@tatchi-xyz/sdk 0.20.0 → 0.31.0

package/dist/esm/sdk/registration-lDD60Ytt.js

@@ -1,142 +0,0 @@
-import "./css-loader-BHxJyE5o.js";
-import "./validation-DtLVzHDY.js";
-import "./asset-base-K63RlTrt.js";
-import "./tx-tree-themes-BND0SU2h.js";
-import "./tags-C2Wlhqjd.js";
-import "./txDigest-CxjhSCgm.js";
-import "./base64-DBPGuXh4.js";
-import "./actions-O1FD5Bq8.js";
-import "./lit-events-C-jpeT5r.js";
-import "./tx-confirmer-wrapper-lHNgz9i4.js";
-import { init_errors, toError } from "./errors-D9ar28Dr.js";
-import { init_credentialsHelpers, isSerializedRegistrationCredential, serializeRegistrationCredentialWithPRF } from "./WebAuthnFallbacks-Bl4BTsNt.js";
-import { ERROR_MESSAGES, getIntentDigest, getNearAccountId, getRegisterAccountPayload, isUserCancelledSecureConfirm } from "./requestHelpers-Dh1hEYL9.js";
-import { createConfirmSession, createConfirmTxFlowAdapters } from "./createAdapters-DIRR8_Z9.js";
-
-//#region src/core/WebAuthnManager/VrfWorkerManager/confirmTxFlow/flows/registration.ts
-init_credentialsHelpers();
-init_errors();
-async function handleRegistrationFlow(ctx, request, worker, opts) {
-	const { confirmationConfig, transactionSummary } = opts;
-	const adapters = createConfirmTxFlowAdapters(ctx);
-	const session = createConfirmSession({
-		adapters,
-		worker,
-		request,
-		confirmationConfig,
-		transactionSummary
-	});
-	const nearAccountId = getNearAccountId(request);
-	console.debug("[RegistrationFlow] start", {
-		nearAccountId,
-		uiMode: confirmationConfig?.uiMode,
-		behavior: confirmationConfig?.behavior,
-		theme: confirmationConfig?.theme,
-		intentDigest: transactionSummary?.intentDigest
-	});
-	const nearRpc = await adapters.near.fetchNearContext({
-		nearAccountId,
-		txCount: 1,
-		reserveNonces: true
-	});
-	if (nearRpc.error && !nearRpc.transactionContext) return session.confirmAndCloseModal({
-		requestId: request.requestId,
-		intentDigest: getIntentDigest(request),
-		confirmed: false,
-		error: `${ERROR_MESSAGES.nearRpcFailed}: ${nearRpc.details}`
-	});
-	const transactionContext = nearRpc.transactionContext;
-	session.setReservedNonces(nearRpc.reservedNonces);
-	const rpId = adapters.vrf.getRpId();
-	const bootstrap = await adapters.vrf.generateVrfKeypairBootstrap({
-		vrfInputData: {
-			userId: nearAccountId,
-			rpId,
-			blockHeight: transactionContext.txBlockHeight,
-			blockHash: transactionContext.txBlockHash
-		},
-		saveInMemory: true,
-		sessionId: request.requestId
-	});
-	let uiVrfChallenge = bootstrap.vrfChallenge;
-	console.debug("[RegistrationFlow] VRF bootstrap ok", { blockHeight: uiVrfChallenge.blockHeight });
-	const { confirmed, error: uiError } = await session.promptUser({ vrfChallenge: uiVrfChallenge });
-	if (!confirmed) {
-		console.debug("[RegistrationFlow] user cancelled");
-		return session.confirmAndCloseModal({
-			requestId: request.requestId,
-			intentDigest: getIntentDigest(request),
-			confirmed: false,
-			error: uiError
-		});
-	}
-	try {
-		const refreshed = await adapters.vrf.maybeRefreshVrfChallenge(request, nearAccountId);
-		uiVrfChallenge = refreshed.vrfChallenge;
-		session.updateUI({ vrfChallenge: uiVrfChallenge });
-		console.debug("[RegistrationFlow] VRF JIT refresh ok", { blockHeight: uiVrfChallenge.blockHeight });
-	} catch (e) {
-		console.debug("[RegistrationFlow] VRF JIT refresh skipped", e);
-	}
-	let credential;
-	let deviceNumber = request.payload?.deviceNumber;
-	const tryCreate = async (dn) => {
-		console.debug("[RegistrationFlow] navigator.credentials.create start", { deviceNumber: dn });
-		return await adapters.webauthn.createRegistrationCredential({
-			nearAccountId,
-			challenge: uiVrfChallenge,
-			deviceNumber: dn
-		});
-	};
-	try {
-		try {
-			credential = await tryCreate(deviceNumber);
-			console.debug("[RegistrationFlow] credentials.create ok");
-		} catch (e) {
-			const err = toError(e);
-			const name = String(err?.name || "");
-			const msg = String(err?.message || "");
-			const isDuplicate = name === "InvalidStateError" || /excluded|already\s*registered/i.test(msg);
-			if (isDuplicate) {
-				const nextDeviceNumber = deviceNumber !== void 0 && Number.isFinite(deviceNumber) ? deviceNumber + 1 : 2;
-				console.debug("[RegistrationFlow] duplicate credential, retry with next deviceNumber", { nextDeviceNumber });
-				credential = await tryCreate(nextDeviceNumber);
-				getRegisterAccountPayload(request).deviceNumber = nextDeviceNumber;
-			} else {
-				console.error("[RegistrationFlow] credentials.create failed (non-duplicate)", {
-					name,
-					msg
-				});
-				throw err;
-			}
-		}
-		const serialized = isSerializedRegistrationCredential(credential) ? credential : serializeRegistrationCredentialWithPRF({
-			credential,
-			firstPrfOutput: true,
-			secondPrfOutput: true
-		});
-		session.confirmAndCloseModal({
-			requestId: request.requestId,
-			intentDigest: getIntentDigest(request),
-			confirmed: true,
-			credential: serialized,
-			vrfChallenge: uiVrfChallenge,
-			transactionContext
-		});
-	} catch (err) {
-		const cancelled = isUserCancelledSecureConfirm(err);
-		const msg = String(toError(err)?.message || err || "");
-		if (/Missing PRF result/i.test(msg) || /Missing PRF results/i.test(msg)) return session.cleanupAndRethrow(err);
-		if (cancelled) window.parent?.postMessage({ type: "WALLET_UI_CLOSED" }, "*");
-		const isPrfBrowserUnsupported = /WebAuthn PRF output is missing from navigator\.credentials\.create\(\)/i.test(msg) || /does not fully support the WebAuthn PRF extension during registration/i.test(msg) || /roaming hardware authenticators .* not supported in this flow/i.test(msg);
-		return session.confirmAndCloseModal({
-			requestId: request.requestId,
-			intentDigest: getIntentDigest(request),
-			confirmed: false,
-			error: cancelled ? ERROR_MESSAGES.cancelled : isPrfBrowserUnsupported ? msg : ERROR_MESSAGES.collectCredentialsFailed
-		});
-	}
-}
-
-//#endregion
-export { handleRegistrationFlow };

package/dist/esm/sdk/requestHelpers-Dh1hEYL9.js

@@ -1,445 +0,0 @@
-import { __esm } from "./chunk-DIQ1yeMN.js";
-import { init_validation, isFunction, isObject, isString } from "./validation-DtLVzHDY.js";
-import { base64UrlDecode, base64UrlEncode } from "./base64-DBPGuXh4.js";
-import { init_encoders, init_errors, isTouchIdCancellationError, toError } from "./errors-D9ar28Dr.js";
-import { executeWebAuthnWithParentFallbacksSafari, generateChaCha20Salt, generateEd25519Salt, init_WebAuthnFallbacks, init_credentialsHelpers, init_validation as init_validation$1, serializeAuthenticationCredentialWithPRF, validateNearAccountId } from "./WebAuthnFallbacks-Bl4BTsNt.js";
-
-//#region src/core/types/accountIds.ts
-/**
-* Convert and validate string to AccountId
-* Validates proper NEAR account format (must contain at least one dot)
-*/
-function toAccountId(accountId) {
-	const validation = validateNearAccountId(accountId);
-	if (!validation.valid) throw new Error(`Invalid NEAR account ID: ${accountId}`);
-	return accountId;
-}
-var init_accountIds = __esm({ "src/core/types/accountIds.ts": (() => {
-	init_validation$1();
-}) });
-
-//#endregion
-//#region src/core/types/vrf-worker.ts
-/**
-* Decode VRF output and use first 32 bytes as WebAuthn challenge
-* @param vrfChallenge - VRF challenge object
-* @returns 32-byte Uint8Array
-*/
-function outputAs32Bytes(vrfChallenge) {
-	let vrfOutputBytes = base64UrlDecode(vrfChallenge.vrfOutput);
-	return vrfOutputBytes.slice(0, 32);
-}
-/**
-* Validate and create a VRFChallenge object
-* @param vrfChallengeData - The challenge data to validate
-* @returns VRFChallenge object
-*/
-function validateVRFChallenge(vrfChallengeData) {
-	if (!vrfChallengeData.vrfInput || typeof vrfChallengeData.vrfInput !== "string") throw new Error("vrfInput must be a non-empty string");
-	if (!vrfChallengeData.vrfOutput || typeof vrfChallengeData.vrfOutput !== "string") throw new Error("vrfOutput must be a non-empty string");
-	if (!vrfChallengeData.vrfProof || typeof vrfChallengeData.vrfProof !== "string") throw new Error("vrfProof must be a non-empty string");
-	if (!vrfChallengeData.vrfPublicKey || typeof vrfChallengeData.vrfPublicKey !== "string") throw new Error("vrfPublicKey must be a non-empty string");
-	if (!vrfChallengeData.userId || typeof vrfChallengeData.userId !== "string") throw new Error("userId must be a non-empty string");
-	if (!vrfChallengeData.rpId || typeof vrfChallengeData.rpId !== "string") throw new Error("rpId must be a non-empty string");
-	if (!vrfChallengeData.blockHeight || typeof vrfChallengeData.blockHeight !== "string") throw new Error("blockHeight must be a non-empty string");
-	if (!vrfChallengeData.blockHash || typeof vrfChallengeData.blockHash !== "string") throw new Error("blockHash must be a non-empty string");
-	return {
-		vrfInput: vrfChallengeData.vrfInput,
-		vrfOutput: vrfChallengeData.vrfOutput,
-		vrfProof: vrfChallengeData.vrfProof,
-		vrfPublicKey: vrfChallengeData.vrfPublicKey,
-		userId: vrfChallengeData.userId,
-		rpId: vrfChallengeData.rpId,
-		blockHeight: vrfChallengeData.blockHeight,
-		blockHash: vrfChallengeData.blockHash
-	};
-}
-/**
-* Create a random VRF challenge
-* @returns Partial<VRFChallenge> with vrfOutput set, but other fields are undefined
-* This is used for local operations that don't require a VRF verification
-*/
-function createRandomVRFChallenge() {
-	const challenge = crypto.getRandomValues(new Uint8Array(32));
-	const vrfOutput = base64UrlEncode(challenge.buffer);
-	return {
-		vrfOutput,
-		vrfInput: void 0,
-		vrfProof: void 0,
-		vrfPublicKey: void 0,
-		userId: void 0,
-		rpId: void 0,
-		blockHeight: void 0,
-		blockHash: void 0
-	};
-}
-var init_vrf_worker = __esm({ "src/core/types/vrf-worker.ts": (() => {
-	init_encoders();
-}) });
-
-//#endregion
-//#region src/core/WebAuthnManager/touchIdPrompt.ts
-function isRegistrableSuffix(host, cand) {
-	if (!host || !cand) return false;
-	if (host === cand) return true;
-	return host.endsWith("." + cand);
-}
-function resolveRpId(override, host) {
-	const h = (host || "").toLowerCase();
-	const ov = (override || "").toLowerCase();
-	if (ov && h && isRegistrableSuffix(h, ov)) return ov;
-	return h || ov || "";
-}
-function authenticatorsToAllowCredentials(authenticators) {
-	return authenticators.map((auth) => ({
-		id: auth.credentialId,
-		type: "public-key",
-		transports: auth.transports
-	}));
-}
-function isSerializedAuthenticationCredential(x) {
-	if (!x || typeof x !== "object") return false;
-	const obj = x;
-	const resp = obj.response;
-	return typeof resp?.authenticatorData === "string";
-}
-/**
-* Generate device-specific user ID to prevent Chrome sync conflicts
-* Creates technical identifiers with full account context
-*
-* @param nearAccountId - The NEAR account ID (e.g., "serp120.w3a-v1.testnet")
-* @param deviceNumber - The device number (optional, undefined for device 1, 2 for device 2, etc.)
-* @returns Technical identifier:
-*   - Device 1: "serp120.web3-authn.testnet"
-*   - Device 2: "serp120.web3-authn.testnet (2)"
-*   - Device 3: "serp120.web3-authn.testnet (3)"
-*/
-function generateDeviceSpecificUserId(nearAccountId, deviceNumber) {
-	if (deviceNumber === void 0 || deviceNumber === 1) return nearAccountId;
-	return `${nearAccountId} (${deviceNumber})`;
-}
-/**
-* Generate user-friendly display name for passkey manager UI
-* Creates clean, intuitive names that users will see
-*
-* @param nearAccountId - The NEAR account ID (e.g., "serp120.w3a-v1.testnet")
-* @param deviceNumber - The device number (optional, undefined for device 1, 2 for device 2, etc.)
-* @returns User-friendly display name:
-*   - Device 1: "serp120"
-*   - Device 2: "serp120 (device 2)"
-*   - Device 3: "serp120 (device 3)"
-*/
-function generateUserFriendlyDisplayName(nearAccountId, deviceNumber) {
-	const baseUsername = nearAccountId.split(".")[0];
-	if (deviceNumber === void 0 || deviceNumber === 1) return baseUsername;
-	return `${baseUsername} (device ${deviceNumber})`;
-}
-var TouchIdPrompt;
-var init_touchIdPrompt = __esm({ "src/core/WebAuthnManager/touchIdPrompt.ts": (() => {
-	init_encoders();
-	init_vrf_worker();
-	init_credentialsHelpers();
-	init_WebAuthnFallbacks();
-	TouchIdPrompt = class TouchIdPrompt {
-		rpIdOverride;
-		safariGetWebauthnRegistrationFallback;
-		abortController;
-		removePageAbortHandlers;
-		removeExternalAbortListener;
-		constructor(rpIdOverride, safariGetWebauthnRegistrationFallback = false) {
-			this.rpIdOverride = rpIdOverride;
-			this.safariGetWebauthnRegistrationFallback = safariGetWebauthnRegistrationFallback === true;
-		}
-		getRpId() {
-			try {
-				return resolveRpId(this.rpIdOverride, window?.location?.hostname);
-			} catch {
-				return this.rpIdOverride || "";
-			}
-		}
-		static _inIframe() {
-			try {
-				return window.self !== window.top;
-			} catch {
-				return true;
-			}
-		}
-		/**
-		* Get authentication credentials
-		* @param nearAccountId - NEAR account ID to authenticate
-		* @param challenge - VRF challenge bytes
-		* @param allowCredentials - Array of allowed credentials for authentication
-		* @returns WebAuthn credential with only the first PRF output
-		*/
-		async getAuthenticationCredentialsSerialized({ nearAccountId, challenge, allowCredentials }) {
-			const credentialMaybe = await this.getAuthenticationCredentialsInternal({
-				nearAccountId,
-				challenge,
-				allowCredentials
-			});
-			if (isSerializedAuthenticationCredential(credentialMaybe)) return credentialMaybe;
-			return serializeAuthenticationCredentialWithPRF({
-				credential: credentialMaybe,
-				firstPrfOutput: true,
-				secondPrfOutput: false
-			});
-		}
-		/**
-		*  Same as getAuthenticationCredentialsSerialized but returns both PRF outputs
-		*  (PRF.first + PRF.second).
-		* @param nearAccountId - NEAR account ID to authenticate
-		* @param challenge - VRF challenge bytes
-		* @param allowCredentials - Array of allowed credentials for authentication
-		* @returns
-		*/
-		async getAuthenticationCredentialsSerializedDualPrf({ nearAccountId, challenge, allowCredentials }) {
-			const credentialMaybe = await this.getAuthenticationCredentialsInternal({
-				nearAccountId,
-				challenge,
-				allowCredentials
-			});
-			if (isSerializedAuthenticationCredential(credentialMaybe)) return credentialMaybe;
-			return serializeAuthenticationCredentialWithPRF({
-				credential: credentialMaybe,
-				firstPrfOutput: true,
-				secondPrfOutput: true
-			});
-		}
-		/**
-		* Internal method for generating WebAuthn registration credentials with PRF output
-		* @param nearAccountId - NEAR account ID for PRF salts and keypair derivation (always base account)
-		* @param challenge - Random challenge bytes for the registration ceremony
-		* @param deviceNumber - Device number for device-specific user ID.
-		* @returns Credential with PRF output
-		*/
-		async generateRegistrationCredentialsInternal({ nearAccountId, challenge, deviceNumber }) {
-			this.abortController = new AbortController();
-			this.removePageAbortHandlers = TouchIdPrompt.attachPageAbortHandlers(this.abortController);
-			const rpId = this.getRpId();
-			const publicKey = {
-				challenge: outputAs32Bytes(challenge),
-				rp: {
-					name: "WebAuthn VRF Passkey",
-					id: rpId
-				},
-				user: {
-					id: new TextEncoder().encode(generateDeviceSpecificUserId(nearAccountId, deviceNumber)),
-					name: generateDeviceSpecificUserId(nearAccountId, deviceNumber),
-					displayName: generateUserFriendlyDisplayName(nearAccountId, deviceNumber)
-				},
-				pubKeyCredParams: [{
-					alg: -7,
-					type: "public-key"
-				}, {
-					alg: -257,
-					type: "public-key"
-				}],
-				authenticatorSelection: {
-					residentKey: "required",
-					userVerification: "preferred"
-				},
-				timeout: 6e4,
-				attestation: "none",
-				extensions: { prf: { eval: {
-					first: generateChaCha20Salt(nearAccountId),
-					second: generateEd25519Salt(nearAccountId)
-				} } }
-			};
-			try {
-				const result = await executeWebAuthnWithParentFallbacksSafari("create", publicKey, {
-					rpId,
-					inIframe: TouchIdPrompt._inIframe(),
-					timeoutMs: publicKey.timeout,
-					abortSignal: this.abortController.signal
-				});
-				return result;
-			} finally {
-				this.removePageAbortHandlers?.();
-				this.removePageAbortHandlers = void 0;
-				this.removeExternalAbortListener?.();
-				this.removeExternalAbortListener = void 0;
-				this.abortController = void 0;
-			}
-		}
-		/**
-		* Internal method for getting WebAuthn authentication credentials with PRF output
-		* @param nearAccountId - NEAR account ID to authenticate
-		* @param challenge - VRF challenge bytes to use for WebAuthn authentication
-		* @param authenticators - List of stored authenticator data for the user
-		* @returns WebAuthn credential with PRF output (HKDF derivation done in WASM worker)
-		* ```ts
-		* const credential = await touchIdPrompt.getCredentials({
-		*   nearAccountId,
-		*   challenge,
-		*   authenticators,
-		* });
-		* ```
-		*/
-		async getAuthenticationCredentialsInternal({ nearAccountId, challenge, allowCredentials }) {
-			this.abortController = new AbortController();
-			this.removePageAbortHandlers = TouchIdPrompt.attachPageAbortHandlers(this.abortController);
-			const rpId = this.getRpId();
-			const publicKey = {
-				challenge: outputAs32Bytes(challenge),
-				rpId,
-				allowCredentials: allowCredentials.map((credential) => ({
-					id: base64UrlDecode(credential.id),
-					type: "public-key",
-					transports: credential.transports
-				})),
-				userVerification: "preferred",
-				timeout: 6e4,
-				extensions: { prf: { eval: {
-					first: generateChaCha20Salt(nearAccountId),
-					second: generateEd25519Salt(nearAccountId)
-				} } }
-			};
-			try {
-				const result = await executeWebAuthnWithParentFallbacksSafari("get", publicKey, {
-					rpId,
-					inIframe: TouchIdPrompt._inIframe(),
-					timeoutMs: publicKey.timeout,
-					permitGetBridgeOnAncestorError: this.safariGetWebauthnRegistrationFallback,
-					abortSignal: this.abortController.signal
-				});
-				return result;
-			} finally {
-				this.removePageAbortHandlers?.();
-				this.removePageAbortHandlers = void 0;
-				this.removeExternalAbortListener?.();
-				this.removeExternalAbortListener = void 0;
-				this.abortController = void 0;
-			}
-		}
-	};
-	(function(_TouchIdPrompt) {
-		function attachPageAbortHandlers(controller) {
-			const onVisibility = () => {
-				if (document.hidden) controller.abort();
-			};
-			const onPageHide = () => {
-				controller.abort();
-			};
-			const onBeforeUnload = () => {
-				controller.abort();
-			};
-			document.addEventListener("visibilitychange", onVisibility, { passive: true });
-			window.addEventListener("pagehide", onPageHide, { passive: true });
-			window.addEventListener("beforeunload", onBeforeUnload, { passive: true });
-			return () => {
-				document.removeEventListener("visibilitychange", onVisibility);
-				window.removeEventListener("pagehide", onPageHide);
-				window.removeEventListener("beforeunload", onBeforeUnload);
-			};
-		}
-		_TouchIdPrompt.attachPageAbortHandlers = attachPageAbortHandlers;
-	})(TouchIdPrompt || (TouchIdPrompt = {}));
-}) });
-
-//#endregion
-//#region src/core/WebAuthnManager/VrfWorkerManager/confirmTxFlow/types.ts
-let SecureConfirmMessageType = /* @__PURE__ */ function(SecureConfirmMessageType$1) {
-	SecureConfirmMessageType$1["PROMPT_USER_CONFIRM_IN_JS_MAIN_THREAD"] = "PROMPT_USER_CONFIRM_IN_JS_MAIN_THREAD";
-	SecureConfirmMessageType$1["USER_PASSKEY_CONFIRM_RESPONSE"] = "USER_PASSKEY_CONFIRM_RESPONSE";
-	return SecureConfirmMessageType$1;
-}({});
-let SecureConfirmationType = /* @__PURE__ */ function(SecureConfirmationType$1) {
-	SecureConfirmationType$1["SIGN_TRANSACTION"] = "signTransaction";
-	SecureConfirmationType$1["REGISTER_ACCOUNT"] = "registerAccount";
-	SecureConfirmationType$1["LINK_DEVICE"] = "linkDevice";
-	SecureConfirmationType$1["DECRYPT_PRIVATE_KEY_WITH_PRF"] = "decryptPrivateKeyWithPrf";
-	SecureConfirmationType$1["SIGN_NEP413_MESSAGE"] = "signNep413Message";
-	SecureConfirmationType$1["SHOW_SECURE_PRIVATE_KEY_UI"] = "showSecurePrivateKeyUi";
-	return SecureConfirmationType$1;
-}({});
-
-//#endregion
-//#region src/core/WebAuthnManager/VrfWorkerManager/confirmTxFlow/adapters/common.ts
-init_validation();
-init_errors();
-function parseTransactionSummary(summaryData) {
-	if (!summaryData) return {};
-	if (isString(summaryData)) try {
-		const parsed = JSON.parse(summaryData);
-		return isObject(parsed) ? parsed : {};
-	} catch (parseError) {
-		console.warn("[SignerWorkerManager]: Failed to parse summary string:", parseError);
-		return {};
-	}
-	return isObject(summaryData) ? summaryData : {};
-}
-function sanitizeForPostMessage(data) {
-	if (data == null) return data;
-	if (Array.isArray(data)) return data.map((v) => v);
-	if (isObject(data)) {
-		const src = data;
-		const out = {};
-		for (const key of Object.keys(src)) {
-			if (key === "_confirmHandle") continue;
-			const value = src[key];
-			if (isFunction(value)) continue;
-			out[key] = value;
-		}
-		return out;
-	}
-	return data;
-}
-const ERROR_MESSAGES = {
-	cancelled: "User cancelled secure confirm request",
-	collectCredentialsFailed: "Failed to collect credentials",
-	nearRpcFailed: "Failed to fetch NEAR data"
-};
-function sendConfirmResponse(worker, response) {
-	const sanitized = sanitizeForPostMessage(response);
-	worker.postMessage({
-		type: SecureConfirmMessageType.USER_PASSKEY_CONFIRM_RESPONSE,
-		data: sanitized
-	});
-}
-function isUserCancelledSecureConfirm(error) {
-	return isTouchIdCancellationError(error) || (() => {
-		const e = toError(error);
-		return e?.name === "NotAllowedError" || e?.name === "AbortError";
-	})();
-}
-
-//#endregion
-//#region src/core/WebAuthnManager/VrfWorkerManager/confirmTxFlow/adapters/requestHelpers.ts
-function getNearAccountId(request) {
-	switch (request.type) {
-		case SecureConfirmationType.SIGN_TRANSACTION: return getSignTransactionPayload(request).rpcCall.nearAccountId;
-		case SecureConfirmationType.SIGN_NEP413_MESSAGE: return request.payload.nearAccountId;
-		case SecureConfirmationType.REGISTER_ACCOUNT:
-		case SecureConfirmationType.LINK_DEVICE: return getRegisterAccountPayload(request).nearAccountId;
-		case SecureConfirmationType.DECRYPT_PRIVATE_KEY_WITH_PRF: {
-			const p = request.payload;
-			return p?.nearAccountId || "";
-		}
-		case SecureConfirmationType.SHOW_SECURE_PRIVATE_KEY_UI: {
-			const p = request.payload;
-			return p?.nearAccountId || "";
-		}
-		default: return "";
-	}
-}
-function getTxCount(request) {
-	return request.type === SecureConfirmationType.SIGN_TRANSACTION ? getSignTransactionPayload(request).txSigningRequests?.length || 1 : 1;
-}
-function getIntentDigest(request) {
-	if (request.type === SecureConfirmationType.SIGN_TRANSACTION) {
-		const p = request?.payload;
-		return p?.intentDigest;
-	}
-	return request?.intentDigest;
-}
-function getSignTransactionPayload(request) {
-	if (request.type !== SecureConfirmationType.SIGN_TRANSACTION) throw new Error(`Expected SIGN_TRANSACTION request, got ${request.type}`);
-	return request.payload;
-}
-function getRegisterAccountPayload(request) {
-	if (request.type !== SecureConfirmationType.REGISTER_ACCOUNT && request.type !== SecureConfirmationType.LINK_DEVICE) throw new Error(`Expected REGISTER_ACCOUNT or LINK_DEVICE request, got ${request.type}`);
-	return request.payload;
-}
-
-//#endregion
-export { ERROR_MESSAGES, SecureConfirmMessageType, SecureConfirmationType, TouchIdPrompt, authenticatorsToAllowCredentials, createRandomVRFChallenge, getIntentDigest, getNearAccountId, getRegisterAccountPayload, getSignTransactionPayload, getTxCount, init_accountIds, init_touchIdPrompt, init_vrf_worker, isUserCancelledSecureConfirm, parseTransactionSummary, sanitizeForPostMessage, sendConfirmResponse, toAccountId, validateVRFChallenge };