From fbac54dd48a6817fc7c66fbfddf79c5f5d58b287 Mon Sep 17 00:00:00 2001
From: thePR0M3TH3AN <53631862+PR0M3TH3AN@users.noreply.github.com>
Date: Fri, 31 Jul 2026 22:17:08 -0400
Subject: [PATCH] Re-vendor BitLogin at 205b067, and record its provenance

Updates the vendored widget to BitLogin 205b067, which includes the
second-audit hardening the previous bytes predated -- phrase-gated sudo key,
deterministic migration, the pinned derivation chain -- plus the entropy
work: the closed nonce/IV surface, fail-closed RNG tests, and the
package-wide Math.random ban.

Also ports the provenance recording from BitUnlock's vendoring script. The
manifest now carries repository, commit, commit date and toolchain, and the
script refuses to vendor from a BitLogin checkout with uncommitted changes,
resolved before vendorDir is deleted so the refusal leaves the committed
files intact. Hashes prove the bytes have not changed since they were
committed; only the commit says which BitLogin produced them, and version
"0.1.0" has covered many substantive changes.

EXISTING SIGN-INS ARE UNAFFECTED, which matters most here since this is the
one consumer with real users. normalize.ts, argon2id.ts, hkdf.ts and
scalarExpand.ts are byte-identical between the previously vendored build and
205b067, so login name + password derive the same locator, signing scalar
and capsule key as before. Accounts created with a hand-typed password still
sign in: the manual-password removal took away the creation, recovery and
rotation CONTROLS, not the acceptance, and nothing on the login path
inspects the password's shape. BitLogin's legacyPassword.e2e.test.ts pins
that, including the migration path of signing in with an old typed password
and rotating onto a generated one.

What does change for users: creating a new account, recovering, or rotating
now hands out a generated six-word passphrase instead of accepting a typed
one.

2354 unit tests pass, including the 10 bitlogin-specific ones in
auth-providers-bitlogin and bitlogin-modal-integration.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HtNMsKzzFTPURemX7tT19u
---
 scripts/build-bitlogin-widget.mjs             |   39 +-
 vendor/bitlogin.integrity.json                |   35 +-
 ...xcpMAo3.js => bitlogin-shared--Zs4uvXt.js} |    2 +-
 ...syHQNSG.js => bitlogin-shared-BxVSgyOf.js} |    4 +-
 ...2Rc9khL.js => bitlogin-shared-DTz11m56.js} |  522 ++---
 vendor/bitlogin/bitlogin.js                   |  549 ++---
 vendor/bitlogin/cryptoWorker.js               | 2038 +++++++++--------
 7 files changed, 1667 insertions(+), 1522 deletions(-)
 rename vendor/bitlogin/{bitlogin-shared-DxcpMAo3.js => bitlogin-shared--Zs4uvXt.js} (99%)
 rename vendor/bitlogin/{bitlogin-shared-IsyHQNSG.js => bitlogin-shared-BxVSgyOf.js} (99%)
 rename vendor/bitlogin/{bitlogin-shared-B2Rc9khL.js => bitlogin-shared-DTz11m56.js} (96%)

diff --git a/scripts/build-bitlogin-widget.mjs b/scripts/build-bitlogin-widget.mjs
index 8377a4c2..b724ef01 100644
--- a/scripts/build-bitlogin-widget.mjs
+++ b/scripts/build-bitlogin-widget.mjs
@@ -33,6 +33,43 @@ if (packageJson.name !== "@bitlogin/widget") {
   throw new Error("BITLOGIN_ENTRY must point to a BitLogin checkout (packages/widget/package.json not found there).");
 }
 
+// Provenance (BitUnlock entropy audit M1, ported). Hashes prove the vendored
+// bytes have not changed since they were committed; they cannot say WHICH
+// BitLogin commit produced them. @bitlogin/widget is a private package pinned
+// at 0.1.0 across many substantive changes, so the version string distinguishes
+// nothing. Resolved BEFORE the dist build and before vendorDir is deleted, so
+// refusing a dirty checkout leaves the committed vendored files untouched.
+const git = (args) => execSync(`git ${args}`, { cwd: bitloginRoot, encoding: "utf8" }).trim();
+
+let source;
+try {
+  const dirty = git("status --porcelain") !== "";
+  if (dirty && process.env.BITLOGIN_ALLOW_DIRTY !== "1") {
+    throw new Error(
+      "DIRTY_CHECKOUT: the BitLogin checkout has uncommitted changes, so the artifact this "
+        + "would produce corresponds to no commit and cannot be reproduced. Commit there first, "
+        + "or set BITLOGIN_ALLOW_DIRTY=1 for a throwaway local build.",
+    );
+  }
+  source = {
+    repository: git("remote get-url origin"),
+    commit: git("rev-parse HEAD"),
+    commitDate: git("log -1 --format=%cI"),
+    dirty,
+    provenance: dirty ? "dirty" : "attributed",
+    toolchain: { node: process.version, vite: packageJson.devDependencies?.vite },
+  };
+} catch (error) {
+  if (error.message.startsWith("DIRTY_CHECKOUT:")) {
+    throw new Error(error.message.replace("DIRTY_CHECKOUT: ", ""));
+  }
+  throw new Error(
+    `Could not read BitLogin git provenance from ${bitloginRoot}: ${error.message}. `
+      + "Vendoring from a non-git source leaves the artifact unattributable; refusing.",
+  );
+}
+console.log(`[vendor-bitlogin] vendoring @bitlogin/widget from ${source.commit.slice(0, 12)}`);
+
 if (!existsSync(widgetDist)) {
   console.log("[build-bitlogin-widget] dist missing, building @bitlogin/core then @bitlogin/widget first...");
   execSync("npm run build -w @bitlogin/core", { cwd: bitloginRoot, stdio: "inherit" });
@@ -56,7 +93,7 @@ for (const name of distEntries) {
 
 await writeFile(
   integrityFile,
-  `${JSON.stringify({ package: packageJson.name, version: packageJson.version, files }, null, 2)}\n`,
+  `${JSON.stringify({ package: packageJson.name, version: packageJson.version, source, files }, null, 2)}\n`,
 );
 
 try {
diff --git a/vendor/bitlogin.integrity.json b/vendor/bitlogin.integrity.json
index 3e287412..dd454c46 100644
--- a/vendor/bitlogin.integrity.json
+++ b/vendor/bitlogin.integrity.json
@@ -1,26 +1,37 @@
 {
   "package": "@bitlogin/widget",
   "version": "0.1.0",
+  "source": {
+    "repository": "https://github.com/PR0M3TH3AN/bitlogin.git",
+    "commit": "205b0678cc67ecbde18278b8f46e7f8270fb519c",
+    "commitDate": "2026-07-31T22:04:01-04:00",
+    "dirty": false,
+    "provenance": "attributed",
+    "toolchain": {
+      "node": "v22.23.1",
+      "vite": "^6.1.0"
+    }
+  },
   "files": {
-    "bitlogin-shared-B2Rc9khL.js": {
-      "sha256": "6a9df1b27d73499d3bd488182b3134e0173c6b0bf1b5537cddc0e9ec4073d8e7",
-      "bytes": 288486
-    },
-    "bitlogin-shared-DxcpMAo3.js": {
-      "sha256": "b6cb73f3544a8c378416c50740a91eaea700c4af3e4f6b131bb3694e7c816758",
+    "bitlogin-shared--Zs4uvXt.js": {
+      "sha256": "550434b2ed3df975fc1d8896dca02f8622f2819d1fd9fa288049f2c22baa6bc4",
       "bytes": 483718
     },
-    "bitlogin-shared-IsyHQNSG.js": {
-      "sha256": "bd6d38087df246792cd61b82323f2997ecf478d3abcc3885235f45a925614131",
+    "bitlogin-shared-BxVSgyOf.js": {
+      "sha256": "d7f157c2de3d4b81de0055df2582306df9d862706d1dad35ff4096d06e1c1c93",
       "bytes": 545712
     },
+    "bitlogin-shared-DTz11m56.js": {
+      "sha256": "c52f485c6390658e8da75d7c31f01167eb4f8c22d836f9d92e22c2b0885bf79e",
+      "bytes": 289118
+    },
     "bitlogin.js": {
-      "sha256": "0d118d599efd30d4c0d0c197d463fd64900e803aa1a84c7880e1780bed9f3aba",
-      "bytes": 85342
+      "sha256": "56eeb7584b0117e2e360c80d37a5bfddb2e1f7a8ee6d94995c24043c0e87b906",
+      "bytes": 77303
     },
     "cryptoWorker.js": {
-      "sha256": "4210e0d6e7c5fc33e4df2dd3eedbe9434439600d0e60fcb3cad90699c198d452",
-      "bytes": 104078
+      "sha256": "4d569dac3b808d118bf432d628f084c8c1d8ba76d94cf101030ace1077c63b36",
+      "bytes": 110827
     }
   }
 }
diff --git a/vendor/bitlogin/bitlogin-shared-DxcpMAo3.js b/vendor/bitlogin/bitlogin-shared--Zs4uvXt.js
similarity index 99%
rename from vendor/bitlogin/bitlogin-shared-DxcpMAo3.js
rename to vendor/bitlogin/bitlogin-shared--Zs4uvXt.js
index 52a9516e..d22b16f8 100644
--- a/vendor/bitlogin/bitlogin-shared-DxcpMAo3.js
+++ b/vendor/bitlogin/bitlogin-shared--Zs4uvXt.js
@@ -1,4 +1,4 @@
-import { a8 as Ye } from "./bitlogin-shared-B2Rc9khL.js";
+import { a9 as Ye } from "./bitlogin-shared-DTz11m56.js";
 function We(we, je) {
   for (var Ie = 0; Ie < je.length; Ie++) {
     const Ae = je[Ie];
diff --git a/vendor/bitlogin/bitlogin-shared-IsyHQNSG.js b/vendor/bitlogin/bitlogin-shared-BxVSgyOf.js
similarity index 99%
rename from vendor/bitlogin/bitlogin-shared-IsyHQNSG.js
rename to vendor/bitlogin/bitlogin-shared-BxVSgyOf.js
index 6b496ec3..838243bb 100644
--- a/vendor/bitlogin/bitlogin-shared-IsyHQNSG.js
+++ b/vendor/bitlogin/bitlogin-shared-BxVSgyOf.js
@@ -1,4 +1,4 @@
-import { a8 as D2 } from "./bitlogin-shared-B2Rc9khL.js";
+import { a9 as D2 } from "./bitlogin-shared-DTz11m56.js";
 const wl = {
   debug() {
   }
@@ -7918,7 +7918,7 @@ let ke;
 async function l2() {
   try {
     if (ke) return ke;
-    const e = (await import("./bitlogin-shared-DxcpMAo3.js").then((t) => t.i)).default;
+    const e = (await import("./bitlogin-shared--Zs4uvXt.js").then((t) => t.i)).default;
     return ke = new e(), ke;
   } catch (e) {
     throw console.error(e), new Error("LNC is not available");
diff --git a/vendor/bitlogin/bitlogin-shared-B2Rc9khL.js b/vendor/bitlogin/bitlogin-shared-DTz11m56.js
similarity index 96%
rename from vendor/bitlogin/bitlogin-shared-B2Rc9khL.js
rename to vendor/bitlogin/bitlogin-shared-DTz11m56.js
index 66f4c01a..4f1065bb 100644
--- a/vendor/bitlogin/bitlogin-shared-B2Rc9khL.js
+++ b/vendor/bitlogin/bitlogin-shared-DTz11m56.js
@@ -7837,7 +7837,7 @@ function pe(e, ...t) {
   if (t.length > 0 && !t.includes(e.length))
     throw new Error("Uint8Array expected of length " + t + ", got length=" + e.length);
 }
-function ht(e) {
+function ft(e) {
   if (typeof e != "function" || typeof e.create != "function")
     throw new Error("Hash should be wrapped by utils.createHasher");
   rt(e.outputLen), rt(e.blockLen);
@@ -7946,7 +7946,7 @@ function zr(e) {
   const t = (r) => e().update(Me(r)).digest(), n = e();
   return t.outputLen = n.outputLen, t.blockLen = n.blockLen, t.create = () => e(), t;
 }
-function ft(e = 32) {
+function ht(e = 32) {
   if (ve && typeof ve.getRandomValues == "function")
     return ve.getRandomValues(new Uint8Array(e));
   if (ve && typeof ve.randomBytes == "function")
@@ -7995,11 +7995,11 @@ class Jr extends Vr {
     const s = bt(t), l = this.outputLen;
     if (l % 4)
       throw new Error("_sha2: outputLen should be aligned to 32bit");
-    const u = l / 4, h = this.get();
-    if (u > h.length)
+    const u = l / 4, f = this.get();
+    if (u > f.length)
       throw new Error("_sha2: outputLen bigger than state");
     for (let g = 0; g < u; g++)
-      s.setUint32(4 * g, h[g], a);
+      s.setUint32(4 * g, f[g], a);
   }
   digest() {
     const { buffer: t, outputLen: n } = this;
@@ -8145,12 +8145,12 @@ class _n extends Jr {
       const c = ge[g - 15], d = ge[g - 2], I = re(c, 7) ^ re(c, 18) ^ c >>> 3, m = re(d, 17) ^ re(d, 19) ^ d >>> 10;
       ge[g] = m + ge[g - 7] + I + ge[g - 16] | 0;
     }
-    let { A: r, B: i, C: a, D: o, E: s, F: l, G: u, H: h } = this;
+    let { A: r, B: i, C: a, D: o, E: s, F: l, G: u, H: f } = this;
     for (let g = 0; g < 64; g++) {
-      const c = re(s, 6) ^ re(s, 11) ^ re(s, 25), d = h + c + Nn(s, l, u) + Rn[g] + ge[g] | 0, m = (re(r, 2) ^ re(r, 13) ^ re(r, 22)) + Kn(r, i, a) | 0;
-      h = u, u = l, l = s, s = o + d | 0, o = a, a = i, i = r, r = d + m | 0;
+      const c = re(s, 6) ^ re(s, 11) ^ re(s, 25), d = f + c + Nn(s, l, u) + Rn[g] + ge[g] | 0, m = (re(r, 2) ^ re(r, 13) ^ re(r, 22)) + Kn(r, i, a) | 0;
+      f = u, u = l, l = s, s = o + d | 0, o = a, a = i, i = r, r = d + m | 0;
     }
-    r = r + this.A | 0, i = i + this.B | 0, a = a + this.C | 0, o = o + this.D | 0, s = s + this.E | 0, l = l + this.F | 0, u = u + this.G | 0, h = h + this.H | 0, this.set(r, i, a, o, s, l, u, h);
+    r = r + this.A | 0, i = i + this.B | 0, a = a + this.C | 0, o = o + this.D | 0, s = s + this.E | 0, l = l + this.F | 0, u = u + this.G | 0, f = f + this.H | 0, this.set(r, i, a, o, s, l, u, f);
   }
   roundClean() {
     Ce(ge);
@@ -8240,47 +8240,47 @@ const Yr = Vn([
   "0x597f299cfc657e2a",
   "0x5fcb6fab3ad6faec",
   "0x6c44198c4a475817"
-].map((e) => BigInt(e))), Pn = Yr[0], Ln = Yr[1], Ae = /* @__PURE__ */ new Uint32Array(80), he = /* @__PURE__ */ new Uint32Array(80);
+].map((e) => BigInt(e))), Pn = Yr[0], Ln = Yr[1], Ae = /* @__PURE__ */ new Uint32Array(80), fe = /* @__PURE__ */ new Uint32Array(80);
 class Tn extends Jr {
   constructor(t = 64) {
     super(128, t, 16, !1), this.Ah = _[0] | 0, this.Al = _[1] | 0, this.Bh = _[2] | 0, this.Bl = _[3] | 0, this.Ch = _[4] | 0, this.Cl = _[5] | 0, this.Dh = _[6] | 0, this.Dl = _[7] | 0, this.Eh = _[8] | 0, this.El = _[9] | 0, this.Fh = _[10] | 0, this.Fl = _[11] | 0, this.Gh = _[12] | 0, this.Gl = _[13] | 0, this.Hh = _[14] | 0, this.Hl = _[15] | 0;
   }
   // prettier-ignore
   get() {
-    const { Ah: t, Al: n, Bh: r, Bl: i, Ch: a, Cl: o, Dh: s, Dl: l, Eh: u, El: h, Fh: g, Fl: c, Gh: d, Gl: I, Hh: m, Hl: B } = this;
-    return [t, n, r, i, a, o, s, l, u, h, g, c, d, I, m, B];
+    const { Ah: t, Al: n, Bh: r, Bl: i, Ch: a, Cl: o, Dh: s, Dl: l, Eh: u, El: f, Fh: g, Fl: c, Gh: d, Gl: I, Hh: m, Hl: B } = this;
+    return [t, n, r, i, a, o, s, l, u, f, g, c, d, I, m, B];
   }
   // prettier-ignore
-  set(t, n, r, i, a, o, s, l, u, h, g, c, d, I, m, B) {
-    this.Ah = t | 0, this.Al = n | 0, this.Bh = r | 0, this.Bl = i | 0, this.Ch = a | 0, this.Cl = o | 0, this.Dh = s | 0, this.Dl = l | 0, this.Eh = u | 0, this.El = h | 0, this.Fh = g | 0, this.Fl = c | 0, this.Gh = d | 0, this.Gl = I | 0, this.Hh = m | 0, this.Hl = B | 0;
+  set(t, n, r, i, a, o, s, l, u, f, g, c, d, I, m, B) {
+    this.Ah = t | 0, this.Al = n | 0, this.Bh = r | 0, this.Bl = i | 0, this.Ch = a | 0, this.Cl = o | 0, this.Dh = s | 0, this.Dl = l | 0, this.Eh = u | 0, this.El = f | 0, this.Fh = g | 0, this.Fl = c | 0, this.Gh = d | 0, this.Gl = I | 0, this.Hh = m | 0, this.Hl = B | 0;
   }
   process(t, n) {
     for (let b = 0; b < 16; b++, n += 4)
-      Ae[b] = t.getUint32(n), he[b] = t.getUint32(n += 4);
+      Ae[b] = t.getUint32(n), fe[b] = t.getUint32(n += 4);
     for (let b = 16; b < 80; b++) {
-      const N = Ae[b - 15] | 0, K = he[b - 15] | 0, C = Be(N, K, 1) ^ Be(N, K, 8) ^ ur(N, K, 7), D = Qe(N, K, 1) ^ Qe(N, K, 8) ^ dr(N, K, 7), G = Ae[b - 2] | 0, v = he[b - 2] | 0, P = Be(G, v, 19) ^ Le(G, v, 61) ^ ur(G, v, 6), Z = Qe(G, v, 19) ^ Te(G, v, 61) ^ dr(G, v, 6), U = Yn(D, Z, he[b - 7], he[b - 16]), p = Mn(U, C, P, Ae[b - 7], Ae[b - 16]);
-      Ae[b] = p | 0, he[b] = U | 0;
+      const N = Ae[b - 15] | 0, K = fe[b - 15] | 0, C = Be(N, K, 1) ^ Be(N, K, 8) ^ ur(N, K, 7), D = Qe(N, K, 1) ^ Qe(N, K, 8) ^ dr(N, K, 7), G = Ae[b - 2] | 0, v = fe[b - 2] | 0, P = Be(G, v, 19) ^ Le(G, v, 61) ^ ur(G, v, 6), Z = Qe(G, v, 19) ^ Te(G, v, 61) ^ dr(G, v, 6), U = Yn(D, Z, fe[b - 7], fe[b - 16]), p = Mn(U, C, P, Ae[b - 7], Ae[b - 16]);
+      Ae[b] = p | 0, fe[b] = U | 0;
     }
-    let { Ah: r, Al: i, Bh: a, Bl: o, Ch: s, Cl: l, Dh: u, Dl: h, Eh: g, El: c, Fh: d, Fl: I, Gh: m, Gl: B, Hh: S, Hl: j } = this;
+    let { Ah: r, Al: i, Bh: a, Bl: o, Ch: s, Cl: l, Dh: u, Dl: f, Eh: g, El: c, Fh: d, Fl: I, Gh: m, Gl: B, Hh: S, Hl: j } = this;
     for (let b = 0; b < 80; b++) {
-      const N = Be(g, c, 14) ^ Be(g, c, 18) ^ Le(g, c, 41), K = Qe(g, c, 14) ^ Qe(g, c, 18) ^ Te(g, c, 41), C = g & d ^ ~g & m, D = c & I ^ ~c & B, G = qn(j, K, D, Ln[b], he[b]), v = jn(G, S, N, C, Pn[b], Ae[b]), P = G | 0, Z = Be(r, i, 28) ^ Le(r, i, 34) ^ Le(r, i, 39), U = Qe(r, i, 28) ^ Te(r, i, 34) ^ Te(r, i, 39), p = r & a ^ r & s ^ a & s, f = i & o ^ i & l ^ o & l;
-      S = m | 0, j = B | 0, m = d | 0, B = I | 0, d = g | 0, I = c | 0, { h: g, l: c } = ae(u | 0, h | 0, v | 0, P | 0), u = s | 0, h = l | 0, s = a | 0, l = o | 0, a = r | 0, o = i | 0;
-      const A = zn(P, U, f);
+      const N = Be(g, c, 14) ^ Be(g, c, 18) ^ Le(g, c, 41), K = Qe(g, c, 14) ^ Qe(g, c, 18) ^ Te(g, c, 41), C = g & d ^ ~g & m, D = c & I ^ ~c & B, G = qn(j, K, D, Ln[b], fe[b]), v = jn(G, S, N, C, Pn[b], Ae[b]), P = G | 0, Z = Be(r, i, 28) ^ Le(r, i, 34) ^ Le(r, i, 39), U = Qe(r, i, 28) ^ Te(r, i, 34) ^ Te(r, i, 39), p = r & a ^ r & s ^ a & s, h = i & o ^ i & l ^ o & l;
+      S = m | 0, j = B | 0, m = d | 0, B = I | 0, d = g | 0, I = c | 0, { h: g, l: c } = ae(u | 0, f | 0, v | 0, P | 0), u = s | 0, f = l | 0, s = a | 0, l = o | 0, a = r | 0, o = i | 0;
+      const A = zn(P, U, h);
       r = Jn(A, v, Z, p), i = A | 0;
     }
-    ({ h: r, l: i } = ae(this.Ah | 0, this.Al | 0, r | 0, i | 0)), { h: a, l: o } = ae(this.Bh | 0, this.Bl | 0, a | 0, o | 0), { h: s, l } = ae(this.Ch | 0, this.Cl | 0, s | 0, l | 0), { h: u, l: h } = ae(this.Dh | 0, this.Dl | 0, u | 0, h | 0), { h: g, l: c } = ae(this.Eh | 0, this.El | 0, g | 0, c | 0), { h: d, l: I } = ae(this.Fh | 0, this.Fl | 0, d | 0, I | 0), { h: m, l: B } = ae(this.Gh | 0, this.Gl | 0, m | 0, B | 0), { h: S, l: j } = ae(this.Hh | 0, this.Hl | 0, S | 0, j | 0), this.set(r, i, a, o, s, l, u, h, g, c, d, I, m, B, S, j);
+    ({ h: r, l: i } = ae(this.Ah | 0, this.Al | 0, r | 0, i | 0)), { h: a, l: o } = ae(this.Bh | 0, this.Bl | 0, a | 0, o | 0), { h: s, l } = ae(this.Ch | 0, this.Cl | 0, s | 0, l | 0), { h: u, l: f } = ae(this.Dh | 0, this.Dl | 0, u | 0, f | 0), { h: g, l: c } = ae(this.Eh | 0, this.El | 0, g | 0, c | 0), { h: d, l: I } = ae(this.Fh | 0, this.Fl | 0, d | 0, I | 0), { h: m, l: B } = ae(this.Gh | 0, this.Gl | 0, m | 0, B | 0), { h: S, l: j } = ae(this.Hh | 0, this.Hl | 0, S | 0, j | 0), this.set(r, i, a, o, s, l, u, f, g, c, d, I, m, B, S, j);
   }
   roundClean() {
-    Ce(Ae, he);
+    Ce(Ae, fe);
   }
   destroy() {
     Ce(this.buffer), this.set(0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0);
   }
 }
-const fe = /* @__PURE__ */ zr(() => new _n()), D1 = /* @__PURE__ */ zr(() => new Tn());
+const he = /* @__PURE__ */ zr(() => new _n()), D1 = /* @__PURE__ */ zr(() => new Tn());
 class Mr extends Vr {
   constructor(t, n) {
-    super(), this.finished = !1, this.destroyed = !1, ht(t);
+    super(), this.finished = !1, this.destroyed = !1, ft(t);
     const r = Me(n);
     if (this.iHash = t.create(), typeof this.iHash.update != "function")
       throw new Error("Expected instance of class which extends utils.Hash");
@@ -8319,19 +8319,19 @@ class Mr extends Vr {
 const pt = (e, t, n) => new Mr(e, t).update(n).digest();
 pt.create = (e, t) => new Mr(e, t);
 function Xn(e, t, n) {
-  return ht(e), n === void 0 && (n = new Uint8Array(e.outputLen)), pt(e, Me(n), Me(t));
+  return ft(e), n === void 0 && (n = new Uint8Array(e.outputLen)), pt(e, Me(n), Me(t));
 }
 const wt = /* @__PURE__ */ Uint8Array.from([0]), gr = /* @__PURE__ */ Uint8Array.of();
 function Zn(e, t, n, r = 32) {
-  ht(e), rt(r);
+  ft(e), rt(r);
   const i = e.outputLen;
   if (r > 255 * i)
     throw new Error("Length should be <= 255*HashLen");
   const a = Math.ceil(r / i);
   n === void 0 && (n = gr);
   const o = new Uint8Array(a * i), s = pt.create(e, t), l = s._cloneInto(), u = new Uint8Array(s.outputLen);
-  for (let h = 0; h < a; h++)
-    wt[0] = h + 1, l.update(h === 0 ? gr : u).update(n).update(wt).digestInto(u), o.set(u, i * h), s._cloneInto(l);
+  for (let f = 0; f < a; f++)
+    wt[0] = f + 1, l.update(f === 0 ? gr : u).update(n).update(wt).digestInto(u), o.set(u, i * f), s._cloneInto(l);
   return s.destroy(), l.destroy(), Ce(u, wt), o.slice(0, r);
 }
 function jt(e) {
@@ -8404,14 +8404,14 @@ function G1(e, t) {
   return n === 0;
 }
 function jr(e, t) {
-  return Xn(fe, t, e);
+  return Xn(he, t, e);
 }
 function Rt(e, t, n) {
   const r = typeof t == "string" ? De(t) : t;
-  return Zn(fe, e, r, n);
+  return Zn(he, e, r, n);
 }
 function Rr(e) {
-  return fe(De(e));
+  return he(De(e));
 }
 function _r(...e) {
   for (const t of e)
@@ -8498,7 +8498,7 @@ function ei(e, t, n) {
   let a = r(e), o = r(e), s = 0;
   const l = () => {
     a.fill(1), o.fill(0), s = 0;
-  }, u = (...d) => n(o, a, ...d), h = (d = r(0)) => {
+  }, u = (...d) => n(o, a, ...d), f = (d = r(0)) => {
     o = u(i(0), d), a = u(), d.length !== 0 && (o = u(i(1), d), a = u());
   }, g = () => {
     if (s++ >= 1e3)
@@ -8513,10 +8513,10 @@ function ei(e, t, n) {
     return ne(...I);
   };
   return (d, I) => {
-    l(), h(d);
+    l(), f(d);
     let m;
     for (; !(m = I(g())); )
-      h();
+      f();
     return l(), m;
   };
 }
@@ -8555,7 +8555,7 @@ function $(e, t, n) {
     r *= r, r %= n;
   return r;
 }
-function hr(e, t) {
+function fr(e, t) {
   if (e === X)
     throw new Error("invert: expected non-zero number");
   if (t <= X)
@@ -8584,10 +8584,10 @@ function ni(e, t) {
 function ii(e) {
   const t = Re(e), n = nn(e), r = n(t, t.neg(t.ONE)), i = n(t, r), a = n(t, t.neg(r)), o = (e + ti) / tn;
   return (s, l) => {
-    let u = s.pow(l, o), h = s.mul(u, r);
-    const g = s.mul(u, i), c = s.mul(u, a), d = s.eql(s.sqr(h), l), I = s.eql(s.sqr(g), l);
-    u = s.cmov(u, h, d), h = s.cmov(c, g, I);
-    const m = s.eql(s.sqr(h), l), B = s.cmov(u, h, m);
+    let u = s.pow(l, o), f = s.mul(u, r);
+    const g = s.mul(u, i), c = s.mul(u, a), d = s.eql(s.sqr(f), l), I = s.eql(s.sqr(g), l);
+    u = s.cmov(u, f, d), f = s.cmov(c, g, I);
+    const m = s.eql(s.sqr(f), l), B = s.cmov(u, f, m);
     return Lt(s, B, l), B;
   };
 }
@@ -8599,7 +8599,7 @@ function nn(e) {
     t /= me, n++;
   let r = me;
   const i = Re(e);
-  for (; fr(i, r) === 1; )
+  for (; hr(i, r) === 1; )
     if (r++ > 1e3)
       throw new Error("Cannot find square root: probably non-prime P");
   if (n === 1)
@@ -8609,18 +8609,18 @@ function nn(e) {
   return function(l, u) {
     if (l.is0(u))
       return u;
-    if (fr(l, u) !== 1)
+    if (hr(l, u) !== 1)
       throw new Error("Cannot find square root");
-    let h = n, g = l.mul(l.ONE, a), c = l.pow(u, t), d = l.pow(u, o);
+    let f = n, g = l.mul(l.ONE, a), c = l.pow(u, t), d = l.pow(u, o);
     for (; !l.eql(c, l.ONE); ) {
       if (l.is0(c))
         return l.ZERO;
       let I = 1, m = l.sqr(c);
       for (; !l.eql(m, l.ONE); )
-        if (I++, m = l.sqr(m), I === h)
+        if (I++, m = l.sqr(m), I === f)
           throw new Error("Cannot find square root");
-      const B = L << BigInt(h - I - 1), S = l.pow(g, B);
-      h = I, g = l.sqr(S), c = l.mul(c, g), d = l.mul(d, S);
+      const B = L << BigInt(f - I - 1), S = l.pow(g, B);
+      f = I, g = l.sqr(S), c = l.mul(c, g), d = l.mul(d, S);
     }
     return d;
   };
@@ -8672,7 +8672,7 @@ function an(e, t, n = !1) {
   const r = new Array(t.length).fill(n ? e.ZERO : void 0), i = t.reduce((o, s, l) => e.is0(s) ? o : (r[l] = o, e.mul(o, s)), e.ONE), a = e.inv(i);
   return t.reduceRight((o, s, l) => e.is0(s) ? o : (r[l] = e.mul(o, r[l]), e.mul(o, s)), a), r;
 }
-function fr(e, t) {
+function hr(e, t) {
   const n = (e.ORDER - L) / me, r = e.pow(t, n), i = e.eql(r, e.ONE), a = e.eql(r, e.ZERO), o = e.eql(r, e.neg(e.ONE));
   if (!i && !a && !o)
     throw new Error("invalid Legendre symbol result");
@@ -8697,7 +8697,7 @@ function Re(e, t, n = !1, r = {}) {
   const { nBitLength: l, nByteLength: u } = on(e, i);
   if (u > 2048)
     throw new Error("invalid field: expected ORDER of <= 2048 bytes");
-  let h;
+  let f;
   const g = Object.freeze({
     ORDER: e,
     isLE: n,
@@ -8724,14 +8724,14 @@ function Re(e, t, n = !1, r = {}) {
     sub: (c, d) => W(c - d, e),
     mul: (c, d) => W(c * d, e),
     pow: (c, d) => li(g, c, d),
-    div: (c, d) => W(c * hr(d, e), e),
+    div: (c, d) => W(c * fr(d, e), e),
     // Same as above, but doesn't normalize
     sqrN: (c) => c * c,
     addN: (c, d) => c + d,
     subN: (c, d) => c - d,
     mulN: (c, d) => c * d,
-    inv: (c) => hr(c, e),
-    sqrt: a || ((c) => (h || (h = ai(e)), h(g, c))),
+    inv: (c) => fr(c, e),
+    sqrt: a || ((c) => (f || (f = ai(e)), f(g, c))),
     toBytes: (c) => n ? Tr(c, u) : It(c, u),
     fromBytes: (c, d = !0) => {
       if (s) {
@@ -8795,8 +8795,8 @@ function pr(e, t, n) {
   const { windowSize: r, mask: i, maxNumber: a, shiftBy: o } = n;
   let s = Number(e & i), l = e >> o;
   s > r && (s -= a, l += ye);
-  const u = t * r, h = u + Math.abs(s) - 1, g = s === 0, c = s < 0, d = t % 2 !== 0;
-  return { nextN: l, offset: h, isZero: g, isNeg: c, isNegF: d, offsetF: u };
+  const u = t * r, f = u + Math.abs(s) - 1, g = s === 0, c = s < 0, d = t % 2 !== 0;
+  return { nextN: l, offset: f, isZero: g, isNeg: c, isNegF: d, offsetF: u };
 }
 function ci(e, t) {
   if (!Array.isArray(e))
@@ -8869,8 +8869,8 @@ class di {
     let i = this.ZERO, a = this.BASE;
     const o = vt(t, this.bits);
     for (let s = 0; s < o.windows; s++) {
-      const { nextN: l, offset: u, isZero: h, isNeg: g, isNegF: c, offsetF: d } = pr(r, s, o);
-      r = l, h ? a = a.add(ot(c, n[d])) : i = i.add(ot(g, n[u]));
+      const { nextN: l, offset: u, isZero: f, isNeg: g, isNegF: c, offsetF: d } = pr(r, s, o);
+      r = l, f ? a = a.add(ot(c, n[d])) : i = i.add(ot(g, n[u]));
     }
     return Ir(r), { p: i, f: a };
   }
@@ -8882,10 +8882,10 @@ class di {
   wNAFUnsafe(t, n, r, i = this.ZERO) {
     const a = vt(t, this.bits);
     for (let o = 0; o < a.windows && r !== Se; o++) {
-      const { nextN: s, offset: l, isZero: u, isNeg: h } = pr(r, o, a);
+      const { nextN: s, offset: l, isZero: u, isNeg: f } = pr(r, o, a);
       if (r = s, !u) {
         const g = n[l];
-        i = i.add(h ? g.negate() : g);
+        i = i.add(f ? g.negate() : g);
       }
     }
     return Ir(r), i;
@@ -8926,17 +8926,17 @@ function Ai(e, t, n, r) {
   const o = e.ZERO, s = Xr(BigInt(i));
   let l = 1;
   s > 12 ? l = s - 3 : s > 4 ? l = s - 2 : s > 0 && (l = 2);
-  const u = je(l), h = new Array(Number(u) + 1).fill(o), g = Math.floor((t.BITS - 1) / l) * l;
+  const u = je(l), f = new Array(Number(u) + 1).fill(o), g = Math.floor((t.BITS - 1) / l) * l;
   let c = o;
   for (let d = g; d >= 0; d -= l) {
-    h.fill(o);
+    f.fill(o);
     for (let m = 0; m < a; m++) {
       const B = r[m], S = Number(B >> BigInt(d) & u);
-      h[S] = h[S].add(n[m]);
+      f[S] = f[S].add(n[m]);
     }
     let I = o;
-    for (let m = h.length - 1, B = o; m > 0; m--)
-      B = B.add(h[m]), I = I.add(B);
+    for (let m = f.length - 1, B = o; m > 0; m--)
+      B = B.add(f[m]), I = I.add(B);
     if (c = c.add(I), d !== 0)
       for (let m = 0; m < l; m++)
         c = c.double();
@@ -8951,7 +8951,7 @@ function mr(e, t, n) {
   } else
     return Re(e, { isLE: n });
 }
-function hi(e, t, n = {}, r) {
+function fi(e, t, n = {}, r) {
   if (r === void 0 && (r = e === "edwards"), !t || typeof t != "object")
     throw new Error(`expected valid ${e} CURVE object`);
   for (const l of ["p", "n", "h"]) {
@@ -8967,15 +8967,15 @@ function hi(e, t, n = {}, r) {
 }
 /*! noble-curves - MIT License (c) 2022 Paul Miller (paulmillr.com) */
 const yr = (e, t) => (e + (e >= 0 ? t : -t) / gn) / t;
-function fi(e, t, n) {
+function hi(e, t, n) {
   const [[r, i], [a, o]] = t, s = yr(o * e, n), l = yr(-i * e, n);
-  let u = e - s * r - l * a, h = -s * i - l * o;
-  const g = u < ce, c = h < ce;
-  g && (u = -u), c && (h = -h);
+  let u = e - s * r - l * a, f = -s * i - l * o;
+  const g = u < ce, c = f < ce;
+  g && (u = -u), c && (f = -f);
   const d = je(Math.ceil(Xr(n) / 2)) + xe;
-  if (u < ce || u >= d || h < ce || h >= d)
+  if (u < ce || u >= d || f < ce || f >= d)
     throw new Error("splitScalar (endomorphism): failed, k=" + e);
-  return { k1neg: g, k1: u, k2neg: c, k2: h };
+  return { k1neg: g, k1: u, k2neg: c, k2: f };
 }
 function Nt(e) {
   if (!["compact", "recovered", "der"].includes(e))
@@ -9033,8 +9033,8 @@ const le = {
           throw new n("tlv.decode: length bytes not complete");
         if (u[0] === 0)
           throw new n("tlv.decode(long): zero leftmost byte");
-        for (const h of u)
-          o = o << 8 | h;
+        for (const f of u)
+          o = o << 8 | f;
         if (r += l, o < 128)
           throw new n("tlv.decode(long): not minimal encoding");
       }
@@ -9071,8 +9071,8 @@ const le = {
     const { Err: t, _int: n, _tlv: r } = le, i = q("signature", e), { v: a, l: o } = r.decode(48, i);
     if (o.length)
       throw new t("invalid signature: left bytes after parsing");
-    const { v: s, l } = r.decode(2, a), { v: u, l: h } = r.decode(2, l);
-    if (h.length)
+    const { v: s, l } = r.decode(2, a), { v: u, l: f } = r.decode(2, l);
+    if (f.length)
       throw new t("invalid signature: left bytes after parsing");
     return { r: n.decode(s), s: n.decode(u) };
   },
@@ -9099,7 +9099,7 @@ function be(e, t) {
   return r;
 }
 function mi(e, t = {}) {
-  const n = hi("weierstrass", e, t), { Fp: r, Fn: i } = n;
+  const n = fi("weierstrass", e, t), { Fp: r, Fn: i } = n;
   let a = n.CURVE;
   const { h: o, n: s } = a;
   Pt(t, {}, {
@@ -9114,15 +9114,15 @@ function mi(e, t = {}) {
   const { endo: l } = t;
   if (l && (!r.is0(a.a) || typeof l.beta != "bigint" || !Array.isArray(l.basises)))
     throw new Error('invalid endo: expected "beta": bigint and "basises": array');
-  const u = hn(r, i);
-  function h() {
+  const u = fn(r, i);
+  function f() {
     if (!r.isOdd)
       throw new Error("compression is not supported: Field does not have .isOdd()");
   }
-  function g(U, p, f) {
+  function g(U, p, h) {
     const { x: A, y } = p.toAffine(), w = r.toBytes(A);
-    if (at(f, "isCompressed"), f) {
-      h();
+    if (at(h, "isCompressed"), h) {
+      f();
       const E = !r.isOdd(y);
       return ne(An(E), w);
     } else
@@ -9130,7 +9130,7 @@ function mi(e, t = {}) {
   }
   function c(U) {
     Ie(U, void 0, "Point");
-    const { publicKey: p, publicKeyUncompressed: f } = u, A = U.length, y = U[0], w = U.subarray(1);
+    const { publicKey: p, publicKeyUncompressed: h } = u, A = U.length, y = U[0], w = U.subarray(1);
     if (A === p && (y === 2 || y === 3)) {
       const E = r.fromBytes(w);
       if (!r.isValid(E))
@@ -9143,33 +9143,33 @@ function mi(e, t = {}) {
         const O = Y instanceof Error ? ": " + Y.message : "";
         throw new Error("bad point: is not on curve, sqrt error" + O);
       }
-      h();
+      f();
       const x = r.isOdd(k);
       return (y & 1) === 1 !== x && (k = r.neg(k)), { x: E, y: k };
-    } else if (A === f && y === 4) {
+    } else if (A === h && y === 4) {
       const E = r.BYTES, Q = r.fromBytes(w.subarray(0, E)), k = r.fromBytes(w.subarray(E, E * 2));
       if (!B(Q, k))
         throw new Error("bad point: is not on curve");
       return { x: Q, y: k };
     } else
-      throw new Error(`bad point: got length ${A}, expected compressed=${p} or uncompressed=${f}`);
+      throw new Error(`bad point: got length ${A}, expected compressed=${p} or uncompressed=${h}`);
   }
   const d = t.toBytes || g, I = t.fromBytes || c;
   function m(U) {
-    const p = r.sqr(U), f = r.mul(p, U);
-    return r.add(r.add(f, r.mul(U, a.a)), a.b);
+    const p = r.sqr(U), h = r.mul(p, U);
+    return r.add(r.add(h, r.mul(U, a.a)), a.b);
   }
   function B(U, p) {
-    const f = r.sqr(p), A = m(U);
-    return r.eql(f, A);
+    const h = r.sqr(p), A = m(U);
+    return r.eql(h, A);
   }
   if (!B(a.Gx, a.Gy))
     throw new Error("bad curve params: generator point");
   const S = r.mul(r.pow(a.a, Ze), Ii), j = r.mul(r.sqr(a.b), BigInt(27));
   if (r.is0(r.add(S, j)))
     throw new Error("bad curve params: a or b");
-  function b(U, p, f = !1) {
-    if (!r.isValid(p) || f && r.is0(p))
+  function b(U, p, h = !1) {
+    if (!r.isValid(p) || h && r.is0(p))
       throw new Error(`bad point coordinate ${U}`);
     return p;
   }
@@ -9180,15 +9180,15 @@ function mi(e, t = {}) {
   function K(U) {
     if (!l || !l.basises)
       throw new Error("no endo");
-    return fi(U, l.basises, i.ORDER);
+    return hi(U, l.basises, i.ORDER);
   }
   const C = Ar((U, p) => {
-    const { X: f, Y: A, Z: y } = U;
+    const { X: h, Y: A, Z: y } = U;
     if (r.eql(y, r.ONE))
-      return { x: f, y: A };
+      return { x: h, y: A };
     const w = U.is0();
     p == null && (p = w ? r.ONE : r.inv(y));
-    const E = r.mul(f, p), Q = r.mul(A, p), k = r.mul(y, p);
+    const E = r.mul(h, p), Q = r.mul(A, p), k = r.mul(y, p);
     if (w)
       return { x: r.ZERO, y: r.ZERO };
     if (!r.eql(k, r.ONE))
@@ -9200,38 +9200,38 @@ function mi(e, t = {}) {
         return;
       throw new Error("bad point: ZERO");
     }
-    const { x: p, y: f } = U.toAffine();
-    if (!r.isValid(p) || !r.isValid(f))
+    const { x: p, y: h } = U.toAffine();
+    if (!r.isValid(p) || !r.isValid(h))
       throw new Error("bad point: x or y not field elements");
-    if (!B(p, f))
+    if (!B(p, h))
       throw new Error("bad point: equation left != right");
     if (!U.isTorsionFree())
       throw new Error("bad point: not in prime-order subgroup");
     return !0;
   });
-  function G(U, p, f, A, y) {
-    return f = new v(r.mul(f.X, U), f.Y, f.Z), p = ot(A, p), f = ot(y, f), p.add(f);
+  function G(U, p, h, A, y) {
+    return h = new v(r.mul(h.X, U), h.Y, h.Z), p = ot(A, p), h = ot(y, h), p.add(h);
   }
   class v {
     /** Does NOT validate if the point is valid. Use `.assertValidity()`. */
-    constructor(p, f, A) {
-      this.X = b("x", p), this.Y = b("y", f, !0), this.Z = b("z", A), Object.freeze(this);
+    constructor(p, h, A) {
+      this.X = b("x", p), this.Y = b("y", h, !0), this.Z = b("z", A), Object.freeze(this);
     }
     static CURVE() {
       return a;
     }
     /** Does NOT validate if the point is valid. Use `.assertValidity()`. */
     static fromAffine(p) {
-      const { x: f, y: A } = p || {};
-      if (!p || !r.isValid(f) || !r.isValid(A))
+      const { x: h, y: A } = p || {};
+      if (!p || !r.isValid(h) || !r.isValid(A))
         throw new Error("invalid affine point");
       if (p instanceof v)
         throw new Error("projective point not allowed");
-      return r.is0(f) && r.is0(A) ? v.ZERO : new v(f, A, r.ONE);
+      return r.is0(h) && r.is0(A) ? v.ZERO : new v(h, A, r.ONE);
     }
     static fromBytes(p) {
-      const f = v.fromAffine(I(Ie(p, void 0, "point")));
-      return f.assertValidity(), f;
+      const h = v.fromAffine(I(Ie(p, void 0, "point")));
+      return h.assertValidity(), h;
     }
     static fromHex(p) {
       return v.fromBytes(q("pointHex", p));
@@ -9248,8 +9248,8 @@ function mi(e, t = {}) {
      * @param isLazy true will defer table computation until the first multiplication
      * @returns
      */
-    precompute(p = 8, f = !0) {
-      return Z.createCache(this, p), f || this.multiply(Ze), this;
+    precompute(p = 8, h = !0) {
+      return Z.createCache(this, p), h || this.multiply(Ze), this;
     }
     // TODO: return `this`
     /** A point on curve is valid if it conforms to equation. */
@@ -9265,7 +9265,7 @@ function mi(e, t = {}) {
     /** Compare one point to another. */
     equals(p) {
       N(p);
-      const { X: f, Y: A, Z: y } = this, { X: w, Y: E, Z: Q } = p, k = r.eql(r.mul(f, Q), r.mul(w, y)), x = r.eql(r.mul(A, Q), r.mul(E, y));
+      const { X: h, Y: A, Z: y } = this, { X: w, Y: E, Z: Q } = p, k = r.eql(r.mul(h, Q), r.mul(w, y)), x = r.eql(r.mul(A, Q), r.mul(E, y));
       return k && x;
     }
     /** Flips point to one corresponding to (x, -y) in Affine coordinates. */
@@ -9277,7 +9277,7 @@ function mi(e, t = {}) {
     // https://eprint.iacr.org/2015/1060, algorithm 3
     // Cost: 8M + 3S + 3*a + 2*b3 + 15add.
     double() {
-      const { a: p, b: f } = a, A = r.mul(f, Ze), { X: y, Y: w, Z: E } = this;
+      const { a: p, b: h } = a, A = r.mul(h, Ze), { X: y, Y: w, Z: E } = this;
       let Q = r.ZERO, k = r.ZERO, x = r.ZERO, F = r.mul(y, y), Y = r.mul(w, w), O = r.mul(E, E), H = r.mul(y, w);
       return H = r.add(H, H), x = r.mul(y, E), x = r.add(x, x), Q = r.mul(p, x), k = r.mul(A, O), k = r.add(Q, k), Q = r.sub(Y, k), k = r.add(Y, k), k = r.mul(Q, k), Q = r.mul(H, Q), x = r.mul(A, x), O = r.mul(p, O), H = r.sub(F, O), H = r.mul(p, H), H = r.add(H, x), x = r.add(F, F), F = r.add(x, F), F = r.add(F, O), F = r.mul(F, H), k = r.add(k, F), O = r.mul(w, E), O = r.add(O, O), F = r.mul(O, H), Q = r.sub(Q, F), x = r.mul(O, Y), x = r.add(x, x), x = r.add(x, x), new v(Q, k, x);
     }
@@ -9287,11 +9287,11 @@ function mi(e, t = {}) {
     // Cost: 12M + 0S + 3*a + 3*b3 + 23add.
     add(p) {
       N(p);
-      const { X: f, Y: A, Z: y } = this, { X: w, Y: E, Z: Q } = p;
+      const { X: h, Y: A, Z: y } = this, { X: w, Y: E, Z: Q } = p;
       let k = r.ZERO, x = r.ZERO, F = r.ZERO;
       const Y = a.a, O = r.mul(a.b, Ze);
-      let H = r.mul(f, w), z = r.mul(A, E), M = r.mul(y, Q), T = r.add(f, A), J = r.add(w, E);
-      T = r.mul(T, J), J = r.add(H, z), T = r.sub(T, J), J = r.add(f, y);
+      let H = r.mul(h, w), z = r.mul(A, E), M = r.mul(y, Q), T = r.add(h, A), J = r.add(w, E);
+      T = r.mul(T, J), J = r.add(H, z), T = r.sub(T, J), J = r.add(h, y);
       let R = r.add(w, Q);
       return J = r.mul(J, R), R = r.add(H, M), J = r.sub(J, R), R = r.add(A, y), k = r.add(E, Q), R = r.mul(R, k), k = r.add(z, M), R = r.sub(R, k), F = r.mul(Y, J), k = r.mul(O, M), F = r.add(k, F), k = r.sub(z, F), F = r.add(z, F), x = r.mul(k, F), z = r.add(H, H), z = r.add(z, H), M = r.mul(Y, M), J = r.mul(O, J), z = r.add(z, M), M = r.sub(H, M), M = r.mul(Y, M), J = r.add(J, M), H = r.mul(z, J), x = r.add(x, H), H = r.mul(R, J), k = r.mul(T, k), k = r.sub(k, H), H = r.mul(T, z), F = r.mul(R, F), F = r.add(F, H), new v(k, x, F);
     }
@@ -9311,14 +9311,14 @@ function mi(e, t = {}) {
      * @returns New point
      */
     multiply(p) {
-      const { endo: f } = t;
+      const { endo: h } = t;
       if (!i.isValidNot0(p))
         throw new Error("invalid scalar: out of range");
       let A, y;
       const w = (E) => Z.cached(this, E, (Q) => kt(v, Q));
-      if (f) {
+      if (h) {
         const { k1neg: E, k1: Q, k2neg: k, k2: x } = K(p), { p: F, f: Y } = w(Q), { p: O, f: H } = w(x);
-        y = Y.add(H), A = G(f.beta, F, O, E, k);
+        y = Y.add(H), A = G(h.beta, F, O, E, k);
       } else {
         const { p: E, f: Q } = w(p);
         A = E, y = Q;
@@ -9331,7 +9331,7 @@ function mi(e, t = {}) {
      * an exposed secret key e.g. sig verification, which works over *public* keys.
      */
     multiplyUnsafe(p) {
-      const { endo: f } = t, A = this;
+      const { endo: h } = t, A = this;
       if (!i.isValid(p))
         throw new Error("invalid scalar: out of range");
       if (p === ce || A.is0())
@@ -9340,14 +9340,14 @@ function mi(e, t = {}) {
         return A;
       if (Z.hasCache(this))
         return this.multiply(p);
-      if (f) {
+      if (h) {
         const { k1neg: y, k1: w, k2neg: E, k2: Q } = K(p), { p1: k, p2: x } = gi(v, A, w, Q);
-        return G(f.beta, k, x, y, E);
+        return G(h.beta, k, x, y, E);
       } else
         return Z.unsafe(A, p);
     }
-    multiplyAndAddUnsafe(p, f, A) {
-      const y = this.multiplyUnsafe(f).add(p.multiplyUnsafe(A));
+    multiplyAndAddUnsafe(p, h, A) {
+      const y = this.multiplyUnsafe(h).add(p.multiplyUnsafe(A));
       return y.is0() ? void 0 : y;
     }
     /**
@@ -9400,8 +9400,8 @@ function mi(e, t = {}) {
     static normalizeZ(p) {
       return kt(v, p);
     }
-    static msm(p, f) {
-      return Ai(v, i, p, f);
+    static msm(p, h) {
+      return Ai(v, i, p, h);
     }
     static fromPrivateKey(p) {
       return v.BASE.multiply(be(i, p));
@@ -9414,7 +9414,7 @@ function mi(e, t = {}) {
 function An(e) {
   return Uint8Array.of(e ? 2 : 3);
 }
-function hn(e, t) {
+function fn(e, t) {
   return {
     secretKey: t.BYTES,
     publicKey: 1 + e.BYTES,
@@ -9424,7 +9424,7 @@ function hn(e, t) {
   };
 }
 function yi(e, t = {}) {
-  const { Fn: n } = e, r = t.randomBytes || ft, i = Object.assign(hn(e.Fp, n), { seed: ln(n.ORDER) });
+  const { Fn: n } = e, r = t.randomBytes || ht, i = Object.assign(fn(e.Fp, n), { seed: ln(n.ORDER) });
   function a(d) {
     try {
       return !!be(n, d);
@@ -9451,7 +9451,7 @@ function yi(e, t = {}) {
     const I = s(d);
     return { secretKey: I, publicKey: l(I) };
   }
-  function h(d) {
+  function f(d) {
     if (typeof d == "bigint")
       return !1;
     if (d instanceof e)
@@ -9463,9 +9463,9 @@ function yi(e, t = {}) {
     return S === m || S === B;
   }
   function g(d, I, m = !0) {
-    if (h(d) === !0)
+    if (f(d) === !0)
       throw new Error("first arg must be private key");
-    if (h(I) === !1)
+    if (f(I) === !1)
       throw new Error("second arg must be public key");
     const B = be(n, d);
     return e.fromHex(I).multiply(B).toBytes(m);
@@ -9484,33 +9484,33 @@ function yi(e, t = {}) {
   }, lengths: i });
 }
 function bi(e, t, n = {}) {
-  ht(t), Pt(n, {}, {
+  ft(t), Pt(n, {}, {
     hmac: "function",
     lowS: "boolean",
     randomBytes: "function",
     bits2int: "function",
     bits2int_modN: "function"
   });
-  const r = n.randomBytes || ft, i = n.hmac || ((f, ...A) => pt(t, f, ne(...A))), { Fp: a, Fn: o } = e, { ORDER: s, BITS: l } = o, { keygen: u, getPublicKey: h, getSharedSecret: g, utils: c, lengths: d } = yi(e, n), I = {
+  const r = n.randomBytes || ht, i = n.hmac || ((h, ...A) => pt(t, h, ne(...A))), { Fp: a, Fn: o } = e, { ORDER: s, BITS: l } = o, { keygen: u, getPublicKey: f, getSharedSecret: g, utils: c, lengths: d } = yi(e, n), I = {
     prehash: !1,
     lowS: typeof n.lowS == "boolean" ? n.lowS : !1,
     format: void 0,
     //'compact' as ECDSASigFormat,
     extraEntropy: !1
   }, m = "compact";
-  function B(f) {
+  function B(h) {
     const A = s >> xe;
-    return f > A;
+    return h > A;
   }
-  function S(f, A) {
+  function S(h, A) {
     if (!o.isValidNot0(A))
-      throw new Error(`invalid signature ${f}: out of range 1..Point.Fn.ORDER`);
+      throw new Error(`invalid signature ${h}: out of range 1..Point.Fn.ORDER`);
     return A;
   }
-  function j(f, A) {
+  function j(h, A) {
     Nt(A);
     const y = d.signature, w = A === "compact" ? y : A === "recovered" ? y + 1 : void 0;
-    return Ie(f, w, `${A} signature`);
+    return Ie(h, w, `${A} signature`);
   }
   class b {
     constructor(A, y, w) {
@@ -9598,18 +9598,18 @@ function bi(e, t, n = {}) {
   }, K = n.bits2int_modN || function(A) {
     return o.create(N(A));
   }, C = je(l);
-  function D(f) {
-    return Wn("num < 2^" + l, f, ce, C), o.toBytes(f);
+  function D(h) {
+    return Wn("num < 2^" + l, h, ce, C), o.toBytes(h);
   }
-  function G(f, A) {
-    return Ie(f, void 0, "message"), A ? Ie(t(f), void 0, "prehashed message") : f;
+  function G(h, A) {
+    return Ie(h, void 0, "message"), A ? Ie(t(h), void 0, "prehashed message") : h;
   }
-  function v(f, A, y) {
+  function v(h, A, y) {
     if (["recovered", "canonical"].some((z) => z in y))
       throw new Error("sign() legacy options not supported");
     const { lowS: w, prehash: E, extraEntropy: Q } = Et(y, I);
-    f = G(f, E);
-    const k = K(f), x = be(o, A), F = [D(x), D(k)];
+    h = G(h, E);
+    const k = K(h), x = be(o, A), F = [D(x), D(k)];
     if (Q != null && Q !== !1) {
       const z = Q === !0 ? r(d.secretKey) : Q;
       F.push(q("extraEntropy", z));
@@ -9630,39 +9630,39 @@ function bi(e, t, n = {}) {
     }
     return { seed: Y, k2sig: H };
   }
-  function P(f, A, y = {}) {
-    f = q("message", f);
-    const { seed: w, k2sig: E } = v(f, A, y);
+  function P(h, A, y = {}) {
+    h = q("message", h);
+    const { seed: w, k2sig: E } = v(h, A, y);
     return ei(t.outputLen, o.BYTES, i)(w, E);
   }
-  function Z(f) {
+  function Z(h) {
     let A;
-    const y = typeof f == "string" || At(f), w = !y && f !== null && typeof f == "object" && typeof f.r == "bigint" && typeof f.s == "bigint";
+    const y = typeof h == "string" || At(h), w = !y && h !== null && typeof h == "object" && typeof h.r == "bigint" && typeof h.s == "bigint";
     if (!y && !w)
       throw new Error("invalid signature, expected Uint8Array, hex string or Signature instance");
     if (w)
-      A = new b(f.r, f.s);
+      A = new b(h.r, h.s);
     else if (y) {
       try {
-        A = b.fromBytes(q("sig", f), "der");
+        A = b.fromBytes(q("sig", h), "der");
       } catch (E) {
         if (!(E instanceof le.Err))
           throw E;
       }
       if (!A)
         try {
-          A = b.fromBytes(q("sig", f), "compact");
+          A = b.fromBytes(q("sig", h), "compact");
         } catch {
           return !1;
         }
     }
     return A || !1;
   }
-  function U(f, A, y, w = {}) {
+  function U(h, A, y, w = {}) {
     const { lowS: E, prehash: Q, format: k } = Et(w, I);
     if (y = q("publicKey", y), A = G(q("message", A), Q), "strict" in w)
       throw new Error("options.strict was renamed to lowS");
-    const x = k === void 0 ? Z(f) : b.fromBytes(q("sig", f), k);
+    const x = k === void 0 ? Z(h) : b.fromBytes(q("sig", h), k);
     if (x === !1)
       return !1;
     try {
@@ -9675,13 +9675,13 @@ function bi(e, t, n = {}) {
       return !1;
     }
   }
-  function p(f, A, y = {}) {
+  function p(h, A, y = {}) {
     const { prehash: w } = Et(y, I);
-    return A = G(A, w), b.fromBytes(f, "recovered").recoverPublicKey(A).toBytes();
+    return A = G(A, w), b.fromBytes(h, "recovered").recoverPublicKey(A).toBytes();
   }
   return Object.freeze({
     keygen: u,
-    getPublicKey: h,
+    getPublicKey: f,
     getSharedSecret: g,
     utils: c,
     lengths: d,
@@ -9763,26 +9763,26 @@ const Fe = {
   ]
 }, Ei = /* @__PURE__ */ BigInt(0), br = /* @__PURE__ */ BigInt(1), Kt = /* @__PURE__ */ BigInt(2);
 function xi(e) {
-  const t = Fe.p, n = BigInt(3), r = BigInt(6), i = BigInt(11), a = BigInt(22), o = BigInt(23), s = BigInt(44), l = BigInt(88), u = e * e * e % t, h = u * u * e % t, g = $(h, n, t) * h % t, c = $(g, n, t) * h % t, d = $(c, Kt, t) * u % t, I = $(d, i, t) * d % t, m = $(I, a, t) * I % t, B = $(m, s, t) * m % t, S = $(B, l, t) * B % t, j = $(S, s, t) * m % t, b = $(j, n, t) * h % t, N = $(b, o, t) * I % t, K = $(N, r, t) * u % t, C = $(K, Kt, t);
+  const t = Fe.p, n = BigInt(3), r = BigInt(6), i = BigInt(11), a = BigInt(22), o = BigInt(23), s = BigInt(44), l = BigInt(88), u = e * e * e % t, f = u * u * e % t, g = $(f, n, t) * f % t, c = $(g, n, t) * f % t, d = $(c, Kt, t) * u % t, I = $(d, i, t) * d % t, m = $(I, a, t) * I % t, B = $(m, s, t) * m % t, S = $(B, l, t) * B % t, j = $(S, s, t) * m % t, b = $(j, n, t) * f % t, N = $(b, o, t) * I % t, K = $(N, r, t) * u % t, C = $(K, Kt, t);
   if (!st.eql(st.sqr(C), e))
     throw new Error("Cannot find square root");
   return C;
 }
-const st = Re(Fe.p, { sqrt: xi }), mt = Bi({ ...Fe, Fp: st, lowS: !0, endo: Qi }, fe), wr = {};
+const st = Re(Fe.p, { sqrt: xi }), mt = Bi({ ...Fe, Fp: st, lowS: !0, endo: Qi }, he), wr = {};
 function lt(e, ...t) {
   let n = wr[e];
   if (n === void 0) {
-    const r = fe(qt(e));
+    const r = he(qt(e));
     n = ne(r, r), wr[e] = n;
   }
-  return fe(ne(n, ...t));
+  return he(ne(n, ...t));
 }
 const Tt = (e) => e.toBytes(!0).slice(1), He = mt.Point, Xt = (e) => e % Kt === Ei;
 function Ot(e) {
   const { Fn: t, BASE: n } = He, r = be(t, e), i = n.multiply(r);
   return { scalar: Xt(i.y) ? r : t.neg(r), bytes: Tt(i) };
 }
-function fn(e) {
+function hn(e) {
   const t = st;
   if (!t.isValidNot0(e))
     throw new Error("invalid x: Fail if x ≥ p");
@@ -9799,29 +9799,29 @@ function pn(...e) {
 function Cr(e) {
   return Ot(e).bytes;
 }
-function Di(e, t, n = ft(32)) {
-  const { Fn: r } = He, i = q("message", e), { bytes: a, scalar: o } = Ot(t), s = q("auxRand", n, 32), l = r.toBytes(o ^ Ye(lt("BIP0340/aux", s))), u = lt("BIP0340/nonce", l, a, i), { bytes: h, scalar: g } = Ot(u), c = pn(h, a, i), d = new Uint8Array(64);
-  if (d.set(h, 0), d.set(r.toBytes(r.create(g + c * o)), 32), !In(d, i, a))
+function Di(e, t, n = ht(32)) {
+  const { Fn: r } = He, i = q("message", e), { bytes: a, scalar: o } = Ot(t), s = q("auxRand", n, 32), l = r.toBytes(o ^ Ye(lt("BIP0340/aux", s))), u = lt("BIP0340/nonce", l, a, i), { bytes: f, scalar: g } = Ot(u), c = pn(f, a, i), d = new Uint8Array(64);
+  if (d.set(f, 0), d.set(r.toBytes(r.create(g + c * o)), 32), !In(d, i, a))
     throw new Error("sign: Invalid signature produced");
   return d;
 }
 function In(e, t, n) {
   const { Fn: r, BASE: i } = He, a = q("signature", e, 64), o = q("message", t), s = q("publicKey", n, 32);
   try {
-    const l = fn(Ye(s)), u = Ye(a.subarray(0, 32));
+    const l = hn(Ye(s)), u = Ye(a.subarray(0, 32));
     if (!Ht(u, br, Fe.p))
       return !1;
-    const h = Ye(a.subarray(32, 64));
-    if (!Ht(h, br, Fe.n))
+    const f = Ye(a.subarray(32, 64));
+    if (!Ht(f, br, Fe.n))
       return !1;
-    const g = pn(r.toBytes(u), Tt(l), o), c = i.multiplyUnsafe(h).add(l.multiplyUnsafe(r.neg(g))), { x: d, y: I } = c.toAffine();
+    const g = pn(r.toBytes(u), Tt(l), o), c = i.multiplyUnsafe(f).add(l.multiplyUnsafe(r.neg(g))), { x: d, y: I } = c.toAffine();
     return !(c.is0() || !Xt(I) || d !== u);
   } catch {
     return !1;
   }
 }
 const Zt = /* @__PURE__ */ (() => {
-  const n = (i = ft(48)) => cn(i, Fe.n);
+  const n = (i = ht(48)) => cn(i, Fe.n);
   mt.utils.randomSecretKey;
   function r(i) {
     const a = n(i);
@@ -9838,7 +9838,7 @@ const Zt = /* @__PURE__ */ (() => {
       randomPrivateKey: n,
       taggedHash: lt,
       // TODO: remove
-      lift_x: fn,
+      lift_x: hn,
       pointToBytes: Tt,
       numberToBytesBE: It,
       bytesToNumberBE: Ge,
@@ -9887,22 +9887,22 @@ function we(e, t, n, r) {
     });
   }
   return new (n || (n = Promise))(function(a, o) {
-    function s(h) {
+    function s(f) {
       try {
-        u(r.next(h));
+        u(r.next(f));
       } catch (g) {
         o(g);
       }
     }
-    function l(h) {
+    function l(f) {
       try {
-        u(r.throw(h));
+        u(r.throw(f));
       } catch (g) {
         o(g);
       }
     }
-    function u(h) {
-      h.done ? a(h.value) : i(h.value).then(s, l);
+    function u(f) {
+      f.done ? a(f.value) : i(f.value).then(s, l);
     }
     u((r = r.apply(e, [])).next());
   });
@@ -10023,7 +10023,7 @@ function wn(e, t) {
       n.exports.Hash_SetMemorySize(C);
       const D = n.exports.Hash_GetBuffer(), G = n.exports.memory.buffer;
       r = new Uint8Array(G, D, C);
-    }, u = () => new DataView(n.exports.memory.buffer).getUint32(n.exports.STATE_SIZE, !0), h = Vi.dispatch(() => we(this, void 0, void 0, function* () {
+    }, u = () => new DataView(n.exports.memory.buffer).getUint32(n.exports.STATE_SIZE, !0), f = Vi.dispatch(() => we(this, void 0, void 0, function* () {
       if (!St.has(e.name)) {
         const D = Oi(e.data), G = WebAssembly.compile(D);
         St.set(e.name, G);
@@ -10044,7 +10044,7 @@ function wn(e, t) {
         // },
       });
     })), g = () => we(this, void 0, void 0, function* () {
-      n || (yield h);
+      n || (yield f);
       const C = n.exports.Hash_GetBuffer(), D = n.exports.memory.buffer;
       r = new Uint8Array(D, C, $e);
     }), c = (C = null) => {
@@ -10206,13 +10206,13 @@ function Ti(e) {
 function Xi(e) {
   return we(this, void 0, void 0, function* () {
     var t;
-    const { parallelism: n, iterations: r, hashLength: i } = e, a = ue(e.password), o = ue(e.salt), s = 19, l = Ti(e.hashType), { memorySize: u } = e, h = ue((t = e.secret) !== null && t !== void 0 ? t : ""), [g, c] = yield Promise.all([
+    const { parallelism: n, iterations: r, hashLength: i } = e, a = ue(e.password), o = ue(e.salt), s = 19, l = Ti(e.hashType), { memorySize: u } = e, f = ue((t = e.secret) !== null && t !== void 0 ? t : ""), [g, c] = yield Promise.all([
       wn(Mi, 1024),
       Jt(512)
     ]);
     g.setMemorySize(u * 1024 + 1024);
     const d = new Uint8Array(24), I = new DataView(d.buffer);
-    I.setInt32(0, n, !0), I.setInt32(4, i, !0), I.setInt32(8, u, !0), I.setInt32(12, r, !0), I.setInt32(16, s, !0), I.setInt32(20, l, !0), g.writeMemory(d, u * 1024), c.init(), c.update(d), c.update(se(a.length)), c.update(a), c.update(se(o.length)), c.update(o), c.update(se(h.length)), c.update(h), c.update(se(0));
+    I.setInt32(0, n, !0), I.setInt32(4, i, !0), I.setInt32(8, u, !0), I.setInt32(12, r, !0), I.setInt32(16, s, !0), I.setInt32(20, l, !0), g.writeMemory(d, u * 1024), c.init(), c.update(d), c.update(se(a.length)), c.update(a), c.update(se(o.length)), c.update(o), c.update(se(f.length)), c.update(f), c.update(se(0));
     const B = Math.floor(u / (n * 4)) * 4, S = new Uint8Array(72), j = c.digest("binary");
     S.set(j);
     for (let K = 0; K < n; K++) {
@@ -10333,7 +10333,7 @@ function H1(e) {
   }
 }
 function a1(e) {
-  return fe(qr(De("bitlogin/password-salt/v1"), new Uint8Array([0]), De(e))).slice(0, 16);
+  return he(qr(De("bitlogin/password-salt/v1"), new Uint8Array([0]), De(e))).slice(0, 16);
 }
 async function N1(e, t) {
   const n = a1(t), r = e1(e), i = await Wi(r, n), a = jr(Rr("bitlogin/password-root/v1"), i), o = mn(a, "bitlogin/password-locator-signing/v1"), s = Rt(a, "bitlogin/password-capsule-encryption/v1", 32);
@@ -10379,25 +10379,34 @@ function d1(e) {
   return JSON.stringify([0, e.pubkey, e.created_at, e.kind, e.tags, e.content]);
 }
 function Cn(e) {
-  return jt(fe(De(d1(e))));
+  return jt(he(De(d1(e))));
 }
 function z1(e, t) {
   const n = Cn(e), r = jt(c1(Je(n), t));
   return { ...e, id: n, sig: r };
 }
 function Fr(e) {
-  if (!/^[0-9a-f]{64}$/u.test(e.id) || !/^[0-9a-f]{64}$/u.test(e.pubkey) || !/^[0-9a-f]{128}$/u.test(e.sig) || Cn(e) !== e.id)
+  if (typeof e != "object" || e === null || Array.isArray(e))
+    return !1;
+  const t = e;
+  if (typeof t.id != "string" || typeof t.pubkey != "string" || typeof t.sig != "string" || typeof t.content != "string" || !Number.isSafeInteger(t.created_at) || t.created_at < 0 || !Number.isSafeInteger(t.kind) || t.kind < 0 || t.kind > 65535 || !Array.isArray(t.tags) || !t.tags.every((i) => Array.isArray(i) && i.every((a) => typeof a == "string")) || !/^[0-9a-f]{64}$/u.test(t.id) || !/^[0-9a-f]{64}$/u.test(t.pubkey) || !/^[0-9a-f]{128}$/u.test(t.sig))
+    return !1;
+  const n = t;
+  if (Cn(n) !== n.id)
     return !1;
   try {
-    return u1(Je(e.sig), Je(e.id), Je(e.pubkey));
+    return u1(Je(n.sig), Je(n.id), Je(n.pubkey));
   } catch {
     return !1;
   }
 }
 function J1(e, t) {
+  return e.created_at !== t.created_at ? e.created_at > t.created_at ? 1 : -1 : e.id === t.id ? 0 : e.id < t.id ? 1 : -1;
+}
+function Y1(e, t) {
   return e.tags.find((n) => n[0] === t)?.[1];
 }
-const Y1 = 0, M1 = 5, q1 = 10002, j1 = 10050, R1 = 22242, _1 = 30078, P1 = "bitlogin:password:v1", L1 = "bitlogin:recovery:v1", T1 = "bitlogin.credential.v1", X1 = "bitlogin.recovery.v1", kn = "bitlogin.recovery-export.v3";
+const M1 = 0, q1 = 5, j1 = 10002, R1 = 10050, _1 = 22242, P1 = 30078, L1 = "bitlogin:password:v1", T1 = "bitlogin:recovery:v1", X1 = "bitlogin.credential.v1", Z1 = "bitlogin.recovery.v1", kn = "bitlogin.recovery-export.v3";
 var Ut, Ur;
 function g1() {
   return Ur || (Ur = 1, Ut = function e(t) {
@@ -10414,12 +10423,12 @@ function g1() {
   }), Ut;
 }
 var A1 = g1();
-const Z1 = /* @__PURE__ */ Kr(A1);
+const $1 = /* @__PURE__ */ Kr(A1);
 /*! scure-base - MIT License (c) 2022 Paul Miller (paulmillr.com) */
 function Ue(e) {
   return e instanceof Uint8Array || ArrayBuffer.isView(e) && e.constructor.name === "Uint8Array";
 }
-function h1(e, ...t) {
+function f1(e, ...t) {
   if (!Ue(e))
     throw new Error("Uint8Array expected");
   if (t.length > 0 && !t.includes(e.length))
@@ -10522,8 +10531,8 @@ function Yt(e, t, n) {
   for (; ; ) {
     let s = 0, l = !0;
     for (let u = r; u < o; u++) {
-      const h = a[u], g = t * s, c = g + h;
-      if (!Number.isSafeInteger(c) || g / t !== s || c - h !== g)
+      const f = a[u], g = t * s, c = g + f;
+      if (!Number.isSafeInteger(c) || g / t !== s || c - f !== g)
         throw new Error("convertRadix: carry overflow");
       const d = c / n;
       s = c % n;
@@ -10563,10 +10572,10 @@ function gt(e, t, n, r) {
       throw new Error(`convertRadix2: carry overflow pos=${a} from=${t}`);
     for (a += t; a >= n; a -= n)
       l.push((i >> a - n & s) >>> 0);
-    const h = et[a];
-    if (h === void 0)
+    const f = et[a];
+    if (f === void 0)
       throw new Error("invalid carry");
-    i &= h - 1;
+    i &= f - 1;
   }
   if (i = i << n - a & s, !r && a >= t)
     throw new Error("Excess padding");
@@ -10575,7 +10584,7 @@ function gt(e, t, n, r) {
   return r && a > 0 && l.push(i >>> 0), l;
 }
 // @__NO_SIDE_EFFECTS__
-function f1(e) {
+function h1(e) {
   Ne(e);
   const t = 2 ** 8;
   return {
@@ -10629,13 +10638,13 @@ function p1(e, t) {
     }
   };
 }
-const $1 = {
+const W1 = {
   alphabet: er,
   chain: Wt,
   checksum: p1,
   convertRadix: Yt,
   convertRadix2: gt,
-  radix: f1,
+  radix: h1,
   radix2: rr,
   join: tr,
   padding: Qn
@@ -10645,9 +10654,9 @@ const $1 = {
   if (e.length > 0 && !n.test(e))
     throw new Error("invalid base64");
   return Uint8Array.fromBase64(e, { alphabet: r, lastChunkHandling: "strict" });
-}, W1 = I1 ? {
+}, e2 = I1 ? {
   encode(e) {
-    return h1(e), e.toBase64();
+    return f1(e), e.toBase64();
   },
   decode(e) {
     return m1(e);
@@ -10716,13 +10725,13 @@ function y1(e) {
     const { prefix: c, words: d } = s(g, !1);
     return { prefix: c, words: d, bytes: r(d) };
   }
-  function h(g, c) {
+  function f(g, c) {
     return o(g, i(c));
   }
   return {
     encode: o,
     decode: s,
-    encodeFromBytes: h,
+    encodeFromBytes: f,
     decodeToBytes: u,
     decodeUnsafe: l,
     fromWords: r,
@@ -10731,19 +10740,19 @@ function y1(e) {
   };
 }
 const nr = /* @__PURE__ */ y1("bech32");
-function e2(e) {
+function t2(e) {
   return nr.encodeFromBytes("npub", Je(e));
 }
-function t2(e) {
+function r2(e) {
   return nr.encodeFromBytes("nsec", e);
 }
-function r2(e) {
+function n2(e) {
   const { prefix: t, bytes: n } = nr.decodeToBytes(e);
   if (t !== "nsec" || n.length !== 32)
     throw new Error("Not a valid nsec.");
   return n;
 }
-function n2(e) {
+function i2(e) {
   return {
     schema: kn,
     recovery_public_key: e.recoveryPublicKeyHex,
@@ -10758,7 +10767,7 @@ class oe extends Error {
     super(t), this.name = "RecoveryExportParseError";
   }
 }
-function i2(e) {
+function a2(e) {
   if (typeof e != "object" || e === null)
     throw new oe("Recovery export must be a JSON object.");
   const t = e;
@@ -10783,67 +10792,68 @@ function i2(e) {
   return t;
 }
 export {
-  qr as $,
-  x1 as A,
-  rt as B,
-  E1 as C,
-  P1 as D,
+  Rr as $,
+  ft as A,
+  x1 as B,
+  rt as C,
+  L1 as D,
   w1 as E,
-  pt as F,
-  Ce as G,
-  D1 as H,
-  pe as I,
-  $1 as J,
-  R1 as K,
-  fe as L,
-  We as M,
-  r2 as N,
-  Je as O,
-  i1 as P,
-  N1 as Q,
+  E1 as F,
+  pt as G,
+  Ce as H,
+  D1 as I,
+  pe as J,
+  _1 as K,
+  W1 as L,
+  he as M,
+  We as N,
+  n2 as O,
+  Je as P,
+  i1 as Q,
   oe as R,
-  X1 as S,
-  C1 as T,
-  K1 as U,
-  O1 as V,
-  v1 as W,
-  qe as X,
-  _r as Y,
-  M1 as Z,
-  W1 as _,
-  e2 as a,
-  mt as a0,
-  jr as a1,
-  G1 as a2,
-  Rt as a3,
-  Rr as a4,
-  mn as a5,
-  n2 as a6,
-  t2 as a7,
-  Kr as a8,
-  Y1 as b,
-  Cn as c,
-  q1 as d,
+  Z1 as S,
+  N1 as T,
+  C1 as U,
+  K1 as V,
+  _r as W,
+  O1 as X,
+  v1 as Y,
+  q1 as Z,
+  jr as _,
+  t2 as a,
+  qr as a0,
+  mn as a1,
+  Rt as a2,
+  mt as a3,
+  e2 as a4,
+  G1 as a5,
+  J1 as a6,
+  i2 as a7,
+  r2 as a8,
+  Kr as a9,
+  jt as b,
+  qe as c,
+  M1 as d,
   b1 as e,
   j1 as f,
   V1 as g,
-  _1 as h,
+  R1 as h,
   H1 as i,
-  Z1 as j,
-  k1 as k,
-  S1 as l,
-  F1 as m,
-  U1 as n,
-  s1 as o,
-  i2 as p,
-  T1 as q,
+  P1 as j,
+  $1 as k,
+  k1 as l,
+  S1 as m,
+  F1 as n,
+  U1 as o,
+  a2 as p,
+  s1 as q,
   B1 as r,
   z1 as s,
-  L1 as t,
+  X1 as t,
   De as u,
   Fr as v,
-  J1 as w,
-  bt as x,
-  Q1 as y,
-  ht as z
+  T1 as w,
+  Y1 as x,
+  bt as y,
+  Q1 as z
 };
diff --git a/vendor/bitlogin/bitlogin.js b/vendor/bitlogin/bitlogin.js
index dcd5f41f..6e6a9cc4 100644
--- a/vendor/bitlogin/bitlogin.js
+++ b/vendor/bitlogin/bitlogin.js
@@ -1,116 +1,57 @@
-import { r as w, e as k, E as Q, p as x, R as C, i as p, a as d } from "./bitlogin-shared-B2Rc9khL.js";
-const S = 6, f = 64;
-function u(r = S) {
-  const e = k(), t = [];
-  for (let s = 0; s < r; s++)
-    t.push(e[w(e.length)]);
-  const a = r * Q;
-  if (a < f)
-    throw new Error(`Passphrase of ${r} words provides only ~${a.toFixed(1)} bits; must exceed ${f}.`);
-  return { kind: "passphrase", secret: t.join(" "), entropyBits: a };
+import { r as g, e as v, E as m, p as w, R as Q, i as p, a as u } from "./bitlogin-shared-DTz11m56.js";
+const k = 6, b = 64;
+function d(a = k) {
+  const e = v(), t = [];
+  for (let r = 0; r < a; r++)
+    t.push(e[g(e.length)]);
+  const s = a * m;
+  if (s < b)
+    throw new Error(`Passphrase of ${a} words provides only ~${s.toFixed(1)} bits; must exceed ${b}.`);
+  return { kind: "passphrase", secret: t.join(" "), entropyBits: s };
 }
-const b = 64, m = 12, P = /* @__PURE__ */ new Set([
-  "password",
-  "password1",
-  "password123",
-  "123456",
-  "123456789",
-  "12345678",
-  "qwerty",
-  "qwerty123",
-  "letmein",
-  "welcome",
-  "monkey",
-  "dragon",
-  "master",
-  "abc123",
-  "iloveyou",
-  "admin",
-  "login",
-  "starwars",
-  "sunshine",
-  "princess",
-  "football",
-  "baseball",
-  "trustno1",
-  "000000",
-  "111111",
-  "123123",
-  "1234567890",
-  "changeme",
-  "passw0rd",
-  "correcthorsebatterystaple"
-]);
-function L(r) {
-  let e = 0;
-  return /[a-z]/u.test(r) && (e += 26), /[A-Z]/u.test(r) && (e += 26), /[0-9]/u.test(r) && (e += 10), /[^a-zA-Z0-9]/u.test(r) && (e += 33), e || 1;
-}
-function E(r) {
-  return r.length * Math.log2(L(r));
-}
-function $(r) {
-  if (/^(.)\1*$/u.test(r) || /(.)\1{2,}/u.test(r))
-    return !0;
-  const e = r.toLowerCase(), t = ["0123456789", "abcdefghijklmnopqrstuvwxyz"];
-  for (const a of t)
-    for (let s = 0; s + 4 <= a.length; s++) {
-      const n = a.slice(s, s + 4), o = [...n].reverse().join("");
-      if (e.includes(n) || e.includes(o))
-        return !0;
-    }
-  return !1;
-}
-function g(r, e) {
-  const t = E(r);
-  return r.length < m ? { ok: !1, entropyBits: t, reason: `Must be at least ${m} characters.` } : P.has(r.toLowerCase()) ? { ok: !1, entropyBits: t, reason: "This is on a list of extremely common passwords." } : e.length >= 3 && r.toLowerCase().includes(e) ? { ok: !1, entropyBits: t, reason: "Must not contain your login name." } : $(r) ? { ok: !1, entropyBits: t, reason: "Too predictable (repeated characters or a simple sequence)." } : t < b ? {
-    ok: !1,
-    entropyBits: t,
-    reason: `Estimated entropy (~${t.toFixed(0)} bits) is below the required ${b}. Use a longer password or mix character types.`
-  } : { ok: !0, entropyBits: t };
-}
-const R = 6e4;
-class N {
+const x = 6e4;
+class S {
   worker;
   pending = /* @__PURE__ */ new Map();
   counter = 0;
   dead = !1;
   constructor() {
     const e = ["cryptoWorker", ".js"].join(""), t = new URL(e, import.meta.url);
-    this.worker = new Worker(t, { type: "module" }), this.worker.addEventListener("message", (s) => {
-      const n = s.data;
-      if (!n || typeof n != "object" || typeof n.id != "string") return;
-      const o = this.pending.get(n.id);
+    this.worker = new Worker(t, { type: "module" }), this.worker.addEventListener("message", (r) => {
+      const i = r.data;
+      if (!i || typeof i != "object" || typeof i.id != "string") return;
+      const o = this.pending.get(i.id);
       if (o)
-        if (this.pending.delete(n.id), clearTimeout(o.timer), n.ok)
-          o.resolve(n.result);
+        if (this.pending.delete(i.id), clearTimeout(o.timer), i.ok)
+          o.resolve(i.result);
         else {
-          const l = new Error(n.error);
-          l.name = n.errorName ?? "Error", o.reject(l);
+          const l = new Error(i.error);
+          l.name = i.errorName ?? "Error", o.reject(l);
         }
     });
-    const a = (s) => () => this.failAll(s);
-    this.worker.addEventListener("error", a("The BitLogin crypto worker stopped unexpectedly.")), this.worker.addEventListener(
+    const s = (r) => () => this.failAll(r);
+    this.worker.addEventListener("error", s("The BitLogin crypto worker stopped unexpectedly.")), this.worker.addEventListener(
       "messageerror",
-      a("The BitLogin crypto worker sent an unreadable message.")
+      s("The BitLogin crypto worker sent an unreadable message.")
     );
   }
   /** Settles every outstanding call with an error. Idempotent. */
   failAll(e) {
     const t = [...this.pending.values()];
     this.pending.clear();
-    for (const a of t)
-      clearTimeout(a.timer), a.reject(new Error(e));
+    for (const s of t)
+      clearTimeout(s.timer), s.reject(new Error(e));
   }
   call(e, t) {
     if (this.dead)
       return Promise.reject(new Error("This BitLogin session was torn down; reload the page to sign in again."));
-    const a = `${Date.now().toString(36)}-${(this.counter++).toString(36)}`;
-    return new Promise((s, n) => {
+    const s = `${Date.now().toString(36)}-${(this.counter++).toString(36)}`;
+    return new Promise((r, i) => {
       const o = setTimeout(() => {
-        this.pending.delete(a), n(new Error(`BitLogin's ${e} call timed out.`));
-      }, R);
-      this.pending.set(a, { resolve: s, reject: n, timer: o });
-      const l = { id: a, action: e, payload: t };
+        this.pending.delete(s), i(new Error(`BitLogin's ${e} call timed out.`));
+      }, x);
+      this.pending.set(s, { resolve: r, reject: i, timer: o });
+      const l = { id: s, action: e, payload: t };
       this.worker.postMessage(l);
     });
   }
@@ -202,57 +143,57 @@ class N {
     this.dead = !0, this.worker.terminate(), this.failAll("The BitLogin crypto worker was terminated.");
   }
 }
-const M = "BitLogin: no identity is unlocked yet. Add <bitlogin-auth> to the page and let the user sign in, or call it programmatically before invoking window.nostr.";
-function c(r) {
-  return r.catch((e) => {
-    throw e.message.includes("No identity is unlocked") ? new Error(M) : e;
+const L = "BitLogin: no identity is unlocked yet. Add <bitlogin-auth> to the page and let the user sign in, or call it programmatically before invoking window.nostr.";
+function c(a) {
+  return a.catch((e) => {
+    throw e.message.includes("No identity is unlocked") ? new Error(L) : e;
   });
 }
-function B(r, e) {
+function C(a, e) {
   return {
     async getPublicKey() {
-      const { publicKey: t } = await c(r.getPublicKey());
+      const { publicKey: t } = await c(a.getPublicKey());
       return t;
     },
     async signEvent(t) {
-      return c(r.signEvent(t));
+      return c(a.signEvent(t));
     },
     async getRelays() {
       const t = {};
-      for (const a of e()) t[a] = { read: !0, write: !0 };
+      for (const s of e()) t[s] = { read: !0, write: !0 };
       return t;
     },
     nip44: {
-      async encrypt(t, a) {
-        const { ciphertext: s } = await c(r.nip44Encrypt({ peerPublicKey: t, plaintext: a }));
-        return s;
+      async encrypt(t, s) {
+        const { ciphertext: r } = await c(a.nip44Encrypt({ peerPublicKey: t, plaintext: s }));
+        return r;
       },
-      async decrypt(t, a) {
-        const { plaintext: s } = await c(r.nip44Decrypt({ peerPublicKey: t, payload: a }));
-        return s;
+      async decrypt(t, s) {
+        const { plaintext: r } = await c(a.nip44Decrypt({ peerPublicKey: t, payload: s }));
+        return r;
       }
     },
     nip04: {
-      async encrypt(t, a) {
-        const { ciphertext: s } = await c(r.nip04Encrypt({ peerPublicKey: t, plaintext: a }));
-        return s;
+      async encrypt(t, s) {
+        const { ciphertext: r } = await c(a.nip04Encrypt({ peerPublicKey: t, plaintext: s }));
+        return r;
       },
-      async decrypt(t, a) {
-        const { plaintext: s } = await c(r.nip04Decrypt({ peerPublicKey: t, payload: a }));
-        return s;
+      async decrypt(t, s) {
+        const { plaintext: r } = await c(a.nip04Decrypt({ peerPublicKey: t, payload: s }));
+        return r;
       }
     },
     _bitlogin: !0
   };
 }
-function T(r) {
-  const e = r.getAttribute("vault-relays"), t = r.getAttribute("discovery-relays");
+function E(a) {
+  const e = a.getAttribute("vault-relays"), t = a.getAttribute("discovery-relays");
   return {
-    vaultRelayUrls: e ? e.split(",").map((a) => a.trim()).filter(Boolean) : void 0,
-    discoveryRelayUrls: t ? t.split(",").map((a) => a.trim()).filter(Boolean) : void 0
+    vaultRelayUrls: e ? e.split(",").map((s) => s.trim()).filter(Boolean) : void 0,
+    discoveryRelayUrls: t ? t.split(",").map((s) => s.trim()).filter(Boolean) : void 0
   };
 }
-const q = (
+const R = (
   /* css */
   `
 :host {
@@ -493,16 +434,16 @@ button.link {
 }
 @keyframes bl-spin { to { transform: rotate(360deg); } }
 `
-), y = "bc:config", U = /^nostr\+walletconnect:\/\//iu;
+), y = "bc:config", $ = /^nostr\+walletconnect:\/\//iu;
 let h = null;
-function F(r) {
+function N(a) {
   if (!h) {
     try {
       localStorage.removeItem(y);
     } catch {
     }
-    h = import("./bitlogin-shared-IsyHQNSG.js").then((e) => (e.init({
-      appName: r,
+    h = import("./bitlogin-shared-BxVSgyOf.js").then((e) => (e.init({
+      appName: a,
       filters: ["nwc"],
       showBalance: !1,
       autoConnect: !1,
@@ -510,7 +451,7 @@ function F(r) {
       providerConfig: {
         nwc: {
           authorizationUrlOptions: {
-            name: r,
+            name: a,
             requestMethods: ["pay_invoice"]
           }
         }
@@ -521,19 +462,19 @@ function F(r) {
   }
   return h;
 }
-function I(r) {
-  const e = r instanceof Error ? r.message : String(r);
+function P(a) {
+  const e = a instanceof Error ? a.message : String(a);
   return /closed|cancell?ed|dismissed|aborted/iu.test(e);
 }
-async function O(r) {
-  const e = await F(r);
+async function B(a) {
+  const e = await N(a);
   try {
-    const t = await e.requestProvider(), a = e.getConnectorConfig()?.nwcUrl, s = t.client?.nostrWalletConnectUrl, n = typeof a == "string" ? a : typeof s == "string" ? s : "";
-    if (!U.test(n.trim()))
+    const t = await e.requestProvider(), s = e.getConnectorConfig()?.nwcUrl, r = t.client?.nostrWalletConnectUrl, i = typeof s == "string" ? s : typeof r == "string" ? r : "";
+    if (!$.test(i.trim()))
       throw new Error("The wallet did not return an NWC connection. Try again or paste one manually.");
-    return n.trim();
+    return i.trim();
   } catch (t) {
-    if (I(t)) return null;
+    if (P(t)) return null;
     throw t;
   } finally {
     try {
@@ -546,7 +487,19 @@ async function O(r) {
     }
   }
 }
-class D extends HTMLElement {
+function T(a) {
+  const e = [];
+  return a.rollbackWarnings.length > 0 && e.push(
+    `${a.rollbackWarnings.length} wallet record${a.rollbackWarnings.length === 1 ? " was" : "s were"} withheld because relays served an older version than this device previously accepted.`
+  ), a.quorumMet || e.push(
+    "Not enough vault relays answered. This connection list may be incomplete."
+  ), a.truncated && e.push(
+    "A relay returned the maximum record page. Some wallet connections may be missing."
+  ), a.unreadable.length > 0 && e.push(
+    `${a.unreadable.length} encrypted wallet record${a.unreadable.length === 1 ? " was" : "s were"} unreadable and omitted.`
+  ), e;
+}
+class I extends HTMLElement {
   root;
   worker;
   vaultRelayUrls = [];
@@ -560,16 +513,6 @@ class D extends HTMLElement {
   savedCheckbox = !1;
   recoveryPhrase = "";
   confirmSlots = [];
-  // Manual password opt-in (§9.3). Off by default; the generated passphrase remains the
-  // recommendation. manualPasswordFeedback is updated on every keystroke WITHOUT a full
-  // re-render (see onInput) so the field never loses focus while the user is typing.
-  // manualPasswordDraft/manualPasswordConfirmDraft re-populate the fields' value attribute
-  // across a validation-failure re-render, so a rejected password isn't silently wiped,
-  // forcing the user to retype it (and re-check "I saved it") from scratch.
-  manualPasswordMode = !1;
-  manualPasswordFeedback = null;
-  manualPasswordDraft = "";
-  manualPasswordConfirmDraft = "";
   // Import flow (§SF10). importKey holds the pasted nsec/hex only until registration completes.
   importKey = "";
   importPreviewNpub = "";
@@ -608,6 +551,7 @@ class D extends HTMLElement {
   vaultUnsaved = !1;
   vaultUnsavedReason;
   vaultConnections = null;
+  vaultIntegrityWarnings = [];
   /** offerNwcConnection state: the app already holds this URI; the only
    *  question on screen is whether a copy enters the user's vault. */
   /** Claimed synchronously by offerNwcConnection before any await (see there). */
@@ -616,11 +560,11 @@ class D extends HTMLElement {
   constructor() {
     super(), this.root = this.attachShadow({ mode: "open" });
     const e = new CSSStyleSheet();
-    e.replaceSync(q), this.root.adoptedStyleSheets = [e], this.worker = new N();
+    e.replaceSync(R), this.root.adoptedStyleSheets = [e], this.worker = new S();
   }
   connectedCallback() {
-    const e = T(this);
-    if (this.vaultRelayUrls = e.vaultRelayUrls ?? [], this.discoveryRelayUrls = e.discoveryRelayUrls ?? [], this.worker.configure({ vaultRelayUrls: this.vaultRelayUrls, discoveryRelayUrls: this.discoveryRelayUrls }).then(() => this.tryRestoreSession()), this.root.addEventListener("click", (t) => this.onClick(t)), this.root.addEventListener("submit", (t) => this.onSubmit(t)), this.root.addEventListener("input", (t) => this.onInput(t)), this.root.addEventListener("change", (t) => void this.onFileChange(t)), this.render(), this.installedProvider = B(this.worker, () => this.vaultRelayUrls), !window.nostr)
+    const e = E(this);
+    if (this.vaultRelayUrls = e.vaultRelayUrls ?? [], this.discoveryRelayUrls = e.discoveryRelayUrls ?? [], this.worker.configure({ vaultRelayUrls: this.vaultRelayUrls, discoveryRelayUrls: this.discoveryRelayUrls }).then(() => this.tryRestoreSession()), this.root.addEventListener("click", (t) => this.onClick(t)), this.root.addEventListener("submit", (t) => this.onSubmit(t)), this.root.addEventListener("change", (t) => void this.onFileChange(t)), this.render(), this.installedProvider = C(this.worker, () => this.vaultRelayUrls), !window.nostr)
       try {
         window.nostr = this.installedProvider;
       } catch {
@@ -681,17 +625,17 @@ class D extends HTMLElement {
    */
   async requestNwcConnection(e = {}) {
     if (this.vaultRequest) throw new Error("A wallet connection request is already in progress.");
-    const t = window.location.origin, a = e.appName?.trim() || window.location.hostname || "This app";
-    return new Promise((s) => {
-      this.vaultRequest = { appName: a, reason: e.reason, origin: t, stage: "auth", resolve: s }, this.dispatchEvent(new CustomEvent("bitlogin-request-pending")), (async () => {
+    const t = window.location.origin, s = e.appName?.trim() || window.location.hostname || "This app";
+    return new Promise((r) => {
+      this.vaultRequest = { appName: s, reason: e.reason, origin: t, stage: "auth", resolve: r }, this.dispatchEvent(new CustomEvent("bitlogin-request-pending")), (async () => {
         try {
           if (!(await this.worker.getSessionStatus()).unlocked) {
             this.goto("login");
             return;
           }
           await this.continueVaultRequest();
-        } catch (n) {
-          this.fail(n);
+        } catch (i) {
+          this.fail(i);
         }
       })();
     });
@@ -766,8 +710,8 @@ class D extends HTMLElement {
       return;
     }
     this.vaultUnsaved = !1;
-    const a = await this.worker.vaultFindForOrigin();
-    a.connection ? (this.vaultCandidate = a.connection, this.goto("vault-consent")) : this.goto("vault-import");
+    const s = await this.worker.vaultFindForOrigin();
+    s.connection ? (this.vaultCandidate = s.connection, this.goto("vault-consent")) : this.goto("vault-import");
   }
   async approveVaultCandidate() {
     const e = this.vaultCandidate;
@@ -786,7 +730,7 @@ class D extends HTMLElement {
     if (e) {
       this.setBusy(!0);
       try {
-        const t = await O(e.appName);
+        const t = await B(e.appName);
         if (t === null) {
           this.setBusy(!1);
           return;
@@ -809,20 +753,20 @@ class D extends HTMLElement {
     }
   }
   async saveAndShareVaultUri(e, t) {
-    const a = this.vaultRequest;
-    if (!a) return;
+    const s = this.vaultRequest;
+    if (!s) return;
     if (this.vaultUnsaved) {
       this.setBusy(!1), this.finishVaultRequest(e);
       return;
     }
-    const s = t.trim() || `${a.appName} wallet`;
-    await this.worker.vaultSaveNwc({ uri: e, label: s }), this.setBusy(!1), this.finishVaultRequest(e), this.flashSuccess(this.screen, "Wallet connected");
+    const r = t.trim() || `${s.appName} wallet`;
+    await this.worker.vaultSaveNwc({ uri: e, label: r }), this.setBusy(!1), this.finishVaultRequest(e), this.flashSuccess(this.screen, "Wallet connected");
   }
   async loadVaultManage() {
-    this.vaultConnections = null, this.goto("vault-manage");
+    this.vaultConnections = null, this.vaultIntegrityWarnings = [], this.goto("vault-manage");
     try {
       const e = await this.worker.vaultList();
-      this.vaultConnections = e.connections;
+      this.vaultConnections = e.connections, this.vaultIntegrityWarnings = T(e);
     } catch (e) {
       this.errorMessage = e instanceof Error ? e.message : String(e), this.vaultConnections = [];
     }
@@ -930,32 +874,6 @@ class D extends HTMLElement {
   field(e) {
     return this.root.querySelector(`[name="${e}"]`)?.value ?? "";
   }
-  /**
-   * Shared manual-password field markup (§9.3), reused on every screen that lets a user set
-   * their own password (initial creation, phrase recovery, and password rotation) so the
-   * option isn't only available at signup.
-   */
-  renderManualPasswordFields() {
-    return `
-      <label for="manualPassword">Password</label>
-      <input type="password" name="manualPassword" id="manualPassword" autocomplete="new-password" required minlength="12" value="${i(this.manualPasswordDraft)}" />
-      <div class="notice info" id="manual-password-feedback"></div>
-      <label for="manualPasswordConfirm">Confirm password</label>
-      <input type="password" name="manualPasswordConfirm" id="manualPasswordConfirm" autocomplete="new-password" required minlength="12" value="${i(this.manualPasswordConfirmDraft)}" />
-      <div class="notice info" id="manual-password-match-feedback"></div>
-    `;
-  }
-  /**
-   * Reads and validates the manual-password fields against a caller-supplied login name.
-   * Always stashes what was typed into manualPasswordDraft/manualPasswordConfirmDraft so a
-   * validation-failure re-render can restore it (see renderManualPasswordFields).
-   */
-  readManualPassword(e) {
-    const t = this.field("manualPassword"), a = this.field("manualPasswordConfirm");
-    this.manualPasswordDraft = t, this.manualPasswordConfirmDraft = a;
-    const s = g(t, e);
-    return s.ok ? t !== a ? { password: "", error: "Passwords do not match. Please re-enter both." } : { password: t } : { password: "", error: `Password not accepted: ${s.reason}` };
-  }
   /**
    * Explicitly asks the browser to offer saving this credential via the Credential
    * Management API (Chromium-based browsers only — Firefox and Safari never implemented
@@ -970,10 +888,10 @@ class D extends HTMLElement {
    */
   async offerToSaveCredential(e, t) {
     try {
-      const a = window.PasswordCredential;
-      if (!a || !navigator.credentials?.store) return;
-      const s = new a({ id: e, password: t, name: e });
-      await navigator.credentials.store(s);
+      const s = window.PasswordCredential;
+      if (!s || !navigator.credentials?.store) return;
+      const r = new s({ id: e, password: t, name: e });
+      await navigator.credentials.store(r);
     } catch {
     }
   }
@@ -1032,28 +950,25 @@ class D extends HTMLElement {
         this.goto("confirm-phrase");
         return;
       case "goto-change-password":
-        this.changePasswordNewCredential = u().secret, this.manualPasswordMode = !1, this.manualPasswordFeedback = null, this.manualPasswordDraft = "", this.manualPasswordConfirmDraft = "", this.goto("change-password");
+        this.changePasswordNewCredential = d().secret, this.goto("change-password");
         return;
       case "goto-export":
         this.goto("export");
         return;
       case "regenerate-credential":
-        this.generatedCredential = u().secret, this.savedCheckbox = !1, this.render();
-        return;
-      case "toggle-manual-password":
-        this.manualPasswordMode = !this.manualPasswordMode, this.manualPasswordFeedback = null, this.manualPasswordDraft = "", this.manualPasswordConfirmDraft = "", this.savedCheckbox = !1, this.render();
+        this.generatedCredential = d().secret, this.savedCheckbox = !1, this.render();
         return;
       case "copy-credential": {
-        const s = this.root.querySelector("#credential-box"), n = t, o = n.textContent ?? "Copy", l = (v) => {
-          n.textContent = v, setTimeout(() => {
-            n.isConnected && (n.textContent = o);
+        const r = this.root.querySelector("#credential-box"), i = t, o = i.textContent ?? "Copy", l = (f) => {
+          i.textContent = f, setTimeout(() => {
+            i.isConnected && (i.textContent = o);
           }, 2e3);
         };
-        if (!s || !navigator.clipboard?.writeText) {
+        if (!r || !navigator.clipboard?.writeText) {
           l("Copy not available — select the text manually");
           return;
         }
-        navigator.clipboard.writeText(s.textContent ?? "").then(
+        navigator.clipboard.writeText(r.textContent ?? "").then(
           () => l("Copied"),
           () => l("Copy failed — select the text manually")
         );
@@ -1068,8 +983,8 @@ class D extends HTMLElement {
       case "logout":
         return this.logout();
       case "rollback-retry": {
-        const s = this.pendingRollback?.kind;
-        this.pendingRollback = null, this.goto(s === "change-password" ? "change-password" : "login");
+        const r = this.pendingRollback?.kind;
+        this.pendingRollback = null, this.goto(r === "change-password" ? "change-password" : "login");
         return;
       }
       case "rollback-continue":
@@ -1080,9 +995,9 @@ class D extends HTMLElement {
   }
   async onSubmit(e) {
     if (e.preventDefault(), !e.isTrusted) return;
-    const a = e.target.dataset.form;
+    const s = e.target.dataset.form;
     try {
-      switch (a) {
+      switch (s) {
         case "import-key":
           return await this.handlePreviewImport();
         case "create-name":
@@ -1104,31 +1019,10 @@ class D extends HTMLElement {
         default:
           return;
       }
-    } catch (s) {
-      this.fail(s);
+    } catch (r) {
+      this.fail(r);
     }
   }
-  /**
-   * Live entropy/strength and match feedback for the manual-password fields, updated by
-   * DIRECTLY patching feedback elements' text — never calling this.render() — so neither
-   * input loses focus or cursor position while the user is typing (§9.3).
-   */
-  onInput(e) {
-    const t = e.target;
-    if (!(t instanceof HTMLInputElement) || t.name !== "manualPassword" && t.name !== "manualPasswordConfirm") return;
-    const a = this.root.querySelector('input[name="manualPassword"]')?.value ?? "", s = this.root.querySelector('input[name="manualPasswordConfirm"]')?.value ?? "";
-    this.manualPasswordFeedback = a ? g(a, this.loginName) : null;
-    const n = this.root.querySelector("#manual-password-feedback");
-    if (n)
-      if (!this.manualPasswordFeedback)
-        n.textContent = "", n.className = "notice info";
-      else {
-        const l = this.manualPasswordFeedback.entropyBits.toFixed(0);
-        this.manualPasswordFeedback.ok ? (n.textContent = `Looks good (~${l} bits estimated).`, n.className = "notice info") : (n.textContent = `${this.manualPasswordFeedback.reason} (~${l} bits estimated)`, n.className = "notice warn");
-      }
-    const o = this.root.querySelector("#manual-password-match-feedback");
-    o && (s ? s === a ? (o.textContent = "Passwords match.", o.className = "notice info") : (o.textContent = "Passwords do not match.", o.className = "notice warn") : (o.textContent = "", o.className = "notice info"));
-  }
   /**
    * Reads and validates an optional recovery-export file (§19.5) for the recover-phrase
    * screen. Purely a relay-outage fallback -- the file never contains the phrase or any
@@ -1137,16 +1031,16 @@ class D extends HTMLElement {
   async onFileChange(e) {
     const t = e.target;
     if (!(t instanceof HTMLInputElement) || t.name !== "offlineExportFile" || t.type !== "file") return;
-    const a = t.files?.[0];
-    if (!a) {
+    const s = t.files?.[0];
+    if (!s) {
       this.offlineExportFile = null, this.offlineExportFileNotice = void 0, this.render();
       return;
     }
     try {
-      const s = await a.text();
-      this.offlineExportFile = x(JSON.parse(s)), this.offlineExportFileNotice = `Loaded recovery export from ${new Date(this.offlineExportFile.created_at * 1e3).toLocaleString()}.`;
-    } catch (s) {
-      this.offlineExportFile = null, this.offlineExportFileNotice = s instanceof C || s instanceof SyntaxError ? `Couldn't read that file: ${s.message}` : `Couldn't read that file: ${String(s)}`;
+      const r = await s.text();
+      this.offlineExportFile = w(JSON.parse(r)), this.offlineExportFileNotice = `Loaded recovery export from ${new Date(this.offlineExportFile.created_at * 1e3).toLocaleString()}.`;
+    } catch (r) {
+      this.offlineExportFile = null, this.offlineExportFileNotice = r instanceof Q || r instanceof SyntaxError ? `Couldn't read that file: ${r.message}` : `Couldn't read that file: ${String(r)}`;
     }
     this.render();
   }
@@ -1177,21 +1071,13 @@ class D extends HTMLElement {
       this.errorMessage = "Login name must be 3-32 characters: a-z, 0-9, '.', '_', '-', and not start/end with punctuation.", this.render();
       return;
     }
-    this.loginName = e, this.generatedCredential = u().secret, this.savedCheckbox = !1, this.manualPasswordMode = !1, this.manualPasswordFeedback = null, this.manualPasswordDraft = "", this.manualPasswordConfirmDraft = "", this.goto("create-credential");
+    this.loginName = e, this.generatedCredential = d().secret, this.savedCheckbox = !1, this.goto("create-credential");
   }
   async handleCreateCredentialSubmit() {
     this.savedCheckbox = this.root.querySelector("#saved-check")?.checked ?? !1;
-    let e = this.generatedCredential;
-    if (this.manualPasswordMode) {
-      const { password: n, error: o } = this.readManualPassword(this.loginName);
-      if (o) {
-        this.errorMessage = o, this.render();
-        return;
-      }
-      e = n;
-    }
+    const e = this.generatedCredential;
     if (!this.savedCheckbox) {
-      this.errorMessage = this.manualPasswordMode ? "Please confirm you've saved your password (or written it down) before continuing." : "Please confirm you saved your password before continuing.", this.render();
+      this.errorMessage = "Please confirm you saved your password before continuing.", this.render();
       return;
     }
     this.setBusy(!0);
@@ -1201,8 +1087,8 @@ class D extends HTMLElement {
       importKey: this.importKey || void 0
     });
     this.importKey = "", this.importPreviewNpub = "", this.recoveryPhrase = t.recoveryPhrase;
-    const a = this.recoveryPhrase.split(" "), s = K(a.length, 3);
-    this.confirmSlots = s.map((n) => ({ index: n, value: "" })), this.session = { publicKey: t.everydayPublicKey, npub: d(t.everydayPublicKey), accountId: t.accountId }, this.busy = !1, this.goto("confirm-phrase"), this.worker.publishProfileAndRelayLists({
+    const s = this.recoveryPhrase.split(" "), r = M(s.length, 3);
+    this.confirmSlots = r.map((i) => ({ index: i, value: "" })), this.session = { publicKey: t.everydayPublicKey, npub: u(t.everydayPublicKey), accountId: t.accountId }, this.busy = !1, this.goto("confirm-phrase"), this.worker.publishProfileAndRelayLists({
       name: this.loginName,
       generalRelays: this.vaultRelayUrls,
       dmRelays: this.vaultRelayUrls
@@ -1237,7 +1123,7 @@ class D extends HTMLElement {
       if (!e.restored || !e.everydayPublicKey) return;
       this.session = {
         publicKey: e.everydayPublicKey,
-        npub: d(e.everydayPublicKey),
+        npub: u(e.everydayPublicKey),
         accountId: e.accountId
       }, this.noteSignerClaim(this.claimSigner()), this.dispatchEvent(new CustomEvent("bitlogin-login", { detail: { publicKey: e.everydayPublicKey } })), this.goto("dashboard");
     } catch {
@@ -1248,17 +1134,17 @@ class D extends HTMLElement {
    * paths grant a session identically -- claimSigner() and the bitlogin-login event only ever
    * fire once a RollbackDetectedError (if any) has been resolved one way or the other.
    */
-  async attemptLogin(e, t, a = !1) {
+  async attemptLogin(e, t, s = !1) {
     this.setBusy(!0);
     try {
-      const s = await this.worker.login({ loginName: e, password: t, acknowledgeRollback: a });
-      this.loginName = e, this.session = { publicKey: s.everydayPublicKey, npub: d(s.everydayPublicKey), accountId: s.accountId }, this.sessionWarnings = [s.rollbackWarning, s.relayDisagreementWarning].filter((n) => !!n), this.busy = !1, this.noteSignerClaim(this.claimSigner()), this.dispatchEvent(new CustomEvent("bitlogin-login", { detail: { publicKey: s.everydayPublicKey } })), this.flashSuccess("dashboard", "Signed in"), this.offerToSaveCredential(e, t);
-    } catch (s) {
-      if (s instanceof Error && s.name === "RollbackDetectedError") {
-        this.pendingRollback = { kind: "login", loginName: e, password: t }, this.rollbackMessage = s.message, this.busy = !1, this.goto("rollback-confirm");
+      const r = await this.worker.login({ loginName: e, password: t, acknowledgeRollback: s });
+      this.loginName = e, this.session = { publicKey: r.everydayPublicKey, npub: u(r.everydayPublicKey), accountId: r.accountId }, this.sessionWarnings = [r.rollbackWarning, r.relayDisagreementWarning].filter((i) => !!i), this.busy = !1, this.noteSignerClaim(this.claimSigner()), this.dispatchEvent(new CustomEvent("bitlogin-login", { detail: { publicKey: r.everydayPublicKey } })), this.flashSuccess("dashboard", "Signed in"), this.offerToSaveCredential(e, t);
+    } catch (r) {
+      if (r instanceof Error && r.name === "RollbackDetectedError") {
+        this.pendingRollback = { kind: "login", loginName: e, password: t }, this.rollbackMessage = r.message, this.busy = !1, this.goto("rollback-confirm");
         return;
       }
-      this.fail(s);
+      this.fail(r);
     }
   }
   async handleRollbackContinue() {
@@ -1277,7 +1163,7 @@ class D extends HTMLElement {
       generalRelaysCount: t.generalRelays.length,
       dmRelaysCount: t.dmRelays.length,
       chainWarning: t.chainWarning
-    }, this.session = { publicKey: t.everydayPublicKey, npub: d(t.everydayPublicKey), accountId: t.accountId }, this.newCredentialAfterRecovery = u().secret, this.manualPasswordMode = !1, this.manualPasswordFeedback = null, this.manualPasswordDraft = "", this.manualPasswordConfirmDraft = "", this.busy = !1, this.goto("recover-new-credentials");
+    }, this.session = { publicKey: t.everydayPublicKey, npub: u(t.everydayPublicKey), accountId: t.accountId }, this.newCredentialAfterRecovery = d().secret, this.busy = !1, this.goto("recover-new-credentials");
   }
   async handleRecoverNewCredentialsSubmit() {
     const e = this.field("newLoginName").trim().toLowerCase();
@@ -1285,51 +1171,34 @@ class D extends HTMLElement {
       this.errorMessage = "Login name must be 3-32 characters: a-z, 0-9, '.', '_', '-', and not start/end with punctuation.", this.render();
       return;
     }
-    let t = this.newCredentialAfterRecovery;
-    if (this.manualPasswordMode) {
-      const { password: a, error: s } = this.readManualPassword(e);
-      if (s) {
-        this.errorMessage = s, this.render();
-        return;
-      }
-      t = a;
-    }
+    const t = this.newCredentialAfterRecovery;
     this.setBusy(!0), await this.worker.completeRecovery({ newLoginName: e, newPassword: t }), this.loginName = e, this.busy = !1, this.sessionWarnings = [], this.noteSignerClaim(this.claimSigner()), this.dispatchEvent(new CustomEvent("bitlogin-login", { detail: { publicKey: this.session?.publicKey } })), this.flashSuccess("dashboard", "Account recovered"), this.offerToSaveCredential(e, t);
   }
   async handleChangePasswordSubmit() {
-    const e = this.field("oldPassword");
-    let t = this.changePasswordNewCredential;
-    if (this.manualPasswordMode) {
-      const { password: a, error: s } = this.readManualPassword(this.loginName);
-      if (s) {
-        this.errorMessage = s, this.render();
-        return;
-      }
-      t = a;
-    }
+    const e = this.field("oldPassword"), t = this.changePasswordNewCredential;
     await this.attemptChangePassword(e, t);
   }
   /** Shared by the rotation form and the "continue anyway" rollback-confirmation step; see attemptLogin. */
-  async attemptChangePassword(e, t, a = !1) {
+  async attemptChangePassword(e, t, s = !1) {
     this.setBusy(!0);
     try {
       await this.worker.changePassword({
         loginName: this.loginName,
         oldPassword: e,
         newPassword: t,
-        acknowledgeRollback: a
+        acknowledgeRollback: s
       }), this.busy = !1, this.sessionWarnings = [], this.noteSignerClaim(this.claimSigner()), this.flashSuccess("dashboard", "Password updated"), this.offerToSaveCredential(this.loginName, t);
-    } catch (s) {
-      if (s instanceof Error && s.name === "RollbackDetectedError") {
-        this.pendingRollback = { kind: "change-password", oldPassword: e, newPassword: t }, this.rollbackMessage = s.message, this.busy = !1, this.goto("rollback-confirm");
+    } catch (r) {
+      if (r instanceof Error && r.name === "RollbackDetectedError") {
+        this.pendingRollback = { kind: "change-password", oldPassword: e, newPassword: t }, this.rollbackMessage = r.message, this.busy = !1, this.goto("rollback-confirm");
         return;
       }
-      this.fail(s);
+      this.fail(r);
     }
   }
   async handleDownloadRecoveryExport() {
-    const e = await this.worker.buildRecoveryExport(), t = new Blob([JSON.stringify(e, null, 2)], { type: "application/json" }), a = URL.createObjectURL(t), s = document.createElement("a");
-    s.href = a, s.download = "bitlogin-recovery-export.json", s.click(), URL.revokeObjectURL(a);
+    const e = await this.worker.buildRecoveryExport(), t = new Blob([JSON.stringify(e, null, 2)], { type: "application/json" }), s = URL.createObjectURL(t), r = document.createElement("a");
+    r.href = s, r.download = "bitlogin-recovery-export.json", r.click(), URL.revokeObjectURL(s);
   }
   async handleSignTestEvent() {
     const e = await this.worker.signEvent({ kind: 1, content: `Hello from BitLogin at ${(/* @__PURE__ */ new Date()).toISOString()}` });
@@ -1358,7 +1227,7 @@ class D extends HTMLElement {
             <path d="M27 32.5l3.6 3.6L38 28.2" fill="none" stroke="url(#bl-success-brass)" stroke-width="3" stroke-linecap="round" stroke-linejoin="round" />
           </svg>
         </span>
-        <p class="success-label">${i(e)}</p>
+        <p class="success-label">${n(e)}</p>
       </div>
     `;
   }
@@ -1376,10 +1245,10 @@ class D extends HTMLElement {
     }, 1100);
   }
   renderError() {
-    return this.errorMessage ? `<div class="notice error">${i(this.errorMessage)}</div>` : "";
+    return this.errorMessage ? `<div class="notice error">${n(this.errorMessage)}</div>` : "";
   }
   renderWarnings() {
-    return this.sessionWarnings.map((e) => `<div class="notice warn">${i(e)}</div>`).join("");
+    return this.sessionWarnings.map((e) => `<div class="notice warn">${n(e)}</div>`).join("");
   }
   /** The widget's own brand lockup (mark + wordmark), inlined as vector paths rather than
    * relying on the host page having loaded any particular font -- shown once, on the
@@ -1414,7 +1283,7 @@ class D extends HTMLElement {
             </button>
           </form>
           ${e ? `<div class="notice info">This key's public identity:</div>
-                 <div class="credential-box">${i(this.importPreviewNpub)}</div>
+                 <div class="credential-box">${n(this.importPreviewNpub)}</div>
                  <button class="primary" type="button" data-action="import-continue">This is my identity — continue</button>` : ""}
           <button class="link" data-action="goto-welcome">Back</button>
         `;
@@ -1433,36 +1302,21 @@ class D extends HTMLElement {
         `;
       case "create-credential": {
         const e = this.busy ? `<span class="spinner"></span>${this.importKey ? "Importing…" : "Creating account…"}` : this.importKey ? "Import account" : "Create account";
-        return this.manualPasswordMode ? `
-            <h2>Choose your own password</h2>
-            <p class="sub">Not recommended: a downloadable encrypted file can be guessed against forever, offline, with no rate limit. BitLogin can only run basic checks here — not a breach-database lookup — so weak or reused passwords are still your risk to carry.</p>
-            <div class="notice warn">Offline guessing against this password can never be fully prevented. The generated passphrase remains the safer default.</div>
-            ${this.renderError()}
-            <form data-form="create-credential">
-              ${this.renderManualPasswordFields()}
-              <label class="checkbox-row">
-                <input type="checkbox" id="saved-check" ${this.savedCheckbox ? "checked" : ""} />
-                I have saved this password somewhere safe.
-              </label>
-              <button class="primary" type="submit" ${this.busy ? "disabled" : ""}>${e}</button>
-            </form>
-            <button class="link" data-action="toggle-manual-password">Use a generated password instead (recommended)</button>
-          ` : `
+        return `
           <h2>Your generated password</h2>
           <p class="sub">BitLogin generates your password because no server can rate-limit guesses against a downloadable encrypted file.</p>
-          <div class="credential-box" id="credential-box">${i(this.generatedCredential)}</div>
+          <div class="credential-box" id="credential-box">${n(this.generatedCredential)}</div>
           <button class="secondary" type="button" data-action="copy-credential">Copy</button>
           <button class="secondary" type="button" data-action="regenerate-credential">Generate a different one</button>
           ${this.renderError()}
           <form data-form="create-credential" autocomplete="on">
-            <input type="text" name="username" autocomplete="username" value="${i(this.loginName)}" readonly hidden />
+            <input type="text" name="username" autocomplete="username" value="${n(this.loginName)}" readonly hidden />
             <label class="checkbox-row">
               <input type="checkbox" id="saved-check" ${this.savedCheckbox ? "checked" : ""} />
               I have saved this password somewhere safe.
             </label>
             <button class="primary" type="submit" ${this.busy ? "disabled" : ""}>${e}</button>
           </form>
-          <button class="link" data-action="toggle-manual-password">Use my own password instead (not recommended)</button>
         `;
       }
       case "confirm-phrase":
@@ -1471,7 +1325,7 @@ class D extends HTMLElement {
           <p class="sub">These 12 words can recover your identity if you forget your password or lose all your devices. We cannot recover these words for you.</p>
           <p class="small">Do not enter a Bitcoin or other cryptocurrency-wallet recovery phrase into BitLogin. This is a BitLogin-only phrase.</p>
           <div class="phrase-grid">
-            ${this.recoveryPhrase.split(" ").map((e, t) => `<div class="phrase-word"><span>${t + 1}.</span>${i(e)}</div>`).join("")}
+            ${this.recoveryPhrase.split(" ").map((e, t) => `<div class="phrase-word"><span>${t + 1}.</span>${n(e)}</div>`).join("")}
           </div>
           ${this.renderError()}
           <button class="primary" type="button" data-action="goto-verify-phrase">I've saved my phrase — continue</button>
@@ -1520,7 +1374,7 @@ class D extends HTMLElement {
             <label for="offlineExportFile" style="margin-top:14px">Recovery export file (optional)</label>
             <input type="file" name="offlineExportFile" id="offlineExportFile" accept=".json,application/json" />
             <p class="small">Only needed if relays are unreachable -- the phrase above is still required either way. The file alone can never recover an account by itself.</p>
-            ${this.offlineExportFileNotice ? `<div class="notice ${this.offlineExportFile ? "info" : "warn"}">${i(this.offlineExportFileNotice)}</div>` : ""}
+            ${this.offlineExportFileNotice ? `<div class="notice ${this.offlineExportFile ? "info" : "warn"}">${n(this.offlineExportFileNotice)}</div>` : ""}
             <button class="primary" type="submit" ${this.busy ? "disabled" : ""}>
               ${this.busy ? '<span class="spinner"></span>Recovering…' : "Continue"}
             </button>
@@ -1528,33 +1382,30 @@ class D extends HTMLElement {
           <button class="link" data-action="goto-welcome">Back</button>
         `;
       case "recover-new-credentials": {
-        const e = this.recoveredPreview?.chainWarning ? `<div class="notice warn">${i(this.recoveredPreview.chainWarning)}</div>` : "", t = this.busy ? '<span class="spinner"></span>Finishing recovery…' : "Finish recovery";
+        const e = this.recoveredPreview?.chainWarning ? `<div class="notice warn">${n(this.recoveredPreview.chainWarning)}</div>` : "", t = this.busy ? '<span class="spinner"></span>Finishing recovery…' : "Finish recovery";
         return `
           <h2>Identity recovered</h2>
           <p class="sub">Found your account. Restored ${this.recoveredPreview?.generalRelaysCount ?? 0} general relay(s) and ${this.recoveredPreview?.dmRelaysCount ?? 0} DM relay(s) from your public events.</p>
           ${e}
-          <p class="sub">Now set a new login name and password.</p>
-          ${this.manualPasswordMode ? '<div class="notice warn">Offline guessing against this password can never be fully prevented. The generated passphrase remains the safer default.</div>' : `<div class="credential-box">${i(this.newCredentialAfterRecovery)}</div>`}
+          <p class="sub">Now set a new login name. BitLogin generated a new high-entropy password for this account.</p>
+          <div class="credential-box" id="credential-box">${n(this.newCredentialAfterRecovery)}</div>
+          <button class="secondary" type="button" data-action="copy-credential">Copy generated password</button>
           ${this.renderError()}
           <form data-form="recover-new-credentials">
             <label for="newLoginName">New login name</label>
             <input type="text" name="newLoginName" id="newLoginName" autocomplete="off" required />
-            ${this.manualPasswordMode ? this.renderManualPasswordFields() : ""}
             <button class="primary" type="submit" ${this.busy ? "disabled" : ""}>${t}</button>
           </form>
-          <button class="link" data-action="toggle-manual-password">
-            ${this.manualPasswordMode ? "Use a generated password instead (recommended)" : "Use my own password instead (not recommended)"}
-          </button>
         `;
       }
       case "dashboard":
         return `
           <h2>Signed in</h2>
           ${this.renderWarnings()}
-          <p class="pubkey">${i(this.session?.npub ?? "")}</p>
+          <p class="pubkey">${n(this.session?.npub ?? "")}</p>
           ${this.renderError()}
           <button class="secondary" type="button" data-action="sign-test-event">Sign a test event</button>
-          ${this.lastSignedEventJson ? `<div class="credential-box" style="white-space:pre-wrap">${i(this.lastSignedEventJson)}</div>` : ""}
+          ${this.lastSignedEventJson ? `<div class="credential-box" style="white-space:pre-wrap">${n(this.lastSignedEventJson)}</div>` : ""}
           <div class="divider"></div>
           <button class="secondary" type="button" data-action="goto-vault-manage">Wallet connections</button>
           <button class="secondary" type="button" data-action="goto-change-password">Rotate password</button>
@@ -1564,16 +1415,16 @@ class D extends HTMLElement {
       case "vault-consent": {
         const e = this.vaultRequest, t = this.vaultCandidate;
         if (!e || !t) return '<div class="notice error">No wallet request is in progress.</div>';
-        const a = new Date(t.createdAt * 1e3).toLocaleDateString();
+        const s = new Date(t.createdAt * 1e3).toLocaleDateString();
         return `
-          <h2>Share a wallet with ${i(e.appName)}?</h2>
-          ${e.reason ? `<p class="sub">Reason given: ${i(e.reason)}</p>` : ""}
+          <h2>Share a wallet with ${n(e.appName)}?</h2>
+          ${e.reason ? `<p class="sub">Reason given: ${n(e.reason)}</p>` : ""}
           ${this.renderError()}
           <div class="credential-box">
-            <strong>${i(t.label)}</strong><br />
-            Connected ${i(a)} · wallet ${i((t.walletPubkey ?? "").slice(0, 10))}…
+            <strong>${n(t.label)}</strong><br />
+            Connected ${n(s)} · wallet ${n((t.walletPubkey ?? "").slice(0, 10))}…
           </div>
-          <div class="notice info">${i(e.appName)} will receive this connection and can spend within the budget your wallet enforces, until you revoke it from Wallet connections.</div>
+          <div class="notice info">${n(e.appName)} will receive this connection and can spend within the budget your wallet enforces, until you revoke it from Wallet connections.</div>
           <button class="primary" type="button" data-action="vault-approve" ${this.busy ? "disabled" : ""}>
             ${this.busy ? '<span class="spinner"></span>Sharing…' : "Use this wallet"}
           </button>
@@ -1586,8 +1437,8 @@ class D extends HTMLElement {
         if (!e) return '<div class="notice error">No wallet request is in progress.</div>';
         const t = this.vaultUnsaved ? `<div class="notice warn">${this.vaultUnsavedReason === "no-vault" ? "This account predates the Connection Vault, so the connection will be handed to the app but not saved to your account. Enable the vault from your account manager (recovery phrase required) to make wallets portable." : "Sign in again to save connections to your account — until then the connection will be handed to the app but not saved."}</div>` : "";
         return `
-          <h2>Connect a wallet for ${i(e.appName)}</h2>
-          ${e.reason ? `<p class="sub">Reason given: ${i(e.reason)}</p>` : ""}
+          <h2>Connect a wallet for ${n(e.appName)}</h2>
+          ${e.reason ? `<p class="sub">Reason given: ${n(e.reason)}</p>` : ""}
           ${t}
           ${this.renderError()}
           <button class="primary" type="button" data-action="vault-bc" ${this.busy ? "disabled" : ""}>
@@ -1598,7 +1449,7 @@ class D extends HTMLElement {
             <label for="vaultUri">Or paste an NWC connection</label>
             <input type="password" name="vaultUri" id="vaultUri" autocomplete="off" placeholder="nostr+walletconnect://…" />
             <label for="vaultLabel">Name this connection</label>
-            <input type="text" name="vaultLabel" id="vaultLabel" autocomplete="off" maxlength="120" value="${i(`${e.appName} wallet`)}" />
+            <input type="text" name="vaultLabel" id="vaultLabel" autocomplete="off" maxlength="120" value="${n(`${e.appName} wallet`)}" />
             <button class="secondary" type="submit" ${this.busy ? "disabled" : ""}>
               ${this.vaultUnsaved ? "Share without saving" : "Save and share"}
             </button>
@@ -1611,26 +1462,26 @@ class D extends HTMLElement {
         const e = this.vaultOffer;
         return e ? `
           <h2>Save this wallet to your BitLogin?</h2>
-          <p class="sub">${i(e.appName)} just connected a wallet on this device. Saved to your BitLogin, the connection follows you — on a new device it's one tap instead of another paste.</p>
+          <p class="sub">${n(e.appName)} just connected a wallet on this device. Saved to your BitLogin, the connection follows you — on a new device it's one tap instead of another paste.</p>
           ${this.renderError()}
           <label for="vaultOfferLabel">Name this connection</label>
-          <input type="text" name="vaultOfferLabel" id="vaultOfferLabel" autocomplete="off" maxlength="120" value="${i(e.label)}" />
+          <input type="text" name="vaultOfferLabel" id="vaultOfferLabel" autocomplete="off" maxlength="120" value="${n(e.label)}" />
           <button class="primary" type="button" data-action="vault-offer-save" ${this.busy ? "disabled" : ""}>
             ${this.busy ? '<span class="spinner"></span>Saving…' : "Save to BitLogin"}
           </button>
           <button class="link" type="button" data-action="vault-offer-decline" ${this.busy ? "disabled" : ""}>No thanks — keep it on this device only</button>
-          <div class="notice info">Stored encrypted on your account; ${i(e.appName)} keeps working either way. Remove it any time from Wallet connections.</div>
+          <div class="notice info">Stored encrypted on your account; ${n(e.appName)} keeps working either way. Remove it any time from Wallet connections.</div>
         ` : '<div class="notice error">No wallet offer is in progress.</div>';
       }
       case "vault-manage": {
         const e = this.vaultConnections, t = e === null ? '<p class="sub">Loading…</p>' : e.length === 0 ? `<p class="sub">No connections stored yet. They're added when you connect a wallet inside an app.</p>` : e.map(
-          (a) => `
+          (s) => `
           <div class="credential-box">
-            <strong>${i(a.label)}</strong> <span class="sub">(${i(a.connectionType)})</span><br />
-            ${a.origin ? `Linked to ${i(a.origin)}` : "Not linked to an app"}
+            <strong>${n(s.label)}</strong> <span class="sub">(${n(s.connectionType)})</span><br />
+            ${s.origin ? `Linked to ${n(s.origin)}` : "Not linked to an app"}
             <div>
-              ${a.origin ? `<button class="link" type="button" data-action="vault-unbind" data-id="${i(a.connectionId)}" ${this.busy ? "disabled" : ""}>Revoke app access</button>` : ""}
-              <button class="link" type="button" data-action="vault-delete" data-id="${i(a.connectionId)}" ${this.busy ? "disabled" : ""}>Remove from BitLogin</button>
+              ${s.origin ? `<button class="link" type="button" data-action="vault-unbind" data-id="${n(s.connectionId)}" ${this.busy ? "disabled" : ""}>Revoke app access</button>` : ""}
+              <button class="link" type="button" data-action="vault-delete" data-id="${n(s.connectionId)}" ${this.busy ? "disabled" : ""}>Remove from BitLogin</button>
             </div>
           </div>`
         ).join("");
@@ -1638,6 +1489,7 @@ class D extends HTMLElement {
           <h2>Wallet connections</h2>
           <p class="sub">Connections your apps use, stored encrypted on your account and restored on any device you sign in to.</p>
           ${this.renderError()}
+          ${this.vaultIntegrityWarnings.map((s) => `<div class="notice warn">${n(s)}</div>`).join("")}
           ${t}
           <div class="notice info">"Remove from BitLogin" deletes the stored copy only — the connection itself keeps working for any app that already has it. To revoke spending authority, delete the connection inside your wallet app.</div>
           <button class="link" data-action="goto-dashboard">Back</button>
@@ -1646,7 +1498,7 @@ class D extends HTMLElement {
       case "rollback-confirm":
         return `
           <h2>This looks like a stale or revoked credential</h2>
-          <div class="notice warn">${i(this.rollbackMessage)}</div>
+          <div class="notice warn">${n(this.rollbackMessage)}</div>
           <p class="sub">This usually means the password just entered was rotated away in an earlier session on this device, and a relay hasn't caught up with that change. If you rotated your password, use the new one instead. Only continue if you're confident this is relay lag, not a stale credential.</p>
           <button class="primary" type="button" data-action="rollback-retry">Try again</button>
           <button class="link" type="button" data-action="rollback-continue">I understand the risk — continue anyway</button>
@@ -1656,19 +1508,16 @@ class D extends HTMLElement {
         return `
           <h2>Rotate password</h2>
           <p class="sub">Your old password's capsule will be tombstoned and a deletion request issued. This does not erase copies an attacker may already have downloaded, and a relay that hasn't processed the deletion may keep serving the old password's capsule until a device that has already seen the new generation refuses it.</p>
-          ${this.manualPasswordMode ? '<div class="notice warn">Offline guessing against this password can never be fully prevented. The generated passphrase remains the safer default.</div>' : `<div class="credential-box">${i(this.changePasswordNewCredential)}</div>`}
+          <div class="credential-box" id="credential-box">${n(this.changePasswordNewCredential)}</div>
+          <button class="secondary" type="button" data-action="copy-credential">Copy generated password</button>
           ${this.renderError()}
           <form data-form="change-password">
             <label for="oldPassword">Current password</label>
             <input type="password" name="oldPassword" id="oldPassword" autocomplete="current-password" required />
-            ${this.manualPasswordMode ? this.renderManualPasswordFields() : ""}
             <button class="primary" type="submit" ${this.busy ? "disabled" : ""}>
               ${this.busy ? '<span class="spinner"></span>Rotating…' : "Confirm rotation"}
             </button>
           </form>
-          <button class="link" data-action="toggle-manual-password">
-            ${this.manualPasswordMode ? "Use a generated password instead (recommended)" : "Use my own password instead (not recommended)"}
-          </button>
           <button class="link" data-action="goto-dashboard">Cancel</button>
         `;
       case "export":
@@ -1676,11 +1525,11 @@ class D extends HTMLElement {
           <h2>Export identity</h2>
           <p class="sub">Your public identity (npub) is safe to share. Your private key (nsec) is not.</p>
           <label>Public key (npub)</label>
-          <div class="credential-box">${i(this.session?.npub ?? "")}</div>
+          <div class="credential-box">${n(this.session?.npub ?? "")}</div>
           <button class="secondary" type="button" data-action="download-recovery-export">Download recovery export</button>
           ${this.renderError()}
           <button class="secondary" type="button" data-action="reveal-nsec">Reveal private key (nsec)</button>
-          ${this.exportedNsec ? `<div class="notice warn">Never share this. Anyone with it controls your identity.</div><div class="credential-box">${i(
+          ${this.exportedNsec ? `<div class="notice warn">Never share this. Anyone with it controls your identity.</div><div class="credential-box">${n(
           this.exportedNsec
         )}</div>` : ""}
           <button class="link" data-action="goto-dashboard">Back</button>
@@ -1690,30 +1539,28 @@ class D extends HTMLElement {
     }
   }
 }
-function K(r, e) {
-  const t = Array.from({ length: r }, (s, n) => n), a = [];
-  for (let s = 0; s < e && t.length > 0; s++) {
-    const n = Math.floor(Math.random() * t.length);
-    a.push(t.splice(n, 1)[0]);
-  }
-  return a.sort((s, n) => s - n);
+function M(a, e) {
+  const t = Array.from({ length: a }, (r, i) => i), s = [];
+  for (let r = 0; r < e && t.length > 0; r++)
+    s.push(t.splice(g(t.length), 1)[0]);
+  return s.sort((r, i) => r - i);
 }
-function i(r) {
-  return r.replace(/[&<>"']/gu, (e) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[e]);
+function n(a) {
+  return a.replace(/[&<>"']/gu, (e) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[e]);
 }
-customElements.get("bitlogin-auth") || customElements.define("bitlogin-auth", D);
+customElements.get("bitlogin-auth") || customElements.define("bitlogin-auth", I);
 window.bitlogin = {
   version: "0.1.0",
   isActiveSigner() {
     return window.nostr?._bitlogin === !0;
   },
   releaseSigner() {
-    const r = window;
-    return r.nostr?._bitlogin === !0 ? (delete r.nostr, window.dispatchEvent(new CustomEvent("bitlogin-signer-released")), !0) : !1;
+    const a = window;
+    return a.nostr?._bitlogin === !0 ? (delete a.nostr, window.dispatchEvent(new CustomEvent("bitlogin-signer-released")), !0) : !1;
   }
 };
 export {
-  D as BitLoginAuthElement,
-  N as WorkerClient,
-  B as createNip07Provider
+  I as BitLoginAuthElement,
+  S as WorkerClient,
+  C as createNip07Provider
 };
diff --git a/vendor/bitlogin/cryptoWorker.js b/vendor/bitlogin/cryptoWorker.js
index d0bb1baa..8ba20a7d 100644
--- a/vendor/bitlogin/cryptoWorker.js
+++ b/vendor/bitlogin/cryptoWorker.js
@@ -1,61 +1,77 @@
-import { v as ie, g as _, s as ee, c as zn, K as Bn, b as jt, d as it, f as at, h as te, u as ue, j as Gn, k as Fn, l as H, m as J, n as ct, S as st, o as lt, q as $e, D as ke, t as We, w as ut, x as Hn, y as Jn, z as Yn, A as Qn, B as Ge, C as At, F as $t, G as Xn, H as Zn, I as er, J as Le, L as Wt, M as tr, N as nr, O as dt, P as ze, Q as Ce, T as rr, U as zt, V as or, W as ir, X as xe, Y as ge, Z as ar, _ as we, $ as _e, a0 as Bt, a1 as yt, a2 as cr, a3 as Gt, a4 as Ft, a5 as sr, a6 as lr, a as Ct, a7 as ur } from "./bitlogin-shared-B2Rc9khL.js";
-class be extends Error {
+import { v as ae, g as k, s as ne, b as er, c as be, K as tr, d as Yt, f as yt, h as ht, j as re, u as Y, k as nr, l as rr, m as V, n as X, o as Ge, S as pt, q as ft, t as Fe, D as Ee, w as He, x as vt, y as or, z as ir, A as ar, B as cr, C as Qe, F as Mt, G as gt, H as sr, I as lr, J as ur, L as Ue, M as wt, N as dr, O as yr, P as bt, Q as Je, T as Se, U as hr, V as Xt, W as x, X as pr, Y as fr, Z as vr, _ as mt, $ as Qt, a0 as Pe, a1 as gr, a2 as Me, a3 as Zt, a4 as me, a5 as wr, a6 as it, a7 as br, a as Ut, a8 as mr } from "./bitlogin-shared-DTz11m56.js";
+class _e extends Error {
   reason;
   constructor(t) {
     super("Account not found or credentials incorrect."), this.name = "AccountNotFoundError", this.reason = t;
   }
 }
-class ye extends Error {
+class le extends Error {
   constructor(t) {
     super(t), this.name = "RegistrationFailedError";
   }
 }
-class Ht extends Error {
+class en extends Error {
   constructor(t = "An account already exists with this login name and password. Sign in instead, or choose different credentials.") {
     super(t), this.name = "AccountAlreadyExistsError";
   }
 }
-class Me extends Error {
+class Ne extends Error {
   constructor(t) {
     super(t), this.name = "RecoveryFailedError";
   }
 }
-class Jt extends Error {
+class tn extends Error {
   seenGeneration;
   capsuleGeneration;
   constructor(t, n) {
     super(`This credential capsule reports generation ${n}, but this device has already seen generation ${t}. Refusing to log in with older, possibly-revoked credentials.`), this.name = "RollbackDetectedError", this.seenGeneration = t, this.capsuleGeneration = n;
   }
 }
-function ht(e, t) {
+function We(e, t) {
   const n = t ?? Math.floor(Date.now() / 1e3);
   return e == null ? n : Math.max(n, e + 1);
 }
-const dr = { generation: -1, recoveryGeneration: -1 };
-function pt(e) {
+const _r = { generation: -1, recoveryGeneration: -1 };
+function _t(e) {
   return `bitlogin:hwm:${e}`;
 }
-async function vt(e, t) {
-  const n = await e.get(pt(t));
-  return n ? JSON.parse(n) : dr;
+async function kt(e, t) {
+  const n = await e.get(_t(t));
+  return n ? JSON.parse(n) : _r;
 }
-async function Yt(e, t, n) {
-  const r = await vt(e, t), o = {
+async function nn(e, t, n) {
+  const r = await kt(e, t), o = {
     generation: Math.max(r.generation, n.generation ?? -1),
     recoveryGeneration: Math.max(r.recoveryGeneration, n.recoveryGeneration ?? -1)
   };
-  return await e.set(pt(t), JSON.stringify(o)), o;
+  return await e.set(_t(t), JSON.stringify(o)), o;
 }
-async function yr(e, t, n = { generation: 0, recoveryGeneration: -1 }) {
-  await e.set(pt(t), JSON.stringify(n));
+async function kr(e, t, n = { generation: 0, recoveryGeneration: -1 }) {
+  await e.set(_t(t), JSON.stringify(n));
 }
-function hr() {
+function Er(e) {
+  const t = e.split(".");
+  if (t.length !== 4 || t.some((r) => !/^\d{1,3}$/u.test(r)))
+    return !1;
+  const n = t.map(Number);
+  return n.every((r) => r >= 0 && r <= 255) && n[0] === 127;
+}
+function Ye(e) {
+  let t;
+  try {
+    t = new URL(e);
+  } catch {
+    return !1;
+  }
+  return t.username || t.password || t.hash ? !1 : t.protocol === "wss:" ? !0 : t.protocol !== "ws:" ? !1 : t.hostname === "localhost" || t.hostname === "[::1]" || Er(t.hostname);
+}
+function Pr() {
   const e = globalThis.WebSocket;
   if (!e)
     throw new Error("No global WebSocket implementation is available in this environment.");
   return e;
 }
-class pr {
+class Kr {
   url;
   ws = null;
   connectPromise = null;
@@ -65,11 +81,13 @@ class pr {
   connectTimeoutMs;
   authenticated = !1;
   constructor(t, n = {}) {
+    if (!Ye(t))
+      throw new Error("Relay URL must use secure WebSockets, except for an explicit loopback development endpoint.");
     this.url = t, this.authPrivateKey = n.authPrivateKey, this.connectTimeoutMs = n.connectTimeoutMs ?? 8e3;
   }
   async connect() {
     return this.connectPromise ? this.connectPromise : (this.connectPromise = new Promise((t, n) => {
-      const r = hr(), o = new r(this.url);
+      const r = Pr(), o = new r(this.url);
       this.ws = o;
       const i = setTimeout(() => {
         n(new Error(`Timed out connecting to relay ${this.url}`));
@@ -104,22 +122,31 @@ class pr {
       return;
     const [r, ...o] = n;
     if (r === "EVENT") {
-      const [i, a] = o, c = this.subs.get(i);
-      c && ie(a) && c.events.push(a);
+      const [i, a] = o;
+      if (typeof i != "string")
+        return;
+      const c = this.subs.get(i);
+      c && ae(a) && Rr(a, c.filter) && c.events.push(a);
       return;
     }
     if (r === "EOSE") {
       const [i] = o;
+      if (typeof i != "string")
+        return;
       this.subs.get(i)?.onEose();
       return;
     }
     if (r === "OK") {
       const [i, a, c] = o;
+      if (typeof i != "string" || typeof a != "boolean" || c !== void 0 && typeof c != "string")
+        return;
       this.pendingPublishes.get(i)?.({ ok: a, message: c ?? "" }), this.pendingPublishes.delete(i);
       return;
     }
     if (r === "AUTH") {
       const [i] = o;
+      if (typeof i != "string")
+        return;
       this.respondToAuthChallenge(i);
       return;
     }
@@ -127,10 +154,10 @@ class pr {
   async respondToAuthChallenge(t) {
     if (!this.authPrivateKey)
       return;
-    const n = _(this.authPrivateKey), r = ee({
+    const n = k(this.authPrivateKey), r = ne({
       pubkey: n,
       created_at: Math.floor(Date.now() / 1e3),
-      kind: Bn,
+      kind: tr,
       tags: [
         ["relay", this.url],
         ["challenge", t]
@@ -154,26 +181,32 @@ class pr {
   }
   async queryOnce(t, n = 8e3) {
     await this.connect();
-    const r = zn({
-      pubkey: "0".repeat(64),
-      created_at: Date.now(),
-      kind: 0,
-      tags: [],
-      content: JSON.stringify(t) + Math.random()
-    }).slice(0, 16);
+    const r = er(be(8));
     return new Promise((o, i) => {
       const a = [], c = (l) => {
         clearTimeout(s), this.subs.delete(r), this.send(["CLOSE", r]), l ? i(l) : o(a);
       }, s = setTimeout(() => c(new Error("relay did not answer the subscription before the timeout")), n);
-      this.subs.set(r, { events: a, onEose: () => c() }), this.send(["REQ", r, t]);
+      this.subs.set(r, { events: a, filter: t, onEose: () => c() }), this.send(["REQ", r, t]);
     });
   }
 }
+function Rr(e, t) {
+  if (t.ids && !t.ids.some((n) => e.id.startsWith(n)) || t.authors && !t.authors.some((n) => e.pubkey.startsWith(n)) || t.kinds && !t.kinds.includes(e.kind) || t.since !== void 0 && e.created_at < t.since || t.until !== void 0 && e.created_at > t.until)
+    return !1;
+  for (const [n, r] of Object.entries(t)) {
+    if (!n.startsWith("#") || !Array.isArray(r))
+      continue;
+    const o = n.slice(1), i = r;
+    if (!e.tags.some((a) => a[0] === o && i.some((c) => c === (a[1] ?? ""))))
+      return !1;
+  }
+  return !0;
+}
 class C {
   connections = /* @__PURE__ */ new Map();
   constructor(t, n = {}) {
     for (const r of new Set(t))
-      this.connections.set(r, new pr(r, n));
+      this.connections.set(r, new Kr(r, n));
   }
   get relayUrls() {
     return [...this.connections.keys()];
@@ -212,221 +245,212 @@ class C {
       t.close();
   }
 }
-function se(e) {
+function ye(e) {
   return e.filter((t) => t.result.ok).length;
 }
-function vr(e, t, n) {
-  return ee({ pubkey: _(e), created_at: n, kind: jt, tags: [], content: JSON.stringify(t) }, e);
+function Ar(e, t, n) {
+  return ne({ pubkey: k(e), created_at: n, kind: Yt, tags: [], content: JSON.stringify(t) }, e);
 }
-function fr(e, t, n) {
+function xr(e, t, n) {
   const r = t.map((o) => {
     const i = ["r", o.url];
     return o.read && !o.write && i.push("read"), o.write && !o.read && i.push("write"), i;
   });
-  return ee({ pubkey: _(e), created_at: n, kind: it, tags: r, content: "" }, e);
+  return ne({ pubkey: k(e), created_at: n, kind: yt, tags: r, content: "" }, e);
 }
-function gr(e, t, n) {
-  return ee({
-    pubkey: _(e),
+function Cr(e, t, n) {
+  return ne({
+    pubkey: k(e),
     created_at: n,
-    kind: at,
+    kind: ht,
     tags: t.map((r) => ["relay", r]),
     content: ""
   }, e);
 }
-function wr(e) {
+function Nr(e) {
   return e.tags.filter((t) => t[0] === "r" && t[1]).map((t) => t[1]);
 }
-function br(e) {
+function Sr(e) {
   return e.tags.filter((t) => t[0] === "relay" && t[1]).map((t) => t[1]);
 }
-async function mr(e) {
-  const t = _(e.everydayPrivateKey), n = Math.floor(Date.now() / 1e3), r = [.../* @__PURE__ */ new Set([...e.generalRelays, ...e.dmRelays, ...e.discoveryRelays])], o = new C(r), [i, a, c] = await Promise.all([
-    o.queryQuorum({ authors: [t], kinds: [jt] }),
-    o.queryQuorum({ authors: [t], kinds: [it] }),
-    o.queryQuorum({ authors: [t], kinds: [at] })
+async function Ir(e) {
+  const t = k(e.everydayPrivateKey), n = Math.floor(Date.now() / 1e3), r = [.../* @__PURE__ */ new Set([...e.generalRelays, ...e.dmRelays, ...e.discoveryRelays])], o = new C(r), [i, a, c] = await Promise.all([
+    o.queryQuorum({ authors: [t], kinds: [Yt] }),
+    o.queryQuorum({ authors: [t], kinds: [yt] }),
+    o.queryQuorum({ authors: [t], kinds: [ht] })
   ]);
   o.closeAll();
   const s = i.outcomes.some((p) => p.events.length > 0), l = a.outcomes.some((p) => p.events.length > 0), u = c.outcomes.some((p) => p.events.length > 0), y = new C(r);
   let v = null, w = null, g = null;
   const f = [];
   if (!s && (e.name || e.about || e.picture)) {
-    const p = vr(e.everydayPrivateKey, { name: e.name, about: e.about, picture: e.picture }, n);
+    const p = Ar(e.everydayPrivateKey, { name: e.name, about: e.about, picture: e.picture }, n);
     f.push(y.publishAll(p).then((h) => void (v = h)));
   }
   if (!l) {
-    const p = fr(e.everydayPrivateKey, e.generalRelays.map((h) => ({ url: h, read: !0, write: !0 })), n);
+    const p = xr(e.everydayPrivateKey, e.generalRelays.map((h) => ({ url: h, read: !0, write: !0 })), n);
     f.push(y.publishAll(p).then((h) => void (w = h)));
   }
   if (!u) {
-    const p = gr(e.everydayPrivateKey, e.dmRelays, n);
+    const p = Cr(e.everydayPrivateKey, e.dmRelays, n);
     f.push(y.publishAll(p).then((h) => void (g = h)));
   }
   return await Promise.all(f), y.closeAll(), {
-    profilePublished: v !== null && se(v) > 0,
-    relayListAcknowledgedCount: w !== null ? se(w) : 0,
-    dmRelayListAcknowledgedCount: g !== null ? se(g) : 0,
+    profilePublished: v !== null && ye(v) > 0,
+    relayListAcknowledgedCount: w !== null ? ye(w) : 0,
+    dmRelayListAcknowledgedCount: g !== null ? ye(g) : 0,
     profileSkippedExisting: s,
     relayListSkippedExisting: l,
     dmRelayListSkippedExisting: u
   };
 }
-async function me(e, t, n) {
-  const r = n.minAcks ?? 2, o = n.minReadbacks ?? 2, i = await e.publishAll(t, n.timeoutMs), a = se(i), s = (await e.queryQuorum({ kinds: [te], authors: [t.pubkey], "#d": [n.dTag], limit: 5 }, n.timeoutMs)).outcomes.filter((l) => l.events.some((u) => u.id === t.id)).length;
+async function ke(e, t, n) {
+  const r = n.minAcks ?? 2, o = n.minReadbacks ?? 2, i = await e.publishAll(t, n.timeoutMs), a = ye(i), s = (await e.queryQuorum({ kinds: [re], authors: [t.pubkey], "#d": [n.dTag], limit: 5 }, n.timeoutMs)).outcomes.filter((l) => l.events.some((u) => u.id === t.id)).length;
   return {
     acknowledgedCount: a,
     readbackVerifiedCount: s,
     success: a >= r && s >= o
   };
 }
-function kr(e) {
-  const t = Gn(e);
+function Tr(e) {
+  const t = nr(e);
   if (t === void 0)
     throw new Error("Value is not JSON-serializable for canonicalization.");
   return t;
 }
-function _r(e) {
-  return ue(kr(e));
+function Lr(e) {
+  return Y(Tr(e));
 }
-const De = [1024, 2048, 4096], de = 4;
-function Er(e) {
-  const t = de + e.length, n = De.find((i) => i >= t);
+const qe = [1024, 2048, 4096], pe = 4;
+function Or(e) {
+  const t = pe + e.length, n = qe.find((i) => i >= t);
   if (n === void 0)
-    throw new Error(`Payload of ${e.length} bytes exceeds the largest padding bucket (${De[De.length - 1]} bytes minus ${de}-byte length prefix).`);
+    throw new Error(`Payload of ${e.length} bytes exceeds the largest padding bucket (${qe[qe.length - 1]} bytes minus ${pe}-byte length prefix).`);
   const r = new Uint8Array(n);
-  return new DataView(r.buffer).setUint32(0, e.length, !1), r.set(e, de), r;
+  return new DataView(r.buffer).setUint32(0, e.length, !1), r.set(e, pe), r;
 }
-function Pr(e) {
-  if (!De.includes(e.length))
+function Mr(e) {
+  if (!qe.includes(e.length))
     throw new Error(`Padded plaintext length ${e.length} does not match a known bucket.`);
   const n = new DataView(e.buffer, e.byteOffset, e.byteLength).getUint32(0, !1);
-  if (n > e.length - de)
+  if (n > e.length - pe)
     throw new Error("Declared payload length exceeds the padded bucket size.");
-  const r = e.slice(de, de + n), o = e.slice(de + n);
+  const r = e.slice(pe, pe + n), o = e.slice(pe + n);
   for (const i of o)
     if (i !== 0)
       throw new Error("Padding bytes are not all zero; capsule plaintext is malformed.");
   return r;
 }
-function ft() {
+function Et() {
   const e = globalThis.crypto;
   if (!e || !e.subtle)
     throw new Error("WebCrypto SubtleCrypto is not available in this environment.");
   return e;
 }
-async function Qt(e) {
+async function rn(e) {
   if (e.length !== 32)
     throw new Error("AES-256-GCM key must be exactly 32 bytes.");
-  return ft().subtle.importKey("raw", e, "AES-GCM", !1, ["encrypt", "decrypt"]);
+  return Et().subtle.importKey("raw", e, "AES-GCM", !1, ["encrypt", "decrypt"]);
 }
-async function Kr(e, t, n) {
-  const r = Fn(), o = await Qt(e), i = await ft().subtle.encrypt({ name: "AES-GCM", iv: r, additionalData: n, tagLength: 128 }, o, t);
+async function on(e, t, n) {
+  const r = rr(), o = await rn(e), i = await Et().subtle.encrypt({ name: "AES-GCM", iv: r, additionalData: n, tagLength: 128 }, o, t);
   return { nonce: r, ciphertext: new Uint8Array(i) };
 }
-async function Rr(e, t, n, r) {
-  const o = await Qt(e);
+async function an(e, t, n, r) {
+  const o = await rn(e);
   try {
-    const i = await ft().subtle.decrypt({ name: "AES-GCM", iv: t, additionalData: r, tagLength: 128 }, o, n);
+    const i = await Et().subtle.decrypt({ name: "AES-GCM", iv: t, additionalData: r, tagLength: 128 }, o, n);
     return new Uint8Array(i);
   } catch {
     throw new Error("AES-256-GCM authentication failed: capsule is corrupted, tampered, or the wrong key was used.");
   }
 }
-function Xt(e) {
-  return ue(`bitlogin|password-capsule|v1|${e}|30078|bitlogin:password:v1`);
+function cn(e) {
+  return Y(`bitlogin|password-capsule|v1|${e}|30078|bitlogin:password:v1`);
 }
-function Zt(e) {
-  return ue(`bitlogin|recovery-capsule|v1|${e}|30078|bitlogin:recovery:v1`);
+function sn(e) {
+  return Y(`bitlogin|recovery-capsule|v1|${e}|30078|bitlogin:recovery:v1`);
 }
-async function gt(e, t, n) {
-  const r = _r(e), o = Er(r), i = await Kr(t, o, n);
+async function Pt(e, t, n) {
+  const r = Lr(e), o = Or(r), i = await on(t, o, n);
   return {
     version: 1,
     algorithm: "aes-256-gcm",
-    nonce: H(i.nonce),
-    ciphertext: H(i.ciphertext)
+    nonce: V(i.nonce),
+    ciphertext: V(i.ciphertext)
   };
 }
-async function wt(e, t, n) {
+async function Kt(e, t, n) {
   if (e.version !== 1 || e.algorithm !== "aes-256-gcm")
     throw new Error(`Unsupported capsule envelope version/algorithm: ${e.version}/${e.algorithm}`);
-  const r = J(e.nonce), o = J(e.ciphertext), i = await Rr(t, r, o, n), a = Pr(i);
-  return JSON.parse(ct(a));
+  const r = X(e.nonce), o = X(e.ciphertext), i = await an(t, r, o, n), a = Mr(i);
+  return JSON.parse(Ge(a));
 }
-class Be extends Error {
+class Rt extends Error {
   constructor(t) {
     super(t), this.name = "CapsuleValidationError";
   }
 }
-const Ar = /* @__PURE__ */ new Set(["wss:", "ws:"]), Cr = 1e6, xr = /^[0-9a-f]{64}$/u;
-function P(e, t) {
+const Ur = 1e6, Dr = /^[0-9a-f]{64}$/u;
+function E(e, t) {
   if (!e)
-    throw new Be(t);
+    throw new Rt(t);
 }
-function qe(e) {
-  return typeof e == "string" && xr.test(e);
+function $e(e) {
+  return typeof e == "string" && Dr.test(e);
 }
-function en(e) {
-  P(Array.isArray(e), "vault_relay_hints must be an array (§12.4.7).");
-  for (const t of e) {
-    P(typeof t == "string", "Each relay hint must be a string (§12.4.7).");
-    let n;
-    try {
-      n = new URL(t);
-    } catch {
-      throw new Be(`Invalid relay URL: ${String(t)} (§12.4.7)`);
-    }
-    P(Ar.has(n.protocol), `Relay URL uses a disallowed scheme: ${t} (§12.4.7)`);
-  }
+function ln(e) {
+  E(Array.isArray(e), "vault_relay_hints must be an array (§12.4.7).");
+  for (const t of e)
+    E(typeof t == "string", "Each relay hint must be a string (§12.4.7)."), E(Ye(t), `Relay URL must use secure WebSockets, except for an explicit loopback development endpoint (§12.4.7): ${t}`);
 }
-function tn(e) {
-  P(typeof e == "string", "account_id must be a string (§12.4.2).");
+function un(e) {
+  E(typeof e == "string", "account_id must be a string (§12.4.2).");
   let t;
   try {
-    t = J(e);
+    t = X(e);
   } catch {
-    throw new Be("account_id is not valid base64url (§12.4.2).");
+    throw new Rt("account_id is not valid base64url (§12.4.2).");
   }
-  P(t.length === 16, "account_id must decode to exactly 128 bits (§12.4.2).");
+  E(t.length === 16, "account_id must decode to exactly 128 bits (§12.4.2).");
 }
-function nn(e, t) {
-  P(typeof e == "string", "operational_private_key must be a string (§12.4.3).");
-  const n = J(e);
-  P(n.length === 32, "operational_private_key must be exactly 32 bytes (§12.4.3)."), P(lt(n), "operational_private_key is not a valid secp256k1 scalar (§12.4.3)."), P(qe(t), "operational_public_key must be lowercase 64-char hex (§12.4.4).");
-  const r = _(n);
-  P(r === t, "operational_public_key does not match the derived public key (§12.4.4).");
+function dn(e, t) {
+  E(typeof e == "string", "operational_private_key must be a string (§12.4.3).");
+  const n = X(e);
+  E(n.length === 32, "operational_private_key must be exactly 32 bytes (§12.4.3)."), E(ft(n), "operational_private_key is not a valid secp256k1 scalar (§12.4.3)."), E($e(t), "operational_public_key must be lowercase 64-char hex (§12.4.4).");
+  const r = k(n);
+  E(r === t, "operational_public_key does not match the derived public key (§12.4.4).");
 }
-function rn(e) {
+function ze(e, t) {
+  E(typeof t == "string", `${e} must be a string (§CV5.2).`);
+  let n;
+  try {
+    n = X(t);
+  } catch {
+    throw new Rt(`${e} is not valid base64url (§CV5.2).`);
+  }
+  E(n.length === 32, `${e} must decode to exactly 32 bytes (§CV5.2).`);
+}
+function Vr(e) {
   const t = e.connection_vault_root, n = e.vault_sudo_key;
-  if (!(t === void 0 && n === void 0)) {
-    P(t !== void 0 && n !== void 0, "connection_vault_root and vault_sudo_key must appear together (§CV5.2).");
-    for (const [r, o] of [
-      ["connection_vault_root", t],
-      ["vault_sudo_key", n]
-    ]) {
-      P(typeof o == "string", `${r} must be a string (§CV5.2).`);
-      let i;
-      try {
-        i = J(o);
-      } catch {
-        throw new Be(`${r} is not valid base64url (§CV5.2).`);
-      }
-      P(i.length === 32, `${r} must decode to exactly 32 bytes (§CV5.2).`);
-    }
-  }
+  t === void 0 && n === void 0 || (E(t !== void 0 && n !== void 0, "connection_vault_root and vault_sudo_key must appear together (§CV5.2)."), ze("connection_vault_root", t), ze("vault_sudo_key", n));
 }
-function on(e, t) {
-  P(Number.isInteger(e) && e >= 0 && e <= Cr, `${t} is out of supported bounds (§12.4.8).`);
+function qr(e) {
+  const t = e.connection_vault_root, n = e.vault_sudo_key;
+  t === void 0 && n === void 0 || (E(t !== void 0, "vault_sudo_key cannot appear without connection_vault_root (§CV5.2)."), ze("connection_vault_root", t), n !== void 0 && ze("vault_sudo_key", n));
 }
-function Sr(e) {
-  P(e.schema === $e, `Unsupported or unknown schema: ${String(e.schema)} (§12.4.1)`), tn(e.account_id), on(e.generation, "generation"), nn(e.operational_private_key, e.operational_public_key), P(qe(e.recovery_public_key), "recovery_public_key must be lowercase 64-char hex (§12.4.5)."), en(e.vault_relay_hints), rn(e);
+function yn(e, t) {
+  E(Number.isInteger(e) && e >= 0 && e <= Ur, `${t} is out of supported bounds (§12.4.8).`);
+}
+function jr(e) {
+  E(e.schema === Fe, `Unsupported or unknown schema: ${String(e.schema)} (§12.4.1)`), un(e.account_id), yn(e.generation, "generation"), dn(e.operational_private_key, e.operational_public_key), E($e(e.recovery_public_key), "recovery_public_key must be lowercase 64-char hex (§12.4.5)."), ln(e.vault_relay_hints), qr(e);
   const t = e.recovery_capsule_event;
-  P(!!t && typeof t == "object", "recovery_capsule_event must be present (§12.4.6)."), P(ie(t), "Embedded recovery_capsule_event has an invalid event id or signature (§12.4.6)."), P(t.pubkey === e.recovery_public_key, "Embedded recovery_capsule_event author does not match recovery_public_key (§12.4.5).");
+  E(!!t && typeof t == "object", "recovery_capsule_event must be present (§12.4.6)."), E(ae(t), "Embedded recovery_capsule_event has an invalid event id or signature (§12.4.6)."), E(t.pubkey === e.recovery_public_key, "Embedded recovery_capsule_event author does not match recovery_public_key (§12.4.5).");
 }
-function Nr(e) {
-  P(e.schema === st, `Unsupported or unknown schema: ${String(e.schema)} (§12.4.1)`), tn(e.account_id), on(e.recovery_generation, "recovery_generation"), P(e.previous_recovery_event_id === null || qe(e.previous_recovery_event_id), "previous_recovery_event_id must be null or lowercase 64-char hex (§12.3)."), nn(e.operational_private_key, e.operational_public_key), P(qe(e.recovery_public_key), "recovery_public_key must be lowercase 64-char hex."), en(e.vault_relay_hints), rn(e);
+function Wr(e) {
+  E(e.schema === pt, `Unsupported or unknown schema: ${String(e.schema)} (§12.4.1)`), un(e.account_id), yn(e.recovery_generation, "recovery_generation"), E(e.previous_recovery_event_id === null || $e(e.previous_recovery_event_id), "previous_recovery_event_id must be null or lowercase 64-char hex (§12.3)."), dn(e.operational_private_key, e.operational_public_key), E($e(e.recovery_public_key), "recovery_public_key must be lowercase 64-char hex."), ln(e.vault_relay_hints), Vr(e);
 }
-function Ir(e) {
+function $r(e) {
   const t = /* @__PURE__ */ new Map();
   for (const r of e) {
     const o = t.get(r.recoveryGeneration);
@@ -459,56 +483,56 @@ function Ir(e) {
   }
   return { consistent: !0 };
 }
-async function bt(e) {
-  const t = _(e.locatorPrivateKey), n = await gt(e.payload, e.capsuleKey, Xt(t));
-  return ee({
+async function At(e) {
+  const t = k(e.locatorPrivateKey), n = await Pt(e.payload, e.capsuleKey, cn(t));
+  return ne({
     pubkey: t,
     created_at: e.payload.created_at,
-    kind: te,
-    tags: [["d", ke]],
+    kind: re,
+    tags: [["d", Ee]],
     content: JSON.stringify(n)
   }, e.locatorPrivateKey);
 }
-function Tr(e) {
-  const t = _(e.oldLocatorPrivateKey);
-  return ee({
+function zr(e) {
+  const t = k(e.oldLocatorPrivateKey);
+  return ne({
     pubkey: t,
     created_at: e.createdAt,
-    kind: te,
-    tags: [["d", ke]],
+    kind: re,
+    tags: [["d", Ee]],
     content: ""
   }, e.oldLocatorPrivateKey);
 }
-async function Lr(e, t) {
-  if (!ie(e))
+async function Br(e, t) {
+  if (!ae(e))
     throw new Error("Credential capsule event has an invalid id or signature.");
-  const n = JSON.parse(e.content), r = await wt(n, t, Xt(e.pubkey));
-  return Sr(r), r;
+  const n = JSON.parse(e.content), r = await Kt(n, t, cn(e.pubkey));
+  return jr(r), r;
 }
-async function an(e) {
-  const t = _(e.recoveryPrivateKey), n = await gt(e.payload, e.capsuleKey, Zt(t));
-  return ee({
+async function hn(e) {
+  const t = k(e.recoveryPrivateKey), n = await Pt(e.payload, e.capsuleKey, sn(t));
+  return ne({
     pubkey: t,
     created_at: e.payload.created_at,
-    kind: te,
-    tags: [["d", We]],
+    kind: re,
+    tags: [["d", He]],
     content: JSON.stringify(n)
   }, e.recoveryPrivateKey);
 }
-async function cn(e, t) {
-  if (!ie(e))
+async function pn(e, t) {
+  if (!ae(e))
     throw new Error("Recovery capsule event has an invalid id or signature.");
-  const n = JSON.parse(e.content), r = await wt(n, t, Zt(e.pubkey));
-  return Nr(r), r;
+  const n = JSON.parse(e.content), r = await Kt(n, t, sn(e.pubkey));
+  return Wr(r), r;
 }
-function xt(e, t, n) {
+function Dt(e, t, n) {
   const r = /* @__PURE__ */ new Map();
   for (const o of e)
-    o.pubkey === t && o.kind === te && ut(o, "d") === n && ie(o) && r.set(o.id, o);
+    o.pubkey === t && o.kind === re && vt(o, "d") === n && ae(o) && r.set(o.id, o);
   return [...r.values()].sort((o, i) => i.created_at - o.created_at);
 }
-async function sn(e, t, n, r, o) {
-  const i = await e.queryQuorum({ kinds: [te], authors: [t], "#d": [n], limit: 5 }, o), a = i.outcomes.flatMap((v) => v.events), c = xt(a, t, n), s = [];
+async function fn(e, t, n, r, o) {
+  const i = await e.queryQuorum({ kinds: [re], authors: [t], "#d": [n], limit: 5 }, o), a = i.outcomes.flatMap((v) => v.events), c = Dt(a, t, n), s = [];
   for (const v of c)
     try {
       const w = await r(v);
@@ -518,7 +542,7 @@ async function sn(e, t, n, r, o) {
     }
   const l = s.find((v) => v.payload !== null) ?? null, u = i.outcomes.map((v) => ({
     responded: v.responded,
-    events: xt(v.events, t, n)
+    events: Dt(v.events, t, n)
   })).filter((v) => v.responded && v.events.length > 0).map((v) => v.events[0].id), y = new Set(u).size > 1;
   return {
     quorumMet: i.quorumMet,
@@ -529,32 +553,32 @@ async function sn(e, t, n, r, o) {
     relayDisagreement: y
   };
 }
-async function Se(e, t, n, r = 8e3) {
-  return sn(e, t, ke, (o) => Lr(o, n), r);
+async function Ie(e, t, n, r = 8e3) {
+  return fn(e, t, Ee, (o) => Br(o, n), r);
 }
-async function Ur(e, t, n, r = 8e3) {
-  return sn(e, t, We, (o) => cn(o, n), r);
+async function Gr(e, t, n, r = 8e3) {
+  return fn(e, t, He, (o) => pn(o, n), r);
 }
-function Or(e) {
+function Fr(e) {
   const t = e.filter((n) => n.payload !== null);
-  return t.length < 2 ? { consistent: !0 } : Ir(t.map((n) => ({
+  return t.length < 2 ? { consistent: !0 } : $r(t.map((n) => ({
     eventId: n.event.id,
     recoveryGeneration: n.payload.recovery_generation,
     previousRecoveryEventId: n.payload.previous_recovery_event_id
   })));
 }
-async function Mr(e, t, n, r) {
+async function Hr(e, t, n, r) {
   const [o, i] = await Promise.all([
     e.publishAll(t, r),
     e.publishAll(n, r)
   ]);
   return {
-    credentialAcknowledgedCount: se(o),
-    recoveryAcknowledgedCount: se(i),
+    credentialAcknowledgedCount: ye(o),
+    recoveryAcknowledgedCount: ye(i),
     relaysTried: e.relayUrls.length
   };
 }
-const ln = `abandon
+const vn = `abandon
 ability
 able
 about
@@ -2603,198 +2627,237 @@ zero
 zone
 zoo`.split(`
 `);
-function Dr(e, t, n, r) {
-  Yn(e);
-  const o = Qn({ dkLen: 32, asyncTick: 10 }, r), { c: i, dkLen: a, asyncTick: c } = o;
-  if (Ge(i), Ge(a), Ge(c), i < 1)
+function Jr(e, t, n, r) {
+  ar(e);
+  const o = cr({ dkLen: 32, asyncTick: 10 }, r), { c: i, dkLen: a, asyncTick: c } = o;
+  if (Qe(i), Qe(a), Qe(c), i < 1)
     throw new Error("iterations (c) should be >= 1");
-  const s = At(t), l = At(n), u = new Uint8Array(a), y = $t.create(e, s), v = y._cloneInto().update(l);
+  const s = Mt(t), l = Mt(n), u = new Uint8Array(a), y = gt.create(e, s), v = y._cloneInto().update(l);
   return { c: i, dkLen: a, asyncTick: c, DK: u, PRF: y, PRFSalt: v };
 }
-function Vr(e, t, n, r, o) {
-  return e.destroy(), t.destroy(), r && r.destroy(), Xn(o), n;
+function Yr(e, t, n, r, o) {
+  return e.destroy(), t.destroy(), r && r.destroy(), sr(o), n;
 }
-async function qr(e, t, n, r) {
-  const { c: o, dkLen: i, asyncTick: a, DK: c, PRF: s, PRFSalt: l } = Dr(e, t, n, r);
+async function Xr(e, t, n, r) {
+  const { c: o, dkLen: i, asyncTick: a, DK: c, PRF: s, PRFSalt: l } = Jr(e, t, n, r);
   let u;
-  const y = new Uint8Array(4), v = Hn(y), w = new Uint8Array(s.outputLen);
+  const y = new Uint8Array(4), v = or(y), w = new Uint8Array(s.outputLen);
   for (let g = 1, f = 0; f < i; g++, f += s.outputLen) {
     const p = c.subarray(f, f + s.outputLen);
-    v.setInt32(0, g, !1), (u = l._cloneInto(u)).update(y).digestInto(w), p.set(w.subarray(0, p.length)), await Jn(o - 1, a, () => {
+    v.setInt32(0, g, !1), (u = l._cloneInto(u)).update(y).digestInto(w), p.set(w.subarray(0, p.length)), await ir(o - 1, a, () => {
       s._cloneInto(u).update(w).digestInto(w);
       for (let h = 0; h < p.length; h++)
         p[h] ^= w[h];
     });
   }
-  return Vr(s, l, c, u, w);
+  return Yr(s, l, c, u, w);
 }
 /*! scure-bip39 - MIT License (c) 2022 Patricio Palladino, Paul Miller (paulmillr.com) */
-const jr = (e) => e[0] === "あいこくしん";
-function un(e) {
+const Qr = (e) => e[0] === "あいこくしん";
+function gn(e) {
   if (typeof e != "string")
     throw new TypeError("invalid mnemonic type: " + typeof e);
   return e.normalize("NFKD");
 }
-function dn(e) {
-  const t = un(e), n = t.split(" ");
+function wn(e) {
+  const t = gn(e), n = t.split(" ");
   if (![12, 15, 18, 21, 24].includes(n.length))
     throw new Error("Invalid mnemonic");
   return { nfkd: t, words: n };
 }
-function yn(e) {
-  er(e, 16, 20, 24, 28, 32);
+function bn(e) {
+  ur(e, 16, 20, 24, 28, 32);
 }
-const $r = (e) => {
+const Zr = (e) => {
   const t = 8 - e.length / 4;
-  return new Uint8Array([Wt(e)[0] >> t << t]);
+  return new Uint8Array([wt(e)[0] >> t << t]);
 };
-function hn(e) {
+function mn(e) {
   if (!Array.isArray(e) || e.length !== 2048 || typeof e[0] != "string")
     throw new Error("Wordlist: expected array of 2048 strings");
   return e.forEach((t) => {
     if (typeof t != "string")
       throw new Error("wordlist: non-string element: " + t);
-  }), Le.chain(Le.checksum(1, $r), Le.radix2(11, !0), Le.alphabet(e));
+  }), Ue.chain(Ue.checksum(1, Zr), Ue.radix2(11, !0), Ue.alphabet(e));
 }
-function Wr(e, t) {
-  const { words: n } = dn(e), r = hn(t).decode(n);
-  return yn(r), r;
+function eo(e, t) {
+  const { words: n } = wn(e), r = mn(t).decode(n);
+  return bn(r), r;
 }
-function zr(e, t) {
-  return yn(e), hn(t).encode(e).join(jr(t) ? "　" : " ");
+function to(e, t) {
+  return bn(e), mn(t).encode(e).join(Qr(t) ? "　" : " ");
 }
-function Br(e, t) {
+function no(e, t) {
   try {
-    Wr(e, t);
+    eo(e, t);
   } catch {
     return !1;
   }
   return !0;
 }
-const Gr = (e) => un("mnemonic" + e);
-function Fr(e, t = "") {
-  return qr(Zn, dn(e).nfkd, Gr(t), { c: 2048, dkLen: 64 });
+const ro = (e) => gn("mnemonic" + e);
+function oo(e, t = "") {
+  return Xr(lr, wn(e).nfkd, ro(t), { c: 2048, dkLen: 64 });
 }
-function Hr(e) {
+function io(e) {
   if (e.length !== 16)
     throw new Error("Recovery phrase entropy must be exactly 128 bits (16 bytes).");
-  return zr(e, ln);
+  return to(e, vn);
 }
-function Jr(e) {
+function ao(e) {
   try {
-    return Br(pn(e), ln);
+    return no(_n(e), vn);
   } catch {
     return !1;
   }
 }
-function pn(e) {
+function _n(e) {
   return e.trim().normalize("NFKD").split(/\s+/u).join(" ");
 }
-async function vn(e) {
-  return Fr(pn(e), "");
+async function kn(e) {
+  return oo(_n(e), "");
 }
-const mt = tr.id, Ne = "aes-256-gcm-v1", Ie = "bitlogin-bip39-hkdf-v1";
-async function fn(e) {
-  const t = ze(e.loginName), n = e.now ?? Math.floor(Date.now() / 1e3), { locatorPrivateKey: r, capsuleKey: o } = await Ce(e.password, t), i = _(r), a = new C(e.vaultRelayUrls, { authPrivateKey: r });
-  let c;
+const xt = dr.id, Te = "aes-256-gcm-v1", Le = "bitlogin-bip39-hkdf-v1";
+async function En(e) {
+  const t = Je(e.loginName), n = e.now ?? Math.floor(Date.now() / 1e3), { locatorPrivateKey: r, capsuleKey: o } = await Se(e.password, t);
   try {
-    c = await Se(a, i, o, e.timeoutMs);
-  } finally {
-    a.closeAll();
-  }
-  if (!c.quorumMet)
-    throw new ye("Couldn't verify this login name and password aren't already registered. Please retry, or add more vault relays.");
-  if (c.candidates.length > 0)
-    throw new Ht();
-  const s = Hr(rr()), l = await vn(s), { recoveryPrivateKey: u, capsuleKey: y } = zt(l), v = _(u), w = e.everydayPrivateKey !== void 0;
-  if (w && !lt(e.everydayPrivateKey))
-    throw new ye("The provided key is not a valid secp256k1 private key.");
-  const g = w ? e.everydayPrivateKey : or(), f = _(g), p = H(ir()), h = xe(32), b = xe(32), m = {
-    schema: st,
-    account_id: p,
-    recovery_generation: 0,
-    previous_recovery_event_id: null,
-    operational_private_key: H(g),
-    operational_public_key: f,
-    recovery_public_key: v,
-    connection_vault_root: H(h),
-    vault_sudo_key: H(b),
-    created_at: n,
-    vault_relay_hints: e.vaultRelayUrls,
-    protocol: { capsule_encryption: Ne, recovery_derivation: Ie }
-  }, K = await an({
-    recoveryPrivateKey: u,
-    capsuleKey: y,
-    payload: m
-  }), F = {
-    schema: $e,
-    account_id: p,
-    generation: 0,
-    operational_private_key: H(g),
-    operational_public_key: f,
-    recovery_public_key: v,
-    recovery_capsule_event: K,
-    connection_vault_root: H(h),
-    vault_sudo_key: H(b),
-    created_at: n,
-    vault_relay_hints: e.vaultRelayUrls,
-    protocol: {
-      password_kdf: mt,
-      capsule_encryption: Ne,
-      recovery_derivation: Ie
+    const i = k(r), a = new C(e.vaultRelayUrls, {
+      authPrivateKey: r
+    });
+    let c;
+    try {
+      c = await Ie(a, i, o, e.timeoutMs);
+    } finally {
+      a.closeAll();
     }
-  }, E = await bt({
-    locatorPrivateKey: r,
-    capsuleKey: o,
-    payload: F
-  }), R = new C(e.vaultRelayUrls, { authPrivateKey: u }), A = await me(R, K, {
-    dTag: We,
-    minAcks: e.minAcknowledgements,
-    timeoutMs: e.timeoutMs
-  });
-  R.closeAll();
-  const x = new C(e.vaultRelayUrls, { authPrivateKey: r }), N = await me(x, E, {
-    dTag: ke,
-    minAcks: e.minAcknowledgements,
-    timeoutMs: e.timeoutMs
-  });
-  if (x.closeAll(), !A.success || !N.success)
-    throw new ye("Registration did not reach the required relay acknowledgement and readback quorum. Please retry, or add more vault relays.");
-  return {
-    normalizedLoginName: t,
-    recoveryPhrase: s,
-    everydayPrivateKey: g,
-    everydayPublicKey: f,
-    recoveryPublicKey: v,
-    locatorPublicKey: i,
-    accountId: p,
-    imported: w,
-    connectionVaultRoot: h,
-    vaultSudoKey: b,
-    credentialEvent: E,
-    recoveryEvent: K,
-    credentialPublish: N,
-    recoveryPublish: A
-  };
+    if (!c.quorumMet)
+      throw new le("Couldn't verify this login name and password aren't already registered. Please retry, or add more vault relays.");
+    if (c.candidates.length > 0)
+      throw new en();
+    const s = e.everydayPrivateKey !== void 0;
+    if (s && !ft(e.everydayPrivateKey))
+      throw new le("The provided key is not a valid secp256k1 private key.");
+    const l = io(hr()), u = await kn(l);
+    let y, v;
+    try {
+      ({ recoveryPrivateKey: y, capsuleKey: v } = Xt(u));
+    } finally {
+      x(u);
+    }
+    const w = s ? e.everydayPrivateKey : pr(), g = be(32), f = be(32);
+    let p = !1;
+    try {
+      const h = k(y), b = k(w), m = V(fr()), P = {
+        schema: pt,
+        account_id: m,
+        recovery_generation: 0,
+        previous_recovery_event_id: null,
+        operational_private_key: V(w),
+        operational_public_key: b,
+        recovery_public_key: h,
+        connection_vault_root: V(g),
+        vault_sudo_key: V(f),
+        created_at: n,
+        vault_relay_hints: e.vaultRelayUrls,
+        protocol: {
+          capsule_encryption: Te,
+          recovery_derivation: Le
+        }
+      }, N = await hn({
+        recoveryPrivateKey: y,
+        capsuleKey: v,
+        payload: P
+      }), K = new C(e.vaultRelayUrls, {
+        authPrivateKey: y
+      });
+      let R;
+      try {
+        R = await ke(K, N, {
+          dTag: He,
+          minAcks: e.minAcknowledgements,
+          timeoutMs: e.timeoutMs
+        });
+      } finally {
+        K.closeAll();
+      }
+      if (!R.success)
+        throw new le("The recovery capsule did not reach the required relay acknowledgement and readback quorum. No login credential was published. Please retry, or add more vault relays.");
+      const A = {
+        schema: Fe,
+        account_id: m,
+        generation: 0,
+        operational_private_key: V(w),
+        operational_public_key: b,
+        recovery_public_key: h,
+        recovery_capsule_event: N,
+        connection_vault_root: V(g),
+        created_at: n,
+        vault_relay_hints: e.vaultRelayUrls,
+        protocol: {
+          password_kdf: xt,
+          capsule_encryption: Te,
+          recovery_derivation: Le
+        }
+      }, S = await At({
+        locatorPrivateKey: r,
+        capsuleKey: o,
+        payload: A
+      }), L = new C(e.vaultRelayUrls, {
+        authPrivateKey: r
+      });
+      let I;
+      try {
+        I = await ke(L, S, {
+          dTag: Ee,
+          minAcks: e.minAcknowledgements,
+          timeoutMs: e.timeoutMs
+        });
+      } finally {
+        L.closeAll();
+      }
+      if (!I.success)
+        throw new le("Registration did not reach the required credential acknowledgement and readback quorum. Please retry, or add more vault relays.");
+      return p = !0, {
+        normalizedLoginName: t,
+        recoveryPhrase: l,
+        everydayPrivateKey: w,
+        everydayPublicKey: b,
+        recoveryPublicKey: h,
+        locatorPublicKey: i,
+        accountId: m,
+        imported: s,
+        connectionVaultRoot: g,
+        vaultSudoKey: f,
+        credentialEvent: S,
+        recoveryEvent: N,
+        credentialPublish: I,
+        recoveryPublish: R
+      };
+    } finally {
+      x(y, v), p || (s || x(w), x(g, f));
+    }
+  } finally {
+    x(r, o);
+  }
 }
-async function Yr(e) {
-  const { nsecOrHex: t, ...n } = e, r = gn(t);
-  return fn({ ...n, everydayPrivateKey: r });
+async function co(e) {
+  const { nsecOrHex: t, ...n } = e, r = Pn(t);
+  return En({ ...n, everydayPrivateKey: r });
 }
-function gn(e) {
+function Pn(e) {
   const t = e.trim();
   let n;
   if (t.startsWith("nsec1"))
-    n = nr(t);
+    n = yr(t);
   else if (/^[0-9a-fA-F]{64}$/u.test(t))
-    n = dt(t.toLowerCase());
+    n = bt(t.toLowerCase());
   else
-    throw new ye("Enter a valid nsec (nsec1…) or a 64-character hex private key.");
-  if (!lt(n))
-    throw new ye("The provided key is not a valid secp256k1 private key.");
+    throw new le("Enter a valid nsec (nsec1…) or a 64-character hex private key.");
+  if (!ft(n))
+    throw new le("The provided key is not a valid secp256k1 private key.");
   return n;
 }
-class wn {
+class Kn {
   map = /* @__PURE__ */ new Map();
   async get(t) {
     return this.map.get(t);
@@ -2806,30 +2869,33 @@ class wn {
     this.map.delete(t);
   }
 }
-async function Qr(e) {
-  const t = ze(e.loginName), { locatorPrivateKey: n, capsuleKey: r } = await Ce(e.password, t), o = _(n), i = new C(e.vaultRelayUrls, { authPrivateKey: n });
+async function so(e) {
+  const t = Je(e.loginName), { locatorPrivateKey: n, capsuleKey: r } = await Se(e.password, t), o = k(n), i = new C(e.vaultRelayUrls, {
+    authPrivateKey: n
+  });
   try {
-    const a = await Se(i, o, r, e.timeoutMs);
+    const a = await Ie(i, o, r, e.timeoutMs);
     if (!a.quorumMet)
-      throw new be("quorum-not-met");
+      throw new _e("quorum-not-met");
     if (!a.best)
-      throw new be(a.candidates.length > 0 ? "no-valid-candidate" : "no-matching-event");
-    const c = a.best.payload, s = e.store ?? new wn(), l = await vt(s, c.operational_public_key), u = c.generation < l.generation;
+      throw new _e(a.candidates.length > 0 ? "no-valid-candidate" : "no-matching-event");
+    const c = a.best.payload, s = e.store ?? new Kn(), l = await kt(s, c.operational_public_key), u = c.generation < l.generation;
     if (u && !e.acknowledgeRollback)
-      throw new Jt(l.generation, c.generation);
+      throw new tn(l.generation, c.generation);
     const y = u ? `This device previously saw credential generation ${l.generation}, but the accepted capsule is generation ${c.generation}. Relays may be serving stale data, or an old capsule is being replayed.` : void 0;
-    await Yt(s, c.operational_public_key, { generation: c.generation });
+    await nn(s, c.operational_public_key, {
+      generation: c.generation
+    });
     const v = a.relayDisagreement ? 'Configured relays returned different credential capsules as "latest" for this account. Some relays may be stale, censored, or malicious.' : void 0;
     return {
-      everydayPrivateKey: J(c.operational_private_key),
+      everydayPrivateKey: X(c.operational_private_key),
       everydayPublicKey: c.operational_public_key,
       recoveryPublicKey: c.recovery_public_key,
       accountId: c.account_id,
       generation: c.generation,
       credentialEvent: a.best.event,
       recoveryCapsuleEvent: c.recovery_capsule_event,
-      connectionVaultRoot: c.connection_vault_root ? J(c.connection_vault_root) : void 0,
-      vaultSudoKey: c.vault_sudo_key ? J(c.vault_sudo_key) : void 0,
+      connectionVaultRoot: c.connection_vault_root ? X(c.connection_vault_root) : void 0,
       rollbackWarning: y,
       relayDisagreementWarning: v
     };
@@ -2837,47 +2903,63 @@ async function Qr(e) {
     i.closeAll();
   }
 }
-function St(e) {
-  return e.filter((t) => ie(t)).sort((t, n) => n.created_at - t.created_at)[0];
+function Vt(e) {
+  return e.filter((t) => ae(t)).sort((t, n) => n.created_at - t.created_at)[0];
 }
-async function Xr(e) {
-  if (!Jr(e.phrase))
-    throw new Me("This does not look like a valid 12-word BitLogin recovery phrase.");
-  const t = await vn(e.phrase), { recoveryPrivateKey: n, capsuleKey: r } = zt(t);
-  ge(t);
-  const o = _(n), i = new C(e.vaultRelayUrls, { authPrivateKey: n });
+async function lo(e) {
+  if (!ao(e.phrase))
+    throw new Ne("This does not look like a valid 12-word BitLogin recovery phrase.");
+  const t = await kn(e.phrase), { recoveryPrivateKey: n, capsuleKey: r } = Xt(t);
+  x(t);
+  const o = k(n), i = new C(e.vaultRelayUrls, {
+    authPrivateKey: n
+  });
   let a;
   try {
-    a = await Ur(i, o, r, e.timeoutMs);
+    a = await Gr(i, o, r, e.timeoutMs);
   } finally {
     i.closeAll();
   }
   if (e.offlineRecoveryCapsuleEvents?.length) {
     const f = [];
     for (const m of e.offlineRecoveryCapsuleEvents)
-      if (ie(m))
+      if (ae(m))
         try {
-          f.push({ event: m, payload: await cn(m, r) });
-        } catch (K) {
-          f.push({ event: m, payload: null, error: K.message });
+          f.push({
+            event: m,
+            payload: await pn(m, r)
+          });
+        } catch (P) {
+          f.push({
+            event: m,
+            payload: null,
+            error: P.message
+          });
         }
     const p = /* @__PURE__ */ new Map();
     for (const m of [...a.candidates, ...f])
       p.set(m.event.id, m);
-    const h = [...p.values()].sort((m, K) => K.event.created_at - m.event.created_at), b = h.find((m) => m.payload !== null) ?? null;
-    a = { ...a, candidates: h, best: b, quorumMet: a.quorumMet || b !== null };
+    const h = [...p.values()].sort((m, P) => P.event.created_at - m.event.created_at), b = h.find((m) => m.payload !== null) ?? null;
+    a = {
+      ...a,
+      candidates: h,
+      best: b,
+      quorumMet: a.quorumMet || b !== null
+    };
   }
   if (!a.quorumMet)
-    throw new be("quorum-not-met");
+    throw new _e("quorum-not-met");
   if (!a.best)
-    throw new be(a.candidates.length > 0 ? "no-valid-candidate" : "no-matching-event");
-  const c = a.best.payload, s = Or(a.candidates), l = J(c.operational_private_key), u = c.operational_public_key, y = [.../* @__PURE__ */ new Set([...e.discoveryRelayUrls, ...c.vault_relay_hints])], v = new C(y);
+    throw new _e(a.candidates.length > 0 ? "no-valid-candidate" : "no-matching-event");
+  const c = a.best.payload, s = Fr(a.candidates), l = X(c.operational_private_key), u = c.operational_public_key, y = [
+    .../* @__PURE__ */ new Set([...e.discoveryRelayUrls, ...c.vault_relay_hints])
+  ], v = new C(y);
   let w = [], g = [];
   try {
-    const f = await v.queryQuorum({ kinds: [it], authors: [u], limit: 5 }, e.timeoutMs), p = St(f.outcomes.flatMap((m) => m.events));
-    p && (w = wr(p));
-    const h = await v.queryQuorum({ kinds: [at], authors: [u], limit: 5 }, e.timeoutMs), b = St(h.outcomes.flatMap((m) => m.events));
-    b && (g = br(b));
+    const f = await v.queryQuorum({ kinds: [yt], authors: [u], limit: 5 }, e.timeoutMs), p = Vt(f.outcomes.flatMap((m) => m.events));
+    p && (w = Nr(p));
+    const h = await v.queryQuorum({ kinds: [ht], authors: [u], limit: 5 }, e.timeoutMs), b = Vt(h.outcomes.flatMap((m) => m.events));
+    b && (g = Sr(b));
   } finally {
     v.closeAll();
   }
@@ -2895,77 +2977,121 @@ async function Xr(e) {
     chainWarning: s.consistent ? void 0 : s.warning
   };
 }
-async function Zr(e) {
-  const t = e.now ?? Math.floor(Date.now() / 1e3), n = ze(e.newLoginName), { recovered: r } = e, o = r.currentRecoveryPayload.connection_vault_root !== void 0 ? {
+async function uo(e) {
+  const t = e.now ?? Math.floor(Date.now() / 1e3), n = Je(e.newLoginName), { recovered: r } = e, o = r.currentRecoveryPayload.connection_vault_root !== void 0 ? {
     connection_vault_root: r.currentRecoveryPayload.connection_vault_root,
     vault_sudo_key: r.currentRecoveryPayload.vault_sudo_key
-  } : {}, i = {
-    schema: st,
-    account_id: r.accountId,
-    recovery_generation: r.currentRecoveryPayload.recovery_generation + 1,
-    previous_recovery_event_id: r.currentRecoveryEvent.id,
-    operational_private_key: H(r.everydayPrivateKey),
-    operational_public_key: r.everydayPublicKey,
-    recovery_public_key: r.recoveryPublicKey,
-    ...o,
-    created_at: ht(r.currentRecoveryEvent.created_at, t),
-    vault_relay_hints: e.vaultRelayUrls,
-    protocol: { capsule_encryption: Ne, recovery_derivation: Ie }
-  }, a = await an({
-    recoveryPrivateKey: r.recoveryPrivateKey,
-    capsuleKey: r.recoveryCapsuleKey,
-    payload: i
-  }), c = new C(e.vaultRelayUrls, { authPrivateKey: r.recoveryPrivateKey }), s = await me(c, a, {
-    dTag: We,
-    minAcks: e.minAcknowledgements,
-    timeoutMs: e.timeoutMs
-  });
-  c.closeAll();
-  const { locatorPrivateKey: l, capsuleKey: u } = await Ce(e.newPassword, n), y = _(l), v = new C(e.vaultRelayUrls, { authPrivateKey: l });
-  let w;
+  } : {}, i = r.currentRecoveryPayload.connection_vault_root !== void 0 ? {
+    connection_vault_root: r.currentRecoveryPayload.connection_vault_root
+  } : {}, { locatorPrivateKey: a, capsuleKey: c } = await Se(e.newPassword, n);
   try {
-    w = await Se(v, y, u, e.timeoutMs);
-  } finally {
-    v.closeAll();
-  }
-  if (!w.quorumMet)
-    throw new Me("Couldn't verify the new login name and password aren't already registered. Please retry, or add more vault relays.");
-  if (w.candidates.length > 0)
-    throw new Me("Another account is already registered with that login name and password. Pick a different one.");
-  const g = {
-    schema: $e,
-    account_id: r.accountId,
-    generation: 0,
-    operational_private_key: H(r.everydayPrivateKey),
-    operational_public_key: r.everydayPublicKey,
-    recovery_public_key: r.recoveryPublicKey,
-    recovery_capsule_event: a,
-    ...o,
-    created_at: t,
-    vault_relay_hints: e.vaultRelayUrls,
-    protocol: {
-      password_kdf: mt,
-      capsule_encryption: Ne,
-      recovery_derivation: Ie
+    const s = k(a), l = new C(e.vaultRelayUrls, {
+      authPrivateKey: a
+    });
+    let u;
+    try {
+      u = await Ie(l, s, c, e.timeoutMs);
+    } finally {
+      l.closeAll();
     }
-  }, f = await bt({ locatorPrivateKey: l, capsuleKey: u, payload: g }), p = new C(e.vaultRelayUrls, { authPrivateKey: l }), h = await me(p, f, {
-    dTag: ke,
-    minAcks: e.minAcknowledgements,
-    timeoutMs: e.timeoutMs
-  });
-  if (p.closeAll(), !s.success || !h.success)
-    throw new Me("Could not publish the refreshed recovery and credential capsules to enough relays. Please retry.");
-  return e.store && await yr(e.store, r.everydayPublicKey, {
-    generation: 0,
-    recoveryGeneration: r.currentRecoveryPayload.recovery_generation + 1
-  }), { normalizedLoginName: n, locatorPublicKey: y, credentialEvent: f, refreshedRecoveryEvent: a, credentialPublish: h, recoveryPublish: s };
+    if (!u.quorumMet)
+      throw new Ne("Couldn't verify the new login name and password aren't already registered. Please retry, or add more vault relays.");
+    const y = u.best?.payload ?? null, v = y !== null && y.account_id === r.accountId && y.operational_public_key === r.everydayPublicKey && y.recovery_public_key === r.recoveryPublicKey && y.generation === 0 && y.recovery_capsule_event.id === r.currentRecoveryEvent.id;
+    if (u.candidates.length > 0 && !v)
+      throw new Ne("Another account is already registered with that login name and password. Pick a different one.");
+    const w = r.currentRecoveryPayload.recovery_generation + 1, g = {
+      schema: pt,
+      account_id: r.accountId,
+      recovery_generation: w,
+      previous_recovery_event_id: r.currentRecoveryEvent.id,
+      operational_private_key: V(r.everydayPrivateKey),
+      operational_public_key: r.everydayPublicKey,
+      recovery_public_key: r.recoveryPublicKey,
+      ...o,
+      created_at: We(r.currentRecoveryEvent.created_at, t),
+      vault_relay_hints: e.vaultRelayUrls,
+      protocol: {
+        capsule_encryption: Te,
+        recovery_derivation: Le
+      }
+    }, f = await hn({
+      recoveryPrivateKey: r.recoveryPrivateKey,
+      capsuleKey: r.recoveryCapsuleKey,
+      payload: g
+    }), p = new C(e.vaultRelayUrls, {
+      authPrivateKey: r.recoveryPrivateKey
+    });
+    let h;
+    try {
+      h = await ke(p, f, {
+        dTag: He,
+        minAcks: e.minAcknowledgements,
+        timeoutMs: e.timeoutMs
+      });
+    } finally {
+      p.closeAll();
+    }
+    if (!h.success)
+      throw new Ne("Could not publish the refreshed recovery capsule to enough relays. No new credential was published; please retry.");
+    r.currentRecoveryEvent = f, r.currentRecoveryPayload = g;
+    const b = {
+      schema: Fe,
+      account_id: r.accountId,
+      generation: 0,
+      operational_private_key: V(r.everydayPrivateKey),
+      operational_public_key: r.everydayPublicKey,
+      recovery_public_key: r.recoveryPublicKey,
+      recovery_capsule_event: f,
+      ...i,
+      // A retry may be repairing a credential that reached only one relay.
+      // It must replace that partial event deterministically on every relay.
+      created_at: u.best ? We(u.best.event.created_at, t) : t,
+      vault_relay_hints: e.vaultRelayUrls,
+      protocol: {
+        password_kdf: xt,
+        capsule_encryption: Te,
+        recovery_derivation: Le
+      }
+    }, m = await At({
+      locatorPrivateKey: a,
+      capsuleKey: c,
+      payload: b
+    }), P = new C(e.vaultRelayUrls, {
+      authPrivateKey: a
+    });
+    let N;
+    try {
+      N = await ke(P, m, {
+        dTag: Ee,
+        minAcks: e.minAcknowledgements,
+        timeoutMs: e.timeoutMs
+      });
+    } finally {
+      P.closeAll();
+    }
+    if (!N.success)
+      throw new Ne("Could not publish the new credential capsule to enough relays. Please retry.");
+    return e.store && await kr(e.store, r.everydayPublicKey, {
+      generation: 0,
+      recoveryGeneration: w
+    }), {
+      normalizedLoginName: n,
+      locatorPublicKey: s,
+      credentialEvent: m,
+      refreshedRecoveryEvent: f,
+      credentialPublish: N,
+      recoveryPublish: h
+    };
+  } finally {
+    x(a, c);
+  }
 }
-function bn(e) {
-  const t = _(e.privateKey);
-  return ee({
+function Rn(e) {
+  const t = k(e.privateKey);
+  return ne({
     pubkey: t,
     created_at: e.createdAt,
-    kind: ar,
+    kind: vr,
     tags: [
       ["e", e.eventIdToDelete],
       ["k", String(e.deletedEventKind)]
@@ -2973,75 +3099,85 @@ function bn(e) {
     content: e.reason ?? ""
   }, e.privateKey);
 }
-async function eo(e) {
-  const t = e.now ?? Math.floor(Date.now() / 1e3), n = ze(e.loginName), r = await Ce(e.oldPassword, n), o = _(r.locatorPrivateKey), i = new C(e.vaultRelayUrls, { authPrivateKey: r.locatorPrivateKey });
+async function yo(e) {
+  const t = e.now ?? Math.floor(Date.now() / 1e3), n = Je(e.loginName), r = await Se(e.oldPassword, n), o = k(r.locatorPrivateKey), i = new C(e.vaultRelayUrls, {
+    authPrivateKey: r.locatorPrivateKey
+  });
   let a;
   try {
-    a = await Se(i, o, r.capsuleKey, e.timeoutMs);
+    a = await Ie(i, o, r.capsuleKey, e.timeoutMs);
   } finally {
     i.closeAll();
   }
   if (!a.quorumMet)
-    throw new be("quorum-not-met");
+    throw new _e("quorum-not-met");
   if (!a.best)
-    throw new be(a.candidates.length > 0 ? "no-valid-candidate" : "no-matching-event");
-  const c = a.best.payload, s = a.best.event, l = e.store ?? new wn(), u = await vt(l, c.operational_public_key);
+    throw new _e(a.candidates.length > 0 ? "no-valid-candidate" : "no-matching-event");
+  const c = a.best.payload, s = a.best.event, l = e.store ?? new Kn(), u = await kt(l, c.operational_public_key);
   if (c.generation < u.generation && !e.acknowledgeRollback)
-    throw new Jt(u.generation, c.generation);
-  const y = await Ce(e.newPassword, n), v = _(y.locatorPrivateKey), w = new C(e.vaultRelayUrls, { authPrivateKey: y.locatorPrivateKey });
+    throw new tn(u.generation, c.generation);
+  const y = await Se(e.newPassword, n), v = k(y.locatorPrivateKey), w = new C(e.vaultRelayUrls, {
+    authPrivateKey: y.locatorPrivateKey
+  });
   let g;
   try {
-    g = await Se(w, v, y.capsuleKey, e.timeoutMs);
+    g = await Ie(w, v, y.capsuleKey, e.timeoutMs);
   } finally {
     w.closeAll();
   }
   if (!g.quorumMet)
-    throw new ye("Couldn't verify the new password isn't already registered under this login name. Please retry, or add more vault relays.");
+    throw new le("Couldn't verify the new password isn't already registered under this login name. Please retry, or add more vault relays.");
   if (g.candidates.length > 0)
-    throw new Ht("Another account is already registered with this login name and the new password you chose. Pick a different new password.");
+    throw new en("Another account is already registered with this login name and the new password you chose. Pick a different new password.");
   const f = c.generation + 1, p = {
-    schema: $e,
+    schema: Fe,
     account_id: c.account_id,
     generation: f,
     operational_private_key: c.operational_private_key,
     operational_public_key: c.operational_public_key,
     recovery_public_key: c.recovery_public_key,
     recovery_capsule_event: c.recovery_capsule_event,
-    // Carried forward like every other long-lived field (§CV5.2): dropping
-    // the vault roots on a password change would strand every connection
-    // record until the next phrase ceremony.
-    ...c.connection_vault_root !== void 0 ? { connection_vault_root: c.connection_vault_root, vault_sudo_key: c.vault_sudo_key } : {},
+    // Carry only the session root. A legacy credential may contain the sudo
+    // key, but rotation deliberately scrubs it; personal-tier access remains
+    // phrase-gated through the recovery capsule.
+    ...c.connection_vault_root !== void 0 ? { connection_vault_root: c.connection_vault_root } : {},
     created_at: t,
     vault_relay_hints: e.vaultRelayUrls,
     protocol: {
-      password_kdf: mt,
-      capsule_encryption: Ne,
-      recovery_derivation: Ie
+      password_kdf: xt,
+      capsule_encryption: Te,
+      recovery_derivation: Le
     }
-  }, h = await bt({
+  }, h = await At({
     locatorPrivateKey: y.locatorPrivateKey,
     capsuleKey: y.capsuleKey,
     payload: p
-  }), b = new C(e.vaultRelayUrls, { authPrivateKey: y.locatorPrivateKey }), m = await me(b, h, {
-    dTag: ke,
+  }), b = new C(e.vaultRelayUrls, {
+    authPrivateKey: y.locatorPrivateKey
+  }), m = await ke(b, h, {
+    dTag: Ee,
     minAcks: e.minAcknowledgements,
     timeoutMs: e.timeoutMs
   });
   if (b.closeAll(), !m.success)
-    throw new ye("The new credential capsule did not reach the required relay acknowledgement and readback quorum. Your existing password still works; nothing was changed. Please retry.");
-  const K = Tr({
+    throw new le("The new credential capsule did not reach the required relay acknowledgement and readback quorum. Your existing password still works; nothing was changed. Please retry.");
+  const P = zr({
     oldLocatorPrivateKey: r.locatorPrivateKey,
-    createdAt: ht(s.created_at, t)
-  }), F = bn({
+    createdAt: We(s.created_at, t)
+  }), N = Rn({
     privateKey: r.locatorPrivateKey,
     eventIdToDelete: s.id,
-    deletedEventKind: te,
+    deletedEventKind: re,
     createdAt: t
-  }), E = new C(e.vaultRelayUrls, { authPrivateKey: r.locatorPrivateKey }), [R, A] = await Promise.all([
-    E.publishAll(K, e.timeoutMs),
-    E.publishAll(F, e.timeoutMs)
+  }), K = new C(e.vaultRelayUrls, {
+    authPrivateKey: r.locatorPrivateKey
+  }), [R, A] = await Promise.all([
+    K.publishAll(P, e.timeoutMs),
+    K.publishAll(N, e.timeoutMs)
   ]);
-  return E.closeAll(), await Yt(l, c.operational_public_key, { generation: f }), {
+  return K.closeAll(), await nn(l, c.operational_public_key, {
+    generation: f
+  }), {
     normalizedLoginName: n,
     oldLocatorPublicKey: o,
     newLocatorPublicKey: v,
@@ -3049,74 +3185,124 @@ async function eo(e) {
     recoveryPublicKey: c.recovery_public_key,
     recoveryCapsuleEvent: c.recovery_capsule_event,
     newCredentialEvent: h,
-    tombstoneEvent: K,
-    deletionRequestEvent: F,
+    tombstoneEvent: P,
+    deletionRequestEvent: N,
     newCredentialPublish: m,
-    tombstoneAcknowledgedCount: se(R),
-    deletionAcknowledgedCount: se(A)
+    tombstoneAcknowledgedCount: ye(R),
+    deletionAcknowledgedCount: ye(A)
   };
 }
+const ho = "bitlogin/connection-vault-root/v1", po = "bitlogin/connection-vault-signing/v1", fo = "bitlogin/connection-record-encryption/v1", vo = "bitlogin/connection-vault-personal/v1", at = "bitlogin:connection:";
+function go(e) {
+  if (e.length !== 32)
+    throw new Error("connection_vault_root must be exactly 32 bytes.");
+  return mt(Qt(ho), e);
+}
+function Ke(e) {
+  return gr(e, po).scalar;
+}
+function An(e) {
+  const t = Ke(e);
+  try {
+    return k(t);
+  } finally {
+    x(t);
+  }
+}
+function wo(e, t) {
+  if (t.length !== 32)
+    throw new Error("vault_sudo_key must be exactly 32 bytes.");
+  if (e.length !== 32)
+    throw new Error("connection_vault_root must be exactly 32 bytes.");
+  return mt(Qt(vo), Pe(e, t));
+}
+function xn(e, t) {
+  const n = Xe(t);
+  return Me(e, Pe(Y(fo), new Uint8Array([0]), n), 32);
+}
+function bo() {
+  return V(be(16));
+}
+function Xe(e) {
+  const t = X(e);
+  if (t.length !== 16)
+    throw new Error("connection_id must decode to exactly 16 bytes (§CV7).");
+  return t;
+}
+function Cn(e) {
+  return Xe(e), `${at}${e}`;
+}
+function Nn(e) {
+  if (!e.startsWith(at))
+    return null;
+  const t = e.slice(at.length);
+  try {
+    return Xe(t), t;
+  } catch {
+    return null;
+  }
+}
 /*! noble-ciphers - MIT License (c) 2023 Paul Miller (paulmillr.com) */
-function to(e) {
+function mo(e) {
   return e instanceof Uint8Array || ArrayBuffer.isView(e) && e.constructor.name === "Uint8Array" && "BYTES_PER_ELEMENT" in e && e.BYTES_PER_ELEMENT === 1;
 }
-function Nt(e) {
+function qt(e) {
   if (typeof e != "boolean")
     throw new TypeError(`boolean expected, not ${e}`);
 }
-function Fe(e) {
+function Ze(e) {
   if (typeof e != "number")
     throw new TypeError("number expected, got " + typeof e);
   if (!Number.isSafeInteger(e) || e < 0)
     throw new RangeError("positive integer expected, got " + e);
 }
-function T(e, t, n = "") {
-  const r = to(e), o = e?.length, i = t !== void 0;
+function M(e, t, n = "") {
+  const r = mo(e), o = e?.length, i = t !== void 0;
   if (!r || i && o !== t) {
     const a = n && `"${n}" `, c = i ? ` of length ${t}` : "", s = r ? `length=${o}` : `type=${typeof e}`, l = a + "expected Uint8Array" + c + ", got " + s;
     throw r ? new RangeError(l) : new TypeError(l);
   }
   return e;
 }
-function S(e) {
+function T(e) {
   return new Uint32Array(e.buffer, e.byteOffset, Math.floor(e.byteLength / 4));
 }
-function pe(...e) {
+function ve(...e) {
   for (let t = 0; t < e.length; t++)
     e[t].fill(0);
 }
-const Y = new Uint8Array(new Uint32Array([287454020]).buffer)[0] === 68, no = (e) => e << 24 & 4278190080 | e << 8 & 16711680 | e >>> 8 & 65280 | e >>> 24 & 255, ro = (e) => {
+const Q = new Uint8Array(new Uint32Array([287454020]).buffer)[0] === 68, _o = (e) => e << 24 & 4278190080 | e << 8 & 16711680 | e >>> 8 & 65280 | e >>> 24 & 255, ko = (e) => {
   for (let t = 0; t < e.length; t++)
-    e[t] = no(e[t]);
+    e[t] = _o(e[t]);
   return e;
-}, L = Y ? (e) => e : ro;
-function oo(e, t) {
+}, U = Q ? (e) => e : ko;
+function Eo(e, t) {
   return !e.byteLength || !t.byteLength ? !1 : e.buffer === t.buffer && // best we can do, may fail with an obscure Proxy
   e.byteOffset < t.byteOffset + t.byteLength && // a starts before b end
   t.byteOffset < e.byteOffset + e.byteLength;
 }
-function mn(e, t) {
-  if (oo(e, t) && e.byteOffset < t.byteOffset)
+function Sn(e, t) {
+  if (Eo(e, t) && e.byteOffset < t.byteOffset)
     throw new Error("complex overlap of input and output is not supported");
 }
-function io(e, t) {
+function Po(e, t) {
   if (t == null || typeof t != "object")
     throw new Error("options must be defined");
   return Object.assign(e, t);
 }
-const ao = /* @__NO_SIDE_EFFECTS__ */ (e, t) => {
+const Ko = /* @__NO_SIDE_EFFECTS__ */ (e, t) => {
   function n(r, ...o) {
-    if (T(r, void 0, "key"), e.nonceLength !== void 0) {
+    if (M(r, void 0, "key"), e.nonceLength !== void 0) {
       const u = o[0];
-      T(u, e.varSizeNonce ? void 0 : e.nonceLength, "nonce");
+      M(u, e.varSizeNonce ? void 0 : e.nonceLength, "nonce");
     }
     const i = e.tagLength;
-    i && o[1] !== void 0 && T(o[1], void 0, "AAD");
+    i && o[1] !== void 0 && M(o[1], void 0, "AAD");
     const a = t(r, ...o), c = (u, y) => {
       if (y !== void 0) {
         if (u !== 2)
           throw new Error("cipher output not supported");
-        T(y, void 0, "output");
+        M(y, void 0, "output");
       }
     };
     let s = !1;
@@ -3124,10 +3310,10 @@ const ao = /* @__NO_SIDE_EFFECTS__ */ (e, t) => {
       encrypt(u, y) {
         if (s)
           throw new Error("cannot encrypt() twice with same key + nonce");
-        return s = !0, T(u), c(a.encrypt.length, y), a.encrypt(u, y);
+        return s = !0, M(u), c(a.encrypt.length, y), a.encrypt(u, y);
       },
       decrypt(u, y) {
-        if (T(u), i && u.length < i)
+        if (M(u), i && u.length < i)
           throw new Error('"ciphertext" expected length bigger than tagLength=' + i);
         return c(a.decrypt.length, y), a.decrypt(u, y);
       }
@@ -3135,33 +3321,33 @@ const ao = /* @__NO_SIDE_EFFECTS__ */ (e, t) => {
   }
   return Object.assign(n, e), n;
 };
-function kt(e, t, n = !0) {
+function Ct(e, t, n = !0) {
   if (t === void 0)
     return new Uint8Array(e);
-  if (T(t, void 0, "output"), t.length !== e)
+  if (M(t, void 0, "output"), t.length !== e)
     throw new Error('"output" expected Uint8Array of length ' + e + ", got: " + t.length);
-  if (n && !oe(t))
+  if (n && !ie(t))
     throw new Error("invalid output, must be aligned");
   return t;
 }
-function oe(e) {
+function ie(e) {
   return e.byteOffset % 4 === 0;
 }
-function he(e) {
-  return Uint8Array.from(T(e));
+function fe(e) {
+  return Uint8Array.from(M(e));
 }
-const kn = (e) => Uint8Array.from(e.split(""), (t) => t.charCodeAt(0)), co = L(S(kn("expand 16-byte k"))), so = L(S(kn("expand 32-byte k")));
-function k(e, t) {
+const In = (e) => Uint8Array.from(e.split(""), (t) => t.charCodeAt(0)), Ro = U(T(In("expand 16-byte k"))), Ao = U(T(In("expand 32-byte k")));
+function _(e, t) {
   return e << t | e >>> 32 - t;
 }
-const Pe = 64, lo = 16, Ze = 2 ** 32 - 1, It = /* @__PURE__ */ Uint32Array.of();
-function uo(e, t, n, r, o, i, a, c) {
-  const s = o.length, l = new Uint8Array(Pe), u = S(l), y = Y && oe(o) && oe(i), v = y ? S(o) : It, w = y ? S(i) : It;
-  if (!Y) {
+const Re = 64, xo = 16, ct = 2 ** 32 - 1, jt = /* @__PURE__ */ Uint32Array.of();
+function Co(e, t, n, r, o, i, a, c) {
+  const s = o.length, l = new Uint8Array(Re), u = T(l), y = Q && ie(o) && ie(i), v = y ? T(o) : jt, w = y ? T(i) : jt;
+  if (!Q) {
     for (let g = 0; g < s; a++) {
-      if (e(t, n, r, u, a, c), L(u), a >= Ze)
+      if (e(t, n, r, u, a, c), U(u), a >= ct)
         throw new Error("arx: counter overflow");
-      const f = Math.min(Pe, s - g);
+      const f = Math.min(Re, s - g);
       for (let p = 0, h; p < f; p++)
         h = g + p, i[h] = o[h] ^ l[p];
       g += f;
@@ -3169,16 +3355,16 @@ function uo(e, t, n, r, o, i, a, c) {
     return;
   }
   for (let g = 0; g < s; a++) {
-    if (e(t, n, r, u, a, c), a >= Ze)
+    if (e(t, n, r, u, a, c), a >= ct)
       throw new Error("arx: counter overflow");
-    const f = Math.min(Pe, s - g);
-    if (y && f === Pe) {
+    const f = Math.min(Re, s - g);
+    if (y && f === Re) {
       const p = g / 4;
       if (g % 4 !== 0)
         throw new Error("arx: invalid block position");
-      for (let h = 0, b; h < lo; h++)
+      for (let h = 0, b; h < xo; h++)
         b = p + h, w[b] = v[b] ^ u[h];
-      g += Pe;
+      g += Re;
       continue;
     }
     for (let p = 0, h; p < f; p++)
@@ -3186,143 +3372,162 @@ function uo(e, t, n, r, o, i, a, c) {
     g += f;
   }
 }
-function yo(e, t) {
-  const { allowShortKeys: n, extendNonceFn: r, counterLength: o, counterRight: i, rounds: a } = io({ allowShortKeys: !1, counterLength: 8, counterRight: !1, rounds: 20 }, t);
+function No(e, t) {
+  const { allowShortKeys: n, extendNonceFn: r, counterLength: o, counterRight: i, rounds: a } = Po({ allowShortKeys: !1, counterLength: 8, counterRight: !1, rounds: 20 }, t);
   if (typeof e != "function")
     throw new Error("core must be a function");
-  return Fe(o), Fe(a), Nt(i), Nt(n), (c, s, l, u, y = 0) => {
-    T(c, void 0, "key"), T(s, void 0, "nonce"), T(l, void 0, "data");
+  return Ze(o), Ze(a), qt(i), qt(n), (c, s, l, u, y = 0) => {
+    M(c, void 0, "key"), M(s, void 0, "nonce"), M(l, void 0, "data");
     const v = l.length;
-    if (u = kt(v, u, !1), Fe(y), y < 0 || y >= Ze)
+    if (u = Ct(v, u, !1), Ze(y), y < 0 || y >= ct)
       throw new Error("arx: counter overflow");
     const w = [];
     let g = c.length, f, p;
     if (g === 32)
-      w.push(f = he(c)), p = so;
+      w.push(f = fe(c)), p = Ao;
     else if (g === 16 && n)
-      f = new Uint8Array(32), f.set(c), f.set(c, 16), p = co, w.push(f);
+      f = new Uint8Array(32), f.set(c), f.set(c, 16), p = Ro, w.push(f);
     else
-      throw T(c, 32, "arx key"), new Error("invalid key size");
-    (!Y || !oe(s)) && w.push(s = he(s));
-    let h = S(f);
+      throw M(c, 32, "arx key"), new Error("invalid key size");
+    (!Q || !ie(s)) && w.push(s = fe(s));
+    let h = T(f);
     if (r) {
       if (s.length !== 24)
         throw new Error("arx: extended nonce must be 24 bytes");
-      const K = s.subarray(0, 16);
-      if (Y)
-        r(p, h, S(K), h);
+      const P = s.subarray(0, 16);
+      if (Q)
+        r(p, h, T(P), h);
       else {
-        const F = L(Uint32Array.from(p));
-        r(F, h, S(K), h), pe(F), L(h);
+        const N = U(Uint32Array.from(p));
+        r(N, h, T(P), h), ve(N), U(h);
       }
       s = s.subarray(16);
-    } else Y || L(h);
+    } else Q || U(h);
     const b = 16 - o;
     if (b !== s.length)
       throw new Error(`arx: nonce must be ${b} or 16 bytes`);
     if (b !== 12) {
-      const K = new Uint8Array(12);
-      K.set(s, i ? 0 : 12 - s.length), s = K, w.push(s);
+      const P = new Uint8Array(12);
+      P.set(s, i ? 0 : 12 - s.length), s = P, w.push(s);
     }
-    const m = L(S(s));
+    const m = U(T(s));
     try {
-      return uo(e, p, h, m, l, u, y, a), u;
+      return Co(e, p, h, m, l, u, y, a), u;
     } finally {
-      pe(...w);
+      ve(...w);
     }
   };
 }
-function ho(e, t, n, r, o, i = 20) {
-  let a = e[0], c = e[1], s = e[2], l = e[3], u = t[0], y = t[1], v = t[2], w = t[3], g = t[4], f = t[5], p = t[6], h = t[7], b = o, m = n[0], K = n[1], F = n[2], E = a, R = c, A = s, x = l, N = u, O = y, M = v, D = w, V = g, q = f, j = p, $ = h, W = b, z = m, B = K, G = F;
-  for (let Rt = 0; Rt < i; Rt += 2)
-    E = E + N | 0, W = k(W ^ E, 16), V = V + W | 0, N = k(N ^ V, 12), E = E + N | 0, W = k(W ^ E, 8), V = V + W | 0, N = k(N ^ V, 7), R = R + O | 0, z = k(z ^ R, 16), q = q + z | 0, O = k(O ^ q, 12), R = R + O | 0, z = k(z ^ R, 8), q = q + z | 0, O = k(O ^ q, 7), A = A + M | 0, B = k(B ^ A, 16), j = j + B | 0, M = k(M ^ j, 12), A = A + M | 0, B = k(B ^ A, 8), j = j + B | 0, M = k(M ^ j, 7), x = x + D | 0, G = k(G ^ x, 16), $ = $ + G | 0, D = k(D ^ $, 12), x = x + D | 0, G = k(G ^ x, 8), $ = $ + G | 0, D = k(D ^ $, 7), E = E + O | 0, G = k(G ^ E, 16), j = j + G | 0, O = k(O ^ j, 12), E = E + O | 0, G = k(G ^ E, 8), j = j + G | 0, O = k(O ^ j, 7), R = R + M | 0, W = k(W ^ R, 16), $ = $ + W | 0, M = k(M ^ $, 12), R = R + M | 0, W = k(W ^ R, 8), $ = $ + W | 0, M = k(M ^ $, 7), A = A + D | 0, z = k(z ^ A, 16), V = V + z | 0, D = k(D ^ V, 12), A = A + D | 0, z = k(z ^ A, 8), V = V + z | 0, D = k(D ^ V, 7), x = x + N | 0, B = k(B ^ x, 16), q = q + B | 0, N = k(N ^ q, 12), x = x + N | 0, B = k(B ^ x, 8), q = q + B | 0, N = k(N ^ q, 7);
-  let I = 0;
-  r[I++] = a + E | 0, r[I++] = c + R | 0, r[I++] = s + A | 0, r[I++] = l + x | 0, r[I++] = u + N | 0, r[I++] = y + O | 0, r[I++] = v + M | 0, r[I++] = w + D | 0, r[I++] = g + V | 0, r[I++] = f + q | 0, r[I++] = p + j | 0, r[I++] = h + $ | 0, r[I++] = b + W | 0, r[I++] = m + z | 0, r[I++] = K + B | 0, r[I++] = F + G | 0;
+function So(e, t, n, r, o, i = 20) {
+  let a = e[0], c = e[1], s = e[2], l = e[3], u = t[0], y = t[1], v = t[2], w = t[3], g = t[4], f = t[5], p = t[6], h = t[7], b = o, m = n[0], P = n[1], N = n[2], K = a, R = c, A = s, S = l, L = u, I = y, q = v, j = w, W = g, $ = f, z = p, B = h, G = b, F = m, H = P, J = N;
+  for (let Ot = 0; Ot < i; Ot += 2)
+    K = K + L | 0, G = _(G ^ K, 16), W = W + G | 0, L = _(L ^ W, 12), K = K + L | 0, G = _(G ^ K, 8), W = W + G | 0, L = _(L ^ W, 7), R = R + I | 0, F = _(F ^ R, 16), $ = $ + F | 0, I = _(I ^ $, 12), R = R + I | 0, F = _(F ^ R, 8), $ = $ + F | 0, I = _(I ^ $, 7), A = A + q | 0, H = _(H ^ A, 16), z = z + H | 0, q = _(q ^ z, 12), A = A + q | 0, H = _(H ^ A, 8), z = z + H | 0, q = _(q ^ z, 7), S = S + j | 0, J = _(J ^ S, 16), B = B + J | 0, j = _(j ^ B, 12), S = S + j | 0, J = _(J ^ S, 8), B = B + J | 0, j = _(j ^ B, 7), K = K + I | 0, J = _(J ^ K, 16), z = z + J | 0, I = _(I ^ z, 12), K = K + I | 0, J = _(J ^ K, 8), z = z + J | 0, I = _(I ^ z, 7), R = R + q | 0, G = _(G ^ R, 16), B = B + G | 0, q = _(q ^ B, 12), R = R + q | 0, G = _(G ^ R, 8), B = B + G | 0, q = _(q ^ B, 7), A = A + j | 0, F = _(F ^ A, 16), W = W + F | 0, j = _(j ^ W, 12), A = A + j | 0, F = _(F ^ A, 8), W = W + F | 0, j = _(j ^ W, 7), S = S + L | 0, H = _(H ^ S, 16), $ = $ + H | 0, L = _(L ^ $, 12), S = S + L | 0, H = _(H ^ S, 8), $ = $ + H | 0, L = _(L ^ $, 7);
+  let O = 0;
+  r[O++] = a + K | 0, r[O++] = c + R | 0, r[O++] = s + A | 0, r[O++] = l + S | 0, r[O++] = u + L | 0, r[O++] = y + I | 0, r[O++] = v + q | 0, r[O++] = w + j | 0, r[O++] = g + W | 0, r[O++] = f + $ | 0, r[O++] = p + z | 0, r[O++] = h + B | 0, r[O++] = b + G | 0, r[O++] = m + F | 0, r[O++] = P + H | 0, r[O++] = N + J | 0;
 }
-const _n = /* @__PURE__ */ yo(ho, {
+const Tn = /* @__PURE__ */ No(So, {
   counterRight: !1,
   counterLength: 4,
   allowShortKeys: !1
-}), En = 2, et = 1, Pn = 65536, tt = 4294967295;
-function Tt(e, t) {
-  const n = _e(new Uint8Array([2]), dt(t)), o = Bt.getSharedSecret(e, n, !0).slice(1, 33);
-  return yt(ue("nip44-v2"), o);
+}), Ln = 2, st = 1, On = 65536, Io = 4294967295, To = 132, Lo = 99, lt = 1024 * 1024;
+function Wt(e, t) {
+  const n = Pe(new Uint8Array([2]), bt(t)), o = Zt.getSharedSecret(e, n, !0).slice(1, 33);
+  return mt(Y("nip44-v2"), o);
 }
-function Kn(e, t) {
-  const n = Gt(e, t, 76);
+function Mn(e, t) {
+  if (e.length !== 32)
+    throw new Error("NIP-44 conversation key must be exactly 32 bytes.");
+  if (t.length !== 32)
+    throw new Error("NIP-44 nonce must be exactly 32 bytes.");
+  const n = Me(e, t, 76);
   return {
     chachaKey: n.slice(0, 32),
     chachaNonce: n.slice(32, 44),
     hmacKey: n.slice(44, 76)
   };
 }
-function Rn(e) {
+function Nt(e) {
   if (e <= 32)
     return 32;
   const t = 2 ** Math.floor(Math.log2(e - 1) + 1), n = t <= 256 ? 32 : t / 8;
   return n * (Math.floor((e - 1) / n) + 1);
 }
-function po(e) {
-  if (e < Pn) {
+const Un = 39 + Nt(lt) + 32, Oo = Math.ceil(Un / 3) * 4;
+function Mo(e) {
+  if (e < On) {
     const n = new Uint8Array(2);
     return new DataView(n.buffer).setUint16(0, e, !1), n;
   }
   const t = new Uint8Array(6);
   return new DataView(t.buffer).setUint32(2, e, !1), t;
 }
-function vo(e) {
+function Uo(e) {
   const t = e.length;
-  if (t < et || t > tt)
-    throw new Error(`NIP-44 plaintext length must be between ${et} and ${tt} bytes.`);
-  const n = po(t), r = Rn(t), o = new Uint8Array(n.length + r);
+  if (t < st || t > lt)
+    throw new Error(`NIP-44 plaintext length must be between ${st} and ${lt} bytes on this platform.`);
+  const n = Mo(t), r = Nt(t), o = new Uint8Array(n.length + r);
   return o.set(n, 0), o.set(e, n.length), o;
 }
-function fo(e) {
+function Do(e) {
   const t = new DataView(e.buffer, e.byteOffset, e.byteLength), n = t.getUint16(0, !1);
   let r, o;
   if (n === 0) {
-    if (r = t.getUint32(2, !1), o = 6, r < Pn)
+    if (r = t.getUint32(2, !1), o = 6, r < On)
       throw new Error("NIP-44 payload has inconsistent padding.");
   } else
     r = n, o = 2;
-  if (r < et || r > tt || e.length !== o + Rn(r))
+  if (r < st || r > Io || e.length !== o + Nt(r))
     throw new Error("NIP-44 payload has inconsistent padding.");
   return e.slice(o, o + r);
 }
-function An(e, t, n) {
-  return $t(Wt, e, _e(t, n));
+function Dn(e, t, n) {
+  return gt(wt, e, Pe(t, n));
 }
-function go(e, t, n) {
-  const r = xe(32), { chachaKey: o, chachaNonce: i, hmacKey: a } = Kn(e, r), c = vo(ue(t)), s = _n(o, i, c), l = An(a, r, s);
-  return we.encode(_e(new Uint8Array([En]), r, s, l));
+function Vo(e, t) {
+  return qo(e, t, be(32));
 }
-function wo(e, t) {
-  const n = we.decode(t);
-  if (n[0] !== En)
+function qo(e, t, n) {
+  if (n.length !== 32)
+    throw new Error("NIP-44 nonce must be exactly 32 bytes.");
+  const { chachaKey: r, chachaNonce: o, hmacKey: i } = Mn(e, n), a = Uo(Y(t)), c = Tn(r, o, a), s = Dn(i, n, c);
+  return me.encode(Pe(new Uint8Array([Ln]), n, c, s));
+}
+function jo(e, t) {
+  if (t.startsWith("#"))
+    throw new Error("Unsupported NIP-44 non-base64 encoding.");
+  if (t.length < To || t.length > Oo)
+    throw new Error("NIP-44 payload size is outside this platform's supported range.");
+  const n = me.decode(t);
+  if (n.length < Lo || n.length > Un)
+    throw new Error("NIP-44 decoded payload size is outside this platform's supported range.");
+  if (n[0] !== Ln)
     throw new Error(`Unsupported NIP-44 version: ${n[0]}`);
-  const r = n.slice(1, 33), o = n.slice(n.length - 32), i = n.slice(33, n.length - 32), { chachaKey: a, chachaNonce: c, hmacKey: s } = Kn(e, r), l = An(s, r, i);
-  if (!cr(o, l))
+  const r = n.slice(1, 33);
+  if (r.length !== 32)
+    throw new Error("NIP-44 nonce must be exactly 32 bytes.");
+  const o = n.slice(n.length - 32), i = n.slice(33, n.length - 32), { chachaKey: a, chachaNonce: c, hmacKey: s } = Mn(e, r), l = Dn(s, r, i);
+  if (!wr(o, l))
     throw new Error("NIP-44 MAC verification failed: payload is corrupted, tampered, or uses the wrong key.");
-  const u = _n(a, c, i);
-  return ct(fo(u));
+  const u = Tn(a, c, i);
+  return Ge(Do(u));
 }
-const le = 16, bo = 283;
-function mo(e) {
+const he = 16, Wo = 283;
+function $o(e) {
   if (![16, 24, 32].includes(e.length))
     throw new Error('"aes key" expected Uint8Array of length 16/24/32, got length=' + e.length);
 }
-function _t(e) {
-  return e << 1 ^ bo & -(e >> 7);
+function St(e) {
+  return e << 1 ^ Wo & -(e >> 7);
 }
-function fe(e, t) {
+function we(e, t) {
   let n = 0;
   for (; t > 0; t >>= 1)
-    n ^= e & -(t & 1), e = _t(e);
+    n ^= e & -(t & 1), e = St(e);
   return n;
 }
-const nt = /* @__PURE__ */ (() => {
+const ut = /* @__PURE__ */ (() => {
   const e = new Uint8Array(256);
-  for (let n = 0, r = 1; n < 256; n++, r ^= _t(r))
+  for (let n = 0, r = 1; n < 256; n++, r ^= St(r))
     e[n] = r;
   const t = new Uint8Array(256);
   t[0] = 99;
@@ -3330,12 +3535,12 @@ const nt = /* @__PURE__ */ (() => {
     let r = e[255 - n];
     r |= r << 8, t[e[n]] = (r ^ r >> 4 ^ r >> 5 ^ r >> 6 ^ r >> 7 ^ 99) & 255;
   }
-  return pe(e), t;
-})(), ko = /* @__PURE__ */ nt.map((e, t) => nt.indexOf(t)), _o = (e) => e << 24 | e >>> 8, He = (e) => e << 8 | e >>> 24;
-function Cn(e, t) {
+  return ve(e), t;
+})(), zo = /* @__PURE__ */ ut.map((e, t) => ut.indexOf(t)), Bo = (e) => e << 24 | e >>> 8, et = (e) => e << 8 | e >>> 24;
+function Vn(e, t) {
   if (e.length !== 256)
     throw new Error("Wrong sbox length");
-  const n = new Uint32Array(256).map((l, u) => t(e[u])), r = n.map(He), o = r.map(He), i = o.map(He), a = new Uint32Array(256 * 256), c = new Uint32Array(256 * 256), s = new Uint16Array(256 * 256);
+  const n = new Uint32Array(256).map((l, u) => t(e[u])), r = n.map(et), o = r.map(et), i = o.map(et), a = new Uint32Array(256 * 256), c = new Uint32Array(256 * 256), s = new Uint16Array(256 * 256);
   for (let l = 0; l < 256; l++)
     for (let u = 0; u < 256; u++) {
       const y = l * 256 + u;
@@ -3343,89 +3548,89 @@ function Cn(e, t) {
     }
   return { sbox: e, sbox2: s, T0: n, T1: r, T2: o, T3: i, T01: a, T23: c };
 }
-const Et = /* @__PURE__ */ Cn(nt, (e) => fe(e, 3) << 24 | e << 16 | e << 8 | fe(e, 2)), xn = /* @__PURE__ */ Cn(ko, (e) => fe(e, 11) << 24 | fe(e, 13) << 16 | fe(e, 9) << 8 | fe(e, 14)), Eo = /* @__PURE__ */ (() => {
+const It = /* @__PURE__ */ Vn(ut, (e) => we(e, 3) << 24 | e << 16 | e << 8 | we(e, 2)), qn = /* @__PURE__ */ Vn(zo, (e) => we(e, 11) << 24 | we(e, 13) << 16 | we(e, 9) << 8 | we(e, 14)), Go = /* @__PURE__ */ (() => {
   const e = new Uint8Array(16);
-  for (let t = 0, n = 1; t < 16; t++, n = _t(n))
+  for (let t = 0, n = 1; t < 16; t++, n = St(n))
     e[t] = n;
   return e;
 })();
-function Sn(e) {
-  T(e);
+function jn(e) {
+  M(e);
   const t = e.length;
-  mo(e);
-  const { sbox2: n } = Et, r = [];
-  (!Y || !oe(e)) && r.push(e = he(e));
-  const o = L(S(e)), i = o.length, a = (s) => Z(n, s, s, s, s), c = new Uint32Array(t + 28);
+  $o(e);
+  const { sbox2: n } = It, r = [];
+  (!Q || !ie(e)) && r.push(e = fe(e));
+  const o = U(T(e)), i = o.length, a = (s) => te(n, s, s, s, s), c = new Uint32Array(t + 28);
   c.set(o);
   for (let s = i; s < c.length; s++) {
     let l = c[s - 1];
-    s % i === 0 ? l = a(_o(l)) ^ Eo[s / i - 1] : i > 6 && s % i === 4 && (l = a(l)), c[s] = c[s - i] ^ l;
+    s % i === 0 ? l = a(Bo(l)) ^ Go[s / i - 1] : i > 6 && s % i === 4 && (l = a(l)), c[s] = c[s - i] ^ l;
   }
-  return pe(...r), c;
+  return ve(...r), c;
 }
-function Po(e) {
-  const t = Sn(e), n = t.slice(), r = t.length, { sbox2: o } = Et, { T0: i, T1: a, T2: c, T3: s } = xn;
+function Fo(e) {
+  const t = jn(e), n = t.slice(), r = t.length, { sbox2: o } = It, { T0: i, T1: a, T2: c, T3: s } = qn;
   for (let l = 0; l < r; l += 4)
     for (let u = 0; u < 4; u++)
       n[l + u] = t[r - l - 4 + u];
-  pe(t);
+  ve(t);
   for (let l = 4; l < r - 4; l++) {
-    const u = n[l], y = Z(o, u, u, u, u);
+    const u = n[l], y = te(o, u, u, u, u);
     n[l] = i[y & 255] ^ a[y >>> 8 & 255] ^ c[y >>> 16 & 255] ^ s[y >>> 24];
   }
   return n;
 }
-function ce(e, t, n, r, o, i) {
+function ue(e, t, n, r, o, i) {
   return e[n << 8 & 65280 | r >>> 8 & 255] ^ t[o >>> 8 & 65280 | i >>> 24 & 255];
 }
-function Z(e, t, n, r, o) {
+function te(e, t, n, r, o) {
   return e[t & 255 | n & 65280] | e[r >>> 16 & 255 | o >>> 16 & 65280] << 16;
 }
-function Lt(e, t, n, r, o) {
-  const { sbox2: i, T01: a, T23: c } = Et;
+function $t(e, t, n, r, o) {
+  const { sbox2: i, T01: a, T23: c } = It;
   let s = 0;
   t ^= e[s++], n ^= e[s++], r ^= e[s++], o ^= e[s++];
   const l = e.length / 4 - 2;
   for (let g = 0; g < l; g++) {
-    const f = e[s++] ^ ce(a, c, t, n, r, o), p = e[s++] ^ ce(a, c, n, r, o, t), h = e[s++] ^ ce(a, c, r, o, t, n), b = e[s++] ^ ce(a, c, o, t, n, r);
+    const f = e[s++] ^ ue(a, c, t, n, r, o), p = e[s++] ^ ue(a, c, n, r, o, t), h = e[s++] ^ ue(a, c, r, o, t, n), b = e[s++] ^ ue(a, c, o, t, n, r);
     t = f, n = p, r = h, o = b;
   }
-  const u = e[s++] ^ Z(i, t, n, r, o), y = e[s++] ^ Z(i, n, r, o, t), v = e[s++] ^ Z(i, r, o, t, n), w = e[s++] ^ Z(i, o, t, n, r);
+  const u = e[s++] ^ te(i, t, n, r, o), y = e[s++] ^ te(i, n, r, o, t), v = e[s++] ^ te(i, r, o, t, n), w = e[s++] ^ te(i, o, t, n, r);
   return { s0: u, s1: y, s2: v, s3: w };
 }
-function Ko(e, t, n, r, o) {
-  const { sbox2: i, T01: a, T23: c } = xn;
+function Ho(e, t, n, r, o) {
+  const { sbox2: i, T01: a, T23: c } = qn;
   let s = 0;
   t ^= e[s++], n ^= e[s++], r ^= e[s++], o ^= e[s++];
   const l = e.length / 4 - 2;
   for (let g = 0; g < l; g++) {
-    const f = e[s++] ^ ce(a, c, t, o, r, n), p = e[s++] ^ ce(a, c, n, t, o, r), h = e[s++] ^ ce(a, c, r, n, t, o), b = e[s++] ^ ce(a, c, o, r, n, t);
+    const f = e[s++] ^ ue(a, c, t, o, r, n), p = e[s++] ^ ue(a, c, n, t, o, r), h = e[s++] ^ ue(a, c, r, n, t, o), b = e[s++] ^ ue(a, c, o, r, n, t);
     t = f, n = p, r = h, o = b;
   }
-  const u = e[s++] ^ Z(i, t, o, r, n), y = e[s++] ^ Z(i, n, t, o, r), v = e[s++] ^ Z(i, r, n, t, o), w = e[s++] ^ Z(i, o, r, n, t);
+  const u = e[s++] ^ te(i, t, o, r, n), y = e[s++] ^ te(i, n, t, o, r), v = e[s++] ^ te(i, r, n, t, o), w = e[s++] ^ te(i, o, r, n, t);
   return { s0: u, s1: y, s2: v, s3: w };
 }
-function Ro(e) {
-  if (T(e), e.length % le !== 0)
-    throw new Error("aes-(cbc/ecb).decrypt ciphertext should consist of blocks with size " + le);
+function Jo(e) {
+  if (M(e), e.length % he !== 0)
+    throw new Error("aes-(cbc/ecb).decrypt ciphertext should consist of blocks with size " + he);
 }
-function Ao(e, t, n) {
-  T(e);
+function Yo(e, t, n) {
+  M(e);
   let r = e.length;
-  const o = r % le;
+  const o = r % he;
   if (!t && o !== 0)
     throw new Error("aec/(cbc-ecb): unpadded plaintext with disabled padding");
   if (t) {
-    let c = le - o;
-    c || (c = le), r = r + c;
+    let c = he - o;
+    c || (c = he), r = r + c;
   }
-  n = kt(r, n), mn(e, n), (!Y || !oe(e)) && (e = he(e));
-  const i = S(e);
-  L(i);
-  const a = S(n);
+  n = Ct(r, n), Sn(e, n), (!Q || !ie(e)) && (e = fe(e));
+  const i = T(e);
+  U(i);
+  const a = T(n);
   return { b: i, o: a, out: n };
 }
-function Co(e, t) {
+function Xo(e, t) {
   if (!t)
     return e;
   const n = e.length;
@@ -3442,75 +3647,80 @@ function Co(e, t) {
     throw new Error("aes/pkcs7: wrong padding");
   return e.subarray(0, n - r);
 }
-function xo(e) {
-  const t = new Uint8Array(16), n = S(t);
+function Qo(e) {
+  const t = new Uint8Array(16), n = T(t);
   t.set(e);
-  const r = le - e.length;
-  for (let o = le - r; o < le; o++)
+  const r = he - e.length;
+  for (let o = he - r; o < he; o++)
     t[o] = r;
   return n;
 }
-const Nn = /* @__PURE__ */ ao({ blockSize: 16, nonceLength: 16 }, function(t, n, r = {}) {
+const Wn = /* @__PURE__ */ Ko({ blockSize: 16, nonceLength: 16 }, function(t, n, r = {}) {
   const o = !r.disablePadding;
   return {
     encrypt(i, a) {
-      const c = Sn(t), { b: s, o: l, out: u } = Ao(i, o, a);
+      const c = jn(t), { b: s, o: l, out: u } = Yo(i, o, a);
       let y = n;
       const v = [c];
-      (!Y || !oe(y)) && v.push(y = he(y));
-      const w = S(y);
-      L(w);
+      (!Q || !ie(y)) && v.push(y = fe(y));
+      const w = T(y);
+      U(w);
       let g = w[0], f = w[1], p = w[2], h = w[3], b = 0;
       for (; b + 4 <= s.length; )
-        g ^= s[b + 0], f ^= s[b + 1], p ^= s[b + 2], h ^= s[b + 3], { s0: g, s1: f, s2: p, s3: h } = Lt(c, g, f, p, h), l[b++] = g, l[b++] = f, l[b++] = p, l[b++] = h;
+        g ^= s[b + 0], f ^= s[b + 1], p ^= s[b + 2], h ^= s[b + 3], { s0: g, s1: f, s2: p, s3: h } = $t(c, g, f, p, h), l[b++] = g, l[b++] = f, l[b++] = p, l[b++] = h;
       if (o) {
-        const m = xo(i.subarray(b * 4));
-        L(m), g ^= m[0], f ^= m[1], p ^= m[2], h ^= m[3], { s0: g, s1: f, s2: p, s3: h } = Lt(c, g, f, p, h), l[b++] = g, l[b++] = f, l[b++] = p, l[b++] = h;
+        const m = Qo(i.subarray(b * 4));
+        U(m), g ^= m[0], f ^= m[1], p ^= m[2], h ^= m[3], { s0: g, s1: f, s2: p, s3: h } = $t(c, g, f, p, h), l[b++] = g, l[b++] = f, l[b++] = p, l[b++] = h;
       }
-      return L(l), pe(...v), u;
+      return U(l), ve(...v), u;
     },
     decrypt(i, a) {
-      Ro(i);
-      const c = Po(t);
+      Jo(i);
+      const c = Fo(t);
       let s = n;
       const l = [c];
-      (!Y || !oe(s)) && l.push(s = he(s));
-      const u = S(s);
-      L(u), a = kt(i.length, a), mn(i, a), (!Y || !oe(i)) && l.push(i = he(i));
-      const y = S(i), v = S(a);
-      L(y);
+      (!Q || !ie(s)) && l.push(s = fe(s));
+      const u = T(s);
+      U(u), a = Ct(i.length, a), Sn(i, a), (!Q || !ie(i)) && l.push(i = fe(i));
+      const y = T(i), v = T(a);
+      U(y);
       let w = u[0], g = u[1], f = u[2], p = u[3];
       for (let h = 0; h + 4 <= y.length; ) {
-        const b = w, m = g, K = f, F = p;
+        const b = w, m = g, P = f, N = p;
         w = y[h + 0], g = y[h + 1], f = y[h + 2], p = y[h + 3];
-        const { s0: E, s1: R, s2: A, s3: x } = Ko(c, w, g, f, p);
-        v[h++] = E ^ b, v[h++] = R ^ m, v[h++] = A ^ K, v[h++] = x ^ F;
+        const { s0: K, s1: R, s2: A, s3: S } = Ho(c, w, g, f, p);
+        v[h++] = K ^ b, v[h++] = R ^ m, v[h++] = A ^ P, v[h++] = S ^ N;
       }
-      return L(v), pe(...l), Co(a, o);
+      return U(v), ve(...l), Xo(a, o);
     }
   };
 });
-function In(e, t) {
-  const n = _e(new Uint8Array([2]), dt(t));
-  return Bt.getSharedSecret(e, n, !0).slice(1, 33);
+function $n(e, t) {
+  const n = Pe(new Uint8Array([2]), bt(t));
+  return Zt.getSharedSecret(e, n, !0).slice(1, 33);
 }
-function So(e, t, n, r) {
-  const o = In(e, t), i = xe(16), a = Nn(o, i).encrypt(ue(n));
-  return `${we.encode(a)}?iv=${we.encode(i)}`;
+function Zo(e, t, n) {
+  return ei(e, t, n, be(16));
 }
-function No(e, t, n) {
+function ei(e, t, n, r) {
+  if (r.length !== 16)
+    throw new Error("NIP-04 iv must be exactly 16 bytes.");
+  const o = $n(e, t), i = Wn(o, r).encrypt(Y(n));
+  return `${me.encode(i)}?iv=${me.encode(r)}`;
+}
+function ti(e, t, n) {
   const r = n.indexOf("?iv=");
   if (r === -1)
     throw new Error('NIP-04 payload is missing its "?iv=" suffix.');
-  const o = we.decode(n.slice(0, r)), i = we.decode(n.slice(r + 4)), a = In(e, t), c = Nn(a, i).decrypt(o);
-  return ct(c);
+  const o = me.decode(n.slice(0, r)), i = me.decode(n.slice(r + 4)), a = $n(e, t), c = Wn(a, i).decrypt(o);
+  return Ge(c);
 }
-class Ue {
+class De {
   privateKey;
   publicKeyHex;
   destroyed = !1;
   constructor(t) {
-    this.privateKey = t, this.publicKeyHex = _(t);
+    this.privateKey = t, this.publicKeyHex = k(t);
   }
   assertAlive() {
     if (this.destroyed)
@@ -3520,7 +3730,7 @@ class Ue {
     return this.assertAlive(), this.publicKeyHex;
   }
   signEvent(t) {
-    return this.assertAlive(), ee({
+    return this.assertAlive(), ne({
       pubkey: this.publicKeyHex,
       created_at: t.created_at ?? Math.floor(Date.now() / 1e3),
       kind: t.kind,
@@ -3529,138 +3739,83 @@ class Ue {
     }, this.privateKey);
   }
   nip44Encrypt(t, n) {
-    return this.assertAlive(), go(Tt(this.privateKey, t), n);
+    return this.assertAlive(), Vo(Wt(this.privateKey, t), n);
   }
   nip44Decrypt(t, n) {
-    return this.assertAlive(), wo(Tt(this.privateKey, t), n);
+    return this.assertAlive(), jo(Wt(this.privateKey, t), n);
   }
   /** Legacy relative to nip44Encrypt above, but still what a real NIP-07 extension exposes as
    * window.nostr.nip04.encrypt -- implemented for drop-in parity. */
   nip04Encrypt(t, n) {
-    return this.assertAlive(), So(this.privateKey, t, n);
+    return this.assertAlive(), Zo(this.privateKey, t, n);
   }
   nip04Decrypt(t, n) {
-    return this.assertAlive(), No(this.privateKey, t, n);
+    return this.assertAlive(), ti(this.privateKey, t, n);
   }
   /** Best-practical secret wipe (§11.10, §21.4): overwrites the private key buffer in place. */
   destroy() {
-    ge(this.privateKey), this.destroyed = !0;
+    x(this.privateKey), this.destroyed = !0;
   }
 }
-const Io = [
-  "wss://relay.damus.io",
-  "wss://nos.lol",
-  "wss://relay.nostr.band",
-  "wss://nostr.wine",
-  "wss://relay.snort.social"
-], To = [
-  "wss://purplepag.es",
-  "wss://relay.nostr.band",
-  "wss://nostr-pub.wellorder.net"
-], Tn = "bitlogin.connection.v1", Ln = "bitlogin.connection.nwc.v1", Lo = "bitlogin/connection-vault-root/v1", Uo = "bitlogin/connection-vault-signing/v1", Oo = "bitlogin/connection-record-encryption/v1", Mo = "bitlogin/connection-vault-personal/v1", rt = "bitlogin:connection:";
-function Do(e) {
-  if (e.length !== 32)
-    throw new Error("connection_vault_root must be exactly 32 bytes.");
-  return yt(Ft(Lo), e);
-}
-function Ee(e) {
-  return sr(e, Uo).scalar;
-}
-function Vo(e) {
-  return _(Ee(e));
-}
-function qo(e, t) {
-  if (t.length !== 32)
-    throw new Error("vault_sudo_key must be exactly 32 bytes.");
-  if (e.length !== 32)
-    throw new Error("connection_vault_root must be exactly 32 bytes.");
-  return yt(Ft(Mo), _e(e, t));
-}
-function Un(e, t) {
-  const n = Pt(t);
-  return Gt(e, _e(ue(Oo), new Uint8Array([0]), n), 32);
-}
-function jo() {
-  return H(xe(16));
-}
-function Pt(e) {
-  const t = J(e);
-  if (t.length !== 16)
-    throw new Error("connection_id must decode to exactly 16 bytes (§CV7).");
-  return t;
-}
-function On(e) {
-  return Pt(e), `${rt}${e}`;
-}
-function Mn(e) {
-  if (!e.startsWith(rt))
-    return null;
-  const t = e.slice(rt.length);
-  try {
-    return Pt(t), t;
-  } catch {
-    return null;
-  }
-}
-const Ut = 120, $o = /* @__PURE__ */ new Set(["active", "suspended", "deleted"]), Wo = /* @__PURE__ */ new Set(["connectable", "personal"]);
-class ve extends Error {
+const ni = ["wss://relay.damus.io", "wss://nos.lol", "wss://relay.nostr.band", "wss://nostr.wine", "wss://relay.snort.social"], ri = ["wss://purplepag.es", "wss://relay.nostr.band", "wss://nostr-pub.wellorder.net"], zn = "bitlogin.connection.v1", Bn = "bitlogin.connection.nwc.v1", zt = 120, oi = /* @__PURE__ */ new Set(["active", "suspended", "deleted"]), ii = /* @__PURE__ */ new Set(["connectable", "personal"]);
+class ge extends Error {
   constructor(t) {
     super(t), this.name = "ConnectionRecordError";
   }
 }
-function Dn(e, t) {
-  return ue(`bitlogin|connection-record|v1|${e}|30078|${t}`);
+function Gn(e, t) {
+  return Y(`bitlogin|connection-record|v1|${e}|30078|${t}`);
 }
-function Vn(e) {
+function Fn(e) {
   const t = e, n = (i) => {
-    throw new ve(i);
+    throw new ge(i);
   };
-  (!t || typeof t != "object") && n("Connection record must be an object."), t.schema !== Tn && n("Unsupported connection record schema (§CV8.3)."), typeof t.connection_id != "string" && n("connection_id must be a string (§CV7)."), (typeof t.connection_type != "string" || t.connection_type.length === 0) && n("connection_type must be a non-empty string (§CV8.3)."), Wo.has(t.tier) || n("tier must be connectable or personal."), $o.has(t.state) || n("state must be active, suspended, or deleted (§CV8.3)."), (typeof t.label != "string" || t.label.length > Ut) && n(`label must be a string of at most ${Ut} characters.`), (!Number.isInteger(t.created_at) || !Number.isInteger(t.updated_at)) && n("created_at and updated_at must be integers (§CV8.3).");
+  (!t || typeof t != "object") && n("Connection record must be an object."), t.schema !== zn && n("Unsupported connection record schema (§CV8.3)."), typeof t.connection_id != "string" && n("connection_id must be a string (§CV7)."), (typeof t.connection_type != "string" || t.connection_type.length === 0) && n("connection_type must be a non-empty string (§CV8.3)."), ii.has(t.tier) || n("tier must be connectable or personal."), oi.has(t.state) || n("state must be active, suspended, or deleted (§CV8.3)."), (typeof t.label != "string" || t.label.length > zt) && n(`label must be a string of at most ${zt} characters.`), (!Number.isInteger(t.created_at) || !Number.isInteger(t.updated_at)) && n("created_at and updated_at must be integers (§CV8.3).");
   const r = t.credential;
   (!r || typeof r != "object" || typeof r.schema != "string") && n("credential must be an object naming its profile schema (§CV8.3).");
   const o = t.application_binding;
   (!o || typeof o != "object" || o.origin !== null && typeof o.origin != "string" || o.app_pubkey !== null && typeof o.app_pubkey != "string") && n("application_binding must carry origin and app_pubkey (string or null)."), t.notes !== null && typeof t.notes != "string" && n("notes must be a string or null.");
 }
-async function Je(e) {
-  Vn(e.record);
-  const t = Ee(e.vaultPrk), n = _(t), r = On(e.record.connection_id), o = Un(e.recordPrk, e.record.connection_id), i = await gt(e.record, o, Dn(n, r));
-  return ee({
+async function tt(e) {
+  Fn(e.record);
+  const t = Ke(e.vaultPrk), n = k(t), r = Cn(e.record.connection_id), o = xn(e.recordPrk, e.record.connection_id), i = await Pt(e.record, o, Gn(n, r));
+  return ne({
     pubkey: n,
-    created_at: ht(e.previousCreatedAt, e.now),
-    kind: te,
+    created_at: We(e.previousCreatedAt, e.now),
+    kind: re,
     tags: [["d", r]],
     content: JSON.stringify(i)
   }, t);
 }
-async function zo(e, t, n) {
-  if (!ie(e))
-    throw new ve("Connection record event has an invalid id or signature.");
-  const r = _(Ee(t));
+async function ai(e, t, n) {
+  if (!ae(e))
+    throw new ge("Connection record event has an invalid id or signature.");
+  const r = k(Ke(t));
   if (e.pubkey !== r)
-    throw new ve("Connection record event is not signed by this vault's identity.");
-  const o = ut(e, "d") ?? "", i = Mn(o);
+    throw new ge("Connection record event is not signed by this vault's identity.");
+  const o = vt(e, "d") ?? "", i = Nn(o);
   if (i === null)
-    throw new ve("Connection record event has a malformed d tag.");
-  const a = JSON.parse(e.content), c = Dn(e.pubkey, o), s = [
+    throw new ge("Connection record event has a malformed d tag.");
+  const a = JSON.parse(e.content), c = Gn(e.pubkey, o), s = [
     { prk: t, tier: "connectable" },
     ...n ? [{ prk: n, tier: "personal" }] : []
   ];
   for (const l of s) {
     let u;
     try {
-      u = await wt(a, Un(l.prk, i), c);
+      u = await Kt(a, xn(l.prk, i), c);
     } catch {
       continue;
     }
-    if (Vn(u), u.connection_id !== i)
-      throw new ve("Connection record id does not match its d tag.");
+    if (Fn(u), u.connection_id !== i)
+      throw new ge("Connection record id does not match its d tag.");
     if (u.tier !== l.tier)
-      throw new ve("Connection record tier does not match the key that decrypted it.");
+      throw new ge("Connection record tier does not match the key that decrypted it.");
     return { record: u, tier: l.tier, event: e };
   }
   return null;
 }
-function Bo(e, t) {
+function ci(e, t) {
   return {
     ...e,
     state: "deleted",
@@ -3669,50 +3824,44 @@ function Bo(e, t) {
     updated_at: t
   };
 }
-const je = /^[0-9a-f]{64}$/u;
-class re extends Error {
+const Be = /^[0-9a-f]{64}$/u;
+class ce extends Error {
   constructor(t) {
     super(t), this.name = "NwcParseError";
   }
 }
-function Ot(e) {
+function Bt(e) {
   const t = e.trim();
   if (!/^nostr\+walletconnect:\/\//iu.test(t))
-    throw new re("Not an NWC URI: it must start with nostr+walletconnect://");
+    throw new ce("Not an NWC URI: it must start with nostr+walletconnect://");
   let n;
   try {
     n = new URL(t.replace(/^nostr\+walletconnect:\/\//iu, "http://"));
   } catch {
-    throw new re("The NWC URI is malformed.");
+    throw new ce("The NWC URI is malformed.");
   }
   const r = n.hostname.toLowerCase();
-  if (!je.test(r))
-    throw new re("The NWC URI's wallet service pubkey is not 64-char hex.");
+  if (!Be.test(r))
+    throw new ce("The NWC URI's wallet service pubkey is not 64-char hex.");
   const o = [], i = [];
   let a = null, c = null;
   for (const [s, l] of n.searchParams.entries())
     if (s === "relay") {
-      let u;
-      try {
-        u = new URL(l);
-      } catch {
-        throw new re("A relay parameter in the NWC URI is not a valid URL.");
-      }
-      if (u.protocol !== "wss:" && u.protocol !== "ws:")
-        throw new re("A relay parameter in the NWC URI is not a websocket URL.");
+      if (!Ye(l))
+        throw new ce("An NWC relay must use secure WebSockets, except for an explicit loopback development endpoint.");
       o.push(l);
     } else if (s === "secret") {
       const u = l.toLowerCase();
-      if (!je.test(u))
-        throw new re("The NWC URI's secret is not a 64-char hex client key.");
+      if (!Be.test(u))
+        throw new ce("The NWC URI's secret is not a 64-char hex client key.");
       a = u;
     } else s === "lud16" ? c = l : i.push([s, l]);
   if (o.length === 0)
-    throw new re("The NWC URI names no relay.");
+    throw new ce("The NWC URI names no relay.");
   if (a === null)
-    throw new re("The NWC URI carries no secret.");
+    throw new ce("The NWC URI carries no secret.");
   return {
-    schema: Ln,
+    schema: Bn,
     wallet_pubkey: r,
     relays: o,
     secret: a,
@@ -3720,8 +3869,8 @@ function Ot(e) {
     extra_params: i
   };
 }
-function Go(e) {
-  qn(e);
+function si(e) {
+  Hn(e);
   const t = new URLSearchParams();
   for (const n of e.relays)
     t.append("relay", n);
@@ -3730,32 +3879,102 @@ function Go(e) {
     t.append(n, r);
   return `nostr+walletconnect://${e.wallet_pubkey}?${t.toString()}`;
 }
-function Fo(e, t) {
+function li(e, t) {
   return e.wallet_pubkey === t.wallet_pubkey && e.secret === t.secret;
 }
-function qn(e) {
+function Hn(e) {
   const t = e, n = (r) => {
-    throw new re(r);
+    throw new ce(r);
   };
-  (!t || typeof t != "object") && n("NWC credential must be an object."), t.schema !== Ln && n("NWC credential has the wrong schema."), (typeof t.wallet_pubkey != "string" || !je.test(t.wallet_pubkey)) && n("NWC credential wallet_pubkey must be 64-char lowercase hex."), (!Array.isArray(t.relays) || t.relays.length === 0 || t.relays.some((r) => typeof r != "string")) && n("NWC credential must name at least one relay."), (typeof t.secret != "string" || !je.test(t.secret)) && n("NWC credential secret must be 64-char lowercase hex."), t.lud16 !== null && typeof t.lud16 != "string" && n("NWC credential lud16 must be a string or null."), (!Array.isArray(t.extra_params) || t.extra_params.some((r) => !Array.isArray(r) || r.length !== 2 || typeof r[0] != "string" || typeof r[1] != "string")) && n("NWC credential extra_params must be [key, value] string pairs.");
+  (!t || typeof t != "object") && n("NWC credential must be an object."), t.schema !== Bn && n("NWC credential has the wrong schema."), (typeof t.wallet_pubkey != "string" || !Be.test(t.wallet_pubkey)) && n("NWC credential wallet_pubkey must be 64-char lowercase hex."), (!Array.isArray(t.relays) || t.relays.length === 0 || t.relays.some((r) => typeof r != "string")) && n("NWC credential must name at least one relay."), t.relays.some((r) => !Ye(r)) && n("NWC relays must use secure WebSockets, except for explicit loopback development endpoints."), (typeof t.secret != "string" || !Be.test(t.secret)) && n("NWC credential secret must be 64-char lowercase hex."), t.lud16 !== null && typeof t.lud16 != "string" && n("NWC credential lud16 must be a string or null."), (!Array.isArray(t.extra_params) || t.extra_params.some((r) => !Array.isArray(r) || r.length !== 2 || typeof r[0] != "string" || typeof r[1] != "string")) && n("NWC credential extra_params must be [key, value] string pairs.");
 }
-function jn(e, t) {
-  return `bitlogin:vault-hwm:${e}:${t}`;
+const ui = "bitlogin:vault-hwm:v2:", di = "bitlogin/vault-hwm-index/v2", Jn = "bitlogin/vault-hwm-encryption/v2", yi = /^[0-9a-f]{64}$/u;
+class de extends Error {
+  constructor() {
+    super("The local Connection Vault rollback marker is invalid or has been tampered with."), this.name = "RecordHighWaterMarkError";
+  }
 }
-async function $n(e, t, n) {
-  const r = await e.get(jn(t, n));
-  return r ? JSON.parse(r) : null;
+function Tt(e) {
+  if (!e || typeof e != "object")
+    return !1;
+  const t = e;
+  return Number.isInteger(t.createdAt) && (t.createdAt ?? -1) >= 0 && typeof t.eventId == "string" && yi.test(t.eventId);
 }
-async function Wn(e, t, n, r) {
-  const o = await $n(e, t, n);
-  o && o.createdAt > r.createdAt || o && o.createdAt === r.createdAt && o.eventId <= r.eventId || await e.set(jn(t, n), JSON.stringify(r));
+function Yn(e, t) {
+  Xe(t);
+  const n = Me(e, di, 32), r = Y(t);
+  try {
+    return `${ui}${V(gt(wt, n, r))}`;
+  } finally {
+    x(n, r);
+  }
 }
-async function Ho(e) {
-  const t = Ee(e.vaultPrk), n = new C(e.relayUrls, { authPrivateKey: t });
+function hi(e, t) {
+  return `bitlogin:vault-hwm:${An(e)}:${t}`;
+}
+async function pi(e, t, n) {
+  const r = Me(e, Jn, 32), o = Y(JSON.stringify(n)), i = Y(t);
+  try {
+    const a = await on(r, o, i), c = {
+      v: 2,
+      nonce: V(a.nonce),
+      ciphertext: V(a.ciphertext)
+    };
+    return JSON.stringify(c);
+  } finally {
+    x(r, o, i);
+  }
+}
+async function fi(e, t, n) {
+  const r = Me(e, Jn, 32), o = Y(t);
+  let i;
+  try {
+    const a = JSON.parse(n);
+    if (a.v !== 2 || typeof a.nonce != "string" || typeof a.ciphertext != "string")
+      throw new de();
+    i = await an(r, X(a.nonce), X(a.ciphertext), o);
+    const c = JSON.parse(Ge(i));
+    if (!Tt(c))
+      throw new de();
+    return c;
+  } catch (a) {
+    throw a instanceof de ? a : new de();
+  } finally {
+    x(r, o), i && x(i);
+  }
+}
+async function Xn(e, t, n, r) {
+  const o = Yn(t, n);
+  await e.set(o, await pi(t, o, r));
+}
+async function Qn(e, t, n) {
+  const r = Yn(t, n), o = await e.get(r);
+  if (o !== void 0)
+    return fi(t, r, o);
+  const i = hi(t, n), a = await e.get(i);
+  if (a === void 0)
+    return null;
+  try {
+    const c = JSON.parse(a);
+    if (!Tt(c))
+      throw new de();
+    return await Xn(e, t, n, c), await e.delete(i), c;
+  } catch (c) {
+    throw c instanceof de ? c : new de();
+  }
+}
+async function Zn(e, t, n, r) {
+  if (!Tt(r))
+    throw new de();
+  const o = await Qn(e, t, n);
+  o && it({ created_at: r.createdAt, id: r.eventId }, { created_at: o.createdAt, id: o.eventId }) <= 0 || await Xn(e, t, n, r);
+}
+async function vi(e) {
+  const t = Ke(e.vaultPrk), n = new C(e.relayUrls, { authPrivateKey: t });
   let r;
   try {
-    r = await me(n, e.event, {
-      dTag: On(e.connectionId),
+    r = await ke(n, e.event, {
+      dTag: Cn(e.connectionId),
       minAcks: e.minAcknowledgements,
       // The readback bar follows the ack bar: a caller publishing to fewer
       // relays (a targeted repair, a test) has already lowered its quorum.
@@ -3763,40 +3982,43 @@ async function Ho(e) {
       timeoutMs: e.timeoutMs
     });
   } finally {
-    n.closeAll();
+    n.closeAll(), x(t);
   }
-  return r.success && await Wn(e.store, e.event.pubkey, e.connectionId, {
+  return r.success && await Zn(e.store, e.vaultPrk, e.connectionId, {
     createdAt: e.event.created_at,
     eventId: e.event.id
   }), r;
 }
-const Mt = 500;
-async function Jo(e) {
-  const t = Ee(e.vaultPrk), n = _(t), r = new C(e.relayUrls, { authPrivateKey: t });
+const Gt = 500;
+async function gi(e) {
+  const t = Ke(e.vaultPrk), n = k(t), r = new C(e.relayUrls, { authPrivateKey: t });
   let o;
   try {
-    o = await r.queryQuorum({ kinds: [te], authors: [n], limit: Mt }, e.timeoutMs);
+    o = await r.queryQuorum({ kinds: [re], authors: [n], limit: Gt }, e.timeoutMs);
   } finally {
-    r.closeAll();
+    r.closeAll(), x(t);
   }
-  const i = o.outcomes.some((l) => l.events.length >= Mt), a = /* @__PURE__ */ new Map();
+  const i = o.outcomes.some((l) => l.events.length >= Gt), a = /* @__PURE__ */ new Map();
   for (const l of o.outcomes.flatMap((u) => u.events)) {
-    if (!ie(l) || l.pubkey !== n)
+    if (!ae(l) || l.pubkey !== n)
       continue;
-    const u = Mn(ut(l, "d") ?? "");
+    const u = Nn(vt(l, "d") ?? "");
     if (u === null)
       continue;
     const y = a.get(u);
-    (!y || l.created_at > y.created_at) && a.set(u, l);
+    (!y || it(l, y) > 0) && a.set(u, l);
   }
   const c = /* @__PURE__ */ new Map(), s = [];
   for (const [l, u] of a) {
-    const y = await $n(e.store, n, l);
-    if (y !== null && (u.created_at < y.createdAt || u.created_at === y.createdAt && u.id < y.eventId)) {
+    const y = await Qn(e.store, e.vaultPrk, l);
+    if (y !== null && it(u, {
+      created_at: y.createdAt,
+      id: y.eventId
+    }) < 0) {
       s.push(l);
       continue;
     }
-    c.set(l, u), await Wn(e.store, n, l, {
+    c.set(l, u), await Zn(e.store, e.vaultPrk, l, {
       createdAt: u.created_at,
       eventId: u.id
     });
@@ -3809,25 +4031,25 @@ async function Jo(e) {
     truncated: i
   };
 }
-class Yo {
+class wi {
   vaultPrk;
   personalPrk = null;
   destroyed = !1;
   connectionVaultRoot;
   vaultPublicKey;
   constructor(t) {
-    this.connectionVaultRoot = t.slice(), this.vaultPrk = Do(this.connectionVaultRoot), this.vaultPublicKey = Vo(this.vaultPrk);
+    this.connectionVaultRoot = t.slice(), this.vaultPrk = go(this.connectionVaultRoot), this.vaultPublicKey = An(this.vaultPrk);
   }
   get sudoActive() {
     return this.personalPrk !== null;
   }
   /** Opens a sudo window. Consumes (wipes) the caller's sudo key copy. */
   enableSudo(t) {
-    this.endSudo(), this.personalPrk = qo(this.connectionVaultRoot, t), ge(t);
+    this.endSudo(), this.personalPrk = wo(this.connectionVaultRoot, t), x(t);
   }
   /** Closes the sudo window and wipes the personal-tier key material. */
   endSudo() {
-    this.personalPrk && ge(this.personalPrk), this.personalPrk = null;
+    this.personalPrk && x(this.personalPrk), this.personalPrk = null;
   }
   /**
    * Wipes everything this session holds, permanently.
@@ -3843,7 +4065,7 @@ class Yo {
    * Failing loudly is the only safe behaviour.
    */
   destroy() {
-    this.endSudo(), ge(this.vaultPrk, this.connectionVaultRoot), this.destroyed = !0;
+    this.endSudo(), x(this.vaultPrk, this.connectionVaultRoot), this.destroyed = !0;
   }
   prkForTier(t) {
     if (this.destroyed)
@@ -3857,8 +4079,8 @@ class Yo {
   /** Builds a fresh record + its signed event. Purely local; publish separately. */
   async createConnection(t) {
     const n = t.now ?? Math.floor(Date.now() / 1e3), r = {
-      schema: Tn,
-      connection_id: jo(),
+      schema: zn,
+      connection_id: bo(),
       connection_type: t.connection_type,
       tier: t.tier,
       state: "active",
@@ -3866,9 +4088,12 @@ class Yo {
       created_at: n,
       updated_at: n,
       credential: t.credential,
-      application_binding: t.application_binding ?? { origin: null, app_pubkey: null },
+      application_binding: t.application_binding ?? {
+        origin: null,
+        app_pubkey: null
+      },
       notes: t.notes ?? null
-    }, o = await Je({
+    }, o = await tt({
       vaultPrk: this.vaultPrk,
       recordPrk: this.prkForTier(t.tier),
       record: r,
@@ -3886,7 +4111,7 @@ class Yo {
       connection_id: t.record.connection_id,
       created_at: t.record.created_at,
       updated_at: o
-    }, a = await Je({
+    }, a = await tt({
       vaultPrk: this.vaultPrk,
       recordPrk: this.prkForTier(i.tier),
       record: i,
@@ -3897,7 +4122,7 @@ class Yo {
   }
   /** §CV11 step 2: the encrypted tombstone replacement. */
   async deleteConnection(t, n) {
-    const r = n ?? Math.floor(Date.now() / 1e3), o = Bo(t.record, r), i = await Je({
+    const r = n ?? Math.floor(Date.now() / 1e3), o = ci(t.record, r), i = await tt({
       vaultPrk: this.vaultPrk,
       recordPrk: this.prkForTier(o.tier),
       record: o,
@@ -3908,7 +4133,7 @@ class Yo {
   }
   /** Trial-decrypts one event; personal-tier records resolve only inside a sudo window. */
   decryptEvent(t) {
-    return this.destroyed ? Promise.reject(new Error("This vault session was destroyed; create a new one from the account's root.")) : zo(t, this.vaultPrk, this.personalPrk ?? void 0);
+    return this.destroyed ? Promise.reject(new Error("This vault session was destroyed; create a new one from the account's root.")) : ai(t, this.vaultPrk, this.personalPrk ?? void 0);
   }
   /** §CV11 step 3: a NIP-09 deletion request for a replaced record event,
    *  signed by the vault identity. Best-effort by contract — the encrypted
@@ -3916,18 +4141,18 @@ class Yo {
   buildDeletionRequest(t, n) {
     if (this.destroyed)
       throw new Error("This vault session was destroyed; create a new one from the account's root.");
-    return bn({
-      privateKey: Ee(this.vaultPrk),
+    return Rn({
+      privateKey: Ke(this.vaultPrk),
       eventIdToDelete: t,
-      deletedEventKind: te,
+      deletedEventKind: re,
       createdAt: n ?? Math.floor(Date.now() / 1e3)
     });
   }
   publish(t) {
-    return Ho({ vaultPrk: this.vaultPrk, ...t });
+    return vi({ vaultPrk: this.vaultPrk, ...t });
   }
   fetchEvents(t) {
-    return Jo({ vaultPrk: this.vaultPrk, ...t });
+    return gi({ vaultPrk: this.vaultPrk, ...t });
   }
   /**
    * Fetches and decrypts everything decryptable right now. Outside a sudo
@@ -3955,40 +4180,40 @@ class Yo {
     };
   }
 }
-const Qo = "bitlogin", ae = "kv", Q = "device-keys", Xo = 2;
-function Zo() {
+const bi = "bitlogin", se = "kv", Z = "device-keys", mi = 2;
+function _i() {
   return new Promise((e, t) => {
-    const n = indexedDB.open(Qo, Xo);
+    const n = indexedDB.open(bi, mi);
     n.onupgradeneeded = () => {
       const r = n.result;
-      r.objectStoreNames.contains(ae) || r.createObjectStore(ae), r.objectStoreNames.contains(Q) || r.createObjectStore(Q);
+      r.objectStoreNames.contains(se) || r.createObjectStore(se), r.objectStoreNames.contains(Z) || r.createObjectStore(Z);
     }, n.onsuccess = () => e(n.result), n.onerror = () => t(n.error);
   });
 }
-class ei {
+class ki {
   dbPromise = null;
   db() {
-    return this.dbPromise || (this.dbPromise = Zo()), this.dbPromise;
+    return this.dbPromise || (this.dbPromise = _i()), this.dbPromise;
   }
   async get(t) {
     const n = await this.db();
     return new Promise((r, o) => {
-      const a = n.transaction(ae, "readonly").objectStore(ae).get(t);
+      const a = n.transaction(se, "readonly").objectStore(se).get(t);
       a.onsuccess = () => r(a.result), a.onerror = () => o(a.error);
     });
   }
   async set(t, n) {
     const r = await this.db();
     return new Promise((o, i) => {
-      const a = r.transaction(ae, "readwrite");
-      a.objectStore(ae).put(n, t), a.oncomplete = () => o(), a.onerror = () => i(a.error);
+      const a = r.transaction(se, "readwrite");
+      a.objectStore(se).put(n, t), a.oncomplete = () => o(), a.onerror = () => i(a.error);
     });
   }
   async delete(t) {
     const n = await this.db();
     return new Promise((r, o) => {
-      const i = n.transaction(ae, "readwrite");
-      i.objectStore(ae).delete(t), i.oncomplete = () => r(), i.onerror = () => o(i.error);
+      const i = n.transaction(se, "readwrite");
+      i.objectStore(se).delete(t), i.oncomplete = () => r(), i.onerror = () => o(i.error);
     });
   }
   /**
@@ -3998,7 +4223,7 @@ class ei {
    */
   async getOrCreateDeviceKey(t) {
     const n = await this.db(), r = await new Promise((i, a) => {
-      const c = n.transaction(Q, "readonly").objectStore(Q).get(t);
+      const c = n.transaction(Z, "readonly").objectStore(Z).get(t);
       c.onsuccess = () => i(c.result), c.onerror = () => a(c.error);
     });
     if (r) return r;
@@ -4009,12 +4234,12 @@ class ei {
     );
     try {
       return await new Promise((i, a) => {
-        const c = n.transaction(Q, "readwrite");
-        c.objectStore(Q).add(o, t), c.oncomplete = () => i(), c.onerror = () => a(c.error);
+        const c = n.transaction(Z, "readwrite");
+        c.objectStore(Z).add(o, t), c.oncomplete = () => i(), c.onerror = () => a(c.error);
       }), o;
     } catch {
       const i = await new Promise((a, c) => {
-        const s = n.transaction(Q, "readonly").objectStore(Q).get(t);
+        const s = n.transaction(Z, "readonly").objectStore(Z).get(t);
         s.onsuccess = () => a(s.result), s.onerror = () => c(s.error);
       });
       if (i) return i;
@@ -4024,29 +4249,29 @@ class ei {
   async deleteDeviceKey(t) {
     const n = await this.db();
     return new Promise((r, o) => {
-      const i = n.transaction(Q, "readwrite");
-      i.objectStore(Q).delete(t), i.oncomplete = () => r(), i.onerror = () => o(i.error);
+      const i = n.transaction(Z, "readwrite");
+      i.objectStore(Z).delete(t), i.oncomplete = () => r(), i.onerror = () => o(i.error);
     });
   }
 }
-const Te = "bitlogin:session:v1", Kt = "bitlogin:session-device-key:v1";
-function Dt(e) {
+const Oe = "bitlogin:session:v1", Lt = "bitlogin:session-device-key:v1";
+function Ft(e) {
   let t = "";
   for (const n of e) t += String.fromCharCode(n);
   return btoa(t);
 }
-function Vt(e) {
+function Ht(e) {
   const t = atob(e);
   return Uint8Array.from(t, (n) => n.charCodeAt(0));
 }
-function qt(e) {
+function Jt(e) {
   const t = new Uint8Array(e.byteLength);
   return t.set(e), t.buffer;
 }
-function ti(e) {
+function Ei(e) {
   return !!(e && typeof e == "object" && e.v === 2 && typeof e.iv == "string" && typeof e.ciphertext == "string");
 }
-async function ni(e, t) {
+async function Pi(e, t) {
   const n = {
     everydayPrivateKeyHex: Array.from(t.everydayPrivateKey, (r) => r.toString(16).padStart(2, "0")).join(""),
     accountId: t.accountId,
@@ -4063,34 +4288,34 @@ async function ni(e, t) {
   };
   try {
     if (typeof e.getOrCreateDeviceKey != "function") {
-      await e.delete(Te);
+      await e.delete(Oe);
       return;
     }
-    const r = await e.getOrCreateDeviceKey(Kt), o = crypto.getRandomValues(new Uint8Array(12)), i = new TextEncoder().encode(JSON.stringify(n)), a = await crypto.subtle.encrypt({ name: "AES-GCM", iv: o }, r, i), c = {
+    const r = await e.getOrCreateDeviceKey(Lt), o = crypto.getRandomValues(new Uint8Array(12)), i = new TextEncoder().encode(JSON.stringify(n)), a = await crypto.subtle.encrypt({ name: "AES-GCM", iv: o }, r, i), c = {
       v: 2,
-      iv: Dt(o),
-      ciphertext: Dt(new Uint8Array(a))
+      iv: Ft(o),
+      ciphertext: Ft(new Uint8Array(a))
     };
-    await e.set(Te, JSON.stringify(c));
+    await e.set(Oe, JSON.stringify(c));
   } catch {
   }
 }
-async function ri(e) {
+async function Ki(e) {
   let t;
   try {
-    t = await e.get(Te);
+    t = await e.get(Oe);
   } catch {
     return null;
   }
   if (!t) return null;
   try {
     const n = JSON.parse(t);
-    if (!ti(n) || typeof e.getOrCreateDeviceKey != "function")
-      return await e.delete(Te), null;
-    const r = await e.getOrCreateDeviceKey(Kt), o = await crypto.subtle.decrypt(
-      { name: "AES-GCM", iv: qt(Vt(n.iv)) },
+    if (!Ei(n) || typeof e.getOrCreateDeviceKey != "function")
+      return await e.delete(Oe), null;
+    const r = await e.getOrCreateDeviceKey(Lt), o = await crypto.subtle.decrypt(
+      { name: "AES-GCM", iv: Jt(Ht(n.iv)) },
       r,
-      qt(Vt(n.ciphertext))
+      Jt(Ht(n.ciphertext))
     ), i = JSON.parse(new TextDecoder().decode(o));
     return typeof i.everydayPrivateKeyHex != "string" || typeof i.accountId != "string" || typeof i.recoveryPublicKey != "string" || !i.activeCredentialEvent || !i.activeRecoveryEvent ? null : {
       everydayPrivateKey: Uint8Array.from(
@@ -4113,12 +4338,24 @@ async function ri(e) {
     return null;
   }
 }
-async function oi(e) {
+async function Ri(e) {
   try {
-    await e.delete(Te), typeof e.deleteDeviceKey == "function" && await e.deleteDeviceKey(Kt);
+    await e.delete(Oe), typeof e.deleteDeviceKey == "function" && await e.deleteDeviceKey(Lt);
   } catch {
   }
 }
+class Ai {
+  tail = Promise.resolve();
+  run(t) {
+    const n = this.tail.then(t, t);
+    return this.tail = n.then(
+      () => {
+      },
+      () => {
+      }
+    ), n;
+  }
+}
 const d = {
   signer: null,
   everydayPrivateKey: null,
@@ -4131,21 +4368,21 @@ const d = {
   vaultKnown: !1,
   vault: null
 };
-let U = [...Io], Ye = [...To];
-const X = new ei();
-function ne() {
+let D = [...ni], nt = [...ri];
+const ee = new ki(), xi = new Ai();
+function oe() {
   if (!d.signer || !d.everydayPrivateKey)
     throw new Error("No identity is unlocked in this session.");
   return { signer: d.signer, everydayPrivateKey: d.everydayPrivateKey };
 }
-function Ke() {
+function Ae() {
   d.signer?.destroy(), d.everydayPrivateKey && d.everydayPrivateKey.fill(0), d.signer = null, d.everydayPrivateKey = null, d.accountId = null, d.recoveryPublicKey = null, d.activeCredentialEvent = null, d.activeRecoveryEvent = null, d.vault?.destroy(), d.vault = null, d.connectionVaultRoot && d.connectionVaultRoot.fill(0), d.connectionVaultRoot = null, d.vaultKnown = !1, d.pendingRecovery && (d.pendingRecovery.recoveryPrivateKey.fill(0), d.pendingRecovery.everydayPrivateKey.fill(0), d.pendingRecovery = null);
 }
-function Qe(e, t) {
-  d.connectionVaultRoot = e ?? null, d.vaultKnown = !0, d.vault = null, t && ge(t);
+function rt(e, t) {
+  d.connectionVaultRoot = e ?? null, d.vaultKnown = !0, d.vault = null, t && x(t);
 }
-async function Oe() {
-  !d.everydayPrivateKey || !d.accountId || !d.recoveryPublicKey || !d.activeCredentialEvent || !d.activeRecoveryEvent || await ni(X, {
+async function Ve() {
+  !d.everydayPrivateKey || !d.accountId || !d.recoveryPublicKey || !d.activeCredentialEvent || !d.activeRecoveryEvent || await Pi(ee, {
     everydayPrivateKey: d.everydayPrivateKey,
     accountId: d.accountId,
     recoveryPublicKey: d.recoveryPublicKey,
@@ -4155,22 +4392,22 @@ async function Oe() {
     ...d.vaultKnown ? { vaultEnabled: d.connectionVaultRoot !== null } : {}
   });
 }
-function Re() {
+function xe() {
   try {
     return new URL(self.location.href).origin;
   } catch {
     return "";
   }
 }
-function ot() {
+function dt() {
   if (!d.signer) throw new Error("No identity is unlocked in this session.");
   if (!d.connectionVaultRoot)
     throw new Error(
       d.vaultKnown ? "This account predates the Connection Vault. Enable it from your BitLogin account manager (recovery phrase required)." : "Sign in again to use wallet connections on this device."
     );
-  return d.vault ??= new Yo(d.connectionVaultRoot.slice()), d.vault;
+  return d.vault ??= new wi(d.connectionVaultRoot.slice()), d.vault;
 }
-function Ae(e) {
+function Ce(e) {
   const { record: t } = e, n = {
     connectionId: t.connection_id,
     connectionType: t.connection_type,
@@ -4186,28 +4423,31 @@ function Ae(e) {
   }
   return n;
 }
-async function Ve() {
-  const e = ot(), t = await e.listConnections({ relayUrls: U, store: X });
+async function je() {
+  const e = dt(), t = await e.listConnections({ relayUrls: D, store: ee });
   return {
     vault: e,
     connections: t.connections.filter((n) => n.record.state !== "deleted"),
-    rollbackWarnings: t.rollbackWarnings
+    rollbackWarnings: t.rollbackWarnings,
+    unreadable: t.unreadable,
+    truncated: t.truncated,
+    quorumMet: t.quorumMet
   };
 }
-async function Xe(e) {
-  const { vault: t, connections: n } = await Ve(), r = n.find((o) => o.record.connection_id === e);
+async function ot(e) {
+  const { vault: t, connections: n } = await je(), r = n.find((o) => o.record.connection_id === e);
   if (!r) throw new Error("That connection no longer exists.");
   return { vault: t, connection: r };
 }
-async function ii(e, t) {
+async function Ci(e, t) {
   switch (e) {
     case "configure": {
       const n = t;
-      return n.vaultRelayUrls?.length && (U = n.vaultRelayUrls), n.discoveryRelayUrls?.length && (Ye = n.discoveryRelayUrls), {};
+      return n.vaultRelayUrls?.length && (D = n.vaultRelayUrls), n.discoveryRelayUrls?.length && (nt = n.discoveryRelayUrls), {};
     }
     case "register": {
-      const n = t, r = n.importKey ? await Yr({ nsecOrHex: n.importKey, loginName: n.loginName, password: n.password, vaultRelayUrls: U }) : await fn({ loginName: n.loginName, password: n.password, vaultRelayUrls: U });
-      return Ke(), d.signer = new Ue(r.everydayPrivateKey), d.everydayPrivateKey = r.everydayPrivateKey, d.accountId = r.accountId, d.recoveryPublicKey = r.recoveryPublicKey, d.activeCredentialEvent = r.credentialEvent, d.activeRecoveryEvent = r.recoveryEvent, Qe(r.connectionVaultRoot, r.vaultSudoKey), await Oe(), {
+      const n = t, r = n.importKey ? await co({ nsecOrHex: n.importKey, loginName: n.loginName, password: n.password, vaultRelayUrls: D }) : await En({ loginName: n.loginName, password: n.password, vaultRelayUrls: D });
+      return Ae(), d.signer = new De(r.everydayPrivateKey), d.everydayPrivateKey = r.everydayPrivateKey, d.accountId = r.accountId, d.recoveryPublicKey = r.recoveryPublicKey, d.activeCredentialEvent = r.credentialEvent, d.activeRecoveryEvent = r.recoveryEvent, rt(r.connectionVaultRoot, r.vaultSudoKey), await Ve(), {
         recoveryPhrase: r.recoveryPhrase,
         everydayPublicKey: r.everydayPublicKey,
         recoveryPublicKey: r.recoveryPublicKey,
@@ -4218,18 +4458,18 @@ async function ii(e, t) {
       };
     }
     case "previewImportKey": {
-      const r = gn(t.nsecOrHex), o = _(r), i = { everydayPublicKey: o, npub: Ct(o) };
+      const r = Pn(t.nsecOrHex), o = k(r), i = { everydayPublicKey: o, npub: Ut(o) };
       return r.fill(0), i;
     }
     case "login": {
-      const n = t, r = await Qr({
+      const n = t, r = await so({
         loginName: n.loginName,
         password: n.password,
-        vaultRelayUrls: U,
-        store: X,
+        vaultRelayUrls: D,
+        store: ee,
         acknowledgeRollback: n.acknowledgeRollback
       });
-      return Ke(), d.signer = new Ue(r.everydayPrivateKey), d.everydayPrivateKey = r.everydayPrivateKey, d.accountId = r.accountId, d.recoveryPublicKey = r.recoveryPublicKey, d.activeCredentialEvent = r.credentialEvent, d.activeRecoveryEvent = r.recoveryCapsuleEvent, Qe(r.connectionVaultRoot, r.vaultSudoKey), await Oe(), {
+      return Ae(), d.signer = new De(r.everydayPrivateKey), d.everydayPrivateKey = r.everydayPrivateKey, d.accountId = r.accountId, d.recoveryPublicKey = r.recoveryPublicKey, d.activeCredentialEvent = r.credentialEvent, d.activeRecoveryEvent = r.recoveryCapsuleEvent, rt(r.connectionVaultRoot, r.vaultSudoKey), await Ve(), {
         everydayPublicKey: r.everydayPublicKey,
         accountId: r.accountId,
         generation: r.generation,
@@ -4238,14 +4478,14 @@ async function ii(e, t) {
       };
     }
     case "recover": {
-      const n = t, r = await Xr({
+      const n = t, r = await lo({
         phrase: n.phrase,
-        vaultRelayUrls: U,
-        discoveryRelayUrls: Ye,
+        vaultRelayUrls: D,
+        discoveryRelayUrls: nt,
         offlineRecoveryCapsuleEvents: n.offlineExportFile?.recovery_capsule_events
       });
-      return Ke(), d.pendingRecovery = r, d.signer = new Ue(r.everydayPrivateKey), d.everydayPrivateKey = r.everydayPrivateKey, d.accountId = r.accountId, d.recoveryPublicKey = r.recoveryPublicKey, d.activeRecoveryEvent = r.currentRecoveryEvent, Qe(
-        r.currentRecoveryPayload.connection_vault_root ? J(r.currentRecoveryPayload.connection_vault_root) : void 0
+      return Ae(), d.pendingRecovery = r, d.signer = new De(r.everydayPrivateKey), d.everydayPrivateKey = r.everydayPrivateKey, d.accountId = r.accountId, d.recoveryPublicKey = r.recoveryPublicKey, d.activeRecoveryEvent = r.currentRecoveryEvent, rt(
+        r.currentRecoveryPayload.connection_vault_root ? X(r.currentRecoveryPayload.connection_vault_root) : void 0
       ), {
         everydayPublicKey: r.everydayPublicKey,
         accountId: r.accountId,
@@ -4257,29 +4497,29 @@ async function ii(e, t) {
     case "completeRecovery": {
       const n = t;
       if (!d.pendingRecovery) throw new Error("No recovery is in progress in this session.");
-      const r = await Zr({
+      const r = await uo({
         recovered: d.pendingRecovery,
         newLoginName: n.newLoginName,
         newPassword: n.newPassword,
-        vaultRelayUrls: U,
-        store: X
+        vaultRelayUrls: D,
+        store: ee
       });
-      return d.activeCredentialEvent = r.credentialEvent, d.activeRecoveryEvent = r.refreshedRecoveryEvent, d.pendingRecovery.recoveryPrivateKey.fill(0), d.pendingRecovery = null, await Oe(), {
+      return d.activeCredentialEvent = r.credentialEvent, d.activeRecoveryEvent = r.refreshedRecoveryEvent, d.pendingRecovery.recoveryPrivateKey.fill(0), d.pendingRecovery = null, await Ve(), {
         locatorPublicKey: r.locatorPublicKey,
         credentialEventId: r.credentialEvent.id,
         refreshedRecoveryEventId: r.refreshedRecoveryEvent.id
       };
     }
     case "changePassword": {
-      const n = t, r = await eo({
+      const n = t, r = await yo({
         loginName: n.loginName,
         oldPassword: n.oldPassword,
         newPassword: n.newPassword,
-        vaultRelayUrls: U,
-        store: X,
+        vaultRelayUrls: D,
+        store: ee,
         acknowledgeRollback: n.acknowledgeRollback
       });
-      return d.activeCredentialEvent = r.newCredentialEvent, d.recoveryPublicKey = r.recoveryPublicKey, d.activeRecoveryEvent = r.recoveryCapsuleEvent, await Oe(), {
+      return d.activeCredentialEvent = r.newCredentialEvent, d.recoveryPublicKey = r.recoveryPublicKey, d.activeRecoveryEvent = r.recoveryCapsuleEvent, await Ve(), {
         newLocatorPublicKey: r.newLocatorPublicKey,
         newGeneration: r.newGeneration,
         tombstoneAcknowledgedCount: r.tombstoneAcknowledgedCount,
@@ -4287,51 +4527,51 @@ async function ii(e, t) {
       };
     }
     case "publishProfileAndRelayLists": {
-      const n = t, { everydayPrivateKey: r } = ne();
-      return mr({
+      const n = t, { everydayPrivateKey: r } = oe();
+      return Ir({
         everydayPrivateKey: r,
         name: n.name,
         about: n.about,
         picture: n.picture,
         generalRelays: n.generalRelays,
         dmRelays: n.dmRelays,
-        discoveryRelays: Ye
+        discoveryRelays: nt
       });
     }
     case "getPublicKey": {
-      const { signer: n } = ne();
+      const { signer: n } = oe();
       return { publicKey: n.getPublicKey() };
     }
     case "signEvent": {
-      const { signer: n } = ne(), r = t;
+      const { signer: n } = oe(), r = t;
       return n.signEvent({ kind: r.kind, tags: r.tags, content: r.content, created_at: r.created_at });
     }
     case "nip44Encrypt": {
-      const { signer: n } = ne(), r = t;
+      const { signer: n } = oe(), r = t;
       return { ciphertext: n.nip44Encrypt(r.peerPublicKey, r.plaintext) };
     }
     case "nip44Decrypt": {
-      const { signer: n } = ne(), r = t;
+      const { signer: n } = oe(), r = t;
       return { plaintext: n.nip44Decrypt(r.peerPublicKey, r.payload) };
     }
     case "nip04Encrypt": {
-      const { signer: n } = ne(), r = t;
+      const { signer: n } = oe(), r = t;
       return { ciphertext: n.nip04Encrypt(r.peerPublicKey, r.plaintext) };
     }
     case "nip04Decrypt": {
-      const { signer: n } = ne(), r = t;
+      const { signer: n } = oe(), r = t;
       return { plaintext: n.nip04Decrypt(r.peerPublicKey, r.payload) };
     }
     case "exportIdentity": {
-      const { everydayPrivateKey: n, signer: r } = ne();
-      return { nsec: ur(n), npub: Ct(r.getPublicKey()) };
+      const { everydayPrivateKey: n, signer: r } = oe();
+      return { nsec: mr(n), npub: Ut(r.getPublicKey()) };
     }
     case "buildRecoveryExport": {
-      if (ne(), !d.recoveryPublicKey || !d.activeRecoveryEvent)
+      if (oe(), !d.recoveryPublicKey || !d.activeRecoveryEvent)
         throw new Error("No recovery capsule is known in this session yet.");
-      return lr({
+      return br({
         recoveryPublicKeyHex: d.recoveryPublicKey,
-        vaultRelayUrls: U,
+        vaultRelayUrls: D,
         recoveryCapsuleEvents: [d.activeRecoveryEvent],
         relayListEvents: []
       });
@@ -4339,7 +4579,7 @@ async function ii(e, t) {
     case "repairReplicas": {
       if (!d.activeCredentialEvent || !d.activeRecoveryEvent)
         throw new Error("No active capsule events are known in this session yet.");
-      const n = new C(U), r = await Mr(n, d.activeCredentialEvent, d.activeRecoveryEvent);
+      const n = new C(D), r = await Hr(n, d.activeCredentialEvent, d.activeRecoveryEvent);
       return n.closeAll(), r;
     }
     case "getSessionStatus":
@@ -4350,20 +4590,20 @@ async function ii(e, t) {
     // corrupt cache is not an error: it just means the widget falls through to its
     // normal welcome screen, exactly like it always has.
     case "restoreSession": {
-      const n = await ri(X);
-      return n ? (Ke(), d.signer = new Ue(n.everydayPrivateKey), d.everydayPrivateKey = n.everydayPrivateKey, d.accountId = n.accountId, d.recoveryPublicKey = n.recoveryPublicKey, d.activeCredentialEvent = n.activeCredentialEvent, d.activeRecoveryEvent = n.activeRecoveryEvent, d.connectionVaultRoot = n.connectionVaultRoot ?? null, d.vaultKnown = n.vaultEnabled !== void 0, { restored: !0, everydayPublicKey: d.signer.getPublicKey(), accountId: n.accountId }) : { restored: !1 };
+      const n = await Ki(ee);
+      return n ? (Ae(), d.signer = new De(n.everydayPrivateKey), d.everydayPrivateKey = n.everydayPrivateKey, d.accountId = n.accountId, d.recoveryPublicKey = n.recoveryPublicKey, d.activeCredentialEvent = n.activeCredentialEvent, d.activeRecoveryEvent = n.activeRecoveryEvent, d.connectionVaultRoot = n.connectionVaultRoot ?? null, d.vaultKnown = n.vaultEnabled !== void 0, { restored: !0, everydayPublicKey: d.signer.getPublicKey(), accountId: n.accountId }) : { restored: !1 };
     }
     case "logout":
-      return Ke(), await oi(X), {};
+      return Ae(), await Ri(ee), {};
     // ---- Connection Vault (connection-vault.md §12, reveal mode) ----
     case "vaultStatus":
-      return d.signer ? d.connectionVaultRoot ? { enabled: !0, vaultPublicKey: ot().vaultPublicKey } : { enabled: !1, reason: d.vaultKnown ? "no-vault" : "stale-cache" } : { enabled: !1 };
+      return d.signer ? d.connectionVaultRoot ? { enabled: !0, vaultPublicKey: dt().vaultPublicKey } : { enabled: !1, reason: d.vaultKnown ? "no-vault" : "stale-cache" } : { enabled: !1 };
     case "vaultList": {
-      const { connections: n, rollbackWarnings: r } = await Ve();
-      return { connections: n.map(Ae), rollbackWarnings: r };
+      const { connections: n, rollbackWarnings: r, unreadable: o, truncated: i, quorumMet: a } = await je();
+      return { connections: n.map(Ce), rollbackWarnings: r, unreadable: o, truncated: i, quorumMet: a };
     }
     case "vaultSaveNwc": {
-      const n = t, r = Re(), o = ot(), i = Ot(n.uri), a = n.label.trim().slice(0, 120) || "Wallet connection", { record: c, event: s } = await o.createConnection({
+      const n = t, r = xe(), o = dt(), i = Bt(n.uri), a = n.label.trim().slice(0, 120) || "Wallet connection", { record: c, event: s } = await o.createConnection({
         connection_type: "nwc",
         tier: "connectable",
         label: a,
@@ -4373,68 +4613,68 @@ async function ii(e, t) {
       if (!(await o.publish({
         event: s,
         connectionId: c.connection_id,
-        relayUrls: U,
-        store: X
+        relayUrls: D,
+        store: ee
       })).success)
         throw new Error("The connection could not be saved to enough relays. Please try again.");
       const u = await o.decryptEvent(s);
-      return Ae(u);
+      return Ce(u);
     }
     case "vaultFindForOrigin": {
-      const n = Re(), { connections: r } = await Ve(), o = r.find(
+      const n = xe(), { connections: r } = await je(), o = r.find(
         (i) => i.record.connection_type === "nwc" && i.record.state === "active" && i.record.application_binding.origin === n
       );
-      return { connection: o ? Ae(o) : null };
+      return { connection: o ? Ce(o) : null };
     }
     case "vaultRevealNwc": {
-      const n = t, { connection: r } = await Xe(n.connectionId);
+      const n = t, { connection: r } = await ot(n.connectionId);
       if (r.record.connection_type !== "nwc" || r.record.state !== "active")
         throw new Error("That connection is not an active wallet connection.");
       const o = r.record.application_binding.origin;
-      if (o !== null && o !== Re())
+      if (o !== null && o !== xe())
         throw new Error("That connection belongs to a different site.");
       const i = r.record.credential;
-      return qn(i), { uri: Go(i) };
+      return Hn(i), { uri: si(i) };
     }
     case "vaultSetBinding": {
-      const n = t, { vault: r, connection: o } = await Xe(n.connectionId), i = n.origin === null ? null : Re(), { record: a, event: c } = await r.updateConnection(o, {
+      const n = t, { vault: r, connection: o } = await ot(n.connectionId), i = n.origin === null ? null : xe(), { record: a, event: c } = await r.updateConnection(o, {
         application_binding: { origin: i, app_pubkey: null }
       });
       if (!(await r.publish({
         event: c,
         connectionId: a.connection_id,
-        relayUrls: U,
-        store: X
+        relayUrls: D,
+        store: ee
       })).success) throw new Error("The change could not reach enough relays. Please try again.");
       const l = await r.decryptEvent(c);
-      return Ae(l);
+      return Ce(l);
     }
     case "vaultDelete": {
-      const n = t, { vault: r, connection: o } = await Xe(n.connectionId), { record: i, event: a } = await r.deleteConnection(o);
+      const n = t, { vault: r, connection: o } = await ot(n.connectionId), { record: i, event: a } = await r.deleteConnection(o);
       if (!(await r.publish({
         event: a,
         connectionId: i.connection_id,
-        relayUrls: U,
-        store: X
+        relayUrls: D,
+        store: ee
       })).success) throw new Error("The deletion could not reach enough relays. Please try again.");
       try {
-        const s = r.buildDeletionRequest(o.event.id), l = new C(U);
+        const s = r.buildDeletionRequest(o.event.id), l = new C(D);
         await l.publishAll(s), l.closeAll();
       } catch {
       }
       return {};
     }
     case "vaultOfferCheck": {
-      const n = t, r = Re(), o = Ot(n.uri), { connections: i } = await Ve(), a = i.find(
-        (c) => c.record.connection_type === "nwc" && Fo(c.record.credential, o)
+      const n = t, r = xe(), o = Bt(n.uri), { connections: i } = await je(), a = i.find(
+        (c) => c.record.connection_type === "nwc" && li(c.record.credential, o)
       );
-      return a ? a.record.application_binding.origin !== r ? { duplicate: !1 } : { duplicate: !0, connection: Ae(a) } : { duplicate: !1 };
+      return a ? a.record.application_binding.origin !== r ? { duplicate: !1 } : { duplicate: !0, connection: Ce(a) } : { duplicate: !1 };
     }
     default:
       throw new Error(`Unknown worker action: ${e}`);
   }
 }
-const ai = /* @__PURE__ */ new Set([
+const Ni = /* @__PURE__ */ new Set([
   "configure",
   "register",
   "previewImportKey",
@@ -4467,7 +4707,7 @@ const ai = /* @__PURE__ */ new Set([
 self.addEventListener("message", (e) => {
   const t = e.data;
   if (!t || typeof t != "object" || typeof t.id != "string") return;
-  if (typeof t.action != "string" || !ai.has(t.action)) {
+  if (typeof t.action != "string" || !Ni.has(t.action)) {
     const i = {
       id: t.id,
       ok: !1,
@@ -4478,7 +4718,7 @@ self.addEventListener("message", (e) => {
     return;
   }
   const { id: n, action: r, payload: o } = e.data;
-  ii(r, o).then(
+  xi.run(() => Ci(r, o)).then(
     (i) => {
       const a = { id: n, ok: !0, result: i };
       self.postMessage(a);