@synonymdev/pubky 0.5.4 → 0.6.0-rc.6

package/index.cjs

@@ -9,10 +9,6 @@ imports['__wbindgen_placeholder__'] = module.exports;
 let wasm;
 const { TextDecoder, TextEncoder } = require(`util`);
 
-let cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });
-
-cachedTextDecoder.decode();
-
 let cachedUint8ArrayMemory0 = null;
 
 function getUint8ArrayMemory0() {
@@ -22,38 +18,22 @@ function getUint8ArrayMemory0() {
     return cachedUint8ArrayMemory0;
 }
 
-function getStringFromWasm0(ptr, len) {
-    ptr = ptr >>> 0;
-    return cachedTextDecoder.decode(getUint8ArrayMemory0().subarray(ptr, ptr + len));
-}
+let cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });
 
-function addToExternrefTable0(obj) {
-    const idx = wasm.__externref_table_alloc();
-    wasm.__wbindgen_export_2.set(idx, obj);
-    return idx;
-}
+cachedTextDecoder.decode();
 
-function handleError(f, args) {
-    try {
-        return f.apply(this, args);
-    } catch (e) {
-        const idx = addToExternrefTable0(e);
-        wasm.__wbindgen_exn_store(idx);
-    }
+function decodeText(ptr, len) {
+    return cachedTextDecoder.decode(getUint8ArrayMemory0().subarray(ptr, ptr + len));
 }
 
-function getArrayU8FromWasm0(ptr, len) {
+function getStringFromWasm0(ptr, len) {
     ptr = ptr >>> 0;
-    return getUint8ArrayMemory0().subarray(ptr / 1, ptr / 1 + len);
-}
-
-function isLikeNone(x) {
-    return x === undefined || x === null;
+    return decodeText(ptr, len);
 }
 
 let WASM_VECTOR_LEN = 0;
 
-let cachedTextEncoder = new TextEncoder('utf-8');
+const cachedTextEncoder = new TextEncoder('utf-8');
 
 const encodeString = (typeof cachedTextEncoder.encodeInto === 'function'
     ? function (arg, view) {
@@ -116,6 +96,30 @@ function getDataViewMemory0() {
     return cachedDataViewMemory0;
 }
 
+function addToExternrefTable0(obj) {
+    const idx = wasm.__externref_table_alloc();
+    wasm.__wbindgen_export_4.set(idx, obj);
+    return idx;
+}
+
+function handleError(f, args) {
+    try {
+        return f.apply(this, args);
+    } catch (e) {
+        const idx = addToExternrefTable0(e);
+        wasm.__wbindgen_exn_store(idx);
+    }
+}
+
+function isLikeNone(x) {
+    return x === undefined || x === null;
+}
+
+function getArrayU8FromWasm0(ptr, len) {
+    ptr = ptr >>> 0;
+    return getUint8ArrayMemory0().subarray(ptr / 1, ptr / 1 + len);
+}
+
 const CLOSURE_DTORS = (typeof FinalizationRegistry === 'undefined')
     ? { register: () => {}, unregister: () => {} }
     : new FinalizationRegistry(state => {
@@ -212,132 +216,235 @@ function debugString(val) {
     return className;
 }
 
+function takeFromExternrefTable0(idx) {
+    const value = wasm.__wbindgen_export_4.get(idx);
+    wasm.__externref_table_dealloc(idx);
+    return value;
+}
+
 function _assertClass(instance, klass) {
     if (!(instance instanceof klass)) {
         throw new Error(`expected instance of ${klass.name}`);
     }
 }
 
-function takeFromExternrefTable0(idx) {
-    const value = wasm.__wbindgen_export_2.get(idx);
-    wasm.__externref_table_dealloc(idx);
-    return value;
-}
-/**
- * Create a recovery file of the `keypair`, containing the secret key encrypted
- * using the `passphrase`.
- * @param {Keypair} keypair
- * @param {string} passphrase
- * @returns {Uint8Array}
- */
-module.exports.createRecoveryFile = function(keypair, passphrase) {
-    _assertClass(keypair, Keypair);
-    const ptr0 = passStringToWasm0(passphrase, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
-    const len0 = WASM_VECTOR_LEN;
-    const ret = wasm.createRecoveryFile(keypair.__wbg_ptr, ptr0, len0);
-    return ret;
-};
-
 function passArray8ToWasm0(arg, malloc) {
     const ptr = malloc(arg.length * 1, 1) >>> 0;
     getUint8ArrayMemory0().set(arg, ptr / 1);
     WASM_VECTOR_LEN = arg.length;
     return ptr;
 }
-/**
- * Create a recovery file of the `keypair`, containing the secret key encrypted
- * using the `passphrase`.
- * @param {Uint8Array} recovery_file
- * @param {string} passphrase
- * @returns {Keypair}
- */
-module.exports.decryptRecoveryFile = function(recovery_file, passphrase) {
-    const ptr0 = passArray8ToWasm0(recovery_file, wasm.__wbindgen_malloc);
-    const len0 = WASM_VECTOR_LEN;
-    const ptr1 = passStringToWasm0(passphrase, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
-    const len1 = WASM_VECTOR_LEN;
-    const ret = wasm.decryptRecoveryFile(ptr0, len0, ptr1, len1);
-    if (ret[2]) {
-        throw takeFromExternrefTable0(ret[1]);
-    }
-    return Keypair.__wrap(ret[0]);
-};
 
 function getArrayJsValueFromWasm0(ptr, len) {
     ptr = ptr >>> 0;
     const mem = getDataViewMemory0();
     const result = [];
     for (let i = ptr; i < ptr + 4 * len; i += 4) {
-        result.push(wasm.__wbindgen_export_2.get(mem.getUint32(i, true)));
+        result.push(wasm.__wbindgen_export_4.get(mem.getUint32(i, true)));
     }
     wasm.__externref_drop_slice(ptr, len);
     return result;
 }
 /**
- * @param {string} level
+ * Set the global logging verbosity for the WASM Pubky SDK. Routes Rust `log` output to the browser console.
+ *
+ * Accepted values (case-sensitive): "error" | "warn" | "info" | "debug" | "trace".
+ * Effects:
+ * - Initializes the logger once; subsequent calls may throw if the logger is already set.
+ * - Emits a single info log: `Log level set to: <level>`.
+ * - Messages at or above `level` are forwarded to the appropriate `console.*` method.
+ *
+ * @param {Level} level
+ *        Minimum log level to enable. One of: "error" | "warn" | "info" | "debug" | "trace".
+ *
+ * @returns {void}
+ *
+ * @throws {Error}
+ *         If `level` is invalid ("Invalid log level") or the logger cannot be initialized
+ *         (e.g., already initialized).
+ *
+ * Usage:
+ *   Call once at application startup, before invoking other SDK APIs.
+ * @param {Level} level
  */
 module.exports.setLogLevel = function(level) {
-    const ptr0 = passStringToWasm0(level, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
-    const len0 = WASM_VECTOR_LEN;
-    const ret = wasm.setLogLevel(ptr0, len0);
+    const ret = wasm.setLogLevel((__wbindgen_enum_Level.indexOf(level) + 1 || 6) - 1);
     if (ret[1]) {
         throw takeFromExternrefTable0(ret[0]);
     }
 };
 
-function __wbg_adapter_28(arg0, arg1) {
-    wasm._dyn_core__ops__function__FnMut_____Output___R_as_wasm_bindgen__closure__WasmClosure___describe__invoke__h05941f9305bd75fb(arg0, arg1);
+/**
+ * Resolve a `pubky://` or `pubky<pk>/…` identifier into the homeserver transport URL.
+ *
+ * @param {string} identifier Either `pubky<pk>/...` (preferred) or `pubky://<pk>/...`.
+ * @returns {string} HTTPS URL in the form `https://_pubky.<pk>/...`.
+ * @param {string} identifier
+ * @returns {string}
+ */
+module.exports.resolvePubky = function(identifier) {
+    let deferred3_0;
+    let deferred3_1;
+    try {
+        const ptr0 = passStringToWasm0(identifier, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.resolvePubky(ptr0, len0);
+        var ptr2 = ret[0];
+        var len2 = ret[1];
+        if (ret[3]) {
+            ptr2 = 0; len2 = 0;
+            throw takeFromExternrefTable0(ret[2]);
+        }
+        deferred3_0 = ptr2;
+        deferred3_1 = len2;
+        return getStringFromWasm0(ptr2, len2);
+    } finally {
+        wasm.__wbindgen_free(deferred3_0, deferred3_1, 1);
+    }
+};
+
+/**
+ * Validate and normalize a capabilities string.
+ *
+ * - Normalizes action order (`wr` -> `rw`)
+ * - Throws `InvalidInput` listing malformed entries.
+ *
+ * @param {string} input
+ * @returns {string} Normalized string (same shape as input).
+ * @throws {PubkyError} `{ name: "InvalidInput" }` with a helpful message.
+ * The error's `data` field is `{ invalidEntries: string[] }` listing malformed tokens.
+ * @param {string} input
+ * @returns {string}
+ */
+module.exports.validateCapabilities = function(input) {
+    let deferred3_0;
+    let deferred3_1;
+    try {
+        const ptr0 = passStringToWasm0(input, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.validateCapabilities(ptr0, len0);
+        var ptr2 = ret[0];
+        var len2 = ret[1];
+        if (ret[3]) {
+            ptr2 = 0; len2 = 0;
+            throw takeFromExternrefTable0(ret[2]);
+        }
+        deferred3_0 = ptr2;
+        deferred3_1 = len2;
+        return getStringFromWasm0(ptr2, len2);
+    } finally {
+        wasm.__wbindgen_free(deferred3_0, deferred3_1, 1);
+    }
+};
+
+function __wbg_adapter_54(arg0, arg1) {
+    wasm.wasm_bindgen__convert__closures_____invoke__hb6e4fd3a69a27099(arg0, arg1);
 }
 
-function __wbg_adapter_31(arg0, arg1, arg2) {
-    wasm.closure147_externref_shim(arg0, arg1, arg2);
+function __wbg_adapter_57(arg0, arg1, arg2) {
+    wasm.closure179_externref_shim(arg0, arg1, arg2);
 }
 
-function __wbg_adapter_74(arg0, arg1, arg2, arg3) {
-    wasm.closure70_externref_shim(arg0, arg1, arg2, arg3);
+function __wbg_adapter_128(arg0, arg1, arg2, arg3) {
+    wasm.closure89_externref_shim(arg0, arg1, arg2, arg3);
 }
 
+const __wbindgen_enum_Level = ["error", "warn", "info", "debug", "trace"];
+
+const __wbindgen_enum_ReadableStreamType = ["bytes"];
+
+const __wbindgen_enum_RequestCache = ["default", "no-store", "reload", "no-cache", "force-cache", "only-if-cached"];
+
 const __wbindgen_enum_RequestCredentials = ["omit", "same-origin", "include"];
 
 const __wbindgen_enum_RequestMode = ["same-origin", "no-cors", "cors", "navigate"];
 
-const AuthRequestFinalization = (typeof FinalizationRegistry === 'undefined')
+const AuthFlowFinalization = (typeof FinalizationRegistry === 'undefined')
     ? { register: () => {}, unregister: () => {} }
-    : new FinalizationRegistry(ptr => wasm.__wbg_authrequest_free(ptr >>> 0, 1));
-
-class AuthRequest {
+    : new FinalizationRegistry(ptr => wasm.__wbg_authflow_free(ptr >>> 0, 1));
+/**
+ * Start and control a pubkyauth authorization flow.
+ *
+ * Typical flow:
+ * 1) `AuthFlow.start(...)` or `pubky.startAuthFlow(...)`
+ * 2) Show `authorizationUrl()` as QR/deeplink to the user’s signing device
+ * 3) `awaitApproval()` to receive a ready `Session`
+ */
+class AuthFlow {
 
     static __wrap(ptr) {
         ptr = ptr >>> 0;
-        const obj = Object.create(AuthRequest.prototype);
+        const obj = Object.create(AuthFlow.prototype);
         obj.__wbg_ptr = ptr;
-        AuthRequestFinalization.register(obj, obj.__wbg_ptr, obj);
+        AuthFlowFinalization.register(obj, obj.__wbg_ptr, obj);
         return obj;
     }
 
     __destroy_into_raw() {
         const ptr = this.__wbg_ptr;
         this.__wbg_ptr = 0;
-        AuthRequestFinalization.unregister(this);
+        AuthFlowFinalization.unregister(this);
         return ptr;
     }
 
     free() {
         const ptr = this.__destroy_into_raw();
-        wasm.__wbg_authrequest_free(ptr, 0);
+        wasm.__wbg_authflow_free(ptr, 0);
+    }
+    /**
+     * Start a flow (standalone).
+     * Prefer `pubky.startAuthFlow()` to reuse a facade client.
+     *
+     * @param {string} capabilities
+     * Comma-separated capabilities, e.g. `"/pub/app/:rw,/priv/foo.txt:r"`.
+     * Each entry must be `"<scope>:<actions>"`, where:
+     * - `scope` starts with `/` (e.g. `/pub/example.app/`)
+     * - `actions` is any combo of `r` and/or `w` (order is normalized; `wr` -> `rw`)
+     * Empty string is allowed (no scopes).
+     *
+     * @param {string} [relay]
+     * Optional HTTP relay base, e.g. `"https://demo.httprelay.io/link/"`.
+     * Defaults to the default Synonym-hosted relay when omitted.
+     *
+     * @returns {AuthFlow}
+     * A running auth flow. Call `authorizationUrl()` to show the deep link,
+     * then `awaitApproval()` to receive a `Session`.
+     * @throws {PubkyError}
+     * - `{ name: "InvalidInput", message: string }` if any capability entry is invalid
+     *     or for an invalid relay URL.
+     * @example
+     * const flow = AuthFlow.start("/pub/my.app/:rw,/pub/pubky.app/:w");
+     * renderQRCode(flow.authorizationUrl());
+     * const session = await flow.awaitApproval();
+     * @param {Capabilities} capabilities
+     * @param {string | null} [relay]
+     * @returns {AuthFlow}
+     */
+    static start(capabilities, relay) {
+        const ptr0 = passStringToWasm0(capabilities, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        var ptr1 = isLikeNone(relay) ? 0 : passStringToWasm0(relay, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        var len1 = WASM_VECTOR_LEN;
+        const ret = wasm.authflow_start(ptr0, len0, ptr1, len1);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        return AuthFlow.__wrap(ret[0]);
     }
     /**
-     * Returns the Pubky Auth url, which you should show to the user
-     * to request an authentication or authorization token.
+     * Return the authorization deep link (URL) to show as QR or open on the signer device.
+     *
+     * @returns {string} A `pubkyauth://…` or `https://…` URL with channel info.
      *
-     * Wait for this token using `this.response()`.
+     * @example
+     * renderQr(flow.authorizationUrl());
      * @returns {string}
      */
-    url() {
+    get authorizationUrl() {
         let deferred1_0;
         let deferred1_1;
         try {
-            const ret = wasm.authrequest_url(this.__wbg_ptr);
+            const ret = wasm.authflow_authorizationUrl(this.__wbg_ptr);
             deferred1_0 = ret[0];
             deferred1_1 = ret[1];
             return getStringFromWasm0(ret[0], ret[1]);
@@ -346,194 +453,234 @@ class AuthRequest {
         }
     }
     /**
-     * Wait for the user to send an authentication or authorization proof.
+     * Block until the user approves on their signer device; returns a `Session`.
+     *
+     * @returns {Promise<Session>}
+     * Resolves when approved; rejects on timeout/cancel/network errors.
+     *
+     * @throws {PubkyError}
+     * - `RequestError` if relay/network fails
+     * - `AuthenticationError` if approval is denied/invalid
+     * @returns {Promise<Session>}
+     */
+    awaitApproval() {
+        const ptr = this.__destroy_into_raw();
+        const ret = wasm.authflow_awaitApproval(ptr);
+        return ret;
+    }
+    /**
+     * Block until the user approves on their signer device; returns an `AuthToken`.
+     *
+     * @returns {Promise<AuthToken>}
+     * Resolves when approved; rejects on timeout/cancel/network errors.
      *
-     * If successful, you should expect an instance of [PublicKey]
+     * @throws {PubkyError}
+     * - `RequestError` if relay/network fails
+     * @returns {Promise<AuthToken>}
+     */
+    awaitToken() {
+        const ptr = this.__destroy_into_raw();
+        const ret = wasm.authflow_awaitToken(ptr);
+        return ret;
+    }
+    /**
+     * Non-blocking single poll step (advanced UIs).
      *
-     * Otherwise it will throw an error.
-     * @returns {Promise<PublicKey>}
+     * @returns {Promise<Session|undefined>} A session if the approval arrived, otherwise `undefined`.
+     * @returns {Promise<Session | undefined>}
      */
-    response() {
-        const ret = wasm.authrequest_response(this.__wbg_ptr);
+    tryPollOnce() {
+        const ret = wasm.authflow_tryPollOnce(this.__wbg_ptr);
         return ret;
     }
 }
-module.exports.AuthRequest = AuthRequest;
+module.exports.AuthFlow = AuthFlow;
 
-const ClientFinalization = (typeof FinalizationRegistry === 'undefined')
+const AuthTokenFinalization = (typeof FinalizationRegistry === 'undefined')
     ? { register: () => {}, unregister: () => {} }
-    : new FinalizationRegistry(ptr => wasm.__wbg_client_free(ptr >>> 0, 1));
-
-class Client {
+    : new FinalizationRegistry(ptr => wasm.__wbg_authtoken_free(ptr >>> 0, 1));
+/**
+ * AuthToken: signed, time-bound proof of key ownership.
+ *
+ * Returned by [`AuthFlow.awaitToken()`] on the 3rd-party app side when doing **authentication-only**
+ * flows (no homeserver session). You can inspect who authenticated and which capabilities were
+ * requested, or serialize the token and send it to a backend to verify.
+ *
+ * ### Typical usage
+ * ```js
+ * // Start an auth-only flow (no capabilities)
+ * const flow = pubky.startAuthFlow("", relay);
+ *
+ * // Wait for the signer to approve; returns an AuthToken
+ * const token = await flow.awaitToken();
+ *
+ * // Identify the user
+ * console.log(token.publicKey().z32());
+ *
+ * // Optionally forward to a server for verification:
+ * await fetch("/api/verify", { method: "POST", body: token.toBytes() });
+ * ```
+ *
+ * ### Binary format
+ * `AuthToken` serializes to a canonical binary (postcard) form; use [`AuthToken.toBytes()`] to get a
+ * `Uint8Array`, and [`AuthToken.verify()`] to parse + verify on the server.
+ */
+class AuthToken {
 
     static __wrap(ptr) {
         ptr = ptr >>> 0;
-        const obj = Object.create(Client.prototype);
+        const obj = Object.create(AuthToken.prototype);
         obj.__wbg_ptr = ptr;
-        ClientFinalization.register(obj, obj.__wbg_ptr, obj);
+        AuthTokenFinalization.register(obj, obj.__wbg_ptr, obj);
         return obj;
     }
 
     __destroy_into_raw() {
         const ptr = this.__wbg_ptr;
         this.__wbg_ptr = 0;
-        ClientFinalization.unregister(this);
+        AuthTokenFinalization.unregister(this);
         return ptr;
     }
 
     free() {
         const ptr = this.__destroy_into_raw();
-        wasm.__wbg_client_free(ptr, 0);
+        wasm.__wbg_authtoken_free(ptr, 0);
     }
     /**
-     * Signup to a homeserver and update Pkarr accordingly.
+     * Parse and verify an `AuthToken` from its canonical bytes.
      *
-     * The homeserver is a Pkarr domain name, where the TLD is a Pkarr public key
-     * for example "pubky.o4dksfbqk85ogzdb5osziw6befigbuxmuxkuxq8434q89uj56uyy"
-     * @param {Keypair} keypair
-     * @param {PublicKey} homeserver
-     * @param {string | null} [signup_token]
-     * @returns {Promise<Session>}
-     */
-    signup(keypair, homeserver, signup_token) {
-        _assertClass(keypair, Keypair);
-        _assertClass(homeserver, PublicKey);
-        var ptr0 = isLikeNone(signup_token) ? 0 : passStringToWasm0(signup_token, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
-        var len0 = WASM_VECTOR_LEN;
-        const ret = wasm.client_signup(this.__wbg_ptr, keypair.__wbg_ptr, homeserver.__wbg_ptr, ptr0, len0);
-        return ret;
-    }
-    /**
-     * Check the current session for a given Pubky in its homeserver.
+     * - Verifies version, timestamp freshness window, and signature.
+     * - Throws on invalid/expired/unknown version.
      *
-     * Returns [Session] or `None` (if received `404 NOT_FOUND`),
-     * or throws the received error if the response has any other `>=400` status code.
-     * @param {PublicKey} pubky
-     * @returns {Promise<Session | undefined>}
-     */
-    session(pubky) {
-        _assertClass(pubky, PublicKey);
-        const ret = wasm.client_session(this.__wbg_ptr, pubky.__wbg_ptr);
-        return ret;
-    }
-    /**
-     * Signout from a homeserver.
-     * @param {PublicKey} pubky
-     * @returns {Promise<void>}
-     */
-    signout(pubky) {
-        _assertClass(pubky, PublicKey);
-        const ret = wasm.client_signout(this.__wbg_ptr, pubky.__wbg_ptr);
-        return ret;
-    }
-    /**
-     * Signin to a homeserver using the root Keypair.
-     * @param {Keypair} keypair
-     * @returns {Promise<void>}
+     * Use this on your server after receiving `Uint8Array` from the client.
+     *
+     * ```js
+     * import { AuthToken } from "@synonymdev/pubky";
+     *
+     * export async function POST(req) {
+     *   const bytes = new Uint8Array(await req.arrayBuffer());
+     *   const token = AuthToken.verify(bytes); // throws on failure
+     *   return new Response(token.publicKey().z32(), { status: 200 });
+     * }
+     * ```
+     * @param {Uint8Array} bytes
+     * @returns {AuthToken}
      */
-    signin(keypair) {
-        _assertClass(keypair, Keypair);
-        const ret = wasm.client_signin(this.__wbg_ptr, keypair.__wbg_ptr);
-        return ret;
+    static verify(bytes) {
+        const ret = wasm.authtoken_verify(bytes);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        return AuthToken.__wrap(ret[0]);
     }
     /**
-     * Return `pubkyauth://` url and wait for the incoming [AuthToken]
-     * verifying that AuthToken, and if capabilities were requested, signing in to
-     * the Pubky's homeserver and returning the [Session] information.
+     * Deserialize an `AuthToken` **without** verification.
      *
-     * Returns a [AuthRequest]
-     * @param {string} relay
-     * @param {string} capabilities
-     * @returns {AuthRequest}
+     * Most apps should call [`AuthToken.verify()`]. This is provided for tooling or diagnostics
+     * where you want to inspect the structure first.
+     *
+     * Throws if the bytes cannot be parsed as a valid serialized token.
+     * @param {Uint8Array} bytes
+     * @returns {AuthToken}
      */
-    authRequest(relay, capabilities) {
-        const ptr0 = passStringToWasm0(relay, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
-        const len0 = WASM_VECTOR_LEN;
-        const ptr1 = passStringToWasm0(capabilities, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
-        const len1 = WASM_VECTOR_LEN;
-        const ret = wasm.client_authRequest(this.__wbg_ptr, ptr0, len0, ptr1, len1);
+    static fromBytes(bytes) {
+        const ret = wasm.authtoken_fromBytes(bytes);
         if (ret[2]) {
             throw takeFromExternrefTable0(ret[1]);
         }
-        return AuthRequest.__wrap(ret[0]);
+        return AuthToken.__wrap(ret[0]);
     }
     /**
-     * Sign an [pubky_common::auth::AuthToken], encrypt it and send it to the
-     * source of the pubkyauth request url.
-     * @param {Keypair} keypair
-     * @param {string} pubkyauth_url
-     * @returns {Promise<void>}
+     * Returns the **public key** that authenticated with this token.
+     *
+     * Use `.z32()` on the returned `PublicKey` to get the string form.
+     *
+     * @example
+     * const who = sessionInfo.publicKey.z32();
+     * @returns {PublicKey}
      */
-    sendAuthToken(keypair, pubkyauth_url) {
-        _assertClass(keypair, Keypair);
-        const ptr0 = passStringToWasm0(pubkyauth_url, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
-        const len0 = WASM_VECTOR_LEN;
-        const ret = wasm.client_sendAuthToken(this.__wbg_ptr, keypair.__wbg_ptr, ptr0, len0);
-        return ret;
+    get publicKey() {
+        const ret = wasm.authtoken_publicKey(this.__wbg_ptr);
+        return PublicKey.__wrap(ret);
     }
     /**
-     * Get the homeserver id for a given Pubky public key.
-     * Looks up the pkarr packet for the given public key and returns the content of the first `_pubky` SVCB record.
-     * Throws an error if no homeserver is found.
-     * @param {PublicKey} public_key
-     * @returns {Promise<PublicKey>}
+     * Returns the **capabilities** requested by the flow at the time this token was signed.
+     *
+     * Most auth-only flows pass an empty string to `startAuthFlow("", relay)`, so this will
+     * commonly be an empty array.
+     *
+     * Returns: `string[]`, where each item is the canonical entry `"<scope>:<actions>"`.
+     *
+     * Example entry: `"/pub/my.app/:rw"`
+     * @returns {string[]}
      */
-    getHomeserver(public_key) {
-        _assertClass(public_key, PublicKey);
-        const ret = wasm.client_getHomeserver(this.__wbg_ptr, public_key.__wbg_ptr);
-        return ret;
+    get capabilities() {
+        const ret = wasm.authtoken_capabilities(this.__wbg_ptr);
+        var v1 = getArrayJsValueFromWasm0(ret[0], ret[1]).slice();
+        wasm.__wbindgen_free(ret[0], ret[1] * 4, 4);
+        return v1;
     }
     /**
-     * Republish the user's PKarr record pointing to their homeserver.
+     * Serialize the token to a `Uint8Array` in its **canonical** (postcard) binary format.
      *
-     * This method will republish the record if no record exists or if the existing record
-     * is older than 6 hours.
+     * Use this to send the token to a backend for verification.
      *
-     * The method is intended for clients and key managers (e.g., pubky-ring) to
-     * keep the records of active users fresh and available in the DHT and relays.
-     * It is intended to be used only after failed signin due to homeserver resolution
-     * failure. This method is lighter than performing a re-signup into the last known
-     * homeserver, but does not return a session token, so a signin must be done after
-     * republishing. On a failed signin due to homeserver resolution failure, a key
-     * manager should always attempt to republish the last known homeserver.
-     * @param {Keypair} keypair
-     * @param {PublicKey} host
-     * @returns {Promise<void>}
+     * ```js
+     * const bytes = token.toBytes();
+     * await fetch("/api/verify", { method: "POST", body: bytes });
+     * ```
+     * @returns {Uint8Array}
      */
-    republishHomeserver(keypair, host) {
-        _assertClass(keypair, Keypair);
-        _assertClass(host, PublicKey);
-        const ret = wasm.client_republishHomeserver(this.__wbg_ptr, keypair.__wbg_ptr, host.__wbg_ptr);
+    toBytes() {
+        const ret = wasm.authtoken_toBytes(this.__wbg_ptr);
         return ret;
     }
+}
+module.exports.AuthToken = AuthToken;
+
+const ClientFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_client_free(ptr >>> 0, 1));
+/**
+ * Low-level HTTP bridge used by the Pubky facade and actors.
+ *
+ * - Supports `http(s)://` URLs targeting Pubky or ICANN hosts.
+ * - In browsers/undici, passes `credentials: "include"` to send cookies.
+ */
+class Client {
+
+    static __wrap(ptr) {
+        ptr = ptr >>> 0;
+        const obj = Object.create(Client.prototype);
+        obj.__wbg_ptr = ptr;
+        ClientFinalization.register(obj, obj.__wbg_ptr, obj);
+        return obj;
+    }
+
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        ClientFinalization.unregister(this);
+        return ptr;
+    }
+
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_client_free(ptr, 0);
+    }
     /**
-     * Returns a list of Pubky urls (as strings).
+     * Perform a raw fetch. Works with `http(s)://` URLs.
      *
-     * - `url`:     The Pubky url (string) to the directory you want to list its content.
-     * - `cursor`:  Either a full `pubky://` Url (from previous list response),
-     *                 or a path (to a file or directory) relative to the `url`
-     * - `reverse`: List in reverse order
-     * - `limit`    Limit the number of urls in the response
-     * - `shallow`: List directories and files, instead of flat list of files.
      * @param {string} url
-     * @param {string | null} [cursor]
-     * @param {boolean | null} [reverse]
-     * @param {number | null} [limit]
-     * @param {boolean | null} [shallow]
-     * @returns {Promise<Array<any>>}
-     */
-    list(url, cursor, reverse, limit, shallow) {
-        const ptr0 = passStringToWasm0(url, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
-        const len0 = WASM_VECTOR_LEN;
-        var ptr1 = isLikeNone(cursor) ? 0 : passStringToWasm0(cursor, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
-        var len1 = WASM_VECTOR_LEN;
-        const ret = wasm.client_list(this.__wbg_ptr, ptr0, len0, ptr1, len1, isLikeNone(reverse) ? 0xFFFFFF : reverse ? 1 : 0, isLikeNone(limit) ? 0xFFFFFF : limit, isLikeNone(shallow) ? 0xFFFFFF : shallow ? 1 : 0);
-        return ret;
-    }
-    /**
+     * @param {RequestInit} init Standard fetch options; `credentials: "include"` recommended for session I/O.
+     * @returns {Promise<Response>}
+     *
+     * @example
+     * const client = pubky.client;
+     * const res = await client.fetch(`https://_pubky.${user}/pub/app/file.txt`, { method: "PUT", body: "hi", credentials: "include" });
      * @param {string} url
-     * @param {any | null} [init]
-     * @returns {Promise<Promise<any>>}
+     * @param {RequestInit | null} [init]
+     * @returns {Promise<Response>}
      */
     fetch(url, init) {
         const ptr0 = passStringToWasm0(url, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
@@ -542,7 +689,24 @@ class Client {
         return ret;
     }
     /**
-     * Create a new Pubky Client with an optional configuration.
+     * Create a Pubky HTTP client.
+     *
+     * @param {PubkyClientConfig} [config]
+     * Optional transport overrides:
+     * `{ pkarr?: { relays?: string[], request_timeout?: number } }`.
+     *
+     * @returns {Client}
+     * A configured low-level client. Prefer `new Pubky().client` unless you
+     * need custom relays/timeouts.
+     *
+     * @throws {InvalidInput}
+     * If any PKARR relay URL is invalid.
+     *
+     * @example
+     * const client = new Client({
+     *   pkarr: { relays: ["https://relay1/","https://relay2/"], request_timeout: 8000 }
+     * });
+     * const pubky = Pubky.withClient(client);
      * @param {PubkyClientConfig | null} [config_opt]
      */
     constructor(config_opt) {
@@ -555,10 +719,22 @@ class Client {
         return this;
     }
     /**
-     * Create a client with with configurations appropriate for local testing:
-     * - set Pkarr relays to `http://<host>:15411` (defaults to `localhost`).
-     * - transform `pubky://<pkarr public key>` to `http://<host>` instead of `https:`
-     *   and read the homeserver HTTP port from the PKarr record.
+     * Create a client wired for **local testnet**.
+     *
+     * Configures PKARR relays for the testnet and remembers the hostname for WASM `_pubky` mapping.
+     *
+     * @param {string} [host="localhost"]
+     * Testnet hostname or IP.
+     *
+     * @returns {Client}
+     * A client ready to talk to your local testnet.
+     *
+     * @example
+     * const client = Client.testnet();           // localhost
+     * const pubky  = Pubky.withClient(client);
+     *
+     * @example
+     * const client = Client.testnet("docker0");  // custom host
      * @param {string | null} [host]
      * @returns {Client}
      */
@@ -566,18 +742,158 @@ class Client {
         var ptr0 = isLikeNone(host) ? 0 : passStringToWasm0(host, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
         var len0 = WASM_VECTOR_LEN;
         const ret = wasm.client_testnet(ptr0, len0);
-        return Client.__wrap(ret);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        return Client.__wrap(ret[0]);
     }
 }
 module.exports.Client = Client;
 
-const KeypairFinalization = (typeof FinalizationRegistry === 'undefined')
+const IntoUnderlyingByteSourceFinalization = (typeof FinalizationRegistry === 'undefined')
     ? { register: () => {}, unregister: () => {} }
-    : new FinalizationRegistry(ptr => wasm.__wbg_keypair_free(ptr >>> 0, 1));
+    : new FinalizationRegistry(ptr => wasm.__wbg_intounderlyingbytesource_free(ptr >>> 0, 1));
 
-class Keypair {
+class IntoUnderlyingByteSource {
 
-    static __wrap(ptr) {
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        IntoUnderlyingByteSourceFinalization.unregister(this);
+        return ptr;
+    }
+
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_intounderlyingbytesource_free(ptr, 0);
+    }
+    /**
+     * @returns {ReadableStreamType}
+     */
+    get type() {
+        const ret = wasm.intounderlyingbytesource_type(this.__wbg_ptr);
+        return __wbindgen_enum_ReadableStreamType[ret];
+    }
+    /**
+     * @returns {number}
+     */
+    get autoAllocateChunkSize() {
+        const ret = wasm.intounderlyingbytesource_autoAllocateChunkSize(this.__wbg_ptr);
+        return ret >>> 0;
+    }
+    /**
+     * @param {ReadableByteStreamController} controller
+     */
+    start(controller) {
+        wasm.intounderlyingbytesource_start(this.__wbg_ptr, controller);
+    }
+    /**
+     * @param {ReadableByteStreamController} controller
+     * @returns {Promise<any>}
+     */
+    pull(controller) {
+        const ret = wasm.intounderlyingbytesource_pull(this.__wbg_ptr, controller);
+        return ret;
+    }
+    cancel() {
+        const ptr = this.__destroy_into_raw();
+        wasm.intounderlyingbytesource_cancel(ptr);
+    }
+}
+module.exports.IntoUnderlyingByteSource = IntoUnderlyingByteSource;
+
+const IntoUnderlyingSinkFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_intounderlyingsink_free(ptr >>> 0, 1));
+
+class IntoUnderlyingSink {
+
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        IntoUnderlyingSinkFinalization.unregister(this);
+        return ptr;
+    }
+
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_intounderlyingsink_free(ptr, 0);
+    }
+    /**
+     * @param {any} chunk
+     * @returns {Promise<any>}
+     */
+    write(chunk) {
+        const ret = wasm.intounderlyingsink_write(this.__wbg_ptr, chunk);
+        return ret;
+    }
+    /**
+     * @returns {Promise<any>}
+     */
+    close() {
+        const ptr = this.__destroy_into_raw();
+        const ret = wasm.intounderlyingsink_close(ptr);
+        return ret;
+    }
+    /**
+     * @param {any} reason
+     * @returns {Promise<any>}
+     */
+    abort(reason) {
+        const ptr = this.__destroy_into_raw();
+        const ret = wasm.intounderlyingsink_abort(ptr, reason);
+        return ret;
+    }
+}
+module.exports.IntoUnderlyingSink = IntoUnderlyingSink;
+
+const IntoUnderlyingSourceFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_intounderlyingsource_free(ptr >>> 0, 1));
+
+class IntoUnderlyingSource {
+
+    static __wrap(ptr) {
+        ptr = ptr >>> 0;
+        const obj = Object.create(IntoUnderlyingSource.prototype);
+        obj.__wbg_ptr = ptr;
+        IntoUnderlyingSourceFinalization.register(obj, obj.__wbg_ptr, obj);
+        return obj;
+    }
+
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        IntoUnderlyingSourceFinalization.unregister(this);
+        return ptr;
+    }
+
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_intounderlyingsource_free(ptr, 0);
+    }
+    /**
+     * @param {ReadableStreamDefaultController} controller
+     * @returns {Promise<any>}
+     */
+    pull(controller) {
+        const ret = wasm.intounderlyingsource_pull(this.__wbg_ptr, controller);
+        return ret;
+    }
+    cancel() {
+        const ptr = this.__destroy_into_raw();
+        wasm.intounderlyingsource_cancel(ptr);
+    }
+}
+module.exports.IntoUnderlyingSource = IntoUnderlyingSource;
+
+const KeypairFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_keypair_free(ptr >>> 0, 1));
+
+class Keypair {
+
+    static __wrap(ptr) {
         ptr = ptr >>> 0;
         const obj = Object.create(Keypair.prototype);
         obj.__wbg_ptr = ptr;
@@ -624,244 +940,1271 @@ class Keypair {
      */
     secretKey() {
         const ret = wasm.keypair_secretKey(this.__wbg_ptr);
-        var v1 = getArrayU8FromWasm0(ret[0], ret[1]).slice();
-        wasm.__wbindgen_free(ret[0], ret[1] * 1, 1);
-        return v1;
+        return ret;
     }
     /**
      * Returns the [PublicKey] of this keypair.
+     *
+     * Use `.z32()` on the returned `PublicKey` to get the string form.
+     *
+     * @example
+     * const who = keypair.publicKey.z32();
      * @returns {PublicKey}
      */
-    publicKey() {
+    get publicKey() {
         const ret = wasm.keypair_publicKey(this.__wbg_ptr);
         return PublicKey.__wrap(ret);
     }
+    /**
+     * Create a recovery file for this keypair (encrypted with the given passphrase).
+     * @param {string} passphrase
+     * @returns {Uint8Array}
+     */
+    createRecoveryFile(passphrase) {
+        const ptr0 = passStringToWasm0(passphrase, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.keypair_createRecoveryFile(this.__wbg_ptr, ptr0, len0);
+        return ret;
+    }
+    /**
+     * Decrypt a recovery file and return a Keypair (decrypted with the given passphrase).
+     * @param {Uint8Array} recovery_file
+     * @param {string} passphrase
+     * @returns {Keypair}
+     */
+    static fromRecoveryFile(recovery_file, passphrase) {
+        const ptr0 = passArray8ToWasm0(recovery_file, wasm.__wbindgen_malloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ptr1 = passStringToWasm0(passphrase, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len1 = WASM_VECTOR_LEN;
+        const ret = wasm.keypair_fromRecoveryFile(ptr0, len0, ptr1, len1);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        return Keypair.__wrap(ret[0]);
+    }
 }
 module.exports.Keypair = Keypair;
 
-const PublicKeyFinalization = (typeof FinalizationRegistry === 'undefined')
+const PkdnsFinalization = (typeof FinalizationRegistry === 'undefined')
     ? { register: () => {}, unregister: () => {} }
-    : new FinalizationRegistry(ptr => wasm.__wbg_publickey_free(ptr >>> 0, 1));
-
-class PublicKey {
+    : new FinalizationRegistry(ptr => wasm.__wbg_pkdns_free(ptr >>> 0, 1));
+/**
+ * Resolve/publish `_pubky` PKDNS records (homeserver pointers).
+ */
+class Pkdns {
 
     static __wrap(ptr) {
         ptr = ptr >>> 0;
-        const obj = Object.create(PublicKey.prototype);
+        const obj = Object.create(Pkdns.prototype);
         obj.__wbg_ptr = ptr;
-        PublicKeyFinalization.register(obj, obj.__wbg_ptr, obj);
+        PkdnsFinalization.register(obj, obj.__wbg_ptr, obj);
         return obj;
     }
 
     __destroy_into_raw() {
         const ptr = this.__wbg_ptr;
         this.__wbg_ptr = 0;
-        PublicKeyFinalization.unregister(this);
+        PkdnsFinalization.unregister(this);
         return ptr;
     }
 
     free() {
         const ptr = this.__destroy_into_raw();
-        wasm.__wbg_publickey_free(ptr, 0);
+        wasm.__wbg_pkdns_free(ptr, 0);
     }
     /**
-     * Convert the PublicKey to Uint8Array
-     * @deprecated Use `toUint8Array` instead
-     * @returns {Uint8Array}
+     * Read-only PKDNS actor (no keypair; resolve only).
      */
-    to_uint8array() {
-        const ret = wasm.publickey_to_uint8array(this.__wbg_ptr);
-        var v1 = getArrayU8FromWasm0(ret[0], ret[1]).slice();
-        wasm.__wbindgen_free(ret[0], ret[1] * 1, 1);
-        return v1;
+    constructor() {
+        const ret = wasm.pkdns_new();
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        this.__wbg_ptr = ret[0] >>> 0;
+        PkdnsFinalization.register(this, this.__wbg_ptr, this);
+        return this;
     }
     /**
-     * Convert the PublicKey to Uint8Array
-     * @returns {Uint8Array}
+     * PKDNS actor with publishing enabled (requires a keypair).
+     * @param {Keypair} keypair
+     * @returns {Pkdns}
      */
-    toUint8Array() {
-        const ret = wasm.publickey_toUint8Array(this.__wbg_ptr);
-        var v1 = getArrayU8FromWasm0(ret[0], ret[1]).slice();
-        wasm.__wbindgen_free(ret[0], ret[1] * 1, 1);
-        return v1;
+    static fromKeypair(keypair) {
+        _assertClass(keypair, Keypair);
+        const ret = wasm.pkdns_fromKeypair(keypair.__wbg_ptr);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        return Pkdns.__wrap(ret[0]);
     }
     /**
-     * Returns the z-base32 encoding of this public key
-     * @returns {string}
+     * Resolve the homeserver for a given public key (read-only).
+     *
+     * @param {PublicKey} user
+     * @returns {Promise<PublicKey|undefined>} Homeserver public key or `undefined` if not found.
+     * @param {PublicKey} pubky
+     * @returns {Promise<PublicKey | undefined>}
      */
-    z32() {
-        let deferred1_0;
-        let deferred1_1;
-        try {
-            const ret = wasm.publickey_z32(this.__wbg_ptr);
-            deferred1_0 = ret[0];
-            deferred1_1 = ret[1];
-            return getStringFromWasm0(ret[0], ret[1]);
-        } finally {
-            wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
+    getHomeserverOf(pubky) {
+        _assertClass(pubky, PublicKey);
+        const ret = wasm.pkdns_getHomeserverOf(this.__wbg_ptr, pubky.__wbg_ptr);
+        return ret;
+    }
+    /**
+     * Resolve the homeserver for **this** user (requires keypair).
+     *
+     * @returns {Promise<PublicKey|undefined>} Homeserver public key or `undefined` if not found.
+     * @returns {Promise<PublicKey | undefined>}
+     */
+    getHomeserver() {
+        const ret = wasm.pkdns_getHomeserver(this.__wbg_ptr);
+        return ret;
+    }
+    /**
+     * Force publish homeserver immediately (even if fresh).
+     *
+     * Requires keypair or to be signer bound.
+     *
+     * @param {PublicKey=} overrideHost Optional new homeserver to publish (migration).
+     * @returns {Promise<void>}
+     * @param {PublicKey | null} [host_override]
+     * @returns {Promise<void>}
+     */
+    publishHomeserverForce(host_override) {
+        let ptr0 = 0;
+        if (!isLikeNone(host_override)) {
+            _assertClass(host_override, PublicKey);
+            ptr0 = host_override.__destroy_into_raw();
         }
+        const ret = wasm.pkdns_publishHomeserverForce(this.__wbg_ptr, ptr0);
+        return ret;
     }
     /**
-     * @throws
-     * @param {string} value
-     * @returns {PublicKey}
+     * Republish homeserver if record is missing/stale.
+     *
+     * Requires keypair or to be signer bound.
+     *
+     * @param {PublicKey=} overrideHost Optional new homeserver to publish (migration).
+     * @returns {Promise<void>}
+     * @param {PublicKey | null} [host_override]
+     * @returns {Promise<void>}
      */
-    static from(value) {
-        const ptr0 = passStringToWasm0(value, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
-        const len0 = WASM_VECTOR_LEN;
-        const ret = wasm.publickey_from(ptr0, len0);
-        if (ret[2]) {
-            throw takeFromExternrefTable0(ret[1]);
+    publishHomeserverIfStale(host_override) {
+        let ptr0 = 0;
+        if (!isLikeNone(host_override)) {
+            _assertClass(host_override, PublicKey);
+            ptr0 = host_override.__destroy_into_raw();
         }
-        return PublicKey.__wrap(ret[0]);
+        const ret = wasm.pkdns_publishHomeserverIfStale(this.__wbg_ptr, ptr0);
+        return ret;
     }
 }
-module.exports.PublicKey = PublicKey;
+module.exports.Pkdns = Pkdns;
 
-const SessionFinalization = (typeof FinalizationRegistry === 'undefined')
+const PubkyFinalization = (typeof FinalizationRegistry === 'undefined')
     ? { register: () => {}, unregister: () => {} }
-    : new FinalizationRegistry(ptr => wasm.__wbg_session_free(ptr >>> 0, 1));
-
-class Session {
+    : new FinalizationRegistry(ptr => wasm.__wbg_pubky_free(ptr >>> 0, 1));
+/**
+ * High-level entrypoint to the Pubky SDK.
+ */
+class Pubky {
 
     static __wrap(ptr) {
         ptr = ptr >>> 0;
-        const obj = Object.create(Session.prototype);
+        const obj = Object.create(Pubky.prototype);
         obj.__wbg_ptr = ptr;
-        SessionFinalization.register(obj, obj.__wbg_ptr, obj);
+        PubkyFinalization.register(obj, obj.__wbg_ptr, obj);
         return obj;
     }
 
     __destroy_into_raw() {
         const ptr = this.__wbg_ptr;
         this.__wbg_ptr = 0;
-        SessionFinalization.unregister(this);
+        PubkyFinalization.unregister(this);
         return ptr;
     }
 
     free() {
         const ptr = this.__destroy_into_raw();
-        wasm.__wbg_session_free(ptr, 0);
+        wasm.__wbg_pubky_free(ptr, 0);
+    }
+    /**
+     * Create a Pubky facade wired for **mainnet** defaults (public relays).
+     *
+     * @returns {Pubky}
+     * A new facade instance. Use this to create signers, start auth flows, etc.
+     *
+     * @example
+     * const pubky = new Pubky();
+     * const signer = pubky.signer(Keypair.random());
+     */
+    constructor() {
+        const ret = wasm.pubky_new();
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        this.__wbg_ptr = ret[0] >>> 0;
+        PubkyFinalization.register(this, this.__wbg_ptr, this);
+        return this;
+    }
+    /**
+     * Create a Pubky facade preconfigured for a **local testnet**.
+     *
+     * If `host` is provided, PKARR and HTTP endpoints are derived as `http://<host>:ports/...`.
+     * If omitted, `"localhost"` is assumed (handy for `cargo install pubky-testnet`).
+     *
+     * @param {string=} host Optional host (e.g. `"localhost"`, `"docker-host"`, `"127.0.0.1"`).
+     * @returns {Pubky}
+     *
+     * @example
+     * const pubky = Pubky.testnet();              // localhost default
+     * const pubky = Pubky.testnet("docker-host"); // custom hostname/IP
+     * @param {string | null} [host]
+     * @returns {Pubky}
+     */
+    static testnet(host) {
+        var ptr0 = isLikeNone(host) ? 0 : passStringToWasm0(host, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        var len0 = WASM_VECTOR_LEN;
+        const ret = wasm.pubky_testnet(ptr0, len0);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        return Pubky.__wrap(ret[0]);
+    }
+    /**
+     * Wrap an existing configured HTTP client into a Pubky facade.
+     *
+     * @param {Client} client A previously constructed client.
+     * @returns {Pubky}
+     *
+     * @example
+     * const client = Client.testnet();
+     * const pubky = Pubky.withClient(client);
+     * @param {Client} client
+     * @returns {Pubky}
+     */
+    static withClient(client) {
+        _assertClass(client, Client);
+        const ret = wasm.pubky_withClient(client.__wbg_ptr);
+        return Pubky.__wrap(ret);
+    }
+    /**
+     * Start a **pubkyauth** flow.
+     *
+     * Provide a **capabilities string** and (optionally) a relay base URL.
+     * The capabilities string is a comma-separated list of entries:
+     * `"<scope>:<actions>"`, where:
+     * - `scope` starts with `/` (e.g. `/pub/example.app/`).
+     * - `actions` is any combo of `r` and/or `w` (order normalized; `wr` -> `rw`).
+     * Pass `""` for no scopes (read-only public session).
+     *
+     * @param {string} capabilities Comma-separated caps, e.g. `"/pub/app/:rw,/pub/foo/file:r"`.
+     * @param {string=} relay Optional HTTP relay base (e.g. `"https://…/link/"`).
+     * @returns {AuthFlow}
+     * A running auth flow. Show `authorizationUrl` as QR/deeplink,
+     * then `awaitApproval()` to obtain a `Session`.
+     *
+     * @throws {PubkyError}
+     * - `{ name: "InvalidInput" }` for malformed capabilities or bad relay URL
+     * - `{ name: "RequestError" }` if the flow cannot be started (network/relay)
+     *
+     * @example
+     * const flow = pubky.startAuthFlow("/pub/my.app/:rw");
+     * renderQr(flow.authorizationUrl);
+     * const session = await flow.awaitApproval();
+     * @param {Capabilities} capabilities
+     * @param {string | null} [relay]
+     * @returns {AuthFlow}
+     */
+    startAuthFlow(capabilities, relay) {
+        const ptr0 = passStringToWasm0(capabilities, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        var ptr1 = isLikeNone(relay) ? 0 : passStringToWasm0(relay, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        var len1 = WASM_VECTOR_LEN;
+        const ret = wasm.pubky_startAuthFlow(this.__wbg_ptr, ptr0, len0, ptr1, len1);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        return AuthFlow.__wrap(ret[0]);
+    }
+    /**
+     * Create a `Signer` from an existing `Keypair`.
+     *
+     * @param {Keypair} keypair The user’s keys.
+     * @returns {Signer}
+     *
+     * @example
+     * const signer = pubky.signer(Keypair.random());
+     * const session = await signer.signup(homeserverPk, null);
+     * @param {Keypair} keypair
+     * @returns {Signer}
+     */
+    signer(keypair) {
+        _assertClass(keypair, Keypair);
+        const ret = wasm.pubky_signer(this.__wbg_ptr, keypair.__wbg_ptr);
+        return Signer.__wrap(ret);
+    }
+    /**
+     * Public, unauthenticated storage API.
+     *
+     * Use for **read-only** public access via addressed paths:
+     * `"<user-z32>/pub/…"`.
+     *
+     * @returns {PublicStorage}
+     *
+     * @example
+     * const text = await pubky.publicStorage.getText(`${userPk.z32()}/pub/example.com/hello.txt`);
+     * @returns {PublicStorage}
+     */
+    get publicStorage() {
+        const ret = wasm.pubky_client(this.__wbg_ptr);
+        return PublicStorage.__wrap(ret);
+    }
+    /**
+     * Resolve the homeserver for a given public key (read-only).
+     *
+     * Uses an internal read-only Pkdns actor.
+     *
+     * @param {PublicKey} user
+     * @returns {Promise<PublicKey|undefined>} Homeserver public key (z32) or `undefined` if not found.
+     * @param {PublicKey} user_public_key
+     * @returns {Promise<PublicKey | undefined>}
+     */
+    getHomeserverOf(user_public_key) {
+        _assertClass(user_public_key, PublicKey);
+        const ret = wasm.pubky_getHomeserverOf(this.__wbg_ptr, user_public_key.__wbg_ptr);
+        return ret;
+    }
+    /**
+     * Access the underlying HTTP client (advanced).
+     *
+     * @returns {Client}
+     * Use this for low-level `fetch()` calls or testing with raw URLs.
+     *
+     * @example
+     * const r = await pubky.client.fetch(`pubky://${user}/pub/app/file.txt`, { credentials: "include" });
+     * @returns {Client}
+     */
+    get client() {
+        const ret = wasm.pubky_client(this.__wbg_ptr);
+        return Client.__wrap(ret);
+    }
+}
+module.exports.Pubky = Pubky;
+
+const PublicKeyFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_publickey_free(ptr >>> 0, 1));
+
+class PublicKey {
+
+    static __wrap(ptr) {
+        ptr = ptr >>> 0;
+        const obj = Object.create(PublicKey.prototype);
+        obj.__wbg_ptr = ptr;
+        PublicKeyFinalization.register(obj, obj.__wbg_ptr, obj);
+        return obj;
+    }
+
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        PublicKeyFinalization.unregister(this);
+        return ptr;
+    }
+
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_publickey_free(ptr, 0);
+    }
+    /**
+     * Convert the PublicKey to Uint8Array
+     * @returns {Uint8Array}
+     */
+    toUint8Array() {
+        const ret = wasm.publickey_toUint8Array(this.__wbg_ptr);
+        return ret;
+    }
+    /**
+     * Returns the z-base32 encoding of this public key
+     * @returns {string}
+     */
+    z32() {
+        let deferred1_0;
+        let deferred1_1;
+        try {
+            const ret = wasm.publickey_z32(this.__wbg_ptr);
+            deferred1_0 = ret[0];
+            deferred1_1 = ret[1];
+            return getStringFromWasm0(ret[0], ret[1]);
+        } finally {
+            wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
+        }
+    }
+    /**
+     * @throws
+     * @param {string} value
+     * @returns {PublicKey}
+     */
+    static from(value) {
+        const ptr0 = passStringToWasm0(value, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.publickey_from(ptr0, len0);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        return PublicKey.__wrap(ret[0]);
+    }
+}
+module.exports.PublicKey = PublicKey;
+
+const PublicStorageFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_publicstorage_free(ptr >>> 0, 1));
+/**
+ * Read-only public storage using addressed paths (`"<user-z32>/pub/...")`.
+ */
+class PublicStorage {
+
+    static __wrap(ptr) {
+        ptr = ptr >>> 0;
+        const obj = Object.create(PublicStorage.prototype);
+        obj.__wbg_ptr = ptr;
+        PublicStorageFinalization.register(obj, obj.__wbg_ptr, obj);
+        return obj;
+    }
+
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        PublicStorageFinalization.unregister(this);
+        return ptr;
+    }
+
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_publicstorage_free(ptr, 0);
+    }
+    /**
+     * Construct PublicStorage using global client (mainline relays).
+     */
+    constructor() {
+        const ret = wasm.publicstorage_new();
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        this.__wbg_ptr = ret[0] >>> 0;
+        PublicStorageFinalization.register(this, this.__wbg_ptr, this);
+        return this;
+    }
+    /**
+     * List a directory. Results are `pubky://…` identifier URLs.
+     *
+     * @param {Address} address Addressed directory (must end with `/`).
+     * @param {string|null=} cursor Optional suffix or full URL to start **after**.
+     * @param {boolean=} reverse Default `false`. When `true`, newest/lexicographically-last first.
+     * @param {number=} limit Optional result limit.
+     * @param {boolean=} shallow Default `false`. When `true`, lists only first-level entries.
+     * @returns {Promise<string[]>}
+     * @param {Address} address
+     * @param {string | null} [cursor]
+     * @param {boolean | null} [reverse]
+     * @param {number | null} [limit]
+     * @param {boolean | null} [shallow]
+     * @returns {Promise<string[]>}
+     */
+    list(address, cursor, reverse, limit, shallow) {
+        const ptr0 = passStringToWasm0(address, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        var ptr1 = isLikeNone(cursor) ? 0 : passStringToWasm0(cursor, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        var len1 = WASM_VECTOR_LEN;
+        const ret = wasm.publicstorage_list(this.__wbg_ptr, ptr0, len0, ptr1, len1, isLikeNone(reverse) ? 0xFFFFFF : reverse ? 1 : 0, isLikeNone(limit) ? 0xFFFFFF : limit, isLikeNone(shallow) ? 0xFFFFFF : shallow ? 1 : 0);
+        return ret;
+    }
+    /**
+     * Perform a streaming `GET` and expose the raw `Response` object.
+     *
+     * @param {Address} address
+     * @returns {Promise<Response>}
+     * @param {Address} address
+     * @returns {Promise<Response>}
+     */
+    get(address) {
+        const ptr0 = passStringToWasm0(address, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.publicstorage_get(this.__wbg_ptr, ptr0, len0);
+        return ret;
+    }
+    /**
+     * Fetch bytes from an addressed path.
+     *
+     * @param {Address} address
+     * @returns {Promise<Uint8Array>}
+     * @param {Address} address
+     * @returns {Promise<Uint8Array>}
+     */
+    getBytes(address) {
+        const ptr0 = passStringToWasm0(address, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.publicstorage_getBytes(this.__wbg_ptr, ptr0, len0);
+        return ret;
+    }
+    /**
+     * Fetch text from an addressed path as UTF-8 text.
+     *
+     * @param {Address} address
+     * @returns {Promise<string>}
+     * @param {Address} address
+     * @returns {Promise<string>}
+     */
+    getText(address) {
+        const ptr0 = passStringToWasm0(address, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.publicstorage_getText(this.__wbg_ptr, ptr0, len0);
+        return ret;
+    }
+    /**
+     * Fetch JSON from an addressed path.
+     *
+     * @param {Address} address `"pubky<user>/pub/.../file.json"` (preferred) or `pubky://<user>/pub/...`.
+     * @returns {Promise<any>}
+     * @param {Address} address
+     * @returns {Promise<any>}
+     */
+    getJson(address) {
+        const ptr0 = passStringToWasm0(address, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.publicstorage_getJson(this.__wbg_ptr, ptr0, len0);
+        return ret;
+    }
+    /**
+     * Check if a path exists.
+     *
+     * @param {Address} address
+     * @returns {Promise<boolean>}
+     * @param {Address} address
+     * @returns {Promise<boolean>}
+     */
+    exists(address) {
+        const ptr0 = passStringToWasm0(address, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.publicstorage_exists(this.__wbg_ptr, ptr0, len0);
+        return ret;
+    }
+    /**
+     * Get metadata for an address
+     *
+     * @param {Address} address `"pubky<user>/pub/.../file.json"` (preferred) or `pubky://<user>/pub/...`.
+     * @returns {Promise<ResourceStats|undefined>} `undefined` if the resource does not exist.
+     * @throws {PubkyError} On invalid input or transport/server errors.
+     * @param {Address} address
+     * @returns {Promise<ResourceStats | undefined>}
+     */
+    stats(address) {
+        const ptr0 = passStringToWasm0(address, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.publicstorage_stats(this.__wbg_ptr, ptr0, len0);
+        return ret;
+    }
+}
+module.exports.PublicStorage = PublicStorage;
+
+const SessionFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_session_free(ptr >>> 0, 1));
+/**
+ * An authenticated context “as the user”.
+ * - Use `storage` for reads/writes (absolute paths like `/pub/app/file.txt`)
+ * - Cookie is managed automatically by the underlying fetch client
+ */
+class Session {
+
+    static __wrap(ptr) {
+        ptr = ptr >>> 0;
+        const obj = Object.create(Session.prototype);
+        obj.__wbg_ptr = ptr;
+        SessionFinalization.register(obj, obj.__wbg_ptr, obj);
+        return obj;
+    }
+
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        SessionFinalization.unregister(this);
+        return ptr;
+    }
+
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_session_free(ptr, 0);
+    }
+    /**
+     * Retrieve immutable info about this session (user & capabilities).
+     *
+     * @returns {SessionInfo}
+     * @returns {SessionInfo}
+     */
+    get info() {
+        const ret = wasm.session_info(this.__wbg_ptr);
+        return SessionInfo.__wrap(ret);
+    }
+    /**
+     * Access the session-scoped storage API (read/write).
+     *
+     * @returns {SessionStorage}
+     * @returns {SessionStorage}
+     */
+    get storage() {
+        const ret = wasm.session_storage(this.__wbg_ptr);
+        return SessionStorage.__wrap(ret);
+    }
+    /**
+     * Invalidate the session on the server (clears server cookie).
+     * Further calls to storage API will fail.
+     *
+     * @returns {Promise<void>}
+     * @returns {Promise<void>}
+     */
+    signout() {
+        const ret = wasm.session_signout(this.__wbg_ptr);
+        return ret;
+    }
+}
+module.exports.Session = Session;
+
+const SessionInfoFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_sessioninfo_free(ptr >>> 0, 1));
+/**
+ * Static snapshot of session metadata.
+ */
+class SessionInfo {
+
+    static __wrap(ptr) {
+        ptr = ptr >>> 0;
+        const obj = Object.create(SessionInfo.prototype);
+        obj.__wbg_ptr = ptr;
+        SessionInfoFinalization.register(obj, obj.__wbg_ptr, obj);
+        return obj;
+    }
+
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        SessionInfoFinalization.unregister(this);
+        return ptr;
+    }
+
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_sessioninfo_free(ptr, 0);
+    }
+    /**
+     * The user’s public key for this session.
+     *
+     * Use `.z32()` on the returned `PublicKey` to get the string form.
+     *
+     * @returns {PublicKey}
+     *
+     * @example
+     * const who = sessionInfo.publicKey.z32();
+     * @returns {PublicKey}
+     */
+    get publicKey() {
+        const ret = wasm.sessioninfo_publicKey(this.__wbg_ptr);
+        return PublicKey.__wrap(ret);
+    }
+    /**
+     * Effective capabilities granted to this session.
+     *
+     * @returns {string[]} Normalized capability entries (e.g. `"/pub/app/:rw"`).
+     * @returns {string[]}
+     */
+    get capabilities() {
+        const ret = wasm.sessioninfo_capabilities(this.__wbg_ptr);
+        var v1 = getArrayJsValueFromWasm0(ret[0], ret[1]).slice();
+        wasm.__wbindgen_free(ret[0], ret[1] * 4, 4);
+        return v1;
+    }
+}
+module.exports.SessionInfo = SessionInfo;
+
+const SessionStorageFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_sessionstorage_free(ptr >>> 0, 1));
+/**
+ * Read/write storage scoped to **your** session (absolute paths: `/pub/...`).
+ */
+class SessionStorage {
+
+    static __wrap(ptr) {
+        ptr = ptr >>> 0;
+        const obj = Object.create(SessionStorage.prototype);
+        obj.__wbg_ptr = ptr;
+        SessionStorageFinalization.register(obj, obj.__wbg_ptr, obj);
+        return obj;
+    }
+
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        SessionStorageFinalization.unregister(this);
+        return ptr;
+    }
+
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_sessionstorage_free(ptr, 0);
+    }
+    /**
+     * List a directory (absolute session path). Returns `pubky://…` URLs.
+     *
+     * @param {Path} path Must end with `/`.
+     * @param {string|null=} cursor Optional suffix or full URL to start **after**.
+     * @param {boolean=} reverse Default `false`.
+     * @param {number=} limit Optional result limit.
+     * @param {boolean=} shallow Default `false`.
+     * @returns {Promise<string[]>}
+     * @param {Path} path
+     * @param {string | null} [cursor]
+     * @param {boolean | null} [reverse]
+     * @param {number | null} [limit]
+     * @param {boolean | null} [shallow]
+     * @returns {Promise<string[]>}
+     */
+    list(path, cursor, reverse, limit, shallow) {
+        const ptr0 = passStringToWasm0(path, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        var ptr1 = isLikeNone(cursor) ? 0 : passStringToWasm0(cursor, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        var len1 = WASM_VECTOR_LEN;
+        const ret = wasm.sessionstorage_list(this.__wbg_ptr, ptr0, len0, ptr1, len1, isLikeNone(reverse) ? 0xFFFFFF : reverse ? 1 : 0, isLikeNone(limit) ? 0xFFFFFF : limit, isLikeNone(shallow) ? 0xFFFFFF : shallow ? 1 : 0);
+        return ret;
+    }
+    /**
+     * GET a streaming response for an absolute session path.
+     *
+     * @param {Path} path
+     * @returns {Promise<Response>}
+     * @param {Path} path
+     * @returns {Promise<Response>}
+     */
+    get(path) {
+        const ptr0 = passStringToWasm0(path, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.sessionstorage_get(this.__wbg_ptr, ptr0, len0);
+        return ret;
+    }
+    /**
+     * GET bytes from an absolute session path.
+     *
+     * @param {Path} path
+     * @returns {Promise<Uint8Array>}
+     * @param {Path} path
+     * @returns {Promise<Uint8Array>}
+     */
+    getBytes(path) {
+        const ptr0 = passStringToWasm0(path, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.sessionstorage_getBytes(this.__wbg_ptr, ptr0, len0);
+        return ret;
+    }
+    /**
+     * GET text from an absolute session path.
+     *
+     * @param {Path} path
+     * @returns {Promise<string>}
+     * @param {Path} path
+     * @returns {Promise<string>}
+     */
+    getText(path) {
+        const ptr0 = passStringToWasm0(path, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.sessionstorage_getText(this.__wbg_ptr, ptr0, len0);
+        return ret;
+    }
+    /**
+     * GET JSON from an absolute session path.
+     *
+     * @param {Path} path
+     * @returns {Promise<any>}
+     * @param {Path} path
+     * @returns {Promise<any>}
+     */
+    getJson(path) {
+        const ptr0 = passStringToWasm0(path, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.sessionstorage_getJson(this.__wbg_ptr, ptr0, len0);
+        return ret;
+    }
+    /**
+     * Check existence.
+     *
+     * @param {Path} path
+     * @returns {Promise<boolean>}
+     * @param {Path} path
+     * @returns {Promise<boolean>}
+     */
+    exists(path) {
+        const ptr0 = passStringToWasm0(path, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.sessionstorage_exists(this.__wbg_ptr, ptr0, len0);
+        return ret;
+    }
+    /**
+     * Get metadata for an absolute, session-scoped path (e.g. `"/pub/app/file.json"`).
+     *
+     * @param {Path} path Absolute path under your user (starts with `/`).
+     * @returns {Promise<ResourceStats|undefined>} `undefined` if the resource does not exist.
+     * @throws {PubkyError} On invalid input or transport/server errors.
+     * @param {Path} path
+     * @returns {Promise<ResourceStats | undefined>}
+     */
+    stats(path) {
+        const ptr0 = passStringToWasm0(path, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.sessionstorage_stats(this.__wbg_ptr, ptr0, len0);
+        return ret;
+    }
+    /**
+     * PUT binary at an absolute session path.
+     *
+     * @param {Path} path
+     * @param {Uint8Array} bytes
+     * @returns {Promise<void>}
+     * @param {Path} path
+     * @param {Uint8Array} body
+     * @returns {Promise<void>}
+     */
+    putBytes(path, body) {
+        const ptr0 = passStringToWasm0(path, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ptr1 = passArray8ToWasm0(body, wasm.__wbindgen_malloc);
+        const len1 = WASM_VECTOR_LEN;
+        const ret = wasm.sessionstorage_putBytes(this.__wbg_ptr, ptr0, len0, ptr1, len1);
+        return ret;
+    }
+    /**
+     * PUT text at an absolute session path.
+     *
+     * @param {Path} path
+     * @param {string} text
+     * @returns {Promise<void>}
+     * @param {Path} path
+     * @param {string} body
+     * @returns {Promise<void>}
+     */
+    putText(path, body) {
+        const ptr0 = passStringToWasm0(path, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ptr1 = passStringToWasm0(body, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len1 = WASM_VECTOR_LEN;
+        const ret = wasm.sessionstorage_putText(this.__wbg_ptr, ptr0, len0, ptr1, len1);
+        return ret;
+    }
+    /**
+     * PUT JSON at an absolute session path.
+     *
+     * @param {Path} path Absolute path (e.g. `"/pub/app/data.json"`).
+     * @param {any} value JSON-serializable value.
+     * @returns {Promise<void>}
+     * @param {Path} path
+     * @param {any} body
+     * @returns {Promise<void>}
+     */
+    putJson(path, body) {
+        const ptr0 = passStringToWasm0(path, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.sessionstorage_putJson(this.__wbg_ptr, ptr0, len0, body);
+        return ret;
+    }
+    /**
+     * Delete a path (file or empty directory).
+     *
+     * @param {Path} path
+     * @returns {Promise<void>}
+     * @param {Path} path
+     * @returns {Promise<void>}
+     */
+    delete(path) {
+        const ptr0 = passStringToWasm0(path, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.sessionstorage_delete(this.__wbg_ptr, ptr0, len0);
+        return ret;
+    }
+}
+module.exports.SessionStorage = SessionStorage;
+
+const SignerFinalization = (typeof FinalizationRegistry === 'undefined')
+    ? { register: () => {}, unregister: () => {} }
+    : new FinalizationRegistry(ptr => wasm.__wbg_signer_free(ptr >>> 0, 1));
+/**
+ * Holds a user’s `Keypair` and performs identity operations:
+ * - `signup` creates a new homeserver user.
+ * - `signin` creates a homeserver session for an existing user.
+ * - Approve pubkyauth requests
+ * - Publish PKDNS when signer-bound
+ */
+class Signer {
+
+    static __wrap(ptr) {
+        ptr = ptr >>> 0;
+        const obj = Object.create(Signer.prototype);
+        obj.__wbg_ptr = ptr;
+        SignerFinalization.register(obj, obj.__wbg_ptr, obj);
+        return obj;
+    }
+
+    __destroy_into_raw() {
+        const ptr = this.__wbg_ptr;
+        this.__wbg_ptr = 0;
+        SignerFinalization.unregister(this);
+        return ptr;
+    }
+
+    free() {
+        const ptr = this.__destroy_into_raw();
+        wasm.__wbg_signer_free(ptr, 0);
+    }
+    /**
+     * Create a signer from a `Keypair` (prefer `pubky.signer(kp)`).
+     *
+     * @param {Keypair} keypair
+     * @returns {Signer}
+     * @param {Keypair} keypair
+     * @returns {Signer}
+     */
+    static fromKeypair(keypair) {
+        _assertClass(keypair, Keypair);
+        const ret = wasm.signer_fromKeypair(keypair.__wbg_ptr);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        return Signer.__wrap(ret[0]);
+    }
+    /**
+     * Get the public key of this signer.
+     *
+     * @returns {PublicKey}
+     * @returns {PublicKey}
+     */
+    get publicKey() {
+        const ret = wasm.signer_publicKey(this.__wbg_ptr);
+        return PublicKey.__wrap(ret);
+    }
+    /**
+     * Sign up at a homeserver. Returns a ready `Session`.
+     *
+     * Creates a valid homeserver Session with root capabilities
+     *
+     * @param {PublicKey} homeserver The homeserver’s public key.
+     * @param {string|null} signupToken Invite/registration token or `null`.
+     * @returns {Promise<Session>}
+     *
+     * @throws {PubkyError}
+     * - `AuthenticationError` (bad/expired token)
+     * - `RequestError` (network/server)
+     * @param {PublicKey} homeserver
+     * @param {string | null} [signup_token]
+     * @returns {Promise<Session>}
+     */
+    signup(homeserver, signup_token) {
+        _assertClass(homeserver, PublicKey);
+        var ptr0 = isLikeNone(signup_token) ? 0 : passStringToWasm0(signup_token, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        var len0 = WASM_VECTOR_LEN;
+        const ret = wasm.signer_signup(this.__wbg_ptr, homeserver.__wbg_ptr, ptr0, len0);
+        return ret;
+    }
+    /**
+     * Fast sign-in for a returning user. Publishes PKDNS in the background.
+     *
+     * Creates a valid homeserver Session with root capabilities
+     *
+     * @returns {Promise<Session>}
+     *
+     * @throws {PubkyError}
+     * @returns {Promise<Session>}
+     */
+    signin() {
+        const ret = wasm.signer_signin(this.__wbg_ptr);
+        return ret;
+    }
+    /**
+     * Blocking sign-in. Waits for PKDNS publish to complete (slower; safer).
+     *
+     * Creates a valid homeserver Session with root capabilities
+     *
+     * @returns {Promise<Session>}
+     * @returns {Promise<Session>}
+     */
+    signinBlocking() {
+        const ret = wasm.signer_signinBlocking(this.__wbg_ptr);
+        return ret;
     }
     /**
-     * Return the [PublicKey] of this session
-     * @returns {PublicKey}
+     * Approve a `pubkyauth://` request URL (encrypts & POSTs the signed AuthToken).
+     * @param {string} pubkyauth_url
+     * @returns {Promise<void>}
      */
-    pubky() {
-        const ret = wasm.session_pubky(this.__wbg_ptr);
-        return PublicKey.__wrap(ret);
+    approveAuthRequest(pubkyauth_url) {
+        const ptr0 = passStringToWasm0(pubkyauth_url, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.signer_approveAuthRequest(this.__wbg_ptr, ptr0, len0);
+        return ret;
     }
     /**
-     * Return the capabilities that this session has.
-     * @returns {string[]}
+     * Get a PKDNS actor bound to this signer's client & keypair (publishing enabled).
+     *
+     * @returns {Pkdns}
+     *
+     * @example
+     * await signer.pkdns.publishHomeserverIfStale(homeserverPk);
+     * @returns {Pkdns}
      */
-    capabilities() {
-        const ret = wasm.session_capabilities(this.__wbg_ptr);
-        var v1 = getArrayJsValueFromWasm0(ret[0], ret[1]).slice();
-        wasm.__wbindgen_free(ret[0], ret[1] * 4, 4);
-        return v1;
+    get pkdns() {
+        const ret = wasm.signer_pkdns(this.__wbg_ptr);
+        return Pkdns.__wrap(ret);
     }
 }
-module.exports.Session = Session;
+module.exports.Signer = Signer;
 
-module.exports.__wbg_abort_410ec47a64ac6117 = function(arg0, arg1) {
-    arg0.abort(arg1);
+module.exports.__wbg_Error_0497d5bdba9362e5 = function(arg0, arg1) {
+    const ret = Error(getStringFromWasm0(arg0, arg1));
+    return ret;
+};
+
+module.exports.__wbg_String_8f0eb39a4a4c2f66 = function(arg0, arg1) {
+    const ret = String(arg1);
+    const ptr1 = passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len1 = WASM_VECTOR_LEN;
+    getDataViewMemory0().setInt32(arg0 + 4 * 1, len1, true);
+    getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
 };
 
-module.exports.__wbg_abort_775ef1d17fc65868 = function(arg0) {
+module.exports.__wbg_abort_18ba44d46e13d7fe = function(arg0) {
     arg0.abort();
 };
 
-module.exports.__wbg_append_8c7dd8d641a5f01b = function() { return handleError(function (arg0, arg1, arg2, arg3, arg4) {
+module.exports.__wbg_abort_4198a1129c47f21a = function(arg0, arg1) {
+    arg0.abort(arg1);
+};
+
+module.exports.__wbg_append_0342728346e47425 = function() { return handleError(function (arg0, arg1, arg2, arg3, arg4) {
     arg0.append(getStringFromWasm0(arg1, arg2), getStringFromWasm0(arg3, arg4));
 }, arguments) };
 
-module.exports.__wbg_arrayBuffer_d1b44c4390db422f = function() { return handleError(function (arg0) {
+module.exports.__wbg_arrayBuffer_d58b858456021d7f = function() { return handleError(function (arg0) {
     const ret = arg0.arrayBuffer();
     return ret;
 }, arguments) };
 
-module.exports.__wbg_buffer_609cc3eee51ed158 = function(arg0) {
+module.exports.__wbg_authtoken_new = function(arg0) {
+    const ret = AuthToken.__wrap(arg0);
+    return ret;
+};
+
+module.exports.__wbg_body_e1e045c770257634 = function(arg0) {
+    const ret = arg0.body;
+    return isLikeNone(ret) ? 0 : addToExternrefTable0(ret);
+};
+
+module.exports.__wbg_buffer_a1a27a0dfa70165d = function(arg0) {
     const ret = arg0.buffer;
     return ret;
 };
 
-module.exports.__wbg_call_672a4d21634d4a24 = function() { return handleError(function (arg0, arg1) {
-    const ret = arg0.call(arg1);
+module.exports.__wbg_buffer_e495ba54cee589cc = function(arg0) {
+    const ret = arg0.buffer;
     return ret;
-}, arguments) };
+};
+
+module.exports.__wbg_byobRequest_56aa768ee4dfed17 = function(arg0) {
+    const ret = arg0.byobRequest;
+    return isLikeNone(ret) ? 0 : addToExternrefTable0(ret);
+};
+
+module.exports.__wbg_byteLength_937f8a52f9697148 = function(arg0) {
+    const ret = arg0.byteLength;
+    return ret;
+};
+
+module.exports.__wbg_byteOffset_4d94b7170e641898 = function(arg0) {
+    const ret = arg0.byteOffset;
+    return ret;
+};
 
-module.exports.__wbg_call_7cccdd69e0791ae2 = function() { return handleError(function (arg0, arg1, arg2) {
+module.exports.__wbg_call_f2db6205e5c51dc8 = function() { return handleError(function (arg0, arg1, arg2) {
     const ret = arg0.call(arg1, arg2);
     return ret;
 }, arguments) };
 
-module.exports.__wbg_clearTimeout_86721db0036bea98 = function(arg0) {
+module.exports.__wbg_call_fbe8be8bf6436ce5 = function() { return handleError(function (arg0, arg1) {
+    const ret = arg0.call(arg1);
+    return ret;
+}, arguments) };
+
+module.exports.__wbg_cancel_4d78160f447bbbeb = function(arg0) {
+    const ret = arg0.cancel();
+    return ret;
+};
+
+module.exports.__wbg_catch_b51fce253ee18ec3 = function(arg0, arg1) {
+    const ret = arg0.catch(arg1);
+    return ret;
+};
+
+module.exports.__wbg_clearTimeout_6222fede17abcb1a = function(arg0) {
     const ret = clearTimeout(arg0);
     return ret;
 };
 
-module.exports.__wbg_crypto_ed58b8e10a292839 = function(arg0) {
+module.exports.__wbg_close_290fb040af98d3ac = function() { return handleError(function (arg0) {
+    arg0.close();
+}, arguments) };
+
+module.exports.__wbg_close_b2641ef0870e518c = function() { return handleError(function (arg0) {
+    arg0.close();
+}, arguments) };
+
+module.exports.__wbg_crypto_574e78ad8b13b65f = function(arg0) {
     const ret = arg0.crypto;
     return ret;
 };
 
-module.exports.__wbg_debug_e17b51583ca6a632 = function(arg0, arg1, arg2, arg3) {
+module.exports.__wbg_debug_103948ed4c500577 = function(arg0, arg1, arg2, arg3) {
     console.debug(arg0, arg1, arg2, arg3);
 };
 
-module.exports.__wbg_done_769e5ede4b31c67b = function(arg0) {
+module.exports.__wbg_done_4d01f352bade43b7 = function(arg0) {
     const ret = arg0.done;
     return ret;
 };
 
-module.exports.__wbg_error_80de38b3f7cc3c3c = function(arg0, arg1, arg2, arg3) {
+module.exports.__wbg_enqueue_a62faa171c4fd287 = function() { return handleError(function (arg0, arg1) {
+    arg0.enqueue(arg1);
+}, arguments) };
+
+module.exports.__wbg_entries_41651c850143b957 = function(arg0) {
+    const ret = Object.entries(arg0);
+    return ret;
+};
+
+module.exports.__wbg_error_624160881466fd69 = function(arg0, arg1, arg2, arg3) {
     console.error(arg0, arg1, arg2, arg3);
 };
 
-module.exports.__wbg_fetch_509096533071c657 = function(arg0, arg1) {
+module.exports.__wbg_fetch_a4b4512b936c2d70 = function(arg0) {
+    const ret = fetch(arg0);
+    return ret;
+};
+
+module.exports.__wbg_fetch_a8e43a4e138dfc93 = function(arg0, arg1) {
     const ret = arg0.fetch(arg1);
     return ret;
 };
 
-module.exports.__wbg_fetch_9e120ad639656465 = function(arg0) {
+module.exports.__wbg_fetch_f156d10be9a5c88a = function(arg0) {
     const ret = fetch(arg0);
     return ret;
 };
 
-module.exports.__wbg_fetch_d36a73832f0a45e8 = function(arg0) {
-    const ret = fetch(arg0);
+module.exports.__wbg_from_12ff8e47307bd4c7 = function(arg0) {
+    const ret = Array.from(arg0);
     return ret;
 };
 
-module.exports.__wbg_getRandomValues_78e016fdd1d721cf = function() { return handleError(function (arg0, arg1) {
+module.exports.__wbg_getRandomValues_3c9c0d586e575a16 = function() { return handleError(function (arg0, arg1) {
     globalThis.crypto.getRandomValues(getArrayU8FromWasm0(arg0, arg1));
 }, arguments) };
 
-module.exports.__wbg_getRandomValues_bcb4912f16000dc4 = function() { return handleError(function (arg0, arg1) {
+module.exports.__wbg_getRandomValues_b8f5dbd5f3995a9e = function() { return handleError(function (arg0, arg1) {
     arg0.getRandomValues(arg1);
 }, arguments) };
 
-module.exports.__wbg_get_67b2ba62fc30de12 = function() { return handleError(function (arg0, arg1) {
+module.exports.__wbg_getReader_48e00749fe3f6089 = function() { return handleError(function (arg0) {
+    const ret = arg0.getReader();
+    return ret;
+}, arguments) };
+
+module.exports.__wbg_get_92470be87867c2e5 = function() { return handleError(function (arg0, arg1) {
     const ret = Reflect.get(arg0, arg1);
     return ret;
 }, arguments) };
 
-module.exports.__wbg_has_a5ea9117f258a0ec = function() { return handleError(function (arg0, arg1) {
+module.exports.__wbg_get_a131a44bd1eb6979 = function(arg0, arg1) {
+    const ret = arg0[arg1 >>> 0];
+    return ret;
+};
+
+module.exports.__wbg_getdone_8355ddb2bc75c731 = function(arg0) {
+    const ret = arg0.done;
+    return isLikeNone(ret) ? 0xFFFFFF : ret ? 1 : 0;
+};
+
+module.exports.__wbg_getvalue_c1890a401d13f00b = function(arg0) {
+    const ret = arg0.value;
+    return ret;
+};
+
+module.exports.__wbg_has_809e438ee9d787a7 = function() { return handleError(function (arg0, arg1) {
     const ret = Reflect.has(arg0, arg1);
     return ret;
 }, arguments) };
 
-module.exports.__wbg_headers_9cb51cfd2ac780a4 = function(arg0) {
+module.exports.__wbg_headers_0f0cbdc6290b6780 = function(arg0) {
     const ret = arg0.headers;
     return ret;
 };
 
-module.exports.__wbg_info_033d8b8a0838f1d3 = function(arg0, arg1, arg2, arg3) {
+module.exports.__wbg_info_a1cc312ecc877319 = function(arg0, arg1, arg2, arg3) {
     console.info(arg0, arg1, arg2, arg3);
 };
 
-module.exports.__wbg_instanceof_Response_f2cc20d9f7dfd644 = function(arg0) {
+module.exports.__wbg_instanceof_ArrayBuffer_a8b6f580b363f2bc = function(arg0) {
+    let result;
+    try {
+        result = arg0 instanceof ArrayBuffer;
+    } catch (_) {
+        result = false;
+    }
+    const ret = result;
+    return ret;
+};
+
+module.exports.__wbg_instanceof_Error_58a92d81483a4b16 = function(arg0) {
+    let result;
+    try {
+        result = arg0 instanceof Error;
+    } catch (_) {
+        result = false;
+    }
+    const ret = result;
+    return ret;
+};
+
+module.exports.__wbg_instanceof_Headers_8b4c0df841a5ed48 = function(arg0) {
+    let result;
+    try {
+        result = arg0 instanceof Headers;
+    } catch (_) {
+        result = false;
+    }
+    const ret = result;
+    return ret;
+};
+
+module.exports.__wbg_instanceof_Map_80cc65041c96417a = function(arg0) {
+    let result;
+    try {
+        result = arg0 instanceof Map;
+    } catch (_) {
+        result = false;
+    }
+    const ret = result;
+    return ret;
+};
+
+module.exports.__wbg_instanceof_Response_e80ce8b7a2b968d2 = function(arg0) {
     let result;
     try {
         result = arg0 instanceof Response;
@@ -872,38 +2215,89 @@ module.exports.__wbg_instanceof_Response_f2cc20d9f7dfd644 = function(arg0) {
     return ret;
 };
 
-module.exports.__wbg_iterator_9a24c88df860dc65 = function() {
+module.exports.__wbg_instanceof_Uint8Array_ca460677bc155827 = function(arg0) {
+    let result;
+    try {
+        result = arg0 instanceof Uint8Array;
+    } catch (_) {
+        result = false;
+    }
+    const ret = result;
+    return ret;
+};
+
+module.exports.__wbg_isArray_5f090bed72bd4f89 = function(arg0) {
+    const ret = Array.isArray(arg0);
+    return ret;
+};
+
+module.exports.__wbg_isSafeInteger_90d7c4674047d684 = function(arg0) {
+    const ret = Number.isSafeInteger(arg0);
+    return ret;
+};
+
+module.exports.__wbg_iterator_4068add5b2aef7a6 = function() {
     const ret = Symbol.iterator;
     return ret;
 };
 
-module.exports.__wbg_length_a446193dc22c12f8 = function(arg0) {
+module.exports.__wbg_length_ab6d22b5ead75c72 = function(arg0) {
     const ret = arg0.length;
     return ret;
 };
 
-module.exports.__wbg_log_cad59bb680daec67 = function(arg0, arg1, arg2, arg3) {
+module.exports.__wbg_length_f00ec12454a5d9fd = function(arg0) {
+    const ret = arg0.length;
+    return ret;
+};
+
+module.exports.__wbg_log_bff357b3df4db934 = function(arg0, arg1, arg2, arg3) {
     console.log(arg0, arg1, arg2, arg3);
 };
 
-module.exports.__wbg_msCrypto_0a36e2ec3a343d26 = function(arg0) {
+module.exports.__wbg_msCrypto_a61aeb35a24c1329 = function(arg0) {
     const ret = arg0.msCrypto;
     return ret;
 };
 
-module.exports.__wbg_new_018dcc2d6c8c2f6a = function() { return handleError(function () {
+module.exports.__wbg_new_07b483f72211fd66 = function() {
+    const ret = new Object();
+    return ret;
+};
+
+module.exports.__wbg_new_186abcfdff244e42 = function() { return handleError(function () {
+    const ret = new AbortController();
+    return ret;
+}, arguments) };
+
+module.exports.__wbg_new_476169e6d59f23ae = function(arg0, arg1) {
+    const ret = new Error(getStringFromWasm0(arg0, arg1));
+    return ret;
+};
+
+module.exports.__wbg_new_4796e1cd2eb9ea6d = function() { return handleError(function () {
     const ret = new Headers();
     return ret;
 }, arguments) };
 
-module.exports.__wbg_new_23a2665fac83c611 = function(arg0, arg1) {
+module.exports.__wbg_new_58353953ad2097cc = function() {
+    const ret = new Array();
+    return ret;
+};
+
+module.exports.__wbg_new_a979b4b45bd55c7f = function() {
+    const ret = new Map();
+    return ret;
+};
+
+module.exports.__wbg_new_e30c39c06edaabf2 = function(arg0, arg1) {
     try {
         var state0 = {a: arg0, b: arg1};
         var cb0 = (arg0, arg1) => {
             const a = state0.a;
             state0.a = 0;
             try {
-                return __wbg_adapter_74(a, state0.b, arg0, arg1);
+                return __wbg_adapter_128(a, state0.b, arg0, arg1);
             } finally {
                 state0.a = a;
             }
@@ -915,67 +2309,72 @@ module.exports.__wbg_new_23a2665fac83c611 = function(arg0, arg1) {
     }
 };
 
-module.exports.__wbg_new_405e22f390576ce2 = function() {
-    const ret = new Object();
+module.exports.__wbg_new_e52b3efaaa774f96 = function(arg0) {
+    const ret = new Uint8Array(arg0);
     return ret;
 };
 
-module.exports.__wbg_new_78feb108b6472713 = function() {
-    const ret = new Array();
+module.exports.__wbg_newfromslice_7c05ab1297cb2d88 = function(arg0, arg1) {
+    const ret = new Uint8Array(getArrayU8FromWasm0(arg0, arg1));
     return ret;
 };
 
-module.exports.__wbg_new_a12002a7f91c75be = function(arg0) {
-    const ret = new Uint8Array(arg0);
+module.exports.__wbg_newnoargs_ff528e72d35de39a = function(arg0, arg1) {
+    const ret = new Function(getStringFromWasm0(arg0, arg1));
     return ret;
 };
 
-module.exports.__wbg_new_e25e5aab09ff45db = function() { return handleError(function () {
-    const ret = new AbortController();
-    return ret;
-}, arguments) };
-
-module.exports.__wbg_newnoargs_105ed471475aaf50 = function(arg0, arg1) {
-    const ret = new Function(getStringFromWasm0(arg0, arg1));
+module.exports.__wbg_newwithbyteoffsetandlength_3b01ecda099177e8 = function(arg0, arg1, arg2) {
+    const ret = new Uint8Array(arg0, arg1 >>> 0, arg2 >>> 0);
     return ret;
 };
 
-module.exports.__wbg_newwithbyteoffsetandlength_d97e637ebe145a9a = function(arg0, arg1, arg2) {
-    const ret = new Uint8Array(arg0, arg1 >>> 0, arg2 >>> 0);
+module.exports.__wbg_newwithintounderlyingsource_b47f6a6a596a7f24 = function(arg0, arg1) {
+    const ret = new ReadableStream(IntoUnderlyingSource.__wrap(arg0), arg1);
     return ret;
 };
 
-module.exports.__wbg_newwithlength_a381634e90c276d4 = function(arg0) {
+module.exports.__wbg_newwithlength_08f872dc1e3ada2e = function(arg0) {
     const ret = new Uint8Array(arg0 >>> 0);
     return ret;
 };
 
-module.exports.__wbg_newwithstrandinit_06c535e0a867c635 = function() { return handleError(function (arg0, arg1, arg2) {
+module.exports.__wbg_newwithoptreadablestreamandinit_ce4ecbe22555867e = function() { return handleError(function (arg0, arg1) {
+    const ret = new Response(arg0, arg1);
+    return ret;
+}, arguments) };
+
+module.exports.__wbg_newwithstrandinit_f8a9dbe009d6be37 = function() { return handleError(function (arg0, arg1, arg2) {
     const ret = new Request(getStringFromWasm0(arg0, arg1), arg2);
     return ret;
 }, arguments) };
 
-module.exports.__wbg_next_25feadfc0913fea9 = function(arg0) {
+module.exports.__wbg_next_8bb824d217961b5d = function(arg0) {
     const ret = arg0.next;
     return ret;
 };
 
-module.exports.__wbg_next_6574e1a8a62d1055 = function() { return handleError(function (arg0) {
+module.exports.__wbg_next_e2da48d8fff7439a = function() { return handleError(function (arg0) {
     const ret = arg0.next();
     return ret;
 }, arguments) };
 
-module.exports.__wbg_node_02999533c4ea02e3 = function(arg0) {
+module.exports.__wbg_node_905d3e251edff8a2 = function(arg0) {
     const ret = arg0.node;
     return ret;
 };
 
-module.exports.__wbg_now_807e54c39636c349 = function() {
+module.exports.__wbg_now_eb0821f3bd9f6529 = function() {
     const ret = Date.now();
     return ret;
 };
 
-module.exports.__wbg_process_5c1d670bc53614b8 = function(arg0) {
+module.exports.__wbg_parse_c7ba327fb6231e7f = function() { return handleError(function (arg0, arg1) {
+    const ret = JSON.parse(getStringFromWasm0(arg0, arg1));
+    return ret;
+}, arguments) };
+
+module.exports.__wbg_process_dc0fbacc7c1c06f7 = function(arg0) {
     const ret = arg0.process;
     return ret;
 };
@@ -985,128 +2384,187 @@ module.exports.__wbg_publickey_new = function(arg0) {
     return ret;
 };
 
-module.exports.__wbg_push_737cfc8c1432c2c6 = function(arg0, arg1) {
-    const ret = arg0.push(arg1);
-    return ret;
-};
-
-module.exports.__wbg_queueMicrotask_97d92b4fcc8a61c5 = function(arg0) {
+module.exports.__wbg_queueMicrotask_46c1df247678729f = function(arg0) {
     queueMicrotask(arg0);
 };
 
-module.exports.__wbg_queueMicrotask_d3219def82552485 = function(arg0) {
+module.exports.__wbg_queueMicrotask_8acf3ccb75ed8d11 = function(arg0) {
     const ret = arg0.queueMicrotask;
     return ret;
 };
 
-module.exports.__wbg_randomFillSync_ab2cfe79ebbf2740 = function() { return handleError(function (arg0, arg1) {
+module.exports.__wbg_randomFillSync_ac0988aba3254290 = function() { return handleError(function (arg0, arg1) {
     arg0.randomFillSync(arg1);
 }, arguments) };
 
-module.exports.__wbg_require_79b1e9274cde3c87 = function() { return handleError(function () {
+module.exports.__wbg_read_f4b89f69cc51efc7 = function(arg0) {
+    const ret = arg0.read();
+    return ret;
+};
+
+module.exports.__wbg_releaseLock_c589dd51c0812aca = function(arg0) {
+    arg0.releaseLock();
+};
+
+module.exports.__wbg_require_60cc747a6bc5215a = function() { return handleError(function () {
     const ret = module.require;
     return ret;
 }, arguments) };
 
-module.exports.__wbg_resolve_4851785c9c5f573d = function(arg0) {
+module.exports.__wbg_resolve_0dac8c580ffd4678 = function(arg0) {
     const ret = Promise.resolve(arg0);
     return ret;
 };
 
+module.exports.__wbg_respond_b227f1c3be2bb879 = function() { return handleError(function (arg0, arg1) {
+    arg0.respond(arg1 >>> 0);
+}, arguments) };
+
 module.exports.__wbg_session_new = function(arg0) {
     const ret = Session.__wrap(arg0);
     return ret;
 };
 
-module.exports.__wbg_setTimeout_2e707715f8cc9497 = function(arg0, arg1) {
+module.exports.__wbg_setTimeout_2b339866a2aa3789 = function(arg0, arg1) {
     const ret = setTimeout(arg0, arg1);
     return ret;
 };
 
-module.exports.__wbg_set_65595bdd868b3009 = function(arg0, arg1, arg2) {
+module.exports.__wbg_set_3f1d0b984ed272ed = function(arg0, arg1, arg2) {
+    arg0[arg1] = arg2;
+};
+
+module.exports.__wbg_set_7422acbe992d64ab = function(arg0, arg1, arg2) {
+    arg0[arg1 >>> 0] = arg2;
+};
+
+module.exports.__wbg_set_b042eef31c50834d = function() { return handleError(function (arg0, arg1, arg2, arg3, arg4) {
+    arg0.set(getStringFromWasm0(arg1, arg2), getStringFromWasm0(arg3, arg4));
+}, arguments) };
+
+module.exports.__wbg_set_c43293f93a35998a = function() { return handleError(function (arg0, arg1, arg2) {
+    const ret = Reflect.set(arg0, arg1, arg2);
+    return ret;
+}, arguments) };
+
+module.exports.__wbg_set_d6bdfd275fb8a4ce = function(arg0, arg1, arg2) {
+    const ret = arg0.set(arg1, arg2);
+    return ret;
+};
+
+module.exports.__wbg_set_fe4e79d1ed3b0e9b = function(arg0, arg1, arg2) {
     arg0.set(arg1, arg2 >>> 0);
 };
 
-module.exports.__wbg_setbody_5923b78a95eedf29 = function(arg0, arg1) {
+module.exports.__wbg_setbody_971ec015fc13d6b4 = function(arg0, arg1) {
     arg0.body = arg1;
 };
 
-module.exports.__wbg_setcredentials_c3a22f1cd105a2c6 = function(arg0, arg1) {
+module.exports.__wbg_setcache_a94cd14dc0cc72a2 = function(arg0, arg1) {
+    arg0.cache = __wbindgen_enum_RequestCache[arg1];
+};
+
+module.exports.__wbg_setcredentials_920d91fb5984c94a = function(arg0, arg1) {
     arg0.credentials = __wbindgen_enum_RequestCredentials[arg1];
 };
 
-module.exports.__wbg_setheaders_834c0bdb6a8949ad = function(arg0, arg1) {
+module.exports.__wbg_setheaders_408564032a1382da = function(arg0, arg1) {
     arg0.headers = arg1;
 };
 
-module.exports.__wbg_setmethod_3c5280fe5d890842 = function(arg0, arg1, arg2) {
+module.exports.__wbg_setheaders_65a4eb4c0443ae61 = function(arg0, arg1) {
+    arg0.headers = arg1;
+};
+
+module.exports.__wbg_sethighwatermark_3017ad772d071dcb = function(arg0, arg1) {
+    arg0.highWaterMark = arg1;
+};
+
+module.exports.__wbg_setmethod_8ce1be0b4d701b7c = function(arg0, arg1, arg2) {
     arg0.method = getStringFromWasm0(arg1, arg2);
 };
 
-module.exports.__wbg_setmode_5dc300b865044b65 = function(arg0, arg1) {
+module.exports.__wbg_setmode_bd35f026f55b6247 = function(arg0, arg1) {
     arg0.mode = __wbindgen_enum_RequestMode[arg1];
 };
 
-module.exports.__wbg_setsignal_75b21ef3a81de905 = function(arg0, arg1) {
+module.exports.__wbg_setname_098bc917fa3ff0d0 = function(arg0, arg1, arg2) {
+    arg0.name = getStringFromWasm0(arg1, arg2);
+};
+
+module.exports.__wbg_setsignal_8e72abfe7ee03c97 = function(arg0, arg1) {
     arg0.signal = arg1;
 };
 
-module.exports.__wbg_signal_aaf9ad74119f20a4 = function(arg0) {
+module.exports.__wbg_setstatus_bd5b448a903a8658 = function(arg0, arg1) {
+    arg0.status = arg1;
+};
+
+module.exports.__wbg_setstatustext_01104c878f7651a0 = function(arg0, arg1, arg2) {
+    arg0.statusText = getStringFromWasm0(arg1, arg2);
+};
+
+module.exports.__wbg_signal_b96223519a041faa = function(arg0) {
     const ret = arg0.signal;
     return ret;
 };
 
-module.exports.__wbg_static_accessor_GLOBAL_88a902d13a557d07 = function() {
+module.exports.__wbg_static_accessor_GLOBAL_487c52c58d65314d = function() {
     const ret = typeof global === 'undefined' ? null : global;
     return isLikeNone(ret) ? 0 : addToExternrefTable0(ret);
 };
 
-module.exports.__wbg_static_accessor_GLOBAL_THIS_56578be7e9f832b0 = function() {
+module.exports.__wbg_static_accessor_GLOBAL_THIS_ee9704f328b6b291 = function() {
     const ret = typeof globalThis === 'undefined' ? null : globalThis;
     return isLikeNone(ret) ? 0 : addToExternrefTable0(ret);
 };
 
-module.exports.__wbg_static_accessor_SELF_37c5d418e4bf5819 = function() {
+module.exports.__wbg_static_accessor_SELF_78c9e3071b912620 = function() {
     const ret = typeof self === 'undefined' ? null : self;
     return isLikeNone(ret) ? 0 : addToExternrefTable0(ret);
 };
 
-module.exports.__wbg_static_accessor_WINDOW_5de37043a91a9c40 = function() {
+module.exports.__wbg_static_accessor_WINDOW_a093d21393777366 = function() {
     const ret = typeof window === 'undefined' ? null : window;
     return isLikeNone(ret) ? 0 : addToExternrefTable0(ret);
 };
 
-module.exports.__wbg_status_f6360336ca686bf0 = function(arg0) {
+module.exports.__wbg_status_a54682bbe52f9058 = function(arg0) {
     const ret = arg0.status;
     return ret;
 };
 
-module.exports.__wbg_stringify_f7ed6987935b4a24 = function() { return handleError(function (arg0) {
+module.exports.__wbg_stringify_c242842b97f054cc = function() { return handleError(function (arg0) {
     const ret = JSON.stringify(arg0);
     return ret;
 }, arguments) };
 
-module.exports.__wbg_subarray_aa9065fa9dc5df96 = function(arg0, arg1, arg2) {
+module.exports.__wbg_subarray_dd4ade7d53bd8e26 = function(arg0, arg1, arg2) {
     const ret = arg0.subarray(arg1 >>> 0, arg2 >>> 0);
     return ret;
 };
 
-module.exports.__wbg_text_7805bea50de2af49 = function() { return handleError(function (arg0) {
+module.exports.__wbg_text_ec0e22f60e30dd2f = function() { return handleError(function (arg0) {
     const ret = arg0.text();
     return ret;
 }, arguments) };
 
-module.exports.__wbg_then_44b73946d2fb3e7d = function(arg0, arg1) {
+module.exports.__wbg_then_82ab9fb4080f1707 = function(arg0, arg1, arg2) {
+    const ret = arg0.then(arg1, arg2);
+    return ret;
+};
+
+module.exports.__wbg_then_db882932c0c714c6 = function(arg0, arg1) {
     const ret = arg0.then(arg1);
     return ret;
 };
 
-module.exports.__wbg_then_48b406749878a531 = function(arg0, arg1, arg2) {
-    const ret = arg0.then(arg1, arg2);
+module.exports.__wbg_toString_21791a66666b3afd = function(arg0) {
+    const ret = arg0.toString();
     return ret;
 };
 
-module.exports.__wbg_url_ae10c34ca209681d = function(arg0, arg1) {
+module.exports.__wbg_url_e6ed869ea05b7a71 = function(arg0, arg1) {
     const ret = arg1.url;
     const ptr1 = passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
     const len1 = WASM_VECTOR_LEN;
@@ -1114,20 +2572,57 @@ module.exports.__wbg_url_ae10c34ca209681d = function(arg0, arg1) {
     getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
 };
 
-module.exports.__wbg_value_cd1ffa7b1ab794f1 = function(arg0) {
+module.exports.__wbg_value_17b896954e14f896 = function(arg0) {
     const ret = arg0.value;
     return ret;
 };
 
-module.exports.__wbg_versions_c71aa1626a93e0a1 = function(arg0) {
+module.exports.__wbg_versions_c01dfd4722a88165 = function(arg0) {
     const ret = arg0.versions;
     return ret;
 };
 
-module.exports.__wbg_warn_aaf1f4664a035bd6 = function(arg0, arg1, arg2, arg3) {
+module.exports.__wbg_view_a9ad80dcbad7cf1c = function(arg0) {
+    const ret = arg0.view;
+    return isLikeNone(ret) ? 0 : addToExternrefTable0(ret);
+};
+
+module.exports.__wbg_warn_90607373221a6b1c = function(arg0, arg1, arg2, arg3) {
     console.warn(arg0, arg1, arg2, arg3);
 };
 
+module.exports.__wbindgen_array_new = function() {
+    const ret = [];
+    return ret;
+};
+
+module.exports.__wbindgen_array_push = function(arg0, arg1) {
+    arg0.push(arg1);
+};
+
+module.exports.__wbindgen_bigint_from_i64 = function(arg0) {
+    const ret = arg0;
+    return ret;
+};
+
+module.exports.__wbindgen_bigint_from_u64 = function(arg0) {
+    const ret = BigInt.asUintN(64, arg0);
+    return ret;
+};
+
+module.exports.__wbindgen_bigint_get_as_i64 = function(arg0, arg1) {
+    const v = arg1;
+    const ret = typeof(v) === 'bigint' ? v : undefined;
+    getDataViewMemory0().setBigInt64(arg0 + 8 * 1, isLikeNone(ret) ? BigInt(0) : ret, true);
+    getDataViewMemory0().setInt32(arg0 + 4 * 0, !isLikeNone(ret), true);
+};
+
+module.exports.__wbindgen_boolean_get = function(arg0) {
+    const v = arg0;
+    const ret = typeof(v) === 'boolean' ? (v ? 1 : 0) : 2;
+    return ret;
+};
+
 module.exports.__wbindgen_cb_drop = function(arg0) {
     const obj = arg0.original;
     if (obj.cnt-- == 1) {
@@ -1138,13 +2633,13 @@ module.exports.__wbindgen_cb_drop = function(arg0) {
     return ret;
 };
 
-module.exports.__wbindgen_closure_wrapper2423 = function(arg0, arg1, arg2) {
-    const ret = makeMutClosure(arg0, arg1, 129, __wbg_adapter_28);
+module.exports.__wbindgen_closure_wrapper2879 = function(arg0, arg1, arg2) {
+    const ret = makeMutClosure(arg0, arg1, 165, __wbg_adapter_54);
     return ret;
 };
 
-module.exports.__wbindgen_closure_wrapper2756 = function(arg0, arg1, arg2) {
-    const ret = makeMutClosure(arg0, arg1, 129, __wbg_adapter_31);
+module.exports.__wbindgen_closure_wrapper2888 = function(arg0, arg1, arg2) {
+    const ret = makeMutClosure(arg0, arg1, 178, __wbg_adapter_57);
     return ret;
 };
 
@@ -1156,8 +2651,13 @@ module.exports.__wbindgen_debug_string = function(arg0, arg1) {
     getDataViewMemory0().setInt32(arg0 + 4 * 0, ptr1, true);
 };
 
+module.exports.__wbindgen_in = function(arg0, arg1) {
+    const ret = arg0 in arg1;
+    return ret;
+};
+
 module.exports.__wbindgen_init_externref_table = function() {
-    const table = wasm.__wbindgen_export_2;
+    const table = wasm.__wbindgen_export_4;
     const offset = table.grow(4);
     table.set(0, undefined);
     table.set(offset + 0, undefined);
@@ -1167,11 +2667,21 @@ module.exports.__wbindgen_init_externref_table = function() {
     ;
 };
 
+module.exports.__wbindgen_is_bigint = function(arg0) {
+    const ret = typeof(arg0) === 'bigint';
+    return ret;
+};
+
 module.exports.__wbindgen_is_function = function(arg0) {
     const ret = typeof(arg0) === 'function';
     return ret;
 };
 
+module.exports.__wbindgen_is_null = function(arg0) {
+    const ret = arg0 === null;
+    return ret;
+};
+
 module.exports.__wbindgen_is_object = function(arg0) {
     const val = arg0;
     const ret = typeof(val) === 'object' && val !== null;
@@ -1188,11 +2698,33 @@ module.exports.__wbindgen_is_undefined = function(arg0) {
     return ret;
 };
 
+module.exports.__wbindgen_jsval_eq = function(arg0, arg1) {
+    const ret = arg0 === arg1;
+    return ret;
+};
+
+module.exports.__wbindgen_jsval_loose_eq = function(arg0, arg1) {
+    const ret = arg0 == arg1;
+    return ret;
+};
+
 module.exports.__wbindgen_memory = function() {
     const ret = wasm.memory;
     return ret;
 };
 
+module.exports.__wbindgen_number_get = function(arg0, arg1) {
+    const obj = arg1;
+    const ret = typeof(obj) === 'number' ? obj : undefined;
+    getDataViewMemory0().setFloat64(arg0 + 8 * 1, isLikeNone(ret) ? 0 : ret, true);
+    getDataViewMemory0().setInt32(arg0 + 4 * 0, !isLikeNone(ret), true);
+};
+
+module.exports.__wbindgen_number_new = function(arg0) {
+    const ret = arg0;
+    return ret;
+};
+
 module.exports.__wbindgen_string_get = function(arg0, arg1) {
     const obj = arg1;
     const ret = typeof(obj) === 'string' ? obj : undefined;