ...this.opts.appId ? { app_id: this.opts.appId } : {}
+    });
+    const { url } = await this.get(`/api/oauth/${provider}?${params}`);
+    return url;
+  }
+  /**
+   * Resolve the identity from an OAuth callback. The auth data is carried in the
+   * `auth_data` (or `zk_auth_data`) query param on return. We only extract `sub`.
+   */
+  async handleCallback(authDataOrSearch) {
+    const authData = extractAuthData(authDataOrSearch);
+    return this.identityFromAuthData(authData, "oauth");
+  }
+  /** Send a one-time code to an email (Firebase OTP). */
+  async sendOtp(email) {
+    await this.post("/api/oauth/firebase/otp/request", {
+      email,
+      nonce: this.freshNonce(),
+      ...this.opts.appId ? { app_id: this.opts.appId } : {}
+    });
+  }
+  /** Send a passwordless magic-link sign-in email (Firebase). */
+  async sendMagicLink(email) {
+    await this.post("/api/oauth/firebase/magic-link", {
+      email,
+      nonce: this.freshNonce(),
+      ...this.opts.appId ? { app_id: this.opts.appId } : {},
+      ...typeof window !== "undefined" ? { redirect_uri: window.location.href } : {}
+    });
+  }
+  /** Verify the OTP and resolve the identity. */
+  async verifyOtp(email, code) {
+    const res = await this.post("/api/oauth/firebase/otp/verify", {
+      email,
+      code,
+      nonce: this.consumeNonce(),
+      ...this.opts.appId ? { app_id: this.opts.appId } : {}
+    });
+    return this.identityFromAuthData(res.id_token ?? res.jwt ?? res.token ?? JSON.stringify(res), "otp", email);
+  }
+  /** AuthProvider: returns the identity resolved by the last login step. */
+  async authenticate() {
+    if (!this.last) throw new Error("kit/auth: no identity yet \u2014 complete a login first");
+    return this.last;
+  }
+  // ── internals ──────────────────────────────────────────────────────────────
+  /**
+   * Build an `Identity` from whatever the backend returned. The Cavos backend
+   * wraps the user id in a JWT (its `sub` claim); for the device model we only
+   * need that stable id — the signature is never checked on-chain.
+   */
+  async identityFromAuthData(authData, provider, emailOverride) {
+    let token = authData;
+    try {
+      const parsed = JSON.parse(authData);
+      token = parsed.id_token ?? parsed.jwt ?? parsed.token ?? authData;
+    } catch {
+    }
+    const claims = parseJwt(token);
+    return this.remember({
+      userId: String(claims.sub ?? claims.user_id ?? claims.uid),
+      email: claims.email ?? emailOverride,
+      provider: claims.firebase?.sign_in_provider ?? claims.provider ?? provider
+    });
+  }
+  /** Generate (and remember) the nonce the Cavos backend expects on requests. */
+  freshNonce() {
+    const bytes = crypto.getRandomValues(new Uint8Array(31));
+    const h = starknet.hash.computePoseidonHashOnElements([bytesToChunks(bytes)]);
+    this.pendingNonce = starknet.num.toHex(h);
+    return this.pendingNonce;
+  }
+  /** Return the pending nonce (for the verify step), clearing it. */
+  consumeNonce() {
+    if (!this.pendingNonce) return this.freshNonce();
+    const n = this.pendingNonce;
+    this.pendingNonce = null;
+    return n;
+  }
+  remember(id) {
+    this.last = id;
+    return id;
+  }
+  async get(path) {
+    const r = await fetch(`${this.backendUrl}${path}`);
+    if (!r.ok) throw new Error(`kit/auth: ${path} -> ${r.status} ${await r.text()}`);
+    return r.json();
+  }
+  async post(path, body) {
+    const r = await fetch(`${this.backendUrl}${path}`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(body)
+    });
+    if (!r.ok) throw new Error(`kit/auth: ${path} -> ${r.status} ${await r.text()}`);
+    return r.json();
+  }
+};
+function extractAuthData(input) {
+  if (input.includes("auth_data=") || input.includes("zk_auth_data=")) {
+    const params = new URLSearchParams(input.startsWith("?") ? input : `?${input}`);
+    return params.get("auth_data") ?? params.get("zk_auth_data") ?? input;
+  }
+  return input;
+}
+function parseJwt(jwt) {
+  const part = jwt.split(".")[1];
+  if (!part) throw new Error("kit/auth: malformed JWT");
+  const json = atob(part.replace(/-/g, "+").replace(/_/g, "/"));
+  return JSON.parse(json);
+}
+function bytesToChunks(bytes) {
+  let w = 0n;
+  for (const b of bytes.subarray(0, 31)) w = w << 8n | BigInt(b);
+  return w;
+}
+var cavosLogoBase64 = "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";
+var STYLE_ID = "cavos-modal-styles-v2";
+function injectStyles() {
+  if (typeof document === "undefined") return;
+  if (document.getElementById(STYLE_ID)) return;
+  const el = document.createElement("style");
+  el.id = STYLE_ID;
+  el.textContent = `
+    @keyframes cavos-fade { from { opacity:0; } to { opacity:1; } }
+    @keyframes cavos-up {
+      from { opacity:0; transform:translateY(12px) scale(0.985); }
+      to   { opacity:1; transform:translateY(0)    scale(1);     }
+    }
+    @keyframes cavos-sheet {
+      from { transform:translateY(100%); }
+      to   { transform:translateY(0); }
+    }
+    @keyframes cavos-spin {
+      from { transform:rotate(0deg); } to { transform:rotate(360deg); }
+    }
+    @keyframes cavos-pop {
+      0%   { transform:scale(0.5);  opacity:0; }
+      60%  { transform:scale(1.12); opacity:1; }
+      100% { transform:scale(1);    opacity:1; }
+    }
+    @keyframes cavos-check-draw {
+      from { stroke-dashoffset: 30; }
+      to   { stroke-dashoffset: 0;  }
+    }
+    @keyframes cavos-ring-glow {
+      0%,100% { box-shadow: 0 0 0 0 rgba(34,197,94,0.4); }
+      50%      { box-shadow: 0 0 0 10px rgba(34,197,94,0); }
+    }
+    .cavos-check-circle {
+      animation: cavos-pop 0.45s cubic-bezier(.22,1,.36,1) forwards;
+    }
+    .cavos-check-path {
+      stroke-dasharray: 30;
+      stroke-dashoffset: 30;
+      animation: cavos-check-draw 0.35s 0.2s cubic-bezier(.22,1,.36,1) forwards;
+    }
+    .cavos-input-inner:focus { outline:none; }
+    .cavos-provider:active { transform:scale(0.99); }
+    .cavos-primary-btn:active { transform:scale(0.98); }
+    .cavos-otp-input {
+      width: 100%;
+      text-align: center;
+      font-size: 22px;
+      font-weight: 600;
+      background: transparent;
+      border: none;
+      outline: none;
+      color: inherit;
+      font-family: inherit;
+      caret-color: transparent;
+    }
+    .cavos-otp-box {
+      transition: border-color 0.15s, box-shadow 0.15s, transform 0.1s;
+    }
+    .cavos-otp-box-filled {
+      transform: scale(1.04);
+    }
+    .cavos-divider-line {
+      flex: 1;
+      height: 1px;
+    }
+    /* Theme-aware interaction styles. The overlay carries data-cavos-theme so
+       hovers/focus rings stay legible in both light and dark \u2014 the previous
+       rgba(0,0,0,\u2026) rules disappeared against the dark background. */
+    [data-cavos-theme="light"] .cavos-input-row:focus-within {
+      border-color: rgba(0,0,0,0.35) !important;
+      box-shadow: 0 0 0 3px rgba(0,0,0,0.06) !important;
+    }
+    [data-cavos-theme="dark"] .cavos-input-row:focus-within {
+      border-color: rgba(255,255,255,0.45) !important;
+      box-shadow: 0 0 0 3px rgba(255,255,255,0.08) !important;
+    }
+    [data-cavos-theme="light"] .cavos-provider:hover { background: rgba(0,0,0,0.035) !important; }
+    [data-cavos-theme="dark"]  .cavos-provider:hover { background: rgba(255,255,255,0.07) !important; }
+    [data-cavos-theme="light"] .cavos-close:hover { background: rgba(0,0,0,0.05) !important; }
+    [data-cavos-theme="dark"]  .cavos-close:hover { background: rgba(255,255,255,0.08) !important; }
+    [data-cavos-theme="light"] .cavos-sub-btn:hover { color: rgba(0,0,0,0.6) !important; }
+    [data-cavos-theme="dark"]  .cavos-sub-btn:hover { color: rgba(255,255,255,0.65) !important; }
+    [data-cavos-theme="light"] .cavos-submit-btn:hover { color: rgba(0,0,0,0.8) !important; }
+    [data-cavos-theme="dark"]  .cavos-submit-btn:hover { color: rgba(255,255,255,0.85) !important; }
+    [data-cavos-theme="light"] .cavos-primary-btn:hover { opacity: 0.88; }
+    [data-cavos-theme="dark"]  .cavos-primary-btn:hover { opacity: 0.9; }
+    [data-cavos-theme="light"] .cavos-divider-line { background: rgba(0,0,0,0.08); }
+    [data-cavos-theme="dark"]  .cavos-divider-line { background: rgba(255,255,255,0.1); }
+  `;
+  document.head.appendChild(el);
+}
+var GoogleIcon = () => /* @__PURE__ */ jsxRuntime.jsxs("svg", { width: "18", height: "18", viewBox: "0 0 18 18", fill: "none", children: [
+  /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M17.64 9.2c0-.637-.057-1.251-.164-1.84H9v3.481h4.844c-.209 1.125-.843 2.078-1.796 2.717v2.258h2.908c1.702-1.567 2.684-3.875 2.684-6.615z", fill: "#4285F4" }),
+  /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M9 18c2.43 0 4.467-.806 5.956-2.184l-2.908-2.258c-.806.54-1.837.86-3.048.86-2.344 0-4.328-1.584-5.036-3.711H.957v2.332A8.997 8.997 0 009 18z", fill: "#34A853" }),
+  /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M3.964 10.707A5.41 5.41 0 013.682 9c0-.593.102-1.17.282-1.707V4.961H.957A8.996 8.996 0 000 9c0 1.452.348 2.827.957 4.039l3.007-2.332z", fill: "#FBBC05" }),
+  /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M9 3.58c1.321 0 2.508.454 3.44 1.345l2.582-2.58C13.463.891 11.426 0 9 0A8.997 8.997 0 00.957 4.961L3.964 7.293C4.672 5.163 6.656 3.58 9 3.58z", fill: "#EA4335" })
+] });
+var AppleIcon = () => /* @__PURE__ */ jsxRuntime.jsx("svg", { width: "16", height: "16", viewBox: "0 0 814 1000", fill: "currentColor", children: /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M788.1 340.9c-5.8 4.5-108.2 62.2-108.2 190.5 0 148.4 130.3 200.9 134.2 202.2-.6 3.2-20.7 71.9-68.7 141.9-42.8 61.6-87.5 123.1-155.5 123.1s-85.5-39.5-164-39.5c-76 0-103.7 40.8-165.9 40.8s-105-57.8-155.5-127.4C46 790.7 0 663 0 541.8c0-194.3 126.4-297.5 250.8-297.5 66.1 0 121.2 43.4 162.7 43.4 39.5 0 101.1-46 176.3-46 28.5 0 130.9 2.6 198.3 99.2zm-234-181.5c31.1-36.9 53.1-88.1 53.1-139.3 0-7.1-.6-14.3-1.9-20.1-50.6 1.9-110.8 33.7-147.1 75.8-28.5 32.4-55.1 83.6-55.1 135.5 0 7.8 1.3 15.6 1.9 18.1 3.2.6 8.4 1.3 13.6 1.3 45.4 0 102.5-30.4 135.5-71.3z" }) });
+var EmailIcon = () => /* @__PURE__ */ jsxRuntime.jsxs("svg", { width: "16", height: "16", viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", strokeWidth: "1.8", strokeLinecap: "round", strokeLinejoin: "round", children: [
+  /* @__PURE__ */ jsxRuntime.jsx("rect", { x: "2", y: "4", width: "20", height: "16", rx: "2" }),
+  /* @__PURE__ */ jsxRuntime.jsx("path", { d: "m22 7-8.97 5.7a1.94 1.94 0 01-2.06 0L2 7" })
+] });
+var CavosLogo = ({ invert }) => /* @__PURE__ */ jsxRuntime.jsx("img", { src: `data:image/png;base64,${cavosLogoBase64}`, alt: "Cavos", style: { width: "auto", height: "16px", objectFit: "contain", opacity: 0.55, flexShrink: 0, filter: invert ? "invert(1)" : "none" } });
+function Spinner({ size = 16, color = "#888" }) {
+  return /* @__PURE__ */ jsxRuntime.jsxs(
+    "svg",
+    {
+      width: size,
+      height: size,
+      viewBox: "0 0 24 24",
+      fill: "none",
+      style: { animation: "cavos-spin 0.75s linear infinite", flexShrink: 0 },
+      children: [
+        /* @__PURE__ */ jsxRuntime.jsx("circle", { cx: "12", cy: "12", r: "10", stroke: color, strokeOpacity: "0.2", strokeWidth: "2.5" }),
+        /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M12 2a10 10 0 0110 10", stroke: color, strokeWidth: "2.5", strokeLinecap: "round" })
+      ]
+    }
+  );
+}
+function useIsMobile() {
+  const [isMobile, setIsMobile] = react.useState(false);
+  react.useEffect(() => {
+    const mq = window.matchMedia("(max-width: 640px)");
+    setIsMobile(mq.matches);
+    const handler = (e) => setIsMobile(e.matches);
+    mq.addEventListener("change", handler);
+    return () => mq.removeEventListener("change", handler);
+  }, []);
+  return isMobile;
+}
+var FONT = '-apple-system, BlinkMacSystemFont, "Segoe UI", system-ui, sans-serif';
+function baseOverlay(isMobile) {
+  return {
+    position: "fixed",
+    inset: 0,
+    background: "rgba(0,0,0,0.5)",
+    backdropFilter: "blur(10px)",
+    WebkitBackdropFilter: "blur(10px)",
+    zIndex: 9999,
+    display: "flex",
+    alignItems: isMobile ? "flex-end" : "center",
+    justifyContent: "center",
+    padding: isMobile ? "0" : "16px",
+    animation: "cavos-fade 0.18s ease",
+    fontFamily: FONT
+  };
+}
+function lightCard(isMobile, bg) {
+  return isMobile ? {
+    background: bg,
+    borderRadius: "20px 20px 0 0",
+    width: "100%",
+    maxWidth: "100%",
+    boxShadow: "0 -8px 40px rgba(0,0,0,0.18)",
+    animation: "cavos-sheet 0.32s cubic-bezier(0.22,1,0.36,1)",
+    overflow: "hidden"
+  } : {
+    background: bg,
+    borderRadius: "22px",
+    width: "100%",
+    maxWidth: "400px",
+    boxShadow: "0 24px 60px rgba(0,0,0,0.22), 0 0 0 1px rgba(0,0,0,0.05)",
+    animation: "cavos-up 0.25s cubic-bezier(0.22,1,0.36,1)",
+    overflow: "hidden"
+  };
+}
+function providerBtn(textColor) {
+  const isLight = textColor === "#111111" || textColor === "#111";
+  return {
+    width: "100%",
+    display: "flex",
+    alignItems: "center",
+    justifyContent: "center",
+    gap: "10px",
+    padding: "12px 16px",
+    background: isLight ? "#fff" : "rgba(255,255,255,0.04)",
+    border: `1px solid ${isLight ? "rgba(0,0,0,0.12)" : "rgba(255,255,255,0.12)"}`,
+    borderRadius: "12px",
+    cursor: "pointer",
+    fontSize: "14px",
+    fontWeight: 500,
+    color: textColor,
+    fontFamily: "inherit",
+    transition: "background 0.15s, transform 0.1s, border-color 0.15s",
+    position: "relative"
+  };
+}
+function footerBar(textColor) {
+  const isLight = textColor === "#111111" || textColor === "#111";
+  return {
+    borderTop: `1px solid ${isLight ? "rgba(0,0,0,0.06)" : "rgba(255,255,255,0.06)"}`,
+    padding: "12px 20px",
+    display: "flex",
+    alignItems: "center",
+    justifyContent: "center",
+    gap: "5px",
+    fontSize: "11px",
+    color: isLight ? "rgba(0,0,0,0.28)" : "rgba(255,255,255,0.28)"
+  };
+}
+function closeBtn(textColor) {
+  return {
+    position: "absolute",
+    top: "16px",
+    right: "16px",
+    width: "28px",
+    height: "28px",
+    borderRadius: "50%",
+    border: "none",
+    background: "transparent",
+    cursor: "pointer",
+    display: "flex",
+    alignItems: "center",
+    justifyContent: "center",
+    color: textColor === "#111111" || textColor === "#111" ? "rgba(0,0,0,0.3)" : "rgba(255,255,255,0.4)",
+    padding: 0,
+    transition: "background 0.15s"
+  };
+}
+function mobileHandle() {
+  return {
+    width: "36px",
+    height: "4px",
+    borderRadius: "2px",
+    background: "rgba(0,0,0,0.15)",
+    margin: "12px auto 0"
+  };
+}
+var CloseX = () => /* @__PURE__ */ jsxRuntime.jsxs("svg", { width: "12", height: "12", viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", strokeWidth: "2.5", strokeLinecap: "round", children: [
+  /* @__PURE__ */ jsxRuntime.jsx("line", { x1: "18", y1: "6", x2: "6", y2: "18" }),
+  /* @__PURE__ */ jsxRuntime.jsx("line", { x1: "6", y1: "6", x2: "18", y2: "18" })
+] });
+function CavosAuthModal({
+  open,
+  onClose,
+  appName,
+  providers = ["google", "apple", "email"],
+  emailMode = "magic-link",
+  primaryColor = "#0A0908",
+  theme = "light"
+}) {
+  const {
+    login,
+    sendMagicLink,
+    sendOtp,
+    verifyOtp,
+    isAuthenticated,
+    address,
+    walletStatus,
+    authError,
+    clearAuthError,
+    resendDeviceApproval,
+    recover
+  } = useCavos();
+  const isMobile = useIsMobile();
+  const isLight = theme !== "dark";
+  const backgroundColor = isLight ? "#ffffff" : "#111111";
+  const textColor = isLight ? "#111111" : "#ffffff";
+  const subTextColor = isLight ? "rgba(0,0,0,0.4)" : "rgba(255,255,255,0.4)";
+  const inputBg = isLight ? "#fff" : "rgba(255,255,255,0.06)";
+  const inputBorder = isLight ? "1px solid rgba(0,0,0,0.12)" : "1px solid rgba(255,255,255,0.12)";
+  const errBg = isLight ? "rgba(239,68,68,0.06)" : "rgba(239,68,68,0.08)";
+  const errColor = isLight ? "#dc2626" : "#f87171";
+  const errBorder = isLight ? "rgba(239,68,68,0.18)" : "rgba(239,68,68,0.2)";
+  const card = lightCard(isMobile, backgroundColor);
+  const overlay = baseOverlay(isMobile);
+  const handle = mobileHandle();
+  const footer = footerBar(textColor);
+  const close = closeBtn(textColor);
+  const pBtn = providerBtn(textColor);
+  const [screen, setScreen] = react.useState("select");
+  const [email, setEmail] = react.useState("");
+  const [otpCode, setOtpCode] = react.useState("");
+  const [error, setError] = react.useState("");
+  const [busy, setBusy] = react.useState(false);
+  const [deployState, setDeployState] = react.useState("loading");
+  const [resendCountdown, setResendCountdown] = react.useState(0);
+  const [deviceResendBusy, setDeviceResendBusy] = react.useState(false);
+  const [recoverCode, setRecoverCode] = react.useState("");
+  const [recoverBusy, setRecoverBusy] = react.useState(false);
+  const doneHandledRef = react.useRef(false);
+  const closeTimerRef = react.useRef(null);
+  const otpBoxRefs = react.useRef([null, null, null, null, null, null]);
+  const setOtpDigit = (i, raw) => {
+    const digit = raw.replace(/\D/g, "").slice(-1);
+    setOtpCode((prev) => {
+      const chars = prev.split("");
+      while (chars.length < 6) chars.push("");
+      chars[i] = digit;
+      const next = chars.join("").slice(0, 6);
+      if (digit && i < 5) {
+        const target = i + 1;
+        otpBoxRefs.current[target]?.focus();
+      }
+      return next;
+    });
+  };
+  const onOtpKeyDown = (i, e) => {
+    if (e.key === "Backspace" && !otpCode[i] && i > 0) {
+      otpBoxRefs.current[i - 1]?.focus();
+      e.preventDefault();
+    } else if (e.key === "ArrowLeft" && i > 0) {
+      otpBoxRefs.current[i - 1]?.focus();
+      e.preventDefault();
+    } else if (e.key === "ArrowRight" && i < 5) {
+      otpBoxRefs.current[i + 1]?.focus();
+      e.preventDefault();
+    }
+  };
+  const onOtpPaste = (e) => {
+    const text = e.clipboardData.getData("text").replace(/\D/g, "").slice(0, 6);
+    if (!text) return;
+    e.preventDefault();
+    setOtpCode(text);
+    const focusIdx = Math.min(text.length, 5);
+    otpBoxRefs.current[focusIdx]?.focus();
+  };
+  react.useEffect(() => {
+    injectStyles();
+  }, []);
+  react.useEffect(() => {
+    if (!authError) return;
+    setBusy(false);
+    setDeployState("loading");
+    if (screen !== "device-approval") setScreen("select");
+    setError(authError);
+    clearAuthError();
+  }, [authError, clearAuthError, screen]);
+  const triggerDone = react.useCallback((addr) => {
+    if (doneHandledRef.current) return;
+    doneHandledRef.current = true;
+    setScreen("deploying");
+    setDeployState("done");
+    closeTimerRef.current = setTimeout(() => {
+      onClose();
+      setScreen("select");
+      setDeployState("loading");
+      setEmail("");
+      setOtpCode("");
+      setError("");
+      doneHandledRef.current = false;
+    }, 1600);
+  }, [onClose]);
+  react.useEffect(() => {
+    if (!open) return;
+    if (walletStatus.isDeploying && screen !== "deploying" && screen !== "verify") {
+      setScreen("deploying");
+      setDeployState("loading");
+      doneHandledRef.current = false;
+    }
+    if (isAuthenticated && address && walletStatus.isReady) {
+      triggerDone(address);
+    }
+    if (walletStatus.awaitingApproval && screen !== "device-approval" && screen !== "recover") {
+      setScreen("device-approval");
+      doneHandledRef.current = false;
+    }
+  }, [open, isAuthenticated, address, walletStatus.isReady, walletStatus.isDeploying, walletStatus.awaitingApproval, screen, triggerDone]);
+  react.useEffect(() => () => {
+    if (closeTimerRef.current) clearTimeout(closeTimerRef.current);
+  }, []);
+  const handleClose = () => {
+    if (screen === "deploying") return;
+    setScreen("select");
+    setEmail("");
+    setOtpCode("");
+    setError("");
+    doneHandledRef.current = false;
+    onClose();
+  };
+  const handleOAuth = async (provider) => {
+    setError("");
+    setBusy(true);
+    try {
+      await login(provider);
+    } catch (e) {
+      const msg = e instanceof Error ? e.message : "Authentication failed.";
+      setError(msg);
+      setBusy(false);
+    }
+  };
+  const handleMagicLinkSubmit = async (e) => {
+    e.preventDefault();
+    if (!email) return;
+    setError("");
+    setBusy(true);
+    try {
+      await sendMagicLink(email);
+      setScreen("verify");
+      setResendCountdown(60);
+    } catch (e2) {
+      setError(e2 instanceof Error ? e2.message : "Failed to send magic link.");
+    } finally {
+      setBusy(false);
+    }
+  };
+  const handleOtpRequestSubmit = async (e) => {
+    e.preventDefault();
+    if (!email) return;
+    setError("");
+    setBusy(true);
+    try {
+      await sendOtp(email);
+      setOtpCode("");
+      setScreen("otp-code");
+      setResendCountdown(60);
+    } catch (e2) {
+      setError(e2 instanceof Error ? e2.message : "Failed to send code.");
+    } finally {
+      setBusy(false);
+    }
+  };
+  const handleOtpVerifySubmit = async (e) => {
+    e.preventDefault();
+    if (!email || otpCode.length !== 6) return;
+    setError("");
+    setBusy(true);
+    try {
+      await verifyOtp(email, otpCode);
+      setScreen("deploying");
+      setDeployState("loading");
+    } catch (e2) {
+      setError(e2 instanceof Error ? e2.message : "Invalid or expired code.");
+      setBusy(false);
+    }
+  };
+  const handleResend = async () => {
+    if (resendCountdown > 0) return;
+    setError("");
+    try {
+      if (emailMode === "otp") {
+        await sendOtp(email);
+        setOtpCode("");
+      } else {
+        await sendMagicLink(email);
+      }
+      setResendCountdown(60);
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Failed to resend.");
+    }
+  };
+  react.useEffect(() => {
+    if (resendCountdown <= 0) return;
+    const t = setTimeout(() => setResendCountdown((c) => c - 1), 1e3);
+    return () => clearTimeout(t);
+  }, [resendCountdown]);
+  if (!open) return null;
+  const handleDeviceResend = async () => {
+    if (resendCountdown > 0 || deviceResendBusy) return;
+    setDeviceResendBusy(true);
+    setError("");
+    try {
+      await resendDeviceApproval();
+      setResendCountdown(60);
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Failed to resend. Try again.");
+    } finally {
+      setDeviceResendBusy(false);
+    }
+  };
+  if (screen === "device-approval") {
+    const expired = walletStatus.awaitingApproval && !walletStatus.pendingRequestId;
+    return /* @__PURE__ */ jsxRuntime.jsx("div", { style: overlay, "data-cavos-theme": theme, role: "dialog", "aria-modal": true, children: /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { ...card, position: "relative" }, children: [
+      isMobile && /* @__PURE__ */ jsxRuntime.jsx("div", { style: handle }),
+      /* @__PURE__ */ jsxRuntime.jsx("button", { className: "cavos-close", style: close, onClick: handleClose, "aria-label": "Close", children: /* @__PURE__ */ jsxRuntime.jsx(CloseX, {}) }),
+      /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { padding: isMobile ? "28px 24px 32px" : "48px 24px 32px", textAlign: "center" }, children: [
+        /* @__PURE__ */ jsxRuntime.jsx("div", { style: { width: 48, height: 48, borderRadius: "50%", margin: "0 auto 16px", background: expired ? "rgba(239,68,68,0.08)" : "rgba(59,130,246,0.08)", border: `1px solid ${expired ? "rgba(239,68,68,0.18)" : "rgba(59,130,246,0.18)"}`, display: "flex", alignItems: "center", justifyContent: "center" }, children: /* @__PURE__ */ jsxRuntime.jsxs("svg", { width: "20", height: "20", viewBox: "0 0 24 24", fill: "none", stroke: expired ? "#dc2626" : "#3b82f6", strokeWidth: "2", strokeLinecap: "round", strokeLinejoin: "round", children: [
+          /* @__PURE__ */ jsxRuntime.jsx("rect", { x: "5", y: "2", width: "14", height: "20", rx: "2.5" }),
+          /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M12 18h.01" })
+        ] }) }),
+        /* @__PURE__ */ jsxRuntime.jsx("h2", { style: { margin: "0 0 8px", fontSize: "17px", fontWeight: 600, color: textColor, letterSpacing: "-0.02em" }, children: expired ? "Approval link expired" : "Approve this device" }),
+        /* @__PURE__ */ jsxRuntime.jsx("p", { style: { margin: "0 0 20px", fontSize: "13px", color: subTextColor, lineHeight: 1.55 }, children: expired ? "The approval link is no longer valid. Request a new one below." : /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+          "For your security, we sent an email to approve this device.",
+          appName ? /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+            " Open it on a device where you're already signed in to your ",
+            appName,
+            " account."
+          ] }) : null
+        ] }) }),
+        error && /* @__PURE__ */ jsxRuntime.jsx("div", { style: { background: errBg, border: `1px solid ${errBorder}`, borderRadius: "10px", padding: "9px 13px", fontSize: "13px", color: errColor, marginBottom: "14px" }, children: error }),
+        expired ? /* @__PURE__ */ jsxRuntime.jsxs("button", { className: "cavos-primary-btn", style: { width: "100%", padding: "12px", borderRadius: "12px", border: "none", background: primaryColor, color: "#fff", fontSize: "14px", fontWeight: 500, cursor: "pointer", fontFamily: "inherit", display: "flex", alignItems: "center", justifyContent: "center", gap: "8px", opacity: deviceResendBusy ? 0.65 : 1 }, onClick: handleDeviceResend, disabled: deviceResendBusy, children: [
+          deviceResendBusy && /* @__PURE__ */ jsxRuntime.jsx(Spinner, { size: 15, color: "#fff" }),
+          deviceResendBusy ? "Sending\u2026" : "Request a new link"
+        ] }) : /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { background: isLight ? "rgba(0,0,0,0.03)" : "rgba(255,255,255,0.04)", border: `1px solid ${isLight ? "rgba(0,0,0,0.06)" : "rgba(255,255,255,0.06)"}`, borderRadius: "12px", padding: "14px 16px", display: "flex", alignItems: "center", gap: 10, justifyContent: "center", marginBottom: "14px" }, children: [
+          /* @__PURE__ */ jsxRuntime.jsx(Spinner, { size: 14, color: subTextColor }),
+          /* @__PURE__ */ jsxRuntime.jsx("span", { style: { fontSize: "12px", color: subTextColor }, children: "Waiting for approval\u2026" })
+        ] }),
+        !expired && /* @__PURE__ */ jsxRuntime.jsx("button", { className: "cavos-sub-btn", style: { background: "none", border: "none", cursor: resendCountdown > 0 ? "default" : "pointer", fontSize: "13px", color: subTextColor, width: "100%", textAlign: "center", padding: 0, fontFamily: "inherit", transition: "color 0.15s", opacity: resendCountdown > 0 ? 0.6 : 1 }, onClick: handleDeviceResend, disabled: resendCountdown > 0 || deviceResendBusy, children: resendCountdown > 0 ? `Resend email in ${resendCountdown}s` : "Resend approval email" }),
+        /* @__PURE__ */ jsxRuntime.jsx("button", { className: "cavos-sub-btn", style: { background: "none", border: "none", cursor: "pointer", fontSize: "13px", color: subTextColor, width: "100%", textAlign: "center", padding: "14px 0 0", fontFamily: "inherit", transition: "color 0.15s" }, onClick: () => {
+          setScreen("recover");
+          setError("");
+        }, children: "Sign in with recovery phrase instead" })
+      ] }),
+      /* @__PURE__ */ jsxRuntime.jsxs("div", { style: footer, children: [
+        /* @__PURE__ */ jsxRuntime.jsx(CavosLogo, { invert: !isLight }),
+        /* @__PURE__ */ jsxRuntime.jsx("span", { children: "Secured by Cavos" })
+      ] })
+    ] }) });
+  }
+  const handleRecoverSubmit = async (e) => {
+    e.preventDefault();
+    if (!recoverCode.trim()) return;
+    setRecoverBusy(true);
+    setError("");
+    try {
+      await recover(recoverCode);
+      setScreen("deploying");
+      setDeployState("loading");
+    } catch (e2) {
+      setError(e2 instanceof Error ? e2.message : "Sign-in failed. Check your recovery phrase and try again.");
+      setRecoverBusy(false);
+    }
+  };
+  if (screen === "recover") {
+    return /* @__PURE__ */ jsxRuntime.jsx("div", { style: overlay, "data-cavos-theme": theme, role: "dialog", "aria-modal": true, onClick: (e) => {
+      if (e.target === e.currentTarget) handleClose();
+    }, children: /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { ...card, position: "relative" }, children: [
+      isMobile && /* @__PURE__ */ jsxRuntime.jsx("div", { style: handle }),
+      /* @__PURE__ */ jsxRuntime.jsx("button", { className: "cavos-close", style: { ...close, left: "16px", right: "auto" }, onClick: () => {
+        setScreen("device-approval");
+        setError("");
+        setRecoverCode("");
+      }, "aria-label": "Back", children: /* @__PURE__ */ jsxRuntime.jsx("svg", { width: "14", height: "14", viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", strokeWidth: "2.5", strokeLinecap: "round", strokeLinejoin: "round", children: /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M19 12H5M12 5l-7 7 7 7" }) }) }),
+      /* @__PURE__ */ jsxRuntime.jsx("button", { className: "cavos-close", style: close, onClick: handleClose, "aria-label": "Close", children: /* @__PURE__ */ jsxRuntime.jsx(CloseX, {}) }),
+      /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { padding: isMobile ? "28px 22px 32px" : "52px 22px 22px" }, children: [
+        /* @__PURE__ */ jsxRuntime.jsx("h2", { style: { margin: "0 0 6px", fontSize: "17px", fontWeight: 600, color: textColor, letterSpacing: "-0.02em", textAlign: "center" }, children: "Sign in with recovery phrase" }),
+        /* @__PURE__ */ jsxRuntime.jsx("p", { style: { margin: "0 0 20px", fontSize: "13px", color: subTextColor, textAlign: "center", lineHeight: 1.5 }, children: "Enter the recovery phrase you saved when you set up this account." }),
+        error && /* @__PURE__ */ jsxRuntime.jsx("div", { style: { background: errBg, border: `1px solid ${errBorder}`, borderRadius: "10px", padding: "10px 14px", fontSize: "13px", color: errColor, marginBottom: "14px" }, children: error }),
+        /* @__PURE__ */ jsxRuntime.jsxs("form", { onSubmit: handleRecoverSubmit, style: { display: "flex", flexDirection: "column", gap: "10px" }, children: [
+          /* @__PURE__ */ jsxRuntime.jsx(
+            "textarea",
+            {
+              className: "cavos-input-inner",
+              style: { width: "100%", padding: "12px 14px", border: inputBorder, borderRadius: "12px", fontSize: "14px", color: textColor, background: inputBg, fontFamily: "inherit", boxSizing: "border-box", resize: "vertical", minHeight: 72, lineHeight: 1.5 },
+              placeholder: "Enter your recovery phrase",
+              value: recoverCode,
+              onChange: (e) => setRecoverCode(e.target.value),
+              required: true,
+              disabled: recoverBusy,
+              autoFocus: true
+            }
+          ),
+          /* @__PURE__ */ jsxRuntime.jsxs("button", { type: "submit", className: "cavos-primary-btn", style: { width: "100%", padding: "12px", marginTop: "4px", borderRadius: "12px", border: "none", background: primaryColor, color: "#fff", fontSize: "14px", fontWeight: 500, cursor: "pointer", fontFamily: "inherit", display: "flex", alignItems: "center", justifyContent: "center", gap: "8px", transition: "opacity 0.15s, transform 0.1s", opacity: recoverBusy ? 0.65 : 1 }, disabled: recoverBusy, children: [
+            recoverBusy && /* @__PURE__ */ jsxRuntime.jsx(Spinner, { size: 15, color: "#fff" }),
+            recoverBusy ? "Restoring access\u2026" : "Restore access"
+          ] })
+        ] })
+      ] }),
+      /* @__PURE__ */ jsxRuntime.jsxs("div", { style: footer, children: [
+        /* @__PURE__ */ jsxRuntime.jsx(CavosLogo, { invert: !isLight }),
+        /* @__PURE__ */ jsxRuntime.jsx("span", { children: "Secured by Cavos" })
+      ] })
+    ] }) });
+  }
+  if (screen === "deploying") {
+    const isDone = deployState === "done";
+    return /* @__PURE__ */ jsxRuntime.jsx("div", { style: overlay, "data-cavos-theme": theme, role: "dialog", "aria-modal": true, children: /* @__PURE__ */ jsxRuntime.jsxs("div", { style: card, children: [
+      isMobile && /* @__PURE__ */ jsxRuntime.jsx("div", { style: handle }),
+      /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { padding: "52px 28px 44px", display: "flex", flexDirection: "column", alignItems: "center", textAlign: "center", gap: "16px" }, children: [
+        isDone ? /* @__PURE__ */ jsxRuntime.jsx("div", { className: "cavos-check-circle", style: { width: 64, height: 64, borderRadius: "50%", background: "rgba(34,197,94,0.12)", border: "1.5px solid rgba(34,197,94,0.35)", display: "flex", alignItems: "center", justifyContent: "center", animation: "cavos-ring-glow 1.5s ease-out" }, children: /* @__PURE__ */ jsxRuntime.jsx("svg", { width: "28", height: "28", viewBox: "0 0 24 24", fill: "none", children: /* @__PURE__ */ jsxRuntime.jsx("polyline", { className: "cavos-check-path", points: "20 6 9 17 4 12", stroke: "#22c55e", strokeWidth: "2.2", strokeLinecap: "round", strokeLinejoin: "round" }) }) }) : /* @__PURE__ */ jsxRuntime.jsx("div", { style: { width: 64, height: 64, borderRadius: "50%", background: isLight ? "rgba(0,0,0,0.04)" : "rgba(255,255,255,0.04)", border: `1.5px solid ${isLight ? "rgba(0,0,0,0.08)" : "rgba(255,255,255,0.08)"}`, display: "flex", alignItems: "center", justifyContent: "center" }, children: /* @__PURE__ */ jsxRuntime.jsx(Spinner, { size: 26, color: isLight ? "rgba(0,0,0,0.4)" : "rgba(255,255,255,0.6)" }) }),
+        /* @__PURE__ */ jsxRuntime.jsxs("div", { children: [
+          /* @__PURE__ */ jsxRuntime.jsx("h2", { style: { margin: 0, fontSize: "17px", fontWeight: 600, color: textColor, letterSpacing: "-0.02em" }, children: isDone ? "You're all set" : "Setting up your account" }),
+          /* @__PURE__ */ jsxRuntime.jsx("p", { style: { margin: "6px 0 0", fontSize: "13px", color: subTextColor }, children: isDone ? "Your account is ready" : "This only takes a moment\u2026" })
+        ] })
+      ] }),
+      /* @__PURE__ */ jsxRuntime.jsxs("div", { style: footer, children: [
+        /* @__PURE__ */ jsxRuntime.jsx(CavosLogo, { invert: !isLight }),
+        /* @__PURE__ */ jsxRuntime.jsx("span", { children: "Secured by Cavos" })
+      ] })
+    ] }) });
+  }
+  if (screen === "verify") {
+    return /* @__PURE__ */ jsxRuntime.jsx("div", { style: overlay, "data-cavos-theme": theme, role: "dialog", "aria-modal": true, onClick: (e) => {
+      if (e.target === e.currentTarget) handleClose();
+    }, children: /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { ...card, position: "relative" }, children: [
+      isMobile && /* @__PURE__ */ jsxRuntime.jsx("div", { style: handle }),
+      /* @__PURE__ */ jsxRuntime.jsx("button", { className: "cavos-close", style: close, onClick: handleClose, "aria-label": "Close", children: /* @__PURE__ */ jsxRuntime.jsx(CloseX, {}) }),
+      /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { padding: isMobile ? "28px 24px 32px" : "40px 24px 24px", textAlign: "center" }, children: [
+        /* @__PURE__ */ jsxRuntime.jsx("div", { style: { width: 48, height: 48, borderRadius: "50%", margin: "0 auto 16px", background: "rgba(34,197,94,0.08)", border: "1px solid rgba(34,197,94,0.18)", display: "flex", alignItems: "center", justifyContent: "center" }, children: /* @__PURE__ */ jsxRuntime.jsx("svg", { width: "20", height: "20", viewBox: "0 0 24 24", fill: "none", stroke: "#22c55e", strokeWidth: "2", strokeLinecap: "round", strokeLinejoin: "round", children: /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M3 8l7.89 5.26a2 2 0 002.22 0L21 8M5 19h14a2 2 0 002-2V7a2 2 0 00-2-2H5a2 2 0 00-2 2v10a2 2 0 002 2z" }) }) }),
+        /* @__PURE__ */ jsxRuntime.jsx("h2", { style: { margin: "0 0 8px", fontSize: "17px", fontWeight: 600, color: textColor, letterSpacing: "-0.02em" }, children: "Check your inbox" }),
+        /* @__PURE__ */ jsxRuntime.jsxs("p", { style: { margin: "0 0 22px", fontSize: "13px", color: subTextColor, lineHeight: 1.55 }, children: [
+          "We sent a sign-in link to ",
+          /* @__PURE__ */ jsxRuntime.jsx("strong", { style: { color: textColor, fontWeight: 500 }, children: email }),
+          ".",
+          /* @__PURE__ */ jsxRuntime.jsx("br", {}),
+          "Open it on this device to continue."
+        ] }),
+        error && /* @__PURE__ */ jsxRuntime.jsx("div", { style: { background: errBg, border: `1px solid ${errBorder}`, borderRadius: "10px", padding: "9px 13px", fontSize: "13px", color: errColor, marginBottom: "14px" }, children: error }),
+        /* @__PURE__ */ jsxRuntime.jsx("button", { className: "cavos-primary-btn", style: { width: "100%", padding: "12px", borderRadius: "12px", border: "none", background: resendCountdown > 0 ? isLight ? "rgba(0,0,0,0.06)" : "rgba(255,255,255,0.08)" : primaryColor, color: resendCountdown > 0 ? subTextColor : "#fff", fontSize: "14px", fontWeight: 500, cursor: resendCountdown > 0 ? "default" : "pointer", fontFamily: "inherit", transition: "opacity 0.15s", marginBottom: "8px" }, onClick: handleResend, disabled: resendCountdown > 0, children: resendCountdown > 0 ? `Resend in ${resendCountdown}s` : "Resend link" }),
+        /* @__PURE__ */ jsxRuntime.jsx("button", { className: "cavos-sub-btn", style: { background: "none", border: "none", cursor: "pointer", fontSize: "13px", color: subTextColor, width: "100%", textAlign: "center", padding: "8px 0 0", fontFamily: "inherit", transition: "color 0.15s" }, onClick: () => {
+          setScreen("magic-link");
+          setError("");
+        }, children: "Use a different email" })
+      ] }),
+      /* @__PURE__ */ jsxRuntime.jsxs("div", { style: footer, children: [
+        /* @__PURE__ */ jsxRuntime.jsx(CavosLogo, { invert: !isLight }),
+        /* @__PURE__ */ jsxRuntime.jsx("span", { children: "Secured by Cavos" })
+      ] })
+    ] }) });
+  }
+  if (screen === "otp-code") {
+    return /* @__PURE__ */ jsxRuntime.jsx("div", { style: overlay, "data-cavos-theme": theme, role: "dialog", "aria-modal": true, onClick: (e) => {
+      if (e.target === e.currentTarget) handleClose();
+    }, children: /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { ...card, position: "relative" }, children: [
+      isMobile && /* @__PURE__ */ jsxRuntime.jsx("div", { style: handle }),
+      /* @__PURE__ */ jsxRuntime.jsx("button", { className: "cavos-close", style: { ...close, left: "16px", right: "auto" }, onClick: () => {
+        setScreen("magic-link");
+        setError("");
+        setOtpCode("");
+      }, "aria-label": "Back", children: /* @__PURE__ */ jsxRuntime.jsx("svg", { width: "14", height: "14", viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", strokeWidth: "2.5", strokeLinecap: "round", strokeLinejoin: "round", children: /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M19 12H5M12 5l-7 7 7 7" }) }) }),
+      /* @__PURE__ */ jsxRuntime.jsx("button", { className: "cavos-close", style: close, onClick: handleClose, "aria-label": "Close", children: /* @__PURE__ */ jsxRuntime.jsx(CloseX, {}) }),
+      /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { padding: isMobile ? "28px 22px 32px" : "52px 22px 22px", textAlign: "center" }, children: [
+        /* @__PURE__ */ jsxRuntime.jsx("h2", { style: { margin: "0 0 8px", fontSize: "17px", fontWeight: 600, color: textColor, letterSpacing: "-0.02em" }, children: "Enter your code" }),
+        /* @__PURE__ */ jsxRuntime.jsxs("p", { style: { margin: "0 0 20px", fontSize: "13px", color: subTextColor, lineHeight: 1.5 }, children: [
+          "We sent a 6-digit code to ",
+          /* @__PURE__ */ jsxRuntime.jsx("strong", { style: { color: textColor, fontWeight: 500 }, children: email }),
+          "."
+        ] }),
+        error && /* @__PURE__ */ jsxRuntime.jsx("div", { style: { background: errBg, border: `1px solid ${errBorder}`, borderRadius: "10px", padding: "10px 14px", fontSize: "13px", color: errColor, marginBottom: "14px", textAlign: "left" }, children: error }),
+        /* @__PURE__ */ jsxRuntime.jsxs("form", { onSubmit: handleOtpVerifySubmit, style: { display: "flex", flexDirection: "column", gap: "16px" }, children: [
+          /* @__PURE__ */ jsxRuntime.jsx("div", { style: { display: "flex", gap: "8px", justifyContent: "center" }, onPaste: onOtpPaste, children: [0, 1, 2, 3, 4, 5].map((i) => /* @__PURE__ */ jsxRuntime.jsx(
+            "input",
+            {
+              ref: (el) => {
+                otpBoxRefs.current[i] = el;
+              },
+              className: `cavos-input-inner cavos-otp-box ${otpCode[i] ? "cavos-otp-box-filled" : ""}`,
+              style: {
+                width: "44px",
+                height: "52px",
+                padding: 0,
+                border: inputBorder,
+                borderRadius: "12px",
+                fontSize: "22px",
+                fontWeight: 600,
+                color: textColor,
+                background: inputBg,
+                fontFamily: "inherit",
+                boxSizing: "border-box",
+                textAlign: "center"
+              },
+              type: "text",
+              inputMode: "numeric",
+              autoComplete: i === 0 ? "one-time-code" : "off",
+              maxLength: 1,
+              value: otpCode[i] ?? "",
+              onChange: (e) => setOtpDigit(i, e.target.value),
+              onKeyDown: (e) => onOtpKeyDown(i, e),
+              onFocus: (e) => e.target.select(),
+              disabled: busy,
+              autoFocus: i === 0
+            },
+            i
+          )) }),
+          /* @__PURE__ */ jsxRuntime.jsxs("button", { type: "submit", className: "cavos-primary-btn", style: { width: "100%", padding: "12px", marginTop: "4px", borderRadius: "12px", border: "none", background: primaryColor, color: "#fff", fontSize: "14px", fontWeight: 500, cursor: "pointer", fontFamily: "inherit", display: "flex", alignItems: "center", justifyContent: "center", gap: "8px", transition: "opacity 0.15s, transform 0.1s", opacity: busy || otpCode.length !== 6 ? 0.65 : 1 }, disabled: busy || otpCode.length !== 6, children: [
+            busy && /* @__PURE__ */ jsxRuntime.jsx(Spinner, { size: 15, color: "#fff" }),
+            busy ? "Verifying\u2026" : "Continue"
+          ] })
+        ] }),
+        /* @__PURE__ */ jsxRuntime.jsx("button", { className: "cavos-primary-btn", style: { width: "100%", padding: "12px", borderRadius: "12px", border: "none", background: resendCountdown > 0 ? isLight ? "rgba(0,0,0,0.06)" : "rgba(255,255,255,0.08)" : "transparent", color: resendCountdown > 0 ? subTextColor : primaryColor, fontSize: "14px", fontWeight: 500, cursor: resendCountdown > 0 ? "default" : "pointer", fontFamily: "inherit", transition: "opacity 0.15s", marginTop: "8px" }, onClick: handleResend, disabled: resendCountdown > 0 || busy, children: resendCountdown > 0 ? `Resend in ${resendCountdown}s` : "Resend code" }),
+        /* @__PURE__ */ jsxRuntime.jsx("button", { className: "cavos-sub-btn", style: { background: "none", border: "none", cursor: "pointer", fontSize: "13px", color: subTextColor, width: "100%", textAlign: "center", padding: "8px 0 0", fontFamily: "inherit", transition: "color 0.15s" }, onClick: () => {
+          setScreen("magic-link");
+          setError("");
+          setOtpCode("");
+        }, children: "Use a different email" })
+      ] }),
+      /* @__PURE__ */ jsxRuntime.jsxs("div", { style: footer, children: [
+        /* @__PURE__ */ jsxRuntime.jsx(CavosLogo, { invert: !isLight }),
+        /* @__PURE__ */ jsxRuntime.jsx("span", { children: "Secured by Cavos" })
+      ] })
+    ] }) });
+  }
+  if (screen === "magic-link") {
+    const isOtp = emailMode === "otp";
+    return /* @__PURE__ */ jsxRuntime.jsx("div", { style: overlay, "data-cavos-theme": theme, role: "dialog", "aria-modal": true, onClick: (e) => {
+      if (e.target === e.currentTarget) handleClose();
+    }, children: /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { ...card, position: "relative" }, children: [
+      isMobile && /* @__PURE__ */ jsxRuntime.jsx("div", { style: handle }),
+      /* @__PURE__ */ jsxRuntime.jsx("button", { className: "cavos-close", style: { ...close, left: "16px", right: "auto" }, onClick: () => {
+        setScreen("select");
+        setError("");
+      }, "aria-label": "Back", children: /* @__PURE__ */ jsxRuntime.jsx("svg", { width: "14", height: "14", viewBox: "0 0 24 24", fill: "none", stroke: "currentColor", strokeWidth: "2.5", strokeLinecap: "round", strokeLinejoin: "round", children: /* @__PURE__ */ jsxRuntime.jsx("path", { d: "M19 12H5M12 5l-7 7 7 7" }) }) }),
+      /* @__PURE__ */ jsxRuntime.jsx("button", { className: "cavos-close", style: close, onClick: handleClose, "aria-label": "Close", children: /* @__PURE__ */ jsxRuntime.jsx(CloseX, {}) }),
+      /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { padding: isMobile ? "28px 22px 32px" : "52px 22px 22px" }, children: [
+        /* @__PURE__ */ jsxRuntime.jsx("h2", { style: { margin: "0 0 6px", fontSize: "17px", fontWeight: 600, color: textColor, letterSpacing: "-0.02em", textAlign: "center" }, children: "Sign in with email" }),
+        /* @__PURE__ */ jsxRuntime.jsx("p", { style: { margin: "0 0 20px", fontSize: "13px", color: subTextColor, textAlign: "center", lineHeight: 1.5 }, children: isOtp ? "We'll send a secure sign-in code to your inbox." : "We'll send a secure sign-in link to your inbox." }),
+        error && /* @__PURE__ */ jsxRuntime.jsx("div", { style: { background: errBg, border: `1px solid ${errBorder}`, borderRadius: "10px", padding: "10px 14px", fontSize: "13px", color: errColor, marginBottom: "14px" }, children: error }),
+        /* @__PURE__ */ jsxRuntime.jsxs("form", { onSubmit: isOtp ? handleOtpRequestSubmit : handleMagicLinkSubmit, style: { display: "flex", flexDirection: "column", gap: "10px" }, children: [
+          /* @__PURE__ */ jsxRuntime.jsx("input", { className: "cavos-input-inner", style: { width: "100%", padding: "12px 14px", border: inputBorder, borderRadius: "12px", fontSize: "14px", color: textColor, background: inputBg, fontFamily: "inherit", boxSizing: "border-box", transition: "border-color 0.15s" }, type: "email", placeholder: "your@email.com", value: email, onChange: (e) => setEmail(e.target.value), required: true, disabled: busy, autoFocus: true }),
+          /* @__PURE__ */ jsxRuntime.jsxs("button", { type: "submit", className: "cavos-primary-btn", style: { width: "100%", padding: "12px", marginTop: "4px", borderRadius: "12px", border: "none", background: primaryColor, color: "#fff", fontSize: "14px", fontWeight: 500, cursor: "pointer", fontFamily: "inherit", display: "flex", alignItems: "center", justifyContent: "center", gap: "8px", transition: "opacity 0.15s, transform 0.1s", opacity: busy ? 0.65 : 1 }, disabled: busy, children: [
+            busy && /* @__PURE__ */ jsxRuntime.jsx(Spinner, { size: 15, color: "#fff" }),
+            busy ? "Sending\u2026" : isOtp ? "Send code" : "Send magic link"
+          ] })
+        ] })
+      ] }),
+      /* @__PURE__ */ jsxRuntime.jsxs("div", { style: footer, children: [
+        /* @__PURE__ */ jsxRuntime.jsx(CavosLogo, { invert: !isLight }),
+        /* @__PURE__ */ jsxRuntime.jsx("span", { children: "Secured by Cavos" })
+      ] })
+    ] }) });
+  }
+  const showEmail = providers.includes("email");
+  const showGoogle = providers.includes("google");
+  const showApple = providers.includes("apple");
+  const hasSocial = showGoogle || showApple;
+  const btnIcon = (icon, busyIcon, color) => /* @__PURE__ */ jsxRuntime.jsx("span", { style: { position: "absolute", left: "16px", width: 20, height: 20, display: "flex", alignItems: "center", justifyContent: "center", color, flexShrink: 0 }, children: busy ? busyIcon : icon });
+  return /* @__PURE__ */ jsxRuntime.jsx("div", { style: overlay, "data-cavos-theme": theme, role: "dialog", "aria-modal": true, onClick: (e) => {
+    if (e.target === e.currentTarget) handleClose();
+  }, children: /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { ...card, position: "relative" }, children: [
+    isMobile && /* @__PURE__ */ jsxRuntime.jsx("div", { style: handle }),
+    /* @__PURE__ */ jsxRuntime.jsx("button", { className: "cavos-close", style: close, onClick: handleClose, "aria-label": "Close", children: /* @__PURE__ */ jsxRuntime.jsx(CloseX, {}) }),
+    /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { padding: isMobile ? "24px 20px 32px" : "40px 24px 24px" }, children: [
+      /* @__PURE__ */ jsxRuntime.jsx("h2", { style: { margin: "0 0 22px", fontSize: "17px", fontWeight: 600, color: textColor, letterSpacing: "-0.02em", textAlign: "center" }, children: appName ? `Sign in to ${appName}` : "Log in or sign up" }),
+      /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { display: "flex", flexDirection: "column", gap: "10px" }, children: [
+        showGoogle && /* @__PURE__ */ jsxRuntime.jsxs("button", { className: "cavos-provider", style: { ...pBtn, ...busy ? { opacity: 0.55, cursor: "not-allowed" } : {} }, onClick: () => handleOAuth("google"), disabled: busy, children: [
+          btnIcon(/* @__PURE__ */ jsxRuntime.jsx(GoogleIcon, {}), /* @__PURE__ */ jsxRuntime.jsx(Spinner, { size: 14, color: "#888" }), "#4285F4"),
+          /* @__PURE__ */ jsxRuntime.jsx("span", { children: "Continue with Google" })
+        ] }),
+        showApple && /* @__PURE__ */ jsxRuntime.jsxs("button", { className: "cavos-provider", style: { ...pBtn, ...busy ? { opacity: 0.55, cursor: "not-allowed" } : {} }, onClick: () => handleOAuth("apple"), disabled: busy, children: [
+          btnIcon(/* @__PURE__ */ jsxRuntime.jsx(AppleIcon, {}), /* @__PURE__ */ jsxRuntime.jsx(Spinner, { size: 14, color: isLight ? "#111" : "#fff" }), isLight ? "#111" : "#fff"),
+          /* @__PURE__ */ jsxRuntime.jsx("span", { children: "Continue with Apple" })
+        ] }),
+        showEmail && hasSocial && /* @__PURE__ */ jsxRuntime.jsxs("div", { style: { display: "flex", alignItems: "center", gap: "12px", margin: "6px 0 2px" }, children: [
+          /* @__PURE__ */ jsxRuntime.jsx("span", { className: "cavos-divider-line", style: { background: isLight ? "rgba(0,0,0,0.08)" : "rgba(255,255,255,0.08)" } }),
+          /* @__PURE__ */ jsxRuntime.jsx("span", { style: { fontSize: "12px", color: subTextColor, textTransform: "uppercase", letterSpacing: "0.05em" }, children: "or" }),
+          /* @__PURE__ */ jsxRuntime.jsx("span", { className: "cavos-divider-line", style: { background: isLight ? "rgba(0,0,0,0.08)" : "rgba(255,255,255,0.08)" } })
+        ] }),
+        showEmail && /* @__PURE__ */ jsxRuntime.jsxs("button", { className: "cavos-provider", style: { ...pBtn, cursor: busy ? "not-allowed" : "pointer" }, onClick: () => setScreen("magic-link"), disabled: busy, children: [
+          btnIcon(/* @__PURE__ */ jsxRuntime.jsx(EmailIcon, {}), /* @__PURE__ */ jsxRuntime.jsx(Spinner, { size: 14, color: subTextColor }), subTextColor),
+          /* @__PURE__ */ jsxRuntime.jsx("span", { children: "Continue with email" })
+        ] })
+      ] }),
+      error && /* @__PURE__ */ jsxRuntime.jsx("div", { style: { marginTop: "14px", background: errBg, border: `1px solid ${errBorder}`, borderRadius: "10px", padding: "9px 13px", fontSize: "13px", color: errColor }, children: error }),
+      /* @__PURE__ */ jsxRuntime.jsxs("p", { style: { margin: "18px 0 0", fontSize: "11px", color: subTextColor, textAlign: "center", lineHeight: 1.55 }, children: [
+        "By continuing you agree to the",
+        " ",
+        /* @__PURE__ */ jsxRuntime.jsx("a", { href: "https://cavos.xyz/user-privacy", target: "_blank", rel: "noopener noreferrer", style: { color: isLight ? "rgba(0,0,0,0.45)" : "rgba(255,255,255,0.45)", textDecoration: "underline" }, children: "Privacy Policy" }),
+        " & ",
+        /* @__PURE__ */ jsxRuntime.jsx("a", { href: "https://cavos.xyz/user-terms", target: "_blank", rel: "noopener noreferrer", style: { color: isLight ? "rgba(0,0,0,0.45)" : "rgba(255,255,255,0.45)", textDecoration: "underline" }, children: "Terms" }),
+        "."
+      ] })
+    ] }),
+    /* @__PURE__ */ jsxRuntime.jsxs("div", { style: footer, children: [
+      /* @__PURE__ */ jsxRuntime.jsx(CavosLogo, { invert: !isLight }),
+      /* @__PURE__ */ jsxRuntime.jsx("span", { children: "Secured by Cavos" })
+    ] })
+  ] }) });
+}
+function useCavosAuth() {
+  const { openModal, closeModal, isAuthenticated, address, user, walletStatus, logout } = useCavos();
+  return { openModal, closeModal, isAuthenticated, address, user, walletStatus, logout };
+}
+var CavosContext = react.createContext(null);
+var INITIAL_STATUS = {
+  isDeploying: false,
+  isReady: false,
+  needsDeviceApproval: false,
+  awaitingApproval: false,
+  pendingRequestId: null
+};
+function CavosProvider({ config, modal, children }) {
+  const [auth] = react.useState(
+    () => new CavosAuth({ appId: config.appId, backendUrl: config.authBackendUrl })
+  );
+  const [cavos, setCavos] = react.useState(null);
+  const [identity, setIdentity] = react.useState(null);
+  const [walletStatus, setWalletStatus] = react.useState(INITIAL_STATUS);
+  const [isLoading, setIsLoading] = react.useState(false);
+  const [authError, setAuthError] = react.useState(null);
+  const [modalOpen, setModalOpen] = react.useState(false);
+  const [branding, setBranding] = react.useState({});
+  const configRef = react.useRef(config);
+  react.useEffect(() => {
+    configRef.current = config;
+  }, [config]);
+  react.useEffect(() => {
+    if (!config.appId || typeof window === "undefined") return;
+    const base = config.authBackendUrl ?? "https://cavos.xyz";
+    fetch(`${base}/api/oauth/firebase/app-branding?app_id=${encodeURIComponent(config.appId)}`).then((r) => r.ok ? r.json() : null).then((d) => {
+      if (d?.name) setBranding((b) => ({ ...b, appName: d.name }));
+      if (d?.logo_url) setBranding((b) => ({ ...b, appLogo: d.logo_url }));
+    }).catch(() => {
+    });
+  }, [config.appId, config.authBackendUrl]);
+  const openModal = react.useCallback(() => setModalOpen(true), []);
+  const closeModal = react.useCallback(() => setModalOpen(false), []);
+  const clearAuthError = react.useCallback(() => setAuthError(null), []);
+  const resendDeviceApproval = react.useCallback(async () => {
+    if (!identity || !cavos || !cavos.pendingRequestId) return;
+    const backendUrl = configRef.current.authBackendUrl ?? "https://cavos.xyz";
+    if (!configRef.current.appId) return;
+    const recovery = new HttpRecoveryClient({ baseUrl: backendUrl, appId: configRef.current.appId });
+    await recovery.requestDeviceAddition({
+      userId: identity.userId,
+      accountAddress: cavos.address,
+      newSigner: cavos.publicKey,
+      ...identity.email ? { email: identity.email } : {}
+    });
+  }, [identity, cavos]);
+  const connect = react.useCallback(async (id) => {
+    setWalletStatus({ ...INITIAL_STATUS, isDeploying: true });
+    const c = await Cavos.connect({
+      network: configRef.current.network,
+      identity: id,
+      appSalt: configRef.current.appSalt,
+      paymasterApiKey: configRef.current.paymasterApiKey,
+      ...configRef.current.appId ? { appId: configRef.current.appId } : {},
+      ...configRef.current.authBackendUrl ? { backendUrl: configRef.current.authBackendUrl } : {},
+      ...configRef.current.rpcUrl ? { rpcUrl: configRef.current.rpcUrl } : {}
+    });
+    setCavos(c);
+    setIdentity(id);
+    setWalletStatus({
+      isDeploying: false,
+      isReady: c.status === "ready",
+      needsDeviceApproval: c.status === "needs-device-approval",
+      awaitingApproval: c.status === "needs-device-approval" && !!c.pendingRequestId,
+      pendingRequestId: c.pendingRequestId
+    });
+    modal?.onSuccess?.(c.address);
+    return c;
+  }, [modal]);
+  react.useEffect(() => {
+    if (typeof window === "undefined") return;
+    const params = new URLSearchParams(window.location.search);
+    const authData = params.get("auth_data") || params.get("zk_auth_data");
+    if (!authData) return;
+    setModalOpen(true);
+    setWalletStatus({ ...INITIAL_STATUS, isDeploying: true });
+    let cancelled = false;
+    (async () => {
+      setIsLoading(true);
+      try {
+        await handleCallback(authData);
+        if (!cancelled) window.history.replaceState({}, document.title, window.location.pathname);
+      } catch (e) {
+        console.error("[CavosProvider] OAuth callback error:", e);
+        if (!cancelled) {
+          const msg = e instanceof Error ? e.message : "Sign-in failed. Please try again.";
+          setAuthError(msg);
+          setWalletStatus(INITIAL_STATUS);
+        }
+      } finally {
+        if (!cancelled) setIsLoading(false);
+      }
+    })();
+    return () => {
+      cancelled = true;
+    };
+  }, []);
+  const handleCallback = react.useCallback(async (authData) => {
+    const id = await auth.handleCallback(authData);
+    await connect(id);
+  }, [auth, connect]);
+  const login = react.useCallback(async (provider) => {
+    if (typeof window === "undefined") throw new Error("OAuth requires a browser");
+    setAuthError(null);
+    const url = await (provider === "google" ? auth.getGoogleOAuthUrl(window.location.origin + window.location.pathname) : auth.getAppleOAuthUrl(window.location.origin + window.location.pathname));
+    window.location.href = url;
+  }, [auth]);
+  const sendMagicLink = react.useCallback(async (email) => {
+    await auth.sendMagicLink(email);
+  }, [auth]);
+  const sendOtp = react.useCallback(async (email) => {
+    await auth.sendOtp(email);
+  }, [auth]);
+  const verifyOtp = react.useCallback(async (email, code) => {
+    setAuthError(null);
+    const id = await auth.verifyOtp(email, code);
+    await connect(id);
+  }, [auth, connect]);
+  const execute = react.useCallback(async (calls) => {
+    if (!cavos) throw new Error("Not logged in");
+    return cavos.execute(calls);
+  }, [cavos]);
+  const addSigner = react.useCallback(
+    async (pubkey) => {
+      if (!cavos) throw new Error("Not logged in");
+      return cavos.addSigner(pubkey);
+    },
+    [cavos]
+  );
+  const setupRecovery = react.useCallback(async () => {
+    if (!cavos) throw new Error("Not logged in");
+    const code = generateRecoveryCode();
+    await cavos.setupRecovery(code);
+    return code;
+  }, [cavos]);
+  const recover = react.useCallback(async (code) => {
+    if (!identity) throw new Error("Sign in first so we know which account to recover.");
+    setAuthError(null);
+    setWalletStatus({ ...INITIAL_STATUS, isDeploying: true });
+    try {
+      const c = await Cavos.recover({
+        code,
+        identity,
+        network: configRef.current.network,
+        appSalt: configRef.current.appSalt,
+        paymasterApiKey: configRef.current.paymasterApiKey,
+        ...configRef.current.appId ? { appId: configRef.current.appId } : {},
+        ...configRef.current.authBackendUrl ? { backendUrl: configRef.current.authBackendUrl } : {},
+        ...configRef.current.rpcUrl ? { rpcUrl: configRef.current.rpcUrl } : {}
+      });
+      setCavos(c);
+      setWalletStatus({ ...INITIAL_STATUS, isReady: true });
+      modal?.onSuccess?.(c.address);
+    } catch (e) {
+      const msg = e instanceof Error ? e.message : "Recovery failed. Check your code and try again.";
+      setAuthError(msg);
+      setWalletStatus(INITIAL_STATUS);
+      throw e;
+    }
+  }, [identity, modal]);
+  react.useEffect(() => {
+    if (!walletStatus.awaitingApproval || !walletStatus.pendingRequestId || !identity) return;
+    if (!configRef.current.appId) return;
+    const backendUrl = configRef.current.authBackendUrl ?? "https://cavos.xyz";
+    const recovery = new HttpRecoveryClient({ baseUrl: backendUrl, appId: configRef.current.appId });
+    const requestId = walletStatus.pendingRequestId;
+    let cancelled = false;
+    const tick = async () => {
+      try {
+        const r = await recovery.getPendingRequest(requestId);
+        if (cancelled || !r) return;
+        if (r.status === "expired") {
+          setWalletStatus((s) => ({ ...s, pendingRequestId: null }));
+          return;
+        }
+        if (r.status === "approved") {
+          await connect(identity);
+        }
+      } catch {
+      }
+    };
+    const interval = setInterval(tick, 4e3);
+    return () => {
+      cancelled = true;
+      clearInterval(interval);
+    };
+  }, [walletStatus.awaitingApproval, walletStatus.pendingRequestId, identity, connect]);
+  const logout = react.useCallback(() => {
+    setCavos(null);
+    setIdentity(null);
+    setWalletStatus(INITIAL_STATUS);
+    setAuthError(null);
+  }, []);
+  const value = {
+    openModal,
+    closeModal,
+    isAuthenticated: !!cavos,
+    user: identity ? { userId: identity.userId, email: identity.email, provider: identity.provider } : null,
+    address: cavos?.address ?? null,
+    walletStatus,
+    isLoading,
+    authError,
+    clearAuthError,
+    login,
+    sendMagicLink,
+    sendOtp,
+    verifyOtp,
+    handleCallback,
+    execute,
+    addSigner,
+    resendDeviceApproval,
+    setupRecovery,
+    recover,
+    logout
+  };
+  return /* @__PURE__ */ jsxRuntime.jsxs(CavosContext.Provider, { value, children: [
+    children,
+    modal !== void 0 && /* @__PURE__ */ jsxRuntime.jsx(
+      CavosAuthModal,
+      {
+        open: modalOpen,
+        onClose: closeModal,
+        appName: branding.appName ?? modal.appName,
+        appLogo: branding.appLogo ?? modal.appLogo,
+        providers: modal.providers,
+        emailMode: modal.emailMode,
+        primaryColor: modal.primaryColor,
+        theme: modal.theme
+      }
+    )
+  ] });
+}
+function useCavos() {
+  const ctx = react.useContext(CavosContext);
+  if (!ctx) throw new Error("useCavos must be used within a CavosProvider");
+  return ctx;
+}
+
+exports.CavosAuthModal = CavosAuthModal;
+exports.CavosProvider = CavosProvider;
+exports.useCavos = useCavos;
+exports.useCavosAuth = useCavosAuth;
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map