@tatchi-xyz/sdk 0.21.0 → 0.31.0

package/dist/esm/server/sdk/src/utils/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","names":[],"sources":["../../../../../../src/utils/errors.ts"],"sourcesContent":["/**\n * Centralized error handling utilities for the Passkey SDK\n */\n\n/**\n * Best-effort error message extractor without relying on `any`.\n * Always returns a string (may be empty when nothing usable can be derived).\n */\nexport function errorMessage(err: unknown): string {\n  try {\n    if (typeof err === 'string') return err;\n    if (err && typeof (err as { message?: unknown }).message === 'string') {\n      return (err as { message: string }).message;\n    }\n    return String(err ?? '');\n  } catch {\n    return '';\n  }\n}\n\n/**\n * Normalize any thrown value into an Error instance.\n * - preserves message/name/stack when available\n * - best-effort copies optional code/details properties if present\n */\nexport function toError(e: unknown): Error {\n  if (e instanceof Error) return e;\n  const err = new Error(errorMessage(e));\n  try {\n    const src = e as { name?: unknown; stack?: unknown; code?: unknown; details?: unknown };\n    if (typeof src?.name === 'string') err.name = src.name;\n    if (typeof src?.stack === 'string') (err as { stack?: string }).stack = src.stack;\n    if (src && typeof src.code !== 'undefined') (err as { code?: unknown }).code = src.code;\n    if (src && typeof src.details !== 'undefined') (err as { details?: unknown }).details = src.details;\n  } catch {}\n  return err;\n}\n\n/**\n * Check if an error is related to user cancellation of TouchID/FaceID prompt\n * @param error - The error object or error message string\n * @returns true if the error indicates user cancellation\n */\nexport function isTouchIdCancellationError(error: unknown): boolean {\n  const msg = errorMessage(error);\n\n  // Normalize for case-insensitive substring checks on user-facing phrases\n  const lower = msg.toLowerCase();\n\n  return msg.includes('The operation either timed out or was not allowed') ||\n         msg.includes('NotAllowedError') ||\n         msg.includes('AbortError') ||\n         lower.includes('user cancelled') ||\n         lower.includes('user canceled') ||\n         lower.includes('user aborted');\n}\n\n/**\n * Get a user-friendly error message for TouchID/FaceID cancellation\n * @param context - The context where the cancellation occurred (e.g., 'registration', 'login')\n * @returns A user-friendly error message\n */\nexport function getTouchIdCancellationMessage(context: 'registration' | 'login'): string {\n  switch (context) {\n    case 'registration':\n      return `Registration was cancelled. Please try again when you're ready to set up your passkey.`;\n    case 'login':\n      return `Login was cancelled. Please try again when you're ready to authenticate.`;\n    default:\n      return `Operation was cancelled. Please try again when you're ready.`;\n  }\n}\n\n/**\n * Transform an error message to be more user-friendly\n * @param error - The original error object or message\n * @param context - The context where the error occurred\n * @param nearAccountId - Optional NEAR account ID for context-specific messages\n * @returns A user-friendly error message\n */\nexport function getUserFriendlyErrorMessage(\n  error: unknown,\n  context: 'registration' | 'login' = 'registration',\n  nearAccountId?: string\n): string {\n  const msg = errorMessage(error);\n\n  // Handle TouchID/FaceID cancellation\n  if (isTouchIdCancellationError(error)) {\n    return getTouchIdCancellationMessage(context);\n  }\n\n  // Missing PRF outputs\n  if (msg.includes('PRF outputs missing')) {\n    const op = context === 'registration' ? 'Registration' : 'Login';\n    return `${op} failed because your browser did not return the required passkey PRF results. On some mobile browsers this is not available for create(); try updating your browser or use a desktop browser. We’re working on an alternate path for broader device support.`;\n  }\n\n  // Handle other common errors\n  if (msg.includes('one of the credentials already registered')) {\n    return `A passkey for '${nearAccountId || 'this account'}' already exists. Please try logging in instead.`;\n  }\n\n  if (msg.includes('Cannot deserialize the contract state')) {\n    return `Contract state deserialization failed. This may be due to a contract upgrade. Please try again or contact support.`;\n  }\n\n  if (msg.includes('Web3Authn contract registration check failed')) {\n    return `Contract registration check failed: ${msg.replace('Web3Authn contract registration check failed: ', '')}`;\n  }\n\n  if (msg.includes('Unknown error occurred')) {\n    return `${context === 'registration' ? 'Registration' : 'Login'} failed due to an unknown error. Please check your connection and try again.`;\n  }\n\n  // Return the original error message if no specific handling is needed\n  return msg;\n}\n\n/**\n * Format a NEAR JSON-RPC error into a concise, human-friendly message while\n * preserving the original error payload on `details`.\n *\n * The function is defensive and only relies on structural checks. It does not\n * require concrete NEAR types to avoid tight coupling with providers.\n */\nexport function formatNearRpcError(\n  operationName: string,\n  rpc: { error?: { code?: number; name?: string; message?: string; data?: unknown } }\n): { message: string; code?: number; name?: string; details?: unknown } {\n  const err = rpc?.error || {};\n  const details = err.data as unknown;\n\n  const code = typeof err.code === 'number' ? err.code : undefined;\n  const name = typeof err.name === 'string' ? err.name : undefined;\n  const generic = typeof err.message === 'string'\n    ? err.message\n    : (details && typeof (details as { message?: unknown }).message === 'string'\n        ? (details as { message: string }).message\n        : 'RPC error');\n\n  // Helper: get first key of object\n  const firstKey = (o: unknown): string | undefined => {\n    if (!o || typeof o !== 'object') return undefined;\n    const keys = Object.keys(o as Record<string, unknown>);\n    return keys.length ? keys[0] : undefined;\n  };\n\n  // Helper: shallow object check\n  const isObj = (v: unknown): v is Record<string, unknown> => !!v && typeof v === 'object' && !Array.isArray(v);\n\n  // Extract structured NEAR error kinds if present (generic traversal)\n  const d = details as Record<string, unknown> | undefined;\n  const txExec = isObj(d) ? d.TxExecutionError : undefined;\n  if (isObj(txExec)) {\n    let node: Record<string, unknown> | undefined = txExec;\n    const path: string[] = ['TxExecutionError'];\n    let depth = 0;\n    while (node && depth < 5 && isObj(node)) {\n      const k = firstKey(node);\n      if (!k) break;\n      const nextNode: unknown = (node as Record<string, unknown>)[k as string];\n      path.push(k);\n      node = isObj(nextNode) ? (nextNode as Record<string, unknown>) : undefined;\n      depth++;\n    }\n\n    // Special-case action index when present for better UX\n    const actionError = (isObj(txExec) && isObj(txExec.ActionError)) ? txExec.ActionError as Record<string, unknown> : undefined;\n    const idx = (isObj(actionError) && typeof actionError.index === 'number') ? ` at action ${actionError.index}` : '';\n\n    const payload = isObj(node) ? node : undefined;\n    const suffix = payload && Object.keys(payload).length ? `: ${JSON.stringify(payload)}` : '';\n    const prefix = [name, typeof code === 'number' ? `code ${code}` : undefined].filter(Boolean).join(' ');\n    const kindPath = path.join('.');\n    const message = [prefix, `${operationName} failed${idx} (${kindPath}${suffix})`].filter(Boolean).join(' - ');\n    return { message, code, name, details };\n  }\n\n  // Fallback generic message including data when available\n  const prefix = [name, typeof code === 'number' ? `code ${code}` : undefined].filter(Boolean).join(' ');\n  const dataStr = isObj(details) ? ` Details: ${JSON.stringify(details)}` : '';\n  const message = [prefix, `${operationName} RPC error: ${generic}${dataStr}`].filter(Boolean).join(' - ');\n  return { message, code, name, details };\n}\n\n/**\n * Extract a short NEAR error label for UI display, e.g.:\n *   \"InvalidTxError: UnsuitableStakingKey\"\n * Falls back to undefined when structure is not recognized.\n */\nexport function getNearShortErrorMessage(error: unknown): string | undefined {\n  try {\n    const err = error as { details?: unknown; message?: string };\n    const details = err?.details as Record<string, unknown> | undefined;\n    const isObj = (v: unknown): v is Record<string, unknown> => !!v && typeof v === 'object' && !Array.isArray(v);\n    if (!isObj(details)) return undefined;\n\n    // Path 1: details.TxExecutionError (RPC top-level error)\n    const txExec = details.TxExecutionError as unknown;\n    if (isObj(txExec)) {\n      if (isObj(txExec.InvalidTxError)) {\n        const inv = txExec.InvalidTxError as Record<string, unknown>;\n        if (isObj(inv.ActionsValidation)) {\n          const kind = Object.keys(inv.ActionsValidation)[0];\n          if (kind) return `InvalidTxError: ${kind}`;\n        }\n        const first = Object.keys(inv)[0];\n        if (first) return `InvalidTxError: ${first}`;\n        return 'InvalidTxError';\n      }\n      if (isObj(txExec.ActionError)) {\n        const ae = txExec.ActionError as Record<string, unknown>;\n        const kindObj = isObj(ae.kind) ? (ae.kind as Record<string, unknown>) : undefined;\n        const kind = kindObj ? Object.keys(kindObj)[0] : undefined;\n        if (kind) return `ActionError: ${kind}`;\n        return 'ActionError';\n      }\n    }\n\n    // Path 2: details.Failure (sendTransaction resolved with Failure)\n    const failure = details.Failure as unknown;\n    if (isObj(failure)) {\n      if (isObj(failure.InvalidTxError)) {\n        const inv = failure.InvalidTxError as Record<string, unknown>;\n        if (isObj(inv.ActionsValidation)) {\n          const kind = Object.keys(inv.ActionsValidation)[0];\n          if (kind) return `InvalidTxError: ${kind}`;\n        }\n        const first = Object.keys(inv)[0];\n        if (first) return `InvalidTxError: ${first}`;\n        return 'InvalidTxError';\n      }\n      if (isObj(failure.ActionError)) {\n        const ae = failure.ActionError as Record<string, unknown>;\n        const kindObj = isObj(ae.kind) ? (ae.kind as Record<string, unknown>) : undefined;\n        const kind = kindObj ? Object.keys(kindObj)[0] : undefined;\n        if (kind) return `ActionError: ${kind}`;\n        return 'ActionError';\n      }\n    }\n\n    return undefined;\n  } catch {\n    return undefined;\n  }\n}\n"],"mappings":";;;;;;;;AAQA,SAAgB,aAAa,KAAsB;AACjD,KAAI;AACF,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,MAAI,OAAO,OAAQ,IAA8B,YAAY,SAC3D,QAAQ,IAA4B;AAEtC,SAAO,OAAO,OAAO;SACf;AACN,SAAO"}
+{"version":3,"file":"errors.js","names":[],"sources":["../../../../../../src/utils/errors.ts"],"sourcesContent":["/**\n * Centralized error handling utilities for the Passkey SDK\n */\n\n/**\n * Best-effort error message extractor without relying on `any`.\n * Always returns a string (may be empty when nothing usable can be derived).\n */\nexport function errorMessage(err: unknown): string {\n  try {\n    if (typeof err === 'string') return err;\n    if (err && typeof (err as { message?: unknown }).message === 'string') {\n      return (err as { message: string }).message;\n    }\n    return String(err ?? '');\n  } catch {\n    return '';\n  }\n}\n\n/**\n * Normalize any thrown value into an Error instance.\n * - preserves message/name/stack when available\n * - best-effort copies optional code/details properties if present\n */\nexport function toError(e: unknown): Error {\n  if (e instanceof Error) return e;\n  const err = new Error(errorMessage(e));\n  try {\n    const src = e as { name?: unknown; stack?: unknown; code?: unknown; details?: unknown };\n    if (typeof src?.name === 'string') err.name = src.name;\n    if (typeof src?.stack === 'string') (err as { stack?: string }).stack = src.stack;\n    if (src && typeof src.code !== 'undefined') (err as { code?: unknown }).code = src.code;\n    if (src && typeof src.details !== 'undefined') (err as { details?: unknown }).details = src.details;\n  } catch {}\n  return err;\n}\n\n/**\n * Check if an error is related to user cancellation of TouchID/FaceID prompt\n * @param error - The error object or error message string\n * @returns true if the error indicates user cancellation\n */\nexport function isTouchIdCancellationError(error: unknown): boolean {\n  const msg = errorMessage(error);\n\n  // Normalize for case-insensitive substring checks on user-facing phrases\n  const lower = msg.toLowerCase();\n\n  return msg.includes('The operation either timed out or was not allowed') ||\n         msg.includes('NotAllowedError') ||\n         msg.includes('AbortError') ||\n         lower.includes('user cancelled') ||\n         lower.includes('user canceled') ||\n         lower.includes('user aborted');\n}\n\n/**\n * Get a user-friendly error message for TouchID/FaceID cancellation\n * @param context - The context where the cancellation occurred (e.g., 'registration', 'login')\n * @returns A user-friendly error message\n */\nexport function getTouchIdCancellationMessage(context: 'registration' | 'login'): string {\n  switch (context) {\n    case 'registration':\n      return `Registration was cancelled. Please try again when you're ready to set up your passkey.`;\n    case 'login':\n      return `Login was cancelled. Please try again when you're ready to authenticate.`;\n    default:\n      return `Operation was cancelled. Please try again when you're ready.`;\n  }\n}\n\n/**\n * Transform an error message to be more user-friendly\n * @param error - The original error object or message\n * @param context - The context where the error occurred\n * @param nearAccountId - Optional NEAR account ID for context-specific messages\n * @returns A user-friendly error message\n */\nexport function getUserFriendlyErrorMessage(\n  error: unknown,\n  context: 'registration' | 'login' = 'registration',\n  nearAccountId?: string\n): string {\n  const msg = errorMessage(error);\n\n  // Handle TouchID/FaceID cancellation\n  if (isTouchIdCancellationError(error)) {\n    return getTouchIdCancellationMessage(context);\n  }\n\n  // Missing PRF outputs\n  if (msg.includes('PRF outputs missing')) {\n    const op = context === 'registration' ? 'Registration' : 'Login';\n    return `${op} failed because your browser did not return the required passkey PRF results. On some mobile browsers this is not available for create(); try updating your browser or use a desktop browser. We’re working on an alternate path for broader device support.`;\n  }\n\n  // Handle other common errors\n  if (msg.includes('one of the credentials already registered')) {\n    return `A passkey for '${nearAccountId || 'this account'}' already exists. Please try logging in instead.`;\n  }\n\n  if (msg.includes('Cannot deserialize the contract state')) {\n    return `Contract state deserialization failed. This may be due to a contract upgrade. Please try again or contact support.`;\n  }\n\n  if (msg.includes('Web3Authn contract registration check failed')) {\n    return `Contract registration check failed: ${msg.replace('Web3Authn contract registration check failed: ', '')}`;\n  }\n\n  if (msg.includes('Unknown error occurred')) {\n    return `${context === 'registration' ? 'Registration' : 'Login'} failed due to an unknown error. Please check your connection and try again.`;\n  }\n\n  // Return the original error message if no specific handling is needed\n  return msg;\n}\n\n/**\n * Format a NEAR JSON-RPC error into a concise, human-friendly message while\n * preserving the original error payload on `details`.\n *\n * The function is defensive and only relies on structural checks. It does not\n * require concrete NEAR types to avoid tight coupling with providers.\n */\nexport function formatNearRpcError(\n  operationName: string,\n  rpc: { error?: { code?: number; name?: string; message?: string; data?: unknown } }\n): { message: string; code?: number; name?: string; details?: unknown } {\n  const err = rpc?.error || {};\n  const details = err.data as unknown;\n\n  const code = typeof err.code === 'number' ? err.code : undefined;\n  const name = typeof err.name === 'string' ? err.name : undefined;\n  const generic = typeof err.message === 'string'\n    ? err.message\n    : (details && typeof (details as { message?: unknown }).message === 'string'\n        ? (details as { message: string }).message\n        : 'RPC error');\n\n  // Helper: get first key of object\n  const firstKey = (o: unknown): string | undefined => {\n    if (!o || typeof o !== 'object') return undefined;\n    const keys = Object.keys(o as Record<string, unknown>);\n    return keys.length ? keys[0] : undefined;\n  };\n\n  // Helper: shallow object check\n  const isObj = (v: unknown): v is Record<string, unknown> => !!v && typeof v === 'object' && !Array.isArray(v);\n\n  // Extract structured NEAR error kinds if present (generic traversal)\n  const d = details as Record<string, unknown> | undefined;\n  const txExec = isObj(d) ? d.TxExecutionError : undefined;\n  if (isObj(txExec)) {\n    let node: Record<string, unknown> | undefined = txExec;\n    const path: string[] = ['TxExecutionError'];\n    let depth = 0;\n    while (node && depth < 5 && isObj(node)) {\n      const k = firstKey(node);\n      if (!k) break;\n      const nextNode: unknown = (node as Record<string, unknown>)[k as string];\n      path.push(k);\n      node = isObj(nextNode) ? (nextNode as Record<string, unknown>) : undefined;\n      depth++;\n    }\n\n    // Special-case action index when present for better UX\n    const actionError = (isObj(txExec) && isObj(txExec.ActionError)) ? txExec.ActionError as Record<string, unknown> : undefined;\n    const idx = (isObj(actionError) && typeof actionError.index === 'number') ? ` at action ${actionError.index}` : '';\n\n    const payload = isObj(node) ? node : undefined;\n    const suffix = payload && Object.keys(payload).length ? `: ${JSON.stringify(payload)}` : '';\n    const prefix = [name, typeof code === 'number' ? `code ${code}` : undefined].filter(Boolean).join(' ');\n    const kindPath = path.join('.');\n    const message = [prefix, `${operationName} failed${idx} (${kindPath}${suffix})`].filter(Boolean).join(' - ');\n    return { message, code, name, details };\n  }\n\n  // Fallback generic message including data when available\n  const prefix = [name, typeof code === 'number' ? `code ${code}` : undefined].filter(Boolean).join(' ');\n  const dataStr = isObj(details) ? ` Details: ${JSON.stringify(details)}` : '';\n  const message = [prefix, `${operationName} RPC error: ${generic}${dataStr}`].filter(Boolean).join(' - ');\n  return { message, code, name, details };\n}\n\n/**\n * Extract a short NEAR error label for UI display, e.g.:\n *   \"InvalidTxError: UnsuitableStakingKey\"\n * Falls back to undefined when structure is not recognized.\n */\nexport function getNearShortErrorMessage(error: unknown): string | undefined {\n  try {\n    const err = error as { details?: unknown; message?: string };\n    const details = err?.details as Record<string, unknown> | undefined;\n    const isObj = (v: unknown): v is Record<string, unknown> => !!v && typeof v === 'object' && !Array.isArray(v);\n    if (!isObj(details)) return undefined;\n\n    // Path 1: details.TxExecutionError (RPC top-level error)\n    const txExec = details.TxExecutionError as unknown;\n    if (isObj(txExec)) {\n      if (isObj(txExec.InvalidTxError)) {\n        const inv = txExec.InvalidTxError as Record<string, unknown>;\n        if (isObj(inv.ActionsValidation)) {\n          const kind = Object.keys(inv.ActionsValidation)[0];\n          if (kind) return `InvalidTxError: ${kind}`;\n        }\n        const first = Object.keys(inv)[0];\n        if (first) return `InvalidTxError: ${first}`;\n        return 'InvalidTxError';\n      }\n      if (isObj(txExec.ActionError)) {\n        const ae = txExec.ActionError as Record<string, unknown>;\n        const kindObj = isObj(ae.kind) ? (ae.kind as Record<string, unknown>) : undefined;\n        const kind = kindObj ? Object.keys(kindObj)[0] : undefined;\n        if (kind) return `ActionError: ${kind}`;\n        return 'ActionError';\n      }\n    }\n\n    // Path 2: details.Failure (sendTransaction resolved with Failure)\n    const failure = details.Failure as unknown;\n    if (isObj(failure)) {\n      if (isObj(failure.InvalidTxError)) {\n        const inv = failure.InvalidTxError as Record<string, unknown>;\n        if (isObj(inv.ActionsValidation)) {\n          const kind = Object.keys(inv.ActionsValidation)[0];\n          if (kind) return `InvalidTxError: ${kind}`;\n        }\n        const first = Object.keys(inv)[0];\n        if (first) return `InvalidTxError: ${first}`;\n        return 'InvalidTxError';\n      }\n      if (isObj(failure.ActionError)) {\n        const ae = failure.ActionError as Record<string, unknown>;\n        const kindObj = isObj(ae.kind) ? (ae.kind as Record<string, unknown>) : undefined;\n        const kind = kindObj ? Object.keys(kindObj)[0] : undefined;\n        if (kind) return `ActionError: ${kind}`;\n        return 'ActionError';\n      }\n    }\n\n    return undefined;\n  } catch {\n    return undefined;\n  }\n}\n"],"mappings":";;;;;;;;AAQA,SAAgB,aAAa,KAAsB;AACjD,KAAI;AACF,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,MAAI,OAAO,OAAQ,IAA8B,YAAY,SAC3D,QAAQ,IAA4B;AAEtC,SAAO,OAAO,OAAO;SACf;AACN,SAAO;;;;;;;;AASX,SAAgB,QAAQ,GAAmB;AACzC,KAAI,aAAa,MAAO,QAAO;CAC/B,MAAM,MAAM,IAAI,MAAM,aAAa;AACnC,KAAI;EACF,MAAM,MAAM;AACZ,MAAI,OAAO,KAAK,SAAS,SAAU,KAAI,OAAO,IAAI;AAClD,MAAI,OAAO,KAAK,UAAU,SAAU,CAAC,IAA2B,QAAQ,IAAI;AAC5E,MAAI,OAAO,OAAO,IAAI,SAAS,YAAa,CAAC,IAA2B,OAAO,IAAI;AACnF,MAAI,OAAO,OAAO,IAAI,YAAY,YAAa,CAAC,IAA8B,UAAU,IAAI;SACtF;AACR,QAAO"}

package/dist/esm/server/sdk/src/utils/validation.js

@@ -0,0 +1,84 @@
+//#region src/utils/validation.ts
+/** Strict string coercion: returns the value only when it's already a string. */
+function toOptionalString(value) {
+	return typeof value === "string" ? value : "";
+}
+/** Strict string coercion + trimming. */
+function toOptionalTrimmedString(value) {
+	return toOptionalString(value).trim();
+}
+/** String coercion + trimming (useful at IO boundaries). */
+function toTrimmedString(value) {
+	return String(value ?? "").trim();
+}
+/** Remove trailing `/` characters (e.g. base URL normalization). */
+function stripTrailingSlashes(value) {
+	return String(value ?? "").replace(/\/+$/, "");
+}
+/**
+* Strict origin sanitizer for Related Origin Requests (ROR).
+* - Allows `https://<host>[:port]` and `http://localhost[:port]` only.
+* - Rejects paths (except `/`), queries, and hashes.
+* - Normalizes hostname casing.
+*/
+function toRorOriginOrNull(value) {
+	if (typeof value !== "string") return null;
+	const raw = toTrimmedString(value);
+	if (!raw) return null;
+	try {
+		const u = new URL(raw);
+		const scheme = u.protocol;
+		const host = u.hostname.toLowerCase();
+		const port = u.port ? `:${u.port}` : "";
+		const isHttps = scheme === "https:";
+		const isLocalhostHttp = scheme === "http:" && host === "localhost";
+		if (!isHttps && !isLocalhostHttp) return null;
+		if (u.pathname && u.pathname !== "/" || u.search || u.hash) return null;
+		return `${scheme}//${host}${port}`;
+	} catch {
+		return null;
+	}
+}
+/** Collapse a string into a single line by normalizing whitespace. */
+function toSingleLine(value) {
+	return String(value ?? "").replace(/[\r\n]+/g, " ").replace(/\s+/g, " ").trim();
+}
+/**
+* Ensure a key string has the NEAR Ed25519 prefix (`ed25519:`).
+*
+* - Accepts either `ed25519:<base58>` or a bare `<base58>` string.
+* - Canonicalizes `ED25519:` → `ed25519:`.
+* - If a different prefix is present (e.g. `secp256k1:`), returns the input unchanged.
+*/
+function ensureEd25519Prefix(value) {
+	const raw = String(value ?? "").trim();
+	if (!raw) return "";
+	if (/^[a-z0-9_]+:/i.test(raw)) {
+		if (/^ed25519:/i.test(raw)) return `ed25519:${raw.replace(/^ed25519:/i, "")}`;
+		return raw;
+	}
+	return `ed25519:${raw}`;
+}
+/**
+* Lightweight NEAR account ID validation used by server-side helpers.
+* - length: 2..64
+* - chars: lowercase letters, digits, `_`, `.`, `-`
+*/
+function isValidAccountId(accountId) {
+	if (typeof accountId !== "string") return false;
+	if (!accountId || accountId.length < 2 || accountId.length > 64) return false;
+	return /^[a-z0-9_.-]+$/.test(accountId);
+}
+function isObject(x) {
+	return x !== null && typeof x === "object";
+}
+function isString(x) {
+	return typeof x === "string";
+}
+function isFunction(x) {
+	return typeof x === "function";
+}
+
+//#endregion
+export { ensureEd25519Prefix, isFunction, isObject, isString, isValidAccountId, stripTrailingSlashes, toOptionalString, toOptionalTrimmedString, toRorOriginOrNull, toSingleLine, toTrimmedString };
+//# sourceMappingURL=validation.js.map

package/dist/esm/server/sdk/src/utils/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","names":[],"sources":["../../../../../../src/utils/validation.ts"],"sourcesContent":["\nexport interface ValidationResult {\n  valid: boolean;\n  error?: string;\n}\n\n// ==============================\n// Normalization helpers (shared)\n// ==============================\n\n/** Strict string coercion: returns the value only when it's already a string. */\nexport function toOptionalString(value: unknown): string {\n  return typeof value === 'string' ? value : '';\n}\n\n/** Strict string coercion + trimming. */\nexport function toOptionalTrimmedString(value: unknown): string {\n  return toOptionalString(value).trim();\n}\n\n/** String coercion + trimming (useful at IO boundaries). */\nexport function toTrimmedString(value: unknown): string {\n  return String(value ?? '').trim();\n}\n\n/** Remove trailing `/` characters (e.g. base URL normalization). */\nexport function stripTrailingSlashes(value: string): string {\n  return String(value ?? '').replace(/\\/+$/, '');\n}\n\n/** Ensure a non-empty string starts with `/` (path normalization). */\nexport function ensureLeadingSlash(value: string): string {\n  const trimmed = String(value ?? '').trim();\n  if (!trimmed) return '';\n  return trimmed.startsWith('/') ? trimmed : `/${trimmed}`;\n}\n\n/** Normalize an app base path like `/sdk` (leading slash, no trailing slashes except `/`). */\nexport function toBasePath(value?: string, fallback = '/sdk'): string {\n  const base = ensureLeadingSlash(typeof value === 'string' ? value : fallback) || ensureLeadingSlash(fallback) || '/';\n  if (base === '/') return '/';\n  return base.replace(/\\/+$/, '');\n}\n\n/** Best-effort origin normalization (used by CSP/Permissions-Policy helpers). */\nexport function toOriginOrUndefined(input?: string): string | undefined {\n  try {\n    const v = (input || '').trim();\n    if (!v) return undefined;\n    // Next/Caddy/etc. expect an origin, not a path\n    return new URL(v, 'http://dummy').origin === 'http://dummy' ? new URL(v).origin : v;\n  } catch {\n    return input?.trim() || undefined;\n  }\n}\n\n/**\n * Strict origin sanitizer for Related Origin Requests (ROR).\n * - Allows `https://<host>[:port]` and `http://localhost[:port]` only.\n * - Rejects paths (except `/`), queries, and hashes.\n * - Normalizes hostname casing.\n */\nexport function toRorOriginOrNull(value: unknown): string | null {\n  if (typeof value !== 'string') return null;\n  const raw = toTrimmedString(value);\n  if (!raw) return null;\n  try {\n    const u = new URL(raw);\n    const scheme = u.protocol;\n    const host = u.hostname.toLowerCase();\n    const port = u.port ? `:${u.port}` : '';\n    const isHttps = scheme === 'https:';\n    const isLocalhostHttp = scheme === 'http:' && host === 'localhost';\n    if (!isHttps && !isLocalhostHttp) return null;\n    if ((u.pathname && u.pathname !== '/') || u.search || u.hash) return null;\n    return `${scheme}//${host}${port}`;\n  } catch {\n    return null;\n  }\n}\n\n/** Collapse a string into a single line by normalizing whitespace. */\nexport function toSingleLine(value: unknown): string {\n  return String(value ?? '')\n    .replace(/[\\r\\n]+/g, ' ')\n    .replace(/\\s+/g, ' ')\n    .trim();\n}\n\n/**\n * Ensure a key string has the NEAR Ed25519 prefix (`ed25519:`).\n *\n * - Accepts either `ed25519:<base58>` or a bare `<base58>` string.\n * - Canonicalizes `ED25519:` → `ed25519:`.\n * - If a different prefix is present (e.g. `secp256k1:`), returns the input unchanged.\n */\nexport function ensureEd25519Prefix(value: string): string {\n  const raw = String(value ?? '').trim();\n  if (!raw) return '';\n\n  if (/^[a-z0-9_]+:/i.test(raw)) {\n    if (/^ed25519:/i.test(raw)) {\n      return `ed25519:${raw.replace(/^ed25519:/i, '')}`;\n    }\n    return raw;\n  }\n\n  return `ed25519:${raw}`;\n}\n\nexport interface NearAccountValidationOptions {\n  /** Restrict to specific suffixes (e.g., ['testnet', 'near']) */\n  allowedSuffixes?: string[];\n  /** Require Top-level domains with exactly 2 parts (username.suffix) instead of allowing subdomains */\n  requireTopLevelDomain?: boolean;\n}\n\n/**\n * Validate NEAR account ID format with optional suffix restrictions\n * @param nearAccountId - The account ID to validate\n * @param options - Optional validation constraints\n */\nexport function validateNearAccountId(\n  nearAccountId: string,\n  options: NearAccountValidationOptions = {\n    allowedSuffixes: ['testnet', 'near'],\n    requireTopLevelDomain: false\n  }\n): ValidationResult {\n  if (!nearAccountId || typeof nearAccountId !== 'string') {\n    return { valid: false, error: 'Account ID must be a non-empty string' };\n  }\n\n  const parts = nearAccountId.split('.');\n  if (parts.length < 2) {\n    return { valid: false, error: 'Account ID must contain at least one dot (e.g., username.testnet)' };\n  }\n\n  // Check for exact two parts requirement (e.g., server registration)\n  if (options.requireTopLevelDomain && parts.length !== 2) {\n    const suffixList = options.allowedSuffixes?.join(', ') || 'valid suffixes';\n    return {\n      valid: false,\n      error: `Invalid NEAR account ID format. Expected format: <username>.<suffix> where suffix is one of: ${suffixList}`\n    };\n  }\n\n  const username = parts[0];\n  const suffix = parts[parts.length - 1]; // Last part for suffix checking\n  const domain = parts.slice(1).join('.');\n\n  // Validate username part\n  if (!username || username.length === 0) {\n    return { valid: false, error: 'Username part cannot be empty' };\n  }\n\n  if (!/^[a-z0-9_\\-]+$/.test(username)) {\n    return { valid: false, error: 'Username can only contain lowercase letters, numbers, underscores, and hyphens' };\n  }\n\n  // Validate domain part\n  if (!domain || domain.length === 0) {\n    return { valid: false, error: 'Domain part cannot be empty' };\n  }\n\n  // Check allowed suffixes if specified\n  if (options.allowedSuffixes && options.allowedSuffixes.length > 0) {\n    // Check if the account ID ends with any of the allowed suffixes\n    const matchesAnySuffix = options.allowedSuffixes.some(allowedSuffix => {\n      // For single-part suffixes, check the last part\n      if (!allowedSuffix.includes('.')) {\n        return suffix === allowedSuffix;\n      }\n      // For multi-part suffixes, check if the account ID ends with the full suffix\n      return nearAccountId.endsWith(`.${allowedSuffix}`);\n    });\n\n    if (!matchesAnySuffix) {\n      return {\n        valid: false,\n        error: `Invalid NEAR account ID suffix. Expected account to end with one of: ${options.allowedSuffixes.join(', ')}`\n      };\n    }\n  }\n\n  return { valid: true };\n}\n\n/**\n * Lightweight NEAR account ID validation used by server-side helpers.\n * - length: 2..64\n * - chars: lowercase letters, digits, `_`, `.`, `-`\n */\nexport function isValidAccountId(accountId: unknown): accountId is string {\n  if (typeof accountId !== 'string') return false;\n  if (!accountId || accountId.length < 2 || accountId.length > 64) return false;\n  return /^[a-z0-9_.-]+$/.test(accountId);\n}\n\n// ===========================\n// Runtime validation helpers\n// ===========================\n\nexport function isObject(x: unknown): x is Record<string, unknown> {\n  return x !== null && typeof x === 'object';\n}\n\nexport function isString(x: unknown): x is string {\n  return typeof x === 'string';\n}\n\nexport function isNonEmptyString(x: unknown): x is string {\n  return typeof x === 'string' && x.length > 0;\n}\n\nexport function isNumber(x: unknown): x is number {\n  return typeof x === 'number';\n}\n\nexport function isFiniteNumber(x: unknown): x is number {\n  return typeof x === 'number' && Number.isFinite(x);\n}\n\nexport function isFunction(x: unknown): x is Function {\n  return typeof x === 'function';\n}\n\nexport function isBoolean(x: unknown): x is boolean {\n  return typeof x === 'boolean';\n}\n\nexport function isArray<T = unknown>(x: unknown): x is T[] {\n  return Array.isArray(x);\n}\n\nexport function assertString(val: unknown, name = 'value'): string {\n  if (typeof val !== 'string') throw new Error(`Invalid ${name}: expected string`);\n  return val;\n}\n\nexport function assertNumber(val: unknown, name = 'value'): number {\n  if (typeof val !== 'number' || !Number.isFinite(val)) throw new Error(`Invalid ${name}: expected finite number`);\n  return val;\n}\n\nexport function assertBoolean(val: unknown, name = 'value'): boolean {\n  if (typeof val !== 'boolean') throw new Error(`Invalid ${name}: expected boolean`);\n  return val;\n}\n\nexport function assertObject<T extends Record<string, unknown> = Record<string, unknown>>(val: unknown, name = 'value'): T {\n  if (!isObject(val)) throw new Error(`Invalid ${name}: expected object`);\n  return val as T;\n}\n\nexport function assertArray<T = unknown>(val: unknown, name = 'value'): T[] {\n  if (!Array.isArray(val)) throw new Error(`Invalid ${name}: expected array`);\n  return val as T[];\n}\n\nexport function stripFunctionsShallow<T extends Record<string, unknown>>(obj?: T): Partial<T> | undefined {\n  if (!obj || !isObject(obj)) return undefined;\n  const out: Record<string, unknown> = {};\n  for (const [k, v] of Object.entries(obj)) {\n    if (!isFunction(v)) out[k] = v as unknown;\n  }\n  return out as Partial<T>;\n}\n\nexport interface PlainSignedTransactionLike {\n  transaction: unknown;\n  signature: unknown;\n  borsh_bytes?: unknown;\n  borshBytes?: unknown;\n  base64Encode?: unknown;\n}\n\nexport function isPlainSignedTransactionLike(x: unknown): x is PlainSignedTransactionLike {\n  if (!isObject(x)) return false;\n  const hasTx = 'transaction' in x;\n  const hasSig = 'signature' in x;\n  const bytes = x as { borsh_bytes?: unknown; borshBytes?: unknown };\n  const hasBytes = Array.isArray(bytes.borsh_bytes) || bytes.borshBytes instanceof Uint8Array;\n  const hasMethod = typeof (x as { base64Encode?: unknown }).base64Encode === 'function';\n  return hasTx && hasSig && hasBytes && !hasMethod;\n}\n\nexport function extractBorshBytesFromPlainSignedTx(x: PlainSignedTransactionLike): number[] {\n  const asArray = Array.isArray(x.borsh_bytes) ? (x.borsh_bytes as number[]) : undefined;\n  if (asArray) return asArray;\n  const asU8 = (x.borshBytes instanceof Uint8Array) ? x.borshBytes : undefined;\n  return Array.from(asU8 || new Uint8Array());\n}\n"],"mappings":";;AAWA,SAAgB,iBAAiB,OAAwB;AACvD,QAAO,OAAO,UAAU,WAAW,QAAQ;;;AAI7C,SAAgB,wBAAwB,OAAwB;AAC9D,QAAO,iBAAiB,OAAO;;;AAIjC,SAAgB,gBAAgB,OAAwB;AACtD,QAAO,OAAO,SAAS,IAAI;;;AAI7B,SAAgB,qBAAqB,OAAuB;AAC1D,QAAO,OAAO,SAAS,IAAI,QAAQ,QAAQ;;;;;;;;AAmC7C,SAAgB,kBAAkB,OAA+B;AAC/D,KAAI,OAAO,UAAU,SAAU,QAAO;CACtC,MAAM,MAAM,gBAAgB;AAC5B,KAAI,CAAC,IAAK,QAAO;AACjB,KAAI;EACF,MAAM,IAAI,IAAI,IAAI;EAClB,MAAM,SAAS,EAAE;EACjB,MAAM,OAAO,EAAE,SAAS;EACxB,MAAM,OAAO,EAAE,OAAO,IAAI,EAAE,SAAS;EACrC,MAAM,UAAU,WAAW;EAC3B,MAAM,kBAAkB,WAAW,WAAW,SAAS;AACvD,MAAI,CAAC,WAAW,CAAC,gBAAiB,QAAO;AACzC,MAAK,EAAE,YAAY,EAAE,aAAa,OAAQ,EAAE,UAAU,EAAE,KAAM,QAAO;AACrE,SAAO,GAAG,OAAO,IAAI,OAAO;SACtB;AACN,SAAO;;;;AAKX,SAAgB,aAAa,OAAwB;AACnD,QAAO,OAAO,SAAS,IACpB,QAAQ,YAAY,KACpB,QAAQ,QAAQ,KAChB;;;;;;;;;AAUL,SAAgB,oBAAoB,OAAuB;CACzD,MAAM,MAAM,OAAO,SAAS,IAAI;AAChC,KAAI,CAAC,IAAK,QAAO;AAEjB,KAAI,gBAAgB,KAAK,MAAM;AAC7B,MAAI,aAAa,KAAK,KACpB,QAAO,WAAW,IAAI,QAAQ,cAAc;AAE9C,SAAO;;AAGT,QAAO,WAAW;;;;;;;AAsFpB,SAAgB,iBAAiB,WAAyC;AACxE,KAAI,OAAO,cAAc,SAAU,QAAO;AAC1C,KAAI,CAAC,aAAa,UAAU,SAAS,KAAK,UAAU,SAAS,GAAI,QAAO;AACxE,QAAO,iBAAiB,KAAK;;AAO/B,SAAgB,SAAS,GAA0C;AACjE,QAAO,MAAM,QAAQ,OAAO,MAAM;;AAGpC,SAAgB,SAAS,GAAyB;AAChD,QAAO,OAAO,MAAM;;AAetB,SAAgB,WAAW,GAA2B;AACpD,QAAO,OAAO,MAAM"}

package/dist/esm/threshold/participants.js

@@ -0,0 +1,76 @@
+import { toOptionalTrimmedString } from "../utils/validation.js";
+import { THRESHOLD_ED25519_CLIENT_PARTICIPANT_ID, THRESHOLD_ED25519_RELAYER_PARTICIPANT_ID } from "../core/defaultConfigs.js";
+
+//#region src/threshold/participants.ts
+function normalizeThresholdEd25519ParticipantId(id) {
+	const n = Number(id);
+	if (!Number.isSafeInteger(n) || n < 1 || n > 65535) return null;
+	return n;
+}
+function normalizeThresholdEd25519ParticipantIds(input) {
+	if (!Array.isArray(input) || input.length === 0) return null;
+	const out = [];
+	const seen = /* @__PURE__ */ new Set();
+	for (const v of input) {
+		const id = normalizeThresholdEd25519ParticipantId(v);
+		if (!id) return null;
+		if (!seen.has(id)) {
+			seen.add(id);
+			out.push(id);
+		}
+	}
+	out.sort((a, b) => a - b);
+	return out.length ? out : null;
+}
+function parseThresholdEd25519ParticipantsV1(input) {
+	if (!Array.isArray(input) || input.length === 0) return null;
+	const out = [];
+	for (const item of input) {
+		if (!item || typeof item !== "object" || Array.isArray(item)) return null;
+		const rec = item;
+		const id = normalizeThresholdEd25519ParticipantId(rec.id);
+		const role = toOptionalTrimmedString(rec.role);
+		if (!id || role !== "client" && role !== "relayer") return null;
+		const participant = {
+			id,
+			role
+		};
+		const relayerUrl = toOptionalTrimmedString(rec.relayerUrl);
+		if (relayerUrl) participant.relayerUrl = relayerUrl;
+		const relayerKeyId = toOptionalTrimmedString(rec.relayerKeyId);
+		if (relayerKeyId) participant.relayerKeyId = relayerKeyId;
+		const verifyingShareB64u = toOptionalTrimmedString(rec.verifyingShareB64u);
+		if (verifyingShareB64u) participant.verifyingShareB64u = verifyingShareB64u;
+		const shareDerivation = toOptionalTrimmedString(rec.shareDerivation);
+		if (shareDerivation === "prf_first_v1" || shareDerivation === "derived_master_secret_v1" || shareDerivation === "kv_random_v1" || shareDerivation === "unknown") participant.shareDerivation = shareDerivation;
+		out.push(participant);
+	}
+	return out.length ? out : null;
+}
+function buildThresholdEd25519Participants2pV1(input) {
+	const relayerKeyId = toOptionalTrimmedString(input.relayerKeyId);
+	const relayerUrl = toOptionalTrimmedString(input.relayerUrl);
+	const clientVerifyingShareB64u = toOptionalTrimmedString(input.clientVerifyingShareB64u);
+	const relayerVerifyingShareB64u = toOptionalTrimmedString(input.relayerVerifyingShareB64u);
+	const clientParticipantId = normalizeThresholdEd25519ParticipantId(input.clientParticipantId) ?? THRESHOLD_ED25519_CLIENT_PARTICIPANT_ID;
+	const relayerParticipantId = normalizeThresholdEd25519ParticipantId(input.relayerParticipantId) ?? THRESHOLD_ED25519_RELAYER_PARTICIPANT_ID;
+	const client = {
+		id: clientParticipantId,
+		role: "client",
+		...clientVerifyingShareB64u ? { verifyingShareB64u: clientVerifyingShareB64u } : {},
+		shareDerivation: input.clientShareDerivation || "prf_first_v1"
+	};
+	const relayer = {
+		id: relayerParticipantId,
+		role: "relayer",
+		...relayerUrl ? { relayerUrl } : {},
+		...relayerKeyId ? { relayerKeyId } : {},
+		...relayerVerifyingShareB64u ? { verifyingShareB64u: relayerVerifyingShareB64u } : {},
+		...input.relayerShareDerivation ? { shareDerivation: input.relayerShareDerivation } : {}
+	};
+	return [client, relayer];
+}
+
+//#endregion
+export { buildThresholdEd25519Participants2pV1, normalizeThresholdEd25519ParticipantIds, parseThresholdEd25519ParticipantsV1 };
+//# sourceMappingURL=participants.js.map

package/dist/esm/threshold/participants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"participants.js","names":["out: number[]","out: ThresholdEd25519ParticipantV1[]","participant: ThresholdEd25519ParticipantV1","client: ThresholdEd25519ParticipantV1","relayer: ThresholdEd25519ParticipantV1"],"sources":["../../../src/threshold/participants.ts"],"sourcesContent":["export type ThresholdParticipantRole = 'client' | 'relayer';\n\nimport { toOptionalTrimmedString } from '../utils/validation';\nimport {\n  THRESHOLD_ED25519_CLIENT_PARTICIPANT_ID,\n  THRESHOLD_ED25519_RELAYER_PARTICIPANT_ID,\n  THRESHOLD_ED25519_2P_PARTICIPANT_IDS,\n} from '../core/defaultConfigs';\n\nexport {\n  THRESHOLD_ED25519_CLIENT_PARTICIPANT_ID,\n  THRESHOLD_ED25519_RELAYER_PARTICIPANT_ID,\n  THRESHOLD_ED25519_2P_PARTICIPANT_IDS,\n};\n\n/**\n * Metadata describing how a participant share is derived/stored.\n * This is informational in v1 and may be used for validation/policy later.\n */\nexport type ThresholdEd25519ShareDerivation =\n  | 'prf_first_v1'\n  | 'derived_master_secret_v1'\n  | 'kv_random_v1'\n  | 'unknown';\n\nexport interface ThresholdEd25519ParticipantV1 {\n  /** FROST identifier (1-indexed). */\n  id: number;\n  role: ThresholdParticipantRole;\n  /** Optional relayer endpoint for this participant (future multi-relayer support). */\n  relayerUrl?: string;\n  /** Key/share identifier understood by this participant (e.g. relayerKeyId). */\n  relayerKeyId?: string;\n  /** Base64url-encoded 32-byte verifying share (compressed EdwardsY). */\n  verifyingShareB64u?: string;\n  shareDerivation?: ThresholdEd25519ShareDerivation;\n}\n\nexport const THRESHOLD_ED25519_PARTICIPANT_SET_V1 = 'threshold_ed25519_participants_v1' as const;\n\nexport interface ThresholdEd25519ParticipantSetV1 {\n  version: typeof THRESHOLD_ED25519_PARTICIPANT_SET_V1;\n  groupPublicKey: string;\n  participants: ThresholdEd25519ParticipantV1[];\n}\n\nexport function normalizeThresholdEd25519ParticipantId(id: unknown): number | null {\n  const n = Number(id);\n  if (!Number.isSafeInteger(n) || n < 1 || n > 65_535) return null;\n  return n;\n}\n\nexport function normalizeThresholdEd25519ParticipantIds(input: unknown): number[] | null {\n  if (!Array.isArray(input) || input.length === 0) return null;\n  const out: number[] = [];\n  const seen = new Set<number>();\n  for (const v of input) {\n    const id = normalizeThresholdEd25519ParticipantId(v);\n    if (!id) return null;\n    if (!seen.has(id)) {\n      seen.add(id);\n      out.push(id);\n    }\n  }\n  out.sort((a, b) => a - b);\n  return out.length ? out : null;\n}\n\nexport function areThresholdEd25519ParticipantIds2p(\n  participantIds: number[] | null | undefined,\n  expected: readonly number[] = THRESHOLD_ED25519_2P_PARTICIPANT_IDS,\n): boolean {\n  const ids = normalizeThresholdEd25519ParticipantIds(participantIds);\n  const expectedIds = normalizeThresholdEd25519ParticipantIds([...expected]);\n  if (!ids || !expectedIds) return false;\n  if (ids.length !== expectedIds.length) return false;\n  return ids.every((id, i) => id === expectedIds[i]);\n}\n\nexport function parseThresholdEd25519ParticipantsV1(input: unknown): ThresholdEd25519ParticipantV1[] | null {\n  if (!Array.isArray(input) || input.length === 0) return null;\n\n  const out: ThresholdEd25519ParticipantV1[] = [];\n  for (const item of input) {\n    if (!item || typeof item !== 'object' || Array.isArray(item)) return null;\n    const rec = item as Record<string, unknown>;\n\n    const id = normalizeThresholdEd25519ParticipantId(rec.id);\n    const role = toOptionalTrimmedString(rec.role);\n    if (!id || (role !== 'client' && role !== 'relayer')) return null;\n\n    const participant: ThresholdEd25519ParticipantV1 = {\n      id,\n      role: role as ThresholdParticipantRole,\n    };\n\n    const relayerUrl = toOptionalTrimmedString(rec.relayerUrl);\n    if (relayerUrl) participant.relayerUrl = relayerUrl;\n\n    const relayerKeyId = toOptionalTrimmedString(rec.relayerKeyId);\n    if (relayerKeyId) participant.relayerKeyId = relayerKeyId;\n\n    const verifyingShareB64u = toOptionalTrimmedString(rec.verifyingShareB64u);\n    if (verifyingShareB64u) participant.verifyingShareB64u = verifyingShareB64u;\n\n    const shareDerivation = toOptionalTrimmedString(rec.shareDerivation);\n    if (\n      shareDerivation === 'prf_first_v1'\n      || shareDerivation === 'derived_master_secret_v1'\n      || shareDerivation === 'kv_random_v1'\n      || shareDerivation === 'unknown'\n    ) {\n      participant.shareDerivation = shareDerivation;\n    }\n\n    out.push(participant);\n  }\n\n  return out.length ? out : null;\n}\n\nexport function buildThresholdEd25519Participants2pV1(input: {\n  clientParticipantId?: number | null;\n  relayerParticipantId?: number | null;\n  relayerKeyId: string;\n  relayerUrl?: string | null;\n  clientVerifyingShareB64u?: string | null;\n  relayerVerifyingShareB64u?: string | null;\n  clientShareDerivation?: ThresholdEd25519ShareDerivation | null;\n  relayerShareDerivation?: ThresholdEd25519ShareDerivation | null;\n}): ThresholdEd25519ParticipantV1[] {\n  const relayerKeyId = toOptionalTrimmedString(input.relayerKeyId);\n  const relayerUrl = toOptionalTrimmedString(input.relayerUrl);\n  const clientVerifyingShareB64u = toOptionalTrimmedString(input.clientVerifyingShareB64u);\n  const relayerVerifyingShareB64u = toOptionalTrimmedString(input.relayerVerifyingShareB64u);\n  const clientParticipantId =\n    normalizeThresholdEd25519ParticipantId(input.clientParticipantId) ?? THRESHOLD_ED25519_CLIENT_PARTICIPANT_ID;\n  const relayerParticipantId =\n    normalizeThresholdEd25519ParticipantId(input.relayerParticipantId) ?? THRESHOLD_ED25519_RELAYER_PARTICIPANT_ID;\n\n  const client: ThresholdEd25519ParticipantV1 = {\n    id: clientParticipantId,\n    role: 'client',\n    ...(clientVerifyingShareB64u ? { verifyingShareB64u: clientVerifyingShareB64u } : {}),\n    shareDerivation: input.clientShareDerivation || 'prf_first_v1',\n  };\n\n  const relayer: ThresholdEd25519ParticipantV1 = {\n    id: relayerParticipantId,\n    role: 'relayer',\n    ...(relayerUrl ? { relayerUrl } : {}),\n    ...(relayerKeyId ? { relayerKeyId } : {}),\n    ...(relayerVerifyingShareB64u ? { verifyingShareB64u: relayerVerifyingShareB64u } : {}),\n    ...(input.relayerShareDerivation ? { shareDerivation: input.relayerShareDerivation } : {}),\n  };\n\n  return [client, relayer];\n}\n"],"mappings":";;;;AA8CA,SAAgB,uCAAuC,IAA4B;CACjF,MAAM,IAAI,OAAO;AACjB,KAAI,CAAC,OAAO,cAAc,MAAM,IAAI,KAAK,IAAI,MAAQ,QAAO;AAC5D,QAAO;;AAGT,SAAgB,wCAAwC,OAAiC;AACvF,KAAI,CAAC,MAAM,QAAQ,UAAU,MAAM,WAAW,EAAG,QAAO;CACxD,MAAMA,MAAgB;CACtB,MAAM,uBAAO,IAAI;AACjB,MAAK,MAAM,KAAK,OAAO;EACrB,MAAM,KAAK,uCAAuC;AAClD,MAAI,CAAC,GAAI,QAAO;AAChB,MAAI,CAAC,KAAK,IAAI,KAAK;AACjB,QAAK,IAAI;AACT,OAAI,KAAK;;;AAGb,KAAI,MAAM,GAAG,MAAM,IAAI;AACvB,QAAO,IAAI,SAAS,MAAM;;AAc5B,SAAgB,oCAAoC,OAAwD;AAC1G,KAAI,CAAC,MAAM,QAAQ,UAAU,MAAM,WAAW,EAAG,QAAO;CAExD,MAAMC,MAAuC;AAC7C,MAAK,MAAM,QAAQ,OAAO;AACxB,MAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,MAAO,QAAO;EACrE,MAAM,MAAM;EAEZ,MAAM,KAAK,uCAAuC,IAAI;EACtD,MAAM,OAAO,wBAAwB,IAAI;AACzC,MAAI,CAAC,MAAO,SAAS,YAAY,SAAS,UAAY,QAAO;EAE7D,MAAMC,cAA6C;GACjD;GACM;;EAGR,MAAM,aAAa,wBAAwB,IAAI;AAC/C,MAAI,WAAY,aAAY,aAAa;EAEzC,MAAM,eAAe,wBAAwB,IAAI;AACjD,MAAI,aAAc,aAAY,eAAe;EAE7C,MAAM,qBAAqB,wBAAwB,IAAI;AACvD,MAAI,mBAAoB,aAAY,qBAAqB;EAEzD,MAAM,kBAAkB,wBAAwB,IAAI;AACpD,MACE,oBAAoB,kBACjB,oBAAoB,8BACpB,oBAAoB,kBACpB,oBAAoB,UAEvB,aAAY,kBAAkB;AAGhC,MAAI,KAAK;;AAGX,QAAO,IAAI,SAAS,MAAM;;AAG5B,SAAgB,sCAAsC,OASlB;CAClC,MAAM,eAAe,wBAAwB,MAAM;CACnD,MAAM,aAAa,wBAAwB,MAAM;CACjD,MAAM,2BAA2B,wBAAwB,MAAM;CAC/D,MAAM,4BAA4B,wBAAwB,MAAM;CAChE,MAAM,sBACJ,uCAAuC,MAAM,wBAAwB;CACvE,MAAM,uBACJ,uCAAuC,MAAM,yBAAyB;CAExE,MAAMC,SAAwC;EAC5C,IAAI;EACJ,MAAM;EACN,GAAI,2BAA2B,EAAE,oBAAoB,6BAA6B;EAClF,iBAAiB,MAAM,yBAAyB;;CAGlD,MAAMC,UAAyC;EAC7C,IAAI;EACJ,MAAM;EACN,GAAI,aAAa,EAAE,eAAe;EAClC,GAAI,eAAe,EAAE,iBAAiB;EACtC,GAAI,4BAA4B,EAAE,oBAAoB,8BAA8B;EACpF,GAAI,MAAM,yBAAyB,EAAE,iBAAiB,MAAM,2BAA2B;;AAGzF,QAAO,CAAC,QAAQ"}

package/dist/esm/utils/base58.js

@@ -1,17 +1,19 @@
-import { __esm } from "../_virtual/rolldown_runtime.js";
 import bs58 from "bs58";
 
 //#region src/utils/base58.ts
-var base58Encode;
-var init_base58 = __esm({ "src/utils/base58.ts": (() => {
-	base58Encode = (data) => {
-		if (data instanceof ArrayBuffer) return bs58.encode(new Uint8Array(data));
-		if (Array.isArray(data)) return bs58.encode(new Uint8Array(data));
-		return bs58.encode(data);
-	};
-}) });
+/**
+* Encodes binary data to base58 string using Bitcoin's base58 alphabet.
+* Used extensively in NEAR for account IDs, public keys, hashes, and signatures.
+*
+* @param data - Binary data to encode (Uint8Array, ArrayBuffer, or number[])
+* @returns Base58-encoded string
+*/
+const base58Encode = (data) => {
+	if (data instanceof ArrayBuffer) return bs58.encode(new Uint8Array(data));
+	if (Array.isArray(data)) return bs58.encode(new Uint8Array(data));
+	return bs58.encode(data);
+};
 
 //#endregion
-init_base58();
-export { base58Encode, init_base58 };
+export { base58Encode };
 //# sourceMappingURL=base58.js.map

package/dist/esm/utils/base58.js.map

@@ -1 +1 @@
-{"version":3,"file":"base58.js","names":[],"sources":["../../../src/utils/base58.ts"],"sourcesContent":["import bs58 from 'bs58';\n\n/**\n * Encodes binary data to base58 string using Bitcoin's base58 alphabet.\n * Used extensively in NEAR for account IDs, public keys, hashes, and signatures.\n *\n * @param data - Binary data to encode (Uint8Array, ArrayBuffer, or number[])\n * @returns Base58-encoded string\n */\nexport const base58Encode = (data: Uint8Array | ArrayBuffer | number[]): string => {\n  if (data instanceof ArrayBuffer) {\n    return bs58.encode(new Uint8Array(data));\n  }\n  if (Array.isArray(data)) {\n    return bs58.encode(new Uint8Array(data));\n  }\n  return bs58.encode(data);\n};\n\n/**\n * Decodes a base58 string to binary data using Bitcoin's base58 alphabet.\n * Returns a Uint8Array containing the decoded bytes.\n *\n * @param base58String - Base58-encoded string to decode\n * @returns Uint8Array containing the decoded bytes\n * @throws Error if input contains invalid base58 characters\n */\nexport const base58Decode = (base58String: string): Uint8Array => {\n  return bs58.decode(base58String);\n};\n\n"],"mappings":";;;;;;CASa,gBAAgB,SAAsD;AACjF,MAAI,gBAAgB,YAClB,QAAO,KAAK,OAAO,IAAI,WAAW;AAEpC,MAAI,MAAM,QAAQ,MAChB,QAAO,KAAK,OAAO,IAAI,WAAW;AAEpC,SAAO,KAAK,OAAO"}
+{"version":3,"file":"base58.js","names":[],"sources":["../../../src/utils/base58.ts"],"sourcesContent":["import bs58 from 'bs58';\n\n/**\n * Encodes binary data to base58 string using Bitcoin's base58 alphabet.\n * Used extensively in NEAR for account IDs, public keys, hashes, and signatures.\n *\n * @param data - Binary data to encode (Uint8Array, ArrayBuffer, or number[])\n * @returns Base58-encoded string\n */\nexport const base58Encode = (data: Uint8Array | ArrayBuffer | number[]): string => {\n  if (data instanceof ArrayBuffer) {\n    return bs58.encode(new Uint8Array(data));\n  }\n  if (Array.isArray(data)) {\n    return bs58.encode(new Uint8Array(data));\n  }\n  return bs58.encode(data);\n};\n\n/**\n * Decodes a base58 string to binary data using Bitcoin's base58 alphabet.\n * Returns a Uint8Array containing the decoded bytes.\n *\n * @param base58String - Base58-encoded string to decode\n * @returns Uint8Array containing the decoded bytes\n * @throws Error if input contains invalid base58 characters\n */\nexport const base58Decode = (base58String: string): Uint8Array => {\n  return bs58.decode(base58String);\n};\n\n"],"mappings":";;;;;;;;;;AASA,MAAa,gBAAgB,SAAsD;AACjF,KAAI,gBAAgB,YAClB,QAAO,KAAK,OAAO,IAAI,WAAW;AAEpC,KAAI,MAAM,QAAQ,MAChB,QAAO,KAAK,OAAO,IAAI,WAAW;AAEpC,QAAO,KAAK,OAAO"}

package/dist/esm/utils/base64.js

@@ -1,7 +1,21 @@
-import { __esm } from "../_virtual/rolldown_runtime.js";
-
 //#region src/utils/base64.ts
 /**
+* Encodes binary data to standard base64 format for NEAR RPC compatibility.
+* Uses standard base64 characters (+, /, =) rather than base64url encoding.
+*
+* Important: Avoids spreading large arrays into String.fromCharCode(...) which
+* can overflow the JS call stack when encoding big WASM binaries.
+*
+* @param value - ArrayBufferLike or ArrayBufferView containing the binary data to encode
+* @returns Standard base64-encoded string with padding
+*/
+const base64Encode = (value) => {
+	const bytes = ArrayBuffer.isView(value) ? new Uint8Array(value.buffer, value.byteOffset, value.byteLength) : new Uint8Array(value);
+	let binary = "";
+	for (let i = 0; i < bytes.length; i++) binary += String.fromCharCode(bytes[i]);
+	return btoa(binary);
+};
+/**
 * Decodes a standard base64-encoded string into a Uint8Array.
 * Handles standard base64 format with +, /, and = characters.
 *
@@ -16,6 +30,22 @@ function base64Decode(base64) {
 	return bytes;
 }
 /**
+* Encodes an ArrayBuffer into a base64url string.
+* Converts binary data to base64 then replaces standard base64 characters with URL-safe ones:
+* + -> -
+* / -> _
+* Removes padding = characters
+*
+* Used for WebAuthn API compatibility in browser environments.
+* Equivalent to Buffer.from(value).toString('base64url') in Node.js.
+*
+* @param value - The ArrayBufferLike or ArrayBufferView to encode
+* @returns A base64url-encoded string without padding
+*/
+const base64UrlEncode = (value) => {
+	return base64Encode(value).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
+};
+/**
 * Decodes a base64url-encoded string into a Uint8Array.
 * Handles base64url format by replacing URL-safe characters and adding padding.
 *
@@ -31,20 +61,7 @@ function base64UrlDecode(base64Url) {
 	for (let i = 0; i < binaryString.length; i++) bytes[i] = binaryString.charCodeAt(i);
 	return bytes;
 }
-var base64Encode, base64UrlEncode;
-var init_base64 = __esm({ "src/utils/base64.ts": (() => {
-	base64Encode = (value) => {
-		const bytes = ArrayBuffer.isView(value) ? new Uint8Array(value.buffer, value.byteOffset, value.byteLength) : new Uint8Array(value);
-		let binary = "";
-		for (let i = 0; i < bytes.length; i++) binary += String.fromCharCode(bytes[i]);
-		return btoa(binary);
-	};
-	base64UrlEncode = (value) => {
-		return base64Encode(value).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
-	};
-}) });
 
 //#endregion
-init_base64();
-export { base64Decode, base64Encode, base64UrlDecode, base64UrlEncode, init_base64 };
+export { base64Decode, base64Encode, base64UrlDecode, base64UrlEncode };
 //# sourceMappingURL=base64.js.map

package/dist/esm/utils/base64.js.map

@@ -1 +1 @@
-{"version":3,"file":"base64.js","names":[],"sources":["../../../src/utils/base64.ts"],"sourcesContent":["/**\n * Encodes binary data to standard base64 format for NEAR RPC compatibility.\n * Uses standard base64 characters (+, /, =) rather than base64url encoding.\n *\n * Important: Avoids spreading large arrays into String.fromCharCode(...) which\n * can overflow the JS call stack when encoding big WASM binaries.\n *\n * @param value - ArrayBufferLike or ArrayBufferView containing the binary data to encode\n * @returns Standard base64-encoded string with padding\n */\nexport const base64Encode = (value: ArrayBufferLike | ArrayBufferView): string => {\n  const bytes = ArrayBuffer.isView(value)\n    ? new Uint8Array(value.buffer, value.byteOffset, value.byteLength)\n    : new Uint8Array(value);\n  let binary = '';\n  // Build the string incrementally to avoid exceeding the argument limit.\n  for (let i = 0; i < bytes.length; i++) {\n    binary += String.fromCharCode(bytes[i]);\n  }\n  return btoa(binary);\n}\n\n/**\n * Decodes a standard base64-encoded string into a Uint8Array.\n * Handles standard base64 format with +, /, and = characters.\n *\n * @param base64 - The base64-encoded string to decode\n * @returns Uint8Array containing the decoded bytes\n * @throws Error if decoding fails due to invalid base64 input\n */\nexport function base64Decode(base64: string): Uint8Array {\n  const binaryString = atob(base64);\n  const bytes = new Uint8Array(binaryString.length);\n  for (let i = 0; i < binaryString.length; i++) {\n    bytes[i] = binaryString.charCodeAt(i);\n  }\n  return bytes;\n}\n\n/**\n * Encodes an ArrayBuffer into a base64url string.\n * Converts binary data to base64 then replaces standard base64 characters with URL-safe ones:\n * + -> -\n * / -> _\n * Removes padding = characters\n *\n * Used for WebAuthn API compatibility in browser environments.\n * Equivalent to Buffer.from(value).toString('base64url') in Node.js.\n *\n * @param value - The ArrayBufferLike or ArrayBufferView to encode\n * @returns A base64url-encoded string without padding\n */\nexport const base64UrlEncode = (value: ArrayBufferLike | ArrayBufferView): string => {\n  return base64Encode(value)\n    .replace(/\\+/g, \"-\")\n    .replace(/\\//g, \"_\")\n    .replace(/=/g, \"\");\n}\n\n/**\n * Decodes a base64url-encoded string into a Uint8Array.\n * Handles base64url format by replacing URL-safe characters and adding padding.\n *\n * @param base64Url - The base64url-encoded string to decode\n * @returns Uint8Array containing the decoded bytes\n * @throws Error if decoding fails due to invalid base64url input\n */\nexport function base64UrlDecode(base64Url: string): Uint8Array {\n  const padding = '='.repeat((4 - (base64Url.length % 4)) % 4);\n  const base64 = base64Url.replace(/-/g, '+').replace(/_/g, '/') + padding;\n  const binaryString = atob(base64);\n  const bytes = new Uint8Array(binaryString.length);\n  for (let i = 0; i < binaryString.length; i++) {\n    bytes[i] = binaryString.charCodeAt(i);\n  }\n  return bytes;\n}\n\n/**\n * Converts an ArrayBuffer or ArrayBufferLike object to a plain number array for WASM compatibility.\n * WASM bindings require plain number arrays rather than TypedArrays for memory safety and direct access.\n * The resulting array contains values from 0-255 representing raw bytes.\n *\n * @param buffer - The source buffer to convert, either ArrayBuffer or ArrayBufferLike\n * @returns A plain number[] array containing the buffer's bytes\n */\nexport const toWasmByteArray = (buffer: ArrayBuffer | ArrayBufferLike): number[] => {\n  return Array.from(new Uint8Array(buffer));\n}\n"],"mappings":";;;;;;;;;;;AA8BA,SAAgB,aAAa,QAA4B;CACvD,MAAM,eAAe,KAAK;CAC1B,MAAM,QAAQ,IAAI,WAAW,aAAa;AAC1C,MAAK,IAAI,IAAI,GAAG,IAAI,aAAa,QAAQ,IACvC,OAAM,KAAK,aAAa,WAAW;AAErC,QAAO;;;;;;;;;;AA+BT,SAAgB,gBAAgB,WAA+B;CAC7D,MAAM,UAAU,IAAI,QAAQ,IAAK,UAAU,SAAS,KAAM;CAC1D,MAAM,SAAS,UAAU,QAAQ,MAAM,KAAK,QAAQ,MAAM,OAAO;CACjE,MAAM,eAAe,KAAK;CAC1B,MAAM,QAAQ,IAAI,WAAW,aAAa;AAC1C,MAAK,IAAI,IAAI,GAAG,IAAI,aAAa,QAAQ,IACvC,OAAM,KAAK,aAAa,WAAW;AAErC,QAAO;;;;CAjEI,gBAAgB,UAAqD;EAChF,MAAM,QAAQ,YAAY,OAAO,SAC7B,IAAI,WAAW,MAAM,QAAQ,MAAM,YAAY,MAAM,cACrD,IAAI,WAAW;EACnB,IAAI,SAAS;AAEb,OAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,IAChC,WAAU,OAAO,aAAa,MAAM;AAEtC,SAAO,KAAK;;CAiCD,mBAAmB,UAAqD;AACnF,SAAO,aAAa,OACjB,QAAQ,OAAO,KACf,QAAQ,OAAO,KACf,QAAQ,MAAM"}
+{"version":3,"file":"base64.js","names":[],"sources":["../../../src/utils/base64.ts"],"sourcesContent":["/**\n * Encodes binary data to standard base64 format for NEAR RPC compatibility.\n * Uses standard base64 characters (+, /, =) rather than base64url encoding.\n *\n * Important: Avoids spreading large arrays into String.fromCharCode(...) which\n * can overflow the JS call stack when encoding big WASM binaries.\n *\n * @param value - ArrayBufferLike or ArrayBufferView containing the binary data to encode\n * @returns Standard base64-encoded string with padding\n */\nexport const base64Encode = (value: ArrayBufferLike | ArrayBufferView): string => {\n  const bytes = ArrayBuffer.isView(value)\n    ? new Uint8Array(value.buffer, value.byteOffset, value.byteLength)\n    : new Uint8Array(value);\n  let binary = '';\n  // Build the string incrementally to avoid exceeding the argument limit.\n  for (let i = 0; i < bytes.length; i++) {\n    binary += String.fromCharCode(bytes[i]);\n  }\n  return btoa(binary);\n}\n\n/**\n * Decodes a standard base64-encoded string into a Uint8Array.\n * Handles standard base64 format with +, /, and = characters.\n *\n * @param base64 - The base64-encoded string to decode\n * @returns Uint8Array containing the decoded bytes\n * @throws Error if decoding fails due to invalid base64 input\n */\nexport function base64Decode(base64: string): Uint8Array {\n  const binaryString = atob(base64);\n  const bytes = new Uint8Array(binaryString.length);\n  for (let i = 0; i < binaryString.length; i++) {\n    bytes[i] = binaryString.charCodeAt(i);\n  }\n  return bytes;\n}\n\n/**\n * Encodes an ArrayBuffer into a base64url string.\n * Converts binary data to base64 then replaces standard base64 characters with URL-safe ones:\n * + -> -\n * / -> _\n * Removes padding = characters\n *\n * Used for WebAuthn API compatibility in browser environments.\n * Equivalent to Buffer.from(value).toString('base64url') in Node.js.\n *\n * @param value - The ArrayBufferLike or ArrayBufferView to encode\n * @returns A base64url-encoded string without padding\n */\nexport const base64UrlEncode = (value: ArrayBufferLike | ArrayBufferView): string => {\n  return base64Encode(value)\n    .replace(/\\+/g, \"-\")\n    .replace(/\\//g, \"_\")\n    .replace(/=/g, \"\");\n}\n\n/**\n * Decodes a base64url-encoded string into a Uint8Array.\n * Handles base64url format by replacing URL-safe characters and adding padding.\n *\n * @param base64Url - The base64url-encoded string to decode\n * @returns Uint8Array containing the decoded bytes\n * @throws Error if decoding fails due to invalid base64url input\n */\nexport function base64UrlDecode(base64Url: string): Uint8Array {\n  const padding = '='.repeat((4 - (base64Url.length % 4)) % 4);\n  const base64 = base64Url.replace(/-/g, '+').replace(/_/g, '/') + padding;\n  const binaryString = atob(base64);\n  const bytes = new Uint8Array(binaryString.length);\n  for (let i = 0; i < binaryString.length; i++) {\n    bytes[i] = binaryString.charCodeAt(i);\n  }\n  return bytes;\n}\n\n/**\n * Converts an ArrayBuffer or ArrayBufferLike object to a plain number array for WASM compatibility.\n * WASM bindings require plain number arrays rather than TypedArrays for memory safety and direct access.\n * The resulting array contains values from 0-255 representing raw bytes.\n *\n * @param buffer - The source buffer to convert, either ArrayBuffer or ArrayBufferLike\n * @returns A plain number[] array containing the buffer's bytes\n */\nexport const toWasmByteArray = (buffer: ArrayBuffer | ArrayBufferLike): number[] => {\n  return Array.from(new Uint8Array(buffer));\n}\n"],"mappings":";;;;;;;;;;;AAUA,MAAa,gBAAgB,UAAqD;CAChF,MAAM,QAAQ,YAAY,OAAO,SAC7B,IAAI,WAAW,MAAM,QAAQ,MAAM,YAAY,MAAM,cACrD,IAAI,WAAW;CACnB,IAAI,SAAS;AAEb,MAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,IAChC,WAAU,OAAO,aAAa,MAAM;AAEtC,QAAO,KAAK;;;;;;;;;;AAWd,SAAgB,aAAa,QAA4B;CACvD,MAAM,eAAe,KAAK;CAC1B,MAAM,QAAQ,IAAI,WAAW,aAAa;AAC1C,MAAK,IAAI,IAAI,GAAG,IAAI,aAAa,QAAQ,IACvC,OAAM,KAAK,aAAa,WAAW;AAErC,QAAO;;;;;;;;;;;;;;;AAgBT,MAAa,mBAAmB,UAAqD;AACnF,QAAO,aAAa,OACjB,QAAQ,OAAO,KACf,QAAQ,OAAO,KACf,QAAQ,MAAM;;;;;;;;;;AAWnB,SAAgB,gBAAgB,WAA+B;CAC7D,MAAM,UAAU,IAAI,QAAQ,IAAK,UAAU,SAAS,KAAM;CAC1D,MAAM,SAAS,UAAU,QAAQ,MAAM,KAAK,QAAQ,MAAM,OAAO;CACjE,MAAM,eAAe,KAAK;CAC1B,MAAM,QAAQ,IAAI,WAAW,aAAa;AAC1C,MAAK,IAAI,IAAI,GAAG,IAAI,aAAa,QAAQ,IACvC,OAAM,KAAK,aAAa,WAAW;AAErC,QAAO"}

package/dist/esm/utils/digests.js

@@ -0,0 +1,26 @@
+//#region src/utils/digests.ts
+function isRecord(value) {
+	return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function alphabetizeStringify(input) {
+	const normalizeValue = (value) => {
+		if (Array.isArray(value)) return value.map(normalizeValue);
+		if (isRecord(value)) {
+			const sortedKeys = Object.keys(value).sort();
+			const result = {};
+			for (const key of sortedKeys) result[key] = normalizeValue(value[key]);
+			return result;
+		}
+		return value;
+	};
+	return JSON.stringify(normalizeValue(input));
+}
+async function sha256BytesUtf8(input) {
+	const data = new TextEncoder().encode(input);
+	const digest = await crypto.subtle.digest("SHA-256", data);
+	return new Uint8Array(digest);
+}
+
+//#endregion
+export { alphabetizeStringify, sha256BytesUtf8 };
+//# sourceMappingURL=digests.js.map

package/dist/esm/utils/digests.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"digests.js","names":["result: Record<string, unknown>"],"sources":["../../../src/utils/digests.ts"],"sourcesContent":["// Shared digest primitives used across browser + server code.\n//\n// These helpers deliberately stay small and dependency-free so they can be used from:\n// - UI/VRF binding (WebAuthnManager)\n// - Relayer/server-side verification (threshold validation)\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === 'object' && !Array.isArray(value);\n}\n\n// Deterministic stringify by alphabetizing object keys recursively.\n// Arrays preserve order; only keys within objects are sorted.\nexport function alphabetizeStringify(input: unknown): string {\n  const normalizeValue = (value: unknown): unknown => {\n    if (Array.isArray(value)) {\n      return value.map(normalizeValue);\n    }\n    if (isRecord(value)) {\n      const sortedKeys = Object.keys(value).sort();\n      const result: Record<string, unknown> = {};\n      for (const key of sortedKeys) {\n        result[key] = normalizeValue(value[key]);\n      }\n      return result;\n    }\n    return value;\n  };\n\n  return JSON.stringify(normalizeValue(input));\n}\n\nexport async function sha256BytesUtf8(input: string): Promise<Uint8Array> {\n  const data = new TextEncoder().encode(input);\n  const digest = await crypto.subtle.digest('SHA-256', data);\n  return new Uint8Array(digest);\n}\n\n"],"mappings":";AAMA,SAAS,SAAS,OAAkD;AAClE,QAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ;;AAKvE,SAAgB,qBAAqB,OAAwB;CAC3D,MAAM,kBAAkB,UAA4B;AAClD,MAAI,MAAM,QAAQ,OAChB,QAAO,MAAM,IAAI;AAEnB,MAAI,SAAS,QAAQ;GACnB,MAAM,aAAa,OAAO,KAAK,OAAO;GACtC,MAAMA,SAAkC;AACxC,QAAK,MAAM,OAAO,WAChB,QAAO,OAAO,eAAe,MAAM;AAErC,UAAO;;AAET,SAAO;;AAGT,QAAO,KAAK,UAAU,eAAe;;AAGvC,eAAsB,gBAAgB,OAAoC;CACxE,MAAM,OAAO,IAAI,cAAc,OAAO;CACtC,MAAM,SAAS,MAAM,OAAO,OAAO,OAAO,WAAW;AACrD,QAAO,IAAI,WAAW"}

package/dist/esm/utils/errors.js

@@ -1,5 +1,3 @@
-import { __esm } from "../_virtual/rolldown_runtime.js";
-
 //#region src/utils/errors.ts
 /**
 * Centralized error handling utilities for the Passkey SDK
@@ -132,9 +130,7 @@ function getNearShortErrorMessage(error) {
 		return void 0;
 	}
 }
-var init_errors = __esm({ "src/utils/errors.ts": (() => {}) });
 
 //#endregion
-init_errors();
-export { errorMessage, getNearShortErrorMessage, getTouchIdCancellationMessage, getUserFriendlyErrorMessage, init_errors, isTouchIdCancellationError, toError };
+export { errorMessage, getNearShortErrorMessage, getUserFriendlyErrorMessage, isTouchIdCancellationError, toError };
 //# sourceMappingURL=errors.js.map

package/dist/esm/utils/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","names":[],"sources":["../../../src/utils/errors.ts"],"sourcesContent":["/**\n * Centralized error handling utilities for the Passkey SDK\n */\n\n/**\n * Best-effort error message extractor without relying on `any`.\n * Always returns a string (may be empty when nothing usable can be derived).\n */\nexport function errorMessage(err: unknown): string {\n  try {\n    if (typeof err === 'string') return err;\n    if (err && typeof (err as { message?: unknown }).message === 'string') {\n      return (err as { message: string }).message;\n    }\n    return String(err ?? '');\n  } catch {\n    return '';\n  }\n}\n\n/**\n * Normalize any thrown value into an Error instance.\n * - preserves message/name/stack when available\n * - best-effort copies optional code/details properties if present\n */\nexport function toError(e: unknown): Error {\n  if (e instanceof Error) return e;\n  const err = new Error(errorMessage(e));\n  try {\n    const src = e as { name?: unknown; stack?: unknown; code?: unknown; details?: unknown };\n    if (typeof src?.name === 'string') err.name = src.name;\n    if (typeof src?.stack === 'string') (err as { stack?: string }).stack = src.stack;\n    if (src && typeof src.code !== 'undefined') (err as { code?: unknown }).code = src.code;\n    if (src && typeof src.details !== 'undefined') (err as { details?: unknown }).details = src.details;\n  } catch {}\n  return err;\n}\n\n/**\n * Check if an error is related to user cancellation of TouchID/FaceID prompt\n * @param error - The error object or error message string\n * @returns true if the error indicates user cancellation\n */\nexport function isTouchIdCancellationError(error: unknown): boolean {\n  const msg = errorMessage(error);\n\n  // Normalize for case-insensitive substring checks on user-facing phrases\n  const lower = msg.toLowerCase();\n\n  return msg.includes('The operation either timed out or was not allowed') ||\n         msg.includes('NotAllowedError') ||\n         msg.includes('AbortError') ||\n         lower.includes('user cancelled') ||\n         lower.includes('user canceled') ||\n         lower.includes('user aborted');\n}\n\n/**\n * Get a user-friendly error message for TouchID/FaceID cancellation\n * @param context - The context where the cancellation occurred (e.g., 'registration', 'login')\n * @returns A user-friendly error message\n */\nexport function getTouchIdCancellationMessage(context: 'registration' | 'login'): string {\n  switch (context) {\n    case 'registration':\n      return `Registration was cancelled. Please try again when you're ready to set up your passkey.`;\n    case 'login':\n      return `Login was cancelled. Please try again when you're ready to authenticate.`;\n    default:\n      return `Operation was cancelled. Please try again when you're ready.`;\n  }\n}\n\n/**\n * Transform an error message to be more user-friendly\n * @param error - The original error object or message\n * @param context - The context where the error occurred\n * @param nearAccountId - Optional NEAR account ID for context-specific messages\n * @returns A user-friendly error message\n */\nexport function getUserFriendlyErrorMessage(\n  error: unknown,\n  context: 'registration' | 'login' = 'registration',\n  nearAccountId?: string\n): string {\n  const msg = errorMessage(error);\n\n  // Handle TouchID/FaceID cancellation\n  if (isTouchIdCancellationError(error)) {\n    return getTouchIdCancellationMessage(context);\n  }\n\n  // Missing PRF outputs\n  if (msg.includes('PRF outputs missing')) {\n    const op = context === 'registration' ? 'Registration' : 'Login';\n    return `${op} failed because your browser did not return the required passkey PRF results. On some mobile browsers this is not available for create(); try updating your browser or use a desktop browser. We’re working on an alternate path for broader device support.`;\n  }\n\n  // Handle other common errors\n  if (msg.includes('one of the credentials already registered')) {\n    return `A passkey for '${nearAccountId || 'this account'}' already exists. Please try logging in instead.`;\n  }\n\n  if (msg.includes('Cannot deserialize the contract state')) {\n    return `Contract state deserialization failed. This may be due to a contract upgrade. Please try again or contact support.`;\n  }\n\n  if (msg.includes('Web3Authn contract registration check failed')) {\n    return `Contract registration check failed: ${msg.replace('Web3Authn contract registration check failed: ', '')}`;\n  }\n\n  if (msg.includes('Unknown error occurred')) {\n    return `${context === 'registration' ? 'Registration' : 'Login'} failed due to an unknown error. Please check your connection and try again.`;\n  }\n\n  // Return the original error message if no specific handling is needed\n  return msg;\n}\n\n/**\n * Format a NEAR JSON-RPC error into a concise, human-friendly message while\n * preserving the original error payload on `details`.\n *\n * The function is defensive and only relies on structural checks. It does not\n * require concrete NEAR types to avoid tight coupling with providers.\n */\nexport function formatNearRpcError(\n  operationName: string,\n  rpc: { error?: { code?: number; name?: string; message?: string; data?: unknown } }\n): { message: string; code?: number; name?: string; details?: unknown } {\n  const err = rpc?.error || {};\n  const details = err.data as unknown;\n\n  const code = typeof err.code === 'number' ? err.code : undefined;\n  const name = typeof err.name === 'string' ? err.name : undefined;\n  const generic = typeof err.message === 'string'\n    ? err.message\n    : (details && typeof (details as { message?: unknown }).message === 'string'\n        ? (details as { message: string }).message\n        : 'RPC error');\n\n  // Helper: get first key of object\n  const firstKey = (o: unknown): string | undefined => {\n    if (!o || typeof o !== 'object') return undefined;\n    const keys = Object.keys(o as Record<string, unknown>);\n    return keys.length ? keys[0] : undefined;\n  };\n\n  // Helper: shallow object check\n  const isObj = (v: unknown): v is Record<string, unknown> => !!v && typeof v === 'object' && !Array.isArray(v);\n\n  // Extract structured NEAR error kinds if present (generic traversal)\n  const d = details as Record<string, unknown> | undefined;\n  const txExec = isObj(d) ? d.TxExecutionError : undefined;\n  if (isObj(txExec)) {\n    let node: Record<string, unknown> | undefined = txExec;\n    const path: string[] = ['TxExecutionError'];\n    let depth = 0;\n    while (node && depth < 5 && isObj(node)) {\n      const k = firstKey(node);\n      if (!k) break;\n      const nextNode: unknown = (node as Record<string, unknown>)[k as string];\n      path.push(k);\n      node = isObj(nextNode) ? (nextNode as Record<string, unknown>) : undefined;\n      depth++;\n    }\n\n    // Special-case action index when present for better UX\n    const actionError = (isObj(txExec) && isObj(txExec.ActionError)) ? txExec.ActionError as Record<string, unknown> : undefined;\n    const idx = (isObj(actionError) && typeof actionError.index === 'number') ? ` at action ${actionError.index}` : '';\n\n    const payload = isObj(node) ? node : undefined;\n    const suffix = payload && Object.keys(payload).length ? `: ${JSON.stringify(payload)}` : '';\n    const prefix = [name, typeof code === 'number' ? `code ${code}` : undefined].filter(Boolean).join(' ');\n    const kindPath = path.join('.');\n    const message = [prefix, `${operationName} failed${idx} (${kindPath}${suffix})`].filter(Boolean).join(' - ');\n    return { message, code, name, details };\n  }\n\n  // Fallback generic message including data when available\n  const prefix = [name, typeof code === 'number' ? `code ${code}` : undefined].filter(Boolean).join(' ');\n  const dataStr = isObj(details) ? ` Details: ${JSON.stringify(details)}` : '';\n  const message = [prefix, `${operationName} RPC error: ${generic}${dataStr}`].filter(Boolean).join(' - ');\n  return { message, code, name, details };\n}\n\n/**\n * Extract a short NEAR error label for UI display, e.g.:\n *   \"InvalidTxError: UnsuitableStakingKey\"\n * Falls back to undefined when structure is not recognized.\n */\nexport function getNearShortErrorMessage(error: unknown): string | undefined {\n  try {\n    const err = error as { details?: unknown; message?: string };\n    const details = err?.details as Record<string, unknown> | undefined;\n    const isObj = (v: unknown): v is Record<string, unknown> => !!v && typeof v === 'object' && !Array.isArray(v);\n    if (!isObj(details)) return undefined;\n\n    // Path 1: details.TxExecutionError (RPC top-level error)\n    const txExec = details.TxExecutionError as unknown;\n    if (isObj(txExec)) {\n      if (isObj(txExec.InvalidTxError)) {\n        const inv = txExec.InvalidTxError as Record<string, unknown>;\n        if (isObj(inv.ActionsValidation)) {\n          const kind = Object.keys(inv.ActionsValidation)[0];\n          if (kind) return `InvalidTxError: ${kind}`;\n        }\n        const first = Object.keys(inv)[0];\n        if (first) return `InvalidTxError: ${first}`;\n        return 'InvalidTxError';\n      }\n      if (isObj(txExec.ActionError)) {\n        const ae = txExec.ActionError as Record<string, unknown>;\n        const kindObj = isObj(ae.kind) ? (ae.kind as Record<string, unknown>) : undefined;\n        const kind = kindObj ? Object.keys(kindObj)[0] : undefined;\n        if (kind) return `ActionError: ${kind}`;\n        return 'ActionError';\n      }\n    }\n\n    // Path 2: details.Failure (sendTransaction resolved with Failure)\n    const failure = details.Failure as unknown;\n    if (isObj(failure)) {\n      if (isObj(failure.InvalidTxError)) {\n        const inv = failure.InvalidTxError as Record<string, unknown>;\n        if (isObj(inv.ActionsValidation)) {\n          const kind = Object.keys(inv.ActionsValidation)[0];\n          if (kind) return `InvalidTxError: ${kind}`;\n        }\n        const first = Object.keys(inv)[0];\n        if (first) return `InvalidTxError: ${first}`;\n        return 'InvalidTxError';\n      }\n      if (isObj(failure.ActionError)) {\n        const ae = failure.ActionError as Record<string, unknown>;\n        const kindObj = isObj(ae.kind) ? (ae.kind as Record<string, unknown>) : undefined;\n        const kind = kindObj ? Object.keys(kindObj)[0] : undefined;\n        if (kind) return `ActionError: ${kind}`;\n        return 'ActionError';\n      }\n    }\n\n    return undefined;\n  } catch {\n    return undefined;\n  }\n}\n"],"mappings":";;;;;;;;;;AAQA,SAAgB,aAAa,KAAsB;AACjD,KAAI;AACF,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,MAAI,OAAO,OAAQ,IAA8B,YAAY,SAC3D,QAAQ,IAA4B;AAEtC,SAAO,OAAO,OAAO;SACf;AACN,SAAO;;;;;;;;AASX,SAAgB,QAAQ,GAAmB;AACzC,KAAI,aAAa,MAAO,QAAO;CAC/B,MAAM,MAAM,IAAI,MAAM,aAAa;AACnC,KAAI;EACF,MAAM,MAAM;AACZ,MAAI,OAAO,KAAK,SAAS,SAAU,KAAI,OAAO,IAAI;AAClD,MAAI,OAAO,KAAK,UAAU,SAAU,CAAC,IAA2B,QAAQ,IAAI;AAC5E,MAAI,OAAO,OAAO,IAAI,SAAS,YAAa,CAAC,IAA2B,OAAO,IAAI;AACnF,MAAI,OAAO,OAAO,IAAI,YAAY,YAAa,CAAC,IAA8B,UAAU,IAAI;SACtF;AACR,QAAO;;;;;;;AAQT,SAAgB,2BAA2B,OAAyB;CAClE,MAAM,MAAM,aAAa;CAGzB,MAAM,QAAQ,IAAI;AAElB,QAAO,IAAI,SAAS,wDACb,IAAI,SAAS,sBACb,IAAI,SAAS,iBACb,MAAM,SAAS,qBACf,MAAM,SAAS,oBACf,MAAM,SAAS;;;;;;;AAQxB,SAAgB,8BAA8B,SAA2C;AACvF,SAAQ,SAAR;EACE,KAAK,eACH,QAAO;EACT,KAAK,QACH,QAAO;EACT,QACE,QAAO;;;;;;;;;;AAWb,SAAgB,4BACd,OACA,UAAoC,gBACpC,eACQ;CACR,MAAM,MAAM,aAAa;AAGzB,KAAI,2BAA2B,OAC7B,QAAO,8BAA8B;AAIvC,KAAI,IAAI,SAAS,wBAAwB;EACvC,MAAM,KAAK,YAAY,iBAAiB,iBAAiB;AACzD,SAAO,GAAG,GAAG;;AAIf,KAAI,IAAI,SAAS,6CACf,QAAO,kBAAkB,iBAAiB,eAAe;AAG3D,KAAI,IAAI,SAAS,yCACf,QAAO;AAGT,KAAI,IAAI,SAAS,gDACf,QAAO,uCAAuC,IAAI,QAAQ,kDAAkD;AAG9G,KAAI,IAAI,SAAS,0BACf,QAAO,GAAG,YAAY,iBAAiB,iBAAiB,QAAQ;AAIlE,QAAO;;;;;;;AA2ET,SAAgB,yBAAyB,OAAoC;AAC3E,KAAI;EACF,MAAM,MAAM;EACZ,MAAM,UAAU,KAAK;EACrB,MAAM,SAAS,MAA6C,CAAC,CAAC,KAAK,OAAO,MAAM,YAAY,CAAC,MAAM,QAAQ;AAC3G,MAAI,CAAC,MAAM,SAAU,QAAO;EAG5B,MAAM,SAAS,QAAQ;AACvB,MAAI,MAAM,SAAS;AACjB,OAAI,MAAM,OAAO,iBAAiB;IAChC,MAAM,MAAM,OAAO;AACnB,QAAI,MAAM,IAAI,oBAAoB;KAChC,MAAM,OAAO,OAAO,KAAK,IAAI,mBAAmB;AAChD,SAAI,KAAM,QAAO,mBAAmB;;IAEtC,MAAM,QAAQ,OAAO,KAAK,KAAK;AAC/B,QAAI,MAAO,QAAO,mBAAmB;AACrC,WAAO;;AAET,OAAI,MAAM,OAAO,cAAc;IAC7B,MAAM,KAAK,OAAO;IAClB,MAAM,UAAU,MAAM,GAAG,QAAS,GAAG,OAAmC;IACxE,MAAM,OAAO,UAAU,OAAO,KAAK,SAAS,KAAK;AACjD,QAAI,KAAM,QAAO,gBAAgB;AACjC,WAAO;;;EAKX,MAAM,UAAU,QAAQ;AACxB,MAAI,MAAM,UAAU;AAClB,OAAI,MAAM,QAAQ,iBAAiB;IACjC,MAAM,MAAM,QAAQ;AACpB,QAAI,MAAM,IAAI,oBAAoB;KAChC,MAAM,OAAO,OAAO,KAAK,IAAI,mBAAmB;AAChD,SAAI,KAAM,QAAO,mBAAmB;;IAEtC,MAAM,QAAQ,OAAO,KAAK,KAAK;AAC/B,QAAI,MAAO,QAAO,mBAAmB;AACrC,WAAO;;AAET,OAAI,MAAM,QAAQ,cAAc;IAC9B,MAAM,KAAK,QAAQ;IACnB,MAAM,UAAU,MAAM,GAAG,QAAS,GAAG,OAAmC;IACxE,MAAM,OAAO,UAAU,OAAO,KAAK,SAAS,KAAK;AACjD,QAAI,KAAM,QAAO,gBAAgB;AACjC,WAAO;;;AAIX,SAAO;SACD;AACN,SAAO"}
+{"version":3,"file":"errors.js","names":[],"sources":["../../../src/utils/errors.ts"],"sourcesContent":["/**\n * Centralized error handling utilities for the Passkey SDK\n */\n\n/**\n * Best-effort error message extractor without relying on `any`.\n * Always returns a string (may be empty when nothing usable can be derived).\n */\nexport function errorMessage(err: unknown): string {\n  try {\n    if (typeof err === 'string') return err;\n    if (err && typeof (err as { message?: unknown }).message === 'string') {\n      return (err as { message: string }).message;\n    }\n    return String(err ?? '');\n  } catch {\n    return '';\n  }\n}\n\n/**\n * Normalize any thrown value into an Error instance.\n * - preserves message/name/stack when available\n * - best-effort copies optional code/details properties if present\n */\nexport function toError(e: unknown): Error {\n  if (e instanceof Error) return e;\n  const err = new Error(errorMessage(e));\n  try {\n    const src = e as { name?: unknown; stack?: unknown; code?: unknown; details?: unknown };\n    if (typeof src?.name === 'string') err.name = src.name;\n    if (typeof src?.stack === 'string') (err as { stack?: string }).stack = src.stack;\n    if (src && typeof src.code !== 'undefined') (err as { code?: unknown }).code = src.code;\n    if (src && typeof src.details !== 'undefined') (err as { details?: unknown }).details = src.details;\n  } catch {}\n  return err;\n}\n\n/**\n * Check if an error is related to user cancellation of TouchID/FaceID prompt\n * @param error - The error object or error message string\n * @returns true if the error indicates user cancellation\n */\nexport function isTouchIdCancellationError(error: unknown): boolean {\n  const msg = errorMessage(error);\n\n  // Normalize for case-insensitive substring checks on user-facing phrases\n  const lower = msg.toLowerCase();\n\n  return msg.includes('The operation either timed out or was not allowed') ||\n         msg.includes('NotAllowedError') ||\n         msg.includes('AbortError') ||\n         lower.includes('user cancelled') ||\n         lower.includes('user canceled') ||\n         lower.includes('user aborted');\n}\n\n/**\n * Get a user-friendly error message for TouchID/FaceID cancellation\n * @param context - The context where the cancellation occurred (e.g., 'registration', 'login')\n * @returns A user-friendly error message\n */\nexport function getTouchIdCancellationMessage(context: 'registration' | 'login'): string {\n  switch (context) {\n    case 'registration':\n      return `Registration was cancelled. Please try again when you're ready to set up your passkey.`;\n    case 'login':\n      return `Login was cancelled. Please try again when you're ready to authenticate.`;\n    default:\n      return `Operation was cancelled. Please try again when you're ready.`;\n  }\n}\n\n/**\n * Transform an error message to be more user-friendly\n * @param error - The original error object or message\n * @param context - The context where the error occurred\n * @param nearAccountId - Optional NEAR account ID for context-specific messages\n * @returns A user-friendly error message\n */\nexport function getUserFriendlyErrorMessage(\n  error: unknown,\n  context: 'registration' | 'login' = 'registration',\n  nearAccountId?: string\n): string {\n  const msg = errorMessage(error);\n\n  // Handle TouchID/FaceID cancellation\n  if (isTouchIdCancellationError(error)) {\n    return getTouchIdCancellationMessage(context);\n  }\n\n  // Missing PRF outputs\n  if (msg.includes('PRF outputs missing')) {\n    const op = context === 'registration' ? 'Registration' : 'Login';\n    return `${op} failed because your browser did not return the required passkey PRF results. On some mobile browsers this is not available for create(); try updating your browser or use a desktop browser. We’re working on an alternate path for broader device support.`;\n  }\n\n  // Handle other common errors\n  if (msg.includes('one of the credentials already registered')) {\n    return `A passkey for '${nearAccountId || 'this account'}' already exists. Please try logging in instead.`;\n  }\n\n  if (msg.includes('Cannot deserialize the contract state')) {\n    return `Contract state deserialization failed. This may be due to a contract upgrade. Please try again or contact support.`;\n  }\n\n  if (msg.includes('Web3Authn contract registration check failed')) {\n    return `Contract registration check failed: ${msg.replace('Web3Authn contract registration check failed: ', '')}`;\n  }\n\n  if (msg.includes('Unknown error occurred')) {\n    return `${context === 'registration' ? 'Registration' : 'Login'} failed due to an unknown error. Please check your connection and try again.`;\n  }\n\n  // Return the original error message if no specific handling is needed\n  return msg;\n}\n\n/**\n * Format a NEAR JSON-RPC error into a concise, human-friendly message while\n * preserving the original error payload on `details`.\n *\n * The function is defensive and only relies on structural checks. It does not\n * require concrete NEAR types to avoid tight coupling with providers.\n */\nexport function formatNearRpcError(\n  operationName: string,\n  rpc: { error?: { code?: number; name?: string; message?: string; data?: unknown } }\n): { message: string; code?: number; name?: string; details?: unknown } {\n  const err = rpc?.error || {};\n  const details = err.data as unknown;\n\n  const code = typeof err.code === 'number' ? err.code : undefined;\n  const name = typeof err.name === 'string' ? err.name : undefined;\n  const generic = typeof err.message === 'string'\n    ? err.message\n    : (details && typeof (details as { message?: unknown }).message === 'string'\n        ? (details as { message: string }).message\n        : 'RPC error');\n\n  // Helper: get first key of object\n  const firstKey = (o: unknown): string | undefined => {\n    if (!o || typeof o !== 'object') return undefined;\n    const keys = Object.keys(o as Record<string, unknown>);\n    return keys.length ? keys[0] : undefined;\n  };\n\n  // Helper: shallow object check\n  const isObj = (v: unknown): v is Record<string, unknown> => !!v && typeof v === 'object' && !Array.isArray(v);\n\n  // Extract structured NEAR error kinds if present (generic traversal)\n  const d = details as Record<string, unknown> | undefined;\n  const txExec = isObj(d) ? d.TxExecutionError : undefined;\n  if (isObj(txExec)) {\n    let node: Record<string, unknown> | undefined = txExec;\n    const path: string[] = ['TxExecutionError'];\n    let depth = 0;\n    while (node && depth < 5 && isObj(node)) {\n      const k = firstKey(node);\n      if (!k) break;\n      const nextNode: unknown = (node as Record<string, unknown>)[k as string];\n      path.push(k);\n      node = isObj(nextNode) ? (nextNode as Record<string, unknown>) : undefined;\n      depth++;\n    }\n\n    // Special-case action index when present for better UX\n    const actionError = (isObj(txExec) && isObj(txExec.ActionError)) ? txExec.ActionError as Record<string, unknown> : undefined;\n    const idx = (isObj(actionError) && typeof actionError.index === 'number') ? ` at action ${actionError.index}` : '';\n\n    const payload = isObj(node) ? node : undefined;\n    const suffix = payload && Object.keys(payload).length ? `: ${JSON.stringify(payload)}` : '';\n    const prefix = [name, typeof code === 'number' ? `code ${code}` : undefined].filter(Boolean).join(' ');\n    const kindPath = path.join('.');\n    const message = [prefix, `${operationName} failed${idx} (${kindPath}${suffix})`].filter(Boolean).join(' - ');\n    return { message, code, name, details };\n  }\n\n  // Fallback generic message including data when available\n  const prefix = [name, typeof code === 'number' ? `code ${code}` : undefined].filter(Boolean).join(' ');\n  const dataStr = isObj(details) ? ` Details: ${JSON.stringify(details)}` : '';\n  const message = [prefix, `${operationName} RPC error: ${generic}${dataStr}`].filter(Boolean).join(' - ');\n  return { message, code, name, details };\n}\n\n/**\n * Extract a short NEAR error label for UI display, e.g.:\n *   \"InvalidTxError: UnsuitableStakingKey\"\n * Falls back to undefined when structure is not recognized.\n */\nexport function getNearShortErrorMessage(error: unknown): string | undefined {\n  try {\n    const err = error as { details?: unknown; message?: string };\n    const details = err?.details as Record<string, unknown> | undefined;\n    const isObj = (v: unknown): v is Record<string, unknown> => !!v && typeof v === 'object' && !Array.isArray(v);\n    if (!isObj(details)) return undefined;\n\n    // Path 1: details.TxExecutionError (RPC top-level error)\n    const txExec = details.TxExecutionError as unknown;\n    if (isObj(txExec)) {\n      if (isObj(txExec.InvalidTxError)) {\n        const inv = txExec.InvalidTxError as Record<string, unknown>;\n        if (isObj(inv.ActionsValidation)) {\n          const kind = Object.keys(inv.ActionsValidation)[0];\n          if (kind) return `InvalidTxError: ${kind}`;\n        }\n        const first = Object.keys(inv)[0];\n        if (first) return `InvalidTxError: ${first}`;\n        return 'InvalidTxError';\n      }\n      if (isObj(txExec.ActionError)) {\n        const ae = txExec.ActionError as Record<string, unknown>;\n        const kindObj = isObj(ae.kind) ? (ae.kind as Record<string, unknown>) : undefined;\n        const kind = kindObj ? Object.keys(kindObj)[0] : undefined;\n        if (kind) return `ActionError: ${kind}`;\n        return 'ActionError';\n      }\n    }\n\n    // Path 2: details.Failure (sendTransaction resolved with Failure)\n    const failure = details.Failure as unknown;\n    if (isObj(failure)) {\n      if (isObj(failure.InvalidTxError)) {\n        const inv = failure.InvalidTxError as Record<string, unknown>;\n        if (isObj(inv.ActionsValidation)) {\n          const kind = Object.keys(inv.ActionsValidation)[0];\n          if (kind) return `InvalidTxError: ${kind}`;\n        }\n        const first = Object.keys(inv)[0];\n        if (first) return `InvalidTxError: ${first}`;\n        return 'InvalidTxError';\n      }\n      if (isObj(failure.ActionError)) {\n        const ae = failure.ActionError as Record<string, unknown>;\n        const kindObj = isObj(ae.kind) ? (ae.kind as Record<string, unknown>) : undefined;\n        const kind = kindObj ? Object.keys(kindObj)[0] : undefined;\n        if (kind) return `ActionError: ${kind}`;\n        return 'ActionError';\n      }\n    }\n\n    return undefined;\n  } catch {\n    return undefined;\n  }\n}\n"],"mappings":";;;;;;;;AAQA,SAAgB,aAAa,KAAsB;AACjD,KAAI;AACF,MAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,MAAI,OAAO,OAAQ,IAA8B,YAAY,SAC3D,QAAQ,IAA4B;AAEtC,SAAO,OAAO,OAAO;SACf;AACN,SAAO;;;;;;;;AASX,SAAgB,QAAQ,GAAmB;AACzC,KAAI,aAAa,MAAO,QAAO;CAC/B,MAAM,MAAM,IAAI,MAAM,aAAa;AACnC,KAAI;EACF,MAAM,MAAM;AACZ,MAAI,OAAO,KAAK,SAAS,SAAU,KAAI,OAAO,IAAI;AAClD,MAAI,OAAO,KAAK,UAAU,SAAU,CAAC,IAA2B,QAAQ,IAAI;AAC5E,MAAI,OAAO,OAAO,IAAI,SAAS,YAAa,CAAC,IAA2B,OAAO,IAAI;AACnF,MAAI,OAAO,OAAO,IAAI,YAAY,YAAa,CAAC,IAA8B,UAAU,IAAI;SACtF;AACR,QAAO;;;;;;;AAQT,SAAgB,2BAA2B,OAAyB;CAClE,MAAM,MAAM,aAAa;CAGzB,MAAM,QAAQ,IAAI;AAElB,QAAO,IAAI,SAAS,wDACb,IAAI,SAAS,sBACb,IAAI,SAAS,iBACb,MAAM,SAAS,qBACf,MAAM,SAAS,oBACf,MAAM,SAAS;;;;;;;AAQxB,SAAgB,8BAA8B,SAA2C;AACvF,SAAQ,SAAR;EACE,KAAK,eACH,QAAO;EACT,KAAK,QACH,QAAO;EACT,QACE,QAAO;;;;;;;;;;AAWb,SAAgB,4BACd,OACA,UAAoC,gBACpC,eACQ;CACR,MAAM,MAAM,aAAa;AAGzB,KAAI,2BAA2B,OAC7B,QAAO,8BAA8B;AAIvC,KAAI,IAAI,SAAS,wBAAwB;EACvC,MAAM,KAAK,YAAY,iBAAiB,iBAAiB;AACzD,SAAO,GAAG,GAAG;;AAIf,KAAI,IAAI,SAAS,6CACf,QAAO,kBAAkB,iBAAiB,eAAe;AAG3D,KAAI,IAAI,SAAS,yCACf,QAAO;AAGT,KAAI,IAAI,SAAS,gDACf,QAAO,uCAAuC,IAAI,QAAQ,kDAAkD;AAG9G,KAAI,IAAI,SAAS,0BACf,QAAO,GAAG,YAAY,iBAAiB,iBAAiB,QAAQ;AAIlE,QAAO;;;;;;;AA2ET,SAAgB,yBAAyB,OAAoC;AAC3E,KAAI;EACF,MAAM,MAAM;EACZ,MAAM,UAAU,KAAK;EACrB,MAAM,SAAS,MAA6C,CAAC,CAAC,KAAK,OAAO,MAAM,YAAY,CAAC,MAAM,QAAQ;AAC3G,MAAI,CAAC,MAAM,SAAU,QAAO;EAG5B,MAAM,SAAS,QAAQ;AACvB,MAAI,MAAM,SAAS;AACjB,OAAI,MAAM,OAAO,iBAAiB;IAChC,MAAM,MAAM,OAAO;AACnB,QAAI,MAAM,IAAI,oBAAoB;KAChC,MAAM,OAAO,OAAO,KAAK,IAAI,mBAAmB;AAChD,SAAI,KAAM,QAAO,mBAAmB;;IAEtC,MAAM,QAAQ,OAAO,KAAK,KAAK;AAC/B,QAAI,MAAO,QAAO,mBAAmB;AACrC,WAAO;;AAET,OAAI,MAAM,OAAO,cAAc;IAC7B,MAAM,KAAK,OAAO;IAClB,MAAM,UAAU,MAAM,GAAG,QAAS,GAAG,OAAmC;IACxE,MAAM,OAAO,UAAU,OAAO,KAAK,SAAS,KAAK;AACjD,QAAI,KAAM,QAAO,gBAAgB;AACjC,WAAO;;;EAKX,MAAM,UAAU,QAAQ;AACxB,MAAI,MAAM,UAAU;AAClB,OAAI,MAAM,QAAQ,iBAAiB;IACjC,MAAM,MAAM,QAAQ;AACpB,QAAI,MAAM,IAAI,oBAAoB;KAChC,MAAM,OAAO,OAAO,KAAK,IAAI,mBAAmB;AAChD,SAAI,KAAM,QAAO,mBAAmB;;IAEtC,MAAM,QAAQ,OAAO,KAAK,KAAK;AAC/B,QAAI,MAAO,QAAO,mBAAmB;AACrC,WAAO;;AAET,OAAI,MAAM,QAAQ,cAAc;IAC9B,MAAM,KAAK,QAAQ;IACnB,MAAM,UAAU,MAAM,GAAG,QAAS,GAAG,OAAmC;IACxE,MAAM,OAAO,UAAU,OAAO,KAAK,SAAS,KAAK;AACjD,QAAI,KAAM,QAAO,gBAAgB;AACjC,WAAO;;;AAIX,SAAO;SACD;AACN,SAAO"}

package/dist/esm/utils/validation.js

@@ -1,6 +1,48 @@
-import { __esm } from "../_virtual/rolldown_runtime.js";
-
 //#region src/utils/validation.ts
+/** Strict string coercion: returns the value only when it's already a string. */
+function toOptionalString(value) {
+	return typeof value === "string" ? value : "";
+}
+/** Strict string coercion + trimming. */
+function toOptionalTrimmedString(value) {
+	return toOptionalString(value).trim();
+}
+/** String coercion + trimming (useful at IO boundaries). */
+function toTrimmedString(value) {
+	return String(value ?? "").trim();
+}
+/** Remove trailing `/` characters (e.g. base URL normalization). */
+function stripTrailingSlashes(value) {
+	return String(value ?? "").replace(/\/+$/, "");
+}
+/** Ensure a non-empty string starts with `/` (path normalization). */
+function ensureLeadingSlash(value) {
+	const trimmed = String(value ?? "").trim();
+	if (!trimmed) return "";
+	return trimmed.startsWith("/") ? trimmed : `/${trimmed}`;
+}
+/** Normalize an app base path like `/sdk` (leading slash, no trailing slashes except `/`). */
+function toBasePath(value, fallback = "/sdk") {
+	const base = ensureLeadingSlash(typeof value === "string" ? value : fallback) || ensureLeadingSlash(fallback) || "/";
+	if (base === "/") return "/";
+	return base.replace(/\/+$/, "");
+}
+/**
+* Ensure a key string has the NEAR Ed25519 prefix (`ed25519:`).
+*
+* - Accepts either `ed25519:<base58>` or a bare `<base58>` string.
+* - Canonicalizes `ED25519:` → `ed25519:`.
+* - If a different prefix is present (e.g. `secp256k1:`), returns the input unchanged.
+*/
+function ensureEd25519Prefix(value) {
+	const raw = String(value ?? "").trim();
+	if (!raw) return "";
+	if (/^[a-z0-9_]+:/i.test(raw)) {
+		if (/^ed25519:/i.test(raw)) return `ed25519:${raw.replace(/^ed25519:/i, "")}`;
+		return raw;
+	}
+	return `ed25519:${raw}`;
+}
 /**
 * Validate NEAR account ID format with optional suffix restrictions
 * @param nearAccountId - The account ID to validate
@@ -53,9 +95,50 @@ function validateNearAccountId(nearAccountId, options = {
 	}
 	return { valid: true };
 }
-var init_validation = __esm({ "src/utils/validation.ts": (() => {}) });
+function isObject(x) {
+	return x !== null && typeof x === "object";
+}
+function isString(x) {
+	return typeof x === "string";
+}
+function isNumber(x) {
+	return typeof x === "number";
+}
+function isFunction(x) {
+	return typeof x === "function";
+}
+function isBoolean(x) {
+	return typeof x === "boolean";
+}
+function isArray(x) {
+	return Array.isArray(x);
+}
+function assertString(val, name = "value") {
+	if (typeof val !== "string") throw new Error(`Invalid ${name}: expected string`);
+	return val;
+}
+function stripFunctionsShallow(obj) {
+	if (!obj || !isObject(obj)) return void 0;
+	const out = {};
+	for (const [k, v] of Object.entries(obj)) if (!isFunction(v)) out[k] = v;
+	return out;
+}
+function isPlainSignedTransactionLike(x) {
+	if (!isObject(x)) return false;
+	const hasTx = "transaction" in x;
+	const hasSig = "signature" in x;
+	const bytes = x;
+	const hasBytes = Array.isArray(bytes.borsh_bytes) || bytes.borshBytes instanceof Uint8Array;
+	const hasMethod = typeof x.base64Encode === "function";
+	return hasTx && hasSig && hasBytes && !hasMethod;
+}
+function extractBorshBytesFromPlainSignedTx(x) {
+	const asArray = Array.isArray(x.borsh_bytes) ? x.borsh_bytes : void 0;
+	if (asArray) return asArray;
+	const asU8 = x.borshBytes instanceof Uint8Array ? x.borshBytes : void 0;
+	return Array.from(asU8 || new Uint8Array());
+}
 
 //#endregion
-init_validation();
-export { init_validation, validateNearAccountId };
+export { assertString, ensureEd25519Prefix, extractBorshBytesFromPlainSignedTx, isArray, isBoolean, isFunction, isNumber, isObject, isPlainSignedTransactionLike, isString, stripFunctionsShallow, stripTrailingSlashes, toBasePath, toOptionalTrimmedString, toTrimmedString, validateNearAccountId };
 //# sourceMappingURL=validation.js.map