* Handle return URL navigation (from reinitialize flow).

* Handle popup search input - searches entire vault when user types. * When empty, shows the initially URL-filtered items. * When user types, search

* Handle TOTP code updates.

* Validate a request for the passkeys stored at an rpId against the sender's trusted host, then * return the matching passkeys for the inline conditi

* Validate a WebAuthn create request against the sender's trusted origin, then forward it to the * passkey create flow. Falls back when the sender is

* Validate a WebAuthn get request against the sender's trusted origin, then forward it to the * passkey get flow. Falls back when the sender is untru

* Validate an inline passkey assertion request against the sender's trusted origin, then sign. * The trusted origin is embedded in the signed client

* Check if a logo exists for the given source domain. * @param source The normalized source domain (e.g., 'github.com') * @returns True if a log

* Check whether the form context surrounding an input clearly indicates a two-factor * challenge. Walks up a bounded number of ancestors collecting

* Initialize the login detector to capture form submissions. * When a login is detected that's not in the vault, we can offer to save it.

* Initiates a mobile login request and returns the QR code data * @returns Object containing requestId and publicKeyHash for QR code generation

* Initiates the login process with the server

* Insert attachments for a new item.

* Insert field values for a new item. * Also creates history records for fields with EnableHistory=true.

* Insert field values for an item. * Also creates history records for fields with EnableHistory=true.

* Insert TOTP codes for a new item.

* Check if biometric unlock is actually available and functional. * This performs comprehensive validation: * - Device has biometric hardware

* Check if the form context indicates this is an email verification form. * Email verification forms should not be treated as TOTP/2FA forms. *

* Check if an input field is likely a fake/honeypot field used to prevent autofill. * These fields are intentionally hidden from users but present

* Check if the login already exists in the vault. * @param domain - The domain of the login. * @param username - The username of the login. * @retu

* Check if page is ready for WebAuthn interactions. * Safari and other browsers can trigger WebAuthn requests during URL autocomplete * or page pref

* Check if the current server is self-hosted.

* Checks if a given server version is supported * @param serverVersion The version to check * @returns boolean indicating if the version is supp

* Check if an element is a submit button.

* WebCrypto key generation parameters for a COSE algorithm.

* WebCrypto key import parameters for a COSE algorithm.