@multiplatform.one/web3 7.24.0 → 7.26.0

package/types/bridge/AuthBridge.d.ts

@@ -0,0 +1,58 @@
+import type { AuthBrowserLogin, AuthKeycloakConfig, AuthOnboardingConfig, AuthSignInParams, AuthSignInResult, AuthTokens, AuthTokensChanged } from "./authTypes";
+import type { BridgeClient, RequestOptions } from "./BridgeClient";
+export interface AuthBridgeOptions {
+    /** Opens a URL in the system browser: `Linking.openURL` in React Native. */
+    openUrl(url: string): unknown;
+    /** Used when a call leaves `keycloak` or `onboarding` out. */
+    defaults?: {
+        keycloak?: AuthKeycloakConfig;
+        onboarding?: AuthOnboardingConfig;
+    };
+    /** Sign-in waits on the user in a wallet app. Default 10 minutes. */
+    signInTimeoutMs?: number;
+}
+export type AuthSignInOutcome = AuthSignInResult & {
+    /** Set on `profile-incomplete`: whether this call opened the onboarding page. */
+    onboardingOpened?: boolean;
+};
+export interface AuthSignInOptions extends RequestOptions {
+    /** Open Keycloak's onboarding in the system browser on `profile-incomplete`. Default true. */
+    openOnboarding?: boolean;
+}
+/**
+ * Native side of the `auth` namespace. Sign-in runs in the hosted WebView
+ * page, so the Keycloak nonce cookie and the message domain belong to that
+ * page's host; native gets the tokens back.
+ *
+ * A direct grant cannot run Keycloak's required actions (a new user's profile
+ * form). The page then answers `profile-incomplete` with Keycloak's browser
+ * login, and `signIn` opens it in the system browser, once per call and never
+ * in a loop. After the user finishes there, the next `signIn` succeeds.
+ */
+export declare class AuthBridge {
+    private readonly bridge;
+    private readonly options;
+    private pending;
+    constructor(bridge: BridgeClient, options: AuthBridgeOptions);
+    signIn(params?: Partial<AuthSignInParams>, options?: AuthSignInOptions): Promise<AuthSignInOutcome>;
+    refresh(params?: {
+        keycloak?: AuthKeycloakConfig;
+        refreshToken?: string;
+    }): Promise<AuthTokens>;
+    logout(params?: {
+        keycloak?: AuthKeycloakConfig;
+        refreshToken?: string;
+    }): Promise<void>;
+    /** The browser login the last `profile-incomplete` answer carried, until a sign-in succeeds. */
+    get pendingOnboarding(): AuthBrowserLogin | null;
+    /**
+     * True when `url` is Keycloak sending the browser back from that onboarding
+     * (its `state` matches) with no `error`. A matching return, cancelled or
+     * not, ends the pending onboarding, so the same return never counts twice.
+     */
+    isOnboardingReturn(url: string): boolean;
+    /** `tokensChanged` fires whenever the page's tokens for a realm and client change. */
+    onTokensChanged(handler: (change: AuthTokensChanged) => void): () => void;
+    private keycloak;
+}
+//# sourceMappingURL=AuthBridge.d.ts.map

package/types/bridge/AuthBridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthBridge.d.ts","sourceRoot":"","sources":["../../src/bridge/AuthBridge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,UAAU,EACV,iBAAiB,EAClB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAInE,MAAM,WAAW,iBAAiB;IAChC,4EAA4E;IAC5E,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9B,8DAA8D;IAC9D,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,kBAAkB,CAAC;QAAC,UAAU,CAAC,EAAE,oBAAoB,CAAA;KAAE,CAAC;IAChF,qEAAqE;IACrE,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,iBAAiB,GAAG,gBAAgB,GAAG;IACjD,iFAAiF;IACjF,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B,CAAC;AAEF,MAAM,WAAW,iBAAkB,SAAQ,cAAc;IACvD,8FAA8F;IAC9F,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;;;;;GASG;AACH,qBAAa,UAAU;IAInB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAJ1B,OAAO,CAAC,OAAO,CAAiC;gBAG7B,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,iBAAiB;IAGvC,MAAM,CACV,MAAM,GAAE,OAAO,CAAC,gBAAgB,CAAM,EACtC,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,iBAAiB,CAAC;IAgCvB,OAAO,CACX,MAAM,GAAE;QAAE,QAAQ,CAAC,EAAE,kBAAkB,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAO,GACpE,OAAO,CAAC,UAAU,CAAC;IAQhB,MAAM,CACV,MAAM,GAAE;QAAE,QAAQ,CAAC,EAAE,kBAAkB,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAO,GACpE,OAAO,CAAC,IAAI,CAAC;IAOhB,gGAAgG;IAChG,IAAI,iBAAiB,IAAI,gBAAgB,GAAG,IAAI,CAE/C;IAED;;;;OAIG;IACH,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAQxC,sFAAsF;IACtF,eAAe,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,IAAI,GAAG,MAAM,IAAI;IAMzE,OAAO,CAAC,QAAQ;CAUjB"}

package/types/bridge/BridgeClient.d.ts

@@ -20,7 +20,9 @@ export declare class BridgeClient {
     request(ns: Namespace, method: string, params?: unknown, options?: RequestOptions): Promise<unknown>;
     /** Subscribe to webview->native push events. Returns an unsubscribe fn. */
     on(handler: EventHandler): () => void;
-    /** Reject all in-flight requests — call on WebView reload/crash. */
+    /** Fail every request in flight and keep the client usable: the page they went to is gone. */
+    rejectPending(reason: Error): void;
+    /** Reject all in-flight requests and stop listening. */
     dispose(): void;
     private settle;
     private readonly onMessage;

package/types/bridge/BridgeClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"BridgeClient.d.ts","sourceRoot":"","sources":["../../src/bridge/BridgeClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,SAAS,EACf,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,MAAM,WAAW,cAAc;IAC7B,oGAAoG;IACpG,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,MAAM,YAAY,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;AAUpF,qBAAa,YAAY;IAOrB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,IAAI;IAPvB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8B;IACtD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA2B;IACrD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAa;IACzC,OAAO,CAAC,QAAQ,CAAS;gBAGN,SAAS,EAAE,SAAS,EACpB,IAAI,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO;IAKpD,OAAO,CACL,EAAE,EAAE,SAAS,EACb,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,OAAO,EAChB,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,OAAO,CAAC;IA6BnB,2EAA2E;IAC3E,EAAE,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,IAAI;IAOrC,oEAAoE;IACpE,OAAO,IAAI,IAAI;IAWf,OAAO,CAAC,MAAM;IAQd,OAAO,CAAC,QAAQ,CAAC,SAAS,CAiBxB;CACH"}
+{"version":3,"file":"BridgeClient.d.ts","sourceRoot":"","sources":["../../src/bridge/BridgeClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,KAAK,SAAS,EACf,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,MAAM,WAAW,cAAc;IAC7B,oGAAoG;IACpG,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,MAAM,YAAY,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;AAUpF,qBAAa,YAAY;IAOrB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,IAAI;IAPvB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8B;IACtD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA2B;IACrD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAa;IACzC,OAAO,CAAC,QAAQ,CAAS;gBAGN,SAAS,EAAE,SAAS,EACpB,IAAI,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO;IAKpD,OAAO,CACL,EAAE,EAAE,SAAS,EACb,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,OAAO,EAChB,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,OAAO,CAAC;IA6BnB,2EAA2E;IAC3E,EAAE,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,IAAI;IAOrC,8FAA8F;IAC9F,aAAa,CAAC,MAAM,EAAE,KAAK,GAAG,IAAI;IASlC,wDAAwD;IACxD,OAAO,IAAI,IAAI;IAOf,OAAO,CAAC,MAAM;IAQd,OAAO,CAAC,QAAQ,CAAC,SAAS,CAiBxB;CACH"}

package/types/bridge/BridgeHost.d.ts

@@ -20,7 +20,7 @@ export declare class BridgeHost {
     register(ns: Namespace, handler: RequestHandler): void;
     /** Push a webview->native event (no response expected). */
     emit(ns: Namespace, method: string, params?: unknown): void;
-    /** Tell native the host is initialized. */
+    /** Tell native the host is initialized, which protocol it speaks and what it serves. */
     ready(): void;
     dispose(): void;
     private readonly onMessage;

package/types/bridge/BridgeHost.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"BridgeHost.d.ts","sourceRoot":"","sources":["../../src/bridge/BridgeHost.ts"],"names":[],"mappings":"AAAA,OAAO,EAAyD,KAAK,SAAS,EAAE,MAAM,YAAY,CAAC;AACnG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;AAE7F;;;;GAIG;AACH,qBAAa,UAAU;IAIT,OAAO,CAAC,QAAQ,CAAC,SAAS;IAHtC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwC;IACjE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAa;gBAEZ,SAAS,EAAE,SAAS;IAIjD,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI;IAItD,2DAA2D;IAC3D,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,IAAI;IAI3D,2CAA2C;IAC3C,KAAK,IAAI,IAAI;IAIb,OAAO,IAAI,IAAI;IAKf,OAAO,CAAC,QAAQ,CAAC,SAAS,CAaxB;IAEF,OAAO,CAAC,KAAK;CAGd"}
+{"version":3,"file":"BridgeHost.d.ts","sourceRoot":"","sources":["../../src/bridge/BridgeHost.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,KAAK,SAAS,EACf,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;AAE7F;;;;GAIG;AACH,qBAAa,UAAU;IAIT,OAAO,CAAC,QAAQ,CAAC,SAAS;IAHtC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwC;IACjE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAa;gBAEZ,SAAS,EAAE,SAAS;IAIjD,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI;IAItD,2DAA2D;IAC3D,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,IAAI;IAI3D,wFAAwF;IACxF,KAAK,IAAI,IAAI;IAMb,OAAO,IAAI,IAAI;IAKf,OAAO,CAAC,QAAQ,CAAC,SAAS,CAaxB;IAEF,OAAO,CAAC,KAAK;CAGd"}

package/types/bridge/GpgBridge.d.ts

@@ -0,0 +1,23 @@
+import type { BridgeClient, RequestOptions } from "./BridgeClient";
+/** A signature the WebView is waiting for: the message and the terminal command that signs it. */
+export interface GpgPendingRequest {
+    message: string;
+    command: string;
+}
+/**
+ * Native-side proxy for the WebView's copy/paste GPG signer. `signMessage`
+ * parks a request in the page, which shows the command and a paste box; a
+ * native host that draws its own paste box calls `submit` instead.
+ */
+export declare class GpgBridge {
+    private readonly bridge;
+    constructor(bridge: BridgeClient);
+    /** Resolves with the armored signature followed by the armored public key. */
+    signMessage(message: string, options?: RequestOptions): Promise<string>;
+    /** Hand pasted terminal output to the pending request. Rejects when it does not cover its message. */
+    submit(signature: string): Promise<void>;
+    cancel(): Promise<void>;
+    /** Called with the pending request whenever one is parked, and with null when it settles. */
+    onPendingChanged(handler: (request: GpgPendingRequest | null) => void): () => void;
+}
+//# sourceMappingURL=GpgBridge.d.ts.map

package/types/bridge/GpgBridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GpgBridge.d.ts","sourceRoot":"","sources":["../../src/bridge/GpgBridge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEnE,kGAAkG;AAClG,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAMD;;;;GAIG;AACH,qBAAa,SAAS;IACR,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,YAAY;IAEjD,8EAA8E;IACxE,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;IAUjF,sGAAsG;IAChG,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAI7B,6FAA6F;IAC7F,gBAAgB,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,KAAK,IAAI,GAAG,MAAM,IAAI;CAOnF"}

package/types/bridge/SuiBridge.d.ts

@@ -0,0 +1,18 @@
+import type { BridgeClient, RequestOptions } from "./BridgeClient";
+/**
+ * Native-side proxy for the WebView's Sui wallet. Messages are UTF-8 text; the
+ * signature is Sui's serialized signature (flag || signature || public key),
+ * base64, which is what the Keycloak Sui verifier takes as the login username.
+ */
+export declare class SuiBridge {
+    private readonly bridge;
+    constructor(bridge: BridgeClient);
+    connect(options?: RequestOptions): Promise<{
+        address: string;
+    }>;
+    disconnect(): Promise<void>;
+    signMessage(message: string, options?: RequestOptions): Promise<string>;
+    /** Subscribe to sui events (`accountChanged`). */
+    on(handler: (event: string, params: unknown) => void): () => void;
+}
+//# sourceMappingURL=SuiBridge.d.ts.map

package/types/bridge/SuiBridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SuiBridge.d.ts","sourceRoot":"","sources":["../../src/bridge/SuiBridge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEnE;;;;GAIG;AACH,qBAAa,SAAS;IACR,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,YAAY;IAE3C,OAAO,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAM/D,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAI3B,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC;IAO7E,kDAAkD;IAClD,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,KAAK,IAAI,GAAG,MAAM,IAAI;CAKlE"}

package/types/bridge/authTypes.d.ts

@@ -0,0 +1,71 @@
+/** Who signs an `auth.signIn`: the message families the Keycloak wallet SPIs verify. */
+export type AuthFamily = "eth" | "sol" | "sui" | "gpg";
+export declare const AUTH_FAMILIES: readonly AuthFamily[];
+export interface AuthKeycloakConfig {
+    /** e.g. `https://account.example.com`, or `http://localhost:8080/auth` in dev. */
+    baseUrl: string;
+    realm: string;
+    /** The wallet SPI's REST resource: `siww` on the SHC Keycloak (default), `wallet` on mpo's. */
+    resource?: "siww" | "wallet";
+    /** A public client with direct access grants enabled. */
+    clientId: string;
+    /** Default `openid`. */
+    scope?: string | string[];
+}
+/**
+ * The client Keycloak's own browser login runs under when the account still
+ * has required actions: standard flow on, `redirectUri` registered exactly.
+ */
+export interface AuthOnboardingConfig {
+    clientId: string;
+    /** Where Keycloak sends the system browser back, usually the app's deep link. */
+    redirectUri: string;
+    scope?: string | string[];
+}
+export interface AuthTokens {
+    accessToken: string;
+    refreshToken?: string;
+    idToken?: string;
+    tokenType: string;
+    scope?: string;
+    /** Epoch ms. */
+    expiresAt: number;
+    /** Epoch ms; absent for offline or non-expiring refresh tokens. */
+    refreshExpiresAt?: number;
+}
+export interface AuthSignInParams {
+    /** Default `eth`. */
+    family?: AuthFamily;
+    keycloak: AuthKeycloakConfig;
+    onboarding?: AuthOnboardingConfig;
+}
+/** Keycloak's authorization-code login with a fresh `state` and PKCE S256 verifier. */
+export interface AuthBrowserLogin {
+    url: string;
+    state: string;
+    codeVerifier: string;
+}
+export type AuthSignInResult = {
+    status: "signed-in";
+    family: AuthFamily;
+    address: string | null;
+    tokens: AuthTokens;
+} | {
+    status: "profile-incomplete";
+    family: AuthFamily;
+    address: string | null;
+    browserLogin: AuthBrowserLogin;
+};
+export interface AuthSessionParams {
+    keycloak: AuthKeycloakConfig;
+    /** Defaults to the refresh token of the page's last sign-in for this realm and client. */
+    refreshToken?: string;
+}
+/** `auth.tokensChanged` event params. */
+export interface AuthTokensChanged {
+    baseUrl: string;
+    realm: string;
+    clientId: string;
+    tokens: AuthTokens | null;
+}
+//# sourceMappingURL=authTypes.d.ts.map

package/types/bridge/authTypes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authTypes.d.ts","sourceRoot":"","sources":["../../src/bridge/authTypes.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC;AAEvD,eAAO,MAAM,aAAa,EAAE,SAAS,UAAU,EAAiC,CAAC;AAEjF,MAAM,WAAW,kBAAkB;IACjC,kFAAkF;IAClF,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,+FAA+F;IAC/F,QAAQ,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC7B,yDAAyD;IACzD,QAAQ,EAAE,MAAM,CAAC;IACjB,wBAAwB;IACxB,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,iFAAiF;IACjF,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,qBAAqB;IACrB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,UAAU,CAAC,EAAE,oBAAoB,CAAC;CACnC;AAED,uFAAuF;AACvF,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,GACvF;IACE,MAAM,EAAE,oBAAoB,CAAC;IAC7B,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,YAAY,EAAE,gBAAgB,CAAC;CAChC,CAAC;AAEN,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,0FAA0F;IAC1F,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,yCAAyC;AACzC,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,UAAU,GAAG,IAAI,CAAC;CAC3B"}

package/types/bridge/core.d.ts

@@ -0,0 +1,16 @@
+export * from "./protocol";
+export * from "./transport";
+export * from "./authTypes";
+export { createPostMessageTransport, type PostMessageTransport } from "./postMessageTransport";
+export { BridgeClient, type EventHandler, type RequestOptions } from "./BridgeClient";
+export { BridgeHost, type RequestHandler } from "./BridgeHost";
+export { createBridgeProvider, type BridgeProvider, type Eip1193RequestArgs } from "./eip1193";
+export { bytesToBase64, base64ToBytes } from "./base64";
+export { SolanaBridge } from "./SolanaBridge";
+export { SuiBridge } from "./SuiBridge";
+export { GpgBridge, type GpgPendingRequest } from "./GpgBridge";
+export { AuthBridge, type AuthBridgeOptions, type AuthSignInOptions, type AuthSignInOutcome, } from "./AuthBridge";
+export { DEV_HOSTNAMES, hostedPageOrigin, isHostedPageUrl, parseOrigin, queryParams, type ParsedOrigin, } from "./hosting";
+export { buildInjectScript, createNativeBridge, type NativeBridge, type NativeBridgeOptions, } from "./nativeHost";
+export { decideNavigation, decideNewWindow, parseWalletReturn, shouldOpenExternally, WALLET_SCHEMES, WALLET_UNIVERSAL_HOSTS, type NavigationDecision, } from "../providers/native/deepLink";
+//# sourceMappingURL=core.d.ts.map

package/types/bridge/core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../../src/bridge/core.ts"],"names":[],"mappings":"AAEA,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,OAAO,EAAE,0BAA0B,EAAE,KAAK,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC/F,OAAO,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACtF,OAAO,EAAE,UAAU,EAAE,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,KAAK,cAAc,EAAE,KAAK,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/F,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EACL,UAAU,EACV,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,GACvB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,WAAW,EACX,WAAW,EACX,KAAK,YAAY,GAClB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,KAAK,YAAY,EACjB,KAAK,mBAAmB,GACzB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,oBAAoB,EACpB,cAAc,EACd,sBAAsB,EACtB,KAAK,kBAAkB,GACxB,MAAM,8BAA8B,CAAC"}

package/types/bridge/hosting.d.ts

@@ -0,0 +1,34 @@
+export interface ParsedOrigin {
+    /** Lowercased, without the colon. */
+    scheme: string;
+    /** Lowercased hostname with a non-default port, e.g. `example.com:8443`; empty for `about:`. */
+    host: string;
+    /** Lowercased hostname, IPv6 in brackets. */
+    hostname: string;
+    /** `scheme://host`, or `scheme:` for a URL without an authority. */
+    origin: string;
+}
+export declare function parseOrigin(url: string): ParsedOrigin | null;
+/** The query parameters of `url`, decoded; a repeated name keeps its first value. */
+export declare function queryParams(url: string): Record<string, string>;
+/**
+ * Plain http is allowed only where the device itself is the server: loopback,
+ * reached from an emulator through `adb reverse`, and 10.0.2.2, the Android
+ * emulator's alias for the host machine. Development builds only: on a phone
+ * any app can bind a loopback port, and 10.0.2.2 is a LAN address there.
+ */
+export declare const DEV_HOSTNAMES: readonly string[];
+export interface HostedPageOptions {
+    /** Accept plain http on `DEV_HOSTNAMES`. Default false; a React Native host passes `__DEV__`. */
+    allowDevHosts?: boolean;
+}
+/**
+ * True when a page at `url` can run the wallet bridge: https, or http on a
+ * development host. The sign-in message's domain is the page's host and the
+ * Keycloak nonce cookie is set for it, so a `file:`, `data:` or inline page,
+ * whose host is empty, can never sign in.
+ */
+export declare function isHostedPageUrl(url: string, options?: HostedPageOptions): boolean;
+/** The origin of a hosted wallet page, or a thrown error naming what is wrong with `url`. */
+export declare function hostedPageOrigin(url: string, options?: HostedPageOptions): string;
+//# sourceMappingURL=hosting.d.ts.map

package/types/bridge/hosting.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosting.d.ts","sourceRoot":"","sources":["../../src/bridge/hosting.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,YAAY;IAC3B,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,gGAAgG;IAChG,IAAI,EAAE,MAAM,CAAC;IACb,6CAA6C;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,MAAM,EAAE,MAAM,CAAC;CAChB;AAQD,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAY5D;AAED,qFAAqF;AACrF,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAU/D;AAUD;;;;;GAKG;AACH,eAAO,MAAM,aAAa,EAAE,SAAS,MAAM,EAAoD,CAAC;AAEhG,MAAM,WAAW,iBAAiB;IAChC,iGAAiG;IACjG,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,iBAAsB,GAAG,OAAO,CASrF;AAED,6FAA6F;AAC7F,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,iBAAsB,GAAG,MAAM,CAYrF"}

package/types/bridge/index.d.ts

@@ -1,10 +1,3 @@
-export * from "./protocol";
-export * from "./transport";
-export { createPostMessageTransport, type PostMessageTransport } from "./postMessageTransport";
-export { BridgeClient, type EventHandler, type RequestOptions } from "./BridgeClient";
-export { BridgeHost, type RequestHandler } from "./BridgeHost";
-export { createBridgeProvider, type BridgeProvider, type Eip1193RequestArgs } from "./eip1193";
+export * from "./core";
 export { createBridgeConnector } from "./bridgeConnector";
-export { bytesToBase64, base64ToBytes } from "./base64";
-export { SolanaBridge } from "./SolanaBridge";
 //# sourceMappingURL=index.d.ts.map

package/types/bridge/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/bridge/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,OAAO,EAAE,0BAA0B,EAAE,KAAK,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC/F,OAAO,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACtF,OAAO,EAAE,UAAU,EAAE,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,KAAK,cAAc,EAAE,KAAK,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/F,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/bridge/index.ts"],"names":[],"mappings":"AAAA,cAAc,QAAQ,CAAC;AACvB,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC"}

package/types/bridge/nativeHost.d.ts

@@ -0,0 +1,55 @@
+import { BridgeClient } from "./BridgeClient";
+import { type BridgeReady } from "./protocol";
+export interface NativeBridgeOptions {
+    /** The hosted wallet page. Must pass `isHostedPageUrl`. */
+    pageUrl: string;
+    /** Accept plain http on the development hosts. Pass `__DEV__`; never true in a release build. */
+    allowDevHosts?: boolean;
+    /** Runs a script in the page: react-native-webview's `injectJavaScript`. */
+    inject(script: string): void;
+    /** Default request timeout, see BridgeClient. */
+    timeoutMs?: number;
+    /** Called once the page reports `sys.ready`. */
+    onReady?(ready: BridgeReady): void;
+}
+export interface NativeBridge {
+    readonly client: BridgeClient;
+    /** Origin of the hosted page; messages from any other origin are dropped. */
+    readonly pageOrigin: string;
+    /** What the page announced in `sys.ready`, or null before it has. */
+    readonly peer: BridgeReady | null;
+    /**
+     * Feed a WebView message in: `receive(e.nativeEvent.data, e.nativeEvent.url)`.
+     * A message whose `fromUrl` is missing or on another origin is dropped.
+     */
+    receive(data: string, fromUrl: string): void;
+    /**
+     * The top frame started loading `url` (react-native-webview's `onLoadStart`).
+     * A document on another origin is not the page: what is in flight fails,
+     * nothing more is delivered until the page announces itself again, and the
+     * answer is true so the host loads `pageUrl` back. Twice at most between two
+     * `sys.ready`s: a page that never comes back stays down instead of looping.
+     */
+    navigated(url: string): boolean;
+    /**
+     * The page died (WebView content process gone) or is being reloaded: fail
+     * the requests in flight and queue new ones until the next `sys.ready`.
+     */
+    pageGone(): void;
+    dispose(): void;
+}
+/**
+ * The script that delivers one message into the page. The raw string is
+ * embedded with JSON.stringify so quotes, newlines and backslashes survive;
+ * the trailing `true;` is react-native-webview's injectJavaScript contract.
+ * With `pageOrigin` the script delivers only while the top frame is on that
+ * origin, so a document that replaced the page never sees a message.
+ */
+export declare function buildInjectScript(raw: string, pageOrigin?: string): string;
+/**
+ * The native end of the bridge for any React Native WebView host. Requests
+ * wait in a queue until the page says `sys.ready`, because the first request
+ * usually fires before the page has loaded.
+ */
+export declare function createNativeBridge(options: NativeBridgeOptions): NativeBridge;
+//# sourceMappingURL=nativeHost.d.ts.map

package/types/bridge/nativeHost.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nativeHost.d.ts","sourceRoot":"","sources":["../../src/bridge/nativeHost.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAG9C,OAAO,EAA2B,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAEvE,MAAM,WAAW,mBAAmB;IAClC,2DAA2D;IAC3D,OAAO,EAAE,MAAM,CAAC;IAChB,iGAAiG;IACjG,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,4EAA4E;IAC5E,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gDAAgD;IAChD,OAAO,CAAC,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,6EAA6E;IAC7E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,qEAAqE;IACrE,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;IAClC;;;OAGG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7C;;;;;;OAMG;IACH,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAChC;;;OAGG;IACH,QAAQ,IAAI,IAAI,CAAC;IACjB,OAAO,IAAI,IAAI,CAAC;CACjB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAK1E;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,YAAY,CAuD7E"}

package/types/bridge/protocol.d.ts

@@ -1,10 +1,32 @@
-export declare const NAMESPACES: readonly ["evm", "solana", "sys"];
+/**
+ * Version of the wire protocol in docs/bridge-protocol.md. The WebView sends it
+ * in `sys.ready`; bump it only for a change an existing host cannot ignore.
+ */
+export declare const BRIDGE_PROTOCOL_VERSION = 1;
+export declare const NAMESPACES: readonly ["evm", "solana", "sui", "gpg", "auth", "sys"];
 export type Namespace = (typeof NAMESPACES)[number];
 export declare const KINDS: readonly ["req", "res", "event"];
 export type Kind = (typeof KINDS)[number];
+/** Error codes a response can carry. EIP-1193 and JSON-RPC codes keep their meaning. */
+export declare const BridgeErrorCode: {
+    readonly userRejected: 4001;
+    readonly unsupportedMethod: 4200;
+    readonly methodNotFound: -32601;
+    readonly invalidParams: -32602;
+    readonly internal: -32000;
+    /** The page is not served over https (or loopback http), so it cannot sign in. */
+    readonly pageNotHosted: -32001;
+    /** Keycloak refused the request; `data` carries `status`, `error`, `errorDescription`. */
+    readonly keycloakRefused: -32002;
+    /** No wallet or signer for the requested family is available in the page. */
+    readonly walletUnavailable: -32003;
+    /** The account has required actions left and no onboarding client was given. */
+    readonly profileIncomplete: -32004;
+};
 export interface BridgeError {
     code: number;
     message: string;
+    data?: unknown;
 }
 export interface BridgeMessage {
     /** present on req/res, absent on event */
@@ -16,6 +38,17 @@ export interface BridgeMessage {
     result?: unknown;
     error?: BridgeError;
 }
+/** What the WebView announces in `sys.ready`. */
+export interface BridgeReady {
+    protocol: number;
+    namespaces: Namespace[];
+}
+/** An error that crosses the bridge with its code and data intact, in either direction. */
+export declare class BridgeRequestError extends Error {
+    readonly code: number;
+    readonly data?: unknown;
+    constructor(code: number, message: string, data?: unknown);
+}
 export declare function isBridgeMessage(value: unknown): value is BridgeMessage;
 export declare function newRequestId(): string;
 //# sourceMappingURL=protocol.d.ts.map

package/types/bridge/protocol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../src/bridge/protocol.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,UAAU,mCAAoC,CAAC;AAC5D,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpD,eAAO,MAAM,KAAK,kCAAmC,CAAC;AACtD,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1C,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,0CAA0C;IAC1C,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,SAAS,CAAC;IACd,IAAI,EAAE,IAAI,CAAC;IACX,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,WAAW,CAAC;CACrB;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAQtE;AAGD,wBAAgB,YAAY,IAAI,MAAM,CAIrC"}
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../src/bridge/protocol.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC,eAAO,MAAM,UAAU,yDAA0D,CAAC;AAClF,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpD,eAAO,MAAM,KAAK,kCAAmC,CAAC;AACtD,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1C,wFAAwF;AACxF,eAAO,MAAM,eAAe;;;;;;IAM1B,kFAAkF;;IAElF,0FAA0F;;IAE1F,6EAA6E;;IAE7E,gFAAgF;;CAExE,CAAC;AAEX,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,0CAA0C;IAC1C,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,SAAS,CAAC;IACd,IAAI,EAAE,IAAI,CAAC;IACX,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,WAAW,CAAC;CACrB;AAED,iDAAiD;AACjD,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,SAAS,EAAE,CAAC;CACzB;AAED,2FAA2F;AAC3F,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;gBAEZ,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO;CAM1D;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAQtE;AAGD,wBAAgB,YAAY,IAAI,MAAM,CAIrC"}

package/types/core/family.d.ts

@@ -0,0 +1,44 @@
+import type { ScreenDef } from "@multiplatform.one/connectkit";
+import type { ComponentType, ReactNode } from "react";
+import { type WalletMessageRegistry, type WalletMessageSpec } from "./message";
+import type { ConnectionDriver } from "./types";
+/** What a family package hands the core: `eth({chains})`, `sol({rpcUrl})`, `gpg()`. */
+export interface WalletFamilyDefinition {
+    /** Short family id, the one the Keycloak message names: `eth`, `sol`, `sui`, `btc`, `gpg`. */
+    readonly id: string;
+    readonly label: string;
+    /** Other names callers use for the family, such as the ecosystem name `evm` for `eth`. */
+    readonly aliases?: readonly string[];
+    readonly message: WalletMessageSpec;
+    /**
+     * Makes the family's connection driver. The store calls it once, the first
+     * time it needs the family, so a family nobody touches starts nothing.
+     */
+    readonly driver?: () => ConnectionDriver;
+    /** Signs without a wallet connection (GPG). Such a family has no driver. */
+    readonly connectionless?: boolean;
+    /** Modal screens the family contributes. */
+    readonly screens?: readonly ScreenDef[];
+    /** A provider the family needs mounted around the app. */
+    readonly Provider?: ComponentType<{
+        children?: ReactNode;
+    }>;
+}
+export interface WalletFamily extends WalletFamilyDefinition {
+    readonly aliases: readonly string[];
+    readonly connectionless: boolean;
+}
+/** Validates a family definition and freezes it. */
+export declare function defineWalletFamily(definition: WalletFamilyDefinition): WalletFamily;
+export interface FamilyRegistry {
+    /** In the order the app listed them, which is the connect list's order. */
+    readonly families: readonly WalletFamily[];
+    /** The family for an id or alias, or undefined. */
+    get(family: string): WalletFamily | undefined;
+    /** The family for an id or alias. Throws naming the registered families. */
+    require(family: string): WalletFamily;
+    readonly messages: WalletMessageRegistry;
+}
+/** The families one app registered. Refuses a family, id or alias registered twice. */
+export declare function createFamilyRegistry(families: readonly WalletFamily[]): FamilyRegistry;
+//# sourceMappingURL=family.d.ts.map

package/types/core/family.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"family.d.ts","sourceRoot":"","sources":["../../src/core/family.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACtD,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACvB,MAAM,WAAW,CAAC;AAEnB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAEhD,uFAAuF;AACvF,MAAM,WAAW,sBAAsB;IACrC,8FAA8F;IAC9F,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,0FAA0F;IAC1F,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,gBAAgB,CAAC;IACzC,4EAA4E;IAC5E,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,4CAA4C;IAC5C,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;IACxC,0DAA0D;IAC1D,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC;QAAE,QAAQ,CAAC,EAAE,SAAS,CAAA;KAAE,CAAC,CAAC;CAC7D;AAED,MAAM,WAAW,YAAa,SAAQ,sBAAsB;IAC1D,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;CAClC;AAED,oDAAoD;AACpD,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,sBAAsB,GAAG,YAAY,CA8BnF;AAED,MAAM,WAAW,cAAc;IAC7B,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAC;IAC3C,mDAAmD;IACnD,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAAC;IAC9C,4EAA4E;IAC5E,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;CAC1C;AAED,uFAAuF;AACvF,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,GAAG,cAAc,CAsBtF"}

package/types/core/index.d.ts

@@ -0,0 +1,7 @@
+export { createFamilyRegistry, defineWalletFamily, type FamilyRegistry, type WalletFamily, type WalletFamilyDefinition, } from "./family";
+export { createMessageRegistry, formatWalletMessage, type MessageFamily, type WalletMessageRegistry, type WalletMessageSpec, } from "./message";
+export { createConnectionStore, defaultConnectionStorageKey, type ConnectionStore, type ConnectionStoreOptions, type FamilyConnector, } from "./store";
+export { ConnectionProvider, useConnection, useConnectionStore, type ConnectionProviderProps, } from "./react";
+export type { ConnectionDriver, ConnectionState, ConnectionStatus, ConnectionStorage, DriverAccount, DriverConnectOptions, DriverState, SavedConnection, WalletConnector, } from "./types";
+export { UnsupportedClientMethodError, type ChainClient, type ClientCapability, type ClientFamily, } from "../clients/types";
+//# sourceMappingURL=index.d.ts.map

package/types/core/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,sBAAsB,GAC5B,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,GACvB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAC3B,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,eAAe,GACrB,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,KAAK,uBAAuB,GAC7B,MAAM,SAAS,CAAC;AACjB,YAAY,EACV,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,oBAAoB,EACpB,WAAW,EACX,eAAe,EACf,eAAe,GAChB,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,4BAA4B,EAC5B,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,YAAY,GAClB,MAAM,kBAAkB,CAAC"}

package/types/core/message.d.ts

@@ -0,0 +1,44 @@
+import type { WalletMessageOptions } from "../message/buildWalletMessage";
+/**
+ * How one family's sign-in message differs from the shared envelope. A family
+ * package defines its spec; the envelope (domain line, statement, URI, Version,
+ * Chain ID, Nonce, Issued At) is the same bytes the Keycloak verifiers parse.
+ */
+export interface WalletMessageSpec {
+    /** First-line text after the domain, which the verifiers content-sniff. */
+    readonly header: string;
+    /** Default statement. Null means none. */
+    readonly statement: string | null;
+    /** The `Chain ID:` value when the caller gives none. Null omits the line. */
+    readonly chainId: string | null;
+    /** Whether the message names the signer's address. GPG's identity is its key. Default true. */
+    readonly address?: boolean;
+    /**
+     * Honour a numeric `chainId` option. Only EVM chain ids are numbers; elsewhere
+     * a number is a connector's synthetic id and is ignored.
+     */
+    readonly numericChainId?: boolean;
+    /** EIP-4361 keeps an empty line where an omitted statement would be. */
+    readonly keepStatementLine?: boolean;
+    /** Canonical address form, such as EIP-55 for EVM. */
+    readonly normalizeAddress?: (address: string) => string;
+}
+export interface MessageFamily {
+    readonly id: string;
+    readonly aliases?: readonly string[];
+    readonly message: WalletMessageSpec;
+}
+export interface WalletMessageRegistry {
+    /** Registered family ids, in registration order. */
+    readonly families: readonly string[];
+    /** The family id for an id or alias, or undefined. */
+    resolve(family: string): string | undefined;
+    spec(family: string): WalletMessageSpec | undefined;
+    /** Builds the sign-in message. Throws for a family nobody registered. */
+    build(family: string, opts: WalletMessageOptions): string;
+}
+/** Builds one sign-in message from a family spec. `family` only names the family in errors. */
+export declare function formatWalletMessage(spec: WalletMessageSpec, opts: WalletMessageOptions, family?: string): string;
+/** The message half of the family registry: family id or alias to spec. */
+export declare function createMessageRegistry(families: Iterable<MessageFamily>): WalletMessageRegistry;
+//# sourceMappingURL=message.d.ts.map

package/types/core/message.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"message.d.ts","sourceRoot":"","sources":["../../src/core/message.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAG1E;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,0CAA0C;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,+FAA+F;IAC/F,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,wEAAwE;IACxE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IACrC,sDAAsD;IACtD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC;CACzD;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;CACrC;AAED,MAAM,WAAW,qBAAqB;IACpC,oDAAoD;IACpD,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,sDAAsD;IACtD,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAC5C,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAAC;IACpD,yEAAyE;IACzE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,GAAG,MAAM,CAAC;CAC3D;AAaD,+FAA+F;AAC/F,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,iBAAiB,EACvB,IAAI,EAAE,oBAAoB,EAC1B,MAAM,SAAW,GAChB,MAAM,CAiCR;AAED,2EAA2E;AAC3E,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC,aAAa,CAAC,GAAG,qBAAqB,CAsB9F"}

package/types/core/names.d.ts

@@ -0,0 +1,7 @@
+export declare function assertName(kind: string, name: unknown): asserts name is string;
+/** Maps every id and alias to its entry's id, refusing a name two entries claim. */
+export declare function nameTable(entries: Iterable<{
+    readonly id: string;
+    readonly aliases?: readonly string[];
+}>): Map<string, string>;
+//# sourceMappingURL=names.d.ts.map

package/types/core/names.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"names.d.ts","sourceRoot":"","sources":["../../src/core/names.ts"],"names":[],"mappings":"AAEA,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,IAAI,MAAM,CAI9E;AAED,oFAAoF;AACpF,wBAAgB,SAAS,CACvB,OAAO,EAAE,QAAQ,CAAC;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC,GAC/E,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAiBrB"}

package/types/core/react.d.ts

@@ -0,0 +1,14 @@
+import { type ReactNode } from "react";
+import type { ConnectionStore } from "./store";
+import type { ConnectionState } from "./types";
+export interface ConnectionProviderProps {
+    store: ConnectionStore;
+    children?: ReactNode;
+}
+/** Makes one connection store the app's. Web3Provider mounts this once it owns a store. */
+export declare function ConnectionProvider({ store, children }: ConnectionProviderProps): import("react").FunctionComponentElement<import("react").ProviderProps<ConnectionStore | null>>;
+/** The store under the nearest ConnectionProvider, for connect, disconnect and reconnect. */
+export declare function useConnectionStore(): ConnectionStore;
+/** The active connection: status, family, connector, address, chainId and client. */
+export declare function useConnection(): ConnectionState;
+//# sourceMappingURL=react.d.ts.map

package/types/core/react.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"react.d.ts","sourceRoot":"","sources":["../../src/core/react.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,SAAS,EACf,MAAM,OAAO,CAAC;AACf,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAI/C,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,eAAe,CAAC;IACvB,QAAQ,CAAC,EAAE,SAAS,CAAC;CACtB;AAED,2FAA2F;AAC3F,wBAAgB,kBAAkB,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,uBAAuB,mGAE9E;AAED,6FAA6F;AAC7F,wBAAgB,kBAAkB,IAAI,eAAe,CAIpD;AAED,qFAAqF;AACrF,wBAAgB,aAAa,IAAI,eAAe,CAG/C"}