@formstr/signer 0.2.2 → 0.3.0

package/dist/{signer-BepGdtJs.d.ts → signer-oU50RBqS.d.ts}

@@ -68,6 +68,155 @@ interface AndroidLoginResult {
     packageName: string;
 }
 declare function loginWithAndroidSigner(plugin: AndroidSignerPlugin, packageName?: string): Promise<AndroidLoginResult>;
+/**
+ * Normalize whatever a NIP-55 transport handed us in the pubkey slot into a
+ * `{ pubkey, npub }` pair. Accepts:
+ *   - a 32-byte lowercase hex pubkey (newer Amber builds return this),
+ *   - a bech32 `npub1…` (the original NIP-55 spec shape),
+ *   - a bech32 `nprofile1…`, which the web/clipboard transport may return.
+ * Throws a debuggable error for anything else, including the preview of
+ * what was actually received so the caller can triage.
+ *
+ * Shared by the Capacitor (`loginWithAndroidSigner`) and pure-web
+ * (`nip55Web.ts`) flows — both transports are NIP-55 and must agree on
+ * how identifiers normalize.
+ */
+declare function normalizeNip55Identifier(rawIdentifier: unknown): {
+    pubkey: string;
+    npub: string;
+};
+
+/**
+ * NIP-55 over the web, without a Capacitor/native bridge.
+ *
+ * A plain browser page cannot call an Android signer in the background, so
+ * this transport hands the OS a `nostrsigner` intent and then reads the
+ * result back from the **clipboard** once the user returns to the tab. It
+ * is the mechanism used by applesauce's `AmberClipboardSigner` and
+ * gitworkshop's "Use Amber" button; no package is named in the intent, so
+ * Android resolves it against whatever app registered the scheme — one
+ * installed signer opens directly, several show the "Open with" chooser.
+ *
+ * The alternative NIP-55 web path — `?callbackUrl=` — is not used here: it
+ * navigates the page away and back, which cannot be hidden behind a
+ * promise-returning {@link ActiveSigner}. Use NIP-46 when a persistent
+ * session is wanted; the spec recommends it for web clients.
+ *
+ * @see https://github.com/nostr-protocol/nips/blob/master/55.md
+ */
+interface Nip55WebTransport {
+    /**
+     * Whether this environment can run the intent + clipboard flow at all.
+     * The package's browser transport requires an Android user agent and the
+     * async clipboard API; anything else must fail loudly rather than open a
+     * dead intent.
+     */
+    isSupported(): boolean;
+    /** Hand the intent URI to the OS (a browser typically `window.open`s it). */
+    open(intent: string): void;
+    /** Read the current clipboard text. */
+    readClipboard(): Promise<string>;
+    /**
+     * Overwrite the clipboard. Used to plant a sentinel before opening the
+     * signer, so the result can be told apart from whatever the user had
+     * copied earlier. Best-effort — a failure just means we fall back to
+     * accepting the first non-empty read.
+     */
+    writeClipboard(text: string): Promise<void>;
+}
+interface Nip55WebOptions {
+    /**
+     * Environment bridge. Defaults to a browser implementation
+     * ({@link browserNip55Transport}). Tests inject a fake.
+     */
+    transport?: Nip55WebTransport;
+    /**
+     * Cached user pubkey. When supplied, {@link Nip55WebSigner.getPublicKey}
+     * returns it without a signer roundtrip — used on cold start to avoid a
+     * fresh `get_public_key` approval prompt for an already-paired account.
+     */
+    pubkey?: string;
+    /**
+     * How often to poll the clipboard while waiting for the signer app to
+     * return a result. Default 500ms.
+     *
+     * Polling, not events: on Android Chrome the return from the signer app
+     * fires **no** `visibilitychange`/`focus` event at all (the tab was never
+     * reported hidden), so an event-driven read simply never happens.
+     * `setInterval` keeps running while the tab is backgrounded, so polling
+     * is what actually observes the result.
+     */
+    pollIntervalMs?: number;
+    /**
+     * Max time to wait for the signer app to return a result. A rejection is
+     * invisible over NIP-55 web (the app just never calls back), so without
+     * this a denied or abandoned request hangs forever. Default 120000ms;
+     * `0` disables the timeout.
+     */
+    timeoutMs?: number;
+    /**
+     * Lifetime abort. Aborts the in-flight request and makes every future
+     * request reject immediately (rejections carry `name === 'AbortError'`,
+     * matching the NIP-46 flow).
+     *
+     * This is a property of the *signer*, not of one attempt. Do **not**
+     * pass a controller that is aborted once a login modal closes — that
+     * would leave the signer permanently unusable. To cancel a single
+     * pairing attempt, use {@link Signer.loginWithNip55Web}'s `signal`.
+     */
+    signal?: AbortSignal;
+    /**
+     * Diagnostic sink for the intent/clipboard round-trip. The flow is hard
+     * to observe (it leaves the page and returns), so a host can pass a
+     * logger — e.g. to an on-screen list — to see what actually happened.
+     */
+    debug?: (message: string) => void;
+}
+/**
+ * Browser transport: `window.open` for the intent, `navigator.clipboard`
+ * for the result. Globals are read lazily so importing this module stays
+ * safe in Node.
+ *
+ * This transport is for a **plain browser only**. Inside a Capacitor
+ * native shell the same device has the real NIP-55 plugin, which supports
+ * every method and does not need the clipboard or a per-operation
+ * approval, so this flow is not offered there — a native host should use
+ * `loginWithAndroidSigner` instead.
+ */
+declare function browserNip55Transport(): Nip55WebTransport;
+/**
+ * {@link ActiveSigner} backed by any installed NIP-55 signer app, used from
+ * a plain (Android) browser via intents + clipboard.
+ *
+ * Every operation is a separate user approval — there is no background
+ * channel and no way to learn that the user rejected a request, so callers
+ * must impose their own timeout (the flow simply never resolves otherwise).
+ */
+declare class Nip55WebSigner implements ActiveSigner {
+    #private;
+    constructor(options?: Nip55WebOptions);
+    /** True when the configured transport can actually open a signer app. */
+    isSupported(): boolean;
+    getPublicKey(): Promise<string>;
+    signEvent(event: EventTemplate): Promise<Event>;
+    nip04Encrypt(peerPubkey: string, plaintext: string): Promise<string>;
+    nip04Decrypt(peerPubkey: string, ciphertext: string): Promise<string>;
+    nip44Encrypt(peerPubkey: string, plaintext: string): Promise<string>;
+    nip44Decrypt(peerPubkey: string, ciphertext: string): Promise<string>;
+    /**
+     * Cancel any in-flight request and stop its clipboard poll. Subsequent
+     * operations still work — this is a teardown of live resources, not a
+     * permanent disable (the {@link Signer} calls it when replacing the
+     * active signer).
+     */
+    close(): void;
+    static getPublicKeyIntent(): string;
+    static signEventIntent(draft: object): string;
+    static nip04EncryptIntent(peerPubkey: string, plaintext: string): string;
+    static nip04DecryptIntent(peerPubkey: string, ciphertext: string): string;
+    static nip44EncryptIntent(peerPubkey: string, plaintext: string): string;
+    static nip44DecryptIntent(peerPubkey: string, ciphertext: string): string;
+}
 
 interface StorageAdapter {
     get(key: string): string | null;
@@ -82,8 +231,10 @@ declare function localStorageAdapter(prefix?: string): StorageAdapter;
  *  - `nip46`: NIP-46 remote signer (bunker URI or nostrconnect QR).
  *  - `ncryptsec`: NIP-49 encrypted nsec — decrypted into memory on unlock.
  *  - `android`: NIP-55 Android external signer app via a Capacitor plugin.
+ *  - `nip55-web`: NIP-55 Android external signer app from a plain browser,
+ *     via `nostrsigner` intents + clipboard (no native bridge).
  */
-type LoginMethod = 'extension' | 'nip46' | 'ncryptsec' | 'android';
+type LoginMethod = 'extension' | 'nip46' | 'ncryptsec' | 'android' | 'nip55-web';
 /**
  * Serialized account record persisted by the {@link StorageAdapter}.
  *
@@ -142,6 +293,14 @@ interface ActiveSigner {
     nip04Decrypt(peerPubkey: string, ciphertext: string): Promise<string>;
     nip44Encrypt(peerPubkey: string, plaintext: string): Promise<string>;
     nip44Decrypt(peerPubkey: string, ciphertext: string): Promise<string>;
+    /**
+     * Optional teardown, called by {@link Signer} when this signer is
+     * replaced — on a subsequent login/unlock, `switchAccount`, or
+     * `logout`. Implementations with live resources (an open bunker relay
+     * subscription, a clipboard poll, an in-flight request) should release
+     * them here. Omitted by stateless signers.
+     */
+    close?(): void | Promise<void>;
 }
 interface RelayMismatchInfo {
     userRelays: string[];
@@ -182,6 +341,33 @@ interface UnlockOptions {
      */
     pool?: AbstractSimplePool;
 }
+/**
+ * Options for {@link Signer.loginWithNip55Web} — the pure-browser NIP-55
+ * flow (Android intents + clipboard, no Capacitor bridge).
+ */
+interface Nip55WebLoginOptions {
+    /**
+     * Environment bridge for this call. Falls back to
+     * {@link SignerConfig.nip55WebTransport}, then to the browser default.
+     */
+    transport?: Nip55WebTransport;
+    /**
+     * How often to poll the clipboard while waiting for the signer app.
+     * Default 500ms. Polling is required because returning from the signer
+     * fires no foreground event on Android Chrome.
+     */
+    pollIntervalMs?: number;
+    /**
+     * Max time to wait for the signer app. NIP-55 web has no rejection
+     * signal, so a denied/abandoned request never resolves without this.
+     * Default 120000ms; `0` disables it.
+     */
+    timeoutMs?: number;
+    /** Abort the pairing request (rejects with `name === 'AbortError'`). */
+    signal?: AbortSignal;
+    /** Diagnostic sink for the intent/clipboard round-trip. */
+    debug?: (message: string) => void;
+}
 interface NostrConnectOptions {
     relays: string[];
     metadata?: {
@@ -251,6 +437,12 @@ interface SignerConfig {
      * or `listAndroidSignerApps(plugin)`.
      */
     androidSignerPlugin?: AndroidSignerPlugin;
+    /**
+     * Environment bridge for the pure-web NIP-55 flow (Android browser,
+     * intents + clipboard). Defaults to a browser implementation; supply a
+     * stub in tests or non-browser hosts.
+     */
+    nip55WebTransport?: Nip55WebTransport;
 }
 
 /**
@@ -346,6 +538,40 @@ declare class Signer {
      * resolved to a package name, or the user denies the request.
      */
     loginWithAndroidSigner(options?: AndroidLoginOptions): Promise<StoredAccount>;
+    /**
+     * Whether `loginWithNip55Web` can run in this environment — a plain
+     * Android browser with async clipboard access. False in a Capacitor
+     * native shell (use {@link loginWithAndroidSigner} there), and on
+     * desktop/iOS/SSR.
+     *
+     * A **capability** check, not an availability one: there is no web API
+     * to detect an installed Android app, so this says nothing about
+     * whether a signer app is actually installed. Use it to hide the
+     * browser flow where it cannot work, not to promise that it will.
+     */
+    supportsNip55Web(transport?: Nip55WebTransport): boolean;
+    /**
+     * Sign in via a NIP-55 Android external signer (Amber, etc) **from a
+     * plain browser**, with no Capacitor/native bridge. Opens the installed
+     * signer app through a `nostrsigner` intent and reads the result back
+     * from the clipboard once the user returns to the tab. Because the
+     * intent names no package, this works with any app that registered the
+     * `nostrsigner` scheme — one opens directly, several show the Android
+     * "Open with" chooser.
+     *
+     * Not for native builds — inside a Capacitor shell use
+     * {@link loginWithAndroidSigner}, which needs no clipboard and no
+     * per-operation approval.
+     *
+     * Every operation is a separate approval, and a rejection is
+     * indistinguishable from the user simply not returning, so callers must
+     * impose their own timeout. Prefer NIP-46 when a persistent session is
+     * acceptable — the NIP-55 spec recommends it for web clients.
+     *
+     * @throws if the environment cannot run the flow (not Android, no async
+     * clipboard) or the signer returns an unexpected value.
+     */
+    loginWithNip55Web(options?: Nip55WebLoginOptions): Promise<StoredAccount>;
     /** Snapshot of every persisted account, in insertion order. */
     listAccounts(): StoredAccount[];
     /**
@@ -392,6 +618,10 @@ declare class Signer {
      *    {@link loginWithAndroidSigner} performs and that — on Amber —
      *    surfaces as a permission prompt every cold start.
      *
+     *  - `nip55-web`: constructs a {@link Nip55WebSigner} with the stored
+     *    `pubkey` cached. Like `android`, this opens no signer app during
+     *    unlock; the first sign/encrypt call is what prompts.
+     *
      *  - `ncryptsec`: returns `null`. There is no silent path — the user's
      *    passphrase isn't (and shouldn't be) persisted. The caller must
      *    drive the passphrase prompt and call {@link loginWithNcryptsec}.
@@ -428,4 +658,4 @@ declare class Signer {
 /** Convenience wrapper around `new Signer(config)`. */
 declare function createSigner(config?: SignerConfig): Signer;
 
-export { type ActiveSigner as A, type BunkerLoginOptions as B, type LoginMethod as L, type NostrConnectOptions as N, type RelayMismatchHandler as R, Signer as S, type UnlockOptions as U, type AndroidLoginOptions as a, type AndroidLoginResult as b, AndroidSigner as c, type AndroidSignerAppInfo as d, type AndroidSignerPlugin as e, type RelayMismatchInfo as f, type SignerConfig as g, type SignerEvent as h, type StorageAdapter as i, type StoredAccount as j, createSigner as k, localStorageAdapter as l, loginWithAndroidSigner as m };
+export { type ActiveSigner as A, type BunkerLoginOptions as B, type LoginMethod as L, type Nip55WebLoginOptions as N, type RelayMismatchHandler as R, Signer as S, type UnlockOptions as U, type AndroidLoginOptions as a, type AndroidLoginResult as b, AndroidSigner as c, type AndroidSignerAppInfo as d, type AndroidSignerPlugin as e, type Nip55WebOptions as f, Nip55WebSigner as g, type Nip55WebTransport as h, type NostrConnectOptions as i, type RelayMismatchInfo as j, type SignerConfig as k, type SignerEvent as l, type StorageAdapter as m, type StoredAccount as n, browserNip55Transport as o, createSigner as p, localStorageAdapter as q, loginWithAndroidSigner as r, normalizeNip55Identifier as s };

package/dist/ui/index.cjs

@@ -41,10 +41,12 @@ var TABS = [
   { id: "extension", label: "Extension" },
   { id: "bunker", label: "Bunker URI" },
   { id: "nostrconnect", label: "Remote (QR)" },
+  { id: "nip55web", label: "Signer app" },
   { id: "android", label: "Android" }
 ];
-function renderLoginHtml() {
-  const tabs = TABS.map(
+function renderLoginHtml(options = {}) {
+  const includeNip55Web = options.includeNip55Web ?? true;
+  const tabs = TABS.filter((t) => t.id !== "nip55web" || includeNip55Web).map(
     (t) => `<button class="nostr-signer__tab nostr-signer__tab--${t.id}" type="button" data-tab="${t.id}">${t.label}</button>`
   ).join("");
   return `<div class="nostr-signer__root">
@@ -101,6 +103,10 @@ function renderLoginHtml() {
           <button class="nostr-signer__button nostr-signer__button--secondary" type="button" data-action="nostrconnect-cancel">Cancel</button>
         </div>
       </section>
+      ${includeNip55Web ? `<section class="nostr-signer__panel nostr-signer__panel--nip55web" data-panel="nip55web" hidden>
+        <p class="nostr-signer__hint">Sign in with a signer app installed on this Android device, using the browser (NIP-55). You&rsquo;ll be asked to approve each signature in the app.</p>
+        <button class="nostr-signer__button nostr-signer__button--primary" type="button" data-action="nip55web-login">Open signer app</button>
+      </section>` : ""}
       <section class="nostr-signer__panel nostr-signer__panel--android" data-panel="android" hidden>
         <p class="nostr-signer__hint">Sign in with an Android external signer app (NIP-55) such as Amber.</p>
         <p class="nostr-signer__status" data-region="android-status">Loading installed signers&hellip;</p>
@@ -119,6 +125,7 @@ function renderLoginHtml() {
 function attachLoginListeners(rootEl, signer, handlers = {}) {
   const detachers = [];
   let nostrConnectAbort = null;
+  let nip55WebAbort = null;
   const on = (el, event, handler) => {
     const wrapped = handler;
     el.addEventListener(event, wrapped);
@@ -239,6 +246,27 @@ function attachLoginListeners(rootEl, signer, handlers = {}) {
       showError(err);
     }
   });
+  const nip55WebBtn = rootEl.querySelector(
+    '[data-action="nip55web-login"]'
+  );
+  if (nip55WebBtn) on(nip55WebBtn, "click", async () => {
+    clearError();
+    const btn = nip55WebBtn;
+    btn.disabled = true;
+    nip55WebAbort = new AbortController();
+    try {
+      const account = await signer.loginWithNip55Web({
+        signal: nip55WebAbort.signal,
+        debug: handlers.onNip55WebDebug
+      });
+      handlers.onLogin?.(account);
+    } catch (err) {
+      btn.disabled = false;
+      if (err.name !== "AbortError") showError(err);
+    } finally {
+      nip55WebAbort = null;
+    }
+  });
   const bunkerForm = q('[data-form="bunker"]');
   on(bunkerForm, "submit", async (ev) => {
     ev.preventDefault();
@@ -321,6 +349,7 @@ function attachLoginListeners(rootEl, signer, handlers = {}) {
   return {
     detach: () => {
       nostrConnectAbort?.abort();
+      nip55WebAbort?.abort();
       for (const d of detachers) d();
     },
     selectTab

package/dist/ui/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/ui/index.ts"],"sourcesContent":["import QRCode from 'qrcode';\nimport type { AbstractSimplePool } from 'nostr-tools/abstract-pool';\nimport type { Signer } from '../core/signer.js';\nimport type { RelayMismatchHandler, StoredAccount } from '../core/types.js';\n\nexport type LoginTab = 'create' | 'ncryptsec' | 'extension' | 'bunker' | 'nostrconnect' | 'android';\n\nexport interface LoginUiHandlers {\n  onLogin?: (account: StoredAccount) => void;\n  onCancel?: () => void;\n  onError?: (error: Error) => void;\n  /** Optional: passed through to NIP-46 login methods. */\n  pool?: AbstractSimplePool;\n  /** Optional: passed through to NIP-46 login methods. */\n  onRelayMismatch?: RelayMismatchHandler;\n  /** Initial tab to show. Defaults to 'create'. */\n  defaultTab?: LoginTab;\n}\n\nexport interface LoginUiBinding {\n  detach(): void;\n  selectTab(tab: LoginTab): void;\n}\n\nconst TABS: ReadonlyArray<{ id: LoginTab; label: string }> = [\n  { id: 'create', label: 'Create' },\n  { id: 'ncryptsec', label: 'Existing key' },\n  { id: 'extension', label: 'Extension' },\n  { id: 'bunker', label: 'Bunker URI' },\n  { id: 'nostrconnect', label: 'Remote (QR)' },\n  { id: 'android', label: 'Android' },\n];\n\nexport function renderLoginHtml(): string {\n  const tabs = TABS.map(\n    (t) =>\n      `<button class=\"nostr-signer__tab nostr-signer__tab--${t.id}\" type=\"button\" data-tab=\"${t.id}\">${t.label}</button>`,\n  ).join('');\n\n  return `<div class=\"nostr-signer__root\">\n  <div class=\"nostr-signer__modal\">\n    <header class=\"nostr-signer__header\">\n      <h2 class=\"nostr-signer__title\">Sign in</h2>\n      <button class=\"nostr-signer__close\" type=\"button\" data-action=\"cancel\" aria-label=\"Close\">&times;</button>\n    </header>\n    <nav class=\"nostr-signer__tabs\" role=\"tablist\">${tabs}</nav>\n    <main class=\"nostr-signer__body\">\n      <section class=\"nostr-signer__panel nostr-signer__panel--create\" data-panel=\"create\">\n        <p class=\"nostr-signer__hint\">Generate a new nsec encrypted with your passphrase (NIP-49). Back up the ncryptsec on the next step — it's the only way back in.</p>\n        <form class=\"nostr-signer__form\" data-form=\"create\">\n          <label class=\"nostr-signer__label\" for=\"nostr-signer-create-passphrase\">Passphrase</label>\n          <input class=\"nostr-signer__input nostr-signer__input--passphrase\" id=\"nostr-signer-create-passphrase\" type=\"password\" name=\"passphrase\" autocomplete=\"new-password\" required>\n          <button class=\"nostr-signer__button nostr-signer__button--primary\" type=\"submit\">Create account</button>\n        </form>\n      </section>\n      <section class=\"nostr-signer__panel nostr-signer__panel--ncryptsec\" data-panel=\"ncryptsec\" hidden>\n        <form class=\"nostr-signer__form\" data-form=\"ncryptsec\">\n          <label class=\"nostr-signer__label\" for=\"nostr-signer-ncryptsec\">ncryptsec1...</label>\n          <textarea class=\"nostr-signer__input nostr-signer__input--ncryptsec\" id=\"nostr-signer-ncryptsec\" name=\"ncryptsec\" required></textarea>\n          <label class=\"nostr-signer__label\" for=\"nostr-signer-ncryptsec-passphrase\">Passphrase</label>\n          <input class=\"nostr-signer__input nostr-signer__input--passphrase\" id=\"nostr-signer-ncryptsec-passphrase\" type=\"password\" name=\"passphrase\" autocomplete=\"current-password\" required>\n          <button class=\"nostr-signer__button nostr-signer__button--primary\" type=\"submit\">Sign in</button>\n        </form>\n      </section>\n      <section class=\"nostr-signer__panel nostr-signer__panel--extension\" data-panel=\"extension\" hidden>\n        <p class=\"nostr-signer__hint\">Requires a NIP-07 browser extension (nos2x, Alby, etc.).</p>\n        <button class=\"nostr-signer__button nostr-signer__button--primary\" type=\"button\" data-action=\"extension-login\">Sign in with extension</button>\n      </section>\n      <section class=\"nostr-signer__panel nostr-signer__panel--bunker\" data-panel=\"bunker\" hidden>\n        <form class=\"nostr-signer__form\" data-form=\"bunker\">\n          <label class=\"nostr-signer__label\" for=\"nostr-signer-bunker-uri\">bunker:// URI</label>\n          <textarea class=\"nostr-signer__input nostr-signer__input--bunker-uri\" id=\"nostr-signer-bunker-uri\" name=\"uri\" placeholder=\"bunker://&lt;pubkey&gt;?relay=wss://...\" required></textarea>\n          <label class=\"nostr-signer__label\" for=\"nostr-signer-bunker-perms\">Permissions (optional, comma-separated)</label>\n          <input class=\"nostr-signer__input nostr-signer__input--perms\" id=\"nostr-signer-bunker-perms\" name=\"perms\" placeholder=\"sign_event:1, nip44_encrypt\">\n          <button class=\"nostr-signer__button nostr-signer__button--primary\" type=\"submit\">Connect</button>\n        </form>\n      </section>\n      <section class=\"nostr-signer__panel nostr-signer__panel--nostrconnect\" data-panel=\"nostrconnect\" hidden>\n        <form class=\"nostr-signer__form\" data-form=\"nostrconnect\">\n          <label class=\"nostr-signer__label\" for=\"nostr-signer-nc-relays\">Relays (comma-separated)</label>\n          <input class=\"nostr-signer__input nostr-signer__input--relays\" id=\"nostr-signer-nc-relays\" name=\"relays\" placeholder=\"wss://relay.example, wss://other\" required>\n          <label class=\"nostr-signer__label\" for=\"nostr-signer-nc-perms\">Permissions (optional, comma-separated)</label>\n          <input class=\"nostr-signer__input nostr-signer__input--perms\" id=\"nostr-signer-nc-perms\" name=\"perms\" placeholder=\"sign_event:1, nip44_encrypt\">\n          <button class=\"nostr-signer__button nostr-signer__button--primary\" type=\"submit\">Generate URI</button>\n        </form>\n        <div class=\"nostr-signer__qr\" data-region=\"nostrconnect-qr\" hidden>\n          <p class=\"nostr-signer__hint\">Scan or paste this into your remote signer:</p>\n          <div class=\"nostr-signer__qr-image\" data-region=\"nostrconnect-qr-image\" aria-hidden=\"true\"></div>\n          <pre class=\"nostr-signer__qr-uri\" data-region=\"nostrconnect-uri\"></pre>\n          <p class=\"nostr-signer__status\" data-region=\"nostrconnect-status\">Waiting for remote signer to pair...</p>\n          <button class=\"nostr-signer__button nostr-signer__button--secondary\" type=\"button\" data-action=\"nostrconnect-cancel\">Cancel</button>\n        </div>\n      </section>\n      <section class=\"nostr-signer__panel nostr-signer__panel--android\" data-panel=\"android\" hidden>\n        <p class=\"nostr-signer__hint\">Sign in with an Android external signer app (NIP-55) such as Amber.</p>\n        <p class=\"nostr-signer__status\" data-region=\"android-status\">Loading installed signers&hellip;</p>\n        <ul class=\"nostr-signer__android-apps\" data-region=\"android-apps\" hidden></ul>\n      </section>\n      <section class=\"nostr-signer__panel nostr-signer__panel--created\" data-panel=\"created\" hidden>\n        <p class=\"nostr-signer__hint\">Account created. Back up this encrypted secret key — without it (and your passphrase) you cannot sign in again.</p>\n        <pre class=\"nostr-signer__ncryptsec-display\" data-region=\"created-ncryptsec\"></pre>\n        <button class=\"nostr-signer__button nostr-signer__button--primary\" type=\"button\" data-action=\"created-ack\">I've backed it up</button>\n      </section>\n    </main>\n    <div class=\"nostr-signer__error\" data-region=\"error\" hidden></div>\n  </div>\n</div>`;\n}\n\nexport function attachLoginListeners(\n  rootEl: HTMLElement,\n  signer: Signer,\n  handlers: LoginUiHandlers = {},\n): LoginUiBinding {\n  const detachers: Array<() => void> = [];\n  let nostrConnectAbort: AbortController | null = null;\n\n  const on = <K extends keyof HTMLElementEventMap>(\n    el: Element,\n    event: K,\n    handler: (ev: HTMLElementEventMap[K]) => void,\n  ): void => {\n    const wrapped = handler as EventListener;\n    el.addEventListener(event, wrapped);\n    detachers.push(() => el.removeEventListener(event, wrapped));\n  };\n\n  const q = <T extends Element = Element>(selector: string): T =>\n    rootEl.querySelector(selector) as T;\n\n  const errorEl = q<HTMLDivElement>('[data-region=\"error\"]');\n  const showError = (err: Error | string): void => {\n    const msg = typeof err === 'string' ? err : err.message;\n    errorEl.hidden = false;\n    errorEl.textContent = msg;\n    if (typeof err !== 'string') handlers.onError?.(err);\n  };\n  const clearError = (): void => {\n    errorEl.hidden = true;\n    errorEl.textContent = '';\n  };\n\n  // ---- android (NIP-55) — declared before selectTab so it can be invoked\n  // when the user opens with defaultTab: 'android'.\n  const androidStatus = q<HTMLElement>('[data-region=\"android-status\"]');\n  const androidList = q<HTMLUListElement>('[data-region=\"android-apps\"]');\n  let androidFetchToken = 0;\n\n  const refreshAndroidApps = async (): Promise<void> => {\n    const token = ++androidFetchToken;\n    androidList.hidden = true;\n    androidList.innerHTML = '';\n    androidStatus.hidden = false;\n    androidStatus.textContent = 'Loading installed signers…';\n    try {\n      const apps = await signer.listAndroidSignerApps();\n      if (token !== androidFetchToken) return;\n      if (apps.length === 0) {\n        androidStatus.textContent =\n          'No NIP-55 signer apps installed. Install Amber (or similar) and try again.';\n        return;\n      }\n      androidStatus.hidden = true;\n      for (const app of apps) {\n        const li = document.createElement('li');\n        li.className = 'nostr-signer__android-app';\n        const btn = document.createElement('button');\n        btn.type = 'button';\n        btn.className = 'nostr-signer__button nostr-signer__button--primary';\n        btn.dataset.packageName = app.packageName;\n        btn.textContent = `${app.name} (${app.packageName})`;\n        on(btn, 'click', async () => {\n          clearError();\n          btn.disabled = true;\n          try {\n            const account = await signer.loginWithAndroidSigner({\n              packageName: app.packageName,\n            });\n            handlers.onLogin?.(account);\n          } catch (err) {\n            btn.disabled = false;\n            showError(err as Error);\n          }\n        });\n        li.appendChild(btn);\n        androidList.appendChild(li);\n      }\n      androidList.hidden = false;\n    } catch (err) {\n      if (token !== androidFetchToken) return;\n      androidStatus.textContent = (err as Error).message;\n    }\n  };\n\n  const selectTab = (tab: LoginTab): void => {\n    rootEl.querySelectorAll<HTMLElement>('[data-panel]').forEach((panel) => {\n      panel.hidden = panel.dataset.panel !== tab;\n    });\n    rootEl.querySelectorAll<HTMLElement>('[data-tab]').forEach((btn) => {\n      btn.classList.toggle('nostr-signer__tab--active', btn.dataset.tab === tab);\n    });\n    clearError();\n    if (tab === 'android') void refreshAndroidApps();\n  };\n\n  selectTab(handlers.defaultTab ?? 'create');\n\n  rootEl.querySelectorAll<HTMLButtonElement>('[data-tab]').forEach((btn) => {\n    on(btn, 'click', () => selectTab(btn.dataset.tab as LoginTab));\n  });\n\n  on(q('[data-action=\"cancel\"]'), 'click', () => handlers.onCancel?.());\n\n  // ---- create ----\n  const createForm = q<HTMLFormElement>('[data-form=\"create\"]');\n  on(createForm, 'submit', async (ev) => {\n    ev.preventDefault();\n    clearError();\n    const passphrase = (createForm.elements.namedItem('passphrase') as HTMLInputElement).value;\n    try {\n      const { ncryptsec } = await signer.createAccount(passphrase);\n      q<HTMLElement>('[data-region=\"created-ncryptsec\"]').textContent = ncryptsec;\n      rootEl.querySelectorAll<HTMLElement>('[data-panel]').forEach((p) => {\n        p.hidden = p.dataset.panel !== 'created';\n      });\n    } catch (err) {\n      showError(err as Error);\n    }\n  });\n\n  on(q('[data-action=\"created-ack\"]'), 'click', () => {\n    const active = signer.getActiveAccount();\n    if (active) handlers.onLogin?.(active);\n  });\n\n  // ---- ncryptsec ----\n  const ncryptsecForm = q<HTMLFormElement>('[data-form=\"ncryptsec\"]');\n  on(ncryptsecForm, 'submit', async (ev) => {\n    ev.preventDefault();\n    clearError();\n    const ncryptsec = (\n      ncryptsecForm.elements.namedItem('ncryptsec') as HTMLTextAreaElement\n    ).value.trim();\n    const passphrase = (\n      ncryptsecForm.elements.namedItem('passphrase') as HTMLInputElement\n    ).value;\n    try {\n      const account = await signer.loginWithNcryptsec(ncryptsec, passphrase);\n      handlers.onLogin?.(account);\n    } catch (err) {\n      showError(err as Error);\n    }\n  });\n\n  // ---- extension ----\n  on(q('[data-action=\"extension-login\"]'), 'click', async () => {\n    clearError();\n    try {\n      const account = await signer.loginWithExtension();\n      handlers.onLogin?.(account);\n    } catch (err) {\n      showError(err as Error);\n    }\n  });\n\n  // ---- bunker URI ----\n  const bunkerForm = q<HTMLFormElement>('[data-form=\"bunker\"]');\n  on(bunkerForm, 'submit', async (ev) => {\n    ev.preventDefault();\n    clearError();\n    const uri = (\n      bunkerForm.elements.namedItem('uri') as HTMLTextAreaElement\n    ).value.trim();\n    const perms = (bunkerForm.elements.namedItem('perms') as HTMLInputElement).value\n      .split(',')\n      .map((s) => s.trim())\n      .filter(Boolean);\n    try {\n      const account = await signer.loginWithBunkerUri(uri, {\n        pool: handlers.pool,\n        onRelayMismatch: handlers.onRelayMismatch,\n        perms: perms.length > 0 ? perms : undefined,\n      });\n      handlers.onLogin?.(account);\n    } catch (err) {\n      showError(err as Error);\n    }\n  });\n\n  // ---- nostrconnect ----\n  const ncForm = q<HTMLFormElement>('[data-form=\"nostrconnect\"]');\n  const ncQrRegion = q<HTMLDivElement>('[data-region=\"nostrconnect-qr\"]');\n  const ncQrUri = q<HTMLElement>('[data-region=\"nostrconnect-uri\"]');\n  const ncQrImage = q<HTMLDivElement>('[data-region=\"nostrconnect-qr-image\"]');\n  const ncStatus = q<HTMLElement>('[data-region=\"nostrconnect-status\"]');\n  let ncQrToken = 0;\n\n  const resetNostrConnect = (): void => {\n    ncForm.hidden = false;\n    ncQrRegion.hidden = true;\n    ncQrUri.textContent = '';\n    ncQrImage.innerHTML = '';\n    ncStatus.textContent = 'Waiting for remote signer to pair...';\n    ncQrToken++;\n  };\n\n  const renderNostrConnectQr = async (uri: string): Promise<void> => {\n    const token = ++ncQrToken;\n    try {\n      const svg = await QRCode.toString(uri, {\n        type: 'svg',\n        margin: 1,\n        errorCorrectionLevel: 'M',\n      });\n      if (token === ncQrToken) ncQrImage.innerHTML = svg;\n    } catch {\n      // QR rendering is a nice-to-have — the URI text remains usable.\n    }\n  };\n\n  on(ncForm, 'submit', async (ev) => {\n    ev.preventDefault();\n    clearError();\n    const relays = (ncForm.elements.namedItem('relays') as HTMLInputElement).value\n      .split(',')\n      .map((s) => s.trim())\n      .filter(Boolean);\n    if (relays.length === 0) {\n      showError('At least one relay is required.');\n      return;\n    }\n    const perms = (ncForm.elements.namedItem('perms') as HTMLInputElement).value\n      .split(',')\n      .map((s) => s.trim())\n      .filter(Boolean);\n\n    ncForm.hidden = true;\n    ncQrRegion.hidden = false;\n    nostrConnectAbort = new AbortController();\n    try {\n      const account = await signer.loginWithNostrConnect({\n        relays,\n        perms: perms.length > 0 ? perms : undefined,\n        pool: handlers.pool,\n        onRelayMismatch: handlers.onRelayMismatch,\n        signal: nostrConnectAbort.signal,\n        onUri: (uri) => {\n          ncQrUri.textContent = uri;\n          void renderNostrConnectQr(uri);\n        },\n      });\n      handlers.onLogin?.(account);\n    } catch (err) {\n      resetNostrConnect();\n      if ((err as Error).name !== 'AbortError') showError(err as Error);\n    } finally {\n      nostrConnectAbort = null;\n    }\n  });\n\n  on(q('[data-action=\"nostrconnect-cancel\"]'), 'click', () => {\n    nostrConnectAbort?.abort();\n    resetNostrConnect();\n  });\n\n  return {\n    detach: () => {\n      nostrConnectAbort?.abort();\n      for (const d of detachers) d();\n    },\n    selectTab,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,oBAAmB;AAwBnB,IAAM,OAAuD;AAAA,EAC3D,EAAE,IAAI,UAAU,OAAO,SAAS;AAAA,EAChC,EAAE,IAAI,aAAa,OAAO,eAAe;AAAA,EACzC,EAAE,IAAI,aAAa,OAAO,YAAY;AAAA,EACtC,EAAE,IAAI,UAAU,OAAO,aAAa;AAAA,EACpC,EAAE,IAAI,gBAAgB,OAAO,cAAc;AAAA,EAC3C,EAAE,IAAI,WAAW,OAAO,UAAU;AACpC;AAEO,SAAS,kBAA0B;AACxC,QAAM,OAAO,KAAK;AAAA,IAChB,CAAC,MACC,uDAAuD,EAAE,EAAE,6BAA6B,EAAE,EAAE,KAAK,EAAE,KAAK;AAAA,EAC5G,EAAE,KAAK,EAAE;AAET,SAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qDAM4C,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA8DzD;AAEO,SAAS,qBACd,QACA,QACA,WAA4B,CAAC,GACb;AAChB,QAAM,YAA+B,CAAC;AACtC,MAAI,oBAA4C;AAEhD,QAAM,KAAK,CACT,IACA,OACA,YACS;AACT,UAAM,UAAU;AAChB,OAAG,iBAAiB,OAAO,OAAO;AAClC,cAAU,KAAK,MAAM,GAAG,oBAAoB,OAAO,OAAO,CAAC;AAAA,EAC7D;AAEA,QAAM,IAAI,CAA8B,aACtC,OAAO,cAAc,QAAQ;AAE/B,QAAM,UAAU,EAAkB,uBAAuB;AACzD,QAAM,YAAY,CAAC,QAA8B;AAC/C,UAAM,MAAM,OAAO,QAAQ,WAAW,MAAM,IAAI;AAChD,YAAQ,SAAS;AACjB,YAAQ,cAAc;AACtB,QAAI,OAAO,QAAQ,SAAU,UAAS,UAAU,GAAG;AAAA,EACrD;AACA,QAAM,aAAa,MAAY;AAC7B,YAAQ,SAAS;AACjB,YAAQ,cAAc;AAAA,EACxB;AAIA,QAAM,gBAAgB,EAAe,gCAAgC;AACrE,QAAM,cAAc,EAAoB,8BAA8B;AACtE,MAAI,oBAAoB;AAExB,QAAM,qBAAqB,YAA2B;AACpD,UAAM,QAAQ,EAAE;AAChB,gBAAY,SAAS;AACrB,gBAAY,YAAY;AACxB,kBAAc,SAAS;AACvB,kBAAc,cAAc;AAC5B,QAAI;AACF,YAAM,OAAO,MAAM,OAAO,sBAAsB;AAChD,UAAI,UAAU,kBAAmB;AACjC,UAAI,KAAK,WAAW,GAAG;AACrB,sBAAc,cACZ;AACF;AAAA,MACF;AACA,oBAAc,SAAS;AACvB,iBAAW,OAAO,MAAM;AACtB,cAAM,KAAK,SAAS,cAAc,IAAI;AACtC,WAAG,YAAY;AACf,cAAM,MAAM,SAAS,cAAc,QAAQ;AAC3C,YAAI,OAAO;AACX,YAAI,YAAY;AAChB,YAAI,QAAQ,cAAc,IAAI;AAC9B,YAAI,cAAc,GAAG,IAAI,IAAI,KAAK,IAAI,WAAW;AACjD,WAAG,KAAK,SAAS,YAAY;AAC3B,qBAAW;AACX,cAAI,WAAW;AACf,cAAI;AACF,kBAAM,UAAU,MAAM,OAAO,uBAAuB;AAAA,cAClD,aAAa,IAAI;AAAA,YACnB,CAAC;AACD,qBAAS,UAAU,OAAO;AAAA,UAC5B,SAAS,KAAK;AACZ,gBAAI,WAAW;AACf,sBAAU,GAAY;AAAA,UACxB;AAAA,QACF,CAAC;AACD,WAAG,YAAY,GAAG;AAClB,oBAAY,YAAY,EAAE;AAAA,MAC5B;AACA,kBAAY,SAAS;AAAA,IACvB,SAAS,KAAK;AACZ,UAAI,UAAU,kBAAmB;AACjC,oBAAc,cAAe,IAAc;AAAA,IAC7C;AAAA,EACF;AAEA,QAAM,YAAY,CAAC,QAAwB;AACzC,WAAO,iBAA8B,cAAc,EAAE,QAAQ,CAAC,UAAU;AACtE,YAAM,SAAS,MAAM,QAAQ,UAAU;AAAA,IACzC,CAAC;AACD,WAAO,iBAA8B,YAAY,EAAE,QAAQ,CAAC,QAAQ;AAClE,UAAI,UAAU,OAAO,6BAA6B,IAAI,QAAQ,QAAQ,GAAG;AAAA,IAC3E,CAAC;AACD,eAAW;AACX,QAAI,QAAQ,UAAW,MAAK,mBAAmB;AAAA,EACjD;AAEA,YAAU,SAAS,cAAc,QAAQ;AAEzC,SAAO,iBAAoC,YAAY,EAAE,QAAQ,CAAC,QAAQ;AACxE,OAAG,KAAK,SAAS,MAAM,UAAU,IAAI,QAAQ,GAAe,CAAC;AAAA,EAC/D,CAAC;AAED,KAAG,EAAE,wBAAwB,GAAG,SAAS,MAAM,SAAS,WAAW,CAAC;AAGpE,QAAM,aAAa,EAAmB,sBAAsB;AAC5D,KAAG,YAAY,UAAU,OAAO,OAAO;AACrC,OAAG,eAAe;AAClB,eAAW;AACX,UAAM,aAAc,WAAW,SAAS,UAAU,YAAY,EAAuB;AACrF,QAAI;AACF,YAAM,EAAE,UAAU,IAAI,MAAM,OAAO,cAAc,UAAU;AAC3D,QAAe,mCAAmC,EAAE,cAAc;AAClE,aAAO,iBAA8B,cAAc,EAAE,QAAQ,CAAC,MAAM;AAClE,UAAE,SAAS,EAAE,QAAQ,UAAU;AAAA,MACjC,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,gBAAU,GAAY;AAAA,IACxB;AAAA,EACF,CAAC;AAED,KAAG,EAAE,6BAA6B,GAAG,SAAS,MAAM;AAClD,UAAM,SAAS,OAAO,iBAAiB;AACvC,QAAI,OAAQ,UAAS,UAAU,MAAM;AAAA,EACvC,CAAC;AAGD,QAAM,gBAAgB,EAAmB,yBAAyB;AAClE,KAAG,eAAe,UAAU,OAAO,OAAO;AACxC,OAAG,eAAe;AAClB,eAAW;AACX,UAAM,YACJ,cAAc,SAAS,UAAU,WAAW,EAC5C,MAAM,KAAK;AACb,UAAM,aACJ,cAAc,SAAS,UAAU,YAAY,EAC7C;AACF,QAAI;AACF,YAAM,UAAU,MAAM,OAAO,mBAAmB,WAAW,UAAU;AACrE,eAAS,UAAU,OAAO;AAAA,IAC5B,SAAS,KAAK;AACZ,gBAAU,GAAY;AAAA,IACxB;AAAA,EACF,CAAC;AAGD,KAAG,EAAE,iCAAiC,GAAG,SAAS,YAAY;AAC5D,eAAW;AACX,QAAI;AACF,YAAM,UAAU,MAAM,OAAO,mBAAmB;AAChD,eAAS,UAAU,OAAO;AAAA,IAC5B,SAAS,KAAK;AACZ,gBAAU,GAAY;AAAA,IACxB;AAAA,EACF,CAAC;AAGD,QAAM,aAAa,EAAmB,sBAAsB;AAC5D,KAAG,YAAY,UAAU,OAAO,OAAO;AACrC,OAAG,eAAe;AAClB,eAAW;AACX,UAAM,MACJ,WAAW,SAAS,UAAU,KAAK,EACnC,MAAM,KAAK;AACb,UAAM,QAAS,WAAW,SAAS,UAAU,OAAO,EAAuB,MACxE,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OAAO;AACjB,QAAI;AACF,YAAM,UAAU,MAAM,OAAO,mBAAmB,KAAK;AAAA,QACnD,MAAM,SAAS;AAAA,QACf,iBAAiB,SAAS;AAAA,QAC1B,OAAO,MAAM,SAAS,IAAI,QAAQ;AAAA,MACpC,CAAC;AACD,eAAS,UAAU,OAAO;AAAA,IAC5B,SAAS,KAAK;AACZ,gBAAU,GAAY;AAAA,IACxB;AAAA,EACF,CAAC;AAGD,QAAM,SAAS,EAAmB,4BAA4B;AAC9D,QAAM,aAAa,EAAkB,iCAAiC;AACtE,QAAM,UAAU,EAAe,kCAAkC;AACjE,QAAM,YAAY,EAAkB,uCAAuC;AAC3E,QAAM,WAAW,EAAe,qCAAqC;AACrE,MAAI,YAAY;AAEhB,QAAM,oBAAoB,MAAY;AACpC,WAAO,SAAS;AAChB,eAAW,SAAS;AACpB,YAAQ,cAAc;AACtB,cAAU,YAAY;AACtB,aAAS,cAAc;AACvB;AAAA,EACF;AAEA,QAAM,uBAAuB,OAAO,QAA+B;AACjE,UAAM,QAAQ,EAAE;AAChB,QAAI;AACF,YAAM,MAAM,MAAM,cAAAA,QAAO,SAAS,KAAK;AAAA,QACrC,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,sBAAsB;AAAA,MACxB,CAAC;AACD,UAAI,UAAU,UAAW,WAAU,YAAY;AAAA,IACjD,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,KAAG,QAAQ,UAAU,OAAO,OAAO;AACjC,OAAG,eAAe;AAClB,eAAW;AACX,UAAM,SAAU,OAAO,SAAS,UAAU,QAAQ,EAAuB,MACtE,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OAAO;AACjB,QAAI,OAAO,WAAW,GAAG;AACvB,gBAAU,iCAAiC;AAC3C;AAAA,IACF;AACA,UAAM,QAAS,OAAO,SAAS,UAAU,OAAO,EAAuB,MACpE,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OAAO;AAEjB,WAAO,SAAS;AAChB,eAAW,SAAS;AACpB,wBAAoB,IAAI,gBAAgB;AACxC,QAAI;AACF,YAAM,UAAU,MAAM,OAAO,sBAAsB;AAAA,QACjD;AAAA,QACA,OAAO,MAAM,SAAS,IAAI,QAAQ;AAAA,QAClC,MAAM,SAAS;AAAA,QACf,iBAAiB,SAAS;AAAA,QAC1B,QAAQ,kBAAkB;AAAA,QAC1B,OAAO,CAAC,QAAQ;AACd,kBAAQ,cAAc;AACtB,eAAK,qBAAqB,GAAG;AAAA,QAC/B;AAAA,MACF,CAAC;AACD,eAAS,UAAU,OAAO;AAAA,IAC5B,SAAS,KAAK;AACZ,wBAAkB;AAClB,UAAK,IAAc,SAAS,aAAc,WAAU,GAAY;AAAA,IAClE,UAAE;AACA,0BAAoB;AAAA,IACtB;AAAA,EACF,CAAC;AAED,KAAG,EAAE,qCAAqC,GAAG,SAAS,MAAM;AAC1D,uBAAmB,MAAM;AACzB,sBAAkB;AAAA,EACpB,CAAC;AAED,SAAO;AAAA,IACL,QAAQ,MAAM;AACZ,yBAAmB,MAAM;AACzB,iBAAW,KAAK,UAAW,GAAE;AAAA,IAC/B;AAAA,IACA;AAAA,EACF;AACF;","names":["QRCode"]}
+{"version":3,"sources":["../../src/ui/index.ts"],"sourcesContent":["import QRCode from 'qrcode';\nimport type { AbstractSimplePool } from 'nostr-tools/abstract-pool';\nimport type { Signer } from '../core/signer.js';\nimport type { RelayMismatchHandler, StoredAccount } from '../core/types.js';\n\nexport type LoginTab =\n  | 'create'\n  | 'ncryptsec'\n  | 'extension'\n  | 'bunker'\n  | 'nostrconnect'\n  | 'nip55web'\n  | 'android';\n\nexport interface LoginUiHandlers {\n  onLogin?: (account: StoredAccount) => void;\n  onCancel?: () => void;\n  onError?: (error: Error) => void;\n  /** Optional: passed through to NIP-46 login methods. */\n  pool?: AbstractSimplePool;\n  /** Optional: passed through to NIP-46 login methods. */\n  onRelayMismatch?: RelayMismatchHandler;\n  /** Initial tab to show. Defaults to 'create'. */\n  defaultTab?: LoginTab;\n  /**\n   * Optional diagnostic stream for the browser NIP-55 (intent/clipboard)\n   * flow. Wire it to an on-screen log when testing on a phone — the flow\n   * navigates away, so its behaviour is otherwise hard to observe.\n   */\n  onNip55WebDebug?: (message: string) => void;\n}\n\nexport interface LoginUiBinding {\n  detach(): void;\n  selectTab(tab: LoginTab): void;\n}\n\nconst TABS: ReadonlyArray<{ id: LoginTab; label: string }> = [\n  { id: 'create', label: 'Create' },\n  { id: 'ncryptsec', label: 'Existing key' },\n  { id: 'extension', label: 'Extension' },\n  { id: 'bunker', label: 'Bunker URI' },\n  { id: 'nostrconnect', label: 'Remote (QR)' },\n  { id: 'nip55web', label: 'Signer app' },\n  { id: 'android', label: 'Android' },\n];\n\nexport interface RenderLoginOptions {\n  /**\n   * Include the \"Signer app\" tab (browser NIP-55). Defaults to `true`.\n   *\n   * Pass `signer.supportsNip55Web()` to hide it where it cannot work —\n   * notably inside a Capacitor native shell, where\n   * `loginWithAndroidSigner` is the right path. Omit it in a native build\n   * and the tab would only ever error.\n   */\n  includeNip55Web?: boolean;\n}\n\nexport function renderLoginHtml(options: RenderLoginOptions = {}): string {\n  const includeNip55Web = options.includeNip55Web ?? true;\n  const tabs = TABS.filter((t) => t.id !== 'nip55web' || includeNip55Web)\n    .map(\n      (t) =>\n        `<button class=\"nostr-signer__tab nostr-signer__tab--${t.id}\" type=\"button\" data-tab=\"${t.id}\">${t.label}</button>`,\n    )\n    .join('');\n\n  return `<div class=\"nostr-signer__root\">\n  <div class=\"nostr-signer__modal\">\n    <header class=\"nostr-signer__header\">\n      <h2 class=\"nostr-signer__title\">Sign in</h2>\n      <button class=\"nostr-signer__close\" type=\"button\" data-action=\"cancel\" aria-label=\"Close\">&times;</button>\n    </header>\n    <nav class=\"nostr-signer__tabs\" role=\"tablist\">${tabs}</nav>\n    <main class=\"nostr-signer__body\">\n      <section class=\"nostr-signer__panel nostr-signer__panel--create\" data-panel=\"create\">\n        <p class=\"nostr-signer__hint\">Generate a new nsec encrypted with your passphrase (NIP-49). Back up the ncryptsec on the next step — it's the only way back in.</p>\n        <form class=\"nostr-signer__form\" data-form=\"create\">\n          <label class=\"nostr-signer__label\" for=\"nostr-signer-create-passphrase\">Passphrase</label>\n          <input class=\"nostr-signer__input nostr-signer__input--passphrase\" id=\"nostr-signer-create-passphrase\" type=\"password\" name=\"passphrase\" autocomplete=\"new-password\" required>\n          <button class=\"nostr-signer__button nostr-signer__button--primary\" type=\"submit\">Create account</button>\n        </form>\n      </section>\n      <section class=\"nostr-signer__panel nostr-signer__panel--ncryptsec\" data-panel=\"ncryptsec\" hidden>\n        <form class=\"nostr-signer__form\" data-form=\"ncryptsec\">\n          <label class=\"nostr-signer__label\" for=\"nostr-signer-ncryptsec\">ncryptsec1...</label>\n          <textarea class=\"nostr-signer__input nostr-signer__input--ncryptsec\" id=\"nostr-signer-ncryptsec\" name=\"ncryptsec\" required></textarea>\n          <label class=\"nostr-signer__label\" for=\"nostr-signer-ncryptsec-passphrase\">Passphrase</label>\n          <input class=\"nostr-signer__input nostr-signer__input--passphrase\" id=\"nostr-signer-ncryptsec-passphrase\" type=\"password\" name=\"passphrase\" autocomplete=\"current-password\" required>\n          <button class=\"nostr-signer__button nostr-signer__button--primary\" type=\"submit\">Sign in</button>\n        </form>\n      </section>\n      <section class=\"nostr-signer__panel nostr-signer__panel--extension\" data-panel=\"extension\" hidden>\n        <p class=\"nostr-signer__hint\">Requires a NIP-07 browser extension (nos2x, Alby, etc.).</p>\n        <button class=\"nostr-signer__button nostr-signer__button--primary\" type=\"button\" data-action=\"extension-login\">Sign in with extension</button>\n      </section>\n      <section class=\"nostr-signer__panel nostr-signer__panel--bunker\" data-panel=\"bunker\" hidden>\n        <form class=\"nostr-signer__form\" data-form=\"bunker\">\n          <label class=\"nostr-signer__label\" for=\"nostr-signer-bunker-uri\">bunker:// URI</label>\n          <textarea class=\"nostr-signer__input nostr-signer__input--bunker-uri\" id=\"nostr-signer-bunker-uri\" name=\"uri\" placeholder=\"bunker://&lt;pubkey&gt;?relay=wss://...\" required></textarea>\n          <label class=\"nostr-signer__label\" for=\"nostr-signer-bunker-perms\">Permissions (optional, comma-separated)</label>\n          <input class=\"nostr-signer__input nostr-signer__input--perms\" id=\"nostr-signer-bunker-perms\" name=\"perms\" placeholder=\"sign_event:1, nip44_encrypt\">\n          <button class=\"nostr-signer__button nostr-signer__button--primary\" type=\"submit\">Connect</button>\n        </form>\n      </section>\n      <section class=\"nostr-signer__panel nostr-signer__panel--nostrconnect\" data-panel=\"nostrconnect\" hidden>\n        <form class=\"nostr-signer__form\" data-form=\"nostrconnect\">\n          <label class=\"nostr-signer__label\" for=\"nostr-signer-nc-relays\">Relays (comma-separated)</label>\n          <input class=\"nostr-signer__input nostr-signer__input--relays\" id=\"nostr-signer-nc-relays\" name=\"relays\" placeholder=\"wss://relay.example, wss://other\" required>\n          <label class=\"nostr-signer__label\" for=\"nostr-signer-nc-perms\">Permissions (optional, comma-separated)</label>\n          <input class=\"nostr-signer__input nostr-signer__input--perms\" id=\"nostr-signer-nc-perms\" name=\"perms\" placeholder=\"sign_event:1, nip44_encrypt\">\n          <button class=\"nostr-signer__button nostr-signer__button--primary\" type=\"submit\">Generate URI</button>\n        </form>\n        <div class=\"nostr-signer__qr\" data-region=\"nostrconnect-qr\" hidden>\n          <p class=\"nostr-signer__hint\">Scan or paste this into your remote signer:</p>\n          <div class=\"nostr-signer__qr-image\" data-region=\"nostrconnect-qr-image\" aria-hidden=\"true\"></div>\n          <pre class=\"nostr-signer__qr-uri\" data-region=\"nostrconnect-uri\"></pre>\n          <p class=\"nostr-signer__status\" data-region=\"nostrconnect-status\">Waiting for remote signer to pair...</p>\n          <button class=\"nostr-signer__button nostr-signer__button--secondary\" type=\"button\" data-action=\"nostrconnect-cancel\">Cancel</button>\n        </div>\n      </section>\n      ${includeNip55Web ? `<section class=\"nostr-signer__panel nostr-signer__panel--nip55web\" data-panel=\"nip55web\" hidden>\n        <p class=\"nostr-signer__hint\">Sign in with a signer app installed on this Android device, using the browser (NIP-55). You&rsquo;ll be asked to approve each signature in the app.</p>\n        <button class=\"nostr-signer__button nostr-signer__button--primary\" type=\"button\" data-action=\"nip55web-login\">Open signer app</button>\n      </section>` : ''}\n      <section class=\"nostr-signer__panel nostr-signer__panel--android\" data-panel=\"android\" hidden>\n        <p class=\"nostr-signer__hint\">Sign in with an Android external signer app (NIP-55) such as Amber.</p>\n        <p class=\"nostr-signer__status\" data-region=\"android-status\">Loading installed signers&hellip;</p>\n        <ul class=\"nostr-signer__android-apps\" data-region=\"android-apps\" hidden></ul>\n      </section>\n      <section class=\"nostr-signer__panel nostr-signer__panel--created\" data-panel=\"created\" hidden>\n        <p class=\"nostr-signer__hint\">Account created. Back up this encrypted secret key — without it (and your passphrase) you cannot sign in again.</p>\n        <pre class=\"nostr-signer__ncryptsec-display\" data-region=\"created-ncryptsec\"></pre>\n        <button class=\"nostr-signer__button nostr-signer__button--primary\" type=\"button\" data-action=\"created-ack\">I've backed it up</button>\n      </section>\n    </main>\n    <div class=\"nostr-signer__error\" data-region=\"error\" hidden></div>\n  </div>\n</div>`;\n}\n\nexport function attachLoginListeners(\n  rootEl: HTMLElement,\n  signer: Signer,\n  handlers: LoginUiHandlers = {},\n): LoginUiBinding {\n  const detachers: Array<() => void> = [];\n  let nostrConnectAbort: AbortController | null = null;\n  let nip55WebAbort: AbortController | null = null;\n\n  const on = <K extends keyof HTMLElementEventMap>(\n    el: Element,\n    event: K,\n    handler: (ev: HTMLElementEventMap[K]) => void,\n  ): void => {\n    const wrapped = handler as EventListener;\n    el.addEventListener(event, wrapped);\n    detachers.push(() => el.removeEventListener(event, wrapped));\n  };\n\n  const q = <T extends Element = Element>(selector: string): T =>\n    rootEl.querySelector(selector) as T;\n\n  const errorEl = q<HTMLDivElement>('[data-region=\"error\"]');\n  const showError = (err: Error | string): void => {\n    const msg = typeof err === 'string' ? err : err.message;\n    errorEl.hidden = false;\n    errorEl.textContent = msg;\n    if (typeof err !== 'string') handlers.onError?.(err);\n  };\n  const clearError = (): void => {\n    errorEl.hidden = true;\n    errorEl.textContent = '';\n  };\n\n  // ---- android (NIP-55) — declared before selectTab so it can be invoked\n  // when the user opens with defaultTab: 'android'.\n  const androidStatus = q<HTMLElement>('[data-region=\"android-status\"]');\n  const androidList = q<HTMLUListElement>('[data-region=\"android-apps\"]');\n  let androidFetchToken = 0;\n\n  const refreshAndroidApps = async (): Promise<void> => {\n    const token = ++androidFetchToken;\n    androidList.hidden = true;\n    androidList.innerHTML = '';\n    androidStatus.hidden = false;\n    androidStatus.textContent = 'Loading installed signers…';\n    try {\n      const apps = await signer.listAndroidSignerApps();\n      if (token !== androidFetchToken) return;\n      if (apps.length === 0) {\n        androidStatus.textContent =\n          'No NIP-55 signer apps installed. Install Amber (or similar) and try again.';\n        return;\n      }\n      androidStatus.hidden = true;\n      for (const app of apps) {\n        const li = document.createElement('li');\n        li.className = 'nostr-signer__android-app';\n        const btn = document.createElement('button');\n        btn.type = 'button';\n        btn.className = 'nostr-signer__button nostr-signer__button--primary';\n        btn.dataset.packageName = app.packageName;\n        btn.textContent = `${app.name} (${app.packageName})`;\n        on(btn, 'click', async () => {\n          clearError();\n          btn.disabled = true;\n          try {\n            const account = await signer.loginWithAndroidSigner({\n              packageName: app.packageName,\n            });\n            handlers.onLogin?.(account);\n          } catch (err) {\n            btn.disabled = false;\n            showError(err as Error);\n          }\n        });\n        li.appendChild(btn);\n        androidList.appendChild(li);\n      }\n      androidList.hidden = false;\n    } catch (err) {\n      if (token !== androidFetchToken) return;\n      androidStatus.textContent = (err as Error).message;\n    }\n  };\n\n  const selectTab = (tab: LoginTab): void => {\n    rootEl.querySelectorAll<HTMLElement>('[data-panel]').forEach((panel) => {\n      panel.hidden = panel.dataset.panel !== tab;\n    });\n    rootEl.querySelectorAll<HTMLElement>('[data-tab]').forEach((btn) => {\n      btn.classList.toggle('nostr-signer__tab--active', btn.dataset.tab === tab);\n    });\n    clearError();\n    if (tab === 'android') void refreshAndroidApps();\n  };\n\n  selectTab(handlers.defaultTab ?? 'create');\n\n  rootEl.querySelectorAll<HTMLButtonElement>('[data-tab]').forEach((btn) => {\n    on(btn, 'click', () => selectTab(btn.dataset.tab as LoginTab));\n  });\n\n  on(q('[data-action=\"cancel\"]'), 'click', () => handlers.onCancel?.());\n\n  // ---- create ----\n  const createForm = q<HTMLFormElement>('[data-form=\"create\"]');\n  on(createForm, 'submit', async (ev) => {\n    ev.preventDefault();\n    clearError();\n    const passphrase = (createForm.elements.namedItem('passphrase') as HTMLInputElement).value;\n    try {\n      const { ncryptsec } = await signer.createAccount(passphrase);\n      q<HTMLElement>('[data-region=\"created-ncryptsec\"]').textContent = ncryptsec;\n      rootEl.querySelectorAll<HTMLElement>('[data-panel]').forEach((p) => {\n        p.hidden = p.dataset.panel !== 'created';\n      });\n    } catch (err) {\n      showError(err as Error);\n    }\n  });\n\n  on(q('[data-action=\"created-ack\"]'), 'click', () => {\n    const active = signer.getActiveAccount();\n    if (active) handlers.onLogin?.(active);\n  });\n\n  // ---- ncryptsec ----\n  const ncryptsecForm = q<HTMLFormElement>('[data-form=\"ncryptsec\"]');\n  on(ncryptsecForm, 'submit', async (ev) => {\n    ev.preventDefault();\n    clearError();\n    const ncryptsec = (\n      ncryptsecForm.elements.namedItem('ncryptsec') as HTMLTextAreaElement\n    ).value.trim();\n    const passphrase = (\n      ncryptsecForm.elements.namedItem('passphrase') as HTMLInputElement\n    ).value;\n    try {\n      const account = await signer.loginWithNcryptsec(ncryptsec, passphrase);\n      handlers.onLogin?.(account);\n    } catch (err) {\n      showError(err as Error);\n    }\n  });\n\n  // ---- extension ----\n  on(q('[data-action=\"extension-login\"]'), 'click', async () => {\n    clearError();\n    try {\n      const account = await signer.loginWithExtension();\n      handlers.onLogin?.(account);\n    } catch (err) {\n      showError(err as Error);\n    }\n  });\n\n  // ---- signer app (NIP-55 over the web) ----\n  // Absent when renderLoginHtml({ includeNip55Web: false }) omitted the tab.\n  const nip55WebBtn = rootEl.querySelector<HTMLButtonElement>(\n    '[data-action=\"nip55web-login\"]',\n  );\n  if (nip55WebBtn) on(nip55WebBtn, 'click', async () => {\n    clearError();\n    const btn = nip55WebBtn;\n    btn.disabled = true;\n    nip55WebAbort = new AbortController();\n    try {\n      const account = await signer.loginWithNip55Web({\n        signal: nip55WebAbort.signal,\n        debug: handlers.onNip55WebDebug,\n      });\n      handlers.onLogin?.(account);\n    } catch (err) {\n      btn.disabled = false;\n      // A user cancelling (detach) is not an error worth surfacing.\n      if ((err as Error).name !== 'AbortError') showError(err as Error);\n    } finally {\n      nip55WebAbort = null;\n    }\n  });\n\n  // ---- bunker URI ----\n  const bunkerForm = q<HTMLFormElement>('[data-form=\"bunker\"]');\n  on(bunkerForm, 'submit', async (ev) => {\n    ev.preventDefault();\n    clearError();\n    const uri = (\n      bunkerForm.elements.namedItem('uri') as HTMLTextAreaElement\n    ).value.trim();\n    const perms = (bunkerForm.elements.namedItem('perms') as HTMLInputElement).value\n      .split(',')\n      .map((s) => s.trim())\n      .filter(Boolean);\n    try {\n      const account = await signer.loginWithBunkerUri(uri, {\n        pool: handlers.pool,\n        onRelayMismatch: handlers.onRelayMismatch,\n        perms: perms.length > 0 ? perms : undefined,\n      });\n      handlers.onLogin?.(account);\n    } catch (err) {\n      showError(err as Error);\n    }\n  });\n\n  // ---- nostrconnect ----\n  const ncForm = q<HTMLFormElement>('[data-form=\"nostrconnect\"]');\n  const ncQrRegion = q<HTMLDivElement>('[data-region=\"nostrconnect-qr\"]');\n  const ncQrUri = q<HTMLElement>('[data-region=\"nostrconnect-uri\"]');\n  const ncQrImage = q<HTMLDivElement>('[data-region=\"nostrconnect-qr-image\"]');\n  const ncStatus = q<HTMLElement>('[data-region=\"nostrconnect-status\"]');\n  let ncQrToken = 0;\n\n  const resetNostrConnect = (): void => {\n    ncForm.hidden = false;\n    ncQrRegion.hidden = true;\n    ncQrUri.textContent = '';\n    ncQrImage.innerHTML = '';\n    ncStatus.textContent = 'Waiting for remote signer to pair...';\n    ncQrToken++;\n  };\n\n  const renderNostrConnectQr = async (uri: string): Promise<void> => {\n    const token = ++ncQrToken;\n    try {\n      const svg = await QRCode.toString(uri, {\n        type: 'svg',\n        margin: 1,\n        errorCorrectionLevel: 'M',\n      });\n      if (token === ncQrToken) ncQrImage.innerHTML = svg;\n    } catch {\n      // QR rendering is a nice-to-have — the URI text remains usable.\n    }\n  };\n\n  on(ncForm, 'submit', async (ev) => {\n    ev.preventDefault();\n    clearError();\n    const relays = (ncForm.elements.namedItem('relays') as HTMLInputElement).value\n      .split(',')\n      .map((s) => s.trim())\n      .filter(Boolean);\n    if (relays.length === 0) {\n      showError('At least one relay is required.');\n      return;\n    }\n    const perms = (ncForm.elements.namedItem('perms') as HTMLInputElement).value\n      .split(',')\n      .map((s) => s.trim())\n      .filter(Boolean);\n\n    ncForm.hidden = true;\n    ncQrRegion.hidden = false;\n    nostrConnectAbort = new AbortController();\n    try {\n      const account = await signer.loginWithNostrConnect({\n        relays,\n        perms: perms.length > 0 ? perms : undefined,\n        pool: handlers.pool,\n        onRelayMismatch: handlers.onRelayMismatch,\n        signal: nostrConnectAbort.signal,\n        onUri: (uri) => {\n          ncQrUri.textContent = uri;\n          void renderNostrConnectQr(uri);\n        },\n      });\n      handlers.onLogin?.(account);\n    } catch (err) {\n      resetNostrConnect();\n      if ((err as Error).name !== 'AbortError') showError(err as Error);\n    } finally {\n      nostrConnectAbort = null;\n    }\n  });\n\n  on(q('[data-action=\"nostrconnect-cancel\"]'), 'click', () => {\n    nostrConnectAbort?.abort();\n    resetNostrConnect();\n  });\n\n  return {\n    detach: () => {\n      nostrConnectAbort?.abort();\n      nip55WebAbort?.abort();\n      for (const d of detachers) d();\n    },\n    selectTab,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,oBAAmB;AAqCnB,IAAM,OAAuD;AAAA,EAC3D,EAAE,IAAI,UAAU,OAAO,SAAS;AAAA,EAChC,EAAE,IAAI,aAAa,OAAO,eAAe;AAAA,EACzC,EAAE,IAAI,aAAa,OAAO,YAAY;AAAA,EACtC,EAAE,IAAI,UAAU,OAAO,aAAa;AAAA,EACpC,EAAE,IAAI,gBAAgB,OAAO,cAAc;AAAA,EAC3C,EAAE,IAAI,YAAY,OAAO,aAAa;AAAA,EACtC,EAAE,IAAI,WAAW,OAAO,UAAU;AACpC;AAcO,SAAS,gBAAgB,UAA8B,CAAC,GAAW;AACxE,QAAM,kBAAkB,QAAQ,mBAAmB;AACnD,QAAM,OAAO,KAAK,OAAO,CAAC,MAAM,EAAE,OAAO,cAAc,eAAe,EACnE;AAAA,IACC,CAAC,MACC,uDAAuD,EAAE,EAAE,6BAA6B,EAAE,EAAE,KAAK,EAAE,KAAK;AAAA,EAC5G,EACC,KAAK,EAAE;AAEV,SAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qDAM4C,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAgDjD,kBAAkB;AAAA;AAAA;AAAA,oBAGN,EAAE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAetB;AAEO,SAAS,qBACd,QACA,QACA,WAA4B,CAAC,GACb;AAChB,QAAM,YAA+B,CAAC;AACtC,MAAI,oBAA4C;AAChD,MAAI,gBAAwC;AAE5C,QAAM,KAAK,CACT,IACA,OACA,YACS;AACT,UAAM,UAAU;AAChB,OAAG,iBAAiB,OAAO,OAAO;AAClC,cAAU,KAAK,MAAM,GAAG,oBAAoB,OAAO,OAAO,CAAC;AAAA,EAC7D;AAEA,QAAM,IAAI,CAA8B,aACtC,OAAO,cAAc,QAAQ;AAE/B,QAAM,UAAU,EAAkB,uBAAuB;AACzD,QAAM,YAAY,CAAC,QAA8B;AAC/C,UAAM,MAAM,OAAO,QAAQ,WAAW,MAAM,IAAI;AAChD,YAAQ,SAAS;AACjB,YAAQ,cAAc;AACtB,QAAI,OAAO,QAAQ,SAAU,UAAS,UAAU,GAAG;AAAA,EACrD;AACA,QAAM,aAAa,MAAY;AAC7B,YAAQ,SAAS;AACjB,YAAQ,cAAc;AAAA,EACxB;AAIA,QAAM,gBAAgB,EAAe,gCAAgC;AACrE,QAAM,cAAc,EAAoB,8BAA8B;AACtE,MAAI,oBAAoB;AAExB,QAAM,qBAAqB,YAA2B;AACpD,UAAM,QAAQ,EAAE;AAChB,gBAAY,SAAS;AACrB,gBAAY,YAAY;AACxB,kBAAc,SAAS;AACvB,kBAAc,cAAc;AAC5B,QAAI;AACF,YAAM,OAAO,MAAM,OAAO,sBAAsB;AAChD,UAAI,UAAU,kBAAmB;AACjC,UAAI,KAAK,WAAW,GAAG;AACrB,sBAAc,cACZ;AACF;AAAA,MACF;AACA,oBAAc,SAAS;AACvB,iBAAW,OAAO,MAAM;AACtB,cAAM,KAAK,SAAS,cAAc,IAAI;AACtC,WAAG,YAAY;AACf,cAAM,MAAM,SAAS,cAAc,QAAQ;AAC3C,YAAI,OAAO;AACX,YAAI,YAAY;AAChB,YAAI,QAAQ,cAAc,IAAI;AAC9B,YAAI,cAAc,GAAG,IAAI,IAAI,KAAK,IAAI,WAAW;AACjD,WAAG,KAAK,SAAS,YAAY;AAC3B,qBAAW;AACX,cAAI,WAAW;AACf,cAAI;AACF,kBAAM,UAAU,MAAM,OAAO,uBAAuB;AAAA,cAClD,aAAa,IAAI;AAAA,YACnB,CAAC;AACD,qBAAS,UAAU,OAAO;AAAA,UAC5B,SAAS,KAAK;AACZ,gBAAI,WAAW;AACf,sBAAU,GAAY;AAAA,UACxB;AAAA,QACF,CAAC;AACD,WAAG,YAAY,GAAG;AAClB,oBAAY,YAAY,EAAE;AAAA,MAC5B;AACA,kBAAY,SAAS;AAAA,IACvB,SAAS,KAAK;AACZ,UAAI,UAAU,kBAAmB;AACjC,oBAAc,cAAe,IAAc;AAAA,IAC7C;AAAA,EACF;AAEA,QAAM,YAAY,CAAC,QAAwB;AACzC,WAAO,iBAA8B,cAAc,EAAE,QAAQ,CAAC,UAAU;AACtE,YAAM,SAAS,MAAM,QAAQ,UAAU;AAAA,IACzC,CAAC;AACD,WAAO,iBAA8B,YAAY,EAAE,QAAQ,CAAC,QAAQ;AAClE,UAAI,UAAU,OAAO,6BAA6B,IAAI,QAAQ,QAAQ,GAAG;AAAA,IAC3E,CAAC;AACD,eAAW;AACX,QAAI,QAAQ,UAAW,MAAK,mBAAmB;AAAA,EACjD;AAEA,YAAU,SAAS,cAAc,QAAQ;AAEzC,SAAO,iBAAoC,YAAY,EAAE,QAAQ,CAAC,QAAQ;AACxE,OAAG,KAAK,SAAS,MAAM,UAAU,IAAI,QAAQ,GAAe,CAAC;AAAA,EAC/D,CAAC;AAED,KAAG,EAAE,wBAAwB,GAAG,SAAS,MAAM,SAAS,WAAW,CAAC;AAGpE,QAAM,aAAa,EAAmB,sBAAsB;AAC5D,KAAG,YAAY,UAAU,OAAO,OAAO;AACrC,OAAG,eAAe;AAClB,eAAW;AACX,UAAM,aAAc,WAAW,SAAS,UAAU,YAAY,EAAuB;AACrF,QAAI;AACF,YAAM,EAAE,UAAU,IAAI,MAAM,OAAO,cAAc,UAAU;AAC3D,QAAe,mCAAmC,EAAE,cAAc;AAClE,aAAO,iBAA8B,cAAc,EAAE,QAAQ,CAAC,MAAM;AAClE,UAAE,SAAS,EAAE,QAAQ,UAAU;AAAA,MACjC,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,gBAAU,GAAY;AAAA,IACxB;AAAA,EACF,CAAC;AAED,KAAG,EAAE,6BAA6B,GAAG,SAAS,MAAM;AAClD,UAAM,SAAS,OAAO,iBAAiB;AACvC,QAAI,OAAQ,UAAS,UAAU,MAAM;AAAA,EACvC,CAAC;AAGD,QAAM,gBAAgB,EAAmB,yBAAyB;AAClE,KAAG,eAAe,UAAU,OAAO,OAAO;AACxC,OAAG,eAAe;AAClB,eAAW;AACX,UAAM,YACJ,cAAc,SAAS,UAAU,WAAW,EAC5C,MAAM,KAAK;AACb,UAAM,aACJ,cAAc,SAAS,UAAU,YAAY,EAC7C;AACF,QAAI;AACF,YAAM,UAAU,MAAM,OAAO,mBAAmB,WAAW,UAAU;AACrE,eAAS,UAAU,OAAO;AAAA,IAC5B,SAAS,KAAK;AACZ,gBAAU,GAAY;AAAA,IACxB;AAAA,EACF,CAAC;AAGD,KAAG,EAAE,iCAAiC,GAAG,SAAS,YAAY;AAC5D,eAAW;AACX,QAAI;AACF,YAAM,UAAU,MAAM,OAAO,mBAAmB;AAChD,eAAS,UAAU,OAAO;AAAA,IAC5B,SAAS,KAAK;AACZ,gBAAU,GAAY;AAAA,IACxB;AAAA,EACF,CAAC;AAID,QAAM,cAAc,OAAO;AAAA,IACzB;AAAA,EACF;AACA,MAAI,YAAa,IAAG,aAAa,SAAS,YAAY;AACpD,eAAW;AACX,UAAM,MAAM;AACZ,QAAI,WAAW;AACf,oBAAgB,IAAI,gBAAgB;AACpC,QAAI;AACF,YAAM,UAAU,MAAM,OAAO,kBAAkB;AAAA,QAC7C,QAAQ,cAAc;AAAA,QACtB,OAAO,SAAS;AAAA,MAClB,CAAC;AACD,eAAS,UAAU,OAAO;AAAA,IAC5B,SAAS,KAAK;AACZ,UAAI,WAAW;AAEf,UAAK,IAAc,SAAS,aAAc,WAAU,GAAY;AAAA,IAClE,UAAE;AACA,sBAAgB;AAAA,IAClB;AAAA,EACF,CAAC;AAGD,QAAM,aAAa,EAAmB,sBAAsB;AAC5D,KAAG,YAAY,UAAU,OAAO,OAAO;AACrC,OAAG,eAAe;AAClB,eAAW;AACX,UAAM,MACJ,WAAW,SAAS,UAAU,KAAK,EACnC,MAAM,KAAK;AACb,UAAM,QAAS,WAAW,SAAS,UAAU,OAAO,EAAuB,MACxE,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OAAO;AACjB,QAAI;AACF,YAAM,UAAU,MAAM,OAAO,mBAAmB,KAAK;AAAA,QACnD,MAAM,SAAS;AAAA,QACf,iBAAiB,SAAS;AAAA,QAC1B,OAAO,MAAM,SAAS,IAAI,QAAQ;AAAA,MACpC,CAAC;AACD,eAAS,UAAU,OAAO;AAAA,IAC5B,SAAS,KAAK;AACZ,gBAAU,GAAY;AAAA,IACxB;AAAA,EACF,CAAC;AAGD,QAAM,SAAS,EAAmB,4BAA4B;AAC9D,QAAM,aAAa,EAAkB,iCAAiC;AACtE,QAAM,UAAU,EAAe,kCAAkC;AACjE,QAAM,YAAY,EAAkB,uCAAuC;AAC3E,QAAM,WAAW,EAAe,qCAAqC;AACrE,MAAI,YAAY;AAEhB,QAAM,oBAAoB,MAAY;AACpC,WAAO,SAAS;AAChB,eAAW,SAAS;AACpB,YAAQ,cAAc;AACtB,cAAU,YAAY;AACtB,aAAS,cAAc;AACvB;AAAA,EACF;AAEA,QAAM,uBAAuB,OAAO,QAA+B;AACjE,UAAM,QAAQ,EAAE;AAChB,QAAI;AACF,YAAM,MAAM,MAAM,cAAAA,QAAO,SAAS,KAAK;AAAA,QACrC,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,sBAAsB;AAAA,MACxB,CAAC;AACD,UAAI,UAAU,UAAW,WAAU,YAAY;AAAA,IACjD,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,KAAG,QAAQ,UAAU,OAAO,OAAO;AACjC,OAAG,eAAe;AAClB,eAAW;AACX,UAAM,SAAU,OAAO,SAAS,UAAU,QAAQ,EAAuB,MACtE,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OAAO;AACjB,QAAI,OAAO,WAAW,GAAG;AACvB,gBAAU,iCAAiC;AAC3C;AAAA,IACF;AACA,UAAM,QAAS,OAAO,SAAS,UAAU,OAAO,EAAuB,MACpE,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OAAO;AAEjB,WAAO,SAAS;AAChB,eAAW,SAAS;AACpB,wBAAoB,IAAI,gBAAgB;AACxC,QAAI;AACF,YAAM,UAAU,MAAM,OAAO,sBAAsB;AAAA,QACjD;AAAA,QACA,OAAO,MAAM,SAAS,IAAI,QAAQ;AAAA,QAClC,MAAM,SAAS;AAAA,QACf,iBAAiB,SAAS;AAAA,QAC1B,QAAQ,kBAAkB;AAAA,QAC1B,OAAO,CAAC,QAAQ;AACd,kBAAQ,cAAc;AACtB,eAAK,qBAAqB,GAAG;AAAA,QAC/B;AAAA,MACF,CAAC;AACD,eAAS,UAAU,OAAO;AAAA,IAC5B,SAAS,KAAK;AACZ,wBAAkB;AAClB,UAAK,IAAc,SAAS,aAAc,WAAU,GAAY;AAAA,IAClE,UAAE;AACA,0BAAoB;AAAA,IACtB;AAAA,EACF,CAAC;AAED,KAAG,EAAE,qCAAqC,GAAG,SAAS,MAAM;AAC1D,uBAAmB,MAAM;AACzB,sBAAkB;AAAA,EACpB,CAAC;AAED,SAAO;AAAA,IACL,QAAQ,MAAM;AACZ,yBAAmB,MAAM;AACzB,qBAAe,MAAM;AACrB,iBAAW,KAAK,UAAW,GAAE;AAAA,IAC/B;AAAA,IACA;AAAA,EACF;AACF;","names":["QRCode"]}

package/dist/ui/index.d.cts

@@ -1,8 +1,8 @@
 import { AbstractSimplePool } from 'nostr-tools/abstract-pool';
-import { j as StoredAccount, R as RelayMismatchHandler, S as Signer } from '../signer-BepGdtJs.cjs';
+import { n as StoredAccount, R as RelayMismatchHandler, S as Signer } from '../signer-oU50RBqS.cjs';
 import 'nostr-tools';
 
-type LoginTab = 'create' | 'ncryptsec' | 'extension' | 'bunker' | 'nostrconnect' | 'android';
+type LoginTab = 'create' | 'ncryptsec' | 'extension' | 'bunker' | 'nostrconnect' | 'nip55web' | 'android';
 interface LoginUiHandlers {
     onLogin?: (account: StoredAccount) => void;
     onCancel?: () => void;
@@ -13,12 +13,29 @@ interface LoginUiHandlers {
     onRelayMismatch?: RelayMismatchHandler;
     /** Initial tab to show. Defaults to 'create'. */
     defaultTab?: LoginTab;
+    /**
+     * Optional diagnostic stream for the browser NIP-55 (intent/clipboard)
+     * flow. Wire it to an on-screen log when testing on a phone — the flow
+     * navigates away, so its behaviour is otherwise hard to observe.
+     */
+    onNip55WebDebug?: (message: string) => void;
 }
 interface LoginUiBinding {
     detach(): void;
     selectTab(tab: LoginTab): void;
 }
-declare function renderLoginHtml(): string;
+interface RenderLoginOptions {
+    /**
+     * Include the "Signer app" tab (browser NIP-55). Defaults to `true`.
+     *
+     * Pass `signer.supportsNip55Web()` to hide it where it cannot work —
+     * notably inside a Capacitor native shell, where
+     * `loginWithAndroidSigner` is the right path. Omit it in a native build
+     * and the tab would only ever error.
+     */
+    includeNip55Web?: boolean;
+}
+declare function renderLoginHtml(options?: RenderLoginOptions): string;
 declare function attachLoginListeners(rootEl: HTMLElement, signer: Signer, handlers?: LoginUiHandlers): LoginUiBinding;
 
-export { type LoginTab, type LoginUiBinding, type LoginUiHandlers, attachLoginListeners, renderLoginHtml };
+export { type LoginTab, type LoginUiBinding, type LoginUiHandlers, type RenderLoginOptions, attachLoginListeners, renderLoginHtml };

package/dist/ui/index.d.ts

@@ -1,8 +1,8 @@
 import { AbstractSimplePool } from 'nostr-tools/abstract-pool';
-import { j as StoredAccount, R as RelayMismatchHandler, S as Signer } from '../signer-BepGdtJs.js';
+import { n as StoredAccount, R as RelayMismatchHandler, S as Signer } from '../signer-oU50RBqS.js';
 import 'nostr-tools';
 
-type LoginTab = 'create' | 'ncryptsec' | 'extension' | 'bunker' | 'nostrconnect' | 'android';
+type LoginTab = 'create' | 'ncryptsec' | 'extension' | 'bunker' | 'nostrconnect' | 'nip55web' | 'android';
 interface LoginUiHandlers {
     onLogin?: (account: StoredAccount) => void;
     onCancel?: () => void;
@@ -13,12 +13,29 @@ interface LoginUiHandlers {
     onRelayMismatch?: RelayMismatchHandler;
     /** Initial tab to show. Defaults to 'create'. */
     defaultTab?: LoginTab;
+    /**
+     * Optional diagnostic stream for the browser NIP-55 (intent/clipboard)
+     * flow. Wire it to an on-screen log when testing on a phone — the flow
+     * navigates away, so its behaviour is otherwise hard to observe.
+     */
+    onNip55WebDebug?: (message: string) => void;
 }
 interface LoginUiBinding {
     detach(): void;
     selectTab(tab: LoginTab): void;
 }
-declare function renderLoginHtml(): string;
+interface RenderLoginOptions {
+    /**
+     * Include the "Signer app" tab (browser NIP-55). Defaults to `true`.
+     *
+     * Pass `signer.supportsNip55Web()` to hide it where it cannot work —
+     * notably inside a Capacitor native shell, where
+     * `loginWithAndroidSigner` is the right path. Omit it in a native build
+     * and the tab would only ever error.
+     */
+    includeNip55Web?: boolean;
+}
+declare function renderLoginHtml(options?: RenderLoginOptions): string;
 declare function attachLoginListeners(rootEl: HTMLElement, signer: Signer, handlers?: LoginUiHandlers): LoginUiBinding;
 
-export { type LoginTab, type LoginUiBinding, type LoginUiHandlers, attachLoginListeners, renderLoginHtml };
+export { type LoginTab, type LoginUiBinding, type LoginUiHandlers, type RenderLoginOptions, attachLoginListeners, renderLoginHtml };

package/dist/ui/index.js

@@ -6,10 +6,12 @@ var TABS = [
   { id: "extension", label: "Extension" },
   { id: "bunker", label: "Bunker URI" },
   { id: "nostrconnect", label: "Remote (QR)" },
+  { id: "nip55web", label: "Signer app" },
   { id: "android", label: "Android" }
 ];
-function renderLoginHtml() {
-  const tabs = TABS.map(
+function renderLoginHtml(options = {}) {
+  const includeNip55Web = options.includeNip55Web ?? true;
+  const tabs = TABS.filter((t) => t.id !== "nip55web" || includeNip55Web).map(
     (t) => `<button class="nostr-signer__tab nostr-signer__tab--${t.id}" type="button" data-tab="${t.id}">${t.label}</button>`
   ).join("");
   return `<div class="nostr-signer__root">
@@ -66,6 +68,10 @@ function renderLoginHtml() {
           <button class="nostr-signer__button nostr-signer__button--secondary" type="button" data-action="nostrconnect-cancel">Cancel</button>
         </div>
       </section>
+      ${includeNip55Web ? `<section class="nostr-signer__panel nostr-signer__panel--nip55web" data-panel="nip55web" hidden>
+        <p class="nostr-signer__hint">Sign in with a signer app installed on this Android device, using the browser (NIP-55). You&rsquo;ll be asked to approve each signature in the app.</p>
+        <button class="nostr-signer__button nostr-signer__button--primary" type="button" data-action="nip55web-login">Open signer app</button>
+      </section>` : ""}
       <section class="nostr-signer__panel nostr-signer__panel--android" data-panel="android" hidden>
         <p class="nostr-signer__hint">Sign in with an Android external signer app (NIP-55) such as Amber.</p>
         <p class="nostr-signer__status" data-region="android-status">Loading installed signers&hellip;</p>
@@ -84,6 +90,7 @@ function renderLoginHtml() {
 function attachLoginListeners(rootEl, signer, handlers = {}) {
   const detachers = [];
   let nostrConnectAbort = null;
+  let nip55WebAbort = null;
   const on = (el, event, handler) => {
     const wrapped = handler;
     el.addEventListener(event, wrapped);
@@ -204,6 +211,27 @@ function attachLoginListeners(rootEl, signer, handlers = {}) {
       showError(err);
     }
   });
+  const nip55WebBtn = rootEl.querySelector(
+    '[data-action="nip55web-login"]'
+  );
+  if (nip55WebBtn) on(nip55WebBtn, "click", async () => {
+    clearError();
+    const btn = nip55WebBtn;
+    btn.disabled = true;
+    nip55WebAbort = new AbortController();
+    try {
+      const account = await signer.loginWithNip55Web({
+        signal: nip55WebAbort.signal,
+        debug: handlers.onNip55WebDebug
+      });
+      handlers.onLogin?.(account);
+    } catch (err) {
+      btn.disabled = false;
+      if (err.name !== "AbortError") showError(err);
+    } finally {
+      nip55WebAbort = null;
+    }
+  });
   const bunkerForm = q('[data-form="bunker"]');
   on(bunkerForm, "submit", async (ev) => {
     ev.preventDefault();
@@ -286,6 +314,7 @@ function attachLoginListeners(rootEl, signer, handlers = {}) {
   return {
     detach: () => {
       nostrConnectAbort?.abort();
+      nip55WebAbort?.abort();
       for (const d of detachers) d();
     },
     selectTab