@tatchi-xyz/sdk 0.20.0 → 0.31.0

package/dist/esm/core/WebAuthnManager/SignerWorkerManager/handlers/signNep413Message.js

@@ -1,12 +1,13 @@
-import { WorkerRequestType, init_signer_worker, isSignNep413MessageSuccess } from "../../../types/signer-worker.js";
-import { init_validation, isObject } from "../../../WalletIframe/validation.js";
-import { getLastLoggedInDeviceNumber, init_getDeviceNumber } from "../getDeviceNumber.js";
+import { WorkerRequestType, isSignNep413MessageSuccess, isWorkerError } from "../../../types/signer-worker.js";
+import { normalizeThresholdEd25519ParticipantIds } from "../../../../threshold/participants.js";
+import { removePrfOutputGuard } from "../../credentialsHelpers.js";
+import { getLastLoggedInDeviceNumber } from "../getDeviceNumber.js";
 import { generateSessionId } from "../sessionHandshake.js";
+import { resolveSignerModeForThresholdSigning } from "../../../threshold/thresholdEd25519RelayerHealth.js";
+import { clearCachedThresholdEd25519AuthSession, getCachedThresholdEd25519AuthSessionJwt, makeThresholdEd25519AuthSessionCacheKey } from "../../../threshold/thresholdEd25519AuthSession.js";
+import { isThresholdSessionAuthUnavailableError } from "../../../threshold/thresholdSessionPolicy.js";
 
 //#region src/core/WebAuthnManager/SignerWorkerManager/handlers/signNep413Message.ts
-init_signer_worker();
-init_getDeviceNumber();
-init_validation();
 /**
 * Sign a NEP-413 message using the user's passkey-derived private key
 *
@@ -15,16 +16,34 @@ init_validation();
 */
 async function signNep413Message({ ctx, payload }) {
 	try {
-		const deviceNumber = await getLastLoggedInDeviceNumber(payload.accountId, ctx.indexedDB.clientDB);
-		const encryptedKeyData = await ctx.indexedDB.nearKeysDB.getEncryptedKey(payload.accountId, deviceNumber);
-		if (!encryptedKeyData) throw new Error(`No encrypted key found for account: ${payload.accountId}`);
 		const sessionId = payload.sessionId ?? generateSessionId();
-		if (!ctx.vrfWorkerManager) throw new Error("VrfWorkerManager not available for NEP-413 signing");
-		await ctx.vrfWorkerManager.confirmAndPrepareSigningSession({
+		const relayerUrl = ctx.relayerUrl;
+		const nearAccountId = payload.accountId;
+		const deviceNumber = await getLastLoggedInDeviceNumber(nearAccountId, ctx.indexedDB.clientDB);
+		const [localKeyMaterial, thresholdKeyMaterial] = await Promise.all([ctx.indexedDB.nearKeysDB.getLocalKeyMaterial(nearAccountId, deviceNumber), ctx.indexedDB.nearKeysDB.getThresholdKeyMaterial(nearAccountId, deviceNumber)]);
+		if (!localKeyMaterial) throw new Error(`No local key material found for account: ${nearAccountId}`);
+		const resolvedSignerMode = await resolveSignerModeForThresholdSigning({
+			nearAccountId,
+			signerMode: payload.signerMode,
+			relayerUrl,
+			hasThresholdKeyMaterial: !!thresholdKeyMaterial
+		});
+		const vrfWorkerManager = ctx.vrfWorkerManager;
+		if (!vrfWorkerManager) throw new Error("VrfWorkerManager not available for NEP-413 signing");
+		const signingContext = validateAndPrepareNep413SigningContext({
+			nearAccountId,
+			resolvedSignerMode,
+			relayerUrl,
+			rpId: ctx.touchIdPrompt.getRpId(),
+			localKeyMaterial,
+			thresholdKeyMaterial
+		});
+		const confirmation = await vrfWorkerManager.confirmAndPrepareSigningSession({
 			ctx,
 			sessionId,
 			kind: "nep413",
-			nearAccountId: payload.accountId,
+			...signingContext.threshold && !signingContext.threshold.thresholdSessionJwt ? { signingAuthMode: "webauthn" } : {},
+			nearAccountId,
 			message: payload.message,
 			recipient: payload.recipient,
 			title: payload.title,
@@ -33,32 +52,95 @@ async function signNep413Message({ ctx, payload }) {
 			contractId: payload.contractId,
 			nearRpcUrl: payload.nearRpcUrl
 		});
-		const response = await ctx.sendMessage({
-			sessionId,
-			message: {
-				type: WorkerRequestType.SignNep413Message,
-				payload: {
+		let { vrfChallenge, credential } = extractSigningEvidenceFromConfirmation(confirmation);
+		const requestPayload = {
+			signerMode: signingContext.resolvedSignerMode,
+			message: payload.message,
+			recipient: payload.recipient,
+			nonce: payload.nonce,
+			state: payload.state || void 0,
+			accountId: nearAccountId,
+			nearPublicKey: signingContext.nearPublicKey,
+			decryption: signingContext.decryption,
+			threshold: signingContext.threshold ? {
+				relayerUrl: signingContext.threshold.relayerUrl,
+				relayerKeyId: signingContext.threshold.thresholdKeyMaterial.relayerKeyId,
+				clientParticipantId: signingContext.threshold.thresholdKeyMaterial.participants.find((p) => p.role === "client")?.id,
+				relayerParticipantId: signingContext.threshold.thresholdKeyMaterial.participants.find((p) => p.role === "relayer")?.id,
+				participantIds: signingContext.threshold.thresholdKeyMaterial.participants.map((p) => p.id),
+				thresholdSessionKind: "jwt",
+				thresholdSessionJwt: signingContext.threshold.thresholdSessionJwt
+			} : void 0,
+			vrfChallenge,
+			credential
+		};
+		if (!signingContext.threshold) {
+			const response = await ctx.sendMessage({
+				sessionId,
+				message: {
+					type: WorkerRequestType.SignNep413Message,
+					payload: requestPayload
+				}
+			});
+			const okResponse$1 = requireOkSignNep413MessageResponse(response);
+			return {
+				success: true,
+				accountId: okResponse$1.payload.accountId,
+				publicKey: okResponse$1.payload.publicKey,
+				signature: okResponse$1.payload.signature,
+				state: okResponse$1.payload.state || void 0
+			};
+		}
+		let okResponse;
+		try {
+			const response = await ctx.sendMessage({
+				sessionId,
+				message: {
+					type: WorkerRequestType.SignNep413Message,
+					payload: requestPayload
+				}
+			});
+			okResponse = requireOkSignNep413MessageResponse(response);
+		} catch (e) {
+			const err = e instanceof Error ? e : new Error(String(e));
+			if (!isThresholdSessionAuthUnavailableError(err)) throw err;
+			clearCachedThresholdEd25519AuthSession(signingContext.threshold.thresholdSessionCacheKey);
+			signingContext.threshold.thresholdSessionJwt = void 0;
+			requestPayload.threshold.thresholdSessionJwt = void 0;
+			if (!credential || !vrfChallenge) {
+				const refreshed = await vrfWorkerManager.confirmAndPrepareSigningSession({
+					ctx,
+					sessionId,
+					kind: "nep413",
+					signingAuthMode: "webauthn",
+					nearAccountId,
 					message: payload.message,
 					recipient: payload.recipient,
-					nonce: payload.nonce,
-					state: payload.state || void 0,
-					accountId: payload.accountId,
-					encryptedPrivateKeyData: encryptedKeyData.encryptedData,
-					encryptedPrivateKeyChacha20NonceB64u: encryptedKeyData.chacha20NonceB64u
-				}
+					title: payload.title,
+					body: payload.body,
+					confirmationConfigOverride: payload.confirmationConfigOverride,
+					contractId: payload.contractId,
+					nearRpcUrl: payload.nearRpcUrl
+				});
+				({vrfChallenge, credential} = extractSigningEvidenceFromConfirmation(refreshed));
+				requestPayload.vrfChallenge = vrfChallenge;
+				requestPayload.credential = credential;
 			}
-		});
-		if (!isSignNep413MessageSuccess(response)) {
-			console.error("SignerWorkerManager: NEP-413 signing failed:", response);
-			const payloadError = isObject(response?.payload) && response?.payload?.error;
-			throw new Error(payloadError || "NEP-413 signing failed");
+			const response = await ctx.sendMessage({
+				sessionId,
+				message: {
+					type: WorkerRequestType.SignNep413Message,
+					payload: requestPayload
+				}
+			});
+			okResponse = requireOkSignNep413MessageResponse(response);
 		}
 		return {
 			success: true,
-			accountId: response.payload.accountId,
-			publicKey: response.payload.publicKey,
-			signature: response.payload.signature,
-			state: response.payload.state || void 0
+			accountId: okResponse.payload.accountId,
+			publicKey: okResponse.payload.publicKey,
+			signature: okResponse.payload.signature,
+			state: okResponse.payload.state || void 0
 		};
 	} catch (error) {
 		console.error("SignerWorkerManager: NEP-413 signing error:", error);
@@ -71,6 +153,64 @@ async function signNep413Message({ ctx, payload }) {
 		};
 	}
 }
+function validateAndPrepareNep413SigningContext(args) {
+	const localPublicKey = String(args.localKeyMaterial.publicKey || "").trim();
+	if (!localPublicKey) throw new Error(`Missing local signing public key for ${args.nearAccountId}`);
+	if (args.resolvedSignerMode !== "threshold-signer") return {
+		resolvedSignerMode: "local-signer",
+		nearPublicKey: localPublicKey,
+		decryption: {
+			encryptedPrivateKeyData: args.localKeyMaterial.encryptedSk,
+			encryptedPrivateKeyChacha20NonceB64u: args.localKeyMaterial.chacha20NonceB64u
+		},
+		threshold: null
+	};
+	const thresholdKeyMaterial = args.thresholdKeyMaterial;
+	if (!thresholdKeyMaterial) throw new Error(`Missing threshold key material for ${args.nearAccountId}`);
+	const thresholdPublicKey = String(thresholdKeyMaterial.publicKey || "").trim();
+	if (!thresholdPublicKey) throw new Error(`Missing threshold signing public key for ${args.nearAccountId}`);
+	const relayerUrl = String(args.relayerUrl || "").trim();
+	if (!relayerUrl) throw new Error("Missing relayerUrl (required for threshold-signer)");
+	const rpId = String(args.rpId || "").trim();
+	if (!rpId) throw new Error("Missing rpId for threshold signing");
+	const participantIds = normalizeThresholdEd25519ParticipantIds(thresholdKeyMaterial.participants.map((p) => p.id));
+	if (!participantIds || participantIds.length < 2) throw new Error(`Invalid threshold signing participantIds (expected >=2 participants, got [${(participantIds || []).join(",")}])`);
+	const thresholdSessionCacheKey = makeThresholdEd25519AuthSessionCacheKey({
+		nearAccountId: args.nearAccountId,
+		rpId,
+		relayerUrl,
+		relayerKeyId: thresholdKeyMaterial.relayerKeyId,
+		participantIds
+	});
+	return {
+		resolvedSignerMode: "threshold-signer",
+		nearPublicKey: thresholdPublicKey,
+		decryption: {
+			encryptedPrivateKeyData: "",
+			encryptedPrivateKeyChacha20NonceB64u: ""
+		},
+		threshold: {
+			relayerUrl,
+			thresholdKeyMaterial,
+			thresholdSessionCacheKey,
+			thresholdSessionJwt: getCachedThresholdEd25519AuthSessionJwt(thresholdSessionCacheKey)
+		}
+	};
+}
+function extractSigningEvidenceFromConfirmation(confirmation) {
+	const credentialForRelay = confirmation.credential ? removePrfOutputGuard(confirmation.credential) : void 0;
+	return {
+		vrfChallenge: confirmation.vrfChallenge,
+		credential: credentialForRelay ? JSON.stringify(credentialForRelay) : void 0
+	};
+}
+function requireOkSignNep413MessageResponse(response) {
+	if (!isSignNep413MessageSuccess(response)) {
+		if (isWorkerError(response)) throw new Error(response.payload.error || "NEP-413 signing failed");
+		throw new Error("NEP-413 signing failed");
+	}
+	return response;
+}
 
 //#endregion
 export { signNep413Message };

package/dist/esm/core/WebAuthnManager/SignerWorkerManager/handlers/signNep413Message.js.map

@@ -1 +1 @@
-{"version":3,"file":"signNep413Message.js","names":["error: unknown"],"sources":["../../../../../../src/core/WebAuthnManager/SignerWorkerManager/handlers/signNep413Message.ts"],"sourcesContent":["\nimport { WorkerRequestType, isSignNep413MessageSuccess } from '../../../types/signer-worker';\nimport type { ConfirmationConfig } from '../../../types/signer-worker';\nimport { getLastLoggedInDeviceNumber } from '../getDeviceNumber';\nimport { SignerWorkerManagerContext } from '..';\nimport { isObject } from '../../../WalletIframe/validation';\nimport { generateSessionId } from '../sessionHandshake.js';\n\n/**\n * Sign a NEP-413 message using the user's passkey-derived private key\n *\n * @param payload - NEP-413 signing parameters including message, recipient, nonce, and state\n * @returns Promise resolving to signing result with account ID, public key, and signature\n */\nexport async function signNep413Message({ ctx, payload }: {\n  ctx: SignerWorkerManagerContext;\n  payload: {\n    message: string;\n    recipient: string;\n    nonce: string;\n    state: string | null;\n    accountId: string;\n    title?: string;\n    body?: string;\n    confirmationConfigOverride?: Partial<ConfirmationConfig>;\n    sessionId?: string;\n    contractId?: string;\n    nearRpcUrl?: string;\n  };\n}): Promise<{\n  success: boolean;\n  accountId: string;\n  publicKey: string;\n  signature: string;\n  state?: string;\n  error?: string;\n}> {\n  try {\n    const deviceNumber = await getLastLoggedInDeviceNumber(payload.accountId, ctx.indexedDB.clientDB);\n    const encryptedKeyData = await ctx.indexedDB.nearKeysDB.getEncryptedKey(payload.accountId, deviceNumber);\n    if (!encryptedKeyData) {\n      throw new Error(`No encrypted key found for account: ${payload.accountId}`);\n    }\n\n    // Expect caller (SignerWorkerManager) to reserve a session and wire ports; just use provided sessionId\n    const sessionId = payload.sessionId ?? generateSessionId();\n\n    if (!ctx.vrfWorkerManager) {\n      throw new Error('VrfWorkerManager not available for NEP-413 signing');\n    }\n\n    await ctx.vrfWorkerManager.confirmAndPrepareSigningSession({\n      ctx,\n      sessionId,\n      kind: 'nep413',\n      nearAccountId: payload.accountId,\n      message: payload.message,\n      recipient: payload.recipient,\n      title: payload.title,\n      body: payload.body,\n      confirmationConfigOverride: payload.confirmationConfigOverride,\n      contractId: payload.contractId,\n      nearRpcUrl: payload.nearRpcUrl,\n    });\n\n    const response = await ctx.sendMessage<WorkerRequestType.SignNep413Message>({\n      sessionId,\n      message: {\n        type: WorkerRequestType.SignNep413Message,\n        payload: {\n          message: payload.message,\n          recipient: payload.recipient,\n          nonce: payload.nonce,\n          state: payload.state || undefined,\n          accountId: payload.accountId,\n          encryptedPrivateKeyData: encryptedKeyData.encryptedData,\n          encryptedPrivateKeyChacha20NonceB64u: encryptedKeyData.chacha20NonceB64u,\n        }\n      },\n    });\n\n    if (!isSignNep413MessageSuccess(response)) {\n      console.error('SignerWorkerManager: NEP-413 signing failed:', response);\n      const payloadError = isObject(response?.payload) && (response as any)?.payload?.error;\n      throw new Error(payloadError || 'NEP-413 signing failed');\n    }\n\n    return {\n      success: true,\n      accountId: response.payload.accountId,\n      publicKey: response.payload.publicKey,\n      signature: response.payload.signature,\n      state: response.payload.state || undefined\n    };\n\n  } catch (error: unknown) {\n    console.error('SignerWorkerManager: NEP-413 signing error:', error);\n    return {\n      success: false,\n      accountId: '',\n      publicKey: '',\n      signature: '',\n      error: (error && typeof (error as { message?: unknown }).message === 'string')\n        ? (error as { message: string }).message\n        : 'Unknown error'\n    };\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;AAcA,eAAsB,kBAAkB,EAAE,KAAK,WAsB5C;AACD,KAAI;EACF,MAAM,eAAe,MAAM,4BAA4B,QAAQ,WAAW,IAAI,UAAU;EACxF,MAAM,mBAAmB,MAAM,IAAI,UAAU,WAAW,gBAAgB,QAAQ,WAAW;AAC3F,MAAI,CAAC,iBACH,OAAM,IAAI,MAAM,uCAAuC,QAAQ;EAIjE,MAAM,YAAY,QAAQ,aAAa;AAEvC,MAAI,CAAC,IAAI,iBACP,OAAM,IAAI,MAAM;AAGlB,QAAM,IAAI,iBAAiB,gCAAgC;GACzD;GACA;GACA,MAAM;GACN,eAAe,QAAQ;GACvB,SAAS,QAAQ;GACjB,WAAW,QAAQ;GACnB,OAAO,QAAQ;GACf,MAAM,QAAQ;GACd,4BAA4B,QAAQ;GACpC,YAAY,QAAQ;GACpB,YAAY,QAAQ;;EAGtB,MAAM,WAAW,MAAM,IAAI,YAAiD;GAC1E;GACA,SAAS;IACP,MAAM,kBAAkB;IACxB,SAAS;KACP,SAAS,QAAQ;KACjB,WAAW,QAAQ;KACnB,OAAO,QAAQ;KACf,OAAO,QAAQ,SAAS;KACxB,WAAW,QAAQ;KACnB,yBAAyB,iBAAiB;KAC1C,sCAAsC,iBAAiB;;;;AAK7D,MAAI,CAAC,2BAA2B,WAAW;AACzC,WAAQ,MAAM,gDAAgD;GAC9D,MAAM,eAAe,SAAS,UAAU,YAAa,UAAkB,SAAS;AAChF,SAAM,IAAI,MAAM,gBAAgB;;AAGlC,SAAO;GACL,SAAS;GACT,WAAW,SAAS,QAAQ;GAC5B,WAAW,SAAS,QAAQ;GAC5B,WAAW,SAAS,QAAQ;GAC5B,OAAO,SAAS,QAAQ,SAAS;;UAG5BA,OAAgB;AACvB,UAAQ,MAAM,+CAA+C;AAC7D,SAAO;GACL,SAAS;GACT,WAAW;GACX,WAAW;GACX,WAAW;GACX,OAAQ,SAAS,OAAQ,MAAgC,YAAY,WAChE,MAA8B,UAC/B"}
+{"version":3,"file":"signNep413Message.js","names":["okResponse","okResponse: WorkerSuccessResponse<typeof WorkerRequestType.SignNep413Message>","e: unknown","error: unknown","credentialForRelay: WebAuthnAuthenticationCredential | undefined"],"sources":["../../../../../../src/core/WebAuthnManager/SignerWorkerManager/handlers/signNep413Message.ts"],"sourcesContent":["import {\n  WorkerRequestType,\n  isSignNep413MessageSuccess,\n  isWorkerError,\n  type ConfirmationConfig,\n  type Nep413SigningResponse,\n  type SignerMode,\n  type WorkerSuccessResponse,\n} from '../../../types/signer-worker';\nimport type { WebAuthnAuthenticationCredential } from '../../../types';\nimport { removePrfOutputGuard } from '../../credentialsHelpers';\nimport { resolveSignerModeForThresholdSigning } from '../../../threshold/thresholdEd25519RelayerHealth';\nimport type {\n  LocalNearSkV3Material,\n  ThresholdEd25519_2p_V1Material,\n} from '../../../IndexedDBManager/passkeyNearKeysDB';\nimport type { VRFChallenge } from '../../../types/vrf-worker';\nimport {\n  clearCachedThresholdEd25519AuthSession,\n  getCachedThresholdEd25519AuthSessionJwt,\n  makeThresholdEd25519AuthSessionCacheKey,\n} from '../../../threshold/thresholdEd25519AuthSession';\nimport { isThresholdSessionAuthUnavailableError } from '../../../threshold/thresholdSessionPolicy';\nimport { normalizeThresholdEd25519ParticipantIds } from '../../../../threshold/participants';\nimport { getLastLoggedInDeviceNumber } from '../getDeviceNumber';\nimport { generateSessionId } from '../sessionHandshake.js';\nimport { SignerWorkerManagerContext } from '..';\n\n/**\n * Sign a NEP-413 message using the user's passkey-derived private key\n *\n * @param payload - NEP-413 signing parameters including message, recipient, nonce, and state\n * @returns Promise resolving to signing result with account ID, public key, and signature\n */\nexport async function signNep413Message({ ctx, payload }: {\n  ctx: SignerWorkerManagerContext;\n  payload: {\n    message: string;\n    recipient: string;\n    nonce: string;\n    state: string | null;\n    accountId: string;\n    signerMode: SignerMode;\n    title?: string;\n    body?: string;\n    confirmationConfigOverride?: Partial<ConfirmationConfig>;\n    sessionId?: string;\n    contractId?: string;\n    nearRpcUrl?: string;\n  };\n}): Promise<{\n  success: boolean;\n  accountId: string;\n  publicKey: string;\n  signature: string;\n  state?: string;\n  error?: string;\n}> {\n  try {\n    const sessionId = payload.sessionId ?? generateSessionId();\n    const relayerUrl = ctx.relayerUrl;\n    const nearAccountId = payload.accountId;\n\n    const deviceNumber = await getLastLoggedInDeviceNumber(nearAccountId, ctx.indexedDB.clientDB);\n    const [localKeyMaterial, thresholdKeyMaterial] = await Promise.all([\n      ctx.indexedDB.nearKeysDB.getLocalKeyMaterial(nearAccountId, deviceNumber),\n      ctx.indexedDB.nearKeysDB.getThresholdKeyMaterial(nearAccountId, deviceNumber),\n    ]);\n    if (!localKeyMaterial) {\n      throw new Error(`No local key material found for account: ${nearAccountId}`);\n    }\n\n    const resolvedSignerMode = await resolveSignerModeForThresholdSigning({\n      nearAccountId,\n      signerMode: payload.signerMode,\n      relayerUrl,\n      hasThresholdKeyMaterial: !!thresholdKeyMaterial,\n    });\n\n    const vrfWorkerManager = ctx.vrfWorkerManager;\n    if (!vrfWorkerManager) {\n      throw new Error('VrfWorkerManager not available for NEP-413 signing');\n    }\n\n    const signingContext = validateAndPrepareNep413SigningContext({\n      nearAccountId,\n      resolvedSignerMode,\n      relayerUrl,\n      rpId: ctx.touchIdPrompt.getRpId(),\n      localKeyMaterial,\n      thresholdKeyMaterial,\n    });\n\n    const confirmation = await vrfWorkerManager.confirmAndPrepareSigningSession({\n      ctx,\n      sessionId,\n      kind: 'nep413',\n      ...(signingContext.threshold && !signingContext.threshold.thresholdSessionJwt\n        ? { signingAuthMode: 'webauthn' }\n        : {}),\n      nearAccountId,\n      message: payload.message,\n      recipient: payload.recipient,\n      title: payload.title,\n      body: payload.body,\n      confirmationConfigOverride: payload.confirmationConfigOverride,\n      contractId: payload.contractId,\n      nearRpcUrl: payload.nearRpcUrl,\n    });\n\n    let { vrfChallenge, credential } = extractSigningEvidenceFromConfirmation(confirmation);\n\n    const requestPayload = {\n      signerMode: signingContext.resolvedSignerMode,\n      message: payload.message,\n      recipient: payload.recipient,\n      nonce: payload.nonce,\n      state: payload.state || undefined,\n      accountId: nearAccountId,\n      nearPublicKey: signingContext.nearPublicKey,\n      decryption: signingContext.decryption,\n      threshold: signingContext.threshold\n        ? {\n          relayerUrl: signingContext.threshold.relayerUrl,\n          relayerKeyId: signingContext.threshold.thresholdKeyMaterial.relayerKeyId,\n          clientParticipantId: signingContext.threshold.thresholdKeyMaterial.participants.find((p) => p.role === 'client')?.id,\n          relayerParticipantId: signingContext.threshold.thresholdKeyMaterial.participants.find((p) => p.role === 'relayer')?.id,\n          participantIds: signingContext.threshold.thresholdKeyMaterial.participants.map((p) => p.id),\n          thresholdSessionKind: 'jwt' as const,\n          thresholdSessionJwt: signingContext.threshold.thresholdSessionJwt,\n        }\n        : undefined,\n      vrfChallenge,\n      credential,\n    };\n\n    if (!signingContext.threshold) {\n      const response = await ctx.sendMessage<typeof WorkerRequestType.SignNep413Message>({\n        sessionId,\n        message: { type: WorkerRequestType.SignNep413Message, payload: requestPayload },\n      });\n      const okResponse = requireOkSignNep413MessageResponse(response);\n\n      return {\n        success: true,\n        accountId: okResponse.payload.accountId,\n        publicKey: okResponse.payload.publicKey,\n        signature: okResponse.payload.signature,\n        state: okResponse.payload.state || undefined,\n      };\n    }\n\n    let okResponse: WorkerSuccessResponse<typeof WorkerRequestType.SignNep413Message>;\n    try {\n      const response = await ctx.sendMessage<typeof WorkerRequestType.SignNep413Message>({\n        sessionId,\n        message: { type: WorkerRequestType.SignNep413Message, payload: requestPayload },\n      });\n      okResponse = requireOkSignNep413MessageResponse(response);\n    } catch (e: unknown) {\n      const err = e instanceof Error ? e : new Error(String(e));\n      if (!isThresholdSessionAuthUnavailableError(err)) throw err;\n\n      clearCachedThresholdEd25519AuthSession(signingContext.threshold.thresholdSessionCacheKey);\n      signingContext.threshold.thresholdSessionJwt = undefined;\n      requestPayload.threshold!.thresholdSessionJwt = undefined;\n\n      if (!credential || !vrfChallenge) {\n        const refreshed = await vrfWorkerManager.confirmAndPrepareSigningSession({\n          ctx,\n          sessionId,\n          kind: 'nep413',\n          signingAuthMode: 'webauthn',\n          nearAccountId,\n          message: payload.message,\n          recipient: payload.recipient,\n          title: payload.title,\n          body: payload.body,\n          confirmationConfigOverride: payload.confirmationConfigOverride,\n          contractId: payload.contractId,\n          nearRpcUrl: payload.nearRpcUrl,\n        });\n\n        ({ vrfChallenge, credential } = extractSigningEvidenceFromConfirmation(refreshed));\n\n        requestPayload.vrfChallenge = vrfChallenge;\n        requestPayload.credential = credential;\n      }\n\n      const response = await ctx.sendMessage<typeof WorkerRequestType.SignNep413Message>({\n        sessionId,\n        message: { type: WorkerRequestType.SignNep413Message, payload: requestPayload },\n      });\n      okResponse = requireOkSignNep413MessageResponse(response);\n    }\n\n    return {\n      success: true,\n      accountId: okResponse.payload.accountId,\n      publicKey: okResponse.payload.publicKey,\n      signature: okResponse.payload.signature,\n      state: okResponse.payload.state || undefined,\n    };\n  } catch (error: unknown) {\n    // eslint-disable-next-line no-console\n    console.error('SignerWorkerManager: NEP-413 signing error:', error);\n    return {\n      success: false,\n      accountId: '',\n      publicKey: '',\n      signature: '',\n      error: (error && typeof (error as { message?: unknown }).message === 'string')\n        ? (error as { message: string }).message\n        : 'Unknown error'\n    };\n  }\n}\n\ntype ThresholdNep413SigningContext = {\n  resolvedSignerMode: 'threshold-signer';\n  nearPublicKey: string;\n  decryption: { encryptedPrivateKeyData: string; encryptedPrivateKeyChacha20NonceB64u: string };\n  threshold: {\n    relayerUrl: string;\n    thresholdKeyMaterial: ThresholdEd25519_2p_V1Material;\n    thresholdSessionCacheKey: string;\n    thresholdSessionJwt: string | undefined;\n  };\n};\n\ntype LocalNep413SigningContext = {\n  resolvedSignerMode: 'local-signer';\n  nearPublicKey: string;\n  decryption: { encryptedPrivateKeyData: string; encryptedPrivateKeyChacha20NonceB64u: string };\n  threshold: null;\n};\n\ntype Nep413SigningContext = ThresholdNep413SigningContext | LocalNep413SigningContext;\n\nfunction validateAndPrepareNep413SigningContext(args: {\n  nearAccountId: string;\n  resolvedSignerMode: SignerMode['mode'];\n  relayerUrl: string;\n  rpId: string | null;\n  localKeyMaterial: LocalNearSkV3Material;\n  thresholdKeyMaterial: ThresholdEd25519_2p_V1Material | null;\n}): Nep413SigningContext {\n  const localPublicKey = String(args.localKeyMaterial.publicKey || '').trim();\n  if (!localPublicKey) {\n    throw new Error(`Missing local signing public key for ${args.nearAccountId}`);\n  }\n\n  if (args.resolvedSignerMode !== 'threshold-signer') {\n    return {\n      resolvedSignerMode: 'local-signer',\n      nearPublicKey: localPublicKey,\n      decryption: {\n        encryptedPrivateKeyData: args.localKeyMaterial.encryptedSk,\n        encryptedPrivateKeyChacha20NonceB64u: args.localKeyMaterial.chacha20NonceB64u,\n      },\n      threshold: null,\n    };\n  }\n\n  const thresholdKeyMaterial = args.thresholdKeyMaterial;\n  if (!thresholdKeyMaterial) {\n    throw new Error(`Missing threshold key material for ${args.nearAccountId}`);\n  }\n\n  const thresholdPublicKey = String(thresholdKeyMaterial.publicKey || '').trim();\n  if (!thresholdPublicKey) {\n    throw new Error(`Missing threshold signing public key for ${args.nearAccountId}`);\n  }\n\n  const relayerUrl = String(args.relayerUrl || '').trim();\n  if (!relayerUrl) {\n    throw new Error('Missing relayerUrl (required for threshold-signer)');\n  }\n\n  const rpId = String(args.rpId || '').trim();\n  if (!rpId) {\n    throw new Error('Missing rpId for threshold signing');\n  }\n\n  const participantIds = normalizeThresholdEd25519ParticipantIds(thresholdKeyMaterial.participants.map((p) => p.id));\n  if (!participantIds || participantIds.length < 2) {\n    throw new Error(\n      `Invalid threshold signing participantIds (expected >=2 participants, got [${(participantIds || []).join(',')}])`\n    );\n  }\n\n  const thresholdSessionCacheKey = makeThresholdEd25519AuthSessionCacheKey({\n    nearAccountId: args.nearAccountId,\n    rpId,\n    relayerUrl,\n    relayerKeyId: thresholdKeyMaterial.relayerKeyId,\n    participantIds,\n  });\n\n  return {\n    resolvedSignerMode: 'threshold-signer',\n    nearPublicKey: thresholdPublicKey,\n    decryption: {\n      encryptedPrivateKeyData: '',\n      encryptedPrivateKeyChacha20NonceB64u: '',\n    },\n    threshold: {\n      relayerUrl,\n      thresholdKeyMaterial,\n      thresholdSessionCacheKey,\n      thresholdSessionJwt: getCachedThresholdEd25519AuthSessionJwt(thresholdSessionCacheKey),\n    },\n  };\n}\n\nfunction extractSigningEvidenceFromConfirmation(confirmation: {\n  vrfChallenge?: VRFChallenge;\n  credential?: unknown;\n}): {\n  vrfChallenge: VRFChallenge | undefined;\n  credential: string | undefined;\n} {\n  const credentialForRelay: WebAuthnAuthenticationCredential | undefined = confirmation.credential\n    ? removePrfOutputGuard(confirmation.credential as WebAuthnAuthenticationCredential)\n    : undefined;\n\n  return {\n    vrfChallenge: confirmation.vrfChallenge,\n    credential: credentialForRelay ? JSON.stringify(credentialForRelay) : undefined,\n  };\n}\n\nfunction requireOkSignNep413MessageResponse(\n  response: Nep413SigningResponse,\n): WorkerSuccessResponse<typeof WorkerRequestType.SignNep413Message> {\n  if (!isSignNep413MessageSuccess(response)) {\n    if (isWorkerError(response)) {\n      throw new Error(response.payload.error || 'NEP-413 signing failed');\n    }\n    throw new Error('NEP-413 signing failed');\n  }\n  return response;\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAkCA,eAAsB,kBAAkB,EAAE,KAAK,WAuB5C;AACD,KAAI;EACF,MAAM,YAAY,QAAQ,aAAa;EACvC,MAAM,aAAa,IAAI;EACvB,MAAM,gBAAgB,QAAQ;EAE9B,MAAM,eAAe,MAAM,4BAA4B,eAAe,IAAI,UAAU;EACpF,MAAM,CAAC,kBAAkB,wBAAwB,MAAM,QAAQ,IAAI,CACjE,IAAI,UAAU,WAAW,oBAAoB,eAAe,eAC5D,IAAI,UAAU,WAAW,wBAAwB,eAAe;AAElE,MAAI,CAAC,iBACH,OAAM,IAAI,MAAM,4CAA4C;EAG9D,MAAM,qBAAqB,MAAM,qCAAqC;GACpE;GACA,YAAY,QAAQ;GACpB;GACA,yBAAyB,CAAC,CAAC;;EAG7B,MAAM,mBAAmB,IAAI;AAC7B,MAAI,CAAC,iBACH,OAAM,IAAI,MAAM;EAGlB,MAAM,iBAAiB,uCAAuC;GAC5D;GACA;GACA;GACA,MAAM,IAAI,cAAc;GACxB;GACA;;EAGF,MAAM,eAAe,MAAM,iBAAiB,gCAAgC;GAC1E;GACA;GACA,MAAM;GACN,GAAI,eAAe,aAAa,CAAC,eAAe,UAAU,sBACtD,EAAE,iBAAiB,eACnB;GACJ;GACA,SAAS,QAAQ;GACjB,WAAW,QAAQ;GACnB,OAAO,QAAQ;GACf,MAAM,QAAQ;GACd,4BAA4B,QAAQ;GACpC,YAAY,QAAQ;GACpB,YAAY,QAAQ;;EAGtB,IAAI,EAAE,cAAc,eAAe,uCAAuC;EAE1E,MAAM,iBAAiB;GACrB,YAAY,eAAe;GAC3B,SAAS,QAAQ;GACjB,WAAW,QAAQ;GACnB,OAAO,QAAQ;GACf,OAAO,QAAQ,SAAS;GACxB,WAAW;GACX,eAAe,eAAe;GAC9B,YAAY,eAAe;GAC3B,WAAW,eAAe,YACtB;IACA,YAAY,eAAe,UAAU;IACrC,cAAc,eAAe,UAAU,qBAAqB;IAC5D,qBAAqB,eAAe,UAAU,qBAAqB,aAAa,MAAM,MAAM,EAAE,SAAS,WAAW;IAClH,sBAAsB,eAAe,UAAU,qBAAqB,aAAa,MAAM,MAAM,EAAE,SAAS,YAAY;IACpH,gBAAgB,eAAe,UAAU,qBAAqB,aAAa,KAAK,MAAM,EAAE;IACxF,sBAAsB;IACtB,qBAAqB,eAAe,UAAU;OAE9C;GACJ;GACA;;AAGF,MAAI,CAAC,eAAe,WAAW;GAC7B,MAAM,WAAW,MAAM,IAAI,YAAwD;IACjF;IACA,SAAS;KAAE,MAAM,kBAAkB;KAAmB,SAAS;;;GAEjE,MAAMA,eAAa,mCAAmC;AAEtD,UAAO;IACL,SAAS;IACT,WAAWA,aAAW,QAAQ;IAC9B,WAAWA,aAAW,QAAQ;IAC9B,WAAWA,aAAW,QAAQ;IAC9B,OAAOA,aAAW,QAAQ,SAAS;;;EAIvC,IAAIC;AACJ,MAAI;GACF,MAAM,WAAW,MAAM,IAAI,YAAwD;IACjF;IACA,SAAS;KAAE,MAAM,kBAAkB;KAAmB,SAAS;;;AAEjE,gBAAa,mCAAmC;WACzCC,GAAY;GACnB,MAAM,MAAM,aAAa,QAAQ,IAAI,IAAI,MAAM,OAAO;AACtD,OAAI,CAAC,uCAAuC,KAAM,OAAM;AAExD,0CAAuC,eAAe,UAAU;AAChE,kBAAe,UAAU,sBAAsB;AAC/C,kBAAe,UAAW,sBAAsB;AAEhD,OAAI,CAAC,cAAc,CAAC,cAAc;IAChC,MAAM,YAAY,MAAM,iBAAiB,gCAAgC;KACvE;KACA;KACA,MAAM;KACN,iBAAiB;KACjB;KACA,SAAS,QAAQ;KACjB,WAAW,QAAQ;KACnB,OAAO,QAAQ;KACf,MAAM,QAAQ;KACd,4BAA4B,QAAQ;KACpC,YAAY,QAAQ;KACpB,YAAY,QAAQ;;AAGtB,KAAC,CAAE,cAAc,cAAe,uCAAuC;AAEvE,mBAAe,eAAe;AAC9B,mBAAe,aAAa;;GAG9B,MAAM,WAAW,MAAM,IAAI,YAAwD;IACjF;IACA,SAAS;KAAE,MAAM,kBAAkB;KAAmB,SAAS;;;AAEjE,gBAAa,mCAAmC;;AAGlD,SAAO;GACL,SAAS;GACT,WAAW,WAAW,QAAQ;GAC9B,WAAW,WAAW,QAAQ;GAC9B,WAAW,WAAW,QAAQ;GAC9B,OAAO,WAAW,QAAQ,SAAS;;UAE9BC,OAAgB;AAEvB,UAAQ,MAAM,+CAA+C;AAC7D,SAAO;GACL,SAAS;GACT,WAAW;GACX,WAAW;GACX,WAAW;GACX,OAAQ,SAAS,OAAQ,MAAgC,YAAY,WAChE,MAA8B,UAC/B;;;;AA0BV,SAAS,uCAAuC,MAOvB;CACvB,MAAM,iBAAiB,OAAO,KAAK,iBAAiB,aAAa,IAAI;AACrE,KAAI,CAAC,eACH,OAAM,IAAI,MAAM,wCAAwC,KAAK;AAG/D,KAAI,KAAK,uBAAuB,mBAC9B,QAAO;EACL,oBAAoB;EACpB,eAAe;EACf,YAAY;GACV,yBAAyB,KAAK,iBAAiB;GAC/C,sCAAsC,KAAK,iBAAiB;;EAE9D,WAAW;;CAIf,MAAM,uBAAuB,KAAK;AAClC,KAAI,CAAC,qBACH,OAAM,IAAI,MAAM,sCAAsC,KAAK;CAG7D,MAAM,qBAAqB,OAAO,qBAAqB,aAAa,IAAI;AACxE,KAAI,CAAC,mBACH,OAAM,IAAI,MAAM,4CAA4C,KAAK;CAGnE,MAAM,aAAa,OAAO,KAAK,cAAc,IAAI;AACjD,KAAI,CAAC,WACH,OAAM,IAAI,MAAM;CAGlB,MAAM,OAAO,OAAO,KAAK,QAAQ,IAAI;AACrC,KAAI,CAAC,KACH,OAAM,IAAI,MAAM;CAGlB,MAAM,iBAAiB,wCAAwC,qBAAqB,aAAa,KAAK,MAAM,EAAE;AAC9G,KAAI,CAAC,kBAAkB,eAAe,SAAS,EAC7C,OAAM,IAAI,MACR,8EAA8E,kBAAkB,IAAI,KAAK,KAAK;CAIlH,MAAM,2BAA2B,wCAAwC;EACvE,eAAe,KAAK;EACpB;EACA;EACA,cAAc,qBAAqB;EACnC;;AAGF,QAAO;EACL,oBAAoB;EACpB,eAAe;EACf,YAAY;GACV,yBAAyB;GACzB,sCAAsC;;EAExC,WAAW;GACT;GACA;GACA;GACA,qBAAqB,wCAAwC;;;;AAKnE,SAAS,uCAAuC,cAM9C;CACA,MAAMC,qBAAmE,aAAa,aAClF,qBAAqB,aAAa,cAClC;AAEJ,QAAO;EACL,cAAc,aAAa;EAC3B,YAAY,qBAAqB,KAAK,UAAU,sBAAsB;;;AAI1E,SAAS,mCACP,UACmE;AACnE,KAAI,CAAC,2BAA2B,WAAW;AACzC,MAAI,cAAc,UAChB,OAAM,IAAI,MAAM,SAAS,QAAQ,SAAS;AAE5C,QAAM,IAAI,MAAM;;AAElB,QAAO"}

package/dist/esm/core/WebAuthnManager/SignerWorkerManager/handlers/signTransactionWithKeyPair.js

@@ -1,10 +1,8 @@
-import { WorkerRequestType, WorkerResponseType, init_signer_worker } from "../../../types/signer-worker.js";
-import { init_actions, validateActionArgsWasm } from "../../../types/actions.js";
+import { WorkerRequestType, WorkerResponseType } from "../../../types/signer-worker.js";
 import { SignedTransaction } from "../../../NearClient.js";
+import { validateActionArgsWasm } from "../../../types/actions.js";
 
 //#region src/core/WebAuthnManager/SignerWorkerManager/handlers/signTransactionWithKeyPair.ts
-init_actions();
-init_signer_worker();
 /**
 * Sign transaction with raw private key (for key replacement in Option D device linking)
 * No TouchID/PRF required - uses provided private key directly
@@ -12,12 +10,8 @@ init_signer_worker();
 async function signTransactionWithKeyPair({ ctx, nearPrivateKey, signerAccountId, receiverId, nonce, blockHash, actions }) {
 	try {
 		console.info("SignerWorkerManager: Starting transaction signing with provided private key");
-		actions.forEach((action, index) => {
-			try {
-				validateActionArgsWasm(action);
-			} catch (error) {
-				throw new Error(`Action ${index} validation failed: ${error instanceof Error ? error.message : "Unknown error"}`);
-			}
+		actions.forEach((action) => {
+			validateActionArgsWasm(action);
 		});
 		const response = await ctx.sendMessage({ message: {
 			type: WorkerRequestType.SignTransactionWithKeyPair,

package/dist/esm/core/WebAuthnManager/SignerWorkerManager/handlers/signTransactionWithKeyPair.js.map

@@ -1 +1 @@
-{"version":3,"file":"signTransactionWithKeyPair.js","names":["error: unknown"],"sources":["../../../../../../src/core/WebAuthnManager/SignerWorkerManager/handlers/signTransactionWithKeyPair.ts"],"sourcesContent":["\nimport { SignedTransaction } from '../../../NearClient';\nimport { type ActionArgsWasm, validateActionArgsWasm } from '../../../types/actions';\nimport {\n  WorkerRequestType,\n  WorkerResponseType,\n  WasmTransactionSignResult,\n} from '../../../types/signer-worker';\nimport { SignerWorkerManagerContext } from '..';\n\n/**\n * Sign transaction with raw private key (for key replacement in Option D device linking)\n * No TouchID/PRF required - uses provided private key directly\n */\nexport async function signTransactionWithKeyPair({\n  ctx,\n  nearPrivateKey,\n  signerAccountId,\n  receiverId,\n  nonce,\n  blockHash,\n  actions\n}: {\n  ctx: SignerWorkerManagerContext;\n  nearPrivateKey: string;\n  signerAccountId: string;\n  receiverId: string;\n  nonce: string;\n  blockHash: string;\n  actions: ActionArgsWasm[];\n}): Promise<{\n  signedTransaction: SignedTransaction;\n  logs?: string[];\n}> {\n  try {\n    console.info('SignerWorkerManager: Starting transaction signing with provided private key');\n\n    // Validate actions\n    actions.forEach((action, index) => {\n      try {\n        validateActionArgsWasm(action);\n      } catch (error) {\n        throw new Error(`Action ${index} validation failed: ${error instanceof Error ? error.message : 'Unknown error'}`);\n      }\n    });\n\n    const response = await ctx.sendMessage<WorkerRequestType.SignTransactionWithKeyPair>({\n      message: {\n        type: WorkerRequestType.SignTransactionWithKeyPair,\n        payload: {\n          nearPrivateKey,\n          signerAccountId,\n          receiverId,\n          nonce,\n          blockHash: blockHash,\n          actions: actions\n        }\n      }\n    });\n\n    if (response.type !== WorkerResponseType.SignTransactionWithKeyPairSuccess) {\n      console.error('SignerWorkerManager: Transaction signing with private key failed:', response);\n      throw new Error('Transaction signing with private key failed');\n    }\n\n    const wasmResult = response.payload as WasmTransactionSignResult;\n    if (!wasmResult.success) {\n      throw new Error(wasmResult.error || 'Transaction signing failed');\n    }\n    // Extract the signed transaction\n    const signedTransactions = wasmResult.signedTransactions || [];\n    if (signedTransactions.length !== 1) {\n      throw new Error(`Expected 1 signed transaction but received ${signedTransactions.length}`);\n    }\n    const signedTx = signedTransactions[0];\n    if (!signedTx || !signedTx.transaction || !signedTx.signature) {\n      throw new Error('Incomplete signed transaction data received');\n    }\n\n    const result = {\n      signedTransaction: new SignedTransaction({\n        transaction: signedTx.transaction,\n        signature: signedTx.signature,\n        borsh_bytes: Array.from(signedTx.borshBytes || [])\n      }),\n      logs: wasmResult.logs\n    };\n\n    console.debug('SignerWorkerManager: Transaction signing with private key successful');\n    return result;\n\n  } catch (error: unknown) {\n    console.error('SignerWorkerManager: Transaction signing with private key error:', error);\n    throw error;\n  }\n}\n"],"mappings":";;;;;;;;;;;AAcA,eAAsB,2BAA2B,EAC/C,KACA,gBACA,iBACA,YACA,OACA,WACA,WAYC;AACD,KAAI;AACF,UAAQ,KAAK;AAGb,UAAQ,SAAS,QAAQ,UAAU;AACjC,OAAI;AACF,2BAAuB;YAChB,OAAO;AACd,UAAM,IAAI,MAAM,UAAU,MAAM,sBAAsB,iBAAiB,QAAQ,MAAM,UAAU;;;EAInG,MAAM,WAAW,MAAM,IAAI,YAA0D,EACnF,SAAS;GACP,MAAM,kBAAkB;GACxB,SAAS;IACP;IACA;IACA;IACA;IACW;IACF;;;AAKf,MAAI,SAAS,SAAS,mBAAmB,mCAAmC;AAC1E,WAAQ,MAAM,qEAAqE;AACnF,SAAM,IAAI,MAAM;;EAGlB,MAAM,aAAa,SAAS;AAC5B,MAAI,CAAC,WAAW,QACd,OAAM,IAAI,MAAM,WAAW,SAAS;EAGtC,MAAM,qBAAqB,WAAW,sBAAsB;AAC5D,MAAI,mBAAmB,WAAW,EAChC,OAAM,IAAI,MAAM,8CAA8C,mBAAmB;EAEnF,MAAM,WAAW,mBAAmB;AACpC,MAAI,CAAC,YAAY,CAAC,SAAS,eAAe,CAAC,SAAS,UAClD,OAAM,IAAI,MAAM;EAGlB,MAAM,SAAS;GACb,mBAAmB,IAAI,kBAAkB;IACvC,aAAa,SAAS;IACtB,WAAW,SAAS;IACpB,aAAa,MAAM,KAAK,SAAS,cAAc;;GAEjD,MAAM,WAAW;;AAGnB,UAAQ,MAAM;AACd,SAAO;UAEAA,OAAgB;AACvB,UAAQ,MAAM,oEAAoE;AAClF,QAAM"}
+{"version":3,"file":"signTransactionWithKeyPair.js","names":["error: unknown"],"sources":["../../../../../../src/core/WebAuthnManager/SignerWorkerManager/handlers/signTransactionWithKeyPair.ts"],"sourcesContent":["\nimport { SignedTransaction } from '../../../NearClient';\nimport { type ActionArgsWasm, validateActionArgsWasm } from '../../../types/actions';\nimport {\n  WorkerRequestType,\n  WorkerResponseType,\n  WasmTransactionSignResult,\n} from '../../../types/signer-worker';\nimport { SignerWorkerManagerContext } from '..';\n\n/**\n * Sign transaction with raw private key (for key replacement in Option D device linking)\n * No TouchID/PRF required - uses provided private key directly\n */\nexport async function signTransactionWithKeyPair({\n  ctx,\n  nearPrivateKey,\n  signerAccountId,\n  receiverId,\n  nonce,\n  blockHash,\n  actions\n}: {\n  ctx: SignerWorkerManagerContext;\n  nearPrivateKey: string;\n  signerAccountId: string;\n  receiverId: string;\n  nonce: string;\n  blockHash: string;\n  actions: ActionArgsWasm[];\n}): Promise<{\n  signedTransaction: SignedTransaction;\n  logs?: string[];\n}> {\n  try {\n    console.info('SignerWorkerManager: Starting transaction signing with provided private key');\n    // Validate actions\n    actions.forEach(action => {\n      validateActionArgsWasm(action);\n    });\n\n    const response = await ctx.sendMessage<WorkerRequestType.SignTransactionWithKeyPair>({\n      message: {\n        type: WorkerRequestType.SignTransactionWithKeyPair,\n        payload: {\n          nearPrivateKey,\n          signerAccountId,\n          receiverId,\n          nonce,\n          blockHash: blockHash,\n          actions: actions\n        }\n      }\n    });\n\n    if (response.type !== WorkerResponseType.SignTransactionWithKeyPairSuccess) {\n      console.error('SignerWorkerManager: Transaction signing with private key failed:', response);\n      throw new Error('Transaction signing with private key failed');\n    }\n\n    const wasmResult = response.payload as WasmTransactionSignResult;\n    if (!wasmResult.success) {\n      throw new Error(wasmResult.error || 'Transaction signing failed');\n    }\n    // Extract the signed transaction\n    const signedTransactions = wasmResult.signedTransactions || [];\n    if (signedTransactions.length !== 1) {\n      throw new Error(`Expected 1 signed transaction but received ${signedTransactions.length}`);\n    }\n    const signedTx = signedTransactions[0];\n    if (!signedTx || !signedTx.transaction || !signedTx.signature) {\n      throw new Error('Incomplete signed transaction data received');\n    }\n\n    const result = {\n      signedTransaction: new SignedTransaction({\n        transaction: signedTx.transaction,\n        signature: signedTx.signature,\n        borsh_bytes: Array.from(signedTx.borshBytes || [])\n      }),\n      logs: wasmResult.logs\n    };\n\n    console.debug('SignerWorkerManager: Transaction signing with private key successful');\n    return result;\n\n  } catch (error: unknown) {\n    console.error('SignerWorkerManager: Transaction signing with private key error:', error);\n    throw error;\n  }\n}\n"],"mappings":";;;;;;;;;AAcA,eAAsB,2BAA2B,EAC/C,KACA,gBACA,iBACA,YACA,OACA,WACA,WAYC;AACD,KAAI;AACF,UAAQ,KAAK;AAEb,UAAQ,SAAQ,WAAU;AACxB,0BAAuB;;EAGzB,MAAM,WAAW,MAAM,IAAI,YAA0D,EACnF,SAAS;GACP,MAAM,kBAAkB;GACxB,SAAS;IACP;IACA;IACA;IACA;IACW;IACF;;;AAKf,MAAI,SAAS,SAAS,mBAAmB,mCAAmC;AAC1E,WAAQ,MAAM,qEAAqE;AACnF,SAAM,IAAI,MAAM;;EAGlB,MAAM,aAAa,SAAS;AAC5B,MAAI,CAAC,WAAW,QACd,OAAM,IAAI,MAAM,WAAW,SAAS;EAGtC,MAAM,qBAAqB,WAAW,sBAAsB;AAC5D,MAAI,mBAAmB,WAAW,EAChC,OAAM,IAAI,MAAM,8CAA8C,mBAAmB;EAEnF,MAAM,WAAW,mBAAmB;AACpC,MAAI,CAAC,YAAY,CAAC,SAAS,eAAe,CAAC,SAAS,UAClD,OAAM,IAAI,MAAM;EAGlB,MAAM,SAAS;GACb,mBAAmB,IAAI,kBAAkB;IACvC,aAAa,SAAS;IACtB,WAAW,SAAS;IACpB,aAAa,MAAM,KAAK,SAAS,cAAc;;GAEjD,MAAM,WAAW;;AAGnB,UAAQ,MAAM;AACd,SAAO;UAEAA,OAAgB;AACvB,UAAQ,MAAM,oEAAoE;AAClF,QAAM"}