@synonymdev/pubky 0.16.2 → 0.18.0

package/README.md

@@ -182,6 +182,11 @@ const userPk = session.info.publicKey.toString(); // -> pubky<z32> identifier
 const caps = session.info.capabilities; // -> string[] permissions and paths
 
 const storage = session.storage; // -> This User's storage API (absolute paths)
+
+// With a grant session that has read permission on `/` (`/:r`, `/:rw`, ...):
+// storage used and the quota that applies.
+const account = await session.grant.account();
+console.log(account.usedBytes, account.quota.effective.storageQuotaMb);
 ```
 
 **Persist a grant session**
@@ -347,6 +352,28 @@ Legacy cookie auth flows can be resumed with
 `sessionStorage`, not `localStorage`, and delete it once the flow completes or
 is abandoned.
 
+#### Require the signed-in identity
+
+When the app already knows who is signed in, for example to re-authorize or to
+request more capabilities, pass that user's public key as `expectedSigner`.
+The link gains `spk=<z32>`, an expected-identity constraint: a signer such as
+Pubky Ring opens that key or refuses the request, and `awaitApproval()`
+rejects an approval issued by any other key. Switching accounts takes a fresh
+sign-in without `expectedSigner`. Leave it out for a first sign-in. Sign-up
+flows reject it.
+
+```js
+const flow = await pubky.startGrantAuthFlow(caps, AuthFlowKind.signin(), {
+  clientId: "my-cool-app.example",
+  expectedSigner: session.info.publicKey.z32(),
+});
+```
+
+Signers that predate `spk` ignore it and show their usual key picker; an
+approval from another key picked there is rejected. Any app can name any
+public key, so signers should show prominently that the app chose the
+identity; see [AUTH.md](../../../../docs/AUTH.md) for the accepted tradeoffs.
+
 #### Request encryption keys
 
 Apps can also ask the signer for encryption keys scoped to storage paths. Set
@@ -517,6 +544,7 @@ const s = session.storage;
 await s.putJson("/pub/example.com/data.json", { ok: true });
 await s.putText("/pub/example.com/note.txt", "hello");
 await s.putBytes("/pub/example.com/img.bin", new Uint8Array([1, 2, 3]));
+await s.putBlob("/pub/example.com/file.bin", new Blob(["file contents"]));
 
 // Reads
 const response = await s.get("/pub/example.com/data.json"); // -> Response (stream it)
@@ -541,12 +569,15 @@ lock.token; // -> "opaquelocktoken:<uuid>"
 lock.timeoutSeconds; // -> what the homeserver granted (it caps the lifetime)
 await s.putTextLocked(lock, JSON.stringify({ count: 1 })); // only the holder can write; no putJsonLocked
 await s.putBytesLocked(lock, new Uint8Array([1, 2, 3]));
+await s.putBlobLocked(lock, new Blob(["updated contents"]));
 await s.deleteLocked(lock);
 await s.refreshLock(lock, 30); // restart the lifetime
 await s.unlock(lock);
 ```
 
-While a lock lives, a plain `putJson`/`putText`/`putBytes`/`delete` on that path rejects with `423 Locked`, and so does a second `lock()`. Once the lock is gone, the old value is refused with `412` (write, delete, refresh) and `409` on `unlock()`; take a new lock and read the file again. A homeserver without lock support answers `405`.
+`putBlob()` and `putBlobLocked()` accept a `Blob` or `File` without copying its contents into WASM memory.
+
+While a lock lives, a plain `putJson`/`putText`/`putBytes`/`putBlob`/`delete` on that path rejects with `423 Locked`, and so does a second `lock()`. Once the lock is gone, the old value is refused with `412` (write, delete, refresh) and `409` on `unlock()`; take a new lock and read the file again. A homeserver without lock support answers `405`.
 
 `timeoutSeconds` is rounded down to whole seconds, with a minimum of 1. If `lock()` rejects without a status code (a lost connection, say), the homeserver may still have granted the lock; nothing can release it, so the path answers `423` until it times out.
 
@@ -556,6 +587,8 @@ Path rules:
 
 - Session storage uses **absolute** paths under `/pub/` or `/priv/`.
 - Public storage uses **addressed** form `pubky<user>/pub/app/file.txt` (preferred) or `pubky://<user>/...`.
+- A path is the file's plain name, such as `/pub/app/My File.txt`; the SDK percent-encodes it when it builds the HTTP URL.
+- `list()` entries and `event.resource.path` carry the same plain name, which is also the form a `list()` cursor takes.
 
 **Convention:** put your app’s public data under a domain-like folder in `/pub`, e.g. `/pub/my-new-app/`.
 
@@ -639,15 +672,38 @@ All async methods throw a structured `PubkyError`:
 interface PubkyError extends Error {
   name:
     | "RequestError" // network/server/validation/JSON
+    | "CredentialRefreshError" // grant refresh request failed
     | "InvalidInput"
     | "AuthenticationError"
     | "PkarrError"
     | "InternalError";
   message: string;
-  data?: unknown; // structured context when available (e.g. { statusCode: number })
+  data?: unknown; // structured context when available; RequestErrorData for RequestError
+}
+```
+
+`RequestError` carries a `RequestErrorData`: `reason` (`Http`, `Timeout`,
+`Connection`, `TlsVerification`, `Body`, `Decode`, `InvalidRequest` or `Other`)
+and, for HTTP failures, `statusCode`. Browser Fetch may only report `Other`.
+`TlsVerification` means the server certificate was rejected; after a legitimate
+key rotation a stale pkarr cache looks the same, so it does not prove
+interception on its own. A reason describes the failure, not whether retrying a
+write is safe.
+
+```ts
+import type { PubkyError, RequestErrorData } from "@synonymdev/pubky";
+
+if (error.name === "RequestError") {
+  const { reason, statusCode } = error.data as RequestErrorData;
 }
 ```
 
+`CredentialRefreshError` represents secret-safe refresh request failures. It
+includes `data: { statusCode: number }` when the refresh endpoint responded, while
+transport failures omit `data`. Local authentication, resolution, parsing, and
+build failures keep their normal error names. This distinguishes unavailable
+grant refresh from a failure returned by the requested storage operation.
+
 Example:
 
 ```js

package/index.cjs

@@ -569,6 +569,85 @@ async function __pubkyGrantDelegatedSign(keyId, signingInput) {
 }
 
 
+/**
+ * A user's account as returned by `session.grant.account()`.
+ */
+class AccountInfo {
+    static __wrap(ptr) {
+        const obj = Object.create(AccountInfo.prototype);
+        obj.__wbg_ptr = ptr;
+        AccountInfoFinalization.register(obj, obj.__wbg_ptr, obj);
+        return obj;
+    }
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        AccountInfoFinalization.unregister(this);
+        return ptr;
+    }
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_accountinfo_free(ptr, 0);
+    }
+    /**
+     * When the user signed up, as an ISO 8601 date and time without a UTC
+     * offset (e.g. `2026-10-22T10:11:12.123456`).
+     * @returns {string}
+     */
+    get createdAt() {
+        let deferred1_0;
+        let deferred1_1;
+        try {
+            const ret = wasm.accountinfo_createdAt(this.__wbg_ptr);
+            deferred1_0 = ret[0];
+            deferred1_1 = ret[1];
+            return getStringFromWasm0(ret[0], ret[1]);
+        } finally {
+            wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
+        }
+    }
+    /**
+     * Whether the account is disabled. Disabled accounts can read and delete
+     * but not write.
+     * @returns {boolean}
+     */
+    get disabled() {
+        const ret = wasm.accountinfo_disabled(this.__wbg_ptr);
+        return ret !== 0;
+    }
+    /**
+     * The user this account belongs to.
+     * @returns {PublicKey}
+     */
+    get pubky() {
+        const ret = wasm.accountinfo_pubky(this.__wbg_ptr);
+        return PublicKey.__wrap(ret);
+    }
+    /**
+     * The quota that applies and the per-user overrides behind it.
+     *
+     * @returns {AccountQuota}
+     * @returns {AccountQuota}
+     */
+    get quota() {
+        const ret = wasm.accountinfo_quota(this.__wbg_ptr);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        return takeFromExternrefTable0(ret[0]);
+    }
+    /**
+     * Bytes of storage currently used.
+     * @returns {number}
+     */
+    get usedBytes() {
+        const ret = wasm.accountinfo_usedBytes(this.__wbg_ptr);
+        return ret;
+    }
+}
+if (Symbol.dispose) AccountInfo.prototype[Symbol.dispose] = AccountInfo.prototype.free;
+exports.AccountInfo = AccountInfo;
+
 /**
  * Start and control a pubkyauth authorization flow.
  *
@@ -1943,7 +2022,7 @@ class GrantAuthFlow {
      * The kind of authentication flow to perform.
      *
      * @param {GrantAuthFlowOptions} options
-     * Options for the grant flow: `{ clientId, relay?, xCallback? }`.
+     * Options for the grant flow: `{ clientId, relay?, xCallback?, approvalFormat?, expectedSigner? }`.
      *
      * @returns {GrantAuthFlow}
      * A running grant auth flow. Call `authorizationUrl()` to show the deep link,
@@ -2151,6 +2230,21 @@ class GrantSession {
         const ptr = this.__destroy_into_raw();
         wasm.__wbg_grantsession_free(ptr, 0);
     }
+    /**
+     * Fetch this user's account: storage used, whether it is disabled, and
+     * the quota that applies.
+     *
+     * Requires read permission on the root scope (`/:r`, `/:rw`, ...).
+     * Path-scoped sessions surface the homeserver `403` as the standard
+     * request error.
+     *
+     * @returns {Promise<AccountInfo>}
+     * @returns {Promise<AccountInfo>}
+     */
+    account() {
+        const ret = wasm.grantsession_account(this.__wbg_ptr);
+        return ret;
+    }
     /**
      * Sign JSON data and return both the custom proof and its root-signed grant.
      * Data follows `JSON.stringify` semantics, e.g. `undefined` properties are omitted.
@@ -3121,7 +3215,7 @@ class Pubky {
      * @param {string} capabilities Comma-separated caps, e.g. `"/pub/app/:rw,/pub/foo/file:r"`.
      * @param {AuthFlowKind} kind The kind of authentication flow to perform.
      * @param {GrantAuthFlowOptions} options Options for the grant flow:
-     * `{ clientId, relay?, xCallback?, approvalFormat? }`.
+     * `{ clientId, relay?, xCallback?, approvalFormat?, expectedSigner? }`.
      * @returns {Promise<GrantAuthFlow>}
      * A running grant auth flow. Show `authorizationUrl` as QR/deeplink,
      * then `awaitApproval()` to obtain a grant-backed `Session`.
@@ -3252,7 +3346,7 @@ class PubkyResource {
         return PubkyResource.__wrap(ret[0]);
     }
     /**
-     * Get the absolute path (e.g., "/pub/example.txt").
+     * Get the absolute path (e.g., "/pub/My File.txt").
      * @returns {string}
      */
     get path() {
@@ -3268,7 +3362,8 @@ class PubkyResource {
         }
     }
     /**
-     * Render as `pubky://<owner>/<path>` (deep-link/URL form).
+     * Render as `pubky://<owner><path>` (deep-link form), the form listings
+     * and events use.
      * @returns {string}
      */
     toPubkyUrl() {
@@ -3470,10 +3565,10 @@ class PublicStorage {
         return ret;
     }
     /**
-     * List a directory. Results are `pubky://…` identifier URLs.
+     * List a directory. Results are `pubky://<pk><path>` entries.
      *
      * @param {Address} address Addressed directory (must end with `/`).
-     * @param {string|null=} cursor Optional suffix or full URL to start **after**.
+     * @param {string|null=} cursor Optional suffix or entry (as returned) to start **after**.
      * @param {boolean=} reverse Default `false`. When `true`, newest/lexicographically-last first.
      * @param {number=} limit Optional result limit.
      * @param {boolean=} shallow Default `false`. When `true`, lists only first-level entries.
@@ -3801,8 +3896,10 @@ exports.SessionInfo = SessionInfo;
  *
  * Failures reject with a {@link PubkyError}. Path validation, transport, and HTTP
  * failures use `RequestError`; only HTTP errors include `data.statusCode`.
- * URL parsing failures use `InvalidInput`. Credential preparation, refresh,
- * and reading response bodies can also fail.
+ * Automatic grant refresh failures use `CredentialRefreshError`, with the
+ * refresh HTTP status in `data.statusCode` when available. URL parsing failures
+ * use `InvalidInput`. Other credential preparation and reading response bodies
+ * can also fail.
  *
  * Only {@link SessionStorage.exists} and {@link SessionStorage.stats} treat
  * HTTP 404/410 as missing. Other HTTP failures, including 401/403 and 5xx, reject.
@@ -3942,11 +4039,11 @@ class SessionStorage {
      * List a directory (absolute session path).
      *
      * @param {Path} path Must end with `/`.
-     * @param {string|null=} cursor Optional last entry URL to start **after**.
+     * @param {string|null=} cursor Optional last entry (as returned) to start **after**.
      * @param {boolean=} reverse Default `false`.
      * @param {number=} limit Optional result limit.
      * @param {boolean=} shallow Default `false`.
-     * @returns {Promise<string[]>} `pubky://…` entry URLs, or an empty array for an empty page.
+     * @returns {Promise<string[]>} `pubky://<pk><path>` entries, or an empty array for an empty page.
      * @throws {PubkyError} Missing directory (404), invalid cursor (400), invalid response
      * entries, or shared errors (see {@link SessionStorage}).
      * @param {Path} path
@@ -3990,6 +4087,53 @@ class SessionStorage {
         const ret = wasm.sessionstorage_lock(this.__wbg_ptr, ptr0, len0, timeout_seconds);
         return ret;
     }
+    /**
+     * Upload a Blob or File to a locked path without copying its contents into
+     * WASM memory.
+     *
+     * @param {StorageLock} lock A lock you hold. The upload uses the lock's path.
+     * @param {Blob} body A Blob or File to upload.
+     * @returns {Promise<void>}
+     * @throws {PubkyError} An expired or released lock rejects with status `412`.
+     * A file that changed since the write was prepared rejects with status `409`.
+     * See {@link SessionStorage.putBytesLocked} for recovery and
+     * {@link SessionStorage.putBlob} for input validation and shared errors.
+     * @example
+     * const lock = await session.storage.lock("/pub/example.com/file.bin", 30);
+     * try {
+     *   await session.storage.putBlobLocked(lock, file);
+     * } finally {
+     *   await session.storage.unlock(lock);
+     * }
+     * @param {StorageLock} lock
+     * @param {Blob} body
+     * @returns {Promise<void>}
+     */
+    putBlobLocked(lock, body) {
+        _assertClass(lock, StorageLock);
+        const ret = wasm.sessionstorage_putBlobLocked(this.__wbg_ptr, lock.__wbg_ptr, body);
+        return ret;
+    }
+    /**
+     * Upload a Blob or File without copying its contents into WASM memory.
+     *
+     * @param {Path} path File path; must not end with `/`.
+     * @param {Blob} body A Blob or File to upload.
+     * @returns {Promise<void>}
+     * @throws {PubkyError} `InvalidInput` if body is not a Blob or File;
+     * otherwise upload or shared write/request errors (see {@link SessionStorage}).
+     * @example
+     * await session.storage.putBlob("/pub/example.com/file.bin", file);
+     * @param {Path} path
+     * @param {Blob} body
+     * @returns {Promise<void>}
+     */
+    putBlob(path, body) {
+        const ptr0 = passStringToWasm0(path, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.sessionstorage_putBlob(this.__wbg_ptr, ptr0, len0, body);
+        return ret;
+    }
     /**
      * `PUT` binary data to the path of a lock this client holds.
      *
@@ -4572,6 +4716,17 @@ class SigninGrantDeepLink {
         const ret = wasm.signingrantdeeplink_ephemeralPublicKey(this.__wbg_ptr);
         return ret;
     }
+    /**
+     * Expected identity (`spk`): the public key that must approve this
+     * request, or `undefined`. Signers approve with this key or refuse.
+     *
+     * @returns {PublicKey|undefined}
+     * @returns {PublicKey | undefined}
+     */
+    get expectedSigner() {
+        const ret = wasm.signingrantdeeplink_expectedSigner(this.__wbg_ptr);
+        return ret === 0 ? undefined : PublicKey.__wrap(ret);
+    }
     /**
      * Parse a grant signin deeplink URL.
      *
@@ -5409,7 +5564,7 @@ function __wbg_get_imports() {
             getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
             getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
         },
-        __wbg___pubkyGrantDelegatedSign_1a62bf8388fed293: function(arg0, arg1, arg2, arg3) {
+        __wbg___pubkyGrantDelegatedSign_41716d73c2c343e6: function(arg0, arg1, arg2, arg3) {
             let deferred0_0;
             let deferred0_1;
             let deferred1_0;
@@ -5426,7 +5581,7 @@ function __wbg_get_imports() {
                 wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
             }
         },
-        __wbg___pubkyGrantEnsureDelegatedKey_555c8876d02a11aa: function(arg0, arg1) {
+        __wbg___pubkyGrantEnsureDelegatedKey_fb6d009c63fedb54: function(arg0, arg1) {
             let v0;
             if (arg0 !== 0) {
                 v0 = getStringFromWasm0(arg0, arg1);
@@ -5435,7 +5590,7 @@ function __wbg_get_imports() {
             const ret = __pubkyGrantEnsureDelegatedKey(v0);
             return ret;
         },
-        __wbg___pubkyGrantLoadDelegatedPublicKey_f1b34a21ea0cde6e: function(arg0, arg1) {
+        __wbg___pubkyGrantLoadDelegatedPublicKey_3516a6bc4e78f266: function(arg0, arg1) {
             let deferred0_0;
             let deferred0_1;
             try {
@@ -5447,18 +5602,18 @@ function __wbg_get_imports() {
                 wasm.__wbindgen_free(deferred0_0, deferred0_1, 1);
             }
         },
-        __wbg___pubkyRecoveredEncryptionKeys_e9143429efc3030f: function(arg0, arg1, arg2, arg3, arg4) {
+        __wbg___pubkyRecoveredEncryptionKeys_8129a9d229919061: function(arg0, arg1, arg2, arg3, arg4) {
             const ret = __pubkyRecoveredEncryptionKeys(getStringFromWasm0(arg0, arg1), getStringFromWasm0(arg2, arg3), EncryptionKeys.__wrap(arg4));
             return ret;
         },
-        __wbg___pubkySessionAcquire_2270c91b242c47dd: function() { return handleError(function (arg0, arg1, arg2, arg3, arg4) {
+        __wbg___pubkySessionAcquire_b810bc4be7513322: function() { return handleError(function (arg0, arg1, arg2, arg3, arg4) {
             const ret = __pubkySessionAcquire(getStringFromWasm0(arg0, arg1), getStringFromWasm0(arg2, arg3), arg4 !== 0);
             return ret;
         }, arguments); },
-        __wbg___pubkySessionRelease_eea4e4e2e0b6f186: function(arg0) {
+        __wbg___pubkySessionRelease_f019c6fb31a86113: function(arg0) {
             __pubkySessionRelease(arg0 >>> 0);
         },
-        __wbg___pubkySessionStoreGet_a2bf2ae3f6833d1e: function(arg0, arg1) {
+        __wbg___pubkySessionStoreGet_1166e2b524db1bdf: function(arg0, arg1) {
             let deferred0_0;
             let deferred0_1;
             try {
@@ -5470,7 +5625,7 @@ function __wbg_get_imports() {
                 wasm.__wbindgen_free(deferred0_0, deferred0_1, 1);
             }
         },
-        __wbg___pubkySessionStoreMetadata_50fe94d8b9c3f08d: function(arg0, arg1) {
+        __wbg___pubkySessionStoreMetadata_e8097eef06412410: function(arg0, arg1) {
             let deferred0_0;
             let deferred0_1;
             try {
@@ -5482,23 +5637,23 @@ function __wbg_get_imports() {
                 wasm.__wbindgen_free(deferred0_0, deferred0_1, 1);
             }
         },
-        __wbg___pubkySessionStorePut_832a775a63a9bd6a: function(arg0, arg1) {
+        __wbg___pubkySessionStorePut_306972a8d5d40992: function(arg0, arg1) {
             const ret = __pubkySessionStorePut(arg0, arg1 >>> 0);
             return ret;
         },
-        __wbg___pubkySessionWait_5fd2b82f5655b4f2: function(arg0) {
+        __wbg___pubkySessionWait_9431fb951145fff1: function(arg0) {
             const ret = __pubkySessionWait(arg0 >>> 0);
             return ret;
         },
-        __wbg___pubkySharedSessionLoad_c69d86a0a8d83739: function(arg0) {
+        __wbg___pubkySharedSessionLoad_1a7e09fe9e7a6c6e: function(arg0) {
             const ret = __pubkySharedSessionLoad(arg0 >>> 0);
             return ret;
         },
-        __wbg___pubkySharedSessionRemove_2d46ed7e88cf9aea: function(arg0) {
+        __wbg___pubkySharedSessionRemove_0d9792736173a9cd: function(arg0) {
             const ret = __pubkySharedSessionRemove(arg0 >>> 0);
             return ret;
         },
-        __wbg___pubkySharedSessionStore_7de3e1f4d6897d65: function(arg0, arg1) {
+        __wbg___pubkySharedSessionStore_4a6f968b46c591fb: function(arg0, arg1) {
             const ret = __pubkySharedSessionStore(arg0 >>> 0, arg1);
             return ret;
         },
@@ -5583,6 +5738,10 @@ function __wbg_get_imports() {
         __wbg_abort_76dea11221098ae5: function(arg0) {
             arg0.abort();
         },
+        __wbg_accountinfo_new: function(arg0) {
+            const ret = AccountInfo.__wrap(arg0);
+            return ret;
+        },
         __wbg_append_8e87c13f0f08f8cd: function() { return handleError(function (arg0, arg1, arg2, arg3, arg4) {
             arg0.append(getStringFromWasm0(arg1, arg2), getStringFromWasm0(arg3, arg4));
         }, arguments); },
@@ -5673,10 +5832,6 @@ function __wbg_get_imports() {
             const ret = Event.__wrap(arg0);
             return ret;
         },
-        __wbg_fetch_5aa263e0c14b0c5f: function(arg0) {
-            const ret = fetch(arg0);
-            return ret;
-        },
         __wbg_fetch_7a37768ab67c5bd8: function(arg0) {
             const ret = fetch(arg0);
             return ret;
@@ -5685,6 +5840,10 @@ function __wbg_get_imports() {
             const ret = arg0.fetch(arg1);
             return ret;
         },
+        __wbg_fetch_d2beca3120ba8e1b: function(arg0) {
+            const ret = fetch(arg0);
+            return ret;
+        },
         __wbg_from_a39669ce566077da: function(arg0) {
             const ret = Array.from(arg0);
             return ret;
@@ -5699,6 +5858,10 @@ function __wbg_get_imports() {
             const ret = arg0.getReader();
             return ret;
         }, arguments); },
+        __wbg_getReader_bf34f92ee19c42b4: function() { return handleError(function (arg0) {
+            const ret = arg0.getReader();
+            return ret;
+        }, arguments); },
         __wbg_get_6cf5a4d4d8ad3c5a: function() { return handleError(function (arg0, arg1) {
             const ret = Reflect.get(arg0, arg1);
             return ret;
@@ -5760,6 +5923,16 @@ function __wbg_get_imports() {
             const ret = result;
             return ret;
         },
+        __wbg_instanceof_Blob_38df052cf775f822: function(arg0) {
+            let result;
+            try {
+                result = arg0 instanceof Blob;
+            } catch (_) {
+                result = false;
+            }
+            const ret = result;
+            return ret;
+        },
         __wbg_instanceof_CryptoKey_98e09fab6f03bfea: function(arg0) {
             let result;
             try {
@@ -5890,7 +6063,7 @@ function __wbg_get_imports() {
                     const a = state0.a;
                     state0.a = 0;
                     try {
-                        return wasm_bindgen_6fb33c0245079662___convert__closures_____invoke___js_sys_5fd4844d262c835b___Function_fn_wasm_bindgen_6fb33c0245079662___JsValue_____wasm_bindgen_6fb33c0245079662___sys__Undefined___js_sys_5fd4844d262c835b___Function_fn_wasm_bindgen_6fb33c0245079662___JsValue_____wasm_bindgen_6fb33c0245079662___sys__Undefined_______true_(a, state0.b, arg0, arg1);
+                        return wasm_bindgen_328ac0967063b244___convert__closures_____invoke___js_sys_ffedb94bf63a75b7___Function_fn_wasm_bindgen_328ac0967063b244___JsValue_____wasm_bindgen_328ac0967063b244___sys__Undefined___js_sys_ffedb94bf63a75b7___Function_fn_wasm_bindgen_328ac0967063b244___JsValue_____wasm_bindgen_328ac0967063b244___sys__Undefined_______true_(a, state0.b, arg0, arg1);
                     } finally {
                         state0.a = a;
                     }
@@ -6137,18 +6310,18 @@ function __wbg_get_imports() {
             console.warn(arg0, arg1, arg2, arg3);
         },
         __wbindgen_generic_0000000000000001: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 125, ret: Result(Unit), inner_ret: Some(Result(Unit)) }, mutable: true }) -> Externref`.
-            const ret = makeMutClosure(arg0, arg1, wasm_bindgen_6fb33c0245079662___convert__closures_____invoke___wasm_bindgen_6fb33c0245079662___JsValue__core_608f92abc48d28da___result__Result_____wasm_bindgen_6fb33c0245079662___JsError___true_);
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 128, ret: Result(Unit), inner_ret: Some(Result(Unit)) }, mutable: true }) -> Externref`.
+            const ret = makeMutClosure(arg0, arg1, wasm_bindgen_328ac0967063b244___convert__closures_____invoke___wasm_bindgen_328ac0967063b244___JsValue__core_37ee0ce0c4cd57d5___result__Result_____wasm_bindgen_328ac0967063b244___JsError___true_);
             return ret;
         },
         __wbindgen_generic_0000000000000002: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 281, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
-            const ret = makeMutClosure(arg0, arg1, wasm_bindgen_6fb33c0245079662___convert__closures_____invoke___wasm_bindgen_6fb33c0245079662___JsValue______true_);
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 288, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            const ret = makeMutClosure(arg0, arg1, wasm_bindgen_328ac0967063b244___convert__closures_____invoke___wasm_bindgen_328ac0967063b244___JsValue______true_);
             return ret;
         },
         __wbindgen_generic_0000000000000003: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 279, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
-            const ret = makeMutClosure(arg0, arg1, wasm_bindgen_6fb33c0245079662___convert__closures_____invoke_______true_);
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 286, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            const ret = makeMutClosure(arg0, arg1, wasm_bindgen_328ac0967063b244___convert__closures_____invoke_______true_);
             return ret;
         },
         __wbindgen_generic_0000000000000004: function(arg0) {
@@ -6186,14 +6359,14 @@ function __wbg_get_imports() {
         __wbindgen_generic_000000000000000a: function(arg0, arg1) {
             var v0 = getArrayJsValueFromWasm0(arg0, arg1);
             wasm.__wbindgen_free(arg0, arg1 * 4, 4);
-            // Cast intrinsic for `Vector(RustStruct { name: "GrantInfo", unique_crate_identifier: "pubky-wasm-de62feec958b8982" }) -> Externref`.
+            // Cast intrinsic for `Vector(RustStruct { name: "GrantInfo", unique_crate_identifier: "pubky-wasm-9e9e95822c39db63" }) -> Externref`.
             const ret = v0;
             return ret;
         },
         __wbindgen_generic_000000000000000b: function(arg0, arg1) {
             var v0 = getArrayJsValueFromWasm0(arg0, arg1);
             wasm.__wbindgen_free(arg0, arg1 * 4, 4);
-            // Cast intrinsic for `Vector(RustStruct { name: "StoredSessionInfo", unique_crate_identifier: "pubky-wasm-de62feec958b8982" }) -> Externref`.
+            // Cast intrinsic for `Vector(RustStruct { name: "StoredSessionInfo", unique_crate_identifier: "pubky-wasm-9e9e95822c39db63" }) -> Externref`.
             const ret = v0;
             return ret;
         },
@@ -6210,33 +6383,33 @@ function __wbg_get_imports() {
     return {
         __proto__: null,
         "./pubky_bg.js": import0,
-        "./snippets/pubky-wasm-de62feec958b8982/inline1.js": import1,
-        "./snippets/pubky-wasm-de62feec958b8982/inline1.js": import2,
-        "./snippets/pubky-wasm-de62feec958b8982/inline1.js": import3,
-        "./snippets/pubky-wasm-de62feec958b8982/inline1.js": import4,
-        "./snippets/pubky-wasm-de62feec958b8982/inline2.js": import5,
-        "./snippets/pubky-wasm-de62feec958b8982/inline0.js": import6,
-        "./snippets/pubky-wasm-de62feec958b8982/inline2.js": import7,
+        "./snippets/pubky-wasm-9e9e95822c39db63/inline1.js": import1,
+        "./snippets/pubky-wasm-9e9e95822c39db63/inline1.js": import2,
+        "./snippets/pubky-wasm-9e9e95822c39db63/inline1.js": import3,
+        "./snippets/pubky-wasm-9e9e95822c39db63/inline1.js": import4,
+        "./snippets/pubky-wasm-9e9e95822c39db63/inline2.js": import5,
+        "./snippets/pubky-wasm-9e9e95822c39db63/inline0.js": import6,
+        "./snippets/pubky-wasm-9e9e95822c39db63/inline2.js": import7,
     };
 }
 
-function wasm_bindgen_6fb33c0245079662___convert__closures_____invoke_______true_(arg0, arg1) {
-    wasm.wasm_bindgen_6fb33c0245079662___convert__closures_____invoke_______true_(arg0, arg1);
+function wasm_bindgen_328ac0967063b244___convert__closures_____invoke_______true_(arg0, arg1) {
+    wasm.wasm_bindgen_328ac0967063b244___convert__closures_____invoke_______true_(arg0, arg1);
 }
 
-function wasm_bindgen_6fb33c0245079662___convert__closures_____invoke___wasm_bindgen_6fb33c0245079662___JsValue______true_(arg0, arg1, arg2) {
-    wasm.wasm_bindgen_6fb33c0245079662___convert__closures_____invoke___wasm_bindgen_6fb33c0245079662___JsValue______true_(arg0, arg1, arg2);
+function wasm_bindgen_328ac0967063b244___convert__closures_____invoke___wasm_bindgen_328ac0967063b244___JsValue______true_(arg0, arg1, arg2) {
+    wasm.wasm_bindgen_328ac0967063b244___convert__closures_____invoke___wasm_bindgen_328ac0967063b244___JsValue______true_(arg0, arg1, arg2);
 }
 
-function wasm_bindgen_6fb33c0245079662___convert__closures_____invoke___wasm_bindgen_6fb33c0245079662___JsValue__core_608f92abc48d28da___result__Result_____wasm_bindgen_6fb33c0245079662___JsError___true_(arg0, arg1, arg2) {
-    const ret = wasm.wasm_bindgen_6fb33c0245079662___convert__closures_____invoke___wasm_bindgen_6fb33c0245079662___JsValue__core_608f92abc48d28da___result__Result_____wasm_bindgen_6fb33c0245079662___JsError___true_(arg0, arg1, arg2);
+function wasm_bindgen_328ac0967063b244___convert__closures_____invoke___wasm_bindgen_328ac0967063b244___JsValue__core_37ee0ce0c4cd57d5___result__Result_____wasm_bindgen_328ac0967063b244___JsError___true_(arg0, arg1, arg2) {
+    const ret = wasm.wasm_bindgen_328ac0967063b244___convert__closures_____invoke___wasm_bindgen_328ac0967063b244___JsValue__core_37ee0ce0c4cd57d5___result__Result_____wasm_bindgen_328ac0967063b244___JsError___true_(arg0, arg1, arg2);
     if (ret[1]) {
         throw takeFromExternrefTable0(ret[0]);
     }
 }
 
-function wasm_bindgen_6fb33c0245079662___convert__closures_____invoke___js_sys_5fd4844d262c835b___Function_fn_wasm_bindgen_6fb33c0245079662___JsValue_____wasm_bindgen_6fb33c0245079662___sys__Undefined___js_sys_5fd4844d262c835b___Function_fn_wasm_bindgen_6fb33c0245079662___JsValue_____wasm_bindgen_6fb33c0245079662___sys__Undefined_______true_(arg0, arg1, arg2, arg3) {
-    wasm.wasm_bindgen_6fb33c0245079662___convert__closures_____invoke___js_sys_5fd4844d262c835b___Function_fn_wasm_bindgen_6fb33c0245079662___JsValue_____wasm_bindgen_6fb33c0245079662___sys__Undefined___js_sys_5fd4844d262c835b___Function_fn_wasm_bindgen_6fb33c0245079662___JsValue_____wasm_bindgen_6fb33c0245079662___sys__Undefined_______true_(arg0, arg1, arg2, arg3);
+function wasm_bindgen_328ac0967063b244___convert__closures_____invoke___js_sys_ffedb94bf63a75b7___Function_fn_wasm_bindgen_328ac0967063b244___JsValue_____wasm_bindgen_328ac0967063b244___sys__Undefined___js_sys_ffedb94bf63a75b7___Function_fn_wasm_bindgen_328ac0967063b244___JsValue_____wasm_bindgen_328ac0967063b244___sys__Undefined_______true_(arg0, arg1, arg2, arg3) {
+    wasm.wasm_bindgen_328ac0967063b244___convert__closures_____invoke___js_sys_ffedb94bf63a75b7___Function_fn_wasm_bindgen_328ac0967063b244___JsValue_____wasm_bindgen_328ac0967063b244___sys__Undefined___js_sys_ffedb94bf63a75b7___Function_fn_wasm_bindgen_328ac0967063b244___JsValue_____wasm_bindgen_328ac0967063b244___sys__Undefined_______true_(arg0, arg1, arg2, arg3);
 }
 
 
@@ -6256,6 +6429,9 @@ const __wbindgen_enum_RequestCredentials = ["omit", "same-origin", "include"];
 
 
 const __wbindgen_enum_RequestMode = ["same-origin", "no-cors", "cors", "navigate"];
+const AccountInfoFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_accountinfo_free(ptr, 1));
 const AuthFlowFinalization = (typeof FinalizationRegistry === 'undefined')
     ? { register: () => {}, unregister: () => {} }
     : new FinalizationRegistry(ptr => wasm.__wbg_authflow_free(ptr, 1));