@tatchi-xyz/sdk 0.21.0 → 0.31.1

package/dist/cjs/react/sdk/src/core/WebAuthnManager/SignerWorkerManager/handlers/signDelegateAction.js

@@ -1,105 +0,0 @@
-const require_rolldown_runtime = require('../../../../../../_virtual/rolldown_runtime.js');
-const require_accountIds = require('../../../types/accountIds.js');
-const require_signer_worker = require('../../../types/signer-worker.js');
-const require_defaultConfigs = require('../../../defaultConfigs.js');
-const require_actions = require('../../../types/actions.js');
-const require_getDeviceNumber = require('../getDeviceNumber.js');
-const require_sessionHandshake = require('../sessionHandshake.js');
-const require_validation = require('./validation.js');
-let src_wasm_signer_worker_pkg_wasm_signer_worker_js = require("../../../../../../../wasm_signer_worker/pkg/wasm_signer_worker.js");
-src_wasm_signer_worker_pkg_wasm_signer_worker_js = require_rolldown_runtime.__toESM(src_wasm_signer_worker_pkg_wasm_signer_worker_js);
-
-//#region src/core/WebAuthnManager/SignerWorkerManager/handlers/signDelegateAction.ts
-require_defaultConfigs.init_defaultConfigs();
-require_accountIds.init_accountIds();
-require_actions.init_actions();
-require_signer_worker.init_signer_worker();
-require_getDeviceNumber.init_getDeviceNumber();
-async function signDelegateAction({ ctx, delegate, rpcCall, onEvent, confirmationConfigOverride, title, body, sessionId: providedSessionId }) {
-	const sessionId = providedSessionId ?? require_sessionHandshake.generateSessionId();
-	const nearAccountId = rpcCall.nearAccountId || delegate.senderId;
-	const resolvedRpcCall = {
-		contractId: rpcCall.contractId || require_defaultConfigs.PASSKEY_MANAGER_DEFAULT_CONFIGS.contractId,
-		nearRpcUrl: rpcCall.nearRpcUrl || require_defaultConfigs.PASSKEY_MANAGER_DEFAULT_CONFIGS.nearRpcUrl.split(",")[0] || require_defaultConfigs.PASSKEY_MANAGER_DEFAULT_CONFIGS.nearRpcUrl,
-		nearAccountId
-	};
-	const actionsWasm = delegate.actions.map(require_actions.toActionArgsWasm);
-	actionsWasm.forEach((action, actionIndex) => {
-		try {
-			require_actions.validateActionArgsWasm(action);
-		} catch (error) {
-			throw new Error(`Delegate action ${actionIndex} validation failed: ${error instanceof Error ? error.message : String(error)}`);
-		}
-	});
-	const deviceNumber = await require_getDeviceNumber.getLastLoggedInDeviceNumber(nearAccountId, ctx.indexedDB.clientDB);
-	const encryptedKeyData = await ctx.indexedDB.nearKeysDB.getEncryptedKey(nearAccountId, deviceNumber);
-	if (!encryptedKeyData) throw new Error(`No encrypted key found for account: ${nearAccountId}`);
-	if (!ctx.vrfWorkerManager) throw new Error("VrfWorkerManager not available for delegate signing");
-	const confirmation = await ctx.vrfWorkerManager.confirmAndPrepareSigningSession({
-		ctx,
-		sessionId,
-		kind: "delegate",
-		nearAccountId,
-		delegate: {
-			senderId: delegate.senderId || nearAccountId,
-			receiverId: delegate.receiverId,
-			actions: actionsWasm,
-			nonce: delegate.nonce,
-			maxBlockHeight: delegate.maxBlockHeight
-		},
-		rpcCall: resolvedRpcCall,
-		confirmationConfigOverride,
-		title,
-		body
-	});
-	const intentDigest = confirmation.intentDigest;
-	const transactionContext = confirmation.transactionContext;
-	const credential = confirmation.credential ? JSON.stringify(confirmation.credential) : void 0;
-	const response = await ctx.sendMessage({
-		sessionId,
-		message: {
-			type: src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerRequestType.SignDelegateAction,
-			payload: {
-				rpcCall: resolvedRpcCall,
-				createdAt: Date.now(),
-				decryption: {
-					encryptedPrivateKeyData: encryptedKeyData.encryptedData,
-					encryptedPrivateKeyChacha20NonceB64u: encryptedKeyData.chacha20NonceB64u
-				},
-				delegate: {
-					senderId: delegate.senderId || nearAccountId,
-					receiverId: delegate.receiverId,
-					actions: actionsWasm,
-					nonce: delegate.nonce.toString(),
-					maxBlockHeight: delegate.maxBlockHeight.toString(),
-					publicKey: require_validation.toPublicKeyString(delegate.publicKey)
-				},
-				intentDigest,
-				transactionContext,
-				credential
-			}
-		},
-		onEvent
-	});
-	console.debug("[WebAuthnManager][delegate] raw worker response", response);
-	if (!require_signer_worker.isSignDelegateActionSuccess(response)) {
-		console.error("[WebAuthnManager][delegate] non-success worker response", response);
-		const payloadError = response?.payload?.error;
-		throw new Error(payloadError || "Delegate action signing failed");
-	}
-	const payload = response.payload;
-	if (!payload.success || !payload.signedDelegate || !payload.hash) {
-		console.error("[WebAuthnManager][delegate] invalid delegate payload", payload);
-		throw new Error(payload.error || "Delegate action signing failed");
-	}
-	return {
-		signedDelegate: payload.signedDelegate,
-		hash: payload.hash,
-		nearAccountId: require_accountIds.toAccountId(nearAccountId),
-		logs: payload.logs
-	};
-}
-
-//#endregion
-exports.signDelegateAction = signDelegateAction;
-//# sourceMappingURL=signDelegateAction.js.map

package/dist/cjs/react/sdk/src/core/WebAuthnManager/SignerWorkerManager/handlers/signDelegateAction.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"signDelegateAction.js","names":["generateSessionId","PASSKEY_MANAGER_DEFAULT_CONFIGS","toActionArgsWasm","getLastLoggedInDeviceNumber","WorkerRequestType","toPublicKeyString","isSignDelegateActionSuccess","toAccountId"],"sources":["../../../../../../../../../src/core/WebAuthnManager/SignerWorkerManager/handlers/signDelegateAction.ts"],"sourcesContent":["import { PASSKEY_MANAGER_DEFAULT_CONFIGS } from '../../../defaultConfigs';\nimport { AccountId, toAccountId } from '../../../types/accountIds';\nimport { toActionArgsWasm, validateActionArgsWasm } from '../../../types/actions';\nimport { DelegateActionInput } from '../../../types/delegate';\nimport { type onProgressEvents } from '../../../types/sdkSentEvents';\nimport {\n  ConfirmationConfig,\n  RpcCallPayload,\n  WorkerRequestType,\n  isSignDelegateActionSuccess,\n  WasmDelegateSignResult,\n  WasmSignedDelegate,\n} from '../../../types/signer-worker';\nimport { SignerWorkerManagerContext } from '..';\nimport { getLastLoggedInDeviceNumber } from '../getDeviceNumber';\nimport { generateSessionId } from '../sessionHandshake.js';\nimport { toPublicKeyString } from './validation';\n\n\nexport async function signDelegateAction({\n  ctx,\n  delegate,\n  rpcCall,\n  onEvent,\n  confirmationConfigOverride,\n  title,\n  body,\n  sessionId: providedSessionId,\n}: {\n  ctx: SignerWorkerManagerContext;\n  delegate: DelegateActionInput;\n  rpcCall: RpcCallPayload;\n  onEvent?: (update: onProgressEvents) => void;\n  confirmationConfigOverride?: Partial<ConfirmationConfig>;\n  title?: string;\n  body?: string;\n  sessionId?: string;\n}): Promise<{\n  signedDelegate: WasmSignedDelegate;\n  hash: string;\n  nearAccountId: AccountId;\n  logs?: string[];\n}> {\n  const sessionId = providedSessionId ?? generateSessionId();\n  const nearAccountId = rpcCall.nearAccountId || delegate.senderId;\n\n  const resolvedRpcCall = {\n    contractId: rpcCall.contractId || PASSKEY_MANAGER_DEFAULT_CONFIGS.contractId,\n    nearRpcUrl: rpcCall.nearRpcUrl || (PASSKEY_MANAGER_DEFAULT_CONFIGS.nearRpcUrl.split(',')[0] || PASSKEY_MANAGER_DEFAULT_CONFIGS.nearRpcUrl),\n    nearAccountId,\n  } as RpcCallPayload;\n\n  const actionsWasm = delegate.actions.map(toActionArgsWasm);\n  actionsWasm.forEach((action, actionIndex) => {\n    try {\n      validateActionArgsWasm(action);\n    } catch (error) {\n      throw new Error(\n        `Delegate action ${actionIndex} validation failed: ${error instanceof Error ? error.message : String(error)}`\n      );\n    }\n  });\n\n  const deviceNumber = await getLastLoggedInDeviceNumber(nearAccountId, ctx.indexedDB.clientDB);\n  const encryptedKeyData = await ctx.indexedDB.nearKeysDB.getEncryptedKey(nearAccountId, deviceNumber);\n  if (!encryptedKeyData) {\n    throw new Error(`No encrypted key found for account: ${nearAccountId}`);\n  }\n  if (!ctx.vrfWorkerManager) {\n    throw new Error('VrfWorkerManager not available for delegate signing');\n  }\n\n  const confirmation = await ctx.vrfWorkerManager.confirmAndPrepareSigningSession({\n    ctx,\n    sessionId,\n    kind: 'delegate',\n    nearAccountId,\n    delegate: {\n      senderId: delegate.senderId || nearAccountId,\n      receiverId: delegate.receiverId,\n      actions: actionsWasm,\n      nonce: delegate.nonce,\n      maxBlockHeight: delegate.maxBlockHeight,\n    },\n    rpcCall: resolvedRpcCall,\n    confirmationConfigOverride,\n    title,\n    body,\n  });\n\n  const intentDigest = confirmation.intentDigest;\n  const transactionContext = confirmation.transactionContext;\n  const credential = confirmation.credential ? JSON.stringify(confirmation.credential) : undefined;\n\n  const response = await ctx.sendMessage({\n    sessionId,\n    message: {\n      type: WorkerRequestType.SignDelegateAction,\n      payload: {\n        rpcCall: resolvedRpcCall,\n        createdAt: Date.now(),\n        decryption: {\n          encryptedPrivateKeyData: encryptedKeyData.encryptedData,\n          encryptedPrivateKeyChacha20NonceB64u: encryptedKeyData.chacha20NonceB64u,\n        },\n        delegate: {\n          senderId: delegate.senderId || nearAccountId,\n          receiverId: delegate.receiverId,\n          actions: actionsWasm,\n          nonce: delegate.nonce.toString(),\n          maxBlockHeight: delegate.maxBlockHeight.toString(),\n          publicKey: toPublicKeyString(delegate.publicKey),\n        },\n        intentDigest,\n        transactionContext,\n        credential,\n      },\n    },\n    onEvent,\n  });\n\n  // eslint-disable-next-line no-console\n  console.debug('[WebAuthnManager][delegate] raw worker response', response);\n\n  if (!isSignDelegateActionSuccess(response)) {\n    // eslint-disable-next-line no-console\n    console.error('[WebAuthnManager][delegate] non-success worker response', response);\n    const payloadError = (response as any)?.payload?.error;\n    throw new Error(payloadError || 'Delegate action signing failed');\n  }\n\n  const payload = response.payload as WasmDelegateSignResult;\n  if (!payload.success || !payload.signedDelegate || !payload.hash) {\n    // eslint-disable-next-line no-console\n    console.error('[WebAuthnManager][delegate] invalid delegate payload', payload);\n    throw new Error(payload.error || 'Delegate action signing failed');\n  }\n\n  return {\n    signedDelegate: payload.signedDelegate,\n    hash: payload.hash,\n    nearAccountId: toAccountId(nearAccountId),\n    logs: payload.logs,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAmBA,eAAsB,mBAAmB,EACvC,KACA,UACA,SACA,SACA,4BACA,OACA,MACA,WAAW,qBAeV;CACD,MAAM,YAAY,qBAAqBA;CACvC,MAAM,gBAAgB,QAAQ,iBAAiB,SAAS;CAExD,MAAM,kBAAkB;EACtB,YAAY,QAAQ,cAAcC,uDAAgC;EAClE,YAAY,QAAQ,cAAeA,uDAAgC,WAAW,MAAM,KAAK,MAAMA,uDAAgC;EAC/H;;CAGF,MAAM,cAAc,SAAS,QAAQ,IAAIC;AACzC,aAAY,SAAS,QAAQ,gBAAgB;AAC3C,MAAI;AACF,0CAAuB;WAChB,OAAO;AACd,SAAM,IAAI,MACR,mBAAmB,YAAY,sBAAsB,iBAAiB,QAAQ,MAAM,UAAU,OAAO;;;CAK3G,MAAM,eAAe,MAAMC,oDAA4B,eAAe,IAAI,UAAU;CACpF,MAAM,mBAAmB,MAAM,IAAI,UAAU,WAAW,gBAAgB,eAAe;AACvF,KAAI,CAAC,iBACH,OAAM,IAAI,MAAM,uCAAuC;AAEzD,KAAI,CAAC,IAAI,iBACP,OAAM,IAAI,MAAM;CAGlB,MAAM,eAAe,MAAM,IAAI,iBAAiB,gCAAgC;EAC9E;EACA;EACA,MAAM;EACN;EACA,UAAU;GACR,UAAU,SAAS,YAAY;GAC/B,YAAY,SAAS;GACrB,SAAS;GACT,OAAO,SAAS;GAChB,gBAAgB,SAAS;;EAE3B,SAAS;EACT;EACA;EACA;;CAGF,MAAM,eAAe,aAAa;CAClC,MAAM,qBAAqB,aAAa;CACxC,MAAM,aAAa,aAAa,aAAa,KAAK,UAAU,aAAa,cAAc;CAEvF,MAAM,WAAW,MAAM,IAAI,YAAY;EACrC;EACA,SAAS;GACP,MAAMC,mEAAkB;GACxB,SAAS;IACP,SAAS;IACT,WAAW,KAAK;IAChB,YAAY;KACV,yBAAyB,iBAAiB;KAC1C,sCAAsC,iBAAiB;;IAEzD,UAAU;KACR,UAAU,SAAS,YAAY;KAC/B,YAAY,SAAS;KACrB,SAAS;KACT,OAAO,SAAS,MAAM;KACtB,gBAAgB,SAAS,eAAe;KACxC,WAAWC,qCAAkB,SAAS;;IAExC;IACA;IACA;;;EAGJ;;AAIF,SAAQ,MAAM,mDAAmD;AAEjE,KAAI,CAACC,kDAA4B,WAAW;AAE1C,UAAQ,MAAM,2DAA2D;EACzE,MAAM,eAAgB,UAAkB,SAAS;AACjD,QAAM,IAAI,MAAM,gBAAgB;;CAGlC,MAAM,UAAU,SAAS;AACzB,KAAI,CAAC,QAAQ,WAAW,CAAC,QAAQ,kBAAkB,CAAC,QAAQ,MAAM;AAEhE,UAAQ,MAAM,wDAAwD;AACtE,QAAM,IAAI,MAAM,QAAQ,SAAS;;AAGnC,QAAO;EACL,gBAAgB,QAAQ;EACxB,MAAM,QAAQ;EACd,eAAeC,+BAAY;EAC3B,MAAM,QAAQ"}

package/dist/cjs/react/sdk/src/core/WebAuthnManager/SignerWorkerManager/handlers/signNep413Message.js

@@ -1,80 +0,0 @@
-const require_rolldown_runtime = require('../../../../../../_virtual/rolldown_runtime.js');
-const require_signer_worker = require('../../../types/signer-worker.js');
-const require_validation = require('../../../WalletIframe/validation.js');
-const require_getDeviceNumber = require('../getDeviceNumber.js');
-const require_sessionHandshake = require('../sessionHandshake.js');
-let src_wasm_signer_worker_pkg_wasm_signer_worker_js = require("../../../../../../../wasm_signer_worker/pkg/wasm_signer_worker.js");
-src_wasm_signer_worker_pkg_wasm_signer_worker_js = require_rolldown_runtime.__toESM(src_wasm_signer_worker_pkg_wasm_signer_worker_js);
-
-//#region src/core/WebAuthnManager/SignerWorkerManager/handlers/signNep413Message.ts
-require_signer_worker.init_signer_worker();
-require_getDeviceNumber.init_getDeviceNumber();
-require_validation.init_validation();
-/**
-* Sign a NEP-413 message using the user's passkey-derived private key
-*
-* @param payload - NEP-413 signing parameters including message, recipient, nonce, and state
-* @returns Promise resolving to signing result with account ID, public key, and signature
-*/
-async function signNep413Message({ ctx, payload }) {
-	try {
-		const deviceNumber = await require_getDeviceNumber.getLastLoggedInDeviceNumber(payload.accountId, ctx.indexedDB.clientDB);
-		const encryptedKeyData = await ctx.indexedDB.nearKeysDB.getEncryptedKey(payload.accountId, deviceNumber);
-		if (!encryptedKeyData) throw new Error(`No encrypted key found for account: ${payload.accountId}`);
-		const sessionId = payload.sessionId ?? require_sessionHandshake.generateSessionId();
-		if (!ctx.vrfWorkerManager) throw new Error("VrfWorkerManager not available for NEP-413 signing");
-		await ctx.vrfWorkerManager.confirmAndPrepareSigningSession({
-			ctx,
-			sessionId,
-			kind: "nep413",
-			nearAccountId: payload.accountId,
-			message: payload.message,
-			recipient: payload.recipient,
-			title: payload.title,
-			body: payload.body,
-			confirmationConfigOverride: payload.confirmationConfigOverride,
-			contractId: payload.contractId,
-			nearRpcUrl: payload.nearRpcUrl
-		});
-		const response = await ctx.sendMessage({
-			sessionId,
-			message: {
-				type: src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerRequestType.SignNep413Message,
-				payload: {
-					message: payload.message,
-					recipient: payload.recipient,
-					nonce: payload.nonce,
-					state: payload.state || void 0,
-					accountId: payload.accountId,
-					encryptedPrivateKeyData: encryptedKeyData.encryptedData,
-					encryptedPrivateKeyChacha20NonceB64u: encryptedKeyData.chacha20NonceB64u
-				}
-			}
-		});
-		if (!require_signer_worker.isSignNep413MessageSuccess(response)) {
-			console.error("SignerWorkerManager: NEP-413 signing failed:", response);
-			const payloadError = require_validation.isObject(response?.payload) && response?.payload?.error;
-			throw new Error(payloadError || "NEP-413 signing failed");
-		}
-		return {
-			success: true,
-			accountId: response.payload.accountId,
-			publicKey: response.payload.publicKey,
-			signature: response.payload.signature,
-			state: response.payload.state || void 0
-		};
-	} catch (error) {
-		console.error("SignerWorkerManager: NEP-413 signing error:", error);
-		return {
-			success: false,
-			accountId: "",
-			publicKey: "",
-			signature: "",
-			error: error && typeof error.message === "string" ? error.message : "Unknown error"
-		};
-	}
-}
-
-//#endregion
-exports.signNep413Message = signNep413Message;
-//# sourceMappingURL=signNep413Message.js.map

package/dist/cjs/react/sdk/src/core/WebAuthnManager/SignerWorkerManager/handlers/signNep413Message.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"signNep413Message.js","names":["getLastLoggedInDeviceNumber","generateSessionId","WorkerRequestType","isSignNep413MessageSuccess","isObject","error: unknown"],"sources":["../../../../../../../../../src/core/WebAuthnManager/SignerWorkerManager/handlers/signNep413Message.ts"],"sourcesContent":["\nimport { WorkerRequestType, isSignNep413MessageSuccess } from '../../../types/signer-worker';\nimport type { ConfirmationConfig } from '../../../types/signer-worker';\nimport { getLastLoggedInDeviceNumber } from '../getDeviceNumber';\nimport { SignerWorkerManagerContext } from '..';\nimport { isObject } from '../../../WalletIframe/validation';\nimport { generateSessionId } from '../sessionHandshake.js';\n\n/**\n * Sign a NEP-413 message using the user's passkey-derived private key\n *\n * @param payload - NEP-413 signing parameters including message, recipient, nonce, and state\n * @returns Promise resolving to signing result with account ID, public key, and signature\n */\nexport async function signNep413Message({ ctx, payload }: {\n  ctx: SignerWorkerManagerContext;\n  payload: {\n    message: string;\n    recipient: string;\n    nonce: string;\n    state: string | null;\n    accountId: string;\n    title?: string;\n    body?: string;\n    confirmationConfigOverride?: Partial<ConfirmationConfig>;\n    sessionId?: string;\n    contractId?: string;\n    nearRpcUrl?: string;\n  };\n}): Promise<{\n  success: boolean;\n  accountId: string;\n  publicKey: string;\n  signature: string;\n  state?: string;\n  error?: string;\n}> {\n  try {\n    const deviceNumber = await getLastLoggedInDeviceNumber(payload.accountId, ctx.indexedDB.clientDB);\n    const encryptedKeyData = await ctx.indexedDB.nearKeysDB.getEncryptedKey(payload.accountId, deviceNumber);\n    if (!encryptedKeyData) {\n      throw new Error(`No encrypted key found for account: ${payload.accountId}`);\n    }\n\n    // Expect caller (SignerWorkerManager) to reserve a session and wire ports; just use provided sessionId\n    const sessionId = payload.sessionId ?? generateSessionId();\n\n    if (!ctx.vrfWorkerManager) {\n      throw new Error('VrfWorkerManager not available for NEP-413 signing');\n    }\n\n    await ctx.vrfWorkerManager.confirmAndPrepareSigningSession({\n      ctx,\n      sessionId,\n      kind: 'nep413',\n      nearAccountId: payload.accountId,\n      message: payload.message,\n      recipient: payload.recipient,\n      title: payload.title,\n      body: payload.body,\n      confirmationConfigOverride: payload.confirmationConfigOverride,\n      contractId: payload.contractId,\n      nearRpcUrl: payload.nearRpcUrl,\n    });\n\n    const response = await ctx.sendMessage<WorkerRequestType.SignNep413Message>({\n      sessionId,\n      message: {\n        type: WorkerRequestType.SignNep413Message,\n        payload: {\n          message: payload.message,\n          recipient: payload.recipient,\n          nonce: payload.nonce,\n          state: payload.state || undefined,\n          accountId: payload.accountId,\n          encryptedPrivateKeyData: encryptedKeyData.encryptedData,\n          encryptedPrivateKeyChacha20NonceB64u: encryptedKeyData.chacha20NonceB64u,\n        }\n      },\n    });\n\n    if (!isSignNep413MessageSuccess(response)) {\n      console.error('SignerWorkerManager: NEP-413 signing failed:', response);\n      const payloadError = isObject(response?.payload) && (response as any)?.payload?.error;\n      throw new Error(payloadError || 'NEP-413 signing failed');\n    }\n\n    return {\n      success: true,\n      accountId: response.payload.accountId,\n      publicKey: response.payload.publicKey,\n      signature: response.payload.signature,\n      state: response.payload.state || undefined\n    };\n\n  } catch (error: unknown) {\n    console.error('SignerWorkerManager: NEP-413 signing error:', error);\n    return {\n      success: false,\n      accountId: '',\n      publicKey: '',\n      signature: '',\n      error: (error && typeof (error as { message?: unknown }).message === 'string')\n        ? (error as { message: string }).message\n        : 'Unknown error'\n    };\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAcA,eAAsB,kBAAkB,EAAE,KAAK,WAsB5C;AACD,KAAI;EACF,MAAM,eAAe,MAAMA,oDAA4B,QAAQ,WAAW,IAAI,UAAU;EACxF,MAAM,mBAAmB,MAAM,IAAI,UAAU,WAAW,gBAAgB,QAAQ,WAAW;AAC3F,MAAI,CAAC,iBACH,OAAM,IAAI,MAAM,uCAAuC,QAAQ;EAIjE,MAAM,YAAY,QAAQ,aAAaC;AAEvC,MAAI,CAAC,IAAI,iBACP,OAAM,IAAI,MAAM;AAGlB,QAAM,IAAI,iBAAiB,gCAAgC;GACzD;GACA;GACA,MAAM;GACN,eAAe,QAAQ;GACvB,SAAS,QAAQ;GACjB,WAAW,QAAQ;GACnB,OAAO,QAAQ;GACf,MAAM,QAAQ;GACd,4BAA4B,QAAQ;GACpC,YAAY,QAAQ;GACpB,YAAY,QAAQ;;EAGtB,MAAM,WAAW,MAAM,IAAI,YAAiD;GAC1E;GACA,SAAS;IACP,MAAMC,mEAAkB;IACxB,SAAS;KACP,SAAS,QAAQ;KACjB,WAAW,QAAQ;KACnB,OAAO,QAAQ;KACf,OAAO,QAAQ,SAAS;KACxB,WAAW,QAAQ;KACnB,yBAAyB,iBAAiB;KAC1C,sCAAsC,iBAAiB;;;;AAK7D,MAAI,CAACC,iDAA2B,WAAW;AACzC,WAAQ,MAAM,gDAAgD;GAC9D,MAAM,eAAeC,4BAAS,UAAU,YAAa,UAAkB,SAAS;AAChF,SAAM,IAAI,MAAM,gBAAgB;;AAGlC,SAAO;GACL,SAAS;GACT,WAAW,SAAS,QAAQ;GAC5B,WAAW,SAAS,QAAQ;GAC5B,WAAW,SAAS,QAAQ;GAC5B,OAAO,SAAS,QAAQ,SAAS;;UAG5BC,OAAgB;AACvB,UAAQ,MAAM,+CAA+C;AAC7D,SAAO;GACL,SAAS;GACT,WAAW;GACX,WAAW;GACX,WAAW;GACX,OAAQ,SAAS,OAAQ,MAAgC,YAAY,WAChE,MAA8B,UAC/B"}

package/dist/cjs/react/sdk/src/core/WebAuthnManager/SignerWorkerManager/handlers/signTransactionWithKeyPair.js

@@ -1,64 +0,0 @@
-const require_rolldown_runtime = require('../../../../../../_virtual/rolldown_runtime.js');
-const require_signer_worker = require('../../../types/signer-worker.js');
-const require_actions = require('../../../types/actions.js');
-const require_NearClient = require('../../../NearClient.js');
-let src_wasm_signer_worker_pkg_wasm_signer_worker_js = require("../../../../../../../wasm_signer_worker/pkg/wasm_signer_worker.js");
-src_wasm_signer_worker_pkg_wasm_signer_worker_js = require_rolldown_runtime.__toESM(src_wasm_signer_worker_pkg_wasm_signer_worker_js);
-
-//#region src/core/WebAuthnManager/SignerWorkerManager/handlers/signTransactionWithKeyPair.ts
-require_actions.init_actions();
-require_signer_worker.init_signer_worker();
-/**
-* Sign transaction with raw private key (for key replacement in Option D device linking)
-* No TouchID/PRF required - uses provided private key directly
-*/
-async function signTransactionWithKeyPair({ ctx, nearPrivateKey, signerAccountId, receiverId, nonce, blockHash, actions }) {
-	try {
-		console.info("SignerWorkerManager: Starting transaction signing with provided private key");
-		actions.forEach((action, index) => {
-			try {
-				require_actions.validateActionArgsWasm(action);
-			} catch (error) {
-				throw new Error(`Action ${index} validation failed: ${error instanceof Error ? error.message : "Unknown error"}`);
-			}
-		});
-		const response = await ctx.sendMessage({ message: {
-			type: src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerRequestType.SignTransactionWithKeyPair,
-			payload: {
-				nearPrivateKey,
-				signerAccountId,
-				receiverId,
-				nonce,
-				blockHash,
-				actions
-			}
-		} });
-		if (response.type !== src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerResponseType.SignTransactionWithKeyPairSuccess) {
-			console.error("SignerWorkerManager: Transaction signing with private key failed:", response);
-			throw new Error("Transaction signing with private key failed");
-		}
-		const wasmResult = response.payload;
-		if (!wasmResult.success) throw new Error(wasmResult.error || "Transaction signing failed");
-		const signedTransactions = wasmResult.signedTransactions || [];
-		if (signedTransactions.length !== 1) throw new Error(`Expected 1 signed transaction but received ${signedTransactions.length}`);
-		const signedTx = signedTransactions[0];
-		if (!signedTx || !signedTx.transaction || !signedTx.signature) throw new Error("Incomplete signed transaction data received");
-		const result = {
-			signedTransaction: new require_NearClient.SignedTransaction({
-				transaction: signedTx.transaction,
-				signature: signedTx.signature,
-				borsh_bytes: Array.from(signedTx.borshBytes || [])
-			}),
-			logs: wasmResult.logs
-		};
-		console.debug("SignerWorkerManager: Transaction signing with private key successful");
-		return result;
-	} catch (error) {
-		console.error("SignerWorkerManager: Transaction signing with private key error:", error);
-		throw error;
-	}
-}
-
-//#endregion
-exports.signTransactionWithKeyPair = signTransactionWithKeyPair;
-//# sourceMappingURL=signTransactionWithKeyPair.js.map

package/dist/cjs/react/sdk/src/core/WebAuthnManager/SignerWorkerManager/handlers/signTransactionWithKeyPair.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"signTransactionWithKeyPair.js","names":["WorkerRequestType","WorkerResponseType","SignedTransaction","error: unknown"],"sources":["../../../../../../../../../src/core/WebAuthnManager/SignerWorkerManager/handlers/signTransactionWithKeyPair.ts"],"sourcesContent":["\nimport { SignedTransaction } from '../../../NearClient';\nimport { type ActionArgsWasm, validateActionArgsWasm } from '../../../types/actions';\nimport {\n  WorkerRequestType,\n  WorkerResponseType,\n  WasmTransactionSignResult,\n} from '../../../types/signer-worker';\nimport { SignerWorkerManagerContext } from '..';\n\n/**\n * Sign transaction with raw private key (for key replacement in Option D device linking)\n * No TouchID/PRF required - uses provided private key directly\n */\nexport async function signTransactionWithKeyPair({\n  ctx,\n  nearPrivateKey,\n  signerAccountId,\n  receiverId,\n  nonce,\n  blockHash,\n  actions\n}: {\n  ctx: SignerWorkerManagerContext;\n  nearPrivateKey: string;\n  signerAccountId: string;\n  receiverId: string;\n  nonce: string;\n  blockHash: string;\n  actions: ActionArgsWasm[];\n}): Promise<{\n  signedTransaction: SignedTransaction;\n  logs?: string[];\n}> {\n  try {\n    console.info('SignerWorkerManager: Starting transaction signing with provided private key');\n\n    // Validate actions\n    actions.forEach((action, index) => {\n      try {\n        validateActionArgsWasm(action);\n      } catch (error) {\n        throw new Error(`Action ${index} validation failed: ${error instanceof Error ? error.message : 'Unknown error'}`);\n      }\n    });\n\n    const response = await ctx.sendMessage<WorkerRequestType.SignTransactionWithKeyPair>({\n      message: {\n        type: WorkerRequestType.SignTransactionWithKeyPair,\n        payload: {\n          nearPrivateKey,\n          signerAccountId,\n          receiverId,\n          nonce,\n          blockHash: blockHash,\n          actions: actions\n        }\n      }\n    });\n\n    if (response.type !== WorkerResponseType.SignTransactionWithKeyPairSuccess) {\n      console.error('SignerWorkerManager: Transaction signing with private key failed:', response);\n      throw new Error('Transaction signing with private key failed');\n    }\n\n    const wasmResult = response.payload as WasmTransactionSignResult;\n    if (!wasmResult.success) {\n      throw new Error(wasmResult.error || 'Transaction signing failed');\n    }\n    // Extract the signed transaction\n    const signedTransactions = wasmResult.signedTransactions || [];\n    if (signedTransactions.length !== 1) {\n      throw new Error(`Expected 1 signed transaction but received ${signedTransactions.length}`);\n    }\n    const signedTx = signedTransactions[0];\n    if (!signedTx || !signedTx.transaction || !signedTx.signature) {\n      throw new Error('Incomplete signed transaction data received');\n    }\n\n    const result = {\n      signedTransaction: new SignedTransaction({\n        transaction: signedTx.transaction,\n        signature: signedTx.signature,\n        borsh_bytes: Array.from(signedTx.borshBytes || [])\n      }),\n      logs: wasmResult.logs\n    };\n\n    console.debug('SignerWorkerManager: Transaction signing with private key successful');\n    return result;\n\n  } catch (error: unknown) {\n    console.error('SignerWorkerManager: Transaction signing with private key error:', error);\n    throw error;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AAcA,eAAsB,2BAA2B,EAC/C,KACA,gBACA,iBACA,YACA,OACA,WACA,WAYC;AACD,KAAI;AACF,UAAQ,KAAK;AAGb,UAAQ,SAAS,QAAQ,UAAU;AACjC,OAAI;AACF,2CAAuB;YAChB,OAAO;AACd,UAAM,IAAI,MAAM,UAAU,MAAM,sBAAsB,iBAAiB,QAAQ,MAAM,UAAU;;;EAInG,MAAM,WAAW,MAAM,IAAI,YAA0D,EACnF,SAAS;GACP,MAAMA,mEAAkB;GACxB,SAAS;IACP;IACA;IACA;IACA;IACW;IACF;;;AAKf,MAAI,SAAS,SAASC,oEAAmB,mCAAmC;AAC1E,WAAQ,MAAM,qEAAqE;AACnF,SAAM,IAAI,MAAM;;EAGlB,MAAM,aAAa,SAAS;AAC5B,MAAI,CAAC,WAAW,QACd,OAAM,IAAI,MAAM,WAAW,SAAS;EAGtC,MAAM,qBAAqB,WAAW,sBAAsB;AAC5D,MAAI,mBAAmB,WAAW,EAChC,OAAM,IAAI,MAAM,8CAA8C,mBAAmB;EAEnF,MAAM,WAAW,mBAAmB;AACpC,MAAI,CAAC,YAAY,CAAC,SAAS,eAAe,CAAC,SAAS,UAClD,OAAM,IAAI,MAAM;EAGlB,MAAM,SAAS;GACb,mBAAmB,IAAIC,qCAAkB;IACvC,aAAa,SAAS;IACtB,WAAW,SAAS;IACpB,aAAa,MAAM,KAAK,SAAS,cAAc;;GAEjD,MAAM,WAAW;;AAGnB,UAAQ,MAAM;AACd,SAAO;UAEAC,OAAgB;AACvB,UAAQ,MAAM,oEAAoE;AAClF,QAAM"}

package/dist/cjs/react/sdk/src/core/WebAuthnManager/SignerWorkerManager/handlers/signTransactionsWithActions.js

@@ -1,114 +0,0 @@
-const require_rolldown_runtime = require('../../../../../../_virtual/rolldown_runtime.js');
-const require_accountIds = require('../../../types/accountIds.js');
-const require_signer_worker = require('../../../types/signer-worker.js');
-const require_validation = require('../../../WalletIframe/validation.js');
-const require_defaultConfigs = require('../../../defaultConfigs.js');
-const require_actions = require('../../../types/actions.js');
-const require_getDeviceNumber = require('../getDeviceNumber.js');
-const require_NearClient = require('../../../NearClient.js');
-const require_sessionHandshake = require('../sessionHandshake.js');
-let src_wasm_signer_worker_pkg_wasm_signer_worker_js = require("../../../../../../../wasm_signer_worker/pkg/wasm_signer_worker.js");
-src_wasm_signer_worker_pkg_wasm_signer_worker_js = require_rolldown_runtime.__toESM(src_wasm_signer_worker_pkg_wasm_signer_worker_js);
-
-//#region src/core/WebAuthnManager/SignerWorkerManager/handlers/signTransactionsWithActions.ts
-require_actions.init_actions();
-require_signer_worker.init_signer_worker();
-require_defaultConfigs.init_defaultConfigs();
-require_accountIds.init_accountIds();
-require_getDeviceNumber.init_getDeviceNumber();
-require_validation.init_validation();
-/**
-* Sign multiple transactions with shared VRF challenge and credential
-* Efficiently processes multiple transactions with one PRF authentication
-*/
-async function signTransactionsWithActions({ ctx, transactions, rpcCall, onEvent, confirmationConfigOverride, title, body, sessionId: providedSessionId }) {
-	try {
-		if (transactions.length === 0) throw new Error("No transactions provided for batch signing");
-		const sessionId = providedSessionId ?? require_sessionHandshake.generateSessionId();
-		const nearAccountId = rpcCall.nearAccountId;
-		transactions.forEach((txPayload, txIndex) => {
-			txPayload.actions.forEach((action, actionIndex) => {
-				try {
-					require_actions.validateActionArgsWasm(action);
-				} catch (error) {
-					throw new Error(`Transaction ${txIndex}, Action ${actionIndex} validation failed: ${error instanceof Error ? error.message : "Unknown error"}`);
-				}
-			});
-		});
-		console.debug("WebAuthnManager: Retrieving encrypted key from IndexedDB for account:", nearAccountId);
-		const deviceNumber = await require_getDeviceNumber.getLastLoggedInDeviceNumber(nearAccountId, ctx.indexedDB.clientDB);
-		const encryptedKeyData = await ctx.indexedDB.nearKeysDB.getEncryptedKey(nearAccountId, deviceNumber);
-		if (!encryptedKeyData) throw new Error(`No encrypted key found for account: ${nearAccountId}`);
-		const resolvedRpcCall = {
-			contractId: rpcCall.contractId || require_defaultConfigs.PASSKEY_MANAGER_DEFAULT_CONFIGS.contractId,
-			nearRpcUrl: rpcCall.nearRpcUrl || require_defaultConfigs.PASSKEY_MANAGER_DEFAULT_CONFIGS.nearRpcUrl.split(",")[0] || require_defaultConfigs.PASSKEY_MANAGER_DEFAULT_CONFIGS.nearRpcUrl,
-			nearAccountId: rpcCall.nearAccountId
-		};
-		if (!ctx.vrfWorkerManager) throw new Error("VrfWorkerManager not available for signing");
-		const confirmation = await ctx.vrfWorkerManager.confirmAndPrepareSigningSession({
-			ctx,
-			sessionId,
-			kind: "transaction",
-			txSigningRequests: transactions,
-			rpcCall: resolvedRpcCall,
-			confirmationConfigOverride,
-			title,
-			body
-		});
-		const intentDigest = confirmation.intentDigest;
-		const transactionContext = confirmation.transactionContext;
-		const credential = confirmation.credential ? JSON.stringify(confirmation.credential) : void 0;
-		const txSigningRequests = transactions.map((tx) => ({
-			nearAccountId: rpcCall.nearAccountId,
-			receiverId: tx.receiverId,
-			actions: tx.actions
-		}));
-		const response = await ctx.sendMessage({
-			sessionId,
-			message: {
-				type: src_wasm_signer_worker_pkg_wasm_signer_worker_js.WorkerRequestType.SignTransactionsWithActions,
-				payload: {
-					rpcCall: resolvedRpcCall,
-					createdAt: Date.now(),
-					decryption: {
-						encryptedPrivateKeyData: encryptedKeyData.encryptedData,
-						encryptedPrivateKeyChacha20NonceB64u: encryptedKeyData.chacha20NonceB64u
-					},
-					txSigningRequests,
-					intentDigest,
-					transactionContext,
-					credential
-				}
-			},
-			onEvent
-		});
-		if (!require_signer_worker.isSignTransactionsWithActionsSuccess(response)) {
-			console.error("WebAuthnManager: Batch transaction signing failed:", response);
-			const payloadError = require_validation.isObject(response?.payload) && response?.payload?.error;
-			throw new Error(payloadError || "Batch transaction signing failed");
-		}
-		if (!response.payload.success) throw new Error(response.payload.error || "Batch transaction signing failed");
-		const signedTransactions = response.payload.signedTransactions || [];
-		if (signedTransactions.length !== transactions.length) throw new Error(`Expected ${transactions.length} signed transactions but received ${signedTransactions.length}`);
-		const results = signedTransactions.map((signedTx, index) => {
-			if (!signedTx || !signedTx.transaction || !signedTx.signature) throw new Error(`Incomplete signed transaction data received for transaction ${index + 1}`);
-			return {
-				signedTransaction: new require_NearClient.SignedTransaction({
-					transaction: signedTx.transaction,
-					signature: signedTx.signature,
-					borsh_bytes: Array.from(signedTx.borshBytes || [])
-				}),
-				nearAccountId: require_accountIds.toAccountId(nearAccountId),
-				logs: response.payload.logs
-			};
-		});
-		return results;
-	} catch (error) {
-		console.error("WebAuthnManager: Batch transaction signing error:", error);
-		throw error;
-	}
-}
-
-//#endregion
-exports.signTransactionsWithActions = signTransactionsWithActions;
-//# sourceMappingURL=signTransactionsWithActions.js.map

package/dist/cjs/react/sdk/src/core/WebAuthnManager/SignerWorkerManager/handlers/signTransactionsWithActions.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"signTransactionsWithActions.js","names":["generateSessionId","getLastLoggedInDeviceNumber","PASSKEY_MANAGER_DEFAULT_CONFIGS","txSigningRequests: TransactionPayload[]","WorkerRequestType","isSignTransactionsWithActionsSuccess","isObject","SignedTransaction","toAccountId","error: unknown"],"sources":["../../../../../../../../../src/core/WebAuthnManager/SignerWorkerManager/handlers/signTransactionsWithActions.ts"],"sourcesContent":["\nimport { SignedTransaction } from '../../../NearClient';\nimport { TransactionInputWasm, validateActionArgsWasm } from '../../../types/actions';\nimport { type onProgressEvents } from '../../../types/sdkSentEvents';\nimport type { ConfirmationConfig } from '../../../types/signer-worker';\nimport {\n  WorkerRequestType,\n  TransactionPayload,\n  isSignTransactionsWithActionsSuccess,\n} from '../../../types/signer-worker';\nimport { AccountId } from \"../../../types/accountIds\";\nimport { SignerWorkerManagerContext } from '..';\nimport { RpcCallPayload } from '../../../types/signer-worker';\nimport { PASSKEY_MANAGER_DEFAULT_CONFIGS } from '../../../defaultConfigs';\nimport { toAccountId } from '../../../types/accountIds';\nimport { getLastLoggedInDeviceNumber } from '../getDeviceNumber';\nimport { isObject } from '../../../WalletIframe/validation';\nimport { generateSessionId } from '../sessionHandshake.js';\n\n/**\n * Sign multiple transactions with shared VRF challenge and credential\n * Efficiently processes multiple transactions with one PRF authentication\n */\nexport async function signTransactionsWithActions({\n  ctx,\n  transactions,\n  rpcCall,\n  onEvent,\n  confirmationConfigOverride,\n  title,\n  body,\n  sessionId: providedSessionId,\n}: {\n  ctx: SignerWorkerManagerContext,\n  transactions: TransactionInputWasm[],\n  rpcCall: RpcCallPayload;\n  onEvent?: (update: onProgressEvents) => void;\n  // Allow callers to pass a partial override (e.g., { uiMode: 'drawer' })\n  confirmationConfigOverride?: Partial<ConfirmationConfig>;\n  title?: string;\n  body?: string;\n  sessionId?: string;\n}): Promise<Array<{\n  signedTransaction: SignedTransaction;\n  nearAccountId: AccountId;\n  logs?: string[]\n}>> {\n  try {\n    if (transactions.length === 0) {\n      throw new Error('No transactions provided for batch signing');\n    }\n\n    const sessionId = providedSessionId ?? generateSessionId();\n    const nearAccountId = rpcCall.nearAccountId;\n\n    // Validate all actions in all payloads\n    transactions.forEach((txPayload, txIndex) => {\n      txPayload.actions.forEach((action, actionIndex) => {\n        try {\n          validateActionArgsWasm(action);\n        } catch (error) {\n          throw new Error(`Transaction ${txIndex}, Action ${actionIndex} validation failed: ${error instanceof Error ? error.message : 'Unknown error'}`);\n        }\n      });\n    });\n\n    // Retrieve encrypted key data from IndexedDB in main thread\n    console.debug('WebAuthnManager: Retrieving encrypted key from IndexedDB for account:', nearAccountId);\n    const deviceNumber = await getLastLoggedInDeviceNumber(nearAccountId, ctx.indexedDB.clientDB);\n    const encryptedKeyData = await ctx.indexedDB.nearKeysDB.getEncryptedKey(nearAccountId, deviceNumber);\n\n    if (!encryptedKeyData) {\n      throw new Error(`No encrypted key found for account: ${nearAccountId}`);\n    }\n\n    // Normalize rpcCall to ensure required fields are present\n    const resolvedRpcCall = {\n      contractId: rpcCall.contractId || PASSKEY_MANAGER_DEFAULT_CONFIGS.contractId,\n      nearRpcUrl: rpcCall.nearRpcUrl || (PASSKEY_MANAGER_DEFAULT_CONFIGS.nearRpcUrl.split(',')[0] || PASSKEY_MANAGER_DEFAULT_CONFIGS.nearRpcUrl),\n      nearAccountId: rpcCall.nearAccountId,\n    } as RpcCallPayload;\n\n    // Confirm via VRF-driven flow before sending anything to the signer worker.\n    // WrapKeySeed derivation is handled inside confirmTxFlow (handleTransactionSigningFlow),\n    // which uses the same sessionId/requestId and delivers WrapKeySeed over the reserved port.\n    if (!ctx.vrfWorkerManager) {\n      throw new Error('VrfWorkerManager not available for signing');\n    }\n    const confirmation = await ctx.vrfWorkerManager.confirmAndPrepareSigningSession({\n      ctx,\n      sessionId,\n      kind: 'transaction',\n      txSigningRequests: transactions,\n      rpcCall: resolvedRpcCall,\n      confirmationConfigOverride,\n      title,\n      body,\n    });\n\n    const intentDigest = confirmation.intentDigest;\n    const transactionContext = confirmation.transactionContext;\n    const credential = confirmation.credential ? JSON.stringify(confirmation.credential) : undefined;\n\n    // Create transaction signing requests\n    // NOTE: nonce and blockHash are computed in confirmation flow, not here\n    const txSigningRequests: TransactionPayload[] = transactions.map(tx => ({\n      nearAccountId: rpcCall.nearAccountId,\n      receiverId: tx.receiverId,\n      actions: tx.actions\n    }));\n\n    // Send batch signing request to WASM worker\n    const response = await ctx.sendMessage({\n      sessionId,\n      message: {\n        type: WorkerRequestType.SignTransactionsWithActions,\n        payload: {\n          rpcCall: resolvedRpcCall,\n          createdAt: Date.now(),\n          decryption: {\n            encryptedPrivateKeyData: encryptedKeyData.encryptedData,\n            encryptedPrivateKeyChacha20NonceB64u: encryptedKeyData.chacha20NonceB64u,\n          },\n          txSigningRequests: txSigningRequests,\n          intentDigest,\n          transactionContext,\n          credential,\n        }\n      },\n      onEvent,\n    });\n\n    if (!isSignTransactionsWithActionsSuccess(response)) {\n      console.error('WebAuthnManager: Batch transaction signing failed:', response);\n      const payloadError = isObject(response?.payload) && (response as any)?.payload?.error;\n      throw new Error(payloadError || 'Batch transaction signing failed');\n    }\n    if (!response.payload.success) {\n      throw new Error(response.payload.error || 'Batch transaction signing failed');\n    }\n    // Extract arrays from the single result - wasmResult contains arrays of all transactions\n    const signedTransactions = response.payload.signedTransactions || [];\n    if (signedTransactions.length !== transactions.length) {\n      throw new Error(`Expected ${transactions.length} signed transactions but received ${signedTransactions.length}`);\n    }\n\n    // Process results for each transaction using WASM types directly\n    const results = signedTransactions.map((signedTx, index) => {\n      if (!signedTx || !signedTx.transaction || !signedTx.signature) {\n        throw new Error(`Incomplete signed transaction data received for transaction ${index + 1}`);\n      }\n      return {\n        signedTransaction: new SignedTransaction({\n          transaction: signedTx.transaction,\n          signature: signedTx.signature,\n          borsh_bytes: Array.from(signedTx.borshBytes || [])\n        }),\n        nearAccountId: toAccountId(nearAccountId),\n        logs: response.payload.logs\n      };\n    });\n\n    return results;\n\n  } catch (error: unknown) {\n    console.error('WebAuthnManager: Batch transaction signing error:', error);\n    throw error;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAuBA,eAAsB,4BAA4B,EAChD,KACA,cACA,SACA,SACA,4BACA,OACA,MACA,WAAW,qBAeT;AACF,KAAI;AACF,MAAI,aAAa,WAAW,EAC1B,OAAM,IAAI,MAAM;EAGlB,MAAM,YAAY,qBAAqBA;EACvC,MAAM,gBAAgB,QAAQ;AAG9B,eAAa,SAAS,WAAW,YAAY;AAC3C,aAAU,QAAQ,SAAS,QAAQ,gBAAgB;AACjD,QAAI;AACF,4CAAuB;aAChB,OAAO;AACd,WAAM,IAAI,MAAM,eAAe,QAAQ,WAAW,YAAY,sBAAsB,iBAAiB,QAAQ,MAAM,UAAU;;;;AAMnI,UAAQ,MAAM,yEAAyE;EACvF,MAAM,eAAe,MAAMC,oDAA4B,eAAe,IAAI,UAAU;EACpF,MAAM,mBAAmB,MAAM,IAAI,UAAU,WAAW,gBAAgB,eAAe;AAEvF,MAAI,CAAC,iBACH,OAAM,IAAI,MAAM,uCAAuC;EAIzD,MAAM,kBAAkB;GACtB,YAAY,QAAQ,cAAcC,uDAAgC;GAClE,YAAY,QAAQ,cAAeA,uDAAgC,WAAW,MAAM,KAAK,MAAMA,uDAAgC;GAC/H,eAAe,QAAQ;;AAMzB,MAAI,CAAC,IAAI,iBACP,OAAM,IAAI,MAAM;EAElB,MAAM,eAAe,MAAM,IAAI,iBAAiB,gCAAgC;GAC9E;GACA;GACA,MAAM;GACN,mBAAmB;GACnB,SAAS;GACT;GACA;GACA;;EAGF,MAAM,eAAe,aAAa;EAClC,MAAM,qBAAqB,aAAa;EACxC,MAAM,aAAa,aAAa,aAAa,KAAK,UAAU,aAAa,cAAc;EAIvF,MAAMC,oBAA0C,aAAa,KAAI,QAAO;GACtE,eAAe,QAAQ;GACvB,YAAY,GAAG;GACf,SAAS,GAAG;;EAId,MAAM,WAAW,MAAM,IAAI,YAAY;GACrC;GACA,SAAS;IACP,MAAMC,mEAAkB;IACxB,SAAS;KACP,SAAS;KACT,WAAW,KAAK;KAChB,YAAY;MACV,yBAAyB,iBAAiB;MAC1C,sCAAsC,iBAAiB;;KAEtC;KACnB;KACA;KACA;;;GAGJ;;AAGF,MAAI,CAACC,2DAAqC,WAAW;AACnD,WAAQ,MAAM,sDAAsD;GACpE,MAAM,eAAeC,4BAAS,UAAU,YAAa,UAAkB,SAAS;AAChF,SAAM,IAAI,MAAM,gBAAgB;;AAElC,MAAI,CAAC,SAAS,QAAQ,QACpB,OAAM,IAAI,MAAM,SAAS,QAAQ,SAAS;EAG5C,MAAM,qBAAqB,SAAS,QAAQ,sBAAsB;AAClE,MAAI,mBAAmB,WAAW,aAAa,OAC7C,OAAM,IAAI,MAAM,YAAY,aAAa,OAAO,oCAAoC,mBAAmB;EAIzG,MAAM,UAAU,mBAAmB,KAAK,UAAU,UAAU;AAC1D,OAAI,CAAC,YAAY,CAAC,SAAS,eAAe,CAAC,SAAS,UAClD,OAAM,IAAI,MAAM,+DAA+D,QAAQ;AAEzF,UAAO;IACL,mBAAmB,IAAIC,qCAAkB;KACvC,aAAa,SAAS;KACtB,WAAW,SAAS;KACpB,aAAa,MAAM,KAAK,SAAS,cAAc;;IAEjD,eAAeC,+BAAY;IAC3B,MAAM,SAAS,QAAQ;;;AAI3B,SAAO;UAEAC,OAAgB;AACvB,UAAQ,MAAM,qDAAqD;AACnE,QAAM"}

package/dist/cjs/react/sdk/src/core/WebAuthnManager/SignerWorkerManager/handlers/validation.js

@@ -1,82 +0,0 @@
-const require_rolldown_runtime = require('../../../../../../_virtual/rolldown_runtime.js');
-const require_validation = require('../../../WalletIframe/validation.js');
-const require_base58 = require('../../../../utils/base58.js');
-const require_vrf_worker = require('../../../types/vrf-worker.js');
-const require_credentialsHelpers = require('../../credentialsHelpers.js');
-const require_nearCrypto = require('../../../nearCrypto.js');
-
-//#region src/core/WebAuthnManager/SignerWorkerManager/handlers/validation.ts
-require_credentialsHelpers.init_credentialsHelpers();
-require_vrf_worker.init_vrf_worker();
-require_validation.init_validation();
-require_base58.init_base58();
-require_nearCrypto.init_nearCrypto();
-function validateTransactionContextMaybe(input) {
-	if (input == null) return void 0;
-	if (!require_validation.isObject(input)) throw new Error("Invalid transactionContext: expected object");
-	const { nearPublicKeyStr, nextNonce, txBlockHeight, txBlockHash, accessKeyInfo } = input;
-	const normalizedNearPublicKeyStr = require_validation.assertString(nearPublicKeyStr, "transactionContext.nearPublicKeyStr");
-	const normalizedNextNonce = require_validation.assertString(nextNonce, "transactionContext.nextNonce");
-	const normalizedTxBlockHeight = require_validation.assertString(txBlockHeight, "transactionContext.txBlockHeight");
-	const normalizedTxBlockHash = require_validation.assertString(txBlockHash, "transactionContext.txBlockHash");
-	let normalizedAccessKeyInfo = accessKeyInfo;
-	if (normalizedAccessKeyInfo != null && !require_validation.isObject(normalizedAccessKeyInfo)) throw new Error("Invalid transactionContext.accessKeyInfo: expected object");
-	if (normalizedAccessKeyInfo == null) normalizedAccessKeyInfo = { nonce: 0 };
-	return {
-		nearPublicKeyStr: normalizedNearPublicKeyStr,
-		nextNonce: normalizedNextNonce,
-		txBlockHeight: normalizedTxBlockHeight,
-		txBlockHash: normalizedTxBlockHash,
-		accessKeyInfo: normalizedAccessKeyInfo
-	};
-}
-function validateCredentialMaybe(input) {
-	if (input == null) return void 0;
-	const cred = require_credentialsHelpers.normalizeRegistrationCredential(input);
-	if (cred.type !== "public-key") throw new Error("Invalid credential.type: expected \"public-key\"");
-	const { id, rawId, response, authenticatorAttachment } = cred;
-	require_validation.assertString(id, "credential.id");
-	require_validation.assertString(rawId, "credential.rawId");
-	if (!require_validation.isObject(response)) throw new Error("Invalid credential.response: expected object");
-	const { clientDataJSON, attestationObject, transports } = response;
-	require_validation.assertString(clientDataJSON, "credential.response.clientDataJSON");
-	require_validation.assertString(attestationObject, "credential.response.attestationObject");
-	if (!Array.isArray(transports)) throw new Error("Invalid credential.response.transports: expected string[]");
-	for (const t of transports) if (typeof t !== "string") throw new Error("Invalid credential.response.transports item: expected string");
-	if (authenticatorAttachment != null && typeof authenticatorAttachment !== "string") throw new Error("Invalid credential.authenticatorAttachment: expected string | undefined");
-	return cred;
-}
-function validateVrfChallengeMaybe(input) {
-	if (input == null) return void 0;
-	return require_vrf_worker.validateVRFChallenge(input);
-}
-function parseAndValidateRegistrationCredentialConfirmationPayload(payload) {
-	if (!require_validation.isObject(payload)) throw new Error("Invalid response payload: expected object");
-	const { confirmed, requestId, intentDigest, credential, vrfChallenge, transactionContext, error } = payload;
-	const normalizedRequestId = require_validation.assertString(requestId, "requestId");
-	const normalizedIntentDigest = intentDigest == null ? "" : require_validation.assertString(intentDigest, "intentDigest");
-	const normalizedCredential = credential != null ? validateCredentialMaybe(credential) : void 0;
-	if (!normalizedCredential) throw new Error("Missing registration credential");
-	const normalizedVrfChallenge = vrfChallenge != null ? validateVrfChallengeMaybe(vrfChallenge) : void 0;
-	if (!normalizedVrfChallenge) throw new Error("Missing VRF Challenge");
-	const normalizedTransactionContext = transactionContext != null ? validateTransactionContextMaybe(transactionContext) : void 0;
-	const normalizedError = error == null ? void 0 : require_validation.assertString(error, "error");
-	return {
-		confirmed: !!confirmed,
-		requestId: normalizedRequestId,
-		intentDigest: normalizedIntentDigest,
-		credential: normalizedCredential,
-		vrfChallenge: normalizedVrfChallenge,
-		transactionContext: normalizedTransactionContext,
-		error: normalizedError
-	};
-}
-const toPublicKeyString = (pk) => {
-	if (typeof pk === "string") return pk;
-	return require_nearCrypto.ensureEd25519Prefix(require_base58.base58Encode(pk.keyData));
-};
-
-//#endregion
-exports.parseAndValidateRegistrationCredentialConfirmationPayload = parseAndValidateRegistrationCredentialConfirmationPayload;
-exports.toPublicKeyString = toPublicKeyString;
-//# sourceMappingURL=validation.js.map

package/dist/cjs/react/sdk/src/core/WebAuthnManager/SignerWorkerManager/handlers/validation.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"validation.js","names":["isObject","assertString","normalizeRegistrationCredential","validateVRFChallenge","ensureEd25519Prefix","base58Encode"],"sources":["../../../../../../../../../src/core/WebAuthnManager/SignerWorkerManager/handlers/validation.ts"],"sourcesContent":["import { normalizeRegistrationCredential } from '../../credentialsHelpers';\nimport type { WebAuthnRegistrationCredential } from '../../../types/webauthn';\nimport { validateVRFChallenge, type VRFChallenge } from '../../../types/vrf-worker';\nimport type { TransactionContext } from '../../../types/rpc';\nimport { isObject, assertString } from '../../../WalletIframe/validation';\nimport { DelegateActionInput } from '../../../types/delegate';\nimport { base58Encode } from '../../../../utils/base58';\nimport { ensureEd25519Prefix } from '../../../nearCrypto';\n\n// Strongly typed payload expected from the WASM → JS boundary\nexport interface RegistrationCredentialConfirmationPayload {\n  confirmed: boolean;\n  requestId: string;\n  intentDigest: string;\n  credential: WebAuthnRegistrationCredential; // serialized PublicKeyCredential (no methods)\n  vrfChallenge: VRFChallenge;\n  transactionContext?: TransactionContext;\n  error?: string;\n}\n\nfunction validateTransactionContextMaybe(input: unknown): TransactionContext | undefined {\n  if (input == null) return undefined;\n  if (!isObject(input)) {\n    throw new Error('Invalid transactionContext: expected object');\n  }\n\n  const {\n    nearPublicKeyStr,\n    nextNonce,\n    txBlockHeight,\n    txBlockHash,\n    accessKeyInfo,\n  } = input as {\n    nearPublicKeyStr?: unknown;\n    nextNonce?: unknown;\n    txBlockHeight?: unknown;\n    txBlockHash?: unknown;\n    accessKeyInfo?: unknown;\n  };\n\n  // Minimal structural validation; AccessKeyView is complex. Be tolerant because the WASM struct omits it.\n  const normalizedNearPublicKeyStr = assertString(\n    nearPublicKeyStr,\n    'transactionContext.nearPublicKeyStr',\n  );\n  const normalizedNextNonce = assertString(nextNonce, 'transactionContext.nextNonce');\n  const normalizedTxBlockHeight = assertString(\n    txBlockHeight,\n    'transactionContext.txBlockHeight',\n  );\n  const normalizedTxBlockHash = assertString(txBlockHash, 'transactionContext.txBlockHash');\n\n  let normalizedAccessKeyInfo = accessKeyInfo as TransactionContext['accessKeyInfo'] | undefined;\n  if (normalizedAccessKeyInfo != null && !isObject(normalizedAccessKeyInfo)) {\n    throw new Error('Invalid transactionContext.accessKeyInfo: expected object');\n  }\n  if (normalizedAccessKeyInfo == null) {\n    // Synthesize a minimal placeholder; not used by registration flows consuming this payload\n    normalizedAccessKeyInfo = { nonce: 0 } as unknown as TransactionContext['accessKeyInfo'];\n  }\n\n  return {\n    nearPublicKeyStr: normalizedNearPublicKeyStr,\n    nextNonce: normalizedNextNonce,\n    txBlockHeight: normalizedTxBlockHeight,\n    txBlockHash: normalizedTxBlockHash,\n    accessKeyInfo: normalizedAccessKeyInfo,\n  };\n}\n\nfunction validateCredentialMaybe(input: unknown): WebAuthnRegistrationCredential | undefined {\n  if (input == null) return undefined;\n\n  const cred = normalizeRegistrationCredential(input);\n  if (cred.type !== 'public-key') {\n    throw new Error('Invalid credential.type: expected \"public-key\"');\n  }\n\n  const { id, rawId, response, authenticatorAttachment } = cred as {\n    id?: unknown;\n    rawId?: unknown;\n    response?: unknown;\n    authenticatorAttachment?: unknown;\n  };\n\n  // Core field/type validation (serialized shapes should be base64url strings)\n  assertString(id, 'credential.id');\n  assertString(rawId, 'credential.rawId');\n\n  if (!isObject(response)) {\n    throw new Error('Invalid credential.response: expected object');\n  }\n\n  const {\n    clientDataJSON,\n    attestationObject,\n    transports,\n  } = response as {\n    clientDataJSON?: unknown;\n    attestationObject?: unknown;\n    transports?: unknown;\n  };\n\n  assertString(clientDataJSON, 'credential.response.clientDataJSON');\n  assertString(attestationObject, 'credential.response.attestationObject');\n\n  if (!Array.isArray(transports)) {\n    throw new Error('Invalid credential.response.transports: expected string[]');\n  }\n  for (const t of transports) {\n    if (typeof t !== 'string') {\n      throw new Error('Invalid credential.response.transports item: expected string');\n    }\n  }\n\n  if (authenticatorAttachment != null && typeof authenticatorAttachment !== 'string') {\n    throw new Error('Invalid credential.authenticatorAttachment: expected string | undefined');\n  }\n\n  // Note: prf.results may be undefined/null here. We intentionally do NOT\n  // require them at the boundary; internal callers that need PRF (e.g. key\n  // derivation) will extract/compute them separately. Contract payloads must\n  // not include PRF values.\n  return cred;\n}\n\nfunction validateVrfChallengeMaybe(input: unknown): VRFChallenge | undefined {\n  if (input == null) return undefined;\n  return validateVRFChallenge(input as Parameters<typeof validateVRFChallenge>[0]);\n}\n\nexport function parseAndValidateRegistrationCredentialConfirmationPayload(\n  payload: unknown,\n): RegistrationCredentialConfirmationPayload {\n\n  if (!isObject(payload)) {\n    throw new Error('Invalid response payload: expected object');\n  }\n\n  const {\n    confirmed,\n    requestId,\n    intentDigest,\n    credential,\n    vrfChallenge,\n    transactionContext,\n    error,\n  } = payload as {\n    confirmed?: unknown;\n    requestId?: unknown;\n    intentDigest?: unknown;\n    credential?: unknown;\n    vrfChallenge?: unknown;\n    transactionContext?: unknown;\n    error?: unknown;\n  };\n\n  const normalizedRequestId = assertString(requestId, 'requestId');\n\n  // intentDigest is only used for TX signing requests, not registration or link device requests\n  const normalizedIntentDigest =\n    intentDigest == null ? '' : assertString(intentDigest, 'intentDigest');\n\n  const normalizedCredential =\n    credential != null ? validateCredentialMaybe(credential) : undefined;\n\n  if (!normalizedCredential) {\n    throw new Error('Missing registration credential');\n  }\n\n  const normalizedVrfChallenge =\n    vrfChallenge != null ? validateVrfChallengeMaybe(vrfChallenge) : undefined;\n\n  if (!normalizedVrfChallenge) {\n    throw new Error('Missing VRF Challenge');\n  }\n\n  const normalizedTransactionContext =\n    transactionContext != null ? validateTransactionContextMaybe(transactionContext) : undefined;\n\n  const normalizedError =\n    error == null ? undefined : assertString(error, 'error');\n\n  return {\n    confirmed: !!confirmed,\n    requestId: normalizedRequestId,\n    intentDigest: normalizedIntentDigest,\n    credential: normalizedCredential,\n    vrfChallenge: normalizedVrfChallenge,\n    transactionContext: normalizedTransactionContext,\n    error: normalizedError,\n  };\n}\n\nexport { ensureEd25519Prefix };\n\nexport const toPublicKeyString = (pk: DelegateActionInput['publicKey']): string => {\n  if (typeof pk === 'string') {\n    return pk;\n  }\n  return ensureEd25519Prefix(base58Encode(pk.keyData));\n};\n"],"mappings":";;;;;;;;;;;;;AAoBA,SAAS,gCAAgC,OAAgD;AACvF,KAAI,SAAS,KAAM,QAAO;AAC1B,KAAI,CAACA,4BAAS,OACZ,OAAM,IAAI,MAAM;CAGlB,MAAM,EACJ,kBACA,WACA,eACA,aACA,kBACE;CASJ,MAAM,6BAA6BC,gCACjC,kBACA;CAEF,MAAM,sBAAsBA,gCAAa,WAAW;CACpD,MAAM,0BAA0BA,gCAC9B,eACA;CAEF,MAAM,wBAAwBA,gCAAa,aAAa;CAExD,IAAI,0BAA0B;AAC9B,KAAI,2BAA2B,QAAQ,CAACD,4BAAS,yBAC/C,OAAM,IAAI,MAAM;AAElB,KAAI,2BAA2B,KAE7B,2BAA0B,EAAE,OAAO;AAGrC,QAAO;EACL,kBAAkB;EAClB,WAAW;EACX,eAAe;EACf,aAAa;EACb,eAAe;;;AAInB,SAAS,wBAAwB,OAA4D;AAC3F,KAAI,SAAS,KAAM,QAAO;CAE1B,MAAM,OAAOE,2DAAgC;AAC7C,KAAI,KAAK,SAAS,aAChB,OAAM,IAAI,MAAM;CAGlB,MAAM,EAAE,IAAI,OAAO,UAAU,4BAA4B;AAQzD,iCAAa,IAAI;AACjB,iCAAa,OAAO;AAEpB,KAAI,CAACF,4BAAS,UACZ,OAAM,IAAI,MAAM;CAGlB,MAAM,EACJ,gBACA,mBACA,eACE;AAMJ,iCAAa,gBAAgB;AAC7B,iCAAa,mBAAmB;AAEhC,KAAI,CAAC,MAAM,QAAQ,YACjB,OAAM,IAAI,MAAM;AAElB,MAAK,MAAM,KAAK,WACd,KAAI,OAAO,MAAM,SACf,OAAM,IAAI,MAAM;AAIpB,KAAI,2BAA2B,QAAQ,OAAO,4BAA4B,SACxE,OAAM,IAAI,MAAM;AAOlB,QAAO;;AAGT,SAAS,0BAA0B,OAA0C;AAC3E,KAAI,SAAS,KAAM,QAAO;AAC1B,QAAOG,wCAAqB;;AAG9B,SAAgB,0DACd,SAC2C;AAE3C,KAAI,CAACH,4BAAS,SACZ,OAAM,IAAI,MAAM;CAGlB,MAAM,EACJ,WACA,WACA,cACA,YACA,cACA,oBACA,UACE;CAUJ,MAAM,sBAAsBC,gCAAa,WAAW;CAGpD,MAAM,yBACJ,gBAAgB,OAAO,KAAKA,gCAAa,cAAc;CAEzD,MAAM,uBACJ,cAAc,OAAO,wBAAwB,cAAc;AAE7D,KAAI,CAAC,qBACH,OAAM,IAAI,MAAM;CAGlB,MAAM,yBACJ,gBAAgB,OAAO,0BAA0B,gBAAgB;AAEnE,KAAI,CAAC,uBACH,OAAM,IAAI,MAAM;CAGlB,MAAM,+BACJ,sBAAsB,OAAO,gCAAgC,sBAAsB;CAErF,MAAM,kBACJ,SAAS,OAAO,SAAYA,gCAAa,OAAO;AAElD,QAAO;EACL,WAAW,CAAC,CAAC;EACb,WAAW;EACX,cAAc;EACd,YAAY;EACZ,cAAc;EACd,oBAAoB;EACpB,OAAO;;;AAMX,MAAa,qBAAqB,OAAiD;AACjF,KAAI,OAAO,OAAO,SAChB,QAAO;AAET,QAAOG,uCAAoBC,4BAAa,GAAG"}