@openkey/sdk 0.3.0 → 0.5.0

package/dist/index.d.mts

@@ -8,6 +8,8 @@ type OpenKeyMode = 'iframe' | 'popup' | 'redirect';
 interface OpenKeyConfig {
     /** OpenKey host URL (default: https://openkey.so) */
     host?: string;
+    /** OAuth API host URL (default: derived from host by prefixing 'api.') */
+    oauthHost?: string;
     /** App identifier for display */
     appName?: string;
     /** UI mode: 'iframe' (default), 'popup', or 'redirect' */
@@ -74,6 +76,7 @@ interface OAuthTokenResponse {
 }
 declare class OpenKey {
     private host;
+    private oauthHost;
     private appName;
     private mode;
     private config;
@@ -82,6 +85,12 @@ declare class OpenKey {
     private discoveredProviders;
     private sessionToken;
     constructor(config?: OpenKeyConfig);
+    /**
+     * Derive the OAuth API host from the main host by prefixing 'api.'
+     * @param host - The main host URL
+     * @returns The derived OAuth API host URL
+     */
+    private deriveOAuthHost;
     /**
      * Connect to OpenKey and get user's wallet address
      * Opens auth flow for user to select/create a key

package/dist/index.d.ts

@@ -8,6 +8,8 @@ type OpenKeyMode = 'iframe' | 'popup' | 'redirect';
 interface OpenKeyConfig {
     /** OpenKey host URL (default: https://openkey.so) */
     host?: string;
+    /** OAuth API host URL (default: derived from host by prefixing 'api.') */
+    oauthHost?: string;
     /** App identifier for display */
     appName?: string;
     /** UI mode: 'iframe' (default), 'popup', or 'redirect' */
@@ -74,6 +76,7 @@ interface OAuthTokenResponse {
 }
 declare class OpenKey {
     private host;
+    private oauthHost;
     private appName;
     private mode;
     private config;
@@ -82,6 +85,12 @@ declare class OpenKey {
     private discoveredProviders;
     private sessionToken;
     constructor(config?: OpenKeyConfig);
+    /**
+     * Derive the OAuth API host from the main host by prefixing 'api.'
+     * @param host - The main host URL
+     * @returns The derived OAuth API host URL
+     */
+    private deriveOAuthHost;
     /**
      * Connect to OpenKey and get user's wallet address
      * Opens auth flow for user to select/create a key

package/dist/index.js

@@ -1,4 +1,4 @@
-"use strict";var k=Object.defineProperty;var O=Object.getOwnPropertyDescriptor;var I=Object.getOwnPropertyNames;var A=Object.prototype.hasOwnProperty;var C=(a,e)=>{for(var t in e)k(a,t,{get:e[t],enumerable:!0})},M=(a,e,t,s)=>{if(e&&typeof e=="object"||typeof e=="function")for(let r of I(e))!A.call(a,r)&&r!==t&&k(a,r,{get:()=>e[r],enumerable:!(s=O(e,r))||s.enumerable});return a};var S=a=>M(k({},"__esModule",{value:!0}),a);var K={};C(K,{OpenKey:()=>f,OpenKeyEIP1193Provider:()=>P,default:()=>N,getOpenKey:()=>L});module.exports=S(K);var U="https://openkey.so";var w="openkey_oauth",v=class{root;shadow;iframe;onClose;onMessage;messageHandler;host;constructor(e){this.host=e.host,this.onClose=e.onClose,this.onMessage=e.onMessage;let t=window.matchMedia("(max-width: 639px)").matches;this.root=document.createElement("div"),this.shadow=this.root.attachShadow({mode:"closed"});let s=document.createElement("style");s.textContent=`
+"use strict";var k=Object.defineProperty;var O=Object.getOwnPropertyDescriptor;var I=Object.getOwnPropertyNames;var A=Object.prototype.hasOwnProperty;var C=(a,e)=>{for(var t in e)k(a,t,{get:e[t],enumerable:!0})},M=(a,e,t,s)=>{if(e&&typeof e=="object"||typeof e=="function")for(let r of I(e))!A.call(a,r)&&r!==t&&k(a,r,{get:()=>e[r],enumerable:!(s=O(e,r))||s.enumerable});return a};var S=a=>M(k({},"__esModule",{value:!0}),a);var H={};C(H,{OpenKey:()=>f,OpenKeyEIP1193Provider:()=>P,default:()=>N,getOpenKey:()=>L});module.exports=S(H);var U="https://openkey.so";var w="openkey_oauth",E=class{root;shadow;iframe;onClose;onMessage;messageHandler;host;constructor(e){this.host=e.host,this.onClose=e.onClose,this.onMessage=e.onMessage;let t=window.matchMedia("(max-width: 639px)").matches;this.root=document.createElement("div"),this.shadow=this.root.attachShadow({mode:"closed"});let s=document.createElement("style");s.textContent=`
       :host{all:initial}
       .ok-backdrop{position:fixed;inset:0;background:rgba(0,0,0,0.4);backdrop-filter:blur(4px);z-index:999999;display:flex;align-items:${t?"flex-end":"center"};justify-content:center;animation:ok-fade-in 150ms ease-out}
       .ok-card{position:relative;background:#fafafa;width:${t?"100%":"400px"};border-radius:${t?"16px 16px 0 0":"16px"};box-shadow:0 25px 50px -12px rgba(0,0,0,0.25);overflow:hidden;overflow-y:auto;animation:${t?"ok-slide-up 250ms ease-out":"ok-scale-in 200ms ease-out"};max-height:90vh}
@@ -37,5 +37,5 @@
         .wp-cancel{color:#9ca3af}
         .wp-cancel:hover{background:#262626;color:#f3f4f6}
       }
-    `;let s=document.createElement("div");s.className="wp-backdrop",s.addEventListener("click",n=>{n.target===s&&(this.destroy(),e.onCancel())});let r=document.createElement("div");r.className="wp-card";let o=document.createElement("h2");if(o.className="wp-title",o.textContent="Select a wallet",r.appendChild(o),e.providers.length===0){let n=document.createElement("div");n.className="wp-empty",n.textContent="No wallets detected",r.appendChild(n)}else{let n=document.createElement("ul");n.className="wp-list";for(let{info:l,provider:u}of e.providers){let c=document.createElement("button");if(c.className="wp-item",l.icon){let i=document.createElement("img");i.className="wp-icon",i.src=l.icon,i.alt=l.name,c.appendChild(i)}let h=document.createElement("span");h.textContent=l.name,c.appendChild(h),c.addEventListener("click",()=>{this.destroy(),e.onSelect(u)}),n.appendChild(c)}r.appendChild(n)}let p=document.createElement("button");p.className="wp-cancel",p.textContent="Cancel",p.addEventListener("click",()=>{this.destroy(),e.onCancel()}),r.appendChild(p),s.appendChild(r),this.shadow.appendChild(t),this.shadow.appendChild(s),document.body.appendChild(this.root)}destroy(){this.root.remove()}};function g(a="Opening in new window\u2026",e="info"){let t=e==="error"?"#dc2626":"#1f2937",s=document.createElement("div"),r=s.attachShadow({mode:"closed"});r.innerHTML=`<style>:host{all:initial}.ok-toast{position:fixed;top:16px;right:16px;z-index:1000000;background:${t};color:#f9fafb;padding:10px 16px;border-radius:8px;font:14px/1.4 system-ui,sans-serif;box-shadow:0 4px 12px rgba(0,0,0,0.15);animation:ok-t-in 200ms ease-out;max-width:360px}@keyframes ok-t-in{from{opacity:0;transform:translateY(-8px)}to{opacity:1;transform:translateY(0)}}</style><div class="ok-toast">${a}</div>`,document.body.appendChild(s),setTimeout(()=>s.remove(),4e3)}function b(a){return btoa(String.fromCharCode(...a)).replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"")}async function _(){let a=new Uint8Array(32);return crypto.getRandomValues(a),b(a)}async function R(a){let t=new TextEncoder().encode(a),s=await crypto.subtle.digest("SHA-256",t);return b(new Uint8Array(s))}function D(){let a=new Uint8Array(16);return crypto.getRandomValues(a),b(a)}var x=class extends Error{constructor(e){super(e),this.name="ExternalWalletError"}},f=class{host;appName;mode;config;popup=null;lastAuth=null;discoveredProviders=[];sessionToken=null;constructor(e={}){this.config=e,this.host=e.host||U,this.appName=e.appName||window.location.hostname,this.mode=e.mode??"iframe",typeof window<"u"&&(this.discoveredProviders=[],window.addEventListener("eip6963:announceProvider",t=>{this.discoveredProviders.push(t.detail)}),window.dispatchEvent(new Event("eip6963:requestProvider")))}async connect(e){let t=await this.openFlow("connect",{type:"openkey:auth:request",appName:this.appName},e?.mode);return this.lastAuth=t,t}async linkWallet(e){return this.openFlow("link-wallet",{type:"openkey:link-wallet:request"},e?.mode)}async signMessage(e,t){return this.lastAuth?.keyType==="EXTERNAL"?this.signWithExternalWallet(e):this.signWithOpenKey(e,t?.mode)}async signTypedData(e,t){return this.lastAuth?.keyType==="EXTERNAL"?this.signTypedDataWithExternalWallet(e):this.signTypedDataWithOpenKey(e,t?.mode)}async findWalletProvider(e){if(this.config.externalProvider)return this.config.externalProvider;for(let{provider:t}of this.discoveredProviders)try{if((await t.request({method:"eth_accounts"})).some(r=>r.toLowerCase()===e.toLowerCase()))return t}catch{}if(typeof window<"u"&&window.ethereum){let t=window.ethereum;try{if((await t.request({method:"eth_accounts"})).some(r=>r.toLowerCase()===e.toLowerCase()))return t}catch{}}throw new x("External wallet not found. Connect the wallet that owns this key and try again.")}async signWithExternalWallet(e){let t;try{t=await this.findWalletProvider(this.lastAuth.address)}catch(s){throw g(s.message,"error"),s}try{let s=this.toHex(e.message);return{signature:await t.request({method:"personal_sign",params:[s,this.lastAuth.address]}),address:this.lastAuth.address}}catch(s){let r=s?.message?.includes("not been authorized")?"Wallet rejected the request. Approve the connection in your wallet and try again.":s?.message||"Signing failed";throw g(r,"error"),new Error(r)}}async signTypedDataWithExternalWallet(e){let t;try{t=await this.findWalletProvider(this.lastAuth.address)}catch(s){throw g(s.message,"error"),s}try{return{signature:await t.request({method:"eth_signTypedData_v4",params:[this.lastAuth.address,JSON.stringify(e)]}),address:this.lastAuth.address}}catch(s){let r=s?.message?.includes("not been authorized")?"Wallet rejected the request. Approve the connection in your wallet and try again.":s?.message||"Signing failed";throw g(r,"error"),new Error(r)}}signWithOpenKey(e,t){return this.openFlow("sign",{type:"openkey:sign:request",message:e.message,keyId:e.keyId,sessionToken:this.sessionToken||void 0},t)}signTypedDataWithOpenKey(e,t){return this.openFlow("sign-typed-data",{type:"openkey:signTypedData:request",data:e,sessionToken:this.sessionToken||void 0},t)}toHex(e){return"0x"+Array.from(new TextEncoder().encode(e)).map(t=>t.toString(16).padStart(2,"0")).join("")}async isConnected(){try{let e=await fetch(`${this.host}/api/auth/session`,{credentials:"include"});return e.ok?!!(await e.json()).user:!1}catch{return!1}}oauth={connect:async e=>{let t=await _(),s=await R(t),r=e.state||D();sessionStorage.setItem(w,JSON.stringify({verifier:t,state:r}));let o=new URL(`${this.host}/api/auth/oauth2/authorize`);return o.searchParams.set("client_id",e.clientId),o.searchParams.set("redirect_uri",e.redirectUri),o.searchParams.set("response_type","code"),o.searchParams.set("scope","openid"),o.searchParams.set("state",r),o.searchParams.set("code_challenge",s),o.searchParams.set("code_challenge_method","S256"),this.openOAuthFlow(o.toString(),r,e.redirectUri)},exchangeCode:async(e,t)=>{let s=sessionStorage.getItem(w);if(!s)throw new Error("No PKCE verifier found. Start a new OAuth flow.");let{verifier:r}=JSON.parse(s),o=await fetch(`${this.host}/api/auth/oauth2/token`,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"authorization_code",code:e,redirect_uri:t.redirectUri,client_id:t.clientId,code_verifier:r})});if(sessionStorage.removeItem(w),!o.ok){let p=await o.json();throw new Error(p.error_description||"Token exchange failed")}return o.json()},verifyState:e=>{let t=sessionStorage.getItem(w);if(!t)return!1;let{state:s}=JSON.parse(t);return s===e},parseCallback:e=>{let t=new URL(e||window.location.href),s=t.searchParams.get("error");if(s)return{error:s,errorDescription:t.searchParams.get("error_description")||void 0};let r=t.searchParams.get("code"),o=t.searchParams.get("state");return!r||!o?{error:"missing_params",errorDescription:"Missing code or state parameter"}:{code:r,state:o}}};openOAuthFlow(e,t,s){return new Promise((r,o)=>{this.mode!=="redirect"?this.openOAuthPopup(e,t,s,r,o):window.location.href=e})}openOAuthPopup(e,t,s,r,o){let p=window.screenX+(window.outerWidth-400)/2,n=window.screenY+(window.outerHeight-600)/2;if(this.popup=window.open(e,"openkey-oauth",`width=400,height=600,left=${p},top=${n},popup=true`),!this.popup){o({code:"POPUP_BLOCKED",message:"Popup was blocked. Please allow popups or use redirect mode."});return}let l=new URL(s).origin,u=setInterval(()=>{try{if(this.popup?.closed){clearInterval(u),clearTimeout(c),o({code:"USER_CANCELLED",message:"User closed the popup"});return}let h=this.popup?.location?.href;if(h&&h.startsWith(l)){clearInterval(u),clearTimeout(c);let i=new URL(h),m=i.searchParams.get("code"),d=i.searchParams.get("state"),y=i.searchParams.get("error");if(this.popup?.close(),y){o({code:"UNAUTHORIZED",message:i.searchParams.get("error_description")||y});return}if(d!==t){o({code:"STATE_MISMATCH",message:"State mismatch - possible CSRF attack"});return}m?r({code:m,state:d}):o({code:"UNAUTHORIZED",message:"Authorization failed - no code returned"})}}catch{}},100),c=setTimeout(()=>{clearInterval(u),this.popup?.close(),o({code:"TIMEOUT",message:"OAuth flow timed out"})},3e5)}resolveMode(e){return e??this.mode}async openFlow(e,t,s){let r=this.resolveMode(s),o=encodeURIComponent(window.location.origin);if(r==="popup"){let n=`${this.host}/widget/${e}?origin=${o}`;return new Promise((l,u)=>this.openPopup(n,t,l,u))}if(r==="redirect"){let n=`${this.host}/widget/${e}?origin=${o}`;return window.location.href=n,new Promise(()=>{})}let p=`${this.host}/widget/embed/${e}?origin=${o}`;return this.openIframeModal(p,e,t,o)}openIframeModal(e,t,s,r){return new Promise((o,p)=>{let n=!1,l=!1,u=null,c=d=>{l||(l=!0,d())},h=()=>{clearTimeout(i),clearTimeout(m),u?.destroy(),u=null};u=new v({url:e,host:this.host,onClose:()=>{c(()=>{clearTimeout(i),clearTimeout(m),u=null,p({code:"USER_CANCELLED",message:"User cancelled the request"})})},onMessage:d=>{if(d.type==="openkey:ready"){n=!0,u?.postMessage(s);return}if(d.type==="openkey:close"){c(()=>{h(),p({code:"USER_CANCELLED",message:"User cancelled the request"})});return}if(d.type==="openkey:link-wallet:delegate"){this.handleWalletLinkDelegation(u);return}(d.type==="openkey:auth:response"||d.type==="openkey:sign:response"||d.type==="openkey:signTypedData:response"||d.type==="openkey:link-wallet:response")&&c(()=>{h(),d.success?d.type==="openkey:auth:response"?(d.sessionToken&&(this.sessionToken=d.sessionToken),o({address:d.address,keyId:d.keyId,keyType:d.keyType||"MANAGED"})):d.type==="openkey:link-wallet:response"?o({address:d.address,keyId:d.keyId}):o({signature:d.signature,address:d.address}):p(d.error)})}});let i=setTimeout(()=>{if(n||l)return;h(),console.warn("OpenKey: iframe blocked by CSP, falling back to popup. Add frame-src https://openkey.so to your CSP."),g();let d=`${this.host}/widget/${t}?origin=${r}`;this.openPopup(d,s,y=>c(()=>o(y)),y=>c(()=>p(y)))},3e3),m=setTimeout(()=>{c(()=>{h(),p({code:"TIMEOUT",message:"Request timed out"})})},3e5)})}handleWalletLinkDelegation(e){let t=s=>e.postMessage(s);new T({providers:this.discoveredProviders,onCancel:()=>{t({type:"openkey:link-wallet:result",success:!1,error:{code:"USER_CANCELLED",message:"Wallet linking cancelled"}})},onSelect:async s=>{try{let o=(await s.request({method:"eth_requestAccounts"}))[0];if(!o)throw new Error("No account returned");let p=await fetch(`${this.host}/api/keys/link/challenge`,{method:"POST",credentials:"include"});if(!p.ok)throw new Error("Failed to get challenge");let{message:n}=await p.json(),l=this.toHex(n),u=await s.request({method:"personal_sign",params:[l,o]}),c=await fetch(`${this.host}/api/keys/link`,{method:"POST",headers:{"Content-Type":"application/json"},credentials:"include",body:JSON.stringify({address:o,signature:u,message:n})});if(!c.ok){let i=await c.json();throw new Error(i.error||"Failed to link wallet")}let{key:h}=await c.json();t({type:"openkey:link-wallet:result",success:!0,address:h.address,keyId:h.id})}catch(r){t({type:"openkey:link-wallet:result",success:!1,error:{code:"UNKNOWN",message:r.message||"Wallet linking failed"}})}}})}openPopup(e,t,s,r){let o=window.screenX+(window.outerWidth-400)/2,p=window.screenY+(window.outerHeight-600)/2;if(this.popup=window.open(e,"openkey",`width=400,height=600,left=${o},top=${p},popup=true`),!this.popup){r({code:"POPUP_BLOCKED",message:"Popup was blocked. Please allow popups for this site."});return}let n=()=>{window.removeEventListener("message",c),clearInterval(l),clearTimeout(u)},l=setInterval(()=>{this.popup?.closed&&(n(),r({code:"USER_CANCELLED",message:"User closed the popup"}))},500),u=setTimeout(()=>{n(),this.popup?.close(),r({code:"TIMEOUT",message:"Request timed out"})},3e5),c=h=>{if(h.origin!==this.host)return;let i=h.data;if(i.type==="openkey:ready"){this.popup?.postMessage(t,this.host);return}if(i.type==="openkey:close"){n(),this.popup?.close(),r({code:"USER_CANCELLED",message:"User cancelled the request"});return}(i.type==="openkey:auth:response"||i.type==="openkey:sign:response"||i.type==="openkey:signTypedData:response"||i.type==="openkey:link-wallet:response")&&(n(),this.popup?.close(),i.success?i.type==="openkey:auth:response"?(i.sessionToken&&(this.sessionToken=i.sessionToken),s({address:i.address,keyId:i.keyId,keyType:i.keyType||"MANAGED"})):i.type==="openkey:link-wallet:response"?s({address:i.address,keyId:i.keyId}):s({signature:i.signature,address:i.address}):r(i.error))};window.addEventListener("message",c)}disconnect(){this.popup?.close(),this.popup=null}},P=class{openkey;address;keyId;keyType;constructor(e,t){this.openkey=e,this.address=t.address,this.keyId=t.keyId,this.keyType=t.keyType}async request({method:e,params:t}){switch(e){case"eth_accounts":case"eth_requestAccounts":return[this.address];case"eth_chainId":return"0x1";case"personal_sign":{if(this.keyType==="EXTERNAL")try{return await(await this.openkey.findWalletProvider(this.address)).request({method:e,params:t})}catch(o){throw g(o?.message||"External wallet signing failed","error"),o}let s=this.hexToString(t[0]);return(await this.openkey.signMessage({message:s,keyId:this.keyId})).signature}case"eth_signTypedData_v4":{if(this.keyType==="EXTERNAL")try{return await(await this.openkey.findWalletProvider(this.address)).request({method:e,params:t})}catch(o){throw g(o?.message||"External wallet signing failed","error"),o}let s=JSON.parse(t[1]);return(await this.openkey.signTypedData(s)).signature}default:throw new Error(`Unsupported method: ${e}`)}}hexToString(e){let t=new Uint8Array((e.startsWith("0x")?e.slice(2):e).match(/.{1,2}/g).map(s=>parseInt(s,16)));return new TextDecoder().decode(t)}},N=f,E=null;function L(a){return(!E||a)&&(E=new f(a)),E}0&&(module.exports={OpenKey,OpenKeyEIP1193Provider,getOpenKey});
+    `;let s=document.createElement("div");s.className="wp-backdrop",s.addEventListener("click",n=>{n.target===s&&(this.destroy(),e.onCancel())});let r=document.createElement("div");r.className="wp-card";let o=document.createElement("h2");if(o.className="wp-title",o.textContent="Select a wallet",r.appendChild(o),e.providers.length===0){let n=document.createElement("div");n.className="wp-empty",n.textContent="No wallets detected",r.appendChild(n)}else{let n=document.createElement("ul");n.className="wp-list";for(let{info:l,provider:u}of e.providers){let c=document.createElement("button");if(c.className="wp-item",l.icon){let i=document.createElement("img");i.className="wp-icon",i.src=l.icon,i.alt=l.name,c.appendChild(i)}let h=document.createElement("span");h.textContent=l.name,c.appendChild(h),c.addEventListener("click",()=>{this.destroy(),e.onSelect(u)}),n.appendChild(c)}r.appendChild(n)}let p=document.createElement("button");p.className="wp-cancel",p.textContent="Cancel",p.addEventListener("click",()=>{this.destroy(),e.onCancel()}),r.appendChild(p),s.appendChild(r),this.shadow.appendChild(t),this.shadow.appendChild(s),document.body.appendChild(this.root)}destroy(){this.root.remove()}};function g(a="Opening in new window\u2026",e="info"){let t=e==="error"?"#dc2626":"#1f2937",s=document.createElement("div"),r=s.attachShadow({mode:"closed"});r.innerHTML=`<style>:host{all:initial}.ok-toast{position:fixed;top:16px;right:16px;z-index:1000000;background:${t};color:#f9fafb;padding:10px 16px;border-radius:8px;font:14px/1.4 system-ui,sans-serif;box-shadow:0 4px 12px rgba(0,0,0,0.15);animation:ok-t-in 200ms ease-out;max-width:360px}@keyframes ok-t-in{from{opacity:0;transform:translateY(-8px)}to{opacity:1;transform:translateY(0)}}</style><div class="ok-toast">${a}</div>`,document.body.appendChild(s),setTimeout(()=>s.remove(),4e3)}function b(a){return btoa(String.fromCharCode(...a)).replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"")}async function R(){let a=new Uint8Array(32);return crypto.getRandomValues(a),b(a)}async function _(a){let t=new TextEncoder().encode(a),s=await crypto.subtle.digest("SHA-256",t);return b(new Uint8Array(s))}function D(){let a=new Uint8Array(16);return crypto.getRandomValues(a),b(a)}var x=class extends Error{constructor(e){super(e),this.name="ExternalWalletError"}},f=class{host;oauthHost;appName;mode;config;popup=null;lastAuth=null;discoveredProviders=[];sessionToken=null;constructor(e={}){this.config=e,this.host=e.host||U,this.oauthHost=e.oauthHost||this.deriveOAuthHost(this.host),this.appName=e.appName||window.location.hostname,this.mode=e.mode??"iframe",typeof window<"u"&&(this.discoveredProviders=[],window.addEventListener("eip6963:announceProvider",t=>{this.discoveredProviders.push(t.detail)}),window.dispatchEvent(new Event("eip6963:requestProvider")))}deriveOAuthHost(e){try{let t=new URL(e);return t.hostname="api."+t.hostname,t.toString().replace(/\/$/,"")}catch{return"https://api.openkey.so"}}async connect(e){let t=await this.openFlow("connect",{type:"openkey:auth:request",appName:this.appName},e?.mode);return this.lastAuth=t,t}async linkWallet(e){return this.openFlow("link-wallet",{type:"openkey:link-wallet:request"},e?.mode)}async signMessage(e,t){return this.lastAuth?.keyType==="EXTERNAL"?this.signWithExternalWallet(e):this.signWithOpenKey(e,t?.mode)}async signTypedData(e,t){return this.lastAuth?.keyType==="EXTERNAL"?this.signTypedDataWithExternalWallet(e):this.signTypedDataWithOpenKey(e,t?.mode)}async findWalletProvider(e){if(this.config.externalProvider)return this.config.externalProvider;for(let{provider:t}of this.discoveredProviders)try{if((await t.request({method:"eth_accounts"})).some(r=>r.toLowerCase()===e.toLowerCase()))return t}catch{}if(typeof window<"u"&&window.ethereum){let t=window.ethereum;try{if((await t.request({method:"eth_accounts"})).some(r=>r.toLowerCase()===e.toLowerCase()))return t}catch{}}throw new x("External wallet not found. Connect the wallet that owns this key and try again.")}async signWithExternalWallet(e){let t;try{t=await this.findWalletProvider(this.lastAuth.address)}catch(s){throw g(s.message,"error"),s}try{let s=this.toHex(e.message);return{signature:await t.request({method:"personal_sign",params:[s,this.lastAuth.address]}),address:this.lastAuth.address}}catch(s){let r=s?.message?.includes("not been authorized")?"Wallet rejected the request. Approve the connection in your wallet and try again.":s?.message||"Signing failed";throw g(r,"error"),new Error(r)}}async signTypedDataWithExternalWallet(e){let t;try{t=await this.findWalletProvider(this.lastAuth.address)}catch(s){throw g(s.message,"error"),s}try{return{signature:await t.request({method:"eth_signTypedData_v4",params:[this.lastAuth.address,JSON.stringify(e)]}),address:this.lastAuth.address}}catch(s){let r=s?.message?.includes("not been authorized")?"Wallet rejected the request. Approve the connection in your wallet and try again.":s?.message||"Signing failed";throw g(r,"error"),new Error(r)}}signWithOpenKey(e,t){return this.openFlow("sign",{type:"openkey:sign:request",message:e.message,keyId:e.keyId,sessionToken:this.sessionToken||void 0},t)}signTypedDataWithOpenKey(e,t){return this.openFlow("sign-typed-data",{type:"openkey:signTypedData:request",data:e,sessionToken:this.sessionToken||void 0},t)}toHex(e){return"0x"+Array.from(new TextEncoder().encode(e)).map(t=>t.toString(16).padStart(2,"0")).join("")}async isConnected(){try{let e=await fetch(`${this.host}/api/auth/session`,{credentials:"include"});return e.ok?!!(await e.json()).user:!1}catch{return!1}}oauth={connect:async e=>{let t=await R(),s=await _(t),r=e.state||D();sessionStorage.setItem(w,JSON.stringify({verifier:t,state:r}));let o=new URL(`${this.oauthHost}/api/auth/oauth2/authorize`);return o.searchParams.set("client_id",e.clientId),o.searchParams.set("redirect_uri",e.redirectUri),o.searchParams.set("response_type","code"),o.searchParams.set("scope","openid"),o.searchParams.set("state",r),o.searchParams.set("code_challenge",s),o.searchParams.set("code_challenge_method","S256"),this.openOAuthFlow(o.toString(),r,e.redirectUri)},exchangeCode:async(e,t)=>{let s=sessionStorage.getItem(w);if(!s)throw new Error("No PKCE verifier found. Start a new OAuth flow.");let{verifier:r}=JSON.parse(s),o=await fetch(`${this.oauthHost}/api/auth/oauth2/token`,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"authorization_code",code:e,redirect_uri:t.redirectUri,client_id:t.clientId,code_verifier:r})});if(sessionStorage.removeItem(w),!o.ok){let p=await o.json();throw new Error(p.error_description||"Token exchange failed")}return o.json()},verifyState:e=>{let t=sessionStorage.getItem(w);if(!t)return!1;let{state:s}=JSON.parse(t);return s===e},parseCallback:e=>{let t=new URL(e||window.location.href),s=t.searchParams.get("error");if(s)return{error:s,errorDescription:t.searchParams.get("error_description")||void 0};let r=t.searchParams.get("code"),o=t.searchParams.get("state");return!r||!o?{error:"missing_params",errorDescription:"Missing code or state parameter"}:{code:r,state:o}}};openOAuthFlow(e,t,s){return new Promise((r,o)=>{this.mode!=="redirect"?this.openOAuthPopup(e,t,s,r,o):window.location.href=e})}openOAuthPopup(e,t,s,r,o){let p=window.screenX+(window.outerWidth-400)/2,n=window.screenY+(window.outerHeight-600)/2;if(this.popup=window.open(e,"openkey-oauth",`width=400,height=600,left=${p},top=${n},popup=true`),!this.popup){o({code:"POPUP_BLOCKED",message:"Popup was blocked. Please allow popups or use redirect mode."});return}let l=new URL(s).origin,u=setInterval(()=>{try{if(this.popup?.closed){clearInterval(u),clearTimeout(c),o({code:"USER_CANCELLED",message:"User closed the popup"});return}let h=this.popup?.location?.href;if(h&&h.startsWith(l)){clearInterval(u),clearTimeout(c);let i=new URL(h),m=i.searchParams.get("code"),d=i.searchParams.get("state"),y=i.searchParams.get("error");if(this.popup?.close(),y){o({code:"UNAUTHORIZED",message:i.searchParams.get("error_description")||y});return}if(d!==t){o({code:"STATE_MISMATCH",message:"State mismatch - possible CSRF attack"});return}m?r({code:m,state:d}):o({code:"UNAUTHORIZED",message:"Authorization failed - no code returned"})}}catch{}},100),c=setTimeout(()=>{clearInterval(u),this.popup?.close(),o({code:"TIMEOUT",message:"OAuth flow timed out"})},3e5)}resolveMode(e){return e??this.mode}async openFlow(e,t,s){let r=this.resolveMode(s),o=encodeURIComponent(window.location.origin);if(r==="popup"){let n=`${this.host}/widget/${e}?origin=${o}`;return new Promise((l,u)=>this.openPopup(n,t,l,u))}if(r==="redirect"){let n=`${this.host}/widget/${e}?origin=${o}`;return window.location.href=n,new Promise(()=>{})}let p=`${this.host}/widget/embed/${e}?origin=${o}`;return this.openIframeModal(p,e,t,o)}openIframeModal(e,t,s,r){return new Promise((o,p)=>{let n=!1,l=!1,u=null,c=d=>{l||(l=!0,d())},h=()=>{clearTimeout(i),clearTimeout(m),u?.destroy(),u=null};u=new E({url:e,host:this.host,onClose:()=>{c(()=>{clearTimeout(i),clearTimeout(m),u=null,p({code:"USER_CANCELLED",message:"User cancelled the request"})})},onMessage:d=>{if(d.type==="openkey:ready"){n=!0,u?.postMessage(s);return}if(d.type==="openkey:close"){c(()=>{h(),p({code:"USER_CANCELLED",message:"User cancelled the request"})});return}if(d.type==="openkey:link-wallet:delegate"){this.handleWalletLinkDelegation(u);return}(d.type==="openkey:auth:response"||d.type==="openkey:sign:response"||d.type==="openkey:signTypedData:response"||d.type==="openkey:link-wallet:response")&&c(()=>{h(),d.success?d.type==="openkey:auth:response"?(d.sessionToken&&(this.sessionToken=d.sessionToken),o({address:d.address,keyId:d.keyId,keyType:d.keyType||"MANAGED"})):d.type==="openkey:link-wallet:response"?o({address:d.address,keyId:d.keyId}):o({signature:d.signature,address:d.address}):p(d.error)})}});let i=setTimeout(()=>{if(n||l)return;h(),console.warn("OpenKey: iframe blocked by CSP, falling back to popup. Add frame-src https://openkey.so to your CSP."),g();let d=`${this.host}/widget/${t}?origin=${r}`;this.openPopup(d,s,y=>c(()=>o(y)),y=>c(()=>p(y)))},3e3),m=setTimeout(()=>{c(()=>{h(),p({code:"TIMEOUT",message:"Request timed out"})})},3e5)})}handleWalletLinkDelegation(e){let t=s=>e.postMessage(s);new T({providers:this.discoveredProviders,onCancel:()=>{t({type:"openkey:link-wallet:result",success:!1,error:{code:"USER_CANCELLED",message:"Wallet linking cancelled"}})},onSelect:async s=>{try{let o=(await s.request({method:"eth_requestAccounts"}))[0];if(!o)throw new Error("No account returned");let p=await fetch(`${this.host}/api/keys/link/challenge`,{method:"POST",credentials:"include"});if(!p.ok)throw new Error("Failed to get challenge");let{message:n}=await p.json(),l=this.toHex(n),u=await s.request({method:"personal_sign",params:[l,o]}),c=await fetch(`${this.host}/api/keys/link`,{method:"POST",headers:{"Content-Type":"application/json"},credentials:"include",body:JSON.stringify({address:o,signature:u,message:n})});if(!c.ok){let i=await c.json();throw new Error(i.error||"Failed to link wallet")}let{key:h}=await c.json();t({type:"openkey:link-wallet:result",success:!0,address:h.address,keyId:h.id})}catch(r){t({type:"openkey:link-wallet:result",success:!1,error:{code:"UNKNOWN",message:r.message||"Wallet linking failed"}})}}})}openPopup(e,t,s,r){let o=window.screenX+(window.outerWidth-400)/2,p=window.screenY+(window.outerHeight-600)/2;if(this.popup=window.open(e,"openkey",`width=400,height=600,left=${o},top=${p},popup=true`),!this.popup){r({code:"POPUP_BLOCKED",message:"Popup was blocked. Please allow popups for this site."});return}let n=()=>{window.removeEventListener("message",c),clearInterval(l),clearTimeout(u)},l=setInterval(()=>{this.popup?.closed&&(n(),r({code:"USER_CANCELLED",message:"User closed the popup"}))},500),u=setTimeout(()=>{n(),this.popup?.close(),r({code:"TIMEOUT",message:"Request timed out"})},3e5),c=h=>{if(h.origin!==this.host)return;let i=h.data;if(i.type==="openkey:ready"){this.popup?.postMessage(t,this.host);return}if(i.type==="openkey:close"){n(),this.popup?.close(),r({code:"USER_CANCELLED",message:"User cancelled the request"});return}(i.type==="openkey:auth:response"||i.type==="openkey:sign:response"||i.type==="openkey:signTypedData:response"||i.type==="openkey:link-wallet:response")&&(n(),this.popup?.close(),i.success?i.type==="openkey:auth:response"?(i.sessionToken&&(this.sessionToken=i.sessionToken),s({address:i.address,keyId:i.keyId,keyType:i.keyType||"MANAGED"})):i.type==="openkey:link-wallet:response"?s({address:i.address,keyId:i.keyId}):s({signature:i.signature,address:i.address}):r(i.error))};window.addEventListener("message",c)}disconnect(){this.popup?.close(),this.popup=null}},P=class{openkey;address;keyId;keyType;constructor(e,t){this.openkey=e,this.address=t.address,this.keyId=t.keyId,this.keyType=t.keyType}async request({method:e,params:t}){switch(e){case"eth_accounts":case"eth_requestAccounts":return[this.address];case"eth_chainId":return"0x1";case"personal_sign":{if(this.keyType==="EXTERNAL")try{return await(await this.openkey.findWalletProvider(this.address)).request({method:e,params:t})}catch(o){throw g(o?.message||"External wallet signing failed","error"),o}let s=this.hexToString(t[0]);return(await this.openkey.signMessage({message:s,keyId:this.keyId})).signature}case"eth_signTypedData_v4":{if(this.keyType==="EXTERNAL")try{return await(await this.openkey.findWalletProvider(this.address)).request({method:e,params:t})}catch(o){throw g(o?.message||"External wallet signing failed","error"),o}let s=JSON.parse(t[1]);return(await this.openkey.signTypedData(s)).signature}default:throw new Error(`Unsupported method: ${e}`)}}hexToString(e){let t=new Uint8Array((e.startsWith("0x")?e.slice(2):e).match(/.{1,2}/g).map(s=>parseInt(s,16)));return new TextDecoder().decode(t)}},N=f,v=null;function L(a){return(!v||a)&&(v=new f(a)),v}0&&(module.exports={OpenKey,OpenKeyEIP1193Provider,getOpenKey});
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["// OpenKey SDK - Browser client for third-party apps\n// Provides \"Sign with OpenKey\" functionality via popup or iframe\n\nexport interface EIP1193Provider {\n  request(args: { method: string; params?: any[] }): Promise<any>;\n}\n\ninterface EIP6963ProviderInfo {\n  uuid: string;\n  name: string;\n  icon: string;\n  rdns: string;\n}\n\ninterface EIP6963ProviderDetail {\n  info: EIP6963ProviderInfo;\n  provider: EIP1193Provider;\n}\n\nexport type OpenKeyMode = 'iframe' | 'popup' | 'redirect';\n\nexport interface OpenKeyConfig {\n  /** OpenKey host URL (default: https://openkey.so) */\n  host?: string;\n  /** App identifier for display */\n  appName?: string;\n  /** UI mode: 'iframe' (default), 'popup', or 'redirect' */\n  mode?: OpenKeyMode;\n  /** App-provided wallet provider for external key signing */\n  externalProvider?: EIP1193Provider;\n}\n\nexport interface SignMessageRequest {\n  message: string;\n  keyId?: string; // If not provided, user selects\n}\n\nexport interface SignTypedDataRequest {\n  domain: {\n    name?: string;\n    version?: string;\n    chainId?: number;\n    verifyingContract?: string;\n  };\n  types: Record<string, Array<{ name: string; type: string }>>;\n  primaryType: string;\n  message: Record<string, unknown>;\n  keyId?: string;\n}\n\nexport interface SignResult {\n  signature: string;\n  address: string;\n}\n\nexport interface AuthResult {\n  address: string;\n  keyId: string;\n  keyType: 'MANAGED' | 'EXTERNAL';\n}\n\nexport interface OpenKeyError {\n  code: 'USER_CANCELLED' | 'POPUP_BLOCKED' | 'TIMEOUT' | 'NO_KEY' | 'UNAUTHORIZED' | 'UNKNOWN' | 'STATE_MISMATCH';\n  message: string;\n}\n\n// ======= OAuth 2.1 Types =======\n\n/** OAuth configuration for third-party apps */\nexport interface OAuthConfig {\n  /** OAuth client_id (registered with OpenKey) */\n  clientId: string;\n  /** Redirect URI (must match registered URI) */\n  redirectUri: string;\n  /** State parameter for CSRF protection (auto-generated if not provided) */\n  state?: string;\n}\n\n/** Result from OAuth authorization */\nexport interface OAuthResult {\n  /** Authorization code (exchange for tokens) */\n  code: string;\n  /** State parameter (verify matches request) */\n  state: string;\n}\n\n/** Response from token exchange */\nexport interface OAuthTokenResponse {\n  access_token: string;\n  token_type: 'Bearer';\n  expires_in: number;\n  id_token: string;\n  scope: string;\n  refresh_token?: string;\n}\n\ntype MessageType =\n  | { type: 'openkey:auth:request'; appName: string }\n  | { type: 'openkey:auth:response'; success: true; address: string; keyId: string; keyType?: 'MANAGED' | 'EXTERNAL'; sessionToken?: string }\n  | { type: 'openkey:auth:response'; success: false; error: OpenKeyError }\n  | { type: 'openkey:sign:request'; message: string; keyId?: string; sessionToken?: string }\n  | { type: 'openkey:sign:response'; success: true; signature: string; address: string }\n  | { type: 'openkey:sign:response'; success: false; error: OpenKeyError }\n  | { type: 'openkey:signTypedData:request'; data: SignTypedDataRequest; sessionToken?: string }\n  | { type: 'openkey:signTypedData:response'; success: true; signature: string; address: string }\n  | { type: 'openkey:signTypedData:response'; success: false; error: OpenKeyError }\n  | { type: 'openkey:link-wallet:request' }\n  | { type: 'openkey:link-wallet:response'; success: true; address: string; keyId: string }\n  | { type: 'openkey:link-wallet:response'; success: false; error: OpenKeyError }\n  | { type: 'openkey:link-wallet:delegate' }\n  | { type: 'openkey:link-wallet:result'; success: true; address: string; keyId: string }\n  | { type: 'openkey:link-wallet:result'; success: false; error: OpenKeyError }\n  | { type: 'openkey:resize'; height: number }\n  | { type: 'openkey:ready' }\n  | { type: 'openkey:close' };\n\nconst DEFAULT_HOST = 'https://openkey.so';\nconst POPUP_WIDTH = 400;\nconst POPUP_HEIGHT = 600;\nconst DEFAULT_TIMEOUT = 5 * 60 * 1000; // 5 minutes\nconst IFRAME_READY_TIMEOUT = 3000; // 3 seconds\nconst OAUTH_STORAGE_KEY = 'openkey_oauth';\n\nclass IframeModal {\n  private root: HTMLDivElement;\n  private shadow: ShadowRoot;\n  private iframe: HTMLIFrameElement;\n  private onClose: () => void;\n  private onMessage: (data: MessageType) => void;\n  private messageHandler: (event: MessageEvent) => void;\n  private host: string;\n\n  constructor(opts: { url: string; host: string; onClose: () => void; onMessage: (data: MessageType) => void }) {\n    this.host = opts.host;\n    this.onClose = opts.onClose;\n    this.onMessage = opts.onMessage;\n\n    const isMobile = window.matchMedia('(max-width: 639px)').matches;\n\n    this.root = document.createElement('div');\n    this.shadow = this.root.attachShadow({ mode: 'closed' });\n\n    const style = document.createElement('style');\n    style.textContent = `\n      :host{all:initial}\n      .ok-backdrop{position:fixed;inset:0;background:rgba(0,0,0,0.4);backdrop-filter:blur(4px);z-index:999999;display:flex;align-items:${isMobile ? 'flex-end' : 'center'};justify-content:center;animation:ok-fade-in 150ms ease-out}\n      .ok-card{position:relative;background:#fafafa;width:${isMobile ? '100%' : '400px'};border-radius:${isMobile ? '16px 16px 0 0' : '16px'};box-shadow:0 25px 50px -12px rgba(0,0,0,0.25);overflow:hidden;overflow-y:auto;animation:${isMobile ? 'ok-slide-up 250ms ease-out' : 'ok-scale-in 200ms ease-out'};max-height:90vh}\n      .ok-close{position:absolute;top:8px;right:8px;width:24px;height:24px;border:none;background:transparent;color:#6b7280;font-size:18px;cursor:pointer;z-index:1;display:flex;align-items:center;justify-content:center;border-radius:4px}\n      .ok-close:hover{color:#111827}\n      .ok-handle{width:40px;height:4px;background:#d4d4d4;border-radius:2px;margin:8px auto 0}\n      iframe{border:none;width:100%;height:400px;display:block;transition:height 200ms ease}\n      .ok-backdrop.ok-exit{animation:ok-fade-out 150ms ease-in}\n      .ok-backdrop.ok-exit .ok-card{animation:${isMobile ? 'ok-slide-down 200ms ease-in' : 'ok-scale-out 150ms ease-in'}}\n      @keyframes ok-fade-in{from{opacity:0}to{opacity:1}}\n      @keyframes ok-fade-out{from{opacity:1}to{opacity:0}}\n      @keyframes ok-scale-in{from{opacity:0;transform:scale(0.95)}to{opacity:1;transform:scale(1)}}\n      @keyframes ok-scale-out{from{opacity:1;transform:scale(1)}to{opacity:0;transform:scale(0.95)}}\n      @keyframes ok-slide-up{from{transform:translateY(100%)}to{transform:translateY(0)}}\n      @keyframes ok-slide-down{from{transform:translateY(0)}to{transform:translateY(100%)}}\n    `;\n\n    const backdrop = document.createElement('div');\n    backdrop.className = 'ok-backdrop';\n    backdrop.addEventListener('click', (e) => {\n      if (e.target === backdrop) this.close();\n    });\n\n    const card = document.createElement('div');\n    card.className = 'ok-card';\n\n    if (isMobile) {\n      const handle = document.createElement('div');\n      handle.className = 'ok-handle';\n      card.appendChild(handle);\n    }\n\n    const closeBtn = document.createElement('button');\n    closeBtn.className = 'ok-close';\n    closeBtn.textContent = '\\u00d7';\n    closeBtn.addEventListener('click', () => this.close());\n    card.appendChild(closeBtn);\n\n    this.iframe = document.createElement('iframe');\n    this.iframe.src = opts.url;\n    this.iframe.setAttribute('allow', 'publickey-credentials-get *; publickey-credentials-create *');\n    this.iframe.setAttribute('sandbox', 'allow-scripts allow-same-origin allow-forms allow-popups');\n    card.appendChild(this.iframe);\n\n    backdrop.appendChild(card);\n    this.shadow.appendChild(style);\n    this.shadow.appendChild(backdrop);\n\n    this.messageHandler = (event: MessageEvent) => {\n      if (event.origin !== this.host) return;\n      const data = event.data as MessageType;\n      if (data.type === 'openkey:resize') {\n        const h = Math.min(data.height, Math.floor(window.innerHeight * 0.85));\n        this.iframe.style.height = `${h}px`;\n        return;\n      }\n      this.onMessage(data);\n    };\n    window.addEventListener('message', this.messageHandler);\n    document.body.appendChild(this.root);\n  }\n\n  postMessage(message: object) {\n    this.iframe.contentWindow?.postMessage(message, this.host);\n  }\n\n  destroy() {\n    window.removeEventListener('message', this.messageHandler);\n    this.root.remove();\n  }\n\n  private close() {\n    const backdrop = this.shadow.querySelector('.ok-backdrop');\n    if (backdrop) {\n      backdrop.classList.add('ok-exit');\n      setTimeout(() => {\n        this.destroy();\n        this.onClose();\n      }, 200);\n    } else {\n      this.destroy();\n      this.onClose();\n    }\n  }\n}\n\nclass WalletPicker {\n  private root: HTMLDivElement;\n  private shadow: ShadowRoot;\n\n  constructor(opts: { providers: EIP6963ProviderDetail[]; onSelect: (provider: EIP1193Provider) => void; onCancel: () => void }) {\n    this.root = document.createElement('div');\n    this.shadow = this.root.attachShadow({ mode: 'closed' });\n\n    const style = document.createElement('style');\n    style.textContent = `\n      :host{all:initial}\n      .wp-backdrop{position:fixed;inset:0;background:rgba(0,0,0,0.4);backdrop-filter:blur(4px);z-index:1000000;display:flex;align-items:center;justify-content:center;animation:wp-fade 150ms ease-out}\n      .wp-card{background:#fff;width:340px;border-radius:16px;box-shadow:0 25px 50px -12px rgba(0,0,0,0.25);padding:20px;animation:wp-scale 200ms ease-out}\n      .wp-title{font:600 16px/1.3 system-ui,sans-serif;color:#111;margin:0 0 12px}\n      .wp-list{list-style:none;margin:0;padding:0;display:flex;flex-direction:column;gap:6px}\n      .wp-item{display:flex;align-items:center;gap:10px;padding:10px 12px;border:1px solid #e5e7eb;border-radius:10px;background:transparent;cursor:pointer;font:14px/1.3 system-ui,sans-serif;color:#111;width:100%;text-align:left;transition:border-color 150ms}\n      .wp-item:hover{border-color:#6366f1}\n      .wp-icon{width:28px;height:28px;border-radius:6px}\n      .wp-empty{font:14px/1.4 system-ui,sans-serif;color:#6b7280;text-align:center;padding:16px 0}\n      .wp-cancel{display:block;width:100%;margin-top:12px;padding:8px;border:none;background:transparent;color:#6b7280;font:14px/1.3 system-ui,sans-serif;cursor:pointer;border-radius:8px}\n      .wp-cancel:hover{background:#f3f4f6;color:#111}\n      @keyframes wp-fade{from{opacity:0}to{opacity:1}}\n      @keyframes wp-scale{from{opacity:0;transform:scale(0.95)}to{opacity:1;transform:scale(1)}}\n      @media(prefers-color-scheme:dark){\n        .wp-card{background:#1a1a1a;box-shadow:0 25px 50px -12px rgba(0,0,0,0.5)}\n        .wp-title{color:#f3f4f6}\n        .wp-item{border-color:#374151;color:#f3f4f6}\n        .wp-item:hover{border-color:#818cf8}\n        .wp-empty{color:#9ca3af}\n        .wp-cancel{color:#9ca3af}\n        .wp-cancel:hover{background:#262626;color:#f3f4f6}\n      }\n    `;\n\n    const backdrop = document.createElement('div');\n    backdrop.className = 'wp-backdrop';\n    backdrop.addEventListener('click', (e) => { if (e.target === backdrop) { this.destroy(); opts.onCancel(); } });\n\n    const card = document.createElement('div');\n    card.className = 'wp-card';\n\n    const title = document.createElement('h2');\n    title.className = 'wp-title';\n    title.textContent = 'Select a wallet';\n    card.appendChild(title);\n\n    if (opts.providers.length === 0) {\n      const empty = document.createElement('div');\n      empty.className = 'wp-empty';\n      empty.textContent = 'No wallets detected';\n      card.appendChild(empty);\n    } else {\n      const list = document.createElement('ul');\n      list.className = 'wp-list';\n      for (const { info, provider } of opts.providers) {\n        const item = document.createElement('button');\n        item.className = 'wp-item';\n        if (info.icon) {\n          const icon = document.createElement('img');\n          icon.className = 'wp-icon';\n          icon.src = info.icon;\n          icon.alt = info.name;\n          item.appendChild(icon);\n        }\n        const name = document.createElement('span');\n        name.textContent = info.name;\n        item.appendChild(name);\n        item.addEventListener('click', () => { this.destroy(); opts.onSelect(provider); });\n        list.appendChild(item);\n      }\n      card.appendChild(list);\n    }\n\n    const cancel = document.createElement('button');\n    cancel.className = 'wp-cancel';\n    cancel.textContent = 'Cancel';\n    cancel.addEventListener('click', () => { this.destroy(); opts.onCancel(); });\n    card.appendChild(cancel);\n\n    backdrop.appendChild(card);\n    this.shadow.appendChild(style);\n    this.shadow.appendChild(backdrop);\n    document.body.appendChild(this.root);\n  }\n\n  destroy() {\n    this.root.remove();\n  }\n}\n\nfunction showToast(message = 'Opening in new window\\u2026', variant: 'info' | 'error' = 'info') {\n  const bg = variant === 'error' ? '#dc2626' : '#1f2937';\n  const root = document.createElement('div');\n  const shadow = root.attachShadow({ mode: 'closed' });\n  shadow.innerHTML = `<style>:host{all:initial}.ok-toast{position:fixed;top:16px;right:16px;z-index:1000000;background:${bg};color:#f9fafb;padding:10px 16px;border-radius:8px;font:14px/1.4 system-ui,sans-serif;box-shadow:0 4px 12px rgba(0,0,0,0.15);animation:ok-t-in 200ms ease-out;max-width:360px}@keyframes ok-t-in{from{opacity:0;transform:translateY(-8px)}to{opacity:1;transform:translateY(0)}}</style><div class=\"ok-toast\">${message}</div>`;\n  document.body.appendChild(root);\n  setTimeout(() => root.remove(), 4000);\n}\n\n// ======= PKCE Utilities =======\n\nfunction base64UrlEncode(buffer: Uint8Array): string {\n  const base64 = btoa(String.fromCharCode(...buffer));\n  return base64.replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=/g, '');\n}\n\nasync function generateCodeVerifier(): Promise<string> {\n  const array = new Uint8Array(32);\n  crypto.getRandomValues(array);\n  return base64UrlEncode(array);\n}\n\nasync function generateCodeChallenge(verifier: string): Promise<string> {\n  const encoder = new TextEncoder();\n  const data = encoder.encode(verifier);\n  const digest = await crypto.subtle.digest('SHA-256', data);\n  return base64UrlEncode(new Uint8Array(digest));\n}\n\nfunction generateState(): string {\n  const array = new Uint8Array(16);\n  crypto.getRandomValues(array);\n  return base64UrlEncode(array);\n}\n\nclass ExternalWalletError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'ExternalWalletError';\n  }\n}\n\nexport class OpenKey {\n  private host: string;\n  private appName: string;\n  private mode: OpenKeyMode;\n  private config: OpenKeyConfig;\n  private popup: Window | null = null;\n  private lastAuth: AuthResult | null = null;\n  private discoveredProviders: EIP6963ProviderDetail[] = [];\n  private sessionToken: string | null = null;\n\n  constructor(config: OpenKeyConfig = {}) {\n    this.config = config;\n    this.host = config.host || DEFAULT_HOST;\n    this.appName = config.appName || window.location.hostname;\n    this.mode = config.mode ?? 'iframe';\n\n    // Listen for EIP-6963 wallet announcements\n    if (typeof window !== 'undefined') {\n      this.discoveredProviders = [];\n      window.addEventListener('eip6963:announceProvider', (event: any) => {\n        this.discoveredProviders.push(event.detail);\n      });\n      window.dispatchEvent(new Event('eip6963:requestProvider'));\n    }\n  }\n\n  /**\n   * Connect to OpenKey and get user's wallet address\n   * Opens auth flow for user to select/create a key\n   */\n  async connect(opts?: { mode?: OpenKeyMode }): Promise<AuthResult> {\n    const result = await this.openFlow<AuthResult>('connect', {\n      type: 'openkey:auth:request',\n      appName: this.appName,\n    }, opts?.mode);\n    this.lastAuth = result;\n    return result;\n  }\n\n  /**\n   * Link an external wallet to the user's OpenKey account\n   * Opens link-wallet widget flow\n   */\n  async linkWallet(opts?: { mode?: OpenKeyMode }): Promise<{ address: string; keyId: string }> {\n    return this.openFlow<{ address: string; keyId: string }>('link-wallet', {\n      type: 'openkey:link-wallet:request',\n    }, opts?.mode);\n  }\n\n  /**\n   * Sign a message with the user's OpenKey wallet\n   * For external keys, routes directly to the user's wallet provider\n   */\n  async signMessage(request: SignMessageRequest, opts?: { mode?: OpenKeyMode }): Promise<SignResult> {\n    if (this.lastAuth?.keyType === 'EXTERNAL') {\n      return this.signWithExternalWallet(request);\n    }\n    return this.signWithOpenKey(request, opts?.mode);\n  }\n\n  /**\n   * Sign typed data (EIP-712) with the user's OpenKey wallet\n   * For external keys, routes directly to the user's wallet provider\n   */\n  async signTypedData(request: SignTypedDataRequest, opts?: { mode?: OpenKeyMode }): Promise<SignResult> {\n    if (this.lastAuth?.keyType === 'EXTERNAL') {\n      return this.signTypedDataWithExternalWallet(request);\n    }\n    return this.signTypedDataWithOpenKey(request, opts?.mode);\n  }\n\n  /**\n   * Find a wallet provider that controls the given address.\n   * Checks: 1) app-provided externalProvider, 2) EIP-6963 discovered wallets, 3) window.ethereum\n   */\n  async findWalletProvider(targetAddress: string): Promise<EIP1193Provider> {\n    // 1. Try app-provided externalProvider first\n    if (this.config.externalProvider) {\n      return this.config.externalProvider;\n    }\n\n    // 2. Check EIP-6963 discovered wallets silently (no popup)\n    for (const { provider } of this.discoveredProviders) {\n      try {\n        const accounts = await provider.request({ method: 'eth_accounts' }) as string[];\n        if (accounts.some(a => a.toLowerCase() === targetAddress.toLowerCase())) {\n          return provider;\n        }\n      } catch {}\n    }\n\n    // 3. Fall back to window.ethereum silently\n    if (typeof window !== 'undefined' && (window as any).ethereum) {\n      const provider = (window as any).ethereum as EIP1193Provider;\n      try {\n        const accounts = await provider.request({ method: 'eth_accounts' }) as string[];\n        if (accounts.some(a => a.toLowerCase() === targetAddress.toLowerCase())) {\n          return provider;\n        }\n      } catch {}\n    }\n\n    throw new ExternalWalletError('External wallet not found. Connect the wallet that owns this key and try again.');\n  }\n\n  private async signWithExternalWallet(request: SignMessageRequest): Promise<SignResult> {\n    let provider: EIP1193Provider;\n    try {\n      provider = await this.findWalletProvider(this.lastAuth!.address);\n    } catch (e) {\n      showToast((e as Error).message, 'error');\n      throw e;\n    }\n    try {\n      const hexMessage = this.toHex(request.message);\n      const signature = await provider.request({\n        method: 'personal_sign',\n        params: [hexMessage, this.lastAuth!.address],\n      });\n      return { signature: signature as string, address: this.lastAuth!.address };\n    } catch (e: any) {\n      const msg = e?.message?.includes('not been authorized')\n        ? 'Wallet rejected the request. Approve the connection in your wallet and try again.'\n        : e?.message || 'Signing failed';\n      showToast(msg, 'error');\n      throw new Error(msg);\n    }\n  }\n\n  private async signTypedDataWithExternalWallet(request: SignTypedDataRequest): Promise<SignResult> {\n    let provider: EIP1193Provider;\n    try {\n      provider = await this.findWalletProvider(this.lastAuth!.address);\n    } catch (e) {\n      showToast((e as Error).message, 'error');\n      throw e;\n    }\n    try {\n      const signature = await provider.request({\n        method: 'eth_signTypedData_v4',\n        params: [this.lastAuth!.address, JSON.stringify(request)],\n      });\n      return { signature: signature as string, address: this.lastAuth!.address };\n    } catch (e: any) {\n      const msg = e?.message?.includes('not been authorized')\n        ? 'Wallet rejected the request. Approve the connection in your wallet and try again.'\n        : e?.message || 'Signing failed';\n      showToast(msg, 'error');\n      throw new Error(msg);\n    }\n  }\n\n  private signWithOpenKey(request: SignMessageRequest, mode?: OpenKeyMode): Promise<SignResult> {\n    return this.openFlow<SignResult>('sign', {\n      type: 'openkey:sign:request',\n      message: request.message,\n      keyId: request.keyId,\n      sessionToken: this.sessionToken || undefined,\n    }, mode);\n  }\n\n  private signTypedDataWithOpenKey(request: SignTypedDataRequest, mode?: OpenKeyMode): Promise<SignResult> {\n    return this.openFlow<SignResult>('sign-typed-data', {\n      type: 'openkey:signTypedData:request',\n      data: request,\n      sessionToken: this.sessionToken || undefined,\n    }, mode);\n  }\n\n  private toHex(str: string): string {\n    return '0x' + Array.from(new TextEncoder().encode(str)).map(b => b.toString(16).padStart(2, '0')).join('');\n  }\n\n  /**\n   * Check if user is already authenticated\n   */\n  async isConnected(): Promise<boolean> {\n    // Check for existing session via API\n    try {\n      const res = await fetch(`${this.host}/api/auth/session`, {\n        credentials: 'include',\n      });\n      if (!res.ok) return false;\n      const data = await res.json();\n      return !!data.user;\n    } catch {\n      return false;\n    }\n  }\n\n  // ======= OAuth 2.1 Provider Methods =======\n\n  /**\n   * OAuth 2.1 methods for third-party app authentication\n   * Use this when your app has registered OAuth client credentials with OpenKey\n   */\n  oauth = {\n    /**\n     * Start OAuth authorization flow\n     * Opens popup/redirect to OpenKey authorization endpoint\n     * @returns Promise that resolves with authorization code after user consent\n     */\n    connect: async (config: OAuthConfig): Promise<OAuthResult> => {\n      // Generate PKCE values\n      const verifier = await generateCodeVerifier();\n      const challenge = await generateCodeChallenge(verifier);\n      const state = config.state || generateState();\n\n      // Store for later token exchange\n      sessionStorage.setItem(\n        OAUTH_STORAGE_KEY,\n        JSON.stringify({ verifier, state })\n      );\n\n      // Build authorization URL\n      const authUrl = new URL(`${this.host}/api/auth/oauth2/authorize`);\n      authUrl.searchParams.set('client_id', config.clientId);\n      authUrl.searchParams.set('redirect_uri', config.redirectUri);\n      authUrl.searchParams.set('response_type', 'code');\n      authUrl.searchParams.set('scope', 'openid');\n      authUrl.searchParams.set('state', state);\n      authUrl.searchParams.set('code_challenge', challenge);\n      authUrl.searchParams.set('code_challenge_method', 'S256');\n\n      return this.openOAuthFlow(authUrl.toString(), state, config.redirectUri);\n    },\n\n    /**\n     * Exchange authorization code for tokens\n     * Call this after receiving the callback with authorization code\n     * @param code - Authorization code from callback URL\n     * @param config - Same config used for connect()\n     * @returns Promise that resolves with access_token, id_token, etc.\n     */\n    exchangeCode: async (\n      code: string,\n      config: OAuthConfig\n    ): Promise<OAuthTokenResponse> => {\n      const stored = sessionStorage.getItem(OAUTH_STORAGE_KEY);\n      if (!stored) {\n        throw new Error('No PKCE verifier found. Start a new OAuth flow.');\n      }\n\n      const { verifier } = JSON.parse(stored);\n\n      const response = await fetch(`${this.host}/api/auth/oauth2/token`, {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/x-www-form-urlencoded',\n        },\n        body: new URLSearchParams({\n          grant_type: 'authorization_code',\n          code,\n          redirect_uri: config.redirectUri,\n          client_id: config.clientId,\n          code_verifier: verifier,\n        }),\n      });\n\n      // Clear stored verifier\n      sessionStorage.removeItem(OAUTH_STORAGE_KEY);\n\n      if (!response.ok) {\n        const error = await response.json();\n        throw new Error(error.error_description || 'Token exchange failed');\n      }\n\n      return response.json();\n    },\n\n    /**\n     * Verify state parameter from callback\n     * Call this before exchangeCode to prevent CSRF attacks\n     * @param receivedState - State parameter from callback URL\n     * @returns true if state matches, false otherwise\n     */\n    verifyState: (receivedState: string): boolean => {\n      const stored = sessionStorage.getItem(OAUTH_STORAGE_KEY);\n      if (!stored) return false;\n      const { state } = JSON.parse(stored);\n      return state === receivedState;\n    },\n\n    /**\n     * Parse authorization response from callback URL\n     * @param url - Callback URL (defaults to current window.location.href)\n     * @returns Parsed code and state, or error\n     */\n    parseCallback: (\n      url?: string\n    ): { code: string; state: string } | { error: string; errorDescription?: string } => {\n      const urlObj = new URL(url || window.location.href);\n      const error = urlObj.searchParams.get('error');\n\n      if (error) {\n        return {\n          error,\n          errorDescription: urlObj.searchParams.get('error_description') || undefined,\n        };\n      }\n\n      const code = urlObj.searchParams.get('code');\n      const state = urlObj.searchParams.get('state');\n\n      if (!code || !state) {\n        return { error: 'missing_params', errorDescription: 'Missing code or state parameter' };\n      }\n\n      return { code, state };\n    },\n  };\n\n  private openOAuthFlow(\n    url: string,\n    state: string,\n    redirectUri: string\n  ): Promise<OAuthResult> {\n    return new Promise((resolve, reject) => {\n      if (this.mode !== 'redirect') {\n        this.openOAuthPopup(url, state, redirectUri, resolve, reject);\n      } else {\n        // Full page redirect - won't resolve, page navigates away\n        window.location.href = url;\n      }\n    });\n  }\n\n  private openOAuthPopup(\n    url: string,\n    state: string,\n    redirectUri: string,\n    resolve: (value: OAuthResult) => void,\n    reject: (error: OpenKeyError) => void\n  ) {\n    const left = window.screenX + (window.outerWidth - POPUP_WIDTH) / 2;\n    const top = window.screenY + (window.outerHeight - POPUP_HEIGHT) / 2;\n\n    this.popup = window.open(\n      url,\n      'openkey-oauth',\n      `width=${POPUP_WIDTH},height=${POPUP_HEIGHT},left=${left},top=${top},popup=true`\n    );\n\n    if (!this.popup) {\n      reject({\n        code: 'POPUP_BLOCKED',\n        message: 'Popup was blocked. Please allow popups or use redirect mode.',\n      });\n      return;\n    }\n\n    const redirectHost = new URL(redirectUri).origin;\n\n    // Poll for redirect back with code\n    const pollInterval = setInterval(() => {\n      try {\n        if (this.popup?.closed) {\n          clearInterval(pollInterval);\n          clearTimeout(timeout);\n          reject({\n            code: 'USER_CANCELLED',\n            message: 'User closed the popup',\n          });\n          return;\n        }\n\n        // Check if redirected to callback URL\n        const popupUrl = this.popup?.location?.href;\n        if (popupUrl && popupUrl.startsWith(redirectHost)) {\n          clearInterval(pollInterval);\n          clearTimeout(timeout);\n\n          const urlObj = new URL(popupUrl);\n          const code = urlObj.searchParams.get('code');\n          const returnedState = urlObj.searchParams.get('state');\n          const error = urlObj.searchParams.get('error');\n\n          this.popup?.close();\n\n          if (error) {\n            reject({\n              code: 'UNAUTHORIZED',\n              message: urlObj.searchParams.get('error_description') || error,\n            });\n            return;\n          }\n\n          if (returnedState !== state) {\n            reject({\n              code: 'STATE_MISMATCH',\n              message: 'State mismatch - possible CSRF attack',\n            });\n            return;\n          }\n\n          if (code) {\n            resolve({ code, state: returnedState });\n          } else {\n            reject({\n              code: 'UNAUTHORIZED',\n              message: 'Authorization failed - no code returned',\n            });\n          }\n        }\n      } catch {\n        // Cross-origin - popup still on OpenKey domain, continue polling\n      }\n    }, 100);\n\n    // Timeout\n    const timeout = setTimeout(() => {\n      clearInterval(pollInterval);\n      this.popup?.close();\n      reject({\n        code: 'TIMEOUT',\n        message: 'OAuth flow timed out',\n      });\n    }, DEFAULT_TIMEOUT);\n  }\n\n  private resolveMode(override?: OpenKeyMode): OpenKeyMode {\n    return override ?? this.mode;\n  }\n\n  private async openFlow<T>(action: string, message: object, modeOverride?: OpenKeyMode): Promise<T> {\n    const mode = this.resolveMode(modeOverride);\n    const origin = encodeURIComponent(window.location.origin);\n\n    if (mode === 'popup') {\n      const url = `${this.host}/widget/${action}?origin=${origin}`;\n      return new Promise((resolve, reject) => this.openPopup(url, message, resolve, reject));\n    }\n\n    if (mode === 'redirect') {\n      const url = `${this.host}/widget/${action}?origin=${origin}`;\n      window.location.href = url;\n      return new Promise(() => {}); // never resolves, page navigates\n    }\n\n    // iframe mode with auto-fallback\n    const url = `${this.host}/widget/embed/${action}?origin=${origin}`;\n    return this.openIframeModal<T>(url, action, message, origin);\n  }\n\n  private openIframeModal<T>(url: string, action: string, message: object, origin: string): Promise<T> {\n    return new Promise((resolve, reject) => {\n      let readyReceived = false;\n      let settled = false;\n      let modal: IframeModal | null = null;\n\n      const settle = (fn: () => void) => {\n        if (settled) return;\n        settled = true;\n        fn();\n      };\n\n      const cleanup = () => {\n        clearTimeout(readyTimeout);\n        clearTimeout(overallTimeout);\n        modal?.destroy();\n        modal = null;\n      };\n\n      modal = new IframeModal({\n        url,\n        host: this.host,\n        onClose: () => {\n          settle(() => {\n            clearTimeout(readyTimeout);\n            clearTimeout(overallTimeout);\n            modal = null;\n            reject({ code: 'USER_CANCELLED', message: 'User cancelled the request' } as OpenKeyError);\n          });\n        },\n        onMessage: (data: MessageType) => {\n          if (data.type === 'openkey:ready') {\n            readyReceived = true;\n            modal?.postMessage(message);\n            return;\n          }\n\n          if (data.type === 'openkey:close') {\n            settle(() => {\n              cleanup();\n              reject({ code: 'USER_CANCELLED', message: 'User cancelled the request' } as OpenKeyError);\n            });\n            return;\n          }\n\n          if (data.type === 'openkey:link-wallet:delegate') {\n            this.handleWalletLinkDelegation(modal!);\n            return;\n          }\n\n          if (\n            data.type === 'openkey:auth:response' ||\n            data.type === 'openkey:sign:response' ||\n            data.type === 'openkey:signTypedData:response' ||\n            data.type === 'openkey:link-wallet:response'\n          ) {\n            settle(() => {\n              cleanup();\n              if (data.success) {\n                if (data.type === 'openkey:auth:response') {\n                  if (data.sessionToken) this.sessionToken = data.sessionToken;\n                  resolve({ address: data.address, keyId: data.keyId, keyType: data.keyType || 'MANAGED' } as T);\n                } else if (data.type === 'openkey:link-wallet:response') {\n                  resolve({ address: data.address, keyId: data.keyId } as T);\n                } else {\n                  resolve({ signature: data.signature, address: data.address } as T);\n                }\n              } else {\n                reject(data.error);\n              }\n            });\n          }\n        },\n      });\n\n      // Auto-fallback: if no openkey:ready within 3s, fall back to popup\n      const readyTimeout = setTimeout(() => {\n        if (readyReceived || settled) return;\n        cleanup();\n        console.warn('OpenKey: iframe blocked by CSP, falling back to popup. Add frame-src https://openkey.so to your CSP.');\n        showToast();\n        const popupUrl = `${this.host}/widget/${action}?origin=${origin}`;\n        this.openPopup(popupUrl, message, (val: any) => settle(() => resolve(val)), (err: any) => settle(() => reject(err)));\n      }, IFRAME_READY_TIMEOUT);\n\n      // Overall 5-minute timeout\n      const overallTimeout = setTimeout(() => {\n        settle(() => {\n          cleanup();\n          reject({ code: 'TIMEOUT', message: 'Request timed out' } as OpenKeyError);\n        });\n      }, DEFAULT_TIMEOUT);\n    });\n  }\n\n  private handleWalletLinkDelegation(modal: IframeModal) {\n    const sendResult = (result: MessageType) => modal.postMessage(result);\n\n    new WalletPicker({\n      providers: this.discoveredProviders,\n      onCancel: () => {\n        sendResult({ type: 'openkey:link-wallet:result', success: false, error: { code: 'USER_CANCELLED', message: 'Wallet linking cancelled' } });\n      },\n      onSelect: async (provider) => {\n        try {\n          const accounts = await provider.request({ method: 'eth_requestAccounts' }) as string[];\n          const address = accounts[0];\n          if (!address) throw new Error('No account returned');\n\n          // Get challenge from API\n          const challengeRes = await fetch(`${this.host}/api/keys/link/challenge`, {\n            method: 'POST',\n            credentials: 'include',\n          });\n          if (!challengeRes.ok) throw new Error('Failed to get challenge');\n          const { message } = await challengeRes.json();\n\n          // Sign challenge with wallet\n          const hexMessage = this.toHex(message);\n          const signature = await provider.request({\n            method: 'personal_sign',\n            params: [hexMessage, address],\n          }) as string;\n\n          // Submit to API\n          const linkRes = await fetch(`${this.host}/api/keys/link`, {\n            method: 'POST',\n            headers: { 'Content-Type': 'application/json' },\n            credentials: 'include',\n            body: JSON.stringify({ address, signature, message }),\n          });\n          if (!linkRes.ok) {\n            const err = await linkRes.json();\n            throw new Error(err.error || 'Failed to link wallet');\n          }\n          const { key } = await linkRes.json();\n\n          sendResult({ type: 'openkey:link-wallet:result', success: true, address: key.address, keyId: key.id });\n        } catch (e: any) {\n          sendResult({ type: 'openkey:link-wallet:result', success: false, error: { code: 'UNKNOWN', message: e.message || 'Wallet linking failed' } });\n        }\n      },\n    });\n  }\n\n  private openPopup<T>(\n    url: string,\n    message: object,\n    resolve: (value: T) => void,\n    reject: (error: OpenKeyError) => void\n  ) {\n    // Calculate popup position\n    const left = window.screenX + (window.outerWidth - POPUP_WIDTH) / 2;\n    const top = window.screenY + (window.outerHeight - POPUP_HEIGHT) / 2;\n\n    this.popup = window.open(\n      url,\n      'openkey',\n      `width=${POPUP_WIDTH},height=${POPUP_HEIGHT},left=${left},top=${top},popup=true`\n    );\n\n    if (!this.popup) {\n      reject({\n        code: 'POPUP_BLOCKED',\n        message: 'Popup was blocked. Please allow popups for this site.',\n      });\n      return;\n    }\n\n    const cleanup = () => {\n      window.removeEventListener('message', handleMessage);\n      clearInterval(pollClosed);\n      clearTimeout(timeout);\n    };\n\n    // Poll to detect popup close\n    const pollClosed = setInterval(() => {\n      if (this.popup?.closed) {\n        cleanup();\n        reject({\n          code: 'USER_CANCELLED',\n          message: 'User closed the popup',\n        });\n      }\n    }, 500);\n\n    // Timeout\n    const timeout = setTimeout(() => {\n      cleanup();\n      this.popup?.close();\n      reject({\n        code: 'TIMEOUT',\n        message: 'Request timed out',\n      });\n    }, DEFAULT_TIMEOUT);\n\n    // Listen for messages\n    const handleMessage = (event: MessageEvent) => {\n      if (event.origin !== this.host) return;\n\n      const data = event.data as MessageType;\n\n      if (data.type === 'openkey:ready') {\n        // Widget is ready, send our request\n        this.popup?.postMessage(message, this.host);\n        return;\n      }\n\n      if (data.type === 'openkey:close') {\n        cleanup();\n        this.popup?.close();\n        reject({\n          code: 'USER_CANCELLED',\n          message: 'User cancelled the request',\n        });\n        return;\n      }\n\n      // Handle responses\n      if (\n        data.type === 'openkey:auth:response' ||\n        data.type === 'openkey:sign:response' ||\n        data.type === 'openkey:signTypedData:response' ||\n        data.type === 'openkey:link-wallet:response'\n      ) {\n        cleanup();\n        this.popup?.close();\n\n        if (data.success) {\n          if (data.type === 'openkey:auth:response') {\n            if (data.sessionToken) this.sessionToken = data.sessionToken;\n            resolve({ address: data.address, keyId: data.keyId, keyType: data.keyType || 'MANAGED' } as T);\n          } else if (data.type === 'openkey:link-wallet:response') {\n            resolve({ address: data.address, keyId: data.keyId } as T);\n          } else {\n            resolve({ signature: data.signature, address: data.address } as T);\n          }\n        } else {\n          reject(data.error);\n        }\n      }\n    };\n\n    window.addEventListener('message', handleMessage);\n  }\n\n  /**\n   * Disconnect and close any open flows\n   */\n  disconnect() {\n    this.popup?.close();\n    this.popup = null;\n  }\n}\n\n/**\n * Unified EIP-1193 provider that wraps an OpenKey instance.\n * Transparently routes signing to either OpenKey (managed keys) or the user's\n * wallet (external keys).\n */\nexport class OpenKeyEIP1193Provider implements EIP1193Provider {\n  private openkey: OpenKey;\n  private address: string;\n  private keyId: string;\n  private keyType: 'MANAGED' | 'EXTERNAL';\n\n  constructor(openkey: OpenKey, authResult: AuthResult) {\n    this.openkey = openkey;\n    this.address = authResult.address;\n    this.keyId = authResult.keyId;\n    this.keyType = authResult.keyType;\n  }\n\n  async request({ method, params }: { method: string; params?: any[] }): Promise<any> {\n    switch (method) {\n      case 'eth_accounts':\n      case 'eth_requestAccounts':\n        return [this.address];\n\n      case 'eth_chainId':\n        return '0x1'; // mainnet\n\n      case 'personal_sign': {\n        if (this.keyType === 'EXTERNAL') {\n          try {\n            const provider = await this.openkey.findWalletProvider(this.address);\n            return await provider.request({ method, params });\n          } catch (e: any) {\n            showToast(e?.message || 'External wallet signing failed', 'error');\n            throw e;\n          }\n        }\n        // Managed key: route through OpenKey\n        const message = this.hexToString(params![0] as string);\n        const result = await this.openkey.signMessage({ message, keyId: this.keyId });\n        return result.signature;\n      }\n\n      case 'eth_signTypedData_v4': {\n        if (this.keyType === 'EXTERNAL') {\n          try {\n            const provider = await this.openkey.findWalletProvider(this.address);\n            return await provider.request({ method, params });\n          } catch (e: any) {\n            showToast(e?.message || 'External wallet signing failed', 'error');\n            throw e;\n          }\n        }\n        const data = JSON.parse(params![1] as string);\n        const result = await this.openkey.signTypedData(data);\n        return result.signature;\n      }\n\n      default:\n        throw new Error(`Unsupported method: ${method}`);\n    }\n  }\n\n  private hexToString(hex: string): string {\n    const bytes = new Uint8Array(\n      (hex.startsWith('0x') ? hex.slice(2) : hex).match(/.{1,2}/g)!.map(b => parseInt(b, 16))\n    );\n    return new TextDecoder().decode(bytes);\n  }\n}\n\n// Default export for convenience\nexport default OpenKey;\n\n// Create singleton instance\nlet defaultInstance: OpenKey | null = null;\n\nexport function getOpenKey(config?: OpenKeyConfig): OpenKey {\n  if (!defaultInstance || config) {\n    defaultInstance = new OpenKey(config);\n  }\n  return defaultInstance;\n}\n"],"mappings":"yaAAA,IAAAA,EAAA,GAAAC,EAAAD,EAAA,aAAAE,EAAA,2BAAAC,EAAA,YAAAC,EAAA,eAAAC,IAAA,eAAAC,EAAAN,GAoHA,IAAMO,EAAe,qBAKrB,IAAMC,EAAoB,gBAEpBC,EAAN,KAAkB,CACR,KACA,OACA,OACA,QACA,UACA,eACA,KAER,YAAYC,EAAkG,CAC5G,KAAK,KAAOA,EAAK,KACjB,KAAK,QAAUA,EAAK,QACpB,KAAK,UAAYA,EAAK,UAEtB,IAAMC,EAAW,OAAO,WAAW,oBAAoB,EAAE,QAEzD,KAAK,KAAO,SAAS,cAAc,KAAK,EACxC,KAAK,OAAS,KAAK,KAAK,aAAa,CAAE,KAAM,QAAS,CAAC,EAEvD,IAAMC,EAAQ,SAAS,cAAc,OAAO,EAC5CA,EAAM,YAAc;AAAA;AAAA,yIAEiHD,EAAW,WAAa,QAAQ;AAAA,4DAC7GA,EAAW,OAAS,OAAO,kBAAkBA,EAAW,gBAAkB,MAAM,4FAA4FA,EAAW,6BAA+B,4BAA4B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,gDAM9PA,EAAW,8BAAgC,4BAA4B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MASnH,IAAME,EAAW,SAAS,cAAc,KAAK,EAC7CA,EAAS,UAAY,cACrBA,EAAS,iBAAiB,QAAUC,GAAM,CACpCA,EAAE,SAAWD,GAAU,KAAK,MAAM,CACxC,CAAC,EAED,IAAME,EAAO,SAAS,cAAc,KAAK,EAGzC,GAFAA,EAAK,UAAY,UAEbJ,EAAU,CACZ,IAAMK,EAAS,SAAS,cAAc,KAAK,EAC3CA,EAAO,UAAY,YACnBD,EAAK,YAAYC,CAAM,CACzB,CAEA,IAAMC,EAAW,SAAS,cAAc,QAAQ,EAChDA,EAAS,UAAY,WACrBA,EAAS,YAAc,OACvBA,EAAS,iBAAiB,QAAS,IAAM,KAAK,MAAM,CAAC,EACrDF,EAAK,YAAYE,CAAQ,EAEzB,KAAK,OAAS,SAAS,cAAc,QAAQ,EAC7C,KAAK,OAAO,IAAMP,EAAK,IACvB,KAAK,OAAO,aAAa,QAAS,6DAA6D,EAC/F,KAAK,OAAO,aAAa,UAAW,0DAA0D,EAC9FK,EAAK,YAAY,KAAK,MAAM,EAE5BF,EAAS,YAAYE,CAAI,EACzB,KAAK,OAAO,YAAYH,CAAK,EAC7B,KAAK,OAAO,YAAYC,CAAQ,EAEhC,KAAK,eAAkBK,GAAwB,CAC7C,GAAIA,EAAM,SAAW,KAAK,KAAM,OAChC,IAAMC,EAAOD,EAAM,KACnB,GAAIC,EAAK,OAAS,iBAAkB,CAClC,IAAMC,EAAI,KAAK,IAAID,EAAK,OAAQ,KAAK,MAAM,OAAO,YAAc,GAAI,CAAC,EACrE,KAAK,OAAO,MAAM,OAAS,GAAGC,CAAC,KAC/B,MACF,CACA,KAAK,UAAUD,CAAI,CACrB,EACA,OAAO,iBAAiB,UAAW,KAAK,cAAc,EACtD,SAAS,KAAK,YAAY,KAAK,IAAI,CACrC,CAEA,YAAYE,EAAiB,CAC3B,KAAK,OAAO,eAAe,YAAYA,EAAS,KAAK,IAAI,CAC3D,CAEA,SAAU,CACR,OAAO,oBAAoB,UAAW,KAAK,cAAc,EACzD,KAAK,KAAK,OAAO,CACnB,CAEQ,OAAQ,CACd,IAAMR,EAAW,KAAK,OAAO,cAAc,cAAc,EACrDA,GACFA,EAAS,UAAU,IAAI,SAAS,EAChC,WAAW,IAAM,CACf,KAAK,QAAQ,EACb,KAAK,QAAQ,CACf,EAAG,GAAG,IAEN,KAAK,QAAQ,EACb,KAAK,QAAQ,EAEjB,CACF,EAEMS,EAAN,KAAmB,CACT,KACA,OAER,YAAYZ,EAAmH,CAC7H,KAAK,KAAO,SAAS,cAAc,KAAK,EACxC,KAAK,OAAS,KAAK,KAAK,aAAa,CAAE,KAAM,QAAS,CAAC,EAEvD,IAAME,EAAQ,SAAS,cAAc,OAAO,EAC5CA,EAAM,YAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAyBpB,IAAMC,EAAW,SAAS,cAAc,KAAK,EAC7CA,EAAS,UAAY,cACrBA,EAAS,iBAAiB,QAAUC,GAAM,CAAMA,EAAE,SAAWD,IAAY,KAAK,QAAQ,EAAGH,EAAK,SAAS,EAAK,CAAC,EAE7G,IAAMK,EAAO,SAAS,cAAc,KAAK,EACzCA,EAAK,UAAY,UAEjB,IAAMQ,EAAQ,SAAS,cAAc,IAAI,EAKzC,GAJAA,EAAM,UAAY,WAClBA,EAAM,YAAc,kBACpBR,EAAK,YAAYQ,CAAK,EAElBb,EAAK,UAAU,SAAW,EAAG,CAC/B,IAAMc,EAAQ,SAAS,cAAc,KAAK,EAC1CA,EAAM,UAAY,WAClBA,EAAM,YAAc,sBACpBT,EAAK,YAAYS,CAAK,CACxB,KAAO,CACL,IAAMC,EAAO,SAAS,cAAc,IAAI,EACxCA,EAAK,UAAY,UACjB,OAAW,CAAE,KAAAC,EAAM,SAAAC,CAAS,IAAKjB,EAAK,UAAW,CAC/C,IAAMkB,EAAO,SAAS,cAAc,QAAQ,EAE5C,GADAA,EAAK,UAAY,UACbF,EAAK,KAAM,CACb,IAAMG,EAAO,SAAS,cAAc,KAAK,EACzCA,EAAK,UAAY,UACjBA,EAAK,IAAMH,EAAK,KAChBG,EAAK,IAAMH,EAAK,KAChBE,EAAK,YAAYC,CAAI,CACvB,CACA,IAAMC,EAAO,SAAS,cAAc,MAAM,EAC1CA,EAAK,YAAcJ,EAAK,KACxBE,EAAK,YAAYE,CAAI,EACrBF,EAAK,iBAAiB,QAAS,IAAM,CAAE,KAAK,QAAQ,EAAGlB,EAAK,SAASiB,CAAQ,CAAG,CAAC,EACjFF,EAAK,YAAYG,CAAI,CACvB,CACAb,EAAK,YAAYU,CAAI,CACvB,CAEA,IAAMM,EAAS,SAAS,cAAc,QAAQ,EAC9CA,EAAO,UAAY,YACnBA,EAAO,YAAc,SACrBA,EAAO,iBAAiB,QAAS,IAAM,CAAE,KAAK,QAAQ,EAAGrB,EAAK,SAAS,CAAG,CAAC,EAC3EK,EAAK,YAAYgB,CAAM,EAEvBlB,EAAS,YAAYE,CAAI,EACzB,KAAK,OAAO,YAAYH,CAAK,EAC7B,KAAK,OAAO,YAAYC,CAAQ,EAChC,SAAS,KAAK,YAAY,KAAK,IAAI,CACrC,CAEA,SAAU,CACR,KAAK,KAAK,OAAO,CACnB,CACF,EAEA,SAASmB,EAAUX,EAAU,8BAA+BY,EAA4B,OAAQ,CAC9F,IAAMC,EAAKD,IAAY,QAAU,UAAY,UACvCE,EAAO,SAAS,cAAc,KAAK,EACnCC,EAASD,EAAK,aAAa,CAAE,KAAM,QAAS,CAAC,EACnDC,EAAO,UAAY,oGAAoGF,CAAE,kTAAkTb,CAAO,SAClb,SAAS,KAAK,YAAYc,CAAI,EAC9B,WAAW,IAAMA,EAAK,OAAO,EAAG,GAAI,CACtC,CAIA,SAASE,EAAgBC,EAA4B,CAEnD,OADe,KAAK,OAAO,aAAa,GAAGA,CAAM,CAAC,EACpC,QAAQ,MAAO,GAAG,EAAE,QAAQ,MAAO,GAAG,EAAE,QAAQ,KAAM,EAAE,CACxE,CAEA,eAAeC,GAAwC,CACrD,IAAMC,EAAQ,IAAI,WAAW,EAAE,EAC/B,cAAO,gBAAgBA,CAAK,EACrBH,EAAgBG,CAAK,CAC9B,CAEA,eAAeC,EAAsBC,EAAmC,CAEtE,IAAMvB,EADU,IAAI,YAAY,EACX,OAAOuB,CAAQ,EAC9BC,EAAS,MAAM,OAAO,OAAO,OAAO,UAAWxB,CAAI,EACzD,OAAOkB,EAAgB,IAAI,WAAWM,CAAM,CAAC,CAC/C,CAEA,SAASC,GAAwB,CAC/B,IAAMJ,EAAQ,IAAI,WAAW,EAAE,EAC/B,cAAO,gBAAgBA,CAAK,EACrBH,EAAgBG,CAAK,CAC9B,CAEA,IAAMK,EAAN,cAAkC,KAAM,CACtC,YAAYxB,EAAiB,CAC3B,MAAMA,CAAO,EACb,KAAK,KAAO,qBACd,CACF,EAEayB,EAAN,KAAc,CACX,KACA,QACA,KACA,OACA,MAAuB,KACvB,SAA8B,KAC9B,oBAA+C,CAAC,EAChD,aAA8B,KAEtC,YAAYC,EAAwB,CAAC,EAAG,CACtC,KAAK,OAASA,EACd,KAAK,KAAOA,EAAO,MAAQC,EAC3B,KAAK,QAAUD,EAAO,SAAW,OAAO,SAAS,SACjD,KAAK,KAAOA,EAAO,MAAQ,SAGvB,OAAO,OAAW,MACpB,KAAK,oBAAsB,CAAC,EAC5B,OAAO,iBAAiB,2BAA6B7B,GAAe,CAClE,KAAK,oBAAoB,KAAKA,EAAM,MAAM,CAC5C,CAAC,EACD,OAAO,cAAc,IAAI,MAAM,yBAAyB,CAAC,EAE7D,CAMA,MAAM,QAAQR,EAAoD,CAChE,IAAMuC,EAAS,MAAM,KAAK,SAAqB,UAAW,CACxD,KAAM,uBACN,QAAS,KAAK,OAChB,EAAGvC,GAAM,IAAI,EACb,YAAK,SAAWuC,EACTA,CACT,CAMA,MAAM,WAAWvC,EAA4E,CAC3F,OAAO,KAAK,SAA6C,cAAe,CACtE,KAAM,6BACR,EAAGA,GAAM,IAAI,CACf,CAMA,MAAM,YAAYwC,EAA6BxC,EAAoD,CACjG,OAAI,KAAK,UAAU,UAAY,WACtB,KAAK,uBAAuBwC,CAAO,EAErC,KAAK,gBAAgBA,EAASxC,GAAM,IAAI,CACjD,CAMA,MAAM,cAAcwC,EAA+BxC,EAAoD,CACrG,OAAI,KAAK,UAAU,UAAY,WACtB,KAAK,gCAAgCwC,CAAO,EAE9C,KAAK,yBAAyBA,EAASxC,GAAM,IAAI,CAC1D,CAMA,MAAM,mBAAmByC,EAAiD,CAExE,GAAI,KAAK,OAAO,iBACd,OAAO,KAAK,OAAO,iBAIrB,OAAW,CAAE,SAAAxB,CAAS,IAAK,KAAK,oBAC9B,GAAI,CAEF,IADiB,MAAMA,EAAS,QAAQ,CAAE,OAAQ,cAAe,CAAC,GACrD,KAAKyB,GAAKA,EAAE,YAAY,IAAMD,EAAc,YAAY,CAAC,EACpE,OAAOxB,CAEX,MAAQ,CAAC,CAIX,GAAI,OAAO,OAAW,KAAgB,OAAe,SAAU,CAC7D,IAAMA,EAAY,OAAe,SACjC,GAAI,CAEF,IADiB,MAAMA,EAAS,QAAQ,CAAE,OAAQ,cAAe,CAAC,GACrD,KAAKyB,GAAKA,EAAE,YAAY,IAAMD,EAAc,YAAY,CAAC,EACpE,OAAOxB,CAEX,MAAQ,CAAC,CACX,CAEA,MAAM,IAAIkB,EAAoB,iFAAiF,CACjH,CAEA,MAAc,uBAAuBK,EAAkD,CACrF,IAAIvB,EACJ,GAAI,CACFA,EAAW,MAAM,KAAK,mBAAmB,KAAK,SAAU,OAAO,CACjE,OAASb,EAAG,CACV,MAAAkB,EAAWlB,EAAY,QAAS,OAAO,EACjCA,CACR,CACA,GAAI,CACF,IAAMuC,EAAa,KAAK,MAAMH,EAAQ,OAAO,EAK7C,MAAO,CAAE,UAJS,MAAMvB,EAAS,QAAQ,CACvC,OAAQ,gBACR,OAAQ,CAAC0B,EAAY,KAAK,SAAU,OAAO,CAC7C,CAAC,EACwC,QAAS,KAAK,SAAU,OAAQ,CAC3E,OAASvC,EAAQ,CACf,IAAMwC,EAAMxC,GAAG,SAAS,SAAS,qBAAqB,EAClD,oFACAA,GAAG,SAAW,iBAClB,MAAAkB,EAAUsB,EAAK,OAAO,EAChB,IAAI,MAAMA,CAAG,CACrB,CACF,CAEA,MAAc,gCAAgCJ,EAAoD,CAChG,IAAIvB,EACJ,GAAI,CACFA,EAAW,MAAM,KAAK,mBAAmB,KAAK,SAAU,OAAO,CACjE,OAASb,EAAG,CACV,MAAAkB,EAAWlB,EAAY,QAAS,OAAO,EACjCA,CACR,CACA,GAAI,CAKF,MAAO,CAAE,UAJS,MAAMa,EAAS,QAAQ,CACvC,OAAQ,uBACR,OAAQ,CAAC,KAAK,SAAU,QAAS,KAAK,UAAUuB,CAAO,CAAC,CAC1D,CAAC,EACwC,QAAS,KAAK,SAAU,OAAQ,CAC3E,OAASpC,EAAQ,CACf,IAAMwC,EAAMxC,GAAG,SAAS,SAAS,qBAAqB,EAClD,oFACAA,GAAG,SAAW,iBAClB,MAAAkB,EAAUsB,EAAK,OAAO,EAChB,IAAI,MAAMA,CAAG,CACrB,CACF,CAEQ,gBAAgBJ,EAA6BK,EAAyC,CAC5F,OAAO,KAAK,SAAqB,OAAQ,CACvC,KAAM,uBACN,QAASL,EAAQ,QACjB,MAAOA,EAAQ,MACf,aAAc,KAAK,cAAgB,MACrC,EAAGK,CAAI,CACT,CAEQ,yBAAyBL,EAA+BK,EAAyC,CACvG,OAAO,KAAK,SAAqB,kBAAmB,CAClD,KAAM,gCACN,KAAML,EACN,aAAc,KAAK,cAAgB,MACrC,EAAGK,CAAI,CACT,CAEQ,MAAMC,EAAqB,CACjC,MAAO,KAAO,MAAM,KAAK,IAAI,YAAY,EAAE,OAAOA,CAAG,CAAC,EAAE,IAAIC,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,CAC3G,CAKA,MAAM,aAAgC,CAEpC,GAAI,CACF,IAAMC,EAAM,MAAM,MAAM,GAAG,KAAK,IAAI,oBAAqB,CACvD,YAAa,SACf,CAAC,EACD,OAAKA,EAAI,GAEF,CAAC,EADK,MAAMA,EAAI,KAAK,GACd,KAFM,EAGtB,MAAQ,CACN,MAAO,EACT,CACF,CAQA,MAAQ,CAMN,QAAS,MAAOX,GAA8C,CAE5D,IAAML,EAAW,MAAMH,EAAqB,EACtCoB,EAAY,MAAMlB,EAAsBC,CAAQ,EAChDkB,EAAQb,EAAO,OAASH,EAAc,EAG5C,eAAe,QACbpC,EACA,KAAK,UAAU,CAAE,SAAAkC,EAAU,MAAAkB,CAAM,CAAC,CACpC,EAGA,IAAMC,EAAU,IAAI,IAAI,GAAG,KAAK,IAAI,4BAA4B,EAChE,OAAAA,EAAQ,aAAa,IAAI,YAAad,EAAO,QAAQ,EACrDc,EAAQ,aAAa,IAAI,eAAgBd,EAAO,WAAW,EAC3Dc,EAAQ,aAAa,IAAI,gBAAiB,MAAM,EAChDA,EAAQ,aAAa,IAAI,QAAS,QAAQ,EAC1CA,EAAQ,aAAa,IAAI,QAASD,CAAK,EACvCC,EAAQ,aAAa,IAAI,iBAAkBF,CAAS,EACpDE,EAAQ,aAAa,IAAI,wBAAyB,MAAM,EAEjD,KAAK,cAAcA,EAAQ,SAAS,EAAGD,EAAOb,EAAO,WAAW,CACzE,EASA,aAAc,MACZe,EACAf,IACgC,CAChC,IAAMgB,EAAS,eAAe,QAAQvD,CAAiB,EACvD,GAAI,CAACuD,EACH,MAAM,IAAI,MAAM,iDAAiD,EAGnE,GAAM,CAAE,SAAArB,CAAS,EAAI,KAAK,MAAMqB,CAAM,EAEhCC,EAAW,MAAM,MAAM,GAAG,KAAK,IAAI,yBAA0B,CACjE,OAAQ,OACR,QAAS,CACP,eAAgB,mCAClB,EACA,KAAM,IAAI,gBAAgB,CACxB,WAAY,qBACZ,KAAAF,EACA,aAAcf,EAAO,YACrB,UAAWA,EAAO,SAClB,cAAeL,CACjB,CAAC,CACH,CAAC,EAKD,GAFA,eAAe,WAAWlC,CAAiB,EAEvC,CAACwD,EAAS,GAAI,CAChB,IAAMC,EAAQ,MAAMD,EAAS,KAAK,EAClC,MAAM,IAAI,MAAMC,EAAM,mBAAqB,uBAAuB,CACpE,CAEA,OAAOD,EAAS,KAAK,CACvB,EAQA,YAAcE,GAAmC,CAC/C,IAAMH,EAAS,eAAe,QAAQvD,CAAiB,EACvD,GAAI,CAACuD,EAAQ,MAAO,GACpB,GAAM,CAAE,MAAAH,CAAM,EAAI,KAAK,MAAMG,CAAM,EACnC,OAAOH,IAAUM,CACnB,EAOA,cACEC,GACmF,CACnF,IAAMC,EAAS,IAAI,IAAID,GAAO,OAAO,SAAS,IAAI,EAC5CF,EAAQG,EAAO,aAAa,IAAI,OAAO,EAE7C,GAAIH,EACF,MAAO,CACL,MAAAA,EACA,iBAAkBG,EAAO,aAAa,IAAI,mBAAmB,GAAK,MACpE,EAGF,IAAMN,EAAOM,EAAO,aAAa,IAAI,MAAM,EACrCR,EAAQQ,EAAO,aAAa,IAAI,OAAO,EAE7C,MAAI,CAACN,GAAQ,CAACF,EACL,CAAE,MAAO,iBAAkB,iBAAkB,iCAAkC,EAGjF,CAAE,KAAAE,EAAM,MAAAF,CAAM,CACvB,CACF,EAEQ,cACNO,EACAP,EACAS,EACsB,CACtB,OAAO,IAAI,QAAQ,CAACC,EAASC,IAAW,CAClC,KAAK,OAAS,WAChB,KAAK,eAAeJ,EAAKP,EAAOS,EAAaC,EAASC,CAAM,EAG5D,OAAO,SAAS,KAAOJ,CAE3B,CAAC,CACH,CAEQ,eACNA,EACAP,EACAS,EACAC,EACAC,EACA,CACA,IAAMC,EAAO,OAAO,SAAW,OAAO,WAAa,KAAe,EAC5DC,EAAM,OAAO,SAAW,OAAO,YAAc,KAAgB,EAQnE,GANA,KAAK,MAAQ,OAAO,KAClBN,EACA,gBACA,6BAAoDK,CAAI,QAAQC,CAAG,aACrE,EAEI,CAAC,KAAK,MAAO,CACfF,EAAO,CACL,KAAM,gBACN,QAAS,8DACX,CAAC,EACD,MACF,CAEA,IAAMG,EAAe,IAAI,IAAIL,CAAW,EAAE,OAGpCM,EAAe,YAAY,IAAM,CACrC,GAAI,CACF,GAAI,KAAK,OAAO,OAAQ,CACtB,cAAcA,CAAY,EAC1B,aAAaC,CAAO,EACpBL,EAAO,CACL,KAAM,iBACN,QAAS,uBACX,CAAC,EACD,MACF,CAGA,IAAMM,EAAW,KAAK,OAAO,UAAU,KACvC,GAAIA,GAAYA,EAAS,WAAWH,CAAY,EAAG,CACjD,cAAcC,CAAY,EAC1B,aAAaC,CAAO,EAEpB,IAAMR,EAAS,IAAI,IAAIS,CAAQ,EACzBf,EAAOM,EAAO,aAAa,IAAI,MAAM,EACrCU,EAAgBV,EAAO,aAAa,IAAI,OAAO,EAC/CH,EAAQG,EAAO,aAAa,IAAI,OAAO,EAI7C,GAFA,KAAK,OAAO,MAAM,EAEdH,EAAO,CACTM,EAAO,CACL,KAAM,eACN,QAASH,EAAO,aAAa,IAAI,mBAAmB,GAAKH,CAC3D,CAAC,EACD,MACF,CAEA,GAAIa,IAAkBlB,EAAO,CAC3BW,EAAO,CACL,KAAM,iBACN,QAAS,uCACX,CAAC,EACD,MACF,CAEIT,EACFQ,EAAQ,CAAE,KAAAR,EAAM,MAAOgB,CAAc,CAAC,EAEtCP,EAAO,CACL,KAAM,eACN,QAAS,yCACX,CAAC,CAEL,CACF,MAAQ,CAER,CACF,EAAG,GAAG,EAGAK,EAAU,WAAW,IAAM,CAC/B,cAAcD,CAAY,EAC1B,KAAK,OAAO,MAAM,EAClBJ,EAAO,CACL,KAAM,UACN,QAAS,sBACX,CAAC,CACH,EAAG,GAAe,CACpB,CAEQ,YAAYQ,EAAqC,CACvD,OAAOA,GAAY,KAAK,IAC1B,CAEA,MAAc,SAAYC,EAAgB3D,EAAiB4D,EAAwC,CACjG,IAAM1B,EAAO,KAAK,YAAY0B,CAAY,EACpCC,EAAS,mBAAmB,OAAO,SAAS,MAAM,EAExD,GAAI3B,IAAS,QAAS,CACpB,IAAMY,EAAM,GAAG,KAAK,IAAI,WAAWa,CAAM,WAAWE,CAAM,GAC1D,OAAO,IAAI,QAAQ,CAACZ,EAASC,IAAW,KAAK,UAAUJ,EAAK9C,EAASiD,EAASC,CAAM,CAAC,CACvF,CAEA,GAAIhB,IAAS,WAAY,CACvB,IAAMY,EAAM,GAAG,KAAK,IAAI,WAAWa,CAAM,WAAWE,CAAM,GAC1D,cAAO,SAAS,KAAOf,EAChB,IAAI,QAAQ,IAAM,CAAC,CAAC,CAC7B,CAGA,IAAMA,EAAM,GAAG,KAAK,IAAI,iBAAiBa,CAAM,WAAWE,CAAM,GAChE,OAAO,KAAK,gBAAmBf,EAAKa,EAAQ3D,EAAS6D,CAAM,CAC7D,CAEQ,gBAAmBf,EAAaa,EAAgB3D,EAAiB6D,EAA4B,CACnG,OAAO,IAAI,QAAQ,CAACZ,EAASC,IAAW,CACtC,IAAIY,EAAgB,GAChBC,EAAU,GACVC,EAA4B,KAE1BC,EAAUC,GAAmB,CAC7BH,IACJA,EAAU,GACVG,EAAG,EACL,EAEMC,EAAU,IAAM,CACpB,aAAaC,CAAY,EACzB,aAAaC,CAAc,EAC3BL,GAAO,QAAQ,EACfA,EAAQ,IACV,EAEAA,EAAQ,IAAI5E,EAAY,CACtB,IAAA0D,EACA,KAAM,KAAK,KACX,QAAS,IAAM,CACbmB,EAAO,IAAM,CACX,aAAaG,CAAY,EACzB,aAAaC,CAAc,EAC3BL,EAAQ,KACRd,EAAO,CAAE,KAAM,iBAAkB,QAAS,4BAA6B,CAAiB,CAC1F,CAAC,CACH,EACA,UAAYpD,GAAsB,CAChC,GAAIA,EAAK,OAAS,gBAAiB,CACjCgE,EAAgB,GAChBE,GAAO,YAAYhE,CAAO,EAC1B,MACF,CAEA,GAAIF,EAAK,OAAS,gBAAiB,CACjCmE,EAAO,IAAM,CACXE,EAAQ,EACRjB,EAAO,CAAE,KAAM,iBAAkB,QAAS,4BAA6B,CAAiB,CAC1F,CAAC,EACD,MACF,CAEA,GAAIpD,EAAK,OAAS,+BAAgC,CAChD,KAAK,2BAA2BkE,CAAM,EACtC,MACF,EAGElE,EAAK,OAAS,yBACdA,EAAK,OAAS,yBACdA,EAAK,OAAS,kCACdA,EAAK,OAAS,iCAEdmE,EAAO,IAAM,CACXE,EAAQ,EACJrE,EAAK,QACHA,EAAK,OAAS,yBACZA,EAAK,eAAc,KAAK,aAAeA,EAAK,cAChDmD,EAAQ,CAAE,QAASnD,EAAK,QAAS,MAAOA,EAAK,MAAO,QAASA,EAAK,SAAW,SAAU,CAAM,GACpFA,EAAK,OAAS,+BACvBmD,EAAQ,CAAE,QAASnD,EAAK,QAAS,MAAOA,EAAK,KAAM,CAAM,EAEzDmD,EAAQ,CAAE,UAAWnD,EAAK,UAAW,QAASA,EAAK,OAAQ,CAAM,EAGnEoD,EAAOpD,EAAK,KAAK,CAErB,CAAC,CAEL,CACF,CAAC,EAGD,IAAMsE,EAAe,WAAW,IAAM,CACpC,GAAIN,GAAiBC,EAAS,OAC9BI,EAAQ,EACR,QAAQ,KAAK,sGAAsG,EACnHxD,EAAU,EACV,IAAM6C,EAAW,GAAG,KAAK,IAAI,WAAWG,CAAM,WAAWE,CAAM,GAC/D,KAAK,UAAUL,EAAUxD,EAAUsE,GAAaL,EAAO,IAAMhB,EAAQqB,CAAG,CAAC,EAAIC,GAAaN,EAAO,IAAMf,EAAOqB,CAAG,CAAC,CAAC,CACrH,EAAG,GAAoB,EAGjBF,EAAiB,WAAW,IAAM,CACtCJ,EAAO,IAAM,CACXE,EAAQ,EACRjB,EAAO,CAAE,KAAM,UAAW,QAAS,mBAAoB,CAAiB,CAC1E,CAAC,CACH,EAAG,GAAe,CACpB,CAAC,CACH,CAEQ,2BAA2Bc,EAAoB,CACrD,IAAMQ,EAAc5C,GAAwBoC,EAAM,YAAYpC,CAAM,EAEpE,IAAI3B,EAAa,CACf,UAAW,KAAK,oBAChB,SAAU,IAAM,CACduE,EAAW,CAAE,KAAM,6BAA8B,QAAS,GAAO,MAAO,CAAE,KAAM,iBAAkB,QAAS,0BAA2B,CAAE,CAAC,CAC3I,EACA,SAAU,MAAOlE,GAAa,CAC5B,GAAI,CAEF,IAAMmE,GADW,MAAMnE,EAAS,QAAQ,CAAE,OAAQ,qBAAsB,CAAC,GAChD,CAAC,EAC1B,GAAI,CAACmE,EAAS,MAAM,IAAI,MAAM,qBAAqB,EAGnD,IAAMC,EAAe,MAAM,MAAM,GAAG,KAAK,IAAI,2BAA4B,CACvE,OAAQ,OACR,YAAa,SACf,CAAC,EACD,GAAI,CAACA,EAAa,GAAI,MAAM,IAAI,MAAM,yBAAyB,EAC/D,GAAM,CAAE,QAAA1E,CAAQ,EAAI,MAAM0E,EAAa,KAAK,EAGtC1C,EAAa,KAAK,MAAMhC,CAAO,EAC/B2E,EAAY,MAAMrE,EAAS,QAAQ,CACvC,OAAQ,gBACR,OAAQ,CAAC0B,EAAYyC,CAAO,CAC9B,CAAC,EAGKG,EAAU,MAAM,MAAM,GAAG,KAAK,IAAI,iBAAkB,CACxD,OAAQ,OACR,QAAS,CAAE,eAAgB,kBAAmB,EAC9C,YAAa,UACb,KAAM,KAAK,UAAU,CAAE,QAAAH,EAAS,UAAAE,EAAW,QAAA3E,CAAQ,CAAC,CACtD,CAAC,EACD,GAAI,CAAC4E,EAAQ,GAAI,CACf,IAAML,EAAM,MAAMK,EAAQ,KAAK,EAC/B,MAAM,IAAI,MAAML,EAAI,OAAS,uBAAuB,CACtD,CACA,GAAM,CAAE,IAAAM,CAAI,EAAI,MAAMD,EAAQ,KAAK,EAEnCJ,EAAW,CAAE,KAAM,6BAA8B,QAAS,GAAM,QAASK,EAAI,QAAS,MAAOA,EAAI,EAAG,CAAC,CACvG,OAASpF,EAAQ,CACf+E,EAAW,CAAE,KAAM,6BAA8B,QAAS,GAAO,MAAO,CAAE,KAAM,UAAW,QAAS/E,EAAE,SAAW,uBAAwB,CAAE,CAAC,CAC9I,CACF,CACF,CAAC,CACH,CAEQ,UACNqD,EACA9C,EACAiD,EACAC,EACA,CAEA,IAAMC,EAAO,OAAO,SAAW,OAAO,WAAa,KAAe,EAC5DC,EAAM,OAAO,SAAW,OAAO,YAAc,KAAgB,EAQnE,GANA,KAAK,MAAQ,OAAO,KAClBN,EACA,UACA,6BAAoDK,CAAI,QAAQC,CAAG,aACrE,EAEI,CAAC,KAAK,MAAO,CACfF,EAAO,CACL,KAAM,gBACN,QAAS,uDACX,CAAC,EACD,MACF,CAEA,IAAMiB,EAAU,IAAM,CACpB,OAAO,oBAAoB,UAAWW,CAAa,EACnD,cAAcC,CAAU,EACxB,aAAaxB,CAAO,CACtB,EAGMwB,EAAa,YAAY,IAAM,CAC/B,KAAK,OAAO,SACdZ,EAAQ,EACRjB,EAAO,CACL,KAAM,iBACN,QAAS,uBACX,CAAC,EAEL,EAAG,GAAG,EAGAK,EAAU,WAAW,IAAM,CAC/BY,EAAQ,EACR,KAAK,OAAO,MAAM,EAClBjB,EAAO,CACL,KAAM,UACN,QAAS,mBACX,CAAC,CACH,EAAG,GAAe,EAGZ4B,EAAiBjF,GAAwB,CAC7C,GAAIA,EAAM,SAAW,KAAK,KAAM,OAEhC,IAAMC,EAAOD,EAAM,KAEnB,GAAIC,EAAK,OAAS,gBAAiB,CAEjC,KAAK,OAAO,YAAYE,EAAS,KAAK,IAAI,EAC1C,MACF,CAEA,GAAIF,EAAK,OAAS,gBAAiB,CACjCqE,EAAQ,EACR,KAAK,OAAO,MAAM,EAClBjB,EAAO,CACL,KAAM,iBACN,QAAS,4BACX,CAAC,EACD,MACF,EAIEpD,EAAK,OAAS,yBACdA,EAAK,OAAS,yBACdA,EAAK,OAAS,kCACdA,EAAK,OAAS,kCAEdqE,EAAQ,EACR,KAAK,OAAO,MAAM,EAEdrE,EAAK,QACHA,EAAK,OAAS,yBACZA,EAAK,eAAc,KAAK,aAAeA,EAAK,cAChDmD,EAAQ,CAAE,QAASnD,EAAK,QAAS,MAAOA,EAAK,MAAO,QAASA,EAAK,SAAW,SAAU,CAAM,GACpFA,EAAK,OAAS,+BACvBmD,EAAQ,CAAE,QAASnD,EAAK,QAAS,MAAOA,EAAK,KAAM,CAAM,EAEzDmD,EAAQ,CAAE,UAAWnD,EAAK,UAAW,QAASA,EAAK,OAAQ,CAAM,EAGnEoD,EAAOpD,EAAK,KAAK,EAGvB,EAEA,OAAO,iBAAiB,UAAWgF,CAAa,CAClD,CAKA,YAAa,CACX,KAAK,OAAO,MAAM,EAClB,KAAK,MAAQ,IACf,CACF,EAOaE,EAAN,KAAwD,CACrD,QACA,QACA,MACA,QAER,YAAYC,EAAkBC,EAAwB,CACpD,KAAK,QAAUD,EACf,KAAK,QAAUC,EAAW,QAC1B,KAAK,MAAQA,EAAW,MACxB,KAAK,QAAUA,EAAW,OAC5B,CAEA,MAAM,QAAQ,CAAE,OAAAC,EAAQ,OAAAC,CAAO,EAAqD,CAClF,OAAQD,EAAQ,CACd,IAAK,eACL,IAAK,sBACH,MAAO,CAAC,KAAK,OAAO,EAEtB,IAAK,cACH,MAAO,MAET,IAAK,gBAAiB,CACpB,GAAI,KAAK,UAAY,WACnB,GAAI,CAEF,OAAO,MADU,MAAM,KAAK,QAAQ,mBAAmB,KAAK,OAAO,GAC7C,QAAQ,CAAE,OAAAA,EAAQ,OAAAC,CAAO,CAAC,CAClD,OAAS3F,EAAQ,CACf,MAAAkB,EAAUlB,GAAG,SAAW,iCAAkC,OAAO,EAC3DA,CACR,CAGF,IAAMO,EAAU,KAAK,YAAYoF,EAAQ,CAAC,CAAW,EAErD,OADe,MAAM,KAAK,QAAQ,YAAY,CAAE,QAAApF,EAAS,MAAO,KAAK,KAAM,CAAC,GAC9D,SAChB,CAEA,IAAK,uBAAwB,CAC3B,GAAI,KAAK,UAAY,WACnB,GAAI,CAEF,OAAO,MADU,MAAM,KAAK,QAAQ,mBAAmB,KAAK,OAAO,GAC7C,QAAQ,CAAE,OAAAmF,EAAQ,OAAAC,CAAO,CAAC,CAClD,OAAS3F,EAAQ,CACf,MAAAkB,EAAUlB,GAAG,SAAW,iCAAkC,OAAO,EAC3DA,CACR,CAEF,IAAMK,EAAO,KAAK,MAAMsF,EAAQ,CAAC,CAAW,EAE5C,OADe,MAAM,KAAK,QAAQ,cAActF,CAAI,GACtC,SAChB,CAEA,QACE,MAAM,IAAI,MAAM,uBAAuBqF,CAAM,EAAE,CACnD,CACF,CAEQ,YAAYE,EAAqB,CACvC,IAAMC,EAAQ,IAAI,YACfD,EAAI,WAAW,IAAI,EAAIA,EAAI,MAAM,CAAC,EAAIA,GAAK,MAAM,SAAS,EAAG,IAAIjD,GAAK,SAASA,EAAG,EAAE,CAAC,CACxF,EACA,OAAO,IAAI,YAAY,EAAE,OAAOkD,CAAK,CACvC,CACF,EAGOC,EAAQ9D,EAGX+D,EAAkC,KAE/B,SAASC,EAAW/D,EAAiC,CAC1D,OAAI,CAAC8D,GAAmB9D,KACtB8D,EAAkB,IAAI/D,EAAQC,CAAM,GAE/B8D,CACT","names":["index_exports","__export","OpenKey","OpenKeyEIP1193Provider","index_default","getOpenKey","__toCommonJS","DEFAULT_HOST","OAUTH_STORAGE_KEY","IframeModal","opts","isMobile","style","backdrop","e","card","handle","closeBtn","event","data","h","message","WalletPicker","title","empty","list","info","provider","item","icon","name","cancel","showToast","variant","bg","root","shadow","base64UrlEncode","buffer","generateCodeVerifier","array","generateCodeChallenge","verifier","digest","generateState","ExternalWalletError","OpenKey","config","DEFAULT_HOST","result","request","targetAddress","a","hexMessage","msg","mode","str","b","res","challenge","state","authUrl","code","stored","response","error","receivedState","url","urlObj","redirectUri","resolve","reject","left","top","redirectHost","pollInterval","timeout","popupUrl","returnedState","override","action","modeOverride","origin","readyReceived","settled","modal","settle","fn","cleanup","readyTimeout","overallTimeout","val","err","sendResult","address","challengeRes","signature","linkRes","key","handleMessage","pollClosed","OpenKeyEIP1193Provider","openkey","authResult","method","params","hex","bytes","index_default","defaultInstance","getOpenKey"]}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["// OpenKey SDK - Browser client for third-party apps\n// Provides \"Sign with OpenKey\" functionality via popup or iframe\n\nexport interface EIP1193Provider {\n  request(args: { method: string; params?: any[] }): Promise<any>;\n}\n\ninterface EIP6963ProviderInfo {\n  uuid: string;\n  name: string;\n  icon: string;\n  rdns: string;\n}\n\ninterface EIP6963ProviderDetail {\n  info: EIP6963ProviderInfo;\n  provider: EIP1193Provider;\n}\n\nexport type OpenKeyMode = 'iframe' | 'popup' | 'redirect';\n\nexport interface OpenKeyConfig {\n  /** OpenKey host URL (default: https://openkey.so) */\n  host?: string;\n  /** OAuth API host URL (default: derived from host by prefixing 'api.') */\n  oauthHost?: string;\n  /** App identifier for display */\n  appName?: string;\n  /** UI mode: 'iframe' (default), 'popup', or 'redirect' */\n  mode?: OpenKeyMode;\n  /** App-provided wallet provider for external key signing */\n  externalProvider?: EIP1193Provider;\n}\n\nexport interface SignMessageRequest {\n  message: string;\n  keyId?: string; // If not provided, user selects\n}\n\nexport interface SignTypedDataRequest {\n  domain: {\n    name?: string;\n    version?: string;\n    chainId?: number;\n    verifyingContract?: string;\n  };\n  types: Record<string, Array<{ name: string; type: string }>>;\n  primaryType: string;\n  message: Record<string, unknown>;\n  keyId?: string;\n}\n\nexport interface SignResult {\n  signature: string;\n  address: string;\n}\n\nexport interface AuthResult {\n  address: string;\n  keyId: string;\n  keyType: 'MANAGED' | 'EXTERNAL';\n}\n\nexport interface OpenKeyError {\n  code: 'USER_CANCELLED' | 'POPUP_BLOCKED' | 'TIMEOUT' | 'NO_KEY' | 'UNAUTHORIZED' | 'UNKNOWN' | 'STATE_MISMATCH';\n  message: string;\n}\n\n// ======= OAuth 2.1 Types =======\n\n/** OAuth configuration for third-party apps */\nexport interface OAuthConfig {\n  /** OAuth client_id (registered with OpenKey) */\n  clientId: string;\n  /** Redirect URI (must match registered URI) */\n  redirectUri: string;\n  /** State parameter for CSRF protection (auto-generated if not provided) */\n  state?: string;\n}\n\n/** Result from OAuth authorization */\nexport interface OAuthResult {\n  /** Authorization code (exchange for tokens) */\n  code: string;\n  /** State parameter (verify matches request) */\n  state: string;\n}\n\n/** Response from token exchange */\nexport interface OAuthTokenResponse {\n  access_token: string;\n  token_type: 'Bearer';\n  expires_in: number;\n  id_token: string;\n  scope: string;\n  refresh_token?: string;\n}\n\ntype MessageType =\n  | { type: 'openkey:auth:request'; appName: string }\n  | { type: 'openkey:auth:response'; success: true; address: string; keyId: string; keyType?: 'MANAGED' | 'EXTERNAL'; sessionToken?: string }\n  | { type: 'openkey:auth:response'; success: false; error: OpenKeyError }\n  | { type: 'openkey:sign:request'; message: string; keyId?: string; sessionToken?: string }\n  | { type: 'openkey:sign:response'; success: true; signature: string; address: string }\n  | { type: 'openkey:sign:response'; success: false; error: OpenKeyError }\n  | { type: 'openkey:signTypedData:request'; data: SignTypedDataRequest; sessionToken?: string }\n  | { type: 'openkey:signTypedData:response'; success: true; signature: string; address: string }\n  | { type: 'openkey:signTypedData:response'; success: false; error: OpenKeyError }\n  | { type: 'openkey:link-wallet:request' }\n  | { type: 'openkey:link-wallet:response'; success: true; address: string; keyId: string }\n  | { type: 'openkey:link-wallet:response'; success: false; error: OpenKeyError }\n  | { type: 'openkey:link-wallet:delegate' }\n  | { type: 'openkey:link-wallet:result'; success: true; address: string; keyId: string }\n  | { type: 'openkey:link-wallet:result'; success: false; error: OpenKeyError }\n  | { type: 'openkey:resize'; height: number }\n  | { type: 'openkey:ready' }\n  | { type: 'openkey:close' };\n\nconst DEFAULT_HOST = 'https://openkey.so';\nconst POPUP_WIDTH = 400;\nconst POPUP_HEIGHT = 600;\nconst DEFAULT_TIMEOUT = 5 * 60 * 1000; // 5 minutes\nconst IFRAME_READY_TIMEOUT = 3000; // 3 seconds\nconst OAUTH_STORAGE_KEY = 'openkey_oauth';\n\nclass IframeModal {\n  private root: HTMLDivElement;\n  private shadow: ShadowRoot;\n  private iframe: HTMLIFrameElement;\n  private onClose: () => void;\n  private onMessage: (data: MessageType) => void;\n  private messageHandler: (event: MessageEvent) => void;\n  private host: string;\n\n  constructor(opts: { url: string; host: string; onClose: () => void; onMessage: (data: MessageType) => void }) {\n    this.host = opts.host;\n    this.onClose = opts.onClose;\n    this.onMessage = opts.onMessage;\n\n    const isMobile = window.matchMedia('(max-width: 639px)').matches;\n\n    this.root = document.createElement('div');\n    this.shadow = this.root.attachShadow({ mode: 'closed' });\n\n    const style = document.createElement('style');\n    style.textContent = `\n      :host{all:initial}\n      .ok-backdrop{position:fixed;inset:0;background:rgba(0,0,0,0.4);backdrop-filter:blur(4px);z-index:999999;display:flex;align-items:${isMobile ? 'flex-end' : 'center'};justify-content:center;animation:ok-fade-in 150ms ease-out}\n      .ok-card{position:relative;background:#fafafa;width:${isMobile ? '100%' : '400px'};border-radius:${isMobile ? '16px 16px 0 0' : '16px'};box-shadow:0 25px 50px -12px rgba(0,0,0,0.25);overflow:hidden;overflow-y:auto;animation:${isMobile ? 'ok-slide-up 250ms ease-out' : 'ok-scale-in 200ms ease-out'};max-height:90vh}\n      .ok-close{position:absolute;top:8px;right:8px;width:24px;height:24px;border:none;background:transparent;color:#6b7280;font-size:18px;cursor:pointer;z-index:1;display:flex;align-items:center;justify-content:center;border-radius:4px}\n      .ok-close:hover{color:#111827}\n      .ok-handle{width:40px;height:4px;background:#d4d4d4;border-radius:2px;margin:8px auto 0}\n      iframe{border:none;width:100%;height:400px;display:block;transition:height 200ms ease}\n      .ok-backdrop.ok-exit{animation:ok-fade-out 150ms ease-in}\n      .ok-backdrop.ok-exit .ok-card{animation:${isMobile ? 'ok-slide-down 200ms ease-in' : 'ok-scale-out 150ms ease-in'}}\n      @keyframes ok-fade-in{from{opacity:0}to{opacity:1}}\n      @keyframes ok-fade-out{from{opacity:1}to{opacity:0}}\n      @keyframes ok-scale-in{from{opacity:0;transform:scale(0.95)}to{opacity:1;transform:scale(1)}}\n      @keyframes ok-scale-out{from{opacity:1;transform:scale(1)}to{opacity:0;transform:scale(0.95)}}\n      @keyframes ok-slide-up{from{transform:translateY(100%)}to{transform:translateY(0)}}\n      @keyframes ok-slide-down{from{transform:translateY(0)}to{transform:translateY(100%)}}\n    `;\n\n    const backdrop = document.createElement('div');\n    backdrop.className = 'ok-backdrop';\n    backdrop.addEventListener('click', (e) => {\n      if (e.target === backdrop) this.close();\n    });\n\n    const card = document.createElement('div');\n    card.className = 'ok-card';\n\n    if (isMobile) {\n      const handle = document.createElement('div');\n      handle.className = 'ok-handle';\n      card.appendChild(handle);\n    }\n\n    const closeBtn = document.createElement('button');\n    closeBtn.className = 'ok-close';\n    closeBtn.textContent = '\\u00d7';\n    closeBtn.addEventListener('click', () => this.close());\n    card.appendChild(closeBtn);\n\n    this.iframe = document.createElement('iframe');\n    this.iframe.src = opts.url;\n    this.iframe.setAttribute('allow', 'publickey-credentials-get *; publickey-credentials-create *');\n    this.iframe.setAttribute('sandbox', 'allow-scripts allow-same-origin allow-forms allow-popups');\n    card.appendChild(this.iframe);\n\n    backdrop.appendChild(card);\n    this.shadow.appendChild(style);\n    this.shadow.appendChild(backdrop);\n\n    this.messageHandler = (event: MessageEvent) => {\n      if (event.origin !== this.host) return;\n      const data = event.data as MessageType;\n      if (data.type === 'openkey:resize') {\n        const h = Math.min(data.height, Math.floor(window.innerHeight * 0.85));\n        this.iframe.style.height = `${h}px`;\n        return;\n      }\n      this.onMessage(data);\n    };\n    window.addEventListener('message', this.messageHandler);\n    document.body.appendChild(this.root);\n  }\n\n  postMessage(message: object) {\n    this.iframe.contentWindow?.postMessage(message, this.host);\n  }\n\n  destroy() {\n    window.removeEventListener('message', this.messageHandler);\n    this.root.remove();\n  }\n\n  private close() {\n    const backdrop = this.shadow.querySelector('.ok-backdrop');\n    if (backdrop) {\n      backdrop.classList.add('ok-exit');\n      setTimeout(() => {\n        this.destroy();\n        this.onClose();\n      }, 200);\n    } else {\n      this.destroy();\n      this.onClose();\n    }\n  }\n}\n\nclass WalletPicker {\n  private root: HTMLDivElement;\n  private shadow: ShadowRoot;\n\n  constructor(opts: { providers: EIP6963ProviderDetail[]; onSelect: (provider: EIP1193Provider) => void; onCancel: () => void }) {\n    this.root = document.createElement('div');\n    this.shadow = this.root.attachShadow({ mode: 'closed' });\n\n    const style = document.createElement('style');\n    style.textContent = `\n      :host{all:initial}\n      .wp-backdrop{position:fixed;inset:0;background:rgba(0,0,0,0.4);backdrop-filter:blur(4px);z-index:1000000;display:flex;align-items:center;justify-content:center;animation:wp-fade 150ms ease-out}\n      .wp-card{background:#fff;width:340px;border-radius:16px;box-shadow:0 25px 50px -12px rgba(0,0,0,0.25);padding:20px;animation:wp-scale 200ms ease-out}\n      .wp-title{font:600 16px/1.3 system-ui,sans-serif;color:#111;margin:0 0 12px}\n      .wp-list{list-style:none;margin:0;padding:0;display:flex;flex-direction:column;gap:6px}\n      .wp-item{display:flex;align-items:center;gap:10px;padding:10px 12px;border:1px solid #e5e7eb;border-radius:10px;background:transparent;cursor:pointer;font:14px/1.3 system-ui,sans-serif;color:#111;width:100%;text-align:left;transition:border-color 150ms}\n      .wp-item:hover{border-color:#6366f1}\n      .wp-icon{width:28px;height:28px;border-radius:6px}\n      .wp-empty{font:14px/1.4 system-ui,sans-serif;color:#6b7280;text-align:center;padding:16px 0}\n      .wp-cancel{display:block;width:100%;margin-top:12px;padding:8px;border:none;background:transparent;color:#6b7280;font:14px/1.3 system-ui,sans-serif;cursor:pointer;border-radius:8px}\n      .wp-cancel:hover{background:#f3f4f6;color:#111}\n      @keyframes wp-fade{from{opacity:0}to{opacity:1}}\n      @keyframes wp-scale{from{opacity:0;transform:scale(0.95)}to{opacity:1;transform:scale(1)}}\n      @media(prefers-color-scheme:dark){\n        .wp-card{background:#1a1a1a;box-shadow:0 25px 50px -12px rgba(0,0,0,0.5)}\n        .wp-title{color:#f3f4f6}\n        .wp-item{border-color:#374151;color:#f3f4f6}\n        .wp-item:hover{border-color:#818cf8}\n        .wp-empty{color:#9ca3af}\n        .wp-cancel{color:#9ca3af}\n        .wp-cancel:hover{background:#262626;color:#f3f4f6}\n      }\n    `;\n\n    const backdrop = document.createElement('div');\n    backdrop.className = 'wp-backdrop';\n    backdrop.addEventListener('click', (e) => { if (e.target === backdrop) { this.destroy(); opts.onCancel(); } });\n\n    const card = document.createElement('div');\n    card.className = 'wp-card';\n\n    const title = document.createElement('h2');\n    title.className = 'wp-title';\n    title.textContent = 'Select a wallet';\n    card.appendChild(title);\n\n    if (opts.providers.length === 0) {\n      const empty = document.createElement('div');\n      empty.className = 'wp-empty';\n      empty.textContent = 'No wallets detected';\n      card.appendChild(empty);\n    } else {\n      const list = document.createElement('ul');\n      list.className = 'wp-list';\n      for (const { info, provider } of opts.providers) {\n        const item = document.createElement('button');\n        item.className = 'wp-item';\n        if (info.icon) {\n          const icon = document.createElement('img');\n          icon.className = 'wp-icon';\n          icon.src = info.icon;\n          icon.alt = info.name;\n          item.appendChild(icon);\n        }\n        const name = document.createElement('span');\n        name.textContent = info.name;\n        item.appendChild(name);\n        item.addEventListener('click', () => { this.destroy(); opts.onSelect(provider); });\n        list.appendChild(item);\n      }\n      card.appendChild(list);\n    }\n\n    const cancel = document.createElement('button');\n    cancel.className = 'wp-cancel';\n    cancel.textContent = 'Cancel';\n    cancel.addEventListener('click', () => { this.destroy(); opts.onCancel(); });\n    card.appendChild(cancel);\n\n    backdrop.appendChild(card);\n    this.shadow.appendChild(style);\n    this.shadow.appendChild(backdrop);\n    document.body.appendChild(this.root);\n  }\n\n  destroy() {\n    this.root.remove();\n  }\n}\n\nfunction showToast(message = 'Opening in new window\\u2026', variant: 'info' | 'error' = 'info') {\n  const bg = variant === 'error' ? '#dc2626' : '#1f2937';\n  const root = document.createElement('div');\n  const shadow = root.attachShadow({ mode: 'closed' });\n  shadow.innerHTML = `<style>:host{all:initial}.ok-toast{position:fixed;top:16px;right:16px;z-index:1000000;background:${bg};color:#f9fafb;padding:10px 16px;border-radius:8px;font:14px/1.4 system-ui,sans-serif;box-shadow:0 4px 12px rgba(0,0,0,0.15);animation:ok-t-in 200ms ease-out;max-width:360px}@keyframes ok-t-in{from{opacity:0;transform:translateY(-8px)}to{opacity:1;transform:translateY(0)}}</style><div class=\"ok-toast\">${message}</div>`;\n  document.body.appendChild(root);\n  setTimeout(() => root.remove(), 4000);\n}\n\n// ======= PKCE Utilities =======\n\nfunction base64UrlEncode(buffer: Uint8Array): string {\n  const base64 = btoa(String.fromCharCode(...buffer));\n  return base64.replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=/g, '');\n}\n\nasync function generateCodeVerifier(): Promise<string> {\n  const array = new Uint8Array(32);\n  crypto.getRandomValues(array);\n  return base64UrlEncode(array);\n}\n\nasync function generateCodeChallenge(verifier: string): Promise<string> {\n  const encoder = new TextEncoder();\n  const data = encoder.encode(verifier);\n  const digest = await crypto.subtle.digest('SHA-256', data);\n  return base64UrlEncode(new Uint8Array(digest));\n}\n\nfunction generateState(): string {\n  const array = new Uint8Array(16);\n  crypto.getRandomValues(array);\n  return base64UrlEncode(array);\n}\n\nclass ExternalWalletError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'ExternalWalletError';\n  }\n}\n\nexport class OpenKey {\n  private host: string;\n  private oauthHost: string;\n  private appName: string;\n  private mode: OpenKeyMode;\n  private config: OpenKeyConfig;\n  private popup: Window | null = null;\n  private lastAuth: AuthResult | null = null;\n  private discoveredProviders: EIP6963ProviderDetail[] = [];\n  private sessionToken: string | null = null;\n\n  constructor(config: OpenKeyConfig = {}) {\n    this.config = config;\n    this.host = config.host || DEFAULT_HOST;\n    this.oauthHost = config.oauthHost || this.deriveOAuthHost(this.host);\n    this.appName = config.appName || window.location.hostname;\n    this.mode = config.mode ?? 'iframe';\n\n    // Listen for EIP-6963 wallet announcements\n    if (typeof window !== 'undefined') {\n      this.discoveredProviders = [];\n      window.addEventListener('eip6963:announceProvider', (event: any) => {\n        this.discoveredProviders.push(event.detail);\n      });\n      window.dispatchEvent(new Event('eip6963:requestProvider'));\n    }\n  }\n\n  /**\n   * Derive the OAuth API host from the main host by prefixing 'api.'\n   * @param host - The main host URL\n   * @returns The derived OAuth API host URL\n   */\n  private deriveOAuthHost(host: string): string {\n    try {\n      const url = new URL(host);\n      url.hostname = 'api.' + url.hostname;\n      return url.toString().replace(/\\/$/, '');\n    } catch {\n      return 'https://api.openkey.so';\n    }\n  }\n\n  /**\n   * Connect to OpenKey and get user's wallet address\n   * Opens auth flow for user to select/create a key\n   */\n  async connect(opts?: { mode?: OpenKeyMode }): Promise<AuthResult> {\n    const result = await this.openFlow<AuthResult>('connect', {\n      type: 'openkey:auth:request',\n      appName: this.appName,\n    }, opts?.mode);\n    this.lastAuth = result;\n    return result;\n  }\n\n  /**\n   * Link an external wallet to the user's OpenKey account\n   * Opens link-wallet widget flow\n   */\n  async linkWallet(opts?: { mode?: OpenKeyMode }): Promise<{ address: string; keyId: string }> {\n    return this.openFlow<{ address: string; keyId: string }>('link-wallet', {\n      type: 'openkey:link-wallet:request',\n    }, opts?.mode);\n  }\n\n  /**\n   * Sign a message with the user's OpenKey wallet\n   * For external keys, routes directly to the user's wallet provider\n   */\n  async signMessage(request: SignMessageRequest, opts?: { mode?: OpenKeyMode }): Promise<SignResult> {\n    if (this.lastAuth?.keyType === 'EXTERNAL') {\n      return this.signWithExternalWallet(request);\n    }\n    return this.signWithOpenKey(request, opts?.mode);\n  }\n\n  /**\n   * Sign typed data (EIP-712) with the user's OpenKey wallet\n   * For external keys, routes directly to the user's wallet provider\n   */\n  async signTypedData(request: SignTypedDataRequest, opts?: { mode?: OpenKeyMode }): Promise<SignResult> {\n    if (this.lastAuth?.keyType === 'EXTERNAL') {\n      return this.signTypedDataWithExternalWallet(request);\n    }\n    return this.signTypedDataWithOpenKey(request, opts?.mode);\n  }\n\n  /**\n   * Find a wallet provider that controls the given address.\n   * Checks: 1) app-provided externalProvider, 2) EIP-6963 discovered wallets, 3) window.ethereum\n   */\n  async findWalletProvider(targetAddress: string): Promise<EIP1193Provider> {\n    // 1. Try app-provided externalProvider first\n    if (this.config.externalProvider) {\n      return this.config.externalProvider;\n    }\n\n    // 2. Check EIP-6963 discovered wallets silently (no popup)\n    for (const { provider } of this.discoveredProviders) {\n      try {\n        const accounts = await provider.request({ method: 'eth_accounts' }) as string[];\n        if (accounts.some(a => a.toLowerCase() === targetAddress.toLowerCase())) {\n          return provider;\n        }\n      } catch {}\n    }\n\n    // 3. Fall back to window.ethereum silently\n    if (typeof window !== 'undefined' && (window as any).ethereum) {\n      const provider = (window as any).ethereum as EIP1193Provider;\n      try {\n        const accounts = await provider.request({ method: 'eth_accounts' }) as string[];\n        if (accounts.some(a => a.toLowerCase() === targetAddress.toLowerCase())) {\n          return provider;\n        }\n      } catch {}\n    }\n\n    throw new ExternalWalletError('External wallet not found. Connect the wallet that owns this key and try again.');\n  }\n\n  private async signWithExternalWallet(request: SignMessageRequest): Promise<SignResult> {\n    let provider: EIP1193Provider;\n    try {\n      provider = await this.findWalletProvider(this.lastAuth!.address);\n    } catch (e) {\n      showToast((e as Error).message, 'error');\n      throw e;\n    }\n    try {\n      const hexMessage = this.toHex(request.message);\n      const signature = await provider.request({\n        method: 'personal_sign',\n        params: [hexMessage, this.lastAuth!.address],\n      });\n      return { signature: signature as string, address: this.lastAuth!.address };\n    } catch (e: any) {\n      const msg = e?.message?.includes('not been authorized')\n        ? 'Wallet rejected the request. Approve the connection in your wallet and try again.'\n        : e?.message || 'Signing failed';\n      showToast(msg, 'error');\n      throw new Error(msg);\n    }\n  }\n\n  private async signTypedDataWithExternalWallet(request: SignTypedDataRequest): Promise<SignResult> {\n    let provider: EIP1193Provider;\n    try {\n      provider = await this.findWalletProvider(this.lastAuth!.address);\n    } catch (e) {\n      showToast((e as Error).message, 'error');\n      throw e;\n    }\n    try {\n      const signature = await provider.request({\n        method: 'eth_signTypedData_v4',\n        params: [this.lastAuth!.address, JSON.stringify(request)],\n      });\n      return { signature: signature as string, address: this.lastAuth!.address };\n    } catch (e: any) {\n      const msg = e?.message?.includes('not been authorized')\n        ? 'Wallet rejected the request. Approve the connection in your wallet and try again.'\n        : e?.message || 'Signing failed';\n      showToast(msg, 'error');\n      throw new Error(msg);\n    }\n  }\n\n  private signWithOpenKey(request: SignMessageRequest, mode?: OpenKeyMode): Promise<SignResult> {\n    return this.openFlow<SignResult>('sign', {\n      type: 'openkey:sign:request',\n      message: request.message,\n      keyId: request.keyId,\n      sessionToken: this.sessionToken || undefined,\n    }, mode);\n  }\n\n  private signTypedDataWithOpenKey(request: SignTypedDataRequest, mode?: OpenKeyMode): Promise<SignResult> {\n    return this.openFlow<SignResult>('sign-typed-data', {\n      type: 'openkey:signTypedData:request',\n      data: request,\n      sessionToken: this.sessionToken || undefined,\n    }, mode);\n  }\n\n  private toHex(str: string): string {\n    return '0x' + Array.from(new TextEncoder().encode(str)).map(b => b.toString(16).padStart(2, '0')).join('');\n  }\n\n  /**\n   * Check if user is already authenticated\n   */\n  async isConnected(): Promise<boolean> {\n    // Check for existing session via API\n    try {\n      const res = await fetch(`${this.host}/api/auth/session`, {\n        credentials: 'include',\n      });\n      if (!res.ok) return false;\n      const data = await res.json();\n      return !!data.user;\n    } catch {\n      return false;\n    }\n  }\n\n  // ======= OAuth 2.1 Provider Methods =======\n\n  /**\n   * OAuth 2.1 methods for third-party app authentication\n   * Use this when your app has registered OAuth client credentials with OpenKey\n   */\n  oauth = {\n    /**\n     * Start OAuth authorization flow\n     * Opens popup/redirect to OpenKey authorization endpoint\n     * @returns Promise that resolves with authorization code after user consent\n     */\n    connect: async (config: OAuthConfig): Promise<OAuthResult> => {\n      // Generate PKCE values\n      const verifier = await generateCodeVerifier();\n      const challenge = await generateCodeChallenge(verifier);\n      const state = config.state || generateState();\n\n      // Store for later token exchange\n      sessionStorage.setItem(\n        OAUTH_STORAGE_KEY,\n        JSON.stringify({ verifier, state })\n      );\n\n      // Build authorization URL\n      const authUrl = new URL(`${this.oauthHost}/api/auth/oauth2/authorize`);\n      authUrl.searchParams.set('client_id', config.clientId);\n      authUrl.searchParams.set('redirect_uri', config.redirectUri);\n      authUrl.searchParams.set('response_type', 'code');\n      authUrl.searchParams.set('scope', 'openid');\n      authUrl.searchParams.set('state', state);\n      authUrl.searchParams.set('code_challenge', challenge);\n      authUrl.searchParams.set('code_challenge_method', 'S256');\n\n      return this.openOAuthFlow(authUrl.toString(), state, config.redirectUri);\n    },\n\n    /**\n     * Exchange authorization code for tokens\n     * Call this after receiving the callback with authorization code\n     * @param code - Authorization code from callback URL\n     * @param config - Same config used for connect()\n     * @returns Promise that resolves with access_token, id_token, etc.\n     */\n    exchangeCode: async (\n      code: string,\n      config: OAuthConfig\n    ): Promise<OAuthTokenResponse> => {\n      const stored = sessionStorage.getItem(OAUTH_STORAGE_KEY);\n      if (!stored) {\n        throw new Error('No PKCE verifier found. Start a new OAuth flow.');\n      }\n\n      const { verifier } = JSON.parse(stored);\n\n      const response = await fetch(`${this.oauthHost}/api/auth/oauth2/token`, {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/x-www-form-urlencoded',\n        },\n        body: new URLSearchParams({\n          grant_type: 'authorization_code',\n          code,\n          redirect_uri: config.redirectUri,\n          client_id: config.clientId,\n          code_verifier: verifier,\n        }),\n      });\n\n      // Clear stored verifier\n      sessionStorage.removeItem(OAUTH_STORAGE_KEY);\n\n      if (!response.ok) {\n        const error = await response.json();\n        throw new Error(error.error_description || 'Token exchange failed');\n      }\n\n      return response.json();\n    },\n\n    /**\n     * Verify state parameter from callback\n     * Call this before exchangeCode to prevent CSRF attacks\n     * @param receivedState - State parameter from callback URL\n     * @returns true if state matches, false otherwise\n     */\n    verifyState: (receivedState: string): boolean => {\n      const stored = sessionStorage.getItem(OAUTH_STORAGE_KEY);\n      if (!stored) return false;\n      const { state } = JSON.parse(stored);\n      return state === receivedState;\n    },\n\n    /**\n     * Parse authorization response from callback URL\n     * @param url - Callback URL (defaults to current window.location.href)\n     * @returns Parsed code and state, or error\n     */\n    parseCallback: (\n      url?: string\n    ): { code: string; state: string } | { error: string; errorDescription?: string } => {\n      const urlObj = new URL(url || window.location.href);\n      const error = urlObj.searchParams.get('error');\n\n      if (error) {\n        return {\n          error,\n          errorDescription: urlObj.searchParams.get('error_description') || undefined,\n        };\n      }\n\n      const code = urlObj.searchParams.get('code');\n      const state = urlObj.searchParams.get('state');\n\n      if (!code || !state) {\n        return { error: 'missing_params', errorDescription: 'Missing code or state parameter' };\n      }\n\n      return { code, state };\n    },\n  };\n\n  private openOAuthFlow(\n    url: string,\n    state: string,\n    redirectUri: string\n  ): Promise<OAuthResult> {\n    return new Promise((resolve, reject) => {\n      if (this.mode !== 'redirect') {\n        this.openOAuthPopup(url, state, redirectUri, resolve, reject);\n      } else {\n        // Full page redirect - won't resolve, page navigates away\n        window.location.href = url;\n      }\n    });\n  }\n\n  private openOAuthPopup(\n    url: string,\n    state: string,\n    redirectUri: string,\n    resolve: (value: OAuthResult) => void,\n    reject: (error: OpenKeyError) => void\n  ) {\n    const left = window.screenX + (window.outerWidth - POPUP_WIDTH) / 2;\n    const top = window.screenY + (window.outerHeight - POPUP_HEIGHT) / 2;\n\n    this.popup = window.open(\n      url,\n      'openkey-oauth',\n      `width=${POPUP_WIDTH},height=${POPUP_HEIGHT},left=${left},top=${top},popup=true`\n    );\n\n    if (!this.popup) {\n      reject({\n        code: 'POPUP_BLOCKED',\n        message: 'Popup was blocked. Please allow popups or use redirect mode.',\n      });\n      return;\n    }\n\n    const redirectHost = new URL(redirectUri).origin;\n\n    // Poll for redirect back with code\n    const pollInterval = setInterval(() => {\n      try {\n        if (this.popup?.closed) {\n          clearInterval(pollInterval);\n          clearTimeout(timeout);\n          reject({\n            code: 'USER_CANCELLED',\n            message: 'User closed the popup',\n          });\n          return;\n        }\n\n        // Check if redirected to callback URL\n        const popupUrl = this.popup?.location?.href;\n        if (popupUrl && popupUrl.startsWith(redirectHost)) {\n          clearInterval(pollInterval);\n          clearTimeout(timeout);\n\n          const urlObj = new URL(popupUrl);\n          const code = urlObj.searchParams.get('code');\n          const returnedState = urlObj.searchParams.get('state');\n          const error = urlObj.searchParams.get('error');\n\n          this.popup?.close();\n\n          if (error) {\n            reject({\n              code: 'UNAUTHORIZED',\n              message: urlObj.searchParams.get('error_description') || error,\n            });\n            return;\n          }\n\n          if (returnedState !== state) {\n            reject({\n              code: 'STATE_MISMATCH',\n              message: 'State mismatch - possible CSRF attack',\n            });\n            return;\n          }\n\n          if (code) {\n            resolve({ code, state: returnedState });\n          } else {\n            reject({\n              code: 'UNAUTHORIZED',\n              message: 'Authorization failed - no code returned',\n            });\n          }\n        }\n      } catch {\n        // Cross-origin - popup still on OpenKey domain, continue polling\n      }\n    }, 100);\n\n    // Timeout\n    const timeout = setTimeout(() => {\n      clearInterval(pollInterval);\n      this.popup?.close();\n      reject({\n        code: 'TIMEOUT',\n        message: 'OAuth flow timed out',\n      });\n    }, DEFAULT_TIMEOUT);\n  }\n\n  private resolveMode(override?: OpenKeyMode): OpenKeyMode {\n    return override ?? this.mode;\n  }\n\n  private async openFlow<T>(action: string, message: object, modeOverride?: OpenKeyMode): Promise<T> {\n    const mode = this.resolveMode(modeOverride);\n    const origin = encodeURIComponent(window.location.origin);\n\n    if (mode === 'popup') {\n      const url = `${this.host}/widget/${action}?origin=${origin}`;\n      return new Promise((resolve, reject) => this.openPopup(url, message, resolve, reject));\n    }\n\n    if (mode === 'redirect') {\n      const url = `${this.host}/widget/${action}?origin=${origin}`;\n      window.location.href = url;\n      return new Promise(() => {}); // never resolves, page navigates\n    }\n\n    // iframe mode with auto-fallback\n    const url = `${this.host}/widget/embed/${action}?origin=${origin}`;\n    return this.openIframeModal<T>(url, action, message, origin);\n  }\n\n  private openIframeModal<T>(url: string, action: string, message: object, origin: string): Promise<T> {\n    return new Promise((resolve, reject) => {\n      let readyReceived = false;\n      let settled = false;\n      let modal: IframeModal | null = null;\n\n      const settle = (fn: () => void) => {\n        if (settled) return;\n        settled = true;\n        fn();\n      };\n\n      const cleanup = () => {\n        clearTimeout(readyTimeout);\n        clearTimeout(overallTimeout);\n        modal?.destroy();\n        modal = null;\n      };\n\n      modal = new IframeModal({\n        url,\n        host: this.host,\n        onClose: () => {\n          settle(() => {\n            clearTimeout(readyTimeout);\n            clearTimeout(overallTimeout);\n            modal = null;\n            reject({ code: 'USER_CANCELLED', message: 'User cancelled the request' } as OpenKeyError);\n          });\n        },\n        onMessage: (data: MessageType) => {\n          if (data.type === 'openkey:ready') {\n            readyReceived = true;\n            modal?.postMessage(message);\n            return;\n          }\n\n          if (data.type === 'openkey:close') {\n            settle(() => {\n              cleanup();\n              reject({ code: 'USER_CANCELLED', message: 'User cancelled the request' } as OpenKeyError);\n            });\n            return;\n          }\n\n          if (data.type === 'openkey:link-wallet:delegate') {\n            this.handleWalletLinkDelegation(modal!);\n            return;\n          }\n\n          if (\n            data.type === 'openkey:auth:response' ||\n            data.type === 'openkey:sign:response' ||\n            data.type === 'openkey:signTypedData:response' ||\n            data.type === 'openkey:link-wallet:response'\n          ) {\n            settle(() => {\n              cleanup();\n              if (data.success) {\n                if (data.type === 'openkey:auth:response') {\n                  if (data.sessionToken) this.sessionToken = data.sessionToken;\n                  resolve({ address: data.address, keyId: data.keyId, keyType: data.keyType || 'MANAGED' } as T);\n                } else if (data.type === 'openkey:link-wallet:response') {\n                  resolve({ address: data.address, keyId: data.keyId } as T);\n                } else {\n                  resolve({ signature: data.signature, address: data.address } as T);\n                }\n              } else {\n                reject(data.error);\n              }\n            });\n          }\n        },\n      });\n\n      // Auto-fallback: if no openkey:ready within 3s, fall back to popup\n      const readyTimeout = setTimeout(() => {\n        if (readyReceived || settled) return;\n        cleanup();\n        console.warn('OpenKey: iframe blocked by CSP, falling back to popup. Add frame-src https://openkey.so to your CSP.');\n        showToast();\n        const popupUrl = `${this.host}/widget/${action}?origin=${origin}`;\n        this.openPopup(popupUrl, message, (val: any) => settle(() => resolve(val)), (err: any) => settle(() => reject(err)));\n      }, IFRAME_READY_TIMEOUT);\n\n      // Overall 5-minute timeout\n      const overallTimeout = setTimeout(() => {\n        settle(() => {\n          cleanup();\n          reject({ code: 'TIMEOUT', message: 'Request timed out' } as OpenKeyError);\n        });\n      }, DEFAULT_TIMEOUT);\n    });\n  }\n\n  private handleWalletLinkDelegation(modal: IframeModal) {\n    const sendResult = (result: MessageType) => modal.postMessage(result);\n\n    new WalletPicker({\n      providers: this.discoveredProviders,\n      onCancel: () => {\n        sendResult({ type: 'openkey:link-wallet:result', success: false, error: { code: 'USER_CANCELLED', message: 'Wallet linking cancelled' } });\n      },\n      onSelect: async (provider) => {\n        try {\n          const accounts = await provider.request({ method: 'eth_requestAccounts' }) as string[];\n          const address = accounts[0];\n          if (!address) throw new Error('No account returned');\n\n          // Get challenge from API\n          const challengeRes = await fetch(`${this.host}/api/keys/link/challenge`, {\n            method: 'POST',\n            credentials: 'include',\n          });\n          if (!challengeRes.ok) throw new Error('Failed to get challenge');\n          const { message } = await challengeRes.json();\n\n          // Sign challenge with wallet\n          const hexMessage = this.toHex(message);\n          const signature = await provider.request({\n            method: 'personal_sign',\n            params: [hexMessage, address],\n          }) as string;\n\n          // Submit to API\n          const linkRes = await fetch(`${this.host}/api/keys/link`, {\n            method: 'POST',\n            headers: { 'Content-Type': 'application/json' },\n            credentials: 'include',\n            body: JSON.stringify({ address, signature, message }),\n          });\n          if (!linkRes.ok) {\n            const err = await linkRes.json();\n            throw new Error(err.error || 'Failed to link wallet');\n          }\n          const { key } = await linkRes.json();\n\n          sendResult({ type: 'openkey:link-wallet:result', success: true, address: key.address, keyId: key.id });\n        } catch (e: any) {\n          sendResult({ type: 'openkey:link-wallet:result', success: false, error: { code: 'UNKNOWN', message: e.message || 'Wallet linking failed' } });\n        }\n      },\n    });\n  }\n\n  private openPopup<T>(\n    url: string,\n    message: object,\n    resolve: (value: T) => void,\n    reject: (error: OpenKeyError) => void\n  ) {\n    // Calculate popup position\n    const left = window.screenX + (window.outerWidth - POPUP_WIDTH) / 2;\n    const top = window.screenY + (window.outerHeight - POPUP_HEIGHT) / 2;\n\n    this.popup = window.open(\n      url,\n      'openkey',\n      `width=${POPUP_WIDTH},height=${POPUP_HEIGHT},left=${left},top=${top},popup=true`\n    );\n\n    if (!this.popup) {\n      reject({\n        code: 'POPUP_BLOCKED',\n        message: 'Popup was blocked. Please allow popups for this site.',\n      });\n      return;\n    }\n\n    const cleanup = () => {\n      window.removeEventListener('message', handleMessage);\n      clearInterval(pollClosed);\n      clearTimeout(timeout);\n    };\n\n    // Poll to detect popup close\n    const pollClosed = setInterval(() => {\n      if (this.popup?.closed) {\n        cleanup();\n        reject({\n          code: 'USER_CANCELLED',\n          message: 'User closed the popup',\n        });\n      }\n    }, 500);\n\n    // Timeout\n    const timeout = setTimeout(() => {\n      cleanup();\n      this.popup?.close();\n      reject({\n        code: 'TIMEOUT',\n        message: 'Request timed out',\n      });\n    }, DEFAULT_TIMEOUT);\n\n    // Listen for messages\n    const handleMessage = (event: MessageEvent) => {\n      if (event.origin !== this.host) return;\n\n      const data = event.data as MessageType;\n\n      if (data.type === 'openkey:ready') {\n        // Widget is ready, send our request\n        this.popup?.postMessage(message, this.host);\n        return;\n      }\n\n      if (data.type === 'openkey:close') {\n        cleanup();\n        this.popup?.close();\n        reject({\n          code: 'USER_CANCELLED',\n          message: 'User cancelled the request',\n        });\n        return;\n      }\n\n      // Handle responses\n      if (\n        data.type === 'openkey:auth:response' ||\n        data.type === 'openkey:sign:response' ||\n        data.type === 'openkey:signTypedData:response' ||\n        data.type === 'openkey:link-wallet:response'\n      ) {\n        cleanup();\n        this.popup?.close();\n\n        if (data.success) {\n          if (data.type === 'openkey:auth:response') {\n            if (data.sessionToken) this.sessionToken = data.sessionToken;\n            resolve({ address: data.address, keyId: data.keyId, keyType: data.keyType || 'MANAGED' } as T);\n          } else if (data.type === 'openkey:link-wallet:response') {\n            resolve({ address: data.address, keyId: data.keyId } as T);\n          } else {\n            resolve({ signature: data.signature, address: data.address } as T);\n          }\n        } else {\n          reject(data.error);\n        }\n      }\n    };\n\n    window.addEventListener('message', handleMessage);\n  }\n\n  /**\n   * Disconnect and close any open flows\n   */\n  disconnect() {\n    this.popup?.close();\n    this.popup = null;\n  }\n}\n\n/**\n * Unified EIP-1193 provider that wraps an OpenKey instance.\n * Transparently routes signing to either OpenKey (managed keys) or the user's\n * wallet (external keys).\n */\nexport class OpenKeyEIP1193Provider implements EIP1193Provider {\n  private openkey: OpenKey;\n  private address: string;\n  private keyId: string;\n  private keyType: 'MANAGED' | 'EXTERNAL';\n\n  constructor(openkey: OpenKey, authResult: AuthResult) {\n    this.openkey = openkey;\n    this.address = authResult.address;\n    this.keyId = authResult.keyId;\n    this.keyType = authResult.keyType;\n  }\n\n  async request({ method, params }: { method: string; params?: any[] }): Promise<any> {\n    switch (method) {\n      case 'eth_accounts':\n      case 'eth_requestAccounts':\n        return [this.address];\n\n      case 'eth_chainId':\n        return '0x1'; // mainnet\n\n      case 'personal_sign': {\n        if (this.keyType === 'EXTERNAL') {\n          try {\n            const provider = await this.openkey.findWalletProvider(this.address);\n            return await provider.request({ method, params });\n          } catch (e: any) {\n            showToast(e?.message || 'External wallet signing failed', 'error');\n            throw e;\n          }\n        }\n        // Managed key: route through OpenKey\n        const message = this.hexToString(params![0] as string);\n        const result = await this.openkey.signMessage({ message, keyId: this.keyId });\n        return result.signature;\n      }\n\n      case 'eth_signTypedData_v4': {\n        if (this.keyType === 'EXTERNAL') {\n          try {\n            const provider = await this.openkey.findWalletProvider(this.address);\n            return await provider.request({ method, params });\n          } catch (e: any) {\n            showToast(e?.message || 'External wallet signing failed', 'error');\n            throw e;\n          }\n        }\n        const data = JSON.parse(params![1] as string);\n        const result = await this.openkey.signTypedData(data);\n        return result.signature;\n      }\n\n      default:\n        throw new Error(`Unsupported method: ${method}`);\n    }\n  }\n\n  private hexToString(hex: string): string {\n    const bytes = new Uint8Array(\n      (hex.startsWith('0x') ? hex.slice(2) : hex).match(/.{1,2}/g)!.map(b => parseInt(b, 16))\n    );\n    return new TextDecoder().decode(bytes);\n  }\n}\n\n// Default export for convenience\nexport default OpenKey;\n\n// Create singleton instance\nlet defaultInstance: OpenKey | null = null;\n\nexport function getOpenKey(config?: OpenKeyConfig): OpenKey {\n  if (!defaultInstance || config) {\n    defaultInstance = new OpenKey(config);\n  }\n  return defaultInstance;\n}\n"],"mappings":"yaAAA,IAAAA,EAAA,GAAAC,EAAAD,EAAA,aAAAE,EAAA,2BAAAC,EAAA,YAAAC,EAAA,eAAAC,IAAA,eAAAC,EAAAN,GAsHA,IAAMO,EAAe,qBAKrB,IAAMC,EAAoB,gBAEpBC,EAAN,KAAkB,CACR,KACA,OACA,OACA,QACA,UACA,eACA,KAER,YAAYC,EAAkG,CAC5G,KAAK,KAAOA,EAAK,KACjB,KAAK,QAAUA,EAAK,QACpB,KAAK,UAAYA,EAAK,UAEtB,IAAMC,EAAW,OAAO,WAAW,oBAAoB,EAAE,QAEzD,KAAK,KAAO,SAAS,cAAc,KAAK,EACxC,KAAK,OAAS,KAAK,KAAK,aAAa,CAAE,KAAM,QAAS,CAAC,EAEvD,IAAMC,EAAQ,SAAS,cAAc,OAAO,EAC5CA,EAAM,YAAc;AAAA;AAAA,yIAEiHD,EAAW,WAAa,QAAQ;AAAA,4DAC7GA,EAAW,OAAS,OAAO,kBAAkBA,EAAW,gBAAkB,MAAM,4FAA4FA,EAAW,6BAA+B,4BAA4B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,gDAM9PA,EAAW,8BAAgC,4BAA4B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MASnH,IAAME,EAAW,SAAS,cAAc,KAAK,EAC7CA,EAAS,UAAY,cACrBA,EAAS,iBAAiB,QAAUC,GAAM,CACpCA,EAAE,SAAWD,GAAU,KAAK,MAAM,CACxC,CAAC,EAED,IAAME,EAAO,SAAS,cAAc,KAAK,EAGzC,GAFAA,EAAK,UAAY,UAEbJ,EAAU,CACZ,IAAMK,EAAS,SAAS,cAAc,KAAK,EAC3CA,EAAO,UAAY,YACnBD,EAAK,YAAYC,CAAM,CACzB,CAEA,IAAMC,EAAW,SAAS,cAAc,QAAQ,EAChDA,EAAS,UAAY,WACrBA,EAAS,YAAc,OACvBA,EAAS,iBAAiB,QAAS,IAAM,KAAK,MAAM,CAAC,EACrDF,EAAK,YAAYE,CAAQ,EAEzB,KAAK,OAAS,SAAS,cAAc,QAAQ,EAC7C,KAAK,OAAO,IAAMP,EAAK,IACvB,KAAK,OAAO,aAAa,QAAS,6DAA6D,EAC/F,KAAK,OAAO,aAAa,UAAW,0DAA0D,EAC9FK,EAAK,YAAY,KAAK,MAAM,EAE5BF,EAAS,YAAYE,CAAI,EACzB,KAAK,OAAO,YAAYH,CAAK,EAC7B,KAAK,OAAO,YAAYC,CAAQ,EAEhC,KAAK,eAAkBK,GAAwB,CAC7C,GAAIA,EAAM,SAAW,KAAK,KAAM,OAChC,IAAMC,EAAOD,EAAM,KACnB,GAAIC,EAAK,OAAS,iBAAkB,CAClC,IAAMC,EAAI,KAAK,IAAID,EAAK,OAAQ,KAAK,MAAM,OAAO,YAAc,GAAI,CAAC,EACrE,KAAK,OAAO,MAAM,OAAS,GAAGC,CAAC,KAC/B,MACF,CACA,KAAK,UAAUD,CAAI,CACrB,EACA,OAAO,iBAAiB,UAAW,KAAK,cAAc,EACtD,SAAS,KAAK,YAAY,KAAK,IAAI,CACrC,CAEA,YAAYE,EAAiB,CAC3B,KAAK,OAAO,eAAe,YAAYA,EAAS,KAAK,IAAI,CAC3D,CAEA,SAAU,CACR,OAAO,oBAAoB,UAAW,KAAK,cAAc,EACzD,KAAK,KAAK,OAAO,CACnB,CAEQ,OAAQ,CACd,IAAMR,EAAW,KAAK,OAAO,cAAc,cAAc,EACrDA,GACFA,EAAS,UAAU,IAAI,SAAS,EAChC,WAAW,IAAM,CACf,KAAK,QAAQ,EACb,KAAK,QAAQ,CACf,EAAG,GAAG,IAEN,KAAK,QAAQ,EACb,KAAK,QAAQ,EAEjB,CACF,EAEMS,EAAN,KAAmB,CACT,KACA,OAER,YAAYZ,EAAmH,CAC7H,KAAK,KAAO,SAAS,cAAc,KAAK,EACxC,KAAK,OAAS,KAAK,KAAK,aAAa,CAAE,KAAM,QAAS,CAAC,EAEvD,IAAME,EAAQ,SAAS,cAAc,OAAO,EAC5CA,EAAM,YAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAyBpB,IAAMC,EAAW,SAAS,cAAc,KAAK,EAC7CA,EAAS,UAAY,cACrBA,EAAS,iBAAiB,QAAUC,GAAM,CAAMA,EAAE,SAAWD,IAAY,KAAK,QAAQ,EAAGH,EAAK,SAAS,EAAK,CAAC,EAE7G,IAAMK,EAAO,SAAS,cAAc,KAAK,EACzCA,EAAK,UAAY,UAEjB,IAAMQ,EAAQ,SAAS,cAAc,IAAI,EAKzC,GAJAA,EAAM,UAAY,WAClBA,EAAM,YAAc,kBACpBR,EAAK,YAAYQ,CAAK,EAElBb,EAAK,UAAU,SAAW,EAAG,CAC/B,IAAMc,EAAQ,SAAS,cAAc,KAAK,EAC1CA,EAAM,UAAY,WAClBA,EAAM,YAAc,sBACpBT,EAAK,YAAYS,CAAK,CACxB,KAAO,CACL,IAAMC,EAAO,SAAS,cAAc,IAAI,EACxCA,EAAK,UAAY,UACjB,OAAW,CAAE,KAAAC,EAAM,SAAAC,CAAS,IAAKjB,EAAK,UAAW,CAC/C,IAAMkB,EAAO,SAAS,cAAc,QAAQ,EAE5C,GADAA,EAAK,UAAY,UACbF,EAAK,KAAM,CACb,IAAMG,EAAO,SAAS,cAAc,KAAK,EACzCA,EAAK,UAAY,UACjBA,EAAK,IAAMH,EAAK,KAChBG,EAAK,IAAMH,EAAK,KAChBE,EAAK,YAAYC,CAAI,CACvB,CACA,IAAMC,EAAO,SAAS,cAAc,MAAM,EAC1CA,EAAK,YAAcJ,EAAK,KACxBE,EAAK,YAAYE,CAAI,EACrBF,EAAK,iBAAiB,QAAS,IAAM,CAAE,KAAK,QAAQ,EAAGlB,EAAK,SAASiB,CAAQ,CAAG,CAAC,EACjFF,EAAK,YAAYG,CAAI,CACvB,CACAb,EAAK,YAAYU,CAAI,CACvB,CAEA,IAAMM,EAAS,SAAS,cAAc,QAAQ,EAC9CA,EAAO,UAAY,YACnBA,EAAO,YAAc,SACrBA,EAAO,iBAAiB,QAAS,IAAM,CAAE,KAAK,QAAQ,EAAGrB,EAAK,SAAS,CAAG,CAAC,EAC3EK,EAAK,YAAYgB,CAAM,EAEvBlB,EAAS,YAAYE,CAAI,EACzB,KAAK,OAAO,YAAYH,CAAK,EAC7B,KAAK,OAAO,YAAYC,CAAQ,EAChC,SAAS,KAAK,YAAY,KAAK,IAAI,CACrC,CAEA,SAAU,CACR,KAAK,KAAK,OAAO,CACnB,CACF,EAEA,SAASmB,EAAUX,EAAU,8BAA+BY,EAA4B,OAAQ,CAC9F,IAAMC,EAAKD,IAAY,QAAU,UAAY,UACvCE,EAAO,SAAS,cAAc,KAAK,EACnCC,EAASD,EAAK,aAAa,CAAE,KAAM,QAAS,CAAC,EACnDC,EAAO,UAAY,oGAAoGF,CAAE,kTAAkTb,CAAO,SAClb,SAAS,KAAK,YAAYc,CAAI,EAC9B,WAAW,IAAMA,EAAK,OAAO,EAAG,GAAI,CACtC,CAIA,SAASE,EAAgBC,EAA4B,CAEnD,OADe,KAAK,OAAO,aAAa,GAAGA,CAAM,CAAC,EACpC,QAAQ,MAAO,GAAG,EAAE,QAAQ,MAAO,GAAG,EAAE,QAAQ,KAAM,EAAE,CACxE,CAEA,eAAeC,GAAwC,CACrD,IAAMC,EAAQ,IAAI,WAAW,EAAE,EAC/B,cAAO,gBAAgBA,CAAK,EACrBH,EAAgBG,CAAK,CAC9B,CAEA,eAAeC,EAAsBC,EAAmC,CAEtE,IAAMvB,EADU,IAAI,YAAY,EACX,OAAOuB,CAAQ,EAC9BC,EAAS,MAAM,OAAO,OAAO,OAAO,UAAWxB,CAAI,EACzD,OAAOkB,EAAgB,IAAI,WAAWM,CAAM,CAAC,CAC/C,CAEA,SAASC,GAAwB,CAC/B,IAAMJ,EAAQ,IAAI,WAAW,EAAE,EAC/B,cAAO,gBAAgBA,CAAK,EACrBH,EAAgBG,CAAK,CAC9B,CAEA,IAAMK,EAAN,cAAkC,KAAM,CACtC,YAAYxB,EAAiB,CAC3B,MAAMA,CAAO,EACb,KAAK,KAAO,qBACd,CACF,EAEayB,EAAN,KAAc,CACX,KACA,UACA,QACA,KACA,OACA,MAAuB,KACvB,SAA8B,KAC9B,oBAA+C,CAAC,EAChD,aAA8B,KAEtC,YAAYC,EAAwB,CAAC,EAAG,CACtC,KAAK,OAASA,EACd,KAAK,KAAOA,EAAO,MAAQC,EAC3B,KAAK,UAAYD,EAAO,WAAa,KAAK,gBAAgB,KAAK,IAAI,EACnE,KAAK,QAAUA,EAAO,SAAW,OAAO,SAAS,SACjD,KAAK,KAAOA,EAAO,MAAQ,SAGvB,OAAO,OAAW,MACpB,KAAK,oBAAsB,CAAC,EAC5B,OAAO,iBAAiB,2BAA6B7B,GAAe,CAClE,KAAK,oBAAoB,KAAKA,EAAM,MAAM,CAC5C,CAAC,EACD,OAAO,cAAc,IAAI,MAAM,yBAAyB,CAAC,EAE7D,CAOQ,gBAAgB+B,EAAsB,CAC5C,GAAI,CACF,IAAMC,EAAM,IAAI,IAAID,CAAI,EACxB,OAAAC,EAAI,SAAW,OAASA,EAAI,SACrBA,EAAI,SAAS,EAAE,QAAQ,MAAO,EAAE,CACzC,MAAQ,CACN,MAAO,wBACT,CACF,CAMA,MAAM,QAAQxC,EAAoD,CAChE,IAAMyC,EAAS,MAAM,KAAK,SAAqB,UAAW,CACxD,KAAM,uBACN,QAAS,KAAK,OAChB,EAAGzC,GAAM,IAAI,EACb,YAAK,SAAWyC,EACTA,CACT,CAMA,MAAM,WAAWzC,EAA4E,CAC3F,OAAO,KAAK,SAA6C,cAAe,CACtE,KAAM,6BACR,EAAGA,GAAM,IAAI,CACf,CAMA,MAAM,YAAY0C,EAA6B1C,EAAoD,CACjG,OAAI,KAAK,UAAU,UAAY,WACtB,KAAK,uBAAuB0C,CAAO,EAErC,KAAK,gBAAgBA,EAAS1C,GAAM,IAAI,CACjD,CAMA,MAAM,cAAc0C,EAA+B1C,EAAoD,CACrG,OAAI,KAAK,UAAU,UAAY,WACtB,KAAK,gCAAgC0C,CAAO,EAE9C,KAAK,yBAAyBA,EAAS1C,GAAM,IAAI,CAC1D,CAMA,MAAM,mBAAmB2C,EAAiD,CAExE,GAAI,KAAK,OAAO,iBACd,OAAO,KAAK,OAAO,iBAIrB,OAAW,CAAE,SAAA1B,CAAS,IAAK,KAAK,oBAC9B,GAAI,CAEF,IADiB,MAAMA,EAAS,QAAQ,CAAE,OAAQ,cAAe,CAAC,GACrD,KAAK2B,GAAKA,EAAE,YAAY,IAAMD,EAAc,YAAY,CAAC,EACpE,OAAO1B,CAEX,MAAQ,CAAC,CAIX,GAAI,OAAO,OAAW,KAAgB,OAAe,SAAU,CAC7D,IAAMA,EAAY,OAAe,SACjC,GAAI,CAEF,IADiB,MAAMA,EAAS,QAAQ,CAAE,OAAQ,cAAe,CAAC,GACrD,KAAK2B,GAAKA,EAAE,YAAY,IAAMD,EAAc,YAAY,CAAC,EACpE,OAAO1B,CAEX,MAAQ,CAAC,CACX,CAEA,MAAM,IAAIkB,EAAoB,iFAAiF,CACjH,CAEA,MAAc,uBAAuBO,EAAkD,CACrF,IAAIzB,EACJ,GAAI,CACFA,EAAW,MAAM,KAAK,mBAAmB,KAAK,SAAU,OAAO,CACjE,OAASb,EAAG,CACV,MAAAkB,EAAWlB,EAAY,QAAS,OAAO,EACjCA,CACR,CACA,GAAI,CACF,IAAMyC,EAAa,KAAK,MAAMH,EAAQ,OAAO,EAK7C,MAAO,CAAE,UAJS,MAAMzB,EAAS,QAAQ,CACvC,OAAQ,gBACR,OAAQ,CAAC4B,EAAY,KAAK,SAAU,OAAO,CAC7C,CAAC,EACwC,QAAS,KAAK,SAAU,OAAQ,CAC3E,OAASzC,EAAQ,CACf,IAAM0C,EAAM1C,GAAG,SAAS,SAAS,qBAAqB,EAClD,oFACAA,GAAG,SAAW,iBAClB,MAAAkB,EAAUwB,EAAK,OAAO,EAChB,IAAI,MAAMA,CAAG,CACrB,CACF,CAEA,MAAc,gCAAgCJ,EAAoD,CAChG,IAAIzB,EACJ,GAAI,CACFA,EAAW,MAAM,KAAK,mBAAmB,KAAK,SAAU,OAAO,CACjE,OAASb,EAAG,CACV,MAAAkB,EAAWlB,EAAY,QAAS,OAAO,EACjCA,CACR,CACA,GAAI,CAKF,MAAO,CAAE,UAJS,MAAMa,EAAS,QAAQ,CACvC,OAAQ,uBACR,OAAQ,CAAC,KAAK,SAAU,QAAS,KAAK,UAAUyB,CAAO,CAAC,CAC1D,CAAC,EACwC,QAAS,KAAK,SAAU,OAAQ,CAC3E,OAAStC,EAAQ,CACf,IAAM0C,EAAM1C,GAAG,SAAS,SAAS,qBAAqB,EAClD,oFACAA,GAAG,SAAW,iBAClB,MAAAkB,EAAUwB,EAAK,OAAO,EAChB,IAAI,MAAMA,CAAG,CACrB,CACF,CAEQ,gBAAgBJ,EAA6BK,EAAyC,CAC5F,OAAO,KAAK,SAAqB,OAAQ,CACvC,KAAM,uBACN,QAASL,EAAQ,QACjB,MAAOA,EAAQ,MACf,aAAc,KAAK,cAAgB,MACrC,EAAGK,CAAI,CACT,CAEQ,yBAAyBL,EAA+BK,EAAyC,CACvG,OAAO,KAAK,SAAqB,kBAAmB,CAClD,KAAM,gCACN,KAAML,EACN,aAAc,KAAK,cAAgB,MACrC,EAAGK,CAAI,CACT,CAEQ,MAAMC,EAAqB,CACjC,MAAO,KAAO,MAAM,KAAK,IAAI,YAAY,EAAE,OAAOA,CAAG,CAAC,EAAE,IAAIC,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,CAC3G,CAKA,MAAM,aAAgC,CAEpC,GAAI,CACF,IAAMC,EAAM,MAAM,MAAM,GAAG,KAAK,IAAI,oBAAqB,CACvD,YAAa,SACf,CAAC,EACD,OAAKA,EAAI,GAEF,CAAC,EADK,MAAMA,EAAI,KAAK,GACd,KAFM,EAGtB,MAAQ,CACN,MAAO,EACT,CACF,CAQA,MAAQ,CAMN,QAAS,MAAOb,GAA8C,CAE5D,IAAML,EAAW,MAAMH,EAAqB,EACtCsB,EAAY,MAAMpB,EAAsBC,CAAQ,EAChDoB,EAAQf,EAAO,OAASH,EAAc,EAG5C,eAAe,QACbpC,EACA,KAAK,UAAU,CAAE,SAAAkC,EAAU,MAAAoB,CAAM,CAAC,CACpC,EAGA,IAAMC,EAAU,IAAI,IAAI,GAAG,KAAK,SAAS,4BAA4B,EACrE,OAAAA,EAAQ,aAAa,IAAI,YAAahB,EAAO,QAAQ,EACrDgB,EAAQ,aAAa,IAAI,eAAgBhB,EAAO,WAAW,EAC3DgB,EAAQ,aAAa,IAAI,gBAAiB,MAAM,EAChDA,EAAQ,aAAa,IAAI,QAAS,QAAQ,EAC1CA,EAAQ,aAAa,IAAI,QAASD,CAAK,EACvCC,EAAQ,aAAa,IAAI,iBAAkBF,CAAS,EACpDE,EAAQ,aAAa,IAAI,wBAAyB,MAAM,EAEjD,KAAK,cAAcA,EAAQ,SAAS,EAAGD,EAAOf,EAAO,WAAW,CACzE,EASA,aAAc,MACZiB,EACAjB,IACgC,CAChC,IAAMkB,EAAS,eAAe,QAAQzD,CAAiB,EACvD,GAAI,CAACyD,EACH,MAAM,IAAI,MAAM,iDAAiD,EAGnE,GAAM,CAAE,SAAAvB,CAAS,EAAI,KAAK,MAAMuB,CAAM,EAEhCC,EAAW,MAAM,MAAM,GAAG,KAAK,SAAS,yBAA0B,CACtE,OAAQ,OACR,QAAS,CACP,eAAgB,mCAClB,EACA,KAAM,IAAI,gBAAgB,CACxB,WAAY,qBACZ,KAAAF,EACA,aAAcjB,EAAO,YACrB,UAAWA,EAAO,SAClB,cAAeL,CACjB,CAAC,CACH,CAAC,EAKD,GAFA,eAAe,WAAWlC,CAAiB,EAEvC,CAAC0D,EAAS,GAAI,CAChB,IAAMC,EAAQ,MAAMD,EAAS,KAAK,EAClC,MAAM,IAAI,MAAMC,EAAM,mBAAqB,uBAAuB,CACpE,CAEA,OAAOD,EAAS,KAAK,CACvB,EAQA,YAAcE,GAAmC,CAC/C,IAAMH,EAAS,eAAe,QAAQzD,CAAiB,EACvD,GAAI,CAACyD,EAAQ,MAAO,GACpB,GAAM,CAAE,MAAAH,CAAM,EAAI,KAAK,MAAMG,CAAM,EACnC,OAAOH,IAAUM,CACnB,EAOA,cACElB,GACmF,CACnF,IAAMmB,EAAS,IAAI,IAAInB,GAAO,OAAO,SAAS,IAAI,EAC5CiB,EAAQE,EAAO,aAAa,IAAI,OAAO,EAE7C,GAAIF,EACF,MAAO,CACL,MAAAA,EACA,iBAAkBE,EAAO,aAAa,IAAI,mBAAmB,GAAK,MACpE,EAGF,IAAML,EAAOK,EAAO,aAAa,IAAI,MAAM,EACrCP,EAAQO,EAAO,aAAa,IAAI,OAAO,EAE7C,MAAI,CAACL,GAAQ,CAACF,EACL,CAAE,MAAO,iBAAkB,iBAAkB,iCAAkC,EAGjF,CAAE,KAAAE,EAAM,MAAAF,CAAM,CACvB,CACF,EAEQ,cACNZ,EACAY,EACAQ,EACsB,CACtB,OAAO,IAAI,QAAQ,CAACC,EAASC,IAAW,CAClC,KAAK,OAAS,WAChB,KAAK,eAAetB,EAAKY,EAAOQ,EAAaC,EAASC,CAAM,EAG5D,OAAO,SAAS,KAAOtB,CAE3B,CAAC,CACH,CAEQ,eACNA,EACAY,EACAQ,EACAC,EACAC,EACA,CACA,IAAMC,EAAO,OAAO,SAAW,OAAO,WAAa,KAAe,EAC5DC,EAAM,OAAO,SAAW,OAAO,YAAc,KAAgB,EAQnE,GANA,KAAK,MAAQ,OAAO,KAClBxB,EACA,gBACA,6BAAoDuB,CAAI,QAAQC,CAAG,aACrE,EAEI,CAAC,KAAK,MAAO,CACfF,EAAO,CACL,KAAM,gBACN,QAAS,8DACX,CAAC,EACD,MACF,CAEA,IAAMG,EAAe,IAAI,IAAIL,CAAW,EAAE,OAGpCM,EAAe,YAAY,IAAM,CACrC,GAAI,CACF,GAAI,KAAK,OAAO,OAAQ,CACtB,cAAcA,CAAY,EAC1B,aAAaC,CAAO,EACpBL,EAAO,CACL,KAAM,iBACN,QAAS,uBACX,CAAC,EACD,MACF,CAGA,IAAMM,EAAW,KAAK,OAAO,UAAU,KACvC,GAAIA,GAAYA,EAAS,WAAWH,CAAY,EAAG,CACjD,cAAcC,CAAY,EAC1B,aAAaC,CAAO,EAEpB,IAAMR,EAAS,IAAI,IAAIS,CAAQ,EACzBd,EAAOK,EAAO,aAAa,IAAI,MAAM,EACrCU,EAAgBV,EAAO,aAAa,IAAI,OAAO,EAC/CF,EAAQE,EAAO,aAAa,IAAI,OAAO,EAI7C,GAFA,KAAK,OAAO,MAAM,EAEdF,EAAO,CACTK,EAAO,CACL,KAAM,eACN,QAASH,EAAO,aAAa,IAAI,mBAAmB,GAAKF,CAC3D,CAAC,EACD,MACF,CAEA,GAAIY,IAAkBjB,EAAO,CAC3BU,EAAO,CACL,KAAM,iBACN,QAAS,uCACX,CAAC,EACD,MACF,CAEIR,EACFO,EAAQ,CAAE,KAAAP,EAAM,MAAOe,CAAc,CAAC,EAEtCP,EAAO,CACL,KAAM,eACN,QAAS,yCACX,CAAC,CAEL,CACF,MAAQ,CAER,CACF,EAAG,GAAG,EAGAK,EAAU,WAAW,IAAM,CAC/B,cAAcD,CAAY,EAC1B,KAAK,OAAO,MAAM,EAClBJ,EAAO,CACL,KAAM,UACN,QAAS,sBACX,CAAC,CACH,EAAG,GAAe,CACpB,CAEQ,YAAYQ,EAAqC,CACvD,OAAOA,GAAY,KAAK,IAC1B,CAEA,MAAc,SAAYC,EAAgB5D,EAAiB6D,EAAwC,CACjG,IAAMzB,EAAO,KAAK,YAAYyB,CAAY,EACpCC,EAAS,mBAAmB,OAAO,SAAS,MAAM,EAExD,GAAI1B,IAAS,QAAS,CACpB,IAAMP,EAAM,GAAG,KAAK,IAAI,WAAW+B,CAAM,WAAWE,CAAM,GAC1D,OAAO,IAAI,QAAQ,CAACZ,EAASC,IAAW,KAAK,UAAUtB,EAAK7B,EAASkD,EAASC,CAAM,CAAC,CACvF,CAEA,GAAIf,IAAS,WAAY,CACvB,IAAMP,EAAM,GAAG,KAAK,IAAI,WAAW+B,CAAM,WAAWE,CAAM,GAC1D,cAAO,SAAS,KAAOjC,EAChB,IAAI,QAAQ,IAAM,CAAC,CAAC,CAC7B,CAGA,IAAMA,EAAM,GAAG,KAAK,IAAI,iBAAiB+B,CAAM,WAAWE,CAAM,GAChE,OAAO,KAAK,gBAAmBjC,EAAK+B,EAAQ5D,EAAS8D,CAAM,CAC7D,CAEQ,gBAAmBjC,EAAa+B,EAAgB5D,EAAiB8D,EAA4B,CACnG,OAAO,IAAI,QAAQ,CAACZ,EAASC,IAAW,CACtC,IAAIY,EAAgB,GAChBC,EAAU,GACVC,EAA4B,KAE1BC,EAAUC,GAAmB,CAC7BH,IACJA,EAAU,GACVG,EAAG,EACL,EAEMC,EAAU,IAAM,CACpB,aAAaC,CAAY,EACzB,aAAaC,CAAc,EAC3BL,GAAO,QAAQ,EACfA,EAAQ,IACV,EAEAA,EAAQ,IAAI7E,EAAY,CACtB,IAAAyC,EACA,KAAM,KAAK,KACX,QAAS,IAAM,CACbqC,EAAO,IAAM,CACX,aAAaG,CAAY,EACzB,aAAaC,CAAc,EAC3BL,EAAQ,KACRd,EAAO,CAAE,KAAM,iBAAkB,QAAS,4BAA6B,CAAiB,CAC1F,CAAC,CACH,EACA,UAAYrD,GAAsB,CAChC,GAAIA,EAAK,OAAS,gBAAiB,CACjCiE,EAAgB,GAChBE,GAAO,YAAYjE,CAAO,EAC1B,MACF,CAEA,GAAIF,EAAK,OAAS,gBAAiB,CACjCoE,EAAO,IAAM,CACXE,EAAQ,EACRjB,EAAO,CAAE,KAAM,iBAAkB,QAAS,4BAA6B,CAAiB,CAC1F,CAAC,EACD,MACF,CAEA,GAAIrD,EAAK,OAAS,+BAAgC,CAChD,KAAK,2BAA2BmE,CAAM,EACtC,MACF,EAGEnE,EAAK,OAAS,yBACdA,EAAK,OAAS,yBACdA,EAAK,OAAS,kCACdA,EAAK,OAAS,iCAEdoE,EAAO,IAAM,CACXE,EAAQ,EACJtE,EAAK,QACHA,EAAK,OAAS,yBACZA,EAAK,eAAc,KAAK,aAAeA,EAAK,cAChDoD,EAAQ,CAAE,QAASpD,EAAK,QAAS,MAAOA,EAAK,MAAO,QAASA,EAAK,SAAW,SAAU,CAAM,GACpFA,EAAK,OAAS,+BACvBoD,EAAQ,CAAE,QAASpD,EAAK,QAAS,MAAOA,EAAK,KAAM,CAAM,EAEzDoD,EAAQ,CAAE,UAAWpD,EAAK,UAAW,QAASA,EAAK,OAAQ,CAAM,EAGnEqD,EAAOrD,EAAK,KAAK,CAErB,CAAC,CAEL,CACF,CAAC,EAGD,IAAMuE,EAAe,WAAW,IAAM,CACpC,GAAIN,GAAiBC,EAAS,OAC9BI,EAAQ,EACR,QAAQ,KAAK,sGAAsG,EACnHzD,EAAU,EACV,IAAM8C,EAAW,GAAG,KAAK,IAAI,WAAWG,CAAM,WAAWE,CAAM,GAC/D,KAAK,UAAUL,EAAUzD,EAAUuE,GAAaL,EAAO,IAAMhB,EAAQqB,CAAG,CAAC,EAAIC,GAAaN,EAAO,IAAMf,EAAOqB,CAAG,CAAC,CAAC,CACrH,EAAG,GAAoB,EAGjBF,EAAiB,WAAW,IAAM,CACtCJ,EAAO,IAAM,CACXE,EAAQ,EACRjB,EAAO,CAAE,KAAM,UAAW,QAAS,mBAAoB,CAAiB,CAC1E,CAAC,CACH,EAAG,GAAe,CACpB,CAAC,CACH,CAEQ,2BAA2Bc,EAAoB,CACrD,IAAMQ,EAAc3C,GAAwBmC,EAAM,YAAYnC,CAAM,EAEpE,IAAI7B,EAAa,CACf,UAAW,KAAK,oBAChB,SAAU,IAAM,CACdwE,EAAW,CAAE,KAAM,6BAA8B,QAAS,GAAO,MAAO,CAAE,KAAM,iBAAkB,QAAS,0BAA2B,CAAE,CAAC,CAC3I,EACA,SAAU,MAAOnE,GAAa,CAC5B,GAAI,CAEF,IAAMoE,GADW,MAAMpE,EAAS,QAAQ,CAAE,OAAQ,qBAAsB,CAAC,GAChD,CAAC,EAC1B,GAAI,CAACoE,EAAS,MAAM,IAAI,MAAM,qBAAqB,EAGnD,IAAMC,EAAe,MAAM,MAAM,GAAG,KAAK,IAAI,2BAA4B,CACvE,OAAQ,OACR,YAAa,SACf,CAAC,EACD,GAAI,CAACA,EAAa,GAAI,MAAM,IAAI,MAAM,yBAAyB,EAC/D,GAAM,CAAE,QAAA3E,CAAQ,EAAI,MAAM2E,EAAa,KAAK,EAGtCzC,EAAa,KAAK,MAAMlC,CAAO,EAC/B4E,EAAY,MAAMtE,EAAS,QAAQ,CACvC,OAAQ,gBACR,OAAQ,CAAC4B,EAAYwC,CAAO,CAC9B,CAAC,EAGKG,EAAU,MAAM,MAAM,GAAG,KAAK,IAAI,iBAAkB,CACxD,OAAQ,OACR,QAAS,CAAE,eAAgB,kBAAmB,EAC9C,YAAa,UACb,KAAM,KAAK,UAAU,CAAE,QAAAH,EAAS,UAAAE,EAAW,QAAA5E,CAAQ,CAAC,CACtD,CAAC,EACD,GAAI,CAAC6E,EAAQ,GAAI,CACf,IAAML,EAAM,MAAMK,EAAQ,KAAK,EAC/B,MAAM,IAAI,MAAML,EAAI,OAAS,uBAAuB,CACtD,CACA,GAAM,CAAE,IAAAM,CAAI,EAAI,MAAMD,EAAQ,KAAK,EAEnCJ,EAAW,CAAE,KAAM,6BAA8B,QAAS,GAAM,QAASK,EAAI,QAAS,MAAOA,EAAI,EAAG,CAAC,CACvG,OAASrF,EAAQ,CACfgF,EAAW,CAAE,KAAM,6BAA8B,QAAS,GAAO,MAAO,CAAE,KAAM,UAAW,QAAShF,EAAE,SAAW,uBAAwB,CAAE,CAAC,CAC9I,CACF,CACF,CAAC,CACH,CAEQ,UACNoC,EACA7B,EACAkD,EACAC,EACA,CAEA,IAAMC,EAAO,OAAO,SAAW,OAAO,WAAa,KAAe,EAC5DC,EAAM,OAAO,SAAW,OAAO,YAAc,KAAgB,EAQnE,GANA,KAAK,MAAQ,OAAO,KAClBxB,EACA,UACA,6BAAoDuB,CAAI,QAAQC,CAAG,aACrE,EAEI,CAAC,KAAK,MAAO,CACfF,EAAO,CACL,KAAM,gBACN,QAAS,uDACX,CAAC,EACD,MACF,CAEA,IAAMiB,EAAU,IAAM,CACpB,OAAO,oBAAoB,UAAWW,CAAa,EACnD,cAAcC,CAAU,EACxB,aAAaxB,CAAO,CACtB,EAGMwB,EAAa,YAAY,IAAM,CAC/B,KAAK,OAAO,SACdZ,EAAQ,EACRjB,EAAO,CACL,KAAM,iBACN,QAAS,uBACX,CAAC,EAEL,EAAG,GAAG,EAGAK,EAAU,WAAW,IAAM,CAC/BY,EAAQ,EACR,KAAK,OAAO,MAAM,EAClBjB,EAAO,CACL,KAAM,UACN,QAAS,mBACX,CAAC,CACH,EAAG,GAAe,EAGZ4B,EAAiBlF,GAAwB,CAC7C,GAAIA,EAAM,SAAW,KAAK,KAAM,OAEhC,IAAMC,EAAOD,EAAM,KAEnB,GAAIC,EAAK,OAAS,gBAAiB,CAEjC,KAAK,OAAO,YAAYE,EAAS,KAAK,IAAI,EAC1C,MACF,CAEA,GAAIF,EAAK,OAAS,gBAAiB,CACjCsE,EAAQ,EACR,KAAK,OAAO,MAAM,EAClBjB,EAAO,CACL,KAAM,iBACN,QAAS,4BACX,CAAC,EACD,MACF,EAIErD,EAAK,OAAS,yBACdA,EAAK,OAAS,yBACdA,EAAK,OAAS,kCACdA,EAAK,OAAS,kCAEdsE,EAAQ,EACR,KAAK,OAAO,MAAM,EAEdtE,EAAK,QACHA,EAAK,OAAS,yBACZA,EAAK,eAAc,KAAK,aAAeA,EAAK,cAChDoD,EAAQ,CAAE,QAASpD,EAAK,QAAS,MAAOA,EAAK,MAAO,QAASA,EAAK,SAAW,SAAU,CAAM,GACpFA,EAAK,OAAS,+BACvBoD,EAAQ,CAAE,QAASpD,EAAK,QAAS,MAAOA,EAAK,KAAM,CAAM,EAEzDoD,EAAQ,CAAE,UAAWpD,EAAK,UAAW,QAASA,EAAK,OAAQ,CAAM,EAGnEqD,EAAOrD,EAAK,KAAK,EAGvB,EAEA,OAAO,iBAAiB,UAAWiF,CAAa,CAClD,CAKA,YAAa,CACX,KAAK,OAAO,MAAM,EAClB,KAAK,MAAQ,IACf,CACF,EAOaE,EAAN,KAAwD,CACrD,QACA,QACA,MACA,QAER,YAAYC,EAAkBC,EAAwB,CACpD,KAAK,QAAUD,EACf,KAAK,QAAUC,EAAW,QAC1B,KAAK,MAAQA,EAAW,MACxB,KAAK,QAAUA,EAAW,OAC5B,CAEA,MAAM,QAAQ,CAAE,OAAAC,EAAQ,OAAAC,CAAO,EAAqD,CAClF,OAAQD,EAAQ,CACd,IAAK,eACL,IAAK,sBACH,MAAO,CAAC,KAAK,OAAO,EAEtB,IAAK,cACH,MAAO,MAET,IAAK,gBAAiB,CACpB,GAAI,KAAK,UAAY,WACnB,GAAI,CAEF,OAAO,MADU,MAAM,KAAK,QAAQ,mBAAmB,KAAK,OAAO,GAC7C,QAAQ,CAAE,OAAAA,EAAQ,OAAAC,CAAO,CAAC,CAClD,OAAS5F,EAAQ,CACf,MAAAkB,EAAUlB,GAAG,SAAW,iCAAkC,OAAO,EAC3DA,CACR,CAGF,IAAMO,EAAU,KAAK,YAAYqF,EAAQ,CAAC,CAAW,EAErD,OADe,MAAM,KAAK,QAAQ,YAAY,CAAE,QAAArF,EAAS,MAAO,KAAK,KAAM,CAAC,GAC9D,SAChB,CAEA,IAAK,uBAAwB,CAC3B,GAAI,KAAK,UAAY,WACnB,GAAI,CAEF,OAAO,MADU,MAAM,KAAK,QAAQ,mBAAmB,KAAK,OAAO,GAC7C,QAAQ,CAAE,OAAAoF,EAAQ,OAAAC,CAAO,CAAC,CAClD,OAAS5F,EAAQ,CACf,MAAAkB,EAAUlB,GAAG,SAAW,iCAAkC,OAAO,EAC3DA,CACR,CAEF,IAAMK,EAAO,KAAK,MAAMuF,EAAQ,CAAC,CAAW,EAE5C,OADe,MAAM,KAAK,QAAQ,cAAcvF,CAAI,GACtC,SAChB,CAEA,QACE,MAAM,IAAI,MAAM,uBAAuBsF,CAAM,EAAE,CACnD,CACF,CAEQ,YAAYE,EAAqB,CACvC,IAAMC,EAAQ,IAAI,YACfD,EAAI,WAAW,IAAI,EAAIA,EAAI,MAAM,CAAC,EAAIA,GAAK,MAAM,SAAS,EAAG,IAAIhD,GAAK,SAASA,EAAG,EAAE,CAAC,CACxF,EACA,OAAO,IAAI,YAAY,EAAE,OAAOiD,CAAK,CACvC,CACF,EAGOC,EAAQ/D,EAGXgE,EAAkC,KAE/B,SAASC,EAAWhE,EAAiC,CAC1D,OAAI,CAAC+D,GAAmB/D,KACtB+D,EAAkB,IAAIhE,EAAQC,CAAM,GAE/B+D,CACT","names":["index_exports","__export","OpenKey","OpenKeyEIP1193Provider","index_default","getOpenKey","__toCommonJS","DEFAULT_HOST","OAUTH_STORAGE_KEY","IframeModal","opts","isMobile","style","backdrop","e","card","handle","closeBtn","event","data","h","message","WalletPicker","title","empty","list","info","provider","item","icon","name","cancel","showToast","variant","bg","root","shadow","base64UrlEncode","buffer","generateCodeVerifier","array","generateCodeChallenge","verifier","digest","generateState","ExternalWalletError","OpenKey","config","DEFAULT_HOST","host","url","result","request","targetAddress","a","hexMessage","msg","mode","str","b","res","challenge","state","authUrl","code","stored","response","error","receivedState","urlObj","redirectUri","resolve","reject","left","top","redirectHost","pollInterval","timeout","popupUrl","returnedState","override","action","modeOverride","origin","readyReceived","settled","modal","settle","fn","cleanup","readyTimeout","overallTimeout","val","err","sendResult","address","challengeRes","signature","linkRes","key","handleMessage","pollClosed","OpenKeyEIP1193Provider","openkey","authResult","method","params","hex","bytes","index_default","defaultInstance","getOpenKey"]}

package/dist/index.mjs

@@ -1,4 +1,4 @@
-var b="https://openkey.so";var f="openkey_oauth",E=class{root;shadow;iframe;onClose;onMessage;messageHandler;host;constructor(e){this.host=e.host,this.onClose=e.onClose,this.onMessage=e.onMessage;let t=window.matchMedia("(max-width: 639px)").matches;this.root=document.createElement("div"),this.shadow=this.root.attachShadow({mode:"closed"});let s=document.createElement("style");s.textContent=`
+var b="https://openkey.so";var f="openkey_oauth",v=class{root;shadow;iframe;onClose;onMessage;messageHandler;host;constructor(e){this.host=e.host,this.onClose=e.onClose,this.onMessage=e.onMessage;let t=window.matchMedia("(max-width: 639px)").matches;this.root=document.createElement("div"),this.shadow=this.root.attachShadow({mode:"closed"});let s=document.createElement("style");s.textContent=`
       :host{all:initial}
       .ok-backdrop{position:fixed;inset:0;background:rgba(0,0,0,0.4);backdrop-filter:blur(4px);z-index:999999;display:flex;align-items:${t?"flex-end":"center"};justify-content:center;animation:ok-fade-in 150ms ease-out}
       .ok-card{position:relative;background:#fafafa;width:${t?"100%":"400px"};border-radius:${t?"16px 16px 0 0":"16px"};box-shadow:0 25px 50px -12px rgba(0,0,0,0.25);overflow:hidden;overflow-y:auto;animation:${t?"ok-slide-up 250ms ease-out":"ok-scale-in 200ms ease-out"};max-height:90vh}
@@ -14,7 +14,7 @@ var b="https://openkey.so";var f="openkey_oauth",E=class{root;shadow;iframe;onCl
       @keyframes ok-scale-out{from{opacity:1;transform:scale(1)}to{opacity:0;transform:scale(0.95)}}
       @keyframes ok-slide-up{from{transform:translateY(100%)}to{transform:translateY(0)}}
       @keyframes ok-slide-down{from{transform:translateY(0)}to{transform:translateY(100%)}}
-    `;let o=document.createElement("div");o.className="ok-backdrop",o.addEventListener("click",n=>{n.target===o&&this.close()});let r=document.createElement("div");if(r.className="ok-card",t){let n=document.createElement("div");n.className="ok-handle",r.appendChild(n)}let d=document.createElement("button");d.className="ok-close",d.textContent="\xD7",d.addEventListener("click",()=>this.close()),r.appendChild(d),this.iframe=document.createElement("iframe"),this.iframe.src=e.url,this.iframe.setAttribute("allow","publickey-credentials-get *; publickey-credentials-create *"),this.iframe.setAttribute("sandbox","allow-scripts allow-same-origin allow-forms allow-popups"),r.appendChild(this.iframe),o.appendChild(r),this.shadow.appendChild(s),this.shadow.appendChild(o),this.messageHandler=n=>{if(n.origin!==this.host)return;let c=n.data;if(c.type==="openkey:resize"){let l=Math.min(c.height,Math.floor(window.innerHeight*.85));this.iframe.style.height=`${l}px`;return}this.onMessage(c)},window.addEventListener("message",this.messageHandler),document.body.appendChild(this.root)}postMessage(e){this.iframe.contentWindow?.postMessage(e,this.host)}destroy(){window.removeEventListener("message",this.messageHandler),this.root.remove()}close(){let e=this.shadow.querySelector(".ok-backdrop");e?(e.classList.add("ok-exit"),setTimeout(()=>{this.destroy(),this.onClose()},200)):(this.destroy(),this.onClose())}},v=class{root;shadow;constructor(e){this.root=document.createElement("div"),this.shadow=this.root.attachShadow({mode:"closed"});let t=document.createElement("style");t.textContent=`
+    `;let o=document.createElement("div");o.className="ok-backdrop",o.addEventListener("click",n=>{n.target===o&&this.close()});let r=document.createElement("div");if(r.className="ok-card",t){let n=document.createElement("div");n.className="ok-handle",r.appendChild(n)}let d=document.createElement("button");d.className="ok-close",d.textContent="\xD7",d.addEventListener("click",()=>this.close()),r.appendChild(d),this.iframe=document.createElement("iframe"),this.iframe.src=e.url,this.iframe.setAttribute("allow","publickey-credentials-get *; publickey-credentials-create *"),this.iframe.setAttribute("sandbox","allow-scripts allow-same-origin allow-forms allow-popups"),r.appendChild(this.iframe),o.appendChild(r),this.shadow.appendChild(s),this.shadow.appendChild(o),this.messageHandler=n=>{if(n.origin!==this.host)return;let c=n.data;if(c.type==="openkey:resize"){let l=Math.min(c.height,Math.floor(window.innerHeight*.85));this.iframe.style.height=`${l}px`;return}this.onMessage(c)},window.addEventListener("message",this.messageHandler),document.body.appendChild(this.root)}postMessage(e){this.iframe.contentWindow?.postMessage(e,this.host)}destroy(){window.removeEventListener("message",this.messageHandler),this.root.remove()}close(){let e=this.shadow.querySelector(".ok-backdrop");e?(e.classList.add("ok-exit"),setTimeout(()=>{this.destroy(),this.onClose()},200)):(this.destroy(),this.onClose())}},E=class{root;shadow;constructor(e){this.root=document.createElement("div"),this.shadow=this.root.attachShadow({mode:"closed"});let t=document.createElement("style");t.textContent=`
       :host{all:initial}
       .wp-backdrop{position:fixed;inset:0;background:rgba(0,0,0,0.4);backdrop-filter:blur(4px);z-index:1000000;display:flex;align-items:center;justify-content:center;animation:wp-fade 150ms ease-out}
       .wp-card{background:#fff;width:340px;border-radius:16px;box-shadow:0 25px 50px -12px rgba(0,0,0,0.25);padding:20px;animation:wp-scale 200ms ease-out}
@@ -37,5 +37,5 @@ var b="https://openkey.so";var f="openkey_oauth",E=class{root;shadow;iframe;onCl
         .wp-cancel{color:#9ca3af}
         .wp-cancel:hover{background:#262626;color:#f3f4f6}
       }
-    `;let s=document.createElement("div");s.className="wp-backdrop",s.addEventListener("click",n=>{n.target===s&&(this.destroy(),e.onCancel())});let o=document.createElement("div");o.className="wp-card";let r=document.createElement("h2");if(r.className="wp-title",r.textContent="Select a wallet",o.appendChild(r),e.providers.length===0){let n=document.createElement("div");n.className="wp-empty",n.textContent="No wallets detected",o.appendChild(n)}else{let n=document.createElement("ul");n.className="wp-list";for(let{info:c,provider:l}of e.providers){let p=document.createElement("button");if(p.className="wp-item",c.icon){let i=document.createElement("img");i.className="wp-icon",i.src=c.icon,i.alt=c.name,p.appendChild(i)}let h=document.createElement("span");h.textContent=c.name,p.appendChild(h),p.addEventListener("click",()=>{this.destroy(),e.onSelect(l)}),n.appendChild(p)}o.appendChild(n)}let d=document.createElement("button");d.className="wp-cancel",d.textContent="Cancel",d.addEventListener("click",()=>{this.destroy(),e.onCancel()}),o.appendChild(d),s.appendChild(o),this.shadow.appendChild(t),this.shadow.appendChild(s),document.body.appendChild(this.root)}destroy(){this.root.remove()}};function g(u="Opening in new window\u2026",e="info"){let t=e==="error"?"#dc2626":"#1f2937",s=document.createElement("div"),o=s.attachShadow({mode:"closed"});o.innerHTML=`<style>:host{all:initial}.ok-toast{position:fixed;top:16px;right:16px;z-index:1000000;background:${t};color:#f9fafb;padding:10px 16px;border-radius:8px;font:14px/1.4 system-ui,sans-serif;box-shadow:0 4px 12px rgba(0,0,0,0.15);animation:ok-t-in 200ms ease-out;max-width:360px}@keyframes ok-t-in{from{opacity:0;transform:translateY(-8px)}to{opacity:1;transform:translateY(0)}}</style><div class="ok-toast">${u}</div>`,document.body.appendChild(s),setTimeout(()=>s.remove(),4e3)}function x(u){return btoa(String.fromCharCode(...u)).replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"")}async function O(){let u=new Uint8Array(32);return crypto.getRandomValues(u),x(u)}async function I(u){let t=new TextEncoder().encode(u),s=await crypto.subtle.digest("SHA-256",t);return x(new Uint8Array(s))}function A(){let u=new Uint8Array(16);return crypto.getRandomValues(u),x(u)}var T=class extends Error{constructor(e){super(e),this.name="ExternalWalletError"}},w=class{host;appName;mode;config;popup=null;lastAuth=null;discoveredProviders=[];sessionToken=null;constructor(e={}){this.config=e,this.host=e.host||b,this.appName=e.appName||window.location.hostname,this.mode=e.mode??"iframe",typeof window<"u"&&(this.discoveredProviders=[],window.addEventListener("eip6963:announceProvider",t=>{this.discoveredProviders.push(t.detail)}),window.dispatchEvent(new Event("eip6963:requestProvider")))}async connect(e){let t=await this.openFlow("connect",{type:"openkey:auth:request",appName:this.appName},e?.mode);return this.lastAuth=t,t}async linkWallet(e){return this.openFlow("link-wallet",{type:"openkey:link-wallet:request"},e?.mode)}async signMessage(e,t){return this.lastAuth?.keyType==="EXTERNAL"?this.signWithExternalWallet(e):this.signWithOpenKey(e,t?.mode)}async signTypedData(e,t){return this.lastAuth?.keyType==="EXTERNAL"?this.signTypedDataWithExternalWallet(e):this.signTypedDataWithOpenKey(e,t?.mode)}async findWalletProvider(e){if(this.config.externalProvider)return this.config.externalProvider;for(let{provider:t}of this.discoveredProviders)try{if((await t.request({method:"eth_accounts"})).some(o=>o.toLowerCase()===e.toLowerCase()))return t}catch{}if(typeof window<"u"&&window.ethereum){let t=window.ethereum;try{if((await t.request({method:"eth_accounts"})).some(o=>o.toLowerCase()===e.toLowerCase()))return t}catch{}}throw new T("External wallet not found. Connect the wallet that owns this key and try again.")}async signWithExternalWallet(e){let t;try{t=await this.findWalletProvider(this.lastAuth.address)}catch(s){throw g(s.message,"error"),s}try{let s=this.toHex(e.message);return{signature:await t.request({method:"personal_sign",params:[s,this.lastAuth.address]}),address:this.lastAuth.address}}catch(s){let o=s?.message?.includes("not been authorized")?"Wallet rejected the request. Approve the connection in your wallet and try again.":s?.message||"Signing failed";throw g(o,"error"),new Error(o)}}async signTypedDataWithExternalWallet(e){let t;try{t=await this.findWalletProvider(this.lastAuth.address)}catch(s){throw g(s.message,"error"),s}try{return{signature:await t.request({method:"eth_signTypedData_v4",params:[this.lastAuth.address,JSON.stringify(e)]}),address:this.lastAuth.address}}catch(s){let o=s?.message?.includes("not been authorized")?"Wallet rejected the request. Approve the connection in your wallet and try again.":s?.message||"Signing failed";throw g(o,"error"),new Error(o)}}signWithOpenKey(e,t){return this.openFlow("sign",{type:"openkey:sign:request",message:e.message,keyId:e.keyId,sessionToken:this.sessionToken||void 0},t)}signTypedDataWithOpenKey(e,t){return this.openFlow("sign-typed-data",{type:"openkey:signTypedData:request",data:e,sessionToken:this.sessionToken||void 0},t)}toHex(e){return"0x"+Array.from(new TextEncoder().encode(e)).map(t=>t.toString(16).padStart(2,"0")).join("")}async isConnected(){try{let e=await fetch(`${this.host}/api/auth/session`,{credentials:"include"});return e.ok?!!(await e.json()).user:!1}catch{return!1}}oauth={connect:async e=>{let t=await O(),s=await I(t),o=e.state||A();sessionStorage.setItem(f,JSON.stringify({verifier:t,state:o}));let r=new URL(`${this.host}/api/auth/oauth2/authorize`);return r.searchParams.set("client_id",e.clientId),r.searchParams.set("redirect_uri",e.redirectUri),r.searchParams.set("response_type","code"),r.searchParams.set("scope","openid"),r.searchParams.set("state",o),r.searchParams.set("code_challenge",s),r.searchParams.set("code_challenge_method","S256"),this.openOAuthFlow(r.toString(),o,e.redirectUri)},exchangeCode:async(e,t)=>{let s=sessionStorage.getItem(f);if(!s)throw new Error("No PKCE verifier found. Start a new OAuth flow.");let{verifier:o}=JSON.parse(s),r=await fetch(`${this.host}/api/auth/oauth2/token`,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"authorization_code",code:e,redirect_uri:t.redirectUri,client_id:t.clientId,code_verifier:o})});if(sessionStorage.removeItem(f),!r.ok){let d=await r.json();throw new Error(d.error_description||"Token exchange failed")}return r.json()},verifyState:e=>{let t=sessionStorage.getItem(f);if(!t)return!1;let{state:s}=JSON.parse(t);return s===e},parseCallback:e=>{let t=new URL(e||window.location.href),s=t.searchParams.get("error");if(s)return{error:s,errorDescription:t.searchParams.get("error_description")||void 0};let o=t.searchParams.get("code"),r=t.searchParams.get("state");return!o||!r?{error:"missing_params",errorDescription:"Missing code or state parameter"}:{code:o,state:r}}};openOAuthFlow(e,t,s){return new Promise((o,r)=>{this.mode!=="redirect"?this.openOAuthPopup(e,t,s,o,r):window.location.href=e})}openOAuthPopup(e,t,s,o,r){let d=window.screenX+(window.outerWidth-400)/2,n=window.screenY+(window.outerHeight-600)/2;if(this.popup=window.open(e,"openkey-oauth",`width=400,height=600,left=${d},top=${n},popup=true`),!this.popup){r({code:"POPUP_BLOCKED",message:"Popup was blocked. Please allow popups or use redirect mode."});return}let c=new URL(s).origin,l=setInterval(()=>{try{if(this.popup?.closed){clearInterval(l),clearTimeout(p),r({code:"USER_CANCELLED",message:"User closed the popup"});return}let h=this.popup?.location?.href;if(h&&h.startsWith(c)){clearInterval(l),clearTimeout(p);let i=new URL(h),m=i.searchParams.get("code"),a=i.searchParams.get("state"),y=i.searchParams.get("error");if(this.popup?.close(),y){r({code:"UNAUTHORIZED",message:i.searchParams.get("error_description")||y});return}if(a!==t){r({code:"STATE_MISMATCH",message:"State mismatch - possible CSRF attack"});return}m?o({code:m,state:a}):r({code:"UNAUTHORIZED",message:"Authorization failed - no code returned"})}}catch{}},100),p=setTimeout(()=>{clearInterval(l),this.popup?.close(),r({code:"TIMEOUT",message:"OAuth flow timed out"})},3e5)}resolveMode(e){return e??this.mode}async openFlow(e,t,s){let o=this.resolveMode(s),r=encodeURIComponent(window.location.origin);if(o==="popup"){let n=`${this.host}/widget/${e}?origin=${r}`;return new Promise((c,l)=>this.openPopup(n,t,c,l))}if(o==="redirect"){let n=`${this.host}/widget/${e}?origin=${r}`;return window.location.href=n,new Promise(()=>{})}let d=`${this.host}/widget/embed/${e}?origin=${r}`;return this.openIframeModal(d,e,t,r)}openIframeModal(e,t,s,o){return new Promise((r,d)=>{let n=!1,c=!1,l=null,p=a=>{c||(c=!0,a())},h=()=>{clearTimeout(i),clearTimeout(m),l?.destroy(),l=null};l=new E({url:e,host:this.host,onClose:()=>{p(()=>{clearTimeout(i),clearTimeout(m),l=null,d({code:"USER_CANCELLED",message:"User cancelled the request"})})},onMessage:a=>{if(a.type==="openkey:ready"){n=!0,l?.postMessage(s);return}if(a.type==="openkey:close"){p(()=>{h(),d({code:"USER_CANCELLED",message:"User cancelled the request"})});return}if(a.type==="openkey:link-wallet:delegate"){this.handleWalletLinkDelegation(l);return}(a.type==="openkey:auth:response"||a.type==="openkey:sign:response"||a.type==="openkey:signTypedData:response"||a.type==="openkey:link-wallet:response")&&p(()=>{h(),a.success?a.type==="openkey:auth:response"?(a.sessionToken&&(this.sessionToken=a.sessionToken),r({address:a.address,keyId:a.keyId,keyType:a.keyType||"MANAGED"})):a.type==="openkey:link-wallet:response"?r({address:a.address,keyId:a.keyId}):r({signature:a.signature,address:a.address}):d(a.error)})}});let i=setTimeout(()=>{if(n||c)return;h(),console.warn("OpenKey: iframe blocked by CSP, falling back to popup. Add frame-src https://openkey.so to your CSP."),g();let a=`${this.host}/widget/${t}?origin=${o}`;this.openPopup(a,s,y=>p(()=>r(y)),y=>p(()=>d(y)))},3e3),m=setTimeout(()=>{p(()=>{h(),d({code:"TIMEOUT",message:"Request timed out"})})},3e5)})}handleWalletLinkDelegation(e){let t=s=>e.postMessage(s);new v({providers:this.discoveredProviders,onCancel:()=>{t({type:"openkey:link-wallet:result",success:!1,error:{code:"USER_CANCELLED",message:"Wallet linking cancelled"}})},onSelect:async s=>{try{let r=(await s.request({method:"eth_requestAccounts"}))[0];if(!r)throw new Error("No account returned");let d=await fetch(`${this.host}/api/keys/link/challenge`,{method:"POST",credentials:"include"});if(!d.ok)throw new Error("Failed to get challenge");let{message:n}=await d.json(),c=this.toHex(n),l=await s.request({method:"personal_sign",params:[c,r]}),p=await fetch(`${this.host}/api/keys/link`,{method:"POST",headers:{"Content-Type":"application/json"},credentials:"include",body:JSON.stringify({address:r,signature:l,message:n})});if(!p.ok){let i=await p.json();throw new Error(i.error||"Failed to link wallet")}let{key:h}=await p.json();t({type:"openkey:link-wallet:result",success:!0,address:h.address,keyId:h.id})}catch(o){t({type:"openkey:link-wallet:result",success:!1,error:{code:"UNKNOWN",message:o.message||"Wallet linking failed"}})}}})}openPopup(e,t,s,o){let r=window.screenX+(window.outerWidth-400)/2,d=window.screenY+(window.outerHeight-600)/2;if(this.popup=window.open(e,"openkey",`width=400,height=600,left=${r},top=${d},popup=true`),!this.popup){o({code:"POPUP_BLOCKED",message:"Popup was blocked. Please allow popups for this site."});return}let n=()=>{window.removeEventListener("message",p),clearInterval(c),clearTimeout(l)},c=setInterval(()=>{this.popup?.closed&&(n(),o({code:"USER_CANCELLED",message:"User closed the popup"}))},500),l=setTimeout(()=>{n(),this.popup?.close(),o({code:"TIMEOUT",message:"Request timed out"})},3e5),p=h=>{if(h.origin!==this.host)return;let i=h.data;if(i.type==="openkey:ready"){this.popup?.postMessage(t,this.host);return}if(i.type==="openkey:close"){n(),this.popup?.close(),o({code:"USER_CANCELLED",message:"User cancelled the request"});return}(i.type==="openkey:auth:response"||i.type==="openkey:sign:response"||i.type==="openkey:signTypedData:response"||i.type==="openkey:link-wallet:response")&&(n(),this.popup?.close(),i.success?i.type==="openkey:auth:response"?(i.sessionToken&&(this.sessionToken=i.sessionToken),s({address:i.address,keyId:i.keyId,keyType:i.keyType||"MANAGED"})):i.type==="openkey:link-wallet:response"?s({address:i.address,keyId:i.keyId}):s({signature:i.signature,address:i.address}):o(i.error))};window.addEventListener("message",p)}disconnect(){this.popup?.close(),this.popup=null}},P=class{openkey;address;keyId;keyType;constructor(e,t){this.openkey=e,this.address=t.address,this.keyId=t.keyId,this.keyType=t.keyType}async request({method:e,params:t}){switch(e){case"eth_accounts":case"eth_requestAccounts":return[this.address];case"eth_chainId":return"0x1";case"personal_sign":{if(this.keyType==="EXTERNAL")try{return await(await this.openkey.findWalletProvider(this.address)).request({method:e,params:t})}catch(r){throw g(r?.message||"External wallet signing failed","error"),r}let s=this.hexToString(t[0]);return(await this.openkey.signMessage({message:s,keyId:this.keyId})).signature}case"eth_signTypedData_v4":{if(this.keyType==="EXTERNAL")try{return await(await this.openkey.findWalletProvider(this.address)).request({method:e,params:t})}catch(r){throw g(r?.message||"External wallet signing failed","error"),r}let s=JSON.parse(t[1]);return(await this.openkey.signTypedData(s)).signature}default:throw new Error(`Unsupported method: ${e}`)}}hexToString(e){let t=new Uint8Array((e.startsWith("0x")?e.slice(2):e).match(/.{1,2}/g).map(s=>parseInt(s,16)));return new TextDecoder().decode(t)}},C=w,k=null;function M(u){return(!k||u)&&(k=new w(u)),k}export{w as OpenKey,P as OpenKeyEIP1193Provider,C as default,M as getOpenKey};
+    `;let s=document.createElement("div");s.className="wp-backdrop",s.addEventListener("click",n=>{n.target===s&&(this.destroy(),e.onCancel())});let o=document.createElement("div");o.className="wp-card";let r=document.createElement("h2");if(r.className="wp-title",r.textContent="Select a wallet",o.appendChild(r),e.providers.length===0){let n=document.createElement("div");n.className="wp-empty",n.textContent="No wallets detected",o.appendChild(n)}else{let n=document.createElement("ul");n.className="wp-list";for(let{info:c,provider:l}of e.providers){let p=document.createElement("button");if(p.className="wp-item",c.icon){let i=document.createElement("img");i.className="wp-icon",i.src=c.icon,i.alt=c.name,p.appendChild(i)}let h=document.createElement("span");h.textContent=c.name,p.appendChild(h),p.addEventListener("click",()=>{this.destroy(),e.onSelect(l)}),n.appendChild(p)}o.appendChild(n)}let d=document.createElement("button");d.className="wp-cancel",d.textContent="Cancel",d.addEventListener("click",()=>{this.destroy(),e.onCancel()}),o.appendChild(d),s.appendChild(o),this.shadow.appendChild(t),this.shadow.appendChild(s),document.body.appendChild(this.root)}destroy(){this.root.remove()}};function g(u="Opening in new window\u2026",e="info"){let t=e==="error"?"#dc2626":"#1f2937",s=document.createElement("div"),o=s.attachShadow({mode:"closed"});o.innerHTML=`<style>:host{all:initial}.ok-toast{position:fixed;top:16px;right:16px;z-index:1000000;background:${t};color:#f9fafb;padding:10px 16px;border-radius:8px;font:14px/1.4 system-ui,sans-serif;box-shadow:0 4px 12px rgba(0,0,0,0.15);animation:ok-t-in 200ms ease-out;max-width:360px}@keyframes ok-t-in{from{opacity:0;transform:translateY(-8px)}to{opacity:1;transform:translateY(0)}}</style><div class="ok-toast">${u}</div>`,document.body.appendChild(s),setTimeout(()=>s.remove(),4e3)}function x(u){return btoa(String.fromCharCode(...u)).replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"")}async function O(){let u=new Uint8Array(32);return crypto.getRandomValues(u),x(u)}async function I(u){let t=new TextEncoder().encode(u),s=await crypto.subtle.digest("SHA-256",t);return x(new Uint8Array(s))}function A(){let u=new Uint8Array(16);return crypto.getRandomValues(u),x(u)}var T=class extends Error{constructor(e){super(e),this.name="ExternalWalletError"}},w=class{host;oauthHost;appName;mode;config;popup=null;lastAuth=null;discoveredProviders=[];sessionToken=null;constructor(e={}){this.config=e,this.host=e.host||b,this.oauthHost=e.oauthHost||this.deriveOAuthHost(this.host),this.appName=e.appName||window.location.hostname,this.mode=e.mode??"iframe",typeof window<"u"&&(this.discoveredProviders=[],window.addEventListener("eip6963:announceProvider",t=>{this.discoveredProviders.push(t.detail)}),window.dispatchEvent(new Event("eip6963:requestProvider")))}deriveOAuthHost(e){try{let t=new URL(e);return t.hostname="api."+t.hostname,t.toString().replace(/\/$/,"")}catch{return"https://api.openkey.so"}}async connect(e){let t=await this.openFlow("connect",{type:"openkey:auth:request",appName:this.appName},e?.mode);return this.lastAuth=t,t}async linkWallet(e){return this.openFlow("link-wallet",{type:"openkey:link-wallet:request"},e?.mode)}async signMessage(e,t){return this.lastAuth?.keyType==="EXTERNAL"?this.signWithExternalWallet(e):this.signWithOpenKey(e,t?.mode)}async signTypedData(e,t){return this.lastAuth?.keyType==="EXTERNAL"?this.signTypedDataWithExternalWallet(e):this.signTypedDataWithOpenKey(e,t?.mode)}async findWalletProvider(e){if(this.config.externalProvider)return this.config.externalProvider;for(let{provider:t}of this.discoveredProviders)try{if((await t.request({method:"eth_accounts"})).some(o=>o.toLowerCase()===e.toLowerCase()))return t}catch{}if(typeof window<"u"&&window.ethereum){let t=window.ethereum;try{if((await t.request({method:"eth_accounts"})).some(o=>o.toLowerCase()===e.toLowerCase()))return t}catch{}}throw new T("External wallet not found. Connect the wallet that owns this key and try again.")}async signWithExternalWallet(e){let t;try{t=await this.findWalletProvider(this.lastAuth.address)}catch(s){throw g(s.message,"error"),s}try{let s=this.toHex(e.message);return{signature:await t.request({method:"personal_sign",params:[s,this.lastAuth.address]}),address:this.lastAuth.address}}catch(s){let o=s?.message?.includes("not been authorized")?"Wallet rejected the request. Approve the connection in your wallet and try again.":s?.message||"Signing failed";throw g(o,"error"),new Error(o)}}async signTypedDataWithExternalWallet(e){let t;try{t=await this.findWalletProvider(this.lastAuth.address)}catch(s){throw g(s.message,"error"),s}try{return{signature:await t.request({method:"eth_signTypedData_v4",params:[this.lastAuth.address,JSON.stringify(e)]}),address:this.lastAuth.address}}catch(s){let o=s?.message?.includes("not been authorized")?"Wallet rejected the request. Approve the connection in your wallet and try again.":s?.message||"Signing failed";throw g(o,"error"),new Error(o)}}signWithOpenKey(e,t){return this.openFlow("sign",{type:"openkey:sign:request",message:e.message,keyId:e.keyId,sessionToken:this.sessionToken||void 0},t)}signTypedDataWithOpenKey(e,t){return this.openFlow("sign-typed-data",{type:"openkey:signTypedData:request",data:e,sessionToken:this.sessionToken||void 0},t)}toHex(e){return"0x"+Array.from(new TextEncoder().encode(e)).map(t=>t.toString(16).padStart(2,"0")).join("")}async isConnected(){try{let e=await fetch(`${this.host}/api/auth/session`,{credentials:"include"});return e.ok?!!(await e.json()).user:!1}catch{return!1}}oauth={connect:async e=>{let t=await O(),s=await I(t),o=e.state||A();sessionStorage.setItem(f,JSON.stringify({verifier:t,state:o}));let r=new URL(`${this.oauthHost}/api/auth/oauth2/authorize`);return r.searchParams.set("client_id",e.clientId),r.searchParams.set("redirect_uri",e.redirectUri),r.searchParams.set("response_type","code"),r.searchParams.set("scope","openid"),r.searchParams.set("state",o),r.searchParams.set("code_challenge",s),r.searchParams.set("code_challenge_method","S256"),this.openOAuthFlow(r.toString(),o,e.redirectUri)},exchangeCode:async(e,t)=>{let s=sessionStorage.getItem(f);if(!s)throw new Error("No PKCE verifier found. Start a new OAuth flow.");let{verifier:o}=JSON.parse(s),r=await fetch(`${this.oauthHost}/api/auth/oauth2/token`,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"authorization_code",code:e,redirect_uri:t.redirectUri,client_id:t.clientId,code_verifier:o})});if(sessionStorage.removeItem(f),!r.ok){let d=await r.json();throw new Error(d.error_description||"Token exchange failed")}return r.json()},verifyState:e=>{let t=sessionStorage.getItem(f);if(!t)return!1;let{state:s}=JSON.parse(t);return s===e},parseCallback:e=>{let t=new URL(e||window.location.href),s=t.searchParams.get("error");if(s)return{error:s,errorDescription:t.searchParams.get("error_description")||void 0};let o=t.searchParams.get("code"),r=t.searchParams.get("state");return!o||!r?{error:"missing_params",errorDescription:"Missing code or state parameter"}:{code:o,state:r}}};openOAuthFlow(e,t,s){return new Promise((o,r)=>{this.mode!=="redirect"?this.openOAuthPopup(e,t,s,o,r):window.location.href=e})}openOAuthPopup(e,t,s,o,r){let d=window.screenX+(window.outerWidth-400)/2,n=window.screenY+(window.outerHeight-600)/2;if(this.popup=window.open(e,"openkey-oauth",`width=400,height=600,left=${d},top=${n},popup=true`),!this.popup){r({code:"POPUP_BLOCKED",message:"Popup was blocked. Please allow popups or use redirect mode."});return}let c=new URL(s).origin,l=setInterval(()=>{try{if(this.popup?.closed){clearInterval(l),clearTimeout(p),r({code:"USER_CANCELLED",message:"User closed the popup"});return}let h=this.popup?.location?.href;if(h&&h.startsWith(c)){clearInterval(l),clearTimeout(p);let i=new URL(h),m=i.searchParams.get("code"),a=i.searchParams.get("state"),y=i.searchParams.get("error");if(this.popup?.close(),y){r({code:"UNAUTHORIZED",message:i.searchParams.get("error_description")||y});return}if(a!==t){r({code:"STATE_MISMATCH",message:"State mismatch - possible CSRF attack"});return}m?o({code:m,state:a}):r({code:"UNAUTHORIZED",message:"Authorization failed - no code returned"})}}catch{}},100),p=setTimeout(()=>{clearInterval(l),this.popup?.close(),r({code:"TIMEOUT",message:"OAuth flow timed out"})},3e5)}resolveMode(e){return e??this.mode}async openFlow(e,t,s){let o=this.resolveMode(s),r=encodeURIComponent(window.location.origin);if(o==="popup"){let n=`${this.host}/widget/${e}?origin=${r}`;return new Promise((c,l)=>this.openPopup(n,t,c,l))}if(o==="redirect"){let n=`${this.host}/widget/${e}?origin=${r}`;return window.location.href=n,new Promise(()=>{})}let d=`${this.host}/widget/embed/${e}?origin=${r}`;return this.openIframeModal(d,e,t,r)}openIframeModal(e,t,s,o){return new Promise((r,d)=>{let n=!1,c=!1,l=null,p=a=>{c||(c=!0,a())},h=()=>{clearTimeout(i),clearTimeout(m),l?.destroy(),l=null};l=new v({url:e,host:this.host,onClose:()=>{p(()=>{clearTimeout(i),clearTimeout(m),l=null,d({code:"USER_CANCELLED",message:"User cancelled the request"})})},onMessage:a=>{if(a.type==="openkey:ready"){n=!0,l?.postMessage(s);return}if(a.type==="openkey:close"){p(()=>{h(),d({code:"USER_CANCELLED",message:"User cancelled the request"})});return}if(a.type==="openkey:link-wallet:delegate"){this.handleWalletLinkDelegation(l);return}(a.type==="openkey:auth:response"||a.type==="openkey:sign:response"||a.type==="openkey:signTypedData:response"||a.type==="openkey:link-wallet:response")&&p(()=>{h(),a.success?a.type==="openkey:auth:response"?(a.sessionToken&&(this.sessionToken=a.sessionToken),r({address:a.address,keyId:a.keyId,keyType:a.keyType||"MANAGED"})):a.type==="openkey:link-wallet:response"?r({address:a.address,keyId:a.keyId}):r({signature:a.signature,address:a.address}):d(a.error)})}});let i=setTimeout(()=>{if(n||c)return;h(),console.warn("OpenKey: iframe blocked by CSP, falling back to popup. Add frame-src https://openkey.so to your CSP."),g();let a=`${this.host}/widget/${t}?origin=${o}`;this.openPopup(a,s,y=>p(()=>r(y)),y=>p(()=>d(y)))},3e3),m=setTimeout(()=>{p(()=>{h(),d({code:"TIMEOUT",message:"Request timed out"})})},3e5)})}handleWalletLinkDelegation(e){let t=s=>e.postMessage(s);new E({providers:this.discoveredProviders,onCancel:()=>{t({type:"openkey:link-wallet:result",success:!1,error:{code:"USER_CANCELLED",message:"Wallet linking cancelled"}})},onSelect:async s=>{try{let r=(await s.request({method:"eth_requestAccounts"}))[0];if(!r)throw new Error("No account returned");let d=await fetch(`${this.host}/api/keys/link/challenge`,{method:"POST",credentials:"include"});if(!d.ok)throw new Error("Failed to get challenge");let{message:n}=await d.json(),c=this.toHex(n),l=await s.request({method:"personal_sign",params:[c,r]}),p=await fetch(`${this.host}/api/keys/link`,{method:"POST",headers:{"Content-Type":"application/json"},credentials:"include",body:JSON.stringify({address:r,signature:l,message:n})});if(!p.ok){let i=await p.json();throw new Error(i.error||"Failed to link wallet")}let{key:h}=await p.json();t({type:"openkey:link-wallet:result",success:!0,address:h.address,keyId:h.id})}catch(o){t({type:"openkey:link-wallet:result",success:!1,error:{code:"UNKNOWN",message:o.message||"Wallet linking failed"}})}}})}openPopup(e,t,s,o){let r=window.screenX+(window.outerWidth-400)/2,d=window.screenY+(window.outerHeight-600)/2;if(this.popup=window.open(e,"openkey",`width=400,height=600,left=${r},top=${d},popup=true`),!this.popup){o({code:"POPUP_BLOCKED",message:"Popup was blocked. Please allow popups for this site."});return}let n=()=>{window.removeEventListener("message",p),clearInterval(c),clearTimeout(l)},c=setInterval(()=>{this.popup?.closed&&(n(),o({code:"USER_CANCELLED",message:"User closed the popup"}))},500),l=setTimeout(()=>{n(),this.popup?.close(),o({code:"TIMEOUT",message:"Request timed out"})},3e5),p=h=>{if(h.origin!==this.host)return;let i=h.data;if(i.type==="openkey:ready"){this.popup?.postMessage(t,this.host);return}if(i.type==="openkey:close"){n(),this.popup?.close(),o({code:"USER_CANCELLED",message:"User cancelled the request"});return}(i.type==="openkey:auth:response"||i.type==="openkey:sign:response"||i.type==="openkey:signTypedData:response"||i.type==="openkey:link-wallet:response")&&(n(),this.popup?.close(),i.success?i.type==="openkey:auth:response"?(i.sessionToken&&(this.sessionToken=i.sessionToken),s({address:i.address,keyId:i.keyId,keyType:i.keyType||"MANAGED"})):i.type==="openkey:link-wallet:response"?s({address:i.address,keyId:i.keyId}):s({signature:i.signature,address:i.address}):o(i.error))};window.addEventListener("message",p)}disconnect(){this.popup?.close(),this.popup=null}},P=class{openkey;address;keyId;keyType;constructor(e,t){this.openkey=e,this.address=t.address,this.keyId=t.keyId,this.keyType=t.keyType}async request({method:e,params:t}){switch(e){case"eth_accounts":case"eth_requestAccounts":return[this.address];case"eth_chainId":return"0x1";case"personal_sign":{if(this.keyType==="EXTERNAL")try{return await(await this.openkey.findWalletProvider(this.address)).request({method:e,params:t})}catch(r){throw g(r?.message||"External wallet signing failed","error"),r}let s=this.hexToString(t[0]);return(await this.openkey.signMessage({message:s,keyId:this.keyId})).signature}case"eth_signTypedData_v4":{if(this.keyType==="EXTERNAL")try{return await(await this.openkey.findWalletProvider(this.address)).request({method:e,params:t})}catch(r){throw g(r?.message||"External wallet signing failed","error"),r}let s=JSON.parse(t[1]);return(await this.openkey.signTypedData(s)).signature}default:throw new Error(`Unsupported method: ${e}`)}}hexToString(e){let t=new Uint8Array((e.startsWith("0x")?e.slice(2):e).match(/.{1,2}/g).map(s=>parseInt(s,16)));return new TextDecoder().decode(t)}},C=w,k=null;function M(u){return(!k||u)&&(k=new w(u)),k}export{w as OpenKey,P as OpenKeyEIP1193Provider,C as default,M as getOpenKey};
 //# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["// OpenKey SDK - Browser client for third-party apps\n// Provides \"Sign with OpenKey\" functionality via popup or iframe\n\nexport interface EIP1193Provider {\n  request(args: { method: string; params?: any[] }): Promise<any>;\n}\n\ninterface EIP6963ProviderInfo {\n  uuid: string;\n  name: string;\n  icon: string;\n  rdns: string;\n}\n\ninterface EIP6963ProviderDetail {\n  info: EIP6963ProviderInfo;\n  provider: EIP1193Provider;\n}\n\nexport type OpenKeyMode = 'iframe' | 'popup' | 'redirect';\n\nexport interface OpenKeyConfig {\n  /** OpenKey host URL (default: https://openkey.so) */\n  host?: string;\n  /** App identifier for display */\n  appName?: string;\n  /** UI mode: 'iframe' (default), 'popup', or 'redirect' */\n  mode?: OpenKeyMode;\n  /** App-provided wallet provider for external key signing */\n  externalProvider?: EIP1193Provider;\n}\n\nexport interface SignMessageRequest {\n  message: string;\n  keyId?: string; // If not provided, user selects\n}\n\nexport interface SignTypedDataRequest {\n  domain: {\n    name?: string;\n    version?: string;\n    chainId?: number;\n    verifyingContract?: string;\n  };\n  types: Record<string, Array<{ name: string; type: string }>>;\n  primaryType: string;\n  message: Record<string, unknown>;\n  keyId?: string;\n}\n\nexport interface SignResult {\n  signature: string;\n  address: string;\n}\n\nexport interface AuthResult {\n  address: string;\n  keyId: string;\n  keyType: 'MANAGED' | 'EXTERNAL';\n}\n\nexport interface OpenKeyError {\n  code: 'USER_CANCELLED' | 'POPUP_BLOCKED' | 'TIMEOUT' | 'NO_KEY' | 'UNAUTHORIZED' | 'UNKNOWN' | 'STATE_MISMATCH';\n  message: string;\n}\n\n// ======= OAuth 2.1 Types =======\n\n/** OAuth configuration for third-party apps */\nexport interface OAuthConfig {\n  /** OAuth client_id (registered with OpenKey) */\n  clientId: string;\n  /** Redirect URI (must match registered URI) */\n  redirectUri: string;\n  /** State parameter for CSRF protection (auto-generated if not provided) */\n  state?: string;\n}\n\n/** Result from OAuth authorization */\nexport interface OAuthResult {\n  /** Authorization code (exchange for tokens) */\n  code: string;\n  /** State parameter (verify matches request) */\n  state: string;\n}\n\n/** Response from token exchange */\nexport interface OAuthTokenResponse {\n  access_token: string;\n  token_type: 'Bearer';\n  expires_in: number;\n  id_token: string;\n  scope: string;\n  refresh_token?: string;\n}\n\ntype MessageType =\n  | { type: 'openkey:auth:request'; appName: string }\n  | { type: 'openkey:auth:response'; success: true; address: string; keyId: string; keyType?: 'MANAGED' | 'EXTERNAL'; sessionToken?: string }\n  | { type: 'openkey:auth:response'; success: false; error: OpenKeyError }\n  | { type: 'openkey:sign:request'; message: string; keyId?: string; sessionToken?: string }\n  | { type: 'openkey:sign:response'; success: true; signature: string; address: string }\n  | { type: 'openkey:sign:response'; success: false; error: OpenKeyError }\n  | { type: 'openkey:signTypedData:request'; data: SignTypedDataRequest; sessionToken?: string }\n  | { type: 'openkey:signTypedData:response'; success: true; signature: string; address: string }\n  | { type: 'openkey:signTypedData:response'; success: false; error: OpenKeyError }\n  | { type: 'openkey:link-wallet:request' }\n  | { type: 'openkey:link-wallet:response'; success: true; address: string; keyId: string }\n  | { type: 'openkey:link-wallet:response'; success: false; error: OpenKeyError }\n  | { type: 'openkey:link-wallet:delegate' }\n  | { type: 'openkey:link-wallet:result'; success: true; address: string; keyId: string }\n  | { type: 'openkey:link-wallet:result'; success: false; error: OpenKeyError }\n  | { type: 'openkey:resize'; height: number }\n  | { type: 'openkey:ready' }\n  | { type: 'openkey:close' };\n\nconst DEFAULT_HOST = 'https://openkey.so';\nconst POPUP_WIDTH = 400;\nconst POPUP_HEIGHT = 600;\nconst DEFAULT_TIMEOUT = 5 * 60 * 1000; // 5 minutes\nconst IFRAME_READY_TIMEOUT = 3000; // 3 seconds\nconst OAUTH_STORAGE_KEY = 'openkey_oauth';\n\nclass IframeModal {\n  private root: HTMLDivElement;\n  private shadow: ShadowRoot;\n  private iframe: HTMLIFrameElement;\n  private onClose: () => void;\n  private onMessage: (data: MessageType) => void;\n  private messageHandler: (event: MessageEvent) => void;\n  private host: string;\n\n  constructor(opts: { url: string; host: string; onClose: () => void; onMessage: (data: MessageType) => void }) {\n    this.host = opts.host;\n    this.onClose = opts.onClose;\n    this.onMessage = opts.onMessage;\n\n    const isMobile = window.matchMedia('(max-width: 639px)').matches;\n\n    this.root = document.createElement('div');\n    this.shadow = this.root.attachShadow({ mode: 'closed' });\n\n    const style = document.createElement('style');\n    style.textContent = `\n      :host{all:initial}\n      .ok-backdrop{position:fixed;inset:0;background:rgba(0,0,0,0.4);backdrop-filter:blur(4px);z-index:999999;display:flex;align-items:${isMobile ? 'flex-end' : 'center'};justify-content:center;animation:ok-fade-in 150ms ease-out}\n      .ok-card{position:relative;background:#fafafa;width:${isMobile ? '100%' : '400px'};border-radius:${isMobile ? '16px 16px 0 0' : '16px'};box-shadow:0 25px 50px -12px rgba(0,0,0,0.25);overflow:hidden;overflow-y:auto;animation:${isMobile ? 'ok-slide-up 250ms ease-out' : 'ok-scale-in 200ms ease-out'};max-height:90vh}\n      .ok-close{position:absolute;top:8px;right:8px;width:24px;height:24px;border:none;background:transparent;color:#6b7280;font-size:18px;cursor:pointer;z-index:1;display:flex;align-items:center;justify-content:center;border-radius:4px}\n      .ok-close:hover{color:#111827}\n      .ok-handle{width:40px;height:4px;background:#d4d4d4;border-radius:2px;margin:8px auto 0}\n      iframe{border:none;width:100%;height:400px;display:block;transition:height 200ms ease}\n      .ok-backdrop.ok-exit{animation:ok-fade-out 150ms ease-in}\n      .ok-backdrop.ok-exit .ok-card{animation:${isMobile ? 'ok-slide-down 200ms ease-in' : 'ok-scale-out 150ms ease-in'}}\n      @keyframes ok-fade-in{from{opacity:0}to{opacity:1}}\n      @keyframes ok-fade-out{from{opacity:1}to{opacity:0}}\n      @keyframes ok-scale-in{from{opacity:0;transform:scale(0.95)}to{opacity:1;transform:scale(1)}}\n      @keyframes ok-scale-out{from{opacity:1;transform:scale(1)}to{opacity:0;transform:scale(0.95)}}\n      @keyframes ok-slide-up{from{transform:translateY(100%)}to{transform:translateY(0)}}\n      @keyframes ok-slide-down{from{transform:translateY(0)}to{transform:translateY(100%)}}\n    `;\n\n    const backdrop = document.createElement('div');\n    backdrop.className = 'ok-backdrop';\n    backdrop.addEventListener('click', (e) => {\n      if (e.target === backdrop) this.close();\n    });\n\n    const card = document.createElement('div');\n    card.className = 'ok-card';\n\n    if (isMobile) {\n      const handle = document.createElement('div');\n      handle.className = 'ok-handle';\n      card.appendChild(handle);\n    }\n\n    const closeBtn = document.createElement('button');\n    closeBtn.className = 'ok-close';\n    closeBtn.textContent = '\\u00d7';\n    closeBtn.addEventListener('click', () => this.close());\n    card.appendChild(closeBtn);\n\n    this.iframe = document.createElement('iframe');\n    this.iframe.src = opts.url;\n    this.iframe.setAttribute('allow', 'publickey-credentials-get *; publickey-credentials-create *');\n    this.iframe.setAttribute('sandbox', 'allow-scripts allow-same-origin allow-forms allow-popups');\n    card.appendChild(this.iframe);\n\n    backdrop.appendChild(card);\n    this.shadow.appendChild(style);\n    this.shadow.appendChild(backdrop);\n\n    this.messageHandler = (event: MessageEvent) => {\n      if (event.origin !== this.host) return;\n      const data = event.data as MessageType;\n      if (data.type === 'openkey:resize') {\n        const h = Math.min(data.height, Math.floor(window.innerHeight * 0.85));\n        this.iframe.style.height = `${h}px`;\n        return;\n      }\n      this.onMessage(data);\n    };\n    window.addEventListener('message', this.messageHandler);\n    document.body.appendChild(this.root);\n  }\n\n  postMessage(message: object) {\n    this.iframe.contentWindow?.postMessage(message, this.host);\n  }\n\n  destroy() {\n    window.removeEventListener('message', this.messageHandler);\n    this.root.remove();\n  }\n\n  private close() {\n    const backdrop = this.shadow.querySelector('.ok-backdrop');\n    if (backdrop) {\n      backdrop.classList.add('ok-exit');\n      setTimeout(() => {\n        this.destroy();\n        this.onClose();\n      }, 200);\n    } else {\n      this.destroy();\n      this.onClose();\n    }\n  }\n}\n\nclass WalletPicker {\n  private root: HTMLDivElement;\n  private shadow: ShadowRoot;\n\n  constructor(opts: { providers: EIP6963ProviderDetail[]; onSelect: (provider: EIP1193Provider) => void; onCancel: () => void }) {\n    this.root = document.createElement('div');\n    this.shadow = this.root.attachShadow({ mode: 'closed' });\n\n    const style = document.createElement('style');\n    style.textContent = `\n      :host{all:initial}\n      .wp-backdrop{position:fixed;inset:0;background:rgba(0,0,0,0.4);backdrop-filter:blur(4px);z-index:1000000;display:flex;align-items:center;justify-content:center;animation:wp-fade 150ms ease-out}\n      .wp-card{background:#fff;width:340px;border-radius:16px;box-shadow:0 25px 50px -12px rgba(0,0,0,0.25);padding:20px;animation:wp-scale 200ms ease-out}\n      .wp-title{font:600 16px/1.3 system-ui,sans-serif;color:#111;margin:0 0 12px}\n      .wp-list{list-style:none;margin:0;padding:0;display:flex;flex-direction:column;gap:6px}\n      .wp-item{display:flex;align-items:center;gap:10px;padding:10px 12px;border:1px solid #e5e7eb;border-radius:10px;background:transparent;cursor:pointer;font:14px/1.3 system-ui,sans-serif;color:#111;width:100%;text-align:left;transition:border-color 150ms}\n      .wp-item:hover{border-color:#6366f1}\n      .wp-icon{width:28px;height:28px;border-radius:6px}\n      .wp-empty{font:14px/1.4 system-ui,sans-serif;color:#6b7280;text-align:center;padding:16px 0}\n      .wp-cancel{display:block;width:100%;margin-top:12px;padding:8px;border:none;background:transparent;color:#6b7280;font:14px/1.3 system-ui,sans-serif;cursor:pointer;border-radius:8px}\n      .wp-cancel:hover{background:#f3f4f6;color:#111}\n      @keyframes wp-fade{from{opacity:0}to{opacity:1}}\n      @keyframes wp-scale{from{opacity:0;transform:scale(0.95)}to{opacity:1;transform:scale(1)}}\n      @media(prefers-color-scheme:dark){\n        .wp-card{background:#1a1a1a;box-shadow:0 25px 50px -12px rgba(0,0,0,0.5)}\n        .wp-title{color:#f3f4f6}\n        .wp-item{border-color:#374151;color:#f3f4f6}\n        .wp-item:hover{border-color:#818cf8}\n        .wp-empty{color:#9ca3af}\n        .wp-cancel{color:#9ca3af}\n        .wp-cancel:hover{background:#262626;color:#f3f4f6}\n      }\n    `;\n\n    const backdrop = document.createElement('div');\n    backdrop.className = 'wp-backdrop';\n    backdrop.addEventListener('click', (e) => { if (e.target === backdrop) { this.destroy(); opts.onCancel(); } });\n\n    const card = document.createElement('div');\n    card.className = 'wp-card';\n\n    const title = document.createElement('h2');\n    title.className = 'wp-title';\n    title.textContent = 'Select a wallet';\n    card.appendChild(title);\n\n    if (opts.providers.length === 0) {\n      const empty = document.createElement('div');\n      empty.className = 'wp-empty';\n      empty.textContent = 'No wallets detected';\n      card.appendChild(empty);\n    } else {\n      const list = document.createElement('ul');\n      list.className = 'wp-list';\n      for (const { info, provider } of opts.providers) {\n        const item = document.createElement('button');\n        item.className = 'wp-item';\n        if (info.icon) {\n          const icon = document.createElement('img');\n          icon.className = 'wp-icon';\n          icon.src = info.icon;\n          icon.alt = info.name;\n          item.appendChild(icon);\n        }\n        const name = document.createElement('span');\n        name.textContent = info.name;\n        item.appendChild(name);\n        item.addEventListener('click', () => { this.destroy(); opts.onSelect(provider); });\n        list.appendChild(item);\n      }\n      card.appendChild(list);\n    }\n\n    const cancel = document.createElement('button');\n    cancel.className = 'wp-cancel';\n    cancel.textContent = 'Cancel';\n    cancel.addEventListener('click', () => { this.destroy(); opts.onCancel(); });\n    card.appendChild(cancel);\n\n    backdrop.appendChild(card);\n    this.shadow.appendChild(style);\n    this.shadow.appendChild(backdrop);\n    document.body.appendChild(this.root);\n  }\n\n  destroy() {\n    this.root.remove();\n  }\n}\n\nfunction showToast(message = 'Opening in new window\\u2026', variant: 'info' | 'error' = 'info') {\n  const bg = variant === 'error' ? '#dc2626' : '#1f2937';\n  const root = document.createElement('div');\n  const shadow = root.attachShadow({ mode: 'closed' });\n  shadow.innerHTML = `<style>:host{all:initial}.ok-toast{position:fixed;top:16px;right:16px;z-index:1000000;background:${bg};color:#f9fafb;padding:10px 16px;border-radius:8px;font:14px/1.4 system-ui,sans-serif;box-shadow:0 4px 12px rgba(0,0,0,0.15);animation:ok-t-in 200ms ease-out;max-width:360px}@keyframes ok-t-in{from{opacity:0;transform:translateY(-8px)}to{opacity:1;transform:translateY(0)}}</style><div class=\"ok-toast\">${message}</div>`;\n  document.body.appendChild(root);\n  setTimeout(() => root.remove(), 4000);\n}\n\n// ======= PKCE Utilities =======\n\nfunction base64UrlEncode(buffer: Uint8Array): string {\n  const base64 = btoa(String.fromCharCode(...buffer));\n  return base64.replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=/g, '');\n}\n\nasync function generateCodeVerifier(): Promise<string> {\n  const array = new Uint8Array(32);\n  crypto.getRandomValues(array);\n  return base64UrlEncode(array);\n}\n\nasync function generateCodeChallenge(verifier: string): Promise<string> {\n  const encoder = new TextEncoder();\n  const data = encoder.encode(verifier);\n  const digest = await crypto.subtle.digest('SHA-256', data);\n  return base64UrlEncode(new Uint8Array(digest));\n}\n\nfunction generateState(): string {\n  const array = new Uint8Array(16);\n  crypto.getRandomValues(array);\n  return base64UrlEncode(array);\n}\n\nclass ExternalWalletError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'ExternalWalletError';\n  }\n}\n\nexport class OpenKey {\n  private host: string;\n  private appName: string;\n  private mode: OpenKeyMode;\n  private config: OpenKeyConfig;\n  private popup: Window | null = null;\n  private lastAuth: AuthResult | null = null;\n  private discoveredProviders: EIP6963ProviderDetail[] = [];\n  private sessionToken: string | null = null;\n\n  constructor(config: OpenKeyConfig = {}) {\n    this.config = config;\n    this.host = config.host || DEFAULT_HOST;\n    this.appName = config.appName || window.location.hostname;\n    this.mode = config.mode ?? 'iframe';\n\n    // Listen for EIP-6963 wallet announcements\n    if (typeof window !== 'undefined') {\n      this.discoveredProviders = [];\n      window.addEventListener('eip6963:announceProvider', (event: any) => {\n        this.discoveredProviders.push(event.detail);\n      });\n      window.dispatchEvent(new Event('eip6963:requestProvider'));\n    }\n  }\n\n  /**\n   * Connect to OpenKey and get user's wallet address\n   * Opens auth flow for user to select/create a key\n   */\n  async connect(opts?: { mode?: OpenKeyMode }): Promise<AuthResult> {\n    const result = await this.openFlow<AuthResult>('connect', {\n      type: 'openkey:auth:request',\n      appName: this.appName,\n    }, opts?.mode);\n    this.lastAuth = result;\n    return result;\n  }\n\n  /**\n   * Link an external wallet to the user's OpenKey account\n   * Opens link-wallet widget flow\n   */\n  async linkWallet(opts?: { mode?: OpenKeyMode }): Promise<{ address: string; keyId: string }> {\n    return this.openFlow<{ address: string; keyId: string }>('link-wallet', {\n      type: 'openkey:link-wallet:request',\n    }, opts?.mode);\n  }\n\n  /**\n   * Sign a message with the user's OpenKey wallet\n   * For external keys, routes directly to the user's wallet provider\n   */\n  async signMessage(request: SignMessageRequest, opts?: { mode?: OpenKeyMode }): Promise<SignResult> {\n    if (this.lastAuth?.keyType === 'EXTERNAL') {\n      return this.signWithExternalWallet(request);\n    }\n    return this.signWithOpenKey(request, opts?.mode);\n  }\n\n  /**\n   * Sign typed data (EIP-712) with the user's OpenKey wallet\n   * For external keys, routes directly to the user's wallet provider\n   */\n  async signTypedData(request: SignTypedDataRequest, opts?: { mode?: OpenKeyMode }): Promise<SignResult> {\n    if (this.lastAuth?.keyType === 'EXTERNAL') {\n      return this.signTypedDataWithExternalWallet(request);\n    }\n    return this.signTypedDataWithOpenKey(request, opts?.mode);\n  }\n\n  /**\n   * Find a wallet provider that controls the given address.\n   * Checks: 1) app-provided externalProvider, 2) EIP-6963 discovered wallets, 3) window.ethereum\n   */\n  async findWalletProvider(targetAddress: string): Promise<EIP1193Provider> {\n    // 1. Try app-provided externalProvider first\n    if (this.config.externalProvider) {\n      return this.config.externalProvider;\n    }\n\n    // 2. Check EIP-6963 discovered wallets silently (no popup)\n    for (const { provider } of this.discoveredProviders) {\n      try {\n        const accounts = await provider.request({ method: 'eth_accounts' }) as string[];\n        if (accounts.some(a => a.toLowerCase() === targetAddress.toLowerCase())) {\n          return provider;\n        }\n      } catch {}\n    }\n\n    // 3. Fall back to window.ethereum silently\n    if (typeof window !== 'undefined' && (window as any).ethereum) {\n      const provider = (window as any).ethereum as EIP1193Provider;\n      try {\n        const accounts = await provider.request({ method: 'eth_accounts' }) as string[];\n        if (accounts.some(a => a.toLowerCase() === targetAddress.toLowerCase())) {\n          return provider;\n        }\n      } catch {}\n    }\n\n    throw new ExternalWalletError('External wallet not found. Connect the wallet that owns this key and try again.');\n  }\n\n  private async signWithExternalWallet(request: SignMessageRequest): Promise<SignResult> {\n    let provider: EIP1193Provider;\n    try {\n      provider = await this.findWalletProvider(this.lastAuth!.address);\n    } catch (e) {\n      showToast((e as Error).message, 'error');\n      throw e;\n    }\n    try {\n      const hexMessage = this.toHex(request.message);\n      const signature = await provider.request({\n        method: 'personal_sign',\n        params: [hexMessage, this.lastAuth!.address],\n      });\n      return { signature: signature as string, address: this.lastAuth!.address };\n    } catch (e: any) {\n      const msg = e?.message?.includes('not been authorized')\n        ? 'Wallet rejected the request. Approve the connection in your wallet and try again.'\n        : e?.message || 'Signing failed';\n      showToast(msg, 'error');\n      throw new Error(msg);\n    }\n  }\n\n  private async signTypedDataWithExternalWallet(request: SignTypedDataRequest): Promise<SignResult> {\n    let provider: EIP1193Provider;\n    try {\n      provider = await this.findWalletProvider(this.lastAuth!.address);\n    } catch (e) {\n      showToast((e as Error).message, 'error');\n      throw e;\n    }\n    try {\n      const signature = await provider.request({\n        method: 'eth_signTypedData_v4',\n        params: [this.lastAuth!.address, JSON.stringify(request)],\n      });\n      return { signature: signature as string, address: this.lastAuth!.address };\n    } catch (e: any) {\n      const msg = e?.message?.includes('not been authorized')\n        ? 'Wallet rejected the request. Approve the connection in your wallet and try again.'\n        : e?.message || 'Signing failed';\n      showToast(msg, 'error');\n      throw new Error(msg);\n    }\n  }\n\n  private signWithOpenKey(request: SignMessageRequest, mode?: OpenKeyMode): Promise<SignResult> {\n    return this.openFlow<SignResult>('sign', {\n      type: 'openkey:sign:request',\n      message: request.message,\n      keyId: request.keyId,\n      sessionToken: this.sessionToken || undefined,\n    }, mode);\n  }\n\n  private signTypedDataWithOpenKey(request: SignTypedDataRequest, mode?: OpenKeyMode): Promise<SignResult> {\n    return this.openFlow<SignResult>('sign-typed-data', {\n      type: 'openkey:signTypedData:request',\n      data: request,\n      sessionToken: this.sessionToken || undefined,\n    }, mode);\n  }\n\n  private toHex(str: string): string {\n    return '0x' + Array.from(new TextEncoder().encode(str)).map(b => b.toString(16).padStart(2, '0')).join('');\n  }\n\n  /**\n   * Check if user is already authenticated\n   */\n  async isConnected(): Promise<boolean> {\n    // Check for existing session via API\n    try {\n      const res = await fetch(`${this.host}/api/auth/session`, {\n        credentials: 'include',\n      });\n      if (!res.ok) return false;\n      const data = await res.json();\n      return !!data.user;\n    } catch {\n      return false;\n    }\n  }\n\n  // ======= OAuth 2.1 Provider Methods =======\n\n  /**\n   * OAuth 2.1 methods for third-party app authentication\n   * Use this when your app has registered OAuth client credentials with OpenKey\n   */\n  oauth = {\n    /**\n     * Start OAuth authorization flow\n     * Opens popup/redirect to OpenKey authorization endpoint\n     * @returns Promise that resolves with authorization code after user consent\n     */\n    connect: async (config: OAuthConfig): Promise<OAuthResult> => {\n      // Generate PKCE values\n      const verifier = await generateCodeVerifier();\n      const challenge = await generateCodeChallenge(verifier);\n      const state = config.state || generateState();\n\n      // Store for later token exchange\n      sessionStorage.setItem(\n        OAUTH_STORAGE_KEY,\n        JSON.stringify({ verifier, state })\n      );\n\n      // Build authorization URL\n      const authUrl = new URL(`${this.host}/api/auth/oauth2/authorize`);\n      authUrl.searchParams.set('client_id', config.clientId);\n      authUrl.searchParams.set('redirect_uri', config.redirectUri);\n      authUrl.searchParams.set('response_type', 'code');\n      authUrl.searchParams.set('scope', 'openid');\n      authUrl.searchParams.set('state', state);\n      authUrl.searchParams.set('code_challenge', challenge);\n      authUrl.searchParams.set('code_challenge_method', 'S256');\n\n      return this.openOAuthFlow(authUrl.toString(), state, config.redirectUri);\n    },\n\n    /**\n     * Exchange authorization code for tokens\n     * Call this after receiving the callback with authorization code\n     * @param code - Authorization code from callback URL\n     * @param config - Same config used for connect()\n     * @returns Promise that resolves with access_token, id_token, etc.\n     */\n    exchangeCode: async (\n      code: string,\n      config: OAuthConfig\n    ): Promise<OAuthTokenResponse> => {\n      const stored = sessionStorage.getItem(OAUTH_STORAGE_KEY);\n      if (!stored) {\n        throw new Error('No PKCE verifier found. Start a new OAuth flow.');\n      }\n\n      const { verifier } = JSON.parse(stored);\n\n      const response = await fetch(`${this.host}/api/auth/oauth2/token`, {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/x-www-form-urlencoded',\n        },\n        body: new URLSearchParams({\n          grant_type: 'authorization_code',\n          code,\n          redirect_uri: config.redirectUri,\n          client_id: config.clientId,\n          code_verifier: verifier,\n        }),\n      });\n\n      // Clear stored verifier\n      sessionStorage.removeItem(OAUTH_STORAGE_KEY);\n\n      if (!response.ok) {\n        const error = await response.json();\n        throw new Error(error.error_description || 'Token exchange failed');\n      }\n\n      return response.json();\n    },\n\n    /**\n     * Verify state parameter from callback\n     * Call this before exchangeCode to prevent CSRF attacks\n     * @param receivedState - State parameter from callback URL\n     * @returns true if state matches, false otherwise\n     */\n    verifyState: (receivedState: string): boolean => {\n      const stored = sessionStorage.getItem(OAUTH_STORAGE_KEY);\n      if (!stored) return false;\n      const { state } = JSON.parse(stored);\n      return state === receivedState;\n    },\n\n    /**\n     * Parse authorization response from callback URL\n     * @param url - Callback URL (defaults to current window.location.href)\n     * @returns Parsed code and state, or error\n     */\n    parseCallback: (\n      url?: string\n    ): { code: string; state: string } | { error: string; errorDescription?: string } => {\n      const urlObj = new URL(url || window.location.href);\n      const error = urlObj.searchParams.get('error');\n\n      if (error) {\n        return {\n          error,\n          errorDescription: urlObj.searchParams.get('error_description') || undefined,\n        };\n      }\n\n      const code = urlObj.searchParams.get('code');\n      const state = urlObj.searchParams.get('state');\n\n      if (!code || !state) {\n        return { error: 'missing_params', errorDescription: 'Missing code or state parameter' };\n      }\n\n      return { code, state };\n    },\n  };\n\n  private openOAuthFlow(\n    url: string,\n    state: string,\n    redirectUri: string\n  ): Promise<OAuthResult> {\n    return new Promise((resolve, reject) => {\n      if (this.mode !== 'redirect') {\n        this.openOAuthPopup(url, state, redirectUri, resolve, reject);\n      } else {\n        // Full page redirect - won't resolve, page navigates away\n        window.location.href = url;\n      }\n    });\n  }\n\n  private openOAuthPopup(\n    url: string,\n    state: string,\n    redirectUri: string,\n    resolve: (value: OAuthResult) => void,\n    reject: (error: OpenKeyError) => void\n  ) {\n    const left = window.screenX + (window.outerWidth - POPUP_WIDTH) / 2;\n    const top = window.screenY + (window.outerHeight - POPUP_HEIGHT) / 2;\n\n    this.popup = window.open(\n      url,\n      'openkey-oauth',\n      `width=${POPUP_WIDTH},height=${POPUP_HEIGHT},left=${left},top=${top},popup=true`\n    );\n\n    if (!this.popup) {\n      reject({\n        code: 'POPUP_BLOCKED',\n        message: 'Popup was blocked. Please allow popups or use redirect mode.',\n      });\n      return;\n    }\n\n    const redirectHost = new URL(redirectUri).origin;\n\n    // Poll for redirect back with code\n    const pollInterval = setInterval(() => {\n      try {\n        if (this.popup?.closed) {\n          clearInterval(pollInterval);\n          clearTimeout(timeout);\n          reject({\n            code: 'USER_CANCELLED',\n            message: 'User closed the popup',\n          });\n          return;\n        }\n\n        // Check if redirected to callback URL\n        const popupUrl = this.popup?.location?.href;\n        if (popupUrl && popupUrl.startsWith(redirectHost)) {\n          clearInterval(pollInterval);\n          clearTimeout(timeout);\n\n          const urlObj = new URL(popupUrl);\n          const code = urlObj.searchParams.get('code');\n          const returnedState = urlObj.searchParams.get('state');\n          const error = urlObj.searchParams.get('error');\n\n          this.popup?.close();\n\n          if (error) {\n            reject({\n              code: 'UNAUTHORIZED',\n              message: urlObj.searchParams.get('error_description') || error,\n            });\n            return;\n          }\n\n          if (returnedState !== state) {\n            reject({\n              code: 'STATE_MISMATCH',\n              message: 'State mismatch - possible CSRF attack',\n            });\n            return;\n          }\n\n          if (code) {\n            resolve({ code, state: returnedState });\n          } else {\n            reject({\n              code: 'UNAUTHORIZED',\n              message: 'Authorization failed - no code returned',\n            });\n          }\n        }\n      } catch {\n        // Cross-origin - popup still on OpenKey domain, continue polling\n      }\n    }, 100);\n\n    // Timeout\n    const timeout = setTimeout(() => {\n      clearInterval(pollInterval);\n      this.popup?.close();\n      reject({\n        code: 'TIMEOUT',\n        message: 'OAuth flow timed out',\n      });\n    }, DEFAULT_TIMEOUT);\n  }\n\n  private resolveMode(override?: OpenKeyMode): OpenKeyMode {\n    return override ?? this.mode;\n  }\n\n  private async openFlow<T>(action: string, message: object, modeOverride?: OpenKeyMode): Promise<T> {\n    const mode = this.resolveMode(modeOverride);\n    const origin = encodeURIComponent(window.location.origin);\n\n    if (mode === 'popup') {\n      const url = `${this.host}/widget/${action}?origin=${origin}`;\n      return new Promise((resolve, reject) => this.openPopup(url, message, resolve, reject));\n    }\n\n    if (mode === 'redirect') {\n      const url = `${this.host}/widget/${action}?origin=${origin}`;\n      window.location.href = url;\n      return new Promise(() => {}); // never resolves, page navigates\n    }\n\n    // iframe mode with auto-fallback\n    const url = `${this.host}/widget/embed/${action}?origin=${origin}`;\n    return this.openIframeModal<T>(url, action, message, origin);\n  }\n\n  private openIframeModal<T>(url: string, action: string, message: object, origin: string): Promise<T> {\n    return new Promise((resolve, reject) => {\n      let readyReceived = false;\n      let settled = false;\n      let modal: IframeModal | null = null;\n\n      const settle = (fn: () => void) => {\n        if (settled) return;\n        settled = true;\n        fn();\n      };\n\n      const cleanup = () => {\n        clearTimeout(readyTimeout);\n        clearTimeout(overallTimeout);\n        modal?.destroy();\n        modal = null;\n      };\n\n      modal = new IframeModal({\n        url,\n        host: this.host,\n        onClose: () => {\n          settle(() => {\n            clearTimeout(readyTimeout);\n            clearTimeout(overallTimeout);\n            modal = null;\n            reject({ code: 'USER_CANCELLED', message: 'User cancelled the request' } as OpenKeyError);\n          });\n        },\n        onMessage: (data: MessageType) => {\n          if (data.type === 'openkey:ready') {\n            readyReceived = true;\n            modal?.postMessage(message);\n            return;\n          }\n\n          if (data.type === 'openkey:close') {\n            settle(() => {\n              cleanup();\n              reject({ code: 'USER_CANCELLED', message: 'User cancelled the request' } as OpenKeyError);\n            });\n            return;\n          }\n\n          if (data.type === 'openkey:link-wallet:delegate') {\n            this.handleWalletLinkDelegation(modal!);\n            return;\n          }\n\n          if (\n            data.type === 'openkey:auth:response' ||\n            data.type === 'openkey:sign:response' ||\n            data.type === 'openkey:signTypedData:response' ||\n            data.type === 'openkey:link-wallet:response'\n          ) {\n            settle(() => {\n              cleanup();\n              if (data.success) {\n                if (data.type === 'openkey:auth:response') {\n                  if (data.sessionToken) this.sessionToken = data.sessionToken;\n                  resolve({ address: data.address, keyId: data.keyId, keyType: data.keyType || 'MANAGED' } as T);\n                } else if (data.type === 'openkey:link-wallet:response') {\n                  resolve({ address: data.address, keyId: data.keyId } as T);\n                } else {\n                  resolve({ signature: data.signature, address: data.address } as T);\n                }\n              } else {\n                reject(data.error);\n              }\n            });\n          }\n        },\n      });\n\n      // Auto-fallback: if no openkey:ready within 3s, fall back to popup\n      const readyTimeout = setTimeout(() => {\n        if (readyReceived || settled) return;\n        cleanup();\n        console.warn('OpenKey: iframe blocked by CSP, falling back to popup. Add frame-src https://openkey.so to your CSP.');\n        showToast();\n        const popupUrl = `${this.host}/widget/${action}?origin=${origin}`;\n        this.openPopup(popupUrl, message, (val: any) => settle(() => resolve(val)), (err: any) => settle(() => reject(err)));\n      }, IFRAME_READY_TIMEOUT);\n\n      // Overall 5-minute timeout\n      const overallTimeout = setTimeout(() => {\n        settle(() => {\n          cleanup();\n          reject({ code: 'TIMEOUT', message: 'Request timed out' } as OpenKeyError);\n        });\n      }, DEFAULT_TIMEOUT);\n    });\n  }\n\n  private handleWalletLinkDelegation(modal: IframeModal) {\n    const sendResult = (result: MessageType) => modal.postMessage(result);\n\n    new WalletPicker({\n      providers: this.discoveredProviders,\n      onCancel: () => {\n        sendResult({ type: 'openkey:link-wallet:result', success: false, error: { code: 'USER_CANCELLED', message: 'Wallet linking cancelled' } });\n      },\n      onSelect: async (provider) => {\n        try {\n          const accounts = await provider.request({ method: 'eth_requestAccounts' }) as string[];\n          const address = accounts[0];\n          if (!address) throw new Error('No account returned');\n\n          // Get challenge from API\n          const challengeRes = await fetch(`${this.host}/api/keys/link/challenge`, {\n            method: 'POST',\n            credentials: 'include',\n          });\n          if (!challengeRes.ok) throw new Error('Failed to get challenge');\n          const { message } = await challengeRes.json();\n\n          // Sign challenge with wallet\n          const hexMessage = this.toHex(message);\n          const signature = await provider.request({\n            method: 'personal_sign',\n            params: [hexMessage, address],\n          }) as string;\n\n          // Submit to API\n          const linkRes = await fetch(`${this.host}/api/keys/link`, {\n            method: 'POST',\n            headers: { 'Content-Type': 'application/json' },\n            credentials: 'include',\n            body: JSON.stringify({ address, signature, message }),\n          });\n          if (!linkRes.ok) {\n            const err = await linkRes.json();\n            throw new Error(err.error || 'Failed to link wallet');\n          }\n          const { key } = await linkRes.json();\n\n          sendResult({ type: 'openkey:link-wallet:result', success: true, address: key.address, keyId: key.id });\n        } catch (e: any) {\n          sendResult({ type: 'openkey:link-wallet:result', success: false, error: { code: 'UNKNOWN', message: e.message || 'Wallet linking failed' } });\n        }\n      },\n    });\n  }\n\n  private openPopup<T>(\n    url: string,\n    message: object,\n    resolve: (value: T) => void,\n    reject: (error: OpenKeyError) => void\n  ) {\n    // Calculate popup position\n    const left = window.screenX + (window.outerWidth - POPUP_WIDTH) / 2;\n    const top = window.screenY + (window.outerHeight - POPUP_HEIGHT) / 2;\n\n    this.popup = window.open(\n      url,\n      'openkey',\n      `width=${POPUP_WIDTH},height=${POPUP_HEIGHT},left=${left},top=${top},popup=true`\n    );\n\n    if (!this.popup) {\n      reject({\n        code: 'POPUP_BLOCKED',\n        message: 'Popup was blocked. Please allow popups for this site.',\n      });\n      return;\n    }\n\n    const cleanup = () => {\n      window.removeEventListener('message', handleMessage);\n      clearInterval(pollClosed);\n      clearTimeout(timeout);\n    };\n\n    // Poll to detect popup close\n    const pollClosed = setInterval(() => {\n      if (this.popup?.closed) {\n        cleanup();\n        reject({\n          code: 'USER_CANCELLED',\n          message: 'User closed the popup',\n        });\n      }\n    }, 500);\n\n    // Timeout\n    const timeout = setTimeout(() => {\n      cleanup();\n      this.popup?.close();\n      reject({\n        code: 'TIMEOUT',\n        message: 'Request timed out',\n      });\n    }, DEFAULT_TIMEOUT);\n\n    // Listen for messages\n    const handleMessage = (event: MessageEvent) => {\n      if (event.origin !== this.host) return;\n\n      const data = event.data as MessageType;\n\n      if (data.type === 'openkey:ready') {\n        // Widget is ready, send our request\n        this.popup?.postMessage(message, this.host);\n        return;\n      }\n\n      if (data.type === 'openkey:close') {\n        cleanup();\n        this.popup?.close();\n        reject({\n          code: 'USER_CANCELLED',\n          message: 'User cancelled the request',\n        });\n        return;\n      }\n\n      // Handle responses\n      if (\n        data.type === 'openkey:auth:response' ||\n        data.type === 'openkey:sign:response' ||\n        data.type === 'openkey:signTypedData:response' ||\n        data.type === 'openkey:link-wallet:response'\n      ) {\n        cleanup();\n        this.popup?.close();\n\n        if (data.success) {\n          if (data.type === 'openkey:auth:response') {\n            if (data.sessionToken) this.sessionToken = data.sessionToken;\n            resolve({ address: data.address, keyId: data.keyId, keyType: data.keyType || 'MANAGED' } as T);\n          } else if (data.type === 'openkey:link-wallet:response') {\n            resolve({ address: data.address, keyId: data.keyId } as T);\n          } else {\n            resolve({ signature: data.signature, address: data.address } as T);\n          }\n        } else {\n          reject(data.error);\n        }\n      }\n    };\n\n    window.addEventListener('message', handleMessage);\n  }\n\n  /**\n   * Disconnect and close any open flows\n   */\n  disconnect() {\n    this.popup?.close();\n    this.popup = null;\n  }\n}\n\n/**\n * Unified EIP-1193 provider that wraps an OpenKey instance.\n * Transparently routes signing to either OpenKey (managed keys) or the user's\n * wallet (external keys).\n */\nexport class OpenKeyEIP1193Provider implements EIP1193Provider {\n  private openkey: OpenKey;\n  private address: string;\n  private keyId: string;\n  private keyType: 'MANAGED' | 'EXTERNAL';\n\n  constructor(openkey: OpenKey, authResult: AuthResult) {\n    this.openkey = openkey;\n    this.address = authResult.address;\n    this.keyId = authResult.keyId;\n    this.keyType = authResult.keyType;\n  }\n\n  async request({ method, params }: { method: string; params?: any[] }): Promise<any> {\n    switch (method) {\n      case 'eth_accounts':\n      case 'eth_requestAccounts':\n        return [this.address];\n\n      case 'eth_chainId':\n        return '0x1'; // mainnet\n\n      case 'personal_sign': {\n        if (this.keyType === 'EXTERNAL') {\n          try {\n            const provider = await this.openkey.findWalletProvider(this.address);\n            return await provider.request({ method, params });\n          } catch (e: any) {\n            showToast(e?.message || 'External wallet signing failed', 'error');\n            throw e;\n          }\n        }\n        // Managed key: route through OpenKey\n        const message = this.hexToString(params![0] as string);\n        const result = await this.openkey.signMessage({ message, keyId: this.keyId });\n        return result.signature;\n      }\n\n      case 'eth_signTypedData_v4': {\n        if (this.keyType === 'EXTERNAL') {\n          try {\n            const provider = await this.openkey.findWalletProvider(this.address);\n            return await provider.request({ method, params });\n          } catch (e: any) {\n            showToast(e?.message || 'External wallet signing failed', 'error');\n            throw e;\n          }\n        }\n        const data = JSON.parse(params![1] as string);\n        const result = await this.openkey.signTypedData(data);\n        return result.signature;\n      }\n\n      default:\n        throw new Error(`Unsupported method: ${method}`);\n    }\n  }\n\n  private hexToString(hex: string): string {\n    const bytes = new Uint8Array(\n      (hex.startsWith('0x') ? hex.slice(2) : hex).match(/.{1,2}/g)!.map(b => parseInt(b, 16))\n    );\n    return new TextDecoder().decode(bytes);\n  }\n}\n\n// Default export for convenience\nexport default OpenKey;\n\n// Create singleton instance\nlet defaultInstance: OpenKey | null = null;\n\nexport function getOpenKey(config?: OpenKeyConfig): OpenKey {\n  if (!defaultInstance || config) {\n    defaultInstance = new OpenKey(config);\n  }\n  return defaultInstance;\n}\n"],"mappings":"AAoHA,IAAMA,EAAe,qBAKrB,IAAMC,EAAoB,gBAEpBC,EAAN,KAAkB,CACR,KACA,OACA,OACA,QACA,UACA,eACA,KAER,YAAYC,EAAkG,CAC5G,KAAK,KAAOA,EAAK,KACjB,KAAK,QAAUA,EAAK,QACpB,KAAK,UAAYA,EAAK,UAEtB,IAAMC,EAAW,OAAO,WAAW,oBAAoB,EAAE,QAEzD,KAAK,KAAO,SAAS,cAAc,KAAK,EACxC,KAAK,OAAS,KAAK,KAAK,aAAa,CAAE,KAAM,QAAS,CAAC,EAEvD,IAAMC,EAAQ,SAAS,cAAc,OAAO,EAC5CA,EAAM,YAAc;AAAA;AAAA,yIAEiHD,EAAW,WAAa,QAAQ;AAAA,4DAC7GA,EAAW,OAAS,OAAO,kBAAkBA,EAAW,gBAAkB,MAAM,4FAA4FA,EAAW,6BAA+B,4BAA4B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,gDAM9PA,EAAW,8BAAgC,4BAA4B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MASnH,IAAME,EAAW,SAAS,cAAc,KAAK,EAC7CA,EAAS,UAAY,cACrBA,EAAS,iBAAiB,QAAUC,GAAM,CACpCA,EAAE,SAAWD,GAAU,KAAK,MAAM,CACxC,CAAC,EAED,IAAME,EAAO,SAAS,cAAc,KAAK,EAGzC,GAFAA,EAAK,UAAY,UAEbJ,EAAU,CACZ,IAAMK,EAAS,SAAS,cAAc,KAAK,EAC3CA,EAAO,UAAY,YACnBD,EAAK,YAAYC,CAAM,CACzB,CAEA,IAAMC,EAAW,SAAS,cAAc,QAAQ,EAChDA,EAAS,UAAY,WACrBA,EAAS,YAAc,OACvBA,EAAS,iBAAiB,QAAS,IAAM,KAAK,MAAM,CAAC,EACrDF,EAAK,YAAYE,CAAQ,EAEzB,KAAK,OAAS,SAAS,cAAc,QAAQ,EAC7C,KAAK,OAAO,IAAMP,EAAK,IACvB,KAAK,OAAO,aAAa,QAAS,6DAA6D,EAC/F,KAAK,OAAO,aAAa,UAAW,0DAA0D,EAC9FK,EAAK,YAAY,KAAK,MAAM,EAE5BF,EAAS,YAAYE,CAAI,EACzB,KAAK,OAAO,YAAYH,CAAK,EAC7B,KAAK,OAAO,YAAYC,CAAQ,EAEhC,KAAK,eAAkBK,GAAwB,CAC7C,GAAIA,EAAM,SAAW,KAAK,KAAM,OAChC,IAAMC,EAAOD,EAAM,KACnB,GAAIC,EAAK,OAAS,iBAAkB,CAClC,IAAMC,EAAI,KAAK,IAAID,EAAK,OAAQ,KAAK,MAAM,OAAO,YAAc,GAAI,CAAC,EACrE,KAAK,OAAO,MAAM,OAAS,GAAGC,CAAC,KAC/B,MACF,CACA,KAAK,UAAUD,CAAI,CACrB,EACA,OAAO,iBAAiB,UAAW,KAAK,cAAc,EACtD,SAAS,KAAK,YAAY,KAAK,IAAI,CACrC,CAEA,YAAYE,EAAiB,CAC3B,KAAK,OAAO,eAAe,YAAYA,EAAS,KAAK,IAAI,CAC3D,CAEA,SAAU,CACR,OAAO,oBAAoB,UAAW,KAAK,cAAc,EACzD,KAAK,KAAK,OAAO,CACnB,CAEQ,OAAQ,CACd,IAAMR,EAAW,KAAK,OAAO,cAAc,cAAc,EACrDA,GACFA,EAAS,UAAU,IAAI,SAAS,EAChC,WAAW,IAAM,CACf,KAAK,QAAQ,EACb,KAAK,QAAQ,CACf,EAAG,GAAG,IAEN,KAAK,QAAQ,EACb,KAAK,QAAQ,EAEjB,CACF,EAEMS,EAAN,KAAmB,CACT,KACA,OAER,YAAYZ,EAAmH,CAC7H,KAAK,KAAO,SAAS,cAAc,KAAK,EACxC,KAAK,OAAS,KAAK,KAAK,aAAa,CAAE,KAAM,QAAS,CAAC,EAEvD,IAAME,EAAQ,SAAS,cAAc,OAAO,EAC5CA,EAAM,YAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAyBpB,IAAMC,EAAW,SAAS,cAAc,KAAK,EAC7CA,EAAS,UAAY,cACrBA,EAAS,iBAAiB,QAAUC,GAAM,CAAMA,EAAE,SAAWD,IAAY,KAAK,QAAQ,EAAGH,EAAK,SAAS,EAAK,CAAC,EAE7G,IAAMK,EAAO,SAAS,cAAc,KAAK,EACzCA,EAAK,UAAY,UAEjB,IAAMQ,EAAQ,SAAS,cAAc,IAAI,EAKzC,GAJAA,EAAM,UAAY,WAClBA,EAAM,YAAc,kBACpBR,EAAK,YAAYQ,CAAK,EAElBb,EAAK,UAAU,SAAW,EAAG,CAC/B,IAAMc,EAAQ,SAAS,cAAc,KAAK,EAC1CA,EAAM,UAAY,WAClBA,EAAM,YAAc,sBACpBT,EAAK,YAAYS,CAAK,CACxB,KAAO,CACL,IAAMC,EAAO,SAAS,cAAc,IAAI,EACxCA,EAAK,UAAY,UACjB,OAAW,CAAE,KAAAC,EAAM,SAAAC,CAAS,IAAKjB,EAAK,UAAW,CAC/C,IAAMkB,EAAO,SAAS,cAAc,QAAQ,EAE5C,GADAA,EAAK,UAAY,UACbF,EAAK,KAAM,CACb,IAAMG,EAAO,SAAS,cAAc,KAAK,EACzCA,EAAK,UAAY,UACjBA,EAAK,IAAMH,EAAK,KAChBG,EAAK,IAAMH,EAAK,KAChBE,EAAK,YAAYC,CAAI,CACvB,CACA,IAAMC,EAAO,SAAS,cAAc,MAAM,EAC1CA,EAAK,YAAcJ,EAAK,KACxBE,EAAK,YAAYE,CAAI,EACrBF,EAAK,iBAAiB,QAAS,IAAM,CAAE,KAAK,QAAQ,EAAGlB,EAAK,SAASiB,CAAQ,CAAG,CAAC,EACjFF,EAAK,YAAYG,CAAI,CACvB,CACAb,EAAK,YAAYU,CAAI,CACvB,CAEA,IAAMM,EAAS,SAAS,cAAc,QAAQ,EAC9CA,EAAO,UAAY,YACnBA,EAAO,YAAc,SACrBA,EAAO,iBAAiB,QAAS,IAAM,CAAE,KAAK,QAAQ,EAAGrB,EAAK,SAAS,CAAG,CAAC,EAC3EK,EAAK,YAAYgB,CAAM,EAEvBlB,EAAS,YAAYE,CAAI,EACzB,KAAK,OAAO,YAAYH,CAAK,EAC7B,KAAK,OAAO,YAAYC,CAAQ,EAChC,SAAS,KAAK,YAAY,KAAK,IAAI,CACrC,CAEA,SAAU,CACR,KAAK,KAAK,OAAO,CACnB,CACF,EAEA,SAASmB,EAAUX,EAAU,8BAA+BY,EAA4B,OAAQ,CAC9F,IAAMC,EAAKD,IAAY,QAAU,UAAY,UACvCE,EAAO,SAAS,cAAc,KAAK,EACnCC,EAASD,EAAK,aAAa,CAAE,KAAM,QAAS,CAAC,EACnDC,EAAO,UAAY,oGAAoGF,CAAE,kTAAkTb,CAAO,SAClb,SAAS,KAAK,YAAYc,CAAI,EAC9B,WAAW,IAAMA,EAAK,OAAO,EAAG,GAAI,CACtC,CAIA,SAASE,EAAgBC,EAA4B,CAEnD,OADe,KAAK,OAAO,aAAa,GAAGA,CAAM,CAAC,EACpC,QAAQ,MAAO,GAAG,EAAE,QAAQ,MAAO,GAAG,EAAE,QAAQ,KAAM,EAAE,CACxE,CAEA,eAAeC,GAAwC,CACrD,IAAMC,EAAQ,IAAI,WAAW,EAAE,EAC/B,cAAO,gBAAgBA,CAAK,EACrBH,EAAgBG,CAAK,CAC9B,CAEA,eAAeC,EAAsBC,EAAmC,CAEtE,IAAMvB,EADU,IAAI,YAAY,EACX,OAAOuB,CAAQ,EAC9BC,EAAS,MAAM,OAAO,OAAO,OAAO,UAAWxB,CAAI,EACzD,OAAOkB,EAAgB,IAAI,WAAWM,CAAM,CAAC,CAC/C,CAEA,SAASC,GAAwB,CAC/B,IAAMJ,EAAQ,IAAI,WAAW,EAAE,EAC/B,cAAO,gBAAgBA,CAAK,EACrBH,EAAgBG,CAAK,CAC9B,CAEA,IAAMK,EAAN,cAAkC,KAAM,CACtC,YAAYxB,EAAiB,CAC3B,MAAMA,CAAO,EACb,KAAK,KAAO,qBACd,CACF,EAEayB,EAAN,KAAc,CACX,KACA,QACA,KACA,OACA,MAAuB,KACvB,SAA8B,KAC9B,oBAA+C,CAAC,EAChD,aAA8B,KAEtC,YAAYC,EAAwB,CAAC,EAAG,CACtC,KAAK,OAASA,EACd,KAAK,KAAOA,EAAO,MAAQC,EAC3B,KAAK,QAAUD,EAAO,SAAW,OAAO,SAAS,SACjD,KAAK,KAAOA,EAAO,MAAQ,SAGvB,OAAO,OAAW,MACpB,KAAK,oBAAsB,CAAC,EAC5B,OAAO,iBAAiB,2BAA6B7B,GAAe,CAClE,KAAK,oBAAoB,KAAKA,EAAM,MAAM,CAC5C,CAAC,EACD,OAAO,cAAc,IAAI,MAAM,yBAAyB,CAAC,EAE7D,CAMA,MAAM,QAAQR,EAAoD,CAChE,IAAMuC,EAAS,MAAM,KAAK,SAAqB,UAAW,CACxD,KAAM,uBACN,QAAS,KAAK,OAChB,EAAGvC,GAAM,IAAI,EACb,YAAK,SAAWuC,EACTA,CACT,CAMA,MAAM,WAAWvC,EAA4E,CAC3F,OAAO,KAAK,SAA6C,cAAe,CACtE,KAAM,6BACR,EAAGA,GAAM,IAAI,CACf,CAMA,MAAM,YAAYwC,EAA6BxC,EAAoD,CACjG,OAAI,KAAK,UAAU,UAAY,WACtB,KAAK,uBAAuBwC,CAAO,EAErC,KAAK,gBAAgBA,EAASxC,GAAM,IAAI,CACjD,CAMA,MAAM,cAAcwC,EAA+BxC,EAAoD,CACrG,OAAI,KAAK,UAAU,UAAY,WACtB,KAAK,gCAAgCwC,CAAO,EAE9C,KAAK,yBAAyBA,EAASxC,GAAM,IAAI,CAC1D,CAMA,MAAM,mBAAmByC,EAAiD,CAExE,GAAI,KAAK,OAAO,iBACd,OAAO,KAAK,OAAO,iBAIrB,OAAW,CAAE,SAAAxB,CAAS,IAAK,KAAK,oBAC9B,GAAI,CAEF,IADiB,MAAMA,EAAS,QAAQ,CAAE,OAAQ,cAAe,CAAC,GACrD,KAAKyB,GAAKA,EAAE,YAAY,IAAMD,EAAc,YAAY,CAAC,EACpE,OAAOxB,CAEX,MAAQ,CAAC,CAIX,GAAI,OAAO,OAAW,KAAgB,OAAe,SAAU,CAC7D,IAAMA,EAAY,OAAe,SACjC,GAAI,CAEF,IADiB,MAAMA,EAAS,QAAQ,CAAE,OAAQ,cAAe,CAAC,GACrD,KAAKyB,GAAKA,EAAE,YAAY,IAAMD,EAAc,YAAY,CAAC,EACpE,OAAOxB,CAEX,MAAQ,CAAC,CACX,CAEA,MAAM,IAAIkB,EAAoB,iFAAiF,CACjH,CAEA,MAAc,uBAAuBK,EAAkD,CACrF,IAAIvB,EACJ,GAAI,CACFA,EAAW,MAAM,KAAK,mBAAmB,KAAK,SAAU,OAAO,CACjE,OAASb,EAAG,CACV,MAAAkB,EAAWlB,EAAY,QAAS,OAAO,EACjCA,CACR,CACA,GAAI,CACF,IAAMuC,EAAa,KAAK,MAAMH,EAAQ,OAAO,EAK7C,MAAO,CAAE,UAJS,MAAMvB,EAAS,QAAQ,CACvC,OAAQ,gBACR,OAAQ,CAAC0B,EAAY,KAAK,SAAU,OAAO,CAC7C,CAAC,EACwC,QAAS,KAAK,SAAU,OAAQ,CAC3E,OAASvC,EAAQ,CACf,IAAMwC,EAAMxC,GAAG,SAAS,SAAS,qBAAqB,EAClD,oFACAA,GAAG,SAAW,iBAClB,MAAAkB,EAAUsB,EAAK,OAAO,EAChB,IAAI,MAAMA,CAAG,CACrB,CACF,CAEA,MAAc,gCAAgCJ,EAAoD,CAChG,IAAIvB,EACJ,GAAI,CACFA,EAAW,MAAM,KAAK,mBAAmB,KAAK,SAAU,OAAO,CACjE,OAASb,EAAG,CACV,MAAAkB,EAAWlB,EAAY,QAAS,OAAO,EACjCA,CACR,CACA,GAAI,CAKF,MAAO,CAAE,UAJS,MAAMa,EAAS,QAAQ,CACvC,OAAQ,uBACR,OAAQ,CAAC,KAAK,SAAU,QAAS,KAAK,UAAUuB,CAAO,CAAC,CAC1D,CAAC,EACwC,QAAS,KAAK,SAAU,OAAQ,CAC3E,OAASpC,EAAQ,CACf,IAAMwC,EAAMxC,GAAG,SAAS,SAAS,qBAAqB,EAClD,oFACAA,GAAG,SAAW,iBAClB,MAAAkB,EAAUsB,EAAK,OAAO,EAChB,IAAI,MAAMA,CAAG,CACrB,CACF,CAEQ,gBAAgBJ,EAA6BK,EAAyC,CAC5F,OAAO,KAAK,SAAqB,OAAQ,CACvC,KAAM,uBACN,QAASL,EAAQ,QACjB,MAAOA,EAAQ,MACf,aAAc,KAAK,cAAgB,MACrC,EAAGK,CAAI,CACT,CAEQ,yBAAyBL,EAA+BK,EAAyC,CACvG,OAAO,KAAK,SAAqB,kBAAmB,CAClD,KAAM,gCACN,KAAML,EACN,aAAc,KAAK,cAAgB,MACrC,EAAGK,CAAI,CACT,CAEQ,MAAMC,EAAqB,CACjC,MAAO,KAAO,MAAM,KAAK,IAAI,YAAY,EAAE,OAAOA,CAAG,CAAC,EAAE,IAAIC,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,CAC3G,CAKA,MAAM,aAAgC,CAEpC,GAAI,CACF,IAAMC,EAAM,MAAM,MAAM,GAAG,KAAK,IAAI,oBAAqB,CACvD,YAAa,SACf,CAAC,EACD,OAAKA,EAAI,GAEF,CAAC,EADK,MAAMA,EAAI,KAAK,GACd,KAFM,EAGtB,MAAQ,CACN,MAAO,EACT,CACF,CAQA,MAAQ,CAMN,QAAS,MAAOX,GAA8C,CAE5D,IAAML,EAAW,MAAMH,EAAqB,EACtCoB,EAAY,MAAMlB,EAAsBC,CAAQ,EAChDkB,EAAQb,EAAO,OAASH,EAAc,EAG5C,eAAe,QACbpC,EACA,KAAK,UAAU,CAAE,SAAAkC,EAAU,MAAAkB,CAAM,CAAC,CACpC,EAGA,IAAMC,EAAU,IAAI,IAAI,GAAG,KAAK,IAAI,4BAA4B,EAChE,OAAAA,EAAQ,aAAa,IAAI,YAAad,EAAO,QAAQ,EACrDc,EAAQ,aAAa,IAAI,eAAgBd,EAAO,WAAW,EAC3Dc,EAAQ,aAAa,IAAI,gBAAiB,MAAM,EAChDA,EAAQ,aAAa,IAAI,QAAS,QAAQ,EAC1CA,EAAQ,aAAa,IAAI,QAASD,CAAK,EACvCC,EAAQ,aAAa,IAAI,iBAAkBF,CAAS,EACpDE,EAAQ,aAAa,IAAI,wBAAyB,MAAM,EAEjD,KAAK,cAAcA,EAAQ,SAAS,EAAGD,EAAOb,EAAO,WAAW,CACzE,EASA,aAAc,MACZe,EACAf,IACgC,CAChC,IAAMgB,EAAS,eAAe,QAAQvD,CAAiB,EACvD,GAAI,CAACuD,EACH,MAAM,IAAI,MAAM,iDAAiD,EAGnE,GAAM,CAAE,SAAArB,CAAS,EAAI,KAAK,MAAMqB,CAAM,EAEhCC,EAAW,MAAM,MAAM,GAAG,KAAK,IAAI,yBAA0B,CACjE,OAAQ,OACR,QAAS,CACP,eAAgB,mCAClB,EACA,KAAM,IAAI,gBAAgB,CACxB,WAAY,qBACZ,KAAAF,EACA,aAAcf,EAAO,YACrB,UAAWA,EAAO,SAClB,cAAeL,CACjB,CAAC,CACH,CAAC,EAKD,GAFA,eAAe,WAAWlC,CAAiB,EAEvC,CAACwD,EAAS,GAAI,CAChB,IAAMC,EAAQ,MAAMD,EAAS,KAAK,EAClC,MAAM,IAAI,MAAMC,EAAM,mBAAqB,uBAAuB,CACpE,CAEA,OAAOD,EAAS,KAAK,CACvB,EAQA,YAAcE,GAAmC,CAC/C,IAAMH,EAAS,eAAe,QAAQvD,CAAiB,EACvD,GAAI,CAACuD,EAAQ,MAAO,GACpB,GAAM,CAAE,MAAAH,CAAM,EAAI,KAAK,MAAMG,CAAM,EACnC,OAAOH,IAAUM,CACnB,EAOA,cACEC,GACmF,CACnF,IAAMC,EAAS,IAAI,IAAID,GAAO,OAAO,SAAS,IAAI,EAC5CF,EAAQG,EAAO,aAAa,IAAI,OAAO,EAE7C,GAAIH,EACF,MAAO,CACL,MAAAA,EACA,iBAAkBG,EAAO,aAAa,IAAI,mBAAmB,GAAK,MACpE,EAGF,IAAMN,EAAOM,EAAO,aAAa,IAAI,MAAM,EACrCR,EAAQQ,EAAO,aAAa,IAAI,OAAO,EAE7C,MAAI,CAACN,GAAQ,CAACF,EACL,CAAE,MAAO,iBAAkB,iBAAkB,iCAAkC,EAGjF,CAAE,KAAAE,EAAM,MAAAF,CAAM,CACvB,CACF,EAEQ,cACNO,EACAP,EACAS,EACsB,CACtB,OAAO,IAAI,QAAQ,CAACC,EAASC,IAAW,CAClC,KAAK,OAAS,WAChB,KAAK,eAAeJ,EAAKP,EAAOS,EAAaC,EAASC,CAAM,EAG5D,OAAO,SAAS,KAAOJ,CAE3B,CAAC,CACH,CAEQ,eACNA,EACAP,EACAS,EACAC,EACAC,EACA,CACA,IAAMC,EAAO,OAAO,SAAW,OAAO,WAAa,KAAe,EAC5DC,EAAM,OAAO,SAAW,OAAO,YAAc,KAAgB,EAQnE,GANA,KAAK,MAAQ,OAAO,KAClBN,EACA,gBACA,6BAAoDK,CAAI,QAAQC,CAAG,aACrE,EAEI,CAAC,KAAK,MAAO,CACfF,EAAO,CACL,KAAM,gBACN,QAAS,8DACX,CAAC,EACD,MACF,CAEA,IAAMG,EAAe,IAAI,IAAIL,CAAW,EAAE,OAGpCM,EAAe,YAAY,IAAM,CACrC,GAAI,CACF,GAAI,KAAK,OAAO,OAAQ,CACtB,cAAcA,CAAY,EAC1B,aAAaC,CAAO,EACpBL,EAAO,CACL,KAAM,iBACN,QAAS,uBACX,CAAC,EACD,MACF,CAGA,IAAMM,EAAW,KAAK,OAAO,UAAU,KACvC,GAAIA,GAAYA,EAAS,WAAWH,CAAY,EAAG,CACjD,cAAcC,CAAY,EAC1B,aAAaC,CAAO,EAEpB,IAAMR,EAAS,IAAI,IAAIS,CAAQ,EACzBf,EAAOM,EAAO,aAAa,IAAI,MAAM,EACrCU,EAAgBV,EAAO,aAAa,IAAI,OAAO,EAC/CH,EAAQG,EAAO,aAAa,IAAI,OAAO,EAI7C,GAFA,KAAK,OAAO,MAAM,EAEdH,EAAO,CACTM,EAAO,CACL,KAAM,eACN,QAASH,EAAO,aAAa,IAAI,mBAAmB,GAAKH,CAC3D,CAAC,EACD,MACF,CAEA,GAAIa,IAAkBlB,EAAO,CAC3BW,EAAO,CACL,KAAM,iBACN,QAAS,uCACX,CAAC,EACD,MACF,CAEIT,EACFQ,EAAQ,CAAE,KAAAR,EAAM,MAAOgB,CAAc,CAAC,EAEtCP,EAAO,CACL,KAAM,eACN,QAAS,yCACX,CAAC,CAEL,CACF,MAAQ,CAER,CACF,EAAG,GAAG,EAGAK,EAAU,WAAW,IAAM,CAC/B,cAAcD,CAAY,EAC1B,KAAK,OAAO,MAAM,EAClBJ,EAAO,CACL,KAAM,UACN,QAAS,sBACX,CAAC,CACH,EAAG,GAAe,CACpB,CAEQ,YAAYQ,EAAqC,CACvD,OAAOA,GAAY,KAAK,IAC1B,CAEA,MAAc,SAAYC,EAAgB3D,EAAiB4D,EAAwC,CACjG,IAAM1B,EAAO,KAAK,YAAY0B,CAAY,EACpCC,EAAS,mBAAmB,OAAO,SAAS,MAAM,EAExD,GAAI3B,IAAS,QAAS,CACpB,IAAMY,EAAM,GAAG,KAAK,IAAI,WAAWa,CAAM,WAAWE,CAAM,GAC1D,OAAO,IAAI,QAAQ,CAACZ,EAASC,IAAW,KAAK,UAAUJ,EAAK9C,EAASiD,EAASC,CAAM,CAAC,CACvF,CAEA,GAAIhB,IAAS,WAAY,CACvB,IAAMY,EAAM,GAAG,KAAK,IAAI,WAAWa,CAAM,WAAWE,CAAM,GAC1D,cAAO,SAAS,KAAOf,EAChB,IAAI,QAAQ,IAAM,CAAC,CAAC,CAC7B,CAGA,IAAMA,EAAM,GAAG,KAAK,IAAI,iBAAiBa,CAAM,WAAWE,CAAM,GAChE,OAAO,KAAK,gBAAmBf,EAAKa,EAAQ3D,EAAS6D,CAAM,CAC7D,CAEQ,gBAAmBf,EAAaa,EAAgB3D,EAAiB6D,EAA4B,CACnG,OAAO,IAAI,QAAQ,CAACZ,EAASC,IAAW,CACtC,IAAIY,EAAgB,GAChBC,EAAU,GACVC,EAA4B,KAE1BC,EAAUC,GAAmB,CAC7BH,IACJA,EAAU,GACVG,EAAG,EACL,EAEMC,EAAU,IAAM,CACpB,aAAaC,CAAY,EACzB,aAAaC,CAAc,EAC3BL,GAAO,QAAQ,EACfA,EAAQ,IACV,EAEAA,EAAQ,IAAI5E,EAAY,CACtB,IAAA0D,EACA,KAAM,KAAK,KACX,QAAS,IAAM,CACbmB,EAAO,IAAM,CACX,aAAaG,CAAY,EACzB,aAAaC,CAAc,EAC3BL,EAAQ,KACRd,EAAO,CAAE,KAAM,iBAAkB,QAAS,4BAA6B,CAAiB,CAC1F,CAAC,CACH,EACA,UAAYpD,GAAsB,CAChC,GAAIA,EAAK,OAAS,gBAAiB,CACjCgE,EAAgB,GAChBE,GAAO,YAAYhE,CAAO,EAC1B,MACF,CAEA,GAAIF,EAAK,OAAS,gBAAiB,CACjCmE,EAAO,IAAM,CACXE,EAAQ,EACRjB,EAAO,CAAE,KAAM,iBAAkB,QAAS,4BAA6B,CAAiB,CAC1F,CAAC,EACD,MACF,CAEA,GAAIpD,EAAK,OAAS,+BAAgC,CAChD,KAAK,2BAA2BkE,CAAM,EACtC,MACF,EAGElE,EAAK,OAAS,yBACdA,EAAK,OAAS,yBACdA,EAAK,OAAS,kCACdA,EAAK,OAAS,iCAEdmE,EAAO,IAAM,CACXE,EAAQ,EACJrE,EAAK,QACHA,EAAK,OAAS,yBACZA,EAAK,eAAc,KAAK,aAAeA,EAAK,cAChDmD,EAAQ,CAAE,QAASnD,EAAK,QAAS,MAAOA,EAAK,MAAO,QAASA,EAAK,SAAW,SAAU,CAAM,GACpFA,EAAK,OAAS,+BACvBmD,EAAQ,CAAE,QAASnD,EAAK,QAAS,MAAOA,EAAK,KAAM,CAAM,EAEzDmD,EAAQ,CAAE,UAAWnD,EAAK,UAAW,QAASA,EAAK,OAAQ,CAAM,EAGnEoD,EAAOpD,EAAK,KAAK,CAErB,CAAC,CAEL,CACF,CAAC,EAGD,IAAMsE,EAAe,WAAW,IAAM,CACpC,GAAIN,GAAiBC,EAAS,OAC9BI,EAAQ,EACR,QAAQ,KAAK,sGAAsG,EACnHxD,EAAU,EACV,IAAM6C,EAAW,GAAG,KAAK,IAAI,WAAWG,CAAM,WAAWE,CAAM,GAC/D,KAAK,UAAUL,EAAUxD,EAAUsE,GAAaL,EAAO,IAAMhB,EAAQqB,CAAG,CAAC,EAAIC,GAAaN,EAAO,IAAMf,EAAOqB,CAAG,CAAC,CAAC,CACrH,EAAG,GAAoB,EAGjBF,EAAiB,WAAW,IAAM,CACtCJ,EAAO,IAAM,CACXE,EAAQ,EACRjB,EAAO,CAAE,KAAM,UAAW,QAAS,mBAAoB,CAAiB,CAC1E,CAAC,CACH,EAAG,GAAe,CACpB,CAAC,CACH,CAEQ,2BAA2Bc,EAAoB,CACrD,IAAMQ,EAAc5C,GAAwBoC,EAAM,YAAYpC,CAAM,EAEpE,IAAI3B,EAAa,CACf,UAAW,KAAK,oBAChB,SAAU,IAAM,CACduE,EAAW,CAAE,KAAM,6BAA8B,QAAS,GAAO,MAAO,CAAE,KAAM,iBAAkB,QAAS,0BAA2B,CAAE,CAAC,CAC3I,EACA,SAAU,MAAOlE,GAAa,CAC5B,GAAI,CAEF,IAAMmE,GADW,MAAMnE,EAAS,QAAQ,CAAE,OAAQ,qBAAsB,CAAC,GAChD,CAAC,EAC1B,GAAI,CAACmE,EAAS,MAAM,IAAI,MAAM,qBAAqB,EAGnD,IAAMC,EAAe,MAAM,MAAM,GAAG,KAAK,IAAI,2BAA4B,CACvE,OAAQ,OACR,YAAa,SACf,CAAC,EACD,GAAI,CAACA,EAAa,GAAI,MAAM,IAAI,MAAM,yBAAyB,EAC/D,GAAM,CAAE,QAAA1E,CAAQ,EAAI,MAAM0E,EAAa,KAAK,EAGtC1C,EAAa,KAAK,MAAMhC,CAAO,EAC/B2E,EAAY,MAAMrE,EAAS,QAAQ,CACvC,OAAQ,gBACR,OAAQ,CAAC0B,EAAYyC,CAAO,CAC9B,CAAC,EAGKG,EAAU,MAAM,MAAM,GAAG,KAAK,IAAI,iBAAkB,CACxD,OAAQ,OACR,QAAS,CAAE,eAAgB,kBAAmB,EAC9C,YAAa,UACb,KAAM,KAAK,UAAU,CAAE,QAAAH,EAAS,UAAAE,EAAW,QAAA3E,CAAQ,CAAC,CACtD,CAAC,EACD,GAAI,CAAC4E,EAAQ,GAAI,CACf,IAAML,EAAM,MAAMK,EAAQ,KAAK,EAC/B,MAAM,IAAI,MAAML,EAAI,OAAS,uBAAuB,CACtD,CACA,GAAM,CAAE,IAAAM,CAAI,EAAI,MAAMD,EAAQ,KAAK,EAEnCJ,EAAW,CAAE,KAAM,6BAA8B,QAAS,GAAM,QAASK,EAAI,QAAS,MAAOA,EAAI,EAAG,CAAC,CACvG,OAASpF,EAAQ,CACf+E,EAAW,CAAE,KAAM,6BAA8B,QAAS,GAAO,MAAO,CAAE,KAAM,UAAW,QAAS/E,EAAE,SAAW,uBAAwB,CAAE,CAAC,CAC9I,CACF,CACF,CAAC,CACH,CAEQ,UACNqD,EACA9C,EACAiD,EACAC,EACA,CAEA,IAAMC,EAAO,OAAO,SAAW,OAAO,WAAa,KAAe,EAC5DC,EAAM,OAAO,SAAW,OAAO,YAAc,KAAgB,EAQnE,GANA,KAAK,MAAQ,OAAO,KAClBN,EACA,UACA,6BAAoDK,CAAI,QAAQC,CAAG,aACrE,EAEI,CAAC,KAAK,MAAO,CACfF,EAAO,CACL,KAAM,gBACN,QAAS,uDACX,CAAC,EACD,MACF,CAEA,IAAMiB,EAAU,IAAM,CACpB,OAAO,oBAAoB,UAAWW,CAAa,EACnD,cAAcC,CAAU,EACxB,aAAaxB,CAAO,CACtB,EAGMwB,EAAa,YAAY,IAAM,CAC/B,KAAK,OAAO,SACdZ,EAAQ,EACRjB,EAAO,CACL,KAAM,iBACN,QAAS,uBACX,CAAC,EAEL,EAAG,GAAG,EAGAK,EAAU,WAAW,IAAM,CAC/BY,EAAQ,EACR,KAAK,OAAO,MAAM,EAClBjB,EAAO,CACL,KAAM,UACN,QAAS,mBACX,CAAC,CACH,EAAG,GAAe,EAGZ4B,EAAiBjF,GAAwB,CAC7C,GAAIA,EAAM,SAAW,KAAK,KAAM,OAEhC,IAAMC,EAAOD,EAAM,KAEnB,GAAIC,EAAK,OAAS,gBAAiB,CAEjC,KAAK,OAAO,YAAYE,EAAS,KAAK,IAAI,EAC1C,MACF,CAEA,GAAIF,EAAK,OAAS,gBAAiB,CACjCqE,EAAQ,EACR,KAAK,OAAO,MAAM,EAClBjB,EAAO,CACL,KAAM,iBACN,QAAS,4BACX,CAAC,EACD,MACF,EAIEpD,EAAK,OAAS,yBACdA,EAAK,OAAS,yBACdA,EAAK,OAAS,kCACdA,EAAK,OAAS,kCAEdqE,EAAQ,EACR,KAAK,OAAO,MAAM,EAEdrE,EAAK,QACHA,EAAK,OAAS,yBACZA,EAAK,eAAc,KAAK,aAAeA,EAAK,cAChDmD,EAAQ,CAAE,QAASnD,EAAK,QAAS,MAAOA,EAAK,MAAO,QAASA,EAAK,SAAW,SAAU,CAAM,GACpFA,EAAK,OAAS,+BACvBmD,EAAQ,CAAE,QAASnD,EAAK,QAAS,MAAOA,EAAK,KAAM,CAAM,EAEzDmD,EAAQ,CAAE,UAAWnD,EAAK,UAAW,QAASA,EAAK,OAAQ,CAAM,EAGnEoD,EAAOpD,EAAK,KAAK,EAGvB,EAEA,OAAO,iBAAiB,UAAWgF,CAAa,CAClD,CAKA,YAAa,CACX,KAAK,OAAO,MAAM,EAClB,KAAK,MAAQ,IACf,CACF,EAOaE,EAAN,KAAwD,CACrD,QACA,QACA,MACA,QAER,YAAYC,EAAkBC,EAAwB,CACpD,KAAK,QAAUD,EACf,KAAK,QAAUC,EAAW,QAC1B,KAAK,MAAQA,EAAW,MACxB,KAAK,QAAUA,EAAW,OAC5B,CAEA,MAAM,QAAQ,CAAE,OAAAC,EAAQ,OAAAC,CAAO,EAAqD,CAClF,OAAQD,EAAQ,CACd,IAAK,eACL,IAAK,sBACH,MAAO,CAAC,KAAK,OAAO,EAEtB,IAAK,cACH,MAAO,MAET,IAAK,gBAAiB,CACpB,GAAI,KAAK,UAAY,WACnB,GAAI,CAEF,OAAO,MADU,MAAM,KAAK,QAAQ,mBAAmB,KAAK,OAAO,GAC7C,QAAQ,CAAE,OAAAA,EAAQ,OAAAC,CAAO,CAAC,CAClD,OAAS3F,EAAQ,CACf,MAAAkB,EAAUlB,GAAG,SAAW,iCAAkC,OAAO,EAC3DA,CACR,CAGF,IAAMO,EAAU,KAAK,YAAYoF,EAAQ,CAAC,CAAW,EAErD,OADe,MAAM,KAAK,QAAQ,YAAY,CAAE,QAAApF,EAAS,MAAO,KAAK,KAAM,CAAC,GAC9D,SAChB,CAEA,IAAK,uBAAwB,CAC3B,GAAI,KAAK,UAAY,WACnB,GAAI,CAEF,OAAO,MADU,MAAM,KAAK,QAAQ,mBAAmB,KAAK,OAAO,GAC7C,QAAQ,CAAE,OAAAmF,EAAQ,OAAAC,CAAO,CAAC,CAClD,OAAS3F,EAAQ,CACf,MAAAkB,EAAUlB,GAAG,SAAW,iCAAkC,OAAO,EAC3DA,CACR,CAEF,IAAMK,EAAO,KAAK,MAAMsF,EAAQ,CAAC,CAAW,EAE5C,OADe,MAAM,KAAK,QAAQ,cAActF,CAAI,GACtC,SAChB,CAEA,QACE,MAAM,IAAI,MAAM,uBAAuBqF,CAAM,EAAE,CACnD,CACF,CAEQ,YAAYE,EAAqB,CACvC,IAAMC,EAAQ,IAAI,YACfD,EAAI,WAAW,IAAI,EAAIA,EAAI,MAAM,CAAC,EAAIA,GAAK,MAAM,SAAS,EAAG,IAAIjD,GAAK,SAASA,EAAG,EAAE,CAAC,CACxF,EACA,OAAO,IAAI,YAAY,EAAE,OAAOkD,CAAK,CACvC,CACF,EAGOC,EAAQ9D,EAGX+D,EAAkC,KAE/B,SAASC,EAAW/D,EAAiC,CAC1D,OAAI,CAAC8D,GAAmB9D,KACtB8D,EAAkB,IAAI/D,EAAQC,CAAM,GAE/B8D,CACT","names":["DEFAULT_HOST","OAUTH_STORAGE_KEY","IframeModal","opts","isMobile","style","backdrop","e","card","handle","closeBtn","event","data","h","message","WalletPicker","title","empty","list","info","provider","item","icon","name","cancel","showToast","variant","bg","root","shadow","base64UrlEncode","buffer","generateCodeVerifier","array","generateCodeChallenge","verifier","digest","generateState","ExternalWalletError","OpenKey","config","DEFAULT_HOST","result","request","targetAddress","a","hexMessage","msg","mode","str","b","res","challenge","state","authUrl","code","stored","response","error","receivedState","url","urlObj","redirectUri","resolve","reject","left","top","redirectHost","pollInterval","timeout","popupUrl","returnedState","override","action","modeOverride","origin","readyReceived","settled","modal","settle","fn","cleanup","readyTimeout","overallTimeout","val","err","sendResult","address","challengeRes","signature","linkRes","key","handleMessage","pollClosed","OpenKeyEIP1193Provider","openkey","authResult","method","params","hex","bytes","index_default","defaultInstance","getOpenKey"]}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["// OpenKey SDK - Browser client for third-party apps\n// Provides \"Sign with OpenKey\" functionality via popup or iframe\n\nexport interface EIP1193Provider {\n  request(args: { method: string; params?: any[] }): Promise<any>;\n}\n\ninterface EIP6963ProviderInfo {\n  uuid: string;\n  name: string;\n  icon: string;\n  rdns: string;\n}\n\ninterface EIP6963ProviderDetail {\n  info: EIP6963ProviderInfo;\n  provider: EIP1193Provider;\n}\n\nexport type OpenKeyMode = 'iframe' | 'popup' | 'redirect';\n\nexport interface OpenKeyConfig {\n  /** OpenKey host URL (default: https://openkey.so) */\n  host?: string;\n  /** OAuth API host URL (default: derived from host by prefixing 'api.') */\n  oauthHost?: string;\n  /** App identifier for display */\n  appName?: string;\n  /** UI mode: 'iframe' (default), 'popup', or 'redirect' */\n  mode?: OpenKeyMode;\n  /** App-provided wallet provider for external key signing */\n  externalProvider?: EIP1193Provider;\n}\n\nexport interface SignMessageRequest {\n  message: string;\n  keyId?: string; // If not provided, user selects\n}\n\nexport interface SignTypedDataRequest {\n  domain: {\n    name?: string;\n    version?: string;\n    chainId?: number;\n    verifyingContract?: string;\n  };\n  types: Record<string, Array<{ name: string; type: string }>>;\n  primaryType: string;\n  message: Record<string, unknown>;\n  keyId?: string;\n}\n\nexport interface SignResult {\n  signature: string;\n  address: string;\n}\n\nexport interface AuthResult {\n  address: string;\n  keyId: string;\n  keyType: 'MANAGED' | 'EXTERNAL';\n}\n\nexport interface OpenKeyError {\n  code: 'USER_CANCELLED' | 'POPUP_BLOCKED' | 'TIMEOUT' | 'NO_KEY' | 'UNAUTHORIZED' | 'UNKNOWN' | 'STATE_MISMATCH';\n  message: string;\n}\n\n// ======= OAuth 2.1 Types =======\n\n/** OAuth configuration for third-party apps */\nexport interface OAuthConfig {\n  /** OAuth client_id (registered with OpenKey) */\n  clientId: string;\n  /** Redirect URI (must match registered URI) */\n  redirectUri: string;\n  /** State parameter for CSRF protection (auto-generated if not provided) */\n  state?: string;\n}\n\n/** Result from OAuth authorization */\nexport interface OAuthResult {\n  /** Authorization code (exchange for tokens) */\n  code: string;\n  /** State parameter (verify matches request) */\n  state: string;\n}\n\n/** Response from token exchange */\nexport interface OAuthTokenResponse {\n  access_token: string;\n  token_type: 'Bearer';\n  expires_in: number;\n  id_token: string;\n  scope: string;\n  refresh_token?: string;\n}\n\ntype MessageType =\n  | { type: 'openkey:auth:request'; appName: string }\n  | { type: 'openkey:auth:response'; success: true; address: string; keyId: string; keyType?: 'MANAGED' | 'EXTERNAL'; sessionToken?: string }\n  | { type: 'openkey:auth:response'; success: false; error: OpenKeyError }\n  | { type: 'openkey:sign:request'; message: string; keyId?: string; sessionToken?: string }\n  | { type: 'openkey:sign:response'; success: true; signature: string; address: string }\n  | { type: 'openkey:sign:response'; success: false; error: OpenKeyError }\n  | { type: 'openkey:signTypedData:request'; data: SignTypedDataRequest; sessionToken?: string }\n  | { type: 'openkey:signTypedData:response'; success: true; signature: string; address: string }\n  | { type: 'openkey:signTypedData:response'; success: false; error: OpenKeyError }\n  | { type: 'openkey:link-wallet:request' }\n  | { type: 'openkey:link-wallet:response'; success: true; address: string; keyId: string }\n  | { type: 'openkey:link-wallet:response'; success: false; error: OpenKeyError }\n  | { type: 'openkey:link-wallet:delegate' }\n  | { type: 'openkey:link-wallet:result'; success: true; address: string; keyId: string }\n  | { type: 'openkey:link-wallet:result'; success: false; error: OpenKeyError }\n  | { type: 'openkey:resize'; height: number }\n  | { type: 'openkey:ready' }\n  | { type: 'openkey:close' };\n\nconst DEFAULT_HOST = 'https://openkey.so';\nconst POPUP_WIDTH = 400;\nconst POPUP_HEIGHT = 600;\nconst DEFAULT_TIMEOUT = 5 * 60 * 1000; // 5 minutes\nconst IFRAME_READY_TIMEOUT = 3000; // 3 seconds\nconst OAUTH_STORAGE_KEY = 'openkey_oauth';\n\nclass IframeModal {\n  private root: HTMLDivElement;\n  private shadow: ShadowRoot;\n  private iframe: HTMLIFrameElement;\n  private onClose: () => void;\n  private onMessage: (data: MessageType) => void;\n  private messageHandler: (event: MessageEvent) => void;\n  private host: string;\n\n  constructor(opts: { url: string; host: string; onClose: () => void; onMessage: (data: MessageType) => void }) {\n    this.host = opts.host;\n    this.onClose = opts.onClose;\n    this.onMessage = opts.onMessage;\n\n    const isMobile = window.matchMedia('(max-width: 639px)').matches;\n\n    this.root = document.createElement('div');\n    this.shadow = this.root.attachShadow({ mode: 'closed' });\n\n    const style = document.createElement('style');\n    style.textContent = `\n      :host{all:initial}\n      .ok-backdrop{position:fixed;inset:0;background:rgba(0,0,0,0.4);backdrop-filter:blur(4px);z-index:999999;display:flex;align-items:${isMobile ? 'flex-end' : 'center'};justify-content:center;animation:ok-fade-in 150ms ease-out}\n      .ok-card{position:relative;background:#fafafa;width:${isMobile ? '100%' : '400px'};border-radius:${isMobile ? '16px 16px 0 0' : '16px'};box-shadow:0 25px 50px -12px rgba(0,0,0,0.25);overflow:hidden;overflow-y:auto;animation:${isMobile ? 'ok-slide-up 250ms ease-out' : 'ok-scale-in 200ms ease-out'};max-height:90vh}\n      .ok-close{position:absolute;top:8px;right:8px;width:24px;height:24px;border:none;background:transparent;color:#6b7280;font-size:18px;cursor:pointer;z-index:1;display:flex;align-items:center;justify-content:center;border-radius:4px}\n      .ok-close:hover{color:#111827}\n      .ok-handle{width:40px;height:4px;background:#d4d4d4;border-radius:2px;margin:8px auto 0}\n      iframe{border:none;width:100%;height:400px;display:block;transition:height 200ms ease}\n      .ok-backdrop.ok-exit{animation:ok-fade-out 150ms ease-in}\n      .ok-backdrop.ok-exit .ok-card{animation:${isMobile ? 'ok-slide-down 200ms ease-in' : 'ok-scale-out 150ms ease-in'}}\n      @keyframes ok-fade-in{from{opacity:0}to{opacity:1}}\n      @keyframes ok-fade-out{from{opacity:1}to{opacity:0}}\n      @keyframes ok-scale-in{from{opacity:0;transform:scale(0.95)}to{opacity:1;transform:scale(1)}}\n      @keyframes ok-scale-out{from{opacity:1;transform:scale(1)}to{opacity:0;transform:scale(0.95)}}\n      @keyframes ok-slide-up{from{transform:translateY(100%)}to{transform:translateY(0)}}\n      @keyframes ok-slide-down{from{transform:translateY(0)}to{transform:translateY(100%)}}\n    `;\n\n    const backdrop = document.createElement('div');\n    backdrop.className = 'ok-backdrop';\n    backdrop.addEventListener('click', (e) => {\n      if (e.target === backdrop) this.close();\n    });\n\n    const card = document.createElement('div');\n    card.className = 'ok-card';\n\n    if (isMobile) {\n      const handle = document.createElement('div');\n      handle.className = 'ok-handle';\n      card.appendChild(handle);\n    }\n\n    const closeBtn = document.createElement('button');\n    closeBtn.className = 'ok-close';\n    closeBtn.textContent = '\\u00d7';\n    closeBtn.addEventListener('click', () => this.close());\n    card.appendChild(closeBtn);\n\n    this.iframe = document.createElement('iframe');\n    this.iframe.src = opts.url;\n    this.iframe.setAttribute('allow', 'publickey-credentials-get *; publickey-credentials-create *');\n    this.iframe.setAttribute('sandbox', 'allow-scripts allow-same-origin allow-forms allow-popups');\n    card.appendChild(this.iframe);\n\n    backdrop.appendChild(card);\n    this.shadow.appendChild(style);\n    this.shadow.appendChild(backdrop);\n\n    this.messageHandler = (event: MessageEvent) => {\n      if (event.origin !== this.host) return;\n      const data = event.data as MessageType;\n      if (data.type === 'openkey:resize') {\n        const h = Math.min(data.height, Math.floor(window.innerHeight * 0.85));\n        this.iframe.style.height = `${h}px`;\n        return;\n      }\n      this.onMessage(data);\n    };\n    window.addEventListener('message', this.messageHandler);\n    document.body.appendChild(this.root);\n  }\n\n  postMessage(message: object) {\n    this.iframe.contentWindow?.postMessage(message, this.host);\n  }\n\n  destroy() {\n    window.removeEventListener('message', this.messageHandler);\n    this.root.remove();\n  }\n\n  private close() {\n    const backdrop = this.shadow.querySelector('.ok-backdrop');\n    if (backdrop) {\n      backdrop.classList.add('ok-exit');\n      setTimeout(() => {\n        this.destroy();\n        this.onClose();\n      }, 200);\n    } else {\n      this.destroy();\n      this.onClose();\n    }\n  }\n}\n\nclass WalletPicker {\n  private root: HTMLDivElement;\n  private shadow: ShadowRoot;\n\n  constructor(opts: { providers: EIP6963ProviderDetail[]; onSelect: (provider: EIP1193Provider) => void; onCancel: () => void }) {\n    this.root = document.createElement('div');\n    this.shadow = this.root.attachShadow({ mode: 'closed' });\n\n    const style = document.createElement('style');\n    style.textContent = `\n      :host{all:initial}\n      .wp-backdrop{position:fixed;inset:0;background:rgba(0,0,0,0.4);backdrop-filter:blur(4px);z-index:1000000;display:flex;align-items:center;justify-content:center;animation:wp-fade 150ms ease-out}\n      .wp-card{background:#fff;width:340px;border-radius:16px;box-shadow:0 25px 50px -12px rgba(0,0,0,0.25);padding:20px;animation:wp-scale 200ms ease-out}\n      .wp-title{font:600 16px/1.3 system-ui,sans-serif;color:#111;margin:0 0 12px}\n      .wp-list{list-style:none;margin:0;padding:0;display:flex;flex-direction:column;gap:6px}\n      .wp-item{display:flex;align-items:center;gap:10px;padding:10px 12px;border:1px solid #e5e7eb;border-radius:10px;background:transparent;cursor:pointer;font:14px/1.3 system-ui,sans-serif;color:#111;width:100%;text-align:left;transition:border-color 150ms}\n      .wp-item:hover{border-color:#6366f1}\n      .wp-icon{width:28px;height:28px;border-radius:6px}\n      .wp-empty{font:14px/1.4 system-ui,sans-serif;color:#6b7280;text-align:center;padding:16px 0}\n      .wp-cancel{display:block;width:100%;margin-top:12px;padding:8px;border:none;background:transparent;color:#6b7280;font:14px/1.3 system-ui,sans-serif;cursor:pointer;border-radius:8px}\n      .wp-cancel:hover{background:#f3f4f6;color:#111}\n      @keyframes wp-fade{from{opacity:0}to{opacity:1}}\n      @keyframes wp-scale{from{opacity:0;transform:scale(0.95)}to{opacity:1;transform:scale(1)}}\n      @media(prefers-color-scheme:dark){\n        .wp-card{background:#1a1a1a;box-shadow:0 25px 50px -12px rgba(0,0,0,0.5)}\n        .wp-title{color:#f3f4f6}\n        .wp-item{border-color:#374151;color:#f3f4f6}\n        .wp-item:hover{border-color:#818cf8}\n        .wp-empty{color:#9ca3af}\n        .wp-cancel{color:#9ca3af}\n        .wp-cancel:hover{background:#262626;color:#f3f4f6}\n      }\n    `;\n\n    const backdrop = document.createElement('div');\n    backdrop.className = 'wp-backdrop';\n    backdrop.addEventListener('click', (e) => { if (e.target === backdrop) { this.destroy(); opts.onCancel(); } });\n\n    const card = document.createElement('div');\n    card.className = 'wp-card';\n\n    const title = document.createElement('h2');\n    title.className = 'wp-title';\n    title.textContent = 'Select a wallet';\n    card.appendChild(title);\n\n    if (opts.providers.length === 0) {\n      const empty = document.createElement('div');\n      empty.className = 'wp-empty';\n      empty.textContent = 'No wallets detected';\n      card.appendChild(empty);\n    } else {\n      const list = document.createElement('ul');\n      list.className = 'wp-list';\n      for (const { info, provider } of opts.providers) {\n        const item = document.createElement('button');\n        item.className = 'wp-item';\n        if (info.icon) {\n          const icon = document.createElement('img');\n          icon.className = 'wp-icon';\n          icon.src = info.icon;\n          icon.alt = info.name;\n          item.appendChild(icon);\n        }\n        const name = document.createElement('span');\n        name.textContent = info.name;\n        item.appendChild(name);\n        item.addEventListener('click', () => { this.destroy(); opts.onSelect(provider); });\n        list.appendChild(item);\n      }\n      card.appendChild(list);\n    }\n\n    const cancel = document.createElement('button');\n    cancel.className = 'wp-cancel';\n    cancel.textContent = 'Cancel';\n    cancel.addEventListener('click', () => { this.destroy(); opts.onCancel(); });\n    card.appendChild(cancel);\n\n    backdrop.appendChild(card);\n    this.shadow.appendChild(style);\n    this.shadow.appendChild(backdrop);\n    document.body.appendChild(this.root);\n  }\n\n  destroy() {\n    this.root.remove();\n  }\n}\n\nfunction showToast(message = 'Opening in new window\\u2026', variant: 'info' | 'error' = 'info') {\n  const bg = variant === 'error' ? '#dc2626' : '#1f2937';\n  const root = document.createElement('div');\n  const shadow = root.attachShadow({ mode: 'closed' });\n  shadow.innerHTML = `<style>:host{all:initial}.ok-toast{position:fixed;top:16px;right:16px;z-index:1000000;background:${bg};color:#f9fafb;padding:10px 16px;border-radius:8px;font:14px/1.4 system-ui,sans-serif;box-shadow:0 4px 12px rgba(0,0,0,0.15);animation:ok-t-in 200ms ease-out;max-width:360px}@keyframes ok-t-in{from{opacity:0;transform:translateY(-8px)}to{opacity:1;transform:translateY(0)}}</style><div class=\"ok-toast\">${message}</div>`;\n  document.body.appendChild(root);\n  setTimeout(() => root.remove(), 4000);\n}\n\n// ======= PKCE Utilities =======\n\nfunction base64UrlEncode(buffer: Uint8Array): string {\n  const base64 = btoa(String.fromCharCode(...buffer));\n  return base64.replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=/g, '');\n}\n\nasync function generateCodeVerifier(): Promise<string> {\n  const array = new Uint8Array(32);\n  crypto.getRandomValues(array);\n  return base64UrlEncode(array);\n}\n\nasync function generateCodeChallenge(verifier: string): Promise<string> {\n  const encoder = new TextEncoder();\n  const data = encoder.encode(verifier);\n  const digest = await crypto.subtle.digest('SHA-256', data);\n  return base64UrlEncode(new Uint8Array(digest));\n}\n\nfunction generateState(): string {\n  const array = new Uint8Array(16);\n  crypto.getRandomValues(array);\n  return base64UrlEncode(array);\n}\n\nclass ExternalWalletError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'ExternalWalletError';\n  }\n}\n\nexport class OpenKey {\n  private host: string;\n  private oauthHost: string;\n  private appName: string;\n  private mode: OpenKeyMode;\n  private config: OpenKeyConfig;\n  private popup: Window | null = null;\n  private lastAuth: AuthResult | null = null;\n  private discoveredProviders: EIP6963ProviderDetail[] = [];\n  private sessionToken: string | null = null;\n\n  constructor(config: OpenKeyConfig = {}) {\n    this.config = config;\n    this.host = config.host || DEFAULT_HOST;\n    this.oauthHost = config.oauthHost || this.deriveOAuthHost(this.host);\n    this.appName = config.appName || window.location.hostname;\n    this.mode = config.mode ?? 'iframe';\n\n    // Listen for EIP-6963 wallet announcements\n    if (typeof window !== 'undefined') {\n      this.discoveredProviders = [];\n      window.addEventListener('eip6963:announceProvider', (event: any) => {\n        this.discoveredProviders.push(event.detail);\n      });\n      window.dispatchEvent(new Event('eip6963:requestProvider'));\n    }\n  }\n\n  /**\n   * Derive the OAuth API host from the main host by prefixing 'api.'\n   * @param host - The main host URL\n   * @returns The derived OAuth API host URL\n   */\n  private deriveOAuthHost(host: string): string {\n    try {\n      const url = new URL(host);\n      url.hostname = 'api.' + url.hostname;\n      return url.toString().replace(/\\/$/, '');\n    } catch {\n      return 'https://api.openkey.so';\n    }\n  }\n\n  /**\n   * Connect to OpenKey and get user's wallet address\n   * Opens auth flow for user to select/create a key\n   */\n  async connect(opts?: { mode?: OpenKeyMode }): Promise<AuthResult> {\n    const result = await this.openFlow<AuthResult>('connect', {\n      type: 'openkey:auth:request',\n      appName: this.appName,\n    }, opts?.mode);\n    this.lastAuth = result;\n    return result;\n  }\n\n  /**\n   * Link an external wallet to the user's OpenKey account\n   * Opens link-wallet widget flow\n   */\n  async linkWallet(opts?: { mode?: OpenKeyMode }): Promise<{ address: string; keyId: string }> {\n    return this.openFlow<{ address: string; keyId: string }>('link-wallet', {\n      type: 'openkey:link-wallet:request',\n    }, opts?.mode);\n  }\n\n  /**\n   * Sign a message with the user's OpenKey wallet\n   * For external keys, routes directly to the user's wallet provider\n   */\n  async signMessage(request: SignMessageRequest, opts?: { mode?: OpenKeyMode }): Promise<SignResult> {\n    if (this.lastAuth?.keyType === 'EXTERNAL') {\n      return this.signWithExternalWallet(request);\n    }\n    return this.signWithOpenKey(request, opts?.mode);\n  }\n\n  /**\n   * Sign typed data (EIP-712) with the user's OpenKey wallet\n   * For external keys, routes directly to the user's wallet provider\n   */\n  async signTypedData(request: SignTypedDataRequest, opts?: { mode?: OpenKeyMode }): Promise<SignResult> {\n    if (this.lastAuth?.keyType === 'EXTERNAL') {\n      return this.signTypedDataWithExternalWallet(request);\n    }\n    return this.signTypedDataWithOpenKey(request, opts?.mode);\n  }\n\n  /**\n   * Find a wallet provider that controls the given address.\n   * Checks: 1) app-provided externalProvider, 2) EIP-6963 discovered wallets, 3) window.ethereum\n   */\n  async findWalletProvider(targetAddress: string): Promise<EIP1193Provider> {\n    // 1. Try app-provided externalProvider first\n    if (this.config.externalProvider) {\n      return this.config.externalProvider;\n    }\n\n    // 2. Check EIP-6963 discovered wallets silently (no popup)\n    for (const { provider } of this.discoveredProviders) {\n      try {\n        const accounts = await provider.request({ method: 'eth_accounts' }) as string[];\n        if (accounts.some(a => a.toLowerCase() === targetAddress.toLowerCase())) {\n          return provider;\n        }\n      } catch {}\n    }\n\n    // 3. Fall back to window.ethereum silently\n    if (typeof window !== 'undefined' && (window as any).ethereum) {\n      const provider = (window as any).ethereum as EIP1193Provider;\n      try {\n        const accounts = await provider.request({ method: 'eth_accounts' }) as string[];\n        if (accounts.some(a => a.toLowerCase() === targetAddress.toLowerCase())) {\n          return provider;\n        }\n      } catch {}\n    }\n\n    throw new ExternalWalletError('External wallet not found. Connect the wallet that owns this key and try again.');\n  }\n\n  private async signWithExternalWallet(request: SignMessageRequest): Promise<SignResult> {\n    let provider: EIP1193Provider;\n    try {\n      provider = await this.findWalletProvider(this.lastAuth!.address);\n    } catch (e) {\n      showToast((e as Error).message, 'error');\n      throw e;\n    }\n    try {\n      const hexMessage = this.toHex(request.message);\n      const signature = await provider.request({\n        method: 'personal_sign',\n        params: [hexMessage, this.lastAuth!.address],\n      });\n      return { signature: signature as string, address: this.lastAuth!.address };\n    } catch (e: any) {\n      const msg = e?.message?.includes('not been authorized')\n        ? 'Wallet rejected the request. Approve the connection in your wallet and try again.'\n        : e?.message || 'Signing failed';\n      showToast(msg, 'error');\n      throw new Error(msg);\n    }\n  }\n\n  private async signTypedDataWithExternalWallet(request: SignTypedDataRequest): Promise<SignResult> {\n    let provider: EIP1193Provider;\n    try {\n      provider = await this.findWalletProvider(this.lastAuth!.address);\n    } catch (e) {\n      showToast((e as Error).message, 'error');\n      throw e;\n    }\n    try {\n      const signature = await provider.request({\n        method: 'eth_signTypedData_v4',\n        params: [this.lastAuth!.address, JSON.stringify(request)],\n      });\n      return { signature: signature as string, address: this.lastAuth!.address };\n    } catch (e: any) {\n      const msg = e?.message?.includes('not been authorized')\n        ? 'Wallet rejected the request. Approve the connection in your wallet and try again.'\n        : e?.message || 'Signing failed';\n      showToast(msg, 'error');\n      throw new Error(msg);\n    }\n  }\n\n  private signWithOpenKey(request: SignMessageRequest, mode?: OpenKeyMode): Promise<SignResult> {\n    return this.openFlow<SignResult>('sign', {\n      type: 'openkey:sign:request',\n      message: request.message,\n      keyId: request.keyId,\n      sessionToken: this.sessionToken || undefined,\n    }, mode);\n  }\n\n  private signTypedDataWithOpenKey(request: SignTypedDataRequest, mode?: OpenKeyMode): Promise<SignResult> {\n    return this.openFlow<SignResult>('sign-typed-data', {\n      type: 'openkey:signTypedData:request',\n      data: request,\n      sessionToken: this.sessionToken || undefined,\n    }, mode);\n  }\n\n  private toHex(str: string): string {\n    return '0x' + Array.from(new TextEncoder().encode(str)).map(b => b.toString(16).padStart(2, '0')).join('');\n  }\n\n  /**\n   * Check if user is already authenticated\n   */\n  async isConnected(): Promise<boolean> {\n    // Check for existing session via API\n    try {\n      const res = await fetch(`${this.host}/api/auth/session`, {\n        credentials: 'include',\n      });\n      if (!res.ok) return false;\n      const data = await res.json();\n      return !!data.user;\n    } catch {\n      return false;\n    }\n  }\n\n  // ======= OAuth 2.1 Provider Methods =======\n\n  /**\n   * OAuth 2.1 methods for third-party app authentication\n   * Use this when your app has registered OAuth client credentials with OpenKey\n   */\n  oauth = {\n    /**\n     * Start OAuth authorization flow\n     * Opens popup/redirect to OpenKey authorization endpoint\n     * @returns Promise that resolves with authorization code after user consent\n     */\n    connect: async (config: OAuthConfig): Promise<OAuthResult> => {\n      // Generate PKCE values\n      const verifier = await generateCodeVerifier();\n      const challenge = await generateCodeChallenge(verifier);\n      const state = config.state || generateState();\n\n      // Store for later token exchange\n      sessionStorage.setItem(\n        OAUTH_STORAGE_KEY,\n        JSON.stringify({ verifier, state })\n      );\n\n      // Build authorization URL\n      const authUrl = new URL(`${this.oauthHost}/api/auth/oauth2/authorize`);\n      authUrl.searchParams.set('client_id', config.clientId);\n      authUrl.searchParams.set('redirect_uri', config.redirectUri);\n      authUrl.searchParams.set('response_type', 'code');\n      authUrl.searchParams.set('scope', 'openid');\n      authUrl.searchParams.set('state', state);\n      authUrl.searchParams.set('code_challenge', challenge);\n      authUrl.searchParams.set('code_challenge_method', 'S256');\n\n      return this.openOAuthFlow(authUrl.toString(), state, config.redirectUri);\n    },\n\n    /**\n     * Exchange authorization code for tokens\n     * Call this after receiving the callback with authorization code\n     * @param code - Authorization code from callback URL\n     * @param config - Same config used for connect()\n     * @returns Promise that resolves with access_token, id_token, etc.\n     */\n    exchangeCode: async (\n      code: string,\n      config: OAuthConfig\n    ): Promise<OAuthTokenResponse> => {\n      const stored = sessionStorage.getItem(OAUTH_STORAGE_KEY);\n      if (!stored) {\n        throw new Error('No PKCE verifier found. Start a new OAuth flow.');\n      }\n\n      const { verifier } = JSON.parse(stored);\n\n      const response = await fetch(`${this.oauthHost}/api/auth/oauth2/token`, {\n        method: 'POST',\n        headers: {\n          'Content-Type': 'application/x-www-form-urlencoded',\n        },\n        body: new URLSearchParams({\n          grant_type: 'authorization_code',\n          code,\n          redirect_uri: config.redirectUri,\n          client_id: config.clientId,\n          code_verifier: verifier,\n        }),\n      });\n\n      // Clear stored verifier\n      sessionStorage.removeItem(OAUTH_STORAGE_KEY);\n\n      if (!response.ok) {\n        const error = await response.json();\n        throw new Error(error.error_description || 'Token exchange failed');\n      }\n\n      return response.json();\n    },\n\n    /**\n     * Verify state parameter from callback\n     * Call this before exchangeCode to prevent CSRF attacks\n     * @param receivedState - State parameter from callback URL\n     * @returns true if state matches, false otherwise\n     */\n    verifyState: (receivedState: string): boolean => {\n      const stored = sessionStorage.getItem(OAUTH_STORAGE_KEY);\n      if (!stored) return false;\n      const { state } = JSON.parse(stored);\n      return state === receivedState;\n    },\n\n    /**\n     * Parse authorization response from callback URL\n     * @param url - Callback URL (defaults to current window.location.href)\n     * @returns Parsed code and state, or error\n     */\n    parseCallback: (\n      url?: string\n    ): { code: string; state: string } | { error: string; errorDescription?: string } => {\n      const urlObj = new URL(url || window.location.href);\n      const error = urlObj.searchParams.get('error');\n\n      if (error) {\n        return {\n          error,\n          errorDescription: urlObj.searchParams.get('error_description') || undefined,\n        };\n      }\n\n      const code = urlObj.searchParams.get('code');\n      const state = urlObj.searchParams.get('state');\n\n      if (!code || !state) {\n        return { error: 'missing_params', errorDescription: 'Missing code or state parameter' };\n      }\n\n      return { code, state };\n    },\n  };\n\n  private openOAuthFlow(\n    url: string,\n    state: string,\n    redirectUri: string\n  ): Promise<OAuthResult> {\n    return new Promise((resolve, reject) => {\n      if (this.mode !== 'redirect') {\n        this.openOAuthPopup(url, state, redirectUri, resolve, reject);\n      } else {\n        // Full page redirect - won't resolve, page navigates away\n        window.location.href = url;\n      }\n    });\n  }\n\n  private openOAuthPopup(\n    url: string,\n    state: string,\n    redirectUri: string,\n    resolve: (value: OAuthResult) => void,\n    reject: (error: OpenKeyError) => void\n  ) {\n    const left = window.screenX + (window.outerWidth - POPUP_WIDTH) / 2;\n    const top = window.screenY + (window.outerHeight - POPUP_HEIGHT) / 2;\n\n    this.popup = window.open(\n      url,\n      'openkey-oauth',\n      `width=${POPUP_WIDTH},height=${POPUP_HEIGHT},left=${left},top=${top},popup=true`\n    );\n\n    if (!this.popup) {\n      reject({\n        code: 'POPUP_BLOCKED',\n        message: 'Popup was blocked. Please allow popups or use redirect mode.',\n      });\n      return;\n    }\n\n    const redirectHost = new URL(redirectUri).origin;\n\n    // Poll for redirect back with code\n    const pollInterval = setInterval(() => {\n      try {\n        if (this.popup?.closed) {\n          clearInterval(pollInterval);\n          clearTimeout(timeout);\n          reject({\n            code: 'USER_CANCELLED',\n            message: 'User closed the popup',\n          });\n          return;\n        }\n\n        // Check if redirected to callback URL\n        const popupUrl = this.popup?.location?.href;\n        if (popupUrl && popupUrl.startsWith(redirectHost)) {\n          clearInterval(pollInterval);\n          clearTimeout(timeout);\n\n          const urlObj = new URL(popupUrl);\n          const code = urlObj.searchParams.get('code');\n          const returnedState = urlObj.searchParams.get('state');\n          const error = urlObj.searchParams.get('error');\n\n          this.popup?.close();\n\n          if (error) {\n            reject({\n              code: 'UNAUTHORIZED',\n              message: urlObj.searchParams.get('error_description') || error,\n            });\n            return;\n          }\n\n          if (returnedState !== state) {\n            reject({\n              code: 'STATE_MISMATCH',\n              message: 'State mismatch - possible CSRF attack',\n            });\n            return;\n          }\n\n          if (code) {\n            resolve({ code, state: returnedState });\n          } else {\n            reject({\n              code: 'UNAUTHORIZED',\n              message: 'Authorization failed - no code returned',\n            });\n          }\n        }\n      } catch {\n        // Cross-origin - popup still on OpenKey domain, continue polling\n      }\n    }, 100);\n\n    // Timeout\n    const timeout = setTimeout(() => {\n      clearInterval(pollInterval);\n      this.popup?.close();\n      reject({\n        code: 'TIMEOUT',\n        message: 'OAuth flow timed out',\n      });\n    }, DEFAULT_TIMEOUT);\n  }\n\n  private resolveMode(override?: OpenKeyMode): OpenKeyMode {\n    return override ?? this.mode;\n  }\n\n  private async openFlow<T>(action: string, message: object, modeOverride?: OpenKeyMode): Promise<T> {\n    const mode = this.resolveMode(modeOverride);\n    const origin = encodeURIComponent(window.location.origin);\n\n    if (mode === 'popup') {\n      const url = `${this.host}/widget/${action}?origin=${origin}`;\n      return new Promise((resolve, reject) => this.openPopup(url, message, resolve, reject));\n    }\n\n    if (mode === 'redirect') {\n      const url = `${this.host}/widget/${action}?origin=${origin}`;\n      window.location.href = url;\n      return new Promise(() => {}); // never resolves, page navigates\n    }\n\n    // iframe mode with auto-fallback\n    const url = `${this.host}/widget/embed/${action}?origin=${origin}`;\n    return this.openIframeModal<T>(url, action, message, origin);\n  }\n\n  private openIframeModal<T>(url: string, action: string, message: object, origin: string): Promise<T> {\n    return new Promise((resolve, reject) => {\n      let readyReceived = false;\n      let settled = false;\n      let modal: IframeModal | null = null;\n\n      const settle = (fn: () => void) => {\n        if (settled) return;\n        settled = true;\n        fn();\n      };\n\n      const cleanup = () => {\n        clearTimeout(readyTimeout);\n        clearTimeout(overallTimeout);\n        modal?.destroy();\n        modal = null;\n      };\n\n      modal = new IframeModal({\n        url,\n        host: this.host,\n        onClose: () => {\n          settle(() => {\n            clearTimeout(readyTimeout);\n            clearTimeout(overallTimeout);\n            modal = null;\n            reject({ code: 'USER_CANCELLED', message: 'User cancelled the request' } as OpenKeyError);\n          });\n        },\n        onMessage: (data: MessageType) => {\n          if (data.type === 'openkey:ready') {\n            readyReceived = true;\n            modal?.postMessage(message);\n            return;\n          }\n\n          if (data.type === 'openkey:close') {\n            settle(() => {\n              cleanup();\n              reject({ code: 'USER_CANCELLED', message: 'User cancelled the request' } as OpenKeyError);\n            });\n            return;\n          }\n\n          if (data.type === 'openkey:link-wallet:delegate') {\n            this.handleWalletLinkDelegation(modal!);\n            return;\n          }\n\n          if (\n            data.type === 'openkey:auth:response' ||\n            data.type === 'openkey:sign:response' ||\n            data.type === 'openkey:signTypedData:response' ||\n            data.type === 'openkey:link-wallet:response'\n          ) {\n            settle(() => {\n              cleanup();\n              if (data.success) {\n                if (data.type === 'openkey:auth:response') {\n                  if (data.sessionToken) this.sessionToken = data.sessionToken;\n                  resolve({ address: data.address, keyId: data.keyId, keyType: data.keyType || 'MANAGED' } as T);\n                } else if (data.type === 'openkey:link-wallet:response') {\n                  resolve({ address: data.address, keyId: data.keyId } as T);\n                } else {\n                  resolve({ signature: data.signature, address: data.address } as T);\n                }\n              } else {\n                reject(data.error);\n              }\n            });\n          }\n        },\n      });\n\n      // Auto-fallback: if no openkey:ready within 3s, fall back to popup\n      const readyTimeout = setTimeout(() => {\n        if (readyReceived || settled) return;\n        cleanup();\n        console.warn('OpenKey: iframe blocked by CSP, falling back to popup. Add frame-src https://openkey.so to your CSP.');\n        showToast();\n        const popupUrl = `${this.host}/widget/${action}?origin=${origin}`;\n        this.openPopup(popupUrl, message, (val: any) => settle(() => resolve(val)), (err: any) => settle(() => reject(err)));\n      }, IFRAME_READY_TIMEOUT);\n\n      // Overall 5-minute timeout\n      const overallTimeout = setTimeout(() => {\n        settle(() => {\n          cleanup();\n          reject({ code: 'TIMEOUT', message: 'Request timed out' } as OpenKeyError);\n        });\n      }, DEFAULT_TIMEOUT);\n    });\n  }\n\n  private handleWalletLinkDelegation(modal: IframeModal) {\n    const sendResult = (result: MessageType) => modal.postMessage(result);\n\n    new WalletPicker({\n      providers: this.discoveredProviders,\n      onCancel: () => {\n        sendResult({ type: 'openkey:link-wallet:result', success: false, error: { code: 'USER_CANCELLED', message: 'Wallet linking cancelled' } });\n      },\n      onSelect: async (provider) => {\n        try {\n          const accounts = await provider.request({ method: 'eth_requestAccounts' }) as string[];\n          const address = accounts[0];\n          if (!address) throw new Error('No account returned');\n\n          // Get challenge from API\n          const challengeRes = await fetch(`${this.host}/api/keys/link/challenge`, {\n            method: 'POST',\n            credentials: 'include',\n          });\n          if (!challengeRes.ok) throw new Error('Failed to get challenge');\n          const { message } = await challengeRes.json();\n\n          // Sign challenge with wallet\n          const hexMessage = this.toHex(message);\n          const signature = await provider.request({\n            method: 'personal_sign',\n            params: [hexMessage, address],\n          }) as string;\n\n          // Submit to API\n          const linkRes = await fetch(`${this.host}/api/keys/link`, {\n            method: 'POST',\n            headers: { 'Content-Type': 'application/json' },\n            credentials: 'include',\n            body: JSON.stringify({ address, signature, message }),\n          });\n          if (!linkRes.ok) {\n            const err = await linkRes.json();\n            throw new Error(err.error || 'Failed to link wallet');\n          }\n          const { key } = await linkRes.json();\n\n          sendResult({ type: 'openkey:link-wallet:result', success: true, address: key.address, keyId: key.id });\n        } catch (e: any) {\n          sendResult({ type: 'openkey:link-wallet:result', success: false, error: { code: 'UNKNOWN', message: e.message || 'Wallet linking failed' } });\n        }\n      },\n    });\n  }\n\n  private openPopup<T>(\n    url: string,\n    message: object,\n    resolve: (value: T) => void,\n    reject: (error: OpenKeyError) => void\n  ) {\n    // Calculate popup position\n    const left = window.screenX + (window.outerWidth - POPUP_WIDTH) / 2;\n    const top = window.screenY + (window.outerHeight - POPUP_HEIGHT) / 2;\n\n    this.popup = window.open(\n      url,\n      'openkey',\n      `width=${POPUP_WIDTH},height=${POPUP_HEIGHT},left=${left},top=${top},popup=true`\n    );\n\n    if (!this.popup) {\n      reject({\n        code: 'POPUP_BLOCKED',\n        message: 'Popup was blocked. Please allow popups for this site.',\n      });\n      return;\n    }\n\n    const cleanup = () => {\n      window.removeEventListener('message', handleMessage);\n      clearInterval(pollClosed);\n      clearTimeout(timeout);\n    };\n\n    // Poll to detect popup close\n    const pollClosed = setInterval(() => {\n      if (this.popup?.closed) {\n        cleanup();\n        reject({\n          code: 'USER_CANCELLED',\n          message: 'User closed the popup',\n        });\n      }\n    }, 500);\n\n    // Timeout\n    const timeout = setTimeout(() => {\n      cleanup();\n      this.popup?.close();\n      reject({\n        code: 'TIMEOUT',\n        message: 'Request timed out',\n      });\n    }, DEFAULT_TIMEOUT);\n\n    // Listen for messages\n    const handleMessage = (event: MessageEvent) => {\n      if (event.origin !== this.host) return;\n\n      const data = event.data as MessageType;\n\n      if (data.type === 'openkey:ready') {\n        // Widget is ready, send our request\n        this.popup?.postMessage(message, this.host);\n        return;\n      }\n\n      if (data.type === 'openkey:close') {\n        cleanup();\n        this.popup?.close();\n        reject({\n          code: 'USER_CANCELLED',\n          message: 'User cancelled the request',\n        });\n        return;\n      }\n\n      // Handle responses\n      if (\n        data.type === 'openkey:auth:response' ||\n        data.type === 'openkey:sign:response' ||\n        data.type === 'openkey:signTypedData:response' ||\n        data.type === 'openkey:link-wallet:response'\n      ) {\n        cleanup();\n        this.popup?.close();\n\n        if (data.success) {\n          if (data.type === 'openkey:auth:response') {\n            if (data.sessionToken) this.sessionToken = data.sessionToken;\n            resolve({ address: data.address, keyId: data.keyId, keyType: data.keyType || 'MANAGED' } as T);\n          } else if (data.type === 'openkey:link-wallet:response') {\n            resolve({ address: data.address, keyId: data.keyId } as T);\n          } else {\n            resolve({ signature: data.signature, address: data.address } as T);\n          }\n        } else {\n          reject(data.error);\n        }\n      }\n    };\n\n    window.addEventListener('message', handleMessage);\n  }\n\n  /**\n   * Disconnect and close any open flows\n   */\n  disconnect() {\n    this.popup?.close();\n    this.popup = null;\n  }\n}\n\n/**\n * Unified EIP-1193 provider that wraps an OpenKey instance.\n * Transparently routes signing to either OpenKey (managed keys) or the user's\n * wallet (external keys).\n */\nexport class OpenKeyEIP1193Provider implements EIP1193Provider {\n  private openkey: OpenKey;\n  private address: string;\n  private keyId: string;\n  private keyType: 'MANAGED' | 'EXTERNAL';\n\n  constructor(openkey: OpenKey, authResult: AuthResult) {\n    this.openkey = openkey;\n    this.address = authResult.address;\n    this.keyId = authResult.keyId;\n    this.keyType = authResult.keyType;\n  }\n\n  async request({ method, params }: { method: string; params?: any[] }): Promise<any> {\n    switch (method) {\n      case 'eth_accounts':\n      case 'eth_requestAccounts':\n        return [this.address];\n\n      case 'eth_chainId':\n        return '0x1'; // mainnet\n\n      case 'personal_sign': {\n        if (this.keyType === 'EXTERNAL') {\n          try {\n            const provider = await this.openkey.findWalletProvider(this.address);\n            return await provider.request({ method, params });\n          } catch (e: any) {\n            showToast(e?.message || 'External wallet signing failed', 'error');\n            throw e;\n          }\n        }\n        // Managed key: route through OpenKey\n        const message = this.hexToString(params![0] as string);\n        const result = await this.openkey.signMessage({ message, keyId: this.keyId });\n        return result.signature;\n      }\n\n      case 'eth_signTypedData_v4': {\n        if (this.keyType === 'EXTERNAL') {\n          try {\n            const provider = await this.openkey.findWalletProvider(this.address);\n            return await provider.request({ method, params });\n          } catch (e: any) {\n            showToast(e?.message || 'External wallet signing failed', 'error');\n            throw e;\n          }\n        }\n        const data = JSON.parse(params![1] as string);\n        const result = await this.openkey.signTypedData(data);\n        return result.signature;\n      }\n\n      default:\n        throw new Error(`Unsupported method: ${method}`);\n    }\n  }\n\n  private hexToString(hex: string): string {\n    const bytes = new Uint8Array(\n      (hex.startsWith('0x') ? hex.slice(2) : hex).match(/.{1,2}/g)!.map(b => parseInt(b, 16))\n    );\n    return new TextDecoder().decode(bytes);\n  }\n}\n\n// Default export for convenience\nexport default OpenKey;\n\n// Create singleton instance\nlet defaultInstance: OpenKey | null = null;\n\nexport function getOpenKey(config?: OpenKeyConfig): OpenKey {\n  if (!defaultInstance || config) {\n    defaultInstance = new OpenKey(config);\n  }\n  return defaultInstance;\n}\n"],"mappings":"AAsHA,IAAMA,EAAe,qBAKrB,IAAMC,EAAoB,gBAEpBC,EAAN,KAAkB,CACR,KACA,OACA,OACA,QACA,UACA,eACA,KAER,YAAYC,EAAkG,CAC5G,KAAK,KAAOA,EAAK,KACjB,KAAK,QAAUA,EAAK,QACpB,KAAK,UAAYA,EAAK,UAEtB,IAAMC,EAAW,OAAO,WAAW,oBAAoB,EAAE,QAEzD,KAAK,KAAO,SAAS,cAAc,KAAK,EACxC,KAAK,OAAS,KAAK,KAAK,aAAa,CAAE,KAAM,QAAS,CAAC,EAEvD,IAAMC,EAAQ,SAAS,cAAc,OAAO,EAC5CA,EAAM,YAAc;AAAA;AAAA,yIAEiHD,EAAW,WAAa,QAAQ;AAAA,4DAC7GA,EAAW,OAAS,OAAO,kBAAkBA,EAAW,gBAAkB,MAAM,4FAA4FA,EAAW,6BAA+B,4BAA4B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,gDAM9PA,EAAW,8BAAgC,4BAA4B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MASnH,IAAME,EAAW,SAAS,cAAc,KAAK,EAC7CA,EAAS,UAAY,cACrBA,EAAS,iBAAiB,QAAUC,GAAM,CACpCA,EAAE,SAAWD,GAAU,KAAK,MAAM,CACxC,CAAC,EAED,IAAME,EAAO,SAAS,cAAc,KAAK,EAGzC,GAFAA,EAAK,UAAY,UAEbJ,EAAU,CACZ,IAAMK,EAAS,SAAS,cAAc,KAAK,EAC3CA,EAAO,UAAY,YACnBD,EAAK,YAAYC,CAAM,CACzB,CAEA,IAAMC,EAAW,SAAS,cAAc,QAAQ,EAChDA,EAAS,UAAY,WACrBA,EAAS,YAAc,OACvBA,EAAS,iBAAiB,QAAS,IAAM,KAAK,MAAM,CAAC,EACrDF,EAAK,YAAYE,CAAQ,EAEzB,KAAK,OAAS,SAAS,cAAc,QAAQ,EAC7C,KAAK,OAAO,IAAMP,EAAK,IACvB,KAAK,OAAO,aAAa,QAAS,6DAA6D,EAC/F,KAAK,OAAO,aAAa,UAAW,0DAA0D,EAC9FK,EAAK,YAAY,KAAK,MAAM,EAE5BF,EAAS,YAAYE,CAAI,EACzB,KAAK,OAAO,YAAYH,CAAK,EAC7B,KAAK,OAAO,YAAYC,CAAQ,EAEhC,KAAK,eAAkBK,GAAwB,CAC7C,GAAIA,EAAM,SAAW,KAAK,KAAM,OAChC,IAAMC,EAAOD,EAAM,KACnB,GAAIC,EAAK,OAAS,iBAAkB,CAClC,IAAMC,EAAI,KAAK,IAAID,EAAK,OAAQ,KAAK,MAAM,OAAO,YAAc,GAAI,CAAC,EACrE,KAAK,OAAO,MAAM,OAAS,GAAGC,CAAC,KAC/B,MACF,CACA,KAAK,UAAUD,CAAI,CACrB,EACA,OAAO,iBAAiB,UAAW,KAAK,cAAc,EACtD,SAAS,KAAK,YAAY,KAAK,IAAI,CACrC,CAEA,YAAYE,EAAiB,CAC3B,KAAK,OAAO,eAAe,YAAYA,EAAS,KAAK,IAAI,CAC3D,CAEA,SAAU,CACR,OAAO,oBAAoB,UAAW,KAAK,cAAc,EACzD,KAAK,KAAK,OAAO,CACnB,CAEQ,OAAQ,CACd,IAAMR,EAAW,KAAK,OAAO,cAAc,cAAc,EACrDA,GACFA,EAAS,UAAU,IAAI,SAAS,EAChC,WAAW,IAAM,CACf,KAAK,QAAQ,EACb,KAAK,QAAQ,CACf,EAAG,GAAG,IAEN,KAAK,QAAQ,EACb,KAAK,QAAQ,EAEjB,CACF,EAEMS,EAAN,KAAmB,CACT,KACA,OAER,YAAYZ,EAAmH,CAC7H,KAAK,KAAO,SAAS,cAAc,KAAK,EACxC,KAAK,OAAS,KAAK,KAAK,aAAa,CAAE,KAAM,QAAS,CAAC,EAEvD,IAAME,EAAQ,SAAS,cAAc,OAAO,EAC5CA,EAAM,YAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAyBpB,IAAMC,EAAW,SAAS,cAAc,KAAK,EAC7CA,EAAS,UAAY,cACrBA,EAAS,iBAAiB,QAAUC,GAAM,CAAMA,EAAE,SAAWD,IAAY,KAAK,QAAQ,EAAGH,EAAK,SAAS,EAAK,CAAC,EAE7G,IAAMK,EAAO,SAAS,cAAc,KAAK,EACzCA,EAAK,UAAY,UAEjB,IAAMQ,EAAQ,SAAS,cAAc,IAAI,EAKzC,GAJAA,EAAM,UAAY,WAClBA,EAAM,YAAc,kBACpBR,EAAK,YAAYQ,CAAK,EAElBb,EAAK,UAAU,SAAW,EAAG,CAC/B,IAAMc,EAAQ,SAAS,cAAc,KAAK,EAC1CA,EAAM,UAAY,WAClBA,EAAM,YAAc,sBACpBT,EAAK,YAAYS,CAAK,CACxB,KAAO,CACL,IAAMC,EAAO,SAAS,cAAc,IAAI,EACxCA,EAAK,UAAY,UACjB,OAAW,CAAE,KAAAC,EAAM,SAAAC,CAAS,IAAKjB,EAAK,UAAW,CAC/C,IAAMkB,EAAO,SAAS,cAAc,QAAQ,EAE5C,GADAA,EAAK,UAAY,UACbF,EAAK,KAAM,CACb,IAAMG,EAAO,SAAS,cAAc,KAAK,EACzCA,EAAK,UAAY,UACjBA,EAAK,IAAMH,EAAK,KAChBG,EAAK,IAAMH,EAAK,KAChBE,EAAK,YAAYC,CAAI,CACvB,CACA,IAAMC,EAAO,SAAS,cAAc,MAAM,EAC1CA,EAAK,YAAcJ,EAAK,KACxBE,EAAK,YAAYE,CAAI,EACrBF,EAAK,iBAAiB,QAAS,IAAM,CAAE,KAAK,QAAQ,EAAGlB,EAAK,SAASiB,CAAQ,CAAG,CAAC,EACjFF,EAAK,YAAYG,CAAI,CACvB,CACAb,EAAK,YAAYU,CAAI,CACvB,CAEA,IAAMM,EAAS,SAAS,cAAc,QAAQ,EAC9CA,EAAO,UAAY,YACnBA,EAAO,YAAc,SACrBA,EAAO,iBAAiB,QAAS,IAAM,CAAE,KAAK,QAAQ,EAAGrB,EAAK,SAAS,CAAG,CAAC,EAC3EK,EAAK,YAAYgB,CAAM,EAEvBlB,EAAS,YAAYE,CAAI,EACzB,KAAK,OAAO,YAAYH,CAAK,EAC7B,KAAK,OAAO,YAAYC,CAAQ,EAChC,SAAS,KAAK,YAAY,KAAK,IAAI,CACrC,CAEA,SAAU,CACR,KAAK,KAAK,OAAO,CACnB,CACF,EAEA,SAASmB,EAAUX,EAAU,8BAA+BY,EAA4B,OAAQ,CAC9F,IAAMC,EAAKD,IAAY,QAAU,UAAY,UACvCE,EAAO,SAAS,cAAc,KAAK,EACnCC,EAASD,EAAK,aAAa,CAAE,KAAM,QAAS,CAAC,EACnDC,EAAO,UAAY,oGAAoGF,CAAE,kTAAkTb,CAAO,SAClb,SAAS,KAAK,YAAYc,CAAI,EAC9B,WAAW,IAAMA,EAAK,OAAO,EAAG,GAAI,CACtC,CAIA,SAASE,EAAgBC,EAA4B,CAEnD,OADe,KAAK,OAAO,aAAa,GAAGA,CAAM,CAAC,EACpC,QAAQ,MAAO,GAAG,EAAE,QAAQ,MAAO,GAAG,EAAE,QAAQ,KAAM,EAAE,CACxE,CAEA,eAAeC,GAAwC,CACrD,IAAMC,EAAQ,IAAI,WAAW,EAAE,EAC/B,cAAO,gBAAgBA,CAAK,EACrBH,EAAgBG,CAAK,CAC9B,CAEA,eAAeC,EAAsBC,EAAmC,CAEtE,IAAMvB,EADU,IAAI,YAAY,EACX,OAAOuB,CAAQ,EAC9BC,EAAS,MAAM,OAAO,OAAO,OAAO,UAAWxB,CAAI,EACzD,OAAOkB,EAAgB,IAAI,WAAWM,CAAM,CAAC,CAC/C,CAEA,SAASC,GAAwB,CAC/B,IAAMJ,EAAQ,IAAI,WAAW,EAAE,EAC/B,cAAO,gBAAgBA,CAAK,EACrBH,EAAgBG,CAAK,CAC9B,CAEA,IAAMK,EAAN,cAAkC,KAAM,CACtC,YAAYxB,EAAiB,CAC3B,MAAMA,CAAO,EACb,KAAK,KAAO,qBACd,CACF,EAEayB,EAAN,KAAc,CACX,KACA,UACA,QACA,KACA,OACA,MAAuB,KACvB,SAA8B,KAC9B,oBAA+C,CAAC,EAChD,aAA8B,KAEtC,YAAYC,EAAwB,CAAC,EAAG,CACtC,KAAK,OAASA,EACd,KAAK,KAAOA,EAAO,MAAQC,EAC3B,KAAK,UAAYD,EAAO,WAAa,KAAK,gBAAgB,KAAK,IAAI,EACnE,KAAK,QAAUA,EAAO,SAAW,OAAO,SAAS,SACjD,KAAK,KAAOA,EAAO,MAAQ,SAGvB,OAAO,OAAW,MACpB,KAAK,oBAAsB,CAAC,EAC5B,OAAO,iBAAiB,2BAA6B7B,GAAe,CAClE,KAAK,oBAAoB,KAAKA,EAAM,MAAM,CAC5C,CAAC,EACD,OAAO,cAAc,IAAI,MAAM,yBAAyB,CAAC,EAE7D,CAOQ,gBAAgB+B,EAAsB,CAC5C,GAAI,CACF,IAAMC,EAAM,IAAI,IAAID,CAAI,EACxB,OAAAC,EAAI,SAAW,OAASA,EAAI,SACrBA,EAAI,SAAS,EAAE,QAAQ,MAAO,EAAE,CACzC,MAAQ,CACN,MAAO,wBACT,CACF,CAMA,MAAM,QAAQxC,EAAoD,CAChE,IAAMyC,EAAS,MAAM,KAAK,SAAqB,UAAW,CACxD,KAAM,uBACN,QAAS,KAAK,OAChB,EAAGzC,GAAM,IAAI,EACb,YAAK,SAAWyC,EACTA,CACT,CAMA,MAAM,WAAWzC,EAA4E,CAC3F,OAAO,KAAK,SAA6C,cAAe,CACtE,KAAM,6BACR,EAAGA,GAAM,IAAI,CACf,CAMA,MAAM,YAAY0C,EAA6B1C,EAAoD,CACjG,OAAI,KAAK,UAAU,UAAY,WACtB,KAAK,uBAAuB0C,CAAO,EAErC,KAAK,gBAAgBA,EAAS1C,GAAM,IAAI,CACjD,CAMA,MAAM,cAAc0C,EAA+B1C,EAAoD,CACrG,OAAI,KAAK,UAAU,UAAY,WACtB,KAAK,gCAAgC0C,CAAO,EAE9C,KAAK,yBAAyBA,EAAS1C,GAAM,IAAI,CAC1D,CAMA,MAAM,mBAAmB2C,EAAiD,CAExE,GAAI,KAAK,OAAO,iBACd,OAAO,KAAK,OAAO,iBAIrB,OAAW,CAAE,SAAA1B,CAAS,IAAK,KAAK,oBAC9B,GAAI,CAEF,IADiB,MAAMA,EAAS,QAAQ,CAAE,OAAQ,cAAe,CAAC,GACrD,KAAK2B,GAAKA,EAAE,YAAY,IAAMD,EAAc,YAAY,CAAC,EACpE,OAAO1B,CAEX,MAAQ,CAAC,CAIX,GAAI,OAAO,OAAW,KAAgB,OAAe,SAAU,CAC7D,IAAMA,EAAY,OAAe,SACjC,GAAI,CAEF,IADiB,MAAMA,EAAS,QAAQ,CAAE,OAAQ,cAAe,CAAC,GACrD,KAAK2B,GAAKA,EAAE,YAAY,IAAMD,EAAc,YAAY,CAAC,EACpE,OAAO1B,CAEX,MAAQ,CAAC,CACX,CAEA,MAAM,IAAIkB,EAAoB,iFAAiF,CACjH,CAEA,MAAc,uBAAuBO,EAAkD,CACrF,IAAIzB,EACJ,GAAI,CACFA,EAAW,MAAM,KAAK,mBAAmB,KAAK,SAAU,OAAO,CACjE,OAASb,EAAG,CACV,MAAAkB,EAAWlB,EAAY,QAAS,OAAO,EACjCA,CACR,CACA,GAAI,CACF,IAAMyC,EAAa,KAAK,MAAMH,EAAQ,OAAO,EAK7C,MAAO,CAAE,UAJS,MAAMzB,EAAS,QAAQ,CACvC,OAAQ,gBACR,OAAQ,CAAC4B,EAAY,KAAK,SAAU,OAAO,CAC7C,CAAC,EACwC,QAAS,KAAK,SAAU,OAAQ,CAC3E,OAASzC,EAAQ,CACf,IAAM0C,EAAM1C,GAAG,SAAS,SAAS,qBAAqB,EAClD,oFACAA,GAAG,SAAW,iBAClB,MAAAkB,EAAUwB,EAAK,OAAO,EAChB,IAAI,MAAMA,CAAG,CACrB,CACF,CAEA,MAAc,gCAAgCJ,EAAoD,CAChG,IAAIzB,EACJ,GAAI,CACFA,EAAW,MAAM,KAAK,mBAAmB,KAAK,SAAU,OAAO,CACjE,OAASb,EAAG,CACV,MAAAkB,EAAWlB,EAAY,QAAS,OAAO,EACjCA,CACR,CACA,GAAI,CAKF,MAAO,CAAE,UAJS,MAAMa,EAAS,QAAQ,CACvC,OAAQ,uBACR,OAAQ,CAAC,KAAK,SAAU,QAAS,KAAK,UAAUyB,CAAO,CAAC,CAC1D,CAAC,EACwC,QAAS,KAAK,SAAU,OAAQ,CAC3E,OAAStC,EAAQ,CACf,IAAM0C,EAAM1C,GAAG,SAAS,SAAS,qBAAqB,EAClD,oFACAA,GAAG,SAAW,iBAClB,MAAAkB,EAAUwB,EAAK,OAAO,EAChB,IAAI,MAAMA,CAAG,CACrB,CACF,CAEQ,gBAAgBJ,EAA6BK,EAAyC,CAC5F,OAAO,KAAK,SAAqB,OAAQ,CACvC,KAAM,uBACN,QAASL,EAAQ,QACjB,MAAOA,EAAQ,MACf,aAAc,KAAK,cAAgB,MACrC,EAAGK,CAAI,CACT,CAEQ,yBAAyBL,EAA+BK,EAAyC,CACvG,OAAO,KAAK,SAAqB,kBAAmB,CAClD,KAAM,gCACN,KAAML,EACN,aAAc,KAAK,cAAgB,MACrC,EAAGK,CAAI,CACT,CAEQ,MAAMC,EAAqB,CACjC,MAAO,KAAO,MAAM,KAAK,IAAI,YAAY,EAAE,OAAOA,CAAG,CAAC,EAAE,IAAIC,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,CAC3G,CAKA,MAAM,aAAgC,CAEpC,GAAI,CACF,IAAMC,EAAM,MAAM,MAAM,GAAG,KAAK,IAAI,oBAAqB,CACvD,YAAa,SACf,CAAC,EACD,OAAKA,EAAI,GAEF,CAAC,EADK,MAAMA,EAAI,KAAK,GACd,KAFM,EAGtB,MAAQ,CACN,MAAO,EACT,CACF,CAQA,MAAQ,CAMN,QAAS,MAAOb,GAA8C,CAE5D,IAAML,EAAW,MAAMH,EAAqB,EACtCsB,EAAY,MAAMpB,EAAsBC,CAAQ,EAChDoB,EAAQf,EAAO,OAASH,EAAc,EAG5C,eAAe,QACbpC,EACA,KAAK,UAAU,CAAE,SAAAkC,EAAU,MAAAoB,CAAM,CAAC,CACpC,EAGA,IAAMC,EAAU,IAAI,IAAI,GAAG,KAAK,SAAS,4BAA4B,EACrE,OAAAA,EAAQ,aAAa,IAAI,YAAahB,EAAO,QAAQ,EACrDgB,EAAQ,aAAa,IAAI,eAAgBhB,EAAO,WAAW,EAC3DgB,EAAQ,aAAa,IAAI,gBAAiB,MAAM,EAChDA,EAAQ,aAAa,IAAI,QAAS,QAAQ,EAC1CA,EAAQ,aAAa,IAAI,QAASD,CAAK,EACvCC,EAAQ,aAAa,IAAI,iBAAkBF,CAAS,EACpDE,EAAQ,aAAa,IAAI,wBAAyB,MAAM,EAEjD,KAAK,cAAcA,EAAQ,SAAS,EAAGD,EAAOf,EAAO,WAAW,CACzE,EASA,aAAc,MACZiB,EACAjB,IACgC,CAChC,IAAMkB,EAAS,eAAe,QAAQzD,CAAiB,EACvD,GAAI,CAACyD,EACH,MAAM,IAAI,MAAM,iDAAiD,EAGnE,GAAM,CAAE,SAAAvB,CAAS,EAAI,KAAK,MAAMuB,CAAM,EAEhCC,EAAW,MAAM,MAAM,GAAG,KAAK,SAAS,yBAA0B,CACtE,OAAQ,OACR,QAAS,CACP,eAAgB,mCAClB,EACA,KAAM,IAAI,gBAAgB,CACxB,WAAY,qBACZ,KAAAF,EACA,aAAcjB,EAAO,YACrB,UAAWA,EAAO,SAClB,cAAeL,CACjB,CAAC,CACH,CAAC,EAKD,GAFA,eAAe,WAAWlC,CAAiB,EAEvC,CAAC0D,EAAS,GAAI,CAChB,IAAMC,EAAQ,MAAMD,EAAS,KAAK,EAClC,MAAM,IAAI,MAAMC,EAAM,mBAAqB,uBAAuB,CACpE,CAEA,OAAOD,EAAS,KAAK,CACvB,EAQA,YAAcE,GAAmC,CAC/C,IAAMH,EAAS,eAAe,QAAQzD,CAAiB,EACvD,GAAI,CAACyD,EAAQ,MAAO,GACpB,GAAM,CAAE,MAAAH,CAAM,EAAI,KAAK,MAAMG,CAAM,EACnC,OAAOH,IAAUM,CACnB,EAOA,cACElB,GACmF,CACnF,IAAMmB,EAAS,IAAI,IAAInB,GAAO,OAAO,SAAS,IAAI,EAC5CiB,EAAQE,EAAO,aAAa,IAAI,OAAO,EAE7C,GAAIF,EACF,MAAO,CACL,MAAAA,EACA,iBAAkBE,EAAO,aAAa,IAAI,mBAAmB,GAAK,MACpE,EAGF,IAAML,EAAOK,EAAO,aAAa,IAAI,MAAM,EACrCP,EAAQO,EAAO,aAAa,IAAI,OAAO,EAE7C,MAAI,CAACL,GAAQ,CAACF,EACL,CAAE,MAAO,iBAAkB,iBAAkB,iCAAkC,EAGjF,CAAE,KAAAE,EAAM,MAAAF,CAAM,CACvB,CACF,EAEQ,cACNZ,EACAY,EACAQ,EACsB,CACtB,OAAO,IAAI,QAAQ,CAACC,EAASC,IAAW,CAClC,KAAK,OAAS,WAChB,KAAK,eAAetB,EAAKY,EAAOQ,EAAaC,EAASC,CAAM,EAG5D,OAAO,SAAS,KAAOtB,CAE3B,CAAC,CACH,CAEQ,eACNA,EACAY,EACAQ,EACAC,EACAC,EACA,CACA,IAAMC,EAAO,OAAO,SAAW,OAAO,WAAa,KAAe,EAC5DC,EAAM,OAAO,SAAW,OAAO,YAAc,KAAgB,EAQnE,GANA,KAAK,MAAQ,OAAO,KAClBxB,EACA,gBACA,6BAAoDuB,CAAI,QAAQC,CAAG,aACrE,EAEI,CAAC,KAAK,MAAO,CACfF,EAAO,CACL,KAAM,gBACN,QAAS,8DACX,CAAC,EACD,MACF,CAEA,IAAMG,EAAe,IAAI,IAAIL,CAAW,EAAE,OAGpCM,EAAe,YAAY,IAAM,CACrC,GAAI,CACF,GAAI,KAAK,OAAO,OAAQ,CACtB,cAAcA,CAAY,EAC1B,aAAaC,CAAO,EACpBL,EAAO,CACL,KAAM,iBACN,QAAS,uBACX,CAAC,EACD,MACF,CAGA,IAAMM,EAAW,KAAK,OAAO,UAAU,KACvC,GAAIA,GAAYA,EAAS,WAAWH,CAAY,EAAG,CACjD,cAAcC,CAAY,EAC1B,aAAaC,CAAO,EAEpB,IAAMR,EAAS,IAAI,IAAIS,CAAQ,EACzBd,EAAOK,EAAO,aAAa,IAAI,MAAM,EACrCU,EAAgBV,EAAO,aAAa,IAAI,OAAO,EAC/CF,EAAQE,EAAO,aAAa,IAAI,OAAO,EAI7C,GAFA,KAAK,OAAO,MAAM,EAEdF,EAAO,CACTK,EAAO,CACL,KAAM,eACN,QAASH,EAAO,aAAa,IAAI,mBAAmB,GAAKF,CAC3D,CAAC,EACD,MACF,CAEA,GAAIY,IAAkBjB,EAAO,CAC3BU,EAAO,CACL,KAAM,iBACN,QAAS,uCACX,CAAC,EACD,MACF,CAEIR,EACFO,EAAQ,CAAE,KAAAP,EAAM,MAAOe,CAAc,CAAC,EAEtCP,EAAO,CACL,KAAM,eACN,QAAS,yCACX,CAAC,CAEL,CACF,MAAQ,CAER,CACF,EAAG,GAAG,EAGAK,EAAU,WAAW,IAAM,CAC/B,cAAcD,CAAY,EAC1B,KAAK,OAAO,MAAM,EAClBJ,EAAO,CACL,KAAM,UACN,QAAS,sBACX,CAAC,CACH,EAAG,GAAe,CACpB,CAEQ,YAAYQ,EAAqC,CACvD,OAAOA,GAAY,KAAK,IAC1B,CAEA,MAAc,SAAYC,EAAgB5D,EAAiB6D,EAAwC,CACjG,IAAMzB,EAAO,KAAK,YAAYyB,CAAY,EACpCC,EAAS,mBAAmB,OAAO,SAAS,MAAM,EAExD,GAAI1B,IAAS,QAAS,CACpB,IAAMP,EAAM,GAAG,KAAK,IAAI,WAAW+B,CAAM,WAAWE,CAAM,GAC1D,OAAO,IAAI,QAAQ,CAACZ,EAASC,IAAW,KAAK,UAAUtB,EAAK7B,EAASkD,EAASC,CAAM,CAAC,CACvF,CAEA,GAAIf,IAAS,WAAY,CACvB,IAAMP,EAAM,GAAG,KAAK,IAAI,WAAW+B,CAAM,WAAWE,CAAM,GAC1D,cAAO,SAAS,KAAOjC,EAChB,IAAI,QAAQ,IAAM,CAAC,CAAC,CAC7B,CAGA,IAAMA,EAAM,GAAG,KAAK,IAAI,iBAAiB+B,CAAM,WAAWE,CAAM,GAChE,OAAO,KAAK,gBAAmBjC,EAAK+B,EAAQ5D,EAAS8D,CAAM,CAC7D,CAEQ,gBAAmBjC,EAAa+B,EAAgB5D,EAAiB8D,EAA4B,CACnG,OAAO,IAAI,QAAQ,CAACZ,EAASC,IAAW,CACtC,IAAIY,EAAgB,GAChBC,EAAU,GACVC,EAA4B,KAE1BC,EAAUC,GAAmB,CAC7BH,IACJA,EAAU,GACVG,EAAG,EACL,EAEMC,EAAU,IAAM,CACpB,aAAaC,CAAY,EACzB,aAAaC,CAAc,EAC3BL,GAAO,QAAQ,EACfA,EAAQ,IACV,EAEAA,EAAQ,IAAI7E,EAAY,CACtB,IAAAyC,EACA,KAAM,KAAK,KACX,QAAS,IAAM,CACbqC,EAAO,IAAM,CACX,aAAaG,CAAY,EACzB,aAAaC,CAAc,EAC3BL,EAAQ,KACRd,EAAO,CAAE,KAAM,iBAAkB,QAAS,4BAA6B,CAAiB,CAC1F,CAAC,CACH,EACA,UAAYrD,GAAsB,CAChC,GAAIA,EAAK,OAAS,gBAAiB,CACjCiE,EAAgB,GAChBE,GAAO,YAAYjE,CAAO,EAC1B,MACF,CAEA,GAAIF,EAAK,OAAS,gBAAiB,CACjCoE,EAAO,IAAM,CACXE,EAAQ,EACRjB,EAAO,CAAE,KAAM,iBAAkB,QAAS,4BAA6B,CAAiB,CAC1F,CAAC,EACD,MACF,CAEA,GAAIrD,EAAK,OAAS,+BAAgC,CAChD,KAAK,2BAA2BmE,CAAM,EACtC,MACF,EAGEnE,EAAK,OAAS,yBACdA,EAAK,OAAS,yBACdA,EAAK,OAAS,kCACdA,EAAK,OAAS,iCAEdoE,EAAO,IAAM,CACXE,EAAQ,EACJtE,EAAK,QACHA,EAAK,OAAS,yBACZA,EAAK,eAAc,KAAK,aAAeA,EAAK,cAChDoD,EAAQ,CAAE,QAASpD,EAAK,QAAS,MAAOA,EAAK,MAAO,QAASA,EAAK,SAAW,SAAU,CAAM,GACpFA,EAAK,OAAS,+BACvBoD,EAAQ,CAAE,QAASpD,EAAK,QAAS,MAAOA,EAAK,KAAM,CAAM,EAEzDoD,EAAQ,CAAE,UAAWpD,EAAK,UAAW,QAASA,EAAK,OAAQ,CAAM,EAGnEqD,EAAOrD,EAAK,KAAK,CAErB,CAAC,CAEL,CACF,CAAC,EAGD,IAAMuE,EAAe,WAAW,IAAM,CACpC,GAAIN,GAAiBC,EAAS,OAC9BI,EAAQ,EACR,QAAQ,KAAK,sGAAsG,EACnHzD,EAAU,EACV,IAAM8C,EAAW,GAAG,KAAK,IAAI,WAAWG,CAAM,WAAWE,CAAM,GAC/D,KAAK,UAAUL,EAAUzD,EAAUuE,GAAaL,EAAO,IAAMhB,EAAQqB,CAAG,CAAC,EAAIC,GAAaN,EAAO,IAAMf,EAAOqB,CAAG,CAAC,CAAC,CACrH,EAAG,GAAoB,EAGjBF,EAAiB,WAAW,IAAM,CACtCJ,EAAO,IAAM,CACXE,EAAQ,EACRjB,EAAO,CAAE,KAAM,UAAW,QAAS,mBAAoB,CAAiB,CAC1E,CAAC,CACH,EAAG,GAAe,CACpB,CAAC,CACH,CAEQ,2BAA2Bc,EAAoB,CACrD,IAAMQ,EAAc3C,GAAwBmC,EAAM,YAAYnC,CAAM,EAEpE,IAAI7B,EAAa,CACf,UAAW,KAAK,oBAChB,SAAU,IAAM,CACdwE,EAAW,CAAE,KAAM,6BAA8B,QAAS,GAAO,MAAO,CAAE,KAAM,iBAAkB,QAAS,0BAA2B,CAAE,CAAC,CAC3I,EACA,SAAU,MAAOnE,GAAa,CAC5B,GAAI,CAEF,IAAMoE,GADW,MAAMpE,EAAS,QAAQ,CAAE,OAAQ,qBAAsB,CAAC,GAChD,CAAC,EAC1B,GAAI,CAACoE,EAAS,MAAM,IAAI,MAAM,qBAAqB,EAGnD,IAAMC,EAAe,MAAM,MAAM,GAAG,KAAK,IAAI,2BAA4B,CACvE,OAAQ,OACR,YAAa,SACf,CAAC,EACD,GAAI,CAACA,EAAa,GAAI,MAAM,IAAI,MAAM,yBAAyB,EAC/D,GAAM,CAAE,QAAA3E,CAAQ,EAAI,MAAM2E,EAAa,KAAK,EAGtCzC,EAAa,KAAK,MAAMlC,CAAO,EAC/B4E,EAAY,MAAMtE,EAAS,QAAQ,CACvC,OAAQ,gBACR,OAAQ,CAAC4B,EAAYwC,CAAO,CAC9B,CAAC,EAGKG,EAAU,MAAM,MAAM,GAAG,KAAK,IAAI,iBAAkB,CACxD,OAAQ,OACR,QAAS,CAAE,eAAgB,kBAAmB,EAC9C,YAAa,UACb,KAAM,KAAK,UAAU,CAAE,QAAAH,EAAS,UAAAE,EAAW,QAAA5E,CAAQ,CAAC,CACtD,CAAC,EACD,GAAI,CAAC6E,EAAQ,GAAI,CACf,IAAML,EAAM,MAAMK,EAAQ,KAAK,EAC/B,MAAM,IAAI,MAAML,EAAI,OAAS,uBAAuB,CACtD,CACA,GAAM,CAAE,IAAAM,CAAI,EAAI,MAAMD,EAAQ,KAAK,EAEnCJ,EAAW,CAAE,KAAM,6BAA8B,QAAS,GAAM,QAASK,EAAI,QAAS,MAAOA,EAAI,EAAG,CAAC,CACvG,OAASrF,EAAQ,CACfgF,EAAW,CAAE,KAAM,6BAA8B,QAAS,GAAO,MAAO,CAAE,KAAM,UAAW,QAAShF,EAAE,SAAW,uBAAwB,CAAE,CAAC,CAC9I,CACF,CACF,CAAC,CACH,CAEQ,UACNoC,EACA7B,EACAkD,EACAC,EACA,CAEA,IAAMC,EAAO,OAAO,SAAW,OAAO,WAAa,KAAe,EAC5DC,EAAM,OAAO,SAAW,OAAO,YAAc,KAAgB,EAQnE,GANA,KAAK,MAAQ,OAAO,KAClBxB,EACA,UACA,6BAAoDuB,CAAI,QAAQC,CAAG,aACrE,EAEI,CAAC,KAAK,MAAO,CACfF,EAAO,CACL,KAAM,gBACN,QAAS,uDACX,CAAC,EACD,MACF,CAEA,IAAMiB,EAAU,IAAM,CACpB,OAAO,oBAAoB,UAAWW,CAAa,EACnD,cAAcC,CAAU,EACxB,aAAaxB,CAAO,CACtB,EAGMwB,EAAa,YAAY,IAAM,CAC/B,KAAK,OAAO,SACdZ,EAAQ,EACRjB,EAAO,CACL,KAAM,iBACN,QAAS,uBACX,CAAC,EAEL,EAAG,GAAG,EAGAK,EAAU,WAAW,IAAM,CAC/BY,EAAQ,EACR,KAAK,OAAO,MAAM,EAClBjB,EAAO,CACL,KAAM,UACN,QAAS,mBACX,CAAC,CACH,EAAG,GAAe,EAGZ4B,EAAiBlF,GAAwB,CAC7C,GAAIA,EAAM,SAAW,KAAK,KAAM,OAEhC,IAAMC,EAAOD,EAAM,KAEnB,GAAIC,EAAK,OAAS,gBAAiB,CAEjC,KAAK,OAAO,YAAYE,EAAS,KAAK,IAAI,EAC1C,MACF,CAEA,GAAIF,EAAK,OAAS,gBAAiB,CACjCsE,EAAQ,EACR,KAAK,OAAO,MAAM,EAClBjB,EAAO,CACL,KAAM,iBACN,QAAS,4BACX,CAAC,EACD,MACF,EAIErD,EAAK,OAAS,yBACdA,EAAK,OAAS,yBACdA,EAAK,OAAS,kCACdA,EAAK,OAAS,kCAEdsE,EAAQ,EACR,KAAK,OAAO,MAAM,EAEdtE,EAAK,QACHA,EAAK,OAAS,yBACZA,EAAK,eAAc,KAAK,aAAeA,EAAK,cAChDoD,EAAQ,CAAE,QAASpD,EAAK,QAAS,MAAOA,EAAK,MAAO,QAASA,EAAK,SAAW,SAAU,CAAM,GACpFA,EAAK,OAAS,+BACvBoD,EAAQ,CAAE,QAASpD,EAAK,QAAS,MAAOA,EAAK,KAAM,CAAM,EAEzDoD,EAAQ,CAAE,UAAWpD,EAAK,UAAW,QAASA,EAAK,OAAQ,CAAM,EAGnEqD,EAAOrD,EAAK,KAAK,EAGvB,EAEA,OAAO,iBAAiB,UAAWiF,CAAa,CAClD,CAKA,YAAa,CACX,KAAK,OAAO,MAAM,EAClB,KAAK,MAAQ,IACf,CACF,EAOaE,EAAN,KAAwD,CACrD,QACA,QACA,MACA,QAER,YAAYC,EAAkBC,EAAwB,CACpD,KAAK,QAAUD,EACf,KAAK,QAAUC,EAAW,QAC1B,KAAK,MAAQA,EAAW,MACxB,KAAK,QAAUA,EAAW,OAC5B,CAEA,MAAM,QAAQ,CAAE,OAAAC,EAAQ,OAAAC,CAAO,EAAqD,CAClF,OAAQD,EAAQ,CACd,IAAK,eACL,IAAK,sBACH,MAAO,CAAC,KAAK,OAAO,EAEtB,IAAK,cACH,MAAO,MAET,IAAK,gBAAiB,CACpB,GAAI,KAAK,UAAY,WACnB,GAAI,CAEF,OAAO,MADU,MAAM,KAAK,QAAQ,mBAAmB,KAAK,OAAO,GAC7C,QAAQ,CAAE,OAAAA,EAAQ,OAAAC,CAAO,CAAC,CAClD,OAAS5F,EAAQ,CACf,MAAAkB,EAAUlB,GAAG,SAAW,iCAAkC,OAAO,EAC3DA,CACR,CAGF,IAAMO,EAAU,KAAK,YAAYqF,EAAQ,CAAC,CAAW,EAErD,OADe,MAAM,KAAK,QAAQ,YAAY,CAAE,QAAArF,EAAS,MAAO,KAAK,KAAM,CAAC,GAC9D,SAChB,CAEA,IAAK,uBAAwB,CAC3B,GAAI,KAAK,UAAY,WACnB,GAAI,CAEF,OAAO,MADU,MAAM,KAAK,QAAQ,mBAAmB,KAAK,OAAO,GAC7C,QAAQ,CAAE,OAAAoF,EAAQ,OAAAC,CAAO,CAAC,CAClD,OAAS5F,EAAQ,CACf,MAAAkB,EAAUlB,GAAG,SAAW,iCAAkC,OAAO,EAC3DA,CACR,CAEF,IAAMK,EAAO,KAAK,MAAMuF,EAAQ,CAAC,CAAW,EAE5C,OADe,MAAM,KAAK,QAAQ,cAAcvF,CAAI,GACtC,SAChB,CAEA,QACE,MAAM,IAAI,MAAM,uBAAuBsF,CAAM,EAAE,CACnD,CACF,CAEQ,YAAYE,EAAqB,CACvC,IAAMC,EAAQ,IAAI,YACfD,EAAI,WAAW,IAAI,EAAIA,EAAI,MAAM,CAAC,EAAIA,GAAK,MAAM,SAAS,EAAG,IAAIhD,GAAK,SAASA,EAAG,EAAE,CAAC,CACxF,EACA,OAAO,IAAI,YAAY,EAAE,OAAOiD,CAAK,CACvC,CACF,EAGOC,EAAQ/D,EAGXgE,EAAkC,KAE/B,SAASC,EAAWhE,EAAiC,CAC1D,OAAI,CAAC+D,GAAmB/D,KACtB+D,EAAkB,IAAIhE,EAAQC,CAAM,GAE/B+D,CACT","names":["DEFAULT_HOST","OAUTH_STORAGE_KEY","IframeModal","opts","isMobile","style","backdrop","e","card","handle","closeBtn","event","data","h","message","WalletPicker","title","empty","list","info","provider","item","icon","name","cancel","showToast","variant","bg","root","shadow","base64UrlEncode","buffer","generateCodeVerifier","array","generateCodeChallenge","verifier","digest","generateState","ExternalWalletError","OpenKey","config","DEFAULT_HOST","host","url","result","request","targetAddress","a","hexMessage","msg","mode","str","b","res","challenge","state","authUrl","code","stored","response","error","receivedState","urlObj","redirectUri","resolve","reject","left","top","redirectHost","pollInterval","timeout","popupUrl","returnedState","override","action","modeOverride","origin","readyReceived","settled","modal","settle","fn","cleanup","readyTimeout","overallTimeout","val","err","sendResult","address","challengeRes","signature","linkRes","key","handleMessage","pollClosed","OpenKeyEIP1193Provider","openkey","authResult","method","params","hex","bytes","index_default","defaultInstance","getOpenKey"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openkey/sdk",
-  "version": "0.3.0",
+  "version": "0.5.0",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",
   "types": "./dist/index.d.ts",