@enbox/browser 0.3.70 → 0.3.72

package/dist/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAMH,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,yBAAyB,EACzB,gBAAgB,EAChB,KAAK,EACL,cAAc,EACd,8BAA8B,EAC9B,sBAAsB,EACtB,mBAAmB,EACnB,yBAAyB,EACzB,yBAAyB,EACzB,qBAAqB,EACrB,kBAAkB,EAClB,YAAY,EACZ,qBAAqB,GACtB,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,0BAA0B,EAC1B,wCAAwC,EACxC,iCAAiC,EACjC,wCAAwC,EACxC,mBAAmB,EACnB,2BAA2B,EAC3B,gCAAgC,EAChC,2BAA2B,EAC3B,eAAe,EACf,kBAAkB,EAClB,0BAA0B,EAC1B,eAAe,EACf,sBAAsB,EACtB,WAAW,EACX,mBAAmB,EACnB,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,iBAAiB,EACjB,wBAAwB,EACxB,qBAAqB,EACrB,yBAAyB,EACzB,aAAa,EACb,yBAAyB,EACzB,iBAAiB,EACjB,yBAAyB,EACzB,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,WAAW,EACX,WAAW,EACX,gCAAgC,EAChC,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,WAAW,EACX,kBAAkB,EAClB,iBAAiB,EACjB,2BAA2B,EAC3B,oBAAoB,EACpB,iBAAiB,EACjB,wBAAwB,EACxB,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EACtB,yBAAyB,EACzB,kBAAkB,EAClB,aAAa,EACb,YAAY,EACZ,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,WAAW,EACX,kBAAkB,EAClB,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,WAAW,EACX,gBAAgB,EAChB,WAAW,EACX,kBAAkB,EAClB,uBAAuB,EACvB,0BAA0B,EAC1B,UAAU,EACV,kBAAkB,EAClB,eAAe,EACf,uBAAuB,EACvB,eAAe,EACf,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,EAClB,uBAAuB,EACvB,WAAW,GACZ,MAAM,YAAY,CAAC;AAMpB,OAAO,EACL,WAAW,EACX,WAAW,EACX,kBAAkB,EAClB,0BAA0B,EAC1B,0BAA0B,EAC1B,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,yBAAyB,EACzB,aAAa,GACd,MAAM,qBAAqB,CAAC;AAE7B,YAAY,EACV,SAAS,EACT,gBAAgB,EAChB,kBAAkB,EAClB,SAAS,EACT,8BAA8B,EAC9B,wBAAwB,EACxB,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACrB,cAAc,EACd,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,0BAA0B,EAC1B,qBAAqB,EACrB,yBAAyB,EACzB,mBAAmB,EACnB,UAAU,EACV,gBAAgB,EAChB,yBAAyB,EACzB,yBAAyB,EACzB,eAAe,EACf,cAAc,EACd,mBAAmB,EACnB,cAAc,EACd,UAAU,EACV,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAO7B,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACvE,YAAY,EAAE,eAAe,EAAE,wBAAwB,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAMpH,cAAc,mBAAmB,CAAC;AAClC,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACtF,YAAY,EAAE,4BAA4B,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC/F,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AACzG,YAAY,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACjG,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACtE,YAAY,EAAE,iCAAiC,EAAE,MAAM,0BAA0B,CAAC;AAClF,OAAO,EACL,6BAA6B,EAC7B,gCAAgC,EAChC,iBAAiB,EACjB,iCAAiC,EACjC,kCAAkC,GACnC,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,qBAAqB,EACrB,wBAAwB,EACxB,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAC/G,YAAY,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EAAE,8BAA8B,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxF,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1I,OAAO,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC1G,YAAY,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAC/C,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAWvD,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAIpC,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAMlF,OAAO,EAAE,mBAAmB,EAAE,4BAA4B,EAAE,MAAM,kBAAkB,CAAC;AACrF,YAAY,EACV,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,EAClB,aAAa,EACb,aAAa,EACb,oBAAoB,EACpB,uBAAuB,EACvB,oBAAoB,EACpB,2BAA2B,EAC3B,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,EACf,oBAAoB,EACpB,aAAa,GACd,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAQ5C,YAAY,EACV,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACrB,UAAU,EACV,SAAS,EACT,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,cAAc,CAAC;AAItB,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC9E,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAMH,cAAc,YAAY,CAAC;AAM3B,cAAc,qBAAqB,CAAC;AAOpC,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACvE,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAMtE,cAAc,mBAAmB,CAAC;AAClC,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACtF,YAAY,EAAE,4BAA4B,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC/F,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AACzG,YAAY,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACjG,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACtE,YAAY,EAAE,iCAAiC,EAAE,MAAM,0BAA0B,CAAC;AAClF,OAAO,EACL,6BAA6B,EAC7B,gCAAgC,EAChC,iBAAiB,EACjB,iCAAiC,EACjC,kCAAkC,GACnC,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,qBAAqB,EACrB,wBAAwB,EACxB,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAC/G,YAAY,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EAAE,8BAA8B,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxF,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1I,OAAO,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC1G,YAAY,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAC/C,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,YAAY,EACV,oBAAoB,EACpB,oBAAoB,EACpB,2BAA2B,GAC5B,MAAM,8BAA8B,CAAC;AActC,OAAO,EAAE,mBAAmB,EAAE,4BAA4B,EAAE,MAAM,kBAAkB,CAAC;AACrF,YAAY,EACV,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,EAClB,aAAa,EACb,aAAa,EACb,oBAAoB,EACpB,uBAAuB,EACvB,oBAAoB,EACpB,2BAA2B,EAC3B,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,EACf,oBAAoB,EACpB,aAAa,GACd,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAK5C,YAAY,EACV,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACrB,UAAU,EACV,SAAS,EACT,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,cAAc,CAAC;AAItB,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC9E,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/types/object-url-reference.d.ts

@@ -0,0 +1,20 @@
+export type ObjectUrlLease = Readonly<{
+    url: string;
+    /** Release immediately, cancelling any deferred release. Idempotent. */
+    release(): void;
+    /** Release after a grace period. The first deferred release wins. */
+    releaseAfter(delayMs: number): void;
+}>;
+/** Private reference-counted ownership for one object URL. */
+export declare class ObjectUrlReference {
+    private readonly _onEmpty;
+    readonly url: string;
+    private _isRevoked;
+    private _references;
+    private readonly _releaseTimers;
+    constructor(blob: Blob, _onEmpty: (reference: ObjectUrlReference) => void);
+    get references(): number;
+    acquire(): ObjectUrlLease;
+    revoke(): void;
+}
+//# sourceMappingURL=object-url-reference.d.ts.map

package/dist/types/object-url-reference.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"object-url-reference.d.ts","sourceRoot":"","sources":["../../src/object-url-reference.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,wEAAwE;IACxE,OAAO,IAAI,IAAI,CAAC;IAChB,qEAAqE;IACrE,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC,CAAC,CAAC;AAUH,8DAA8D;AAC9D,qBAAa,kBAAkB;IAME,OAAO,CAAC,QAAQ,CAAC,QAAQ;IALxD,SAAgB,GAAG,EAAE,MAAM,CAAC;IAC5B,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,WAAW,CAAK;IACxB,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA4C;gBAExD,IAAI,EAAE,IAAI,EAAmB,QAAQ,EAAE,CAAC,SAAS,EAAE,kBAAkB,KAAK,IAAI;IAIjG,IAAW,UAAU,IAAI,MAAM,CAE9B;IAEM,OAAO,IAAI,cAAc;IAuCzB,MAAM,IAAI,IAAI;CAWtB"}

package/dist/types/relay-connect-runner.d.ts

@@ -37,6 +37,8 @@ export interface RelayConnectOptions {
     appName: string;
     /** Optional icon URL for the app, shown in the wallet consent UI. */
     appIcon?: string;
+    /** Stable application identifier hint available to the wallet during approval. */
+    applicationId?: string;
     /** Optional client/environment metadata for wallet session display. */
     clientMetadata?: ConnectClientMetadata;
     /** DWN protocols and permission scopes being requested. */
@@ -45,6 +47,8 @@ export interface RelayConnectOptions {
     delegatePortableDid?: PortableDid;
     /** User-facing request purpose. Absent means a normal connect. */
     requestType?: ConnectRequestType;
+    /** Wallet profile DID that a refresh must renew. */
+    expectedProviderDid?: string;
     /** Total milliseconds to poll the relay for a wallet response. */
     timeoutMs?: number;
     /** Milliseconds between relay polling attempts. */

package/dist/types/relay-connect-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"relay-connect-runner.d.ts","sourceRoot":"","sources":["../../src/relay-connect-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EACV,qBAAqB,EACrB,wBAAwB,EAExB,kBAAkB,EAClB,aAAa,EACb,gBAAgB,EACjB,MAAM,gBAAgB,CAAC;AAIxB,OAAO,EAIL,oBAAoB,EAGrB,MAAM,gBAAgB,CAAC;AAExB,mEAAmE;AACnE,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAElC,uEAAuE;AACvE,qBAAa,0BAA2B,SAAQ,KAAK;;CAKpD;AAED,2CAA2C;AAC3C,MAAM,WAAW,mBAAmB;IAClC,wDAAwD;IACxD,gBAAgB,EAAE,MAAM,CAAC;IAEzB,6EAA6E;IAC7E,SAAS,EAAE,MAAM,CAAC;IAElB,yEAAyE;IACzE,OAAO,EAAE,MAAM,CAAC;IAEhB,qEAAqE;IACrE,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,uEAAuE;IACvE,cAAc,CAAC,EAAE,qBAAqB,CAAC;IAEvC,2DAA2D;IAC3D,kBAAkB,EAAE,wBAAwB,EAAE,CAAC;IAE/C,iEAAiE;IACjE,mBAAmB,CAAC,EAAE,WAAW,CAAC;IAElC,kEAAkE;IAClE,WAAW,CAAC,EAAE,kBAAkB,CAAC;IAEjC,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,mDAAmD;IACnD,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB;;;OAGG;IACH,gBAAgB,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,IAAI,CAAC;IAEtD;;;;OAIG;IACH,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,KAAK,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAExE;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAE3B;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;IAEvB,0CAA0C;IAC1C,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE;QAC1B,gBAAgB,EAAE,MAAM,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;QACvB,MAAM,CAAC,EAAE,WAAW,CAAC;KACtB,KAAK,IAAI,CAAC,oBAAoB,EAAE,gBAAgB,GAAG,gBAAgB,GAAG,eAAe,GAAG,aAAa,CAAC,GACnG,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,CAAC,CAAC;CAC5D;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAoB9D;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAiGtG"}
+{"version":3,"file":"relay-connect-runner.d.ts","sourceRoot":"","sources":["../../src/relay-connect-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EACV,qBAAqB,EACrB,wBAAwB,EAExB,kBAAkB,EAClB,aAAa,EACb,gBAAgB,EACjB,MAAM,gBAAgB,CAAC;AAIxB,OAAO,EAIL,oBAAoB,EAGrB,MAAM,gBAAgB,CAAC;AAExB,mEAAmE;AACnE,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAElC,uEAAuE;AACvE,qBAAa,0BAA2B,SAAQ,KAAK;;CAKpD;AAED,2CAA2C;AAC3C,MAAM,WAAW,mBAAmB;IAClC,wDAAwD;IACxD,gBAAgB,EAAE,MAAM,CAAC;IAEzB,6EAA6E;IAC7E,SAAS,EAAE,MAAM,CAAC;IAElB,yEAAyE;IACzE,OAAO,EAAE,MAAM,CAAC;IAEhB,qEAAqE;IACrE,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,kFAAkF;IAClF,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,uEAAuE;IACvE,cAAc,CAAC,EAAE,qBAAqB,CAAC;IAEvC,2DAA2D;IAC3D,kBAAkB,EAAE,wBAAwB,EAAE,CAAC;IAE/C,iEAAiE;IACjE,mBAAmB,CAAC,EAAE,WAAW,CAAC;IAElC,kEAAkE;IAClE,WAAW,CAAC,EAAE,kBAAkB,CAAC;IAEjC,oDAAoD;IACpD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,mDAAmD;IACnD,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB;;;OAGG;IACH,gBAAgB,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,IAAI,CAAC;IAEtD;;;;OAIG;IACH,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,KAAK,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAExE;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAE3B;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;IAEvB,0CAA0C;IAC1C,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE;QAC1B,gBAAgB,EAAE,MAAM,CAAC;QACzB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;QACvB,MAAM,CAAC,EAAE,WAAW,CAAC;KACtB,KAAK,IAAI,CAAC,oBAAoB,EAAE,gBAAgB,GAAG,gBAAgB,GAAG,eAAe,GAAG,aAAa,CAAC,GACnG,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,CAAC,CAAC;CAC5D;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAoB9D;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAoGtG"}

package/dist/types/ui/connect-modal.d.ts

@@ -96,8 +96,9 @@ export interface ConnectModalOptions {
     /** Preferred method on open; overrides the remembered choice. */
     preferredMethod?: ConnectMethod;
     /**
-     * Remember the successful method + wallet in localStorage and pre-shape
-     * the next session accordingly.
+     * Remember the successful method + wallet in localStorage. Refreshes reuse
+     * the route saved for their delegate DID; new connections use the latest
+     * successful route as a convenience.
      * @default true
      */
     rememberChoice?: boolean;
@@ -105,6 +106,13 @@ export interface ConnectModalOptions {
     appName?: string;
     /** Icon URL of the requesting application. */
     appIcon?: string;
+    /**
+     * Stable application identifier hint available to the wallet during approval.
+     * Defaults to the browser's canonical origin.
+     */
+    applicationId?: string;
+    /** Wallet profile DID that a refresh must renew. */
+    expectedProviderDid?: string;
     /**
      * Relay base URL override for the phone path. When omitted, each wallet's
      * `connectServerUrl` is discovered from its `/.well-known/enbox-connect`
@@ -134,15 +142,7 @@ export interface ConnectModalDeps {
     /** Runs one relay handshake (phone path). */
     runRelay: typeof runRelayConnect;
     /** Runs one popup handshake (browser path); must open the popup synchronously. */
-    runPopup: (options: {
-        walletUrl: string;
-        permissionRequests: ConnectPermissionRequest[];
-        appName: string;
-        appIcon?: string;
-        timeoutMs?: number;
-        delegatePortableDid?: PortableDid;
-        requestType?: ConnectRequestType;
-    }) => Promise<ConnectResult | undefined>;
+    runPopup: typeof runPopupConnect;
     /** Resolves a wallet origin to its relay `connectServerUrl` (or undefined). */
     discoverConnectServerUrl: (walletOrigin: string) => Promise<string | undefined>;
     /** Validates a pasted custom wallet URL. */
@@ -158,6 +158,18 @@ export interface ConnectModalDeps {
  * same machinery the wallet selector uses for custom-URL validation).
  */
 export declare function discoverWalletConnectServerUrl(walletOrigin: string): Promise<string | undefined>;
+/** Runs one popup handshake without collapsing early-close into a denial. */
+declare function runPopupConnect(options: {
+    walletUrl: string;
+    permissionRequests: ConnectPermissionRequest[];
+    appName: string;
+    appIcon?: string;
+    applicationId?: string;
+    timeoutMs?: number;
+    delegatePortableDid?: PortableDid;
+    requestType?: ConnectRequestType;
+    expectedProviderDid?: string;
+}): Promise<ConnectResult | undefined>;
 /**
  * Opens the connect modal and resolves when the session ends.
  *
@@ -167,4 +179,5 @@ export declare function discoverWalletConnectServerUrl(walletOrigin: string): Pr
  *         user dismisses the error.
  */
 export declare function runConnectModal(options: ConnectModalOptions): Promise<ConnectResult | undefined>;
+export {};
 //# sourceMappingURL=connect-modal.d.ts.map

package/dist/types/ui/connect-modal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connect-modal.d.ts","sourceRoot":"","sources":["../../../src/ui/connect-modal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,KAAK,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,aAAa,EAAoB,MAAM,gBAAgB,CAAC;AAYpH,OAAO,EAA8B,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAEzF,6CAA6C;AAC7C,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,SAAS,CAAC;AA4BhD,4DAA4D;AAC5D,MAAM,WAAW,mBAAmB;IAClC,qBAAqB;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,oBAAoB;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,sBAAsB;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,qCAAqC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,0CAA0C;IAC1C,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,2DAA2D;AAC3D,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;IAEvC,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,+DAA+D;IAC/D,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,oEAAoE;IACpE,KAAK,CAAC,EAAE,mBAAmB,CAAC;IAE5B,mEAAmE;IACnE,IAAI,CAAC,EAAE,mBAAmB,CAAC;CAC5B;AAeD,2CAA2C;AAC3C,MAAM,WAAW,mBAAmB;IAClC,mDAAmD;IACnD,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IAEzB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,uDAAuD;IACvD,IAAI,CAAC,EAAE,kBAAkB,CAAC;IAE1B,iEAAiE;IACjE,mBAAmB,CAAC,EAAE,WAAW,CAAC;IAElC,iEAAiE;IACjE,eAAe,CAAC,EAAE,aAAa,CAAC;IAEhC;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IAEzB,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;;OAIG;IACH,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAE1B,2DAA2D;IAC3D,kBAAkB,EAAE,wBAAwB,EAAE,CAAC;IAE/C,yCAAyC;IACzC,IAAI,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAClC;AAED,uEAAuE;AACvE,MAAM,WAAW,gBAAgB;IAC/B,6CAA6C;IAC7C,QAAQ,EAAE,OAAO,eAAe,CAAC;IAEjC,kFAAkF;IAClF,QAAQ,EAAE,CAAC,OAAO,EAAE;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,kBAAkB,EAAE,wBAAwB,EAAE,CAAC;QAC/C,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,mBAAmB,CAAC,EAAE,WAAW,CAAC;QAClC,WAAW,CAAC,EAAE,kBAAkB,CAAC;KAClC,KAAK,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAAC;IAEzC,+EAA+E;IAC/E,wBAAwB,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAEhF,4CAA4C;IAC5C,iBAAiB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAExD,gFAAgF;IAChF,QAAQ,EAAE,MAAM,OAAO,CAAC;IAExB,6CAA6C;IAC7C,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,GAAG,SAAS,GAAG,YAAY,CAAC,GAAG,SAAS,CAAC;CAC1E;AAED;;;;GAIG;AACH,wBAAsB,8BAA8B,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAEtG;AAiHD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CA+0BhG"}
+{"version":3,"file":"connect-modal.d.ts","sourceRoot":"","sources":["../../../src/ui/connect-modal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,KAAK,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,aAAa,EAAoB,MAAM,gBAAgB,CAAC;AAYpH,OAAO,EAA8B,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAEzF,6CAA6C;AAC7C,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,SAAS,CAAC;AAkChD,4DAA4D;AAC5D,MAAM,WAAW,mBAAmB;IAClC,qBAAqB;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,oBAAoB;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,sBAAsB;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,qCAAqC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,0CAA0C;IAC1C,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,2DAA2D;AAC3D,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;IAEvC,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,+DAA+D;IAC/D,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,oEAAoE;IACpE,KAAK,CAAC,EAAE,mBAAmB,CAAC;IAE5B,mEAAmE;IACnE,IAAI,CAAC,EAAE,mBAAmB,CAAC;CAC5B;AAeD,2CAA2C;AAC3C,MAAM,WAAW,mBAAmB;IAClC,mDAAmD;IACnD,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IAEzB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,uDAAuD;IACvD,IAAI,CAAC,EAAE,kBAAkB,CAAC;IAE1B,iEAAiE;IACjE,mBAAmB,CAAC,EAAE,WAAW,CAAC;IAElC,iEAAiE;IACjE,eAAe,CAAC,EAAE,aAAa,CAAC;IAEhC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IAEzB,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,oDAAoD;IACpD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;;OAIG;IACH,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAE1B,2DAA2D;IAC3D,kBAAkB,EAAE,wBAAwB,EAAE,CAAC;IAE/C,yCAAyC;IACzC,IAAI,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAClC;AAED,uEAAuE;AACvE,MAAM,WAAW,gBAAgB;IAC/B,6CAA6C;IAC7C,QAAQ,EAAE,OAAO,eAAe,CAAC;IAEjC,kFAAkF;IAClF,QAAQ,EAAE,OAAO,eAAe,CAAC;IAEjC,+EAA+E;IAC/E,wBAAwB,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAEhF,4CAA4C;IAC5C,iBAAiB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAExD,gFAAgF;IAChF,QAAQ,EAAE,MAAM,OAAO,CAAC;IAExB,6CAA6C;IAC7C,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,GAAG,SAAS,GAAG,YAAY,CAAC,GAAG,SAAS,CAAC;CAC1E;AAED;;;;GAIG;AACH,wBAAsB,8BAA8B,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAEtG;AAED,6EAA6E;AAC7E,iBAAe,eAAe,CAAC,OAAO,EAAE;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,wBAAwB,EAAE,CAAC;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mBAAmB,CAAC,EAAE,WAAW,CAAC;IAClC,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAmBrC;AAmKD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC,CAo5BhG"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@enbox/browser",
-  "version": "0.3.70",
+  "version": "0.3.72",
   "description": "Enbox tools and features to use in the browser",
   "type": "module",
   "main": "./dist/esm/index.js",
@@ -66,15 +66,15 @@
     "access": "public"
   },
   "dependencies": {
-    "@enbox/agent": "0.8.39",
-    "@enbox/api": "0.6.78",
-    "@enbox/auth": "0.6.85",
+    "@enbox/agent": "0.8.41",
+    "@enbox/api": "0.6.80",
+    "@enbox/auth": "0.6.87",
     "@enbox/common": "0.1.6",
-    "@enbox/connect": "0.1.19",
+    "@enbox/connect": "0.1.21",
     "@enbox/crypto": "0.1.9",
     "@enbox/dids": "0.1.10",
-    "@enbox/dwn-sdk-js": "0.4.23",
-    "@enbox/protocols": "0.2.105"
+    "@enbox/dwn-sdk-js": "0.4.25",
+    "@enbox/protocols": "0.2.107"
   },
   "devDependencies": {
     "@types/qrcode": "^1.5.6",

package/src/blob-url-pool.ts

@@ -0,0 +1,55 @@
+import type { ObjectUrlLease } from './object-url-reference.js';
+
+import { ObjectUrlReference } from './object-url-reference.js';
+
+/**
+ * A reference-counted lease for a browser object URL.
+ *
+ * When replacing a URL already rendered by the DOM, `releaseAfter()` provides
+ * a grace period without passing the lease through the component tree.
+ */
+export type BlobUrlLease = ObjectUrlLease;
+
+/** Owns object URLs for Blob identities until their last lease is released. */
+export interface BlobUrlPool {
+  acquire(blob: Blob): BlobUrlLease;
+  dispose(): void;
+}
+
+class DefaultBlobUrlPool implements BlobUrlPool {
+  private readonly _references = new Map<Blob, ObjectUrlReference>();
+  private _isDisposed = false;
+
+  public acquire(blob: Blob): BlobUrlLease {
+    if (this._isDisposed) {
+      throw new Error('BlobUrlPool is disposed.');
+    }
+
+    let reference = this._references.get(blob);
+    if (reference === undefined) {
+      reference = new ObjectUrlReference(blob, (released): void => {
+        this._references.delete(blob);
+        released.revoke();
+      });
+      this._references.set(blob, reference);
+    }
+    return reference.acquire();
+  }
+
+  public dispose(): void {
+    if (this._isDisposed) {
+      return;
+    }
+
+    this._isDisposed = true;
+    for (const reference of this._references.values()) {
+      reference.revoke();
+    }
+    this._references.clear();
+  }
+}
+
+/** Create a terminally disposable, reference-counted object URL pool. */
+export function createBlobUrlPool(): BlobUrlPool {
+  return new DefaultBlobUrlPool();
+}

package/src/browser-connect-handler.ts

@@ -107,6 +107,12 @@ export interface BrowserConnectHandlerOptions {
    */
   appIcon?: string;
 
+  /**
+   * Stable application identifier hint available to the wallet during approval.
+   * Defaults to the browser's canonical origin.
+   */
+  applicationId?: string;
+
   /**
    * Preferred connect method on open: `'phone'` (QR / deep link via the
    * relay) or `'browser'` (wallet popup on this device). Overrides the
@@ -116,8 +122,9 @@ export interface BrowserConnectHandlerOptions {
   preferredMethod?: ConnectMethod;
 
   /**
-   * Remember the successful method + wallet in localStorage and pre-shape
-   * the next connect session accordingly.
+   * Remember the successful method + wallet in localStorage. Refreshes reuse
+   * the route saved for their delegate DID; new connections use the latest
+   * successful route as a convenience.
    * @default true
    */
   rememberChoice?: boolean;
@@ -176,6 +183,7 @@ export function BrowserConnectHandler(
     timeout,
     appName,
     appIcon,
+    applicationId,
     preferredMethod,
     rememberChoice,
     connectServerUrl,
@@ -188,6 +196,7 @@ export function BrowserConnectHandler(
       permissionRequests: ConnectPermissionRequest[];
       delegatePortableDid?: PortableDid;
       requestType?: ConnectRequestType;
+      expectedProviderDid?: string;
     }): Promise<ConnectResult | undefined> {
       return runConnectModal({
         wallets,
@@ -196,12 +205,14 @@ export function BrowserConnectHandler(
         rememberChoice,
         appName,
         appIcon             : appIcon ?? `${window.location.origin}/favicon.ico`,
+        applicationId,
         connectServerUrl,
         relayWalletPath,
         timeout,
         theme,
         mode                : params.requestType,
         delegatePortableDid : params.delegatePortableDid,
+        expectedProviderDid : params.expectedProviderDid,
         permissionRequests  : params.permissionRequests,
       });
     },

package/src/file-envelope-url-store.ts

@@ -0,0 +1,260 @@
+import type { FileEnvelopeData } from '@enbox/api';
+
+import type { BlobUrlLease } from './blob-url-pool.js';
+
+import { ObjectUrlReference } from './object-url-reference.js';
+
+const DEFAULT_MAX_BYTES = 128 * 1024 * 1024;
+const DEFAULT_MAX_ENTRIES = 50;
+
+type CacheEntry = {
+  bytes: number;
+  filename: string;
+  key: string;
+  mimeType: string;
+  url: ObjectUrlReference;
+};
+
+type PendingRead = {
+  controller: AbortController;
+  generation: number;
+  promise: Promise<CacheEntry | undefined>;
+};
+
+/** A cached file envelope represented by a leased browser object URL. */
+export type FileEnvelopeUrlLease = BlobUrlLease & Readonly<{
+  filename: string;
+  mimeType: string;
+}>;
+
+export type FileEnvelopeUrlStoreOptions<Request> = Readonly<{
+  /** Select the stable cache key for a read request. */
+  key(request: Request): string;
+  /** Read and decode the file. The signal aborts invalidated work. */
+  read(request: Request, signal: AbortSignal): Promise<FileEnvelopeData | undefined>;
+  /** Choose the Blob exposed by the URL, retaining MIME/render policy in the caller. */
+  blobForUrl(value: FileEnvelopeData): Blob;
+  /** Maximum cached entries (default 50). Soft while every eviction candidate is leased. */
+  maxEntries?: number;
+  /** Maximum cached Blob bytes (default 128 MiB). Soft while every eviction candidate is leased. */
+  maxBytes?: number;
+}>;
+
+/** A keyed, bounded object URL cache for decoded file envelopes. */
+export interface FileEnvelopeUrlStore<Request> {
+  acquire(request: Request): Promise<FileEnvelopeUrlLease | undefined>;
+  acquireCached(request: Request): FileEnvelopeUrlLease | undefined;
+  clear(): void;
+  dispose(): void;
+  invalidate(request: Request): void;
+}
+
+function assertLimit(value: number, name: string): void {
+  if (value !== Infinity && (!Number.isSafeInteger(value) || value < 0)) {
+    throw new TypeError(`${name} must be a non-negative safe integer or Infinity.`);
+  }
+}
+
+function throwAborted(controller: AbortController): never {
+  controller.abort();
+  throw controller.signal.reason;
+}
+
+class DefaultFileEnvelopeUrlStore<Request> implements FileEnvelopeUrlStore<Request> {
+  private readonly _cache = new Map<string, CacheEntry>();
+  private readonly _entries = new Set<CacheEntry>();
+  private readonly _maxBytes: number;
+  private readonly _maxEntries: number;
+  private readonly _pending = new Map<string, PendingRead>();
+  private _bytes = 0;
+  private _generation = 0;
+  private _isDisposed = false;
+
+  public constructor(private readonly _options: FileEnvelopeUrlStoreOptions<Request>) {
+    this._maxBytes = _options.maxBytes ?? DEFAULT_MAX_BYTES;
+    this._maxEntries = _options.maxEntries ?? DEFAULT_MAX_ENTRIES;
+    assertLimit(this._maxBytes, 'maxBytes');
+    assertLimit(this._maxEntries, 'maxEntries');
+  }
+
+  public async acquire(request: Request): Promise<FileEnvelopeUrlLease | undefined> {
+    this._assertActive();
+    const key = this._options.key(request);
+    const cached = this._cache.get(key);
+    if (cached !== undefined) {
+      return this._acquire(cached);
+    }
+
+    const pending = this._pending.get(key) ?? this._startRead(request, key);
+    const entry = await pending.promise;
+    if (this._isDisposed || pending.generation !== this._generation) {
+      return throwAborted(pending.controller);
+    }
+    if (entry === undefined) {
+      return undefined;
+    }
+    if (this._cache.get(key) !== entry) {
+      return throwAborted(pending.controller);
+    }
+    return this._acquire(entry);
+  }
+
+  public acquireCached(request: Request): FileEnvelopeUrlLease | undefined {
+    this._assertActive();
+    const entry = this._cache.get(this._options.key(request));
+    return entry === undefined ? undefined : this._acquire(entry);
+  }
+
+  public invalidate(request: Request): void {
+    this._assertActive();
+    const key = this._options.key(request);
+    const pending = this._pending.get(key);
+    pending?.controller.abort();
+    this._pending.delete(key);
+    const entry = this._cache.get(key);
+    if (entry !== undefined) {
+      this._remove(entry);
+    }
+  }
+
+  public clear(): void {
+    this._assertActive();
+    this._reset(false);
+  }
+
+  public dispose(): void {
+    if (this._isDisposed) {
+      return;
+    }
+
+    this._isDisposed = true;
+    this._reset(true);
+  }
+
+  private _abortReads(): void {
+    for (const pending of this._pending.values()) {
+      pending.controller.abort();
+    }
+    this._pending.clear();
+  }
+
+  private _acquire(entry: CacheEntry): FileEnvelopeUrlLease {
+    this._cache.delete(entry.key);
+    this._cache.set(entry.key, entry);
+    const lease = entry.url.acquire();
+    this._evict();
+    return Object.freeze({
+      filename     : entry.filename,
+      mimeType     : entry.mimeType,
+      release      : lease.release,
+      releaseAfter : lease.releaseAfter,
+      url          : lease.url,
+    });
+  }
+
+  private _assertActive(): void {
+    if (this._isDisposed) {
+      throw new Error('FileEnvelopeUrlStore is disposed.');
+    }
+  }
+
+  private _assertCurrent(key: string, controller: AbortController, generation: number): void {
+    if (
+      this._isDisposed
+      || controller.signal.aborted
+      || this._generation !== generation
+      || this._pending.get(key)?.controller !== controller
+    ) {
+      throwAborted(controller);
+    }
+  }
+
+  private _evict(): void {
+    while (this._cache.size > this._maxEntries || this._bytes > this._maxBytes) {
+      const entry = [...this._cache.values()].find((candidate): boolean => candidate.url.references === 0);
+      if (entry === undefined) {
+        return;
+      }
+      this._remove(entry);
+    }
+  }
+
+  private async _load(request: Request, key: string, controller: AbortController, generation: number): Promise<CacheEntry | undefined> {
+    const value = await this._options.read(request, controller.signal);
+    this._assertCurrent(key, controller, generation);
+    if (value === undefined) {
+      return undefined;
+    }
+
+    const blob = this._options.blobForUrl(value);
+    this._assertCurrent(key, controller, generation);
+    const url = new ObjectUrlReference(blob, (): void => this._released(entry));
+    const entry: CacheEntry = {
+      bytes    : blob.size,
+      filename : value.filename,
+      key,
+      mimeType : value.mimeType,
+      url,
+    };
+    this._cache.set(key, entry);
+    this._bytes += entry.bytes;
+    this._entries.add(entry);
+    return entry;
+  }
+
+  private _released(entry: CacheEntry): void {
+    if (this._cache.get(entry.key) !== entry) {
+      this._revoke(entry);
+    } else {
+      this._evict();
+    }
+  }
+
+  private _remove(entry: CacheEntry): void {
+    if (this._cache.get(entry.key) !== entry) {
+      return;
+    }
+    this._cache.delete(entry.key);
+    this._bytes -= entry.bytes;
+    if (entry.url.references === 0) {
+      this._revoke(entry);
+    }
+  }
+
+  private _reset(revokeActive: boolean): void {
+    this._generation += 1;
+    this._abortReads();
+    this._cache.clear();
+    this._bytes = 0;
+    for (const entry of this._entries) {
+      if (revokeActive || entry.url.references === 0) {
+        this._revoke(entry);
+      }
+    }
+  }
+
+  private _revoke(entry: CacheEntry): void {
+    entry.url.revoke();
+    this._entries.delete(entry);
+  }
+
+  private _startRead(request: Request, key: string): PendingRead {
+    const controller = new AbortController();
+    const generation = this._generation;
+    const promise = this._load(request, key, controller, generation).finally((): void => {
+      if (this._pending.get(key)?.controller === controller) {
+        this._pending.delete(key);
+      }
+    });
+    const pending = { controller, generation, promise };
+    this._pending.set(key, pending);
+    return pending;
+  }
+}
+
+/** Create a bounded file-envelope URL store with deduplicated reads. */
+export function createFileEnvelopeUrlStore<Request>(
+  options: FileEnvelopeUrlStoreOptions<Request>,
+): FileEnvelopeUrlStore<Request> {
+  return new DefaultFileEnvelopeUrlStore(options);
+}