@tatchi-xyz/sdk 0.21.0 → 0.31.0

package/dist/cjs/core/types/sdkSentEvents.js.map

@@ -1 +1 @@
-{"version":3,"file":"sdkSentEvents.js","names":[],"sources":["../../../../src/core/types/sdkSentEvents.ts"],"sourcesContent":["import type { TxExecutionStatus } from '@near-js/types';\nimport type { ConfirmationConfig } from './signer-worker';\nimport type {\n  ActionResult,\n  DelegateRelayResult,\n  LoginAndCreateSessionResult,\n  LoginResult,\n  RegistrationResult,\n  SignAndSendDelegateActionResult,\n  SignDelegateActionResult,\n  SignTransactionResult,\n} from './tatchi';\nimport type { RecoveryResult, SignNEP413MessageResult } from '../TatchiPasskey';\n\n//////////////////////////\n// Progress Events Enums\n//////////////////////////\n\n// Registration Enums\nexport enum RegistrationPhase {\n  STEP_1_WEBAUTHN_VERIFICATION = 'webauthn-verification',\n  STEP_2_KEY_GENERATION = 'key-generation',\n  STEP_3_CONTRACT_PRE_CHECK = 'contract-pre-check',\n  STEP_4_ACCESS_KEY_ADDITION = 'access-key-addition',\n  STEP_5_CONTRACT_REGISTRATION = 'contract-registration',\n  STEP_6_ACCOUNT_VERIFICATION = 'account-verification',\n  STEP_7_DATABASE_STORAGE = 'database-storage',\n  STEP_8_REGISTRATION_COMPLETE = 'registration-complete',\n  REGISTRATION_ERROR = 'error',\n}\nexport enum RegistrationStatus {\n  PROGRESS = 'progress',\n  SUCCESS = 'success',\n  ERROR = 'error',\n}\n\n// Login Enums\nexport enum LoginPhase {\n  STEP_1_PREPARATION = 'preparation',\n  STEP_2_WEBAUTHN_ASSERTION = 'webauthn-assertion',\n  STEP_3_VRF_UNLOCK = 'vrf-unlock',\n  STEP_4_LOGIN_COMPLETE = 'login-complete',\n  LOGIN_ERROR = 'login-error',\n}\nexport enum LoginStatus {\n  PROGRESS = 'progress',\n  SUCCESS = 'success',\n  ERROR = 'error',\n}\n\n// Action Enums\nexport enum ActionPhase {\n  STEP_1_PREPARATION = 'preparation',                                    // Rust WASM worker phase: Preparation = 100\n  STEP_2_USER_CONFIRMATION = 'user-confirmation',                        // Rust WASM worker phase: UserConfirmation = 101\n  STEP_3_WEBAUTHN_AUTHENTICATION = 'webauthn-authentication',            // Rust WASM worker phase: WebauthnAuthentication = 102\n  STEP_4_AUTHENTICATION_COMPLETE = 'authentication-complete',            // Rust WASM worker phase: AuthenticationComplete = 103\n  STEP_5_TRANSACTION_SIGNING_PROGRESS = 'transaction-signing-progress',  // Rust WASM worker phase: TransactionSigningProgress = 104\n  STEP_6_TRANSACTION_SIGNING_COMPLETE = 'transaction-signing-complete',  // Rust WASM worker phase: TransactionSigningComplete = 105\n  WASM_ERROR = 'wasm-error',                                             // Rust WASM worker phase: Error = 106\n  STEP_7_BROADCASTING = 'broadcasting',\n  STEP_8_ACTION_COMPLETE = 'action-complete',\n  ACTION_ERROR = 'action-error',\n}\nexport enum ActionStatus {\n  PROGRESS = 'progress',\n  SUCCESS = 'success',\n  ERROR = 'error',\n}\n\n// Delegate-specific phase alias for filtering\nexport { ActionPhase as DelegateActionPhase };\n\n// Account Recovery Enums\nexport enum AccountRecoveryPhase {\n  STEP_1_PREPARATION = 'preparation',\n  STEP_2_WEBAUTHN_AUTHENTICATION = 'webauthn-authentication',\n  STEP_3_SYNC_AUTHENTICATORS_ONCHAIN = 'sync-authenticators-onchain',\n  STEP_4_AUTHENTICATOR_SAVED = 'authenticator-saved',\n  STEP_5_ACCOUNT_RECOVERY_COMPLETE = 'account-recovery-complete',\n  ERROR = 'error',\n}\nexport enum AccountRecoveryStatus {\n  PROGRESS = 'progress',\n  SUCCESS = 'success',\n  ERROR = 'error',\n}\n\n// Device Linking Enums\nexport enum DeviceLinkingPhase {\n  STEP_1_QR_CODE_GENERATED = 'qr-code-generated',   // Device2: QR code created and displayed\n  STEP_2_SCANNING = 'scanning',                     // Device1: Scanning QR code\n  STEP_3_AUTHORIZATION = 'authorization',           // Device1: TouchID authorization\n  STEP_4_POLLING = 'polling',                       // Device2: Polling contract for mapping\n  STEP_5_ADDKEY_DETECTED = 'addkey-detected',       // Device2: AddKey transaction detected\n  STEP_6_REGISTRATION = 'registration',             // Device2: Registration and credential storage\n  STEP_7_LINKING_COMPLETE = 'linking-complete',     // Final completion\n  STEP_8_AUTO_LOGIN = 'auto-login',                 // Auto-login after registration\n  IDLE = 'idle',                                    // Idle state\n  REGISTRATION_ERROR = 'registration-error',        // Error during registration\n  LOGIN_ERROR = 'login-error',                      // Error during login\n  DEVICE_LINKING_ERROR = 'error',                   // General error state\n}\nexport enum DeviceLinkingStatus {\n  PROGRESS = 'progress',\n  SUCCESS = 'success',\n  ERROR = 'error',\n}\n\n// Email Recovery Enums\nexport enum EmailRecoveryPhase {\n  STEP_1_PREPARATION = 'email-recovery-preparation',\n  STEP_2_TOUCH_ID_REGISTRATION = 'email-recovery-touch-id-registration',\n  STEP_3_AWAIT_EMAIL = 'email-recovery-await-email',\n  STEP_4_POLLING_ADD_KEY = 'email-recovery-polling-add-key',\n  STEP_4_POLLING_VERIFICATION_RESULT = 'email-recovery-polling-add-key',\n  STEP_5_FINALIZING_REGISTRATION = 'email-recovery-finalizing-registration',\n  STEP_6_COMPLETE = 'email-recovery-complete',\n  ERROR = 'email-recovery-error',\n  RESUMED_FROM_PENDING = 'email-recovery-resumed-from-pending',\n}\nexport enum EmailRecoveryStatus {\n  PROGRESS = 'progress',\n  SUCCESS = 'success',\n  ERROR = 'error',\n}\n\n// Base event callback type\nexport type EventCallback<T> = (event: T) => void;\n\n// Users can still supply a single implementation: (success: boolean, result?: T) => ...\nexport interface AfterCall<T> {\n  (success: true, result: T): void | Promise<void>;\n  (success: false): void | Promise<void>;\n}\n\n// Base SSE Event Types (unified for Registration and Actions)\nexport interface BaseSSEEvent {\n  step: number;\n  phase: RegistrationPhase | LoginPhase | ActionPhase | DeviceLinkingPhase | AccountRecoveryPhase | EmailRecoveryPhase;\n  status: RegistrationStatus | LoginStatus | ActionStatus | DeviceLinkingStatus | AccountRecoveryStatus | EmailRecoveryStatus;\n  message: string;\n}\n\n// Registration-specific events\nexport interface BaseRegistrationSSEEvent extends BaseSSEEvent {\n  phase: RegistrationPhase;\n  status: RegistrationStatus;\n}\n\n// Action-specific events\nexport interface BaseActionSSEEvent extends BaseSSEEvent {\n  phase: ActionPhase;\n  status: ActionStatus;\n}\n\n// Login-specific events\nexport interface BaseLoginSSEEvent extends BaseSSEEvent {\n  phase: LoginPhase;\n  status: LoginStatus;\n}\n\nexport interface BaseDeviceLinkingSSEEvent extends BaseSSEEvent {\n  phase: DeviceLinkingPhase;\n  status: DeviceLinkingStatus;\n}\n\n// Action-specific events\nexport interface BaseAccountRecoveryEvent extends BaseSSEEvent {\n  phase: AccountRecoveryPhase;\n  status: AccountRecoveryStatus;\n}\n\nexport interface BaseEmailRecoveryEvent extends BaseSSEEvent {\n  phase: EmailRecoveryPhase;\n  status: EmailRecoveryStatus;\n}\n\n// Progress Events\nexport interface onProgressEvents extends BaseActionSSEEvent {\n  step: number;\n  status: ActionStatus;\n  message: string;\n  // Generic metadata bag for progress payloads\n  data?: Record<string, unknown>;\n  logs?: string[];\n}\n\n// Optional, phase-specific data shapes used where we can commit to fields\n// Intentionally keep progress payloads generic to avoid duplicating\n// worker-side data shapes. Concrete fields can be added in future PRs\n// by normalizing worker payloads in one place.\n\n/////////////////////////////////////////////\n// SDK-Sent-Events: Registration Event Types\n/////////////////////////////////////////////\n\nexport interface RegistrationEventStep1 extends BaseRegistrationSSEEvent {\n  step: 1;\n  phase: RegistrationPhase.STEP_1_WEBAUTHN_VERIFICATION;\n}\n\nexport interface RegistrationEventStep2 extends BaseRegistrationSSEEvent {\n  step: 2;\n  phase: RegistrationPhase.STEP_2_KEY_GENERATION;\n  status: RegistrationStatus.SUCCESS;\n  verified: boolean;\n  nearAccountId: string;\n  nearPublicKey: string | null | undefined;\n  vrfPublicKey: string | null | undefined;\n}\n\n// Optional progress emission during step 2 (e.g., concurrent contract pre-checks)\nexport interface RegistrationEventStep2Progress extends BaseRegistrationSSEEvent {\n  step: 2;\n  phase: RegistrationPhase.STEP_2_KEY_GENERATION;\n  status: RegistrationStatus.PROGRESS;\n}\n\nexport interface RegistrationEventStep3 extends BaseRegistrationSSEEvent {\n  step: 3;\n  phase: RegistrationPhase.STEP_3_CONTRACT_PRE_CHECK;\n  error?: string;\n}\n\nexport interface RegistrationEventStep4 extends BaseRegistrationSSEEvent {\n  step: 4;\n  phase: RegistrationPhase.STEP_4_ACCESS_KEY_ADDITION;\n  error?: string;\n}\n\nexport interface RegistrationEventStep5 extends BaseRegistrationSSEEvent {\n  step: 5;\n  phase: RegistrationPhase.STEP_5_CONTRACT_REGISTRATION;\n  error?: string;\n}\n\nexport interface RegistrationEventStep6 extends BaseRegistrationSSEEvent {\n  step: 6;\n  phase: RegistrationPhase.STEP_6_ACCOUNT_VERIFICATION;\n  error?: string;\n}\n\nexport interface RegistrationEventStep7 extends BaseRegistrationSSEEvent {\n  step: 7;\n  phase: RegistrationPhase.STEP_7_DATABASE_STORAGE;\n  error?: string;\n}\n\nexport interface RegistrationEventStep8 extends BaseRegistrationSSEEvent {\n  step: 8;\n  phase: RegistrationPhase.STEP_8_REGISTRATION_COMPLETE;\n  status: RegistrationStatus.SUCCESS;\n}\n\nexport interface RegistrationEventStep0 extends BaseRegistrationSSEEvent {\n  step: 0;\n  phase: RegistrationPhase.REGISTRATION_ERROR;\n  status: RegistrationStatus.ERROR;\n  error: string;\n}\n\nexport type RegistrationSSEEvent =\n  | RegistrationEventStep1\n  | RegistrationEventStep2Progress\n  | RegistrationEventStep2\n  | RegistrationEventStep3\n  | RegistrationEventStep4\n  | RegistrationEventStep5\n  | RegistrationEventStep6\n  | RegistrationEventStep7\n  | RegistrationEventStep8\n  | RegistrationEventStep0;\n\n/////////////////////////////////////////////\n// SDK-Sent-Events: Login Event Types\n/////////////////////////////////////////////\n\nexport interface LoginSSEventStep1 extends BaseLoginSSEEvent {\n  step: 1;\n  phase: LoginPhase.STEP_1_PREPARATION;\n}\n\nexport interface LoginSSEventStep2 extends BaseLoginSSEEvent {\n  step: 2;\n  phase: LoginPhase.STEP_2_WEBAUTHN_ASSERTION;\n}\n\nexport interface LoginSSEventStep3 extends BaseLoginSSEEvent {\n  step: 3;\n  phase: LoginPhase.STEP_3_VRF_UNLOCK;\n}\n\nexport interface LoginSSEventStep4 extends BaseLoginSSEEvent {\n  step: 4;\n  phase: LoginPhase.STEP_4_LOGIN_COMPLETE;\n  status: LoginStatus.SUCCESS;\n  nearAccountId: string;\n  clientNearPublicKey: string;\n}\n\nexport interface LoginSSEventStep0 extends BaseLoginSSEEvent {\n  step: 0;\n  phase: LoginPhase.LOGIN_ERROR;\n  status: LoginStatus.ERROR;\n  error: string;\n}\n\nexport type LoginSSEvent =\n  | LoginSSEventStep1\n  | LoginSSEventStep2\n  | LoginSSEventStep3\n  | LoginSSEventStep4\n  | LoginSSEventStep0;\n\n/////////////////////////////////////////////\n// SDK-Sent-Events: Action Event Types\n/////////////////////////////////////////////\n\nexport interface ActionEventStep1 extends BaseActionSSEEvent {\n  step: 1;\n  phase: ActionPhase.STEP_1_PREPARATION;\n}\n\nexport interface ActionEventStep2 extends BaseActionSSEEvent {\n  step: 2;\n  phase: ActionPhase.STEP_2_USER_CONFIRMATION;\n}\n\nexport interface ActionEventStep3 extends BaseActionSSEEvent {\n  step: 3;\n  phase: ActionPhase.STEP_3_WEBAUTHN_AUTHENTICATION;\n  data?: Record<string, unknown>;\n  logs?: string[];\n}\n\nexport interface ActionEventStep4 extends BaseActionSSEEvent {\n  step: 4;\n  phase: ActionPhase.STEP_4_AUTHENTICATION_COMPLETE;\n  data?: Record<string, unknown>;\n  logs?: string[];\n}\n\nexport interface ActionEventStep5 extends BaseActionSSEEvent {\n  step: 5;\n  phase: ActionPhase.STEP_5_TRANSACTION_SIGNING_PROGRESS;\n  data?: Record<string, unknown>;\n}\n\nexport interface ActionEventStep6 extends BaseActionSSEEvent {\n  step: 6;\n  phase: ActionPhase.STEP_6_TRANSACTION_SIGNING_COMPLETE;\n  status: ActionStatus.SUCCESS;\n  data?: Record<string, unknown>;\n}\n\nexport interface ActionEventStep7 extends BaseActionSSEEvent {\n  step: 7;\n  phase: ActionPhase.STEP_7_BROADCASTING;\n}\n\nexport interface ActionEventStep8 extends BaseActionSSEEvent {\n  step: 8;\n  phase: ActionPhase.STEP_8_ACTION_COMPLETE;\n  status: ActionStatus.SUCCESS;\n  data?: Record<string, unknown>;\n}\n\nexport interface ActionEventError extends BaseActionSSEEvent {\n  step: 0;\n  phase: ActionPhase.ACTION_ERROR;\n  status: ActionStatus.ERROR;\n  error: string;\n}\n\nexport interface ActionEventWasmError extends BaseActionSSEEvent {\n  step: 0;\n  phase: ActionPhase.WASM_ERROR;\n  status: ActionStatus.ERROR;\n  error: string;\n}\n\nexport type ActionSSEEvent =\n  | ActionEventStep1\n  | ActionEventStep2\n  | ActionEventStep3\n  | ActionEventStep4\n  | ActionEventStep5\n  | ActionEventStep6\n  | ActionEventStep7\n  | ActionEventStep8\n  | ActionEventError\n  | ActionEventWasmError;\n\nexport type DelegateActionSSEEvent = ActionSSEEvent;\n\n/////////////////////////////////////////////\n// SDK-Sent-Events: Device Linking Event Types\n/////////////////////////////////////////////\n\nexport interface DeviceLinkingEventStep1 extends BaseDeviceLinkingSSEEvent {\n  step: 1;\n  phase: DeviceLinkingPhase.STEP_1_QR_CODE_GENERATED;\n}\n\nexport interface DeviceLinkingEventStep2 extends BaseDeviceLinkingSSEEvent {\n  step: 2;\n  phase: DeviceLinkingPhase.STEP_2_SCANNING;\n}\n\nexport interface DeviceLinkingEventStep3 extends BaseDeviceLinkingSSEEvent {\n  step: 3;\n  phase: DeviceLinkingPhase.STEP_3_AUTHORIZATION;\n}\n\nexport interface DeviceLinkingEventStep4 extends BaseDeviceLinkingSSEEvent {\n  step: 4;\n  phase: DeviceLinkingPhase.STEP_4_POLLING;\n}\n\nexport interface DeviceLinkingEventStep5 extends BaseDeviceLinkingSSEEvent {\n  step: 5;\n  phase: DeviceLinkingPhase.STEP_5_ADDKEY_DETECTED;\n}\n\nexport interface DeviceLinkingEventStep6 extends BaseDeviceLinkingSSEEvent {\n  step: 6;\n  phase: DeviceLinkingPhase.STEP_6_REGISTRATION;\n}\n\nexport interface DeviceLinkingEventStep7 extends BaseDeviceLinkingSSEEvent {\n  step: 7;\n  phase: DeviceLinkingPhase.STEP_7_LINKING_COMPLETE;\n}\n\nexport interface DeviceLinkingEventStep8 extends BaseDeviceLinkingSSEEvent {\n  step: 8;\n  phase: DeviceLinkingPhase.STEP_8_AUTO_LOGIN;\n}\n\nexport interface DeviceLinkingErrorEvent extends BaseDeviceLinkingSSEEvent {\n  step: 0;\n  phase: DeviceLinkingPhase.DEVICE_LINKING_ERROR\n  | DeviceLinkingPhase.LOGIN_ERROR\n  | DeviceLinkingPhase.REGISTRATION_ERROR;\n  status: DeviceLinkingStatus.ERROR;\n  error: string;\n}\n\nexport type DeviceLinkingSSEEvent =\n  | DeviceLinkingEventStep1\n  | DeviceLinkingEventStep2\n  | DeviceLinkingEventStep3\n  | DeviceLinkingEventStep4\n  | DeviceLinkingEventStep5\n  | DeviceLinkingEventStep6\n  | DeviceLinkingEventStep7\n  | DeviceLinkingEventStep8\n  | DeviceLinkingErrorEvent;\n\n/////////////////////////////////////////////\n// SDK-Sent-Events: Account Recovery Event Types\n/////////////////////////////////////////////\n\nexport interface AccountRecoveryEventStep1 extends BaseAccountRecoveryEvent {\n  step: 1;\n  phase: AccountRecoveryPhase.STEP_1_PREPARATION;\n}\n\nexport interface AccountRecoveryEventStep2 extends BaseAccountRecoveryEvent {\n  step: 2;\n  phase: AccountRecoveryPhase.STEP_2_WEBAUTHN_AUTHENTICATION;\n}\n\nexport interface AccountRecoveryEventStep3 extends BaseAccountRecoveryEvent {\n  step: 3;\n  phase: AccountRecoveryPhase.STEP_3_SYNC_AUTHENTICATORS_ONCHAIN;\n  data?: Record<string, unknown>;\n  logs?: string[];\n}\n\nexport interface AccountRecoveryEventStep4 extends BaseAccountRecoveryEvent {\n  step: 4;\n  phase: AccountRecoveryPhase.STEP_4_AUTHENTICATOR_SAVED;\n  status: AccountRecoveryStatus.SUCCESS;\n  data?: Record<string, unknown>;\n}\n\nexport interface AccountRecoveryEventStep5 extends BaseAccountRecoveryEvent {\n  step: 5;\n  phase: AccountRecoveryPhase.STEP_5_ACCOUNT_RECOVERY_COMPLETE;\n  status: AccountRecoveryStatus.SUCCESS;\n  data?: Record<string, unknown>;\n}\n\nexport interface AccountRecoveryError extends BaseAccountRecoveryEvent {\n  step: 0;\n  phase: AccountRecoveryPhase.ERROR;\n  status: AccountRecoveryStatus.ERROR;\n  error: string;\n}\n\nexport type AccountRecoverySSEEvent =\n  | AccountRecoveryEventStep1\n  | AccountRecoveryEventStep2\n  | AccountRecoveryEventStep3\n  | AccountRecoveryEventStep4\n  | AccountRecoveryEventStep5\n  | AccountRecoveryError;\n\n/////////////////////////////////////////////\n// SDK-Sent-Events: Email Recovery Event Types\n/////////////////////////////////////////////\n\nexport interface EmailRecoveryEventStep1 extends BaseEmailRecoveryEvent {\n  step: 1;\n  phase: EmailRecoveryPhase.STEP_1_PREPARATION;\n}\n\nexport interface EmailRecoveryEventStep2 extends BaseEmailRecoveryEvent {\n  step: 2;\n  phase: EmailRecoveryPhase.STEP_2_TOUCH_ID_REGISTRATION;\n}\n\nexport interface EmailRecoveryEventStep3 extends BaseEmailRecoveryEvent {\n  step: 3;\n  phase: EmailRecoveryPhase.STEP_3_AWAIT_EMAIL;\n}\n\nexport interface EmailRecoveryEventStep4 extends BaseEmailRecoveryEvent {\n  step: 4;\n  phase: EmailRecoveryPhase.STEP_4_POLLING_ADD_KEY | EmailRecoveryPhase.STEP_4_POLLING_VERIFICATION_RESULT;\n  data?: {\n    accountId?: string;\n    requestId?: string;\n    nearPublicKey?: string;\n    elapsedMs?: number;\n    pollCount?: number;\n    [key: string]: unknown;\n  };\n  logs?: string[];\n}\n\nexport interface EmailRecoveryEventStep5 extends BaseEmailRecoveryEvent {\n  step: 5;\n  phase: EmailRecoveryPhase.STEP_5_FINALIZING_REGISTRATION;\n  data?: Record<string, unknown>;\n}\n\nexport interface EmailRecoveryEventStep6 extends BaseEmailRecoveryEvent {\n  step: 6;\n  phase: EmailRecoveryPhase.STEP_6_COMPLETE;\n  status: EmailRecoveryStatus.SUCCESS;\n  data?: Record<string, unknown>;\n}\n\nexport interface EmailRecoveryEventResumedFromPending extends BaseEmailRecoveryEvent {\n  step: 0;\n  phase: EmailRecoveryPhase.RESUMED_FROM_PENDING;\n  status: EmailRecoveryStatus.PROGRESS;\n  data?: Record<string, unknown>;\n}\n\nexport interface EmailRecoveryErrorEvent extends BaseEmailRecoveryEvent {\n  step: 0;\n  phase: EmailRecoveryPhase.ERROR;\n  status: EmailRecoveryStatus.ERROR;\n  error: string;\n}\n\nexport type EmailRecoverySSEEvent =\n  | EmailRecoveryEventStep1\n  | EmailRecoveryEventStep2\n  | EmailRecoveryEventStep3\n  | EmailRecoveryEventStep4\n  | EmailRecoveryEventStep5\n  | EmailRecoveryEventStep6\n  | EmailRecoveryEventResumedFromPending\n  | EmailRecoveryErrorEvent;\n\n//////////////////////////////////\n/// Hooks Options\n//////////////////////////////////\n\n// Function Options\nexport interface RegistrationHooksOptions {\n  onEvent?: EventCallback<RegistrationSSEEvent>;\n  onError?: (error: Error) => void;\n  afterCall?: AfterCall<RegistrationResult>;\n  /**\n   * Preferred grouping for per-call confirmer copy.\n   */\n  confirmerText?: { title?: string; body?: string };\n  // Per-call confirmation configuration. When provided, overrides user preferences\n  // for this request only (not persisted).\n  // Accept partial config so callers can pass minimal overrides like { uiMode: 'drawer' }\n  confirmationConfig?: Partial<ConfirmationConfig>;\n}\n\nexport interface LoginHooksOptions {\n  onEvent?: EventCallback<LoginSSEvent>;\n  onError?: (error: Error) => void;\n  afterCall?: AfterCall<LoginAndCreateSessionResult>;\n  // Optional: request a server session (JWT in body or HttpOnly cookie)\n  session?: {\n    // 'jwt' returns the token in the JSON body; 'cookie' sets HttpOnly cookie\n    kind: 'jwt' | 'cookie';\n    // Optional: override relay URL; defaults to TatchiConfigs.relayer.url\n    relayUrl?: string;\n    // Optional: override route path; defaults to '/verify-authentication-response'\n    route?: string;\n  };\n  /**\n   * Optional: override the warm signing session policy minted during login.\n   * Defaults come from `TatchiConfigs.signingSessionDefaults`.\n   */\n  signingSession?: {\n    ttlMs?: number;\n    remainingUses?: number;\n  };\n}\n\nexport interface ActionHooksOptions {\n  onEvent?: EventCallback<ActionSSEEvent>;\n  onError?: (error: Error) => void;\n  waitUntil?: TxExecutionStatus;\n  afterCall?: AfterCall<ActionResult>;\n  /**\n   * Preferred grouping for per-call confirmer copy.\n   */\n  confirmerText?: { title?: string; body?: string };\n  // Per-call confirmation configuration. When provided, overrides user preferences\n  // for this request only (not persisted).\n  // Accept partial config so callers can pass minimal overrides like { uiMode: 'drawer' }\n  confirmationConfig?: Partial<ConfirmationConfig>;\n}\n\nexport type ExecutionWaitOption =\n  | { mode: 'sequential'; waitUntil?: TxExecutionStatus }\n  | { mode: 'parallelStaggered'; staggerMs: number };\n\nexport interface SignAndSendTransactionHooksOptions {\n  onEvent?: EventCallback<ActionSSEEvent>;\n  onError?: (error: Error) => void;\n  waitUntil?: TxExecutionStatus;\n  // Execution control for multi-transaction broadcasts:\n  // - { mode: 'sequential', waitUntil?: TxExecutionStatus }\n  // - { mode: 'parallelStaggered', staggerMs: number }\n  executionWait?: ExecutionWaitOption;\n  /**\n   * Preferred grouping for per-call confirmer copy.\n   */\n  confirmerText?: { title?: string; body?: string };\n\n  afterCall?: AfterCall<ActionResult[]>;\n  // Per-call confirmation configuration. When provided, overrides user preferences\n  // for this request only (not persisted).\n  // Accept partial config so callers can pass minimal overrides like { uiMode: 'drawer' }\n  confirmationConfig?: Partial<ConfirmationConfig>;\n}\n\nexport interface SignTransactionHooksOptions {\n  onEvent?: EventCallback<ActionSSEEvent>;\n  onError?: (error: Error) => void;\n\n  afterCall?: AfterCall<SignTransactionResult[]>;\n  waitUntil?: TxExecutionStatus;\n  /**\n   * Preferred grouping for per-call confirmer copy.\n   */\n  confirmerText?: { title?: string; body?: string };\n  // Per-call confirmation configuration (non-persistent)\n  // Accept partial config so callers can pass minimal overrides like { uiMode: 'drawer' }\n  confirmationConfig?: Partial<ConfirmationConfig>;\n}\n\nexport interface SendTransactionHooksOptions {\n  onEvent?: EventCallback<ActionSSEEvent>;\n  onError?: (error: Error) => void;\n\n  afterCall?: AfterCall<ActionResult>;\n  waitUntil?: TxExecutionStatus;\n}\n\nexport interface DelegateActionHooksOptions {\n  onEvent?: EventCallback<DelegateActionSSEEvent>;\n  onError?: (error: Error) => void;\n  waitUntil?: TxExecutionStatus;\n  afterCall?: AfterCall<SignDelegateActionResult>;\n  /**\n   * Preferred grouping for per-call confirmer copy.\n   */\n  confirmerText?: { title?: string; body?: string };\n  confirmationConfig?: Partial<ConfirmationConfig>;\n}\n\nexport interface DelegateRelayHooksOptions {\n  onEvent?: EventCallback<ActionSSEEvent>;\n  onError?: (error: Error) => void;\n  afterCall?: AfterCall<DelegateRelayResult>;\n}\n\nexport type SignAndSendDelegateActionHooksOptions =\n  Omit<DelegateActionHooksOptions, 'afterCall'> & {\n    afterCall?: AfterCall<SignAndSendDelegateActionResult>;\n  };\n\nexport interface AccountRecoveryHooksOptions {\n  onEvent?: EventCallback<AccountRecoverySSEEvent>;\n  onError?: (error: Error) => void;\n  waitUntil?: TxExecutionStatus;\n\n  afterCall?: AfterCall<RecoveryResult>;\n}\n\nexport interface SignNEP413HooksOptions {\n  onEvent?: EventCallback<RegistrationSSEEvent | LoginSSEvent | ActionSSEEvent | DeviceLinkingSSEEvent | AccountRecoverySSEEvent | EmailRecoverySSEEvent>;\n  onError?: (error: Error) => void;\n\n  afterCall?: AfterCall<SignNEP413MessageResult>;\n  /**\n   * Preferred grouping for per-call confirmer copy.\n   */\n  confirmerText?: { title?: string; body?: string };\n  // Per-call confirmation configuration (non-persistent)\n  // Accept partial config so callers can pass minimal overrides like { uiMode: 'drawer' }\n  confirmationConfig?: Partial<ConfirmationConfig>;\n}\n"],"mappings":";;;;;CAmBY,kEAAL;AACL;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;;CAEU,oEAAL;AACL;AACA;AACA;;;CAIU,oDAAL;AACL;AACA;AACA;AACA;AACA;;;CAEU,sDAAL;AACL;AACA;AACA;;;CAIU,sDAAL;AACL;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;;CAEU,wDAAL;AACL;AACA;AACA;;;CAOU,wEAAL;AACL;AACA;AACA;AACA;AACA;AACA;;;CAEU,0EAAL;AACL;AACA;AACA;;;CAIU,oEAAL;AACL;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;;CAEU,sEAAL;AACL;AACA;AACA;;;CAIU,oEAAL;AACL;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;;CAEU,sEAAL;AACL;AACA;AACA"}
+{"version":3,"file":"sdkSentEvents.js","names":[],"sources":["../../../../src/core/types/sdkSentEvents.ts"],"sourcesContent":["import type { TxExecutionStatus } from '@near-js/types';\nimport type { ConfirmationConfig, SignerMode, ThresholdBehavior } from './signer-worker';\nimport type {\n  ActionResult,\n  DelegateRelayResult,\n  LoginAndCreateSessionResult,\n  LoginResult,\n  RegistrationResult,\n  SignAndSendDelegateActionResult,\n  SignDelegateActionResult,\n  SignTransactionResult,\n} from './tatchi';\nimport type { SyncAccountResult, SignNEP413MessageResult } from '../TatchiPasskey';\n\n//////////////////////////\n// Progress Events Enums\n//////////////////////////\n\n// Registration Enums\nexport enum RegistrationPhase {\n  STEP_1_WEBAUTHN_VERIFICATION = 'webauthn-verification',\n  STEP_2_KEY_GENERATION = 'key-generation',\n  STEP_3_CONTRACT_PRE_CHECK = 'contract-pre-check',\n  STEP_4_ACCESS_KEY_ADDITION = 'access-key-addition',\n  STEP_5_CONTRACT_REGISTRATION = 'contract-registration',\n  STEP_6_ACCOUNT_VERIFICATION = 'account-verification',\n  STEP_7_DATABASE_STORAGE = 'database-storage',\n  STEP_8_REGISTRATION_COMPLETE = 'registration-complete',\n  REGISTRATION_ERROR = 'error',\n}\nexport enum RegistrationStatus {\n  PROGRESS = 'progress',\n  SUCCESS = 'success',\n  ERROR = 'error',\n}\n\n// Login Enums\nexport enum LoginPhase {\n  STEP_1_PREPARATION = 'preparation',\n  STEP_2_WEBAUTHN_ASSERTION = 'webauthn-assertion',\n  STEP_3_VRF_UNLOCK = 'vrf-unlock',\n  STEP_4_LOGIN_COMPLETE = 'login-complete',\n  LOGIN_ERROR = 'login-error',\n}\nexport enum LoginStatus {\n  PROGRESS = 'progress',\n  SUCCESS = 'success',\n  ERROR = 'error',\n}\n\n// Action Enums\nexport enum ActionPhase {\n  STEP_1_PREPARATION = 'preparation',                                    // Rust WASM worker phase: Preparation = 100\n  STEP_2_USER_CONFIRMATION = 'user-confirmation',                        // Rust WASM worker phase: UserConfirmation = 101\n  STEP_3_WEBAUTHN_AUTHENTICATION = 'webauthn-authentication',            // Rust WASM worker phase: WebauthnAuthentication = 102\n  STEP_4_AUTHENTICATION_COMPLETE = 'authentication-complete',            // Rust WASM worker phase: AuthenticationComplete = 103\n  STEP_5_TRANSACTION_SIGNING_PROGRESS = 'transaction-signing-progress',  // Rust WASM worker phase: TransactionSigningProgress = 104\n  STEP_6_TRANSACTION_SIGNING_COMPLETE = 'transaction-signing-complete',  // Rust WASM worker phase: TransactionSigningComplete = 105\n  WASM_ERROR = 'wasm-error',                                             // Rust WASM worker phase: Error = 106\n  STEP_7_BROADCASTING = 'broadcasting',\n  STEP_8_ACTION_COMPLETE = 'action-complete',\n  ACTION_ERROR = 'action-error',\n}\nexport enum ActionStatus {\n  PROGRESS = 'progress',\n  SUCCESS = 'success',\n  ERROR = 'error',\n}\n\n// Delegate-specific phase alias for filtering\nexport { ActionPhase as DelegateActionPhase };\n\n// Account Sync Enums\nexport enum SyncAccountPhase {\n  STEP_1_PREPARATION = 'preparation',\n  STEP_2_WEBAUTHN_AUTHENTICATION = 'webauthn-authentication',\n  STEP_3_SYNC_AUTHENTICATORS_ONCHAIN = 'sync-authenticators-onchain',\n  STEP_4_AUTHENTICATOR_SAVED = 'authenticator-saved',\n  STEP_5_SYNC_ACCOUNT_COMPLETE = 'sync-account-complete',\n  ERROR = 'error',\n}\nexport enum SyncAccountStatus {\n  PROGRESS = 'progress',\n  SUCCESS = 'success',\n  ERROR = 'error',\n}\n\n// Device Linking Enums\nexport enum DeviceLinkingPhase {\n  STEP_1_QR_CODE_GENERATED = 'qr-code-generated',   // Device2: QR code created and displayed\n  STEP_2_SCANNING = 'scanning',                     // Device1: Scanning QR code\n  STEP_3_AUTHORIZATION = 'authorization',           // Device1: TouchID authorization\n  STEP_4_POLLING = 'polling',                       // Device2: Polling contract for mapping\n  STEP_5_ADDKEY_DETECTED = 'addkey-detected',       // Device2: AddKey transaction detected\n  STEP_6_REGISTRATION = 'registration',             // Device2: Registration and credential storage\n  STEP_7_LINKING_COMPLETE = 'linking-complete',     // Final completion\n  STEP_8_AUTO_LOGIN = 'auto-login',                 // Auto-login after registration\n  IDLE = 'idle',                                    // Idle state\n  REGISTRATION_ERROR = 'registration-error',        // Error during registration\n  LOGIN_ERROR = 'login-error',                      // Error during login\n  DEVICE_LINKING_ERROR = 'error',                   // General error state\n}\nexport enum DeviceLinkingStatus {\n  PROGRESS = 'progress',\n  SUCCESS = 'success',\n  ERROR = 'error',\n}\n\n// Email Recovery Enums\nexport enum EmailRecoveryPhase {\n  STEP_1_PREPARATION = 'email-recovery-preparation',\n  STEP_2_TOUCH_ID_REGISTRATION = 'email-recovery-touch-id-registration',\n  STEP_3_AWAIT_EMAIL = 'email-recovery-await-email',\n  STEP_4_POLLING_ADD_KEY = 'email-recovery-polling-add-key',\n  STEP_4_POLLING_VERIFICATION_RESULT = 'email-recovery-polling-add-key',\n  STEP_5_FINALIZING_REGISTRATION = 'email-recovery-finalizing-registration',\n  STEP_6_COMPLETE = 'email-recovery-complete',\n  ERROR = 'email-recovery-error',\n  RESUMED_FROM_PENDING = 'email-recovery-resumed-from-pending',\n}\nexport enum EmailRecoveryStatus {\n  PROGRESS = 'progress',\n  SUCCESS = 'success',\n  ERROR = 'error',\n}\n\n// Base event callback type\nexport type EventCallback<T> = (event: T) => void;\n\n// Users can still supply a single implementation: (success: boolean, result?: T) => ...\nexport interface AfterCall<T> {\n  (success: true, result: T): void | Promise<void>;\n  (success: false): void | Promise<void>;\n}\n\n// Base SSE Event Types (unified for Registration and Actions)\nexport interface BaseSSEEvent {\n  step: number;\n  phase: RegistrationPhase | LoginPhase | ActionPhase | DeviceLinkingPhase | SyncAccountPhase | EmailRecoveryPhase;\n  status: RegistrationStatus | LoginStatus | ActionStatus | DeviceLinkingStatus | SyncAccountStatus | EmailRecoveryStatus;\n  message: string;\n}\n\n// Registration-specific events\nexport interface BaseRegistrationSSEEvent extends BaseSSEEvent {\n  phase: RegistrationPhase;\n  status: RegistrationStatus;\n}\n\n// Action-specific events\nexport interface BaseActionSSEEvent extends BaseSSEEvent {\n  phase: ActionPhase;\n  status: ActionStatus;\n}\n\n// Login-specific events\nexport interface BaseLoginSSEEvent extends BaseSSEEvent {\n  phase: LoginPhase;\n  status: LoginStatus;\n}\n\nexport interface BaseDeviceLinkingSSEEvent extends BaseSSEEvent {\n  phase: DeviceLinkingPhase;\n  status: DeviceLinkingStatus;\n}\n\n// Action-specific events\nexport interface BaseSyncAccountEvent extends BaseSSEEvent {\n  phase: SyncAccountPhase;\n  status: SyncAccountStatus;\n}\n\nexport interface BaseEmailRecoveryEvent extends BaseSSEEvent {\n  phase: EmailRecoveryPhase;\n  status: EmailRecoveryStatus;\n}\n\n// Progress Events\nexport interface onProgressEvents extends BaseActionSSEEvent {\n  step: number;\n  status: ActionStatus;\n  message: string;\n  // Generic metadata bag for progress payloads\n  data?: Record<string, unknown>;\n  logs?: string[];\n}\n\n// Optional, phase-specific data shapes used where we can commit to fields\n// Intentionally keep progress payloads generic to avoid duplicating\n// worker-side data shapes. Concrete fields can be added in future PRs\n// by normalizing worker payloads in one place.\n\n/////////////////////////////////////////////\n// SDK-Sent-Events: Registration Event Types\n/////////////////////////////////////////////\n\nexport interface RegistrationEventStep1 extends BaseRegistrationSSEEvent {\n  step: 1;\n  phase: RegistrationPhase.STEP_1_WEBAUTHN_VERIFICATION;\n}\n\nexport interface RegistrationEventStep2 extends BaseRegistrationSSEEvent {\n  step: 2;\n  phase: RegistrationPhase.STEP_2_KEY_GENERATION;\n  status: RegistrationStatus.SUCCESS;\n  verified: boolean;\n  nearAccountId: string;\n  nearPublicKey: string | null | undefined;\n  vrfPublicKey: string | null | undefined;\n}\n\n// Optional progress emission during step 2 (e.g., concurrent contract pre-checks)\nexport interface RegistrationEventStep2Progress extends BaseRegistrationSSEEvent {\n  step: 2;\n  phase: RegistrationPhase.STEP_2_KEY_GENERATION;\n  status: RegistrationStatus.PROGRESS;\n}\n\nexport interface RegistrationEventStep3 extends BaseRegistrationSSEEvent {\n  step: 3;\n  phase: RegistrationPhase.STEP_3_CONTRACT_PRE_CHECK;\n  error?: string;\n}\n\nexport interface RegistrationEventStep4 extends BaseRegistrationSSEEvent {\n  step: 4;\n  phase: RegistrationPhase.STEP_4_ACCESS_KEY_ADDITION;\n  error?: string;\n}\n\nexport interface RegistrationEventStep5 extends BaseRegistrationSSEEvent {\n  step: 5;\n  phase: RegistrationPhase.STEP_5_CONTRACT_REGISTRATION;\n  error?: string;\n}\n\nexport interface RegistrationEventStep6 extends BaseRegistrationSSEEvent {\n  step: 6;\n  phase: RegistrationPhase.STEP_6_ACCOUNT_VERIFICATION;\n  error?: string;\n}\n\nexport interface RegistrationEventStep7 extends BaseRegistrationSSEEvent {\n  step: 7;\n  phase: RegistrationPhase.STEP_7_DATABASE_STORAGE;\n  error?: string;\n}\n\nexport interface RegistrationEventStep8 extends BaseRegistrationSSEEvent {\n  step: 8;\n  phase: RegistrationPhase.STEP_8_REGISTRATION_COMPLETE;\n  status: RegistrationStatus.SUCCESS;\n}\n\nexport interface RegistrationEventStep0 extends BaseRegistrationSSEEvent {\n  step: 0;\n  phase: RegistrationPhase.REGISTRATION_ERROR;\n  status: RegistrationStatus.ERROR;\n  error: string;\n}\n\nexport type RegistrationSSEEvent =\n  | RegistrationEventStep1\n  | RegistrationEventStep2Progress\n  | RegistrationEventStep2\n  | RegistrationEventStep3\n  | RegistrationEventStep4\n  | RegistrationEventStep5\n  | RegistrationEventStep6\n  | RegistrationEventStep7\n  | RegistrationEventStep8\n  | RegistrationEventStep0;\n\n/////////////////////////////////////////////\n// SDK-Sent-Events: Login Event Types\n/////////////////////////////////////////////\n\nexport interface LoginSSEventStep1 extends BaseLoginSSEEvent {\n  step: 1;\n  phase: LoginPhase.STEP_1_PREPARATION;\n}\n\nexport interface LoginSSEventStep2 extends BaseLoginSSEEvent {\n  step: 2;\n  phase: LoginPhase.STEP_2_WEBAUTHN_ASSERTION;\n}\n\nexport interface LoginSSEventStep3 extends BaseLoginSSEEvent {\n  step: 3;\n  phase: LoginPhase.STEP_3_VRF_UNLOCK;\n}\n\nexport interface LoginSSEventStep4 extends BaseLoginSSEEvent {\n  step: 4;\n  phase: LoginPhase.STEP_4_LOGIN_COMPLETE;\n  status: LoginStatus.SUCCESS;\n  nearAccountId: string;\n  clientNearPublicKey: string;\n}\n\nexport interface LoginSSEventStep0 extends BaseLoginSSEEvent {\n  step: 0;\n  phase: LoginPhase.LOGIN_ERROR;\n  status: LoginStatus.ERROR;\n  error: string;\n}\n\nexport type LoginSSEvent =\n  | LoginSSEventStep1\n  | LoginSSEventStep2\n  | LoginSSEventStep3\n  | LoginSSEventStep4\n  | LoginSSEventStep0;\n\n/////////////////////////////////////////////\n// SDK-Sent-Events: Action Event Types\n/////////////////////////////////////////////\n\nexport interface ActionEventStep1 extends BaseActionSSEEvent {\n  step: 1;\n  phase: ActionPhase.STEP_1_PREPARATION;\n}\n\nexport interface ActionEventStep2 extends BaseActionSSEEvent {\n  step: 2;\n  phase: ActionPhase.STEP_2_USER_CONFIRMATION;\n}\n\nexport interface ActionEventStep3 extends BaseActionSSEEvent {\n  step: 3;\n  phase: ActionPhase.STEP_3_WEBAUTHN_AUTHENTICATION;\n  data?: Record<string, unknown>;\n  logs?: string[];\n}\n\nexport interface ActionEventStep4 extends BaseActionSSEEvent {\n  step: 4;\n  phase: ActionPhase.STEP_4_AUTHENTICATION_COMPLETE;\n  data?: Record<string, unknown>;\n  logs?: string[];\n}\n\nexport interface ActionEventStep5 extends BaseActionSSEEvent {\n  step: 5;\n  phase: ActionPhase.STEP_5_TRANSACTION_SIGNING_PROGRESS;\n  data?: Record<string, unknown>;\n}\n\nexport interface ActionEventStep6 extends BaseActionSSEEvent {\n  step: 6;\n  phase: ActionPhase.STEP_6_TRANSACTION_SIGNING_COMPLETE;\n  status: ActionStatus.SUCCESS;\n  data?: Record<string, unknown>;\n}\n\nexport interface ActionEventStep7 extends BaseActionSSEEvent {\n  step: 7;\n  phase: ActionPhase.STEP_7_BROADCASTING;\n}\n\nexport interface ActionEventStep8 extends BaseActionSSEEvent {\n  step: 8;\n  phase: ActionPhase.STEP_8_ACTION_COMPLETE;\n  status: ActionStatus.SUCCESS;\n  data?: Record<string, unknown>;\n}\n\nexport interface ActionEventError extends BaseActionSSEEvent {\n  step: 0;\n  phase: ActionPhase.ACTION_ERROR;\n  status: ActionStatus.ERROR;\n  error: string;\n}\n\nexport interface ActionEventWasmError extends BaseActionSSEEvent {\n  step: 0;\n  phase: ActionPhase.WASM_ERROR;\n  status: ActionStatus.ERROR;\n  error: string;\n}\n\nexport type ActionSSEEvent =\n  | ActionEventStep1\n  | ActionEventStep2\n  | ActionEventStep3\n  | ActionEventStep4\n  | ActionEventStep5\n  | ActionEventStep6\n  | ActionEventStep7\n  | ActionEventStep8\n  | ActionEventError\n  | ActionEventWasmError;\n\nexport type DelegateActionSSEEvent = ActionSSEEvent;\n\n/////////////////////////////////////////////\n// SDK-Sent-Events: Device Linking Event Types\n/////////////////////////////////////////////\n\nexport interface DeviceLinkingEventStep1 extends BaseDeviceLinkingSSEEvent {\n  step: 1;\n  phase: DeviceLinkingPhase.STEP_1_QR_CODE_GENERATED;\n}\n\nexport interface DeviceLinkingEventStep2 extends BaseDeviceLinkingSSEEvent {\n  step: 2;\n  phase: DeviceLinkingPhase.STEP_2_SCANNING;\n}\n\nexport interface DeviceLinkingEventStep3 extends BaseDeviceLinkingSSEEvent {\n  step: 3;\n  phase: DeviceLinkingPhase.STEP_3_AUTHORIZATION;\n}\n\nexport interface DeviceLinkingEventStep4 extends BaseDeviceLinkingSSEEvent {\n  step: 4;\n  phase: DeviceLinkingPhase.STEP_4_POLLING;\n}\n\nexport interface DeviceLinkingEventStep5 extends BaseDeviceLinkingSSEEvent {\n  step: 5;\n  phase: DeviceLinkingPhase.STEP_5_ADDKEY_DETECTED;\n}\n\nexport interface DeviceLinkingEventStep6 extends BaseDeviceLinkingSSEEvent {\n  step: 6;\n  phase: DeviceLinkingPhase.STEP_6_REGISTRATION;\n}\n\nexport interface DeviceLinkingEventStep7 extends BaseDeviceLinkingSSEEvent {\n  step: 7;\n  phase: DeviceLinkingPhase.STEP_7_LINKING_COMPLETE;\n}\n\nexport interface DeviceLinkingEventStep8 extends BaseDeviceLinkingSSEEvent {\n  step: 8;\n  phase: DeviceLinkingPhase.STEP_8_AUTO_LOGIN;\n}\n\nexport interface DeviceLinkingErrorEvent extends BaseDeviceLinkingSSEEvent {\n  step: 0;\n  phase: DeviceLinkingPhase.DEVICE_LINKING_ERROR\n  | DeviceLinkingPhase.LOGIN_ERROR\n  | DeviceLinkingPhase.REGISTRATION_ERROR;\n  status: DeviceLinkingStatus.ERROR;\n  error: string;\n}\n\nexport type DeviceLinkingSSEEvent =\n  | DeviceLinkingEventStep1\n  | DeviceLinkingEventStep2\n  | DeviceLinkingEventStep3\n  | DeviceLinkingEventStep4\n  | DeviceLinkingEventStep5\n  | DeviceLinkingEventStep6\n  | DeviceLinkingEventStep7\n  | DeviceLinkingEventStep8\n  | DeviceLinkingErrorEvent;\n\n/////////////////////////////////////////////\n// SDK-Sent-Events: Account Sync Event Types\n/////////////////////////////////////////////\n\nexport interface SyncAccountEventStep1 extends BaseSyncAccountEvent {\n  step: 1;\n  phase: SyncAccountPhase.STEP_1_PREPARATION;\n}\n\nexport interface SyncAccountEventStep2 extends BaseSyncAccountEvent {\n  step: 2;\n  phase: SyncAccountPhase.STEP_2_WEBAUTHN_AUTHENTICATION;\n}\n\nexport interface SyncAccountEventStep3 extends BaseSyncAccountEvent {\n  step: 3;\n  phase: SyncAccountPhase.STEP_3_SYNC_AUTHENTICATORS_ONCHAIN;\n  data?: Record<string, unknown>;\n  logs?: string[];\n}\n\nexport interface SyncAccountEventStep4 extends BaseSyncAccountEvent {\n  step: 4;\n  phase: SyncAccountPhase.STEP_4_AUTHENTICATOR_SAVED;\n  status: SyncAccountStatus.SUCCESS;\n  data?: Record<string, unknown>;\n}\n\nexport interface SyncAccountEventStep5 extends BaseSyncAccountEvent {\n  step: 5;\n  phase: SyncAccountPhase.STEP_5_SYNC_ACCOUNT_COMPLETE;\n  status: SyncAccountStatus.SUCCESS;\n  data?: Record<string, unknown>;\n}\n\nexport interface SyncAccountError extends BaseSyncAccountEvent {\n  step: 0;\n  phase: SyncAccountPhase.ERROR;\n  status: SyncAccountStatus.ERROR;\n  error: string;\n}\n\nexport type SyncAccountSSEEvent =\n  | SyncAccountEventStep1\n  | SyncAccountEventStep2\n  | SyncAccountEventStep3\n  | SyncAccountEventStep4\n  | SyncAccountEventStep5\n  | SyncAccountError;\n\n/////////////////////////////////////////////\n// SDK-Sent-Events: Email Recovery Event Types\n/////////////////////////////////////////////\n\nexport interface EmailRecoveryEventStep1 extends BaseEmailRecoveryEvent {\n  step: 1;\n  phase: EmailRecoveryPhase.STEP_1_PREPARATION;\n}\n\nexport interface EmailRecoveryEventStep2 extends BaseEmailRecoveryEvent {\n  step: 2;\n  phase: EmailRecoveryPhase.STEP_2_TOUCH_ID_REGISTRATION;\n}\n\nexport interface EmailRecoveryEventStep3 extends BaseEmailRecoveryEvent {\n  step: 3;\n  phase: EmailRecoveryPhase.STEP_3_AWAIT_EMAIL;\n}\n\nexport interface EmailRecoveryEventStep4 extends BaseEmailRecoveryEvent {\n  step: 4;\n  phase: EmailRecoveryPhase.STEP_4_POLLING_ADD_KEY | EmailRecoveryPhase.STEP_4_POLLING_VERIFICATION_RESULT;\n  data?: {\n    accountId?: string;\n    requestId?: string;\n    nearPublicKey?: string;\n    elapsedMs?: number;\n    pollCount?: number;\n    [key: string]: unknown;\n  };\n  logs?: string[];\n}\n\nexport interface EmailRecoveryEventStep5 extends BaseEmailRecoveryEvent {\n  step: 5;\n  phase: EmailRecoveryPhase.STEP_5_FINALIZING_REGISTRATION;\n  data?: Record<string, unknown>;\n}\n\nexport interface EmailRecoveryEventStep6 extends BaseEmailRecoveryEvent {\n  step: 6;\n  phase: EmailRecoveryPhase.STEP_6_COMPLETE;\n  status: EmailRecoveryStatus.SUCCESS;\n  data?: Record<string, unknown>;\n}\n\nexport interface EmailRecoveryEventResumedFromPending extends BaseEmailRecoveryEvent {\n  step: 0;\n  phase: EmailRecoveryPhase.RESUMED_FROM_PENDING;\n  status: EmailRecoveryStatus.PROGRESS;\n  data?: Record<string, unknown>;\n}\n\nexport interface EmailRecoveryErrorEvent extends BaseEmailRecoveryEvent {\n  step: 0;\n  phase: EmailRecoveryPhase.ERROR;\n  status: EmailRecoveryStatus.ERROR;\n  error: string;\n}\n\nexport type EmailRecoverySSEEvent =\n  | EmailRecoveryEventStep1\n  | EmailRecoveryEventStep2\n  | EmailRecoveryEventStep3\n  | EmailRecoveryEventStep4\n  | EmailRecoveryEventStep5\n  | EmailRecoveryEventStep6\n  | EmailRecoveryEventResumedFromPending\n  | EmailRecoveryErrorEvent;\n\n//////////////////////////////////\n/// Hooks Options\n//////////////////////////////////\n\n// Function Options\nexport interface RegistrationHooksOptions {\n  onEvent?: EventCallback<RegistrationSSEEvent>;\n  onError?: (error: Error) => void;\n  afterCall?: AfterCall<RegistrationResult>;\n  /**\n   * Optional: registration signing policy.\n   * - `{ mode: 'local-signer' }`: derive and store an encrypted local NEAR secret key (v3 vault).\n   * - `{ mode: 'threshold-signer' }`: derive the local key AND enroll a threshold Ed25519 (2-of-2) access key\n   *   during registration (relay adds the threshold public key on-chain and returns relayerKeyId).\n   *\n   * Defaults to `{ mode: 'local-signer' }` for backwards compatibility in public APIs.\n   */\n  signerMode?: SignerMode;\n  /**\n   * Preferred grouping for per-call confirmer copy.\n   */\n  confirmerText?: { title?: string; body?: string };\n  // Per-call confirmation configuration. When provided, overrides user preferences\n  // for this request only (not persisted).\n  // Accept partial config so callers can pass minimal overrides like { uiMode: 'drawer' }\n  confirmationConfig?: Partial<ConfirmationConfig>;\n}\n\nexport interface LoginHooksOptions {\n  onEvent?: EventCallback<LoginSSEvent>;\n  onError?: (error: Error) => void;\n  afterCall?: AfterCall<LoginAndCreateSessionResult>;\n  /**\n   * Optional: passkey deviceNumber hint.\n   *\n   * When multiple passkeys exist for the same `nearAccountId`, providing this hint lets\n   * the login flow prioritize the matching `credentialId` when presenting the TouchID\n   * (WebAuthn) prompt.\n   */\n  deviceNumber?: number;\n  // Optional: request a server session (JWT in body or HttpOnly cookie)\n  session?: {\n    // 'jwt' returns the token in the JSON body; 'cookie' sets HttpOnly cookie\n    kind: 'jwt' | 'cookie';\n    // Optional: override relay URL; defaults to TatchiConfigs.relayer.url\n    relayUrl?: string;\n    // Optional: override route path; defaults to '/verify-authentication-response'\n    route?: string;\n  };\n  /**\n   * Optional: override the warm signing session policy minted during login.\n   * Defaults come from `TatchiConfigs.signingSessionDefaults`.\n   */\n  signingSession?: {\n    ttlMs?: number;\n    remainingUses?: number;\n  };\n}\n\nexport interface ActionHooksOptions {\n  onEvent?: EventCallback<ActionSSEEvent>;\n  onError?: (error: Error) => void;\n  waitUntil?: TxExecutionStatus;\n  afterCall?: AfterCall<ActionResult>;\n  /**\n   * Signing policy:\n   * { mode: 'local-signer' }\n   * { mode: 'threshold-signer'; behavior?: ThresholdBehavior };\n   */\n  signerMode?: SignerMode;\n  /**\n   * Preferred grouping for per-call confirmer copy.\n   */\n  confirmerText?: { title?: string; body?: string };\n  // Per-call confirmation configuration. When provided, overrides user preferences\n  // for this request only (not persisted).\n  // Accept partial config so callers can pass minimal overrides like { uiMode: 'drawer' }\n  confirmationConfig?: Partial<ConfirmationConfig>;\n}\n\nexport type ExecutionWaitOption =\n  | { mode: 'sequential'; waitUntil?: TxExecutionStatus }\n  | { mode: 'parallelStaggered'; staggerMs: number };\n\nexport interface SignAndSendTransactionHooksOptions {\n  onEvent?: EventCallback<ActionSSEEvent>;\n  onError?: (error: Error) => void;\n  waitUntil?: TxExecutionStatus;\n  /**\n   * Signing policy:\n   * { mode: 'local-signer' }\n   * { mode: 'threshold-signer'; behavior?: ThresholdBehavior };\n   */\n  signerMode?: SignerMode;\n  /**\n   * Execution control for multi-transaction broadcasts:\n   * - { mode: 'sequential', waitUntil?: TxExecutionStatus }\n   * - { mode: 'parallelStaggered', staggerMs: number }\n   */\n  executionWait?: ExecutionWaitOption;\n  /**\n   * Preferred grouping for per-call confirmer copy.\n   */\n  confirmerText?: { title?: string; body?: string };\n\n  afterCall?: AfterCall<ActionResult[]>;\n  // Per-call confirmation configuration. When provided, overrides user preferences\n  // for this request only (not persisted).\n  // Accept partial config so callers can pass minimal overrides like { uiMode: 'drawer' }\n  confirmationConfig?: Partial<ConfirmationConfig>;\n}\n\nexport interface SignTransactionHooksOptions {\n  onEvent?: EventCallback<ActionSSEEvent>;\n  onError?: (error: Error) => void;\n\n  afterCall?: AfterCall<SignTransactionResult[]>;\n  waitUntil?: TxExecutionStatus;\n  /**\n   * Signing policy:\n   * { mode: 'local-signer' }\n   * { mode: 'threshold-signer'; behavior?: ThresholdBehavior };\n   */\n  signerMode?: SignerMode;\n  /**\n   * Preferred grouping for per-call confirmer copy.\n   */\n  confirmerText?: { title?: string; body?: string };\n  // Per-call confirmation configuration (non-persistent)\n  // Accept partial config so callers can pass minimal overrides like { uiMode: 'drawer' }\n  confirmationConfig?: Partial<ConfirmationConfig>;\n}\n\nexport interface SendTransactionHooksOptions {\n  onEvent?: EventCallback<ActionSSEEvent>;\n  onError?: (error: Error) => void;\n\n  afterCall?: AfterCall<ActionResult>;\n  waitUntil?: TxExecutionStatus;\n}\n\nexport interface DelegateActionHooksOptions {\n  onEvent?: EventCallback<DelegateActionSSEEvent>;\n  onError?: (error: Error) => void;\n  waitUntil?: TxExecutionStatus;\n  afterCall?: AfterCall<SignDelegateActionResult>;\n  /**\n   * Signing policy:\n   * { mode: 'local-signer' }\n   * { mode: 'threshold-signer'; behavior?: ThresholdBehavior };\n   */\n  signerMode?: SignerMode;\n  /**\n   * Preferred grouping for per-call confirmer copy.\n   */\n  confirmerText?: { title?: string; body?: string };\n  confirmationConfig?: Partial<ConfirmationConfig>;\n}\n\nexport interface DelegateRelayHooksOptions {\n  onEvent?: EventCallback<ActionSSEEvent>;\n  onError?: (error: Error) => void;\n  afterCall?: AfterCall<DelegateRelayResult>;\n}\n\nexport type SignAndSendDelegateActionHooksOptions =\n  Omit<DelegateActionHooksOptions, 'afterCall'> & {\n    afterCall?: AfterCall<SignAndSendDelegateActionResult>;\n  };\n\nexport interface SyncAccountHooksOptions {\n  onEvent?: EventCallback<SyncAccountSSEEvent>;\n  onError?: (error: Error) => void;\n  waitUntil?: TxExecutionStatus;\n\n  afterCall?: AfterCall<SyncAccountResult>;\n}\n\nexport interface SignNEP413HooksOptions {\n  onEvent?: EventCallback<RegistrationSSEEvent | LoginSSEvent | ActionSSEEvent | DeviceLinkingSSEEvent | SyncAccountSSEEvent | EmailRecoverySSEEvent>;\n  onError?: (error: Error) => void;\n\n  afterCall?: AfterCall<SignNEP413MessageResult>;\n  /**\n   * Signing policy:\n   * { mode: 'local-signer' }\n   * { mode: 'threshold-signer'; behavior?: ThresholdBehavior };\n   */\n  signerMode?: SignerMode;\n  /**\n   * Preferred grouping for per-call confirmer copy.\n   */\n  confirmerText?: { title?: string; body?: string };\n  // Per-call confirmation configuration (non-persistent)\n  // Accept partial config so callers can pass minimal overrides like { uiMode: 'drawer' }\n  confirmationConfig?: Partial<ConfirmationConfig>;\n}\n"],"mappings":";;AAmBA,IAAY,kEAAL;AACL;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;;AAEF,IAAY,oEAAL;AACL;AACA;AACA;;;AAIF,IAAY,oDAAL;AACL;AACA;AACA;AACA;AACA;;;AAEF,IAAY,sDAAL;AACL;AACA;AACA;;;AAIF,IAAY,sDAAL;AACL;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;;AAEF,IAAY,wDAAL;AACL;AACA;AACA;;;AAOF,IAAY,gEAAL;AACL;AACA;AACA;AACA;AACA;AACA;;;AAEF,IAAY,kEAAL;AACL;AACA;AACA;;;AAIF,IAAY,oEAAL;AACL;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;;AAEF,IAAY,sEAAL;AACL;AACA;AACA;;;AAIF,IAAY,oEAAL;AACL;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;;AAEF,IAAY,sEAAL;AACL;AACA;AACA"}

package/dist/cjs/core/types/signer-worker.js

@@ -3,14 +3,96 @@ let src_wasm_signer_worker_pkg_wasm_signer_worker_js = require("../../wasm_signe
 src_wasm_signer_worker_pkg_wasm_signer_worker_js = require_rolldown_runtime.__toESM(src_wasm_signer_worker_pkg_wasm_signer_worker_js);
 
 //#region src/core/types/signer-worker.ts
+const DEFAULT_THRESHOLD_BEHAVIOR = "strict";
+const DEFAULT_SIGNER_MODE = "local-signer";
+const DEFAULT_SIGNING_MODE = { mode: DEFAULT_SIGNER_MODE };
+function isSignerMode(input) {
+	return input === "local-signer" || input === "threshold-signer";
+}
+function isThresholdBehavior(input) {
+	return input === "fallback" || input === "strict";
+}
+function coerceSignerMode(input, fallback = DEFAULT_SIGNING_MODE) {
+	if (input == null) return fallback;
+	if (typeof input === "string") return isSignerMode(input) ? { mode: input } : fallback;
+	if (typeof input !== "object") return fallback;
+	if (input.mode === "local-signer") return { mode: input.mode };
+	const behavior = input.behavior;
+	return isThresholdBehavior(behavior) ? {
+		mode: input.mode,
+		behavior
+	} : { mode: input.mode };
+}
+/**
+* Merge a mode-only override onto a base signer mode.
+*
+* This is intentionally "partial override" semantics:
+* - override sets `mode` when provided
+* - override sets `behavior` only when explicitly provided
+* - if override switches to `threshold-signer` without specifying `behavior`,
+*   preserve `base.behavior` when base is already `threshold-signer`
+*/
+function mergeSignerMode(base, override) {
+	const baseNormalized = coerceSignerMode(base, DEFAULT_SIGNING_MODE);
+	if (override == null) return baseNormalized;
+	if (typeof override === "string") {
+		if (!isSignerMode(override)) return baseNormalized;
+		if (override === "local-signer") return { mode: "local-signer" };
+		if (baseNormalized.mode === "threshold-signer") {
+			const behavior$1 = baseNormalized.behavior;
+			return isThresholdBehavior(behavior$1) ? {
+				mode: "threshold-signer",
+				behavior: behavior$1
+			} : { mode: "threshold-signer" };
+		}
+		return { mode: "threshold-signer" };
+	}
+	if (typeof override !== "object") return baseNormalized;
+	const mode = override.mode;
+	if (mode === "local-signer") return { mode: "local-signer" };
+	if (mode !== "threshold-signer") return baseNormalized;
+	const behavior = override.behavior;
+	if (isThresholdBehavior(behavior)) return {
+		mode: "threshold-signer",
+		behavior
+	};
+	if (baseNormalized.mode === "threshold-signer") {
+		const baseBehavior = baseNormalized.behavior;
+		if (isThresholdBehavior(baseBehavior)) return {
+			mode: "threshold-signer",
+			behavior: baseBehavior
+		};
+	}
+	return { mode: "threshold-signer" };
+}
+function getThresholdBehaviorFromSignerMode(mode) {
+	if (mode.mode !== "threshold-signer") return DEFAULT_THRESHOLD_BEHAVIOR;
+	return isThresholdBehavior(mode.behavior) ? mode.behavior : DEFAULT_THRESHOLD_BEHAVIOR;
+}
+/**
+* Internal, single-purpose worker request types.
+*
+* These are intentionally *not* exposed as general-purpose "no prompt" signing APIs.
+* They exist to support tightly-scoped post-registration flows without allowing
+* arbitrary actions/receivers to be signed without VRF/WebAuthn binding.
+*/
+const INTERNAL_WORKER_REQUEST_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT = 10;
+const INTERNAL_WORKER_RESPONSE_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT_SUCCESS = 24;
+const INTERNAL_WORKER_RESPONSE_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT_FAILURE = 25;
+const DEFAULT_CONFIRMATION_CONFIG = {
+	uiMode: "modal",
+	behavior: "requireClick",
+	autoProceedDelay: 0,
+	theme: "dark"
+};
 function isWorkerProgress(response) {
 	return response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.RegistrationProgress || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.RegistrationComplete || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.ExecuteActionsProgress || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.ExecuteActionsComplete;
 }
 function isWorkerSuccess(response) {
-	return response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.DeriveNearKeypairAndEncryptSuccess || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.RecoverKeypairFromPasskeySuccess || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.DecryptPrivateKeyWithPrfSuccess || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.SignTransactionsWithActionsSuccess || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.SignDelegateActionSuccess || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.ExtractCosePublicKeySuccess || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.SignTransactionWithKeyPairSuccess || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.SignNep413MessageSuccess || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.RegisterDevice2WithDerivedKeySuccess;
+	return response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.DeriveNearKeypairAndEncryptSuccess || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.RecoverKeypairFromPasskeySuccess || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.DecryptPrivateKeyWithPrfSuccess || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.SignTransactionsWithActionsSuccess || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.SignDelegateActionSuccess || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.ExtractCosePublicKeySuccess || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.SignTransactionWithKeyPairSuccess || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.SignNep413MessageSuccess || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.RegisterDevice2WithDerivedKeySuccess || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.DeriveThresholdEd25519ClientVerifyingShareSuccess || response.type === INTERNAL_WORKER_RESPONSE_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT_SUCCESS;
 }
 function isWorkerError(response) {
-	return response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.DeriveNearKeypairAndEncryptFailure || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.RecoverKeypairFromPasskeyFailure || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.DecryptPrivateKeyWithPrfFailure || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.SignTransactionsWithActionsFailure || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.SignDelegateActionFailure || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.ExtractCosePublicKeyFailure || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.SignTransactionWithKeyPairFailure || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.SignNep413MessageFailure || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.RegisterDevice2WithDerivedKeyFailure;
+	return response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.DeriveNearKeypairAndEncryptFailure || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.RecoverKeypairFromPasskeyFailure || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.DecryptPrivateKeyWithPrfFailure || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.SignTransactionsWithActionsFailure || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.SignDelegateActionFailure || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.ExtractCosePublicKeyFailure || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.SignTransactionWithKeyPairFailure || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.SignNep413MessageFailure || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.RegisterDevice2WithDerivedKeyFailure || response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.DeriveThresholdEd25519ClientVerifyingShareFailure || response.type === INTERNAL_WORKER_RESPONSE_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT_FAILURE;
 }
 function isDeriveNearKeypairAndEncryptSuccess(response) {
 	return response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.DeriveNearKeypairAndEncryptSuccess;
@@ -21,6 +103,9 @@ function isRecoverKeypairFromPasskeySuccess(response) {
 function isSignTransactionsWithActionsSuccess(response) {
 	return response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.SignTransactionsWithActionsSuccess;
 }
+function isSignAddKeyThresholdPublicKeyNoPromptSuccess(response) {
+	return response.type === INTERNAL_WORKER_RESPONSE_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT_SUCCESS;
+}
 function isSignDelegateActionSuccess(response) {
 	return response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.SignDelegateActionSuccess;
 }
@@ -36,34 +121,25 @@ function isSignNep413MessageSuccess(response) {
 function isRegisterDevice2WithDerivedKeySuccess(response) {
 	return response.type === src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.RegisterDevice2WithDerivedKeySuccess;
 }
-var DEFAULT_CONFIRMATION_CONFIG;
-var init_signer_worker = require_rolldown_runtime.__esm({ "src/core/types/signer-worker.ts": (() => {
-	DEFAULT_CONFIRMATION_CONFIG = {
-		uiMode: "modal",
-		behavior: "requireClick",
-		autoProceedDelay: 0,
-		theme: "dark"
-	};
-}) });
 
 //#endregion
-init_signer_worker();
 exports.DEFAULT_CONFIRMATION_CONFIG = DEFAULT_CONFIRMATION_CONFIG;
-Object.defineProperty(exports, 'init_signer_worker', {
-  enumerable: true,
-  get: function () {
-    return init_signer_worker;
-  }
-});
+exports.DEFAULT_SIGNING_MODE = DEFAULT_SIGNING_MODE;
+exports.DEFAULT_THRESHOLD_BEHAVIOR = DEFAULT_THRESHOLD_BEHAVIOR;
+exports.INTERNAL_WORKER_REQUEST_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT = INTERNAL_WORKER_REQUEST_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT;
+exports.coerceSignerMode = coerceSignerMode;
+exports.getThresholdBehaviorFromSignerMode = getThresholdBehaviorFromSignerMode;
 exports.isDecryptPrivateKeyWithPrfSuccess = isDecryptPrivateKeyWithPrfSuccess;
 exports.isDeriveNearKeypairAndEncryptSuccess = isDeriveNearKeypairAndEncryptSuccess;
 exports.isExtractCosePublicKeySuccess = isExtractCosePublicKeySuccess;
 exports.isRecoverKeypairFromPasskeySuccess = isRecoverKeypairFromPasskeySuccess;
 exports.isRegisterDevice2WithDerivedKeySuccess = isRegisterDevice2WithDerivedKeySuccess;
+exports.isSignAddKeyThresholdPublicKeyNoPromptSuccess = isSignAddKeyThresholdPublicKeyNoPromptSuccess;
 exports.isSignDelegateActionSuccess = isSignDelegateActionSuccess;
 exports.isSignNep413MessageSuccess = isSignNep413MessageSuccess;
 exports.isSignTransactionsWithActionsSuccess = isSignTransactionsWithActionsSuccess;
 exports.isWorkerError = isWorkerError;
 exports.isWorkerProgress = isWorkerProgress;
 exports.isWorkerSuccess = isWorkerSuccess;
+exports.mergeSignerMode = mergeSignerMode;
 //# sourceMappingURL=signer-worker.js.map

package/dist/cjs/core/types/signer-worker.js.map

@@ -1 +1 @@
-{"version":3,"file":"signer-worker.js","names":["WorkerResponseType","DEFAULT_CONFIRMATION_CONFIG: ConfirmationConfig"],"sources":["../../../../src/core/types/signer-worker.ts"],"sourcesContent":["\n// === IMPORT AUTO-GENERATED WASM TYPES ===\n// These are the source of truth generated from Rust structs via wasm-bindgen\n// Import as instance types from the WASM module classes\nimport * as wasmModule from '../../wasm_signer_worker/pkg/wasm_signer_worker.js';\nimport { WorkerRequestType, WorkerResponseType } from '../../wasm_signer_worker/pkg/wasm_signer_worker.js';\nexport { WorkerRequestType, WorkerResponseType }; // Export the WASM enums directly\n\nimport { StripFree } from \"./index.js\";\nimport type { onProgressEvents } from \"./sdkSentEvents.js\";\nimport type { TransactionContext } from './rpc.js';\nimport type { VRFChallenge } from './vrf-worker.js';\nimport type { ActionArgsWasm } from './actions.js';\n\nexport type WasmTransaction = wasmModule.WasmTransaction;\nexport type WasmSignature = wasmModule.WasmSignature;\n\nexport interface TransactionPayload {\n  nearAccountId: string;\n  receiverId: string;\n  actions: ActionArgsWasm[];\n}\nexport type RpcCallPayload = StripFree<wasmModule.RpcCallPayload>;\n/**\n * RPC call parameters for NEAR operations and VRF generation\n * Used to pass essential parameters for background operations\n * export interface RpcCallPayload {\n *    contractId: string;    // Web3Authn contract ID for verification\n *    nearRpcUrl: string;    // NEAR RPC endpoint URL\n *    nearAccountId: string; // Account ID for VRF challenge generation\n * }\n */\n\nexport type WasmDeriveNearKeypairAndEncryptRequest = StripFree<wasmModule.DeriveNearKeypairAndEncryptRequest>;\nexport type WasmRecoverKeypairRequest = StripFree<wasmModule.RecoverKeypairRequest>;\nexport interface WasmSignTransactionsWithActionsRequest {\n  rpcCall: RpcCallPayload;\n  sessionId: string;\n  createdAt?: number;\n  decryption: StripFree<wasmModule.DecryptionPayload>;\n  txSigningRequests: TransactionPayload[];\n  intentDigest?: string;\n  transactionContext?: TransactionContext;\n  vrfChallenge?: VRFChallenge;\n  credential?: string;\n}\nexport interface WasmSignDelegateActionRequest {\n  rpcCall: RpcCallPayload;\n  sessionId: string;\n  createdAt?: number;\n  decryption: StripFree<wasmModule.DecryptionPayload>;\n  delegate: DelegatePayload;\n  intentDigest?: string;\n  transactionContext?: TransactionContext;\n  credential?: string;\n}\nexport interface DelegatePayload {\n  senderId: string;\n  receiverId: string;\n  actions: ActionArgsWasm[];\n  nonce: string;\n  maxBlockHeight: string;\n  publicKey: string;\n}\nexport type WasmDecryptPrivateKeyRequest = StripFree<wasmModule.DecryptPrivateKeyRequest>;\nexport type WasmExtractCosePublicKeyRequest = StripFree<wasmModule.ExtractCoseRequest>;\nexport type WasmSignNep413MessageRequest = StripFree<wasmModule.SignNep413Request>;\nexport interface WasmSignTransactionWithKeyPairRequest {\n  nearPrivateKey: string;\n  signerAccountId: string;\n  receiverId: string;\n  nonce: string;\n  blockHash: string;\n  actions: ActionArgsWasm[];\n}\n// Combined Device2 registration handler (derive + sign in one step)\nexport type WasmRegisterDevice2WithDerivedKeyRequest = StripFree<wasmModule.RegisterDevice2WithDerivedKeyRequest>;\n\nexport type WasmRequestPayload = WasmDeriveNearKeypairAndEncryptRequest\n  | WasmRecoverKeypairRequest\n  | WasmSignTransactionsWithActionsRequest\n  | WasmSignDelegateActionRequest\n  | WasmDecryptPrivateKeyRequest\n  | WasmExtractCosePublicKeyRequest\n  | WasmSignNep413MessageRequest\n  | WasmSignTransactionWithKeyPairRequest\n  | WasmRegisterDevice2WithDerivedKeyRequest;\n\n// WASM Worker Response Types\nexport type WasmRecoverKeypairResult = InstanceType<typeof wasmModule.RecoverKeypairResult>;\nexport type WasmSignedTransaction = InstanceType<typeof wasmModule.WasmSignedTransaction>;\nexport type WasmSignedDelegate = wasmModule.WasmSignedDelegate;\nexport type WasmDelegateAction = wasmModule.WasmDelegateAction;\nexport type WasmTransactionSignResult = InstanceType<typeof wasmModule.TransactionSignResult>;\nexport type WasmDelegateSignResult = wasmModule.DelegateSignResult;\nexport type WasmDecryptPrivateKeyResult = InstanceType<typeof wasmModule.DecryptPrivateKeyResult>;\nexport type WasmDeriveNearKeypairAndEncryptResult = InstanceType<typeof wasmModule.DeriveNearKeypairAndEncryptResult>;\n// wasm-bindgen generates some classes with private constructors, which breaks\n// `InstanceType<typeof Class>`. Use the class name directly for the instance type.\nexport type WasmRegisterDevice2WithDerivedKeyResult = InstanceType<typeof wasmModule.RegisterDevice2WithDerivedKeyResult>;\n\n// === WORKER REQUEST TYPE MAPPING ===\n// Define the complete type mapping for each worker request\nexport interface WorkerRequestTypeMap {\n  [WorkerRequestType.DeriveNearKeypairAndEncrypt]: {\n    type: WorkerRequestType.DeriveNearKeypairAndEncrypt;\n    request: WasmDeriveNearKeypairAndEncryptRequest;\n    result: WasmDeriveNearKeypairAndEncryptResult;\n  };\n  [WorkerRequestType.RecoverKeypairFromPasskey]: {\n    type: WorkerRequestType.RecoverKeypairFromPasskey;\n    request: WasmRecoverKeypairRequest;\n    result: WasmRecoverKeypairResult;\n  };\n  [WorkerRequestType.SignTransactionsWithActions]: {\n    type: WorkerRequestType.SignTransactionsWithActions;\n    request: WasmSignTransactionsWithActionsRequest;\n    result: WasmTransactionSignResult;\n  };\n  [WorkerRequestType.SignDelegateAction]: {\n    type: WorkerRequestType.SignDelegateAction;\n    request: WasmSignDelegateActionRequest;\n    result: WasmDelegateSignResult;\n  };\n  [WorkerRequestType.DecryptPrivateKeyWithPrf]: {\n    type: WorkerRequestType.DecryptPrivateKeyWithPrf;\n    request: WasmDecryptPrivateKeyRequest;\n    result: WasmDecryptPrivateKeyResult;\n  };\n  [WorkerRequestType.ExtractCosePublicKey]: {\n    type: WorkerRequestType.ExtractCosePublicKey;\n    request: WasmExtractCosePublicKeyRequest;\n    result: wasmModule.CoseExtractionResult;\n  };\n  [WorkerRequestType.SignTransactionWithKeyPair]: {\n    type: WorkerRequestType.SignTransactionWithKeyPair;\n    request: WasmSignTransactionWithKeyPairRequest;\n    result: WasmTransactionSignResult;\n  };\n  [WorkerRequestType.SignNep413Message]: {\n    type: WorkerRequestType.SignNep413Message;\n    request: WasmSignNep413MessageRequest;\n    result: wasmModule.SignNep413Result;\n  };\n  [WorkerRequestType.RegisterDevice2WithDerivedKey]: {\n    type: WorkerRequestType.RegisterDevice2WithDerivedKey;\n    request: WasmRegisterDevice2WithDerivedKeyRequest;\n    result: WasmRegisterDevice2WithDerivedKeyResult;\n  };\n}\n\n/**\n * Validation rules for ConfirmationConfig to ensure behavior conforms to UI mode:\n *\n * - uiMode: 'skip' → behavior is ignored, autoProceedDelay is ignored\n * - uiMode: 'modal' | 'drawer' → behavior: 'requireClick' | 'autoProceed', autoProceedDelay only used with 'autoProceed'\n *\n * The WASM worker automatically validates and overrides these settings:\n * - For 'skip' mode: behavior is set to 'autoProceed' with autoProceedDelay: 0\n * - For 'modal' and 'drawer' modes: behavior and autoProceedDelay are used as specified\n *\n * The actual type would be the following, but we use the flat interface for simplicity:\n * export interface ConfirmationConfig {\n *   uiMode: 'skip' | 'modal' | 'drawer'\n *\n * }\n */\nexport type ConfirmationUIMode = 'skip' | 'modal' | 'drawer';\nexport type ConfirmationBehavior = 'requireClick' | 'autoProceed';\nexport interface ConfirmationConfig {\n  /** Type of UI to display for confirmation: 'skip' | 'modal' | 'drawer' */\n  uiMode: ConfirmationUIMode;\n  /** How the confirmation UI behaves: 'requireClick' | 'autoProceed' */\n  behavior: ConfirmationBehavior;\n  /** Delay in milliseconds before auto-proceeding (only used with autoProceed) */\n  autoProceedDelay?: number;\n  /** Theme for the confirmation UI: 'dark' | 'light' */\n  theme: 'dark' | 'light';\n}\n\nexport const DEFAULT_CONFIRMATION_CONFIG: ConfirmationConfig = {\n  uiMode: 'modal',\n  behavior: 'requireClick',\n  autoProceedDelay: 0,\n  theme: 'dark',\n};\n\n// WASM enum types for confirmation configuration\nexport type WasmConfirmationUIMode = wasmModule.ConfirmationUIMode;\nexport type WasmConfirmationBehavior = wasmModule.ConfirmationBehavior;\n\n// Mapping functions to convert string literals to numeric enum values\nexport const mapUIModeToWasm = (uiMode: ConfirmationUIMode): number => {\n  switch (uiMode) {\n    case 'skip': return wasmModule.ConfirmationUIMode.Skip;\n    case 'modal': return wasmModule.ConfirmationUIMode.Modal;\n    // Drawer now has a dedicated WASM enum variant\n    case 'drawer': return (wasmModule as any).ConfirmationUIMode.Drawer ?? wasmModule.ConfirmationUIMode.Modal;\n    default: return wasmModule.ConfirmationUIMode.Modal;\n  }\n};\n\nexport const mapBehaviorToWasm = (behavior: ConfirmationBehavior): number => {\n  switch (behavior) {\n    case 'requireClick': return wasmModule.ConfirmationBehavior.RequireClick;\n    case 'autoProceed': return wasmModule.ConfirmationBehavior.AutoProceed;\n    default: return wasmModule.ConfirmationBehavior.RequireClick;\n  }\n};\nexport type WasmRequestResult = WasmRecoverKeypairResult\n  | WasmSignedTransaction\n  | WasmSignedDelegate\n  | WasmTransactionSignResult\n  | WasmDelegateSignResult\n  | WasmDecryptPrivateKeyResult\n\nexport interface SignerWorkerMessage<T extends WorkerRequestType, R extends WasmRequestPayload> {\n  type: T;\n  payload: R;\n}\n\n/**\n * =============================\n * Worker Progress Message Types\n * =============================\n *\n * 1. PROGRESS MESSAGES (During Operation):\n *    Rust WASM → send_typed_progress_message() → TypeScript sendProgressMessage() → postMessage() → Main Thread\n *    - Used for real-time updates during long operations\n *    - Multiple progress messages can be sent per operation\n *    - Does not affect the final result\n *    - Types: ProgressMessageType, ProgressStep, ProgressStatus (auto-generated from Rust)\n *\n * 2. FINAL RESULTS (Operation Complete):\n *    Rust WASM → return value from handle_signer_message() → TypeScript worker → postMessage() → Main Thread\n *    - Contains the actual operation result (success/error)\n *    - Only one result message per operation\n *    - This is what the main thread awaits for completion\n */\n\n// === PROGRESS MESSAGE TYPES ===\n\n// Basic interface for development - actual types are auto-generated from Rust\nexport type ProgressMessage = wasmModule.WorkerProgressMessage;\n\n// Type guard for basic progress message validation during development\nexport function isProgressMessage(obj: unknown): obj is ProgressMessage {\n  return (\n    typeof obj === 'object' &&\n    obj !== null &&\n    typeof (obj as { message_type?: unknown }).message_type === 'string' &&\n    typeof (obj as { step?: unknown }).step === 'string' &&\n    typeof (obj as { message?: unknown }).message === 'string' &&\n    typeof (obj as { status?: unknown }).status === 'string'\n  );\n}\n\nexport enum ProgressMessageType {\n  REGISTRATION_PROGRESS = 'REGISTRATION_PROGRESS',\n  REGISTRATION_COMPLETE = 'REGISTRATION_COMPLETE',\n  EXECUTE_ACTIONS_PROGRESS = 'EXECUTE_ACTIONS_PROGRESS',\n  EXECUTE_ACTIONS_COMPLETE = 'EXECUTE_ACTIONS_COMPLETE',\n}\n\n// Step identifiers for progress tracking\n// This enum exactly matches the Rust WASM ProgressStep enum from:\n// packages/passkey/src/wasm_signer_worker/src/types/progress.rs\n// The string values come from the progress_step_name() function in that file\nexport enum ProgressStep {\n  PREPARATION = 'preparation',                           // Rust: Preparation\n  WEBAUTHN_AUTHENTICATION = 'webauthn-authentication',   // Rust: WebauthnAuthentication\n  AUTHENTICATION_COMPLETE = 'authentication-complete',   // Rust: AuthenticationComplete\n  TRANSACTION_SIGNING_PROGRESS = 'transaction-signing-progress', // Rust: TransactionSigningProgress\n  TRANSACTION_SIGNING_COMPLETE = 'transaction-signing-complete', // Rust: TransactionSigningComplete\n  ERROR = 'error',                                       // Rust: Error\n}\n\nexport interface ProgressStepMap {\n  [wasmModule.ProgressStep.Preparation]: ProgressStep.PREPARATION;\n  [wasmModule.ProgressStep.WebauthnAuthentication]: ProgressStep.WEBAUTHN_AUTHENTICATION;\n  [wasmModule.ProgressStep.AuthenticationComplete]: ProgressStep.AUTHENTICATION_COMPLETE;\n  [wasmModule.ProgressStep.TransactionSigningProgress]: ProgressStep.TRANSACTION_SIGNING_PROGRESS;\n  [wasmModule.ProgressStep.TransactionSigningComplete]: ProgressStep.TRANSACTION_SIGNING_COMPLETE;\n  [wasmModule.ProgressStep.Error]: ProgressStep.ERROR;\n}\n\n// === RESPONSE MESSAGE INTERFACES ===\n\n// Base interface for all worker responses\nexport interface BaseWorkerResponse {\n  type: WorkerResponseType;\n  payload: unknown;\n}\n\n// Map request types to their expected success response payloads (WASM types)\nexport interface RequestResponseMap {\n  [WorkerRequestType.DeriveNearKeypairAndEncrypt]: WasmDeriveNearKeypairAndEncryptResult;\n  [WorkerRequestType.RecoverKeypairFromPasskey]: WasmRecoverKeypairResult;\n  [WorkerRequestType.DecryptPrivateKeyWithPrf]: WasmDecryptPrivateKeyResult;\n  [WorkerRequestType.SignTransactionsWithActions]: WasmTransactionSignResult;\n  [WorkerRequestType.SignDelegateAction]: WasmDelegateSignResult;\n  [WorkerRequestType.ExtractCosePublicKey]: wasmModule.CoseExtractionResult;\n  [WorkerRequestType.SignTransactionWithKeyPair]: WasmTransactionSignResult;\n  [WorkerRequestType.SignNep413Message]: wasmModule.SignNep413Result;\n  [WorkerRequestType.RegisterDevice2WithDerivedKey]: WasmRegisterDevice2WithDerivedKeyResult;\n}\n\n// Generic success response type that uses WASM types\nexport interface WorkerSuccessResponse<T extends WorkerRequestType> extends BaseWorkerResponse {\n  type: WorkerResponseType;\n  payload: RequestResponseMap[T];\n}\n\n// Generic error response type\nexport interface WorkerErrorResponse extends BaseWorkerResponse {\n  type: WorkerResponseType;\n  payload: {\n    error: string;\n    errorCode?: WorkerErrorCode;\n    context?: Record<string, unknown>;\n  };\n}\n\nexport enum WorkerErrorCode {\n  WASM_INIT_FAILED = 'WASM_INIT_FAILED',\n  INVALID_REQUEST = 'INVALID_REQUEST',\n  TIMEOUT = 'TIMEOUT',\n  ENCRYPTION_FAILED = 'ENCRYPTION_FAILED',\n  DECRYPTION_FAILED = 'DECRYPTION_FAILED',\n  SIGNING_FAILED = 'SIGNING_FAILED',\n  STORAGE_FAILED = 'STORAGE_FAILED',\n  UNKNOWN_ERROR = 'UNKNOWN_ERROR',\n}\n\nexport interface WorkerProgressResponse extends BaseWorkerResponse {\n  type: WorkerResponseType;\n  payload: onProgressEvents\n}\n\n// === MAIN RESPONSE TYPE ===\n\ntype RequestTypeKey = keyof RequestResponseMap;\n\nexport type WorkerResponseForRequest<T extends RequestTypeKey> =\n  | WorkerSuccessResponse<T>\n  | WorkerErrorResponse\n  | WorkerProgressResponse;\n\n// === CONVENIENCE TYPE ALIASES ===\n\nexport type EncryptionResponse = WorkerResponseForRequest<typeof WorkerRequestType.DeriveNearKeypairAndEncrypt>;\nexport type RecoveryResponse = WorkerResponseForRequest<typeof WorkerRequestType.RecoverKeypairFromPasskey>;\nexport type TransactionResponse = WorkerResponseForRequest<typeof WorkerRequestType.SignTransactionsWithActions>;\nexport type DelegateSignResponse = WorkerResponseForRequest<typeof WorkerRequestType.SignDelegateAction>;\nexport type DecryptionResponse = WorkerResponseForRequest<typeof WorkerRequestType.DecryptPrivateKeyWithPrf>;\nexport type CoseExtractionResponse = WorkerResponseForRequest<typeof WorkerRequestType.ExtractCosePublicKey>;\nexport type Nep413SigningResponse = WorkerResponseForRequest<typeof WorkerRequestType.SignNep413Message>;\n\n// === TYPE GUARDS FOR GENERIC RESPONSES ===\n\nexport function isWorkerProgress<T extends RequestTypeKey>(\n  response: WorkerResponseForRequest<T>\n): response is WorkerProgressResponse {\n  return (\n    response.type === WorkerResponseType.RegistrationProgress ||\n    response.type === WorkerResponseType.RegistrationComplete ||\n    response.type === WorkerResponseType.ExecuteActionsProgress ||\n    response.type === WorkerResponseType.ExecuteActionsComplete\n  );\n}\n\nexport function isWorkerSuccess<T extends RequestTypeKey>(\n  response: WorkerResponseForRequest<T>\n): response is WorkerSuccessResponse<T> {\n  return (\n    response.type === WorkerResponseType.DeriveNearKeypairAndEncryptSuccess ||\n    response.type === WorkerResponseType.RecoverKeypairFromPasskeySuccess ||\n    response.type === WorkerResponseType.DecryptPrivateKeyWithPrfSuccess ||\n    response.type === WorkerResponseType.SignTransactionsWithActionsSuccess ||\n    response.type === WorkerResponseType.SignDelegateActionSuccess ||\n    response.type === WorkerResponseType.ExtractCosePublicKeySuccess ||\n    response.type === WorkerResponseType.SignTransactionWithKeyPairSuccess ||\n    response.type === WorkerResponseType.SignNep413MessageSuccess ||\n    response.type === WorkerResponseType.RegisterDevice2WithDerivedKeySuccess\n  );\n}\n\nexport function isWorkerError<T extends RequestTypeKey>(\n  response: WorkerResponseForRequest<T>\n): response is WorkerErrorResponse {\n  return (\n    response.type === WorkerResponseType.DeriveNearKeypairAndEncryptFailure ||\n    response.type === WorkerResponseType.RecoverKeypairFromPasskeyFailure ||\n    response.type === WorkerResponseType.DecryptPrivateKeyWithPrfFailure ||\n    response.type === WorkerResponseType.SignTransactionsWithActionsFailure ||\n    response.type === WorkerResponseType.SignDelegateActionFailure ||\n    response.type === WorkerResponseType.ExtractCosePublicKeyFailure ||\n    response.type === WorkerResponseType.SignTransactionWithKeyPairFailure ||\n    response.type === WorkerResponseType.SignNep413MessageFailure ||\n    response.type === WorkerResponseType.RegisterDevice2WithDerivedKeyFailure\n  );\n}\n\n// === SPECIFIC TYPE GUARDS FOR COMMON OPERATIONS ===\n\nexport function isDeriveNearKeypairAndEncryptSuccess(response: EncryptionResponse): response is WorkerSuccessResponse<typeof WorkerRequestType.DeriveNearKeypairAndEncrypt> {\n  return response.type === WorkerResponseType.DeriveNearKeypairAndEncryptSuccess;\n}\n\nexport function isRecoverKeypairFromPasskeySuccess(response: RecoveryResponse): response is WorkerSuccessResponse<typeof WorkerRequestType.RecoverKeypairFromPasskey> {\n  return response.type === WorkerResponseType.RecoverKeypairFromPasskeySuccess;\n}\n\nexport function isSignTransactionsWithActionsSuccess(response: TransactionResponse): response is WorkerSuccessResponse<typeof WorkerRequestType.SignTransactionsWithActions> {\n  return response.type === WorkerResponseType.SignTransactionsWithActionsSuccess;\n}\n\nexport function isSignDelegateActionSuccess(response: DelegateSignResponse): response is WorkerSuccessResponse<typeof WorkerRequestType.SignDelegateAction> {\n  return response.type === WorkerResponseType.SignDelegateActionSuccess;\n}\n\nexport function isDecryptPrivateKeyWithPrfSuccess(response: DecryptionResponse): response is WorkerSuccessResponse<typeof WorkerRequestType.DecryptPrivateKeyWithPrf> {\n  return response.type === WorkerResponseType.DecryptPrivateKeyWithPrfSuccess;\n}\n\nexport function isExtractCosePublicKeySuccess(response: CoseExtractionResponse): response is WorkerSuccessResponse<typeof WorkerRequestType.ExtractCosePublicKey> {\n  return response.type === WorkerResponseType.ExtractCosePublicKeySuccess;\n}\n\nexport function isSignNep413MessageSuccess(response: Nep413SigningResponse): response is WorkerSuccessResponse<typeof WorkerRequestType.SignNep413Message> {\n  return response.type === WorkerResponseType.SignNep413MessageSuccess;\n}\n\nexport function isRegisterDevice2WithDerivedKeySuccess(\n  response: WorkerResponseForRequest<typeof WorkerRequestType.RegisterDevice2WithDerivedKey>\n): response is WorkerSuccessResponse<typeof WorkerRequestType.RegisterDevice2WithDerivedKey> {\n  return response.type === WorkerResponseType.RegisterDevice2WithDerivedKeySuccess;\n}\n"],"mappings":";;;;;AAwWA,SAAgB,iBACd,UACoC;AACpC,QACE,SAAS,SAASA,oEAAmB,wBACrC,SAAS,SAASA,oEAAmB,wBACrC,SAAS,SAASA,oEAAmB,0BACrC,SAAS,SAASA,oEAAmB;;AAIzC,SAAgB,gBACd,UACsC;AACtC,QACE,SAAS,SAASA,oEAAmB,sCACrC,SAAS,SAASA,oEAAmB,oCACrC,SAAS,SAASA,oEAAmB,mCACrC,SAAS,SAASA,oEAAmB,sCACrC,SAAS,SAASA,oEAAmB,6BACrC,SAAS,SAASA,oEAAmB,+BACrC,SAAS,SAASA,oEAAmB,qCACrC,SAAS,SAASA,oEAAmB,4BACrC,SAAS,SAASA,oEAAmB;;AAIzC,SAAgB,cACd,UACiC;AACjC,QACE,SAAS,SAASA,oEAAmB,sCACrC,SAAS,SAASA,oEAAmB,oCACrC,SAAS,SAASA,oEAAmB,mCACrC,SAAS,SAASA,oEAAmB,sCACrC,SAAS,SAASA,oEAAmB,6BACrC,SAAS,SAASA,oEAAmB,+BACrC,SAAS,SAASA,oEAAmB,qCACrC,SAAS,SAASA,oEAAmB,4BACrC,SAAS,SAASA,oEAAmB;;AAMzC,SAAgB,qCAAqC,UAAuH;AAC1K,QAAO,SAAS,SAASA,oEAAmB;;AAG9C,SAAgB,mCAAmC,UAAmH;AACpK,QAAO,SAAS,SAASA,oEAAmB;;AAG9C,SAAgB,qCAAqC,UAAwH;AAC3K,QAAO,SAAS,SAASA,oEAAmB;;AAG9C,SAAgB,4BAA4B,UAAgH;AAC1J,QAAO,SAAS,SAASA,oEAAmB;;AAG9C,SAAgB,kCAAkC,UAAoH;AACpK,QAAO,SAAS,SAASA,oEAAmB;;AAG9C,SAAgB,8BAA8B,UAAoH;AAChK,QAAO,SAAS,SAASA,oEAAmB;;AAG9C,SAAgB,2BAA2B,UAAgH;AACzJ,QAAO,SAAS,SAASA,oEAAmB;;AAG9C,SAAgB,uCACd,UAC2F;AAC3F,QAAO,SAAS,SAASA,oEAAmB;;;;CAhQjCC,8BAAkD;EAC7D,QAAQ;EACR,UAAU;EACV,kBAAkB;EAClB,OAAO"}
+{"version":3,"file":"signer-worker.js","names":["DEFAULT_THRESHOLD_BEHAVIOR: ThresholdBehavior","DEFAULT_SIGNER_MODE: SignerMode['mode']","DEFAULT_SIGNING_MODE: SignerMode","behavior","DEFAULT_CONFIRMATION_CONFIG: ConfirmationConfig","WorkerResponseType"],"sources":["../../../../src/core/types/signer-worker.ts"],"sourcesContent":["\n// === IMPORT AUTO-GENERATED WASM TYPES ===\n// These are the source of truth generated from Rust structs via wasm-bindgen\n// Import as instance types from the WASM module classes\nimport * as wasmModule from '../../wasm_signer_worker/pkg/wasm_signer_worker.js';\nimport { WorkerRequestType, WorkerResponseType } from '../../wasm_signer_worker/pkg/wasm_signer_worker.js';\nexport { WorkerRequestType, WorkerResponseType }; // Export the WASM enums directly\n\nimport { StripFree } from \"./index.js\";\nimport type { onProgressEvents } from \"./sdkSentEvents.js\";\nimport type { TransactionContext } from './rpc.js';\nimport type { VRFChallenge } from './vrf-worker.js';\nimport type { ActionArgsWasm } from './actions.js';\n\nexport type WasmTransaction = wasmModule.WasmTransaction;\nexport type WasmSignature = wasmModule.WasmSignature;\n\nexport type ThresholdBehavior = 'strict' | 'fallback';\nexport const DEFAULT_THRESHOLD_BEHAVIOR: ThresholdBehavior = 'strict';\n\n/** High-level policy used by SDK APIs (includes optional threshold fallback behavior). */\nexport type SignerMode =\n  | { mode: 'local-signer' }\n  | { mode: 'threshold-signer'; behavior?: ThresholdBehavior };\n\nexport const DEFAULT_SIGNER_MODE: SignerMode['mode'] = 'local-signer';\nexport const DEFAULT_SIGNING_MODE: SignerMode = { mode: DEFAULT_SIGNER_MODE };\n\nexport function isSignerMode(input: unknown): input is SignerMode['mode'] {\n  return input === 'local-signer' || input === 'threshold-signer';\n}\n\nexport function isThresholdBehavior(input: unknown): input is ThresholdBehavior {\n  return input === 'fallback' || input === 'strict';\n}\n\nexport function coerceSignerMode(\n  input?: SignerMode | SignerMode['mode'] | null,\n  fallback: SignerMode = DEFAULT_SIGNING_MODE,\n): SignerMode {\n  if (input == null) return fallback;\n\n  if (typeof input === 'string') return isSignerMode(input) ? { mode: input } : fallback;\n\n  if (typeof input !== 'object') return fallback;\n\n  if (input.mode === 'local-signer') return { mode: input.mode };\n  const behavior = input.behavior;\n  return isThresholdBehavior(behavior)\n    ? { mode: input.mode, behavior }\n    : { mode: input.mode };\n}\n\n/** @deprecated use `coerceSignerMode` */\nexport const normalizeSignerMode = coerceSignerMode;\n\n/**\n * Merge a mode-only override onto a base signer mode.\n *\n * This is intentionally \"partial override\" semantics:\n * - override sets `mode` when provided\n * - override sets `behavior` only when explicitly provided\n * - if override switches to `threshold-signer` without specifying `behavior`,\n *   preserve `base.behavior` when base is already `threshold-signer`\n */\nexport function mergeSignerMode(\n  base: SignerMode,\n  override?: SignerMode | SignerMode['mode'] | null,\n): SignerMode {\n  const baseNormalized = coerceSignerMode(base, DEFAULT_SIGNING_MODE);\n  if (override == null) return baseNormalized;\n\n  // Shorthand: string overrides only switch mode\n  if (typeof override === 'string') {\n    if (!isSignerMode(override)) return baseNormalized;\n    if (override === 'local-signer') return { mode: 'local-signer' };\n    // override === 'threshold-signer'\n    if (baseNormalized.mode === 'threshold-signer') {\n      const behavior = (baseNormalized as { behavior?: unknown }).behavior;\n      return isThresholdBehavior(behavior)\n        ? { mode: 'threshold-signer', behavior }\n        : { mode: 'threshold-signer' };\n    }\n    return { mode: 'threshold-signer' };\n  }\n\n  if (typeof override !== 'object') return baseNormalized;\n\n  const mode = (override as { mode?: unknown }).mode;\n  if (mode === 'local-signer') return { mode: 'local-signer' };\n  if (mode !== 'threshold-signer') return baseNormalized;\n\n  const behavior = (override as { behavior?: unknown }).behavior;\n  if (isThresholdBehavior(behavior)) return { mode: 'threshold-signer', behavior };\n\n  // Preserve base threshold behavior when override didn't specify it\n  if (baseNormalized.mode === 'threshold-signer') {\n    const baseBehavior = (baseNormalized as { behavior?: unknown }).behavior;\n    if (isThresholdBehavior(baseBehavior)) return { mode: 'threshold-signer', behavior: baseBehavior };\n  }\n  return { mode: 'threshold-signer' };\n}\n\nexport function getSignerModeString(mode: SignerMode): SignerMode['mode'] {\n  return mode.mode;\n}\n\nexport function getThresholdBehaviorFromSignerMode(mode: SignerMode): ThresholdBehavior {\n  if (mode.mode !== 'threshold-signer') return DEFAULT_THRESHOLD_BEHAVIOR;\n  return isThresholdBehavior(mode.behavior) ? mode.behavior : DEFAULT_THRESHOLD_BEHAVIOR;\n}\n\n/**\n * Internal, single-purpose worker request types.\n *\n * These are intentionally *not* exposed as general-purpose \"no prompt\" signing APIs.\n * They exist to support tightly-scoped post-registration flows without allowing\n * arbitrary actions/receivers to be signed without VRF/WebAuthn binding.\n */\nexport const INTERNAL_WORKER_REQUEST_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT = 10 as const;\nexport const INTERNAL_WORKER_RESPONSE_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT_SUCCESS = 24 as const;\nexport const INTERNAL_WORKER_RESPONSE_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT_FAILURE = 25 as const;\n\ntype InternalSignerWorkerRequestType = typeof INTERNAL_WORKER_REQUEST_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT;\ntype InternalSignerWorkerResponseType =\n  | typeof INTERNAL_WORKER_RESPONSE_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT_SUCCESS\n  | typeof INTERNAL_WORKER_RESPONSE_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT_FAILURE;\n\nexport type SignerWorkerRequestType = WorkerRequestType | InternalSignerWorkerRequestType;\nexport type SignerWorkerResponseType = WorkerResponseType | InternalSignerWorkerResponseType;\n\nexport interface ThresholdSignerConfig {\n  /** Base URL of the relayer server (e.g. https://relay.example.com) */\n  relayerUrl: string;\n  /** Identifies which relayer-held key share to use */\n  relayerKeyId: string;\n  /** FROST participant identifier used for the client share (2P only, optional). */\n  clientParticipantId?: number;\n  /** FROST participant identifier used for the relayer share (2P only, optional). */\n  relayerParticipantId?: number;\n  /** Optional participant ids (signer set) associated with this threshold key/session. */\n  participantIds?: number[];\n  /**\n   * Optional short-lived authorization token returned by `/threshold-ed25519/authorize`.\n   * When omitted, the signer worker will call `/threshold-ed25519/authorize` on-demand per signature.\n   */\n  mpcSessionId?: string;\n  /**\n   * Optional session policy JSON (serialized) used to mint a relayer threshold session token.\n   * When provided alongside a VRF challenge that includes `sessionPolicyDigest32`,\n   * the signer worker may call `/threshold-ed25519/session` to obtain a JWT/cookie for session-style signing.\n   */\n  thresholdSessionPolicyJson?: string;\n  /**\n   * Optional bearer token returned by `POST /threshold-ed25519/session`.\n   * When present, the signer worker uses it to authenticate `/threshold-ed25519/authorize` requests.\n   */\n  thresholdSessionJwt?: string;\n  /**\n   * Preferred session token delivery mechanism for `/threshold-ed25519/session`.\n   * - `jwt` (default): return token in JSON and use Authorization: Bearer on subsequent requests.\n   * - `cookie`: set HttpOnly cookie (same-site only).\n   */\n  thresholdSessionKind?: 'jwt' | 'cookie';\n}\n\nexport interface TransactionPayload {\n  nearAccountId: string;\n  receiverId: string;\n  actions: ActionArgsWasm[];\n}\nexport type RpcCallPayload = StripFree<wasmModule.RpcCallPayload>;\n/**\n * RPC call parameters for NEAR operations and VRF generation\n * Used to pass essential parameters for background operations\n * export interface RpcCallPayload {\n *    contractId: string;    // Web3Authn contract ID for verification\n *    nearRpcUrl: string;    // NEAR RPC endpoint URL\n *    nearAccountId: string; // Account ID for VRF challenge generation\n * }\n */\n\nexport type WasmDeriveNearKeypairAndEncryptRequest = StripFree<wasmModule.DeriveNearKeypairAndEncryptRequest>;\nexport type WasmRecoverKeypairRequest = StripFree<wasmModule.RecoverKeypairRequest>;\nexport type WasmDeriveThresholdEd25519ClientVerifyingShareRequest =\n  StripFree<wasmModule.DeriveThresholdEd25519ClientVerifyingShareRequest>;\nexport interface WasmSignTransactionsWithActionsRequest {\n  signerMode: SignerMode['mode'];\n  rpcCall: RpcCallPayload;\n  sessionId: string;\n  createdAt?: number;\n  decryption: StripFree<wasmModule.DecryptionPayload>;\n  threshold?: ThresholdSignerConfig;\n  txSigningRequests: TransactionPayload[];\n  intentDigest?: string;\n  transactionContext?: TransactionContext;\n  vrfChallenge?: VRFChallenge;\n  credential?: string;\n}\n\nexport interface WasmSignAddKeyThresholdPublicKeyNoPromptRequest {\n  sessionId: string;\n  createdAt?: number;\n  decryption: StripFree<wasmModule.DecryptionPayload>;\n  nearAccountId: string;\n  thresholdPublicKey: string;\n  relayerVerifyingShareB64u: string;\n  clientParticipantId?: number;\n  relayerParticipantId?: number;\n  transactionContext: TransactionContext;\n}\n\nexport interface WasmSignDelegateActionRequest {\n  signerMode: SignerMode['mode'];\n  rpcCall: RpcCallPayload;\n  sessionId: string;\n  createdAt?: number;\n  decryption: StripFree<wasmModule.DecryptionPayload>;\n  threshold?: ThresholdSignerConfig;\n  delegate: DelegatePayload;\n  intentDigest?: string;\n  transactionContext?: TransactionContext;\n  vrfChallenge?: VRFChallenge;\n  credential?: string;\n}\nexport interface DelegatePayload {\n  senderId: string;\n  receiverId: string;\n  actions: ActionArgsWasm[];\n  nonce: string;\n  maxBlockHeight: string;\n  publicKey: string;\n}\nexport type WasmDecryptPrivateKeyRequest = StripFree<wasmModule.DecryptPrivateKeyRequest>;\nexport type WasmExtractCosePublicKeyRequest = StripFree<wasmModule.ExtractCoseRequest>;\nexport interface WasmSignNep413MessageRequest {\n  signerMode: SignerMode['mode'];\n  sessionId: string;\n  accountId: string;\n  nearPublicKey: string;\n  decryption: StripFree<wasmModule.DecryptionPayload>;\n  threshold?: ThresholdSignerConfig;\n  message: string;\n  recipient: string;\n  nonce: string;\n  state?: string;\n  vrfChallenge?: VRFChallenge;\n  credential?: string;\n}\nexport interface WasmSignTransactionWithKeyPairRequest {\n  nearPrivateKey: string;\n  signerAccountId: string;\n  receiverId: string;\n  nonce: string;\n  blockHash: string;\n  actions: ActionArgsWasm[];\n}\n// Combined Device2 registration handler (derive + sign in one step)\nexport type WasmRegisterDevice2WithDerivedKeyRequest = StripFree<wasmModule.RegisterDevice2WithDerivedKeyRequest>;\n\nexport type WasmRequestPayload = WasmDeriveNearKeypairAndEncryptRequest\n  | WasmRecoverKeypairRequest\n  | WasmDeriveThresholdEd25519ClientVerifyingShareRequest\n  | WasmSignTransactionsWithActionsRequest\n  | WasmSignAddKeyThresholdPublicKeyNoPromptRequest\n  | WasmSignDelegateActionRequest\n  | WasmDecryptPrivateKeyRequest\n  | WasmExtractCosePublicKeyRequest\n  | WasmSignNep413MessageRequest\n  | WasmSignTransactionWithKeyPairRequest\n  | WasmRegisterDevice2WithDerivedKeyRequest;\n\n// WASM Worker Response Types\nexport type WasmRecoverKeypairResult = InstanceType<typeof wasmModule.RecoverKeypairResult>;\nexport type WasmSignedTransaction = InstanceType<typeof wasmModule.WasmSignedTransaction>;\nexport type WasmSignedDelegate = wasmModule.WasmSignedDelegate;\nexport type WasmDelegateAction = wasmModule.WasmDelegateAction;\nexport type WasmTransactionSignResult = InstanceType<typeof wasmModule.TransactionSignResult>;\nexport type WasmDelegateSignResult = wasmModule.DelegateSignResult;\nexport type WasmDecryptPrivateKeyResult = InstanceType<typeof wasmModule.DecryptPrivateKeyResult>;\nexport type WasmDeriveNearKeypairAndEncryptResult = InstanceType<typeof wasmModule.DeriveNearKeypairAndEncryptResult>;\n// wasm-bindgen generates some classes with private constructors, which breaks\n// `InstanceType<typeof Class>`. Use the class name directly for the instance type.\nexport type WasmRegisterDevice2WithDerivedKeyResult = InstanceType<typeof wasmModule.RegisterDevice2WithDerivedKeyResult>;\n// wasm-bindgen may generate classes with private constructors, which breaks\n// `InstanceType<typeof Class>`. Use the class name directly for the instance type.\nexport type WasmDeriveThresholdEd25519ClientVerifyingShareResult =\n  wasmModule.DeriveThresholdEd25519ClientVerifyingShareResult;\n\n// === WORKER REQUEST TYPE MAPPING ===\n// Define the complete type mapping for each worker request\nexport interface WorkerRequestTypeMap {\n  [WorkerRequestType.DeriveNearKeypairAndEncrypt]: {\n    type: WorkerRequestType.DeriveNearKeypairAndEncrypt;\n    request: WasmDeriveNearKeypairAndEncryptRequest;\n    result: WasmDeriveNearKeypairAndEncryptResult;\n  };\n  [WorkerRequestType.RecoverKeypairFromPasskey]: {\n    type: WorkerRequestType.RecoverKeypairFromPasskey;\n    request: WasmRecoverKeypairRequest;\n    result: WasmRecoverKeypairResult;\n  };\n  [WorkerRequestType.DeriveThresholdEd25519ClientVerifyingShare]: {\n    type: WorkerRequestType.DeriveThresholdEd25519ClientVerifyingShare;\n    request: WasmDeriveThresholdEd25519ClientVerifyingShareRequest;\n    result: WasmDeriveThresholdEd25519ClientVerifyingShareResult;\n  };\n  [WorkerRequestType.SignTransactionsWithActions]: {\n    type: WorkerRequestType.SignTransactionsWithActions;\n    request: WasmSignTransactionsWithActionsRequest;\n    result: WasmTransactionSignResult;\n  };\n  [INTERNAL_WORKER_REQUEST_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT]: {\n    type: typeof INTERNAL_WORKER_REQUEST_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT;\n    request: WasmSignAddKeyThresholdPublicKeyNoPromptRequest;\n    result: WasmTransactionSignResult;\n  };\n  [WorkerRequestType.SignDelegateAction]: {\n    type: WorkerRequestType.SignDelegateAction;\n    request: WasmSignDelegateActionRequest;\n    result: WasmDelegateSignResult;\n  };\n  [WorkerRequestType.DecryptPrivateKeyWithPrf]: {\n    type: WorkerRequestType.DecryptPrivateKeyWithPrf;\n    request: WasmDecryptPrivateKeyRequest;\n    result: WasmDecryptPrivateKeyResult;\n  };\n  [WorkerRequestType.ExtractCosePublicKey]: {\n    type: WorkerRequestType.ExtractCosePublicKey;\n    request: WasmExtractCosePublicKeyRequest;\n    result: wasmModule.CoseExtractionResult;\n  };\n  [WorkerRequestType.SignTransactionWithKeyPair]: {\n    type: WorkerRequestType.SignTransactionWithKeyPair;\n    request: WasmSignTransactionWithKeyPairRequest;\n    result: WasmTransactionSignResult;\n  };\n  [WorkerRequestType.SignNep413Message]: {\n    type: WorkerRequestType.SignNep413Message;\n    request: WasmSignNep413MessageRequest;\n    result: wasmModule.SignNep413Result;\n  };\n  [WorkerRequestType.RegisterDevice2WithDerivedKey]: {\n    type: WorkerRequestType.RegisterDevice2WithDerivedKey;\n    request: WasmRegisterDevice2WithDerivedKeyRequest;\n    result: WasmRegisterDevice2WithDerivedKeyResult;\n  };\n}\n\n/**\n * Validation rules for ConfirmationConfig to ensure behavior conforms to UI mode:\n *\n * - uiMode: 'skip' → behavior is ignored, autoProceedDelay is ignored\n * - uiMode: 'modal' | 'drawer' → behavior: 'requireClick' | 'autoProceed', autoProceedDelay only used with 'autoProceed'\n *\n * The WASM worker automatically validates and overrides these settings:\n * - For 'skip' mode: behavior is set to 'autoProceed' with autoProceedDelay: 0\n * - For 'modal' and 'drawer' modes: behavior and autoProceedDelay are used as specified\n *\n * The actual type would be the following, but we use the flat interface for simplicity:\n * export interface ConfirmationConfig {\n *   uiMode: 'skip' | 'modal' | 'drawer'\n *\n * }\n */\nexport type ConfirmationUIMode = 'skip' | 'modal' | 'drawer';\nexport type ConfirmationBehavior = 'requireClick' | 'autoProceed';\nexport interface ConfirmationConfig {\n  /** Type of UI to display for confirmation: 'skip' | 'modal' | 'drawer' */\n  uiMode: ConfirmationUIMode;\n  /** How the confirmation UI behaves: 'requireClick' | 'autoProceed' */\n  behavior: ConfirmationBehavior;\n  /** Delay in milliseconds before auto-proceeding (only used with autoProceed) */\n  autoProceedDelay?: number;\n  /** Theme for the confirmation UI: 'dark' | 'light' */\n  theme: 'dark' | 'light';\n}\n\nexport const DEFAULT_CONFIRMATION_CONFIG: ConfirmationConfig = {\n  uiMode: 'modal',\n  behavior: 'requireClick',\n  autoProceedDelay: 0,\n  theme: 'dark',\n};\n\n// WASM enum types for confirmation configuration\nexport type WasmConfirmationUIMode = wasmModule.ConfirmationUIMode;\nexport type WasmConfirmationBehavior = wasmModule.ConfirmationBehavior;\n\n// Mapping functions to convert string literals to numeric enum values\nexport const mapUIModeToWasm = (uiMode: ConfirmationUIMode): number => {\n  switch (uiMode) {\n    case 'skip': return wasmModule.ConfirmationUIMode.Skip;\n    case 'modal': return wasmModule.ConfirmationUIMode.Modal;\n    // Drawer now has a dedicated WASM enum variant\n    case 'drawer': return (wasmModule as any).ConfirmationUIMode.Drawer ?? wasmModule.ConfirmationUIMode.Modal;\n    default: return wasmModule.ConfirmationUIMode.Modal;\n  }\n};\n\nexport const mapBehaviorToWasm = (behavior: ConfirmationBehavior): number => {\n  switch (behavior) {\n    case 'requireClick': return wasmModule.ConfirmationBehavior.RequireClick;\n    case 'autoProceed': return wasmModule.ConfirmationBehavior.AutoProceed;\n    default: return wasmModule.ConfirmationBehavior.RequireClick;\n  }\n};\nexport type WasmRequestResult = WasmRecoverKeypairResult\n  | WasmSignedTransaction\n  | WasmSignedDelegate\n  | WasmTransactionSignResult\n  | WasmDelegateSignResult\n  | WasmDecryptPrivateKeyResult\n\nexport interface SignerWorkerMessage<T extends SignerWorkerRequestType, R extends WasmRequestPayload> {\n  type: T;\n  payload: R;\n}\n\n/**\n * =============================\n * Worker Progress Message Types\n * =============================\n *\n * 1. PROGRESS MESSAGES (During Operation):\n *    Rust WASM → send_typed_progress_message() → TypeScript sendProgressMessage() → postMessage() → Main Thread\n *    - Used for real-time updates during long operations\n *    - Multiple progress messages can be sent per operation\n *    - Does not affect the final result\n *    - Types: ProgressMessageType, ProgressStep, ProgressStatus (auto-generated from Rust)\n *\n * 2. FINAL RESULTS (Operation Complete):\n *    Rust WASM → return value from handle_signer_message() → TypeScript worker → postMessage() → Main Thread\n *    - Contains the actual operation result (success/error)\n *    - Only one result message per operation\n *    - This is what the main thread awaits for completion\n */\n\n// === PROGRESS MESSAGE TYPES ===\n\n// Basic interface for development - actual types are auto-generated from Rust\nexport type ProgressMessage = wasmModule.WorkerProgressMessage;\n\n// Type guard for basic progress message validation during development\nexport function isProgressMessage(obj: unknown): obj is ProgressMessage {\n  return (\n    typeof obj === 'object' &&\n    obj !== null &&\n    typeof (obj as { message_type?: unknown }).message_type === 'string' &&\n    typeof (obj as { step?: unknown }).step === 'string' &&\n    typeof (obj as { message?: unknown }).message === 'string' &&\n    typeof (obj as { status?: unknown }).status === 'string'\n  );\n}\n\nexport enum ProgressMessageType {\n  REGISTRATION_PROGRESS = 'REGISTRATION_PROGRESS',\n  REGISTRATION_COMPLETE = 'REGISTRATION_COMPLETE',\n  EXECUTE_ACTIONS_PROGRESS = 'EXECUTE_ACTIONS_PROGRESS',\n  EXECUTE_ACTIONS_COMPLETE = 'EXECUTE_ACTIONS_COMPLETE',\n}\n\n// Step identifiers for progress tracking\n// This enum exactly matches the Rust WASM ProgressStep enum from:\n// packages/passkey/src/wasm_signer_worker/src/types/progress.rs\n// The string values come from the progress_step_name() function in that file\nexport enum ProgressStep {\n  PREPARATION = 'preparation',                           // Rust: Preparation\n  WEBAUTHN_AUTHENTICATION = 'webauthn-authentication',   // Rust: WebauthnAuthentication\n  AUTHENTICATION_COMPLETE = 'authentication-complete',   // Rust: AuthenticationComplete\n  TRANSACTION_SIGNING_PROGRESS = 'transaction-signing-progress', // Rust: TransactionSigningProgress\n  TRANSACTION_SIGNING_COMPLETE = 'transaction-signing-complete', // Rust: TransactionSigningComplete\n  ERROR = 'error',                                       // Rust: Error\n}\n\nexport interface ProgressStepMap {\n  [wasmModule.ProgressStep.Preparation]: ProgressStep.PREPARATION;\n  [wasmModule.ProgressStep.WebauthnAuthentication]: ProgressStep.WEBAUTHN_AUTHENTICATION;\n  [wasmModule.ProgressStep.AuthenticationComplete]: ProgressStep.AUTHENTICATION_COMPLETE;\n  [wasmModule.ProgressStep.TransactionSigningProgress]: ProgressStep.TRANSACTION_SIGNING_PROGRESS;\n  [wasmModule.ProgressStep.TransactionSigningComplete]: ProgressStep.TRANSACTION_SIGNING_COMPLETE;\n  [wasmModule.ProgressStep.Error]: ProgressStep.ERROR;\n}\n\n// === RESPONSE MESSAGE INTERFACES ===\n\n// Base interface for all worker responses\nexport interface BaseWorkerResponse<TPayload = unknown> {\n  type: SignerWorkerResponseType;\n  payload: TPayload;\n}\n\n// Map request types to their expected success response payloads (WASM types)\nexport interface RequestResponseMap {\n  [WorkerRequestType.DeriveNearKeypairAndEncrypt]: WasmDeriveNearKeypairAndEncryptResult;\n  [WorkerRequestType.RecoverKeypairFromPasskey]: WasmRecoverKeypairResult;\n  [WorkerRequestType.DecryptPrivateKeyWithPrf]: WasmDecryptPrivateKeyResult;\n  [WorkerRequestType.DeriveThresholdEd25519ClientVerifyingShare]: WasmDeriveThresholdEd25519ClientVerifyingShareResult;\n  [WorkerRequestType.SignTransactionsWithActions]: WasmTransactionSignResult;\n  [INTERNAL_WORKER_REQUEST_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT]: WasmTransactionSignResult;\n  [WorkerRequestType.SignDelegateAction]: WasmDelegateSignResult;\n  [WorkerRequestType.ExtractCosePublicKey]: wasmModule.CoseExtractionResult;\n  [WorkerRequestType.SignTransactionWithKeyPair]: WasmTransactionSignResult;\n  [WorkerRequestType.SignNep413Message]: wasmModule.SignNep413Result;\n  [WorkerRequestType.RegisterDevice2WithDerivedKey]: WasmRegisterDevice2WithDerivedKeyResult;\n}\n\nexport type RequestTypeKey = keyof RequestResponseMap;\n\n// Generic success response type that uses WASM types\nexport interface WorkerSuccessResponse<T extends RequestTypeKey>\n  extends BaseWorkerResponse<RequestResponseMap[T]> {\n  type: SignerWorkerResponseType;\n}\n\n// Generic error response type\nexport interface WorkerErrorResponse extends BaseWorkerResponse<{\n  error: string;\n  errorCode?: WorkerErrorCode;\n  context?: Record<string, unknown>;\n}> {\n  type: SignerWorkerResponseType;\n}\n\nexport enum WorkerErrorCode {\n  WASM_INIT_FAILED = 'WASM_INIT_FAILED',\n  INVALID_REQUEST = 'INVALID_REQUEST',\n  TIMEOUT = 'TIMEOUT',\n  ENCRYPTION_FAILED = 'ENCRYPTION_FAILED',\n  DECRYPTION_FAILED = 'DECRYPTION_FAILED',\n  SIGNING_FAILED = 'SIGNING_FAILED',\n  STORAGE_FAILED = 'STORAGE_FAILED',\n  UNKNOWN_ERROR = 'UNKNOWN_ERROR',\n}\n\nexport interface WorkerProgressResponse extends BaseWorkerResponse<onProgressEvents> {\n  type: SignerWorkerResponseType;\n}\n\n// === MAIN RESPONSE TYPE ===\n\nexport type WorkerResponseForRequest<T extends RequestTypeKey> =\n  | WorkerSuccessResponse<T>\n  | WorkerErrorResponse\n  | WorkerProgressResponse;\n\n// === CONVENIENCE TYPE ALIASES ===\n\nexport type EncryptionResponse = WorkerResponseForRequest<typeof WorkerRequestType.DeriveNearKeypairAndEncrypt>;\nexport type RecoveryResponse = WorkerResponseForRequest<typeof WorkerRequestType.RecoverKeypairFromPasskey>;\nexport type TransactionResponse = WorkerResponseForRequest<typeof WorkerRequestType.SignTransactionsWithActions>;\nexport type DelegateSignResponse = WorkerResponseForRequest<typeof WorkerRequestType.SignDelegateAction>;\nexport type DecryptionResponse = WorkerResponseForRequest<typeof WorkerRequestType.DecryptPrivateKeyWithPrf>;\nexport type CoseExtractionResponse = WorkerResponseForRequest<typeof WorkerRequestType.ExtractCosePublicKey>;\nexport type Nep413SigningResponse = WorkerResponseForRequest<typeof WorkerRequestType.SignNep413Message>;\n\n// === TYPE GUARDS FOR GENERIC RESPONSES ===\n\nexport function isWorkerProgress<T extends RequestTypeKey>(\n  response: WorkerResponseForRequest<T>\n): response is WorkerProgressResponse {\n  return (\n    response.type === WorkerResponseType.RegistrationProgress ||\n    response.type === WorkerResponseType.RegistrationComplete ||\n    response.type === WorkerResponseType.ExecuteActionsProgress ||\n    response.type === WorkerResponseType.ExecuteActionsComplete\n  );\n}\n\nexport function isWorkerSuccess<T extends RequestTypeKey>(\n  response: WorkerResponseForRequest<T>\n): response is WorkerSuccessResponse<T> {\n  return (\n    response.type === WorkerResponseType.DeriveNearKeypairAndEncryptSuccess ||\n    response.type === WorkerResponseType.RecoverKeypairFromPasskeySuccess ||\n    response.type === WorkerResponseType.DecryptPrivateKeyWithPrfSuccess ||\n    response.type === WorkerResponseType.SignTransactionsWithActionsSuccess ||\n    response.type === WorkerResponseType.SignDelegateActionSuccess ||\n    response.type === WorkerResponseType.ExtractCosePublicKeySuccess ||\n    response.type === WorkerResponseType.SignTransactionWithKeyPairSuccess ||\n    response.type === WorkerResponseType.SignNep413MessageSuccess ||\n    response.type === WorkerResponseType.RegisterDevice2WithDerivedKeySuccess ||\n    response.type === WorkerResponseType.DeriveThresholdEd25519ClientVerifyingShareSuccess ||\n    response.type === INTERNAL_WORKER_RESPONSE_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT_SUCCESS\n  );\n}\n\nexport function isWorkerError<T extends RequestTypeKey>(\n  response: WorkerResponseForRequest<T>\n): response is WorkerErrorResponse {\n  return (\n    response.type === WorkerResponseType.DeriveNearKeypairAndEncryptFailure ||\n    response.type === WorkerResponseType.RecoverKeypairFromPasskeyFailure ||\n    response.type === WorkerResponseType.DecryptPrivateKeyWithPrfFailure ||\n    response.type === WorkerResponseType.SignTransactionsWithActionsFailure ||\n    response.type === WorkerResponseType.SignDelegateActionFailure ||\n    response.type === WorkerResponseType.ExtractCosePublicKeyFailure ||\n    response.type === WorkerResponseType.SignTransactionWithKeyPairFailure ||\n    response.type === WorkerResponseType.SignNep413MessageFailure ||\n    response.type === WorkerResponseType.RegisterDevice2WithDerivedKeyFailure ||\n    response.type === WorkerResponseType.DeriveThresholdEd25519ClientVerifyingShareFailure ||\n    response.type === INTERNAL_WORKER_RESPONSE_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT_FAILURE\n  );\n}\n\n// === SPECIFIC TYPE GUARDS FOR COMMON OPERATIONS ===\n\nexport function isDeriveNearKeypairAndEncryptSuccess(response: EncryptionResponse): response is WorkerSuccessResponse<typeof WorkerRequestType.DeriveNearKeypairAndEncrypt> {\n  return response.type === WorkerResponseType.DeriveNearKeypairAndEncryptSuccess;\n}\n\nexport function isRecoverKeypairFromPasskeySuccess(response: RecoveryResponse): response is WorkerSuccessResponse<typeof WorkerRequestType.RecoverKeypairFromPasskey> {\n  return response.type === WorkerResponseType.RecoverKeypairFromPasskeySuccess;\n}\n\nexport function isSignTransactionsWithActionsSuccess(response: TransactionResponse): response is WorkerSuccessResponse<typeof WorkerRequestType.SignTransactionsWithActions> {\n  return response.type === WorkerResponseType.SignTransactionsWithActionsSuccess;\n}\n\nexport function isSignAddKeyThresholdPublicKeyNoPromptSuccess(\n  response: WorkerResponseForRequest<typeof INTERNAL_WORKER_REQUEST_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT>\n): response is WorkerSuccessResponse<typeof INTERNAL_WORKER_REQUEST_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT> {\n  return response.type === INTERNAL_WORKER_RESPONSE_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT_SUCCESS;\n}\n\nexport function isSignDelegateActionSuccess(response: DelegateSignResponse): response is WorkerSuccessResponse<typeof WorkerRequestType.SignDelegateAction> {\n  return response.type === WorkerResponseType.SignDelegateActionSuccess;\n}\n\nexport function isDecryptPrivateKeyWithPrfSuccess(response: DecryptionResponse): response is WorkerSuccessResponse<typeof WorkerRequestType.DecryptPrivateKeyWithPrf> {\n  return response.type === WorkerResponseType.DecryptPrivateKeyWithPrfSuccess;\n}\n\nexport function isExtractCosePublicKeySuccess(response: CoseExtractionResponse): response is WorkerSuccessResponse<typeof WorkerRequestType.ExtractCosePublicKey> {\n  return response.type === WorkerResponseType.ExtractCosePublicKeySuccess;\n}\n\nexport function isSignNep413MessageSuccess(response: Nep413SigningResponse): response is WorkerSuccessResponse<typeof WorkerRequestType.SignNep413Message> {\n  return response.type === WorkerResponseType.SignNep413MessageSuccess;\n}\n\nexport function isRegisterDevice2WithDerivedKeySuccess(\n  response: WorkerResponseForRequest<typeof WorkerRequestType.RegisterDevice2WithDerivedKey>\n): response is WorkerSuccessResponse<typeof WorkerRequestType.RegisterDevice2WithDerivedKey> {\n  return response.type === WorkerResponseType.RegisterDevice2WithDerivedKeySuccess;\n}\n"],"mappings":";;;;;AAkBA,MAAaA,6BAAgD;AAO7D,MAAaC,sBAA0C;AACvD,MAAaC,uBAAmC,EAAE,MAAM;AAExD,SAAgB,aAAa,OAA6C;AACxE,QAAO,UAAU,kBAAkB,UAAU;;AAG/C,SAAgB,oBAAoB,OAA4C;AAC9E,QAAO,UAAU,cAAc,UAAU;;AAG3C,SAAgB,iBACd,OACA,WAAuB,sBACX;AACZ,KAAI,SAAS,KAAM,QAAO;AAE1B,KAAI,OAAO,UAAU,SAAU,QAAO,aAAa,SAAS,EAAE,MAAM,UAAU;AAE9E,KAAI,OAAO,UAAU,SAAU,QAAO;AAEtC,KAAI,MAAM,SAAS,eAAgB,QAAO,EAAE,MAAM,MAAM;CACxD,MAAM,WAAW,MAAM;AACvB,QAAO,oBAAoB,YACvB;EAAE,MAAM,MAAM;EAAM;KACpB,EAAE,MAAM,MAAM;;;;;;;;;;;AAepB,SAAgB,gBACd,MACA,UACY;CACZ,MAAM,iBAAiB,iBAAiB,MAAM;AAC9C,KAAI,YAAY,KAAM,QAAO;AAG7B,KAAI,OAAO,aAAa,UAAU;AAChC,MAAI,CAAC,aAAa,UAAW,QAAO;AACpC,MAAI,aAAa,eAAgB,QAAO,EAAE,MAAM;AAEhD,MAAI,eAAe,SAAS,oBAAoB;GAC9C,MAAMC,aAAY,eAA0C;AAC5D,UAAO,oBAAoBA,cACvB;IAAE,MAAM;IAAoB;OAC5B,EAAE,MAAM;;AAEd,SAAO,EAAE,MAAM;;AAGjB,KAAI,OAAO,aAAa,SAAU,QAAO;CAEzC,MAAM,OAAQ,SAAgC;AAC9C,KAAI,SAAS,eAAgB,QAAO,EAAE,MAAM;AAC5C,KAAI,SAAS,mBAAoB,QAAO;CAExC,MAAM,WAAY,SAAoC;AACtD,KAAI,oBAAoB,UAAW,QAAO;EAAE,MAAM;EAAoB;;AAGtE,KAAI,eAAe,SAAS,oBAAoB;EAC9C,MAAM,eAAgB,eAA0C;AAChE,MAAI,oBAAoB,cAAe,QAAO;GAAE,MAAM;GAAoB,UAAU;;;AAEtF,QAAO,EAAE,MAAM;;AAOjB,SAAgB,mCAAmC,MAAqC;AACtF,KAAI,KAAK,SAAS,mBAAoB,QAAO;AAC7C,QAAO,oBAAoB,KAAK,YAAY,KAAK,WAAW;;;;;;;;;AAU9D,MAAa,2EAA2E;AACxF,MAAa,oFAAoF;AACjG,MAAa,oFAAoF;AAiQjG,MAAaC,8BAAkD;CAC7D,QAAQ;CACR,UAAU;CACV,kBAAkB;CAClB,OAAO;;AAgLT,SAAgB,iBACd,UACoC;AACpC,QACE,SAAS,SAASC,oEAAmB,wBACrC,SAAS,SAASA,oEAAmB,wBACrC,SAAS,SAASA,oEAAmB,0BACrC,SAAS,SAASA,oEAAmB;;AAIzC,SAAgB,gBACd,UACsC;AACtC,QACE,SAAS,SAASA,oEAAmB,sCACrC,SAAS,SAASA,oEAAmB,oCACrC,SAAS,SAASA,oEAAmB,mCACrC,SAAS,SAASA,oEAAmB,sCACrC,SAAS,SAASA,oEAAmB,6BACrC,SAAS,SAASA,oEAAmB,+BACrC,SAAS,SAASA,oEAAmB,qCACrC,SAAS,SAASA,oEAAmB,4BACrC,SAAS,SAASA,oEAAmB,wCACrC,SAAS,SAASA,oEAAmB,qDACrC,SAAS,SAAS;;AAItB,SAAgB,cACd,UACiC;AACjC,QACE,SAAS,SAASA,oEAAmB,sCACrC,SAAS,SAASA,oEAAmB,oCACrC,SAAS,SAASA,oEAAmB,mCACrC,SAAS,SAASA,oEAAmB,sCACrC,SAAS,SAASA,oEAAmB,6BACrC,SAAS,SAASA,oEAAmB,+BACrC,SAAS,SAASA,oEAAmB,qCACrC,SAAS,SAASA,oEAAmB,4BACrC,SAAS,SAASA,oEAAmB,wCACrC,SAAS,SAASA,oEAAmB,qDACrC,SAAS,SAAS;;AAMtB,SAAgB,qCAAqC,UAAuH;AAC1K,QAAO,SAAS,SAASA,oEAAmB;;AAG9C,SAAgB,mCAAmC,UAAmH;AACpK,QAAO,SAAS,SAASA,oEAAmB;;AAG9C,SAAgB,qCAAqC,UAAwH;AAC3K,QAAO,SAAS,SAASA,oEAAmB;;AAG9C,SAAgB,8CACd,UACoH;AACpH,QAAO,SAAS,SAAS;;AAG3B,SAAgB,4BAA4B,UAAgH;AAC1J,QAAO,SAAS,SAASA,oEAAmB;;AAG9C,SAAgB,kCAAkC,UAAoH;AACpK,QAAO,SAAS,SAASA,oEAAmB;;AAG9C,SAAgB,8BAA8B,UAAoH;AAChK,QAAO,SAAS,SAASA,oEAAmB;;AAG9C,SAAgB,2BAA2B,UAAgH;AACzJ,QAAO,SAAS,SAASA,oEAAmB;;AAG9C,SAAgB,uCACd,UAC2F;AAC3F,QAAO,SAAS,SAASA,oEAAmB"}

package/dist/cjs/core/types/vrf-worker.js

@@ -1,6 +1,4 @@
-const require_rolldown_runtime = require('../../_virtual/rolldown_runtime.js');
 const require_base64 = require('../../utils/base64.js');
-const require_encoders = require('../../utils/encoders.js');
 
 //#region src/core/types/vrf-worker.ts
 /**
@@ -34,7 +32,9 @@ function validateVRFChallenge(vrfChallengeData) {
 		userId: vrfChallengeData.userId,
 		rpId: vrfChallengeData.rpId,
 		blockHeight: vrfChallengeData.blockHeight,
-		blockHash: vrfChallengeData.blockHash
+		blockHash: vrfChallengeData.blockHash,
+		...vrfChallengeData.intentDigest ? { intentDigest: vrfChallengeData.intentDigest } : {},
+		...vrfChallengeData.sessionPolicyDigest32 ? { sessionPolicyDigest32: vrfChallengeData.sessionPolicyDigest32 } : {}
 	};
 }
 /**
@@ -56,19 +56,9 @@ function createRandomVRFChallenge() {
 		blockHash: void 0
 	};
 }
-var init_vrf_worker = require_rolldown_runtime.__esm({ "src/core/types/vrf-worker.ts": (() => {
-	require_encoders.init_encoders();
-}) });
 
 //#endregion
-init_vrf_worker();
 exports.createRandomVRFChallenge = createRandomVRFChallenge;
-Object.defineProperty(exports, 'init_vrf_worker', {
-  enumerable: true,
-  get: function () {
-    return init_vrf_worker;
-  }
-});
 exports.outputAs32Bytes = outputAs32Bytes;
 exports.validateVRFChallenge = validateVRFChallenge;
 //# sourceMappingURL=vrf-worker.js.map

package/dist/cjs/core/types/vrf-worker.js.map

@@ -1 +1 @@
-{"version":3,"file":"vrf-worker.js","names":["base64UrlDecode","base64UrlEncode"],"sources":["../../../../src/core/types/vrf-worker.ts"],"sourcesContent":["/**\n * VRF Types for Web Worker Communication\n */\nimport * as wasmModule from '../../wasm_vrf_worker/pkg/wasm_vrf_worker.js';\nimport { StripFree } from \"./index.js\";\n\nimport { WebAuthnAuthenticationCredential, WebAuthnRegistrationCredential } from \"./webauthn\";\nimport { ConfirmationConfig } from './signer-worker';\nimport { AccountId } from \"./accountIds.js\";\nimport { base64UrlDecode, base64UrlEncode } from \"../../utils/encoders.js\";\nimport type { SecureConfirmRequest } from \"../WebAuthnManager/VrfWorkerManager/confirmTxFlow/types\";\n\nexport type WasmGenerateVrfKeypairBootstrapRequest = StripFree<wasmModule.GenerateVrfKeypairBootstrapRequest>;\nexport type WasmGenerateVrfChallengeRequest = StripFree<wasmModule.GenerateVrfChallengeRequest>;\nexport type WasmUnlockVrfKeypairRequest = Omit<StripFree<wasmModule.UnlockVrfKeypairRequest>, 'prfKey'> & {\n  // Prefer forwarding the full serialized WebAuthn credential so PRF outputs do not need\n  // to be extracted into separate main-thread strings.\n  credential: WebAuthnAuthenticationCredential;\n};\nexport type WasmDeriveVrfKeypairFromPrfRequest = Omit<\n  StripFree<wasmModule.DeriveVrfKeypairFromPrfRequest>,\n  'credential' | 'prfOutput'\n> & {\n  // Forward the WebAuthn credential so PRF outputs do not need to be extracted in main-thread JS.\n  credential: WebAuthnRegistrationCredential | WebAuthnAuthenticationCredential;\n};\nexport type WasmMintSessionKeysAndSendToSignerRequest =\n  Omit<\n    StripFree<wasmModule.MintSessionKeysAndSendToSignerRequest>,\n    'contractId' | 'nearRpcUrl' | 'ttlMs' | 'remainingUses'\n  > & {\n    contractId?: string;\n    nearRpcUrl?: string;\n    // Optional signing-session config. When omitted, VRF worker uses defaults.\n    ttlMs?: number;\n    remainingUses?: number;\n    // Forward the WebAuthn credential so PRF outputs do not need to be extracted in main-thread JS.\n    credential: WebAuthnRegistrationCredential | WebAuthnAuthenticationCredential;\n  };\nexport type WasmDispenseSessionKeyRequest = StripFree<wasmModule.DispenseSessionKeyRequest>;\nexport type WasmCheckSessionStatusRequest = StripFree<wasmModule.CheckSessionStatusRequest>;\nexport type WasmClearSessionRequest = StripFree<wasmModule.ClearSessionRequest>;\nexport type WasmConfirmAndPrepareSigningSessionRequest = {\n  request: SecureConfirmRequest;\n};\nexport type WasmDecryptSessionRequest = StripFree<wasmModule.DecryptSessionRequest>;\nexport type WasmRegistrationCredentialConfirmationRequest = StripFree<wasmModule.RegistrationCredentialConfirmationRequest> & {\n  confirmationConfig?: ConfirmationConfig;\n};\nexport type WasmDevice2RegistrationSessionRequest = StripFree<wasmModule.Device2RegistrationSessionRequest> & {\n  confirmationConfig?: ConfirmationConfig;\n};\n\nexport type WasmShamir3PassConfigPRequest = StripFree<wasmModule.Shamir3PassConfigPRequest>;\nexport type WasmShamir3PassConfigServerUrlsRequest = StripFree<wasmModule.Shamir3PassConfigServerUrlsRequest>;\nexport type WasmShamir3PassClientEncryptCurrentVrfKeypairRequest = StripFree<wasmModule.Shamir3PassClientEncryptCurrentVrfKeypairRequest>;\nexport type WasmShamir3PassClientDecryptVrfKeypairRequest = StripFree<wasmModule.Shamir3PassClientDecryptVrfKeypairRequest>;\n\nexport type WasmVrfWorkerRequestType = WasmGenerateVrfKeypairBootstrapRequest\n  | WasmGenerateVrfChallengeRequest\n  | WasmUnlockVrfKeypairRequest\n  | WasmDeriveVrfKeypairFromPrfRequest\n  | WasmMintSessionKeysAndSendToSignerRequest\n  | WasmDispenseSessionKeyRequest\n  | WasmCheckSessionStatusRequest\n  | WasmClearSessionRequest\n  | WasmConfirmAndPrepareSigningSessionRequest\n  | WasmDecryptSessionRequest\n  | WasmRegistrationCredentialConfirmationRequest\n  | WasmDevice2RegistrationSessionRequest\n  | WasmShamir3PassConfigPRequest\n  | WasmShamir3PassConfigServerUrlsRequest\n  | WasmShamir3PassClientEncryptCurrentVrfKeypairRequest\n  | WasmShamir3PassClientDecryptVrfKeypairRequest;\n\nexport interface VRFChallenge {\n  vrfInput: string;\n  vrfOutput: string;\n  vrfProof: string;\n  vrfPublicKey: string;\n  userId: string;\n  rpId: string;\n  blockHeight: string;\n  blockHash: string;\n}\n\n/**\n * Decode VRF output and use first 32 bytes as WebAuthn challenge\n * @param vrfChallenge - VRF challenge object\n * @returns 32-byte Uint8Array\n */\nexport function outputAs32Bytes(vrfChallenge: VRFChallenge): Uint8Array {\n  let vrfOutputBytes = base64UrlDecode(vrfChallenge.vrfOutput);\n  return vrfOutputBytes.slice(0, 32);\n}\n\n/**\n * Validate and create a VRFChallenge object\n * @param vrfChallengeData - The challenge data to validate\n * @returns VRFChallenge object\n */\nexport function validateVRFChallenge(vrfChallengeData: {\n  vrfInput: string;\n  vrfOutput: string;\n  vrfProof: string;\n  vrfPublicKey: string;\n  userId: string;\n  rpId: string;\n  blockHeight: string;\n  blockHash: string;\n}): VRFChallenge {\n  if (!vrfChallengeData.vrfInput || typeof vrfChallengeData.vrfInput !== 'string') {\n    throw new Error('vrfInput must be a non-empty string');\n  }\n  if (!vrfChallengeData.vrfOutput || typeof vrfChallengeData.vrfOutput !== 'string') {\n    throw new Error('vrfOutput must be a non-empty string');\n  }\n  if (!vrfChallengeData.vrfProof || typeof vrfChallengeData.vrfProof !== 'string') {\n    throw new Error('vrfProof must be a non-empty string');\n  }\n  if (!vrfChallengeData.vrfPublicKey || typeof vrfChallengeData.vrfPublicKey !== 'string') {\n    throw new Error('vrfPublicKey must be a non-empty string');\n  }\n  if (!vrfChallengeData.userId || typeof vrfChallengeData.userId !== 'string') {\n    throw new Error('userId must be a non-empty string');\n  }\n  if (!vrfChallengeData.rpId || typeof vrfChallengeData.rpId !== 'string') {\n    throw new Error('rpId must be a non-empty string');\n  }\n  if (!vrfChallengeData.blockHeight || typeof vrfChallengeData.blockHeight !== 'string') {\n    throw new Error('blockHeight must be a non-empty string');\n  }\n  if (!vrfChallengeData.blockHash || typeof vrfChallengeData.blockHash !== 'string') {\n    throw new Error('blockHash must be a non-empty string');\n  }\n\n  return {\n    vrfInput: vrfChallengeData.vrfInput,\n    vrfOutput: vrfChallengeData.vrfOutput,\n    vrfProof: vrfChallengeData.vrfProof,\n    vrfPublicKey: vrfChallengeData.vrfPublicKey,\n    userId: vrfChallengeData.userId,\n    rpId: vrfChallengeData.rpId,\n    blockHeight: vrfChallengeData.blockHeight,\n    blockHash: vrfChallengeData.blockHash,\n  };\n}\n\n/**\n * Create a random VRF challenge\n * @returns Partial<VRFChallenge> with vrfOutput set, but other fields are undefined\n * This is used for local operations that don't require a VRF verification\n */\nexport function createRandomVRFChallenge(): Partial<VRFChallenge> {\n  const challenge = crypto.getRandomValues(new Uint8Array(32));\n  const vrfOutput = base64UrlEncode(challenge.buffer);\n  return {\n    vrfOutput: vrfOutput,\n    vrfInput: undefined,\n    vrfProof: undefined,\n    vrfPublicKey: undefined,\n    userId: undefined,\n    rpId: undefined,\n    blockHeight: undefined,\n    blockHash: undefined,\n  };\n}\n\nexport interface VrfWorkerManagerConfig {\n  vrfWorkerUrl?: string;\n  workerTimeout?: number;\n  debug?: boolean;\n  // Optional Shamir 3-pass configuration passed to the VRF WASM worker at init\n  shamirPB64u?: string; // base64url prime p\n  relayServerUrl?: string;\n  applyServerLockRoute?: string;\n  removeServerLockRoute?: string;\n}\n\n// Define interfaces that are missing\nexport interface VRFWorkerStatus {\n  active: boolean;\n  nearAccountId: AccountId | null;\n  sessionDuration?: number;\n}\n\nexport interface EncryptedVRFKeypair {\n  encryptedVrfDataB64u: string;\n  chacha20NonceB64u: string;\n}\n\nexport interface VRFInputData {\n  userId: string;\n  rpId: string;\n  blockHeight: string;\n  blockHash: string;\n}\n\nexport interface VRFWorkerMessage<T extends WasmVrfWorkerRequestType> {\n  // type: wasmModule.WorkerRequestType\n  type: 'PING'\n  | 'GENERATE_VRF_CHALLENGE'\n  | 'GENERATE_VRF_KEYPAIR_BOOTSTRAP'\n  | 'UNLOCK_VRF_KEYPAIR'\n  | 'CHECK_VRF_STATUS'\n  | 'CLEAR_VRF'\n  | 'DERIVE_VRF_KEYPAIR_FROM_PRF'\n  | 'MINT_SESSION_KEYS_AND_SEND_TO_SIGNER'\n  | 'DISPENSE_SESSION_KEY'\n  | 'CHECK_SESSION_STATUS'\n  | 'CLEAR_SESSION'\n  | 'CONFIRM_AND_PREPARE_SIGNING_SESSION'\n  | 'DECRYPT_SESSION'\n  | 'REGISTRATION_CREDENTIAL_CONFIRMATION'\n  | 'DEVICE2_REGISTRATION_SESSION'\n  | 'SHAMIR3PASS_CLIENT_ENCRYPT_CURRENT_VRF_KEYPAIR' // client only\n  | 'SHAMIR3PASS_CLIENT_DECRYPT_VRF_KEYPAIR' // client only\n  | 'SHAMIR3PASS_APPLY_SERVER_LOCK_KEK' // server only\n  | 'SHAMIR3PASS_REMOVE_SERVER_LOCK_KEK' // server only\n  | 'SHAMIR3PASS_CONFIG_P'\n  | 'SHAMIR3PASS_CONFIG_SERVER_URLS'\n  id?: string;\n  payload?: T;\n}\n\nexport interface VRFWorkerResponse<TData = Record<string, unknown>> {\n  id?: string;\n  success: boolean;\n  data?: TData;\n  error?: string;\n}\n\nexport interface VRFKeypairBootstrapResponse {\n  vrfPublicKey: string;\n  vrfChallengeData?: VRFChallenge;\n}\n\nexport interface EncryptedVRFKeypairResponse {\n  vrfPublicKey: string;\n  encryptedVrfKeypair: EncryptedVRFKeypair;\n}\n\n/**\n * Server-encrypted VRF keypair for commutative encryption scheme\n * This allows server-assisted VRF key recovery without the server seeing the plaintext\n */\nexport interface ServerEncryptedVrfKeypair {\n  /** Base64url-encoded VRF ciphertext (AEAD over VRF keypair bytes) */\n  ciphertextVrfB64u: string;\n  /** Base64url-encoded KEK with server lock applied (KEK_s) */\n  kek_s_b64u: string;\n  /** Server key identifier for proactive refresh/versioning */\n  serverKeyId: string;\n}\n\n/**\n * Plaintext VRF keypair data structure\n * Used for loading decrypted VRF keypairs directly into memory\n */\nexport interface VRFKeypairData {\n  /** Bincode-serialized ECVRFKeyPair bytes (includes both private and public key) */\n  keypairBytes: number[];\n  /** Base64url-encoded public key for convenience and verification */\n  publicKeyBase64: string;\n}\n\n// Shamir 3-pass registration wrap result\nexport interface Shamir3PassRegisterWrapResult {\n  ciphertextVrfB64u: string;\n  enc_s_k_b64u: string;\n  vrfPublicKey: string;\n}\n"],"mappings":";;;;;;;;;;AA2FA,SAAgB,gBAAgB,cAAwC;CACtE,IAAI,iBAAiBA,+BAAgB,aAAa;AAClD,QAAO,eAAe,MAAM,GAAG;;;;;;;AAQjC,SAAgB,qBAAqB,kBASpB;AACf,KAAI,CAAC,iBAAiB,YAAY,OAAO,iBAAiB,aAAa,SACrE,OAAM,IAAI,MAAM;AAElB,KAAI,CAAC,iBAAiB,aAAa,OAAO,iBAAiB,cAAc,SACvE,OAAM,IAAI,MAAM;AAElB,KAAI,CAAC,iBAAiB,YAAY,OAAO,iBAAiB,aAAa,SACrE,OAAM,IAAI,MAAM;AAElB,KAAI,CAAC,iBAAiB,gBAAgB,OAAO,iBAAiB,iBAAiB,SAC7E,OAAM,IAAI,MAAM;AAElB,KAAI,CAAC,iBAAiB,UAAU,OAAO,iBAAiB,WAAW,SACjE,OAAM,IAAI,MAAM;AAElB,KAAI,CAAC,iBAAiB,QAAQ,OAAO,iBAAiB,SAAS,SAC7D,OAAM,IAAI,MAAM;AAElB,KAAI,CAAC,iBAAiB,eAAe,OAAO,iBAAiB,gBAAgB,SAC3E,OAAM,IAAI,MAAM;AAElB,KAAI,CAAC,iBAAiB,aAAa,OAAO,iBAAiB,cAAc,SACvE,OAAM,IAAI,MAAM;AAGlB,QAAO;EACL,UAAU,iBAAiB;EAC3B,WAAW,iBAAiB;EAC5B,UAAU,iBAAiB;EAC3B,cAAc,iBAAiB;EAC/B,QAAQ,iBAAiB;EACzB,MAAM,iBAAiB;EACvB,aAAa,iBAAiB;EAC9B,WAAW,iBAAiB;;;;;;;;AAShC,SAAgB,2BAAkD;CAChE,MAAM,YAAY,OAAO,gBAAgB,IAAI,WAAW;CACxD,MAAM,YAAYC,+BAAgB,UAAU;AAC5C,QAAO;EACM;EACX,UAAU;EACV,UAAU;EACV,cAAc;EACd,QAAQ;EACR,MAAM;EACN,aAAa;EACb,WAAW"}
+{"version":3,"file":"vrf-worker.js","names":["base64UrlDecode","base64UrlEncode"],"sources":["../../../../src/core/types/vrf-worker.ts"],"sourcesContent":["/**\n * VRF Types for Web Worker Communication\n */\nimport * as wasmModule from '../../wasm_vrf_worker/pkg/wasm_vrf_worker.js';\nimport { StripFree } from \"./index.js\";\n\nimport { WebAuthnAuthenticationCredential, WebAuthnRegistrationCredential } from \"./webauthn\";\nimport { ConfirmationConfig } from './signer-worker';\nimport { AccountId } from \"./accountIds.js\";\nimport { base64UrlDecode, base64UrlEncode } from \"../../utils/encoders.js\";\nimport type { SecureConfirmRequest } from \"../WebAuthnManager/VrfWorkerManager/confirmTxFlow/types\";\n\nexport type WasmGenerateVrfKeypairBootstrapRequest = StripFree<wasmModule.GenerateVrfKeypairBootstrapRequest>;\nexport type WasmGenerateVrfChallengeRequest = StripFree<wasmModule.GenerateVrfChallengeRequest>;\nexport type WasmUnlockVrfKeypairRequest = Omit<StripFree<wasmModule.UnlockVrfKeypairRequest>, 'prfKey'> & {\n  // Prefer forwarding the full serialized WebAuthn credential so PRF outputs do not need\n  // to be extracted into separate main-thread strings.\n  credential: WebAuthnRegistrationCredential | WebAuthnAuthenticationCredential;\n};\nexport type WasmDeriveVrfKeypairFromPrfRequest = Omit<\n  StripFree<wasmModule.DeriveVrfKeypairFromPrfRequest>,\n  'credential' | 'prfOutput'\n> & {\n  // Forward the WebAuthn credential so PRF outputs do not need to be extracted in main-thread JS.\n  credential: WebAuthnRegistrationCredential | WebAuthnAuthenticationCredential;\n};\nexport type WasmMintSessionKeysAndSendToSignerRequest =\n  Omit<\n    StripFree<wasmModule.MintSessionKeysAndSendToSignerRequest>,\n    'contractId' | 'nearRpcUrl' | 'ttlMs' | 'remainingUses'\n  > & {\n    contractId?: string;\n    nearRpcUrl?: string;\n    // Optional signing-session config. When omitted, VRF worker uses defaults.\n    ttlMs?: number;\n    remainingUses?: number;\n    // Forward the WebAuthn credential so PRF outputs do not need to be extracted in main-thread JS.\n    credential: WebAuthnRegistrationCredential | WebAuthnAuthenticationCredential;\n  };\nexport type WasmDispenseSessionKeyRequest = StripFree<wasmModule.DispenseSessionKeyRequest>;\nexport type WasmCheckSessionStatusRequest = StripFree<wasmModule.CheckSessionStatusRequest>;\nexport type WasmClearSessionRequest = StripFree<wasmModule.ClearSessionRequest>;\nexport type WasmConfirmAndPrepareSigningSessionRequest = {\n  request: SecureConfirmRequest;\n};\nexport type WasmDecryptSessionRequest = StripFree<wasmModule.DecryptSessionRequest>;\nexport type WasmRegistrationCredentialConfirmationRequest = StripFree<wasmModule.RegistrationCredentialConfirmationRequest> & {\n  confirmationConfig?: ConfirmationConfig;\n};\nexport type WasmDevice2RegistrationSessionRequest = StripFree<wasmModule.Device2RegistrationSessionRequest> & {\n  confirmationConfig?: ConfirmationConfig;\n};\n\nexport type WasmShamir3PassConfigPRequest = StripFree<wasmModule.Shamir3PassConfigPRequest>;\nexport type WasmShamir3PassConfigServerUrlsRequest = StripFree<wasmModule.Shamir3PassConfigServerUrlsRequest>;\nexport type WasmShamir3PassClientEncryptCurrentVrfKeypairRequest = StripFree<wasmModule.Shamir3PassClientEncryptCurrentVrfKeypairRequest>;\nexport type WasmShamir3PassClientDecryptVrfKeypairRequest = StripFree<wasmModule.Shamir3PassClientDecryptVrfKeypairRequest>;\n\nexport type WasmVrfWorkerRequestType = WasmGenerateVrfKeypairBootstrapRequest\n  | WasmGenerateVrfChallengeRequest\n  | WasmUnlockVrfKeypairRequest\n  | WasmDeriveVrfKeypairFromPrfRequest\n  | WasmMintSessionKeysAndSendToSignerRequest\n  | WasmDispenseSessionKeyRequest\n  | WasmCheckSessionStatusRequest\n  | WasmClearSessionRequest\n  | WasmConfirmAndPrepareSigningSessionRequest\n  | WasmDecryptSessionRequest\n  | WasmRegistrationCredentialConfirmationRequest\n  | WasmDevice2RegistrationSessionRequest\n  | WasmShamir3PassConfigPRequest\n  | WasmShamir3PassConfigServerUrlsRequest\n  | WasmShamir3PassClientEncryptCurrentVrfKeypairRequest\n  | WasmShamir3PassClientDecryptVrfKeypairRequest;\n\nexport interface VRFChallenge {\n  vrfInput: string;\n  vrfOutput: string;\n  vrfProof: string;\n  vrfPublicKey: string;\n  userId: string;\n  rpId: string;\n  blockHeight: string;\n  blockHash: string;\n  /**\n   * Optional base64url-encoded 32-byte digest that was bound into the VRF input hash.\n   * When present, it must decode to exactly 32 bytes on the WASM worker / contract side.\n   */\n  intentDigest?: string;\n  /**\n   * Optional base64url-encoded 32-byte digest that was bound into the VRF input hash for\n   * relayer session policy binding (v4+ only).\n   */\n  sessionPolicyDigest32?: string;\n}\n\n/**\n * Decode VRF output and use first 32 bytes as WebAuthn challenge\n * @param vrfChallenge - VRF challenge object\n * @returns 32-byte Uint8Array\n */\nexport function outputAs32Bytes(vrfChallenge: VRFChallenge): Uint8Array {\n  let vrfOutputBytes = base64UrlDecode(vrfChallenge.vrfOutput);\n  return vrfOutputBytes.slice(0, 32);\n}\n\n/**\n * Validate and create a VRFChallenge object\n * @param vrfChallengeData - The challenge data to validate\n * @returns VRFChallenge object\n */\nexport function validateVRFChallenge(vrfChallengeData: {\n  vrfInput: string;\n  vrfOutput: string;\n  vrfProof: string;\n  vrfPublicKey: string;\n  userId: string;\n  rpId: string;\n  blockHeight: string;\n  blockHash: string;\n  intentDigest?: string;\n  sessionPolicyDigest32?: string;\n}): VRFChallenge {\n  if (!vrfChallengeData.vrfInput || typeof vrfChallengeData.vrfInput !== 'string') {\n    throw new Error('vrfInput must be a non-empty string');\n  }\n  if (!vrfChallengeData.vrfOutput || typeof vrfChallengeData.vrfOutput !== 'string') {\n    throw new Error('vrfOutput must be a non-empty string');\n  }\n  if (!vrfChallengeData.vrfProof || typeof vrfChallengeData.vrfProof !== 'string') {\n    throw new Error('vrfProof must be a non-empty string');\n  }\n  if (!vrfChallengeData.vrfPublicKey || typeof vrfChallengeData.vrfPublicKey !== 'string') {\n    throw new Error('vrfPublicKey must be a non-empty string');\n  }\n  if (!vrfChallengeData.userId || typeof vrfChallengeData.userId !== 'string') {\n    throw new Error('userId must be a non-empty string');\n  }\n  if (!vrfChallengeData.rpId || typeof vrfChallengeData.rpId !== 'string') {\n    throw new Error('rpId must be a non-empty string');\n  }\n  if (!vrfChallengeData.blockHeight || typeof vrfChallengeData.blockHeight !== 'string') {\n    throw new Error('blockHeight must be a non-empty string');\n  }\n  if (!vrfChallengeData.blockHash || typeof vrfChallengeData.blockHash !== 'string') {\n    throw new Error('blockHash must be a non-empty string');\n  }\n\n  return {\n    vrfInput: vrfChallengeData.vrfInput,\n    vrfOutput: vrfChallengeData.vrfOutput,\n    vrfProof: vrfChallengeData.vrfProof,\n    vrfPublicKey: vrfChallengeData.vrfPublicKey,\n    userId: vrfChallengeData.userId,\n    rpId: vrfChallengeData.rpId,\n    blockHeight: vrfChallengeData.blockHeight,\n    blockHash: vrfChallengeData.blockHash,\n    ...(vrfChallengeData.intentDigest ? { intentDigest: vrfChallengeData.intentDigest } : {}),\n    ...(vrfChallengeData.sessionPolicyDigest32 ? { sessionPolicyDigest32: vrfChallengeData.sessionPolicyDigest32 } : {}),\n  };\n}\n\n/**\n * Create a random VRF challenge\n * @returns Partial<VRFChallenge> with vrfOutput set, but other fields are undefined\n * This is used for local operations that don't require a VRF verification\n */\nexport function createRandomVRFChallenge(): Partial<VRFChallenge> {\n  const challenge = crypto.getRandomValues(new Uint8Array(32));\n  const vrfOutput = base64UrlEncode(challenge.buffer);\n  return {\n    vrfOutput: vrfOutput,\n    vrfInput: undefined,\n    vrfProof: undefined,\n    vrfPublicKey: undefined,\n    userId: undefined,\n    rpId: undefined,\n    blockHeight: undefined,\n    blockHash: undefined,\n  };\n}\n\nexport interface VrfWorkerManagerConfig {\n  vrfWorkerUrl?: string;\n  workerTimeout?: number;\n  debug?: boolean;\n  // Optional Shamir 3-pass configuration passed to the VRF WASM worker at init\n  shamirPB64u?: string; // base64url prime p\n  relayServerUrl?: string;\n  applyServerLockRoute?: string;\n  removeServerLockRoute?: string;\n}\n\n// Define interfaces that are missing\nexport interface VRFWorkerStatus {\n  active: boolean;\n  nearAccountId: AccountId | null;\n  sessionDuration?: number;\n  /**\n   * Base64url VRF public key currently loaded in the VRF worker (when active).\n   * Used to detect device/passkey mismatches for multi-device accounts.\n   */\n  vrfPublicKey?: string | null;\n}\n\nexport interface EncryptedVRFKeypair {\n  encryptedVrfDataB64u: string;\n  chacha20NonceB64u: string;\n}\n\nexport interface VRFInputData {\n  userId: string;\n  rpId: string;\n  blockHeight: string;\n  blockHash: string;\n  /**\n   * Optional base64url-encoded 32-byte digest to bind into the VRF input hash.\n   * This is intended for transaction/delegate signing flows (e.g. the UI intent digest).\n   */\n  intentDigest?: string;\n  /**\n   * Optional base64url-encoded 32-byte digest to bind a relayer session policy into the VRF input hash (v4+ only).\n   */\n  sessionPolicyDigest32?: string;\n}\n\nexport interface VRFWorkerMessage<T extends WasmVrfWorkerRequestType> {\n  // type: wasmModule.WorkerRequestType\n  type: 'PING'\n  | 'GENERATE_VRF_CHALLENGE'\n  | 'GENERATE_VRF_KEYPAIR_BOOTSTRAP'\n  | 'UNLOCK_VRF_KEYPAIR'\n  | 'CHECK_VRF_STATUS'\n  | 'CLEAR_VRF'\n  | 'DERIVE_VRF_KEYPAIR_FROM_PRF'\n  | 'MINT_SESSION_KEYS_AND_SEND_TO_SIGNER'\n  | 'DISPENSE_SESSION_KEY'\n  | 'CHECK_SESSION_STATUS'\n  | 'CLEAR_SESSION'\n  | 'CONFIRM_AND_PREPARE_SIGNING_SESSION'\n  | 'DECRYPT_SESSION'\n  | 'REGISTRATION_CREDENTIAL_CONFIRMATION'\n  | 'DEVICE2_REGISTRATION_SESSION'\n  | 'SHAMIR3PASS_CLIENT_ENCRYPT_CURRENT_VRF_KEYPAIR' // client only\n  | 'SHAMIR3PASS_CLIENT_DECRYPT_VRF_KEYPAIR' // client only\n  | 'SHAMIR3PASS_APPLY_SERVER_LOCK_KEK' // server only\n  | 'SHAMIR3PASS_REMOVE_SERVER_LOCK_KEK' // server only\n  | 'SHAMIR3PASS_CONFIG_P'\n  | 'SHAMIR3PASS_CONFIG_SERVER_URLS'\n  id?: string;\n  payload?: T;\n}\n\nexport interface VRFWorkerResponse<TData = Record<string, unknown>> {\n  id?: string;\n  success: boolean;\n  data?: TData;\n  error?: string;\n}\n\nexport interface VRFKeypairBootstrapResponse {\n  vrfPublicKey: string;\n  vrfChallengeData?: VRFChallenge;\n}\n\nexport interface EncryptedVRFKeypairResponse {\n  vrfPublicKey: string;\n  encryptedVrfKeypair: EncryptedVRFKeypair;\n}\n\n/**\n * Server-encrypted VRF keypair for commutative encryption scheme\n * This allows server-assisted VRF key recovery without the server seeing the plaintext\n */\nexport interface ServerEncryptedVrfKeypair {\n  /** Base64url-encoded VRF ciphertext (AEAD over VRF keypair bytes) */\n  ciphertextVrfB64u: string;\n  /** Base64url-encoded KEK with server lock applied (KEK_s) */\n  kek_s_b64u: string;\n  /** Server key identifier for proactive refresh/versioning */\n  serverKeyId: string;\n}\n\n/**\n * Plaintext VRF keypair data structure\n * Used for loading decrypted VRF keypairs directly into memory\n */\nexport interface VRFKeypairData {\n  /** Bincode-serialized ECVRFKeyPair bytes (includes both private and public key) */\n  keypairBytes: number[];\n  /** Base64url-encoded public key for convenience and verification */\n  publicKeyBase64: string;\n}\n\n// Shamir 3-pass registration wrap result\nexport interface Shamir3PassRegisterWrapResult {\n  ciphertextVrfB64u: string;\n  enc_s_k_b64u: string;\n  vrfPublicKey: string;\n}\n"],"mappings":";;;;;;;;AAqGA,SAAgB,gBAAgB,cAAwC;CACtE,IAAI,iBAAiBA,+BAAgB,aAAa;AAClD,QAAO,eAAe,MAAM,GAAG;;;;;;;AAQjC,SAAgB,qBAAqB,kBAWpB;AACf,KAAI,CAAC,iBAAiB,YAAY,OAAO,iBAAiB,aAAa,SACrE,OAAM,IAAI,MAAM;AAElB,KAAI,CAAC,iBAAiB,aAAa,OAAO,iBAAiB,cAAc,SACvE,OAAM,IAAI,MAAM;AAElB,KAAI,CAAC,iBAAiB,YAAY,OAAO,iBAAiB,aAAa,SACrE,OAAM,IAAI,MAAM;AAElB,KAAI,CAAC,iBAAiB,gBAAgB,OAAO,iBAAiB,iBAAiB,SAC7E,OAAM,IAAI,MAAM;AAElB,KAAI,CAAC,iBAAiB,UAAU,OAAO,iBAAiB,WAAW,SACjE,OAAM,IAAI,MAAM;AAElB,KAAI,CAAC,iBAAiB,QAAQ,OAAO,iBAAiB,SAAS,SAC7D,OAAM,IAAI,MAAM;AAElB,KAAI,CAAC,iBAAiB,eAAe,OAAO,iBAAiB,gBAAgB,SAC3E,OAAM,IAAI,MAAM;AAElB,KAAI,CAAC,iBAAiB,aAAa,OAAO,iBAAiB,cAAc,SACvE,OAAM,IAAI,MAAM;AAGlB,QAAO;EACL,UAAU,iBAAiB;EAC3B,WAAW,iBAAiB;EAC5B,UAAU,iBAAiB;EAC3B,cAAc,iBAAiB;EAC/B,QAAQ,iBAAiB;EACzB,MAAM,iBAAiB;EACvB,aAAa,iBAAiB;EAC9B,WAAW,iBAAiB;EAC5B,GAAI,iBAAiB,eAAe,EAAE,cAAc,iBAAiB,iBAAiB;EACtF,GAAI,iBAAiB,wBAAwB,EAAE,uBAAuB,iBAAiB,0BAA0B;;;;;;;;AASrH,SAAgB,2BAAkD;CAChE,MAAM,YAAY,OAAO,gBAAgB,IAAI,WAAW;CACxD,MAAM,YAAYC,+BAAgB,UAAU;AAC5C,QAAO;EACM;EACX,UAAU;EACV,UAAU;EACV,cAAc;EACd,QAAQ;EACR,MAAM;EACN,aAAa;EACb,WAAW"}

package/dist/cjs/core/workerControlMessages.js

@@ -1,4 +1,3 @@
-const require_rolldown_runtime = require('../_virtual/rolldown_runtime.js');
 
 //#region src/core/workerControlMessages.ts
 /**

package/dist/cjs/core/workerControlMessages.js.map

@@ -1 +1 @@
-{"version":3,"file":"workerControlMessages.js","names":[],"sources":["../../../src/core/workerControlMessages.ts"],"sourcesContent":["/**\n * Control messages exchanged between worker shims and the main thread.\n *\n * These messages are JS-only and do NOT go through the Rust WASM JSON request/response pipeline.\n * They are used for:\n * - MessagePort attachment handshakes (WrapKeySeed delivery)\n * - Readiness signals (worker pool health checks)\n */\nexport const WorkerControlMessage = {\n  ATTACH_WRAP_KEY_SEED_PORT: 'ATTACH_WRAP_KEY_SEED_PORT',\n  ATTACH_WRAP_KEY_SEED_PORT_OK: 'ATTACH_WRAP_KEY_SEED_PORT_OK',\n  ATTACH_WRAP_KEY_SEED_PORT_ERROR: 'ATTACH_WRAP_KEY_SEED_PORT_ERROR',\n  WORKER_READY: 'WORKER_READY',\n} as const;\n\nexport type WorkerControlMessageType =\n  (typeof WorkerControlMessage)[keyof typeof WorkerControlMessage];\n"],"mappings":";;;;;;;;;;;AAQA,MAAa,uBAAuB;CAClC,2BAA2B;CAC3B,8BAA8B;CAC9B,iCAAiC;CACjC,cAAc"}
+{"version":3,"file":"workerControlMessages.js","names":[],"sources":["../../../src/core/workerControlMessages.ts"],"sourcesContent":["/**\n * Control messages exchanged between worker shims and the main thread.\n *\n * These messages are JS-only and do NOT go through the Rust WASM JSON request/response pipeline.\n * They are used for:\n * - MessagePort attachment handshakes (WrapKeySeed delivery)\n * - Readiness signals (worker pool health checks)\n */\nexport const WorkerControlMessage = {\n  ATTACH_WRAP_KEY_SEED_PORT: 'ATTACH_WRAP_KEY_SEED_PORT',\n  ATTACH_WRAP_KEY_SEED_PORT_OK: 'ATTACH_WRAP_KEY_SEED_PORT_OK',\n  ATTACH_WRAP_KEY_SEED_PORT_ERROR: 'ATTACH_WRAP_KEY_SEED_PORT_ERROR',\n  WORKER_READY: 'WORKER_READY',\n} as const;\n\nexport type WorkerControlMessageType =\n  (typeof WorkerControlMessage)[keyof typeof WorkerControlMessage];\n"],"mappings":";;;;;;;;;;AAQA,MAAa,uBAAuB;CAClC,2BAA2B;CAC3B,8BAA8B;CAC9B,iCAAiC;CACjC,cAAc"}

package/dist/cjs/index.js

@@ -1,35 +1,19 @@
-const require_rolldown_runtime = require('./_virtual/rolldown_runtime.js');
 const require_accountIds = require('./core/types/accountIds.js');
-const require_config = require('./config.js');
 const require_base64 = require('./utils/base64.js');
-const require_encoders = require('./utils/encoders.js');
 const require_defaultConfigs = require('./core/defaultConfigs.js');
+const require_rpc = require('./core/types/rpc.js');
+const require_NearClient = require('./core/NearClient.js');
+const require_config = require('./config.js');
 const require_sdkSentEvents = require('./core/types/sdkSentEvents.js');
 const require_actions = require('./core/types/actions.js');
-const require_rpc = require('./core/types/rpc.js');
 const require_rpcCalls = require('./core/rpcCalls.js');
-const require_NearClient = require('./core/NearClient.js');
+const require_emailRecovery = require('./core/types/emailRecovery.js');
 const require_index = require('./core/WebAuthnManager/index.js');
-const require_recoverAccount = require('./core/TatchiPasskey/recoverAccount.js');
+const require_syncAccount = require('./core/TatchiPasskey/syncAccount.js');
+const require_index$1 = require('./core/TatchiPasskey/index.js');
 const require_emailRecoveryPendingStore = require('./core/EmailRecovery/emailRecoveryPendingStore.js');
-const require_index$1 = require('./core/EmailRecovery/index.js');
-const require_emailRecovery = require('./core/types/emailRecovery.js');
-const require_index$2 = require('./core/TatchiPasskey/index.js');
 const require_detect = require('./core/ExtensionWallet/detect.js');
 
-//#region src/index.ts
-require_rpcCalls.init_rpcCalls();
-require_index$1.init_EmailRecovery();
-require_encoders.init_encoders();
-require_defaultConfigs.init_defaultConfigs();
-require_rpc.init_rpc();
-require_sdkSentEvents.init_sdkSentEvents();
-require_accountIds.init_accountIds();
-require_actions.init_actions();
-require_emailRecovery.init_emailRecovery();
-
-//#endregion
-exports.AccountRecoveryFlow = require_recoverAccount.AccountRecoveryFlow;
 exports.ActionType = require_actions.ActionType;
 exports.DEFAULT_WAIT_STATUS = require_rpc.DEFAULT_WAIT_STATUS;
 exports.DEVICE_LINKING_CONFIG = require_config.DEVICE_LINKING_CONFIG;
@@ -41,7 +25,8 @@ exports.EmailRecoveryPendingStore = require_emailRecoveryPendingStore.EmailRecov
 exports.MinimalNearClient = require_NearClient.MinimalNearClient;
 exports.PASSKEY_MANAGER_DEFAULT_CONFIGS = require_defaultConfigs.PASSKEY_MANAGER_DEFAULT_CONFIGS;
 exports.SIGNER_WORKER_MANAGER_CONFIG = require_config.SIGNER_WORKER_MANAGER_CONFIG;
-exports.TatchiPasskey = require_index$2.TatchiPasskey;
+exports.SyncAccountFlow = require_syncAccount.SyncAccountFlow;
+exports.TatchiPasskey = require_index$1.TatchiPasskey;
 exports.WebAuthnManager = require_index.WebAuthnManager;
 exports.base64UrlDecode = require_base64.base64UrlDecode;
 exports.base64UrlEncode = require_base64.base64UrlEncode;
@@ -49,5 +34,4 @@ exports.buildConfigsFromEnv = require_defaultConfigs.buildConfigsFromEnv;
 exports.detectTatchiWalletExtension = require_detect.detectTatchiWalletExtension;
 exports.encodeSignedTransactionBase64 = require_NearClient.encodeSignedTransactionBase64;
 exports.toAccountId = require_accountIds.toAccountId;
-exports.verifyAuthenticationResponse = require_rpcCalls.verifyAuthenticationResponse;
-//# sourceMappingURL=index.js.map
+exports.verifyAuthenticationResponse = require_rpcCalls.verifyAuthenticationResponse;