@enbox/browser 0.3.42 → 0.3.44

package/dist/esm/ui/wallet-well-known.js

@@ -0,0 +1,61 @@
+/**
+ * Wallet discovery via the `/.well-known/enbox-connect` document.
+ *
+ * Shared by the connect modal (relay discovery + custom-URL validation)
+ * and exported for dapps rolling their own wallet selection UI.
+ *
+ * @module
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+/** Path of the wallet's connect discovery document, relative to its origin. */
+export const WALLET_WELL_KNOWN_PATH = '/.well-known/enbox-connect';
+/** Timeout applied to the well-known validation fetch. */
+const WELL_KNOWN_FETCH_TIMEOUT_MS = 6000;
+/**
+ * Fetch a wallet's `/.well-known/enbox-connect` discovery document.
+ *
+ * Resolves the parsed document when it is reachable and names a
+ * `connectServerUrl`; resolves `undefined` for unreachable origins, non-2xx
+ * responses, CORS failures, and malformed documents.
+ */
+export function fetchWalletWellKnown(origin) {
+    return __awaiter(this, void 0, void 0, function* () {
+        try {
+            const wellKnownUrl = new URL(WALLET_WELL_KNOWN_PATH, origin).toString();
+            const response = yield fetch(wellKnownUrl, { signal: AbortSignal.timeout(WELL_KNOWN_FETCH_TIMEOUT_MS) });
+            if (!response.ok) {
+                return undefined;
+            }
+            const payload = yield response.json();
+            if (typeof (payload === null || payload === void 0 ? void 0 : payload.connectServerUrl) !== 'string') {
+                return undefined;
+            }
+            return { connectServerUrl: payload.connectServerUrl };
+        }
+        catch (_a) {
+            return undefined;
+        }
+    });
+}
+/**
+ * Fetch a wallet's `/.well-known/enbox-connect` discovery document to confirm
+ * the origin hosts an Enbox-compatible wallet.
+ *
+ * Resolves `true` only when the document is reachable and names a
+ * `connectServerUrl`. Unreachable origins, non-2xx responses, CORS failures,
+ * and malformed documents resolve `false`.
+ */
+export function probeWalletWellKnown(origin) {
+    return __awaiter(this, void 0, void 0, function* () {
+        return (yield fetchWalletWellKnown(origin)) !== undefined;
+    });
+}
+//# sourceMappingURL=wallet-well-known.js.map

package/dist/esm/ui/wallet-well-known.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-well-known.js","sourceRoot":"","sources":["../../../src/ui/wallet-well-known.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;;;;;;;;;;AAEH,+EAA+E;AAC/E,MAAM,CAAC,MAAM,sBAAsB,GAAG,4BAA4B,CAAC;AAEnE,0DAA0D;AAC1D,MAAM,2BAA2B,GAAG,IAAK,CAAC;AAQ1C;;;;;;GAMG;AACH,MAAM,UAAgB,oBAAoB,CAAC,MAAc;;QACvD,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;YACxE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,2BAA2B,CAAC,EAAE,CAAC,CAAC;YACzG,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA2C,CAAC;YAC/E,IAAI,OAAO,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,gBAAgB,CAAA,KAAK,QAAQ,EAAE,CAAC;gBAClD,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;QACxD,CAAC;QAAC,WAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;CAAA;AAED;;;;;;;GAOG;AACH,MAAM,UAAgB,oBAAoB,CAAC,MAAc;;QACvD,OAAO,CAAC,MAAM,oBAAoB,CAAC,MAAM,CAAC,CAAC,KAAK,SAAS,CAAC;IAC5D,CAAC;CAAA"}

package/dist/types/browser-connect-handler.d.ts

@@ -7,6 +7,7 @@
  * @module
  */
 import type { ConnectHandler } from '@enbox/auth';
+import type { ConnectMethod } from './ui/connect-modal.js';
 /** A wallet entry shown in the wallet selector modal. */
 export interface WalletOption {
     /** Display name (e.g. "Enbox"). */
@@ -48,16 +49,40 @@ export interface BrowserConnectHandlerOptions {
      * Defaults to `${window.location.origin}/favicon.ico` if omitted.
      */
     appIcon?: string;
+    /**
+     * Preferred connect method on open: `'phone'` (QR / deep link via the
+     * relay) or `'browser'` (wallet popup on this device). Overrides the
+     * remembered choice.
+     * @default 'phone'
+     */
+    preferredMethod?: ConnectMethod;
+    /**
+     * Remember the successful method + wallet in localStorage and pre-shape
+     * the next connect session accordingly.
+     * @default true
+     */
+    rememberChoice?: boolean;
+    /**
+     * Relay base URL override for the phone path. When omitted, each wallet's
+     * `connectServerUrl` is discovered from its `/.well-known/enbox-connect`
+     * document.
+     */
+    connectServerUrl?: string;
+    /**
+     * Path appended to the wallet origin to form the phone path's QR /
+     * deep-link target.
+     * @default '/connect/app'
+     */
+    relayWalletPath?: string;
 }
 /**
- * Create a browser-native connect handler using DWeb Connect
- * (popup + postMessage).
+ * Create a browser-native connect handler over the connect modal.
  *
- * This handler:
- * 1. Shows a wallet selector modal (or uses a provided walletUrl).
- * 2. Opens the selected wallet as a popup window.
- * 3. Runs the DWeb Connect postMessage protocol.
- * 4. Returns the delegate credentials on success.
+ * The modal owns the whole session on one surface: the phone path (a QR /
+ * deep link over the relay, with pairing-code entry) is the default, the
+ * in-browser wallet popup is the alternate, and the wallet catalog plus
+ * custom-URL entry live in a disclosure. It resolves with the delegate
+ * credentials on success and `undefined` when the user denies.
  *
  * @example
  * ```ts

package/dist/types/browser-connect-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser-connect-handler.d.ts","sourceRoot":"","sources":["../../src/browser-connect-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAiB,MAAM,aAAa,CAAC;AAKjE,yDAAyD;AACzD,MAAM,WAAW,YAAY;IAC3B,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC;IAEb,0EAA0E;IAC1E,GAAG,EAAE,MAAM,CAAC;IAEZ,mEAAmE;IACnE,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,qEAAqE;IACrE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,4EAA4E;AAC5E,eAAO,MAAM,eAAe,EAAE,YAAY,EAqBzC,CAAC;AAEF,oDAAoD;AACpD,MAAM,WAAW,4BAA4B;IAC3C;;;OAGG;IACH,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IAEzB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAElB;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,GAAE,4BAAiC,GACzC,cAAc,CA6BhB"}
+{"version":3,"file":"browser-connect-handler.d.ts","sourceRoot":"","sources":["../../src/browser-connect-handler.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAiB,MAAM,aAAa,CAAC;AAIjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,yDAAyD;AACzD,MAAM,WAAW,YAAY;IAC3B,mCAAmC;IACnC,IAAI,EAAE,MAAM,CAAC;IAEb,0EAA0E;IAC1E,GAAG,EAAE,MAAM,CAAC;IAEZ,mEAAmE;IACnE,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,qEAAqE;IACrE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,4EAA4E;AAC5E,eAAO,MAAM,eAAe,EAAE,YAAY,EAqBzC,CAAC;AAEF,oDAAoD;AACpD,MAAM,WAAW,4BAA4B;IAC3C;;;OAGG;IACH,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IAEzB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;;;OAKG;IACH,eAAe,CAAC,EAAE,aAAa,CAAC;IAEhC;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IAEzB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,GAAE,4BAAiC,GACzC,cAAc,CA+BhB"}

package/dist/types/dweb-connect-client.d.ts

@@ -19,7 +19,7 @@
  *
  * @module
  */
-import type { ConnectPermissionRequest, ConnectRequestProfile, ConnectResult, ConnectTransport } from '@enbox/connect';
+import type { ConnectClientMetadata, ConnectPermissionRequest, ConnectRequestProfile, ConnectResult, ConnectTransport } from '@enbox/connect';
 /**
  * Thrown when the user closes the wallet popup before the wallet finished
  * loading (i.e. before its `loaded` beacon arrived). Callers typically treat
@@ -132,6 +132,8 @@ export type PopupConnectOptions = {
      */
     appIcon?: string;
 };
+/** Collects self-reported environment hints for the wallet's session display. */
+export declare function collectBrowserClientMetadata(): ConnectClientMetadata;
 /**
  * Runs one DWeb Connect popup handshake end-to-end: opens the wallet popup,
  * drives the `@enbox/connect` kernel client over a {@link PopupClientTransport},

package/dist/types/dweb-connect-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dweb-connect-client.d.ts","sourceRoot":"","sources":["../../src/dweb-connect-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,KAAK,EAEV,wBAAwB,EACxB,qBAAqB,EACrB,aAAa,EACb,gBAAgB,EACjB,MAAM,gBAAgB,CAAC;AA+BxB;;;;GAIG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;;CAKhD;AAED,+DAA+D;AAC/D,MAAM,MAAM,2BAA2B,GAAG;IACxC,0EAA0E;IAC1E,SAAS,EAAE,MAAM,CAAC;IAElB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,oBAAqB,YAAW,gBAAgB;IAC3D,iDAAiD;IACjD,SAAgB,WAAW,EAAE,OAAO,CAAS;IAE7C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IAEpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,kBAAkB,CAAS;IACnC,OAAO,CAAC,UAAU,CAAC,CAAgC;IACnD,OAAO,CAAC,aAAa,CAAC,CAAiC;IACvD,OAAO,CAAC,gBAAgB,CAAC,CAAgC;IAEzD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAe;IACjD,OAAO,CAAC,iBAAiB,CAAC,CAA2B;IACrD,OAAO,CAAC,gBAAgB,CAAC,CAAyB;IAElD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAkB;IACnD,OAAO,CAAC,gBAAgB,CAAC,CAA4B;IACrD,OAAO,CAAC,eAAe,CAAC,CAAyB;gBAErC,OAAO,EAAE,2BAA2B;IA8ChD;;;;;;;;;;;;;OAaG;IACU,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAU1E;;;OAGG;IACU,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvD;;;;OAIG;IACU,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC;IAI7C,OAAO,CAAC,SAAS;IAcjB,OAAO,CAAC,cAAc;IAwBtB,OAAO,CAAC,iBAAiB;IAgBzB,OAAO,CAAC,YAAY;IAepB,OAAO,CAAC,IAAI;IASZ,OAAO,CAAC,OAAO;CAQhB;AAED,2DAA2D;AAC3D,MAAM,MAAM,mBAAmB,GAAG;IAChC,0EAA0E;IAC1E,SAAS,EAAE,MAAM,CAAC;IAElB,sEAAsE;IACtE,kBAAkB,EAAE,wBAAwB,EAAE,CAAC;IAE/C;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAmBF;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAqBtG"}
+{"version":3,"file":"dweb-connect-client.d.ts","sourceRoot":"","sources":["../../src/dweb-connect-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,KAAK,EACV,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,aAAa,EACb,gBAAgB,EACjB,MAAM,gBAAgB,CAAC;AA+BxB;;;;GAIG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;;CAKhD;AAED,+DAA+D;AAC/D,MAAM,MAAM,2BAA2B,GAAG;IACxC,0EAA0E;IAC1E,SAAS,EAAE,MAAM,CAAC;IAElB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,oBAAqB,YAAW,gBAAgB;IAC3D,iDAAiD;IACjD,SAAgB,WAAW,EAAE,OAAO,CAAS;IAE7C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IAEpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,kBAAkB,CAAS;IACnC,OAAO,CAAC,UAAU,CAAC,CAAgC;IACnD,OAAO,CAAC,aAAa,CAAC,CAAiC;IACvD,OAAO,CAAC,gBAAgB,CAAC,CAAgC;IAEzD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAe;IACjD,OAAO,CAAC,iBAAiB,CAAC,CAA2B;IACrD,OAAO,CAAC,gBAAgB,CAAC,CAAyB;IAElD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAkB;IACnD,OAAO,CAAC,gBAAgB,CAAC,CAA4B;IACrD,OAAO,CAAC,eAAe,CAAC,CAAyB;gBAErC,OAAO,EAAE,2BAA2B;IA8ChD;;;;;;;;;;;;;OAaG;IACU,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAU1E;;;OAGG;IACU,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvD;;;;OAIG;IACU,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC;IAI7C,OAAO,CAAC,SAAS;IAcjB,OAAO,CAAC,cAAc;IAwBtB,OAAO,CAAC,iBAAiB;IAgBzB,OAAO,CAAC,YAAY;IAepB,OAAO,CAAC,IAAI;IASZ,OAAO,CAAC,OAAO;CAQhB;AAED,2DAA2D;AAC3D,MAAM,MAAM,mBAAmB,GAAG;IAChC,0EAA0E;IAC1E,SAAS,EAAE,MAAM,CAAC;IAElB,sEAAsE;IACtE,kBAAkB,EAAE,wBAAwB,EAAE,CAAC;IAE/C;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,iFAAiF;AACjF,wBAAgB,4BAA4B,IAAI,qBAAqB,CAcpE;AAED;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAqBtG"}

package/dist/types/index.d.ts

@@ -38,6 +38,18 @@ export { WalletPostMessageTransport } from './dweb-connect-wallet.js';
 export type { WalletPostMessageTransportOptions } from './dweb-connect-wallet.js';
 export { DWEB_CONNECT_LOADED_MESSAGE_TYPE, DWEB_CONNECT_PATH, DWEB_CONNECT_REQUEST_MESSAGE_TYPE, DWEB_CONNECT_RESPONSE_MESSAGE_TYPE, } from './dweb-connect-messages.js';
 export type { DWebConnectLoadedMessage, DWebConnectRequestMessage, DWebConnectResponseMessage, } from './dweb-connect-messages.js';
-export type { WalletSelectorOptions } from './ui/wallet-selector.js';
-export { probeWalletWellKnown, showWalletSelector, WALLET_WELL_KNOWN_PATH } from './ui/wallet-selector.js';
+export { fetchWalletWellKnown, probeWalletWellKnown, WALLET_WELL_KNOWN_PATH } from './ui/wallet-well-known.js';
+export type { WalletWellKnownDocument } from './ui/wallet-well-known.js';
+export { discoverWalletConnectServerUrl, runConnectModal } from './ui/connect-modal.js';
+export type { ConnectMethod, ConnectModalDeps, ConnectModalOptions } from './ui/connect-modal.js';
+export { MAX_PIN_ATTEMPTS, RelayConnectCancelledError, runRelayConnect } from './relay-connect-runner.js';
+export type { RelayConnectOptions } from './relay-connect-runner.js';
+export { encodeQr, qrToSvg } from './ui/qr.js';
+export type { QrCode, QrSvgOptions } from './ui/qr.js';
+export { TypedRecord } from '@enbox/api';
+export { BrowserStorage } from '@enbox/auth/browser';
+export type { ProviderAuthParams, ProviderAuthResult } from '@enbox/auth/browser';
+export { DwnInterface } from '@enbox/agent';
+export { DateSort, DwnInterfaceName, DwnMethodName } from '@enbox/dwn-sdk-js';
+export type { ProtocolActionRule, ProtocolDefinition } from '@enbox/dwn-sdk-js';
 //# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAMH,OAAO,EACL,KAAK,EACL,cAAc,EACd,UAAU,GACX,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,WAAW,EACX,kBAAkB,GACnB,MAAM,YAAY,CAAC;AAMpB,OAAO,EACL,WAAW,EACX,WAAW,EACX,yBAAyB,EACzB,aAAa,GACd,MAAM,qBAAqB,CAAC;AAE7B,YAAY,EACV,SAAS,EACT,gBAAgB,EAChB,kBAAkB,EAClB,SAAS,EACT,cAAc,EACd,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,qBAAqB,EACrB,yBAAyB,EACzB,mBAAmB,EACnB,UAAU,EACV,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,cAAc,EACd,UAAU,EACV,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAO7B,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACvE,YAAY,EAAE,eAAe,EAAE,wBAAwB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAMhG,cAAc,mBAAmB,CAAC;AAClC,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACtF,YAAY,EAAE,4BAA4B,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC/F,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AACzG,YAAY,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACjG,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACtE,YAAY,EAAE,iCAAiC,EAAE,MAAM,0BAA0B,CAAC;AAClF,OAAO,EACL,gCAAgC,EAChC,iBAAiB,EACjB,iCAAiC,EACjC,kCAAkC,GACnC,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,wBAAwB,EACxB,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC;AACpC,YAAY,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAMH,OAAO,EACL,KAAK,EACL,cAAc,EACd,UAAU,GACX,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,WAAW,EACX,kBAAkB,GACnB,MAAM,YAAY,CAAC;AAMpB,OAAO,EACL,WAAW,EACX,WAAW,EACX,yBAAyB,EACzB,aAAa,GACd,MAAM,qBAAqB,CAAC;AAE7B,YAAY,EACV,SAAS,EACT,gBAAgB,EAChB,kBAAkB,EAClB,SAAS,EACT,cAAc,EACd,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,qBAAqB,EACrB,yBAAyB,EACzB,mBAAmB,EACnB,UAAU,EACV,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,cAAc,EACd,UAAU,EACV,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAO7B,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACvE,YAAY,EAAE,eAAe,EAAE,wBAAwB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAMhG,cAAc,mBAAmB,CAAC;AAClC,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACtF,YAAY,EAAE,4BAA4B,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC/F,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AACzG,YAAY,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACjG,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACtE,YAAY,EAAE,iCAAiC,EAAE,MAAM,0BAA0B,CAAC;AAClF,OAAO,EACL,gCAAgC,EAChC,iBAAiB,EACjB,iCAAiC,EACjC,kCAAkC,GACnC,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,wBAAwB,EACxB,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAC/G,YAAY,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EAAE,8BAA8B,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxF,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAClG,OAAO,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC1G,YAAY,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAC/C,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAWvD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAIzC,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAGlF,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAI5C,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC9E,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/types/relay-connect-runner.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Relay connect runner — the dapp side of the QR/deep-link connect flow,
+ * with interactive PIN retry.
+ *
+ * This mirrors the `@enbox/connect` kernel `ConnectClient` step-for-step and
+ * is composed entirely from the kernel's exported primitives (`sealRequest`,
+ * `openResponse`, `RelayClientTransport`); no cryptography is reimplemented
+ * here. It exists as a separate orchestrator for one reason the kernel
+ * client cannot express today: **PIN retry against the delivered response**.
+ * `ConnectClient` collects the PIN once and opens the response once, so a
+ * mistyped code fails the whole handshake — the wallet user would have to
+ * scan and approve again. The connect modal instead keeps the sealed
+ * response and re-runs `openResponse` per attempt, which is safe because
+ * opening is a pure decrypt-and-verify step.
+ *
+ * If the kernel later grows a PIN-attempts seam, this module collapses into
+ * `ConnectClient` usage.
+ *
+ * @module
+ */
+import type { ConnectClientMetadata, ConnectPermissionRequest, ConnectResult, WalletUriHandoff } from '@enbox/connect';
+import { RelayClientTransport } from '@enbox/connect';
+/** Maximum interactive PIN attempts before the handshake fails. */
+export declare const MAX_PIN_ATTEMPTS = 6;
+/** Thrown internally when a relay handshake is cancelled by the UI. */
+export declare class RelayConnectCancelledError extends Error {
+    constructor();
+}
+/** Options for {@link runRelayConnect}. */
+export interface RelayConnectOptions {
+    /** Relay base URL (the wallet's `connectServerUrl`). */
+    connectServerUrl: string;
+    /** Wallet URI the request pointer is attached to (QR / deep-link target). */
+    walletUri: string;
+    /** The user-friendly name of the app, shown in the wallet consent UI. */
+    appName: string;
+    /** Optional icon URL for the app, shown in the wallet consent UI. */
+    appIcon?: string;
+    /** Optional client/environment metadata for wallet session display. */
+    clientMetadata?: ConnectClientMetadata;
+    /** DWN protocols and permission scopes being requested. */
+    permissionRequests: ConnectPermissionRequest[];
+    /** Total milliseconds to poll the relay for a wallet response. */
+    timeoutMs?: number;
+    /** Milliseconds between relay polling attempts. */
+    pollIntervalMs?: number;
+    /**
+     * Receives the wallet URI handoff (with the request pointer TTL) as soon
+     * as the request is delivered — render it as a QR code or deep link.
+     */
+    onWalletUriReady: (handoff: WalletUriHandoff) => void;
+    /**
+     * Collects one PIN attempt from the user. Called again (with the attempt
+     * number, 1-based, and the previous failure) after a wrong code, up to
+     * {@link MAX_PIN_ATTEMPTS} times.
+     */
+    requestPin: (attempt: number, previousError?: Error) => Promise<string>;
+    /**
+     * Cancellation signal: when it settles, polling stops and the handshake
+     * rejects with {@link RelayConnectCancelledError}.
+     */
+    cancelled?: Promise<never> | undefined;
+    /** Transport factory override (tests). */
+    createTransport?: (options: {
+        connectServerUrl: string;
+        walletUri: string;
+        timeoutMs?: number;
+        pollIntervalMs?: number;
+    }) => Pick<RelayClientTransport, 'requestProfile' | 'deliverRequest' | 'awaitResponse' | 'requiresPin'>;
+}
+/**
+ * Runs one relay-mediated connect handshake end-to-end and returns the
+ * delegated credentials, or `undefined` when the user denied in the wallet.
+ */
+export declare function runRelayConnect(options: RelayConnectOptions): Promise<ConnectResult | undefined>;
+//# sourceMappingURL=relay-connect-runner.d.ts.map

package/dist/types/relay-connect-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-connect-runner.d.ts","sourceRoot":"","sources":["../../src/relay-connect-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,KAAK,EACV,qBAAqB,EACrB,wBAAwB,EAExB,aAAa,EACb,gBAAgB,EACjB,MAAM,gBAAgB,CAAC;AAIxB,OAAO,EAIL,oBAAoB,EAErB,MAAM,gBAAgB,CAAC;AAExB,mEAAmE;AACnE,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAElC,uEAAuE;AACvE,qBAAa,0BAA2B,SAAQ,KAAK;;CAKpD;AAED,2CAA2C;AAC3C,MAAM,WAAW,mBAAmB;IAClC,wDAAwD;IACxD,gBAAgB,EAAE,MAAM,CAAC;IAEzB,6EAA6E;IAC7E,SAAS,EAAE,MAAM,CAAC;IAElB,yEAAyE;IACzE,OAAO,EAAE,MAAM,CAAC;IAEhB,qEAAqE;IACrE,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,uEAAuE;IACvE,cAAc,CAAC,EAAE,qBAAqB,CAAC;IAEvC,2DAA2D;IAC3D,kBAAkB,EAAE,wBAAwB,EAAE,CAAC;IAE/C,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,mDAAmD;IACnD,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB;;;OAGG;IACH,gBAAgB,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,IAAI,CAAC;IAEtD;;;;OAIG;IACH,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,KAAK,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAExE;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC;IAEvC,0CAA0C;IAC1C,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE;QAC1B,gBAAgB,EAAE,MAAM,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,KAAK,IAAI,CAAC,oBAAoB,EAAE,gBAAgB,GAAG,gBAAgB,GAAG,eAAe,GAAG,aAAa,CAAC,CAAC;CACzG;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CA2FtG"}

package/dist/types/ui/connect-modal.d.ts

@@ -0,0 +1,108 @@
+/**
+ * Connect modal — the single surface that owns a whole connect session.
+ *
+ * One Shadow-DOM dialog whose stage morphs in place through the session:
+ * QR (phone path) → pairing code → connected, with the in-browser popup
+ * path and the wallet catalog folded in as in-place alternates. The modal
+ * never chains into a second modal and stays mounted until the session
+ * resolves (connected / denied / cancelled).
+ *
+ * Layout: three zones —
+ *
+ * 1. **Header** — requesting app identity + close.
+ * 2. **Stage** — a height-stable region where states crossfade: the QR
+ *    (or deep link on phones), the pairing-code input, progress, success,
+ *    and error states.
+ * 3. **Footer** — the alternate-method link and the wallet switcher
+ *    disclosure (catalog + custom URL — the entire legacy selector,
+ *    demoted to an option).
+ *
+ * The phone path drives the `@enbox/connect` relay transport via
+ * {@link runRelayConnect}; the browser path drives the popup transport via
+ * the kernel `ConnectClient`. Wallet `connectServerUrl`s are discovered
+ * from each wallet's `/.well-known/enbox-connect` document unless
+ * overridden.
+ *
+ * @module
+ */
+import type { WalletOption } from '../browser-connect-handler.js';
+import type { ConnectPermissionRequest, ConnectResult } from '@enbox/connect';
+import { runRelayConnect } from '../relay-connect-runner.js';
+/** How the user carries out the approval. */
+export type ConnectMethod = 'phone' | 'browser';
+/** Options for {@link runConnectModal}. */
+export interface ConnectModalOptions {
+    /** Wallet catalog shown in the wallet switcher. */
+    wallets?: WalletOption[];
+    /**
+     * Explicit wallet URL: hides the catalog switcher and uses this wallet
+     * for both methods.
+     */
+    walletUrl?: string;
+    /** Preferred method on open; overrides the remembered choice. */
+    preferredMethod?: ConnectMethod;
+    /**
+     * Remember the successful method + wallet in localStorage and pre-shape
+     * the next session accordingly.
+     * @default true
+     */
+    rememberChoice?: boolean;
+    /** Display name of the requesting application. */
+    appName?: string;
+    /** Icon URL of the requesting application. */
+    appIcon?: string;
+    /**
+     * Relay base URL override for the phone path. When omitted, each wallet's
+     * `connectServerUrl` is discovered from its `/.well-known/enbox-connect`
+     * document.
+     */
+    connectServerUrl?: string;
+    /**
+     * Path appended to the wallet origin to form the QR / deep-link target.
+     * @default '/connect/app'
+     */
+    relayWalletPath?: string;
+    /** Timeout in milliseconds for either method's handshake. */
+    timeout?: number;
+    /** DWN protocols and permission scopes being requested. */
+    permissionRequests: ConnectPermissionRequest[];
+    /** Internal dependency seams (tests). */
+    deps?: Partial<ConnectModalDeps>;
+}
+/** Injectable collaborators, defaulted to the real implementations. */
+export interface ConnectModalDeps {
+    /** Runs one relay handshake (phone path). */
+    runRelay: typeof runRelayConnect;
+    /** Runs one popup handshake (browser path); must open the popup synchronously. */
+    runPopup: (options: {
+        walletUrl: string;
+        permissionRequests: ConnectPermissionRequest[];
+        appName: string;
+        appIcon?: string;
+        timeoutMs?: number;
+    }) => Promise<ConnectResult | undefined>;
+    /** Resolves a wallet origin to its relay `connectServerUrl` (or undefined). */
+    discoverConnectServerUrl: (walletOrigin: string) => Promise<string | undefined>;
+    /** Validates a pasted custom wallet URL. */
+    validateWalletUrl: (origin: string) => Promise<boolean>;
+    /** Whether to present the deep-link (same-device) variant of the phone path. */
+    isMobile: () => boolean;
+    /** Persistence for the remembered choice. */
+    storage: Pick<Storage, 'getItem' | 'setItem' | 'removeItem'> | undefined;
+}
+/**
+ * Resolves a wallet origin to its relay `connectServerUrl` via the wallet's
+ * `/.well-known/enbox-connect` document ({@link fetchWalletWellKnown} — the
+ * same machinery the wallet selector uses for custom-URL validation).
+ */
+export declare function discoverWalletConnectServerUrl(walletOrigin: string): Promise<string | undefined>;
+/**
+ * Opens the connect modal and resolves when the session ends.
+ *
+ * @returns The delegated credentials; `undefined` when the user denied the
+ *          request in the wallet (or dismissed after a denial).
+ * @throws When the user cancels the modal, or the session fails and the
+ *         user dismisses the error.
+ */
+export declare function runConnectModal(options: ConnectModalOptions): Promise<ConnectResult | undefined>;
+//# sourceMappingURL=connect-modal.d.ts.map

package/dist/types/ui/connect-modal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-modal.d.ts","sourceRoot":"","sources":["../../../src/ui/connect-modal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,KAAK,EAAE,wBAAwB,EAAE,aAAa,EAAoB,MAAM,gBAAgB,CAAC;AAYhG,OAAO,EAA8B,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAEzF,6CAA6C;AAC7C,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,SAAS,CAAC;AAchD,2CAA2C;AAC3C,MAAM,WAAW,mBAAmB;IAClC,mDAAmD;IACnD,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IAEzB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,iEAAiE;IACjE,eAAe,CAAC,EAAE,aAAa,CAAC;IAEhC;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IAEzB,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,2DAA2D;IAC3D,kBAAkB,EAAE,wBAAwB,EAAE,CAAC;IAE/C,yCAAyC;IACzC,IAAI,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAClC;AAED,uEAAuE;AACvE,MAAM,WAAW,gBAAgB;IAC/B,6CAA6C;IAC7C,QAAQ,EAAE,OAAO,eAAe,CAAC;IAEjC,kFAAkF;IAClF,QAAQ,EAAE,CAAC,OAAO,EAAE;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,kBAAkB,EAAE,wBAAwB,EAAE,CAAC;QAC/C,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,KAAK,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAAC;IAEzC,+EAA+E;IAC/E,wBAAwB,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAEhF,4CAA4C;IAC5C,iBAAiB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAExD,gFAAgF;IAChF,QAAQ,EAAE,MAAM,OAAO,CAAC;IAExB,6CAA6C;IAC7C,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,GAAG,SAAS,GAAG,YAAY,CAAC,GAAG,SAAS,CAAC;CAC1E;AAED;;;;GAIG;AACH,wBAAsB,8BAA8B,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAEtG;AAgGD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAomBhG"}

package/dist/types/ui/qr.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Minimal QR code encoder — dependency-free, byte mode, ECC level M,
+ * versions 1–10 with automatic version selection and standard mask
+ * evaluation (ISO/IEC 18004 penalty rules N1–N4).
+ *
+ * Scope is deliberately narrow: it exists to render wallet-connect URIs in
+ * the connect modal without adding a third-party runtime dependency. The
+ * encoding pipeline follows the standard exactly — segment → codewords →
+ * Reed-Solomon blocks → interleave → placement → mask — and the test suite
+ * verifies full module-matrix equality against the `qrcode` npm package
+ * (dev-only oracle) across versions and mask patterns.
+ *
+ * @module
+ */
+/** An encoded QR symbol: `modules[y][x]` is `true` for dark modules. */
+export interface QrCode {
+    /** Symbol width/height in modules (17 + 4×version). */
+    size: number;
+    /** Dark/light module matrix, row-major. */
+    modules: boolean[][];
+    /** Symbol version (1–10). */
+    version: number;
+    /** Applied mask pattern (0–7). */
+    mask: number;
+}
+/**
+ * Encodes UTF-8 text as a byte-mode QR symbol at ECC level M.
+ *
+ * @param text - The payload; encoded as UTF-8 bytes.
+ * @param forcedMask - Optional mask override (0–7); defaults to the
+ *                     penalty-minimising mask per the standard.
+ * @returns The encoded symbol.
+ * @throws If the payload does not fit in a version-10 level-M symbol.
+ */
+export declare function encodeQr(text: string, forcedMask?: number): QrCode;
+/** Options for {@link qrToSvg}. */
+export interface QrSvgOptions {
+    /** Dark module colour. @default '#000000' */
+    dark?: string;
+    /** Light/background colour; `'transparent'` is allowed. @default '#ffffff' */
+    light?: string;
+    /** Quiet-zone width in modules on each side. @default 2 */
+    quietZone?: number;
+}
+/**
+ * Renders an encoded symbol as a crisp, scalable `<svg>` element. One
+ * `<path>` carries all dark modules so the output stays compact.
+ *
+ * Built with `createElementNS`/`setAttribute` rather than markup strings so
+ * caller-supplied colours can never be interpreted as HTML (CodeQL
+ * js/html-constructed-from-input). Append the returned element directly;
+ * never serialize it back through `innerHTML`.
+ */
+export declare function qrToSvg(qr: QrCode, options?: QrSvgOptions): SVGSVGElement;
+//# sourceMappingURL=qr.d.ts.map

package/dist/types/ui/qr.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"qr.d.ts","sourceRoot":"","sources":["../../../src/ui/qr.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,wEAAwE;AACxE,MAAM,WAAW,MAAM;IACrB,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;IAEb,2CAA2C;IAC3C,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;IAErB,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAEhB,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAC;CACd;AAqBD;;;;;;;;GAQG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CA4ElE;AAuWD,mCAAmC;AACnC,MAAM,WAAW,YAAY;IAC3B,6CAA6C;IAC7C,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAID;;;;;;;;GAQG;AACH,wBAAgB,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB,GAAG,aAAa,CAgC7E"}

package/dist/types/ui/wallet-icon.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Wallet icon builder shared by the connect modal's wallet switcher.
+ *
+ * Prefers the wallet's own favicon and degrades to a letter badge. We never
+ * call a third-party favicon proxy: those 404 for many origins and leak the
+ * wallet URL to the proxy.
+ *
+ * @module
+ */
+import type { WalletOption } from '../browser-connect-handler.js';
+/** Build a wallet icon element (own favicon with a letter-badge fallback). */
+export declare function buildWalletIcon(wallet: WalletOption): HTMLElement;
+//# sourceMappingURL=wallet-icon.d.ts.map

package/dist/types/ui/wallet-icon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-icon.d.ts","sourceRoot":"","sources":["../../../src/ui/wallet-icon.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAElE,8EAA8E;AAC9E,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,GAAG,WAAW,CAiCjE"}

package/dist/types/ui/wallet-well-known.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Wallet discovery via the `/.well-known/enbox-connect` document.
+ *
+ * Shared by the connect modal (relay discovery + custom-URL validation)
+ * and exported for dapps rolling their own wallet selection UI.
+ *
+ * @module
+ */
+/** Path of the wallet's connect discovery document, relative to its origin. */
+export declare const WALLET_WELL_KNOWN_PATH = "/.well-known/enbox-connect";
+/** The wallet's `/.well-known/enbox-connect` discovery document. */
+export interface WalletWellKnownDocument {
+    /** Base URL of the relay that brokers this wallet's remote connects. */
+    connectServerUrl: string;
+}
+/**
+ * Fetch a wallet's `/.well-known/enbox-connect` discovery document.
+ *
+ * Resolves the parsed document when it is reachable and names a
+ * `connectServerUrl`; resolves `undefined` for unreachable origins, non-2xx
+ * responses, CORS failures, and malformed documents.
+ */
+export declare function fetchWalletWellKnown(origin: string): Promise<WalletWellKnownDocument | undefined>;
+/**
+ * Fetch a wallet's `/.well-known/enbox-connect` discovery document to confirm
+ * the origin hosts an Enbox-compatible wallet.
+ *
+ * Resolves `true` only when the document is reachable and names a
+ * `connectServerUrl`. Unreachable origins, non-2xx responses, CORS failures,
+ * and malformed documents resolve `false`.
+ */
+export declare function probeWalletWellKnown(origin: string): Promise<boolean>;
+//# sourceMappingURL=wallet-well-known.d.ts.map

package/dist/types/ui/wallet-well-known.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-well-known.d.ts","sourceRoot":"","sources":["../../../src/ui/wallet-well-known.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,+EAA+E;AAC/E,eAAO,MAAM,sBAAsB,+BAA+B,CAAC;AAKnE,oEAAoE;AACpE,MAAM,WAAW,uBAAuB;IACtC,wEAAwE;IACxE,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAgBvG;AAED;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAE3E"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@enbox/browser",
-  "version": "0.3.42",
+  "version": "0.3.44",
   "description": "Enbox tools and features to use in the browser",
   "type": "module",
   "main": "./dist/esm/index.js",
@@ -11,7 +11,7 @@
   "scripts": {
     "clean": "rm -rf dist",
     "build:esm": "rm -rf dist/esm dist/types && bun tsc -p tsconfig.json",
-    "build:browser": "rm -rf dist/browser.mjs && bun ../../build/browser-bundle.js --metafile --external @enbox/agent --external @enbox/api --external @enbox/auth --external @enbox/auth/browser --external @enbox/common --external @enbox/connect --external @enbox/crypto --external @enbox/dids",
+    "build:browser": "rm -rf dist/browser.mjs && bun ../../build/browser-bundle.js --metafile --external @enbox/agent --external @enbox/api --external @enbox/auth --external @enbox/auth/browser --external @enbox/common --external @enbox/connect --external @enbox/crypto --external @enbox/dids --external @enbox/dwn-sdk-js",
     "build": "bun run clean && bun run build:esm && bun run build:browser",
     "lint": "eslint . --max-warnings 0",
     "lint:fix": "eslint . --fix",
@@ -66,20 +66,23 @@
     "access": "public"
   },
   "dependencies": {
-    "@enbox/agent": "0.8.17",
-    "@enbox/api": "0.6.55",
-    "@enbox/auth": "0.6.63",
+    "@enbox/agent": "0.8.18",
+    "@enbox/api": "0.6.56",
+    "@enbox/auth": "0.6.64",
     "@enbox/common": "0.1.3",
     "@enbox/connect": "0.1.1",
     "@enbox/crypto": "0.1.5",
-    "@enbox/dids": "0.1.5"
+    "@enbox/dids": "0.1.5",
+    "@enbox/dwn-sdk-js": "0.4.10"
   },
   "devDependencies": {
+    "@types/qrcode": "^1.5.6",
     "@typescript-eslint/eslint-plugin": "8.32.1",
     "@typescript-eslint/parser": "8.32.1",
     "@vitest/browser-playwright": "4.0.18",
     "@vitest/coverage-istanbul": "4.0.18",
     "eslint": "9.7.0",
+    "qrcode": "1.5.4",
     "typescript": "5.9.3",
     "vitest": "4.0.18"
   }