@dfx.swiss/wallet 0.0.0-stage → 0.1.1-beta.0

package/dist/passkey/ceremonies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ceremonies.js","sourceRoot":"","sources":["../../src/passkey/ceremonies.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAe,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EACL,uBAAuB,EACvB,4BAA4B,EAC5B,oBAAoB,EACpB,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,0BAA0B,EAC1B,gBAAgB,GACjB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAmD,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAoDtH,MAAM,UAAU,GAAG,MAAO,CAAC;AAC3B,MAAM,WAAW,GAAoC;IACnD,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE;IAC/B,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE;CAClC,CAAC;AAEF,SAAS,IAAI,CAAC,KAAsC;IAClD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC7C,GAAG,CAAC,GAAG,CACL,KAAK,YAAY,WAAW;QAC1B,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC;QACvB,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CACrE,CAAC;IACF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mGAAmG;AACnG,SAAS,MAAM,CAAC,KAAiB;IAC/B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACf,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,UAA+B;IACnD,MAAM,OAAO,GAAG,UAAU,CAAC,yBAAyB,EAAsB,CAAC;IAC3E,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC;IAC1C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC;AAED,SAAS,WAAW,CAAC,iBAA0C;IAC7D,MAAM,KAAK,GAAG,iBAAiB,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,EAAE,CAAC;IACvF,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,OAAO,EAAE,cAAc,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;AAClF,CAAC;AAED,SAAS,eAAe,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE;IACvC,MAAM,GAAG,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtE,OAAO,cAAc,GAAG,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;AAC5I,CAAC;AAED,gHAAgH;AAChH,SAAS,kBAAkB;IACzB,MAAM,WAAW,GAAI,UAAoF,CAAC,SAAS;QACjH,EAAE,WAAW,CAAC;IAChB,IAAI,OAAO,WAAW,EAAE,MAAM,KAAK,UAAU,IAAI,OAAO,WAAW,EAAE,GAAG,KAAK,UAAU,EAAE,CAAC;QACxF,OAAO,WAAkC,CAAC;IAC5C,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;AAC7D,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,iBAAiB;IAG5B,YACmB,GAAc,EACd,cAAmC,kBAAkB,EAAE,EACvD,MAAuB,UAAwC,IAAI;QAClF,QAAQ,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;QAC1B,SAAS,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;KAC7B;QALgB,QAAG,GAAH,GAAG,CAAW;QACd,gBAAW,GAAX,WAAW,CAA4C;QACvD,QAAG,GAAH,GAAG,CAGnB;QARc,SAAI,GAAG,IAAI,YAAY,EAAE,CAAC;IASxC,CAAC;IAEJ,gHAAgH;IAChH,KAAK,CAAC,gBAAgB,CAAC,KAGtB;QACC,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC7B,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;QACvC,MAAM,OAAO,GAA8B;YACzC,SAAS,EAAE;gBACT,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;gBAClC,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE;gBACzC,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE;gBACrD,gBAAgB,EAAE,WAAW;gBAC7B,sBAAsB,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,kBAAkB,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE;gBAC3G,WAAW,EAAE,MAAM;gBACnB,OAAO,EAAE,UAAU;gBACnB,kBAAkB,EAAE,CAAC,KAAK,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;oBAClE,IAAI,EAAE,YAAqB;oBAC3B,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC;iBACf,CAAC,CAAC;gBACH,UAAU,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,EAAqB;aAC1E;SACF,CAAC;QAEF,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC/G,MAAM,UAAU,GAAG,MAAM,CAAC;QAC1B,IAAI,CAAC;YACH,GAAG,CAAC,YAAY,EAAE,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,UAAU;gBAAE,MAAM,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3E,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,0CAA0C,CAAC,CAAC;QAErG,MAAM,aAAa,GAAG,UAAU,CAAC,uBAAuB,CAAC;QACzD,MAAM,UAAU,GACd,aAAa,KAAK,UAAU,IAAI,aAAa,KAAK,gBAAgB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5F,MAAM,UAAU,GACZ,UAAU,CAAC,QAA6C,CAAC,aAAa,EAAE,EAA2B,IAAI,EAAE,CAAC;QAC9G,IAAI,UAAU,KAAK,gBAAgB,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3D,MAAM,IAAI,4BAA4B,EAAE,CAAC;QAC3C,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC5C,iGAAiG;QACjG,MAAM,UAAU,GAAG,MAAM,CAAC;QAC1B,MAAM,WAAW,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACjD,MAAM,aAAa,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;QAE/C,MAAM,SAAS,GAAG,CAAC,EAAc,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAC1E,MAAM,aAAa,GAAG,CAAC,EAAc,EAAE,EAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC;QAC3E,OAAO;YACL,YAAY;YACZ,KAAK,CAAC,OAAO;gBACX,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,mBAAmB,EAAE,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,CAAC;gBACrF,IAAI,aAAa,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,CAAC;oBAC3D,MAAM,aAAa,CAAC,YAAY,CAAC,CAAC;oBAClC,MAAM,IAAI,gBAAgB,EAAE,CAAC;gBAC/B,CAAC;gBACD,OAAO;oBACL,YAAY;oBACZ,UAAU;oBACV,WAAW;oBACX,SAAS,EAAE,gBAAgB,CAAC,mBAAmB,CAAC;oBAChD,SAAS;oBACT,UAAU;oBACV,UAAU;iBACX,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,KAAK;gBACT,MAAM,aAAa,CAAC,YAAY,CAAC,CAAC;YACpC,CAAC;SACF,CAAC;IACJ,CAAC;IAED;6FACyF;IACzF,KAAK,CAAC,MAAM,CAAC,KAIZ;QACC,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,gBAAgB;YAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEtD,MAAM,OAAO,GAA6B;YACxC,SAAS,EAAE;gBACT,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;gBACrD,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;gBACtB,gBAAgB,EAAE,UAAU;gBAC5B,OAAO,EAAE,UAAU;gBACnB,GAAG,CAAC,KAAK,CAAC,YAAY;oBACpB,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,IAAI,EAAE,YAAqB,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE;oBACzF,CAAC,CAAC,EAAE,CAAC;gBACP,UAAU,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,EAAqB;aAC1E;SACF,CAAC;QAEF,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5G,GAAG,CAAC,YAAY,EAAE,CAAC;QACnB,MAAM,UAAU,GAAG,MAAM,CAAC;QAC1B,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,YAAY,CAAC,eAAe,EAAE,yCAAyC,CAAC,CAAC;QAEpG,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YACpC,SAAS,EAAE,gBAAgB,CAAC,UAAU,CAAC;YACvC,SAAS,EAAE,YAAY,CAAC,UAAU,CAAC;YACnC,GAAG,WAAW,CAAE,UAAU,CAAC,QAA2C,CAAC,iBAAiB,CAAC;SAC1F,CAAC;IACJ,CAAC;IAED,4FAA4F;IAC5F,KAAK,CAAC,uBAAuB,CAAC,YAAwB;QACpD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,uBAAuB,EAAE,CAAC;gBAC5D,YAAY,EAAE,gBAAgB,CAAC,YAAY,CAAC;gBAC5C,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;aACvB,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;QACtE,CAAC;IACH,CAAC;IAED,kEAAkE;IAClE,MAAM;QACJ,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;IAC3B,CAAC;IAED;wGACoG;IAC5F,KAAK,CAAC,SAAS,CACrB,YAAwB,EACxB,SAAqB;QAErB,MAAM,OAAO,GAA6B;YACxC,SAAS,EAAE;gBACT,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC;gBAC5B,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;gBACtB,gBAAgB,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;gBACpE,gBAAgB,EAAE,UAAU;gBAC5B,OAAO,EAAE,UAAU;gBACnB,UAAU,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,EAAqB;aAC1E;SACF,CAAC;QACF,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5G,GAAG,CAAC,YAAY,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5D,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC;YACjD,MAAM,IAAI,mBAAmB,EAAE,CAAC;QAClC,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;IAC3C,CAAC;IAED,oGAAoG;IAC5F,KAAK,CAAC,IAAI,CAChB,MAAuD;QAEvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;QAC/B,MAAM,WAAW,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACxF,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,eAAe,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAEnE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAChD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE;gBAAE,MAAM,IAAI,uBAAuB,EAAE,CAAC;YAC1D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,UAAU,CAAqC,OAAU,EAAE,MAA+B;QAChG,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;IACnD,CAAC;IAEO,qBAAqB;QAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3E,CAAC;QACD,sGAAsG;QACtG,IAAI,CAAC;YACH,MAAM,GAAG,GAAI,IAAI,CAAC,GAAoC,CAAC,GAAG,CAAC;YAC3D,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,oBAAoB,EAAE,CAAC;QAC9E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,oBAAoB;gBAAE,MAAM,KAAK,CAAC;YACvD,MAAM,IAAI,oBAAoB,EAAE,CAAC;QACnC,CAAC;IACH,CAAC;IAEO,iBAAiB;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC;QACrD,IAAI,UAAU,IAAI,CAAC,UAAU,CAAC,QAAQ;YAAE,MAAM,IAAI,0BAA0B,EAAE,CAAC;IACjF,CAAC;CACF"}

package/dist/passkey/ceremony-gate.d.ts

@@ -0,0 +1,25 @@
+/** One ceremony at a time: a run ticket that goes stale when a newer ceremony begins. */
+export interface CeremonyRun {
+    readonly id: number;
+    /** Whether this run is still the newest one. */
+    isCurrent(): boolean;
+    /** Throws `CeremonySupersededError` when a newer ceremony has begun. */
+    checkCurrent(): void;
+    /** Marks the run as finished; stale runs may finish silently. */
+    finish(): void;
+}
+/**
+ * Serializes the wallet's passkey ceremonies: beginning a new run supersedes the previous one, and
+ * `cancelActive()` supersedes without starting anything new (§6). Cancel handlers run synchronously —
+ * they abort the underlying WebAuthn call where the platform allows an AbortSignal.
+ */
+export declare class CeremonyGate {
+    private next;
+    private current?;
+    private readonly cancelHandlers;
+    /** Begins a new run, superseding the previous one. */
+    begin(onCancel?: () => void): CeremonyRun;
+    /** Supersedes the active run, if any, without starting a new one. */
+    cancelActive(): void;
+}
+//# sourceMappingURL=ceremony-gate.d.ts.map

package/dist/passkey/ceremony-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ceremony-gate.d.ts","sourceRoot":"","sources":["../../src/passkey/ceremony-gate.ts"],"names":[],"mappings":"AAEA,yFAAyF;AACzF,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,gDAAgD;IAChD,SAAS,IAAI,OAAO,CAAC;IACrB,wEAAwE;IACxE,YAAY,IAAI,IAAI,CAAC;IACrB,iEAAiE;IACjE,MAAM,IAAI,IAAI,CAAC;CAChB;AAED;;;;GAIG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,IAAI,CAAK;IACjB,OAAO,CAAC,OAAO,CAAC,CAAS;IACzB,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAsC;IAErE,sDAAsD;IACtD,KAAK,CAAC,QAAQ,CAAC,EAAE,MAAM,IAAI,GAAG,WAAW;IAmBzC,qEAAqE;IACrE,YAAY,IAAI,IAAI;CAQrB"}

package/dist/passkey/ceremony-gate.js

@@ -0,0 +1,45 @@
+import { CeremonySupersededError } from './errors';
+/**
+ * Serializes the wallet's passkey ceremonies: beginning a new run supersedes the previous one, and
+ * `cancelActive()` supersedes without starting anything new (§6). Cancel handlers run synchronously —
+ * they abort the underlying WebAuthn call where the platform allows an AbortSignal.
+ */
+export class CeremonyGate {
+    constructor() {
+        this.next = 0;
+        this.cancelHandlers = new Map();
+    }
+    /** Begins a new run, superseding the previous one. */
+    begin(onCancel) {
+        this.cancelActive();
+        const id = ++this.next;
+        this.current = id;
+        if (onCancel)
+            this.cancelHandlers.set(id, new Set([onCancel]));
+        return {
+            id,
+            isCurrent: () => this.current === id,
+            checkCurrent: () => {
+                if (this.current !== id)
+                    throw new CeremonySupersededError();
+            },
+            finish: () => {
+                this.cancelHandlers.delete(id);
+                if (this.current === id)
+                    this.current = undefined;
+            },
+        };
+    }
+    /** Supersedes the active run, if any, without starting a new one. */
+    cancelActive() {
+        const id = this.current;
+        if (id === undefined)
+            return;
+        this.current = undefined;
+        const handlers = this.cancelHandlers.get(id);
+        this.cancelHandlers.delete(id);
+        for (const handler of handlers ?? [])
+            handler();
+    }
+}
+//# sourceMappingURL=ceremony-gate.js.map

package/dist/passkey/ceremony-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ceremony-gate.js","sourceRoot":"","sources":["../../src/passkey/ceremony-gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AAanD;;;;GAIG;AACH,MAAM,OAAO,YAAY;IAAzB;QACU,SAAI,GAAG,CAAC,CAAC;QAEA,mBAAc,GAAG,IAAI,GAAG,EAA2B,CAAC;IA+BvE,CAAC;IA7BC,sDAAsD;IACtD,KAAK,CAAC,QAAqB;QACzB,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,IAAI,QAAQ;YAAE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAE/D,OAAO;YACL,EAAE;YACF,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,EAAE;YACpC,YAAY,EAAE,GAAG,EAAE;gBACjB,IAAI,IAAI,CAAC,OAAO,KAAK,EAAE;oBAAE,MAAM,IAAI,uBAAuB,EAAE,CAAC;YAC/D,CAAC;YACD,MAAM,EAAE,GAAG,EAAE;gBACX,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC/B,IAAI,IAAI,CAAC,OAAO,KAAK,EAAE;oBAAE,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;YACpD,CAAC;SACF,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,YAAY;QACV,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QACxB,IAAI,EAAE,KAAK,SAAS;YAAE,OAAO;QAC7B,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/B,KAAK,MAAM,OAAO,IAAI,QAAQ,IAAI,EAAE;YAAE,OAAO,EAAE,CAAC;IAClD,CAAC;CACF"}

package/dist/passkey/credential-cache.d.ts

@@ -0,0 +1,38 @@
+import type { SeedPublicData } from '../derivation/public-data';
+/** Public, non-secret per-credential record cached per origin after a server-verified seed check (§11.4). */
+export interface CachedPasskeyCredential {
+    /** Credential id, base64url. */
+    credentialId: string;
+    rpId: string;
+    state: 'pending' | 'active' | 'revoked';
+    seedCheckAddress?: string;
+    publicData?: SeedPublicData;
+    backupEligible?: boolean;
+    backupSeen?: boolean;
+    createdAt: number;
+}
+/** Storage abstraction: the browser's `localStorage`, or anything with the same shape in tests. */
+export interface CredentialStorage {
+    getItem(key: string): string | null;
+    setItem(key: string, value: string): void;
+    removeItem(key: string): void;
+}
+/**
+ * The credential list of one RP ID in `localStorage` (`dfx.wallet.credentials.v1`): public data only —
+ * never PRF bytes, mnemonics or signatures. Written after a server-verified seed check; feeds
+ * `excludeCredentials` with every non-revoked credential id.
+ */
+export declare class CredentialCache {
+    private readonly rpId;
+    private readonly key;
+    private storage;
+    constructor(storage?: CredentialStorage, key?: string, rpId?: string);
+    list(): CachedPasskeyCredential[];
+    put(entry: CachedPasskeyCredential): void;
+    update(credentialId: string, patch: Partial<Omit<CachedPasskeyCredential, 'credentialId' | 'rpId'>>): void;
+    remove(credentialId: string): void;
+    /** Credential ids that must not be created again: everything not revoked. */
+    activeIds(): string[];
+    private write;
+}
+//# sourceMappingURL=credential-cache.d.ts.map

package/dist/passkey/credential-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-cache.d.ts","sourceRoot":"","sources":["../../src/passkey/credential-cache.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAEhE,6GAA6G;AAC7G,MAAM,WAAW,uBAAuB;IACtC,gCAAgC;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;IACxC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,mGAAmG;AACnG,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACpC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAeD;;;;GAIG;AACH,qBAAa,eAAe;IAOxB,OAAO,CAAC,QAAQ,CAAC,IAAI;IANvB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,OAAO,CAAoB;gBAGjC,OAAO,GAAE,iBAAoC,EAC7C,GAAG,SAA8B,EAChB,IAAI,GAAE,MAAW;IAMpC,IAAI,IAAI,uBAAuB,EAAE;IAWjC,GAAG,CAAC,KAAK,EAAE,uBAAuB,GAAG,IAAI;IAMzC,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,uBAAuB,EAAE,cAAc,GAAG,MAAM,CAAC,CAAC,GAAG,IAAI;IAQ1G,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI;IAIlC,6EAA6E;IAC7E,SAAS,IAAI,MAAM,EAAE;IAMrB,OAAO,CAAC,KAAK;CAWd"}

package/dist/passkey/credential-cache.js

@@ -0,0 +1,91 @@
+class MemoryStorage {
+    constructor() {
+        this.map = new Map();
+    }
+    getItem(key) {
+        return this.map.get(key) ?? null;
+    }
+    setItem(key, value) {
+        this.map.set(key, value);
+    }
+    removeItem(key) {
+        this.map.delete(key);
+    }
+}
+/**
+ * The credential list of one RP ID in `localStorage` (`dfx.wallet.credentials.v1`): public data only —
+ * never PRF bytes, mnemonics or signatures. Written after a server-verified seed check; feeds
+ * `excludeCredentials` with every non-revoked credential id.
+ */
+export class CredentialCache {
+    constructor(storage = defaultStorage(), key = 'dfx.wallet.credentials.v1', rpId = '') {
+        this.rpId = rpId;
+        this.storage = storage;
+        this.key = `${key}.${this.rpId}`;
+    }
+    list() {
+        try {
+            const raw = this.storage.getItem(this.key);
+            const parsed = raw ? JSON.parse(raw) : [];
+            if (!Array.isArray(parsed))
+                return [];
+            return parsed.filter(isCachedCredential);
+        }
+        catch {
+            return [];
+        }
+    }
+    put(entry) {
+        const all = this.list().filter((existing) => existing.credentialId !== entry.credentialId);
+        all.push(entry);
+        this.write(all);
+    }
+    update(credentialId, patch) {
+        const all = this.list();
+        const entry = all.find((existing) => existing.credentialId === credentialId);
+        if (!entry)
+            return;
+        Object.assign(entry, patch);
+        this.write(all);
+    }
+    remove(credentialId) {
+        this.write(this.list().filter((existing) => existing.credentialId !== credentialId));
+    }
+    /** Credential ids that must not be created again: everything not revoked. */
+    activeIds() {
+        return this.list()
+            .filter((entry) => entry.state !== 'revoked')
+            .map((entry) => entry.credentialId);
+    }
+    write(all) {
+        const payload = JSON.stringify(all);
+        try {
+            this.storage.setItem(this.key, payload);
+        }
+        catch {
+            // The cache is optional. A locked or full store must not fail a login that already succeeded.
+            if (this.storage instanceof MemoryStorage)
+                return;
+            this.storage = new MemoryStorage();
+            this.storage.setItem(this.key, payload);
+        }
+    }
+}
+function defaultStorage() {
+    try {
+        return globalThis.localStorage ?? new MemoryStorage();
+    }
+    catch {
+        return new MemoryStorage();
+    }
+}
+function isCachedCredential(value) {
+    if (!value || typeof value !== 'object')
+        return false;
+    const entry = value;
+    return (typeof entry['credentialId'] === 'string' &&
+        typeof entry['rpId'] === 'string' &&
+        (entry['state'] === 'pending' || entry['state'] === 'active' || entry['state'] === 'revoked') &&
+        typeof entry['createdAt'] === 'number');
+}
+//# sourceMappingURL=credential-cache.js.map

package/dist/passkey/credential-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-cache.js","sourceRoot":"","sources":["../../src/passkey/credential-cache.ts"],"names":[],"mappings":"AAsBA,MAAM,aAAa;IAAnB;QACmB,QAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IAUnD,CAAC;IATC,OAAO,CAAC,GAAW;QACjB,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IACnC,CAAC;IACD,OAAO,CAAC,GAAW,EAAE,KAAa;QAChC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;IACD,UAAU,CAAC,GAAW;QACpB,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,eAAe;IAI1B,YACE,UAA6B,cAAc,EAAE,EAC7C,GAAG,GAAG,2BAA2B,EAChB,OAAe,EAAE;QAAjB,SAAI,GAAJ,IAAI,CAAa;QAElC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,GAAG,GAAG,GAAG,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;IACnC,CAAC;IAED,IAAI;QACF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAa,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,OAAO,EAAE,CAAC;YACtC,OAAO,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,GAAG,CAAC,KAA8B;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY,CAAC,CAAC;QAC3F,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,CAAC,YAAoB,EAAE,KAAsE;QACjG,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC;QAC7E,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,CAAC,YAAoB;QACzB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC,CAAC;IACvF,CAAC;IAED,6EAA6E;IAC7E,SAAS;QACP,OAAO,IAAI,CAAC,IAAI,EAAE;aACf,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC;aAC5C,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACxC,CAAC;IAEO,KAAK,CAAC,GAA8B;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,8FAA8F;YAC9F,IAAI,IAAI,CAAC,OAAO,YAAY,aAAa;gBAAE,OAAO;YAClD,IAAI,CAAC,OAAO,GAAG,IAAI,aAAa,EAAE,CAAC;YACnC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;CACF;AAED,SAAS,cAAc;IACrB,IAAI,CAAC;QACH,OAAQ,UAA8D,CAAC,YAAY,IAAI,IAAI,aAAa,EAAE,CAAC;IAC7G,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,aAAa,EAAE,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,OAAO,CACL,OAAO,KAAK,CAAC,cAAc,CAAC,KAAK,QAAQ;QACzC,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ;QACjC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC;QAC7F,OAAO,KAAK,CAAC,WAAW,CAAC,KAAK,QAAQ,CACvC,CAAC;AACJ,CAAC"}

package/dist/passkey/diagnostics.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Allowlisted passkey diagnostics: stage, outcome, error name, one sanitized message line, attachment,
+ * transports, backup flags, PRF presence, OS label and client capabilities. Never PRF bytes, mnemonics,
+ * keys, signatures or challenges (§6.6).
+ */
+export interface PasskeyDiagnosticInput {
+    stage: string;
+    outcome: 'completed' | 'failed' | 'aborted';
+    errorName?: string;
+    message?: string;
+    attachment?: string | null;
+    transports?: string[];
+    backupEligible?: boolean;
+    backedUp?: boolean;
+    prf?: boolean;
+    os?: string;
+    clientCapabilities?: Record<string, boolean>;
+}
+export type PasskeyDiagnostic = Record<string, unknown>;
+/** Builds the sanitized diagnostic record; the app forwards it to `POST passkey/diagnostics`. */
+export declare function passkeyDiagnostic(input: PasskeyDiagnosticInput): PasskeyDiagnostic;
+//# sourceMappingURL=diagnostics.d.ts.map

package/dist/passkey/diagnostics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.d.ts","sourceRoot":"","sources":["../../src/passkey/diagnostics.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9C;AAED,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAyBxD,iGAAiG;AACjG,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,sBAAsB,GAAG,iBAAiB,CA4BlF"}

package/dist/passkey/diagnostics.js

@@ -0,0 +1,59 @@
+/** Message characters diagnostics may carry; anything else (urls, keys, base64 blobs) is dropped. */
+const SAFE_MESSAGE = /^[A-Za-z0-9 .,:;'()_-]{1,120}$/;
+/** Hex, a base64url blob, or a 12-word phrase is a secret, not a diagnostic sentence. */
+function isSecretShaped(message) {
+    const compact = message.replace(/\s+/g, '');
+    if (/^[0-9a-fA-F]{32,}$/.test(compact))
+        return true;
+    if (!message.includes(' ') && /^[A-Za-z0-9_-]{32,}$/.test(message))
+        return true;
+    const words = message.trim().split(/\s+/);
+    return words.length >= 12 && words.every((word) => /^[a-z]+$/.test(word));
+}
+function diagnosticOutcome(outcome) {
+    switch (outcome) {
+        case 'completed':
+            return 'Success';
+        case 'failed':
+            return 'Failure';
+        case 'aborted':
+            return 'Aborted';
+    }
+}
+/** Builds the sanitized diagnostic record; the app forwards it to `POST passkey/diagnostics`. */
+export function passkeyDiagnostic(input) {
+    const record = {
+        stage: String(input.stage).slice(0, 64),
+        outcome: diagnosticOutcome(input.outcome),
+    };
+    if (input.errorName !== undefined)
+        record['errorName'] = String(input.errorName).slice(0, 64);
+    if (input.message !== undefined)
+        record['message'] =
+            SAFE_MESSAGE.test(input.message) && !isSecretShaped(input.message) ? input.message : '<unavailable>';
+    if (input.attachment !== undefined)
+        record['authenticatorAttachment'] = input.attachment;
+    if (input.transports !== undefined)
+        record['transports'] = input.transports.filter((t) => typeof t === 'string').slice(0, 8);
+    if (input.backupEligible !== undefined)
+        record['backupEligible'] = input.backupEligible;
+    if (input.backedUp !== undefined)
+        record['backedUp'] = input.backedUp;
+    if (input.prf !== undefined)
+        record['prfPresent'] = input.prf;
+    if (input.os !== undefined)
+        record['os'] = String(input.os).slice(0, 32);
+    if (input.clientCapabilities !== undefined) {
+        const entries = Object.entries(input.clientCapabilities)
+            .filter(([, value]) => typeof value === 'boolean')
+            .slice(0, 16);
+        let serialized = JSON.stringify(Object.fromEntries(entries));
+        while (serialized.length > 1024 && entries.length > 0) {
+            entries.pop();
+            serialized = JSON.stringify(Object.fromEntries(entries));
+        }
+        record['clientCapabilities'] = serialized;
+    }
+    return record;
+}
+//# sourceMappingURL=diagnostics.js.map

package/dist/passkey/diagnostics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.js","sourceRoot":"","sources":["../../src/passkey/diagnostics.ts"],"names":[],"mappings":"AAqBA,qGAAqG;AACrG,MAAM,YAAY,GAAG,gCAAgC,CAAC;AAEtD,yFAAyF;AACzF,SAAS,cAAc,CAAC,OAAe;IACrC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5C,IAAI,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAChF,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1C,OAAO,KAAK,CAAC,MAAM,IAAI,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,iBAAiB,CAAC,OAA0C;IACnE,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,WAAW;YACd,OAAO,SAAS,CAAC;QACnB,KAAK,QAAQ;YACX,OAAO,SAAS,CAAC;QACnB,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,iBAAiB,CAAC,KAA6B;IAC7D,MAAM,MAAM,GAAsB;QAChC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACvC,OAAO,EAAE,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC;KAC1C,CAAC;IACF,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;QAAE,MAAM,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9F,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;QAC7B,MAAM,CAAC,SAAS,CAAC;YACf,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;IACzG,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;QAAE,MAAM,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC;IACzF,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;QAChC,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3F,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;QAAE,MAAM,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC;IACxF,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;QAAE,MAAM,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC;IACtE,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;QAAE,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC;IAC9D,IAAI,KAAK,CAAC,EAAE,KAAK,SAAS;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzE,IAAI,KAAK,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC;aACrD,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,SAAS,CAAC;aACjD,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChB,IAAI,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7D,OAAO,UAAU,CAAC,MAAM,GAAG,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtD,OAAO,CAAC,GAAG,EAAE,CAAC;YACd,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,CAAC,oBAAoB,CAAC,GAAG,UAAU,CAAC;IAC5C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/passkey/errors.d.ts

@@ -0,0 +1,49 @@
+import { WalletError } from '../util/errors';
+/** Base of every passkey ceremony failure; `code` is stable and branchable. */
+export declare class PasskeyError extends WalletError {
+}
+/** The page runs inside an iframe or another embedded context (NG3). */
+export declare class EmbeddedContextError extends PasskeyError {
+    constructor();
+}
+/** The page is not served from the RP ID of its environment. */
+export declare class WrongOriginError extends PasskeyError {
+    constructor(hostname: string, expected: string);
+}
+/** The browser or OS cannot run the wallet's passkey ceremonies at all. */
+export declare class PlatformUnsupportedError extends PasskeyError {
+    constructor(reason: string);
+}
+/** The page runs inside an in-app browser that cannot complete a ceremony. */
+export declare class InAppBrowserError extends PasskeyError {
+    constructor();
+}
+/** A cross-platform (hybrid/roaming) credential may never hold the wallet seed (D21). */
+export declare class CrossDeviceRegistrationError extends PasskeyError {
+    constructor();
+}
+/** `create` and `get` returned different PRF outputs for the same credential. */
+export declare class PrfMismatchError extends PasskeyError {
+    constructor();
+}
+/** The authenticator has no PRF extension; no seed can be derived. */
+export declare class PrfUnavailableError extends PasskeyError {
+    constructor();
+}
+/** A newer ceremony superseded this one. */
+export declare class CeremonySupersededError extends PasskeyError {
+    constructor();
+}
+/** The ceremony was cancelled by the app. */
+export declare class CeremonyCancelledError extends PasskeyError {
+    constructor();
+}
+/** The user gesture requirement (WebKit 291258) was not met. */
+export declare class UserActivationMissingError extends PasskeyError {
+    constructor();
+}
+/** Classification of raw WebAuthn failures for the UI. */
+export type WebAuthnErrorKind = 'cancel' | 'timeout' | 'exists' | 'unsupported' | 'security' | 'generic';
+/** Maps a WebAuthn rejection to a stable UI discriminant. */
+export declare function classifyWebAuthnError(error: unknown): WebAuthnErrorKind;
+//# sourceMappingURL=errors.d.ts.map

package/dist/passkey/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/passkey/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,+EAA+E;AAC/E,qBAAa,YAAa,SAAQ,WAAW;CAAG;AAEhD,wEAAwE;AACxE,qBAAa,oBAAqB,SAAQ,YAAY;;CAIrD;AAED,gEAAgE;AAChE,qBAAa,gBAAiB,SAAQ,YAAY;gBACpC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;CAG/C;AAED,2EAA2E;AAC3E,qBAAa,wBAAyB,SAAQ,YAAY;gBAC5C,MAAM,EAAE,MAAM;CAG3B;AAED,8EAA8E;AAC9E,qBAAa,iBAAkB,SAAQ,YAAY;;CAIlD;AAED,yFAAyF;AACzF,qBAAa,4BAA6B,SAAQ,YAAY;;CAI7D;AAED,iFAAiF;AACjF,qBAAa,gBAAiB,SAAQ,YAAY;;CAIjD;AAED,sEAAsE;AACtE,qBAAa,mBAAoB,SAAQ,YAAY;;CAIpD;AAED,4CAA4C;AAC5C,qBAAa,uBAAwB,SAAQ,YAAY;;CAIxD;AAED,6CAA6C;AAC7C,qBAAa,sBAAuB,SAAQ,YAAY;;CAIvD;AAED,gEAAgE;AAChE,qBAAa,0BAA2B,SAAQ,YAAY;;CAI3D;AAED,0DAA0D;AAC1D,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,aAAa,GAAG,UAAU,GAAG,SAAS,CAAC;AAEzG,6DAA6D;AAC7D,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,iBAAiB,CAmBvE"}

package/dist/passkey/errors.js

@@ -0,0 +1,87 @@
+import { WalletError } from '../util/errors';
+/** Base of every passkey ceremony failure; `code` is stable and branchable. */
+export class PasskeyError extends WalletError {
+}
+/** The page runs inside an iframe or another embedded context (NG3). */
+export class EmbeddedContextError extends PasskeyError {
+    constructor() {
+        super('embedded-context', 'The wallet must run in a top-level browser context');
+    }
+}
+/** The page is not served from the RP ID of its environment. */
+export class WrongOriginError extends PasskeyError {
+    constructor(hostname, expected) {
+        super('wrong-origin', `Passkey ceremonies need ${expected}, this page is ${hostname}`);
+    }
+}
+/** The browser or OS cannot run the wallet's passkey ceremonies at all. */
+export class PlatformUnsupportedError extends PasskeyError {
+    constructor(reason) {
+        super('platform-unsupported', reason);
+    }
+}
+/** The page runs inside an in-app browser that cannot complete a ceremony. */
+export class InAppBrowserError extends PasskeyError {
+    constructor() {
+        super('in-app-browser', 'This browser is embedded in an app and cannot create passkeys');
+    }
+}
+/** A cross-platform (hybrid/roaming) credential may never hold the wallet seed (D21). */
+export class CrossDeviceRegistrationError extends PasskeyError {
+    constructor() {
+        super('cross-device-registration', 'The passkey was created cross-platform; wallet seeds stay on-device');
+    }
+}
+/** `create` and `get` returned different PRF outputs for the same credential. */
+export class PrfMismatchError extends PasskeyError {
+    constructor() {
+        super('prf-mismatch', 'The authenticator returned a different PRF output for the new credential');
+    }
+}
+/** The authenticator has no PRF extension; no seed can be derived. */
+export class PrfUnavailableError extends PasskeyError {
+    constructor() {
+        super('prf-unavailable', 'This passkey cannot derive a wallet seed (no PRF extension)');
+    }
+}
+/** A newer ceremony superseded this one. */
+export class CeremonySupersededError extends PasskeyError {
+    constructor() {
+        super('ceremony-superseded', 'A newer passkey ceremony superseded this one');
+    }
+}
+/** The ceremony was cancelled by the app. */
+export class CeremonyCancelledError extends PasskeyError {
+    constructor() {
+        super('ceremony-cancelled', 'The passkey ceremony was cancelled');
+    }
+}
+/** The user gesture requirement (WebKit 291258) was not met. */
+export class UserActivationMissingError extends PasskeyError {
+    constructor() {
+        super('user-activation-missing', 'The passkey ceremony must start from a user gesture');
+    }
+}
+/** Maps a WebAuthn rejection to a stable UI discriminant. */
+export function classifyWebAuthnError(error) {
+    const name = error && typeof error === 'object' && 'name' in error ? String(error.name) : '';
+    switch (name) {
+        case 'NotAllowedError':
+            return 'cancel';
+        case 'TimeoutError':
+        case 'AbortError':
+            return 'timeout';
+        case 'InvalidStateError':
+            return 'exists';
+        case 'NotSupportedError':
+        case 'SecurityError':
+            return name === 'SecurityError' ? 'security' : 'unsupported';
+        default: {
+            const message = error instanceof Error ? error.message : String(error ?? '');
+            if (/time\s*out/i.test(message))
+                return 'timeout';
+            return 'generic';
+        }
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/passkey/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/passkey/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,+EAA+E;AAC/E,MAAM,OAAO,YAAa,SAAQ,WAAW;CAAG;AAEhD,wEAAwE;AACxE,MAAM,OAAO,oBAAqB,SAAQ,YAAY;IACpD;QACE,KAAK,CAAC,kBAAkB,EAAE,oDAAoD,CAAC,CAAC;IAClF,CAAC;CACF;AAED,gEAAgE;AAChE,MAAM,OAAO,gBAAiB,SAAQ,YAAY;IAChD,YAAY,QAAgB,EAAE,QAAgB;QAC5C,KAAK,CAAC,cAAc,EAAE,2BAA2B,QAAQ,kBAAkB,QAAQ,EAAE,CAAC,CAAC;IACzF,CAAC;CACF;AAED,2EAA2E;AAC3E,MAAM,OAAO,wBAAyB,SAAQ,YAAY;IACxD,YAAY,MAAc;QACxB,KAAK,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC;CACF;AAED,8EAA8E;AAC9E,MAAM,OAAO,iBAAkB,SAAQ,YAAY;IACjD;QACE,KAAK,CAAC,gBAAgB,EAAE,+DAA+D,CAAC,CAAC;IAC3F,CAAC;CACF;AAED,yFAAyF;AACzF,MAAM,OAAO,4BAA6B,SAAQ,YAAY;IAC5D;QACE,KAAK,CAAC,2BAA2B,EAAE,qEAAqE,CAAC,CAAC;IAC5G,CAAC;CACF;AAED,iFAAiF;AACjF,MAAM,OAAO,gBAAiB,SAAQ,YAAY;IAChD;QACE,KAAK,CAAC,cAAc,EAAE,0EAA0E,CAAC,CAAC;IACpG,CAAC;CACF;AAED,sEAAsE;AACtE,MAAM,OAAO,mBAAoB,SAAQ,YAAY;IACnD;QACE,KAAK,CAAC,iBAAiB,EAAE,6DAA6D,CAAC,CAAC;IAC1F,CAAC;CACF;AAED,4CAA4C;AAC5C,MAAM,OAAO,uBAAwB,SAAQ,YAAY;IACvD;QACE,KAAK,CAAC,qBAAqB,EAAE,8CAA8C,CAAC,CAAC;IAC/E,CAAC;CACF;AAED,6CAA6C;AAC7C,MAAM,OAAO,sBAAuB,SAAQ,YAAY;IACtD;QACE,KAAK,CAAC,oBAAoB,EAAE,oCAAoC,CAAC,CAAC;IACpE,CAAC;CACF;AAED,gEAAgE;AAChE,MAAM,OAAO,0BAA2B,SAAQ,YAAY;IAC1D;QACE,KAAK,CAAC,yBAAyB,EAAE,qDAAqD,CAAC,CAAC;IAC1F,CAAC;CACF;AAKD,6DAA6D;AAC7D,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,MAAM,IAAI,GAAG,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,CAAE,KAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnH,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,iBAAiB;YACpB,OAAO,QAAQ,CAAC;QAClB,KAAK,cAAc,CAAC;QACpB,KAAK,YAAY;YACf,OAAO,SAAS,CAAC;QACnB,KAAK,mBAAmB;YACtB,OAAO,QAAQ,CAAC;QAClB,KAAK,mBAAmB,CAAC;QACzB,KAAK,eAAe;YAClB,OAAO,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC;QAC/D,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAC7E,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,OAAO,SAAS,CAAC;YAClD,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/passkey/platform.d.ts

@@ -0,0 +1,77 @@
+import type { WalletEnv } from '../config/environment';
+/** What the app needs to know before it may show the passkey tile. */
+export interface PlatformReport {
+    available: boolean;
+    reason?: 'no-webauthn' | 'no-prf' | 'in-app-browser' | 'embedded' | 'wrong-origin' | 'os-too-old';
+    /** Whether the client advertises the PRF extension: `false` hides the tile (§6.3). */
+    prf: 'yes' | 'no' | 'unknown';
+    /** Installed OS version when it could be read, for diagnostics. */
+    os?: string;
+}
+/** Host surface the platform checks inspect (browser or fake). */
+export interface PlatformHost {
+    navigator: {
+        userAgent: string;
+        credentials?: {
+            create?: unknown;
+            get?: unknown;
+        };
+        userAgentData?: {
+            getHighEntropyValues?: (hints: string[]) => Promise<Record<string, string>>;
+        };
+        /** Present when the host can tell iPadOS desktop mode from desktop Safari. */
+        platform?: string;
+        maxTouchPoints?: number;
+    };
+    location: {
+        hostname: string;
+        href: string;
+        origin: string;
+        pathname: string;
+    };
+    open?: (url: string, target?: string, features?: string) => unknown;
+    /** `window.top` / `window.self` when inspectable; both absent means "assume top-level". */
+    top?: unknown;
+    self?: unknown;
+    PublicKeyCredential?: {
+        getClientCapabilities?: () => Promise<Record<string, boolean>>;
+        isConditionalMediationAvailable?: () => Promise<boolean>;
+    };
+    TelegramWebviewProxy?: unknown;
+    TelegramWebview?: unknown;
+    Telegram?: {
+        WebApp?: {
+            openLink?: (url: string) => unknown;
+        };
+    };
+}
+/** True inside an embedded in-app browser (Telegram, Instagram, …). */
+export declare function isInAppBrowser(win?: PlatformHost): boolean;
+/** Installed iOS version from the UA, or null on other platforms / missing token. */
+export declare function iosInstalledVersion(userAgent: string): string | null;
+/** iPadOS desktop mode reports a Macintosh UA. Touch points tell it apart from desktop Safari. */
+export declare function isIpadDesktopMode(nav: {
+    platform?: string;
+    maxTouchPoints?: number;
+}): boolean;
+/**
+ * Installed iPadOS version in desktop mode. That UA drops the iPad token and puts the OS major in
+ * Safari's `Version/`. A real Mac has no touch points, so its Safari version is not an iPadOS release.
+ * Null when this is not iPad desktop mode or the token is missing — the floor must not guess.
+ */
+export declare function ipadDesktopInstalledVersion(nav: {
+    userAgent: string;
+    platform?: string;
+    maxTouchPoints?: number;
+}): string | null;
+/** Installed Android version, preferring `userAgentData` (Chrome freezes the UA at Android 10). */
+export declare function androidInstalledVersion(win?: PlatformHost): Promise<string | null>;
+/**
+ * Checks whether the wallet's passkey ceremonies can run here at all: real top-level page on the
+ * environment's RP host, WebAuthn present, OS new enough, not inside an in-app browser. The PRF soft gate
+ * only hides the tile (`available: false`, `prf: 'no'`); PRF absence in an old browser is `unknown`.
+ */
+export declare function checkPasskeyPlatform(env: WalletEnv, win?: PlatformHost): Promise<PlatformReport>;
+/** Best-effort handoff of the login URL to the system browser when stuck in an in-app browser. */
+export declare function openInSystemBrowser(url: string, win?: PlatformHost): void;
+//# sourceMappingURL=platform.d.ts.map

package/dist/passkey/platform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.d.ts","sourceRoot":"","sources":["../../src/passkey/platform.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAGvD,sEAAsE;AACtE,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,aAAa,GAAG,QAAQ,GAAG,gBAAgB,GAAG,UAAU,GAAG,cAAc,GAAG,YAAY,CAAC;IAClG,sFAAsF;IACtF,GAAG,EAAE,KAAK,GAAG,IAAI,GAAG,SAAS,CAAC;IAC9B,mEAAmE;IACnE,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,kEAAkE;AAClE,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE;QACT,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,CAAC,EAAE;YAAE,MAAM,CAAC,EAAE,OAAO,CAAC;YAAC,GAAG,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC;QAClD,aAAa,CAAC,EAAE;YAAE,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;SAAE,CAAC;QAChG,8EAA8E;QAC9E,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,QAAQ,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/E,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC;IACpE,2FAA2F;IAC3F,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,mBAAmB,CAAC,EAAE;QACpB,qBAAqB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/D,+BAA+B,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;KAC1D,CAAC;IACF,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE;YAAE,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAA;SAAE,CAAA;KAAE,CAAC;CACjE;AAuBD,uEAAuE;AACvE,wBAAgB,cAAc,CAAC,GAAG,CAAC,EAAE,YAAY,GAAG,OAAO,CAI1D;AAED,qFAAqF;AACrF,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKpE;AAED,kGAAkG;AAClG,wBAAgB,iBAAiB,CAAC,GAAG,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAE9F;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,GAAG,EAAE;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,MAAM,GAAG,IAAI,CAMhB;AAgBD,mGAAmG;AACnG,wBAAsB,uBAAuB,CAAC,GAAG,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAqBxF;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CA4CtG;AAED,kGAAkG;AAClG,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,YAAY,GAAG,IAAI,CAmBzE"}