@coinbase/cdp-core 0.0.50 → 0.0.51

package/dist/esm/index.native90.js

@@ -1,7 +1,13 @@
-const e = {
-  ether: -9,
-  wei: 9
-};
+import { hexToBytes as b } from "./index.native56.js";
+import { bytesToHex as y } from "./index.native54.js";
+function h(t) {
+  const { kzg: m } = t, c = t.to ?? (typeof t.blobs[0] == "string" ? "hex" : "bytes"), s = typeof t.blobs[0] == "string" ? t.blobs.map((o) => b(o)) : t.blobs, i = typeof t.commitments[0] == "string" ? t.commitments.map((o) => b(o)) : t.commitments, n = [];
+  for (let o = 0; o < s.length; o++) {
+    const f = s[o], l = i[o];
+    n.push(Uint8Array.from(m.computeBlobKzgProof(f, l)));
+  }
+  return c === "bytes" ? n : n.map((o) => y(o));
+}
 export {
-  e as gweiUnits
+  h as blobsToProofs
 };

package/dist/esm/index.native91.js

@@ -1,13 +1,14 @@
-function a(r, n) {
-  let t = r.toString();
-  const i = t.startsWith("-");
-  i && (t = t.slice(1)), t = t.padStart(n, "0");
-  let [l, e] = [
-    t.slice(0, t.length - n),
-    t.slice(t.length - n)
-  ];
-  return e = e.replace(/(0+)$/, ""), `${i ? "-" : ""}${l || "0"}${e ? `.${e}` : ""}`;
+import { commitmentToVersionedHash as i } from "./index.native117.js";
+function r(o) {
+  const { commitments: t, version: n } = o, e = o.to ?? (typeof t[0] == "string" ? "hex" : "bytes"), s = [];
+  for (const m of t)
+    s.push(i({
+      commitment: m,
+      to: e,
+      version: n
+    }));
+  return s;
 }
 export {
-  a as formatUnits
+  r as commitmentsToVersionedHashes
 };

package/dist/esm/index.native92.js

@@ -1,57 +1,16 @@
-import { encode as d } from "./index.native113.js";
-import y from "./index.native114.js";
-import b from "./index.native115.js";
-import { JWSInvalid as r } from "./index.native43.js";
-import { encoder as s, concat as u, decoder as h } from "./index.native93.js";
-import g from "./index.native116.js";
-import H from "./index.native117.js";
-import P from "./index.native118.js";
-class x {
-  #r;
-  #e;
-  #t;
-  constructor(e) {
-    if (!(e instanceof Uint8Array))
-      throw new TypeError("payload must be an instance of Uint8Array");
-    this.#r = e;
-  }
-  setProtectedHeader(e) {
-    if (this.#e)
-      throw new TypeError("setProtectedHeader can only be called once");
-    return this.#e = e, this;
-  }
-  setUnprotectedHeader(e) {
-    if (this.#t)
-      throw new TypeError("setUnprotectedHeader can only be called once");
-    return this.#t = e, this;
-  }
-  async sign(e, l) {
-    if (!this.#e && !this.#t)
-      throw new r("either setProtectedHeader or setUnprotectedHeader must be called before #sign()");
-    if (!b(this.#e, this.#t))
-      throw new r("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");
-    const c = {
-      ...this.#e,
-      ...this.#t
-    }, p = H(r, /* @__PURE__ */ new Map([["b64", !0]]), l?.crit, this.#e, c);
-    let o = !0;
-    if (p.has("b64") && (o = this.#e.b64, typeof o != "boolean"))
-      throw new r('The "b64" (base64url-encode payload) Header Parameter must be a boolean');
-    const { alg: t } = c;
-    if (typeof t != "string" || !t)
-      throw new r('JWS "alg" (Algorithm) Header Parameter missing or invalid');
-    g(t, e, "sign");
-    let i = this.#r;
-    o && (i = s.encode(d(i)));
-    let n;
-    this.#e ? n = s.encode(d(JSON.stringify(this.#e))) : n = s.encode("");
-    const f = u(n, s.encode("."), i), m = await P(e, t), w = await y(t, m, f), a = {
-      signature: d(w),
-      payload: ""
-    };
-    return o && (a.payload = h.decode(i)), this.#t && (a.header = this.#t), this.#e && (a.protected = h.decode(n)), a;
-  }
+import { blobsToCommitments as f } from "./index.native89.js";
+import { blobsToProofs as l } from "./index.native90.js";
+import { toBlobs as p } from "./index.native116.js";
+function k(t) {
+  const { data: i, kzg: n, to: m } = t, s = t.blobs ?? p({ data: i, to: m }), b = t.commitments ?? f({ blobs: s, kzg: n, to: m }), r = t.proofs ?? l({ blobs: s, commitments: b, kzg: n, to: m }), c = [];
+  for (let o = 0; o < s.length; o++)
+    c.push({
+      blob: s[o],
+      commitment: b[o],
+      proof: r[o]
+    });
+  return c;
 }
 export {
-  x as FlattenedSign
+  k as toBlobSidecars
 };

package/dist/esm/index.native93.js

@@ -1,13 +1,21 @@
-const d = new TextEncoder(), s = new TextDecoder();
-function f(...n) {
-  const c = n.reduce((e, { length: r }) => e + r, 0), t = new Uint8Array(c);
-  let o = 0;
-  for (const e of n)
-    t.set(e, o), o += e.length;
-  return t;
+import { InvalidAddressError as s } from "./index.native85.js";
+import { InvalidStorageKeySizeError as l } from "./index.native81.js";
+import { isAddress as f } from "./index.native59.js";
+function a(r) {
+  if (!r || r.length === 0)
+    return [];
+  const n = [];
+  for (let o = 0; o < r.length; o++) {
+    const { address: i, storageKeys: e } = r[o];
+    for (let t = 0; t < e.length; t++)
+      if (e[t].length - 2 !== 64)
+        throw new l({ storageKey: e[t] });
+    if (!f(i, { strict: !1 }))
+      throw new s({ address: i });
+    n.push([i, e]);
+  }
+  return n;
 }
 export {
-  f as concat,
-  s as decoder,
-  d as encoder
+  a as serializeAccessList
 };

package/dist/esm/index.native94.js

@@ -1,4 +1,8 @@
-const o = (e) => Math.floor(e.getTime() / 1e3);
+import { gweiUnits as i } from "./index.native95.js";
+import { formatUnits as o } from "./index.native96.js";
+function f(r, t = "wei") {
+  return o(r, i[t]);
+}
 export {
-  o as default
+  f as formatGwei
 };

package/dist/esm/index.native95.js

@@ -1,47 +1,7 @@
-const o = /^(\+|\-)? ?(\d+|\d+\.\d+) ?(seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|weeks?|w|years?|yrs?|y)(?: (ago|from now))?$/i, t = (c) => {
-  const s = o.exec(c);
-  if (!s || s[4] && s[1])
-    throw new TypeError("Invalid time period format");
-  const a = parseFloat(s[2]), r = s[3].toLowerCase();
-  let e;
-  switch (r) {
-    case "sec":
-    case "secs":
-    case "second":
-    case "seconds":
-    case "s":
-      e = Math.round(a);
-      break;
-    case "minute":
-    case "minutes":
-    case "min":
-    case "mins":
-    case "m":
-      e = Math.round(a * 60);
-      break;
-    case "hour":
-    case "hours":
-    case "hr":
-    case "hrs":
-    case "h":
-      e = Math.round(a * 3600);
-      break;
-    case "day":
-    case "days":
-    case "d":
-      e = Math.round(a * 86400);
-      break;
-    case "week":
-    case "weeks":
-    case "w":
-      e = Math.round(a * 604800);
-      break;
-    default:
-      e = Math.round(a * 31557600);
-      break;
-  }
-  return s[1] === "-" || s[4] === "ago" ? -e : e;
+const e = {
+  ether: -9,
+  wei: 9
 };
 export {
-  t as default
+  e as gweiUnits
 };

package/dist/esm/index.native96.js

@@ -1,16 +1,13 @@
-function o(t) {
-  return typeof t == "object" && t !== null;
+function a(r, n) {
+  let t = r.toString();
+  const i = t.startsWith("-");
+  i && (t = t.slice(1)), t = t.padStart(n, "0");
+  let [l, e] = [
+    t.slice(0, t.length - n),
+    t.slice(t.length - n)
+  ];
+  return e = e.replace(/(0+)$/, ""), `${i ? "-" : ""}${l || "0"}${e ? `.${e}` : ""}`;
 }
-const r = (t) => {
-  if (!o(t) || Object.prototype.toString.call(t) !== "[object Object]")
-    return !1;
-  if (Object.getPrototypeOf(t) === null)
-    return !0;
-  let e = t;
-  for (; Object.getPrototypeOf(e) !== null; )
-    e = Object.getPrototypeOf(e);
-  return Object.getPrototypeOf(t) === e;
-};
 export {
-  r as default
+  a as formatUnits
 };

package/dist/esm/index.native97.js

@@ -1,2 +1,2 @@
-import { __require as e } from "./index.native134.js";
+import { __require as e } from "./index.native131.js";
 e();

package/dist/esm/index.web.js

@@ -2,63 +2,73 @@ import { setPlatformServices as r } from "./index.web2.js";
 import { webCrypto as o } from "./index.web3.js";
 import { webOAuth as e } from "./index.web4.js";
 import { webStorage as t } from "./index.web5.js";
-import { exportEvmAccount as g, exportSolanaAccount as E, getAccessToken as S, getCurrentUser as f, getUserOperation as u, initialize as h, isSignedIn as A, onAuthStateChange as l, onOAuthStateChange as v, sendEvmTransaction as T, sendSolanaTransaction as x, sendUserOperation as O, signEvmHash as y, signEvmMessage as P, signEvmTransaction as I, signEvmTypedData as C, signInWithEmail as W, signInWithOAuth as w, signInWithSms as D, signOut as R, signSolanaMessage as U, signSolanaTransaction as b, verifyEmailOTP as k, verifyOAuth as M, verifySmsOTP as N } from "./index.web6.js";
+import { exportEvmAccount as c, exportSolanaAccount as g, getAccessToken as E, getCurrentUser as d, getUserOperation as S, initialize as u, isSignedIn as A, onAuthStateChange as h, onOAuthStateChange as x, sendEvmTransaction as v, sendSolanaTransaction as T, sendUserOperation as O, signEvmHash as y, signEvmMessage as P, signEvmTransaction as k, signEvmTypedData as I, signInWithEmail as C, signInWithOAuth as W, signInWithSms as w, signOut as D, signSolanaMessage as R, signSolanaTransaction as U, verifyEmailOTP as b, verifyOAuth as M, verifySmsOTP as N } from "./index.web6.js";
 import { createSpendPermission as H } from "./index.web7.js";
 import { listSpendPermissions as _ } from "./index.web8.js";
-import { APIError as j, ErrorType as q, HttpErrorType as F, OAuth2ProviderType as G, SendEvmTransactionWithEndUserAccountBodyNetwork as J, SendSolanaTransactionWithEndUserAccountBodyNetwork as K } from "@coinbase/cdp-api-client";
+import { APIError as G, ErrorType as j, HttpErrorType as q, OAuth2ProviderType as F, SendEvmTransactionWithEndUserAccountBodyNetwork as J, SendSolanaTransactionWithEndUserAccountBodyNetwork as K } from "@coinbase/cdp-api-client";
 import { revokeSpendPermission as Q } from "./index.web9.js";
-import { AuthManager as Y } from "./index.web10.js";
+import { linkGoogle as Y } from "./index.web10.js";
+import { linkSms as $ } from "./index.web11.js";
+import { linkEmail as or } from "./index.web12.js";
+import { linkOAuth as tr } from "./index.web13.js";
+import { linkApple as ir } from "./index.web14.js";
+import { AuthManager as sr } from "./index.web15.js";
 import "viem";
-import { createCDPEmbeddedWallet as $ } from "./index.web11.js";
-import { EIP1193ProviderError as or, STANDARD_ERROR_CODES as er } from "./index.web12.js";
+import { createCDPEmbeddedWallet as pr } from "./index.web16.js";
+import { EIP1193ProviderError as lr, STANDARD_ERROR_CODES as cr } from "./index.web17.js";
 import "zustand";
-import { toViemAccount as nr } from "./index.web13.js";
-import { InputValidationError as ar, ModuleResolutionError as sr } from "./index.web14.js";
+import { toViemAccount as Er } from "./index.web18.js";
+import { InputValidationError as Sr, ModuleResolutionError as ur } from "./index.web19.js";
 r({
   crypto: o,
   storage: t,
   oauth: e
 });
 export {
-  j as APIError,
-  Y as AuthManager,
-  or as EIP1193ProviderError,
-  q as ErrorType,
-  F as HttpErrorType,
-  ar as InputValidationError,
-  sr as ModuleResolutionError,
-  G as OAuth2ProviderType,
-  er as STANDARD_ERROR_CODES,
+  G as APIError,
+  sr as AuthManager,
+  lr as EIP1193ProviderError,
+  j as ErrorType,
+  q as HttpErrorType,
+  Sr as InputValidationError,
+  ur as ModuleResolutionError,
+  F as OAuth2ProviderType,
+  cr as STANDARD_ERROR_CODES,
   J as SendEvmTransactionWithEndUserAccountBodyNetwork,
   K as SendSolanaTransactionWithEndUserAccountBodyNetwork,
-  $ as createCDPEmbeddedWallet,
+  pr as createCDPEmbeddedWallet,
   H as createSpendPermission,
-  g as exportEvmAccount,
-  E as exportSolanaAccount,
-  S as getAccessToken,
-  f as getCurrentUser,
-  u as getUserOperation,
-  h as initialize,
+  c as exportEvmAccount,
+  g as exportSolanaAccount,
+  E as getAccessToken,
+  d as getCurrentUser,
+  S as getUserOperation,
+  u as initialize,
   A as isSignedIn,
+  ir as linkApple,
+  or as linkEmail,
+  Y as linkGoogle,
+  tr as linkOAuth,
+  $ as linkSms,
   _ as listSpendPermissions,
-  l as onAuthStateChange,
-  v as onOAuthStateChange,
+  h as onAuthStateChange,
+  x as onOAuthStateChange,
   Q as revokeSpendPermission,
-  T as sendEvmTransaction,
-  x as sendSolanaTransaction,
+  v as sendEvmTransaction,
+  T as sendSolanaTransaction,
   O as sendUserOperation,
   y as signEvmHash,
   P as signEvmMessage,
-  I as signEvmTransaction,
-  C as signEvmTypedData,
-  W as signInWithEmail,
-  w as signInWithOAuth,
-  D as signInWithSms,
-  R as signOut,
-  U as signSolanaMessage,
-  b as signSolanaTransaction,
-  nr as toViemAccount,
-  k as verifyEmailOTP,
+  k as signEvmTransaction,
+  I as signEvmTypedData,
+  C as signInWithEmail,
+  W as signInWithOAuth,
+  w as signInWithSms,
+  D as signOut,
+  R as signSolanaMessage,
+  U as signSolanaTransaction,
+  Er as toViemAccount,
+  b as verifyEmailOTP,
   M as verifyOAuth,
   N as verifySmsOTP
 };

package/dist/esm/index.web10.js

@@ -1,220 +1,17 @@
-import { logOutEndUser as l, refreshAccessToken as o, registerTemporaryWalletSecret as c } from "@coinbase/cdp-api-client";
-import { SignJWT as u } from "./index.web28.js";
-import { toAuthState as f } from "./index.web19.js";
-import "viem";
-import { getPlatformCrypto as n } from "./index.web2.js";
-import { sortKeys as S } from "./index.web24.js";
-import { getCoreOAuthManager as w } from "./index.web25.js";
-const i = 60 * 1e3;
-class I {
-  projectId;
-  authState = null;
-  walletSecret = null;
-  authStateChangeCallbacks = [];
-  initPromise = null;
-  refreshTimeout = null;
-  /**
-   * Initializes the token manager.
-   *
-   * @param projectId - The project ID.
-   */
-  constructor(e) {
-    this.projectId = e, this.initPromise = this._doInitialize();
-  }
-  /**
-   * Gets the current user, or null if there is no user signed in.
-   *
-   * @returns The current user.
-   */
-  async getUser() {
-    return this.authState?.user ?? null;
-  }
-  /**
-   * Returns whether the user is signed in - i.e., whether there is an unexpired
-   * access token and user. Attempts to refresh the token if it's expired.
-   *
-   * @returns True if the user is signed in, false otherwise.
-   */
-  async isSignedIn() {
-    if (!this.authState)
-      return !1;
-    if (this.authState.expiresAt > Date.now() + i)
-      return !0;
-    try {
-      return await this.getToken() !== null;
-    } catch {
-      return !1;
-    }
-  }
-  /**
-   * Signs out the user, clearing all authentication state.
-   */
-  async signOut() {
-    try {
-      await l(this.projectId);
-    } catch {
-    } finally {
-      await this.clearAuthState();
-    }
-  }
-  /**
-   * Adds a callback to be called when the auth state changes.
-   *
-   * @param callback - The function to call when the auth state changes.
-   */
-  addAuthStateChangeCallback(e) {
-    this.authStateChangeCallbacks.push(e), e(this.authState?.user ?? null);
-  }
-  /**
-   * Gets the access token, refreshing it if it is expired. Returns null if the user is not
-   * signed in.
-   *
-   * @returns The access token.
-   */
-  async getToken() {
-    return this.shouldRefreshToken() && await this.refreshAccessToken(), this.authState?.accessToken ?? null;
-  }
-  /**
-   * Gets the currently registered wallet secret ID. Rejects if the user is not signed in.
-   *
-   * @returns The wallet secret ID.
-   */
-  async getWalletSecretId() {
-    if (!await this.isSignedIn())
-      throw new Error("Cannot get wallet secret ID if the user is not signed in");
-    return this.shouldRefreshWalletSecret() && await this.refreshWalletSecret(), this.walletSecret.walletSecretId;
-  }
-  /**
-   * Gets the X-Wallet-Auth header. Rejects if the user is not signed in.
-   *
-   * @param options - The options for the request.
-   * @param options.requestMethod - The HTTP method of the request.
-   * @param options.requestHost - The host of the request.
-   * @param options.requestPath - The path of the request.
-   * @param options.requestData - The data of the request.
-   * @returns The X-Wallet-Auth header.
-   */
-  async getXWalletAuth(e) {
-    if (!await this.isSignedIn())
-      throw new Error("Cannot get X-Wallet-Auth header if the user is not signed in");
-    this.shouldRefreshWalletSecret() && await this.refreshWalletSecret();
-    const t = `${e.requestMethod} ${e.requestHost}${e.requestPath}`, r = Math.floor(Date.now() / 1e3), a = n(), s = {
-      uris: [t]
-    };
-    if (e.requestData && Object.keys(e.requestData).length > 0) {
-      const h = S(e.requestData);
-      s.reqHash = await a.hash(new TextEncoder().encode(JSON.stringify(h)));
-    }
-    return await new u(s).setProtectedHeader({ alg: "ES256", typ: "JWT" }).setIssuedAt(r).setNotBefore(r).setJti(a.generateRandomId()).sign(this.walletSecret.keyPair.privateKey);
-  }
-  /**
-   * Sets the authentication state.
-   *
-   * @param authState - The authentication state.
-   */
-  async setAuthState(e) {
-    this.authState = e, this.authStateChangeCallbacks.forEach((t) => t(this.authState?.user ?? null)), this.scheduleTokenRefresh();
-  }
-  /**
-   * Clears the authentication state.
-   */
-  async clearAuthState() {
-    this.authState = null, this.walletSecret = null, this.cancelTokenRefresh(), this.authStateChangeCallbacks.forEach((e) => e(null));
-  }
-  /**
-   * Ensures the AuthManager is initialized before proceeding.
-   * If initialization is already in progress, waits for it to complete.
-   */
-  async ensureInitialized() {
-    if (this.initPromise) {
-      await this.initPromise;
-      return;
-    }
-    throw new Error("AuthManager not initialized");
-  }
-  /**
-   * Internal async initialization logic.
-   */
-  async _doInitialize() {
-    try {
-      await this.refreshAccessToken(), await w().handleOAuthCode();
-    } catch (e) {
-      console.warn("Failed to refresh access token during initialization:", e);
-    }
-  }
-  /**
-   * Returns whether the token should be refreshed.
-   *
-   * @returns True if the token should be refreshed, false otherwise.
-   */
-  shouldRefreshToken() {
-    return !(this.authState && this.authState.expiresAt > Date.now() + i);
-  }
-  /**
-   * Refreshes the access token and transitions the auth state accordingly.
-   * If a refresh is already in progress, it will wait for that refresh to complete.
-   *
-   * @returns The new access token.
-   */
-  async refreshAccessToken() {
-    try {
-      const e = await o(this.projectId, {
-        grantType: "refresh_token"
-      }), t = f(
-        e.accessToken,
-        e.validUntil,
-        e.endUser
-      );
-      await this.setAuthState(t);
-    } catch {
-      await this.signOut();
-    }
-  }
-  /**
-   * Returns whether the wallet secret should be refreshed.
-   *
-   * @returns True if the wallet secret should be refreshed, false otherwise.
-   */
-  shouldRefreshWalletSecret() {
-    return !(this.walletSecret && this.walletSecret.expiresAt > Date.now() + i);
-  }
-  /**
-   * Refreshes the wallet secret. Assumes the user is signed in.
-   *
-   * @returns The wallet secret.
-   */
-  async refreshWalletSecret() {
-    const e = n(), t = this.walletSecret?.walletSecretId ?? e.generateRandomId(), r = this.walletSecret?.keyPair ?? await e.createKeyPair(), a = this.authState.expiresAt, s = new Date(a).toISOString();
-    this.walletSecret = { walletSecretId: t, keyPair: r, expiresAt: a };
-    try {
-      await c(this.projectId, this.authState.user.userId, {
-        walletSecretId: t,
-        publicKey: r.publicKeyBase64,
-        validUntil: s
-      });
-    } catch (h) {
-      throw this.walletSecret = null, h;
-    }
-  }
-  /**
-   * Schedules a token refresh to occur exactly when shouldRefreshToken() would return true.
-   * Uses the same REFRESH_CREDENTIALS_BUFFER_MS timing as the rest of the auth system.
-   */
-  scheduleTokenRefresh() {
-    if (this.cancelTokenRefresh(), !this.authState)
-      return;
-    const t = this.authState.expiresAt - i - Date.now();
-    t <= 0 || (this.refreshTimeout = setTimeout(async () => {
-      await this.refreshAccessToken(), this.scheduleTokenRefresh();
-    }, t));
-  }
-  /**
-   * Cancels any scheduled token refresh.
-   */
-  cancelTokenRefresh() {
-    this.refreshTimeout && (clearTimeout(this.refreshTimeout), this.refreshTimeout = null);
-  }
+import { initiateAuthentication as e } from "@coinbase/cdp-api-client";
+import { getPlatformOAuth as i } from "./index.web2.js";
+import { getCoreAuthManager as o, getConfig as n } from "./index.web30.js";
+async function c() {
+  if (!await o().isSignedIn())
+    throw new Error("User must be signed in to link a Google account");
+  const t = await e(n().projectId, {
+    type: "google",
+    redirectUrl: i().getRedirectUrl()
+  });
+  if (!("authUrl" in t))
+    throw new Error("Failed to initiate Google authentication");
+  i().initiateOAuthFlow(t.authUrl);
 }
 export {
-  I as AuthManager
+  c as linkGoogle
 };

package/dist/esm/index.web100.js

@@ -1,4 +1,57 @@
-const o = "2.33.0";
+import { encode as d } from "./index.web119.js";
+import y from "./index.web120.js";
+import b from "./index.web121.js";
+import { JWSInvalid as r } from "./index.web47.js";
+import { encoder as s, concat as u, decoder as h } from "./index.web101.js";
+import g from "./index.web122.js";
+import H from "./index.web123.js";
+import P from "./index.web124.js";
+class x {
+  #r;
+  #e;
+  #t;
+  constructor(e) {
+    if (!(e instanceof Uint8Array))
+      throw new TypeError("payload must be an instance of Uint8Array");
+    this.#r = e;
+  }
+  setProtectedHeader(e) {
+    if (this.#e)
+      throw new TypeError("setProtectedHeader can only be called once");
+    return this.#e = e, this;
+  }
+  setUnprotectedHeader(e) {
+    if (this.#t)
+      throw new TypeError("setUnprotectedHeader can only be called once");
+    return this.#t = e, this;
+  }
+  async sign(e, l) {
+    if (!this.#e && !this.#t)
+      throw new r("either setProtectedHeader or setUnprotectedHeader must be called before #sign()");
+    if (!b(this.#e, this.#t))
+      throw new r("JWS Protected and JWS Unprotected Header Parameter names must be disjoint");
+    const c = {
+      ...this.#e,
+      ...this.#t
+    }, p = H(r, /* @__PURE__ */ new Map([["b64", !0]]), l?.crit, this.#e, c);
+    let o = !0;
+    if (p.has("b64") && (o = this.#e.b64, typeof o != "boolean"))
+      throw new r('The "b64" (base64url-encode payload) Header Parameter must be a boolean');
+    const { alg: t } = c;
+    if (typeof t != "string" || !t)
+      throw new r('JWS "alg" (Algorithm) Header Parameter missing or invalid');
+    g(t, e, "sign");
+    let i = this.#r;
+    o && (i = s.encode(d(i)));
+    let n;
+    this.#e ? n = s.encode(d(JSON.stringify(this.#e))) : n = s.encode("");
+    const f = u(n, s.encode("."), i), m = await P(e, t), w = await y(t, m, f), a = {
+      signature: d(w),
+      payload: ""
+    };
+    return o && (a.payload = h.decode(i)), this.#t && (a.header = this.#t), this.#e && (a.protected = h.decode(n)), a;
+  }
+}
 export {
-  o as version
+  x as FlattenedSign
 };