* Show popup for element.

* Show popup with auth check. * @param inputElement - The input element to show the popup for. * @param container - The container el

* Sign data with the given private key, returning the signature in the encoding * the RP expects: DER-encoded for ES256, raw PKCS#1 v1.5 for RS256.

* Move an item to trash (set DeletedAt timestamp). * @param itemId - The ID of the item to trash * @returns Number of rows affected

* Update an existing item with its fields and related entities. * @param item - The item to update * @param originalAttachmentIds - IDs of attac

* Validate a click event (simplified for content scripts)

* Add the 2FA section via the "+" add-field menu and half-fill the TOTP add * form (name + secret) without saving the code.

* Add the Notes section via the "+" add-field menu and type a draft into it.

* Convert ArrayBuffer to base64 string (standard base64, not URL-safe)

* Combine random salt with extension ID pepper * * Creates a composite salt that includes both: * 1. Random salt (stored locally, prevents rainbow

* Attempt to unlock the vault using available authentication methods. * Priority: Biometric -> PIN -> Manual unlock * If biometric fails/is canc

* Attempt PIN unlock. * @returns Promise<UnlockResult> indicating success/failure

* Authenticate user for a specific action (e.g., mobile unlock confirmation). * Uses the native authenticateUser which automatically detects and us

* Convert base64 string to ArrayBuffer

* Convert base64url string to byte array * Handles both base64url (URL-safe) and regular base64 formats * Strips trailing '=' padding if present

* Convert base64url to GUID for database lookup

* Build a CapturedLogin object from extracted values.

* Convert byte array to base64url string

* Encode an integer as CBOR (major type 0 for non-negative, 1 for negative). * Used for COSE algorithm identifiers, e.g. -7 (ES256) and -257 (RS256

* Normalize challenge to base64url string. * @param challenge - Challenge from WebAuthn request * @returns Base64url encoded challenge

* Cleans up resources

* Cleanup TOTP update interval

* Create the HTML for the "Add URL" prompt.

* Create SVG path for a pie slice starting from top, going counter-clockwise. * @param cx - Center X * @param cy - Center Y * @param r - Radius *

* Create the HTML for a prompt using the generic template. * @param config - The prompt configuration with title, content, and buttons. * @returns T

* Create the HTML for the save prompt.

* Build a small history-arrow SVG badge indicating this item was the most recently * autofilled on this site, so the user can quickly spot it among m

* Build a single segment button for the passkey/credentials pill nav shown at the top of the * autofill popup when conditional passkeys are offered (

* Convert a date string to epoch milliseconds. * @param dateString - Date string in ISO format * @returns Epoch milliseconds

* Delete a passkey by its ID (soft delete). * @param passkeyId - The ID of the passkey to delete * @returns The number of rows updated

* Encode a positive big integer as DER INTEGER.

* Derive encryption key from PIN using Argon2id * * Uses Argon2id with high memory cost (64 MB) to make brute-force attacks * significantly more ex

* Derives an SRP verifier from a private key using Rust WASM. * * @param privateKey - The SRP private key * @returns The SRP verifier (upperc

* Detect MIME type from file signature (magic numbers)

* Emit login with debouncing to prevent duplicates.

* Enable an authentication method by adding it to the current auth methods. * This handles getting current methods, adding the new one, and saving.

* Enable E2E test mode which sets the shadow DOM to 'open' mode for testability. * This must be called before navigating to pages where you want to

* Escape string for Kotlin multiline string literal (trimIndent)

* Escape string for Swift multiline string literal

* Execute an INSERT, UPDATE, or DELETE query

* Export a SQLite database to base64 string. * @param db - The database to export * @returns The base64 encoded database

* Extract credentials from a form using FormDetector.

* Extract the root domain from a URL for recently-selected item scoping. * Uses root domain (e.g. `example.com` for both `accounts.example.com` and `

* Extract and normalize source domain from a URL string. * This matches the server-side migration logic for consistent deduplication. * Uses low

* Extract and normalize source domain from a URL string. * Uses lowercase and removes www. prefix for case-insensitive matching. * @param urlStr

* Fill the notes field. * If the notes section is not visible, opens the add field menu and adds it first.

* Fill the password field with the given password using character-by-character typing. * * @param field The password field to fill. * @param

* Filter items by search term. * Splits search into words and matches items where ALL words appear in searchable fields. * Word order doesn't matter

* Filter items by URL matching. * * @param items - The items to filter * @param currentUrl - The current URL of the page * @param pageTitle - The

* Find the actual input element, which could be in shadow DOM or a child element. * This ensures we only fill one element, avoiding duplicate fills

* Find the email field in the form.

* Generate a random identity.

* Generates a cryptographically secure SRP salt using Rust WASM. * * @returns A random salt string (uppercase hex)

* Generate TOTP code from secret key

* Generate a username based on an identity.

* Fetch all unique email addresses from field values. * @returns Array of email addresses

* Get the API URL from settings.

* Get the currently configured API URL from native storage.

* Get attachments for an item. * @param itemId - The ID of the item * @returns Array of attachments for the item

* Get attachments for an item. * @param itemId - The ID of the item * @returns Array of attachments for the item

* Get the auto-lock timeout in seconds. * @returns Timeout in seconds. Defaults to 0 (never).

* Extract the base domain from a hostname (e.g., "login.example.com" -> "example.com").

* Fetch an item by its email address (case-insensitive). * @param email - The email address to search for * @returns Item object or null if not

* Fetch a single item by ID with its fields and tags. * @param itemId - The ID of the item to fetch * @returns Item object or null if not found

* Get all passkeys for a specific item. * @param itemId - The item ID * @returns Array of passkey objects

* Get the credentials sort order preference. * Uses the same key the other clients use for cross-platform sync. * @returns The sort order prefer

* Get the default identity age range from the database. * @returns The age range preference or 'random' if not set

* Get the default identity age range from the database.

* Get the default identity gender preference from the database.