@multiplatform.one/gpg 7.23.2 → 7.24.0

package/README.md

@@ -38,7 +38,7 @@ import { GpgBridge, GpgProvider, SignInWithGpgButton } from "@multiplatform.one/
 
 export function App() {
   return (
-    <GpgProvider>
+    <GpgProvider getNonce={getNonce} onSign={onSign} buildMessage={buildMessage}>
       <ConnectKitProvider bridge={GpgBridge}>
         <SignInWithGpgButton />
       </ConnectKitProvider>
@@ -47,7 +47,10 @@ export function App() {
 }
 ```
 
-`GpgProvider` must wrap **outside** `ConnectKitProvider`. In an app that also
+`buildMessage` is the challenge the user signs; this package has no builder of
+its own. Pass `buildWalletMessage("gpg", { nonce })` from
+`@multiplatform.one/web3/message`, or use web3's `GpgProvider`, which defaults
+to it. `GpgProvider` must wrap **outside** `ConnectKitProvider`. In an app that also
 ships wallets, `@multiplatform.one/web3` mounts `GpgScreenRegistrar` alongside
 its own screens instead of `GpgBridge`.
 

package/dist/cjs/GpgProvider.cjs

@@ -34,16 +34,6 @@ var import_signer = require("./signer.cjs");
 var import_jsx_runtime = require("react/jsx-runtime");
 const GPG_NONCE_QUERY_KEY = "ckGpgNonce";
 const b64 = s => window.btoa(unescape(encodeURIComponent(s)));
-function defaultBuildMessage({
-  nonce
-}) {
-  return `${window.location.host} wants you to sign in with your GPG key.
-
-URI: ${window.location.origin}
-Version: 1
-Nonce: ${nonce}
-Issued At: ${(/* @__PURE__ */new Date()).toISOString()}`;
-}
 const GpgProvider = ({
   children,
   enabled = true,
@@ -71,9 +61,19 @@ const GpgProvider = ({
     refetchOnReconnect: false,
     staleTime: Infinity
   });
+  const {
+    subscribeNonceReset
+  } = gpgConfig;
+  const refetchNonce = nonce.refetch;
+  (0, import_react.useEffect)(() => {
+    if (!subscribeNonceReset) return;
+    return subscribeNonceReset(() => {
+      void refetchNonce();
+    });
+  }, [subscribeNonceReset, refetchNonce]);
   const buildMessageRef = (0, import_react.useRef)(buildMessage);
   buildMessageRef.current = buildMessage;
-  const message = (0, import_react.useMemo)(() => nonce.data ? (buildMessageRef.current ?? defaultBuildMessage)({
+  const message = (0, import_react.useMemo)(() => nonce.data ? buildMessageRef.current({
     nonce: nonce.data
   }) : null, [nonce.data]);
   const command = (0, import_react.useMemo)(() => message ? (0, import_signer.gpgSignCommand)(message) : null, [message]);

package/dist/cjs/GpgProvider.native.js

@@ -38,17 +38,6 @@ var GPG_NONCE_QUERY_KEY = "ckGpgNonce";
 var b64 = function b642(s) {
   return window.btoa(unescape(encodeURIComponent(s)));
 };
-function defaultBuildMessage(param) {
-  var {
-    nonce
-  } = param;
-  return `${window.location.host} wants you to sign in with your GPG key.
-
-URI: ${window.location.origin}
-Version: 1
-Nonce: ${nonce}
-Issued At: ${(/* @__PURE__ */new Date()).toISOString()}`;
-}
 var GpgProvider = function GpgProvider2(param) {
   var {
     children,
@@ -81,11 +70,20 @@ var GpgProvider = function GpgProvider2(param) {
     refetchOnReconnect: false,
     staleTime: Infinity
   });
+  var {
+    subscribeNonceReset
+  } = gpgConfig;
+  var refetchNonce = nonce.refetch;
+  (0, import_react.useEffect)(function () {
+    if (!subscribeNonceReset) return;
+    return subscribeNonceReset(function () {
+      void refetchNonce();
+    });
+  }, [subscribeNonceReset, refetchNonce]);
   var buildMessageRef = (0, import_react.useRef)(buildMessage);
   buildMessageRef.current = buildMessage;
   var message = (0, import_react.useMemo)(function () {
-    var _buildMessageRef_current;
-    return nonce.data ? ((_buildMessageRef_current = buildMessageRef.current) !== null && _buildMessageRef_current !== void 0 ? _buildMessageRef_current : defaultBuildMessage)({
+    return nonce.data ? buildMessageRef.current({
       nonce: nonce.data
     }) : null;
   }, [nonce.data]);

package/dist/cjs/GpgProvider.native.js.map

@@ -1 +1 @@
-{"version":3,"names":["__defProp","Object","defineProperty","__getOwnPropDesc","getOwnPropertyDescriptor","__getOwnPropNames","getOwnPropertyNames","__hasOwnProp","prototype","hasOwnProperty","__export","target","all","name","get","enumerable","__copyProps","to","from","except","desc","key","call","__toCommonJS","mod","value","GpgProvider_exports","GPG_NONCE_QUERY_KEY","GpgProvider","module","exports","import_jsx_runtime","require","import_react","import_react_query","import_connectkit","import_GpgContext","import_signer","b64","b642","s","window","btoa","unescape","encodeURIComponent","defaultBuildMessage","param","nonce","location","host","origin","Date","toISOString","GpgProvider2","children","enabled","nonceRefetchInterval","buildMessage","onSignIn","gpgConfig","status","setStatus","useState","GpgStatusState","READY","resetStatus","resetStatus2","useContext","GpgContext","Error","Context","useQuery","queryKey","queryFn","getNonce","refetchInterval","refetchOnWindowFocus","refetchOnReconnect","staleTime","Infinity","buildMessageRef","useRef","current","message","useMemo","_buildMessageRef_current","data","command","gpgSignCommand","signIn","signIn2","pastedBlob","blob","assertGpgSignature","error","ERROR","LOADING","result","onSign","username","password","SUCCESS","jsx","Provider"],"sources":["GpgProvider.native.js"],"sourcesContent":["\"use strict\";\nvar __defProp = Object.defineProperty;\nvar __getOwnPropDesc = Object.getOwnPropertyDescriptor;\nvar __getOwnPropNames = Object.getOwnPropertyNames;\nvar __hasOwnProp = Object.prototype.hasOwnProperty;\nvar __export = (target, all) => {\n  for (var name in all)\n    __defProp(target, name, { get: all[name], enumerable: true });\n};\nvar __copyProps = (to, from, except, desc) => {\n  if (from && typeof from === \"object\" || typeof from === \"function\") {\n    for (let key of __getOwnPropNames(from))\n      if (!__hasOwnProp.call(to, key) && key !== except)\n        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });\n  }\n  return to;\n};\nvar __toCommonJS = (mod) => __copyProps(__defProp({}, \"__esModule\", { value: true }), mod);\nvar GpgProvider_exports = {};\n__export(GpgProvider_exports, {\n  GPG_NONCE_QUERY_KEY: () => GPG_NONCE_QUERY_KEY,\n  GpgProvider: () => GpgProvider\n});\nmodule.exports = __toCommonJS(GpgProvider_exports);\nvar import_jsx_runtime = require(\"react/jsx-runtime\");\nvar import_react = require(\"react\");\nvar import_react_query = require(\"@tanstack/react-query\");\nvar import_connectkit = require(\"@multiplatform.one/connectkit\");\nvar import_GpgContext = require(\"./GpgContext\");\nvar import_signer = require(\"./signer\");\nvar GPG_NONCE_QUERY_KEY = \"ckGpgNonce\";\nvar b64 = function b642(s) {\n  return window.btoa(unescape(encodeURIComponent(s)));\n};\nfunction defaultBuildMessage(param) {\n  var { nonce } = param;\n  return `${window.location.host} wants you to sign in with your GPG key.\n\nURI: ${window.location.origin}\nVersion: 1\nNonce: ${nonce}\nIssued At: ${(/* @__PURE__ */ new Date()).toISOString()}`;\n}\nvar GpgProvider = function GpgProvider2(param) {\n  var { children, enabled = true, nonceRefetchInterval = false, buildMessage, onSignIn, ...gpgConfig } = param;\n  var [status, setStatus] = (0, import_react.useState)(import_GpgContext.GpgStatusState.READY);\n  var resetStatus = function resetStatus2() {\n    return setStatus(import_GpgContext.GpgStatusState.READY);\n  };\n  if ((0, import_react.useContext)(import_GpgContext.GpgContext)) {\n    throw new Error(\"Multiple, nested usages of GpgProvider detected. Please use only one.\");\n  }\n  if ((0, import_react.useContext)(import_connectkit.Context)) {\n    throw new Error(\"ConnectKitProvider must be mounted inside GpgProvider.\");\n  }\n  var nonce = (0, import_react_query.useQuery)({\n    queryKey: [\n      GPG_NONCE_QUERY_KEY\n    ],\n    queryFn: function queryFn() {\n      return gpgConfig.getNonce();\n    },\n    refetchInterval: nonceRefetchInterval,\n    // The challenge the user signs MUST equal the one we submit. Never refetch the nonce\n    // out from under an in-flight signature — especially on window-focus, which fires every\n    // time the user tabs to their terminal to run gpg and back.\n    refetchOnWindowFocus: false,\n    refetchOnReconnect: false,\n    staleTime: Infinity\n  });\n  var buildMessageRef = (0, import_react.useRef)(buildMessage);\n  buildMessageRef.current = buildMessage;\n  var message = (0, import_react.useMemo)(function() {\n    var _buildMessageRef_current;\n    return nonce.data ? ((_buildMessageRef_current = buildMessageRef.current) !== null && _buildMessageRef_current !== void 0 ? _buildMessageRef_current : defaultBuildMessage)({\n      nonce: nonce.data\n    }) : null;\n  }, [\n    nonce.data\n  ]);\n  var command = (0, import_react.useMemo)(function() {\n    return message ? (0, import_signer.gpgSignCommand)(message) : null;\n  }, [\n    message\n  ]);\n  var signIn = async function signIn2(pastedBlob) {\n    var blob;\n    try {\n      blob = (0, import_signer.assertGpgSignature)(pastedBlob);\n    } catch (error) {\n      setStatus(import_GpgContext.GpgStatusState.ERROR);\n      throw error;\n    }\n    if (!message) {\n      setStatus(import_GpgContext.GpgStatusState.ERROR);\n      throw new Error(\"Could not fetch nonce\");\n    }\n    try {\n      setStatus(import_GpgContext.GpgStatusState.LOADING);\n      var result = await gpgConfig.onSign({\n        username: b64(blob),\n        password: b64(message),\n        message\n      });\n      if (result === false) throw new Error(\"GPG sign-in was rejected\");\n      setStatus(import_GpgContext.GpgStatusState.SUCCESS);\n      onSignIn === null || onSignIn === void 0 ? void 0 : onSignIn();\n      return true;\n    } catch (error) {\n      setStatus(import_GpgContext.GpgStatusState.ERROR);\n      throw error;\n    }\n  };\n  return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_GpgContext.GpgContext.Provider, {\n    value: {\n      enabled,\n      nonceRefetchInterval,\n      buildMessage,\n      ...gpgConfig,\n      nonce,\n      message,\n      command,\n      status,\n      signIn,\n      resetStatus\n    },\n    children\n  });\n};\n//# sourceMappingURL=GpgProvider.js.map\n"],"mappings":"AAAA,YAAY;;AACZ,IAAIA,SAAS,GAAGC,MAAM,CAACC,cAAc;AACrC,IAAIC,gBAAgB,GAAGF,MAAM,CAACG,wBAAwB;AACtD,IAAIC,iBAAiB,GAAGJ,MAAM,CAACK,mBAAmB;AAClD,IAAIC,YAAY,GAAGN,MAAM,CAACO,SAAS,CAACC,cAAc;AAClD,IAAIC,QAAQ,GAAGA,CAACC,MAAM,EAAEC,GAAG,KAAK;EAC9B,KAAK,IAAIC,IAAI,IAAID,GAAG,EAClBZ,SAAS,CAACW,MAAM,EAAEE,IAAI,EAAE;IAAEC,GAAG,EAAEF,GAAG,CAACC,IAAI,CAAC;IAAEE,UAAU,EAAE;EAAK,CAAC,CAAC;AACjE,CAAC;AACD,IAAIC,WAAW,GAAGA,CAACC,EAAE,EAAEC,IAAI,EAAEC,MAAM,EAAEC,IAAI,KAAK;EAC5C,IAAIF,IAAI,IAAI,OAAOA,IAAI,KAAK,QAAQ,IAAI,OAAOA,IAAI,KAAK,UAAU,EAAE;IAClE,KAAK,IAAIG,GAAG,IAAIhB,iBAAiB,CAACa,IAAI,CAAC,EACrC,IAAI,CAACX,YAAY,CAACe,IAAI,CAACL,EAAE,EAAEI,GAAG,CAAC,IAAIA,GAAG,KAAKF,MAAM,EAC/CnB,SAAS,CAACiB,EAAE,EAAEI,GAAG,EAAE;MAAEP,GAAG,EAAEA,CAAA,KAAMI,IAAI,CAACG,GAAG,CAAC;MAAEN,UAAU,EAAE,EAAEK,IAAI,GAAGjB,gBAAgB,CAACe,IAAI,EAAEG,GAAG,CAAC,CAAC,IAAID,IAAI,CAACL;IAAW,CAAC,CAAC;EACxH;EACA,OAAOE,EAAE;AACX,CAAC;AACD,IAAIM,YAAY,GAAIC,GAAG,IAAKR,WAAW,CAAChB,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE;EAAEyB,KAAK,EAAE;AAAK,CAAC,CAAC,EAAED,GAAG,CAAC;AAC1F,IAAIE,mBAAmB,GAAG,CAAC,CAAC;AAC5BhB,QAAQ,CAACgB,mBAAmB,EAAE;EAC5BC,mBAAmB,EAAEA,CAAA,KAAMA,mBAAmB;EAC9CC,WAAW,EAAEA,CAAA,KAAMA;AACrB,CAAC,CAAC;AACFC,MAAM,CAACC,OAAO,GAAGP,YAAY,CAACG,mBAAmB,CAAC;AAClD,IAAIK,kBAAkB,GAAGC,OAAO,CAAC,mBAAmB,CAAC;AACrD,IAAIC,YAAY,GAAGD,OAAO,CAAC,OAAO,CAAC;AACnC,IAAIE,kBAAkB,GAAGF,OAAO,CAAC,uBAAuB,CAAC;AACzD,IAAIG,iBAAiB,GAAGH,OAAO,CAAC,+BAA+B,CAAC;AAChE,IAAII,iBAAiB,GAAGJ,OAAO,CAAC,wBAAc,CAAC;AAC/C,IAAIK,aAAa,GAAGL,OAAO,CAAC,oBAAU,CAAC;AACvC,IAAIL,mBAAmB,GAAG,YAAY;AACtC,IAAIW,GAAG,GAAG,SAASC,IAAIA,CAACC,CAAC,EAAE;EACzB,OAAOC,MAAM,CAACC,IAAI,CAACC,QAAQ,CAACC,kBAAkB,CAACJ,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC;AACD,SAASK,mBAAmBA,CAACC,KAAK,EAAE;EAClC,IAAI;IAAEC;EAAM,CAAC,GAAGD,KAAK;EACrB,OAAO,GAAGL,MAAM,CAACO,QAAQ,CAACC,IAAI;AAChC;AACA,OAAOR,MAAM,CAACO,QAAQ,CAACE,MAAM;AAC7B;AACA,SAASH,KAAK;AACd,aAAa,CAAC,eAAgB,IAAII,IAAI,CAAC,CAAC,EAAEC,WAAW,CAAC,CAAC,EAAE;AACzD;AACA,IAAIxB,WAAW,GAAG,SAASyB,YAAYA,CAACP,KAAK,EAAE;EAC7C,IAAI;IAAEQ,QAAQ;IAAEC,OAAO,GAAG,IAAI;IAAEC,oBAAoB,GAAG,KAAK;IAAEC,YAAY;IAAEC,QAAQ;IAAE,GAAGC;EAAU,CAAC,GAAGb,KAAK;EAC5G,IAAI,CAACc,MAAM,EAAEC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE5B,YAAY,CAAC6B,QAAQ,EAAE1B,iBAAiB,CAAC2B,cAAc,CAACC,KAAK,CAAC;EAC5F,IAAIC,WAAW,GAAG,SAASC,YAAYA,CAAA,EAAG;IACxC,OAAOL,SAAS,CAACzB,iBAAiB,CAAC2B,cAAc,CAACC,KAAK,CAAC;EAC1D,CAAC;EACD,IAAI,CAAC,CAAC,EAAE/B,YAAY,CAACkC,UAAU,EAAE/B,iBAAiB,CAACgC,UAAU,CAAC,EAAE;IAC9D,MAAM,IAAIC,KAAK,CAAC,uEAAuE,CAAC;EAC1F;EACA,IAAI,CAAC,CAAC,EAAEpC,YAAY,CAACkC,UAAU,EAAEhC,iBAAiB,CAACmC,OAAO,CAAC,EAAE;IAC3D,MAAM,IAAID,KAAK,CAAC,wDAAwD,CAAC;EAC3E;EACA,IAAItB,KAAK,GAAG,CAAC,CAAC,EAAEb,kBAAkB,CAACqC,QAAQ,EAAE;IAC3CC,QAAQ,EAAE,CACR7C,mBAAmB,CACpB;IACD8C,OAAO,EAAE,SAASA,OAAOA,CAAA,EAAG;MAC1B,OAAOd,SAAS,CAACe,QAAQ,CAAC,CAAC;IAC7B,CAAC;IACDC,eAAe,EAAEnB,oBAAoB;IACrC;IACA;IACA;IACAoB,oBAAoB,EAAE,KAAK;IAC3BC,kBAAkB,EAAE,KAAK;IACzBC,SAAS,EAAEC;EACb,CAAC,CAAC;EACF,IAAIC,eAAe,GAAG,CAAC,CAAC,EAAE/C,YAAY,CAACgD,MAAM,EAAExB,YAAY,CAAC;EAC5DuB,eAAe,CAACE,OAAO,GAAGzB,YAAY;EACtC,IAAI0B,OAAO,GAAG,CAAC,CAAC,EAAElD,YAAY,CAACmD,OAAO,EAAE,YAAW;IACjD,IAAIC,wBAAwB;IAC5B,OAAOtC,KAAK,CAACuC,IAAI,GAAG,CAAC,CAACD,wBAAwB,GAAGL,eAAe,CAACE,OAAO,MAAM,IAAI,IAAIG,wBAAwB,KAAK,KAAK,CAAC,GAAGA,wBAAwB,GAAGxC,mBAAmB,EAAE;MAC1KE,KAAK,EAAEA,KAAK,CAACuC;IACf,CAAC,CAAC,GAAG,IAAI;EACX,CAAC,EAAE,CACDvC,KAAK,CAACuC,IAAI,CACX,CAAC;EACF,IAAIC,OAAO,GAAG,CAAC,CAAC,EAAEtD,YAAY,CAACmD,OAAO,EAAE,YAAW;IACjD,OAAOD,OAAO,GAAG,CAAC,CAAC,EAAE9C,aAAa,CAACmD,cAAc,EAAEL,OAAO,CAAC,GAAG,IAAI;EACpE,CAAC,EAAE,CACDA,OAAO,CACR,CAAC;EACF,IAAIM,MAAM,GAAG,eAAeC,OAAOA,CAACC,UAAU,EAAE;IAC9C,IAAIC,IAAI;IACR,IAAI;MACFA,IAAI,GAAG,CAAC,CAAC,EAAEvD,aAAa,CAACwD,kBAAkB,EAAEF,UAAU,CAAC;IAC1D,CAAC,CAAC,OAAOG,KAAK,EAAE;MACdjC,SAAS,CAACzB,iBAAiB,CAAC2B,cAAc,CAACgC,KAAK,CAAC;MACjD,MAAMD,KAAK;IACb;IACA,IAAI,CAACX,OAAO,EAAE;MACZtB,SAAS,CAACzB,iBAAiB,CAAC2B,cAAc,CAACgC,KAAK,CAAC;MACjD,MAAM,IAAI1B,KAAK,CAAC,uBAAuB,CAAC;IAC1C;IACA,IAAI;MACFR,SAAS,CAACzB,iBAAiB,CAAC2B,cAAc,CAACiC,OAAO,CAAC;MACnD,IAAIC,MAAM,GAAG,MAAMtC,SAAS,CAACuC,MAAM,CAAC;QAClCC,QAAQ,EAAE7D,GAAG,CAACsD,IAAI,CAAC;QACnBQ,QAAQ,EAAE9D,GAAG,CAAC6C,OAAO,CAAC;QACtBA;MACF,CAAC,CAAC;MACF,IAAIc,MAAM,KAAK,KAAK,EAAE,MAAM,IAAI5B,KAAK,CAAC,0BAA0B,CAAC;MACjER,SAAS,CAACzB,iBAAiB,CAAC2B,cAAc,CAACsC,OAAO,CAAC;MACnD3C,QAAQ,KAAK,IAAI,IAAIA,QAAQ,KAAK,KAAK,CAAC,GAAG,KAAK,CAAC,GAAGA,QAAQ,CAAC,CAAC;MAC9D,OAAO,IAAI;IACb,CAAC,CAAC,OAAOoC,KAAK,EAAE;MACdjC,SAAS,CAACzB,iBAAiB,CAAC2B,cAAc,CAACgC,KAAK,CAAC;MACjD,MAAMD,KAAK;IACb;EACF,CAAC;EACD,OAAO,eAAgB,CAAC,CAAC,EAAE/D,kBAAkB,CAACuE,GAAG,EAAElE,iBAAiB,CAACgC,UAAU,CAACmC,QAAQ,EAAE;IACxF9E,KAAK,EAAE;MACL8B,OAAO;MACPC,oBAAoB;MACpBC,YAAY;MACZ,GAAGE,SAAS;MACZZ,KAAK;MACLoC,OAAO;MACPI,OAAO;MACP3B,MAAM;MACN6B,MAAM;MACNxB;IACF,CAAC;IACDX;EACF,CAAC,CAAC;AACJ,CAAC","ignoreList":[]}
+{"version":3,"names":["__defProp","Object","defineProperty","__getOwnPropDesc","getOwnPropertyDescriptor","__getOwnPropNames","getOwnPropertyNames","__hasOwnProp","prototype","hasOwnProperty","__export","target","all","name","get","enumerable","__copyProps","to","from","except","desc","key","call","__toCommonJS","mod","value","GpgProvider_exports","GPG_NONCE_QUERY_KEY","GpgProvider","module","exports","import_jsx_runtime","require","import_react","import_react_query","import_connectkit","import_GpgContext","import_signer","b64","b642","s","window","btoa","unescape","encodeURIComponent","GpgProvider2","param","children","enabled","nonceRefetchInterval","buildMessage","onSignIn","gpgConfig","status","setStatus","useState","GpgStatusState","READY","resetStatus","resetStatus2","useContext","GpgContext","Error","Context","nonce","useQuery","queryKey","queryFn","getNonce","refetchInterval","refetchOnWindowFocus","refetchOnReconnect","staleTime","Infinity","subscribeNonceReset","refetchNonce","refetch","useEffect","buildMessageRef","useRef","current","message","useMemo","data","command","gpgSignCommand","signIn","signIn2","pastedBlob","blob","assertGpgSignature","error","ERROR","LOADING","result","onSign","username","password","SUCCESS","jsx","Provider"],"sources":["GpgProvider.native.js"],"sourcesContent":["\"use strict\";\nvar __defProp = Object.defineProperty;\nvar __getOwnPropDesc = Object.getOwnPropertyDescriptor;\nvar __getOwnPropNames = Object.getOwnPropertyNames;\nvar __hasOwnProp = Object.prototype.hasOwnProperty;\nvar __export = (target, all) => {\n  for (var name in all)\n    __defProp(target, name, { get: all[name], enumerable: true });\n};\nvar __copyProps = (to, from, except, desc) => {\n  if (from && typeof from === \"object\" || typeof from === \"function\") {\n    for (let key of __getOwnPropNames(from))\n      if (!__hasOwnProp.call(to, key) && key !== except)\n        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });\n  }\n  return to;\n};\nvar __toCommonJS = (mod) => __copyProps(__defProp({}, \"__esModule\", { value: true }), mod);\nvar GpgProvider_exports = {};\n__export(GpgProvider_exports, {\n  GPG_NONCE_QUERY_KEY: () => GPG_NONCE_QUERY_KEY,\n  GpgProvider: () => GpgProvider\n});\nmodule.exports = __toCommonJS(GpgProvider_exports);\nvar import_jsx_runtime = require(\"react/jsx-runtime\");\nvar import_react = require(\"react\");\nvar import_react_query = require(\"@tanstack/react-query\");\nvar import_connectkit = require(\"@multiplatform.one/connectkit\");\nvar import_GpgContext = require(\"./GpgContext\");\nvar import_signer = require(\"./signer\");\nvar GPG_NONCE_QUERY_KEY = \"ckGpgNonce\";\nvar b64 = function b642(s) {\n  return window.btoa(unescape(encodeURIComponent(s)));\n};\nvar GpgProvider = function GpgProvider2(param) {\n  var { children, enabled = true, nonceRefetchInterval = false, buildMessage, onSignIn, ...gpgConfig } = param;\n  var [status, setStatus] = (0, import_react.useState)(import_GpgContext.GpgStatusState.READY);\n  var resetStatus = function resetStatus2() {\n    return setStatus(import_GpgContext.GpgStatusState.READY);\n  };\n  if ((0, import_react.useContext)(import_GpgContext.GpgContext)) {\n    throw new Error(\"Multiple, nested usages of GpgProvider detected. Please use only one.\");\n  }\n  if ((0, import_react.useContext)(import_connectkit.Context)) {\n    throw new Error(\"ConnectKitProvider must be mounted inside GpgProvider.\");\n  }\n  var nonce = (0, import_react_query.useQuery)({\n    queryKey: [\n      GPG_NONCE_QUERY_KEY\n    ],\n    queryFn: function queryFn() {\n      return gpgConfig.getNonce();\n    },\n    refetchInterval: nonceRefetchInterval,\n    // The challenge the user signs MUST equal the one we submit. Never refetch the nonce\n    // out from under an in-flight signature — especially on window-focus, which fires every\n    // time the user tabs to their terminal to run gpg and back.\n    refetchOnWindowFocus: false,\n    refetchOnReconnect: false,\n    staleTime: Infinity\n  });\n  var { subscribeNonceReset } = gpgConfig;\n  var refetchNonce = nonce.refetch;\n  (0, import_react.useEffect)(function() {\n    if (!subscribeNonceReset) return;\n    return subscribeNonceReset(function() {\n      void refetchNonce();\n    });\n  }, [\n    subscribeNonceReset,\n    refetchNonce\n  ]);\n  var buildMessageRef = (0, import_react.useRef)(buildMessage);\n  buildMessageRef.current = buildMessage;\n  var message = (0, import_react.useMemo)(function() {\n    return nonce.data ? buildMessageRef.current({\n      nonce: nonce.data\n    }) : null;\n  }, [\n    nonce.data\n  ]);\n  var command = (0, import_react.useMemo)(function() {\n    return message ? (0, import_signer.gpgSignCommand)(message) : null;\n  }, [\n    message\n  ]);\n  var signIn = async function signIn2(pastedBlob) {\n    var blob;\n    try {\n      blob = (0, import_signer.assertGpgSignature)(pastedBlob);\n    } catch (error) {\n      setStatus(import_GpgContext.GpgStatusState.ERROR);\n      throw error;\n    }\n    if (!message) {\n      setStatus(import_GpgContext.GpgStatusState.ERROR);\n      throw new Error(\"Could not fetch nonce\");\n    }\n    try {\n      setStatus(import_GpgContext.GpgStatusState.LOADING);\n      var result = await gpgConfig.onSign({\n        username: b64(blob),\n        password: b64(message),\n        message\n      });\n      if (result === false) throw new Error(\"GPG sign-in was rejected\");\n      setStatus(import_GpgContext.GpgStatusState.SUCCESS);\n      onSignIn === null || onSignIn === void 0 ? void 0 : onSignIn();\n      return true;\n    } catch (error) {\n      setStatus(import_GpgContext.GpgStatusState.ERROR);\n      throw error;\n    }\n  };\n  return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_GpgContext.GpgContext.Provider, {\n    value: {\n      enabled,\n      nonceRefetchInterval,\n      buildMessage,\n      ...gpgConfig,\n      nonce,\n      message,\n      command,\n      status,\n      signIn,\n      resetStatus\n    },\n    children\n  });\n};\n//# sourceMappingURL=GpgProvider.js.map\n"],"mappings":"AAAA,YAAY;;AACZ,IAAIA,SAAS,GAAGC,MAAM,CAACC,cAAc;AACrC,IAAIC,gBAAgB,GAAGF,MAAM,CAACG,wBAAwB;AACtD,IAAIC,iBAAiB,GAAGJ,MAAM,CAACK,mBAAmB;AAClD,IAAIC,YAAY,GAAGN,MAAM,CAACO,SAAS,CAACC,cAAc;AAClD,IAAIC,QAAQ,GAAGA,CAACC,MAAM,EAAEC,GAAG,KAAK;EAC9B,KAAK,IAAIC,IAAI,IAAID,GAAG,EAClBZ,SAAS,CAACW,MAAM,EAAEE,IAAI,EAAE;IAAEC,GAAG,EAAEF,GAAG,CAACC,IAAI,CAAC;IAAEE,UAAU,EAAE;EAAK,CAAC,CAAC;AACjE,CAAC;AACD,IAAIC,WAAW,GAAGA,CAACC,EAAE,EAAEC,IAAI,EAAEC,MAAM,EAAEC,IAAI,KAAK;EAC5C,IAAIF,IAAI,IAAI,OAAOA,IAAI,KAAK,QAAQ,IAAI,OAAOA,IAAI,KAAK,UAAU,EAAE;IAClE,KAAK,IAAIG,GAAG,IAAIhB,iBAAiB,CAACa,IAAI,CAAC,EACrC,IAAI,CAACX,YAAY,CAACe,IAAI,CAACL,EAAE,EAAEI,GAAG,CAAC,IAAIA,GAAG,KAAKF,MAAM,EAC/CnB,SAAS,CAACiB,EAAE,EAAEI,GAAG,EAAE;MAAEP,GAAG,EAAEA,CAAA,KAAMI,IAAI,CAACG,GAAG,CAAC;MAAEN,UAAU,EAAE,EAAEK,IAAI,GAAGjB,gBAAgB,CAACe,IAAI,EAAEG,GAAG,CAAC,CAAC,IAAID,IAAI,CAACL;IAAW,CAAC,CAAC;EACxH;EACA,OAAOE,EAAE;AACX,CAAC;AACD,IAAIM,YAAY,GAAIC,GAAG,IAAKR,WAAW,CAAChB,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE;EAAEyB,KAAK,EAAE;AAAK,CAAC,CAAC,EAAED,GAAG,CAAC;AAC1F,IAAIE,mBAAmB,GAAG,CAAC,CAAC;AAC5BhB,QAAQ,CAACgB,mBAAmB,EAAE;EAC5BC,mBAAmB,EAAEA,CAAA,KAAMA,mBAAmB;EAC9CC,WAAW,EAAEA,CAAA,KAAMA;AACrB,CAAC,CAAC;AACFC,MAAM,CAACC,OAAO,GAAGP,YAAY,CAACG,mBAAmB,CAAC;AAClD,IAAIK,kBAAkB,GAAGC,OAAO,CAAC,mBAAmB,CAAC;AACrD,IAAIC,YAAY,GAAGD,OAAO,CAAC,OAAO,CAAC;AACnC,IAAIE,kBAAkB,GAAGF,OAAO,CAAC,uBAAuB,CAAC;AACzD,IAAIG,iBAAiB,GAAGH,OAAO,CAAC,+BAA+B,CAAC;AAChE,IAAII,iBAAiB,GAAGJ,OAAO,CAAC,wBAAc,CAAC;AAC/C,IAAIK,aAAa,GAAGL,OAAO,CAAC,oBAAU,CAAC;AACvC,IAAIL,mBAAmB,GAAG,YAAY;AACtC,IAAIW,GAAG,GAAG,SAASC,IAAIA,CAACC,CAAC,EAAE;EACzB,OAAOC,MAAM,CAACC,IAAI,CAACC,QAAQ,CAACC,kBAAkB,CAACJ,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC;AACD,IAAIZ,WAAW,GAAG,SAASiB,YAAYA,CAACC,KAAK,EAAE;EAC7C,IAAI;IAAEC,QAAQ;IAAEC,OAAO,GAAG,IAAI;IAAEC,oBAAoB,GAAG,KAAK;IAAEC,YAAY;IAAEC,QAAQ;IAAE,GAAGC;EAAU,CAAC,GAAGN,KAAK;EAC5G,IAAI,CAACO,MAAM,EAAEC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAErB,YAAY,CAACsB,QAAQ,EAAEnB,iBAAiB,CAACoB,cAAc,CAACC,KAAK,CAAC;EAC5F,IAAIC,WAAW,GAAG,SAASC,YAAYA,CAAA,EAAG;IACxC,OAAOL,SAAS,CAAClB,iBAAiB,CAACoB,cAAc,CAACC,KAAK,CAAC;EAC1D,CAAC;EACD,IAAI,CAAC,CAAC,EAAExB,YAAY,CAAC2B,UAAU,EAAExB,iBAAiB,CAACyB,UAAU,CAAC,EAAE;IAC9D,MAAM,IAAIC,KAAK,CAAC,uEAAuE,CAAC;EAC1F;EACA,IAAI,CAAC,CAAC,EAAE7B,YAAY,CAAC2B,UAAU,EAAEzB,iBAAiB,CAAC4B,OAAO,CAAC,EAAE;IAC3D,MAAM,IAAID,KAAK,CAAC,wDAAwD,CAAC;EAC3E;EACA,IAAIE,KAAK,GAAG,CAAC,CAAC,EAAE9B,kBAAkB,CAAC+B,QAAQ,EAAE;IAC3CC,QAAQ,EAAE,CACRvC,mBAAmB,CACpB;IACDwC,OAAO,EAAE,SAASA,OAAOA,CAAA,EAAG;MAC1B,OAAOf,SAAS,CAACgB,QAAQ,CAAC,CAAC;IAC7B,CAAC;IACDC,eAAe,EAAEpB,oBAAoB;IACrC;IACA;IACA;IACAqB,oBAAoB,EAAE,KAAK;IAC3BC,kBAAkB,EAAE,KAAK;IACzBC,SAAS,EAAEC;EACb,CAAC,CAAC;EACF,IAAI;IAAEC;EAAoB,CAAC,GAAGtB,SAAS;EACvC,IAAIuB,YAAY,GAAGX,KAAK,CAACY,OAAO;EAChC,CAAC,CAAC,EAAE3C,YAAY,CAAC4C,SAAS,EAAE,YAAW;IACrC,IAAI,CAACH,mBAAmB,EAAE;IAC1B,OAAOA,mBAAmB,CAAC,YAAW;MACpC,KAAKC,YAAY,CAAC,CAAC;IACrB,CAAC,CAAC;EACJ,CAAC,EAAE,CACDD,mBAAmB,EACnBC,YAAY,CACb,CAAC;EACF,IAAIG,eAAe,GAAG,CAAC,CAAC,EAAE7C,YAAY,CAAC8C,MAAM,EAAE7B,YAAY,CAAC;EAC5D4B,eAAe,CAACE,OAAO,GAAG9B,YAAY;EACtC,IAAI+B,OAAO,GAAG,CAAC,CAAC,EAAEhD,YAAY,CAACiD,OAAO,EAAE,YAAW;IACjD,OAAOlB,KAAK,CAACmB,IAAI,GAAGL,eAAe,CAACE,OAAO,CAAC;MAC1ChB,KAAK,EAAEA,KAAK,CAACmB;IACf,CAAC,CAAC,GAAG,IAAI;EACX,CAAC,EAAE,CACDnB,KAAK,CAACmB,IAAI,CACX,CAAC;EACF,IAAIC,OAAO,GAAG,CAAC,CAAC,EAAEnD,YAAY,CAACiD,OAAO,EAAE,YAAW;IACjD,OAAOD,OAAO,GAAG,CAAC,CAAC,EAAE5C,aAAa,CAACgD,cAAc,EAAEJ,OAAO,CAAC,GAAG,IAAI;EACpE,CAAC,EAAE,CACDA,OAAO,CACR,CAAC;EACF,IAAIK,MAAM,GAAG,eAAeC,OAAOA,CAACC,UAAU,EAAE;IAC9C,IAAIC,IAAI;IACR,IAAI;MACFA,IAAI,GAAG,CAAC,CAAC,EAAEpD,aAAa,CAACqD,kBAAkB,EAAEF,UAAU,CAAC;IAC1D,CAAC,CAAC,OAAOG,KAAK,EAAE;MACdrC,SAAS,CAAClB,iBAAiB,CAACoB,cAAc,CAACoC,KAAK,CAAC;MACjD,MAAMD,KAAK;IACb;IACA,IAAI,CAACV,OAAO,EAAE;MACZ3B,SAAS,CAAClB,iBAAiB,CAACoB,cAAc,CAACoC,KAAK,CAAC;MACjD,MAAM,IAAI9B,KAAK,CAAC,uBAAuB,CAAC;IAC1C;IACA,IAAI;MACFR,SAAS,CAAClB,iBAAiB,CAACoB,cAAc,CAACqC,OAAO,CAAC;MACnD,IAAIC,MAAM,GAAG,MAAM1C,SAAS,CAAC2C,MAAM,CAAC;QAClCC,QAAQ,EAAE1D,GAAG,CAACmD,IAAI,CAAC;QACnBQ,QAAQ,EAAE3D,GAAG,CAAC2C,OAAO,CAAC;QACtBA;MACF,CAAC,CAAC;MACF,IAAIa,MAAM,KAAK,KAAK,EAAE,MAAM,IAAIhC,KAAK,CAAC,0BAA0B,CAAC;MACjER,SAAS,CAAClB,iBAAiB,CAACoB,cAAc,CAAC0C,OAAO,CAAC;MACnD/C,QAAQ,KAAK,IAAI,IAAIA,QAAQ,KAAK,KAAK,CAAC,GAAG,KAAK,CAAC,GAAGA,QAAQ,CAAC,CAAC;MAC9D,OAAO,IAAI;IACb,CAAC,CAAC,OAAOwC,KAAK,EAAE;MACdrC,SAAS,CAAClB,iBAAiB,CAACoB,cAAc,CAACoC,KAAK,CAAC;MACjD,MAAMD,KAAK;IACb;EACF,CAAC;EACD,OAAO,eAAgB,CAAC,CAAC,EAAE5D,kBAAkB,CAACoE,GAAG,EAAE/D,iBAAiB,CAACyB,UAAU,CAACuC,QAAQ,EAAE;IACxF3E,KAAK,EAAE;MACLuB,OAAO;MACPC,oBAAoB;MACpBC,YAAY;MACZ,GAAGE,SAAS;MACZY,KAAK;MACLiB,OAAO;MACPG,OAAO;MACP/B,MAAM;MACNiC,MAAM;MACN5B;IACF,CAAC;IACDX;EACF,CAAC,CAAC;AACJ,CAAC","ignoreList":[]}

package/dist/esm/GpgContext.mjs.map

@@ -1 +1 @@
-{"version":3,"names":["createContext","GpgStatusState","GpgStatusState2","GpgContext"],"sources":["../../src/GpgContext.tsx"],"sourcesContent":[null],"mappings":"AAAA,SAASA,aAAA,QAAqB;AAQvB,IAAKC,cAAA,GAAL,gBAAKC,eAAA,IAAL;EACLD,eAAA,YAAQ;EACRA,eAAA,cAAU;EACVA,eAAA,cAAU;EACVA,eAAA,YAAQ;EAJE,OAAAC,eAAA;AAAA,GAAAD,cAAA;AA0CL,MAAME,UAAA,GAAaH,aAAA,CAAsC,IAAI","ignoreList":[]}
+{"version":3,"names":["createContext","GpgStatusState","GpgStatusState2","GpgContext"],"sources":["../../src/GpgContext.tsx"],"sourcesContent":[null],"mappings":"AAAA,SAASA,aAAA,QAAqB;AAQvB,IAAKC,cAAA,GAAL,gBAAKC,eAAA,IAAL;EACLD,eAAA,YAAQ;EACRA,eAAA,cAAU;EACVA,eAAA,cAAU;EACVA,eAAA,YAAQ;EAJE,OAAAC,eAAA;AAAA,GAAAD,cAAA;AA+CL,MAAME,UAAA,GAAaH,aAAA,CAAsC,IAAI","ignoreList":[]}

package/dist/esm/GpgContext.native.js.map

@@ -1 +1 @@
-{"version":3,"names":["createContext","GpgStatusState","GpgStatusState2","GpgContext"],"sources":["../../src/GpgContext.tsx"],"sourcesContent":[null],"mappings":"AAAA,SAASA,aAAA,QAAqB;AAQvB,IAAKC,cAAA,GAAL,yBAAKC,eAAL;EACLD,eAAA,YAAQ;EACRA,eAAA,cAAU;EACVA,eAAA,cAAU;EACVA,eAAA,YAAQ;EAJE,OAAAC,eAAA;AAAA;AA0CL,IAAAC,UAAM,kBAAmDH,aAAI","ignoreList":[]}
+{"version":3,"names":["createContext","GpgStatusState","GpgStatusState2","GpgContext"],"sources":["../../src/GpgContext.tsx"],"sourcesContent":[null],"mappings":"AAAA,SAASA,aAAA,QAAqB;AAQvB,IAAKC,cAAA,GAAL,yBAAKC,eAAL;EACLD,eAAA,YAAQ;EACRA,eAAA,cAAU;EACVA,eAAA,cAAU;EACVA,eAAA,YAAQ;EAJE,OAAAC,eAAA;AAAA;AA+CL,IAAAC,UAAM,kBAAmDH,aAAI","ignoreList":[]}

package/dist/esm/GpgProvider.mjs

@@ -1,4 +1,4 @@
-import { useContext, useMemo, useRef, useState } from "react";
+import { useContext, useEffect, useMemo, useRef, useState } from "react";
 import { useQuery } from "@tanstack/react-query";
 import { Context as ConnectKitContext } from "@multiplatform.one/connectkit";
 import { GpgContext, GpgStatusState } from "./GpgContext.mjs";
@@ -6,16 +6,6 @@ import { assertGpgSignature, gpgSignCommand } from "./signer.mjs";
 import { jsx } from "react/jsx-runtime";
 const GPG_NONCE_QUERY_KEY = "ckGpgNonce";
 const b64 = s => window.btoa(unescape(encodeURIComponent(s)));
-function defaultBuildMessage({
-  nonce
-}) {
-  return `${window.location.host} wants you to sign in with your GPG key.
-
-URI: ${window.location.origin}
-Version: 1
-Nonce: ${nonce}
-Issued At: ${(/* @__PURE__ */new Date()).toISOString()}`;
-}
 const GpgProvider = ({
   children,
   enabled = true,
@@ -43,9 +33,19 @@ const GpgProvider = ({
     refetchOnReconnect: false,
     staleTime: Infinity
   });
+  const {
+    subscribeNonceReset
+  } = gpgConfig;
+  const refetchNonce = nonce.refetch;
+  useEffect(() => {
+    if (!subscribeNonceReset) return;
+    return subscribeNonceReset(() => {
+      void refetchNonce();
+    });
+  }, [subscribeNonceReset, refetchNonce]);
   const buildMessageRef = useRef(buildMessage);
   buildMessageRef.current = buildMessage;
-  const message = useMemo(() => nonce.data ? (buildMessageRef.current ?? defaultBuildMessage)({
+  const message = useMemo(() => nonce.data ? buildMessageRef.current({
     nonce: nonce.data
   }) : null, [nonce.data]);
   const command = useMemo(() => message ? gpgSignCommand(message) : null, [message]);

package/dist/esm/GpgProvider.mjs.map

@@ -1 +1 @@
-{"version":3,"names":["useContext","useMemo","useRef","useState","useQuery","Context","ConnectKitContext","GpgContext","GpgStatusState","assertGpgSignature","gpgSignCommand","jsx","GPG_NONCE_QUERY_KEY","b64","s","window","btoa","unescape","encodeURIComponent","defaultBuildMessage","nonce","location","host","origin","Date","toISOString","GpgProvider","children","enabled","nonceRefetchInterval","buildMessage","onSignIn","gpgConfig","status","setStatus","READY","resetStatus","Error","queryKey","queryFn","getNonce","refetchInterval","refetchOnWindowFocus","refetchOnReconnect","staleTime","Infinity","buildMessageRef","current","message","data","command","signIn","pastedBlob","blob","error","ERROR","LOADING","result","onSign","username","password","SUCCESS","Provider","value"],"sources":["../../src/GpgProvider.tsx"],"sourcesContent":[null],"mappings":"AAAA,SAAoBA,UAAA,EAAYC,OAAA,EAASC,MAAA,EAAQC,QAAA,QAAgB;AACjE,SAASC,QAAA,QAAgB;AAEzB,SAASC,OAAA,IAAWC,iBAAA,QAAyB;AAC7C,SAASC,UAAA,EAAuBC,cAAA,QAAsB;AACtD,SAASC,kBAAA,EAAoBC,cAAA,QAAsB;AAuG/C,SAAAC,GAAA;AAhGG,MAAMC,mBAAA,GAAsB;AAInC,MAAMC,GAAA,GAAOC,CAAA,IAAcC,MAAA,CAAOC,IAAA,CAAKC,QAAA,CAASC,kBAAA,CAAmBJ,CAAC,CAAC,CAAC;AAItE,SAASK,oBAAoB;EAAEC;AAAM,GAA8B;EACjE,OACE,GAAGL,MAAA,CAAOM,QAAA,CAASC,IAAI;AAAA;AAAA,OACfP,MAAA,CAAOM,QAAA,CAASE,MAAM;AAAA;AAAA,SAEpBH,KAAK;AAAA,cACD,mBAAII,IAAA,CAAK,GAAEC,WAAA,CAAY,CAAC;AAE1C;AAEO,MAAMC,WAAA,GAAcA,CAAC;EAC1BC,QAAA;EACAC,OAAA,GAAU;EACVC,oBAAA,GAAuB;EACvBC,YAAA;EACAC,QAAA;EACA,GAAGC;AACL,MAAa;EACX,MAAM,CAACC,MAAA,EAAQC,SAAS,IAAI/B,QAAA,CAAyBK,cAAA,CAAe2B,KAAK;EACzE,MAAMC,WAAA,GAAcA,CAAA,KAAMF,SAAA,CAAU1B,cAAA,CAAe2B,KAAK;EAIxD,IAAInC,UAAA,CAAWO,UAAU,GAAG;IAC1B,MAAM,IAAI8B,KAAA,CAAM,uEAAuE;EACzF;EACA,IAAIrC,UAAA,CAAWM,iBAAiB,GAAG;IACjC,MAAM,IAAI+B,KAAA,CAAM,wDAAwD;EAC1E;EAEA,MAAMjB,KAAA,GAAQhB,QAAA,CAAS;IACrBkC,QAAA,EAAU,CAAC1B,mBAAmB;IAC9B2B,OAAA,EAASA,CAAA,KAAMP,SAAA,CAAUQ,QAAA,CAAS;IAClCC,eAAA,EAAiBZ,oBAAA;IAAA;IAAA;IAAA;IAIjBa,oBAAA,EAAsB;IACtBC,kBAAA,EAAoB;IACpBC,SAAA,EAAWC;EACb,CAAC;EAOD,MAAMC,eAAA,GAAkB5C,MAAA,CAAO4B,YAAY;EAC3CgB,eAAA,CAAgBC,OAAA,GAAUjB,YAAA;EAC1B,MAAMkB,OAAA,GAAU/C,OAAA,CACd,MACEmB,KAAA,CAAM6B,IAAA,IAAQH,eAAA,CAAgBC,OAAA,IAAW5B,mBAAA,EAAqB;IAAEC,KAAA,EAAOA,KAAA,CAAM6B;EAAK,CAAC,IAAI,MACzF,CAAC7B,KAAA,CAAM6B,IAAI,CACb;EACA,MAAMC,OAAA,GAAUjD,OAAA,CAAQ,MAAO+C,OAAA,GAAUtC,cAAA,CAAesC,OAAO,IAAI,MAAO,CAACA,OAAO,CAAC;EAEnF,MAAMG,MAAA,GAAS,MAAOC,UAAA,IAAyC;IAC7D,IAAIC,IAAA;IACJ,IAAI;MACFA,IAAA,GAAO5C,kBAAA,CAAmB2C,UAAU;IACtC,SAASE,KAAA,EAAO;MACdpB,SAAA,CAAU1B,cAAA,CAAe+C,KAAK;MAC9B,MAAMD,KAAA;IACR;IACA,IAAI,CAACN,OAAA,EAAS;MACZd,SAAA,CAAU1B,cAAA,CAAe+C,KAAK;MAC9B,MAAM,IAAIlB,KAAA,CAAM,uBAAuB;IACzC;IACA,IAAI;MACFH,SAAA,CAAU1B,cAAA,CAAegD,OAAO;MAEhC,MAAMC,MAAA,GAAS,MAAMzB,SAAA,CAAU0B,MAAA,CAAO;QACpCC,QAAA,EAAU9C,GAAA,CAAIwC,IAAI;QAClBO,QAAA,EAAU/C,GAAA,CAAImC,OAAO;QACrBA;MACF,CAAC;MAED,IAAIS,MAAA,KAAW,OAAO,MAAM,IAAIpB,KAAA,CAAM,0BAA0B;MAChEH,SAAA,CAAU1B,cAAA,CAAeqD,OAAO;MAChC9B,QAAA,GAAW;MACX,OAAO;IACT,SAASuB,KAAA,EAAO;MACdpB,SAAA,CAAU1B,cAAA,CAAe+C,KAAK;MAC9B,MAAMD,KAAA;IACR;EACF;EAEA,OACE,eAAA3C,GAAA,CAACJ,UAAA,CAAWuD,QAAA,EAAX;IACCC,KAAA,EAAO;MACLnC,OAAA;MACAC,oBAAA;MACAC,YAAA;MACA,GAAGE,SAAA;MACHZ,KAAA;MACA4B,OAAA;MACAE,OAAA;MACAjB,MAAA;MACAkB,MAAA;MACAf;IACF;IAECT;EAAA,CACH;AAEJ","ignoreList":[]}
+{"version":3,"names":["useContext","useEffect","useMemo","useRef","useState","useQuery","Context","ConnectKitContext","GpgContext","GpgStatusState","assertGpgSignature","gpgSignCommand","jsx","GPG_NONCE_QUERY_KEY","b64","s","window","btoa","unescape","encodeURIComponent","GpgProvider","children","enabled","nonceRefetchInterval","buildMessage","onSignIn","gpgConfig","status","setStatus","READY","resetStatus","Error","nonce","queryKey","queryFn","getNonce","refetchInterval","refetchOnWindowFocus","refetchOnReconnect","staleTime","Infinity","subscribeNonceReset","refetchNonce","refetch","buildMessageRef","current","message","data","command","signIn","pastedBlob","blob","error","ERROR","LOADING","result","onSign","username","password","SUCCESS","Provider","value"],"sources":["../../src/GpgProvider.tsx"],"sourcesContent":[null],"mappings":"AAAA,SAAoBA,UAAA,EAAYC,SAAA,EAAWC,OAAA,EAASC,MAAA,EAAQC,QAAA,QAAgB;AAC5E,SAASC,QAAA,QAAgB;AAEzB,SAASC,OAAA,IAAWC,iBAAA,QAAyB;AAC7C,SAASC,UAAA,EAAuBC,cAAA,QAAsB;AACtD,SAASC,kBAAA,EAAoBC,cAAA,QAAsB;AAmG/C,SAAAC,GAAA;AA5FG,MAAMC,mBAAA,GAAsB;AAInC,MAAMC,GAAA,GAAOC,CAAA,IAAcC,MAAA,CAAOC,IAAA,CAAKC,QAAA,CAASC,kBAAA,CAAmBJ,CAAC,CAAC,CAAC;AAE/D,MAAMK,WAAA,GAAcA,CAAC;EAC1BC,QAAA;EACAC,OAAA,GAAU;EACVC,oBAAA,GAAuB;EACvBC,YAAA;EACAC,QAAA;EACA,GAAGC;AACL,MAAa;EACX,MAAM,CAACC,MAAA,EAAQC,SAAS,IAAIxB,QAAA,CAAyBK,cAAA,CAAeoB,KAAK;EACzE,MAAMC,WAAA,GAAcA,CAAA,KAAMF,SAAA,CAAUnB,cAAA,CAAeoB,KAAK;EAIxD,IAAI7B,UAAA,CAAWQ,UAAU,GAAG;IAC1B,MAAM,IAAIuB,KAAA,CAAM,uEAAuE;EACzF;EACA,IAAI/B,UAAA,CAAWO,iBAAiB,GAAG;IACjC,MAAM,IAAIwB,KAAA,CAAM,wDAAwD;EAC1E;EAEA,MAAMC,KAAA,GAAQ3B,QAAA,CAAS;IACrB4B,QAAA,EAAU,CAACpB,mBAAmB;IAC9BqB,OAAA,EAASA,CAAA,KAAMR,SAAA,CAAUS,QAAA,CAAS;IAClCC,eAAA,EAAiBb,oBAAA;IAAA;IAAA;IAAA;IAIjBc,oBAAA,EAAsB;IACtBC,kBAAA,EAAoB;IACpBC,SAAA,EAAWC;EACb,CAAC;EAED,MAAM;IAAEC;EAAoB,IAAIf,SAAA;EAChC,MAAMgB,YAAA,GAAeV,KAAA,CAAMW,OAAA;EAC3B1C,SAAA,CAAU,MAAM;IACd,IAAI,CAACwC,mBAAA,EAAqB;IAC1B,OAAOA,mBAAA,CAAoB,MAAM;MAC/B,KAAKC,YAAA,CAAa;IACpB,CAAC;EACH,GAAG,CAACD,mBAAA,EAAqBC,YAAY,CAAC;EAOtC,MAAME,eAAA,GAAkBzC,MAAA,CAAOqB,YAAY;EAC3CoB,eAAA,CAAgBC,OAAA,GAAUrB,YAAA;EAC1B,MAAMsB,OAAA,GAAU5C,OAAA,CACd,MAAO8B,KAAA,CAAMe,IAAA,GAAOH,eAAA,CAAgBC,OAAA,CAAQ;IAAEb,KAAA,EAAOA,KAAA,CAAMe;EAAK,CAAC,IAAI,MACrE,CAACf,KAAA,CAAMe,IAAI,CACb;EACA,MAAMC,OAAA,GAAU9C,OAAA,CAAQ,MAAO4C,OAAA,GAAUnC,cAAA,CAAemC,OAAO,IAAI,MAAO,CAACA,OAAO,CAAC;EAEnF,MAAMG,MAAA,GAAS,MAAOC,UAAA,IAAyC;IAC7D,IAAIC,IAAA;IACJ,IAAI;MACFA,IAAA,GAAOzC,kBAAA,CAAmBwC,UAAU;IACtC,SAASE,KAAA,EAAO;MACdxB,SAAA,CAAUnB,cAAA,CAAe4C,KAAK;MAC9B,MAAMD,KAAA;IACR;IACA,IAAI,CAACN,OAAA,EAAS;MACZlB,SAAA,CAAUnB,cAAA,CAAe4C,KAAK;MAC9B,MAAM,IAAItB,KAAA,CAAM,uBAAuB;IACzC;IACA,IAAI;MACFH,SAAA,CAAUnB,cAAA,CAAe6C,OAAO;MAEhC,MAAMC,MAAA,GAAS,MAAM7B,SAAA,CAAU8B,MAAA,CAAO;QACpCC,QAAA,EAAU3C,GAAA,CAAIqC,IAAI;QAClBO,QAAA,EAAU5C,GAAA,CAAIgC,OAAO;QACrBA;MACF,CAAC;MAED,IAAIS,MAAA,KAAW,OAAO,MAAM,IAAIxB,KAAA,CAAM,0BAA0B;MAChEH,SAAA,CAAUnB,cAAA,CAAekD,OAAO;MAChClC,QAAA,GAAW;MACX,OAAO;IACT,SAAS2B,KAAA,EAAO;MACdxB,SAAA,CAAUnB,cAAA,CAAe4C,KAAK;MAC9B,MAAMD,KAAA;IACR;EACF;EAEA,OACE,eAAAxC,GAAA,CAACJ,UAAA,CAAWoD,QAAA,EAAX;IACCC,KAAA,EAAO;MACLvC,OAAA;MACAC,oBAAA;MACAC,YAAA;MACA,GAAGE,SAAA;MACHM,KAAA;MACAc,OAAA;MACAE,OAAA;MACArB,MAAA;MACAsB,MAAA;MACAnB;IACF;IAECT;EAAA,CACH;AAEJ","ignoreList":[]}

package/dist/esm/GpgProvider.native.js

@@ -1,5 +1,5 @@
 import { jsx as _jsx } from "react/jsx-runtime";
-import { useContext, useMemo, useRef, useState } from "react";
+import { useContext, useEffect, useMemo, useRef, useState } from "react";
 import { useQuery } from "@tanstack/react-query";
 import { Context as ConnectKitContext } from "@multiplatform.one/connectkit";
 import { GpgContext, GpgStatusState } from "./GpgContext.native.js";
@@ -8,17 +8,6 @@ var GPG_NONCE_QUERY_KEY = "ckGpgNonce";
 var b64 = function b642(s) {
   return window.btoa(unescape(encodeURIComponent(s)));
 };
-function defaultBuildMessage(param) {
-  var {
-    nonce
-  } = param;
-  return `${window.location.host} wants you to sign in with your GPG key.
-
-URI: ${window.location.origin}
-Version: 1
-Nonce: ${nonce}
-Issued At: ${(/* @__PURE__ */new Date()).toISOString()}`;
-}
 var GpgProvider = function GpgProvider2(param) {
   var {
     children,
@@ -51,11 +40,20 @@ var GpgProvider = function GpgProvider2(param) {
     refetchOnReconnect: false,
     staleTime: Infinity
   });
+  var {
+    subscribeNonceReset
+  } = gpgConfig;
+  var refetchNonce = nonce.refetch;
+  useEffect(function () {
+    if (!subscribeNonceReset) return;
+    return subscribeNonceReset(function () {
+      void refetchNonce();
+    });
+  }, [subscribeNonceReset, refetchNonce]);
   var buildMessageRef = useRef(buildMessage);
   buildMessageRef.current = buildMessage;
   var message = useMemo(function () {
-    var _buildMessageRef_current;
-    return nonce.data ? ((_buildMessageRef_current = buildMessageRef.current) !== null && _buildMessageRef_current !== void 0 ? _buildMessageRef_current : defaultBuildMessage)({
+    return nonce.data ? buildMessageRef.current({
       nonce: nonce.data
     }) : null;
   }, [nonce.data]);

package/dist/esm/GpgProvider.native.js.map

@@ -1 +1 @@
-{"version":3,"names":["jsx","_jsx","useContext","useMemo","useRef","useState","useQuery","Context","ConnectKitContext","GpgContext","GpgStatusState","assertGpgSignature","gpgSignCommand","GPG_NONCE_QUERY_KEY","b64","b642","s","window","btoa","unescape","encodeURIComponent","defaultBuildMessage","param","nonce","location","host","origin","Date","toISOString","GpgProvider","GpgProvider2","children","enabled","nonceRefetchInterval","buildMessage","onSignIn","gpgConfig","status","setStatus","READY","resetStatus","resetStatus2","Error","queryKey","queryFn","getNonce","refetchInterval","refetchOnWindowFocus","refetchOnReconnect","staleTime","Infinity","buildMessageRef","current","message","_buildMessageRef_current","data","command","signIn","signIn2","pastedBlob","blob","error","ERROR","LOADING","result","onSign","username","password","SUCCESS","Provider","value"],"sources":["../../src/GpgProvider.tsx"],"sourcesContent":[null],"mappings":"AAAA,SAAoBA,GAAA,IAAAC,IAAA,QAAY,mBAAiB;AACjD,SAASC,UAAA,EAAAC,OAAgB,EAAAC,MAAA,EAAAC,QAAA;AAEzB,SAASC,QAAA,QAAW,uBAAyB;AAC7C,SAASC,OAAA,IAAAC,iBAAuB,QAAsB;AACtD,SAASC,UAAA,EAAAC,cAAoB,gCAAsB;AAuG/C,SAAAC,kBAAA,EAAAC,cAAA;AAhGG,IAAAC,mBAAM,eAAsB;AAInC,IAAAC,GAAM,YAAqBC,KAAAC,CAAA,EAAO;EAIlC,OAASC,MAAA,CAAAC,IAAA,CAAAC,QAAoB,CAAAC,kBAAsC,CAAAJ,CAAA;AACjE;AACyB,SAAAK,oBAAAC,KAAA;EAAA;IACfC;EAAO,IAAAD,KAAS;EAAM,UAAAL,MAAA,CAAAO,QAAA,CAAAC,IAAA;AAAA;AAEf,OAAAR,MAAA,CACDO,QAAA,CAAAE,MAAA;AAElB;AAEO,SAAMH,KAAA;AAAe,aAC1B,oBAAAI,IAAA,IAAAC,WAAA;AAAA;AACU,IACVC,WAAA,YAAuBC,aAAAR,KAAA;EACvB;IAAAS,QAAA;IAAAC,OAAA;IAAAC,oBAAA;IAAAC,YAAA;IAAAC,QAAA;IAAA,GAAAC;EAAA,IAAAd,KAAA;EACA,KAAAe,MAAA,EAAAC,SAAA,IAAAjC,QAAA,CAAAK,cAAA,CAAA6B,KAAA;EACA,IAAGC,WAAA,YAAAC,aAAA;IACL,OAAaH,SAAA,CAAA5B,cAAA,CAAA6B,KAAA;EACX;EACA,IAAArC,UAAM,CAAAO,UAAc,CAAM;IAI1B,MAAI,IAAAiC,KAAW,wEAAa;EAC1B;EACF,IAAAxC,UAAA,CAAAM,iBAAA;IACA,MAAI,IAAAkC,KAAW,yDAAoB;EACjC;EACF,IAAAnB,KAAA,GAAAjB,QAAA;IAEAqC,QAAM,GACJ9B,mBAAW,CACX;IACA+B,OAAA,WAAiBA,QAAA;MAAA,OAAAR,SAAA,CAAAS,QAAA;IAAA;IAAAC,eAAA,EAAAb,oBAAA;IAIjB;IACA;IACA;IACDc,oBAAA;IAODC,kBAAM,OAAkB;IACxBC,SAAA,EAAAC;EACA;EAAgB,IACdC,eACQ,GAAQ/C,MAAA,CAAA8B,YAAgB;EAAyDiB,eAC9E,CAAAC,OAAA,GAAAlB,YAAA;EACb,IAAAmB,OAAA,GAAAlD,OAAA;IACA,IAAMmD,wBAAyB;IAE/B,OAAM/B,KAAA,CAASgC,IAAA,GAAO,EAAAD,wBAAyC,GAAAH,eAAA,CAAAC,OAAA,cAAAE,wBAAA,cAAAA,wBAAA,GAAAjC,mBAAA;MAC7DE,KAAI,EAAAA,KAAA,CAAAgC;IACJ,KAAI;EACF,IACFhC,KAAA,CAAAgC,IAAS,CACP;EACA,IAAAC,OAAM,GAAArD,OAAA;IACR,OAAAkD,OAAA,GAAAzC,cAAA,CAAAyC,OAAA;EACA,IACEA,OAAA,CACA;EAAuC,IACzCI,MAAA,kBAAAC,QAAAC,UAAA;IACA,IAAIC,IAAA;IACF;MAEAA,IAAA,GAAMjD,kBAAe,CAAAgD,UAAU;IAAO,SACpCE,KAAU;MAAQvB,SAClB,CAAA5B,cAAqB,CAAAoD,KAAA;MAAA,MACrBD,KAAA;IAAA;IAGF,KAAAR,OAAI;MACJf,SAAA,CAAU5B,cAAA,CAAeoD,KAAA;MACzB,UAAApB,KAAW;IACX;IACF;MACEJ,SAAA,CAAU5B,cAAA,CAAeqD,OAAK;MAC9B,IAAAC,MAAM,SAAA5B,SAAA,CAAA6B,MAAA;QACRC,QAAA,EAAApD,GAAA,CAAA8C,IAAA;QACFO,QAAA,EAAArD,GAAA,CAAAuC,OAAA;QAEAA;MACG;MAAA,IAAAW,MAAA,sBAAAtB,KAAA;MACCJ,SAAO,CAAA5B,cAAA,CAAA0D,OAAA;MAAAjC,QACL,aAAAA,QAAA,uBAAAA,QAAA;MAAA,OACA;IAAA,SACA0B,KAAA;MAAAvB,SACG,CAAA5B,cAAA,CAAAoD,KAAA;MAAA,MACHD,KAAA;IAAA;EACA;EACA,OACA,eAAA5D,IAAA,CAAAQ,UAAA,CAAA4D,QAAA;IAAAC,KACA;MAAAtC,OACA;MACFC,oBAAA;MAECC,YAAA;MAAA,GAAAE,SAAA;MACHb,KAAA;MAEJ8B,OAAA","ignoreList":[]}
+{"version":3,"names":["jsx","_jsx","useContext","useEffect","useMemo","useRef","useState","useQuery","Context","ConnectKitContext","GpgContext","GpgStatusState","assertGpgSignature","gpgSignCommand","GPG_NONCE_QUERY_KEY","b64","b642","s","window","btoa","unescape","encodeURIComponent","GpgProvider","GpgProvider2","param","children","enabled","nonceRefetchInterval","buildMessage","onSignIn","gpgConfig","status","setStatus","READY","resetStatus","resetStatus2","Error","nonce","queryKey","queryFn","getNonce","refetchInterval","refetchOnWindowFocus","refetchOnReconnect","staleTime","Infinity","subscribeNonceReset","refetchNonce","refetch","buildMessageRef","current","message","data","command","signIn","signIn2","pastedBlob","blob","error","ERROR","LOADING","result","onSign","username","password","SUCCESS","Provider","value"],"sources":["../../src/GpgProvider.tsx"],"sourcesContent":[null],"mappings":"AAAA,SAAoBA,GAAA,IAAAC,IAAA,QAAY,mBAAoB;AACpD,SAASC,UAAA,EAAAC,SAAgB,EAAAC,OAAA,EAAAC,MAAA,EAAAC,QAAA;AAEzB,SAASC,QAAA,QAAW,uBAAyB;AAC7C,SAASC,OAAA,IAAAC,iBAAuB,QAAsB;AACtD,SAASC,UAAA,EAAAC,cAAoB,gCAAsB;AAmG/C,SAAAC,kBAAA,EAAAC,cAAA;AA5FG,IAAAC,mBAAM,eAAsB;AAInC,IAAAC,GAAM,YAAqBC,KAAAC,CAAA,EAAO;EAE3B,OAAMC,MAAA,CAAAC,IAAc,CAACC,QAAA,CAAAC,kBAAA,CAAAJ,CAAA;AAAA;AAC1B,IACAK,WAAU,YAAAC,aAAAC,KAAA;EACV;IAAAC,QAAA;IAAAC,OAAuB;IAAAC,oBAAA;IAAAC,YAAA;IAAAC,QAAA;IAAA,GAAAC;EAAA,IAAAN,KAAA;EACvB,KAAAO,MAAA,EAAAC,SAAA,IAAA1B,QAAA,CAAAK,cAAA,CAAAsB,KAAA;EACA,IAAAC,WAAA,YAAAC,aAAA;IACA,OAAGH,SAAA,CAAArB,cAAA,CAAAsB,KAAA;EACL;EACE,IAAA/B,UAAO,CAAQQ,UAAS,GAAI;IAC5B,MAAM,IAAA0B,KAAA,wEAAkD;EAIxD;EACE,IAAAlC,UAAU,CAAAO,iBAAM;IAClB,UAAA2B,KAAA;EACA;EACE,IAAAC,KAAM,GAAI9B,QAAM;IAClB+B,QAAA,GAEAxB,mBAAuB,CACrB;IACAyB,OAAA,EAAS,SAAMA,OAAUA,CAAA;MACzB,OAAAT,SAAiB,CAAAU,QAAA;IAAA;IAAAC,eAAA,EAAAd,oBAAA;IAAA;IAIjB;IACA;IACAe,oBAAW;IACZC,kBAAA;IAEDC,SAAQ,EAAAC;EACR;EACA;IAAAC;EAAgB,IAAAhB,SAAA;EACd,IAAAiB,YAAK,GAAAV,KAAA,CAAAW,OAAqB;EAC1B7C,SAAO;IACL,KAAA2C,mBAAkB;IACpB,OAACA,mBAAA;MACC,KAAAC,YAAA;IAOJ;EACA,IACAD,mBAAgB,EACdC,YAAa,CAAwD,CACrE;EACF,IAAAE,eAAA,GAAA5C,MAAA,CAAAuB,YAAA;EACAqB,eAAM,CAAUC,OAAA,GAAQtB,YAAO;EAE/B,IAAAuB,OAAM,GAAA/C,OAAS,CAAO;IACpB,OAAIiC,KAAA,CAAAe,IAAA,GAAAH,eAAA,CAAAC,OAAA;MACJb,KAAI,EAAAA,KAAA,CAAAe;IACF,SAAO;EAA6B,GACtC,CACEf,KAAA,CAAAe,IAAA,CACA;EAAM,IACRC,OAAA,GAAAjD,OAAA;IACA,OAAK+C,OAAS,GAAAtC,cAAA,CAAAsC,OAAA;EACZ,IACAA,OAAA,CAAuC,CACzC;EACA,IAAAG,MAAI,kBAAAC,QAAAC,UAAA;IACF,IAAAC,IAAA;IAEA;MAAsCA,IACpC,GAAA7C,kBAAkB,CAAA4C,UAAA;IAAA,SAClBE,KAAU;MAAW1B,SACrB,CAAArB,cAAA,CAAAgD,KAAA;MACF,MAACD,KAAA;IAED;IACA,KAAAP,OAAU;MACVnB,SAAA,CAAArB,cAAW,CAAAgD,KAAA;MACX,UAAOvB,KAAA;IACT;IACE;MACAJ,SAAM,CAAArB,cAAA,CAAAiD,OAAA;MACR,IAAAC,MAAA,SAAA/B,SAAA,CAAAgC,MAAA;QACFC,QAAA,EAAAhD,GAAA,CAAA0C,IAAA;QAEAO,QACE,EAAAjD,GAAA,CAAAoC,OAAA;QAACA;MAAA;MACC,IAAAU,MAAO,sBAAAzB,KAAA;MAAAJ,SACL,CAAArB,cAAA,CAAAsD,OAAA;MAAApC,QACA,aAAAA,QAAA,uBAAAA,QAAA;MAAA,OACA;IAAA,SACG6B,KAAA;MAAA1B,SACH,CAAArB,cAAA,CAAAgD,KAAA;MAAA,MACAD,KAAA;IAAA;EACA;EACA,OACA,eAAAzD,IAAA,CAAAS,UAAA,CAAAwD,QAAA;IAAAC,KACA;MACFzC,OAAA;MAECC,oBAAA;MAAAC,YAAA;MACH,GAAAE,SAAA;MAEJO,KAAA","ignoreList":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@multiplatform.one/gpg",
-  "version": "7.23.2",
+  "version": "7.24.0",
   "description": "Sign-In With GPG (SIWG) screen + GpgProvider for the connectkit modal — no viem",
   "keywords": [
     "connectkit",
@@ -67,11 +67,11 @@
     "access": "public"
   },
   "dependencies": {
-    "@multiplatform.one/connectkit": "7.23.2",
+    "@multiplatform.one/connectkit": "7.24.0",
     "@noble/hashes": "^1.8.0"
   },
   "devDependencies": {
-    "@multiplatform.one/config": "7.23.2",
+    "@multiplatform.one/config": "7.24.0",
     "@tamagui/build": "2.7.6",
     "react": "19.2.5",
     "typescript": "~5.9.3"

package/src/GpgContext.tsx

@@ -27,18 +27,23 @@ export type GpgConfig = {
     message: string;
   }) => Promise<boolean | void> | boolean | void;
 
-  // Optional: override the challenge message (default = the standard SIWG message).
-  buildMessage?: (args: { nonce: string }) => string;
+  // Required: the challenge the user signs. Build it with mpo web3's
+  // buildWalletMessage("gpg", ...); web3's GpgProvider passes that by default.
+  buildMessage: (args: { nonce: string }) => string;
   enabled?: boolean;
   // Background nonce refetch. Default `false`: the challenge MUST stay byte-stable from
   // sign to submit (a refetch recomputes `message` and desyncs it from the signature).
   nonceRefetchInterval?: number | false;
+  // Called with a listener on mount; the provider refetches its nonce whenever the
+  // listener fires (e.g. keycloakWallet's resetNonce once a sign-in consumed it).
+  // Returns the unsubscribe.
+  subscribeNonceReset?: (listener: () => void) => () => void;
 };
 
 export type GpgContextValue = Required<
-  Pick<GpgConfig, "getNonce" | "onSign" | "enabled" | "nonceRefetchInterval">
+  Pick<GpgConfig, "getNonce" | "onSign" | "enabled" | "nonceRefetchInterval" | "buildMessage">
 > & {
-  buildMessage?: GpgConfig["buildMessage"];
+  subscribeNonceReset?: GpgConfig["subscribeNonceReset"];
   nonce: ReturnType<typeof useQuery<string | null>>;
   // Derived from the nonce — what the user copies/signs, and the ready-to-run command.
   message: string | null;

package/src/GpgProvider.tsx

@@ -1,4 +1,4 @@
-import { ReactNode, useContext, useMemo, useRef, useState } from "react";
+import { ReactNode, useContext, useEffect, useMemo, useRef, useState } from "react";
 import { useQuery } from "@tanstack/react-query";
 
 import { Context as ConnectKitContext } from "@multiplatform.one/connectkit";
@@ -16,18 +16,6 @@ export const GPG_NONCE_QUERY_KEY = "ckGpgNonce";
 // so plain btoa would corrupt non-ASCII. Must keep the unescape(encodeURIComponent()).
 const b64 = (s: string) => window.btoa(unescape(encodeURIComponent(s)));
 
-// The default SIWG challenge. Only the header line (domain) and the Nonce line are
-// load-bearing per the server's GpgMessage grammar; the rest is a cosmetic envelope.
-function defaultBuildMessage({ nonce }: { nonce: string }): string {
-  return (
-    `${window.location.host} wants you to sign in with your GPG key.\n\n` +
-    `URI: ${window.location.origin}\n` +
-    `Version: 1\n` +
-    `Nonce: ${nonce}\n` +
-    `Issued At: ${new Date().toISOString()}`
-  );
-}
-
 export const GpgProvider = ({
   children,
   enabled = true,
@@ -60,6 +48,15 @@ export const GpgProvider = ({
     staleTime: Infinity,
   });
 
+  const { subscribeNonceReset } = gpgConfig;
+  const refetchNonce = nonce.refetch;
+  useEffect(() => {
+    if (!subscribeNonceReset) return;
+    return subscribeNonceReset(() => {
+      void refetchNonce();
+    });
+  }, [subscribeNonceReset, refetchNonce]);
+
   // Compute the challenge ONCE per nonce (it embeds an Issued At timestamp); recomputing
   // on every render would desync the displayed/copied message from the one base64'd into
   // `password`, breaking the signature (which is verified over the exact message bytes).
@@ -68,8 +65,7 @@ export const GpgProvider = ({
   const buildMessageRef = useRef(buildMessage);
   buildMessageRef.current = buildMessage;
   const message = useMemo(
-    () =>
-      nonce.data ? (buildMessageRef.current ?? defaultBuildMessage)({ nonce: nonce.data }) : null,
+    () => (nonce.data ? buildMessageRef.current({ nonce: nonce.data }) : null),
     [nonce.data],
   );
   const command = useMemo(() => (message ? gpgSignCommand(message) : null), [message]);

package/types/GpgContext.d.ts

@@ -12,14 +12,15 @@ export type GpgConfig = {
         password: string;
         message: string;
     }) => Promise<boolean | void> | boolean | void;
-    buildMessage?: (args: {
+    buildMessage: (args: {
         nonce: string;
     }) => string;
     enabled?: boolean;
     nonceRefetchInterval?: number | false;
+    subscribeNonceReset?: (listener: () => void) => () => void;
 };
-export type GpgContextValue = Required<Pick<GpgConfig, "getNonce" | "onSign" | "enabled" | "nonceRefetchInterval">> & {
-    buildMessage?: GpgConfig["buildMessage"];
+export type GpgContextValue = Required<Pick<GpgConfig, "getNonce" | "onSign" | "enabled" | "nonceRefetchInterval" | "buildMessage">> & {
+    subscribeNonceReset?: GpgConfig["subscribeNonceReset"];
     nonce: ReturnType<typeof useQuery<string | null>>;
     message: string | null;
     command: string | null;

package/types/GpgContext.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"GpgContext.d.ts","sourceRoot":"","sources":["../src/GpgContext.tsx"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAOjD,oBAAY,cAAc;IACxB,KAAK,UAAU;IACf,OAAO,YAAY;IACnB,OAAO,YAAY;IACnB,KAAK,UAAU;CAChB;AAED,MAAM,MAAM,SAAS,GAAG;IAEtB,QAAQ,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAMhC,MAAM,EAAE,CAAC,IAAI,EAAE;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;KACjB,KAAK,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,OAAO,GAAG,IAAI,CAAC;IAG/C,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,KAAK,MAAM,CAAC;IACnD,OAAO,CAAC,EAAE,OAAO,CAAC;IAGlB,oBAAoB,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;CACvC,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,QAAQ,CACpC,IAAI,CAAC,SAAS,EAAE,UAAU,GAAG,QAAQ,GAAG,SAAS,GAAG,sBAAsB,CAAC,CAC5E,GAAG;IACF,YAAY,CAAC,EAAE,SAAS,CAAC,cAAc,CAAC,CAAC;IACzC,KAAK,EAAE,UAAU,CAAC,OAAO,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;IAElD,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,WAAW,EAAE,MAAM,IAAI,CAAC;CACzB,CAAC;AAEF,eAAO,MAAM,UAAU,iDAA8C,CAAC"}
+{"version":3,"file":"GpgContext.d.ts","sourceRoot":"","sources":["../src/GpgContext.tsx"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAOjD,oBAAY,cAAc;IACxB,KAAK,UAAU;IACf,OAAO,YAAY;IACnB,OAAO,YAAY;IACnB,KAAK,UAAU;CAChB;AAED,MAAM,MAAM,SAAS,GAAG;IAEtB,QAAQ,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAMhC,MAAM,EAAE,CAAC,IAAI,EAAE;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;KACjB,KAAK,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,OAAO,GAAG,IAAI,CAAC;IAI/C,YAAY,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,KAAK,MAAM,CAAC;IAClD,OAAO,CAAC,EAAE,OAAO,CAAC;IAGlB,oBAAoB,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IAItC,mBAAmB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,IAAI,KAAK,MAAM,IAAI,CAAC;CAC5D,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,QAAQ,CACpC,IAAI,CAAC,SAAS,EAAE,UAAU,GAAG,QAAQ,GAAG,SAAS,GAAG,sBAAsB,GAAG,cAAc,CAAC,CAC7F,GAAG;IACF,mBAAmB,CAAC,EAAE,SAAS,CAAC,qBAAqB,CAAC,CAAC;IACvD,KAAK,EAAE,UAAU,CAAC,OAAO,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;IAElD,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,WAAW,EAAE,MAAM,IAAI,CAAC;CACzB,CAAC;AAEF,eAAO,MAAM,UAAU,iDAA8C,CAAC"}

package/types/GpgProvider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"GpgProvider.d.ts","sourceRoot":"","sources":["../src/GpgProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAyC,MAAM,OAAO,CAAC;AAIzE,OAAO,EAAc,SAAS,EAAkB,MAAM,cAAc,CAAC;AAGrE,KAAK,KAAK,GAAG,SAAS,GAAG;IACvB,QAAQ,EAAE,SAAS,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;CACvB,CAAC;AAEF,eAAO,MAAM,mBAAmB,eAAe,CAAC;AAkBhD,eAAO,MAAM,WAAW,GAAI,mFAOzB,KAAK,4CAwFP,CAAC"}
+{"version":3,"file":"GpgProvider.d.ts","sourceRoot":"","sources":["../src/GpgProvider.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAoD,MAAM,OAAO,CAAC;AAIpF,OAAO,EAAc,SAAS,EAAkB,MAAM,cAAc,CAAC;AAGrE,KAAK,KAAK,GAAG,SAAS,GAAG;IACvB,QAAQ,EAAE,SAAS,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;CACvB,CAAC;AAEF,eAAO,MAAM,mBAAmB,eAAe,CAAC;AAMhD,eAAO,MAAM,WAAW,GAAI,mFAOzB,KAAK,4CAgGP,CAAC"}