wiki-formant 0.28.0 → 0.30.0

package/dist/react-server.js

@@ -225,3 +225,58 @@ export function RevisionChanges({ changes, label = type => type }) {
         return null;
     return (_jsx("ul", { className: "revision-changes", children: changes.map((c, i) => (_jsxs("li", { className: "revision-change", "data-action": c.action, children: [_jsx("span", { className: "revision-change-action", children: ACTION_LABEL[c.action] }), ` – ${label(c.type)} at ${blockLocation(c.path)}`, c.leafDiff && (_jsx("p", { className: "revision-diff", children: c.leafDiff.map(([op, text], j) => op === -1 ? _jsx("del", { children: text }, j) : op === 1 ? _jsx("ins", { children: text }, j) : _jsx("span", { children: text }, j)) }))] }, i))) }));
 }
+/** The windows the stats page offers, in days. */
+export const STATS_RANGES = [1, 7, 30, 90];
+/** A `?days=` value as one of `ranges`, else `fallback`: the page's only input. */
+export const statsDays = (param, ranges = STATS_RANGES, fallback = 30) => ranges.find(n => String(n) === param) ?? fallback;
+const count = (n) => n.toLocaleString('en');
+const regions = new Intl.DisplayNames(['en'], { type: 'region' });
+const country = (code) => {
+    try {
+        return regions.of(code) ?? code;
+    }
+    catch {
+        return code;
+    }
+};
+const duration = (s) => (s < 60 ? `${s}s` : `${Math.floor(s / 60)}m ${s % 60}s`);
+/** Unsigned at zero, so no change never reads as growth. */
+const change = (now, before) => {
+    if (!before)
+        return null;
+    const pct = Math.round((100 * (now - before)) / before);
+    return pct > 0 ? `+${pct}%` : `${pct}%`;
+};
+function StatsList({ title, rows, label = v => v }) {
+    if (!rows.length)
+        return null;
+    const max = Math.max(...rows.map(([, n]) => n));
+    return (_jsxs("section", { className: "stats-list", children: [_jsx("h2", { children: title }), _jsx("ol", { children: rows.map(([v, n]) => (_jsxs("li", { style: { '--share': n / max }, children: [_jsx("span", { children: label(v) }), _jsx("span", { className: "stats-count", children: count(n) })] }, v))) })] }));
+}
+/**
+ * A site's own analytics on one page: the headline figures against the window
+ * before, visitors per day, and every ranked list the digest carries. Lists
+ * with nothing in them are left out. Bars are `currentColor` until the
+ * importing stylesheet gives them a colour.
+ */
+export function Stats({ digest: d, days, ranges = STATS_RANGES }) {
+    const byDay = new Map(d.by_day.map(r => [r.date, r.visitors]));
+    // A rolling window of n days touches n + 1 UTC dates, the first of them in part.
+    const now = Date.now();
+    const series = Array.from({ length: days + 1 }, (_, i) => {
+        const date = new Date(now - (days - i) * 86_400_000).toISOString().slice(0, 10);
+        return [date, byDay.get(date) ?? 0];
+    });
+    const peak = Math.max(1, ...series.map(([, n]) => n));
+    const figures = [
+        ['Visitors', count(d.visitors), change(d.visitors, d.previous_visitors)],
+        ['Page views', count(d.pageviews), null],
+        ['Bounce rate', d.bounce_rate == null ? '–' : `${d.bounce_rate}%`, null],
+        ['Visit length', d.visit_duration == null ? '–' : duration(d.visit_duration), null],
+        ['With agents', count(d.visitors_incl_agents), null],
+    ];
+    if (d.follow_clicks)
+        figures.push(['Clicks to X', count(d.follow_clicks.events), null]);
+    const rows = (list, k, m) => list.map(r => [r[k], r[m]]);
+    return (_jsxs("div", { className: "stats", children: [_jsx("nav", { className: "stats-ranges", "aria-label": "Window", children: ranges.map(n => (_jsx("a", { href: `?days=${n}`, "aria-current": n === days ? 'page' : undefined, children: n === 1 ? '24 hours' : `${n} days` }, n))) }), _jsx("dl", { className: "stats-figures", children: figures.map(([label, value, delta]) => (_jsxs("div", { children: [_jsx("dt", { children: label }), _jsxs("dd", { children: [value, delta && _jsx("small", { children: ` ${delta}` })] })] }, label))) }), _jsx("ol", { className: "stats-chart", "aria-label": "Visitors per day", children: series.map(([date, n]) => (_jsx("li", { title: `${date}: ${count(n)}`, style: { '--share': n / peak } }, date))) }), _jsxs("div", { className: "stats-lists", children: [_jsx(StatsList, { title: "Pages", rows: rows(d.top_pages, 'page', 'visitors') }), _jsx(StatsList, { title: "Entry pages", rows: rows(d.entry_pages, 'page', 'visitors') }), _jsx(StatsList, { title: "Sources", rows: rows(d.top_sources, 'source', 'visitors') }), _jsx(StatsList, { title: "From X posts", rows: rows(d.from_posts, 'page', 'visitors') }), _jsx(StatsList, { title: "Sibling sites", rows: rows(d.sibling_referrals, 'source', 'visitors') }), _jsx(StatsList, { title: "Countries", rows: rows(d.countries, 'country', 'visitors'), label: country }), _jsx(StatsList, { title: "Devices", rows: rows(d.devices, 'device', 'visitors') }), _jsx(StatsList, { title: "Agent tool calls", rows: rows(d.agent_tool_calls, 'tool', 'events') }), _jsx(StatsList, { title: "Searches that found nothing", rows: rows(d.gaps, 'query', 'events') })] })] }));
+}

package/dist/validation.d.ts

@@ -19,6 +19,35 @@ export declare function validateLinkGroups(groups: unknown): boolean;
 export declare function validateCodeTabs(tabs: unknown): boolean;
 /** `[{ value, label, suffix? }]` — a stats block's cards. */
 export declare function validateStatItems(items: unknown): boolean;
+/**
+ * The most rows an author-supplied count may ask for. Every `limit` and every
+ * `pageIds` list ends up in a database `take:` or `in:`, so the bound belongs
+ * between the editor and the query: a fractional `take` is a validation error
+ * against an Int column and an unbounded one is a table scan on every render.
+ */
+export declare const MAX_BLOCK_ROWS = 100;
+/** Clamp an author-supplied row count to a positive integer within the cap. The read-side twin of the check below. */
+export declare function blockLimit(value: unknown, fallback: number, max?: number): number;
+export interface CoreAtomicValidatorOptions {
+    /**
+     * Whether one `pageIds` entry is an id this wiki can look up. The format is
+     * each wiki's own — a cuid, an Int read back with `Number()`, a
+     * `section/slug` — so the default accepts any string.
+     */
+    pageId?: (id: string) => boolean;
+    /** Default `MAX_BLOCK_ROWS`. */
+    maxRows?: number;
+}
+/**
+ * The leaf checks for the core types, as one function a repo's `validateAtomic`
+ * falls through to: `default: return core(b)`. False for any type outside the
+ * core, so the repo's own cases still decide its native types.
+ *
+ * `recentPages.limit` must be a whole number within the cap and `pageIds` no
+ * longer than it — caper's rule, which the other two lacked. A scope field
+ * (`tagPath`, `section`) is a string when present.
+ */
+export declare function coreAtomicValidator(opts?: CoreAtomicValidatorOptions): (block: Record<string, unknown>) => boolean;
 export interface BlockValidatorOptions {
     /** True for a type this wiki knows at all. */
     isKnownType: (type: string) => boolean;

package/dist/validation.js

@@ -72,6 +72,57 @@ export function validateStatItems(items) {
             (typeof s.value === 'string' || typeof s.value === 'number') &&
             (s.suffix === undefined || s.suffix === null || typeof s.suffix === 'string')));
 }
+// ---- the core leaf set ------------------------------------------------------
+/**
+ * The most rows an author-supplied count may ask for. Every `limit` and every
+ * `pageIds` list ends up in a database `take:` or `in:`, so the bound belongs
+ * between the editor and the query: a fractional `take` is a validation error
+ * against an Int column and an unbounded one is a table scan on every render.
+ */
+export const MAX_BLOCK_ROWS = 100;
+/** Clamp an author-supplied row count to a positive integer within the cap. The read-side twin of the check below. */
+export function blockLimit(value, fallback, max = MAX_BLOCK_ROWS) {
+    const n = typeof value === 'number' && Number.isFinite(value) ? Math.floor(value) : fallback;
+    return Math.min(Math.max(n, 1), max);
+}
+const okLimit = (value, max) => Number.isSafeInteger(value) && value > 0 && value <= max;
+const optionalString = (v) => v === undefined || typeof v === 'string';
+/**
+ * The leaf checks for the core types, as one function a repo's `validateAtomic`
+ * falls through to: `default: return core(b)`. False for any type outside the
+ * core, so the repo's own cases still decide its native types.
+ *
+ * `recentPages.limit` must be a whole number within the cap and `pageIds` no
+ * longer than it — caper's rule, which the other two lacked. A scope field
+ * (`tagPath`, `section`) is a string when present.
+ */
+export function coreAtomicValidator(opts = {}) {
+    const { pageId = () => true, maxRows = MAX_BLOCK_ROWS } = opts;
+    return b => {
+        switch (b.type) {
+            case 'content':
+                return typeof b.text === 'string';
+            case 'recentPages':
+                return okLimit(b.limit, maxRows) && optionalString(b.tagPath) && optionalString(b.section);
+            case 'pageList':
+                return (Array.isArray(b.pageIds) &&
+                    b.pageIds.length <= maxRows &&
+                    b.pageIds.every(id => typeof id === 'string' && pageId(id)));
+            case 'codeTabs':
+                return validateCodeTabs(b.tabs);
+            case 'stats':
+                return validateStatItems(b.items);
+            case 'banner':
+                return typeof b.variant === 'string';
+            case 'references':
+                return validateReferenceItems(b.items);
+            case 'linkGrid':
+                return validateLinkGroups(b.groups);
+            default:
+                return false;
+        }
+    };
+}
 /**
  * The block-tree walk, with one wiki's leaf switch plugged into it. The caller
  * keeps its own type parameter, so this stays free of any repo's types while

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wiki-formant",
-  "version": "0.28.0",
+  "version": "0.30.0",
   "description": "The portable half of a wiki: derived taxonomy and facet controls, a version-negotiating MCP transport, markdown twins, block rendering, a rich-text editor engine, and conditional-GET plumbing.",
   "type": "module",
   "license": "MIT",
@@ -22,10 +22,6 @@
     "*.css"
   ],
   "exports": {
-    ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js"
-    },
     "./taxonomy": {
       "types": "./dist/taxonomy.d.ts",
       "import": "./dist/taxonomy.js"
@@ -58,10 +54,22 @@
       "types": "./dist/rate-limit.d.ts",
       "import": "./dist/rate-limit.js"
     },
+    "./db": {
+      "types": "./dist/db.d.ts",
+      "import": "./dist/db.js"
+    },
     "./analytics": {
       "types": "./dist/analytics.d.ts",
       "import": "./dist/analytics.js"
     },
+    "./passkey": {
+      "types": "./dist/passkey.d.ts",
+      "import": "./dist/passkey.js"
+    },
+    "./passkey-button": {
+      "types": "./dist/passkey-button.d.ts",
+      "import": "./dist/passkey-button.js"
+    },
     "./blocks": {
       "types": "./dist/blocks.d.ts",
       "import": "./dist/blocks.js"
@@ -142,14 +150,6 @@
       "types": "./dist/tiptap.d.ts",
       "import": "./dist/tiptap.js"
     },
-    "./rola": {
-      "types": "./dist/rola.d.ts",
-      "import": "./dist/rola.js"
-    },
-    "./x402": {
-      "types": "./dist/x402.d.ts",
-      "import": "./dist/x402.js"
-    },
     "./base.css": "./dist/base.css",
     "./block-views": {
       "types": "./dist/block-views.d.ts",
@@ -183,7 +183,8 @@
   "bin": {
     "check-classes": "bin/check-classes.mjs",
     "check-pages": "bin/check-pages.mjs",
-    "analytics-digest": "bin/analytics-digest.mjs"
+    "analytics-digest": "bin/analytics-digest.mjs",
+    "passkey-invite": "bin/passkey-invite.mjs"
   },
   "files": [
     "dist",
@@ -198,7 +199,8 @@
     "prepare": "git config core.hooksPath .githooks || true"
   },
   "devDependencies": {
-    "@radixdlt/rola": "^2.1.0",
+    "@simplewebauthn/browser": "^14.0.0",
+    "@simplewebauthn/server": "^14.0.3",
     "@tiptap/core": "^2.10.0",
     "@tiptap/extension-code-block": "^2.10.0",
     "@tiptap/extension-image": "^2.27.3",
@@ -216,14 +218,12 @@
     "@types/react": "^19.0.0",
     "@types/sanitize-html": "^2.16.1",
     "fast-diff": "^1.3.0",
-    "jose": "^6.2.10",
     "jsdom": "^30.1.0",
     "react": "^19.2.4",
     "sanitize-html": "^2.17.7",
     "typescript": "^5.9.0"
   },
   "peerDependencies": {
-    "@radixdlt/rola": ">=2",
     "@tiptap/core": ">=2.10",
     "@tiptap/extension-code-block": ">=2.10",
     "@tiptap/extension-image": ">=2.10",
@@ -238,10 +238,11 @@
     "@tiptap/react": ">=2.10",
     "@tiptap/starter-kit": ">=2.10",
     "fast-diff": ">=1.3",
-    "jose": ">=5",
+    "pg": ">=8",
     "react": ">=18",
     "sanitize-html": ">=2",
-    "pg": ">=8"
+    "@simplewebauthn/server": ">=13",
+    "@simplewebauthn/browser": ">=13"
   },
   "peerDependenciesMeta": {
     "react": {
@@ -259,12 +260,6 @@
     "@tiptap/extension-code-block": {
       "optional": true
     },
-    "jose": {
-      "optional": true
-    },
-    "@radixdlt/rola": {
-      "optional": true
-    },
     "@tiptap/starter-kit": {
       "optional": true
     },
@@ -300,6 +295,12 @@
     },
     "pg": {
       "optional": true
+    },
+    "@simplewebauthn/server": {
+      "optional": true
+    },
+    "@simplewebauthn/browser": {
+      "optional": true
     }
   }
 }

package/dist/index.d.ts

@@ -1,22 +0,0 @@
-export * from './taxonomy.js';
-export * from './mcp.js';
-export * from './headings.js';
-export * from './links.js';
-export * from './markdown.js';
-export * from './markdown.js';
-export * from './http.js';
-export * from './pagination.js';
-export * from './versioning.js';
-export * from './rate-limit.js';
-export * from './analytics.js';
-export * from './blocks.js';
-export * from './text.js';
-export * from './maps.js';
-export * from './freshness.js';
-export * from './combobox.js';
-export * from './crawlers.js';
-export * from './revisions.js';
-export * from './feed.js';
-export * from './license.js';
-export * from './seeded.js';
-export * from './metadata.js';

package/dist/index.js

@@ -1,27 +0,0 @@
-// wiki-formant — the portable half of a wiki.
-//
-// Nothing here touches a database, a framework or a design system. Those are
-// the parts every wiki must own; these are the parts every wiki rebuilds and
-// then lets drift.
-export * from './taxonomy.js';
-export * from './mcp.js';
-export * from './headings.js';
-export * from './links.js';
-export * from './markdown.js';
-export * from './markdown.js';
-export * from './http.js';
-export * from './pagination.js';
-export * from './versioning.js';
-export * from './rate-limit.js';
-export * from './analytics.js';
-export * from './blocks.js';
-export * from './text.js';
-export * from './maps.js';
-export * from './freshness.js';
-export * from './combobox.js';
-export * from './crawlers.js';
-export * from './revisions.js';
-export * from './feed.js';
-export * from './license.js';
-export * from './seeded.js';
-export * from './metadata.js';

package/dist/rola.d.ts

@@ -1,127 +0,0 @@
-export interface AuthSession {
-    userId: string;
-    radixAddress: string;
-    personaAddress?: string;
-    displayName?: string;
-    expiresAt: Date;
-}
-export interface SignedChallenge {
-    challenge: string;
-    address: string;
-    proof: {
-        publicKey: string;
-        signature: string;
-        curve: 'curve25519' | 'secp256k1';
-    };
-}
-/**
- * The two Prisma delegates this needs, structurally. Both wikis' `Session` and
- * `Challenge` models already satisfy it, so the binding is
- * `{ session: prisma.session, challenge: prisma.challenge }`.
- */
-export interface RolaStore {
-    session: {
-        create(args: {
-            data: {
-                userId: string;
-                token: string;
-                expiresAt: Date;
-            };
-        }): Promise<unknown>;
-        findUnique(args: {
-            where: {
-                token: string;
-            };
-        }): Promise<{
-            id: string;
-            expiresAt: Date;
-        } | null>;
-        delete(args: {
-            where: {
-                id: string;
-            };
-        }): Promise<unknown>;
-        deleteMany(args: {
-            where: {
-                token: string;
-            };
-        }): Promise<unknown>;
-    };
-    challenge: {
-        create(args: {
-            data: {
-                challenge: string;
-                expiresAt: Date;
-            };
-        }): Promise<unknown>;
-        findUnique(args: {
-            where: {
-                challenge: string;
-            };
-        }): Promise<{
-            id: string;
-            expiresAt: Date;
-        } | null>;
-        delete(args: {
-            where: {
-                id: string;
-            };
-        }): Promise<unknown>;
-    };
-}
-/** What `await cookies()` already gives you, narrowed to what this uses. */
-export interface CookieJar {
-    get(name: string): {
-        value: string;
-    } | undefined;
-    set(name: string, value: string, options: {
-        httpOnly: boolean;
-        secure: boolean;
-        sameSite: 'lax';
-        expires: Date;
-        path: string;
-    }): void;
-    delete(name: string): void;
-}
-export interface RolaAuthConfig {
-    /** This wiki's session cookie. The one thing the two copies actually differed in. */
-    cookieName: string;
-    jwtSecret: Uint8Array;
-    store: RolaStore;
-    cookies: () => Promise<CookieJar>;
-    rola: {
-        expectedOrigin: string;
-        dAppDefinitionAddress: string;
-        networkId: number;
-        applicationName: string;
-    };
-    sessionDurationMs?: number;
-    challengeTtlSec?: number;
-    /** Defaults to `process.env.NODE_ENV === 'production'`. */
-    secureCookies?: boolean;
-}
-/**
- * A wallet address tells you which proof type it is, and getting it wrong is a
- * silent rejection: the ROLA library verifies an `identity_*` proof only under
- * `type: 'persona'`. One of the two copies this replaces hardcoded `'account'`
- * and so could never accept a persona login at all.
- */
-export declare function proofType(address: string): 'account' | 'persona' | null;
-export interface RolaAuth {
-    createSession(userId: string, radixAddress: string, personaAddress?: string, displayName?: string): Promise<string>;
-    getSession(request?: {
-        headers: {
-            get(name: string): string | null;
-        };
-    }): Promise<AuthSession | null>;
-    destroySession(): Promise<void>;
-    generateChallenge(): Promise<{
-        challenge: string;
-        expiresAt: Date;
-    }>;
-    verifySignedChallenge(signed: SignedChallenge): Promise<{
-        isValid: boolean;
-        error?: string;
-    }>;
-}
-export declare function createRolaAuth(config: RolaAuthConfig): RolaAuth;

package/dist/rola.js

@@ -1,150 +0,0 @@
-// rola.ts — Radix On-Ledger Authentication: challenge, proof, session.
-//
-// Parameterised on the two things a second wiki would differ in: the cookie
-// name and its dApp identity. It verifies persona (identity_*) proofs as well
-// as account proofs, and logs a failed verification so it is diagnosable.
-//
-// **One consumer.** caper's wallet auth never used this stack and acuiq gates
-// only its wiki editor, on a shared secret. Keep it — the
-// persona-proof fix and the error logging are worth not losing, and the ports
-// below are what make it reusable at all — but do not mistake it for a proven
-// shared abstraction. It is radix-wiki's auth that happens to live in a package.
-//
-// Storage and cookies are ports rather than imports. A Prisma client is
-// generated per repo and cannot be shared, and taking `next/headers` here would
-// bind the package to a framework it otherwise knows nothing about. Both ports
-// are shaped so the caller passes what it already has — the delegate and the
-// cookie jar — with no adapter to write.
-//
-// `jose` and `@radixdlt/rola` are optional peers: only a repo importing this
-// subpath needs them installed.
-import { SignJWT, jwtVerify } from 'jose';
-import { Rola } from '@radixdlt/rola';
-const DEFAULT_SESSION_MS = 7 * 24 * 60 * 60 * 1000;
-const DEFAULT_CHALLENGE_TTL_SEC = 300;
-const bytesToHex = (bytes) => Array.from(bytes, b => b.toString(16).padStart(2, '0')).join('');
-/**
- * A wallet address tells you which proof type it is, and getting it wrong is a
- * silent rejection: the ROLA library verifies an `identity_*` proof only under
- * `type: 'persona'`. One of the two copies this replaces hardcoded `'account'`
- * and so could never accept a persona login at all.
- */
-export function proofType(address) {
-    if (address.startsWith('account_'))
-        return 'account';
-    if (address.startsWith('identity_'))
-        return 'persona';
-    return null;
-}
-export function createRolaAuth(config) {
-    const { cookieName, jwtSecret, store, cookies, sessionDurationMs = DEFAULT_SESSION_MS, challengeTtlSec = DEFAULT_CHALLENGE_TTL_SEC, secureCookies = process.env.NODE_ENV === 'production', } = config;
-    const rola = Rola(config.rola);
-    async function verifyToken(token) {
-        try {
-            const { payload } = await jwtVerify(token, jwtSecret);
-            const session = await store.session.findUnique({ where: { token } });
-            if (!session || session.expiresAt < new Date()) {
-                if (session)
-                    await store.session.delete({ where: { id: session.id } }).catch(() => { });
-                return null;
-            }
-            return {
-                userId: payload.userId,
-                radixAddress: payload.radixAddress,
-                personaAddress: payload.personaAddress,
-                displayName: payload.displayName,
-                expiresAt: new Date(payload.exp * 1000),
-            };
-        }
-        catch {
-            return null;
-        }
-    }
-    /** Consumes the challenge: a replayed one must not verify twice. */
-    async function validateChallenge(challenge) {
-        const stored = await store.challenge.findUnique({ where: { challenge } });
-        if (!stored || stored.expiresAt < new Date()) {
-            if (stored)
-                await store.challenge.delete({ where: { id: stored.id } });
-            return false;
-        }
-        await store.challenge.delete({ where: { id: stored.id } });
-        return true;
-    }
-    return {
-        async createSession(userId, radixAddress, personaAddress, displayName) {
-            const expiresAt = new Date(Date.now() + sessionDurationMs);
-            const token = await new SignJWT({ userId, radixAddress, personaAddress, displayName })
-                .setProtectedHeader({ alg: 'HS256' })
-                .setIssuedAt()
-                .setExpirationTime(expiresAt)
-                .setJti(crypto.randomUUID())
-                .sign(jwtSecret);
-            await store.session.create({ data: { userId, token, expiresAt } });
-            const jar = await cookies();
-            jar.set(cookieName, token, {
-                httpOnly: true,
-                secure: secureCookies,
-                sameSite: 'lax',
-                expires: expiresAt,
-                path: '/',
-            });
-            return token;
-        },
-        async getSession(request) {
-            const jar = await cookies();
-            const cookieToken = jar.get(cookieName)?.value;
-            if (cookieToken) {
-                const session = await verifyToken(cookieToken);
-                if (session)
-                    return session;
-            }
-            // Agents authenticate per-request with a Bearer token rather than a
-            // cookie, so the header is a second, equal route in — not a fallback.
-            if (request) {
-                const authHeader = request.headers.get('Authorization');
-                const bearerToken = authHeader?.startsWith('Bearer ') ? authHeader.slice(7) : null;
-                if (bearerToken)
-                    return verifyToken(bearerToken);
-            }
-            return null;
-        },
-        async destroySession() {
-            const jar = await cookies();
-            const token = jar.get(cookieName)?.value;
-            if (token)
-                await store.session.deleteMany({ where: { token } });
-            jar.delete(cookieName);
-        },
-        async generateChallenge() {
-            const array = new Uint8Array(32);
-            crypto.getRandomValues(array);
-            const challenge = bytesToHex(array);
-            const expiresAt = new Date(Date.now() + challengeTtlSec * 1000);
-            await store.challenge.create({ data: { challenge, expiresAt } });
-            return { challenge, expiresAt };
-        },
-        async verifySignedChallenge(signedChallenge) {
-            try {
-                if (!(await validateChallenge(signedChallenge.challenge))) {
-                    console.error('ROLA: challenge validation failed', signedChallenge.challenge.slice(0, 16) + '...');
-                    return { isValid: false, error: 'Invalid or expired challenge' };
-                }
-                const type = proofType(signedChallenge.address);
-                if (!type) {
-                    throw new Error(`ROLA: unrecognized address prefix (expected account_* or identity_*): ${signedChallenge.address}`);
-                }
-                const result = await rola.verifySignedChallenge({ ...signedChallenge, type });
-                if (result.isErr()) {
-                    console.error('ROLA: verification failed', result.error.reason, result.error);
-                    return { isValid: false, error: result.error.reason };
-                }
-                return { isValid: true };
-            }
-            catch (error) {
-                console.error('ROLA verification error:', error);
-                return { isValid: false, error: 'Verification failed' };
-            }
-        },
-    };
-}