diff --git a/index.html b/index.html
index a7acd634..845f565f 100644
--- a/index.html
+++ b/index.html
@@ -6,8 +6,12 @@
       Content-Security-Policy: defense-in-depth against XSS. The critical
       directive is script-src, which is strict — only same-origin scripts, the
       hash of the inline theme-bootstrap below, and the nostr-tools CDN
-      fallbacks (js/nostrToolsBootstrap.js). No 'unsafe-inline'/'unsafe-eval'
-      (verified: no bundle uses eval/Function/wasm). This blocks injected
+      fallbacks (js/nostrToolsBootstrap.js). No 'unsafe-inline'/'unsafe-eval'.
+      'wasm-unsafe-eval' IS required: BitLogin's crypto worker compiles an
+      Argon2id WASM module, and a script-src without it blocks
+      WebAssembly.compile and breaks every BitLogin password flow. That
+      keyword permits WASM compilation only — JS eval stays blocked. This
+      blocks injected
       script and object elements, inline handlers (none exist), and base-tag
       hijack, so an injected payload cannot execute and read the in-memory
       storage master key / signer / DM plaintext. connect/img/media stay broad
@@ -19,7 +23,7 @@
     -->
     <meta
       http-equiv="Content-Security-Policy"
-      content="default-src 'self'; script-src 'self' 'sha256-dnv/l3q8gLqdw0etekr5/atoIRbM/wSVSgQjZEsC7G0=' https://cdn.jsdelivr.net https://esm.sh; style-src 'self' 'unsafe-inline'; img-src 'self' https: data: blob:; media-src 'self' https: blob: mediastream:; connect-src 'self' https: wss: ws://localhost:* ws://127.0.0.1:* blob: data:; worker-src 'self' blob:; font-src 'self' data:; frame-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; manifest-src 'self'"
+      content="default-src 'self'; script-src 'self' 'wasm-unsafe-eval' 'sha256-dnv/l3q8gLqdw0etekr5/atoIRbM/wSVSgQjZEsC7G0=' https://cdn.jsdelivr.net https://esm.sh; style-src 'self' 'unsafe-inline'; img-src 'self' https: data: blob:; media-src 'self' https: blob: mediastream:; connect-src 'self' https: wss: ws://localhost:* ws://127.0.0.1:* blob: data:; worker-src 'self' blob:; font-src 'self' data:; frame-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; manifest-src 'self'"
     />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>bitvid | Decentralized Video Sharing</title>
diff --git a/tests/csp-policy.test.mjs b/tests/csp-policy.test.mjs
index 6f3e1bea..274889c0 100644
--- a/tests/csp-policy.test.mjs
+++ b/tests/csp-policy.test.mjs
@@ -87,6 +87,18 @@ for (const file of ["index.html", "embed.html"]) {
       ["'self'"],
       "base-uri must be 'self'",
     );
+
+    // index.html mounts <bitlogin-auth> (components/login-modal.html), whose
+    // crypto worker compiles an Argon2id WASM module. Without
+    // 'wasm-unsafe-eval' the browser blocks WebAssembly.compile and EVERY
+    // BitLogin password flow fails -- silently, since the page still loads.
+    // This exact omission broke sign-in on bitlogin.network for four days.
+    if (file === "index.html") {
+      assert.ok(
+        scriptSrc.includes("'wasm-unsafe-eval'"),
+        "script-src must include 'wasm-unsafe-eval' or BitLogin sign-in breaks",
+      );
+    }
   });
 
   test(`${file}: every inline <script> is hash-allowlisted in script-src`, () => {
diff --git a/vendor/bitlogin.integrity.json b/vendor/bitlogin.integrity.json
index dd454c46..9096cc8d 100644
--- a/vendor/bitlogin.integrity.json
+++ b/vendor/bitlogin.integrity.json
@@ -3,8 +3,8 @@
   "version": "0.1.0",
   "source": {
     "repository": "https://github.com/PR0M3TH3AN/bitlogin.git",
-    "commit": "205b0678cc67ecbde18278b8f46e7f8270fb519c",
-    "commitDate": "2026-07-31T22:04:01-04:00",
+    "commit": "30b4f34300f0cb6195f4bd54652ec75e814889dd",
+    "commitDate": "2026-08-04T15:41:24-04:00",
     "dirty": false,
     "provenance": "attributed",
     "toolchain": {
@@ -13,25 +13,25 @@
     }
   },
   "files": {
-    "bitlogin-shared--Zs4uvXt.js": {
-      "sha256": "550434b2ed3df975fc1d8896dca02f8622f2819d1fd9fa288049f2c22baa6bc4",
-      "bytes": 483718
+    "bitlogin-shared-CEfP5Eg9.js": {
+      "sha256": "6e19179b46deab241ffa9baded2ab0245122cf88e5b4191fcd4ca905b81a67be",
+      "bytes": 289142
     },
-    "bitlogin-shared-BxVSgyOf.js": {
-      "sha256": "d7f157c2de3d4b81de0055df2582306df9d862706d1dad35ff4096d06e1c1c93",
+    "bitlogin-shared-Co4_WTb5.js": {
+      "sha256": "ffecf43e4856105d485402c7d46ca6950b621965a85c5962daf0177f0e538237",
       "bytes": 545712
     },
-    "bitlogin-shared-DTz11m56.js": {
-      "sha256": "c52f485c6390658e8da75d7c31f01167eb4f8c22d836f9d92e22c2b0885bf79e",
-      "bytes": 289118
+    "bitlogin-shared-DeDxZ3Jc.js": {
+      "sha256": "290c293f288a16f5c753d19b0eecee795ea07b5fe31219812f260aae407de29b",
+      "bytes": 483718
     },
     "bitlogin.js": {
-      "sha256": "56eeb7584b0117e2e360c80d37a5bfddb2e1f7a8ee6d94995c24043c0e87b906",
-      "bytes": 77303
+      "sha256": "823e4ec24a8e34d96428d0c933cf16be1755a80ff105dcf52dd96391e52da513",
+      "bytes": 146039
     },
     "cryptoWorker.js": {
-      "sha256": "4d569dac3b808d118bf432d628f084c8c1d8ba76d94cf101030ace1077c63b36",
-      "bytes": 110827
+      "sha256": "adea9e4934e7b6df024cc97385ce227ad4870dad436ee8266fbe644cd5cec5b5",
+      "bytes": 126329
     }
   }
 }
diff --git a/vendor/bitlogin/bitlogin-shared-DTz11m56.js b/vendor/bitlogin/bitlogin-shared-CEfP5Eg9.js
similarity index 99%
rename from vendor/bitlogin/bitlogin-shared-DTz11m56.js
rename to vendor/bitlogin/bitlogin-shared-CEfP5Eg9.js
index 4f1065bb..b24a6ea5 100644
--- a/vendor/bitlogin/bitlogin-shared-DTz11m56.js
+++ b/vendor/bitlogin/bitlogin-shared-CEfP5Eg9.js
@@ -10406,7 +10406,7 @@ function J1(e, t) {
 function Y1(e, t) {
   return e.tags.find((n) => n[0] === t)?.[1];
 }
-const M1 = 0, q1 = 5, j1 = 10002, R1 = 10050, _1 = 22242, P1 = 30078, L1 = "bitlogin:password:v1", T1 = "bitlogin:recovery:v1", X1 = "bitlogin.credential.v1", Z1 = "bitlogin.recovery.v1", kn = "bitlogin.recovery-export.v3";
+const M1 = 0, q1 = 5, j1 = 10002, R1 = 10050, _1 = 22242, P1 = 24133, L1 = 30078, T1 = "bitlogin:password:v1", X1 = "bitlogin:recovery:v1", Z1 = "bitlogin.credential.v1", $1 = "bitlogin.recovery.v1", kn = "bitlogin.recovery-export.v3";
 var Ut, Ur;
 function g1() {
   return Ur || (Ur = 1, Ut = function e(t) {
@@ -10423,7 +10423,7 @@ function g1() {
   }), Ut;
 }
 var A1 = g1();
-const $1 = /* @__PURE__ */ Kr(A1);
+const W1 = /* @__PURE__ */ Kr(A1);
 /*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */
 function Ue(e) {
   return e instanceof Uint8Array || ArrayBuffer.isView(e) && e.constructor.name === "Uint8Array";
@@ -10638,7 +10638,7 @@ function p1(e, t) {
     }
   };
 }
-const W1 = {
+const e2 = {
   alphabet: er,
   chain: Wt,
   checksum: p1,
@@ -10654,7 +10654,7 @@ const W1 = {
   if (e.length > 0 && !n.test(e))
     throw new Error("invalid base64");
   return Uint8Array.fromBase64(e, { alphabet: r, lastChunkHandling: "strict" });
-}, e2 = I1 ? {
+}, t2 = I1 ? {
   encode(e) {
     return f1(e), e.toBase64();
   },
@@ -10740,19 +10740,19 @@ function y1(e) {
   };
 }
 const nr = /* @__PURE__ */ y1("bech32");
-function t2(e) {
+function r2(e) {
   return nr.encodeFromBytes("npub", Je(e));
 }
-function r2(e) {
+function n2(e) {
   return nr.encodeFromBytes("nsec", e);
 }
-function n2(e) {
+function i2(e) {
   const { prefix: t, bytes: n } = nr.decodeToBytes(e);
   if (t !== "nsec" || n.length !== 32)
     throw new Error("Not a valid nsec.");
   return n;
 }
-function i2(e) {
+function a2(e) {
   return {
     schema: kn,
     recovery_public_key: e.recoveryPublicKeyHex,
@@ -10767,7 +10767,7 @@ class oe extends Error {
     super(t), this.name = "RecoveryExportParseError";
   }
 }
-function a2(e) {
+function o2(e) {
   if (typeof e != "object" || e === null)
     throw new oe("Recovery export must be a JSON object.");
   const t = e;
@@ -10792,68 +10792,69 @@ function a2(e) {
   return t;
 }
 export {
-  Rr as $,
-  ft as A,
-  x1 as B,
-  rt as C,
-  L1 as D,
+  q1 as $,
+  bt as A,
+  Q1 as B,
+  ft as C,
+  T1 as D,
   w1 as E,
-  E1 as F,
-  pt as G,
-  Ce as H,
-  D1 as I,
-  pe as J,
+  x1 as F,
+  rt as G,
+  E1 as H,
+  pt as I,
+  Ce as J,
   _1 as K,
-  W1 as L,
-  he as M,
-  We as N,
-  n2 as O,
-  Je as P,
-  i1 as Q,
+  D1 as L,
+  pe as M,
+  e2 as N,
+  he as O,
+  We as P,
+  i2 as Q,
   oe as R,
-  Z1 as S,
-  N1 as T,
-  C1 as U,
-  K1 as V,
-  _r as W,
-  O1 as X,
-  v1 as Y,
-  q1 as Z,
-  jr as _,
-  t2 as a,
-  qr as a0,
-  mn as a1,
-  Rt as a2,
+  $1 as S,
+  Je as T,
+  i1 as U,
+  N1 as V,
+  C1 as W,
+  K1 as X,
+  _r as Y,
+  O1 as Z,
+  v1 as _,
+  qe as a,
+  Rr as a0,
+  qr as a1,
+  mn as a2,
   mt as a3,
-  e2 as a4,
+  t2 as a4,
   G1 as a5,
-  J1 as a6,
-  i2 as a7,
-  r2 as a8,
-  Kr as a9,
+  P1 as a6,
+  J1 as a7,
+  a2 as a8,
+  n2 as a9,
+  Kr as aa,
   jt as b,
-  qe as c,
-  M1 as d,
+  Rt as c,
+  S1 as d,
   b1 as e,
-  j1 as f,
+  r2 as f,
   V1 as g,
-  R1 as h,
+  jr as h,
   H1 as i,
-  P1 as j,
-  $1 as k,
-  k1 as l,
-  S1 as m,
-  F1 as n,
-  U1 as o,
-  a2 as p,
-  s1 as q,
+  M1 as j,
+  j1 as k,
+  R1 as l,
+  L1 as m,
+  W1 as n,
+  k1 as o,
+  o2 as p,
+  F1 as q,
   B1 as r,
   z1 as s,
-  X1 as t,
+  U1 as t,
   De as u,
   Fr as v,
-  T1 as w,
-  Y1 as x,
-  bt as y,
-  Q1 as z
+  s1 as w,
+  Z1 as x,
+  X1 as y,
+  Y1 as z
 };
diff --git a/vendor/bitlogin/bitlogin-shared-BxVSgyOf.js b/vendor/bitlogin/bitlogin-shared-Co4_WTb5.js
similarity index 99%
rename from vendor/bitlogin/bitlogin-shared-BxVSgyOf.js
rename to vendor/bitlogin/bitlogin-shared-Co4_WTb5.js
index 838243bb..222c111f 100644
--- a/vendor/bitlogin/bitlogin-shared-BxVSgyOf.js
+++ b/vendor/bitlogin/bitlogin-shared-Co4_WTb5.js
@@ -1,4 +1,4 @@
-import { a9 as D2 } from "./bitlogin-shared-DTz11m56.js";
+import { aa as D2 } from "./bitlogin-shared-CEfP5Eg9.js";
 const wl = {
   debug() {
   }
@@ -7918,7 +7918,7 @@ let ke;
 async function l2() {
   try {
     if (ke) return ke;
-    const e = (await import("./bitlogin-shared--Zs4uvXt.js").then((t) => t.i)).default;
+    const e = (await import("./bitlogin-shared-DeDxZ3Jc.js").then((t) => t.i)).default;
     return ke = new e(), ke;
   } catch (e) {
     throw console.error(e), new Error("LNC is not available");
diff --git a/vendor/bitlogin/bitlogin-shared--Zs4uvXt.js b/vendor/bitlogin/bitlogin-shared-DeDxZ3Jc.js
similarity index 99%
rename from vendor/bitlogin/bitlogin-shared--Zs4uvXt.js
rename to vendor/bitlogin/bitlogin-shared-DeDxZ3Jc.js
index d22b16f8..3abe4a58 100644
--- a/vendor/bitlogin/bitlogin-shared--Zs4uvXt.js
+++ b/vendor/bitlogin/bitlogin-shared-DeDxZ3Jc.js
@@ -1,4 +1,4 @@
-import { a9 as Ye } from "./bitlogin-shared-DTz11m56.js";
+import { aa as Ye } from "./bitlogin-shared-CEfP5Eg9.js";
 function We(we, je) {
   for (var Ie = 0; Ie < je.length; Ie++) {
     const Ae = je[Ie];
diff --git a/vendor/bitlogin/bitlogin.js b/vendor/bitlogin/bitlogin.js
index 6e6a9cc4..03f5db57 100644
--- a/vendor/bitlogin/bitlogin.js
+++ b/vendor/bitlogin/bitlogin.js
@@ -1,58 +1,66 @@
-import { r as g, e as v, E as m, p as w, R as Q, i as p, a as u } from "./bitlogin-shared-DTz11m56.js";
-const k = 6, b = 64;
-function d(a = k) {
-  const e = v(), t = [];
-  for (let r = 0; r < a; r++)
-    t.push(e[g(e.length)]);
-  const s = a * m;
-  if (s < b)
-    throw new Error(`Passphrase of ${a} words provides only ~${s.toFixed(1)} bits; must exceed ${b}.`);
-  return { kind: "passphrase", secret: t.join(" "), entropyBits: s };
+import { r as be, e as Se, E as Le, v as Ne, u as we, a as z, b as me, h as Pe, c as ae, d as Re, p as Be, R as $e, f as _, i as le } from "./bitlogin-shared-CEfP5Eg9.js";
+const Me = 6, ce = 64;
+function G(o = Me) {
+  const e = Se(), t = [];
+  for (let r = 0; r < o; r++)
+    t.push(e[be(e.length)]);
+  const n = o * Le;
+  if (n < ce)
+    throw new Error(`Passphrase of ${o} words provides only ~${n.toFixed(1)} bits; must exceed ${ce}.`);
+  return { kind: "passphrase", secret: t.join(" "), entropyBits: n };
 }
-const x = 6e4;
-class S {
+const Te = 6e4, K = 26e4, Ae = 32e4;
+class _e {
   worker;
   pending = /* @__PURE__ */ new Map();
   counter = 0;
   dead = !1;
+  /** Set by the element to receive unsolicited worker frames (auth_url). */
+  onNotification = null;
   constructor() {
     const e = ["cryptoWorker", ".js"].join(""), t = new URL(e, import.meta.url);
     this.worker = new Worker(t, { type: "module" }), this.worker.addEventListener("message", (r) => {
-      const i = r.data;
-      if (!i || typeof i != "object" || typeof i.id != "string") return;
-      const o = this.pending.get(i.id);
-      if (o)
-        if (this.pending.delete(i.id), clearTimeout(o.timer), i.ok)
-          o.resolve(i.result);
+      const a = r.data;
+      if (!a || typeof a != "object") return;
+      const s = a;
+      if (s.notify === "nip46-auth-url" && typeof s.url == "string") {
+        this.onNotification?.(s);
+        return;
+      }
+      if (typeof a.id != "string") return;
+      const i = this.pending.get(a.id);
+      if (i)
+        if (this.pending.delete(a.id), clearTimeout(i.timer), a.ok)
+          i.resolve(a.result);
         else {
-          const l = new Error(i.error);
-          l.name = i.errorName ?? "Error", o.reject(l);
+          const u = new Error(a.error);
+          u.name = a.errorName ?? "Error", i.reject(u);
         }
     });
-    const s = (r) => () => this.failAll(r);
-    this.worker.addEventListener("error", s("The BitLogin crypto worker stopped unexpectedly.")), this.worker.addEventListener(
+    const n = (r) => () => this.failAll(r);
+    this.worker.addEventListener("error", n("The BitLogin crypto worker stopped unexpectedly.")), this.worker.addEventListener(
       "messageerror",
-      s("The BitLogin crypto worker sent an unreadable message.")
+      n("The BitLogin crypto worker sent an unreadable message.")
     );
   }
   /** Settles every outstanding call with an error. Idempotent. */
   failAll(e) {
     const t = [...this.pending.values()];
     this.pending.clear();
-    for (const s of t)
-      clearTimeout(s.timer), s.reject(new Error(e));
+    for (const n of t)
+      clearTimeout(n.timer), n.reject(new Error(e));
   }
-  call(e, t) {
+  call(e, t, n = Te) {
     if (this.dead)
       return Promise.reject(new Error("This BitLogin session was torn down; reload the page to sign in again."));
-    const s = `${Date.now().toString(36)}-${(this.counter++).toString(36)}`;
-    return new Promise((r, i) => {
-      const o = setTimeout(() => {
-        this.pending.delete(s), i(new Error(`BitLogin's ${e} call timed out.`));
-      }, x);
-      this.pending.set(s, { resolve: r, reject: i, timer: o });
-      const l = { id: s, action: e, payload: t };
-      this.worker.postMessage(l);
+    const r = `${Date.now().toString(36)}-${(this.counter++).toString(36)}`;
+    return new Promise((a, s) => {
+      const i = setTimeout(() => {
+        this.pending.delete(r), s(new Error(`BitLogin's ${e} call timed out.`));
+      }, n);
+      this.pending.set(r, { resolve: a, reject: s, timer: i });
+      const u = { id: r, action: e, payload: t };
+      this.worker.postMessage(u);
     });
   }
   configure(e) {
@@ -136,6 +144,34 @@ class S {
   vaultOfferCheck(e) {
     return this.call("vaultOfferCheck", e);
   }
+  // ---- NIP-46 remote-signer session (§LM5) ----
+  nip46Connect(e) {
+    return this.call("nip46Connect", e, K);
+  }
+  nip46NostrconnectStart(e) {
+    return this.call("nip46NostrconnectStart", e);
+  }
+  nip46NostrconnectAwait() {
+    return this.call("nip46NostrconnectAwait", {}, Ae);
+  }
+  nip46SignEvent(e) {
+    return this.call("nip46SignEvent", e, K);
+  }
+  nip46Nip44Encrypt(e) {
+    return this.call("nip46Nip44Encrypt", e, K);
+  }
+  nip46Nip44Decrypt(e) {
+    return this.call("nip46Nip44Decrypt", e, K);
+  }
+  nip46Nip04Encrypt(e) {
+    return this.call("nip46Nip04Encrypt", e, K);
+  }
+  nip46Nip04Decrypt(e) {
+    return this.call("nip46Nip04Decrypt", e, K);
+  }
+  nip46Disconnect() {
+    return this.call("nip46Disconnect", {});
+  }
   logout() {
     return this.call("logout", {});
   }
@@ -143,57 +179,77 @@ class S {
     this.dead = !0, this.worker.terminate(), this.failAll("The BitLogin crypto worker was terminated.");
   }
 }
-const L = "BitLogin: no identity is unlocked yet. Add <bitlogin-auth> to the page and let the user sign in, or call it programmatically before invoking window.nostr.";
-function c(a) {
-  return a.catch((e) => {
-    throw e.message.includes("No identity is unlocked") ? new Error(L) : e;
-  });
-}
-function C(a, e) {
+function De(o, e) {
   return {
-    async getPublicKey() {
-      const { publicKey: t } = await c(a.getPublicKey());
-      return t;
-    },
-    async signEvent(t) {
-      return c(a.signEvent(t));
-    },
+    getPublicKey: () => o.getPublicKey(),
+    signEvent: (t) => o.signEvent(t),
     async getRelays() {
       const t = {};
-      for (const s of e()) t[s] = { read: !0, write: !0 };
+      for (const n of e()) t[n] = { read: !0, write: !0 };
       return t;
     },
     nip44: {
-      async encrypt(t, s) {
-        const { ciphertext: r } = await c(a.nip44Encrypt({ peerPublicKey: t, plaintext: s }));
+      encrypt: (t, n) => o.nip44Encrypt(t, n),
+      decrypt: (t, n) => o.nip44Decrypt(t, n)
+    },
+    nip04: {
+      encrypt: (t, n) => o.nip04Encrypt(t, n),
+      decrypt: (t, n) => o.nip04Decrypt(t, n)
+    },
+    _bitlogin: !0
+  };
+}
+const Ie = "BitLogin: no identity is unlocked yet. Add <bitlogin-auth> to the page and let the user sign in, or call it programmatically before invoking window.nostr.";
+function F(o) {
+  return o.catch((e) => {
+    throw e.message.includes("No identity is unlocked") ? new Error(Ie) : e;
+  });
+}
+function mt(o, e) {
+  return {
+    async getPublicKey() {
+      const { publicKey: t } = await F(o.getPublicKey());
+      return t;
+    },
+    async signEvent(t) {
+      return F(o.signEvent(t));
+    },
+    async getRelays() {
+      const t = {};
+      for (const n of e()) t[n] = { read: !0, write: !0 };
+      return t;
+    },
+    nip44: {
+      async encrypt(t, n) {
+        const { ciphertext: r } = await F(o.nip44Encrypt({ peerPublicKey: t, plaintext: n }));
         return r;
       },
-      async decrypt(t, s) {
-        const { plaintext: r } = await c(a.nip44Decrypt({ peerPublicKey: t, payload: s }));
+      async decrypt(t, n) {
+        const { plaintext: r } = await F(o.nip44Decrypt({ peerPublicKey: t, payload: n }));
         return r;
       }
     },
     nip04: {
-      async encrypt(t, s) {
-        const { ciphertext: r } = await c(a.nip04Encrypt({ peerPublicKey: t, plaintext: s }));
+      async encrypt(t, n) {
+        const { ciphertext: r } = await F(o.nip04Encrypt({ peerPublicKey: t, plaintext: n }));
         return r;
       },
-      async decrypt(t, s) {
-        const { plaintext: r } = await c(a.nip04Decrypt({ peerPublicKey: t, payload: s }));
+      async decrypt(t, n) {
+        const { plaintext: r } = await F(o.nip04Decrypt({ peerPublicKey: t, payload: n }));
         return r;
       }
     },
     _bitlogin: !0
   };
 }
-function E(a) {
-  const e = a.getAttribute("vault-relays"), t = a.getAttribute("discovery-relays");
+function Oe(o) {
+  const e = o.getAttribute("vault-relays"), t = o.getAttribute("discovery-relays");
   return {
-    vaultRelayUrls: e ? e.split(",").map((s) => s.trim()).filter(Boolean) : void 0,
-    discoveryRelayUrls: t ? t.split(",").map((s) => s.trim()).filter(Boolean) : void 0
+    vaultRelayUrls: e ? e.split(",").map((n) => n.trim()).filter(Boolean) : void 0,
+    discoveryRelayUrls: t ? t.split(",").map((n) => n.trim()).filter(Boolean) : void 0
   };
 }
-const R = (
+const Ue = (
   /* css */
   `
 :host {
@@ -401,6 +457,115 @@ button.link {
   font-weight: 500;
   font-size: 13px;
 }
+button:focus-visible { outline: 2px solid var(--bl-accent); outline-offset: 2px; }
+.screen-head {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  margin: 0 0 4px -8px; /* negative left margin optically aligns the chevron with the content edge */
+}
+.screen-head h2 { margin: 0; }
+.icon-back {
+  flex: none;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  width: 36px;
+  height: 36px;
+  margin: 0;
+  padding: 0;
+  border: none;
+  border-radius: 9px;
+  background: none;
+  color: var(--bl-muted);
+}
+.icon-back:hover { background: var(--bl-input-bg); color: var(--bl-fg); }
+.icon-back svg { width: 20px; height: 20px; }
+/* Right-aligned helper link under an input (e.g. "Forgot password?"). */
+.field-hint { display: flex; justify-content: flex-end; margin-top: 8px; }
+.field-hint .link-inline {
+  width: auto;
+  margin: 0;
+  padding: 4px 0;
+  border: none;
+  background: none;
+  color: var(--bl-accent);
+  font-size: 12.5px;
+  font-weight: 500;
+}
+/* Collapsed disclosure for every non-primary sign-in path (§LM9.1: the
+   password flow stays the visual headline; alternatives are one tap away).
+   Rows are full-bleed buttons with generous minimum height so the menu works
+   as well under a thumb as a pointer. */
+.options-toggle {
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  gap: 6px;
+  width: 100%;
+  background: none;
+  border: none;
+  color: var(--bl-muted);
+  font-size: 13px;
+  font-weight: 500;
+  padding: 10px 0 8px;
+  margin-top: 8px;
+}
+.options-toggle:hover { color: var(--bl-fg); }
+.options-toggle svg { width: 14px; height: 14px; transition: transform 0.18s ease; }
+.options-toggle.open svg { transform: rotate(180deg); }
+.option-menu {
+  border: 1px solid var(--bl-border);
+  border-radius: 12px;
+  margin-top: 4px;
+  overflow: hidden;
+}
+.option-group-label {
+  padding: 10px 14px 6px;
+  font-size: 11.5px;
+  font-weight: 600;
+  letter-spacing: 0.04em;
+  text-transform: uppercase;
+  color: var(--bl-muted);
+}
+.option-group-label + .option-row { border-top: none; }
+.notice .link-inline {
+  width: auto;
+  margin: 0;
+  padding: 0;
+  border: none;
+  background: none;
+  color: inherit;
+  font-size: inherit;
+  font-weight: 600;
+  text-decoration: underline;
+}
+.option-row {
+  display: flex;
+  align-items: center;
+  gap: 12px;
+  width: 100%;
+  margin: 0;
+  padding: 12px 14px;
+  min-height: 56px;
+  background: none;
+  border: none;
+  border-radius: 0;
+  text-align: left;
+  font-size: 14px;
+  font-weight: 500;
+  color: var(--bl-fg);
+}
+.option-row + .option-row { border-top: 1px solid var(--bl-border); }
+.option-row:hover { background: var(--bl-input-bg); }
+.option-row:disabled { opacity: 0.55; cursor: default; }
+.option-icon { flex: none; width: 20px; height: 20px; color: var(--bl-muted); }
+.option-icon svg { display: block; width: 100%; height: 100%; }
+.option-text { display: flex; flex-direction: column; gap: 1px; min-width: 0; }
+.option-sub { font-size: 12px; font-weight: 400; color: var(--bl-muted); }
+@media (prefers-reduced-motion: reduce) {
+  .options-toggle svg { transition: none; }
+}
 .row { display: flex; gap: 8px; }
 .row > * { flex: 1; }
 .notice {
@@ -433,17 +598,27 @@ button.link {
   margin-right: 6px;
 }
 @keyframes bl-spin { to { transform: rotate(360deg); } }
+
+/* nostrconnect QR (§LM5). The white backing and quiet zone are drawn inside
+   the SVG itself -- scanners need them regardless of host theme -- so the
+   wrapper only sizes and centers it. */
+.qr-wrap {
+  display: block;
+  width: min(240px, 100%);
+  margin: 14px auto;
+}
+.qr-wrap svg { display: block; width: 100%; height: auto; }
 `
-), y = "bc:config", $ = /^nostr\+walletconnect:\/\//iu;
-let h = null;
-function N(a) {
-  if (!h) {
+), ve = "bc:config", Ke = /^nostr\+walletconnect:\/\//iu;
+let Z = null;
+function Fe(o) {
+  if (!Z) {
     try {
-      localStorage.removeItem(y);
+      localStorage.removeItem(ve);
     } catch {
     }
-    h = import("./bitlogin-shared-BxVSgyOf.js").then((e) => (e.init({
-      appName: a,
+    Z = import("./bitlogin-shared-Co4_WTb5.js").then((e) => (e.init({
+      appName: o,
       filters: ["nwc"],
       showBalance: !1,
       autoConnect: !1,
@@ -451,30 +626,30 @@ function N(a) {
       providerConfig: {
         nwc: {
           authorizationUrlOptions: {
-            name: a,
+            name: o,
             requestMethods: ["pay_invoice"]
           }
         }
       }
     }), e)).catch((e) => {
-      throw h = null, e;
+      throw Z = null, e;
     });
   }
-  return h;
+  return Z;
 }
-function P(a) {
-  const e = a instanceof Error ? a.message : String(a);
+function We(o) {
+  const e = o instanceof Error ? o.message : String(o);
   return /closed|cancell?ed|dismissed|aborted/iu.test(e);
 }
-async function B(a) {
-  const e = await N(a);
+async function qe(o) {
+  const e = await Fe(o);
   try {
-    const t = await e.requestProvider(), s = e.getConnectorConfig()?.nwcUrl, r = t.client?.nostrWalletConnectUrl, i = typeof s == "string" ? s : typeof r == "string" ? r : "";
-    if (!$.test(i.trim()))
+    const t = await e.requestProvider(), n = e.getConnectorConfig()?.nwcUrl, r = t.client?.nostrWalletConnectUrl, a = typeof n == "string" ? n : typeof r == "string" ? r : "";
+    if (!Ke.test(a.trim()))
       throw new Error("The wallet did not return an NWC connection. Try again or paste one manually.");
-    return i.trim();
+    return a.trim();
   } catch (t) {
-    if (P(t)) return null;
+    if (We(t)) return null;
     throw t;
   } finally {
     try {
@@ -482,24 +657,1318 @@ async function B(a) {
     } catch {
     }
     try {
-      localStorage.removeItem(y);
+      localStorage.removeItem(ve);
     } catch {
     }
   }
 }
-function T(a) {
+function je(o) {
   const e = [];
-  return a.rollbackWarnings.length > 0 && e.push(
-    `${a.rollbackWarnings.length} wallet record${a.rollbackWarnings.length === 1 ? " was" : "s were"} withheld because relays served an older version than this device previously accepted.`
-  ), a.quorumMet || e.push(
+  return o.rollbackWarnings.length > 0 && e.push(
+    `${o.rollbackWarnings.length} wallet record${o.rollbackWarnings.length === 1 ? " was" : "s were"} withheld because relays served an older version than this device previously accepted.`
+  ), o.quorumMet || e.push(
     "Not enough vault relays answered. This connection list may be incomplete."
-  ), a.truncated && e.push(
+  ), o.truncated && e.push(
     "A relay returned the maximum record page. Some wallet connections may be missing."
-  ), a.unreadable.length > 0 && e.push(
-    `${a.unreadable.length} encrypted wallet record${a.unreadable.length === 1 ? " was" : "s were"} unreadable and omitted.`
+  ), o.unreadable.length > 0 && e.push(
+    `${o.unreadable.length} encrypted wallet record${o.unreadable.length === 1 ? " was" : "s were"} unreadable and omitted.`
   ), e;
 }
-class I extends HTMLElement {
+class J extends Error {
+  constructor(e, t) {
+    super(`The active signer (${t}) does not support ${e}.`), this.name = "SignerUnsupportedError";
+  }
+}
+class Ve extends Error {
+  constructor(e, t) {
+    super(
+      `The signer did not answer ${e} within ${Math.round(t / 1e3)}s. It may be waiting for your approval in another window, or unavailable -- check your signer and try again.`
+    ), this.name = "SignerTimeoutError";
+  }
+}
+function ue(o = window) {
+  const e = o.nostr;
+  return !e || typeof e != "object" || e._bitlogin === !0 || typeof e.getPublicKey != "function" || typeof e.signEvent != "function" ? null : e;
+}
+const He = 12e4;
+function W(o, e, t) {
+  return new Promise((n, r) => {
+    const a = setTimeout(() => r(new Ve(e, t)), t);
+    o.then(
+      (s) => {
+        clearTimeout(a), n(s);
+      },
+      (s) => {
+        clearTimeout(a), r(s);
+      }
+    );
+  });
+}
+class Ye {
+  method = "nip07";
+  capabilities;
+  provider;
+  timeoutMs;
+  constructor(e, t = {}) {
+    this.provider = e, this.timeoutMs = t.timeoutMs ?? He, this.capabilities = {
+      nip44: typeof e.nip44?.encrypt == "function" && typeof e.nip44?.decrypt == "function",
+      nip04: typeof e.nip04?.encrypt == "function" && typeof e.nip04?.decrypt == "function",
+      getRelays: typeof e.getRelays == "function"
+    };
+  }
+  /** Identity this extension reported; later signEvent results must come
+   *  from it -- a multi-profile extension switching accounts mid-session
+   *  must surface as an error, not as silently mixed authorship. */
+  knownPublicKey = null;
+  async getPublicKey() {
+    const e = await W(this.provider.getPublicKey(), "getPublicKey", this.timeoutMs), t = typeof e == "string" ? e.toLowerCase() : "";
+    if (!/^[0-9a-f]{64}$/.test(t))
+      throw new Error("The extension returned an invalid public key (expected 64 hex characters).");
+    return this.knownPublicKey = t, t;
+  }
+  async signEvent(e) {
+    const t = {
+      kind: e.kind,
+      content: e.content,
+      tags: e.tags ?? [],
+      created_at: e.created_at ?? Math.floor(Date.now() / 1e3)
+    }, n = await W(this.provider.signEvent(t), "signEvent", this.timeoutMs);
+    if (!Ne(n))
+      throw new Error("The extension returned an event that does not verify.");
+    if (this.knownPublicKey && n.pubkey !== this.knownPublicKey)
+      throw new Error("The extension signed with a different identity than this session's.");
+    if (n.kind !== t.kind || n.content !== t.content || n.created_at !== t.created_at || JSON.stringify(n.tags) !== JSON.stringify(t.tags))
+      throw new Error("The extension returned a different event than the one requested.");
+    return n;
+  }
+  async nip44Encrypt(e, t) {
+    if (!this.capabilities.nip44) throw new J("nip44.encrypt", this.method);
+    return W(this.provider.nip44.encrypt(e, t), "nip44.encrypt", this.timeoutMs);
+  }
+  async nip44Decrypt(e, t) {
+    if (!this.capabilities.nip44) throw new J("nip44.decrypt", this.method);
+    return W(this.provider.nip44.decrypt(e, t), "nip44.decrypt", this.timeoutMs);
+  }
+  async nip04Encrypt(e, t) {
+    if (!this.capabilities.nip04) throw new J("nip04.encrypt", this.method);
+    return W(this.provider.nip04.encrypt(e, t), "nip04.encrypt", this.timeoutMs);
+  }
+  async nip04Decrypt(e, t) {
+    if (!this.capabilities.nip04) throw new J("nip04.decrypt", this.method);
+    return W(this.provider.nip04.decrypt(e, t), "nip04.decrypt", this.timeoutMs);
+  }
+}
+class Ge {
+  constructor(e, t) {
+    this.worker = e, this.userPubkey = t;
+  }
+  method = "nip46";
+  /** The NIP-46 RPC surface always carries all four encryption calls; whether a
+   *  particular signer approves them is a per-request policy decision that
+   *  surfaces as its error, not a missing capability. */
+  capabilities = { nip44: !0, nip04: !0, getRelays: !1 };
+  getPublicKey() {
+    return Promise.resolve(this.userPubkey);
+  }
+  signEvent(e) {
+    return this.worker.nip46SignEvent({
+      kind: e.kind,
+      content: e.content,
+      tags: e.tags,
+      created_at: e.created_at
+    });
+  }
+  async nip44Encrypt(e, t) {
+    return (await this.worker.nip46Nip44Encrypt({ peerPublicKey: e, plaintext: t })).ciphertext;
+  }
+  async nip44Decrypt(e, t) {
+    return (await this.worker.nip46Nip44Decrypt({ peerPublicKey: e, payload: t })).plaintext;
+  }
+  async nip04Encrypt(e, t) {
+    return (await this.worker.nip46Nip04Encrypt({ peerPublicKey: e, plaintext: t })).ciphertext;
+  }
+  async nip04Decrypt(e, t) {
+    return (await this.worker.nip46Nip04Decrypt({ peerPublicKey: e, payload: t })).plaintext;
+  }
+}
+const q = function(o, e) {
+  let r = o;
+  const a = V[e];
+  let s = null, i = 0, u = null;
+  const b = [], w = {}, g = function(c, p) {
+    i = r * 4 + 17, s = (function(l) {
+      const d = new Array(l);
+      for (let h = 0; h < l; h += 1) {
+        d[h] = new Array(l);
+        for (let y = 0; y < l; y += 1)
+          d[h][y] = null;
+      }
+      return d;
+    })(i), f(0, 0), f(i - 7, 0), f(0, i - 7), L(), B(), M(c, p), r >= 7 && P(c), u == null && (u = Ce(r, a, b)), $(u, p);
+  }, f = function(c, p) {
+    for (let l = -1; l <= 7; l += 1)
+      if (!(c + l <= -1 || i <= c + l))
+        for (let d = -1; d <= 7; d += 1)
+          p + d <= -1 || i <= p + d || (0 <= l && l <= 6 && (d == 0 || d == 6) || 0 <= d && d <= 6 && (l == 0 || l == 6) || 2 <= l && l <= 4 && 2 <= d && d <= 4 ? s[c + l][p + d] = !0 : s[c + l][p + d] = !1);
+  }, x = function() {
+    let c = 0, p = 0;
+    for (let l = 0; l < 8; l += 1) {
+      g(!0, l);
+      const d = I.getLostPoint(w);
+      (l == 0 || c > d) && (c = d, p = l);
+    }
+    return p;
+  }, B = function() {
+    for (let c = 8; c < i - 8; c += 1)
+      s[c][6] == null && (s[c][6] = c % 2 == 0);
+    for (let c = 8; c < i - 8; c += 1)
+      s[6][c] == null && (s[6][c] = c % 2 == 0);
+  }, L = function() {
+    const c = I.getPatternPosition(r);
+    for (let p = 0; p < c.length; p += 1)
+      for (let l = 0; l < c.length; l += 1) {
+        const d = c[p], h = c[l];
+        if (s[d][h] == null)
+          for (let y = -2; y <= 2; y += 1)
+            for (let m = -2; m <= 2; m += 1)
+              y == -2 || y == 2 || m == -2 || m == 2 || y == 0 && m == 0 ? s[d + y][h + m] = !0 : s[d + y][h + m] = !1;
+      }
+  }, P = function(c) {
+    const p = I.getBCHTypeNumber(r);
+    for (let l = 0; l < 18; l += 1) {
+      const d = !c && (p >> l & 1) == 1;
+      s[Math.floor(l / 3)][l % 3 + i - 8 - 3] = d;
+    }
+    for (let l = 0; l < 18; l += 1) {
+      const d = !c && (p >> l & 1) == 1;
+      s[l % 3 + i - 8 - 3][Math.floor(l / 3)] = d;
+    }
+  }, M = function(c, p) {
+    const l = a << 3 | p, d = I.getBCHTypeInfo(l);
+    for (let h = 0; h < 15; h += 1) {
+      const y = !c && (d >> h & 1) == 1;
+      h < 6 ? s[h][8] = y : h < 8 ? s[h + 1][8] = y : s[i - 15 + h][8] = y;
+    }
+    for (let h = 0; h < 15; h += 1) {
+      const y = !c && (d >> h & 1) == 1;
+      h < 8 ? s[8][i - h - 1] = y : h < 9 ? s[8][15 - h - 1 + 1] = y : s[8][15 - h - 1] = y;
+    }
+    s[i - 8][8] = !c;
+  }, $ = function(c, p) {
+    let l = -1, d = i - 1, h = 7, y = 0;
+    const m = I.getMaskFunction(p);
+    for (let Q = i - 1; Q > 0; Q -= 2)
+      for (Q == 6 && (Q -= 1); ; ) {
+        for (let C = 0; C < 2; C += 1)
+          if (s[d][Q - C] == null) {
+            let S = !1;
+            y < c.length && (S = (c[y] >>> h & 1) == 1), m(d, Q - C) && (S = !S), s[d][Q - C] = S, h -= 1, h == -1 && (y += 1, h = 7);
+          }
+        if (d += l, d < 0 || i <= d) {
+          d -= l, l = -l;
+          break;
+        }
+      }
+  }, Qe = function(c, p) {
+    let l = 0, d = 0, h = 0;
+    const y = new Array(p.length), m = new Array(p.length);
+    for (let v = 0; v < p.length; v += 1) {
+      const E = p[v].dataCount, R = p[v].totalCount - E;
+      d = Math.max(d, E), h = Math.max(h, R), y[v] = new Array(E);
+      for (let T = 0; T < y[v].length; T += 1)
+        y[v][T] = 255 & c.getBuffer()[T + l];
+      l += E;
+      const X = I.getErrorCorrectPolynomial(R), se = H(y[v], X.getLength() - 1).mod(X);
+      m[v] = new Array(X.getLength() - 1);
+      for (let T = 0; T < m[v].length; T += 1) {
+        const oe = T + se.getLength() - m[v].length;
+        m[v][T] = oe >= 0 ? se.getAt(oe) : 0;
+      }
+    }
+    let Q = 0;
+    for (let v = 0; v < p.length; v += 1)
+      Q += p[v].totalCount;
+    const C = new Array(Q);
+    let S = 0;
+    for (let v = 0; v < d; v += 1)
+      for (let E = 0; E < p.length; E += 1)
+        v < y[E].length && (C[S] = y[E][v], S += 1);
+    for (let v = 0; v < h; v += 1)
+      for (let E = 0; E < p.length; E += 1)
+        v < m[E].length && (C[S] = m[E][v], S += 1);
+    return C;
+  }, Ce = function(c, p, l) {
+    const d = he.getRSBlocks(c, p), h = de();
+    for (let m = 0; m < l.length; m += 1) {
+      const Q = l[m];
+      h.put(Q.getMode(), 4), h.put(Q.getLength(), I.getLengthInBits(Q.getMode(), c)), Q.write(h);
+    }
+    let y = 0;
+    for (let m = 0; m < d.length; m += 1)
+      y += d[m].dataCount;
+    if (h.getLengthInBits() > y * 8)
+      throw "code length overflow. (" + h.getLengthInBits() + ">" + y * 8 + ")";
+    for (h.getLengthInBits() + 4 <= y * 8 && h.put(0, 4); h.getLengthInBits() % 8 != 0; )
+      h.putBit(!1);
+    for (; !(h.getLengthInBits() >= y * 8 || (h.put(236, 8), h.getLengthInBits() >= y * 8)); )
+      h.put(17, 8);
+    return Qe(h, d);
+  };
+  w.addData = function(c, p) {
+    p = p || "Byte";
+    let l = null;
+    switch (p) {
+      case "Numeric":
+        l = Ze(c);
+        break;
+      case "Alphanumeric":
+        l = Je(c);
+        break;
+      case "Byte":
+        l = ze(c);
+        break;
+      case "Kanji":
+        l = Xe(c);
+        break;
+      default:
+        throw "mode:" + p;
+    }
+    b.push(l), u = null;
+  }, w.isDark = function(c, p) {
+    if (c < 0 || i <= c || p < 0 || i <= p)
+      throw c + "," + p;
+    return s[c][p];
+  }, w.getModuleCount = function() {
+    return i;
+  }, w.make = function() {
+    if (r < 1) {
+      let c = 1;
+      for (; c < 40; c++) {
+        const p = he.getRSBlocks(c, a), l = de();
+        for (let h = 0; h < b.length; h++) {
+          const y = b[h];
+          l.put(y.getMode(), 4), l.put(y.getLength(), I.getLengthInBits(y.getMode(), c)), y.write(l);
+        }
+        let d = 0;
+        for (let h = 0; h < p.length; h++)
+          d += p[h].dataCount;
+        if (l.getLengthInBits() <= d * 8)
+          break;
+      }
+      r = c;
+    }
+    g(!1, x());
+  }, w.createTableTag = function(c, p) {
+    c = c || 2, p = typeof p > "u" ? c * 4 : p;
+    let l = "";
+    l += '<table style="', l += " border-width: 0px; border-style: none;", l += " border-collapse: collapse;", l += " padding: 0px; margin: " + p + "px;", l += '">', l += "<tbody>";
+    for (let d = 0; d < w.getModuleCount(); d += 1) {
+      l += "<tr>";
+      for (let h = 0; h < w.getModuleCount(); h += 1)
+        l += '<td style="', l += " border-width: 0px; border-style: none;", l += " border-collapse: collapse;", l += " padding: 0px; margin: 0px;", l += " width: " + c + "px;", l += " height: " + c + "px;", l += " background-color: ", l += w.isDark(d, h) ? "#000000" : "#ffffff", l += ";", l += '"/>';
+      l += "</tr>";
+    }
+    return l += "</tbody>", l += "</table>", l;
+  }, w.createSvgTag = function(c, p, l, d) {
+    let h = {};
+    typeof arguments[0] == "object" && (h = arguments[0], c = h.cellSize, p = h.margin, l = h.alt, d = h.title), c = c || 2, p = typeof p > "u" ? c * 4 : p, l = typeof l == "string" ? { text: l } : l || {}, l.text = l.text || null, l.id = l.text ? l.id || "qrcode-description" : null, d = typeof d == "string" ? { text: d } : d || {}, d.text = d.text || null, d.id = d.text ? d.id || "qrcode-title" : null;
+    const y = w.getModuleCount() * c + p * 2;
+    let m, Q, C, S, v = "", E;
+    for (E = "l" + c + ",0 0," + c + " -" + c + ",0 0,-" + c + "z ", v += '<svg version="1.1" xmlns="http://www.w3.org/2000/svg"', v += h.scalable ? "" : ' width="' + y + 'px" height="' + y + 'px"', v += ' viewBox="0 0 ' + y + " " + y + '" ', v += ' preserveAspectRatio="xMinYMin meet"', v += d.text || l.text ? ' role="img" aria-labelledby="' + U([d.id, l.id].join(" ").trim()) + '"' : "", v += ">", v += d.text ? '<title id="' + U(d.id) + '">' + U(d.text) + "</title>" : "", v += l.text ? '<description id="' + U(l.id) + '">' + U(l.text) + "</description>" : "", v += '<rect width="100%" height="100%" fill="white" cx="0" cy="0"/>', v += '<path d="', C = 0; C < w.getModuleCount(); C += 1)
+      for (S = C * c + p, m = 0; m < w.getModuleCount(); m += 1)
+        w.isDark(C, m) && (Q = m * c + p, v += "M" + Q + "," + S + E);
+    return v += '" stroke="transparent" fill="black"/>', v += "</svg>", v;
+  }, w.createDataURL = function(c, p) {
+    c = c || 2, p = typeof p > "u" ? c * 4 : p;
+    const l = w.getModuleCount() * c + p * 2, d = p, h = l - p;
+    return rt(l, l, function(y, m) {
+      if (d <= y && y < h && d <= m && m < h) {
+        const Q = Math.floor((y - d) / c), C = Math.floor((m - d) / c);
+        return w.isDark(C, Q) ? 0 : 1;
+      } else
+        return 1;
+    });
+  }, w.createImgTag = function(c, p, l) {
+    c = c || 2, p = typeof p > "u" ? c * 4 : p;
+    const d = w.getModuleCount() * c + p * 2;
+    let h = "";
+    return h += "<img", h += ' src="', h += w.createDataURL(c, p), h += '"', h += ' width="', h += d, h += '"', h += ' height="', h += d, h += '"', l && (h += ' alt="', h += U(l), h += '"'), h += "/>", h;
+  };
+  const U = function(c) {
+    let p = "";
+    for (let l = 0; l < c.length; l += 1) {
+      const d = c.charAt(l);
+      switch (d) {
+        case "<":
+          p += "&lt;";
+          break;
+        case ">":
+          p += "&gt;";
+          break;
+        case "&":
+          p += "&amp;";
+          break;
+        case '"':
+          p += "&quot;";
+          break;
+        default:
+          p += d;
+          break;
+      }
+    }
+    return p;
+  }, Ee = function(c) {
+    c = typeof c > "u" ? 2 : c;
+    const l = w.getModuleCount() * 1 + c * 2, d = c, h = l - c;
+    let y, m, Q, C, S;
+    const v = {
+      "██": "█",
+      "█ ": "▀",
+      " █": "▄",
+      "  ": " "
+    }, E = {
+      "██": "▀",
+      "█ ": "▀",
+      " █": " ",
+      "  ": " "
+    };
+    let R = "";
+    for (y = 0; y < l; y += 2) {
+      for (Q = Math.floor((y - d) / 1), C = Math.floor((y + 1 - d) / 1), m = 0; m < l; m += 1)
+        S = "█", d <= m && m < h && d <= y && y < h && w.isDark(Q, Math.floor((m - d) / 1)) && (S = " "), d <= m && m < h && d <= y + 1 && y + 1 < h && w.isDark(C, Math.floor((m - d) / 1)) ? S += " " : S += "█", R += c < 1 && y + 1 >= h ? E[S] : v[S];
+      R += `
+`;
+    }
+    return l % 2 && c > 0 ? R.substring(0, R.length - l - 1) + Array(l + 1).join("▀") : R.substring(0, R.length - 1);
+  };
+  return w.createASCII = function(c, p) {
+    if (c = c || 1, c < 2)
+      return Ee(p);
+    c -= 1, p = typeof p > "u" ? c * 2 : p;
+    const l = w.getModuleCount() * c + p * 2, d = p, h = l - p;
+    let y, m, Q, C;
+    const S = Array(c + 1).join("██"), v = Array(c + 1).join("  ");
+    let E = "", R = "";
+    for (y = 0; y < l; y += 1) {
+      for (Q = Math.floor((y - d) / c), R = "", m = 0; m < l; m += 1)
+        C = 1, d <= m && m < h && d <= y && y < h && w.isDark(Q, Math.floor((m - d) / c)) && (C = 0), R += C ? S : v;
+      for (Q = 0; Q < c; Q += 1)
+        E += R + `
+`;
+    }
+    return E.substring(0, E.length - 1);
+  }, w.renderTo2dContext = function(c, p) {
+    p = p || 2;
+    const l = w.getModuleCount();
+    for (let d = 0; d < l; d++)
+      for (let h = 0; h < l; h++)
+        c.fillStyle = w.isDark(d, h) ? "black" : "white", c.fillRect(h * p, d * p, p, p);
+  }, w;
+};
+q.stringToBytes = function(o) {
+  const e = [];
+  for (let t = 0; t < o.length; t += 1) {
+    const n = o.charCodeAt(t);
+    e.push(n & 255);
+  }
+  return e;
+};
+q.createStringToBytes = function(o, e) {
+  const t = (function() {
+    const r = tt(o), a = function() {
+      const u = r.read();
+      if (u == -1) throw "eof";
+      return u;
+    };
+    let s = 0;
+    const i = {};
+    for (; ; ) {
+      const u = r.read();
+      if (u == -1) break;
+      const b = a(), w = a(), g = a(), f = String.fromCharCode(u << 8 | b), x = w << 8 | g;
+      i[f] = x, s += 1;
+    }
+    if (s != e)
+      throw s + " != " + e;
+    return i;
+  })(), n = 63;
+  return function(r) {
+    const a = [];
+    for (let s = 0; s < r.length; s += 1) {
+      const i = r.charCodeAt(s);
+      if (i < 128)
+        a.push(i);
+      else {
+        const u = t[r.charAt(s)];
+        typeof u == "number" ? (u & 255) == u ? a.push(u) : (a.push(u >>> 8), a.push(u & 255)) : a.push(n);
+      }
+    }
+    return a;
+  };
+};
+const N = {
+  MODE_NUMBER: 1,
+  MODE_ALPHA_NUM: 2,
+  MODE_8BIT_BYTE: 4,
+  MODE_KANJI: 8
+}, V = {
+  L: 1,
+  M: 0,
+  Q: 3,
+  H: 2
+}, D = {
+  PATTERN000: 0,
+  PATTERN001: 1,
+  PATTERN010: 2,
+  PATTERN011: 3,
+  PATTERN100: 4,
+  PATTERN101: 5,
+  PATTERN110: 6,
+  PATTERN111: 7
+}, I = (function() {
+  const o = [
+    [],
+    [6, 18],
+    [6, 22],
+    [6, 26],
+    [6, 30],
+    [6, 34],
+    [6, 22, 38],
+    [6, 24, 42],
+    [6, 26, 46],
+    [6, 28, 50],
+    [6, 30, 54],
+    [6, 32, 58],
+    [6, 34, 62],
+    [6, 26, 46, 66],
+    [6, 26, 48, 70],
+    [6, 26, 50, 74],
+    [6, 30, 54, 78],
+    [6, 30, 56, 82],
+    [6, 30, 58, 86],
+    [6, 34, 62, 90],
+    [6, 28, 50, 72, 94],
+    [6, 26, 50, 74, 98],
+    [6, 30, 54, 78, 102],
+    [6, 28, 54, 80, 106],
+    [6, 32, 58, 84, 110],
+    [6, 30, 58, 86, 114],
+    [6, 34, 62, 90, 118],
+    [6, 26, 50, 74, 98, 122],
+    [6, 30, 54, 78, 102, 126],
+    [6, 26, 52, 78, 104, 130],
+    [6, 30, 56, 82, 108, 134],
+    [6, 34, 60, 86, 112, 138],
+    [6, 30, 58, 86, 114, 142],
+    [6, 34, 62, 90, 118, 146],
+    [6, 30, 54, 78, 102, 126, 150],
+    [6, 24, 50, 76, 102, 128, 154],
+    [6, 28, 54, 80, 106, 132, 158],
+    [6, 32, 58, 84, 110, 136, 162],
+    [6, 26, 54, 82, 110, 138, 166],
+    [6, 30, 58, 86, 114, 142, 170]
+  ], e = 1335, t = 7973, n = 21522, r = {}, a = function(s) {
+    let i = 0;
+    for (; s != 0; )
+      i += 1, s >>>= 1;
+    return i;
+  };
+  return r.getBCHTypeInfo = function(s) {
+    let i = s << 10;
+    for (; a(i) - a(e) >= 0; )
+      i ^= e << a(i) - a(e);
+    return (s << 10 | i) ^ n;
+  }, r.getBCHTypeNumber = function(s) {
+    let i = s << 12;
+    for (; a(i) - a(t) >= 0; )
+      i ^= t << a(i) - a(t);
+    return s << 12 | i;
+  }, r.getPatternPosition = function(s) {
+    return o[s - 1];
+  }, r.getMaskFunction = function(s) {
+    switch (s) {
+      case D.PATTERN000:
+        return function(i, u) {
+          return (i + u) % 2 == 0;
+        };
+      case D.PATTERN001:
+        return function(i, u) {
+          return i % 2 == 0;
+        };
+      case D.PATTERN010:
+        return function(i, u) {
+          return u % 3 == 0;
+        };
+      case D.PATTERN011:
+        return function(i, u) {
+          return (i + u) % 3 == 0;
+        };
+      case D.PATTERN100:
+        return function(i, u) {
+          return (Math.floor(i / 2) + Math.floor(u / 3)) % 2 == 0;
+        };
+      case D.PATTERN101:
+        return function(i, u) {
+          return i * u % 2 + i * u % 3 == 0;
+        };
+      case D.PATTERN110:
+        return function(i, u) {
+          return (i * u % 2 + i * u % 3) % 2 == 0;
+        };
+      case D.PATTERN111:
+        return function(i, u) {
+          return (i * u % 3 + (i + u) % 2) % 2 == 0;
+        };
+      default:
+        throw "bad maskPattern:" + s;
+    }
+  }, r.getErrorCorrectPolynomial = function(s) {
+    let i = H([1], 0);
+    for (let u = 0; u < s; u += 1)
+      i = i.multiply(H([1, O.gexp(u)], 0));
+    return i;
+  }, r.getLengthInBits = function(s, i) {
+    if (1 <= i && i < 10)
+      switch (s) {
+        case N.MODE_NUMBER:
+          return 10;
+        case N.MODE_ALPHA_NUM:
+          return 9;
+        case N.MODE_8BIT_BYTE:
+          return 8;
+        case N.MODE_KANJI:
+          return 8;
+        default:
+          throw "mode:" + s;
+      }
+    else if (i < 27)
+      switch (s) {
+        case N.MODE_NUMBER:
+          return 12;
+        case N.MODE_ALPHA_NUM:
+          return 11;
+        case N.MODE_8BIT_BYTE:
+          return 16;
+        case N.MODE_KANJI:
+          return 10;
+        default:
+          throw "mode:" + s;
+      }
+    else if (i < 41)
+      switch (s) {
+        case N.MODE_NUMBER:
+          return 14;
+        case N.MODE_ALPHA_NUM:
+          return 13;
+        case N.MODE_8BIT_BYTE:
+          return 16;
+        case N.MODE_KANJI:
+          return 12;
+        default:
+          throw "mode:" + s;
+      }
+    else
+      throw "type:" + i;
+  }, r.getLostPoint = function(s) {
+    const i = s.getModuleCount();
+    let u = 0;
+    for (let g = 0; g < i; g += 1)
+      for (let f = 0; f < i; f += 1) {
+        let x = 0;
+        const B = s.isDark(g, f);
+        for (let L = -1; L <= 1; L += 1)
+          if (!(g + L < 0 || i <= g + L))
+            for (let P = -1; P <= 1; P += 1)
+              f + P < 0 || i <= f + P || L == 0 && P == 0 || B == s.isDark(g + L, f + P) && (x += 1);
+        x > 5 && (u += 3 + x - 5);
+      }
+    for (let g = 0; g < i - 1; g += 1)
+      for (let f = 0; f < i - 1; f += 1) {
+        let x = 0;
+        s.isDark(g, f) && (x += 1), s.isDark(g + 1, f) && (x += 1), s.isDark(g, f + 1) && (x += 1), s.isDark(g + 1, f + 1) && (x += 1), (x == 0 || x == 4) && (u += 3);
+      }
+    for (let g = 0; g < i; g += 1)
+      for (let f = 0; f < i - 6; f += 1)
+        s.isDark(g, f) && !s.isDark(g, f + 1) && s.isDark(g, f + 2) && s.isDark(g, f + 3) && s.isDark(g, f + 4) && !s.isDark(g, f + 5) && s.isDark(g, f + 6) && (u += 40);
+    for (let g = 0; g < i; g += 1)
+      for (let f = 0; f < i - 6; f += 1)
+        s.isDark(f, g) && !s.isDark(f + 1, g) && s.isDark(f + 2, g) && s.isDark(f + 3, g) && s.isDark(f + 4, g) && !s.isDark(f + 5, g) && s.isDark(f + 6, g) && (u += 40);
+    let b = 0;
+    for (let g = 0; g < i; g += 1)
+      for (let f = 0; f < i; f += 1)
+        s.isDark(f, g) && (b += 1);
+    const w = Math.abs(100 * b / i / i - 50) / 5;
+    return u += w * 10, u;
+  }, r;
+})(), O = (function() {
+  const o = new Array(256), e = new Array(256);
+  for (let n = 0; n < 8; n += 1)
+    o[n] = 1 << n;
+  for (let n = 8; n < 256; n += 1)
+    o[n] = o[n - 4] ^ o[n - 5] ^ o[n - 6] ^ o[n - 8];
+  for (let n = 0; n < 255; n += 1)
+    e[o[n]] = n;
+  const t = {};
+  return t.glog = function(n) {
+    if (n < 1)
+      throw "glog(" + n + ")";
+    return e[n];
+  }, t.gexp = function(n) {
+    for (; n < 0; )
+      n += 255;
+    for (; n >= 256; )
+      n -= 255;
+    return o[n];
+  }, t;
+})(), H = function(o, e) {
+  if (typeof o.length > "u")
+    throw o.length + "/" + e;
+  const t = (function() {
+    let r = 0;
+    for (; r < o.length && o[r] == 0; )
+      r += 1;
+    const a = new Array(o.length - r + e);
+    for (let s = 0; s < o.length - r; s += 1)
+      a[s] = o[s + r];
+    return a;
+  })(), n = {};
+  return n.getAt = function(r) {
+    return t[r];
+  }, n.getLength = function() {
+    return t.length;
+  }, n.multiply = function(r) {
+    const a = new Array(n.getLength() + r.getLength() - 1);
+    for (let s = 0; s < n.getLength(); s += 1)
+      for (let i = 0; i < r.getLength(); i += 1)
+        a[s + i] ^= O.gexp(O.glog(n.getAt(s)) + O.glog(r.getAt(i)));
+    return H(a, 0);
+  }, n.mod = function(r) {
+    if (n.getLength() - r.getLength() < 0)
+      return n;
+    const a = O.glog(n.getAt(0)) - O.glog(r.getAt(0)), s = new Array(n.getLength());
+    for (let i = 0; i < n.getLength(); i += 1)
+      s[i] = n.getAt(i);
+    for (let i = 0; i < r.getLength(); i += 1)
+      s[i] ^= O.gexp(O.glog(r.getAt(i)) + a);
+    return H(s, 0).mod(r);
+  }, n;
+}, he = (function() {
+  const o = [
+    // L
+    // M
+    // Q
+    // H
+    // 1
+    [1, 26, 19],
+    [1, 26, 16],
+    [1, 26, 13],
+    [1, 26, 9],
+    // 2
+    [1, 44, 34],
+    [1, 44, 28],
+    [1, 44, 22],
+    [1, 44, 16],
+    // 3
+    [1, 70, 55],
+    [1, 70, 44],
+    [2, 35, 17],
+    [2, 35, 13],
+    // 4
+    [1, 100, 80],
+    [2, 50, 32],
+    [2, 50, 24],
+    [4, 25, 9],
+    // 5
+    [1, 134, 108],
+    [2, 67, 43],
+    [2, 33, 15, 2, 34, 16],
+    [2, 33, 11, 2, 34, 12],
+    // 6
+    [2, 86, 68],
+    [4, 43, 27],
+    [4, 43, 19],
+    [4, 43, 15],
+    // 7
+    [2, 98, 78],
+    [4, 49, 31],
+    [2, 32, 14, 4, 33, 15],
+    [4, 39, 13, 1, 40, 14],
+    // 8
+    [2, 121, 97],
+    [2, 60, 38, 2, 61, 39],
+    [4, 40, 18, 2, 41, 19],
+    [4, 40, 14, 2, 41, 15],
+    // 9
+    [2, 146, 116],
+    [3, 58, 36, 2, 59, 37],
+    [4, 36, 16, 4, 37, 17],
+    [4, 36, 12, 4, 37, 13],
+    // 10
+    [2, 86, 68, 2, 87, 69],
+    [4, 69, 43, 1, 70, 44],
+    [6, 43, 19, 2, 44, 20],
+    [6, 43, 15, 2, 44, 16],
+    // 11
+    [4, 101, 81],
+    [1, 80, 50, 4, 81, 51],
+    [4, 50, 22, 4, 51, 23],
+    [3, 36, 12, 8, 37, 13],
+    // 12
+    [2, 116, 92, 2, 117, 93],
+    [6, 58, 36, 2, 59, 37],
+    [4, 46, 20, 6, 47, 21],
+    [7, 42, 14, 4, 43, 15],
+    // 13
+    [4, 133, 107],
+    [8, 59, 37, 1, 60, 38],
+    [8, 44, 20, 4, 45, 21],
+    [12, 33, 11, 4, 34, 12],
+    // 14
+    [3, 145, 115, 1, 146, 116],
+    [4, 64, 40, 5, 65, 41],
+    [11, 36, 16, 5, 37, 17],
+    [11, 36, 12, 5, 37, 13],
+    // 15
+    [5, 109, 87, 1, 110, 88],
+    [5, 65, 41, 5, 66, 42],
+    [5, 54, 24, 7, 55, 25],
+    [11, 36, 12, 7, 37, 13],
+    // 16
+    [5, 122, 98, 1, 123, 99],
+    [7, 73, 45, 3, 74, 46],
+    [15, 43, 19, 2, 44, 20],
+    [3, 45, 15, 13, 46, 16],
+    // 17
+    [1, 135, 107, 5, 136, 108],
+    [10, 74, 46, 1, 75, 47],
+    [1, 50, 22, 15, 51, 23],
+    [2, 42, 14, 17, 43, 15],
+    // 18
+    [5, 150, 120, 1, 151, 121],
+    [9, 69, 43, 4, 70, 44],
+    [17, 50, 22, 1, 51, 23],
+    [2, 42, 14, 19, 43, 15],
+    // 19
+    [3, 141, 113, 4, 142, 114],
+    [3, 70, 44, 11, 71, 45],
+    [17, 47, 21, 4, 48, 22],
+    [9, 39, 13, 16, 40, 14],
+    // 20
+    [3, 135, 107, 5, 136, 108],
+    [3, 67, 41, 13, 68, 42],
+    [15, 54, 24, 5, 55, 25],
+    [15, 43, 15, 10, 44, 16],
+    // 21
+    [4, 144, 116, 4, 145, 117],
+    [17, 68, 42],
+    [17, 50, 22, 6, 51, 23],
+    [19, 46, 16, 6, 47, 17],
+    // 22
+    [2, 139, 111, 7, 140, 112],
+    [17, 74, 46],
+    [7, 54, 24, 16, 55, 25],
+    [34, 37, 13],
+    // 23
+    [4, 151, 121, 5, 152, 122],
+    [4, 75, 47, 14, 76, 48],
+    [11, 54, 24, 14, 55, 25],
+    [16, 45, 15, 14, 46, 16],
+    // 24
+    [6, 147, 117, 4, 148, 118],
+    [6, 73, 45, 14, 74, 46],
+    [11, 54, 24, 16, 55, 25],
+    [30, 46, 16, 2, 47, 17],
+    // 25
+    [8, 132, 106, 4, 133, 107],
+    [8, 75, 47, 13, 76, 48],
+    [7, 54, 24, 22, 55, 25],
+    [22, 45, 15, 13, 46, 16],
+    // 26
+    [10, 142, 114, 2, 143, 115],
+    [19, 74, 46, 4, 75, 47],
+    [28, 50, 22, 6, 51, 23],
+    [33, 46, 16, 4, 47, 17],
+    // 27
+    [8, 152, 122, 4, 153, 123],
+    [22, 73, 45, 3, 74, 46],
+    [8, 53, 23, 26, 54, 24],
+    [12, 45, 15, 28, 46, 16],
+    // 28
+    [3, 147, 117, 10, 148, 118],
+    [3, 73, 45, 23, 74, 46],
+    [4, 54, 24, 31, 55, 25],
+    [11, 45, 15, 31, 46, 16],
+    // 29
+    [7, 146, 116, 7, 147, 117],
+    [21, 73, 45, 7, 74, 46],
+    [1, 53, 23, 37, 54, 24],
+    [19, 45, 15, 26, 46, 16],
+    // 30
+    [5, 145, 115, 10, 146, 116],
+    [19, 75, 47, 10, 76, 48],
+    [15, 54, 24, 25, 55, 25],
+    [23, 45, 15, 25, 46, 16],
+    // 31
+    [13, 145, 115, 3, 146, 116],
+    [2, 74, 46, 29, 75, 47],
+    [42, 54, 24, 1, 55, 25],
+    [23, 45, 15, 28, 46, 16],
+    // 32
+    [17, 145, 115],
+    [10, 74, 46, 23, 75, 47],
+    [10, 54, 24, 35, 55, 25],
+    [19, 45, 15, 35, 46, 16],
+    // 33
+    [17, 145, 115, 1, 146, 116],
+    [14, 74, 46, 21, 75, 47],
+    [29, 54, 24, 19, 55, 25],
+    [11, 45, 15, 46, 46, 16],
+    // 34
+    [13, 145, 115, 6, 146, 116],
+    [14, 74, 46, 23, 75, 47],
+    [44, 54, 24, 7, 55, 25],
+    [59, 46, 16, 1, 47, 17],
+    // 35
+    [12, 151, 121, 7, 152, 122],
+    [12, 75, 47, 26, 76, 48],
+    [39, 54, 24, 14, 55, 25],
+    [22, 45, 15, 41, 46, 16],
+    // 36
+    [6, 151, 121, 14, 152, 122],
+    [6, 75, 47, 34, 76, 48],
+    [46, 54, 24, 10, 55, 25],
+    [2, 45, 15, 64, 46, 16],
+    // 37
+    [17, 152, 122, 4, 153, 123],
+    [29, 74, 46, 14, 75, 47],
+    [49, 54, 24, 10, 55, 25],
+    [24, 45, 15, 46, 46, 16],
+    // 38
+    [4, 152, 122, 18, 153, 123],
+    [13, 74, 46, 32, 75, 47],
+    [48, 54, 24, 14, 55, 25],
+    [42, 45, 15, 32, 46, 16],
+    // 39
+    [20, 147, 117, 4, 148, 118],
+    [40, 75, 47, 7, 76, 48],
+    [43, 54, 24, 22, 55, 25],
+    [10, 45, 15, 67, 46, 16],
+    // 40
+    [19, 148, 118, 6, 149, 119],
+    [18, 75, 47, 31, 76, 48],
+    [34, 54, 24, 34, 55, 25],
+    [20, 45, 15, 61, 46, 16]
+  ], e = function(r, a) {
+    const s = {};
+    return s.totalCount = r, s.dataCount = a, s;
+  }, t = {}, n = function(r, a) {
+    switch (a) {
+      case V.L:
+        return o[(r - 1) * 4 + 0];
+      case V.M:
+        return o[(r - 1) * 4 + 1];
+      case V.Q:
+        return o[(r - 1) * 4 + 2];
+      case V.H:
+        return o[(r - 1) * 4 + 3];
+      default:
+        return;
+    }
+  };
+  return t.getRSBlocks = function(r, a) {
+    const s = n(r, a);
+    if (typeof s > "u")
+      throw "bad rs block @ typeNumber:" + r + "/errorCorrectionLevel:" + a;
+    const i = s.length / 3, u = [];
+    for (let b = 0; b < i; b += 1) {
+      const w = s[b * 3 + 0], g = s[b * 3 + 1], f = s[b * 3 + 2];
+      for (let x = 0; x < w; x += 1)
+        u.push(e(g, f));
+    }
+    return u;
+  }, t;
+})(), de = function() {
+  const o = [];
+  let e = 0;
+  const t = {};
+  return t.getBuffer = function() {
+    return o;
+  }, t.getAt = function(n) {
+    const r = Math.floor(n / 8);
+    return (o[r] >>> 7 - n % 8 & 1) == 1;
+  }, t.put = function(n, r) {
+    for (let a = 0; a < r; a += 1)
+      t.putBit((n >>> r - a - 1 & 1) == 1);
+  }, t.getLengthInBits = function() {
+    return e;
+  }, t.putBit = function(n) {
+    const r = Math.floor(e / 8);
+    o.length <= r && o.push(0), n && (o[r] |= 128 >>> e % 8), e += 1;
+  }, t;
+}, Ze = function(o) {
+  const e = N.MODE_NUMBER, t = o, n = {};
+  n.getMode = function() {
+    return e;
+  }, n.getLength = function(s) {
+    return t.length;
+  }, n.write = function(s) {
+    const i = t;
+    let u = 0;
+    for (; u + 2 < i.length; )
+      s.put(r(i.substring(u, u + 3)), 10), u += 3;
+    u < i.length && (i.length - u == 1 ? s.put(r(i.substring(u, u + 1)), 4) : i.length - u == 2 && s.put(r(i.substring(u, u + 2)), 7));
+  };
+  const r = function(s) {
+    let i = 0;
+    for (let u = 0; u < s.length; u += 1)
+      i = i * 10 + a(s.charAt(u));
+    return i;
+  }, a = function(s) {
+    if ("0" <= s && s <= "9")
+      return s.charCodeAt(0) - 48;
+    throw "illegal char :" + s;
+  };
+  return n;
+}, Je = function(o) {
+  const e = N.MODE_ALPHA_NUM, t = o, n = {};
+  n.getMode = function() {
+    return e;
+  }, n.getLength = function(a) {
+    return t.length;
+  }, n.write = function(a) {
+    const s = t;
+    let i = 0;
+    for (; i + 1 < s.length; )
+      a.put(
+        r(s.charAt(i)) * 45 + r(s.charAt(i + 1)),
+        11
+      ), i += 2;
+    i < s.length && a.put(r(s.charAt(i)), 6);
+  };
+  const r = function(a) {
+    if ("0" <= a && a <= "9")
+      return a.charCodeAt(0) - 48;
+    if ("A" <= a && a <= "Z")
+      return a.charCodeAt(0) - 65 + 10;
+    switch (a) {
+      case " ":
+        return 36;
+      case "$":
+        return 37;
+      case "%":
+        return 38;
+      case "*":
+        return 39;
+      case "+":
+        return 40;
+      case "-":
+        return 41;
+      case ".":
+        return 42;
+      case "/":
+        return 43;
+      case ":":
+        return 44;
+      default:
+        throw "illegal char :" + a;
+    }
+  };
+  return n;
+}, ze = function(o) {
+  const e = N.MODE_8BIT_BYTE, t = q.stringToBytes(o), n = {};
+  return n.getMode = function() {
+    return e;
+  }, n.getLength = function(r) {
+    return t.length;
+  }, n.write = function(r) {
+    for (let a = 0; a < t.length; a += 1)
+      r.put(t[a], 8);
+  }, n;
+}, Xe = function(o) {
+  const e = N.MODE_KANJI, t = q.stringToBytes;
+  (function(a, s) {
+    const i = t(a);
+    if (i.length != 2 || (i[0] << 8 | i[1]) != s)
+      throw "sjis not supported.";
+  })("友", 38726);
+  const n = t(o), r = {};
+  return r.getMode = function() {
+    return e;
+  }, r.getLength = function(a) {
+    return ~~(n.length / 2);
+  }, r.write = function(a) {
+    const s = n;
+    let i = 0;
+    for (; i + 1 < s.length; ) {
+      let u = (255 & s[i]) << 8 | 255 & s[i + 1];
+      if (33088 <= u && u <= 40956)
+        u -= 33088;
+      else if (57408 <= u && u <= 60351)
+        u -= 49472;
+      else
+        throw "illegal char at " + (i + 1) + "/" + u;
+      u = (u >>> 8 & 255) * 192 + (u & 255), a.put(u, 13), i += 2;
+    }
+    if (i < s.length)
+      throw "illegal char at " + (i + 1);
+  }, r;
+}, ke = function() {
+  const o = [], e = {};
+  return e.writeByte = function(t) {
+    o.push(t & 255);
+  }, e.writeShort = function(t) {
+    e.writeByte(t), e.writeByte(t >>> 8);
+  }, e.writeBytes = function(t, n, r) {
+    n = n || 0, r = r || t.length;
+    for (let a = 0; a < r; a += 1)
+      e.writeByte(t[a + n]);
+  }, e.writeString = function(t) {
+    for (let n = 0; n < t.length; n += 1)
+      e.writeByte(t.charCodeAt(n));
+  }, e.toByteArray = function() {
+    return o;
+  }, e.toString = function() {
+    let t = "";
+    t += "[";
+    for (let n = 0; n < o.length; n += 1)
+      n > 0 && (t += ","), t += o[n];
+    return t += "]", t;
+  }, e;
+}, et = function() {
+  let o = 0, e = 0, t = 0, n = "";
+  const r = {}, a = function(i) {
+    n += String.fromCharCode(s(i & 63));
+  }, s = function(i) {
+    if (i < 0)
+      throw "n:" + i;
+    if (i < 26)
+      return 65 + i;
+    if (i < 52)
+      return 97 + (i - 26);
+    if (i < 62)
+      return 48 + (i - 52);
+    if (i == 62)
+      return 43;
+    if (i == 63)
+      return 47;
+    throw "n:" + i;
+  };
+  return r.writeByte = function(i) {
+    for (o = o << 8 | i & 255, e += 8, t += 1; e >= 6; )
+      a(o >>> e - 6), e -= 6;
+  }, r.flush = function() {
+    if (e > 0 && (a(o << 6 - e), o = 0, e = 0), t % 3 != 0) {
+      const i = 3 - t % 3;
+      for (let u = 0; u < i; u += 1)
+        n += "=";
+    }
+  }, r.toString = function() {
+    return n;
+  }, r;
+}, tt = function(o) {
+  const e = o;
+  let t = 0, n = 0, r = 0;
+  const a = {};
+  a.read = function() {
+    for (; r < 8; ) {
+      if (t >= e.length) {
+        if (r == 0)
+          return -1;
+        throw "unexpected end of file./" + r;
+      }
+      const u = e.charAt(t);
+      if (t += 1, u == "=")
+        return r = 0, -1;
+      if (u.match(/^\s$/))
+        continue;
+      n = n << 6 | s(u.charCodeAt(0)), r += 6;
+    }
+    const i = n >>> r - 8 & 255;
+    return r -= 8, i;
+  };
+  const s = function(i) {
+    if (65 <= i && i <= 90)
+      return i - 65;
+    if (97 <= i && i <= 122)
+      return i - 97 + 26;
+    if (48 <= i && i <= 57)
+      return i - 48 + 52;
+    if (i == 43)
+      return 62;
+    if (i == 47)
+      return 63;
+    throw "c:" + i;
+  };
+  return a;
+}, nt = function(o, e) {
+  const t = o, n = e, r = new Array(o * e), a = {};
+  a.setPixel = function(b, w, g) {
+    r[w * t + b] = g;
+  }, a.write = function(b) {
+    b.writeString("GIF87a"), b.writeShort(t), b.writeShort(n), b.writeByte(128), b.writeByte(0), b.writeByte(0), b.writeByte(0), b.writeByte(0), b.writeByte(0), b.writeByte(255), b.writeByte(255), b.writeByte(255), b.writeString(","), b.writeShort(0), b.writeShort(0), b.writeShort(t), b.writeShort(n), b.writeByte(0);
+    const w = 2, g = i(w);
+    b.writeByte(w);
+    let f = 0;
+    for (; g.length - f > 255; )
+      b.writeByte(255), b.writeBytes(g, f, 255), f += 255;
+    b.writeByte(g.length - f), b.writeBytes(g, f, g.length - f), b.writeByte(0), b.writeString(";");
+  };
+  const s = function(b) {
+    const w = b;
+    let g = 0, f = 0;
+    const x = {};
+    return x.write = function(B, L) {
+      if (B >>> L)
+        throw "length over";
+      for (; g + L >= 8; )
+        w.writeByte(255 & (B << g | f)), L -= 8 - g, B >>>= 8 - g, f = 0, g = 0;
+      f = B << g | f, g = g + L;
+    }, x.flush = function() {
+      g > 0 && w.writeByte(f);
+    }, x;
+  }, i = function(b) {
+    const w = 1 << b, g = (1 << b) + 1;
+    let f = b + 1;
+    const x = u();
+    for (let $ = 0; $ < w; $ += 1)
+      x.add(String.fromCharCode($));
+    x.add(String.fromCharCode(w)), x.add(String.fromCharCode(g));
+    const B = ke(), L = s(B);
+    L.write(w, f);
+    let P = 0, M = String.fromCharCode(r[P]);
+    for (P += 1; P < r.length; ) {
+      const $ = String.fromCharCode(r[P]);
+      P += 1, x.contains(M + $) ? M = M + $ : (L.write(x.indexOf(M), f), x.size() < 4095 && (x.size() == 1 << f && (f += 1), x.add(M + $)), M = $);
+    }
+    return L.write(x.indexOf(M), f), L.write(g, f), L.flush(), B.toByteArray();
+  }, u = function() {
+    const b = {};
+    let w = 0;
+    const g = {};
+    return g.add = function(f) {
+      if (g.contains(f))
+        throw "dup key:" + f;
+      b[f] = w, w += 1;
+    }, g.size = function() {
+      return w;
+    }, g.indexOf = function(f) {
+      return b[f];
+    }, g.contains = function(f) {
+      return typeof b[f] < "u";
+    }, g;
+  };
+  return a;
+}, rt = function(o, e, t) {
+  const n = nt(o, e);
+  for (let i = 0; i < e; i += 1)
+    for (let u = 0; u < o; u += 1)
+      n.setPixel(u, i, t(u, i));
+  const r = ke();
+  n.write(r);
+  const a = et(), s = r.toByteArray();
+  for (let i = 0; i < s.length; i += 1)
+    a.writeByte(s[i]);
+  return a.flush(), "data:image/gif;base64," + a;
+};
+q.stringToBytes;
+const A = 4, it = 0.42, ne = "#14101f", st = "#ffffff";
+function ot(o, e, t) {
+  const n = (a) => a < 7, r = (a) => a >= t - 7;
+  return n(o) && n(e) || n(o) && r(e) || r(o) && n(e);
+}
+function ee(o, e) {
+  return `<rect x="${o + 0.5}" y="${e + 0.5}" width="6" height="6" rx="2.1" fill="none" stroke="${ne}" stroke-width="1"/><rect x="${o + 2}" y="${e + 2}" width="3" height="3" rx="1.1" fill="${ne}"/>`;
+}
+function at(o, e = "QR code") {
+  const t = q(0, "M");
+  t.addData(o), t.make();
+  const n = t.getModuleCount(), r = n + A * 2, a = [];
+  a.push(`<rect x="0" y="0" width="${r}" height="${r}" rx="3" fill="${st}"/>`), a.push(ee(A, A)), a.push(ee(A + n - 7, A)), a.push(ee(A, A + n - 7));
+  for (let s = 0; s < n; s++)
+    for (let i = 0; i < n; i++) {
+      if (ot(s, i, n) || !t.isDark(s, i)) continue;
+      const u = A + i + 0.5, b = A + s + 0.5;
+      a.push(`<circle cx="${u}" cy="${b}" r="${it}" fill="${ne}"/>`);
+    }
+  return `<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 ${r} ${r}" role="img" aria-label="${e}" shape-rendering="geometricPrecision">${a.join("")}</svg>`;
+}
+let Y = null;
+function lt(o, e) {
+  Y = { owner: o, info: e };
+}
+function te(o) {
+  Y?.owner === o && (Y = null);
+}
+function pe() {
+  return Y ? { ...Y.info } : null;
+}
+const xe = we("bitlogin:passkey-credential:v1"), ct = we("bitlogin:passkey-derive:v1"), ut = "bitlogin passkey login-name v1", ht = "bitlogin passkey password v1";
+function re(o) {
+  return Uint8Array.from(o);
+}
+function dt(o) {
+  if (o.length !== 32)
+    throw new Error(`Passkey PRF output must be 32 bytes, got ${o.length}.`);
+  const e = Pe(ct, o), t = `pk-${me(ae(e, ut, 6))}`, n = Re(ae(e, ht, 32));
+  return { loginName: t, password: n };
+}
+function pt(o = window) {
+  return typeof o.PublicKeyCredential == "function";
+}
+function fe(o, e) {
+  return {
+    publicKey: {
+      // The challenge protects sign-count/liveness in server-verified
+      // WebAuthn; here the PRF OUTPUT is the secret and the "verification"
+      // is whether the derived credential opens the capsule. Random anyway.
+      challenge: re(z(32)),
+      ...e ? { allowCredentials: [{ type: "public-key", id: e }] } : {},
+      userVerification: "required",
+      extensions: { prf: { eval: { first: xe } } }
+    }
+  };
+}
+function ft(o, e) {
+  const t = `${o} (${me(z(2))})`;
+  return {
+    publicKey: {
+      challenge: re(z(32)),
+      rp: { name: o },
+      user: {
+        // Opaque handle; the account identity is DERIVED from the PRF, not
+        // from this. Random so re-creates don't silently overwrite.
+        id: re(z(16)),
+        name: t,
+        displayName: t
+      },
+      pubKeyCredParams: [
+        { type: "public-key", alg: -7 },
+        // ES256
+        { type: "public-key", alg: -257 }
+        // RS256
+      ],
+      authenticatorSelection: {
+        residentKey: "required",
+        userVerification: "required"
+      },
+      extensions: { prf: { eval: { first: xe } } }
+    }
+  };
+}
+function ge(o) {
+  const t = o.getClientExtensionResults().prf?.results?.first;
+  if (!t) return null;
+  const n = t instanceof Uint8Array ? t : new Uint8Array(t);
+  return n.length === 32 ? n : null;
+}
+const j = {
+  extension: '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="3" y="4" width="18" height="16" rx="2"/><path d="M3 9h18"/><path d="M6.5 6.7h.01"/><path d="M9.3 6.7h.01"/></svg>',
+  remote: '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="3" y="3" width="7" height="7" rx="1"/><rect x="14" y="3" width="7" height="7" rx="1"/><rect x="3" y="14" width="7" height="7" rx="1"/><path d="M14 14h3v3"/><path d="M21 14v0.01"/><path d="M14 21h0.01"/><path d="M17.5 17.5L21 21"/></svg>',
+  importKey: '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><circle cx="8" cy="12" r="3.5"/><path d="M11.5 12H21"/><path d="M18 12v3.2"/><path d="M14.8 12v2.2"/></svg>',
+  recover: '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M2.5 5v5h5"/><path d="M4.2 14a8 8 0 1 0 1.9-8.3L2.5 10"/></svg>',
+  passkey: '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M12 3.5c-3 0-5.5 2.4-5.5 5.4v2.3c0 3.4-.7 5.3-1.6 6.8"/><path d="M12 7.2a2.9 2.9 0 0 0-2.9 2.9v2.1c0 2.6-.5 4.6-1.3 6.3"/><path d="M12 10.5v2.2c0 2.7-.4 4.9-1.1 6.8"/><path d="M15 9.6c.3.7.4 1.5.4 2.4 0 2.9-.3 5.3-.9 7.3"/><path d="M17.5 8.9c.6 3.4.4 7.1-.4 10.2"/></svg>'
+}, gt = '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M6 9l6 6 6-6"/></svg>', yt = '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M15 18l-6-6 6-6"/></svg>';
+class ie extends HTMLElement {
   root;
   worker;
   vaultRelayUrls = [];
@@ -508,6 +1977,9 @@ class I extends HTMLElement {
   screen = "welcome";
   busy = !1;
   errorMessage;
+  /** Welcome-screen disclosure for non-primary sign-in paths; survives
+   *  re-renders so an open menu doesn't snap shut on an error render. */
+  moreOptionsOpen = !1;
   loginName = "";
   generatedCredential = "";
   savedCheckbox = !1;
@@ -524,6 +1996,32 @@ class I extends HTMLElement {
   offlineExportFile = null;
   offlineExportFileNotice;
   session = null;
+  // ---- Alternative-method sessions (docs/login-methods.md §LM4, §LM5, §LM7) ----
+  // `pending*` state holds a candidate between "the signer answered" and the user
+  // confirming that npub is theirs; only `altSigner` routes the public API. Thin by
+  // design: no capsule, no vault, no persistence -- a reload simply signs the user
+  // out, and the signer is asked again next visit.
+  pendingExtensionSigner = null;
+  altSigner = null;
+  extensionPreviewNpub = "";
+  extensionPreviewPubkey = "";
+  // NIP-46 connect flow (§LM5). The QR/copyable nostrconnect URI, the signer's
+  // interactive-approval URL if one arrives mid-connect, and the confirmed-but-
+  // not-yet-adopted user identity.
+  bunkerConnectUri = "";
+  bunkerAuthUrl = "";
+  pendingBunker = null;
+  // ---- Passkey rail (docs/passkey-login.md) ----
+  // Zero registration, zero servers: a PRF-capable passkey deterministically
+  // derives this site's login name + password (a frozen contract, see
+  // passkey.ts), and the ordinary password flows do everything else.
+  // `pendingPasskey` holds the derived credential between "the ceremony
+  // succeeded" and the new user's fresh-vs-import choice. `passkeySession`
+  // marks the standing for dashboard labeling. There is deliberately NO
+  // deferred-phrase state: passkey registration runs the recovery ceremony
+  // before granting the session (see runPasskeyRegistration).
+  pendingPasskey = null;
+  passkeySession = !1;
   sessionWarnings = [];
   lastSignedEventJson = "";
   exportedNsec = "";
@@ -560,25 +2058,30 @@ class I extends HTMLElement {
   constructor() {
     super(), this.root = this.attachShadow({ mode: "open" });
     const e = new CSSStyleSheet();
-    e.replaceSync(R), this.root.adoptedStyleSheets = [e], this.worker = new S();
+    e.replaceSync(Ue), this.root.adoptedStyleSheets = [e], this.worker = new _e(), this.worker.onNotification = (t) => {
+      t.notify === "nip46-auth-url" && (this.bunkerAuthUrl = t.url, this.render());
+    };
   }
   connectedCallback() {
-    const e = E(this);
-    if (this.vaultRelayUrls = e.vaultRelayUrls ?? [], this.discoveryRelayUrls = e.discoveryRelayUrls ?? [], this.worker.configure({ vaultRelayUrls: this.vaultRelayUrls, discoveryRelayUrls: this.discoveryRelayUrls }).then(() => this.tryRestoreSession()), this.root.addEventListener("click", (t) => this.onClick(t)), this.root.addEventListener("submit", (t) => this.onSubmit(t)), this.root.addEventListener("change", (t) => void this.onFileChange(t)), this.render(), this.installedProvider = C(this.worker, () => this.vaultRelayUrls), !window.nostr)
+    const e = Oe(this);
+    if (this.vaultRelayUrls = e.vaultRelayUrls ?? [], this.discoveryRelayUrls = e.discoveryRelayUrls ?? [], this.worker.configure({ vaultRelayUrls: this.vaultRelayUrls, discoveryRelayUrls: this.discoveryRelayUrls }).then(() => this.tryRestoreSession()), this.root.addEventListener("click", (t) => this.onClick(t)), this.root.addEventListener("submit", (t) => this.onSubmit(t)), this.root.addEventListener("change", (t) => void this.onFileChange(t)), this.render(), this.installedProvider = De(this, () => this.vaultRelayUrls), !window.nostr)
       try {
         window.nostr = this.installedProvider;
       } catch {
       }
   }
   disconnectedCallback() {
-    this.successDismissTimer !== null && clearTimeout(this.successDismissTimer), this.releaseSigner(), this.worker.terminate();
+    this.successDismissTimer !== null && clearTimeout(this.successDismissTimer), te(this), this.releaseSigner(), this.worker.terminate();
   }
   // ---- Public API mirroring window.nostr, scoped to this element instance ----
+  // Routed through the active signer: the worker for BitLogin-account sessions (as
+  // always), the extension's provider for a NIP-07 session (§LM3). Hosts holding a
+  // reference to this element get the right backend either way.
   async getPublicKey() {
-    return (await this.worker.getPublicKey()).publicKey;
+    return this.altSigner ? this.altSigner.getPublicKey() : (await this.worker.getPublicKey()).publicKey;
   }
   async signEvent(e) {
-    return this.worker.signEvent(e);
+    return this.altSigner ? this.altSigner.signEvent(e) : this.worker.signEvent(e);
   }
   /**
    * Element-scoped NIP-44 encryption, matching getPublicKey/signEvent above. A host page
@@ -589,10 +2092,10 @@ class I extends HTMLElement {
    * racing other providers for that slot.
    */
   async nip44Encrypt(e, t) {
-    return (await this.worker.nip44Encrypt({ peerPublicKey: e, plaintext: t })).ciphertext;
+    return this.altSigner ? this.altSigner.nip44Encrypt(e, t) : (await this.worker.nip44Encrypt({ peerPublicKey: e, plaintext: t })).ciphertext;
   }
   async nip44Decrypt(e, t) {
-    return (await this.worker.nip44Decrypt({ peerPublicKey: e, payload: t })).plaintext;
+    return this.altSigner ? this.altSigner.nip44Decrypt(e, t) : (await this.worker.nip44Decrypt({ peerPublicKey: e, payload: t })).plaintext;
   }
   /**
    * Legacy relative to nip44Encrypt/nip44Decrypt above, but still what a real NIP-07
@@ -600,13 +2103,17 @@ class I extends HTMLElement {
    * (or their older DM code paths) that still expect NIP-04 rather than NIP-44.
    */
   async nip04Encrypt(e, t) {
-    return (await this.worker.nip04Encrypt({ peerPublicKey: e, plaintext: t })).ciphertext;
+    return this.altSigner ? this.altSigner.nip04Encrypt(e, t) : (await this.worker.nip04Encrypt({ peerPublicKey: e, plaintext: t })).ciphertext;
   }
   async nip04Decrypt(e, t) {
-    return (await this.worker.nip04Decrypt({ peerPublicKey: e, payload: t })).plaintext;
+    return this.altSigner ? this.altSigner.nip04Decrypt(e, t) : (await this.worker.nip04Decrypt({ peerPublicKey: e, payload: t })).plaintext;
   }
   async logout() {
-    await this.worker.logout(), this.session = null, this.releaseSigner(), this.dispatchEvent(new CustomEvent("bitlogin-logout")), this.goto("welcome");
+    if (this.altSigner) {
+      this.altSigner.method === "nip46" && this.worker.nip46Disconnect(), this.altSigner = null, this.session = null, this.passkeySession = !1, te(this), this.releaseSigner(), this.dispatchEvent(new CustomEvent("bitlogin-logout")), this.goto("welcome");
+      return;
+    }
+    await this.worker.logout(), this.session = null, this.passkeySession = !1, te(this), this.releaseSigner(), this.dispatchEvent(new CustomEvent("bitlogin-logout")), this.goto("welcome");
   }
   /**
    * Connection Vault request API (connection-vault.md §12, vault-ux.md §2-§4).
@@ -625,17 +2132,18 @@ class I extends HTMLElement {
    */
   async requestNwcConnection(e = {}) {
     if (this.vaultRequest) throw new Error("A wallet connection request is already in progress.");
-    const t = window.location.origin, s = e.appName?.trim() || window.location.hostname || "This app";
+    if (this.altSigner) return null;
+    const t = window.location.origin, n = e.appName?.trim() || window.location.hostname || "This app";
     return new Promise((r) => {
-      this.vaultRequest = { appName: s, reason: e.reason, origin: t, stage: "auth", resolve: r }, this.dispatchEvent(new CustomEvent("bitlogin-request-pending")), (async () => {
+      this.vaultRequest = { appName: n, reason: e.reason, origin: t, stage: "auth", resolve: r }, this.dispatchEvent(new CustomEvent("bitlogin-request-pending")), (async () => {
         try {
           if (!(await this.worker.getSessionStatus()).unlocked) {
             this.goto("login");
             return;
           }
           await this.continueVaultRequest();
-        } catch (i) {
-          this.fail(i);
+        } catch (a) {
+          this.fail(a);
         }
       })();
     });
@@ -665,13 +2173,13 @@ class I extends HTMLElement {
   async runOfferNwcConnection(e, t) {
     if (!(await this.worker.getSessionStatus().catch(() => ({ unlocked: !1 }))).unlocked || !(await this.worker.vaultStatus()).enabled) return "unavailable";
     if ((await this.worker.vaultOfferCheck({ uri: e })).duplicate) return "already-saved";
-    const o = t.appName?.trim() || window.location.hostname || "This app";
-    return new Promise((l) => {
+    const s = t.appName?.trim() || window.location.hostname || "This app";
+    return new Promise((i) => {
       this.vaultOffer = {
         uri: e,
-        appName: o,
-        label: t.label?.trim() || `${o} wallet`,
-        resolve: l
+        appName: s,
+        label: t.label?.trim() || `${s} wallet`,
+        resolve: i
       }, this.dispatchEvent(new CustomEvent("bitlogin-offer-pending")), this.goto("vault-offer");
     });
   }
@@ -710,8 +2218,8 @@ class I extends HTMLElement {
       return;
     }
     this.vaultUnsaved = !1;
-    const s = await this.worker.vaultFindForOrigin();
-    s.connection ? (this.vaultCandidate = s.connection, this.goto("vault-consent")) : this.goto("vault-import");
+    const n = await this.worker.vaultFindForOrigin();
+    n.connection ? (this.vaultCandidate = n.connection, this.goto("vault-consent")) : this.goto("vault-import");
   }
   async approveVaultCandidate() {
     const e = this.vaultCandidate;
@@ -730,7 +2238,7 @@ class I extends HTMLElement {
     if (e) {
       this.setBusy(!0);
       try {
-        const t = await B(e.appName);
+        const t = await qe(e.appName);
         if (t === null) {
           this.setBusy(!1);
           return;
@@ -753,20 +2261,20 @@ class I extends HTMLElement {
     }
   }
   async saveAndShareVaultUri(e, t) {
-    const s = this.vaultRequest;
-    if (!s) return;
+    const n = this.vaultRequest;
+    if (!n) return;
     if (this.vaultUnsaved) {
       this.setBusy(!1), this.finishVaultRequest(e);
       return;
     }
-    const r = t.trim() || `${s.appName} wallet`;
+    const r = t.trim() || `${n.appName} wallet`;
     await this.worker.vaultSaveNwc({ uri: e, label: r }), this.setBusy(!1), this.finishVaultRequest(e), this.flashSuccess(this.screen, "Wallet connected");
   }
   async loadVaultManage() {
     this.vaultConnections = null, this.vaultIntegrityWarnings = [], this.goto("vault-manage");
     try {
       const e = await this.worker.vaultList();
-      this.vaultConnections = e.connections, this.vaultIntegrityWarnings = T(e);
+      this.vaultConnections = e.connections, this.vaultIntegrityWarnings = je(e);
     } catch (e) {
       this.errorMessage = e instanceof Error ? e.message : String(e), this.vaultConnections = [];
     }
@@ -821,6 +2329,29 @@ class I extends HTMLElement {
    * relay-disagreement warnings -- so a user isn't left wondering why some other app still
    * seems to be using a different signer.
    */
+  /** Single dispatch point for bitlogin-login so every sign-in path reports the same
+   * detail shape: which method granted the session and what it can do (§LM3). The
+   * pre-existing `publicKey` field is unchanged for hosts written before `method`. */
+  dispatchLogin() {
+    const e = this.altSigner?.capabilities ?? {
+      nip44: !0,
+      nip04: !0,
+      getRelays: !0
+    };
+    this.session && lt(this, {
+      method: this.session.method,
+      publicKey: this.session.publicKey,
+      npub: this.session.npub
+    }), this.dispatchEvent(
+      new CustomEvent("bitlogin-login", {
+        detail: {
+          publicKey: this.session?.publicKey,
+          method: this.session?.method ?? "bitlogin",
+          capabilities: e
+        }
+      })
+    );
+  }
   noteSignerClaim(e) {
     e || (this.sessionWarnings = [
       ...this.sessionWarnings,
@@ -888,9 +2419,9 @@ class I extends HTMLElement {
    */
   async offerToSaveCredential(e, t) {
     try {
-      const s = window.PasswordCredential;
-      if (!s || !navigator.credentials?.store) return;
-      const r = new s({ id: e, password: t, name: e });
+      const n = window.PasswordCredential;
+      if (!n || !navigator.credentials?.store) return;
+      const r = new n({ id: e, password: t, name: e });
       await navigator.credentials.store(r);
     } catch {
     }
@@ -938,8 +2469,50 @@ class I extends HTMLElement {
         this.offlineExportFile = null, this.offlineExportFileNotice = void 0, this.goto("recover-phrase");
         return;
       case "goto-welcome":
-        this.pendingRollback = null, this.goto("welcome");
+        this.pendingRollback = null, this.pendingExtensionSigner = null, this.pendingPasskey = null, !this.altSigner && (this.bunkerConnectUri || this.pendingBunker) && this.worker.nip46Disconnect(), this.pendingBunker = null, this.bunkerConnectUri = "", this.bunkerAuthUrl = "", this.goto("welcome");
         return;
+      case "toggle-more":
+        this.moreOptionsOpen = !this.moreOptionsOpen, this.render();
+        return;
+      case "goto-passkey":
+        this.pendingPasskey = null, this.errorMessage = void 0, this.goto("passkey");
+        return;
+      case "passkey-auth":
+        return this.handlePasskeyAuth();
+      case "passkey-register":
+        return this.handlePasskeyRegisterCeremony();
+      case "passkey-new":
+        return this.importKey = "", this.importPreviewNpub = "", void this.runPasskeyRegistration();
+      case "passkey-import":
+        this.importKey = "", this.importPreviewNpub = "", this.goto("import-key");
+        return;
+      case "extension-signin":
+        return this.handleExtensionSignIn();
+      case "extension-continue":
+        this.handleExtensionConfirm();
+        return;
+      case "goto-bunker":
+        this.pendingBunker = null, this.bunkerConnectUri = "", this.bunkerAuthUrl = "", this.errorMessage = void 0, this.goto("bunker-connect"), this.startNostrconnect();
+        return;
+      case "bunker-continue":
+        this.handleBunkerConfirm();
+        return;
+      case "copy-bunker-uri": {
+        const r = t, a = r.textContent ?? "Copy", s = (i) => {
+          r.textContent = i, setTimeout(() => {
+            r.isConnected && (r.textContent = a);
+          }, 2e3);
+        };
+        if (!this.bunkerConnectUri || !navigator.clipboard?.writeText) {
+          s("Copy not available");
+          return;
+        }
+        navigator.clipboard.writeText(this.bunkerConnectUri).then(
+          () => s("Copied"),
+          () => s("Copy failed")
+        );
+        return;
+      }
       case "goto-dashboard":
         this.goto("dashboard");
         return;
@@ -950,27 +2523,27 @@ class I extends HTMLElement {
         this.goto("confirm-phrase");
         return;
       case "goto-change-password":
-        this.changePasswordNewCredential = d().secret, this.goto("change-password");
+        this.changePasswordNewCredential = G().secret, this.goto("change-password");
         return;
       case "goto-export":
         this.goto("export");
         return;
       case "regenerate-credential":
-        this.generatedCredential = d().secret, this.savedCheckbox = !1, this.render();
+        this.generatedCredential = G().secret, this.savedCheckbox = !1, this.render();
         return;
       case "copy-credential": {
-        const r = this.root.querySelector("#credential-box"), i = t, o = i.textContent ?? "Copy", l = (f) => {
-          i.textContent = f, setTimeout(() => {
-            i.isConnected && (i.textContent = o);
+        const r = this.root.querySelector("#credential-box"), a = t, s = a.textContent ?? "Copy", i = (u) => {
+          a.textContent = u, setTimeout(() => {
+            a.isConnected && (a.textContent = s);
           }, 2e3);
         };
         if (!r || !navigator.clipboard?.writeText) {
-          l("Copy not available — select the text manually");
+          i("Copy not available — select the text manually");
           return;
         }
         navigator.clipboard.writeText(r.textContent ?? "").then(
-          () => l("Copied"),
-          () => l("Copy failed — select the text manually")
+          () => i("Copied"),
+          () => i("Copy failed — select the text manually")
         );
         return;
       }
@@ -995,9 +2568,9 @@ class I extends HTMLElement {
   }
   async onSubmit(e) {
     if (e.preventDefault(), !e.isTrusted) return;
-    const s = e.target.dataset.form;
+    const n = e.target.dataset.form;
     try {
-      switch (s) {
+      switch (n) {
         case "import-key":
           return await this.handlePreviewImport();
         case "create-name":
@@ -1016,6 +2589,8 @@ class I extends HTMLElement {
           return await this.handleChangePasswordSubmit();
         case "vault-import":
           return await this.handleVaultImportSubmit();
+        case "bunker-connect":
+          return await this.handleBunkerSubmit();
         default:
           return;
       }
@@ -1031,16 +2606,16 @@ class I extends HTMLElement {
   async onFileChange(e) {
     const t = e.target;
     if (!(t instanceof HTMLInputElement) || t.name !== "offlineExportFile" || t.type !== "file") return;
-    const s = t.files?.[0];
-    if (!s) {
+    const n = t.files?.[0];
+    if (!n) {
       this.offlineExportFile = null, this.offlineExportFileNotice = void 0, this.render();
       return;
     }
     try {
-      const r = await s.text();
-      this.offlineExportFile = w(JSON.parse(r)), this.offlineExportFileNotice = `Loaded recovery export from ${new Date(this.offlineExportFile.created_at * 1e3).toLocaleString()}.`;
+      const r = await n.text();
+      this.offlineExportFile = Be(JSON.parse(r)), this.offlineExportFileNotice = `Loaded recovery export from ${new Date(this.offlineExportFile.created_at * 1e3).toLocaleString()}.`;
     } catch (r) {
-      this.offlineExportFile = null, this.offlineExportFileNotice = r instanceof Q || r instanceof SyntaxError ? `Couldn't read that file: ${r.message}` : `Couldn't read that file: ${String(r)}`;
+      this.offlineExportFile = null, this.offlineExportFileNotice = r instanceof $e || r instanceof SyntaxError ? `Couldn't read that file: ${r.message}` : `Couldn't read that file: ${String(r)}`;
     }
     this.render();
   }
@@ -1063,15 +2638,109 @@ class I extends HTMLElement {
       this.errorMessage = "Check your key before continuing.", this.render();
       return;
     }
+    if (this.pendingPasskey) {
+      this.runPasskeyRegistration();
+      return;
+    }
     this.loginName = "", this.goto("create-name");
   }
+  static PRF_UNSUPPORTED_MESSAGE = "This passkey (or this browser) doesn't support the extension BitLogin needs. Try a different browser or password manager, or use one of the other sign-in methods.";
+  /** Runs a WebAuthn ceremony and returns the derived credential, or null
+   *  after rendering the appropriate message (cancelled / PRF-unsupported). */
+  async runPasskeyCeremony(e) {
+    try {
+      const t = e === "get" ? await navigator.credentials.get(fe()) : await navigator.credentials.create(ft("BitLogin"));
+      if (!t) throw new Error("The passkey ceremony returned nothing.");
+      let n = ge(t);
+      if (!n && e === "create") {
+        const r = await navigator.credentials.get(
+          fe(void 0, t.rawId)
+        );
+        n = r ? ge(r) : null;
+      }
+      return n ? dt(n) : (this.busy = !1, this.errorMessage = ie.PRF_UNSUPPORTED_MESSAGE, this.render(), null);
+    } catch (t) {
+      return this.busy = !1, this.errorMessage = t instanceof Error && t.name === "NotAllowedError" ? "The passkey prompt was cancelled or timed out." : t instanceof Error ? t.message : String(t), this.render(), null;
+    }
+  }
+  /** "Use my passkey": sign in, or route a passkey with no account here into
+   *  first-time setup with the credential it derived. */
+  async handlePasskeyAuth() {
+    if (this.busy) return;
+    this.setBusy(!0);
+    const e = await this.runPasskeyCeremony("get");
+    if (e)
+      try {
+        const t = await this.worker.login({ loginName: e.loginName, password: e.password });
+        this.loginName = e.loginName, this.session = {
+          publicKey: t.everydayPublicKey,
+          npub: _(t.everydayPublicKey),
+          accountId: t.accountId,
+          method: "bitlogin"
+        }, this.sessionWarnings = [t.rollbackWarning, t.relayDisagreementWarning].filter((n) => !!n), this.busy = !1, this.passkeySession = !0, this.noteSignerClaim(this.claimSigner()), this.dispatchLogin(), this.flashSuccess("dashboard", "Signed in");
+      } catch (t) {
+        if (t instanceof Error && t.name === "AccountNotFoundError") {
+          this.pendingPasskey = e, this.busy = !1, this.goto("passkey-create");
+          return;
+        }
+        if (t instanceof Error && t.name === "RollbackDetectedError") {
+          this.pendingRollback = { kind: "login", loginName: e.loginName, password: e.password }, this.rollbackMessage = t.message, this.busy = !1, this.goto("rollback-confirm");
+          return;
+        }
+        this.fail(t);
+      }
+  }
+  /** "Create a new passkey": mint it, then set up (or rejoin) its account. */
+  async handlePasskeyRegisterCeremony() {
+    if (this.busy) return;
+    this.setBusy(!0);
+    const e = await this.runPasskeyCeremony("create");
+    e && (this.pendingPasskey = e, this.busy = !1, this.goto("passkey-create"));
+  }
+  /** Registers the account a passkey-derived credential unlocks (fresh
+   *  identity, or wrapping an imported key, §SF10). Tier B2 phrase handling:
+   *  ceremony deferred behind the dashboard card. */
+  async runPasskeyRegistration() {
+    const e = this.pendingPasskey;
+    if (e) {
+      this.setBusy(!0);
+      try {
+        const t = await this.worker.register({
+          loginName: e.loginName,
+          password: e.password,
+          importKey: this.importKey || void 0
+        });
+        this.importKey = "", this.importPreviewNpub = "", this.pendingPasskey = null, this.loginName = e.loginName, this.recoveryPhrase = t.recoveryPhrase;
+        const n = this.recoveryPhrase.split(" "), r = ye(n.length, 3);
+        this.confirmSlots = r.map((a) => ({ index: a, value: "" })), this.session = {
+          publicKey: t.everydayPublicKey,
+          npub: _(t.everydayPublicKey),
+          accountId: t.accountId,
+          method: "bitlogin"
+        }, this.sessionWarnings = [], this.worker.publishProfileAndRelayLists({
+          name: this.loginName,
+          generalRelays: this.vaultRelayUrls,
+          dmRelays: this.vaultRelayUrls
+        }), this.busy = !1, this.passkeySession = !0, this.goto("confirm-phrase");
+      } catch (t) {
+        if (t instanceof Error && t.name === "AccountAlreadyExistsError") {
+          this.pendingPasskey = null, this.busy = !1, this.handlePasskeySignInWith(e);
+          return;
+        }
+        this.fail(t);
+      }
+    }
+  }
+  async handlePasskeySignInWith(e) {
+    this.passkeySession = !0, await this.attemptLogin(e.loginName, e.password);
+  }
   handleCreateNameSubmit() {
     const e = this.field("loginName").trim().toLowerCase();
-    if (!p(e)) {
+    if (!le(e)) {
       this.errorMessage = "Login name must be 3-32 characters: a-z, 0-9, '.', '_', '-', and not start/end with punctuation.", this.render();
       return;
     }
-    this.loginName = e, this.generatedCredential = d().secret, this.savedCheckbox = !1, this.goto("create-credential");
+    this.loginName = e, this.generatedCredential = G().secret, this.savedCheckbox = !1, this.goto("create-credential");
   }
   async handleCreateCredentialSubmit() {
     this.savedCheckbox = this.root.querySelector("#saved-check")?.checked ?? !1;
@@ -1087,8 +2756,8 @@ class I extends HTMLElement {
       importKey: this.importKey || void 0
     });
     this.importKey = "", this.importPreviewNpub = "", this.recoveryPhrase = t.recoveryPhrase;
-    const s = this.recoveryPhrase.split(" "), r = M(s.length, 3);
-    this.confirmSlots = r.map((i) => ({ index: i, value: "" })), this.session = { publicKey: t.everydayPublicKey, npub: u(t.everydayPublicKey), accountId: t.accountId }, this.busy = !1, this.goto("confirm-phrase"), this.worker.publishProfileAndRelayLists({
+    const n = this.recoveryPhrase.split(" "), r = ye(n.length, 3);
+    this.confirmSlots = r.map((a) => ({ index: a, value: "" })), this.session = { publicKey: t.everydayPublicKey, npub: _(t.everydayPublicKey), accountId: t.accountId, method: "bitlogin" }, this.busy = !1, this.goto("confirm-phrase"), this.worker.publishProfileAndRelayLists({
       name: this.loginName,
       generalRelays: this.vaultRelayUrls,
       dmRelays: this.vaultRelayUrls
@@ -1101,11 +2770,92 @@ class I extends HTMLElement {
         this.errorMessage = `Word #${t.index + 1} doesn't match. Please check your saved phrase and try again.`, this.render();
         return;
       }
-    this.sessionWarnings = [], this.noteSignerClaim(this.claimSigner()), this.dispatchEvent(new CustomEvent("bitlogin-login", { detail: { publicKey: this.session?.publicKey } })), this.flashSuccess("dashboard", "Account created");
+    this.sessionWarnings = [], this.noteSignerClaim(this.claimSigner()), this.dispatchLogin(), this.flashSuccess("dashboard", "Account created");
   }
   async handleLoginSubmit() {
     const e = this.field("loginName").trim().toLowerCase(), t = this.field("password");
-    await this.attemptLogin(e, t);
+    this.passkeySession = !1, await this.attemptLogin(e, t);
+  }
+  /**
+   * "Use your Nostr extension instead" (§LM4) -- asks the detected extension for its
+   * public key, then shows it for the user to confirm before any session exists. The
+   * provider reference is snapshotted here so a later change of window.nostr occupant
+   * can never swap the backend mid-session.
+   */
+  async handleExtensionSignIn() {
+    if (this.busy) return;
+    const e = ue();
+    if (!e) {
+      this.errorMessage = "No Nostr signer extension was found in this browser.", this.render();
+      return;
+    }
+    this.setBusy(!0);
+    try {
+      const t = new Ye(e), n = await t.getPublicKey();
+      this.pendingExtensionSigner = t, this.extensionPreviewPubkey = n, this.extensionPreviewNpub = _(n), this.busy = !1, this.goto("extension-confirm");
+    } catch (t) {
+      this.pendingExtensionSigner = null, this.fail(t);
+    }
+  }
+  /** The user confirmed the npub the extension reported is theirs; grant the thin
+   * session (§LM7). Deliberately no claimSigner(): the extension owns window.nostr
+   * and this session's whole point is to use it, not replace it (§LM4). */
+  handleExtensionConfirm() {
+    const e = this.pendingExtensionSigner;
+    if (!e || !this.extensionPreviewPubkey) {
+      this.goto("welcome");
+      return;
+    }
+    this.pendingExtensionSigner = null, this.altSigner = e, this.session = { publicKey: this.extensionPreviewPubkey, npub: this.extensionPreviewNpub, method: "nip07" }, this.sessionWarnings = [], this.vaultRequest && this.finishVaultRequest(null), this.dispatchLogin(), this.flashSuccess("dashboard", "Signed in");
+  }
+  /**
+   * nostrconnect leg of the remote-signer flow (§LM5.1): the worker mints an
+   * ephemeral client key and a secret, we show the resulting URI as a QR for a
+   * phone signer to scan, and the worker listens for whichever signer echoes
+   * the secret. Runs alongside the paste form -- whichever leg completes first
+   * wins, and the worker refuses a superseded listen.
+   */
+  async startNostrconnect() {
+    try {
+      const { uri: e } = await this.worker.nip46NostrconnectStart({
+        appName: window.location.hostname || "BitLogin"
+      });
+      if (this.screen !== "bunker-connect") return;
+      this.bunkerConnectUri = e, this.render();
+      const { userPubkey: t } = await this.worker.nip46NostrconnectAwait();
+      if (this.screen !== "bunker-connect" || this.pendingBunker)
+        return;
+      this.adoptBunkerPreview(t);
+    } catch (e) {
+      this.screen === "bunker-connect" && !this.pendingBunker && !this.session && (this.bunkerConnectUri = "", this.fail(e));
+    }
+  }
+  /** bunker:// paste leg (§LM5.1). */
+  async handleBunkerSubmit() {
+    const e = this.field("bunkerUri").trim();
+    if (!e) {
+      this.errorMessage = "Paste a bunker:// address first.", this.render();
+      return;
+    }
+    this.setBusy(!0), this.bunkerAuthUrl = "";
+    try {
+      const { userPubkey: t } = await this.worker.nip46Connect({ uri: e });
+      this.busy = !1, this.adoptBunkerPreview(t);
+    } catch (t) {
+      this.fail(t);
+    }
+  }
+  adoptBunkerPreview(e) {
+    this.pendingBunker = { userPubkey: e, npub: _(e) }, this.bunkerConnectUri = "", this.bunkerAuthUrl = "", this.errorMessage = void 0, this.goto("bunker-confirm");
+  }
+  /** The user confirmed the identity their remote signer reported (§LM5). */
+  handleBunkerConfirm() {
+    const e = this.pendingBunker;
+    if (!e) {
+      this.goto("welcome");
+      return;
+    }
+    this.pendingBunker = null, this.altSigner = new Ge(this.worker, e.userPubkey), this.session = { publicKey: e.userPubkey, npub: e.npub, method: "nip46" }, this.sessionWarnings = [], this.vaultRequest && this.finishVaultRequest(null), this.noteSignerClaim(this.claimSigner()), this.dispatchLogin(), this.flashSuccess("dashboard", "Signed in");
   }
   /**
    * Called once per connectedCallback, right after "configure" -- restores whatever
@@ -1123,9 +2873,10 @@ class I extends HTMLElement {
       if (!e.restored || !e.everydayPublicKey) return;
       this.session = {
         publicKey: e.everydayPublicKey,
-        npub: u(e.everydayPublicKey),
-        accountId: e.accountId
-      }, this.noteSignerClaim(this.claimSigner()), this.dispatchEvent(new CustomEvent("bitlogin-login", { detail: { publicKey: e.everydayPublicKey } })), this.goto("dashboard");
+        npub: _(e.everydayPublicKey),
+        accountId: e.accountId,
+        method: "bitlogin"
+      }, this.noteSignerClaim(this.claimSigner()), this.dispatchLogin(), this.goto("dashboard");
     } catch {
     }
   }
@@ -1134,11 +2885,11 @@ class I extends HTMLElement {
    * paths grant a session identically -- claimSigner() and the bitlogin-login event only ever
    * fire once a RollbackDetectedError (if any) has been resolved one way or the other.
    */
-  async attemptLogin(e, t, s = !1) {
+  async attemptLogin(e, t, n = !1) {
     this.setBusy(!0);
     try {
-      const r = await this.worker.login({ loginName: e, password: t, acknowledgeRollback: s });
-      this.loginName = e, this.session = { publicKey: r.everydayPublicKey, npub: u(r.everydayPublicKey), accountId: r.accountId }, this.sessionWarnings = [r.rollbackWarning, r.relayDisagreementWarning].filter((i) => !!i), this.busy = !1, this.noteSignerClaim(this.claimSigner()), this.dispatchEvent(new CustomEvent("bitlogin-login", { detail: { publicKey: r.everydayPublicKey } })), this.flashSuccess("dashboard", "Signed in"), this.offerToSaveCredential(e, t);
+      const r = await this.worker.login({ loginName: e, password: t, acknowledgeRollback: n });
+      this.loginName = e, this.session = { publicKey: r.everydayPublicKey, npub: _(r.everydayPublicKey), accountId: r.accountId, method: "bitlogin" }, this.sessionWarnings = [r.rollbackWarning, r.relayDisagreementWarning].filter((a) => !!a), this.busy = !1, this.noteSignerClaim(this.claimSigner()), this.dispatchLogin(), this.flashSuccess("dashboard", "Signed in"), this.offerToSaveCredential(e, t);
     } catch (r) {
       if (r instanceof Error && r.name === "RollbackDetectedError") {
         this.pendingRollback = { kind: "login", loginName: e, password: t }, this.rollbackMessage = r.message, this.busy = !1, this.goto("rollback-confirm");
@@ -1163,30 +2914,30 @@ class I extends HTMLElement {
       generalRelaysCount: t.generalRelays.length,
       dmRelaysCount: t.dmRelays.length,
       chainWarning: t.chainWarning
-    }, this.session = { publicKey: t.everydayPublicKey, npub: u(t.everydayPublicKey), accountId: t.accountId }, this.newCredentialAfterRecovery = d().secret, this.busy = !1, this.goto("recover-new-credentials");
+    }, this.session = { publicKey: t.everydayPublicKey, npub: _(t.everydayPublicKey), accountId: t.accountId, method: "bitlogin" }, this.newCredentialAfterRecovery = G().secret, this.busy = !1, this.goto("recover-new-credentials");
   }
   async handleRecoverNewCredentialsSubmit() {
     const e = this.field("newLoginName").trim().toLowerCase();
-    if (!p(e)) {
+    if (!le(e)) {
       this.errorMessage = "Login name must be 3-32 characters: a-z, 0-9, '.', '_', '-', and not start/end with punctuation.", this.render();
       return;
     }
     const t = this.newCredentialAfterRecovery;
-    this.setBusy(!0), await this.worker.completeRecovery({ newLoginName: e, newPassword: t }), this.loginName = e, this.busy = !1, this.sessionWarnings = [], this.noteSignerClaim(this.claimSigner()), this.dispatchEvent(new CustomEvent("bitlogin-login", { detail: { publicKey: this.session?.publicKey } })), this.flashSuccess("dashboard", "Account recovered"), this.offerToSaveCredential(e, t);
+    this.setBusy(!0), await this.worker.completeRecovery({ newLoginName: e, newPassword: t }), this.loginName = e, this.busy = !1, this.sessionWarnings = [], this.noteSignerClaim(this.claimSigner()), this.dispatchLogin(), this.flashSuccess("dashboard", "Account recovered"), this.offerToSaveCredential(e, t);
   }
   async handleChangePasswordSubmit() {
     const e = this.field("oldPassword"), t = this.changePasswordNewCredential;
     await this.attemptChangePassword(e, t);
   }
   /** Shared by the rotation form and the "continue anyway" rollback-confirmation step; see attemptLogin. */
-  async attemptChangePassword(e, t, s = !1) {
+  async attemptChangePassword(e, t, n = !1) {
     this.setBusy(!0);
     try {
       await this.worker.changePassword({
         loginName: this.loginName,
         oldPassword: e,
         newPassword: t,
-        acknowledgeRollback: s
+        acknowledgeRollback: n
       }), this.busy = !1, this.sessionWarnings = [], this.noteSignerClaim(this.claimSigner()), this.flashSuccess("dashboard", "Password updated"), this.offerToSaveCredential(this.loginName, t);
     } catch (r) {
       if (r instanceof Error && r.name === "RollbackDetectedError") {
@@ -1197,12 +2948,16 @@ class I extends HTMLElement {
     }
   }
   async handleDownloadRecoveryExport() {
-    const e = await this.worker.buildRecoveryExport(), t = new Blob([JSON.stringify(e, null, 2)], { type: "application/json" }), s = URL.createObjectURL(t), r = document.createElement("a");
-    r.href = s, r.download = "bitlogin-recovery-export.json", r.click(), URL.revokeObjectURL(s);
+    const e = await this.worker.buildRecoveryExport(), t = new Blob([JSON.stringify(e, null, 2)], { type: "application/json" }), n = URL.createObjectURL(t), r = document.createElement("a");
+    r.href = n, r.download = "bitlogin-recovery-export.json", r.click(), URL.revokeObjectURL(n);
   }
   async handleSignTestEvent() {
-    const e = await this.worker.signEvent({ kind: 1, content: `Hello from BitLogin at ${(/* @__PURE__ */ new Date()).toISOString()}` });
-    this.lastSignedEventJson = JSON.stringify(e, null, 2), this.render();
+    try {
+      const e = await this.signEvent({ kind: 1, content: `Hello from BitLogin at ${(/* @__PURE__ */ new Date()).toISOString()}` });
+      this.lastSignedEventJson = JSON.stringify(e, null, 2), this.render();
+    } catch (e) {
+      this.fail(e);
+    }
   }
   async handleRevealNsec() {
     const { nsec: e } = await this.worker.exportIdentity();
@@ -1227,7 +2982,7 @@ class I extends HTMLElement {
             <path d="M27 32.5l3.6 3.6L38 28.2" fill="none" stroke="url(#bl-success-brass)" stroke-width="3" stroke-linecap="round" stroke-linejoin="round" />
           </svg>
         </span>
-        <p class="success-label">${n(e)}</p>
+        <p class="success-label">${k(e)}</p>
       </div>
     `;
   }
@@ -1244,11 +2999,21 @@ class I extends HTMLElement {
       this.pendingSuccessLabel = null, this.successDismissTimer = null, this.root.querySelector("[data-success-overlay]")?.remove();
     }, 1100);
   }
+  /** Screen header with an icon back button, replacing the dangling "Back"
+   *  link every pre-auth screen used to end with -- back navigation belongs
+   *  where the eye starts, not after the form. */
+  renderScreenHead(e, t = "goto-welcome") {
+    return `
+      <div class="screen-head">
+        <button class="icon-back" type="button" data-action="${t}" aria-label="Back">${yt}</button>
+        <h2>${e}</h2>
+      </div>`;
+  }
   renderError() {
-    return this.errorMessage ? `<div class="notice error">${n(this.errorMessage)}</div>` : "";
+    return this.errorMessage ? `<div class="notice error">${k(this.errorMessage)}</div>` : "";
   }
   renderWarnings() {
-    return this.sessionWarnings.map((e) => `<div class="notice warn">${n(e)}</div>`).join("");
+    return this.sessionWarnings.map((e) => `<div class="notice warn">${k(e)}</div>`).join("");
   }
   /** The widget's own brand lockup (mark + wordmark), inlined as vector paths rather than
    * relying on the host page having loaded any particular font -- shown once, on the
@@ -1258,20 +3023,115 @@ class I extends HTMLElement {
   }
   renderScreen() {
     switch (this.screen) {
-      case "welcome":
+      case "welcome": {
+        const e = (a, s, i, u, b = !1) => `
+          <button class="option-row" type="button" data-action="${a}" ${b ? "disabled" : ""}>
+            <span class="option-icon">${s}</span>
+            <span class="option-text"><span>${i}</span><span class="option-sub">${u}</span></span>
+          </button>`, t = ue() ? e(
+          "extension-signin",
+          j.extension,
+          this.busy ? "Asking your extension…" : "Nostr extension",
+          "Use the signer extension in this browser",
+          this.busy
+        ) : "", n = pt() ? e(
+          "goto-passkey",
+          j.passkey,
+          "Continue with a passkey",
+          "Kept in your phone or browser's password manager"
+        ) : "", r = this.moreOptionsOpen ? `<div class="option-menu">
+              <div class="option-group-label">Use an account you already have</div>
+              ${n}
+              ${t}
+              ${e("goto-bunker", j.remote, "Remote signer", "Scan a code with Amber or another signer app")}
+              ${e("goto-import", j.importKey, "Import a Nostr key", "Wrap an existing identity in a login name and password")}
+              ${e("goto-recover", j.recover, "Recover account", "Sign back in with your 12-word recovery phrase")}
+            </div>` : "";
         return `
           ${this.renderBrandLockup()}
           <p class="sub">A portable Nostr identity with a familiar login name and password.</p>
           ${this.renderError()}
           <button class="primary" data-action="goto-login">Sign in</button>
           <button class="secondary" data-action="goto-create">Create account</button>
-          <button class="link" data-action="goto-import">Import an existing Nostr key</button>
-          <button class="link" data-action="goto-recover">Forgot password? Recover with phrase</button>
+          <button class="options-toggle ${this.moreOptionsOpen ? "open" : ""}" type="button" data-action="toggle-more" aria-expanded="${this.moreOptionsOpen}">
+            More sign-in options ${gt}
+          </button>
+          ${r}
+        `;
+      }
+      case "passkey":
+        return `
+          ${this.renderScreenHead("Use a passkey")}
+          <p class="sub">A passkey kept in your phone, browser, or security key — usually synced by your Google or Apple account. This site needs no setup and runs no server; the passkey itself unlocks your Nostr account.</p>
+          ${this.renderError()}
+          <button class="primary" type="button" data-action="passkey-auth" ${this.busy ? "disabled" : ""}>
+            ${this.busy ? '<span class="spinner"></span>Waiting for your passkey…' : "Use my passkey"}
+          </button>
+          <button class="secondary" type="button" data-action="passkey-register" ${this.busy ? "disabled" : ""}>Create a new passkey</button>
+          <p class="small">First time here? "Use my passkey" also works — if this passkey has no account on this site yet, you'll be taken to set one up.</p>
+        `;
+      case "passkey-create":
+        return `
+          ${this.renderScreenHead("Almost there")}
+          <p class="sub">Your passkey is ready — it will unlock this account from now on, with nothing stored anywhere else. Choose how to set up the account's identity:</p>
+          ${this.renderError()}
+          <button class="primary" type="button" data-action="passkey-new" ${this.busy ? "disabled" : ""}>
+            ${this.busy ? '<span class="spinner"></span>Creating your account…' : "Create a fresh identity"}
+          </button>
+          <button class="secondary" type="button" data-action="passkey-import" ${this.busy ? "disabled" : ""}>I already have a Nostr key</button>
+          <p class="small">Next you'll save a 12-word recovery phrase. It's the only way back if you ever lose the passkey, so it isn't optional — and it's the same phrase that lets you take full control of this account, or leave for any other Nostr app, without losing your identity.</p>
+        `;
+      case "extension-confirm":
+        return `
+          ${this.renderScreenHead("Sign in with your extension")}
+          <p class="sub">Your Nostr signer extension reports this identity:</p>
+          <div class="credential-box">${k(this.extensionPreviewNpub)}</div>
+          <p class="small">Check this is the profile you expect — extensions can hold more than one. BitLogin never sees this identity's private key; your extension signs on its behalf. This session lasts until you log out or leave the page, and BitLogin account features (wallet connections, password rotation, recovery) stay with BitLogin accounts.</p>
+          ${this.renderError()}
+          <button class="primary" type="button" data-action="extension-continue">This is me — continue</button>
+        `;
+      case "bunker-connect": {
+        let e = "";
+        if (this.bunkerAuthUrl)
+          try {
+            const n = new URL(this.bunkerAuthUrl).hostname;
+            e = `<div class="notice info">Your signer asks you to approve this connection first.
+               <a href="${k(this.bunkerAuthUrl)}" target="_blank" rel="noopener noreferrer">Open the approval page at ${k(n)}</a>, then return here.</div>`;
+          } catch {
+            e = "";
+          }
+        const t = this.bunkerConnectUri ? `<div class="qr-wrap" aria-live="polite">${at(this.bunkerConnectUri, "Nostr Connect QR code")}</div>
+             <button class="secondary" type="button" data-action="copy-bunker-uri">Copy connection code</button>
+             <p class="small">Waiting for your signer to connect…</p>` : this.errorMessage ? '<button class="secondary" type="button" data-action="goto-bunker">Generate a new code</button>' : '<p class="sub"><span class="spinner"></span>Preparing connection code…</p>';
+        return `
+          ${this.renderScreenHead("Use a remote signer")}
+          <p class="sub">Scan with a signer app on your phone (Amber, nsec.app, …). Your key stays in the signer; BitLogin only requests signatures.</p>
+          ${this.renderError()}
+          ${e}
+          ${t}
+          <div class="divider"></div>
+          <form data-form="bunker-connect">
+            <label for="bunkerUri">Or paste a bunker:// address</label>
+            <input type="password" name="bunkerUri" id="bunkerUri" autocomplete="off" placeholder="bunker://…" />
+            <button class="secondary" type="submit" ${this.busy ? "disabled" : ""}>
+              ${this.busy ? '<span class="spinner"></span>Contacting your signer…' : "Connect"}
+            </button>
+          </form>
+        `;
+      }
+      case "bunker-confirm":
+        return `
+          ${this.renderScreenHead("Remote signer connected")}
+          <p class="sub">Your signer reports this identity:</p>
+          <div class="credential-box">${k(this.pendingBunker?.npub ?? "")}</div>
+          <p class="small">Check this is the profile you expect. Your private key stays in your signer — each signature is requested over relays, and your signer can require approval or be disconnected at any time. This session lasts until you log out or leave the page; BitLogin account features (wallet connections, password rotation, recovery) stay with BitLogin accounts.</p>
+          ${this.renderError()}
+          <button class="primary" type="button" data-action="bunker-continue">This is me — continue</button>
         `;
       case "import-key": {
         const e = !!this.importPreviewNpub;
         return `
-          <h2>Import an existing Nostr key</h2>
+          ${this.renderScreenHead("Import an existing Nostr key")}
           <p class="sub">Wrap a Nostr identity you already control in a BitLogin login name and password. Your key never changes — you just get a friendlier way in.</p>
           <div class="notice warn">Pasting a private key into any web page is risky. Only do this on a BitLogin build you trust, and clear your clipboard afterward. BitLogin can't secure copies of this key that already exist elsewhere.</div>
           ${this.renderError()}
@@ -1283,14 +3143,13 @@ class I extends HTMLElement {
             </button>
           </form>
           ${e ? `<div class="notice info">This key's public identity:</div>
-                 <div class="credential-box">${n(this.importPreviewNpub)}</div>
+                 <div class="credential-box">${k(this.importPreviewNpub)}</div>
                  <button class="primary" type="button" data-action="import-continue">This is my identity — continue</button>` : ""}
-          <button class="link" data-action="goto-welcome">Back</button>
         `;
       }
       case "create-name":
         return `
-          <h2>${this.importKey ? "Set up your login" : "Create your BitLogin"}</h2>
+          ${this.renderScreenHead(this.importKey ? "Set up your login" : "Create your BitLogin")}
           <p class="sub">${this.importKey ? "Choose a login name for your imported identity. It's a convenience, not a secret." : "Choose a login name. It's a convenience, not a secret (it contributes no security)."}</p>
           ${this.renderError()}
           <form data-form="create-name">
@@ -1298,19 +3157,18 @@ class I extends HTMLElement {
             <input type="text" name="loginName" id="loginName" placeholder="adam" autocomplete="off" required minlength="3" maxlength="32" />
             <button class="primary" type="submit">Continue</button>
           </form>
-          <button class="link" data-action="goto-welcome">Back</button>
         `;
       case "create-credential": {
         const e = this.busy ? `<span class="spinner"></span>${this.importKey ? "Importing…" : "Creating account…"}` : this.importKey ? "Import account" : "Create account";
         return `
           <h2>Your generated password</h2>
           <p class="sub">BitLogin generates your password because no server can rate-limit guesses against a downloadable encrypted file.</p>
-          <div class="credential-box" id="credential-box">${n(this.generatedCredential)}</div>
+          <div class="credential-box" id="credential-box">${k(this.generatedCredential)}</div>
           <button class="secondary" type="button" data-action="copy-credential">Copy</button>
           <button class="secondary" type="button" data-action="regenerate-credential">Generate a different one</button>
           ${this.renderError()}
           <form data-form="create-credential" autocomplete="on">
-            <input type="text" name="username" autocomplete="username" value="${n(this.loginName)}" readonly hidden />
+            <input type="text" name="username" autocomplete="username" value="${k(this.loginName)}" readonly hidden />
             <label class="checkbox-row">
               <input type="checkbox" id="saved-check" ${this.savedCheckbox ? "checked" : ""} />
               I have saved this password somewhere safe.
@@ -1325,7 +3183,7 @@ class I extends HTMLElement {
           <p class="sub">These 12 words can recover your identity if you forget your password or lose all your devices. We cannot recover these words for you.</p>
           <p class="small">Do not enter a Bitcoin or other cryptocurrency-wallet recovery phrase into BitLogin. This is a BitLogin-only phrase.</p>
           <div class="phrase-grid">
-            ${this.recoveryPhrase.split(" ").map((e, t) => `<div class="phrase-word"><span>${t + 1}.</span>${n(e)}</div>`).join("")}
+            ${this.recoveryPhrase.split(" ").map((e, t) => `<div class="phrase-word"><span>${t + 1}.</span>${k(e)}</div>`).join("")}
           </div>
           ${this.renderError()}
           <button class="primary" type="button" data-action="goto-verify-phrase">I've saved my phrase — continue</button>
@@ -1348,23 +3206,24 @@ class I extends HTMLElement {
         `;
       case "login":
         return `
-          <h2>Sign in</h2>
+          ${this.renderScreenHead("Sign in")}
           ${this.renderError()}
           <form data-form="login">
             <label for="loginName">Login name</label>
             <input type="text" name="loginName" id="loginName" autocomplete="username" required />
             <label for="password">Password</label>
             <input type="password" name="password" id="password" autocomplete="current-password" required />
+            <div class="field-hint">
+              <button class="link-inline" type="button" data-action="goto-recover">Forgot password?</button>
+            </div>
             <button class="primary" type="submit" ${this.busy ? "disabled" : ""}>
               ${this.busy ? '<span class="spinner"></span>Signing in…' : "Sign in"}
             </button>
           </form>
-          <button class="link" data-action="goto-recover">Forgot password? Recover with phrase</button>
-          <button class="link" data-action="goto-welcome">Back</button>
         `;
       case "recover-phrase":
         return `
-          <h2>Recover with phrase</h2>
+          ${this.renderScreenHead("Recover with phrase")}
           <p class="sub">Enter your 12-word BitLogin recovery phrase.</p>
           <p class="small">Do not enter a Bitcoin or other cryptocurrency-wallet recovery phrase into BitLogin.</p>
           ${this.renderError()}
@@ -1374,21 +3233,20 @@ class I extends HTMLElement {
             <label for="offlineExportFile" style="margin-top:14px">Recovery export file (optional)</label>
             <input type="file" name="offlineExportFile" id="offlineExportFile" accept=".json,application/json" />
             <p class="small">Only needed if relays are unreachable -- the phrase above is still required either way. The file alone can never recover an account by itself.</p>
-            ${this.offlineExportFileNotice ? `<div class="notice ${this.offlineExportFile ? "info" : "warn"}">${n(this.offlineExportFileNotice)}</div>` : ""}
+            ${this.offlineExportFileNotice ? `<div class="notice ${this.offlineExportFile ? "info" : "warn"}">${k(this.offlineExportFileNotice)}</div>` : ""}
             <button class="primary" type="submit" ${this.busy ? "disabled" : ""}>
               ${this.busy ? '<span class="spinner"></span>Recovering…' : "Continue"}
             </button>
           </form>
-          <button class="link" data-action="goto-welcome">Back</button>
         `;
       case "recover-new-credentials": {
-        const e = this.recoveredPreview?.chainWarning ? `<div class="notice warn">${n(this.recoveredPreview.chainWarning)}</div>` : "", t = this.busy ? '<span class="spinner"></span>Finishing recovery…' : "Finish recovery";
+        const e = this.recoveredPreview?.chainWarning ? `<div class="notice warn">${k(this.recoveredPreview.chainWarning)}</div>` : "", t = this.busy ? '<span class="spinner"></span>Finishing recovery…' : "Finish recovery";
         return `
           <h2>Identity recovered</h2>
           <p class="sub">Found your account. Restored ${this.recoveredPreview?.generalRelaysCount ?? 0} general relay(s) and ${this.recoveredPreview?.dmRelaysCount ?? 0} DM relay(s) from your public events.</p>
           ${e}
           <p class="sub">Now set a new login name. BitLogin generated a new high-entropy password for this account.</p>
-          <div class="credential-box" id="credential-box">${n(this.newCredentialAfterRecovery)}</div>
+          <div class="credential-box" id="credential-box">${k(this.newCredentialAfterRecovery)}</div>
           <button class="secondary" type="button" data-action="copy-credential">Copy generated password</button>
           ${this.renderError()}
           <form data-form="recover-new-credentials">
@@ -1398,33 +3256,37 @@ class I extends HTMLElement {
           </form>
         `;
       }
-      case "dashboard":
+      case "dashboard": {
+        const e = this.session?.method ?? "bitlogin", n = e !== "bitlogin" ? `<p class="small">${e === "nip07" ? "Signed in through your Nostr extension." : "Signed in through your remote signer — each signature is requested from it over relays."} Wallet connections, password rotation, and identity export are features of BitLogin accounts — create one to get your settings on every device.</p>` : `
+          <button class="secondary" type="button" data-action="goto-vault-manage">Wallet connections</button>
+          <button class="secondary" type="button" data-action="goto-change-password">Rotate password</button>
+          <button class="secondary" type="button" data-action="goto-export">Export identity</button>`, r = this.passkeySession ? `<p class="small">Signed in with a passkey — it unlocks this account from your device's password manager; your identity lives on the open Nostr network. Your recovery phrase works even if the passkey is lost.</p>` : "";
         return `
           <h2>Signed in</h2>
           ${this.renderWarnings()}
-          <p class="pubkey">${n(this.session?.npub ?? "")}</p>
+          <p class="pubkey">${k(this.session?.npub ?? "")}</p>
+          ${r}
           ${this.renderError()}
           <button class="secondary" type="button" data-action="sign-test-event">Sign a test event</button>
-          ${this.lastSignedEventJson ? `<div class="credential-box" style="white-space:pre-wrap">${n(this.lastSignedEventJson)}</div>` : ""}
+          ${this.lastSignedEventJson ? `<div class="credential-box" style="white-space:pre-wrap">${k(this.lastSignedEventJson)}</div>` : ""}
           <div class="divider"></div>
-          <button class="secondary" type="button" data-action="goto-vault-manage">Wallet connections</button>
-          <button class="secondary" type="button" data-action="goto-change-password">Rotate password</button>
-          <button class="secondary" type="button" data-action="goto-export">Export identity</button>
+          ${n}
           <button class="secondary" type="button" data-action="logout">Log out</button>
         `;
+      }
       case "vault-consent": {
         const e = this.vaultRequest, t = this.vaultCandidate;
         if (!e || !t) return '<div class="notice error">No wallet request is in progress.</div>';
-        const s = new Date(t.createdAt * 1e3).toLocaleDateString();
+        const n = new Date(t.createdAt * 1e3).toLocaleDateString();
         return `
-          <h2>Share a wallet with ${n(e.appName)}?</h2>
-          ${e.reason ? `<p class="sub">Reason given: ${n(e.reason)}</p>` : ""}
+          <h2>Share a wallet with ${k(e.appName)}?</h2>
+          ${e.reason ? `<p class="sub">Reason given: ${k(e.reason)}</p>` : ""}
           ${this.renderError()}
           <div class="credential-box">
-            <strong>${n(t.label)}</strong><br />
-            Connected ${n(s)} · wallet ${n((t.walletPubkey ?? "").slice(0, 10))}…
+            <strong>${k(t.label)}</strong><br />
+            Connected ${k(n)} · wallet ${k((t.walletPubkey ?? "").slice(0, 10))}…
           </div>
-          <div class="notice info">${n(e.appName)} will receive this connection and can spend within the budget your wallet enforces, until you revoke it from Wallet connections.</div>
+          <div class="notice info">${k(e.appName)} will receive this connection and can spend within the budget your wallet enforces, until you revoke it from Wallet connections.</div>
           <button class="primary" type="button" data-action="vault-approve" ${this.busy ? "disabled" : ""}>
             ${this.busy ? '<span class="spinner"></span>Sharing…' : "Use this wallet"}
           </button>
@@ -1437,8 +3299,8 @@ class I extends HTMLElement {
         if (!e) return '<div class="notice error">No wallet request is in progress.</div>';
         const t = this.vaultUnsaved ? `<div class="notice warn">${this.vaultUnsavedReason === "no-vault" ? "This account predates the Connection Vault, so the connection will be handed to the app but not saved to your account. Enable the vault from your account manager (recovery phrase required) to make wallets portable." : "Sign in again to save connections to your account — until then the connection will be handed to the app but not saved."}</div>` : "";
         return `
-          <h2>Connect a wallet for ${n(e.appName)}</h2>
-          ${e.reason ? `<p class="sub">Reason given: ${n(e.reason)}</p>` : ""}
+          <h2>Connect a wallet for ${k(e.appName)}</h2>
+          ${e.reason ? `<p class="sub">Reason given: ${k(e.reason)}</p>` : ""}
           ${t}
           ${this.renderError()}
           <button class="primary" type="button" data-action="vault-bc" ${this.busy ? "disabled" : ""}>
@@ -1449,7 +3311,7 @@ class I extends HTMLElement {
             <label for="vaultUri">Or paste an NWC connection</label>
             <input type="password" name="vaultUri" id="vaultUri" autocomplete="off" placeholder="nostr+walletconnect://…" />
             <label for="vaultLabel">Name this connection</label>
-            <input type="text" name="vaultLabel" id="vaultLabel" autocomplete="off" maxlength="120" value="${n(`${e.appName} wallet`)}" />
+            <input type="text" name="vaultLabel" id="vaultLabel" autocomplete="off" maxlength="120" value="${k(`${e.appName} wallet`)}" />
             <button class="secondary" type="submit" ${this.busy ? "disabled" : ""}>
               ${this.vaultUnsaved ? "Share without saving" : "Save and share"}
             </button>
@@ -1462,26 +3324,26 @@ class I extends HTMLElement {
         const e = this.vaultOffer;
         return e ? `
           <h2>Save this wallet to your BitLogin?</h2>
-          <p class="sub">${n(e.appName)} just connected a wallet on this device. Saved to your BitLogin, the connection follows you — on a new device it's one tap instead of another paste.</p>
+          <p class="sub">${k(e.appName)} just connected a wallet on this device. Saved to your BitLogin, the connection follows you — on a new device it's one tap instead of another paste.</p>
           ${this.renderError()}
           <label for="vaultOfferLabel">Name this connection</label>
-          <input type="text" name="vaultOfferLabel" id="vaultOfferLabel" autocomplete="off" maxlength="120" value="${n(e.label)}" />
+          <input type="text" name="vaultOfferLabel" id="vaultOfferLabel" autocomplete="off" maxlength="120" value="${k(e.label)}" />
           <button class="primary" type="button" data-action="vault-offer-save" ${this.busy ? "disabled" : ""}>
             ${this.busy ? '<span class="spinner"></span>Saving…' : "Save to BitLogin"}
           </button>
           <button class="link" type="button" data-action="vault-offer-decline" ${this.busy ? "disabled" : ""}>No thanks — keep it on this device only</button>
-          <div class="notice info">Stored encrypted on your account; ${n(e.appName)} keeps working either way. Remove it any time from Wallet connections.</div>
+          <div class="notice info">Stored encrypted on your account; ${k(e.appName)} keeps working either way. Remove it any time from Wallet connections.</div>
         ` : '<div class="notice error">No wallet offer is in progress.</div>';
       }
       case "vault-manage": {
         const e = this.vaultConnections, t = e === null ? '<p class="sub">Loading…</p>' : e.length === 0 ? `<p class="sub">No connections stored yet. They're added when you connect a wallet inside an app.</p>` : e.map(
-          (s) => `
+          (n) => `
           <div class="credential-box">
-            <strong>${n(s.label)}</strong> <span class="sub">(${n(s.connectionType)})</span><br />
-            ${s.origin ? `Linked to ${n(s.origin)}` : "Not linked to an app"}
+            <strong>${k(n.label)}</strong> <span class="sub">(${k(n.connectionType)})</span><br />
+            ${n.origin ? `Linked to ${k(n.origin)}` : "Not linked to an app"}
             <div>
-              ${s.origin ? `<button class="link" type="button" data-action="vault-unbind" data-id="${n(s.connectionId)}" ${this.busy ? "disabled" : ""}>Revoke app access</button>` : ""}
-              <button class="link" type="button" data-action="vault-delete" data-id="${n(s.connectionId)}" ${this.busy ? "disabled" : ""}>Remove from BitLogin</button>
+              ${n.origin ? `<button class="link" type="button" data-action="vault-unbind" data-id="${k(n.connectionId)}" ${this.busy ? "disabled" : ""}>Revoke app access</button>` : ""}
+              <button class="link" type="button" data-action="vault-delete" data-id="${k(n.connectionId)}" ${this.busy ? "disabled" : ""}>Remove from BitLogin</button>
             </div>
           </div>`
         ).join("");
@@ -1489,7 +3351,7 @@ class I extends HTMLElement {
           <h2>Wallet connections</h2>
           <p class="sub">Connections your apps use, stored encrypted on your account and restored on any device you sign in to.</p>
           ${this.renderError()}
-          ${this.vaultIntegrityWarnings.map((s) => `<div class="notice warn">${n(s)}</div>`).join("")}
+          ${this.vaultIntegrityWarnings.map((n) => `<div class="notice warn">${k(n)}</div>`).join("")}
           ${t}
           <div class="notice info">"Remove from BitLogin" deletes the stored copy only — the connection itself keeps working for any app that already has it. To revoke spending authority, delete the connection inside your wallet app.</div>
           <button class="link" data-action="goto-dashboard">Back</button>
@@ -1498,7 +3360,7 @@ class I extends HTMLElement {
       case "rollback-confirm":
         return `
           <h2>This looks like a stale or revoked credential</h2>
-          <div class="notice warn">${n(this.rollbackMessage)}</div>
+          <div class="notice warn">${k(this.rollbackMessage)}</div>
           <p class="sub">This usually means the password just entered was rotated away in an earlier session on this device, and a relay hasn't caught up with that change. If you rotated your password, use the new one instead. Only continue if you're confident this is relay lag, not a stale credential.</p>
           <button class="primary" type="button" data-action="rollback-retry">Try again</button>
           <button class="link" type="button" data-action="rollback-continue">I understand the risk — continue anyway</button>
@@ -1507,8 +3369,9 @@ class I extends HTMLElement {
       case "change-password":
         return `
           <h2>Rotate password</h2>
+          ${this.passkeySession ? '<div class="notice info">This takes over from passkey sign-in: your passkey stops unlocking this account, and from then on you sign in with the new password below — you hold it, nobody else. This is the graduation step.</div>' : ""}
           <p class="sub">Your old password's capsule will be tombstoned and a deletion request issued. This does not erase copies an attacker may already have downloaded, and a relay that hasn't processed the deletion may keep serving the old password's capsule until a device that has already seen the new generation refuses it.</p>
-          <div class="credential-box" id="credential-box">${n(this.changePasswordNewCredential)}</div>
+          <div class="credential-box" id="credential-box">${k(this.changePasswordNewCredential)}</div>
           <button class="secondary" type="button" data-action="copy-credential">Copy generated password</button>
           ${this.renderError()}
           <form data-form="change-password">
@@ -1525,11 +3388,11 @@ class I extends HTMLElement {
           <h2>Export identity</h2>
           <p class="sub">Your public identity (npub) is safe to share. Your private key (nsec) is not.</p>
           <label>Public key (npub)</label>
-          <div class="credential-box">${n(this.session?.npub ?? "")}</div>
+          <div class="credential-box">${k(this.session?.npub ?? "")}</div>
           <button class="secondary" type="button" data-action="download-recovery-export">Download recovery export</button>
           ${this.renderError()}
           <button class="secondary" type="button" data-action="reveal-nsec">Reveal private key (nsec)</button>
-          ${this.exportedNsec ? `<div class="notice warn">Never share this. Anyone with it controls your identity.</div><div class="credential-box">${n(
+          ${this.exportedNsec ? `<div class="notice warn">Never share this. Anyone with it controls your identity.</div><div class="credential-box">${k(
           this.exportedNsec
         )}</div>` : ""}
           <button class="link" data-action="goto-dashboard">Back</button>
@@ -1539,28 +3402,34 @@ class I extends HTMLElement {
     }
   }
 }
-function M(a, e) {
-  const t = Array.from({ length: a }, (r, i) => i), s = [];
+function ye(o, e) {
+  const t = Array.from({ length: o }, (r, a) => a), n = [];
   for (let r = 0; r < e && t.length > 0; r++)
-    s.push(t.splice(g(t.length), 1)[0]);
-  return s.sort((r, i) => r - i);
+    n.push(t.splice(be(t.length), 1)[0]);
+  return n.sort((r, a) => r - a);
 }
-function n(a) {
-  return a.replace(/[&<>"']/gu, (e) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[e]);
+function k(o) {
+  return o.replace(/[&<>"']/gu, (e) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[e]);
 }
-customElements.get("bitlogin-auth") || customElements.define("bitlogin-auth", I);
+customElements.get("bitlogin-auth") || customElements.define("bitlogin-auth", ie);
 window.bitlogin = {
   version: "0.1.0",
   isActiveSigner() {
     return window.nostr?._bitlogin === !0;
   },
   releaseSigner() {
-    const a = window;
-    return a.nostr?._bitlogin === !0 ? (delete a.nostr, window.dispatchEvent(new CustomEvent("bitlogin-signer-released")), !0) : !1;
+    const o = window;
+    return o.nostr?._bitlogin === !0 ? (delete o.nostr, window.dispatchEvent(new CustomEvent("bitlogin-signer-released")), !0) : !1;
+  },
+  activeMethod() {
+    return pe()?.method ?? null;
+  },
+  activeSession() {
+    return pe();
   }
 };
 export {
-  I as BitLoginAuthElement,
-  S as WorkerClient,
-  C as createNip07Provider
+  ie as BitLoginAuthElement,
+  _e as WorkerClient,
+  mt as createNip07Provider
 };
diff --git a/vendor/bitlogin/cryptoWorker.js b/vendor/bitlogin/cryptoWorker.js
index 8ba20a7d..248b9ac5 100644
--- a/vendor/bitlogin/cryptoWorker.js
+++ b/vendor/bitlogin/cryptoWorker.js
@@ -1,77 +1,90 @@
-import { v as ae, g as k, s as ne, b as er, c as be, K as tr, d as Yt, f as yt, h as ht, j as re, u as Y, k as nr, l as rr, m as V, n as X, o as Ge, S as pt, q as ft, t as Fe, D as Ee, w as He, x as vt, y as or, z as ir, A as ar, B as cr, C as Qe, F as Mt, G as gt, H as sr, I as lr, J as ur, L as Ue, M as wt, N as dr, O as yr, P as bt, Q as Je, T as Se, U as hr, V as Xt, W as x, X as pr, Y as fr, Z as vr, _ as mt, $ as Qt, a0 as Pe, a1 as gr, a2 as Me, a3 as Zt, a4 as me, a5 as wr, a6 as it, a7 as br, a as Ut, a8 as mr } from "./bitlogin-shared-DTz11m56.js";
-class _e extends Error {
+import { v as ee, g as _, s as X, b as Ue, a as oe, K as wr, j as pn, k as Et, l as Pt, m as ie, u as Y, n as br, o as mr, d as V, q as Q, t as tt, S as Kt, w as Rt, x as nt, D as Re, y as rt, z as At, A as kr, B as _r, C as Er, F as Pr, G as st, H as Xt, I as Nt, J as Kr, L as Rr, M as Ar, N as je, O as xt, P as Nr, Q as xr, T as Ct, U as ot, V as Me, W as Cr, X as fn, Y as E, Z as pt, _ as Sr, $ as Ir, h as St, a0 as vn, a1 as Ae, a2 as Tr, c as We, a3 as gn, a4 as Ee, a5 as Lr, a6 as Ge, a7 as ft, a8 as Ur, f as Yt, a9 as Mr } from "./bitlogin-shared-CEfP5Eg9.js";
+class Pe extends Error {
   reason;
   constructor(t) {
     super("Account not found or credentials incorrect."), this.name = "AccountNotFoundError", this.reason = t;
   }
 }
-class le extends Error {
+class de extends Error {
   constructor(t) {
     super(t), this.name = "RegistrationFailedError";
   }
 }
-class en extends Error {
+class wn extends Error {
   constructor(t = "An account already exists with this login name and password. Sign in instead, or choose different credentials.") {
     super(t), this.name = "AccountAlreadyExistsError";
   }
 }
-class Ne extends Error {
+class Le extends Error {
   constructor(t) {
     super(t), this.name = "RecoveryFailedError";
   }
 }
-class tn extends Error {
+class bn extends Error {
   seenGeneration;
   capsuleGeneration;
   constructor(t, n) {
     super(`This credential capsule reports generation ${n}, but this device has already seen generation ${t}. Refusing to log in with older, possibly-revoked credentials.`), this.name = "RollbackDetectedError", this.seenGeneration = t, this.capsuleGeneration = n;
   }
 }
-function We(e, t) {
+function Je(e, t) {
   const n = t ?? Math.floor(Date.now() / 1e3);
   return e == null ? n : Math.max(n, e + 1);
 }
-const _r = { generation: -1, recoveryGeneration: -1 };
-function _t(e) {
+const Or = { generation: -1, recoveryGeneration: -1 };
+function It(e) {
   return `bitlogin:hwm:${e}`;
 }
-async function kt(e, t) {
-  const n = await e.get(_t(t));
-  return n ? JSON.parse(n) : _r;
+async function Tt(e, t) {
+  const n = await e.get(It(t));
+  return n ? JSON.parse(n) : Or;
 }
-async function nn(e, t, n) {
-  const r = await kt(e, t), o = {
+async function mn(e, t, n) {
+  const r = await Tt(e, t), o = {
     generation: Math.max(r.generation, n.generation ?? -1),
     recoveryGeneration: Math.max(r.recoveryGeneration, n.recoveryGeneration ?? -1)
   };
-  return await e.set(_t(t), JSON.stringify(o)), o;
+  return await e.set(It(t), JSON.stringify(o)), o;
 }
-async function kr(e, t, n = { generation: 0, recoveryGeneration: -1 }) {
-  await e.set(_t(t), JSON.stringify(n));
+async function Dr(e, t, n = { generation: 0, recoveryGeneration: -1 }) {
+  await e.set(It(t), JSON.stringify(n));
 }
-function Er(e) {
+function Vr(e) {
   const t = e.split(".");
   if (t.length !== 4 || t.some((r) => !/^\d{1,3}$/u.test(r)))
     return !1;
   const n = t.map(Number);
   return n.every((r) => r >= 0 && r <= 255) && n[0] === 127;
 }
-function Ye(e) {
+function it(e) {
   let t;
   try {
     t = new URL(e);
   } catch {
     return !1;
   }
-  return t.username || t.password || t.hash ? !1 : t.protocol === "wss:" ? !0 : t.protocol !== "ws:" ? !1 : t.hostname === "localhost" || t.hostname === "[::1]" || Er(t.hostname);
+  return t.username || t.password || t.hash ? !1 : t.protocol === "wss:" ? !0 : t.protocol !== "ws:" ? !1 : t.hostname === "localhost" || t.hostname === "[::1]" || Vr(t.hostname);
 }
-function Pr() {
+function qr() {
   const e = globalThis.WebSocket;
   if (!e)
     throw new Error("No global WebSocket implementation is available in this environment.");
   return e;
 }
-class Kr {
+const Xe = 1e3, Wr = 262144;
+function jr(e) {
+  const t = Math.min(e.limit ?? Xe, Xe);
+  return Math.max(50, t * 3);
+}
+const $r = 2048, Br = 1e4, zr = 100;
+function Gr(e, t) {
+  if (e.size >= $r) {
+    const n = e.values().next().value;
+    n !== void 0 && e.delete(n);
+  }
+  e.add(t);
+}
+class Lt {
   url;
   ws = null;
   connectPromise = null;
@@ -81,19 +94,22 @@ class Kr {
   connectTimeoutMs;
   authenticated = !1;
   constructor(t, n = {}) {
-    if (!Ye(t))
+    if (!it(t))
       throw new Error("Relay URL must use secure WebSockets, except for an explicit loopback development endpoint.");
     this.url = t, this.authPrivateKey = n.authPrivateKey, this.connectTimeoutMs = n.connectTimeoutMs ?? 8e3;
   }
   async connect() {
     return this.connectPromise ? this.connectPromise : (this.connectPromise = new Promise((t, n) => {
-      const r = Pr(), o = new r(this.url);
+      const r = qr(), o = new r(this.url);
       this.ws = o;
       const i = setTimeout(() => {
         n(new Error(`Timed out connecting to relay ${this.url}`));
       }, this.connectTimeoutMs);
       o.addEventListener("open", () => {
-        clearTimeout(i), t();
+        clearTimeout(i);
+        for (const [a, s] of this.subs)
+          o.send(JSON.stringify(["REQ", a, s.filter]));
+        t();
       }), o.addEventListener("error", () => {
         clearTimeout(i), n(new Error(`WebSocket error connecting to relay ${this.url}`));
       }), o.addEventListener("close", () => {
@@ -112,6 +128,8 @@ class Kr {
     this.ws.send(JSON.stringify(t));
   }
   handleMessage(t) {
+    if (t.length > Wr)
+      return;
     let n;
     try {
       n = JSON.parse(t);
@@ -125,8 +143,23 @@ class Kr {
       const [i, a] = o;
       if (typeof i != "string")
         return;
-      const c = this.subs.get(i);
-      c && ae(a) && Rr(a, c.filter) && c.events.push(a);
+      const s = this.subs.get(i);
+      if (!s)
+        return;
+      const c = a?.id;
+      if (typeof c != "string" || s.seenIds.has(c))
+        return;
+      if (s.onEvent) {
+        const u = Date.now();
+        if (u - s.liveWindowStart >= Br && (s.liveWindowStart = u, s.liveVerifies = 0), s.liveVerifies >= zr || (s.liveVerifies++, !ee(a) || !Qt(a, s.filter)))
+          return;
+        Gr(s.seenIds, a.id), s.onEvent(a);
+        return;
+      }
+      const l = Math.min(s.filter.limit ?? Xe, Xe);
+      if (s.events.length >= l || s.verifyBudget <= 0 || (s.verifyBudget--, !ee(a) || !Qt(a, s.filter)))
+        return;
+      s.seenIds.add(a.id), s.events.push(a);
       return;
     }
     if (r === "EOSE") {
@@ -137,10 +170,10 @@ class Kr {
       return;
     }
     if (r === "OK") {
-      const [i, a, c] = o;
-      if (typeof i != "string" || typeof a != "boolean" || c !== void 0 && typeof c != "string")
+      const [i, a, s] = o;
+      if (typeof i != "string" || typeof a != "boolean" || s !== void 0 && typeof s != "string")
         return;
-      this.pendingPublishes.get(i)?.({ ok: a, message: c ?? "" }), this.pendingPublishes.delete(i);
+      this.pendingPublishes.get(i)?.({ ok: a, message: s ?? "" }), this.pendingPublishes.delete(i);
       return;
     }
     if (r === "AUTH") {
@@ -154,10 +187,10 @@ class Kr {
   async respondToAuthChallenge(t) {
     if (!this.authPrivateKey)
       return;
-    const n = k(this.authPrivateKey), r = ne({
+    const n = _(this.authPrivateKey), r = X({
       pubkey: n,
       created_at: Math.floor(Date.now() / 1e3),
-      kind: tr,
+      kind: wr,
       tags: [
         ["relay", this.url],
         ["challenge", t]
@@ -179,48 +212,91 @@ class Kr {
       }), this.send(["EVENT", t]);
     });
   }
+  /**
+   * Opens a subscription that stays live past EOSE: every verified,
+   * filter-matching event is delivered to `onEvent` as it arrives, until the
+   * returned handle is closed. Survives socket drops -- connect() re-issues
+   * REQ for all open subscriptions on reopen -- though events published while
+   * the socket was down are only seen if the relay replays them on the new REQ.
+   */
+  async subscribeLive(t, n) {
+    await this.connect();
+    const r = Ue(oe(8));
+    return this.subs.set(r, {
+      events: [],
+      seenIds: /* @__PURE__ */ new Set(),
+      verifyBudget: Number.POSITIVE_INFINITY,
+      liveWindowStart: Date.now(),
+      liveVerifies: 0,
+      filter: t,
+      onEose: () => {
+      },
+      onEvent: n
+    }), this.send(["REQ", r, t]), {
+      close: () => {
+        if (this.subs.delete(r))
+          try {
+            this.send(["CLOSE", r]);
+          } catch {
+          }
+      }
+    };
+  }
   async queryOnce(t, n = 8e3) {
     await this.connect();
-    const r = er(be(8));
+    const r = Ue(oe(8));
     return new Promise((o, i) => {
-      const a = [], c = (l) => {
-        clearTimeout(s), this.subs.delete(r), this.send(["CLOSE", r]), l ? i(l) : o(a);
-      }, s = setTimeout(() => c(new Error("relay did not answer the subscription before the timeout")), n);
-      this.subs.set(r, { events: a, filter: t, onEose: () => c() }), this.send(["REQ", r, t]);
+      const a = [], s = (l) => {
+        clearTimeout(c), this.subs.delete(r);
+        try {
+          this.send(["CLOSE", r]);
+        } catch {
+        }
+        l ? i(l) : o(a);
+      }, c = setTimeout(() => s(new Error("relay did not answer the subscription before the timeout")), n);
+      this.subs.set(r, {
+        events: a,
+        seenIds: /* @__PURE__ */ new Set(),
+        verifyBudget: jr(t),
+        liveWindowStart: 0,
+        liveVerifies: 0,
+        filter: t,
+        onEose: () => s()
+      }), this.send(["REQ", r, t]);
     });
   }
 }
-function Rr(e, t) {
+function Qt(e, t) {
   if (t.ids && !t.ids.some((n) => e.id.startsWith(n)) || t.authors && !t.authors.some((n) => e.pubkey.startsWith(n)) || t.kinds && !t.kinds.includes(e.kind) || t.since !== void 0 && e.created_at < t.since || t.until !== void 0 && e.created_at > t.until)
     return !1;
   for (const [n, r] of Object.entries(t)) {
     if (!n.startsWith("#") || !Array.isArray(r))
       continue;
     const o = n.slice(1), i = r;
-    if (!e.tags.some((a) => a[0] === o && i.some((c) => c === (a[1] ?? ""))))
+    if (!e.tags.some((a) => a[0] === o && i.some((s) => s === (a[1] ?? ""))))
       return !1;
   }
   return !0;
 }
-class C {
+class x {
   connections = /* @__PURE__ */ new Map();
   constructor(t, n = {}) {
     for (const r of new Set(t))
-      this.connections.set(r, new Kr(r, n));
+      this.connections.set(r, new Lt(r, n));
   }
   get relayUrls() {
     return [...this.connections.keys()];
   }
   /** Queries every configured relay and waits for a quorum of responses (or all timeouts) before returning (§16.2). */
   async queryQuorum(t, n = 8e3) {
-    const r = [...this.connections.entries()], o = await Promise.all(r.map(async ([c, s]) => {
+    const r = [...this.connections.entries()], o = await Promise.all(r.map(async ([s, c]) => {
       try {
-        const l = await s.queryOnce(t, n);
-        return { relayUrl: c, events: l, responded: !0 };
+        const l = await c.queryOnce(t, n);
+        return { relayUrl: s, events: l, responded: !0 };
       } catch (l) {
-        return { relayUrl: c, events: [], responded: !1, error: l.message };
+        return { relayUrl: s, events: [], responded: !1, error: l.message };
       }
-    })), i = o.filter((c) => c.responded).length, a = o.length;
+    })), i = o.filter((s) => s.responded).length, a = o.length;
     return {
       outcomes: o,
       quorumMet: i >= Math.ceil(a / 2),
@@ -245,134 +321,134 @@ class C {
       t.close();
   }
 }
-function ye(e) {
+function pe(e) {
   return e.filter((t) => t.result.ok).length;
 }
-function Ar(e, t, n) {
-  return ne({ pubkey: k(e), created_at: n, kind: Yt, tags: [], content: JSON.stringify(t) }, e);
+function Fr(e, t, n) {
+  return X({ pubkey: _(e), created_at: n, kind: pn, tags: [], content: JSON.stringify(t) }, e);
 }
-function xr(e, t, n) {
+function Hr(e, t, n) {
   const r = t.map((o) => {
     const i = ["r", o.url];
     return o.read && !o.write && i.push("read"), o.write && !o.read && i.push("write"), i;
   });
-  return ne({ pubkey: k(e), created_at: n, kind: yt, tags: r, content: "" }, e);
+  return X({ pubkey: _(e), created_at: n, kind: Et, tags: r, content: "" }, e);
 }
-function Cr(e, t, n) {
-  return ne({
-    pubkey: k(e),
+function Jr(e, t, n) {
+  return X({
+    pubkey: _(e),
     created_at: n,
-    kind: ht,
+    kind: Pt,
     tags: t.map((r) => ["relay", r]),
     content: ""
   }, e);
 }
-function Nr(e) {
+function Xr(e) {
   return e.tags.filter((t) => t[0] === "r" && t[1]).map((t) => t[1]);
 }
-function Sr(e) {
+function Yr(e) {
   return e.tags.filter((t) => t[0] === "relay" && t[1]).map((t) => t[1]);
 }
-async function Ir(e) {
-  const t = k(e.everydayPrivateKey), n = Math.floor(Date.now() / 1e3), r = [.../* @__PURE__ */ new Set([...e.generalRelays, ...e.dmRelays, ...e.discoveryRelays])], o = new C(r), [i, a, c] = await Promise.all([
-    o.queryQuorum({ authors: [t], kinds: [Yt] }),
-    o.queryQuorum({ authors: [t], kinds: [yt] }),
-    o.queryQuorum({ authors: [t], kinds: [ht] })
+async function Qr(e) {
+  const t = _(e.everydayPrivateKey), n = Math.floor(Date.now() / 1e3), r = [.../* @__PURE__ */ new Set([...e.generalRelays, ...e.dmRelays, ...e.discoveryRelays])], o = new x(r), [i, a, s] = await Promise.all([
+    o.queryQuorum({ authors: [t], kinds: [pn] }),
+    o.queryQuorum({ authors: [t], kinds: [Et] }),
+    o.queryQuorum({ authors: [t], kinds: [Pt] })
   ]);
   o.closeAll();
-  const s = i.outcomes.some((p) => p.events.length > 0), l = a.outcomes.some((p) => p.events.length > 0), u = c.outcomes.some((p) => p.events.length > 0), y = new C(r);
-  let v = null, w = null, g = null;
+  const c = i.outcomes.some((p) => p.events.length > 0), l = a.outcomes.some((p) => p.events.length > 0), u = s.outcomes.some((p) => p.events.length > 0), y = new x(r);
+  let w = null, v = null, g = null;
   const f = [];
-  if (!s && (e.name || e.about || e.picture)) {
-    const p = Ar(e.everydayPrivateKey, { name: e.name, about: e.about, picture: e.picture }, n);
-    f.push(y.publishAll(p).then((h) => void (v = h)));
-  }
-  if (!l) {
-    const p = xr(e.everydayPrivateKey, e.generalRelays.map((h) => ({ url: h, read: !0, write: !0 })), n);
+  if (!c && (e.name || e.about || e.picture)) {
+    const p = Fr(e.everydayPrivateKey, { name: e.name, about: e.about, picture: e.picture }, n);
     f.push(y.publishAll(p).then((h) => void (w = h)));
   }
+  if (!l) {
+    const p = Hr(e.everydayPrivateKey, e.generalRelays.map((h) => ({ url: h, read: !0, write: !0 })), n);
+    f.push(y.publishAll(p).then((h) => void (v = h)));
+  }
   if (!u) {
-    const p = Cr(e.everydayPrivateKey, e.dmRelays, n);
+    const p = Jr(e.everydayPrivateKey, e.dmRelays, n);
     f.push(y.publishAll(p).then((h) => void (g = h)));
   }
   return await Promise.all(f), y.closeAll(), {
-    profilePublished: v !== null && ye(v) > 0,
-    relayListAcknowledgedCount: w !== null ? ye(w) : 0,
-    dmRelayListAcknowledgedCount: g !== null ? ye(g) : 0,
-    profileSkippedExisting: s,
+    profilePublished: w !== null && pe(w) > 0,
+    relayListAcknowledgedCount: v !== null ? pe(v) : 0,
+    dmRelayListAcknowledgedCount: g !== null ? pe(g) : 0,
+    profileSkippedExisting: c,
     relayListSkippedExisting: l,
     dmRelayListSkippedExisting: u
   };
 }
-async function ke(e, t, n) {
-  const r = n.minAcks ?? 2, o = n.minReadbacks ?? 2, i = await e.publishAll(t, n.timeoutMs), a = ye(i), s = (await e.queryQuorum({ kinds: [re], authors: [t.pubkey], "#d": [n.dTag], limit: 5 }, n.timeoutMs)).outcomes.filter((l) => l.events.some((u) => u.id === t.id)).length;
+async function Ke(e, t, n) {
+  const r = n.minAcks ?? 2, o = n.minReadbacks ?? 2, i = await e.publishAll(t, n.timeoutMs), a = pe(i), c = (await e.queryQuorum({ kinds: [ie], authors: [t.pubkey], "#d": [n.dTag], limit: 5 }, n.timeoutMs)).outcomes.filter((l) => l.events.some((u) => u.id === t.id)).length;
   return {
     acknowledgedCount: a,
-    readbackVerifiedCount: s,
-    success: a >= r && s >= o
+    readbackVerifiedCount: c,
+    success: a >= r && c >= o
   };
 }
-function Tr(e) {
-  const t = nr(e);
+function Zr(e) {
+  const t = br(e);
   if (t === void 0)
     throw new Error("Value is not JSON-serializable for canonicalization.");
   return t;
 }
-function Lr(e) {
-  return Y(Tr(e));
+function eo(e) {
+  return Y(Zr(e));
 }
-const qe = [1024, 2048, 4096], pe = 4;
-function Or(e) {
-  const t = pe + e.length, n = qe.find((i) => i >= t);
+const Fe = [1024, 2048, 4096], ve = 4;
+function to(e) {
+  const t = ve + e.length, n = Fe.find((i) => i >= t);
   if (n === void 0)
-    throw new Error(`Payload of ${e.length} bytes exceeds the largest padding bucket (${qe[qe.length - 1]} bytes minus ${pe}-byte length prefix).`);
+    throw new Error(`Payload of ${e.length} bytes exceeds the largest padding bucket (${Fe[Fe.length - 1]} bytes minus ${ve}-byte length prefix).`);
   const r = new Uint8Array(n);
-  return new DataView(r.buffer).setUint32(0, e.length, !1), r.set(e, pe), r;
+  return new DataView(r.buffer).setUint32(0, e.length, !1), r.set(e, ve), r;
 }
-function Mr(e) {
-  if (!qe.includes(e.length))
+function no(e) {
+  if (!Fe.includes(e.length))
     throw new Error(`Padded plaintext length ${e.length} does not match a known bucket.`);
   const n = new DataView(e.buffer, e.byteOffset, e.byteLength).getUint32(0, !1);
-  if (n > e.length - pe)
+  if (n > e.length - ve)
     throw new Error("Declared payload length exceeds the padded bucket size.");
-  const r = e.slice(pe, pe + n), o = e.slice(pe + n);
+  const r = e.slice(ve, ve + n), o = e.slice(ve + n);
   for (const i of o)
     if (i !== 0)
       throw new Error("Padding bytes are not all zero; capsule plaintext is malformed.");
   return r;
 }
-function Et() {
+function Ut() {
   const e = globalThis.crypto;
   if (!e || !e.subtle)
     throw new Error("WebCrypto SubtleCrypto is not available in this environment.");
   return e;
 }
-async function rn(e) {
+async function kn(e) {
   if (e.length !== 32)
     throw new Error("AES-256-GCM key must be exactly 32 bytes.");
-  return Et().subtle.importKey("raw", e, "AES-GCM", !1, ["encrypt", "decrypt"]);
+  return Ut().subtle.importKey("raw", e, "AES-GCM", !1, ["encrypt", "decrypt"]);
 }
-async function on(e, t, n) {
-  const r = rr(), o = await rn(e), i = await Et().subtle.encrypt({ name: "AES-GCM", iv: r, additionalData: n, tagLength: 128 }, o, t);
+async function _n(e, t, n) {
+  const r = mr(), o = await kn(e), i = await Ut().subtle.encrypt({ name: "AES-GCM", iv: r, additionalData: n, tagLength: 128 }, o, t);
   return { nonce: r, ciphertext: new Uint8Array(i) };
 }
-async function an(e, t, n, r) {
-  const o = await rn(e);
+async function En(e, t, n, r) {
+  const o = await kn(e);
   try {
-    const i = await Et().subtle.decrypt({ name: "AES-GCM", iv: t, additionalData: r, tagLength: 128 }, o, n);
+    const i = await Ut().subtle.decrypt({ name: "AES-GCM", iv: t, additionalData: r, tagLength: 128 }, o, n);
     return new Uint8Array(i);
   } catch {
     throw new Error("AES-256-GCM authentication failed: capsule is corrupted, tampered, or the wrong key was used.");
   }
 }
-function cn(e) {
+function Pn(e) {
   return Y(`bitlogin|password-capsule|v1|${e}|30078|bitlogin:password:v1`);
 }
-function sn(e) {
+function Kn(e) {
   return Y(`bitlogin|recovery-capsule|v1|${e}|30078|bitlogin:recovery:v1`);
 }
-async function Pt(e, t, n) {
-  const r = Lr(e), o = Or(r), i = await on(t, o, n);
+async function Mt(e, t, n) {
+  const r = eo(e), o = to(r), i = await _n(t, o, n);
   return {
     version: 1,
     algorithm: "aes-256-gcm",
@@ -380,77 +456,77 @@ async function Pt(e, t, n) {
     ciphertext: V(i.ciphertext)
   };
 }
-async function Kt(e, t, n) {
+async function Ot(e, t, n) {
   if (e.version !== 1 || e.algorithm !== "aes-256-gcm")
     throw new Error(`Unsupported capsule envelope version/algorithm: ${e.version}/${e.algorithm}`);
-  const r = X(e.nonce), o = X(e.ciphertext), i = await an(t, r, o, n), a = Mr(i);
-  return JSON.parse(Ge(a));
+  const r = Q(e.nonce), o = Q(e.ciphertext), i = await En(t, r, o, n), a = no(i);
+  return JSON.parse(tt(a));
 }
-class Rt extends Error {
+class Dt extends Error {
   constructor(t) {
     super(t), this.name = "CapsuleValidationError";
   }
 }
-const Ur = 1e6, Dr = /^[0-9a-f]{64}$/u;
-function E(e, t) {
+const ro = 1e6, oo = /^[0-9a-f]{64}$/u;
+function P(e, t) {
   if (!e)
-    throw new Rt(t);
+    throw new Dt(t);
 }
-function $e(e) {
-  return typeof e == "string" && Dr.test(e);
+function Ye(e) {
+  return typeof e == "string" && oo.test(e);
 }
-function ln(e) {
-  E(Array.isArray(e), "vault_relay_hints must be an array (§12.4.7).");
+function Rn(e) {
+  P(Array.isArray(e), "vault_relay_hints must be an array (§12.4.7).");
   for (const t of e)
-    E(typeof t == "string", "Each relay hint must be a string (§12.4.7)."), E(Ye(t), `Relay URL must use secure WebSockets, except for an explicit loopback development endpoint (§12.4.7): ${t}`);
+    P(typeof t == "string", "Each relay hint must be a string (§12.4.7)."), P(it(t), `Relay URL must use secure WebSockets, except for an explicit loopback development endpoint (§12.4.7): ${t}`);
 }
-function un(e) {
-  E(typeof e == "string", "account_id must be a string (§12.4.2).");
+function An(e) {
+  P(typeof e == "string", "account_id must be a string (§12.4.2).");
   let t;
   try {
-    t = X(e);
+    t = Q(e);
   } catch {
-    throw new Rt("account_id is not valid base64url (§12.4.2).");
+    throw new Dt("account_id is not valid base64url (§12.4.2).");
   }
-  E(t.length === 16, "account_id must decode to exactly 128 bits (§12.4.2).");
+  P(t.length === 16, "account_id must decode to exactly 128 bits (§12.4.2).");
 }
-function dn(e, t) {
-  E(typeof e == "string", "operational_private_key must be a string (§12.4.3).");
-  const n = X(e);
-  E(n.length === 32, "operational_private_key must be exactly 32 bytes (§12.4.3)."), E(ft(n), "operational_private_key is not a valid secp256k1 scalar (§12.4.3)."), E($e(t), "operational_public_key must be lowercase 64-char hex (§12.4.4).");
-  const r = k(n);
-  E(r === t, "operational_public_key does not match the derived public key (§12.4.4).");
+function Nn(e, t) {
+  P(typeof e == "string", "operational_private_key must be a string (§12.4.3).");
+  const n = Q(e);
+  P(n.length === 32, "operational_private_key must be exactly 32 bytes (§12.4.3)."), P(Rt(n), "operational_private_key is not a valid secp256k1 scalar (§12.4.3)."), P(Ye(t), "operational_public_key must be lowercase 64-char hex (§12.4.4).");
+  const r = _(n);
+  P(r === t, "operational_public_key does not match the derived public key (§12.4.4).");
 }
-function ze(e, t) {
-  E(typeof t == "string", `${e} must be a string (§CV5.2).`);
+function Qe(e, t) {
+  P(typeof t == "string", `${e} must be a string (§CV5.2).`);
   let n;
   try {
-    n = X(t);
+    n = Q(t);
   } catch {
-    throw new Rt(`${e} is not valid base64url (§CV5.2).`);
+    throw new Dt(`${e} is not valid base64url (§CV5.2).`);
   }
-  E(n.length === 32, `${e} must decode to exactly 32 bytes (§CV5.2).`);
+  P(n.length === 32, `${e} must decode to exactly 32 bytes (§CV5.2).`);
 }
-function Vr(e) {
+function io(e) {
   const t = e.connection_vault_root, n = e.vault_sudo_key;
-  t === void 0 && n === void 0 || (E(t !== void 0 && n !== void 0, "connection_vault_root and vault_sudo_key must appear together (§CV5.2)."), ze("connection_vault_root", t), ze("vault_sudo_key", n));
+  t === void 0 && n === void 0 || (P(t !== void 0 && n !== void 0, "connection_vault_root and vault_sudo_key must appear together (§CV5.2)."), Qe("connection_vault_root", t), Qe("vault_sudo_key", n));
 }
-function qr(e) {
+function ao(e) {
   const t = e.connection_vault_root, n = e.vault_sudo_key;
-  t === void 0 && n === void 0 || (E(t !== void 0, "vault_sudo_key cannot appear without connection_vault_root (§CV5.2)."), ze("connection_vault_root", t), n !== void 0 && ze("vault_sudo_key", n));
+  t === void 0 && n === void 0 || (P(t !== void 0, "vault_sudo_key cannot appear without connection_vault_root (§CV5.2)."), Qe("connection_vault_root", t), n !== void 0 && Qe("vault_sudo_key", n));
 }
-function yn(e, t) {
-  E(Number.isInteger(e) && e >= 0 && e <= Ur, `${t} is out of supported bounds (§12.4.8).`);
+function xn(e, t) {
+  P(Number.isInteger(e) && e >= 0 && e <= ro, `${t} is out of supported bounds (§12.4.8).`);
 }
-function jr(e) {
-  E(e.schema === Fe, `Unsupported or unknown schema: ${String(e.schema)} (§12.4.1)`), un(e.account_id), yn(e.generation, "generation"), dn(e.operational_private_key, e.operational_public_key), E($e(e.recovery_public_key), "recovery_public_key must be lowercase 64-char hex (§12.4.5)."), ln(e.vault_relay_hints), qr(e);
+function so(e) {
+  P(e.schema === nt, `Unsupported or unknown schema: ${String(e.schema)} (§12.4.1)`), An(e.account_id), xn(e.generation, "generation"), Nn(e.operational_private_key, e.operational_public_key), P(Ye(e.recovery_public_key), "recovery_public_key must be lowercase 64-char hex (§12.4.5)."), Rn(e.vault_relay_hints), ao(e);
   const t = e.recovery_capsule_event;
-  E(!!t && typeof t == "object", "recovery_capsule_event must be present (§12.4.6)."), E(ae(t), "Embedded recovery_capsule_event has an invalid event id or signature (§12.4.6)."), E(t.pubkey === e.recovery_public_key, "Embedded recovery_capsule_event author does not match recovery_public_key (§12.4.5).");
+  P(!!t && typeof t == "object", "recovery_capsule_event must be present (§12.4.6)."), P(ee(t), "Embedded recovery_capsule_event has an invalid event id or signature (§12.4.6)."), P(t.pubkey === e.recovery_public_key, "Embedded recovery_capsule_event author does not match recovery_public_key (§12.4.5).");
 }
-function Wr(e) {
-  E(e.schema === pt, `Unsupported or unknown schema: ${String(e.schema)} (§12.4.1)`), un(e.account_id), yn(e.recovery_generation, "recovery_generation"), E(e.previous_recovery_event_id === null || $e(e.previous_recovery_event_id), "previous_recovery_event_id must be null or lowercase 64-char hex (§12.3)."), dn(e.operational_private_key, e.operational_public_key), E($e(e.recovery_public_key), "recovery_public_key must be lowercase 64-char hex."), ln(e.vault_relay_hints), Vr(e);
+function co(e) {
+  P(e.schema === Kt, `Unsupported or unknown schema: ${String(e.schema)} (§12.4.1)`), An(e.account_id), xn(e.recovery_generation, "recovery_generation"), P(e.previous_recovery_event_id === null || Ye(e.previous_recovery_event_id), "previous_recovery_event_id must be null or lowercase 64-char hex (§12.3)."), Nn(e.operational_private_key, e.operational_public_key), P(Ye(e.recovery_public_key), "recovery_public_key must be lowercase 64-char hex."), Rn(e.vault_relay_hints), io(e);
 }
-function $r(e) {
+function lo(e) {
   const t = /* @__PURE__ */ new Map();
   for (const r of e) {
     const o = t.get(r.recoveryGeneration);
@@ -483,102 +559,102 @@ function $r(e) {
   }
   return { consistent: !0 };
 }
-async function At(e) {
-  const t = k(e.locatorPrivateKey), n = await Pt(e.payload, e.capsuleKey, cn(t));
-  return ne({
+async function Vt(e) {
+  const t = _(e.locatorPrivateKey), n = await Mt(e.payload, e.capsuleKey, Pn(t));
+  return X({
     pubkey: t,
     created_at: e.payload.created_at,
-    kind: re,
-    tags: [["d", Ee]],
+    kind: ie,
+    tags: [["d", Re]],
     content: JSON.stringify(n)
   }, e.locatorPrivateKey);
 }
-function zr(e) {
-  const t = k(e.oldLocatorPrivateKey);
-  return ne({
+function uo(e) {
+  const t = _(e.oldLocatorPrivateKey);
+  return X({
     pubkey: t,
     created_at: e.createdAt,
-    kind: re,
-    tags: [["d", Ee]],
+    kind: ie,
+    tags: [["d", Re]],
     content: ""
   }, e.oldLocatorPrivateKey);
 }
-async function Br(e, t) {
-  if (!ae(e))
+async function yo(e, t) {
+  if (!ee(e))
     throw new Error("Credential capsule event has an invalid id or signature.");
-  const n = JSON.parse(e.content), r = await Kt(n, t, cn(e.pubkey));
-  return jr(r), r;
+  const n = JSON.parse(e.content), r = await Ot(n, t, Pn(e.pubkey));
+  return so(r), r;
 }
-async function hn(e) {
-  const t = k(e.recoveryPrivateKey), n = await Pt(e.payload, e.capsuleKey, sn(t));
-  return ne({
+async function Cn(e) {
+  const t = _(e.recoveryPrivateKey), n = await Mt(e.payload, e.capsuleKey, Kn(t));
+  return X({
     pubkey: t,
     created_at: e.payload.created_at,
-    kind: re,
-    tags: [["d", He]],
+    kind: ie,
+    tags: [["d", rt]],
     content: JSON.stringify(n)
   }, e.recoveryPrivateKey);
 }
-async function pn(e, t) {
-  if (!ae(e))
+async function Sn(e, t) {
+  if (!ee(e))
     throw new Error("Recovery capsule event has an invalid id or signature.");
-  const n = JSON.parse(e.content), r = await Kt(n, t, sn(e.pubkey));
-  return Wr(r), r;
+  const n = JSON.parse(e.content), r = await Ot(n, t, Kn(e.pubkey));
+  return co(r), r;
 }
-function Dt(e, t, n) {
+function Zt(e, t, n) {
   const r = /* @__PURE__ */ new Map();
   for (const o of e)
-    o.pubkey === t && o.kind === re && vt(o, "d") === n && ae(o) && r.set(o.id, o);
+    o.pubkey === t && o.kind === ie && At(o, "d") === n && ee(o) && r.set(o.id, o);
   return [...r.values()].sort((o, i) => i.created_at - o.created_at);
 }
-async function fn(e, t, n, r, o) {
-  const i = await e.queryQuorum({ kinds: [re], authors: [t], "#d": [n], limit: 5 }, o), a = i.outcomes.flatMap((v) => v.events), c = Dt(a, t, n), s = [];
-  for (const v of c)
+async function In(e, t, n, r, o) {
+  const i = await e.queryQuorum({ kinds: [ie], authors: [t], "#d": [n], limit: 5 }, o), a = i.outcomes.flatMap((w) => w.events), s = Zt(a, t, n), c = [];
+  for (const w of s)
     try {
-      const w = await r(v);
-      s.push({ event: v, payload: w });
-    } catch (w) {
-      s.push({ event: v, payload: null, error: w.message });
+      const v = await r(w);
+      c.push({ event: w, payload: v });
+    } catch (v) {
+      c.push({ event: w, payload: null, error: v.message });
     }
-  const l = s.find((v) => v.payload !== null) ?? null, u = i.outcomes.map((v) => ({
-    responded: v.responded,
-    events: Dt(v.events, t, n)
-  })).filter((v) => v.responded && v.events.length > 0).map((v) => v.events[0].id), y = new Set(u).size > 1;
+  const l = c.find((w) => w.payload !== null) ?? null, u = i.outcomes.map((w) => ({
+    responded: w.responded,
+    events: Zt(w.events, t, n)
+  })).filter((w) => w.responded && w.events.length > 0).map((w) => w.events[0].id), y = new Set(u).size > 1;
   return {
     quorumMet: i.quorumMet,
     respondedCount: i.respondedCount,
     totalCount: i.totalCount,
-    candidates: s,
+    candidates: c,
     best: l,
     relayDisagreement: y
   };
 }
-async function Ie(e, t, n, r = 8e3) {
-  return fn(e, t, Ee, (o) => Br(o, n), r);
+async function Oe(e, t, n, r = 8e3) {
+  return In(e, t, Re, (o) => yo(o, n), r);
 }
-async function Gr(e, t, n, r = 8e3) {
-  return fn(e, t, He, (o) => pn(o, n), r);
+async function ho(e, t, n, r = 8e3) {
+  return In(e, t, rt, (o) => Sn(o, n), r);
 }
-function Fr(e) {
+function po(e) {
   const t = e.filter((n) => n.payload !== null);
-  return t.length < 2 ? { consistent: !0 } : $r(t.map((n) => ({
+  return t.length < 2 ? { consistent: !0 } : lo(t.map((n) => ({
     eventId: n.event.id,
     recoveryGeneration: n.payload.recovery_generation,
     previousRecoveryEventId: n.payload.previous_recovery_event_id
   })));
 }
-async function Hr(e, t, n, r) {
+async function fo(e, t, n, r) {
   const [o, i] = await Promise.all([
     e.publishAll(t, r),
     e.publishAll(n, r)
   ]);
   return {
-    credentialAcknowledgedCount: ye(o),
-    recoveryAcknowledgedCount: ye(i),
+    credentialAcknowledgedCount: pe(o),
+    recoveryAcknowledgedCount: pe(i),
     relaysTried: e.relayUrls.length
   };
 }
-const vn = `abandon
+const Tn = `abandon
 ability
 able
 about
@@ -2627,132 +2703,132 @@ zero
 zone
 zoo`.split(`
 `);
-function Jr(e, t, n, r) {
-  ar(e);
-  const o = cr({ dkLen: 32, asyncTick: 10 }, r), { c: i, dkLen: a, asyncTick: c } = o;
-  if (Qe(i), Qe(a), Qe(c), i < 1)
+function vo(e, t, n, r) {
+  Er(e);
+  const o = Pr({ dkLen: 32, asyncTick: 10 }, r), { c: i, dkLen: a, asyncTick: s } = o;
+  if (st(i), st(a), st(s), i < 1)
     throw new Error("iterations (c) should be >= 1");
-  const s = Mt(t), l = Mt(n), u = new Uint8Array(a), y = gt.create(e, s), v = y._cloneInto().update(l);
-  return { c: i, dkLen: a, asyncTick: c, DK: u, PRF: y, PRFSalt: v };
+  const c = Xt(t), l = Xt(n), u = new Uint8Array(a), y = Nt.create(e, c), w = y._cloneInto().update(l);
+  return { c: i, dkLen: a, asyncTick: s, DK: u, PRF: y, PRFSalt: w };
 }
-function Yr(e, t, n, r, o) {
-  return e.destroy(), t.destroy(), r && r.destroy(), sr(o), n;
+function go(e, t, n, r, o) {
+  return e.destroy(), t.destroy(), r && r.destroy(), Kr(o), n;
 }
-async function Xr(e, t, n, r) {
-  const { c: o, dkLen: i, asyncTick: a, DK: c, PRF: s, PRFSalt: l } = Jr(e, t, n, r);
+async function wo(e, t, n, r) {
+  const { c: o, dkLen: i, asyncTick: a, DK: s, PRF: c, PRFSalt: l } = vo(e, t, n, r);
   let u;
-  const y = new Uint8Array(4), v = or(y), w = new Uint8Array(s.outputLen);
-  for (let g = 1, f = 0; f < i; g++, f += s.outputLen) {
-    const p = c.subarray(f, f + s.outputLen);
-    v.setInt32(0, g, !1), (u = l._cloneInto(u)).update(y).digestInto(w), p.set(w.subarray(0, p.length)), await ir(o - 1, a, () => {
-      s._cloneInto(u).update(w).digestInto(w);
+  const y = new Uint8Array(4), w = kr(y), v = new Uint8Array(c.outputLen);
+  for (let g = 1, f = 0; f < i; g++, f += c.outputLen) {
+    const p = s.subarray(f, f + c.outputLen);
+    w.setInt32(0, g, !1), (u = l._cloneInto(u)).update(y).digestInto(v), p.set(v.subarray(0, p.length)), await _r(o - 1, a, () => {
+      c._cloneInto(u).update(v).digestInto(v);
       for (let h = 0; h < p.length; h++)
-        p[h] ^= w[h];
+        p[h] ^= v[h];
     });
   }
-  return Yr(s, l, c, u, w);
+  return go(c, l, s, u, v);
 }
 /*! scure-bip39 - MIT License (c) 2022 Patricio Palladino, Paul Miller (paulmillr.com) */
-const Qr = (e) => e[0] === "あいこくしん";
-function gn(e) {
+const bo = (e) => e[0] === "あいこくしん";
+function Ln(e) {
   if (typeof e != "string")
     throw new TypeError("invalid mnemonic type: " + typeof e);
   return e.normalize("NFKD");
 }
-function wn(e) {
-  const t = gn(e), n = t.split(" ");
+function Un(e) {
+  const t = Ln(e), n = t.split(" ");
   if (![12, 15, 18, 21, 24].includes(n.length))
     throw new Error("Invalid mnemonic");
   return { nfkd: t, words: n };
 }
-function bn(e) {
-  ur(e, 16, 20, 24, 28, 32);
+function Mn(e) {
+  Ar(e, 16, 20, 24, 28, 32);
 }
-const Zr = (e) => {
+const mo = (e) => {
   const t = 8 - e.length / 4;
-  return new Uint8Array([wt(e)[0] >> t << t]);
+  return new Uint8Array([xt(e)[0] >> t << t]);
 };
-function mn(e) {
+function On(e) {
   if (!Array.isArray(e) || e.length !== 2048 || typeof e[0] != "string")
     throw new Error("Wordlist: expected array of 2048 strings");
   return e.forEach((t) => {
     if (typeof t != "string")
       throw new Error("wordlist: non-string element: " + t);
-  }), Ue.chain(Ue.checksum(1, Zr), Ue.radix2(11, !0), Ue.alphabet(e));
+  }), je.chain(je.checksum(1, mo), je.radix2(11, !0), je.alphabet(e));
 }
-function eo(e, t) {
-  const { words: n } = wn(e), r = mn(t).decode(n);
-  return bn(r), r;
+function ko(e, t) {
+  const { words: n } = Un(e), r = On(t).decode(n);
+  return Mn(r), r;
 }
-function to(e, t) {
-  return bn(e), mn(t).encode(e).join(Qr(t) ? "　" : " ");
+function _o(e, t) {
+  return Mn(e), On(t).encode(e).join(bo(t) ? "　" : " ");
 }
-function no(e, t) {
+function Eo(e, t) {
   try {
-    eo(e, t);
+    ko(e, t);
   } catch {
     return !1;
   }
   return !0;
 }
-const ro = (e) => gn("mnemonic" + e);
-function oo(e, t = "") {
-  return Xr(lr, wn(e).nfkd, ro(t), { c: 2048, dkLen: 64 });
+const Po = (e) => Ln("mnemonic" + e);
+function Ko(e, t = "") {
+  return wo(Rr, Un(e).nfkd, Po(t), { c: 2048, dkLen: 64 });
 }
-function io(e) {
+function Ro(e) {
   if (e.length !== 16)
     throw new Error("Recovery phrase entropy must be exactly 128 bits (16 bytes).");
-  return to(e, vn);
+  return _o(e, Tn);
 }
-function ao(e) {
+function Ao(e) {
   try {
-    return no(_n(e), vn);
+    return Eo(Dn(e), Tn);
   } catch {
     return !1;
   }
 }
-function _n(e) {
+function Dn(e) {
   return e.trim().normalize("NFKD").split(/\s+/u).join(" ");
 }
-async function kn(e) {
-  return oo(_n(e), "");
+async function Vn(e) {
+  return Ko(Dn(e), "");
 }
-const xt = dr.id, Te = "aes-256-gcm-v1", Le = "bitlogin-bip39-hkdf-v1";
-async function En(e) {
-  const t = Je(e.loginName), n = e.now ?? Math.floor(Date.now() / 1e3), { locatorPrivateKey: r, capsuleKey: o } = await Se(e.password, t);
+const qt = Nr.id, De = "aes-256-gcm-v1", Ve = "bitlogin-bip39-hkdf-v1";
+async function qn(e) {
+  const t = ot(e.loginName), n = e.now ?? Math.floor(Date.now() / 1e3), { locatorPrivateKey: r, capsuleKey: o } = await Me(e.password, t);
   try {
-    const i = k(r), a = new C(e.vaultRelayUrls, {
+    const i = _(r), a = new x(e.vaultRelayUrls, {
       authPrivateKey: r
     });
-    let c;
+    let s;
     try {
-      c = await Ie(a, i, o, e.timeoutMs);
+      s = await Oe(a, i, o, e.timeoutMs);
     } finally {
       a.closeAll();
     }
-    if (!c.quorumMet)
-      throw new le("Couldn't verify this login name and password aren't already registered. Please retry, or add more vault relays.");
-    if (c.candidates.length > 0)
-      throw new en();
-    const s = e.everydayPrivateKey !== void 0;
-    if (s && !ft(e.everydayPrivateKey))
-      throw new le("The provided key is not a valid secp256k1 private key.");
-    const l = io(hr()), u = await kn(l);
-    let y, v;
+    if (!s.quorumMet)
+      throw new de("Couldn't verify this login name and password aren't already registered. Please retry, or add more vault relays.");
+    if (s.candidates.length > 0)
+      throw new wn();
+    const c = e.everydayPrivateKey !== void 0;
+    if (c && !Rt(e.everydayPrivateKey))
+      throw new de("The provided key is not a valid secp256k1 private key.");
+    const l = Ro(Cr()), u = await Vn(l);
+    let y, w;
     try {
-      ({ recoveryPrivateKey: y, capsuleKey: v } = Xt(u));
+      ({ recoveryPrivateKey: y, capsuleKey: w } = fn(u));
     } finally {
-      x(u);
+      E(u);
     }
-    const w = s ? e.everydayPrivateKey : pr(), g = be(32), f = be(32);
+    const v = c ? e.everydayPrivateKey : pt(), g = oe(32), f = oe(32);
     let p = !1;
     try {
-      const h = k(y), b = k(w), m = V(fr()), P = {
-        schema: pt,
+      const h = _(y), b = _(v), m = V(Sr()), K = {
+        schema: Kt,
         account_id: m,
         recovery_generation: 0,
         previous_recovery_event_id: null,
-        operational_private_key: V(w),
+        operational_private_key: V(v),
         operational_public_key: b,
         recovery_public_key: h,
         connection_vault_root: V(g),
@@ -2760,55 +2836,55 @@ async function En(e) {
         created_at: n,
         vault_relay_hints: e.vaultRelayUrls,
         protocol: {
-          capsule_encryption: Te,
-          recovery_derivation: Le
+          capsule_encryption: De,
+          recovery_derivation: Ve
         }
-      }, N = await hn({
+      }, C = await Cn({
         recoveryPrivateKey: y,
-        capsuleKey: v,
-        payload: P
-      }), K = new C(e.vaultRelayUrls, {
+        capsuleKey: w,
+        payload: K
+      }), R = new x(e.vaultRelayUrls, {
         authPrivateKey: y
       });
-      let R;
+      let A;
       try {
-        R = await ke(K, N, {
-          dTag: He,
+        A = await Ke(R, C, {
+          dTag: rt,
           minAcks: e.minAcknowledgements,
           timeoutMs: e.timeoutMs
         });
       } finally {
-        K.closeAll();
+        R.closeAll();
       }
-      if (!R.success)
-        throw new le("The recovery capsule did not reach the required relay acknowledgement and readback quorum. No login credential was published. Please retry, or add more vault relays.");
-      const A = {
-        schema: Fe,
+      if (!A.success)
+        throw new de("The recovery capsule did not reach the required relay acknowledgement and readback quorum. No login credential was published. Please retry, or add more vault relays.");
+      const N = {
+        schema: nt,
         account_id: m,
         generation: 0,
-        operational_private_key: V(w),
+        operational_private_key: V(v),
         operational_public_key: b,
         recovery_public_key: h,
-        recovery_capsule_event: N,
+        recovery_capsule_event: C,
         connection_vault_root: V(g),
         created_at: n,
         vault_relay_hints: e.vaultRelayUrls,
         protocol: {
-          password_kdf: xt,
-          capsule_encryption: Te,
-          recovery_derivation: Le
+          password_kdf: qt,
+          capsule_encryption: De,
+          recovery_derivation: Ve
         }
-      }, S = await At({
+      }, S = await Vt({
         locatorPrivateKey: r,
         capsuleKey: o,
-        payload: A
-      }), L = new C(e.vaultRelayUrls, {
+        payload: N
+      }), L = new x(e.vaultRelayUrls, {
         authPrivateKey: r
       });
       let I;
       try {
-        I = await ke(L, S, {
-          dTag: Ee,
+        I = await Ke(L, S, {
+          dTag: Re,
           minAcks: e.minAcknowledgements,
           timeoutMs: e.timeoutMs
         });
@@ -2816,48 +2892,48 @@ async function En(e) {
         L.closeAll();
       }
       if (!I.success)
-        throw new le("Registration did not reach the required credential acknowledgement and readback quorum. Please retry, or add more vault relays.");
+        throw new de("Registration did not reach the required credential acknowledgement and readback quorum. Please retry, or add more vault relays.");
       return p = !0, {
         normalizedLoginName: t,
         recoveryPhrase: l,
-        everydayPrivateKey: w,
+        everydayPrivateKey: v,
         everydayPublicKey: b,
         recoveryPublicKey: h,
         locatorPublicKey: i,
         accountId: m,
-        imported: s,
+        imported: c,
         connectionVaultRoot: g,
         vaultSudoKey: f,
         credentialEvent: S,
-        recoveryEvent: N,
+        recoveryEvent: C,
         credentialPublish: I,
-        recoveryPublish: R
+        recoveryPublish: A
       };
     } finally {
-      x(y, v), p || (s || x(w), x(g, f));
+      E(y, w), p || (c || E(v), E(g, f));
     }
   } finally {
-    x(r, o);
+    E(r, o);
   }
 }
-async function co(e) {
-  const { nsecOrHex: t, ...n } = e, r = Pn(t);
-  return En({ ...n, everydayPrivateKey: r });
+async function No(e) {
+  const { nsecOrHex: t, ...n } = e, r = Wn(t);
+  return qn({ ...n, everydayPrivateKey: r });
 }
-function Pn(e) {
+function Wn(e) {
   const t = e.trim();
   let n;
   if (t.startsWith("nsec1"))
-    n = yr(t);
+    n = xr(t);
   else if (/^[0-9a-fA-F]{64}$/u.test(t))
-    n = bt(t.toLowerCase());
+    n = Ct(t.toLowerCase());
   else
-    throw new le("Enter a valid nsec (nsec1…) or a 64-character hex private key.");
-  if (!ft(n))
-    throw new le("The provided key is not a valid secp256k1 private key.");
+    throw new de("Enter a valid nsec (nsec1…) or a 64-character hex private key.");
+  if (!Rt(n))
+    throw new de("The provided key is not a valid secp256k1 private key.");
   return n;
 }
-class Kn {
+class jn {
   map = /* @__PURE__ */ new Map();
   async get(t) {
     return this.map.get(t);
@@ -2869,77 +2945,77 @@ class Kn {
     this.map.delete(t);
   }
 }
-async function so(e) {
-  const t = Je(e.loginName), { locatorPrivateKey: n, capsuleKey: r } = await Se(e.password, t), o = k(n), i = new C(e.vaultRelayUrls, {
+async function xo(e) {
+  const t = ot(e.loginName), { locatorPrivateKey: n, capsuleKey: r } = await Me(e.password, t), o = _(n), i = new x(e.vaultRelayUrls, {
     authPrivateKey: n
   });
   try {
-    const a = await Ie(i, o, r, e.timeoutMs);
+    const a = await Oe(i, o, r, e.timeoutMs);
     if (!a.quorumMet)
-      throw new _e("quorum-not-met");
+      throw new Pe("quorum-not-met");
     if (!a.best)
-      throw new _e(a.candidates.length > 0 ? "no-valid-candidate" : "no-matching-event");
-    const c = a.best.payload, s = e.store ?? new Kn(), l = await kt(s, c.operational_public_key), u = c.generation < l.generation;
+      throw new Pe(a.candidates.length > 0 ? "no-valid-candidate" : "no-matching-event");
+    const s = a.best.payload, c = e.store ?? new jn(), l = await Tt(c, s.operational_public_key), u = s.generation < l.generation;
     if (u && !e.acknowledgeRollback)
-      throw new tn(l.generation, c.generation);
-    const y = u ? `This device previously saw credential generation ${l.generation}, but the accepted capsule is generation ${c.generation}. Relays may be serving stale data, or an old capsule is being replayed.` : void 0;
-    await nn(s, c.operational_public_key, {
-      generation: c.generation
+      throw new bn(l.generation, s.generation);
+    const y = u ? `This device previously saw credential generation ${l.generation}, but the accepted capsule is generation ${s.generation}. Relays may be serving stale data, or an old capsule is being replayed.` : void 0;
+    await mn(c, s.operational_public_key, {
+      generation: s.generation
     });
-    const v = a.relayDisagreement ? 'Configured relays returned different credential capsules as "latest" for this account. Some relays may be stale, censored, or malicious.' : void 0;
+    const w = a.relayDisagreement ? 'Configured relays returned different credential capsules as "latest" for this account. Some relays may be stale, censored, or malicious.' : void 0;
     return {
-      everydayPrivateKey: X(c.operational_private_key),
-      everydayPublicKey: c.operational_public_key,
-      recoveryPublicKey: c.recovery_public_key,
-      accountId: c.account_id,
-      generation: c.generation,
+      everydayPrivateKey: Q(s.operational_private_key),
+      everydayPublicKey: s.operational_public_key,
+      recoveryPublicKey: s.recovery_public_key,
+      accountId: s.account_id,
+      generation: s.generation,
       credentialEvent: a.best.event,
-      recoveryCapsuleEvent: c.recovery_capsule_event,
-      connectionVaultRoot: c.connection_vault_root ? X(c.connection_vault_root) : void 0,
+      recoveryCapsuleEvent: s.recovery_capsule_event,
+      connectionVaultRoot: s.connection_vault_root ? Q(s.connection_vault_root) : void 0,
       rollbackWarning: y,
-      relayDisagreementWarning: v
+      relayDisagreementWarning: w
     };
   } finally {
     i.closeAll();
   }
 }
-function Vt(e) {
-  return e.filter((t) => ae(t)).sort((t, n) => n.created_at - t.created_at)[0];
+function en(e) {
+  return e.filter((t) => ee(t)).sort((t, n) => n.created_at - t.created_at)[0];
 }
-async function lo(e) {
-  if (!ao(e.phrase))
-    throw new Ne("This does not look like a valid 12-word BitLogin recovery phrase.");
-  const t = await kn(e.phrase), { recoveryPrivateKey: n, capsuleKey: r } = Xt(t);
-  x(t);
-  const o = k(n), i = new C(e.vaultRelayUrls, {
+async function Co(e) {
+  if (!Ao(e.phrase))
+    throw new Le("This does not look like a valid 12-word BitLogin recovery phrase.");
+  const t = await Vn(e.phrase), { recoveryPrivateKey: n, capsuleKey: r } = fn(t);
+  E(t);
+  const o = _(n), i = new x(e.vaultRelayUrls, {
     authPrivateKey: n
   });
   let a;
   try {
-    a = await Gr(i, o, r, e.timeoutMs);
+    a = await ho(i, o, r, e.timeoutMs);
   } finally {
     i.closeAll();
   }
   if (e.offlineRecoveryCapsuleEvents?.length) {
     const f = [];
     for (const m of e.offlineRecoveryCapsuleEvents)
-      if (ae(m))
+      if (ee(m))
         try {
           f.push({
             event: m,
-            payload: await pn(m, r)
+            payload: await Sn(m, r)
           });
-        } catch (P) {
+        } catch (K) {
           f.push({
             event: m,
             payload: null,
-            error: P.message
+            error: K.message
           });
         }
     const p = /* @__PURE__ */ new Map();
     for (const m of [...a.candidates, ...f])
       p.set(m.event.id, m);
-    const h = [...p.values()].sort((m, P) => P.event.created_at - m.event.created_at), b = h.find((m) => m.payload !== null) ?? null;
+    const h = [...p.values()].sort((m, K) => K.event.created_at - m.event.created_at), b = h.find((m) => m.payload !== null) ?? null;
     a = {
       ...a,
       candidates: h,
@@ -2948,20 +3024,20 @@ async function lo(e) {
     };
   }
   if (!a.quorumMet)
-    throw new _e("quorum-not-met");
+    throw new Pe("quorum-not-met");
   if (!a.best)
-    throw new _e(a.candidates.length > 0 ? "no-valid-candidate" : "no-matching-event");
-  const c = a.best.payload, s = Fr(a.candidates), l = X(c.operational_private_key), u = c.operational_public_key, y = [
-    .../* @__PURE__ */ new Set([...e.discoveryRelayUrls, ...c.vault_relay_hints])
-  ], v = new C(y);
-  let w = [], g = [];
+    throw new Pe(a.candidates.length > 0 ? "no-valid-candidate" : "no-matching-event");
+  const s = a.best.payload, c = po(a.candidates), l = Q(s.operational_private_key), u = s.operational_public_key, y = [
+    .../* @__PURE__ */ new Set([...e.discoveryRelayUrls, ...s.vault_relay_hints])
+  ], w = new x(y);
+  let v = [], g = [];
   try {
-    const f = await v.queryQuorum({ kinds: [yt], authors: [u], limit: 5 }, e.timeoutMs), p = Vt(f.outcomes.flatMap((m) => m.events));
-    p && (w = Nr(p));
-    const h = await v.queryQuorum({ kinds: [ht], authors: [u], limit: 5 }, e.timeoutMs), b = Vt(h.outcomes.flatMap((m) => m.events));
-    b && (g = Sr(b));
+    const f = await w.queryQuorum({ kinds: [Et], authors: [u], limit: 5 }, e.timeoutMs), p = en(f.outcomes.flatMap((m) => m.events));
+    p && (v = Xr(p));
+    const h = await w.queryQuorum({ kinds: [Pt], authors: [u], limit: 5 }, e.timeoutMs), b = en(h.outcomes.flatMap((m) => m.events));
+    b && (g = Yr(b));
   } finally {
-    v.closeAll();
+    w.closeAll();
   }
   return {
     everydayPrivateKey: l,
@@ -2969,62 +3045,62 @@ async function lo(e) {
     recoveryPrivateKey: n,
     recoveryPublicKey: o,
     recoveryCapsuleKey: r,
-    accountId: c.account_id,
+    accountId: s.account_id,
     currentRecoveryEvent: a.best.event,
-    currentRecoveryPayload: c,
-    generalRelays: w,
+    currentRecoveryPayload: s,
+    generalRelays: v,
     dmRelays: g,
-    chainWarning: s.consistent ? void 0 : s.warning
+    chainWarning: c.consistent ? void 0 : c.warning
   };
 }
-async function uo(e) {
-  const t = e.now ?? Math.floor(Date.now() / 1e3), n = Je(e.newLoginName), { recovered: r } = e, o = r.currentRecoveryPayload.connection_vault_root !== void 0 ? {
+async function So(e) {
+  const t = e.now ?? Math.floor(Date.now() / 1e3), n = ot(e.newLoginName), { recovered: r } = e, o = r.currentRecoveryPayload.connection_vault_root !== void 0 ? {
     connection_vault_root: r.currentRecoveryPayload.connection_vault_root,
     vault_sudo_key: r.currentRecoveryPayload.vault_sudo_key
   } : {}, i = r.currentRecoveryPayload.connection_vault_root !== void 0 ? {
     connection_vault_root: r.currentRecoveryPayload.connection_vault_root
-  } : {}, { locatorPrivateKey: a, capsuleKey: c } = await Se(e.newPassword, n);
+  } : {}, { locatorPrivateKey: a, capsuleKey: s } = await Me(e.newPassword, n);
   try {
-    const s = k(a), l = new C(e.vaultRelayUrls, {
+    const c = _(a), l = new x(e.vaultRelayUrls, {
       authPrivateKey: a
     });
     let u;
     try {
-      u = await Ie(l, s, c, e.timeoutMs);
+      u = await Oe(l, c, s, e.timeoutMs);
     } finally {
       l.closeAll();
     }
     if (!u.quorumMet)
-      throw new Ne("Couldn't verify the new login name and password aren't already registered. Please retry, or add more vault relays.");
-    const y = u.best?.payload ?? null, v = y !== null && y.account_id === r.accountId && y.operational_public_key === r.everydayPublicKey && y.recovery_public_key === r.recoveryPublicKey && y.generation === 0 && y.recovery_capsule_event.id === r.currentRecoveryEvent.id;
-    if (u.candidates.length > 0 && !v)
-      throw new Ne("Another account is already registered with that login name and password. Pick a different one.");
-    const w = r.currentRecoveryPayload.recovery_generation + 1, g = {
-      schema: pt,
+      throw new Le("Couldn't verify the new login name and password aren't already registered. Please retry, or add more vault relays.");
+    const y = u.best?.payload ?? null, w = y !== null && y.account_id === r.accountId && y.operational_public_key === r.everydayPublicKey && y.recovery_public_key === r.recoveryPublicKey && y.generation === 0 && y.recovery_capsule_event.id === r.currentRecoveryEvent.id;
+    if (u.candidates.length > 0 && !w)
+      throw new Le("Another account is already registered with that login name and password. Pick a different one.");
+    const v = r.currentRecoveryPayload.recovery_generation + 1, g = {
+      schema: Kt,
       account_id: r.accountId,
-      recovery_generation: w,
+      recovery_generation: v,
       previous_recovery_event_id: r.currentRecoveryEvent.id,
       operational_private_key: V(r.everydayPrivateKey),
       operational_public_key: r.everydayPublicKey,
       recovery_public_key: r.recoveryPublicKey,
       ...o,
-      created_at: We(r.currentRecoveryEvent.created_at, t),
+      created_at: Je(r.currentRecoveryEvent.created_at, t),
       vault_relay_hints: e.vaultRelayUrls,
       protocol: {
-        capsule_encryption: Te,
-        recovery_derivation: Le
+        capsule_encryption: De,
+        recovery_derivation: Ve
       }
-    }, f = await hn({
+    }, f = await Cn({
       recoveryPrivateKey: r.recoveryPrivateKey,
       capsuleKey: r.recoveryCapsuleKey,
       payload: g
-    }), p = new C(e.vaultRelayUrls, {
+    }), p = new x(e.vaultRelayUrls, {
       authPrivateKey: r.recoveryPrivateKey
     });
     let h;
     try {
-      h = await ke(p, f, {
-        dTag: He,
+      h = await Ke(p, f, {
+        dTag: rt,
         minAcks: e.minAcknowledgements,
         timeoutMs: e.timeoutMs
       });
@@ -3032,10 +3108,10 @@ async function uo(e) {
       p.closeAll();
     }
     if (!h.success)
-      throw new Ne("Could not publish the refreshed recovery capsule to enough relays. No new credential was published; please retry.");
+      throw new Le("Could not publish the refreshed recovery capsule to enough relays. No new credential was published; please retry.");
     r.currentRecoveryEvent = f, r.currentRecoveryPayload = g;
     const b = {
-      schema: Fe,
+      schema: nt,
       account_id: r.accountId,
       generation: 0,
       operational_private_key: V(r.everydayPrivateKey),
@@ -3045,53 +3121,53 @@ async function uo(e) {
       ...i,
       // A retry may be repairing a credential that reached only one relay.
       // It must replace that partial event deterministically on every relay.
-      created_at: u.best ? We(u.best.event.created_at, t) : t,
+      created_at: u.best ? Je(u.best.event.created_at, t) : t,
       vault_relay_hints: e.vaultRelayUrls,
       protocol: {
-        password_kdf: xt,
-        capsule_encryption: Te,
-        recovery_derivation: Le
+        password_kdf: qt,
+        capsule_encryption: De,
+        recovery_derivation: Ve
       }
-    }, m = await At({
+    }, m = await Vt({
       locatorPrivateKey: a,
-      capsuleKey: c,
+      capsuleKey: s,
       payload: b
-    }), P = new C(e.vaultRelayUrls, {
+    }), K = new x(e.vaultRelayUrls, {
       authPrivateKey: a
     });
-    let N;
+    let C;
     try {
-      N = await ke(P, m, {
-        dTag: Ee,
+      C = await Ke(K, m, {
+        dTag: Re,
         minAcks: e.minAcknowledgements,
         timeoutMs: e.timeoutMs
       });
     } finally {
-      P.closeAll();
+      K.closeAll();
     }
-    if (!N.success)
-      throw new Ne("Could not publish the new credential capsule to enough relays. Please retry.");
-    return e.store && await kr(e.store, r.everydayPublicKey, {
+    if (!C.success)
+      throw new Le("Could not publish the new credential capsule to enough relays. Please retry.");
+    return e.store && await Dr(e.store, r.everydayPublicKey, {
       generation: 0,
-      recoveryGeneration: w
+      recoveryGeneration: v
     }), {
       normalizedLoginName: n,
-      locatorPublicKey: s,
+      locatorPublicKey: c,
       credentialEvent: m,
       refreshedRecoveryEvent: f,
-      credentialPublish: N,
+      credentialPublish: C,
       recoveryPublish: h
     };
   } finally {
-    x(a, c);
+    E(a, s);
   }
 }
-function Rn(e) {
-  const t = k(e.privateKey);
-  return ne({
+function $n(e) {
+  const t = _(e.privateKey);
+  return X({
     pubkey: t,
     created_at: e.createdAt,
-    kind: vr,
+    kind: Ir,
     tags: [
       ["e", e.eventIdToDelete],
       ["k", String(e.deletedEventKind)]
@@ -3099,167 +3175,167 @@ function Rn(e) {
     content: e.reason ?? ""
   }, e.privateKey);
 }
-async function yo(e) {
-  const t = e.now ?? Math.floor(Date.now() / 1e3), n = Je(e.loginName), r = await Se(e.oldPassword, n), o = k(r.locatorPrivateKey), i = new C(e.vaultRelayUrls, {
+async function Io(e) {
+  const t = e.now ?? Math.floor(Date.now() / 1e3), n = ot(e.loginName), r = await Me(e.oldPassword, n), o = _(r.locatorPrivateKey), i = new x(e.vaultRelayUrls, {
     authPrivateKey: r.locatorPrivateKey
   });
   let a;
   try {
-    a = await Ie(i, o, r.capsuleKey, e.timeoutMs);
+    a = await Oe(i, o, r.capsuleKey, e.timeoutMs);
   } finally {
     i.closeAll();
   }
   if (!a.quorumMet)
-    throw new _e("quorum-not-met");
+    throw new Pe("quorum-not-met");
   if (!a.best)
-    throw new _e(a.candidates.length > 0 ? "no-valid-candidate" : "no-matching-event");
-  const c = a.best.payload, s = a.best.event, l = e.store ?? new Kn(), u = await kt(l, c.operational_public_key);
-  if (c.generation < u.generation && !e.acknowledgeRollback)
-    throw new tn(u.generation, c.generation);
-  const y = await Se(e.newPassword, n), v = k(y.locatorPrivateKey), w = new C(e.vaultRelayUrls, {
+    throw new Pe(a.candidates.length > 0 ? "no-valid-candidate" : "no-matching-event");
+  const s = a.best.payload, c = a.best.event, l = e.store ?? new jn(), u = await Tt(l, s.operational_public_key);
+  if (s.generation < u.generation && !e.acknowledgeRollback)
+    throw new bn(u.generation, s.generation);
+  const y = await Me(e.newPassword, n), w = _(y.locatorPrivateKey), v = new x(e.vaultRelayUrls, {
     authPrivateKey: y.locatorPrivateKey
   });
   let g;
   try {
-    g = await Ie(w, v, y.capsuleKey, e.timeoutMs);
+    g = await Oe(v, w, y.capsuleKey, e.timeoutMs);
   } finally {
-    w.closeAll();
+    v.closeAll();
   }
   if (!g.quorumMet)
-    throw new le("Couldn't verify the new password isn't already registered under this login name. Please retry, or add more vault relays.");
+    throw new de("Couldn't verify the new password isn't already registered under this login name. Please retry, or add more vault relays.");
   if (g.candidates.length > 0)
-    throw new en("Another account is already registered with this login name and the new password you chose. Pick a different new password.");
-  const f = c.generation + 1, p = {
-    schema: Fe,
-    account_id: c.account_id,
+    throw new wn("Another account is already registered with this login name and the new password you chose. Pick a different new password.");
+  const f = s.generation + 1, p = {
+    schema: nt,
+    account_id: s.account_id,
     generation: f,
-    operational_private_key: c.operational_private_key,
-    operational_public_key: c.operational_public_key,
-    recovery_public_key: c.recovery_public_key,
-    recovery_capsule_event: c.recovery_capsule_event,
+    operational_private_key: s.operational_private_key,
+    operational_public_key: s.operational_public_key,
+    recovery_public_key: s.recovery_public_key,
+    recovery_capsule_event: s.recovery_capsule_event,
     // Carry only the session root. A legacy credential may contain the sudo
     // key, but rotation deliberately scrubs it; personal-tier access remains
     // phrase-gated through the recovery capsule.
-    ...c.connection_vault_root !== void 0 ? { connection_vault_root: c.connection_vault_root } : {},
+    ...s.connection_vault_root !== void 0 ? { connection_vault_root: s.connection_vault_root } : {},
     created_at: t,
     vault_relay_hints: e.vaultRelayUrls,
     protocol: {
-      password_kdf: xt,
-      capsule_encryption: Te,
-      recovery_derivation: Le
+      password_kdf: qt,
+      capsule_encryption: De,
+      recovery_derivation: Ve
     }
-  }, h = await At({
+  }, h = await Vt({
     locatorPrivateKey: y.locatorPrivateKey,
     capsuleKey: y.capsuleKey,
     payload: p
-  }), b = new C(e.vaultRelayUrls, {
+  }), b = new x(e.vaultRelayUrls, {
     authPrivateKey: y.locatorPrivateKey
-  }), m = await ke(b, h, {
-    dTag: Ee,
+  }), m = await Ke(b, h, {
+    dTag: Re,
     minAcks: e.minAcknowledgements,
     timeoutMs: e.timeoutMs
   });
   if (b.closeAll(), !m.success)
-    throw new le("The new credential capsule did not reach the required relay acknowledgement and readback quorum. Your existing password still works; nothing was changed. Please retry.");
-  const P = zr({
+    throw new de("The new credential capsule did not reach the required relay acknowledgement and readback quorum. Your existing password still works; nothing was changed. Please retry.");
+  const K = uo({
     oldLocatorPrivateKey: r.locatorPrivateKey,
-    createdAt: We(s.created_at, t)
-  }), N = Rn({
+    createdAt: Je(c.created_at, t)
+  }), C = $n({
     privateKey: r.locatorPrivateKey,
-    eventIdToDelete: s.id,
-    deletedEventKind: re,
+    eventIdToDelete: c.id,
+    deletedEventKind: ie,
     createdAt: t
-  }), K = new C(e.vaultRelayUrls, {
+  }), R = new x(e.vaultRelayUrls, {
     authPrivateKey: r.locatorPrivateKey
-  }), [R, A] = await Promise.all([
-    K.publishAll(P, e.timeoutMs),
-    K.publishAll(N, e.timeoutMs)
+  }), [A, N] = await Promise.all([
+    R.publishAll(K, e.timeoutMs),
+    R.publishAll(C, e.timeoutMs)
   ]);
-  return K.closeAll(), await nn(l, c.operational_public_key, {
+  return R.closeAll(), await mn(l, s.operational_public_key, {
     generation: f
   }), {
     normalizedLoginName: n,
     oldLocatorPublicKey: o,
-    newLocatorPublicKey: v,
+    newLocatorPublicKey: w,
     newGeneration: f,
-    recoveryPublicKey: c.recovery_public_key,
-    recoveryCapsuleEvent: c.recovery_capsule_event,
+    recoveryPublicKey: s.recovery_public_key,
+    recoveryCapsuleEvent: s.recovery_capsule_event,
     newCredentialEvent: h,
-    tombstoneEvent: P,
-    deletionRequestEvent: N,
+    tombstoneEvent: K,
+    deletionRequestEvent: C,
     newCredentialPublish: m,
-    tombstoneAcknowledgedCount: ye(R),
-    deletionAcknowledgedCount: ye(A)
+    tombstoneAcknowledgedCount: pe(A),
+    deletionAcknowledgedCount: pe(N)
   };
 }
-const ho = "bitlogin/connection-vault-root/v1", po = "bitlogin/connection-vault-signing/v1", fo = "bitlogin/connection-record-encryption/v1", vo = "bitlogin/connection-vault-personal/v1", at = "bitlogin:connection:";
-function go(e) {
+const To = "bitlogin/connection-vault-root/v1", Lo = "bitlogin/connection-vault-signing/v1", Uo = "bitlogin/connection-record-encryption/v1", Mo = "bitlogin/connection-vault-personal/v1", vt = "bitlogin:connection:";
+function Oo(e) {
   if (e.length !== 32)
     throw new Error("connection_vault_root must be exactly 32 bytes.");
-  return mt(Qt(ho), e);
+  return St(vn(To), e);
 }
-function Ke(e) {
-  return gr(e, po).scalar;
+function Ne(e) {
+  return Tr(e, Lo).scalar;
 }
-function An(e) {
-  const t = Ke(e);
+function Bn(e) {
+  const t = Ne(e);
   try {
-    return k(t);
+    return _(t);
   } finally {
-    x(t);
+    E(t);
   }
 }
-function wo(e, t) {
+function Do(e, t) {
   if (t.length !== 32)
     throw new Error("vault_sudo_key must be exactly 32 bytes.");
   if (e.length !== 32)
     throw new Error("connection_vault_root must be exactly 32 bytes.");
-  return mt(Qt(vo), Pe(e, t));
+  return St(vn(Mo), Ae(e, t));
 }
-function xn(e, t) {
-  const n = Xe(t);
-  return Me(e, Pe(Y(fo), new Uint8Array([0]), n), 32);
+function zn(e, t) {
+  const n = at(t);
+  return We(e, Ae(Y(Uo), new Uint8Array([0]), n), 32);
 }
-function bo() {
-  return V(be(16));
+function Vo() {
+  return V(oe(16));
 }
-function Xe(e) {
-  const t = X(e);
+function at(e) {
+  const t = Q(e);
   if (t.length !== 16)
     throw new Error("connection_id must decode to exactly 16 bytes (§CV7).");
   return t;
 }
-function Cn(e) {
-  return Xe(e), `${at}${e}`;
+function Gn(e) {
+  return at(e), `${vt}${e}`;
 }
-function Nn(e) {
-  if (!e.startsWith(at))
+function Fn(e) {
+  if (!e.startsWith(vt))
     return null;
-  const t = e.slice(at.length);
+  const t = e.slice(vt.length);
   try {
-    return Xe(t), t;
+    return at(t), t;
   } catch {
     return null;
   }
 }
 /*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */
-function mo(e) {
+function qo(e) {
   return e instanceof Uint8Array || ArrayBuffer.isView(e) && e.constructor.name === "Uint8Array" && "BYTES_PER_ELEMENT" in e && e.BYTES_PER_ELEMENT === 1;
 }
-function qt(e) {
+function tn(e) {
   if (typeof e != "boolean")
     throw new TypeError(`boolean expected, not ${e}`);
 }
-function Ze(e) {
+function ct(e) {
   if (typeof e != "number")
     throw new TypeError("number expected, got " + typeof e);
   if (!Number.isSafeInteger(e) || e < 0)
     throw new RangeError("positive integer expected, got " + e);
 }
-function M(e, t, n = "") {
-  const r = mo(e), o = e?.length, i = t !== void 0;
+function O(e, t, n = "") {
+  const r = qo(e), o = e?.length, i = t !== void 0;
   if (!r || i && o !== t) {
-    const a = n && `"${n}" `, c = i ? ` of length ${t}` : "", s = r ? `length=${o}` : `type=${typeof e}`, l = a + "expected Uint8Array" + c + ", got " + s;
+    const a = n && `"${n}" `, s = i ? ` of length ${t}` : "", c = r ? `length=${o}` : `type=${typeof e}`, l = a + "expected Uint8Array" + s + ", got " + c;
     throw r ? new RangeError(l) : new TypeError(l);
   }
   return e;
@@ -3267,104 +3343,104 @@ function M(e, t, n = "") {
 function T(e) {
   return new Uint32Array(e.buffer, e.byteOffset, Math.floor(e.byteLength / 4));
 }
-function ve(...e) {
+function be(...e) {
   for (let t = 0; t < e.length; t++)
     e[t].fill(0);
 }
-const Q = new Uint8Array(new Uint32Array([287454020]).buffer)[0] === 68, _o = (e) => e << 24 & 4278190080 | e << 8 & 16711680 | e >>> 8 & 65280 | e >>> 24 & 255, ko = (e) => {
+const Z = new Uint8Array(new Uint32Array([287454020]).buffer)[0] === 68, Wo = (e) => e << 24 & 4278190080 | e << 8 & 16711680 | e >>> 8 & 65280 | e >>> 24 & 255, jo = (e) => {
   for (let t = 0; t < e.length; t++)
-    e[t] = _o(e[t]);
+    e[t] = Wo(e[t]);
   return e;
-}, U = Q ? (e) => e : ko;
-function Eo(e, t) {
+}, D = Z ? (e) => e : jo;
+function $o(e, t) {
   return !e.byteLength || !t.byteLength ? !1 : e.buffer === t.buffer && // best we can do, may fail with an obscure Proxy
   e.byteOffset < t.byteOffset + t.byteLength && // a starts before b end
   t.byteOffset < e.byteOffset + e.byteLength;
 }
-function Sn(e, t) {
-  if (Eo(e, t) && e.byteOffset < t.byteOffset)
+function Hn(e, t) {
+  if ($o(e, t) && e.byteOffset < t.byteOffset)
     throw new Error("complex overlap of input and output is not supported");
 }
-function Po(e, t) {
+function Bo(e, t) {
   if (t == null || typeof t != "object")
     throw new Error("options must be defined");
   return Object.assign(e, t);
 }
-const Ko = /* @__NO_SIDE_EFFECTS__ */ (e, t) => {
+const zo = /* @__NO_SIDE_EFFECTS__ */ (e, t) => {
   function n(r, ...o) {
-    if (M(r, void 0, "key"), e.nonceLength !== void 0) {
+    if (O(r, void 0, "key"), e.nonceLength !== void 0) {
       const u = o[0];
-      M(u, e.varSizeNonce ? void 0 : e.nonceLength, "nonce");
+      O(u, e.varSizeNonce ? void 0 : e.nonceLength, "nonce");
     }
     const i = e.tagLength;
-    i && o[1] !== void 0 && M(o[1], void 0, "AAD");
-    const a = t(r, ...o), c = (u, y) => {
+    i && o[1] !== void 0 && O(o[1], void 0, "AAD");
+    const a = t(r, ...o), s = (u, y) => {
       if (y !== void 0) {
         if (u !== 2)
           throw new Error("cipher output not supported");
-        M(y, void 0, "output");
+        O(y, void 0, "output");
       }
     };
-    let s = !1;
+    let c = !1;
     return {
       encrypt(u, y) {
-        if (s)
+        if (c)
           throw new Error("cannot encrypt() twice with same key + nonce");
-        return s = !0, M(u), c(a.encrypt.length, y), a.encrypt(u, y);
+        return c = !0, O(u), s(a.encrypt.length, y), a.encrypt(u, y);
       },
       decrypt(u, y) {
-        if (M(u), i && u.length < i)
+        if (O(u), i && u.length < i)
           throw new Error('"ciphertext" expected length bigger than tagLength=' + i);
-        return c(a.decrypt.length, y), a.decrypt(u, y);
+        return s(a.decrypt.length, y), a.decrypt(u, y);
       }
     };
   }
   return Object.assign(n, e), n;
 };
-function Ct(e, t, n = !0) {
+function Wt(e, t, n = !0) {
   if (t === void 0)
     return new Uint8Array(e);
-  if (M(t, void 0, "output"), t.length !== e)
+  if (O(t, void 0, "output"), t.length !== e)
     throw new Error('"output" expected Uint8Array of length ' + e + ", got: " + t.length);
-  if (n && !ie(t))
+  if (n && !ce(t))
     throw new Error("invalid output, must be aligned");
   return t;
 }
-function ie(e) {
+function ce(e) {
   return e.byteOffset % 4 === 0;
 }
-function fe(e) {
-  return Uint8Array.from(M(e));
+function ge(e) {
+  return Uint8Array.from(O(e));
 }
-const In = (e) => Uint8Array.from(e.split(""), (t) => t.charCodeAt(0)), Ro = U(T(In("expand 16-byte k"))), Ao = U(T(In("expand 32-byte k")));
-function _(e, t) {
+const Jn = (e) => Uint8Array.from(e.split(""), (t) => t.charCodeAt(0)), Go = D(T(Jn("expand 16-byte k"))), Fo = D(T(Jn("expand 32-byte k")));
+function k(e, t) {
   return e << t | e >>> 32 - t;
 }
-const Re = 64, xo = 16, ct = 2 ** 32 - 1, jt = /* @__PURE__ */ Uint32Array.of();
-function Co(e, t, n, r, o, i, a, c) {
-  const s = o.length, l = new Uint8Array(Re), u = T(l), y = Q && ie(o) && ie(i), v = y ? T(o) : jt, w = y ? T(i) : jt;
-  if (!Q) {
-    for (let g = 0; g < s; a++) {
-      if (e(t, n, r, u, a, c), U(u), a >= ct)
+const xe = 64, Ho = 16, gt = 2 ** 32 - 1, nn = /* @__PURE__ */ Uint32Array.of();
+function Jo(e, t, n, r, o, i, a, s) {
+  const c = o.length, l = new Uint8Array(xe), u = T(l), y = Z && ce(o) && ce(i), w = y ? T(o) : nn, v = y ? T(i) : nn;
+  if (!Z) {
+    for (let g = 0; g < c; a++) {
+      if (e(t, n, r, u, a, s), D(u), a >= gt)
         throw new Error("arx: counter overflow");
-      const f = Math.min(Re, s - g);
+      const f = Math.min(xe, c - g);
       for (let p = 0, h; p < f; p++)
         h = g + p, i[h] = o[h] ^ l[p];
       g += f;
     }
     return;
   }
-  for (let g = 0; g < s; a++) {
-    if (e(t, n, r, u, a, c), a >= ct)
+  for (let g = 0; g < c; a++) {
+    if (e(t, n, r, u, a, s), a >= gt)
       throw new Error("arx: counter overflow");
-    const f = Math.min(Re, s - g);
-    if (y && f === Re) {
+    const f = Math.min(xe, c - g);
+    if (y && f === xe) {
       const p = g / 4;
       if (g % 4 !== 0)
         throw new Error("arx: invalid block position");
-      for (let h = 0, b; h < xo; h++)
-        b = p + h, w[b] = v[b] ^ u[h];
-      g += Re;
+      for (let h = 0, b; h < Ho; h++)
+        b = p + h, v[b] = w[b] ^ u[h];
+      g += xe;
       continue;
     }
     for (let p = 0, h; p < f; p++)
@@ -3372,162 +3448,162 @@ function Co(e, t, n, r, o, i, a, c) {
     g += f;
   }
 }
-function No(e, t) {
-  const { allowShortKeys: n, extendNonceFn: r, counterLength: o, counterRight: i, rounds: a } = Po({ allowShortKeys: !1, counterLength: 8, counterRight: !1, rounds: 20 }, t);
+function Xo(e, t) {
+  const { allowShortKeys: n, extendNonceFn: r, counterLength: o, counterRight: i, rounds: a } = Bo({ allowShortKeys: !1, counterLength: 8, counterRight: !1, rounds: 20 }, t);
   if (typeof e != "function")
     throw new Error("core must be a function");
-  return Ze(o), Ze(a), qt(i), qt(n), (c, s, l, u, y = 0) => {
-    M(c, void 0, "key"), M(s, void 0, "nonce"), M(l, void 0, "data");
-    const v = l.length;
-    if (u = Ct(v, u, !1), Ze(y), y < 0 || y >= ct)
+  return ct(o), ct(a), tn(i), tn(n), (s, c, l, u, y = 0) => {
+    O(s, void 0, "key"), O(c, void 0, "nonce"), O(l, void 0, "data");
+    const w = l.length;
+    if (u = Wt(w, u, !1), ct(y), y < 0 || y >= gt)
       throw new Error("arx: counter overflow");
-    const w = [];
-    let g = c.length, f, p;
+    const v = [];
+    let g = s.length, f, p;
     if (g === 32)
-      w.push(f = fe(c)), p = Ao;
+      v.push(f = ge(s)), p = Fo;
     else if (g === 16 && n)
-      f = new Uint8Array(32), f.set(c), f.set(c, 16), p = Ro, w.push(f);
+      f = new Uint8Array(32), f.set(s), f.set(s, 16), p = Go, v.push(f);
     else
-      throw M(c, 32, "arx key"), new Error("invalid key size");
-    (!Q || !ie(s)) && w.push(s = fe(s));
+      throw O(s, 32, "arx key"), new Error("invalid key size");
+    (!Z || !ce(c)) && v.push(c = ge(c));
     let h = T(f);
     if (r) {
-      if (s.length !== 24)
+      if (c.length !== 24)
         throw new Error("arx: extended nonce must be 24 bytes");
-      const P = s.subarray(0, 16);
-      if (Q)
-        r(p, h, T(P), h);
+      const K = c.subarray(0, 16);
+      if (Z)
+        r(p, h, T(K), h);
       else {
-        const N = U(Uint32Array.from(p));
-        r(N, h, T(P), h), ve(N), U(h);
+        const C = D(Uint32Array.from(p));
+        r(C, h, T(K), h), be(C), D(h);
       }
-      s = s.subarray(16);
-    } else Q || U(h);
+      c = c.subarray(16);
+    } else Z || D(h);
     const b = 16 - o;
-    if (b !== s.length)
+    if (b !== c.length)
       throw new Error(`arx: nonce must be ${b} or 16 bytes`);
     if (b !== 12) {
-      const P = new Uint8Array(12);
-      P.set(s, i ? 0 : 12 - s.length), s = P, w.push(s);
+      const K = new Uint8Array(12);
+      K.set(c, i ? 0 : 12 - c.length), c = K, v.push(c);
     }
-    const m = U(T(s));
+    const m = D(T(c));
     try {
-      return Co(e, p, h, m, l, u, y, a), u;
+      return Jo(e, p, h, m, l, u, y, a), u;
     } finally {
-      ve(...w);
+      be(...v);
     }
   };
 }
-function So(e, t, n, r, o, i = 20) {
-  let a = e[0], c = e[1], s = e[2], l = e[3], u = t[0], y = t[1], v = t[2], w = t[3], g = t[4], f = t[5], p = t[6], h = t[7], b = o, m = n[0], P = n[1], N = n[2], K = a, R = c, A = s, S = l, L = u, I = y, q = v, j = w, W = g, $ = f, z = p, B = h, G = b, F = m, H = P, J = N;
-  for (let Ot = 0; Ot < i; Ot += 2)
-    K = K + L | 0, G = _(G ^ K, 16), W = W + G | 0, L = _(L ^ W, 12), K = K + L | 0, G = _(G ^ K, 8), W = W + G | 0, L = _(L ^ W, 7), R = R + I | 0, F = _(F ^ R, 16), $ = $ + F | 0, I = _(I ^ $, 12), R = R + I | 0, F = _(F ^ R, 8), $ = $ + F | 0, I = _(I ^ $, 7), A = A + q | 0, H = _(H ^ A, 16), z = z + H | 0, q = _(q ^ z, 12), A = A + q | 0, H = _(H ^ A, 8), z = z + H | 0, q = _(q ^ z, 7), S = S + j | 0, J = _(J ^ S, 16), B = B + J | 0, j = _(j ^ B, 12), S = S + j | 0, J = _(J ^ S, 8), B = B + J | 0, j = _(j ^ B, 7), K = K + I | 0, J = _(J ^ K, 16), z = z + J | 0, I = _(I ^ z, 12), K = K + I | 0, J = _(J ^ K, 8), z = z + J | 0, I = _(I ^ z, 7), R = R + q | 0, G = _(G ^ R, 16), B = B + G | 0, q = _(q ^ B, 12), R = R + q | 0, G = _(G ^ R, 8), B = B + G | 0, q = _(q ^ B, 7), A = A + j | 0, F = _(F ^ A, 16), W = W + F | 0, j = _(j ^ W, 12), A = A + j | 0, F = _(F ^ A, 8), W = W + F | 0, j = _(j ^ W, 7), S = S + L | 0, H = _(H ^ S, 16), $ = $ + H | 0, L = _(L ^ $, 12), S = S + L | 0, H = _(H ^ S, 8), $ = $ + H | 0, L = _(L ^ $, 7);
-  let O = 0;
-  r[O++] = a + K | 0, r[O++] = c + R | 0, r[O++] = s + A | 0, r[O++] = l + S | 0, r[O++] = u + L | 0, r[O++] = y + I | 0, r[O++] = v + q | 0, r[O++] = w + j | 0, r[O++] = g + W | 0, r[O++] = f + $ | 0, r[O++] = p + z | 0, r[O++] = h + B | 0, r[O++] = b + G | 0, r[O++] = m + F | 0, r[O++] = P + H | 0, r[O++] = N + J | 0;
+function Yo(e, t, n, r, o, i = 20) {
+  let a = e[0], s = e[1], c = e[2], l = e[3], u = t[0], y = t[1], w = t[2], v = t[3], g = t[4], f = t[5], p = t[6], h = t[7], b = o, m = n[0], K = n[1], C = n[2], R = a, A = s, N = c, S = l, L = u, I = y, q = w, W = v, j = g, $ = f, B = p, z = h, G = b, F = m, H = K, J = C;
+  for (let Jt = 0; Jt < i; Jt += 2)
+    R = R + L | 0, G = k(G ^ R, 16), j = j + G | 0, L = k(L ^ j, 12), R = R + L | 0, G = k(G ^ R, 8), j = j + G | 0, L = k(L ^ j, 7), A = A + I | 0, F = k(F ^ A, 16), $ = $ + F | 0, I = k(I ^ $, 12), A = A + I | 0, F = k(F ^ A, 8), $ = $ + F | 0, I = k(I ^ $, 7), N = N + q | 0, H = k(H ^ N, 16), B = B + H | 0, q = k(q ^ B, 12), N = N + q | 0, H = k(H ^ N, 8), B = B + H | 0, q = k(q ^ B, 7), S = S + W | 0, J = k(J ^ S, 16), z = z + J | 0, W = k(W ^ z, 12), S = S + W | 0, J = k(J ^ S, 8), z = z + J | 0, W = k(W ^ z, 7), R = R + I | 0, J = k(J ^ R, 16), B = B + J | 0, I = k(I ^ B, 12), R = R + I | 0, J = k(J ^ R, 8), B = B + J | 0, I = k(I ^ B, 7), A = A + q | 0, G = k(G ^ A, 16), z = z + G | 0, q = k(q ^ z, 12), A = A + q | 0, G = k(G ^ A, 8), z = z + G | 0, q = k(q ^ z, 7), N = N + W | 0, F = k(F ^ N, 16), j = j + F | 0, W = k(W ^ j, 12), N = N + W | 0, F = k(F ^ N, 8), j = j + F | 0, W = k(W ^ j, 7), S = S + L | 0, H = k(H ^ S, 16), $ = $ + H | 0, L = k(L ^ $, 12), S = S + L | 0, H = k(H ^ S, 8), $ = $ + H | 0, L = k(L ^ $, 7);
+  let U = 0;
+  r[U++] = a + R | 0, r[U++] = s + A | 0, r[U++] = c + N | 0, r[U++] = l + S | 0, r[U++] = u + L | 0, r[U++] = y + I | 0, r[U++] = w + q | 0, r[U++] = v + W | 0, r[U++] = g + j | 0, r[U++] = f + $ | 0, r[U++] = p + B | 0, r[U++] = h + z | 0, r[U++] = b + G | 0, r[U++] = m + F | 0, r[U++] = K + H | 0, r[U++] = C + J | 0;
 }
-const Tn = /* @__PURE__ */ No(So, {
+const Xn = /* @__PURE__ */ Xo(Yo, {
   counterRight: !1,
   counterLength: 4,
   allowShortKeys: !1
-}), Ln = 2, st = 1, On = 65536, Io = 4294967295, To = 132, Lo = 99, lt = 1024 * 1024;
-function Wt(e, t) {
-  const n = Pe(new Uint8Array([2]), bt(t)), o = Zt.getSharedSecret(e, n, !0).slice(1, 33);
-  return mt(Y("nip44-v2"), o);
+}), Yn = 2, wt = 1, Qn = 65536, Qo = 4294967295, Zo = 132, ei = 99, bt = 1024 * 1024;
+function Ze(e, t) {
+  const n = Ae(new Uint8Array([2]), Ct(t)), o = gn.getSharedSecret(e, n, !0).slice(1, 33);
+  return St(Y("nip44-v2"), o);
 }
-function Mn(e, t) {
+function Zn(e, t) {
   if (e.length !== 32)
     throw new Error("NIP-44 conversation key must be exactly 32 bytes.");
   if (t.length !== 32)
     throw new Error("NIP-44 nonce must be exactly 32 bytes.");
-  const n = Me(e, t, 76);
+  const n = We(e, t, 76);
   return {
     chachaKey: n.slice(0, 32),
     chachaNonce: n.slice(32, 44),
     hmacKey: n.slice(44, 76)
   };
 }
-function Nt(e) {
+function jt(e) {
   if (e <= 32)
     return 32;
   const t = 2 ** Math.floor(Math.log2(e - 1) + 1), n = t <= 256 ? 32 : t / 8;
   return n * (Math.floor((e - 1) / n) + 1);
 }
-const Un = 39 + Nt(lt) + 32, Oo = Math.ceil(Un / 3) * 4;
-function Mo(e) {
-  if (e < On) {
+const er = 39 + jt(bt) + 32, ti = Math.ceil(er / 3) * 4;
+function ni(e) {
+  if (e < Qn) {
     const n = new Uint8Array(2);
     return new DataView(n.buffer).setUint16(0, e, !1), n;
   }
   const t = new Uint8Array(6);
   return new DataView(t.buffer).setUint32(2, e, !1), t;
 }
-function Uo(e) {
+function ri(e) {
   const t = e.length;
-  if (t < st || t > lt)
-    throw new Error(`NIP-44 plaintext length must be between ${st} and ${lt} bytes on this platform.`);
-  const n = Mo(t), r = Nt(t), o = new Uint8Array(n.length + r);
+  if (t < wt || t > bt)
+    throw new Error(`NIP-44 plaintext length must be between ${wt} and ${bt} bytes on this platform.`);
+  const n = ni(t), r = jt(t), o = new Uint8Array(n.length + r);
   return o.set(n, 0), o.set(e, n.length), o;
 }
-function Do(e) {
+function oi(e) {
   const t = new DataView(e.buffer, e.byteOffset, e.byteLength), n = t.getUint16(0, !1);
   let r, o;
   if (n === 0) {
-    if (r = t.getUint32(2, !1), o = 6, r < On)
+    if (r = t.getUint32(2, !1), o = 6, r < Qn)
       throw new Error("NIP-44 payload has inconsistent padding.");
   } else
     r = n, o = 2;
-  if (r < st || r > Io || e.length !== o + Nt(r))
+  if (r < wt || r > Qo || e.length !== o + jt(r))
     throw new Error("NIP-44 payload has inconsistent padding.");
   return e.slice(o, o + r);
 }
-function Dn(e, t, n) {
-  return gt(wt, e, Pe(t, n));
+function tr(e, t, n) {
+  return Nt(xt, e, Ae(t, n));
 }
-function Vo(e, t) {
-  return qo(e, t, be(32));
+function mt(e, t) {
+  return ii(e, t, oe(32));
 }
-function qo(e, t, n) {
+function ii(e, t, n) {
   if (n.length !== 32)
     throw new Error("NIP-44 nonce must be exactly 32 bytes.");
-  const { chachaKey: r, chachaNonce: o, hmacKey: i } = Mn(e, n), a = Uo(Y(t)), c = Tn(r, o, a), s = Dn(i, n, c);
-  return me.encode(Pe(new Uint8Array([Ln]), n, c, s));
+  const { chachaKey: r, chachaNonce: o, hmacKey: i } = Zn(e, n), a = ri(Y(t)), s = Xn(r, o, a), c = tr(i, n, s);
+  return Ee.encode(Ae(new Uint8Array([Yn]), n, s, c));
 }
-function jo(e, t) {
+function $t(e, t) {
   if (t.startsWith("#"))
     throw new Error("Unsupported NIP-44 non-base64 encoding.");
-  if (t.length < To || t.length > Oo)
+  if (t.length < Zo || t.length > ti)
     throw new Error("NIP-44 payload size is outside this platform's supported range.");
-  const n = me.decode(t);
-  if (n.length < Lo || n.length > Un)
+  const n = Ee.decode(t);
+  if (n.length < ei || n.length > er)
     throw new Error("NIP-44 decoded payload size is outside this platform's supported range.");
-  if (n[0] !== Ln)
+  if (n[0] !== Yn)
     throw new Error(`Unsupported NIP-44 version: ${n[0]}`);
   const r = n.slice(1, 33);
   if (r.length !== 32)
     throw new Error("NIP-44 nonce must be exactly 32 bytes.");
-  const o = n.slice(n.length - 32), i = n.slice(33, n.length - 32), { chachaKey: a, chachaNonce: c, hmacKey: s } = Mn(e, r), l = Dn(s, r, i);
-  if (!wr(o, l))
+  const o = n.slice(n.length - 32), i = n.slice(33, n.length - 32), { chachaKey: a, chachaNonce: s, hmacKey: c } = Zn(e, r), l = tr(c, r, i);
+  if (!Lr(o, l))
     throw new Error("NIP-44 MAC verification failed: payload is corrupted, tampered, or uses the wrong key.");
-  const u = Tn(a, c, i);
-  return Ge(Do(u));
+  const u = Xn(a, s, i);
+  return tt(oi(u));
 }
-const he = 16, Wo = 283;
-function $o(e) {
+const fe = 16, ai = 283;
+function si(e) {
   if (![16, 24, 32].includes(e.length))
     throw new Error('"aes key" expected Uint8Array of length 16/24/32, got length=' + e.length);
 }
-function St(e) {
-  return e << 1 ^ Wo & -(e >> 7);
+function Bt(e) {
+  return e << 1 ^ ai & -(e >> 7);
 }
-function we(e, t) {
+function _e(e, t) {
   let n = 0;
   for (; t > 0; t >>= 1)
-    n ^= e & -(t & 1), e = St(e);
+    n ^= e & -(t & 1), e = Bt(e);
   return n;
 }
-const ut = /* @__PURE__ */ (() => {
+const kt = /* @__PURE__ */ (() => {
   const e = new Uint8Array(256);
-  for (let n = 0, r = 1; n < 256; n++, r ^= St(r))
+  for (let n = 0, r = 1; n < 256; n++, r ^= Bt(r))
     e[n] = r;
   const t = new Uint8Array(256);
   t[0] = 99;
@@ -3535,102 +3611,102 @@ const ut = /* @__PURE__ */ (() => {
     let r = e[255 - n];
     r |= r << 8, t[e[n]] = (r ^ r >> 4 ^ r >> 5 ^ r >> 6 ^ r >> 7 ^ 99) & 255;
   }
-  return ve(e), t;
-})(), zo = /* @__PURE__ */ ut.map((e, t) => ut.indexOf(t)), Bo = (e) => e << 24 | e >>> 8, et = (e) => e << 8 | e >>> 24;
-function Vn(e, t) {
+  return be(e), t;
+})(), ci = /* @__PURE__ */ kt.map((e, t) => kt.indexOf(t)), li = (e) => e << 24 | e >>> 8, lt = (e) => e << 8 | e >>> 24;
+function nr(e, t) {
   if (e.length !== 256)
     throw new Error("Wrong sbox length");
-  const n = new Uint32Array(256).map((l, u) => t(e[u])), r = n.map(et), o = r.map(et), i = o.map(et), a = new Uint32Array(256 * 256), c = new Uint32Array(256 * 256), s = new Uint16Array(256 * 256);
+  const n = new Uint32Array(256).map((l, u) => t(e[u])), r = n.map(lt), o = r.map(lt), i = o.map(lt), a = new Uint32Array(256 * 256), s = new Uint32Array(256 * 256), c = new Uint16Array(256 * 256);
   for (let l = 0; l < 256; l++)
     for (let u = 0; u < 256; u++) {
       const y = l * 256 + u;
-      a[y] = n[l] ^ r[u], c[y] = o[l] ^ i[u], s[y] = e[l] << 8 | e[u];
+      a[y] = n[l] ^ r[u], s[y] = o[l] ^ i[u], c[y] = e[l] << 8 | e[u];
     }
-  return { sbox: e, sbox2: s, T0: n, T1: r, T2: o, T3: i, T01: a, T23: c };
+  return { sbox: e, sbox2: c, T0: n, T1: r, T2: o, T3: i, T01: a, T23: s };
 }
-const It = /* @__PURE__ */ Vn(ut, (e) => we(e, 3) << 24 | e << 16 | e << 8 | we(e, 2)), qn = /* @__PURE__ */ Vn(zo, (e) => we(e, 11) << 24 | we(e, 13) << 16 | we(e, 9) << 8 | we(e, 14)), Go = /* @__PURE__ */ (() => {
+const zt = /* @__PURE__ */ nr(kt, (e) => _e(e, 3) << 24 | e << 16 | e << 8 | _e(e, 2)), rr = /* @__PURE__ */ nr(ci, (e) => _e(e, 11) << 24 | _e(e, 13) << 16 | _e(e, 9) << 8 | _e(e, 14)), ui = /* @__PURE__ */ (() => {
   const e = new Uint8Array(16);
-  for (let t = 0, n = 1; t < 16; t++, n = St(n))
+  for (let t = 0, n = 1; t < 16; t++, n = Bt(n))
     e[t] = n;
   return e;
 })();
-function jn(e) {
-  M(e);
+function or(e) {
+  O(e);
   const t = e.length;
-  $o(e);
-  const { sbox2: n } = It, r = [];
-  (!Q || !ie(e)) && r.push(e = fe(e));
-  const o = U(T(e)), i = o.length, a = (s) => te(n, s, s, s, s), c = new Uint32Array(t + 28);
-  c.set(o);
-  for (let s = i; s < c.length; s++) {
-    let l = c[s - 1];
-    s % i === 0 ? l = a(Bo(l)) ^ Go[s / i - 1] : i > 6 && s % i === 4 && (l = a(l)), c[s] = c[s - i] ^ l;
+  si(e);
+  const { sbox2: n } = zt, r = [];
+  (!Z || !ce(e)) && r.push(e = ge(e));
+  const o = D(T(e)), i = o.length, a = (c) => re(n, c, c, c, c), s = new Uint32Array(t + 28);
+  s.set(o);
+  for (let c = i; c < s.length; c++) {
+    let l = s[c - 1];
+    c % i === 0 ? l = a(li(l)) ^ ui[c / i - 1] : i > 6 && c % i === 4 && (l = a(l)), s[c] = s[c - i] ^ l;
   }
-  return ve(...r), c;
+  return be(...r), s;
 }
-function Fo(e) {
-  const t = jn(e), n = t.slice(), r = t.length, { sbox2: o } = It, { T0: i, T1: a, T2: c, T3: s } = qn;
+function di(e) {
+  const t = or(e), n = t.slice(), r = t.length, { sbox2: o } = zt, { T0: i, T1: a, T2: s, T3: c } = rr;
   for (let l = 0; l < r; l += 4)
     for (let u = 0; u < 4; u++)
       n[l + u] = t[r - l - 4 + u];
-  ve(t);
+  be(t);
   for (let l = 4; l < r - 4; l++) {
-    const u = n[l], y = te(o, u, u, u, u);
-    n[l] = i[y & 255] ^ a[y >>> 8 & 255] ^ c[y >>> 16 & 255] ^ s[y >>> 24];
+    const u = n[l], y = re(o, u, u, u, u);
+    n[l] = i[y & 255] ^ a[y >>> 8 & 255] ^ s[y >>> 16 & 255] ^ c[y >>> 24];
   }
   return n;
 }
-function ue(e, t, n, r, o, i) {
+function ye(e, t, n, r, o, i) {
   return e[n << 8 & 65280 | r >>> 8 & 255] ^ t[o >>> 8 & 65280 | i >>> 24 & 255];
 }
-function te(e, t, n, r, o) {
+function re(e, t, n, r, o) {
   return e[t & 255 | n & 65280] | e[r >>> 16 & 255 | o >>> 16 & 65280] << 16;
 }
-function $t(e, t, n, r, o) {
-  const { sbox2: i, T01: a, T23: c } = It;
-  let s = 0;
-  t ^= e[s++], n ^= e[s++], r ^= e[s++], o ^= e[s++];
+function rn(e, t, n, r, o) {
+  const { sbox2: i, T01: a, T23: s } = zt;
+  let c = 0;
+  t ^= e[c++], n ^= e[c++], r ^= e[c++], o ^= e[c++];
   const l = e.length / 4 - 2;
   for (let g = 0; g < l; g++) {
-    const f = e[s++] ^ ue(a, c, t, n, r, o), p = e[s++] ^ ue(a, c, n, r, o, t), h = e[s++] ^ ue(a, c, r, o, t, n), b = e[s++] ^ ue(a, c, o, t, n, r);
+    const f = e[c++] ^ ye(a, s, t, n, r, o), p = e[c++] ^ ye(a, s, n, r, o, t), h = e[c++] ^ ye(a, s, r, o, t, n), b = e[c++] ^ ye(a, s, o, t, n, r);
     t = f, n = p, r = h, o = b;
   }
-  const u = e[s++] ^ te(i, t, n, r, o), y = e[s++] ^ te(i, n, r, o, t), v = e[s++] ^ te(i, r, o, t, n), w = e[s++] ^ te(i, o, t, n, r);
-  return { s0: u, s1: y, s2: v, s3: w };
+  const u = e[c++] ^ re(i, t, n, r, o), y = e[c++] ^ re(i, n, r, o, t), w = e[c++] ^ re(i, r, o, t, n), v = e[c++] ^ re(i, o, t, n, r);
+  return { s0: u, s1: y, s2: w, s3: v };
 }
-function Ho(e, t, n, r, o) {
-  const { sbox2: i, T01: a, T23: c } = qn;
-  let s = 0;
-  t ^= e[s++], n ^= e[s++], r ^= e[s++], o ^= e[s++];
+function yi(e, t, n, r, o) {
+  const { sbox2: i, T01: a, T23: s } = rr;
+  let c = 0;
+  t ^= e[c++], n ^= e[c++], r ^= e[c++], o ^= e[c++];
   const l = e.length / 4 - 2;
   for (let g = 0; g < l; g++) {
-    const f = e[s++] ^ ue(a, c, t, o, r, n), p = e[s++] ^ ue(a, c, n, t, o, r), h = e[s++] ^ ue(a, c, r, n, t, o), b = e[s++] ^ ue(a, c, o, r, n, t);
+    const f = e[c++] ^ ye(a, s, t, o, r, n), p = e[c++] ^ ye(a, s, n, t, o, r), h = e[c++] ^ ye(a, s, r, n, t, o), b = e[c++] ^ ye(a, s, o, r, n, t);
     t = f, n = p, r = h, o = b;
   }
-  const u = e[s++] ^ te(i, t, o, r, n), y = e[s++] ^ te(i, n, t, o, r), v = e[s++] ^ te(i, r, n, t, o), w = e[s++] ^ te(i, o, r, n, t);
-  return { s0: u, s1: y, s2: v, s3: w };
+  const u = e[c++] ^ re(i, t, o, r, n), y = e[c++] ^ re(i, n, t, o, r), w = e[c++] ^ re(i, r, n, t, o), v = e[c++] ^ re(i, o, r, n, t);
+  return { s0: u, s1: y, s2: w, s3: v };
 }
-function Jo(e) {
-  if (M(e), e.length % he !== 0)
-    throw new Error("aes-(cbc/ecb).decrypt ciphertext should consist of blocks with size " + he);
+function hi(e) {
+  if (O(e), e.length % fe !== 0)
+    throw new Error("aes-(cbc/ecb).decrypt ciphertext should consist of blocks with size " + fe);
 }
-function Yo(e, t, n) {
-  M(e);
+function pi(e, t, n) {
+  O(e);
   let r = e.length;
-  const o = r % he;
+  const o = r % fe;
   if (!t && o !== 0)
     throw new Error("aec/(cbc-ecb): unpadded plaintext with disabled padding");
   if (t) {
-    let c = he - o;
-    c || (c = he), r = r + c;
+    let s = fe - o;
+    s || (s = fe), r = r + s;
   }
-  n = Ct(r, n), Sn(e, n), (!Q || !ie(e)) && (e = fe(e));
+  n = Wt(r, n), Hn(e, n), (!Z || !ce(e)) && (e = ge(e));
   const i = T(e);
-  U(i);
+  D(i);
   const a = T(n);
   return { b: i, o: a, out: n };
 }
-function Xo(e, t) {
+function fi(e, t) {
   if (!t)
     return e;
   const n = e.length;
@@ -3640,87 +3716,87 @@ function Xo(e, t) {
   let o = 1;
   o &= r - 1 >>> 31 ^ 1, o &= 16 - r >>> 31 ^ 1;
   for (let i = 0; i < 16; i++) {
-    const a = i - r >>> 31, c = (e[n - 1 - i] ^ r) === 0 ? 1 : 0;
-    o &= c | a ^ 1;
+    const a = i - r >>> 31, s = (e[n - 1 - i] ^ r) === 0 ? 1 : 0;
+    o &= s | a ^ 1;
   }
   if (!o)
     throw new Error("aes/pkcs7: wrong padding");
   return e.subarray(0, n - r);
 }
-function Qo(e) {
+function vi(e) {
   const t = new Uint8Array(16), n = T(t);
   t.set(e);
-  const r = he - e.length;
-  for (let o = he - r; o < he; o++)
+  const r = fe - e.length;
+  for (let o = fe - r; o < fe; o++)
     t[o] = r;
   return n;
 }
-const Wn = /* @__PURE__ */ Ko({ blockSize: 16, nonceLength: 16 }, function(t, n, r = {}) {
+const ir = /* @__PURE__ */ zo({ blockSize: 16, nonceLength: 16 }, function(t, n, r = {}) {
   const o = !r.disablePadding;
   return {
     encrypt(i, a) {
-      const c = jn(t), { b: s, o: l, out: u } = Yo(i, o, a);
+      const s = or(t), { b: c, o: l, out: u } = pi(i, o, a);
       let y = n;
-      const v = [c];
-      (!Q || !ie(y)) && v.push(y = fe(y));
-      const w = T(y);
-      U(w);
-      let g = w[0], f = w[1], p = w[2], h = w[3], b = 0;
-      for (; b + 4 <= s.length; )
-        g ^= s[b + 0], f ^= s[b + 1], p ^= s[b + 2], h ^= s[b + 3], { s0: g, s1: f, s2: p, s3: h } = $t(c, g, f, p, h), l[b++] = g, l[b++] = f, l[b++] = p, l[b++] = h;
+      const w = [s];
+      (!Z || !ce(y)) && w.push(y = ge(y));
+      const v = T(y);
+      D(v);
+      let g = v[0], f = v[1], p = v[2], h = v[3], b = 0;
+      for (; b + 4 <= c.length; )
+        g ^= c[b + 0], f ^= c[b + 1], p ^= c[b + 2], h ^= c[b + 3], { s0: g, s1: f, s2: p, s3: h } = rn(s, g, f, p, h), l[b++] = g, l[b++] = f, l[b++] = p, l[b++] = h;
       if (o) {
-        const m = Qo(i.subarray(b * 4));
-        U(m), g ^= m[0], f ^= m[1], p ^= m[2], h ^= m[3], { s0: g, s1: f, s2: p, s3: h } = $t(c, g, f, p, h), l[b++] = g, l[b++] = f, l[b++] = p, l[b++] = h;
+        const m = vi(i.subarray(b * 4));
+        D(m), g ^= m[0], f ^= m[1], p ^= m[2], h ^= m[3], { s0: g, s1: f, s2: p, s3: h } = rn(s, g, f, p, h), l[b++] = g, l[b++] = f, l[b++] = p, l[b++] = h;
       }
-      return U(l), ve(...v), u;
+      return D(l), be(...w), u;
     },
     decrypt(i, a) {
-      Jo(i);
-      const c = Fo(t);
-      let s = n;
-      const l = [c];
-      (!Q || !ie(s)) && l.push(s = fe(s));
-      const u = T(s);
-      U(u), a = Ct(i.length, a), Sn(i, a), (!Q || !ie(i)) && l.push(i = fe(i));
-      const y = T(i), v = T(a);
-      U(y);
-      let w = u[0], g = u[1], f = u[2], p = u[3];
+      hi(i);
+      const s = di(t);
+      let c = n;
+      const l = [s];
+      (!Z || !ce(c)) && l.push(c = ge(c));
+      const u = T(c);
+      D(u), a = Wt(i.length, a), Hn(i, a), (!Z || !ce(i)) && l.push(i = ge(i));
+      const y = T(i), w = T(a);
+      D(y);
+      let v = u[0], g = u[1], f = u[2], p = u[3];
       for (let h = 0; h + 4 <= y.length; ) {
-        const b = w, m = g, P = f, N = p;
-        w = y[h + 0], g = y[h + 1], f = y[h + 2], p = y[h + 3];
-        const { s0: K, s1: R, s2: A, s3: S } = Ho(c, w, g, f, p);
-        v[h++] = K ^ b, v[h++] = R ^ m, v[h++] = A ^ P, v[h++] = S ^ N;
+        const b = v, m = g, K = f, C = p;
+        v = y[h + 0], g = y[h + 1], f = y[h + 2], p = y[h + 3];
+        const { s0: R, s1: A, s2: N, s3: S } = yi(s, v, g, f, p);
+        w[h++] = R ^ b, w[h++] = A ^ m, w[h++] = N ^ K, w[h++] = S ^ C;
       }
-      return U(v), ve(...l), Xo(a, o);
+      return D(w), be(...l), fi(a, o);
     }
   };
 });
-function $n(e, t) {
-  const n = Pe(new Uint8Array([2]), bt(t));
-  return Zt.getSharedSecret(e, n, !0).slice(1, 33);
+function ar(e, t) {
+  const n = Ae(new Uint8Array([2]), Ct(t));
+  return gn.getSharedSecret(e, n, !0).slice(1, 33);
 }
-function Zo(e, t, n) {
-  return ei(e, t, n, be(16));
+function gi(e, t, n) {
+  return wi(e, t, n, oe(16));
 }
-function ei(e, t, n, r) {
+function wi(e, t, n, r) {
   if (r.length !== 16)
     throw new Error("NIP-04 iv must be exactly 16 bytes.");
-  const o = $n(e, t), i = Wn(o, r).encrypt(Y(n));
-  return `${me.encode(i)}?iv=${me.encode(r)}`;
+  const o = ar(e, t), i = ir(o, r).encrypt(Y(n));
+  return `${Ee.encode(i)}?iv=${Ee.encode(r)}`;
 }
-function ti(e, t, n) {
+function bi(e, t, n) {
   const r = n.indexOf("?iv=");
   if (r === -1)
     throw new Error('NIP-04 payload is missing its "?iv=" suffix.');
-  const o = me.decode(n.slice(0, r)), i = me.decode(n.slice(r + 4)), a = $n(e, t), c = Wn(a, i).decrypt(o);
-  return Ge(c);
+  const o = Ee.decode(n.slice(0, r)), i = Ee.decode(n.slice(r + 4)), a = ar(e, t), s = ir(a, i).decrypt(o);
+  return tt(s);
 }
-class De {
+class $e {
   privateKey;
   publicKeyHex;
   destroyed = !1;
   constructor(t) {
-    this.privateKey = t, this.publicKeyHex = k(t);
+    this.privateKey = t, this.publicKeyHex = _(t);
   }
   assertAlive() {
     if (this.destroyed)
@@ -3730,7 +3806,7 @@ class De {
     return this.assertAlive(), this.publicKeyHex;
   }
   signEvent(t) {
-    return this.assertAlive(), ne({
+    return this.assertAlive(), X({
       pubkey: this.publicKeyHex,
       created_at: t.created_at ?? Math.floor(Date.now() / 1e3),
       kind: t.kind,
@@ -3739,83 +3815,349 @@ class De {
     }, this.privateKey);
   }
   nip44Encrypt(t, n) {
-    return this.assertAlive(), Vo(Wt(this.privateKey, t), n);
+    return this.assertAlive(), mt(Ze(this.privateKey, t), n);
   }
   nip44Decrypt(t, n) {
-    return this.assertAlive(), jo(Wt(this.privateKey, t), n);
+    return this.assertAlive(), $t(Ze(this.privateKey, t), n);
   }
   /** Legacy relative to nip44Encrypt above, but still what a real NIP-07 extension exposes as
    * window.nostr.nip04.encrypt -- implemented for drop-in parity. */
   nip04Encrypt(t, n) {
-    return this.assertAlive(), Zo(this.privateKey, t, n);
+    return this.assertAlive(), gi(this.privateKey, t, n);
   }
   nip04Decrypt(t, n) {
-    return this.assertAlive(), ti(this.privateKey, t, n);
+    return this.assertAlive(), bi(this.privateKey, t, n);
   }
   /** Best-practical secret wipe (§11.10, §21.4): overwrites the private key buffer in place. */
   destroy() {
-    x(this.privateKey), this.destroyed = !0;
+    E(this.privateKey), this.destroyed = !0;
   }
 }
-const ni = ["wss://relay.damus.io", "wss://nos.lol", "wss://relay.nostr.band", "wss://nostr.wine", "wss://relay.snort.social"], ri = ["wss://purplepag.es", "wss://relay.nostr.band", "wss://nostr-pub.wellorder.net"], zn = "bitlogin.connection.v1", Bn = "bitlogin.connection.nwc.v1", zt = 120, oi = /* @__PURE__ */ new Set(["active", "suspended", "deleted"]), ii = /* @__PURE__ */ new Set(["connectable", "personal"]);
-class ge extends Error {
+const mi = ["wss://relay.damus.io", "wss://nos.lol", "wss://relay.nostr.band", "wss://nostr.wine", "wss://relay.snort.social"], ki = ["wss://purplepag.es", "wss://relay.nostr.band", "wss://nostr-pub.wellorder.net"], Gt = /^[0-9a-f]{64}$/u, _i = 8, Ei = 4096, Pi = 256, Ki = 512;
+class me extends Error {
+  name = "BunkerUriParseError";
+}
+class Ri extends Error {
+  name = "Nip46RequestTimeoutError";
+  constructor(t, n) {
+    super(`The remote signer did not answer ${t} within ${Math.round(n / 1e3)}s. It may be offline, or waiting for your approval on another device -- check your signer and try again.`);
+  }
+}
+class Ai extends Error {
+  name = "Nip46ErrorResponse";
+}
+function Ni(e) {
+  let t;
+  try {
+    t = new URL(e.trim());
+  } catch {
+    return null;
+  }
+  const n = t.hostname === "localhost" || t.hostname === "127.0.0.1";
+  return t.protocol === "https:" || t.protocol === "http:" && n ? t.toString() : null;
+}
+function xi(e) {
+  if (e.length > Ei)
+    throw new me("That bunker URI is unreasonably long.");
+  let t;
+  try {
+    t = new URL(e.trim());
+  } catch {
+    throw new me("That doesn't look like a valid URI.");
+  }
+  if (t.protocol !== "bunker:")
+    throw new me("A remote-signer URI must start with bunker://");
+  const n = (t.host || t.pathname.replace(/^\/+/u, "")).toLowerCase();
+  if (!Gt.test(n))
+    throw new me("The bunker URI does not name a valid signer public key.");
+  const r = [
+    ...new Set(t.searchParams.getAll("relay").map((i) => i.trim()).filter((i) => i.length > 0 && i.length <= Ki))
+  ].slice(0, _i);
+  if (r.length === 0)
+    throw new me("The bunker URI names no relays -- without at least one relay= parameter there is no way to reach the signer.");
+  const o = t.searchParams.get("secret") ?? void 0;
+  if (o && o.length > Pi)
+    throw new me("The bunker URI's secret is unreasonably long.");
+  return { signerPubkey: n, relayUrls: r, secret: o || void 0 };
+}
+function Ci(e) {
+  if (!Gt.test(e.clientPubkey))
+    throw new Error("Client public key must be 64 hex characters.");
+  if (e.relayUrls.length === 0)
+    throw new Error("At least one relay is required.");
+  if (!e.secret)
+    throw new Error("A nostrconnect secret is required.");
+  const t = new URLSearchParams();
+  for (const n of e.relayUrls)
+    t.append("relay", n);
+  return t.set("secret", e.secret), e.name && t.set("name", e.name), e.perms?.length && t.set("perms", e.perms.join(",")), `nostrconnect://${e.clientPubkey}?${t.toString()}`;
+}
+const Si = 12e4;
+class on {
+  clientSecretKey;
+  clientPubkey;
+  pointer;
+  conversationKey;
+  conns;
+  onAuthUrl;
+  requestTimeoutMs;
+  pending = /* @__PURE__ */ new Map();
+  subs = [];
+  startPromise = null;
+  userPubkeyKnown = null;
+  closed = !1;
+  constructor(t) {
+    this.clientSecretKey = t.clientSecretKey, this.clientPubkey = _(t.clientSecretKey), this.pointer = t.pointer, this.conversationKey = Ze(t.clientSecretKey, t.pointer.signerPubkey), this.onAuthUrl = t.onAuthUrl, this.requestTimeoutMs = t.requestTimeoutMs ?? Si, this.conns = t.pointer.relayUrls.map((n) => new Lt(n, { authPrivateKey: t.clientSecretKey }));
+  }
+  /** The user pubkey this session signs for, once get_public_key has answered. */
+  get userPublicKey() {
+    return this.userPubkeyKnown;
+  }
+  async start() {
+    if (this.closed)
+      throw new Error("This signer connection is closed.");
+    return this.startPromise || (this.startPromise = (async () => {
+      const t = {
+        kinds: [Ge],
+        authors: [this.pointer.signerPubkey],
+        "#p": [this.clientPubkey]
+      }, n = await Promise.allSettled(this.conns.map((r) => r.subscribeLive(t, (o) => this.handleResponse(o))));
+      if (this.subs = n.filter((r) => r.status === "fulfilled").map((r) => r.value), this.subs.length === 0)
+        throw this.startPromise = null, new Error("Could not reach any of the signer's relays.");
+    })()), this.startPromise;
+  }
+  handleResponse(t) {
+    if (t.pubkey !== this.pointer.signerPubkey)
+      return;
+    let n;
+    try {
+      n = JSON.parse($t(this.conversationKey, t.content));
+    } catch {
+      return;
+    }
+    if (typeof n.id != "string")
+      return;
+    const r = this.pending.get(n.id);
+    if (r) {
+      if (n.result === "auth_url") {
+        if (!r.authUrlSeen && typeof n.error == "string" && n.error) {
+          const o = Ni(n.error);
+          o && (r.authUrlSeen = !0, this.onAuthUrl?.(o));
+        }
+        return;
+      }
+      if (this.pending.delete(n.id), clearTimeout(r.timer), typeof n.error == "string" && n.error) {
+        r.reject(new Ai(n.error));
+        return;
+      }
+      if (typeof n.result != "string") {
+        r.reject(new Error("The signer returned a malformed response."));
+        return;
+      }
+      r.resolve(n.result);
+    }
+  }
+  async rpc(t, n) {
+    await this.start();
+    const r = Ue(oe(8)), o = mt(this.conversationKey, JSON.stringify({ id: r, method: t, params: n })), i = [["p", this.pointer.signerPubkey]], a = X({
+      pubkey: this.clientPubkey,
+      created_at: Math.floor(Date.now() / 1e3),
+      kind: Ge,
+      tags: i,
+      content: o
+    }, this.clientSecretKey), s = new Promise((u, y) => {
+      const w = setTimeout(() => {
+        this.pending.delete(r), y(new Ri(t, this.requestTimeoutMs));
+      }, this.requestTimeoutMs);
+      this.pending.set(r, { resolve: u, reject: y, timer: w, authUrlSeen: !1 });
+    });
+    if (s.catch(() => {
+    }), !(await Promise.allSettled(this.conns.map((u) => u.publish(a)))).some((u) => u.status === "fulfilled" && u.value.ok)) {
+      const u = this.pending.get(r);
+      throw u && (this.pending.delete(r), clearTimeout(u.timer)), new Error("No relay accepted the request to the signer.");
+    }
+    return s;
+  }
+  /** bunker:// flow: announce ourselves; any non-error answer is acceptance. */
+  async connect() {
+    await this.rpc("connect", [this.pointer.signerPubkey, this.pointer.secret ?? ""]);
+  }
+  async getUserPublicKey() {
+    const t = (await this.rpc("get_public_key", [])).trim().toLowerCase();
+    if (!Gt.test(t))
+      throw new Error("The signer returned an invalid public key.");
+    return this.userPubkeyKnown = t, t;
+  }
+  async signEvent(t) {
+    const n = this.userPubkeyKnown ? { ...t, pubkey: this.userPubkeyKnown } : t, r = await this.rpc("sign_event", [JSON.stringify(n)]);
+    let o;
+    try {
+      o = JSON.parse(r);
+    } catch {
+      throw new Error("The signer returned a malformed signed event.");
+    }
+    if (!ee(o))
+      throw new Error("The signer returned an event that does not verify.");
+    if (this.userPubkeyKnown && o.pubkey !== this.userPubkeyKnown)
+      throw new Error("The signer returned an event signed by a different identity.");
+    if (o.kind !== t.kind || o.content !== t.content || o.created_at !== t.created_at || JSON.stringify(o.tags) !== JSON.stringify(t.tags))
+      throw new Error("The signer returned a different event than the one requested.");
+    return o;
+  }
+  async nip44Encrypt(t, n) {
+    return this.rpc("nip44_encrypt", [t, n]);
+  }
+  async nip44Decrypt(t, n) {
+    return this.rpc("nip44_decrypt", [t, n]);
+  }
+  async nip04Encrypt(t, n) {
+    return this.rpc("nip04_encrypt", [t, n]);
+  }
+  async nip04Decrypt(t, n) {
+    return this.rpc("nip04_decrypt", [t, n]);
+  }
+  /**
+   * Pre-signs the courtesy protocol logout event (current NIP-46 defines
+   * logout as exactly that -- a courtesy, never a security boundary). Must
+   * run BEFORE close(), while the keys still exist; the caller then closes
+   * IMMEDIATELY (local revocation must not wait on the network, BL-26) and
+   * delivers the pre-signed event afterward via publishCourtesy().
+   */
+  buildLogoutEvent() {
+    if (this.closed)
+      return null;
+    try {
+      const t = Ue(oe(8)), n = mt(this.conversationKey, JSON.stringify({ id: t, method: "logout", params: [] }));
+      return X({
+        pubkey: this.clientPubkey,
+        created_at: Math.floor(Date.now() / 1e3),
+        kind: Ge,
+        tags: [["p", this.pointer.signerPubkey]],
+        content: n
+      }, this.clientSecretKey);
+    } catch {
+      return null;
+    }
+  }
+  /**
+   * Best-effort, bounded delivery of a pre-signed event. Safe (and intended)
+   * to run AFTER close(): it needs no key material, and RelayConnection
+   * reconnects transiently to publish. Never throws.
+   */
+  async publishCourtesy(t, n = 2e3) {
+    try {
+      await Promise.race([
+        Promise.allSettled(this.conns.map((r) => r.publish(t))),
+        new Promise((r) => setTimeout(r, n))
+      ]);
+    } catch {
+    } finally {
+      for (const r of this.conns)
+        r.close();
+    }
+  }
+  close() {
+    this.closed = !0;
+    for (const t of this.subs)
+      t.close();
+    this.subs = [];
+    for (const t of this.conns)
+      t.close();
+    for (const [, t] of this.pending)
+      clearTimeout(t.timer), t.reject(new Error("The signer connection was closed."));
+    this.pending.clear(), E(this.clientSecretKey), E(this.conversationKey);
+  }
+}
+async function Ii(e) {
+  const t = _(e.clientSecretKey), n = e.timeoutMs, r = e.relayUrls.map((i) => new Lt(i, { authPrivateKey: e.clientSecretKey })), o = () => {
+    for (const i of r)
+      i.close();
+  };
+  return new Promise((i, a) => {
+    let s = !1;
+    const c = () => l(new Error("The signer-connection attempt was cancelled.")), l = (v) => {
+      s || (s = !0, clearTimeout(u), e.signal?.removeEventListener("abort", c), o(), v instanceof Error ? a(v) : i(v));
+    }, u = setTimeout(() => l(new Error(`No signer connected within ${Math.round(n / 1e3)}s. Scan or paste the connection code in your signer app, then try again.`)), n);
+    if (e.signal?.aborted) {
+      c();
+      return;
+    }
+    e.signal?.addEventListener("abort", c, { once: !0 });
+    const y = { kinds: [Ge], "#p": [t] }, w = (v) => {
+      let g, f = null;
+      try {
+        f = Ze(e.clientSecretKey, v.pubkey), g = JSON.parse($t(f, v.content));
+      } catch {
+        return;
+      } finally {
+        f && E(f);
+      }
+      g.result === e.secret && l({ signerPubkey: v.pubkey });
+    };
+    Promise.allSettled(r.map((v) => v.subscribeLive(y, w))).then((v) => {
+      v.some((g) => g.status === "fulfilled") || l(new Error("Could not reach any relay to listen for the signer."));
+    });
+  });
+}
+const sr = "bitlogin.connection.v1", cr = "bitlogin.connection.nwc.v1", an = 120, Ti = /* @__PURE__ */ new Set(["active", "suspended", "deleted"]), Li = /* @__PURE__ */ new Set(["connectable", "personal"]);
+class ke extends Error {
   constructor(t) {
     super(t), this.name = "ConnectionRecordError";
   }
 }
-function Gn(e, t) {
+function lr(e, t) {
   return Y(`bitlogin|connection-record|v1|${e}|30078|${t}`);
 }
-function Fn(e) {
+function ur(e) {
   const t = e, n = (i) => {
-    throw new ge(i);
+    throw new ke(i);
   };
-  (!t || typeof t != "object") && n("Connection record must be an object."), t.schema !== zn && n("Unsupported connection record schema (§CV8.3)."), typeof t.connection_id != "string" && n("connection_id must be a string (§CV7)."), (typeof t.connection_type != "string" || t.connection_type.length === 0) && n("connection_type must be a non-empty string (§CV8.3)."), ii.has(t.tier) || n("tier must be connectable or personal."), oi.has(t.state) || n("state must be active, suspended, or deleted (§CV8.3)."), (typeof t.label != "string" || t.label.length > zt) && n(`label must be a string of at most ${zt} characters.`), (!Number.isInteger(t.created_at) || !Number.isInteger(t.updated_at)) && n("created_at and updated_at must be integers (§CV8.3).");
+  (!t || typeof t != "object") && n("Connection record must be an object."), t.schema !== sr && n("Unsupported connection record schema (§CV8.3)."), typeof t.connection_id != "string" && n("connection_id must be a string (§CV7)."), (typeof t.connection_type != "string" || t.connection_type.length === 0) && n("connection_type must be a non-empty string (§CV8.3)."), Li.has(t.tier) || n("tier must be connectable or personal."), Ti.has(t.state) || n("state must be active, suspended, or deleted (§CV8.3)."), (typeof t.label != "string" || t.label.length > an) && n(`label must be a string of at most ${an} characters.`), (!Number.isInteger(t.created_at) || !Number.isInteger(t.updated_at)) && n("created_at and updated_at must be integers (§CV8.3).");
   const r = t.credential;
   (!r || typeof r != "object" || typeof r.schema != "string") && n("credential must be an object naming its profile schema (§CV8.3).");
   const o = t.application_binding;
   (!o || typeof o != "object" || o.origin !== null && typeof o.origin != "string" || o.app_pubkey !== null && typeof o.app_pubkey != "string") && n("application_binding must carry origin and app_pubkey (string or null)."), t.notes !== null && typeof t.notes != "string" && n("notes must be a string or null.");
 }
-async function tt(e) {
-  Fn(e.record);
-  const t = Ke(e.vaultPrk), n = k(t), r = Cn(e.record.connection_id), o = xn(e.recordPrk, e.record.connection_id), i = await Pt(e.record, o, Gn(n, r));
-  return ne({
+async function ut(e) {
+  ur(e.record);
+  const t = Ne(e.vaultPrk), n = _(t), r = Gn(e.record.connection_id), o = zn(e.recordPrk, e.record.connection_id), i = await Mt(e.record, o, lr(n, r));
+  return X({
     pubkey: n,
-    created_at: We(e.previousCreatedAt, e.now),
-    kind: re,
+    created_at: Je(e.previousCreatedAt, e.now),
+    kind: ie,
     tags: [["d", r]],
     content: JSON.stringify(i)
   }, t);
 }
-async function ai(e, t, n) {
-  if (!ae(e))
-    throw new ge("Connection record event has an invalid id or signature.");
-  const r = k(Ke(t));
+async function Ui(e, t, n) {
+  if (!ee(e))
+    throw new ke("Connection record event has an invalid id or signature.");
+  const r = _(Ne(t));
   if (e.pubkey !== r)
-    throw new ge("Connection record event is not signed by this vault's identity.");
-  const o = vt(e, "d") ?? "", i = Nn(o);
+    throw new ke("Connection record event is not signed by this vault's identity.");
+  const o = At(e, "d") ?? "", i = Fn(o);
   if (i === null)
-    throw new ge("Connection record event has a malformed d tag.");
-  const a = JSON.parse(e.content), c = Gn(e.pubkey, o), s = [
+    throw new ke("Connection record event has a malformed d tag.");
+  const a = JSON.parse(e.content), s = lr(e.pubkey, o), c = [
     { prk: t, tier: "connectable" },
     ...n ? [{ prk: n, tier: "personal" }] : []
   ];
-  for (const l of s) {
+  for (const l of c) {
     let u;
     try {
-      u = await Kt(a, xn(l.prk, i), c);
+      u = await Ot(a, zn(l.prk, i), s);
     } catch {
       continue;
     }
-    if (Fn(u), u.connection_id !== i)
-      throw new ge("Connection record id does not match its d tag.");
+    if (ur(u), u.connection_id !== i)
+      throw new ke("Connection record id does not match its d tag.");
     if (u.tier !== l.tier)
-      throw new ge("Connection record tier does not match the key that decrypted it.");
+      throw new ke("Connection record tier does not match the key that decrypted it.");
     return { record: u, tier: l.tier, event: e };
   }
   return null;
 }
-function ci(e, t) {
+function Mi(e, t) {
   return {
     ...e,
     state: "deleted",
@@ -3824,53 +4166,53 @@ function ci(e, t) {
     updated_at: t
   };
 }
-const Be = /^[0-9a-f]{64}$/u;
-class ce extends Error {
+const et = /^[0-9a-f]{64}$/u;
+class le extends Error {
   constructor(t) {
     super(t), this.name = "NwcParseError";
   }
 }
-function Bt(e) {
+function sn(e) {
   const t = e.trim();
   if (!/^nostr\+walletconnect:\/\//iu.test(t))
-    throw new ce("Not an NWC URI: it must start with nostr+walletconnect://");
+    throw new le("Not an NWC URI: it must start with nostr+walletconnect://");
   let n;
   try {
     n = new URL(t.replace(/^nostr\+walletconnect:\/\//iu, "http://"));
   } catch {
-    throw new ce("The NWC URI is malformed.");
+    throw new le("The NWC URI is malformed.");
   }
   const r = n.hostname.toLowerCase();
-  if (!Be.test(r))
-    throw new ce("The NWC URI's wallet service pubkey is not 64-char hex.");
+  if (!et.test(r))
+    throw new le("The NWC URI's wallet service pubkey is not 64-char hex.");
   const o = [], i = [];
-  let a = null, c = null;
-  for (const [s, l] of n.searchParams.entries())
-    if (s === "relay") {
-      if (!Ye(l))
-        throw new ce("An NWC relay must use secure WebSockets, except for an explicit loopback development endpoint.");
+  let a = null, s = null;
+  for (const [c, l] of n.searchParams.entries())
+    if (c === "relay") {
+      if (!it(l))
+        throw new le("An NWC relay must use secure WebSockets, except for an explicit loopback development endpoint.");
       o.push(l);
-    } else if (s === "secret") {
+    } else if (c === "secret") {
       const u = l.toLowerCase();
-      if (!Be.test(u))
-        throw new ce("The NWC URI's secret is not a 64-char hex client key.");
+      if (!et.test(u))
+        throw new le("The NWC URI's secret is not a 64-char hex client key.");
       a = u;
-    } else s === "lud16" ? c = l : i.push([s, l]);
+    } else c === "lud16" ? s = l : i.push([c, l]);
   if (o.length === 0)
-    throw new ce("The NWC URI names no relay.");
+    throw new le("The NWC URI names no relay.");
   if (a === null)
-    throw new ce("The NWC URI carries no secret.");
+    throw new le("The NWC URI carries no secret.");
   return {
-    schema: Bn,
+    schema: cr,
     wallet_pubkey: r,
     relays: o,
     secret: a,
-    lud16: c,
+    lud16: s,
     extra_params: i
   };
 }
-function si(e) {
-  Hn(e);
+function Oi(e) {
+  dr(e);
   const t = new URLSearchParams();
   for (const n of e.relays)
     t.append("relay", n);
@@ -3879,102 +4221,102 @@ function si(e) {
     t.append(n, r);
   return `nostr+walletconnect://${e.wallet_pubkey}?${t.toString()}`;
 }
-function li(e, t) {
+function Di(e, t) {
   return e.wallet_pubkey === t.wallet_pubkey && e.secret === t.secret;
 }
-function Hn(e) {
+function dr(e) {
   const t = e, n = (r) => {
-    throw new ce(r);
+    throw new le(r);
   };
-  (!t || typeof t != "object") && n("NWC credential must be an object."), t.schema !== Bn && n("NWC credential has the wrong schema."), (typeof t.wallet_pubkey != "string" || !Be.test(t.wallet_pubkey)) && n("NWC credential wallet_pubkey must be 64-char lowercase hex."), (!Array.isArray(t.relays) || t.relays.length === 0 || t.relays.some((r) => typeof r != "string")) && n("NWC credential must name at least one relay."), t.relays.some((r) => !Ye(r)) && n("NWC relays must use secure WebSockets, except for explicit loopback development endpoints."), (typeof t.secret != "string" || !Be.test(t.secret)) && n("NWC credential secret must be 64-char lowercase hex."), t.lud16 !== null && typeof t.lud16 != "string" && n("NWC credential lud16 must be a string or null."), (!Array.isArray(t.extra_params) || t.extra_params.some((r) => !Array.isArray(r) || r.length !== 2 || typeof r[0] != "string" || typeof r[1] != "string")) && n("NWC credential extra_params must be [key, value] string pairs.");
+  (!t || typeof t != "object") && n("NWC credential must be an object."), t.schema !== cr && n("NWC credential has the wrong schema."), (typeof t.wallet_pubkey != "string" || !et.test(t.wallet_pubkey)) && n("NWC credential wallet_pubkey must be 64-char lowercase hex."), (!Array.isArray(t.relays) || t.relays.length === 0 || t.relays.some((r) => typeof r != "string")) && n("NWC credential must name at least one relay."), t.relays.some((r) => !it(r)) && n("NWC relays must use secure WebSockets, except for explicit loopback development endpoints."), (typeof t.secret != "string" || !et.test(t.secret)) && n("NWC credential secret must be 64-char lowercase hex."), t.lud16 !== null && typeof t.lud16 != "string" && n("NWC credential lud16 must be a string or null."), (!Array.isArray(t.extra_params) || t.extra_params.some((r) => !Array.isArray(r) || r.length !== 2 || typeof r[0] != "string" || typeof r[1] != "string")) && n("NWC credential extra_params must be [key, value] string pairs.");
 }
-const ui = "bitlogin:vault-hwm:v2:", di = "bitlogin/vault-hwm-index/v2", Jn = "bitlogin/vault-hwm-encryption/v2", yi = /^[0-9a-f]{64}$/u;
-class de extends Error {
+const Vi = "bitlogin:vault-hwm:v2:", qi = "bitlogin/vault-hwm-index/v2", yr = "bitlogin/vault-hwm-encryption/v2", Wi = /^[0-9a-f]{64}$/u;
+class he extends Error {
   constructor() {
     super("The local Connection Vault rollback marker is invalid or has been tampered with."), this.name = "RecordHighWaterMarkError";
   }
 }
-function Tt(e) {
+function Ft(e) {
   if (!e || typeof e != "object")
     return !1;
   const t = e;
-  return Number.isInteger(t.createdAt) && (t.createdAt ?? -1) >= 0 && typeof t.eventId == "string" && yi.test(t.eventId);
+  return Number.isInteger(t.createdAt) && (t.createdAt ?? -1) >= 0 && typeof t.eventId == "string" && Wi.test(t.eventId);
 }
-function Yn(e, t) {
-  Xe(t);
-  const n = Me(e, di, 32), r = Y(t);
+function hr(e, t) {
+  at(t);
+  const n = We(e, qi, 32), r = Y(t);
   try {
-    return `${ui}${V(gt(wt, n, r))}`;
+    return `${Vi}${V(Nt(xt, n, r))}`;
   } finally {
-    x(n, r);
+    E(n, r);
   }
 }
-function hi(e, t) {
-  return `bitlogin:vault-hwm:${An(e)}:${t}`;
+function ji(e, t) {
+  return `bitlogin:vault-hwm:${Bn(e)}:${t}`;
 }
-async function pi(e, t, n) {
-  const r = Me(e, Jn, 32), o = Y(JSON.stringify(n)), i = Y(t);
+async function $i(e, t, n) {
+  const r = We(e, yr, 32), o = Y(JSON.stringify(n)), i = Y(t);
   try {
-    const a = await on(r, o, i), c = {
+    const a = await _n(r, o, i), s = {
       v: 2,
       nonce: V(a.nonce),
       ciphertext: V(a.ciphertext)
     };
-    return JSON.stringify(c);
+    return JSON.stringify(s);
   } finally {
-    x(r, o, i);
+    E(r, o, i);
   }
 }
-async function fi(e, t, n) {
-  const r = Me(e, Jn, 32), o = Y(t);
+async function Bi(e, t, n) {
+  const r = We(e, yr, 32), o = Y(t);
   let i;
   try {
     const a = JSON.parse(n);
     if (a.v !== 2 || typeof a.nonce != "string" || typeof a.ciphertext != "string")
-      throw new de();
-    i = await an(r, X(a.nonce), X(a.ciphertext), o);
-    const c = JSON.parse(Ge(i));
-    if (!Tt(c))
-      throw new de();
-    return c;
+      throw new he();
+    i = await En(r, Q(a.nonce), Q(a.ciphertext), o);
+    const s = JSON.parse(tt(i));
+    if (!Ft(s))
+      throw new he();
+    return s;
   } catch (a) {
-    throw a instanceof de ? a : new de();
+    throw a instanceof he ? a : new he();
   } finally {
-    x(r, o), i && x(i);
+    E(r, o), i && E(i);
   }
 }
-async function Xn(e, t, n, r) {
-  const o = Yn(t, n);
-  await e.set(o, await pi(t, o, r));
+async function pr(e, t, n, r) {
+  const o = hr(t, n);
+  await e.set(o, await $i(t, o, r));
 }
-async function Qn(e, t, n) {
-  const r = Yn(t, n), o = await e.get(r);
+async function fr(e, t, n) {
+  const r = hr(t, n), o = await e.get(r);
   if (o !== void 0)
-    return fi(t, r, o);
-  const i = hi(t, n), a = await e.get(i);
+    return Bi(t, r, o);
+  const i = ji(t, n), a = await e.get(i);
   if (a === void 0)
     return null;
   try {
-    const c = JSON.parse(a);
-    if (!Tt(c))
-      throw new de();
-    return await Xn(e, t, n, c), await e.delete(i), c;
-  } catch (c) {
-    throw c instanceof de ? c : new de();
+    const s = JSON.parse(a);
+    if (!Ft(s))
+      throw new he();
+    return await pr(e, t, n, s), await e.delete(i), s;
+  } catch (s) {
+    throw s instanceof he ? s : new he();
   }
 }
-async function Zn(e, t, n, r) {
-  if (!Tt(r))
-    throw new de();
-  const o = await Qn(e, t, n);
-  o && it({ created_at: r.createdAt, id: r.eventId }, { created_at: o.createdAt, id: o.eventId }) <= 0 || await Xn(e, t, n, r);
+async function vr(e, t, n, r) {
+  if (!Ft(r))
+    throw new he();
+  const o = await fr(e, t, n);
+  o && ft({ created_at: r.createdAt, id: r.eventId }, { created_at: o.createdAt, id: o.eventId }) <= 0 || await pr(e, t, n, r);
 }
-async function vi(e) {
-  const t = Ke(e.vaultPrk), n = new C(e.relayUrls, { authPrivateKey: t });
+async function zi(e) {
+  const t = Ne(e.vaultPrk), n = new x(e.relayUrls, { authPrivateKey: t });
   let r;
   try {
-    r = await ke(n, e.event, {
-      dTag: Cn(e.connectionId),
+    r = await Ke(n, e.event, {
+      dTag: Gn(e.connectionId),
       minAcks: e.minAcknowledgements,
       // The readback bar follows the ack bar: a caller publishing to fewer
       // relays (a targeted repair, a test) has already lowered its quorum.
@@ -3982,74 +4324,74 @@ async function vi(e) {
       timeoutMs: e.timeoutMs
     });
   } finally {
-    n.closeAll(), x(t);
+    n.closeAll(), E(t);
   }
-  return r.success && await Zn(e.store, e.vaultPrk, e.connectionId, {
+  return r.success && await vr(e.store, e.vaultPrk, e.connectionId, {
     createdAt: e.event.created_at,
     eventId: e.event.id
   }), r;
 }
-const Gt = 500;
-async function gi(e) {
-  const t = Ke(e.vaultPrk), n = k(t), r = new C(e.relayUrls, { authPrivateKey: t });
+const cn = 500;
+async function Gi(e) {
+  const t = Ne(e.vaultPrk), n = _(t), r = new x(e.relayUrls, { authPrivateKey: t });
   let o;
   try {
-    o = await r.queryQuorum({ kinds: [re], authors: [n], limit: Gt }, e.timeoutMs);
+    o = await r.queryQuorum({ kinds: [ie], authors: [n], limit: cn }, e.timeoutMs);
   } finally {
-    r.closeAll(), x(t);
+    r.closeAll(), E(t);
   }
-  const i = o.outcomes.some((l) => l.events.length >= Gt), a = /* @__PURE__ */ new Map();
+  const i = o.outcomes.some((l) => l.events.length >= cn), a = /* @__PURE__ */ new Map();
   for (const l of o.outcomes.flatMap((u) => u.events)) {
-    if (!ae(l) || l.pubkey !== n)
+    if (!ee(l) || l.pubkey !== n)
       continue;
-    const u = Nn(vt(l, "d") ?? "");
+    const u = Fn(At(l, "d") ?? "");
     if (u === null)
       continue;
     const y = a.get(u);
-    (!y || it(l, y) > 0) && a.set(u, l);
+    (!y || ft(l, y) > 0) && a.set(u, l);
   }
-  const c = /* @__PURE__ */ new Map(), s = [];
+  const s = /* @__PURE__ */ new Map(), c = [];
   for (const [l, u] of a) {
-    const y = await Qn(e.store, e.vaultPrk, l);
-    if (y !== null && it(u, {
+    const y = await fr(e.store, e.vaultPrk, l);
+    if (y !== null && ft(u, {
       created_at: y.createdAt,
       id: y.eventId
     }) < 0) {
-      s.push(l);
+      c.push(l);
       continue;
     }
-    c.set(l, u), await Zn(e.store, e.vaultPrk, l, {
+    s.set(l, u), await vr(e.store, e.vaultPrk, l, {
       createdAt: u.created_at,
       eventId: u.id
     });
   }
   return {
-    events: c,
-    rollbackWarnings: s,
+    events: s,
+    rollbackWarnings: c,
     quorumMet: o.quorumMet,
     respondedCount: o.respondedCount,
     truncated: i
   };
 }
-class wi {
+class Fi {
   vaultPrk;
   personalPrk = null;
   destroyed = !1;
   connectionVaultRoot;
   vaultPublicKey;
   constructor(t) {
-    this.connectionVaultRoot = t.slice(), this.vaultPrk = go(this.connectionVaultRoot), this.vaultPublicKey = An(this.vaultPrk);
+    this.connectionVaultRoot = t.slice(), this.vaultPrk = Oo(this.connectionVaultRoot), this.vaultPublicKey = Bn(this.vaultPrk);
   }
   get sudoActive() {
     return this.personalPrk !== null;
   }
   /** Opens a sudo window. Consumes (wipes) the caller's sudo key copy. */
   enableSudo(t) {
-    this.endSudo(), this.personalPrk = wo(this.connectionVaultRoot, t), x(t);
+    this.endSudo(), this.personalPrk = Do(this.connectionVaultRoot, t), E(t);
   }
   /** Closes the sudo window and wipes the personal-tier key material. */
   endSudo() {
-    this.personalPrk && x(this.personalPrk), this.personalPrk = null;
+    this.personalPrk && E(this.personalPrk), this.personalPrk = null;
   }
   /**
    * Wipes everything this session holds, permanently.
@@ -4065,7 +4407,7 @@ class wi {
    * Failing loudly is the only safe behaviour.
    */
   destroy() {
-    this.endSudo(), x(this.vaultPrk, this.connectionVaultRoot), this.destroyed = !0;
+    this.endSudo(), E(this.vaultPrk, this.connectionVaultRoot), this.destroyed = !0;
   }
   prkForTier(t) {
     if (this.destroyed)
@@ -4079,8 +4421,8 @@ class wi {
   /** Builds a fresh record + its signed event. Purely local; publish separately. */
   async createConnection(t) {
     const n = t.now ?? Math.floor(Date.now() / 1e3), r = {
-      schema: zn,
-      connection_id: bo(),
+      schema: sr,
+      connection_id: Vo(),
       connection_type: t.connection_type,
       tier: t.tier,
       state: "active",
@@ -4093,7 +4435,7 @@ class wi {
         app_pubkey: null
       },
       notes: t.notes ?? null
-    }, o = await tt({
+    }, o = await ut({
       vaultPrk: this.vaultPrk,
       recordPrk: this.prkForTier(t.tier),
       record: r,
@@ -4111,7 +4453,7 @@ class wi {
       connection_id: t.record.connection_id,
       created_at: t.record.created_at,
       updated_at: o
-    }, a = await tt({
+    }, a = await ut({
       vaultPrk: this.vaultPrk,
       recordPrk: this.prkForTier(i.tier),
       record: i,
@@ -4122,7 +4464,7 @@ class wi {
   }
   /** §CV11 step 2: the encrypted tombstone replacement. */
   async deleteConnection(t, n) {
-    const r = n ?? Math.floor(Date.now() / 1e3), o = ci(t.record, r), i = await tt({
+    const r = n ?? Math.floor(Date.now() / 1e3), o = Mi(t.record, r), i = await ut({
       vaultPrk: this.vaultPrk,
       recordPrk: this.prkForTier(o.tier),
       record: o,
@@ -4133,7 +4475,7 @@ class wi {
   }
   /** Trial-decrypts one event; personal-tier records resolve only inside a sudo window. */
   decryptEvent(t) {
-    return this.destroyed ? Promise.reject(new Error("This vault session was destroyed; create a new one from the account's root.")) : ai(t, this.vaultPrk, this.personalPrk ?? void 0);
+    return this.destroyed ? Promise.reject(new Error("This vault session was destroyed; create a new one from the account's root.")) : Ui(t, this.vaultPrk, this.personalPrk ?? void 0);
   }
   /** §CV11 step 3: a NIP-09 deletion request for a replaced record event,
    *  signed by the vault identity. Best-effort by contract — the encrypted
@@ -4141,18 +4483,18 @@ class wi {
   buildDeletionRequest(t, n) {
     if (this.destroyed)
       throw new Error("This vault session was destroyed; create a new one from the account's root.");
-    return Rn({
-      privateKey: Ke(this.vaultPrk),
+    return $n({
+      privateKey: Ne(this.vaultPrk),
       eventIdToDelete: t,
-      deletedEventKind: re,
+      deletedEventKind: ie,
       createdAt: n ?? Math.floor(Date.now() / 1e3)
     });
   }
   publish(t) {
-    return vi({ vaultPrk: this.vaultPrk, ...t });
+    return zi({ vaultPrk: this.vaultPrk, ...t });
   }
   fetchEvents(t) {
-    return gi({ vaultPrk: this.vaultPrk, ...t });
+    return Gi({ vaultPrk: this.vaultPrk, ...t });
   }
   /**
    * Fetches and decrypts everything decryptable right now. Outside a sudo
@@ -4180,40 +4522,40 @@ class wi {
     };
   }
 }
-const bi = "bitlogin", se = "kv", Z = "device-keys", mi = 2;
-function _i() {
+const Hi = "bitlogin", ue = "kv", te = "device-keys", Ji = 2;
+function Xi() {
   return new Promise((e, t) => {
-    const n = indexedDB.open(bi, mi);
+    const n = indexedDB.open(Hi, Ji);
     n.onupgradeneeded = () => {
       const r = n.result;
-      r.objectStoreNames.contains(se) || r.createObjectStore(se), r.objectStoreNames.contains(Z) || r.createObjectStore(Z);
+      r.objectStoreNames.contains(ue) || r.createObjectStore(ue), r.objectStoreNames.contains(te) || r.createObjectStore(te);
     }, n.onsuccess = () => e(n.result), n.onerror = () => t(n.error);
   });
 }
-class ki {
+class Yi {
   dbPromise = null;
   db() {
-    return this.dbPromise || (this.dbPromise = _i()), this.dbPromise;
+    return this.dbPromise || (this.dbPromise = Xi()), this.dbPromise;
   }
   async get(t) {
     const n = await this.db();
     return new Promise((r, o) => {
-      const a = n.transaction(se, "readonly").objectStore(se).get(t);
+      const a = n.transaction(ue, "readonly").objectStore(ue).get(t);
       a.onsuccess = () => r(a.result), a.onerror = () => o(a.error);
     });
   }
   async set(t, n) {
     const r = await this.db();
     return new Promise((o, i) => {
-      const a = r.transaction(se, "readwrite");
-      a.objectStore(se).put(n, t), a.oncomplete = () => o(), a.onerror = () => i(a.error);
+      const a = r.transaction(ue, "readwrite");
+      a.objectStore(ue).put(n, t), a.oncomplete = () => o(), a.onerror = () => i(a.error);
     });
   }
   async delete(t) {
     const n = await this.db();
     return new Promise((r, o) => {
-      const i = n.transaction(se, "readwrite");
-      i.objectStore(se).delete(t), i.oncomplete = () => r(), i.onerror = () => o(i.error);
+      const i = n.transaction(ue, "readwrite");
+      i.objectStore(ue).delete(t), i.oncomplete = () => r(), i.onerror = () => o(i.error);
     });
   }
   /**
@@ -4223,8 +4565,8 @@ class ki {
    */
   async getOrCreateDeviceKey(t) {
     const n = await this.db(), r = await new Promise((i, a) => {
-      const c = n.transaction(Z, "readonly").objectStore(Z).get(t);
-      c.onsuccess = () => i(c.result), c.onerror = () => a(c.error);
+      const s = n.transaction(te, "readonly").objectStore(te).get(t);
+      s.onsuccess = () => i(s.result), s.onerror = () => a(s.error);
     });
     if (r) return r;
     const o = await crypto.subtle.generateKey(
@@ -4234,13 +4576,13 @@ class ki {
     );
     try {
       return await new Promise((i, a) => {
-        const c = n.transaction(Z, "readwrite");
-        c.objectStore(Z).add(o, t), c.oncomplete = () => i(), c.onerror = () => a(c.error);
+        const s = n.transaction(te, "readwrite");
+        s.objectStore(te).add(o, t), s.oncomplete = () => i(), s.onerror = () => a(s.error);
       }), o;
     } catch {
-      const i = await new Promise((a, c) => {
-        const s = n.transaction(Z, "readonly").objectStore(Z).get(t);
-        s.onsuccess = () => a(s.result), s.onerror = () => c(s.error);
+      const i = await new Promise((a, s) => {
+        const c = n.transaction(te, "readonly").objectStore(te).get(t);
+        c.onsuccess = () => a(c.result), c.onerror = () => s(c.error);
       });
       if (i) return i;
       throw new Error("Unable to create the browser-bound session key.");
@@ -4249,29 +4591,29 @@ class ki {
   async deleteDeviceKey(t) {
     const n = await this.db();
     return new Promise((r, o) => {
-      const i = n.transaction(Z, "readwrite");
-      i.objectStore(Z).delete(t), i.oncomplete = () => r(), i.onerror = () => o(i.error);
+      const i = n.transaction(te, "readwrite");
+      i.objectStore(te).delete(t), i.oncomplete = () => r(), i.onerror = () => o(i.error);
     });
   }
 }
-const Oe = "bitlogin:session:v1", Lt = "bitlogin:session-device-key:v1";
-function Ft(e) {
+const qe = "bitlogin:session:v1", Ht = "bitlogin:session-device-key:v1";
+function ln(e) {
   let t = "";
   for (const n of e) t += String.fromCharCode(n);
   return btoa(t);
 }
-function Ht(e) {
+function un(e) {
   const t = atob(e);
   return Uint8Array.from(t, (n) => n.charCodeAt(0));
 }
-function Jt(e) {
+function dn(e) {
   const t = new Uint8Array(e.byteLength);
   return t.set(e), t.buffer;
 }
-function Ei(e) {
+function Qi(e) {
   return !!(e && typeof e == "object" && e.v === 2 && typeof e.iv == "string" && typeof e.ciphertext == "string");
 }
-async function Pi(e, t) {
+async function Zi(e, t) {
   const n = {
     everydayPrivateKeyHex: Array.from(t.everydayPrivateKey, (r) => r.toString(16).padStart(2, "0")).join(""),
     accountId: t.accountId,
@@ -4288,34 +4630,34 @@ async function Pi(e, t) {
   };
   try {
     if (typeof e.getOrCreateDeviceKey != "function") {
-      await e.delete(Oe);
+      await e.delete(qe);
       return;
     }
-    const r = await e.getOrCreateDeviceKey(Lt), o = crypto.getRandomValues(new Uint8Array(12)), i = new TextEncoder().encode(JSON.stringify(n)), a = await crypto.subtle.encrypt({ name: "AES-GCM", iv: o }, r, i), c = {
+    const r = await e.getOrCreateDeviceKey(Ht), o = crypto.getRandomValues(new Uint8Array(12)), i = new TextEncoder().encode(JSON.stringify(n)), a = await crypto.subtle.encrypt({ name: "AES-GCM", iv: o }, r, i), s = {
       v: 2,
-      iv: Ft(o),
-      ciphertext: Ft(new Uint8Array(a))
+      iv: ln(o),
+      ciphertext: ln(new Uint8Array(a))
     };
-    await e.set(Oe, JSON.stringify(c));
+    await e.set(qe, JSON.stringify(s));
   } catch {
   }
 }
-async function Ki(e) {
+async function ea(e) {
   let t;
   try {
-    t = await e.get(Oe);
+    t = await e.get(qe);
   } catch {
     return null;
   }
   if (!t) return null;
   try {
     const n = JSON.parse(t);
-    if (!Ei(n) || typeof e.getOrCreateDeviceKey != "function")
-      return await e.delete(Oe), null;
-    const r = await e.getOrCreateDeviceKey(Lt), o = await crypto.subtle.decrypt(
-      { name: "AES-GCM", iv: Jt(Ht(n.iv)) },
+    if (!Qi(n) || typeof e.getOrCreateDeviceKey != "function")
+      return await e.delete(qe), null;
+    const r = await e.getOrCreateDeviceKey(Ht), o = await crypto.subtle.decrypt(
+      { name: "AES-GCM", iv: dn(un(n.iv)) },
       r,
-      Jt(Ht(n.ciphertext))
+      dn(un(n.ciphertext))
     ), i = JSON.parse(new TextDecoder().decode(o));
     return typeof i.everydayPrivateKeyHex != "string" || typeof i.accountId != "string" || typeof i.recoveryPublicKey != "string" || !i.activeCredentialEvent || !i.activeRecoveryEvent ? null : {
       everydayPrivateKey: Uint8Array.from(
@@ -4338,13 +4680,13 @@ async function Ki(e) {
     return null;
   }
 }
-async function Ri(e) {
+async function ta(e) {
   try {
-    await e.delete(Oe), typeof e.deleteDeviceKey == "function" && await e.deleteDeviceKey(Lt);
+    await e.delete(qe), typeof e.deleteDeviceKey == "function" && await e.deleteDeviceKey(Ht);
   } catch {
   }
 }
-class Ai {
+class na {
   tail = Promise.resolve();
   run(t) {
     const n = this.tail.then(t, t);
@@ -4368,21 +4710,21 @@ const d = {
   vaultKnown: !1,
   vault: null
 };
-let D = [...ni], nt = [...ri];
-const ee = new ki(), xi = new Ai();
-function oe() {
+let M = [...mi], dt = [...ki];
+const ne = new Yi(), ra = new na();
+function ae() {
   if (!d.signer || !d.everydayPrivateKey)
     throw new Error("No identity is unlocked in this session.");
   return { signer: d.signer, everydayPrivateKey: d.everydayPrivateKey };
 }
-function Ae() {
+function Ce() {
   d.signer?.destroy(), d.everydayPrivateKey && d.everydayPrivateKey.fill(0), d.signer = null, d.everydayPrivateKey = null, d.accountId = null, d.recoveryPublicKey = null, d.activeCredentialEvent = null, d.activeRecoveryEvent = null, d.vault?.destroy(), d.vault = null, d.connectionVaultRoot && d.connectionVaultRoot.fill(0), d.connectionVaultRoot = null, d.vaultKnown = !1, d.pendingRecovery && (d.pendingRecovery.recoveryPrivateKey.fill(0), d.pendingRecovery.everydayPrivateKey.fill(0), d.pendingRecovery = null);
 }
-function rt(e, t) {
-  d.connectionVaultRoot = e ?? null, d.vaultKnown = !0, d.vault = null, t && x(t);
+function yt(e, t) {
+  d.connectionVaultRoot = e ?? null, d.vaultKnown = !0, d.vault = null, t && E(t);
 }
-async function Ve() {
-  !d.everydayPrivateKey || !d.accountId || !d.recoveryPublicKey || !d.activeCredentialEvent || !d.activeRecoveryEvent || await Pi(ee, {
+async function Be() {
+  !d.everydayPrivateKey || !d.accountId || !d.recoveryPublicKey || !d.activeCredentialEvent || !d.activeRecoveryEvent || await Zi(ne, {
     everydayPrivateKey: d.everydayPrivateKey,
     accountId: d.accountId,
     recoveryPublicKey: d.recoveryPublicKey,
@@ -4392,22 +4734,22 @@ async function Ve() {
     ...d.vaultKnown ? { vaultEnabled: d.connectionVaultRoot !== null } : {}
   });
 }
-function xe() {
+function Se() {
   try {
     return new URL(self.location.href).origin;
   } catch {
     return "";
   }
 }
-function dt() {
+function _t() {
   if (!d.signer) throw new Error("No identity is unlocked in this session.");
   if (!d.connectionVaultRoot)
     throw new Error(
       d.vaultKnown ? "This account predates the Connection Vault. Enable it from your BitLogin account manager (recovery phrase required)." : "Sign in again to use wallet connections on this device."
     );
-  return d.vault ??= new wi(d.connectionVaultRoot.slice()), d.vault;
+  return d.vault ??= new Fi(d.connectionVaultRoot.slice()), d.vault;
 }
-function Ce(e) {
+function Ie(e) {
   const { record: t } = e, n = {
     connectionId: t.connection_id,
     connectionType: t.connection_type,
@@ -4423,8 +4765,8 @@ function Ce(e) {
   }
   return n;
 }
-async function je() {
-  const e = dt(), t = await e.listConnections({ relayUrls: D, store: ee });
+async function He() {
+  const e = _t(), t = await e.listConnections({ relayUrls: M, store: ne });
   return {
     vault: e,
     connections: t.connections.filter((n) => n.record.state !== "deleted"),
@@ -4434,20 +4776,122 @@ async function je() {
     quorumMet: t.quorumMet
   };
 }
-async function ot(e) {
-  const { vault: t, connections: n } = await je(), r = n.find((o) => o.record.connection_id === e);
+async function ht(e) {
+  const { vault: t, connections: n } = await He(), r = n.find((o) => o.record.connection_id === e);
   if (!r) throw new Error("That connection no longer exists.");
   return { vault: t, connection: r };
 }
-async function Ci(e, t) {
+let we = null, se = null;
+function yn(e) {
+  self.postMessage({ notify: "nip46-auth-url", url: e });
+}
+function Te() {
+  if (!we) throw new Error("No remote signer is connected.");
+  return we;
+}
+function ze() {
+  se && (se.abort.abort(), E(se.clientSecretKey), se = null);
+}
+function gr(e) {
+  const t = e.buildLogoutEvent();
+  e.close(), t && e.publishCourtesy(t);
+}
+function hn(e, t) {
+  we && gr(we.client), we = { client: e, userPubkey: t };
+}
+async function oa(e, t) {
   switch (e) {
+    case "nip46Connect": {
+      const r = xi(t.uri), o = new on({
+        clientSecretKey: pt(),
+        pointer: r,
+        onAuthUrl: yn
+      });
+      try {
+        await o.connect();
+        const i = await o.getUserPublicKey();
+        return hn(o, i), ze(), { userPubkey: i };
+      } catch (i) {
+        throw o.close(), i;
+      }
+    }
+    case "nip46NostrconnectStart": {
+      const n = t, r = M.slice(0, 2);
+      ze();
+      const o = pt(), i = Ue(oe(16));
+      return se = { clientSecretKey: o, relayUrls: r, secret: i, abort: new AbortController() }, { uri: Ci({
+        clientPubkey: _(o),
+        relayUrls: r,
+        secret: i,
+        name: n.appName?.trim() || "BitLogin",
+        perms: ["sign_event", "nip44_encrypt", "nip44_decrypt", "nip04_encrypt", "nip04_decrypt"]
+      }) };
+    }
+    case "nip46NostrconnectAwait": {
+      const n = se;
+      if (!n) throw new Error("No signer-connection attempt is in progress.");
+      let r;
+      try {
+        ({ signerPubkey: r } = await Ii({
+          clientSecretKey: n.clientSecretKey,
+          relayUrls: n.relayUrls,
+          secret: n.secret,
+          timeoutMs: 18e4,
+          signal: n.abort.signal
+        }));
+      } catch (i) {
+        throw se === n && ze(), i;
+      }
+      if (se !== n) throw new Error("This signer-connection attempt was superseded.");
+      se = null;
+      const o = new on({
+        clientSecretKey: n.clientSecretKey,
+        pointer: { signerPubkey: r, relayUrls: n.relayUrls },
+        onAuthUrl: yn
+      });
+      try {
+        const i = await o.getUserPublicKey();
+        return hn(o, i), { userPubkey: i };
+      } catch (i) {
+        throw o.close(), i;
+      }
+    }
+    case "nip46SignEvent": {
+      const n = t;
+      return Te().client.signEvent({
+        kind: n.kind,
+        content: n.content,
+        tags: n.tags ?? [],
+        created_at: n.created_at ?? Math.floor(Date.now() / 1e3)
+      });
+    }
+    case "nip46Nip44Encrypt": {
+      const n = t;
+      return { ciphertext: await Te().client.nip44Encrypt(n.peerPublicKey, n.plaintext) };
+    }
+    case "nip46Nip44Decrypt": {
+      const n = t;
+      return { plaintext: await Te().client.nip44Decrypt(n.peerPublicKey, n.payload) };
+    }
+    case "nip46Nip04Encrypt": {
+      const n = t;
+      return { ciphertext: await Te().client.nip04Encrypt(n.peerPublicKey, n.plaintext) };
+    }
+    case "nip46Nip04Decrypt": {
+      const n = t;
+      return { plaintext: await Te().client.nip04Decrypt(n.peerPublicKey, n.payload) };
+    }
+    case "nip46Disconnect": {
+      const n = we;
+      return we = null, ze(), n && gr(n.client), {};
+    }
     case "configure": {
       const n = t;
-      return n.vaultRelayUrls?.length && (D = n.vaultRelayUrls), n.discoveryRelayUrls?.length && (nt = n.discoveryRelayUrls), {};
+      return n.vaultRelayUrls?.length && (M = n.vaultRelayUrls), n.discoveryRelayUrls?.length && (dt = n.discoveryRelayUrls), {};
     }
     case "register": {
-      const n = t, r = n.importKey ? await co({ nsecOrHex: n.importKey, loginName: n.loginName, password: n.password, vaultRelayUrls: D }) : await En({ loginName: n.loginName, password: n.password, vaultRelayUrls: D });
-      return Ae(), d.signer = new De(r.everydayPrivateKey), d.everydayPrivateKey = r.everydayPrivateKey, d.accountId = r.accountId, d.recoveryPublicKey = r.recoveryPublicKey, d.activeCredentialEvent = r.credentialEvent, d.activeRecoveryEvent = r.recoveryEvent, rt(r.connectionVaultRoot, r.vaultSudoKey), await Ve(), {
+      const n = t, r = n.importKey ? await No({ nsecOrHex: n.importKey, loginName: n.loginName, password: n.password, vaultRelayUrls: M }) : await qn({ loginName: n.loginName, password: n.password, vaultRelayUrls: M });
+      return Ce(), d.signer = new $e(r.everydayPrivateKey), d.everydayPrivateKey = r.everydayPrivateKey, d.accountId = r.accountId, d.recoveryPublicKey = r.recoveryPublicKey, d.activeCredentialEvent = r.credentialEvent, d.activeRecoveryEvent = r.recoveryEvent, yt(r.connectionVaultRoot, r.vaultSudoKey), await Be(), {
         recoveryPhrase: r.recoveryPhrase,
         everydayPublicKey: r.everydayPublicKey,
         recoveryPublicKey: r.recoveryPublicKey,
@@ -4458,18 +4902,18 @@ async function Ci(e, t) {
       };
     }
     case "previewImportKey": {
-      const r = Pn(t.nsecOrHex), o = k(r), i = { everydayPublicKey: o, npub: Ut(o) };
+      const r = Wn(t.nsecOrHex), o = _(r), i = { everydayPublicKey: o, npub: Yt(o) };
       return r.fill(0), i;
     }
     case "login": {
-      const n = t, r = await so({
+      const n = t, r = await xo({
         loginName: n.loginName,
         password: n.password,
-        vaultRelayUrls: D,
-        store: ee,
+        vaultRelayUrls: M,
+        store: ne,
         acknowledgeRollback: n.acknowledgeRollback
       });
-      return Ae(), d.signer = new De(r.everydayPrivateKey), d.everydayPrivateKey = r.everydayPrivateKey, d.accountId = r.accountId, d.recoveryPublicKey = r.recoveryPublicKey, d.activeCredentialEvent = r.credentialEvent, d.activeRecoveryEvent = r.recoveryCapsuleEvent, rt(r.connectionVaultRoot, r.vaultSudoKey), await Ve(), {
+      return Ce(), d.signer = new $e(r.everydayPrivateKey), d.everydayPrivateKey = r.everydayPrivateKey, d.accountId = r.accountId, d.recoveryPublicKey = r.recoveryPublicKey, d.activeCredentialEvent = r.credentialEvent, d.activeRecoveryEvent = r.recoveryCapsuleEvent, yt(r.connectionVaultRoot, r.vaultSudoKey), await Be(), {
         everydayPublicKey: r.everydayPublicKey,
         accountId: r.accountId,
         generation: r.generation,
@@ -4478,14 +4922,14 @@ async function Ci(e, t) {
       };
     }
     case "recover": {
-      const n = t, r = await lo({
+      const n = t, r = await Co({
         phrase: n.phrase,
-        vaultRelayUrls: D,
-        discoveryRelayUrls: nt,
+        vaultRelayUrls: M,
+        discoveryRelayUrls: dt,
         offlineRecoveryCapsuleEvents: n.offlineExportFile?.recovery_capsule_events
       });
-      return Ae(), d.pendingRecovery = r, d.signer = new De(r.everydayPrivateKey), d.everydayPrivateKey = r.everydayPrivateKey, d.accountId = r.accountId, d.recoveryPublicKey = r.recoveryPublicKey, d.activeRecoveryEvent = r.currentRecoveryEvent, rt(
-        r.currentRecoveryPayload.connection_vault_root ? X(r.currentRecoveryPayload.connection_vault_root) : void 0
+      return Ce(), d.pendingRecovery = r, d.signer = new $e(r.everydayPrivateKey), d.everydayPrivateKey = r.everydayPrivateKey, d.accountId = r.accountId, d.recoveryPublicKey = r.recoveryPublicKey, d.activeRecoveryEvent = r.currentRecoveryEvent, yt(
+        r.currentRecoveryPayload.connection_vault_root ? Q(r.currentRecoveryPayload.connection_vault_root) : void 0
       ), {
         everydayPublicKey: r.everydayPublicKey,
         accountId: r.accountId,
@@ -4497,29 +4941,29 @@ async function Ci(e, t) {
     case "completeRecovery": {
       const n = t;
       if (!d.pendingRecovery) throw new Error("No recovery is in progress in this session.");
-      const r = await uo({
+      const r = await So({
         recovered: d.pendingRecovery,
         newLoginName: n.newLoginName,
         newPassword: n.newPassword,
-        vaultRelayUrls: D,
-        store: ee
+        vaultRelayUrls: M,
+        store: ne
       });
-      return d.activeCredentialEvent = r.credentialEvent, d.activeRecoveryEvent = r.refreshedRecoveryEvent, d.pendingRecovery.recoveryPrivateKey.fill(0), d.pendingRecovery = null, await Ve(), {
+      return d.activeCredentialEvent = r.credentialEvent, d.activeRecoveryEvent = r.refreshedRecoveryEvent, d.pendingRecovery.recoveryPrivateKey.fill(0), d.pendingRecovery = null, await Be(), {
         locatorPublicKey: r.locatorPublicKey,
         credentialEventId: r.credentialEvent.id,
         refreshedRecoveryEventId: r.refreshedRecoveryEvent.id
       };
     }
     case "changePassword": {
-      const n = t, r = await yo({
+      const n = t, r = await Io({
         loginName: n.loginName,
         oldPassword: n.oldPassword,
         newPassword: n.newPassword,
-        vaultRelayUrls: D,
-        store: ee,
+        vaultRelayUrls: M,
+        store: ne,
         acknowledgeRollback: n.acknowledgeRollback
       });
-      return d.activeCredentialEvent = r.newCredentialEvent, d.recoveryPublicKey = r.recoveryPublicKey, d.activeRecoveryEvent = r.recoveryCapsuleEvent, await Ve(), {
+      return d.activeCredentialEvent = r.newCredentialEvent, d.recoveryPublicKey = r.recoveryPublicKey, d.activeRecoveryEvent = r.recoveryCapsuleEvent, await Be(), {
         newLocatorPublicKey: r.newLocatorPublicKey,
         newGeneration: r.newGeneration,
         tombstoneAcknowledgedCount: r.tombstoneAcknowledgedCount,
@@ -4527,51 +4971,51 @@ async function Ci(e, t) {
       };
     }
     case "publishProfileAndRelayLists": {
-      const n = t, { everydayPrivateKey: r } = oe();
-      return Ir({
+      const n = t, { everydayPrivateKey: r } = ae();
+      return Qr({
         everydayPrivateKey: r,
         name: n.name,
         about: n.about,
         picture: n.picture,
         generalRelays: n.generalRelays,
         dmRelays: n.dmRelays,
-        discoveryRelays: nt
+        discoveryRelays: dt
       });
     }
     case "getPublicKey": {
-      const { signer: n } = oe();
+      const { signer: n } = ae();
       return { publicKey: n.getPublicKey() };
     }
     case "signEvent": {
-      const { signer: n } = oe(), r = t;
+      const { signer: n } = ae(), r = t;
       return n.signEvent({ kind: r.kind, tags: r.tags, content: r.content, created_at: r.created_at });
     }
     case "nip44Encrypt": {
-      const { signer: n } = oe(), r = t;
+      const { signer: n } = ae(), r = t;
       return { ciphertext: n.nip44Encrypt(r.peerPublicKey, r.plaintext) };
     }
     case "nip44Decrypt": {
-      const { signer: n } = oe(), r = t;
+      const { signer: n } = ae(), r = t;
       return { plaintext: n.nip44Decrypt(r.peerPublicKey, r.payload) };
     }
     case "nip04Encrypt": {
-      const { signer: n } = oe(), r = t;
+      const { signer: n } = ae(), r = t;
       return { ciphertext: n.nip04Encrypt(r.peerPublicKey, r.plaintext) };
     }
     case "nip04Decrypt": {
-      const { signer: n } = oe(), r = t;
+      const { signer: n } = ae(), r = t;
       return { plaintext: n.nip04Decrypt(r.peerPublicKey, r.payload) };
     }
     case "exportIdentity": {
-      const { everydayPrivateKey: n, signer: r } = oe();
-      return { nsec: mr(n), npub: Ut(r.getPublicKey()) };
+      const { everydayPrivateKey: n, signer: r } = ae();
+      return { nsec: Mr(n), npub: Yt(r.getPublicKey()) };
     }
     case "buildRecoveryExport": {
-      if (oe(), !d.recoveryPublicKey || !d.activeRecoveryEvent)
+      if (ae(), !d.recoveryPublicKey || !d.activeRecoveryEvent)
         throw new Error("No recovery capsule is known in this session yet.");
-      return br({
+      return Ur({
         recoveryPublicKeyHex: d.recoveryPublicKey,
-        vaultRelayUrls: D,
+        vaultRelayUrls: M,
         recoveryCapsuleEvents: [d.activeRecoveryEvent],
         relayListEvents: []
       });
@@ -4579,7 +5023,7 @@ async function Ci(e, t) {
     case "repairReplicas": {
       if (!d.activeCredentialEvent || !d.activeRecoveryEvent)
         throw new Error("No active capsule events are known in this session yet.");
-      const n = new C(D), r = await Hr(n, d.activeCredentialEvent, d.activeRecoveryEvent);
+      const n = new x(M), r = await fo(n, d.activeCredentialEvent, d.activeRecoveryEvent);
       return n.closeAll(), r;
     }
     case "getSessionStatus":
@@ -4590,20 +5034,20 @@ async function Ci(e, t) {
     // corrupt cache is not an error: it just means the widget falls through to its
     // normal welcome screen, exactly like it always has.
     case "restoreSession": {
-      const n = await Ki(ee);
-      return n ? (Ae(), d.signer = new De(n.everydayPrivateKey), d.everydayPrivateKey = n.everydayPrivateKey, d.accountId = n.accountId, d.recoveryPublicKey = n.recoveryPublicKey, d.activeCredentialEvent = n.activeCredentialEvent, d.activeRecoveryEvent = n.activeRecoveryEvent, d.connectionVaultRoot = n.connectionVaultRoot ?? null, d.vaultKnown = n.vaultEnabled !== void 0, { restored: !0, everydayPublicKey: d.signer.getPublicKey(), accountId: n.accountId }) : { restored: !1 };
+      const n = await ea(ne);
+      return n ? (Ce(), d.signer = new $e(n.everydayPrivateKey), d.everydayPrivateKey = n.everydayPrivateKey, d.accountId = n.accountId, d.recoveryPublicKey = n.recoveryPublicKey, d.activeCredentialEvent = n.activeCredentialEvent, d.activeRecoveryEvent = n.activeRecoveryEvent, d.connectionVaultRoot = n.connectionVaultRoot ?? null, d.vaultKnown = n.vaultEnabled !== void 0, { restored: !0, everydayPublicKey: d.signer.getPublicKey(), accountId: n.accountId }) : { restored: !1 };
     }
     case "logout":
-      return Ae(), await Ri(ee), {};
+      return Ce(), await ta(ne), {};
     // ---- Connection Vault (connection-vault.md §12, reveal mode) ----
     case "vaultStatus":
-      return d.signer ? d.connectionVaultRoot ? { enabled: !0, vaultPublicKey: dt().vaultPublicKey } : { enabled: !1, reason: d.vaultKnown ? "no-vault" : "stale-cache" } : { enabled: !1 };
+      return d.signer ? d.connectionVaultRoot ? { enabled: !0, vaultPublicKey: _t().vaultPublicKey } : { enabled: !1, reason: d.vaultKnown ? "no-vault" : "stale-cache" } : { enabled: !1 };
     case "vaultList": {
-      const { connections: n, rollbackWarnings: r, unreadable: o, truncated: i, quorumMet: a } = await je();
-      return { connections: n.map(Ce), rollbackWarnings: r, unreadable: o, truncated: i, quorumMet: a };
+      const { connections: n, rollbackWarnings: r, unreadable: o, truncated: i, quorumMet: a } = await He();
+      return { connections: n.map(Ie), rollbackWarnings: r, unreadable: o, truncated: i, quorumMet: a };
     }
     case "vaultSaveNwc": {
-      const n = t, r = xe(), o = dt(), i = Bt(n.uri), a = n.label.trim().slice(0, 120) || "Wallet connection", { record: c, event: s } = await o.createConnection({
+      const n = t, r = Se(), o = _t(), i = sn(n.uri), a = n.label.trim().slice(0, 120) || "Wallet connection", { record: s, event: c } = await o.createConnection({
         connection_type: "nwc",
         tier: "connectable",
         label: a,
@@ -4611,70 +5055,70 @@ async function Ci(e, t) {
         application_binding: { origin: r, app_pubkey: null }
       });
       if (!(await o.publish({
-        event: s,
-        connectionId: c.connection_id,
-        relayUrls: D,
-        store: ee
+        event: c,
+        connectionId: s.connection_id,
+        relayUrls: M,
+        store: ne
       })).success)
         throw new Error("The connection could not be saved to enough relays. Please try again.");
-      const u = await o.decryptEvent(s);
-      return Ce(u);
+      const u = await o.decryptEvent(c);
+      return Ie(u);
     }
     case "vaultFindForOrigin": {
-      const n = xe(), { connections: r } = await je(), o = r.find(
+      const n = Se(), { connections: r } = await He(), o = r.find(
         (i) => i.record.connection_type === "nwc" && i.record.state === "active" && i.record.application_binding.origin === n
       );
-      return { connection: o ? Ce(o) : null };
+      return { connection: o ? Ie(o) : null };
     }
     case "vaultRevealNwc": {
-      const n = t, { connection: r } = await ot(n.connectionId);
+      const n = t, { connection: r } = await ht(n.connectionId);
       if (r.record.connection_type !== "nwc" || r.record.state !== "active")
         throw new Error("That connection is not an active wallet connection.");
       const o = r.record.application_binding.origin;
-      if (o !== null && o !== xe())
+      if (o !== null && o !== Se())
         throw new Error("That connection belongs to a different site.");
       const i = r.record.credential;
-      return Hn(i), { uri: si(i) };
+      return dr(i), { uri: Oi(i) };
     }
     case "vaultSetBinding": {
-      const n = t, { vault: r, connection: o } = await ot(n.connectionId), i = n.origin === null ? null : xe(), { record: a, event: c } = await r.updateConnection(o, {
+      const n = t, { vault: r, connection: o } = await ht(n.connectionId), i = n.origin === null ? null : Se(), { record: a, event: s } = await r.updateConnection(o, {
         application_binding: { origin: i, app_pubkey: null }
       });
       if (!(await r.publish({
-        event: c,
+        event: s,
         connectionId: a.connection_id,
-        relayUrls: D,
-        store: ee
+        relayUrls: M,
+        store: ne
       })).success) throw new Error("The change could not reach enough relays. Please try again.");
-      const l = await r.decryptEvent(c);
-      return Ce(l);
+      const l = await r.decryptEvent(s);
+      return Ie(l);
     }
     case "vaultDelete": {
-      const n = t, { vault: r, connection: o } = await ot(n.connectionId), { record: i, event: a } = await r.deleteConnection(o);
+      const n = t, { vault: r, connection: o } = await ht(n.connectionId), { record: i, event: a } = await r.deleteConnection(o);
       if (!(await r.publish({
         event: a,
         connectionId: i.connection_id,
-        relayUrls: D,
-        store: ee
+        relayUrls: M,
+        store: ne
       })).success) throw new Error("The deletion could not reach enough relays. Please try again.");
       try {
-        const s = r.buildDeletionRequest(o.event.id), l = new C(D);
-        await l.publishAll(s), l.closeAll();
+        const c = r.buildDeletionRequest(o.event.id), l = new x(M);
+        await l.publishAll(c), l.closeAll();
       } catch {
       }
       return {};
     }
     case "vaultOfferCheck": {
-      const n = t, r = xe(), o = Bt(n.uri), { connections: i } = await je(), a = i.find(
-        (c) => c.record.connection_type === "nwc" && li(c.record.credential, o)
+      const n = t, r = Se(), o = sn(n.uri), { connections: i } = await He(), a = i.find(
+        (s) => s.record.connection_type === "nwc" && Di(s.record.credential, o)
       );
-      return a ? a.record.application_binding.origin !== r ? { duplicate: !1 } : { duplicate: !0, connection: Ce(a) } : { duplicate: !1 };
+      return a ? a.record.application_binding.origin !== r ? { duplicate: !1 } : { duplicate: !0, connection: Ie(a) } : { duplicate: !1 };
     }
     default:
       throw new Error(`Unknown worker action: ${e}`);
   }
 }
-const Ni = /* @__PURE__ */ new Set([
+const ia = /* @__PURE__ */ new Set([
   "configure",
   "register",
   "previewImportKey",
@@ -4702,29 +5146,38 @@ const Ni = /* @__PURE__ */ new Set([
   "vaultRevealNwc",
   "vaultSetBinding",
   "vaultDelete",
-  "vaultOfferCheck"
+  "vaultOfferCheck",
+  "nip46Connect",
+  "nip46NostrconnectStart",
+  "nip46NostrconnectAwait",
+  "nip46SignEvent",
+  "nip46Nip44Encrypt",
+  "nip46Nip44Decrypt",
+  "nip46Nip04Encrypt",
+  "nip46Nip04Decrypt",
+  "nip46Disconnect"
 ]);
 self.addEventListener("message", (e) => {
   const t = e.data;
   if (!t || typeof t != "object" || typeof t.id != "string") return;
-  if (typeof t.action != "string" || !Ni.has(t.action)) {
-    const i = {
+  if (typeof t.action != "string" || !ia.has(t.action)) {
+    const a = {
       id: t.id,
       ok: !1,
       error: `Unknown worker action: ${String(t.action)}`,
       errorName: "Error"
     };
-    self.postMessage(i);
+    self.postMessage(a);
     return;
   }
   const { id: n, action: r, payload: o } = e.data;
-  xi.run(() => Ci(r, o)).then(
-    (i) => {
-      const a = { id: n, ok: !0, result: i };
-      self.postMessage(a);
+  (r.startsWith("nip46") ? (a) => a() : (a) => ra.run(a))(() => oa(r, o)).then(
+    (a) => {
+      const s = { id: n, ok: !0, result: a };
+      self.postMessage(s);
     },
-    (i) => {
-      const a = i instanceof Error ? i : new Error(String(i)), c = { id: n, ok: !1, error: a.message, errorName: a.name };
+    (a) => {
+      const s = a instanceof Error ? a : new Error(String(a)), c = { id: n, ok: !1, error: s.message, errorName: s.name };
       self.postMessage(c);
     }
   );