@account-kit/signer 4.17.0 → 4.18.0-alpha.3

package/dist/esm/base.d.ts

@@ -416,6 +416,7 @@ export declare abstract class BaseAlchemySigner<TClient extends BaseSignerClient
     private authenticateWithEmail;
     private authenticateWithPasskey;
     private authenticateWithOauth;
+    private authenticateWithJwt;
     private authenticateWithOtp;
     private handleOauthReturn;
     private getExpirationSeconds;

package/dist/esm/base.js

@@ -172,6 +172,8 @@ export class BaseAlchemySigner {
                             return this.handleOauthReturn(params);
                         case "otp":
                             return this.authenticateWithOtp(params);
+                        case "custom-jwt":
+                            return this.authenticateWithJwt(params);
                         default:
                             assertNever(type, `Unknown auth type: ${type}`);
                     }
@@ -221,6 +223,16 @@ export class BaseAlchemySigner {
                         });
                         return;
                     }
+                    case "custom-jwt": {
+                        SignerLogger.trackEvent({
+                            name: "signer_authnticate",
+                            data: {
+                                authType: "custom-jwt",
+                                provider: params.authProviderId,
+                            },
+                        });
+                        return;
+                    }
                     case "oauth":
                         SignerLogger.trackEvent({
                             name: "signer_authnticate",
@@ -792,6 +804,25 @@ export class BaseAlchemySigner {
                 }
             }
         });
+        Object.defineProperty(this, "authenticateWithJwt", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: async (args) => {
+                const { credentialBundle, orgId, isSignUp } = await this.inner.submitJwt({
+                    jwt: args.jwt,
+                    authProvider: args.authProviderId,
+                });
+                const user = await this.inner.completeAuthWithBundle({
+                    bundle: credentialBundle,
+                    orgId: orgId,
+                    connectedEventName: "connectedJwt",
+                    authenticatingType: "custom-jwt",
+                });
+                this.emitNewUserEvent(isSignUp);
+                return user;
+            }
+        });
         Object.defineProperty(this, "authenticateWithOtp", {
             enumerable: true,
             configurable: true,
@@ -895,6 +926,8 @@ export class BaseAlchemySigner {
                             case "otp":
                             case "otpVerify":
                                 return AlchemySignerStatus.AWAITING_OTP_AUTH;
+                            case "custom-jwt":
+                                return AlchemySignerStatus.AUTHENTICATING_JWT;
                             default:
                                 assertNever(type, "unhandled authenticating type");
                         }

package/dist/esm/base.js.map

@@ -1 +1 @@
-{"version":3,"file":"base.js","sourceRoot":"","sources":["../../src/base.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAkC,MAAM,cAAc,CAAC;AACzE,OAAO,EACL,WAAW,EACX,aAAa,EACb,SAAS,EACT,oBAAoB,GAWrB,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAsB,MAAM,mBAAmB,CAAC;AAE1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAG9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EACL,cAAc,GAEf,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EACL,mBAAmB,GAIpB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAmCxD;;;GAGG;AACH,MAAM,OAAgB,iBAAiB;IASrC;;;;;;;;;OASG;IACH,YAAY,EACV,MAAM,EACN,aAAa,EACb,YAAY,GACqB;QApBnC;;;;mBAAqD,gBAAgB;WAAC;QACtE;;;;;WAAe;QACP;;;;;WAA+B;QAC/B;;;;;WAAqB;QACrB;;;;;WAA8B;QA0CtC;;;;;;WAMG;QACH;;;;mBAAK,CACH,KAAQ,EACR,QAAgC,EAChC,EAAE;gBACF,+FAA+F;gBAC/F,gGAAgG;gBAChG,0GAA0G;gBAC1G,QAAQ,KAAK,EAAE,CAAC;oBACd,KAAK,WAAW;wBACd,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CACzB,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,EACtB,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,KAAK,mBAAmB,CAAC,SAAS;4BACvC,QAA6C,CAC5C,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAK,CAC5B,EACH,EAAE,eAAe,EAAE,IAAI,EAAE,CAC1B,CAAC;oBACJ,KAAK,cAAc;wBACjB,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CACzB,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,EACtB,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,KAAK,mBAAmB,CAAC,YAAY;4BAC1C,QAAgD,EAAE,EACrD,EAAE,eAAe,EAAE,IAAI,EAAE,CAC1B,CAAC;oBACJ,KAAK,eAAe;wBAClB,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CACzB,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,EACtB,QAAgD,EAChD,EAAE,eAAe,EAAE,IAAI,EAAE,CAC1B,CAAC;oBACJ,KAAK,cAAc;wBACjB,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CACzB,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,EACpB,CAAC,KAAK,EAAE,EAAE,CACP,QAAgD,CAC/C,KAAK,IAAI,SAAS,CACnB,EACH,EAAE,eAAe,EAAE,IAAI,EAAE,CAC1B,CAAC;oBACJ,KAAK,eAAe;wBAClB,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CACzB,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,SAAS,EAC5B,CAAC,SAAS,EAAE,EAAE;4BACZ,IAAI,SAAS;gCAAG,QAAiD,EAAE,CAAC;wBACtE,CAAC,EACD,EAAE,eAAe,EAAE,IAAI,EAAE,CAC1B,CAAC;oBACJ;wBACE,WAAW,CAAC,KAAK,EAAE,sBAAsB,KAAK,EAAE,CAAC,CAAC;gBACtD,CAAC;YACH,CAAC;WAAC;QAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA4BG;QACH;;;;mBAAoB,GAAyB,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;WAAC;QAEvE;;;;;;;;;;;;;;;;;;;;;;;;;;WA0BG;QACH;;;;mBAAsD,YAAY,CAAC,QAAQ,CACzE,gCAAgC,EAChC,KAAK,EAAE,MAAM,EAAE,EAAE;gBACf,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;gBACxB,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE;oBACnB,QAAQ,IAAI,EAAE,CAAC;wBACb,KAAK,OAAO;4BACV,OAAO,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;wBAC5C,KAAK,SAAS;4BACZ,OAAO,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;wBAC9C,KAAK,OAAO;4BACV,OAAO,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;wBAC5C,KAAK,aAAa;4BAChB,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;wBACxC,KAAK,KAAK;4BACR,OAAO,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;wBAC1C;4BACE,WAAW,CAAC,IAAI,EAAE,sBAAsB,IAAI,EAAE,CAAC,CAAC;oBACpD,CAAC;gBACH,CAAC,CAAC,EAAE,CAAC;gBAEL,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;gBAEnC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;oBAC5B;;;;;uBAKG;oBACH,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;wBAClB,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC;wBACzB,GAAG,CAAC,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,OAAO;4BAC5C,CAAC,CAAC,EAAE;4BACJ,CAAC,CAAC,EAAE,MAAM,EAAE,mBAAmB,CAAC,YAAY,EAAE,CAAC;qBAClD,CAAC,CAAC;oBACH,MAAM,KAAK,CAAC;gBACd,CAAC,CAAC,CAAC;YACL,CAAC,CACF;WAAC;QAEM;;;;mBAAwB,CAAC,MAAkB,EAAE,EAAE;gBACrD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;gBACxB,QAAQ,IAAI,EAAE,CAAC;oBACb,KAAK,OAAO,CAAC,CAAC,CAAC;wBACb,gDAAgD;wBAChD,IAAI,QAAQ,IAAI,MAAM;4BAAE,OAAO;wBAC/B,YAAY,CAAC,UAAU,CAAC;4BACtB,IAAI,EAAE,oBAAoB;4BAC1B,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE;yBAC5B,CAAC,CAAC;wBACH,OAAO;oBACT,CAAC;oBACD,KAAK,SAAS,CAAC,CAAC,CAAC;wBACf,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC;wBAChE,YAAY,CAAC,UAAU,CAAC;4BACtB,IAAI,EAAE,oBAAoB;4BAC1B,IAAI,EAAE;gCACJ,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,eAAe;6BACpD;yBACF,CAAC,CAAC;wBACH,OAAO;oBACT,CAAC;oBACD,KAAK,OAAO;wBACV,YAAY,CAAC,UAAU,CAAC;4BACtB,IAAI,EAAE,oBAAoB;4BAC1B,IAAI,EAAE;gCACJ,QAAQ,EAAE,OAAO;gCACjB,QAAQ,EAAE,MAAM,CAAC,cAAc;6BAChC;yBACF,CAAC,CAAC;wBACH,MAAM;oBACR,KAAK,aAAa;wBAChB,MAAM;oBACR,KAAK,KAAK;wBACR,YAAY,CAAC,UAAU,CAAC;4BACtB,IAAI,EAAE,oBAAoB;4BAC1B,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;yBAC1B,CAAC,CAAC;wBACH,MAAM;oBACR;wBACE,WAAW,CAAC,IAAI,EAAE,sBAAsB,IAAI,EAAE,CAAC,CAAC;gBACpD,CAAC;YACH,CAAC;WAAC;QAEF;;;;;;;;;;;;;;;;;;;;;;WAsBG;QACH;;;;mBAAkC,KAAK,IAAI,EAAE;gBAC3C,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YAChC,CAAC;WAAC;QAEF;;;;;;;;;;;;;;;;;;;;;;;;;;WA0BG;QACH;;;;mBAAiB,KAAK,IAAmB,EAAE;gBACzC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,CAAC;gBAC/D,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;oBACxB,OAAO,WAAW,CAAC;gBACrB,CAAC;gBAED,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAC7B,CAAC;WAAC;QAEF;;;;WAIG;QACH;;;;mBAA2C,YAAY,CAAC,QAAQ,CAC9D,8BAA8B,EAC9B,KAAK,IAAI,EAAE;gBACT,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAE9C,OAAO,OAAO,CAAC;YACjB,CAAC,CACF;WAAC;QAEF;;;;;;;;;;;;;;;;;;;;;;;WAuBG;QACH;;;;mBACE,YAAY,CAAC,QAAQ,CAAC,+BAA+B,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;gBACnE,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;gBAErC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;gBAE5D,YAAY,CAAC,UAAU,CAAC;oBACtB,IAAI,EAAE,qBAAqB;iBAC5B,CAAC,CAAC;gBAEH,OAAO,MAAM,CAAC;YAChB,CAAC,CAAC;WAAC;QAEL;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA4BG;QACH;;;;mBAKoB,YAAY,CAAC,QAAQ,CACvC,iCAAiC,EACjC,KAAK,EAAE,MAAM,EAAE,EAAE;gBACf,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;gBAE1C,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;YAChD,CAAC,CACF;WAAC;QAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA6BG;QACH;;;;mBAiBI,YAAY,CAAC,QAAQ,CACvB,mCAAmC,EACnC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;gBACjB,MAAM,WAAW,GAAG,IAAI,EAAE,UAAU,IAAI,oBAAoB,CAAC;gBAC7D,MAAM,YAAY,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;gBACrC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAClD,SAAS,CAAC,YAAY,CAAC,CACxB,CAAC;gBAEF,MAAM,SAAS,GAAG,IAAI,CAAC,yBAAyB,CAAC,YAAY,CAAC,CAAC;gBAE/D,OAAO,WAAW,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YACpC,CAAC,CACF;WAAC;QAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;WA2BG;QACH;;;;mBAE4C,YAAY,CAAC,QAAQ,CAC/D,qCAAqC,EACrC,KAAK,EAAE,qBAAqB,EAAE,EAAE;gBAC9B,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,qBAAqB,CAAC,CAAC;gBACrE,MAAM,sBAAsB,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAC5D,mBAAmB,CACpB,CAAC;gBACF,MAAM,SAAS,GAAG,IAAI,CAAC,yBAAyB,CAAC,sBAAsB,CAAC,CAAC;gBACzE,OAAO,EAAE,GAAG,qBAAqB,EAAE,GAAG,SAAS,EAAE,CAAC;YACpD,CAAC,CACF;WAAC;QAEM;;;;mBAA4B,CAClC,GAAkB,EACC,EAAE;gBACrB,OAAO;oBACL,CAAC,EAAE,SAAS,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;oBAChC,CAAC,EAAE,SAAS,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;oBAC5C,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;iBACpD,CAAC;YACJ,CAAC;WAAC;QAEF;;;;;;;;;;;;;;;;;;;;;;;WAuBG;QACH;;;;mBACE,YAAY,CAAC,QAAQ,CAAC,2BAA2B,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBACjE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;gBAEzD,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;oBACzB,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,OAAO;oBACL,KAAK,EAAE,MAAM,CAAC,KAAK;iBACpB,CAAC;YACJ,CAAC,CAAC;WAAC;QAEL;;;;;;;;;;;;;;;;;;;;;;;WAuBG;QACH;;;;mBACE,YAAY,CAAC,QAAQ,CAAC,8BAA8B,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBACrE,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YAC7C,CAAC,CAAC;WAAC;QAEL;;;;;;;;;;;;;;;;;;;;;;;;;;WA0BG;QACH;;;;mBAEwB,KAAK,EAAE,MAAM,EAAE,EAAE;gBACvC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YACzC,CAAC;WAAC;QAEF;;;;;;;;;;;;;;;;;;;;;;;;WAwBG;QACH;;;;mBAAgB,GAAiB,EAAE;gBACjC,+EAA+E;gBAC/E,0DAA0D;gBAC1D,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;oBAC1B,MAAM,IAAI,qBAAqB,EAAE,CAAC;gBACpC,CAAC;gBAED,OAAO,SAAS,CAAC;oBACf,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAG,CAAC,OAAO;oBACtC,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;oBACnD,aAAa,EAAE,CAIb,mBAAgE,EAChE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAyB,mBAAmB,CAAC;oBACpE,eAAe,EAAE,IAAI,CAAC,eAAe;iBACtC,CAAC,CAAC;YACL,CAAC;WAAC;QAEF;;;;;;;;;;;;;;;;;;;;;;;WAuBG;QACH;;;;mBAA8B,GAAiB,EAAE;gBAC/C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;oBAC1B,MAAM,IAAI,qBAAqB,EAAE,CAAC;gBACpC,CAAC;gBAED,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtC,CAAC;WAAC;QAEM;;;;mBAAwB,KAAK,EACnC,MAA8C,EAC/B,EAAE;gBACjB,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;oBACtB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACtD,MAAM,iBAAiB,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;oBAEtD,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY;wBACnC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;4BAC7B,KAAK,EAAE,MAAM,CAAC,KAAK;4BACnB,SAAS,EAAE,MAAM,CAAC,SAAS;4BAC3B,iBAAiB;4BACjB,cAAc,EAAE,MAAM,CAAC,cAAc;yBACtC,CAAC;wBACJ,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;4BAC7B,IAAI,EAAE,OAAO;4BACb,KAAK,EAAE,MAAM,CAAC,KAAK;4BACnB,SAAS,EAAE,MAAM,CAAC,SAAS;4BAC3B,iBAAiB;4BACjB,cAAc,EAAE,MAAM,CAAC,cAAc;yBACtC,CAAC,CAAC;oBAEP,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC;wBACtC,KAAK;wBACL,SAAS,EAAE,CAAC,YAAY;qBACzB,CAAC,CAAC;oBACH,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;wBAClB,MAAM,EAAE,mBAAmB,CAAC,mBAAmB;wBAC/C,KAAK;wBACL,KAAK,EAAE,IAAI;qBACZ,CAAC,CAAC;oBAEH,+DAA+D;oBAC/D,mCAAmC;oBACnC,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;wBACnC,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,EAAE,CAC3C,WAAW,EACX,CAAC,OAAO,EAAE,EAAE;4BACV,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;4BACtB,cAAc,EAAE,CAAC;wBACnB,CAAC,CACF,CAAC;oBACJ,CAAC,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,MAAM,gBAAgB,GAAG,MAAM,CAAC,KAAK;wBACnC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE;wBACzB,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,mBAAmB,EAAE,CAAC;oBAE9C,IAAI,CAAC,gBAAgB,EAAE,CAAC;wBACtB,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;4BAClB,MAAM,EAAE,mBAAmB,CAAC,YAAY;yBACzC,CAAC,CAAC;wBACH,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;oBAC7D,CAAC;oBAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC;wBACnD,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,KAAK,EAAE,gBAAgB,CAAC,KAAK;wBAC7B,kBAAkB,EAAE,gBAAgB;wBACpC,kBAAkB,EAAE,OAAO;qBAC5B,CAAC,CAAC;oBAEH,sBAAsB;oBACtB,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAExC,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;WAAC;QAEM;;;;mBAA0B,KAAK,EACrC,IAA8C,EAC/B,EAAE;gBACjB,IAAI,IAAU,CAAC;gBACf,MAAM,eAAe,GAAG,KAAK,IAAI,EAAE;oBACjC,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;wBACpB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;wBACpD,OAAO,YAAY,IAAI,IAAI,CAAC;oBAC9B,CAAC;oBAED,OAAO,IAAI,CAAC,SAAS,CAAC;gBACxB,CAAC,CAAC;gBAEF,IAAI,MAAM,eAAe,EAAE,EAAE,CAAC;oBAC5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAC3C,IAGC,CACF,CAAC;oBACF,gFAAgF;oBAChF,6BAA6B;oBAC7B,IAAI,GAAG;wBACL,OAAO,EAAE,MAAM,CAAC,OAAQ;wBACxB,MAAM,EAAE,MAAM,CAAC,MAAO;wBACtB,KAAK,EAAE,MAAM,CAAC,KAAK;qBACpB,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,EAAE,CAAC;oBAChD,IAAI,CAAC,IAAI,EAAE,CAAC;wBACV,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;4BAClB,MAAM,EAAE,mBAAmB,CAAC,YAAY;yBACzC,CAAC,CAAC;wBACH,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;oBACnC,CAAC;gBACH,CAAC;gBAED,OAAO,IAAI,CAAC;YACd,CAAC;WAAC;QAEM;;;;mBAAwB,KAAK,EACnC,IAA4C,EAC7B,EAAE;gBACjB,MAAM,MAAM,GAAgB;oBAC1B,GAAG,IAAI;oBACP,iBAAiB,EAAE,IAAI,CAAC,oBAAoB,EAAE;iBAC/C,CAAC;gBACF,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;gBAC9C,CAAC;qBAAM,CAAC;oBACN,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;WAAC;QAEM;;;;mBAAsB,KAAK,EACjC,IAA0C,EAC3B,EAAE;gBACjB,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,mBAAmB,EAAE,CAAC;gBAC9D,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,WAAW,IAAI,EAAE,CAAC;gBAC/C,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACxC,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBAChD,CAAC;gBACD,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBAChD,CAAC;gBACD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;oBAChD,KAAK;oBACL,KAAK;oBACL,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,iBAAiB,EAAE,IAAI,CAAC,oBAAoB,EAAE;iBAC/C,CAAC,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC;oBACnD,MAAM;oBACN,KAAK;oBACL,kBAAkB,EAAE,cAAc;oBAClC,kBAAkB,EAAE,KAAK;iBAC1B,CAAC,CAAC;gBAEH,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;gBACjC,IAAI,WAAW,EAAE,CAAC;oBAChB,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC;wBACtC,GAAG,WAAW;wBACd,SAAS,EAAE,KAAK;qBACjB,CAAC,CAAC;gBACL,CAAC;gBAED,OAAO,IAAI,CAAC;YACd,CAAC;WAAC;QAEM;;;;mBAAoB,CAAC,EAC3B,MAAM,EACN,KAAK,EACL,OAAO,EACP,SAAS,GACoC,EAAiB,EAAE;gBAChE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC;oBAC7C,MAAM;oBACN,KAAK;oBACL,kBAAkB,EAAE,gBAAgB;oBACpC,kBAAkB,EAAE,OAAO;oBAC3B,OAAO;iBACR,CAAC,CAAC;gBAEH,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;gBAEjC,OAAO,IAAI,CAAC;YACd,CAAC;WAAC;QAEM;;;;mBAAuB,GAAG,EAAE,CAClC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,gBAAgB,GAAG,IAAI,CAAC;WAAC;QAElD;;;;mBAAoB,GAAG,EAAE;gBAC/B,uEAAuE;gBACvE,WAAW;gBACX,MAAM,SAAS,GAAyB;oBACtC,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE;wBACrB,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;4BAClB,IAAI,EAAE,OAAO,CAAC,IAAI;4BAClB,MAAM,EAAE,mBAAmB,CAAC,SAAS;4BACrC,KAAK,EAAE,IAAI;yBACZ,CAAC,CAAC;oBACL,CAAC;oBACD,YAAY,EAAE,GAAG,EAAE;wBACjB,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;4BAClB,IAAI,EAAE,IAAI;4BACV,MAAM,EAAE,mBAAmB,CAAC,YAAY;yBACzC,CAAC,CAAC;oBACL,CAAC;oBACD,WAAW,EAAE,GAAG,EAAE;wBAChB,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;4BAC9B,MAAM,EAAE,KAAK,CAAC,IAAI;gCAChB,CAAC,CAAC,mBAAmB,CAAC,SAAS;gCAC/B,CAAC,CAAC,mBAAmB,CAAC,YAAY;4BACpC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;yBAC9C,CAAC,CAAC,CAAC;oBACN,CAAC;iBACF,CAAC;gBAEF,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC1D,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,KAAmC,EAAE,QAAQ,CAAC,CAAC;gBACxE,CAAC;gBAED,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,gBAAgB,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE;oBAC3C,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE;wBACnB,QAAQ,IAAI,EAAE,CAAC;4BACb,KAAK,OAAO;gCACV,OAAO,mBAAmB,CAAC,oBAAoB,CAAC;4BAClD,KAAK,SAAS;gCACZ,OAAO,mBAAmB,CAAC,sBAAsB,CAAC;4BACpD,KAAK,OAAO;gCACV,OAAO,mBAAmB,CAAC,oBAAoB,CAAC;4BAClD,KAAK,KAAK,CAAC;4BACX,KAAK,WAAW;gCACd,OAAO,mBAAmB,CAAC,iBAAiB,CAAC;4BAC/C;gCACE,WAAW,CAAC,IAAI,EAAE,+BAA+B,CAAC,CAAC;wBACvD,CAAC;oBACH,CAAC,CAAC,EAAE,CAAC;oBAEL,+CAA+C;oBAC/C,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,EAAE,GAAG,EAAE;wBAClC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;oBAC9B,CAAC,CAAC,CAAC;oBAEH,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;wBAClB,MAAM;wBACN,KAAK,EAAE,IAAI;qBACZ,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC;WAAC;QAEM;;;;mBAAmB,CAAC,SAAmB,EAAE,EAAE;gBACjD,gEAAgE;gBAChE,IAAI,SAAS;oBAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;YACpD,CAAC;WAAC;QAEQ;;;;mBAAa,KAAK,IAA2B,EAAE;gBACvD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjC,OAAO,IAAI,CAAC,MAAM,CAAC;YACrB,CAAC;WAAC;QAEF;;;;WAIG;QACI;;;;mBAAY,KAAK,IAA2B,EAAE;gBACnD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;oBACjB,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC3B,CAAC;gBAED,OAAO,IAAI,CAAC,MAAM,CAAC;YACrB,CAAC;WAAC;QAEQ;;;;mBAAc,KAAK,IAA2B,EAAE;gBACxD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;YACrD,CAAC;WAAC;QA96BA,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC;QACpB,IAAI,CAAC,KAAK,GAAG,WAAW,CACtB,qBAAqB,CACnB,GAAG,EAAE,CACH,CAAC;YACC,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,mBAAmB,CAAC,YAAY;YACxC,KAAK,EAAE,YAAY,IAAI,IAAI;SACC,CAAC,CAClC,CACF,CAAC;QACF,+DAA+D;QAC/D,oEAAoE;QACpE,2BAA2B;QAC3B,IAAI,CAAC,cAAc,GAAG,IAAI,cAAc,CAAC;YACvC,GAAG,aAAa;YAChB,MAAM,EAAE,IAAI,CAAC,KAAK;SACnB,CAAC,CAAC;QACH,2BAA2B;QAC3B,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,oDAAoD;QACpD,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACnC,CAAC;CAw5BF;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK;QAC3B,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;QAC9C,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;AAClD,CAAC","sourcesContent":["import { takeBytes, type SmartAccountAuthenticator } from \"@aa-sdk/core\";\nimport {\n  hashMessage,\n  hashTypedData,\n  keccak256,\n  serializeTransaction,\n  type GetTransactionType,\n  type Hex,\n  type IsNarrowable,\n  type LocalAccount,\n  type SerializeTransactionFn,\n  type SignableMessage,\n  type TransactionSerializable,\n  type TransactionSerialized,\n  type TypedData,\n  type TypedDataDefinition,\n} from \"viem\";\nimport { toAccount } from \"viem/accounts\";\nimport { hashAuthorization, type Authorization } from \"viem/experimental\";\nimport type { Mutate, StoreApi } from \"zustand\";\nimport { subscribeWithSelector } from \"zustand/middleware\";\nimport { createStore } from \"zustand/vanilla\";\nimport type { BaseSignerClient } from \"./client/base\";\nimport type { OauthConfig, OauthParams, User } from \"./client/types\";\nimport { NotAuthenticatedError } from \"./errors.js\";\nimport { SignerLogger } from \"./metrics.js\";\nimport {\n  SessionManager,\n  type SessionManagerParams,\n} from \"./session/manager.js\";\nimport type { SessionManagerEvents } from \"./session/types\";\nimport type { AuthParams } from \"./signer\";\nimport { SolanaSigner } from \"./solanaSigner.js\";\nimport {\n  AlchemySignerStatus,\n  type AlchemySignerEvent,\n  type AlchemySignerEvents,\n  type ErrorInfo,\n} from \"./types.js\";\nimport { assertNever } from \"./utils/typeAssertions.js\";\n\nexport interface BaseAlchemySignerParams<TClient extends BaseSignerClient> {\n  client: TClient;\n  sessionConfig?: Omit<SessionManagerParams, \"client\">;\n  initialError?: ErrorInfo;\n}\n\ntype AlchemySignerStore = {\n  user: User | null;\n  status: AlchemySignerStatus;\n  error: ErrorInfo | null;\n  otpId?: string;\n  isNewUser?: boolean;\n};\n\ntype UnpackedSignature = {\n  r: `0x${string}`;\n  s: `0x${string}`;\n  v: bigint;\n};\n\ntype InternalStore = Mutate<\n  StoreApi<AlchemySignerStore>,\n  [[\"zustand/subscribeWithSelector\", never]]\n>;\n\nexport type EmailConfig = {\n  mode?: \"MAGIC_LINK\" | \"OTP\";\n};\n\nexport type SignerConfig = {\n  email: EmailConfig;\n};\n\n/**\n * Base abstract class for Alchemy Signer, providing authentication and session management for smart accounts.\n * Implements the `SmartAccountAuthenticator` interface and handles various signer events.\n */\nexport abstract class BaseAlchemySigner<TClient extends BaseSignerClient>\n  implements SmartAccountAuthenticator<AuthParams, User, TClient>\n{\n  signerType: \"alchemy-signer\" | \"rn-alchemy-signer\" = \"alchemy-signer\";\n  inner: TClient;\n  private sessionManager: SessionManager;\n  private store: InternalStore;\n  private config: Promise<SignerConfig>;\n\n  /**\n   * Initializes an instance with the provided client and session configuration.\n   * This function sets up the internal store, initializes the session manager,\n   * registers listeners and initializes the session manager to manage session state.\n   *\n   * @param {BaseAlchemySignerParams<TClient>} param0 Object containing the client and session configuration\n   * @param {TClient} param0.client The client instance to be used internally\n   * @param {SessionConfig} param0.sessionConfig Configuration for managing sessions\n   * @param {ErrorInfo | undefined} param0.initialError Error already present on the signer when initialized, if any\n   */\n  constructor({\n    client,\n    sessionConfig,\n    initialError,\n  }: BaseAlchemySignerParams<TClient>) {\n    this.inner = client;\n    this.store = createStore(\n      subscribeWithSelector(\n        () =>\n          ({\n            user: null,\n            status: AlchemySignerStatus.INITIALIZING,\n            error: initialError ?? null,\n          } satisfies AlchemySignerStore)\n      )\n    );\n    // NOTE: it's important that the session manager share a client\n    // with the signer. The SessionManager leverages the Signer's client\n    // to manage session state.\n    this.sessionManager = new SessionManager({\n      ...sessionConfig,\n      client: this.inner,\n    });\n    // register listeners first\n    this.registerListeners();\n    // then initialize so that we can catch those events\n    this.sessionManager.initialize();\n    this.config = this.fetchConfig();\n  }\n\n  /**\n   * Allows you to subscribe to events emitted by the signer\n   *\n   * @param {AlchemySignerEvent} event the event to subscribe to\n   * @param {AlchemySignerEvents[AlchemySignerEvent]} listener the function to run when the event is emitted\n   * @returns {() => void} a function to remove the listener\n   */\n  on = <E extends AlchemySignerEvent>(\n    event: E,\n    listener: AlchemySignerEvents[E]\n  ) => {\n    // NOTE: we're using zustand here to handle this because we are able to use the fireImmediately\n    // option which deals with a possible race condition where the listener is added after the event\n    // is fired. In the Client and SessionManager we use EventEmitter because it's easier to handle internally\n    switch (event) {\n      case \"connected\":\n        return this.store.subscribe(\n          ({ status }) => status,\n          (status) =>\n            status === AlchemySignerStatus.CONNECTED &&\n            (listener as AlchemySignerEvents[\"connected\"])(\n              this.store.getState().user!\n            ),\n          { fireImmediately: true }\n        );\n      case \"disconnected\":\n        return this.store.subscribe(\n          ({ status }) => status,\n          (status) =>\n            status === AlchemySignerStatus.DISCONNECTED &&\n            (listener as AlchemySignerEvents[\"disconnected\"])(),\n          { fireImmediately: true }\n        );\n      case \"statusChanged\":\n        return this.store.subscribe(\n          ({ status }) => status,\n          listener as AlchemySignerEvents[\"statusChanged\"],\n          { fireImmediately: true }\n        );\n      case \"errorChanged\":\n        return this.store.subscribe(\n          ({ error }) => error,\n          (error) =>\n            (listener as AlchemySignerEvents[\"errorChanged\"])(\n              error ?? undefined\n            ),\n          { fireImmediately: true }\n        );\n      case \"newUserSignup\":\n        return this.store.subscribe(\n          ({ isNewUser }) => isNewUser,\n          (isNewUser) => {\n            if (isNewUser) (listener as AlchemySignerEvents[\"newUserSignup\"])();\n          },\n          { fireImmediately: true }\n        );\n      default:\n        assertNever(event, `Unknown event type ${event}`);\n    }\n  };\n\n  /**\n   * Prepares the config needed to use popup-based OAuth login. This must be\n   * called before calling `.authenticate` with params `{ type: \"oauth\", mode:\n   * \"popup\" }`, and is recommended to be called on page load.\n   *\n   * This method exists because browsers may prevent popups from opening unless\n   * triggered by user interaction, and so the OAuth config must already have\n   * been fetched at the time a user clicks a social login button.\n   *\n   * @example\n   * ```ts\n   * import { AlchemyWebSigner } from \"@account-kit/signer\";\n   *\n   * const signer = new AlchemyWebSigner({\n   *  client: {\n   *    connection: {\n   *      rpcUrl: \"/api/rpc\",\n   *    },\n   *    iframeConfig: {\n   *      iframeContainerId: \"alchemy-signer-iframe-container\",\n   *    },\n   *  },\n   * });\n   *\n   * await signer.preparePopupOauth();\n   * ```\n   * @returns {Promise<OauthConfig>} the config which must be loaded before\n   * using popup-based OAuth\n   */\n  preparePopupOauth = (): Promise<OauthConfig> => this.inner.initOauth();\n\n  /**\n   * Authenticate a user with either an email or a passkey and create a session for that user\n   *\n   * @example\n   * ```ts\n   * import { AlchemyWebSigner } from \"@account-kit/signer\";\n   *\n   * const signer = new AlchemyWebSigner({\n   *  client: {\n   *    connection: {\n   *      rpcUrl: \"/api/rpc\",\n   *    },\n   *    iframeConfig: {\n   *      iframeContainerId: \"alchemy-signer-iframe-container\",\n   *    },\n   *  },\n   * });\n   *\n   * const result = await signer.authenticate({\n   *  type: \"email\",\n   *  email: \"foo@mail.com\",\n   * });\n   * ```\n   *\n   * @param {AuthParams} params - undefined if passkey login, otherwise an object with email and bundle to resolve\n   * @returns {Promise<User>} the user that was authenticated\n   */\n  authenticate: (params: AuthParams) => Promise<User> = SignerLogger.profiled(\n    \"BaseAlchemySigner.authenticate\",\n    async (params) => {\n      const { type } = params;\n      const result = (() => {\n        switch (type) {\n          case \"email\":\n            return this.authenticateWithEmail(params);\n          case \"passkey\":\n            return this.authenticateWithPasskey(params);\n          case \"oauth\":\n            return this.authenticateWithOauth(params);\n          case \"oauthReturn\":\n            return this.handleOauthReturn(params);\n          case \"otp\":\n            return this.authenticateWithOtp(params);\n          default:\n            assertNever(type, `Unknown auth type: ${type}`);\n        }\n      })();\n\n      this.trackAuthenticateType(params);\n\n      return result.catch((error) => {\n        /**\n         * 2 things going on here:\n         * 1. for oauth flows we expect the status to remain in authenticating\n         * 2. we do the ternary, because if we explicitly pass in `undefined` for the status, zustand will set the value of status to `undefined`.\n         * However, if we omit it, then it will not override the current value of status.\n         */\n        this.store.setState({\n          error: toErrorInfo(error),\n          ...(type === \"oauthReturn\" || type === \"oauth\"\n            ? {}\n            : { status: AlchemySignerStatus.DISCONNECTED }),\n        });\n        throw error;\n      });\n    }\n  );\n\n  private trackAuthenticateType = (params: AuthParams) => {\n    const { type } = params;\n    switch (type) {\n      case \"email\": {\n        // we just want to track the start of email auth\n        if (\"bundle\" in params) return;\n        SignerLogger.trackEvent({\n          name: \"signer_authnticate\",\n          data: { authType: \"email\" },\n        });\n        return;\n      }\n      case \"passkey\": {\n        const isAnon = !(\"email\" in params) && params.createNew == null;\n        SignerLogger.trackEvent({\n          name: \"signer_authnticate\",\n          data: {\n            authType: isAnon ? \"passkey_anon\" : \"passkey_email\",\n          },\n        });\n        return;\n      }\n      case \"oauth\":\n        SignerLogger.trackEvent({\n          name: \"signer_authnticate\",\n          data: {\n            authType: \"oauth\",\n            provider: params.authProviderId,\n          },\n        });\n        break;\n      case \"oauthReturn\":\n        break;\n      case \"otp\":\n        SignerLogger.trackEvent({\n          name: \"signer_authnticate\",\n          data: { authType: \"otp\" },\n        });\n        break;\n      default:\n        assertNever(type, `Unknown auth type: ${type}`);\n    }\n  };\n\n  /**\n   * Clear a user session and log them out\n   *\n   * @example\n   * ```ts\n   * import { AlchemyWebSigner } from \"@account-kit/signer\";\n   *\n   * const signer = new AlchemyWebSigner({\n   *  client: {\n   *    connection: {\n   *      rpcUrl: \"/api/rpc\",\n   *    },\n   *    iframeConfig: {\n   *      iframeContainerId: \"alchemy-signer-iframe-container\",\n   *    },\n   *  },\n   * });\n   *\n   * await signer.disconnect();\n   * ```\n   *\n   * @returns {Promise<void>} a promise that resolves when the user is logged out\n   */\n  disconnect: () => Promise<void> = async () => {\n    await this.inner.disconnect();\n  };\n\n  /**\n   * Gets the current logged in user\n   * If a user has an ongoing session, it will use that session and\n   * try to authenticate\n   *\n   * @example\n   * ```ts\n   * import { AlchemyWebSigner } from \"@account-kit/signer\";\n   *\n   * const signer = new AlchemyWebSigner({\n   *  client: {\n   *    connection: {\n   *      rpcUrl: \"/api/rpc\",\n   *    },\n   *    iframeConfig: {\n   *      iframeContainerId: \"alchemy-signer-iframe-container\",\n   *    },\n   *  },\n   * });\n   *\n   * // throws if not logged in\n   * const user = await signer.getAuthDetails();\n   * ```\n   *\n   * @throws if there is no user logged in\n   * @returns {Promise<User>} the current user\n   */\n  getAuthDetails = async (): Promise<User> => {\n    const sessionUser = await this.sessionManager.getSessionUser();\n    if (sessionUser != null) {\n      return sessionUser;\n    }\n\n    return this.inner.whoami();\n  };\n\n  /**\n   * Retrieves the address of the current user by calling the `whoami` method on `this.inner`.\n   *\n   * @returns {Promise<string>} A promise that resolves to the address of the current user.\n   */\n  getAddress: () => Promise<`0x${string}`> = SignerLogger.profiled(\n    \"BaseAlchemySigner.getAddress\",\n    async () => {\n      const { address } = await this.inner.whoami();\n\n      return address;\n    }\n  );\n\n  /**\n   * Signs a raw message after hashing it.\n   *\n   * @example\n   * ```ts\n   * import { AlchemyWebSigner } from \"@account-kit/signer\";\n   *\n   * const signer = new AlchemyWebSigner({\n   *  client: {\n   *    connection: {\n   *      rpcUrl: \"/api/rpc\",\n   *    },\n   *    iframeConfig: {\n   *      iframeContainerId: \"alchemy-signer-iframe-container\",\n   *    },\n   *  },\n   * });\n   *\n   * const signature = await signer.signMessage(\"Hello, world!\");\n   * ```\n   *\n   * @param {string} msg the message to be hashed and then signed\n   * @returns {Promise<string>} a promise that resolves to the signed message\n   */\n  signMessage: (msg: SignableMessage) => Promise<`0x${string}`> =\n    SignerLogger.profiled(\"BaseAlchemySigner.signMessage\", async (msg) => {\n      const messageHash = hashMessage(msg);\n\n      const result = await this.inner.signRawMessage(messageHash);\n\n      SignerLogger.trackEvent({\n        name: \"signer_sign_message\",\n      });\n\n      return result;\n    });\n\n  /**\n   * Signs a typed message by first hashing it and then signing the hashed message using the `signRawMessage` method.\n   *\n   * @example\n   * ```ts\n   * import { AlchemyWebSigner } from \"@account-kit/signer\";\n   *\n   * const signer = new AlchemyWebSigner({\n   *  client: {\n   *    connection: {\n   *      rpcUrl: \"/api/rpc\",\n   *    },\n   *    iframeConfig: {\n   *      iframeContainerId: \"alchemy-signer-iframe-container\",\n   *    },\n   *  },\n   * });\n   *\n   * const signature = await signer.signTypedData({\n   *  domain: {},\n   *  types: {},\n   *  primaryType: \"\",\n   *  message: {},\n   * });\n   * ```\n   *\n   * @param {TypedDataDefinition<TTypedData, TPrimaryType>} params The parameters for the typed message to be hashed and signed\n   * @returns {Promise<any>} A promise that resolves to the signed message\n   */\n  signTypedData: <\n    const TTypedData extends TypedData | Record<string, unknown>,\n    TPrimaryType extends keyof TTypedData | \"EIP712Domain\" = keyof TTypedData\n  >(\n    params: TypedDataDefinition<TTypedData, TPrimaryType>\n  ) => Promise<Hex> = SignerLogger.profiled(\n    \"BaseAlchemySigner.signTypedData\",\n    async (params) => {\n      const messageHash = hashTypedData(params);\n\n      return this.inner.signRawMessage(messageHash);\n    }\n  );\n\n  /**\n   * Serializes a transaction, signs it with a raw message, and then returns the serialized transaction with the signature.\n   *\n   * @example\n   * ```ts\n   * import { AlchemyWebSigner } from \"@account-kit/signer\";\n   *\n   * const signer = new AlchemyWebSigner({\n   *  client: {\n   *    connection: {\n   *      rpcUrl: \"/api/rpc\",\n   *    },\n   *    iframeConfig: {\n   *      iframeContainerId: \"alchemy-signer-iframe-container\",\n   *    },\n   *  },\n   * });\n   *\n   * const tx = await signer.signTransaction({\n   *  to: \"0x1234\",\n   *  value: \"0x1234\",\n   *  data: \"0x1234\",\n   * });\n   * ```\n   *\n   * @param {Transaction} tx the transaction to be serialized and signed\n   * @param {{serializer?: SerializeTransactionFn}} args options for serialization\n   * @param {() => Hex} [args.serializer] an optional serializer function. If not provided, the default `serializeTransaction` function will be used\n   * @returns {Promise<string>} a promise that resolves to the serialized transaction with the signature\n   */\n  signTransaction: <\n    serializer extends SerializeTransactionFn<TransactionSerializable> = SerializeTransactionFn<TransactionSerializable>,\n    transaction extends Parameters<serializer>[0] = Parameters<serializer>[0]\n  >(\n    transaction: transaction,\n    options?:\n      | {\n          serializer?: serializer | undefined;\n        }\n      | undefined\n  ) => Promise<\n    IsNarrowable<\n      TransactionSerialized<GetTransactionType<transaction>>,\n      Hex\n    > extends true\n      ? TransactionSerialized<GetTransactionType<transaction>>\n      : Hex\n  > = SignerLogger.profiled(\n    \"BaseAlchemySigner.signTransaction\",\n    async (tx, args) => {\n      const serializeFn = args?.serializer ?? serializeTransaction;\n      const serializedTx = serializeFn(tx);\n      const signatureHex = await this.inner.signRawMessage(\n        keccak256(serializedTx)\n      );\n\n      const signature = this.unpackSignRawMessageBytes(signatureHex);\n\n      return serializeFn(tx, signature);\n    }\n  );\n\n  /**\n   * Signs an EIP-7702 Authorization and then returns the authorization with the signature.\n   *\n   * @example\n   * ```ts twoslash\n   * import { AlchemyWebSigner } from \"@account-kit/signer\";\n   *\n   * const signer = new AlchemyWebSigner({\n   *  client: {\n   *    connection: {\n   *      rpcUrl: \"/api/rpc\",\n   *    },\n   *    iframeConfig: {\n   *      iframeContainerId: \"alchemy-signer-iframe-container\",\n   *    },\n   *  },\n   * });\n   *\n   * const tx = await signer.signAuthorization({\n   *  contractAddress: \"0x1234123412341234123412341234123412341234\",\n   *  chainId: 1,\n   *  nonce: 0,\n   * });\n   * ```\n   *\n   * @param {Authorization<number, false>} unsignedAuthorization the authorization to be signed\n   * @returns {Promise<Authorization<number, true>> | undefined} a promise that resolves to the authorization with the signature\n   */\n  signAuthorization: (\n    unsignedAuthorization: Authorization<number, false>\n  ) => Promise<Authorization<number, true>> = SignerLogger.profiled(\n    \"BaseAlchemySigner.signAuthorization\",\n    async (unsignedAuthorization) => {\n      const hashedAuthorization = hashAuthorization(unsignedAuthorization);\n      const signedAuthorizationHex = await this.inner.signRawMessage(\n        hashedAuthorization\n      );\n      const signature = this.unpackSignRawMessageBytes(signedAuthorizationHex);\n      return { ...unsignedAuthorization, ...signature };\n    }\n  );\n\n  private unpackSignRawMessageBytes = (\n    hex: `0x${string}`\n  ): UnpackedSignature => {\n    return {\n      r: takeBytes(hex, { count: 32 }),\n      s: takeBytes(hex, { count: 32, offset: 32 }),\n      v: BigInt(takeBytes(hex, { count: 1, offset: 64 })),\n    };\n  };\n\n  /**\n   * Unauthenticated call to look up a user's organizationId by email\n   *\n   * @example\n   * ```ts\n   * import { AlchemyWebSigner } from \"@account-kit/signer\";\n   *\n   * const signer = new AlchemyWebSigner({\n   *  client: {\n   *    connection: {\n   *      rpcUrl: \"/api/rpc\",\n   *    },\n   *    iframeConfig: {\n   *      iframeContainerId: \"alchemy-signer-iframe-container\",\n   *    },\n   *  },\n   * });\n   *\n   * const result = await signer.getUser(\"foo@mail.com\");\n   * ```\n   *\n   * @param {string} email the email to lookup\n   * @returns {Promise<{orgId: string}>} the organization id for the user if they exist\n   */\n  getUser: (email: string) => Promise<{ orgId: string } | null> =\n    SignerLogger.profiled(\"BaseAlchemySigner.getUser\", async (email) => {\n      const result = await this.inner.lookupUserByEmail(email);\n\n      if (result.orgId == null) {\n        return null;\n      }\n\n      return {\n        orgId: result.orgId,\n      };\n    });\n\n  /**\n   * Adds a passkey to the user's account\n   *\n   * @example\n   * ```ts\n   * import { AlchemyWebSigner } from \"@account-kit/signer\";\n   *\n   * const signer = new AlchemyWebSigner({\n   *  client: {\n   *    connection: {\n   *      rpcUrl: \"/api/rpc\",\n   *    },\n   *    iframeConfig: {\n   *      iframeContainerId: \"alchemy-signer-iframe-container\",\n   *    },\n   *  },\n   * });\n   *\n   * const result = await signer.addPasskey()\n   * ```\n   *\n   * @param {CredentialCreationOptions | undefined} params optional parameters for the passkey creation\n   * @returns {Promise<string[]>} an array of the authenticator ids added to the user\n   */\n  addPasskey: (params?: CredentialCreationOptions) => Promise<string[]> =\n    SignerLogger.profiled(\"BaseAlchemySigner.addPasskey\", async (params) => {\n      return this.inner.addPasskey(params ?? {});\n    });\n\n  /**\n   * Used to export the wallet for a given user\n   * If the user is authenticated with an Email, this will return a seed phrase\n   * If the user is authenticated with a Passkey, this will return a private key\n   *\n   * @example\n   * ```ts\n   * import { AlchemyWebSigner } from \"@account-kit/signer\";\n   *\n   * const signer = new AlchemyWebSigner({\n   *  client: {\n   *    connection: {\n   *      rpcUrl: \"/api/rpc\",\n   *    },\n   *    iframeConfig: {\n   *      iframeContainerId: \"alchemy-signer-iframe-container\",\n   *    },\n   *  },\n   * });\n   *\n   * // the params passed to this are different based on the specific signer\n   * const result = signer.exportWallet()\n   * ```\n   *\n   * @param {unknown} params export wallet parameters\n   * @returns {boolean} true if the wallet was exported successfully\n   */\n  exportWallet: (\n    params: Parameters<(typeof this.inner)[\"exportWallet\"]>[0]\n  ) => Promise<boolean> = async (params) => {\n    return this.inner.exportWallet(params);\n  };\n\n  /**\n   * This method lets you adapt your AlchemySigner to a viem LocalAccount, which\n   * will let you use the signer as an EOA directly.\n   *\n   * @example\n   * ```ts\n   * import { AlchemyWebSigner } from \"@account-kit/signer\";\n   *\n   * const signer = new AlchemyWebSigner({\n   *  client: {\n   *    connection: {\n   *      rpcUrl: \"/api/rpc\",\n   *    },\n   *    iframeConfig: {\n   *      iframeContainerId: \"alchemy-signer-iframe-container\",\n   *    },\n   *  },\n   * });\n   *\n   * const account = signer.toViemAccount();\n   * ```\n   *\n   * @throws if your signer is not authenticated\n   * @returns {LocalAccount} a LocalAccount object that can be used with viem's wallet client\n   */\n  toViemAccount = (): LocalAccount => {\n    // if we want this method to be synchronous, then we need to do this check here\n    // otherwise we can use the sessionManager to get the user\n    if (!this.inner.getUser()) {\n      throw new NotAuthenticatedError();\n    }\n\n    return toAccount({\n      address: this.inner.getUser()!.address,\n      signMessage: (msg) => this.signMessage(msg.message),\n      signTypedData: <\n        const typedData extends TypedData | Record<string, unknown>,\n        primaryType extends keyof typedData | \"EIP712Domain\" = keyof typedData\n      >(\n        typedDataDefinition: TypedDataDefinition<typedData, primaryType>\n      ) => this.signTypedData<typedData, primaryType>(typedDataDefinition),\n      signTransaction: this.signTransaction,\n    });\n  };\n\n  /**\n   * Creates a new instance of `SolanaSigner` using the provided inner value.\n   * This requires the signer to be authenticated first\n   *\n   * @example\n   * ```ts\n   * import { AlchemyWebSigner } from \"@account-kit/signer\";\n   *\n   * const signer = new AlchemyWebSigner({\n   *  client: {\n   *    connection: {\n   *      rpcUrl: \"/api/rpc\",\n   *    },\n   *    iframeConfig: {\n   *      iframeContainerId: \"alchemy-signer-iframe-container\",\n   *    },\n   *  },\n   * });\n   *\n   * const solanaSigner = signer.toSolanaSigner();\n   * ```\n   *\n   * @returns {SolanaSigner} A new instance of `SolanaSigner`\n   */\n  experimental_toSolanaSigner = (): SolanaSigner => {\n    if (!this.inner.getUser()) {\n      throw new NotAuthenticatedError();\n    }\n\n    return new SolanaSigner(this.inner);\n  };\n\n  private authenticateWithEmail = async (\n    params: Extract<AuthParams, { type: \"email\" }>\n  ): Promise<User> => {\n    if (\"email\" in params) {\n      const existingUser = await this.getUser(params.email);\n      const expirationSeconds = this.getExpirationSeconds();\n\n      const { orgId, otpId } = existingUser\n        ? await this.inner.initEmailAuth({\n            email: params.email,\n            emailMode: params.emailMode,\n            expirationSeconds,\n            redirectParams: params.redirectParams,\n          })\n        : await this.inner.createAccount({\n            type: \"email\",\n            email: params.email,\n            emailMode: params.emailMode,\n            expirationSeconds,\n            redirectParams: params.redirectParams,\n          });\n\n      this.sessionManager.setTemporarySession({\n        orgId,\n        isNewUser: !existingUser,\n      });\n      this.store.setState({\n        status: AlchemySignerStatus.AWAITING_EMAIL_AUTH,\n        otpId,\n        error: null,\n      });\n\n      // We wait for the session manager to emit a connected event if\n      // cross tab sessions are permitted\n      return new Promise<User>((resolve) => {\n        const removeListener = this.sessionManager.on(\n          \"connected\",\n          (session) => {\n            resolve(session.user);\n            removeListener();\n          }\n        );\n      });\n    } else {\n      const temporarySession = params.orgId\n        ? { orgId: params.orgId }\n        : this.sessionManager.getTemporarySession();\n\n      if (!temporarySession) {\n        this.store.setState({\n          status: AlchemySignerStatus.DISCONNECTED,\n        });\n        throw new Error(\"Could not find email auth init session!\");\n      }\n\n      const user = await this.inner.completeAuthWithBundle({\n        bundle: params.bundle,\n        orgId: temporarySession.orgId,\n        connectedEventName: \"connectedEmail\",\n        authenticatingType: \"email\",\n      });\n\n      // fire new user event\n      this.emitNewUserEvent(params.isNewUser);\n\n      return user;\n    }\n  };\n\n  private authenticateWithPasskey = async (\n    args: Extract<AuthParams, { type: \"passkey\" }>\n  ): Promise<User> => {\n    let user: User;\n    const shouldCreateNew = async () => {\n      if (\"email\" in args) {\n        const existingUser = await this.getUser(args.email);\n        return existingUser == null;\n      }\n\n      return args.createNew;\n    };\n\n    if (await shouldCreateNew()) {\n      const result = await this.inner.createAccount(\n        args as Extract<\n          AuthParams,\n          { type: \"passkey\" } & ({ email: string } | { createNew: true })\n        >\n      );\n      // account creation for passkeys returns the whoami response so we don't have to\n      // call it again after signup\n      user = {\n        address: result.address!,\n        userId: result.userId!,\n        orgId: result.orgId,\n      };\n    } else {\n      user = await this.inner.lookupUserWithPasskey();\n      if (!user) {\n        this.store.setState({\n          status: AlchemySignerStatus.DISCONNECTED,\n        });\n        throw new Error(\"No user found\");\n      }\n    }\n\n    return user;\n  };\n\n  private authenticateWithOauth = async (\n    args: Extract<AuthParams, { type: \"oauth\" }>\n  ): Promise<User> => {\n    const params: OauthParams = {\n      ...args,\n      expirationSeconds: this.getExpirationSeconds(),\n    };\n    if (params.mode === \"redirect\") {\n      return this.inner.oauthWithRedirect(params);\n    } else {\n      return this.inner.oauthWithPopup(params);\n    }\n  };\n\n  private authenticateWithOtp = async (\n    args: Extract<AuthParams, { type: \"otp\" }>\n  ): Promise<User> => {\n    const tempSession = this.sessionManager.getTemporarySession();\n    const { orgId, isNewUser } = tempSession ?? {};\n    const { otpId } = this.store.getState();\n    if (!orgId) {\n      throw new Error(\"orgId not found in session\");\n    }\n    if (!otpId) {\n      throw new Error(\"otpId not found in session\");\n    }\n    const { bundle } = await this.inner.submitOtpCode({\n      orgId,\n      otpId,\n      otpCode: args.otpCode,\n      expirationSeconds: this.getExpirationSeconds(),\n    });\n    const user = await this.inner.completeAuthWithBundle({\n      bundle,\n      orgId,\n      connectedEventName: \"connectedOtp\",\n      authenticatingType: \"otp\",\n    });\n\n    this.emitNewUserEvent(isNewUser);\n    if (tempSession) {\n      this.sessionManager.setTemporarySession({\n        ...tempSession,\n        isNewUser: false,\n      });\n    }\n\n    return user;\n  };\n\n  private handleOauthReturn = ({\n    bundle,\n    orgId,\n    idToken,\n    isNewUser,\n  }: Extract<AuthParams, { type: \"oauthReturn\" }>): Promise<User> => {\n    const user = this.inner.completeAuthWithBundle({\n      bundle,\n      orgId,\n      connectedEventName: \"connectedOauth\",\n      authenticatingType: \"oauth\",\n      idToken,\n    });\n\n    this.emitNewUserEvent(isNewUser);\n\n    return user;\n  };\n\n  private getExpirationSeconds = () =>\n    Math.floor(this.sessionManager.expirationTimeMs / 1000);\n\n  private registerListeners = () => {\n    // Declare listeners in an object to typecheck that every event type is\n    // handled.\n    const listeners: SessionManagerEvents = {\n      connected: (session) => {\n        this.store.setState({\n          user: session.user,\n          status: AlchemySignerStatus.CONNECTED,\n          error: null,\n        });\n      },\n      disconnected: () => {\n        this.store.setState({\n          user: null,\n          status: AlchemySignerStatus.DISCONNECTED,\n        });\n      },\n      initialized: () => {\n        this.store.setState((state) => ({\n          status: state.user\n            ? AlchemySignerStatus.CONNECTED\n            : AlchemySignerStatus.DISCONNECTED,\n          ...(state.user ? { error: null } : undefined),\n        }));\n      },\n    };\n\n    for (const [event, listener] of Object.entries(listeners)) {\n      this.sessionManager.on(event as keyof SessionManagerEvents, listener);\n    }\n\n    this.inner.on(\"authenticating\", ({ type }) => {\n      const status = (() => {\n        switch (type) {\n          case \"email\":\n            return AlchemySignerStatus.AUTHENTICATING_EMAIL;\n          case \"passkey\":\n            return AlchemySignerStatus.AUTHENTICATING_PASSKEY;\n          case \"oauth\":\n            return AlchemySignerStatus.AUTHENTICATING_OAUTH;\n          case \"otp\":\n          case \"otpVerify\":\n            return AlchemySignerStatus.AWAITING_OTP_AUTH;\n          default:\n            assertNever(type, \"unhandled authenticating type\");\n        }\n      })();\n\n      // trigger new user event on signer from client\n      this.inner.on(\"newUserSignup\", () => {\n        this.emitNewUserEvent(true);\n      });\n\n      this.store.setState({\n        status,\n        error: null,\n      });\n    });\n  };\n\n  private emitNewUserEvent = (isNewUser?: boolean) => {\n    // assumes that if isNewUser is undefined it is a returning user\n    if (isNewUser) this.store.setState({ isNewUser });\n  };\n\n  protected initConfig = async (): Promise<SignerConfig> => {\n    this.config = this.fetchConfig();\n    return this.config;\n  };\n\n  /**\n   * Returns the signer configuration while fetching it if it's not already initialized.\n   *\n   * @returns {Promise<SignerConfig>} A promise that resolves to the signer configuration\n   */\n  public getConfig = async (): Promise<SignerConfig> => {\n    if (!this.config) {\n      return this.initConfig();\n    }\n\n    return this.config;\n  };\n\n  protected fetchConfig = async (): Promise<SignerConfig> => {\n    return this.inner.request(\"/v1/signer-config\", {});\n  };\n}\n\nfunction toErrorInfo(error: unknown): ErrorInfo {\n  return error instanceof Error\n    ? { name: error.name, message: error.message }\n    : { name: \"Error\", message: \"Unknown error\" };\n}\n"]}
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../src/base.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAkC,MAAM,cAAc,CAAC;AACzE,OAAO,EACL,WAAW,EACX,aAAa,EACb,SAAS,EACT,oBAAoB,GAWrB,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAsB,MAAM,mBAAmB,CAAC;AAE1E,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAG9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EACL,cAAc,GAEf,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EACL,mBAAmB,GAIpB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAmCxD;;;GAGG;AACH,MAAM,OAAgB,iBAAiB;IASrC;;;;;;;;;OASG;IACH,YAAY,EACV,MAAM,EACN,aAAa,EACb,YAAY,GACqB;QApBnC;;;;mBAAqD,gBAAgB;WAAC;QACtE;;;;;WAAe;QACP;;;;;WAA+B;QAC/B;;;;;WAAqB;QACrB;;;;;WAA8B;QA0CtC;;;;;;WAMG;QACH;;;;mBAAK,CACH,KAAQ,EACR,QAAgC,EAChC,EAAE;gBACF,+FAA+F;gBAC/F,gGAAgG;gBAChG,0GAA0G;gBAC1G,QAAQ,KAAK,EAAE,CAAC;oBACd,KAAK,WAAW;wBACd,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CACzB,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,EACtB,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,KAAK,mBAAmB,CAAC,SAAS;4BACvC,QAA6C,CAC5C,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAK,CAC5B,EACH,EAAE,eAAe,EAAE,IAAI,EAAE,CAC1B,CAAC;oBACJ,KAAK,cAAc;wBACjB,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CACzB,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,EACtB,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,KAAK,mBAAmB,CAAC,YAAY;4BAC1C,QAAgD,EAAE,EACrD,EAAE,eAAe,EAAE,IAAI,EAAE,CAC1B,CAAC;oBACJ,KAAK,eAAe;wBAClB,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CACzB,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,EACtB,QAAgD,EAChD,EAAE,eAAe,EAAE,IAAI,EAAE,CAC1B,CAAC;oBACJ,KAAK,cAAc;wBACjB,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CACzB,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,EACpB,CAAC,KAAK,EAAE,EAAE,CACP,QAAgD,CAC/C,KAAK,IAAI,SAAS,CACnB,EACH,EAAE,eAAe,EAAE,IAAI,EAAE,CAC1B,CAAC;oBACJ,KAAK,eAAe;wBAClB,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CACzB,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,SAAS,EAC5B,CAAC,SAAS,EAAE,EAAE;4BACZ,IAAI,SAAS;gCAAG,QAAiD,EAAE,CAAC;wBACtE,CAAC,EACD,EAAE,eAAe,EAAE,IAAI,EAAE,CAC1B,CAAC;oBACJ;wBACE,WAAW,CAAC,KAAK,EAAE,sBAAsB,KAAK,EAAE,CAAC,CAAC;gBACtD,CAAC;YACH,CAAC;WAAC;QAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA4BG;QACH;;;;mBAAoB,GAAyB,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE;WAAC;QAEvE;;;;;;;;;;;;;;;;;;;;;;;;;;WA0BG;QACH;;;;mBAAsD,YAAY,CAAC,QAAQ,CACzE,gCAAgC,EAChC,KAAK,EAAE,MAAM,EAAE,EAAE;gBACf,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;gBACxB,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE;oBACnB,QAAQ,IAAI,EAAE,CAAC;wBACb,KAAK,OAAO;4BACV,OAAO,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;wBAC5C,KAAK,SAAS;4BACZ,OAAO,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;wBAC9C,KAAK,OAAO;4BACV,OAAO,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;wBAC5C,KAAK,aAAa;4BAChB,OAAO,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;wBACxC,KAAK,KAAK;4BACR,OAAO,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;wBAC1C,KAAK,YAAY;4BACf,OAAO,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;wBAC1C;4BACE,WAAW,CAAC,IAAI,EAAE,sBAAsB,IAAI,EAAE,CAAC,CAAC;oBACpD,CAAC;gBACH,CAAC,CAAC,EAAE,CAAC;gBAEL,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;gBAEnC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;oBAC5B;;;;;uBAKG;oBACH,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;wBAClB,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC;wBACzB,GAAG,CAAC,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,OAAO;4BAC5C,CAAC,CAAC,EAAE;4BACJ,CAAC,CAAC,EAAE,MAAM,EAAE,mBAAmB,CAAC,YAAY,EAAE,CAAC;qBAClD,CAAC,CAAC;oBACH,MAAM,KAAK,CAAC;gBACd,CAAC,CAAC,CAAC;YACL,CAAC,CACF;WAAC;QAEM;;;;mBAAwB,CAAC,MAAkB,EAAE,EAAE;gBACrD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;gBACxB,QAAQ,IAAI,EAAE,CAAC;oBACb,KAAK,OAAO,CAAC,CAAC,CAAC;wBACb,gDAAgD;wBAChD,IAAI,QAAQ,IAAI,MAAM;4BAAE,OAAO;wBAC/B,YAAY,CAAC,UAAU,CAAC;4BACtB,IAAI,EAAE,oBAAoB;4BAC1B,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE;yBAC5B,CAAC,CAAC;wBACH,OAAO;oBACT,CAAC;oBACD,KAAK,SAAS,CAAC,CAAC,CAAC;wBACf,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC;wBAChE,YAAY,CAAC,UAAU,CAAC;4BACtB,IAAI,EAAE,oBAAoB;4BAC1B,IAAI,EAAE;gCACJ,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,eAAe;6BACpD;yBACF,CAAC,CAAC;wBACH,OAAO;oBACT,CAAC;oBACD,KAAK,YAAY,CAAC,CAAC,CAAC;wBAClB,YAAY,CAAC,UAAU,CAAC;4BACtB,IAAI,EAAE,oBAAoB;4BAC1B,IAAI,EAAE;gCACJ,QAAQ,EAAE,YAAY;gCACtB,QAAQ,EAAE,MAAM,CAAC,cAAc;6BAChC;yBACF,CAAC,CAAC;wBACH,OAAO;oBACT,CAAC;oBACD,KAAK,OAAO;wBACV,YAAY,CAAC,UAAU,CAAC;4BACtB,IAAI,EAAE,oBAAoB;4BAC1B,IAAI,EAAE;gCACJ,QAAQ,EAAE,OAAO;gCACjB,QAAQ,EAAE,MAAM,CAAC,cAAc;6BAChC;yBACF,CAAC,CAAC;wBACH,MAAM;oBACR,KAAK,aAAa;wBAChB,MAAM;oBACR,KAAK,KAAK;wBACR,YAAY,CAAC,UAAU,CAAC;4BACtB,IAAI,EAAE,oBAAoB;4BAC1B,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;yBAC1B,CAAC,CAAC;wBACH,MAAM;oBACR;wBACE,WAAW,CAAC,IAAI,EAAE,sBAAsB,IAAI,EAAE,CAAC,CAAC;gBACpD,CAAC;YACH,CAAC;WAAC;QAEF;;;;;;;;;;;;;;;;;;;;;;WAsBG;QACH;;;;mBAAkC,KAAK,IAAI,EAAE;gBAC3C,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;YAChC,CAAC;WAAC;QAEF;;;;;;;;;;;;;;;;;;;;;;;;;;WA0BG;QACH;;;;mBAAiB,KAAK,IAAmB,EAAE;gBACzC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,CAAC;gBAC/D,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;oBACxB,OAAO,WAAW,CAAC;gBACrB,CAAC;gBAED,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAC7B,CAAC;WAAC;QAEF;;;;WAIG;QACH;;;;mBAA2C,YAAY,CAAC,QAAQ,CAC9D,8BAA8B,EAC9B,KAAK,IAAI,EAAE;gBACT,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAE9C,OAAO,OAAO,CAAC;YACjB,CAAC,CACF;WAAC;QAEF;;;;;;;;;;;;;;;;;;;;;;;WAuBG;QACH;;;;mBACE,YAAY,CAAC,QAAQ,CAAC,+BAA+B,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;gBACnE,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;gBAErC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;gBAE5D,YAAY,CAAC,UAAU,CAAC;oBACtB,IAAI,EAAE,qBAAqB;iBAC5B,CAAC,CAAC;gBAEH,OAAO,MAAM,CAAC;YAChB,CAAC,CAAC;WAAC;QAEL;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA4BG;QACH;;;;mBAKoB,YAAY,CAAC,QAAQ,CACvC,iCAAiC,EACjC,KAAK,EAAE,MAAM,EAAE,EAAE;gBACf,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;gBAE1C,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;YAChD,CAAC,CACF;WAAC;QAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA6BG;QACH;;;;mBAiBI,YAAY,CAAC,QAAQ,CACvB,mCAAmC,EACnC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;gBACjB,MAAM,WAAW,GAAG,IAAI,EAAE,UAAU,IAAI,oBAAoB,CAAC;gBAC7D,MAAM,YAAY,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;gBACrC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAClD,SAAS,CAAC,YAAY,CAAC,CACxB,CAAC;gBAEF,MAAM,SAAS,GAAG,IAAI,CAAC,yBAAyB,CAAC,YAAY,CAAC,CAAC;gBAE/D,OAAO,WAAW,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YACpC,CAAC,CACF;WAAC;QAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;WA2BG;QACH;;;;mBAE4C,YAAY,CAAC,QAAQ,CAC/D,qCAAqC,EACrC,KAAK,EAAE,qBAAqB,EAAE,EAAE;gBAC9B,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,qBAAqB,CAAC,CAAC;gBACrE,MAAM,sBAAsB,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAC5D,mBAAmB,CACpB,CAAC;gBACF,MAAM,SAAS,GAAG,IAAI,CAAC,yBAAyB,CAAC,sBAAsB,CAAC,CAAC;gBACzE,OAAO,EAAE,GAAG,qBAAqB,EAAE,GAAG,SAAS,EAAE,CAAC;YACpD,CAAC,CACF;WAAC;QAEM;;;;mBAA4B,CAClC,GAAkB,EACC,EAAE;gBACrB,OAAO;oBACL,CAAC,EAAE,SAAS,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;oBAChC,CAAC,EAAE,SAAS,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;oBAC5C,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;iBACpD,CAAC;YACJ,CAAC;WAAC;QAEF;;;;;;;;;;;;;;;;;;;;;;;WAuBG;QACH;;;;mBACE,YAAY,CAAC,QAAQ,CAAC,2BAA2B,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;gBACjE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;gBAEzD,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;oBACzB,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,OAAO;oBACL,KAAK,EAAE,MAAM,CAAC,KAAK;iBACpB,CAAC;YACJ,CAAC,CAAC;WAAC;QAEL;;;;;;;;;;;;;;;;;;;;;;;WAuBG;QACH;;;;mBACE,YAAY,CAAC,QAAQ,CAAC,8BAA8B,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBACrE,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YAC7C,CAAC,CAAC;WAAC;QAEL;;;;;;;;;;;;;;;;;;;;;;;;;;WA0BG;QACH;;;;mBAEwB,KAAK,EAAE,MAAM,EAAE,EAAE;gBACvC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YACzC,CAAC;WAAC;QAEF;;;;;;;;;;;;;;;;;;;;;;;;WAwBG;QACH;;;;mBAAgB,GAAiB,EAAE;gBACjC,+EAA+E;gBAC/E,0DAA0D;gBAC1D,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;oBAC1B,MAAM,IAAI,qBAAqB,EAAE,CAAC;gBACpC,CAAC;gBAED,OAAO,SAAS,CAAC;oBACf,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAG,CAAC,OAAO;oBACtC,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;oBACnD,aAAa,EAAE,CAIb,mBAAgE,EAChE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAyB,mBAAmB,CAAC;oBACpE,eAAe,EAAE,IAAI,CAAC,eAAe;iBACtC,CAAC,CAAC;YACL,CAAC;WAAC;QAEF;;;;;;;;;;;;;;;;;;;;;;;WAuBG;QACH;;;;mBAA8B,GAAiB,EAAE;gBAC/C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;oBAC1B,MAAM,IAAI,qBAAqB,EAAE,CAAC;gBACpC,CAAC;gBAED,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtC,CAAC;WAAC;QAEM;;;;mBAAwB,KAAK,EACnC,MAA8C,EAC/B,EAAE;gBACjB,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;oBACtB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACtD,MAAM,iBAAiB,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;oBAEtD,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY;wBACnC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;4BAC7B,KAAK,EAAE,MAAM,CAAC,KAAK;4BACnB,SAAS,EAAE,MAAM,CAAC,SAAS;4BAC3B,iBAAiB;4BACjB,cAAc,EAAE,MAAM,CAAC,cAAc;yBACtC,CAAC;wBACJ,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;4BAC7B,IAAI,EAAE,OAAO;4BACb,KAAK,EAAE,MAAM,CAAC,KAAK;4BACnB,SAAS,EAAE,MAAM,CAAC,SAAS;4BAC3B,iBAAiB;4BACjB,cAAc,EAAE,MAAM,CAAC,cAAc;yBACtC,CAAC,CAAC;oBAEP,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC;wBACtC,KAAK;wBACL,SAAS,EAAE,CAAC,YAAY;qBACzB,CAAC,CAAC;oBACH,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;wBAClB,MAAM,EAAE,mBAAmB,CAAC,mBAAmB;wBAC/C,KAAK;wBACL,KAAK,EAAE,IAAI;qBACZ,CAAC,CAAC;oBAEH,+DAA+D;oBAC/D,mCAAmC;oBACnC,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;wBACnC,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,EAAE,CAC3C,WAAW,EACX,CAAC,OAAO,EAAE,EAAE;4BACV,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;4BACtB,cAAc,EAAE,CAAC;wBACnB,CAAC,CACF,CAAC;oBACJ,CAAC,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,MAAM,gBAAgB,GAAG,MAAM,CAAC,KAAK;wBACnC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE;wBACzB,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,mBAAmB,EAAE,CAAC;oBAE9C,IAAI,CAAC,gBAAgB,EAAE,CAAC;wBACtB,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;4BAClB,MAAM,EAAE,mBAAmB,CAAC,YAAY;yBACzC,CAAC,CAAC;wBACH,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;oBAC7D,CAAC;oBAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC;wBACnD,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,KAAK,EAAE,gBAAgB,CAAC,KAAK;wBAC7B,kBAAkB,EAAE,gBAAgB;wBACpC,kBAAkB,EAAE,OAAO;qBAC5B,CAAC,CAAC;oBAEH,sBAAsB;oBACtB,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAExC,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;WAAC;QAEM;;;;mBAA0B,KAAK,EACrC,IAA8C,EAC/B,EAAE;gBACjB,IAAI,IAAU,CAAC;gBACf,MAAM,eAAe,GAAG,KAAK,IAAI,EAAE;oBACjC,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;wBACpB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;wBACpD,OAAO,YAAY,IAAI,IAAI,CAAC;oBAC9B,CAAC;oBAED,OAAO,IAAI,CAAC,SAAS,CAAC;gBACxB,CAAC,CAAC;gBAEF,IAAI,MAAM,eAAe,EAAE,EAAE,CAAC;oBAC5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAC3C,IAGC,CACF,CAAC;oBACF,gFAAgF;oBAChF,6BAA6B;oBAC7B,IAAI,GAAG;wBACL,OAAO,EAAE,MAAM,CAAC,OAAQ;wBACxB,MAAM,EAAE,MAAM,CAAC,MAAO;wBACtB,KAAK,EAAE,MAAM,CAAC,KAAK;qBACpB,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,EAAE,CAAC;oBAChD,IAAI,CAAC,IAAI,EAAE,CAAC;wBACV,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;4BAClB,MAAM,EAAE,mBAAmB,CAAC,YAAY;yBACzC,CAAC,CAAC;wBACH,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;oBACnC,CAAC;gBACH,CAAC;gBAED,OAAO,IAAI,CAAC;YACd,CAAC;WAAC;QAEM;;;;mBAAwB,KAAK,EACnC,IAA4C,EAC7B,EAAE;gBACjB,MAAM,MAAM,GAAgB;oBAC1B,GAAG,IAAI;oBACP,iBAAiB,EAAE,IAAI,CAAC,oBAAoB,EAAE;iBAC/C,CAAC;gBACF,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;gBAC9C,CAAC;qBAAM,CAAC;oBACN,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;WAAC;QAEM;;;;mBAAsB,KAAK,EACjC,IAAiD,EAClC,EAAE;gBACjB,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;oBACvE,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,YAAY,EAAE,IAAI,CAAC,cAAc;iBAClC,CAAC,CAAC;gBAEH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC;oBACnD,MAAM,EAAE,gBAAgB;oBACxB,KAAK,EAAE,KAAK;oBACZ,kBAAkB,EAAE,cAAc;oBAClC,kBAAkB,EAAE,YAAY;iBACjC,CAAC,CAAC;gBAEH,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBAChC,OAAO,IAAI,CAAC;YACd,CAAC;WAAC;QAEM;;;;mBAAsB,KAAK,EACjC,IAA0C,EAC3B,EAAE;gBACjB,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,mBAAmB,EAAE,CAAC;gBAC9D,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,WAAW,IAAI,EAAE,CAAC;gBAC/C,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACxC,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBAChD,CAAC;gBACD,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBAChD,CAAC;gBACD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;oBAChD,KAAK;oBACL,KAAK;oBACL,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,iBAAiB,EAAE,IAAI,CAAC,oBAAoB,EAAE;iBAC/C,CAAC,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC;oBACnD,MAAM;oBACN,KAAK;oBACL,kBAAkB,EAAE,cAAc;oBAClC,kBAAkB,EAAE,KAAK;iBAC1B,CAAC,CAAC;gBAEH,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;gBACjC,IAAI,WAAW,EAAE,CAAC;oBAChB,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC;wBACtC,GAAG,WAAW;wBACd,SAAS,EAAE,KAAK;qBACjB,CAAC,CAAC;gBACL,CAAC;gBAED,OAAO,IAAI,CAAC;YACd,CAAC;WAAC;QAEM;;;;mBAAoB,CAAC,EAC3B,MAAM,EACN,KAAK,EACL,OAAO,EACP,SAAS,GACoC,EAAiB,EAAE;gBAChE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC;oBAC7C,MAAM;oBACN,KAAK;oBACL,kBAAkB,EAAE,gBAAgB;oBACpC,kBAAkB,EAAE,OAAO;oBAC3B,OAAO;iBACR,CAAC,CAAC;gBAEH,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;gBAEjC,OAAO,IAAI,CAAC;YACd,CAAC;WAAC;QAEM;;;;mBAAuB,GAAG,EAAE,CAClC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,gBAAgB,GAAG,IAAI,CAAC;WAAC;QAElD;;;;mBAAoB,GAAG,EAAE;gBAC/B,uEAAuE;gBACvE,WAAW;gBACX,MAAM,SAAS,GAAyB;oBACtC,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE;wBACrB,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;4BAClB,IAAI,EAAE,OAAO,CAAC,IAAI;4BAClB,MAAM,EAAE,mBAAmB,CAAC,SAAS;4BACrC,KAAK,EAAE,IAAI;yBACZ,CAAC,CAAC;oBACL,CAAC;oBACD,YAAY,EAAE,GAAG,EAAE;wBACjB,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;4BAClB,IAAI,EAAE,IAAI;4BACV,MAAM,EAAE,mBAAmB,CAAC,YAAY;yBACzC,CAAC,CAAC;oBACL,CAAC;oBACD,WAAW,EAAE,GAAG,EAAE;wBAChB,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;4BAC9B,MAAM,EAAE,KAAK,CAAC,IAAI;gCAChB,CAAC,CAAC,mBAAmB,CAAC,SAAS;gCAC/B,CAAC,CAAC,mBAAmB,CAAC,YAAY;4BACpC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;yBAC9C,CAAC,CAAC,CAAC;oBACN,CAAC;iBACF,CAAC;gBAEF,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC1D,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,KAAmC,EAAE,QAAQ,CAAC,CAAC;gBACxE,CAAC;gBAED,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,gBAAgB,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE;oBAC3C,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE;wBACnB,QAAQ,IAAI,EAAE,CAAC;4BACb,KAAK,OAAO;gCACV,OAAO,mBAAmB,CAAC,oBAAoB,CAAC;4BAClD,KAAK,SAAS;gCACZ,OAAO,mBAAmB,CAAC,sBAAsB,CAAC;4BACpD,KAAK,OAAO;gCACV,OAAO,mBAAmB,CAAC,oBAAoB,CAAC;4BAClD,KAAK,KAAK,CAAC;4BACX,KAAK,WAAW;gCACd,OAAO,mBAAmB,CAAC,iBAAiB,CAAC;4BAC/C,KAAK,YAAY;gCACf,OAAO,mBAAmB,CAAC,kBAAkB,CAAC;4BAChD;gCACE,WAAW,CAAC,IAAI,EAAE,+BAA+B,CAAC,CAAC;wBACvD,CAAC;oBACH,CAAC,CAAC,EAAE,CAAC;oBAEL,+CAA+C;oBAC/C,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,EAAE,GAAG,EAAE;wBAClC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;oBAC9B,CAAC,CAAC,CAAC;oBAEH,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;wBAClB,MAAM;wBACN,KAAK,EAAE,IAAI;qBACZ,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC;WAAC;QAEM;;;;mBAAmB,CAAC,SAAmB,EAAE,EAAE;gBACjD,gEAAgE;gBAChE,IAAI,SAAS;oBAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;YACpD,CAAC;WAAC;QAEQ;;;;mBAAa,KAAK,IAA2B,EAAE;gBACvD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjC,OAAO,IAAI,CAAC,MAAM,CAAC;YACrB,CAAC;WAAC;QAEF;;;;WAIG;QACI;;;;mBAAY,KAAK,IAA2B,EAAE;gBACnD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;oBACjB,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC3B,CAAC;gBAED,OAAO,IAAI,CAAC,MAAM,CAAC;YACrB,CAAC;WAAC;QAEQ;;;;mBAAc,KAAK,IAA2B,EAAE;gBACxD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;YACrD,CAAC;WAAC;QA/8BA,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC;QACpB,IAAI,CAAC,KAAK,GAAG,WAAW,CACtB,qBAAqB,CACnB,GAAG,EAAE,CACH,CAAC;YACC,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,mBAAmB,CAAC,YAAY;YACxC,KAAK,EAAE,YAAY,IAAI,IAAI;SACC,CAAC,CAClC,CACF,CAAC;QACF,+DAA+D;QAC/D,oEAAoE;QACpE,2BAA2B;QAC3B,IAAI,CAAC,cAAc,GAAG,IAAI,cAAc,CAAC;YACvC,GAAG,aAAa;YAChB,MAAM,EAAE,IAAI,CAAC,KAAK;SACnB,CAAC,CAAC;QACH,2BAA2B;QAC3B,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,oDAAoD;QACpD,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACnC,CAAC;CAy7BF;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK;QAC3B,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;QAC9C,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;AAClD,CAAC","sourcesContent":["import { takeBytes, type SmartAccountAuthenticator } from \"@aa-sdk/core\";\nimport {\n  hashMessage,\n  hashTypedData,\n  keccak256,\n  serializeTransaction,\n  type GetTransactionType,\n  type Hex,\n  type IsNarrowable,\n  type LocalAccount,\n  type SerializeTransactionFn,\n  type SignableMessage,\n  type TransactionSerializable,\n  type TransactionSerialized,\n  type TypedData,\n  type TypedDataDefinition,\n} from \"viem\";\nimport { toAccount } from \"viem/accounts\";\nimport { hashAuthorization, type Authorization } from \"viem/experimental\";\nimport type { Mutate, StoreApi } from \"zustand\";\nimport { subscribeWithSelector } from \"zustand/middleware\";\nimport { createStore } from \"zustand/vanilla\";\nimport type { BaseSignerClient } from \"./client/base\";\nimport type { OauthConfig, OauthParams, User } from \"./client/types\";\nimport { NotAuthenticatedError } from \"./errors.js\";\nimport { SignerLogger } from \"./metrics.js\";\nimport {\n  SessionManager,\n  type SessionManagerParams,\n} from \"./session/manager.js\";\nimport type { SessionManagerEvents } from \"./session/types\";\nimport type { AuthParams } from \"./signer\";\nimport { SolanaSigner } from \"./solanaSigner.js\";\nimport {\n  AlchemySignerStatus,\n  type AlchemySignerEvent,\n  type AlchemySignerEvents,\n  type ErrorInfo,\n} from \"./types.js\";\nimport { assertNever } from \"./utils/typeAssertions.js\";\n\nexport interface BaseAlchemySignerParams<TClient extends BaseSignerClient> {\n  client: TClient;\n  sessionConfig?: Omit<SessionManagerParams, \"client\">;\n  initialError?: ErrorInfo;\n}\n\ntype AlchemySignerStore = {\n  user: User | null;\n  status: AlchemySignerStatus;\n  error: ErrorInfo | null;\n  otpId?: string;\n  isNewUser?: boolean;\n};\n\ntype UnpackedSignature = {\n  r: `0x${string}`;\n  s: `0x${string}`;\n  v: bigint;\n};\n\ntype InternalStore = Mutate<\n  StoreApi<AlchemySignerStore>,\n  [[\"zustand/subscribeWithSelector\", never]]\n>;\n\nexport type EmailConfig = {\n  mode?: \"MAGIC_LINK\" | \"OTP\";\n};\n\nexport type SignerConfig = {\n  email: EmailConfig;\n};\n\n/**\n * Base abstract class for Alchemy Signer, providing authentication and session management for smart accounts.\n * Implements the `SmartAccountAuthenticator` interface and handles various signer events.\n */\nexport abstract class BaseAlchemySigner<TClient extends BaseSignerClient>\n  implements SmartAccountAuthenticator<AuthParams, User, TClient>\n{\n  signerType: \"alchemy-signer\" | \"rn-alchemy-signer\" = \"alchemy-signer\";\n  inner: TClient;\n  private sessionManager: SessionManager;\n  private store: InternalStore;\n  private config: Promise<SignerConfig>;\n\n  /**\n   * Initializes an instance with the provided client and session configuration.\n   * This function sets up the internal store, initializes the session manager,\n   * registers listeners and initializes the session manager to manage session state.\n   *\n   * @param {BaseAlchemySignerParams<TClient>} param0 Object containing the client and session configuration\n   * @param {TClient} param0.client The client instance to be used internally\n   * @param {SessionConfig} param0.sessionConfig Configuration for managing sessions\n   * @param {ErrorInfo | undefined} param0.initialError Error already present on the signer when initialized, if any\n   */\n  constructor({\n    client,\n    sessionConfig,\n    initialError,\n  }: BaseAlchemySignerParams<TClient>) {\n    this.inner = client;\n    this.store = createStore(\n      subscribeWithSelector(\n        () =>\n          ({\n            user: null,\n            status: AlchemySignerStatus.INITIALIZING,\n            error: initialError ?? null,\n          } satisfies AlchemySignerStore)\n      )\n    );\n    // NOTE: it's important that the session manager share a client\n    // with the signer. The SessionManager leverages the Signer's client\n    // to manage session state.\n    this.sessionManager = new SessionManager({\n      ...sessionConfig,\n      client: this.inner,\n    });\n    // register listeners first\n    this.registerListeners();\n    // then initialize so that we can catch those events\n    this.sessionManager.initialize();\n    this.config = this.fetchConfig();\n  }\n\n  /**\n   * Allows you to subscribe to events emitted by the signer\n   *\n   * @param {AlchemySignerEvent} event the event to subscribe to\n   * @param {AlchemySignerEvents[AlchemySignerEvent]} listener the function to run when the event is emitted\n   * @returns {() => void} a function to remove the listener\n   */\n  on = <E extends AlchemySignerEvent>(\n    event: E,\n    listener: AlchemySignerEvents[E]\n  ) => {\n    // NOTE: we're using zustand here to handle this because we are able to use the fireImmediately\n    // option which deals with a possible race condition where the listener is added after the event\n    // is fired. In the Client and SessionManager we use EventEmitter because it's easier to handle internally\n    switch (event) {\n      case \"connected\":\n        return this.store.subscribe(\n          ({ status }) => status,\n          (status) =>\n            status === AlchemySignerStatus.CONNECTED &&\n            (listener as AlchemySignerEvents[\"connected\"])(\n              this.store.getState().user!\n            ),\n          { fireImmediately: true }\n        );\n      case \"disconnected\":\n        return this.store.subscribe(\n          ({ status }) => status,\n          (status) =>\n            status === AlchemySignerStatus.DISCONNECTED &&\n            (listener as AlchemySignerEvents[\"disconnected\"])(),\n          { fireImmediately: true }\n        );\n      case \"statusChanged\":\n        return this.store.subscribe(\n          ({ status }) => status,\n          listener as AlchemySignerEvents[\"statusChanged\"],\n          { fireImmediately: true }\n        );\n      case \"errorChanged\":\n        return this.store.subscribe(\n          ({ error }) => error,\n          (error) =>\n            (listener as AlchemySignerEvents[\"errorChanged\"])(\n              error ?? undefined\n            ),\n          { fireImmediately: true }\n        );\n      case \"newUserSignup\":\n        return this.store.subscribe(\n          ({ isNewUser }) => isNewUser,\n          (isNewUser) => {\n            if (isNewUser) (listener as AlchemySignerEvents[\"newUserSignup\"])();\n          },\n          { fireImmediately: true }\n        );\n      default:\n        assertNever(event, `Unknown event type ${event}`);\n    }\n  };\n\n  /**\n   * Prepares the config needed to use popup-based OAuth login. This must be\n   * called before calling `.authenticate` with params `{ type: \"oauth\", mode:\n   * \"popup\" }`, and is recommended to be called on page load.\n   *\n   * This method exists because browsers may prevent popups from opening unless\n   * triggered by user interaction, and so the OAuth config must already have\n   * been fetched at the time a user clicks a social login button.\n   *\n   * @example\n   * ```ts\n   * import { AlchemyWebSigner } from \"@account-kit/signer\";\n   *\n   * const signer = new AlchemyWebSigner({\n   *  client: {\n   *    connection: {\n   *      rpcUrl: \"/api/rpc\",\n   *    },\n   *    iframeConfig: {\n   *      iframeContainerId: \"alchemy-signer-iframe-container\",\n   *    },\n   *  },\n   * });\n   *\n   * await signer.preparePopupOauth();\n   * ```\n   * @returns {Promise<OauthConfig>} the config which must be loaded before\n   * using popup-based OAuth\n   */\n  preparePopupOauth = (): Promise<OauthConfig> => this.inner.initOauth();\n\n  /**\n   * Authenticate a user with either an email or a passkey and create a session for that user\n   *\n   * @example\n   * ```ts\n   * import { AlchemyWebSigner } from \"@account-kit/signer\";\n   *\n   * const signer = new AlchemyWebSigner({\n   *  client: {\n   *    connection: {\n   *      rpcUrl: \"/api/rpc\",\n   *    },\n   *    iframeConfig: {\n   *      iframeContainerId: \"alchemy-signer-iframe-container\",\n   *    },\n   *  },\n   * });\n   *\n   * const result = await signer.authenticate({\n   *  type: \"email\",\n   *  email: \"foo@mail.com\",\n   * });\n   * ```\n   *\n   * @param {AuthParams} params - undefined if passkey login, otherwise an object with email and bundle to resolve\n   * @returns {Promise<User>} the user that was authenticated\n   */\n  authenticate: (params: AuthParams) => Promise<User> = SignerLogger.profiled(\n    \"BaseAlchemySigner.authenticate\",\n    async (params) => {\n      const { type } = params;\n      const result = (() => {\n        switch (type) {\n          case \"email\":\n            return this.authenticateWithEmail(params);\n          case \"passkey\":\n            return this.authenticateWithPasskey(params);\n          case \"oauth\":\n            return this.authenticateWithOauth(params);\n          case \"oauthReturn\":\n            return this.handleOauthReturn(params);\n          case \"otp\":\n            return this.authenticateWithOtp(params);\n          case \"custom-jwt\":\n            return this.authenticateWithJwt(params);\n          default:\n            assertNever(type, `Unknown auth type: ${type}`);\n        }\n      })();\n\n      this.trackAuthenticateType(params);\n\n      return result.catch((error) => {\n        /**\n         * 2 things going on here:\n         * 1. for oauth flows we expect the status to remain in authenticating\n         * 2. we do the ternary, because if we explicitly pass in `undefined` for the status, zustand will set the value of status to `undefined`.\n         * However, if we omit it, then it will not override the current value of status.\n         */\n        this.store.setState({\n          error: toErrorInfo(error),\n          ...(type === \"oauthReturn\" || type === \"oauth\"\n            ? {}\n            : { status: AlchemySignerStatus.DISCONNECTED }),\n        });\n        throw error;\n      });\n    }\n  );\n\n  private trackAuthenticateType = (params: AuthParams) => {\n    const { type } = params;\n    switch (type) {\n      case \"email\": {\n        // we just want to track the start of email auth\n        if (\"bundle\" in params) return;\n        SignerLogger.trackEvent({\n          name: \"signer_authnticate\",\n          data: { authType: \"email\" },\n        });\n        return;\n      }\n      case \"passkey\": {\n        const isAnon = !(\"email\" in params) && params.createNew == null;\n        SignerLogger.trackEvent({\n          name: \"signer_authnticate\",\n          data: {\n            authType: isAnon ? \"passkey_anon\" : \"passkey_email\",\n          },\n        });\n        return;\n      }\n      case \"custom-jwt\": {\n        SignerLogger.trackEvent({\n          name: \"signer_authnticate\",\n          data: {\n            authType: \"custom-jwt\",\n            provider: params.authProviderId,\n          },\n        });\n        return;\n      }\n      case \"oauth\":\n        SignerLogger.trackEvent({\n          name: \"signer_authnticate\",\n          data: {\n            authType: \"oauth\",\n            provider: params.authProviderId,\n          },\n        });\n        break;\n      case \"oauthReturn\":\n        break;\n      case \"otp\":\n        SignerLogger.trackEvent({\n          name: \"signer_authnticate\",\n          data: { authType: \"otp\" },\n        });\n        break;\n      default:\n        assertNever(type, `Unknown auth type: ${type}`);\n    }\n  };\n\n  /**\n   * Clear a user session and log them out\n   *\n   * @example\n   * ```ts\n   * import { AlchemyWebSigner } from \"@account-kit/signer\";\n   *\n   * const signer = new AlchemyWebSigner({\n   *  client: {\n   *    connection: {\n   *      rpcUrl: \"/api/rpc\",\n   *    },\n   *    iframeConfig: {\n   *      iframeContainerId: \"alchemy-signer-iframe-container\",\n   *    },\n   *  },\n   * });\n   *\n   * await signer.disconnect();\n   * ```\n   *\n   * @returns {Promise<void>} a promise that resolves when the user is logged out\n   */\n  disconnect: () => Promise<void> = async () => {\n    await this.inner.disconnect();\n  };\n\n  /**\n   * Gets the current logged in user\n   * If a user has an ongoing session, it will use that session and\n   * try to authenticate\n   *\n   * @example\n   * ```ts\n   * import { AlchemyWebSigner } from \"@account-kit/signer\";\n   *\n   * const signer = new AlchemyWebSigner({\n   *  client: {\n   *    connection: {\n   *      rpcUrl: \"/api/rpc\",\n   *    },\n   *    iframeConfig: {\n   *      iframeContainerId: \"alchemy-signer-iframe-container\",\n   *    },\n   *  },\n   * });\n   *\n   * // throws if not logged in\n   * const user = await signer.getAuthDetails();\n   * ```\n   *\n   * @throws if there is no user logged in\n   * @returns {Promise<User>} the current user\n   */\n  getAuthDetails = async (): Promise<User> => {\n    const sessionUser = await this.sessionManager.getSessionUser();\n    if (sessionUser != null) {\n      return sessionUser;\n    }\n\n    return this.inner.whoami();\n  };\n\n  /**\n   * Retrieves the address of the current user by calling the `whoami` method on `this.inner`.\n   *\n   * @returns {Promise<string>} A promise that resolves to the address of the current user.\n   */\n  getAddress: () => Promise<`0x${string}`> = SignerLogger.profiled(\n    \"BaseAlchemySigner.getAddress\",\n    async () => {\n      const { address } = await this.inner.whoami();\n\n      return address;\n    }\n  );\n\n  /**\n   * Signs a raw message after hashing it.\n   *\n   * @example\n   * ```ts\n   * import { AlchemyWebSigner } from \"@account-kit/signer\";\n   *\n   * const signer = new AlchemyWebSigner({\n   *  client: {\n   *    connection: {\n   *      rpcUrl: \"/api/rpc\",\n   *    },\n   *    iframeConfig: {\n   *      iframeContainerId: \"alchemy-signer-iframe-container\",\n   *    },\n   *  },\n   * });\n   *\n   * const signature = await signer.signMessage(\"Hello, world!\");\n   * ```\n   *\n   * @param {string} msg the message to be hashed and then signed\n   * @returns {Promise<string>} a promise that resolves to the signed message\n   */\n  signMessage: (msg: SignableMessage) => Promise<`0x${string}`> =\n    SignerLogger.profiled(\"BaseAlchemySigner.signMessage\", async (msg) => {\n      const messageHash = hashMessage(msg);\n\n      const result = await this.inner.signRawMessage(messageHash);\n\n      SignerLogger.trackEvent({\n        name: \"signer_sign_message\",\n      });\n\n      return result;\n    });\n\n  /**\n   * Signs a typed message by first hashing it and then signing the hashed message using the `signRawMessage` method.\n   *\n   * @example\n   * ```ts\n   * import { AlchemyWebSigner } from \"@account-kit/signer\";\n   *\n   * const signer = new AlchemyWebSigner({\n   *  client: {\n   *    connection: {\n   *      rpcUrl: \"/api/rpc\",\n   *    },\n   *    iframeConfig: {\n   *      iframeContainerId: \"alchemy-signer-iframe-container\",\n   *    },\n   *  },\n   * });\n   *\n   * const signature = await signer.signTypedData({\n   *  domain: {},\n   *  types: {},\n   *  primaryType: \"\",\n   *  message: {},\n   * });\n   * ```\n   *\n   * @param {TypedDataDefinition<TTypedData, TPrimaryType>} params The parameters for the typed message to be hashed and signed\n   * @returns {Promise<any>} A promise that resolves to the signed message\n   */\n  signTypedData: <\n    const TTypedData extends TypedData | Record<string, unknown>,\n    TPrimaryType extends keyof TTypedData | \"EIP712Domain\" = keyof TTypedData\n  >(\n    params: TypedDataDefinition<TTypedData, TPrimaryType>\n  ) => Promise<Hex> = SignerLogger.profiled(\n    \"BaseAlchemySigner.signTypedData\",\n    async (params) => {\n      const messageHash = hashTypedData(params);\n\n      return this.inner.signRawMessage(messageHash);\n    }\n  );\n\n  /**\n   * Serializes a transaction, signs it with a raw message, and then returns the serialized transaction with the signature.\n   *\n   * @example\n   * ```ts\n   * import { AlchemyWebSigner } from \"@account-kit/signer\";\n   *\n   * const signer = new AlchemyWebSigner({\n   *  client: {\n   *    connection: {\n   *      rpcUrl: \"/api/rpc\",\n   *    },\n   *    iframeConfig: {\n   *      iframeContainerId: \"alchemy-signer-iframe-container\",\n   *    },\n   *  },\n   * });\n   *\n   * const tx = await signer.signTransaction({\n   *  to: \"0x1234\",\n   *  value: \"0x1234\",\n   *  data: \"0x1234\",\n   * });\n   * ```\n   *\n   * @param {Transaction} tx the transaction to be serialized and signed\n   * @param {{serializer?: SerializeTransactionFn}} args options for serialization\n   * @param {() => Hex} [args.serializer] an optional serializer function. If not provided, the default `serializeTransaction` function will be used\n   * @returns {Promise<string>} a promise that resolves to the serialized transaction with the signature\n   */\n  signTransaction: <\n    serializer extends SerializeTransactionFn<TransactionSerializable> = SerializeTransactionFn<TransactionSerializable>,\n    transaction extends Parameters<serializer>[0] = Parameters<serializer>[0]\n  >(\n    transaction: transaction,\n    options?:\n      | {\n          serializer?: serializer | undefined;\n        }\n      | undefined\n  ) => Promise<\n    IsNarrowable<\n      TransactionSerialized<GetTransactionType<transaction>>,\n      Hex\n    > extends true\n      ? TransactionSerialized<GetTransactionType<transaction>>\n      : Hex\n  > = SignerLogger.profiled(\n    \"BaseAlchemySigner.signTransaction\",\n    async (tx, args) => {\n      const serializeFn = args?.serializer ?? serializeTransaction;\n      const serializedTx = serializeFn(tx);\n      const signatureHex = await this.inner.signRawMessage(\n        keccak256(serializedTx)\n      );\n\n      const signature = this.unpackSignRawMessageBytes(signatureHex);\n\n      return serializeFn(tx, signature);\n    }\n  );\n\n  /**\n   * Signs an EIP-7702 Authorization and then returns the authorization with the signature.\n   *\n   * @example\n   * ```ts twoslash\n   * import { AlchemyWebSigner } from \"@account-kit/signer\";\n   *\n   * const signer = new AlchemyWebSigner({\n   *  client: {\n   *    connection: {\n   *      rpcUrl: \"/api/rpc\",\n   *    },\n   *    iframeConfig: {\n   *      iframeContainerId: \"alchemy-signer-iframe-container\",\n   *    },\n   *  },\n   * });\n   *\n   * const tx = await signer.signAuthorization({\n   *  contractAddress: \"0x1234123412341234123412341234123412341234\",\n   *  chainId: 1,\n   *  nonce: 0,\n   * });\n   * ```\n   *\n   * @param {Authorization<number, false>} unsignedAuthorization the authorization to be signed\n   * @returns {Promise<Authorization<number, true>> | undefined} a promise that resolves to the authorization with the signature\n   */\n  signAuthorization: (\n    unsignedAuthorization: Authorization<number, false>\n  ) => Promise<Authorization<number, true>> = SignerLogger.profiled(\n    \"BaseAlchemySigner.signAuthorization\",\n    async (unsignedAuthorization) => {\n      const hashedAuthorization = hashAuthorization(unsignedAuthorization);\n      const signedAuthorizationHex = await this.inner.signRawMessage(\n        hashedAuthorization\n      );\n      const signature = this.unpackSignRawMessageBytes(signedAuthorizationHex);\n      return { ...unsignedAuthorization, ...signature };\n    }\n  );\n\n  private unpackSignRawMessageBytes = (\n    hex: `0x${string}`\n  ): UnpackedSignature => {\n    return {\n      r: takeBytes(hex, { count: 32 }),\n      s: takeBytes(hex, { count: 32, offset: 32 }),\n      v: BigInt(takeBytes(hex, { count: 1, offset: 64 })),\n    };\n  };\n\n  /**\n   * Unauthenticated call to look up a user's organizationId by email\n   *\n   * @example\n   * ```ts\n   * import { AlchemyWebSigner } from \"@account-kit/signer\";\n   *\n   * const signer = new AlchemyWebSigner({\n   *  client: {\n   *    connection: {\n   *      rpcUrl: \"/api/rpc\",\n   *    },\n   *    iframeConfig: {\n   *      iframeContainerId: \"alchemy-signer-iframe-container\",\n   *    },\n   *  },\n   * });\n   *\n   * const result = await signer.getUser(\"foo@mail.com\");\n   * ```\n   *\n   * @param {string} email the email to lookup\n   * @returns {Promise<{orgId: string}>} the organization id for the user if they exist\n   */\n  getUser: (email: string) => Promise<{ orgId: string } | null> =\n    SignerLogger.profiled(\"BaseAlchemySigner.getUser\", async (email) => {\n      const result = await this.inner.lookupUserByEmail(email);\n\n      if (result.orgId == null) {\n        return null;\n      }\n\n      return {\n        orgId: result.orgId,\n      };\n    });\n\n  /**\n   * Adds a passkey to the user's account\n   *\n   * @example\n   * ```ts\n   * import { AlchemyWebSigner } from \"@account-kit/signer\";\n   *\n   * const signer = new AlchemyWebSigner({\n   *  client: {\n   *    connection: {\n   *      rpcUrl: \"/api/rpc\",\n   *    },\n   *    iframeConfig: {\n   *      iframeContainerId: \"alchemy-signer-iframe-container\",\n   *    },\n   *  },\n   * });\n   *\n   * const result = await signer.addPasskey()\n   * ```\n   *\n   * @param {CredentialCreationOptions | undefined} params optional parameters for the passkey creation\n   * @returns {Promise<string[]>} an array of the authenticator ids added to the user\n   */\n  addPasskey: (params?: CredentialCreationOptions) => Promise<string[]> =\n    SignerLogger.profiled(\"BaseAlchemySigner.addPasskey\", async (params) => {\n      return this.inner.addPasskey(params ?? {});\n    });\n\n  /**\n   * Used to export the wallet for a given user\n   * If the user is authenticated with an Email, this will return a seed phrase\n   * If the user is authenticated with a Passkey, this will return a private key\n   *\n   * @example\n   * ```ts\n   * import { AlchemyWebSigner } from \"@account-kit/signer\";\n   *\n   * const signer = new AlchemyWebSigner({\n   *  client: {\n   *    connection: {\n   *      rpcUrl: \"/api/rpc\",\n   *    },\n   *    iframeConfig: {\n   *      iframeContainerId: \"alchemy-signer-iframe-container\",\n   *    },\n   *  },\n   * });\n   *\n   * // the params passed to this are different based on the specific signer\n   * const result = signer.exportWallet()\n   * ```\n   *\n   * @param {unknown} params export wallet parameters\n   * @returns {boolean} true if the wallet was exported successfully\n   */\n  exportWallet: (\n    params: Parameters<(typeof this.inner)[\"exportWallet\"]>[0]\n  ) => Promise<boolean> = async (params) => {\n    return this.inner.exportWallet(params);\n  };\n\n  /**\n   * This method lets you adapt your AlchemySigner to a viem LocalAccount, which\n   * will let you use the signer as an EOA directly.\n   *\n   * @example\n   * ```ts\n   * import { AlchemyWebSigner } from \"@account-kit/signer\";\n   *\n   * const signer = new AlchemyWebSigner({\n   *  client: {\n   *    connection: {\n   *      rpcUrl: \"/api/rpc\",\n   *    },\n   *    iframeConfig: {\n   *      iframeContainerId: \"alchemy-signer-iframe-container\",\n   *    },\n   *  },\n   * });\n   *\n   * const account = signer.toViemAccount();\n   * ```\n   *\n   * @throws if your signer is not authenticated\n   * @returns {LocalAccount} a LocalAccount object that can be used with viem's wallet client\n   */\n  toViemAccount = (): LocalAccount => {\n    // if we want this method to be synchronous, then we need to do this check here\n    // otherwise we can use the sessionManager to get the user\n    if (!this.inner.getUser()) {\n      throw new NotAuthenticatedError();\n    }\n\n    return toAccount({\n      address: this.inner.getUser()!.address,\n      signMessage: (msg) => this.signMessage(msg.message),\n      signTypedData: <\n        const typedData extends TypedData | Record<string, unknown>,\n        primaryType extends keyof typedData | \"EIP712Domain\" = keyof typedData\n      >(\n        typedDataDefinition: TypedDataDefinition<typedData, primaryType>\n      ) => this.signTypedData<typedData, primaryType>(typedDataDefinition),\n      signTransaction: this.signTransaction,\n    });\n  };\n\n  /**\n   * Creates a new instance of `SolanaSigner` using the provided inner value.\n   * This requires the signer to be authenticated first\n   *\n   * @example\n   * ```ts\n   * import { AlchemyWebSigner } from \"@account-kit/signer\";\n   *\n   * const signer = new AlchemyWebSigner({\n   *  client: {\n   *    connection: {\n   *      rpcUrl: \"/api/rpc\",\n   *    },\n   *    iframeConfig: {\n   *      iframeContainerId: \"alchemy-signer-iframe-container\",\n   *    },\n   *  },\n   * });\n   *\n   * const solanaSigner = signer.toSolanaSigner();\n   * ```\n   *\n   * @returns {SolanaSigner} A new instance of `SolanaSigner`\n   */\n  experimental_toSolanaSigner = (): SolanaSigner => {\n    if (!this.inner.getUser()) {\n      throw new NotAuthenticatedError();\n    }\n\n    return new SolanaSigner(this.inner);\n  };\n\n  private authenticateWithEmail = async (\n    params: Extract<AuthParams, { type: \"email\" }>\n  ): Promise<User> => {\n    if (\"email\" in params) {\n      const existingUser = await this.getUser(params.email);\n      const expirationSeconds = this.getExpirationSeconds();\n\n      const { orgId, otpId } = existingUser\n        ? await this.inner.initEmailAuth({\n            email: params.email,\n            emailMode: params.emailMode,\n            expirationSeconds,\n            redirectParams: params.redirectParams,\n          })\n        : await this.inner.createAccount({\n            type: \"email\",\n            email: params.email,\n            emailMode: params.emailMode,\n            expirationSeconds,\n            redirectParams: params.redirectParams,\n          });\n\n      this.sessionManager.setTemporarySession({\n        orgId,\n        isNewUser: !existingUser,\n      });\n      this.store.setState({\n        status: AlchemySignerStatus.AWAITING_EMAIL_AUTH,\n        otpId,\n        error: null,\n      });\n\n      // We wait for the session manager to emit a connected event if\n      // cross tab sessions are permitted\n      return new Promise<User>((resolve) => {\n        const removeListener = this.sessionManager.on(\n          \"connected\",\n          (session) => {\n            resolve(session.user);\n            removeListener();\n          }\n        );\n      });\n    } else {\n      const temporarySession = params.orgId\n        ? { orgId: params.orgId }\n        : this.sessionManager.getTemporarySession();\n\n      if (!temporarySession) {\n        this.store.setState({\n          status: AlchemySignerStatus.DISCONNECTED,\n        });\n        throw new Error(\"Could not find email auth init session!\");\n      }\n\n      const user = await this.inner.completeAuthWithBundle({\n        bundle: params.bundle,\n        orgId: temporarySession.orgId,\n        connectedEventName: \"connectedEmail\",\n        authenticatingType: \"email\",\n      });\n\n      // fire new user event\n      this.emitNewUserEvent(params.isNewUser);\n\n      return user;\n    }\n  };\n\n  private authenticateWithPasskey = async (\n    args: Extract<AuthParams, { type: \"passkey\" }>\n  ): Promise<User> => {\n    let user: User;\n    const shouldCreateNew = async () => {\n      if (\"email\" in args) {\n        const existingUser = await this.getUser(args.email);\n        return existingUser == null;\n      }\n\n      return args.createNew;\n    };\n\n    if (await shouldCreateNew()) {\n      const result = await this.inner.createAccount(\n        args as Extract<\n          AuthParams,\n          { type: \"passkey\" } & ({ email: string } | { createNew: true })\n        >\n      );\n      // account creation for passkeys returns the whoami response so we don't have to\n      // call it again after signup\n      user = {\n        address: result.address!,\n        userId: result.userId!,\n        orgId: result.orgId,\n      };\n    } else {\n      user = await this.inner.lookupUserWithPasskey();\n      if (!user) {\n        this.store.setState({\n          status: AlchemySignerStatus.DISCONNECTED,\n        });\n        throw new Error(\"No user found\");\n      }\n    }\n\n    return user;\n  };\n\n  private authenticateWithOauth = async (\n    args: Extract<AuthParams, { type: \"oauth\" }>\n  ): Promise<User> => {\n    const params: OauthParams = {\n      ...args,\n      expirationSeconds: this.getExpirationSeconds(),\n    };\n    if (params.mode === \"redirect\") {\n      return this.inner.oauthWithRedirect(params);\n    } else {\n      return this.inner.oauthWithPopup(params);\n    }\n  };\n\n  private authenticateWithJwt = async (\n    args: Extract<AuthParams, { type: \"custom-jwt\" }>\n  ): Promise<User> => {\n    const { credentialBundle, orgId, isSignUp } = await this.inner.submitJwt({\n      jwt: args.jwt,\n      authProvider: args.authProviderId,\n    });\n\n    const user = await this.inner.completeAuthWithBundle({\n      bundle: credentialBundle,\n      orgId: orgId,\n      connectedEventName: \"connectedJwt\",\n      authenticatingType: \"custom-jwt\",\n    });\n\n    this.emitNewUserEvent(isSignUp);\n    return user;\n  };\n\n  private authenticateWithOtp = async (\n    args: Extract<AuthParams, { type: \"otp\" }>\n  ): Promise<User> => {\n    const tempSession = this.sessionManager.getTemporarySession();\n    const { orgId, isNewUser } = tempSession ?? {};\n    const { otpId } = this.store.getState();\n    if (!orgId) {\n      throw new Error(\"orgId not found in session\");\n    }\n    if (!otpId) {\n      throw new Error(\"otpId not found in session\");\n    }\n    const { bundle } = await this.inner.submitOtpCode({\n      orgId,\n      otpId,\n      otpCode: args.otpCode,\n      expirationSeconds: this.getExpirationSeconds(),\n    });\n    const user = await this.inner.completeAuthWithBundle({\n      bundle,\n      orgId,\n      connectedEventName: \"connectedOtp\",\n      authenticatingType: \"otp\",\n    });\n\n    this.emitNewUserEvent(isNewUser);\n    if (tempSession) {\n      this.sessionManager.setTemporarySession({\n        ...tempSession,\n        isNewUser: false,\n      });\n    }\n\n    return user;\n  };\n\n  private handleOauthReturn = ({\n    bundle,\n    orgId,\n    idToken,\n    isNewUser,\n  }: Extract<AuthParams, { type: \"oauthReturn\" }>): Promise<User> => {\n    const user = this.inner.completeAuthWithBundle({\n      bundle,\n      orgId,\n      connectedEventName: \"connectedOauth\",\n      authenticatingType: \"oauth\",\n      idToken,\n    });\n\n    this.emitNewUserEvent(isNewUser);\n\n    return user;\n  };\n\n  private getExpirationSeconds = () =>\n    Math.floor(this.sessionManager.expirationTimeMs / 1000);\n\n  private registerListeners = () => {\n    // Declare listeners in an object to typecheck that every event type is\n    // handled.\n    const listeners: SessionManagerEvents = {\n      connected: (session) => {\n        this.store.setState({\n          user: session.user,\n          status: AlchemySignerStatus.CONNECTED,\n          error: null,\n        });\n      },\n      disconnected: () => {\n        this.store.setState({\n          user: null,\n          status: AlchemySignerStatus.DISCONNECTED,\n        });\n      },\n      initialized: () => {\n        this.store.setState((state) => ({\n          status: state.user\n            ? AlchemySignerStatus.CONNECTED\n            : AlchemySignerStatus.DISCONNECTED,\n          ...(state.user ? { error: null } : undefined),\n        }));\n      },\n    };\n\n    for (const [event, listener] of Object.entries(listeners)) {\n      this.sessionManager.on(event as keyof SessionManagerEvents, listener);\n    }\n\n    this.inner.on(\"authenticating\", ({ type }) => {\n      const status = (() => {\n        switch (type) {\n          case \"email\":\n            return AlchemySignerStatus.AUTHENTICATING_EMAIL;\n          case \"passkey\":\n            return AlchemySignerStatus.AUTHENTICATING_PASSKEY;\n          case \"oauth\":\n            return AlchemySignerStatus.AUTHENTICATING_OAUTH;\n          case \"otp\":\n          case \"otpVerify\":\n            return AlchemySignerStatus.AWAITING_OTP_AUTH;\n          case \"custom-jwt\":\n            return AlchemySignerStatus.AUTHENTICATING_JWT;\n          default:\n            assertNever(type, \"unhandled authenticating type\");\n        }\n      })();\n\n      // trigger new user event on signer from client\n      this.inner.on(\"newUserSignup\", () => {\n        this.emitNewUserEvent(true);\n      });\n\n      this.store.setState({\n        status,\n        error: null,\n      });\n    });\n  };\n\n  private emitNewUserEvent = (isNewUser?: boolean) => {\n    // assumes that if isNewUser is undefined it is a returning user\n    if (isNewUser) this.store.setState({ isNewUser });\n  };\n\n  protected initConfig = async (): Promise<SignerConfig> => {\n    this.config = this.fetchConfig();\n    return this.config;\n  };\n\n  /**\n   * Returns the signer configuration while fetching it if it's not already initialized.\n   *\n   * @returns {Promise<SignerConfig>} A promise that resolves to the signer configuration\n   */\n  public getConfig = async (): Promise<SignerConfig> => {\n    if (!this.config) {\n      return this.initConfig();\n    }\n\n    return this.config;\n  };\n\n  protected fetchConfig = async (): Promise<SignerConfig> => {\n    return this.inner.request(\"/v1/signer-config\", {});\n  };\n}\n\nfunction toErrorInfo(error: unknown): ErrorInfo {\n  return error instanceof Error\n    ? { name: error.name, message: error.message }\n    : { name: \"Error\", message: \"Unknown error\" };\n}\n"]}

package/dist/esm/client/base.d.ts

@@ -2,7 +2,7 @@ import { type ConnectionConfig } from "@aa-sdk/core";
 import { TurnkeyClient, type TSignedRequest } from "@turnkey/http";
 import EventEmitter from "eventemitter3";
 import { type Hex } from "viem";
-import type { AlchemySignerClientEvents, AuthenticatingEventMetadata, CreateAccountParams, EmailAuthParams, GetOauthProviderUrlArgs, GetWebAuthnAttestationResult, OauthConfig, OauthParams, OtpParams, SignerBody, SignerResponse, SignupResponse, User } from "./types.js";
+import type { AlchemySignerClientEvents, AuthenticatingEventMetadata, CreateAccountParams, EmailAuthParams, GetOauthProviderUrlArgs, GetWebAuthnAttestationResult, JwtParams, JwtResponse, OauthConfig, OauthParams, OtpParams, SignerBody, SignerResponse, SignupResponse, User } from "./types.js";
 export interface BaseSignerClientParams {
     stamper: TurnkeyClient["stamper"];
     connection: ConnectionConfig;
@@ -77,6 +77,7 @@ export declare abstract class BaseSignerClient<TExportWalletParams = unknown> {
     abstract submitOtpCode(args: Omit<OtpParams, "targetPublicKey">): Promise<{
         bundle: string;
     }>;
+    abstract submitJwt(args: Omit<JwtParams, "targetPublicKey">): Promise<JwtResponse>;
     abstract disconnect(): Promise<void>;
     abstract exportWallet(params: TExportWalletParams): Promise<boolean>;
     abstract lookupUserWithPasskey(user?: User): Promise<User>;
@@ -153,7 +154,7 @@ export declare abstract class BaseSignerClient<TExportWalletParams = unknown> {
      * @param {SignerBody<R>} body The request body containing the data to be sent
      * @returns {Promise<SignerResponse<R>>} A promise that resolves to the response from the signer
      */
-    request: <R extends "/v1/signup" | "/v1/whoami" | "/v1/auth" | "/v1/lookup" | "/v1/sign-payload" | "/v1/prepare-oauth" | "/v1/otp" | "/v1/signer-config">(route: R, body: SignerBody<R>) => Promise<SignerResponse<R>>;
+    request: <R extends "/v1/signup" | "/v1/whoami" | "/v1/auth" | "/v1/lookup" | "/v1/sign-payload" | "/v1/prepare-oauth" | "/v1/otp" | "/v1/auth-jwt" | "/v1/signer-config">(route: R, body: SignerBody<R>) => Promise<SignerResponse<R>>;
     private exportAsSeedPhrase;
     private exportAsPrivateKey;
     /**

package/dist/esm/client/base.js

@@ -4,10 +4,11 @@ import EventEmitter from "eventemitter3";
 import { jwtDecode } from "jwt-decode";
 import { sha256 } from "viem";
 import { NotAuthenticatedError, OAuthProvidersError } from "../errors.js";
-import { addOpenIdIfAbsent, getDefaultScopeAndClaims } from "../oauth.js";
+import { getDefaultProviderCustomization } from "../oauth.js";
 import { base64UrlEncode } from "../utils/base64UrlEncode.js";
 import { resolveRelativeUrl } from "../utils/resolveRelativeUrl.js";
 import { assertNever } from "../utils/typeAssertions.js";
+import { VERSION } from "../version.js";
 /**
  * Base class for all Alchemy Signer clients
  */
@@ -275,6 +276,7 @@ export class BaseSignerClient {
                 const url = this.connectionConfig.rpcUrl ?? "https://api.g.alchemy.com";
                 const basePath = "/signer";
                 const headers = new Headers();
+                headers.append("Alchemy-AA-Sdk-Version", VERSION);
                 headers.append("Content-Type", "application/json");
                 if (this.connectionConfig.apiKey) {
                     headers.append("Authorization", `Bearer ${this.connectionConfig.apiKey}`);
@@ -396,7 +398,7 @@ export class BaseSignerClient {
             writable: true,
             value: async (args) => {
                 const { oauthParams, turnkeyPublicKey, oauthCallbackUrl, oauthConfig, usesRelativeUrl = true, } = args;
-                const { authProviderId, isCustomProvider, auth0Connection, scope: providedScope, claims: providedClaims, mode, redirectUrl, expirationSeconds, } = oauthParams;
+                const { authProviderId, isCustomProvider, auth0Connection, scope: providedScope, claims: providedClaims, otherParameters: providedOtherParameters, mode, redirectUrl, expirationSeconds, } = oauthParams;
                 const { codeChallenge, requestKey, authProviders } = oauthConfig ?? (await this.getOauthConfigForMode(mode));
                 if (!authProviders) {
                     throw new OAuthProvidersError();
@@ -406,21 +408,17 @@ export class BaseSignerClient {
                 if (!authProvider) {
                     throw new Error(`No auth provider found with id ${authProviderId}`);
                 }
-                let scope;
-                let claims;
-                if (providedScope) {
-                    scope = addOpenIdIfAbsent(providedScope);
-                    claims = providedClaims;
+                let scope = providedScope;
+                let claims = providedClaims;
+                let otherParameters = providedOtherParameters;
+                if (!isCustomProvider) {
+                    const defaultCustomization = getDefaultProviderCustomization(authProviderId);
+                    scope ?? (scope = defaultCustomization?.scope);
+                    claims ?? (claims = defaultCustomization?.claims);
+                    otherParameters ?? (otherParameters = defaultCustomization?.otherParameters);
                 }
-                else {
-                    if (isCustomProvider) {
-                        throw new Error("scope must be provided for a custom provider");
-                    }
-                    const scopeAndClaims = getDefaultScopeAndClaims(authProviderId);
-                    if (!scopeAndClaims) {
-                        throw new Error(`Default scope not known for provider ${authProviderId}`);
-                    }
-                    ({ scope, claims } = scopeAndClaims);
+                if (!scope) {
+                    throw new Error(`Default scope not known for provider ${authProviderId}`);
                 }
                 const { authEndpoint, clientId } = authProvider;
                 const nonce = this.getOauthNonce(turnkeyPublicKey);
@@ -449,10 +447,7 @@ export class BaseSignerClient {
                     prompt: "select_account",
                     client_id: clientId,
                     nonce,
-                    // Fixes Facebook mobile login so that `window.opener` doesn't get nullified.
-                    ...(mode === "popup" && authProvider.id === "facebook"
-                        ? { sdk: "joey" }
-                        : {}),
+                    ...otherParameters,
                 };
                 if (claims) {
                     params.claims = claims;

package/dist/esm/client/base.js.map

@@ -1 +1 @@
-{"version":3,"file":"base.js","sourceRoot":"","sources":["../../../src/client/base.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAyB,MAAM,cAAc,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAuB,MAAM,eAAe,CAAC;AACnE,OAAO,YAAY,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,MAAM,EAAY,MAAM,MAAM,CAAC;AACxC,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAE1E,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAiCzD;;GAEG;AACH,MAAM,OAAgB,gBAAgB;IAOpC;;;;OAIG;IACH,YAAY,MAA8B;QAXlC;;;;;WAAwB;QACxB;;;;;WAAmC;QACjC;;;;;WAA6B;QAC7B;;;;;WAAgB;QAChB;;;;;WAAsD;QACtD;;;;;WAAqC;QAiB/C;;;;WAIG;QACI;;;;mBAAY,KAAK,IAA0B,EAAE;gBAClD,IAAI,CAAC,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;gBAC/C,OAAO,IAAI,CAAC,WAAW,CAAC;YAC1B,CAAC;WAAC;QA6FF,aAAa;QAEb,yBAAyB;QAEzB;;;;;;WAMG;QACI;;;;mBAAK,CACV,KAAQ,EACR,QAAsC,EACtC,EAAE;gBACF,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,QAAe,CAAC,CAAC;gBAE7C,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,KAAK,EAAE,QAAe,CAAC,CAAC;YACxE,CAAC;WAAC;QAEF;;;;;;WAMG;QACI;;;;mBAAa,KAAK,EAAE,OAAkC,EAAE,EAAE;gBAC/D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACf,MAAM,IAAI,qBAAqB,EAAE,CAAC;gBACpC,CAAC;gBACD,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAClE,OAAO,CACR,CAAC;gBAEF,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC;oBACjE,IAAI,EAAE,wCAAwC;oBAC9C,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;oBAClC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;oBAC/B,UAAU,EAAE;wBACV,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;wBACxB,cAAc,EAAE;4BACd;gCACE,WAAW;gCACX,iBAAiB,EAAE,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE;gCACrD,SAAS,EAAE,eAAe,CAAC,SAAS,CAAC;6BACtC;yBACF;qBACF;iBACF,CAAC,CAAC;gBAEH,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAC5D,QAAQ,EACR,IAAI,CAAC,IAAI,CAAC,KAAK,EACf,4BAA4B,CAC7B,CAAC;gBAEF,OAAO,gBAAgB,CAAC;YAC1B,CAAC;WAAC;QAEF;;;;;;;WAOG;QACI;;;;mBAAS,KAAK,EACnB,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,EACxB,OAAgB,EACD,EAAE;gBACjB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;oBACd,OAAO,IAAI,CAAC,IAAI,CAAC;gBACnB,CAAC;gBAED,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;gBACvC,CAAC;gBAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC;oBAC7D,cAAc,EAAE,KAAK;iBACtB,CAAC,CAAC;gBAEH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE;oBAC5C,cAAc;iBACf,CAAC,CAAC;gBAEH,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,MAAM,GAA4B,SAAS,CAAC,OAAO,CAAC,CAAC;oBAC3D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;oBACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;oBACrB,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;wBACrC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;oBAC5B,CAAC;gBACH,CAAC;gBAED,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE;oBACzB,IAAI,CAAC;wBACH,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,gBAAgB,CAAC;6BACtD,YAAsB,CAAC;oBAC5B,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACX,OAAO,SAAS,CAAC;oBACnB,CAAC;gBACH,CAAC,CAAC,EAAE,CAAC;gBAEL,IAAI,CAAC,IAAI,GAAG;oBACV,GAAG,IAAI;oBACP,YAAY;iBACb,CAAC;gBAEF,OAAO,IAAI,CAAC,IAAI,CAAC;YACnB,CAAC;WAAC;QAEF;;;;;;;;WAQG;QACI;;;;mBAAc,KAAK,IAA6B,EAAE;gBACvD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACf,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;gBAC1E,CAAC;gBAED,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC;oBAC7C,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;iBAChC,CAAC,CAAC;YACL,CAAC;WAAC;QAEF;;;;;WAKG;QACI;;;;mBAAoB,KAAK,EAAE,KAAa,EAAE,EAAE;gBACjD,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/C,CAAC;WAAC;QAEF;;;;;;;;WAQG;QACI;;;;mBAAiB,KAAK,EAC3B,GAAQ,EACR,OAA8B,UAAU,EAC1B,EAAE;gBAChB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACf,MAAM,IAAI,qBAAqB,EAAE,CAAC;gBACpC,CAAC;gBAED,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAClD,sGAAsG;oBACtG,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;gBAC9D,CAAC;gBAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC;oBAClE,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;oBAC/B,IAAI,EAAE,mCAAmC;oBACzC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;oBAClC,UAAU,EAAE;wBACV,QAAQ,EAAE,8BAA8B;wBACxC,YAAY,EACV,IAAI,KAAK,UAAU;4BACjB,CAAC,CAAC,qBAAqB;4BACvB,CAAC,CAAC,8BAA8B;wBACpC,OAAO,EAAE,GAAG;wBACZ,QAAQ,EACN,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,aAAc;qBACrE;iBACF,CAAC,CAAC;gBAEH,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE;oBAC3D,cAAc;iBACf,CAAC,CAAC;gBAEH,OAAO,SAAS,CAAC;YACnB,CAAC;WAAC;QAEF;;;;WAIG;QACI;;;;mBAAU,GAAgB,EAAE;gBACjC,OAAO,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;YAC3B,CAAC;WAAC;QAEF;;;;;;;WAOG;QACI;;;;mBAAU,KAAK,EACpB,KAAQ,EACR,IAAmB,EACS,EAAE;gBAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,IAAI,2BAA2B,CAAC;gBAExE,MAAM,QAAQ,GAAG,SAAS,CAAC;gBAE3B,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;gBAC9B,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;gBACnD,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC;oBACjC,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC5E,CAAC;qBAAM,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,CAAC;oBACrC,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,CAAC,CAAC;gBACzE,CAAC;gBAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,GAAG,QAAQ,GAAG,KAAK,EAAE,EAAE;oBACxD,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;oBAC1B,OAAO;iBACR,CAAC,CAAC;gBAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,IAAI,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;gBACzC,CAAC;gBAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAEnC,OAAO,IAAyB,CAAC;YACnC,CAAC;WAAC;QAEF,aAAa;QAEb,0BAA0B;QAClB;;;;mBAAqB,KAAK,EAAE,OAA4B,EAAE,EAAE;gBAClE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACf,MAAM,IAAI,qBAAqB,EAAE,CAAC;gBACpC,CAAC;gBAED,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC;oBACtD,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;iBAChC,CAAC,CAAC;gBAEH,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,GAAG,CACtC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAC3B,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC;oBACnC,cAAc,EAAE,IAAI,CAAC,IAAK,CAAC,KAAK;oBAChC,QAAQ;iBACT,CAAC,CACH,CACF,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAE5C,MAAM,aAAa,GAAG,cAAc,CAAC,IAAI,CACvC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,IAAK,CAAC,OAAO,CACxC,CAAC;gBAEF,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,MAAM,IAAI,KAAK,CACb,yCAAyC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAC7D,CAAC;gBACJ,CAAC;gBAED,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC;oBACzD,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;oBAC/B,IAAI,EAAE,6BAA6B;oBACnC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;oBAClC,UAAU,EAAE;wBACV,QAAQ,EAAE,aAAc,CAAC,QAAQ;wBACjC,eAAe,EAAE,OAAO,CAAC,SAAS,EAAG;qBACtC;iBACF,CAAC,CAAC;gBAEH,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,IAAI,CAAC,sBAAsB,CACxD,QAAQ,EACR,IAAI,CAAC,IAAI,CAAC,KAAK,EACf,oBAAoB,CACrB,CAAC;gBAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC;gBAEpE,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;gBAC3D,CAAC;gBAED,OAAO,MAAM,CAAC;YAChB,CAAC;WAAC;QAEM;;;;mBAAqB,KAAK,EAAE,OAA4B,EAAE,EAAE;gBAClE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACf,MAAM,IAAI,qBAAqB,EAAE,CAAC;gBACpC,CAAC;gBAED,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC;oBAChE,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;oBAC/B,IAAI,EAAE,qCAAqC;oBAC3C,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;oBAClC,UAAU,EAAE;wBACV,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;wBAC1B,eAAe,EAAE,OAAO,CAAC,SAAS,EAAG;qBACtC;iBACF,CAAC,CAAC;gBAEH,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,IAAI,CAAC,sBAAsB,CACxD,QAAQ,EACR,IAAI,CAAC,IAAI,CAAC,KAAK,EACf,2BAA2B,CAC5B,CAAC;gBAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC;gBAEjE,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;gBAC3D,CAAC;gBAED,OAAO,MAAM,CAAC;YAChB,CAAC;WAAC;QAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAgCG;QACO;;;;mBAAsB,KAAK,EACnC,IAA6B,EACZ,EAAE;gBACnB,MAAM,EACJ,WAAW,EACX,gBAAgB,EAChB,gBAAgB,EAChB,WAAW,EACX,eAAe,GAAG,IAAI,GACvB,GAAG,IAAI,CAAC;gBAET,MAAM,EACJ,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,KAAK,EAAE,aAAa,EACpB,MAAM,EAAE,cAAc,EACtB,IAAI,EACJ,WAAW,EACX,iBAAiB,GAClB,GAAG,WAAW,CAAC;gBAEhB,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,aAAa,EAAE,GAChD,WAAW,IAAI,CAAC,MAAM,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;gBAE1D,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,MAAM,IAAI,mBAAmB,EAAE,CAAC;gBAClC,CAAC;gBAED,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,CACrC,CAAC,QAAQ,EAAE,EAAE,CACX,QAAQ,CAAC,EAAE,KAAK,cAAc;oBAC9B,CAAC,CAAC,QAAQ,CAAC,gBAAgB,KAAK,CAAC,CAAC,gBAAgB,CACrD,CAAC;gBAEF,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,MAAM,IAAI,KAAK,CAAC,kCAAkC,cAAc,EAAE,CAAC,CAAC;gBACtE,CAAC;gBAED,IAAI,KAAa,CAAC;gBAClB,IAAI,MAA0B,CAAC;gBAE/B,IAAI,aAAa,EAAE,CAAC;oBAClB,KAAK,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;oBACzC,MAAM,GAAG,cAAc,CAAC;gBAC1B,CAAC;qBAAM,CAAC;oBACN,IAAI,gBAAgB,EAAE,CAAC;wBACrB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;oBAClE,CAAC;oBACD,MAAM,cAAc,GAAG,wBAAwB,CAAC,cAAc,CAAC,CAAC;oBAChE,IAAI,CAAC,cAAc,EAAE,CAAC;wBACpB,MAAM,IAAI,KAAK,CACb,wCAAwC,cAAc,EAAE,CACzD,CAAC;oBACJ,CAAC;oBACD,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,cAAc,CAAC,CAAC;gBACvC,CAAC;gBACD,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,YAAY,CAAC;gBAEhD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC;gBACnD,MAAM,WAAW,GAAe;oBAC9B,cAAc;oBACd,gBAAgB;oBAChB,UAAU;oBACV,gBAAgB;oBAChB,iBAAiB;oBACjB,WAAW,EACT,IAAI,KAAK,UAAU;wBACjB,CAAC,CAAC,eAAe;4BACf,CAAC,CAAC,kBAAkB,CAAC,WAAW,CAAC;4BACjC,CAAC,CAAC,WAAW;wBACf,CAAC,CAAC,SAAS;oBACf,YAAY,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;iBACpE,CAAC;gBACF,MAAM,KAAK,GAAG,eAAe,CAC3B,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CACtD,CAAC;gBACF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;gBACtC,MAAM,MAAM,GAA2B;oBACrC,YAAY,EAAE,gBAAgB;oBAC9B,aAAa,EAAE,MAAM;oBACrB,KAAK;oBACL,KAAK;oBACL,cAAc,EAAE,aAAa;oBAC7B,qBAAqB,EAAE,MAAM;oBAC7B,MAAM,EAAE,gBAAgB;oBACxB,SAAS,EAAE,QAAQ;oBACnB,KAAK;oBACL,6EAA6E;oBAC7E,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,YAAY,CAAC,EAAE,KAAK,UAAU;wBACpD,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE;wBACjB,CAAC,CAAC,EAAE,CAAC;iBACR,CAAC;gBACF,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;gBACzB,CAAC;gBACD,IAAI,eAAe,EAAE,CAAC;oBACpB,MAAM,CAAC,UAAU,GAAG,eAAe,CAAC;gBACtC,CAAC;gBAED,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;oBACpC,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBACrE,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAExD,OAAO,GAAG,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,YAAY,EAAE,CAAC;YAC1D,CAAC;WAAC;QAEM;;;;mBAAwB,KAAK,EACnC,IAAe,EACO,EAAE;gBACxB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBACrB,OAAO,IAAI,CAAC,WAAW,CAAC;gBAC1B,CAAC;qBAAM,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;oBAC/B,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC1B,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,KAAK,CACb,+HAA+H,CAChI,CAAC;gBACJ,CAAC;YACH,CAAC;WAAC;QAEF,8EAA8E;QACpE;;;;mBAAyB,KAAK,EAKtC,QAEa,EACb,cAAsB,EACtB,SAAY,EAOZ,EAAE;gBACF,IAAI,QAAQ,CAAC,MAAM,KAAK,2BAA2B,EAAE,CAAC;oBACpD,OAAO,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAE,CAAC;gBACrC,CAAC;gBAED,MAAM,EACJ,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GACjC,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;oBACvC,UAAU,EAAE,QAAQ,CAAC,EAAE;oBACvB,cAAc;iBACf,CAAC,CAAC;gBAEH,IAAI,MAAM,KAAK,2BAA2B,EAAE,CAAC;oBAC3C,OAAO,MAAM,CAAC,SAAS,CAAE,CAAC;gBAC5B,CAAC;gBAED,IACE,MAAM,KAAK,wBAAwB;oBACnC,MAAM,KAAK,0BAA0B;oBACrC,MAAM,KAAK,kCAAkC,EAC7C,CAAC;oBACD,MAAM,IAAI,KAAK,CACb,uCAAuC,EAAE,aAAa,MAAM,GAAG,CAChE,CAAC;gBACJ,CAAC;gBAED,gEAAgE;gBAChE,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;gBAEzD,OAAO,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;YAC1E,CAAC;WAAC;QACF,aAAa;QAEb;;;;;WAKG;QACO;;;;mBAAgB,CAAC,gBAAwB,EAAU,EAAE;gBAC7D,OAAO,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACrE,CAAC;WAAC;QAvoBA,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;QAClD,IAAI,CAAC,OAAO,GAAG,SAAS,IAAI,sCAAsC,CAAC;QACnE,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,EAA6B,CAAC;QAClE,IAAI,CAAC,gBAAgB,GAAG,sBAAsB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACjE,IAAI,CAAC,aAAa,GAAG,IAAI,aAAa,CACpC,EAAE,OAAO,EAAE,yBAAyB,EAAE,EACtC,OAAO,CACR,CAAC;IACJ,CAAC;IAYD,IAAc,IAAI;QAChB,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,IAAc,IAAI,CAAC,IAAsB;QACvC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC5C,CAAC;aAAM,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC/B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACzC,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED;;;;OAIG;IACO,UAAU,CAAC,OAAiC;QACpD,IAAI,CAAC,aAAa,CAAC,OAAO,GAAG,OAAO,CAAC;IACvC,CAAC;IAED;;;;;;;OAOG;IACO,iBAAiB,CAAC,MAG3B;QACC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;QAC5B,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,aAAa;gBAChB,OAAO,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YACvD,KAAK,aAAa;gBAChB,OAAO,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YACvD;gBACE,WAAW,CAAC,QAAQ,EAAE,wBAAwB,QAAQ,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;CAwkBF","sourcesContent":["import { ConnectionConfigSchema, type ConnectionConfig } from \"@aa-sdk/core\";\nimport { TurnkeyClient, type TSignedRequest } from \"@turnkey/http\";\nimport EventEmitter from \"eventemitter3\";\nimport { jwtDecode } from \"jwt-decode\";\nimport { sha256, type Hex } from \"viem\";\nimport { NotAuthenticatedError, OAuthProvidersError } from \"../errors.js\";\nimport { addOpenIdIfAbsent, getDefaultScopeAndClaims } from \"../oauth.js\";\nimport type { OauthMode } from \"../signer.js\";\nimport { base64UrlEncode } from \"../utils/base64UrlEncode.js\";\nimport { resolveRelativeUrl } from \"../utils/resolveRelativeUrl.js\";\nimport { assertNever } from \"../utils/typeAssertions.js\";\nimport type {\n  AlchemySignerClientEvent,\n  AlchemySignerClientEvents,\n  AuthenticatingEventMetadata,\n  CreateAccountParams,\n  EmailAuthParams,\n  GetOauthProviderUrlArgs,\n  GetWebAuthnAttestationResult,\n  OauthConfig,\n  OauthParams,\n  OauthState,\n  OtpParams,\n  SignerBody,\n  SignerResponse,\n  SignerRoutes,\n  SignupResponse,\n  User,\n} from \"./types.js\";\n\nexport interface BaseSignerClientParams {\n  stamper: TurnkeyClient[\"stamper\"];\n  connection: ConnectionConfig;\n  rootOrgId?: string;\n  rpId?: string;\n}\n\nexport type ExportWalletStamper = TurnkeyClient[\"stamper\"] & {\n  injectWalletExportBundle(bundle: string): Promise<boolean>;\n  injectKeyExportBundle(bundle: string): Promise<boolean>;\n  publicKey(): string | null;\n};\n\n/**\n * Base class for all Alchemy Signer clients\n */\nexport abstract class BaseSignerClient<TExportWalletParams = unknown> {\n  private _user: User | undefined;\n  private connectionConfig: ConnectionConfig;\n  protected turnkeyClient: TurnkeyClient;\n  protected rootOrg: string;\n  protected eventEmitter: EventEmitter<AlchemySignerClientEvents>;\n  protected oauthConfig: OauthConfig | undefined;\n  /**\n   * Create a new instance of the Alchemy Signer client\n   *\n   * @param {BaseSignerClientParams} params the parameters required to create the client\n   */\n  constructor(params: BaseSignerClientParams) {\n    const { stamper, connection, rootOrgId } = params;\n    this.rootOrg = rootOrgId ?? \"24c1acf5-810f-41e0-a503-d5d13fa8e830\";\n    this.eventEmitter = new EventEmitter<AlchemySignerClientEvents>();\n    this.connectionConfig = ConnectionConfigSchema.parse(connection);\n    this.turnkeyClient = new TurnkeyClient(\n      { baseUrl: \"https://api.turnkey.com\" },\n      stamper\n    );\n  }\n\n  /**\n   * Asynchronously fetches and sets the OAuth configuration.\n   *\n   * @returns {Promise<OauthConfig>} A promise that resolves to the OAuth configuration\n   */\n  public initOauth = async (): Promise<OauthConfig> => {\n    this.oauthConfig = await this.getOauthConfig();\n    return this.oauthConfig;\n  };\n\n  protected get user() {\n    return this._user;\n  }\n\n  protected set user(user: User | undefined) {\n    if (user && !this._user) {\n      this.eventEmitter.emit(\"connected\", user);\n    } else if (!user && this._user) {\n      this.eventEmitter.emit(\"disconnected\");\n    }\n\n    this._user = user;\n  }\n\n  /**\n   * Sets the stamper of the TurnkeyClient.\n   *\n   * @param {TurnkeyClient[\"stamper\"]} stamper the stamper function to set for the TurnkeyClient\n   */\n  protected setStamper(stamper: TurnkeyClient[\"stamper\"]) {\n    this.turnkeyClient.stamper = stamper;\n  }\n\n  /**\n   * Exports wallet credentials based on the specified type, either as a SEED_PHRASE or PRIVATE_KEY.\n   *\n   * @param {object} params The parameters for exporting the wallet\n   * @param {ExportWalletStamper} params.exportStamper The stamper used for exporting the wallet\n   * @param {\"SEED_PHRASE\" | \"PRIVATE_KEY\"} params.exportAs Specifies the format for exporting the wallet, either as a SEED_PHRASE or PRIVATE_KEY\n   * @returns {Promise<boolean>} A promise that resolves to true if the export is successful\n   */\n  protected exportWalletInner(params: {\n    exportStamper: ExportWalletStamper;\n    exportAs: \"SEED_PHRASE\" | \"PRIVATE_KEY\";\n  }): Promise<boolean> {\n    const { exportAs } = params;\n    switch (exportAs) {\n      case \"PRIVATE_KEY\":\n        return this.exportAsPrivateKey(params.exportStamper);\n      case \"SEED_PHRASE\":\n        return this.exportAsSeedPhrase(params.exportStamper);\n      default:\n        assertNever(exportAs, `Unknown export mode: ${exportAs}`);\n    }\n  }\n\n  // #region ABSTRACT METHODS\n\n  public abstract createAccount(\n    params: CreateAccountParams\n  ): Promise<SignupResponse>;\n\n  public abstract initEmailAuth(\n    params: Omit<EmailAuthParams, \"targetPublicKey\">\n  ): Promise<{ orgId: string; otpId?: string }>;\n\n  public abstract completeAuthWithBundle(params: {\n    bundle: string;\n    orgId: string;\n    connectedEventName: keyof AlchemySignerClientEvents;\n    authenticatingType: AuthenticatingEventMetadata[\"type\"];\n    idToken?: string;\n  }): Promise<User>;\n\n  public abstract oauthWithRedirect(\n    args: Extract<OauthParams, { mode: \"redirect\" }>\n  ): Promise<User | never>;\n\n  public abstract oauthWithPopup(\n    args: Extract<OauthParams, { mode: \"popup\" }>\n  ): Promise<User>;\n\n  public abstract submitOtpCode(\n    args: Omit<OtpParams, \"targetPublicKey\">\n  ): Promise<{ bundle: string }>;\n\n  public abstract disconnect(): Promise<void>;\n\n  public abstract exportWallet(params: TExportWalletParams): Promise<boolean>;\n\n  public abstract lookupUserWithPasskey(user?: User): Promise<User>;\n\n  public abstract targetPublicKey(): Promise<string>;\n\n  protected abstract getOauthConfig(): Promise<OauthConfig>;\n\n  protected abstract getWebAuthnAttestation(\n    options: CredentialCreationOptions,\n    userDetails?: { username: string }\n  ): Promise<GetWebAuthnAttestationResult>;\n\n  // #endregion\n\n  // #region PUBLIC METHODS\n\n  /**\n   * Listen to events emitted by the client\n   *\n   * @param {AlchemySignerClientEvent} event the event you want to listen to\n   * @param {AlchemySignerClientEvents[AlchemySignerClientEvent]} listener the callback function to execute when an event is fired\n   * @returns {() => void} a function that will remove the listener when called\n   */\n  public on = <E extends AlchemySignerClientEvent>(\n    event: E,\n    listener: AlchemySignerClientEvents[E]\n  ) => {\n    this.eventEmitter.on(event, listener as any);\n\n    return () => this.eventEmitter.removeListener(event, listener as any);\n  };\n\n  /**\n   * Handles the creation of authenticators using WebAuthn attestation and the provided options. Requires the user to be authenticated.\n   *\n   * @param {CredentialCreationOptions} options The options used to create the WebAuthn attestation\n   * @returns {Promise<string[]>} A promise that resolves to an array of authenticator IDs\n   * @throws {NotAuthenticatedError} If the user is not authenticated\n   */\n  public addPasskey = async (options: CredentialCreationOptions) => {\n    if (!this.user) {\n      throw new NotAuthenticatedError();\n    }\n    const { attestation, challenge } = await this.getWebAuthnAttestation(\n      options\n    );\n\n    const { activity } = await this.turnkeyClient.createAuthenticators({\n      type: \"ACTIVITY_TYPE_CREATE_AUTHENTICATORS_V2\",\n      timestampMs: Date.now().toString(),\n      organizationId: this.user.orgId,\n      parameters: {\n        userId: this.user.userId,\n        authenticators: [\n          {\n            attestation,\n            authenticatorName: `passkey-${Date.now().toString()}`,\n            challenge: base64UrlEncode(challenge),\n          },\n        ],\n      },\n    });\n\n    const { authenticatorIds } = await this.pollActivityCompletion(\n      activity,\n      this.user.orgId,\n      \"createAuthenticatorsResult\"\n    );\n\n    return authenticatorIds;\n  };\n\n  /**\n   * Retrieves the current user or fetches the user information if not already available.\n   *\n   * @param {string} [orgId] optional organization ID, defaults to the user's organization ID\n   * @param {string} idToken an OIDC ID token containing additional user information\n   * @returns {Promise<User>} A promise that resolves to the user object\n   * @throws {Error} if no organization ID is provided when there is no current user\n   */\n  public whoami = async (\n    orgId = this.user?.orgId,\n    idToken?: string\n  ): Promise<User> => {\n    if (this.user) {\n      return this.user;\n    }\n\n    if (!orgId) {\n      throw new Error(\"No orgId provided\");\n    }\n\n    const stampedRequest = await this.turnkeyClient.stampGetWhoami({\n      organizationId: orgId,\n    });\n\n    const user = await this.request(\"/v1/whoami\", {\n      stampedRequest,\n    });\n\n    if (idToken) {\n      const claims: Record<string, unknown> = jwtDecode(idToken);\n      user.idToken = idToken;\n      user.claims = claims;\n      if (typeof claims.email === \"string\") {\n        user.email = claims.email;\n      }\n    }\n\n    const credentialId = (() => {\n      try {\n        return JSON.parse(stampedRequest?.stamp.stampHeaderValue)\n          .credentialId as string;\n      } catch (e) {\n        return undefined;\n      }\n    })();\n\n    this.user = {\n      ...user,\n      credentialId,\n    };\n\n    return this.user;\n  };\n\n  /**\n   * Generates a stamped whoami request for the current user. This request can then be used to call /signer/v1/whoami to get the user information.\n   * This is useful if you want to get the user information in a different context like a server. You can pass the stamped request to the server\n   * and then call our API to get the user information. Using this stamp is the most trusted way to get the user information since a stamp can only\n   * belong to the user who created it.\n   *\n   * @returns {Promise<TSignedRequest>} a promise that resolves to the \"whoami\" information for the logged in user\n   * @throws {Error} if no organization ID is provided\n   */\n  public stampWhoami = async (): Promise<TSignedRequest> => {\n    if (!this.user) {\n      throw new Error(\"User must be authenticated to stamp a whoami request\");\n    }\n\n    return await this.turnkeyClient.stampGetWhoami({\n      organizationId: this.user.orgId,\n    });\n  };\n\n  /**\n   * Looks up information based on an email address.\n   *\n   * @param {string} email the email address to look up\n   * @returns {Promise<any>} the result of the lookup request\n   */\n  public lookupUserByEmail = async (email: string) => {\n    return this.request(\"/v1/lookup\", { email });\n  };\n\n  /**\n   * This will sign a message with the user's private key, without doing any transformations on the message.\n   * For SignMessage or SignTypedData, the caller should hash the message before calling this method and pass\n   * that result here.\n   *\n   * @param {Hex} msg the hex representation of the bytes to sign\n   * @param {string} mode specify if signing should happen for solana or ethereum\n   * @returns {Promise<Hex>} the signature over the raw hex\n   */\n  public signRawMessage = async (\n    msg: Hex,\n    mode: \"SOLANA\" | \"ETHEREUM\" = \"ETHEREUM\"\n  ): Promise<Hex> => {\n    if (!this.user) {\n      throw new NotAuthenticatedError();\n    }\n\n    if (!this.user.solanaAddress && mode === \"SOLANA\") {\n      // TODO: we need to add backwards compatibility for users who signed up before we added Solana support\n      throw new Error(\"No Solana address available for the user\");\n    }\n\n    const stampedRequest = await this.turnkeyClient.stampSignRawPayload({\n      organizationId: this.user.orgId,\n      type: \"ACTIVITY_TYPE_SIGN_RAW_PAYLOAD_V2\",\n      timestampMs: Date.now().toString(),\n      parameters: {\n        encoding: \"PAYLOAD_ENCODING_HEXADECIMAL\",\n        hashFunction:\n          mode === \"ETHEREUM\"\n            ? \"HASH_FUNCTION_NO_OP\"\n            : \"HASH_FUNCTION_NOT_APPLICABLE\",\n        payload: msg,\n        signWith:\n          mode === \"ETHEREUM\" ? this.user.address : this.user.solanaAddress!,\n      },\n    });\n\n    const { signature } = await this.request(\"/v1/sign-payload\", {\n      stampedRequest,\n    });\n\n    return signature;\n  };\n\n  /**\n   * Returns the current user or null if no user is set.\n   *\n   * @returns {User | null} the current user object or null if no user is available\n   */\n  public getUser = (): User | null => {\n    return this.user ?? null;\n  };\n\n  /**\n   * Sends a POST request to the given signer route with the specified body and returns the response.\n   * Not intended to be used directly, use the specific methods instead on the client instead.\n   *\n   * @param {SignerRoutes} route The route to which the request should be sent\n   * @param {SignerBody<R>} body The request body containing the data to be sent\n   * @returns {Promise<SignerResponse<R>>} A promise that resolves to the response from the signer\n   */\n  public request = async <R extends SignerRoutes>(\n    route: R,\n    body: SignerBody<R>\n  ): Promise<SignerResponse<R>> => {\n    const url = this.connectionConfig.rpcUrl ?? \"https://api.g.alchemy.com\";\n\n    const basePath = \"/signer\";\n\n    const headers = new Headers();\n    headers.append(\"Content-Type\", \"application/json\");\n    if (this.connectionConfig.apiKey) {\n      headers.append(\"Authorization\", `Bearer ${this.connectionConfig.apiKey}`);\n    } else if (this.connectionConfig.jwt) {\n      headers.append(\"Authorization\", `Bearer ${this.connectionConfig.jwt}`);\n    }\n\n    const response = await fetch(`${url}${basePath}${route}`, {\n      method: \"POST\",\n      body: JSON.stringify(body),\n      headers,\n    });\n\n    if (!response.ok) {\n      throw new Error(await response.text());\n    }\n\n    const json = await response.json();\n\n    return json as SignerResponse<R>;\n  };\n\n  // #endregion\n\n  // #region PRIVATE METHODS\n  private exportAsSeedPhrase = async (stamper: ExportWalletStamper) => {\n    if (!this.user) {\n      throw new NotAuthenticatedError();\n    }\n\n    const { wallets } = await this.turnkeyClient.getWallets({\n      organizationId: this.user.orgId,\n    });\n\n    const walletAccounts = await Promise.all(\n      wallets.map(({ walletId }) =>\n        this.turnkeyClient.getWalletAccounts({\n          organizationId: this.user!.orgId,\n          walletId,\n        })\n      )\n    ).then((x) => x.flatMap((x) => x.accounts));\n\n    const walletAccount = walletAccounts.find(\n      (x) => x.address === this.user!.address\n    );\n\n    if (!walletAccount) {\n      throw new Error(\n        `Could not find wallet associated with ${this.user.address}`\n      );\n    }\n\n    const { activity } = await this.turnkeyClient.exportWallet({\n      organizationId: this.user.orgId,\n      type: \"ACTIVITY_TYPE_EXPORT_WALLET\",\n      timestampMs: Date.now().toString(),\n      parameters: {\n        walletId: walletAccount!.walletId,\n        targetPublicKey: stamper.publicKey()!,\n      },\n    });\n\n    const { exportBundle } = await this.pollActivityCompletion(\n      activity,\n      this.user.orgId,\n      \"exportWalletResult\"\n    );\n\n    const result = await stamper.injectWalletExportBundle(exportBundle);\n\n    if (!result) {\n      throw new Error(\"Failed to inject wallet export bundle\");\n    }\n\n    return result;\n  };\n\n  private exportAsPrivateKey = async (stamper: ExportWalletStamper) => {\n    if (!this.user) {\n      throw new NotAuthenticatedError();\n    }\n\n    const { activity } = await this.turnkeyClient.exportWalletAccount({\n      organizationId: this.user.orgId,\n      type: \"ACTIVITY_TYPE_EXPORT_WALLET_ACCOUNT\",\n      timestampMs: Date.now().toString(),\n      parameters: {\n        address: this.user.address,\n        targetPublicKey: stamper.publicKey()!,\n      },\n    });\n\n    const { exportBundle } = await this.pollActivityCompletion(\n      activity,\n      this.user.orgId,\n      \"exportWalletAccountResult\"\n    );\n\n    const result = await stamper.injectKeyExportBundle(exportBundle);\n\n    if (!result) {\n      throw new Error(\"Failed to inject wallet export bundle\");\n    }\n\n    return result;\n  };\n\n  /**\n   * Returns the authentication url for the selected OAuth Proivder\n   *\n   * @example\n   * ```ts\n   *\n   * cosnt oauthParams = {\n   *  authProviderId: \"google\",\n   *  isCustomProvider: false,\n   *  auth0Connection: undefined,\n   *  scope: undefined,\n   *  claims: undefined,\n   *  mode: \"redirect\",\n   *  redirectUrl: \"https://your-url-path/oauth-return\",\n   *  expirationSeconds: 3000\n   * };\n   *\n   * const turnkeyPublicKey = await this.initIframeStamper();\n   * const oauthCallbackUrl = this.oauthCallbackUrl;\n   * const oauthConfig = this.getOauthConfig() // Optional value for OauthConfig()\n   * const usesRelativeUrl = true // Optional value to determine if we use a relative (or absolute) url for the `redirect_url`\n   *\n   * const oauthProviderUrl = getOauthProviderUrl({\n   *  oauthParams,\n   *  turnkeyPublicKey,\n   *  oauthCallbackUrl\n   * })\n   *\n   * ```\n   * @param {GetOauthProviderUrlArgs} args Required. The Oauth provider's auth parameters\n   *\n   * @returns {Promise<string>} returns the Oauth provider's url\n   */\n  protected getOauthProviderUrl = async (\n    args: GetOauthProviderUrlArgs\n  ): Promise<string> => {\n    const {\n      oauthParams,\n      turnkeyPublicKey,\n      oauthCallbackUrl,\n      oauthConfig,\n      usesRelativeUrl = true,\n    } = args;\n\n    const {\n      authProviderId,\n      isCustomProvider,\n      auth0Connection,\n      scope: providedScope,\n      claims: providedClaims,\n      mode,\n      redirectUrl,\n      expirationSeconds,\n    } = oauthParams;\n\n    const { codeChallenge, requestKey, authProviders } =\n      oauthConfig ?? (await this.getOauthConfigForMode(mode));\n\n    if (!authProviders) {\n      throw new OAuthProvidersError();\n    }\n\n    const authProvider = authProviders.find(\n      (provider) =>\n        provider.id === authProviderId &&\n        !!provider.isCustomProvider === !!isCustomProvider\n    );\n\n    if (!authProvider) {\n      throw new Error(`No auth provider found with id ${authProviderId}`);\n    }\n\n    let scope: string;\n    let claims: string | undefined;\n\n    if (providedScope) {\n      scope = addOpenIdIfAbsent(providedScope);\n      claims = providedClaims;\n    } else {\n      if (isCustomProvider) {\n        throw new Error(\"scope must be provided for a custom provider\");\n      }\n      const scopeAndClaims = getDefaultScopeAndClaims(authProviderId);\n      if (!scopeAndClaims) {\n        throw new Error(\n          `Default scope not known for provider ${authProviderId}`\n        );\n      }\n      ({ scope, claims } = scopeAndClaims);\n    }\n    const { authEndpoint, clientId } = authProvider;\n\n    const nonce = this.getOauthNonce(turnkeyPublicKey);\n    const stateObject: OauthState = {\n      authProviderId,\n      isCustomProvider,\n      requestKey,\n      turnkeyPublicKey,\n      expirationSeconds,\n      redirectUrl:\n        mode === \"redirect\"\n          ? usesRelativeUrl\n            ? resolveRelativeUrl(redirectUrl)\n            : redirectUrl\n          : undefined,\n      openerOrigin: mode === \"popup\" ? window.location.origin : undefined,\n    };\n    const state = base64UrlEncode(\n      new TextEncoder().encode(JSON.stringify(stateObject))\n    );\n    const authUrl = new URL(authEndpoint);\n    const params: Record<string, string> = {\n      redirect_uri: oauthCallbackUrl,\n      response_type: \"code\",\n      scope,\n      state,\n      code_challenge: codeChallenge,\n      code_challenge_method: \"S256\",\n      prompt: \"select_account\",\n      client_id: clientId,\n      nonce,\n      // Fixes Facebook mobile login so that `window.opener` doesn't get nullified.\n      ...(mode === \"popup\" && authProvider.id === \"facebook\"\n        ? { sdk: \"joey\" }\n        : {}),\n    };\n    if (claims) {\n      params.claims = claims;\n    }\n    if (auth0Connection) {\n      params.connection = auth0Connection;\n    }\n\n    Object.keys(params).forEach((param) => {\n      params[param] && authUrl.searchParams.append(param, params[param]);\n    });\n\n    const [urlPath, searchParams] = authUrl.href.split(\"?\");\n\n    return `${urlPath?.replace(/\\/$/, \"\")}?${searchParams}`;\n  };\n\n  private getOauthConfigForMode = async (\n    mode: OauthMode\n  ): Promise<OauthConfig> => {\n    if (this.oauthConfig) {\n      return this.oauthConfig;\n    } else if (mode === \"redirect\") {\n      return this.initOauth();\n    } else {\n      throw new Error(\n        \"enablePopupOauth must be set in configuration or signer.preparePopupOauth must be called before using popup-based OAuth login\"\n      );\n    }\n  };\n\n  // eslint-disable-next-line eslint-rules/require-jsdoc-on-reexported-functions\n  protected pollActivityCompletion = async <\n    T extends keyof Awaited<\n      ReturnType<(typeof this.turnkeyClient)[\"getActivity\"]>\n    >[\"activity\"][\"result\"]\n  >(\n    activity: Awaited<\n      ReturnType<(typeof this.turnkeyClient)[\"getActivity\"]>\n    >[\"activity\"],\n    organizationId: string,\n    resultKey: T\n  ): Promise<\n    NonNullable<\n      Awaited<\n        ReturnType<(typeof this.turnkeyClient)[\"getActivity\"]>\n      >[\"activity\"][\"result\"][T]\n    >\n  > => {\n    if (activity.status === \"ACTIVITY_STATUS_COMPLETED\") {\n      return activity.result[resultKey]!;\n    }\n\n    const {\n      activity: { status, id, result },\n    } = await this.turnkeyClient.getActivity({\n      activityId: activity.id,\n      organizationId,\n    });\n\n    if (status === \"ACTIVITY_STATUS_COMPLETED\") {\n      return result[resultKey]!;\n    }\n\n    if (\n      status === \"ACTIVITY_STATUS_FAILED\" ||\n      status === \"ACTIVITY_STATUS_REJECTED\" ||\n      status === \"ACTIVITY_STATUS_CONSENSUS_NEEDED\"\n    ) {\n      throw new Error(\n        `Failed to get activity with with id ${id} (status: ${status})`\n      );\n    }\n\n    // TODO: add ability to configure this + add exponential backoff\n    await new Promise((resolve) => setTimeout(resolve, 500));\n\n    return this.pollActivityCompletion(activity, organizationId, resultKey);\n  };\n  // #endregion\n\n  /**\n   * Turnkey requires the nonce in the id token to be in this format.\n   *\n   * @param {string} turnkeyPublicKey key from a Turnkey iframe\n   * @returns {string} nonce to be used in OIDC\n   */\n  protected getOauthNonce = (turnkeyPublicKey: string): string => {\n    return sha256(new TextEncoder().encode(turnkeyPublicKey)).slice(2);\n  };\n}\n"]}
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../../src/client/base.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAyB,MAAM,cAAc,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAuB,MAAM,eAAe,CAAC;AACnE,OAAO,YAAY,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,MAAM,EAAY,MAAM,MAAM,CAAC;AACxC,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAC1E,OAAO,EAAE,+BAA+B,EAAE,MAAM,aAAa,CAAC;AAE9D,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAqBzD,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAexC;;GAEG;AACH,MAAM,OAAgB,gBAAgB;IAOpC;;;;OAIG;IACH,YAAY,MAA8B;QAXlC;;;;;WAAwB;QACxB;;;;;WAAmC;QACjC;;;;;WAA6B;QAC7B;;;;;WAAgB;QAChB;;;;;WAAsD;QACtD;;;;;WAAqC;QAiB/C;;;;WAIG;QACI;;;;mBAAY,KAAK,IAA0B,EAAE;gBAClD,IAAI,CAAC,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;gBAC/C,OAAO,IAAI,CAAC,WAAW,CAAC;YAC1B,CAAC;WAAC;QAiGF,aAAa;QAEb,yBAAyB;QAEzB;;;;;;WAMG;QACI;;;;mBAAK,CACV,KAAQ,EACR,QAAsC,EACtC,EAAE;gBACF,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,QAAe,CAAC,CAAC;gBAE7C,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,KAAK,EAAE,QAAe,CAAC,CAAC;YACxE,CAAC;WAAC;QAEF;;;;;;WAMG;QACI;;;;mBAAa,KAAK,EAAE,OAAkC,EAAE,EAAE;gBAC/D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACf,MAAM,IAAI,qBAAqB,EAAE,CAAC;gBACpC,CAAC;gBACD,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAClE,OAAO,CACR,CAAC;gBAEF,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC;oBACjE,IAAI,EAAE,wCAAwC;oBAC9C,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;oBAClC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;oBAC/B,UAAU,EAAE;wBACV,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;wBACxB,cAAc,EAAE;4BACd;gCACE,WAAW;gCACX,iBAAiB,EAAE,WAAW,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE;gCACrD,SAAS,EAAE,eAAe,CAAC,SAAS,CAAC;6BACtC;yBACF;qBACF;iBACF,CAAC,CAAC;gBAEH,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAC5D,QAAQ,EACR,IAAI,CAAC,IAAI,CAAC,KAAK,EACf,4BAA4B,CAC7B,CAAC;gBAEF,OAAO,gBAAgB,CAAC;YAC1B,CAAC;WAAC;QAEF;;;;;;;WAOG;QACI;;;;mBAAS,KAAK,EACnB,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,EACxB,OAAgB,EACD,EAAE;gBACjB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;oBACd,OAAO,IAAI,CAAC,IAAI,CAAC;gBACnB,CAAC;gBAED,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;gBACvC,CAAC;gBAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC;oBAC7D,cAAc,EAAE,KAAK;iBACtB,CAAC,CAAC;gBAEH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE;oBAC5C,cAAc;iBACf,CAAC,CAAC;gBAEH,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,MAAM,GAA4B,SAAS,CAAC,OAAO,CAAC,CAAC;oBAC3D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;oBACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;oBACrB,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;wBACrC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;oBAC5B,CAAC;gBACH,CAAC;gBAED,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE;oBACzB,IAAI,CAAC;wBACH,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,gBAAgB,CAAC;6BACtD,YAAsB,CAAC;oBAC5B,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBACX,OAAO,SAAS,CAAC;oBACnB,CAAC;gBACH,CAAC,CAAC,EAAE,CAAC;gBAEL,IAAI,CAAC,IAAI,GAAG;oBACV,GAAG,IAAI;oBACP,YAAY;iBACb,CAAC;gBAEF,OAAO,IAAI,CAAC,IAAI,CAAC;YACnB,CAAC;WAAC;QAEF;;;;;;;;WAQG;QACI;;;;mBAAc,KAAK,IAA6B,EAAE;gBACvD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACf,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;gBAC1E,CAAC;gBAED,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC;oBAC7C,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;iBAChC,CAAC,CAAC;YACL,CAAC;WAAC;QAEF;;;;;WAKG;QACI;;;;mBAAoB,KAAK,EAAE,KAAa,EAAE,EAAE;gBACjD,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/C,CAAC;WAAC;QAEF;;;;;;;;WAQG;QACI;;;;mBAAiB,KAAK,EAC3B,GAAQ,EACR,OAA8B,UAAU,EAC1B,EAAE;gBAChB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACf,MAAM,IAAI,qBAAqB,EAAE,CAAC;gBACpC,CAAC;gBAED,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAClD,sGAAsG;oBACtG,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;gBAC9D,CAAC;gBAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC;oBAClE,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;oBAC/B,IAAI,EAAE,mCAAmC;oBACzC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;oBAClC,UAAU,EAAE;wBACV,QAAQ,EAAE,8BAA8B;wBACxC,YAAY,EACV,IAAI,KAAK,UAAU;4BACjB,CAAC,CAAC,qBAAqB;4BACvB,CAAC,CAAC,8BAA8B;wBACpC,OAAO,EAAE,GAAG;wBACZ,QAAQ,EACN,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,aAAc;qBACrE;iBACF,CAAC,CAAC;gBAEH,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE;oBAC3D,cAAc;iBACf,CAAC,CAAC;gBAEH,OAAO,SAAS,CAAC;YACnB,CAAC;WAAC;QAEF;;;;WAIG;QACI;;;;mBAAU,GAAgB,EAAE;gBACjC,OAAO,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;YAC3B,CAAC;WAAC;QAEF;;;;;;;WAOG;QACI;;;;mBAAU,KAAK,EACpB,KAAQ,EACR,IAAmB,EACS,EAAE;gBAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,IAAI,2BAA2B,CAAC;gBAExE,MAAM,QAAQ,GAAG,SAAS,CAAC;gBAE3B,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;gBAC9B,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAAC;gBAClD,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;gBACnD,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC;oBACjC,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC5E,CAAC;qBAAM,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,CAAC;oBACrC,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,CAAC,CAAC;gBACzE,CAAC;gBAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,GAAG,QAAQ,GAAG,KAAK,EAAE,EAAE;oBACxD,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;oBAC1B,OAAO;iBACR,CAAC,CAAC;gBAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,IAAI,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;gBACzC,CAAC;gBAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAEnC,OAAO,IAAyB,CAAC;YACnC,CAAC;WAAC;QAEF,aAAa;QAEb,0BAA0B;QAClB;;;;mBAAqB,KAAK,EAAE,OAA4B,EAAE,EAAE;gBAClE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACf,MAAM,IAAI,qBAAqB,EAAE,CAAC;gBACpC,CAAC;gBAED,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC;oBACtD,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;iBAChC,CAAC,CAAC;gBAEH,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,GAAG,CACtC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAC3B,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC;oBACnC,cAAc,EAAE,IAAI,CAAC,IAAK,CAAC,KAAK;oBAChC,QAAQ;iBACT,CAAC,CACH,CACF,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAE5C,MAAM,aAAa,GAAG,cAAc,CAAC,IAAI,CACvC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,IAAK,CAAC,OAAO,CACxC,CAAC;gBAEF,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,MAAM,IAAI,KAAK,CACb,yCAAyC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAC7D,CAAC;gBACJ,CAAC;gBAED,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC;oBACzD,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;oBAC/B,IAAI,EAAE,6BAA6B;oBACnC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;oBAClC,UAAU,EAAE;wBACV,QAAQ,EAAE,aAAc,CAAC,QAAQ;wBACjC,eAAe,EAAE,OAAO,CAAC,SAAS,EAAG;qBACtC;iBACF,CAAC,CAAC;gBAEH,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,IAAI,CAAC,sBAAsB,CACxD,QAAQ,EACR,IAAI,CAAC,IAAI,CAAC,KAAK,EACf,oBAAoB,CACrB,CAAC;gBAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC;gBAEpE,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;gBAC3D,CAAC;gBAED,OAAO,MAAM,CAAC;YAChB,CAAC;WAAC;QAEM;;;;mBAAqB,KAAK,EAAE,OAA4B,EAAE,EAAE;gBAClE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACf,MAAM,IAAI,qBAAqB,EAAE,CAAC;gBACpC,CAAC;gBAED,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC;oBAChE,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK;oBAC/B,IAAI,EAAE,qCAAqC;oBAC3C,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;oBAClC,UAAU,EAAE;wBACV,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO;wBAC1B,eAAe,EAAE,OAAO,CAAC,SAAS,EAAG;qBACtC;iBACF,CAAC,CAAC;gBAEH,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,IAAI,CAAC,sBAAsB,CACxD,QAAQ,EACR,IAAI,CAAC,IAAI,CAAC,KAAK,EACf,2BAA2B,CAC5B,CAAC;gBAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC;gBAEjE,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;gBAC3D,CAAC;gBAED,OAAO,MAAM,CAAC;YAChB,CAAC;WAAC;QAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAgCG;QACO;;;;mBAAsB,KAAK,EACnC,IAA6B,EACZ,EAAE;gBACnB,MAAM,EACJ,WAAW,EACX,gBAAgB,EAChB,gBAAgB,EAChB,WAAW,EACX,eAAe,GAAG,IAAI,GACvB,GAAG,IAAI,CAAC;gBAET,MAAM,EACJ,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,KAAK,EAAE,aAAa,EACpB,MAAM,EAAE,cAAc,EACtB,eAAe,EAAE,uBAAuB,EACxC,IAAI,EACJ,WAAW,EACX,iBAAiB,GAClB,GAAG,WAAW,CAAC;gBAEhB,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,aAAa,EAAE,GAChD,WAAW,IAAI,CAAC,MAAM,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;gBAE1D,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,MAAM,IAAI,mBAAmB,EAAE,CAAC;gBAClC,CAAC;gBAED,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,CACrC,CAAC,QAAQ,EAAE,EAAE,CACX,QAAQ,CAAC,EAAE,KAAK,cAAc;oBAC9B,CAAC,CAAC,QAAQ,CAAC,gBAAgB,KAAK,CAAC,CAAC,gBAAgB,CACrD,CAAC;gBAEF,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,MAAM,IAAI,KAAK,CAAC,kCAAkC,cAAc,EAAE,CAAC,CAAC;gBACtE,CAAC;gBAED,IAAI,KAAK,GAAuB,aAAa,CAAC;gBAC9C,IAAI,MAAM,GAAuB,cAAc,CAAC;gBAChD,IAAI,eAAe,GACjB,uBAAuB,CAAC;gBAE1B,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBACtB,MAAM,oBAAoB,GACxB,+BAA+B,CAAC,cAAc,CAAC,CAAC;oBAClD,KAAK,KAAL,KAAK,GAAK,oBAAoB,EAAE,KAAK,EAAC;oBACtC,MAAM,KAAN,MAAM,GAAK,oBAAoB,EAAE,MAAM,EAAC;oBACxC,eAAe,KAAf,eAAe,GAAK,oBAAoB,EAAE,eAAe,EAAC;gBAC5D,CAAC;gBACD,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,MAAM,IAAI,KAAK,CAAC,wCAAwC,cAAc,EAAE,CAAC,CAAC;gBAC5E,CAAC;gBACD,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,YAAY,CAAC;gBAEhD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC;gBACnD,MAAM,WAAW,GAAe;oBAC9B,cAAc;oBACd,gBAAgB;oBAChB,UAAU;oBACV,gBAAgB;oBAChB,iBAAiB;oBACjB,WAAW,EACT,IAAI,KAAK,UAAU;wBACjB,CAAC,CAAC,eAAe;4BACf,CAAC,CAAC,kBAAkB,CAAC,WAAW,CAAC;4BACjC,CAAC,CAAC,WAAW;wBACf,CAAC,CAAC,SAAS;oBACf,YAAY,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;iBACpE,CAAC;gBACF,MAAM,KAAK,GAAG,eAAe,CAC3B,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CACtD,CAAC;gBACF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;gBACtC,MAAM,MAAM,GAA2B;oBACrC,YAAY,EAAE,gBAAgB;oBAC9B,aAAa,EAAE,MAAM;oBACrB,KAAK;oBACL,KAAK;oBACL,cAAc,EAAE,aAAa;oBAC7B,qBAAqB,EAAE,MAAM;oBAC7B,MAAM,EAAE,gBAAgB;oBACxB,SAAS,EAAE,QAAQ;oBACnB,KAAK;oBACL,GAAG,eAAe;iBACnB,CAAC;gBACF,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;gBACzB,CAAC;gBACD,IAAI,eAAe,EAAE,CAAC;oBACpB,MAAM,CAAC,UAAU,GAAG,eAAe,CAAC;gBACtC,CAAC;gBAED,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;oBACpC,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBACrE,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAExD,OAAO,GAAG,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,YAAY,EAAE,CAAC;YAC1D,CAAC;WAAC;QAEM;;;;mBAAwB,KAAK,EACnC,IAAe,EACO,EAAE;gBACxB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBACrB,OAAO,IAAI,CAAC,WAAW,CAAC;gBAC1B,CAAC;qBAAM,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;oBAC/B,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC1B,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,KAAK,CACb,+HAA+H,CAChI,CAAC;gBACJ,CAAC;YACH,CAAC;WAAC;QAEF,8EAA8E;QACpE;;;;mBAAyB,KAAK,EAKtC,QAEa,EACb,cAAsB,EACtB,SAAY,EAOZ,EAAE;gBACF,IAAI,QAAQ,CAAC,MAAM,KAAK,2BAA2B,EAAE,CAAC;oBACpD,OAAO,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAE,CAAC;gBACrC,CAAC;gBAED,MAAM,EACJ,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GACjC,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;oBACvC,UAAU,EAAE,QAAQ,CAAC,EAAE;oBACvB,cAAc;iBACf,CAAC,CAAC;gBAEH,IAAI,MAAM,KAAK,2BAA2B,EAAE,CAAC;oBAC3C,OAAO,MAAM,CAAC,SAAS,CAAE,CAAC;gBAC5B,CAAC;gBAED,IACE,MAAM,KAAK,wBAAwB;oBACnC,MAAM,KAAK,0BAA0B;oBACrC,MAAM,KAAK,kCAAkC,EAC7C,CAAC;oBACD,MAAM,IAAI,KAAK,CACb,uCAAuC,EAAE,aAAa,MAAM,GAAG,CAChE,CAAC;gBACJ,CAAC;gBAED,gEAAgE;gBAChE,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;gBAEzD,OAAO,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;YAC1E,CAAC;WAAC;QACF,aAAa;QAEb;;;;;WAKG;QACO;;;;mBAAgB,CAAC,gBAAwB,EAAU,EAAE;gBAC7D,OAAO,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACrE,CAAC;WAAC;QAvoBA,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;QAClD,IAAI,CAAC,OAAO,GAAG,SAAS,IAAI,sCAAsC,CAAC;QACnE,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,EAA6B,CAAC;QAClE,IAAI,CAAC,gBAAgB,GAAG,sBAAsB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACjE,IAAI,CAAC,aAAa,GAAG,IAAI,aAAa,CACpC,EAAE,OAAO,EAAE,yBAAyB,EAAE,EACtC,OAAO,CACR,CAAC;IACJ,CAAC;IAYD,IAAc,IAAI;QAChB,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,IAAc,IAAI,CAAC,IAAsB;QACvC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC5C,CAAC;aAAM,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC/B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACzC,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED;;;;OAIG;IACO,UAAU,CAAC,OAAiC;QACpD,IAAI,CAAC,aAAa,CAAC,OAAO,GAAG,OAAO,CAAC;IACvC,CAAC;IAED;;;;;;;OAOG;IACO,iBAAiB,CAAC,MAG3B;QACC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;QAC5B,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,aAAa;gBAChB,OAAO,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YACvD,KAAK,aAAa;gBAChB,OAAO,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YACvD;gBACE,WAAW,CAAC,QAAQ,EAAE,wBAAwB,QAAQ,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;CAwkBF","sourcesContent":["import { ConnectionConfigSchema, type ConnectionConfig } from \"@aa-sdk/core\";\nimport { TurnkeyClient, type TSignedRequest } from \"@turnkey/http\";\nimport EventEmitter from \"eventemitter3\";\nimport { jwtDecode } from \"jwt-decode\";\nimport { sha256, type Hex } from \"viem\";\nimport { NotAuthenticatedError, OAuthProvidersError } from \"../errors.js\";\nimport { getDefaultProviderCustomization } from \"../oauth.js\";\nimport type { OauthMode } from \"../signer.js\";\nimport { base64UrlEncode } from \"../utils/base64UrlEncode.js\";\nimport { resolveRelativeUrl } from \"../utils/resolveRelativeUrl.js\";\nimport { assertNever } from \"../utils/typeAssertions.js\";\nimport type {\n  AlchemySignerClientEvent,\n  AlchemySignerClientEvents,\n  AuthenticatingEventMetadata,\n  CreateAccountParams,\n  EmailAuthParams,\n  GetOauthProviderUrlArgs,\n  GetWebAuthnAttestationResult,\n  JwtParams,\n  JwtResponse,\n  OauthConfig,\n  OauthParams,\n  OauthState,\n  OtpParams,\n  SignerBody,\n  SignerResponse,\n  SignerRoutes,\n  SignupResponse,\n  User,\n} from \"./types.js\";\nimport { VERSION } from \"../version.js\";\n\nexport interface BaseSignerClientParams {\n  stamper: TurnkeyClient[\"stamper\"];\n  connection: ConnectionConfig;\n  rootOrgId?: string;\n  rpId?: string;\n}\n\nexport type ExportWalletStamper = TurnkeyClient[\"stamper\"] & {\n  injectWalletExportBundle(bundle: string): Promise<boolean>;\n  injectKeyExportBundle(bundle: string): Promise<boolean>;\n  publicKey(): string | null;\n};\n\n/**\n * Base class for all Alchemy Signer clients\n */\nexport abstract class BaseSignerClient<TExportWalletParams = unknown> {\n  private _user: User | undefined;\n  private connectionConfig: ConnectionConfig;\n  protected turnkeyClient: TurnkeyClient;\n  protected rootOrg: string;\n  protected eventEmitter: EventEmitter<AlchemySignerClientEvents>;\n  protected oauthConfig: OauthConfig | undefined;\n  /**\n   * Create a new instance of the Alchemy Signer client\n   *\n   * @param {BaseSignerClientParams} params the parameters required to create the client\n   */\n  constructor(params: BaseSignerClientParams) {\n    const { stamper, connection, rootOrgId } = params;\n    this.rootOrg = rootOrgId ?? \"24c1acf5-810f-41e0-a503-d5d13fa8e830\";\n    this.eventEmitter = new EventEmitter<AlchemySignerClientEvents>();\n    this.connectionConfig = ConnectionConfigSchema.parse(connection);\n    this.turnkeyClient = new TurnkeyClient(\n      { baseUrl: \"https://api.turnkey.com\" },\n      stamper\n    );\n  }\n\n  /**\n   * Asynchronously fetches and sets the OAuth configuration.\n   *\n   * @returns {Promise<OauthConfig>} A promise that resolves to the OAuth configuration\n   */\n  public initOauth = async (): Promise<OauthConfig> => {\n    this.oauthConfig = await this.getOauthConfig();\n    return this.oauthConfig;\n  };\n\n  protected get user() {\n    return this._user;\n  }\n\n  protected set user(user: User | undefined) {\n    if (user && !this._user) {\n      this.eventEmitter.emit(\"connected\", user);\n    } else if (!user && this._user) {\n      this.eventEmitter.emit(\"disconnected\");\n    }\n\n    this._user = user;\n  }\n\n  /**\n   * Sets the stamper of the TurnkeyClient.\n   *\n   * @param {TurnkeyClient[\"stamper\"]} stamper the stamper function to set for the TurnkeyClient\n   */\n  protected setStamper(stamper: TurnkeyClient[\"stamper\"]) {\n    this.turnkeyClient.stamper = stamper;\n  }\n\n  /**\n   * Exports wallet credentials based on the specified type, either as a SEED_PHRASE or PRIVATE_KEY.\n   *\n   * @param {object} params The parameters for exporting the wallet\n   * @param {ExportWalletStamper} params.exportStamper The stamper used for exporting the wallet\n   * @param {\"SEED_PHRASE\" | \"PRIVATE_KEY\"} params.exportAs Specifies the format for exporting the wallet, either as a SEED_PHRASE or PRIVATE_KEY\n   * @returns {Promise<boolean>} A promise that resolves to true if the export is successful\n   */\n  protected exportWalletInner(params: {\n    exportStamper: ExportWalletStamper;\n    exportAs: \"SEED_PHRASE\" | \"PRIVATE_KEY\";\n  }): Promise<boolean> {\n    const { exportAs } = params;\n    switch (exportAs) {\n      case \"PRIVATE_KEY\":\n        return this.exportAsPrivateKey(params.exportStamper);\n      case \"SEED_PHRASE\":\n        return this.exportAsSeedPhrase(params.exportStamper);\n      default:\n        assertNever(exportAs, `Unknown export mode: ${exportAs}`);\n    }\n  }\n\n  // #region ABSTRACT METHODS\n\n  public abstract createAccount(\n    params: CreateAccountParams\n  ): Promise<SignupResponse>;\n\n  public abstract initEmailAuth(\n    params: Omit<EmailAuthParams, \"targetPublicKey\">\n  ): Promise<{ orgId: string; otpId?: string }>;\n\n  public abstract completeAuthWithBundle(params: {\n    bundle: string;\n    orgId: string;\n    connectedEventName: keyof AlchemySignerClientEvents;\n    authenticatingType: AuthenticatingEventMetadata[\"type\"];\n    idToken?: string;\n  }): Promise<User>;\n\n  public abstract oauthWithRedirect(\n    args: Extract<OauthParams, { mode: \"redirect\" }>\n  ): Promise<User | never>;\n\n  public abstract oauthWithPopup(\n    args: Extract<OauthParams, { mode: \"popup\" }>\n  ): Promise<User>;\n\n  public abstract submitOtpCode(\n    args: Omit<OtpParams, \"targetPublicKey\">\n  ): Promise<{ bundle: string }>;\n\n  public abstract submitJwt(\n    args: Omit<JwtParams, \"targetPublicKey\">\n  ): Promise<JwtResponse>;\n\n  public abstract disconnect(): Promise<void>;\n\n  public abstract exportWallet(params: TExportWalletParams): Promise<boolean>;\n\n  public abstract lookupUserWithPasskey(user?: User): Promise<User>;\n\n  public abstract targetPublicKey(): Promise<string>;\n\n  protected abstract getOauthConfig(): Promise<OauthConfig>;\n\n  protected abstract getWebAuthnAttestation(\n    options: CredentialCreationOptions,\n    userDetails?: { username: string }\n  ): Promise<GetWebAuthnAttestationResult>;\n\n  // #endregion\n\n  // #region PUBLIC METHODS\n\n  /**\n   * Listen to events emitted by the client\n   *\n   * @param {AlchemySignerClientEvent} event the event you want to listen to\n   * @param {AlchemySignerClientEvents[AlchemySignerClientEvent]} listener the callback function to execute when an event is fired\n   * @returns {() => void} a function that will remove the listener when called\n   */\n  public on = <E extends AlchemySignerClientEvent>(\n    event: E,\n    listener: AlchemySignerClientEvents[E]\n  ) => {\n    this.eventEmitter.on(event, listener as any);\n\n    return () => this.eventEmitter.removeListener(event, listener as any);\n  };\n\n  /**\n   * Handles the creation of authenticators using WebAuthn attestation and the provided options. Requires the user to be authenticated.\n   *\n   * @param {CredentialCreationOptions} options The options used to create the WebAuthn attestation\n   * @returns {Promise<string[]>} A promise that resolves to an array of authenticator IDs\n   * @throws {NotAuthenticatedError} If the user is not authenticated\n   */\n  public addPasskey = async (options: CredentialCreationOptions) => {\n    if (!this.user) {\n      throw new NotAuthenticatedError();\n    }\n    const { attestation, challenge } = await this.getWebAuthnAttestation(\n      options\n    );\n\n    const { activity } = await this.turnkeyClient.createAuthenticators({\n      type: \"ACTIVITY_TYPE_CREATE_AUTHENTICATORS_V2\",\n      timestampMs: Date.now().toString(),\n      organizationId: this.user.orgId,\n      parameters: {\n        userId: this.user.userId,\n        authenticators: [\n          {\n            attestation,\n            authenticatorName: `passkey-${Date.now().toString()}`,\n            challenge: base64UrlEncode(challenge),\n          },\n        ],\n      },\n    });\n\n    const { authenticatorIds } = await this.pollActivityCompletion(\n      activity,\n      this.user.orgId,\n      \"createAuthenticatorsResult\"\n    );\n\n    return authenticatorIds;\n  };\n\n  /**\n   * Retrieves the current user or fetches the user information if not already available.\n   *\n   * @param {string} [orgId] optional organization ID, defaults to the user's organization ID\n   * @param {string} idToken an OIDC ID token containing additional user information\n   * @returns {Promise<User>} A promise that resolves to the user object\n   * @throws {Error} if no organization ID is provided when there is no current user\n   */\n  public whoami = async (\n    orgId = this.user?.orgId,\n    idToken?: string\n  ): Promise<User> => {\n    if (this.user) {\n      return this.user;\n    }\n\n    if (!orgId) {\n      throw new Error(\"No orgId provided\");\n    }\n\n    const stampedRequest = await this.turnkeyClient.stampGetWhoami({\n      organizationId: orgId,\n    });\n\n    const user = await this.request(\"/v1/whoami\", {\n      stampedRequest,\n    });\n\n    if (idToken) {\n      const claims: Record<string, unknown> = jwtDecode(idToken);\n      user.idToken = idToken;\n      user.claims = claims;\n      if (typeof claims.email === \"string\") {\n        user.email = claims.email;\n      }\n    }\n\n    const credentialId = (() => {\n      try {\n        return JSON.parse(stampedRequest?.stamp.stampHeaderValue)\n          .credentialId as string;\n      } catch (e) {\n        return undefined;\n      }\n    })();\n\n    this.user = {\n      ...user,\n      credentialId,\n    };\n\n    return this.user;\n  };\n\n  /**\n   * Generates a stamped whoami request for the current user. This request can then be used to call /signer/v1/whoami to get the user information.\n   * This is useful if you want to get the user information in a different context like a server. You can pass the stamped request to the server\n   * and then call our API to get the user information. Using this stamp is the most trusted way to get the user information since a stamp can only\n   * belong to the user who created it.\n   *\n   * @returns {Promise<TSignedRequest>} a promise that resolves to the \"whoami\" information for the logged in user\n   * @throws {Error} if no organization ID is provided\n   */\n  public stampWhoami = async (): Promise<TSignedRequest> => {\n    if (!this.user) {\n      throw new Error(\"User must be authenticated to stamp a whoami request\");\n    }\n\n    return await this.turnkeyClient.stampGetWhoami({\n      organizationId: this.user.orgId,\n    });\n  };\n\n  /**\n   * Looks up information based on an email address.\n   *\n   * @param {string} email the email address to look up\n   * @returns {Promise<any>} the result of the lookup request\n   */\n  public lookupUserByEmail = async (email: string) => {\n    return this.request(\"/v1/lookup\", { email });\n  };\n\n  /**\n   * This will sign a message with the user's private key, without doing any transformations on the message.\n   * For SignMessage or SignTypedData, the caller should hash the message before calling this method and pass\n   * that result here.\n   *\n   * @param {Hex} msg the hex representation of the bytes to sign\n   * @param {string} mode specify if signing should happen for solana or ethereum\n   * @returns {Promise<Hex>} the signature over the raw hex\n   */\n  public signRawMessage = async (\n    msg: Hex,\n    mode: \"SOLANA\" | \"ETHEREUM\" = \"ETHEREUM\"\n  ): Promise<Hex> => {\n    if (!this.user) {\n      throw new NotAuthenticatedError();\n    }\n\n    if (!this.user.solanaAddress && mode === \"SOLANA\") {\n      // TODO: we need to add backwards compatibility for users who signed up before we added Solana support\n      throw new Error(\"No Solana address available for the user\");\n    }\n\n    const stampedRequest = await this.turnkeyClient.stampSignRawPayload({\n      organizationId: this.user.orgId,\n      type: \"ACTIVITY_TYPE_SIGN_RAW_PAYLOAD_V2\",\n      timestampMs: Date.now().toString(),\n      parameters: {\n        encoding: \"PAYLOAD_ENCODING_HEXADECIMAL\",\n        hashFunction:\n          mode === \"ETHEREUM\"\n            ? \"HASH_FUNCTION_NO_OP\"\n            : \"HASH_FUNCTION_NOT_APPLICABLE\",\n        payload: msg,\n        signWith:\n          mode === \"ETHEREUM\" ? this.user.address : this.user.solanaAddress!,\n      },\n    });\n\n    const { signature } = await this.request(\"/v1/sign-payload\", {\n      stampedRequest,\n    });\n\n    return signature;\n  };\n\n  /**\n   * Returns the current user or null if no user is set.\n   *\n   * @returns {User | null} the current user object or null if no user is available\n   */\n  public getUser = (): User | null => {\n    return this.user ?? null;\n  };\n\n  /**\n   * Sends a POST request to the given signer route with the specified body and returns the response.\n   * Not intended to be used directly, use the specific methods instead on the client instead.\n   *\n   * @param {SignerRoutes} route The route to which the request should be sent\n   * @param {SignerBody<R>} body The request body containing the data to be sent\n   * @returns {Promise<SignerResponse<R>>} A promise that resolves to the response from the signer\n   */\n  public request = async <R extends SignerRoutes>(\n    route: R,\n    body: SignerBody<R>\n  ): Promise<SignerResponse<R>> => {\n    const url = this.connectionConfig.rpcUrl ?? \"https://api.g.alchemy.com\";\n\n    const basePath = \"/signer\";\n\n    const headers = new Headers();\n    headers.append(\"Alchemy-AA-Sdk-Version\", VERSION);\n    headers.append(\"Content-Type\", \"application/json\");\n    if (this.connectionConfig.apiKey) {\n      headers.append(\"Authorization\", `Bearer ${this.connectionConfig.apiKey}`);\n    } else if (this.connectionConfig.jwt) {\n      headers.append(\"Authorization\", `Bearer ${this.connectionConfig.jwt}`);\n    }\n\n    const response = await fetch(`${url}${basePath}${route}`, {\n      method: \"POST\",\n      body: JSON.stringify(body),\n      headers,\n    });\n\n    if (!response.ok) {\n      throw new Error(await response.text());\n    }\n\n    const json = await response.json();\n\n    return json as SignerResponse<R>;\n  };\n\n  // #endregion\n\n  // #region PRIVATE METHODS\n  private exportAsSeedPhrase = async (stamper: ExportWalletStamper) => {\n    if (!this.user) {\n      throw new NotAuthenticatedError();\n    }\n\n    const { wallets } = await this.turnkeyClient.getWallets({\n      organizationId: this.user.orgId,\n    });\n\n    const walletAccounts = await Promise.all(\n      wallets.map(({ walletId }) =>\n        this.turnkeyClient.getWalletAccounts({\n          organizationId: this.user!.orgId,\n          walletId,\n        })\n      )\n    ).then((x) => x.flatMap((x) => x.accounts));\n\n    const walletAccount = walletAccounts.find(\n      (x) => x.address === this.user!.address\n    );\n\n    if (!walletAccount) {\n      throw new Error(\n        `Could not find wallet associated with ${this.user.address}`\n      );\n    }\n\n    const { activity } = await this.turnkeyClient.exportWallet({\n      organizationId: this.user.orgId,\n      type: \"ACTIVITY_TYPE_EXPORT_WALLET\",\n      timestampMs: Date.now().toString(),\n      parameters: {\n        walletId: walletAccount!.walletId,\n        targetPublicKey: stamper.publicKey()!,\n      },\n    });\n\n    const { exportBundle } = await this.pollActivityCompletion(\n      activity,\n      this.user.orgId,\n      \"exportWalletResult\"\n    );\n\n    const result = await stamper.injectWalletExportBundle(exportBundle);\n\n    if (!result) {\n      throw new Error(\"Failed to inject wallet export bundle\");\n    }\n\n    return result;\n  };\n\n  private exportAsPrivateKey = async (stamper: ExportWalletStamper) => {\n    if (!this.user) {\n      throw new NotAuthenticatedError();\n    }\n\n    const { activity } = await this.turnkeyClient.exportWalletAccount({\n      organizationId: this.user.orgId,\n      type: \"ACTIVITY_TYPE_EXPORT_WALLET_ACCOUNT\",\n      timestampMs: Date.now().toString(),\n      parameters: {\n        address: this.user.address,\n        targetPublicKey: stamper.publicKey()!,\n      },\n    });\n\n    const { exportBundle } = await this.pollActivityCompletion(\n      activity,\n      this.user.orgId,\n      \"exportWalletAccountResult\"\n    );\n\n    const result = await stamper.injectKeyExportBundle(exportBundle);\n\n    if (!result) {\n      throw new Error(\"Failed to inject wallet export bundle\");\n    }\n\n    return result;\n  };\n\n  /**\n   * Returns the authentication url for the selected OAuth Proivder\n   *\n   * @example\n   * ```ts\n   *\n   * cosnt oauthParams = {\n   *  authProviderId: \"google\",\n   *  isCustomProvider: false,\n   *  auth0Connection: undefined,\n   *  scope: undefined,\n   *  claims: undefined,\n   *  mode: \"redirect\",\n   *  redirectUrl: \"https://your-url-path/oauth-return\",\n   *  expirationSeconds: 3000\n   * };\n   *\n   * const turnkeyPublicKey = await this.initIframeStamper();\n   * const oauthCallbackUrl = this.oauthCallbackUrl;\n   * const oauthConfig = this.getOauthConfig() // Optional value for OauthConfig()\n   * const usesRelativeUrl = true // Optional value to determine if we use a relative (or absolute) url for the `redirect_url`\n   *\n   * const oauthProviderUrl = getOauthProviderUrl({\n   *  oauthParams,\n   *  turnkeyPublicKey,\n   *  oauthCallbackUrl\n   * })\n   *\n   * ```\n   * @param {GetOauthProviderUrlArgs} args Required. The Oauth provider's auth parameters\n   *\n   * @returns {Promise<string>} returns the Oauth provider's url\n   */\n  protected getOauthProviderUrl = async (\n    args: GetOauthProviderUrlArgs\n  ): Promise<string> => {\n    const {\n      oauthParams,\n      turnkeyPublicKey,\n      oauthCallbackUrl,\n      oauthConfig,\n      usesRelativeUrl = true,\n    } = args;\n\n    const {\n      authProviderId,\n      isCustomProvider,\n      auth0Connection,\n      scope: providedScope,\n      claims: providedClaims,\n      otherParameters: providedOtherParameters,\n      mode,\n      redirectUrl,\n      expirationSeconds,\n    } = oauthParams;\n\n    const { codeChallenge, requestKey, authProviders } =\n      oauthConfig ?? (await this.getOauthConfigForMode(mode));\n\n    if (!authProviders) {\n      throw new OAuthProvidersError();\n    }\n\n    const authProvider = authProviders.find(\n      (provider) =>\n        provider.id === authProviderId &&\n        !!provider.isCustomProvider === !!isCustomProvider\n    );\n\n    if (!authProvider) {\n      throw new Error(`No auth provider found with id ${authProviderId}`);\n    }\n\n    let scope: string | undefined = providedScope;\n    let claims: string | undefined = providedClaims;\n    let otherParameters: Record<string, string> | undefined =\n      providedOtherParameters;\n\n    if (!isCustomProvider) {\n      const defaultCustomization =\n        getDefaultProviderCustomization(authProviderId);\n      scope ??= defaultCustomization?.scope;\n      claims ??= defaultCustomization?.claims;\n      otherParameters ??= defaultCustomization?.otherParameters;\n    }\n    if (!scope) {\n      throw new Error(`Default scope not known for provider ${authProviderId}`);\n    }\n    const { authEndpoint, clientId } = authProvider;\n\n    const nonce = this.getOauthNonce(turnkeyPublicKey);\n    const stateObject: OauthState = {\n      authProviderId,\n      isCustomProvider,\n      requestKey,\n      turnkeyPublicKey,\n      expirationSeconds,\n      redirectUrl:\n        mode === \"redirect\"\n          ? usesRelativeUrl\n            ? resolveRelativeUrl(redirectUrl)\n            : redirectUrl\n          : undefined,\n      openerOrigin: mode === \"popup\" ? window.location.origin : undefined,\n    };\n    const state = base64UrlEncode(\n      new TextEncoder().encode(JSON.stringify(stateObject))\n    );\n    const authUrl = new URL(authEndpoint);\n    const params: Record<string, string> = {\n      redirect_uri: oauthCallbackUrl,\n      response_type: \"code\",\n      scope,\n      state,\n      code_challenge: codeChallenge,\n      code_challenge_method: \"S256\",\n      prompt: \"select_account\",\n      client_id: clientId,\n      nonce,\n      ...otherParameters,\n    };\n    if (claims) {\n      params.claims = claims;\n    }\n    if (auth0Connection) {\n      params.connection = auth0Connection;\n    }\n\n    Object.keys(params).forEach((param) => {\n      params[param] && authUrl.searchParams.append(param, params[param]);\n    });\n\n    const [urlPath, searchParams] = authUrl.href.split(\"?\");\n\n    return `${urlPath?.replace(/\\/$/, \"\")}?${searchParams}`;\n  };\n\n  private getOauthConfigForMode = async (\n    mode: OauthMode\n  ): Promise<OauthConfig> => {\n    if (this.oauthConfig) {\n      return this.oauthConfig;\n    } else if (mode === \"redirect\") {\n      return this.initOauth();\n    } else {\n      throw new Error(\n        \"enablePopupOauth must be set in configuration or signer.preparePopupOauth must be called before using popup-based OAuth login\"\n      );\n    }\n  };\n\n  // eslint-disable-next-line eslint-rules/require-jsdoc-on-reexported-functions\n  protected pollActivityCompletion = async <\n    T extends keyof Awaited<\n      ReturnType<(typeof this.turnkeyClient)[\"getActivity\"]>\n    >[\"activity\"][\"result\"]\n  >(\n    activity: Awaited<\n      ReturnType<(typeof this.turnkeyClient)[\"getActivity\"]>\n    >[\"activity\"],\n    organizationId: string,\n    resultKey: T\n  ): Promise<\n    NonNullable<\n      Awaited<\n        ReturnType<(typeof this.turnkeyClient)[\"getActivity\"]>\n      >[\"activity\"][\"result\"][T]\n    >\n  > => {\n    if (activity.status === \"ACTIVITY_STATUS_COMPLETED\") {\n      return activity.result[resultKey]!;\n    }\n\n    const {\n      activity: { status, id, result },\n    } = await this.turnkeyClient.getActivity({\n      activityId: activity.id,\n      organizationId,\n    });\n\n    if (status === \"ACTIVITY_STATUS_COMPLETED\") {\n      return result[resultKey]!;\n    }\n\n    if (\n      status === \"ACTIVITY_STATUS_FAILED\" ||\n      status === \"ACTIVITY_STATUS_REJECTED\" ||\n      status === \"ACTIVITY_STATUS_CONSENSUS_NEEDED\"\n    ) {\n      throw new Error(\n        `Failed to get activity with with id ${id} (status: ${status})`\n      );\n    }\n\n    // TODO: add ability to configure this + add exponential backoff\n    await new Promise((resolve) => setTimeout(resolve, 500));\n\n    return this.pollActivityCompletion(activity, organizationId, resultKey);\n  };\n  // #endregion\n\n  /**\n   * Turnkey requires the nonce in the id token to be in this format.\n   *\n   * @param {string} turnkeyPublicKey key from a Turnkey iframe\n   * @returns {string} nonce to be used in OIDC\n   */\n  protected getOauthNonce = (turnkeyPublicKey: string): string => {\n    return sha256(new TextEncoder().encode(turnkeyPublicKey)).slice(2);\n  };\n}\n"]}