@tatchi-xyz/sdk 0.21.0 → 0.31.0

package/dist/esm/sdk/sdkSentEvents-CzAZBFjP.js

@@ -0,0 +1,109 @@
+//#region src/core/types/sdkSentEvents.ts
+let RegistrationPhase = /* @__PURE__ */ function(RegistrationPhase$1) {
+	RegistrationPhase$1["STEP_1_WEBAUTHN_VERIFICATION"] = "webauthn-verification";
+	RegistrationPhase$1["STEP_2_KEY_GENERATION"] = "key-generation";
+	RegistrationPhase$1["STEP_3_CONTRACT_PRE_CHECK"] = "contract-pre-check";
+	RegistrationPhase$1["STEP_4_ACCESS_KEY_ADDITION"] = "access-key-addition";
+	RegistrationPhase$1["STEP_5_CONTRACT_REGISTRATION"] = "contract-registration";
+	RegistrationPhase$1["STEP_6_ACCOUNT_VERIFICATION"] = "account-verification";
+	RegistrationPhase$1["STEP_7_DATABASE_STORAGE"] = "database-storage";
+	RegistrationPhase$1["STEP_8_REGISTRATION_COMPLETE"] = "registration-complete";
+	RegistrationPhase$1["REGISTRATION_ERROR"] = "error";
+	return RegistrationPhase$1;
+}({});
+let RegistrationStatus = /* @__PURE__ */ function(RegistrationStatus$1) {
+	RegistrationStatus$1["PROGRESS"] = "progress";
+	RegistrationStatus$1["SUCCESS"] = "success";
+	RegistrationStatus$1["ERROR"] = "error";
+	return RegistrationStatus$1;
+}({});
+let LoginPhase = /* @__PURE__ */ function(LoginPhase$1) {
+	LoginPhase$1["STEP_1_PREPARATION"] = "preparation";
+	LoginPhase$1["STEP_2_WEBAUTHN_ASSERTION"] = "webauthn-assertion";
+	LoginPhase$1["STEP_3_VRF_UNLOCK"] = "vrf-unlock";
+	LoginPhase$1["STEP_4_LOGIN_COMPLETE"] = "login-complete";
+	LoginPhase$1["LOGIN_ERROR"] = "login-error";
+	return LoginPhase$1;
+}({});
+let LoginStatus = /* @__PURE__ */ function(LoginStatus$1) {
+	LoginStatus$1["PROGRESS"] = "progress";
+	LoginStatus$1["SUCCESS"] = "success";
+	LoginStatus$1["ERROR"] = "error";
+	return LoginStatus$1;
+}({});
+let ActionPhase = /* @__PURE__ */ function(ActionPhase$1) {
+	ActionPhase$1["STEP_1_PREPARATION"] = "preparation";
+	ActionPhase$1["STEP_2_USER_CONFIRMATION"] = "user-confirmation";
+	ActionPhase$1["STEP_3_WEBAUTHN_AUTHENTICATION"] = "webauthn-authentication";
+	ActionPhase$1["STEP_4_AUTHENTICATION_COMPLETE"] = "authentication-complete";
+	ActionPhase$1["STEP_5_TRANSACTION_SIGNING_PROGRESS"] = "transaction-signing-progress";
+	ActionPhase$1["STEP_6_TRANSACTION_SIGNING_COMPLETE"] = "transaction-signing-complete";
+	ActionPhase$1["WASM_ERROR"] = "wasm-error";
+	ActionPhase$1["STEP_7_BROADCASTING"] = "broadcasting";
+	ActionPhase$1["STEP_8_ACTION_COMPLETE"] = "action-complete";
+	ActionPhase$1["ACTION_ERROR"] = "action-error";
+	return ActionPhase$1;
+}({});
+let ActionStatus = /* @__PURE__ */ function(ActionStatus$1) {
+	ActionStatus$1["PROGRESS"] = "progress";
+	ActionStatus$1["SUCCESS"] = "success";
+	ActionStatus$1["ERROR"] = "error";
+	return ActionStatus$1;
+}({});
+let SyncAccountPhase = /* @__PURE__ */ function(SyncAccountPhase$1) {
+	SyncAccountPhase$1["STEP_1_PREPARATION"] = "preparation";
+	SyncAccountPhase$1["STEP_2_WEBAUTHN_AUTHENTICATION"] = "webauthn-authentication";
+	SyncAccountPhase$1["STEP_3_SYNC_AUTHENTICATORS_ONCHAIN"] = "sync-authenticators-onchain";
+	SyncAccountPhase$1["STEP_4_AUTHENTICATOR_SAVED"] = "authenticator-saved";
+	SyncAccountPhase$1["STEP_5_SYNC_ACCOUNT_COMPLETE"] = "sync-account-complete";
+	SyncAccountPhase$1["ERROR"] = "error";
+	return SyncAccountPhase$1;
+}({});
+let SyncAccountStatus = /* @__PURE__ */ function(SyncAccountStatus$1) {
+	SyncAccountStatus$1["PROGRESS"] = "progress";
+	SyncAccountStatus$1["SUCCESS"] = "success";
+	SyncAccountStatus$1["ERROR"] = "error";
+	return SyncAccountStatus$1;
+}({});
+let DeviceLinkingPhase = /* @__PURE__ */ function(DeviceLinkingPhase$1) {
+	DeviceLinkingPhase$1["STEP_1_QR_CODE_GENERATED"] = "qr-code-generated";
+	DeviceLinkingPhase$1["STEP_2_SCANNING"] = "scanning";
+	DeviceLinkingPhase$1["STEP_3_AUTHORIZATION"] = "authorization";
+	DeviceLinkingPhase$1["STEP_4_POLLING"] = "polling";
+	DeviceLinkingPhase$1["STEP_5_ADDKEY_DETECTED"] = "addkey-detected";
+	DeviceLinkingPhase$1["STEP_6_REGISTRATION"] = "registration";
+	DeviceLinkingPhase$1["STEP_7_LINKING_COMPLETE"] = "linking-complete";
+	DeviceLinkingPhase$1["STEP_8_AUTO_LOGIN"] = "auto-login";
+	DeviceLinkingPhase$1["IDLE"] = "idle";
+	DeviceLinkingPhase$1["REGISTRATION_ERROR"] = "registration-error";
+	DeviceLinkingPhase$1["LOGIN_ERROR"] = "login-error";
+	DeviceLinkingPhase$1["DEVICE_LINKING_ERROR"] = "error";
+	return DeviceLinkingPhase$1;
+}({});
+let DeviceLinkingStatus = /* @__PURE__ */ function(DeviceLinkingStatus$1) {
+	DeviceLinkingStatus$1["PROGRESS"] = "progress";
+	DeviceLinkingStatus$1["SUCCESS"] = "success";
+	DeviceLinkingStatus$1["ERROR"] = "error";
+	return DeviceLinkingStatus$1;
+}({});
+let EmailRecoveryPhase = /* @__PURE__ */ function(EmailRecoveryPhase$1) {
+	EmailRecoveryPhase$1["STEP_1_PREPARATION"] = "email-recovery-preparation";
+	EmailRecoveryPhase$1["STEP_2_TOUCH_ID_REGISTRATION"] = "email-recovery-touch-id-registration";
+	EmailRecoveryPhase$1["STEP_3_AWAIT_EMAIL"] = "email-recovery-await-email";
+	EmailRecoveryPhase$1["STEP_4_POLLING_ADD_KEY"] = "email-recovery-polling-add-key";
+	EmailRecoveryPhase$1["STEP_4_POLLING_VERIFICATION_RESULT"] = "email-recovery-polling-add-key";
+	EmailRecoveryPhase$1["STEP_5_FINALIZING_REGISTRATION"] = "email-recovery-finalizing-registration";
+	EmailRecoveryPhase$1["STEP_6_COMPLETE"] = "email-recovery-complete";
+	EmailRecoveryPhase$1["ERROR"] = "email-recovery-error";
+	EmailRecoveryPhase$1["RESUMED_FROM_PENDING"] = "email-recovery-resumed-from-pending";
+	return EmailRecoveryPhase$1;
+}({});
+let EmailRecoveryStatus = /* @__PURE__ */ function(EmailRecoveryStatus$1) {
+	EmailRecoveryStatus$1["PROGRESS"] = "progress";
+	EmailRecoveryStatus$1["SUCCESS"] = "success";
+	EmailRecoveryStatus$1["ERROR"] = "error";
+	return EmailRecoveryStatus$1;
+}({});
+
+//#endregion
+export { ActionPhase, ActionStatus, DeviceLinkingPhase, DeviceLinkingStatus, EmailRecoveryPhase, EmailRecoveryStatus, LoginPhase, LoginStatus, RegistrationPhase, RegistrationStatus, SyncAccountPhase, SyncAccountStatus };

package/dist/esm/sdk/signNEP413-DsyWH_Jo.js

@@ -0,0 +1,95 @@
+import { mergeSignerMode } from "./signer-worker-DK847sXj.js";
+import { base64Encode } from "./base64-dqpWgddX.js";
+import { ActionPhase, ActionStatus } from "./sdkSentEvents-CzAZBFjP.js";
+
+//#region src/core/TatchiPasskey/signNEP413.ts
+/**
+* Sign a NEP-413 message using the user's passkey-derived private key
+*
+* This function implements the NEP-413 standard for off-chain message signing:
+* - Creates a payload with message, recipient, nonce, and state
+* - Serializes using Borsh
+* - Adds NEP-413 prefix (2^31 + 413)
+* - Hashes with SHA-256
+* - Signs with Ed25519
+* - Returns base64-encoded signature
+*
+* @param context - TatchiPasskey context
+* @param nearAccountId - NEAR account ID to sign with
+* @param params - NEP-413 signing parameters
+* @param options - Action options for event handling
+* @returns Promise resolving to signing result
+*/
+async function signNEP413Message(args) {
+	const { context, nearAccountId, params, options } = args;
+	const confirmerText = options?.confirmerText;
+	const confirmationConfigOverride = options?.confirmationConfig;
+	const { webAuthnManager } = context;
+	const baseSignerMode = webAuthnManager.getUserPreferences().getSignerMode();
+	const signerMode = mergeSignerMode(baseSignerMode, options.signerMode);
+	try {
+		options?.onEvent?.({
+			step: 1,
+			phase: ActionPhase.STEP_1_PREPARATION,
+			status: ActionStatus.PROGRESS,
+			message: "Preparing NEP-413 message signing"
+		});
+		const [vrfStatus, userData] = await Promise.all([webAuthnManager.checkVrfStatus(), webAuthnManager.getLastUser()]);
+		if (!vrfStatus.active) throw new Error("User not authenticated. Please login first.");
+		if (!userData || !userData.clientNearPublicKey) throw new Error(`User data not found for ${nearAccountId}`);
+		const nonceBytes = new Uint8Array(32);
+		if (typeof crypto === "undefined" || typeof crypto.getRandomValues !== "function") throw new Error("Secure random not available to generate NEP-413 nonce");
+		crypto.getRandomValues(nonceBytes);
+		const nonce = base64Encode(nonceBytes);
+		options?.onEvent?.({
+			step: 5,
+			phase: ActionPhase.STEP_5_TRANSACTION_SIGNING_PROGRESS,
+			status: ActionStatus.PROGRESS,
+			message: "Signing NEP-413 message"
+		});
+		const result = await context.webAuthnManager.signNEP413Message({
+			message: params.message,
+			recipient: params.recipient,
+			nonce,
+			state: params.state || null,
+			accountId: nearAccountId,
+			signerMode,
+			title: confirmerText?.title,
+			body: confirmerText?.body,
+			confirmationConfigOverride
+		});
+		if (result.success) {
+			options?.onEvent?.({
+				step: 8,
+				phase: ActionPhase.STEP_8_ACTION_COMPLETE,
+				status: ActionStatus.SUCCESS,
+				message: "NEP-413 message signed successfully"
+			});
+			return {
+				success: true,
+				accountId: result.accountId,
+				publicKey: result.publicKey,
+				signature: result.signature,
+				nonce,
+				state: result.state
+			};
+		} else throw new Error(`NEP-413 signing failed: ${result.error || "Unknown error"}`);
+	} catch (error) {
+		const errorMessage = error instanceof Error ? error.message : "Unknown error";
+		options?.onEvent?.({
+			step: 0,
+			phase: "action-error",
+			status: "error",
+			message: `NEP-413 signing failed: ${errorMessage}`,
+			error: errorMessage
+		});
+		options?.onError?.(error instanceof Error ? error : new Error(errorMessage));
+		return {
+			success: false,
+			error: errorMessage
+		};
+	}
+}
+
+//#endregion
+export { signNEP413Message };

package/dist/esm/sdk/signer-worker-DK847sXj.js

@@ -0,0 +1,473 @@
+//#region src/wasm_signer_worker/pkg/wasm_signer_worker.js
+let wasm;
+const cachedTextEncoder = typeof TextEncoder !== "undefined" ? new TextEncoder("utf-8") : { encode: () => {
+	throw Error("TextEncoder not available");
+} };
+const encodeString = typeof cachedTextEncoder.encodeInto === "function" ? function(arg, view) {
+	return cachedTextEncoder.encodeInto(arg, view);
+} : function(arg, view) {
+	const buf = cachedTextEncoder.encode(arg);
+	view.set(buf);
+	return {
+		read: arg.length,
+		written: buf.length
+	};
+};
+const cachedTextDecoder = typeof TextDecoder !== "undefined" ? new TextDecoder("utf-8", {
+	ignoreBOM: true,
+	fatal: true
+}) : { decode: () => {
+	throw Error("TextDecoder not available");
+} };
+if (typeof TextDecoder !== "undefined") cachedTextDecoder.decode();
+const CLOSURE_DTORS = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((state) => {
+	wasm.__wbindgen_export_5.get(state.dtor)(state.a, state.b);
+});
+/**
+* Behavior mode for confirmation flow
+* @enum {0 | 1}
+*/
+const ConfirmationBehavior = Object.freeze({
+	RequireClick: 0,
+	"0": "RequireClick",
+	AutoProceed: 1,
+	"1": "AutoProceed"
+});
+/**
+* UI mode for confirmation display
+* @enum {0 | 1 | 2}
+*/
+const ConfirmationUIMode = Object.freeze({
+	Skip: 0,
+	"0": "Skip",
+	Modal: 1,
+	"1": "Modal",
+	Drawer: 2,
+	"2": "Drawer"
+});
+/**
+* Progress message types that can be sent during WASM operations.
+* Values MUST align with the progress variants of WorkerResponseType in
+* `worker_messages.rs` so that TypeScript can treat them as progress
+* responses (not success/failure) based on the shared numeric codes.
+* @enum {18 | 19 | 20 | 21}
+*/
+const ProgressMessageType = Object.freeze({
+	RegistrationProgress: 18,
+	"18": "RegistrationProgress",
+	RegistrationComplete: 19,
+	"19": "RegistrationComplete",
+	ExecuteActionsProgress: 20,
+	"20": "ExecuteActionsProgress",
+	ExecuteActionsComplete: 21,
+	"21": "ExecuteActionsComplete"
+});
+/**
+* Progress step identifiers for different phases of operations
+* Values start at 100 to avoid conflicts with WorkerResponseType enum
+* @enum {100 | 101 | 102 | 103 | 104 | 105 | 106}
+*/
+const ProgressStep = Object.freeze({
+	Preparation: 100,
+	"100": "Preparation",
+	UserConfirmation: 101,
+	"101": "UserConfirmation",
+	WebauthnAuthentication: 102,
+	"102": "WebauthnAuthentication",
+	AuthenticationComplete: 103,
+	"103": "AuthenticationComplete",
+	TransactionSigningProgress: 104,
+	"104": "TransactionSigningProgress",
+	TransactionSigningComplete: 105,
+	"105": "TransactionSigningComplete",
+	Error: 106,
+	"106": "Error"
+});
+/**
+* User verification policy for WebAuthn authenticators
+* @enum {0 | 1 | 2}
+*/
+const UserVerificationPolicy = Object.freeze({
+	Required: 0,
+	"0": "Required",
+	Preferred: 1,
+	"1": "Preferred",
+	Discouraged: 2,
+	"2": "Discouraged"
+});
+/**
+* @enum {0 | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10}
+*/
+const WorkerRequestType = Object.freeze({
+	DeriveNearKeypairAndEncrypt: 0,
+	"0": "DeriveNearKeypairAndEncrypt",
+	RecoverKeypairFromPasskey: 1,
+	"1": "RecoverKeypairFromPasskey",
+	DecryptPrivateKeyWithPrf: 2,
+	"2": "DecryptPrivateKeyWithPrf",
+	SignTransactionsWithActions: 3,
+	"3": "SignTransactionsWithActions",
+	ExtractCosePublicKey: 4,
+	"4": "ExtractCosePublicKey",
+	SignTransactionWithKeyPair: 5,
+	"5": "SignTransactionWithKeyPair",
+	SignNep413Message: 6,
+	"6": "SignNep413Message",
+	RegisterDevice2WithDerivedKey: 7,
+	"7": "RegisterDevice2WithDerivedKey",
+	SignDelegateAction: 8,
+	"8": "SignDelegateAction",
+	DeriveThresholdEd25519ClientVerifyingShare: 9,
+	"9": "DeriveThresholdEd25519ClientVerifyingShare",
+	SignAddKeyThresholdPublicKeyNoPrompt: 10,
+	"10": "SignAddKeyThresholdPublicKeyNoPrompt"
+});
+/**
+* Worker response types enum - corresponds to TypeScript WorkerResponseType
+* @enum {0 | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25}
+*/
+const WorkerResponseType = Object.freeze({
+	DeriveNearKeypairAndEncryptSuccess: 0,
+	"0": "DeriveNearKeypairAndEncryptSuccess",
+	RecoverKeypairFromPasskeySuccess: 1,
+	"1": "RecoverKeypairFromPasskeySuccess",
+	DecryptPrivateKeyWithPrfSuccess: 2,
+	"2": "DecryptPrivateKeyWithPrfSuccess",
+	SignTransactionsWithActionsSuccess: 3,
+	"3": "SignTransactionsWithActionsSuccess",
+	ExtractCosePublicKeySuccess: 4,
+	"4": "ExtractCosePublicKeySuccess",
+	SignTransactionWithKeyPairSuccess: 5,
+	"5": "SignTransactionWithKeyPairSuccess",
+	SignNep413MessageSuccess: 6,
+	"6": "SignNep413MessageSuccess",
+	RegisterDevice2WithDerivedKeySuccess: 7,
+	"7": "RegisterDevice2WithDerivedKeySuccess",
+	SignDelegateActionSuccess: 8,
+	"8": "SignDelegateActionSuccess",
+	DeriveNearKeypairAndEncryptFailure: 9,
+	"9": "DeriveNearKeypairAndEncryptFailure",
+	RecoverKeypairFromPasskeyFailure: 10,
+	"10": "RecoverKeypairFromPasskeyFailure",
+	DecryptPrivateKeyWithPrfFailure: 11,
+	"11": "DecryptPrivateKeyWithPrfFailure",
+	SignTransactionsWithActionsFailure: 12,
+	"12": "SignTransactionsWithActionsFailure",
+	ExtractCosePublicKeyFailure: 13,
+	"13": "ExtractCosePublicKeyFailure",
+	SignTransactionWithKeyPairFailure: 14,
+	"14": "SignTransactionWithKeyPairFailure",
+	SignNep413MessageFailure: 15,
+	"15": "SignNep413MessageFailure",
+	RegisterDevice2WithDerivedKeyFailure: 16,
+	"16": "RegisterDevice2WithDerivedKeyFailure",
+	SignDelegateActionFailure: 17,
+	"17": "SignDelegateActionFailure",
+	RegistrationProgress: 18,
+	"18": "RegistrationProgress",
+	RegistrationComplete: 19,
+	"19": "RegistrationComplete",
+	ExecuteActionsProgress: 20,
+	"20": "ExecuteActionsProgress",
+	ExecuteActionsComplete: 21,
+	"21": "ExecuteActionsComplete",
+	DeriveThresholdEd25519ClientVerifyingShareSuccess: 22,
+	"22": "DeriveThresholdEd25519ClientVerifyingShareSuccess",
+	DeriveThresholdEd25519ClientVerifyingShareFailure: 23,
+	"23": "DeriveThresholdEd25519ClientVerifyingShareFailure",
+	SignAddKeyThresholdPublicKeyNoPromptSuccess: 24,
+	"24": "SignAddKeyThresholdPublicKeyNoPromptSuccess",
+	SignAddKeyThresholdPublicKeyNoPromptFailure: 25,
+	"25": "SignAddKeyThresholdPublicKeyNoPromptFailure"
+});
+const AuthenticationResponseFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_authenticationresponse_free(ptr >>> 0, 1));
+const AuthenticatorOptionsFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_authenticatoroptions_free(ptr >>> 0, 1));
+const ClientExtensionResultsFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_clientextensionresults_free(ptr >>> 0, 1));
+const ConfirmationConfigFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_confirmationconfig_free(ptr >>> 0, 1));
+const CoseExtractionResultFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_coseextractionresult_free(ptr >>> 0, 1));
+const DecryptPrivateKeyRequestFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_decryptprivatekeyrequest_free(ptr >>> 0, 1));
+const DecryptPrivateKeyResultFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_decryptprivatekeyresult_free(ptr >>> 0, 1));
+const DecryptionPayloadFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_decryptionpayload_free(ptr >>> 0, 1));
+const DelegateSignResultFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_delegatesignresult_free(ptr >>> 0, 1));
+const DeriveNearKeypairAndEncryptRequestFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_derivenearkeypairandencryptrequest_free(ptr >>> 0, 1));
+const DeriveNearKeypairAndEncryptResultFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_derivenearkeypairandencryptresult_free(ptr >>> 0, 1));
+const DeriveThresholdEd25519ClientVerifyingShareRequestFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_derivethresholded25519clientverifyingsharerequest_free(ptr >>> 0, 1));
+const DeriveThresholdEd25519ClientVerifyingShareResultFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_derivethresholded25519clientverifyingshareresult_free(ptr >>> 0, 1));
+const Device2TransactionContextFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_device2transactioncontext_free(ptr >>> 0, 1));
+const ExtractCoseRequestFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_extractcoserequest_free(ptr >>> 0, 1));
+const KeyActionResultFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_keyactionresult_free(ptr >>> 0, 1));
+const OriginPolicyInputFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_originpolicyinput_free(ptr >>> 0, 1));
+const PrfOutputsFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_prfoutputs_free(ptr >>> 0, 1));
+const PrfResultsFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_prfresults_free(ptr >>> 0, 1));
+const RecoverKeypairRequestFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_recoverkeypairrequest_free(ptr >>> 0, 1));
+const RecoverKeypairResultFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_recoverkeypairresult_free(ptr >>> 0, 1));
+const RegisterDevice2WithDerivedKeyRequestFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_registerdevice2withderivedkeyrequest_free(ptr >>> 0, 1));
+const RegisterDevice2WithDerivedKeyResultFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_registerdevice2withderivedkeyresult_free(ptr >>> 0, 1));
+const RegistrationPayloadFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_registrationpayload_free(ptr >>> 0, 1));
+const RegistrationResponseFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_registrationresponse_free(ptr >>> 0, 1));
+const RpcCallPayloadFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_rpccallpayload_free(ptr >>> 0, 1));
+const SerializedCredentialFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_serializedcredential_free(ptr >>> 0, 1));
+const SerializedRegistrationCredentialFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_serializedregistrationcredential_free(ptr >>> 0, 1));
+const SignNep413ResultFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_signnep413result_free(ptr >>> 0, 1));
+const TransactionContextFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_transactioncontext_free(ptr >>> 0, 1));
+const TransactionSignResultFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_transactionsignresult_free(ptr >>> 0, 1));
+const VrfChallengeFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_vrfchallenge_free(ptr >>> 0, 1));
+const WasmDelegateActionFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_wasmdelegateaction_free(ptr >>> 0, 1));
+const WasmPublicKeyFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_wasmpublickey_free(ptr >>> 0, 1));
+const WasmSignatureFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_wasmsignature_free(ptr >>> 0, 1));
+const WasmSignedDelegateFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_wasmsigneddelegate_free(ptr >>> 0, 1));
+const WasmSignedTransactionFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_wasmsignedtransaction_free(ptr >>> 0, 1));
+const WasmTransactionFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_wasmtransaction_free(ptr >>> 0, 1));
+const WebAuthnAuthenticationCredentialStructFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_webauthnauthenticationcredentialstruct_free(ptr >>> 0, 1));
+const WebAuthnRegistrationCredentialStructFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_webauthnregistrationcredentialstruct_free(ptr >>> 0, 1));
+const WorkerProgressMessageFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_workerprogressmessage_free(ptr >>> 0, 1));
+
+//#endregion
+//#region src/core/types/signer-worker.ts
+const DEFAULT_THRESHOLD_BEHAVIOR = "strict";
+const DEFAULT_SIGNER_MODE = "local-signer";
+const DEFAULT_SIGNING_MODE = { mode: DEFAULT_SIGNER_MODE };
+function isSignerMode(input) {
+	return input === "local-signer" || input === "threshold-signer";
+}
+function isThresholdBehavior(input) {
+	return input === "fallback" || input === "strict";
+}
+function coerceSignerMode(input, fallback = DEFAULT_SIGNING_MODE) {
+	if (input == null) return fallback;
+	if (typeof input === "string") return isSignerMode(input) ? { mode: input } : fallback;
+	if (typeof input !== "object") return fallback;
+	if (input.mode === "local-signer") return { mode: input.mode };
+	const behavior = input.behavior;
+	return isThresholdBehavior(behavior) ? {
+		mode: input.mode,
+		behavior
+	} : { mode: input.mode };
+}
+/**
+* Merge a mode-only override onto a base signer mode.
+*
+* This is intentionally "partial override" semantics:
+* - override sets `mode` when provided
+* - override sets `behavior` only when explicitly provided
+* - if override switches to `threshold-signer` without specifying `behavior`,
+*   preserve `base.behavior` when base is already `threshold-signer`
+*/
+function mergeSignerMode(base, override) {
+	const baseNormalized = coerceSignerMode(base, DEFAULT_SIGNING_MODE);
+	if (override == null) return baseNormalized;
+	if (typeof override === "string") {
+		if (!isSignerMode(override)) return baseNormalized;
+		if (override === "local-signer") return { mode: "local-signer" };
+		if (baseNormalized.mode === "threshold-signer") {
+			const behavior$1 = baseNormalized.behavior;
+			return isThresholdBehavior(behavior$1) ? {
+				mode: "threshold-signer",
+				behavior: behavior$1
+			} : { mode: "threshold-signer" };
+		}
+		return { mode: "threshold-signer" };
+	}
+	if (typeof override !== "object") return baseNormalized;
+	const mode = override.mode;
+	if (mode === "local-signer") return { mode: "local-signer" };
+	if (mode !== "threshold-signer") return baseNormalized;
+	const behavior = override.behavior;
+	if (isThresholdBehavior(behavior)) return {
+		mode: "threshold-signer",
+		behavior
+	};
+	if (baseNormalized.mode === "threshold-signer") {
+		const baseBehavior = baseNormalized.behavior;
+		if (isThresholdBehavior(baseBehavior)) return {
+			mode: "threshold-signer",
+			behavior: baseBehavior
+		};
+	}
+	return { mode: "threshold-signer" };
+}
+function getThresholdBehaviorFromSignerMode(mode) {
+	if (mode.mode !== "threshold-signer") return DEFAULT_THRESHOLD_BEHAVIOR;
+	return isThresholdBehavior(mode.behavior) ? mode.behavior : DEFAULT_THRESHOLD_BEHAVIOR;
+}
+/**
+* Internal, single-purpose worker request types.
+*
+* These are intentionally *not* exposed as general-purpose "no prompt" signing APIs.
+* They exist to support tightly-scoped post-registration flows without allowing
+* arbitrary actions/receivers to be signed without VRF/WebAuthn binding.
+*/
+const INTERNAL_WORKER_REQUEST_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT = 10;
+const INTERNAL_WORKER_RESPONSE_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT_SUCCESS = 24;
+const INTERNAL_WORKER_RESPONSE_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT_FAILURE = 25;
+const DEFAULT_CONFIRMATION_CONFIG = {
+	uiMode: "modal",
+	behavior: "requireClick",
+	autoProceedDelay: 0,
+	theme: "dark"
+};
+function isWorkerProgress(response) {
+	return response.type === WorkerResponseType.RegistrationProgress || response.type === WorkerResponseType.RegistrationComplete || response.type === WorkerResponseType.ExecuteActionsProgress || response.type === WorkerResponseType.ExecuteActionsComplete;
+}
+function isWorkerSuccess(response) {
+	return response.type === WorkerResponseType.DeriveNearKeypairAndEncryptSuccess || response.type === WorkerResponseType.RecoverKeypairFromPasskeySuccess || response.type === WorkerResponseType.DecryptPrivateKeyWithPrfSuccess || response.type === WorkerResponseType.SignTransactionsWithActionsSuccess || response.type === WorkerResponseType.SignDelegateActionSuccess || response.type === WorkerResponseType.ExtractCosePublicKeySuccess || response.type === WorkerResponseType.SignTransactionWithKeyPairSuccess || response.type === WorkerResponseType.SignNep413MessageSuccess || response.type === WorkerResponseType.RegisterDevice2WithDerivedKeySuccess || response.type === WorkerResponseType.DeriveThresholdEd25519ClientVerifyingShareSuccess || response.type === INTERNAL_WORKER_RESPONSE_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT_SUCCESS;
+}
+function isWorkerError(response) {
+	return response.type === WorkerResponseType.DeriveNearKeypairAndEncryptFailure || response.type === WorkerResponseType.RecoverKeypairFromPasskeyFailure || response.type === WorkerResponseType.DecryptPrivateKeyWithPrfFailure || response.type === WorkerResponseType.SignTransactionsWithActionsFailure || response.type === WorkerResponseType.SignDelegateActionFailure || response.type === WorkerResponseType.ExtractCosePublicKeyFailure || response.type === WorkerResponseType.SignTransactionWithKeyPairFailure || response.type === WorkerResponseType.SignNep413MessageFailure || response.type === WorkerResponseType.RegisterDevice2WithDerivedKeyFailure || response.type === WorkerResponseType.DeriveThresholdEd25519ClientVerifyingShareFailure || response.type === INTERNAL_WORKER_RESPONSE_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT_FAILURE;
+}
+function isDeriveNearKeypairAndEncryptSuccess(response) {
+	return response.type === WorkerResponseType.DeriveNearKeypairAndEncryptSuccess;
+}
+function isRecoverKeypairFromPasskeySuccess(response) {
+	return response.type === WorkerResponseType.RecoverKeypairFromPasskeySuccess;
+}
+function isSignTransactionsWithActionsSuccess(response) {
+	return response.type === WorkerResponseType.SignTransactionsWithActionsSuccess;
+}
+function isSignAddKeyThresholdPublicKeyNoPromptSuccess(response) {
+	return response.type === INTERNAL_WORKER_RESPONSE_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT_SUCCESS;
+}
+function isSignDelegateActionSuccess(response) {
+	return response.type === WorkerResponseType.SignDelegateActionSuccess;
+}
+function isDecryptPrivateKeyWithPrfSuccess(response) {
+	return response.type === WorkerResponseType.DecryptPrivateKeyWithPrfSuccess;
+}
+function isExtractCosePublicKeySuccess(response) {
+	return response.type === WorkerResponseType.ExtractCosePublicKeySuccess;
+}
+function isSignNep413MessageSuccess(response) {
+	return response.type === WorkerResponseType.SignNep413MessageSuccess;
+}
+function isRegisterDevice2WithDerivedKeySuccess(response) {
+	return response.type === WorkerResponseType.RegisterDevice2WithDerivedKeySuccess;
+}
+
+//#endregion
+export { DEFAULT_CONFIRMATION_CONFIG, DEFAULT_SIGNING_MODE, DEFAULT_THRESHOLD_BEHAVIOR, INTERNAL_WORKER_REQUEST_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT, UserVerificationPolicy, WorkerRequestType, WorkerResponseType, coerceSignerMode, getThresholdBehaviorFromSignerMode, isDecryptPrivateKeyWithPrfSuccess, isDeriveNearKeypairAndEncryptSuccess, isExtractCosePublicKeySuccess, isRecoverKeypairFromPasskeySuccess, isRegisterDevice2WithDerivedKeySuccess, isSignAddKeyThresholdPublicKeyNoPromptSuccess, isSignDelegateActionSuccess, isSignNep413MessageSuccess, isSignTransactionsWithActionsSuccess, isWorkerError, isWorkerProgress, isWorkerSuccess, mergeSignerMode };