@tatchi-xyz/sdk 0.21.0 → 0.31.1

package/dist/cjs/react/src/core/WebAuthnManager/LitComponents/confirm-ui.js

@@ -0,0 +1,219 @@
+const require_actions = require('../../types/actions.js');
+const require_intentDigest = require('../../digests/intentDigest.js');
+const require_events = require('../../WalletIframe/events.js');
+const require_tags = require('./tags.js');
+const require_confirm_ui_types = require('./confirm-ui-types.js');
+const require_tx_confirmer_wrapper = require('./IframeTxConfirmer/tx-confirmer-wrapper.js');
+
+//#region src/core/WebAuthnManager/LitComponents/confirm-ui.ts
+try {
+	if (typeof customElements !== "undefined" && !customElements.get(require_tags.W3A_TX_CONFIRMER_ID)) customElements.define(require_tags.W3A_TX_CONFIRMER_ID, require_tx_confirmer_wrapper.TxConfirmerWrapperElement);
+} catch {}
+function resolveTheme(ctx, requested) {
+	let resolved = require_confirm_ui_types.validateTheme(requested);
+	if (!resolved) try {
+		resolved = require_confirm_ui_types.validateTheme(ctx?.userPreferencesManager?.getUserTheme?.());
+	} catch {}
+	if (!resolved) {
+		const domAttr = (document?.documentElement?.getAttribute("data-w3a-theme") || "").toLowerCase();
+		resolved = require_confirm_ui_types.validateTheme(domAttr);
+	}
+	return resolved || "dark";
+}
+async function mountConfirmUI({ ctx, summary, txSigningRequests, vrfChallenge, loading, theme, uiMode, nearAccountIdOverride }) {
+	const variant = uiModeToVariant(uiMode);
+	const { handle } = mountHostElement({
+		ctx,
+		summary,
+		txSigningRequests,
+		vrfChallenge,
+		loading,
+		theme,
+		variant,
+		nearAccountIdOverride
+	});
+	return handle;
+}
+async function awaitConfirmUIDecision({ ctx, summary, txSigningRequests, vrfChallenge, theme, uiMode, nearAccountIdOverride }) {
+	const variant = uiModeToVariant(uiMode);
+	const v = variant || "modal";
+	return new Promise((resolve) => {
+		const { el, handle } = mountHostElement({
+			ctx,
+			summary,
+			txSigningRequests,
+			vrfChallenge,
+			theme,
+			variant: v,
+			nearAccountIdOverride
+		});
+		const finalize = (result) => {
+			cleanup();
+			resolve({
+				...result,
+				handle
+			});
+		};
+		const onConfirm = async (event) => {
+			const detail = event?.detail;
+			let confirmed = detail?.confirmed !== false;
+			let error = typeof detail?.error === "string" ? detail.error : void 0;
+			if (confirmed) {
+				const guardErr = await checkIntentDigestGuard(summary, txSigningRequests);
+				if (guardErr) {
+					confirmed = false;
+					if (!error) error = guardErr;
+				}
+			}
+			if (!confirmed) {
+				if (error) handle.update({
+					errorMessage: error,
+					loading: false
+				});
+				else handle.update({
+					loading: false,
+					errorMessage: ""
+				});
+				finalize({
+					confirmed: false,
+					error
+				});
+				return;
+			}
+			finalize({ confirmed: true });
+		};
+		const onCancel = (event) => {
+			const detail = event?.detail;
+			const error = typeof detail?.error === "string" ? detail.error : void 0;
+			if (error) handle.update({
+				errorMessage: error,
+				loading: false
+			});
+			else handle.update({ loading: false });
+			finalize({
+				confirmed: false,
+				error
+			});
+		};
+		const cleanup = () => {
+			el.removeEventListener(require_events.WalletIframeDomEvents.TX_CONFIRMER_CONFIRM, onConfirm);
+			el.removeEventListener(require_events.WalletIframeDomEvents.TX_CONFIRMER_CANCEL, onCancel);
+		};
+		el.addEventListener(require_events.WalletIframeDomEvents.TX_CONFIRMER_CONFIRM, onConfirm);
+		el.addEventListener(require_events.WalletIframeDomEvents.TX_CONFIRMER_CANCEL, onCancel);
+	});
+}
+async function checkIntentDigestGuard(summary, txSigningRequests) {
+	const hasTxs = (txSigningRequests?.length || 0) > 0;
+	const expected = summary?.intentDigest;
+	if (!hasTxs || !expected) return void 0;
+	try {
+		const normalized = (txSigningRequests || []).map((tx) => ({
+			receiverId: tx.receiverId,
+			actions: (tx.actions || []).map((a) => require_actions.isActionArgsWasm(a) ? a : require_actions.toActionArgsWasm(a)).map((a) => require_intentDigest.orderActionForDigest(a))
+		}));
+		const uiDigest = await require_intentDigest.computeUiIntentDigestFromTxs(normalized);
+		if (uiDigest !== expected) return "INTENT_DIGEST_MISMATCH";
+		return void 0;
+	} catch {
+		return "UI_DIGEST_VALIDATION_FAILED";
+	}
+}
+function createHostConfirmHandle(el) {
+	return {
+		close: (_confirmed) => {
+			el.remove();
+		},
+		update: (props) => applyHostElementProps(el, props)
+	};
+}
+function setErrorAttribute(el, msg) {
+	if (msg) el.setAttribute("data-error-message", msg);
+	else el.removeAttribute("data-error-message");
+}
+function applyHostElementProps(el, props) {
+	if (!props) return;
+	if (props.nearAccountId != null) el.nearAccountId = props.nearAccountId;
+	if (props.txSigningRequests != null) el.txSigningRequests = props.txSigningRequests;
+	if (props.vrfChallenge != null) el.vrfChallenge = props.vrfChallenge;
+	if (props.theme != null) el.theme = props.theme;
+	if (props.loading != null) el.loading = !!props.loading;
+	if (props.body != null) el.body = props.body;
+	if (props.title != null) el.title = props.title;
+	if ("errorMessage" in props) {
+		const msg = props.errorMessage ?? "";
+		el.errorMessage = msg;
+		setErrorAttribute(el, msg);
+	}
+	if (props.nearExplorerUrl != null) el.nearExplorerUrl = props.nearExplorerUrl;
+	el.requestUpdate?.();
+}
+function cleanupExistingConfirmers() {
+	const portal = document.getElementById(require_tags.W3A_CONFIRM_PORTAL_ID);
+	if (portal) {
+		const existing = Array.from(portal.querySelectorAll("*"));
+		for (const el of existing) el.dispatchEvent(new CustomEvent(require_events.WalletIframeDomEvents.TX_CONFIRMER_CANCEL, {
+			bubbles: true,
+			composed: true
+		}));
+		portal.replaceChildren();
+		return;
+	}
+	const selectors = require_tags.CONFIRM_UI_ELEMENT_SELECTORS;
+	const els = selectors.flatMap((sel) => Array.from(document.querySelectorAll(sel)));
+	for (const el of els) {
+		el.dispatchEvent(new CustomEvent(require_events.WalletIframeDomEvents.TX_CONFIRMER_CANCEL, {
+			bubbles: true,
+			composed: true
+		}));
+		el.remove();
+	}
+}
+function ensureConfirmPortal() {
+	let portal = document.getElementById(require_tags.W3A_CONFIRM_PORTAL_ID);
+	if (!portal) {
+		portal = document.createElement("div");
+		portal.id = require_tags.W3A_CONFIRM_PORTAL_ID;
+		portal.classList.add("w3a-portal");
+		const root = document.body ?? document.documentElement;
+		if (root) root.appendChild(portal);
+	}
+	return portal;
+}
+function uiModeToVariant(uiMode) {
+	return uiMode === "drawer" ? "drawer" : "modal";
+}
+function mountHostElement({ ctx, summary, txSigningRequests, vrfChallenge, loading, theme, variant, nearAccountIdOverride }) {
+	const v = variant || "modal";
+	cleanupExistingConfirmers();
+	const el = document.createElement(require_tags.W3A_TX_CONFIRMER_ID);
+	el.variant = v;
+	el.nearAccountId = nearAccountIdOverride || ctx.userPreferencesManager.getCurrentUserAccountId() || "";
+	el.txSigningRequests = txSigningRequests || [];
+	if (ctx.nearExplorerUrl) el.nearExplorerUrl = ctx.nearExplorerUrl;
+	if ((txSigningRequests?.length || 0) > 0) el.intentDigest = summary?.intentDigest;
+	if (vrfChallenge) el.vrfChallenge = vrfChallenge;
+	el.theme = resolveTheme(ctx, theme);
+	if (loading != null) el.loading = !!loading;
+	el.removeAttribute("data-error-message");
+	el.deferClose = true;
+	if (summary?.title != null) el.title = summary.title;
+	if (summary?.body != null) el.body = summary.body;
+	if (summary?.delegate && summary?.title == null) el.title = "Sign Delegate Action";
+	const portal = ensureConfirmPortal();
+	portal.classList.remove("w3a-portal--visible");
+	portal.replaceChildren(el);
+	requestAnimationFrame(() => {
+		portal.classList.add("w3a-portal--visible");
+	});
+	const handle = createHostConfirmHandle(el);
+	return {
+		el,
+		handle
+	};
+}
+
+//#endregion
+exports.awaitConfirmUIDecision = awaitConfirmUIDecision;
+exports.mountConfirmUI = mountConfirmUI;
+//# sourceMappingURL=confirm-ui.js.map

package/dist/cjs/react/src/core/WebAuthnManager/LitComponents/confirm-ui.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirm-ui.js","names":["W3A_TX_CONFIRMER_ID","TxConfirmerWrapperElement","validateTheme","v: 'modal' | 'drawer'","WalletIframeDomEvents","normalized: TransactionInputWasm[]","isActionArgsWasm","toActionArgsWasm","orderActionForDigest","computeUiIntentDigestFromTxs","W3A_CONFIRM_PORTAL_ID","CONFIRM_UI_ELEMENT_SELECTORS"],"sources":["../../../../../../../src/core/WebAuthnManager/LitComponents/confirm-ui.ts"],"sourcesContent":["import { isActionArgsWasm, toActionArgsWasm, type ActionArgs, type ActionArgsWasm } from '@/core/types/actions';\nimport type { VrfWorkerManagerContext } from '../VrfWorkerManager';\nimport type { TransactionSummary } from '../VrfWorkerManager/confirmTxFlow/types';\nimport { WalletIframeDomEvents } from '../../WalletIframe/events';\nimport { TransactionInputWasm, VRFChallenge } from '../../types';\n\nimport { W3A_TX_CONFIRMER_ID, CONFIRM_UI_ELEMENT_SELECTORS, W3A_CONFIRM_PORTAL_ID } from './tags';\nimport type { ConfirmUIHandle, ConfirmUIUpdate, ConfirmationUIMode, ThemeName } from './confirm-ui-types';\nexport type { ConfirmUIHandle, ConfirmUIUpdate, ConfirmationUIMode } from './confirm-ui-types';\nimport { validateTheme } from './confirm-ui-types';\nimport { computeUiIntentDigestFromTxs, orderActionForDigest } from '../../digests/intentDigest';\n// Ensure the wrapper element is registered when this module loads.\n// Note: this must be a value import (not side-effect-only) so bundlers don't\n// tree-shake it away under `sideEffects: false`.\nimport { TxConfirmerWrapperElement } from './IframeTxConfirmer/tx-confirmer-wrapper';\n\ntry {\n  if (typeof customElements !== 'undefined' && !customElements.get(W3A_TX_CONFIRMER_ID)) {\n    customElements.define(W3A_TX_CONFIRMER_ID, TxConfirmerWrapperElement);\n  }\n} catch {}\n\n// Resolve theme preference from explicit param, user preferences, or DOM attribute\nfunction resolveTheme(ctx: VrfWorkerManagerContext, requested?: ThemeName): ThemeName {\n  let resolved = validateTheme(requested);\n  if (!resolved) {\n    try { resolved = validateTheme((ctx as any)?.userPreferencesManager?.getUserTheme?.()); } catch {}\n  }\n  if (!resolved) {\n    const domAttr = (document?.documentElement?.getAttribute('data-w3a-theme') || '').toLowerCase();\n    resolved = validateTheme(domAttr);\n  }\n  return resolved || 'dark';\n}\n\n// Minimal host element interface for the inline confirmer wrapper.\ninterface HostTxConfirmerElement extends HTMLElement {\n  variant?: 'modal' | 'drawer';\n  nearAccountId: string;\n  txSigningRequests: TransactionInputWasm[];\n  intentDigest?: string;\n  vrfChallenge?: Partial<VRFChallenge>;\n  theme?: ThemeName;\n  loading?: boolean;      // host elements use `loading` (iframe element uses `showLoading`)\n  deferClose?: boolean;   // two-phase close coordination\n  errorMessage?: string;\n  body?: string;\n  title: string;\n  requestUpdate?: () => void; // Lit element update hook (optional)\n  nearExplorerUrl?: string;\n}\n\n////////////////////////////\n// === Public Functions ===\n////////////////////////////\n\nexport async function mountConfirmUI({\n  ctx,\n  summary,\n  txSigningRequests,\n  vrfChallenge,\n  loading,\n  theme,\n  uiMode,\n  nearAccountIdOverride,\n}: {\n  ctx: VrfWorkerManagerContext,\n  summary: TransactionSummary,\n  txSigningRequests?: TransactionInputWasm[],\n  vrfChallenge?: Partial<VRFChallenge>,\n  loading?: boolean,\n  theme?: ThemeName,\n  uiMode: ConfirmationUIMode,\n  nearAccountIdOverride?: string,\n}): Promise<ConfirmUIHandle> {\n  // 'skip' mode should never request a UI mount; callers handle this.\n  const variant = uiModeToVariant(uiMode);\n  const { handle } = mountHostElement({\n    ctx,\n    summary,\n    txSigningRequests,\n    vrfChallenge,\n    loading,\n    theme,\n    variant,\n    nearAccountIdOverride,\n  });\n  return handle;\n}\n\nexport async function awaitConfirmUIDecision({\n  ctx,\n  summary,\n  txSigningRequests,\n  vrfChallenge,\n  theme,\n  uiMode,\n  nearAccountIdOverride,\n}: {\n  ctx: VrfWorkerManagerContext,\n  summary: TransactionSummary,\n  txSigningRequests: TransactionInputWasm[],\n  vrfChallenge?: Partial<VRFChallenge>,\n  theme: ThemeName,\n  uiMode: ConfirmationUIMode,\n  nearAccountIdOverride: string,\n}): Promise<{ confirmed: boolean; handle: ConfirmUIHandle; error?: string }> {\n  const variant = uiModeToVariant(uiMode);\n  const v: 'modal' | 'drawer' = variant || 'modal';\n\n  return new Promise((resolve) => {\n    const { el, handle } = mountHostElement({\n      ctx,\n      summary,\n      txSigningRequests,\n      vrfChallenge,\n      theme,\n      variant: v,\n      nearAccountIdOverride,\n    });\n\n    const finalize = (result: { confirmed: boolean; error?: string }) => {\n      cleanup();\n      resolve({ ...result, handle });\n    };\n\n    const onConfirm = async (event: Event) => {\n      const detail = (event as CustomEvent<ConfirmEventDetail> | undefined)?.detail;\n      let confirmed = detail?.confirmed !== false;\n      let error = typeof detail?.error === 'string' ? detail.error : undefined;\n      // Defensive UI digest validation in case wrapper capture-phase did not intercept\n      if (confirmed) {\n        const guardErr = await checkIntentDigestGuard(summary, txSigningRequests);\n        if (guardErr) {\n          confirmed = false;\n          if (!error) error = guardErr;\n        }\n      }\n\n      if (!confirmed) {\n        if (error) {\n          handle.update({ errorMessage: error, loading: false });\n        } else {\n          handle.update({ loading: false, errorMessage: '' });\n        }\n        finalize({ confirmed: false, error });\n        return;\n      }\n      finalize({ confirmed: true });\n    };\n\n    const onCancel = (event?: Event) => {\n      const detail = (event as CustomEvent<ConfirmEventDetail> | undefined)?.detail;\n      const error = typeof detail?.error === 'string' ? detail.error : undefined;\n      if (error) {\n        handle.update({ errorMessage: error, loading: false });\n      } else {\n        handle.update({ loading: false });\n      }\n      finalize({ confirmed: false, error });\n    };\n\n    const cleanup = () => {\n      el.removeEventListener(WalletIframeDomEvents.TX_CONFIRMER_CONFIRM, onConfirm as EventListener);\n      el.removeEventListener(WalletIframeDomEvents.TX_CONFIRMER_CANCEL, onCancel as EventListener);\n    };\n\n    // Listen to canonical events only\n    el.addEventListener(WalletIframeDomEvents.TX_CONFIRMER_CONFIRM, onConfirm as EventListener);\n    el.addEventListener(WalletIframeDomEvents.TX_CONFIRMER_CANCEL, onCancel as EventListener);\n  });\n}\n\n//////////////////////\n// Internal Functions\n//////////////////////\n\nasync function checkIntentDigestGuard(\n  summary: TransactionSummary | undefined,\n  txSigningRequests?: TransactionInputWasm[],\n): Promise<string | undefined> {\n  const hasTxs = (txSigningRequests?.length || 0) > 0;\n  const expected = summary?.intentDigest;\n  if (!hasTxs || !expected) return undefined;\n  try {\n    // UI-side check must mirror the canonical intent digest:\n    // { receiverId, actions: ActionArgsWasm[] } with actions normalized\n    // via orderActionForDigest, and no nonce included.\n    const normalized: TransactionInputWasm[] = (txSigningRequests || []).map((tx) => ({\n      receiverId: tx.receiverId,\n      actions: (tx.actions || [])\n        .map((a) => (isActionArgsWasm(a) ? a : toActionArgsWasm(a as unknown as ActionArgs)))\n        .map((a) => orderActionForDigest(a as ActionArgsWasm) as ActionArgsWasm),\n    }));\n    const uiDigest = await computeUiIntentDigestFromTxs(normalized);\n    if (uiDigest !== expected) return 'INTENT_DIGEST_MISMATCH';\n    return undefined;\n  } catch {\n    return 'UI_DIGEST_VALIDATION_FAILED';\n  }\n}\n\nfunction createHostConfirmHandle(el: HostTxConfirmerElement): ConfirmUIHandle {\n  return {\n    close: (_confirmed: boolean) => { el.remove(); },\n    update: (props: ConfirmUIUpdate) => applyHostElementProps(el, props),\n  };\n}\n\n// Small helper to keep a host element's error attribute in sync\nfunction setErrorAttribute(el: HTMLElement, msg: string): void {\n  if (msg) {\n    el.setAttribute('data-error-message', msg);\n  } else {\n    el.removeAttribute('data-error-message');\n  }\n}\n\nfunction applyHostElementProps(el: HostTxConfirmerElement, props?: ConfirmUIUpdate): void {\n  if (!props) return;\n  if (props.nearAccountId != null) el.nearAccountId = props.nearAccountId;\n  if (props.txSigningRequests != null) el.txSigningRequests = props.txSigningRequests;\n  if (props.vrfChallenge != null) el.vrfChallenge = props.vrfChallenge;\n  if (props.theme != null) el.theme = props.theme;\n  if (props.loading != null) el.loading = !!props.loading;\n  if (props.body != null) el.body = props.body;\n  if (props.title != null) el.title = props.title;\n  if ('errorMessage' in (props as Record<string, unknown>)) {\n    const msg = props.errorMessage ?? '';\n    el.errorMessage = msg;\n    setErrorAttribute(el, msg);\n  }\n  if ((props as any).nearExplorerUrl != null) {\n    el.nearExplorerUrl = (props as any).nearExplorerUrl;\n  }\n  el.requestUpdate?.();\n}\n\n// ===== Inline confirmer helpers =====\nfunction cleanupExistingConfirmers(): void {\n  const portal = document.getElementById(W3A_CONFIRM_PORTAL_ID);\n  if (portal) {\n    const existing = Array.from(portal.querySelectorAll('*')) as HTMLElement[];\n    for (const el of existing) {\n      el.dispatchEvent(new CustomEvent(WalletIframeDomEvents.TX_CONFIRMER_CANCEL, { bubbles: true, composed: true }));\n    }\n    portal.replaceChildren();\n    return;\n  }\n\n  const selectors = CONFIRM_UI_ELEMENT_SELECTORS as readonly string[];\n  const els = selectors.flatMap((sel) => Array.from(document.querySelectorAll(sel)) as HTMLElement[]);\n  for (const el of els) {\n    el.dispatchEvent(new CustomEvent(WalletIframeDomEvents.TX_CONFIRMER_CANCEL, { bubbles: true, composed: true }));\n    el.remove();\n  }\n}\n\nfunction ensureConfirmPortal(): HTMLElement {\n  let portal = document.getElementById(W3A_CONFIRM_PORTAL_ID) as HTMLElement | null;\n  if (!portal) {\n    portal = document.createElement('div');\n    portal.id = W3A_CONFIRM_PORTAL_ID;\n    // Keep the portal inert except for stacking; children handle their own overlay\n    // Class-based only to comply with strict CSP\n    portal.classList.add('w3a-portal');\n    const root = document.body ?? document.documentElement;\n    if (root) {\n      root.appendChild(portal);\n    }\n  }\n  return portal;\n}\n\ntype ConfirmEventDetail = {\n  confirmed?: boolean;\n  error?: string;\n};\n\nfunction uiModeToVariant(uiMode: ConfirmationUIMode): 'modal' | 'drawer' {\n  return uiMode === 'drawer' ? 'drawer' : 'modal';\n}\n\n// Create and mount a fresh host element into the tx-confirmer portal\nfunction mountHostElement({\n  ctx,\n  summary,\n  txSigningRequests,\n  vrfChallenge,\n  loading,\n  theme,\n  variant,\n  nearAccountIdOverride,\n}: {\n  ctx: VrfWorkerManagerContext,\n  summary: TransactionSummary,\n  txSigningRequests?: TransactionInputWasm[],\n  vrfChallenge?: Partial<VRFChallenge>,\n  loading?: boolean,\n  theme?: ThemeName,\n  variant?: 'modal' | 'drawer',\n  nearAccountIdOverride?: string,\n}): { el: HostTxConfirmerElement; handle: ConfirmUIHandle } {\n  const v: 'modal' | 'drawer' = variant || 'modal';\n  cleanupExistingConfirmers();\n  const el = document.createElement(W3A_TX_CONFIRMER_ID) as HostTxConfirmerElement;\n  el.variant = v;\n  el.nearAccountId = nearAccountIdOverride || ctx.userPreferencesManager.getCurrentUserAccountId() || '';\n  el.txSigningRequests = txSigningRequests || [];\n  if (ctx.nearExplorerUrl) {\n    el.nearExplorerUrl = ctx.nearExplorerUrl;\n  }\n  // Only enable UI digest validation for transaction-signing flows where txs exist.\n  // Registration/link and other non-tx flows should not set intentDigest to avoid\n  // spurious INTENT_DIGEST_MISMATCH on confirm.\n  if ((txSigningRequests?.length || 0) > 0) {\n    el.intentDigest = summary?.intentDigest;\n  }\n  if (vrfChallenge) el.vrfChallenge = vrfChallenge;\n  // Resolve theme with short-circuiting helper\n  el.theme = resolveTheme(ctx, theme);\n  if (loading != null) el.loading = !!loading;\n  el.removeAttribute('data-error-message');\n  // Two-phase close: let caller control removal\n  el.deferClose = true;\n  // Optional per-request display overrides\n  if (summary?.title != null) el.title = summary.title;\n  if (summary?.body != null) el.body = summary.body;\n  // Default title for delegate signing when not overridden\n  if (summary?.delegate && summary?.title == null) {\n    el.title = 'Sign Delegate Action';\n  }\n  const portal = ensureConfirmPortal();\n  // Ensure hidden state (idempotent) and mount\n  portal.classList.remove('w3a-portal--visible');\n  portal.replaceChildren(el);\n  // Reveal in the next frame via class toggle\n  requestAnimationFrame(() => {\n    portal.classList.add('w3a-portal--visible');\n  });\n  const handle = createHostConfirmHandle(el);\n  return { el, handle };\n}\n\n// Types and element export for consumers that need the inline confirmer handle\nexport type { TxConfirmerWrapperElement } from './IframeTxConfirmer/tx-confirmer-wrapper';\nexport { W3A_TX_CONFIRMER_ID };\n"],"mappings":";;;;;;;;AAgBA,IAAI;AACF,KAAI,OAAO,mBAAmB,eAAe,CAAC,eAAe,IAAIA,kCAC/D,gBAAe,OAAOA,kCAAqBC;QAEvC;AAGR,SAAS,aAAa,KAA8B,WAAkC;CACpF,IAAI,WAAWC,uCAAc;AAC7B,KAAI,CAAC,SACH,KAAI;AAAE,aAAWA,uCAAe,KAAa,wBAAwB;SAA2B;AAElG,KAAI,CAAC,UAAU;EACb,MAAM,WAAW,UAAU,iBAAiB,aAAa,qBAAqB,IAAI;AAClF,aAAWA,uCAAc;;AAE3B,QAAO,YAAY;;AAwBrB,eAAsB,eAAe,EACnC,KACA,SACA,mBACA,cACA,SACA,OACA,QACA,yBAU2B;CAE3B,MAAM,UAAU,gBAAgB;CAChC,MAAM,EAAE,WAAW,iBAAiB;EAClC;EACA;EACA;EACA;EACA;EACA;EACA;EACA;;AAEF,QAAO;;AAGT,eAAsB,uBAAuB,EAC3C,KACA,SACA,mBACA,cACA,OACA,QACA,yBAS2E;CAC3E,MAAM,UAAU,gBAAgB;CAChC,MAAMC,IAAwB,WAAW;AAEzC,QAAO,IAAI,SAAS,YAAY;EAC9B,MAAM,EAAE,IAAI,WAAW,iBAAiB;GACtC;GACA;GACA;GACA;GACA;GACA,SAAS;GACT;;EAGF,MAAM,YAAY,WAAmD;AACnE;AACA,WAAQ;IAAE,GAAG;IAAQ;;;EAGvB,MAAM,YAAY,OAAO,UAAiB;GACxC,MAAM,SAAU,OAAuD;GACvE,IAAI,YAAY,QAAQ,cAAc;GACtC,IAAI,QAAQ,OAAO,QAAQ,UAAU,WAAW,OAAO,QAAQ;AAE/D,OAAI,WAAW;IACb,MAAM,WAAW,MAAM,uBAAuB,SAAS;AACvD,QAAI,UAAU;AACZ,iBAAY;AACZ,SAAI,CAAC,MAAO,SAAQ;;;AAIxB,OAAI,CAAC,WAAW;AACd,QAAI,MACF,QAAO,OAAO;KAAE,cAAc;KAAO,SAAS;;QAE9C,QAAO,OAAO;KAAE,SAAS;KAAO,cAAc;;AAEhD,aAAS;KAAE,WAAW;KAAO;;AAC7B;;AAEF,YAAS,EAAE,WAAW;;EAGxB,MAAM,YAAY,UAAkB;GAClC,MAAM,SAAU,OAAuD;GACvE,MAAM,QAAQ,OAAO,QAAQ,UAAU,WAAW,OAAO,QAAQ;AACjE,OAAI,MACF,QAAO,OAAO;IAAE,cAAc;IAAO,SAAS;;OAE9C,QAAO,OAAO,EAAE,SAAS;AAE3B,YAAS;IAAE,WAAW;IAAO;;;EAG/B,MAAM,gBAAgB;AACpB,MAAG,oBAAoBC,qCAAsB,sBAAsB;AACnE,MAAG,oBAAoBA,qCAAsB,qBAAqB;;AAIpE,KAAG,iBAAiBA,qCAAsB,sBAAsB;AAChE,KAAG,iBAAiBA,qCAAsB,qBAAqB;;;AAQnE,eAAe,uBACb,SACA,mBAC6B;CAC7B,MAAM,UAAU,mBAAmB,UAAU,KAAK;CAClD,MAAM,WAAW,SAAS;AAC1B,KAAI,CAAC,UAAU,CAAC,SAAU,QAAO;AACjC,KAAI;EAIF,MAAMC,cAAsC,qBAAqB,IAAI,KAAK,QAAQ;GAChF,YAAY,GAAG;GACf,UAAU,GAAG,WAAW,IACrB,KAAK,MAAOC,iCAAiB,KAAK,IAAIC,iCAAiB,IACvD,KAAK,MAAMC,0CAAqB;;EAErC,MAAM,WAAW,MAAMC,kDAA6B;AACpD,MAAI,aAAa,SAAU,QAAO;AAClC,SAAO;SACD;AACN,SAAO;;;AAIX,SAAS,wBAAwB,IAA6C;AAC5E,QAAO;EACL,QAAQ,eAAwB;AAAE,MAAG;;EACrC,SAAS,UAA2B,sBAAsB,IAAI;;;AAKlE,SAAS,kBAAkB,IAAiB,KAAmB;AAC7D,KAAI,IACF,IAAG,aAAa,sBAAsB;KAEtC,IAAG,gBAAgB;;AAIvB,SAAS,sBAAsB,IAA4B,OAA+B;AACxF,KAAI,CAAC,MAAO;AACZ,KAAI,MAAM,iBAAiB,KAAM,IAAG,gBAAgB,MAAM;AAC1D,KAAI,MAAM,qBAAqB,KAAM,IAAG,oBAAoB,MAAM;AAClE,KAAI,MAAM,gBAAgB,KAAM,IAAG,eAAe,MAAM;AACxD,KAAI,MAAM,SAAS,KAAM,IAAG,QAAQ,MAAM;AAC1C,KAAI,MAAM,WAAW,KAAM,IAAG,UAAU,CAAC,CAAC,MAAM;AAChD,KAAI,MAAM,QAAQ,KAAM,IAAG,OAAO,MAAM;AACxC,KAAI,MAAM,SAAS,KAAM,IAAG,QAAQ,MAAM;AAC1C,KAAI,kBAAmB,OAAmC;EACxD,MAAM,MAAM,MAAM,gBAAgB;AAClC,KAAG,eAAe;AAClB,oBAAkB,IAAI;;AAExB,KAAK,MAAc,mBAAmB,KACpC,IAAG,kBAAmB,MAAc;AAEtC,IAAG;;AAIL,SAAS,4BAAkC;CACzC,MAAM,SAAS,SAAS,eAAeC;AACvC,KAAI,QAAQ;EACV,MAAM,WAAW,MAAM,KAAK,OAAO,iBAAiB;AACpD,OAAK,MAAM,MAAM,SACf,IAAG,cAAc,IAAI,YAAYN,qCAAsB,qBAAqB;GAAE,SAAS;GAAM,UAAU;;AAEzG,SAAO;AACP;;CAGF,MAAM,YAAYO;CAClB,MAAM,MAAM,UAAU,SAAS,QAAQ,MAAM,KAAK,SAAS,iBAAiB;AAC5E,MAAK,MAAM,MAAM,KAAK;AACpB,KAAG,cAAc,IAAI,YAAYP,qCAAsB,qBAAqB;GAAE,SAAS;GAAM,UAAU;;AACvG,KAAG;;;AAIP,SAAS,sBAAmC;CAC1C,IAAI,SAAS,SAAS,eAAeM;AACrC,KAAI,CAAC,QAAQ;AACX,WAAS,SAAS,cAAc;AAChC,SAAO,KAAKA;AAGZ,SAAO,UAAU,IAAI;EACrB,MAAM,OAAO,SAAS,QAAQ,SAAS;AACvC,MAAI,KACF,MAAK,YAAY;;AAGrB,QAAO;;AAQT,SAAS,gBAAgB,QAAgD;AACvE,QAAO,WAAW,WAAW,WAAW;;AAI1C,SAAS,iBAAiB,EACxB,KACA,SACA,mBACA,cACA,SACA,OACA,SACA,yBAU0D;CAC1D,MAAMP,IAAwB,WAAW;AACzC;CACA,MAAM,KAAK,SAAS,cAAcH;AAClC,IAAG,UAAU;AACb,IAAG,gBAAgB,yBAAyB,IAAI,uBAAuB,6BAA6B;AACpG,IAAG,oBAAoB,qBAAqB;AAC5C,KAAI,IAAI,gBACN,IAAG,kBAAkB,IAAI;AAK3B,MAAK,mBAAmB,UAAU,KAAK,EACrC,IAAG,eAAe,SAAS;AAE7B,KAAI,aAAc,IAAG,eAAe;AAEpC,IAAG,QAAQ,aAAa,KAAK;AAC7B,KAAI,WAAW,KAAM,IAAG,UAAU,CAAC,CAAC;AACpC,IAAG,gBAAgB;AAEnB,IAAG,aAAa;AAEhB,KAAI,SAAS,SAAS,KAAM,IAAG,QAAQ,QAAQ;AAC/C,KAAI,SAAS,QAAQ,KAAM,IAAG,OAAO,QAAQ;AAE7C,KAAI,SAAS,YAAY,SAAS,SAAS,KACzC,IAAG,QAAQ;CAEb,MAAM,SAAS;AAEf,QAAO,UAAU,OAAO;AACxB,QAAO,gBAAgB;AAEvB,6BAA4B;AAC1B,SAAO,UAAU,IAAI;;CAEvB,MAAM,SAAS,wBAAwB;AACvC,QAAO;EAAE;EAAI"}

package/dist/cjs/react/src/core/WebAuthnManager/LitComponents/css/css-loader.js

@@ -0,0 +1,109 @@
+const require_asset_base = require('../asset-base.js');
+
+//#region src/core/WebAuthnManager/LitComponents/css/css-loader.ts
+const supportsConstructable = typeof ShadowRoot !== "undefined" && "adoptedStyleSheets" in ShadowRoot.prototype;
+const sheetCache = /* @__PURE__ */ new Map();
+let warnedRelativeBaseOnce = false;
+function resolveStylesheetUrl(assetName) {
+	const base = require_asset_base.resolveEmbeddedBase();
+	const join = (s) => s.endsWith("/") ? s : s + "/";
+	if (/^https?:/i.test(base)) return `${join(base)}${assetName}`;
+	try {
+		if (!warnedRelativeBaseOnce && typeof document !== "undefined" && document.URL === "about:srcdoc") {
+			warnedRelativeBaseOnce = true;
+			console.warn(`[W3A][css-loader] Embedded SDK base is relative: "${base}". In production, configure an absolute base so iframe assets resolve: set TatchiPasskeyProvider config { iframeWallet: { walletOrigin: "https://wallet.example.com", sdkBasePath: "/sdk" } }, `);
+		}
+	} catch {}
+	const origin = typeof window !== "undefined" && window.location ? window.location.origin : "";
+	if (origin && origin !== "null" && /^https?:/i.test(origin)) {
+		const prefix = base.startsWith("/") ? base : `/${base}`;
+		return `${join(origin + prefix)}${assetName}`;
+	}
+	const normalized = base.startsWith("/") ? base : `/${base}`;
+	return `${join(normalized)}${assetName}`;
+}
+function getDoc(root) {
+	return root.ownerDocument ?? (typeof document !== "undefined" ? document : null);
+}
+function waitForStylesheet(link) {
+	return new Promise((resolve) => {
+		const done = () => {
+			link._w3aLoaded = true;
+			resolve();
+		};
+		if (link._w3aLoaded || link.sheet) return done();
+		link.addEventListener("load", done, { once: true });
+		link.addEventListener("error", done, { once: true });
+	});
+}
+async function ensureDocumentLink(doc, assetName, markerAttr) {
+	const existing = doc.head?.querySelector(`link[${markerAttr}]`);
+	if (existing) {
+		await waitForStylesheet(existing);
+		return;
+	}
+	const link = doc.createElement("link");
+	link.rel = "stylesheet";
+	link.href = resolveStylesheetUrl(assetName);
+	link.setAttribute(markerAttr, "");
+	doc.head?.appendChild(link);
+	await waitForStylesheet(link);
+}
+async function adoptConstructable(root, assetName) {
+	if (!supportsConstructable) return false;
+	const cached = sheetCache.get(assetName);
+	const load = cached ?? (async () => {
+		if (typeof fetch !== "function") return null;
+		try {
+			const res = await fetch(resolveStylesheetUrl(assetName), { mode: "cors" });
+			if (!res.ok) return null;
+			const cssText = await res.text();
+			const sheet$1 = new CSSStyleSheet();
+			sheet$1.replaceSync(cssText);
+			return sheet$1;
+		} catch {
+			return null;
+		}
+	})();
+	if (!cached) sheetCache.set(assetName, load);
+	const sheet = await load;
+	if (!sheet) return false;
+	const current = root.adoptedStyleSheets;
+	if (!current || !current.includes(sheet)) root.adoptedStyleSheets = current ? [...current, sheet] : [sheet];
+	return true;
+}
+/**
+* Ensure an external CSS asset is applied to the given target.
+*
+* Strategy:
+* - For ShadowRoot: try constructable; if that fails and we're in about:srcdoc,
+*   inject a scoped @import; otherwise ensure a document-level <link>.
+* - For Document/HTMLElement targets: ensure a document-level <link>.
+*/
+async function ensureExternalStyles(root, assetName, markerAttr) {
+	if (!root) return;
+	try {
+		const doc = getDoc(root);
+		const isShadow = typeof ShadowRoot !== "undefined" && root instanceof ShadowRoot;
+		doc && doc.URL;
+		if (!isShadow && doc) {
+			const preexisting = doc.head?.querySelector(`link[${markerAttr}]`);
+			if (preexisting) {
+				await waitForStylesheet(preexisting);
+				return;
+			}
+		}
+		if (isShadow) {
+			if (await adoptConstructable(root, assetName)) return;
+			if (doc) await ensureDocumentLink(doc, assetName, markerAttr);
+			return;
+		}
+		if (doc) await ensureDocumentLink(doc, assetName, markerAttr);
+	} catch (err) {
+		console.warn("[W3A][css-loader] Failed to ensure stylesheet:", assetName, err);
+	}
+}
+
+//#endregion
+exports.ensureExternalStyles = ensureExternalStyles;
+//# sourceMappingURL=css-loader.js.map

package/dist/cjs/react/src/core/WebAuthnManager/LitComponents/css/css-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"css-loader.js","names":["sheetCache: Map<string, Promise<CSSStyleSheet | null>>","resolveEmbeddedBase","sheet"],"sources":["../../../../../../../../src/core/WebAuthnManager/LitComponents/css/css-loader.ts"],"sourcesContent":["import { resolveEmbeddedBase } from '../asset-base';\n\nconst supportsConstructable = typeof ShadowRoot !== 'undefined' && 'adoptedStyleSheets' in ShadowRoot.prototype;\nconst sheetCache: Map<string, Promise<CSSStyleSheet | null>> = new Map();\n\nlet warnedRelativeBaseOnce = false;\n\nfunction resolveStylesheetUrl(assetName: string): string {\n  const base = resolveEmbeddedBase();\n  const join = (s: string) => (s.endsWith('/') ? s : s + '/');\n\n  // Absolute base already includes origin\n  if (/^https?:/i.test(base)) return `${join(base)}${assetName}`;\n\n  // Warn early when running inside srcdoc with a relative base.\n  // In this case, relative URLs will resolve against the host app origin,\n  // which likely does not serve SDK assets under `/sdk/*`.\n  try {\n    if (!warnedRelativeBaseOnce && typeof document !== 'undefined' && document.URL === 'about:srcdoc') {\n      warnedRelativeBaseOnce = true;\n      console.warn(\n        `[W3A][css-loader] Embedded SDK base is relative: \"${base}\". ` +\n        `In production, configure an absolute base so iframe assets resolve: ` +\n        `set TatchiPasskeyProvider config { iframeWallet: { walletOrigin: \"https://wallet.example.com\", sdkBasePath: \"/sdk\" } }, `\n      );\n    }\n  } catch {}\n\n  // Relative base: prefix with current document origin if available\n  const origin = typeof window !== 'undefined' && window.location ? window.location.origin : '';\n  if (origin && origin !== 'null' && /^https?:/i.test(origin)) {\n    const prefix = base.startsWith('/') ? base : `/${base}`;\n    return `${join(origin + prefix)}${assetName}`;\n  }\n  // Last resort: treat base as absolute path\n  const normalized = base.startsWith('/') ? base : `/${base}`;\n  return `${join(normalized)}${assetName}`;\n}\n\n// Low-level helpers\n\nfunction getDoc(root: ShadowRoot | DocumentFragment | HTMLElement): Document | null {\n  return ((root as any).ownerDocument as Document | null) ?? (typeof document !== 'undefined' ? document : null);\n}\n\nfunction waitForStylesheet(link: HTMLLinkElement): Promise<void> {\n  return new Promise<void>((resolve) => {\n    const done = () => { (link as any)._w3aLoaded = true; resolve(); };\n    if ((link as any)._w3aLoaded || link.sheet) return done();\n    link.addEventListener('load', done, { once: true } as AddEventListenerOptions);\n    link.addEventListener('error', done, { once: true } as AddEventListenerOptions);\n  });\n}\n\nasync function ensureDocumentLink(doc: Document, assetName: string, markerAttr: string): Promise<void> {\n  const existing = doc.head?.querySelector(`link[${markerAttr}]`) as HTMLLinkElement | null;\n  if (existing) { await waitForStylesheet(existing); return; }\n  const link = doc.createElement('link');\n  link.rel = 'stylesheet';\n  link.href = resolveStylesheetUrl(assetName);\n  link.setAttribute(markerAttr, '');\n  doc.head?.appendChild(link);\n  await waitForStylesheet(link);\n}\n\nfunction ensureScopedImport(root: ShadowRoot | DocumentFragment | HTMLElement, assetName: string, markerAttr: string): void {\n  try {\n    const doc = getDoc(root);\n    if (!doc) return;\n    const canQuery = typeof (root as any).querySelector === 'function';\n    if (canQuery) {\n      const existing = (root as any).querySelector?.(`style[${markerAttr}]`) as HTMLStyleElement | null;\n      if (existing) return;\n    }\n    const style = doc.createElement('style');\n    style.setAttribute(markerAttr, '');\n    style.textContent = `@import url(\"${resolveStylesheetUrl(assetName)}\");`;\n    if (typeof (root as any).appendChild === 'function') (root as any).appendChild(style);\n    else doc.head?.appendChild(style);\n  } catch (e) {\n    try { console.warn('[W3A][css-loader] Failed to append @import style for', assetName, e); } catch {}\n  }\n}\n\nasync function adoptConstructable(root: ShadowRoot, assetName: string): Promise<boolean> {\n  if (!supportsConstructable) return false;\n  const cached = sheetCache.get(assetName);\n  const load = cached ?? (async () => {\n    if (typeof fetch !== 'function') return null;\n    try {\n      const res = await fetch(resolveStylesheetUrl(assetName), { mode: 'cors' });\n      if (!res.ok) return null;\n      const cssText = await res.text();\n      const sheet = new CSSStyleSheet();\n      sheet.replaceSync(cssText);\n      return sheet;\n    } catch {\n      return null;\n    }\n  })();\n  if (!cached) sheetCache.set(assetName, load);\n  const sheet = await load;\n  if (!sheet) return false;\n  const current = (root as any).adoptedStyleSheets as CSSStyleSheet[] | undefined;\n  if (!current || !current.includes(sheet)) (root as any).adoptedStyleSheets = current ? [...current, sheet] : [sheet];\n  return true;\n}\n\n// Public API\n\n/**\n * Ensure an external CSS asset is applied to the given target.\n *\n * Strategy:\n * - For ShadowRoot: try constructable; if that fails and we're in about:srcdoc,\n *   inject a scoped @import; otherwise ensure a document-level <link>.\n * - For Document/HTMLElement targets: ensure a document-level <link>.\n */\nexport async function ensureExternalStyles(\n  root: ShadowRoot | DocumentFragment | HTMLElement | null | undefined,\n  assetName: string,\n  markerAttr: string\n): Promise<void> {\n  if (!root) return;\n\n  try {\n    const doc = getDoc(root);\n    const isShadow = typeof ShadowRoot !== 'undefined' && (root instanceof ShadowRoot);\n    const isSrcdoc = !!doc && doc.URL === 'about:srcdoc';\n\n    // Document-level short‑circuit for non‑shadow roots if link already exists\n    if (!isShadow && doc) {\n      const preexisting = doc.head?.querySelector(`link[${markerAttr}]`) as HTMLLinkElement | null;\n      if (preexisting) { await waitForStylesheet(preexisting); return; }\n    }\n\n    if (isShadow) {\n      // 1) Try constructable stylesheets (CSP-safe)\n      if (await adoptConstructable(root as ShadowRoot, assetName)) return;\n      // 2) Strict‑CSP compatible fallback: never inject inline <style>.\n      //    Use a document‑level <link rel=\"stylesheet\"> so style-src 'self' and\n      //    style-src-attr 'none' policies are respected, even inside about:srcdoc.\n      if (doc) { await ensureDocumentLink(doc, assetName, markerAttr); }\n      return;\n    }\n\n    // Non‑shadow target: ensure a single document‑level link in <head> (strict CSP friendly)\n    if (doc) {\n      await ensureDocumentLink(doc, assetName, markerAttr);\n    }\n  } catch (err) {\n    console.warn('[W3A][css-loader] Failed to ensure stylesheet:', assetName, err);\n  }\n}\n"],"mappings":";;;AAEA,MAAM,wBAAwB,OAAO,eAAe,eAAe,wBAAwB,WAAW;AACtG,MAAMA,6BAAyD,IAAI;AAEnE,IAAI,yBAAyB;AAE7B,SAAS,qBAAqB,WAA2B;CACvD,MAAM,OAAOC;CACb,MAAM,QAAQ,MAAe,EAAE,SAAS,OAAO,IAAI,IAAI;AAGvD,KAAI,YAAY,KAAK,MAAO,QAAO,GAAG,KAAK,QAAQ;AAKnD,KAAI;AACF,MAAI,CAAC,0BAA0B,OAAO,aAAa,eAAe,SAAS,QAAQ,gBAAgB;AACjG,4BAAyB;AACzB,WAAQ,KACN,qDAAqD,KAAK;;SAKxD;CAGR,MAAM,SAAS,OAAO,WAAW,eAAe,OAAO,WAAW,OAAO,SAAS,SAAS;AAC3F,KAAI,UAAU,WAAW,UAAU,YAAY,KAAK,SAAS;EAC3D,MAAM,SAAS,KAAK,WAAW,OAAO,OAAO,IAAI;AACjD,SAAO,GAAG,KAAK,SAAS,UAAU;;CAGpC,MAAM,aAAa,KAAK,WAAW,OAAO,OAAO,IAAI;AACrD,QAAO,GAAG,KAAK,cAAc;;AAK/B,SAAS,OAAO,MAAoE;AAClF,QAAS,KAAa,kBAAsC,OAAO,aAAa,cAAc,WAAW;;AAG3G,SAAS,kBAAkB,MAAsC;AAC/D,QAAO,IAAI,SAAe,YAAY;EACpC,MAAM,aAAa;AAAE,GAAC,KAAa,aAAa;AAAM;;AACtD,MAAK,KAAa,cAAc,KAAK,MAAO,QAAO;AACnD,OAAK,iBAAiB,QAAQ,MAAM,EAAE,MAAM;AAC5C,OAAK,iBAAiB,SAAS,MAAM,EAAE,MAAM;;;AAIjD,eAAe,mBAAmB,KAAe,WAAmB,YAAmC;CACrG,MAAM,WAAW,IAAI,MAAM,cAAc,QAAQ,WAAW;AAC5D,KAAI,UAAU;AAAE,QAAM,kBAAkB;AAAW;;CACnD,MAAM,OAAO,IAAI,cAAc;AAC/B,MAAK,MAAM;AACX,MAAK,OAAO,qBAAqB;AACjC,MAAK,aAAa,YAAY;AAC9B,KAAI,MAAM,YAAY;AACtB,OAAM,kBAAkB;;AAsB1B,eAAe,mBAAmB,MAAkB,WAAqC;AACvF,KAAI,CAAC,sBAAuB,QAAO;CACnC,MAAM,SAAS,WAAW,IAAI;CAC9B,MAAM,OAAO,WAAW,YAAY;AAClC,MAAI,OAAO,UAAU,WAAY,QAAO;AACxC,MAAI;GACF,MAAM,MAAM,MAAM,MAAM,qBAAqB,YAAY,EAAE,MAAM;AACjE,OAAI,CAAC,IAAI,GAAI,QAAO;GACpB,MAAM,UAAU,MAAM,IAAI;GAC1B,MAAMC,UAAQ,IAAI;AAClB,WAAM,YAAY;AAClB,UAAOA;UACD;AACN,UAAO;;;AAGX,KAAI,CAAC,OAAQ,YAAW,IAAI,WAAW;CACvC,MAAM,QAAQ,MAAM;AACpB,KAAI,CAAC,MAAO,QAAO;CACnB,MAAM,UAAW,KAAa;AAC9B,KAAI,CAAC,WAAW,CAAC,QAAQ,SAAS,OAAQ,CAAC,KAAa,qBAAqB,UAAU,CAAC,GAAG,SAAS,SAAS,CAAC;AAC9G,QAAO;;;;;;;;;;AAaT,eAAsB,qBACpB,MACA,WACA,YACe;AACf,KAAI,CAAC,KAAM;AAEX,KAAI;EACF,MAAM,MAAM,OAAO;EACnB,MAAM,WAAW,OAAO,eAAe,eAAgB,gBAAgB;AACtD,EAAE,OAAO,IAAI;AAG9B,MAAI,CAAC,YAAY,KAAK;GACpB,MAAM,cAAc,IAAI,MAAM,cAAc,QAAQ,WAAW;AAC/D,OAAI,aAAa;AAAE,UAAM,kBAAkB;AAAc;;;AAG3D,MAAI,UAAU;AAEZ,OAAI,MAAM,mBAAmB,MAAoB,WAAY;AAI7D,OAAI,IAAO,OAAM,mBAAmB,KAAK,WAAW;AACpD;;AAIF,MAAI,IACF,OAAM,mBAAmB,KAAK,WAAW;UAEpC,KAAK;AACZ,UAAQ,KAAK,kDAAkD,WAAW"}

package/dist/cjs/react/src/core/WebAuthnManager/LitComponents/ensure-defined.js

@@ -0,0 +1,19 @@
+const require_tags = require('./tags.js');
+
+//#region src/core/WebAuthnManager/LitComponents/ensure-defined.ts
+const TAG_LOADERS = { [require_tags.W3A_EXPORT_VIEWER_IFRAME_ID]: () => Promise.resolve().then(() => require("./ExportPrivateKey/iframe-host.js")) };
+/**
+* Small utility that guarantees a custom element definition exists in the
+* current runtime before creating/using it. If the tag is not yet defined,
+* it runs the provided dynamic import loader to execute the module that calls
+* customElements.define().
+*/
+async function ensureDefined(tag, loader) {
+	try {
+		if (!customElements.get(tag)) await loader();
+	} catch {}
+}
+
+//#endregion
+exports.ensureDefined = ensureDefined;
+//# sourceMappingURL=ensure-defined.js.map

package/dist/cjs/react/src/core/WebAuthnManager/LitComponents/ensure-defined.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure-defined.js","names":["TAG_LOADERS: Record<string, () => Promise<unknown>>","W3A_EXPORT_VIEWER_IFRAME_ID"],"sources":["../../../../../../../src/core/WebAuthnManager/LitComponents/ensure-defined.ts"],"sourcesContent":["/**\n * Consolidated loaders for known W3A custom elements that may be used across runtimes.\n * This allows dev tooling to auto-ensure definitions for common elements when possible.\n */\nimport { W3A_EXPORT_VIEWER_IFRAME_ID } from './tags';\n\nexport const TAG_LOADERS: Record<string, () => Promise<unknown>> = {\n  [W3A_EXPORT_VIEWER_IFRAME_ID]: () => import('./ExportPrivateKey/iframe-host'),\n};\n\n/**\n * Small utility that guarantees a custom element definition exists in the\n * current runtime before creating/using it. If the tag is not yet defined,\n * it runs the provided dynamic import loader to execute the module that calls\n * customElements.define().\n */\nexport async function ensureDefined(tag: string, loader: () => Promise<unknown>): Promise<void> {\n  try {\n    if (!customElements.get(tag)) {\n      await loader();\n    }\n  } catch {\n    // Best-effort; downstream calls will still throw useful errors if missing\n  }\n}\n\n/** Attempt to ensure a known W3A element by tag; returns true if a loader ran. */\nexport async function ensureKnownW3aElement(tag: string): Promise<boolean> {\n  try {\n    const t = (tag || '').toLowerCase();\n    const loader = TAG_LOADERS[t];\n    if (!loader) return false;\n    await ensureDefined(t, loader);\n    return true;\n  } catch {\n    return false;\n  }\n}\n"],"mappings":";;;AAMA,MAAaA,cAAsD,GAChEC,sFAAoC;;;;;;;AASvC,eAAsB,cAAc,KAAa,QAA+C;AAC9F,KAAI;AACF,MAAI,CAAC,eAAe,IAAI,KACtB,OAAM;SAEF"}

package/dist/cjs/react/src/core/WebAuthnManager/LitComponents/lit-events.js

@@ -0,0 +1,34 @@
+
+//#region src/core/WebAuthnManager/LitComponents/lit-events.ts
+const LitComponentEvents = {
+	CONFIRM: "lit-confirm",
+	CANCEL: "lit-cancel",
+	COPY: "lit-copy",
+	TREE_TOGGLED: "lit-tree-toggled"
+};
+function dispatchLitEvent(target, type, detail) {
+	const event = new CustomEvent(type, {
+		bubbles: true,
+		composed: true,
+		detail
+	});
+	return target.dispatchEvent(event);
+}
+function addLitEventListener(target, type, listener, options) {
+	const handler = listener;
+	target.addEventListener(type, handler, options);
+	return () => target.removeEventListener(type, handler, options);
+}
+const dispatchLitConfirm = (target) => dispatchLitEvent(target, LitComponentEvents.CONFIRM);
+const dispatchLitCancel = (target, detail) => dispatchLitEvent(target, LitComponentEvents.CANCEL, detail);
+const dispatchLitCopy = (target, detail) => dispatchLitEvent(target, LitComponentEvents.COPY, detail);
+const dispatchLitTreeToggled = (target) => dispatchLitEvent(target, LitComponentEvents.TREE_TOGGLED);
+const addLitCancelListener = (target, listener, options) => addLitEventListener(target, LitComponentEvents.CANCEL, listener, options);
+
+//#endregion
+exports.addLitCancelListener = addLitCancelListener;
+exports.dispatchLitCancel = dispatchLitCancel;
+exports.dispatchLitConfirm = dispatchLitConfirm;
+exports.dispatchLitCopy = dispatchLitCopy;
+exports.dispatchLitTreeToggled = dispatchLitTreeToggled;
+//# sourceMappingURL=lit-events.js.map

package/dist/cjs/react/src/core/WebAuthnManager/LitComponents/lit-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lit-events.js","names":[],"sources":["../../../../../../../src/core/WebAuthnManager/LitComponents/lit-events.ts"],"sourcesContent":["// Shared helpers for Lit component custom events (local to WebAuthn components)\n\nexport const LitComponentEvents = {\n  CONFIRM: 'lit-confirm',\n  CANCEL: 'lit-cancel',\n  COPY: 'lit-copy',\n  TREE_TOGGLED: 'lit-tree-toggled',\n} as const;\n\nexport type LitComponentEvent = (typeof LitComponentEvents)[keyof typeof LitComponentEvents];\n\nexport interface LitComponentEventDetailMap {\n  [LitComponentEvents.CONFIRM]: void;\n  [LitComponentEvents.CANCEL]: { reason?: string } | undefined;\n  [LitComponentEvents.COPY]: { type: string; value: string };\n  [LitComponentEvents.TREE_TOGGLED]: void;\n}\n\nexport type LitConfirmDetail = LitComponentEventDetailMap[(typeof LitComponentEvents)['CONFIRM']];\nexport type LitCancelDetail = LitComponentEventDetailMap[(typeof LitComponentEvents)['CANCEL']];\nexport type LitCopyDetail = LitComponentEventDetailMap[(typeof LitComponentEvents)['COPY']];\nexport type LitTreeToggledDetail = LitComponentEventDetailMap[(typeof LitComponentEvents)['TREE_TOGGLED']];\n\nexport type LitComponentEventDetail<T extends LitComponentEvent> = LitComponentEventDetailMap[T];\n\nexport type LitComponentEventListener<T extends LitComponentEvent> = (event: CustomEvent<LitComponentEventDetail<T>>) => void;\n\nexport function dispatchLitEvent<T extends LitComponentEvent>(\n  target: EventTarget,\n  type: T,\n  detail?: LitComponentEventDetail<T>\n): boolean {\n  const event = new CustomEvent(type, {\n    bubbles: true,\n    composed: true,\n    detail: detail as LitComponentEventDetail<T>,\n  });\n  return target.dispatchEvent(event);\n}\n\nexport function addLitEventListener<T extends LitComponentEvent>(\n  target: EventTarget,\n  type: T,\n  listener: LitComponentEventListener<T>,\n  options?: boolean | AddEventListenerOptions\n): () => void {\n  const handler = listener as EventListener;\n  target.addEventListener(type, handler, options);\n  return () => target.removeEventListener(type, handler, options);\n}\n\nexport const dispatchLitConfirm = (target: EventTarget) =>\n  dispatchLitEvent(target, LitComponentEvents.CONFIRM);\n\nexport const dispatchLitCancel = (target: EventTarget, detail?: LitCancelDetail) =>\n  dispatchLitEvent(target, LitComponentEvents.CANCEL, detail);\n\nexport const dispatchLitCopy = (target: EventTarget, detail: LitCopyDetail) =>\n  dispatchLitEvent(target, LitComponentEvents.COPY, detail);\n\nexport const dispatchLitTreeToggled = (target: EventTarget) =>\n  dispatchLitEvent(target, LitComponentEvents.TREE_TOGGLED);\n\nexport const addLitCancelListener = (\n  target: EventTarget,\n  listener: LitComponentEventListener<(typeof LitComponentEvents)['CANCEL']>,\n  options?: boolean | AddEventListenerOptions\n) => addLitEventListener(target, LitComponentEvents.CANCEL, listener, options);\n"],"mappings":";;AAEA,MAAa,qBAAqB;CAChC,SAAS;CACT,QAAQ;CACR,MAAM;CACN,cAAc;;AAqBhB,SAAgB,iBACd,QACA,MACA,QACS;CACT,MAAM,QAAQ,IAAI,YAAY,MAAM;EAClC,SAAS;EACT,UAAU;EACF;;AAEV,QAAO,OAAO,cAAc;;AAG9B,SAAgB,oBACd,QACA,MACA,UACA,SACY;CACZ,MAAM,UAAU;AAChB,QAAO,iBAAiB,MAAM,SAAS;AACvC,cAAa,OAAO,oBAAoB,MAAM,SAAS;;AAGzD,MAAa,sBAAsB,WACjC,iBAAiB,QAAQ,mBAAmB;AAE9C,MAAa,qBAAqB,QAAqB,WACrD,iBAAiB,QAAQ,mBAAmB,QAAQ;AAEtD,MAAa,mBAAmB,QAAqB,WACnD,iBAAiB,QAAQ,mBAAmB,MAAM;AAEpD,MAAa,0BAA0B,WACrC,iBAAiB,QAAQ,mBAAmB;AAE9C,MAAa,wBACX,QACA,UACA,YACG,oBAAoB,QAAQ,mBAAmB,QAAQ,UAAU"}

package/dist/cjs/react/src/core/WebAuthnManager/LitComponents/tags.js

@@ -0,0 +1,35 @@
+
+//#region src/core/WebAuthnManager/LitComponents/tags.ts
+const W3A_TX_CONFIRMER_ID = "w3a-tx-confirmer";
+const W3A_MODAL_TX_CONFIRMER_ID = "w3a-modal-tx-confirmer";
+const W3A_DRAWER_TX_CONFIRMER_ID = "w3a-drawer-tx-confirmer";
+const W3A_TX_CONFIRM_CONTENT_ID = "w3a-tx-confirm-content";
+const W3A_DRAWER_ID = "w3a-drawer";
+const W3A_TX_TREE_ID = "w3a-tx-tree";
+const W3A_HALO_BORDER_ID = "w3a-halo-border";
+const W3A_PASSKEY_HALO_LOADING_ID = "w3a-passkey-halo-loading";
+const CONFIRM_UI_ELEMENT_SELECTORS = [
+	W3A_TX_CONFIRMER_ID,
+	W3A_MODAL_TX_CONFIRMER_ID,
+	W3A_DRAWER_TX_CONFIRMER_ID
+];
+const W3A_CONFIRM_PORTAL_ID = "w3a-confirm-portal";
+const W3A_EXPORT_VIEWER_IFRAME_ID = "w3a-export-viewer-iframe";
+const IFRAME_EXPORT_BOOTSTRAP_MODULE = "iframe-export-bootstrap.js";
+const EXPORT_VIEWER_BUNDLE = "export-private-key-viewer.js";
+
+//#endregion
+exports.CONFIRM_UI_ELEMENT_SELECTORS = CONFIRM_UI_ELEMENT_SELECTORS;
+exports.EXPORT_VIEWER_BUNDLE = EXPORT_VIEWER_BUNDLE;
+exports.IFRAME_EXPORT_BOOTSTRAP_MODULE = IFRAME_EXPORT_BOOTSTRAP_MODULE;
+exports.W3A_CONFIRM_PORTAL_ID = W3A_CONFIRM_PORTAL_ID;
+exports.W3A_DRAWER_ID = W3A_DRAWER_ID;
+exports.W3A_DRAWER_TX_CONFIRMER_ID = W3A_DRAWER_TX_CONFIRMER_ID;
+exports.W3A_EXPORT_VIEWER_IFRAME_ID = W3A_EXPORT_VIEWER_IFRAME_ID;
+exports.W3A_HALO_BORDER_ID = W3A_HALO_BORDER_ID;
+exports.W3A_MODAL_TX_CONFIRMER_ID = W3A_MODAL_TX_CONFIRMER_ID;
+exports.W3A_PASSKEY_HALO_LOADING_ID = W3A_PASSKEY_HALO_LOADING_ID;
+exports.W3A_TX_CONFIRMER_ID = W3A_TX_CONFIRMER_ID;
+exports.W3A_TX_CONFIRM_CONTENT_ID = W3A_TX_CONFIRM_CONTENT_ID;
+exports.W3A_TX_TREE_ID = W3A_TX_TREE_ID;
+//# sourceMappingURL=tags.js.map

package/dist/cjs/react/src/core/WebAuthnManager/LitComponents/tags.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tags.js","names":[],"sources":["../../../../../../../src/core/WebAuthnManager/LitComponents/tags.ts"],"sourcesContent":["// Lit component tag names\n// These are rendered as web components:\n// e.g. <w3a-modal-tx-confirmer></w3a-modal-tx-confirmer>, <w3a-tx-tree>, etc;\n\n// Transaction confirmer element tags (host-rendered)\n// Canonical tag names use the \"-tx-confirmer\" suffix for consistency\nexport const W3A_TX_CONFIRMER_ID = 'w3a-tx-confirmer';\nexport const W3A_MODAL_TX_CONFIRMER_ID = 'w3a-modal-tx-confirmer';\nexport const W3A_DRAWER_TX_CONFIRMER_ID = 'w3a-drawer-tx-confirmer';\nexport const W3A_TX_CONFIRM_CONTENT_ID = 'w3a-tx-confirm-content';\n\n// Shared building blocks\nexport const W3A_DRAWER_ID = 'w3a-drawer';\nexport const W3A_TX_TREE_ID = 'w3a-tx-tree';\nexport const W3A_HALO_BORDER_ID = 'w3a-halo-border';\nexport const W3A_PASSKEY_HALO_LOADING_ID = 'w3a-passkey-halo-loading';\n\n// Unified list of confirmer hosts the wallet may need to target for lifecycle events\nexport const CONFIRM_UI_ELEMENT_SELECTORS = [\n  W3A_TX_CONFIRMER_ID,\n  W3A_MODAL_TX_CONFIRMER_ID,\n  W3A_DRAWER_TX_CONFIRMER_ID,\n] as const;\n\n// Dedicated portal container to enforce a single confirmer instance\nexport const W3A_CONFIRM_PORTAL_ID = 'w3a-confirm-portal';\n\n// Export viewer iframe host + bootstrap + viewer bundle\nexport const W3A_EXPORT_VIEWER_IFRAME_ID = 'w3a-export-viewer-iframe';\nexport const W3A_EXPORT_KEY_VIEWER_ID = 'w3a-export-key-viewer';\nexport const IFRAME_EXPORT_BOOTSTRAP_MODULE = 'iframe-export-bootstrap.js';\nexport const EXPORT_VIEWER_BUNDLE = 'export-private-key-viewer.js';\nexport const EXPORT_DRAWER_BUNDLE = 'export-private-key-drawer.js';\n"],"mappings":";;AAMA,MAAa,sBAAsB;AACnC,MAAa,4BAA4B;AACzC,MAAa,6BAA6B;AAC1C,MAAa,4BAA4B;AAGzC,MAAa,gBAAgB;AAC7B,MAAa,iBAAiB;AAC9B,MAAa,qBAAqB;AAClC,MAAa,8BAA8B;AAG3C,MAAa,+BAA+B;CAC1C;CACA;CACA;;AAIF,MAAa,wBAAwB;AAGrC,MAAa,8BAA8B;AAE3C,MAAa,iCAAiC;AAC9C,MAAa,uBAAuB"}

package/dist/cjs/react/src/core/WebAuthnManager/SignerWorkerManager/getDeviceNumber.js

@@ -0,0 +1,28 @@
+const require_accountIds = require('../../types/accountIds.js');
+
+//#region src/core/WebAuthnManager/SignerWorkerManager/getDeviceNumber.ts
+function parseDeviceNumber(value, options = {}) {
+	const deviceNumber = Number(value);
+	const min = options.min ?? 1;
+	if (!Number.isSafeInteger(deviceNumber) || deviceNumber < min) return null;
+	return deviceNumber;
+}
+/**
+* Return the deviceNumber for the last logged-in user for the given account.
+* This uses the app-state "last user" pointer only; if it does not match the
+* requested account, an error is thrown instead of silently falling back.
+*/
+async function getLastLoggedInDeviceNumber(nearAccountId, clientDB) {
+	const accountId = require_accountIds.toAccountId(nearAccountId);
+	const last = await clientDB.getLastUser();
+	if (last && last.nearAccountId === accountId) {
+		const deviceNumber = parseDeviceNumber(last.deviceNumber, { min: 1 });
+		if (deviceNumber !== null) return deviceNumber;
+	}
+	throw new Error(`No last user session for account ${accountId}`);
+}
+
+//#endregion
+exports.getLastLoggedInDeviceNumber = getLastLoggedInDeviceNumber;
+exports.parseDeviceNumber = parseDeviceNumber;
+//# sourceMappingURL=getDeviceNumber.js.map

package/dist/cjs/react/src/core/WebAuthnManager/SignerWorkerManager/getDeviceNumber.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getDeviceNumber.js","names":["toAccountId"],"sources":["../../../../../../../src/core/WebAuthnManager/SignerWorkerManager/getDeviceNumber.ts"],"sourcesContent":["import type { PasskeyClientDBManager } from '@/core/IndexedDBManager';\nimport { toAccountId, type AccountId } from '../../types/accountIds';\n\nexport function parseDeviceNumber(\n  value: unknown,\n  options: { min?: number } = {}\n): number | null {\n  const deviceNumber = Number(value);\n  const min = options.min ?? 1;\n  if (!Number.isSafeInteger(deviceNumber) || deviceNumber < min) {\n    return null;\n  }\n  return deviceNumber;\n}\n\n/**\n * Return the deviceNumber for the last logged-in user for the given account.\n * This uses the app-state \"last user\" pointer only; if it does not match the\n * requested account, an error is thrown instead of silently falling back.\n */\nexport async function getLastLoggedInDeviceNumber(\n  nearAccountId: AccountId | string,\n  clientDB: PasskeyClientDBManager\n): Promise<number> {\n  const accountId = toAccountId(nearAccountId);\n  const last = await clientDB.getLastUser();\n  if (last && last.nearAccountId === accountId) {\n    const deviceNumber = parseDeviceNumber(last.deviceNumber, { min: 1 });\n    if (deviceNumber !== null) {\n      return deviceNumber;\n    }\n  }\n  throw new Error(`No last user session for account ${accountId}`);\n}\n"],"mappings":";;;AAGA,SAAgB,kBACd,OACA,UAA4B,IACb;CACf,MAAM,eAAe,OAAO;CAC5B,MAAM,MAAM,QAAQ,OAAO;AAC3B,KAAI,CAAC,OAAO,cAAc,iBAAiB,eAAe,IACxD,QAAO;AAET,QAAO;;;;;;;AAQT,eAAsB,4BACpB,eACA,UACiB;CACjB,MAAM,YAAYA,+BAAY;CAC9B,MAAM,OAAO,MAAM,SAAS;AAC5B,KAAI,QAAQ,KAAK,kBAAkB,WAAW;EAC5C,MAAM,eAAe,kBAAkB,KAAK,cAAc,EAAE,KAAK;AACjE,MAAI,iBAAiB,KACnB,QAAO;;AAGX,OAAM,IAAI,MAAM,oCAAoC"}

package/dist/cjs/react/src/core/WebAuthnManager/SignerWorkerManager/handlers/checkCanRegisterUser.js

@@ -0,0 +1,67 @@
+const require_validation = require('../../../../utils/validation.js');
+const require_errors = require('../../../../utils/errors.js');
+const require_defaultConfigs = require('../../../defaultConfigs.js');
+const require_credentialsHelpers = require('../../credentialsHelpers.js');
+const require_sdkSentEvents = require('../../../types/sdkSentEvents.js');
+const require_rpcCalls = require('../../../rpcCalls.js');
+
+//#region src/core/WebAuthnManager/SignerWorkerManager/handlers/checkCanRegisterUser.ts
+async function checkCanRegisterUser({ ctx, vrfChallenge, credential, contractId, nearRpcUrl, authenticatorOptions, onEvent }) {
+	try {
+		const isSerialized = (cred) => {
+			if (!require_validation.isObject(cred)) return false;
+			const resp = cred.response;
+			if (!require_validation.isObject(resp)) return false;
+			return require_validation.isString(resp.clientDataJSON) && require_validation.isString(resp.attestationObject);
+		};
+		const serializedCredential = isSerialized(credential) ? credential : require_credentialsHelpers.serializeRegistrationCredentialWithPRF({ credential });
+		const resolvedContractId = contractId || require_defaultConfigs.PASSKEY_MANAGER_DEFAULT_CONFIGS.contractId;
+		onEvent?.({
+			step: 3,
+			phase: require_sdkSentEvents.RegistrationPhase.STEP_3_CONTRACT_PRE_CHECK,
+			status: require_sdkSentEvents.RegistrationStatus.PROGRESS,
+			message: "Running webauthn contract registration checks..."
+		});
+		const strippedCredential = require_credentialsHelpers.removePrfOutputGuard(serializedCredential);
+		const result = await require_rpcCalls.checkCanRegisterUserContractCall({
+			nearClient: ctx.nearClient,
+			contractId: resolvedContractId,
+			vrfChallenge,
+			credential: strippedCredential,
+			authenticatorOptions
+		});
+		if (!result.success) throw new Error(result.error || "Registration pre-check RPC failed");
+		const wasmResult = {
+			verified: result.verified,
+			registrationInfo: void 0,
+			logs: result.logs,
+			error: result.error
+		};
+		onEvent?.({
+			step: 3,
+			phase: require_sdkSentEvents.RegistrationPhase.STEP_3_CONTRACT_PRE_CHECK,
+			status: result.verified ? require_sdkSentEvents.RegistrationStatus.SUCCESS : require_sdkSentEvents.RegistrationStatus.ERROR,
+			message: result.verified ? "Registration pre-check succeeded" : result.error || "Registration pre-check failed",
+			...result.verified ? {} : { error: result.error || "Registration pre-check failed" }
+		});
+		return {
+			success: true,
+			verified: wasmResult.verified,
+			registrationInfo: wasmResult.registrationInfo,
+			logs: wasmResult.logs,
+			error: wasmResult.error
+		};
+	} catch (error) {
+		console.error("checkCanRegisterUser failed:", error);
+		return {
+			success: false,
+			verified: false,
+			error: require_errors.errorMessage(error) || "Unknown error occurred",
+			logs: []
+		};
+	}
+}
+
+//#endregion
+exports.checkCanRegisterUser = checkCanRegisterUser;
+//# sourceMappingURL=checkCanRegisterUser.js.map

package/dist/cjs/react/src/core/WebAuthnManager/SignerWorkerManager/handlers/checkCanRegisterUser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkCanRegisterUser.js","names":["isObject","isString","serializedCredential: WebAuthnRegistrationCredential","serializeRegistrationCredentialWithPRF","PASSKEY_MANAGER_DEFAULT_CONFIGS","RegistrationPhase","RegistrationStatus","removePrfOutputGuard","result: CheckCanRegisterUserResult","checkCanRegisterUserContractCall","error: unknown","errorMessage"],"sources":["../../../../../../../../src/core/WebAuthnManager/SignerWorkerManager/handlers/checkCanRegisterUser.ts"],"sourcesContent":["\nimport { PASSKEY_MANAGER_DEFAULT_CONFIGS } from \"../../../defaultConfigs\";\nimport type { CheckCanRegisterUserResult } from '../../../rpcCalls';\nimport { checkCanRegisterUserContractCall } from '../../../rpcCalls';\nimport { serializeRegistrationCredentialWithPRF, removePrfOutputGuard } from '../../credentialsHelpers';\nimport { VRFChallenge } from '../../../types/vrf-worker';\nimport { RegistrationPhase, RegistrationStatus, type RegistrationEventStep3 } from '../../../types/sdkSentEvents';\nimport type { AuthenticatorOptions } from '../../../types/authenticatorOptions';\nimport { SignerWorkerManagerContext } from '..';\nimport type { WebAuthnRegistrationCredential } from '../../../types/webauthn';\nimport { errorMessage } from '@/utils/errors';\nimport { isObject, isString } from '@/utils/validation';\n\n\nexport async function checkCanRegisterUser({\n  ctx,\n  vrfChallenge,\n  credential,\n  contractId,\n  nearRpcUrl,\n  authenticatorOptions,\n  onEvent,\n}: {\n  ctx: SignerWorkerManagerContext,\n  vrfChallenge: VRFChallenge,\n  credential: WebAuthnRegistrationCredential,\n  contractId: string;\n  nearRpcUrl: string;\n  authenticatorOptions?: AuthenticatorOptions; // Authenticator options for registration check\n  onEvent?: (update: RegistrationEventStep3) => void;\n}): Promise<{\n  success: boolean;\n  verified?: boolean;\n  registrationInfo?: {\n    credentialId: Uint8Array;\n    credentialPublicKey: Uint8Array;\n    userId: string;\n    vrfPublicKey: Uint8Array | undefined;\n  };\n  logs?: string[];\n  signedTransactionBorsh?: number[];\n  error?: string;\n}> {\n  try {\n    // Accept either a real PublicKeyCredential or an already-serialized credential\n    const isSerialized = (cred: unknown): cred is WebAuthnRegistrationCredential => {\n      if (!isObject(cred)) return false;\n      const resp = (cred as { response?: unknown }).response;\n      if (!isObject(resp)) return false;\n      return isString((resp as { clientDataJSON?: unknown }).clientDataJSON)\n        && isString((resp as { attestationObject?: unknown }).attestationObject);\n    };\n\n    const serializedCredential: WebAuthnRegistrationCredential = isSerialized(credential)\n      ? credential\n      : serializeRegistrationCredentialWithPRF({ credential: credential });\n\n    // Ensure required fields are present; avoid undefined which gets dropped by JSON.stringify in the worker\n    const resolvedContractId = contractId || PASSKEY_MANAGER_DEFAULT_CONFIGS.contractId;\n\n    onEvent?.({\n      step: 3,\n      phase: RegistrationPhase.STEP_3_CONTRACT_PRE_CHECK,\n      status: RegistrationStatus.PROGRESS,\n      message: 'Running webauthn contract registration checks...',\n    });\n\n    // PRF outputs must never be sent over the network. Strip them before\n    // calling the contract while preserving the rest of the credential shape.\n    const strippedCredential = removePrfOutputGuard<WebAuthnRegistrationCredential>(serializedCredential);\n\n    const result: CheckCanRegisterUserResult = await checkCanRegisterUserContractCall({\n      nearClient: ctx.nearClient,\n      contractId: resolvedContractId,\n      vrfChallenge,\n      credential: strippedCredential,\n      authenticatorOptions,\n    });\n\n    if (!result.success) {\n      throw new Error(result.error || 'Registration pre-check RPC failed');\n    }\n\n    const wasmResult = {\n      verified: result.verified,\n      registrationInfo: undefined,\n      logs: result.logs,\n      error: result.error,\n    };\n\n    onEvent?.({\n      step: 3,\n      phase: RegistrationPhase.STEP_3_CONTRACT_PRE_CHECK,\n      status: result.verified ? RegistrationStatus.SUCCESS : RegistrationStatus.ERROR,\n      message: result.verified ? 'Registration pre-check succeeded' : (result.error || 'Registration pre-check failed'),\n      ...(result.verified ? {} : { error: result.error || 'Registration pre-check failed' }),\n    });\n\n    return {\n      success: true,\n      verified: wasmResult.verified,\n      registrationInfo: wasmResult.registrationInfo,\n      logs: wasmResult.logs,\n      error: wasmResult.error,\n    };\n\n  } catch (error: unknown) {\n    // Preserve the detailed error message instead of converting to generic error\n    console.error('checkCanRegisterUser failed:', error);\n    return {\n      success: false,\n      verified: false,\n      error: errorMessage(error) || 'Unknown error occurred',\n      logs: [],\n    };\n  }\n}\n"],"mappings":";;;;;;;;AAcA,eAAsB,qBAAqB,EACzC,KACA,cACA,YACA,YACA,YACA,sBACA,WAqBC;AACD,KAAI;EAEF,MAAM,gBAAgB,SAA0D;AAC9E,OAAI,CAACA,4BAAS,MAAO,QAAO;GAC5B,MAAM,OAAQ,KAAgC;AAC9C,OAAI,CAACA,4BAAS,MAAO,QAAO;AAC5B,UAAOC,4BAAU,KAAsC,mBAClDA,4BAAU,KAAyC;;EAG1D,MAAMC,uBAAuD,aAAa,cACtE,aACAC,kEAAuC,EAAc;EAGzD,MAAM,qBAAqB,cAAcC,uDAAgC;AAEzE,YAAU;GACR,MAAM;GACN,OAAOC,wCAAkB;GACzB,QAAQC,yCAAmB;GAC3B,SAAS;;EAKX,MAAM,qBAAqBC,gDAAqD;EAEhF,MAAMC,SAAqC,MAAMC,kDAAiC;GAChF,YAAY,IAAI;GAChB,YAAY;GACZ;GACA,YAAY;GACZ;;AAGF,MAAI,CAAC,OAAO,QACV,OAAM,IAAI,MAAM,OAAO,SAAS;EAGlC,MAAM,aAAa;GACjB,UAAU,OAAO;GACjB,kBAAkB;GAClB,MAAM,OAAO;GACb,OAAO,OAAO;;AAGhB,YAAU;GACR,MAAM;GACN,OAAOJ,wCAAkB;GACzB,QAAQ,OAAO,WAAWC,yCAAmB,UAAUA,yCAAmB;GAC1E,SAAS,OAAO,WAAW,qCAAsC,OAAO,SAAS;GACjF,GAAI,OAAO,WAAW,KAAK,EAAE,OAAO,OAAO,SAAS;;AAGtD,SAAO;GACL,SAAS;GACT,UAAU,WAAW;GACrB,kBAAkB,WAAW;GAC7B,MAAM,WAAW;GACjB,OAAO,WAAW;;UAGbI,OAAgB;AAEvB,UAAQ,MAAM,gCAAgC;AAC9C,SAAO;GACL,SAAS;GACT,UAAU;GACV,OAAOC,4BAAa,UAAU;GAC9B,MAAM"}