@tollbooth-dpyc/web 1.1.0 → 1.3.0

package/README.md

@@ -87,7 +87,7 @@ bootstrapTheme();            // main.tsx, after configureTollbooth: <prefix>:the
   formatDateTime={(iso) => formatInZone(iso, zone)}
   before={<FundingStatus />}
   coupons={{ classNames: { root: "card", chip: "chip" } }}
-  classNames={{ section: "card p-5", figure: "text-3xl", chip: "chip", chipActive: "chip-on" }}
+  classNames={{ section: "card p-5", figure: "text-3xl", chip: "chip", chipActive: "chip-on", primary: "chip-accent" }}
 />
 
 <ThemeToggle themes={["dark", "light", "system"]} classNames={{ chip: "chip", active: "chip-on" }} />
@@ -98,8 +98,18 @@ bootstrapTheme();            // main.tsx, after configureTollbooth: <prefix>:the
   onClear={clearAll}
   classNames={{ root: "flex gap-2", input: "field", chip: "chip" }}
 />
+
+<SortHeader as="div" label="Date" col="date" activeCol={col} dir={dir} onSort={sortBy} />  // a div grid
 ```
 
+A preset amount in `WalletPage` / `WalletCard` only fills the amount; the
+invoice is made by the explicit "Create invoice". `classNames.primary` styles
+the action that moves a top-up forward (Redeem in `CouponsPanel`); every other
+action stays a chip. `TableFilter`'s panel slides itself back on screen on a
+phone; `clearPlacement="panel"` puts Clear inside it. Every standard-tool
+wrapper takes the same optional `CallOptions` as `callTool`, last
+(`listCanonicalIdentities({ bestEffort: true })`).
+
 `useTopUp` is the wallet's top-up on its own (purchase_credits → invoice →
 check_payment, polled while the tab is visible) for a site drawing its own.
 

package/dist/client.js

@@ -31,6 +31,7 @@ const STANDARD_BOOTSTRAP = [
     "publish_nostr_profile",
     "get_operator_onboarding_status",
     "check_authority_balance",
+    "get_pricing_model",
     "list_canonical_identities",
     "check_proof_status",
     "get_patron_onboarding_status",

package/dist/debugLog.js

@@ -28,9 +28,12 @@ const REDACTED = "[redacted]";
 const SECRET_FIELD = "(?:nsec|ncryptsec|dpop_token|proof|poison|password|passphrase|secret|token|authorization|api_?key|private_?key|client_secret|[a-z0-9_]*_(?:nsec|token|secret|password|passphrase|api_?key|private_?key))";
 // `"dpop_token":"…"`, `\"dpop_token\":\"…\"` (JSON inside a JSON string),
 // `dpop_token=…` (a query string) and `dpop_token: '…'` (a Python repr). A
-// quoted value is taken whole, spaces and all; a bare one up to a delimiter.
+// quoted value is taken whole — spaces, escaped quotes and the other kind of
+// quote included — up to its own closing quote or the end of a truncated line;
+// a bare one up to a delimiter. Stopping at the first quote of either kind let
+// the tail of a secret holding `'` or `\"` through.
 function fieldValue(names) {
-    return new RegExp(`((?:\\\\*["'])?\\b${names}(?:\\\\*["'])?\\s*[:=]\\s*)(?:(\\\\*["'])[^"'\\\\]*|[^"'\\\\,}\\]&\\s]+)`, "gi");
+    return new RegExp(`((?:\\\\*["'])?\\b${names}(?:\\\\*["'])?\\s*[:=]\\s*)(?:(\\\\*["'])(?:\\\\.|\\\\$|(?!\\2)[^\\\\])*?(?=\\2|$)|[^"'\\\\,}\\]&\\s]+)`, "gi");
 }
 const FIELD_VALUE = fieldValue(SECRET_FIELD);
 // update_patron_credential / update_operator_credential carry the secret as

package/dist/inlineProof.d.ts

@@ -5,6 +5,14 @@
  * runtime tool name, e.g. "chart_snapshot_display"), and `created_at` (within
  * about 60 seconds of server time). The wheel verifies the Schnorr signature
  * inline — no relay round trip, no cached phrase.
+ *
+ * Every proof also carries a random `nonce` tag, exactly as the wheel's own
+ * `create_proof` does. Without it, two calls to the same tool in the same
+ * wall-clock second sign byte-identical events, their ids collide, and the
+ * verifier's replay guard refuses the second. The nonce is signed but inert:
+ * `verify_proof` reads only the `u` tag.
  */
+/** 16 random bytes as 32 lowercase hex chars — Python's `secrets.token_hex(16)`. */
+export declare function proofNonce(): string;
 /** The JSON-stringified signed event, exactly what `verify_proof` expects. */
 export declare function signInlineProof(runtimeToolName: string, secretKey?: Uint8Array): string;

package/dist/inlineProof.js

@@ -5,16 +5,30 @@
  * runtime tool name, e.g. "chart_snapshot_display"), and `created_at` (within
  * about 60 seconds of server time). The wheel verifies the Schnorr signature
  * inline — no relay round trip, no cached phrase.
+ *
+ * Every proof also carries a random `nonce` tag, exactly as the wheel's own
+ * `create_proof` does. Without it, two calls to the same tool in the same
+ * wall-clock second sign byte-identical events, their ids collide, and the
+ * verifier's replay guard refuses the second. The nonce is signed but inert:
+ * `verify_proof` reads only the `u` tag.
  */
 import { finalizeEvent } from "nostr-tools";
 import { getSessionNsecBytes } from "./sessionNsec.js";
 const PROOF_KIND = 27235;
+/** 16 random bytes as 32 lowercase hex chars — Python's `secrets.token_hex(16)`. */
+export function proofNonce() {
+    const bytes = crypto.getRandomValues(new Uint8Array(16));
+    return Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
+}
 /** The JSON-stringified signed event, exactly what `verify_proof` expects. */
 export function signInlineProof(runtimeToolName, secretKey) {
     const signed = finalizeEvent({
         kind: PROOF_KIND,
         created_at: Math.floor(Date.now() / 1000),
-        tags: [["u", runtimeToolName]],
+        tags: [
+            ["u", runtimeToolName],
+            ["nonce", proofNonce()],
+        ],
         content: "",
     }, secretKey ?? getSessionNsecBytes());
     return JSON.stringify(signed);

package/dist/react/CouponsPanel.d.ts

@@ -5,7 +5,8 @@
  * Mechanics only — the calls (list_my_coupons, redeem_coupon, forget_coupon),
  * the states and the words. Every visual choice is the site's, through
  * `classNames`; with none, the panel is plain markup inheriting from the page.
- * Actions (Redeem, Remove) are chips: `classNames.chip`.
+ * Actions (Redeem, Remove) are chips: `classNames.chip`; Redeem, the primary
+ * action, takes `classNames.primary` instead when a site gives it its accent.
  */
 import { type ReactNode } from "react";
 import { type PatronCoupon } from "../standardTools.ts";
@@ -18,6 +19,10 @@ export interface CouponsPanelClassNames {
     input?: string;
     /** Every action: Redeem, Remove. */
     chip?: string;
+    /** Redeem, in place of `chip`, for a site that gives it its accent. Default: `chip`. */
+    primary?: string;
+    /** The sub-labels `formHeading` and `listHeading`. */
+    subheading?: string;
     /** Added to the message after a redeem, with `ok` or `error`. */
     message?: string;
     ok?: string;
@@ -38,6 +43,10 @@ export interface CouponsPanelProps {
     intro?: ReactNode;
     /** Shown when the patron holds no coupons. */
     empty?: ReactNode;
+    /** A sub-label above the code box, e.g. "Redeem a code". Default none. */
+    formHeading?: ReactNode;
+    /** A sub-label above the held coupons, e.g. "Active". Shown only when there are some. Default none. */
+    listHeading?: ReactNode;
     placeholder?: string;
     /** Content of the Redeem chip. */
     redeemLabel?: ReactNode;
@@ -49,4 +58,4 @@ export interface CouponsPanelProps {
     /** Draw a coupon's row yourself; `forget` removes it (after confirmForget). */
     renderCoupon?: (coupon: PatronCoupon, forget: () => void) => ReactNode;
 }
-export default function CouponsPanel({ heading, intro, empty, placeholder, redeemLabel, forgetLabel, confirmForget, classNames: c, renderCoupon, }: CouponsPanelProps): import("react").JSX.Element;
+export default function CouponsPanel({ heading, intro, empty, formHeading, listHeading, placeholder, redeemLabel, forgetLabel, confirmForget, classNames: c, renderCoupon, }: CouponsPanelProps): import("react").JSX.Element;

package/dist/react/CouponsPanel.js

@@ -1,4 +1,4 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 /**
  * The patron's coupons: redeem an operator's code once, see what is held, and
  * take one off the list.
@@ -6,7 +6,8 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
  * Mechanics only — the calls (list_my_coupons, redeem_coupon, forget_coupon),
  * the states and the words. Every visual choice is the site's, through
  * `classNames`; with none, the panel is plain markup inheriting from the page.
- * Actions (Redeem, Remove) are chips: `classNames.chip`.
+ * Actions (Redeem, Remove) are chips: `classNames.chip`; Redeem, the primary
+ * action, takes `classNames.primary` instead when a site gives it its accent.
  */
 import { useCallback, useEffect, useState } from "react";
 import { forgetCoupon, listMyCoupons, redeemCoupon } from "../standardTools.js";
@@ -21,7 +22,7 @@ function cx(...parts) {
     const s = parts.filter(Boolean).join(" ");
     return s || undefined;
 }
-export default function CouponsPanel({ heading = "My coupons", intro = DEFAULT_INTRO, empty = DEFAULT_EMPTY, placeholder = "Coupon code", redeemLabel = "Redeem", forgetLabel = "Remove", confirmForget = defaultConfirm, classNames: c = {}, renderCoupon, }) {
+export default function CouponsPanel({ heading = "My coupons", intro = DEFAULT_INTRO, empty = DEFAULT_EMPTY, formHeading, listHeading, placeholder = "Coupon code", redeemLabel = "Redeem", forgetLabel = "Remove", confirmForget = defaultConfirm, classNames: c = {}, renderCoupon, }) {
     const [coupons, setCoupons] = useState([]);
     const [loading, setLoading] = useState(true);
     const [loadError, setLoadError] = useState(null);
@@ -86,10 +87,10 @@ export default function CouponsPanel({ heading = "My coupons", intro = DEFAULT_I
             setMsg({ ok: false, text: e.message });
         }
     }
-    return (_jsxs("section", { className: c.root, children: [heading && _jsx("div", { className: c.heading, children: heading }), intro && _jsx("p", { className: c.intro, children: intro }), _jsxs("div", { className: c.form, children: [_jsx("input", { type: "text", value: code, onChange: (e) => setCode(e.target.value.toUpperCase()), onKeyDown: (e) => {
+    return (_jsxs("section", { className: c.root, children: [heading && _jsx("div", { className: c.heading, children: heading }), intro && _jsx("p", { className: c.intro, children: intro }), formHeading && _jsx("div", { className: c.subheading, children: formHeading }), _jsxs("div", { className: c.form, children: [_jsx("input", { type: "text", value: code, onChange: (e) => setCode(e.target.value.toUpperCase()), onKeyDown: (e) => {
                             if (e.key === "Enter")
                                 void redeem();
-                        }, placeholder: placeholder, "aria-label": "Coupon code", autoCapitalize: "characters", autoCorrect: "off", spellCheck: false, disabled: redeeming, className: c.input }), _jsx("button", { type: "button", onClick: () => void redeem(), disabled: redeeming || !code.trim(), className: c.chip, children: redeeming ? "Redeeming…" : redeemLabel })] }), msg && (_jsx("p", { role: "status", className: cx(c.message, msg.ok ? c.ok : c.error), children: msg.text })), loading ? (_jsx("p", { className: c.loading, children: "Loading\u2026" })) : loadError ? (_jsx("p", { className: cx(c.message, c.error), children: loadError })) : coupons.length === 0 ? (empty && _jsx("p", { className: c.empty, children: empty })) : (_jsx("ul", { className: c.list, children: coupons.map((coupon) => renderCoupon ? (_jsx("li", { className: c.row, children: renderCoupon(coupon, () => void forget(coupon)) }, coupon.coupon_id)) : (_jsx(CouponRow, { coupon: coupon, c: c, forgetLabel: forgetLabel, onForget: () => void forget(coupon) }, coupon.coupon_id))) }))] }));
+                        }, placeholder: placeholder, "aria-label": "Coupon code", autoCapitalize: "characters", autoCorrect: "off", spellCheck: false, disabled: redeeming, className: c.input }), _jsx("button", { type: "button", onClick: () => void redeem(), disabled: redeeming || !code.trim(), className: c.primary ?? c.chip, children: redeeming ? "Redeeming…" : redeemLabel })] }), msg && (_jsx("p", { role: "status", className: cx(c.message, msg.ok ? c.ok : c.error), children: msg.text })), loading ? (_jsx("p", { className: c.loading, children: "Loading\u2026" })) : loadError ? (_jsx("p", { className: cx(c.message, c.error), children: loadError })) : coupons.length === 0 ? (empty && _jsx("p", { className: c.empty, children: empty })) : (_jsxs(_Fragment, { children: [listHeading && _jsx("div", { className: c.subheading, children: listHeading }), _jsx("ul", { className: c.list, children: coupons.map((coupon) => renderCoupon ? (_jsx("li", { className: c.row, children: renderCoupon(coupon, () => void forget(coupon)) }, coupon.coupon_id)) : (_jsx(CouponRow, { coupon: coupon, c: c, forgetLabel: forgetLabel, onForget: () => void forget(coupon) }, coupon.coupon_id))) })] }))] }));
 }
 function CouponRow({ coupon, c, forgetLabel, onForget, }) {
     const active = coupon.status === "active";

package/dist/react/PagedTable.d.ts

@@ -10,7 +10,7 @@
 import type { ReactNode } from "react";
 import { type SortDir } from "../table.ts";
 export interface SortHeaderClassNames {
-    /** The <th>. */
+    /** The header cell: the <th>, or the <div> when `as="div"`. */
     cell?: string;
     /** The button inside a sortable header. */
     button?: string;
@@ -28,10 +28,15 @@ export interface SortHeaderProps {
     onSort: (col: string, dir: SortDir) => void;
     /** The direction a newly chosen column starts in. Default "desc". */
     initialDir?: SortDir;
+    /**
+     * The element: a <th> in a table (default), or a <div role="columnheader">
+     * for a grid of divs — the sort, the button and aria-sort are the same.
+     */
+    as?: "th" | "div";
     classNames?: SortHeaderClassNames;
 }
 /** A header cell. Tapping the sorted column flips it; another column starts at `initialDir`. */
-export declare function SortHeader({ label, col, activeCol, dir, onSort, initialDir, classNames: c }: SortHeaderProps): import("react").JSX.Element;
+export declare function SortHeader({ label, col, activeCol, dir, onSort, initialDir, as, classNames: c, }: SortHeaderProps): import("react").JSX.Element;
 export interface PageControlsClassNames {
     root?: string;
     /** Every control. */

package/dist/react/PagedTable.js

@@ -1,15 +1,18 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import { clampPage, lastPage, nextSort } from "../table.js";
+import { ariaSort, clampPage, lastPage, nextSort } from "../table.js";
 function cx(...parts) {
     const s = parts.filter(Boolean).join(" ");
     return s || undefined;
 }
 /** A header cell. Tapping the sorted column flips it; another column starts at `initialDir`. */
-export function SortHeader({ label, col, activeCol, dir, onSort, initialDir = "desc", classNames: c = {} }) {
-    if (!col)
-        return _jsx("th", { className: c.cell, children: label });
+export function SortHeader({ label, col, activeCol, dir, onSort, initialDir = "desc", as = "th", classNames: c = {}, }) {
+    const Cell = as;
+    const role = as === "div" ? "columnheader" : undefined;
+    if (!col) {
+        return (_jsx(Cell, { role: role, className: c.cell, children: label }));
+    }
     const active = col === activeCol;
-    return (_jsx("th", { className: c.cell, "aria-sort": active ? (dir === "desc" ? "descending" : "ascending") : undefined, children: _jsxs("button", { type: "button", onClick: () => {
+    return (_jsx(Cell, { role: role, className: c.cell, "aria-sort": ariaSort(col, activeCol, dir), children: _jsxs("button", { type: "button", onClick: () => {
                 const next = nextSort(col, activeCol, dir, initialDir);
                 onSort(next.col, next.dir);
             }, className: cx(c.button, active && c.active), children: [label, active && (_jsx("span", { "aria-hidden": true, className: c.arrow, children: dir === "desc" ? " ▾" : " ▴" }))] }) }));

package/dist/react/TableFilter.d.ts

@@ -10,7 +10,9 @@
  * the query (server-side, or `filterRows` in the browser), so paging reflects
  * the filtered set. The search is applied on Enter or its chip, never on each
  * keystroke. Mechanics only: every visual choice is the site's, through
- * `classNames`; the actions are chips.
+ * `classNames`; the actions are chips. The panel is kept on screen: once open,
+ * it is slid sideways (`nudgeIntoView`) so no part of it hangs past either edge
+ * of a phone.
  */
 import { type ReactNode } from "react";
 export interface DateFieldOption {
@@ -86,8 +88,14 @@ export interface TableFilterProps<F extends object> {
     questions?: TableFilterQuestions<F>;
     /** Turn everything off. */
     onClear: () => void;
+    /**
+     * Where the Clear chip goes: beside the other controls (default), or inside
+     * the questions panel. "panel" needs a `questions` group; without one it is
+     * beside.
+     */
+    clearPlacement?: "beside" | "panel";
     searchIcon?: ReactNode;
     clearLabel?: ReactNode;
     classNames?: TableFilterClassNames;
 }
-export default function TableFilter<F extends object>({ search, dates, questions, onClear, searchIcon, clearLabel, classNames: c, }: TableFilterProps<F>): import("react").JSX.Element;
+export default function TableFilter<F extends object>({ search, dates, questions, onClear, clearPlacement, searchIcon, clearLabel, classNames: c, }: TableFilterProps<F>): import("react").JSX.Element;

package/dist/react/TableFilter.js

@@ -11,18 +11,24 @@ import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-run
  * the query (server-side, or `filterRows` in the browser), so paging reflects
  * the filtered set. The search is applied on Enter or its chip, never on each
  * keystroke. Mechanics only: every visual choice is the site's, through
- * `classNames`; the actions are chips.
+ * `classNames`; the actions are chips. The panel is kept on screen: once open,
+ * it is slid sideways (`nudgeIntoView`) so no part of it hangs past either edge
+ * of a phone.
  */
-import { useEffect, useRef, useState } from "react";
+import { useEffect, useLayoutEffect, useRef, useState } from "react";
 import { Search, SlidersHorizontal, X } from "lucide-react";
-import { filterActive } from "../table.js";
+import { filterActive, nudgeIntoView } from "../table.js";
+/** The panel keeps this many px from each edge of the viewport. */
+const EDGE = 8;
 function cx(...parts) {
     const s = parts.filter(Boolean).join(" ");
     return s || undefined;
 }
-export default function TableFilter({ search, dates, questions, onClear, searchIcon = _jsx(Search, { size: "1em", "aria-hidden": true }), clearLabel = (_jsxs(_Fragment, { children: [_jsx(X, { size: "1em", "aria-hidden": true }), " Clear"] })), classNames: c = {}, }) {
+export default function TableFilter({ search, dates, questions, onClear, clearPlacement = "beside", searchIcon = _jsx(Search, { size: "1em", "aria-hidden": true }), clearLabel = (_jsxs(_Fragment, { children: [_jsx(X, { size: "1em", "aria-hidden": true }), " Clear"] })), classNames: c = {}, }) {
     const active = filterActive({ search: search?.value, dateFrom: dates?.from, dateTo: dates?.to }, questions?.summary ?? "");
-    return (_jsxs("div", { className: c.root, children: [search && _jsx(SearchBox, { search: search, icon: searchIcon, c: c }), dates && _jsx(DateRange, { dates: dates, c: c }), questions && _jsx(QuestionPanel, { q: questions, c: c }), active && (_jsx("button", { type: "button", onClick: onClear, className: c.chip, children: clearLabel }))] }));
+    const clear = active ? (_jsx("button", { type: "button", onClick: onClear, className: c.chip, children: clearLabel })) : null;
+    const inPanel = clearPlacement === "panel" && !!questions;
+    return (_jsxs("div", { className: c.root, children: [search && _jsx(SearchBox, { search: search, icon: searchIcon, c: c }), dates && _jsx(DateRange, { dates: dates, c: c }), questions && _jsx(QuestionPanel, { q: questions, clear: inPanel ? clear : null, c: c }), !inPanel && clear] }));
 }
 function SearchBox({ search, icon, c }) {
     // Edited freely, applied on Enter or the chip; follows the applied value
@@ -37,9 +43,31 @@ function SearchBox({ search, icon, c }) {
 function DateRange({ dates, c }) {
     return (_jsxs("div", { className: c.dates, children: [dates.fields && dates.fields.length > 0 && dates.onField && (_jsx("select", { value: dates.field, onChange: (e) => dates.onField(e.target.value), title: "Which date the range filters", "aria-label": "Date to filter", className: c.select, children: dates.fields.map((o) => (_jsx("option", { value: o.value, children: o.label }, o.value))) })), _jsx("input", { type: "date", value: dates.from, max: dates.to || undefined, onChange: (e) => dates.onFrom(e.target.value), title: "From (inclusive)", "aria-label": "From date", className: c.date }), _jsx("span", { className: c.separator, "aria-hidden": true, children: "\u2013" }), _jsx("input", { type: "date", value: dates.to, min: dates.from || undefined, onChange: (e) => dates.onTo(e.target.value), title: "To (inclusive)", "aria-label": "To date", className: c.date })] }));
 }
-function QuestionPanel({ q, c }) {
+function QuestionPanel({ q, clear, c, }) {
     const [open, setOpen] = useState(false);
     const box = useRef(null);
+    const panel = useRef(null);
+    // Kept on screen: measured where the site's CSS puts it, then slid by the
+    // `translate` property (a site's own `transform` is left alone). Only a panel
+    // wider than the viewport gets a max-width.
+    useLayoutEffect(() => {
+        const el = panel.current;
+        if (!open || !el)
+            return;
+        const place = () => {
+            el.style.translate = "";
+            el.style.maxWidth = "";
+            const room = document.documentElement.clientWidth;
+            if (el.getBoundingClientRect().width > room - 2 * EDGE)
+                el.style.maxWidth = `${room - 2 * EDGE}px`;
+            const r = el.getBoundingClientRect();
+            const dx = nudgeIntoView(r.left, r.width, room, EDGE);
+            el.style.translate = dx ? `${dx}px 0` : "";
+        };
+        place();
+        window.addEventListener("resize", place);
+        return () => window.removeEventListener("resize", place);
+    }, [open]);
     // Dismissed by a tap outside or Escape.
     useEffect(() => {
         if (!open)
@@ -61,8 +89,8 @@ function QuestionPanel({ q, c }) {
     }, [open]);
     const on = q.summary !== "";
     const set = (key, v) => q.onChange({ ...q.value, [key]: v });
-    return (_jsxs("div", { className: c.questions, ref: box, children: [_jsxs("button", { type: "button", onClick: () => setOpen((o) => !o), "aria-expanded": open, title: on ? `Filtered: ${q.summary}` : "Filter", "aria-label": on ? `Filtered: ${q.summary}` : "Filter", className: cx(c.chip, on && c.chipActive), children: [q.icon ?? _jsx(SlidersHorizontal, { size: "1em", "aria-hidden": true }), on && _jsx("span", { className: c.summary, children: q.summary })] }), open && (_jsx("div", { className: c.panel, role: "group", "aria-label": "Filter", children: q.questions.map((question) => {
-                    const id = `tf-${String(question.key)}`;
-                    return question.kind === "toggle" ? (_jsxs("label", { className: c.question, children: [_jsx("input", { type: "checkbox", checked: !!q.value[question.key], onChange: (e) => set(question.key, e.target.checked), className: c.checkbox }), " ", question.label] }, id)) : (_jsxs("div", { className: c.question, children: [_jsx("label", { htmlFor: id, children: question.label }), " ", _jsx("input", { id: id, inputMode: "numeric", value: String(q.value[question.key] ?? ""), onChange: (e) => set(question.key, e.target.value), className: c.number }), " ", _jsx("span", { className: c.unit, children: question.unit })] }, id));
-                }) }))] }));
+    return (_jsxs("div", { className: c.questions, ref: box, children: [_jsxs("button", { type: "button", onClick: () => setOpen((o) => !o), "aria-expanded": open, title: on ? `Filtered: ${q.summary}` : "Filter", "aria-label": on ? `Filtered: ${q.summary}` : "Filter", className: cx(c.chip, on && c.chipActive), children: [q.icon ?? _jsx(SlidersHorizontal, { size: "1em", "aria-hidden": true }), on && _jsx("span", { className: c.summary, children: q.summary })] }), open && (_jsxs("div", { className: c.panel, ref: panel, role: "group", "aria-label": "Filter", children: [q.questions.map((question) => {
+                        const id = `tf-${String(question.key)}`;
+                        return question.kind === "toggle" ? (_jsxs("label", { className: c.question, children: [_jsx("input", { type: "checkbox", checked: !!q.value[question.key], onChange: (e) => set(question.key, e.target.checked), className: c.checkbox }), " ", question.label] }, id)) : (_jsxs("div", { className: c.question, children: [_jsx("label", { htmlFor: id, children: question.label }), " ", _jsx("input", { id: id, inputMode: "numeric", value: String(q.value[question.key] ?? ""), onChange: (e) => set(question.key, e.target.value), className: c.number }), " ", _jsx("span", { className: c.unit, children: question.unit })] }, id));
+                    }), clear] }))] }));
 }

package/dist/react/WalletCard.d.ts

@@ -4,11 +4,23 @@
  * Every figure is the service's answer or a dash. A balance nobody has read is
  * unknown, and unknown is not zero: showing 0 to someone with funds would send
  * them to buy credits they already own. The card offers round numbers to pay
- * in and never guesses what anything costs.
+ * in and never guesses what anything costs. Tapping one only chooses it; the
+ * invoice is made by "Create invoice".
  *
  * The compact card. `WalletPage` is the full account view; both run the same
  * top-up (`useTopUp`), which checks an open invoice on its own until it settles.
  */
-export default function WalletCard({ topUps }: {
+export interface WalletCardClassNames {
+    /** Each preset amount, and the invoice's check and cancel. Default: the package's outlined chip. */
+    chip?: string;
+    /** Added to the chosen preset. Default: an accent ring. */
+    chipActive?: string;
+    /** The action that moves a top-up forward — "Create invoice", then "Pay". Default: the accent button. */
+    primary?: string;
+}
+export interface WalletCardProps {
+    /** Preset amounts, in sats. A tap fills the amount; it does not invoice. */
     topUps?: number[];
-}): import("react").JSX.Element;
+    classNames?: WalletCardClassNames;
+}
+export default function WalletCard({ topUps, classNames }: WalletCardProps): import("react").JSX.Element;

package/dist/react/WalletCard.js

@@ -5,20 +5,23 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
  * Every figure is the service's answer or a dash. A balance nobody has read is
  * unknown, and unknown is not zero: showing 0 to someone with funds would send
  * them to buy credits they already own. The card offers round numbers to pay
- * in and never guesses what anything costs.
+ * in and never guesses what anything costs. Tapping one only chooses it; the
+ * invoice is made by "Create invoice".
  *
  * The compact card. `WalletPage` is the full account view; both run the same
  * top-up (`useTopUp`), which checks an open invoice on its own until it settles.
  */
-import { useCallback, useEffect, useState } from "react";
+import { useCallback, useEffect, useReducer, useState } from "react";
 import { RefreshCw, Zap } from "lucide-react";
 import { tollboothConfig } from "../config.js";
 import { checkBalance } from "../standardTools.js";
-import { formatSats } from "../wallet.js";
+import { amountReducer, formatSats, parseSats, presetChosen } from "../wallet.js";
 import { card, ghost, iconButton, muted, primary } from "./ui.js";
 import { useTopUp } from "./useTopUp.js";
 const DEFAULT_TOP_UPS = [1_000, 5_000, 20_000];
-export default function WalletCard({ topUps = DEFAULT_TOP_UPS }) {
+const cx = (...parts) => parts.filter(Boolean).join(" ");
+export default function WalletCard({ topUps = DEFAULT_TOP_UPS, classNames = {} }) {
+    const c = { chip: ghost, chipActive: "ring-2 ring-[var(--tb-accent)]", primary, ...classNames };
     const { appName } = tollboothConfig();
     const [balance, setBalance] = useState(null);
     const [reachable, setReachable] = useState(true);
@@ -33,6 +36,8 @@ export default function WalletCard({ topUps = DEFAULT_TOP_UPS }) {
     }, []);
     useEffect(load, [load]);
     const { state, create, check, cancel } = useTopUp({ onSettled: load });
+    const [amount, pick] = useReducer(amountReducer, "");
+    const sats = parseSats(amount);
     const busy = state.phase === "creating" || (state.phase === "awaiting" && state.checking);
     const invoice = state.phase === "awaiting" ? state.invoice : null;
     const msg = state.phase === "settled"
@@ -44,5 +49,5 @@ export default function WalletCard({ topUps = DEFAULT_TOP_UPS }) {
                 : state.phase === "idle"
                     ? (state.message ?? "")
                     : "";
-    return (_jsxs("section", { className: `${card} p-4`, children: [_jsxs("div", { className: "flex items-center justify-between", children: [_jsx("span", { className: `text-sm ${muted}`, children: "Balance" }), _jsx("button", { type: "button", onClick: load, title: "Refresh", "aria-label": "Refresh balance", className: iconButton, children: _jsx(RefreshCw, { size: 14 }) })] }), _jsxs("div", { className: "mt-1 flex items-baseline gap-2", children: [_jsx("span", { className: "text-2xl font-semibold tabular-nums", children: formatSats(reachable ? balance : null) }), _jsx("span", { className: `text-sm ${muted}`, children: "sats" })] }), !reachable && _jsxs("p", { className: `mt-2 text-xs ${muted}`, children: [appName, " did not answer, so no balance is shown."] }), !invoice ? (_jsx("div", { className: "mt-4 flex gap-2", children: topUps.map((n) => (_jsxs("button", { type: "button", disabled: busy, onClick: () => create(n), className: ghost, children: ["+", n.toLocaleString("en-US")] }, n))) })) : (_jsxs("div", { className: "mt-4 space-y-2", children: [_jsxs("a", { href: invoice.checkoutLink ?? (invoice.bolt11 ? `lightning:${invoice.bolt11}` : "#"), target: "_blank", rel: "noreferrer", className: `${primary} flex items-center justify-center gap-2`, children: [_jsx(Zap, { size: 16 }), " Pay ", invoice.sats.toLocaleString("en-US"), " sats"] }), _jsxs("div", { className: "flex gap-2", children: [_jsx("button", { type: "button", disabled: busy, onClick: check, className: ghost, children: "I've paid \u2014 check" }), _jsx("button", { type: "button", onClick: cancel, className: `${ghost} w-auto px-4`, children: "Cancel" })] })] })), msg && _jsx("p", { className: `mt-3 text-xs ${muted}`, children: msg })] }));
+    return (_jsxs("section", { className: `${card} p-4`, children: [_jsxs("div", { className: "flex items-center justify-between", children: [_jsx("span", { className: `text-sm ${muted}`, children: "Balance" }), _jsx("button", { type: "button", onClick: load, title: "Refresh", "aria-label": "Refresh balance", className: iconButton, children: _jsx(RefreshCw, { size: 14 }) })] }), _jsxs("div", { className: "mt-1 flex items-baseline gap-2", children: [_jsx("span", { className: "text-2xl font-semibold tabular-nums", children: formatSats(reachable ? balance : null) }), _jsx("span", { className: `text-sm ${muted}`, children: "sats" })] }), !reachable && _jsxs("p", { className: `mt-2 text-xs ${muted}`, children: [appName, " did not answer, so no balance is shown."] }), !invoice ? (_jsxs("div", { className: "mt-4 space-y-2", children: [_jsx("div", { className: "flex gap-2", children: topUps.map((n) => (_jsxs("button", { type: "button", disabled: busy, "aria-pressed": presetChosen(amount, n), onClick: () => pick({ type: "preset", sats: n }), className: cx(c.chip, presetChosen(amount, n) && c.chipActive), children: ["+", n.toLocaleString("en-US")] }, n))) }), _jsx("button", { type: "button", disabled: busy || !sats, onClick: () => sats && create(sats), className: c.primary, children: "Create invoice" })] })) : (_jsxs("div", { className: "mt-4 space-y-2", children: [_jsxs("a", { href: invoice.checkoutLink ?? (invoice.bolt11 ? `lightning:${invoice.bolt11}` : "#"), target: "_blank", rel: "noreferrer", className: cx(c.primary, "flex items-center justify-center gap-2"), children: [_jsx(Zap, { size: 16 }), " Pay ", invoice.sats.toLocaleString("en-US"), " sats"] }), _jsxs("div", { className: "flex gap-2", children: [_jsx("button", { type: "button", disabled: busy, onClick: check, className: c.chip, children: "I've paid \u2014 check" }), _jsx("button", { type: "button", onClick: cancel, className: cx(c.chip, "w-auto px-4"), children: "Cancel" })] })] })), msg && _jsx("p", { className: `mt-3 text-xs ${muted}`, children: msg })] }));
 }

package/dist/react/WalletPage.d.ts

@@ -6,7 +6,9 @@
  * purchase_credits → check_payment, account_statement, the coupon tools),
  * holds the states and writes the words; every visual choice belongs to the
  * site, through `classNames` — with none it is plain markup that inherits from
- * the page. Actions are chips (`classNames.chip`). Anything only one site has
+ * the page. Actions are chips (`classNames.chip`); the one that moves a top-up
+ * forward may keep an accent (`classNames.primary`). A preset amount only fills
+ * the amount — the invoice is made by "Create invoice". Anything only one site has
  * (a funding-health panel, an operator view) goes in `before` or `children`.
  *
  * A balance nobody has read is a dash, never 0: showing 0 to someone with
@@ -32,7 +34,13 @@ export interface WalletPageClassNames {
     error?: string;
     /** Every action. */
     chip?: string;
-    /** Added to a chip that is the current choice. */
+    /**
+     * The action that moves a top-up forward — "Create invoice", then "Open
+     * checkout" — in place of `chip`, for a site that gives it its accent.
+     * Default: `chip`.
+     */
+    primary?: string;
+    /** Added to a chip that is the current choice (the chosen preset). */
     chipActive?: string;
     /** A row of chips. */
     chips?: string;
@@ -48,7 +56,7 @@ export interface WalletPageClassNames {
 export interface WalletPageProps {
     /** The page heading. Default "Wallet"; null for none. */
     heading?: ReactNode;
-    /** Preset amounts, in sats, offered as chips. */
+    /** Preset amounts, in sats, offered as chips. A tap fills the amount; it does not invoice. */
     topUps?: number[];
     /** Offer a box for any amount. Default true. */
     customAmount?: boolean;

package/dist/react/WalletPage.js

@@ -7,15 +7,17 @@ import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-run
  * purchase_credits → check_payment, account_statement, the coupon tools),
  * holds the states and writes the words; every visual choice belongs to the
  * site, through `classNames` — with none it is plain markup that inherits from
- * the page. Actions are chips (`classNames.chip`). Anything only one site has
+ * the page. Actions are chips (`classNames.chip`); the one that moves a top-up
+ * forward may keep an accent (`classNames.primary`). A preset amount only fills
+ * the amount — the invoice is made by "Create invoice". Anything only one site has
  * (a funding-health panel, an operator view) goes in `before` or `children`.
  *
  * A balance nobody has read is a dash, never 0: showing 0 to someone with
  * funds sends them to buy credits they already own.
  */
-import { useCallback, useEffect, useState } from "react";
+import { useCallback, useEffect, useReducer, useState } from "react";
 import { checkBalance, getAccountStatement, } from "../standardTools.js";
-import { formatSats, parseSats } from "../wallet.js";
+import { amountReducer, formatSats, parseSats, presetChosen } from "../wallet.js";
 import CouponsPanel, {} from "./CouponsPanel.js";
 import { useTopUp } from "./useTopUp.js";
 const DEFAULT_TOP_UPS = [1_000, 5_000, 25_000];
@@ -55,10 +57,15 @@ function Balance({ bal, error, refresh, formatDateTime, c, }) {
 }
 function TopUpSection({ topUps, customAmount, poll, onSettled, c, }) {
     const { state, create, check, cancel, reset } = useTopUp({ ...poll, onSettled });
-    const [custom, setCustom] = useState("");
+    const [amount, pick] = useReducer(amountReducer, "");
     const [copied, setCopied] = useState(false);
-    const customSats = parseSats(custom);
+    const sats = parseSats(amount);
     const creating = state.phase === "creating";
+    const primary = c.primary ?? c.chip;
+    function confirm() {
+        if (sats && !creating)
+            create(sats);
+    }
     async function copy(text) {
         try {
             await navigator.clipboard.writeText(text);
@@ -69,10 +76,13 @@ function TopUpSection({ topUps, customAmount, poll, onSettled, c, }) {
             /* the string is on screen and selectable */
         }
     }
-    return (_jsxs("section", { className: c.section, children: [_jsx("div", { className: c.sectionTitle, children: "Top up with Lightning" }), (state.phase === "idle" || state.phase === "creating") && (_jsxs(_Fragment, { children: [_jsx("div", { className: c.chips, children: topUps.map((n) => (_jsxs("button", { type: "button", disabled: creating, onClick: () => create(n), className: cx(c.chip, creating && state.sats === n && c.chipActive), children: [n.toLocaleString("en-US"), " sats"] }, n))) }), customAmount && (_jsxs("div", { className: c.chips, children: [_jsx("input", { inputMode: "numeric", value: custom, onChange: (e) => setCustom(e.target.value.replace(/[^\d]/g, "")), onKeyDown: (e) => {
-                                    if (e.key === "Enter" && customSats)
-                                        create(customSats);
-                                }, placeholder: "Any amount", "aria-label": "Amount in sats", className: c.input }), _jsx("button", { type: "button", disabled: creating || !customSats, onClick: () => customSats && create(customSats), className: c.chip, children: "Create invoice" })] })), creating && _jsx("p", { className: c.status, children: "Making a Lightning invoice\u2026" }), state.phase === "idle" && state.message && _jsx("p", { className: c.error, children: state.message })] })), state.phase === "awaiting" && (_jsxs("div", { className: c.invoice, children: [_jsxs("p", { className: c.status, children: ["Invoice for ", formatSats(state.invoice.sats), " sats"] }), state.invoice.bolt11 && _jsx("div", { className: c.bolt11, children: state.invoice.bolt11 }), _jsxs("div", { className: c.chips, children: [state.invoice.checkoutLink && (_jsx("a", { href: state.invoice.checkoutLink, target: "_blank", rel: "noreferrer", className: c.chip, children: "Open checkout" })), state.invoice.bolt11 && (_jsx("button", { type: "button", onClick: () => void copy(state.invoice.bolt11), className: c.chip, children: copied ? "Copied" : "Copy invoice" })), _jsx("button", { type: "button", disabled: state.checking, onClick: check, className: c.chip, children: state.checking ? "Checking…" : "I've paid — check" }), _jsx("button", { type: "button", onClick: cancel, className: c.chip, children: "Cancel" })] }), _jsx("p", { className: c.status, "aria-live": "polite", children: state.status ?? "Waiting for payment." })] })), state.phase === "settled" && (_jsxs(_Fragment, { children: [_jsxs("p", { className: c.status, "aria-live": "polite", children: ["Paid. ", formatSats(state.credited), " sats added."] }), _jsx("div", { className: c.chips, children: _jsx("button", { type: "button", onClick: reset, className: c.chip, children: "Done" }) })] })), state.phase === "failed" && (_jsxs(_Fragment, { children: [_jsx("p", { className: c.error, children: state.message }), _jsx("div", { className: c.chips, children: _jsx("button", { type: "button", onClick: reset, className: c.chip, children: "Try again" }) })] }))] }));
+    return (_jsxs("section", { className: c.section, children: [_jsx("div", { className: c.sectionTitle, children: "Top up with Lightning" }), (state.phase === "idle" || state.phase === "creating") && (_jsxs(_Fragment, { children: [_jsx("div", { className: c.chips, children: topUps.map((n) => (_jsxs("button", { type: "button", disabled: creating, "aria-pressed": presetChosen(amount, n), onClick: () => pick({ type: "preset", sats: n }), className: cx(c.chip, presetChosen(amount, n) && c.chipActive), children: [n.toLocaleString("en-US"), " sats"] }, n))) }), _jsxs("div", { className: c.chips, children: [customAmount && (_jsx("input", { inputMode: "numeric", value: amount, disabled: creating, onChange: (e) => pick({ type: "typed", text: e.target.value }), onKeyDown: (e) => {
+                                    if (e.key === "Enter")
+                                        confirm();
+                                }, placeholder: "Any amount", "aria-label": "Amount in sats", className: c.input })), _jsx("button", { type: "button", disabled: creating || !sats, onClick: confirm, className: primary, children: "Create invoice" })] }), creating && _jsx("p", { className: c.status, children: "Making a Lightning invoice\u2026" }), state.phase === "idle" && state.message && _jsx("p", { className: c.error, children: state.message })] })), state.phase === "awaiting" && (_jsxs("div", { className: c.invoice, children: [_jsxs("p", { className: c.status, children: ["Invoice for ", formatSats(state.invoice.sats), " sats"] }), state.invoice.bolt11 && _jsx("div", { className: c.bolt11, children: state.invoice.bolt11 }), _jsxs("div", { className: c.chips, children: [state.invoice.checkoutLink && (_jsx("a", { href: state.invoice.checkoutLink, target: "_blank", rel: "noreferrer", className: primary, children: "Open checkout" })), state.invoice.bolt11 && (_jsx("button", { type: "button", onClick: () => void copy(state.invoice.bolt11), className: c.chip, children: copied ? "Copied" : "Copy invoice" })), _jsx("button", { type: "button", disabled: state.checking, onClick: check, className: c.chip, children: state.checking ? "Checking…" : "I've paid — check" }), _jsx("button", { type: "button", onClick: cancel, className: c.chip, children: "Cancel" })] }), _jsx("p", { className: c.status, "aria-live": "polite", children: state.status ?? "Waiting for payment." })] })), state.phase === "settled" && (_jsxs(_Fragment, { children: [_jsxs("p", { className: c.status, "aria-live": "polite", children: ["Paid. ", formatSats(state.credited), " sats added."] }), _jsx("div", { className: c.chips, children: _jsx("button", { type: "button", onClick: () => {
+                                pick({ type: "clear" });
+                                reset();
+                            }, className: c.chip, children: "Done" }) })] })), state.phase === "failed" && (_jsxs(_Fragment, { children: [_jsx("p", { className: c.error, children: state.message }), _jsx("div", { className: c.chips, children: _jsx("button", { type: "button", onClick: reset, className: c.chip, children: "Try again" }) })] }))] }));
 }
 function Tranches({ tranches, formatDate, c, }) {
     return (_jsxs("section", { className: c.section, children: [_jsx("div", { className: c.sectionTitle, children: "Credit tranches" }), _jsx("ul", { className: c.list, children: tranches.map((t) => (_jsxs("li", { className: c.row, children: [_jsxs("span", { children: [formatSats(t.remaining_sats), " / ", formatSats(t.amount_sats), " sats"] }), " ", _jsx("span", { children: t.expires_at ? `expires ${formatDate(t.expires_at)}` : "no expiry" })] }, t.id))) })] }));

package/dist/react/index.d.ts

@@ -10,7 +10,7 @@ export { default as QuoteScroller, type QuoteScrollerProps, type QuoteScrollerCl
 export { default as SessionKeyClaim } from "./SessionKeyClaim.tsx";
 export { default as TableFilter, type DateFieldOption, type FilterQuestion, type TableFilterProps, type TableFilterClassNames, type TableFilterDates, type TableFilterQuestions, type TableFilterSearch, } from "./TableFilter.tsx";
 export { default as ThemeToggle, type ThemeToggleProps, type ThemeToggleClassNames } from "./ThemeToggle.tsx";
-export { default as WalletCard } from "./WalletCard.tsx";
+export { default as WalletCard, type WalletCardProps, type WalletCardClassNames } from "./WalletCard.tsx";
 export { default as WalletPage, type WalletPageProps, type WalletPageClassNames } from "./WalletPage.tsx";
 export { useSession, type Session } from "./useSession.ts";
 export { useDebugLog } from "./useDebugLog.ts";

package/dist/react/useSession.d.ts

@@ -12,6 +12,8 @@ export interface Session {
     canSign: boolean;
     /** Set when a cached proof lapses: a calm prompt to sign in again. */
     notice: string;
+    /** Clear the notice without signing in — the patron read it and moved on. */
+    dismissNotice: () => void;
     /** Call after a successful sign-in so the whole app notices. */
     refresh: () => void;
     signOut: () => void;

package/dist/react/useSession.js

@@ -28,6 +28,7 @@ export function useSession() {
         setState(read());
         setNotice("");
     }, []);
+    const dismissNotice = useCallback(() => setNotice(""), []);
     useEffect(() => onProofExpired(() => {
         // A tab that can sign for THIS npub lost nothing.
         if (canSignFor(currentClaim()))
@@ -35,5 +36,5 @@ export function useSession() {
         setNotice("Your session lapsed while you were away. Sign in again to carry on.");
         setState(read());
     }), []);
-    return { ...state, notice, refresh, signOut };
+    return { ...state, notice, dismissNotice, refresh, signOut };
 }

package/dist/standardTools.d.ts

@@ -1,17 +1,53 @@
 /**
  * Typed wrappers for the tools every operator gets from
  * `register_standard_tools` in the tollbooth-dpyc wheel.
+ *
+ * Every wrapper takes the same optional `CallOptions` as `callTool`, last.
+ * A wrapper that is best-effort by default stays so unless the caller says
+ * otherwise; what the caller passes wins.
  */
+import { type CallOptions } from "./client.ts";
+/** What a patron must supply beyond the npub proof, per the wheel's `patron_auth_block`. */
+export interface PatronAuth {
+    mode: "oauth" | "secure_courier" | "none";
+    patron_credentials_required: boolean;
+    /** mode "oauth": the provider's credential service. */
+    oauth_service?: string;
+    /** mode "secure_courier": the service a patron delivers secrets to. */
+    credential_service?: string;
+}
+/** The wheel's `service_status`: health and build facts, free and unauthenticated. */
 export interface ServiceStatus {
+    success?: boolean;
+    service?: string;
+    slug?: string;
+    version?: string;
+    tollbooth_dpyc_version?: string;
+    vault_configured?: boolean;
+    courier_has_vault?: boolean;
     operator_npub_hash?: string;
+    process_id?: number;
+    /** Deploy metadata from the environment (commit, build time, …), lower-cased keys. */
+    build_info?: Record<string, string> | null;
+    patron_auth?: PatronAuth;
+    /** Only on a server that runs background jobs. */
+    async_jobs?: {
+        docket_url_set: boolean;
+        backend: string;
+        durable_across_recycles: boolean;
+    };
+    durable_jobs?: {
+        modal_app: string | null;
+        detached_executor_active: boolean;
+        detached_executor_resolved: boolean;
+        detached_executor_error: string | null;
+        last_dispatch_error: string | null;
+        dispatching: boolean;
+    };
     lifecycle?: string;
     message?: string;
-    version?: string;
-    tollbooth_dpyc_version?: string;
-    service?: string;
-    slug?: string;
 }
-export declare function serviceStatus(): Promise<ServiceStatus>;
+export declare function serviceStatus(opts?: CallOptions): Promise<ServiceStatus>;
 export interface NpubProofResult {
     success?: boolean;
     proven_npub?: string;
@@ -31,12 +67,12 @@ export interface NpubProofResult {
  * in the DM is the one on their own screen; an impostor firing the same tool
  * from elsewhere cannot make the patron's open tab show the attacker's code.
  */
-export declare function requestNpubProof(patronNpub: string, verifyAt?: string, reason?: string): Promise<NpubProofResult>;
+export declare function requestNpubProof(patronNpub: string, verifyAt?: string, reason?: string, opts?: CallOptions): Promise<NpubProofResult>;
 /**
  * Step 2: drain DMs for the signed reply to step 1. Call only after the human
  * says they replied — it is destructive, so never poll it.
  */
-export declare function receiveNpubProof(patronNpub: string, dpopToken: string): Promise<NpubProofResult>;
+export declare function receiveNpubProof(patronNpub: string, dpopToken: string, opts?: CallOptions): Promise<NpubProofResult>;
 export interface ProofStatusResult {
     success?: boolean;
     status?: "valid" | "expired" | "unknown" | string;
@@ -44,7 +80,7 @@ export interface ProofStatusResult {
     error?: string;
     error_code?: string;
 }
-export declare function checkProofStatus(patronNpub: string, dpopToken: string): Promise<ProofStatusResult>;
+export declare function checkProofStatus(patronNpub: string, dpopToken: string, opts?: CallOptions): Promise<ProofStatusResult>;
 /** One credit tranche: a purchase (or grant) and what is left of it. */
 export interface CreditTranche {
     id: string;
@@ -75,24 +111,49 @@ export interface CheckBalanceResult {
         calls: number;
         api_sats: number;
     }>;
+    invoice_summary?: {
+        total_invoices: number;
+        settled_count: number;
+        pending_count: number;
+        total_real_sats: number;
+        total_api_sats_credited: number;
+    };
     error?: string;
     error_code?: string;
 }
-export declare function checkBalance(): Promise<CheckBalanceResult>;
+export declare function checkBalance(opts?: CallOptions): Promise<CheckBalanceResult>;
+export interface ConstraintEffect {
+    type: string;
+    message?: string;
+    [key: string]: unknown;
+}
+/** The wheel's `check_price` preview. */
 export interface CheckPriceResult {
     success: boolean;
     tool_id?: string;
-    base_cost_api_sats?: number;
-    effective_cost_api_sats?: number;
+    tool_name?: string;
+    /** "flat" | "flat+multipliers" | "percent" */
+    pricing_type?: string;
+    base_cost_api_sats?: number | null;
+    effective_cost_api_sats?: number | null;
+    rate_percent?: number;
+    rate_param?: string;
+    min_cost_sats?: number;
+    multipliers?: Record<string, unknown>;
+    constraints_enabled?: boolean;
+    constraint_effects?: ConstraintEffect[];
+    hint?: string;
     error?: string;
     error_code?: string;
 }
 /**
  * The fare for one tool in api_sats, as the live pricing model resolves it,
- * constraints included — keyed by the tool's frozen UUID. Null when unreadable:
- * show the answer without a price rather than invent one.
+ * constraints included — keyed by the tool's frozen UUID (or its capability
+ * name). `toolKwargs` are the call's own parameters, for a tool priced by
+ * them (ad valorem, or a multiplier on a categorical argument). Null when
+ * unreadable: show the answer without a price rather than invent one.
  */
-export declare function checkPrice(toolId: string): Promise<number | null>;
+export declare function checkPrice(toolId: string, toolKwargs?: Record<string, unknown>, opts?: CallOptions): Promise<number | null>;
 export interface PurchaseCreditsResult {
     success?: boolean;
     invoice_id?: string;
@@ -104,7 +165,7 @@ export interface PurchaseCreditsResult {
     error?: string;
     error_code?: string;
 }
-export declare function purchaseCredits(sats: number): Promise<PurchaseCreditsResult>;
+export declare function purchaseCredits(sats: number, opts?: CallOptions): Promise<PurchaseCreditsResult>;
 export interface CheckPaymentResult {
     success?: boolean;
     status?: "New" | "Processing" | "Settled" | "Expired" | "Invalid" | string;
@@ -112,10 +173,14 @@ export interface CheckPaymentResult {
     invoice_id?: string;
     credits_granted?: number;
     balance_api_sats?: number;
+    amount_sats?: number;
+    /** false: the credit could not be written; nothing was granted. */
+    persisted?: boolean;
+    source?: string;
     error?: string;
     error_code?: string;
 }
-export declare function checkPayment(invoiceId: string): Promise<CheckPaymentResult>;
+export declare function checkPayment(invoiceId: string, opts?: CallOptions): Promise<CheckPaymentResult>;
 export interface StatementInvoice {
     invoice_id: string;
     status: string;
@@ -164,7 +229,7 @@ export interface AccountStatementResult {
     error?: string;
     error_code?: string;
 }
-export declare function getAccountStatement(days?: number): Promise<AccountStatementResult>;
+export declare function getAccountStatement(days?: number, opts?: CallOptions): Promise<AccountStatementResult>;
 export interface PatronCoupon {
     coupon_id: string;
     name: string;
@@ -204,11 +269,11 @@ export interface ForgetCouponResult {
     error_code?: string;
 }
 /** The coupons this patron has redeemed here. Free. */
-export declare function listMyCoupons(): Promise<ListMyCouponsResult>;
+export declare function listMyCoupons(opts?: CallOptions): Promise<ListMyCouponsResult>;
 /** Redeem an operator's code once; the discount then applies on its own. Free. */
-export declare function redeemCoupon(code: string): Promise<RedeemCouponResult>;
+export declare function redeemCoupon(code: string, opts?: CallOptions): Promise<RedeemCouponResult>;
 /** Take a coupon off the patron's list. The code stays re-redeemable while its window allows. */
-export declare function forgetCoupon(couponId: string): Promise<ForgetCouponResult>;
+export declare function forgetCoupon(couponId: string, opts?: CallOptions): Promise<ForgetCouponResult>;
 export interface Kind0 {
     name?: string;
     display_name?: string;
@@ -225,7 +290,7 @@ export interface GetNostrProfileResult {
     profile?: Kind0;
     error?: string;
 }
-export declare function getNostrProfile(npub: string): Promise<GetNostrProfileResult>;
+export declare function getNostrProfile(npub: string, opts?: CallOptions): Promise<GetNostrProfileResult>;
 export interface PublishNostrProfileResult {
     success: boolean;
     ok?: number;
@@ -234,4 +299,150 @@ export interface PublishNostrProfileResult {
     error?: string;
 }
 /** Relay a kind-0 the BROWSER signed. The wheel verifies it and fans it out. */
-export declare function publishNostrProfile(npub: string, signedEvent: string): Promise<PublishNostrProfileResult>;
+export declare function publishNostrProfile(npub: string, signedEvent: string, opts?: CallOptions): Promise<PublishNostrProfileResult>;
+/** Every lifecycle `session_status` reports. */
+export type SessionLifecycle = "ready" | "warming_up" | "misconfigured" | "quota_exceeded" | "not_registered" | "no_identity";
+/** The patron's stored upstream OAuth token, when the operator has a provider. */
+export interface UpstreamOAuth {
+    service: string;
+    has_access_token: boolean;
+    has_refresh_token: boolean;
+    refresh_enabled: boolean;
+    access_token_expires_at?: number;
+    access_token_expires_in_seconds?: number;
+}
+export interface SessionStatusResult {
+    success?: boolean;
+    lifecycle?: SessionLifecycle;
+    message?: string;
+    operator_npub?: string;
+    /** Why it is not ready, from the failing layer. */
+    detail?: string;
+    operator_credential_service?: string;
+    patron_credential_service?: string;
+    upstream_oauth?: UpstreamOAuth;
+    /** The vault could not answer — not the same as "never authorized". */
+    upstream_oauth_unreadable?: string;
+    error?: string;
+    error_code?: string;
+}
+/**
+ * Is the operator ready to serve? Free, no proof. With `patronNpub`, also the
+ * patron's upstream OAuth token expiry, so a page can refresh ahead of time.
+ */
+export declare function sessionStatus(patronNpub?: string, opts?: CallOptions): Promise<SessionStatusResult>;
+export interface OnboardingItem {
+    field: string;
+    /** "identity" | "authority" | "secret" */
+    category: string;
+    /** "configured" | "missing" | "unknown" */
+    status: string;
+    how?: string;
+    lifecycle?: string;
+    delivered_at?: string | null;
+}
+/** The wheel's `get_operator_onboarding_status`: what the operator still has to set up. */
+export interface OperatorOnboardingStatus {
+    ready?: boolean;
+    configured?: OnboardingItem[];
+    missing?: OnboardingItem[];
+    optional_missing?: OnboardingItem[];
+    summary?: string;
+    bootstrap_error?: string;
+    vault_ok?: boolean;
+    /** Set when the credential vault could not be read: nothing is known either way. */
+    vault_situation?: string;
+    credential_greeting?: string | null;
+    credential_service?: string | null;
+    operator_name?: string;
+    error?: string;
+    error_code?: string;
+}
+export declare function getOperatorOnboardingStatus(opts?: CallOptions): Promise<OperatorOnboardingStatus>;
+/**
+ * The operator's own balance at its Authority — what certifies patron top-ups.
+ * The Authority's ledger, in the same shape as a patron's `check_balance`.
+ */
+export declare function checkAuthorityBalance(opts?: CallOptions): Promise<CheckBalanceResult>;
+export interface PricingStep {
+    id: string;
+    type: string;
+    params?: Record<string, unknown>;
+    patron_npubs?: string[];
+}
+export interface ToolPrice {
+    tool_id: string;
+    tool_name: string;
+    price_sats: number;
+    category: string;
+    intent: string;
+    priced: boolean;
+    price_type?: string;
+    price_formula?: unknown;
+    min_cost?: number;
+    max_cost?: number;
+    multipliers?: Record<string, unknown>;
+    chain?: PricingStep[];
+}
+/** The wheel's `get_pricing_model`. `status` is "ok" or "error". */
+export interface PricingModelResult {
+    status?: string;
+    model_id?: string | null;
+    name?: string | null;
+    is_active?: boolean | null;
+    tools?: ToolPrice[] | null;
+    tranche_lifetime?: {
+        target_usage_pct: number;
+        ttl_days?: number;
+        min_days?: number;
+        max_days?: number;
+    };
+    error?: string;
+}
+/** The operator's active pricing model. Free, no proof. */
+export declare function getPricingModel(opts?: CallOptions): Promise<PricingModelResult>;
+export interface CanonicalIdentity {
+    tool_id: string;
+    mcp_name: string;
+    category: string;
+    intent: string;
+    capability: string;
+    registered: boolean;
+    reason?: string;
+}
+/** The wheel's `list_canonical_identities`: every tool's frozen UUID and wire name. */
+export interface CanonicalIdentitiesResult {
+    success?: boolean;
+    operator_npub?: string;
+    count?: number;
+    unregistered_count?: number;
+    tools?: CanonicalIdentity[];
+    unregistered?: Array<{
+        mcp_name: string;
+        reason: string;
+        [key: string]: unknown;
+    }>;
+    error?: string;
+}
+export declare function listCanonicalIdentities(opts?: CallOptions): Promise<CanonicalIdentitiesResult>;
+export interface PatronCredentialFieldsResult {
+    success?: boolean;
+    fields?: string[];
+    /** Per field, when it was delivered; null for secrets vaulted before stamps. */
+    delivered_at?: Record<string, string | null>;
+    count?: number;
+    error?: string;
+    error_code?: string;
+}
+export interface PatronCredentialWriteResult {
+    success?: boolean;
+    message?: string;
+    error?: string;
+    error_code?: string;
+}
+/** The names of the patron's stored credential fields — never their values. */
+export declare function getPatronCredentialFields(opts?: CallOptions): Promise<PatronCredentialFieldsResult>;
+/** Set one credential field, leaving the others as they are. */
+export declare function updatePatronCredential(field: string, value: string, opts?: CallOptions): Promise<PatronCredentialWriteResult>;
+/** Remove one credential field, leaving the others as they are. */
+export declare function deletePatronCredential(field: string, opts?: CallOptions): Promise<PatronCredentialWriteResult>;

package/dist/standardTools.js

@@ -1,10 +1,14 @@
 /**
  * Typed wrappers for the tools every operator gets from
  * `register_standard_tools` in the tollbooth-dpyc wheel.
+ *
+ * Every wrapper takes the same optional `CallOptions` as `callTool`, last.
+ * A wrapper that is best-effort by default stays so unless the caller says
+ * otherwise; what the caller passes wins.
  */
 import { callTool } from "./client.js";
-export function serviceStatus() {
-    return callTool("service_status", {}, { bestEffort: true });
+export function serviceStatus(opts) {
+    return callTool("service_status", {}, { bestEffort: true, ...opts });
 }
 /**
  * Step 1 of DM sign-in: a Secure Courier challenge DM to the npub. Free.
@@ -14,67 +18,100 @@ export function serviceStatus() {
  * in the DM is the one on their own screen; an impostor firing the same tool
  * from elsewhere cannot make the patron's open tab show the attacker's code.
  */
-export function requestNpubProof(patronNpub, verifyAt, reason) {
+export function requestNpubProof(patronNpub, verifyAt, reason, opts) {
     return callTool("request_npub_proof", {
         patron_npub: patronNpub,
         ...(verifyAt ? { verify_at: verifyAt } : {}),
         ...(reason ? { reason } : {}),
-    });
+    }, opts);
 }
 /**
  * Step 2: drain DMs for the signed reply to step 1. Call only after the human
  * says they replied — it is destructive, so never poll it.
  */
-export function receiveNpubProof(patronNpub, dpopToken) {
-    return callTool("receive_npub_proof", {
-        patron_npub: patronNpub,
-        dpop_token: dpopToken,
-    });
+export function receiveNpubProof(patronNpub, dpopToken, opts) {
+    return callTool("receive_npub_proof", { patron_npub: patronNpub, dpop_token: dpopToken }, opts);
 }
-export function checkProofStatus(patronNpub, dpopToken) {
-    return callTool("check_proof_status", { patron_npub: patronNpub, dpop_token: dpopToken }, { bestEffort: true });
+export function checkProofStatus(patronNpub, dpopToken, opts) {
+    return callTool("check_proof_status", { patron_npub: patronNpub, dpop_token: dpopToken }, { bestEffort: true, ...opts });
 }
-export function checkBalance() {
-    return callTool("check_balance", {});
+export function checkBalance(opts) {
+    return callTool("check_balance", {}, opts);
 }
 /**
  * The fare for one tool in api_sats, as the live pricing model resolves it,
- * constraints included — keyed by the tool's frozen UUID. Null when unreadable:
- * show the answer without a price rather than invent one.
+ * constraints included — keyed by the tool's frozen UUID (or its capability
+ * name). `toolKwargs` are the call's own parameters, for a tool priced by
+ * them (ad valorem, or a multiplier on a categorical argument). Null when
+ * unreadable: show the answer without a price rather than invent one.
  */
-export async function checkPrice(toolId) {
-    const r = await callTool("check_price", { tool_id: toolId });
+export async function checkPrice(toolId, toolKwargs, opts) {
+    const r = await callTool("check_price", { tool_id: toolId, ...(toolKwargs ? { tool_kwargs: JSON.stringify(toolKwargs) } : {}) }, opts);
     const v = r.effective_cost_api_sats ?? r.base_cost_api_sats;
     return typeof v === "number" ? v : null;
 }
-export function purchaseCredits(sats) {
-    return callTool("purchase_credits", { amount_sats: sats });
+export function purchaseCredits(sats, opts) {
+    return callTool("purchase_credits", { amount_sats: sats }, opts);
 }
-export function checkPayment(invoiceId) {
-    return callTool("check_payment", { invoice_id: invoiceId });
+export function checkPayment(invoiceId, opts) {
+    return callTool("check_payment", { invoice_id: invoiceId }, opts);
 }
-export function getAccountStatement(days = 30) {
-    return callTool("account_statement", { days });
+export function getAccountStatement(days = 30, opts) {
+    return callTool("account_statement", { days }, opts);
 }
 /** The coupons this patron has redeemed here. Free. */
-export function listMyCoupons() {
-    return callTool("list_my_coupons", {});
+export function listMyCoupons(opts) {
+    return callTool("list_my_coupons", {}, opts);
 }
 /** Redeem an operator's code once; the discount then applies on its own. Free. */
-export function redeemCoupon(code) {
-    return callTool("redeem_coupon", { code });
+export function redeemCoupon(code, opts) {
+    return callTool("redeem_coupon", { code }, opts);
 }
 /** Take a coupon off the patron's list. The code stays re-redeemable while its window allows. */
-export function forgetCoupon(couponId) {
-    return callTool("forget_coupon", { coupon_id: couponId });
+export function forgetCoupon(couponId, opts) {
+    return callTool("forget_coupon", { coupon_id: couponId }, opts);
 }
-export function getNostrProfile(npub) {
-    return callTool("get_nostr_profile", { npub });
+export function getNostrProfile(npub, opts) {
+    return callTool("get_nostr_profile", { npub }, opts);
 }
 /** Relay a kind-0 the BROWSER signed. The wheel verifies it and fans it out. */
-export function publishNostrProfile(npub, signedEvent) {
-    return callTool("publish_nostr_profile", {
-        npub,
-        signed_event: signedEvent,
-    });
+export function publishNostrProfile(npub, signedEvent, opts) {
+    return callTool("publish_nostr_profile", { npub, signed_event: signedEvent }, opts);
+}
+/**
+ * Is the operator ready to serve? Free, no proof. With `patronNpub`, also the
+ * patron's upstream OAuth token expiry, so a page can refresh ahead of time.
+ */
+export function sessionStatus(patronNpub, opts) {
+    return callTool("session_status", patronNpub ? { patron_npub: patronNpub } : {}, { bestEffort: true, ...opts });
+}
+export function getOperatorOnboardingStatus(opts) {
+    return callTool("get_operator_onboarding_status", {}, { bestEffort: true, ...opts });
+}
+/**
+ * The operator's own balance at its Authority — what certifies patron top-ups.
+ * The Authority's ledger, in the same shape as a patron's `check_balance`.
+ */
+export function checkAuthorityBalance(opts) {
+    return callTool("check_authority_balance", {}, { bestEffort: true, ...opts });
+}
+/** The operator's active pricing model. Free, no proof. */
+export function getPricingModel(opts) {
+    return callTool("get_pricing_model", {}, opts);
+}
+export function listCanonicalIdentities(opts) {
+    return callTool("list_canonical_identities", {}, opts);
+}
+/** The names of the patron's stored credential fields — never their values. */
+export function getPatronCredentialFields(opts) {
+    return callTool("get_patron_credential_fields", {}, opts);
+}
+/** Set one credential field, leaving the others as they are. */
+export function updatePatronCredential(field, value, opts) {
+    // `field` first: the log's scrubber keys on it to hide `value`.
+    return callTool("update_patron_credential", { field, value }, opts);
+}
+/** Remove one credential field, leaving the others as they are. */
+export function deletePatronCredential(field, opts) {
+    return callTool("delete_patron_credential", { field }, opts);
 }

package/dist/table.d.ts

@@ -21,6 +21,16 @@ export declare function nextSort(col: string, activeCol: string, dir: SortDir, i
     col: string;
     dir: SortDir;
 };
+/** The `aria-sort` of a column header: set on the sorted column only. */
+export declare function ariaSort(col: string, activeCol: string, dir: SortDir): "ascending" | "descending" | undefined;
+/**
+ * How far to slide a popover sideways so it stays inside the viewport: the
+ * horizontal offset (px, negative is left) to add to where it would sit.
+ * `left` and `width` are its box as laid out before any slide. It keeps
+ * `margin` px from each edge; one wider than the room left is pinned to the
+ * left margin (give it a max-width to fit). Zero when it already fits.
+ */
+export declare function nudgeIntoView(left: number, width: number, viewportWidth: number, margin?: number): number;
 /**
  * A case-insensitive test for `pattern`. It is read as a regular expression
  * when it is one, and as plain text when it is not, so a stray "(" in a search

package/dist/table.js

@@ -35,6 +35,29 @@ export function nextSort(col, activeCol, dir, initial = "desc") {
         return { col, dir: dir === "desc" ? "asc" : "desc" };
     return { col, dir: initial };
 }
+/** The `aria-sort` of a column header: set on the sorted column only. */
+export function ariaSort(col, activeCol, dir) {
+    if (col !== activeCol)
+        return undefined;
+    return dir === "desc" ? "descending" : "ascending";
+}
+// ── A popover kept on screen ───────────────────────────────────────────────
+/**
+ * How far to slide a popover sideways so it stays inside the viewport: the
+ * horizontal offset (px, negative is left) to add to where it would sit.
+ * `left` and `width` are its box as laid out before any slide. It keeps
+ * `margin` px from each edge; one wider than the room left is pinned to the
+ * left margin (give it a max-width to fit). Zero when it already fits.
+ */
+export function nudgeIntoView(left, width, viewportWidth, margin = 8) {
+    const minLeft = margin;
+    const maxLeft = viewportWidth - margin - width;
+    if (maxLeft < minLeft || left < minLeft)
+        return minLeft - left;
+    if (left > maxLeft)
+        return maxLeft - left;
+    return 0;
+}
 // ── Filtering ──────────────────────────────────────────────────────────────
 /**
  * A case-insensitive test for `pattern`. It is read as a regular expression

package/dist/wallet.d.ts

@@ -66,6 +66,24 @@ export declare function paymentPhase(status: string | undefined | null): Payment
 export declare function invoiceFrom(result: PurchaseCreditsResult, asked: number): Invoice | null;
 /** A whole number of sats worth invoicing, from what the patron typed; else null. */
 export declare function parseSats(input: string | number): number | null;
+/**
+ * The amount box. Tapping a preset only fills it; an invoice is made only by
+ * the explicit "Create invoice" action, which reads `parseSats(text)`. A tap is
+ * a choice, not a purchase — a patron who taps the wrong chip changes it
+ * before anything is asked of the service.
+ */
+export type AmountEvent = {
+    type: "preset";
+    sats: number;
+} | {
+    type: "typed";
+    text: string;
+} | {
+    type: "clear";
+};
+export declare function amountReducer(text: string, event: AmountEvent): string;
+/** Whether preset `sats` is what the amount box holds — the chip to mark as chosen. */
+export declare function presetChosen(text: string, sats: number): boolean;
 export declare function topUpReducer(state: TopUpState, event: TopUpEvent): TopUpState;
 /** Whether a poll should run now: an invoice is out, nothing is in flight, and the budget is not spent. */
 export declare function shouldPoll(state: TopUpState, maxChecks: number): boolean;

package/dist/wallet.js

@@ -38,6 +38,20 @@ export function parseSats(input) {
     const n = typeof input === "number" ? input : Number(String(input).replace(/[\s,_]/g, ""));
     return Number.isSafeInteger(n) && n > 0 ? n : null;
 }
+export function amountReducer(text, event) {
+    switch (event.type) {
+        case "preset":
+            return parseSats(event.sats) === null ? text : String(event.sats);
+        case "typed":
+            return event.text.replace(/[^\d]/g, "");
+        case "clear":
+            return "";
+    }
+}
+/** Whether preset `sats` is what the amount box holds — the chip to mark as chosen. */
+export function presetChosen(text, sats) {
+    return parseSats(text) === sats;
+}
 export function topUpReducer(state, event) {
     switch (event.type) {
         case "create":

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tollbooth-dpyc/web",
-  "version": "1.1.0",
+  "version": "1.3.0",
   "description": "Shared browser SDK for Tollbooth DPYC operator front ends: npub sign-in, proofs, MCP client, profile and wallet",
   "license": "Apache-2.0",
   "author": "Lonnie VanZandt",