@seams/wallet 0.8.0 → 0.9.0

package/dist/esm/core/signingEngine/uiConfirm/handlers/flows/adapters/adapters.js

@@ -1,337 +0,0 @@
-import { isObject } from "../../../../../../shared-ts/src/utils/validation.js";
-import { errorMessage } from "../../../../../../shared-ts/src/utils/errors.js";
-import { emitSigningSessionFlowTrace } from "../../../../session/operationState/trace.js";
-import { nonceLeaseToRef } from "../../../../nonce/nonceLaneKeys.js";
-import { buildNearNonceLane } from "../../../../nonce/nearNonceLaneIdentity.js";
-import { UserConfirmationType } from "../../../../stepUpConfirmation/userConfirmationType.js";
-import { assertNeverConfirmationConfig } from "../../../../../types/confirmationConfig.js";
-import { getDisplayModel, getEmailOtpPrompt, getSignTransactionPayload, getSigningAuthMode } from "./request.js";
-import { sendConfirmResponse } from "../../../../stepUpConfirmation/channel/confirmCommon.js";
-import { collectAuthenticationCredentialForChallengeB64u } from "../../../../webauthnAuth/credentials/collectAuthenticationCredentialForChallengeB64u.js";
-import { awaitConfirmUIDecision, prepareConfirmUISurface } from "../../../ui/confirm-ui.js";
-//#region src/core/signingEngine/uiConfirm/handlers/flows/adapters/adapters.ts
-function parseReadinessNonce(raw, fallback) {
-	if (typeof raw === "bigint") return raw;
-	const normalized = String(raw ?? fallback ?? "0").trim();
-	if (!normalized) return 0n;
-	try {
-		return BigInt(normalized);
-	} catch {
-		return 0n;
-	}
-}
-function parseNearExecutionReadiness(raw) {
-	if (!isObject(raw)) return null;
-	const kind = String(raw.kind || "").trim();
-	const walletId = String(raw.walletId || "").trim();
-	const nearAccountId = String(raw.nearAccountId || "").trim();
-	const nearPublicKeyStr = String(raw.nearPublicKeyStr || "").trim();
-	if (!walletId || !nearAccountId || !nearPublicKeyStr) return null;
-	switch (kind) {
-		case "implicit_unfunded": return {
-			kind,
-			walletId,
-			nearAccountId,
-			nearPublicKeyStr
-		};
-		case "access_key_available":
-		case "sponsored_named_ready": return {
-			kind,
-			walletId,
-			nearAccountId,
-			nearPublicKeyStr,
-			nonce: parseReadinessNonce(raw.nonce, raw.nextNonce),
-			accessKeyNonce: String(raw.accessKeyNonce || "").trim(),
-			nextNonce: String(raw.nextNonce || "").trim(),
-			txBlockHeight: String(raw.txBlockHeight || "").trim(),
-			txBlockHash: String(raw.txBlockHash || "").trim()
-		};
-		case "account_lookup_failed": return {
-			kind,
-			walletId,
-			nearAccountId,
-			nearPublicKeyStr,
-			message: String(raw.message || "").trim()
-		};
-		default: return null;
-	}
-}
-function nearExecutionReadinessFromError(error) {
-	if (!isObject(error)) return null;
-	return parseNearExecutionReadiness(error.readiness);
-}
-function implicitFundingReadinessMatchesRequest(readiness, request) {
-	return readiness.walletId === String(request.subject.walletId) && readiness.nearAccountId === String(request.subject.nearAccountId) && readiness.nearPublicKeyStr === request.subject.nearPublicKeyStr;
-}
-async function fetchNearContext(ctx, request) {
-	try {
-		const { context, leases } = await ctx.nonceCoordinator.reserveNearContext({
-			lane: buildNearNonceLane({
-				chains: ctx.chains,
-				walletId: String(request.subject.walletId),
-				nearAccountId: String(request.subject.nearAccountId),
-				nearPublicKeyStr: request.subject.nearPublicKeyStr
-			}),
-			operation: request.operation,
-			count: request.signatureUses,
-			nearClient: ctx.nearClient
-		});
-		return {
-			kind: "readiness",
-			readiness: {
-				kind: "context_ready",
-				transactionContext: { ...context },
-				nonceLeases: leases.map(nonceLeaseToRef)
-			},
-			reservedNonceLeases: leases
-		};
-	} catch (error) {
-		const readiness = nearExecutionReadinessFromError(error);
-		if (readiness?.kind === "implicit_unfunded" && implicitFundingReadinessMatchesRequest(readiness, request)) return {
-			kind: "readiness",
-			readiness: {
-				kind: "funding_required",
-				request
-			},
-			reservedNonceLeases: []
-		};
-		return {
-			kind: "failed",
-			error: readiness?.kind === "account_lookup_failed" ? "NEAR_ACCOUNT_LOOKUP_FAILED" : "NEAR_CONTEXT_UNAVAILABLE",
-			details: errorMessage(error)
-		};
-	}
-}
-async function releaseReservedNonces(ctx, nonceLeases) {
-	if (!nonceLeases?.length) return;
-	await Promise.all(nonceLeases.map((nonceLease) => ctx.nonceCoordinator.release({
-		leaseId: nonceLease.leaseId,
-		operationId: nonceLease.operationId,
-		operationFingerprint: nonceLease.operationFingerprint,
-		reason: "cancelled"
-	})));
-}
-async function collectAuthenticationCredentialWithPRF({ ctx, nearAccountId, challengeB64u, onBeforePrompt, includeSecondPrfOutput = false }) {
-	return collectAuthenticationCredentialForChallengeB64u({
-		credentialStore: ctx.webauthnCredentialStore,
-		touchIdPrompt: ctx.touchIdPrompt,
-		nearAccountId,
-		challengeB64u,
-		includeSecondPrfOutput,
-		onBeforePrompt
-	});
-}
-function closeModalSafely(confirmed, handle) {
-	handle?.close?.(confirmed);
-}
-function confirmUiRenderContext(ctx) {
-	return {
-		chains: ctx.chains,
-		getAppearance: ctx.getAppearance,
-		nearExplorerUrl: ctx.nearExplorerUrl,
-		tempoExplorerUrl: ctx.tempoExplorerUrl,
-		evmExplorerUrl: ctx.evmExplorerUrl,
-		surfaceMeasurementBinding: ctx.surfaceMeasurementBinding
-	};
-}
-function emptyConfirmDiagnostics() {
-	return {
-		kind: "confirm_ui_prompt_diagnostics_v1",
-		elementDefineMs: 0,
-		mountMs: 0,
-		hostFirstUpdateMs: 0,
-		hostInteractiveMs: 0,
-		confirmEventMs: 0,
-		decisionWaitMs: 0
-	};
-}
-async function renderAutoProceedConfirmUI(args) {
-	const mountStartedAt = performance.now();
-	const handle = await prepareConfirmUISurface({
-		ctx: confirmUiRenderContext(args.ctx),
-		summary: args.transactionSummary,
-		txSigningRequests: args.txSigningRequests,
-		model: args.model,
-		securityContext: args.securityContext,
-		loading: args.loading ?? true,
-		theme: args.theme,
-		uiMode: args.confirmationConfig.uiMode,
-		signingAuthMode: args.signingAuthMode,
-		emailOtpPrompt: args.emailOtpPrompt,
-		surface: args.surface
-	});
-	const mountMs = Math.max(0, Math.round(performance.now() - mountStartedAt));
-	args.onMounted?.(handle);
-	const decisionWaitStartedAt = performance.now();
-	await new Promise((resolve) => setTimeout(resolve, args.confirmationConfig.autoProceedDelay));
-	const decisionWaitMs = Math.max(0, Math.round(performance.now() - decisionWaitStartedAt));
-	return {
-		confirmed: true,
-		confirmHandle: handle,
-		diagnostics: {
-			...emptyConfirmDiagnostics(),
-			mountMs,
-			decisionWaitMs
-		}
-	};
-}
-async function renderInteractiveConfirmUI(args) {
-	const { confirmed, handle, error, otpCode, emailOtpChallengeId, diagnostics } = await awaitConfirmUIDecision({
-		ctx: confirmUiRenderContext(args.ctx),
-		summary: args.transactionSummary,
-		txSigningRequests: args.txSigningRequests,
-		model: args.model,
-		securityContext: args.securityContext,
-		loading: args.loading,
-		theme: args.theme,
-		uiMode: args.confirmationConfig.uiMode,
-		onMounted: args.onMounted,
-		signingAuthMode: args.signingAuthMode,
-		emailOtpPrompt: args.emailOtpPrompt,
-		surface: args.surface
-	});
-	if (args.request.type === UserConfirmationType.SIGN_TRANSACTION && getSignTransactionPayload(args.request).signingKind === "transaction") emitSigningSessionFlowTrace("near", {
-		event: "near_confirmation_prompt_timing",
-		mountMs: diagnostics.mountMs,
-		decisionWaitMs: diagnostics.decisionWaitMs,
-		confirmed
-	});
-	return {
-		confirmed,
-		confirmHandle: handle,
-		error,
-		otpCode,
-		emailOtpChallengeId,
-		diagnostics
-	};
-}
-async function renderConfirmUI({ ctx, request, confirmationConfig, transactionSummary, securityContext, loading, theme, surface, onMounted }) {
-	if (surface.kind === "preparation_cancelled") return {
-		confirmed: false,
-		confirmHandle: void 0,
-		diagnostics: emptyConfirmDiagnostics()
-	};
-	const txSigningRequests = request.type === UserConfirmationType.SIGN_TRANSACTION ? getSignTransactionPayload(request).txSigningRequests : [];
-	const model = getDisplayModel(request);
-	const signingAuthMode = getSigningAuthMode(request);
-	const emailOtpPrompt = getEmailOtpPrompt(request);
-	switch (confirmationConfig.kind) {
-		case "silent":
-			if (surface.kind === "reuse_mounted") surface.handle.close(true);
-			return {
-				confirmed: true,
-				confirmHandle: void 0,
-				diagnostics: emptyConfirmDiagnostics()
-			};
-		case "auto_proceed": return await renderAutoProceedConfirmUI({
-			ctx,
-			request,
-			confirmationConfig,
-			transactionSummary,
-			securityContext,
-			loading,
-			theme,
-			surface,
-			onMounted,
-			txSigningRequests,
-			model,
-			signingAuthMode,
-			emailOtpPrompt
-		});
-		case "interactive": return await renderInteractiveConfirmUI({
-			ctx,
-			request,
-			confirmationConfig,
-			transactionSummary,
-			securityContext,
-			loading,
-			theme,
-			surface,
-			onMounted,
-			txSigningRequests,
-			model,
-			signingAuthMode,
-			emailOtpPrompt
-		});
-		default: return assertNeverConfirmationConfig(confirmationConfig);
-	}
-}
-function createConfirmTxFlowAdapters(ctx) {
-	return {
-		near: {
-			fetchNearContext: (opts) => fetchNearContext(ctx, opts),
-			releaseReservedNonces: (nonceLease) => releaseReservedNonces(ctx, nonceLease)
-		},
-		security: { getRpId: () => ctx.touchIdPrompt.getRpId() },
-		webauthn: {
-			collectAuthenticationCredentialWithPRF: (args) => collectAuthenticationCredentialWithPRF({
-				ctx,
-				...args
-			}),
-			createRegistrationCredential: (args) => ctx.touchIdPrompt.generateRegistrationCredentialsInternal(args)
-		},
-		ui: {
-			renderConfirmUI: (args) => renderConfirmUI({
-				ctx,
-				...args
-			}),
-			closeModalSafely
-		}
-	};
-}
-function createConfirmSession({ adapters, worker, request, confirmationConfig, transactionSummary, theme, surface }) {
-	let nonceLeases;
-	let confirmHandle;
-	const setNonceLeases = (leases) => {
-		nonceLeases = leases;
-	};
-	const updateUI = (props) => {
-		confirmHandle?.update?.(props);
-	};
-	const promptUser = async ({ securityContext, loading, onMounted }) => {
-		const { confirmed, confirmHandle: handle, error, otpCode, emailOtpChallengeId, diagnostics } = await adapters.ui.renderConfirmUI({
-			request,
-			confirmationConfig,
-			transactionSummary,
-			securityContext,
-			loading,
-			theme,
-			surface,
-			onMounted: (mountedHandle) => {
-				confirmHandle = mountedHandle;
-				onMounted?.(mountedHandle);
-			}
-		});
-		confirmHandle = handle;
-		return {
-			confirmed,
-			error,
-			otpCode,
-			emailOtpChallengeId,
-			diagnostics
-		};
-	};
-	const confirmAndCloseModal = (decision) => {
-		try {
-			sendConfirmResponse(worker, decision);
-		} finally {
-			if (!decision.confirmed) adapters.near.releaseReservedNonces(nonceLeases);
-			adapters.ui.closeModalSafely(!!decision.confirmed, confirmHandle);
-		}
-	};
-	const dismissReviewSurface = () => {
-		adapters.ui.closeModalSafely(true, confirmHandle);
-		confirmHandle = void 0;
-	};
-	return {
-		setNonceLeases,
-		updateUI,
-		promptUser,
-		dismissReviewSurface,
-		confirmAndCloseModal
-	};
-}
-//#endregion
-export { createConfirmSession, createConfirmTxFlowAdapters };
-
-//# sourceMappingURL=adapters.js.map

package/dist/esm/core/signingEngine/uiConfirm/handlers/flows/adapters/request.js

@@ -1,120 +0,0 @@
-import { SigningAuthPlanKind, signingAuthModeFromSigningAuthPlan } from "../../../../stepUpConfirmation/types.js";
-import { UserConfirmationType } from "../../../../stepUpConfirmation/userConfirmationType.js";
-//#region src/core/signingEngine/uiConfirm/handlers/flows/adapters/request.ts
-function assertSigningRequestContext(request) {
-	if (request.type !== UserConfirmationType.SIGN_TRANSACTION) return;
-	const payload = request.payload;
-	if (payload.signingKind !== "transaction") return;
-	const { subject, operation, signatureUses } = payload.nearFundingRequest;
-	if (subject.walletId !== payload.walletId || subject.nearAccountId !== payload.rpcCall.nearAccountId || subject.nearPublicKeyStr !== payload.nearPublicKeyStr) throw new Error("Invalid secure confirm request: NEAR funding subject mismatch");
-	if (operation.accountId !== subject.nearAccountId) throw new Error("Invalid secure confirm request: NEAR funding operation account mismatch");
-	if (!Number.isInteger(signatureUses) || signatureUses < 1) throw new Error("Invalid secure confirm request: invalid NEAR funding signature use count");
-}
-function assertNoForbiddenMainThreadSigningSecrets(request) {
-	if (request.type !== UserConfirmationType.SIGN_TRANSACTION && request.type !== UserConfirmationType.SIGN_NEP413_MESSAGE) return;
-	const payload = request.payload;
-	if (payload.prfOutput !== void 0) throw new Error("Invalid secure confirm request: forbidden signing payload field prfOutput");
-	if (payload.wrapKeySeed !== void 0) throw new Error("Invalid secure confirm request: forbidden signing payload field wrapKeySeed");
-	if (payload.wrapKeySalt !== void 0) throw new Error("Invalid secure confirm request: forbidden signing payload field wrapKeySalt");
-}
-function getNearAccountId(request) {
-	switch (request.type) {
-		case UserConfirmationType.SIGN_TRANSACTION: return getSignTransactionPayload(request).rpcCall.nearAccountId;
-		case UserConfirmationType.SIGN_NEP413_MESSAGE: return request.payload.nearAccountId;
-		case UserConfirmationType.SIGN_INTENT_DIGEST: {
-			const subject = getSignIntentDigestSubject(request);
-			return subject.kind === "near_wallet" ? subject.nearAccountId : "";
-		}
-		case UserConfirmationType.REGISTER_ACCOUNT:
-		case UserConfirmationType.LINK_DEVICE: return String(getRegisterAccountPayload(request).nearAccountId || "").trim();
-		case UserConfirmationType.AUTHORIZE_KEY_EXPORT: {
-			const subject = getLocalOnlyExportSubject(request);
-			return subject.kind === "near_wallet" ? subject.nearAccountId : "";
-		}
-		case UserConfirmationType.SHOW_SECURE_PRIVATE_KEY_UI: {
-			const subject = getLocalOnlyExportSubject(request);
-			return subject.kind === "near_wallet" ? subject.nearAccountId : "";
-		}
-		default: return "";
-	}
-}
-function getLocalOnlyExportSubject(request) {
-	if (request.type !== UserConfirmationType.AUTHORIZE_KEY_EXPORT && request.type !== UserConfirmationType.SHOW_SECURE_PRIVATE_KEY_UI) throw new Error(`Expected local key export request, got ${request.type}`);
-	return request.payload.subject;
-}
-function getLocalOnlyExportSubjectId(request) {
-	const subject = getLocalOnlyExportSubject(request);
-	switch (subject.kind) {
-		case "near_wallet": return subject.nearAccountId;
-		case "evm_wallet": return subject.walletId;
-		default: {
-			const exhaustive = subject;
-			throw new Error(`Unsupported local key export subject: ${String(exhaustive)}`);
-		}
-	}
-}
-function getSignIntentDigestSubject(request) {
-	if (request.type !== UserConfirmationType.SIGN_INTENT_DIGEST) throw new Error(`Expected SIGN_INTENT_DIGEST request, got ${request.type}`);
-	return request.payload.signingSubject;
-}
-function getWalletId(request) {
-	switch (request.type) {
-		case UserConfirmationType.SIGN_TRANSACTION: return String(getSignTransactionPayload(request).walletId || "").trim();
-		case UserConfirmationType.SIGN_NEP413_MESSAGE: return String(request.payload.walletId || "").trim();
-		case UserConfirmationType.REGISTER_ACCOUNT:
-		case UserConfirmationType.LINK_DEVICE: return String(getRegisterAccountPayload(request).walletId || "").trim();
-		case UserConfirmationType.SIGN_INTENT_DIGEST: return getSignIntentDigestSubject(request).walletId;
-		case UserConfirmationType.AUTHORIZE_KEY_EXPORT:
-		case UserConfirmationType.SHOW_SECURE_PRIVATE_KEY_UI: return getLocalOnlyExportSubjectId(request);
-		default: return getNearAccountId(request);
-	}
-}
-function getTxCount(request) {
-	return request.type === UserConfirmationType.SIGN_TRANSACTION ? getSignTransactionPayload(request).txSigningRequests?.length || 1 : 1;
-}
-function getIntentDigest(request) {
-	if (request.type === UserConfirmationType.SIGN_TRANSACTION) return request.payload.intentDigest;
-	return request?.intentDigest;
-}
-function getSignTransactionPayload(request) {
-	if (request.type !== UserConfirmationType.SIGN_TRANSACTION) throw new Error(`Expected SIGN_TRANSACTION request, got ${request.type}`);
-	return request.payload;
-}
-function getDisplayModel(request) {
-	if (request.type === UserConfirmationType.SIGN_TRANSACTION) return getSignTransactionPayload(request).displayModel;
-	if (request.type === UserConfirmationType.SIGN_NEP413_MESSAGE) return request.payload.displayModel;
-	if (request.type === UserConfirmationType.SIGN_INTENT_DIGEST) return request.payload.displayModel;
-}
-function getSigningAuthMode(request) {
-	if (request.type === UserConfirmationType.SIGN_TRANSACTION) return signingAuthModeFromSigningAuthPlan(getSignTransactionPayload(request).signingAuthPlan);
-	if (request.type === UserConfirmationType.SIGN_NEP413_MESSAGE) {
-		const payload = request.payload;
-		return signingAuthModeFromSigningAuthPlan(payload.signingAuthPlan);
-	}
-	if (request.type === UserConfirmationType.SIGN_INTENT_DIGEST) {
-		const payload = request.payload;
-		return signingAuthModeFromSigningAuthPlan(payload.signingAuthPlan);
-	}
-}
-function getEmailOtpPrompt(request) {
-	if (request.type === UserConfirmationType.SIGN_TRANSACTION) {
-		const payload = getSignTransactionPayload(request);
-		return payload.signingAuthPlan?.kind === SigningAuthPlanKind.EmailOtpReauth ? payload.signingAuthPlan.emailOtpPrompt : payload.emailOtpPrompt;
-	}
-	if (request.type === UserConfirmationType.SIGN_NEP413_MESSAGE) {
-		const payload = request.payload;
-		return payload.signingAuthPlan?.kind === SigningAuthPlanKind.EmailOtpReauth ? payload.signingAuthPlan.emailOtpPrompt : payload.emailOtpPrompt;
-	}
-	if (request.type === UserConfirmationType.SIGN_INTENT_DIGEST) {
-		const payload = request.payload;
-		return payload.signingAuthPlan?.kind === SigningAuthPlanKind.EmailOtpReauth ? payload.signingAuthPlan.emailOtpPrompt : payload.emailOtpPrompt;
-	}
-}
-function getRegisterAccountPayload(request) {
-	if (request.type !== UserConfirmationType.REGISTER_ACCOUNT && request.type !== UserConfirmationType.LINK_DEVICE) throw new Error(`Expected REGISTER_ACCOUNT or LINK_DEVICE request, got ${request.type}`);
-	return request.payload;
-}
-//#endregion
-export { assertNoForbiddenMainThreadSigningSecrets, assertSigningRequestContext, getDisplayModel, getEmailOtpPrompt, getIntentDigest, getNearAccountId, getSignIntentDigestSubject, getSignTransactionPayload, getSigningAuthMode, getTxCount, getWalletId };
-
-//# sourceMappingURL=request.js.map

package/dist/esm/core/signingEngine/uiConfirm/handlers/flows/localOnly.js

@@ -1,149 +0,0 @@
-import { base64UrlEncode } from "../../../../../shared-ts/src/utils/base64.js";
-import { errorMessage } from "../../../../../shared-ts/src/utils/errors.js";
-import { UserConfirmationType } from "../../../stepUpConfirmation/userConfirmationType.js";
-import { resolveUiAppearance } from "../../ui/appearance.js";
-import { removeExportViewerHostIfPresent, upsertExportViewerHost } from "../../ui/export-viewer-host.js";
-import { silentConfirmationConfig } from "../../../../types/confirmationConfig.js";
-import { getIntentDigest } from "./adapters/request.js";
-import { ERROR_MESSAGES, isUserCancelledUserConfirm } from "../../../stepUpConfirmation/channel/confirmCommon.js";
-import { collectAuthenticationCredentialForExactNearChallengeB64u, collectAuthenticationCredentialForExactWalletChallengeB64u } from "../../../webauthnAuth/credentials/collectAuthenticationCredentialForChallengeB64u.js";
-import { __isWalletIframeHostMode } from "../../../../browser/walletIframe/host-mode.js";
-import { createConfirmSession, createConfirmTxFlowAdapters } from "./adapters/adapters.js";
-//#region src/core/signingEngine/uiConfirm/handlers/flows/localOnly.ts
-function createRandomChallengeB64u() {
-	return base64UrlEncode(crypto.getRandomValues(new Uint8Array(32)).buffer);
-}
-function localOnlyExportSubjectId(subject) {
-	switch (subject.kind) {
-		case "near_wallet": return subject.nearAccountId;
-		case "evm_wallet": return subject.walletId;
-		default: {
-			const exhaustive = subject;
-			throw new Error(`Unsupported local key export subject: ${String(exhaustive)}`);
-		}
-	}
-}
-async function mountExportViewer(ctx, payload, confirmationConfig, theme) {
-	await upsertExportViewerHost({
-		theme: payload.theme || theme || "dark",
-		variant: payload.variant || (confirmationConfig.uiMode === "drawer" ? "drawer" : "modal"),
-		accountId: localOnlyExportSubjectId(payload.subject),
-		sessionId: payload.viewerSessionId,
-		publicKey: payload.publicKey,
-		privateKey: payload.privateKey,
-		keys: Array.isArray(payload.keys) ? payload.keys : void 0,
-		guidance: payload.guidance,
-		appearance: resolveUiAppearance({
-			getAppearance: ctx.getAppearance,
-			requestedMode: payload.theme
-		}),
-		loading: payload.loading === true,
-		errorMessage: payload.errorMessage,
-		onLifecycle: payload.onLifecycle,
-		surfaceMeasurementBinding: ctx.surfaceMeasurementBinding
-	});
-}
-function buildLocalOnlySecurityContext(adapters) {
-	try {
-		return { rpId: adapters.security.getRpId() };
-	} catch {
-		return {};
-	}
-}
-async function collectLocalOnlyExportCredentialWithPRF(args) {
-	switch (args.payload.subject.kind) {
-		case "near_wallet": return await collectAuthenticationCredentialForExactNearChallengeB64u({
-			touchIdPrompt: args.ctx.touchIdPrompt,
-			nearAccountId: args.payload.subject.nearAccountId,
-			credentialIdB64u: args.payload.credentialIdB64u,
-			challengeB64u: args.challengeB64u,
-			includeSecondPrfOutput: true
-		});
-		case "evm_wallet": return await collectAuthenticationCredentialForExactWalletChallengeB64u({
-			touchIdPrompt: args.ctx.touchIdPrompt,
-			walletId: args.payload.subject.walletId,
-			credentialIdB64u: args.payload.credentialIdB64u,
-			challengeB64u: args.challengeB64u,
-			includeSecondPrfOutput: true
-		});
-		default: {
-			const exhaustive = args.payload.subject;
-			throw new Error(`Unsupported local key export subject: ${String(exhaustive)}`);
-		}
-	}
-}
-async function handleLocalOnlyFlow(ctx, request, worker, opts) {
-	const { confirmationConfig, transactionSummary, theme } = opts;
-	const adapters = createConfirmTxFlowAdapters(ctx);
-	const session = createConfirmSession({
-		adapters,
-		worker,
-		request,
-		confirmationConfig,
-		transactionSummary,
-		theme,
-		surface: { kind: "mount_new" }
-	});
-	if (request.type === UserConfirmationType.SHOW_SECURE_PRIVATE_KEY_UI) try {
-		await mountExportViewer(ctx, request.payload, confirmationConfig, theme);
-		session.confirmAndCloseModal({
-			requestId: request.requestId,
-			intentDigest: getIntentDigest(request),
-			confirmed: true
-		});
-		return;
-	} catch (err) {
-		return session.confirmAndCloseModal({
-			requestId: request.requestId,
-			intentDigest: getIntentDigest(request),
-			confirmed: false,
-			error: errorMessage(err) || "Failed to render export UI"
-		});
-	}
-	if (request.type === UserConfirmationType.AUTHORIZE_KEY_EXPORT) {
-		removeExportViewerHostIfPresent();
-		const effectiveConfirmationConfig = __isWalletIframeHostMode() ? silentConfirmationConfig() : confirmationConfig;
-		const challengeB64u = String(request.payload?.challengeB64u || "").trim() || createRandomChallengeB64u();
-		if (effectiveConfirmationConfig.kind !== "silent") {
-			try {
-				const op = transactionSummary.operation;
-				const warning = transactionSummary.warning;
-				if (!transactionSummary.title) transactionSummary.title = op || "Export Private Key";
-				if (!transactionSummary.body) transactionSummary.body = warning || "Confirm to authenticate with your passkey.";
-			} catch {}
-			const securityContext = buildLocalOnlySecurityContext(adapters);
-			const { confirmed, error: uiError } = await session.promptUser({ securityContext });
-			if (!confirmed) return session.confirmAndCloseModal({
-				requestId: request.requestId,
-				intentDigest: getIntentDigest(request),
-				confirmed: false,
-				error: uiError
-			});
-		}
-		try {
-			const credential = await collectLocalOnlyExportCredentialWithPRF({
-				ctx,
-				payload: request.payload,
-				challengeB64u
-			});
-			return session.confirmAndCloseModal({
-				requestId: request.requestId,
-				intentDigest: getIntentDigest(request),
-				confirmed: true,
-				credential
-			});
-		} catch (err) {
-			const cancelled = isUserCancelledUserConfirm(err);
-			return session.confirmAndCloseModal({
-				requestId: request.requestId,
-				intentDigest: getIntentDigest(request),
-				confirmed: false,
-				error: cancelled ? ERROR_MESSAGES.cancelled : errorMessage(err) || ERROR_MESSAGES.collectCredentialsFailed
-			});
-		}
-	}
-}
-//#endregion
-export { handleLocalOnlyFlow };
-
-//# sourceMappingURL=localOnly.js.map