@tatchi-xyz/sdk 0.20.0 → 0.31.0

package/dist/cjs/plugins/vite.js.map

@@ -1 +1 @@
-{"version":3,"file":"vite.js","names":["fs","normalizeBase","resolveSdkDistRoot","resolveCoepMode","buildOfflineExportHtml","path","buildWalletServiceHtml","buildPermissionsPolicy","buildWalletCsp","fetchRorOriginsFromNear","echoCorsFromRequest","mode: Required<Web3AuthnDevOptions>['mode']","contentLines: string[]","buildExportViewerHtml"],"sources":["../../../src/plugins/vite.ts"],"sourcesContent":["// Minimal Vite dev plugin(s) to support Passkey Manager modes.\n// See docs/passkey-manager-modes.md (Vite Plugin section).\n//\n// What these plugins do:\n// - Serve SDK assets under a base path, expose a wallet service route,\n// - Add dev headers (COOP + Permissions-Policy, optional COEP/CORP), and enforce WASM MIME.\n// - IMPORTANT: Strict CSP is scoped only to wallet HTML routes (/wallet-service, /export-viewer),\n//   not to the host app pages. App routes remain free to use inline styles/scripts.\n\nimport * as fs from 'node:fs'\nimport * as path from 'node:path'\nimport { buildPermissionsPolicy, buildWalletCsp } from './headers'\nimport {\n  addPreconnectLink,\n  buildWalletServiceHtml,\n  buildExportViewerHtml,\n  applyCoepCorpIfNeeded,\n  echoCorsFromRequest,\n  fetchRorOriginsFromNear,\n  normalizeBase,\n  resolveCoepMode,\n  resolveSdkDistRoot,\n} from './plugin-utils'\nimport { addOfflineExportDevRoutes, buildOfflineExportHtml, emitOfflineExportAssets } from './offline'\nimport { setContentType } from './plugin-utils'\n\nexport type VitePlugin = {\n  name: string\n  apply?: 'serve' | 'build'\n  enforce?: 'pre' | 'post'\n  configureServer?: (server: any) => void | Promise<void>\n}\nexport type ViteLikePlugin = VitePlugin\n\nexport type Web3AuthnDevOptions = {\n  mode?: 'self-contained' | 'front-only' | 'wallet-only'\n  sdkDistRoot?: string\n  sdkBasePath?: string\n  walletServicePath?: string\n  walletOrigin?: string\n  setDevHeaders?: boolean\n  enableDebugRoutes?: boolean\n  /**\n   * Controls Cross-Origin-Embedder-Policy (COEP) behavior in dev.\n   * - 'off' (default): do not emit COEP/CORP on app pages.\n   * - 'strict': emit `Cross-Origin-Embedder-Policy: require-corp`\n   *   and `Cross-Origin-Resource-Policy: cross-origin` on app pages.\n   *\n   * Tip: set `VITE_COEP_MODE=strict` in tests/CI to enable isolation automatically.\n   */\n  coepMode?: 'strict' | 'off'\n}\n\nexport type ServeSdkOptions = {\n  sdkDistRoot?: string\n  sdkBasePath?: string\n  enableDebugRoutes?: boolean\n  coepMode?: 'strict' | 'off'\n}\n\nexport type WalletServiceOptions = {\n  walletServicePath?: string\n  sdkBasePath?: string\n  coepMode?: 'strict' | 'off'\n}\n\nexport type DevHeadersOptions = {\n  walletOrigin?: string\n  walletServicePath?: string\n  sdkBasePath?: string\n  /**\n   * Optional dev-time CSP for the wallet service route.\n   *  - 'strict': no inline scripts/styles (mirrors production defaults)\n   *  - 'compatible': allows inline scripts/styles (useful for debugging)\n   */\n  devCSP?: 'strict' | 'compatible'\n  /**\n   * Controls Cross-Origin-Embedder-Policy (COEP) behavior in dev.\n   * - 'off' (default): do not emit COEP/CORP headers on app pages.\n   * - 'strict': emit COEP/CORP headers on app pages.\n   */\n  coepMode?: 'strict' | 'off'\n}\n\n/**\n * Return the first candidate path that exists and is a file.\n * Helper for robust /sdk/* asset resolution on dev servers (app and wallet).\n */\nfunction tryFile(...candidates: string[]): string | undefined {\n  for (const file of candidates) {\n    try {\n      const stat = fs.statSync(file)\n      if (stat.isFile()) return file\n    } catch {}\n  }\n  return undefined\n}\n\n// RPC helpers are provided by plugin-utils to share logic across frameworks.\n\n// Shared assets emitted/served for the wallet service bootstrap.\nconst WALLET_SHIM_SOURCE = \"window.global ||= window; window.process ||= { env: {} };\\n\"\nconst WALLET_SURFACE_CSS = [\n  'html, body { background: transparent !important; margin:0; padding:0; }',\n  'html, body { color-scheme: normal; }',\n  '',\n  // Class-based surface for strict CSP setups toggled by JS\n  'html.w3a-transparent, body.w3a-transparent { background: transparent !important; margin:0; padding:0; color-scheme: normal; }',\n  '',\n  // Minimal portal styles used by confirm-ui (no animation; child components handle transitions)\n  '.w3a-portal { position: relative; z-index: 2147483647; opacity: 0; pointer-events: none; }',\n  '.w3a-portal.w3a-portal--visible { opacity: 1; pointer-events: auto; }',\n  '',\n  // Provide baseline tokens only when the document does not declare a theme.\n  // This avoids overriding :root[data-w3a-theme] values supplied by token sheet\n  // or integrator-injected themes.\n  ':root:not([data-w3a-theme]) {',\n  '  --w3a-colors-textPrimary: #f6f7f8;',\n  '  --w3a-colors-textSecondary: rgba(255,255,255,0.7);',\n  '  --w3a-colors-surface: rgba(255,255,255,0.08);',\n  '  --w3a-colors-surface2: rgba(255,255,255,0.06);',\n  '  --w3a-colors-surface3: rgba(255,255,255,0.04);',\n  '  --w3a-colors-borderPrimary: rgba(255,255,255,0.14);',\n  '  --w3a-colors-borderSecondary: rgba(255,255,255,0.1);',\n  '  --w3a-colors-colorBackground: #0b0c10;',\n  '  /* Default viewport custom properties for width/height calculations */',\n  '  --w3a-vw: 100vw;',\n  '  --w3a-vh: 100vh;',\n  '}',\n  '',\n].join('\\n')\n\n/**\n * Tatchi SDK plugin: serve SDK assets under a stable base (default: /sdk) with optional COEP/CORP (strict mode) and permissive CORS.\n * Where it runs: both the app server and the wallet-iframe server.\n * - App server: lets host pages and Lit components load SDK CSS/JS locally.\n * - Wallet server: used by /wallet-service to load wallet-iframe-host.js and related CSS/JS.\n */\nexport function tatchiServeSdk(opts: ServeSdkOptions = {}): VitePlugin {\n  const configuredBase = normalizeBase(opts.sdkBasePath, '/sdk')\n  const sdkDistRoot = resolveSdkDistRoot(opts.sdkDistRoot)\n  const enableDebugRoutes = opts.enableDebugRoutes === true\n  const coepMode = resolveCoepMode(opts.coepMode)\n  const offlineHtml = buildOfflineExportHtml(configuredBase)\n\n  // In dev we want both '/sdk' and a custom base to work.\n  const bases = Array.from(new Set([configuredBase, normalizeBase('/sdk')]))\n    .sort((a, b) => b.length - a.length)\n    // Prefer longest base match first (e.g., '/sdk/esm/react' before '/sdk')\n\n  return {\n    name: 'tatchi:serve-sdk',\n    apply: 'serve',\n    enforce: 'pre',\n    configureServer(server) {\n      // Mount Offline Export dev routes once here (includes app module + chunks)\n      addOfflineExportDevRoutes(server, {\n        sdkDistRoot,\n        sdkBasePath: configuredBase,\n        offlineHtml,\n        includeAppModule: true,\n        coepMode,\n      })\n      // Serve a tiny shim as a virtual asset to enable strict CSP (no inline scripts)\n      server.middlewares.use((req: any, res: any, next: any) => {\n        const url = (req.url || '').split('?')[0]\n        if (url === configuredBase + '/wallet-shims.js') {\n          res.statusCode = 200\n          res.setHeader('Content-Type', 'application/javascript; charset=utf-8')\n          // Align with SDK asset headers so COEP/CORP environments can import\n          applyCoepCorpIfNeeded(res, coepMode)\n          // Dev-only CORS echo (no preflight handling on this route)\n          echoCorsFromRequest(res, req, { handlePreflight: false })\n          res.end(WALLET_SHIM_SOURCE)\n          return\n        }\n        if (url === configuredBase + '/wallet-service.css') {\n          res.statusCode = 200\n          res.setHeader('Content-Type', 'text/css; charset=utf-8')\n          // Important: provide CORP for cross‑origin CSS so COEP documents can load it\n          applyCoepCorpIfNeeded(res, coepMode)\n          // Dev-only CORS echo (no preflight handling on this route)\n          echoCorsFromRequest(res, req, { handlePreflight: false })\n          res.end(WALLET_SURFACE_CSS)\n          return\n        }\n        next()\n      })\n\n      // Optional debug route to confirm resolution\n      if (enableDebugRoutes) {\n        server.middlewares.use('/__sdk-root', (req: any, res: any) => {\n          res.setHeader('Content-Type', 'text/plain; charset=utf-8')\n          res.end(sdkDistRoot)\n        })\n      }\n\n      // Serve files under any recognized base from sdkDistRoot with fallbacks\n      server.middlewares.use((req: any, res: any, next: any) => {\n        if (!req.url) return next()\n        const url = req.url.split('?')[0]\n\n        const matchBase = bases.find((b) => url.startsWith(b + '/'))\n        if (!matchBase) return next()\n\n        const rel = url.slice((matchBase + '/').length)\n        // Try dist/esm/sdk first (canonical), then common fallbacks\n        const candidate = tryFile(\n          path.join(sdkDistRoot, 'esm', 'sdk', rel),\n          path.join(sdkDistRoot, rel),\n          path.join(sdkDistRoot, 'esm', rel)\n        )\n\n        if (!candidate) {\n          res.statusCode = 404\n          res.setHeader('Content-Type', 'application/json; charset=utf-8')\n          res.end(JSON.stringify({ error: 'SDK asset not found', path: rel }))\n          return\n        }\n\n        setContentType(res, candidate)\n        // SDK assets need COEP headers to work in wallet iframe with COEP enabled\n        applyCoepCorpIfNeeded(res, coepMode)\n        // Dev-only CORS echo (no preflight handling here)\n        echoCorsFromRequest(res, req, { handlePreflight: false })\n        const stream = fs.createReadStream(candidate)\n        stream.on('error', () => next())\n        stream.pipe(res)\n      })\n    },\n  }\n}\n\n/**\n * Dev plugin: expose the wallet service HTML route (default: /wallet-service) that links only external CSS/JS.\n * Where it runs: wallet-iframe dev server (wallet origin). Used by tatchiWalletServer.\n */\nexport function tatchiWalletService(opts: WalletServiceOptions = {}): VitePlugin {\n  const walletServicePath = normalizeBase(opts.walletServicePath, '/wallet-service')\n  const sdkBasePath = normalizeBase(opts.sdkBasePath, '/sdk')\n  const coepMode = resolveCoepMode(opts.coepMode)\n\n  const html = buildWalletServiceHtml(sdkBasePath)\n  const offlineHtml = buildOfflineExportHtml(sdkBasePath)\n  const sdkDistRoot = resolveSdkDistRoot()\n\n  return {\n    name: 'tatchi:wallet-service',\n    apply: 'serve',\n    enforce: 'pre',\n    configureServer(server) {\n      server.middlewares.use((req: any, res: any, next: any) => {\n        if (!req.url) return next()\n        const url = req.url.split('?')[0]\n        if (url === walletServicePath) {\n          res.statusCode = 200\n          res.setHeader('Content-Type', 'text/html; charset=utf-8')\n          applyCoepCorpIfNeeded(res, coepMode)\n          res.end(html)\n          return\n        }\n        next()\n      })\n\n      // Mount Offline Export routes here as well (no app module duplication)\n      addOfflineExportDevRoutes(server, {\n        sdkDistRoot,\n        sdkBasePath,\n        offlineHtml,\n        includeAppModule: false,\n        coepMode,\n      })\n    },\n  }\n}\n\n/**\n * Dev plugin: force the correct `.wasm` MIME type (application/wasm) for any served wasm file.\n * Where it runs: both app and wallet-iframe dev servers.\n */\nexport function tatchiWasmMime(): VitePlugin {\n  return {\n    name: 'tatchi:wasm-mime',\n    apply: 'serve',\n    enforce: 'pre',\n    configureServer(server) {\n      server.middlewares.use((req: any, res: any, next: any) => {\n        if (!req.url) return next()\n        const url = req.url.split('?')[0]\n        if (url.endsWith('.wasm')) {\n          res.setHeader('Content-Type', 'application/wasm')\n        }\n        next()\n      })\n    },\n  }\n}\n\n/**\n * Dev plugin: add Permissions-Policy (delegating WebAuthn + clipboard), COOP, optional COEP/CORP, and optional dev CSP.\n * Where it runs: both app and wallet-iframe dev servers.\n * Notes:\n * - Uses Structured Header format for Permissions-Policy (double-quoted origins).\n * - Wallet dev CSP can be toggled strict/compatible via opts.devCSP.\n */\nexport function tatchiHeaders(opts: DevHeadersOptions = {}): VitePlugin {\n  const walletOriginRaw = opts.walletOrigin ?? process.env.VITE_WALLET_ORIGIN\n  const walletOrigin = walletOriginRaw?.trim()\n  const walletServicePath = normalizeBase(opts.walletServicePath || process.env.VITE_WALLET_SERVICE_PATH, '/wallet-service')\n  const sdkBasePath = normalizeBase(opts.sdkBasePath || process.env.VITE_SDK_BASE_PATH, '/sdk')\n  const devCSPMode = (opts.devCSP ?? (process.env.VITE_WALLET_DEV_CSP as 'strict' | 'compatible' | undefined))\n  const coepMode = resolveCoepMode(opts.coepMode)\n\n  // Build headers via shared helpers to avoid drift.\n  const permissionsPolicy = buildPermissionsPolicy(walletOrigin)\n\n  // Dev convenience: dynamic ROR from NEAR RPC (no relay dependency)\n  // The dev server will fetch the allowlist from chain on demand when a contract id is provided.\n  const rorContractId = (process.env.VITE_WEBAUTHN_CONTRACT_ID || '').toString().trim()\n  const rorMethod = (process.env.VITE_ROR_METHOD || 'get_allowed_origins').toString().trim()\n  const nearRpcUrl = (process.env.VITE_NEAR_RPC_URL || 'https://test.rpc.fastnear.com').toString().trim()\n  // Caching is handled inside fetchRorOriginsFromNear via TTL\n\n  return {\n    name: 'tatchi:dev-headers',\n    apply: 'serve',\n    enforce: 'pre',\n    configureServer(server) {\n\n      console.log('[tatchi] headers enabled', {\n        walletServicePath,\n        sdkBasePath,\n        coepMode,\n        rorContractId: rorContractId || '(none)',\n        nearRpcUrl\n      })\n\n      server.middlewares.use((req: any, res: any, next: any) => {\n        const url = (req.url || '').split('?')[0] || ''\n        const isWalletRoute = url === walletServicePath || url === `${walletServicePath}/` || url === `${walletServicePath}//`\n        res.setHeader('Cross-Origin-Opener-Policy', isWalletRoute ? 'unsafe-none' : 'same-origin')\n        if (coepMode !== 'off') {\n          res.setHeader('Cross-Origin-Embedder-Policy', 'require-corp')\n          res.setHeader('Cross-Origin-Resource-Policy', 'cross-origin')\n        }\n        res.setHeader('Permissions-Policy', permissionsPolicy)\n        // Optional dev-time CSP for the wallet service page only (app pages are unaffected)\n        if (isWalletRoute && devCSPMode) {\n          const mode = devCSPMode === 'strict' ? 'strict' : 'compatible'\n          const walletCsp = buildWalletCsp({ mode })\n          res.setHeader('Content-Security-Policy', walletCsp)\n        }\n        // Resource hints: help parent pages preconnect to the wallet origin early in dev\n        addPreconnectLink(res, walletOrigin)\n\n        // Serve /.well-known/webauthn for ROR using chain state in dev\n        const isWellKnown = url === '/.well-known/webauthn' || url === '/.well-known/webauthn/'\n        if (isWellKnown) {\n          // Direct fetch from NEAR RPC (no relay). Caching handled inside helper.\n          // Requires contract id; RPC URL falls back to a reliable public endpoint.\n          if (rorContractId) {\n            ;(async () => {\n              try {\n                const origins = await fetchRorOriginsFromNear({\n                  rpcUrl: nearRpcUrl,\n                  contractId: rorContractId,\n                  method: rorMethod,\n                })\n                res.statusCode = 200\n                res.setHeader('Content-Type', 'application/json; charset=utf-8')\n                res.setHeader('Cache-Control', 'max-age=60, stale-while-revalidate=600')\n                res.end(JSON.stringify({ origins }))\n              } catch (e) {\n                console.warn('[tatchi] ROR dynamic fetch failed:', e)\n                res.statusCode = 200\n                res.setHeader('Content-Type', 'application/json; charset=utf-8')\n                res.setHeader('Cache-Control', 'max-age=60, stale-while-revalidate=600')\n                res.end(JSON.stringify({ origins: [] }))\n              }\n            })()\n            return\n          }\n          // No configuration; respond with empty allowlist to avoid hard 404 in dev\n          res.statusCode = 200\n          res.setHeader('Content-Type', 'application/json; charset=utf-8')\n          res.setHeader('Cache-Control', 'max-age=60, stale-while-revalidate=600')\n          res.end(JSON.stringify({ origins: [] }))\n          return\n        }\n\n        if (url.startsWith(`${sdkBasePath}/`)) {\n          // Dev-only CORS for SDK assets served by Vite\n          applyCoepCorpIfNeeded(res, coepMode)\n          // Honor existing echo from SDK server; otherwise echo\n          const ended = echoCorsFromRequest(res, req, { honorExistingAcaOrigin: true, handlePreflight: true })\n          if (ended) return\n        }\n        next()\n      })\n    },\n  }\n}\n\n/**\n * Dev plugin (composed): convenience entry that wires SDK server, WASM MIME, optional headers,\n * and (in wallet modes) the wallet service route.\n * Where it runs:\n * - App server: mode 'front-only' (or 'self-contained' when serving wallet pages on the same origin).\n * - Wallet-iframe server: modes 'wallet-only' or 'self-contained'.\n */\n/**\n * Compose dev plugins for serving SDK assets, wallet service HTML and dev headers.\n * External-facing entry for configuring either the app or wallet-iframe dev server.\n */\nfunction tatchiDevServer(options: Web3AuthnDevOptions = {}): VitePlugin {\n  const mode: Required<Web3AuthnDevOptions>['mode'] = options.mode || 'self-contained'\n  const sdkBasePath = normalizeBase(options.sdkBasePath || process.env.VITE_SDK_BASE_PATH, '/sdk')\n  const walletServicePath = normalizeBase(options.walletServicePath || process.env.VITE_WALLET_SERVICE_PATH, '/wallet-service')\n  const walletOrigin = (options.walletOrigin ?? process.env.VITE_WALLET_ORIGIN)?.trim()\n  const setDevHeaders = options.setDevHeaders !== false // default true\n  const enableDebugRoutes = options.enableDebugRoutes === true\n  const sdkDistRoot = resolveSdkDistRoot(options.sdkDistRoot)\n  const coepMode = resolveCoepMode(options.coepMode)\n\n  // Build the sub-plugins to keep logic small and testable\n  const sdkPlugin = tatchiServeSdk({ sdkBasePath, sdkDistRoot, enableDebugRoutes, coepMode })\n  const walletPlugin = tatchiWalletService({ walletServicePath, sdkBasePath, coepMode })\n  const wasmMimePlugin = tatchiWasmMime()\n  // Flip wallet CSP to strict by default in dev. Consumers can override via\n  // VITE_WALLET_DEV_CSP or by composing tatchiHeaders directly.\n  const headersPlugin = setDevHeaders\n    ? tatchiHeaders({ walletOrigin, walletServicePath, sdkBasePath, devCSP: 'strict', coepMode })\n    : undefined\n\n  return {\n    name: 'tatchi:dev',\n    apply: 'serve',\n    enforce: 'pre',\n    configureServer(server) {\n      // Always add WASM MIME + SDK server\n      sdkPlugin.configureServer?.(server)\n      wasmMimePlugin.configureServer?.(server)\n      if (headersPlugin) headersPlugin.configureServer?.(server)\n\n      // Mode-specific wallet service route\n      if (mode === 'self-contained' || mode === 'wallet-only') {\n        walletPlugin.configureServer?.(server)\n      }\n    },\n  }\n}\n\n// === Build-time helper: emit Cloudflare Pages/Netlify _headers ===\n// This plugin writes a _headers file into Vite's outDir with COOP and optional COEP and a\n// Permissions-Policy delegating WebAuthn to the configured wallet origin.\n// It is a no-op if a _headers file already exists (to avoid overriding app settings).\n/**\n * Build-time plugin: writes a Cloudflare Pages/Netlify-compatible `_headers` file into Vite's `outDir`.\n * Adds COOP + Permissions-Policy and optional COEP/CORP (configurable via coepMode) delegating WebAuthn to the configured wallet origin.\n * Where it runs: build for either the app or a static wallet host (not used in dev).\n * Notes: no-ops if `_headers` already exists in `outDir` (to avoid overriding platform config).\n */\nexport function tatchiBuildHeaders(opts: { walletOrigin?: string, cors?: { accessControlAllowOrigin?: string }, coepMode?: 'strict' | 'off' } = {}): VitePlugin {\n  const walletOriginRaw = opts.walletOrigin ?? process.env.VITE_WALLET_ORIGIN\n  const walletOrigin = walletOriginRaw?.trim()\n  const walletServicePath = normalizeBase(process.env.VITE_WALLET_SERVICE_PATH, '/wallet-service')\n  const sdkBasePath = normalizeBase(process.env.VITE_SDK_BASE_PATH, '/sdk')\n  const coepMode = resolveCoepMode(opts.coepMode)\n\n  // Build headers via shared helpers to avoid drift between frameworks\n  const permissionsPolicy = buildPermissionsPolicy(walletOrigin)\n  const walletCsp = buildWalletCsp({ mode: 'strict' })\n\n  let outDir = 'dist'\n\n  // We intentionally return a broader shape than VitePlugin; cast at the end\n  const plugin = {\n    name: 'tatchi:build-headers',\n    apply: 'build' as const,\n    enforce: 'post' as const,\n    // Capture the resolved outDir\n    configResolved(config: any) {\n      outDir = (config?.build?.outDir as string) || outDir\n    },\n    generateBundle() {\n      try {\n        const hdrPath = path.join(outDir, '_headers')\n        if (fs.existsSync(hdrPath)) {\n          // Do not override existing headers; leave a note in build logs\n          console.warn('[tatchi] _headers already exists in outDir; skipping auto-emission')\n        } else {\n          // Strict CSP is emitted only for wallet HTML routes; not for app pages.\n          const contentLines: string[] = [\n            '/*',\n            '  Cross-Origin-Opener-Policy: same-origin',\n            ...(coepMode === 'off'\n              ? []\n              : [\n                  '  Cross-Origin-Embedder-Policy: require-corp',\n                  '  Cross-Origin-Resource-Policy: cross-origin',\n                ]),\n            `  Permissions-Policy: ${permissionsPolicy}`,\n            '',\n            `${walletServicePath}`,\n            '  Cross-Origin-Opener-Policy: unsafe-none',\n            `  Permissions-Policy: ${permissionsPolicy}`,\n            `  Content-Security-Policy: ${walletCsp}`,\n            `${walletServicePath}/`,\n            '  Cross-Origin-Opener-Policy: unsafe-none',\n            `  Permissions-Policy: ${permissionsPolicy}`,\n            `  Content-Security-Policy: ${walletCsp}`,\n            '/export-viewer',\n            '  Cross-Origin-Opener-Policy: unsafe-none',\n            `  Permissions-Policy: ${permissionsPolicy}`,\n            '/export-viewer/',\n            '  Cross-Origin-Opener-Policy: unsafe-none',\n            `  Permissions-Policy: ${permissionsPolicy}`,\n            // Offline export cache policy (no-cache for HTML/SW; immutable for other assets)\n            '/offline-export',\n            '  Cache-Control: no-cache',\n            '/offline-export/',\n            '  Cache-Control: no-cache',\n            '/offline-export/index.html',\n            '  Cache-Control: no-cache',\n            '/offline-export/sw.js',\n            '  Cache-Control: no-cache',\n            '/offline-export/precache.manifest.json',\n            '  Cache-Control: no-cache',\n            '/offline-export/manifest.webmanifest',\n            '  Cache-Control: no-cache',\n            '/offline-export/offline-export-app.js',\n            '  Cache-Control: no-cache',\n            '/offline-export/*',\n            '  Cache-Control: public, max-age=31536000, immutable',\n          ]\n          // Optional: emit CORS headers when explicitly configured via plugin option.\n          // Prefer a single source of truth (platform or plugin), not both.\n          const configuredAcaOrigin = (opts.cors && typeof opts.cors.accessControlAllowOrigin === 'string'\n            ? opts.cors.accessControlAllowOrigin.trim()\n            : undefined) as string | undefined;\n          if (configuredAcaOrigin) {\n            contentLines.push(\n              `${sdkBasePath}/*`,\n              `  Access-Control-Allow-Origin: ${configuredAcaOrigin}`,\n            )\n          }\n          const content = contentLines.join('\\n') + '\\n'\n          fs.mkdirSync(outDir, { recursive: true })\n          fs.writeFileSync(hdrPath, content, 'utf-8')\n          console.log('[tatchi] emitted _headers with COOP' + (coepMode === 'off' ? '' : '/COEP/CORP') + ' + Permissions-Policy' + (configuredAcaOrigin ? ' + CORS' : ''))\n        }\n\n        const sdkDir = path.join(outDir, sdkBasePath.replace(/^\\//, ''))\n        try { fs.mkdirSync(sdkDir, { recursive: true }) } catch {}\n        const shimPath = path.join(sdkDir, 'wallet-shims.js')\n        if (!fs.existsSync(shimPath)) {\n          fs.writeFileSync(shimPath, WALLET_SHIM_SOURCE, 'utf-8')\n        }\n        const cssPath = path.join(sdkDir, 'wallet-service.css')\n        if (!fs.existsSync(cssPath)) {\n          fs.writeFileSync(cssPath, WALLET_SURFACE_CSS, 'utf-8')\n        }\n\n        // Emit minimal wallet-service/index.html if the app hasn't provided one\n        const walletRel = walletServicePath.replace(/^\\//, '')\n        const wsDir = path.join(outDir, walletRel)\n        const wsHtml = path.join(wsDir, 'index.html')\n        if (!fs.existsSync(wsHtml)) {\n          fs.mkdirSync(wsDir, { recursive: true })\n          fs.writeFileSync(wsHtml, buildWalletServiceHtml(sdkBasePath), 'utf-8')\n          console.log(`[tatchi] emitted ${path.posix.join('/', walletRel, 'index.html')} (minimal wallet service)`)\n        }\n\n        // Emit minimal export viewer HTML for production\n        const evDir = path.join(outDir, 'export-viewer')\n        const evHtml = path.join(evDir, 'index.html')\n        if (!fs.existsSync(evHtml)) {\n          fs.mkdirSync(evDir, { recursive: true })\n          fs.writeFileSync(evHtml, buildExportViewerHtml(sdkBasePath), 'utf-8')\n          console.log('[tatchi] emitted /export-viewer/index.html (minimal export viewer)')\n        }\n\n        // Emit offline-export assets (SW, workers, app, HTML, manifest, precache) via helper\n        try {\n          const sdkDistRoot = resolveSdkDistRoot()\n          emitOfflineExportAssets({ outDir, sdkBasePath, sdkDistRoot })\n        } catch (e) {\n          console.warn('[tatchi] failed to emit offline-export assets:', e)\n        }\n      } catch (e) {\n        console.warn('[tatchi] failed to emit _headers:', e)\n      }\n    },\n  }\n\n  return plugin as unknown as VitePlugin\n}\n\n// Small test helpers to keep unit tests decoupled from Vite server implementation\nexport function computeDevPermissionsPolicy(walletOrigin?: string): string {\n  return buildPermissionsPolicy(walletOrigin)\n}\n\nexport function computeDevWalletCsp(mode: 'strict' | 'compatible' = 'strict'): string {\n  return buildWalletCsp({ mode })\n}\n\nexport function tatchiWalletServer(options: Omit<Web3AuthnDevOptions, 'mode'> = {}): VitePlugin {\n  return tatchiDevServer({ ...options, mode: 'wallet-only' })\n}\n\nexport function tatchiAppServer(options: Omit<Web3AuthnDevOptions, 'mode'> = {}): VitePlugin {\n  return tatchiDevServer({ ...options, mode: 'front-only' })\n}\n\n/**\n * Convenience wrapper: app origin helper that combines dev-time headers with optional\n * build-time headers emission for static hosts.\n *\n * Dev-time (serve): applies COOP + Permissions-Policy, plus optional COEP/CORP, via tatchiAppServer.\n * Build-time (build): when `emitHeaders` is true, writes a Cloudflare Pages/Netlify\n * `_headers` file into Vite's `outDir` via tatchiBuildHeaders, scoping strict CSP to\n * wallet HTML routes only.\n *   - Emits: `COOP: same-origin`, `Permissions-Policy: …`, and (when `coepMode === 'strict'`) `COEP: require-corp` + `CORP: cross-origin`.\n *   - No-op if a `_headers` file already exists in `outDir` (avoids clobbering CI/platform rules).\n *\n * Notes\n * - Keeps production header emission opt-in to avoid surprising overrides when apps\n *   already manage headers via custom servers or platform rules.\n * - Returns a plugin array for ergonomics; Vite accepts arrays in the `plugins` list.\n */\nexport function tatchiApp(options: Omit<Web3AuthnDevOptions, 'mode'> & { emitHeaders?: boolean } = {}): any[] /* Vite Plugin[] */ {\n  const { emitHeaders, ...devOpts } = options\n  const walletOrigin = (devOpts.walletOrigin ?? process.env.VITE_WALLET_ORIGIN)?.trim()\n  const app = tatchiAppServer(devOpts)\n  // Build-time emission is opt-in and will no-op if `_headers` already exists.\n  const hdr = emitHeaders ? tatchiBuildHeaders({ walletOrigin, coepMode: devOpts.coepMode }) : undefined\n  return [app, hdr].filter(Boolean) as any[]\n}\n\n/**\n * Convenience wrapper: wallet origin helper that combines dev-time wallet server\n * with optional build-time headers emission for static hosts.\n *\n * Dev-time (serve): serves `/wallet-service` and `/sdk/*` plus headers via tatchiWalletServer.\n * Build-time (build): when `emitHeaders` is true, writes a Cloudflare Pages/Netlify\n * `_headers` file into Vite's `outDir` via tatchiBuildHeaders, scoping strict CSP to\n * wallet HTML routes only.\n *   - Emits: `COOP: same-origin` (wallet HTML routes use `unsafe-none`), `Permissions-Policy: …`, and (when `coepMode === 'strict'`) `COEP: require-corp` + `CORP: cross-origin`.\n *   - No-op if a `_headers` file already exists in `outDir` (avoids clobbering CI/platform rules).\n *\n * Notes\n * - Keeps production header emission opt-in to avoid overriding platform/server configs.\n * - Returns a plugin array for ergonomics; Vite accepts arrays in the `plugins` list.\n */\nexport function tatchiWallet(options: Omit<Web3AuthnDevOptions, 'mode'> & { emitHeaders?: boolean } = {}): any[] /* Vite Plugin[] */ {\n  const { emitHeaders, ...devOpts } = options\n  const walletOrigin = (devOpts.walletOrigin ?? process.env.VITE_WALLET_ORIGIN)?.trim()\n  const wallet = tatchiWalletServer(devOpts)\n  // Build-time emission is opt-in and will no-op if `_headers` already exists.\n  const hdr = emitHeaders ? tatchiBuildHeaders({ walletOrigin, coepMode: devOpts.coepMode }) : undefined\n  return [wallet, hdr].filter(Boolean) as any[]\n}\n"],"mappings":";;;;;;;;;;;;;;AAwFA,SAAS,QAAQ,GAAG,YAA0C;AAC5D,MAAK,MAAM,QAAQ,WACjB,KAAI;EACF,MAAM,OAAOA,QAAG,SAAS;AACzB,MAAI,KAAK,SAAU,QAAO;SACpB;AAEV,QAAO;;AAMT,MAAM,qBAAqB;AAC3B,MAAM,qBAAqB;CACzB;CACA;CACA;CAEA;CACA;CAEA;CACA;CACA;CAIA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;EACA,KAAK;;;;;;;AAQP,SAAgB,eAAe,OAAwB,IAAgB;CACrE,MAAM,iBAAiBC,mCAAc,KAAK,aAAa;CACvD,MAAM,cAAcC,wCAAmB,KAAK;CAC5C,MAAM,oBAAoB,KAAK,sBAAsB;CACrD,MAAM,WAAWC,qCAAgB,KAAK;CACtC,MAAM,cAAcC,uCAAuB;CAG3C,MAAM,QAAQ,MAAM,KAAK,IAAI,IAAI,CAAC,gBAAgBH,mCAAc,WAC7D,MAAM,GAAG,MAAM,EAAE,SAAS,EAAE;AAG/B,QAAO;EACL,MAAM;EACN,OAAO;EACP,SAAS;EACT,gBAAgB,QAAQ;AAEtB,6CAA0B,QAAQ;IAChC;IACA,aAAa;IACb;IACA,kBAAkB;IAClB;;AAGF,UAAO,YAAY,KAAK,KAAU,KAAU,SAAc;IACxD,MAAM,OAAO,IAAI,OAAO,IAAI,MAAM,KAAK;AACvC,QAAI,QAAQ,iBAAiB,oBAAoB;AAC/C,SAAI,aAAa;AACjB,SAAI,UAAU,gBAAgB;AAE9B,gDAAsB,KAAK;AAE3B,8CAAoB,KAAK,KAAK,EAAE,iBAAiB;AACjD,SAAI,IAAI;AACR;;AAEF,QAAI,QAAQ,iBAAiB,uBAAuB;AAClD,SAAI,aAAa;AACjB,SAAI,UAAU,gBAAgB;AAE9B,gDAAsB,KAAK;AAE3B,8CAAoB,KAAK,KAAK,EAAE,iBAAiB;AACjD,SAAI,IAAI;AACR;;AAEF;;AAIF,OAAI,kBACF,QAAO,YAAY,IAAI,gBAAgB,KAAU,QAAa;AAC5D,QAAI,UAAU,gBAAgB;AAC9B,QAAI,IAAI;;AAKZ,UAAO,YAAY,KAAK,KAAU,KAAU,SAAc;AACxD,QAAI,CAAC,IAAI,IAAK,QAAO;IACrB,MAAM,MAAM,IAAI,IAAI,MAAM,KAAK;IAE/B,MAAM,YAAY,MAAM,MAAM,MAAM,IAAI,WAAW,IAAI;AACvD,QAAI,CAAC,UAAW,QAAO;IAEvB,MAAM,MAAM,IAAI,OAAO,YAAY,KAAK;IAExC,MAAM,YAAY,QAChBI,UAAK,KAAK,aAAa,OAAO,OAAO,MACrCA,UAAK,KAAK,aAAa,MACvBA,UAAK,KAAK,aAAa,OAAO;AAGhC,QAAI,CAAC,WAAW;AACd,SAAI,aAAa;AACjB,SAAI,UAAU,gBAAgB;AAC9B,SAAI,IAAI,KAAK,UAAU;MAAE,OAAO;MAAuB,MAAM;;AAC7D;;AAGF,wCAAe,KAAK;AAEpB,+CAAsB,KAAK;AAE3B,6CAAoB,KAAK,KAAK,EAAE,iBAAiB;IACjD,MAAM,SAASL,QAAG,iBAAiB;AACnC,WAAO,GAAG,eAAe;AACzB,WAAO,KAAK;;;;;;;;;AAUpB,SAAgB,oBAAoB,OAA6B,IAAgB;CAC/E,MAAM,oBAAoBC,mCAAc,KAAK,mBAAmB;CAChE,MAAM,cAAcA,mCAAc,KAAK,aAAa;CACpD,MAAM,WAAWE,qCAAgB,KAAK;CAEtC,MAAM,OAAOG,4CAAuB;CACpC,MAAM,cAAcF,uCAAuB;CAC3C,MAAM,cAAcF;AAEpB,QAAO;EACL,MAAM;EACN,OAAO;EACP,SAAS;EACT,gBAAgB,QAAQ;AACtB,UAAO,YAAY,KAAK,KAAU,KAAU,SAAc;AACxD,QAAI,CAAC,IAAI,IAAK,QAAO;IACrB,MAAM,MAAM,IAAI,IAAI,MAAM,KAAK;AAC/B,QAAI,QAAQ,mBAAmB;AAC7B,SAAI,aAAa;AACjB,SAAI,UAAU,gBAAgB;AAC9B,gDAAsB,KAAK;AAC3B,SAAI,IAAI;AACR;;AAEF;;AAIF,6CAA0B,QAAQ;IAChC;IACA;IACA;IACA,kBAAkB;IAClB;;;;;;;;;AAUR,SAAgB,iBAA6B;AAC3C,QAAO;EACL,MAAM;EACN,OAAO;EACP,SAAS;EACT,gBAAgB,QAAQ;AACtB,UAAO,YAAY,KAAK,KAAU,KAAU,SAAc;AACxD,QAAI,CAAC,IAAI,IAAK,QAAO;IACrB,MAAM,MAAM,IAAI,IAAI,MAAM,KAAK;AAC/B,QAAI,IAAI,SAAS,SACf,KAAI,UAAU,gBAAgB;AAEhC;;;;;;;;;;;;AAaR,SAAgB,cAAc,OAA0B,IAAgB;CACtE,MAAM,kBAAkB,KAAK,gBAAgB,QAAQ,IAAI;CACzD,MAAM,eAAe,iBAAiB;CACtC,MAAM,oBAAoBD,mCAAc,KAAK,qBAAqB,QAAQ,IAAI,0BAA0B;CACxG,MAAM,cAAcA,mCAAc,KAAK,eAAe,QAAQ,IAAI,oBAAoB;CACtF,MAAM,aAAc,KAAK,UAAW,QAAQ,IAAI;CAChD,MAAM,WAAWE,qCAAgB,KAAK;CAGtC,MAAM,oBAAoBI,uCAAuB;CAIjD,MAAM,iBAAiB,QAAQ,IAAI,6BAA6B,IAAI,WAAW;CAC/E,MAAM,aAAa,QAAQ,IAAI,mBAAmB,uBAAuB,WAAW;CACpF,MAAM,cAAc,QAAQ,IAAI,qBAAqB,iCAAiC,WAAW;AAGjG,QAAO;EACL,MAAM;EACN,OAAO;EACP,SAAS;EACT,gBAAgB,QAAQ;AAEtB,WAAQ,IAAI,4BAA4B;IACtC;IACA;IACA;IACA,eAAe,iBAAiB;IAChC;;AAGF,UAAO,YAAY,KAAK,KAAU,KAAU,SAAc;IACxD,MAAM,OAAO,IAAI,OAAO,IAAI,MAAM,KAAK,MAAM;IAC7C,MAAM,gBAAgB,QAAQ,qBAAqB,QAAQ,GAAG,kBAAkB,MAAM,QAAQ,GAAG,kBAAkB;AACnH,QAAI,UAAU,8BAA8B,gBAAgB,gBAAgB;AAC5E,QAAI,aAAa,OAAO;AACtB,SAAI,UAAU,gCAAgC;AAC9C,SAAI,UAAU,gCAAgC;;AAEhD,QAAI,UAAU,sBAAsB;AAEpC,QAAI,iBAAiB,YAAY;KAC/B,MAAM,OAAO,eAAe,WAAW,WAAW;KAClD,MAAM,YAAYC,+BAAe,EAAE;AACnC,SAAI,UAAU,2BAA2B;;AAG3C,2CAAkB,KAAK;IAGvB,MAAM,cAAc,QAAQ,2BAA2B,QAAQ;AAC/D,QAAI,aAAa;AAGf,SAAI,eAAe;AAChB,OAAC,YAAY;AACZ,WAAI;QACF,MAAM,UAAU,MAAMC,6CAAwB;SAC5C,QAAQ;SACR,YAAY;SACZ,QAAQ;;AAEV,YAAI,aAAa;AACjB,YAAI,UAAU,gBAAgB;AAC9B,YAAI,UAAU,iBAAiB;AAC/B,YAAI,IAAI,KAAK,UAAU,EAAE;gBAClB,GAAG;AACV,gBAAQ,KAAK,sCAAsC;AACnD,YAAI,aAAa;AACjB,YAAI,UAAU,gBAAgB;AAC9B,YAAI,UAAU,iBAAiB;AAC/B,YAAI,IAAI,KAAK,UAAU,EAAE,SAAS;;;AAGtC;;AAGF,SAAI,aAAa;AACjB,SAAI,UAAU,gBAAgB;AAC9B,SAAI,UAAU,iBAAiB;AAC/B,SAAI,IAAI,KAAK,UAAU,EAAE,SAAS;AAClC;;AAGF,QAAI,IAAI,WAAW,GAAG,YAAY,KAAK;AAErC,gDAAsB,KAAK;KAE3B,MAAM,QAAQC,yCAAoB,KAAK,KAAK;MAAE,wBAAwB;MAAM,iBAAiB;;AAC7F,SAAI,MAAO;;AAEb;;;;;;;;;;;;;;;;AAiBR,SAAS,gBAAgB,UAA+B,IAAgB;CACtE,MAAMC,OAA8C,QAAQ,QAAQ;CACpE,MAAM,cAAcV,mCAAc,QAAQ,eAAe,QAAQ,IAAI,oBAAoB;CACzF,MAAM,oBAAoBA,mCAAc,QAAQ,qBAAqB,QAAQ,IAAI,0BAA0B;CAC3G,MAAM,gBAAgB,QAAQ,gBAAgB,QAAQ,IAAI,qBAAqB;CAC/E,MAAM,gBAAgB,QAAQ,kBAAkB;CAChD,MAAM,oBAAoB,QAAQ,sBAAsB;CACxD,MAAM,cAAcC,wCAAmB,QAAQ;CAC/C,MAAM,WAAWC,qCAAgB,QAAQ;CAGzC,MAAM,YAAY,eAAe;EAAE;EAAa;EAAa;EAAmB;;CAChF,MAAM,eAAe,oBAAoB;EAAE;EAAmB;EAAa;;CAC3E,MAAM,iBAAiB;CAGvB,MAAM,gBAAgB,gBAClB,cAAc;EAAE;EAAc;EAAmB;EAAa,QAAQ;EAAU;MAChF;AAEJ,QAAO;EACL,MAAM;EACN,OAAO;EACP,SAAS;EACT,gBAAgB,QAAQ;AAEtB,aAAU,kBAAkB;AAC5B,kBAAe,kBAAkB;AACjC,OAAI,cAAe,eAAc,kBAAkB;AAGnD,OAAI,SAAS,oBAAoB,SAAS,cACxC,cAAa,kBAAkB;;;;;;;;;;AAgBvC,SAAgB,mBAAmB,OAA6G,IAAgB;CAC9J,MAAM,kBAAkB,KAAK,gBAAgB,QAAQ,IAAI;CACzD,MAAM,eAAe,iBAAiB;CACtC,MAAM,oBAAoBF,mCAAc,QAAQ,IAAI,0BAA0B;CAC9E,MAAM,cAAcA,mCAAc,QAAQ,IAAI,oBAAoB;CAClE,MAAM,WAAWE,qCAAgB,KAAK;CAGtC,MAAM,oBAAoBI,uCAAuB;CACjD,MAAM,YAAYC,+BAAe,EAAE,MAAM;CAEzC,IAAI,SAAS;CAGb,MAAM,SAAS;EACb,MAAM;EACN,OAAO;EACP,SAAS;EAET,eAAe,QAAa;AAC1B,YAAU,QAAQ,OAAO,UAAqB;;EAEhD,iBAAiB;AACf,OAAI;IACF,MAAM,UAAUH,UAAK,KAAK,QAAQ;AAClC,QAAIL,QAAG,WAAW,SAEhB,SAAQ,KAAK;SACR;KAEL,MAAMY,eAAyB;MAC7B;MACA;MACA,GAAI,aAAa,QACb,KACA,CACE,gDACA;MAEN,yBAAyB;MACzB;MACA,GAAG;MACH;MACA,yBAAyB;MACzB,8BAA8B;MAC9B,GAAG,kBAAkB;MACrB;MACA,yBAAyB;MACzB,8BAA8B;MAC9B;MACA;MACA,yBAAyB;MACzB;MACA;MACA,yBAAyB;MAEzB;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;;KAIF,MAAM,sBAAuB,KAAK,QAAQ,OAAO,KAAK,KAAK,6BAA6B,WACpF,KAAK,KAAK,yBAAyB,SACnC;AACJ,SAAI,oBACF,cAAa,KACX,GAAG,YAAY,KACf,kCAAkC;KAGtC,MAAM,UAAU,aAAa,KAAK,QAAQ;AAC1C,aAAG,UAAU,QAAQ,EAAE,WAAW;AAClC,aAAG,cAAc,SAAS,SAAS;AACnC,aAAQ,IAAI,yCAAyC,aAAa,QAAQ,KAAK,gBAAgB,2BAA2B,sBAAsB,YAAY;;IAG9J,MAAM,SAASP,UAAK,KAAK,QAAQ,YAAY,QAAQ,OAAO;AAC5D,QAAI;AAAE,aAAG,UAAU,QAAQ,EAAE,WAAW;YAAgB;IACxD,MAAM,WAAWA,UAAK,KAAK,QAAQ;AACnC,QAAI,CAACL,QAAG,WAAW,UACjB,SAAG,cAAc,UAAU,oBAAoB;IAEjD,MAAM,UAAUK,UAAK,KAAK,QAAQ;AAClC,QAAI,CAACL,QAAG,WAAW,SACjB,SAAG,cAAc,SAAS,oBAAoB;IAIhD,MAAM,YAAY,kBAAkB,QAAQ,OAAO;IACnD,MAAM,QAAQK,UAAK,KAAK,QAAQ;IAChC,MAAM,SAASA,UAAK,KAAK,OAAO;AAChC,QAAI,CAACL,QAAG,WAAW,SAAS;AAC1B,aAAG,UAAU,OAAO,EAAE,WAAW;AACjC,aAAG,cAAc,QAAQM,4CAAuB,cAAc;AAC9D,aAAQ,IAAI,oBAAoBD,UAAK,MAAM,KAAK,KAAK,WAAW,cAAc;;IAIhF,MAAM,QAAQA,UAAK,KAAK,QAAQ;IAChC,MAAM,SAASA,UAAK,KAAK,OAAO;AAChC,QAAI,CAACL,QAAG,WAAW,SAAS;AAC1B,aAAG,UAAU,OAAO,EAAE,WAAW;AACjC,aAAG,cAAc,QAAQa,2CAAsB,cAAc;AAC7D,aAAQ,IAAI;;AAId,QAAI;KACF,MAAM,cAAcX;AACpB,6CAAwB;MAAE;MAAQ;MAAa;;aACxC,GAAG;AACV,aAAQ,KAAK,kDAAkD;;YAE1D,GAAG;AACV,YAAQ,KAAK,qCAAqC;;;;AAKxD,QAAO;;AAIT,SAAgB,4BAA4B,cAA+B;AACzE,QAAOK,uCAAuB;;AAGhC,SAAgB,oBAAoB,OAAgC,UAAkB;AACpF,QAAOC,+BAAe,EAAE;;AAG1B,SAAgB,mBAAmB,UAA6C,IAAgB;AAC9F,QAAO,gBAAgB;EAAE,GAAG;EAAS,MAAM;;;AAG7C,SAAgB,gBAAgB,UAA6C,IAAgB;AAC3F,QAAO,gBAAgB;EAAE,GAAG;EAAS,MAAM;;;;;;;;;;;;;;;;;;;AAmB7C,SAAgB,UAAU,UAAyE,IAA+B;CAChI,MAAM,EAAE,YAAa,GAAG,YAAY;CACpC,MAAM,gBAAgB,QAAQ,gBAAgB,QAAQ,IAAI,qBAAqB;CAC/E,MAAM,MAAM,gBAAgB;CAE5B,MAAM,MAAM,cAAc,mBAAmB;EAAE;EAAc,UAAU,QAAQ;MAAc;AAC7F,QAAO,CAAC,KAAK,KAAK,OAAO;;;;;;;;;;;;;;;;;AAkB3B,SAAgB,aAAa,UAAyE,IAA+B;CACnI,MAAM,EAAE,YAAa,GAAG,YAAY;CACpC,MAAM,gBAAgB,QAAQ,gBAAgB,QAAQ,IAAI,qBAAqB;CAC/E,MAAM,SAAS,mBAAmB;CAElC,MAAM,MAAM,cAAc,mBAAmB;EAAE;EAAc,UAAU,QAAQ;MAAc;AAC7F,QAAO,CAAC,QAAQ,KAAK,OAAO"}
+{"version":3,"file":"vite.js","names":["fs","toBasePath","resolveSdkDistRoot","resolveCoepMode","buildOfflineExportHtml","path","buildWalletServiceHtml","buildPermissionsPolicy","buildWalletCsp","fetchRorOriginsFromNear","echoCorsFromRequest","mode: Required<Web3AuthnDevOptions>['mode']","contentLines: string[]","buildExportViewerHtml"],"sources":["../../../src/plugins/vite.ts"],"sourcesContent":["// Minimal Vite dev plugin(s) to support Passkey Manager modes.\n// See docs/passkey-manager-modes.md (Vite Plugin section).\n//\n// What these plugins do:\n// - Serve SDK assets under a base path, expose a wallet service route,\n// - Add dev headers (COOP + Permissions-Policy, optional COEP/CORP), and enforce WASM MIME.\n// - IMPORTANT: Strict CSP is scoped only to wallet HTML routes (/wallet-service, /export-viewer),\n//   not to the host app pages. App routes remain free to use inline styles/scripts.\n\nimport * as fs from 'node:fs'\nimport * as path from 'node:path'\nimport { buildPermissionsPolicy, buildWalletCsp } from './headers'\nimport {\n  addPreconnectLink,\n  buildWalletServiceHtml,\n  buildExportViewerHtml,\n  applyCoepCorpIfNeeded,\n  echoCorsFromRequest,\n  fetchRorOriginsFromNear,\n  toBasePath,\n  resolveCoepMode,\n  resolveSdkDistRoot,\n} from './plugin-utils'\nimport { addOfflineExportDevRoutes, buildOfflineExportHtml, emitOfflineExportAssets } from './offline'\nimport { setContentType } from './plugin-utils'\n\nexport type VitePlugin = {\n  name: string\n  apply?: 'serve' | 'build'\n  enforce?: 'pre' | 'post'\n  configureServer?: (server: any) => void | Promise<void>\n}\nexport type ViteLikePlugin = VitePlugin\n\nexport type Web3AuthnDevOptions = {\n  mode?: 'self-contained' | 'front-only' | 'wallet-only'\n  sdkDistRoot?: string\n  sdkBasePath?: string\n  walletServicePath?: string\n  walletOrigin?: string\n  setDevHeaders?: boolean\n  enableDebugRoutes?: boolean\n  /**\n   * Controls Cross-Origin-Embedder-Policy (COEP) behavior in dev.\n   * - 'off' (default): do not emit COEP/CORP on app pages.\n   * - 'strict': emit `Cross-Origin-Embedder-Policy: require-corp`\n   *   and `Cross-Origin-Resource-Policy: cross-origin` on app pages.\n   *\n   * Tip: set `VITE_COEP_MODE=strict` in tests/CI to enable isolation automatically.\n   */\n  coepMode?: 'strict' | 'off'\n}\n\nexport type ServeSdkOptions = {\n  sdkDistRoot?: string\n  sdkBasePath?: string\n  enableDebugRoutes?: boolean\n  coepMode?: 'strict' | 'off'\n}\n\nexport type WalletServiceOptions = {\n  walletServicePath?: string\n  sdkBasePath?: string\n  coepMode?: 'strict' | 'off'\n}\n\nexport type DevHeadersOptions = {\n  walletOrigin?: string\n  walletServicePath?: string\n  sdkBasePath?: string\n  /**\n   * Optional dev-time CSP for the wallet service route.\n   *  - 'strict': no inline scripts/styles (mirrors production defaults)\n   *  - 'compatible': allows inline scripts/styles (useful for debugging)\n   */\n  devCSP?: 'strict' | 'compatible'\n  /**\n   * Controls Cross-Origin-Embedder-Policy (COEP) behavior in dev.\n   * - 'off' (default): do not emit COEP/CORP headers on app pages.\n   * - 'strict': emit COEP/CORP headers on app pages.\n   */\n  coepMode?: 'strict' | 'off'\n}\n\n/**\n * Return the first candidate path that exists and is a file.\n * Helper for robust /sdk/* asset resolution on dev servers (app and wallet).\n */\nfunction tryFile(...candidates: string[]): string | undefined {\n  for (const file of candidates) {\n    try {\n      const stat = fs.statSync(file)\n      if (stat.isFile()) return file\n    } catch {}\n  }\n  return undefined\n}\n\n// RPC helpers are provided by plugin-utils to share logic across frameworks.\n\n// Shared assets emitted/served for the wallet service bootstrap.\nconst WALLET_SHIM_SOURCE = \"window.global ||= window; window.process ||= { env: {} };\\n\"\nconst WALLET_SURFACE_CSS = [\n  'html, body { background: transparent !important; margin:0; padding:0; }',\n  'html, body { color-scheme: normal; }',\n  '',\n  // Class-based surface for strict CSP setups toggled by JS\n  'html.w3a-transparent, body.w3a-transparent { background: transparent !important; margin:0; padding:0; color-scheme: normal; }',\n  '',\n  // Minimal portal styles used by confirm-ui (no animation; child components handle transitions)\n  '.w3a-portal { position: relative; z-index: 2147483647; opacity: 0; pointer-events: none; }',\n  '.w3a-portal.w3a-portal--visible { opacity: 1; pointer-events: auto; }',\n  '',\n  // Provide baseline tokens only when the document does not declare a theme.\n  // This avoids overriding :root[data-w3a-theme] values supplied by token sheet\n  // or integrator-injected themes.\n  ':root:not([data-w3a-theme]) {',\n  '  --w3a-colors-textPrimary: #f6f7f8;',\n  '  --w3a-colors-textSecondary: rgba(255,255,255,0.7);',\n  '  --w3a-colors-surface: rgba(255,255,255,0.08);',\n  '  --w3a-colors-surface2: rgba(255,255,255,0.06);',\n  '  --w3a-colors-surface3: rgba(255,255,255,0.04);',\n  '  --w3a-colors-borderPrimary: rgba(255,255,255,0.14);',\n  '  --w3a-colors-borderSecondary: rgba(255,255,255,0.1);',\n  '  --w3a-colors-colorBackground: #0b0c10;',\n  '  /* Default viewport custom properties for width/height calculations */',\n  '  --w3a-vw: 100vw;',\n  '  --w3a-vh: 100vh;',\n  '}',\n  '',\n].join('\\n')\n\n/**\n * Tatchi SDK plugin: serve SDK assets under a stable base (default: /sdk) with optional COEP/CORP (strict mode) and permissive CORS.\n * Where it runs: both the app server and the wallet-iframe server.\n * - App server: lets host pages and Lit components load SDK CSS/JS locally.\n * - Wallet server: used by /wallet-service to load wallet-iframe-host.js and related CSS/JS.\n */\nexport function tatchiServeSdk(opts: ServeSdkOptions = {}): VitePlugin {\n  const configuredBase = toBasePath(opts.sdkBasePath, '/sdk')\n  const sdkDistRoot = resolveSdkDistRoot(opts.sdkDistRoot)\n  const enableDebugRoutes = opts.enableDebugRoutes === true\n  const coepMode = resolveCoepMode(opts.coepMode)\n  const offlineHtml = buildOfflineExportHtml(configuredBase)\n\n  // In dev we want both '/sdk' and a custom base to work.\n  const bases = Array.from(new Set([configuredBase, toBasePath('/sdk')]))\n    .sort((a, b) => b.length - a.length)\n    // Prefer longest base match first (e.g., '/sdk/esm/react' before '/sdk')\n\n  return {\n    name: 'tatchi:serve-sdk',\n    apply: 'serve',\n    enforce: 'pre',\n    configureServer(server) {\n      // Mount Offline Export dev routes once here (includes app module + chunks)\n      addOfflineExportDevRoutes(server, {\n        sdkDistRoot,\n        sdkBasePath: configuredBase,\n        offlineHtml,\n        includeAppModule: true,\n        coepMode,\n      })\n      // Serve a tiny shim as a virtual asset to enable strict CSP (no inline scripts)\n      server.middlewares.use((req: any, res: any, next: any) => {\n        const url = (req.url || '').split('?')[0]\n        if (url === configuredBase + '/wallet-shims.js') {\n          res.statusCode = 200\n          res.setHeader('Content-Type', 'application/javascript; charset=utf-8')\n          // Align with SDK asset headers so COEP/CORP environments can import\n          applyCoepCorpIfNeeded(res, coepMode)\n          // Dev-only CORS echo (no preflight handling on this route)\n          echoCorsFromRequest(res, req, { handlePreflight: false })\n          res.end(WALLET_SHIM_SOURCE)\n          return\n        }\n        if (url === configuredBase + '/wallet-service.css') {\n          res.statusCode = 200\n          res.setHeader('Content-Type', 'text/css; charset=utf-8')\n          // Important: provide CORP for cross‑origin CSS so COEP documents can load it\n          applyCoepCorpIfNeeded(res, coepMode)\n          // Dev-only CORS echo (no preflight handling on this route)\n          echoCorsFromRequest(res, req, { handlePreflight: false })\n          res.end(WALLET_SURFACE_CSS)\n          return\n        }\n        next()\n      })\n\n      // Optional debug route to confirm resolution\n      if (enableDebugRoutes) {\n        server.middlewares.use('/__sdk-root', (req: any, res: any) => {\n          res.setHeader('Content-Type', 'text/plain; charset=utf-8')\n          res.end(sdkDistRoot)\n        })\n      }\n\n      // Serve files under any recognized base from sdkDistRoot with fallbacks\n      server.middlewares.use((req: any, res: any, next: any) => {\n        if (!req.url) return next()\n        const url = req.url.split('?')[0]\n\n        const matchBase = bases.find((b) => url.startsWith(b + '/'))\n        if (!matchBase) return next()\n\n        const rel = url.slice((matchBase + '/').length)\n        // Try dist/esm/sdk first (canonical), then common fallbacks\n        const candidate = tryFile(\n          path.join(sdkDistRoot, 'esm', 'sdk', rel),\n          path.join(sdkDistRoot, rel),\n          path.join(sdkDistRoot, 'esm', rel)\n        )\n\n        if (!candidate) {\n          res.statusCode = 404\n          res.setHeader('Content-Type', 'application/json; charset=utf-8')\n          res.end(JSON.stringify({ error: 'SDK asset not found', path: rel }))\n          return\n        }\n\n        setContentType(res, candidate)\n        // SDK assets need COEP headers to work in wallet iframe with COEP enabled\n        applyCoepCorpIfNeeded(res, coepMode)\n        // Dev-only CORS echo (no preflight handling here)\n        echoCorsFromRequest(res, req, { handlePreflight: false })\n        const stream = fs.createReadStream(candidate)\n        stream.on('error', () => next())\n        stream.pipe(res)\n      })\n    },\n  }\n}\n\n/**\n * Dev plugin: expose the wallet service HTML route (default: /wallet-service) that links only external CSS/JS.\n * Where it runs: wallet-iframe dev server (wallet origin). Used by tatchiWalletServer.\n */\nexport function tatchiWalletService(opts: WalletServiceOptions = {}): VitePlugin {\n  const walletServicePath = toBasePath(opts.walletServicePath, '/wallet-service')\n  const sdkBasePath = toBasePath(opts.sdkBasePath, '/sdk')\n  const coepMode = resolveCoepMode(opts.coepMode)\n\n  const html = buildWalletServiceHtml(sdkBasePath)\n  const offlineHtml = buildOfflineExportHtml(sdkBasePath)\n  const sdkDistRoot = resolveSdkDistRoot()\n\n  return {\n    name: 'tatchi:wallet-service',\n    apply: 'serve',\n    enforce: 'pre',\n    configureServer(server) {\n      server.middlewares.use((req: any, res: any, next: any) => {\n        if (!req.url) return next()\n        const url = req.url.split('?')[0]\n        const isWalletRoute = url === walletServicePath || url === `${walletServicePath}/` || url === `${walletServicePath}//`\n        if (isWalletRoute) {\n          res.statusCode = 200\n          res.setHeader('Content-Type', 'text/html; charset=utf-8')\n          // Important: allow embedding this wallet HTML into COEP=require-corp apps even\n          // when the wallet itself is not running with COEP enabled.\n          // Without CORP, the iframe can be blocked and remain on an opaque 'null' origin,\n          // causing CONNECT/READY handshake timeouts in the parent.\n          res.setHeader('Cross-Origin-Resource-Policy', 'cross-origin')\n          applyCoepCorpIfNeeded(res, coepMode)\n          res.end(html)\n          return\n        }\n        next()\n      })\n\n      // Mount Offline Export routes here as well (no app module duplication)\n      addOfflineExportDevRoutes(server, {\n        sdkDistRoot,\n        sdkBasePath,\n        offlineHtml,\n        includeAppModule: false,\n        coepMode,\n      })\n    },\n  }\n}\n\n/**\n * Dev plugin: force the correct `.wasm` MIME type (application/wasm) for any served wasm file.\n * Where it runs: both app and wallet-iframe dev servers.\n */\nexport function tatchiWasmMime(): VitePlugin {\n  return {\n    name: 'tatchi:wasm-mime',\n    apply: 'serve',\n    enforce: 'pre',\n    configureServer(server) {\n      server.middlewares.use((req: any, res: any, next: any) => {\n        if (!req.url) return next()\n        const url = req.url.split('?')[0]\n        if (url.endsWith('.wasm')) {\n          res.setHeader('Content-Type', 'application/wasm')\n        }\n        next()\n      })\n    },\n  }\n}\n\n/**\n * Dev plugin: add Permissions-Policy (delegating WebAuthn + clipboard), COOP, optional COEP/CORP, and optional dev CSP.\n * Where it runs: both app and wallet-iframe dev servers.\n * Notes:\n * - Uses Structured Header format for Permissions-Policy (double-quoted origins).\n * - Wallet dev CSP can be toggled strict/compatible via opts.devCSP.\n */\nexport function tatchiHeaders(opts: DevHeadersOptions = {}): VitePlugin {\n  const walletOriginRaw = opts.walletOrigin ?? process.env.VITE_WALLET_ORIGIN\n  const walletOrigin = walletOriginRaw?.trim()\n  const walletServicePath = toBasePath(opts.walletServicePath || process.env.VITE_WALLET_SERVICE_PATH, '/wallet-service')\n  const sdkBasePath = toBasePath(opts.sdkBasePath || process.env.VITE_SDK_BASE_PATH, '/sdk')\n  const devCSPMode = (opts.devCSP ?? (process.env.VITE_WALLET_DEV_CSP as 'strict' | 'compatible' | undefined))\n  const coepMode = resolveCoepMode(opts.coepMode)\n\n  // Build headers via shared helpers to avoid drift.\n  const permissionsPolicy = buildPermissionsPolicy(walletOrigin)\n\n  // Dev convenience: dynamic ROR from NEAR RPC (no relay dependency)\n  // The dev server will fetch the allowlist from chain on demand when a contract id is provided.\n  const rorContractId = (process.env.VITE_WEBAUTHN_CONTRACT_ID || '').toString().trim()\n  const rorMethod = (process.env.VITE_ROR_METHOD || 'get_allowed_origins').toString().trim()\n  const nearRpcUrl = (process.env.VITE_NEAR_RPC_URL || 'https://test.rpc.fastnear.com').toString().trim()\n  // Caching is handled inside fetchRorOriginsFromNear via TTL\n\n  return {\n    name: 'tatchi:dev-headers',\n    apply: 'serve',\n    enforce: 'pre',\n    configureServer(server) {\n\n      console.log('[tatchi] headers enabled', {\n        walletServicePath,\n        sdkBasePath,\n        coepMode,\n        rorContractId: rorContractId || '(none)',\n        nearRpcUrl\n      })\n\n      server.middlewares.use((req: any, res: any, next: any) => {\n        const url = (req.url || '').split('?')[0] || ''\n        const isWalletRoute = url === walletServicePath || url === `${walletServicePath}/` || url === `${walletServicePath}//`\n        res.setHeader('Cross-Origin-Opener-Policy', isWalletRoute ? 'unsafe-none' : 'same-origin')\n        if (coepMode !== 'off') {\n          res.setHeader('Cross-Origin-Embedder-Policy', 'require-corp')\n          res.setHeader('Cross-Origin-Resource-Policy', 'cross-origin')\n        }\n        res.setHeader('Permissions-Policy', permissionsPolicy)\n        // Optional dev-time CSP for the wallet service page only (app pages are unaffected)\n        if (isWalletRoute && devCSPMode) {\n          const mode = devCSPMode === 'strict' ? 'strict' : 'compatible'\n          const walletCsp = buildWalletCsp({ mode })\n          res.setHeader('Content-Security-Policy', walletCsp)\n        }\n        // Resource hints: help parent pages preconnect to the wallet origin early in dev\n        addPreconnectLink(res, walletOrigin)\n\n        // Serve /.well-known/webauthn for ROR using chain state in dev\n        const isWellKnown = url === '/.well-known/webauthn' || url === '/.well-known/webauthn/'\n        if (isWellKnown) {\n          // Direct fetch from NEAR RPC (no relay). Caching handled inside helper.\n          // Requires contract id; RPC URL falls back to a reliable public endpoint.\n          if (rorContractId) {\n            ;(async () => {\n              try {\n                const origins = await fetchRorOriginsFromNear({\n                  rpcUrl: nearRpcUrl,\n                  contractId: rorContractId,\n                  method: rorMethod,\n                })\n                res.statusCode = 200\n                res.setHeader('Content-Type', 'application/json; charset=utf-8')\n                res.setHeader('Cache-Control', 'max-age=60, stale-while-revalidate=600')\n                res.end(JSON.stringify({ origins }))\n              } catch (e) {\n                console.warn('[tatchi] ROR dynamic fetch failed:', e)\n                res.statusCode = 200\n                res.setHeader('Content-Type', 'application/json; charset=utf-8')\n                res.setHeader('Cache-Control', 'max-age=60, stale-while-revalidate=600')\n                res.end(JSON.stringify({ origins: [] }))\n              }\n            })()\n            return\n          }\n          // No configuration; respond with empty allowlist to avoid hard 404 in dev\n          res.statusCode = 200\n          res.setHeader('Content-Type', 'application/json; charset=utf-8')\n          res.setHeader('Cache-Control', 'max-age=60, stale-while-revalidate=600')\n          res.end(JSON.stringify({ origins: [] }))\n          return\n        }\n\n        if (url.startsWith(`${sdkBasePath}/`)) {\n          // Dev-only CORS for SDK assets served by Vite\n          applyCoepCorpIfNeeded(res, coepMode)\n          // Honor existing echo from SDK server; otherwise echo\n          const ended = echoCorsFromRequest(res, req, { honorExistingAcaOrigin: true, handlePreflight: true })\n          if (ended) return\n        }\n        next()\n      })\n    },\n  }\n}\n\n/**\n * Dev plugin (composed): convenience entry that wires SDK server, WASM MIME, optional headers,\n * and (in wallet modes) the wallet service route.\n * Where it runs:\n * - App server: mode 'front-only' (or 'self-contained' when serving wallet pages on the same origin).\n * - Wallet-iframe server: modes 'wallet-only' or 'self-contained'.\n */\n/**\n * Compose dev plugins for serving SDK assets, wallet service HTML and dev headers.\n * External-facing entry for configuring either the app or wallet-iframe dev server.\n */\nfunction tatchiDevServer(options: Web3AuthnDevOptions = {}): VitePlugin {\n  const mode: Required<Web3AuthnDevOptions>['mode'] = options.mode || 'self-contained'\n  const sdkBasePath = toBasePath(options.sdkBasePath || process.env.VITE_SDK_BASE_PATH, '/sdk')\n  const walletServicePath = toBasePath(options.walletServicePath || process.env.VITE_WALLET_SERVICE_PATH, '/wallet-service')\n  const walletOrigin = (options.walletOrigin ?? process.env.VITE_WALLET_ORIGIN)?.trim()\n  const setDevHeaders = options.setDevHeaders !== false // default true\n  const enableDebugRoutes = options.enableDebugRoutes === true\n  const sdkDistRoot = resolveSdkDistRoot(options.sdkDistRoot)\n  const coepMode = resolveCoepMode(options.coepMode)\n\n  // Build the sub-plugins to keep logic small and testable\n  const sdkPlugin = tatchiServeSdk({ sdkBasePath, sdkDistRoot, enableDebugRoutes, coepMode })\n  const walletPlugin = tatchiWalletService({ walletServicePath, sdkBasePath, coepMode })\n  const wasmMimePlugin = tatchiWasmMime()\n  // Flip wallet CSP to strict by default in dev. Consumers can override via\n  // VITE_WALLET_DEV_CSP or by composing tatchiHeaders directly.\n  const headersPlugin = setDevHeaders\n    ? tatchiHeaders({ walletOrigin, walletServicePath, sdkBasePath, devCSP: 'strict', coepMode })\n    : undefined\n\n  return {\n    name: 'tatchi:dev',\n    apply: 'serve',\n    enforce: 'pre',\n    configureServer(server) {\n      // Always add WASM MIME + SDK server\n      sdkPlugin.configureServer?.(server)\n      wasmMimePlugin.configureServer?.(server)\n      if (headersPlugin) headersPlugin.configureServer?.(server)\n\n      // Mode-specific wallet service route\n      if (mode === 'self-contained' || mode === 'wallet-only') {\n        walletPlugin.configureServer?.(server)\n      }\n    },\n  }\n}\n\n// === Build-time helper: emit Cloudflare Pages/Netlify _headers ===\n// This plugin writes a _headers file into Vite's outDir with COOP and optional COEP and a\n// Permissions-Policy delegating WebAuthn to the configured wallet origin.\n// It is a no-op if a _headers file already exists (to avoid overriding app settings).\n/**\n * Build-time plugin: writes a Cloudflare Pages/Netlify-compatible `_headers` file into Vite's `outDir`.\n * Adds COOP + Permissions-Policy and optional COEP/CORP (configurable via coepMode) delegating WebAuthn to the configured wallet origin.\n * Where it runs: build for either the app or a static wallet host (not used in dev).\n * Notes: no-ops if `_headers` already exists in `outDir` (to avoid overriding platform config).\n */\nexport function tatchiBuildHeaders(opts: { walletOrigin?: string, cors?: { accessControlAllowOrigin?: string }, coepMode?: 'strict' | 'off' } = {}): VitePlugin {\n  const walletOriginRaw = opts.walletOrigin ?? process.env.VITE_WALLET_ORIGIN\n  const walletOrigin = walletOriginRaw?.trim()\n  const walletServicePath = toBasePath(process.env.VITE_WALLET_SERVICE_PATH, '/wallet-service')\n  const sdkBasePath = toBasePath(process.env.VITE_SDK_BASE_PATH, '/sdk')\n  const coepMode = resolveCoepMode(opts.coepMode)\n\n  // Build headers via shared helpers to avoid drift between frameworks\n  const permissionsPolicy = buildPermissionsPolicy(walletOrigin)\n  const walletCsp = buildWalletCsp({ mode: 'strict' })\n\n  let outDir = 'dist'\n\n  // We intentionally return a broader shape than VitePlugin; cast at the end\n  const plugin = {\n    name: 'tatchi:build-headers',\n    apply: 'build' as const,\n    enforce: 'post' as const,\n    // Capture the resolved outDir\n    configResolved(config: any) {\n      outDir = (config?.build?.outDir as string) || outDir\n    },\n    generateBundle() {\n      try {\n        const hdrPath = path.join(outDir, '_headers')\n        if (fs.existsSync(hdrPath)) {\n          // Do not override existing headers; leave a note in build logs\n          console.warn('[tatchi] _headers already exists in outDir; skipping auto-emission')\n        } else {\n          // Strict CSP is emitted only for wallet HTML routes; not for app pages.\n          const contentLines: string[] = [\n            '/*',\n            '  Cross-Origin-Opener-Policy: same-origin',\n            ...(coepMode === 'off'\n              ? []\n              : [\n                  '  Cross-Origin-Embedder-Policy: require-corp',\n                  '  Cross-Origin-Resource-Policy: cross-origin',\n                ]),\n            `  Permissions-Policy: ${permissionsPolicy}`,\n            '',\n            `${walletServicePath}`,\n            '  Cross-Origin-Opener-Policy: unsafe-none',\n            // Always allow COEP=require-corp apps to embed wallet HTML, even when\n            // the wallet host itself is not using COEP.\n            '  Cross-Origin-Resource-Policy: cross-origin',\n            `  Permissions-Policy: ${permissionsPolicy}`,\n            `  Content-Security-Policy: ${walletCsp}`,\n            `${walletServicePath}/`,\n            '  Cross-Origin-Opener-Policy: unsafe-none',\n            '  Cross-Origin-Resource-Policy: cross-origin',\n            `  Permissions-Policy: ${permissionsPolicy}`,\n            `  Content-Security-Policy: ${walletCsp}`,\n            '/export-viewer',\n            '  Cross-Origin-Opener-Policy: unsafe-none',\n            '  Cross-Origin-Resource-Policy: cross-origin',\n            `  Permissions-Policy: ${permissionsPolicy}`,\n            '/export-viewer/',\n            '  Cross-Origin-Opener-Policy: unsafe-none',\n            '  Cross-Origin-Resource-Policy: cross-origin',\n            `  Permissions-Policy: ${permissionsPolicy}`,\n            // Offline export cache policy (no-cache for HTML/SW; immutable for other assets)\n            '/offline-export',\n            '  Cache-Control: no-cache',\n            '/offline-export/',\n            '  Cache-Control: no-cache',\n            '/offline-export/index.html',\n            '  Cache-Control: no-cache',\n            '/offline-export/sw.js',\n            '  Cache-Control: no-cache',\n            '/offline-export/precache.manifest.json',\n            '  Cache-Control: no-cache',\n            '/offline-export/manifest.webmanifest',\n            '  Cache-Control: no-cache',\n            '/offline-export/offline-export-app.js',\n            '  Cache-Control: no-cache',\n            '/offline-export/*',\n            '  Cache-Control: public, max-age=31536000, immutable',\n          ]\n          // Optional: emit CORS headers when explicitly configured via plugin option.\n          // Prefer a single source of truth (platform or plugin), not both.\n          const configuredAcaOrigin = (opts.cors && typeof opts.cors.accessControlAllowOrigin === 'string'\n            ? opts.cors.accessControlAllowOrigin.trim()\n            : undefined) as string | undefined;\n          if (configuredAcaOrigin) {\n            contentLines.push(\n              `${sdkBasePath}/*`,\n              `  Access-Control-Allow-Origin: ${configuredAcaOrigin}`,\n            )\n          }\n          const content = contentLines.join('\\n') + '\\n'\n          fs.mkdirSync(outDir, { recursive: true })\n          fs.writeFileSync(hdrPath, content, 'utf-8')\n          console.log('[tatchi] emitted _headers with COOP' + (coepMode === 'off' ? '' : '/COEP/CORP') + ' + Permissions-Policy' + (configuredAcaOrigin ? ' + CORS' : ''))\n        }\n\n        const sdkDir = path.join(outDir, sdkBasePath.replace(/^\\//, ''))\n        try { fs.mkdirSync(sdkDir, { recursive: true }) } catch {}\n        const shimPath = path.join(sdkDir, 'wallet-shims.js')\n        if (!fs.existsSync(shimPath)) {\n          fs.writeFileSync(shimPath, WALLET_SHIM_SOURCE, 'utf-8')\n        }\n        const cssPath = path.join(sdkDir, 'wallet-service.css')\n        if (!fs.existsSync(cssPath)) {\n          fs.writeFileSync(cssPath, WALLET_SURFACE_CSS, 'utf-8')\n        }\n\n        // Emit minimal wallet-service/index.html if the app hasn't provided one\n        const walletRel = walletServicePath.replace(/^\\//, '')\n        const wsDir = path.join(outDir, walletRel)\n        const wsHtml = path.join(wsDir, 'index.html')\n        if (!fs.existsSync(wsHtml)) {\n          fs.mkdirSync(wsDir, { recursive: true })\n          fs.writeFileSync(wsHtml, buildWalletServiceHtml(sdkBasePath), 'utf-8')\n          console.log(`[tatchi] emitted ${path.posix.join('/', walletRel, 'index.html')} (minimal wallet service)`)\n        }\n\n        // Emit minimal export viewer HTML for production\n        const evDir = path.join(outDir, 'export-viewer')\n        const evHtml = path.join(evDir, 'index.html')\n        if (!fs.existsSync(evHtml)) {\n          fs.mkdirSync(evDir, { recursive: true })\n          fs.writeFileSync(evHtml, buildExportViewerHtml(sdkBasePath), 'utf-8')\n          console.log('[tatchi] emitted /export-viewer/index.html (minimal export viewer)')\n        }\n\n        // Emit offline-export assets (SW, workers, app, HTML, manifest, precache) via helper\n        try {\n          const sdkDistRoot = resolveSdkDistRoot()\n          emitOfflineExportAssets({ outDir, sdkBasePath, sdkDistRoot })\n        } catch (e) {\n          console.warn('[tatchi] failed to emit offline-export assets:', e)\n        }\n      } catch (e) {\n        console.warn('[tatchi] failed to emit _headers:', e)\n      }\n    },\n  }\n\n  return plugin as unknown as VitePlugin\n}\n\n// Small test helpers to keep unit tests decoupled from Vite server implementation\nexport function computeDevPermissionsPolicy(walletOrigin?: string): string {\n  return buildPermissionsPolicy(walletOrigin)\n}\n\nexport function computeDevWalletCsp(mode: 'strict' | 'compatible' = 'strict'): string {\n  return buildWalletCsp({ mode })\n}\n\nexport function tatchiWalletServer(options: Omit<Web3AuthnDevOptions, 'mode'> = {}): VitePlugin {\n  return tatchiDevServer({ ...options, mode: 'wallet-only' })\n}\n\nexport function tatchiAppServer(options: Omit<Web3AuthnDevOptions, 'mode'> = {}): VitePlugin {\n  return tatchiDevServer({ ...options, mode: 'front-only' })\n}\n\n/**\n * Convenience wrapper: app origin helper that combines dev-time headers with optional\n * build-time headers emission for static hosts.\n *\n * Dev-time (serve): applies COOP + Permissions-Policy, plus optional COEP/CORP, via tatchiAppServer.\n * Build-time (build): when `emitHeaders` is true, writes a Cloudflare Pages/Netlify\n * `_headers` file into Vite's `outDir` via tatchiBuildHeaders, scoping strict CSP to\n * wallet HTML routes only.\n *   - Emits: `COOP: same-origin`, `Permissions-Policy: …`, and (when `coepMode === 'strict'`) `COEP: require-corp` + `CORP: cross-origin`.\n *   - No-op if a `_headers` file already exists in `outDir` (avoids clobbering CI/platform rules).\n *\n * Notes\n * - Keeps production header emission opt-in to avoid surprising overrides when apps\n *   already manage headers via custom servers or platform rules.\n * - Returns a plugin array for ergonomics; Vite accepts arrays in the `plugins` list.\n */\nexport function tatchiApp(options: Omit<Web3AuthnDevOptions, 'mode'> & { emitHeaders?: boolean } = {}): any[] /* Vite Plugin[] */ {\n  const { emitHeaders, ...devOpts } = options\n  const walletOrigin = (devOpts.walletOrigin ?? process.env.VITE_WALLET_ORIGIN)?.trim()\n  const app = tatchiAppServer(devOpts)\n  // Build-time emission is opt-in and will no-op if `_headers` already exists.\n  const hdr = emitHeaders ? tatchiBuildHeaders({ walletOrigin, coepMode: devOpts.coepMode }) : undefined\n  return [app, hdr].filter(Boolean) as any[]\n}\n\n/**\n * Convenience wrapper: wallet origin helper that combines dev-time wallet server\n * with optional build-time headers emission for static hosts.\n *\n * Dev-time (serve): serves `/wallet-service` and `/sdk/*` plus headers via tatchiWalletServer.\n * Build-time (build): when `emitHeaders` is true, writes a Cloudflare Pages/Netlify\n * `_headers` file into Vite's `outDir` via tatchiBuildHeaders, scoping strict CSP to\n * wallet HTML routes only.\n *   - Emits: `COOP: same-origin` (wallet HTML routes use `unsafe-none`), `Permissions-Policy: …`, and (when `coepMode === 'strict'`) `COEP: require-corp` + `CORP: cross-origin`.\n *   - No-op if a `_headers` file already exists in `outDir` (avoids clobbering CI/platform rules).\n *\n * Notes\n * - Keeps production header emission opt-in to avoid overriding platform/server configs.\n * - Returns a plugin array for ergonomics; Vite accepts arrays in the `plugins` list.\n */\nexport function tatchiWallet(options: Omit<Web3AuthnDevOptions, 'mode'> & { emitHeaders?: boolean } = {}): any[] /* Vite Plugin[] */ {\n  const { emitHeaders, ...devOpts } = options\n  const walletOrigin = (devOpts.walletOrigin ?? process.env.VITE_WALLET_ORIGIN)?.trim()\n  const wallet = tatchiWalletServer(devOpts)\n  // Build-time emission is opt-in and will no-op if `_headers` already exists.\n  const hdr = emitHeaders ? tatchiBuildHeaders({ walletOrigin, coepMode: devOpts.coepMode }) : undefined\n  return [wallet, hdr].filter(Boolean) as any[]\n}\n"],"mappings":";;;;;;;;;;;;;;;AAwFA,SAAS,QAAQ,GAAG,YAA0C;AAC5D,MAAK,MAAM,QAAQ,WACjB,KAAI;EACF,MAAM,OAAOA,QAAG,SAAS;AACzB,MAAI,KAAK,SAAU,QAAO;SACpB;AAEV,QAAO;;AAMT,MAAM,qBAAqB;AAC3B,MAAM,qBAAqB;CACzB;CACA;CACA;CAEA;CACA;CAEA;CACA;CACA;CAIA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;EACA,KAAK;;;;;;;AAQP,SAAgB,eAAe,OAAwB,IAAgB;CACrE,MAAM,iBAAiBC,8BAAW,KAAK,aAAa;CACpD,MAAM,cAAcC,wCAAmB,KAAK;CAC5C,MAAM,oBAAoB,KAAK,sBAAsB;CACrD,MAAM,WAAWC,qCAAgB,KAAK;CACtC,MAAM,cAAcC,uCAAuB;CAG3C,MAAM,QAAQ,MAAM,KAAK,IAAI,IAAI,CAAC,gBAAgBH,8BAAW,WAC1D,MAAM,GAAG,MAAM,EAAE,SAAS,EAAE;AAG/B,QAAO;EACL,MAAM;EACN,OAAO;EACP,SAAS;EACT,gBAAgB,QAAQ;AAEtB,6CAA0B,QAAQ;IAChC;IACA,aAAa;IACb;IACA,kBAAkB;IAClB;;AAGF,UAAO,YAAY,KAAK,KAAU,KAAU,SAAc;IACxD,MAAM,OAAO,IAAI,OAAO,IAAI,MAAM,KAAK;AACvC,QAAI,QAAQ,iBAAiB,oBAAoB;AAC/C,SAAI,aAAa;AACjB,SAAI,UAAU,gBAAgB;AAE9B,gDAAsB,KAAK;AAE3B,8CAAoB,KAAK,KAAK,EAAE,iBAAiB;AACjD,SAAI,IAAI;AACR;;AAEF,QAAI,QAAQ,iBAAiB,uBAAuB;AAClD,SAAI,aAAa;AACjB,SAAI,UAAU,gBAAgB;AAE9B,gDAAsB,KAAK;AAE3B,8CAAoB,KAAK,KAAK,EAAE,iBAAiB;AACjD,SAAI,IAAI;AACR;;AAEF;;AAIF,OAAI,kBACF,QAAO,YAAY,IAAI,gBAAgB,KAAU,QAAa;AAC5D,QAAI,UAAU,gBAAgB;AAC9B,QAAI,IAAI;;AAKZ,UAAO,YAAY,KAAK,KAAU,KAAU,SAAc;AACxD,QAAI,CAAC,IAAI,IAAK,QAAO;IACrB,MAAM,MAAM,IAAI,IAAI,MAAM,KAAK;IAE/B,MAAM,YAAY,MAAM,MAAM,MAAM,IAAI,WAAW,IAAI;AACvD,QAAI,CAAC,UAAW,QAAO;IAEvB,MAAM,MAAM,IAAI,OAAO,YAAY,KAAK;IAExC,MAAM,YAAY,QAChBI,UAAK,KAAK,aAAa,OAAO,OAAO,MACrCA,UAAK,KAAK,aAAa,MACvBA,UAAK,KAAK,aAAa,OAAO;AAGhC,QAAI,CAAC,WAAW;AACd,SAAI,aAAa;AACjB,SAAI,UAAU,gBAAgB;AAC9B,SAAI,IAAI,KAAK,UAAU;MAAE,OAAO;MAAuB,MAAM;;AAC7D;;AAGF,wCAAe,KAAK;AAEpB,+CAAsB,KAAK;AAE3B,6CAAoB,KAAK,KAAK,EAAE,iBAAiB;IACjD,MAAM,SAASL,QAAG,iBAAiB;AACnC,WAAO,GAAG,eAAe;AACzB,WAAO,KAAK;;;;;;;;;AAUpB,SAAgB,oBAAoB,OAA6B,IAAgB;CAC/E,MAAM,oBAAoBC,8BAAW,KAAK,mBAAmB;CAC7D,MAAM,cAAcA,8BAAW,KAAK,aAAa;CACjD,MAAM,WAAWE,qCAAgB,KAAK;CAEtC,MAAM,OAAOG,4CAAuB;CACpC,MAAM,cAAcF,uCAAuB;CAC3C,MAAM,cAAcF;AAEpB,QAAO;EACL,MAAM;EACN,OAAO;EACP,SAAS;EACT,gBAAgB,QAAQ;AACtB,UAAO,YAAY,KAAK,KAAU,KAAU,SAAc;AACxD,QAAI,CAAC,IAAI,IAAK,QAAO;IACrB,MAAM,MAAM,IAAI,IAAI,MAAM,KAAK;IAC/B,MAAM,gBAAgB,QAAQ,qBAAqB,QAAQ,GAAG,kBAAkB,MAAM,QAAQ,GAAG,kBAAkB;AACnH,QAAI,eAAe;AACjB,SAAI,aAAa;AACjB,SAAI,UAAU,gBAAgB;AAK9B,SAAI,UAAU,gCAAgC;AAC9C,gDAAsB,KAAK;AAC3B,SAAI,IAAI;AACR;;AAEF;;AAIF,6CAA0B,QAAQ;IAChC;IACA;IACA;IACA,kBAAkB;IAClB;;;;;;;;;AAUR,SAAgB,iBAA6B;AAC3C,QAAO;EACL,MAAM;EACN,OAAO;EACP,SAAS;EACT,gBAAgB,QAAQ;AACtB,UAAO,YAAY,KAAK,KAAU,KAAU,SAAc;AACxD,QAAI,CAAC,IAAI,IAAK,QAAO;IACrB,MAAM,MAAM,IAAI,IAAI,MAAM,KAAK;AAC/B,QAAI,IAAI,SAAS,SACf,KAAI,UAAU,gBAAgB;AAEhC;;;;;;;;;;;;AAaR,SAAgB,cAAc,OAA0B,IAAgB;CACtE,MAAM,kBAAkB,KAAK,gBAAgB,QAAQ,IAAI;CACzD,MAAM,eAAe,iBAAiB;CACtC,MAAM,oBAAoBD,8BAAW,KAAK,qBAAqB,QAAQ,IAAI,0BAA0B;CACrG,MAAM,cAAcA,8BAAW,KAAK,eAAe,QAAQ,IAAI,oBAAoB;CACnF,MAAM,aAAc,KAAK,UAAW,QAAQ,IAAI;CAChD,MAAM,WAAWE,qCAAgB,KAAK;CAGtC,MAAM,oBAAoBI,uCAAuB;CAIjD,MAAM,iBAAiB,QAAQ,IAAI,6BAA6B,IAAI,WAAW;CAC/E,MAAM,aAAa,QAAQ,IAAI,mBAAmB,uBAAuB,WAAW;CACpF,MAAM,cAAc,QAAQ,IAAI,qBAAqB,iCAAiC,WAAW;AAGjG,QAAO;EACL,MAAM;EACN,OAAO;EACP,SAAS;EACT,gBAAgB,QAAQ;AAEtB,WAAQ,IAAI,4BAA4B;IACtC;IACA;IACA;IACA,eAAe,iBAAiB;IAChC;;AAGF,UAAO,YAAY,KAAK,KAAU,KAAU,SAAc;IACxD,MAAM,OAAO,IAAI,OAAO,IAAI,MAAM,KAAK,MAAM;IAC7C,MAAM,gBAAgB,QAAQ,qBAAqB,QAAQ,GAAG,kBAAkB,MAAM,QAAQ,GAAG,kBAAkB;AACnH,QAAI,UAAU,8BAA8B,gBAAgB,gBAAgB;AAC5E,QAAI,aAAa,OAAO;AACtB,SAAI,UAAU,gCAAgC;AAC9C,SAAI,UAAU,gCAAgC;;AAEhD,QAAI,UAAU,sBAAsB;AAEpC,QAAI,iBAAiB,YAAY;KAC/B,MAAM,OAAO,eAAe,WAAW,WAAW;KAClD,MAAM,YAAYC,+BAAe,EAAE;AACnC,SAAI,UAAU,2BAA2B;;AAG3C,2CAAkB,KAAK;IAGvB,MAAM,cAAc,QAAQ,2BAA2B,QAAQ;AAC/D,QAAI,aAAa;AAGf,SAAI,eAAe;AAChB,OAAC,YAAY;AACZ,WAAI;QACF,MAAM,UAAU,MAAMC,6CAAwB;SAC5C,QAAQ;SACR,YAAY;SACZ,QAAQ;;AAEV,YAAI,aAAa;AACjB,YAAI,UAAU,gBAAgB;AAC9B,YAAI,UAAU,iBAAiB;AAC/B,YAAI,IAAI,KAAK,UAAU,EAAE;gBAClB,GAAG;AACV,gBAAQ,KAAK,sCAAsC;AACnD,YAAI,aAAa;AACjB,YAAI,UAAU,gBAAgB;AAC9B,YAAI,UAAU,iBAAiB;AAC/B,YAAI,IAAI,KAAK,UAAU,EAAE,SAAS;;;AAGtC;;AAGF,SAAI,aAAa;AACjB,SAAI,UAAU,gBAAgB;AAC9B,SAAI,UAAU,iBAAiB;AAC/B,SAAI,IAAI,KAAK,UAAU,EAAE,SAAS;AAClC;;AAGF,QAAI,IAAI,WAAW,GAAG,YAAY,KAAK;AAErC,gDAAsB,KAAK;KAE3B,MAAM,QAAQC,yCAAoB,KAAK,KAAK;MAAE,wBAAwB;MAAM,iBAAiB;;AAC7F,SAAI,MAAO;;AAEb;;;;;;;;;;;;;;;;AAiBR,SAAS,gBAAgB,UAA+B,IAAgB;CACtE,MAAMC,OAA8C,QAAQ,QAAQ;CACpE,MAAM,cAAcV,8BAAW,QAAQ,eAAe,QAAQ,IAAI,oBAAoB;CACtF,MAAM,oBAAoBA,8BAAW,QAAQ,qBAAqB,QAAQ,IAAI,0BAA0B;CACxG,MAAM,gBAAgB,QAAQ,gBAAgB,QAAQ,IAAI,qBAAqB;CAC/E,MAAM,gBAAgB,QAAQ,kBAAkB;CAChD,MAAM,oBAAoB,QAAQ,sBAAsB;CACxD,MAAM,cAAcC,wCAAmB,QAAQ;CAC/C,MAAM,WAAWC,qCAAgB,QAAQ;CAGzC,MAAM,YAAY,eAAe;EAAE;EAAa;EAAa;EAAmB;;CAChF,MAAM,eAAe,oBAAoB;EAAE;EAAmB;EAAa;;CAC3E,MAAM,iBAAiB;CAGvB,MAAM,gBAAgB,gBAClB,cAAc;EAAE;EAAc;EAAmB;EAAa,QAAQ;EAAU;MAChF;AAEJ,QAAO;EACL,MAAM;EACN,OAAO;EACP,SAAS;EACT,gBAAgB,QAAQ;AAEtB,aAAU,kBAAkB;AAC5B,kBAAe,kBAAkB;AACjC,OAAI,cAAe,eAAc,kBAAkB;AAGnD,OAAI,SAAS,oBAAoB,SAAS,cACxC,cAAa,kBAAkB;;;;;;;;;;AAgBvC,SAAgB,mBAAmB,OAA6G,IAAgB;CAC9J,MAAM,kBAAkB,KAAK,gBAAgB,QAAQ,IAAI;CACzD,MAAM,eAAe,iBAAiB;CACtC,MAAM,oBAAoBF,8BAAW,QAAQ,IAAI,0BAA0B;CAC3E,MAAM,cAAcA,8BAAW,QAAQ,IAAI,oBAAoB;CAC/D,MAAM,WAAWE,qCAAgB,KAAK;CAGtC,MAAM,oBAAoBI,uCAAuB;CACjD,MAAM,YAAYC,+BAAe,EAAE,MAAM;CAEzC,IAAI,SAAS;CAGb,MAAM,SAAS;EACb,MAAM;EACN,OAAO;EACP,SAAS;EAET,eAAe,QAAa;AAC1B,YAAU,QAAQ,OAAO,UAAqB;;EAEhD,iBAAiB;AACf,OAAI;IACF,MAAM,UAAUH,UAAK,KAAK,QAAQ;AAClC,QAAIL,QAAG,WAAW,SAEhB,SAAQ,KAAK;SACR;KAEL,MAAMY,eAAyB;MAC7B;MACA;MACA,GAAI,aAAa,QACb,KACA,CACE,gDACA;MAEN,yBAAyB;MACzB;MACA,GAAG;MACH;MAGA;MACA,yBAAyB;MACzB,8BAA8B;MAC9B,GAAG,kBAAkB;MACrB;MACA;MACA,yBAAyB;MACzB,8BAA8B;MAC9B;MACA;MACA;MACA,yBAAyB;MACzB;MACA;MACA;MACA,yBAAyB;MAEzB;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;;KAIF,MAAM,sBAAuB,KAAK,QAAQ,OAAO,KAAK,KAAK,6BAA6B,WACpF,KAAK,KAAK,yBAAyB,SACnC;AACJ,SAAI,oBACF,cAAa,KACX,GAAG,YAAY,KACf,kCAAkC;KAGtC,MAAM,UAAU,aAAa,KAAK,QAAQ;AAC1C,aAAG,UAAU,QAAQ,EAAE,WAAW;AAClC,aAAG,cAAc,SAAS,SAAS;AACnC,aAAQ,IAAI,yCAAyC,aAAa,QAAQ,KAAK,gBAAgB,2BAA2B,sBAAsB,YAAY;;IAG9J,MAAM,SAASP,UAAK,KAAK,QAAQ,YAAY,QAAQ,OAAO;AAC5D,QAAI;AAAE,aAAG,UAAU,QAAQ,EAAE,WAAW;YAAgB;IACxD,MAAM,WAAWA,UAAK,KAAK,QAAQ;AACnC,QAAI,CAACL,QAAG,WAAW,UACjB,SAAG,cAAc,UAAU,oBAAoB;IAEjD,MAAM,UAAUK,UAAK,KAAK,QAAQ;AAClC,QAAI,CAACL,QAAG,WAAW,SACjB,SAAG,cAAc,SAAS,oBAAoB;IAIhD,MAAM,YAAY,kBAAkB,QAAQ,OAAO;IACnD,MAAM,QAAQK,UAAK,KAAK,QAAQ;IAChC,MAAM,SAASA,UAAK,KAAK,OAAO;AAChC,QAAI,CAACL,QAAG,WAAW,SAAS;AAC1B,aAAG,UAAU,OAAO,EAAE,WAAW;AACjC,aAAG,cAAc,QAAQM,4CAAuB,cAAc;AAC9D,aAAQ,IAAI,oBAAoBD,UAAK,MAAM,KAAK,KAAK,WAAW,cAAc;;IAIhF,MAAM,QAAQA,UAAK,KAAK,QAAQ;IAChC,MAAM,SAASA,UAAK,KAAK,OAAO;AAChC,QAAI,CAACL,QAAG,WAAW,SAAS;AAC1B,aAAG,UAAU,OAAO,EAAE,WAAW;AACjC,aAAG,cAAc,QAAQa,2CAAsB,cAAc;AAC7D,aAAQ,IAAI;;AAId,QAAI;KACF,MAAM,cAAcX;AACpB,6CAAwB;MAAE;MAAQ;MAAa;;aACxC,GAAG;AACV,aAAQ,KAAK,kDAAkD;;YAE1D,GAAG;AACV,YAAQ,KAAK,qCAAqC;;;;AAKxD,QAAO;;AAIT,SAAgB,4BAA4B,cAA+B;AACzE,QAAOK,uCAAuB;;AAGhC,SAAgB,oBAAoB,OAAgC,UAAkB;AACpF,QAAOC,+BAAe,EAAE;;AAG1B,SAAgB,mBAAmB,UAA6C,IAAgB;AAC9F,QAAO,gBAAgB;EAAE,GAAG;EAAS,MAAM;;;AAG7C,SAAgB,gBAAgB,UAA6C,IAAgB;AAC3F,QAAO,gBAAgB;EAAE,GAAG;EAAS,MAAM;;;;;;;;;;;;;;;;;;;AAmB7C,SAAgB,UAAU,UAAyE,IAA+B;CAChI,MAAM,EAAE,YAAa,GAAG,YAAY;CACpC,MAAM,gBAAgB,QAAQ,gBAAgB,QAAQ,IAAI,qBAAqB;CAC/E,MAAM,MAAM,gBAAgB;CAE5B,MAAM,MAAM,cAAc,mBAAmB;EAAE;EAAc,UAAU,QAAQ;MAAc;AAC7F,QAAO,CAAC,KAAK,KAAK,OAAO;;;;;;;;;;;;;;;;;AAkB3B,SAAgB,aAAa,UAAyE,IAA+B;CACnI,MAAM,EAAE,YAAa,GAAG,YAAY;CACpC,MAAM,gBAAgB,QAAQ,gBAAgB,QAAQ,IAAI,qBAAqB;CAC/E,MAAM,SAAS,mBAAmB;CAElC,MAAM,MAAM,cAAc,mBAAmB;EAAE;EAAc,UAAU,QAAQ;MAAc;AAC7F,QAAO,CAAC,QAAQ,KAAK,OAAO"}

package/dist/cjs/react/_virtual/rolldown_runtime.js

@@ -5,15 +5,6 @@ var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __esm = (fn, res) => function() {
-	return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
-};
-var __export = (target, all) => {
-	for (var name in all) __defProp(target, name, {
-		get: all[name],
-		enumerable: true
-	});
-};
 var __copyProps = (to, from, except, desc) => {
 	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
 		key = keys[i];
@@ -28,11 +19,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	value: mod,
 	enumerable: true
 }) : target, mod));
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
 //#endregion
 
-exports.__esm = __esm;
-exports.__export = __export;
-exports.__toCommonJS = __toCommonJS;
 exports.__toESM = __toESM;

package/dist/cjs/react/build-paths.js

@@ -0,0 +1,54 @@
+
+//#region build-paths.ts
+const BUILD_PATHS = {
+	BUILD: {
+		ROOT: "dist",
+		WORKERS: "dist/workers",
+		ESM: "dist/esm",
+		CJS: "dist/cjs",
+		TYPES: "dist/types"
+	},
+	SOURCE: {
+		ROOT: "src",
+		CORE: "src/core",
+		WASM_SIGNER: "src/wasm_signer_worker",
+		WASM_VRF: "src/wasm_vrf_worker",
+		CRITICAL_DIRS: [
+			"src/core",
+			"src/wasm_signer_worker",
+			"src/wasm_vrf_worker"
+		]
+	},
+	FRONTEND: {
+		ROOT: "../examples/vite/public",
+		SDK: "../examples/vite/public/sdk",
+		WORKERS: "../examples/vite/public/sdk/workers"
+	},
+	RUNTIME: {
+		SDK_BASE: "/sdk",
+		WORKERS_BASE: "/sdk/workers",
+		VRF_WORKER: "/sdk/workers/web3authn-vrf.worker.js",
+		SIGNER_WORKER: "/sdk/workers/web3authn-signer.worker.js"
+	},
+	WORKERS: {
+		VRF: "web3authn-vrf.worker.js",
+		SIGNER: "web3authn-signer.worker.js",
+		OFFLINE_SW: "offline-export-sw.js",
+		WASM_VRF_JS: "wasm_vrf_worker.js",
+		WASM_VRF_WASM: "wasm_vrf_worker_bg.wasm",
+		WASM_SIGNER_JS: "wasm_signer_worker.js",
+		WASM_SIGNER_WASM: "wasm_signer_worker_bg.wasm"
+	},
+	TEST_WORKERS: {
+		VRF: "/sdk/workers/web3authn-vrf.worker.js",
+		SIGNER: "/sdk/workers/web3authn-signer.worker.js",
+		WASM_VRF_JS: "/sdk/workers/wasm_vrf_worker.js",
+		WASM_VRF_WASM: "/sdk/workers/wasm_vrf_worker_bg.wasm",
+		WASM_SIGNER_JS: "/sdk/workers/wasm_signer_worker.js",
+		WASM_SIGNER_WASM: "/sdk/workers/wasm_signer_worker_bg.wasm"
+	}
+};
+
+//#endregion
+exports.BUILD_PATHS = BUILD_PATHS;
+//# sourceMappingURL=build-paths.js.map

package/dist/cjs/react/build-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-paths.js","names":[],"sources":["../../../build-paths.ts"],"sourcesContent":["// Centralized build configuration\n// This file defines all paths used across the build system\n\nexport const BUILD_PATHS = {\n  // Build output directories\n  BUILD: {\n    ROOT: 'dist',\n    WORKERS: 'dist/workers',\n    ESM: 'dist/esm',\n    CJS: 'dist/cjs',\n    TYPES: 'dist/types'\n  },\n\n  // Source directories\n  SOURCE: {\n    ROOT: 'src',\n    CORE: 'src/core',\n    WASM_SIGNER: 'src/wasm_signer_worker',\n    WASM_VRF: 'src/wasm_vrf_worker',\n    CRITICAL_DIRS: [\n      'src/core',\n      'src/wasm_signer_worker',\n      'src/wasm_vrf_worker'\n    ]\n  },\n\n  // Frontend deployment paths\n  FRONTEND: {\n    ROOT: '../examples/vite/public',\n    SDK: '../examples/vite/public/sdk',\n    WORKERS: '../examples/vite/public/sdk/workers'\n  },\n\n  // Runtime paths (used by workers and tests)\n  RUNTIME: {\n    SDK_BASE: '/sdk',\n    WORKERS_BASE: '/sdk/workers',\n    VRF_WORKER: '/sdk/workers/web3authn-vrf.worker.js',\n    SIGNER_WORKER: '/sdk/workers/web3authn-signer.worker.js'\n  },\n\n  // Worker file names\n  WORKERS: {\n    VRF: 'web3authn-vrf.worker.js',\n    SIGNER: 'web3authn-signer.worker.js',\n    OFFLINE_SW: 'offline-export-sw.js',\n    WASM_VRF_JS: 'wasm_vrf_worker.js',\n    WASM_VRF_WASM: 'wasm_vrf_worker_bg.wasm',\n    WASM_SIGNER_JS: 'wasm_signer_worker.js',\n    WASM_SIGNER_WASM: 'wasm_signer_worker_bg.wasm'\n  },\n\n  // Test worker file paths (for test files)\n  TEST_WORKERS: {\n    VRF: '/sdk/workers/web3authn-vrf.worker.js',\n    SIGNER: '/sdk/workers/web3authn-signer.worker.js',\n    WASM_VRF_JS: '/sdk/workers/wasm_vrf_worker.js',\n    WASM_VRF_WASM: '/sdk/workers/wasm_vrf_worker_bg.wasm',\n    WASM_SIGNER_JS: '/sdk/workers/wasm_signer_worker.js',\n    WASM_SIGNER_WASM: '/sdk/workers/wasm_signer_worker_bg.wasm'\n  }\n} as const;\n\n// Helper functions\nexport const getWorkerPath = (workerName: string): string => `${BUILD_PATHS.BUILD.WORKERS}/${workerName}`;\nexport const getRuntimeWorkerPath = (workerName: string): string => `${BUILD_PATHS.RUNTIME.WORKERS_BASE}/${workerName}`;\nexport const getFrontendWorkerPath = (workerName: string): string => `${BUILD_PATHS.FRONTEND.WORKERS}/${workerName}`;\n\n// Default export for easier importing\nexport default BUILD_PATHS;\n"],"mappings":";;AAGA,MAAa,cAAc;CAEzB,OAAO;EACL,MAAM;EACN,SAAS;EACT,KAAK;EACL,KAAK;EACL,OAAO;;CAIT,QAAQ;EACN,MAAM;EACN,MAAM;EACN,aAAa;EACb,UAAU;EACV,eAAe;GACb;GACA;GACA;;;CAKJ,UAAU;EACR,MAAM;EACN,KAAK;EACL,SAAS;;CAIX,SAAS;EACP,UAAU;EACV,cAAc;EACd,YAAY;EACZ,eAAe;;CAIjB,SAAS;EACP,KAAK;EACL,QAAQ;EACR,YAAY;EACZ,aAAa;EACb,eAAe;EACf,gBAAgB;EAChB,kBAAkB;;CAIpB,cAAc;EACZ,KAAK;EACL,QAAQ;EACR,aAAa;EACb,eAAe;EACf,gBAAgB;EAChB,kBAAkB"}