hd-wallet-ui 2.0.33 → 2.1.0

package/dist/wallet-origin-host/assets/{wallet-origin.f8122a4a747c6d4515d0f5dafd5aa2f4e0c02bcbad2e5a93092240438092798e.js → wallet-origin.72e88c0cb8690e6e9d3ee9c87639713cb3e92995eec544db1cfbebefdf0b72cb.js}

@@ -1,4 +1,4 @@
-const Ic = new URL("./wallet-origin.a45a7426d353fe1271289e298b528361c9d226b173aed2b03abf0c1fcd8e589c.wasm", import.meta.url).href, qn = {
+const Ic = new URL("./wallet-origin.4fdb6a88dea547579404b0b71649cf83d62065e0bce47a55608eddd08bb8bd68.wasm", import.meta.url).href, qn = {
   SECP256K1: 0
 }, xe = {
   OK: 0,
@@ -1612,20 +1612,33 @@ function Do(e) {
   const r = String(e.curve ?? "").trim();
   return r || (String(e.algorithm ?? "").trim().startsWith("ed25519") ? "ed25519" : "secp256k1");
 }
+function Bc(e, r) {
+  if (e.length !== r.length)
+    return !1;
+  let t = 0;
+  for (let s = 0; s < e.length; s += 1)
+    t |= e[s] ^ r[s];
+  return t === 0;
+}
 function Co(e, r, t) {
   const s = Ge(
     r.messageBytes ?? r.message ?? r.protectedRecordBytes,
     "message"
   );
-  return t === "secp256k1" ? {
-    messageBytes: s,
-    digest: Nt(r.digest, "digest") ?? e.utils.sha256(s)
-  } : {
+  if (t === "secp256k1") {
+    const a = e.utils.sha256(s), d = Nt(r.digest, "digest");
+    if (d && !Bc(d, a))
+      throw new Error(
+        "secp256k1-sha256 signs the message bytes; digest must be omitted or equal SHA-256(message)."
+      );
+    return { messageBytes: s, digest: a };
+  }
+  return {
     messageBytes: s,
     digest: Nt(r.digest, "digest")
   };
 }
-function Bc(e, r, t) {
+function Vc(e, r, t) {
   const s = Do(r), { messageBytes: a, digest: d } = Co(e, r, s);
   if (!r.signerPrivateKey && typeof t != "function")
     throw new Error(
@@ -1636,7 +1649,7 @@ function Bc(e, r, t) {
       curve: s,
       payload: r,
       messageBytes: a,
-      digest: d
+      digest: s === "secp256k1" ? null : d
     });
     if (!E || typeof E != "object")
       throw new Error("walletSign capability must return a signature envelope.");
@@ -1666,12 +1679,12 @@ function Bc(e, r, t) {
     algorithm: r.algorithm ?? "secp256k1-sha256",
     messageBytes: a,
     digest: d,
-    signature: e.curves.secp256k1.sign(d, b),
+    signature: e.curves.secp256k1.sign(a, b),
     publicKey: Nt(r.publicKey, "publicKey") ?? e.curves.publicKeyFromPrivate(b, 0)
   };
 }
-function Vc(e, r) {
-  const t = Do(r), s = Ge(r.signature, "signature"), a = Ge(r.publicKey, "publicKey"), { messageBytes: d, digest: b } = Co(e, r, t), E = t === "secp256k1" ? b : b ?? d, I = t === "ed25519" ? e.curves.ed25519.verify(E, s, a) : e.curves.secp256k1.verify(E, s, a);
+function Hc(e, r) {
+  const t = Do(r), s = Ge(r.signature, "signature"), a = Ge(r.publicKey, "publicKey"), { messageBytes: d, digest: b } = Co(e, r, t), E = t === "secp256k1" ? d : b ?? d, I = t === "ed25519" ? e.curves.ed25519.verify(E, s, a) : e.curves.secp256k1.verify(E, s, a);
   return {
     curve: t,
     algorithm: r.algorithm ?? (t === "ed25519" ? b ? "ed25519-prehash-sha256" : "ed25519" : "secp256k1-sha256"),
@@ -1692,7 +1705,7 @@ function Fo(e, r, t, s) {
     return e.curves.x25519.ecdh(t, s);
   throw new Error(`encrypt_fields does not support curve "${r}".`);
 }
-function Hc(e, r, t) {
+function zc(e, r, t) {
   if (r === "secp256k1")
     return e.curves.publicKeyFromPrivate(t, 0);
   if (r === "x25519")
@@ -1702,7 +1715,7 @@ function Hc(e, r, t) {
 function Mo(e) {
   return e === "secp256k1" ? "secp256k1-hkdf-aes-256-gcm" : "x25519-hkdf-aes-256-gcm";
 }
-function zc(e, r, t) {
+function $c(e, r, t) {
   if (r.senderPrivateKey)
     return Ge(r.senderPrivateKey, "senderPrivateKey");
   if (t === "x25519")
@@ -1717,7 +1730,7 @@ function zc(e, r, t) {
 function Bo(e, r) {
   return Nt(e?.aad, "aad") ?? Nt(r?.aad, "aad") ?? new Uint8Array();
 }
-function $c(e, r, t) {
+function Wc(e, r, t) {
   const s = Array.isArray(r.fields) ? r.fields : [];
   if (s.length === 0)
     throw new Error("encrypt_fields requires at least one field entry.");
@@ -1726,7 +1739,7 @@ function $c(e, r, t) {
     const b = Uo(r, d), E = Ge(
       r.recipientPublicKey ?? d.recipientPublicKey,
       "recipientPublicKey"
-    ), I = zc(t, r, b), P = Nt(d.senderPublicKey, "senderPublicKey") ?? Hc(e, b, I), w = Nt(d.salt, "salt") ?? Yn(t, 32, {
+    ), I = $c(t, r, b), P = Nt(d.senderPublicKey, "senderPublicKey") ?? zc(e, b, I), w = Nt(d.salt, "salt") ?? Yn(t, 32, {
       methodId: "encrypt_fields",
       fieldPath: d.fieldPath,
       purpose: "salt"
@@ -1754,7 +1767,7 @@ function $c(e, r, t) {
   }
   return { fields: a };
 }
-function Wc(e, r) {
+function jc(e, r) {
   const t = Array.isArray(r.fields) ? r.fields : [];
   if (t.length === 0)
     throw new Error("decrypt_fields requires at least one encrypted field entry.");
@@ -1774,7 +1787,7 @@ function Wc(e, r) {
   }
   return { fields: a };
 }
-function jc(e) {
+function qc(e) {
   const r = e._plugin_get_manifest_flatbuffer, t = e._plugin_get_manifest_flatbuffer_size;
   if (typeof r != "function" || typeof t != "function")
     throw new Error("Embedded plugin manifest exports are not available in this build.");
@@ -1801,7 +1814,7 @@ function Vo({ wallet: e, wasm: r, randomBytes: t = null, walletSign: s = null })
             "encrypted_fields",
             "EncryptedFieldSet.fbs",
             "EFLD",
-            $c(e, I, t)
+            Wc(e, I, t)
           )
         ]);
       case "decrypt_fields":
@@ -1811,7 +1824,7 @@ function Vo({ wallet: e, wasm: r, randomBytes: t = null, walletSign: s = null })
             "field_set",
             "FieldSelectionBundle.fbs",
             "FSLB",
-            Wc(e, I)
+            jc(e, I)
           )
         ]);
       case "sign_detached":
@@ -1821,7 +1834,7 @@ function Vo({ wallet: e, wasm: r, randomBytes: t = null, walletSign: s = null })
             "signature",
             "DetachedSignature.fbs",
             "SIGD",
-            Bc(e, I, s)
+            Vc(e, I, s)
           )
         ]);
       case "verify_detached":
@@ -1831,7 +1844,7 @@ function Vo({ wallet: e, wasm: r, randomBytes: t = null, walletSign: s = null })
             "verification",
             "DetachedVerificationResult.fbs",
             "SIGV",
-            Vc(e, I)
+            Hc(e, I)
           )
         ]);
       default:
@@ -1845,7 +1858,7 @@ function Vo({ wallet: e, wasm: r, randomBytes: t = null, walletSign: s = null })
       return Ki();
     },
     getManifestBytes() {
-      return jc(r);
+      return qc(r);
     },
     withCapabilities(d = {}) {
       return Vo({
@@ -1870,7 +1883,7 @@ function Vo({ wallet: e, wasm: r, randomBytes: t = null, walletSign: s = null })
     }
   };
 }
-const et = 131072, Ho = 131072, Yi = 4096, tn = 256, Gi = 4096, qc = 1024, Kc = 16, Xi = 1024, Yc = 16n, Gc = (1n << 64n) - 1n, Ji = Object.freeze([
+const et = 131072, Ho = 131072, Yi = 4096, tn = 256, Gi = 4096, Kc = 1024, Yc = 16, Xi = 1024, Gc = 16n, Xc = (1n << 64n) - 1n, Ji = Object.freeze([
   "INVALID_USERNAME",
   "INVALID_PASSWORD",
   "COMMON_PASSWORD",
@@ -1885,7 +1898,7 @@ const et = 131072, Ho = 131072, Yi = 4096, tn = 256, Gi = 4096, qc = 1024, Kc =
   "CRYPTO_FAILURE",
   "OUT_OF_MEMORY",
   "FIPS_NOT_ALLOWED"
-]), Xc = Object.freeze([
+]), Jc = Object.freeze([
   "_hd_sdn_derive_password_identity",
   "_hd_sdn_derive_legacy_password_identity",
   "_hd_sdn_import_legacy_mnemonic_identity",
@@ -1898,14 +1911,14 @@ const et = 131072, Ho = 131072, Yi = 4096, tn = 256, Gi = 4096, qc = 1024, Kc =
   "_hd_sdn_sign_asset_review_decision",
   "_hd_sdn_seal_remembered_identity",
   "_hd_sdn_destroy_identity"
-]), Jc = new TextEncoder(), zo = new TextDecoder("utf-8", { fatal: !0 }), On = Uint8Array, $o = Object.getPrototypeOf(On.prototype), Wo = Object.getOwnPropertyDescriptor(
+]), Qc = new TextEncoder(), zo = new TextDecoder("utf-8", { fatal: !0 }), On = Uint8Array, $o = Object.getPrototypeOf(On.prototype), Wo = Object.getOwnPropertyDescriptor(
   $o,
   Symbol.toStringTag
-).get, Qc = Object.getOwnPropertyDescriptor(
+).get, Zc = Object.getOwnPropertyDescriptor(
   $o,
   "byteLength"
-).get, jo = On.prototype.fill, Zc = On.prototype.set;
-class el extends Error {
+).get, jo = On.prototype.fill, el = On.prototype.set;
+class tl extends Error {
   constructor(r) {
     super(r), this.name = "SdnWalletError", this.code = r;
   }
@@ -1914,13 +1927,13 @@ class el extends Error {
   }
 }
 function re(e) {
-  throw new el(e);
+  throw new tl(e);
 }
-function tl(e) {
+function rl(e) {
   return Number.isInteger(e) && e >= 1 && e <= Ji.length ? Ji[e - 1] : "CRYPTO_FAILURE";
 }
 function Dn(e) {
-  re(tl(e));
+  re(rl(e));
 }
 function ht(e) {
   return e !== null && typeof e == "object";
@@ -1946,7 +1959,7 @@ function gt(e, r = "INVALID_REQUEST") {
   const t = qo(e, r);
   let s;
   try {
-    s = Qc.call(t);
+    s = Zc.call(t);
   } catch {
     re(r);
   }
@@ -1957,7 +1970,7 @@ function gt(e, r = "INVALID_REQUEST") {
     re("OUT_OF_MEMORY");
   }
   try {
-    Zc.call(a, t);
+    el.call(a, t);
   } catch {
     jo.call(a, 0), re(r);
   }
@@ -1989,7 +2002,7 @@ function rn(e) {
   let r = !1, t = !1;
   return () => (r || (r = !0, t = pn(e())), t);
 }
-function rl(e) {
+function nl(e) {
   if (typeof e != "string") return !1;
   for (let r = 0; r < e.length; r += 1) {
     const t = e.charCodeAt(r);
@@ -2004,8 +2017,8 @@ function rl(e) {
   return !0;
 }
 function Xn(e, r = Ho) {
-  rl(e) || re("INVALID_REQUEST");
-  const t = Jc.encode(e);
+  nl(e) || re("INVALID_REQUEST");
+  const t = Qc.encode(e);
   return t.length > r && re("INVALID_REQUEST"), t;
 }
 function gr(e) {
@@ -2020,10 +2033,10 @@ function gr(e) {
 function Cn(e) {
   return e !== 0 && e !== 1 && re("INVALID_ACCOUNT"), e;
 }
-function nl(e) {
-  if (typeof e != "bigint" || e <= 0n || e > Gc) return !1;
+function il(e) {
+  if (typeof e != "bigint" || e <= 0n || e > Xc) return !1;
   const r = e & 0xffffffffn;
-  return e >> 32n !== 0n && r !== 0n && r <= Yc;
+  return e >> 32n !== 0n && r !== 0n && r <= Gc;
 }
 function Mt(e, r) {
   return typeof e == "string" && e.length === r && /^[0-9a-f]+$/.test(e);
@@ -2031,7 +2044,7 @@ function Mt(e, r) {
 function Jn(e) {
   return typeof e == "string" && /^sha256:[0-9a-f]{64}$/.test(e);
 }
-function il(e, r, t, s) {
+function ol(e, r, t, s) {
   return (!or(e, [
     "purpose",
     "identityScheme",
@@ -2058,7 +2071,7 @@ function il(e, r, t, s) {
     keyId: e.keyId
   });
 }
-function ol(e) {
+function sl(e) {
   (!or(e, [
     "schemaVersion",
     "identityScheme",
@@ -2101,7 +2114,7 @@ function ol(e) {
     derivation: "bip32-scalar-as-ed25519-seed",
     path: `${t}0/0`
   }] : re("CRYPTO_FAILURE"), e.keys.length !== s.length && re("CRYPTO_FAILURE");
-  const a = e.keys.map((d, b) => il(d, e.identityScheme, e.seedProfile, s[b]));
+  const a = e.keys.map((d, b) => ol(d, e.identityScheme, e.seedProfile, s[b]));
   return Object.freeze({
     schemaVersion: 1,
     identityScheme: e.identityScheme,
@@ -2114,16 +2127,16 @@ function ol(e) {
     keys: Object.freeze(a)
   });
 }
-function sl(e) {
+function al(e) {
   let r;
   try {
     r = JSON.parse(zo.decode(e));
   } catch {
     re("CRYPTO_FAILURE");
   }
-  return ol(r);
+  return sl(r);
 }
-function al(e, r) {
+function cl(e, r) {
   if (r === "module-delivery-key")
     return (!or(e, [
       "schemaVersion",
@@ -2167,14 +2180,14 @@ function al(e, r) {
   };
   return r && (d.canonicalEnvelope = e.canonicalEnvelope, d.signedDigestSha256 = e.signedDigestSha256), d.signatureHex = e.signatureHex, Object.freeze(d);
 }
-function cl(e, r) {
+function ll(e, r) {
   let t;
   try {
     t = JSON.parse(zo.decode(e));
   } catch {
     re("CRYPTO_FAILURE");
   }
-  return al(t, r);
+  return cl(t, r);
 }
 function Un(e) {
   let r;
@@ -2237,7 +2250,7 @@ function Fn(e) {
     }
   };
 }
-function ll(e, r) {
+function dl(e, r) {
   try {
     return e.view().getBigUint64(r, !0);
   } catch {
@@ -2251,8 +2264,8 @@ function Mn(e, r) {
     re("CRYPTO_FAILURE");
   }
 }
-function dl(e) {
-  (!ht(e) || typeof e._malloc != "function" || typeof e._free != "function" || Xc.some((w) => typeof e[w] != "function")) && re("CRYPTO_FAILURE");
+function _l(e) {
+  (!ht(e) || typeof e._malloc != "function" || typeof e._free != "function" || Jc.some((w) => typeof e[w] != "function")) && re("CRYPTO_FAILURE");
   const r = /* @__PURE__ */ new WeakMap(), t = /* @__PURE__ */ new Set();
   function s(w) {
     if (!(typeof w != "bigint" || w === 0n)) {
@@ -2299,10 +2312,10 @@ function dl(e) {
       } catch {
         v = !0;
       }
-      B = ll(C, f), v && re("CRYPTO_FAILURE"), g !== 0 && Dn(g), nl(B) || re("CRYPTO_FAILURE");
+      B = dl(C, f), v && re("CRYPTO_FAILURE"), g !== 0 && Dn(g), il(B) || re("CRYPTO_FAILURE");
       const k = Mn(C, h);
       (k <= 0 || k > et) && re("CRYPTO_FAILURE");
-      const R = sl(C.bytes(u, k));
+      const R = al(C.bytes(u, k));
       (R.identityScheme !== L || R.seedProfile !== D || R.accountIndex !== U) && re("CRYPTO_FAILURE"), C.cleanup() && re("CRYPTO_FAILURE"), M() && re("CRYPTO_FAILURE");
       const F = Object.freeze(/* @__PURE__ */ Object.create(null)), V = { nativeValue: B, state: "active" };
       r.set(F, V);
@@ -2330,7 +2343,7 @@ function dl(e) {
       }
       Y !== 0 && Dn(Y);
       const _ = Mn(U, C);
-      return (_ <= 0 || _ > et) && re("CRYPTO_FAILURE"), cl(U.bytes(B, _), D);
+      return (_ <= 0 || _ > et) && re("CRYPTO_FAILURE"), ll(U.bytes(B, _), D);
     } finally {
       U.cleanup() && re("CRYPTO_FAILURE");
     }
@@ -2394,7 +2407,7 @@ function dl(e) {
       let m, N;
       const L = rn(() => [N, m]);
       try {
-        ht(w) && (m = w.mnemonicUtf8), yr(w, ["mnemonicUtf8", "accountIndex"]), N = tr(m, "INVALID_MNEMONIC"), N.length > qc && re("INVALID_MNEMONIC");
+        ht(w) && (m = w.mnemonicUtf8), yr(w, ["mnemonicUtf8", "accountIndex"]), N = tr(m, "INVALID_MNEMONIC"), N.length > Kc && re("INVALID_MNEMONIC");
         const D = Cn(w.accountIndex);
         return E(
           "_hd_sdn_import_legacy_mnemonic_identity",
@@ -2422,7 +2435,7 @@ function dl(e) {
           "canonicalAad"
         ]);
         const D = gt(w.ciphertextAndTag), U = gt(w.hkdfSalt), M = gt(w.nonce), C = gt(w.canonicalUsernameUtf8, "INVALID_USERNAME"), B = Xn(w.canonicalAad, Yi);
-        return N = tr(m, "INVALID_REQUEST"), (N.length !== 32 || U.length !== 32 || M.length !== 12 || D.length < Kc || D.length > Xi || C.length > tn) && re("INVALID_REQUEST"), E(
+        return N = tr(m, "INVALID_REQUEST"), (N.length !== 32 || U.length !== 32 || M.length !== 12 || D.length < Yc || D.length > Xi || C.length > tn) && re("INVALID_REQUEST"), E(
           "_hd_sdn_import_remembered_identity",
           (Y) => [
             Y[0],
@@ -2654,7 +2667,7 @@ function dl(e) {
   });
 }
 const Ko = /* @__PURE__ */ new WeakMap();
-function _l(e) {
+function hl(e) {
   const r = e.sdn, s = e.utils.sha256;
   return Object.freeze({
     sdn: r,
@@ -2663,8 +2676,8 @@ function _l(e) {
     }
   });
 }
-function hl(e) {
-  const r = _l(e);
+function ul(e) {
+  const r = hl(e);
   Object.defineProperty(e, "walletOriginCapabilities", {
     value: r,
     enumerable: !1,
@@ -2702,14 +2715,14 @@ const ot = Object.freeze({
   ITALIAN: 7,
   CZECH: 8,
   PORTUGUESE: 9
-}), ul = Object.freeze({
+}), fl = Object.freeze({
   RANDOM: 0,
   FILESYSTEM: 1,
   NETWORK: 2,
   USB_HID: 3,
   CLOCK: 4,
   ENVIRONMENT: 5
-}), fl = Object.freeze({
+}), pl = Object.freeze({
   NONE: 0,
   NEEDS_ENTROPY: 1,
   NEEDS_BRIDGE: 2,
@@ -2764,7 +2777,7 @@ const ot = Object.freeze({
   BRIDGE_FAILED: 701,
   NEEDS_BRIDGE: 702,
   FIPS_NOT_ALLOWED: 800
-}), pl = {
+}), yl = {
   [W.OK]: "Success",
   [W.UNKNOWN]: "Unknown error",
   [W.INVALID_ARGUMENT]: "Invalid argument",
@@ -2807,7 +2820,7 @@ class $ extends Error {
    */
   constructor(r, t) {
     const s = r < 0 ? -r : r;
-    super(t || pl[s] || `Error code: ${r}`), this.name = "HDWalletError", this.code = s;
+    super(t || yl[s] || `Error code: ${r}`), this.name = "HDWalletError", this.code = s;
   }
 }
 function te(e) {
@@ -2824,9 +2837,9 @@ function j(e, r, t = W.NOT_SUPPORTED, s) {
     throw new $(t, s || `Function ${r} is not available in this build`);
   return a;
 }
-const Go = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz", yl = Object.freeze(Object.fromEntries(
+const Go = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz", gl = Object.freeze(Object.fromEntries(
   Array.from(Go).map((e, r) => [e, r])
-)), Xo = "qpzry9x8gf2tvdw0s3jn54khce6mua7l", gl = Object.freeze(Object.fromEntries(
+)), Xo = "qpzry9x8gf2tvdw0s3jn54khce6mua7l", vl = Object.freeze(Object.fromEntries(
   Array.from(Xo).map((e, r) => [e, r])
 ));
 function Qi(e) {
@@ -2850,7 +2863,7 @@ function Zi(e) {
   for (; r < e.length && e[r] === "1"; ) r++;
   const t = Math.floor((e.length - r) * 733 / 1e3) + 1, s = new Uint8Array(t);
   for (let b = r; b < e.length; b++) {
-    const E = yl[e[b]];
+    const E = gl[e[b]];
     if (E === void 0)
       throw new $(W.INVALID_ARGUMENT, `Invalid Base58 character: ${e[b]}`);
     let I = E;
@@ -2896,20 +2909,20 @@ function to(e) {
     throw new $(W.INVALID_ARGUMENT, "Invalid base64 string");
   }
 }
-const Jo = new TextEncoder(), vl = new TextDecoder();
-function bl(e, r) {
+const Jo = new TextEncoder(), bl = new TextDecoder();
+function El(e, r) {
   let t = `${e}1`;
   for (let s = 0; s < r.length; s++)
     t += Xo[r[s] & 31];
   return t;
 }
-function El(e) {
+function Al(e) {
   const r = e.lastIndexOf("1");
   if (r <= 0)
     throw new $(W.INVALID_ARGUMENT, "Invalid bech32 string");
   const t = e.slice(0, r), s = e.slice(r + 1), a = new Uint8Array(s.length);
   for (let d = 0; d < s.length; d++) {
-    const b = gl[s[d].toLowerCase()];
+    const b = vl[s[d].toLowerCase()];
     if (b === void 0)
       throw new $(W.INVALID_ARGUMENT, `Invalid bech32 character: ${s[d]}`);
     a[d] = b;
@@ -3009,7 +3022,7 @@ function bt(e, r = "data") {
     return new Uint8Array(e.slice(0));
   throw new $(W.INVALID_ARGUMENT, `${r} must be binary data`);
 }
-function Al(e) {
+function ml(e) {
   switch (e) {
     case ot.SECP256K1:
       return "secp256k1";
@@ -3025,7 +3038,7 @@ function Al(e) {
       throw new $(W.INVALID_ARGUMENT, `Unsupported curve: ${e}`);
   }
 }
-function ml(e) {
+function Il(e) {
   return String(e).replace(/\\/g, "\\\\").replace(/,/g, "\\,");
 }
 function Kt(e, r) {
@@ -3038,13 +3051,13 @@ function Kt(e, r) {
 function Er(e, r, t = "certificate") {
   return Kt(r, "encoding"), r === Yt.PEM && typeof e == "string" ? Jo.encode(e) : bt(e, t);
 }
-function Il(e, r) {
+function wl(e, r) {
   return typeof e == "string" ? Jo.encode(e) : bt(e, r);
 }
 function Vn(e, r) {
-  return r === Yt.PEM ? vl.decode(e) : e;
+  return r === Yt.PEM ? bl.decode(e) : e;
 }
-function wl(e) {
+function Sl(e) {
   return {
     subjectDn: e.subject_dn ?? "",
     issuerDn: e.issuer_dn ?? "",
@@ -3060,7 +3073,7 @@ function wl(e) {
     walletAttestationValid: e.wallet_attestation_valid === !0
   };
 }
-function Sl(e) {
+function kl(e) {
   return {
     certificatePem: e.certificate_pem ?? "",
     privateKeyPem: e.private_key_pem ?? "",
@@ -3073,11 +3086,11 @@ function ro(e) {
   const r = [], t = (a, d) => {
     d == null || d === "" || r.push(`${a}=${d}`);
   }, s = (a, d) => {
-    !Array.isArray(d) || d.length === 0 || r.push(`${a}=${d.map(ml).join(",")}`);
+    !Array.isArray(d) || d.length === 0 || r.push(`${a}=${d.map(Il).join(",")}`);
   };
   if (t("subject_dn", e.subjectDn), t("serial_hex", e.serialHex), t("not_before_unix", e.notBeforeUnix), t("not_after_unix", e.notAfterUnix), e.isCa !== void 0 && t("is_ca", e.isCa ? "true" : "false"), e.pathLen !== void 0 && e.pathLen !== null && t("path_len", e.pathLen), s("dns", e.dnsNames), s("ips", e.ipAddresses), s("emails", e.emailAddresses), s("uris", e.uriNames), s("key_usage", e.keyUsage), s("extended_key_usage", e.extendedKeyUsage), t("friendly_name", e.friendlyName), e.walletAttestation) {
     const a = e.walletAttestation;
-    t("wallet_curve", Al(a.curve)), t("wallet_private_key_hex", kr(bt(a.privateKey, "walletAttestation.privateKey"))), t("wallet_key_label", a.keyLabel), t("wallet_comment_prefix", a.commentPrefix);
+    t("wallet_curve", ml(a.curve)), t("wallet_private_key_hex", kr(bt(a.privateKey, "walletAttestation.privateKey"))), t("wallet_key_label", a.keyLabel), t("wallet_comment_prefix", a.commentPrefix);
   }
   return r.join(`
 `);
@@ -3361,13 +3374,13 @@ try {
   }));
 } catch {
 }
-async function kl() {
-  const r = (await Promise.resolve().then(() => Th))?.default;
+async function Ol() {
+  const r = (await Promise.resolve().then(() => xh))?.default;
   if (typeof r != "function") throw new Error("Wallet WASM loader is invalid");
   const t = new URL(Ic, import.meta.url).href, s = await fetch(t, {
     cache: "no-store",
     credentials: "omit",
-    integrity: "sha384-S7mabenUxWMUuMu917SX7uNwhrSYWakTGqp4OU+SIF5miqVT6ArrFpZHvsXc52sC",
+    integrity: "sha384-ZAn/mcoWpv7gIG0tIB9YR5H6anhvoM3ioplvzjCRHfP8nMB7VXjsPlt9/J/pnFeI",
     mode: "same-origin",
     redirect: "error",
     referrerPolicy: "no-referrer"
@@ -3405,7 +3418,7 @@ async function kl() {
     I.set(w, P), P += w.byteLength;
   return r({ wasmBinary: I });
 }
-function Ol(e) {
+function Pl(e) {
   const r = {
     /**
      * Generate a random mnemonic phrase
@@ -3715,10 +3728,13 @@ function Ol(e) {
      */
     secp256k1: {
       /**
-       * Sign message with secp256k1
-       * @param {Uint8Array} message - Message to sign (typically 32-byte hash)
+       * Sign a message with secp256k1 ECDSA. Hashes the message with SHA-256
+       * internally and signs that hash (RFC 6979, low-S): pass the message, never
+       * a hash of it, or the signature covers SHA-256(SHA-256(message)) and no
+       * standard verifier accepts it.
+       * @param {Uint8Array} message - Message bytes (hashed once with SHA-256 here)
        * @param {Uint8Array} privateKey - 32-byte private key
-       * @returns {Uint8Array} Signature
+       * @returns {Uint8Array} 64-byte compact signature r||s
        */
       sign(_, f) {
         const h = T(e, _), u = T(e, f), g = e._hd_alloc(72);
@@ -3731,10 +3747,12 @@ function Ol(e) {
         }
       },
       /**
-       * Sign message with recovery ID
-       * @param {Uint8Array} message - Message to sign
-       * @param {Uint8Array} privateKey - Private key
-       * @returns {Object} { signature: Uint8Array, recoveryId: number }
+       * Sign a 32-byte hash with recovery ID. Unlike sign(), the input is NOT
+       * hashed: pass the protocol digest you computed (e.g. Keccak-256 for
+       * Ethereum, the Bitcoin signed-message hash).
+       * @param {Uint8Array} message - 32-byte hash, signed as given
+       * @param {Uint8Array} privateKey - 32-byte private key
+       * @returns {Object} { signature: Uint8Array (64-byte r||s), recoveryId: number }
        */
       signRecoverable(_, f) {
         const h = j(e, "_hd_secp256k1_sign_recoverable"), u = T(e, _), g = T(e, f), v = e._hd_alloc(65);
@@ -3748,10 +3766,11 @@ function Ol(e) {
         }
       },
       /**
-       * Verify secp256k1 signature
-       * @param {Uint8Array} message - Original message
-       * @param {Uint8Array} signature - Signature to verify
-       * @param {Uint8Array} publicKey - Public key
+       * Verify a secp256k1 ECDSA signature over SHA-256(message). Hashes the
+       * message with SHA-256 internally: pass the message, not a hash of it.
+       * @param {Uint8Array} message - Original message bytes (hashed once with SHA-256 here)
+       * @param {Uint8Array} signature - 64-byte compact r||s or DER signature
+       * @param {Uint8Array} publicKey - 33- or 65-byte public key
        * @returns {boolean} True if valid
        */
       verify(_, f, h) {
@@ -3763,11 +3782,12 @@ function Ol(e) {
         }
       },
       /**
-       * Recover public key from signature
-       * @param {Uint8Array} message - Original message
-       * @param {Uint8Array} signature - Signature
+       * Recover the public key from a recoverable signature. Like
+       * signRecoverable(), the input is the 32-byte hash, used as given.
+       * @param {Uint8Array} message - 32-byte hash that was signed
+       * @param {Uint8Array} signature - 64-byte r||s
        * @param {number} recoveryId - Recovery ID (0-3)
-       * @returns {Uint8Array} Recovered public key
+       * @returns {Uint8Array} Recovered 33-byte compressed public key
        */
       recover(_, f, h) {
         const u = j(e, "_hd_secp256k1_recover"), g = T(e, _), v = new Uint8Array(65);
@@ -3853,6 +3873,13 @@ function Ol(e) {
      * P-256 (secp256r1) ECDSA operations
      */
     p256: {
+      /**
+       * Sign a message with P-256 ECDSA. Hashes the message with SHA-256
+       * internally: pass the message, never a hash of it.
+       * @param {Uint8Array} message - Message bytes (hashed once with SHA-256 here)
+       * @param {Uint8Array} privateKey - 32-byte private key
+       * @returns {Uint8Array} 64-byte compact signature r||s
+       */
       sign(_, f) {
         const h = T(e, _), u = T(e, f), g = e._hd_alloc(72);
         try {
@@ -3863,6 +3890,13 @@ function Ol(e) {
           e._hd_secure_wipe(u, 32), e._hd_dealloc(h), e._hd_dealloc(u), e._hd_dealloc(g);
         }
       },
+      /**
+       * Verify a P-256 ECDSA signature over SHA-256(message).
+       * @param {Uint8Array} message - Original message bytes (hashed once with SHA-256 here)
+       * @param {Uint8Array} signature - 64-byte compact signature r||s
+       * @param {Uint8Array} publicKey - 33- or 65-byte public key
+       * @returns {boolean} True if valid
+       */
       verify(_, f, h) {
         const u = j(e, "_hd_p256_verify"), g = T(e, _), v = T(e, f), k = T(e, h);
         try {
@@ -3886,6 +3920,13 @@ function Ol(e) {
      * P-384 (secp384r1) ECDSA operations
      */
     p384: {
+      /**
+       * Sign a message with P-384 ECDSA. Hashes the message with SHA-384
+       * internally: pass the message, never a hash of it.
+       * @param {Uint8Array} message - Message bytes (hashed once with SHA-384 here)
+       * @param {Uint8Array} privateKey - 48-byte private key
+       * @returns {Uint8Array} 96-byte compact signature r||s
+       */
       sign(_, f) {
         const h = T(e, _), u = T(e, f), g = e._hd_alloc(104);
         try {
@@ -3896,6 +3937,13 @@ function Ol(e) {
           e._hd_secure_wipe(u, 48), e._hd_dealloc(h), e._hd_dealloc(u), e._hd_dealloc(g);
         }
       },
+      /**
+       * Verify a P-384 ECDSA signature over SHA-384(message).
+       * @param {Uint8Array} message - Original message bytes (hashed once with SHA-384 here)
+       * @param {Uint8Array} signature - 96-byte compact signature r||s
+       * @param {Uint8Array} publicKey - 49- or 97-byte public key
+       * @returns {boolean} True if valid
+       */
       verify(_, f, h) {
         const u = j(e, "_hd_p384_verify"), g = T(e, _), v = T(e, f), k = T(e, h);
         try {
@@ -4753,7 +4801,7 @@ function Ol(e) {
      */
     isAvailable() {
       const _ = He(e, "_hd_wasi_has_feature");
-      return _ ? _(ul.USB_HID) !== 0 : !1;
+      return _ ? _(fl.USB_HID) !== 0 : !1;
     },
     /**
      * Enumerate connected hardware wallets
@@ -5171,7 +5219,7 @@ function Ol(e) {
     encodeBech32(_, f) {
       const h = He(e, "_hd_encode_bech32");
       if (!h)
-        return bl(_, f);
+        return El(_, f);
       const u = le(e, _), g = T(e, f);
       try {
         const v = h(u, g, f.length);
@@ -5183,7 +5231,7 @@ function Ol(e) {
     decodeBech32(_) {
       const f = He(e, "_hd_decode_bech32");
       if (!f)
-        return El(_);
+        return Al(_);
       const h = le(e, _), u = e._hd_alloc(128), g = e._hd_alloc(256), v = e._hd_alloc(4);
       try {
         e.setValue(v, 256, "i32");
@@ -5327,7 +5375,7 @@ function Ol(e) {
       Kt(f, "inputEncoding");
       const h = j(e, "_hd_x509_parse_certificate_json"), u = Er(_, f), g = T(e, u);
       try {
-        return wl(JSON.parse(
+        return Sl(JSON.parse(
           Bn(
             e,
             (v, k) => h(g, u.length, f, v, k)
@@ -5351,7 +5399,7 @@ function Ol(e) {
     },
     exportPkcs12(_, f, h, u, g, v = "", k = "") {
       Kt(f, "certificateEncoding");
-      const R = j(e, "_hd_x509_export_pkcs12"), F = Er(_, f), V = T(e, F), Z = bt(u, "privateKey"), ee = T(e, Z), ae = le(e, g), oe = e.lengthBytesUTF8(g) + 1, pe = le(e, v), ce = Il(k, "chainPem"), Q = ce.length > 0 ? T(e, ce) : 0;
+      const R = j(e, "_hd_x509_export_pkcs12"), F = Er(_, f), V = T(e, F), Z = bt(u, "privateKey"), ee = T(e, Z), ae = le(e, g), oe = e.lengthBytesUTF8(g) + 1, pe = le(e, v), ce = wl(k, "chainPem"), Q = ce.length > 0 ? T(e, ce) : 0;
       try {
         return rr(
           e,
@@ -5378,7 +5426,7 @@ function Ol(e) {
     importPkcs12(_, f) {
       const h = j(e, "_hd_x509_import_pkcs12_json"), u = bt(_, "pkcs12Bundle"), g = T(e, u), v = le(e, f), k = e.lengthBytesUTF8(f) + 1;
       try {
-        return Sl(JSON.parse(
+        return kl(JSON.parse(
           Bn(
             e,
             (R, F) => h(g, u.length, v, R, F),
@@ -5430,7 +5478,7 @@ function Ol(e) {
     },
     wasiGetWarning(_) {
       const f = He(e, "_hd_wasi_get_warning");
-      return f ? f(_) : fl.NOT_AVAILABLE_WASI;
+      return f ? f(_) : pl.NOT_AVAILABLE_WASI;
     },
     wasiGetWarningMessage(_) {
       return "WASI warning API unavailable in this build";
@@ -5641,8 +5689,8 @@ function Ol(e) {
     // Key derivation helpers (convenience wrappers)
     buildSigningPath: Zo,
     buildEncryptionPath: es,
-    getSigningKey: Pl,
-    getEncryptionKey: Rl,
+    getSigningKey: Rl,
+    getEncryptionKey: Nl,
     // Aligned binary API for efficient batch operations
     get aligned() {
       if (!this._aligned) {
@@ -5655,11 +5703,11 @@ function Ol(e) {
     }
   };
   return Object.defineProperty(Y, "sdn", {
-    value: dl(e),
+    value: _l(e),
     enumerable: !0,
     writable: !1,
     configurable: !1
-  }), hl(Y), Y.plugin = Vo({ wallet: Y, wasm: e }), Y;
+  }), ul(Y), Y.plugin = Vo({ wallet: Y, wasm: e }), Y;
 }
 function Zo(e, r = "0", t = "0") {
   return `m/44'/${e}'/${r}'/0/${t}`;
@@ -5667,7 +5715,7 @@ function Zo(e, r = "0", t = "0") {
 function es(e, r = "0", t = "0") {
   return `m/44'/${e}'/${r}'/1/${t}`;
 }
-function Pl(e, r, t = "0", s = "0") {
+function Rl(e, r, t = "0", s = "0") {
   const a = Zo(r, t, s), d = e.derivePath(a);
   try {
     return {
@@ -5679,7 +5727,7 @@ function Pl(e, r, t = "0", s = "0") {
     d.wipe();
   }
 }
-function Rl(e, r, t = "0", s = "0") {
+function Nl(e, r, t = "0", s = "0") {
   const a = es(r, t, s), d = e.derivePath(a);
   try {
     return {
@@ -5691,23 +5739,23 @@ function Rl(e, r, t = "0", s = "0") {
     d.wipe();
   }
 }
-async function Nl() {
-  const e = await kl();
-  return Ol(e);
+async function Ll() {
+  const e = await Ol();
+  return Pl(e);
 }
-const Ll = Object.freeze({
+const Tl = Object.freeze({
   cm: 0.01,
   km: 1e3,
   m: 1,
   mm: 1e-3
-}), Tl = Object.freeze({
-  metersPerSourceUnit: Ll,
+}), xl = Object.freeze({
+  metersPerSourceUnit: Tl,
   quaternionNormTolerance: 1e-6,
   scaleComponentExclusiveMin: 0,
   scaleComponentInclusiveMax: 1e6,
   translationComponentAbsMax: 1e6,
   upAxes: Object.freeze(["X_UP", "Y_UP", "Z_UP"])
-}), xl = Object.freeze({ reviewedTransform: Tl, schemaVersion: 1 }), Lt = new TextEncoder(), ts = Object.getPrototypeOf(Uint8Array.prototype), Dl = Object.getOwnPropertyDescriptor(ts, "buffer").get, Cl = Object.getOwnPropertyDescriptor(ts, "length").get, Ul = Object.getOwnPropertyDescriptor(ArrayBuffer.prototype, "byteLength").get, no = typeof SharedArrayBuffer > "u" ? null : Object.getOwnPropertyDescriptor(SharedArrayBuffer.prototype, "byteLength").get, At = "sdn-bip32-slip10-purpose-v1", gn = "password-scrypt-v2", Xt = "ed25519-over-sha256-jcs-v1", io = "ed25519-raw-32-v1", Fl = "ed25519-sdn-signed-request-v2", oo = ["protocolVersion", "providerOrigin", "method", "requestUri", "bodySha256", "bodyBytes", "schema", "entityId", "entityName", "documentCount"], so = ["schemaVersion", "keyId", "identityScheme", "algorithm", "encoding", "signatureProfile", "publicKeyHex", "signatureHex", "requestDigestSha256", "challengeId", "challengeBase64url"], rs = "https://review.spacedatanetwork.org", ns = "sdn-asset-review-v1", Ml = "asset-review:assets.ipfs.01", Bl = "asset-review-authority:assets.ipfs.01", Qn = "sdn-login:sdn.spaceaware.io", Vl = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/u, Je = /^[0-9a-f]{64}$/u, fi = /^[0-9a-f]{128}$/u, Qt = /^sha256:[0-9a-f]{64}$/u, Hl = /^[1-9A-HJ-NP-Za-km-z]+$/u, zl = /^b[a-z2-7]{58}$/u, Zn = "abcdefghijklmnopqrstuvwxyz234567", is = 131072, $l = [
+}), Dl = Object.freeze({ reviewedTransform: xl, schemaVersion: 1 }), Lt = new TextEncoder(), ts = Object.getPrototypeOf(Uint8Array.prototype), Cl = Object.getOwnPropertyDescriptor(ts, "buffer").get, Ul = Object.getOwnPropertyDescriptor(ts, "length").get, Fl = Object.getOwnPropertyDescriptor(ArrayBuffer.prototype, "byteLength").get, no = typeof SharedArrayBuffer > "u" ? null : Object.getOwnPropertyDescriptor(SharedArrayBuffer.prototype, "byteLength").get, At = "sdn-bip32-slip10-purpose-v1", gn = "password-scrypt-v2", Xt = "ed25519-over-sha256-jcs-v1", io = "ed25519-raw-32-v1", Ml = "ed25519-sdn-signed-request-v2", oo = ["protocolVersion", "providerOrigin", "method", "requestUri", "bodySha256", "bodyBytes", "schema", "entityId", "entityName", "documentCount"], so = ["schemaVersion", "keyId", "identityScheme", "algorithm", "encoding", "signatureProfile", "publicKeyHex", "signatureHex", "requestDigestSha256", "challengeId", "challengeBase64url"], rs = "https://review.spacedatanetwork.org", ns = "sdn-asset-review-v1", Bl = "asset-review:assets.ipfs.01", Vl = "asset-review-authority:assets.ipfs.01", Qn = "sdn-login:sdn.spaceaware.io", Hl = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/u, Je = /^[0-9a-f]{64}$/u, fi = /^[0-9a-f]{128}$/u, Qt = /^sha256:[0-9a-f]{64}$/u, zl = /^[1-9A-HJ-NP-Za-km-z]+$/u, $l = /^b[a-z2-7]{58}$/u, Zn = "abcdefghijklmnopqrstuvwxyz234567", is = 131072, Wl = [
   "accountFingerprint",
   "accountIndex",
   "accountLabel",
@@ -5717,7 +5765,7 @@ const Ll = Object.freeze({
   "keys",
   "schemaVersion",
   "seedProfile"
-], Wl = [
+], jl = [
   "bip32Fingerprint",
   "curve",
   "derivation",
@@ -5729,12 +5777,12 @@ const Ll = Object.freeze({
   "purpose",
   "seedProfile",
   "signatureProfile"
-], jl = [
+], ql = [
   "connectionExpiresAt",
   "event",
   "identity",
   "schemaVersion"
-], ql = [
+], Kl = [
   "algorithm",
   "encoding",
   "identityScheme",
@@ -5742,7 +5790,7 @@ const Ll = Object.freeze({
   "schemaVersion",
   "signatureHex",
   "signatureProfile"
-], Kl = [
+], Yl = [
   "algorithm",
   "canonicalEnvelope",
   "encoding",
@@ -5782,7 +5830,7 @@ const Ll = Object.freeze({
   "previousDecisionHead",
   "protocolVersion",
   "requestOrigin"
-], Yl = [
+], Gl = [
   "metersPerSourceUnit",
   "rotation",
   "scale",
@@ -5879,7 +5927,7 @@ function os(e) {
 function ss(e) {
   return typeof e == "string" ? os(e) : e;
 }
-function Gl(e, r) {
+function Xl(e, r) {
   if (e.byteLength !== r.byteLength) return !1;
   let t = 0;
   for (let s = 0; s < e.byteLength; s += 1) t |= e[s] ^ r[s];
@@ -5889,7 +5937,7 @@ function qe(e, r, t) {
   const s = ss(e);
   Pn(s) || K(`${t} must be a JSON object`), Object.getOwnPropertySymbols(s).length !== 0 && K(`${t} has an unknown symbol field`);
   const a = Object.getOwnPropertyNames(s).sort(), d = [...r].sort(), b = Lt.encode(a.join("\0")), E = Lt.encode(d.join("\0"));
-  Gl(b, E) || K(`${t} has missing or unknown fields`);
+  Xl(b, E) || K(`${t} has missing or unknown fields`);
   for (const I of a) {
     const P = Object.getOwnPropertyDescriptor(s, I);
     (!P || !P.enumerable || !("value" in P)) && K(`${t}.${I} must be an enumerable data field`), P.value === void 0 && K(`${t}.${I} must not be undefined`);
@@ -5913,7 +5961,7 @@ function pi(e, r, t) {
     (!b || !b.enumerable || !("value" in b) || b.value === void 0) && K(`${t} must contain enumerable data values`);
   }
 }
-function Xl(e) {
+function Jl(e) {
   const r = qe(
     e,
     ["reviewedTransform", "schemaVersion"],
@@ -5950,7 +5998,7 @@ function Xl(e) {
     ["upAxes", Object.freeze(Array.from({ length: 3 }, (a, d) => t.upAxes[d]))]
   ]);
 }
-const qt = Xl(xl);
+const qt = Jl(Dl);
 function de(e, r, t) {
   return e !== r && K(`${t} must equal ${JSON.stringify(r)}`), e;
 }
@@ -5961,17 +6009,17 @@ function Be(e, r, t) {
   return tt(e, t), r.test(e) || K(`${t} has an invalid encoding`), e;
 }
 function Tt(e, r) {
-  return tt(e, r), (!Vl.test(e) || new Date(e).toISOString() !== e) && K(`${r} must be exact RFC3339 milliseconds UTC`), e;
+  return tt(e, r), (!Hl.test(e) || new Date(e).toISOString() !== e) && K(`${r} must be exact RFC3339 milliseconds UTC`), e;
 }
 function Rn(e, r) {
   const t = Date.parse(e), s = Date.parse(r);
   s > t && s - t <= 3e5 || K("request lifetime must be in (0, 300] seconds");
 }
-function Jl(e, r) {
-  (!ArrayBuffer.isView(e) || !(e instanceof Uint8Array) || Object.getPrototypeOf(e) !== Uint8Array.prototype) && K(`${r} must be a plain Uint8Array`), Cl.call(e) !== 32 && K(`${r} must be exactly 32 bytes`);
+function Ql(e, r) {
+  (!ArrayBuffer.isView(e) || !(e instanceof Uint8Array) || Object.getPrototypeOf(e) !== Uint8Array.prototype) && K(`${r} must be a plain Uint8Array`), Ul.call(e) !== 32 && K(`${r} must be exactly 32 bytes`);
   const s = Array.from({ length: 32 }, (w, m) => String(m)), a = Reflect.ownKeys(e);
   (a.length !== s.length || a.some((w, m) => w !== s[m])) && K(`${r} Uint8Array must contain only 32 indexed bytes`);
-  const d = Dl.call(e);
+  const d = Cl.call(e);
   let b = !1;
   if (no)
     try {
@@ -5981,7 +6029,7 @@ function Jl(e, r) {
     }
   b && K(`${r} must not use SharedArrayBuffer storage`);
   try {
-    Ul.call(d);
+    Fl.call(d);
   } catch {
     K(`${r} must use ArrayBuffer storage`);
   }
@@ -6004,17 +6052,17 @@ function yi(e, r) {
     K(`${r} must be valid base64url`);
   }
   const s = Uint8Array.from(t, (a) => a.charCodeAt(0));
-  return (s.byteLength !== 32 || Jl(s, r) !== e) && K(`${r} must canonically encode exactly 32 bytes`), e;
+  return (s.byteLength !== 32 || Ql(s, r) !== e) && K(`${r} must canonically encode exactly 32 bytes`), e;
 }
-function Ql(e) {
+function Zl(e) {
   let r = 0, t = 0, s = "";
   for (const a of e)
     for (r = r << 8 | a, t += 8; t >= 5; )
       t -= 5, s += Zn[r >>> t & 31], r &= (1 << t) - 1;
   return t !== 0 && (s += Zn[r << 5 - t & 31]), s;
 }
-function Zl(e, r) {
-  tt(e, "modelCid"), zl.test(e) || K("modelCid must be canonical CIDv1 raw sha2-256 base32");
+function ed(e, r) {
+  tt(e, "modelCid"), $l.test(e) || K("modelCid must be canonical CIDv1 raw sha2-256 base32");
   let t = 0, s = 0;
   const a = [];
   for (const E of e.slice(1)) {
@@ -6023,7 +6071,7 @@ function Zl(e, r) {
   }
   (s !== 0 && t !== 0 || a.length !== 36) && K("modelCid has noncanonical base32 tail bits or length");
   const d = Uint8Array.from(a);
-  (d[0] !== 1 || d[1] !== 85 || d[2] !== 18 || d[3] !== 32) && K("modelCid must encode CIDv1 raw sha2-256 with a 32-byte digest"), `b${Ql(d)}` !== e && K("modelCid base32 is not canonical");
+  (d[0] !== 1 || d[1] !== 85 || d[2] !== 18 || d[3] !== 32) && K("modelCid must encode CIDv1 raw sha2-256 with a 32-byte digest"), `b${Zl(d)}` !== e && K("modelCid base32 is not canonical");
   let b = 0;
   for (let E = 0; E < 32; E += 1) {
     const I = Number.parseInt(r.slice(E * 2, E * 2 + 2), 16);
@@ -6038,7 +6086,7 @@ function gi(e, r) {
   for (const t of ["identityScheme", "keyId", "signatureProfile"])
     e[t] !== r[t] && K(`canonicalEnvelope ${t} must match the signature result`);
 }
-function ed(e, r) {
+function td(e, r) {
   const s = qe(e, [
     "audience",
     "challengeSha256",
@@ -6055,7 +6103,7 @@ function ed(e, r) {
   ], "SDN login canonicalEnvelope");
   gi(s, r), de(s.audience, Qn, "SDN login envelope audience"), Be(s.challengeSha256, Je, "SDN login envelope challengeSha256"), de(s.clientId, "sdn-node-console-v1", "SDN login envelope clientId"), Tt(s.issuedAt, "SDN login envelope issuedAt"), Tt(s.expiresAt, "SDN login envelope expiresAt"), Rn(s.issuedAt, s.expiresAt), de(s.identityScheme, At, "SDN login envelope identityScheme"), Be(s.keyId, Qt, "SDN login envelope keyId"), de(s.kind, "sdn-login", "SDN login envelope kind"), Be(s.nonce, Je, "SDN login envelope nonce"), de(s.protocolVersion, 2, "SDN login envelope protocolVersion"), de(s.requestOrigin, "https://sdn.spaceaware.io", "SDN login envelope requestOrigin"), de(s.signatureProfile, Xt, "SDN login envelope signatureProfile");
 }
-function td(e, r) {
+function rd(e, r) {
   const t = qe(
     e,
     [...vn, "kind"],
@@ -6063,7 +6111,7 @@ function td(e, r) {
   );
   gi(t, r), de(t.kind, "asset-review-authority-activation", "activation envelope kind"), cs(Object.fromEntries(vn.map((s) => [s, t[s]])));
 }
-function rd(e, r) {
+function nd(e, r) {
   const t = e?.decision === "approve" ? ["note", "reviewedTransform"] : e?.decision === "disapprove" ? ["reason"] : [], s = [...ei, ...t], a = qe(e, [
     ...s,
     "identityScheme",
@@ -6074,13 +6122,13 @@ function rd(e, r) {
   ], "asset review decision canonicalEnvelope");
   gi(a, r), de(a.identityScheme, At, "decision envelope identityScheme"), Be(a.keyId, Qt, "decision envelope keyId"), de(a.kind, "asset-review-attestation", "decision envelope kind"), de(a.purpose, "asset-review-approval", "decision envelope purpose"), de(a.signatureProfile, Xt, "decision envelope signatureProfile"), ls(Object.fromEntries(s.map((d) => [d, a[d]])));
 }
-function nd(e, r, t) {
+function id(e, r, t) {
   tt(e, "canonicalEnvelope"), Lt.encode(e).byteLength > is && K("canonicalEnvelope is too large");
   const s = os(e);
-  return (!Pn(s) || s.kind !== r) && K("canonicalEnvelope kind does not match the operation"), ti(s) !== e && K("canonicalEnvelope must be exact JCS"), r === "sdn-login" ? ed(s, t) : r === "asset-review-authority-activation" ? td(s, t) : r === "asset-review-attestation" ? rd(s, t) : K("canonicalEnvelope operation is not registered"), e;
+  return (!Pn(s) || s.kind !== r) && K("canonicalEnvelope kind does not match the operation"), ti(s) !== e && K("canonicalEnvelope must be exact JCS"), r === "sdn-login" ? td(s, t) : r === "asset-review-authority-activation" ? rd(s, t) : r === "asset-review-attestation" ? nd(s, t) : K("canonicalEnvelope operation is not registered"), e;
 }
-function id(e, r) {
-  const t = qe(e, Wl, `identity key ${r.purpose}`);
+function od(e, r) {
+  const t = qe(e, jl, `identity key ${r.purpose}`);
   return de(t.purpose, r.purpose, "key purpose"), de(t.identityScheme, At, "key identityScheme"), de(t.seedProfile, gn, "key seedProfile"), de(t.signatureProfile, r.signatureProfile, "key signatureProfile"), de(t.curve, r.curve, "key curve"), de(t.derivation, "slip10", "key derivation"), de(t.path, r.path, "key path"), de(t.encoding, "raw", "key encoding"), Be(t.publicKeyHex, Je, "key publicKeyHex"), de(t.bip32Fingerprint, null, "key bip32Fingerprint"), Be(t.keyId, Qt, "key keyId"), rt([
     ["bip32Fingerprint", null],
     ["curve", t.curve],
@@ -6095,9 +6143,9 @@ function id(e, r) {
     ["signatureProfile", t.signatureProfile]
   ]);
 }
-function od(e) {
-  const r = qe(e, $l, "WalletPublicIdentity");
-  de(r.schemaVersion, 1, "identity schemaVersion"), de(r.identityScheme, At, "identity identityScheme"), de(r.seedProfile, gn, "identity seedProfile"), r.accountIndex !== 0 && K("public wallet identity must use account 0"), de(r.accountLabel, null, "identity accountLabel"), tt(r.accountXpub, "identity accountXpub"), /^xpub[1-9A-HJ-NP-Za-km-z]{107}$/u.test(r.accountXpub) || K("identity accountXpub is invalid"), tt(r.accountPeerId, "identity accountPeerId"), (!r.accountPeerId.startsWith("16Uiu2H") || r.accountPeerId.length < 40 || r.accountPeerId.length > 64 || !Hl.test(r.accountPeerId)) && K("identity accountPeerId is invalid"), Be(r.accountFingerprint, /^[0-9a-f]{8}$/u, "identity accountFingerprint"), pi(r.keys, 3, "public identity keys array");
+function sd(e) {
+  const r = qe(e, Wl, "WalletPublicIdentity");
+  de(r.schemaVersion, 1, "identity schemaVersion"), de(r.identityScheme, At, "identity identityScheme"), de(r.seedProfile, gn, "identity seedProfile"), r.accountIndex !== 0 && K("public wallet identity must use account 0"), de(r.accountLabel, null, "identity accountLabel"), tt(r.accountXpub, "identity accountXpub"), /^xpub[1-9A-HJ-NP-Za-km-z]{107}$/u.test(r.accountXpub) || K("identity accountXpub is invalid"), tt(r.accountPeerId, "identity accountPeerId"), (!r.accountPeerId.startsWith("16Uiu2H") || r.accountPeerId.length < 40 || r.accountPeerId.length > 64 || !zl.test(r.accountPeerId)) && K("identity accountPeerId is invalid"), Be(r.accountFingerprint, /^[0-9a-f]{8}$/u, "identity accountFingerprint"), pi(r.keys, 3, "public identity keys array");
   const t = [
     {
       purpose: "asset-review-approval",
@@ -6119,7 +6167,7 @@ function od(e) {
     }
   ], s = Array.from(
     { length: 3 },
-    (a, d) => id(r.keys[d], t[d])
+    (a, d) => od(r.keys[d], t[d])
   );
   return rt([
     ["accountFingerprint", r.accountFingerprint],
@@ -6134,18 +6182,18 @@ function od(e) {
   ]);
 }
 function as(e, r) {
-  const t = qe(e, jl, `${r} result`);
+  const t = qe(e, ql, `${r} result`);
   de(t.schemaVersion, 1, "connection result schemaVersion"), zr(t.event, ["connected", "disconnected"], "connection event"), r === "connect" && t.event !== "connected" && K("connect result must be connected");
   let s = null, a = null;
-  return t.event === "connected" ? (s = od(t.identity), a = Tt(t.connectionExpiresAt, "connectionExpiresAt")) : (t.identity !== null || t.connectionExpiresAt !== null) && K("disconnected result must clear identity and expiry"), rt([
+  return t.event === "connected" ? (s = sd(t.identity), a = Tt(t.connectionExpiresAt, "connectionExpiresAt")) : (t.identity !== null || t.connectionExpiresAt !== null) && K("disconnected result must clear identity and expiry"), rt([
     ["connectionExpiresAt", a],
     ["event", t.event],
     ["identity", s],
     ["schemaVersion", 1]
   ]);
 }
-function sd(e) {
-  const r = qe(e, ql, "raw signature");
+function ad(e) {
+  const r = qe(e, Kl, "raw signature");
   return de(r.schemaVersion, 1, "signature schemaVersion"), Be(r.keyId, Qt, "signature keyId"), zr(r.identityScheme, [
     "sdn-fast-password-auth-v1-legacy",
     "sdn-bip39-auth-v1-legacy"
@@ -6160,8 +6208,8 @@ function sd(e) {
   ]);
 }
 function vi(e, r) {
-  const t = qe(e, Kl, "canonical signature");
-  return de(t.schemaVersion, 1, "signature schemaVersion"), Be(t.keyId, Qt, "signature keyId"), de(t.identityScheme, At, "signature identityScheme"), de(t.algorithm, "ed25519", "signature algorithm"), de(t.encoding, "raw", "signature encoding"), de(t.signatureProfile, Xt, "signature profile"), nd(t.canonicalEnvelope, r, t), Be(t.signedDigestSha256, Je, "signedDigestSha256"), Be(t.signatureHex, fi, "signatureHex"), rt([
+  const t = qe(e, Yl, "canonical signature");
+  return de(t.schemaVersion, 1, "signature schemaVersion"), Be(t.keyId, Qt, "signature keyId"), de(t.identityScheme, At, "signature identityScheme"), de(t.algorithm, "ed25519", "signature algorithm"), de(t.encoding, "raw", "signature encoding"), de(t.signatureProfile, Xt, "signature profile"), id(t.canonicalEnvelope, r, t), Be(t.signedDigestSha256, Je, "signedDigestSha256"), Be(t.signatureHex, fi, "signatureHex"), rt([
     ["algorithm", "ed25519"],
     ["canonicalEnvelope", t.canonicalEnvelope],
     ["encoding", "raw"],
@@ -6173,14 +6221,14 @@ function vi(e, r) {
     ["signedDigestSha256", t.signedDigestSha256]
   ]);
 }
-function ad(e) {
+function cd(e) {
   const r = qe(e, ["challengeBase64url", "protocolVersion"], "SDN login v1 request");
   return de(r.protocolVersion, 1, "SDN login v1 protocolVersion"), yi(r.challengeBase64url, "challengeBase64url"), rt([
     ["challengeBase64url", r.challengeBase64url],
     ["protocolVersion", 1]
   ]);
 }
-function cd(e) {
+function ld(e) {
   const r = qe(e, oo, "SDN publication request");
   de(r.protocolVersion, 1, "publication protocolVersion"), de(r.method, "POST", "publication method"), zr(r.schema, ["CZM", "ETM"], "publication schema"), tt(r.providerOrigin, "providerOrigin");
   let t;
@@ -6201,11 +6249,11 @@ function cd(e) {
   }
   return rt(oo.map((d) => [d, r[d]]));
 }
-function ld(e) {
+function dd(e) {
   const r = qe(e, so, "SDN publication signature");
-  return de(r.schemaVersion, 1, "publication signature schemaVersion"), de(r.identityScheme, At, "publication identityScheme"), de(r.algorithm, "ed25519", "publication algorithm"), de(r.encoding, "raw", "publication encoding"), de(r.signatureProfile, Fl, "publication signatureProfile"), Be(r.keyId, Qt, "publication keyId"), Be(r.publicKeyHex, Je, "publication publicKeyHex"), Be(r.signatureHex, fi, "publication signatureHex"), Be(r.requestDigestSha256, Je, "publication requestDigestSha256"), Be(r.challengeId, /^[0-9a-f]{32}$/u, "publication challengeId"), yi(r.challengeBase64url, "publication challengeBase64url"), rt(so.map((t) => [t, r[t]]));
+  return de(r.schemaVersion, 1, "publication signature schemaVersion"), de(r.identityScheme, At, "publication identityScheme"), de(r.algorithm, "ed25519", "publication algorithm"), de(r.encoding, "raw", "publication encoding"), de(r.signatureProfile, Ml, "publication signatureProfile"), Be(r.keyId, Qt, "publication keyId"), Be(r.publicKeyHex, Je, "publication publicKeyHex"), Be(r.signatureHex, fi, "publication signatureHex"), Be(r.requestDigestSha256, Je, "publication requestDigestSha256"), Be(r.challengeId, /^[0-9a-f]{32}$/u, "publication challengeId"), yi(r.challengeBase64url, "publication challengeBase64url"), rt(so.map((t) => [t, r[t]]));
 }
-function dd(e) {
+function _d(e) {
   const r = qe(e, [
     "audience",
     "challengeBase64url",
@@ -6225,7 +6273,7 @@ function dd(e) {
 }
 function cs(e) {
   const r = qe(e, vn, "authority activation request");
-  return de(r.protocolVersion, 1, "activation protocolVersion"), de(r.audience, Bl, "activation audience"), de(r.requestOrigin, rs, "activation requestOrigin"), de(r.clientId, ns, "activation clientId"), de(r.serviceInstance, "assets.ipfs.01/asset-review-attestation", "activation serviceInstance"), de(r.purpose, "asset-review-authority-activation", "activation purpose"), Be(r.nonce, Je, "activation nonce"), Tt(r.issuedAt, "activation issuedAt"), Tt(r.expiresAt, "activation expiresAt"), Rn(r.issuedAt, r.expiresAt), Be(r.publicKeyHex, Je, "activation publicKeyHex"), Be(r.keyId, Qt, "activation keyId"), de(r.identityScheme, At, "activation identityScheme"), de(r.signatureProfile, Xt, "activation signatureProfile"), rt(vn.map((t) => [t, r[t]]));
+  return de(r.protocolVersion, 1, "activation protocolVersion"), de(r.audience, Vl, "activation audience"), de(r.requestOrigin, rs, "activation requestOrigin"), de(r.clientId, ns, "activation clientId"), de(r.serviceInstance, "assets.ipfs.01/asset-review-attestation", "activation serviceInstance"), de(r.purpose, "asset-review-authority-activation", "activation purpose"), Be(r.nonce, Je, "activation nonce"), Tt(r.issuedAt, "activation issuedAt"), Tt(r.expiresAt, "activation expiresAt"), Rn(r.issuedAt, r.expiresAt), Be(r.publicKeyHex, Je, "activation publicKeyHex"), Be(r.keyId, Qt, "activation keyId"), de(r.identityScheme, At, "activation identityScheme"), de(r.signatureProfile, Xt, "activation signatureProfile"), rt(vn.map((t) => [t, r[t]]));
 }
 function Hn(e, r, t) {
   pi(e, r, `${t} array`);
@@ -6235,8 +6283,8 @@ function Hn(e, r, t) {
   });
   return $r(s);
 }
-function _d(e) {
-  const r = qe(e, Yl, "reviewedTransform"), t = Hn(r.translation, 3, "translation"), s = Hn(r.rotation, 4, "rotation"), a = Hn(r.scale, 3, "scale");
+function hd(e) {
+  const r = qe(e, Gl, "reviewedTransform"), t = Hn(r.translation, 3, "translation"), s = Hn(r.rotation, 4, "rotation"), a = Hn(r.scale, 3, "scale");
   t.some((b) => Math.abs(b) > qt.translationComponentAbsMax) && K("translation values exceed the reviewed transform policy"), a.some((b) => b <= qt.scaleComponentExclusiveMin || b > qt.scaleComponentInclusiveMax) && K("scale values exceed the reviewed transform policy");
   const d = Math.hypot(...s);
   return Math.abs(d - 1) > qt.quaternionNormTolerance && K("rotation must be a unit quaternion within the reviewed tolerance"), zr(r.upAxis, qt.upAxes, "upAxis"), tt(r.sourceUnits, "sourceUnits"), Object.hasOwn(qt.metersPerSourceUnit, r.sourceUnits) || K("sourceUnits is not allowed by the reviewed transform policy"), (typeof r.metersPerSourceUnit != "number" || !Number.isFinite(r.metersPerSourceUnit) || r.metersPerSourceUnit !== qt.metersPerSourceUnit[r.sourceUnits]) && K("metersPerSourceUnit must exactly match sourceUnits"), rt([
@@ -6263,60 +6311,60 @@ function ls(e) {
   const t = Object.getOwnPropertyDescriptor(r, "decision");
   (!t || !t.enumerable || !("value" in t) || t.value === void 0) && K("asset review decision request has an invalid decision field");
   const s = t.value, a = s === "approve" ? ["note", "reviewedTransform"] : s === "disapprove" ? ["reason"] : [], d = qe(r, [...ei, ...a], "asset review decision request");
-  de(d.protocolVersion, 1, "decision protocolVersion"), de(d.audience, Ml, "decision audience"), de(d.requestOrigin, rs, "decision requestOrigin"), de(d.clientId, ns, "decision clientId"), Be(d.challengeId, Je, "challengeId"), Be(d.nonce, Je, "decision nonce"), Tt(d.issuedAt, "decision issuedAt"), Tt(d.expiresAt, "decision expiresAt"), Rn(d.issuedAt, d.expiresAt), Be(d.modelSha256, Je, "modelSha256"), Be(d.metadataSha256, Je, "metadataSha256"), d.previousDecisionHead !== null && Be(d.previousDecisionHead, Je, "previousDecisionHead"), Zl(d.modelCid, d.modelSha256), (!Number.isSafeInteger(d.modelBytes) || d.modelBytes <= 0) && K("modelBytes must be a positive safe integer"), tt(d.candidateKey, "candidateKey");
+  de(d.protocolVersion, 1, "decision protocolVersion"), de(d.audience, Bl, "decision audience"), de(d.requestOrigin, rs, "decision requestOrigin"), de(d.clientId, ns, "decision clientId"), Be(d.challengeId, Je, "challengeId"), Be(d.nonce, Je, "decision nonce"), Tt(d.issuedAt, "decision issuedAt"), Tt(d.expiresAt, "decision expiresAt"), Rn(d.issuedAt, d.expiresAt), Be(d.modelSha256, Je, "modelSha256"), Be(d.metadataSha256, Je, "metadataSha256"), d.previousDecisionHead !== null && Be(d.previousDecisionHead, Je, "previousDecisionHead"), ed(d.modelCid, d.modelSha256), (!Number.isSafeInteger(d.modelBytes) || d.modelBytes <= 0) && K("modelBytes must be a positive safe integer"), tt(d.candidateKey, "candidateKey");
   const b = "asset-review:", E = `:${d.modelSha256}`;
   (!d.candidateKey.startsWith(b) || !d.candidateKey.endsWith(E) || Lt.encode(d.candidateKey).byteLength > 206) && K("candidateKey does not bind the model digest");
   const I = d.candidateKey.slice(b.length, -E.length);
   (!/^[a-z0-9-]+\/[a-z0-9][a-z0-9-]*$/u.test(I) || Lt.encode(I).byteLength > 128) && K("candidateKey entityId is invalid");
   const P = ei.map((m) => [m, d[m]]);
-  return s === "approve" ? (P.push(["note", co(d.note, "note", !0)]), P.push(["reviewedTransform", _d(d.reviewedTransform)])) : P.push(["reason", co(d.reason, "reason", !1)]), Object.values(d).filter((m) => typeof m == "string").reduce((m, N) => m + Lt.encode(N).byteLength, 0) > 16384 && K("decision request strings exceed 16 KiB"), rt(P);
+  return s === "approve" ? (P.push(["note", co(d.note, "note", !0)]), P.push(["reviewedTransform", hd(d.reviewedTransform)])) : P.push(["reason", co(d.reason, "reason", !1)]), Object.values(d).filter((m) => typeof m == "string").reduce((m, N) => m + Lt.encode(N).byteLength, 0) > 16384 && K("decision request strings exceed 16 KiB"), rt(P);
 }
 function ds(e, r) {
   return qe(e, [], r), $r({});
 }
-function hd(e) {
+function ud(e) {
   return ds(e, "wallet connect request");
 }
-function ud(e) {
+function fd(e) {
   return as(e, "connect");
 }
-function fd(e) {
+function pd(e) {
   return ds(e, "wallet account request");
 }
 function _s(e) {
   return as(e, "account");
 }
-function pd(e) {
-  return ad(e);
-}
 function yd(e) {
-  return sd(e);
+  return cd(e);
 }
 function gd(e) {
-  return dd(e);
+  return ad(e);
 }
 function vd(e) {
+  return _d(e);
+}
+function bd(e) {
   return vi(e, "sdn-login");
 }
 function hs(e) {
-  return cd(e);
+  return ld(e);
 }
 function us(e) {
-  return ld(e);
+  return dd(e);
 }
-function bd(e) {
+function Ed(e) {
   return cs(e);
 }
-function Ed(e) {
+function Ad(e) {
   return vi(e, "asset-review-authority-activation");
 }
-function Ad(e) {
+function md(e) {
   return ls(e);
 }
-function md(e) {
+function Id(e) {
   return vi(e, "asset-review-attestation");
 }
-const Id = Object.freeze([
+const wd = Object.freeze([
   "callbackUri",
   "clientDisplayName",
   "clientId",
@@ -6330,48 +6378,48 @@ const Id = Object.freeze([
   "schemaVersion",
   "state",
   "transactionId"
-]), an = /^[0-9a-f]{64}$/u, fs = /^[A-Za-z0-9_-]{43}$/u, wd = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/u, Sd = new TextEncoder(), ps = Object.freeze({
+]), an = /^[0-9a-f]{64}$/u, fs = /^[A-Za-z0-9_-]{43}$/u, Sd = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/u, kd = new TextEncoder(), ps = Object.freeze({
   "sdn.auth.publish-request.v1": Object.freeze({
     parseRequest: hs,
     buildResult: us,
     publish: !0
   }),
   "sdn.auth.jcs-envelope.v2": Object.freeze({
-    parseRequest: gd,
-    buildResult: vd,
+    parseRequest: vd,
+    buildResult: bd,
     sign(e, r, t, s) {
       return e.signSdnLoginV2(r, t, s.registryRow);
     }
   }),
   "sdn.auth.raw-challenge.v1": Object.freeze({
-    parseRequest: pd,
-    buildResult: yd,
+    parseRequest: yd,
+    buildResult: gd,
     sign(e, r, t) {
-      return e.signSdnLoginV1(r, Rd(t.challengeBase64url));
+      return e.signSdnLoginV1(r, Nd(t.challengeBase64url));
     }
   }),
   "sdn.asset-review.authority-activation.v1": Object.freeze({
-    parseRequest: bd,
-    buildResult: Ed,
+    parseRequest: Ed,
+    buildResult: Ad,
     sign(e, r, t, s) {
       return e.signAssetReviewAuthorityActivation(r, t, s.registryRow);
     }
   }),
   "sdn.asset-review.decision.v1": Object.freeze({
-    parseRequest: Ad,
-    buildResult: md,
+    parseRequest: md,
+    buildResult: Id,
     sign(e, r, t, s) {
       return e.signAssetReviewDecision(r, t, s.registryRow);
     }
   }),
   "sdn.wallet.account.v1": Object.freeze({
-    parseRequest: fd,
+    parseRequest: pd,
     buildResult: _s,
     connect: !0
   }),
   "sdn.wallet.connect.v1": Object.freeze({
-    parseRequest: hd,
-    buildResult: ud,
+    parseRequest: ud,
+    buildResult: fd,
     connect: !0
   })
 });
@@ -6412,7 +6460,7 @@ function ri(e, r, t = "INVALID_TRANSACTION") {
   return b;
 }
 function cn(e, r = "INVALID_TRANSACTION") {
-  (typeof e != "string" || !wd.test(e)) && Se(r);
+  (typeof e != "string" || !Sd.test(e)) && Se(r);
   const t = Date.parse(e);
   return (!Number.isFinite(t) || new Date(t).toISOString() !== e) && Se(r), t;
 }
@@ -6426,17 +6474,17 @@ function Mr(e) {
 function ni(e) {
   return e === null || typeof e == "boolean" || typeof e == "string" ? JSON.stringify(e) : typeof e == "number" ? (Number.isFinite(e) || Se("INVALID_TRANSACTION"), JSON.stringify(e)) : Array.isArray(e) ? `[${e.map(ni).join(",")}]` : (bi(e) || Se("INVALID_TRANSACTION"), `{${Object.keys(e).sort().map((r) => `${JSON.stringify(r)}:${ni(e[r])}`).join(",")}}`);
 }
-async function kd(e, r) {
+async function Od(e, r) {
   typeof r != "function" && Se("CRYPTO_UNAVAILABLE");
   let t;
   try {
-    t = await r(Sd.encode(ni(e)));
+    t = await r(kd.encode(ni(e)));
   } catch {
     Se("CRYPTO_UNAVAILABLE");
   }
   return (!(t instanceof Uint8Array) || t.byteLength !== 32) && Se("CRYPTO_UNAVAILABLE"), Array.from(t, (s) => s.toString(16).padStart(2, "0")).join("");
 }
-function Od(e, r) {
+function Pd(e, r) {
   if (typeof e != "string" || typeof r != "string") return !1;
   const t = Math.max(e.length, r.length);
   let s = e.length ^ r.length;
@@ -6444,7 +6492,7 @@ function Od(e, r) {
     s |= (e.charCodeAt(a) || 0) ^ (r.charCodeAt(a) || 0);
   return s === 0;
 }
-function Pd(e, r) {
+function Rd(e, r) {
   try {
     if (typeof e?.resolveRegistryBinding == "function")
       return e.resolveRegistryBinding(r);
@@ -6473,11 +6521,11 @@ async function zn(e, {
   now: d = () => Date.now(),
   expectedTransactionId: b = null
 }) {
-  const E = ri(e, Id);
+  const E = ri(e, wd);
   (E.schemaVersion !== 1 || typeof E.clientDisplayName != "string" || E.clientDisplayName.length < 1 || E.clientDisplayName.length > 80 || !an.test(E.transactionId) || !an.test(E.state) || !an.test(E.requestSha256) || !fs.test(E.resultToken)) && Se("INVALID_TRANSACTION"), b !== null && E.transactionId !== b && Se("INVALID_TRANSACTION");
   const I = ps[E.operation];
   I || Se("UNREGISTERED_TRANSACTION");
-  const P = Pd(r, {
+  const P = Rd(r, {
     clientId: E.clientId,
     operation: E.operation,
     requestOrigin: E.requestOrigin
@@ -6493,12 +6541,12 @@ async function zn(e, {
   }
   let L;
   try {
-    L = await kd(N, s);
+    L = await Od(N, s);
   } catch (U) {
     if (U instanceof xt) throw U;
     Se("CRYPTO_UNAVAILABLE");
   }
-  Od(L, E.requestSha256) || Se("REQUEST_HASH_MISMATCH");
+  Pd(L, E.requestSha256) || Se("REQUEST_HASH_MISMATCH");
   const D = { ...E, request: N };
   return Object.freeze({
     binding: Mr(P),
@@ -6507,7 +6555,7 @@ async function zn(e, {
     transaction: Mr(D)
   });
 }
-function Rd(e) {
+function Nd(e) {
   fs.test(e) || Se("INVALID_TRANSACTION");
   let r;
   try {
@@ -6518,7 +6566,7 @@ function Rd(e) {
   const t = Uint8Array.from(r, (s) => s.charCodeAt(0));
   return t.byteLength !== 32 && Se("INVALID_TRANSACTION"), t;
 }
-function Nd(e, r, t, s) {
+function Ld(e, r, t, s) {
   const a = e.createElement("div");
   a.className = "wallet-confirmation-row";
   const d = e.createElement("strong");
@@ -6569,7 +6617,7 @@ function ys(e, r = {}) {
       return b(`Confirm a request from ${a}`, "", "Confirm");
   }
 }
-function Ld(e, { binding: r, document: t, request: s }) {
+function Td(e, { binding: r, document: t, request: s }) {
   const a = ys(r, s ?? {});
   e.replaceChildren();
   const d = t.createElement("h1");
@@ -6577,10 +6625,10 @@ function Ld(e, { binding: r, document: t, request: s }) {
     const b = t.createElement("p");
     b.className = "wallet-confirmation-detail", b.textContent = a.detail, e.append(b);
   }
-  for (const [b, E] of a.facts) Nd(t, e, b, String(E));
+  for (const [b, E] of a.facts) Ld(t, e, b, String(E));
   return e;
 }
-async function Td({ assertCurrent: e, binding: r, capabilities: t, handle: s, identity: a, transaction: d }) {
+async function xd({ assertCurrent: e, binding: r, capabilities: t, handle: s, identity: a, transaction: d }) {
   const b = hs(d.request);
   (r.clientId !== "spaceaware-web-v1" || r.requestOrigin !== "https://spaceaware.io" || r.registryRow !== "spaceaware-publish-request-v1" || typeof t.signSdnPublishRequest != "function" || a?.identityScheme !== "sdn-bip32-slip10-purpose-v1" || a?.seedProfile !== "password-scrypt-v2") && Se("OPERATION_NOT_ALLOWED");
   const E = a.keys?.filter((C) => C?.purpose === "sdn-authentication") ?? [];
@@ -6638,9 +6686,9 @@ async function Td({ assertCurrent: e, binding: r, capabilities: t, handle: s, id
   const M = ri(U, ["schemaVersion", "keyId", "identityScheme", "algorithm", "encoding", "signatureProfile", "publicKeyHex", "signatureHex", "requestDigestSha256"], "INVALID_WALLET_RESULT");
   return (M.keyId !== P || M.publicKeyHex !== I) && Se("INVALID_WALLET_RESULT"), us({ ...M, challengeId: L.challenge_id, challengeBase64url: D });
 }
-function xd({ binding: e, document: r, request: t }) {
+function Dd({ binding: e, document: r, request: t }) {
   const s = r.activeElement ?? null, a = r.createElement("section");
-  a.className = "wallet-confirmation", a.setAttribute?.("role", "dialog"), a.setAttribute?.("aria-modal", "true"), a.setAttribute?.("aria-labelledby", "wallet-confirmation-heading"), a.tabIndex = -1, Ld(a, { binding: e, document: r, request: t });
+  a.className = "wallet-confirmation", a.setAttribute?.("role", "dialog"), a.setAttribute?.("aria-modal", "true"), a.setAttribute?.("aria-labelledby", "wallet-confirmation-heading"), a.tabIndex = -1, Td(a, { binding: e, document: r, request: t });
   const d = r.createElement("div");
   d.className = "wallet-confirmation-actions";
   const b = r.createElement("button");
@@ -6690,7 +6738,7 @@ function xd({ binding: e, document: r, request: t }) {
     }
   });
 }
-async function Dd({
+async function Cd({
   assertCurrent: e = () => {
   },
   binding: r,
@@ -6700,7 +6748,7 @@ async function Dd({
   wasm: d
 }) {
   const b = d?.sdn ?? d, E = ps[a.operation];
-  if ((!E || !b) && Se("OPERATION_NOT_ALLOWED"), E.publish) return Td({ assertCurrent: e, binding: r, capabilities: b, handle: t, identity: s, transaction: a });
+  if ((!E || !b) && Se("OPERATION_NOT_ALLOWED"), E.publish) return xd({ assertCurrent: e, binding: r, capabilities: b, handle: t, identity: s, transaction: a });
   if (E.connect)
     return E.buildResult({
       connectionExpiresAt: a.expiresAt,
@@ -6721,7 +6769,7 @@ async function Dd({
     Se("INVALID_WALLET_RESULT");
   }
 }
-function Cd() {
+function Ud() {
   return _s({
     connectionExpiresAt: null,
     event: "disconnected",
@@ -6729,7 +6777,7 @@ function Cd() {
     schemaVersion: 1
   });
 }
-const ho = "webauthn-prf-hkdf-sha256-aes256gcm-v2", Ud = "sdn-bip32-slip10-purpose-v1", Fd = "password-scrypt-v2", Md = Object.freeze([
+const ho = "webauthn-prf-hkdf-sha256-aes256gcm-v2", Fd = "sdn-bip32-slip10-purpose-v1", Md = "password-scrypt-v2", Bd = Object.freeze([
   "aad",
   "canonicalUsername",
   "ciphertextBase64url",
@@ -6740,14 +6788,14 @@ const ho = "webauthn-prf-hkdf-sha256-aes256gcm-v2", Ud = "sdn-bip32-slip10-purpo
   "prfInputBase64url",
   "schemaVersion",
   "storageProfile"
-]), Bd = Object.freeze([
+]), Vd = Object.freeze([
   "credentialIdBase64url",
   "identityScheme",
   "schemaVersion",
   "seedProfile",
   "storageProfile",
   "usernameSha256"
-]), Vd = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/u, Hd = /^[0-9a-f]{64}$/u, zd = /^[A-Za-z0-9_-]+$/u, $d = new TextEncoder(), st = "sdn.wallet.remembered.v2", Bt = `${st}.pending`, ln = 16 * 1024, gs = Object.freeze([
+]), Hd = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/u, zd = /^[0-9a-f]{64}$/u, $d = /^[A-Za-z0-9_-]+$/u, Wd = new TextEncoder(), st = "sdn.wallet.remembered.v2", Bt = `${st}.pending`, ln = 16 * 1024, gs = Object.freeze([
   "wallet_storage_metadata",
   "wallet_storage_encrypted",
   "wallet_storage_passkey_credential",
@@ -6809,17 +6857,17 @@ function Es(e) {
 }
 function As(e) {
   if (!Es(e)) return !1;
-  const r = $d.encode(e).length;
+  const r = Wd.encode(e).length;
   return r >= 3 && r <= 64 && !/[\u0000-\u001f\u007f-\u009f]/u.test(e) && !/^ | $/u.test(e) && !/[A-Z]/u.test(e);
 }
-function Wd(e) {
+function jd(e) {
   let r = "";
   for (let t = 0; t < e.length; t += 32768)
     r += String.fromCharCode(...e.subarray(t, t + 32768));
   return btoa(r).replace(/\+/gu, "-").replace(/\//gu, "_").replace(/=+$/u, "");
 }
 function Et(e, { minimum: r = 0, maximum: t = 65536, exact: s = null } = {}) {
-  (typeof e != "string" || e.length === 0 || !zd.test(e)) && me("INVALID_REMEMBERED_WALLET");
+  (typeof e != "string" || e.length === 0 || !$d.test(e)) && me("INVALID_REMEMBERED_WALLET");
   const a = e.length % 4;
   a === 1 && me("INVALID_REMEMBERED_WALLET");
   const d = e.replace(/-/gu, "+").replace(/_/gu, "/") + "=".repeat((4 - a) % 4);
@@ -6831,12 +6879,12 @@ function Et(e, { minimum: r = 0, maximum: t = 65536, exact: s = null } = {}) {
   }
   const E = new Uint8Array(b.length);
   for (let I = 0; I < b.length; I += 1) E[I] = b.charCodeAt(I);
-  return (Wd(E) !== e || E.length < r || E.length > t || s !== null && E.length !== s) && me("INVALID_REMEMBERED_WALLET"), E;
+  return (jd(E) !== e || E.length < r || E.length > t || s !== null && E.length !== s) && me("INVALID_REMEMBERED_WALLET"), E;
 }
 function Ei(e) {
   return e === null || typeof e == "boolean" || typeof e == "string" || typeof e == "number" && Number.isFinite(e) ? JSON.stringify(e) : (bs(e) || me("INVALID_REMEMBERED_WALLET"), `{${Object.keys(e).sort().map((r) => `${JSON.stringify(r)}:${Ei(e[r])}`).join(",")}}`);
 }
-function jd(e) {
+function qd(e) {
   return Object.freeze({
     aad: Object.freeze({ ...e.aad }),
     canonicalUsername: e.canonicalUsername,
@@ -6851,10 +6899,10 @@ function jd(e) {
   });
 }
 function ms(e) {
-  const r = uo(e, Md), t = uo(r.aad, Bd);
-  return (r.schemaVersion !== 2 || r.storageProfile !== ho || t.schemaVersion !== 2 || t.storageProfile !== ho || t.identityScheme !== Ud || t.seedProfile !== Fd || !As(r.canonicalUsername) || !Hd.test(t.usernameSha256) || r.credentialIdBase64url !== t.credentialIdBase64url || !Es(r.createdAt) || !Vd.test(r.createdAt) || new Date(r.createdAt).toISOString() !== r.createdAt) && me("INVALID_REMEMBERED_WALLET"), Et(r.credentialIdBase64url, { minimum: 1, maximum: 1024 }), Et(r.ciphertextBase64url, { minimum: 17, maximum: 1024 }), Et(r.hkdfSaltBase64url, { exact: 32 }), Et(r.nonceBase64url, { exact: 12 }), Et(r.prfInputBase64url, { exact: 32 }), jd({ ...r, aad: t });
+  const r = uo(e, Bd), t = uo(r.aad, Vd);
+  return (r.schemaVersion !== 2 || r.storageProfile !== ho || t.schemaVersion !== 2 || t.storageProfile !== ho || t.identityScheme !== Fd || t.seedProfile !== Md || !As(r.canonicalUsername) || !zd.test(t.usernameSha256) || r.credentialIdBase64url !== t.credentialIdBase64url || !Es(r.createdAt) || !Hd.test(r.createdAt) || new Date(r.createdAt).toISOString() !== r.createdAt) && me("INVALID_REMEMBERED_WALLET"), Et(r.credentialIdBase64url, { minimum: 1, maximum: 1024 }), Et(r.ciphertextBase64url, { minimum: 17, maximum: 1024 }), Et(r.hkdfSaltBase64url, { exact: 32 }), Et(r.nonceBase64url, { exact: 12 }), Et(r.prfInputBase64url, { exact: 32 }), qd({ ...r, aad: t });
 }
-function qd(e) {
+function Kd(e) {
   return Ei(ms(e));
 }
 function Ai(e) {
@@ -6915,10 +6963,10 @@ function Is(e) {
     pending: r
   });
 }
-function Kd(e, r) {
+function Yd(e, r) {
   const t = Is(e);
   t.canSetup || me("STORAGE_QUARANTINED");
-  const s = qd(r);
+  const s = Kd(r);
   try {
     e.setItem(Bt, s);
   } catch (b) {
@@ -6938,7 +6986,7 @@ function Kd(e, r) {
   });
   return ii.add(d), d;
 }
-function Yd(e, r) {
+function Gd(e, r) {
   (!ii.has(r) || r.storage !== e) && me("INVALID_STORAGE_TRANSACTION"), ii.delete(r);
   let t, s;
   try {
@@ -6971,7 +7019,7 @@ function mi(e, r) {
     rawLength: t.length
   });
 }
-function Gd(e) {
+function Xd(e) {
   return Object.freeze({
     exportable: e.exportable,
     key: e.key,
@@ -6979,7 +7027,7 @@ function Gd(e) {
     rawLength: e.rawLength
   });
 }
-function Xd(e) {
+function Jd(e) {
   const r = [];
   for (const t of [
     st,
@@ -6993,15 +7041,15 @@ function Xd(e) {
       if (a instanceof Wr && a.code === "NOT_QUARANTINED") continue;
       throw a;
     }
-    s && r.push(Gd(s));
+    s && r.push(Xd(s));
   }
   return Object.freeze(r);
 }
-function Jd(e, r) {
+function Qd(e, r) {
   const t = mi(e, r);
   return t || me("QUARANTINE_NOT_FOUND"), t.exportable || me("QUARANTINE_EXPORT_TOO_LARGE"), t.raw;
 }
-function Qd(e, r, t) {
+function Zd(e, r, t) {
   vs.has(r) || me("INVALID_STORAGE_KEY"), t !== r && me("CONFIRMATION_REQUIRED"), mi(e, r) || me("QUARANTINE_NOT_FOUND");
   try {
     e.removeItem(r), e.getItem(r) !== null && me("STORAGE_WRITE_FAILED");
@@ -7010,7 +7058,7 @@ function Qd(e, r, t) {
     me("STORAGE_UNAVAILABLE");
   }
 }
-function Zd(e, r) {
+function e_(e, r) {
   r !== st && me("CONFIRMATION_REQUIRED");
   const t = oi(e, st);
   t.status === "empty" && me("REMEMBER_UNAVAILABLE"), t.status !== "valid" && me("STORAGE_QUARANTINED");
@@ -7024,7 +7072,7 @@ function Zd(e, r) {
 const bn = "sdn-bip32-slip10-purpose-v1", En = "password-scrypt-v2", si = "m/44'/0'/0'/2'/0'", Ii = "Approval unavailable — migrate to the new wallet profile", fo = Object.freeze({
   "bip39-mnemonic-v1-legacy": "sdn-bip39-auth-v1-legacy",
   "password-fast-v1-legacy": "sdn-fast-password-auth-v1-legacy"
-}), po = new TextEncoder(), e_ = Uint8Array.prototype.fill, wi = Object.freeze([
+}), po = new TextEncoder(), t_ = Uint8Array.prototype.fill, wi = Object.freeze([
   "accountFingerprint",
   "accountIndex",
   "accountLabel",
@@ -7077,7 +7125,7 @@ function Fe(e) {
 function yo(e) {
   if (e instanceof Uint8Array)
     try {
-      e_.call(e, 0);
+      t_.call(e, 0);
     } catch {
     }
 }
@@ -7088,13 +7136,13 @@ function Jt(e) {
   for (const t of Object.keys(e).sort()) r[t] = Jt(e[t]);
   return Object.freeze(r);
 }
-function t_(e) {
+function r_(e) {
   if (!e || typeof e != "object" || Array.isArray(e)) return !1;
   const r = Object.getPrototypeOf(e);
   return r === Object.prototype || r === null;
 }
 function mn(e, r) {
-  t_(e) || Fe("INVALID_PUBLIC_IDENTITY");
+  r_(e) || Fe("INVALID_PUBLIC_IDENTITY");
   let t;
   try {
     t = Reflect.ownKeys(e);
@@ -7127,7 +7175,7 @@ function sr(e) {
   }
   return !0;
 }
-function r_(e) {
+function n_(e) {
   if (!Array.isArray(e) || Object.getPrototypeOf(e) !== Array.prototype || e.length !== An.length) return !1;
   let r;
   try {
@@ -7143,7 +7191,7 @@ function r_(e) {
   }
   return !0;
 }
-function n_(e) {
+function i_(e) {
   if (!Array.isArray(e) || Object.getPrototypeOf(e) !== Array.prototype || e.length !== 1) return !1;
   let r;
   try {
@@ -7157,18 +7205,18 @@ function n_(e) {
 }
 function ft(e) {
   const r = mn(e, wi);
-  (r.schemaVersion !== 1 || r.identityScheme !== bn || r.seedProfile !== En || r.accountIndex !== 0 || r.accountLabel !== null || !/^[0-9a-f]{8}$/u.test(r.accountFingerprint) || !sr(r.accountXpub) || !/^xpub[1-9A-HJ-NP-Za-km-z]{107}$/u.test(r.accountXpub) || !sr(r.accountPeerId) || !/^16Uiu2H[1-9A-HJ-NP-Za-km-z]{33,57}$/u.test(r.accountPeerId) || !r_(r.keys)) && Fe("INVALID_PUBLIC_IDENTITY");
+  (r.schemaVersion !== 1 || r.identityScheme !== bn || r.seedProfile !== En || r.accountIndex !== 0 || r.accountLabel !== null || !/^[0-9a-f]{8}$/u.test(r.accountFingerprint) || !sr(r.accountXpub) || !/^xpub[1-9A-HJ-NP-Za-km-z]{107}$/u.test(r.accountXpub) || !sr(r.accountPeerId) || !/^16Uiu2H[1-9A-HJ-NP-Za-km-z]{33,57}$/u.test(r.accountPeerId) || !n_(r.keys)) && Fe("INVALID_PUBLIC_IDENTITY");
   const t = An.map((s, a) => {
     const d = mn(r.keys[a], Si);
     return (d.bip32Fingerprint !== null || d.curve !== s.curve || d.derivation !== "slip10" || d.encoding !== "raw" || d.identityScheme !== bn || d.path !== s.path || d.purpose !== s.purpose || d.seedProfile !== En || d.signatureProfile !== s.signatureProfile || !/^[0-9a-f]{64}$/u.test(d.publicKeyHex) || !/^sha256:[0-9a-f]{64}$/u.test(d.keyId)) && Fe("INVALID_PUBLIC_IDENTITY"), Jt(d);
   });
   return Jt({ ...r, keys: t });
 }
-function i_(e, { accountIndex: r = 0, profile: t } = {}) {
+function o_(e, { accountIndex: r = 0, profile: t } = {}) {
   const s = Object.hasOwn(fo, t) ? fo[t] : null;
   (!s || r !== 0) && Fe("INVALID_LEGACY_PROFILE");
   const a = mn(e, wi);
-  (a.schemaVersion !== 1 || a.identityScheme !== s || a.seedProfile !== t || a.accountIndex !== r || a.accountLabel !== null || !/^[0-9a-f]{8}$/u.test(a.accountFingerprint) || !sr(a.accountXpub) || !/^xpub[1-9A-HJ-NP-Za-km-z]{107}$/u.test(a.accountXpub) || !sr(a.accountPeerId) || !/^16Uiu2H[1-9A-HJ-NP-Za-km-z]{33,57}$/u.test(a.accountPeerId) || !n_(a.keys)) && Fe("INVALID_PUBLIC_IDENTITY");
+  (a.schemaVersion !== 1 || a.identityScheme !== s || a.seedProfile !== t || a.accountIndex !== r || a.accountLabel !== null || !/^[0-9a-f]{8}$/u.test(a.accountFingerprint) || !sr(a.accountXpub) || !/^xpub[1-9A-HJ-NP-Za-km-z]{107}$/u.test(a.accountXpub) || !sr(a.accountPeerId) || !/^16Uiu2H[1-9A-HJ-NP-Za-km-z]{33,57}$/u.test(a.accountPeerId) || !i_(a.keys)) && Fe("INVALID_PUBLIC_IDENTITY");
   const d = mn(a.keys[0], Si);
   return (d.bip32Fingerprint !== null || d.curve !== "ed25519" || d.derivation !== "bip32-scalar-as-ed25519-seed" || d.encoding !== "raw" || d.identityScheme !== s || d.path !== `m/44'/0'/${r}'/0/0` || d.purpose !== "sdn-authentication" || d.seedProfile !== t || d.signatureProfile !== "ed25519-raw-32-v1" || !/^[0-9a-f]{64}$/u.test(d.publicKeyHex) || !/^sha256:[0-9a-f]{64}$/u.test(d.keyId)) && Fe("INVALID_PUBLIC_IDENTITY"), Jt({ ...a, keys: [d] });
 }
@@ -7218,7 +7266,7 @@ function vo(e, r) {
   }
   return s === 0;
 }
-function o_(e) {
+function s_(e) {
   return !e || typeof e != "object" || !Array.isArray(e.keys) ? null : e.keys.find((r) => r?.purpose === "asset-review-approval") ?? null;
 }
 function $n(e, r) {
@@ -7248,7 +7296,7 @@ function nr(e, r, t, s) {
 }
 function Ss(e) {
   (e?.identityScheme !== bn || e?.seedProfile !== En || e?.accountIndex !== 0) && Fe("APPROVAL_UNAVAILABLE");
-  const r = o_(e);
+  const r = s_(e);
   return (!r || r.identityScheme !== e.identityScheme || r.seedProfile !== e.seedProfile || r.signatureProfile !== "ed25519-over-sha256-jcs-v1" || r.curve !== "ed25519" || r.derivation !== "slip10" || r.path !== si || r.encoding !== "raw" || !/^[0-9a-f]{64}$/u.test(r.publicKeyHex) || !/^sha256:[0-9a-f]{64}$/u.test(r.keyId)) && Fe("APPROVAL_UNAVAILABLE"), Jt({
     algorithm: "Ed25519",
     derivationPath: si,
@@ -7262,10 +7310,10 @@ function Ss(e) {
     signatureProfile: "ed25519-over-sha256-jcs-v1"
   });
 }
-function s_(e) {
+function a_(e) {
   return JSON.stringify(e, null, 2);
 }
-function a_(e, r, { document: t = e.ownerDocument } = {}) {
+function c_(e, r, { document: t = e.ownerDocument } = {}) {
   e.replaceChildren();
   const s = t.createElement("h1");
   if (s.textContent = "Account", e.append(s), nr(t, e, "Username / account", r?.accountLabel ?? "account 0"), nr(t, e, "Account xpub", r?.accountXpub), nr(t, e, "Peer ID", r?.accountPeerId), nr(t, e, "Fingerprint", r?.accountFingerprint), r?.identityScheme !== bn || r?.seedProfile !== En) {
@@ -7275,7 +7323,7 @@ function a_(e, r, { document: t = e.ownerDocument } = {}) {
   const a = Ss(r);
   return nr(t, e, "Asset approval public key", a.publicKeyHex), nr(t, e, "Asset approval key ID", a.keyId), Object.freeze({ approvalAvailable: !0, configuration: a });
 }
-function c_(e, { document: r = e.ownerDocument } = {}) {
+function l_(e, { document: r = e.ownerDocument } = {}) {
   e.replaceChildren();
   const t = r.createElement("h2");
   t.textContent = "Stored wallet";
@@ -7304,7 +7352,7 @@ function c_(e, { document: r = e.ownerDocument } = {}) {
     status: w
   });
 }
-function l_(e, r, { document: t = e.ownerDocument } = {}) {
+function d_(e, r, { document: t = e.ownerDocument } = {}) {
   e.replaceChildren();
   const s = t.createElement("h2");
   s.textContent = "Quarantined wallet storage";
@@ -7345,14 +7393,14 @@ function l_(e, r, { document: t = e.ownerDocument } = {}) {
   }
   return e.append(s, a, d, b), Object.freeze({ rows: Object.freeze(E), status: b });
 }
-async function d_(e, {
+async function __(e, {
   assertCurrent: r = () => {
   },
   clipboard: t = globalThis.navigator?.clipboard,
   container: s,
   document: a = s?.ownerDocument
 }) {
-  const d = s_(e);
+  const d = a_(e);
   let b = !1;
   try {
     if (!t?.writeText) throw new Error("clipboard unavailable");
@@ -7412,7 +7460,7 @@ async function bo(e, r, t, {
     b(w), b(m);
   }
 }
-class __ {
+class h_ {
   #r = null;
   #c;
   #_ = !1;
@@ -7488,7 +7536,7 @@ class __ {
     for (const t of r) yo(t);
   }
 }
-async function h_({
+async function u_({
   wasm: e,
   profile: r,
   operation: t,
@@ -7508,7 +7556,7 @@ async function h_({
     legacy: !0
   });
 }
-function u_(e, { document: r = e.ownerDocument } = {}) {
+function f_(e, { document: r = e.ownerDocument } = {}) {
   e.replaceChildren();
   const t = r.createElement("h2");
   t.textContent = "Migrate legacy wallet";
@@ -7528,37 +7576,37 @@ function u_(e, { document: r = e.ownerDocument } = {}) {
   const b = r.createElement("div");
   return b.className = "wallet-legacy-comparison", e.append(t, s, a, d, b), Object.freeze({ launch: d, result: b, select: a });
 }
-const In = Uint8Array, ks = ArrayBuffer, ki = Object.getPrototypeOf(In.prototype), f_ = Object.getOwnPropertyDescriptor(ki, "buffer").get, p_ = Object.getOwnPropertyDescriptor(ki, "byteLength").get, y_ = Object.getOwnPropertyDescriptor(ki, "byteOffset").get, g_ = Object.getOwnPropertyDescriptor(ks.prototype, "byteLength").get;
-class v_ extends Error {
+const In = Uint8Array, ks = ArrayBuffer, ki = Object.getPrototypeOf(In.prototype), p_ = Object.getOwnPropertyDescriptor(ki, "buffer").get, y_ = Object.getOwnPropertyDescriptor(ki, "byteLength").get, g_ = Object.getOwnPropertyDescriptor(ki, "byteOffset").get, v_ = Object.getOwnPropertyDescriptor(ks.prototype, "byteLength").get;
+class b_ extends Error {
   constructor(r = "RNG_FAILURE") {
     super(r), this.name = "WalletRandomError", this.code = r;
   }
 }
 function Ft() {
-  throw new v_();
+  throw new b_();
 }
-function b_(e) {
+function E_(e) {
   if (!(e instanceof In) || Object.getPrototypeOf(e) !== In.prototype) return null;
   let r, t, s;
   try {
-    r = Reflect.apply(f_, e, []), t = Reflect.apply(p_, e, []), s = Reflect.apply(y_, e, []);
+    r = Reflect.apply(p_, e, []), t = Reflect.apply(y_, e, []), s = Reflect.apply(g_, e, []);
   } catch {
     return null;
   }
   let a;
   try {
-    a = Reflect.apply(g_, r, []);
+    a = Reflect.apply(v_, r, []);
   } catch {
     return null;
   }
   return Object.getPrototypeOf(r) !== ks.prototype || s !== 0 || t !== a || t !== 12 && t !== 32 ? null : r;
 }
-function E_({ getRandomValues: e, observedWrite: r } = {}) {
+function A_({ getRandomValues: e, observedWrite: r } = {}) {
   if (typeof e != "function")
     return () => Ft();
   const t = /* @__PURE__ */ new WeakSet(), s = /* @__PURE__ */ new WeakSet();
   return function(d) {
-    const b = b_(d);
+    const b = E_(d);
     (!b || t.has(d) || s.has(b)) && Ft(), t.add(d), s.add(b);
     let E;
     try {
@@ -7584,21 +7632,21 @@ function ir(e, r) {
   const t = new In(r);
   return e(t);
 }
-const dn = new TextEncoder(), A_ = new TextDecoder("utf-8", { fatal: !0 }), m_ = Uint8Array.prototype.fill, I_ = Uint8Array.prototype.slice, w_ = Uint8Array.prototype.subarray, Oi = Object.getPrototypeOf(Uint8Array.prototype), S_ = Object.getOwnPropertyDescriptor(Oi, "buffer").get, Os = Object.getOwnPropertyDescriptor(Oi, "byteLength").get, k_ = Object.getOwnPropertyDescriptor(Oi, "byteOffset").get, Ps = Object.getOwnPropertyDescriptor(ArrayBuffer.prototype, "byteLength").get, O_ = ArrayBuffer.prototype.slice, Eo = "webauthn-prf-hkdf-sha256-aes256gcm-v2", P_ = "sdn-bip32-slip10-purpose-v1", R_ = "password-scrypt-v2", N_ = "Space Data Network Wallet", Rs = 12e4;
-class L_ extends Error {
+const dn = new TextEncoder(), m_ = new TextDecoder("utf-8", { fatal: !0 }), I_ = Uint8Array.prototype.fill, w_ = Uint8Array.prototype.slice, S_ = Uint8Array.prototype.subarray, Oi = Object.getPrototypeOf(Uint8Array.prototype), k_ = Object.getOwnPropertyDescriptor(Oi, "buffer").get, Os = Object.getOwnPropertyDescriptor(Oi, "byteLength").get, O_ = Object.getOwnPropertyDescriptor(Oi, "byteOffset").get, Ps = Object.getOwnPropertyDescriptor(ArrayBuffer.prototype, "byteLength").get, P_ = ArrayBuffer.prototype.slice, Eo = "webauthn-prf-hkdf-sha256-aes256gcm-v2", R_ = "sdn-bip32-slip10-purpose-v1", N_ = "password-scrypt-v2", L_ = "Space Data Network Wallet", Rs = 12e4;
+class T_ extends Error {
   constructor(r) {
     super(r), this.name = "RememberedWalletError", this.code = r;
   }
 }
 function we(e) {
-  throw new L_(e);
+  throw new T_(e);
 }
 function Ao(e) {
   if (typeof e != "string") return "";
   const r = e.trim().toLowerCase();
   return r.endsWith(".") ? r.slice(0, -1) : r;
 }
-function T_(e, r) {
+function x_(e, r) {
   if (e == null || e === "") return;
   const t = Ao(e);
   t === "" && we("INVALID_RP_ID");
@@ -7609,7 +7657,7 @@ function T_(e, r) {
 function Ne(e) {
   if (e instanceof Uint8Array)
     try {
-      m_.call(e, 0);
+      I_.call(e, 0);
     } catch {
     }
 }
@@ -7651,7 +7699,7 @@ function _n(e, r = null) {
     return !1;
   let t, s, a, d;
   try {
-    t = Reflect.apply(S_, e, []), s = Reflect.apply(Os, e, []), a = Reflect.apply(k_, e, []), d = Reflect.apply(Ps, t, []);
+    t = Reflect.apply(k_, e, []), s = Reflect.apply(Os, e, []), a = Reflect.apply(O_, e, []), d = Reflect.apply(Ps, t, []);
   } catch {
     return !1;
   }
@@ -7681,13 +7729,13 @@ function Ar(e) {
   t < 0 && we("INVALID_REMEMBERED_WALLET");
   for (let s = 0; s < t; s += 32768)
     r += String.fromCharCode(...Reflect.apply(
-      w_,
+      S_,
       e,
       [s, s + 32768]
     ));
   return btoa(r).replace(/\+/gu, "-").replace(/\//gu, "_").replace(/=+$/u, "");
 }
-function x_(e) {
+function D_(e) {
   let r = "";
   for (const t of e) r += t.toString(16).padStart(2, "0");
   return r;
@@ -7695,7 +7743,7 @@ function x_(e) {
 function ar(e) {
   return e === null || typeof e == "boolean" || typeof e == "string" || typeof e == "number" && Number.isFinite(e) ? JSON.stringify(e) : Array.isArray(e) ? `[${e.map(ar).join(",")}]` : (wn(e) || we("INVALID_REMEMBERED_WALLET"), `{${Object.keys(e).sort().map((r) => `${JSON.stringify(r)}:${ar(e[r])}`).join(",")}}`);
 }
-function D_(e, r) {
+function C_(e, r) {
   if (!(e instanceof Uint8Array) || !(r instanceof Uint8Array)) return !1;
   const t = Gt(e), s = Gt(r);
   if (t < 0 || s < 0) return !1;
@@ -7705,7 +7753,7 @@ function D_(e, r) {
     d |= (e[b] ?? 0) ^ (r[b] ?? 0);
   return d === 0;
 }
-function C_(e, r) {
+function U_(e, r) {
   return ar(e) === ar(r);
 }
 function Ts(e) {
@@ -7717,7 +7765,7 @@ function Ts(e) {
     we("WEBAUTHN_INVALID_RESPONSE");
   }
   return (r !== "public-key" || !Ls(t, 1, 1024) || typeof s != "function") && we("WEBAUTHN_INVALID_RESPONSE"), Object.freeze({
-    rawId: new Uint8Array(Reflect.apply(O_, t, [0])),
+    rawId: new Uint8Array(Reflect.apply(P_, t, [0])),
     readExtensionResults() {
       try {
         return Reflect.apply(s, e, []);
@@ -7727,19 +7775,19 @@ function Ts(e) {
     }
   });
 }
-function U_(e) {
+function F_(e) {
   const r = Br(e.readExtensionResults(), ["prf"]), t = r ? Br(r.prf, ["enabled"]) : null;
   (!t || t.enabled !== !0) && we("WEBAUTHN_PRF_REQUIRED");
 }
-function F_(e, r) {
+function M_(e, r) {
   const t = Ts(e), s = t.rawId;
-  D_(s, r) || (Ne(s), we("WEBAUTHN_CREDENTIAL_MISMATCH")), Ne(s);
+  C_(s, r) || (Ne(s), we("WEBAUTHN_CREDENTIAL_MISMATCH")), Ne(s);
   const a = Br(t.readExtensionResults(), ["prf"]), d = a ? Br(a.prf, ["results"]) : null, E = (d ? Br(d.results, ["first"]) : null)?.first;
   Ls(E, 32, 32) || we("WEBAUTHN_PRF_REQUIRED");
-  const I = new Uint8Array(E), P = Reflect.apply(I_, I, []);
+  const I = new Uint8Array(E), P = Reflect.apply(w_, I, []);
   return Ne(I), P;
 }
-function M_({ challenge: e, credentialId: r, prfInput: t, rpId: s, signal: a }) {
+function B_({ challenge: e, credentialId: r, prfInput: t, rpId: s, signal: a }) {
   return {
     publicKey: {
       allowCredentials: [{
@@ -7759,7 +7807,7 @@ async function mo({ assertCurrent: e, credentials: r, credentialId: t, fillRando
   const E = ir(s, 32);
   let I;
   try {
-    I = await r.get(M_({
+    I = await r.get(B_({
       challenge: E,
       credentialId: t,
       prfInput: a,
@@ -7771,9 +7819,9 @@ async function mo({ assertCurrent: e, credentials: r, credentialId: t, fillRando
   } finally {
     Ne(E);
   }
-  return e(), F_(I, t);
+  return e(), M_(I, t);
 }
-function B_(e) {
+function V_(e) {
   if (typeof e != "string") return !1;
   for (let r = 0; r < e.length; r += 1) {
     const t = e.charCodeAt(r);
@@ -7785,21 +7833,21 @@ function B_(e) {
   }
   return !0;
 }
-function V_(e) {
+function H_(e) {
   if (typeof e == "string")
-    return B_(e) || we("INVALID_USERNAME"), dn.encode(e).length > 256 && we("INVALID_USERNAME"), e;
+    return V_(e) || we("INVALID_USERNAME"), dn.encode(e).length > 256 && we("INVALID_USERNAME"), e;
   (!_n(e) || Gt(e) > 256) && we("INVALID_USERNAME");
   try {
-    return A_.decode(e);
+    return m_.decode(e);
   } catch {
     we("INVALID_USERNAME");
   }
 }
 function ai(e) {
-  const r = V_(e).replace(/^ +/u, "").replace(/ +$/u, "").replace(/[A-Z]/gu, (t) => t.toLowerCase());
+  const r = H_(e).replace(/^ +/u, "").replace(/ +$/u, "").replace(/[A-Z]/gu, (t) => t.toLowerCase());
   return As(r) || we("INVALID_USERNAME"), r;
 }
-function H_(e) {
+function z_(e) {
   let r;
   try {
     r = Yo(e?.module);
@@ -7808,15 +7856,15 @@ function H_(e) {
   }
   return (!Ns(r, ["sdn", "sha256"]) || typeof r.sha256 != "function" || !r.sdn || typeof r.sdn != "object") && we("WASM_UNAVAILABLE"), r;
 }
-function z_(e) {
-  const r = H_(e), t = r.sdn, s = e?.storage, a = e?.credentials, d = E_(e?.rng), b = e?.createRequestController, E = e?.releaseRequestController, I = e?.ownHandle, P = e?.destroyHandle, w = e?.ownedHandlesClean, m = e?.now ?? (() => /* @__PURE__ */ new Date()), N = e?.rpHostname ?? e?.window?.location?.hostname ?? globalThis?.location?.hostname, L = T_(e?.rpId, N), D = typeof e?.rpName == "string" && e.rpName !== "" ? e.rpName : N_, U = () => typeof a?.create == "function" && typeof a?.get == "function", M = () => Is(s), C = () => Xd(s), B = (v) => Jd(s, v), Y = (v, k) => (Qd(s, v, k), C().some((R) => R.key === v) && we("STORAGE_WRITE_FAILED"), !0), _ = () => M().active.status === "valid", f = ({ confirmation: v } = {}) => (_() || we("REMEMBER_UNAVAILABLE"), Zd(s, v), M().active.status !== "empty" && we("STORAGE_WRITE_FAILED"), !0), h = async (v) => {
+function $_(e) {
+  const r = z_(e), t = r.sdn, s = e?.storage, a = e?.credentials, d = A_(e?.rng), b = e?.createRequestController, E = e?.releaseRequestController, I = e?.ownHandle, P = e?.destroyHandle, w = e?.ownedHandlesClean, m = e?.now ?? (() => /* @__PURE__ */ new Date()), N = e?.rpHostname ?? e?.window?.location?.hostname ?? globalThis?.location?.hostname, L = x_(e?.rpId, N), D = typeof e?.rpName == "string" && e.rpName !== "" ? e.rpName : L_, U = () => typeof a?.create == "function" && typeof a?.get == "function", M = () => Is(s), C = () => Jd(s), B = (v) => Qd(s, v), Y = (v, k) => (Zd(s, v, k), C().some((R) => R.key === v) && we("STORAGE_WRITE_FAILED"), !0), _ = () => M().active.status === "valid", f = ({ confirmation: v } = {}) => (_() || we("REMEMBER_UNAVAILABLE"), e_(s, v), M().active.status !== "empty" && we("STORAGE_WRITE_FAILED"), !0), h = async (v) => {
     let k;
     try {
       k = await r.sha256(dn.encode(v));
     } catch {
       we("WASM_FAILURE");
     }
-    return _n(k, 32) || we("WASM_FAILURE"), x_(k);
+    return _n(k, 32) || we("WASM_FAILURE"), D_(k);
   };
   return Object.freeze({
     canForget: _,
@@ -7911,7 +7959,7 @@ function z_(e) {
           }
           v();
           const Vt = Ts(It);
-          ue = Vt.rawId, U_(Vt), Ee = await mo({
+          ue = Vt.rawId, F_(Vt), Ee = await mo({
             assertCurrent: v,
             credentialId: ue,
             credentials: a,
@@ -7924,9 +7972,9 @@ function z_(e) {
           v();
           const Dt = Ar(ue), Ht = Object.freeze({
             credentialIdBase64url: Dt,
-            identityScheme: P_,
+            identityScheme: R_,
             schemaVersion: 2,
-            seedProfile: R_,
+            seedProfile: N_,
             storageProfile: Eo,
             usernameSha256: at
           }), wt = ar(Ht);
@@ -7964,7 +8012,7 @@ function z_(e) {
             schemaVersion: 2,
             storageProfile: Eo
           });
-          v(), mt = Kd(s, kt);
+          v(), mt = Yd(s, kt);
           let Ot;
           const Xe = Ce;
           try {
@@ -7981,7 +8029,7 @@ function z_(e) {
           }
           wn(Ot) || we("WASM_FAILURE"), Pe = Ot.handle, (Pe == null || typeof I != "function") && we("WASM_FAILURE"), I(Pe);
           const Zt = ft(Ot.identity);
-          return C_(Z, Zt) || we("IDENTITY_MISMATCH"), v(), (typeof P != "function" || !P(Pe)) && we("DESTRUCTION_FAILED"), Pe = null, (typeof w != "function" || !w(R)) && we("DESTRUCTION_FAILED"), v(), Yd(s, mt), mt = null, Object.freeze({ remembered: !0 });
+          return U_(Z, Zt) || we("IDENTITY_MISMATCH"), v(), (typeof P != "function" || !P(Pe)) && we("DESTRUCTION_FAILED"), Pe = null, (typeof w != "function" || !w(R)) && we("DESTRUCTION_FAILED"), v(), Gd(s, mt), mt = null, Object.freeze({ remembered: !0 });
         } finally {
           Pe !== null && typeof P == "function" && P(Pe), Ne(V), Ne(oe), Ne(pe), Ne(Ee), Ne(Re), Ne(Ce), Ne(Q), Ne(ie), Ne(ue), typeof E == "function" && E(ae);
         }
@@ -7992,7 +8040,7 @@ function z_(e) {
     supported: U
   });
 }
-const Vr = /^[0-9a-f]{64}$/u, $_ = /^[A-Za-z0-9_-]{43}$/u, W_ = Object.freeze([
+const Vr = /^[0-9a-f]{64}$/u, W_ = /^[A-Za-z0-9_-]{43}$/u, j_ = Object.freeze([
   "callbackUri",
   "clientDisplayName",
   "clientId",
@@ -8006,7 +8054,7 @@ const Vr = /^[0-9a-f]{64}$/u, $_ = /^[A-Za-z0-9_-]{43}$/u, W_ = Object.freeze([
   "schemaVersion",
   "state",
   "transactionId"
-]), j_ = Object.freeze(["redirectUri", "schemaVersion", "transactionId"]), q_ = 64 * 1024, K_ = 4 * 1024, Y_ = new TextEncoder(), G_ = new TextDecoder("utf-8", { fatal: !0 });
+]), q_ = Object.freeze(["redirectUri", "schemaVersion", "transactionId"]), K_ = 64 * 1024, Y_ = 4 * 1024, G_ = new TextEncoder(), X_ = new TextDecoder("utf-8", { fatal: !0 });
 class Sn extends Error {
   constructor() {
     super("RELAY_FAILURE"), this.name = "WalletRelayError", this.code = "RELAY_FAILURE";
@@ -8049,8 +8097,8 @@ function ci(e) {
   for (const t of Object.keys(e).sort()) r[t] = ci(e[t]);
   return Object.freeze(r);
 }
-function X_(e, r) {
-  (typeof e != "string" || Y_.encode(e).byteLength > r || e.charCodeAt(0) === 65279) && Oe();
+function J_(e, r) {
+  (typeof e != "string" || G_.encode(e).byteLength > r || e.charCodeAt(0) === 65279) && Oe();
   let t = 0, s = 0;
   const a = () => {
     for (; t < e.length && /[\u0009\u000a\u000d\u0020]/u.test(e[t]); ) t += 1;
@@ -8175,7 +8223,7 @@ function Us(e, r, t = null) {
     );
   }) : s;
 }
-async function J_(e, r, t, s) {
+async function Q_(e, r, t, s) {
   let a = null;
   try {
     (!e || e.status !== r || e.redirected === !0 || e.headers?.get?.("cache-control")?.trim().toLowerCase() !== "no-store" || e.headers?.get?.("content-type")?.trim().toLowerCase() !== "application/json; charset=utf-8" || typeof e.body?.getReader != "function") && Oe(), a = e.body.getReader(), (!a || typeof a.read != "function" || s?.aborted === !0) && Oe();
@@ -8191,7 +8239,7 @@ async function J_(e, r, t, s) {
     let I = 0;
     for (const P of d)
       E.set(P, I), I += P.byteLength;
-    return X_(G_.decode(E), t);
+    return J_(X_.decode(E), t);
   } catch (d) {
     if (Cs(e, a), d instanceof Sn) throw d;
     Oe();
@@ -8203,10 +8251,10 @@ async function J_(e, r, t, s) {
   }
 }
 function wo(e, r) {
-  return Ds(e, W_), (e.schemaVersion !== 1 || e.transactionId !== r || !Vr.test(e.transactionId) || !Vr.test(e.state) || !Vr.test(e.requestSha256) || !$_.test(e.resultToken) || typeof e.callbackUri != "string" || typeof e.clientDisplayName != "string" || typeof e.clientId != "string" || typeof e.expiresAt != "string" || typeof e.operation != "string" || typeof e.registryVersion != "string" || typeof e.requestOrigin != "string") && Oe(), ci(e);
+  return Ds(e, j_), (e.schemaVersion !== 1 || e.transactionId !== r || !Vr.test(e.transactionId) || !Vr.test(e.state) || !Vr.test(e.requestSha256) || !W_.test(e.resultToken) || typeof e.callbackUri != "string" || typeof e.clientDisplayName != "string" || typeof e.clientId != "string" || typeof e.expiresAt != "string" || typeof e.operation != "string" || typeof e.registryVersion != "string" || typeof e.requestOrigin != "string") && Oe(), ci(e);
 }
 function li(e, r) {
-  Ds(r, j_), (r.schemaVersion !== 1 || r.transactionId !== e.transactionId || typeof r.redirectUri != "string") && Oe();
+  Ds(r, q_), (r.schemaVersion !== 1 || r.transactionId !== e.transactionId || typeof r.redirectUri != "string") && Oe();
   const t = `${e.callbackUri}#code=`, s = `&state=${e.state}`;
   (!r.redirectUri.startsWith(t) || !r.redirectUri.endsWith(s)) && Oe();
   const a = r.redirectUri.slice(t.length, r.redirectUri.length - s.length);
@@ -8229,7 +8277,7 @@ function So(e, r, t = void 0) {
   };
   return t !== void 0 && (s.body = JSON.stringify(t)), s;
 }
-function Q_({ fetch: e, location: r }) {
+function Z_({ fetch: e, location: r }) {
   (typeof e != "function" || typeof r?.replace != "function") && Oe();
   const t = /* @__PURE__ */ new Set(), s = async (a, d, b, E) => {
     let I;
@@ -8238,7 +8286,7 @@ function Q_({ fetch: e, location: r }) {
     } catch {
       Oe();
     }
-    return J_(I, b, E, d.signal);
+    return Q_(I, b, E, d.signal);
   };
   return Object.freeze({
     async fetchTransaction(a, { signal: d } = {}) {
@@ -8247,7 +8295,7 @@ function Q_({ fetch: e, location: r }) {
         `/relay/v1/transactions/${a}`,
         So("GET", d),
         200,
-        q_
+        K_
       );
       return wo(b, a);
     },
@@ -8261,7 +8309,7 @@ function Q_({ fetch: e, location: r }) {
           transactionId: E.transactionId
         }),
         201,
-        K_
+        Y_
       ), P = li(E, I);
       return t.clear(), t.add(P.redirectUri), P;
     },
@@ -8281,7 +8329,7 @@ function Q_({ fetch: e, location: r }) {
     }
   });
 }
-const Fs = Uint8Array, Z_ = Fs.prototype.fill, mr = new TextEncoder();
+const Fs = Uint8Array, eh = Fs.prototype.fill, mr = new TextEncoder();
 class Ue extends Error {
   constructor(r) {
     super(r), this.name = "WalletOriginError", this.code = r;
@@ -8296,7 +8344,7 @@ function Ir(e) {
 function _t(e) {
   if (e instanceof Fs)
     try {
-      Z_.call(e, 0);
+      eh.call(e, 0);
     } catch {
     }
 }
@@ -8385,7 +8433,7 @@ function Sr(e, r) {
     }
   }
 }
-function eh(e) {
+function th(e) {
   let r;
   try {
     r = Yo(e);
@@ -8399,7 +8447,7 @@ function nn(e) {
   const r = e?.AbortController ?? globalThis.AbortController;
   return typeof r == "function" ? new r() : null;
 }
-class th {
+class rh {
   #r = !1;
   #c;
   #_ = null;
@@ -8443,8 +8491,8 @@ class th {
     wasm: w,
     window: m
   }) {
-    const N = eh(w);
-    this.#c = N.capabilities, this.#T = N.sha256, this.#L = a, this.#d = d, this.#n = t, this.#s = m, this.#y = z_({
+    const N = th(w);
+    this.#c = N.capabilities, this.#T = N.sha256, this.#L = a, this.#d = d, this.#n = t, this.#s = m, this.#y = $_({
       createRequestController: () => {
         const L = nn(this.#s);
         return L && (this.#l.add(L), this.#O.add(L)), L;
@@ -8607,7 +8655,7 @@ class th {
       b && this.#l.add(b);
       try {
         this.#m(t.epoch, t.permit), it({ document: this.#n, window: this.#s }), typeof this.#d?.publishResult != "function" && ne("RELAY_UNAVAILABLE");
-        const E = r === "connected" ? t.connectedResult : Cd();
+        const E = r === "connected" ? t.connectedResult : Ud();
         let I;
         try {
           I = await this.#d.publishResult(t.transaction, E, {
@@ -8896,7 +8944,7 @@ class th {
       U == null && ne("WASM_FAILURE"), this.#a.add(U);
       let M;
       try {
-        M = i_(D.identity, { accountIndex: r, profile: d });
+        M = o_(D.identity, { accountIndex: r, profile: d });
       } catch {
         const C = this.#b(U);
         D = null, C || (this.revokeNow("native-destruction-failed"), ne("DESTRUCTION_FAILED")), ne("WASM_FAILURE");
@@ -8943,7 +8991,7 @@ class th {
         sha256: this.#T,
         window: this.#s
       });
-      this.#A(s, d), it({ document: this.#n, window: this.#s }), this.#_ = xd({
+      this.#A(s, d), it({ document: this.#n, window: this.#s }), this.#_ = Dd({
         binding: E.binding,
         document: this.#n,
         identity: a,
@@ -8956,7 +9004,7 @@ class th {
         sha256: this.#T,
         window: this.#s
       }), this.#A(s, d), it({ document: this.#n, window: this.#s });
-      const I = await Dd({
+      const I = await Cd({
         assertCurrent: () => this.#A(s, d),
         binding: E.binding,
         handle: s,
@@ -9073,7 +9121,7 @@ class th {
     })(), s;
   }
 }
-const rh = [
+const nh = [
   {
     allowedOperations: [
       "sdn.wallet.account.v1",
@@ -9414,11 +9462,11 @@ const rh = [
     ],
     requestOrigin: "https://review.spacedatanetwork.org"
   }
-], nh = "7674bfb019753eee8387f064467c0f6f2ff6babd1ecabbd70dc585afc31fbc1a", ih = 1, Ms = {
-  clients: rh,
-  registryReleaseSha256: nh,
-  schemaVersion: ih
-}, oh = new TextEncoder(), sh = /^[0-9a-f]{64}$/u, ah = /^[a-z0-9]+(?:-[a-z0-9]+)*$/u, ch = Object.freeze({
+], ih = "7674bfb019753eee8387f064467c0f6f2ff6babd1ecabbd70dc585afc31fbc1a", oh = 1, Ms = {
+  clients: nh,
+  registryReleaseSha256: ih,
+  schemaVersion: oh
+}, sh = new TextEncoder(), ah = /^[0-9a-f]{64}$/u, ch = /^[a-z0-9]+(?:-[a-z0-9]+)*$/u, lh = Object.freeze({
   "sdn.auth.publish-request.v1": Object.freeze({
     audience: null,
     registryRow: "spaceaware-publish-request-v1",
@@ -9464,11 +9512,11 @@ const rh = [
 }), vt = Object.freeze([
   "sdn.wallet.account.v1",
   "sdn.wallet.connect.v1"
-]), lh = Object.freeze([
+]), dh = Object.freeze([
   "sdn.auth.jcs-envelope.v2",
   "sdn.auth.raw-challenge.v1",
   ...vt
-]), dh = Object.freeze(["sdn.auth.publish-request.v1", ...vt]), _h = Object.freeze([
+]), _h = Object.freeze(["sdn.auth.publish-request.v1", ...vt]), hh = Object.freeze([
   "sdn.asset-review.authority-activation.v1",
   "sdn.asset-review.decision.v1",
   ...vt
@@ -9478,12 +9526,12 @@ const rh = [
   Object.freeze(["sdn-flatbuffers-pages-v1", "FlatBuffers Documentation", "https://digitalarsenal.github.io", "https://digitalarsenal.github.io/flatbuffers/wallet-callback.html", vt]),
   Object.freeze(["sdn-flatsql-pages-v1", "FlatSQL Documentation", "https://digitalarsenal.github.io", "https://digitalarsenal.github.io/flatsql/wallet-callback.html", vt]),
   Object.freeze(["sdn-module-sdk-pages-v1", "Space Data Module SDK", "https://digitalarsenal.github.io", "https://digitalarsenal.github.io/space-data-module-sdk/wallet-callback.html", vt]),
-  Object.freeze(["spaceaware-web-v1", "SpaceAware", "https://spaceaware.io", "https://spaceaware.io/wallet/callback", dh]),
-  Object.freeze(["sdn-node-console-v1", "SDN Node Console", "https://sdn.spaceaware.io", "https://sdn.spaceaware.io/wallet/callback", lh]),
+  Object.freeze(["spaceaware-web-v1", "SpaceAware", "https://spaceaware.io", "https://spaceaware.io/wallet/callback", _h]),
+  Object.freeze(["sdn-node-console-v1", "SDN Node Console", "https://sdn.spaceaware.io", "https://sdn.spaceaware.io/wallet/callback", dh]),
   Object.freeze(["orbpro-pages-v1", "OrbPro", "https://digitalarsenal.github.io", "https://digitalarsenal.github.io/OrbPro/wallet-callback.html", vt]),
   Object.freeze(["sdn-asset-models-pages-v1", "SDN Asset Models", "https://digitalarsenal.github.io", "https://digitalarsenal.github.io/asset-models/wallet-callback.html", vt]),
-  Object.freeze(["sdn-asset-review-v1", "SDN Asset Review", "https://review.spacedatanetwork.org", "https://review.spacedatanetwork.org/wallet/callback", _h])
-]), hh = Object.freeze([
+  Object.freeze(["sdn-asset-review-v1", "SDN Asset Review", "https://review.spacedatanetwork.org", "https://review.spacedatanetwork.org/wallet/callback", hh])
+]), uh = Object.freeze([
   Object.freeze({
     audience: null,
     clientId: "spaceaware-web-v1",
@@ -9548,10 +9596,10 @@ function hn(e, r, t) {
 function ut(e) {
   return e === null || typeof e == "boolean" || typeof e == "string" ? JSON.stringify(e) : typeof e == "number" ? (Number.isFinite(e) || De("registry contains a non-finite number"), JSON.stringify(e)) : Array.isArray(e) ? `[${e.map(ut).join(",")}]` : (Pi(e) || De("registry contains an unsupported value"), `{${Object.keys(e).sort().map((r) => `${JSON.stringify(r)}:${ut(e[r])}`).join(",")}}`);
 }
-async function uh(e) {
+async function fh(e) {
   const r = globalThis.crypto?.subtle;
   r || De("Web Crypto SHA-256 is unavailable");
-  const t = new Uint8Array(await r.digest("SHA-256", oh.encode(e)));
+  const t = new Uint8Array(await r.digest("SHA-256", sh.encode(e)));
   return Array.from(t, (s) => s.toString(16).padStart(2, "0")).join("");
 }
 function kn(e) {
@@ -9561,7 +9609,7 @@ function kn(e) {
   for (const t of Object.keys(e).sort()) r[t] = kn(e[t]);
   return Object.freeze(r);
 }
-function fh(e, r) {
+function ph(e, r) {
   (typeof e != "string" || !e.startsWith("https://") || e.includes("*")) && De(`${r} must be exact HTTPS`);
   let t;
   try {
@@ -9571,7 +9619,7 @@ function fh(e, r) {
   }
   (t.protocol !== "https:" || t.username || t.password || t.port || t.origin !== e || t.pathname !== "/" || t.search || t.hash) && De(`${r} must be an exact HTTPS origin`);
 }
-function ph(e, r) {
+function yh(e, r) {
   (typeof e != "string" || !e.startsWith("https://") || e.includes("*")) && De("callbackUri must be exact HTTPS");
   let t;
   try {
@@ -9581,8 +9629,8 @@ function ph(e, r) {
   }
   (t.protocol !== "https:" || t.username || t.password || t.port || t.origin !== r || t.search || t.hash || t.href !== e) && De("callbackUri must be exact and same-origin");
 }
-function yh(e) {
-  hn(e, ["clients", "registryReleaseSha256", "schemaVersion"], "registry"), e.schemaVersion !== 1 && De("registry schemaVersion must be 1"), (typeof e.registryReleaseSha256 != "string" || !sh.test(e.registryReleaseSha256)) && De("registryReleaseSha256 must be lowercase SHA-256"), (!Array.isArray(e.clients) || e.clients.length !== Oo.length) && De("registry must contain exactly the reviewed clients");
+function gh(e) {
+  hn(e, ["clients", "registryReleaseSha256", "schemaVersion"], "registry"), e.schemaVersion !== 1 && De("registry schemaVersion must be 1"), (typeof e.registryReleaseSha256 != "string" || !ah.test(e.registryReleaseSha256)) && De("registryReleaseSha256 must be lowercase SHA-256"), (!Array.isArray(e.clients) || e.clients.length !== Oo.length) && De("registry must contain exactly the reviewed clients");
   const r = /* @__PURE__ */ new Set(), t = /* @__PURE__ */ new Set();
   e.clients.forEach((s, a) => {
     hn(s, [
@@ -9595,7 +9643,7 @@ function yh(e) {
       "requestOrigin"
     ], `client ${a}`);
     const [d, b, E, I, P] = Oo[a];
-    (s.clientId !== d || s.clientDisplayName !== b || s.requestOrigin !== E || s.callbackUri !== I) && De(`client ${a} differs from the reviewed row`), (!ah.test(s.clientId) || r.has(s.clientId)) && De("clientId must be unique and canonical"), r.add(s.clientId), (typeof s.clientDisplayName != "string" || s.clientDisplayName.length < 1 || s.clientDisplayName.length > 80) && De("clientDisplayName is invalid"), fh(s.requestOrigin, "requestOrigin"), ph(s.callbackUri, s.requestOrigin), (!Array.isArray(s.allowedOperations) || ut(s.allowedOperations) !== ut(P)) && De(`${s.clientId} allowedOperations differ from the reviewed allowlist`), (!Array.isArray(s.operationBindings) || s.operationBindings.length !== P.length) && De(`${s.clientId} operationBindings differ from the reviewed allowlist`), s.operationBindings.forEach((m, N) => {
+    (s.clientId !== d || s.clientDisplayName !== b || s.requestOrigin !== E || s.callbackUri !== I) && De(`client ${a} differs from the reviewed row`), (!ch.test(s.clientId) || r.has(s.clientId)) && De("clientId must be unique and canonical"), r.add(s.clientId), (typeof s.clientDisplayName != "string" || s.clientDisplayName.length < 1 || s.clientDisplayName.length > 80) && De("clientDisplayName is invalid"), ph(s.requestOrigin, "requestOrigin"), yh(s.callbackUri, s.requestOrigin), (!Array.isArray(s.allowedOperations) || ut(s.allowedOperations) !== ut(P)) && De(`${s.clientId} allowedOperations differ from the reviewed allowlist`), (!Array.isArray(s.operationBindings) || s.operationBindings.length !== P.length) && De(`${s.clientId} operationBindings differ from the reviewed allowlist`), s.operationBindings.forEach((m, N) => {
       hn(m, [
         "audience",
         "maxLifetimeSeconds",
@@ -9606,7 +9654,7 @@ function yh(e) {
       ], `${s.clientId} operation ${N}`);
       const L = P[N];
       m.operation !== L && De(`${s.clientId} operation allowlist order or value changed`);
-      const D = ch[m.operation];
+      const D = lh[m.operation];
       D || De("unknown registry operation"), (m.maxLifetimeSeconds !== 300 || m.audience !== D.audience || m.registryRow !== D.registryRow || m.serviceActivationState !== D.serviceActivationState || m.serviceInstance !== D.serviceInstance) && De(`${s.clientId} operation policy differs from the reviewed binding`);
       const U = `${s.clientId}\0${s.requestOrigin}\0${m.operation}`;
       t.has(U) && De("duplicate registry binding"), t.add(U);
@@ -9614,7 +9662,7 @@ function yh(e) {
     const w = [...new Set(s.operationBindings.map(({ audience: m }) => m).filter((m) => m !== null))].sort();
     (!Array.isArray(s.audiences) || ut(s.audiences) !== ut(w)) && De(`${s.clientId} audiences differ from operationBindings`), ut(s.allowedOperations) !== ut(s.operationBindings.map(({ operation: m }) => m)) && De(`${s.clientId} allowedOperations differ from operationBindings`);
   });
-  for (const s of hh) {
+  for (const s of uh) {
     const a = e.clients.find((E) => E.clientId === s.clientId && E.requestOrigin === s.requestOrigin), d = a?.operationBindings.find((E) => E.operation === s.operation), b = d && {
       audience: d.audience,
       clientId: a.clientId,
@@ -9629,10 +9677,10 @@ function yh(e) {
   }
   return kn(e);
 }
-const { registryReleaseSha256: gh, ...vh } = Ms, bh = await uh(ut(vh));
-bh !== gh && De("registry release SHA-256 mismatch");
-const Po = yh(Ms);
-function Eh(e) {
+const { registryReleaseSha256: vh, ...bh } = Ms, Eh = await fh(ut(bh));
+Eh !== vh && De("registry release SHA-256 mismatch");
+const Po = gh(Ms);
+function Ah(e) {
   const r = hn(e, ["clientId", "operation", "requestOrigin"], "registry lookup");
   (typeof r.clientId != "string" || typeof r.requestOrigin != "string" || typeof r.operation != "string") && De("registry lookup fields must be strings");
   const t = Po.clients.find((a) => a.clientId === r.clientId && a.requestOrigin === r.requestOrigin), s = t?.operationBindings.find((a) => a.operation === r.operation);
@@ -9650,11 +9698,11 @@ function Eh(e) {
     serviceInstance: s.serviceInstance
   });
 }
-const Ah = /^\/transaction\/([0-9a-f]{64})$/u, Wn = new TextEncoder(), mh = Uint8Array.prototype.fill, Ih = Object.freeze({ resolveRegistryBinding: Eh });
+const mh = /^\/transaction\/([0-9a-f]{64})$/u, Wn = new TextEncoder(), Ih = Uint8Array.prototype.fill, wh = Object.freeze({ resolveRegistryBinding: Ah });
 function Ro(e) {
   if (e instanceof Uint8Array)
     try {
-      mh.call(e, 0);
+      Ih.call(e, 0);
     } catch {
     }
 }
@@ -9766,7 +9814,7 @@ function Bs({
     }
     if (!Array.isArray(M) || M.length === 0)
       return a.replaceChildren(), a.hidden = !0, !1;
-    a.hidden = !1, P = l_(a, M, { document: t });
+    a.hidden = !1, P = d_(a, M, { document: t });
     const C = E;
     for (const B of P.rows) {
       const { entry: Y } = B, _ = async (g) => {
@@ -9848,7 +9896,7 @@ function Bs({
     refresh: D
   });
 }
-function wh({
+function Sh({
   clipboard: e = globalThis.navigator?.clipboard,
   controller: r = null,
   document: t,
@@ -10013,7 +10061,7 @@ function Vs({
     remove: M
   });
 }
-function Sh({ document: e, mount: r = null, title: t = "Choose legacy wallet profile" }) {
+function kh({ document: e, mount: r = null, title: t = "Choose legacy wallet profile" }) {
   const s = r ?? e?.body;
   if (!e?.createElement || !s?.append) throw new Ue("DOM_UNAVAILABLE");
   const a = e.createElement("section");
@@ -10098,7 +10146,7 @@ function zs(e, r = "The wallet request could not be completed. Close this window
   const b = e.createElement("p");
   b.textContent = r, a.append(d, b), s.replaceChildren(a);
 }
-function kh({
+function Oh({
   clipboard: e,
   controller: r,
   document: t,
@@ -10111,7 +10159,7 @@ function kh({
 }) {
   const P = t.createElement("section");
   P.className = "wallet-account";
-  const w = t.createElement("div"), m = a_(w, s, { document: t }), N = t.createElement("section");
+  const w = t.createElement("div"), m = c_(w, s, { document: t }), N = t.createElement("section");
   N.className = "wallet-approval-card";
   const L = t.createElement("h2");
   L.textContent = "Asset review approval";
@@ -10123,14 +10171,14 @@ function kh({
   B.type = "button", B.dataset.walletAction = "return-to-site", B.textContent = "Return to site";
   const Y = t.createElement("section");
   Y.className = "wallet-legacy-migration";
-  const _ = u_(Y, { document: t });
+  const _ = f_(Y, { document: t });
   let f = !1;
   try {
     f = r.canForgetRememberedWallet?.() === !0;
   } catch {
     f = !1;
   }
-  const h = f ? t.createElement("section") : null, u = h ? c_(h, { document: t }) : null;
+  const h = f ? t.createElement("section") : null, u = h ? l_(h, { document: t }) : null;
   u && (u.launch.dataset.walletAction = "forget-stored-wallet");
   const g = Bs({
     clipboard: e,
@@ -10138,7 +10186,7 @@ function kh({
     document: t
   }), v = t.createElement("p");
   v.className = "wallet-account-exit-status", P.append(w, N), h && P.append(h), g?.hasEntries && P.append(g.container), P.append(B, C, Y), b.replaceChildren(P);
-  const k = new __({
+  const k = new h_({
     credentialRound: async (fe) => {
       const Te = d({
         controller: null,
@@ -10189,7 +10237,7 @@ function kh({
     try {
       const nt = await k.confirm();
       Pe(Te);
-      const $e = await d_(nt, {
+      const $e = await __(nt, {
         assertCurrent: () => Pe(Te),
         clipboard: e,
         container: U,
@@ -10235,7 +10283,7 @@ function kh({
         if (!jn(lt)) throw new Error("invalid legacy credentials");
         _r = mt(Wn.encode(lt)), cr(ze.form, [ze.mnemonicControl]), ze.section?.remove?.(), hr = { mnemonicUtf8: _r };
       }
-      if ($e?.promise && R.delete($e), Ae = await h_({
+      if ($e?.promise && R.delete($e), Ae = await u_({
         accountIndex: 0,
         credentials: hr,
         operation: "sdn.auth.raw-challenge.v1",
@@ -10339,24 +10387,24 @@ function kh({
     )
   });
 }
-function Oh(e) {
+function Ph(e) {
   const r = e?.pathname, t = e?.search ?? "", s = e?.hash ?? "";
   if (typeof r != "string" || t !== "" || s !== "") throw No();
-  const a = Ah.exec(r);
+  const a = mh.exec(r);
   if (!a) throw No();
   return a[1];
 }
-function Ph(e) {
-  const r = e?.window ?? globalThis.window, t = e?.document ?? r?.document ?? globalThis.document, s = e?.mount ?? t?.body, a = typeof r?.fetch == "function" ? r.fetch.bind(r) : typeof globalThis.fetch == "function" ? globalThis.fetch.bind(globalThis) : null, d = e?.relay ?? (e?.controller ? null : Q_({
+function Rh(e) {
+  const r = e?.window ?? globalThis.window, t = e?.document ?? r?.document ?? globalThis.document, s = e?.mount ?? t?.body, a = typeof r?.fetch == "function" ? r.fetch.bind(r) : typeof globalThis.fetch == "function" ? globalThis.fetch.bind(globalThis) : null, d = e?.relay ?? (e?.controller ? null : Z_({
     fetch: e?.fetch ?? a,
     location: e?.location ?? r?.location
-  })), b = e?.registry ?? Ih, E = e?.controller ?? new th({
+  })), b = e?.registry ?? wh, E = e?.controller ?? new rh({
     ...e,
     document: t,
     registry: b,
     relay: d,
     window: r
-  }), I = e?.credentialPrompt ?? ((R) => wh(R));
+  }), I = e?.credentialPrompt ?? ((R) => Sh(R));
   let P = null, w = null, m = null, N = null, L = null, D = [], U = 0, M = !1;
   const C = () => {
     (P?.destroy?.() ?? !0) && (P = null), w = null;
@@ -10399,14 +10447,14 @@ function Ph(e) {
       const R = U;
       return M ? (N = Promise.reject(new Ue("STALE_CONTROLLER")), N) : (N = (async () => {
         try {
-          const F = Oh(r?.location);
+          const F = Ph(r?.location);
           if (typeof E.prepare != "function" || typeof E.executePrepared != "function" || typeof E.unlockPassword != "function") {
             const ae = await E.execute(F);
             return h(R), ae;
           }
           const V = await E.prepare(F);
           if (h(R), V.transaction.operation === "sdn.auth.raw-challenge.v1") {
-            const ae = Sh({
+            const ae = kh({
               document: t,
               mount: s,
               title: `Choose the legacy profile for ${V.binding.clientDisplayName}`
@@ -10465,7 +10513,7 @@ function Ph(e) {
             }
           }
           const ee = await E.executePrepared(V);
-          return h(R), u(m), V.transaction.operation === "sdn.wallet.account.v1" ? (w = E.copyPublicIdentity(), P = kh({
+          return h(R), u(m), V.transaction.operation === "sdn.wallet.account.v1" ? (w = E.copyPublicIdentity(), P = Oh({
             clipboard: e?.clipboard ?? globalThis.navigator?.clipboard,
             controller: E,
             document: t,
@@ -10494,24 +10542,24 @@ function Ph(e) {
     }
   });
 }
-async function Rh(e) {
-  const r = Ph(e);
+async function Nh(e) {
+  const r = Rh(e);
   return await r.start(), r;
 }
 const un = document.querySelector("[data-wallet-origin-root]") ?? document.body;
-async function Nh() {
+async function Lh() {
   if (window.top !== window) throw new Error("Wallet origin cannot run in a frame");
-  if (getComputedStyle(document.documentElement).getPropertyValue("--sdn-wallet-origin-style-ready").trim() !== '"2.0.33"') throw new Error("Wallet origin style integrity failed");
-  const r = await Nl();
-  await Rh({ document, mount: un, wasm: r, window });
+  if (getComputedStyle(document.documentElement).getPropertyValue("--sdn-wallet-origin-style-ready").trim() !== '"2.1.0"') throw new Error("Wallet origin style integrity failed");
+  const r = await Ll();
+  await Nh({ document, mount: un, wasm: r, window });
 }
-Nh().catch(() => {
+Lh().catch(() => {
   if (un.childElementCount === 1 && un.firstElementChild?.classList?.contains("wallet-terminal-error") === !0)
     return;
   const e = document.createElement("p");
   e.className = "wallet-error", e.textContent = "The wallet could not start. Close this window and try again.", un.replaceChildren(e);
 });
-var Lh = (() => {
+var Th = (() => {
   var e = import.meta.url;
   return function(r = {}) {
     if (!(r.wasmBinary instanceof Uint8Array)) throw new Error("Verified WASM bytes are required");
@@ -12738,7 +12786,7 @@ var Lh = (() => {
     return qi(), r.ready;
   };
 })();
-const Th = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
+const xh = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
-  default: Lh
+  default: Th
 }, Symbol.toStringTag, { value: "Module" }));