* Computes a SHA-256 hash of the public key and returns the first 16 characters.

* Computes a SHA-256 hash of a string and returns the first 16 characters of the hex digest. * Used for verifying public key integrity in mobile lo

* Check if a form contains a likely username or email field. * Skips visibility checks when user clicked a field to support transition animations.

* Check if a form contains a password field.

* Check if a form contains a TOTP/2FA field.

* Convert all anchor tags to open in a new tab. * @param html HTML input. * @returns HTML with all anchor tags converted to open in a new tab wh

* Convert logo data from various formats to Uint8Array. * @param logo The logo data in various possible formats * @returns Uint8Array of logo da

* Convert logo data from various formats to Uint8Array. * @param logo The logo data in various possible formats * @returns Uint8Array of logo da

* Creates an email with the supplied symmetric key encrypted by the RSA key pair.

* Creates an empty vault database with the latest schema. * * @returns Base64-encoded SQLite database

* Create item list content for popup * * @param items - The items to display. * @param input - The input element that triggered the popup. Required

* Create offscreen document if it doesn't exist.

* Build small passkey badge icon shown next to a service name to mark that the entry is (or has) a passkey.

* Build passkey side of the autofill popup: a short hint line that makes the passkey view * recognisably different from the credential view, the scr

* Create a placeholder element for visual feedback. * @param {number} height - Height of the placeholder * @returns {HTMLElement} The placeh

* Create a TOTP item element. * If secret is provided, shows live code with pie chart countdown. * If secret is undefined, shows static "000 000" pl

* Create TOTP autofill popup showing items with 2FA codes. * Matches the styling of the regular autofill popup.

* Decrypts an attachment and returns the decrypted content as Uint8Array (raw bytes).

* Decrypts an individual email based on the provided public/private key pairs.

* Decrypts an individual email based on the provided public/private key pairs.

* Decrypts data using RSA-OAEP asymmetric encryption with a JWK private key

* Delete a folder (soft delete). * Handles child folders and items: * - Items in this folder only are moved to the parent folder (or root if no

* Delete a specific field history record. * @param historyId - The ID of the history record to delete * @returns Number of rows affected

* Delete a specific field history record. * @param historyId - The ID of the history record to delete * @returns Number of rows affected

* Delete a folder and all items within it (soft delete both folder and items). * Recursively handles child folders: * - All items in this folder

* Delete a folder and all items within it (soft delete both folder and items). * Recursively handles child folders: * - All items in this folder

* Derives a key from password using Argon2Id (Node.js version). * * Note: This uses the native argon2 module for Node.js, which is different * from

* Derive the SRP verifier for a (new) password: the value the server stores to authenticate * future logins. Used when registering or changing a pa

* Detect potential decoy forms (multiple forms with similar fields).

* Create a form entry.

* Detect MIME type from file signature (magic numbers). * @param bytes - Binary data to analyze * @returns MIME type string

* Detect MIME type from base64 string by decoding first few bytes

* Detect page-wide opacity tricks on BODY/HTML elements

* Disable offline mode by restoring a valid API URL.

* Issue GET request to the API expecting a file download and return it as raw bytes.

* Issue GET request to the API expecting a file download and return it as raw bytes.

* Convert raw ECDSA signature (r|s, 64 bytes) to DER SEQUENCE.

* Emit an alert event to all listeners.

* Emit captured login to all registered callbacks.

* Helper to enable the login save feature.

* Enable offline mode by setting an invalid API URL.

* Encrypts bytes in the same IV+ciphertext format used by attachment decryption.

* Ensure a field definition exists for a custom field.

* Ensure a field definition exists for a custom field. * Creates the definition if it doesn't exist. * @returns The field definition ID (which i

* Ensure a field definition exists and is up-to-date.

* Ensure a field definition exists and is up-to-date. * Creates the definition if it doesn't exist, or updates it if it does. * @returns The fie

* Execute the side effect for a `__debug__/<debugAction>` URL. * * `debugSegments` is the path segments AFTER `__debug__/`, e.g. for * `__debug__/s

* Execute a SELECT query. * @param query - SQL query string * @param params - Query parameters * @returns Array of result objects

* Execute a SELECT query

* Extract ApplicableToTypes object from field body

* Extract an enum value from a field body (e.g., FieldCategories.Login -> Login)

* Extract the page favicon URL. * Uses the shared FaviconExtractor utility for consistent extraction across the extension.

* Extract the first valid URL from a field value (which can be string or string[]). * @param urlValue The URL field value * @returns The first v

* Extract a number value from a field body

* Read the PRF eval inputs from a request, if it asked for the PRF extension.

* Extract and normalize source domain from a URL string. * Uses lowercase and removes www. prefix for case-insensitive matching. * @param urlStr

* Extract a string value from a field body

* Fetch and attach favicon to an item if needed. * This is a convenience method that combines URL extraction, deduplication, and fetching. * If

* Fetch favicon for a URL from the server API. * Includes deduplication check and timeout handling. * @param urlString The URL to fetch favicon

* Fetch a favicon from a URL and return it as a Uint8Array. * Returns undefined if the fetch fails or returns an invalid response.

* Fetch with retry for more robust WASM loading. * @param {string} url - URL to fetch. * @param {number} maxRetries - Maximum retry attempts. * @pa

* Convert field key to C# property name (e.g., 'login.username' -> 'LoginUsername')

* Fill the basic fields of the form. * @param credential The credential to fill the form with. * @param securityResults Security validation resu

* Fill the birthdate fields of the form. * @param credential The credential to fill the form with.