@tatchi-xyz/sdk 0.21.0 → 0.31.1

package/dist/esm/sdk/getDeviceNumber-WiNzKx1x.js

@@ -0,0 +1,601 @@
+import { toTrimmedString } from "./validation-hUZgySTx.js";
+import { toAccountId } from "./collectAuthenticationCredentialForVrfChallenge-C9p90e5Z.js";
+
+//#region src/wasm_signer_worker/pkg/wasm_signer_worker.js
+let wasm;
+const cachedTextEncoder = typeof TextEncoder !== "undefined" ? new TextEncoder("utf-8") : { encode: () => {
+	throw Error("TextEncoder not available");
+} };
+const encodeString = typeof cachedTextEncoder.encodeInto === "function" ? function(arg, view) {
+	return cachedTextEncoder.encodeInto(arg, view);
+} : function(arg, view) {
+	const buf = cachedTextEncoder.encode(arg);
+	view.set(buf);
+	return {
+		read: arg.length,
+		written: buf.length
+	};
+};
+const cachedTextDecoder = typeof TextDecoder !== "undefined" ? new TextDecoder("utf-8", {
+	ignoreBOM: true,
+	fatal: true
+}) : { decode: () => {
+	throw Error("TextDecoder not available");
+} };
+if (typeof TextDecoder !== "undefined") cachedTextDecoder.decode();
+const CLOSURE_DTORS = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((state) => {
+	wasm.__wbindgen_export_5.get(state.dtor)(state.a, state.b);
+});
+/**
+* Behavior mode for confirmation flow
+* @enum {0 | 1}
+*/
+const ConfirmationBehavior = Object.freeze({
+	RequireClick: 0,
+	"0": "RequireClick",
+	AutoProceed: 1,
+	"1": "AutoProceed"
+});
+/**
+* UI mode for confirmation display
+* @enum {0 | 1 | 2}
+*/
+const ConfirmationUIMode = Object.freeze({
+	Skip: 0,
+	"0": "Skip",
+	Modal: 1,
+	"1": "Modal",
+	Drawer: 2,
+	"2": "Drawer"
+});
+/**
+* Progress message types that can be sent during WASM operations.
+* Values MUST align with the progress variants of WorkerResponseType in
+* `worker_messages.rs` so that TypeScript can treat them as progress
+* responses (not success/failure) based on the shared numeric codes.
+* @enum {18 | 19 | 20 | 21}
+*/
+const ProgressMessageType = Object.freeze({
+	RegistrationProgress: 18,
+	"18": "RegistrationProgress",
+	RegistrationComplete: 19,
+	"19": "RegistrationComplete",
+	ExecuteActionsProgress: 20,
+	"20": "ExecuteActionsProgress",
+	ExecuteActionsComplete: 21,
+	"21": "ExecuteActionsComplete"
+});
+/**
+* Progress step identifiers for different phases of operations
+* Values start at 100 to avoid conflicts with WorkerResponseType enum
+* @enum {100 | 101 | 102 | 103 | 104 | 105 | 106}
+*/
+const ProgressStep = Object.freeze({
+	Preparation: 100,
+	"100": "Preparation",
+	UserConfirmation: 101,
+	"101": "UserConfirmation",
+	WebauthnAuthentication: 102,
+	"102": "WebauthnAuthentication",
+	AuthenticationComplete: 103,
+	"103": "AuthenticationComplete",
+	TransactionSigningProgress: 104,
+	"104": "TransactionSigningProgress",
+	TransactionSigningComplete: 105,
+	"105": "TransactionSigningComplete",
+	Error: 106,
+	"106": "Error"
+});
+/**
+* User verification policy for WebAuthn authenticators
+* @enum {0 | 1 | 2}
+*/
+const UserVerificationPolicy = Object.freeze({
+	Required: 0,
+	"0": "Required",
+	Preferred: 1,
+	"1": "Preferred",
+	Discouraged: 2,
+	"2": "Discouraged"
+});
+/**
+* @enum {0 | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10}
+*/
+const WorkerRequestType = Object.freeze({
+	DeriveNearKeypairAndEncrypt: 0,
+	"0": "DeriveNearKeypairAndEncrypt",
+	RecoverKeypairFromPasskey: 1,
+	"1": "RecoverKeypairFromPasskey",
+	DecryptPrivateKeyWithPrf: 2,
+	"2": "DecryptPrivateKeyWithPrf",
+	SignTransactionsWithActions: 3,
+	"3": "SignTransactionsWithActions",
+	ExtractCosePublicKey: 4,
+	"4": "ExtractCosePublicKey",
+	SignTransactionWithKeyPair: 5,
+	"5": "SignTransactionWithKeyPair",
+	SignNep413Message: 6,
+	"6": "SignNep413Message",
+	RegisterDevice2WithDerivedKey: 7,
+	"7": "RegisterDevice2WithDerivedKey",
+	SignDelegateAction: 8,
+	"8": "SignDelegateAction",
+	DeriveThresholdEd25519ClientVerifyingShare: 9,
+	"9": "DeriveThresholdEd25519ClientVerifyingShare",
+	SignAddKeyThresholdPublicKeyNoPrompt: 10,
+	"10": "SignAddKeyThresholdPublicKeyNoPrompt"
+});
+/**
+* Worker response types enum - corresponds to TypeScript WorkerResponseType
+* @enum {0 | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25}
+*/
+const WorkerResponseType = Object.freeze({
+	DeriveNearKeypairAndEncryptSuccess: 0,
+	"0": "DeriveNearKeypairAndEncryptSuccess",
+	RecoverKeypairFromPasskeySuccess: 1,
+	"1": "RecoverKeypairFromPasskeySuccess",
+	DecryptPrivateKeyWithPrfSuccess: 2,
+	"2": "DecryptPrivateKeyWithPrfSuccess",
+	SignTransactionsWithActionsSuccess: 3,
+	"3": "SignTransactionsWithActionsSuccess",
+	ExtractCosePublicKeySuccess: 4,
+	"4": "ExtractCosePublicKeySuccess",
+	SignTransactionWithKeyPairSuccess: 5,
+	"5": "SignTransactionWithKeyPairSuccess",
+	SignNep413MessageSuccess: 6,
+	"6": "SignNep413MessageSuccess",
+	RegisterDevice2WithDerivedKeySuccess: 7,
+	"7": "RegisterDevice2WithDerivedKeySuccess",
+	SignDelegateActionSuccess: 8,
+	"8": "SignDelegateActionSuccess",
+	DeriveNearKeypairAndEncryptFailure: 9,
+	"9": "DeriveNearKeypairAndEncryptFailure",
+	RecoverKeypairFromPasskeyFailure: 10,
+	"10": "RecoverKeypairFromPasskeyFailure",
+	DecryptPrivateKeyWithPrfFailure: 11,
+	"11": "DecryptPrivateKeyWithPrfFailure",
+	SignTransactionsWithActionsFailure: 12,
+	"12": "SignTransactionsWithActionsFailure",
+	ExtractCosePublicKeyFailure: 13,
+	"13": "ExtractCosePublicKeyFailure",
+	SignTransactionWithKeyPairFailure: 14,
+	"14": "SignTransactionWithKeyPairFailure",
+	SignNep413MessageFailure: 15,
+	"15": "SignNep413MessageFailure",
+	RegisterDevice2WithDerivedKeyFailure: 16,
+	"16": "RegisterDevice2WithDerivedKeyFailure",
+	SignDelegateActionFailure: 17,
+	"17": "SignDelegateActionFailure",
+	RegistrationProgress: 18,
+	"18": "RegistrationProgress",
+	RegistrationComplete: 19,
+	"19": "RegistrationComplete",
+	ExecuteActionsProgress: 20,
+	"20": "ExecuteActionsProgress",
+	ExecuteActionsComplete: 21,
+	"21": "ExecuteActionsComplete",
+	DeriveThresholdEd25519ClientVerifyingShareSuccess: 22,
+	"22": "DeriveThresholdEd25519ClientVerifyingShareSuccess",
+	DeriveThresholdEd25519ClientVerifyingShareFailure: 23,
+	"23": "DeriveThresholdEd25519ClientVerifyingShareFailure",
+	SignAddKeyThresholdPublicKeyNoPromptSuccess: 24,
+	"24": "SignAddKeyThresholdPublicKeyNoPromptSuccess",
+	SignAddKeyThresholdPublicKeyNoPromptFailure: 25,
+	"25": "SignAddKeyThresholdPublicKeyNoPromptFailure"
+});
+const AuthenticationResponseFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_authenticationresponse_free(ptr >>> 0, 1));
+const AuthenticatorOptionsFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_authenticatoroptions_free(ptr >>> 0, 1));
+const ClientExtensionResultsFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_clientextensionresults_free(ptr >>> 0, 1));
+const ConfirmationConfigFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_confirmationconfig_free(ptr >>> 0, 1));
+const CoseExtractionResultFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_coseextractionresult_free(ptr >>> 0, 1));
+const DecryptPrivateKeyRequestFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_decryptprivatekeyrequest_free(ptr >>> 0, 1));
+const DecryptPrivateKeyResultFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_decryptprivatekeyresult_free(ptr >>> 0, 1));
+const DecryptionPayloadFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_decryptionpayload_free(ptr >>> 0, 1));
+const DelegateSignResultFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_delegatesignresult_free(ptr >>> 0, 1));
+const DeriveNearKeypairAndEncryptRequestFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_derivenearkeypairandencryptrequest_free(ptr >>> 0, 1));
+const DeriveNearKeypairAndEncryptResultFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_derivenearkeypairandencryptresult_free(ptr >>> 0, 1));
+const DeriveThresholdEd25519ClientVerifyingShareRequestFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_derivethresholded25519clientverifyingsharerequest_free(ptr >>> 0, 1));
+const DeriveThresholdEd25519ClientVerifyingShareResultFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_derivethresholded25519clientverifyingshareresult_free(ptr >>> 0, 1));
+const Device2TransactionContextFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_device2transactioncontext_free(ptr >>> 0, 1));
+const ExtractCoseRequestFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_extractcoserequest_free(ptr >>> 0, 1));
+const KeyActionResultFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_keyactionresult_free(ptr >>> 0, 1));
+const OriginPolicyInputFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_originpolicyinput_free(ptr >>> 0, 1));
+const PrfOutputsFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_prfoutputs_free(ptr >>> 0, 1));
+const PrfResultsFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_prfresults_free(ptr >>> 0, 1));
+const RecoverKeypairRequestFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_recoverkeypairrequest_free(ptr >>> 0, 1));
+const RecoverKeypairResultFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_recoverkeypairresult_free(ptr >>> 0, 1));
+const RegisterDevice2WithDerivedKeyRequestFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_registerdevice2withderivedkeyrequest_free(ptr >>> 0, 1));
+const RegisterDevice2WithDerivedKeyResultFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_registerdevice2withderivedkeyresult_free(ptr >>> 0, 1));
+const RegistrationPayloadFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_registrationpayload_free(ptr >>> 0, 1));
+const RegistrationResponseFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_registrationresponse_free(ptr >>> 0, 1));
+const RpcCallPayloadFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_rpccallpayload_free(ptr >>> 0, 1));
+const SerializedCredentialFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_serializedcredential_free(ptr >>> 0, 1));
+const SerializedRegistrationCredentialFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_serializedregistrationcredential_free(ptr >>> 0, 1));
+const SignNep413ResultFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_signnep413result_free(ptr >>> 0, 1));
+const TransactionContextFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_transactioncontext_free(ptr >>> 0, 1));
+const TransactionSignResultFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_transactionsignresult_free(ptr >>> 0, 1));
+const VrfChallengeFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_vrfchallenge_free(ptr >>> 0, 1));
+const WasmDelegateActionFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_wasmdelegateaction_free(ptr >>> 0, 1));
+const WasmPublicKeyFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_wasmpublickey_free(ptr >>> 0, 1));
+const WasmSignatureFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_wasmsignature_free(ptr >>> 0, 1));
+const WasmSignedDelegateFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_wasmsigneddelegate_free(ptr >>> 0, 1));
+const WasmSignedTransactionFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_wasmsignedtransaction_free(ptr >>> 0, 1));
+const WasmTransactionFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_wasmtransaction_free(ptr >>> 0, 1));
+const WebAuthnAuthenticationCredentialStructFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_webauthnauthenticationcredentialstruct_free(ptr >>> 0, 1));
+const WebAuthnRegistrationCredentialStructFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_webauthnregistrationcredentialstruct_free(ptr >>> 0, 1));
+const WorkerProgressMessageFinalization = typeof FinalizationRegistry === "undefined" ? {
+	register: () => {},
+	unregister: () => {}
+} : new FinalizationRegistry((ptr) => wasm.__wbg_workerprogressmessage_free(ptr >>> 0, 1));
+
+//#endregion
+//#region src/core/types/signer-worker.ts
+const DEFAULT_THRESHOLD_BEHAVIOR = "strict";
+const DEFAULT_SIGNER_MODE = "local-signer";
+const DEFAULT_SIGNING_MODE = { mode: DEFAULT_SIGNER_MODE };
+function isSignerMode(input) {
+	return input === "local-signer" || input === "threshold-signer";
+}
+function isThresholdBehavior(input) {
+	return input === "fallback" || input === "strict";
+}
+function coerceSignerMode(input, fallback = DEFAULT_SIGNING_MODE) {
+	if (input == null) return fallback;
+	if (typeof input === "string") return isSignerMode(input) ? { mode: input } : fallback;
+	if (typeof input !== "object") return fallback;
+	if (input.mode === "local-signer") return { mode: input.mode };
+	const behavior = input.behavior;
+	return isThresholdBehavior(behavior) ? {
+		mode: input.mode,
+		behavior
+	} : { mode: input.mode };
+}
+/**
+* Merge a mode-only override onto a base signer mode.
+*
+* This is intentionally "partial override" semantics:
+* - override sets `mode` when provided
+* - override sets `behavior` only when explicitly provided
+* - if override switches to `threshold-signer` without specifying `behavior`,
+*   preserve `base.behavior` when base is already `threshold-signer`
+*/
+function mergeSignerMode(base, override) {
+	const baseNormalized = coerceSignerMode(base, DEFAULT_SIGNING_MODE);
+	if (override == null) return baseNormalized;
+	if (typeof override === "string") {
+		if (!isSignerMode(override)) return baseNormalized;
+		if (override === "local-signer") return { mode: "local-signer" };
+		if (baseNormalized.mode === "threshold-signer") {
+			const behavior$1 = baseNormalized.behavior;
+			return isThresholdBehavior(behavior$1) ? {
+				mode: "threshold-signer",
+				behavior: behavior$1
+			} : { mode: "threshold-signer" };
+		}
+		return { mode: "threshold-signer" };
+	}
+	if (typeof override !== "object") return baseNormalized;
+	const mode = override.mode;
+	if (mode === "local-signer") return { mode: "local-signer" };
+	if (mode !== "threshold-signer") return baseNormalized;
+	const behavior = override.behavior;
+	if (isThresholdBehavior(behavior)) return {
+		mode: "threshold-signer",
+		behavior
+	};
+	if (baseNormalized.mode === "threshold-signer") {
+		const baseBehavior = baseNormalized.behavior;
+		if (isThresholdBehavior(baseBehavior)) return {
+			mode: "threshold-signer",
+			behavior: baseBehavior
+		};
+	}
+	return { mode: "threshold-signer" };
+}
+function getThresholdBehaviorFromSignerMode(mode) {
+	if (mode.mode !== "threshold-signer") return DEFAULT_THRESHOLD_BEHAVIOR;
+	return isThresholdBehavior(mode.behavior) ? mode.behavior : DEFAULT_THRESHOLD_BEHAVIOR;
+}
+/**
+* Internal, single-purpose worker request types.
+*
+* These are intentionally *not* exposed as general-purpose "no prompt" signing APIs.
+* They exist to support tightly-scoped post-registration flows without allowing
+* arbitrary actions/receivers to be signed without VRF/WebAuthn binding.
+*/
+const INTERNAL_WORKER_REQUEST_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT = 10;
+const INTERNAL_WORKER_RESPONSE_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT_SUCCESS = 24;
+const INTERNAL_WORKER_RESPONSE_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT_FAILURE = 25;
+const DEFAULT_CONFIRMATION_CONFIG = {
+	uiMode: "modal",
+	behavior: "requireClick",
+	autoProceedDelay: 0,
+	theme: "dark"
+};
+function isWorkerProgress(response) {
+	return response.type === WorkerResponseType.RegistrationProgress || response.type === WorkerResponseType.RegistrationComplete || response.type === WorkerResponseType.ExecuteActionsProgress || response.type === WorkerResponseType.ExecuteActionsComplete;
+}
+function isWorkerSuccess(response) {
+	return response.type === WorkerResponseType.DeriveNearKeypairAndEncryptSuccess || response.type === WorkerResponseType.RecoverKeypairFromPasskeySuccess || response.type === WorkerResponseType.DecryptPrivateKeyWithPrfSuccess || response.type === WorkerResponseType.SignTransactionsWithActionsSuccess || response.type === WorkerResponseType.SignDelegateActionSuccess || response.type === WorkerResponseType.ExtractCosePublicKeySuccess || response.type === WorkerResponseType.SignTransactionWithKeyPairSuccess || response.type === WorkerResponseType.SignNep413MessageSuccess || response.type === WorkerResponseType.RegisterDevice2WithDerivedKeySuccess || response.type === WorkerResponseType.DeriveThresholdEd25519ClientVerifyingShareSuccess || response.type === INTERNAL_WORKER_RESPONSE_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT_SUCCESS;
+}
+function isWorkerError(response) {
+	return response.type === WorkerResponseType.DeriveNearKeypairAndEncryptFailure || response.type === WorkerResponseType.RecoverKeypairFromPasskeyFailure || response.type === WorkerResponseType.DecryptPrivateKeyWithPrfFailure || response.type === WorkerResponseType.SignTransactionsWithActionsFailure || response.type === WorkerResponseType.SignDelegateActionFailure || response.type === WorkerResponseType.ExtractCosePublicKeyFailure || response.type === WorkerResponseType.SignTransactionWithKeyPairFailure || response.type === WorkerResponseType.SignNep413MessageFailure || response.type === WorkerResponseType.RegisterDevice2WithDerivedKeyFailure || response.type === WorkerResponseType.DeriveThresholdEd25519ClientVerifyingShareFailure || response.type === INTERNAL_WORKER_RESPONSE_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT_FAILURE;
+}
+function isDeriveNearKeypairAndEncryptSuccess(response) {
+	return response.type === WorkerResponseType.DeriveNearKeypairAndEncryptSuccess;
+}
+function isRecoverKeypairFromPasskeySuccess(response) {
+	return response.type === WorkerResponseType.RecoverKeypairFromPasskeySuccess;
+}
+function isSignTransactionsWithActionsSuccess(response) {
+	return response.type === WorkerResponseType.SignTransactionsWithActionsSuccess;
+}
+function isSignAddKeyThresholdPublicKeyNoPromptSuccess(response) {
+	return response.type === INTERNAL_WORKER_RESPONSE_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT_SUCCESS;
+}
+function isSignDelegateActionSuccess(response) {
+	return response.type === WorkerResponseType.SignDelegateActionSuccess;
+}
+function isDecryptPrivateKeyWithPrfSuccess(response) {
+	return response.type === WorkerResponseType.DecryptPrivateKeyWithPrfSuccess;
+}
+function isExtractCosePublicKeySuccess(response) {
+	return response.type === WorkerResponseType.ExtractCosePublicKeySuccess;
+}
+function isSignNep413MessageSuccess(response) {
+	return response.type === WorkerResponseType.SignNep413MessageSuccess;
+}
+function isRegisterDevice2WithDerivedKeySuccess(response) {
+	return response.type === WorkerResponseType.RegisterDevice2WithDerivedKeySuccess;
+}
+
+//#endregion
+//#region src/core/defaultConfigs.ts
+const PASSKEY_MANAGER_DEFAULT_CONFIGS = {
+	nearRpcUrl: "https://test.rpc.fastnear.com, https://rpc.testnet.near.org",
+	nearNetwork: "testnet",
+	contractId: "w3a-v1.testnet",
+	nearExplorerUrl: "https://testnet.nearblocks.io",
+	signerMode: { mode: "local-signer" },
+	signingSessionDefaults: {
+		ttlMs: 0,
+		remainingUses: 0
+	},
+	relayer: {
+		url: "",
+		delegateActionRoute: "/signed-delegate",
+		emailRecovery: {
+			minBalanceYocto: "10000000000000000000000",
+			pollingIntervalMs: 4e3,
+			maxPollingDurationMs: 1800 * 1e3,
+			pendingTtlMs: 1800 * 1e3,
+			mailtoAddress: "recover@web3authn.org"
+		}
+	},
+	vrfWorkerConfigs: { shamir3pass: {
+		p: "3N5w46AIGjGT2v5Vua_TMD5Ywfa9U2F7-WzW8SNDsIM",
+		relayServerUrl: "",
+		applyServerLockRoute: "/vrf/apply-server-lock",
+		removeServerLockRoute: "/vrf/remove-server-lock"
+	} },
+	emailRecoveryContracts: {
+		emailRecovererGlobalContract: "w3a-email-recoverer-v1.testnet",
+		zkEmailVerifierContract: "zk-email-verifier-v1.testnet",
+		emailDkimVerifierContract: "email-dkim-verifier-v1.testnet"
+	},
+	iframeWallet: {
+		walletOrigin: "https://wallet.example.localhost",
+		walletServicePath: "/wallet-service",
+		sdkBasePath: "/sdk",
+		rpIdOverride: "example.localhost"
+	}
+};
+const THRESHOLD_ED25519_CLIENT_PARTICIPANT_ID = 1;
+const THRESHOLD_ED25519_RELAYER_PARTICIPANT_ID = 2;
+const DEFAULT_EMAIL_RECOVERY_CONTRACTS = {
+	emailRecovererGlobalContract: PASSKEY_MANAGER_DEFAULT_CONFIGS.emailRecoveryContracts.emailRecovererGlobalContract,
+	zkEmailVerifierContract: PASSKEY_MANAGER_DEFAULT_CONFIGS.emailRecoveryContracts.zkEmailVerifierContract,
+	emailDkimVerifierContract: PASSKEY_MANAGER_DEFAULT_CONFIGS.emailRecoveryContracts.emailDkimVerifierContract
+};
+function buildConfigsFromEnv(overrides = {}) {
+	const defaults = PASSKEY_MANAGER_DEFAULT_CONFIGS;
+	const relayerUrl = overrides.relayer?.url ?? defaults.relayer?.url ?? "";
+	const relayServerUrlDefault = relayerUrl;
+	const overrideShamirRelayServerUrl = overrides.vrfWorkerConfigs?.shamir3pass?.relayServerUrl;
+	const resolvedShamirRelayServerUrl = overrideShamirRelayServerUrl !== void 0 ? toTrimmedString(overrideShamirRelayServerUrl) ?? "" : toTrimmedString(defaults.vrfWorkerConfigs?.shamir3pass?.relayServerUrl) || relayServerUrlDefault;
+	const signerMode = coerceSignerMode(overrides.signerMode, defaults.signerMode);
+	const merged = {
+		nearRpcUrl: overrides.nearRpcUrl ?? defaults.nearRpcUrl,
+		nearNetwork: overrides.nearNetwork ?? defaults.nearNetwork,
+		contractId: overrides.contractId ?? defaults.contractId,
+		nearExplorerUrl: overrides.nearExplorerUrl ?? defaults.nearExplorerUrl,
+		walletTheme: overrides.walletTheme ?? defaults.walletTheme,
+		signerMode,
+		signingSessionDefaults: {
+			ttlMs: overrides.signingSessionDefaults?.ttlMs ?? defaults.signingSessionDefaults?.ttlMs,
+			remainingUses: overrides.signingSessionDefaults?.remainingUses ?? defaults.signingSessionDefaults?.remainingUses
+		},
+		relayer: {
+			url: relayerUrl,
+			delegateActionRoute: overrides.relayer?.delegateActionRoute ?? defaults.relayer?.delegateActionRoute,
+			emailRecovery: {
+				minBalanceYocto: overrides.relayer?.emailRecovery?.minBalanceYocto ?? defaults.relayer?.emailRecovery?.minBalanceYocto,
+				pollingIntervalMs: overrides.relayer?.emailRecovery?.pollingIntervalMs ?? defaults.relayer?.emailRecovery?.pollingIntervalMs,
+				maxPollingDurationMs: overrides.relayer?.emailRecovery?.maxPollingDurationMs ?? defaults.relayer?.emailRecovery?.maxPollingDurationMs,
+				pendingTtlMs: overrides.relayer?.emailRecovery?.pendingTtlMs ?? defaults.relayer?.emailRecovery?.pendingTtlMs,
+				mailtoAddress: overrides.relayer?.emailRecovery?.mailtoAddress ?? defaults.relayer?.emailRecovery?.mailtoAddress
+			}
+		},
+		authenticatorOptions: overrides.authenticatorOptions ?? defaults.authenticatorOptions,
+		vrfWorkerConfigs: { shamir3pass: {
+			p: overrides.vrfWorkerConfigs?.shamir3pass?.p ?? defaults.vrfWorkerConfigs?.shamir3pass?.p,
+			relayServerUrl: resolvedShamirRelayServerUrl,
+			applyServerLockRoute: overrides.vrfWorkerConfigs?.shamir3pass?.applyServerLockRoute ?? defaults.vrfWorkerConfigs?.shamir3pass?.applyServerLockRoute,
+			removeServerLockRoute: overrides.vrfWorkerConfigs?.shamir3pass?.removeServerLockRoute ?? defaults.vrfWorkerConfigs?.shamir3pass?.removeServerLockRoute
+		} },
+		emailRecoveryContracts: {
+			emailRecovererGlobalContract: overrides.emailRecoveryContracts?.emailRecovererGlobalContract ?? defaults.emailRecoveryContracts?.emailRecovererGlobalContract,
+			zkEmailVerifierContract: overrides.emailRecoveryContracts?.zkEmailVerifierContract ?? defaults.emailRecoveryContracts?.zkEmailVerifierContract,
+			emailDkimVerifierContract: overrides.emailRecoveryContracts?.emailDkimVerifierContract ?? defaults.emailRecoveryContracts?.emailDkimVerifierContract
+		},
+		iframeWallet: {
+			walletOrigin: overrides.iframeWallet?.walletOrigin ?? defaults.iframeWallet?.walletOrigin,
+			rpIdOverride: overrides.iframeWallet?.rpIdOverride ?? defaults.iframeWallet?.rpIdOverride,
+			walletServicePath: toTrimmedString(overrides.iframeWallet?.walletServicePath) || toTrimmedString(defaults.iframeWallet?.walletServicePath) || "/wallet-service",
+			sdkBasePath: toTrimmedString(overrides.iframeWallet?.sdkBasePath) || toTrimmedString(defaults.iframeWallet?.sdkBasePath) || "/sdk"
+		}
+	};
+	if (!merged.contractId) throw new Error("[configPresets] Missing required config: contractId");
+	if (!merged.relayer.url) throw new Error("[configPresets] Missing required config: relayer.url");
+	return merged;
+}
+
+//#endregion
+//#region src/core/WebAuthnManager/SignerWorkerManager/getDeviceNumber.ts
+function parseDeviceNumber(value, options = {}) {
+	const deviceNumber = Number(value);
+	const min = options.min ?? 1;
+	if (!Number.isSafeInteger(deviceNumber) || deviceNumber < min) return null;
+	return deviceNumber;
+}
+/**
+* Return the deviceNumber for the last logged-in user for the given account.
+* This uses the app-state "last user" pointer only; if it does not match the
+* requested account, an error is thrown instead of silently falling back.
+*/
+async function getLastLoggedInDeviceNumber(nearAccountId, clientDB) {
+	const accountId = toAccountId(nearAccountId);
+	const last = await clientDB.getLastUser();
+	if (last && last.nearAccountId === accountId) {
+		const deviceNumber = parseDeviceNumber(last.deviceNumber, { min: 1 });
+		if (deviceNumber !== null) return deviceNumber;
+	}
+	throw new Error(`No last user session for account ${accountId}`);
+}
+
+//#endregion
+export { DEFAULT_CONFIRMATION_CONFIG, DEFAULT_SIGNING_MODE, DEFAULT_THRESHOLD_BEHAVIOR, INTERNAL_WORKER_REQUEST_TYPE_SIGN_ADD_KEY_THRESHOLD_PUBLIC_KEY_NO_PROMPT, PASSKEY_MANAGER_DEFAULT_CONFIGS, THRESHOLD_ED25519_CLIENT_PARTICIPANT_ID, THRESHOLD_ED25519_RELAYER_PARTICIPANT_ID, UserVerificationPolicy, WorkerRequestType, WorkerResponseType, buildConfigsFromEnv, coerceSignerMode, getLastLoggedInDeviceNumber, getThresholdBehaviorFromSignerMode, isDecryptPrivateKeyWithPrfSuccess, isDeriveNearKeypairAndEncryptSuccess, isExtractCosePublicKeySuccess, isRecoverKeypairFromPasskeySuccess, isRegisterDevice2WithDerivedKeySuccess, isSignAddKeyThresholdPublicKeyNoPromptSuccess, isSignDelegateActionSuccess, isSignNep413MessageSuccess, isSignTransactionsWithActionsSuccess, isWorkerError, isWorkerProgress, isWorkerSuccess, mergeSignerMode };
+//# sourceMappingURL=getDeviceNumber-WiNzKx1x.js.map