@tatchi-xyz/sdk 0.21.0 → 0.31.0

package/dist/esm/plugins/vite.js.map

@@ -1 +1 @@
-{"version":3,"file":"vite.js","names":["mode: Required<Web3AuthnDevOptions>['mode']","contentLines: string[]"],"sources":["../../../src/plugins/vite.ts"],"sourcesContent":["// Minimal Vite dev plugin(s) to support Passkey Manager modes.\n// See docs/passkey-manager-modes.md (Vite Plugin section).\n//\n// What these plugins do:\n// - Serve SDK assets under a base path, expose a wallet service route,\n// - Add dev headers (COOP + Permissions-Policy, optional COEP/CORP), and enforce WASM MIME.\n// - IMPORTANT: Strict CSP is scoped only to wallet HTML routes (/wallet-service, /export-viewer),\n//   not to the host app pages. App routes remain free to use inline styles/scripts.\n\nimport * as fs from 'node:fs'\nimport * as path from 'node:path'\nimport { buildPermissionsPolicy, buildWalletCsp } from './headers'\nimport {\n  addPreconnectLink,\n  buildWalletServiceHtml,\n  buildExportViewerHtml,\n  applyCoepCorpIfNeeded,\n  echoCorsFromRequest,\n  fetchRorOriginsFromNear,\n  normalizeBase,\n  resolveCoepMode,\n  resolveSdkDistRoot,\n} from './plugin-utils'\nimport { addOfflineExportDevRoutes, buildOfflineExportHtml, emitOfflineExportAssets } from './offline'\nimport { setContentType } from './plugin-utils'\n\nexport type VitePlugin = {\n  name: string\n  apply?: 'serve' | 'build'\n  enforce?: 'pre' | 'post'\n  configureServer?: (server: any) => void | Promise<void>\n}\nexport type ViteLikePlugin = VitePlugin\n\nexport type Web3AuthnDevOptions = {\n  mode?: 'self-contained' | 'front-only' | 'wallet-only'\n  sdkDistRoot?: string\n  sdkBasePath?: string\n  walletServicePath?: string\n  walletOrigin?: string\n  setDevHeaders?: boolean\n  enableDebugRoutes?: boolean\n  /**\n   * Controls Cross-Origin-Embedder-Policy (COEP) behavior in dev.\n   * - 'off' (default): do not emit COEP/CORP on app pages.\n   * - 'strict': emit `Cross-Origin-Embedder-Policy: require-corp`\n   *   and `Cross-Origin-Resource-Policy: cross-origin` on app pages.\n   *\n   * Tip: set `VITE_COEP_MODE=strict` in tests/CI to enable isolation automatically.\n   */\n  coepMode?: 'strict' | 'off'\n}\n\nexport type ServeSdkOptions = {\n  sdkDistRoot?: string\n  sdkBasePath?: string\n  enableDebugRoutes?: boolean\n  coepMode?: 'strict' | 'off'\n}\n\nexport type WalletServiceOptions = {\n  walletServicePath?: string\n  sdkBasePath?: string\n  coepMode?: 'strict' | 'off'\n}\n\nexport type DevHeadersOptions = {\n  walletOrigin?: string\n  walletServicePath?: string\n  sdkBasePath?: string\n  /**\n   * Optional dev-time CSP for the wallet service route.\n   *  - 'strict': no inline scripts/styles (mirrors production defaults)\n   *  - 'compatible': allows inline scripts/styles (useful for debugging)\n   */\n  devCSP?: 'strict' | 'compatible'\n  /**\n   * Controls Cross-Origin-Embedder-Policy (COEP) behavior in dev.\n   * - 'off' (default): do not emit COEP/CORP headers on app pages.\n   * - 'strict': emit COEP/CORP headers on app pages.\n   */\n  coepMode?: 'strict' | 'off'\n}\n\n/**\n * Return the first candidate path that exists and is a file.\n * Helper for robust /sdk/* asset resolution on dev servers (app and wallet).\n */\nfunction tryFile(...candidates: string[]): string | undefined {\n  for (const file of candidates) {\n    try {\n      const stat = fs.statSync(file)\n      if (stat.isFile()) return file\n    } catch {}\n  }\n  return undefined\n}\n\n// RPC helpers are provided by plugin-utils to share logic across frameworks.\n\n// Shared assets emitted/served for the wallet service bootstrap.\nconst WALLET_SHIM_SOURCE = \"window.global ||= window; window.process ||= { env: {} };\\n\"\nconst WALLET_SURFACE_CSS = [\n  'html, body { background: transparent !important; margin:0; padding:0; }',\n  'html, body { color-scheme: normal; }',\n  '',\n  // Class-based surface for strict CSP setups toggled by JS\n  'html.w3a-transparent, body.w3a-transparent { background: transparent !important; margin:0; padding:0; color-scheme: normal; }',\n  '',\n  // Minimal portal styles used by confirm-ui (no animation; child components handle transitions)\n  '.w3a-portal { position: relative; z-index: 2147483647; opacity: 0; pointer-events: none; }',\n  '.w3a-portal.w3a-portal--visible { opacity: 1; pointer-events: auto; }',\n  '',\n  // Provide baseline tokens only when the document does not declare a theme.\n  // This avoids overriding :root[data-w3a-theme] values supplied by token sheet\n  // or integrator-injected themes.\n  ':root:not([data-w3a-theme]) {',\n  '  --w3a-colors-textPrimary: #f6f7f8;',\n  '  --w3a-colors-textSecondary: rgba(255,255,255,0.7);',\n  '  --w3a-colors-surface: rgba(255,255,255,0.08);',\n  '  --w3a-colors-surface2: rgba(255,255,255,0.06);',\n  '  --w3a-colors-surface3: rgba(255,255,255,0.04);',\n  '  --w3a-colors-borderPrimary: rgba(255,255,255,0.14);',\n  '  --w3a-colors-borderSecondary: rgba(255,255,255,0.1);',\n  '  --w3a-colors-colorBackground: #0b0c10;',\n  '  /* Default viewport custom properties for width/height calculations */',\n  '  --w3a-vw: 100vw;',\n  '  --w3a-vh: 100vh;',\n  '}',\n  '',\n].join('\\n')\n\n/**\n * Tatchi SDK plugin: serve SDK assets under a stable base (default: /sdk) with optional COEP/CORP (strict mode) and permissive CORS.\n * Where it runs: both the app server and the wallet-iframe server.\n * - App server: lets host pages and Lit components load SDK CSS/JS locally.\n * - Wallet server: used by /wallet-service to load wallet-iframe-host.js and related CSS/JS.\n */\nexport function tatchiServeSdk(opts: ServeSdkOptions = {}): VitePlugin {\n  const configuredBase = normalizeBase(opts.sdkBasePath, '/sdk')\n  const sdkDistRoot = resolveSdkDistRoot(opts.sdkDistRoot)\n  const enableDebugRoutes = opts.enableDebugRoutes === true\n  const coepMode = resolveCoepMode(opts.coepMode)\n  const offlineHtml = buildOfflineExportHtml(configuredBase)\n\n  // In dev we want both '/sdk' and a custom base to work.\n  const bases = Array.from(new Set([configuredBase, normalizeBase('/sdk')]))\n    .sort((a, b) => b.length - a.length)\n    // Prefer longest base match first (e.g., '/sdk/esm/react' before '/sdk')\n\n  return {\n    name: 'tatchi:serve-sdk',\n    apply: 'serve',\n    enforce: 'pre',\n    configureServer(server) {\n      // Mount Offline Export dev routes once here (includes app module + chunks)\n      addOfflineExportDevRoutes(server, {\n        sdkDistRoot,\n        sdkBasePath: configuredBase,\n        offlineHtml,\n        includeAppModule: true,\n        coepMode,\n      })\n      // Serve a tiny shim as a virtual asset to enable strict CSP (no inline scripts)\n      server.middlewares.use((req: any, res: any, next: any) => {\n        const url = (req.url || '').split('?')[0]\n        if (url === configuredBase + '/wallet-shims.js') {\n          res.statusCode = 200\n          res.setHeader('Content-Type', 'application/javascript; charset=utf-8')\n          // Align with SDK asset headers so COEP/CORP environments can import\n          applyCoepCorpIfNeeded(res, coepMode)\n          // Dev-only CORS echo (no preflight handling on this route)\n          echoCorsFromRequest(res, req, { handlePreflight: false })\n          res.end(WALLET_SHIM_SOURCE)\n          return\n        }\n        if (url === configuredBase + '/wallet-service.css') {\n          res.statusCode = 200\n          res.setHeader('Content-Type', 'text/css; charset=utf-8')\n          // Important: provide CORP for cross‑origin CSS so COEP documents can load it\n          applyCoepCorpIfNeeded(res, coepMode)\n          // Dev-only CORS echo (no preflight handling on this route)\n          echoCorsFromRequest(res, req, { handlePreflight: false })\n          res.end(WALLET_SURFACE_CSS)\n          return\n        }\n        next()\n      })\n\n      // Optional debug route to confirm resolution\n      if (enableDebugRoutes) {\n        server.middlewares.use('/__sdk-root', (req: any, res: any) => {\n          res.setHeader('Content-Type', 'text/plain; charset=utf-8')\n          res.end(sdkDistRoot)\n        })\n      }\n\n      // Serve files under any recognized base from sdkDistRoot with fallbacks\n      server.middlewares.use((req: any, res: any, next: any) => {\n        if (!req.url) return next()\n        const url = req.url.split('?')[0]\n\n        const matchBase = bases.find((b) => url.startsWith(b + '/'))\n        if (!matchBase) return next()\n\n        const rel = url.slice((matchBase + '/').length)\n        // Try dist/esm/sdk first (canonical), then common fallbacks\n        const candidate = tryFile(\n          path.join(sdkDistRoot, 'esm', 'sdk', rel),\n          path.join(sdkDistRoot, rel),\n          path.join(sdkDistRoot, 'esm', rel)\n        )\n\n        if (!candidate) {\n          res.statusCode = 404\n          res.setHeader('Content-Type', 'application/json; charset=utf-8')\n          res.end(JSON.stringify({ error: 'SDK asset not found', path: rel }))\n          return\n        }\n\n        setContentType(res, candidate)\n        // SDK assets need COEP headers to work in wallet iframe with COEP enabled\n        applyCoepCorpIfNeeded(res, coepMode)\n        // Dev-only CORS echo (no preflight handling here)\n        echoCorsFromRequest(res, req, { handlePreflight: false })\n        const stream = fs.createReadStream(candidate)\n        stream.on('error', () => next())\n        stream.pipe(res)\n      })\n    },\n  }\n}\n\n/**\n * Dev plugin: expose the wallet service HTML route (default: /wallet-service) that links only external CSS/JS.\n * Where it runs: wallet-iframe dev server (wallet origin). Used by tatchiWalletServer.\n */\nexport function tatchiWalletService(opts: WalletServiceOptions = {}): VitePlugin {\n  const walletServicePath = normalizeBase(opts.walletServicePath, '/wallet-service')\n  const sdkBasePath = normalizeBase(opts.sdkBasePath, '/sdk')\n  const coepMode = resolveCoepMode(opts.coepMode)\n\n  const html = buildWalletServiceHtml(sdkBasePath)\n  const offlineHtml = buildOfflineExportHtml(sdkBasePath)\n  const sdkDistRoot = resolveSdkDistRoot()\n\n  return {\n    name: 'tatchi:wallet-service',\n    apply: 'serve',\n    enforce: 'pre',\n    configureServer(server) {\n      server.middlewares.use((req: any, res: any, next: any) => {\n        if (!req.url) return next()\n        const url = req.url.split('?')[0]\n        if (url === walletServicePath) {\n          res.statusCode = 200\n          res.setHeader('Content-Type', 'text/html; charset=utf-8')\n          applyCoepCorpIfNeeded(res, coepMode)\n          res.end(html)\n          return\n        }\n        next()\n      })\n\n      // Mount Offline Export routes here as well (no app module duplication)\n      addOfflineExportDevRoutes(server, {\n        sdkDistRoot,\n        sdkBasePath,\n        offlineHtml,\n        includeAppModule: false,\n        coepMode,\n      })\n    },\n  }\n}\n\n/**\n * Dev plugin: force the correct `.wasm` MIME type (application/wasm) for any served wasm file.\n * Where it runs: both app and wallet-iframe dev servers.\n */\nexport function tatchiWasmMime(): VitePlugin {\n  return {\n    name: 'tatchi:wasm-mime',\n    apply: 'serve',\n    enforce: 'pre',\n    configureServer(server) {\n      server.middlewares.use((req: any, res: any, next: any) => {\n        if (!req.url) return next()\n        const url = req.url.split('?')[0]\n        if (url.endsWith('.wasm')) {\n          res.setHeader('Content-Type', 'application/wasm')\n        }\n        next()\n      })\n    },\n  }\n}\n\n/**\n * Dev plugin: add Permissions-Policy (delegating WebAuthn + clipboard), COOP, optional COEP/CORP, and optional dev CSP.\n * Where it runs: both app and wallet-iframe dev servers.\n * Notes:\n * - Uses Structured Header format for Permissions-Policy (double-quoted origins).\n * - Wallet dev CSP can be toggled strict/compatible via opts.devCSP.\n */\nexport function tatchiHeaders(opts: DevHeadersOptions = {}): VitePlugin {\n  const walletOriginRaw = opts.walletOrigin ?? process.env.VITE_WALLET_ORIGIN\n  const walletOrigin = walletOriginRaw?.trim()\n  const walletServicePath = normalizeBase(opts.walletServicePath || process.env.VITE_WALLET_SERVICE_PATH, '/wallet-service')\n  const sdkBasePath = normalizeBase(opts.sdkBasePath || process.env.VITE_SDK_BASE_PATH, '/sdk')\n  const devCSPMode = (opts.devCSP ?? (process.env.VITE_WALLET_DEV_CSP as 'strict' | 'compatible' | undefined))\n  const coepMode = resolveCoepMode(opts.coepMode)\n\n  // Build headers via shared helpers to avoid drift.\n  const permissionsPolicy = buildPermissionsPolicy(walletOrigin)\n\n  // Dev convenience: dynamic ROR from NEAR RPC (no relay dependency)\n  // The dev server will fetch the allowlist from chain on demand when a contract id is provided.\n  const rorContractId = (process.env.VITE_WEBAUTHN_CONTRACT_ID || '').toString().trim()\n  const rorMethod = (process.env.VITE_ROR_METHOD || 'get_allowed_origins').toString().trim()\n  const nearRpcUrl = (process.env.VITE_NEAR_RPC_URL || 'https://test.rpc.fastnear.com').toString().trim()\n  // Caching is handled inside fetchRorOriginsFromNear via TTL\n\n  return {\n    name: 'tatchi:dev-headers',\n    apply: 'serve',\n    enforce: 'pre',\n    configureServer(server) {\n\n      console.log('[tatchi] headers enabled', {\n        walletServicePath,\n        sdkBasePath,\n        coepMode,\n        rorContractId: rorContractId || '(none)',\n        nearRpcUrl\n      })\n\n      server.middlewares.use((req: any, res: any, next: any) => {\n        const url = (req.url || '').split('?')[0] || ''\n        const isWalletRoute = url === walletServicePath || url === `${walletServicePath}/` || url === `${walletServicePath}//`\n        res.setHeader('Cross-Origin-Opener-Policy', isWalletRoute ? 'unsafe-none' : 'same-origin')\n        if (coepMode !== 'off') {\n          res.setHeader('Cross-Origin-Embedder-Policy', 'require-corp')\n          res.setHeader('Cross-Origin-Resource-Policy', 'cross-origin')\n        }\n        res.setHeader('Permissions-Policy', permissionsPolicy)\n        // Optional dev-time CSP for the wallet service page only (app pages are unaffected)\n        if (isWalletRoute && devCSPMode) {\n          const mode = devCSPMode === 'strict' ? 'strict' : 'compatible'\n          const walletCsp = buildWalletCsp({ mode })\n          res.setHeader('Content-Security-Policy', walletCsp)\n        }\n        // Resource hints: help parent pages preconnect to the wallet origin early in dev\n        addPreconnectLink(res, walletOrigin)\n\n        // Serve /.well-known/webauthn for ROR using chain state in dev\n        const isWellKnown = url === '/.well-known/webauthn' || url === '/.well-known/webauthn/'\n        if (isWellKnown) {\n          // Direct fetch from NEAR RPC (no relay). Caching handled inside helper.\n          // Requires contract id; RPC URL falls back to a reliable public endpoint.\n          if (rorContractId) {\n            ;(async () => {\n              try {\n                const origins = await fetchRorOriginsFromNear({\n                  rpcUrl: nearRpcUrl,\n                  contractId: rorContractId,\n                  method: rorMethod,\n                })\n                res.statusCode = 200\n                res.setHeader('Content-Type', 'application/json; charset=utf-8')\n                res.setHeader('Cache-Control', 'max-age=60, stale-while-revalidate=600')\n                res.end(JSON.stringify({ origins }))\n              } catch (e) {\n                console.warn('[tatchi] ROR dynamic fetch failed:', e)\n                res.statusCode = 200\n                res.setHeader('Content-Type', 'application/json; charset=utf-8')\n                res.setHeader('Cache-Control', 'max-age=60, stale-while-revalidate=600')\n                res.end(JSON.stringify({ origins: [] }))\n              }\n            })()\n            return\n          }\n          // No configuration; respond with empty allowlist to avoid hard 404 in dev\n          res.statusCode = 200\n          res.setHeader('Content-Type', 'application/json; charset=utf-8')\n          res.setHeader('Cache-Control', 'max-age=60, stale-while-revalidate=600')\n          res.end(JSON.stringify({ origins: [] }))\n          return\n        }\n\n        if (url.startsWith(`${sdkBasePath}/`)) {\n          // Dev-only CORS for SDK assets served by Vite\n          applyCoepCorpIfNeeded(res, coepMode)\n          // Honor existing echo from SDK server; otherwise echo\n          const ended = echoCorsFromRequest(res, req, { honorExistingAcaOrigin: true, handlePreflight: true })\n          if (ended) return\n        }\n        next()\n      })\n    },\n  }\n}\n\n/**\n * Dev plugin (composed): convenience entry that wires SDK server, WASM MIME, optional headers,\n * and (in wallet modes) the wallet service route.\n * Where it runs:\n * - App server: mode 'front-only' (or 'self-contained' when serving wallet pages on the same origin).\n * - Wallet-iframe server: modes 'wallet-only' or 'self-contained'.\n */\n/**\n * Compose dev plugins for serving SDK assets, wallet service HTML and dev headers.\n * External-facing entry for configuring either the app or wallet-iframe dev server.\n */\nfunction tatchiDevServer(options: Web3AuthnDevOptions = {}): VitePlugin {\n  const mode: Required<Web3AuthnDevOptions>['mode'] = options.mode || 'self-contained'\n  const sdkBasePath = normalizeBase(options.sdkBasePath || process.env.VITE_SDK_BASE_PATH, '/sdk')\n  const walletServicePath = normalizeBase(options.walletServicePath || process.env.VITE_WALLET_SERVICE_PATH, '/wallet-service')\n  const walletOrigin = (options.walletOrigin ?? process.env.VITE_WALLET_ORIGIN)?.trim()\n  const setDevHeaders = options.setDevHeaders !== false // default true\n  const enableDebugRoutes = options.enableDebugRoutes === true\n  const sdkDistRoot = resolveSdkDistRoot(options.sdkDistRoot)\n  const coepMode = resolveCoepMode(options.coepMode)\n\n  // Build the sub-plugins to keep logic small and testable\n  const sdkPlugin = tatchiServeSdk({ sdkBasePath, sdkDistRoot, enableDebugRoutes, coepMode })\n  const walletPlugin = tatchiWalletService({ walletServicePath, sdkBasePath, coepMode })\n  const wasmMimePlugin = tatchiWasmMime()\n  // Flip wallet CSP to strict by default in dev. Consumers can override via\n  // VITE_WALLET_DEV_CSP or by composing tatchiHeaders directly.\n  const headersPlugin = setDevHeaders\n    ? tatchiHeaders({ walletOrigin, walletServicePath, sdkBasePath, devCSP: 'strict', coepMode })\n    : undefined\n\n  return {\n    name: 'tatchi:dev',\n    apply: 'serve',\n    enforce: 'pre',\n    configureServer(server) {\n      // Always add WASM MIME + SDK server\n      sdkPlugin.configureServer?.(server)\n      wasmMimePlugin.configureServer?.(server)\n      if (headersPlugin) headersPlugin.configureServer?.(server)\n\n      // Mode-specific wallet service route\n      if (mode === 'self-contained' || mode === 'wallet-only') {\n        walletPlugin.configureServer?.(server)\n      }\n    },\n  }\n}\n\n// === Build-time helper: emit Cloudflare Pages/Netlify _headers ===\n// This plugin writes a _headers file into Vite's outDir with COOP and optional COEP and a\n// Permissions-Policy delegating WebAuthn to the configured wallet origin.\n// It is a no-op if a _headers file already exists (to avoid overriding app settings).\n/**\n * Build-time plugin: writes a Cloudflare Pages/Netlify-compatible `_headers` file into Vite's `outDir`.\n * Adds COOP + Permissions-Policy and optional COEP/CORP (configurable via coepMode) delegating WebAuthn to the configured wallet origin.\n * Where it runs: build for either the app or a static wallet host (not used in dev).\n * Notes: no-ops if `_headers` already exists in `outDir` (to avoid overriding platform config).\n */\nexport function tatchiBuildHeaders(opts: { walletOrigin?: string, cors?: { accessControlAllowOrigin?: string }, coepMode?: 'strict' | 'off' } = {}): VitePlugin {\n  const walletOriginRaw = opts.walletOrigin ?? process.env.VITE_WALLET_ORIGIN\n  const walletOrigin = walletOriginRaw?.trim()\n  const walletServicePath = normalizeBase(process.env.VITE_WALLET_SERVICE_PATH, '/wallet-service')\n  const sdkBasePath = normalizeBase(process.env.VITE_SDK_BASE_PATH, '/sdk')\n  const coepMode = resolveCoepMode(opts.coepMode)\n\n  // Build headers via shared helpers to avoid drift between frameworks\n  const permissionsPolicy = buildPermissionsPolicy(walletOrigin)\n  const walletCsp = buildWalletCsp({ mode: 'strict' })\n\n  let outDir = 'dist'\n\n  // We intentionally return a broader shape than VitePlugin; cast at the end\n  const plugin = {\n    name: 'tatchi:build-headers',\n    apply: 'build' as const,\n    enforce: 'post' as const,\n    // Capture the resolved outDir\n    configResolved(config: any) {\n      outDir = (config?.build?.outDir as string) || outDir\n    },\n    generateBundle() {\n      try {\n        const hdrPath = path.join(outDir, '_headers')\n        if (fs.existsSync(hdrPath)) {\n          // Do not override existing headers; leave a note in build logs\n          console.warn('[tatchi] _headers already exists in outDir; skipping auto-emission')\n        } else {\n          // Strict CSP is emitted only for wallet HTML routes; not for app pages.\n          const contentLines: string[] = [\n            '/*',\n            '  Cross-Origin-Opener-Policy: same-origin',\n            ...(coepMode === 'off'\n              ? []\n              : [\n                  '  Cross-Origin-Embedder-Policy: require-corp',\n                  '  Cross-Origin-Resource-Policy: cross-origin',\n                ]),\n            `  Permissions-Policy: ${permissionsPolicy}`,\n            '',\n            `${walletServicePath}`,\n            '  Cross-Origin-Opener-Policy: unsafe-none',\n            `  Permissions-Policy: ${permissionsPolicy}`,\n            `  Content-Security-Policy: ${walletCsp}`,\n            `${walletServicePath}/`,\n            '  Cross-Origin-Opener-Policy: unsafe-none',\n            `  Permissions-Policy: ${permissionsPolicy}`,\n            `  Content-Security-Policy: ${walletCsp}`,\n            '/export-viewer',\n            '  Cross-Origin-Opener-Policy: unsafe-none',\n            `  Permissions-Policy: ${permissionsPolicy}`,\n            '/export-viewer/',\n            '  Cross-Origin-Opener-Policy: unsafe-none',\n            `  Permissions-Policy: ${permissionsPolicy}`,\n            // Offline export cache policy (no-cache for HTML/SW; immutable for other assets)\n            '/offline-export',\n            '  Cache-Control: no-cache',\n            '/offline-export/',\n            '  Cache-Control: no-cache',\n            '/offline-export/index.html',\n            '  Cache-Control: no-cache',\n            '/offline-export/sw.js',\n            '  Cache-Control: no-cache',\n            '/offline-export/precache.manifest.json',\n            '  Cache-Control: no-cache',\n            '/offline-export/manifest.webmanifest',\n            '  Cache-Control: no-cache',\n            '/offline-export/offline-export-app.js',\n            '  Cache-Control: no-cache',\n            '/offline-export/*',\n            '  Cache-Control: public, max-age=31536000, immutable',\n          ]\n          // Optional: emit CORS headers when explicitly configured via plugin option.\n          // Prefer a single source of truth (platform or plugin), not both.\n          const configuredAcaOrigin = (opts.cors && typeof opts.cors.accessControlAllowOrigin === 'string'\n            ? opts.cors.accessControlAllowOrigin.trim()\n            : undefined) as string | undefined;\n          if (configuredAcaOrigin) {\n            contentLines.push(\n              `${sdkBasePath}/*`,\n              `  Access-Control-Allow-Origin: ${configuredAcaOrigin}`,\n            )\n          }\n          const content = contentLines.join('\\n') + '\\n'\n          fs.mkdirSync(outDir, { recursive: true })\n          fs.writeFileSync(hdrPath, content, 'utf-8')\n          console.log('[tatchi] emitted _headers with COOP' + (coepMode === 'off' ? '' : '/COEP/CORP') + ' + Permissions-Policy' + (configuredAcaOrigin ? ' + CORS' : ''))\n        }\n\n        const sdkDir = path.join(outDir, sdkBasePath.replace(/^\\//, ''))\n        try { fs.mkdirSync(sdkDir, { recursive: true }) } catch {}\n        const shimPath = path.join(sdkDir, 'wallet-shims.js')\n        if (!fs.existsSync(shimPath)) {\n          fs.writeFileSync(shimPath, WALLET_SHIM_SOURCE, 'utf-8')\n        }\n        const cssPath = path.join(sdkDir, 'wallet-service.css')\n        if (!fs.existsSync(cssPath)) {\n          fs.writeFileSync(cssPath, WALLET_SURFACE_CSS, 'utf-8')\n        }\n\n        // Emit minimal wallet-service/index.html if the app hasn't provided one\n        const walletRel = walletServicePath.replace(/^\\//, '')\n        const wsDir = path.join(outDir, walletRel)\n        const wsHtml = path.join(wsDir, 'index.html')\n        if (!fs.existsSync(wsHtml)) {\n          fs.mkdirSync(wsDir, { recursive: true })\n          fs.writeFileSync(wsHtml, buildWalletServiceHtml(sdkBasePath), 'utf-8')\n          console.log(`[tatchi] emitted ${path.posix.join('/', walletRel, 'index.html')} (minimal wallet service)`)\n        }\n\n        // Emit minimal export viewer HTML for production\n        const evDir = path.join(outDir, 'export-viewer')\n        const evHtml = path.join(evDir, 'index.html')\n        if (!fs.existsSync(evHtml)) {\n          fs.mkdirSync(evDir, { recursive: true })\n          fs.writeFileSync(evHtml, buildExportViewerHtml(sdkBasePath), 'utf-8')\n          console.log('[tatchi] emitted /export-viewer/index.html (minimal export viewer)')\n        }\n\n        // Emit offline-export assets (SW, workers, app, HTML, manifest, precache) via helper\n        try {\n          const sdkDistRoot = resolveSdkDistRoot()\n          emitOfflineExportAssets({ outDir, sdkBasePath, sdkDistRoot })\n        } catch (e) {\n          console.warn('[tatchi] failed to emit offline-export assets:', e)\n        }\n      } catch (e) {\n        console.warn('[tatchi] failed to emit _headers:', e)\n      }\n    },\n  }\n\n  return plugin as unknown as VitePlugin\n}\n\n// Small test helpers to keep unit tests decoupled from Vite server implementation\nexport function computeDevPermissionsPolicy(walletOrigin?: string): string {\n  return buildPermissionsPolicy(walletOrigin)\n}\n\nexport function computeDevWalletCsp(mode: 'strict' | 'compatible' = 'strict'): string {\n  return buildWalletCsp({ mode })\n}\n\nexport function tatchiWalletServer(options: Omit<Web3AuthnDevOptions, 'mode'> = {}): VitePlugin {\n  return tatchiDevServer({ ...options, mode: 'wallet-only' })\n}\n\nexport function tatchiAppServer(options: Omit<Web3AuthnDevOptions, 'mode'> = {}): VitePlugin {\n  return tatchiDevServer({ ...options, mode: 'front-only' })\n}\n\n/**\n * Convenience wrapper: app origin helper that combines dev-time headers with optional\n * build-time headers emission for static hosts.\n *\n * Dev-time (serve): applies COOP + Permissions-Policy, plus optional COEP/CORP, via tatchiAppServer.\n * Build-time (build): when `emitHeaders` is true, writes a Cloudflare Pages/Netlify\n * `_headers` file into Vite's `outDir` via tatchiBuildHeaders, scoping strict CSP to\n * wallet HTML routes only.\n *   - Emits: `COOP: same-origin`, `Permissions-Policy: …`, and (when `coepMode === 'strict'`) `COEP: require-corp` + `CORP: cross-origin`.\n *   - No-op if a `_headers` file already exists in `outDir` (avoids clobbering CI/platform rules).\n *\n * Notes\n * - Keeps production header emission opt-in to avoid surprising overrides when apps\n *   already manage headers via custom servers or platform rules.\n * - Returns a plugin array for ergonomics; Vite accepts arrays in the `plugins` list.\n */\nexport function tatchiApp(options: Omit<Web3AuthnDevOptions, 'mode'> & { emitHeaders?: boolean } = {}): any[] /* Vite Plugin[] */ {\n  const { emitHeaders, ...devOpts } = options\n  const walletOrigin = (devOpts.walletOrigin ?? process.env.VITE_WALLET_ORIGIN)?.trim()\n  const app = tatchiAppServer(devOpts)\n  // Build-time emission is opt-in and will no-op if `_headers` already exists.\n  const hdr = emitHeaders ? tatchiBuildHeaders({ walletOrigin, coepMode: devOpts.coepMode }) : undefined\n  return [app, hdr].filter(Boolean) as any[]\n}\n\n/**\n * Convenience wrapper: wallet origin helper that combines dev-time wallet server\n * with optional build-time headers emission for static hosts.\n *\n * Dev-time (serve): serves `/wallet-service` and `/sdk/*` plus headers via tatchiWalletServer.\n * Build-time (build): when `emitHeaders` is true, writes a Cloudflare Pages/Netlify\n * `_headers` file into Vite's `outDir` via tatchiBuildHeaders, scoping strict CSP to\n * wallet HTML routes only.\n *   - Emits: `COOP: same-origin` (wallet HTML routes use `unsafe-none`), `Permissions-Policy: …`, and (when `coepMode === 'strict'`) `COEP: require-corp` + `CORP: cross-origin`.\n *   - No-op if a `_headers` file already exists in `outDir` (avoids clobbering CI/platform rules).\n *\n * Notes\n * - Keeps production header emission opt-in to avoid overriding platform/server configs.\n * - Returns a plugin array for ergonomics; Vite accepts arrays in the `plugins` list.\n */\nexport function tatchiWallet(options: Omit<Web3AuthnDevOptions, 'mode'> & { emitHeaders?: boolean } = {}): any[] /* Vite Plugin[] */ {\n  const { emitHeaders, ...devOpts } = options\n  const walletOrigin = (devOpts.walletOrigin ?? process.env.VITE_WALLET_ORIGIN)?.trim()\n  const wallet = tatchiWalletServer(devOpts)\n  // Build-time emission is opt-in and will no-op if `_headers` already exists.\n  const hdr = emitHeaders ? tatchiBuildHeaders({ walletOrigin, coepMode: devOpts.coepMode }) : undefined\n  return [wallet, hdr].filter(Boolean) as any[]\n}\n"],"mappings":";;;;;;;;;;;AAwFA,SAAS,QAAQ,GAAG,YAA0C;AAC5D,MAAK,MAAM,QAAQ,WACjB,KAAI;EACF,MAAM,OAAO,GAAG,SAAS;AACzB,MAAI,KAAK,SAAU,QAAO;SACpB;AAEV,QAAO;;AAMT,MAAM,qBAAqB;AAC3B,MAAM,qBAAqB;CACzB;CACA;CACA;CAEA;CACA;CAEA;CACA;CACA;CAIA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;EACA,KAAK;;;;;;;AAQP,SAAgB,eAAe,OAAwB,IAAgB;CACrE,MAAM,iBAAiB,cAAc,KAAK,aAAa;CACvD,MAAM,cAAc,mBAAmB,KAAK;CAC5C,MAAM,oBAAoB,KAAK,sBAAsB;CACrD,MAAM,WAAW,gBAAgB,KAAK;CACtC,MAAM,cAAc,uBAAuB;CAG3C,MAAM,QAAQ,MAAM,KAAK,IAAI,IAAI,CAAC,gBAAgB,cAAc,WAC7D,MAAM,GAAG,MAAM,EAAE,SAAS,EAAE;AAG/B,QAAO;EACL,MAAM;EACN,OAAO;EACP,SAAS;EACT,gBAAgB,QAAQ;AAEtB,6BAA0B,QAAQ;IAChC;IACA,aAAa;IACb;IACA,kBAAkB;IAClB;;AAGF,UAAO,YAAY,KAAK,KAAU,KAAU,SAAc;IACxD,MAAM,OAAO,IAAI,OAAO,IAAI,MAAM,KAAK;AACvC,QAAI,QAAQ,iBAAiB,oBAAoB;AAC/C,SAAI,aAAa;AACjB,SAAI,UAAU,gBAAgB;AAE9B,2BAAsB,KAAK;AAE3B,yBAAoB,KAAK,KAAK,EAAE,iBAAiB;AACjD,SAAI,IAAI;AACR;;AAEF,QAAI,QAAQ,iBAAiB,uBAAuB;AAClD,SAAI,aAAa;AACjB,SAAI,UAAU,gBAAgB;AAE9B,2BAAsB,KAAK;AAE3B,yBAAoB,KAAK,KAAK,EAAE,iBAAiB;AACjD,SAAI,IAAI;AACR;;AAEF;;AAIF,OAAI,kBACF,QAAO,YAAY,IAAI,gBAAgB,KAAU,QAAa;AAC5D,QAAI,UAAU,gBAAgB;AAC9B,QAAI,IAAI;;AAKZ,UAAO,YAAY,KAAK,KAAU,KAAU,SAAc;AACxD,QAAI,CAAC,IAAI,IAAK,QAAO;IACrB,MAAM,MAAM,IAAI,IAAI,MAAM,KAAK;IAE/B,MAAM,YAAY,MAAM,MAAM,MAAM,IAAI,WAAW,IAAI;AACvD,QAAI,CAAC,UAAW,QAAO;IAEvB,MAAM,MAAM,IAAI,OAAO,YAAY,KAAK;IAExC,MAAM,YAAY,QAChB,KAAK,KAAK,aAAa,OAAO,OAAO,MACrC,KAAK,KAAK,aAAa,MACvB,KAAK,KAAK,aAAa,OAAO;AAGhC,QAAI,CAAC,WAAW;AACd,SAAI,aAAa;AACjB,SAAI,UAAU,gBAAgB;AAC9B,SAAI,IAAI,KAAK,UAAU;MAAE,OAAO;MAAuB,MAAM;;AAC7D;;AAGF,mBAAe,KAAK;AAEpB,0BAAsB,KAAK;AAE3B,wBAAoB,KAAK,KAAK,EAAE,iBAAiB;IACjD,MAAM,SAAS,GAAG,iBAAiB;AACnC,WAAO,GAAG,eAAe;AACzB,WAAO,KAAK;;;;;;;;;AAUpB,SAAgB,oBAAoB,OAA6B,IAAgB;CAC/E,MAAM,oBAAoB,cAAc,KAAK,mBAAmB;CAChE,MAAM,cAAc,cAAc,KAAK,aAAa;CACpD,MAAM,WAAW,gBAAgB,KAAK;CAEtC,MAAM,OAAO,uBAAuB;CACpC,MAAM,cAAc,uBAAuB;CAC3C,MAAM,cAAc;AAEpB,QAAO;EACL,MAAM;EACN,OAAO;EACP,SAAS;EACT,gBAAgB,QAAQ;AACtB,UAAO,YAAY,KAAK,KAAU,KAAU,SAAc;AACxD,QAAI,CAAC,IAAI,IAAK,QAAO;IACrB,MAAM,MAAM,IAAI,IAAI,MAAM,KAAK;AAC/B,QAAI,QAAQ,mBAAmB;AAC7B,SAAI,aAAa;AACjB,SAAI,UAAU,gBAAgB;AAC9B,2BAAsB,KAAK;AAC3B,SAAI,IAAI;AACR;;AAEF;;AAIF,6BAA0B,QAAQ;IAChC;IACA;IACA;IACA,kBAAkB;IAClB;;;;;;;;;AAUR,SAAgB,iBAA6B;AAC3C,QAAO;EACL,MAAM;EACN,OAAO;EACP,SAAS;EACT,gBAAgB,QAAQ;AACtB,UAAO,YAAY,KAAK,KAAU,KAAU,SAAc;AACxD,QAAI,CAAC,IAAI,IAAK,QAAO;IACrB,MAAM,MAAM,IAAI,IAAI,MAAM,KAAK;AAC/B,QAAI,IAAI,SAAS,SACf,KAAI,UAAU,gBAAgB;AAEhC;;;;;;;;;;;;AAaR,SAAgB,cAAc,OAA0B,IAAgB;CACtE,MAAM,kBAAkB,KAAK,gBAAgB,QAAQ,IAAI;CACzD,MAAM,eAAe,iBAAiB;CACtC,MAAM,oBAAoB,cAAc,KAAK,qBAAqB,QAAQ,IAAI,0BAA0B;CACxG,MAAM,cAAc,cAAc,KAAK,eAAe,QAAQ,IAAI,oBAAoB;CACtF,MAAM,aAAc,KAAK,UAAW,QAAQ,IAAI;CAChD,MAAM,WAAW,gBAAgB,KAAK;CAGtC,MAAM,oBAAoB,uBAAuB;CAIjD,MAAM,iBAAiB,QAAQ,IAAI,6BAA6B,IAAI,WAAW;CAC/E,MAAM,aAAa,QAAQ,IAAI,mBAAmB,uBAAuB,WAAW;CACpF,MAAM,cAAc,QAAQ,IAAI,qBAAqB,iCAAiC,WAAW;AAGjG,QAAO;EACL,MAAM;EACN,OAAO;EACP,SAAS;EACT,gBAAgB,QAAQ;AAEtB,WAAQ,IAAI,4BAA4B;IACtC;IACA;IACA;IACA,eAAe,iBAAiB;IAChC;;AAGF,UAAO,YAAY,KAAK,KAAU,KAAU,SAAc;IACxD,MAAM,OAAO,IAAI,OAAO,IAAI,MAAM,KAAK,MAAM;IAC7C,MAAM,gBAAgB,QAAQ,qBAAqB,QAAQ,GAAG,kBAAkB,MAAM,QAAQ,GAAG,kBAAkB;AACnH,QAAI,UAAU,8BAA8B,gBAAgB,gBAAgB;AAC5E,QAAI,aAAa,OAAO;AACtB,SAAI,UAAU,gCAAgC;AAC9C,SAAI,UAAU,gCAAgC;;AAEhD,QAAI,UAAU,sBAAsB;AAEpC,QAAI,iBAAiB,YAAY;KAC/B,MAAM,OAAO,eAAe,WAAW,WAAW;KAClD,MAAM,YAAY,eAAe,EAAE;AACnC,SAAI,UAAU,2BAA2B;;AAG3C,sBAAkB,KAAK;IAGvB,MAAM,cAAc,QAAQ,2BAA2B,QAAQ;AAC/D,QAAI,aAAa;AAGf,SAAI,eAAe;AAChB,OAAC,YAAY;AACZ,WAAI;QACF,MAAM,UAAU,MAAM,wBAAwB;SAC5C,QAAQ;SACR,YAAY;SACZ,QAAQ;;AAEV,YAAI,aAAa;AACjB,YAAI,UAAU,gBAAgB;AAC9B,YAAI,UAAU,iBAAiB;AAC/B,YAAI,IAAI,KAAK,UAAU,EAAE;gBAClB,GAAG;AACV,gBAAQ,KAAK,sCAAsC;AACnD,YAAI,aAAa;AACjB,YAAI,UAAU,gBAAgB;AAC9B,YAAI,UAAU,iBAAiB;AAC/B,YAAI,IAAI,KAAK,UAAU,EAAE,SAAS;;;AAGtC;;AAGF,SAAI,aAAa;AACjB,SAAI,UAAU,gBAAgB;AAC9B,SAAI,UAAU,iBAAiB;AAC/B,SAAI,IAAI,KAAK,UAAU,EAAE,SAAS;AAClC;;AAGF,QAAI,IAAI,WAAW,GAAG,YAAY,KAAK;AAErC,2BAAsB,KAAK;KAE3B,MAAM,QAAQ,oBAAoB,KAAK,KAAK;MAAE,wBAAwB;MAAM,iBAAiB;;AAC7F,SAAI,MAAO;;AAEb;;;;;;;;;;;;;;;;AAiBR,SAAS,gBAAgB,UAA+B,IAAgB;CACtE,MAAMA,OAA8C,QAAQ,QAAQ;CACpE,MAAM,cAAc,cAAc,QAAQ,eAAe,QAAQ,IAAI,oBAAoB;CACzF,MAAM,oBAAoB,cAAc,QAAQ,qBAAqB,QAAQ,IAAI,0BAA0B;CAC3G,MAAM,gBAAgB,QAAQ,gBAAgB,QAAQ,IAAI,qBAAqB;CAC/E,MAAM,gBAAgB,QAAQ,kBAAkB;CAChD,MAAM,oBAAoB,QAAQ,sBAAsB;CACxD,MAAM,cAAc,mBAAmB,QAAQ;CAC/C,MAAM,WAAW,gBAAgB,QAAQ;CAGzC,MAAM,YAAY,eAAe;EAAE;EAAa;EAAa;EAAmB;;CAChF,MAAM,eAAe,oBAAoB;EAAE;EAAmB;EAAa;;CAC3E,MAAM,iBAAiB;CAGvB,MAAM,gBAAgB,gBAClB,cAAc;EAAE;EAAc;EAAmB;EAAa,QAAQ;EAAU;MAChF;AAEJ,QAAO;EACL,MAAM;EACN,OAAO;EACP,SAAS;EACT,gBAAgB,QAAQ;AAEtB,aAAU,kBAAkB;AAC5B,kBAAe,kBAAkB;AACjC,OAAI,cAAe,eAAc,kBAAkB;AAGnD,OAAI,SAAS,oBAAoB,SAAS,cACxC,cAAa,kBAAkB;;;;;;;;;;AAgBvC,SAAgB,mBAAmB,OAA6G,IAAgB;CAC9J,MAAM,kBAAkB,KAAK,gBAAgB,QAAQ,IAAI;CACzD,MAAM,eAAe,iBAAiB;CACtC,MAAM,oBAAoB,cAAc,QAAQ,IAAI,0BAA0B;CAC9E,MAAM,cAAc,cAAc,QAAQ,IAAI,oBAAoB;CAClE,MAAM,WAAW,gBAAgB,KAAK;CAGtC,MAAM,oBAAoB,uBAAuB;CACjD,MAAM,YAAY,eAAe,EAAE,MAAM;CAEzC,IAAI,SAAS;CAGb,MAAM,SAAS;EACb,MAAM;EACN,OAAO;EACP,SAAS;EAET,eAAe,QAAa;AAC1B,YAAU,QAAQ,OAAO,UAAqB;;EAEhD,iBAAiB;AACf,OAAI;IACF,MAAM,UAAU,KAAK,KAAK,QAAQ;AAClC,QAAI,GAAG,WAAW,SAEhB,SAAQ,KAAK;SACR;KAEL,MAAMC,eAAyB;MAC7B;MACA;MACA,GAAI,aAAa,QACb,KACA,CACE,gDACA;MAEN,yBAAyB;MACzB;MACA,GAAG;MACH;MACA,yBAAyB;MACzB,8BAA8B;MAC9B,GAAG,kBAAkB;MACrB;MACA,yBAAyB;MACzB,8BAA8B;MAC9B;MACA;MACA,yBAAyB;MACzB;MACA;MACA,yBAAyB;MAEzB;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;;KAIF,MAAM,sBAAuB,KAAK,QAAQ,OAAO,KAAK,KAAK,6BAA6B,WACpF,KAAK,KAAK,yBAAyB,SACnC;AACJ,SAAI,oBACF,cAAa,KACX,GAAG,YAAY,KACf,kCAAkC;KAGtC,MAAM,UAAU,aAAa,KAAK,QAAQ;AAC1C,QAAG,UAAU,QAAQ,EAAE,WAAW;AAClC,QAAG,cAAc,SAAS,SAAS;AACnC,aAAQ,IAAI,yCAAyC,aAAa,QAAQ,KAAK,gBAAgB,2BAA2B,sBAAsB,YAAY;;IAG9J,MAAM,SAAS,KAAK,KAAK,QAAQ,YAAY,QAAQ,OAAO;AAC5D,QAAI;AAAE,QAAG,UAAU,QAAQ,EAAE,WAAW;YAAgB;IACxD,MAAM,WAAW,KAAK,KAAK,QAAQ;AACnC,QAAI,CAAC,GAAG,WAAW,UACjB,IAAG,cAAc,UAAU,oBAAoB;IAEjD,MAAM,UAAU,KAAK,KAAK,QAAQ;AAClC,QAAI,CAAC,GAAG,WAAW,SACjB,IAAG,cAAc,SAAS,oBAAoB;IAIhD,MAAM,YAAY,kBAAkB,QAAQ,OAAO;IACnD,MAAM,QAAQ,KAAK,KAAK,QAAQ;IAChC,MAAM,SAAS,KAAK,KAAK,OAAO;AAChC,QAAI,CAAC,GAAG,WAAW,SAAS;AAC1B,QAAG,UAAU,OAAO,EAAE,WAAW;AACjC,QAAG,cAAc,QAAQ,uBAAuB,cAAc;AAC9D,aAAQ,IAAI,oBAAoB,KAAK,MAAM,KAAK,KAAK,WAAW,cAAc;;IAIhF,MAAM,QAAQ,KAAK,KAAK,QAAQ;IAChC,MAAM,SAAS,KAAK,KAAK,OAAO;AAChC,QAAI,CAAC,GAAG,WAAW,SAAS;AAC1B,QAAG,UAAU,OAAO,EAAE,WAAW;AACjC,QAAG,cAAc,QAAQ,sBAAsB,cAAc;AAC7D,aAAQ,IAAI;;AAId,QAAI;KACF,MAAM,cAAc;AACpB,6BAAwB;MAAE;MAAQ;MAAa;;aACxC,GAAG;AACV,aAAQ,KAAK,kDAAkD;;YAE1D,GAAG;AACV,YAAQ,KAAK,qCAAqC;;;;AAKxD,QAAO;;AAIT,SAAgB,4BAA4B,cAA+B;AACzE,QAAO,uBAAuB;;AAGhC,SAAgB,oBAAoB,OAAgC,UAAkB;AACpF,QAAO,eAAe,EAAE;;AAG1B,SAAgB,mBAAmB,UAA6C,IAAgB;AAC9F,QAAO,gBAAgB;EAAE,GAAG;EAAS,MAAM;;;AAG7C,SAAgB,gBAAgB,UAA6C,IAAgB;AAC3F,QAAO,gBAAgB;EAAE,GAAG;EAAS,MAAM;;;;;;;;;;;;;;;;;;;AAmB7C,SAAgB,UAAU,UAAyE,IAA+B;CAChI,MAAM,EAAE,YAAa,GAAG,YAAY;CACpC,MAAM,gBAAgB,QAAQ,gBAAgB,QAAQ,IAAI,qBAAqB;CAC/E,MAAM,MAAM,gBAAgB;CAE5B,MAAM,MAAM,cAAc,mBAAmB;EAAE;EAAc,UAAU,QAAQ;MAAc;AAC7F,QAAO,CAAC,KAAK,KAAK,OAAO;;;;;;;;;;;;;;;;;AAkB3B,SAAgB,aAAa,UAAyE,IAA+B;CACnI,MAAM,EAAE,YAAa,GAAG,YAAY;CACpC,MAAM,gBAAgB,QAAQ,gBAAgB,QAAQ,IAAI,qBAAqB;CAC/E,MAAM,SAAS,mBAAmB;CAElC,MAAM,MAAM,cAAc,mBAAmB;EAAE;EAAc,UAAU,QAAQ;MAAc;AAC7F,QAAO,CAAC,QAAQ,KAAK,OAAO"}
+{"version":3,"file":"vite.js","names":["mode: Required<Web3AuthnDevOptions>['mode']","contentLines: string[]"],"sources":["../../../src/plugins/vite.ts"],"sourcesContent":["// Minimal Vite dev plugin(s) to support Passkey Manager modes.\n// See docs/passkey-manager-modes.md (Vite Plugin section).\n//\n// What these plugins do:\n// - Serve SDK assets under a base path, expose a wallet service route,\n// - Add dev headers (COOP + Permissions-Policy, optional COEP/CORP), and enforce WASM MIME.\n// - IMPORTANT: Strict CSP is scoped only to wallet HTML routes (/wallet-service, /export-viewer),\n//   not to the host app pages. App routes remain free to use inline styles/scripts.\n\nimport * as fs from 'node:fs'\nimport * as path from 'node:path'\nimport { buildPermissionsPolicy, buildWalletCsp } from './headers'\nimport {\n  addPreconnectLink,\n  buildWalletServiceHtml,\n  buildExportViewerHtml,\n  applyCoepCorpIfNeeded,\n  echoCorsFromRequest,\n  fetchRorOriginsFromNear,\n  toBasePath,\n  resolveCoepMode,\n  resolveSdkDistRoot,\n} from './plugin-utils'\nimport { addOfflineExportDevRoutes, buildOfflineExportHtml, emitOfflineExportAssets } from './offline'\nimport { setContentType } from './plugin-utils'\n\nexport type VitePlugin = {\n  name: string\n  apply?: 'serve' | 'build'\n  enforce?: 'pre' | 'post'\n  configureServer?: (server: any) => void | Promise<void>\n}\nexport type ViteLikePlugin = VitePlugin\n\nexport type Web3AuthnDevOptions = {\n  mode?: 'self-contained' | 'front-only' | 'wallet-only'\n  sdkDistRoot?: string\n  sdkBasePath?: string\n  walletServicePath?: string\n  walletOrigin?: string\n  setDevHeaders?: boolean\n  enableDebugRoutes?: boolean\n  /**\n   * Controls Cross-Origin-Embedder-Policy (COEP) behavior in dev.\n   * - 'off' (default): do not emit COEP/CORP on app pages.\n   * - 'strict': emit `Cross-Origin-Embedder-Policy: require-corp`\n   *   and `Cross-Origin-Resource-Policy: cross-origin` on app pages.\n   *\n   * Tip: set `VITE_COEP_MODE=strict` in tests/CI to enable isolation automatically.\n   */\n  coepMode?: 'strict' | 'off'\n}\n\nexport type ServeSdkOptions = {\n  sdkDistRoot?: string\n  sdkBasePath?: string\n  enableDebugRoutes?: boolean\n  coepMode?: 'strict' | 'off'\n}\n\nexport type WalletServiceOptions = {\n  walletServicePath?: string\n  sdkBasePath?: string\n  coepMode?: 'strict' | 'off'\n}\n\nexport type DevHeadersOptions = {\n  walletOrigin?: string\n  walletServicePath?: string\n  sdkBasePath?: string\n  /**\n   * Optional dev-time CSP for the wallet service route.\n   *  - 'strict': no inline scripts/styles (mirrors production defaults)\n   *  - 'compatible': allows inline scripts/styles (useful for debugging)\n   */\n  devCSP?: 'strict' | 'compatible'\n  /**\n   * Controls Cross-Origin-Embedder-Policy (COEP) behavior in dev.\n   * - 'off' (default): do not emit COEP/CORP headers on app pages.\n   * - 'strict': emit COEP/CORP headers on app pages.\n   */\n  coepMode?: 'strict' | 'off'\n}\n\n/**\n * Return the first candidate path that exists and is a file.\n * Helper for robust /sdk/* asset resolution on dev servers (app and wallet).\n */\nfunction tryFile(...candidates: string[]): string | undefined {\n  for (const file of candidates) {\n    try {\n      const stat = fs.statSync(file)\n      if (stat.isFile()) return file\n    } catch {}\n  }\n  return undefined\n}\n\n// RPC helpers are provided by plugin-utils to share logic across frameworks.\n\n// Shared assets emitted/served for the wallet service bootstrap.\nconst WALLET_SHIM_SOURCE = \"window.global ||= window; window.process ||= { env: {} };\\n\"\nconst WALLET_SURFACE_CSS = [\n  'html, body { background: transparent !important; margin:0; padding:0; }',\n  'html, body { color-scheme: normal; }',\n  '',\n  // Class-based surface for strict CSP setups toggled by JS\n  'html.w3a-transparent, body.w3a-transparent { background: transparent !important; margin:0; padding:0; color-scheme: normal; }',\n  '',\n  // Minimal portal styles used by confirm-ui (no animation; child components handle transitions)\n  '.w3a-portal { position: relative; z-index: 2147483647; opacity: 0; pointer-events: none; }',\n  '.w3a-portal.w3a-portal--visible { opacity: 1; pointer-events: auto; }',\n  '',\n  // Provide baseline tokens only when the document does not declare a theme.\n  // This avoids overriding :root[data-w3a-theme] values supplied by token sheet\n  // or integrator-injected themes.\n  ':root:not([data-w3a-theme]) {',\n  '  --w3a-colors-textPrimary: #f6f7f8;',\n  '  --w3a-colors-textSecondary: rgba(255,255,255,0.7);',\n  '  --w3a-colors-surface: rgba(255,255,255,0.08);',\n  '  --w3a-colors-surface2: rgba(255,255,255,0.06);',\n  '  --w3a-colors-surface3: rgba(255,255,255,0.04);',\n  '  --w3a-colors-borderPrimary: rgba(255,255,255,0.14);',\n  '  --w3a-colors-borderSecondary: rgba(255,255,255,0.1);',\n  '  --w3a-colors-colorBackground: #0b0c10;',\n  '  /* Default viewport custom properties for width/height calculations */',\n  '  --w3a-vw: 100vw;',\n  '  --w3a-vh: 100vh;',\n  '}',\n  '',\n].join('\\n')\n\n/**\n * Tatchi SDK plugin: serve SDK assets under a stable base (default: /sdk) with optional COEP/CORP (strict mode) and permissive CORS.\n * Where it runs: both the app server and the wallet-iframe server.\n * - App server: lets host pages and Lit components load SDK CSS/JS locally.\n * - Wallet server: used by /wallet-service to load wallet-iframe-host.js and related CSS/JS.\n */\nexport function tatchiServeSdk(opts: ServeSdkOptions = {}): VitePlugin {\n  const configuredBase = toBasePath(opts.sdkBasePath, '/sdk')\n  const sdkDistRoot = resolveSdkDistRoot(opts.sdkDistRoot)\n  const enableDebugRoutes = opts.enableDebugRoutes === true\n  const coepMode = resolveCoepMode(opts.coepMode)\n  const offlineHtml = buildOfflineExportHtml(configuredBase)\n\n  // In dev we want both '/sdk' and a custom base to work.\n  const bases = Array.from(new Set([configuredBase, toBasePath('/sdk')]))\n    .sort((a, b) => b.length - a.length)\n    // Prefer longest base match first (e.g., '/sdk/esm/react' before '/sdk')\n\n  return {\n    name: 'tatchi:serve-sdk',\n    apply: 'serve',\n    enforce: 'pre',\n    configureServer(server) {\n      // Mount Offline Export dev routes once here (includes app module + chunks)\n      addOfflineExportDevRoutes(server, {\n        sdkDistRoot,\n        sdkBasePath: configuredBase,\n        offlineHtml,\n        includeAppModule: true,\n        coepMode,\n      })\n      // Serve a tiny shim as a virtual asset to enable strict CSP (no inline scripts)\n      server.middlewares.use((req: any, res: any, next: any) => {\n        const url = (req.url || '').split('?')[0]\n        if (url === configuredBase + '/wallet-shims.js') {\n          res.statusCode = 200\n          res.setHeader('Content-Type', 'application/javascript; charset=utf-8')\n          // Align with SDK asset headers so COEP/CORP environments can import\n          applyCoepCorpIfNeeded(res, coepMode)\n          // Dev-only CORS echo (no preflight handling on this route)\n          echoCorsFromRequest(res, req, { handlePreflight: false })\n          res.end(WALLET_SHIM_SOURCE)\n          return\n        }\n        if (url === configuredBase + '/wallet-service.css') {\n          res.statusCode = 200\n          res.setHeader('Content-Type', 'text/css; charset=utf-8')\n          // Important: provide CORP for cross‑origin CSS so COEP documents can load it\n          applyCoepCorpIfNeeded(res, coepMode)\n          // Dev-only CORS echo (no preflight handling on this route)\n          echoCorsFromRequest(res, req, { handlePreflight: false })\n          res.end(WALLET_SURFACE_CSS)\n          return\n        }\n        next()\n      })\n\n      // Optional debug route to confirm resolution\n      if (enableDebugRoutes) {\n        server.middlewares.use('/__sdk-root', (req: any, res: any) => {\n          res.setHeader('Content-Type', 'text/plain; charset=utf-8')\n          res.end(sdkDistRoot)\n        })\n      }\n\n      // Serve files under any recognized base from sdkDistRoot with fallbacks\n      server.middlewares.use((req: any, res: any, next: any) => {\n        if (!req.url) return next()\n        const url = req.url.split('?')[0]\n\n        const matchBase = bases.find((b) => url.startsWith(b + '/'))\n        if (!matchBase) return next()\n\n        const rel = url.slice((matchBase + '/').length)\n        // Try dist/esm/sdk first (canonical), then common fallbacks\n        const candidate = tryFile(\n          path.join(sdkDistRoot, 'esm', 'sdk', rel),\n          path.join(sdkDistRoot, rel),\n          path.join(sdkDistRoot, 'esm', rel)\n        )\n\n        if (!candidate) {\n          res.statusCode = 404\n          res.setHeader('Content-Type', 'application/json; charset=utf-8')\n          res.end(JSON.stringify({ error: 'SDK asset not found', path: rel }))\n          return\n        }\n\n        setContentType(res, candidate)\n        // SDK assets need COEP headers to work in wallet iframe with COEP enabled\n        applyCoepCorpIfNeeded(res, coepMode)\n        // Dev-only CORS echo (no preflight handling here)\n        echoCorsFromRequest(res, req, { handlePreflight: false })\n        const stream = fs.createReadStream(candidate)\n        stream.on('error', () => next())\n        stream.pipe(res)\n      })\n    },\n  }\n}\n\n/**\n * Dev plugin: expose the wallet service HTML route (default: /wallet-service) that links only external CSS/JS.\n * Where it runs: wallet-iframe dev server (wallet origin). Used by tatchiWalletServer.\n */\nexport function tatchiWalletService(opts: WalletServiceOptions = {}): VitePlugin {\n  const walletServicePath = toBasePath(opts.walletServicePath, '/wallet-service')\n  const sdkBasePath = toBasePath(opts.sdkBasePath, '/sdk')\n  const coepMode = resolveCoepMode(opts.coepMode)\n\n  const html = buildWalletServiceHtml(sdkBasePath)\n  const offlineHtml = buildOfflineExportHtml(sdkBasePath)\n  const sdkDistRoot = resolveSdkDistRoot()\n\n  return {\n    name: 'tatchi:wallet-service',\n    apply: 'serve',\n    enforce: 'pre',\n    configureServer(server) {\n      server.middlewares.use((req: any, res: any, next: any) => {\n        if (!req.url) return next()\n        const url = req.url.split('?')[0]\n        const isWalletRoute = url === walletServicePath || url === `${walletServicePath}/` || url === `${walletServicePath}//`\n        if (isWalletRoute) {\n          res.statusCode = 200\n          res.setHeader('Content-Type', 'text/html; charset=utf-8')\n          // Important: allow embedding this wallet HTML into COEP=require-corp apps even\n          // when the wallet itself is not running with COEP enabled.\n          // Without CORP, the iframe can be blocked and remain on an opaque 'null' origin,\n          // causing CONNECT/READY handshake timeouts in the parent.\n          res.setHeader('Cross-Origin-Resource-Policy', 'cross-origin')\n          applyCoepCorpIfNeeded(res, coepMode)\n          res.end(html)\n          return\n        }\n        next()\n      })\n\n      // Mount Offline Export routes here as well (no app module duplication)\n      addOfflineExportDevRoutes(server, {\n        sdkDistRoot,\n        sdkBasePath,\n        offlineHtml,\n        includeAppModule: false,\n        coepMode,\n      })\n    },\n  }\n}\n\n/**\n * Dev plugin: force the correct `.wasm` MIME type (application/wasm) for any served wasm file.\n * Where it runs: both app and wallet-iframe dev servers.\n */\nexport function tatchiWasmMime(): VitePlugin {\n  return {\n    name: 'tatchi:wasm-mime',\n    apply: 'serve',\n    enforce: 'pre',\n    configureServer(server) {\n      server.middlewares.use((req: any, res: any, next: any) => {\n        if (!req.url) return next()\n        const url = req.url.split('?')[0]\n        if (url.endsWith('.wasm')) {\n          res.setHeader('Content-Type', 'application/wasm')\n        }\n        next()\n      })\n    },\n  }\n}\n\n/**\n * Dev plugin: add Permissions-Policy (delegating WebAuthn + clipboard), COOP, optional COEP/CORP, and optional dev CSP.\n * Where it runs: both app and wallet-iframe dev servers.\n * Notes:\n * - Uses Structured Header format for Permissions-Policy (double-quoted origins).\n * - Wallet dev CSP can be toggled strict/compatible via opts.devCSP.\n */\nexport function tatchiHeaders(opts: DevHeadersOptions = {}): VitePlugin {\n  const walletOriginRaw = opts.walletOrigin ?? process.env.VITE_WALLET_ORIGIN\n  const walletOrigin = walletOriginRaw?.trim()\n  const walletServicePath = toBasePath(opts.walletServicePath || process.env.VITE_WALLET_SERVICE_PATH, '/wallet-service')\n  const sdkBasePath = toBasePath(opts.sdkBasePath || process.env.VITE_SDK_BASE_PATH, '/sdk')\n  const devCSPMode = (opts.devCSP ?? (process.env.VITE_WALLET_DEV_CSP as 'strict' | 'compatible' | undefined))\n  const coepMode = resolveCoepMode(opts.coepMode)\n\n  // Build headers via shared helpers to avoid drift.\n  const permissionsPolicy = buildPermissionsPolicy(walletOrigin)\n\n  // Dev convenience: dynamic ROR from NEAR RPC (no relay dependency)\n  // The dev server will fetch the allowlist from chain on demand when a contract id is provided.\n  const rorContractId = (process.env.VITE_WEBAUTHN_CONTRACT_ID || '').toString().trim()\n  const rorMethod = (process.env.VITE_ROR_METHOD || 'get_allowed_origins').toString().trim()\n  const nearRpcUrl = (process.env.VITE_NEAR_RPC_URL || 'https://test.rpc.fastnear.com').toString().trim()\n  // Caching is handled inside fetchRorOriginsFromNear via TTL\n\n  return {\n    name: 'tatchi:dev-headers',\n    apply: 'serve',\n    enforce: 'pre',\n    configureServer(server) {\n\n      console.log('[tatchi] headers enabled', {\n        walletServicePath,\n        sdkBasePath,\n        coepMode,\n        rorContractId: rorContractId || '(none)',\n        nearRpcUrl\n      })\n\n      server.middlewares.use((req: any, res: any, next: any) => {\n        const url = (req.url || '').split('?')[0] || ''\n        const isWalletRoute = url === walletServicePath || url === `${walletServicePath}/` || url === `${walletServicePath}//`\n        res.setHeader('Cross-Origin-Opener-Policy', isWalletRoute ? 'unsafe-none' : 'same-origin')\n        if (coepMode !== 'off') {\n          res.setHeader('Cross-Origin-Embedder-Policy', 'require-corp')\n          res.setHeader('Cross-Origin-Resource-Policy', 'cross-origin')\n        }\n        res.setHeader('Permissions-Policy', permissionsPolicy)\n        // Optional dev-time CSP for the wallet service page only (app pages are unaffected)\n        if (isWalletRoute && devCSPMode) {\n          const mode = devCSPMode === 'strict' ? 'strict' : 'compatible'\n          const walletCsp = buildWalletCsp({ mode })\n          res.setHeader('Content-Security-Policy', walletCsp)\n        }\n        // Resource hints: help parent pages preconnect to the wallet origin early in dev\n        addPreconnectLink(res, walletOrigin)\n\n        // Serve /.well-known/webauthn for ROR using chain state in dev\n        const isWellKnown = url === '/.well-known/webauthn' || url === '/.well-known/webauthn/'\n        if (isWellKnown) {\n          // Direct fetch from NEAR RPC (no relay). Caching handled inside helper.\n          // Requires contract id; RPC URL falls back to a reliable public endpoint.\n          if (rorContractId) {\n            ;(async () => {\n              try {\n                const origins = await fetchRorOriginsFromNear({\n                  rpcUrl: nearRpcUrl,\n                  contractId: rorContractId,\n                  method: rorMethod,\n                })\n                res.statusCode = 200\n                res.setHeader('Content-Type', 'application/json; charset=utf-8')\n                res.setHeader('Cache-Control', 'max-age=60, stale-while-revalidate=600')\n                res.end(JSON.stringify({ origins }))\n              } catch (e) {\n                console.warn('[tatchi] ROR dynamic fetch failed:', e)\n                res.statusCode = 200\n                res.setHeader('Content-Type', 'application/json; charset=utf-8')\n                res.setHeader('Cache-Control', 'max-age=60, stale-while-revalidate=600')\n                res.end(JSON.stringify({ origins: [] }))\n              }\n            })()\n            return\n          }\n          // No configuration; respond with empty allowlist to avoid hard 404 in dev\n          res.statusCode = 200\n          res.setHeader('Content-Type', 'application/json; charset=utf-8')\n          res.setHeader('Cache-Control', 'max-age=60, stale-while-revalidate=600')\n          res.end(JSON.stringify({ origins: [] }))\n          return\n        }\n\n        if (url.startsWith(`${sdkBasePath}/`)) {\n          // Dev-only CORS for SDK assets served by Vite\n          applyCoepCorpIfNeeded(res, coepMode)\n          // Honor existing echo from SDK server; otherwise echo\n          const ended = echoCorsFromRequest(res, req, { honorExistingAcaOrigin: true, handlePreflight: true })\n          if (ended) return\n        }\n        next()\n      })\n    },\n  }\n}\n\n/**\n * Dev plugin (composed): convenience entry that wires SDK server, WASM MIME, optional headers,\n * and (in wallet modes) the wallet service route.\n * Where it runs:\n * - App server: mode 'front-only' (or 'self-contained' when serving wallet pages on the same origin).\n * - Wallet-iframe server: modes 'wallet-only' or 'self-contained'.\n */\n/**\n * Compose dev plugins for serving SDK assets, wallet service HTML and dev headers.\n * External-facing entry for configuring either the app or wallet-iframe dev server.\n */\nfunction tatchiDevServer(options: Web3AuthnDevOptions = {}): VitePlugin {\n  const mode: Required<Web3AuthnDevOptions>['mode'] = options.mode || 'self-contained'\n  const sdkBasePath = toBasePath(options.sdkBasePath || process.env.VITE_SDK_BASE_PATH, '/sdk')\n  const walletServicePath = toBasePath(options.walletServicePath || process.env.VITE_WALLET_SERVICE_PATH, '/wallet-service')\n  const walletOrigin = (options.walletOrigin ?? process.env.VITE_WALLET_ORIGIN)?.trim()\n  const setDevHeaders = options.setDevHeaders !== false // default true\n  const enableDebugRoutes = options.enableDebugRoutes === true\n  const sdkDistRoot = resolveSdkDistRoot(options.sdkDistRoot)\n  const coepMode = resolveCoepMode(options.coepMode)\n\n  // Build the sub-plugins to keep logic small and testable\n  const sdkPlugin = tatchiServeSdk({ sdkBasePath, sdkDistRoot, enableDebugRoutes, coepMode })\n  const walletPlugin = tatchiWalletService({ walletServicePath, sdkBasePath, coepMode })\n  const wasmMimePlugin = tatchiWasmMime()\n  // Flip wallet CSP to strict by default in dev. Consumers can override via\n  // VITE_WALLET_DEV_CSP or by composing tatchiHeaders directly.\n  const headersPlugin = setDevHeaders\n    ? tatchiHeaders({ walletOrigin, walletServicePath, sdkBasePath, devCSP: 'strict', coepMode })\n    : undefined\n\n  return {\n    name: 'tatchi:dev',\n    apply: 'serve',\n    enforce: 'pre',\n    configureServer(server) {\n      // Always add WASM MIME + SDK server\n      sdkPlugin.configureServer?.(server)\n      wasmMimePlugin.configureServer?.(server)\n      if (headersPlugin) headersPlugin.configureServer?.(server)\n\n      // Mode-specific wallet service route\n      if (mode === 'self-contained' || mode === 'wallet-only') {\n        walletPlugin.configureServer?.(server)\n      }\n    },\n  }\n}\n\n// === Build-time helper: emit Cloudflare Pages/Netlify _headers ===\n// This plugin writes a _headers file into Vite's outDir with COOP and optional COEP and a\n// Permissions-Policy delegating WebAuthn to the configured wallet origin.\n// It is a no-op if a _headers file already exists (to avoid overriding app settings).\n/**\n * Build-time plugin: writes a Cloudflare Pages/Netlify-compatible `_headers` file into Vite's `outDir`.\n * Adds COOP + Permissions-Policy and optional COEP/CORP (configurable via coepMode) delegating WebAuthn to the configured wallet origin.\n * Where it runs: build for either the app or a static wallet host (not used in dev).\n * Notes: no-ops if `_headers` already exists in `outDir` (to avoid overriding platform config).\n */\nexport function tatchiBuildHeaders(opts: { walletOrigin?: string, cors?: { accessControlAllowOrigin?: string }, coepMode?: 'strict' | 'off' } = {}): VitePlugin {\n  const walletOriginRaw = opts.walletOrigin ?? process.env.VITE_WALLET_ORIGIN\n  const walletOrigin = walletOriginRaw?.trim()\n  const walletServicePath = toBasePath(process.env.VITE_WALLET_SERVICE_PATH, '/wallet-service')\n  const sdkBasePath = toBasePath(process.env.VITE_SDK_BASE_PATH, '/sdk')\n  const coepMode = resolveCoepMode(opts.coepMode)\n\n  // Build headers via shared helpers to avoid drift between frameworks\n  const permissionsPolicy = buildPermissionsPolicy(walletOrigin)\n  const walletCsp = buildWalletCsp({ mode: 'strict' })\n\n  let outDir = 'dist'\n\n  // We intentionally return a broader shape than VitePlugin; cast at the end\n  const plugin = {\n    name: 'tatchi:build-headers',\n    apply: 'build' as const,\n    enforce: 'post' as const,\n    // Capture the resolved outDir\n    configResolved(config: any) {\n      outDir = (config?.build?.outDir as string) || outDir\n    },\n    generateBundle() {\n      try {\n        const hdrPath = path.join(outDir, '_headers')\n        if (fs.existsSync(hdrPath)) {\n          // Do not override existing headers; leave a note in build logs\n          console.warn('[tatchi] _headers already exists in outDir; skipping auto-emission')\n        } else {\n          // Strict CSP is emitted only for wallet HTML routes; not for app pages.\n          const contentLines: string[] = [\n            '/*',\n            '  Cross-Origin-Opener-Policy: same-origin',\n            ...(coepMode === 'off'\n              ? []\n              : [\n                  '  Cross-Origin-Embedder-Policy: require-corp',\n                  '  Cross-Origin-Resource-Policy: cross-origin',\n                ]),\n            `  Permissions-Policy: ${permissionsPolicy}`,\n            '',\n            `${walletServicePath}`,\n            '  Cross-Origin-Opener-Policy: unsafe-none',\n            // Always allow COEP=require-corp apps to embed wallet HTML, even when\n            // the wallet host itself is not using COEP.\n            '  Cross-Origin-Resource-Policy: cross-origin',\n            `  Permissions-Policy: ${permissionsPolicy}`,\n            `  Content-Security-Policy: ${walletCsp}`,\n            `${walletServicePath}/`,\n            '  Cross-Origin-Opener-Policy: unsafe-none',\n            '  Cross-Origin-Resource-Policy: cross-origin',\n            `  Permissions-Policy: ${permissionsPolicy}`,\n            `  Content-Security-Policy: ${walletCsp}`,\n            '/export-viewer',\n            '  Cross-Origin-Opener-Policy: unsafe-none',\n            '  Cross-Origin-Resource-Policy: cross-origin',\n            `  Permissions-Policy: ${permissionsPolicy}`,\n            '/export-viewer/',\n            '  Cross-Origin-Opener-Policy: unsafe-none',\n            '  Cross-Origin-Resource-Policy: cross-origin',\n            `  Permissions-Policy: ${permissionsPolicy}`,\n            // Offline export cache policy (no-cache for HTML/SW; immutable for other assets)\n            '/offline-export',\n            '  Cache-Control: no-cache',\n            '/offline-export/',\n            '  Cache-Control: no-cache',\n            '/offline-export/index.html',\n            '  Cache-Control: no-cache',\n            '/offline-export/sw.js',\n            '  Cache-Control: no-cache',\n            '/offline-export/precache.manifest.json',\n            '  Cache-Control: no-cache',\n            '/offline-export/manifest.webmanifest',\n            '  Cache-Control: no-cache',\n            '/offline-export/offline-export-app.js',\n            '  Cache-Control: no-cache',\n            '/offline-export/*',\n            '  Cache-Control: public, max-age=31536000, immutable',\n          ]\n          // Optional: emit CORS headers when explicitly configured via plugin option.\n          // Prefer a single source of truth (platform or plugin), not both.\n          const configuredAcaOrigin = (opts.cors && typeof opts.cors.accessControlAllowOrigin === 'string'\n            ? opts.cors.accessControlAllowOrigin.trim()\n            : undefined) as string | undefined;\n          if (configuredAcaOrigin) {\n            contentLines.push(\n              `${sdkBasePath}/*`,\n              `  Access-Control-Allow-Origin: ${configuredAcaOrigin}`,\n            )\n          }\n          const content = contentLines.join('\\n') + '\\n'\n          fs.mkdirSync(outDir, { recursive: true })\n          fs.writeFileSync(hdrPath, content, 'utf-8')\n          console.log('[tatchi] emitted _headers with COOP' + (coepMode === 'off' ? '' : '/COEP/CORP') + ' + Permissions-Policy' + (configuredAcaOrigin ? ' + CORS' : ''))\n        }\n\n        const sdkDir = path.join(outDir, sdkBasePath.replace(/^\\//, ''))\n        try { fs.mkdirSync(sdkDir, { recursive: true }) } catch {}\n        const shimPath = path.join(sdkDir, 'wallet-shims.js')\n        if (!fs.existsSync(shimPath)) {\n          fs.writeFileSync(shimPath, WALLET_SHIM_SOURCE, 'utf-8')\n        }\n        const cssPath = path.join(sdkDir, 'wallet-service.css')\n        if (!fs.existsSync(cssPath)) {\n          fs.writeFileSync(cssPath, WALLET_SURFACE_CSS, 'utf-8')\n        }\n\n        // Emit minimal wallet-service/index.html if the app hasn't provided one\n        const walletRel = walletServicePath.replace(/^\\//, '')\n        const wsDir = path.join(outDir, walletRel)\n        const wsHtml = path.join(wsDir, 'index.html')\n        if (!fs.existsSync(wsHtml)) {\n          fs.mkdirSync(wsDir, { recursive: true })\n          fs.writeFileSync(wsHtml, buildWalletServiceHtml(sdkBasePath), 'utf-8')\n          console.log(`[tatchi] emitted ${path.posix.join('/', walletRel, 'index.html')} (minimal wallet service)`)\n        }\n\n        // Emit minimal export viewer HTML for production\n        const evDir = path.join(outDir, 'export-viewer')\n        const evHtml = path.join(evDir, 'index.html')\n        if (!fs.existsSync(evHtml)) {\n          fs.mkdirSync(evDir, { recursive: true })\n          fs.writeFileSync(evHtml, buildExportViewerHtml(sdkBasePath), 'utf-8')\n          console.log('[tatchi] emitted /export-viewer/index.html (minimal export viewer)')\n        }\n\n        // Emit offline-export assets (SW, workers, app, HTML, manifest, precache) via helper\n        try {\n          const sdkDistRoot = resolveSdkDistRoot()\n          emitOfflineExportAssets({ outDir, sdkBasePath, sdkDistRoot })\n        } catch (e) {\n          console.warn('[tatchi] failed to emit offline-export assets:', e)\n        }\n      } catch (e) {\n        console.warn('[tatchi] failed to emit _headers:', e)\n      }\n    },\n  }\n\n  return plugin as unknown as VitePlugin\n}\n\n// Small test helpers to keep unit tests decoupled from Vite server implementation\nexport function computeDevPermissionsPolicy(walletOrigin?: string): string {\n  return buildPermissionsPolicy(walletOrigin)\n}\n\nexport function computeDevWalletCsp(mode: 'strict' | 'compatible' = 'strict'): string {\n  return buildWalletCsp({ mode })\n}\n\nexport function tatchiWalletServer(options: Omit<Web3AuthnDevOptions, 'mode'> = {}): VitePlugin {\n  return tatchiDevServer({ ...options, mode: 'wallet-only' })\n}\n\nexport function tatchiAppServer(options: Omit<Web3AuthnDevOptions, 'mode'> = {}): VitePlugin {\n  return tatchiDevServer({ ...options, mode: 'front-only' })\n}\n\n/**\n * Convenience wrapper: app origin helper that combines dev-time headers with optional\n * build-time headers emission for static hosts.\n *\n * Dev-time (serve): applies COOP + Permissions-Policy, plus optional COEP/CORP, via tatchiAppServer.\n * Build-time (build): when `emitHeaders` is true, writes a Cloudflare Pages/Netlify\n * `_headers` file into Vite's `outDir` via tatchiBuildHeaders, scoping strict CSP to\n * wallet HTML routes only.\n *   - Emits: `COOP: same-origin`, `Permissions-Policy: …`, and (when `coepMode === 'strict'`) `COEP: require-corp` + `CORP: cross-origin`.\n *   - No-op if a `_headers` file already exists in `outDir` (avoids clobbering CI/platform rules).\n *\n * Notes\n * - Keeps production header emission opt-in to avoid surprising overrides when apps\n *   already manage headers via custom servers or platform rules.\n * - Returns a plugin array for ergonomics; Vite accepts arrays in the `plugins` list.\n */\nexport function tatchiApp(options: Omit<Web3AuthnDevOptions, 'mode'> & { emitHeaders?: boolean } = {}): any[] /* Vite Plugin[] */ {\n  const { emitHeaders, ...devOpts } = options\n  const walletOrigin = (devOpts.walletOrigin ?? process.env.VITE_WALLET_ORIGIN)?.trim()\n  const app = tatchiAppServer(devOpts)\n  // Build-time emission is opt-in and will no-op if `_headers` already exists.\n  const hdr = emitHeaders ? tatchiBuildHeaders({ walletOrigin, coepMode: devOpts.coepMode }) : undefined\n  return [app, hdr].filter(Boolean) as any[]\n}\n\n/**\n * Convenience wrapper: wallet origin helper that combines dev-time wallet server\n * with optional build-time headers emission for static hosts.\n *\n * Dev-time (serve): serves `/wallet-service` and `/sdk/*` plus headers via tatchiWalletServer.\n * Build-time (build): when `emitHeaders` is true, writes a Cloudflare Pages/Netlify\n * `_headers` file into Vite's `outDir` via tatchiBuildHeaders, scoping strict CSP to\n * wallet HTML routes only.\n *   - Emits: `COOP: same-origin` (wallet HTML routes use `unsafe-none`), `Permissions-Policy: …`, and (when `coepMode === 'strict'`) `COEP: require-corp` + `CORP: cross-origin`.\n *   - No-op if a `_headers` file already exists in `outDir` (avoids clobbering CI/platform rules).\n *\n * Notes\n * - Keeps production header emission opt-in to avoid overriding platform/server configs.\n * - Returns a plugin array for ergonomics; Vite accepts arrays in the `plugins` list.\n */\nexport function tatchiWallet(options: Omit<Web3AuthnDevOptions, 'mode'> & { emitHeaders?: boolean } = {}): any[] /* Vite Plugin[] */ {\n  const { emitHeaders, ...devOpts } = options\n  const walletOrigin = (devOpts.walletOrigin ?? process.env.VITE_WALLET_ORIGIN)?.trim()\n  const wallet = tatchiWalletServer(devOpts)\n  // Build-time emission is opt-in and will no-op if `_headers` already exists.\n  const hdr = emitHeaders ? tatchiBuildHeaders({ walletOrigin, coepMode: devOpts.coepMode }) : undefined\n  return [wallet, hdr].filter(Boolean) as any[]\n}\n"],"mappings":";;;;;;;;;;;;AAwFA,SAAS,QAAQ,GAAG,YAA0C;AAC5D,MAAK,MAAM,QAAQ,WACjB,KAAI;EACF,MAAM,OAAO,GAAG,SAAS;AACzB,MAAI,KAAK,SAAU,QAAO;SACpB;AAEV,QAAO;;AAMT,MAAM,qBAAqB;AAC3B,MAAM,qBAAqB;CACzB;CACA;CACA;CAEA;CACA;CAEA;CACA;CACA;CAIA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;EACA,KAAK;;;;;;;AAQP,SAAgB,eAAe,OAAwB,IAAgB;CACrE,MAAM,iBAAiB,WAAW,KAAK,aAAa;CACpD,MAAM,cAAc,mBAAmB,KAAK;CAC5C,MAAM,oBAAoB,KAAK,sBAAsB;CACrD,MAAM,WAAW,gBAAgB,KAAK;CACtC,MAAM,cAAc,uBAAuB;CAG3C,MAAM,QAAQ,MAAM,KAAK,IAAI,IAAI,CAAC,gBAAgB,WAAW,WAC1D,MAAM,GAAG,MAAM,EAAE,SAAS,EAAE;AAG/B,QAAO;EACL,MAAM;EACN,OAAO;EACP,SAAS;EACT,gBAAgB,QAAQ;AAEtB,6BAA0B,QAAQ;IAChC;IACA,aAAa;IACb;IACA,kBAAkB;IAClB;;AAGF,UAAO,YAAY,KAAK,KAAU,KAAU,SAAc;IACxD,MAAM,OAAO,IAAI,OAAO,IAAI,MAAM,KAAK;AACvC,QAAI,QAAQ,iBAAiB,oBAAoB;AAC/C,SAAI,aAAa;AACjB,SAAI,UAAU,gBAAgB;AAE9B,2BAAsB,KAAK;AAE3B,yBAAoB,KAAK,KAAK,EAAE,iBAAiB;AACjD,SAAI,IAAI;AACR;;AAEF,QAAI,QAAQ,iBAAiB,uBAAuB;AAClD,SAAI,aAAa;AACjB,SAAI,UAAU,gBAAgB;AAE9B,2BAAsB,KAAK;AAE3B,yBAAoB,KAAK,KAAK,EAAE,iBAAiB;AACjD,SAAI,IAAI;AACR;;AAEF;;AAIF,OAAI,kBACF,QAAO,YAAY,IAAI,gBAAgB,KAAU,QAAa;AAC5D,QAAI,UAAU,gBAAgB;AAC9B,QAAI,IAAI;;AAKZ,UAAO,YAAY,KAAK,KAAU,KAAU,SAAc;AACxD,QAAI,CAAC,IAAI,IAAK,QAAO;IACrB,MAAM,MAAM,IAAI,IAAI,MAAM,KAAK;IAE/B,MAAM,YAAY,MAAM,MAAM,MAAM,IAAI,WAAW,IAAI;AACvD,QAAI,CAAC,UAAW,QAAO;IAEvB,MAAM,MAAM,IAAI,OAAO,YAAY,KAAK;IAExC,MAAM,YAAY,QAChB,KAAK,KAAK,aAAa,OAAO,OAAO,MACrC,KAAK,KAAK,aAAa,MACvB,KAAK,KAAK,aAAa,OAAO;AAGhC,QAAI,CAAC,WAAW;AACd,SAAI,aAAa;AACjB,SAAI,UAAU,gBAAgB;AAC9B,SAAI,IAAI,KAAK,UAAU;MAAE,OAAO;MAAuB,MAAM;;AAC7D;;AAGF,mBAAe,KAAK;AAEpB,0BAAsB,KAAK;AAE3B,wBAAoB,KAAK,KAAK,EAAE,iBAAiB;IACjD,MAAM,SAAS,GAAG,iBAAiB;AACnC,WAAO,GAAG,eAAe;AACzB,WAAO,KAAK;;;;;;;;;AAUpB,SAAgB,oBAAoB,OAA6B,IAAgB;CAC/E,MAAM,oBAAoB,WAAW,KAAK,mBAAmB;CAC7D,MAAM,cAAc,WAAW,KAAK,aAAa;CACjD,MAAM,WAAW,gBAAgB,KAAK;CAEtC,MAAM,OAAO,uBAAuB;CACpC,MAAM,cAAc,uBAAuB;CAC3C,MAAM,cAAc;AAEpB,QAAO;EACL,MAAM;EACN,OAAO;EACP,SAAS;EACT,gBAAgB,QAAQ;AACtB,UAAO,YAAY,KAAK,KAAU,KAAU,SAAc;AACxD,QAAI,CAAC,IAAI,IAAK,QAAO;IACrB,MAAM,MAAM,IAAI,IAAI,MAAM,KAAK;IAC/B,MAAM,gBAAgB,QAAQ,qBAAqB,QAAQ,GAAG,kBAAkB,MAAM,QAAQ,GAAG,kBAAkB;AACnH,QAAI,eAAe;AACjB,SAAI,aAAa;AACjB,SAAI,UAAU,gBAAgB;AAK9B,SAAI,UAAU,gCAAgC;AAC9C,2BAAsB,KAAK;AAC3B,SAAI,IAAI;AACR;;AAEF;;AAIF,6BAA0B,QAAQ;IAChC;IACA;IACA;IACA,kBAAkB;IAClB;;;;;;;;;AAUR,SAAgB,iBAA6B;AAC3C,QAAO;EACL,MAAM;EACN,OAAO;EACP,SAAS;EACT,gBAAgB,QAAQ;AACtB,UAAO,YAAY,KAAK,KAAU,KAAU,SAAc;AACxD,QAAI,CAAC,IAAI,IAAK,QAAO;IACrB,MAAM,MAAM,IAAI,IAAI,MAAM,KAAK;AAC/B,QAAI,IAAI,SAAS,SACf,KAAI,UAAU,gBAAgB;AAEhC;;;;;;;;;;;;AAaR,SAAgB,cAAc,OAA0B,IAAgB;CACtE,MAAM,kBAAkB,KAAK,gBAAgB,QAAQ,IAAI;CACzD,MAAM,eAAe,iBAAiB;CACtC,MAAM,oBAAoB,WAAW,KAAK,qBAAqB,QAAQ,IAAI,0BAA0B;CACrG,MAAM,cAAc,WAAW,KAAK,eAAe,QAAQ,IAAI,oBAAoB;CACnF,MAAM,aAAc,KAAK,UAAW,QAAQ,IAAI;CAChD,MAAM,WAAW,gBAAgB,KAAK;CAGtC,MAAM,oBAAoB,uBAAuB;CAIjD,MAAM,iBAAiB,QAAQ,IAAI,6BAA6B,IAAI,WAAW;CAC/E,MAAM,aAAa,QAAQ,IAAI,mBAAmB,uBAAuB,WAAW;CACpF,MAAM,cAAc,QAAQ,IAAI,qBAAqB,iCAAiC,WAAW;AAGjG,QAAO;EACL,MAAM;EACN,OAAO;EACP,SAAS;EACT,gBAAgB,QAAQ;AAEtB,WAAQ,IAAI,4BAA4B;IACtC;IACA;IACA;IACA,eAAe,iBAAiB;IAChC;;AAGF,UAAO,YAAY,KAAK,KAAU,KAAU,SAAc;IACxD,MAAM,OAAO,IAAI,OAAO,IAAI,MAAM,KAAK,MAAM;IAC7C,MAAM,gBAAgB,QAAQ,qBAAqB,QAAQ,GAAG,kBAAkB,MAAM,QAAQ,GAAG,kBAAkB;AACnH,QAAI,UAAU,8BAA8B,gBAAgB,gBAAgB;AAC5E,QAAI,aAAa,OAAO;AACtB,SAAI,UAAU,gCAAgC;AAC9C,SAAI,UAAU,gCAAgC;;AAEhD,QAAI,UAAU,sBAAsB;AAEpC,QAAI,iBAAiB,YAAY;KAC/B,MAAM,OAAO,eAAe,WAAW,WAAW;KAClD,MAAM,YAAY,eAAe,EAAE;AACnC,SAAI,UAAU,2BAA2B;;AAG3C,sBAAkB,KAAK;IAGvB,MAAM,cAAc,QAAQ,2BAA2B,QAAQ;AAC/D,QAAI,aAAa;AAGf,SAAI,eAAe;AAChB,OAAC,YAAY;AACZ,WAAI;QACF,MAAM,UAAU,MAAM,wBAAwB;SAC5C,QAAQ;SACR,YAAY;SACZ,QAAQ;;AAEV,YAAI,aAAa;AACjB,YAAI,UAAU,gBAAgB;AAC9B,YAAI,UAAU,iBAAiB;AAC/B,YAAI,IAAI,KAAK,UAAU,EAAE;gBAClB,GAAG;AACV,gBAAQ,KAAK,sCAAsC;AACnD,YAAI,aAAa;AACjB,YAAI,UAAU,gBAAgB;AAC9B,YAAI,UAAU,iBAAiB;AAC/B,YAAI,IAAI,KAAK,UAAU,EAAE,SAAS;;;AAGtC;;AAGF,SAAI,aAAa;AACjB,SAAI,UAAU,gBAAgB;AAC9B,SAAI,UAAU,iBAAiB;AAC/B,SAAI,IAAI,KAAK,UAAU,EAAE,SAAS;AAClC;;AAGF,QAAI,IAAI,WAAW,GAAG,YAAY,KAAK;AAErC,2BAAsB,KAAK;KAE3B,MAAM,QAAQ,oBAAoB,KAAK,KAAK;MAAE,wBAAwB;MAAM,iBAAiB;;AAC7F,SAAI,MAAO;;AAEb;;;;;;;;;;;;;;;;AAiBR,SAAS,gBAAgB,UAA+B,IAAgB;CACtE,MAAMA,OAA8C,QAAQ,QAAQ;CACpE,MAAM,cAAc,WAAW,QAAQ,eAAe,QAAQ,IAAI,oBAAoB;CACtF,MAAM,oBAAoB,WAAW,QAAQ,qBAAqB,QAAQ,IAAI,0BAA0B;CACxG,MAAM,gBAAgB,QAAQ,gBAAgB,QAAQ,IAAI,qBAAqB;CAC/E,MAAM,gBAAgB,QAAQ,kBAAkB;CAChD,MAAM,oBAAoB,QAAQ,sBAAsB;CACxD,MAAM,cAAc,mBAAmB,QAAQ;CAC/C,MAAM,WAAW,gBAAgB,QAAQ;CAGzC,MAAM,YAAY,eAAe;EAAE;EAAa;EAAa;EAAmB;;CAChF,MAAM,eAAe,oBAAoB;EAAE;EAAmB;EAAa;;CAC3E,MAAM,iBAAiB;CAGvB,MAAM,gBAAgB,gBAClB,cAAc;EAAE;EAAc;EAAmB;EAAa,QAAQ;EAAU;MAChF;AAEJ,QAAO;EACL,MAAM;EACN,OAAO;EACP,SAAS;EACT,gBAAgB,QAAQ;AAEtB,aAAU,kBAAkB;AAC5B,kBAAe,kBAAkB;AACjC,OAAI,cAAe,eAAc,kBAAkB;AAGnD,OAAI,SAAS,oBAAoB,SAAS,cACxC,cAAa,kBAAkB;;;;;;;;;;AAgBvC,SAAgB,mBAAmB,OAA6G,IAAgB;CAC9J,MAAM,kBAAkB,KAAK,gBAAgB,QAAQ,IAAI;CACzD,MAAM,eAAe,iBAAiB;CACtC,MAAM,oBAAoB,WAAW,QAAQ,IAAI,0BAA0B;CAC3E,MAAM,cAAc,WAAW,QAAQ,IAAI,oBAAoB;CAC/D,MAAM,WAAW,gBAAgB,KAAK;CAGtC,MAAM,oBAAoB,uBAAuB;CACjD,MAAM,YAAY,eAAe,EAAE,MAAM;CAEzC,IAAI,SAAS;CAGb,MAAM,SAAS;EACb,MAAM;EACN,OAAO;EACP,SAAS;EAET,eAAe,QAAa;AAC1B,YAAU,QAAQ,OAAO,UAAqB;;EAEhD,iBAAiB;AACf,OAAI;IACF,MAAM,UAAU,KAAK,KAAK,QAAQ;AAClC,QAAI,GAAG,WAAW,SAEhB,SAAQ,KAAK;SACR;KAEL,MAAMC,eAAyB;MAC7B;MACA;MACA,GAAI,aAAa,QACb,KACA,CACE,gDACA;MAEN,yBAAyB;MACzB;MACA,GAAG;MACH;MAGA;MACA,yBAAyB;MACzB,8BAA8B;MAC9B,GAAG,kBAAkB;MACrB;MACA;MACA,yBAAyB;MACzB,8BAA8B;MAC9B;MACA;MACA;MACA,yBAAyB;MACzB;MACA;MACA;MACA,yBAAyB;MAEzB;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;;KAIF,MAAM,sBAAuB,KAAK,QAAQ,OAAO,KAAK,KAAK,6BAA6B,WACpF,KAAK,KAAK,yBAAyB,SACnC;AACJ,SAAI,oBACF,cAAa,KACX,GAAG,YAAY,KACf,kCAAkC;KAGtC,MAAM,UAAU,aAAa,KAAK,QAAQ;AAC1C,QAAG,UAAU,QAAQ,EAAE,WAAW;AAClC,QAAG,cAAc,SAAS,SAAS;AACnC,aAAQ,IAAI,yCAAyC,aAAa,QAAQ,KAAK,gBAAgB,2BAA2B,sBAAsB,YAAY;;IAG9J,MAAM,SAAS,KAAK,KAAK,QAAQ,YAAY,QAAQ,OAAO;AAC5D,QAAI;AAAE,QAAG,UAAU,QAAQ,EAAE,WAAW;YAAgB;IACxD,MAAM,WAAW,KAAK,KAAK,QAAQ;AACnC,QAAI,CAAC,GAAG,WAAW,UACjB,IAAG,cAAc,UAAU,oBAAoB;IAEjD,MAAM,UAAU,KAAK,KAAK,QAAQ;AAClC,QAAI,CAAC,GAAG,WAAW,SACjB,IAAG,cAAc,SAAS,oBAAoB;IAIhD,MAAM,YAAY,kBAAkB,QAAQ,OAAO;IACnD,MAAM,QAAQ,KAAK,KAAK,QAAQ;IAChC,MAAM,SAAS,KAAK,KAAK,OAAO;AAChC,QAAI,CAAC,GAAG,WAAW,SAAS;AAC1B,QAAG,UAAU,OAAO,EAAE,WAAW;AACjC,QAAG,cAAc,QAAQ,uBAAuB,cAAc;AAC9D,aAAQ,IAAI,oBAAoB,KAAK,MAAM,KAAK,KAAK,WAAW,cAAc;;IAIhF,MAAM,QAAQ,KAAK,KAAK,QAAQ;IAChC,MAAM,SAAS,KAAK,KAAK,OAAO;AAChC,QAAI,CAAC,GAAG,WAAW,SAAS;AAC1B,QAAG,UAAU,OAAO,EAAE,WAAW;AACjC,QAAG,cAAc,QAAQ,sBAAsB,cAAc;AAC7D,aAAQ,IAAI;;AAId,QAAI;KACF,MAAM,cAAc;AACpB,6BAAwB;MAAE;MAAQ;MAAa;;aACxC,GAAG;AACV,aAAQ,KAAK,kDAAkD;;YAE1D,GAAG;AACV,YAAQ,KAAK,qCAAqC;;;;AAKxD,QAAO;;AAIT,SAAgB,4BAA4B,cAA+B;AACzE,QAAO,uBAAuB;;AAGhC,SAAgB,oBAAoB,OAAgC,UAAkB;AACpF,QAAO,eAAe,EAAE;;AAG1B,SAAgB,mBAAmB,UAA6C,IAAgB;AAC9F,QAAO,gBAAgB;EAAE,GAAG;EAAS,MAAM;;;AAG7C,SAAgB,gBAAgB,UAA6C,IAAgB;AAC3F,QAAO,gBAAgB;EAAE,GAAG;EAAS,MAAM;;;;;;;;;;;;;;;;;;;AAmB7C,SAAgB,UAAU,UAAyE,IAA+B;CAChI,MAAM,EAAE,YAAa,GAAG,YAAY;CACpC,MAAM,gBAAgB,QAAQ,gBAAgB,QAAQ,IAAI,qBAAqB;CAC/E,MAAM,MAAM,gBAAgB;CAE5B,MAAM,MAAM,cAAc,mBAAmB;EAAE;EAAc,UAAU,QAAQ;MAAc;AAC7F,QAAO,CAAC,KAAK,KAAK,OAAO;;;;;;;;;;;;;;;;;AAkB3B,SAAgB,aAAa,UAAyE,IAA+B;CACnI,MAAM,EAAE,YAAa,GAAG,YAAY;CACpC,MAAM,gBAAgB,QAAQ,gBAAgB,QAAQ,IAAI,qBAAqB;CAC/E,MAAM,SAAS,mBAAmB;CAElC,MAAM,MAAM,cAAc,mBAAmB;EAAE;EAAc,UAAU,QAAQ;MAAc;AAC7F,QAAO,CAAC,QAAQ,KAAK,OAAO"}

package/dist/esm/react/build-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-paths.js","names":[],"sources":["../../../build-paths.ts"],"sourcesContent":["// Centralized build configuration\n// This file defines all paths used across the build system\n\nexport const BUILD_PATHS = {\n  // Build output directories\n  BUILD: {\n    ROOT: 'dist',\n    WORKERS: 'dist/workers',\n    ESM: 'dist/esm',\n    CJS: 'dist/cjs',\n    TYPES: 'dist/types'\n  },\n\n  // Source directories\n  SOURCE: {\n    ROOT: 'src',\n    CORE: 'src/core',\n    WASM_SIGNER: 'src/wasm_signer_worker',\n    WASM_VRF: 'src/wasm_vrf_worker',\n    CRITICAL_DIRS: [\n      'src/core',\n      'src/wasm_signer_worker',\n      'src/wasm_vrf_worker'\n    ]\n  },\n\n  // Frontend deployment paths\n  FRONTEND: {\n    ROOT: '../examples/vite/public',\n    SDK: '../examples/vite/public/sdk',\n    WORKERS: '../examples/vite/public/sdk/workers'\n  },\n\n  // Runtime paths (used by workers and tests)\n  RUNTIME: {\n    SDK_BASE: '/sdk',\n    WORKERS_BASE: '/sdk/workers',\n    VRF_WORKER: '/sdk/workers/web3authn-vrf.worker.js',\n    SIGNER_WORKER: '/sdk/workers/web3authn-signer.worker.js'\n  },\n\n  // Worker file names\n  WORKERS: {\n    VRF: 'web3authn-vrf.worker.js',\n    SIGNER: 'web3authn-signer.worker.js',\n    OFFLINE_SW: 'offline-export-sw.js',\n    WASM_VRF_JS: 'wasm_vrf_worker.js',\n    WASM_VRF_WASM: 'wasm_vrf_worker_bg.wasm',\n    WASM_SIGNER_JS: 'wasm_signer_worker.js',\n    WASM_SIGNER_WASM: 'wasm_signer_worker_bg.wasm'\n  },\n\n  // Test worker file paths (for test files)\n  TEST_WORKERS: {\n    VRF: '/sdk/workers/web3authn-vrf.worker.js',\n    SIGNER: '/sdk/workers/web3authn-signer.worker.js',\n    WASM_VRF_JS: '/sdk/workers/wasm_vrf_worker.js',\n    WASM_VRF_WASM: '/sdk/workers/wasm_vrf_worker_bg.wasm',\n    WASM_SIGNER_JS: '/sdk/workers/wasm_signer_worker.js',\n    WASM_SIGNER_WASM: '/sdk/workers/wasm_signer_worker_bg.wasm'\n  }\n} as const;\n\n// Helper functions\nexport const getWorkerPath = (workerName: string): string => `${BUILD_PATHS.BUILD.WORKERS}/${workerName}`;\nexport const getRuntimeWorkerPath = (workerName: string): string => `${BUILD_PATHS.RUNTIME.WORKERS_BASE}/${workerName}`;\nexport const getFrontendWorkerPath = (workerName: string): string => `${BUILD_PATHS.FRONTEND.WORKERS}/${workerName}`;\n\n// Default export for easier importing\nexport default BUILD_PATHS;\n"],"mappings":";AAGA,MAAa,cAAc;CAEzB,OAAO;EACL,MAAM;EACN,SAAS;EACT,KAAK;EACL,KAAK;EACL,OAAO;;CAIT,QAAQ;EACN,MAAM;EACN,MAAM;EACN,aAAa;EACb,UAAU;EACV,eAAe;GACb;GACA;GACA;;;CAKJ,UAAU;EACR,MAAM;EACN,KAAK;EACL,SAAS;;CAIX,SAAS;EACP,UAAU;EACV,cAAc;EACd,YAAY;EACZ,eAAe;;CAIjB,SAAS;EACP,KAAK;EACL,QAAQ;EACR,YAAY;EACZ,aAAa;EACb,eAAe;EACf,gBAAgB;EAChB,kBAAkB;;CAIpB,cAAc;EACZ,KAAK;EACL,QAAQ;EACR,aAAa;EACb,eAAe;EACf,gBAAgB;EAChB,kBAAkB"}

package/dist/esm/react/components/AccountMenuButton/LinkedDevicesModal-BCrFe5p3.css

@@ -0,0 +1,452 @@
+/* Linked Devices Modal Styles */
+
+.w3a-access-keys-modal-backdrop {
+  position: fixed;
+  top: 0;
+  left: 0;
+  height: 100%;
+  width: 100%;
+  /* Ensure this modal stays below the wallet iframe overlay */
+  z-index: var(--w3a-z-underlay-backdrop, calc(var(--w3a-wallet-overlay-z, 2147483646) - var(--w3a-wallet-underlay-backdrop-offset, 2)));
+  background: oklch(0.2 0.01 240 / 0.8);
+  backdrop-filter: blur(8px);
+  display: flex;
+  justify-content: center;
+  align-items: center;
+  animation: backdrop-opacity 32ms ease-in;
+  will-change: opacity;
+}
+
+.w3a-access-keys-modal-inner {
+  position: relative;
+  z-index: var(--w3a-z-underlay-content, calc(var(--w3a-wallet-overlay-z, 2147483646) - var(--w3a-wallet-underlay-content-offset, 1)));
+  display: grid;
+  place-items: center;
+  height: 100%;
+  width: 100%;
+  max-width: 480;
+  border-radius: 12px;
+  box-shadow: 0 4px 12px rgba(0, 0, 0, 0.15);
+  overflow: visible;
+}
+
+.w3a-access-keys-modal-content {
+  position: relative;
+  display: flex;
+  flex-direction: column;
+  padding: 1rem;
+  overflow: visible;
+  min-height: 200px;
+  max-width: 480px;
+  min-width: 340px;
+  background: var(--w3a-colors-colorBackground);
+  border: 1px solid var(--w3a-colors-borderPrimary);
+  border-radius: 2rem;
+}
+
+.w3a-access-keys-modal-close {
+  position: absolute;
+  top: 1rem;
+  right: 1rem;
+  background: none;
+  border: none;
+  font-size: 1rem;
+  font-weight: 600;
+  color: var(--w3a-colors-textMuted);
+  cursor: pointer;
+  padding: 24px;
+  border-radius: 2rem;
+  transition: all 0.2s ease;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  width: 32px;
+  height: 32px;
+}
+
+.w3a-access-keys-modal-close:hover {
+  color: var(--w3a-colors-textPrimary);
+  background: var(--w3a-colors-surface);
+}
+
+.w3a-access-keys-modal-header {
+  display: flex;
+  justify-content: space-between;
+  box-sizing: border-box;
+  align-items: center;
+  padding: 1rem;
+}
+
+.w3a-access-keys-modal-title {
+  font-size: 1.5rem;
+  font-weight: 700;
+  color: var(--w3a-colors-textPrimary);
+  margin: 0;
+}
+
+.w3a-access-keys-modal-subtitle {
+  font-size: 1rem;
+  font-weight: 600;
+  color: var(--w3a-colors-textPrimary);
+  margin: 16px 0 8px;
+}
+
+.w3a-access-keys-section {
+  margin-top: 12px;
+}
+
+.theme-light .w3a-access-key-current {
+  color: var(--w3a-colors-blue500, var(--w3a-colors-primary));
+}
+
+.theme-dark .w3a-access-key-current {
+  color: var(--w3a-colors-primary, var(--w3a-colors-blue500));
+}
+
+
+/* Loading, error, and empty states */
+.w3a-access-keys-error,
+.w3a-access-keys-empty {
+  text-align: center;
+  padding: 32px;
+  color: var(--w3a-colors-textMuted);
+  flex: 1;
+  display: flex;
+  flex-direction: column;
+  justify-content: center;
+  align-items: center;
+}
+
+.w3a-access-keys-error { color: var(--w3a-colors-error); }
+
+.w3a-access-keys-error .w3a-btn {
+  margin-top: 16px;
+}
+
+/* Responsive Design */
+@media (max-width: 768px) {
+  .w3a-access-keys-modal-outer {
+    padding: 8px;
+  }
+
+  .w3a-access-keys-modal-inner {
+    max-width: 100%;
+  max-height: 90vh;
+  /* Prefer dynamic viewport height on capable browsers */
+  @supports (height: 1dvh) {
+    max-height: 90dvh;
+  }
+  }
+
+  .w3a-access-keys-modal-header {
+    padding: 16px;
+  }
+
+  .w3a-access-keys-modal-content {
+    padding: 0 16px 16px;
+    max-width: 480px;
+  }
+}
+
+@media (max-width: 480px) {
+  .w3a-key-item {
+    max-width: 100%;
+  }
+}
+
+/* Linked Devices List */
+.w3a-keys-list {
+  display: flex;
+  flex-direction: column;
+  gap: 8px;
+  flex: 1;
+  overflow-x: visible;
+}
+
+.w3a-key-item {
+  box-sizing: border-box;
+  display: grid;
+  align-items: center;
+  background: var(--w3a-colors-surface);
+  border: 1px solid var(--w3a-colors-borderPrimary);
+  border-radius: 1rem;
+  padding: 1rem;
+  transition: all 0.2s ease;
+  overflow: visible;
+  animation: fadeInKeyItem 0.2s ease-in;
+}
+
+.w3a-key-content {
+  display: flex;
+  flex-direction: row;
+  justify-content: center;
+  align-items: center;
+  gap: 1rem;
+}
+
+.w3a-key-details {
+  flex: 1;
+  min-width: 0;
+  font-size: 0.9rem;
+  font-weight: 500;
+  line-height: 1rem;
+  display: grid;
+  gap: 0.5rem;
+}
+
+.w3a-key-details .mono {
+  word-break: break-all;
+}
+
+.w3a-key-details .body {
+  margin-bottom: 0;
+}
+
+.w3a-key-details .body:last-child {
+  margin-bottom: 0;
+}
+
+.w3a-key-status {
+  flex-shrink: 0;
+}
+
+.w3a-status-badge {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 92px;
+  padding: 2px 8px;
+  background: transparent;
+  color: var(--w3a-colors-success);
+  border: 1px solid var(--w3a-colors-success);
+  border-radius: 12px;
+  font-size: 0.75rem;
+  font-weight: 500;
+}
+
+.theme-light .w3a-status-badge.w3a-full-access {
+  color: var(--w3a-colors-blue500);
+  border-color: var(--w3a-colors-blue500);
+}
+
+.w3a-key-header {
+  display: flex;
+  align-items: center;
+  gap: var(--w3a-spacing-sm);
+  color: var(--w3a-colors-textPrimary);
+}
+
+.w3a-copyable-key {
+  cursor: pointer;
+  flex: 1;
+  margin: 0;
+  transition: all 0.2s ease;
+  color: var(--w3a-colors-textPrimary);
+}
+
+.w3a-copyable-key:hover {
+  cursor: pointer;
+  color: var(--w3a-colors-primary);
+}
+
+/* Tooltip styles */
+.w3a-copyable-key {
+  position: relative;
+}
+
+.w3a-copy-tooltip {
+  position: absolute;
+  bottom: 100%;
+  left: 50%;
+  transform: translateX(-50%);
+  background: var(--w3a-colors-surface2);
+  color: var(--w3a-colors-textPrimary);
+  border: 1px solid var(--w3a-colors-textMuted);
+  padding: 0.25rem 0.5rem;
+  border-radius: 1rem;
+  font-size: 0.75rem;
+  white-space: nowrap;
+  z-index: 1000;
+  margin-bottom: 0.25rem;
+  box-shadow: 0 2px 8px rgba(0, 0, 0, 0.15);
+  animation: tooltipFadeIn 0.1s ease-in-out;
+  pointer-events: none;
+}
+
+.w3a-copy-tooltip::after {
+  content: '';
+  position: absolute;
+  top: 100%;
+  left: 50%;
+  transform: translateX(-50%);
+  border: 4px solid transparent;
+  border-top-color: var(--w3a-colors-surface);
+}
+
+/* Registered timestamp styling */
+.w3a-registered {
+  font-size: 0.9rem;
+  color: var(--w3a-colors-textPrimary);
+}
+
+/* Theme-specific contrast for registered timestamps */
+.theme-dark .w3a-registered {
+  color: var(--w3a-colors-textPrimary);
+}
+.theme-light .w3a-registered {
+  color: var(--w3a-colors-textPrimary);
+}
+
+/* Inline device row layout */
+.w3a-device-row {
+  display: inline-flex;
+  align-items: center;
+  gap: 8px;
+}
+
+/* Device badge */
+.w3a-device-badge {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  padding: 4px 8px;
+  border-radius: 999px;
+  border: 1px solid var(--w3a-colors-borderPrimary);
+  color: #fff;
+  background: var(--w3a-colors-buttonBackground);
+  font-size: 0.825rem;
+  font-weight: 600;
+  line-height: 1;
+}
+
+.w3a-current-device-text {
+  opacity: 0.85;
+}
+
+.w3a-separator {
+  opacity: 0.6;
+}
+
+@keyframes tooltipFadeIn {
+  from {
+    opacity: 0;
+    transform: translateX(-50%) translateY(4px);
+  }
+  to {
+    opacity: 1;
+    transform: translateX(-50%) translateY(0);
+  }
+}
+
+@keyframes copiedPulse {
+  0% {
+    transform: scale(1);
+  }
+  50% {
+    transform: scale(1.05);
+  }
+  100% {
+    transform: scale(1);
+  }
+}
+
+/* Button System */
+.w3a-btn {
+  padding: 4px 8px;
+  border: none;
+  border-radius: 8px;
+  font-size: 0.9rem;
+  font-weight: 500;
+  min-width: 2rem;
+  min-height: 2rem;
+  cursor: pointer;
+  transition: all 0.2s ease;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  gap: 2px;
+}
+
+.w3a-btn-primary {
+  background: var(--w3a-colors-primary);
+  color: #fff;
+}
+
+.w3a-btn-primary:hover:not(:disabled) {
+  background: var(--w3a-colors-primaryHover);
+  box-shadow: 0 2px 4px var(--w3a-shadows-sm);
+}
+
+.w3a-btn-primary:disabled {
+  opacity: 0.6;
+  cursor: not-allowed;
+  transform: none;
+}
+
+.w3a-btn-danger {
+  background: var(--w3a-colors-error);
+  color: #fff;
+}
+
+.w3a-btn-danger:hover:not(:disabled) {
+  background: var(--w3a-colors-error);
+  box-shadow: 0 2px 4px var(--w3a-shadows-sm);
+}
+
+.w3a-btn-danger:disabled {
+  opacity: 0.6;
+  cursor: not-allowed;
+  transform: none;
+}
+
+.w3a-spinner {
+  width: 16px;
+  height: 16px;
+  border: 2px solid var(--w3a-colors-borderPrimary);
+  border-top: 2px solid var(--w3a-colors-primary);
+  border-radius: 50%;
+  animation: spin 1s linear infinite;
+}
+
+/* Button-local spinner: match text size inside small buttons */
+.w3a-btn .w3a-spinner,
+.w3a-btn-primary .w3a-spinner,
+.w3a-btn-danger .w3a-spinner,
+.w3a-btn-disabled .w3a-spinner {
+  width: 1em;
+  height: 1em;
+  border-width: 2px;
+  margin-left: 0;
+}
+
+/* Danger button spinner: use white instead of primary/blue */
+.w3a-btn-danger .w3a-spinner {
+  border-color: rgba(255, 255, 255, 0.4);
+  border-top-color: #ffffff;
+}
+
+@keyframes spin {
+  0% { transform: rotate(0deg); }
+  100% { transform: rotate(360deg); }
+}
+
+@keyframes fadeInKeyItem {
+  from {
+    opacity: 0;
+  }
+  to {
+    opacity: 1;
+  }
+}
+
+@keyframes backdrop-opacity {
+  from {
+    opacity: 0;
+  }
+  to {
+    opacity: 1;
+  }
+}
+
+
+/*# sourceMappingURL=LinkedDevicesModal-BCrFe5p3.css.map*/

package/dist/esm/react/components/AccountMenuButton/LinkedDevicesModal-BCrFe5p3.css.map

@@ -0,0 +1 @@
+{"version":3,"file":"LinkedDevicesModal-BCrFe5p3.css","names":[],"sources":["../../../../../src/react/components/AccountMenuButton/LinkedDevicesModal.css"],"sourcesContent":["/* Linked Devices Modal Styles */\n\n.w3a-access-keys-modal-backdrop {\n  position: fixed;\n  top: 0;\n  left: 0;\n  height: 100%;\n  width: 100%;\n  /* Ensure this modal stays below the wallet iframe overlay */\n  z-index: var(--w3a-z-underlay-backdrop, calc(var(--w3a-wallet-overlay-z, 2147483646) - var(--w3a-wallet-underlay-backdrop-offset, 2)));\n  background: oklch(0.2 0.01 240 / 0.8);\n  backdrop-filter: blur(8px);\n  display: flex;\n  justify-content: center;\n  align-items: center;\n  animation: backdrop-opacity 32ms ease-in;\n  will-change: opacity;\n}\n\n.w3a-access-keys-modal-inner {\n  position: relative;\n  z-index: var(--w3a-z-underlay-content, calc(var(--w3a-wallet-overlay-z, 2147483646) - var(--w3a-wallet-underlay-content-offset, 1)));\n  display: grid;\n  place-items: center;\n  height: 100%;\n  width: 100%;\n  max-width: 480;\n  border-radius: 12px;\n  box-shadow: 0 4px 12px rgba(0, 0, 0, 0.15);\n  overflow: visible;\n}\n\n.w3a-access-keys-modal-content {\n  position: relative;\n  display: flex;\n  flex-direction: column;\n  padding: 1rem;\n  overflow: visible;\n  min-height: 200px;\n  max-width: 480px;\n  min-width: 340px;\n  background: var(--w3a-colors-colorBackground);\n  border: 1px solid var(--w3a-colors-borderPrimary);\n  border-radius: 2rem;\n}\n\n.w3a-access-keys-modal-close {\n  position: absolute;\n  top: 1rem;\n  right: 1rem;\n  background: none;\n  border: none;\n  font-size: 1rem;\n  font-weight: 600;\n  color: var(--w3a-colors-textMuted);\n  cursor: pointer;\n  padding: 24px;\n  border-radius: 2rem;\n  transition: all 0.2s ease;\n  display: flex;\n  align-items: center;\n  justify-content: center;\n  width: 32px;\n  height: 32px;\n}\n\n.w3a-access-keys-modal-close:hover {\n  color: var(--w3a-colors-textPrimary);\n  background: var(--w3a-colors-surface);\n}\n\n.w3a-access-keys-modal-header {\n  display: flex;\n  justify-content: space-between;\n  box-sizing: border-box;\n  align-items: center;\n  padding: 1rem;\n}\n\n.w3a-access-keys-modal-title {\n  font-size: 1.5rem;\n  font-weight: 700;\n  color: var(--w3a-colors-textPrimary);\n  margin: 0;\n}\n\n.w3a-access-keys-modal-subtitle {\n  font-size: 1rem;\n  font-weight: 600;\n  color: var(--w3a-colors-textPrimary);\n  margin: 16px 0 8px;\n}\n\n.w3a-access-keys-section {\n  margin-top: 12px;\n}\n\n.theme-light .w3a-access-key-current {\n  color: var(--w3a-colors-blue500, var(--w3a-colors-primary));\n}\n\n.theme-dark .w3a-access-key-current {\n  color: var(--w3a-colors-primary, var(--w3a-colors-blue500));\n}\n\n\n/* Loading, error, and empty states */\n.w3a-access-keys-error,\n.w3a-access-keys-empty {\n  text-align: center;\n  padding: 32px;\n  color: var(--w3a-colors-textMuted);\n  flex: 1;\n  display: flex;\n  flex-direction: column;\n  justify-content: center;\n  align-items: center;\n}\n\n.w3a-access-keys-error { color: var(--w3a-colors-error); }\n\n.w3a-access-keys-error .w3a-btn {\n  margin-top: 16px;\n}\n\n/* Responsive Design */\n@media (max-width: 768px) {\n  .w3a-access-keys-modal-outer {\n    padding: 8px;\n  }\n\n  .w3a-access-keys-modal-inner {\n    max-width: 100%;\n  max-height: 90vh;\n  /* Prefer dynamic viewport height on capable browsers */\n  @supports (height: 1dvh) {\n    max-height: 90dvh;\n  }\n  }\n\n  .w3a-access-keys-modal-header {\n    padding: 16px;\n  }\n\n  .w3a-access-keys-modal-content {\n    padding: 0 16px 16px;\n    max-width: 480px;\n  }\n}\n\n@media (max-width: 480px) {\n  .w3a-key-item {\n    max-width: 100%;\n  }\n}\n\n/* Linked Devices List */\n.w3a-keys-list {\n  display: flex;\n  flex-direction: column;\n  gap: 8px;\n  flex: 1;\n  overflow-x: visible;\n}\n\n.w3a-key-item {\n  box-sizing: border-box;\n  display: grid;\n  align-items: center;\n  background: var(--w3a-colors-surface);\n  border: 1px solid var(--w3a-colors-borderPrimary);\n  border-radius: 1rem;\n  padding: 1rem;\n  transition: all 0.2s ease;\n  overflow: visible;\n  animation: fadeInKeyItem 0.2s ease-in;\n}\n\n.w3a-key-content {\n  display: flex;\n  flex-direction: row;\n  justify-content: center;\n  align-items: center;\n  gap: 1rem;\n}\n\n.w3a-key-details {\n  flex: 1;\n  min-width: 0;\n  font-size: 0.9rem;\n  font-weight: 500;\n  line-height: 1rem;\n  display: grid;\n  gap: 0.5rem;\n}\n\n.w3a-key-details .mono {\n  word-break: break-all;\n}\n\n.w3a-key-details .body {\n  margin-bottom: 0;\n}\n\n.w3a-key-details .body:last-child {\n  margin-bottom: 0;\n}\n\n.w3a-key-status {\n  flex-shrink: 0;\n}\n\n.w3a-status-badge {\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  width: 92px;\n  padding: 2px 8px;\n  background: transparent;\n  color: var(--w3a-colors-success);\n  border: 1px solid var(--w3a-colors-success);\n  border-radius: 12px;\n  font-size: 0.75rem;\n  font-weight: 500;\n}\n\n.theme-light .w3a-status-badge.w3a-full-access {\n  color: var(--w3a-colors-blue500);\n  border-color: var(--w3a-colors-blue500);\n}\n\n.w3a-key-header {\n  display: flex;\n  align-items: center;\n  gap: var(--w3a-spacing-sm);\n  color: var(--w3a-colors-textPrimary);\n}\n\n.w3a-copyable-key {\n  cursor: pointer;\n  flex: 1;\n  margin: 0;\n  transition: all 0.2s ease;\n  color: var(--w3a-colors-textPrimary);\n}\n\n.w3a-copyable-key:hover {\n  cursor: pointer;\n  color: var(--w3a-colors-primary);\n}\n\n/* Tooltip styles */\n.w3a-copyable-key {\n  position: relative;\n}\n\n.w3a-copy-tooltip {\n  position: absolute;\n  bottom: 100%;\n  left: 50%;\n  transform: translateX(-50%);\n  background: var(--w3a-colors-surface2);\n  color: var(--w3a-colors-textPrimary);\n  border: 1px solid var(--w3a-colors-textMuted);\n  padding: 0.25rem 0.5rem;\n  border-radius: 1rem;\n  font-size: 0.75rem;\n  white-space: nowrap;\n  z-index: 1000;\n  margin-bottom: 0.25rem;\n  box-shadow: 0 2px 8px rgba(0, 0, 0, 0.15);\n  animation: tooltipFadeIn 0.1s ease-in-out;\n  pointer-events: none;\n}\n\n.w3a-copy-tooltip::after {\n  content: '';\n  position: absolute;\n  top: 100%;\n  left: 50%;\n  transform: translateX(-50%);\n  border: 4px solid transparent;\n  border-top-color: var(--w3a-colors-surface);\n}\n\n/* Registered timestamp styling */\n.w3a-registered {\n  font-size: 0.9rem;\n  color: var(--w3a-colors-textPrimary);\n}\n\n/* Theme-specific contrast for registered timestamps */\n.theme-dark .w3a-registered {\n  color: var(--w3a-colors-textPrimary);\n}\n.theme-light .w3a-registered {\n  color: var(--w3a-colors-textPrimary);\n}\n\n/* Inline device row layout */\n.w3a-device-row {\n  display: inline-flex;\n  align-items: center;\n  gap: 8px;\n}\n\n/* Device badge */\n.w3a-device-badge {\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  padding: 4px 8px;\n  border-radius: 999px;\n  border: 1px solid var(--w3a-colors-borderPrimary);\n  color: #fff;\n  background: var(--w3a-colors-buttonBackground);\n  font-size: 0.825rem;\n  font-weight: 600;\n  line-height: 1;\n}\n\n.w3a-current-device-text {\n  opacity: 0.85;\n}\n\n.w3a-separator {\n  opacity: 0.6;\n}\n\n@keyframes tooltipFadeIn {\n  from {\n    opacity: 0;\n    transform: translateX(-50%) translateY(4px);\n  }\n  to {\n    opacity: 1;\n    transform: translateX(-50%) translateY(0);\n  }\n}\n\n@keyframes copiedPulse {\n  0% {\n    transform: scale(1);\n  }\n  50% {\n    transform: scale(1.05);\n  }\n  100% {\n    transform: scale(1);\n  }\n}\n\n/* Button System */\n.w3a-btn {\n  padding: 4px 8px;\n  border: none;\n  border-radius: 8px;\n  font-size: 0.9rem;\n  font-weight: 500;\n  min-width: 2rem;\n  min-height: 2rem;\n  cursor: pointer;\n  transition: all 0.2s ease;\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  gap: 2px;\n}\n\n.w3a-btn-primary {\n  background: var(--w3a-colors-primary);\n  color: #fff;\n}\n\n.w3a-btn-primary:hover:not(:disabled) {\n  background: var(--w3a-colors-primaryHover);\n  box-shadow: 0 2px 4px var(--w3a-shadows-sm);\n}\n\n.w3a-btn-primary:disabled {\n  opacity: 0.6;\n  cursor: not-allowed;\n  transform: none;\n}\n\n.w3a-btn-danger {\n  background: var(--w3a-colors-error);\n  color: #fff;\n}\n\n.w3a-btn-danger:hover:not(:disabled) {\n  background: var(--w3a-colors-error);\n  box-shadow: 0 2px 4px var(--w3a-shadows-sm);\n}\n\n.w3a-btn-danger:disabled {\n  opacity: 0.6;\n  cursor: not-allowed;\n  transform: none;\n}\n\n.w3a-spinner {\n  width: 16px;\n  height: 16px;\n  border: 2px solid var(--w3a-colors-borderPrimary);\n  border-top: 2px solid var(--w3a-colors-primary);\n  border-radius: 50%;\n  animation: spin 1s linear infinite;\n}\n\n/* Button-local spinner: match text size inside small buttons */\n.w3a-btn .w3a-spinner,\n.w3a-btn-primary .w3a-spinner,\n.w3a-btn-danger .w3a-spinner,\n.w3a-btn-disabled .w3a-spinner {\n  width: 1em;\n  height: 1em;\n  border-width: 2px;\n  margin-left: 0;\n}\n\n/* Danger button spinner: use white instead of primary/blue */\n.w3a-btn-danger .w3a-spinner {\n  border-color: rgba(255, 255, 255, 0.4);\n  border-top-color: #ffffff;\n}\n\n@keyframes spin {\n  0% { transform: rotate(0deg); }\n  100% { transform: rotate(360deg); }\n}\n\n@keyframes fadeInKeyItem {\n  from {\n    opacity: 0;\n  }\n  to {\n    opacity: 1;\n  }\n}\n\n@keyframes backdrop-opacity {\n  from {\n    opacity: 0;\n  }\n  to {\n    opacity: 1;\n  }\n}\n"],"mappings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}