hd-wallet-ui 2.2.1 → 2.2.2

package/dist/wallet-origin/index.js

@@ -1,17 +1,17 @@
-import { getWalletOriginCapabilities as ti } from "hd-wallet-wasm";
-const er = Object.freeze({
+import { getWalletOriginCapabilities as tr } from "hd-wallet-wasm";
+const ei = Object.freeze({
   cm: 0.01,
   km: 1e3,
   m: 1,
   mm: 1e-3
-}), tr = Object.freeze({
-  metersPerSourceUnit: er,
+}), ti = Object.freeze({
+  metersPerSourceUnit: ei,
   quaternionNormTolerance: 1e-6,
   scaleComponentExclusiveMin: 0,
   scaleComponentInclusiveMax: 1e6,
   translationComponentAbsMax: 1e6,
   upAxes: Object.freeze(["X_UP", "Y_UP", "Z_UP"])
-}), nr = Object.freeze({ reviewedTransform: tr, schemaVersion: 1 }), Ee = new TextEncoder(), ni = Object.getPrototypeOf(Uint8Array.prototype), ir = Object.getOwnPropertyDescriptor(ni, "buffer").get, rr = Object.getOwnPropertyDescriptor(ni, "length").get, sr = Object.getOwnPropertyDescriptor(ArrayBuffer.prototype, "byteLength").get, vn = typeof SharedArrayBuffer > "u" ? null : Object.getOwnPropertyDescriptor(SharedArrayBuffer.prototype, "byteLength").get, we = "sdn-bip32-slip10-purpose-v1", vt = "password-scrypt-v2", ke = "ed25519-over-sha256-jcs-v1", Sn = "ed25519-raw-32-v1", or = "ed25519-sdn-signed-request-v2", On = ["protocolVersion", "providerOrigin", "method", "requestUri", "bodySha256", "bodyBytes", "schema", "entityId", "entityName", "documentCount"], Rn = ["schemaVersion", "keyId", "identityScheme", "algorithm", "encoding", "signatureProfile", "publicKeyHex", "signatureHex", "requestDigestSha256", "challengeId", "challengeBase64url"], ii = "https://review.spacedatanetwork.org", ri = "sdn-asset-review-v1", ar = "asset-review:assets.ipfs.01", cr = "asset-review-authority:assets.ipfs.01", Wt = "sdn-login:sdn.spaceaware.io", lr = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/u, te = /^[0-9a-f]{64}$/u, rn = /^[0-9a-f]{128}$/u, je = /^sha256:[0-9a-f]{64}$/u, ur = /^[1-9A-HJ-NP-Za-km-z]+$/u, dr = /^b[a-z2-7]{58}$/u, zt = "abcdefghijklmnopqrstuvwxyz234567", si = 131072, fr = [
+}), ni = Object.freeze({ reviewedTransform: ti, schemaVersion: 1 }), Ee = new TextEncoder(), nr = Object.getPrototypeOf(Uint8Array.prototype), ri = Object.getOwnPropertyDescriptor(nr, "buffer").get, ii = Object.getOwnPropertyDescriptor(nr, "length").get, si = Object.getOwnPropertyDescriptor(ArrayBuffer.prototype, "byteLength").get, vn = typeof SharedArrayBuffer > "u" ? null : Object.getOwnPropertyDescriptor(SharedArrayBuffer.prototype, "byteLength").get, we = "sdn-bip32-slip10-purpose-v1", vt = "password-scrypt-v2", ke = "ed25519-over-sha256-jcs-v1", Sn = "ed25519-raw-32-v1", oi = "ed25519-sdn-signed-request-v2", Rn = ["protocolVersion", "providerOrigin", "method", "requestUri", "bodySha256", "bodyBytes", "schema", "entityId", "entityName", "documentCount"], On = ["schemaVersion", "keyId", "identityScheme", "algorithm", "encoding", "signatureProfile", "publicKeyHex", "signatureHex", "requestDigestSha256", "challengeId", "challengeBase64url"], rr = "https://review.spacedatanetwork.org", ir = "sdn-asset-review-v1", ai = "asset-review:assets.ipfs.01", ci = "asset-review-authority:assets.ipfs.01", Wt = "sdn-login:sdn.spaceaware.io", li = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/u, te = /^[0-9a-f]{64}$/u, rn = /^[0-9a-f]{128}$/u, je = /^sha256:[0-9a-f]{64}$/u, ui = /^[1-9A-HJ-NP-Za-km-z]+$/u, di = /^b[a-z2-7]{58}$/u, Ht = "abcdefghijklmnopqrstuvwxyz234567", sr = 131072, fi = [
   "accountFingerprint",
   "accountIndex",
   "accountLabel",
@@ -21,7 +21,7 @@ const er = Object.freeze({
   "keys",
   "schemaVersion",
   "seedProfile"
-], pr = [
+], pi = [
   "bip32Fingerprint",
   "curve",
   "derivation",
@@ -33,12 +33,12 @@ const er = Object.freeze({
   "purpose",
   "seedProfile",
   "signatureProfile"
-], hr = [
+], hi = [
   "connectionExpiresAt",
   "event",
   "identity",
   "schemaVersion"
-], yr = [
+], yi = [
   "algorithm",
   "encoding",
   "identityScheme",
@@ -46,7 +46,7 @@ const er = Object.freeze({
   "schemaVersion",
   "signatureHex",
   "signatureProfile"
-], mr = [
+], mi = [
   "algorithm",
   "canonicalEnvelope",
   "encoding",
@@ -70,7 +70,7 @@ const er = Object.freeze({
   "requestOrigin",
   "serviceInstance",
   "signatureProfile"
-], Ht = [
+], zt = [
   "audience",
   "candidateKey",
   "challengeId",
@@ -86,7 +86,7 @@ const er = Object.freeze({
   "previousDecisionHead",
   "protocolVersion",
   "requestOrigin"
-], gr = [
+], gi = [
   "metersPerSourceUnit",
   "rotation",
   "scale",
@@ -102,25 +102,25 @@ function lt(e) {
   const t = Object.getPrototypeOf(e);
   return t === Object.prototype || t === null;
 }
-function re(e, t) {
+function ie(e, t) {
   typeof e != "string" && y(`${t} must be a string`);
   for (let n = 0; n < e.length; n += 1) {
-    const i = e.charCodeAt(n);
-    let r = i;
-    if (i >= 55296 && i <= 56319) {
+    const r = e.charCodeAt(n);
+    let i = r;
+    if (r >= 55296 && r <= 56319) {
       const s = e.charCodeAt(n + 1);
-      s >= 56320 && s <= 57343 || y(`${t} contains an unpaired surrogate`), r = 65536 + (i - 55296 << 10) + (s - 56320), n += 1;
-    } else i >= 56320 && i <= 57343 && y(`${t} contains an unpaired surrogate`);
-    ((r & 65535) === 65534 || (r & 65535) === 65535 || r >= 64976 && r <= 65007) && y(`${t} contains a Unicode noncharacter`);
+      s >= 56320 && s <= 57343 || y(`${t} contains an unpaired surrogate`), i = 65536 + (r - 55296 << 10) + (s - 56320), n += 1;
+    } else r >= 56320 && r <= 57343 && y(`${t} contains an unpaired surrogate`);
+    ((i & 65535) === 65534 || (i & 65535) === 65535 || i >= 64976 && i <= 65007) && y(`${t} contains a Unicode noncharacter`);
   }
   return e;
 }
-function oi(e) {
-  typeof e != "string" && y("wire JSON must be a string"), Ee.encode(e).byteLength > si && y("wire JSON is too large"), e.charCodeAt(0) === 65279 && y("wire JSON must not contain a BOM");
+function or(e) {
+  typeof e != "string" && y("wire JSON must be a string"), Ee.encode(e).byteLength > sr && y("wire JSON is too large"), e.charCodeAt(0) === 65279 && y("wire JSON must not contain a BOM");
   let t = 0, n = 0;
-  const i = () => {
+  const r = () => {
     for (; t < e.length && /[\u0009\u000a\u000d\u0020]/u.test(e[t]); ) t += 1;
-  }, r = () => {
+  }, i = () => {
     e[t] !== '"' && y("invalid JSON string");
     const o = t;
     for (t += 1; t < e.length; ) {
@@ -133,24 +133,24 @@ function oi(e) {
         } catch {
           y("invalid JSON string");
         }
-        return re(l, "JSON string");
+        return ie(l, "JSON string");
       }
       c < 32 && y("invalid JSON control character"), c === 92 && (t += 1, t >= e.length && y("unterminated JSON escape")), t += 1;
     }
     y("unterminated JSON string");
   }, s = (o = 0) => {
-    o > 32 && y("wire JSON nesting is too deep"), n += 1, n > 4096 && y("wire JSON contains too many values"), i();
+    o > 32 && y("wire JSON nesting is too deep"), n += 1, n > 4096 && y("wire JSON contains too many values"), r();
     const c = e[t];
-    if (c === '"') return r();
+    if (c === '"') return i();
     if (c === "{") {
       t += 1;
       const u = /* @__PURE__ */ Object.create(null), p = /* @__PURE__ */ new Set();
-      if (i(), e[t] === "}")
+      if (r(), e[t] === "}")
         return t += 1, u;
       for (; t < e.length; ) {
-        i();
-        const f = r();
-        if (p.has(f) && y(`duplicate JSON field: ${f}`), p.add(f), i(), e[t] !== ":" && y("missing JSON object colon"), t += 1, u[f] = s(o + 1), i(), e[t] === "}")
+        r();
+        const f = i();
+        if (p.has(f) && y(`duplicate JSON field: ${f}`), p.add(f), r(), e[t] !== ":" && y("missing JSON object colon"), t += 1, u[f] = s(o + 1), r(), e[t] === "}")
           return t += 1, u;
         e[t] !== "," && y("invalid JSON object separator"), t += 1;
       }
@@ -159,10 +159,10 @@ function oi(e) {
     if (c === "[") {
       t += 1;
       const u = [];
-      if (i(), e[t] === "]")
+      if (r(), e[t] === "]")
         return t += 1, u;
       for (; t < e.length; ) {
-        if (u.push(s(o + 1)), i(), e[t] === "]")
+        if (u.push(s(o + 1)), r(), e[t] === "]")
           return t += 1, u;
         e[t] !== "," && y("invalid JSON array separator"), t += 1;
       }
@@ -176,29 +176,29 @@ function oi(e) {
     const d = Number(l[0]);
     return Number.isFinite(d) || y("wire JSON number must be finite"), d;
   };
-  i();
+  r();
   const a = s();
-  return i(), t !== e.length && y("wire JSON contains trailing bytes"), a;
+  return r(), t !== e.length && y("wire JSON contains trailing bytes"), a;
 }
-function ai(e) {
-  return typeof e == "string" ? oi(e) : e;
+function ar(e) {
+  return typeof e == "string" ? or(e) : e;
 }
-function Ar(e, t) {
+function Ai(e, t) {
   if (e.byteLength !== t.byteLength) return !1;
   let n = 0;
-  for (let i = 0; i < e.byteLength; i += 1) n |= e[i] ^ t[i];
+  for (let r = 0; r < e.byteLength; r += 1) n |= e[r] ^ t[r];
   return n === 0;
 }
-function H(e, t, n) {
-  const i = ai(e);
-  lt(i) || y(`${n} must be a JSON object`), Object.getOwnPropertySymbols(i).length !== 0 && y(`${n} has an unknown symbol field`);
-  const r = Object.getOwnPropertyNames(i).sort(), s = [...t].sort(), a = Ee.encode(r.join("\0")), o = Ee.encode(s.join("\0"));
-  Ar(a, o) || y(`${n} has missing or unknown fields`);
-  for (const c of r) {
-    const l = Object.getOwnPropertyDescriptor(i, c);
+function z(e, t, n) {
+  const r = ar(e);
+  lt(r) || y(`${n} must be a JSON object`), Object.getOwnPropertySymbols(r).length !== 0 && y(`${n} has an unknown symbol field`);
+  const i = Object.getOwnPropertyNames(r).sort(), s = [...t].sort(), a = Ee.encode(i.join("\0")), o = Ee.encode(s.join("\0"));
+  Ai(a, o) || y(`${n} has missing or unknown fields`);
+  for (const c of i) {
+    const l = Object.getOwnPropertyDescriptor(r, c);
     (!l || !l.enumerable || !("value" in l)) && y(`${n}.${c} must be an enumerable data field`), l.value === void 0 && y(`${n}.${c} must not be undefined`);
   }
-  return i;
+  return r;
 }
 function Ve(e) {
   if (!e || typeof e != "object" || Object.isFrozen(e)) return e;
@@ -210,51 +210,51 @@ function J(e) {
 }
 function ut(e, t, n) {
   (!Array.isArray(e) || Object.getPrototypeOf(e) !== Array.prototype || e.length !== t) && y(`${n} must be a plain array with exactly ${t} values`);
-  const i = [...Array.from({ length: t }, (s, a) => String(a)), "length"], r = Reflect.ownKeys(e);
-  (r.length !== i.length || r.some((s, a) => s !== i[a])) && y(`${n} must be a dense plain array`);
+  const r = [...Array.from({ length: t }, (s, a) => String(a)), "length"], i = Reflect.ownKeys(e);
+  (i.length !== r.length || i.some((s, a) => s !== r[a])) && y(`${n} must be a dense plain array`);
   for (let s = 0; s < t; s += 1) {
     const a = Object.getOwnPropertyDescriptor(e, String(s));
     (!a || !a.enumerable || !("value" in a) || a.value === void 0) && y(`${n} must contain enumerable data values`);
   }
 }
-function br(e) {
-  const t = H(
+function bi(e) {
+  const t = z(
     e,
     ["reviewedTransform", "schemaVersion"],
     "asset review protocol policy"
   );
   w(t.schemaVersion, 1, "asset review protocol schemaVersion");
-  const n = H(t.reviewedTransform, [
+  const n = z(t.reviewedTransform, [
     "metersPerSourceUnit",
     "quaternionNormTolerance",
     "scaleComponentExclusiveMin",
     "scaleComponentInclusiveMax",
     "translationComponentAbsMax",
     "upAxes"
-  ], "asset review transform policy"), i = H(
+  ], "asset review transform policy"), r = z(
     n.metersPerSourceUnit,
     ["cm", "km", "m", "mm"],
     "asset review unit policy"
   );
-  for (const [r, s] of Object.entries(i))
-    (typeof s != "number" || !Number.isFinite(s) || s <= 0) && y(`asset review unit policy ${r} must be positive and finite`);
-  for (const [r, s] of [
+  for (const [i, s] of Object.entries(r))
+    (typeof s != "number" || !Number.isFinite(s) || s <= 0) && y(`asset review unit policy ${i} must be positive and finite`);
+  for (const [i, s] of [
     ["quaternionNormTolerance", n.quaternionNormTolerance],
     ["scaleComponentExclusiveMin", n.scaleComponentExclusiveMin],
     ["scaleComponentInclusiveMax", n.scaleComponentInclusiveMax],
     ["translationComponentAbsMax", n.translationComponentAbsMax]
   ])
-    (typeof s != "number" || !Number.isFinite(s)) && y(`asset review transform policy ${r} must be finite`);
+    (typeof s != "number" || !Number.isFinite(s)) && y(`asset review transform policy ${i} must be finite`);
   return (n.quaternionNormTolerance <= 0 || n.scaleComponentInclusiveMax <= n.scaleComponentExclusiveMin || n.translationComponentAbsMax <= 0) && y("asset review transform policy bounds are inconsistent"), ut(n.upAxes, 3, "asset review up-axis policy"), n.upAxes.join("\0") !== "X_UP\0Y_UP\0Z_UP" && y("asset review up-axis policy is invalid"), J([
-    ["metersPerSourceUnit", J(Object.entries(i))],
+    ["metersPerSourceUnit", J(Object.entries(r))],
     ["quaternionNormTolerance", n.quaternionNormTolerance],
     ["scaleComponentExclusiveMin", n.scaleComponentExclusiveMin],
     ["scaleComponentInclusiveMax", n.scaleComponentInclusiveMax],
     ["translationComponentAbsMax", n.translationComponentAbsMax],
-    ["upAxes", Object.freeze(Array.from({ length: 3 }, (r, s) => n.upAxes[s]))]
+    ["upAxes", Object.freeze(Array.from({ length: 3 }, (i, s) => n.upAxes[s]))]
   ]);
 }
-const De = br(nr);
+const De = bi(ni);
 function w(e, t, n) {
   return e !== t && y(`${n} must equal ${JSON.stringify(t)}`), e;
 }
@@ -262,20 +262,20 @@ function ct(e, t, n) {
   return t.includes(e) || y(`${n} is not an allowed value`), e;
 }
 function F(e, t, n) {
-  return re(e, n), t.test(e) || y(`${n} has an invalid encoding`), e;
+  return ie(e, n), t.test(e) || y(`${n} has an invalid encoding`), e;
 }
 function ve(e, t) {
-  return re(e, t), (!lr.test(e) || new Date(e).toISOString() !== e) && y(`${t} must be exact RFC3339 milliseconds UTC`), e;
+  return ie(e, t), (!li.test(e) || new Date(e).toISOString() !== e) && y(`${t} must be exact RFC3339 milliseconds UTC`), e;
 }
 function Dt(e, t) {
-  const n = Date.parse(e), i = Date.parse(t);
-  i > n && i - n <= 3e5 || y("request lifetime must be in (0, 300] seconds");
-}
-function Er(e, t) {
-  (!ArrayBuffer.isView(e) || !(e instanceof Uint8Array) || Object.getPrototypeOf(e) !== Uint8Array.prototype) && y(`${t} must be a plain Uint8Array`), rr.call(e) !== 32 && y(`${t} must be exactly 32 bytes`);
-  const i = Array.from({ length: 32 }, (d, u) => String(u)), r = Reflect.ownKeys(e);
-  (r.length !== i.length || r.some((d, u) => d !== i[u])) && y(`${t} Uint8Array must contain only 32 indexed bytes`);
-  const s = ir.call(e);
+  const n = Date.parse(e), r = Date.parse(t);
+  r > n && r - n <= 3e5 || y("request lifetime must be in (0, 300] seconds");
+}
+function Ei(e, t) {
+  (!ArrayBuffer.isView(e) || !(e instanceof Uint8Array) || Object.getPrototypeOf(e) !== Uint8Array.prototype) && y(`${t} must be a plain Uint8Array`), ii.call(e) !== 32 && y(`${t} must be exactly 32 bytes`);
+  const r = Array.from({ length: 32 }, (d, u) => String(u)), i = Reflect.ownKeys(e);
+  (i.length !== r.length || i.some((d, u) => d !== r[u])) && y(`${t} Uint8Array must contain only 32 indexed bytes`);
+  const s = ri.call(e);
   let a = !1;
   if (vn)
     try {
@@ -285,7 +285,7 @@ function Er(e, t) {
     }
   a && y(`${t} must not use SharedArrayBuffer storage`);
   try {
-    sr.call(s);
+    si.call(s);
   } catch {
     y(`${t} must use ArrayBuffer storage`);
   }
@@ -300,34 +300,34 @@ function Er(e, t) {
   return l.length !== 43 && y(`${t} did not encode to 43 base64url characters`), l;
 }
 function sn(e, t) {
-  re(e, t), /^[A-Za-z0-9_-]{43}$/u.test(e) || y(`${t} must be canonical unpadded base64url`);
+  ie(e, t), /^[A-Za-z0-9_-]{43}$/u.test(e) || y(`${t} must be canonical unpadded base64url`);
   let n;
   try {
     n = globalThis.atob(`${e.replace(/-/gu, "+").replace(/_/gu, "/")}=`);
   } catch {
     y(`${t} must be valid base64url`);
   }
-  const i = Uint8Array.from(n, (r) => r.charCodeAt(0));
-  return (i.byteLength !== 32 || Er(i, t) !== e) && y(`${t} must canonically encode exactly 32 bytes`), e;
+  const r = Uint8Array.from(n, (i) => i.charCodeAt(0));
+  return (r.byteLength !== 32 || Ei(r, t) !== e) && y(`${t} must canonically encode exactly 32 bytes`), e;
 }
-function wr(e) {
-  let t = 0, n = 0, i = "";
-  for (const r of e)
-    for (t = t << 8 | r, n += 8; n >= 5; )
-      n -= 5, i += zt[t >>> n & 31], t &= (1 << n) - 1;
-  return n !== 0 && (i += zt[t << 5 - n & 31]), i;
+function wi(e) {
+  let t = 0, n = 0, r = "";
+  for (const i of e)
+    for (t = t << 8 | i, n += 8; n >= 5; )
+      n -= 5, r += Ht[t >>> n & 31], t &= (1 << n) - 1;
+  return n !== 0 && (r += Ht[t << 5 - n & 31]), r;
 }
-function Ir(e, t) {
-  re(e, "modelCid"), dr.test(e) || y("modelCid must be canonical CIDv1 raw sha2-256 base32");
-  let n = 0, i = 0;
-  const r = [];
+function Ii(e, t) {
+  ie(e, "modelCid"), di.test(e) || y("modelCid must be canonical CIDv1 raw sha2-256 base32");
+  let n = 0, r = 0;
+  const i = [];
   for (const o of e.slice(1)) {
-    const c = zt.indexOf(o);
-    c < 0 && y("modelCid contains invalid base32"), n = n << 5 | c, i += 5, i >= 8 && (i -= 8, r.push(n >>> i & 255), n &= (1 << i) - 1);
+    const c = Ht.indexOf(o);
+    c < 0 && y("modelCid contains invalid base32"), n = n << 5 | c, r += 5, r >= 8 && (r -= 8, i.push(n >>> r & 255), n &= (1 << r) - 1);
   }
-  (i !== 0 && n !== 0 || r.length !== 36) && y("modelCid has noncanonical base32 tail bits or length");
-  const s = Uint8Array.from(r);
-  (s[0] !== 1 || s[1] !== 85 || s[2] !== 18 || s[3] !== 32) && y("modelCid must encode CIDv1 raw sha2-256 with a 32-byte digest"), `b${wr(s)}` !== e && y("modelCid base32 is not canonical");
+  (r !== 0 && n !== 0 || i.length !== 36) && y("modelCid has noncanonical base32 tail bits or length");
+  const s = Uint8Array.from(i);
+  (s[0] !== 1 || s[1] !== 85 || s[2] !== 18 || s[3] !== 32) && y("modelCid must encode CIDv1 raw sha2-256 with a 32-byte digest"), `b${wi(s)}` !== e && y("modelCid base32 is not canonical");
   let a = 0;
   for (let o = 0; o < 32; o += 1) {
     const c = Number.parseInt(t.slice(o * 2, o * 2 + 2), 16);
@@ -336,14 +336,14 @@ function Ir(e, t) {
   return a !== 0 && y("modelCid digest does not match modelSha256"), e;
 }
 function Kt(e) {
-  return e === null || typeof e == "boolean" ? JSON.stringify(e) : typeof e == "string" ? (re(e, "canonical JSON string"), JSON.stringify(e)) : typeof e == "number" ? (Number.isFinite(e) || y("canonical JSON numbers must be finite"), JSON.stringify(e)) : Array.isArray(e) ? `[${e.map(Kt).join(",")}]` : (lt(e) || y("canonical JSON contains an unsupported value"), `{${Object.keys(e).sort().map((t) => `${JSON.stringify(t)}:${Kt(e[t])}`).join(",")}}`);
+  return e === null || typeof e == "boolean" ? JSON.stringify(e) : typeof e == "string" ? (ie(e, "canonical JSON string"), JSON.stringify(e)) : typeof e == "number" ? (Number.isFinite(e) || y("canonical JSON numbers must be finite"), JSON.stringify(e)) : Array.isArray(e) ? `[${e.map(Kt).join(",")}]` : (lt(e) || y("canonical JSON contains an unsupported value"), `{${Object.keys(e).sort().map((t) => `${JSON.stringify(t)}:${Kt(e[t])}`).join(",")}}`);
 }
 function on(e, t) {
   for (const n of ["identityScheme", "keyId", "signatureProfile"])
     e[n] !== t[n] && y(`canonicalEnvelope ${n} must match the signature result`);
 }
-function vr(e, t) {
-  const i = H(e, [
+function vi(e, t) {
+  const r = z(e, [
     "audience",
     "challengeSha256",
     "clientId",
@@ -357,34 +357,34 @@ function vr(e, t) {
     "requestOrigin",
     "signatureProfile"
   ], "SDN login canonicalEnvelope");
-  on(i, t), w(i.audience, Wt, "SDN login envelope audience"), F(i.challengeSha256, te, "SDN login envelope challengeSha256"), w(i.clientId, "sdn-node-console-v1", "SDN login envelope clientId"), ve(i.issuedAt, "SDN login envelope issuedAt"), ve(i.expiresAt, "SDN login envelope expiresAt"), Dt(i.issuedAt, i.expiresAt), w(i.identityScheme, we, "SDN login envelope identityScheme"), F(i.keyId, je, "SDN login envelope keyId"), w(i.kind, "sdn-login", "SDN login envelope kind"), F(i.nonce, te, "SDN login envelope nonce"), w(i.protocolVersion, 2, "SDN login envelope protocolVersion"), w(i.requestOrigin, "https://sdn.spaceaware.io", "SDN login envelope requestOrigin"), w(i.signatureProfile, ke, "SDN login envelope signatureProfile");
+  on(r, t), w(r.audience, Wt, "SDN login envelope audience"), F(r.challengeSha256, te, "SDN login envelope challengeSha256"), w(r.clientId, "sdn-node-console-v1", "SDN login envelope clientId"), ve(r.issuedAt, "SDN login envelope issuedAt"), ve(r.expiresAt, "SDN login envelope expiresAt"), Dt(r.issuedAt, r.expiresAt), w(r.identityScheme, we, "SDN login envelope identityScheme"), F(r.keyId, je, "SDN login envelope keyId"), w(r.kind, "sdn-login", "SDN login envelope kind"), F(r.nonce, te, "SDN login envelope nonce"), w(r.protocolVersion, 2, "SDN login envelope protocolVersion"), w(r.requestOrigin, "https://sdn.spaceaware.io", "SDN login envelope requestOrigin"), w(r.signatureProfile, ke, "SDN login envelope signatureProfile");
 }
-function Sr(e, t) {
-  const n = H(
+function Si(e, t) {
+  const n = z(
     e,
     [...St, "kind"],
     "authority activation canonicalEnvelope"
   );
-  on(n, t), w(n.kind, "asset-review-authority-activation", "activation envelope kind"), li(Object.fromEntries(St.map((i) => [i, n[i]])));
+  on(n, t), w(n.kind, "asset-review-authority-activation", "activation envelope kind"), lr(Object.fromEntries(St.map((r) => [r, n[r]])));
 }
-function Or(e, t) {
-  const n = e?.decision === "approve" ? ["note", "reviewedTransform"] : e?.decision === "disapprove" ? ["reason"] : [], i = [...Ht, ...n], r = H(e, [
-    ...i,
+function Ri(e, t) {
+  const n = e?.decision === "approve" ? ["note", "reviewedTransform"] : e?.decision === "disapprove" ? ["reason"] : [], r = [...zt, ...n], i = z(e, [
+    ...r,
     "identityScheme",
     "keyId",
     "kind",
     "purpose",
     "signatureProfile"
   ], "asset review decision canonicalEnvelope");
-  on(r, t), w(r.identityScheme, we, "decision envelope identityScheme"), F(r.keyId, je, "decision envelope keyId"), w(r.kind, "asset-review-attestation", "decision envelope kind"), w(r.purpose, "asset-review-approval", "decision envelope purpose"), w(r.signatureProfile, ke, "decision envelope signatureProfile"), ui(Object.fromEntries(i.map((s) => [s, r[s]])));
+  on(i, t), w(i.identityScheme, we, "decision envelope identityScheme"), F(i.keyId, je, "decision envelope keyId"), w(i.kind, "asset-review-attestation", "decision envelope kind"), w(i.purpose, "asset-review-approval", "decision envelope purpose"), w(i.signatureProfile, ke, "decision envelope signatureProfile"), ur(Object.fromEntries(r.map((s) => [s, i[s]])));
 }
-function Rr(e, t, n) {
-  re(e, "canonicalEnvelope"), Ee.encode(e).byteLength > si && y("canonicalEnvelope is too large");
-  const i = oi(e);
-  return (!lt(i) || i.kind !== t) && y("canonicalEnvelope kind does not match the operation"), Kt(i) !== e && y("canonicalEnvelope must be exact JCS"), t === "sdn-login" ? vr(i, n) : t === "asset-review-authority-activation" ? Sr(i, n) : t === "asset-review-attestation" ? Or(i, n) : y("canonicalEnvelope operation is not registered"), e;
+function Oi(e, t, n) {
+  ie(e, "canonicalEnvelope"), Ee.encode(e).byteLength > sr && y("canonicalEnvelope is too large");
+  const r = or(e);
+  return (!lt(r) || r.kind !== t) && y("canonicalEnvelope kind does not match the operation"), Kt(r) !== e && y("canonicalEnvelope must be exact JCS"), t === "sdn-login" ? vi(r, n) : t === "asset-review-authority-activation" ? Si(r, n) : t === "asset-review-attestation" ? Ri(r, n) : y("canonicalEnvelope operation is not registered"), e;
 }
-function Lr(e, t) {
-  const n = H(e, pr, `identity key ${t.purpose}`);
+function Li(e, t) {
+  const n = z(e, pi, `identity key ${t.purpose}`);
   return w(n.purpose, t.purpose, "key purpose"), w(n.identityScheme, we, "key identityScheme"), w(n.seedProfile, vt, "key seedProfile"), w(n.signatureProfile, t.signatureProfile, "key signatureProfile"), w(n.curve, t.curve, "key curve"), w(n.derivation, "slip10", "key derivation"), w(n.path, t.path, "key path"), w(n.encoding, "raw", "key encoding"), F(n.publicKeyHex, te, "key publicKeyHex"), w(n.bip32Fingerprint, null, "key bip32Fingerprint"), F(n.keyId, je, "key keyId"), J([
     ["bip32Fingerprint", null],
     ["curve", n.curve],
@@ -399,9 +399,9 @@ function Lr(e, t) {
     ["signatureProfile", n.signatureProfile]
   ]);
 }
-function Nr(e) {
-  const t = H(e, fr, "WalletPublicIdentity");
-  w(t.schemaVersion, 1, "identity schemaVersion"), w(t.identityScheme, we, "identity identityScheme"), w(t.seedProfile, vt, "identity seedProfile"), t.accountIndex !== 0 && y("public wallet identity must use account 0"), w(t.accountLabel, null, "identity accountLabel"), re(t.accountXpub, "identity accountXpub"), /^xpub[1-9A-HJ-NP-Za-km-z]{107}$/u.test(t.accountXpub) || y("identity accountXpub is invalid"), re(t.accountPeerId, "identity accountPeerId"), (!t.accountPeerId.startsWith("16Uiu2H") || t.accountPeerId.length < 40 || t.accountPeerId.length > 64 || !ur.test(t.accountPeerId)) && y("identity accountPeerId is invalid"), F(t.accountFingerprint, /^[0-9a-f]{8}$/u, "identity accountFingerprint"), ut(t.keys, 3, "public identity keys array");
+function Ni(e) {
+  const t = z(e, fi, "WalletPublicIdentity");
+  w(t.schemaVersion, 1, "identity schemaVersion"), w(t.identityScheme, we, "identity identityScheme"), w(t.seedProfile, vt, "identity seedProfile"), t.accountIndex !== 0 && y("public wallet identity must use account 0"), w(t.accountLabel, null, "identity accountLabel"), ie(t.accountXpub, "identity accountXpub"), /^xpub[1-9A-HJ-NP-Za-km-z]{107}$/u.test(t.accountXpub) || y("identity accountXpub is invalid"), ie(t.accountPeerId, "identity accountPeerId"), (!t.accountPeerId.startsWith("16Uiu2H") || t.accountPeerId.length < 40 || t.accountPeerId.length > 64 || !ui.test(t.accountPeerId)) && y("identity accountPeerId is invalid"), F(t.accountFingerprint, /^[0-9a-f]{8}$/u, "identity accountFingerprint"), ut(t.keys, 3, "public identity keys array");
   const n = [
     {
       purpose: "asset-review-approval",
@@ -421,9 +421,9 @@ function Nr(e) {
       signatureProfile: ke,
       path: "m/44'/0'/0'/0'/0'"
     }
-  ], i = Array.from(
+  ], r = Array.from(
     { length: 3 },
-    (r, s) => Lr(t.keys[s], n[s])
+    (i, s) => Li(t.keys[s], n[s])
   );
   return J([
     ["accountFingerprint", t.accountFingerprint],
@@ -432,24 +432,24 @@ function Nr(e) {
     ["accountPeerId", t.accountPeerId],
     ["accountXpub", t.accountXpub],
     ["identityScheme", we],
-    ["keys", Ve(i)],
+    ["keys", Ve(r)],
     ["schemaVersion", 1],
     ["seedProfile", vt]
   ]);
 }
-function ci(e, t) {
-  const n = H(e, hr, `${t} result`);
+function cr(e, t) {
+  const n = z(e, hi, `${t} result`);
   w(n.schemaVersion, 1, "connection result schemaVersion"), ct(n.event, ["connected", "disconnected"], "connection event"), t === "connect" && n.event !== "connected" && y("connect result must be connected");
-  let i = null, r = null;
-  return n.event === "connected" ? (i = Nr(n.identity), r = ve(n.connectionExpiresAt, "connectionExpiresAt")) : (n.identity !== null || n.connectionExpiresAt !== null) && y("disconnected result must clear identity and expiry"), J([
-    ["connectionExpiresAt", r],
+  let r = null, i = null;
+  return n.event === "connected" ? (r = Ni(n.identity), i = ve(n.connectionExpiresAt, "connectionExpiresAt")) : (n.identity !== null || n.connectionExpiresAt !== null) && y("disconnected result must clear identity and expiry"), J([
+    ["connectionExpiresAt", i],
     ["event", n.event],
-    ["identity", i],
+    ["identity", r],
     ["schemaVersion", 1]
   ]);
 }
-function Tr(e) {
-  const t = H(e, yr, "raw signature");
+function Ti(e) {
+  const t = z(e, yi, "raw signature");
   return w(t.schemaVersion, 1, "signature schemaVersion"), F(t.keyId, je, "signature keyId"), ct(t.identityScheme, [
     "sdn-fast-password-auth-v1-legacy",
     "sdn-bip39-auth-v1-legacy"
@@ -464,8 +464,8 @@ function Tr(e) {
   ]);
 }
 function an(e, t) {
-  const n = H(e, mr, "canonical signature");
-  return w(n.schemaVersion, 1, "signature schemaVersion"), F(n.keyId, je, "signature keyId"), w(n.identityScheme, we, "signature identityScheme"), w(n.algorithm, "ed25519", "signature algorithm"), w(n.encoding, "raw", "signature encoding"), w(n.signatureProfile, ke, "signature profile"), Rr(n.canonicalEnvelope, t, n), F(n.signedDigestSha256, te, "signedDigestSha256"), F(n.signatureHex, rn, "signatureHex"), J([
+  const n = z(e, mi, "canonical signature");
+  return w(n.schemaVersion, 1, "signature schemaVersion"), F(n.keyId, je, "signature keyId"), w(n.identityScheme, we, "signature identityScheme"), w(n.algorithm, "ed25519", "signature algorithm"), w(n.encoding, "raw", "signature encoding"), w(n.signatureProfile, ke, "signature profile"), Oi(n.canonicalEnvelope, t, n), F(n.signedDigestSha256, te, "signedDigestSha256"), F(n.signatureHex, rn, "signatureHex"), J([
     ["algorithm", "ed25519"],
     ["canonicalEnvelope", n.canonicalEnvelope],
     ["encoding", "raw"],
@@ -477,16 +477,16 @@ function an(e, t) {
     ["signedDigestSha256", n.signedDigestSha256]
   ]);
 }
-function _r(e) {
-  const t = H(e, ["challengeBase64url", "protocolVersion"], "SDN login v1 request");
+function _i(e) {
+  const t = z(e, ["challengeBase64url", "protocolVersion"], "SDN login v1 request");
   return w(t.protocolVersion, 1, "SDN login v1 protocolVersion"), sn(t.challengeBase64url, "challengeBase64url"), J([
     ["challengeBase64url", t.challengeBase64url],
     ["protocolVersion", 1]
   ]);
 }
-function Cr(e) {
-  const t = H(e, On, "SDN publication request");
-  w(t.protocolVersion, 1, "publication protocolVersion"), w(t.method, "POST", "publication method"), ct(t.schema, ["CZM", "ETM"], "publication schema"), re(t.providerOrigin, "providerOrigin");
+function Ci(e) {
+  const t = z(e, Rn, "SDN publication request");
+  w(t.protocolVersion, 1, "publication protocolVersion"), w(t.method, "POST", "publication method"), ct(t.schema, ["CZM", "ETM"], "publication schema"), ie(t.providerOrigin, "providerOrigin");
   let n;
   try {
     n = new URL(t.providerOrigin);
@@ -494,23 +494,23 @@ function Cr(e) {
     y("providerOrigin must be canonical HTTPS");
   }
   (n.protocol !== "https:" || t.providerOrigin !== n.origin || n.username || n.password || n.port === "0" || n.pathname !== "/" || n.search || n.hash || n.hostname.length > 253 || n.hostname.split(".").some((s) => !/^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/u.test(s))) && y("providerOrigin must be a canonical HTTPS DNS or IPv4 origin");
-  const i = `/api/v1/data/publish/${t.schema}`, r = `/api/v1/data/publish/batch/${t.schema}`;
-  ct(t.requestUri, [i, `${i}.fbs`, r, `${r}.fbs`], "publication requestUri"), F(t.bodySha256, te, "publication bodySha256");
+  const r = `/api/v1/data/publish/${t.schema}`, i = `/api/v1/data/publish/batch/${t.schema}`;
+  ct(t.requestUri, [r, `${r}.fbs`, i, `${i}.fbs`], "publication requestUri"), F(t.bodySha256, te, "publication bodySha256");
   for (const [s, a] of [["bodyBytes", 1048576], ["documentCount", 1e5]])
     (!Number.isInteger(t[s]) || t[s] < 1 || t[s] > a) && y(`publication ${s} is outside its bounds`);
   for (const s of ["entityId", "entityName"]) {
-    re(t[s], s);
+    ie(t[s], s);
     const a = Ee.encode(t[s]).byteLength;
     (a < 1 || a > 256 || /[\u0000-\u001f\u007f]/u.test(t[s])) && y(`${s} must contain 1..256 UTF-8 bytes without controls`);
   }
-  return J(On.map((s) => [s, t[s]]));
+  return J(Rn.map((s) => [s, t[s]]));
 }
-function xr(e) {
-  const t = H(e, Rn, "SDN publication signature");
-  return w(t.schemaVersion, 1, "publication signature schemaVersion"), w(t.identityScheme, we, "publication identityScheme"), w(t.algorithm, "ed25519", "publication algorithm"), w(t.encoding, "raw", "publication encoding"), w(t.signatureProfile, or, "publication signatureProfile"), F(t.keyId, je, "publication keyId"), F(t.publicKeyHex, te, "publication publicKeyHex"), F(t.signatureHex, rn, "publication signatureHex"), F(t.requestDigestSha256, te, "publication requestDigestSha256"), F(t.challengeId, /^[0-9a-f]{32}$/u, "publication challengeId"), sn(t.challengeBase64url, "publication challengeBase64url"), J(Rn.map((n) => [n, t[n]]));
+function xi(e) {
+  const t = z(e, On, "SDN publication signature");
+  return w(t.schemaVersion, 1, "publication signature schemaVersion"), w(t.identityScheme, we, "publication identityScheme"), w(t.algorithm, "ed25519", "publication algorithm"), w(t.encoding, "raw", "publication encoding"), w(t.signatureProfile, oi, "publication signatureProfile"), F(t.keyId, je, "publication keyId"), F(t.publicKeyHex, te, "publication publicKeyHex"), F(t.signatureHex, rn, "publication signatureHex"), F(t.requestDigestSha256, te, "publication requestDigestSha256"), F(t.challengeId, /^[0-9a-f]{32}$/u, "publication challengeId"), sn(t.challengeBase64url, "publication challengeBase64url"), J(On.map((n) => [n, t[n]]));
 }
-function Dr(e) {
-  const t = H(e, [
+function Di(e) {
+  const t = z(e, [
     "audience",
     "challengeBase64url",
     "expiresAt",
@@ -527,26 +527,26 @@ function Dr(e) {
     ["protocolVersion", 2]
   ]);
 }
-function li(e) {
-  const t = H(e, St, "authority activation request");
-  return w(t.protocolVersion, 1, "activation protocolVersion"), w(t.audience, cr, "activation audience"), w(t.requestOrigin, ii, "activation requestOrigin"), w(t.clientId, ri, "activation clientId"), w(t.serviceInstance, "assets.ipfs.01/asset-review-attestation", "activation serviceInstance"), w(t.purpose, "asset-review-authority-activation", "activation purpose"), F(t.nonce, te, "activation nonce"), ve(t.issuedAt, "activation issuedAt"), ve(t.expiresAt, "activation expiresAt"), Dt(t.issuedAt, t.expiresAt), F(t.publicKeyHex, te, "activation publicKeyHex"), F(t.keyId, je, "activation keyId"), w(t.identityScheme, we, "activation identityScheme"), w(t.signatureProfile, ke, "activation signatureProfile"), J(St.map((n) => [n, t[n]]));
+function lr(e) {
+  const t = z(e, St, "authority activation request");
+  return w(t.protocolVersion, 1, "activation protocolVersion"), w(t.audience, ci, "activation audience"), w(t.requestOrigin, rr, "activation requestOrigin"), w(t.clientId, ir, "activation clientId"), w(t.serviceInstance, "assets.ipfs.01/asset-review-attestation", "activation serviceInstance"), w(t.purpose, "asset-review-authority-activation", "activation purpose"), F(t.nonce, te, "activation nonce"), ve(t.issuedAt, "activation issuedAt"), ve(t.expiresAt, "activation expiresAt"), Dt(t.issuedAt, t.expiresAt), F(t.publicKeyHex, te, "activation publicKeyHex"), F(t.keyId, je, "activation keyId"), w(t.identityScheme, we, "activation identityScheme"), w(t.signatureProfile, ke, "activation signatureProfile"), J(St.map((n) => [n, t[n]]));
 }
 function jt(e, t, n) {
   ut(e, t, `${n} array`);
-  const i = Array.from({ length: t }, (r, s) => {
+  const r = Array.from({ length: t }, (i, s) => {
     const a = e[s];
     return (typeof a != "number" || !Number.isFinite(a)) && y(`${n} values must be finite numbers`), a;
   });
-  return Ve(i);
+  return Ve(r);
 }
-function Pr(e) {
-  const t = H(e, gr, "reviewedTransform"), n = jt(t.translation, 3, "translation"), i = jt(t.rotation, 4, "rotation"), r = jt(t.scale, 3, "scale");
-  n.some((a) => Math.abs(a) > De.translationComponentAbsMax) && y("translation values exceed the reviewed transform policy"), r.some((a) => a <= De.scaleComponentExclusiveMin || a > De.scaleComponentInclusiveMax) && y("scale values exceed the reviewed transform policy");
-  const s = Math.hypot(...i);
-  return Math.abs(s - 1) > De.quaternionNormTolerance && y("rotation must be a unit quaternion within the reviewed tolerance"), ct(t.upAxis, De.upAxes, "upAxis"), re(t.sourceUnits, "sourceUnits"), Object.hasOwn(De.metersPerSourceUnit, t.sourceUnits) || y("sourceUnits is not allowed by the reviewed transform policy"), (typeof t.metersPerSourceUnit != "number" || !Number.isFinite(t.metersPerSourceUnit) || t.metersPerSourceUnit !== De.metersPerSourceUnit[t.sourceUnits]) && y("metersPerSourceUnit must exactly match sourceUnits"), J([
+function Pi(e) {
+  const t = z(e, gi, "reviewedTransform"), n = jt(t.translation, 3, "translation"), r = jt(t.rotation, 4, "rotation"), i = jt(t.scale, 3, "scale");
+  n.some((a) => Math.abs(a) > De.translationComponentAbsMax) && y("translation values exceed the reviewed transform policy"), i.some((a) => a <= De.scaleComponentExclusiveMin || a > De.scaleComponentInclusiveMax) && y("scale values exceed the reviewed transform policy");
+  const s = Math.hypot(...r);
+  return Math.abs(s - 1) > De.quaternionNormTolerance && y("rotation must be a unit quaternion within the reviewed tolerance"), ct(t.upAxis, De.upAxes, "upAxis"), ie(t.sourceUnits, "sourceUnits"), Object.hasOwn(De.metersPerSourceUnit, t.sourceUnits) || y("sourceUnits is not allowed by the reviewed transform policy"), (typeof t.metersPerSourceUnit != "number" || !Number.isFinite(t.metersPerSourceUnit) || t.metersPerSourceUnit !== De.metersPerSourceUnit[t.sourceUnits]) && y("metersPerSourceUnit must exactly match sourceUnits"), J([
     ["metersPerSourceUnit", t.metersPerSourceUnit],
-    ["rotation", i],
-    ["scale", r],
+    ["rotation", r],
+    ["scale", i],
     ["sourceUnits", t.sourceUnits],
     ["translation", n],
     ["upAxis", t.upAxis]
@@ -557,67 +557,67 @@ function Ln(e) {
 }
 function Nn(e, t, n) {
   if (n && e === null) return null;
-  re(e, t), (e.length === 0 || Ee.encode(e).byteLength > 2e3) && y(`${t} has an invalid length`);
-  const i = Array.from(e, (r) => r.codePointAt(0));
-  return (Ln(i[0]) || Ln(i[i.length - 1])) && y(`${t} must already be trimmed`), e;
+  ie(e, t), (e.length === 0 || Ee.encode(e).byteLength > 2e3) && y(`${t} has an invalid length`);
+  const r = Array.from(e, (i) => i.codePointAt(0));
+  return (Ln(r[0]) || Ln(r[r.length - 1])) && y(`${t} must already be trimmed`), e;
 }
-function ui(e) {
-  const t = ai(e);
+function ur(e) {
+  const t = ar(e);
   lt(t) || y("asset review decision request must be a JSON object");
   const n = Object.getOwnPropertyDescriptor(t, "decision");
   (!n || !n.enumerable || !("value" in n) || n.value === void 0) && y("asset review decision request has an invalid decision field");
-  const i = n.value, r = i === "approve" ? ["note", "reviewedTransform"] : i === "disapprove" ? ["reason"] : [], s = H(t, [...Ht, ...r], "asset review decision request");
-  w(s.protocolVersion, 1, "decision protocolVersion"), w(s.audience, ar, "decision audience"), w(s.requestOrigin, ii, "decision requestOrigin"), w(s.clientId, ri, "decision clientId"), F(s.challengeId, te, "challengeId"), F(s.nonce, te, "decision nonce"), ve(s.issuedAt, "decision issuedAt"), ve(s.expiresAt, "decision expiresAt"), Dt(s.issuedAt, s.expiresAt), F(s.modelSha256, te, "modelSha256"), F(s.metadataSha256, te, "metadataSha256"), s.previousDecisionHead !== null && F(s.previousDecisionHead, te, "previousDecisionHead"), Ir(s.modelCid, s.modelSha256), (!Number.isSafeInteger(s.modelBytes) || s.modelBytes <= 0) && y("modelBytes must be a positive safe integer"), re(s.candidateKey, "candidateKey");
+  const r = n.value, i = r === "approve" ? ["note", "reviewedTransform"] : r === "disapprove" ? ["reason"] : [], s = z(t, [...zt, ...i], "asset review decision request");
+  w(s.protocolVersion, 1, "decision protocolVersion"), w(s.audience, ai, "decision audience"), w(s.requestOrigin, rr, "decision requestOrigin"), w(s.clientId, ir, "decision clientId"), F(s.challengeId, te, "challengeId"), F(s.nonce, te, "decision nonce"), ve(s.issuedAt, "decision issuedAt"), ve(s.expiresAt, "decision expiresAt"), Dt(s.issuedAt, s.expiresAt), F(s.modelSha256, te, "modelSha256"), F(s.metadataSha256, te, "metadataSha256"), s.previousDecisionHead !== null && F(s.previousDecisionHead, te, "previousDecisionHead"), Ii(s.modelCid, s.modelSha256), (!Number.isSafeInteger(s.modelBytes) || s.modelBytes <= 0) && y("modelBytes must be a positive safe integer"), ie(s.candidateKey, "candidateKey");
   const a = "asset-review:", o = `:${s.modelSha256}`;
   (!s.candidateKey.startsWith(a) || !s.candidateKey.endsWith(o) || Ee.encode(s.candidateKey).byteLength > 206) && y("candidateKey does not bind the model digest");
   const c = s.candidateKey.slice(a.length, -o.length);
   (!/^[a-z0-9-]+\/[a-z0-9][a-z0-9-]*$/u.test(c) || Ee.encode(c).byteLength > 128) && y("candidateKey entityId is invalid");
-  const l = Ht.map((u) => [u, s[u]]);
-  return i === "approve" ? (l.push(["note", Nn(s.note, "note", !0)]), l.push(["reviewedTransform", Pr(s.reviewedTransform)])) : l.push(["reason", Nn(s.reason, "reason", !1)]), Object.values(s).filter((u) => typeof u == "string").reduce((u, p) => u + Ee.encode(p).byteLength, 0) > 16384 && y("decision request strings exceed 16 KiB"), J(l);
+  const l = zt.map((u) => [u, s[u]]);
+  return r === "approve" ? (l.push(["note", Nn(s.note, "note", !0)]), l.push(["reviewedTransform", Pi(s.reviewedTransform)])) : l.push(["reason", Nn(s.reason, "reason", !1)]), Object.values(s).filter((u) => typeof u == "string").reduce((u, p) => u + Ee.encode(p).byteLength, 0) > 16384 && y("decision request strings exceed 16 KiB"), J(l);
 }
-function di(e, t) {
-  return H(e, [], t), Ve({});
+function dr(e, t) {
+  return z(e, [], t), Ve({});
 }
-function kr(e) {
-  return di(e, "wallet connect request");
+function ki(e) {
+  return dr(e, "wallet connect request");
 }
-function Ur(e) {
-  return ci(e, "connect");
+function Ui(e) {
+  return cr(e, "connect");
 }
-function Br(e) {
-  return di(e, "wallet account request");
+function Bi(e) {
+  return dr(e, "wallet account request");
 }
-function fi(e) {
-  return ci(e, "account");
+function fr(e) {
+  return cr(e, "account");
 }
-function jr(e) {
-  return _r(e);
+function ji(e) {
+  return _i(e);
 }
-function Vr(e) {
-  return Tr(e);
+function Vi(e) {
+  return Ti(e);
 }
-function $r(e) {
-  return Dr(e);
+function $i(e) {
+  return Di(e);
 }
-function Mr(e) {
+function Mi(e) {
   return an(e, "sdn-login");
 }
-function pi(e) {
-  return Cr(e);
+function pr(e) {
+  return Ci(e);
 }
-function hi(e) {
-  return xr(e);
+function hr(e) {
+  return xi(e);
 }
-function Fr(e) {
-  return li(e);
+function Fi(e) {
+  return lr(e);
 }
-function qr(e) {
+function qi(e) {
   return an(e, "asset-review-authority-activation");
 }
-function Wr(e) {
-  return ui(e);
+function Wi(e) {
+  return ur(e);
 }
-function zr(e) {
+function Hi(e) {
   return an(e, "asset-review-attestation");
 }
 const ce = Object.freeze({
@@ -626,108 +626,108 @@ const ce = Object.freeze({
   batchBytes: 12288,
   fields: 16,
   contextBytes: 256
-}), Hr = /^sdn-field-encryption\/v1\|[A-Za-z0-9_.-]{1,64}\|[A-Za-z0-9_.-]{1,64}\|[A-Za-z0-9_.-]{1,64}\|k[1-9][0-9]{0,8}$/u, Tn = ["ciphertextBase64url", "context", "encBase64url", "fieldId"], Kr = ["fields", "protocolVersion", "replyPublicKeyHex"], _n = ["context", "encBase64url", "kmfBase64url", "protocolVersion", "replyPublicKeyHex"], Gr = ["fields", "replyEphemeralPublicKeyHex", "schemaVersion"], Jr = /^[A-Za-z0-9_-]*$/u;
-function yi(e) {
+}), zi = /^sdn-field-encryption\/v1\|[A-Za-z0-9_.-]{1,64}\|[A-Za-z0-9_.-]{1,64}\|[A-Za-z0-9_.-]{1,64}\|k[1-9][0-9]{0,8}$/u, Tn = ["ciphertextBase64url", "context", "encBase64url", "fieldId"], Ki = ["fields", "protocolVersion", "replyPublicKeyHex"], _n = ["context", "encBase64url", "kmfBase64url", "protocolVersion", "replyPublicKeyHex"], Gi = ["fields", "replyEphemeralPublicKeyHex", "schemaVersion"], Ji = /^[A-Za-z0-9_-]*$/u;
+function yr(e) {
   let t = "";
   for (let n = 0; n < e.length; n += 1) t += String.fromCharCode(e[n]);
   return globalThis.btoa(t).replace(/\+/gu, "-").replace(/\//gu, "_").replace(/=+$/gu, "");
 }
-function Ue(e, t, n, i) {
-  re(e, i), (!Jr.test(e) || e.length % 4 === 1 || e.length > Math.ceil(n * 4 / 3)) && y(`${i} must be canonical unpadded base64url`);
-  let r;
+function Ue(e, t, n, r) {
+  ie(e, r), (!Ji.test(e) || e.length % 4 === 1 || e.length > Math.ceil(n * 4 / 3)) && y(`${r} must be canonical unpadded base64url`);
+  let i;
   try {
-    r = globalThis.atob(e.replace(/-/gu, "+").replace(/_/gu, "/").padEnd(Math.ceil(e.length / 4) * 4, "="));
+    i = globalThis.atob(e.replace(/-/gu, "+").replace(/_/gu, "/").padEnd(Math.ceil(e.length / 4) * 4, "="));
   } catch {
-    y(`${i} must be valid base64url`);
+    y(`${r} must be valid base64url`);
   }
-  const s = Uint8Array.from(r, (a) => a.charCodeAt(0));
-  return (s.length < t || s.length > n || yi(s) !== e) && y(`${i} must canonically encode ${t}..${n} bytes`), s;
+  const s = Uint8Array.from(i, (a) => a.charCodeAt(0));
+  return (s.length < t || s.length > n || yr(s) !== e) && y(`${r} must canonically encode ${t}..${n} bytes`), s;
 }
-function mi(e, t) {
-  return re(e, t), (Ee.encode(e).byteLength > ce.contextBytes || !Hr.test(e)) && y(`${t} must be sdn-field-encryption/v1|<site>|<schema>|<field>|k<version>`), e;
+function mr(e, t) {
+  return ie(e, t), (Ee.encode(e).byteLength > ce.contextBytes || !zi.test(e)) && y(`${t} must be sdn-field-encryption/v1|<site>|<schema>|<field>|k<version>`), e;
 }
-function Yr(e) {
-  const t = H(e, Kr, "field-open request");
+function Yi(e) {
+  const t = z(e, Ki, "field-open request");
   w(t.protocolVersion, 1, "field-open protocolVersion"), F(t.replyPublicKeyHex, te, "replyPublicKeyHex"), (!Array.isArray(t.fields) || t.fields.length < 1 || t.fields.length > ce.fields) && y(`field-open request carries 1..${ce.fields} fields`), ut(t.fields, t.fields.length, "field-open fields");
   let n = 0;
-  const i = t.fields.map((r, s) => {
-    const a = H(r, Tn, `field ${s}`);
-    return Ue(a.encBase64url, 1, ce.envelopeBytes, `field ${s} encBase64url`), n += Ue(a.ciphertextBase64url, 1, ce.fieldBytes, `field ${s} ciphertextBase64url`).length, mi(a.context, `field ${s} context`), (!Number.isInteger(a.fieldId) || a.fieldId < 0 || a.fieldId > 65535) && y(`field ${s} fieldId must be 0..65535`), J(Tn.map((o) => [o, a[o]]));
+  const r = t.fields.map((i, s) => {
+    const a = z(i, Tn, `field ${s}`);
+    return Ue(a.encBase64url, 1, ce.envelopeBytes, `field ${s} encBase64url`), n += Ue(a.ciphertextBase64url, 1, ce.fieldBytes, `field ${s} ciphertextBase64url`).length, mr(a.context, `field ${s} context`), (!Number.isInteger(a.fieldId) || a.fieldId < 0 || a.fieldId > 65535) && y(`field ${s} fieldId must be 0..65535`), J(Tn.map((o) => [o, a[o]]));
   });
   return n > ce.batchBytes && y(`field-open ciphertext exceeds ${ce.batchBytes} bytes`), J([
-    ["fields", Ve(i)],
+    ["fields", Ve(r)],
     ["protocolVersion", 1],
     ["replyPublicKeyHex", t.replyPublicKeyHex]
   ]);
 }
-function Qr(e) {
-  const t = H(e, _n, "key-unwrap request");
-  return w(t.protocolVersion, 1, "key-unwrap protocolVersion"), F(t.replyPublicKeyHex, te, "replyPublicKeyHex"), mi(t.context, "key-unwrap context"), Ue(t.encBase64url, 1, ce.envelopeBytes, "key-unwrap encBase64url"), Ue(t.kmfBase64url, 1, ce.envelopeBytes, "key-unwrap kmfBase64url"), J(_n.map((n) => [n, t[n]]));
+function Qi(e) {
+  const t = z(e, _n, "key-unwrap request");
+  return w(t.protocolVersion, 1, "key-unwrap protocolVersion"), F(t.replyPublicKeyHex, te, "replyPublicKeyHex"), mr(t.context, "key-unwrap context"), Ue(t.encBase64url, 1, ce.envelopeBytes, "key-unwrap encBase64url"), Ue(t.kmfBase64url, 1, ce.envelopeBytes, "key-unwrap kmfBase64url"), J(_n.map((n) => [n, t[n]]));
 }
-function gi(e, t) {
-  const n = H(e, Gr, "field result");
+function gr(e, t) {
+  const n = z(e, Gi, "field result");
   w(n.schemaVersion, 1, "field result schemaVersion"), F(n.replyEphemeralPublicKeyHex, te, "replyEphemeralPublicKeyHex"), (!Array.isArray(n.fields) || n.fields.length < 1 || n.fields.length > t) && y(`field result carries 1..${t} fields`), ut(n.fields, n.fields.length, "field result fields");
-  const i = n.fields.map((r, s) => {
-    if ((lt(r) ? r.status : void 0) === "opened") {
-      const c = H(r, ["ciphertextBase64url", "status"], `field result ${s}`);
+  const r = n.fields.map((i, s) => {
+    if ((lt(i) ? i.status : void 0) === "opened") {
+      const c = z(i, ["ciphertextBase64url", "status"], `field result ${s}`);
       return Ue(c.ciphertextBase64url, 1, ce.fieldBytes, `field result ${s} ciphertext`), J([["ciphertextBase64url", c.ciphertextBase64url], ["status", "opened"]]);
     }
-    const o = H(r, ["reason", "status"], `field result ${s}`);
+    const o = z(i, ["reason", "status"], `field result ${s}`);
     return w(o.status, "refused", `field result ${s} status`), w(o.reason, "NOT_ADDRESSED_TO_ACCOUNT", `field result ${s} reason`), J([["reason", "NOT_ADDRESSED_TO_ACCOUNT"], ["status", "refused"]]);
   });
   return J([
-    ["fields", Ve(i)],
+    ["fields", Ve(r)],
     ["replyEphemeralPublicKeyHex", n.replyEphemeralPublicKeyHex],
     ["schemaVersion", 1]
   ]);
 }
-function Xr(e) {
-  return Yr(e);
+function Xi(e) {
+  return Yi(e);
 }
-function Zr(e) {
-  return gi(e, ce.fields);
+function Zi(e) {
+  return gr(e, ce.fields);
 }
 function es(e) {
-  return Qr(e);
+  return Qi(e);
 }
 function ts(e) {
-  return gi(e, 1);
+  return gr(e, 1);
 }
 const ns = new TextDecoder("utf-8", { fatal: !0 });
-class Ai extends Error {
+class Ar extends Error {
   constructor() {
     super("MALFORMED_ENVELOPE"), this.name = "SealedEnvelopeError", this.code = "MALFORMED_ENVELOPE";
   }
 }
 function de() {
-  throw new Ai();
+  throw new Ar();
 }
-function bi(e, t) {
+function br(e, t) {
   (!(e instanceof Uint8Array) || e.length < 12) && de();
   const n = new DataView(e.buffer, e.byteOffset, e.byteLength);
   for (let c = 0; c < 4; c += 1)
     e[4 + c] !== t.charCodeAt(c) && de();
-  const i = n.getUint32(0, !0);
-  (i < 8 || i + 4 > e.length) && de();
-  const r = i - n.getInt32(i, !0);
-  (r < 0 || r + 4 > e.length) && de();
-  const s = n.getUint16(r, !0), a = n.getUint16(r + 2, !0);
-  (s < 4 || s % 2 !== 0 || r + s > e.length || a < 4 || i + a > e.length) && de();
+  const r = n.getUint32(0, !0);
+  (r < 8 || r + 4 > e.length) && de();
+  const i = r - n.getInt32(r, !0);
+  (i < 0 || i + 4 > e.length) && de();
+  const s = n.getUint16(i, !0), a = n.getUint16(i + 2, !0);
+  (s < 4 || s % 2 !== 0 || i + s > e.length || a < 4 || r + a > e.length) && de();
   const o = (c) => {
     const l = 4 + c * 2;
     if (l >= s) return 0;
-    const d = n.getUint16(r + l, !0);
+    const d = n.getUint16(i + l, !0);
     return d !== 0 && (d < 4 || d >= a) && de(), d;
   };
   return {
     scalar(c, l) {
       const d = o(c);
-      return d === 0 ? l : e[i + d];
+      return d === 0 ? l : e[r + d];
     },
     vector(c) {
       const l = o(c);
       if (l === 0) return null;
-      const d = i + l;
+      const d = r + l;
       d + 4 > e.length && de();
       const u = d + n.getUint32(d, !0);
       u + 4 > e.length && de();
@@ -736,36 +736,36 @@ function bi(e, t) {
     }
   };
 }
-function is(e) {
-  const t = bi(e, "$ENC");
+function rs(e) {
+  const t = br(e, "$ENC");
   (t.scalar(0, 1) !== 1 || t.scalar(1, 0) !== 0 || t.scalar(2, 0) !== 0 || t.scalar(3, 0) !== 0) && de();
-  const n = t.vector(4), i = t.vector(5), r = t.vector(6), s = t.vector(7);
-  (n?.length !== 32 || i?.length !== 12 || r?.length !== 8 || !s || s.length === 0) && de();
+  const n = t.vector(4), r = t.vector(5), i = t.vector(6), s = t.vector(7);
+  (n?.length !== 32 || r?.length !== 12 || i?.length !== 8 || !s || s.length === 0) && de();
   let a;
   try {
     a = ns.decode(s);
   } catch {
     de();
   }
-  return Object.freeze({ context: a, ephemeralPublic: n, recipientKeyId: r });
+  return Object.freeze({ context: a, ephemeralPublic: n, recipientKeyId: i });
 }
-function rs(e) {
-  const t = bi(e, "$KMF").vector(4);
+function is(e) {
+  const t = br(e, "$KMF").vector(4);
   return t?.length !== 32 && de(), t;
 }
-const Gt = "sdn.wallet.consent.v1", cn = 15 * 60 * 1e3, Ei = 20, Cn = 16;
+const Gt = "sdn.wallet.consent.v1", cn = 15 * 60 * 1e3, Er = 20, Cn = 16;
 function xn(e, t) {
   let n = {};
   try {
-    const r = JSON.parse(e?.getItem?.(Gt) ?? "{}");
-    r && typeof r == "object" && !Array.isArray(r) && (n = r);
+    const i = JSON.parse(e?.getItem?.(Gt) ?? "{}");
+    i && typeof i == "object" && !Array.isArray(i) && (n = i);
   } catch {
     n = {};
   }
-  const i = {};
-  for (const [r, s] of Object.entries(n))
-    Number.isSafeInteger(s?.expiresAt) && s.expiresAt > t && s.expiresAt - t <= cn && Number.isSafeInteger(s?.remaining) && s.remaining > 0 && s.remaining <= Ei && (i[r] = { expiresAt: s.expiresAt, remaining: s.remaining });
-  return i;
+  const r = {};
+  for (const [i, s] of Object.entries(n))
+    Number.isSafeInteger(s?.expiresAt) && s.expiresAt > t && s.expiresAt - t <= cn && Number.isSafeInteger(s?.remaining) && s.remaining > 0 && s.remaining <= Er && (r[i] = { expiresAt: s.expiresAt, remaining: s.remaining });
+  return r;
 }
 function Vt(e, t) {
   try {
@@ -777,7 +777,7 @@ function Vt(e, t) {
 function ss(e, t) {
   if (e?.operation !== "sdn.wallet.field-open.v1" && e?.operation !== "sdn.wallet.key-unwrap.v1")
     return null;
-  const n = t?.keys?.find?.((i) => i?.purpose === "contact-encryption");
+  const n = t?.keys?.find?.((r) => r?.purpose === "contact-encryption");
   return typeof n?.keyId != "string" ? null : [e.clientId, e.requestOrigin, e.operation, n.keyId].join("|");
 }
 function os({ storage: e, now: t = () => Date.now() }) {
@@ -785,19 +785,19 @@ function os({ storage: e, now: t = () => Date.now() }) {
     /** Uses one unattended opening of a live grant; false means ask. */
     take(n) {
       if (!n) return !1;
-      const i = xn(e, t()), r = i[n];
-      return r ? (r.remaining -= 1, r.remaining === 0 && delete i[n], Vt(e, i)) : !1;
+      const r = xn(e, t()), i = r[n];
+      return i ? (i.remaining -= 1, i.remaining === 0 && delete r[n], Vt(e, r)) : !1;
     },
     grant(n) {
       if (!n) return;
-      const i = t(), r = xn(e, i);
-      r[n] = { expiresAt: i + cn, remaining: Ei };
-      const s = Object.keys(r);
+      const r = t(), i = xn(e, r);
+      i[n] = { expiresAt: r + cn, remaining: Er };
+      const s = Object.keys(i);
       if (s.length > Cn) {
-        s.sort((a, o) => r[a].expiresAt - r[o].expiresAt);
-        for (const a of s.slice(0, s.length - Cn)) delete r[a];
+        s.sort((a, o) => i[a].expiresAt - i[o].expiresAt);
+        for (const a of s.slice(0, s.length - Cn)) delete i[a];
       }
-      Vt(e, r);
+      Vt(e, i);
     },
     clear() {
       Vt(e, {});
@@ -818,53 +818,53 @@ const as = Object.freeze([
   "schemaVersion",
   "state",
   "transactionId"
-]), gt = /^[0-9a-f]{64}$/u, wi = /^[A-Za-z0-9_-]{43}$/u, cs = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/u, ls = new TextEncoder(), Ii = Object.freeze({
+]), gt = /^[0-9a-f]{64}$/u, wr = /^[A-Za-z0-9_-]{43}$/u, cs = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/u, ls = new TextEncoder(), Ir = Object.freeze({
   "sdn.auth.publish-request.v1": Object.freeze({
-    parseRequest: pi,
-    buildResult: hi,
+    parseRequest: pr,
+    buildResult: hr,
     publish: !0
   }),
   "sdn.auth.jcs-envelope.v2": Object.freeze({
-    parseRequest: $r,
-    buildResult: Mr,
-    sign(e, t, n, i) {
-      return e.signSdnLoginV2(t, n, i.registryRow);
+    parseRequest: $i,
+    buildResult: Mi,
+    sign(e, t, n, r) {
+      return e.signSdnLoginV2(t, n, r.registryRow);
     }
   }),
   "sdn.auth.raw-challenge.v1": Object.freeze({
-    parseRequest: jr,
-    buildResult: Vr,
+    parseRequest: ji,
+    buildResult: Vi,
     sign(e, t, n) {
       return e.signSdnLoginV1(t, gs(n.challengeBase64url));
     }
   }),
   "sdn.asset-review.authority-activation.v1": Object.freeze({
-    parseRequest: Fr,
-    buildResult: qr,
-    sign(e, t, n, i) {
-      return e.signAssetReviewAuthorityActivation(t, n, i.registryRow);
+    parseRequest: Fi,
+    buildResult: qi,
+    sign(e, t, n, r) {
+      return e.signAssetReviewAuthorityActivation(t, n, r.registryRow);
     }
   }),
   "sdn.asset-review.decision.v1": Object.freeze({
-    parseRequest: Wr,
-    buildResult: zr,
-    sign(e, t, n, i) {
-      return e.signAssetReviewDecision(t, n, i.registryRow);
+    parseRequest: Wi,
+    buildResult: Hi,
+    sign(e, t, n, r) {
+      return e.signAssetReviewDecision(t, n, r.registryRow);
     }
   }),
   "sdn.wallet.account.v1": Object.freeze({
-    parseRequest: Br,
-    buildResult: fi,
+    parseRequest: Bi,
+    buildResult: fr,
     connect: !0
   }),
   "sdn.wallet.connect.v1": Object.freeze({
-    parseRequest: kr,
-    buildResult: Ur,
+    parseRequest: ki,
+    buildResult: Ui,
     connect: !0
   }),
   "sdn.wallet.field-open.v1": Object.freeze({
-    parseRequest: Xr,
-    buildResult: Zr,
+    parseRequest: Xi,
+    buildResult: Zi,
     bindRequest: (e, t) => e.fields.map((n) => Dn(n.encBase64url, n.context, n.fieldId, n.ciphertextBase64url, t))
   }),
   "sdn.wallet.key-unwrap.v1": Object.freeze({
@@ -880,21 +880,21 @@ const as = Object.freeze([
     )]
   })
 }), us = 4;
-function Dn(e, t, n, i, r, s = !1) {
+function Dn(e, t, n, r, i, s = !1) {
   let a, o;
   try {
-    a = is(Ue(e, 1, ce.envelopeBytes, "enc"));
+    a = rs(Ue(e, 1, ce.envelopeBytes, "enc"));
     const c = Ue(
-      i,
+      r,
       1,
       s ? ce.envelopeBytes : ce.fieldBytes,
       "payload"
     );
-    o = s ? rs(c) : c;
+    o = s ? is(c) : c;
   } catch (c) {
-    c instanceof Ai && L("MALFORMED_ENVELOPE"), L("INVALID_TRANSACTION");
+    c instanceof Ar && L("MALFORMED_ENVELOPE"), L("INVALID_TRANSACTION");
   }
-  return a.context !== t && L("MALFORMED_ENVELOPE"), (typeof r?.audience != "string" || !t.startsWith(`${r.audience}|`)) && L("FIELD_SITE_MISMATCH"), Object.freeze({
+  return a.context !== t && L("MALFORMED_ENVELOPE"), (typeof i?.audience != "string" || !t.startsWith(`${i.audience}|`)) && L("FIELD_SITE_MISMATCH"), Object.freeze({
     ciphertext: o,
     context: t,
     ephemeralPublic: a.ephemeralPublic,
@@ -908,14 +908,14 @@ function ds(e) {
 function fs(e) {
   return Array.from(e, (t) => t.toString(16).padStart(2, "0")).join("");
 }
-function ps(e, t, n, i, r) {
+function ps(e, t, n, r, i) {
   typeof e.openSealedFields != "function" && L("OPERATION_NOT_ALLOWED");
-  const s = r.bindRequest(n, i), a = e.openSealedFields(t, {
+  const s = i.bindRequest(n, r), a = e.openSealedFields(t, {
     fields: s.map((o) => ({ ...o })),
     replyPublic: ds(n.replyPublicKeyHex)
-  }, i.registryRow);
-  return r.buildResult({
-    fields: a.fields.map((o) => o.opened ? { ciphertextBase64url: yi(o.ciphertext), status: "opened" } : { reason: "NOT_ADDRESSED_TO_ACCOUNT", status: "refused" }),
+  }, r.registryRow);
+  return i.buildResult({
+    fields: a.fields.map((o) => o.opened ? { ciphertextBase64url: yr(o.ciphertext), status: "opened" } : { reason: "NOT_ADDRESSED_TO_ACCOUNT", status: "refused" }),
     replyEphemeralPublicKeyHex: fs(a.ephemeralPublic),
     schemaVersion: 1
   });
@@ -935,17 +935,17 @@ function ln(e) {
 }
 function Jt(e, t, n = "INVALID_TRANSACTION") {
   ln(e) || L(n);
-  let i;
+  let r;
   try {
-    i = Reflect.ownKeys(e);
+    r = Reflect.ownKeys(e);
   } catch {
     L(n);
   }
-  i.some((o) => typeof o != "string") && L(n);
-  const r = [...i].sort(), s = [...t].sort();
-  (r.length !== s.length || r.some((o, c) => o !== s[c])) && L(n);
+  r.some((o) => typeof o != "string") && L(n);
+  const i = [...r].sort(), s = [...t].sort();
+  (i.length !== s.length || i.some((o, c) => o !== s[c])) && L(n);
   const a = /* @__PURE__ */ Object.create(null);
-  for (const o of r) {
+  for (const o of i) {
     let c;
     try {
       c = Object.getOwnPropertyDescriptor(e, o);
@@ -961,11 +961,11 @@ function At(e, t = "INVALID_TRANSACTION") {
   const n = Date.parse(e);
   return (!Number.isFinite(n) || new Date(n).toISOString() !== e) && L(t), n;
 }
-function rt(e) {
-  if (Array.isArray(e)) return Object.freeze(e.map(rt));
+function it(e) {
+  if (Array.isArray(e)) return Object.freeze(e.map(it));
   if (!ln(e)) return e;
   const t = {};
-  for (const n of Object.keys(e).sort()) t[n] = rt(e[n]);
+  for (const n of Object.keys(e).sort()) t[n] = it(e[n]);
   return Object.freeze(t);
 }
 function Yt(e) {
@@ -979,15 +979,15 @@ async function hs(e, t) {
   } catch {
     L("CRYPTO_UNAVAILABLE");
   }
-  return (!(n instanceof Uint8Array) || n.byteLength !== 32) && L("CRYPTO_UNAVAILABLE"), Array.from(n, (i) => i.toString(16).padStart(2, "0")).join("");
+  return (!(n instanceof Uint8Array) || n.byteLength !== 32) && L("CRYPTO_UNAVAILABLE"), Array.from(n, (r) => r.toString(16).padStart(2, "0")).join("");
 }
 function ys(e, t) {
   if (typeof e != "string" || typeof t != "string") return !1;
   const n = Math.max(e.length, t.length);
-  let i = e.length ^ t.length;
-  for (let r = 0; r < n; r += 1)
-    i |= (e.charCodeAt(r) || 0) ^ (t.charCodeAt(r) || 0);
-  return i === 0;
+  let r = e.length ^ t.length;
+  for (let i = 0; i < n; i += 1)
+    r |= (e.charCodeAt(i) || 0) ^ (t.charCodeAt(i) || 0);
+  return r === 0;
 }
 function ms(e, t) {
   try {
@@ -1013,14 +1013,14 @@ function ue({ document: e, window: t }) {
 async function $t(e, {
   registry: t,
   relay: n,
-  sha256: i,
-  window: r,
+  sha256: r,
+  window: i,
   now: s = () => Date.now(),
   expectedTransactionId: a = null
 }) {
   const o = Jt(e, as);
-  (o.schemaVersion !== 1 || typeof o.clientDisplayName != "string" || o.clientDisplayName.length < 1 || o.clientDisplayName.length > 80 || !gt.test(o.transactionId) || !gt.test(o.state) || !gt.test(o.requestSha256) || !wi.test(o.resultToken)) && L("INVALID_TRANSACTION"), a !== null && o.transactionId !== a && L("INVALID_TRANSACTION");
-  const c = Ii[o.operation];
+  (o.schemaVersion !== 1 || typeof o.clientDisplayName != "string" || o.clientDisplayName.length < 1 || o.clientDisplayName.length > 80 || !gt.test(o.transactionId) || !gt.test(o.state) || !gt.test(o.requestSha256) || !wr.test(o.resultToken)) && L("INVALID_TRANSACTION"), a !== null && o.transactionId !== a && L("INVALID_TRANSACTION");
+  const c = Ir[o.operation];
   c || L("UNREGISTERED_TRANSACTION");
   const l = ms(t, {
     clientId: o.clientId,
@@ -1039,7 +1039,7 @@ async function $t(e, {
   c.bindRequest && c.bindRequest(p, l);
   let f;
   try {
-    f = await hs(p, i);
+    f = await hs(p, r);
   } catch (b) {
     if (b instanceof Ie) throw b;
     L("CRYPTO_UNAVAILABLE");
@@ -1047,30 +1047,30 @@ async function $t(e, {
   ys(f, o.requestSha256) || L("REQUEST_HASH_MISMATCH");
   const A = { ...o, request: p };
   return Object.freeze({
-    binding: rt(l),
+    binding: it(l),
     operation: c,
-    request: rt(p),
-    transaction: rt(A)
+    request: it(p),
+    transaction: it(A)
   });
 }
 function gs(e) {
-  wi.test(e) || L("INVALID_TRANSACTION");
+  wr.test(e) || L("INVALID_TRANSACTION");
   let t;
   try {
     t = globalThis.atob(`${e.replace(/-/gu, "+").replace(/_/gu, "/")}=`);
   } catch {
     L("INVALID_TRANSACTION");
   }
-  const n = Uint8Array.from(t, (i) => i.charCodeAt(0));
+  const n = Uint8Array.from(t, (r) => r.charCodeAt(0));
   return n.byteLength !== 32 && L("INVALID_TRANSACTION"), n;
 }
-function As(e, t, n, i) {
-  const r = e.createElement("div");
-  r.className = "wallet-confirmation-row";
+function As(e, t, n, r) {
+  const i = e.createElement("div");
+  i.className = "wallet-confirmation-row";
   const s = e.createElement("strong");
   s.textContent = n;
   const a = e.createElement("span");
-  a.textContent = i, r.append(s, a), t.append(r);
+  a.textContent = r, i.append(s, a), t.append(i);
 }
 function Pn(e) {
   try {
@@ -1080,8 +1080,8 @@ function Pn(e) {
   }
 }
 const kn = "The site sees your public key and address. It cannot spend or sign anything without asking you.";
-function vi(e, t = {}) {
-  const n = Pn(e.requestOrigin), i = String(e.clientDisplayName ?? "").trim(), r = i || n, s = i && n && i !== n ? [["Site", n]] : [], a = (o, c, l, d = []) => ({
+function vr(e, t = {}) {
+  const n = Pn(e.requestOrigin), r = String(e.clientDisplayName ?? "").trim(), i = r || n, s = r && n && r !== n ? [["Site", n]] : [], a = (o, c, l, d = []) => ({
     title: o,
     detail: c,
     action: l,
@@ -1090,11 +1090,11 @@ function vi(e, t = {}) {
   switch (e.operation) {
     case "sdn.auth.raw-challenge.v1":
     case "sdn.auth.jcs-envelope.v2":
-      return a(`Sign in to ${r}`, "This proves you hold this wallet. Nothing is paid, sent or shared.", "Sign in");
+      return a(`Sign in to ${i}`, "This proves you hold this wallet. Nothing is paid, sent or shared.", "Sign in");
     case "sdn.wallet.connect.v1":
-      return a(`Connect your wallet to ${r}`, kn, "Connect");
+      return a(`Connect your wallet to ${i}`, kn, "Connect");
     case "sdn.wallet.account.v1":
-      return a(`Share your account with ${r}`, kn, "Share");
+      return a(`Share your account with ${i}`, kn, "Share");
     case "sdn.auth.publish-request.v1":
       return a(`Publish to ${Pn(t.providerOrigin)}`, "One signed publication of exactly this data. It grants no session and no later writes.", "Publish", [
         ["Provider", t.providerOrigin],
@@ -1103,10 +1103,10 @@ function vi(e, t = {}) {
         ["Documents", t.documentCount]
       ]);
     case "sdn.asset-review.authority-activation.v1":
-      return a("Activate asset review", `Your key becomes the asset reviewer ${r} accepts.`, "Activate");
+      return a("Activate asset review", `Your key becomes the asset reviewer ${i} accepts.`, "Activate");
     case "sdn.asset-review.decision.v1": {
       const o = t.decision !== "disapprove";
-      return a(o ? "Approve this model" : "Disapprove this model", `Your decision is signed and published by ${r}.`, o ? "Approve" : "Disapprove", [
+      return a(o ? "Approve this model" : "Disapprove this model", `Your decision is signed and published by ${i}.`, o ? "Approve" : "Disapprove", [
         ["Model", String(t.candidateKey ?? "").replace(/^asset-review:/u, "").replace(/:[0-9a-f]{64}$/u, "")],
         ["Note", t.note]
       ]);
@@ -1114,7 +1114,7 @@ function vi(e, t = {}) {
     case "sdn.wallet.field-open.v1": {
       const o = Array.isArray(t.fields) ? t.fields.length : 0;
       return a(
-        `Open ${o} encrypted ${o === 1 ? "field" : "fields"} for ${r}`,
+        `Open ${o} encrypted ${o === 1 ? "field" : "fields"} for ${i}`,
         "Your wallet decrypts fields sealed to your encryption key for this site and gives the site their contents. Your keys stay in the wallet.",
         "Open",
         [["Fields", o]]
@@ -1122,31 +1122,31 @@ function vi(e, t = {}) {
     }
     case "sdn.wallet.key-unwrap.v1":
       return a(
-        `Reopen a database for ${r}`,
+        `Reopen a database for ${i}`,
         "Your wallet unwraps the key of this one database, sealed to your encryption key for this site, and gives that key to the site. Your wallet keys stay in the wallet.",
         "Reopen",
         [["Database", String(t.context ?? "").split("|")[2]]]
       );
     default:
-      return a(`Confirm a request from ${r}`, "", "Confirm");
+      return a(`Confirm a request from ${i}`, "", "Confirm");
   }
 }
-function bs(e, { binding: t, document: n, request: i }) {
-  const r = vi(t, i ?? {});
+function bs(e, { binding: t, document: n, request: r }) {
+  const i = vr(t, r ?? {});
   e.replaceChildren();
   const s = n.createElement("h1");
-  if (s.id = "wallet-confirmation-heading", s.textContent = r.title, e.append(s), r.detail) {
+  if (s.id = "wallet-confirmation-heading", s.textContent = i.title, e.append(s), i.detail) {
     const a = n.createElement("p");
-    a.className = "wallet-confirmation-detail", a.textContent = r.detail, e.append(a);
+    a.className = "wallet-confirmation-detail", a.textContent = i.detail, e.append(a);
   }
-  for (const [a, o] of r.facts) As(n, e, a, String(o));
+  for (const [a, o] of i.facts) As(n, e, a, String(o));
   return e;
 }
-async function Es({ assertCurrent: e, binding: t, capabilities: n, handle: i, identity: r, transaction: s }) {
-  const a = pi(s.request);
-  (t.clientId !== "spaceaware-web-v1" || t.requestOrigin !== "https://spaceaware.io" || t.registryRow !== "spaceaware-publish-request-v1" || typeof n.signSdnPublishRequest != "function" || r?.identityScheme !== "sdn-bip32-slip10-purpose-v1" || r?.seedProfile !== "password-scrypt-v2") && L("OPERATION_NOT_ALLOWED");
-  const o = r.keys?.filter((m) => m?.purpose === "sdn-authentication") ?? [];
-  (o.length !== 1 || o[0].identityScheme !== r.identityScheme || o[0].seedProfile !== r.seedProfile || o[0].curve !== "ed25519" || !gt.test(o[0].publicKeyHex) || !/^sha256:[0-9a-f]{64}$/u.test(o[0].keyId)) && L("OPERATION_NOT_ALLOWED");
+async function Es({ assertCurrent: e, binding: t, capabilities: n, handle: r, identity: i, transaction: s }) {
+  const a = pr(s.request);
+  (t.clientId !== "spaceaware-web-v1" || t.requestOrigin !== "https://spaceaware.io" || t.registryRow !== "spaceaware-publish-request-v1" || typeof n.signSdnPublishRequest != "function" || i?.identityScheme !== "sdn-bip32-slip10-purpose-v1" || i?.seedProfile !== "password-scrypt-v2") && L("OPERATION_NOT_ALLOWED");
+  const o = i.keys?.filter((m) => m?.purpose === "sdn-authentication") ?? [];
+  (o.length !== 1 || o[0].identityScheme !== i.identityScheme || o[0].seedProfile !== i.seedProfile || o[0].curve !== "ed25519" || !gt.test(o[0].publicKeyHex) || !/^sha256:[0-9a-f]{64}$/u.test(o[0].keyId)) && L("OPERATION_NOT_ALLOWED");
   const { publicKeyHex: c, keyId: l } = o[0], d = `${a.providerOrigin}/api/auth/challenge`, u = new AbortController(), p = setTimeout(() => u.abort(), 1e4);
   let f;
   try {
@@ -1181,8 +1181,8 @@ async function Es({ assertCurrent: e, binding: t, capabilities: n, handle: i, id
     for (const W of S)
       U.set(W, P), P += W.byteLength;
     f = Jt(JSON.parse(new TextDecoder("utf-8", { fatal: !0 }).decode(U)), ["challenge_id", "challenge", "expires_at"], "PROVIDER_CHALLENGE_FAILED"), (!/^[0-9a-f]{32}$/u.test(f.challenge_id) || !/^[A-Za-z0-9+/]{43}$/u.test(f.challenge) || !Number.isSafeInteger(f.expires_at) || f.expires_at * 1e3 <= Date.now() || f.expires_at * 1e3 - Date.now() > 3e5) && L("PROVIDER_CHALLENGE_FAILED");
-    const R = globalThis.atob(`${f.challenge}=`);
-    (R.length !== 32 || globalThis.btoa(R).replace(/=+$/u, "") !== f.challenge) && L("PROVIDER_CHALLENGE_FAILED");
+    const O = globalThis.atob(`${f.challenge}=`);
+    (O.length !== 32 || globalThis.btoa(O).replace(/=+$/u, "") !== f.challenge) && L("PROVIDER_CHALLENGE_FAILED");
   } catch (m) {
     if (e(), m instanceof Ie) throw m;
     L("PROVIDER_CHALLENGE_FAILED");
@@ -1191,27 +1191,27 @@ async function Es({ assertCurrent: e, binding: t, capabilities: n, handle: i, id
   }
   const A = f.challenge.replace(/\+/gu, "-").replace(/\//gu, "_").replace(/=+$/u, "");
   e(), (Date.now() >= At(s.expiresAt) || f.expires_at * 1e3 <= Date.now()) && L("TRANSACTION_EXPIRED");
-  const b = await n.signSdnPublishRequest(i, {
+  const b = await n.signSdnPublishRequest(r, {
     ...a,
     challengeId: f.challenge_id,
     challengeBase64url: A
   }, t.registryRow);
   e(), (Date.now() >= At(s.expiresAt) || f.expires_at * 1e3 <= Date.now()) && L("TRANSACTION_EXPIRED");
   const h = Jt(b, ["schemaVersion", "keyId", "identityScheme", "algorithm", "encoding", "signatureProfile", "publicKeyHex", "signatureHex", "requestDigestSha256"], "INVALID_WALLET_RESULT");
-  return (h.keyId !== l || h.publicKeyHex !== c) && L("INVALID_WALLET_RESULT"), hi({ ...h, challengeId: f.challenge_id, challengeBase64url: A });
+  return (h.keyId !== l || h.publicKeyHex !== c) && L("INVALID_WALLET_RESULT"), hr({ ...h, challengeId: f.challenge_id, challengeBase64url: A });
 }
-function ws({ binding: e, document: t, request: n, offerRemember: i = !1 }) {
-  const r = t.activeElement ?? null, s = t.createElement("section");
+function ws({ binding: e, document: t, request: n, offerRemember: r = !1 }) {
+  const i = t.activeElement ?? null, s = t.createElement("section");
   s.className = "wallet-confirmation", s.setAttribute?.("role", "dialog"), s.setAttribute?.("aria-modal", "true"), s.setAttribute?.("aria-labelledby", "wallet-confirmation-heading"), s.tabIndex = -1, bs(s, { binding: e, document: t, request: n });
   let a = null;
-  if (i) {
+  if (r) {
     const S = t.createElement("label");
     S.className = "wallet-confirmation-remember", a = t.createElement("input"), a.type = "checkbox", a.dataset.walletControl = "remember-site", S.append(a, ` Don't ask again for this site for ${Math.round(cn / 6e4)} minutes`), s.append(S);
   }
   const o = t.createElement("div");
   o.className = "wallet-confirmation-actions";
   const c = t.createElement("button");
-  c.type = "button", c.dataset.walletAction = "confirm", c.textContent = vi(e, n ?? {}).action;
+  c.type = "button", c.dataset.walletAction = "confirm", c.textContent = vr(e, n ?? {}).action;
   const l = t.createElement("button");
   l.type = "button", l.dataset.walletAction = "cancel", l.textContent = "Cancel", o.append(c, l), s.append(o), t.body.append(s);
   let d = !1, u, p;
@@ -1251,7 +1251,7 @@ function ws({ binding: e, document: t, request: n, offerRemember: i = !1 }) {
     destroy() {
       c.removeEventListener?.("click", b), l.removeEventListener?.("click", h), s.removeEventListener?.("keydown", m), t.removeEventListener?.("focusin", g), s.remove();
       try {
-        r?.focus?.();
+        i?.focus?.();
       } catch {
       }
     }
@@ -1262,16 +1262,16 @@ async function Is({
   },
   binding: t,
   handle: n,
-  identity: i,
-  transaction: r,
+  identity: r,
+  transaction: i,
   wasm: s
 }) {
-  const a = s?.sdn ?? s, o = Ii[r.operation];
-  if ((!o || !a) && L("OPERATION_NOT_ALLOWED"), o.publish) return Es({ assertCurrent: e, binding: t, capabilities: a, handle: n, identity: i, transaction: r });
+  const a = s?.sdn ?? s, o = Ir[i.operation];
+  if ((!o || !a) && L("OPERATION_NOT_ALLOWED"), o.publish) return Es({ assertCurrent: e, binding: t, capabilities: a, handle: n, identity: r, transaction: i });
   if (o.bindRequest) {
     let l;
     try {
-      l = ps(a, n, r.request, t, o);
+      l = ps(a, n, i.request, t, o);
     } catch (d) {
       if (d instanceof Ie) throw d;
       L(d?.code === "OPERATION_NOT_ALLOWED" ? "OPERATION_NOT_ALLOWED" : "INVALID_WALLET_RESULT");
@@ -1280,14 +1280,14 @@ async function Is({
   }
   if (o.connect)
     return o.buildResult({
-      connectionExpiresAt: r.expiresAt,
+      connectionExpiresAt: i.expiresAt,
       event: "connected",
-      identity: i,
+      identity: r,
       schemaVersion: 1
     });
   let c;
   try {
-    c = await o.sign(a, n, r.request, t);
+    c = await o.sign(a, n, i.request, t);
   } catch (l) {
     throw l;
   }
@@ -1299,14 +1299,14 @@ async function Is({
   }
 }
 function vs() {
-  return fi({
+  return fr({
     connectionExpiresAt: null,
     event: "disconnected",
     identity: null,
     schemaVersion: 1
   });
 }
-const Un = "webauthn-prf-hkdf-sha256-aes256gcm-v2", Ss = "sdn-bip32-slip10-purpose-v1", Os = "password-scrypt-v2", Rs = Object.freeze([
+const Un = "webauthn-prf-hkdf-sha256-aes256gcm-v2", Ss = "sdn-bip32-slip10-purpose-v1", Rs = "password-scrypt-v2", Os = Object.freeze([
   "aad",
   "canonicalUsername",
   "ciphertextBase64url",
@@ -1324,17 +1324,17 @@ const Un = "webauthn-prf-hkdf-sha256-aes256gcm-v2", Ss = "sdn-bip32-slip10-purpo
   "seedProfile",
   "storageProfile",
   "usernameSha256"
-]), Ns = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/u, Ts = /^[0-9a-f]{64}$/u, _s = /^[A-Za-z0-9_-]+$/u, Cs = new TextEncoder(), fe = "sdn.wallet.remembered.v2", Le = `${fe}.pending`, bt = 16 * 1024, Si = Object.freeze([
+]), Ns = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/u, Ts = /^[0-9a-f]{64}$/u, _s = /^[A-Za-z0-9_-]+$/u, Cs = new TextEncoder(), fe = "sdn.wallet.remembered.v2", Le = `${fe}.pending`, bt = 16 * 1024, Sr = Object.freeze([
   "wallet_storage_metadata",
   "wallet_storage_encrypted",
   "wallet_storage_passkey_credential",
   "encrypted_wallet",
   "passkey_credential",
   "passkey_wallet"
-]), Oi = /* @__PURE__ */ new Set([
+]), Rr = /* @__PURE__ */ new Set([
   fe,
   Le,
-  ...Si
+  ...Sr
 ]), Qt = /* @__PURE__ */ new WeakSet();
 class dt extends Error {
   constructor(t) {
@@ -1344,13 +1344,13 @@ class dt extends Error {
 function C(e) {
   throw new dt(e);
 }
-function Ri(e) {
+function Or(e) {
   if (!e || typeof e != "object" || Array.isArray(e)) return !1;
   const t = Object.getPrototypeOf(e);
   return t === Object.prototype || t === null;
 }
 function Bn(e, t) {
-  Ri(e) || C("INVALID_REMEMBERED_WALLET");
+  Or(e) || C("INVALID_REMEMBERED_WALLET");
   let n;
   try {
     n = Reflect.ownKeys(e);
@@ -1358,10 +1358,10 @@ function Bn(e, t) {
     C("INVALID_REMEMBERED_WALLET");
   }
   n.some((a) => typeof a != "string") && C("INVALID_REMEMBERED_WALLET");
-  const i = [...t].sort(), r = [...n].sort();
-  (r.length !== i.length || r.some((a, o) => a !== i[o])) && C("INVALID_REMEMBERED_WALLET");
+  const r = [...t].sort(), i = [...n].sort();
+  (i.length !== r.length || i.some((a, o) => a !== r[o])) && C("INVALID_REMEMBERED_WALLET");
   const s = {};
-  for (const a of i) {
+  for (const a of r) {
     let o;
     try {
       o = Object.getOwnPropertyDescriptor(e, a);
@@ -1372,20 +1372,20 @@ function Bn(e, t) {
   }
   return s;
 }
-function Li(e) {
+function Lr(e) {
   if (typeof e != "string") return !1;
   for (let t = 0; t < e.length; t += 1) {
     const n = e.charCodeAt(t);
     if (n >= 55296 && n <= 56319) {
-      const i = e.charCodeAt(++t);
-      if (!(i >= 56320 && i <= 57343)) return !1;
+      const r = e.charCodeAt(++t);
+      if (!(r >= 56320 && r <= 57343)) return !1;
     } else if (n >= 56320 && n <= 57343)
       return !1;
   }
   return !0;
 }
-function Ni(e) {
-  if (!Li(e)) return !1;
+function Nr(e) {
+  if (!Lr(e)) return !1;
   const t = Cs.encode(e).length;
   return t >= 3 && t <= 64 && !/[\u0000-\u001f\u007f-\u009f]/u.test(e) && !/^ | $/u.test(e) && !/[A-Z]/u.test(e);
 }
@@ -1395,11 +1395,11 @@ function xs(e) {
     t += String.fromCharCode(...e.subarray(n, n + 32768));
   return btoa(t).replace(/\+/gu, "-").replace(/\//gu, "_").replace(/=+$/u, "");
 }
-function Ae(e, { minimum: t = 0, maximum: n = 65536, exact: i = null } = {}) {
+function Ae(e, { minimum: t = 0, maximum: n = 65536, exact: r = null } = {}) {
   (typeof e != "string" || e.length === 0 || !_s.test(e)) && C("INVALID_REMEMBERED_WALLET");
-  const r = e.length % 4;
-  r === 1 && C("INVALID_REMEMBERED_WALLET");
-  const s = e.replace(/-/gu, "+").replace(/_/gu, "/") + "=".repeat((4 - r) % 4);
+  const i = e.length % 4;
+  i === 1 && C("INVALID_REMEMBERED_WALLET");
+  const s = e.replace(/-/gu, "+").replace(/_/gu, "/") + "=".repeat((4 - i) % 4);
   let a;
   try {
     a = atob(s);
@@ -1408,10 +1408,10 @@ function Ae(e, { minimum: t = 0, maximum: n = 65536, exact: i = null } = {}) {
   }
   const o = new Uint8Array(a.length);
   for (let c = 0; c < a.length; c += 1) o[c] = a.charCodeAt(c);
-  return (xs(o) !== e || o.length < t || o.length > n || i !== null && o.length !== i) && C("INVALID_REMEMBERED_WALLET"), o;
+  return (xs(o) !== e || o.length < t || o.length > n || r !== null && o.length !== r) && C("INVALID_REMEMBERED_WALLET"), o;
 }
 function un(e) {
-  return e === null || typeof e == "boolean" || typeof e == "string" || typeof e == "number" && Number.isFinite(e) ? JSON.stringify(e) : (Ri(e) || C("INVALID_REMEMBERED_WALLET"), `{${Object.keys(e).sort().map((t) => `${JSON.stringify(t)}:${un(e[t])}`).join(",")}}`);
+  return e === null || typeof e == "boolean" || typeof e == "string" || typeof e == "number" && Number.isFinite(e) ? JSON.stringify(e) : (Or(e) || C("INVALID_REMEMBERED_WALLET"), `{${Object.keys(e).sort().map((t) => `${JSON.stringify(t)}:${un(e[t])}`).join(",")}}`);
 }
 function Ds(e) {
   return Object.freeze({
@@ -1427,12 +1427,12 @@ function Ds(e) {
     storageProfile: e.storageProfile
   });
 }
-function Ti(e) {
-  const t = Bn(e, Rs), n = Bn(t.aad, Ls);
-  return (t.schemaVersion !== 2 || t.storageProfile !== Un || n.schemaVersion !== 2 || n.storageProfile !== Un || n.identityScheme !== Ss || n.seedProfile !== Os || !Ni(t.canonicalUsername) || !Ts.test(n.usernameSha256) || t.credentialIdBase64url !== n.credentialIdBase64url || !Li(t.createdAt) || !Ns.test(t.createdAt) || new Date(t.createdAt).toISOString() !== t.createdAt) && C("INVALID_REMEMBERED_WALLET"), Ae(t.credentialIdBase64url, { minimum: 1, maximum: 1024 }), Ae(t.ciphertextBase64url, { minimum: 17, maximum: 1024 }), Ae(t.hkdfSaltBase64url, { exact: 32 }), Ae(t.nonceBase64url, { exact: 12 }), Ae(t.prfInputBase64url, { exact: 32 }), Ds({ ...t, aad: n });
+function Tr(e) {
+  const t = Bn(e, Os), n = Bn(t.aad, Ls);
+  return (t.schemaVersion !== 2 || t.storageProfile !== Un || n.schemaVersion !== 2 || n.storageProfile !== Un || n.identityScheme !== Ss || n.seedProfile !== Rs || !Nr(t.canonicalUsername) || !Ts.test(n.usernameSha256) || t.credentialIdBase64url !== n.credentialIdBase64url || !Lr(t.createdAt) || !Ns.test(t.createdAt) || new Date(t.createdAt).toISOString() !== t.createdAt) && C("INVALID_REMEMBERED_WALLET"), Ae(t.credentialIdBase64url, { minimum: 1, maximum: 1024 }), Ae(t.ciphertextBase64url, { minimum: 17, maximum: 1024 }), Ae(t.hkdfSaltBase64url, { exact: 32 }), Ae(t.nonceBase64url, { exact: 12 }), Ae(t.prfInputBase64url, { exact: 32 }), Ds({ ...t, aad: n });
 }
 function Ps(e) {
-  return un(Ti(e));
+  return un(Tr(e));
 }
 function dn(e) {
   (typeof e != "string" || e.length === 0 || e.length > 131072) && C("INVALID_REMEMBERED_WALLET");
@@ -1442,33 +1442,33 @@ function dn(e) {
   } catch {
     C("INVALID_REMEMBERED_WALLET");
   }
-  const n = Ti(t);
+  const n = Tr(t);
   return un(n) !== e && C("INVALID_REMEMBERED_WALLET"), n;
 }
 function Xt(e, t, { pending: n = !1 } = {}) {
   (!e || typeof e.getItem != "function") && C("STORAGE_UNAVAILABLE");
-  let i;
+  let r;
   try {
-    i = e.getItem(t);
+    r = e.getItem(t);
   } catch {
     C("STORAGE_UNAVAILABLE");
   }
-  if (i === null) return Object.freeze({ raw: null, record: null, status: "empty" });
-  typeof i != "string" && C("STORAGE_UNAVAILABLE");
-  const r = i.length > bt;
-  if (n || r)
+  if (r === null) return Object.freeze({ raw: null, record: null, status: "empty" });
+  typeof r != "string" && C("STORAGE_UNAVAILABLE");
+  const i = r.length > bt;
+  if (n || i)
     return Object.freeze({
-      exportable: !r,
-      oversized: r,
-      raw: r ? null : i,
-      rawLength: i.length,
+      exportable: !i,
+      oversized: i,
+      raw: i ? null : r,
+      rawLength: r.length,
       record: null,
       status: "quarantined"
     });
   try {
-    const s = dn(i);
+    const s = dn(r);
     return Object.freeze({
-      raw: i,
+      raw: r,
       record: s,
       status: n ? "quarantined" : "valid"
     });
@@ -1476,57 +1476,57 @@ function Xt(e, t, { pending: n = !1 } = {}) {
     return Object.freeze({
       exportable: !0,
       oversized: !1,
-      raw: i,
-      rawLength: i.length,
+      raw: r,
+      rawLength: r.length,
       record: null,
       status: "quarantined"
     });
   }
 }
-function _i(e) {
-  const t = Xt(e, Le, { pending: !0 }), n = Xt(e, fe), i = t.status === "empty", r = n.status === "empty" || n.status === "valid";
+function _r(e) {
+  const t = Xt(e, Le, { pending: !0 }), n = Xt(e, fe), r = t.status === "empty", i = n.status === "empty" || n.status === "valid";
   return Object.freeze({
     active: n,
-    canRestore: i && n.status === "valid",
-    canSetup: i && r,
+    canRestore: r && n.status === "valid",
+    canSetup: r && i,
     pending: t
   });
 }
 function ks(e, t) {
-  const n = _i(e);
+  const n = _r(e);
   n.canSetup || C("STORAGE_QUARANTINED");
-  const i = Ps(t);
+  const r = Ps(t);
   try {
-    e.setItem(Le, i);
+    e.setItem(Le, r);
   } catch (a) {
     throw a;
   }
-  let r;
+  let i;
   try {
-    r = e.getItem(Le);
+    i = e.getItem(Le);
   } catch {
     C("STORAGE_UNAVAILABLE");
   }
-  r !== i && C("STORAGE_WRITE_FAILED"), dn(r);
+  i !== r && C("STORAGE_WRITE_FAILED"), dn(i);
   const s = Object.freeze({
     previousActiveRaw: n.active.raw,
-    serialized: i,
+    serialized: r,
     storage: e
   });
   return Qt.add(s), s;
 }
 function Us(e, t) {
   (!Qt.has(t) || t.storage !== e) && C("INVALID_STORAGE_TRANSACTION"), Qt.delete(t);
-  let n, i;
+  let n, r;
   try {
-    n = e.getItem(Le), i = e.getItem(fe);
+    n = e.getItem(Le), r = e.getItem(fe);
   } catch {
     C("STORAGE_UNAVAILABLE");
   }
-  (n !== t.serialized || i !== t.previousActiveRaw) && C("STORAGE_COLLISION"), e.removeItem(Le), e.getItem(Le) !== null && C("STORAGE_WRITE_FAILED"), e.setItem(fe, t.serialized);
+  (n !== t.serialized || r !== t.previousActiveRaw) && C("STORAGE_COLLISION"), e.removeItem(Le), e.getItem(Le) !== null && C("STORAGE_WRITE_FAILED"), e.setItem(fe, t.serialized);
 }
 function fn(e, t) {
-  Oi.has(t) || C("INVALID_STORAGE_KEY"), (!e || typeof e.getItem != "function") && C("STORAGE_UNAVAILABLE");
+  Rr.has(t) || C("INVALID_STORAGE_KEY"), (!e || typeof e.getItem != "function") && C("STORAGE_UNAVAILABLE");
   let n;
   try {
     n = e.getItem(t);
@@ -1537,8 +1537,8 @@ function fn(e, t) {
   if (typeof n != "string" && C("STORAGE_UNAVAILABLE"), t === fe && n.length <= bt)
     try {
       dn(n), C("NOT_QUARANTINED");
-    } catch (i) {
-      if (i instanceof dt && i.code === "NOT_QUARANTINED") throw i;
+    } catch (r) {
+      if (r instanceof dt && r.code === "NOT_QUARANTINED") throw r;
     }
   return Object.freeze({
     exportable: n.length <= bt,
@@ -1561,16 +1561,16 @@ function js(e) {
   for (const n of [
     fe,
     Le,
-    ...Si
+    ...Sr
   ]) {
-    let i;
+    let r;
     try {
-      i = fn(e, n);
-    } catch (r) {
-      if (r instanceof dt && r.code === "NOT_QUARANTINED") continue;
-      throw r;
+      r = fn(e, n);
+    } catch (i) {
+      if (i instanceof dt && i.code === "NOT_QUARANTINED") continue;
+      throw i;
     }
-    i && t.push(Bs(i));
+    r && t.push(Bs(r));
   }
   return Object.freeze(t);
 }
@@ -1579,11 +1579,11 @@ function Vs(e, t) {
   return n || C("QUARANTINE_NOT_FOUND"), n.exportable || C("QUARANTINE_EXPORT_TOO_LARGE"), n.raw;
 }
 function $s(e, t, n) {
-  Oi.has(t) || C("INVALID_STORAGE_KEY"), n !== t && C("CONFIRMATION_REQUIRED"), fn(e, t) || C("QUARANTINE_NOT_FOUND");
+  Rr.has(t) || C("INVALID_STORAGE_KEY"), n !== t && C("CONFIRMATION_REQUIRED"), fn(e, t) || C("QUARANTINE_NOT_FOUND");
   try {
     e.removeItem(t), e.getItem(t) !== null && C("STORAGE_WRITE_FAILED");
-  } catch (r) {
-    if (r instanceof dt) throw r;
+  } catch (i) {
+    if (i instanceof dt) throw i;
     C("STORAGE_UNAVAILABLE");
   }
 }
@@ -1593,12 +1593,12 @@ function Ms(e, t) {
   n.status === "empty" && C("REMEMBER_UNAVAILABLE"), n.status !== "valid" && C("STORAGE_QUARANTINED");
   try {
     e.removeItem(fe), e.getItem(fe) !== null && C("STORAGE_WRITE_FAILED");
-  } catch (i) {
-    if (i instanceof dt) throw i;
+  } catch (r) {
+    if (r instanceof dt) throw r;
     C("STORAGE_UNAVAILABLE");
   }
 }
-const Ot = "sdn-bip32-slip10-purpose-v1", Rt = "password-scrypt-v2", Zt = "m/44'/0'/0'/2'/0'", pn = "Approval unavailable — migrate to the new wallet profile", jn = Object.freeze({
+const Rt = "sdn-bip32-slip10-purpose-v1", Ot = "password-scrypt-v2", Zt = "m/44'/0'/0'/2'/0'", pn = "Approval unavailable — migrate to the new wallet profile", jn = Object.freeze({
   "bip39-mnemonic-v1-legacy": "sdn-bip39-auth-v1-legacy",
   "password-fast-v1-legacy": "sdn-fast-password-auth-v1-legacy"
 }), Vn = new TextEncoder(), Fs = Uint8Array.prototype.fill, hn = Object.freeze([
@@ -1643,13 +1643,13 @@ const Ot = "sdn-bip32-slip10-purpose-v1", Rt = "password-scrypt-v2", Zt = "m/44'
     signatureProfile: "ed25519-over-sha256-jcs-v1"
   })
 ]);
-class Ci extends Error {
+class Cr extends Error {
   constructor(t) {
     super(t === "APPROVAL_UNAVAILABLE" ? pn : t), this.name = "WalletAccountError", this.code = t;
   }
 }
 function M(e) {
-  throw new Ci(e);
+  throw new Cr(e);
 }
 function $n(e) {
   if (e instanceof Uint8Array)
@@ -1679,10 +1679,10 @@ function Nt(e, t) {
     M("INVALID_PUBLIC_IDENTITY");
   }
   n.some((a) => typeof a != "string") && M("INVALID_PUBLIC_IDENTITY");
-  const i = [...n].sort(), r = [...t].sort();
-  (i.length !== r.length || i.some((a, o) => a !== r[o])) && M("INVALID_PUBLIC_IDENTITY");
+  const r = [...n].sort(), i = [...t].sort();
+  (r.length !== i.length || r.some((a, o) => a !== i[o])) && M("INVALID_PUBLIC_IDENTITY");
   const s = {};
-  for (const a of i) {
+  for (const a of r) {
     let o;
     try {
       o = Object.getOwnPropertyDescriptor(e, a);
@@ -1698,8 +1698,8 @@ function We(e) {
   for (let t = 0; t < e.length; t += 1) {
     const n = e.charCodeAt(t);
     if (n >= 55296 && n <= 56319) {
-      const i = e.charCodeAt(++t);
-      if (!(i >= 56320 && i <= 57343)) return !1;
+      const r = e.charCodeAt(++t);
+      if (!(r >= 56320 && r <= 57343)) return !1;
     } else if (n >= 56320 && n <= 57343) return !1;
   }
   return !0;
@@ -1713,14 +1713,14 @@ function Ws(e) {
     return !1;
   }
   const n = ["0", "1", "2", "length"];
-  if (t.length !== n.length || t.some((i, r) => i !== n[r])) return !1;
-  for (let i = 0; i < Lt.length; i += 1) {
-    const r = Object.getOwnPropertyDescriptor(e, String(i));
-    if (!r?.enumerable || !("value" in r)) return !1;
+  if (t.length !== n.length || t.some((r, i) => r !== n[i])) return !1;
+  for (let r = 0; r < Lt.length; r += 1) {
+    const i = Object.getOwnPropertyDescriptor(e, String(r));
+    if (!i?.enumerable || !("value" in i)) return !1;
   }
   return !0;
 }
-function zs(e) {
+function Hs(e) {
   if (!Array.isArray(e) || Object.getPrototypeOf(e) !== Array.prototype || e.length !== 1) return !1;
   let t;
   try {
@@ -1734,20 +1734,20 @@ function zs(e) {
 }
 function ge(e) {
   const t = Nt(e, hn);
-  (t.schemaVersion !== 1 || t.identityScheme !== Ot || t.seedProfile !== Rt || t.accountIndex !== 0 || t.accountLabel !== null || !/^[0-9a-f]{8}$/u.test(t.accountFingerprint) || !We(t.accountXpub) || !/^xpub[1-9A-HJ-NP-Za-km-z]{107}$/u.test(t.accountXpub) || !We(t.accountPeerId) || !/^16Uiu2H[1-9A-HJ-NP-Za-km-z]{33,57}$/u.test(t.accountPeerId) || !Ws(t.keys)) && M("INVALID_PUBLIC_IDENTITY");
-  const n = Lt.map((i, r) => {
-    const s = Nt(t.keys[r], yn);
-    return (s.bip32Fingerprint !== null || s.curve !== i.curve || s.derivation !== "slip10" || s.encoding !== "raw" || s.identityScheme !== Ot || s.path !== i.path || s.purpose !== i.purpose || s.seedProfile !== Rt || s.signatureProfile !== i.signatureProfile || !/^[0-9a-f]{64}$/u.test(s.publicKeyHex) || !/^sha256:[0-9a-f]{64}$/u.test(s.keyId)) && M("INVALID_PUBLIC_IDENTITY"), Be(s);
+  (t.schemaVersion !== 1 || t.identityScheme !== Rt || t.seedProfile !== Ot || t.accountIndex !== 0 || t.accountLabel !== null || !/^[0-9a-f]{8}$/u.test(t.accountFingerprint) || !We(t.accountXpub) || !/^xpub[1-9A-HJ-NP-Za-km-z]{107}$/u.test(t.accountXpub) || !We(t.accountPeerId) || !/^16Uiu2H[1-9A-HJ-NP-Za-km-z]{33,57}$/u.test(t.accountPeerId) || !Ws(t.keys)) && M("INVALID_PUBLIC_IDENTITY");
+  const n = Lt.map((r, i) => {
+    const s = Nt(t.keys[i], yn);
+    return (s.bip32Fingerprint !== null || s.curve !== r.curve || s.derivation !== "slip10" || s.encoding !== "raw" || s.identityScheme !== Rt || s.path !== r.path || s.purpose !== r.purpose || s.seedProfile !== Ot || s.signatureProfile !== r.signatureProfile || !/^[0-9a-f]{64}$/u.test(s.publicKeyHex) || !/^sha256:[0-9a-f]{64}$/u.test(s.keyId)) && M("INVALID_PUBLIC_IDENTITY"), Be(s);
   });
   return Be({ ...t, keys: n });
 }
-function Hs(e, { accountIndex: t = 0, profile: n } = {}) {
-  const i = Object.hasOwn(jn, n) ? jn[n] : null;
-  (!i || t !== 0) && M("INVALID_LEGACY_PROFILE");
-  const r = Nt(e, hn);
-  (r.schemaVersion !== 1 || r.identityScheme !== i || r.seedProfile !== n || r.accountIndex !== t || r.accountLabel !== null || !/^[0-9a-f]{8}$/u.test(r.accountFingerprint) || !We(r.accountXpub) || !/^xpub[1-9A-HJ-NP-Za-km-z]{107}$/u.test(r.accountXpub) || !We(r.accountPeerId) || !/^16Uiu2H[1-9A-HJ-NP-Za-km-z]{33,57}$/u.test(r.accountPeerId) || !zs(r.keys)) && M("INVALID_PUBLIC_IDENTITY");
-  const s = Nt(r.keys[0], yn);
-  return (s.bip32Fingerprint !== null || s.curve !== "ed25519" || s.derivation !== "bip32-scalar-as-ed25519-seed" || s.encoding !== "raw" || s.identityScheme !== i || s.path !== `m/44'/0'/${t}'/0/0` || s.purpose !== "sdn-authentication" || s.seedProfile !== n || s.signatureProfile !== "ed25519-raw-32-v1" || !/^[0-9a-f]{64}$/u.test(s.publicKeyHex) || !/^sha256:[0-9a-f]{64}$/u.test(s.keyId)) && M("INVALID_PUBLIC_IDENTITY"), Be({ ...r, keys: [s] });
+function zs(e, { accountIndex: t = 0, profile: n } = {}) {
+  const r = Object.hasOwn(jn, n) ? jn[n] : null;
+  (!r || t !== 0) && M("INVALID_LEGACY_PROFILE");
+  const i = Nt(e, hn);
+  (i.schemaVersion !== 1 || i.identityScheme !== r || i.seedProfile !== n || i.accountIndex !== t || i.accountLabel !== null || !/^[0-9a-f]{8}$/u.test(i.accountFingerprint) || !We(i.accountXpub) || !/^xpub[1-9A-HJ-NP-Za-km-z]{107}$/u.test(i.accountXpub) || !We(i.accountPeerId) || !/^16Uiu2H[1-9A-HJ-NP-Za-km-z]{33,57}$/u.test(i.accountPeerId) || !Hs(i.keys)) && M("INVALID_PUBLIC_IDENTITY");
+  const s = Nt(i.keys[0], yn);
+  return (s.bip32Fingerprint !== null || s.curve !== "ed25519" || s.derivation !== "bip32-scalar-as-ed25519-seed" || s.encoding !== "raw" || s.identityScheme !== r || s.path !== `m/44'/0'/${t}'/0/0` || s.purpose !== "sdn-authentication" || s.seedProfile !== n || s.signatureProfile !== "ed25519-raw-32-v1" || !/^[0-9a-f]{64}$/u.test(s.publicKeyHex) || !/^sha256:[0-9a-f]{64}$/u.test(s.keyId)) && M("INVALID_PUBLIC_IDENTITY"), Be({ ...i, keys: [s] });
 }
 function Mn(e) {
   if (!(!e || typeof e != "object")) {
@@ -1788,12 +1788,12 @@ function Mn(e) {
 function Fn(e, t) {
   if (typeof e != "string" || typeof t != "string") return !1;
   const n = Math.max(e.length, t.length);
-  let i = e.length ^ t.length;
-  for (let r = 0; r < n; r += 2) {
-    const s = Number.parseInt(e.slice(r, r + 2), 16), a = Number.parseInt(t.slice(r, r + 2), 16);
-    i |= (Number.isNaN(s) ? 256 : s) ^ (Number.isNaN(a) ? 256 : a);
+  let r = e.length ^ t.length;
+  for (let i = 0; i < n; i += 2) {
+    const s = Number.parseInt(e.slice(i, i + 2), 16), a = Number.parseInt(t.slice(i, i + 2), 16);
+    r |= (Number.isNaN(s) ? 256 : s) ^ (Number.isNaN(a) ? 256 : a);
   }
-  return i === 0;
+  return r === 0;
 }
 function Ks(e) {
   return !e || typeof e != "object" || !Array.isArray(e.keys) ? null : e.keys.find((t) => t?.purpose === "asset-review-approval") ?? null;
@@ -1805,26 +1805,26 @@ function Mt(e, t) {
     return !1;
   }
   let n = !0;
-  for (const i of hn.filter((r) => r !== "keys"))
-    n = e[i] === t[i] && n;
-  for (let i = 0; i < Lt.length; i += 1) {
-    const r = e.keys[i], s = t.keys[i];
+  for (const r of hn.filter((i) => i !== "keys"))
+    n = e[r] === t[r] && n;
+  for (let r = 0; r < Lt.length; r += 1) {
+    const i = e.keys[r], s = t.keys[r];
     for (const a of yn.filter((o) => o !== "publicKeyHex" && o !== "keyId"))
-      n = r[a] === s[a] && n;
-    n = Fn(r.publicKeyHex, s.publicKeyHex) && n, n = Fn(r.keyId.slice(7), s.keyId.slice(7)) && n;
+      n = i[a] === s[a] && n;
+    n = Fn(i.publicKeyHex, s.publicKeyHex) && n, n = Fn(i.keyId.slice(7), s.keyId.slice(7)) && n;
   }
   return n;
 }
-function Fe(e, t, n, i) {
-  const r = e.createElement("div");
-  r.className = "wallet-account-row";
+function Fe(e, t, n, r) {
+  const i = e.createElement("div");
+  i.className = "wallet-account-row";
   const s = e.createElement("strong");
   s.textContent = `${n}: `;
   const a = e.createElement("span");
-  a.textContent = i == null ? "" : String(i), r.append(s, a), t.append(r);
+  a.textContent = r == null ? "" : String(r), i.append(s, a), t.append(i);
 }
-function xi(e) {
-  (e?.identityScheme !== Ot || e?.seedProfile !== Rt || e?.accountIndex !== 0) && M("APPROVAL_UNAVAILABLE");
+function xr(e) {
+  (e?.identityScheme !== Rt || e?.seedProfile !== Ot || e?.accountIndex !== 0) && M("APPROVAL_UNAVAILABLE");
   const t = Ks(e);
   return (!t || t.identityScheme !== e.identityScheme || t.seedProfile !== e.seedProfile || t.signatureProfile !== "ed25519-over-sha256-jcs-v1" || t.curve !== "ed25519" || t.derivation !== "slip10" || t.path !== Zt || t.encoding !== "raw" || !/^[0-9a-f]{64}$/u.test(t.publicKeyHex) || !/^sha256:[0-9a-f]{64}$/u.test(t.keyId)) && M("APPROVAL_UNAVAILABLE"), Be({
     algorithm: "Ed25519",
@@ -1844,22 +1844,22 @@ function Gs(e) {
 }
 function Js(e, t, { document: n = e.ownerDocument } = {}) {
   e.replaceChildren();
-  const i = n.createElement("h1");
-  if (i.textContent = "Account", e.append(i), Fe(n, e, "Username / account", t?.accountLabel ?? "account 0"), Fe(n, e, "Account xpub", t?.accountXpub), Fe(n, e, "Peer ID", t?.accountPeerId), Fe(n, e, "Fingerprint", t?.accountFingerprint), t?.identityScheme !== Ot || t?.seedProfile !== Rt) {
+  const r = n.createElement("h1");
+  if (r.textContent = "Account", e.append(r), Fe(n, e, "Username / account", t?.accountLabel ?? "account 0"), Fe(n, e, "Account xpub", t?.accountXpub), Fe(n, e, "Peer ID", t?.accountPeerId), Fe(n, e, "Fingerprint", t?.accountFingerprint), t?.identityScheme !== Rt || t?.seedProfile !== Ot) {
     const s = n.createElement("p");
     return s.textContent = pn, e.append(s), Object.freeze({ approvalAvailable: !1 });
   }
-  const r = xi(t);
-  return Fe(n, e, "Asset approval public key", r.publicKeyHex), Fe(n, e, "Asset approval key ID", r.keyId), Object.freeze({ approvalAvailable: !0, configuration: r });
+  const i = xr(t);
+  return Fe(n, e, "Asset approval public key", i.publicKeyHex), Fe(n, e, "Asset approval key ID", i.keyId), Object.freeze({ approvalAvailable: !0, configuration: i });
 }
 function Ys(e, { document: t = e.ownerDocument } = {}) {
   e.replaceChildren();
   const n = t.createElement("h2");
   n.textContent = "Stored wallet";
-  const i = t.createElement("p");
-  i.textContent = "Forgetting removes the saved unlock record but keeps this account signed in.";
-  const r = t.createElement("button");
-  r.type = "button", r.dataset.walletAction = "forget-stored-wallet", r.textContent = "Forget stored wallet";
+  const r = t.createElement("p");
+  r.textContent = "Forgetting removes the saved unlock record but keeps this account signed in.";
+  const i = t.createElement("button");
+  i.type = "button", i.dataset.walletAction = "forget-stored-wallet", i.textContent = "Forget stored wallet";
   const s = t.createElement("div");
   s.hidden = !0;
   const a = t.createElement("p");
@@ -1871,22 +1871,22 @@ function Ys(e, { document: t = e.ownerDocument } = {}) {
   const l = t.createElement("button");
   l.type = "button", l.dataset.walletAction = "cancel-forget-stored-wallet", l.textContent = "Cancel";
   const d = t.createElement("p");
-  return d.dataset.walletForgetStatus = "true", d.setAttribute?.("aria-live", "polite"), s.append(a, o, c, l), e.append(n, i, r, s, d), Object.freeze({
+  return d.dataset.walletForgetStatus = "true", d.setAttribute?.("aria-live", "polite"), s.append(a, o, c, l), e.append(n, r, i, s, d), Object.freeze({
     cancel: l,
     confirm: c,
     confirmation: o,
     confirmationGroup: s,
     confirmationKey: fe,
-    launch: r,
+    launch: i,
     status: d
   });
 }
 function Qs(e, t, { document: n = e.ownerDocument } = {}) {
   e.replaceChildren();
-  const i = n.createElement("h2");
-  i.textContent = "Quarantined wallet storage";
-  const r = n.createElement("p");
-  r.textContent = "These records are never unlocked automatically. Export or delete each exact storage key.";
+  const r = n.createElement("h2");
+  r.textContent = "Quarantined wallet storage";
+  const i = n.createElement("p");
+  i.textContent = "These records are never unlocked automatically. Export or delete each exact storage key.";
   const s = n.createElement("div"), a = n.createElement("p");
   a.dataset.walletQuarantineStatus = "true", a.setAttribute?.("aria-live", "polite");
   const o = [];
@@ -1920,14 +1920,14 @@ function Qs(e, t, { document: n = e.ownerDocument } = {}) {
       exportButton: p
     }));
   }
-  return e.append(i, r, s, a), Object.freeze({ rows: Object.freeze(o), status: a });
+  return e.append(r, i, s, a), Object.freeze({ rows: Object.freeze(o), status: a });
 }
 async function Xs(e, {
   assertCurrent: t = () => {
   },
   clipboard: n = globalThis.navigator?.clipboard,
-  container: i,
-  document: r = i?.ownerDocument
+  container: r,
+  document: i = r?.ownerDocument
 }) {
   const s = Gs(e);
   let a = !1;
@@ -1936,9 +1936,9 @@ async function Xs(e, {
     await n.writeText(s), a = !0;
   } catch {
   }
-  if (t(), !a && i && r) {
-    const o = r.createElement("textarea");
-    o.readOnly = !0, o.value = s, o.textContent = s, i.replaceChildren(o);
+  if (t(), !a && r && i) {
+    const o = i.createElement("textarea");
+    o.readOnly = !0, o.value = s, o.textContent = s, r.replaceChildren(o);
     try {
       o.select?.();
     } catch {
@@ -1947,17 +1947,17 @@ async function Xs(e, {
   return a;
 }
 async function qn(e, t, n, {
-  assertCurrent: i,
-  ownBuffer: r,
+  assertCurrent: r,
+  ownBuffer: i,
   ownHandle: s,
   releaseBuffer: a
 }) {
   const o = await t(n), c = o?.usernameControl, l = o?.passwordControl;
   let d, u;
   try {
-    i();
+    r();
     const f = c?.value, A = l?.value;
-    (typeof f != "string" || typeof A != "string") && M("CREDENTIAL_CONFIRMATION_MISMATCH"), (!We(f) || !We(A)) && M("CREDENTIAL_CONFIRMATION_MISMATCH"), d = Vn.encode(f), r(d), u = Vn.encode(A), r(u);
+    (typeof f != "string" || typeof A != "string") && M("CREDENTIAL_CONFIRMATION_MISMATCH"), (!We(f) || !We(A)) && M("CREDENTIAL_CONFIRMATION_MISMATCH"), d = Vn.encode(f), i(d), u = Vn.encode(A), i(u);
   } finally {
     Mn(c), Mn(l);
     const f = c?.form, A = l?.form;
@@ -1973,11 +1973,11 @@ async function qn(e, t, n, {
   }
   let p;
   try {
-    i(), p = await e.derivePasswordIdentity({
+    r(), p = await e.derivePasswordIdentity({
       accountIndex: 0,
       passwordUtf8: u,
       usernameUtf8: d
-    }), p?.handle || M("CREDENTIAL_CONFIRMATION_MISMATCH"), s(p.handle), i();
+    }), p?.handle || M("CREDENTIAL_CONFIRMATION_MISMATCH"), s(p.handle), r();
     let f;
     try {
       f = ge(p.identity);
@@ -1998,22 +1998,22 @@ class Zs {
   #y = 0;
   #S = 0;
   #e = /* @__PURE__ */ new Set();
-  #r = /* @__PURE__ */ new Set();
-  #i;
-  constructor({ wasm: t, credentialRound: n, expectedIdentity: i = null }) {
-    this.#i = t?.sdn ?? t, this.#f = n;
+  #i = /* @__PURE__ */ new Set();
+  #r;
+  constructor({ wasm: t, credentialRound: n, expectedIdentity: r = null }) {
+    this.#r = t?.sdn ?? t, this.#f = n;
     try {
-      this.#o = i === null ? null : ge(i);
+      this.#o = r === null ? null : ge(r);
     } catch {
       M("CREDENTIAL_CONFIRMATION_MISMATCH");
     }
-    (typeof this.#i?.derivePasswordIdentity != "function" || typeof this.#i?.destroySdnIdentity != "function" || typeof n != "function") && M("CREDENTIAL_CONFIRMATION_MISMATCH");
+    (typeof this.#r?.derivePasswordIdentity != "function" || typeof this.#r?.destroySdnIdentity != "function" || typeof n != "function") && M("CREDENTIAL_CONFIRMATION_MISMATCH");
   }
   get confirmed() {
     return this.#d;
   }
   clear() {
-    return this.#d = null, this.#h || (this.#h = !0, this.#y += 1, this.#o = null), this.#L(), this.#O(), this.#S === 0 && this.#e.size === 0;
+    return this.#d = null, this.#h || (this.#h = !0, this.#y += 1, this.#o = null), this.#L(), this.#R(), this.#S === 0 && this.#e.size === 0;
   }
   destroy() {
     return this.clear();
@@ -2022,23 +2022,23 @@ class Zs {
     if (this.#h && M("CREDENTIAL_CONFIRMATION_MISMATCH"), this.#d) return this.#d;
     this.#S += 1;
     const t = this.#y;
-    let n, i;
+    let n, r;
     try {
-      this.#O(), this.#e.size !== 0 && M("CREDENTIAL_CONFIRMATION_MISMATCH");
+      this.#R(), this.#e.size !== 0 && M("CREDENTIAL_CONFIRMATION_MISMATCH");
       const s = {
         assertCurrent: () => this.#t(t),
-        ownBuffer: (a) => this.#r.add(a),
+        ownBuffer: (a) => this.#i.add(a),
         ownHandle: (a) => this.#e.add(a),
         releaseBuffer: (a) => {
-          $n(a), this.#r.delete(a);
+          $n(a), this.#i.delete(a);
         }
       };
-      return n = await qn(this.#i, this.#f, 1, s), this.#p(n.handle) || M("CREDENTIAL_CONFIRMATION_MISMATCH"), n.handle = null, this.#t(t), i = await qn(this.#i, this.#f, 2, s), this.#p(i.handle) || M("CREDENTIAL_CONFIRMATION_MISMATCH"), i.handle = null, this.#t(t), (!Mt(n.identity, i.identity) || this.#o !== null && (!Mt(n.identity, this.#o) || !Mt(i.identity, this.#o))) && M("CREDENTIAL_CONFIRMATION_MISMATCH"), this.#e.size !== 0 && M("CREDENTIAL_CONFIRMATION_MISMATCH"), this.#d = xi(i.identity), this.#d;
-    } catch (r) {
-      if (this.#d = null, r instanceof Ci && r.code === "CREDENTIAL_CONFIRMATION_MISMATCH") throw r;
+      return n = await qn(this.#r, this.#f, 1, s), this.#p(n.handle) || M("CREDENTIAL_CONFIRMATION_MISMATCH"), n.handle = null, this.#t(t), r = await qn(this.#r, this.#f, 2, s), this.#p(r.handle) || M("CREDENTIAL_CONFIRMATION_MISMATCH"), r.handle = null, this.#t(t), (!Mt(n.identity, r.identity) || this.#o !== null && (!Mt(n.identity, this.#o) || !Mt(r.identity, this.#o))) && M("CREDENTIAL_CONFIRMATION_MISMATCH"), this.#e.size !== 0 && M("CREDENTIAL_CONFIRMATION_MISMATCH"), this.#d = xr(r.identity), this.#d;
+    } catch (i) {
+      if (this.#d = null, i instanceof Cr && i.code === "CREDENTIAL_CONFIRMATION_MISMATCH") throw i;
       M("CREDENTIAL_CONFIRMATION_MISMATCH");
     } finally {
-      this.#L(), this.#O(), this.#S -= 1;
+      this.#L(), this.#R(), this.#S -= 1;
     }
   }
   #t(t) {
@@ -2049,19 +2049,19 @@ class Zs {
     if (this.#v.has(t)) return !1;
     this.#v.add(t);
     try {
-      return this.#i.destroySdnIdentity(t), this.#e.delete(t), !0;
+      return this.#r.destroySdnIdentity(t), this.#e.delete(t), !0;
     } catch {
       return !1;
     } finally {
       this.#v.delete(t);
     }
   }
-  #O() {
+  #R() {
     for (const t of [...this.#e]) this.#p(t);
   }
   #L() {
-    const t = [...this.#r];
-    this.#r.clear();
+    const t = [...this.#i];
+    this.#i.clear();
     for (const n of t) $n(n);
   }
 }
@@ -2069,8 +2069,8 @@ async function eo({
   wasm: e,
   profile: t,
   operation: n,
-  credentials: i,
-  accountIndex: r = 0,
+  credentials: r,
+  accountIndex: i = 0,
   assertCurrent: s = () => {
   },
   ownHandle: a = () => {
@@ -2078,7 +2078,7 @@ async function eo({
 }) {
   const o = e?.sdn ?? e;
   let c;
-  return t === "password-fast-v1-legacy" ? (typeof o?.deriveLegacyPasswordIdentity != "function" && M("INVALID_LEGACY_PROFILE"), c = await o.deriveLegacyPasswordIdentity({ accountIndex: r, ...i })) : t === "bip39-mnemonic-v1-legacy" ? (typeof o?.importLegacyMnemonicIdentity != "function" && M("INVALID_LEGACY_PROFILE"), c = await o.importLegacyMnemonicIdentity({ accountIndex: r, ...i })) : M("INVALID_LEGACY_PROFILE"), c?.handle !== null && c?.handle !== void 0 && a(c.handle), s(), Object.freeze({
+  return t === "password-fast-v1-legacy" ? (typeof o?.deriveLegacyPasswordIdentity != "function" && M("INVALID_LEGACY_PROFILE"), c = await o.deriveLegacyPasswordIdentity({ accountIndex: i, ...r })) : t === "bip39-mnemonic-v1-legacy" ? (typeof o?.importLegacyMnemonicIdentity != "function" && M("INVALID_LEGACY_PROFILE"), c = await o.importLegacyMnemonicIdentity({ accountIndex: i, ...r })) : M("INVALID_LEGACY_PROFILE"), c?.handle !== null && c?.handle !== void 0 && a(c.handle), s(), Object.freeze({
     approval: null,
     handle: c.handle,
     identity: Be(c.identity),
@@ -2089,79 +2089,79 @@ function to(e, { document: t = e.ownerDocument } = {}) {
   e.replaceChildren();
   const n = t.createElement("h2");
   n.textContent = "Migrate legacy wallet";
-  const i = t.createElement("p");
-  i.textContent = "Select the exact legacy profile and compare its legacy xpub and authentication key.";
-  const r = t.createElement("select");
-  r.dataset.walletLegacyProfile = "required";
+  const r = t.createElement("p");
+  r.textContent = "Select the exact legacy profile and compare its legacy xpub and authentication key.";
+  const i = t.createElement("select");
+  i.dataset.walletLegacyProfile = "required";
   for (const [o, c] of [
     ["password-fast-v1-legacy", "Legacy fast-password profile"],
     ["bip39-mnemonic-v1-legacy", "Legacy BIP-39 mnemonic import"]
   ]) {
     const l = t.createElement("option");
-    l.value = o, l.textContent = c, r.append(l);
+    l.value = o, l.textContent = c, i.append(l);
   }
   const s = t.createElement("button");
   s.type = "button", s.dataset.walletAction = "launch-legacy-migration", s.textContent = "Compare selected legacy account";
   const a = t.createElement("div");
-  return a.className = "wallet-legacy-comparison", e.append(n, i, r, s, a), Object.freeze({ launch: s, result: a, select: r });
+  return a.className = "wallet-legacy-comparison", e.append(n, r, i, s, a), Object.freeze({ launch: s, result: a, select: i });
 }
-const Tt = Uint8Array, Di = ArrayBuffer, mn = Object.getPrototypeOf(Tt.prototype), no = Object.getOwnPropertyDescriptor(mn, "buffer").get, io = Object.getOwnPropertyDescriptor(mn, "byteLength").get, ro = Object.getOwnPropertyDescriptor(mn, "byteOffset").get, so = Object.getOwnPropertyDescriptor(Di.prototype, "byteLength").get;
+const Tt = Uint8Array, Dr = ArrayBuffer, mn = Object.getPrototypeOf(Tt.prototype), no = Object.getOwnPropertyDescriptor(mn, "buffer").get, ro = Object.getOwnPropertyDescriptor(mn, "byteLength").get, io = Object.getOwnPropertyDescriptor(mn, "byteOffset").get, so = Object.getOwnPropertyDescriptor(Dr.prototype, "byteLength").get;
 class oo extends Error {
   constructor(t = "RNG_FAILURE") {
     super(t), this.name = "WalletRandomError", this.code = t;
   }
 }
-function Re() {
+function Oe() {
   throw new oo();
 }
 function ao(e) {
   if (!(e instanceof Tt) || Object.getPrototypeOf(e) !== Tt.prototype) return null;
-  let t, n, i;
+  let t, n, r;
   try {
-    t = Reflect.apply(no, e, []), n = Reflect.apply(io, e, []), i = Reflect.apply(ro, e, []);
+    t = Reflect.apply(no, e, []), n = Reflect.apply(ro, e, []), r = Reflect.apply(io, e, []);
   } catch {
     return null;
   }
-  let r;
+  let i;
   try {
-    r = Reflect.apply(so, t, []);
+    i = Reflect.apply(so, t, []);
   } catch {
     return null;
   }
-  return Object.getPrototypeOf(t) !== Di.prototype || i !== 0 || n !== r || n !== 12 && n !== 32 ? null : t;
+  return Object.getPrototypeOf(t) !== Dr.prototype || r !== 0 || n !== i || n !== 12 && n !== 32 ? null : t;
 }
 function co({ getRandomValues: e, observedWrite: t } = {}) {
   if (typeof e != "function")
-    return () => Re();
-  const n = /* @__PURE__ */ new WeakSet(), i = /* @__PURE__ */ new WeakSet();
+    return () => Oe();
+  const n = /* @__PURE__ */ new WeakSet(), r = /* @__PURE__ */ new WeakSet();
   return function(s) {
     const a = ao(s);
-    (!a || n.has(s) || i.has(a)) && Re(), n.add(s), i.add(a);
+    (!a || n.has(s) || r.has(a)) && Oe(), n.add(s), r.add(a);
     let o;
     try {
       o = e(s);
     } catch {
-      Re();
+      Oe();
     }
-    if (o !== s && Re(), t !== void 0) {
-      typeof t != "function" && Re();
+    if (o !== s && Oe(), t !== void 0) {
+      typeof t != "function" && Oe();
       let c = !1;
       try {
         c = t(s) === !0;
       } catch {
-        Re();
+        Oe();
       }
-      c || Re();
+      c || Oe();
     }
     return s;
   };
 }
 function qe(e, t) {
-  (typeof e != "function" || t !== 12 && t !== 32) && Re();
+  (typeof e != "function" || t !== 12 && t !== 32) && Oe();
   const n = new Tt(t);
   return e(n);
 }
-const Et = new TextEncoder(), lo = new TextDecoder("utf-8", { fatal: !0 }), uo = Uint8Array.prototype.fill, fo = Uint8Array.prototype.slice, po = Uint8Array.prototype.subarray, gn = Object.getPrototypeOf(Uint8Array.prototype), ho = Object.getOwnPropertyDescriptor(gn, "buffer").get, Pi = Object.getOwnPropertyDescriptor(gn, "byteLength").get, yo = Object.getOwnPropertyDescriptor(gn, "byteOffset").get, ki = Object.getOwnPropertyDescriptor(ArrayBuffer.prototype, "byteLength").get, mo = ArrayBuffer.prototype.slice, Wn = "webauthn-prf-hkdf-sha256-aes256gcm-v2", go = "sdn-bip32-slip10-purpose-v1", Ao = "password-scrypt-v2", bo = "Space Data Network Wallet", Ui = 12e4;
+const Et = new TextEncoder(), lo = new TextDecoder("utf-8", { fatal: !0 }), uo = Uint8Array.prototype.fill, fo = Uint8Array.prototype.slice, po = Uint8Array.prototype.subarray, gn = Object.getPrototypeOf(Uint8Array.prototype), ho = Object.getOwnPropertyDescriptor(gn, "buffer").get, Pr = Object.getOwnPropertyDescriptor(gn, "byteLength").get, yo = Object.getOwnPropertyDescriptor(gn, "byteOffset").get, kr = Object.getOwnPropertyDescriptor(ArrayBuffer.prototype, "byteLength").get, mo = ArrayBuffer.prototype.slice, Wn = "webauthn-prf-hkdf-sha256-aes256gcm-v2", go = "sdn-bip32-slip10-purpose-v1", Ao = "password-scrypt-v2", bo = "Space Data Network Wallet", Ur = 12e4;
 class Eo extends Error {
   constructor(t) {
     super(t), this.name = "RememberedWalletError", this.code = t;
@@ -2170,17 +2170,17 @@ class Eo extends Error {
 function x(e) {
   throw new Eo(e);
 }
-function zn(e) {
+function Hn(e) {
   if (typeof e != "string") return "";
   const t = e.trim().toLowerCase();
   return t.endsWith(".") ? t.slice(0, -1) : t;
 }
 function wo(e, t) {
   if (e == null || e === "") return;
-  const n = zn(e);
+  const n = Hn(e);
   n === "" && x("INVALID_RP_ID");
-  const i = zn(t);
-  if (i === "" || n === i || i.endsWith(`.${n}`)) return n;
+  const r = Hn(t);
+  if (r === "" || n === r || r.endsWith(`.${n}`)) return n;
   x("INVALID_RP_ID");
 }
 function k(e) {
@@ -2195,7 +2195,7 @@ function _t(e) {
   const t = Object.getPrototypeOf(e);
   return t === Object.prototype || t === null;
 }
-function Bi(e, t) {
+function Br(e, t) {
   if (!_t(e)) return !1;
   let n;
   try {
@@ -2204,50 +2204,50 @@ function Bi(e, t) {
     return !1;
   }
   if (n.some((s) => typeof s != "string")) return !1;
-  const i = [...n].sort(), r = [...t].sort();
-  return i.length === r.length && i.every((s, a) => s === r[a]);
+  const r = [...n].sort(), i = [...t].sort();
+  return r.length === i.length && r.every((s, a) => s === i[a]);
 }
 function st(e, t) {
-  if (!Bi(e, t)) return null;
+  if (!Br(e, t)) return null;
   const n = {};
-  for (const i of t) {
-    let r;
+  for (const r of t) {
+    let i;
     try {
-      r = Object.getOwnPropertyDescriptor(e, i);
+      i = Object.getOwnPropertyDescriptor(e, r);
     } catch {
       return null;
     }
-    if (!r?.enumerable || !("value" in r) || r.value === void 0)
+    if (!i?.enumerable || !("value" in i) || i.value === void 0)
       return null;
-    n[i] = r.value;
+    n[r] = i.value;
   }
   return n;
 }
 function wt(e, t = null) {
   if (!(e instanceof Uint8Array) || Object.getPrototypeOf(e) !== Uint8Array.prototype)
     return !1;
-  let n, i, r, s;
+  let n, r, i, s;
   try {
-    n = Reflect.apply(ho, e, []), i = Reflect.apply(Pi, e, []), r = Reflect.apply(yo, e, []), s = Reflect.apply(ki, n, []);
+    n = Reflect.apply(ho, e, []), r = Reflect.apply(Pr, e, []), i = Reflect.apply(yo, e, []), s = Reflect.apply(kr, n, []);
   } catch {
     return !1;
   }
-  return Object.getPrototypeOf(n) === ArrayBuffer.prototype && r === 0 && i === s && (t === null || i === t);
+  return Object.getPrototypeOf(n) === ArrayBuffer.prototype && i === 0 && r === s && (t === null || r === t);
 }
-function ji(e, t, n) {
+function jr(e, t, n) {
   if (!(e instanceof ArrayBuffer) || Object.getPrototypeOf(e) !== ArrayBuffer.prototype)
     return !1;
-  let i;
+  let r;
   try {
-    i = Reflect.apply(ki, e, []);
+    r = Reflect.apply(kr, e, []);
   } catch {
     return !1;
   }
-  return i >= t && i <= n;
+  return r >= t && r <= n;
 }
 function Pe(e) {
   try {
-    return Reflect.apply(Pi, e, []);
+    return Reflect.apply(Pr, e, []);
   } catch {
     return -1;
   }
@@ -2256,11 +2256,11 @@ function Ze(e) {
   let t = "";
   const n = Pe(e);
   n < 0 && x("INVALID_REMEMBERED_WALLET");
-  for (let i = 0; i < n; i += 32768)
+  for (let r = 0; r < n; r += 32768)
     t += String.fromCharCode(...Reflect.apply(
       po,
       e,
-      [i, i + 32768]
+      [r, r + 32768]
     ));
   return btoa(t).replace(/\+/gu, "-").replace(/\//gu, "_").replace(/=+$/u, "");
 }
@@ -2269,54 +2269,54 @@ function Io(e) {
   for (const n of e) t += n.toString(16).padStart(2, "0");
   return t;
 }
-function ze(e) {
-  return e === null || typeof e == "boolean" || typeof e == "string" || typeof e == "number" && Number.isFinite(e) ? JSON.stringify(e) : Array.isArray(e) ? `[${e.map(ze).join(",")}]` : (_t(e) || x("INVALID_REMEMBERED_WALLET"), `{${Object.keys(e).sort().map((t) => `${JSON.stringify(t)}:${ze(e[t])}`).join(",")}}`);
+function He(e) {
+  return e === null || typeof e == "boolean" || typeof e == "string" || typeof e == "number" && Number.isFinite(e) ? JSON.stringify(e) : Array.isArray(e) ? `[${e.map(He).join(",")}]` : (_t(e) || x("INVALID_REMEMBERED_WALLET"), `{${Object.keys(e).sort().map((t) => `${JSON.stringify(t)}:${He(e[t])}`).join(",")}}`);
 }
 function vo(e, t) {
   if (!(e instanceof Uint8Array) || !(t instanceof Uint8Array)) return !1;
-  const n = Pe(e), i = Pe(t);
-  if (n < 0 || i < 0) return !1;
-  const r = Math.max(n, i);
-  let s = n ^ i;
-  for (let a = 0; a < r; a += 1)
+  const n = Pe(e), r = Pe(t);
+  if (n < 0 || r < 0) return !1;
+  const i = Math.max(n, r);
+  let s = n ^ r;
+  for (let a = 0; a < i; a += 1)
     s |= (e[a] ?? 0) ^ (t[a] ?? 0);
   return s === 0;
 }
 function So(e, t) {
-  return ze(e) === ze(t);
+  return He(e) === He(t);
 }
-function Vi(e) {
+function Vr(e) {
   (!e || typeof e != "object" && typeof e != "function") && x("WEBAUTHN_INVALID_RESPONSE");
-  let t, n, i;
+  let t, n, r;
   try {
-    t = e.type, n = e.rawId, i = e.getClientExtensionResults;
+    t = e.type, n = e.rawId, r = e.getClientExtensionResults;
   } catch {
     x("WEBAUTHN_INVALID_RESPONSE");
   }
-  return (t !== "public-key" || !ji(n, 1, 1024) || typeof i != "function") && x("WEBAUTHN_INVALID_RESPONSE"), Object.freeze({
+  return (t !== "public-key" || !jr(n, 1, 1024) || typeof r != "function") && x("WEBAUTHN_INVALID_RESPONSE"), Object.freeze({
     rawId: new Uint8Array(Reflect.apply(mo, n, [0])),
     readExtensionResults() {
       try {
-        return Reflect.apply(i, e, []);
+        return Reflect.apply(r, e, []);
       } catch {
         x("WEBAUTHN_PRF_REQUIRED");
       }
     }
   });
 }
-function Oo(e) {
+function Ro(e) {
   const t = st(e.readExtensionResults(), ["prf"]), n = t ? st(t.prf, ["enabled"]) : null;
   (!n || n.enabled !== !0) && x("WEBAUTHN_PRF_REQUIRED");
 }
-function Ro(e, t) {
-  const n = Vi(e), i = n.rawId;
-  vo(i, t) || (k(i), x("WEBAUTHN_CREDENTIAL_MISMATCH")), k(i);
-  const r = st(n.readExtensionResults(), ["prf"]), s = r ? st(r.prf, ["results"]) : null, o = (s ? st(s.results, ["first"]) : null)?.first;
-  ji(o, 32, 32) || x("WEBAUTHN_PRF_REQUIRED");
+function Oo(e, t) {
+  const n = Vr(e), r = n.rawId;
+  vo(r, t) || (k(r), x("WEBAUTHN_CREDENTIAL_MISMATCH")), k(r);
+  const i = st(n.readExtensionResults(), ["prf"]), s = i ? st(i.prf, ["results"]) : null, o = (s ? st(s.results, ["first"]) : null)?.first;
+  jr(o, 32, 32) || x("WEBAUTHN_PRF_REQUIRED");
   const c = new Uint8Array(o), l = Reflect.apply(fo, c, []);
   return k(c), l;
 }
-function Lo({ challenge: e, credentialId: t, prfInput: n, rpId: i, signal: r }) {
+function Lo({ challenge: e, credentialId: t, prfInput: n, rpId: r, signal: i }) {
   return {
     publicKey: {
       allowCredentials: [{
@@ -2325,21 +2325,21 @@ function Lo({ challenge: e, credentialId: t, prfInput: n, rpId: i, signal: r })
       }],
       challenge: e,
       extensions: { prf: { eval: { first: n } } },
-      ...i === void 0 ? {} : { rpId: i },
-      timeout: Ui,
+      ...r === void 0 ? {} : { rpId: r },
+      timeout: Ur,
       userVerification: "required"
     },
-    signal: r
+    signal: i
   };
 }
-async function Hn({ assertCurrent: e, credentials: t, credentialId: n, fillRandom: i, prfInput: r, rpId: s, signal: a }) {
-  const o = qe(i, 32);
+async function zn({ assertCurrent: e, credentials: t, credentialId: n, fillRandom: r, prfInput: i, rpId: s, signal: a }) {
+  const o = qe(r, 32);
   let c;
   try {
     c = await t.get(Lo({
       challenge: o,
       credentialId: n,
-      prfInput: r,
+      prfInput: i,
       rpId: s,
       signal: a
     }));
@@ -2348,15 +2348,15 @@ async function Hn({ assertCurrent: e, credentials: t, credentialId: n, fillRando
   } finally {
     k(o);
   }
-  return e(), Ro(c, n);
+  return e(), Oo(c, n);
 }
 function No(e) {
   if (typeof e != "string") return !1;
   for (let t = 0; t < e.length; t += 1) {
     const n = e.charCodeAt(t);
     if (n >= 55296 && n <= 56319) {
-      const i = e.charCodeAt(++t);
-      if (!(i >= 56320 && i <= 57343)) return !1;
+      const r = e.charCodeAt(++t);
+      if (!(r >= 56320 && r <= 57343)) return !1;
     } else if (n >= 56320 && n <= 57343)
       return !1;
   }
@@ -2374,19 +2374,19 @@ function To(e) {
 }
 function en(e) {
   const t = To(e).replace(/^ +/u, "").replace(/ +$/u, "").replace(/[A-Z]/gu, (n) => n.toLowerCase());
-  return Ni(t) || x("INVALID_USERNAME"), t;
+  return Nr(t) || x("INVALID_USERNAME"), t;
 }
 function _o(e) {
   let t;
   try {
-    t = ti(e?.module);
+    t = tr(e?.module);
   } catch {
     x("WASM_UNAVAILABLE");
   }
-  return (!Bi(t, ["sdn", "sha256"]) || typeof t.sha256 != "function" || !t.sdn || typeof t.sdn != "object") && x("WASM_UNAVAILABLE"), t;
+  return (!Br(t, ["sdn", "sha256"]) || typeof t.sha256 != "function" || !t.sdn || typeof t.sdn != "object") && x("WASM_UNAVAILABLE"), t;
 }
 function Co(e) {
-  const t = _o(e), n = t.sdn, i = e?.storage, r = e?.credentials, s = co(e?.rng), a = e?.createRequestController, o = e?.releaseRequestController, c = e?.ownHandle, l = e?.destroyHandle, d = e?.ownedHandlesClean, u = e?.now ?? (() => /* @__PURE__ */ new Date()), p = e?.rpHostname ?? e?.window?.location?.hostname ?? globalThis?.location?.hostname, f = wo(e?.rpId, p), A = typeof e?.rpName == "string" && e.rpName !== "" ? e.rpName : bo, b = () => typeof r?.create == "function" && typeof r?.get == "function", h = () => _i(i), m = () => js(i), g = (T) => Vs(i, T), S = (T, q) => ($s(i, T, q), m().some((v) => v.key === T) && x("STORAGE_WRITE_FAILED"), !0), I = () => h().active.status === "valid", U = ({ confirmation: T } = {}) => (I() || x("REMEMBER_UNAVAILABLE"), Ms(i, T), h().active.status !== "empty" && x("STORAGE_WRITE_FAILED"), !0), P = async (T) => {
+  const t = _o(e), n = t.sdn, r = e?.storage, i = e?.credentials, s = co(e?.rng), a = e?.createRequestController, o = e?.releaseRequestController, c = e?.ownHandle, l = e?.destroyHandle, d = e?.ownedHandlesClean, u = e?.now ?? (() => /* @__PURE__ */ new Date()), p = e?.rpHostname ?? e?.window?.location?.hostname ?? globalThis?.location?.hostname, f = wo(e?.rpId, p), A = typeof e?.rpName == "string" && e.rpName !== "" ? e.rpName : bo, b = () => typeof i?.create == "function" && typeof i?.get == "function", h = () => _r(r), m = () => js(r), g = (T) => Vs(r, T), S = (T, q) => ($s(r, T, q), m().some((v) => v.key === T) && x("STORAGE_WRITE_FAILED"), !0), I = () => h().active.status === "valid", U = ({ confirmation: T } = {}) => (I() || x("REMEMBER_UNAVAILABLE"), Ms(r, T), h().active.status !== "empty" && x("STORAGE_WRITE_FAILED"), !0), P = async (T) => {
     let q;
     try {
       q = await t.sha256(Et.encode(T));
@@ -2414,14 +2414,14 @@ function Co(e) {
       }), oe = Ae(v.prfInputBase64url, { exact: 32 }), X = Ae(v.ciphertextBase64url, {
         minimum: 17,
         maximum: 1024
-      }), B = Ae(v.hkdfSaltBase64url, { exact: 32 }), N = Ae(v.nonceBase64url, { exact: 12 }), K = Et.encode(v.canonicalUsername), Z = ze(v.aad), G = typeof a == "function" ? a() : null;
+      }), B = Ae(v.hkdfSaltBase64url, { exact: 32 }), N = Ae(v.nonceBase64url, { exact: 12 }), K = Et.encode(v.canonicalUsername), Z = He(v.aad), G = typeof a == "function" ? a() : null;
       (!G?.signal || typeof G.abort != "function") && (k(_), k(oe), k(X), k(B), k(N), k(K), x("WEBAUTHN_UNAVAILABLE"));
-      let Y, ie = null, ae = !1;
+      let Y, re = null, ae = !1;
       try {
-        Y = await Hn({
+        Y = await zn({
           assertCurrent: T,
           credentialId: _,
-          credentials: r,
+          credentials: i,
           fillRandom: s,
           prfInput: oe,
           rpId: f,
@@ -2441,26 +2441,26 @@ function Co(e) {
         } finally {
           k(le), Y = null;
         }
-        _t(se) || x("WASM_FAILURE"), ie = se.handle, (ie == null || typeof c != "function") && x("WASM_FAILURE"), c(ie);
+        _t(se) || x("WASM_FAILURE"), re = se.handle, (re == null || typeof c != "function") && x("WASM_FAILURE"), c(re);
         const Q = ge(se.identity);
-        return T(), ae = !0, Object.freeze({ handle: ie, identity: Q });
+        return T(), ae = !0, Object.freeze({ handle: re, identity: Q });
       } finally {
-        !ae && ie !== null && typeof l == "function" && (l(ie) || x("DESTRUCTION_FAILED")), k(Y), k(_), k(oe), k(X), k(B), k(N), k(K), typeof o == "function" && o(G);
+        !ae && re !== null && typeof l == "function" && (l(re) || x("DESTRUCTION_FAILED")), k(Y), k(_), k(oe), k(X), k(B), k(N), k(K), typeof o == "function" && o(G);
       }
     },
-    setup: async ({ assertCurrent: T, canonicalUsername: q, handle: v, identity: z, passwordUtf8: _ }) => {
+    setup: async ({ assertCurrent: T, canonicalUsername: q, handle: v, identity: H, passwordUtf8: _ }) => {
       try {
         (typeof T != "function" || v === null || v === void 0 || !wt(_) || Pe(_) === 0 || Pe(_) > 256 || en(q) !== q || !b() || typeof n.sealRememberedIdentity != "function" || typeof n.importRememberedIdentity != "function" || typeof c != "function" || typeof l != "function" || typeof d != "function" || typeof a != "function" || typeof o != "function") && (k(_), x("REMEMBER_UNAVAILABLE"));
-        const oe = ge(z);
+        const oe = ge(H);
         h().canSetup || (k(_), x("STORAGE_QUARANTINED"));
         const B = typeof a == "function" ? a() : null;
         (!B?.signal || typeof B.abort != "function") && (k(_), x("WEBAUTHN_UNAVAILABLE"));
-        let N, K, Z, G, Y, ie, ae, se, le, Q = null, Ne = null;
+        let N, K, Z, G, Y, re, ae, se, le, Q = null, Ne = null;
         try {
           N = qe(s, 32), K = qe(s, 32), Z = qe(s, 32), G = qe(s, 32), Y = qe(s, 12), T();
           let $e;
           try {
-            $e = await r.create({
+            $e = await i.create({
               publicKey: {
                 attestation: "none",
                 authenticatorSelection: {
@@ -2474,7 +2474,7 @@ function Co(e) {
                   { alg: -257, type: "public-key" }
                 ],
                 rp: f === void 0 ? { name: A } : { id: f, name: A },
-                timeout: Ui,
+                timeout: Ur,
                 user: {
                   displayName: q,
                   id: K,
@@ -2487,11 +2487,11 @@ function Co(e) {
             throw T(), Ce;
           }
           T();
-          const Ke = Vi($e);
-          ie = Ke.rawId, Oo(Ke), ae = await Hn({
+          const Ke = Vr($e);
+          re = Ke.rawId, Ro(Ke), ae = await zn({
             assertCurrent: T,
-            credentialId: ie,
-            credentials: r,
+            credentialId: re,
+            credentials: i,
             fillRandom: s,
             prfInput: Z,
             rpId: f,
@@ -2499,17 +2499,17 @@ function Co(e) {
           }), se = ae.slice(), le = ae.slice(), k(ae), ae = null;
           const Se = await P(q);
           T();
-          const Me = Ze(ie), Ge = Object.freeze({
+          const Me = Ze(re), Ge = Object.freeze({
             credentialIdBase64url: Me,
             identityScheme: go,
             schemaVersion: 2,
             seedProfile: Ao,
             storageProfile: Wn,
             usernameSha256: Se
-          }), Je = ze(Ge);
-          let Oe;
+          }), Je = He(Ge);
+          let Re;
           try {
-            Oe = n.sealRememberedIdentity(v, {
+            Re = n.sealRememberedIdentity(v, {
               canonicalAad: Je,
               hkdfSalt: G,
               nonce: Y,
@@ -2520,8 +2520,8 @@ function Co(e) {
             k(_), k(se);
           }
           _ = null, se = null;
-          const Te = Pe(Oe);
-          (!wt(Oe) || Te < 17 || Te > 1024) && x("WASM_FAILURE");
+          const Te = Pe(Re);
+          (!wt(Re) || Te < 17 || Te > 1024) && x("WASM_FAILURE");
           let Ye;
           try {
             const Ce = u();
@@ -2532,7 +2532,7 @@ function Co(e) {
           const ft = Object.freeze({
             aad: Ge,
             canonicalUsername: q,
-            ciphertextBase64url: Ze(Oe),
+            ciphertextBase64url: Ze(Re),
             createdAt: Ye,
             credentialIdBase64url: Me,
             hkdfSaltBase64url: Ze(G),
@@ -2541,14 +2541,14 @@ function Co(e) {
             schemaVersion: 2,
             storageProfile: Wn
           });
-          T(), Ne = ks(i, ft);
+          T(), Ne = ks(r, ft);
           let _e;
           const Qe = le;
           try {
             _e = n.importRememberedIdentity({
               canonicalAad: Je,
               canonicalUsernameUtf8: Et.encode(q),
-              ciphertextAndTag: Oe.slice(),
+              ciphertextAndTag: Re.slice(),
               hkdfSalt: G.slice(),
               nonce: Y.slice(),
               prfOutput: Qe
@@ -2558,9 +2558,9 @@ function Co(e) {
           }
           _t(_e) || x("WASM_FAILURE"), Q = _e.handle, (Q == null || typeof c != "function") && x("WASM_FAILURE"), c(Q);
           const pt = ge(_e.identity);
-          return So(oe, pt) || x("IDENTITY_MISMATCH"), T(), (typeof l != "function" || !l(Q)) && x("DESTRUCTION_FAILED"), Q = null, (typeof d != "function" || !d(v)) && x("DESTRUCTION_FAILED"), T(), Us(i, Ne), Ne = null, Object.freeze({ remembered: !0 });
+          return So(oe, pt) || x("IDENTITY_MISMATCH"), T(), (typeof l != "function" || !l(Q)) && x("DESTRUCTION_FAILED"), Q = null, (typeof d != "function" || !d(v)) && x("DESTRUCTION_FAILED"), T(), Us(r, Ne), Ne = null, Object.freeze({ remembered: !0 });
         } finally {
-          Q !== null && typeof l == "function" && l(Q), k(_), k(N), k(K), k(ae), k(se), k(le), k(G), k(Y), k(ie), typeof o == "function" && o(B);
+          Q !== null && typeof l == "function" && l(Q), k(_), k(N), k(K), k(ae), k(se), k(le), k(G), k(Y), k(re), typeof o == "function" && o(B);
         }
       } finally {
         k(_);
@@ -2592,13 +2592,13 @@ class Ct extends Error {
 function D() {
   throw new Ct();
 }
-function $i(e) {
+function $r(e) {
   if (e === null || typeof e != "object" || Array.isArray(e)) return !1;
   const t = Object.getPrototypeOf(e);
   return t === Object.prototype || t === null;
 }
-function Mi(e, t) {
-  $i(e) || D();
+function Mr(e, t) {
+  $r(e) || D();
   let n;
   try {
     n = Reflect.ownKeys(e);
@@ -2606,9 +2606,9 @@ function Mi(e, t) {
     D();
   }
   n.some((s) => typeof s != "string") && D();
-  const i = [...n].sort(), r = [...t].sort();
-  (i.length !== r.length || i.some((s, a) => s !== r[a])) && D();
-  for (const s of i) {
+  const r = [...n].sort(), i = [...t].sort();
+  (r.length !== i.length || r.some((s, a) => s !== i[a])) && D();
+  for (const s of r) {
     let a;
     try {
       a = Object.getOwnPropertyDescriptor(e, s);
@@ -2621,15 +2621,15 @@ function Mi(e, t) {
 }
 function tn(e) {
   if (Array.isArray(e)) return Object.freeze(e.map(tn));
-  if (!$i(e)) return e;
+  if (!$r(e)) return e;
   const t = {};
   for (const n of Object.keys(e).sort()) t[n] = tn(e[n]);
   return Object.freeze(t);
 }
 function Vo(e, t) {
   (typeof e != "string" || Bo.encode(e).byteLength > t || e.charCodeAt(0) === 65279) && D();
-  let n = 0, i = 0;
-  const r = () => {
+  let n = 0, r = 0;
+  const i = () => {
     for (; n < e.length && /[\u0009\u000a\u000d\u0020]/u.test(e[n]); ) n += 1;
   }, s = () => {
     e[n] !== '"' && D();
@@ -2657,18 +2657,18 @@ function Vo(e, t) {
     }
     D();
   }, a = (c = 0) => {
-    (c > 32 || ++i > 4096) && D(), r();
+    (c > 32 || ++r > 4096) && D(), i();
     const l = e[n];
     if (l === '"') return s();
     if (l === "{") {
       n += 1;
       const p = /* @__PURE__ */ Object.create(null), f = /* @__PURE__ */ new Set();
-      if (r(), e[n] === "}")
+      if (i(), e[n] === "}")
         return n += 1, p;
       for (; n < e.length; ) {
-        r();
+        i();
         const A = s();
-        if (f.has(A) && D(), f.add(A), r(), e[n] !== ":" && D(), n += 1, p[A] = a(c + 1), r(), e[n] === "}")
+        if (f.has(A) && D(), f.add(A), i(), e[n] !== ":" && D(), n += 1, p[A] = a(c + 1), i(), e[n] === "}")
           return n += 1, p;
         e[n] !== "," && D(), n += 1;
       }
@@ -2677,10 +2677,10 @@ function Vo(e, t) {
     if (l === "[") {
       n += 1;
       const p = [];
-      if (r(), e[n] === "]")
+      if (i(), e[n] === "]")
         return n += 1, p;
       for (; n < e.length; ) {
-        if (p.push(a(c + 1)), r(), e[n] === "]")
+        if (p.push(a(c + 1)), i(), e[n] === "]")
           return n += 1, p;
         e[n] !== "," && D(), n += 1;
       }
@@ -2694,9 +2694,9 @@ function Vo(e, t) {
     const u = Number(d[0]);
     return Number.isFinite(u) || D(), u;
   };
-  r();
+  i();
   const o = a();
-  return r(), n !== e.length && D(), o;
+  return i(), n !== e.length && D(), o;
 }
 function Kn(e) {
   try {
@@ -2705,7 +2705,7 @@ function Kn(e) {
   } catch {
   }
 }
-function Fi(e, t = null) {
+function Fr(e, t = null) {
   try {
     const n = t?.cancel;
     typeof n == "function" && Kn(Reflect.apply(n, t, []));
@@ -2713,19 +2713,19 @@ function Fi(e, t = null) {
   }
   if (!t)
     try {
-      const n = e?.body, i = n?.cancel;
-      typeof i == "function" && Kn(Reflect.apply(i, n, []));
+      const n = e?.body, r = n?.cancel;
+      typeof r == "function" && Kn(Reflect.apply(r, n, []));
     } catch {
     }
 }
-function qi(e, t, n = null) {
-  let i;
+function qr(e, t, n = null) {
+  let r;
   try {
-    i = Promise.resolve(e);
+    r = Promise.resolve(e);
   } catch {
     return Promise.reject(new Ct());
   }
-  return t ? new Promise((r, s) => {
+  return t ? new Promise((i, s) => {
     let a = !1;
     const o = () => {
       try {
@@ -2738,9 +2738,9 @@ function qi(e, t, n = null) {
     } catch {
       l();
     }
-    i.then(
+    r.then(
       (d) => {
-        if (!c(r, d))
+        if (!c(i, d))
           try {
             n?.(d);
           } catch {
@@ -2750,18 +2750,18 @@ function qi(e, t, n = null) {
         c(s, d);
       }
     );
-  }) : i;
+  }) : r;
 }
-async function $o(e, t, n, i) {
-  let r = null;
+async function $o(e, t, n, r) {
+  let i = null;
   try {
-    (!e || e.status !== t || e.redirected === !0 || e.headers?.get?.("cache-control")?.trim().toLowerCase() !== "no-store" || e.headers?.get?.("content-type")?.trim().toLowerCase() !== "application/json; charset=utf-8" || typeof e.body?.getReader != "function") && D(), r = e.body.getReader(), (!r || typeof r.read != "function" || i?.aborted === !0) && D();
+    (!e || e.status !== t || e.redirected === !0 || e.headers?.get?.("cache-control")?.trim().toLowerCase() !== "no-store" || e.headers?.get?.("content-type")?.trim().toLowerCase() !== "application/json; charset=utf-8" || typeof e.body?.getReader != "function") && D(), i = e.body.getReader(), (!i || typeof i.read != "function" || r?.aborted === !0) && D();
     const s = [];
     let a = 0;
     for (; ; ) {
-      i?.aborted === !0 && D();
-      const { done: l, value: d } = await qi(r.read(), i);
-      if (i?.aborted === !0 && D(), l) break;
+      r?.aborted === !0 && D();
+      const { done: l, value: d } = await qr(i.read(), r);
+      if (r?.aborted === !0 && D(), l) break;
       d instanceof Uint8Array || D(), a += d.byteLength, a > n && D(), s.push(d);
     }
     const o = new Uint8Array(a);
@@ -2770,31 +2770,31 @@ async function $o(e, t, n, i) {
       o.set(l, c), c += l.byteLength;
     return Vo(jo.decode(o), n);
   } catch (s) {
-    if (Fi(e, r), s instanceof Ct) throw s;
+    if (Fr(e, i), s instanceof Ct) throw s;
     D();
   } finally {
     try {
-      r?.releaseLock?.();
+      i?.releaseLock?.();
     } catch {
     }
   }
 }
 function Gn(e, t) {
-  return Mi(e, Do), (e.schemaVersion !== 1 || e.transactionId !== t || !ot.test(e.transactionId) || !ot.test(e.state) || !ot.test(e.requestSha256) || !xo.test(e.resultToken) || typeof e.callbackUri != "string" || typeof e.clientDisplayName != "string" || typeof e.clientId != "string" || typeof e.expiresAt != "string" || typeof e.operation != "string" || typeof e.registryVersion != "string" || typeof e.requestOrigin != "string") && D(), tn(e);
+  return Mr(e, Do), (e.schemaVersion !== 1 || e.transactionId !== t || !ot.test(e.transactionId) || !ot.test(e.state) || !ot.test(e.requestSha256) || !xo.test(e.resultToken) || typeof e.callbackUri != "string" || typeof e.clientDisplayName != "string" || typeof e.clientId != "string" || typeof e.expiresAt != "string" || typeof e.operation != "string" || typeof e.registryVersion != "string" || typeof e.requestOrigin != "string") && D(), tn(e);
 }
 function nn(e, t) {
-  Mi(t, Po), (t.schemaVersion !== 1 || t.transactionId !== e.transactionId || typeof t.redirectUri != "string") && D();
-  const n = `${e.callbackUri}#code=`, i = `&state=${e.state}`;
-  (!t.redirectUri.startsWith(n) || !t.redirectUri.endsWith(i)) && D();
-  const r = t.redirectUri.slice(n.length, t.redirectUri.length - i.length);
-  return (!ot.test(r) || t.redirectUri !== `${n}${r}${i}`) && D(), Object.freeze({
+  Mr(t, Po), (t.schemaVersion !== 1 || t.transactionId !== e.transactionId || typeof t.redirectUri != "string") && D();
+  const n = `${e.callbackUri}#code=`, r = `&state=${e.state}`;
+  (!t.redirectUri.startsWith(n) || !t.redirectUri.endsWith(r)) && D();
+  const i = t.redirectUri.slice(n.length, t.redirectUri.length - r.length);
+  return (!ot.test(i) || t.redirectUri !== `${n}${i}${r}`) && D(), Object.freeze({
     redirectUri: t.redirectUri,
     schemaVersion: 1,
     transactionId: t.transactionId
   });
 }
 function Jn(e, t, n = void 0) {
-  const i = {
+  const r = {
     cache: "no-store",
     credentials: "omit",
     headers: e === "POST" ? { Accept: "application/json", "Content-Type": "application/json" } : { Accept: "application/json" },
@@ -2804,32 +2804,32 @@ function Jn(e, t, n = void 0) {
     referrerPolicy: "no-referrer",
     signal: t
   };
-  return n !== void 0 && (i.body = JSON.stringify(n)), i;
+  return n !== void 0 && (r.body = JSON.stringify(n)), r;
 }
 function Mo({ fetch: e, location: t }) {
   (typeof e != "function" || typeof t?.replace != "function") && D();
-  const n = /* @__PURE__ */ new Set(), i = async (r, s, a, o) => {
+  const n = /* @__PURE__ */ new Set(), r = async (i, s, a, o) => {
     let c;
     try {
-      c = await qi(e(r, s), s.signal, (l) => Fi(l));
+      c = await qr(e(i, s), s.signal, (l) => Fr(l));
     } catch {
       D();
     }
     return $o(c, a, o, s.signal);
   };
   return Object.freeze({
-    async fetchTransaction(r, { signal: s } = {}) {
-      (typeof r != "string" || !ot.test(r)) && D();
-      const a = await i(
-        `/relay/v1/transactions/${r}`,
+    async fetchTransaction(i, { signal: s } = {}) {
+      (typeof i != "string" || !ot.test(i)) && D();
+      const a = await r(
+        `/relay/v1/transactions/${i}`,
         Jn("GET", s),
         200,
         ko
       );
-      return Gn(a, r);
+      return Gn(a, i);
     },
-    async publishResult(r, s, { signal: a } = {}) {
-      const o = Gn(r, r?.transactionId), c = await i(
+    async publishResult(i, s, { signal: a } = {}) {
+      const o = Gn(i, i?.transactionId), c = await r(
         `/relay/v1/transactions/${o.transactionId}/result`,
         Jn("POST", a, {
           result: s,
@@ -2842,10 +2842,10 @@ function Mo({ fetch: e, location: t }) {
       ), l = nn(o, c);
       return n.clear(), n.add(l.redirectUri), l;
     },
-    navigate(r) {
-      (typeof r != "string" || !n.delete(r)) && D();
+    navigate(i) {
+      (typeof i != "string" || !n.delete(i)) && D();
       try {
-        Reflect.apply(t.replace, t, [r]);
+        Reflect.apply(t.replace, t, [i]);
       } catch {
         D();
       }
@@ -2858,7 +2858,7 @@ function Mo({ fetch: e, location: t }) {
     }
   });
 }
-const Wi = Uint8Array, Fo = Wi.prototype.fill, et = new TextEncoder();
+const Wr = Uint8Array, Fo = Wr.prototype.fill, et = new TextEncoder();
 class $ extends Error {
   constructor(t) {
     super(t), this.name = "WalletOriginError", this.code = t;
@@ -2871,7 +2871,7 @@ function tt(e) {
   throw e instanceof Ie ? new $(e.code) : e;
 }
 function ye(e) {
-  if (e instanceof Wi)
+  if (e instanceof Wr)
     try {
       Fo.call(e, 0);
     } catch {
@@ -2882,8 +2882,8 @@ function nt(e) {
   for (let t = 0; t < e.length; t += 1) {
     const n = e.charCodeAt(t);
     if (n >= 55296 && n <= 56319) {
-      const i = e.charCodeAt(++t);
-      if (!(i >= 56320 && i <= 57343)) return !1;
+      const r = e.charCodeAt(++t);
+      if (!(r >= 56320 && r <= 57343)) return !1;
     } else if (n >= 56320 && n <= 57343) return !1;
   }
   return !0;
@@ -2931,32 +2931,32 @@ function Yn(e) {
       }
   }
 }
-function it(e, t) {
+function rt(e, t) {
   const n = /* @__PURE__ */ new Set();
-  for (const i of t) {
-    let r = null;
+  for (const r of t) {
+    let i = null;
     try {
-      r = i?.form ?? i?.closest?.("form") ?? null;
+      i = r?.form ?? r?.closest?.("form") ?? null;
     } catch {
-      r = null;
+      i = null;
     }
-    r && n.add(r), Yn(i);
+    i && n.add(i), Yn(r);
   }
-  for (const i of n) {
-    let r = [];
+  for (const r of n) {
+    let i = [];
     try {
-      r = i.querySelectorAll?.("input, textarea") ?? [];
+      i = r.querySelectorAll?.("input, textarea") ?? [];
     } catch {
-      r = [];
+      i = [];
     }
-    for (const s of r) Yn(s);
+    for (const s of i) Yn(s);
     try {
-      i.inert = !0, i.setAttribute?.("aria-hidden", "true");
+      r.inert = !0, r.setAttribute?.("aria-hidden", "true");
       const s = e.createElement("div");
-      s.dataset.walletCredentialState = "cleared", i.replaceWith?.(s), i.replaceChildren?.();
+      s.dataset.walletCredentialState = "cleared", r.replaceWith?.(s), r.replaceChildren?.();
     } catch {
       try {
-        i.remove?.();
+        r.remove?.();
       } catch {
       }
     }
@@ -2965,12 +2965,12 @@ function it(e, t) {
 function qo(e) {
   let t;
   try {
-    t = ti(e);
+    t = tr(e);
   } catch {
     E("WASM_UNAVAILABLE");
   }
-  const n = t?.sdn, i = t?.sha256;
-  return (!n || typeof n.derivePasswordIdentity != "function" || typeof n.destroySdnIdentity != "function" || typeof i != "function") && E("WASM_UNAVAILABLE"), Object.freeze({ capabilities: n, sha256: i });
+  const n = t?.sdn, r = t?.sha256;
+  return (!n || typeof n.derivePasswordIdentity != "function" || typeof n.destroySdnIdentity != "function" || typeof r != "function") && E("WASM_UNAVAILABLE"), Object.freeze({ capabilities: n, sha256: r });
 }
 function yt(e) {
   const t = e?.AbortController ?? globalThis.AbortController;
@@ -2985,11 +2985,11 @@ class Wo {
   #y = /* @__PURE__ */ new Set();
   #S = null;
   #e = !1;
-  #r;
-  #i = 0;
+  #i;
+  #r = 0;
   #t = null;
   #p = null;
-  #O = [];
+  #R = [];
   #L = /* @__PURE__ */ new Set();
   #a = /* @__PURE__ */ new Set();
   #g = null;
@@ -3003,7 +3003,7 @@ class Wo {
   #$ = !1;
   #A = null;
   #n = !1;
-  #R = 0;
+  #O = 0;
   #l = /* @__PURE__ */ new Set();
   #D;
   #N = /* @__PURE__ */ new Set();
@@ -3011,8 +3011,8 @@ class Wo {
   constructor({
     credentials: t,
     document: n,
-    now: i,
-    registry: r,
+    now: r,
+    registry: i,
     relay: s,
     rng: a,
     rpId: o,
@@ -3022,7 +3022,7 @@ class Wo {
     window: u
   }) {
     const p = qo(d);
-    this.#f = p.capabilities, this.#D = p.sha256, this.#x = r, this.#c = s, this.#r = n, this.#s = u, this.#m = Co({
+    this.#f = p.capabilities, this.#D = p.sha256, this.#x = i, this.#c = s, this.#i = n, this.#s = u, this.#m = Co({
       createRequestController: () => {
         const f = yt(this.#s);
         return f && (this.#o.add(f), this.#N.add(f)), f;
@@ -3033,7 +3033,7 @@ class Wo {
       rpName: c,
       destroyHandle: (f) => this.#b(f),
       module: d,
-      now: i,
+      now: r,
       ownHandle: (f) => this.#a.add(f),
       ownedHandlesClean: (f) => this.#a.size === 1 && this.#a.has(f) && this.#t === f,
       releaseRequestController: (f) => {
@@ -3044,21 +3044,21 @@ class Wo {
       },
       storage: l ?? u?.localStorage ?? globalThis.localStorage
     }), this.#v = os({
-      now: i,
+      now: r,
       storage: l ?? u?.localStorage ?? globalThis.localStorage
     }), this.#q();
   }
   get generation() {
-    return this.#i;
+    return this.#r;
   }
   #U() {
-    return this.#i = this.#i >= Number.MAX_SAFE_INTEGER ? 1 : this.#i + 1, this.#i;
+    return this.#r = this.#r >= Number.MAX_SAFE_INTEGER ? 1 : this.#r + 1, this.#r;
   }
   #q() {
-    const t = (n, i, r) => {
-      n?.addEventListener?.(i, r), this.#O.push([n, i, r]);
+    const t = (n, r, i) => {
+      n?.addEventListener?.(r, i), this.#R.push([n, r, i]);
     };
-    t(this.#s, "pagehide", () => this.revokeNow("pagehide")), t(this.#r, "freeze", () => this.revokeNow("freeze")), t(this.#s, "beforeunload", () => this.revokeNow("beforeunload")), t(this.#s, "pageshow", (n) => {
+    t(this.#s, "pagehide", () => this.revokeNow("pagehide")), t(this.#i, "freeze", () => this.revokeNow("freeze")), t(this.#s, "beforeunload", () => this.revokeNow("beforeunload")), t(this.#s, "pageshow", (n) => {
       if (n?.persisted === !0) {
         this.revokeNow("bfcache-restore");
         try {
@@ -3069,12 +3069,12 @@ class Wo {
     });
   }
   #W() {
-    for (const [t, n, i] of this.#O)
+    for (const [t, n, r] of this.#R)
       try {
-        t?.removeEventListener?.(n, i);
+        t?.removeEventListener?.(n, r);
       } catch {
       }
-    this.#O = [];
+    this.#R = [];
   }
   #b(t = this.#t) {
     if (t == null) return !0;
@@ -3105,7 +3105,7 @@ class Wo {
       } catch {
       }
   }
-  #z() {
+  #H() {
     const t = [...this.#N];
     this.#N.clear();
     for (const n of t) {
@@ -3123,31 +3123,31 @@ class Wo {
   }
   #T(t = []) {
     if (this.#y.size === 0) return;
-    const n = new Set(t), i = [];
-    for (const r of this.#y)
-      n.has(r) || i.push(r);
+    const n = new Set(t), r = [];
+    for (const i of this.#y)
+      n.has(i) || r.push(i);
     this.#y = new Set(
-      [...this.#y].filter((r) => n.has(r))
-    ), it(this.#r, i);
+      [...this.#y].filter((i) => n.has(i))
+    ), rt(this.#i, r);
   }
   #j(t = []) {
     (this.#e || this.#n) && E("STALE_CONTROLLER");
     const n = this.#U();
-    this.#T(t), this.#z(), this.#B();
-    let i = this.#b();
-    return i && (i = this.#E() && this.#a.size === 0), i || (this.revokeNow("native-destruction-failed"), this.#E(), E("DESTRUCTION_FAILED")), this.#A = null, n;
+    this.#T(t), this.#H(), this.#B();
+    let r = this.#b();
+    return r && (r = this.#E() && this.#a.size === 0), r || (this.revokeNow("native-destruction-failed"), this.#E(), E("DESTRUCTION_FAILED")), this.#A = null, n;
   }
   #V(t, n, {
-    allowPublication: i = !1,
-    retainIdentity: r = !1
+    allowPublication: r = !1,
+    retainIdentity: i = !1
   } = {}) {
-    const s = !this.#e && !this.#n && this.#i === n && this.#t === t, a = this.#t === t || this.#a.has(t);
+    const s = !this.#e && !this.#n && this.#r === n && this.#t === t, a = this.#t === t || this.#a.has(t);
     if (!s) {
       const p = !a || this.#b(t);
       return p || (this.revokeNow("native-destruction-failed"), this.#E()), Object.freeze({ destroyed: p, permit: null });
     }
-    const o = this.#R, c = i ? Object.freeze({}) : null;
-    this.#U(), this.#n = !0, this.#d = !1, this.#u = c, this.#a.add(t), this.#t = null, this.#p = null, r || (this.#A = null);
+    const o = this.#O, c = r ? Object.freeze({}) : null;
+    this.#U(), this.#n = !0, this.#d = !1, this.#u = c, this.#a.add(t), this.#t = null, this.#p = null, i || (this.#A = null);
     const l = this.#h;
     this.#h = null;
     let d = this.#b(t);
@@ -3161,17 +3161,17 @@ class Wo {
     } catch {
     }
     this.#T(), this.#B(), this.#M(), d || this.#E();
-    const u = d && this.#R === o && this.#u === c ? c : null;
+    const u = d && this.#O === o && this.#u === c ? c : null;
     return u === null && this.#u === c && (this.#u = null), Object.freeze({ destroyed: d, permit: u });
   }
   #w(t, n) {
-    (this.#e || this.#n || this.#i !== n || this.#t !== t) && E("STALE_CONTROLLER");
+    (this.#e || this.#n || this.#r !== n || this.#t !== t) && E("STALE_CONTROLLER");
   }
   #_(t) {
-    (this.#e || this.#n || this.#i !== t) && E("STALE_CONTROLLER");
+    (this.#e || this.#n || this.#r !== t) && E("STALE_CONTROLLER");
   }
   #I(t, n) {
-    (this.#e || this.#R !== t || this.#a.size !== 0 || n === null || this.#u !== n) && E("STALE_CONTROLLER");
+    (this.#e || this.#O !== t || this.#a.size !== 0 || n === null || this.#u !== n) && E("STALE_CONTROLLER");
   }
   #F(t) {
     if (this.#C) return this.#C;
@@ -3179,15 +3179,15 @@ class Wo {
     if (!n || t !== "connected" && t !== "disconnected")
       return Promise.reject(new $("STALE_CONTROLLER"));
     this.#g = null, this.#A = null;
-    let i, r;
+    let r, i;
     const s = new Promise((a, o) => {
-      i = a, r = o;
+      r = a, i = o;
     });
     return this.#C = s, (async () => {
       const a = yt(this.#s);
       a && this.#o.add(a);
       try {
-        this.#I(n.epoch, n.permit), ue({ document: this.#r, window: this.#s }), typeof this.#c?.publishResult != "function" && E("RELAY_UNAVAILABLE");
+        this.#I(n.epoch, n.permit), ue({ document: this.#i, window: this.#s }), typeof this.#c?.publishResult != "function" && E("RELAY_UNAVAILABLE");
         const o = t === "connected" ? n.connectedResult : vs();
         let c;
         try {
@@ -3197,19 +3197,19 @@ class Wo {
         } catch (l) {
           throw this.#I(n.epoch, n.permit), l;
         }
-        if (this.#I(n.epoch, n.permit), ue({ document: this.#r, window: this.#s }), typeof this.#c?.navigate == "function") {
+        if (this.#I(n.epoch, n.permit), ue({ document: this.#i, window: this.#s }), typeof this.#c?.navigate == "function") {
           const l = nn(n.transaction, c);
           this.#I(n.epoch, n.permit), this.#u = null, this.#c.navigate(l.redirectUri);
         } else
           this.#u = null;
-        i(c);
+        r(c);
       } catch (o) {
         this.#u === n.permit && (this.#u = null);
         try {
           this.#c?.revokeNow?.("account-publication-failed");
         } catch {
         }
-        r(o);
+        i(o);
       } finally {
         a && this.#o.delete(a);
       }
@@ -3257,7 +3257,7 @@ class Wo {
     }
   }
   isUiGenerationCurrent(t) {
-    return Number.isSafeInteger(t) && t === this.#i && !this.#e && (!this.#n || this.#g !== null);
+    return Number.isSafeInteger(t) && t === this.#r && !this.#e && (!this.#n || this.#g !== null);
   }
   listQuarantinedWalletRecords() {
     (this.#e || this.#n && !this.#g) && E("STALE_CONTROLLER");
@@ -3279,8 +3279,8 @@ class Wo {
     (this.#e || this.#n && !this.#g) && E("STALE_CONTROLLER");
     try {
       return this.#m.deleteQuarantine(t, n);
-    } catch (i) {
-      throw typeof i?.code == "string" ? new $(i.code) : i;
+    } catch (r) {
+      throw typeof r?.code == "string" ? new $(r.code) : r;
     }
   }
   canForgetRememberedWallet() {
@@ -3302,33 +3302,33 @@ class Wo {
   async unlockPassword({
     accountIndex: t = 0,
     passwordControl: n,
-    rememberControl: i = null,
-    rememberStatus: r = null,
+    rememberControl: r = null,
+    rememberStatus: i = null,
     usernameControl: s
   }) {
     (this.#e || this.#n) && E("STALE_CONTROLLER"), t !== 0 && E("INVALID_ACCOUNT"), (!s || !n) && E("INVALID_CREDENTIAL_FORM");
     try {
-      ue({ document: this.#r, window: this.#s });
+      ue({ document: this.#i, window: this.#s });
     } catch (h) {
-      it(
-        this.#r,
-        [s, n, i].filter(Boolean)
+      rt(
+        this.#i,
+        [s, n, r].filter(Boolean)
       ), tt(h);
     }
     let a;
     try {
       a = this.#j([s, n]);
     } catch (h) {
-      throw it(
-        this.#r,
-        [s, n, i].filter(Boolean)
+      throw rt(
+        this.#i,
+        [s, n, r].filter(Boolean)
       ), h;
     }
     this.registerCredentialControls({ passwordControl: n, usernameControl: s });
     let o, c, l, d, u, p, f = null, A = !1;
     try {
       try {
-        ue({ document: this.#r, window: this.#s });
+        ue({ document: this.#i, window: this.#s });
       } catch (m) {
         tt(m);
       }
@@ -3340,19 +3340,19 @@ class Wo {
       } catch {
         E("INVALID_USERNAME");
       }
-      c = et.encode(h), p = et.encode(f), A = i?.checked === !0 && i?.disabled !== !0 && this.#m.supported(), A ? ((p.length === 0 || p.length > 256) && E("INVALID_PASSWORD"), l = p.slice(), d = p.slice(), u = d, ye(p), p = null) : (l = p, p = null), this.#l.add(c), this.#l.add(l), d && this.#l.add(d);
+      c = et.encode(h), p = et.encode(f), A = r?.checked === !0 && r?.disabled !== !0 && this.#m.supported(), A ? ((p.length === 0 || p.length > 256) && E("INVALID_PASSWORD"), l = p.slice(), d = p.slice(), u = d, ye(p), p = null) : (l = p, p = null), this.#l.add(c), this.#l.add(l), d && this.#l.add(d);
     } finally {
-      if (f = null, i && typeof i == "object") {
+      if (f = null, r && typeof r == "object") {
         try {
-          i.checked = !1;
+          r.checked = !1;
         } catch {
         }
         try {
-          i.defaultChecked = !1;
+          r.defaultChecked = !1;
         } catch {
         }
         try {
-          i.disabled = !0;
+          r.disabled = !0;
         } catch {
         }
       }
@@ -3374,7 +3374,7 @@ class Wo {
         const g = this.#b(h);
         b = null, g || (this.revokeNow("native-destruction-failed"), E("DESTRUCTION_FAILED")), E("WASM_FAILURE");
       }
-      if ((this.#e || this.#n || this.#i !== a) && (this.#b(h) || (this.revokeNow("native-destruction-failed"), E("DESTRUCTION_FAILED")), E("STALE_CONTROLLER")), this.#t = h, this.#p = m, A)
+      if ((this.#e || this.#n || this.#r !== a) && (this.#b(h) || (this.revokeNow("native-destruction-failed"), E("DESTRUCTION_FAILED")), E("STALE_CONTROLLER")), this.#t = h, this.#p = m, A)
         try {
           await this.#m.setup({
             assertCurrent: () => this.#w(h, a),
@@ -3384,19 +3384,19 @@ class Wo {
             passwordUtf8: d
           }), this.#w(h, a), this.#l.delete(u), d = null;
           try {
-            r && (r.textContent = "Wallet remembered on this device.");
+            i && (i.textContent = "Wallet remembered on this device.");
           } catch {
           }
         } catch {
-          ye(d), this.#l.delete(u), d = null, (this.#e || this.#n || this.#i !== a || this.#t !== h) && E("STALE_CONTROLLER"), this.#a.size === 1 && this.#a.has(h) && this.#t === h || (this.revokeNow("remembered-wallet-cleanup-failed"), E("DESTRUCTION_FAILED"));
+          ye(d), this.#l.delete(u), d = null, (this.#e || this.#n || this.#r !== a || this.#t !== h) && E("STALE_CONTROLLER"), this.#a.size === 1 && this.#a.has(h) && this.#t === h || (this.revokeNow("remembered-wallet-cleanup-failed"), E("DESTRUCTION_FAILED"));
           try {
-            r && (r.textContent = "Wallet was not remembered.");
+            i && (i.textContent = "Wallet was not remembered.");
           } catch {
           }
         }
       return this.#w(h, a), m;
     } catch (h) {
-      throw h instanceof $ && h.code === "DESTRUCTION_FAILED" || (this.#e || this.#n || this.#i !== a) && E("STALE_CONTROLLER"), h;
+      throw h instanceof $ && h.code === "DESTRUCTION_FAILED" || (this.#e || this.#n || this.#r !== a) && E("STALE_CONTROLLER"), h;
     } finally {
       ye(c), ye(l), ye(d), ye(u), this.#l.delete(c), this.#l.delete(l), this.#l.delete(u);
     }
@@ -3404,60 +3404,60 @@ class Wo {
   async unlockRemembered({ accountIndex: t = 0 } = {}) {
     (this.#e || this.#n) && E("STALE_CONTROLLER"), t !== 0 && E("INVALID_ACCOUNT"), this.canRestoreRememberedWallet() || E("REMEMBER_UNAVAILABLE");
     try {
-      ue({ document: this.#r, window: this.#s });
-    } catch (i) {
-      tt(i);
+      ue({ document: this.#i, window: this.#s });
+    } catch (r) {
+      tt(r);
     }
     const n = this.#j();
     try {
-      const i = await this.#m.restore({
+      const r = await this.#m.restore({
         assertCurrent: () => this.#_(n)
-      }), r = i?.handle;
-      (r == null || !this.#a.has(r)) && E("WASM_FAILURE");
+      }), i = r?.handle;
+      (i == null || !this.#a.has(i)) && E("WASM_FAILURE");
       let s;
       try {
-        s = ge(i.identity);
+        s = ge(r.identity);
       } catch {
         E("WASM_FAILURE");
       }
-      return (this.#e || this.#n || this.#i !== n) && (this.#b(r) || (this.revokeNow("native-destruction-failed"), E("DESTRUCTION_FAILED")), E("STALE_CONTROLLER")), this.#t = r, this.#p = s, s;
-    } catch (i) {
-      throw i instanceof $ && i.code === "DESTRUCTION_FAILED" || ((this.#e || this.#n || this.#i !== n) && E("STALE_CONTROLLER"), this.#a.size > 0 && (this.#E(), this.#a.size > 0 && (this.revokeNow("remembered-wallet-cleanup-failed"), E("DESTRUCTION_FAILED"))), i instanceof $) ? i : typeof i?.code == "string" ? new $(i.code) : i;
+      return (this.#e || this.#n || this.#r !== n) && (this.#b(i) || (this.revokeNow("native-destruction-failed"), E("DESTRUCTION_FAILED")), E("STALE_CONTROLLER")), this.#t = i, this.#p = s, s;
+    } catch (r) {
+      throw r instanceof $ && r.code === "DESTRUCTION_FAILED" || ((this.#e || this.#n || this.#r !== n) && E("STALE_CONTROLLER"), this.#a.size > 0 && (this.#E(), this.#a.size > 0 && (this.revokeNow("remembered-wallet-cleanup-failed"), E("DESTRUCTION_FAILED"))), r instanceof $) ? r : typeof r?.code == "string" ? new $(r.code) : r;
     }
   }
   async unlockLegacy({
     accountIndex: t = 0,
     mnemonicControl: n = null,
-    operation: i,
-    passwordControl: r = null,
+    operation: r,
+    passwordControl: i = null,
     profile: s,
     usernameControl: a = null
   }) {
-    (this.#e || this.#n) && E("STALE_CONTROLLER"), i !== "sdn.auth.raw-challenge.v1" && E("OPERATION_NOT_ALLOWED"), t !== 0 && E("INVALID_ACCOUNT");
+    (this.#e || this.#n) && E("STALE_CONTROLLER"), r !== "sdn.auth.raw-challenge.v1" && E("OPERATION_NOT_ALLOWED"), t !== 0 && E("INVALID_ACCOUNT");
     const o = s === "password-fast-v1-legacy";
-    !o && !(s === "bip39-mnemonic-v1-legacy") && E("INVALID_LEGACY_PROFILE"), o ? (!a || !r) && E("INVALID_CREDENTIAL_FORM") : (!n || typeof n != "object") && E("INVALID_CREDENTIAL_FORM");
-    const l = o ? [a, r] : [n];
+    !o && !(s === "bip39-mnemonic-v1-legacy") && E("INVALID_LEGACY_PROFILE"), o ? (!a || !i) && E("INVALID_CREDENTIAL_FORM") : (!n || typeof n != "object") && E("INVALID_CREDENTIAL_FORM");
+    const l = o ? [a, i] : [n];
     try {
-      ue({ document: this.#r, window: this.#s });
+      ue({ document: this.#i, window: this.#s });
     } catch (b) {
-      it(this.#r, l), tt(b);
+      rt(this.#i, l), tt(b);
     }
     let d;
     try {
       d = this.#j(l);
     } catch (b) {
-      throw it(this.#r, l), b;
+      throw rt(this.#i, l), b;
     }
-    o ? this.registerCredentialControls({ passwordControl: r, usernameControl: a }) : this.#y.add(n);
+    o ? this.registerCredentialControls({ passwordControl: i, usernameControl: a }) : this.#y.add(n);
     let u, p, f;
     try {
       try {
-        ue({ document: this.#r, window: this.#s });
+        ue({ document: this.#i, window: this.#s });
       } catch (b) {
         tt(b);
       }
       if (this.#_(d), o) {
-        const b = a?.value, h = r?.value;
+        const b = a?.value, h = i?.value;
         nt(b) || E("INVALID_USERNAME"), nt(h) || E("INVALID_PASSWORD"), u = et.encode(b), p = et.encode(h), this.#l.add(u), this.#l.add(p);
       } else {
         const b = n?.value;
@@ -3477,46 +3477,46 @@ class Wo {
       b == null && E("WASM_FAILURE"), this.#a.add(b);
       let h;
       try {
-        h = Hs(A.identity, { accountIndex: t, profile: s });
+        h = zs(A.identity, { accountIndex: t, profile: s });
       } catch {
         const m = this.#b(b);
         A = null, m || (this.revokeNow("native-destruction-failed"), E("DESTRUCTION_FAILED")), E("WASM_FAILURE");
       }
-      return (this.#e || this.#n || this.#i !== d) && (this.#b(b) || (this.revokeNow("native-destruction-failed"), E("DESTRUCTION_FAILED")), E("STALE_CONTROLLER")), this.#t = b, this.#p = h, h;
+      return (this.#e || this.#n || this.#r !== d) && (this.#b(b) || (this.revokeNow("native-destruction-failed"), E("DESTRUCTION_FAILED")), E("STALE_CONTROLLER")), this.#t = b, this.#p = h, h;
     } catch (b) {
-      throw b instanceof $ && b.code === "DESTRUCTION_FAILED" || (this.#e || this.#n || this.#i !== d) && E("STALE_CONTROLLER"), b;
+      throw b instanceof $ && b.code === "DESTRUCTION_FAILED" || (this.#e || this.#n || this.#r !== d) && E("STALE_CONTROLLER"), b;
     } finally {
       ye(u), ye(p), ye(f), this.#l.delete(u), this.#l.delete(p), this.#l.delete(f);
     }
   }
   async prepare(t) {
     (this.#e || this.#n) && E("STALE_CONTROLLER"), this.#d && E("TRANSACTION_IN_PROGRESS"), this.#d = !0;
-    const n = this.#i, i = typeof t == "string" ? t : t?.transactionId ?? null, r = yt(this.#s);
-    r && this.#o.add(r);
+    const n = this.#r, r = typeof t == "string" ? t : t?.transactionId ?? null, i = yt(this.#s);
+    i && this.#o.add(i);
     try {
-      const s = typeof this.#c?.fetchTransaction == "function" ? await this.#c.fetchTransaction(t, { signal: r?.signal }) : t;
+      const s = typeof this.#c?.fetchTransaction == "function" ? await this.#c.fetchTransaction(t, { signal: i?.signal }) : t;
       this.#_(n);
       const a = await $t(s, {
-        expectedTransactionId: i,
+        expectedTransactionId: r,
         registry: this.#x,
         relay: this.#c,
         sha256: this.#D,
         window: this.#s
       });
-      return this.#_(n), ue({ document: this.#r, window: this.#s }), this.#P.add(a), r && this.#k.set(a, r), a;
+      return this.#_(n), ue({ document: this.#i, window: this.#s }), this.#P.add(a), i && this.#k.set(a, i), a;
     } catch (s) {
-      const a = this.#e || this.#n || this.#i !== n;
-      throw this.#d = !1, r && this.#o.delete(r), a && E("STALE_CONTROLLER"), s instanceof $ ? s : s instanceof Ie ? new $(s.code) : s;
+      const a = this.#e || this.#n || this.#r !== n;
+      throw this.#d = !1, i && this.#o.delete(i), a && E("STALE_CONTROLLER"), s instanceof $ ? s : s instanceof Ie ? new $(s.code) : s;
     }
   }
   async executePrepared(t) {
     (!t || typeof t != "object" || !this.#P.has(t)) && E("INVALID_TRANSACTION"), this.#P.delete(t);
     const n = this.#k.get(t) ?? null;
     this.#k.delete(t), (this.#e || this.#n || this.#t === null) && (n && this.#o.delete(n), this.#d = !1, E("STALE_CONTROLLER"));
-    const i = this.#t, r = this.#p, s = this.#i;
+    const r = this.#t, i = this.#p, s = this.#r;
     let a = !1;
     try {
-      this.#w(i, s);
+      this.#w(r, s);
       let o = await $t(t.transaction, {
         expectedTransactionId: t.transaction.transactionId,
         registry: this.#x,
@@ -3524,13 +3524,13 @@ class Wo {
         sha256: this.#D,
         window: this.#s
       });
-      this.#w(i, s), ue({ document: this.#r, window: this.#s });
-      const c = ss(o.binding, r);
+      this.#w(r, s), ue({ document: this.#i, window: this.#s });
+      const c = ss(o.binding, i);
       if (!this.#v.take(c)) {
         this.#h = ws({
           binding: o.binding,
-          document: this.#r,
-          identity: r,
+          document: this.#i,
+          identity: i,
           offerRemember: c !== null,
           request: o.request,
           transaction: o.transaction
@@ -3538,30 +3538,30 @@ class Wo {
         const A = await this.#h.promise;
         c !== null && A?.remember === !0 && this.#v.grant(c);
       }
-      this.#w(i, s), ue({ document: this.#r, window: this.#s }), o = await $t(t.transaction, {
+      this.#w(r, s), ue({ document: this.#i, window: this.#s }), o = await $t(t.transaction, {
         expectedTransactionId: t.transaction.transactionId,
         registry: this.#x,
         relay: this.#c,
         sha256: this.#D,
         window: this.#s
-      }), this.#w(i, s), ue({ document: this.#r, window: this.#s });
+      }), this.#w(r, s), ue({ document: this.#i, window: this.#s });
       const l = await Is({
-        assertCurrent: () => this.#w(i, s),
+        assertCurrent: () => this.#w(r, s),
         binding: o.binding,
-        handle: i,
-        identity: r,
+        handle: r,
+        identity: i,
         transaction: o.transaction,
         wasm: this.#f
       });
-      this.#w(i, s), ue({ document: this.#r, window: this.#s });
+      this.#w(r, s), ue({ document: this.#i, window: this.#s });
       const d = o.transaction.operation === "sdn.wallet.account.v1";
-      d && (this.#A = ge(r));
-      const u = this.#V(i, s, {
+      d && (this.#A = ge(i));
+      const u = this.#V(r, s, {
         allowPublication: !0,
         retainIdentity: d
       });
       a = !0, u.destroyed || (this.#A = null, E("DESTRUCTION_FAILED"));
-      const p = this.#R, f = u.permit;
+      const p = this.#O, f = u.permit;
       if (d)
         return this.#I(p, f), this.#g = Object.freeze({
           connectedResult: l,
@@ -3585,7 +3585,7 @@ class Wo {
         } finally {
           A && this.#o.delete(A);
         }
-        if (this.#I(p, f), ue({ document: this.#r, window: this.#s }), typeof this.#c?.navigate == "function") {
+        if (this.#I(p, f), ue({ document: this.#i, window: this.#s }), typeof this.#c?.navigate == "function") {
           const h = nn(o.transaction, b);
           this.#I(p, f), this.#u = null, this.#c.navigate(h.redirectUri);
         } else
@@ -3595,19 +3595,19 @@ class Wo {
         this.#u === f && (this.#u = null);
       }
     } catch (o) {
-      throw !a && (this.#i !== s || this.#t !== i) && E("STALE_CONTROLLER"), o instanceof $ ? o : o instanceof Ie ? new $(o.code) : o;
+      throw !a && (this.#r !== s || this.#t !== r) && E("STALE_CONTROLLER"), o instanceof $ ? o : o instanceof Ie ? new $(o.code) : o;
     } finally {
-      n && this.#o.delete(n), a || this.#V(i, s);
+      n && this.#o.delete(n), a || this.#V(r, s);
     }
   }
   async execute(t) {
     (this.#e || this.#n || this.#t === null) && E("STALE_CONTROLLER");
-    const n = this.#t, i = this.#i;
+    const n = this.#t, r = this.#r;
     try {
-      const r = await this.prepare(t);
-      return await this.executePrepared(r);
-    } catch (r) {
-      throw !this.#n && this.#t === n && this.#V(n, i), r;
+      const i = await this.prepare(t);
+      return await this.executePrepared(i);
+    } catch (i) {
+      throw !this.#n && this.#t === n && this.#V(n, r), i;
     }
   }
   async logout() {
@@ -3619,24 +3619,24 @@ class Wo {
     return this.#F("connected");
   }
   revokeNow(t) {
-    if (this.#R = this.#R >= Number.MAX_SAFE_INTEGER ? 1 : this.#R + 1, this.#u = null, this.#g = null, this.#e) {
+    if (this.#O = this.#O >= Number.MAX_SAFE_INTEGER ? 1 : this.#O + 1, this.#u = null, this.#g = null, this.#e) {
       this.#E();
       return;
     }
     !this.#n && (this.#n = !0, this.#U()), this.#d = !1, this.#A = null, this.#t !== null && this.#t !== void 0 && this.#a.add(this.#t), this.#t = null, this.#p = null;
-    const i = this.#h;
+    const r = this.#h;
     this.#h = null;
-    const r = !this.#$;
-    r && (this.#$ = !0);
+    const i = !this.#$;
+    i && (this.#$ = !0);
     try {
-      i?.cancel("STALE_CONTROLLER");
+      r?.cancel("STALE_CONTROLLER");
     } catch {
     }
     try {
-      i?.destroy();
+      r?.destroy();
     } catch {
     }
-    if (this.#T(), this.#B(), this.#M(), this.#E(), r)
+    if (this.#T(), this.#B(), this.#M(), this.#E(), i)
       try {
         this.#c?.revokeNow?.(t);
       } catch {
@@ -3646,10 +3646,10 @@ class Wo {
     if (this.#S)
       return this.#E(), this.#S;
     let n;
-    const i = new Promise((r) => {
-      n = r;
+    const r = new Promise((i) => {
+      n = i;
     });
-    return this.#S = i, (async () => {
+    return this.#S = r, (async () => {
       try {
         this.revokeNow(t), this.#e = !0, this.#W();
         try {
@@ -3659,10 +3659,10 @@ class Wo {
       } finally {
         n();
       }
-    })(), i;
+    })(), r;
   }
 }
-const zo = [
+const Ho = [
   {
     allowedOperations: [
       "sdn.wallet.account.v1",
@@ -3730,7 +3730,7 @@ const zo = [
     audiences: [
       "sdn-field-encryption/v1|flatbuffers"
     ],
-    callbackUri: "https://digitalarsenal.github.io/flatbuffers/wallet-callback.html",
+    callbackUri: "https://flatbuffers.spacedatanetwork.org/wallet-callback.html",
     clientDisplayName: "FlatBuffers Documentation",
     clientId: "sdn-flatbuffers-pages-v1",
     operationBindings: [
@@ -3759,7 +3759,7 @@ const zo = [
         serviceInstance: null
       }
     ],
-    requestOrigin: "https://digitalarsenal.github.io"
+    requestOrigin: "https://flatbuffers.spacedatanetwork.org"
   },
   {
     allowedOperations: [
@@ -3770,7 +3770,7 @@ const zo = [
     audiences: [
       "sdn-field-encryption/v1|flatsql"
     ],
-    callbackUri: "https://digitalarsenal.github.io/flatsql/wallet-callback.html",
+    callbackUri: "https://flatsql.spacedatanetwork.org/wallet-callback.html",
     clientDisplayName: "FlatSQL Documentation",
     clientId: "sdn-flatsql-pages-v1",
     operationBindings: [
@@ -3799,7 +3799,7 @@ const zo = [
         serviceInstance: null
       }
     ],
-    requestOrigin: "https://digitalarsenal.github.io"
+    requestOrigin: "https://flatsql.spacedatanetwork.org"
   },
   {
     allowedOperations: [
@@ -3807,7 +3807,7 @@ const zo = [
       "sdn.wallet.connect.v1"
     ],
     audiences: [],
-    callbackUri: "https://digitalarsenal.github.io/space-data-module-sdk/wallet-callback.html",
+    callbackUri: "https://module-sdk.spacedatanetwork.org/wallet-callback.html",
     clientDisplayName: "Space Data Module SDK",
     clientId: "sdn-module-sdk-pages-v1",
     operationBindings: [
@@ -3828,7 +3828,7 @@ const zo = [
         serviceInstance: null
       }
     ],
-    requestOrigin: "https://digitalarsenal.github.io"
+    requestOrigin: "https://module-sdk.spacedatanetwork.org"
   },
   {
     allowedOperations: [
@@ -3923,9 +3923,9 @@ const zo = [
       "sdn.wallet.connect.v1"
     ],
     audiences: [],
-    callbackUri: "https://digitalarsenal.github.io/OrbPro/wallet-callback.html",
-    clientDisplayName: "OrbPro",
-    clientId: "orbpro-pages-v1",
+    callbackUri: "https://digitalarsenal.github.io/hd-wallet-wasm/wallet-callback.html",
+    clientDisplayName: "DigitalArsenal GitHub Pages",
+    clientId: "digitalarsenal-pages-v1",
     operationBindings: [
       {
         audience: null,
@@ -3952,7 +3952,7 @@ const zo = [
       "sdn.wallet.connect.v1"
     ],
     audiences: [],
-    callbackUri: "https://digitalarsenal.github.io/asset-models/wallet-callback.html",
+    callbackUri: "https://asset-models.spacedatanetwork.org/wallet-callback.html",
     clientDisplayName: "SDN Asset Models",
     clientId: "sdn-asset-models-pages-v1",
     operationBindings: [
@@ -3973,7 +3973,7 @@ const zo = [
         serviceInstance: null
       }
     ],
-    requestOrigin: "https://digitalarsenal.github.io"
+    requestOrigin: "https://asset-models.spacedatanetwork.org"
   },
   {
     allowedOperations: [
@@ -4025,9 +4025,9 @@ const zo = [
     ],
     requestOrigin: "https://review.spacedatanetwork.org"
   }
-], Ho = "63784143e2ad8e2542d22148ff4a0a4da7a10f4b3f9909ae91a20dc0f60db06b", Ko = 1, zi = {
-  clients: zo,
-  registryReleaseSha256: Ho,
+], zo = "f5f7e3eab42bbb12bd85d95289e0a8006941ceb8505f6dc1cde12a38f4a79a63", Ko = 1, Hr = {
+  clients: Ho,
+  registryReleaseSha256: zo,
   schemaVersion: Ko
 }, Go = new TextEncoder(), Jo = /^[0-9a-f]{64}$/u, Yo = /^[a-z0-9]+(?:-[a-z0-9]+)*$/u, Qo = Object.freeze({
   "sdn.auth.publish-request.v1": Object.freeze({
@@ -4100,15 +4100,17 @@ const zo = [
 ]), Qn = Object.freeze([
   Object.freeze(["sdn-landing-web-v1", "Space Data Network", "https://spacedatanetwork.org", "https://spacedatanetwork.org/wallet-callback.html", be]),
   Object.freeze(["sdn-standards-web-v1", "Space Data Standards", "https://spacedatastandards.org", "https://spacedatastandards.org/wallet-callback.html", be]),
-  Object.freeze(["sdn-flatbuffers-pages-v1", "FlatBuffers Documentation", "https://digitalarsenal.github.io", "https://digitalarsenal.github.io/flatbuffers/wallet-callback.html", ea]),
-  Object.freeze(["sdn-flatsql-pages-v1", "FlatSQL Documentation", "https://digitalarsenal.github.io", "https://digitalarsenal.github.io/flatsql/wallet-callback.html", ta]),
-  Object.freeze(["sdn-module-sdk-pages-v1", "Space Data Module SDK", "https://digitalarsenal.github.io", "https://digitalarsenal.github.io/space-data-module-sdk/wallet-callback.html", be]),
+  Object.freeze(["sdn-flatbuffers-pages-v1", "FlatBuffers Documentation", "https://flatbuffers.spacedatanetwork.org", "https://flatbuffers.spacedatanetwork.org/wallet-callback.html", ea]),
+  Object.freeze(["sdn-flatsql-pages-v1", "FlatSQL Documentation", "https://flatsql.spacedatanetwork.org", "https://flatsql.spacedatanetwork.org/wallet-callback.html", ta]),
+  Object.freeze(["sdn-module-sdk-pages-v1", "Space Data Module SDK", "https://module-sdk.spacedatanetwork.org", "https://module-sdk.spacedatanetwork.org/wallet-callback.html", be]),
   Object.freeze(["spaceaware-web-v1", "SpaceAware", "https://spaceaware.io", "https://spaceaware.io/wallet/callback", Zo]),
   Object.freeze(["sdn-node-console-v1", "SDN Node Console", "https://sdn.spaceaware.io", "https://sdn.spaceaware.io/wallet/callback", Xo]),
-  Object.freeze(["orbpro-pages-v1", "OrbPro", "https://digitalarsenal.github.io", "https://digitalarsenal.github.io/OrbPro/wallet-callback.html", be]),
-  Object.freeze(["sdn-asset-models-pages-v1", "SDN Asset Models", "https://digitalarsenal.github.io", "https://digitalarsenal.github.io/asset-models/wallet-callback.html", be]),
+  // Every page on digitalarsenal.github.io is one browser origin, so it is one
+  // client and signs in only: no key operation is bound to a shared origin.
+  Object.freeze(["digitalarsenal-pages-v1", "DigitalArsenal GitHub Pages", "https://digitalarsenal.github.io", "https://digitalarsenal.github.io/hd-wallet-wasm/wallet-callback.html", be]),
+  Object.freeze(["sdn-asset-models-pages-v1", "SDN Asset Models", "https://asset-models.spacedatanetwork.org", "https://asset-models.spacedatanetwork.org/wallet-callback.html", be]),
   Object.freeze(["sdn-asset-review-v1", "SDN Asset Review", "https://review.spacedatanetwork.org", "https://review.spacedatanetwork.org/wallet/callback", na])
-]), ia = Object.freeze([
+]), ra = Object.freeze([
   Object.freeze({
     audience: null,
     clientId: "spaceaware-web-v1",
@@ -4154,7 +4156,7 @@ const zo = [
     clientId: "sdn-flatbuffers-pages-v1",
     maxLifetimeSeconds: 300,
     operation: "sdn.wallet.field-open.v1",
-    requestOrigin: "https://digitalarsenal.github.io",
+    requestOrigin: "https://flatbuffers.spacedatanetwork.org",
     registryRow: "flatbuffers-field-open-v1",
     serviceActivationState: null,
     serviceInstance: null
@@ -4164,7 +4166,7 @@ const zo = [
     clientId: "sdn-flatsql-pages-v1",
     maxLifetimeSeconds: 300,
     operation: "sdn.wallet.key-unwrap.v1",
-    requestOrigin: "https://digitalarsenal.github.io",
+    requestOrigin: "https://flatsql.spacedatanetwork.org",
     registryRow: "flatsql-key-unwrap-v1",
     serviceActivationState: null,
     serviceInstance: null
@@ -4180,11 +4182,11 @@ function An(e) {
 }
 function It(e, t, n) {
   An(e) || V(`${n} must be an object`);
-  const i = Reflect.ownKeys(e);
-  i.some((a) => typeof a != "string") && V(`${n} has missing or unknown fields`);
-  const r = i.sort(), s = [...t].sort();
-  (r.length !== s.length || r.some((a, o) => a !== s[o])) && V(`${n} has missing or unknown fields`);
-  for (const a of r) {
+  const r = Reflect.ownKeys(e);
+  r.some((a) => typeof a != "string") && V(`${n} has missing or unknown fields`);
+  const i = r.sort(), s = [...t].sort();
+  (i.length !== s.length || i.some((a, o) => a !== s[o])) && V(`${n} has missing or unknown fields`);
+  for (const a of i) {
     const o = Object.getOwnPropertyDescriptor(e, a);
     (!o || !o.enumerable || !("value" in o) || o.value === void 0) && V(`${n} has an invalid field`);
   }
@@ -4193,11 +4195,11 @@ function It(e, t, n) {
 function me(e) {
   return e === null || typeof e == "boolean" || typeof e == "string" ? JSON.stringify(e) : typeof e == "number" ? (Number.isFinite(e) || V("registry contains a non-finite number"), JSON.stringify(e)) : Array.isArray(e) ? `[${e.map(me).join(",")}]` : (An(e) || V("registry contains an unsupported value"), `{${Object.keys(e).sort().map((t) => `${JSON.stringify(t)}:${me(e[t])}`).join(",")}}`);
 }
-async function ra(e) {
+async function ia(e) {
   const t = globalThis.crypto?.subtle;
   t || V("Web Crypto SHA-256 is unavailable");
   const n = new Uint8Array(await t.digest("SHA-256", Go.encode(e)));
-  return Array.from(n, (i) => i.toString(16).padStart(2, "0")).join("");
+  return Array.from(n, (r) => r.toString(16).padStart(2, "0")).join("");
 }
 function xt(e) {
   if (Array.isArray(e)) return Object.freeze(e.map(xt));
@@ -4229,8 +4231,8 @@ function oa(e, t) {
 function aa(e) {
   It(e, ["clients", "registryReleaseSha256", "schemaVersion"], "registry"), e.schemaVersion !== 1 && V("registry schemaVersion must be 1"), (typeof e.registryReleaseSha256 != "string" || !Jo.test(e.registryReleaseSha256)) && V("registryReleaseSha256 must be lowercase SHA-256"), (!Array.isArray(e.clients) || e.clients.length !== Qn.length) && V("registry must contain exactly the reviewed clients");
   const t = /* @__PURE__ */ new Set(), n = /* @__PURE__ */ new Set();
-  e.clients.forEach((i, r) => {
-    It(i, [
+  e.clients.forEach((r, i) => {
+    It(r, [
       "allowedOperations",
       "audiences",
       "callbackUri",
@@ -4238,9 +4240,9 @@ function aa(e) {
       "clientId",
       "operationBindings",
       "requestOrigin"
-    ], `client ${r}`);
-    const [s, a, o, c, l] = Qn[r];
-    (i.clientId !== s || i.clientDisplayName !== a || i.requestOrigin !== o || i.callbackUri !== c) && V(`client ${r} differs from the reviewed row`), (!Yo.test(i.clientId) || t.has(i.clientId)) && V("clientId must be unique and canonical"), t.add(i.clientId), (typeof i.clientDisplayName != "string" || i.clientDisplayName.length < 1 || i.clientDisplayName.length > 80) && V("clientDisplayName is invalid"), sa(i.requestOrigin, "requestOrigin"), oa(i.callbackUri, i.requestOrigin), (!Array.isArray(i.allowedOperations) || me(i.allowedOperations) !== me(l)) && V(`${i.clientId} allowedOperations differ from the reviewed allowlist`), (!Array.isArray(i.operationBindings) || i.operationBindings.length !== l.length) && V(`${i.clientId} operationBindings differ from the reviewed allowlist`), i.operationBindings.forEach((u, p) => {
+    ], `client ${i}`);
+    const [s, a, o, c, l] = Qn[i];
+    (r.clientId !== s || r.clientDisplayName !== a || r.requestOrigin !== o || r.callbackUri !== c) && V(`client ${i} differs from the reviewed row`), (!Yo.test(r.clientId) || t.has(r.clientId)) && V("clientId must be unique and canonical"), t.add(r.clientId), (typeof r.clientDisplayName != "string" || r.clientDisplayName.length < 1 || r.clientDisplayName.length > 80) && V("clientDisplayName is invalid"), sa(r.requestOrigin, "requestOrigin"), oa(r.callbackUri, r.requestOrigin), (!Array.isArray(r.allowedOperations) || me(r.allowedOperations) !== me(l)) && V(`${r.clientId} allowedOperations differ from the reviewed allowlist`), (!Array.isArray(r.operationBindings) || r.operationBindings.length !== l.length) && V(`${r.clientId} operationBindings differ from the reviewed allowlist`), r.operationBindings.forEach((u, p) => {
       It(u, [
         "audience",
         "maxLifetimeSeconds",
@@ -4248,51 +4250,51 @@ function aa(e) {
         "registryRow",
         "serviceActivationState",
         "serviceInstance"
-      ], `${i.clientId} operation ${p}`);
+      ], `${r.clientId} operation ${p}`);
       const f = l[p];
-      u.operation !== f && V(`${i.clientId} operation allowlist order or value changed`);
+      u.operation !== f && V(`${r.clientId} operation allowlist order or value changed`);
       const A = Qo[u.operation];
-      A || V("unknown registry operation"), (u.maxLifetimeSeconds !== 300 || u.audience !== A.audience || u.registryRow !== A.registryRow || u.serviceActivationState !== A.serviceActivationState || u.serviceInstance !== A.serviceInstance) && V(`${i.clientId} operation policy differs from the reviewed binding`);
-      const b = `${i.clientId}\0${i.requestOrigin}\0${u.operation}`;
+      A || V("unknown registry operation"), (u.maxLifetimeSeconds !== 300 || u.audience !== A.audience || u.registryRow !== A.registryRow || u.serviceActivationState !== A.serviceActivationState || u.serviceInstance !== A.serviceInstance) && V(`${r.clientId} operation policy differs from the reviewed binding`);
+      const b = `${r.clientId}\0${r.requestOrigin}\0${u.operation}`;
       n.has(b) && V("duplicate registry binding"), n.add(b);
     });
-    const d = [...new Set(i.operationBindings.map(({ audience: u }) => u).filter((u) => u !== null))].sort();
-    (!Array.isArray(i.audiences) || me(i.audiences) !== me(d)) && V(`${i.clientId} audiences differ from operationBindings`), me(i.allowedOperations) !== me(i.operationBindings.map(({ operation: u }) => u)) && V(`${i.clientId} allowedOperations differ from operationBindings`);
+    const d = [...new Set(r.operationBindings.map(({ audience: u }) => u).filter((u) => u !== null))].sort();
+    (!Array.isArray(r.audiences) || me(r.audiences) !== me(d)) && V(`${r.clientId} audiences differ from operationBindings`), me(r.allowedOperations) !== me(r.operationBindings.map(({ operation: u }) => u)) && V(`${r.clientId} allowedOperations differ from operationBindings`);
   });
-  for (const i of ia) {
-    const r = e.clients.find((o) => o.clientId === i.clientId && o.requestOrigin === i.requestOrigin), s = r?.operationBindings.find((o) => o.operation === i.operation), a = s && {
+  for (const r of ra) {
+    const i = e.clients.find((o) => o.clientId === r.clientId && o.requestOrigin === r.requestOrigin), s = i?.operationBindings.find((o) => o.operation === r.operation), a = s && {
       audience: s.audience,
-      clientId: r.clientId,
+      clientId: i.clientId,
       maxLifetimeSeconds: s.maxLifetimeSeconds,
       operation: s.operation,
-      requestOrigin: r.requestOrigin,
+      requestOrigin: i.requestOrigin,
       registryRow: s.registryRow,
       serviceActivationState: s.serviceActivationState,
       serviceInstance: s.serviceInstance
     };
-    (!a || me(a) !== me(i)) && V(`registry projection drifted from compiled row ${i.registryRow}`);
+    (!a || me(a) !== me(r)) && V(`registry projection drifted from compiled row ${r.registryRow}`);
   }
   return xt(e);
 }
-const { registryReleaseSha256: ca, ...la } = zi, ua = await ra(me(la));
+const { registryReleaseSha256: ca, ...la } = Hr, ua = await ia(me(la));
 ua !== ca && V("registry release SHA-256 mismatch");
-const Xn = aa(zi);
+const Xn = aa(Hr);
 function da(e) {
   const t = It(e, ["clientId", "operation", "requestOrigin"], "registry lookup");
   (typeof t.clientId != "string" || typeof t.requestOrigin != "string" || typeof t.operation != "string") && V("registry lookup fields must be strings");
-  const n = Xn.clients.find((r) => r.clientId === t.clientId && r.requestOrigin === t.requestOrigin), i = n?.operationBindings.find((r) => r.operation === t.operation);
-  return (!n || !i) && V("no exact registry binding exists"), xt({
-    audience: i.audience,
+  const n = Xn.clients.find((i) => i.clientId === t.clientId && i.requestOrigin === t.requestOrigin), r = n?.operationBindings.find((i) => i.operation === t.operation);
+  return (!n || !r) && V("no exact registry binding exists"), xt({
+    audience: r.audience,
     callbackUri: n.callbackUri,
     clientDisplayName: n.clientDisplayName,
     clientId: n.clientId,
-    maxLifetimeSeconds: i.maxLifetimeSeconds,
-    operation: i.operation,
+    maxLifetimeSeconds: r.maxLifetimeSeconds,
+    operation: r.operation,
     requestOrigin: n.requestOrigin,
     registryReleaseSha256: Xn.registryReleaseSha256,
-    registryRow: i.registryRow,
-    serviceActivationState: i.serviceActivationState,
-    serviceInstance: i.serviceInstance
+    registryRow: r.registryRow,
+    serviceActivationState: r.serviceActivationState,
+    serviceInstance: r.serviceInstance
   });
 }
 const fa = /^\/transaction\/([0-9a-f]{64})$/u, Ft = new TextEncoder(), pa = Uint8Array.prototype.fill, ha = Object.freeze({ resolveRegistryBinding: da });
@@ -4308,20 +4310,20 @@ function qt(e) {
   for (let t = 0; t < e.length; t += 1) {
     const n = e.charCodeAt(t);
     if (n >= 55296 && n <= 56319) {
-      const i = e.charCodeAt(++t);
-      if (!(i >= 56320 && i <= 57343)) return !1;
+      const r = e.charCodeAt(++t);
+      if (!(r >= 56320 && r <= 57343)) return !1;
     } else if (n >= 56320 && n <= 57343) return !1;
   }
   return !0;
 }
-function ei() {
+function er() {
   return new $("INVALID_TRANSACTION");
 }
-function at(e, t, n, i) {
-  const r = e.createElement("label"), s = e.createElement("span");
-  s.textContent = n, r.append(s, i), t.append(r);
+function at(e, t, n, r) {
+  const i = e.createElement("label"), s = e.createElement("span");
+  s.textContent = n, i.append(s, r), t.append(i);
 }
-function He(e, t) {
+function ze(e, t) {
   for (const n of t) {
     try {
       n.value = "";
@@ -4361,16 +4363,16 @@ function He(e, t) {
   } catch {
   }
 }
-function Hi({
+function zr({
   clipboard: e,
   controller: t,
   document: n,
-  onChanged: i = () => {
+  onChanged: r = () => {
   }
 }) {
   if (!t || typeof t.listQuarantinedWalletRecords != "function") return null;
-  const r = n.createElement("section");
-  r.className = "wallet-quarantine-manager";
+  const i = n.createElement("section");
+  i.className = "wallet-quarantine-manager";
   const s = t.generation;
   let a = !1, o = 0, c = [], l = null;
   const d = (h = o) => !a && h === o && t.isUiGenerationCurrent?.(s) === !0, u = (h, m = o) => {
@@ -4402,7 +4404,7 @@ function Hi({
     h.addEventListener?.(m, g), c.push([h, m, g]);
   }, A = () => {
     if (p(), a || t.isUiGenerationCurrent?.(s) !== !0)
-      return r.replaceChildren(), r.hidden = !0, !1;
+      return i.replaceChildren(), i.hidden = !0, !1;
     let h;
     try {
       h = t.listQuarantinedWalletRecords();
@@ -4410,8 +4412,8 @@ function Hi({
       h = [];
     }
     if (!Array.isArray(h) || h.length === 0)
-      return r.replaceChildren(), r.hidden = !0, !1;
-    r.hidden = !1, l = Qs(r, h, { document: n });
+      return i.replaceChildren(), i.hidden = !0, !1;
+    i.hidden = !1, l = Qs(i, h, { document: n });
     const m = o;
     for (const g of l.rows) {
       const { entry: S } = g, I = async (W) => {
@@ -4457,7 +4459,7 @@ function Hi({
           }
           g.confirmationGroup.hidden = !0, u("", m);
         }
-      }, R = (W) => {
+      }, O = (W) => {
         if (W?.isTrusted !== !0 || !d(m)) return;
         const T = g.confirmation.value;
         if (T !== S.key) {
@@ -4478,16 +4480,16 @@ function Hi({
           g.confirmation.defaultValue = "";
         } catch {
         }
-        A(), a || i();
+        A(), a || r();
       };
-      f(g.exportButton, "click", I), f(g.deleteButton, "click", U), f(g.cancel, "click", P), f(g.confirm, "click", R);
+      f(g.exportButton, "click", I), f(g.deleteButton, "click", U), f(g.cancel, "click", P), f(g.confirm, "click", O);
     }
     return !0;
   }, b = A();
   return Object.freeze({
-    container: r,
+    container: i,
     destroy() {
-      a || (a = !0, p(), r.replaceChildren(), r.remove?.());
+      a || (a = !0, p(), i.replaceChildren(), i.remove?.());
     },
     hasEntries: b,
     refresh: A
@@ -4497,11 +4499,11 @@ function ya({
   clipboard: e = globalThis.navigator?.clipboard,
   controller: t = null,
   document: n,
-  mount: i = null,
-  offerRememberedUnlock: r = !0,
+  mount: r = null,
+  offerRememberedUnlock: i = !0,
   title: s = "Sign in"
 }) {
-  const a = i ?? n?.body;
+  const a = r ?? n?.body;
   if (!n?.createElement || !a?.append) throw new $("DOM_UNAVAILABLE");
   const o = n.createElement("section");
   o.className = "wallet-login";
@@ -4530,7 +4532,7 @@ function ya({
   A.dataset.walletRememberStatus = "true";
   let b = () => {
   };
-  const h = Hi({
+  const h = zr({
     clipboard: e,
     controller: t,
     document: n,
@@ -4543,14 +4545,14 @@ function ya({
   } catch {
     S = !1;
   }
-  S && r && (g = n.createElement("button"), g.type = "button", g.dataset.walletAction = "unlock-remembered", g.textContent = "Unlock remembered wallet");
+  S && i && (g = n.createElement("button"), g.type = "button", g.dataset.walletAction = "unlock-remembered", g.textContent = "Unlock remembered wallet");
   const I = n.createElement("button");
   I.type = "submit", I.dataset.walletAction = "login", I.textContent = "Login";
   const U = n.createElement("button");
   U.type = "button", U.dataset.walletAction = "cancel-login", U.textContent = "Cancel", g && m.append(g), m.append(I, U), d.append(m), o.append(c, l), h?.hasEntries && o.append(h.container), o.append(d, A), a.append(o), t?.registerCredentialControls?.({ passwordControl: p, usernameControl: u });
-  let P = !1, R, W;
+  let P = !1, O, W;
   const T = new Promise((N, K) => {
-    R = N, W = K;
+    O = N, W = K;
   }), q = () => {
     d.removeEventListener?.("submit", oe), U.removeEventListener?.("click", X), g?.removeEventListener?.("click", B);
   }, v = () => {
@@ -4569,8 +4571,8 @@ function ya({
       }
     }
     A.textContent = "";
-  }, z = () => {
-    q(), He(d, [u, p]), v(), o.remove?.();
+  }, H = () => {
+    q(), ze(d, [u, p]), v(), o.remove?.();
   }, _ = (N) => {
     if (!P) {
       P = !0;
@@ -4578,17 +4580,17 @@ function ya({
         t?.revokeNow?.(N);
       } catch {
       }
-      z(), W(new $(N));
+      H(), W(new $(N));
     }
   }, oe = (N) => {
-    N?.preventDefault?.(), !(P || N?.isTrusted !== !0) && (P = !0, q(), h?.destroy?.(), R({ passwordControl: p, rememberControl: f, rememberStatus: A, usernameControl: u }));
+    N?.preventDefault?.(), !(P || N?.isTrusted !== !0) && (P = !0, q(), h?.destroy?.(), O({ passwordControl: p, rememberControl: f, rememberStatus: A, usernameControl: u }));
   }, X = (N) => {
     N?.isTrusted === !0 && _("USER_CANCELLED");
   }, B = (N) => {
-    P || N?.isTrusted !== !0 || (P = !0, q(), h?.destroy?.(), He(d, [u, p]), R({ remembered: !0, rememberStatus: A }));
+    P || N?.isTrusted !== !0 || (P = !0, q(), h?.destroy?.(), ze(d, [u, p]), O({ remembered: !0, rememberStatus: A }));
   };
   b = () => {
-    if (P || !r) return;
+    if (P || !i) return;
     let N = !1;
     try {
       N = t?.canRestoreRememberedWallet?.() === !0;
@@ -4603,26 +4605,26 @@ function ya({
   }
   return Object.freeze({
     cancel() {
-      P ? z() : _("STALE_CONTROLLER");
+      P ? H() : _("STALE_CONTROLLER");
     },
     controls: Object.freeze({ passwordControl: p, rememberControl: f, rememberStatus: A, usernameControl: u }),
     form: d,
     promise: T,
-    remove: z
+    remove: H
   });
 }
-function Ki({
+function Kr({
   document: e,
   mount: t = null,
   submitLabel: n = "Compare legacy account",
-  title: i = "Enter the legacy BIP-39 mnemonic"
+  title: r = "Enter the legacy BIP-39 mnemonic"
 }) {
-  const r = t ?? e?.body;
-  if (!e?.createElement || !r?.append) throw new $("DOM_UNAVAILABLE");
+  const i = t ?? e?.body;
+  if (!e?.createElement || !i?.append) throw new $("DOM_UNAVAILABLE");
   const s = e.createElement("section");
   s.className = "wallet-login wallet-legacy-credentials";
   const a = e.createElement("h1");
-  a.textContent = i;
+  a.textContent = r;
   const o = e.createElement("form");
   o.noValidate = !0;
   const c = e.createElement("textarea");
@@ -4630,14 +4632,14 @@ function Ki({
   const l = e.createElement("button");
   l.type = "submit", l.dataset.walletAction = "confirm-legacy-mnemonic", l.textContent = n;
   const d = e.createElement("button");
-  d.type = "button", d.dataset.walletAction = "cancel-legacy-migration", d.textContent = "Cancel", o.append(l, d), s.append(a, o), r.append(s);
+  d.type = "button", d.dataset.walletAction = "cancel-legacy-migration", d.textContent = "Cancel", o.append(l, d), s.append(a, o), i.append(s);
   let u = !1, p, f;
   const A = new Promise((I, U) => {
     p = I, f = U;
   }), b = () => {
     o.removeEventListener?.("submit", g), d.removeEventListener?.("click", S);
   }, h = () => {
-    b(), He(o, [c]), s.remove?.();
+    b(), ze(o, [c]), s.remove?.();
   }, m = () => {
     u || (u = !0, h(), f(new $("USER_CANCELLED")));
   }, g = (I) => {
@@ -4659,10 +4661,10 @@ function Ki({
   });
 }
 function ma({ document: e, mount: t = null, title: n = "Choose legacy wallet profile" }) {
-  const i = t ?? e?.body;
-  if (!e?.createElement || !i?.append) throw new $("DOM_UNAVAILABLE");
-  const r = e.createElement("section");
-  r.className = "wallet-login wallet-legacy-profile";
+  const r = t ?? e?.body;
+  if (!e?.createElement || !r?.append) throw new $("DOM_UNAVAILABLE");
+  const i = e.createElement("section");
+  i.className = "wallet-login wallet-legacy-profile";
   const s = e.createElement("h1");
   s.textContent = n;
   const a = e.createElement("p");
@@ -4683,7 +4685,7 @@ function ma({ document: e, mount: t = null, title: n = "Choose legacy wallet pro
   const l = e.createElement("button");
   l.type = "submit", l.dataset.walletAction = "continue-legacy-login", l.textContent = "Continue";
   const d = e.createElement("button");
-  d.type = "button", d.dataset.walletAction = "cancel-legacy-login", d.textContent = "Cancel", o.append(l, d), r.append(s, a, o), i.append(r);
+  d.type = "button", d.dataset.walletAction = "cancel-legacy-login", d.textContent = "Cancel", o.append(l, d), i.append(s, a, o), r.append(i);
   let u = !1, p, f;
   const A = new Promise((I, U) => {
     p = I, f = U;
@@ -4694,7 +4696,7 @@ function ma({ document: e, mount: t = null, title: n = "Choose legacy wallet pro
       c.value = "";
     } catch {
     }
-    He(o, [c]), r.remove?.();
+    ze(o, [c]), i.remove?.();
   }, m = () => {
     u || (u = !0, b(), h(), f(new $("USER_CANCELLED")));
   }, g = (I) => {
@@ -4711,14 +4713,14 @@ function ma({ document: e, mount: t = null, title: n = "Choose legacy wallet pro
   }
   return Object.freeze({ cancel: m, promise: A });
 }
-function mt(e, t, n, i) {
-  const r = e.createElement("div"), s = e.createElement("strong");
+function mt(e, t, n, r) {
+  const i = e.createElement("div"), s = e.createElement("strong");
   s.textContent = `${n}: `;
   const a = e.createElement("span");
-  a.textContent = String(i ?? ""), r.append(s, a), t.append(r);
+  a.textContent = String(r ?? ""), i.append(s, a), t.append(i);
 }
-function Gi(e, t, n, i = null) {
-  const r = i ?? e?.body, s = e.createElement("section");
+function Gr(e, t, n, r = null) {
+  const i = r ?? e?.body, s = e.createElement("section");
   s.className = "wallet-complete";
   const a = e.createElement("h1");
   a.textContent = "Complete";
@@ -4731,24 +4733,24 @@ function Gi(e, t, n, i = null) {
         t?.close?.();
       } catch {
       }
-  }), s.append(a, o, c), r?.replaceChildren?.(s);
+  }), s.append(a, o, c), i?.replaceChildren?.(s);
 }
-function Ji(e, t = "The wallet request could not be completed. Close this window.", n = null) {
-  const i = n ?? e?.body;
-  if (!e?.createElement || !i?.replaceChildren) return;
-  const r = e.createElement("section");
-  r.className = "wallet-terminal-error";
+function Jr(e, t = "The wallet request could not be completed. Close this window.", n = null) {
+  const r = n ?? e?.body;
+  if (!e?.createElement || !r?.replaceChildren) return;
+  const i = e.createElement("section");
+  i.className = "wallet-terminal-error";
   const s = e.createElement("h1");
   s.textContent = "Wallet request stopped";
   const a = e.createElement("p");
-  a.textContent = t, r.append(s, a), i.replaceChildren(r);
+  a.textContent = t, i.append(s, a), r.replaceChildren(i);
 }
 function ga({
   clipboard: e,
   controller: t,
   document: n,
-  identity: i,
-  isAppCurrent: r = () => !0,
+  identity: r,
+  isAppCurrent: i = () => !0,
   makeCredentialPrompt: s,
   mount: a,
   onClear: o,
@@ -4756,7 +4758,7 @@ function ga({
 }) {
   const l = n.createElement("section");
   l.className = "wallet-account";
-  const d = n.createElement("div"), u = Js(d, i, { document: n }), p = n.createElement("section");
+  const d = n.createElement("div"), u = Js(d, r, { document: n }), p = n.createElement("section");
   p.className = "wallet-approval-card";
   const f = n.createElement("h2");
   f.textContent = "Asset review approval";
@@ -4775,21 +4777,21 @@ function ga({
   } catch {
     U = !1;
   }
-  const P = U ? n.createElement("section") : null, R = P ? Ys(P, { document: n }) : null;
-  R && (R.launch.dataset.walletAction = "forget-stored-wallet");
-  const W = Hi({
+  const P = U ? n.createElement("section") : null, O = P ? Ys(P, { document: n }) : null;
+  O && (O.launch.dataset.walletAction = "forget-stored-wallet");
+  const W = zr({
     clipboard: e,
     controller: t,
     document: n
   }), T = n.createElement("p");
   T.className = "wallet-account-exit-status", l.append(d, p), P && l.append(P), W?.hasEntries && l.append(W.container), l.append(g, m, S), a.replaceChildren(l);
   const q = new Zs({
-    credentialRound: async (O) => {
+    credentialRound: async (R) => {
       const j = s({
         controller: null,
         document: n,
         mount: a,
-        title: `Confirm account (${O} of 2)`
+        title: `Confirm account (${R} of 2)`
       });
       j?.promise && v.add(j);
       try {
@@ -4798,37 +4800,37 @@ function ga({
         j?.promise && v.delete(j);
       }
     },
-    expectedIdentity: i,
+    expectedIdentity: r,
     wasm: c
-  }), v = /* @__PURE__ */ new Set(), z = /* @__PURE__ */ new Set(), _ = /* @__PURE__ */ new Set(), oe = /* @__PURE__ */ new Set();
-  let X = !1, B = !1, N = !1, K = null, Z = !1, G = !1, Y = !1, ie = 0, ae = !1, se = 0;
-  const le = (O) => !B && se === O, Q = (O) => {
-    if (!le(O)) throw new Error("account surface closed");
-  }, Ne = (O) => (O instanceof Uint8Array && oe.add(O), O), $e = (O) => {
-    Zn(O), oe.delete(O);
+  }), v = /* @__PURE__ */ new Set(), H = /* @__PURE__ */ new Set(), _ = /* @__PURE__ */ new Set(), oe = /* @__PURE__ */ new Set();
+  let X = !1, B = !1, N = !1, K = null, Z = !1, G = !1, Y = !1, re = 0, ae = !1, se = 0;
+  const le = (R) => !B && se === R, Q = (R) => {
+    if (!le(R)) throw new Error("account surface closed");
+  }, Ne = (R) => (R instanceof Uint8Array && oe.add(R), R), $e = (R) => {
+    Zn(R), oe.delete(R);
   }, Ke = () => {
-    const O = [...oe];
+    const R = [...oe];
     oe.clear();
-    for (const j of O) Zn(j);
+    for (const j of R) Zn(j);
   }, Se = () => {
-    const O = X || Y || Z;
-    g.disabled = N, m.disabled = N, B || (h.disabled = O || !u.approvalAvailable, I.launch.disabled = O, R && (R.launch.disabled = O || G, R.confirm.disabled = O, R.cancel.disabled = O));
-  }, Me = (O) => {
-    if (!z.has(O)) return !0;
-    if (_.has(O)) return !1;
-    _.add(O);
+    const R = X || Y || Z;
+    g.disabled = N, m.disabled = N, B || (h.disabled = R || !u.approvalAvailable, I.launch.disabled = R, O && (O.launch.disabled = R || G, O.confirm.disabled = R, O.cancel.disabled = R));
+  }, Me = (R) => {
+    if (!H.has(R)) return !0;
+    if (_.has(R)) return !1;
+    _.add(R);
     try {
-      return (c?.sdn ?? c).destroySdnIdentity(O), z.delete(O), !0;
+      return (c?.sdn ?? c).destroySdnIdentity(R), H.delete(R), !0;
     } catch {
       return !1;
     } finally {
-      _.delete(O);
+      _.delete(R);
     }
   }, Ge = () => {
-    for (const O of [...z]) Me(O);
-    return z.size === 0;
-  }, Je = async (O) => {
-    if (O?.isTrusted !== !0 || X || Y || Z) return;
+    for (const R of [...H]) Me(R);
+    return H.size === 0;
+  }, Je = async (R) => {
+    if (R?.isTrusted !== !0 || X || Y || Z) return;
     const j = se;
     X = !0, Se(), A.textContent = "Confirm the same account twice to enable Copy.";
     try {
@@ -4846,15 +4848,15 @@ function ga({
     } finally {
       X = !1, le(j) && Se();
     }
-  }, Oe = async (O) => {
-    if (O?.isTrusted !== !0 || Y || X || Z) return;
+  }, Re = async (R) => {
+    if (R?.isTrusted !== !0 || Y || X || Z) return;
     const j = I.select.value || "password-fast-v1-legacy";
     if (j !== "password-fast-v1-legacy" && j !== "bip39-mnemonic-v1-legacy") {
       I.result.textContent = "Legacy profile unavailable.";
       return;
     }
     const he = se;
-    Y = !0, ie += 1, Se(), I.result.textContent = "Enter the selected legacy credentials to compare accounts.";
+    Y = !0, re += 1, Se(), I.result.textContent = "Enter the selected legacy credentials to compare accounts.";
     let ee = null, xe, kt, Ut, pe = null;
     try {
       let Bt;
@@ -4870,15 +4872,15 @@ function ga({
         const Xe = ne?.usernameControl?.value, wn = ne?.passwordControl?.value;
         if (!qt(Xe) || !qt(wn)) throw new Error("invalid legacy credentials");
         xe = Ne(Ft.encode(Xe)), kt = Ne(Ft.encode(wn));
-        const In = ne?.usernameControl?.form ?? ne?.passwordControl?.form ?? ee?.form, Zi = In?.parentNode;
-        He(In, [ne?.usernameControl, ne?.passwordControl]), Zi?.remove?.(), Bt = { passwordUtf8: kt, usernameUtf8: xe };
+        const In = ne?.usernameControl?.form ?? ne?.passwordControl?.form ?? ee?.form, Zr = In?.parentNode;
+        ze(In, [ne?.usernameControl, ne?.passwordControl]), Zr?.remove?.(), Bt = { passwordUtf8: kt, usernameUtf8: xe };
       } else {
-        ee = Ki({ document: n, mount: a }), v.add(ee);
+        ee = Kr({ document: n, mount: a }), v.add(ee);
         const ne = await ee.promise;
         Q(he);
         const Xe = ne?.mnemonicControl?.value;
         if (!qt(Xe)) throw new Error("invalid legacy credentials");
-        Ut = Ne(Ft.encode(Xe)), He(ne.form, [ne.mnemonicControl]), ne.section?.remove?.(), Bt = { mnemonicUtf8: Ut };
+        Ut = Ne(Ft.encode(Xe)), ze(ne.form, [ne.mnemonicControl]), ne.section?.remove?.(), Bt = { mnemonicUtf8: Ut };
       }
       if (ee?.promise && v.delete(ee), pe = await eo({
         accountIndex: 0,
@@ -4887,94 +4889,94 @@ function ga({
         profile: j,
         wasm: c,
         assertCurrent: () => Q(he),
-        ownHandle: (ne) => z.add(ne)
+        ownHandle: (ne) => H.add(ne)
       }), Q(he), !pe?.handle) throw new Error("legacy derivation failed");
-      const Yi = j === "password-fast-v1-legacy" ? "sdn-fast-password-auth-v1-legacy" : "sdn-bip39-auth-v1-legacy", ht = Array.isArray(pe.identity?.keys) ? pe.identity.keys.find((ne) => ne?.purpose === "sdn-authentication") : null;
-      if (pe.identity?.identityScheme !== Yi || pe.identity?.seedProfile !== j || typeof pe.identity?.accountXpub != "string" || !ht || typeof ht.publicKeyHex != "string" || !/^[0-9a-f]{64}$/u.test(ht.publicKeyHex))
+      const Yr = j === "password-fast-v1-legacy" ? "sdn-fast-password-auth-v1-legacy" : "sdn-bip39-auth-v1-legacy", ht = Array.isArray(pe.identity?.keys) ? pe.identity.keys.find((ne) => ne?.purpose === "sdn-authentication") : null;
+      if (pe.identity?.identityScheme !== Yr || pe.identity?.seedProfile !== j || typeof pe.identity?.accountXpub != "string" || !ht || typeof ht.publicKeyHex != "string" || !/^[0-9a-f]{64}$/u.test(ht.publicKeyHex))
         throw new Error("legacy identity invalid");
-      const Qi = pe.identity;
+      const Qr = pe.identity;
       if (!Me(pe.handle)) throw new Error("legacy destruction failed");
       pe = null, Q(he);
-      const Xi = i.keys.find((ne) => ne.purpose === "sdn-authentication");
-      I.result.replaceChildren(), mt(n, I.result, "Current account xpub", i.accountXpub), mt(n, I.result, "Legacy account xpub", Qi.accountXpub), mt(n, I.result, "Current authentication key", Xi?.publicKeyHex), mt(n, I.result, "Legacy authentication key", ht.publicKeyHex);
+      const Xr = r.keys.find((ne) => ne.purpose === "sdn-authentication");
+      I.result.replaceChildren(), mt(n, I.result, "Current account xpub", r.accountXpub), mt(n, I.result, "Legacy account xpub", Qr.accountXpub), mt(n, I.result, "Current authentication key", Xr?.publicKeyHex), mt(n, I.result, "Legacy authentication key", ht.publicKeyHex);
     } catch {
       le(he) && (I.result.textContent = "Legacy account comparison could not be completed.");
     } finally {
-      pe?.handle && Me(pe.handle), ee?.promise && v.delete(ee), $e(xe), $e(kt), $e(Ut), Ge(), ie -= 1, Y = !1, le(he) && Se();
+      pe?.handle && Me(pe.handle), ee?.promise && v.delete(ee), $e(xe), $e(kt), $e(Ut), Ge(), re -= 1, Y = !1, le(he) && Se();
     }
   }, Te = () => {
-    if (R) {
+    if (O) {
       try {
-        R.confirmation.value = "";
+        O.confirmation.value = "";
       } catch {
       }
       try {
-        R.confirmation.defaultValue = "";
+        O.confirmation.defaultValue = "";
       } catch {
       }
     }
-  }, Ye = (O) => {
-    if (!(!R || O?.isTrusted !== !0 || X || Y || Z || G || B)) {
-      Te(), R.confirmationGroup.hidden = !1, R.status.textContent = `Type ${R.confirmationKey} to confirm.`;
+  }, Ye = (R) => {
+    if (!(!O || R?.isTrusted !== !0 || X || Y || Z || G || B)) {
+      Te(), O.confirmationGroup.hidden = !1, O.status.textContent = `Type ${O.confirmationKey} to confirm.`;
       try {
-        R.confirmation.focus?.();
+        O.confirmation.focus?.();
       } catch {
       }
     }
-  }, ft = (O) => {
-    !R || O?.isTrusted !== !0 || Z || B || (Te(), R.confirmationGroup.hidden = !0, R.status.textContent = "Forget cancelled.");
-  }, _e = (O) => {
-    if (!R || O?.isTrusted !== !0 || X || Y || Z || G || B) return;
-    const j = R.confirmation.value;
-    if (j !== R.confirmationKey) {
-      R.status.textContent = "Type the exact storage key to confirm.";
+  }, ft = (R) => {
+    !O || R?.isTrusted !== !0 || Z || B || (Te(), O.confirmationGroup.hidden = !0, O.status.textContent = "Forget cancelled.");
+  }, _e = (R) => {
+    if (!O || R?.isTrusted !== !0 || X || Y || Z || G || B) return;
+    const j = O.confirmation.value;
+    if (j !== O.confirmationKey) {
+      O.status.textContent = "Type the exact storage key to confirm.";
       return;
     }
     Z = !0, Se(), Te();
     try {
-      t.forgetRememberedWallet(j), G = !0, R.confirmationGroup.hidden = !0, R.status.textContent = "Stored wallet forgotten. This account remains signed in.";
+      t.forgetRememberedWallet(j), G = !0, O.confirmationGroup.hidden = !0, O.status.textContent = "Stored wallet forgotten. This account remains signed in.";
     } catch {
-      R.status.textContent = "Stored wallet could not be forgotten.";
+      O.status.textContent = "Stored wallet could not be forgotten.";
     } finally {
       Z = !1, B || Se();
     }
-  }, Qe = (O) => {
+  }, Qe = (R) => {
     if (B)
       Ke();
     else {
-      B = !0, se += 1, h.disabled = !0, I.launch.disabled = !0, R && (R.launch.disabled = !0, R.confirm.disabled = !0, R.cancel.disabled = !0, Te(), R.launch.removeEventListener?.("click", Ye), R.confirm.removeEventListener?.("click", _e), R.cancel.removeEventListener?.("click", ft)), W?.destroy?.(), Ke(), h.removeEventListener?.("click", Je), I.launch.removeEventListener?.("click", Oe);
+      B = !0, se += 1, h.disabled = !0, I.launch.disabled = !0, O && (O.launch.disabled = !0, O.confirm.disabled = !0, O.cancel.disabled = !0, Te(), O.launch.removeEventListener?.("click", Ye), O.confirm.removeEventListener?.("click", _e), O.cancel.removeEventListener?.("click", ft)), W?.destroy?.(), Ke(), h.removeEventListener?.("click", Je), I.launch.removeEventListener?.("click", Re);
       for (const j of v) j.cancel?.();
       v.clear();
     }
-    O && !ae && (T.textContent = "Secure cleanup is still pending. Retry Return or Logout.", l.replaceChildren(T, g, m), g.disabled = !1, m.disabled = !1);
+    R && !ae && (T.textContent = "Secure cleanup is still pending. Retry Return or Logout.", l.replaceChildren(T, g, m), g.disabled = !1, m.disabled = !1);
   }, pt = () => {
-    const O = q.destroy(), j = Ge();
-    return O && j && ie === 0 && !Y && !X;
-  }, Ce = () => (Qe(!1), ae || (ae = !0, g.disabled = !0, m.disabled = !0, g.removeEventListener?.("click", bn), m.removeEventListener?.("click", En), l.remove?.()), pt()), Pt = (O, j, he, { requireTrustedEvent: ee = !0 } = {}) => ee && O?.isTrusted !== !0 ? Promise.resolve() : K || (N || ae ? Promise.reject(new $("STALE_CONTROLLER")) : (Qe(!0), pt() ? (N = !0, g.disabled = !0, m.disabled = !0, K = (async () => {
-    o(), Gi(n, null, he, a);
+    const R = q.destroy(), j = Ge();
+    return R && j && re === 0 && !Y && !X;
+  }, Ce = () => (Qe(!1), ae || (ae = !0, g.disabled = !0, m.disabled = !0, g.removeEventListener?.("click", bn), m.removeEventListener?.("click", En), l.remove?.()), pt()), Pt = (R, j, he, { requireTrustedEvent: ee = !0 } = {}) => ee && R?.isTrusted !== !0 ? Promise.resolve() : K || (N || ae ? Promise.reject(new $("STALE_CONTROLLER")) : (Qe(!0), pt() ? (N = !0, g.disabled = !0, m.disabled = !0, K = (async () => {
+    o(), Gr(n, null, he, a);
     try {
       const xe = await j();
-      if (!r()) throw new $("STALE_CONTROLLER");
+      if (!i()) throw new $("STALE_CONTROLLER");
       return xe;
     } catch (xe) {
-      throw r() && Ji(n, void 0, a), xe;
+      throw i() && Jr(n, void 0, a), xe;
     }
-  })(), K) : (T.textContent = "Secure cleanup is still pending. Retry Return or Logout.", g.disabled = !1, m.disabled = !1, Promise.reject(new $("DESTRUCTION_FAILED"))))), bn = (O) => {
+  })(), K) : (T.textContent = "Secure cleanup is still pending. Retry Return or Logout.", g.disabled = !1, m.disabled = !1, Promise.reject(new $("DESTRUCTION_FAILED"))))), bn = (R) => {
     Pt(
-      O,
+      R,
       () => t.returnToSite(),
       "Returning to the requesting site."
     ).catch(() => {
     });
-  }, En = (O) => {
+  }, En = (R) => {
     Pt(
-      O,
+      R,
       () => t.logout(),
       "Logged out. Returning to the requesting site."
     ).catch(() => {
     });
   };
-  return h.addEventListener("click", Je), I.launch.addEventListener("click", Oe), R?.launch.addEventListener?.("click", Ye), R?.confirm.addEventListener?.("click", _e), R?.cancel.addEventListener?.("click", ft), g.addEventListener("click", bn), m.addEventListener("click", En), Object.freeze({
+  return h.addEventListener("click", Je), I.launch.addEventListener("click", Re), O?.launch.addEventListener?.("click", Ye), O?.confirm.addEventListener?.("click", _e), O?.cancel.addEventListener?.("click", ft), g.addEventListener("click", bn), m.addEventListener("click", En), Object.freeze({
     destroy: Ce,
     logout: () => Pt(
       null,
@@ -4985,15 +4987,15 @@ function ga({
   });
 }
 function Aa(e) {
-  const t = e?.pathname, n = e?.search ?? "", i = e?.hash ?? "";
-  if (typeof t != "string" || n !== "" || i !== "") throw ei();
-  const r = fa.exec(t);
-  if (!r) throw ei();
-  return r[1];
+  const t = e?.pathname, n = e?.search ?? "", r = e?.hash ?? "";
+  if (typeof t != "string" || n !== "" || r !== "") throw er();
+  const i = fa.exec(t);
+  if (!i) throw er();
+  return i[1];
 }
 function ba(e) {
-  const t = e?.window ?? globalThis.window, n = e?.document ?? t?.document ?? globalThis.document, i = e?.mount ?? n?.body, r = typeof t?.fetch == "function" ? t.fetch.bind(t) : typeof globalThis.fetch == "function" ? globalThis.fetch.bind(globalThis) : null, s = e?.relay ?? (e?.controller ? null : Mo({
-    fetch: e?.fetch ?? r,
+  const t = e?.window ?? globalThis.window, n = e?.document ?? t?.document ?? globalThis.document, r = e?.mount ?? n?.body, i = typeof t?.fetch == "function" ? t.fetch.bind(t) : typeof globalThis.fetch == "function" ? globalThis.fetch.bind(globalThis) : null, s = e?.relay ?? (e?.controller ? null : Mo({
+    fetch: e?.fetch ?? i,
     location: e?.location ?? t?.location
   })), a = e?.registry ?? ha, o = e?.controller ?? new Wo({
     ...e,
@@ -5007,14 +5009,14 @@ function ba(e) {
     (l?.destroy?.() ?? !0) && (l = null), d = null;
   }, g = () => {
     try {
-      i?.replaceChildren?.();
+      r?.replaceChildren?.();
     } catch {
     }
   }, S = () => (b = b >= Number.MAX_SAFE_INTEGER ? 1 : b + 1, b), I = () => {
     h = !0, S();
   }, U = (v) => !h && b === v, P = (v) => {
     if (!U(v)) throw new $("STALE_CONTROLLER");
-  }, R = (v) => {
+  }, O = (v) => {
     try {
       v?.remove?.();
     } catch {
@@ -5022,12 +5024,12 @@ function ba(e) {
     u === v && (u = null);
   }, W = () => {
     I(), u?.cancel?.(), u = null, m(), g();
-  }, T = (v, z, _) => {
-    v?.addEventListener?.(z, _), A.push([v, z, _]);
+  }, T = (v, H, _) => {
+    v?.addEventListener?.(H, _), A.push([v, H, _]);
   }, q = () => {
-    for (const [v, z, _] of A)
+    for (const [v, H, _] of A)
       try {
-        v?.removeEventListener?.(z, _);
+        v?.removeEventListener?.(H, _);
       } catch {
       }
     A = [];
@@ -5044,16 +5046,16 @@ function ba(e) {
       const v = b;
       return h ? (p = Promise.reject(new $("STALE_CONTROLLER")), p) : (p = (async () => {
         try {
-          const z = Aa(t?.location);
+          const H = Aa(t?.location);
           if (typeof o.prepare != "function" || typeof o.executePrepared != "function" || typeof o.unlockPassword != "function") {
-            const B = await o.execute(z);
+            const B = await o.execute(H);
             return P(v), B;
           }
-          const _ = await o.prepare(z);
+          const _ = await o.prepare(H);
           if (P(v), _.transaction.operation === "sdn.auth.raw-challenge.v1") {
             const B = ma({
               document: n,
-              mount: i,
+              mount: r,
               title: `Choose the legacy profile for ${_.binding.clientDisplayName}`
             });
             u = B;
@@ -5062,12 +5064,12 @@ function ba(e) {
             const K = N === "password-fast-v1-legacy" ? c({
               controller: null,
               document: n,
-              mount: i,
+              mount: r,
               title: `Sign in to ${_.binding.clientDisplayName}`,
               transaction: _
-            }) : Ki({
+            }) : Kr({
               document: n,
-              mount: i,
+              mount: r,
               submitLabel: "Continue",
               title: `Sign in to ${_.binding.clientDisplayName}`
             });
@@ -5086,7 +5088,7 @@ function ba(e) {
               const N = c({
                 controller: o,
                 document: n,
-                mount: i,
+                mount: r,
                 offerRememberedUnlock: !B,
                 title: `Sign in to ${_.binding.clientDisplayName}`,
                 transaction: _
@@ -5100,8 +5102,8 @@ function ba(e) {
                   break;
                 } catch {
                   if (!U(v))
-                    throw R(N), new $("STALE_CONTROLLER");
-                  B = !0, R(N);
+                    throw O(N), new $("STALE_CONTROLLER");
+                  B = !0, O(N);
                   continue;
                 }
               const Z = await o.unlockPassword(K);
@@ -5110,32 +5112,32 @@ function ba(e) {
             }
           }
           const X = await o.executePrepared(_);
-          return P(v), R(u), _.transaction.operation === "sdn.wallet.account.v1" ? (d = o.copyPublicIdentity(), l = ga({
+          return P(v), O(u), _.transaction.operation === "sdn.wallet.account.v1" ? (d = o.copyPublicIdentity(), l = ga({
             clipboard: e?.clipboard ?? globalThis.navigator?.clipboard,
             controller: o,
             document: n,
             identity: d,
             isAppCurrent: () => U(v),
             makeCredentialPrompt: c,
-            mount: i,
+            mount: r,
             onClear: m,
             wasm: e?.wasm
-          })) : (d = null, n?.createElement && i?.replaceChildren && Gi(
+          })) : (d = null, n?.createElement && r?.replaceChildren && Gr(
             n,
             t,
             "The wallet request completed successfully.",
-            i
+            r
           )), X;
-        } catch (z) {
+        } catch (H) {
           const _ = !U(v);
-          throw u?.cancel?.(), u = null, m(), q(), _ || Ji(n, z?.code === "USER_CANCELLED" ? "Cancelled. You may close this window." : void 0, i), await (f ?? o.destroy(_ ? "stale-startup" : "startup-failure")), _ && z?.code !== "DESTRUCTION_FAILED" ? new $("STALE_CONTROLLER") : z;
+          throw u?.cancel?.(), u = null, m(), q(), _ || Jr(n, H?.code === "USER_CANCELLED" ? "Cancelled. You may close this window." : void 0, r), await (f ?? o.destroy(_ ? "stale-startup" : "startup-failure")), _ && H?.code !== "DESTRUCTION_FAILED" ? new $("STALE_CONTROLLER") : H;
         }
       })(), p);
     },
     stop(v = "close") {
       I(), u?.cancel?.(), u = null, m(), g();
-      const z = o.destroy(v);
-      return f || (q(), f = z), f;
+      const H = o.destroy(v);
+      return f || (q(), f = H), f;
     }
   });
 }