npm - @tatchi-xyz/sdk - Versions diffs - 0.21.0 → 0.31.0 - Mend

@tatchi-xyz/sdk 0.21.0 → 0.31.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (2488) hide show

package/dist/cjs/plugins/vite.js CHANGED Viewed

@@ -1,4 +1,5 @@
 const require_rolldown_runtime = require('./_virtual/rolldown_runtime.js');
+const require_validation = require('./utils/validation.js');
 const require_headers = require('./headers.js');
 const require_plugin_utils = require('./plugin-utils.js');
 const require_offline = require('./offline.js');
@@ -51,12 +52,12 @@ const WALLET_SURFACE_CSS = [
 * - Wallet server: used by /wallet-service to load wallet-iframe-host.js and related CSS/JS.
 */
 function tatchiServeSdk(opts = {}) {
-	const configuredBase = require_plugin_utils.normalizeBase(opts.sdkBasePath, "/sdk");
+	const configuredBase = require_validation.toBasePath(opts.sdkBasePath, "/sdk");
 	const sdkDistRoot = require_plugin_utils.resolveSdkDistRoot(opts.sdkDistRoot);
 	const enableDebugRoutes = opts.enableDebugRoutes === true;
 	const coepMode = require_plugin_utils.resolveCoepMode(opts.coepMode);
 	const offlineHtml = require_offline.buildOfflineExportHtml(configuredBase);
-	const bases = Array.from(new Set([configuredBase, require_plugin_utils.normalizeBase("/sdk")])).sort((a, b) => b.length - a.length);
+	const bases = Array.from(new Set([configuredBase, require_validation.toBasePath("/sdk")])).sort((a, b) => b.length - a.length);
 	return {
 		name: "tatchi:serve-sdk",
 		apply: "serve",
@@ -124,8 +125,8 @@ function tatchiServeSdk(opts = {}) {
 * Where it runs: wallet-iframe dev server (wallet origin). Used by tatchiWalletServer.
 */
 function tatchiWalletService(opts = {}) {
-	const walletServicePath = require_plugin_utils.normalizeBase(opts.walletServicePath, "/wallet-service");
-	const sdkBasePath = require_plugin_utils.normalizeBase(opts.sdkBasePath, "/sdk");
+	const walletServicePath = require_validation.toBasePath(opts.walletServicePath, "/wallet-service");
+	const sdkBasePath = require_validation.toBasePath(opts.sdkBasePath, "/sdk");
 	const coepMode = require_plugin_utils.resolveCoepMode(opts.coepMode);
 	const html = require_plugin_utils.buildWalletServiceHtml(sdkBasePath);
 	const offlineHtml = require_offline.buildOfflineExportHtml(sdkBasePath);
@@ -138,9 +139,11 @@ function tatchiWalletService(opts = {}) {
 			server.middlewares.use((req, res, next) => {
 				if (!req.url) return next();
 				const url = req.url.split("?")[0];
-				if (url === walletServicePath) {
+				const isWalletRoute = url === walletServicePath || url === `${walletServicePath}/` || url === `${walletServicePath}//`;
+				if (isWalletRoute) {
 					res.statusCode = 200;
 					res.setHeader("Content-Type", "text/html; charset=utf-8");
+					res.setHeader("Cross-Origin-Resource-Policy", "cross-origin");
 					require_plugin_utils.applyCoepCorpIfNeeded(res, coepMode);
 					res.end(html);
 					return;
@@ -186,8 +189,8 @@ function tatchiWasmMime() {
 function tatchiHeaders(opts = {}) {
 	const walletOriginRaw = opts.walletOrigin ?? process.env.VITE_WALLET_ORIGIN;
 	const walletOrigin = walletOriginRaw?.trim();
-	const walletServicePath = require_plugin_utils.normalizeBase(opts.walletServicePath || process.env.VITE_WALLET_SERVICE_PATH, "/wallet-service");
-	const sdkBasePath = require_plugin_utils.normalizeBase(opts.sdkBasePath || process.env.VITE_SDK_BASE_PATH, "/sdk");
+	const walletServicePath = require_validation.toBasePath(opts.walletServicePath || process.env.VITE_WALLET_SERVICE_PATH, "/wallet-service");
+	const sdkBasePath = require_validation.toBasePath(opts.sdkBasePath || process.env.VITE_SDK_BASE_PATH, "/sdk");
 	const devCSPMode = opts.devCSP ?? process.env.VITE_WALLET_DEV_CSP;
 	const coepMode = require_plugin_utils.resolveCoepMode(opts.coepMode);
 	const permissionsPolicy = require_headers.buildPermissionsPolicy(walletOrigin);
@@ -277,8 +280,8 @@ function tatchiHeaders(opts = {}) {
 */
 function tatchiDevServer(options = {}) {
 	const mode = options.mode || "self-contained";
-	const sdkBasePath = require_plugin_utils.normalizeBase(options.sdkBasePath || process.env.VITE_SDK_BASE_PATH, "/sdk");
-	const walletServicePath = require_plugin_utils.normalizeBase(options.walletServicePath || process.env.VITE_WALLET_SERVICE_PATH, "/wallet-service");
+	const sdkBasePath = require_validation.toBasePath(options.sdkBasePath || process.env.VITE_SDK_BASE_PATH, "/sdk");
+	const walletServicePath = require_validation.toBasePath(options.walletServicePath || process.env.VITE_WALLET_SERVICE_PATH, "/wallet-service");
 	const walletOrigin = (options.walletOrigin ?? process.env.VITE_WALLET_ORIGIN)?.trim();
 	const setDevHeaders = options.setDevHeaders !== false;
 	const enableDebugRoutes = options.enableDebugRoutes === true;
@@ -324,8 +327,8 @@ function tatchiDevServer(options = {}) {
 function tatchiBuildHeaders(opts = {}) {
 	const walletOriginRaw = opts.walletOrigin ?? process.env.VITE_WALLET_ORIGIN;
 	const walletOrigin = walletOriginRaw?.trim();
-	const walletServicePath = require_plugin_utils.normalizeBase(process.env.VITE_WALLET_SERVICE_PATH, "/wallet-service");
-	const sdkBasePath = require_plugin_utils.normalizeBase(process.env.VITE_SDK_BASE_PATH, "/sdk");
+	const walletServicePath = require_validation.toBasePath(process.env.VITE_WALLET_SERVICE_PATH, "/wallet-service");
+	const sdkBasePath = require_validation.toBasePath(process.env.VITE_SDK_BASE_PATH, "/sdk");
 	const coepMode = require_plugin_utils.resolveCoepMode(opts.coepMode);
 	const permissionsPolicy = require_headers.buildPermissionsPolicy(walletOrigin);
 	const walletCsp = require_headers.buildWalletCsp({ mode: "strict" });
@@ -350,17 +353,21 @@ function tatchiBuildHeaders(opts = {}) {
 						"",
 						`${walletServicePath}`,
 						"  Cross-Origin-Opener-Policy: unsafe-none",
+						"  Cross-Origin-Resource-Policy: cross-origin",
 						`  Permissions-Policy: ${permissionsPolicy}`,
 						`  Content-Security-Policy: ${walletCsp}`,
 						`${walletServicePath}/`,
 						"  Cross-Origin-Opener-Policy: unsafe-none",
+						"  Cross-Origin-Resource-Policy: cross-origin",
 						`  Permissions-Policy: ${permissionsPolicy}`,
 						`  Content-Security-Policy: ${walletCsp}`,
 						"/export-viewer",
 						"  Cross-Origin-Opener-Policy: unsafe-none",
+						"  Cross-Origin-Resource-Policy: cross-origin",
 						`  Permissions-Policy: ${permissionsPolicy}`,
 						"/export-viewer/",
 						"  Cross-Origin-Opener-Policy: unsafe-none",
+						"  Cross-Origin-Resource-Policy: cross-origin",
 						`  Permissions-Policy: ${permissionsPolicy}`,
 						"/offline-export",
 						"  Cache-Control: no-cache",

package/dist/cjs/plugins/vite.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"vite.js","names":["fs","normalizeBase","resolveSdkDistRoot","resolveCoepMode","buildOfflineExportHtml","path","buildWalletServiceHtml","buildPermissionsPolicy","buildWalletCsp","fetchRorOriginsFromNear","echoCorsFromRequest","mode: Required<Web3AuthnDevOptions>['mode']","contentLines: string[]","buildExportViewerHtml"],"sources":["../../../src/plugins/vite.ts"],"sourcesContent":["// Minimal Vite dev plugin(s) to support Passkey Manager modes.\n// See docs/passkey-manager-modes.md (Vite Plugin section).\n//\n// What these plugins do:\n// - Serve SDK assets under a base path, expose a wallet service route,\n// - Add dev headers (COOP + Permissions-Policy, optional COEP/CORP), and enforce WASM MIME.\n// - IMPORTANT: Strict CSP is scoped only to wallet HTML routes (/wallet-service, /export-viewer),\n// not to the host app pages. App routes remain free to use inline styles/scripts.\n\nimport * as fs from 'node:fs'\nimport * as path from 'node:path'\nimport { buildPermissionsPolicy, buildWalletCsp } from './headers'\nimport {\n addPreconnectLink,\n buildWalletServiceHtml,\n buildExportViewerHtml,\n applyCoepCorpIfNeeded,\n echoCorsFromRequest,\n fetchRorOriginsFromNear,\n normalizeBase,\n resolveCoepMode,\n resolveSdkDistRoot,\n} from './plugin-utils'\nimport { addOfflineExportDevRoutes, buildOfflineExportHtml, emitOfflineExportAssets } from './offline'\nimport { setContentType } from './plugin-utils'\n\nexport type VitePlugin = {\n name: string\n apply?: 'serve' \| 'build'\n enforce?: 'pre' \| 'post'\n configureServer?: (server: any) => void \| Promise<void>\n}\nexport type ViteLikePlugin = VitePlugin\n\nexport type Web3AuthnDevOptions = {\n mode?: 'self-contained' \| 'front-only' \| 'wallet-only'\n sdkDistRoot?: string\n sdkBasePath?: string\n walletServicePath?: string\n walletOrigin?: string\n setDevHeaders?: boolean\n enableDebugRoutes?: boolean\n /*\n Controls Cross-Origin-Embedder-Policy (COEP) behavior in dev.\n * - 'off' (default): do not emit COEP/CORP on app pages.\n * - 'strict': emit `Cross-Origin-Embedder-Policy: require-corp`\n * and `Cross-Origin-Resource-Policy: cross-origin` on app pages.\n \n Tip: set `VITE_COEP_MODE=strict` in tests/CI to enable isolation automatically.\n /\n coepMode?: 'strict' \| 'off'\n}\n\nexport type ServeSdkOptions = {\n sdkDistRoot?: string\n sdkBasePath?: string\n enableDebugRoutes?: boolean\n coepMode?: 'strict' \| 'off'\n}\n\nexport type WalletServiceOptions = {\n walletServicePath?: string\n sdkBasePath?: string\n coepMode?: 'strict' \| 'off'\n}\n\nexport type DevHeadersOptions = {\n walletOrigin?: string\n walletServicePath?: string\n sdkBasePath?: string\n /\n Optional dev-time CSP for the wallet service route.\n * - 'strict': no inline scripts/styles (mirrors production defaults)\n * - 'compatible': allows inline scripts/styles (useful for debugging)\n /\n devCSP?: 'strict' \| 'compatible'\n /\n Controls Cross-Origin-Embedder-Policy (COEP) behavior in dev.\n * - 'off' (default): do not emit COEP/CORP headers on app pages.\n * - 'strict': emit COEP/CORP headers on app pages.\n /\n coepMode?: 'strict' \| 'off'\n}\n\n/\n Return the first candidate path that exists and is a file.\n * Helper for robust /sdk/* asset resolution on dev servers (app and wallet).\n /\nfunction tryFile(...candidates: string[]): string \| undefined {\n for (const file of candidates) {\n try {\n const stat = fs.statSync(file)\n if (stat.isFile()) return file\n } catch {}\n }\n return undefined\n}\n\n// RPC helpers are provided by plugin-utils to share logic across frameworks.\n\n// Shared assets emitted/served for the wallet service bootstrap.\nconst WALLET_SHIM_SOURCE = \"window.global \|\|= window; window.process \|\|= { env: {} };\\n\"\nconst WALLET_SURFACE_CSS = [\n 'html, body { background: transparent !important; margin:0; padding:0; }',\n 'html, body { color-scheme: normal; }',\n '',\n // Class-based surface for strict CSP setups toggled by JS\n 'html.w3a-transparent, body.w3a-transparent { background: transparent !important; margin:0; padding:0; color-scheme: normal; }',\n '',\n // Minimal portal styles used by confirm-ui (no animation; child components handle transitions)\n '.w3a-portal { position: relative; z-index: 2147483647; opacity: 0; pointer-events: none; }',\n '.w3a-portal.w3a-portal--visible { opacity: 1; pointer-events: auto; }',\n '',\n // Provide baseline tokens only when the document does not declare a theme.\n // This avoids overriding :root[data-w3a-theme] values supplied by token sheet\n // or integrator-injected themes.\n ':root:not([data-w3a-theme]) {',\n ' --w3a-colors-textPrimary: #f6f7f8;',\n ' --w3a-colors-textSecondary: rgba(255,255,255,0.7);',\n ' --w3a-colors-surface: rgba(255,255,255,0.08);',\n ' --w3a-colors-surface2: rgba(255,255,255,0.06);',\n ' --w3a-colors-surface3: rgba(255,255,255,0.04);',\n ' --w3a-colors-borderPrimary: rgba(255,255,255,0.14);',\n ' --w3a-colors-borderSecondary: rgba(255,255,255,0.1);',\n ' --w3a-colors-colorBackground: #0b0c10;',\n ' / Default viewport custom properties for width/height calculations /',\n ' --w3a-vw: 100vw;',\n ' --w3a-vh: 100vh;',\n '}',\n '',\n].join('\\n')\n\n/\n Tatchi SDK plugin: serve SDK assets under a stable base (default: /sdk) with optional COEP/CORP (strict mode) and permissive CORS.\n * Where it runs: both the app server and the wallet-iframe server.\n * - App server: lets host pages and Lit components load SDK CSS/JS locally.\n * - Wallet server: used by /wallet-service to load wallet-iframe-host.js and related CSS/JS.\n /\nexport function tatchiServeSdk(opts: ServeSdkOptions = {}): VitePlugin {\n const configuredBase = normalizeBase(opts.sdkBasePath, '/sdk')\n const sdkDistRoot = resolveSdkDistRoot(opts.sdkDistRoot)\n const enableDebugRoutes = opts.enableDebugRoutes === true\n const coepMode = resolveCoepMode(opts.coepMode)\n const offlineHtml = buildOfflineExportHtml(configuredBase)\n\n // In dev we want both '/sdk' and a custom base to work.\n const bases = Array.from(new Set([configuredBase, normalizeBase('/sdk')]))\n .sort((a, b) => b.length - a.length)\n // Prefer longest base match first (e.g., '/sdk/esm/react' before '/sdk')\n\n return {\n name: 'tatchi:serve-sdk',\n apply: 'serve',\n enforce: 'pre',\n configureServer(server) {\n // Mount Offline Export dev routes once here (includes app module + chunks)\n addOfflineExportDevRoutes(server, {\n sdkDistRoot,\n sdkBasePath: configuredBase,\n offlineHtml,\n includeAppModule: true,\n coepMode,\n })\n // Serve a tiny shim as a virtual asset to enable strict CSP (no inline scripts)\n server.middlewares.use((req: any, res: any, next: any) => {\n const url = (req.url \|\| '').split('?')[0]\n if (url === configuredBase + '/wallet-shims.js') {\n res.statusCode = 200\n res.setHeader('Content-Type', 'application/javascript; charset=utf-8')\n // Align with SDK asset headers so COEP/CORP environments can import\n applyCoepCorpIfNeeded(res, coepMode)\n // Dev-only CORS echo (no preflight handling on this route)\n echoCorsFromRequest(res, req, { handlePreflight: false })\n res.end(WALLET_SHIM_SOURCE)\n return\n }\n if (url === configuredBase + '/wallet-service.css') {\n res.statusCode = 200\n res.setHeader('Content-Type', 'text/css; charset=utf-8')\n // Important: provide CORP for cross‑origin CSS so COEP documents can load it\n applyCoepCorpIfNeeded(res, coepMode)\n // Dev-only CORS echo (no preflight handling on this route)\n echoCorsFromRequest(res, req, { handlePreflight: false })\n res.end(WALLET_SURFACE_CSS)\n return\n }\n next()\n })\n\n // Optional debug route to confirm resolution\n if (enableDebugRoutes) {\n server.middlewares.use('/__sdk-root', (req: any, res: any) => {\n res.setHeader('Content-Type', 'text/plain; charset=utf-8')\n res.end(sdkDistRoot)\n })\n }\n\n // Serve files under any recognized base from sdkDistRoot with fallbacks\n server.middlewares.use((req: any, res: any, next: any) => {\n if (!req.url) return next()\n const url = req.url.split('?')[0]\n\n const matchBase = bases.find((b) => url.startsWith(b + '/'))\n if (!matchBase) return next()\n\n const rel = url.slice((matchBase + '/').length)\n // Try dist/esm/sdk first (canonical), then common fallbacks\n const candidate = tryFile(\n path.join(sdkDistRoot, 'esm', 'sdk', rel),\n path.join(sdkDistRoot, rel),\n path.join(sdkDistRoot, 'esm', rel)\n )\n\n if (!candidate) {\n res.statusCode = 404\n res.setHeader('Content-Type', 'application/json; charset=utf-8')\n res.end(JSON.stringify({ error: 'SDK asset not found', path: rel }))\n return\n }\n\n setContentType(res, candidate)\n // SDK assets need COEP headers to work in wallet iframe with COEP enabled\n applyCoepCorpIfNeeded(res, coepMode)\n // Dev-only CORS echo (no preflight handling here)\n echoCorsFromRequest(res, req, { handlePreflight: false })\n const stream = fs.createReadStream(candidate)\n stream.on('error', () => next())\n stream.pipe(res)\n })\n },\n }\n}\n\n/\n Dev plugin: expose the wallet service HTML route (default: /wallet-service) that links only external CSS/JS.\n * Where it runs: wallet-iframe dev server (wallet origin). Used by tatchiWalletServer.\n /\nexport function tatchiWalletService(opts: WalletServiceOptions = {}): VitePlugin {\n const walletServicePath = normalizeBase(opts.walletServicePath, '/wallet-service')\n const sdkBasePath = normalizeBase(opts.sdkBasePath, '/sdk')\n const coepMode = resolveCoepMode(opts.coepMode)\n\n const html = buildWalletServiceHtml(sdkBasePath)\n const offlineHtml = buildOfflineExportHtml(sdkBasePath)\n const sdkDistRoot = resolveSdkDistRoot()\n\n return {\n name: 'tatchi:wallet-service',\n apply: 'serve',\n enforce: 'pre',\n configureServer(server) {\n server.middlewares.use((req: any, res: any, next: any) => {\n if (!req.url) return next()\n const url = req.url.split('?')[0]\n if (url === walletServicePath) {\n res.statusCode = 200\n res.setHeader('Content-Type', 'text/html; charset=utf-8')\n applyCoepCorpIfNeeded(res, coepMode)\n res.end(html)\n return\n }\n next()\n })\n\n // Mount Offline Export routes here as well (no app module duplication)\n addOfflineExportDevRoutes(server, {\n sdkDistRoot,\n sdkBasePath,\n offlineHtml,\n includeAppModule: false,\n coepMode,\n })\n },\n }\n}\n\n/\n Dev plugin: force the correct `.wasm` MIME type (application/wasm) for any served wasm file.\n * Where it runs: both app and wallet-iframe dev servers.\n /\nexport function tatchiWasmMime(): VitePlugin {\n return {\n name: 'tatchi:wasm-mime',\n apply: 'serve',\n enforce: 'pre',\n configureServer(server) {\n server.middlewares.use((req: any, res: any, next: any) => {\n if (!req.url) return next()\n const url = req.url.split('?')[0]\n if (url.endsWith('.wasm')) {\n res.setHeader('Content-Type', 'application/wasm')\n }\n next()\n })\n },\n }\n}\n\n/\n Dev plugin: add Permissions-Policy (delegating WebAuthn + clipboard), COOP, optional COEP/CORP, and optional dev CSP.\n * Where it runs: both app and wallet-iframe dev servers.\n * Notes:\n * - Uses Structured Header format for Permissions-Policy (double-quoted origins).\n * - Wallet dev CSP can be toggled strict/compatible via opts.devCSP.\n /\nexport function tatchiHeaders(opts: DevHeadersOptions = {}): VitePlugin {\n const walletOriginRaw = opts.walletOrigin ?? process.env.VITE_WALLET_ORIGIN\n const walletOrigin = walletOriginRaw?.trim()\n const walletServicePath = normalizeBase(opts.walletServicePath \|\| process.env.VITE_WALLET_SERVICE_PATH, '/wallet-service')\n const sdkBasePath = normalizeBase(opts.sdkBasePath \|\| process.env.VITE_SDK_BASE_PATH, '/sdk')\n const devCSPMode = (opts.devCSP ?? (process.env.VITE_WALLET_DEV_CSP as 'strict' \| 'compatible' \| undefined))\n const coepMode = resolveCoepMode(opts.coepMode)\n\n // Build headers via shared helpers to avoid drift.\n const permissionsPolicy = buildPermissionsPolicy(walletOrigin)\n\n // Dev convenience: dynamic ROR from NEAR RPC (no relay dependency)\n // The dev server will fetch the allowlist from chain on demand when a contract id is provided.\n const rorContractId = (process.env.VITE_WEBAUTHN_CONTRACT_ID \|\| '').toString().trim()\n const rorMethod = (process.env.VITE_ROR_METHOD \|\| 'get_allowed_origins').toString().trim()\n const nearRpcUrl = (process.env.VITE_NEAR_RPC_URL \|\| 'https://test.rpc.fastnear.com').toString().trim()\n // Caching is handled inside fetchRorOriginsFromNear via TTL\n\n return {\n name: 'tatchi:dev-headers',\n apply: 'serve',\n enforce: 'pre',\n configureServer(server) {\n\n console.log('[tatchi] headers enabled', {\n walletServicePath,\n sdkBasePath,\n coepMode,\n rorContractId: rorContractId \|\| '(none)',\n nearRpcUrl\n })\n\n server.middlewares.use((req: any, res: any, next: any) => {\n const url = (req.url \|\| '').split('?')[0] \|\| ''\n const isWalletRoute = url === walletServicePath \|\| url === `${walletServicePath}/` \|\| url === `${walletServicePath}//`\n res.setHeader('Cross-Origin-Opener-Policy', isWalletRoute ? 'unsafe-none' : 'same-origin')\n if (coepMode !== 'off') {\n res.setHeader('Cross-Origin-Embedder-Policy', 'require-corp')\n res.setHeader('Cross-Origin-Resource-Policy', 'cross-origin')\n }\n res.setHeader('Permissions-Policy', permissionsPolicy)\n // Optional dev-time CSP for the wallet service page only (app pages are unaffected)\n if (isWalletRoute && devCSPMode) {\n const mode = devCSPMode === 'strict' ? 'strict' : 'compatible'\n const walletCsp = buildWalletCsp({ mode })\n res.setHeader('Content-Security-Policy', walletCsp)\n }\n // Resource hints: help parent pages preconnect to the wallet origin early in dev\n addPreconnectLink(res, walletOrigin)\n\n // Serve /.well-known/webauthn for ROR using chain state in dev\n const isWellKnown = url === '/.well-known/webauthn' \|\| url === '/.well-known/webauthn/'\n if (isWellKnown) {\n // Direct fetch from NEAR RPC (no relay). Caching handled inside helper.\n // Requires contract id; RPC URL falls back to a reliable public endpoint.\n if (rorContractId) {\n ;(async () => {\n try {\n const origins = await fetchRorOriginsFromNear({\n rpcUrl: nearRpcUrl,\n contractId: rorContractId,\n method: rorMethod,\n })\n res.statusCode = 200\n res.setHeader('Content-Type', 'application/json; charset=utf-8')\n res.setHeader('Cache-Control', 'max-age=60, stale-while-revalidate=600')\n res.end(JSON.stringify({ origins }))\n } catch (e) {\n console.warn('[tatchi] ROR dynamic fetch failed:', e)\n res.statusCode = 200\n res.setHeader('Content-Type', 'application/json; charset=utf-8')\n res.setHeader('Cache-Control', 'max-age=60, stale-while-revalidate=600')\n res.end(JSON.stringify({ origins: [] }))\n }\n })()\n return\n }\n // No configuration; respond with empty allowlist to avoid hard 404 in dev\n res.statusCode = 200\n res.setHeader('Content-Type', 'application/json; charset=utf-8')\n res.setHeader('Cache-Control', 'max-age=60, stale-while-revalidate=600')\n res.end(JSON.stringify({ origins: [] }))\n return\n }\n\n if (url.startsWith(`${sdkBasePath}/`)) {\n // Dev-only CORS for SDK assets served by Vite\n applyCoepCorpIfNeeded(res, coepMode)\n // Honor existing echo from SDK server; otherwise echo\n const ended = echoCorsFromRequest(res, req, { honorExistingAcaOrigin: true, handlePreflight: true })\n if (ended) return\n }\n next()\n })\n },\n }\n}\n\n/\n Dev plugin (composed): convenience entry that wires SDK server, WASM MIME, optional headers,\n * and (in wallet modes) the wallet service route.\n * Where it runs:\n * - App server: mode 'front-only' (or 'self-contained' when serving wallet pages on the same origin).\n * - Wallet-iframe server: modes 'wallet-only' or 'self-contained'.\n /\n/\n Compose dev plugins for serving SDK assets, wallet service HTML and dev headers.\n * External-facing entry for configuring either the app or wallet-iframe dev server.\n /\nfunction tatchiDevServer(options: Web3AuthnDevOptions = {}): VitePlugin {\n const mode: Required<Web3AuthnDevOptions>['mode'] = options.mode \|\| 'self-contained'\n const sdkBasePath = normalizeBase(options.sdkBasePath \|\| process.env.VITE_SDK_BASE_PATH, '/sdk')\n const walletServicePath = normalizeBase(options.walletServicePath \|\| process.env.VITE_WALLET_SERVICE_PATH, '/wallet-service')\n const walletOrigin = (options.walletOrigin ?? process.env.VITE_WALLET_ORIGIN)?.trim()\n const setDevHeaders = options.setDevHeaders !== false // default true\n const enableDebugRoutes = options.enableDebugRoutes === true\n const sdkDistRoot = resolveSdkDistRoot(options.sdkDistRoot)\n const coepMode = resolveCoepMode(options.coepMode)\n\n // Build the sub-plugins to keep logic small and testable\n const sdkPlugin = tatchiServeSdk({ sdkBasePath, sdkDistRoot, enableDebugRoutes, coepMode })\n const walletPlugin = tatchiWalletService({ walletServicePath, sdkBasePath, coepMode })\n const wasmMimePlugin = tatchiWasmMime()\n // Flip wallet CSP to strict by default in dev. Consumers can override via\n // VITE_WALLET_DEV_CSP or by composing tatchiHeaders directly.\n const headersPlugin = setDevHeaders\n ? tatchiHeaders({ walletOrigin, walletServicePath, sdkBasePath, devCSP: 'strict', coepMode })\n : undefined\n\n return {\n name: 'tatchi:dev',\n apply: 'serve',\n enforce: 'pre',\n configureServer(server) {\n // Always add WASM MIME + SDK server\n sdkPlugin.configureServer?.(server)\n wasmMimePlugin.configureServer?.(server)\n if (headersPlugin) headersPlugin.configureServer?.(server)\n\n // Mode-specific wallet service route\n if (mode === 'self-contained' \|\| mode === 'wallet-only') {\n walletPlugin.configureServer?.(server)\n }\n },\n }\n}\n\n// === Build-time helper: emit Cloudflare Pages/Netlify _headers ===\n// This plugin writes a _headers file into Vite's outDir with COOP and optional COEP and a\n// Permissions-Policy delegating WebAuthn to the configured wallet origin.\n// It is a no-op if a _headers file already exists (to avoid overriding app settings).\n/\n Build-time plugin: writes a Cloudflare Pages/Netlify-compatible `_headers` file into Vite's `outDir`.\n * Adds COOP + Permissions-Policy and optional COEP/CORP (configurable via coepMode) delegating WebAuthn to the configured wallet origin.\n * Where it runs: build for either the app or a static wallet host (not used in dev).\n * Notes: no-ops if `_headers` already exists in `outDir` (to avoid overriding platform config).\n /\nexport function tatchiBuildHeaders(opts: { walletOrigin?: string, cors?: { accessControlAllowOrigin?: string }, coepMode?: 'strict' \| 'off' } = {}): VitePlugin {\n const walletOriginRaw = opts.walletOrigin ?? process.env.VITE_WALLET_ORIGIN\n const walletOrigin = walletOriginRaw?.trim()\n const walletServicePath = normalizeBase(process.env.VITE_WALLET_SERVICE_PATH, '/wallet-service')\n const sdkBasePath = normalizeBase(process.env.VITE_SDK_BASE_PATH, '/sdk')\n const coepMode = resolveCoepMode(opts.coepMode)\n\n // Build headers via shared helpers to avoid drift between frameworks\n const permissionsPolicy = buildPermissionsPolicy(walletOrigin)\n const walletCsp = buildWalletCsp({ mode: 'strict' })\n\n let outDir = 'dist'\n\n // We intentionally return a broader shape than VitePlugin; cast at the end\n const plugin = {\n name: 'tatchi:build-headers',\n apply: 'build' as const,\n enforce: 'post' as const,\n // Capture the resolved outDir\n configResolved(config: any) {\n outDir = (config?.build?.outDir as string) \|\| outDir\n },\n generateBundle() {\n try {\n const hdrPath = path.join(outDir, '_headers')\n if (fs.existsSync(hdrPath)) {\n // Do not override existing headers; leave a note in build logs\n console.warn('[tatchi] _headers already exists in outDir; skipping auto-emission')\n } else {\n // Strict CSP is emitted only for wallet HTML routes; not for app pages.\n const contentLines: string[] = [\n '/',\n ' Cross-Origin-Opener-Policy: same-origin',\n ...(coepMode === 'off'\n ? []\n : [\n ' Cross-Origin-Embedder-Policy: require-corp',\n ' Cross-Origin-Resource-Policy: cross-origin',\n ]),\n ` Permissions-Policy: ${permissionsPolicy}`,\n '',\n `${walletServicePath}`,\n ' Cross-Origin-Opener-Policy: unsafe-none',\n ` Permissions-Policy: ${permissionsPolicy}`,\n ` Content-Security-Policy: ${walletCsp}`,\n `${walletServicePath}/`,\n ' Cross-Origin-Opener-Policy: unsafe-none',\n ` Permissions-Policy: ${permissionsPolicy}`,\n ` Content-Security-Policy: ${walletCsp}`,\n '/export-viewer',\n ' Cross-Origin-Opener-Policy: unsafe-none',\n ` Permissions-Policy: ${permissionsPolicy}`,\n '/export-viewer/',\n ' Cross-Origin-Opener-Policy: unsafe-none',\n ` Permissions-Policy: ${permissionsPolicy}`,\n // Offline export cache policy (no-cache for HTML/SW; immutable for other assets)\n '/offline-export',\n ' Cache-Control: no-cache',\n '/offline-export/',\n ' Cache-Control: no-cache',\n '/offline-export/index.html',\n ' Cache-Control: no-cache',\n '/offline-export/sw.js',\n ' Cache-Control: no-cache',\n '/offline-export/precache.manifest.json',\n ' Cache-Control: no-cache',\n '/offline-export/manifest.webmanifest',\n ' Cache-Control: no-cache',\n '/offline-export/offline-export-app.js',\n ' Cache-Control: no-cache',\n '/offline-export/',\n ' Cache-Control: public, max-age=31536000, immutable',\n ]\n // Optional: emit CORS headers when explicitly configured via plugin option.\n // Prefer a single source of truth (platform or plugin), not both.\n const configuredAcaOrigin = (opts.cors && typeof opts.cors.accessControlAllowOrigin === 'string'\n ? opts.cors.accessControlAllowOrigin.trim()\n : undefined) as string \| undefined;\n if (configuredAcaOrigin) {\n contentLines.push(\n `${sdkBasePath}/`,\n ` Access-Control-Allow-Origin: ${configuredAcaOrigin}`,\n )\n }\n const content = contentLines.join('\\n') + '\\n'\n fs.mkdirSync(outDir, { recursive: true })\n fs.writeFileSync(hdrPath, content, 'utf-8')\n console.log('[tatchi] emitted _headers with COOP' + (coepMode === 'off' ? '' : '/COEP/CORP') + ' + Permissions-Policy' + (configuredAcaOrigin ? ' + CORS' : ''))\n }\n\n const sdkDir = path.join(outDir, sdkBasePath.replace(/^\\//, ''))\n try { fs.mkdirSync(sdkDir, { recursive: true }) } catch {}\n const shimPath = path.join(sdkDir, 'wallet-shims.js')\n if (!fs.existsSync(shimPath)) {\n fs.writeFileSync(shimPath, WALLET_SHIM_SOURCE, 'utf-8')\n }\n const cssPath = path.join(sdkDir, 'wallet-service.css')\n if (!fs.existsSync(cssPath)) {\n fs.writeFileSync(cssPath, WALLET_SURFACE_CSS, 'utf-8')\n }\n\n // Emit minimal wallet-service/index.html if the app hasn't provided one\n const walletRel = walletServicePath.replace(/^\\//, '')\n const wsDir = path.join(outDir, walletRel)\n const wsHtml = path.join(wsDir, 'index.html')\n if (!fs.existsSync(wsHtml)) {\n fs.mkdirSync(wsDir, { recursive: true })\n fs.writeFileSync(wsHtml, buildWalletServiceHtml(sdkBasePath), 'utf-8')\n console.log(`[tatchi] emitted ${path.posix.join('/', walletRel, 'index.html')} (minimal wallet service)`)\n }\n\n // Emit minimal export viewer HTML for production\n const evDir = path.join(outDir, 'export-viewer')\n const evHtml = path.join(evDir, 'index.html')\n if (!fs.existsSync(evHtml)) {\n fs.mkdirSync(evDir, { recursive: true })\n fs.writeFileSync(evHtml, buildExportViewerHtml(sdkBasePath), 'utf-8')\n console.log('[tatchi] emitted /export-viewer/index.html (minimal export viewer)')\n }\n\n // Emit offline-export assets (SW, workers, app, HTML, manifest, precache) via helper\n try {\n const sdkDistRoot = resolveSdkDistRoot()\n emitOfflineExportAssets({ outDir, sdkBasePath, sdkDistRoot })\n } catch (e) {\n console.warn('[tatchi] failed to emit offline-export assets:', e)\n }\n } catch (e) {\n console.warn('[tatchi] failed to emit _headers:', e)\n }\n },\n }\n\n return plugin as unknown as VitePlugin\n}\n\n// Small test helpers to keep unit tests decoupled from Vite server implementation\nexport function computeDevPermissionsPolicy(walletOrigin?: string): string {\n return buildPermissionsPolicy(walletOrigin)\n}\n\nexport function computeDevWalletCsp(mode: 'strict' \| 'compatible' = 'strict'): string {\n return buildWalletCsp({ mode })\n}\n\nexport function tatchiWalletServer(options: Omit<Web3AuthnDevOptions, 'mode'> = {}): VitePlugin {\n return tatchiDevServer({ ...options, mode: 'wallet-only' })\n}\n\nexport function tatchiAppServer(options: Omit<Web3AuthnDevOptions, 'mode'> = {}): VitePlugin {\n return tatchiDevServer({ ...options, mode: 'front-only' })\n}\n\n/*\n Convenience wrapper: app origin helper that combines dev-time headers with optional\n * build-time headers emission for static hosts.\n \n Dev-time (serve): applies COOP + Permissions-Policy, plus optional COEP/CORP, via tatchiAppServer.\n * Build-time (build): when `emitHeaders` is true, writes a Cloudflare Pages/Netlify\n * `_headers` file into Vite's `outDir` via tatchiBuildHeaders, scoping strict CSP to\n * wallet HTML routes only.\n * - Emits: `COOP: same-origin`, `Permissions-Policy: …`, and (when `coepMode === 'strict'`) `COEP: require-corp` + `CORP: cross-origin`.\n * - No-op if a `_headers` file already exists in `outDir` (avoids clobbering CI/platform rules).\n \n Notes\n * - Keeps production header emission opt-in to avoid surprising overrides when apps\n * already manage headers via custom servers or platform rules.\n * - Returns a plugin array for ergonomics; Vite accepts arrays in the `plugins` list.\n /\nexport function tatchiApp(options: Omit<Web3AuthnDevOptions, 'mode'> & { emitHeaders?: boolean } = {}): any[] / Vite Plugin[] / {\n const { emitHeaders, ...devOpts } = options\n const walletOrigin = (devOpts.walletOrigin ?? process.env.VITE_WALLET_ORIGIN)?.trim()\n const app = tatchiAppServer(devOpts)\n // Build-time emission is opt-in and will no-op if `_headers` already exists.\n const hdr = emitHeaders ? tatchiBuildHeaders({ walletOrigin, coepMode: devOpts.coepMode }) : undefined\n return [app, hdr].filter(Boolean) as any[]\n}\n\n/\n Convenience wrapper: wallet origin helper that combines dev-time wallet server\n * with optional build-time headers emission for static hosts.\n \n Dev-time (serve): serves `/wallet-service` and `/sdk/` plus headers via tatchiWalletServer.\n Build-time (build): when `emitHeaders` is true, writes a Cloudflare Pages/Netlify\n * `_headers` file into Vite's `outDir` via tatchiBuildHeaders, scoping strict CSP to\n * wallet HTML routes only.\n * - Emits: `COOP: same-origin` (wallet HTML routes use `unsafe-none`), `Permissions-Policy: …`, and (when `coepMode === 'strict'`) `COEP: require-corp` + `CORP: cross-origin`.\n * - No-op if a `_headers` file already exists in `outDir` (avoids clobbering CI/platform rules).\n \n Notes\n * - Keeps production header emission opt-in to avoid overriding platform/server configs.\n * - Returns a plugin array for ergonomics; Vite accepts arrays in the `plugins` list.\n /\nexport function tatchiWallet(options: Omit<Web3AuthnDevOptions, 'mode'> & { emitHeaders?: boolean } = {}): any[] / Vite Plugin[] */ {\n const { emitHeaders, ...devOpts } = options\n const walletOrigin = (devOpts.walletOrigin ?? process.env.VITE_WALLET_ORIGIN)?.trim()\n const wallet = tatchiWalletServer(devOpts)\n // Build-time emission is opt-in and will no-op if `_headers` already exists.\n const hdr = emitHeaders ? tatchiBuildHeaders({ walletOrigin, coepMode: devOpts.coepMode }) : undefined\n return [wallet, hdr].filter(Boolean) as any[]\n}\n"],"mappings":";;;;;;;;;;;;;;AAwFA,SAAS,QAAQ,GAAG,YAA0C;AAC5D,MAAK,MAAM,QAAQ,WACjB,KAAI;EACF,MAAM,OAAOA,QAAG,SAAS;AACzB,MAAI,KAAK,SAAU,QAAO;SACpB;AAEV,QAAO;;AAMT,MAAM,qBAAqB;AAC3B,MAAM,qBAAqB;CACzB;CACA;CACA;CAEA;CACA;CAEA;CACA;CACA;CAIA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;EACA,KAAK;;;;;;;AAQP,SAAgB,eAAe,OAAwB,IAAgB;CACrE,MAAM,iBAAiBC,mCAAc,KAAK,aAAa;CACvD,MAAM,cAAcC,wCAAmB,KAAK;CAC5C,MAAM,oBAAoB,KAAK,sBAAsB;CACrD,MAAM,WAAWC,qCAAgB,KAAK;CACtC,MAAM,cAAcC,uCAAuB;CAG3C,MAAM,QAAQ,MAAM,KAAK,IAAI,IAAI,CAAC,gBAAgBH,mCAAc,WAC7D,MAAM,GAAG,MAAM,EAAE,SAAS,EAAE;AAG/B,QAAO;EACL,MAAM;EACN,OAAO;EACP,SAAS;EACT,gBAAgB,QAAQ;AAEtB,6CAA0B,QAAQ;IAChC;IACA,aAAa;IACb;IACA,kBAAkB;IAClB;;AAGF,UAAO,YAAY,KAAK,KAAU,KAAU,SAAc;IACxD,MAAM,OAAO,IAAI,OAAO,IAAI,MAAM,KAAK;AACvC,QAAI,QAAQ,iBAAiB,oBAAoB;AAC/C,SAAI,aAAa;AACjB,SAAI,UAAU,gBAAgB;AAE9B,gDAAsB,KAAK;AAE3B,8CAAoB,KAAK,KAAK,EAAE,iBAAiB;AACjD,SAAI,IAAI;AACR;;AAEF,QAAI,QAAQ,iBAAiB,uBAAuB;AAClD,SAAI,aAAa;AACjB,SAAI,UAAU,gBAAgB;AAE9B,gDAAsB,KAAK;AAE3B,8CAAoB,KAAK,KAAK,EAAE,iBAAiB;AACjD,SAAI,IAAI;AACR;;AAEF;;AAIF,OAAI,kBACF,QAAO,YAAY,IAAI,gBAAgB,KAAU,QAAa;AAC5D,QAAI,UAAU,gBAAgB;AAC9B,QAAI,IAAI;;AAKZ,UAAO,YAAY,KAAK,KAAU,KAAU,SAAc;AACxD,QAAI,CAAC,IAAI,IAAK,QAAO;IACrB,MAAM,MAAM,IAAI,IAAI,MAAM,KAAK;IAE/B,MAAM,YAAY,MAAM,MAAM,MAAM,IAAI,WAAW,IAAI;AACvD,QAAI,CAAC,UAAW,QAAO;IAEvB,MAAM,MAAM,IAAI,OAAO,YAAY,KAAK;IAExC,MAAM,YAAY,QAChBI,UAAK,KAAK,aAAa,OAAO,OAAO,MACrCA,UAAK,KAAK,aAAa,MACvBA,UAAK,KAAK,aAAa,OAAO;AAGhC,QAAI,CAAC,WAAW;AACd,SAAI,aAAa;AACjB,SAAI,UAAU,gBAAgB;AAC9B,SAAI,IAAI,KAAK,UAAU;MAAE,OAAO;MAAuB,MAAM;;AAC7D;;AAGF,wCAAe,KAAK;AAEpB,+CAAsB,KAAK;AAE3B,6CAAoB,KAAK,KAAK,EAAE,iBAAiB;IACjD,MAAM,SAASL,QAAG,iBAAiB;AACnC,WAAO,GAAG,eAAe;AACzB,WAAO,KAAK;;;;;;;;;AAUpB,SAAgB,oBAAoB,OAA6B,IAAgB;CAC/E,MAAM,oBAAoBC,mCAAc,KAAK,mBAAmB;CAChE,MAAM,cAAcA,mCAAc,KAAK,aAAa;CACpD,MAAM,WAAWE,qCAAgB,KAAK;CAEtC,MAAM,OAAOG,4CAAuB;CACpC,MAAM,cAAcF,uCAAuB;CAC3C,MAAM,cAAcF;AAEpB,QAAO;EACL,MAAM;EACN,OAAO;EACP,SAAS;EACT,gBAAgB,QAAQ;AACtB,UAAO,YAAY,KAAK,KAAU,KAAU,SAAc;AACxD,QAAI,CAAC,IAAI,IAAK,QAAO;IACrB,MAAM,MAAM,IAAI,IAAI,MAAM,KAAK;AAC/B,QAAI,QAAQ,mBAAmB;AAC7B,SAAI,aAAa;AACjB,SAAI,UAAU,gBAAgB;AAC9B,gDAAsB,KAAK;AAC3B,SAAI,IAAI;AACR;;AAEF;;AAIF,6CAA0B,QAAQ;IAChC;IACA;IACA;IACA,kBAAkB;IAClB;;;;;;;;;AAUR,SAAgB,iBAA6B;AAC3C,QAAO;EACL,MAAM;EACN,OAAO;EACP,SAAS;EACT,gBAAgB,QAAQ;AACtB,UAAO,YAAY,KAAK,KAAU,KAAU,SAAc;AACxD,QAAI,CAAC,IAAI,IAAK,QAAO;IACrB,MAAM,MAAM,IAAI,IAAI,MAAM,KAAK;AAC/B,QAAI,IAAI,SAAS,SACf,KAAI,UAAU,gBAAgB;AAEhC;;;;;;;;;;;;AAaR,SAAgB,cAAc,OAA0B,IAAgB;CACtE,MAAM,kBAAkB,KAAK,gBAAgB,QAAQ,IAAI;CACzD,MAAM,eAAe,iBAAiB;CACtC,MAAM,oBAAoBD,mCAAc,KAAK,qBAAqB,QAAQ,IAAI,0BAA0B;CACxG,MAAM,cAAcA,mCAAc,KAAK,eAAe,QAAQ,IAAI,oBAAoB;CACtF,MAAM,aAAc,KAAK,UAAW,QAAQ,IAAI;CAChD,MAAM,WAAWE,qCAAgB,KAAK;CAGtC,MAAM,oBAAoBI,uCAAuB;CAIjD,MAAM,iBAAiB,QAAQ,IAAI,6BAA6B,IAAI,WAAW;CAC/E,MAAM,aAAa,QAAQ,IAAI,mBAAmB,uBAAuB,WAAW;CACpF,MAAM,cAAc,QAAQ,IAAI,qBAAqB,iCAAiC,WAAW;AAGjG,QAAO;EACL,MAAM;EACN,OAAO;EACP,SAAS;EACT,gBAAgB,QAAQ;AAEtB,WAAQ,IAAI,4BAA4B;IACtC;IACA;IACA;IACA,eAAe,iBAAiB;IAChC;;AAGF,UAAO,YAAY,KAAK,KAAU,KAAU,SAAc;IACxD,MAAM,OAAO,IAAI,OAAO,IAAI,MAAM,KAAK,MAAM;IAC7C,MAAM,gBAAgB,QAAQ,qBAAqB,QAAQ,GAAG,kBAAkB,MAAM,QAAQ,GAAG,kBAAkB;AACnH,QAAI,UAAU,8BAA8B,gBAAgB,gBAAgB;AAC5E,QAAI,aAAa,OAAO;AACtB,SAAI,UAAU,gCAAgC;AAC9C,SAAI,UAAU,gCAAgC;;AAEhD,QAAI,UAAU,sBAAsB;AAEpC,QAAI,iBAAiB,YAAY;KAC/B,MAAM,OAAO,eAAe,WAAW,WAAW;KAClD,MAAM,YAAYC,+BAAe,EAAE;AACnC,SAAI,UAAU,2BAA2B;;AAG3C,2CAAkB,KAAK;IAGvB,MAAM,cAAc,QAAQ,2BAA2B,QAAQ;AAC/D,QAAI,aAAa;AAGf,SAAI,eAAe;AAChB,OAAC,YAAY;AACZ,WAAI;QACF,MAAM,UAAU,MAAMC,6CAAwB;SAC5C,QAAQ;SACR,YAAY;SACZ,QAAQ;;AAEV,YAAI,aAAa;AACjB,YAAI,UAAU,gBAAgB;AAC9B,YAAI,UAAU,iBAAiB;AAC/B,YAAI,IAAI,KAAK,UAAU,EAAE;gBAClB,GAAG;AACV,gBAAQ,KAAK,sCAAsC;AACnD,YAAI,aAAa;AACjB,YAAI,UAAU,gBAAgB;AAC9B,YAAI,UAAU,iBAAiB;AAC/B,YAAI,IAAI,KAAK,UAAU,EAAE,SAAS;;;AAGtC;;AAGF,SAAI,aAAa;AACjB,SAAI,UAAU,gBAAgB;AAC9B,SAAI,UAAU,iBAAiB;AAC/B,SAAI,IAAI,KAAK,UAAU,EAAE,SAAS;AAClC;;AAGF,QAAI,IAAI,WAAW,GAAG,YAAY,KAAK;AAErC,gDAAsB,KAAK;KAE3B,MAAM,QAAQC,yCAAoB,KAAK,KAAK;MAAE,wBAAwB;MAAM,iBAAiB;;AAC7F,SAAI,MAAO;;AAEb;;;;;;;;;;;;;;;;AAiBR,SAAS,gBAAgB,UAA+B,IAAgB;CACtE,MAAMC,OAA8C,QAAQ,QAAQ;CACpE,MAAM,cAAcV,mCAAc,QAAQ,eAAe,QAAQ,IAAI,oBAAoB;CACzF,MAAM,oBAAoBA,mCAAc,QAAQ,qBAAqB,QAAQ,IAAI,0BAA0B;CAC3G,MAAM,gBAAgB,QAAQ,gBAAgB,QAAQ,IAAI,qBAAqB;CAC/E,MAAM,gBAAgB,QAAQ,kBAAkB;CAChD,MAAM,oBAAoB,QAAQ,sBAAsB;CACxD,MAAM,cAAcC,wCAAmB,QAAQ;CAC/C,MAAM,WAAWC,qCAAgB,QAAQ;CAGzC,MAAM,YAAY,eAAe;EAAE;EAAa;EAAa;EAAmB;;CAChF,MAAM,eAAe,oBAAoB;EAAE;EAAmB;EAAa;;CAC3E,MAAM,iBAAiB;CAGvB,MAAM,gBAAgB,gBAClB,cAAc;EAAE;EAAc;EAAmB;EAAa,QAAQ;EAAU;MAChF;AAEJ,QAAO;EACL,MAAM;EACN,OAAO;EACP,SAAS;EACT,gBAAgB,QAAQ;AAEtB,aAAU,kBAAkB;AAC5B,kBAAe,kBAAkB;AACjC,OAAI,cAAe,eAAc,kBAAkB;AAGnD,OAAI,SAAS,oBAAoB,SAAS,cACxC,cAAa,kBAAkB;;;;;;;;;;AAgBvC,SAAgB,mBAAmB,OAA6G,IAAgB;CAC9J,MAAM,kBAAkB,KAAK,gBAAgB,QAAQ,IAAI;CACzD,MAAM,eAAe,iBAAiB;CACtC,MAAM,oBAAoBF,mCAAc,QAAQ,IAAI,0BAA0B;CAC9E,MAAM,cAAcA,mCAAc,QAAQ,IAAI,oBAAoB;CAClE,MAAM,WAAWE,qCAAgB,KAAK;CAGtC,MAAM,oBAAoBI,uCAAuB;CACjD,MAAM,YAAYC,+BAAe,EAAE,MAAM;CAEzC,IAAI,SAAS;CAGb,MAAM,SAAS;EACb,MAAM;EACN,OAAO;EACP,SAAS;EAET,eAAe,QAAa;AAC1B,YAAU,QAAQ,OAAO,UAAqB;;EAEhD,iBAAiB;AACf,OAAI;IACF,MAAM,UAAUH,UAAK,KAAK,QAAQ;AAClC,QAAIL,QAAG,WAAW,SAEhB,SAAQ,KAAK;SACR;KAEL,MAAMY,eAAyB;MAC7B;MACA;MACA,GAAI,aAAa,QACb,KACA,CACE,gDACA;MAEN,yBAAyB;MACzB;MACA,GAAG;MACH;MACA,yBAAyB;MACzB,8BAA8B;MAC9B,GAAG,kBAAkB;MACrB;MACA,yBAAyB;MACzB,8BAA8B;MAC9B;MACA;MACA,yBAAyB;MACzB;MACA;MACA,yBAAyB;MAEzB;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;;KAIF,MAAM,sBAAuB,KAAK,QAAQ,OAAO,KAAK,KAAK,6BAA6B,WACpF,KAAK,KAAK,yBAAyB,SACnC;AACJ,SAAI,oBACF,cAAa,KACX,GAAG,YAAY,KACf,kCAAkC;KAGtC,MAAM,UAAU,aAAa,KAAK,QAAQ;AAC1C,aAAG,UAAU,QAAQ,EAAE,WAAW;AAClC,aAAG,cAAc,SAAS,SAAS;AACnC,aAAQ,IAAI,yCAAyC,aAAa,QAAQ,KAAK,gBAAgB,2BAA2B,sBAAsB,YAAY;;IAG9J,MAAM,SAASP,UAAK,KAAK,QAAQ,YAAY,QAAQ,OAAO;AAC5D,QAAI;AAAE,aAAG,UAAU,QAAQ,EAAE,WAAW;YAAgB;IACxD,MAAM,WAAWA,UAAK,KAAK,QAAQ;AACnC,QAAI,CAACL,QAAG,WAAW,UACjB,SAAG,cAAc,UAAU,oBAAoB;IAEjD,MAAM,UAAUK,UAAK,KAAK,QAAQ;AAClC,QAAI,CAACL,QAAG,WAAW,SACjB,SAAG,cAAc,SAAS,oBAAoB;IAIhD,MAAM,YAAY,kBAAkB,QAAQ,OAAO;IACnD,MAAM,QAAQK,UAAK,KAAK,QAAQ;IAChC,MAAM,SAASA,UAAK,KAAK,OAAO;AAChC,QAAI,CAACL,QAAG,WAAW,SAAS;AAC1B,aAAG,UAAU,OAAO,EAAE,WAAW;AACjC,aAAG,cAAc,QAAQM,4CAAuB,cAAc;AAC9D,aAAQ,IAAI,oBAAoBD,UAAK,MAAM,KAAK,KAAK,WAAW,cAAc;;IAIhF,MAAM,QAAQA,UAAK,KAAK,QAAQ;IAChC,MAAM,SAASA,UAAK,KAAK,OAAO;AAChC,QAAI,CAACL,QAAG,WAAW,SAAS;AAC1B,aAAG,UAAU,OAAO,EAAE,WAAW;AACjC,aAAG,cAAc,QAAQa,2CAAsB,cAAc;AAC7D,aAAQ,IAAI;;AAId,QAAI;KACF,MAAM,cAAcX;AACpB,6CAAwB;MAAE;MAAQ;MAAa;;aACxC,GAAG;AACV,aAAQ,KAAK,kDAAkD;;YAE1D,GAAG;AACV,YAAQ,KAAK,qCAAqC;;;;AAKxD,QAAO;;AAIT,SAAgB,4BAA4B,cAA+B;AACzE,QAAOK,uCAAuB;;AAGhC,SAAgB,oBAAoB,OAAgC,UAAkB;AACpF,QAAOC,+BAAe,EAAE;;AAG1B,SAAgB,mBAAmB,UAA6C,IAAgB;AAC9F,QAAO,gBAAgB;EAAE,GAAG;EAAS,MAAM;;;AAG7C,SAAgB,gBAAgB,UAA6C,IAAgB;AAC3F,QAAO,gBAAgB;EAAE,GAAG;EAAS,MAAM;;;;;;;;;;;;;;;;;;;AAmB7C,SAAgB,UAAU,UAAyE,IAA+B;CAChI,MAAM,EAAE,YAAa,GAAG,YAAY;CACpC,MAAM,gBAAgB,QAAQ,gBAAgB,QAAQ,IAAI,qBAAqB;CAC/E,MAAM,MAAM,gBAAgB;CAE5B,MAAM,MAAM,cAAc,mBAAmB;EAAE;EAAc,UAAU,QAAQ;MAAc;AAC7F,QAAO,CAAC,KAAK,KAAK,OAAO;;;;;;;;;;;;;;;;;AAkB3B,SAAgB,aAAa,UAAyE,IAA+B;CACnI,MAAM,EAAE,YAAa,GAAG,YAAY;CACpC,MAAM,gBAAgB,QAAQ,gBAAgB,QAAQ,IAAI,qBAAqB;CAC/E,MAAM,SAAS,mBAAmB;CAElC,MAAM,MAAM,cAAc,mBAAmB;EAAE;EAAc,UAAU,QAAQ;MAAc;AAC7F,QAAO,CAAC,QAAQ,KAAK,OAAO"}
1	+ {"version":3,"file":"vite.js","names":["fs","toBasePath","resolveSdkDistRoot","resolveCoepMode","buildOfflineExportHtml","path","buildWalletServiceHtml","buildPermissionsPolicy","buildWalletCsp","fetchRorOriginsFromNear","echoCorsFromRequest","mode: Required<Web3AuthnDevOptions>['mode']","contentLines: string[]","buildExportViewerHtml"],"sources":["../../../src/plugins/vite.ts"],"sourcesContent":["// Minimal Vite dev plugin(s) to support Passkey Manager modes.\n// See docs/passkey-manager-modes.md (Vite Plugin section).\n//\n// What these plugins do:\n// - Serve SDK assets under a base path, expose a wallet service route,\n// - Add dev headers (COOP + Permissions-Policy, optional COEP/CORP), and enforce WASM MIME.\n// - IMPORTANT: Strict CSP is scoped only to wallet HTML routes (/wallet-service, /export-viewer),\n// not to the host app pages. App routes remain free to use inline styles/scripts.\n\nimport * as fs from 'node:fs'\nimport * as path from 'node:path'\nimport { buildPermissionsPolicy, buildWalletCsp } from './headers'\nimport {\n addPreconnectLink,\n buildWalletServiceHtml,\n buildExportViewerHtml,\n applyCoepCorpIfNeeded,\n echoCorsFromRequest,\n fetchRorOriginsFromNear,\n toBasePath,\n resolveCoepMode,\n resolveSdkDistRoot,\n} from './plugin-utils'\nimport { addOfflineExportDevRoutes, buildOfflineExportHtml, emitOfflineExportAssets } from './offline'\nimport { setContentType } from './plugin-utils'\n\nexport type VitePlugin = {\n name: string\n apply?: 'serve' \| 'build'\n enforce?: 'pre' \| 'post'\n configureServer?: (server: any) => void \| Promise<void>\n}\nexport type ViteLikePlugin = VitePlugin\n\nexport type Web3AuthnDevOptions = {\n mode?: 'self-contained' \| 'front-only' \| 'wallet-only'\n sdkDistRoot?: string\n sdkBasePath?: string\n walletServicePath?: string\n walletOrigin?: string\n setDevHeaders?: boolean\n enableDebugRoutes?: boolean\n /*\n Controls Cross-Origin-Embedder-Policy (COEP) behavior in dev.\n * - 'off' (default): do not emit COEP/CORP on app pages.\n * - 'strict': emit `Cross-Origin-Embedder-Policy: require-corp`\n * and `Cross-Origin-Resource-Policy: cross-origin` on app pages.\n \n Tip: set `VITE_COEP_MODE=strict` in tests/CI to enable isolation automatically.\n /\n coepMode?: 'strict' \| 'off'\n}\n\nexport type ServeSdkOptions = {\n sdkDistRoot?: string\n sdkBasePath?: string\n enableDebugRoutes?: boolean\n coepMode?: 'strict' \| 'off'\n}\n\nexport type WalletServiceOptions = {\n walletServicePath?: string\n sdkBasePath?: string\n coepMode?: 'strict' \| 'off'\n}\n\nexport type DevHeadersOptions = {\n walletOrigin?: string\n walletServicePath?: string\n sdkBasePath?: string\n /\n Optional dev-time CSP for the wallet service route.\n * - 'strict': no inline scripts/styles (mirrors production defaults)\n * - 'compatible': allows inline scripts/styles (useful for debugging)\n /\n devCSP?: 'strict' \| 'compatible'\n /\n Controls Cross-Origin-Embedder-Policy (COEP) behavior in dev.\n * - 'off' (default): do not emit COEP/CORP headers on app pages.\n * - 'strict': emit COEP/CORP headers on app pages.\n /\n coepMode?: 'strict' \| 'off'\n}\n\n/\n Return the first candidate path that exists and is a file.\n * Helper for robust /sdk/* asset resolution on dev servers (app and wallet).\n /\nfunction tryFile(...candidates: string[]): string \| undefined {\n for (const file of candidates) {\n try {\n const stat = fs.statSync(file)\n if (stat.isFile()) return file\n } catch {}\n }\n return undefined\n}\n\n// RPC helpers are provided by plugin-utils to share logic across frameworks.\n\n// Shared assets emitted/served for the wallet service bootstrap.\nconst WALLET_SHIM_SOURCE = \"window.global \|\|= window; window.process \|\|= { env: {} };\\n\"\nconst WALLET_SURFACE_CSS = [\n 'html, body { background: transparent !important; margin:0; padding:0; }',\n 'html, body { color-scheme: normal; }',\n '',\n // Class-based surface for strict CSP setups toggled by JS\n 'html.w3a-transparent, body.w3a-transparent { background: transparent !important; margin:0; padding:0; color-scheme: normal; }',\n '',\n // Minimal portal styles used by confirm-ui (no animation; child components handle transitions)\n '.w3a-portal { position: relative; z-index: 2147483647; opacity: 0; pointer-events: none; }',\n '.w3a-portal.w3a-portal--visible { opacity: 1; pointer-events: auto; }',\n '',\n // Provide baseline tokens only when the document does not declare a theme.\n // This avoids overriding :root[data-w3a-theme] values supplied by token sheet\n // or integrator-injected themes.\n ':root:not([data-w3a-theme]) {',\n ' --w3a-colors-textPrimary: #f6f7f8;',\n ' --w3a-colors-textSecondary: rgba(255,255,255,0.7);',\n ' --w3a-colors-surface: rgba(255,255,255,0.08);',\n ' --w3a-colors-surface2: rgba(255,255,255,0.06);',\n ' --w3a-colors-surface3: rgba(255,255,255,0.04);',\n ' --w3a-colors-borderPrimary: rgba(255,255,255,0.14);',\n ' --w3a-colors-borderSecondary: rgba(255,255,255,0.1);',\n ' --w3a-colors-colorBackground: #0b0c10;',\n ' / Default viewport custom properties for width/height calculations /',\n ' --w3a-vw: 100vw;',\n ' --w3a-vh: 100vh;',\n '}',\n '',\n].join('\\n')\n\n/\n Tatchi SDK plugin: serve SDK assets under a stable base (default: /sdk) with optional COEP/CORP (strict mode) and permissive CORS.\n * Where it runs: both the app server and the wallet-iframe server.\n * - App server: lets host pages and Lit components load SDK CSS/JS locally.\n * - Wallet server: used by /wallet-service to load wallet-iframe-host.js and related CSS/JS.\n /\nexport function tatchiServeSdk(opts: ServeSdkOptions = {}): VitePlugin {\n const configuredBase = toBasePath(opts.sdkBasePath, '/sdk')\n const sdkDistRoot = resolveSdkDistRoot(opts.sdkDistRoot)\n const enableDebugRoutes = opts.enableDebugRoutes === true\n const coepMode = resolveCoepMode(opts.coepMode)\n const offlineHtml = buildOfflineExportHtml(configuredBase)\n\n // In dev we want both '/sdk' and a custom base to work.\n const bases = Array.from(new Set([configuredBase, toBasePath('/sdk')]))\n .sort((a, b) => b.length - a.length)\n // Prefer longest base match first (e.g., '/sdk/esm/react' before '/sdk')\n\n return {\n name: 'tatchi:serve-sdk',\n apply: 'serve',\n enforce: 'pre',\n configureServer(server) {\n // Mount Offline Export dev routes once here (includes app module + chunks)\n addOfflineExportDevRoutes(server, {\n sdkDistRoot,\n sdkBasePath: configuredBase,\n offlineHtml,\n includeAppModule: true,\n coepMode,\n })\n // Serve a tiny shim as a virtual asset to enable strict CSP (no inline scripts)\n server.middlewares.use((req: any, res: any, next: any) => {\n const url = (req.url \|\| '').split('?')[0]\n if (url === configuredBase + '/wallet-shims.js') {\n res.statusCode = 200\n res.setHeader('Content-Type', 'application/javascript; charset=utf-8')\n // Align with SDK asset headers so COEP/CORP environments can import\n applyCoepCorpIfNeeded(res, coepMode)\n // Dev-only CORS echo (no preflight handling on this route)\n echoCorsFromRequest(res, req, { handlePreflight: false })\n res.end(WALLET_SHIM_SOURCE)\n return\n }\n if (url === configuredBase + '/wallet-service.css') {\n res.statusCode = 200\n res.setHeader('Content-Type', 'text/css; charset=utf-8')\n // Important: provide CORP for cross‑origin CSS so COEP documents can load it\n applyCoepCorpIfNeeded(res, coepMode)\n // Dev-only CORS echo (no preflight handling on this route)\n echoCorsFromRequest(res, req, { handlePreflight: false })\n res.end(WALLET_SURFACE_CSS)\n return\n }\n next()\n })\n\n // Optional debug route to confirm resolution\n if (enableDebugRoutes) {\n server.middlewares.use('/__sdk-root', (req: any, res: any) => {\n res.setHeader('Content-Type', 'text/plain; charset=utf-8')\n res.end(sdkDistRoot)\n })\n }\n\n // Serve files under any recognized base from sdkDistRoot with fallbacks\n server.middlewares.use((req: any, res: any, next: any) => {\n if (!req.url) return next()\n const url = req.url.split('?')[0]\n\n const matchBase = bases.find((b) => url.startsWith(b + '/'))\n if (!matchBase) return next()\n\n const rel = url.slice((matchBase + '/').length)\n // Try dist/esm/sdk first (canonical), then common fallbacks\n const candidate = tryFile(\n path.join(sdkDistRoot, 'esm', 'sdk', rel),\n path.join(sdkDistRoot, rel),\n path.join(sdkDistRoot, 'esm', rel)\n )\n\n if (!candidate) {\n res.statusCode = 404\n res.setHeader('Content-Type', 'application/json; charset=utf-8')\n res.end(JSON.stringify({ error: 'SDK asset not found', path: rel }))\n return\n }\n\n setContentType(res, candidate)\n // SDK assets need COEP headers to work in wallet iframe with COEP enabled\n applyCoepCorpIfNeeded(res, coepMode)\n // Dev-only CORS echo (no preflight handling here)\n echoCorsFromRequest(res, req, { handlePreflight: false })\n const stream = fs.createReadStream(candidate)\n stream.on('error', () => next())\n stream.pipe(res)\n })\n },\n }\n}\n\n/\n Dev plugin: expose the wallet service HTML route (default: /wallet-service) that links only external CSS/JS.\n * Where it runs: wallet-iframe dev server (wallet origin). Used by tatchiWalletServer.\n /\nexport function tatchiWalletService(opts: WalletServiceOptions = {}): VitePlugin {\n const walletServicePath = toBasePath(opts.walletServicePath, '/wallet-service')\n const sdkBasePath = toBasePath(opts.sdkBasePath, '/sdk')\n const coepMode = resolveCoepMode(opts.coepMode)\n\n const html = buildWalletServiceHtml(sdkBasePath)\n const offlineHtml = buildOfflineExportHtml(sdkBasePath)\n const sdkDistRoot = resolveSdkDistRoot()\n\n return {\n name: 'tatchi:wallet-service',\n apply: 'serve',\n enforce: 'pre',\n configureServer(server) {\n server.middlewares.use((req: any, res: any, next: any) => {\n if (!req.url) return next()\n const url = req.url.split('?')[0]\n const isWalletRoute = url === walletServicePath \|\| url === `${walletServicePath}/` \|\| url === `${walletServicePath}//`\n if (isWalletRoute) {\n res.statusCode = 200\n res.setHeader('Content-Type', 'text/html; charset=utf-8')\n // Important: allow embedding this wallet HTML into COEP=require-corp apps even\n // when the wallet itself is not running with COEP enabled.\n // Without CORP, the iframe can be blocked and remain on an opaque 'null' origin,\n // causing CONNECT/READY handshake timeouts in the parent.\n res.setHeader('Cross-Origin-Resource-Policy', 'cross-origin')\n applyCoepCorpIfNeeded(res, coepMode)\n res.end(html)\n return\n }\n next()\n })\n\n // Mount Offline Export routes here as well (no app module duplication)\n addOfflineExportDevRoutes(server, {\n sdkDistRoot,\n sdkBasePath,\n offlineHtml,\n includeAppModule: false,\n coepMode,\n })\n },\n }\n}\n\n/\n Dev plugin: force the correct `.wasm` MIME type (application/wasm) for any served wasm file.\n * Where it runs: both app and wallet-iframe dev servers.\n /\nexport function tatchiWasmMime(): VitePlugin {\n return {\n name: 'tatchi:wasm-mime',\n apply: 'serve',\n enforce: 'pre',\n configureServer(server) {\n server.middlewares.use((req: any, res: any, next: any) => {\n if (!req.url) return next()\n const url = req.url.split('?')[0]\n if (url.endsWith('.wasm')) {\n res.setHeader('Content-Type', 'application/wasm')\n }\n next()\n })\n },\n }\n}\n\n/\n Dev plugin: add Permissions-Policy (delegating WebAuthn + clipboard), COOP, optional COEP/CORP, and optional dev CSP.\n * Where it runs: both app and wallet-iframe dev servers.\n * Notes:\n * - Uses Structured Header format for Permissions-Policy (double-quoted origins).\n * - Wallet dev CSP can be toggled strict/compatible via opts.devCSP.\n /\nexport function tatchiHeaders(opts: DevHeadersOptions = {}): VitePlugin {\n const walletOriginRaw = opts.walletOrigin ?? process.env.VITE_WALLET_ORIGIN\n const walletOrigin = walletOriginRaw?.trim()\n const walletServicePath = toBasePath(opts.walletServicePath \|\| process.env.VITE_WALLET_SERVICE_PATH, '/wallet-service')\n const sdkBasePath = toBasePath(opts.sdkBasePath \|\| process.env.VITE_SDK_BASE_PATH, '/sdk')\n const devCSPMode = (opts.devCSP ?? (process.env.VITE_WALLET_DEV_CSP as 'strict' \| 'compatible' \| undefined))\n const coepMode = resolveCoepMode(opts.coepMode)\n\n // Build headers via shared helpers to avoid drift.\n const permissionsPolicy = buildPermissionsPolicy(walletOrigin)\n\n // Dev convenience: dynamic ROR from NEAR RPC (no relay dependency)\n // The dev server will fetch the allowlist from chain on demand when a contract id is provided.\n const rorContractId = (process.env.VITE_WEBAUTHN_CONTRACT_ID \|\| '').toString().trim()\n const rorMethod = (process.env.VITE_ROR_METHOD \|\| 'get_allowed_origins').toString().trim()\n const nearRpcUrl = (process.env.VITE_NEAR_RPC_URL \|\| 'https://test.rpc.fastnear.com').toString().trim()\n // Caching is handled inside fetchRorOriginsFromNear via TTL\n\n return {\n name: 'tatchi:dev-headers',\n apply: 'serve',\n enforce: 'pre',\n configureServer(server) {\n\n console.log('[tatchi] headers enabled', {\n walletServicePath,\n sdkBasePath,\n coepMode,\n rorContractId: rorContractId \|\| '(none)',\n nearRpcUrl\n })\n\n server.middlewares.use((req: any, res: any, next: any) => {\n const url = (req.url \|\| '').split('?')[0] \|\| ''\n const isWalletRoute = url === walletServicePath \|\| url === `${walletServicePath}/` \|\| url === `${walletServicePath}//`\n res.setHeader('Cross-Origin-Opener-Policy', isWalletRoute ? 'unsafe-none' : 'same-origin')\n if (coepMode !== 'off') {\n res.setHeader('Cross-Origin-Embedder-Policy', 'require-corp')\n res.setHeader('Cross-Origin-Resource-Policy', 'cross-origin')\n }\n res.setHeader('Permissions-Policy', permissionsPolicy)\n // Optional dev-time CSP for the wallet service page only (app pages are unaffected)\n if (isWalletRoute && devCSPMode) {\n const mode = devCSPMode === 'strict' ? 'strict' : 'compatible'\n const walletCsp = buildWalletCsp({ mode })\n res.setHeader('Content-Security-Policy', walletCsp)\n }\n // Resource hints: help parent pages preconnect to the wallet origin early in dev\n addPreconnectLink(res, walletOrigin)\n\n // Serve /.well-known/webauthn for ROR using chain state in dev\n const isWellKnown = url === '/.well-known/webauthn' \|\| url === '/.well-known/webauthn/'\n if (isWellKnown) {\n // Direct fetch from NEAR RPC (no relay). Caching handled inside helper.\n // Requires contract id; RPC URL falls back to a reliable public endpoint.\n if (rorContractId) {\n ;(async () => {\n try {\n const origins = await fetchRorOriginsFromNear({\n rpcUrl: nearRpcUrl,\n contractId: rorContractId,\n method: rorMethod,\n })\n res.statusCode = 200\n res.setHeader('Content-Type', 'application/json; charset=utf-8')\n res.setHeader('Cache-Control', 'max-age=60, stale-while-revalidate=600')\n res.end(JSON.stringify({ origins }))\n } catch (e) {\n console.warn('[tatchi] ROR dynamic fetch failed:', e)\n res.statusCode = 200\n res.setHeader('Content-Type', 'application/json; charset=utf-8')\n res.setHeader('Cache-Control', 'max-age=60, stale-while-revalidate=600')\n res.end(JSON.stringify({ origins: [] }))\n }\n })()\n return\n }\n // No configuration; respond with empty allowlist to avoid hard 404 in dev\n res.statusCode = 200\n res.setHeader('Content-Type', 'application/json; charset=utf-8')\n res.setHeader('Cache-Control', 'max-age=60, stale-while-revalidate=600')\n res.end(JSON.stringify({ origins: [] }))\n return\n }\n\n if (url.startsWith(`${sdkBasePath}/`)) {\n // Dev-only CORS for SDK assets served by Vite\n applyCoepCorpIfNeeded(res, coepMode)\n // Honor existing echo from SDK server; otherwise echo\n const ended = echoCorsFromRequest(res, req, { honorExistingAcaOrigin: true, handlePreflight: true })\n if (ended) return\n }\n next()\n })\n },\n }\n}\n\n/\n Dev plugin (composed): convenience entry that wires SDK server, WASM MIME, optional headers,\n * and (in wallet modes) the wallet service route.\n * Where it runs:\n * - App server: mode 'front-only' (or 'self-contained' when serving wallet pages on the same origin).\n * - Wallet-iframe server: modes 'wallet-only' or 'self-contained'.\n /\n/\n Compose dev plugins for serving SDK assets, wallet service HTML and dev headers.\n * External-facing entry for configuring either the app or wallet-iframe dev server.\n /\nfunction tatchiDevServer(options: Web3AuthnDevOptions = {}): VitePlugin {\n const mode: Required<Web3AuthnDevOptions>['mode'] = options.mode \|\| 'self-contained'\n const sdkBasePath = toBasePath(options.sdkBasePath \|\| process.env.VITE_SDK_BASE_PATH, '/sdk')\n const walletServicePath = toBasePath(options.walletServicePath \|\| process.env.VITE_WALLET_SERVICE_PATH, '/wallet-service')\n const walletOrigin = (options.walletOrigin ?? process.env.VITE_WALLET_ORIGIN)?.trim()\n const setDevHeaders = options.setDevHeaders !== false // default true\n const enableDebugRoutes = options.enableDebugRoutes === true\n const sdkDistRoot = resolveSdkDistRoot(options.sdkDistRoot)\n const coepMode = resolveCoepMode(options.coepMode)\n\n // Build the sub-plugins to keep logic small and testable\n const sdkPlugin = tatchiServeSdk({ sdkBasePath, sdkDistRoot, enableDebugRoutes, coepMode })\n const walletPlugin = tatchiWalletService({ walletServicePath, sdkBasePath, coepMode })\n const wasmMimePlugin = tatchiWasmMime()\n // Flip wallet CSP to strict by default in dev. Consumers can override via\n // VITE_WALLET_DEV_CSP or by composing tatchiHeaders directly.\n const headersPlugin = setDevHeaders\n ? tatchiHeaders({ walletOrigin, walletServicePath, sdkBasePath, devCSP: 'strict', coepMode })\n : undefined\n\n return {\n name: 'tatchi:dev',\n apply: 'serve',\n enforce: 'pre',\n configureServer(server) {\n // Always add WASM MIME + SDK server\n sdkPlugin.configureServer?.(server)\n wasmMimePlugin.configureServer?.(server)\n if (headersPlugin) headersPlugin.configureServer?.(server)\n\n // Mode-specific wallet service route\n if (mode === 'self-contained' \|\| mode === 'wallet-only') {\n walletPlugin.configureServer?.(server)\n }\n },\n }\n}\n\n// === Build-time helper: emit Cloudflare Pages/Netlify _headers ===\n// This plugin writes a _headers file into Vite's outDir with COOP and optional COEP and a\n// Permissions-Policy delegating WebAuthn to the configured wallet origin.\n// It is a no-op if a _headers file already exists (to avoid overriding app settings).\n/\n Build-time plugin: writes a Cloudflare Pages/Netlify-compatible `_headers` file into Vite's `outDir`.\n * Adds COOP + Permissions-Policy and optional COEP/CORP (configurable via coepMode) delegating WebAuthn to the configured wallet origin.\n * Where it runs: build for either the app or a static wallet host (not used in dev).\n * Notes: no-ops if `_headers` already exists in `outDir` (to avoid overriding platform config).\n /\nexport function tatchiBuildHeaders(opts: { walletOrigin?: string, cors?: { accessControlAllowOrigin?: string }, coepMode?: 'strict' \| 'off' } = {}): VitePlugin {\n const walletOriginRaw = opts.walletOrigin ?? process.env.VITE_WALLET_ORIGIN\n const walletOrigin = walletOriginRaw?.trim()\n const walletServicePath = toBasePath(process.env.VITE_WALLET_SERVICE_PATH, '/wallet-service')\n const sdkBasePath = toBasePath(process.env.VITE_SDK_BASE_PATH, '/sdk')\n const coepMode = resolveCoepMode(opts.coepMode)\n\n // Build headers via shared helpers to avoid drift between frameworks\n const permissionsPolicy = buildPermissionsPolicy(walletOrigin)\n const walletCsp = buildWalletCsp({ mode: 'strict' })\n\n let outDir = 'dist'\n\n // We intentionally return a broader shape than VitePlugin; cast at the end\n const plugin = {\n name: 'tatchi:build-headers',\n apply: 'build' as const,\n enforce: 'post' as const,\n // Capture the resolved outDir\n configResolved(config: any) {\n outDir = (config?.build?.outDir as string) \|\| outDir\n },\n generateBundle() {\n try {\n const hdrPath = path.join(outDir, '_headers')\n if (fs.existsSync(hdrPath)) {\n // Do not override existing headers; leave a note in build logs\n console.warn('[tatchi] _headers already exists in outDir; skipping auto-emission')\n } else {\n // Strict CSP is emitted only for wallet HTML routes; not for app pages.\n const contentLines: string[] = [\n '/',\n ' Cross-Origin-Opener-Policy: same-origin',\n ...(coepMode === 'off'\n ? []\n : [\n ' Cross-Origin-Embedder-Policy: require-corp',\n ' Cross-Origin-Resource-Policy: cross-origin',\n ]),\n ` Permissions-Policy: ${permissionsPolicy}`,\n '',\n `${walletServicePath}`,\n ' Cross-Origin-Opener-Policy: unsafe-none',\n // Always allow COEP=require-corp apps to embed wallet HTML, even when\n // the wallet host itself is not using COEP.\n ' Cross-Origin-Resource-Policy: cross-origin',\n ` Permissions-Policy: ${permissionsPolicy}`,\n ` Content-Security-Policy: ${walletCsp}`,\n `${walletServicePath}/`,\n ' Cross-Origin-Opener-Policy: unsafe-none',\n ' Cross-Origin-Resource-Policy: cross-origin',\n ` Permissions-Policy: ${permissionsPolicy}`,\n ` Content-Security-Policy: ${walletCsp}`,\n '/export-viewer',\n ' Cross-Origin-Opener-Policy: unsafe-none',\n ' Cross-Origin-Resource-Policy: cross-origin',\n ` Permissions-Policy: ${permissionsPolicy}`,\n '/export-viewer/',\n ' Cross-Origin-Opener-Policy: unsafe-none',\n ' Cross-Origin-Resource-Policy: cross-origin',\n ` Permissions-Policy: ${permissionsPolicy}`,\n // Offline export cache policy (no-cache for HTML/SW; immutable for other assets)\n '/offline-export',\n ' Cache-Control: no-cache',\n '/offline-export/',\n ' Cache-Control: no-cache',\n '/offline-export/index.html',\n ' Cache-Control: no-cache',\n '/offline-export/sw.js',\n ' Cache-Control: no-cache',\n '/offline-export/precache.manifest.json',\n ' Cache-Control: no-cache',\n '/offline-export/manifest.webmanifest',\n ' Cache-Control: no-cache',\n '/offline-export/offline-export-app.js',\n ' Cache-Control: no-cache',\n '/offline-export/',\n ' Cache-Control: public, max-age=31536000, immutable',\n ]\n // Optional: emit CORS headers when explicitly configured via plugin option.\n // Prefer a single source of truth (platform or plugin), not both.\n const configuredAcaOrigin = (opts.cors && typeof opts.cors.accessControlAllowOrigin === 'string'\n ? opts.cors.accessControlAllowOrigin.trim()\n : undefined) as string \| undefined;\n if (configuredAcaOrigin) {\n contentLines.push(\n `${sdkBasePath}/`,\n ` Access-Control-Allow-Origin: ${configuredAcaOrigin}`,\n )\n }\n const content = contentLines.join('\\n') + '\\n'\n fs.mkdirSync(outDir, { recursive: true })\n fs.writeFileSync(hdrPath, content, 'utf-8')\n console.log('[tatchi] emitted _headers with COOP' + (coepMode === 'off' ? '' : '/COEP/CORP') + ' + Permissions-Policy' + (configuredAcaOrigin ? ' + CORS' : ''))\n }\n\n const sdkDir = path.join(outDir, sdkBasePath.replace(/^\\//, ''))\n try { fs.mkdirSync(sdkDir, { recursive: true }) } catch {}\n const shimPath = path.join(sdkDir, 'wallet-shims.js')\n if (!fs.existsSync(shimPath)) {\n fs.writeFileSync(shimPath, WALLET_SHIM_SOURCE, 'utf-8')\n }\n const cssPath = path.join(sdkDir, 'wallet-service.css')\n if (!fs.existsSync(cssPath)) {\n fs.writeFileSync(cssPath, WALLET_SURFACE_CSS, 'utf-8')\n }\n\n // Emit minimal wallet-service/index.html if the app hasn't provided one\n const walletRel = walletServicePath.replace(/^\\//, '')\n const wsDir = path.join(outDir, walletRel)\n const wsHtml = path.join(wsDir, 'index.html')\n if (!fs.existsSync(wsHtml)) {\n fs.mkdirSync(wsDir, { recursive: true })\n fs.writeFileSync(wsHtml, buildWalletServiceHtml(sdkBasePath), 'utf-8')\n console.log(`[tatchi] emitted ${path.posix.join('/', walletRel, 'index.html')} (minimal wallet service)`)\n }\n\n // Emit minimal export viewer HTML for production\n const evDir = path.join(outDir, 'export-viewer')\n const evHtml = path.join(evDir, 'index.html')\n if (!fs.existsSync(evHtml)) {\n fs.mkdirSync(evDir, { recursive: true })\n fs.writeFileSync(evHtml, buildExportViewerHtml(sdkBasePath), 'utf-8')\n console.log('[tatchi] emitted /export-viewer/index.html (minimal export viewer)')\n }\n\n // Emit offline-export assets (SW, workers, app, HTML, manifest, precache) via helper\n try {\n const sdkDistRoot = resolveSdkDistRoot()\n emitOfflineExportAssets({ outDir, sdkBasePath, sdkDistRoot })\n } catch (e) {\n console.warn('[tatchi] failed to emit offline-export assets:', e)\n }\n } catch (e) {\n console.warn('[tatchi] failed to emit _headers:', e)\n }\n },\n }\n\n return plugin as unknown as VitePlugin\n}\n\n// Small test helpers to keep unit tests decoupled from Vite server implementation\nexport function computeDevPermissionsPolicy(walletOrigin?: string): string {\n return buildPermissionsPolicy(walletOrigin)\n}\n\nexport function computeDevWalletCsp(mode: 'strict' \| 'compatible' = 'strict'): string {\n return buildWalletCsp({ mode })\n}\n\nexport function tatchiWalletServer(options: Omit<Web3AuthnDevOptions, 'mode'> = {}): VitePlugin {\n return tatchiDevServer({ ...options, mode: 'wallet-only' })\n}\n\nexport function tatchiAppServer(options: Omit<Web3AuthnDevOptions, 'mode'> = {}): VitePlugin {\n return tatchiDevServer({ ...options, mode: 'front-only' })\n}\n\n/*\n Convenience wrapper: app origin helper that combines dev-time headers with optional\n * build-time headers emission for static hosts.\n \n Dev-time (serve): applies COOP + Permissions-Policy, plus optional COEP/CORP, via tatchiAppServer.\n * Build-time (build): when `emitHeaders` is true, writes a Cloudflare Pages/Netlify\n * `_headers` file into Vite's `outDir` via tatchiBuildHeaders, scoping strict CSP to\n * wallet HTML routes only.\n * - Emits: `COOP: same-origin`, `Permissions-Policy: …`, and (when `coepMode === 'strict'`) `COEP: require-corp` + `CORP: cross-origin`.\n * - No-op if a `_headers` file already exists in `outDir` (avoids clobbering CI/platform rules).\n \n Notes\n * - Keeps production header emission opt-in to avoid surprising overrides when apps\n * already manage headers via custom servers or platform rules.\n * - Returns a plugin array for ergonomics; Vite accepts arrays in the `plugins` list.\n /\nexport function tatchiApp(options: Omit<Web3AuthnDevOptions, 'mode'> & { emitHeaders?: boolean } = {}): any[] / Vite Plugin[] / {\n const { emitHeaders, ...devOpts } = options\n const walletOrigin = (devOpts.walletOrigin ?? process.env.VITE_WALLET_ORIGIN)?.trim()\n const app = tatchiAppServer(devOpts)\n // Build-time emission is opt-in and will no-op if `_headers` already exists.\n const hdr = emitHeaders ? tatchiBuildHeaders({ walletOrigin, coepMode: devOpts.coepMode }) : undefined\n return [app, hdr].filter(Boolean) as any[]\n}\n\n/\n Convenience wrapper: wallet origin helper that combines dev-time wallet server\n * with optional build-time headers emission for static hosts.\n \n Dev-time (serve): serves `/wallet-service` and `/sdk/` plus headers via tatchiWalletServer.\n Build-time (build): when `emitHeaders` is true, writes a Cloudflare Pages/Netlify\n * `_headers` file into Vite's `outDir` via tatchiBuildHeaders, scoping strict CSP to\n * wallet HTML routes only.\n * - Emits: `COOP: same-origin` (wallet HTML routes use `unsafe-none`), `Permissions-Policy: …`, and (when `coepMode === 'strict'`) `COEP: require-corp` + `CORP: cross-origin`.\n * - No-op if a `_headers` file already exists in `outDir` (avoids clobbering CI/platform rules).\n \n Notes\n * - Keeps production header emission opt-in to avoid overriding platform/server configs.\n * - Returns a plugin array for ergonomics; Vite accepts arrays in the `plugins` list.\n /\nexport function tatchiWallet(options: Omit<Web3AuthnDevOptions, 'mode'> & { emitHeaders?: boolean } = {}): any[] / Vite Plugin[] */ {\n const { emitHeaders, ...devOpts } = options\n const walletOrigin = (devOpts.walletOrigin ?? process.env.VITE_WALLET_ORIGIN)?.trim()\n const wallet = tatchiWalletServer(devOpts)\n // Build-time emission is opt-in and will no-op if `_headers` already exists.\n const hdr = emitHeaders ? tatchiBuildHeaders({ walletOrigin, coepMode: devOpts.coepMode }) : undefined\n return [wallet, hdr].filter(Boolean) as any[]\n}\n"],"mappings":";;;;;;;;;;;;;;;AAwFA,SAAS,QAAQ,GAAG,YAA0C;AAC5D,MAAK,MAAM,QAAQ,WACjB,KAAI;EACF,MAAM,OAAOA,QAAG,SAAS;AACzB,MAAI,KAAK,SAAU,QAAO;SACpB;AAEV,QAAO;;AAMT,MAAM,qBAAqB;AAC3B,MAAM,qBAAqB;CACzB;CACA;CACA;CAEA;CACA;CAEA;CACA;CACA;CAIA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;EACA,KAAK;;;;;;;AAQP,SAAgB,eAAe,OAAwB,IAAgB;CACrE,MAAM,iBAAiBC,8BAAW,KAAK,aAAa;CACpD,MAAM,cAAcC,wCAAmB,KAAK;CAC5C,MAAM,oBAAoB,KAAK,sBAAsB;CACrD,MAAM,WAAWC,qCAAgB,KAAK;CACtC,MAAM,cAAcC,uCAAuB;CAG3C,MAAM,QAAQ,MAAM,KAAK,IAAI,IAAI,CAAC,gBAAgBH,8BAAW,WAC1D,MAAM,GAAG,MAAM,EAAE,SAAS,EAAE;AAG/B,QAAO;EACL,MAAM;EACN,OAAO;EACP,SAAS;EACT,gBAAgB,QAAQ;AAEtB,6CAA0B,QAAQ;IAChC;IACA,aAAa;IACb;IACA,kBAAkB;IAClB;;AAGF,UAAO,YAAY,KAAK,KAAU,KAAU,SAAc;IACxD,MAAM,OAAO,IAAI,OAAO,IAAI,MAAM,KAAK;AACvC,QAAI,QAAQ,iBAAiB,oBAAoB;AAC/C,SAAI,aAAa;AACjB,SAAI,UAAU,gBAAgB;AAE9B,gDAAsB,KAAK;AAE3B,8CAAoB,KAAK,KAAK,EAAE,iBAAiB;AACjD,SAAI,IAAI;AACR;;AAEF,QAAI,QAAQ,iBAAiB,uBAAuB;AAClD,SAAI,aAAa;AACjB,SAAI,UAAU,gBAAgB;AAE9B,gDAAsB,KAAK;AAE3B,8CAAoB,KAAK,KAAK,EAAE,iBAAiB;AACjD,SAAI,IAAI;AACR;;AAEF;;AAIF,OAAI,kBACF,QAAO,YAAY,IAAI,gBAAgB,KAAU,QAAa;AAC5D,QAAI,UAAU,gBAAgB;AAC9B,QAAI,IAAI;;AAKZ,UAAO,YAAY,KAAK,KAAU,KAAU,SAAc;AACxD,QAAI,CAAC,IAAI,IAAK,QAAO;IACrB,MAAM,MAAM,IAAI,IAAI,MAAM,KAAK;IAE/B,MAAM,YAAY,MAAM,MAAM,MAAM,IAAI,WAAW,IAAI;AACvD,QAAI,CAAC,UAAW,QAAO;IAEvB,MAAM,MAAM,IAAI,OAAO,YAAY,KAAK;IAExC,MAAM,YAAY,QAChBI,UAAK,KAAK,aAAa,OAAO,OAAO,MACrCA,UAAK,KAAK,aAAa,MACvBA,UAAK,KAAK,aAAa,OAAO;AAGhC,QAAI,CAAC,WAAW;AACd,SAAI,aAAa;AACjB,SAAI,UAAU,gBAAgB;AAC9B,SAAI,IAAI,KAAK,UAAU;MAAE,OAAO;MAAuB,MAAM;;AAC7D;;AAGF,wCAAe,KAAK;AAEpB,+CAAsB,KAAK;AAE3B,6CAAoB,KAAK,KAAK,EAAE,iBAAiB;IACjD,MAAM,SAASL,QAAG,iBAAiB;AACnC,WAAO,GAAG,eAAe;AACzB,WAAO,KAAK;;;;;;;;;AAUpB,SAAgB,oBAAoB,OAA6B,IAAgB;CAC/E,MAAM,oBAAoBC,8BAAW,KAAK,mBAAmB;CAC7D,MAAM,cAAcA,8BAAW,KAAK,aAAa;CACjD,MAAM,WAAWE,qCAAgB,KAAK;CAEtC,MAAM,OAAOG,4CAAuB;CACpC,MAAM,cAAcF,uCAAuB;CAC3C,MAAM,cAAcF;AAEpB,QAAO;EACL,MAAM;EACN,OAAO;EACP,SAAS;EACT,gBAAgB,QAAQ;AACtB,UAAO,YAAY,KAAK,KAAU,KAAU,SAAc;AACxD,QAAI,CAAC,IAAI,IAAK,QAAO;IACrB,MAAM,MAAM,IAAI,IAAI,MAAM,KAAK;IAC/B,MAAM,gBAAgB,QAAQ,qBAAqB,QAAQ,GAAG,kBAAkB,MAAM,QAAQ,GAAG,kBAAkB;AACnH,QAAI,eAAe;AACjB,SAAI,aAAa;AACjB,SAAI,UAAU,gBAAgB;AAK9B,SAAI,UAAU,gCAAgC;AAC9C,gDAAsB,KAAK;AAC3B,SAAI,IAAI;AACR;;AAEF;;AAIF,6CAA0B,QAAQ;IAChC;IACA;IACA;IACA,kBAAkB;IAClB;;;;;;;;;AAUR,SAAgB,iBAA6B;AAC3C,QAAO;EACL,MAAM;EACN,OAAO;EACP,SAAS;EACT,gBAAgB,QAAQ;AACtB,UAAO,YAAY,KAAK,KAAU,KAAU,SAAc;AACxD,QAAI,CAAC,IAAI,IAAK,QAAO;IACrB,MAAM,MAAM,IAAI,IAAI,MAAM,KAAK;AAC/B,QAAI,IAAI,SAAS,SACf,KAAI,UAAU,gBAAgB;AAEhC;;;;;;;;;;;;AAaR,SAAgB,cAAc,OAA0B,IAAgB;CACtE,MAAM,kBAAkB,KAAK,gBAAgB,QAAQ,IAAI;CACzD,MAAM,eAAe,iBAAiB;CACtC,MAAM,oBAAoBD,8BAAW,KAAK,qBAAqB,QAAQ,IAAI,0BAA0B;CACrG,MAAM,cAAcA,8BAAW,KAAK,eAAe,QAAQ,IAAI,oBAAoB;CACnF,MAAM,aAAc,KAAK,UAAW,QAAQ,IAAI;CAChD,MAAM,WAAWE,qCAAgB,KAAK;CAGtC,MAAM,oBAAoBI,uCAAuB;CAIjD,MAAM,iBAAiB,QAAQ,IAAI,6BAA6B,IAAI,WAAW;CAC/E,MAAM,aAAa,QAAQ,IAAI,mBAAmB,uBAAuB,WAAW;CACpF,MAAM,cAAc,QAAQ,IAAI,qBAAqB,iCAAiC,WAAW;AAGjG,QAAO;EACL,MAAM;EACN,OAAO;EACP,SAAS;EACT,gBAAgB,QAAQ;AAEtB,WAAQ,IAAI,4BAA4B;IACtC;IACA;IACA;IACA,eAAe,iBAAiB;IAChC;;AAGF,UAAO,YAAY,KAAK,KAAU,KAAU,SAAc;IACxD,MAAM,OAAO,IAAI,OAAO,IAAI,MAAM,KAAK,MAAM;IAC7C,MAAM,gBAAgB,QAAQ,qBAAqB,QAAQ,GAAG,kBAAkB,MAAM,QAAQ,GAAG,kBAAkB;AACnH,QAAI,UAAU,8BAA8B,gBAAgB,gBAAgB;AAC5E,QAAI,aAAa,OAAO;AACtB,SAAI,UAAU,gCAAgC;AAC9C,SAAI,UAAU,gCAAgC;;AAEhD,QAAI,UAAU,sBAAsB;AAEpC,QAAI,iBAAiB,YAAY;KAC/B,MAAM,OAAO,eAAe,WAAW,WAAW;KAClD,MAAM,YAAYC,+BAAe,EAAE;AACnC,SAAI,UAAU,2BAA2B;;AAG3C,2CAAkB,KAAK;IAGvB,MAAM,cAAc,QAAQ,2BAA2B,QAAQ;AAC/D,QAAI,aAAa;AAGf,SAAI,eAAe;AAChB,OAAC,YAAY;AACZ,WAAI;QACF,MAAM,UAAU,MAAMC,6CAAwB;SAC5C,QAAQ;SACR,YAAY;SACZ,QAAQ;;AAEV,YAAI,aAAa;AACjB,YAAI,UAAU,gBAAgB;AAC9B,YAAI,UAAU,iBAAiB;AAC/B,YAAI,IAAI,KAAK,UAAU,EAAE;gBAClB,GAAG;AACV,gBAAQ,KAAK,sCAAsC;AACnD,YAAI,aAAa;AACjB,YAAI,UAAU,gBAAgB;AAC9B,YAAI,UAAU,iBAAiB;AAC/B,YAAI,IAAI,KAAK,UAAU,EAAE,SAAS;;;AAGtC;;AAGF,SAAI,aAAa;AACjB,SAAI,UAAU,gBAAgB;AAC9B,SAAI,UAAU,iBAAiB;AAC/B,SAAI,IAAI,KAAK,UAAU,EAAE,SAAS;AAClC;;AAGF,QAAI,IAAI,WAAW,GAAG,YAAY,KAAK;AAErC,gDAAsB,KAAK;KAE3B,MAAM,QAAQC,yCAAoB,KAAK,KAAK;MAAE,wBAAwB;MAAM,iBAAiB;;AAC7F,SAAI,MAAO;;AAEb;;;;;;;;;;;;;;;;AAiBR,SAAS,gBAAgB,UAA+B,IAAgB;CACtE,MAAMC,OAA8C,QAAQ,QAAQ;CACpE,MAAM,cAAcV,8BAAW,QAAQ,eAAe,QAAQ,IAAI,oBAAoB;CACtF,MAAM,oBAAoBA,8BAAW,QAAQ,qBAAqB,QAAQ,IAAI,0BAA0B;CACxG,MAAM,gBAAgB,QAAQ,gBAAgB,QAAQ,IAAI,qBAAqB;CAC/E,MAAM,gBAAgB,QAAQ,kBAAkB;CAChD,MAAM,oBAAoB,QAAQ,sBAAsB;CACxD,MAAM,cAAcC,wCAAmB,QAAQ;CAC/C,MAAM,WAAWC,qCAAgB,QAAQ;CAGzC,MAAM,YAAY,eAAe;EAAE;EAAa;EAAa;EAAmB;;CAChF,MAAM,eAAe,oBAAoB;EAAE;EAAmB;EAAa;;CAC3E,MAAM,iBAAiB;CAGvB,MAAM,gBAAgB,gBAClB,cAAc;EAAE;EAAc;EAAmB;EAAa,QAAQ;EAAU;MAChF;AAEJ,QAAO;EACL,MAAM;EACN,OAAO;EACP,SAAS;EACT,gBAAgB,QAAQ;AAEtB,aAAU,kBAAkB;AAC5B,kBAAe,kBAAkB;AACjC,OAAI,cAAe,eAAc,kBAAkB;AAGnD,OAAI,SAAS,oBAAoB,SAAS,cACxC,cAAa,kBAAkB;;;;;;;;;;AAgBvC,SAAgB,mBAAmB,OAA6G,IAAgB;CAC9J,MAAM,kBAAkB,KAAK,gBAAgB,QAAQ,IAAI;CACzD,MAAM,eAAe,iBAAiB;CACtC,MAAM,oBAAoBF,8BAAW,QAAQ,IAAI,0BAA0B;CAC3E,MAAM,cAAcA,8BAAW,QAAQ,IAAI,oBAAoB;CAC/D,MAAM,WAAWE,qCAAgB,KAAK;CAGtC,MAAM,oBAAoBI,uCAAuB;CACjD,MAAM,YAAYC,+BAAe,EAAE,MAAM;CAEzC,IAAI,SAAS;CAGb,MAAM,SAAS;EACb,MAAM;EACN,OAAO;EACP,SAAS;EAET,eAAe,QAAa;AAC1B,YAAU,QAAQ,OAAO,UAAqB;;EAEhD,iBAAiB;AACf,OAAI;IACF,MAAM,UAAUH,UAAK,KAAK,QAAQ;AAClC,QAAIL,QAAG,WAAW,SAEhB,SAAQ,KAAK;SACR;KAEL,MAAMY,eAAyB;MAC7B;MACA;MACA,GAAI,aAAa,QACb,KACA,CACE,gDACA;MAEN,yBAAyB;MACzB;MACA,GAAG;MACH;MAGA;MACA,yBAAyB;MACzB,8BAA8B;MAC9B,GAAG,kBAAkB;MACrB;MACA;MACA,yBAAyB;MACzB,8BAA8B;MAC9B;MACA;MACA;MACA,yBAAyB;MACzB;MACA;MACA;MACA,yBAAyB;MAEzB;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;MACA;;KAIF,MAAM,sBAAuB,KAAK,QAAQ,OAAO,KAAK,KAAK,6BAA6B,WACpF,KAAK,KAAK,yBAAyB,SACnC;AACJ,SAAI,oBACF,cAAa,KACX,GAAG,YAAY,KACf,kCAAkC;KAGtC,MAAM,UAAU,aAAa,KAAK,QAAQ;AAC1C,aAAG,UAAU,QAAQ,EAAE,WAAW;AAClC,aAAG,cAAc,SAAS,SAAS;AACnC,aAAQ,IAAI,yCAAyC,aAAa,QAAQ,KAAK,gBAAgB,2BAA2B,sBAAsB,YAAY;;IAG9J,MAAM,SAASP,UAAK,KAAK,QAAQ,YAAY,QAAQ,OAAO;AAC5D,QAAI;AAAE,aAAG,UAAU,QAAQ,EAAE,WAAW;YAAgB;IACxD,MAAM,WAAWA,UAAK,KAAK,QAAQ;AACnC,QAAI,CAACL,QAAG,WAAW,UACjB,SAAG,cAAc,UAAU,oBAAoB;IAEjD,MAAM,UAAUK,UAAK,KAAK,QAAQ;AAClC,QAAI,CAACL,QAAG,WAAW,SACjB,SAAG,cAAc,SAAS,oBAAoB;IAIhD,MAAM,YAAY,kBAAkB,QAAQ,OAAO;IACnD,MAAM,QAAQK,UAAK,KAAK,QAAQ;IAChC,MAAM,SAASA,UAAK,KAAK,OAAO;AAChC,QAAI,CAACL,QAAG,WAAW,SAAS;AAC1B,aAAG,UAAU,OAAO,EAAE,WAAW;AACjC,aAAG,cAAc,QAAQM,4CAAuB,cAAc;AAC9D,aAAQ,IAAI,oBAAoBD,UAAK,MAAM,KAAK,KAAK,WAAW,cAAc;;IAIhF,MAAM,QAAQA,UAAK,KAAK,QAAQ;IAChC,MAAM,SAASA,UAAK,KAAK,OAAO;AAChC,QAAI,CAACL,QAAG,WAAW,SAAS;AAC1B,aAAG,UAAU,OAAO,EAAE,WAAW;AACjC,aAAG,cAAc,QAAQa,2CAAsB,cAAc;AAC7D,aAAQ,IAAI;;AAId,QAAI;KACF,MAAM,cAAcX;AACpB,6CAAwB;MAAE;MAAQ;MAAa;;aACxC,GAAG;AACV,aAAQ,KAAK,kDAAkD;;YAE1D,GAAG;AACV,YAAQ,KAAK,qCAAqC;;;;AAKxD,QAAO;;AAIT,SAAgB,4BAA4B,cAA+B;AACzE,QAAOK,uCAAuB;;AAGhC,SAAgB,oBAAoB,OAAgC,UAAkB;AACpF,QAAOC,+BAAe,EAAE;;AAG1B,SAAgB,mBAAmB,UAA6C,IAAgB;AAC9F,QAAO,gBAAgB;EAAE,GAAG;EAAS,MAAM;;;AAG7C,SAAgB,gBAAgB,UAA6C,IAAgB;AAC3F,QAAO,gBAAgB;EAAE,GAAG;EAAS,MAAM;;;;;;;;;;;;;;;;;;;AAmB7C,SAAgB,UAAU,UAAyE,IAA+B;CAChI,MAAM,EAAE,YAAa,GAAG,YAAY;CACpC,MAAM,gBAAgB,QAAQ,gBAAgB,QAAQ,IAAI,qBAAqB;CAC/E,MAAM,MAAM,gBAAgB;CAE5B,MAAM,MAAM,cAAc,mBAAmB;EAAE;EAAc,UAAU,QAAQ;MAAc;AAC7F,QAAO,CAAC,KAAK,KAAK,OAAO;;;;;;;;;;;;;;;;;AAkB3B,SAAgB,aAAa,UAAyE,IAA+B;CACnI,MAAM,EAAE,YAAa,GAAG,YAAY;CACpC,MAAM,gBAAgB,QAAQ,gBAAgB,QAAQ,IAAI,qBAAqB;CAC/E,MAAM,SAAS,mBAAmB;CAElC,MAAM,MAAM,cAAc,mBAAmB;EAAE;EAAc,UAAU,QAAQ;MAAc;AAC7F,QAAO,CAAC,QAAQ,KAAK,OAAO"}

package/dist/cjs/react/_virtual/rolldown_runtime.js CHANGED Viewed

@@ -5,15 +5,6 @@ var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __esm = (fn, res) => function() {
-	return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
-};
-var __export = (target, all) => {
-	for (var name in all) __defProp(target, name, {
-		get: all[name],
-		enumerable: true
-	});
-};
 var __copyProps = (to, from, except, desc) => {
 	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
 		key = keys[i];
@@ -28,11 +19,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	value: mod,
 	enumerable: true
 }) : target, mod));
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 //#endregion
-exports.__esm = __esm;
-exports.__export = __export;
-exports.__toCommonJS = __toCommonJS;
 exports.__toESM = __toESM;

package/dist/cjs/react/build-paths.js ADDED Viewed

@@ -0,0 +1,54 @@
+//#region build-paths.ts
+const BUILD_PATHS = {
+	BUILD: {
+		ROOT: "dist",
+		WORKERS: "dist/workers",
+		ESM: "dist/esm",
+		CJS: "dist/cjs",
+		TYPES: "dist/types"
+	},
+	SOURCE: {
+		ROOT: "src",
+		CORE: "src/core",
+		WASM_SIGNER: "src/wasm_signer_worker",
+		WASM_VRF: "src/wasm_vrf_worker",
+		CRITICAL_DIRS: [
+			"src/core",
+			"src/wasm_signer_worker",
+			"src/wasm_vrf_worker"
+		]
+	},
+	FRONTEND: {
+		ROOT: "../examples/vite/public",
+		SDK: "../examples/vite/public/sdk",
+		WORKERS: "../examples/vite/public/sdk/workers"
+	},
+	RUNTIME: {
+		SDK_BASE: "/sdk",
+		WORKERS_BASE: "/sdk/workers",
+		VRF_WORKER: "/sdk/workers/web3authn-vrf.worker.js",
+		SIGNER_WORKER: "/sdk/workers/web3authn-signer.worker.js"
+	},
+	WORKERS: {
+		VRF: "web3authn-vrf.worker.js",
+		SIGNER: "web3authn-signer.worker.js",
+		OFFLINE_SW: "offline-export-sw.js",
+		WASM_VRF_JS: "wasm_vrf_worker.js",
+		WASM_VRF_WASM: "wasm_vrf_worker_bg.wasm",
+		WASM_SIGNER_JS: "wasm_signer_worker.js",
+		WASM_SIGNER_WASM: "wasm_signer_worker_bg.wasm"
+	},
+	TEST_WORKERS: {
+		VRF: "/sdk/workers/web3authn-vrf.worker.js",
+		SIGNER: "/sdk/workers/web3authn-signer.worker.js",
+		WASM_VRF_JS: "/sdk/workers/wasm_vrf_worker.js",
+		WASM_VRF_WASM: "/sdk/workers/wasm_vrf_worker_bg.wasm",
+		WASM_SIGNER_JS: "/sdk/workers/wasm_signer_worker.js",
+		WASM_SIGNER_WASM: "/sdk/workers/wasm_signer_worker_bg.wasm"
+	}
+};
+//#endregion
+exports.BUILD_PATHS = BUILD_PATHS;
+//# sourceMappingURL=build-paths.js.map

package/dist/cjs/react/build-paths.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"build-paths.js","names":[],"sources":["../../../build-paths.ts"],"sourcesContent":["// Centralized build configuration\n// This file defines all paths used across the build system\n\nexport const BUILD_PATHS = {\n // Build output directories\n BUILD: {\n ROOT: 'dist',\n WORKERS: 'dist/workers',\n ESM: 'dist/esm',\n CJS: 'dist/cjs',\n TYPES: 'dist/types'\n },\n\n // Source directories\n SOURCE: {\n ROOT: 'src',\n CORE: 'src/core',\n WASM_SIGNER: 'src/wasm_signer_worker',\n WASM_VRF: 'src/wasm_vrf_worker',\n CRITICAL_DIRS: [\n 'src/core',\n 'src/wasm_signer_worker',\n 'src/wasm_vrf_worker'\n ]\n },\n\n // Frontend deployment paths\n FRONTEND: {\n ROOT: '../examples/vite/public',\n SDK: '../examples/vite/public/sdk',\n WORKERS: '../examples/vite/public/sdk/workers'\n },\n\n // Runtime paths (used by workers and tests)\n RUNTIME: {\n SDK_BASE: '/sdk',\n WORKERS_BASE: '/sdk/workers',\n VRF_WORKER: '/sdk/workers/web3authn-vrf.worker.js',\n SIGNER_WORKER: '/sdk/workers/web3authn-signer.worker.js'\n },\n\n // Worker file names\n WORKERS: {\n VRF: 'web3authn-vrf.worker.js',\n SIGNER: 'web3authn-signer.worker.js',\n OFFLINE_SW: 'offline-export-sw.js',\n WASM_VRF_JS: 'wasm_vrf_worker.js',\n WASM_VRF_WASM: 'wasm_vrf_worker_bg.wasm',\n WASM_SIGNER_JS: 'wasm_signer_worker.js',\n WASM_SIGNER_WASM: 'wasm_signer_worker_bg.wasm'\n },\n\n // Test worker file paths (for test files)\n TEST_WORKERS: {\n VRF: '/sdk/workers/web3authn-vrf.worker.js',\n SIGNER: '/sdk/workers/web3authn-signer.worker.js',\n WASM_VRF_JS: '/sdk/workers/wasm_vrf_worker.js',\n WASM_VRF_WASM: '/sdk/workers/wasm_vrf_worker_bg.wasm',\n WASM_SIGNER_JS: '/sdk/workers/wasm_signer_worker.js',\n WASM_SIGNER_WASM: '/sdk/workers/wasm_signer_worker_bg.wasm'\n }\n} as const;\n\n// Helper functions\nexport const getWorkerPath = (workerName: string): string => `${BUILD_PATHS.BUILD.WORKERS}/${workerName}`;\nexport const getRuntimeWorkerPath = (workerName: string): string => `${BUILD_PATHS.RUNTIME.WORKERS_BASE}/${workerName}`;\nexport const getFrontendWorkerPath = (workerName: string): string => `${BUILD_PATHS.FRONTEND.WORKERS}/${workerName}`;\n\n// Default export for easier importing\nexport default BUILD_PATHS;\n"],"mappings":";;AAGA,MAAa,cAAc;CAEzB,OAAO;EACL,MAAM;EACN,SAAS;EACT,KAAK;EACL,KAAK;EACL,OAAO;;CAIT,QAAQ;EACN,MAAM;EACN,MAAM;EACN,aAAa;EACb,UAAU;EACV,eAAe;GACb;GACA;GACA;;;CAKJ,UAAU;EACR,MAAM;EACN,KAAK;EACL,SAAS;;CAIX,SAAS;EACP,UAAU;EACV,cAAc;EACd,YAAY;EACZ,eAAe;;CAIjB,SAAS;EACP,KAAK;EACL,QAAQ;EACR,YAAY;EACZ,aAAa;EACb,eAAe;EACf,gBAAgB;EAChB,kBAAkB;;CAIpB,cAAc;EACZ,KAAK;EACL,QAAQ;EACR,aAAa;EACb,eAAe;EACf,gBAAgB;EAChB,kBAAkB"}