@tatchi-xyz/sdk 0.17.0 → 0.19.0

package/dist/esm/core/EmailRecovery/emailRecoveryPendingStore.js

@@ -0,0 +1,63 @@
+import { __esm } from "../../_virtual/rolldown_runtime.js";
+import { IndexedDBManager, init_IndexedDBManager } from "../IndexedDBManager/index.js";
+
+//#region src/core/EmailRecovery/emailRecoveryPendingStore.ts
+var EmailRecoveryPendingStore;
+var init_emailRecoveryPendingStore = __esm({ "src/core/EmailRecovery/emailRecoveryPendingStore.ts": (() => {
+	init_IndexedDBManager();
+	EmailRecoveryPendingStore = class {
+		getPendingTtlMs;
+		now;
+		constructor(options) {
+			this.getPendingTtlMs = options.getPendingTtlMs;
+			this.now = options.now ?? Date.now;
+		}
+		getPendingIndexKey(accountId) {
+			return `pendingEmailRecovery:${accountId}`;
+		}
+		getPendingRecordKey(accountId, nearPublicKey) {
+			return `${this.getPendingIndexKey(accountId)}:${nearPublicKey}`;
+		}
+		async get(accountId, nearPublicKey) {
+			const pendingTtlMs = this.getPendingTtlMs();
+			const indexKey = this.getPendingIndexKey(accountId);
+			const indexedNearPublicKey = await IndexedDBManager.clientDB.getAppState(indexKey);
+			const resolvedNearPublicKey = nearPublicKey ?? indexedNearPublicKey;
+			if (!resolvedNearPublicKey) return null;
+			const recordKey = this.getPendingRecordKey(accountId, resolvedNearPublicKey);
+			const record = await IndexedDBManager.clientDB.getAppState(recordKey);
+			const shouldClearIndex = indexedNearPublicKey === resolvedNearPublicKey;
+			if (!record) {
+				if (shouldClearIndex) await IndexedDBManager.clientDB.setAppState(indexKey, void 0).catch(() => {});
+				return null;
+			}
+			if (this.now() - record.createdAt > pendingTtlMs) {
+				await IndexedDBManager.clientDB.setAppState(recordKey, void 0).catch(() => {});
+				if (shouldClearIndex) await IndexedDBManager.clientDB.setAppState(indexKey, void 0).catch(() => {});
+				return null;
+			}
+			await this.touchIndex(accountId, record.nearPublicKey);
+			return record;
+		}
+		async set(record) {
+			const key = this.getPendingRecordKey(record.accountId, record.nearPublicKey);
+			await IndexedDBManager.clientDB.setAppState(key, record);
+			await this.touchIndex(record.accountId, record.nearPublicKey);
+		}
+		async clear(accountId, nearPublicKey) {
+			const indexKey = this.getPendingIndexKey(accountId);
+			const idx = await IndexedDBManager.clientDB.getAppState(indexKey).catch(() => void 0);
+			const resolvedNearPublicKey = nearPublicKey || idx || "";
+			if (resolvedNearPublicKey) await IndexedDBManager.clientDB.setAppState(this.getPendingRecordKey(accountId, resolvedNearPublicKey), void 0).catch(() => {});
+			if (!nearPublicKey || idx === nearPublicKey) await IndexedDBManager.clientDB.setAppState(indexKey, void 0).catch(() => {});
+		}
+		async touchIndex(accountId, nearPublicKey) {
+			await IndexedDBManager.clientDB.setAppState(this.getPendingIndexKey(accountId), nearPublicKey).catch(() => {});
+		}
+	};
+}) });
+
+//#endregion
+init_emailRecoveryPendingStore();
+export { EmailRecoveryPendingStore, init_emailRecoveryPendingStore };
+//# sourceMappingURL=emailRecoveryPendingStore.js.map

package/dist/esm/core/EmailRecovery/emailRecoveryPendingStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"emailRecoveryPendingStore.js","names":[],"sources":["../../../../src/core/EmailRecovery/emailRecoveryPendingStore.ts"],"sourcesContent":["import { IndexedDBManager } from '../IndexedDBManager';\nimport type { AccountId } from '../types/accountIds';\nimport type { PendingEmailRecovery } from '../TatchiPasskey/emailRecovery';\n\nexport interface PendingStore {\n  get(accountId: AccountId, nearPublicKey?: string): Promise<PendingEmailRecovery | null>;\n  set(record: PendingEmailRecovery): Promise<void>;\n  clear(accountId: AccountId, nearPublicKey?: string): Promise<void>;\n  touchIndex(accountId: AccountId, nearPublicKey: string): Promise<void>;\n}\n\ntype EmailRecoveryPendingStoreOptions = {\n  getPendingTtlMs: () => number;\n  now?: () => number;\n};\n\nexport class EmailRecoveryPendingStore implements PendingStore {\n  private getPendingTtlMs: () => number;\n  private now: () => number;\n\n  constructor(options: EmailRecoveryPendingStoreOptions) {\n    this.getPendingTtlMs = options.getPendingTtlMs;\n    this.now = options.now ?? Date.now;\n  }\n\n  private getPendingIndexKey(accountId: AccountId): string {\n    return `pendingEmailRecovery:${accountId}`;\n  }\n\n  private getPendingRecordKey(accountId: AccountId, nearPublicKey: string): string {\n    return `${this.getPendingIndexKey(accountId)}:${nearPublicKey}`;\n  }\n\n  async get(accountId: AccountId, nearPublicKey?: string): Promise<PendingEmailRecovery | null> {\n    const pendingTtlMs = this.getPendingTtlMs();\n    const indexKey = this.getPendingIndexKey(accountId);\n    const indexedNearPublicKey = await IndexedDBManager.clientDB.getAppState<string>(indexKey);\n    const resolvedNearPublicKey = nearPublicKey ?? indexedNearPublicKey;\n    if (!resolvedNearPublicKey) {\n      return null;\n    }\n\n    const recordKey = this.getPendingRecordKey(accountId, resolvedNearPublicKey);\n    const record = await IndexedDBManager.clientDB.getAppState<PendingEmailRecovery>(recordKey);\n    const shouldClearIndex = indexedNearPublicKey === resolvedNearPublicKey;\n    if (!record) {\n      if (shouldClearIndex) {\n        await IndexedDBManager.clientDB.setAppState(indexKey, undefined as any).catch(() => { });\n      }\n      return null;\n    }\n\n    if (this.now() - record.createdAt > pendingTtlMs) {\n      await IndexedDBManager.clientDB.setAppState(recordKey, undefined as any).catch(() => { });\n      if (shouldClearIndex) {\n        await IndexedDBManager.clientDB.setAppState(indexKey, undefined as any).catch(() => { });\n      }\n      return null;\n    }\n\n    await this.touchIndex(accountId, record.nearPublicKey);\n    return record;\n  }\n\n  async set(record: PendingEmailRecovery): Promise<void> {\n    const key = this.getPendingRecordKey(record.accountId, record.nearPublicKey);\n    await IndexedDBManager.clientDB.setAppState(key, record);\n    await this.touchIndex(record.accountId, record.nearPublicKey);\n  }\n\n  async clear(accountId: AccountId, nearPublicKey?: string): Promise<void> {\n    const indexKey = this.getPendingIndexKey(accountId);\n    const idx = await IndexedDBManager.clientDB.getAppState<string>(indexKey).catch(() => undefined);\n\n    const resolvedNearPublicKey = nearPublicKey || idx || '';\n    if (resolvedNearPublicKey) {\n      await IndexedDBManager.clientDB\n        .setAppState(this.getPendingRecordKey(accountId, resolvedNearPublicKey), undefined as any)\n        .catch(() => { });\n    }\n\n    if (!nearPublicKey || idx === nearPublicKey) {\n      await IndexedDBManager.clientDB.setAppState(indexKey, undefined as any).catch(() => { });\n    }\n  }\n\n  async touchIndex(accountId: AccountId, nearPublicKey: string): Promise<void> {\n    await IndexedDBManager.clientDB.setAppState(this.getPendingIndexKey(accountId), nearPublicKey).catch(() => { });\n  }\n}\n"],"mappings":";;;;;;;CAgBa,4BAAb,MAA+D;EAC7D,AAAQ;EACR,AAAQ;EAER,YAAY,SAA2C;AACrD,QAAK,kBAAkB,QAAQ;AAC/B,QAAK,MAAM,QAAQ,OAAO,KAAK;;EAGjC,AAAQ,mBAAmB,WAA8B;AACvD,UAAO,wBAAwB;;EAGjC,AAAQ,oBAAoB,WAAsB,eAA+B;AAC/E,UAAO,GAAG,KAAK,mBAAmB,WAAW,GAAG;;EAGlD,MAAM,IAAI,WAAsB,eAA8D;GAC5F,MAAM,eAAe,KAAK;GAC1B,MAAM,WAAW,KAAK,mBAAmB;GACzC,MAAM,uBAAuB,MAAM,iBAAiB,SAAS,YAAoB;GACjF,MAAM,wBAAwB,iBAAiB;AAC/C,OAAI,CAAC,sBACH,QAAO;GAGT,MAAM,YAAY,KAAK,oBAAoB,WAAW;GACtD,MAAM,SAAS,MAAM,iBAAiB,SAAS,YAAkC;GACjF,MAAM,mBAAmB,yBAAyB;AAClD,OAAI,CAAC,QAAQ;AACX,QAAI,iBACF,OAAM,iBAAiB,SAAS,YAAY,UAAU,QAAkB,YAAY;AAEtF,WAAO;;AAGT,OAAI,KAAK,QAAQ,OAAO,YAAY,cAAc;AAChD,UAAM,iBAAiB,SAAS,YAAY,WAAW,QAAkB,YAAY;AACrF,QAAI,iBACF,OAAM,iBAAiB,SAAS,YAAY,UAAU,QAAkB,YAAY;AAEtF,WAAO;;AAGT,SAAM,KAAK,WAAW,WAAW,OAAO;AACxC,UAAO;;EAGT,MAAM,IAAI,QAA6C;GACrD,MAAM,MAAM,KAAK,oBAAoB,OAAO,WAAW,OAAO;AAC9D,SAAM,iBAAiB,SAAS,YAAY,KAAK;AACjD,SAAM,KAAK,WAAW,OAAO,WAAW,OAAO;;EAGjD,MAAM,MAAM,WAAsB,eAAuC;GACvE,MAAM,WAAW,KAAK,mBAAmB;GACzC,MAAM,MAAM,MAAM,iBAAiB,SAAS,YAAoB,UAAU,YAAY;GAEtF,MAAM,wBAAwB,iBAAiB,OAAO;AACtD,OAAI,sBACF,OAAM,iBAAiB,SACpB,YAAY,KAAK,oBAAoB,WAAW,wBAAwB,QACxE,YAAY;AAGjB,OAAI,CAAC,iBAAiB,QAAQ,cAC5B,OAAM,iBAAiB,SAAS,YAAY,UAAU,QAAkB,YAAY;;EAIxF,MAAM,WAAW,WAAsB,eAAsC;AAC3E,SAAM,iBAAiB,SAAS,YAAY,KAAK,mBAAmB,YAAY,eAAe,YAAY"}

package/dist/esm/core/EmailRecovery/index.js

@@ -1,27 +1,9 @@
+import { __esm } from "../../_virtual/rolldown_runtime.js";
 import { init_accountIds, toAccountId } from "../types/accountIds.js";
 import { IndexedDBManager, init_IndexedDBManager } from "../IndexedDBManager/index.js";
+import { EmailRecoveryPendingStore, init_emailRecoveryPendingStore } from "./emailRecoveryPendingStore.js";
 
 //#region src/core/EmailRecovery/index.ts
-init_accountIds();
-init_IndexedDBManager();
-const canonicalizeEmail = (email) => {
-	const raw = String(email || "").trim();
-	if (!raw) return "";
-	const withoutHeaderName = raw.replace(/^[a-z0-9-]+\s*:\s*/i, "").trim();
-	const emailRegex = /([a-zA-Z0-9.!#$%&'*+/=?^_`{|}~-]+@[a-zA-Z0-9-]+(?:\.[a-zA-Z0-9-]+)*)/;
-	const angleMatch = withoutHeaderName.match(/<([^>]+)>/);
-	const candidates = [angleMatch?.[1], withoutHeaderName].filter((v) => typeof v === "string" && v.length > 0);
-	for (const candidate of candidates) {
-		const cleaned = candidate.replace(/^mailto:\s*/i, "");
-		const match = cleaned.match(emailRegex);
-		if (match?.[1]) return match[1].trim().toLowerCase();
-	}
-	return withoutHeaderName.toLowerCase();
-};
-const bytesToHex = (bytes) => {
-	const arr = bytes instanceof Uint8Array ? bytes : Uint8Array.from(bytes);
-	return `0x${Array.from(arr).map((b) => b.toString(16).padStart(2, "0")).join("")}`;
-};
 async function hashRecoveryEmails(emails, accountId) {
 	const encoder = new TextEncoder();
 	const salt = (accountId || "").trim().toLowerCase();
@@ -68,7 +50,32 @@ async function prepareRecoveryEmails(nearAccountId, recoveryEmails) {
 async function getLocalRecoveryEmails(nearAccountId) {
 	return IndexedDBManager.getRecoveryEmails(nearAccountId);
 }
+var canonicalizeEmail, bytesToHex;
+var init_EmailRecovery = __esm({ "src/core/EmailRecovery/index.ts": (() => {
+	init_accountIds();
+	init_IndexedDBManager();
+	init_emailRecoveryPendingStore();
+	canonicalizeEmail = (email) => {
+		const raw = String(email || "").trim();
+		if (!raw) return "";
+		const withoutHeaderName = raw.replace(/^[a-z0-9-]+\s*:\s*/i, "").trim();
+		const emailRegex = /([a-zA-Z0-9.!#$%&'*+/=?^_`{|}~-]+@[a-zA-Z0-9-]+(?:\.[a-zA-Z0-9-]+)*)/;
+		const angleMatch = withoutHeaderName.match(/<([^>]+)>/);
+		const candidates = [angleMatch?.[1], withoutHeaderName].filter((v) => typeof v === "string" && v.length > 0);
+		for (const candidate of candidates) {
+			const cleaned = candidate.replace(/^mailto:\s*/i, "");
+			const match = cleaned.match(emailRegex);
+			if (match?.[1]) return match[1].trim().toLowerCase();
+		}
+		return withoutHeaderName.toLowerCase();
+	};
+	bytesToHex = (bytes) => {
+		const arr = bytes instanceof Uint8Array ? bytes : Uint8Array.from(bytes);
+		return `0x${Array.from(arr).map((b) => b.toString(16).padStart(2, "0")).join("")}`;
+	};
+}) });
 
 //#endregion
-export { bytesToHex, getLocalRecoveryEmails, prepareRecoveryEmails };
+init_EmailRecovery();
+export { bytesToHex, getLocalRecoveryEmails, init_EmailRecovery, prepareRecoveryEmails };
 //# sourceMappingURL=index.js.map

package/dist/esm/core/EmailRecovery/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["hashed: number[][]","pairs: RecoveryEmailEntry[]"],"sources":["../../../../src/core/EmailRecovery/index.ts"],"sourcesContent":["import type { AccountId } from '../types/accountIds';\nimport { toAccountId } from '../types/accountIds';\nimport { IndexedDBManager, type RecoveryEmailRecord } from '../IndexedDBManager';\n\nexport type RecoveryEmailEntry = {\n  hashHex: string;\n  email: string;\n};\n\nexport { type RecoveryEmailRecord };\n\nexport const canonicalizeEmail = (email: string): string => {\n  const raw = String(email || '').trim();\n  if (!raw) return '';\n\n  // Handle cases where a full header line is passed in (e.g. \"From: ...\").\n  const withoutHeaderName = raw.replace(/^[a-z0-9-]+\\s*:\\s*/i, '').trim();\n\n  const emailRegex =\n    /([a-zA-Z0-9.!#$%&'*+/=?^_`{|}~-]+@[a-zA-Z0-9-]+(?:\\.[a-zA-Z0-9-]+)*)/;\n\n  // Prefer the common \"Name <email@domain>\" format when present, but still\n  // validate/extract the actual address via regex.\n  const angleMatch = withoutHeaderName.match(/<([^>]+)>/);\n  const candidates = [\n    angleMatch?.[1],\n    withoutHeaderName,\n  ].filter((v): v is string => typeof v === 'string' && v.length > 0);\n\n  for (const candidate of candidates) {\n    const cleaned = candidate.replace(/^mailto:\\s*/i, '');\n    const match = cleaned.match(emailRegex);\n    if (match?.[1]) {\n      return match[1].trim().toLowerCase();\n    }\n  }\n\n  return withoutHeaderName.toLowerCase();\n};\n\nexport const bytesToHex = (bytes: number[] | Uint8Array): string => {\n  const arr = bytes instanceof Uint8Array ? bytes : Uint8Array.from(bytes);\n  return `0x${Array.from(arr)\n    .map(b => b.toString(16).padStart(2, '0'))\n    .join('')}`;\n};\n\nasync function hashRecoveryEmails(emails: string[], accountId: AccountId): Promise<number[][]> {\n  const encoder = new TextEncoder();\n  const salt = (accountId || '').trim().toLowerCase();\n  const normalized = (emails || [])\n    .map(e => e.trim())\n    .filter(e => e.length > 0);\n\n  const hashed: number[][] = [];\n\n  for (const email of normalized) {\n    try {\n      const canonicalEmail = canonicalizeEmail(email);\n      const input = `${canonicalEmail}|${salt}`;\n      const data = encoder.encode(input);\n      const digest = await crypto.subtle.digest('SHA-256', data);\n      const bytes = new Uint8Array(digest);\n      hashed.push(Array.from(bytes));\n    } catch {\n      const bytes = encoder.encode(email.toLowerCase());\n      hashed.push(Array.from(bytes));\n    }\n  }\n\n  return hashed;\n}\n\n/**\n * Canonicalize and hash recovery emails for an account, and persist the mapping\n * (hashHex → canonical email) in IndexedDB on a best-effort basis.\n */\nexport async function prepareRecoveryEmails(nearAccountId: AccountId, recoveryEmails: string[]): Promise<{\n  hashes: number[][];\n  pairs: RecoveryEmailEntry[];\n}> {\n  const accountId = toAccountId(nearAccountId);\n\n  const trimmedEmails = (recoveryEmails || []).map(e => e.trim()).filter(e => e.length > 0);\n  const canonicalEmails = trimmedEmails.map(canonicalizeEmail);\n  const recoveryEmailHashes = await hashRecoveryEmails(recoveryEmails, accountId);\n\n  const pairs: RecoveryEmailEntry[] = recoveryEmailHashes.map((hashBytes, idx) => ({\n    hashHex: bytesToHex(hashBytes),\n    email: canonicalEmails[idx],\n  }));\n\n  void (async () => {\n    try {\n      await IndexedDBManager.upsertRecoveryEmails(accountId, pairs);\n    } catch (error) {\n      console.warn('[EmailRecovery] Failed to persist local recovery emails', error);\n    }\n  })();\n\n  return { hashes: recoveryEmailHashes, pairs };\n}\n\nexport async function getLocalRecoveryEmails(nearAccountId: AccountId): Promise<RecoveryEmailRecord[]> {\n  return IndexedDBManager.getRecoveryEmails(nearAccountId);\n}\n"],"mappings":";;;;;;AAWA,MAAa,qBAAqB,UAA0B;CAC1D,MAAM,MAAM,OAAO,SAAS,IAAI;AAChC,KAAI,CAAC,IAAK,QAAO;CAGjB,MAAM,oBAAoB,IAAI,QAAQ,uBAAuB,IAAI;CAEjE,MAAM,aACJ;CAIF,MAAM,aAAa,kBAAkB,MAAM;CAC3C,MAAM,aAAa,CACjB,aAAa,IACb,mBACA,QAAQ,MAAmB,OAAO,MAAM,YAAY,EAAE,SAAS;AAEjE,MAAK,MAAM,aAAa,YAAY;EAClC,MAAM,UAAU,UAAU,QAAQ,gBAAgB;EAClD,MAAM,QAAQ,QAAQ,MAAM;AAC5B,MAAI,QAAQ,GACV,QAAO,MAAM,GAAG,OAAO;;AAI3B,QAAO,kBAAkB;;AAG3B,MAAa,cAAc,UAAyC;CAClE,MAAM,MAAM,iBAAiB,aAAa,QAAQ,WAAW,KAAK;AAClE,QAAO,KAAK,MAAM,KAAK,KACpB,KAAI,MAAK,EAAE,SAAS,IAAI,SAAS,GAAG,MACpC,KAAK;;AAGV,eAAe,mBAAmB,QAAkB,WAA2C;CAC7F,MAAM,UAAU,IAAI;CACpB,MAAM,QAAQ,aAAa,IAAI,OAAO;CACtC,MAAM,cAAc,UAAU,IAC3B,KAAI,MAAK,EAAE,QACX,QAAO,MAAK,EAAE,SAAS;CAE1B,MAAMA,SAAqB;AAE3B,MAAK,MAAM,SAAS,WAClB,KAAI;EACF,MAAM,iBAAiB,kBAAkB;EACzC,MAAM,QAAQ,GAAG,eAAe,GAAG;EACnC,MAAM,OAAO,QAAQ,OAAO;EAC5B,MAAM,SAAS,MAAM,OAAO,OAAO,OAAO,WAAW;EACrD,MAAM,QAAQ,IAAI,WAAW;AAC7B,SAAO,KAAK,MAAM,KAAK;SACjB;EACN,MAAM,QAAQ,QAAQ,OAAO,MAAM;AACnC,SAAO,KAAK,MAAM,KAAK;;AAI3B,QAAO;;;;;;AAOT,eAAsB,sBAAsB,eAA0B,gBAGnE;CACD,MAAM,YAAY,YAAY;CAE9B,MAAM,iBAAiB,kBAAkB,IAAI,KAAI,MAAK,EAAE,QAAQ,QAAO,MAAK,EAAE,SAAS;CACvF,MAAM,kBAAkB,cAAc,IAAI;CAC1C,MAAM,sBAAsB,MAAM,mBAAmB,gBAAgB;CAErE,MAAMC,QAA8B,oBAAoB,KAAK,WAAW,SAAS;EAC/E,SAAS,WAAW;EACpB,OAAO,gBAAgB;;AAGzB,EAAM,YAAY;AAChB,MAAI;AACF,SAAM,iBAAiB,qBAAqB,WAAW;WAChD,OAAO;AACd,WAAQ,KAAK,2DAA2D;;;AAI5E,QAAO;EAAE,QAAQ;EAAqB;;;AAGxC,eAAsB,uBAAuB,eAA0D;AACrG,QAAO,iBAAiB,kBAAkB"}
+{"version":3,"file":"index.js","names":["hashed: number[][]","pairs: RecoveryEmailEntry[]"],"sources":["../../../../src/core/EmailRecovery/index.ts"],"sourcesContent":["import type { AccountId } from '../types/accountIds';\nimport { toAccountId } from '../types/accountIds';\nimport { IndexedDBManager, type RecoveryEmailRecord } from '../IndexedDBManager';\nexport { EmailRecoveryPendingStore, type PendingStore } from './emailRecoveryPendingStore';\n\nexport type RecoveryEmailEntry = {\n  hashHex: string;\n  email: string;\n};\n\nexport { type RecoveryEmailRecord };\n\nexport const canonicalizeEmail = (email: string): string => {\n  const raw = String(email || '').trim();\n  if (!raw) return '';\n\n  // Handle cases where a full header line is passed in (e.g. \"From: ...\").\n  const withoutHeaderName = raw.replace(/^[a-z0-9-]+\\s*:\\s*/i, '').trim();\n\n  const emailRegex =\n    /([a-zA-Z0-9.!#$%&'*+/=?^_`{|}~-]+@[a-zA-Z0-9-]+(?:\\.[a-zA-Z0-9-]+)*)/;\n\n  // Prefer the common \"Name <email@domain>\" format when present, but still\n  // validate/extract the actual address via regex.\n  const angleMatch = withoutHeaderName.match(/<([^>]+)>/);\n  const candidates = [\n    angleMatch?.[1],\n    withoutHeaderName,\n  ].filter((v): v is string => typeof v === 'string' && v.length > 0);\n\n  for (const candidate of candidates) {\n    const cleaned = candidate.replace(/^mailto:\\s*/i, '');\n    const match = cleaned.match(emailRegex);\n    if (match?.[1]) {\n      return match[1].trim().toLowerCase();\n    }\n  }\n\n  return withoutHeaderName.toLowerCase();\n};\n\nexport const bytesToHex = (bytes: number[] | Uint8Array): string => {\n  const arr = bytes instanceof Uint8Array ? bytes : Uint8Array.from(bytes);\n  return `0x${Array.from(arr)\n    .map(b => b.toString(16).padStart(2, '0'))\n    .join('')}`;\n};\n\nasync function hashRecoveryEmails(emails: string[], accountId: AccountId): Promise<number[][]> {\n  const encoder = new TextEncoder();\n  const salt = (accountId || '').trim().toLowerCase();\n  const normalized = (emails || [])\n    .map(e => e.trim())\n    .filter(e => e.length > 0);\n\n  const hashed: number[][] = [];\n\n  for (const email of normalized) {\n    try {\n      const canonicalEmail = canonicalizeEmail(email);\n      const input = `${canonicalEmail}|${salt}`;\n      const data = encoder.encode(input);\n      const digest = await crypto.subtle.digest('SHA-256', data);\n      const bytes = new Uint8Array(digest);\n      hashed.push(Array.from(bytes));\n    } catch {\n      const bytes = encoder.encode(email.toLowerCase());\n      hashed.push(Array.from(bytes));\n    }\n  }\n\n  return hashed;\n}\n\n/**\n * Canonicalize and hash recovery emails for an account, and persist the mapping\n * (hashHex → canonical email) in IndexedDB on a best-effort basis.\n */\nexport async function prepareRecoveryEmails(nearAccountId: AccountId, recoveryEmails: string[]): Promise<{\n  hashes: number[][];\n  pairs: RecoveryEmailEntry[];\n}> {\n  const accountId = toAccountId(nearAccountId);\n\n  const trimmedEmails = (recoveryEmails || []).map(e => e.trim()).filter(e => e.length > 0);\n  const canonicalEmails = trimmedEmails.map(canonicalizeEmail);\n  const recoveryEmailHashes = await hashRecoveryEmails(recoveryEmails, accountId);\n\n  const pairs: RecoveryEmailEntry[] = recoveryEmailHashes.map((hashBytes, idx) => ({\n    hashHex: bytesToHex(hashBytes),\n    email: canonicalEmails[idx],\n  }));\n\n  void (async () => {\n    try {\n      await IndexedDBManager.upsertRecoveryEmails(accountId, pairs);\n    } catch (error) {\n      console.warn('[EmailRecovery] Failed to persist local recovery emails', error);\n    }\n  })();\n\n  return { hashes: recoveryEmailHashes, pairs };\n}\n\nexport async function getLocalRecoveryEmails(nearAccountId: AccountId): Promise<RecoveryEmailRecord[]> {\n  return IndexedDBManager.getRecoveryEmails(nearAccountId);\n}\n"],"mappings":";;;;;;AAgDA,eAAe,mBAAmB,QAAkB,WAA2C;CAC7F,MAAM,UAAU,IAAI;CACpB,MAAM,QAAQ,aAAa,IAAI,OAAO;CACtC,MAAM,cAAc,UAAU,IAC3B,KAAI,MAAK,EAAE,QACX,QAAO,MAAK,EAAE,SAAS;CAE1B,MAAMA,SAAqB;AAE3B,MAAK,MAAM,SAAS,WAClB,KAAI;EACF,MAAM,iBAAiB,kBAAkB;EACzC,MAAM,QAAQ,GAAG,eAAe,GAAG;EACnC,MAAM,OAAO,QAAQ,OAAO;EAC5B,MAAM,SAAS,MAAM,OAAO,OAAO,OAAO,WAAW;EACrD,MAAM,QAAQ,IAAI,WAAW;AAC7B,SAAO,KAAK,MAAM,KAAK;SACjB;EACN,MAAM,QAAQ,QAAQ,OAAO,MAAM;AACnC,SAAO,KAAK,MAAM,KAAK;;AAI3B,QAAO;;;;;;AAOT,eAAsB,sBAAsB,eAA0B,gBAGnE;CACD,MAAM,YAAY,YAAY;CAE9B,MAAM,iBAAiB,kBAAkB,IAAI,KAAI,MAAK,EAAE,QAAQ,QAAO,MAAK,EAAE,SAAS;CACvF,MAAM,kBAAkB,cAAc,IAAI;CAC1C,MAAM,sBAAsB,MAAM,mBAAmB,gBAAgB;CAErE,MAAMC,QAA8B,oBAAoB,KAAK,WAAW,SAAS;EAC/E,SAAS,WAAW;EACpB,OAAO,gBAAgB;;AAGzB,EAAM,YAAY;AAChB,MAAI;AACF,SAAM,iBAAiB,qBAAqB,WAAW;WAChD,OAAO;AACd,WAAQ,KAAK,2DAA2D;;;AAI5E,QAAO;EAAE,QAAQ;EAAqB;;;AAGxC,eAAsB,uBAAuB,eAA0D;AACrG,QAAO,iBAAiB,kBAAkB;;;;;;;CA7F/B,qBAAqB,UAA0B;EAC1D,MAAM,MAAM,OAAO,SAAS,IAAI;AAChC,MAAI,CAAC,IAAK,QAAO;EAGjB,MAAM,oBAAoB,IAAI,QAAQ,uBAAuB,IAAI;EAEjE,MAAM,aACJ;EAIF,MAAM,aAAa,kBAAkB,MAAM;EAC3C,MAAM,aAAa,CACjB,aAAa,IACb,mBACA,QAAQ,MAAmB,OAAO,MAAM,YAAY,EAAE,SAAS;AAEjE,OAAK,MAAM,aAAa,YAAY;GAClC,MAAM,UAAU,UAAU,QAAQ,gBAAgB;GAClD,MAAM,QAAQ,QAAQ,MAAM;AAC5B,OAAI,QAAQ,GACV,QAAO,MAAM,GAAG,OAAO;;AAI3B,SAAO,kBAAkB;;CAGd,cAAc,UAAyC;EAClE,MAAM,MAAM,iBAAiB,aAAa,QAAQ,WAAW,KAAK;AAClE,SAAO,KAAK,MAAM,KAAK,KACpB,KAAI,MAAK,EAAE,SAAS,IAAI,SAAS,GAAG,MACpC,KAAK"}