@openkey/sdk 0.8.0 → 0.8.2

package/dist/index.js

@@ -1,20 +1,139 @@
-"use strict";var P=Object.defineProperty;var I=Object.getOwnPropertyDescriptor;var M=Object.getOwnPropertyNames;var S=Object.prototype.hasOwnProperty;var R=(h,e)=>{for(var t in e)P(h,t,{get:e[t],enumerable:!0})},N=(h,e,t,s)=>{if(e&&typeof e=="object"||typeof e=="function")for(let r of M(e))!S.call(h,r)&&r!==t&&P(h,r,{get:()=>e[r],enumerable:!(s=I(e,r))||s.enumerable});return h};var D=h=>N(P({},"__esModule",{value:!0}),h);var q={};R(q,{OpenKey:()=>w,OpenKeyEIP1193Provider:()=>_,OpenKeyProvider:()=>T,default:()=>K,getOpenKey:()=>$});module.exports=D(q);var y=require("@openkey/core"),L="https://openkey.so",k=400,v=600,b=300*1e3,U=3e3,E="openkey_oauth",O=class{root;shadow;iframe;onClose;onMessage;messageHandler;host;constructor(e){this.host=e.host,this.onClose=e.onClose,this.onMessage=e.onMessage;let t=window.matchMedia("(max-width: 639px)").matches;this.root=document.createElement("div"),this.shadow=this.root.attachShadow({mode:"closed"});let s=document.createElement("style");s.textContent=`
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  OpenKey: () => OpenKey,
+  OpenKeyProvider: () => OpenKeyProvider,
+  default: () => index_default,
+  getOpenKey: () => getOpenKey
+});
+module.exports = __toCommonJS(index_exports);
+var import_core = require("@openkey/core");
+var DEFAULT_HOST = "https://openkey.so";
+var POPUP_WIDTH = 400;
+var POPUP_HEIGHT = 600;
+var DEFAULT_TIMEOUT = 5 * 60 * 1e3;
+var IFRAME_READY_TIMEOUT = 3e3;
+var OAUTH_STORAGE_KEY = "openkey_oauth";
+var IframeModal = class {
+  root;
+  shadow;
+  iframe;
+  onClose;
+  onMessage;
+  messageHandler;
+  host;
+  constructor(opts) {
+    this.host = opts.host;
+    this.onClose = opts.onClose;
+    this.onMessage = opts.onMessage;
+    const isMobile = window.matchMedia("(max-width: 639px)").matches;
+    this.root = document.createElement("div");
+    this.shadow = this.root.attachShadow({ mode: "closed" });
+    const style = document.createElement("style");
+    style.textContent = `
       :host{all:initial}
-      .ok-backdrop{position:fixed;inset:0;background:rgba(0,0,0,0.4);backdrop-filter:blur(4px);z-index:999999;display:flex;align-items:${t?"flex-end":"center"};justify-content:center;animation:ok-fade-in 150ms ease-out}
-      .ok-card{position:relative;background:#fafafa;width:${t?"100%":"400px"};border-radius:${t?"16px 16px 0 0":"16px"};box-shadow:0 25px 50px -12px rgba(0,0,0,0.25);overflow:hidden;overflow-y:auto;animation:${t?"ok-slide-up 250ms ease-out":"ok-scale-in 200ms ease-out"};max-height:90vh}
+      .ok-backdrop{position:fixed;inset:0;background:rgba(0,0,0,0.4);backdrop-filter:blur(4px);z-index:999999;display:flex;align-items:${isMobile ? "flex-end" : "center"};justify-content:center;animation:ok-fade-in 150ms ease-out}
+      .ok-card{position:relative;background:#fafafa;width:${isMobile ? "100%" : "400px"};border-radius:${isMobile ? "16px 16px 0 0" : "16px"};box-shadow:0 25px 50px -12px rgba(0,0,0,0.25);overflow:hidden;overflow-y:auto;animation:${isMobile ? "ok-slide-up 250ms ease-out" : "ok-scale-in 200ms ease-out"};max-height:90vh}
       .ok-close{position:absolute;top:8px;right:8px;width:24px;height:24px;border:none;background:transparent;color:#6b7280;font-size:18px;cursor:pointer;z-index:1;display:flex;align-items:center;justify-content:center;border-radius:4px}
       .ok-close:hover{color:#111827}
       .ok-handle{width:40px;height:4px;background:#d4d4d4;border-radius:2px;margin:8px auto 0}
       iframe{border:none;width:100%;height:400px;display:block;transition:height 200ms ease}
       .ok-backdrop.ok-exit{animation:ok-fade-out 150ms ease-in}
-      .ok-backdrop.ok-exit .ok-card{animation:${t?"ok-slide-down 200ms ease-in":"ok-scale-out 150ms ease-in"}}
+      .ok-backdrop.ok-exit .ok-card{animation:${isMobile ? "ok-slide-down 200ms ease-in" : "ok-scale-out 150ms ease-in"}}
       @keyframes ok-fade-in{from{opacity:0}to{opacity:1}}
       @keyframes ok-fade-out{from{opacity:1}to{opacity:0}}
       @keyframes ok-scale-in{from{opacity:0;transform:scale(0.95)}to{opacity:1;transform:scale(1)}}
       @keyframes ok-scale-out{from{opacity:1;transform:scale(1)}to{opacity:0;transform:scale(0.95)}}
       @keyframes ok-slide-up{from{transform:translateY(100%)}to{transform:translateY(0)}}
       @keyframes ok-slide-down{from{transform:translateY(0)}to{transform:translateY(100%)}}
-    `;let r=document.createElement("div");r.className="ok-backdrop",r.addEventListener("click",i=>{i.target===r&&this.close()});let o=document.createElement("div");if(o.className="ok-card",t){let i=document.createElement("div");i.className="ok-handle",o.appendChild(i)}let a=document.createElement("button");a.className="ok-close",a.textContent="\xD7",a.addEventListener("click",()=>this.close()),o.appendChild(a),this.iframe=document.createElement("iframe"),this.iframe.src=e.url,this.iframe.setAttribute("allow","publickey-credentials-get *; publickey-credentials-create *"),this.iframe.setAttribute("sandbox","allow-scripts allow-same-origin allow-forms allow-popups"),o.appendChild(this.iframe),r.appendChild(o),this.shadow.appendChild(s),this.shadow.appendChild(r),this.messageHandler=i=>{if(i.origin!==this.host||i.source!==this.iframe.contentWindow)return;let c=i.data;if(c.type==="openkey:resize"){let l=Math.min(c.height,Math.floor(window.innerHeight*.85));this.iframe.style.height=`${l}px`;return}this.onMessage(c)},window.addEventListener("message",this.messageHandler),document.body.appendChild(this.root)}postMessage(e){this.iframe.contentWindow?.postMessage(e,this.host)}destroy(){window.removeEventListener("message",this.messageHandler),this.root.remove()}close(){let e=this.shadow.querySelector(".ok-backdrop");e?(e.classList.add("ok-exit"),setTimeout(()=>{this.destroy(),this.onClose()},200)):(this.destroy(),this.onClose())}},x=class{root;shadow;constructor(e){this.root=document.createElement("div"),this.shadow=this.root.attachShadow({mode:"closed"});let t=document.createElement("style");t.textContent=`
+    `;
+    const backdrop = document.createElement("div");
+    backdrop.className = "ok-backdrop";
+    backdrop.addEventListener("click", (e) => {
+      if (e.target === backdrop) this.close();
+    });
+    const card = document.createElement("div");
+    card.className = "ok-card";
+    if (isMobile) {
+      const handle = document.createElement("div");
+      handle.className = "ok-handle";
+      card.appendChild(handle);
+    }
+    const closeBtn = document.createElement("button");
+    closeBtn.className = "ok-close";
+    closeBtn.textContent = "\xD7";
+    closeBtn.addEventListener("click", () => this.close());
+    card.appendChild(closeBtn);
+    this.iframe = document.createElement("iframe");
+    this.iframe.src = opts.url;
+    this.iframe.setAttribute("allow", "publickey-credentials-get *; publickey-credentials-create *");
+    this.iframe.setAttribute("sandbox", "allow-scripts allow-same-origin allow-forms allow-popups");
+    card.appendChild(this.iframe);
+    backdrop.appendChild(card);
+    this.shadow.appendChild(style);
+    this.shadow.appendChild(backdrop);
+    this.messageHandler = (event) => {
+      if (event.origin !== this.host) return;
+      if (event.source !== this.iframe.contentWindow) return;
+      const data = event.data;
+      if (data.type === "openkey:resize") {
+        const h = Math.min(data.height, Math.floor(window.innerHeight * 0.85));
+        this.iframe.style.height = `${h}px`;
+        return;
+      }
+      this.onMessage(data);
+    };
+    window.addEventListener("message", this.messageHandler);
+    document.body.appendChild(this.root);
+  }
+  postMessage(message) {
+    this.iframe.contentWindow?.postMessage(message, this.host);
+  }
+  destroy() {
+    window.removeEventListener("message", this.messageHandler);
+    this.root.remove();
+  }
+  close() {
+    const backdrop = this.shadow.querySelector(".ok-backdrop");
+    if (backdrop) {
+      backdrop.classList.add("ok-exit");
+      setTimeout(() => {
+        this.destroy();
+        this.onClose();
+      }, 200);
+    } else {
+      this.destroy();
+      this.onClose();
+    }
+  }
+};
+var WalletPicker = class {
+  root;
+  shadow;
+  constructor(opts) {
+    this.root = document.createElement("div");
+    this.shadow = this.root.attachShadow({ mode: "closed" });
+    const style = document.createElement("style");
+    style.textContent = `
       :host{all:initial}
       .wp-backdrop{position:fixed;inset:0;background:rgba(0,0,0,0.4);backdrop-filter:blur(4px);z-index:1000000;display:flex;align-items:center;justify-content:center;animation:wp-fade 150ms ease-out}
       .wp-card{background:#fff;width:340px;border-radius:16px;box-shadow:0 25px 50px -12px rgba(0,0,0,0.25);padding:20px;animation:wp-scale 200ms ease-out}
@@ -37,5 +156,771 @@
         .wp-cancel{color:#9ca3af}
         .wp-cancel:hover{background:#262626;color:#f3f4f6}
       }
-    `;let s=document.createElement("div");s.className="wp-backdrop",s.addEventListener("click",i=>{i.target===s&&(this.destroy(),e.onCancel())});let r=document.createElement("div");r.className="wp-card";let o=document.createElement("h2");if(o.className="wp-title",o.textContent="Select a wallet",r.appendChild(o),e.providers.length===0){let i=document.createElement("div");i.className="wp-empty",i.textContent="No wallets detected",r.appendChild(i)}else{let i=document.createElement("ul");i.className="wp-list";for(let{info:c,provider:l}of e.providers){let p=document.createElement("button");if(p.className="wp-item",c.icon){let n=document.createElement("img");n.className="wp-icon",n.src=c.icon,n.alt=c.name,p.appendChild(n)}let u=document.createElement("span");u.textContent=c.name,p.appendChild(u),p.addEventListener("click",()=>{this.destroy(),e.onSelect(l)}),i.appendChild(p)}r.appendChild(i)}let a=document.createElement("button");a.className="wp-cancel",a.textContent="Cancel",a.addEventListener("click",()=>{this.destroy(),e.onCancel()}),r.appendChild(a),s.appendChild(r),this.shadow.appendChild(t),this.shadow.appendChild(s),document.body.appendChild(this.root)}destroy(){this.root.remove()}};function g(h="Opening in new window\u2026",e="info"){let t=e==="error"?"#dc2626":"#1f2937",s=document.createElement("div"),r=s.attachShadow({mode:"closed"});r.innerHTML=`<style>:host{all:initial}.ok-toast{position:fixed;top:16px;right:16px;z-index:1000000;background:${t};color:#f9fafb;padding:10px 16px;border-radius:8px;font:14px/1.4 system-ui,sans-serif;box-shadow:0 4px 12px rgba(0,0,0,0.15);animation:ok-t-in 200ms ease-out;max-width:360px}@keyframes ok-t-in{from{opacity:0;transform:translateY(-8px)}to{opacity:1;transform:translateY(0)}}</style><div class="ok-toast">${h}</div>`,document.body.appendChild(s),setTimeout(()=>s.remove(),4e3)}var A=class extends Error{constructor(e){super(e),this.name="ExternalWalletError"}},w=class{host;oauthHost;appName;mode;config;popup=null;lastAuth=null;discoveredProviders=[];sessionToken=null;constructor(e={}){this.config=e,this.host=e.host||L,this.oauthHost=e.oauthHost||this.deriveOAuthHost(this.host),this.appName=e.appName||window.location.hostname,this.mode=e.mode??"iframe",typeof window<"u"&&(this.discoveredProviders=[],window.addEventListener("eip6963:announceProvider",t=>{this.discoveredProviders.push(t.detail)}),window.dispatchEvent(new Event("eip6963:requestProvider")))}deriveOAuthHost(e){try{let t=new URL(e);return t.hostname==="localhost"||t.hostname==="127.0.0.1"?e.replace(/\/$/,""):(t.hostname="api."+t.hostname,t.toString().replace(/\/$/,""))}catch{return"https://api.openkey.so"}}async connect(e){let t=await this.openFlow("connect",{type:"openkey:auth:request",appName:this.appName},e?.mode);return this.lastAuth=t,t}async linkWallet(e){return this.openFlow("link-wallet",{type:"openkey:link-wallet:request"},e?.mode)}async signMessage(e,t){return this.lastAuth?.keyType==="EXTERNAL"?this.signWithExternalWallet(e):this.signWithOpenKey(e,t?.mode)}async signTypedData(e,t){return this.lastAuth?.keyType==="EXTERNAL"?this.signTypedDataWithExternalWallet(e):this.signTypedDataWithOpenKey(e,t?.mode)}async findWalletProvider(e){if(this.config.externalProvider)return this.config.externalProvider;for(let{provider:t}of this.discoveredProviders)try{if((await t.request({method:"eth_accounts"})).some(r=>r.toLowerCase()===e.toLowerCase()))return t}catch{}if(typeof window<"u"&&window.ethereum){let t=window.ethereum;try{if((await t.request({method:"eth_accounts"})).some(r=>r.toLowerCase()===e.toLowerCase()))return t}catch{}}throw new A("External wallet not found. Connect the wallet that owns this key and try again.")}async signWithExternalWallet(e){let t;try{t=await this.findWalletProvider(this.lastAuth.address)}catch(s){throw g(s.message,"error"),s}try{let s=this.toHex(e.message);return{signature:await t.request({method:"personal_sign",params:[s,this.lastAuth.address]}),address:this.lastAuth.address}}catch(s){let r=s?.message?.includes("not been authorized")?"Wallet rejected the request. Approve the connection in your wallet and try again.":s?.message||"Signing failed";throw g(r,"error"),new Error(r)}}async signTypedDataWithExternalWallet(e){let t;try{t=await this.findWalletProvider(this.lastAuth.address)}catch(s){throw g(s.message,"error"),s}try{return{signature:await t.request({method:"eth_signTypedData_v4",params:[this.lastAuth.address,JSON.stringify(e)]}),address:this.lastAuth.address}}catch(s){let r=s?.message?.includes("not been authorized")?"Wallet rejected the request. Approve the connection in your wallet and try again.":s?.message||"Signing failed";throw g(r,"error"),new Error(r)}}signWithOpenKey(e,t){return this.openFlow("sign",{type:"openkey:sign:request",message:e.message,keyId:e.keyId,sessionToken:this.sessionToken||void 0},t)}signTypedDataWithOpenKey(e,t){return this.openFlow("sign-typed-data",{type:"openkey:signTypedData:request",data:e,sessionToken:this.sessionToken||void 0},t)}toHex(e){return"0x"+Array.from(new TextEncoder().encode(e)).map(t=>t.toString(16).padStart(2,"0")).join("")}async isConnected(){try{let e=await fetch(`${this.host}/api/auth/session`,{credentials:"include"});return e.ok?!!(await e.json()).user:!1}catch{return!1}}oauth={connect:async e=>{let t=(0,y.generateCodeVerifier)(),s=await(0,y.generateCodeChallenge)(t),r=e.state||(0,y.generateState)();sessionStorage.setItem(E,JSON.stringify({verifier:t,state:r}));let o=(0,y.buildAuthorizationUrl)({host:this.oauthHost,clientId:e.clientId,redirectUri:e.redirectUri,codeChallenge:s,state:r,scopes:["openid"]});return this.openOAuthFlow(o,r,e.redirectUri)},exchangeCode:async(e,t)=>{let s=sessionStorage.getItem(E);if(!s)throw new Error("No PKCE verifier found. Start a new OAuth flow.");let{verifier:r}=JSON.parse(s),o=await fetch(`${this.oauthHost}/api/auth/oauth2/token`,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"authorization_code",code:e,redirect_uri:t.redirectUri,client_id:t.clientId,code_verifier:r})});if(sessionStorage.removeItem(E),!o.ok){let a=await o.json();throw new Error(a.error_description||"Token exchange failed")}return o.json()},verifyState:e=>{let t=sessionStorage.getItem(E);if(!t)return!1;let{state:s}=JSON.parse(t);return s===e},parseCallback:e=>{let t=new URL(e||window.location.href),s=t.searchParams.get("error");if(s)return{error:s,errorDescription:t.searchParams.get("error_description")||void 0};let r=t.searchParams.get("code"),o=t.searchParams.get("state");return!r||!o?{error:"missing_params",errorDescription:"Missing code or state parameter"}:{code:r,state:o}}};openOAuthFlow(e,t,s){return new Promise((r,o)=>{this.mode!=="redirect"?this.openOAuthPopup(e,t,s,r,o):window.location.href=e})}openOAuthPopup(e,t,s,r,o){let a=window.screenX+(window.outerWidth-k)/2,i=window.screenY+(window.outerHeight-v)/2;if(this.popup=window.open(e,"openkey-oauth",`width=${k},height=${v},left=${a},top=${i},popup=true`),!this.popup){g("Popup was blocked. Please allow popups for this site.","error"),o({code:"POPUP_BLOCKED",message:"Popup was blocked. Please allow popups or use redirect mode."});return}let c=new URL(s).origin,l=setInterval(()=>{try{if(this.popup?.closed){clearInterval(l),clearTimeout(p),o({code:"USER_CANCELLED",message:"User closed the popup"});return}let u=this.popup?.location?.href;if(u&&u.startsWith(c)){clearInterval(l),clearTimeout(p);let n=new URL(u),f=n.searchParams.get("code"),d=n.searchParams.get("state"),m=n.searchParams.get("error");if(this.popup?.close(),m){o({code:"UNAUTHORIZED",message:n.searchParams.get("error_description")||m});return}if(d!==t){o({code:"STATE_MISMATCH",message:"State mismatch - possible CSRF attack"});return}f?r({code:f,state:d}):o({code:"UNAUTHORIZED",message:"Authorization failed - no code returned"})}}catch{}},100),p=setTimeout(()=>{clearInterval(l),this.popup?.close(),o({code:"TIMEOUT",message:"OAuth flow timed out"})},b)}resolveMode(e){return e??this.mode}hasDetectedEoa(){return!!(this.discoveredProviders.length>0||typeof window<"u"&&window.ethereum)}async openFlow(e,t,s){let r=this.resolveMode(s),o=encodeURIComponent(window.location.origin),a=e==="connect"&&this.hasDetectedEoa()?"&hasEoa=true":"";if(r==="popup"){let c=`${this.host}/widget/${e}?origin=${o}${a}`;return new Promise((l,p)=>this.openPopup(c,t,l,p))}if(r==="redirect"){let c=`${this.host}/widget/${e}?origin=${o}${a}`;return window.location.href=c,new Promise(()=>{})}let i=`${this.host}/widget/embed/${e}?origin=${o}${a}`;return this.openIframeModal(i,e,t,o)}openIframeModal(e,t,s,r){return new Promise((o,a)=>{let i=!1,c=!1,l=null,p=d=>{c||(c=!0,d())},u=()=>{clearTimeout(n),clearTimeout(f),l?.destroy(),l=null};l=new O({url:e,host:this.host,onClose:()=>{p(()=>{clearTimeout(n),clearTimeout(f),l=null,a({code:"USER_CANCELLED",message:"User cancelled the request"})})},onMessage:d=>{if(d.type==="openkey:ready"){i=!0,l?.postMessage(s);return}if(d.type==="openkey:close"){p(()=>{u(),a({code:"USER_CANCELLED",message:"User cancelled the request"})});return}if(d.type==="openkey:link-wallet:delegate"){this.handleWalletLinkDelegation(l);return}if(d.type==="openkey:auth:use-external-wallet"){u(),this.handleExternalWalletConnect(o,a);return}(d.type==="openkey:auth:response"||d.type==="openkey:sign:response"||d.type==="openkey:signTypedData:response"||d.type==="openkey:link-wallet:response")&&p(()=>{u(),d.success?d.type==="openkey:auth:response"?(d.sessionToken&&(this.sessionToken=d.sessionToken),o({address:d.address,keyId:d.keyId,keyType:d.keyType||"MANAGED"})):d.type==="openkey:link-wallet:response"?o({address:d.address,keyId:d.keyId}):o({signature:d.signature,address:d.address}):a(d.error)})}});let n=setTimeout(()=>{if(i||c)return;u(),console.warn("OpenKey: iframe blocked by CSP, falling back to popup. Add frame-src https://openkey.so to your CSP."),g();let d=`${this.host}/widget/${t}?origin=${r}`;this.openPopup(d,s,m=>p(()=>o(m)),m=>p(()=>a(m)))},U),f=setTimeout(()=>{p(()=>{u(),a({code:"TIMEOUT",message:"Request timed out"})})},b)})}handleWalletLinkDelegation(e){let t=s=>e.postMessage(s);new x({providers:this.discoveredProviders,onCancel:()=>{t({type:"openkey:link-wallet:result",success:!1,error:{code:"USER_CANCELLED",message:"Wallet linking cancelled"}})},onSelect:async s=>{try{let o=(await s.request({method:"eth_requestAccounts"}))[0];if(!o)throw new Error("No account returned");let a=await fetch(`${this.host}/api/keys/link/challenge`,{method:"POST",credentials:"include"});if(!a.ok)throw new Error("Failed to get challenge");let{message:i}=await a.json(),c=this.toHex(i),l=await s.request({method:"personal_sign",params:[c,o]}),p=await fetch(`${this.host}/api/keys/link`,{method:"POST",headers:{"Content-Type":"application/json"},credentials:"include",body:JSON.stringify({address:o,signature:l,message:i})});if(!p.ok){let n=await p.json();throw new Error(n.error||"Failed to link wallet")}let{key:u}=await p.json();t({type:"openkey:link-wallet:result",success:!0,address:u.address,keyId:u.id})}catch(r){t({type:"openkey:link-wallet:result",success:!1,error:{code:"UNKNOWN",message:r.message||"Wallet linking failed"}})}}})}handleExternalWalletConnect(e,t){new x({providers:this.discoveredProviders,onCancel:()=>{t({code:"USER_CANCELLED",message:"User cancelled wallet selection"})},onSelect:async s=>{try{let o=(await s.request({method:"eth_requestAccounts"}))[0];if(!o)throw new Error("No account returned");let a={address:o,keyId:`external:${o}`,keyType:"EXTERNAL"};this.lastAuth=a,e(a)}catch(r){t({code:"UNKNOWN",message:r.message||"Failed to connect wallet"})}}})}openPopup(e,t,s,r){let o=window.screenX+(window.outerWidth-k)/2,a=window.screenY+(window.outerHeight-v)/2;if(this.popup=window.open(e,"openkey",`width=${k},height=${v},left=${o},top=${a},popup=true`),!this.popup){g("Popup was blocked. Please allow popups for this site.","error"),r({code:"POPUP_BLOCKED",message:"Popup was blocked. Please allow popups for this site."});return}let i=()=>{window.removeEventListener("message",p),clearInterval(c),clearTimeout(l)},c=setInterval(()=>{this.popup?.closed&&(i(),r({code:"USER_CANCELLED",message:"User closed the popup"}))},500),l=setTimeout(()=>{i(),this.popup?.close(),r({code:"TIMEOUT",message:"Request timed out"})},b),p=u=>{if(u.origin!==this.host||u.source!==this.popup)return;let n=u.data;if(n.type==="openkey:ready"){this.popup?.postMessage(t,this.host);return}if(n.type==="openkey:close"){i(),this.popup?.close(),r({code:"USER_CANCELLED",message:"User cancelled the request"});return}if(n.type==="openkey:auth:use-external-wallet"){i(),this.popup?.close(),this.handleExternalWalletConnect(s,r);return}(n.type==="openkey:auth:response"||n.type==="openkey:sign:response"||n.type==="openkey:signTypedData:response"||n.type==="openkey:link-wallet:response")&&(i(),this.popup?.close(),n.success?n.type==="openkey:auth:response"?(n.sessionToken&&(this.sessionToken=n.sessionToken),s({address:n.address,keyId:n.keyId,keyType:n.keyType||"MANAGED"})):n.type==="openkey:link-wallet:response"?s({address:n.address,keyId:n.keyId}):s({signature:n.signature,address:n.address}):r(n.error))};window.addEventListener("message",p)}disconnect(){this.popup?.close(),this.popup=null}},T=class{openkey;address;keyId;keyType;constructor(e,t){this.openkey=e,this.address=t.address,this.keyId=t.keyId,this.keyType=t.keyType}async request({method:e,params:t}){switch(e){case"eth_accounts":case"eth_requestAccounts":return[this.address];case"eth_chainId":return"0x1";case"personal_sign":{if(this.keyType==="EXTERNAL")try{return await(await this.openkey.findWalletProvider(this.address)).request({method:e,params:t})}catch(o){throw g(o?.message||"External wallet signing failed","error"),o}let s=this.hexToString(t[0]);return(await this.openkey.signMessage({message:s,keyId:this.keyId})).signature}case"eth_signTypedData_v4":{if(this.keyType==="EXTERNAL")try{return await(await this.openkey.findWalletProvider(this.address)).request({method:e,params:t})}catch(o){throw g(o?.message||"External wallet signing failed","error"),o}let s=JSON.parse(t[1]);return(await this.openkey.signTypedData(s)).signature}default:throw new Error(`Unsupported method: ${e}`)}}hexToString(e){let t=new Uint8Array((e.startsWith("0x")?e.slice(2):e).match(/.{1,2}/g).map(s=>parseInt(s,16)));return new TextDecoder().decode(t)}},_=T,K=w,C=null;function $(h){return(!C||h)&&(C=new w(h)),C}0&&(module.exports={OpenKey,OpenKeyEIP1193Provider,OpenKeyProvider,getOpenKey});
+    `;
+    const backdrop = document.createElement("div");
+    backdrop.className = "wp-backdrop";
+    backdrop.addEventListener("click", (e) => {
+      if (e.target === backdrop) {
+        this.destroy();
+        opts.onCancel();
+      }
+    });
+    const card = document.createElement("div");
+    card.className = "wp-card";
+    const title = document.createElement("h2");
+    title.className = "wp-title";
+    title.textContent = "Select a wallet";
+    card.appendChild(title);
+    if (opts.providers.length === 0) {
+      const empty = document.createElement("div");
+      empty.className = "wp-empty";
+      empty.textContent = "No wallets detected";
+      card.appendChild(empty);
+    } else {
+      const list = document.createElement("ul");
+      list.className = "wp-list";
+      for (const { info, provider } of opts.providers) {
+        const item = document.createElement("button");
+        item.className = "wp-item";
+        if (info.icon) {
+          const icon = document.createElement("img");
+          icon.className = "wp-icon";
+          icon.src = info.icon;
+          icon.alt = info.name;
+          item.appendChild(icon);
+        }
+        const name = document.createElement("span");
+        name.textContent = info.name;
+        item.appendChild(name);
+        item.addEventListener("click", () => {
+          this.destroy();
+          opts.onSelect(provider);
+        });
+        list.appendChild(item);
+      }
+      card.appendChild(list);
+    }
+    const cancel = document.createElement("button");
+    cancel.className = "wp-cancel";
+    cancel.textContent = "Cancel";
+    cancel.addEventListener("click", () => {
+      this.destroy();
+      opts.onCancel();
+    });
+    card.appendChild(cancel);
+    backdrop.appendChild(card);
+    this.shadow.appendChild(style);
+    this.shadow.appendChild(backdrop);
+    document.body.appendChild(this.root);
+  }
+  destroy() {
+    this.root.remove();
+  }
+};
+function showToast(message = "Opening in new window\u2026", variant = "info") {
+  const bg = variant === "error" ? "#dc2626" : "#1f2937";
+  const root = document.createElement("div");
+  const shadow = root.attachShadow({ mode: "closed" });
+  shadow.innerHTML = `<style>:host{all:initial}.ok-toast{position:fixed;top:16px;right:16px;z-index:1000000;background:${bg};color:#f9fafb;padding:10px 16px;border-radius:8px;font:14px/1.4 system-ui,sans-serif;box-shadow:0 4px 12px rgba(0,0,0,0.15);animation:ok-t-in 200ms ease-out;max-width:360px}@keyframes ok-t-in{from{opacity:0;transform:translateY(-8px)}to{opacity:1;transform:translateY(0)}}</style><div class="ok-toast">${message}</div>`;
+  document.body.appendChild(root);
+  setTimeout(() => root.remove(), 4e3);
+}
+var ExternalWalletError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "ExternalWalletError";
+  }
+};
+var OpenKey = class {
+  host;
+  oauthHost;
+  appName;
+  mode;
+  config;
+  popup = null;
+  lastAuth = null;
+  discoveredProviders = [];
+  sessionToken = null;
+  constructor(config = {}) {
+    this.config = config;
+    this.host = config.host || DEFAULT_HOST;
+    this.oauthHost = config.oauthHost || this.deriveOAuthHost(this.host);
+    this.appName = config.appName || window.location.hostname;
+    this.mode = config.mode ?? "iframe";
+    if (typeof window !== "undefined") {
+      this.discoveredProviders = [];
+      window.addEventListener("eip6963:announceProvider", (event) => {
+        this.discoveredProviders.push(event.detail);
+      });
+      window.dispatchEvent(new Event("eip6963:requestProvider"));
+    }
+  }
+  /**
+   * Derive the OAuth API host from the main host by prefixing 'api.'
+   * @param host - The main host URL
+   * @returns The derived OAuth API host URL
+   */
+  deriveOAuthHost(host) {
+    try {
+      const url = new URL(host);
+      if (url.hostname === "localhost" || url.hostname === "127.0.0.1") {
+        return host.replace(/\/$/, "");
+      }
+      url.hostname = "api." + url.hostname;
+      return url.toString().replace(/\/$/, "");
+    } catch {
+      return "https://api.openkey.so";
+    }
+  }
+  /**
+   * Connect to OpenKey and get user's wallet address
+   * Opens auth flow for user to select/create a key
+   */
+  async connect(opts) {
+    const result = await this.openFlow("connect", {
+      type: "openkey:auth:request",
+      appName: this.appName
+    }, opts?.mode);
+    this.lastAuth = result;
+    return result;
+  }
+  /**
+   * Link an external wallet to the user's OpenKey account
+   * Opens link-wallet widget flow
+   */
+  async linkWallet(opts) {
+    return this.openFlow("link-wallet", {
+      type: "openkey:link-wallet:request"
+    }, opts?.mode);
+  }
+  /**
+   * Sign a message with the user's OpenKey wallet
+   * For external keys, routes directly to the user's wallet provider
+   */
+  async signMessage(request, opts) {
+    if (this.lastAuth?.keyType === "EXTERNAL") {
+      return this.signWithExternalWallet(request);
+    }
+    return this.signWithOpenKey(request, opts?.mode);
+  }
+  /**
+   * Sign typed data (EIP-712) with the user's OpenKey wallet
+   * For external keys, routes directly to the user's wallet provider
+   */
+  async signTypedData(request, opts) {
+    if (this.lastAuth?.keyType === "EXTERNAL") {
+      return this.signTypedDataWithExternalWallet(request);
+    }
+    return this.signTypedDataWithOpenKey(request, opts?.mode);
+  }
+  /**
+   * Find a wallet provider that controls the given address.
+   * Checks: 1) app-provided externalProvider, 2) EIP-6963 discovered wallets, 3) window.ethereum
+   */
+  async findWalletProvider(targetAddress) {
+    if (this.config.externalProvider) {
+      return this.config.externalProvider;
+    }
+    for (const { provider } of this.discoveredProviders) {
+      try {
+        const accounts = await provider.request({ method: "eth_accounts" });
+        if (accounts.some((a) => a.toLowerCase() === targetAddress.toLowerCase())) {
+          return provider;
+        }
+      } catch {
+      }
+    }
+    if (typeof window !== "undefined" && window.ethereum) {
+      const provider = window.ethereum;
+      try {
+        const accounts = await provider.request({ method: "eth_accounts" });
+        if (accounts.some((a) => a.toLowerCase() === targetAddress.toLowerCase())) {
+          return provider;
+        }
+      } catch {
+      }
+    }
+    throw new ExternalWalletError("External wallet not found. Connect the wallet that owns this key and try again.");
+  }
+  async signWithExternalWallet(request) {
+    let provider;
+    try {
+      provider = await this.findWalletProvider(this.lastAuth.address);
+    } catch (e) {
+      showToast(e.message, "error");
+      throw e;
+    }
+    try {
+      const hexMessage = this.toHex(request.message);
+      const signature = await provider.request({
+        method: "personal_sign",
+        params: [hexMessage, this.lastAuth.address]
+      });
+      return { signature, address: this.lastAuth.address };
+    } catch (e) {
+      const msg = e?.message?.includes("not been authorized") ? "Wallet rejected the request. Approve the connection in your wallet and try again." : e?.message || "Signing failed";
+      showToast(msg, "error");
+      throw new Error(msg);
+    }
+  }
+  async signTypedDataWithExternalWallet(request) {
+    let provider;
+    try {
+      provider = await this.findWalletProvider(this.lastAuth.address);
+    } catch (e) {
+      showToast(e.message, "error");
+      throw e;
+    }
+    try {
+      const signature = await provider.request({
+        method: "eth_signTypedData_v4",
+        params: [this.lastAuth.address, JSON.stringify(request)]
+      });
+      return { signature, address: this.lastAuth.address };
+    } catch (e) {
+      const msg = e?.message?.includes("not been authorized") ? "Wallet rejected the request. Approve the connection in your wallet and try again." : e?.message || "Signing failed";
+      showToast(msg, "error");
+      throw new Error(msg);
+    }
+  }
+  signWithOpenKey(request, mode) {
+    return this.openFlow("sign", {
+      type: "openkey:sign:request",
+      message: request.message,
+      keyId: request.keyId,
+      sessionToken: this.sessionToken || void 0
+    }, mode);
+  }
+  signTypedDataWithOpenKey(request, mode) {
+    return this.openFlow("sign-typed-data", {
+      type: "openkey:signTypedData:request",
+      data: request,
+      sessionToken: this.sessionToken || void 0
+    }, mode);
+  }
+  toHex(str) {
+    return "0x" + Array.from(new TextEncoder().encode(str)).map((b) => b.toString(16).padStart(2, "0")).join("");
+  }
+  /**
+   * Check if user is already authenticated
+   */
+  async isConnected() {
+    try {
+      const res = await fetch(`${this.host}/api/auth/session`, {
+        credentials: "include"
+      });
+      if (!res.ok) return false;
+      const data = await res.json();
+      return !!data.user;
+    } catch {
+      return false;
+    }
+  }
+  // ======= OAuth 2.1 Provider Methods =======
+  /**
+   * OAuth 2.1 methods for third-party app authentication
+   * Use this when your app has registered OAuth client credentials with OpenKey
+   */
+  oauth = {
+    /**
+     * Start OAuth authorization flow
+     * Opens popup/redirect to OpenKey authorization endpoint
+     * @returns Promise that resolves with authorization code after user consent
+     */
+    connect: async (config) => {
+      const verifier = (0, import_core.generateCodeVerifier)();
+      const challenge = await (0, import_core.generateCodeChallenge)(verifier);
+      const state = config.state || (0, import_core.generateState)();
+      sessionStorage.setItem(
+        OAUTH_STORAGE_KEY,
+        JSON.stringify({ verifier, state })
+      );
+      const authUrl = (0, import_core.buildAuthorizationUrl)({
+        host: this.oauthHost,
+        clientId: config.clientId,
+        redirectUri: config.redirectUri,
+        codeChallenge: challenge,
+        state,
+        scopes: ["openid"]
+      });
+      return this.openOAuthFlow(authUrl, state, config.redirectUri);
+    },
+    /**
+     * Exchange authorization code for tokens
+     * Call this after receiving the callback with authorization code
+     * @param code - Authorization code from callback URL
+     * @param config - Same config used for connect()
+     * @returns Promise that resolves with access_token, id_token, etc.
+     */
+    exchangeCode: async (code, config) => {
+      const stored = sessionStorage.getItem(OAUTH_STORAGE_KEY);
+      if (!stored) {
+        throw new Error("No PKCE verifier found. Start a new OAuth flow.");
+      }
+      const { verifier } = JSON.parse(stored);
+      const response = await fetch(`${this.oauthHost}/api/auth/oauth2/token`, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/x-www-form-urlencoded"
+        },
+        body: new URLSearchParams({
+          grant_type: "authorization_code",
+          code,
+          redirect_uri: config.redirectUri,
+          client_id: config.clientId,
+          code_verifier: verifier
+        })
+      });
+      sessionStorage.removeItem(OAUTH_STORAGE_KEY);
+      if (!response.ok) {
+        const error = await response.json();
+        throw new Error(error.error_description || "Token exchange failed");
+      }
+      return response.json();
+    },
+    /**
+     * Verify state parameter from callback
+     * Call this before exchangeCode to prevent CSRF attacks
+     * @param receivedState - State parameter from callback URL
+     * @returns true if state matches, false otherwise
+     */
+    verifyState: (receivedState) => {
+      const stored = sessionStorage.getItem(OAUTH_STORAGE_KEY);
+      if (!stored) return false;
+      const { state } = JSON.parse(stored);
+      return state === receivedState;
+    },
+    /**
+     * Parse authorization response from callback URL
+     * @param url - Callback URL (defaults to current window.location.href)
+     * @returns Parsed code and state, or error
+     */
+    parseCallback: (url) => {
+      const urlObj = new URL(url || window.location.href);
+      const error = urlObj.searchParams.get("error");
+      if (error) {
+        return {
+          error,
+          errorDescription: urlObj.searchParams.get("error_description") || void 0
+        };
+      }
+      const code = urlObj.searchParams.get("code");
+      const state = urlObj.searchParams.get("state");
+      if (!code || !state) {
+        return { error: "missing_params", errorDescription: "Missing code or state parameter" };
+      }
+      return { code, state };
+    }
+  };
+  openOAuthFlow(url, state, redirectUri) {
+    return new Promise((resolve, reject) => {
+      if (this.mode !== "redirect") {
+        this.openOAuthPopup(url, state, redirectUri, resolve, reject);
+      } else {
+        window.location.href = url;
+      }
+    });
+  }
+  openOAuthPopup(url, state, redirectUri, resolve, reject) {
+    const left = window.screenX + (window.outerWidth - POPUP_WIDTH) / 2;
+    const top = window.screenY + (window.outerHeight - POPUP_HEIGHT) / 2;
+    this.popup = window.open(
+      url,
+      "openkey-oauth",
+      `width=${POPUP_WIDTH},height=${POPUP_HEIGHT},left=${left},top=${top},popup=true`
+    );
+    if (!this.popup) {
+      showToast("Popup was blocked. Please allow popups for this site.", "error");
+      reject({
+        code: "POPUP_BLOCKED",
+        message: "Popup was blocked. Please allow popups or use redirect mode."
+      });
+      return;
+    }
+    const redirectHost = new URL(redirectUri).origin;
+    const pollInterval = setInterval(() => {
+      try {
+        if (this.popup?.closed) {
+          clearInterval(pollInterval);
+          clearTimeout(timeout);
+          reject({
+            code: "USER_CANCELLED",
+            message: "User closed the popup"
+          });
+          return;
+        }
+        const popupUrl = this.popup?.location?.href;
+        if (popupUrl && popupUrl.startsWith(redirectHost)) {
+          clearInterval(pollInterval);
+          clearTimeout(timeout);
+          const urlObj = new URL(popupUrl);
+          const code = urlObj.searchParams.get("code");
+          const returnedState = urlObj.searchParams.get("state");
+          const error = urlObj.searchParams.get("error");
+          this.popup?.close();
+          if (error) {
+            reject({
+              code: "UNAUTHORIZED",
+              message: urlObj.searchParams.get("error_description") || error
+            });
+            return;
+          }
+          if (returnedState !== state) {
+            reject({
+              code: "STATE_MISMATCH",
+              message: "State mismatch - possible CSRF attack"
+            });
+            return;
+          }
+          if (code) {
+            resolve({ code, state: returnedState });
+          } else {
+            reject({
+              code: "UNAUTHORIZED",
+              message: "Authorization failed - no code returned"
+            });
+          }
+        }
+      } catch {
+      }
+    }, 100);
+    const timeout = setTimeout(() => {
+      clearInterval(pollInterval);
+      this.popup?.close();
+      reject({
+        code: "TIMEOUT",
+        message: "OAuth flow timed out"
+      });
+    }, DEFAULT_TIMEOUT);
+  }
+  resolveMode(override) {
+    return override ?? this.mode;
+  }
+  hasDetectedEoa() {
+    if (this.discoveredProviders.length > 0) return true;
+    if (typeof window !== "undefined" && window.ethereum) return true;
+    return false;
+  }
+  async openFlow(action, message, modeOverride) {
+    const mode = this.resolveMode(modeOverride);
+    const origin = encodeURIComponent(window.location.origin);
+    const eoaFlag = action === "connect" && this.hasDetectedEoa() ? "&hasEoa=true" : "";
+    if (mode === "popup") {
+      const url2 = `${this.host}/widget/${action}?origin=${origin}${eoaFlag}`;
+      return new Promise((resolve, reject) => this.openPopup(url2, message, resolve, reject));
+    }
+    if (mode === "redirect") {
+      const url2 = `${this.host}/widget/${action}?origin=${origin}${eoaFlag}`;
+      window.location.href = url2;
+      return new Promise(() => {
+      });
+    }
+    const url = `${this.host}/widget/embed/${action}?origin=${origin}${eoaFlag}`;
+    return this.openIframeModal(url, action, message, origin);
+  }
+  openIframeModal(url, action, message, origin) {
+    return new Promise((resolve, reject) => {
+      let readyReceived = false;
+      let settled = false;
+      let modal = null;
+      const settle = (fn) => {
+        if (settled) return;
+        settled = true;
+        fn();
+      };
+      const cleanup = () => {
+        clearTimeout(readyTimeout);
+        clearTimeout(overallTimeout);
+        modal?.destroy();
+        modal = null;
+      };
+      modal = new IframeModal({
+        url,
+        host: this.host,
+        onClose: () => {
+          settle(() => {
+            clearTimeout(readyTimeout);
+            clearTimeout(overallTimeout);
+            modal = null;
+            reject({ code: "USER_CANCELLED", message: "User cancelled the request" });
+          });
+        },
+        onMessage: (data) => {
+          if (data.type === "openkey:ready") {
+            readyReceived = true;
+            modal?.postMessage(message);
+            return;
+          }
+          if (data.type === "openkey:close") {
+            settle(() => {
+              cleanup();
+              reject({ code: "USER_CANCELLED", message: "User cancelled the request" });
+            });
+            return;
+          }
+          if (data.type === "openkey:link-wallet:delegate") {
+            this.handleWalletLinkDelegation(modal);
+            return;
+          }
+          if (data.type === "openkey:auth:use-external-wallet") {
+            cleanup();
+            this.handleExternalWalletConnect(resolve, reject);
+            return;
+          }
+          if (data.type === "openkey:auth:response" || data.type === "openkey:sign:response" || data.type === "openkey:signTypedData:response" || data.type === "openkey:link-wallet:response") {
+            settle(() => {
+              cleanup();
+              if (data.success) {
+                if (data.type === "openkey:auth:response") {
+                  if (data.sessionToken) this.sessionToken = data.sessionToken;
+                  resolve({ address: data.address, keyId: data.keyId, keyType: data.keyType || "MANAGED" });
+                } else if (data.type === "openkey:link-wallet:response") {
+                  resolve({ address: data.address, keyId: data.keyId });
+                } else {
+                  resolve({ signature: data.signature, address: data.address });
+                }
+              } else {
+                reject(data.error);
+              }
+            });
+          }
+        }
+      });
+      const readyTimeout = setTimeout(() => {
+        if (readyReceived || settled) return;
+        cleanup();
+        console.warn("OpenKey: iframe blocked by CSP, falling back to popup. Add frame-src https://openkey.so to your CSP.");
+        showToast();
+        const popupUrl = `${this.host}/widget/${action}?origin=${origin}`;
+        this.openPopup(popupUrl, message, (val) => settle(() => resolve(val)), (err) => settle(() => reject(err)));
+      }, IFRAME_READY_TIMEOUT);
+      const overallTimeout = setTimeout(() => {
+        settle(() => {
+          cleanup();
+          reject({ code: "TIMEOUT", message: "Request timed out" });
+        });
+      }, DEFAULT_TIMEOUT);
+    });
+  }
+  handleWalletLinkDelegation(modal) {
+    const sendResult = (result) => modal.postMessage(result);
+    new WalletPicker({
+      providers: this.discoveredProviders,
+      onCancel: () => {
+        sendResult({ type: "openkey:link-wallet:result", success: false, error: { code: "USER_CANCELLED", message: "Wallet linking cancelled" } });
+      },
+      onSelect: async (provider) => {
+        try {
+          const accounts = await provider.request({ method: "eth_requestAccounts" });
+          const address = accounts[0];
+          if (!address) throw new Error("No account returned");
+          const challengeRes = await fetch(`${this.host}/api/keys/link/challenge`, {
+            method: "POST",
+            credentials: "include"
+          });
+          if (!challengeRes.ok) throw new Error("Failed to get challenge");
+          const { message } = await challengeRes.json();
+          const hexMessage = this.toHex(message);
+          const signature = await provider.request({
+            method: "personal_sign",
+            params: [hexMessage, address]
+          });
+          const linkRes = await fetch(`${this.host}/api/keys/link`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            credentials: "include",
+            body: JSON.stringify({ address, signature, message })
+          });
+          if (!linkRes.ok) {
+            const err = await linkRes.json();
+            throw new Error(err.error || "Failed to link wallet");
+          }
+          const { key } = await linkRes.json();
+          sendResult({ type: "openkey:link-wallet:result", success: true, address: key.address, keyId: key.id });
+        } catch (e) {
+          sendResult({ type: "openkey:link-wallet:result", success: false, error: { code: "UNKNOWN", message: e.message || "Wallet linking failed" } });
+        }
+      }
+    });
+  }
+  handleExternalWalletConnect(resolve, reject) {
+    new WalletPicker({
+      providers: this.discoveredProviders,
+      onCancel: () => {
+        reject({ code: "USER_CANCELLED", message: "User cancelled wallet selection" });
+      },
+      onSelect: async (provider) => {
+        try {
+          const accounts = await provider.request({ method: "eth_requestAccounts" });
+          const address = accounts[0];
+          if (!address) throw new Error("No account returned");
+          const result = { address, keyId: `external:${address}`, keyType: "EXTERNAL" };
+          this.lastAuth = result;
+          resolve(result);
+        } catch (e) {
+          reject({ code: "UNKNOWN", message: e.message || "Failed to connect wallet" });
+        }
+      }
+    });
+  }
+  openPopup(url, message, resolve, reject) {
+    const left = window.screenX + (window.outerWidth - POPUP_WIDTH) / 2;
+    const top = window.screenY + (window.outerHeight - POPUP_HEIGHT) / 2;
+    this.popup = window.open(
+      url,
+      "openkey",
+      `width=${POPUP_WIDTH},height=${POPUP_HEIGHT},left=${left},top=${top},popup=true`
+    );
+    if (!this.popup) {
+      showToast("Popup was blocked. Please allow popups for this site.", "error");
+      reject({
+        code: "POPUP_BLOCKED",
+        message: "Popup was blocked. Please allow popups for this site."
+      });
+      return;
+    }
+    const cleanup = () => {
+      window.removeEventListener("message", handleMessage);
+      clearInterval(pollClosed);
+      clearTimeout(timeout);
+    };
+    const pollClosed = setInterval(() => {
+      if (this.popup?.closed) {
+        cleanup();
+        reject({
+          code: "USER_CANCELLED",
+          message: "User closed the popup"
+        });
+      }
+    }, 500);
+    const timeout = setTimeout(() => {
+      cleanup();
+      this.popup?.close();
+      reject({
+        code: "TIMEOUT",
+        message: "Request timed out"
+      });
+    }, DEFAULT_TIMEOUT);
+    const handleMessage = (event) => {
+      if (event.origin !== this.host) return;
+      if (event.source !== this.popup) return;
+      const data = event.data;
+      if (data.type === "openkey:ready") {
+        this.popup?.postMessage(message, this.host);
+        return;
+      }
+      if (data.type === "openkey:close") {
+        cleanup();
+        this.popup?.close();
+        reject({
+          code: "USER_CANCELLED",
+          message: "User cancelled the request"
+        });
+        return;
+      }
+      if (data.type === "openkey:auth:use-external-wallet") {
+        cleanup();
+        this.popup?.close();
+        this.handleExternalWalletConnect(resolve, reject);
+        return;
+      }
+      if (data.type === "openkey:auth:response" || data.type === "openkey:sign:response" || data.type === "openkey:signTypedData:response" || data.type === "openkey:link-wallet:response") {
+        cleanup();
+        this.popup?.close();
+        if (data.success) {
+          if (data.type === "openkey:auth:response") {
+            if (data.sessionToken) this.sessionToken = data.sessionToken;
+            resolve({ address: data.address, keyId: data.keyId, keyType: data.keyType || "MANAGED" });
+          } else if (data.type === "openkey:link-wallet:response") {
+            resolve({ address: data.address, keyId: data.keyId });
+          } else {
+            resolve({ signature: data.signature, address: data.address });
+          }
+        } else {
+          reject(data.error);
+        }
+      }
+    };
+    window.addEventListener("message", handleMessage);
+  }
+  /**
+   * Disconnect and close any open flows
+   */
+  disconnect() {
+    this.popup?.close();
+    this.popup = null;
+  }
+};
+var OpenKeyProvider = class {
+  openkey;
+  address;
+  keyId;
+  keyType;
+  constructor(openkey, authResult) {
+    this.openkey = openkey;
+    this.address = authResult.address;
+    this.keyId = authResult.keyId;
+    this.keyType = authResult.keyType;
+  }
+  async request({ method, params }) {
+    switch (method) {
+      case "eth_accounts":
+      case "eth_requestAccounts":
+        return [this.address];
+      case "eth_chainId":
+        return "0x1";
+      // mainnet
+      case "personal_sign": {
+        if (this.keyType === "EXTERNAL") {
+          try {
+            const provider = await this.openkey.findWalletProvider(this.address);
+            return await provider.request({ method, params });
+          } catch (e) {
+            showToast(e?.message || "External wallet signing failed", "error");
+            throw e;
+          }
+        }
+        const message = this.hexToString(params[0]);
+        const result = await this.openkey.signMessage({ message, keyId: this.keyId });
+        return result.signature;
+      }
+      case "eth_signTypedData_v4": {
+        if (this.keyType === "EXTERNAL") {
+          try {
+            const provider = await this.openkey.findWalletProvider(this.address);
+            return await provider.request({ method, params });
+          } catch (e) {
+            showToast(e?.message || "External wallet signing failed", "error");
+            throw e;
+          }
+        }
+        const data = JSON.parse(params[1]);
+        const result = await this.openkey.signTypedData(data);
+        return result.signature;
+      }
+      default:
+        throw new Error(`Unsupported method: ${method}`);
+    }
+  }
+  hexToString(hex) {
+    const bytes = new Uint8Array(
+      (hex.startsWith("0x") ? hex.slice(2) : hex).match(/.{1,2}/g).map((b) => parseInt(b, 16))
+    );
+    return new TextDecoder().decode(bytes);
+  }
+};
+var index_default = OpenKey;
+var defaultInstance = null;
+function getOpenKey(config) {
+  if (!defaultInstance || config) {
+    defaultInstance = new OpenKey(config);
+  }
+  return defaultInstance;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  OpenKey,
+  OpenKeyProvider,
+  getOpenKey
+});
 //# sourceMappingURL=index.js.map