@enbox/browser 0.3.39 → 0.3.40

package/dist/esm/dweb-connect-client.js

@@ -1,9 +1,21 @@
 /**
- * DWeb Connect client — initiates the popup/postMessage connect flow.
+ * DWeb Connect client — the dapp side of the popup/postMessage connect flow.
  *
- * This is the dapp-side counterpart to the wallet's `/dweb-connect` page.
- * The wallet is opened as a popup window, and communication happens via
- * `window.postMessage`. No relay server, QR codes, or PINs are needed.
+ * {@link PopupClientTransport} implements the `@enbox/connect` kernel's
+ * `ConnectTransport` over a wallet popup:
+ *
+ * 1. The dapp opens `${walletUrl}/dweb-connect` as a popup window.
+ * 2. The wallet emits a `loaded` beacon carrying a fresh ephemeral X25519
+ *    public key and its origin.
+ * 3. The kernel seals the signed connect request to that key (ECDH-ES,
+ *    `apv` bound to the wallet origin) and the transport posts the
+ *    ciphertext to the popup.
+ * 4. The wallet posts back the sealed response JWE (or the deny token),
+ *    which the kernel opens and value-checks.
+ *
+ * Only ciphertext crosses the postMessage channel. Every message is checked
+ * against the wallet origin derived from the configured wallet URL (never
+ * `'*'`), and against the popup window as `event.source`.
  *
  * @module
  */
@@ -16,207 +28,272 @@ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, ge
         step((generator = generator.apply(thisArg, _arguments || [])).next());
     });
 };
-import { decryptPostMessagePayload, generateEphemeralKeyPair } from './dweb-connect-crypto.js';
-function collectBrowserClientMetadata() {
-    const resolvedOptions = Intl.DateTimeFormat().resolvedOptions();
-    const languages = Array.isArray(globalThis.navigator.languages)
-        ? globalThis.navigator.languages.filter((language) => typeof language === 'string' && language.length > 0)
-        : undefined;
-    return Object.assign(Object.assign({ origin: globalThis.location.origin, userAgent: globalThis.navigator.userAgent, platform: globalThis.navigator.platform, language: globalThis.navigator.language }, (languages && languages.length > 0 ? { languages } : {})), (resolvedOptions.timeZone ? { timezone: resolvedOptions.timeZone } : {}));
+import { assertX25519PublicJwk, CONNECT_DENIED_TOKEN, ConnectClient } from '@enbox/connect';
+import { DWEB_CONNECT_LOADED_MESSAGE_TYPE, DWEB_CONNECT_PATH, DWEB_CONNECT_REQUEST_MESSAGE_TYPE, DWEB_CONNECT_RESPONSE_MESSAGE_TYPE, getTrustedMessage, } from './dweb-connect-messages.js';
+/** Default budget for the whole popup handshake (beacon + user consent + response). */
+const DEFAULT_TIMEOUT_MS = 300000;
+/** Interval at which the transport checks whether the user closed the popup. */
+const CLOSED_POLL_INTERVAL_MS = 500;
+/** Window name given to the wallet popup. */
+const POPUP_WINDOW_NAME = 'enbox-dweb-connect';
+/** Window features given to the wallet popup. */
+const POPUP_WINDOW_FEATURES = 'width=500,height=700,menubar=no,toolbar=no,location=no,status=no';
+/** Guards against calling browser-only entry points outside a browser. */
+function assertBrowserEnvironment() {
+    if (typeof window === 'undefined') {
+        throw new Error('[@enbox/browser] DWeb Connect is only available in browser environments.');
+    }
+}
+/**
+ * Thrown when the user closes the wallet popup before the wallet finished
+ * loading (i.e. before its `loaded` beacon arrived). Callers typically treat
+ * this the same as a user denial.
+ */
+export class PopupWindowClosedError extends Error {
+    constructor() {
+        super('[@enbox/browser] Wallet popup was closed before the wallet finished loading.');
+        this.name = 'PopupWindowClosedError';
+    }
 }
 /**
- * Open a wallet popup and run the DWeb Connect postMessage flow.
+ * Popup/postMessage {@link ConnectTransport} for browser dapps.
  *
- * Protocol:
- * 1. Dapp opens `${walletUrl}/dweb-connect` as a popup.
- * 2. Wallet sends `{ type: 'dweb-connect-loaded' }` when ready.
- * 3. Dapp sends `{ type: 'dweb-connect-authorization-request', did, permissions,
- *    appName?, appIcon?, portableIdentity? }`.
- * 4. Wallet shows consent UI, then sends back
- *    `{ type: 'dweb-connect-authorization-response', delegateDid, grants }`.
- * 5. Popup closes.
+ * Single-use: construct a new transport per handshake. The **constructor**
+ * opens the wallet popup synchronously — so `window.open` runs inside the user
+ * gesture, ahead of the kernel's awaited key generation, and survives strict
+ * popup blockers; `requestProfile()` then awaits the wallet's `loaded` beacon;
+ * `deliverRequest()` posts the sealed request ciphertext; `awaitResponse()`
+ * resolves with the sealed response JWE, or the deny token when the user denies
+ * or closes the popup after the handshake was established.
  *
- * @returns The delegate credentials, or `undefined` if the user denied.
- * @throws If the popup is blocked, times out, or the wallet returns an error.
+ * Security properties:
+ * - `targetOrigin` of every outbound `postMessage` is pinned to the origin
+ *   derived from `walletUrl` — never `'*'`.
+ * - Inbound messages are dropped unless `event.origin` equals the pinned
+ *   wallet origin AND `event.source` is the popup window this transport opened.
+ * - The beacon's `walletOrigin` field must equal the pinned origin, and its
+ *   `walletEpk` must be a public-only X25519 JWK; a malformed beacon from the
+ *   genuine popup fails the handshake closed.
  */
-function initClient(options) {
-    return __awaiter(this, void 0, void 0, function* () {
-        const { walletUrl, did, permissionRequests, timeout = 300000, appName, appIcon, portableIdentity, } = options;
-        if (typeof window === 'undefined') {
-            throw new Error('[@enbox/browser] DWeb Connect is only available in browser environments.');
-        }
-        // Open the wallet's DWeb Connect page as a popup.
-        const popupUrl = new URL('/dweb-connect', walletUrl).toString();
-        const popup = window.open(popupUrl, 'enbox-dweb-connect', 'width=500,height=700,menubar=no,toolbar=no,location=no,status=no');
+export class PopupClientTransport {
+    constructor(options) {
+        var _a;
+        /** {@inheritDoc ConnectTransport.requiresPin} */
+        this.requiresPin = false;
+        this._settled = false;
+        this._walletEpkReceived = false;
+        assertBrowserEnvironment();
+        this._walletOrigin = new URL(options.walletUrl).origin;
+        this._timeoutMs = (_a = options.timeoutMs) !== null && _a !== void 0 ? _a : DEFAULT_TIMEOUT_MS;
+        // Open the wallet popup SYNCHRONOUSLY, in the user-gesture call stack,
+        // before the kernel's awaited `DidJwk.create()` / `X25519.generateKey()`
+        // run. Strict popup blockers (Safari) reject a `window.open` issued once
+        // the stack has yielded to a prior `await`, so opening it here — instead of
+        // inside the awaited `requestProfile()` — is what keeps the flow usable.
+        const popupUrl = new URL(DWEB_CONNECT_PATH, options.walletUrl).toString();
+        const popup = window.open(popupUrl, POPUP_WINDOW_NAME, POPUP_WINDOW_FEATURES);
         if (!popup) {
             throw new Error('[@enbox/browser] Popup blocked. Allow popups for this site to connect to a wallet.');
         }
-        // Generate an ephemeral ECDH keypair for this connect session.
-        // The public key is sent to the wallet so it can encrypt the response
-        // containing delegate private keys and decryption material.
-        // Encryption is mandatory — if key generation fails (e.g. non-secure
-        // context where crypto.subtle is unavailable), the connect flow aborts.
-        let dappKeyPair;
-        let dappPublicKeyBase64url;
-        try {
-            const ephemeral = yield generateEphemeralKeyPair();
-            dappKeyPair = ephemeral.keyPair;
-            dappPublicKeyBase64url = ephemeral.publicKeyBase64url;
-        }
-        catch (_a) {
-            popup.close();
-            throw new Error('[@enbox/browser] DWeb Connect requires a secure context (HTTPS) for encrypted key exchange. '
-                + 'crypto.subtle is not available in this environment.');
-        }
-        return new Promise((resolve, reject) => {
-            let settled = false;
-            const cleanup = () => {
-                settled = true;
-                clearTimeout(timeoutId);
-                window.removeEventListener('message', onMessage);
-            };
-            // Set up timeout.
-            const timeoutId = setTimeout(() => {
-                if (!settled) {
-                    cleanup();
-                    try {
-                        popup.close();
-                    }
-                    catch ( /* best effort */_a) { /* best effort */ }
-                    reject(new Error('[@enbox/browser] DWeb Connect timed out waiting for wallet response.'));
-                }
-            }, timeout);
-            // Monitor popup closed without response (user closed the window).
-            const pollClosed = setInterval(() => {
-                if (popup.closed && !settled) {
-                    clearInterval(pollClosed);
-                    cleanup();
-                    resolve(undefined);
-                }
-            }, 500);
-            const onMessage = (event) => {
-                var _a;
-                // Validate origin matches the wallet URL.
-                const walletOrigin = new URL(walletUrl).origin;
-                if (event.origin !== walletOrigin) {
-                    return;
-                }
-                const { type } = (_a = event.data) !== null && _a !== void 0 ? _a : {};
-                if (type === 'dweb-connect-loaded') {
-                    // Wallet is ready — send the authorization request with
-                    // ephemeral public key and optional app metadata.
-                    popup.postMessage({
-                        type: 'dweb-connect-authorization-request',
-                        did,
-                        permissions: permissionRequests,
-                        ephemeralPublicKey: dappPublicKeyBase64url,
-                        appName,
-                        appIcon,
-                        clientMetadata: collectBrowserClientMetadata(),
-                        portableIdentity,
-                    }, walletOrigin);
-                    return;
-                }
-                if (type === 'dweb-connect-authorization-response') {
-                    clearInterval(pollClosed);
-                    cleanup();
-                    // If the wallet sent an explicit error, treat as denied.
-                    if (event.data.error) {
-                        resolve(undefined);
-                        return;
-                    }
-                    // Require an encrypted response. The dapp always sends an
-                    // ephemeralPublicKey, so a plaintext response means either the
-                    // wallet is outdated or something intercepted the flow.
-                    const encrypted = event.data.encryptedPayload;
-                    if (!encrypted) {
-                        resolve(undefined);
-                        return;
-                    }
-                    decryptPostMessagePayload(encrypted, dappKeyPair).then((payload) => {
-                        var _a, _b, _c;
-                        const p = payload;
-                        if (!p.delegateDid || !p.grants) {
-                            resolve(undefined);
-                            return;
-                        }
-                        resolve({
-                            delegatePortableDid: p.delegateDid,
-                            delegateGrants: p.grants,
-                            connectedDid: (_b = (_a = p.connectedDid) !== null && _a !== void 0 ? _a : did) !== null && _b !== void 0 ? _b : p.delegateDid.uri,
-                            sessionRevocations: (_c = p.sessionRevocations) !== null && _c !== void 0 ? _c : undefined,
-                        });
-                    }).catch(() => {
-                        // Decryption failed — treat as denied.
-                        resolve(undefined);
-                    });
-                }
+        this._popup = popup;
+        this._walletEpkPromise = new Promise((resolve, reject) => {
+            this._resolveWalletEpk = resolve;
+            this._rejectWalletEpk = reject;
+        });
+        // Created up-front so a response (or deny) arriving before
+        // `awaitResponse()` is called is never dropped. The no-op catch marks
+        // early rejections (timeout, popup closed during load) as handled until
+        // the kernel attaches its own handlers via `awaitResponse()`.
+        this._responsePromise = new Promise((resolve, reject) => {
+            this._resolveResponse = resolve;
+            this._rejectResponse = reject;
+        });
+        this._responsePromise.catch(() => undefined);
+        // Listen synchronously, before the wallet page can emit its `loaded`
+        // beacon, so the beacon is never missed while the kernel awaits key
+        // generation ahead of `requestProfile()`.
+        this._messageListener = (event) => { this.onMessage(event); };
+        window.addEventListener('message', this._messageListener);
+        this._timeoutId = setTimeout(() => {
+            this.fail(new Error('[@enbox/browser] DWeb Connect timed out waiting for wallet response.'));
+        }, this._timeoutMs);
+        this._closedPollId = setInterval(() => { this.onClosedPoll(); }, CLOSED_POLL_INTERVAL_MS);
+    }
+    /**
+     * Awaits the already-open popup's `loaded` beacon, then returns the popup
+     * channel profile: ECDH-ES encryption to the beacon's ephemeral key with the
+     * pinned wallet origin as the `apv` binding, a `post_message` reply
+     * descriptor, and the client-supplied `state` correlator.
+     *
+     * The popup was opened synchronously at construction, so this method only
+     * awaits the beacon — it never issues the blocker-sensitive `window.open`.
+     *
+     * @param state - The handshake correlator minted by the {@link ConnectClient}.
+     * @throws If the user closes the popup before the beacon arrives
+     *         ({@link PopupWindowClosedError}), the beacon is malformed, or on
+     *         timeout.
+     */
+    requestProfile(state) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const walletEpk = yield this._walletEpkPromise;
+            return {
+                encryption: { mode: 'ecdh-es', walletEpk, walletOrigin: this._walletOrigin },
+                reply: { mode: 'post_message' },
+                state,
             };
-            window.addEventListener('message', onMessage);
         });
-    });
+    }
+    /**
+     * Posts the sealed request ciphertext to the wallet popup with the
+     * `targetOrigin` pinned to the wallet origin.
+     */
+    deliverRequest(jwe) {
+        return __awaiter(this, void 0, void 0, function* () {
+            this._popup.postMessage({ type: DWEB_CONNECT_REQUEST_MESSAGE_TYPE, jwe }, this._walletOrigin);
+        });
+    }
+    /**
+     * Awaits the wallet's response ciphertext: the sealed response JWE, or the
+     * deny token when the user denies in the wallet or closes the popup.
+     * Rejects on timeout.
+     */
+    awaitResponse() {
+        return __awaiter(this, void 0, void 0, function* () {
+            return yield this._responsePromise;
+        });
+    }
+    onMessage(event) {
+        const message = getTrustedMessage(event, this._walletOrigin, this._popup);
+        if (message === undefined) {
+            return;
+        }
+        if (message.type === DWEB_CONNECT_LOADED_MESSAGE_TYPE) {
+            this.onLoadedBeacon(message);
+            return;
+        }
+        if (message.type === DWEB_CONNECT_RESPONSE_MESSAGE_TYPE) {
+            this.onResponseMessage(message);
+        }
+    }
+    onLoadedBeacon(message) {
+        var _a;
+        if (this._settled || this._walletEpkReceived) {
+            return;
+        }
+        // The beacon passed the origin and source checks, so a malformed payload
+        // is a protocol violation by the genuine popup — fail closed. The X25519
+        // public-JWK shape check is delegated to the connect kernel.
+        let walletEpk;
+        try {
+            assertX25519PublicJwk(message.walletEpk);
+            walletEpk = message.walletEpk;
+        }
+        catch (_b) {
+            this.fail(new Error('[@enbox/browser] Wallet loaded beacon did not carry a valid X25519 public key.'));
+            return;
+        }
+        if (message.walletOrigin !== this._walletOrigin) {
+            this.fail(new Error('[@enbox/browser] Wallet loaded beacon origin does not match the configured wallet origin.'));
+            return;
+        }
+        this._walletEpkReceived = true;
+        (_a = this._resolveWalletEpk) === null || _a === void 0 ? void 0 : _a.call(this, walletEpk);
+    }
+    onResponseMessage(message) {
+        var _a, _b;
+        if (this._settled) {
+            return;
+        }
+        if (typeof message.payload !== 'string') {
+            this.fail(new Error('[@enbox/browser] Wallet response message did not carry a ciphertext payload.'));
+            return;
+        }
+        this._settled = true;
+        this.cleanup();
+        // No-op on the normal path; unblocks `requestProfile()` if a response
+        // somehow arrives before the beacon.
+        (_a = this._rejectWalletEpk) === null || _a === void 0 ? void 0 : _a.call(this, new Error('[@enbox/browser] Wallet responded before the handshake was established.'));
+        (_b = this._resolveResponse) === null || _b === void 0 ? void 0 : _b.call(this, message.payload);
+    }
+    onClosedPoll() {
+        var _a;
+        if (this._settled || this._popup.closed !== true) {
+            return;
+        }
+        if (!this._walletEpkReceived) {
+            // Closed before the wallet ever loaded — the handshake cannot proceed.
+            this.fail(new PopupWindowClosedError());
+            return;
+        }
+        // Closed after the handshake was established — treat as a user denial.
+        this._settled = true;
+        this.cleanup();
+        (_a = this._resolveResponse) === null || _a === void 0 ? void 0 : _a.call(this, CONNECT_DENIED_TOKEN);
+    }
+    fail(error) {
+        var _a, _b;
+        if (this._settled) {
+            return;
+        }
+        this._settled = true;
+        this.cleanup();
+        try {
+            this._popup.close();
+        }
+        catch ( /* best effort */_c) { /* best effort */ }
+        (_a = this._rejectWalletEpk) === null || _a === void 0 ? void 0 : _a.call(this, error);
+        (_b = this._rejectResponse) === null || _b === void 0 ? void 0 : _b.call(this, error);
+    }
+    cleanup() {
+        clearTimeout(this._timeoutId);
+        clearInterval(this._closedPollId);
+        if (this._messageListener !== undefined) {
+            window.removeEventListener('message', this._messageListener);
+            this._messageListener = undefined;
+        }
+    }
+}
+/** Collects self-reported environment hints for the wallet's session display. */
+function collectBrowserClientMetadata() {
+    const resolvedOptions = Intl.DateTimeFormat().resolvedOptions();
+    const languages = Array.isArray(globalThis.navigator.languages)
+        ? globalThis.navigator.languages.filter((language) => typeof language === 'string' && language.length > 0)
+        : undefined;
+    return Object.assign(Object.assign({ origin: globalThis.location.origin, userAgent: globalThis.navigator.userAgent, platform: globalThis.navigator.platform, language: globalThis.navigator.language }, (languages && languages.length > 0 ? { languages } : {})), (resolvedOptions.timeZone ? { timezone: resolvedOptions.timeZone } : {}));
 }
 /**
- * Probe whether a wallet supports a specific DID via a hidden iframe.
+ * Runs one DWeb Connect popup handshake end-to-end: opens the wallet popup,
+ * drives the `@enbox/connect` kernel client over a {@link PopupClientTransport},
+ * and returns the delegated credentials.
  *
- * Sends a `dweb-connect-support-request` message to the wallet and
- * waits for a `dweb-connect-support-response`. Useful for checking
- * multiple wallet URLs to find the one that manages a given DID.
- *
- * @param walletUrl - Base URL of the wallet to probe.
- * @param did - The DID to check.
- * @param timeout - Probe timeout in ms. Default: 5_000 (5 seconds).
- * @returns `true` if the wallet manages the DID, `false` otherwise.
+ * @returns The delegate credentials, or `undefined` when the user denied the
+ *          request or closed the popup.
+ * @throws If the popup is blocked, the handshake times out, or the wallet
+ *         returns an invalid response.
  */
-function probeWalletSupport(walletUrl_1, did_1) {
-    return __awaiter(this, arguments, void 0, function* (walletUrl, did, timeout = 5000) {
-        if (typeof window === 'undefined') {
-            return false;
-        }
-        return new Promise((resolve) => {
-            const iframe = document.createElement('iframe');
-            iframe.style.display = 'none';
-            iframe.src = walletUrl;
-            let settled = false;
-            const cleanup = () => {
-                settled = true;
-                window.removeEventListener('message', onMessage);
-                try {
-                    document.body.removeChild(iframe);
-                }
-                catch ( /* best effort */_a) { /* best effort */ }
-            };
-            const timeoutId = setTimeout(() => {
-                if (!settled) {
-                    cleanup();
-                    resolve(false);
-                }
-            }, timeout);
-            const onMessage = (event) => {
-                var _a;
-                const walletOrigin = new URL(walletUrl).origin;
-                if (event.origin !== walletOrigin) {
-                    return;
-                }
-                const { type, supported } = (_a = event.data) !== null && _a !== void 0 ? _a : {};
-                if (type === 'dweb-connect-support-response') {
-                    clearTimeout(timeoutId);
-                    cleanup();
-                    resolve(!!supported);
-                }
-            };
-            window.addEventListener('message', onMessage);
-            iframe.addEventListener('load', () => {
-                var _a;
-                const walletOrigin = new URL(walletUrl).origin;
-                (_a = iframe.contentWindow) === null || _a === void 0 ? void 0 : _a.postMessage({
-                    type: 'dweb-connect-support-request',
-                    did,
-                }, walletOrigin);
-            });
-            document.body.appendChild(iframe);
+export function connectViaPopup(options) {
+    return __awaiter(this, void 0, void 0, function* () {
+        var _a;
+        const transport = new PopupClientTransport({
+            walletUrl: options.walletUrl,
+            timeoutMs: options.timeout,
         });
+        const client = new ConnectClient({ transport });
+        try {
+            return yield client.connect({
+                appName: (_a = options.appName) !== null && _a !== void 0 ? _a : globalThis.location.host,
+                appIcon: options.appIcon,
+                clientMetadata: collectBrowserClientMetadata(),
+                permissionRequests: options.permissionRequests,
+            });
+        }
+        catch (error) {
+            if (error instanceof PopupWindowClosedError) {
+                // The user closed the wallet before it loaded — same as a denial.
+                return undefined;
+            }
+            throw error;
+        }
     });
 }
-export const DWebConnect = { initClient, probeWalletSupport };
 //# sourceMappingURL=dweb-connect-client.js.map

package/dist/esm/dweb-connect-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"dweb-connect-client.js","sourceRoot":"","sources":["../../src/dweb-connect-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;;;;;;;;;;AAOH,OAAO,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AA6C/F,SAAS,4BAA4B;IACnC,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC,eAAe,EAAE,CAAC;IAChE,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC;QAC7D,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QAC1G,CAAC,CAAC,SAAS,CAAC;IAEd,qCACE,MAAM,EAAM,UAAU,CAAC,QAAQ,CAAC,MAAM,EACtC,SAAS,EAAG,UAAU,CAAC,SAAS,CAAC,SAAS,EAC1C,QAAQ,EAAI,UAAU,CAAC,SAAS,CAAC,QAAQ,EACzC,QAAQ,EAAI,UAAU,CAAC,SAAS,CAAC,QAAQ,IACtC,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GACxD,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,eAAe,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAC3E;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAe,UAAU,CAAC,OAAiC;;QACzD,MAAM,EACJ,SAAS,EACT,GAAG,EACH,kBAAkB,EAClB,OAAO,GAAG,MAAO,EACjB,OAAO,EACP,OAAO,EACP,gBAAgB,GACjB,GAAG,OAAO,CAAC;QAEZ,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAC;QACJ,CAAC;QAED,kDAAkD;QAClD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC;QAChE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CACvB,QAAQ,EACR,oBAAoB,EACpB,kEAAkE,CACnE,CAAC;QAEF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;QACJ,CAAC;QAED,+DAA+D;QAC/D,sEAAsE;QACtE,4DAA4D;QAC5D,qEAAqE;QACrE,wEAAwE;QACxE,IAAI,WAA0B,CAAC;QAC/B,IAAI,sBAA8B,CAAC;QAEnC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,wBAAwB,EAAE,CAAC;YACnD,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC;YAChC,sBAAsB,GAAG,SAAS,CAAC,kBAAkB,CAAC;QACxD,CAAC;QAAC,WAAM,CAAC;YACP,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CACb,8FAA8F;kBAC5F,qDAAqD,CACxD,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,OAAO,CAA4B,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAChE,IAAI,OAAO,GAAG,KAAK,CAAC;YAEpB,MAAM,OAAO,GAAG,GAAS,EAAE;gBACzB,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,SAAS,CAAC,CAAC;gBACxB,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACnD,CAAC,CAAC;YAEF,kBAAkB;YAClB,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAChC,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,EAAE,CAAC;oBACV,IAAI,CAAC;wBAAC,KAAK,CAAC,KAAK,EAAE,CAAC;oBAAC,CAAC;oBAAC,QAAQ,iBAAiB,IAAnB,CAAC,CAAC,iBAAiB,CAAC,CAAC;oBAClD,MAAM,CAAC,IAAI,KAAK,CACd,sEAAsE,CACvE,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,EAAE,OAAO,CAAC,CAAC;YAEZ,kEAAkE;YAClE,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE;gBAClC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;oBAC7B,aAAa,CAAC,UAAU,CAAC,CAAC;oBAC1B,OAAO,EAAE,CAAC;oBACV,OAAO,CAAC,SAAS,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC,EAAE,GAAG,CAAC,CAAC;YAER,MAAM,SAAS,GAAG,CAAC,KAAmB,EAAQ,EAAE;;gBAC9C,0CAA0C;gBAC1C,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;gBAC/C,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;oBAAA,OAAO;gBAAA,CAAC;gBAE5C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAA,KAAK,CAAC,IAAI,mCAAI,EAAE,CAAC;gBAElC,IAAI,IAAI,KAAK,qBAAqB,EAAE,CAAC;oBACnC,wDAAwD;oBACxD,kDAAkD;oBAClD,KAAK,CAAC,WAAW,CAAC;wBAChB,IAAI,EAAiB,oCAAoC;wBACzD,GAAG;wBACH,WAAW,EAAU,kBAAkB;wBACvC,kBAAkB,EAAG,sBAAsB;wBAC3C,OAAO;wBACP,OAAO;wBACP,cAAc,EAAO,4BAA4B,EAAE;wBACnD,gBAAgB;qBACjB,EAAE,YAAY,CAAC,CAAC;oBACjB,OAAO;gBACT,CAAC;gBAED,IAAI,IAAI,KAAK,qCAAqC,EAAE,CAAC;oBACnD,aAAa,CAAC,UAAU,CAAC,CAAC;oBAC1B,OAAO,EAAE,CAAC;oBAEV,yDAAyD;oBACzD,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;wBACrB,OAAO,CAAC,SAAS,CAAC,CAAC;wBACnB,OAAO;oBACT,CAAC;oBAED,0DAA0D;oBAC1D,+DAA+D;oBAC/D,wDAAwD;oBACxD,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,gBAA2D,CAAC;oBACzF,IAAI,CAAC,SAAS,EAAE,CAAC;wBACf,OAAO,CAAC,SAAS,CAAC,CAAC;wBACnB,OAAO;oBACT,CAAC;oBAED,yBAAyB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,OAAgC,EAAE,EAAE;;wBAC1F,MAAM,CAAC,GAAG,OAAc,CAAC;wBACzB,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;4BAChC,OAAO,CAAC,SAAS,CAAC,CAAC;4BACnB,OAAO;wBACT,CAAC;wBACD,OAAO,CAAC;4BACN,mBAAmB,EAAG,CAAC,CAAC,WAA0B;4BAClD,cAAc,EAAQ,CAAC,CAAC,MAA6C;4BACrE,YAAY,EAAU,MAAA,MAAA,CAAC,CAAC,YAAY,mCAAI,GAAG,mCAAK,CAAC,CAAC,WAA2B,CAAC,GAAG;4BACjF,kBAAkB,EAAI,MAAA,CAAC,CAAC,kBAAkB,mCAAI,SAAS;yBACxD,CAAC,CAAC;oBACL,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;wBACZ,uCAAuC;wBACvC,OAAO,CAAC,SAAS,CAAC,CAAC;oBACrB,CAAC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC;YAEF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC;CAAA;AAED;;;;;;;;;;;GAWG;AACH,SAAe,kBAAkB;yDAC/B,SAAiB,EACjB,GAAW,EACX,OAAO,GAAG,IAAK;QAEf,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;YAAA,OAAO,KAAK,CAAC;QAAA,CAAC;QAElD,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;YACtC,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;YAChD,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC;YAC9B,MAAM,CAAC,GAAG,GAAG,SAAS,CAAC;YAEvB,IAAI,OAAO,GAAG,KAAK,CAAC;YAEpB,MAAM,OAAO,GAAG,GAAS,EAAE;gBACzB,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;gBACjD,IAAI,CAAC;oBAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;gBAAC,CAAC;gBAAC,QAAQ,iBAAiB,IAAnB,CAAC,CAAC,iBAAiB,CAAC,CAAC;YACxE,CAAC,CAAC;YAEF,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAChC,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,EAAE,CAAC;oBACV,OAAO,CAAC,KAAK,CAAC,CAAC;gBACjB,CAAC;YACH,CAAC,EAAE,OAAO,CAAC,CAAC;YAEZ,MAAM,SAAS,GAAG,CAAC,KAAmB,EAAQ,EAAE;;gBAC9C,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;gBAC/C,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;oBAAC,OAAO;gBAAC,CAAC;gBAE9C,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,MAAA,KAAK,CAAC,IAAI,mCAAI,EAAE,CAAC;gBAC7C,IAAI,IAAI,KAAK,+BAA+B,EAAE,CAAC;oBAC7C,YAAY,CAAC,SAAS,CAAC,CAAC;oBACxB,OAAO,EAAE,CAAC;oBACV,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC,CAAC;YAEF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAE9C,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE;;gBACnC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;gBAC/C,MAAA,MAAM,CAAC,aAAa,0CAAE,WAAW,CAAC;oBAChC,IAAI,EAAE,8BAA8B;oBACpC,GAAG;iBACJ,EAAE,YAAY,CAAC,CAAC;YACnB,CAAC,CAAC,CAAC;YAEH,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC;CAAA;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,UAAU,EAAE,kBAAkB,EAAE,CAAC"}
+{"version":3,"file":"dweb-connect-client.js","sourceRoot":"","sources":["../../src/dweb-connect-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;;;;;;;;;AAWH,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE5F,OAAO,EACL,gCAAgC,EAChC,iBAAiB,EACjB,iCAAiC,EACjC,kCAAkC,EAClC,iBAAiB,GAClB,MAAM,4BAA4B,CAAC;AAEpC,uFAAuF;AACvF,MAAM,kBAAkB,GAAG,MAAO,CAAC;AAEnC,gFAAgF;AAChF,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAEpC,6CAA6C;AAC7C,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAE/C,iDAAiD;AACjD,MAAM,qBAAqB,GAAG,kEAAkE,CAAC;AAEjG,0EAA0E;AAC1E,SAAS,wBAAwB;IAC/B,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC9F,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC/C;QACE,KAAK,CAAC,8EAA8E,CAAC,CAAC;QACtF,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAeD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAO,oBAAoB;IAsB/B,YAAY,OAAoC;;QArBhD,iDAAiD;QACjC,gBAAW,GAAY,KAAK,CAAC;QAMrC,aAAQ,GAAG,KAAK,CAAC;QACjB,uBAAkB,GAAG,KAAK,CAAC;QAcjC,wBAAwB,EAAE,CAAC;QAE3B,IAAI,CAAC,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;QACvD,IAAI,CAAC,UAAU,GAAG,MAAA,OAAO,CAAC,SAAS,mCAAI,kBAAkB,CAAC;QAE1D,uEAAuE;QACvE,yEAAyE;QACzE,yEAAyE;QACzE,4EAA4E;QAC5E,yEAAyE;QACzE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,iBAAiB,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC1E,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,iBAAiB,EAAE,qBAAqB,CAAC,CAAC;QAC9E,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAC;QACxG,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QAEpB,IAAI,CAAC,iBAAiB,GAAG,IAAI,OAAO,CAAM,CAAC,OAAO,EAAE,MAAM,EAAQ,EAAE;YAClE,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC;YACjC,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,2DAA2D;QAC3D,sEAAsE;QACtE,wEAAwE;QACxE,8DAA8D;QAC9D,IAAI,CAAC,gBAAgB,GAAG,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAQ,EAAE;YACpE,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC;YAChC,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC;QAChC,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,GAAc,EAAE,CAAC,SAAS,CAAC,CAAC;QAExD,qEAAqE;QACrE,oEAAoE;QACpE,0CAA0C;QAC1C,IAAI,CAAC,gBAAgB,GAAG,CAAC,KAAmB,EAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAClF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAE1D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,GAAS,EAAE;YACtC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC,CAAC;QAC/F,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAEpB,IAAI,CAAC,aAAa,GAAG,WAAW,CAAC,GAAS,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC;IAClG,CAAC;IAED;;;;;;;;;;;;;OAaG;IACU,cAAc,CAAC,KAAa;;YACvC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC;YAE/C,OAAO;gBACL,UAAU,EAAG,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,aAAa,EAAE;gBAC7E,KAAK,EAAQ,EAAE,IAAI,EAAE,cAAc,EAAE;gBACrC,KAAK;aACN,CAAC;QACJ,CAAC;KAAA;IAED;;;OAGG;IACU,cAAc,CAAC,GAAW;;YACrC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,iCAAiC,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAChG,CAAC;KAAA;IAED;;;;OAIG;IACU,aAAa;;YACxB,OAAO,MAAM,IAAI,CAAC,gBAAgB,CAAC;QACrC,CAAC;KAAA;IAEO,SAAS,CAAC,KAAmB;QACnC,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1E,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QAEtC,IAAI,OAAO,CAAC,IAAI,KAAK,gCAAgC,EAAE,CAAC;YACtD,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,kCAAkC,EAAE,CAAC;YACxD,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,OAAgC;;QACrD,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QAEzD,yEAAyE;QACzE,yEAAyE;QACzE,6DAA6D;QAC7D,IAAI,SAAc,CAAC;QACnB,IAAI,CAAC;YACH,qBAAqB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACzC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QAChC,CAAC;QAAC,WAAM,CAAC;YACP,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC,CAAC;YACvG,OAAO;QACT,CAAC;QAED,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC;YAChD,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,2FAA2F,CAAC,CAAC,CAAC;YAClH,OAAO;QACT,CAAC;QAED,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAC/B,MAAA,IAAI,CAAC,iBAAiB,qDAAG,SAAS,CAAC,CAAC;IACtC,CAAC;IAEO,iBAAiB,CAAC,OAAgC;;QACxD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QAE9B,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACxC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC,CAAC;YACrG,OAAO;QACT,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,sEAAsE;QACtE,qCAAqC;QACrC,MAAA,IAAI,CAAC,gBAAgB,qDAAG,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC,CAAC;QAC9G,MAAA,IAAI,CAAC,gBAAgB,qDAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;IAEO,YAAY;;QAClB,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QAE7D,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC7B,uEAAuE;YACvE,IAAI,CAAC,IAAI,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;QAED,uEAAuE;QACvE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,MAAA,IAAI,CAAC,gBAAgB,qDAAG,oBAAoB,CAAC,CAAC;IAChD,CAAC;IAEO,IAAI,CAAC,KAAY;;QACvB,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QAC9B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,IAAI,CAAC;YAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QAAC,QAAQ,iBAAiB,IAAnB,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACxD,MAAA,IAAI,CAAC,gBAAgB,qDAAG,KAAK,CAAC,CAAC;QAC/B,MAAA,IAAI,CAAC,eAAe,qDAAG,KAAK,CAAC,CAAC;IAChC,CAAC;IAEO,OAAO;QACb,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9B,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACxC,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC7D,IAAI,CAAC,gBAAgB,GAAG,SAAS,CAAC;QACpC,CAAC;IACH,CAAC;CACF;AA6BD,iFAAiF;AACjF,SAAS,4BAA4B;IACnC,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC,eAAe,EAAE,CAAC;IAChE,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC;QAC7D,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QAC1G,CAAC,CAAC,SAAS,CAAC;IAEd,qCACE,MAAM,EAAM,UAAU,CAAC,QAAQ,CAAC,MAAM,EACtC,SAAS,EAAG,UAAU,CAAC,SAAS,CAAC,SAAS,EAC1C,QAAQ,EAAI,UAAU,CAAC,SAAS,CAAC,QAAQ,EACzC,QAAQ,EAAI,UAAU,CAAC,SAAS,CAAC,QAAQ,IACtC,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GACxD,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,eAAe,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAC3E;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAgB,eAAe,CAAC,OAA4B;;;QAChE,MAAM,SAAS,GAAG,IAAI,oBAAoB,CAAC;YACzC,SAAS,EAAG,OAAO,CAAC,SAAS;YAC7B,SAAS,EAAG,OAAO,CAAC,OAAO;SAC5B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;QAEhD,IAAI,CAAC;YACH,OAAO,MAAM,MAAM,CAAC,OAAO,CAAC;gBAC1B,OAAO,EAAc,MAAA,OAAO,CAAC,OAAO,mCAAI,UAAU,CAAC,QAAQ,CAAC,IAAI;gBAChE,OAAO,EAAc,OAAO,CAAC,OAAO;gBACpC,cAAc,EAAO,4BAA4B,EAAE;gBACnD,kBAAkB,EAAG,OAAO,CAAC,kBAAkB;aAChD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,sBAAsB,EAAE,CAAC;gBAC5C,kEAAkE;gBAClE,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CAAA"}

package/dist/esm/dweb-connect-messages.js

@@ -0,0 +1,54 @@
+/**
+ * Wire shapes for the DWeb Connect popup/postMessage channel.
+ *
+ * The dapp and the wallet exchange exactly three message kinds over
+ * `window.postMessage`:
+ *
+ * 1. `loaded` beacon (wallet → dapp): announces the wallet page is ready and
+ *    carries a fresh ephemeral X25519 public key plus the wallet's origin.
+ * 2. `request` (dapp → wallet): the sealed connect request JWE — ciphertext
+ *    only, encrypted to the beacon key with ECDH-ES and the wallet origin
+ *    bound into the JWE `apv` header.
+ * 3. `response` (wallet → dapp): the sealed connect response JWE, or the
+ *    literal deny token — again ciphertext only.
+ *
+ * Plaintext never crosses the channel, and both sides pin `targetOrigin`
+ * and verify `event.origin` / `event.source` on every message.
+ *
+ * @module
+ */
+/** Path of the wallet's DWeb Connect page, opened as a popup by the dapp. */
+export const DWEB_CONNECT_PATH = '/dweb-connect';
+/** Message type of the wallet's `loaded` beacon (wallet → dapp). */
+export const DWEB_CONNECT_LOADED_MESSAGE_TYPE = 'enbox-connect-loaded';
+/** Message type carrying the sealed connect request JWE (dapp → wallet). */
+export const DWEB_CONNECT_REQUEST_MESSAGE_TYPE = 'enbox-connect-request';
+/** Message type carrying the sealed connect response JWE or deny token (wallet → dapp). */
+export const DWEB_CONNECT_RESPONSE_MESSAGE_TYPE = 'enbox-connect-response';
+/**
+ * Applies the shared inbound-message trust filter for the popup channel:
+ * pins the message to the expected `event.origin`, pins its `event.source` to
+ * the expected window, and requires a non-null object payload.
+ *
+ * Returns the payload cast to a plain record when every check passes, or
+ * `undefined` when the message must be dropped. Both the dapp-side and
+ * wallet-side transports early-return on `undefined` before inspecting any
+ * message field — this is the security-critical filter that keeps hostile
+ * origins and stray windows off the channel.
+ */
+export function getTrustedMessage(event, expectedOrigin, expectedSource) {
+    // Origin pinning: only messages from the expected origin count.
+    if (event.origin !== expectedOrigin) {
+        return undefined;
+    }
+    // Source pinning: the message must come from the expected window.
+    if (event.source !== expectedSource) {
+        return undefined;
+    }
+    const data = event.data;
+    if (typeof data !== 'object' || data === null) {
+        return undefined;
+    }
+    return data;
+}
+//# sourceMappingURL=dweb-connect-messages.js.map

package/dist/esm/dweb-connect-messages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dweb-connect-messages.js","sourceRoot":"","sources":["../../src/dweb-connect-messages.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,iBAAiB,GAAG,eAAe,CAAC;AAEjD,oEAAoE;AACpE,MAAM,CAAC,MAAM,gCAAgC,GAAG,sBAAsB,CAAC;AAEvE,4EAA4E;AAC5E,MAAM,CAAC,MAAM,iCAAiC,GAAG,uBAAuB,CAAC;AAEzE,2FAA2F;AAC3F,MAAM,CAAC,MAAM,kCAAkC,GAAG,wBAAwB,CAAC;AAgC3E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAmB,EACnB,cAAsB,EACtB,cAAkC;IAElC,gEAAgE;IAChE,IAAI,KAAK,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;IAE1D,kEAAkE;IAClE,IAAI,KAAK,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;IAE1D,MAAM,IAAI,GAAY,KAAK,CAAC,IAAI,CAAC;IACjC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;IAEpE,OAAO,IAA+B,CAAC;AACzC,CAAC"}