@account-kit/signer 4.30.0 → 4.31.1

package/dist/esm/signer.d.ts

@@ -320,6 +320,7 @@ export type AlchemySignerParams = z.input<typeof AlchemySignerParamsSchema>;
  * A SmartAccountSigner that can be used with any SmartContractAccount
  */
 export declare class AlchemyWebSigner extends BaseAlchemySigner<AlchemySignerWebClient> {
+    private static replaceStateFilterInstalled;
     /**
      * Initializes an instance with the provided Alchemy signer parameters after parsing them with a schema.
      *

package/dist/esm/signer.js

@@ -47,7 +47,7 @@ export class AlchemyWebSigner extends BaseAlchemySigner {
         else {
             client = params_.client;
         }
-        const { emailBundle, oauthBundle, oauthOrgId, oauthError, idToken, isSignup, } = getAndRemoveQueryParams({
+        const qpStructure = {
             emailBundle: "bundle",
             // We don't need this, but we still want to remove it from the URL.
             emailOrgId: "orgId",
@@ -56,7 +56,12 @@ export class AlchemyWebSigner extends BaseAlchemySigner {
             oauthError: "alchemy-error",
             idToken: "alchemy-id-token",
             isSignup: "aa-is-signup",
-        });
+        };
+        const { emailBundle, oauthBundle, oauthOrgId, oauthError, idToken, isSignup, } = getAndRemoveQueryParams(qpStructure);
+        if (!AlchemyWebSigner.replaceStateFilterInstalled) {
+            installReplaceStateFilter(Object.values(qpStructure));
+            AlchemyWebSigner.replaceStateFilterInstalled = true;
+        }
         const initialError = oauthError != null
             ? { name: "OauthError", message: oauthError }
             : undefined;
@@ -81,6 +86,48 @@ export class AlchemyWebSigner extends BaseAlchemySigner {
         }
     }
 }
+Object.defineProperty(AlchemyWebSigner, "replaceStateFilterInstalled", {
+    enumerable: true,
+    configurable: true,
+    writable: true,
+    value: false
+});
+/**
+ * Overrides `window.history.replaceState` to remove the specified query params from target URLs.
+ *
+ * @param {string[]} qpToRemove The query params to remove from target URLs.
+ */
+function installReplaceStateFilter(qpToRemove) {
+    const originalReplaceState = window.history.replaceState;
+    const processUrl = (src) => {
+        if (!src) {
+            return src;
+        }
+        try {
+            const url = new URL(src, document.baseURI);
+            const originalSearch = url.search;
+            qpToRemove.forEach((qp) => url.searchParams.delete(qp));
+            if (originalSearch === url.search)
+                return src;
+            console.log("[Alchemy] filtered query params from URL");
+            return url;
+        }
+        catch (e) {
+            console.log("[Alchemy] failed to process URL in state filter", e);
+            return src;
+        }
+    };
+    window.history.replaceState = function (...args) {
+        const [state, unused, url] = args;
+        const result = originalReplaceState.apply(this, [
+            state,
+            unused,
+            processUrl(url),
+        ]);
+        return result;
+    };
+    console.log("[Alchemy] installed window.history.replaceState interceptor");
+}
 /**
  * Reads and removes the specified query params from the URL.
  *

package/dist/esm/signer.js.map

@@ -1 +1 @@
-{"version":3,"file":"signer.js","sourceRoot":"","sources":["../../src/signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EACL,+BAA+B,EAC/B,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAK3B,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AA6ElE,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,MAAM,EAAE,CAAC;SACN,MAAM,EAA0B;SAChC,EAAE,CAAC,+BAA+B,CAAC;CACvC,CAAC;KACD,MAAM,CAAC;IACN,aAAa,EAAE,0BAA0B,CAAC,IAAI,CAAC;QAC7C,MAAM,EAAE,IAAI;KACb,CAAC,CAAC,QAAQ,EAAE;CACd,CAAC,CAAC;AAIL;;GAEG;AACH,MAAM,OAAO,gBAAiB,SAAQ,iBAAyC;IAC7E;;;;;;;;;;;;;;;;;;;;OAoBG;IAEH,YAAY,MAA2B;QACrC,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,EAAE,GACjC,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAE1C,IAAI,MAA8B,CAAC;QACnC,IAAI,YAAY,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnC,MAAM,GAAG,IAAI,sBAAsB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC1B,CAAC;QACD,MAAM,EACJ,WAAW,EACX,WAAW,EACX,UAAU,EACV,UAAU,EACV,OAAO,EACP,QAAQ,GACT,GAAG,uBAAuB,CAAC;YAC1B,WAAW,EAAE,QAAQ;YACrB,mEAAmE;YACnE,UAAU,EAAE,OAAO;YACnB,WAAW,EAAE,gBAAgB;YAC7B,UAAU,EAAE,gBAAgB;YAC5B,UAAU,EAAE,eAAe;YAC3B,OAAO,EAAE,kBAAkB;YAC3B,QAAQ,EAAE,cAAc;SACzB,CAAC,CAAC;QAEH,MAAM,YAAY,GAChB,UAAU,IAAI,IAAI;YAChB,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE;YAC7C,CAAC,CAAC,SAAS,CAAC;QAEhB,KAAK,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC;QAE/C,MAAM,SAAS,GAAG,QAAQ,KAAK,MAAM,CAAC;QAEtC,IAAI,CAAC,UAAU,GAAG,gBAAgB,CAAC;QAEnC,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,YAAY,CAAC;gBAChB,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,WAAW;gBACnB,SAAS;aACV,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,WAAW,IAAI,UAAU,IAAI,OAAO,EAAE,CAAC;YAChD,IAAI,CAAC,YAAY,CAAC;gBAChB,IAAI,EAAE,aAAa;gBACnB,MAAM,EAAE,WAAW;gBACnB,KAAK,EAAE,UAAU;gBACjB,OAAO;gBACP,SAAS;aACV,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF;AAED;;;;;;;GAOG;AACH,SAAS,uBAAuB,CAC9B,IAAO;IAEP,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAuC,EAAE,CAAC;IACtD,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC;QACvD,eAAe,KAAf,eAAe,GAAK,KAAK,IAAI,IAAI,EAAC;QAClC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACpB,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,MAAgD,CAAC;AAC1D,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { BaseAlchemySigner } from \"./base.js\";\nimport {\n  AlchemySignerClientParamsSchema,\n  AlchemySignerWebClient,\n} from \"./client/index.js\";\nimport type {\n  CredentialCreationOptionOverrides,\n  VerifyMfaParams,\n} from \"./client/types.js\";\nimport { SessionManagerParamsSchema } from \"./session/manager.js\";\n\nexport type AuthParams =\n  | {\n      type: \"email\";\n      email: string;\n      /** @deprecated This option will be overriden by dashboard settings. Please use the dashboard settings instead. This option will be removed in a future release. */\n      emailMode?: \"magicLink\" | \"otp\";\n      redirectParams?: URLSearchParams;\n      multiFactors?: VerifyMfaParams[];\n    }\n  | { type: \"email\"; bundle: string; orgId?: string; isNewUser?: boolean }\n  | {\n      type: \"passkey\";\n      email: string;\n      creationOpts?: CredentialCreationOptionOverrides;\n    }\n  | {\n      type: \"passkey\";\n      createNew: false;\n    }\n  | {\n      type: \"passkey\";\n      createNew: true;\n      username: string;\n      creationOpts?: CredentialCreationOptionOverrides;\n    }\n  | ({\n      type: \"oauth\";\n      scope?: string;\n      claims?: string;\n      otherParameters?: Record<string, string>;\n    } & OauthProviderConfig &\n      OauthRedirectConfig)\n  | {\n      type: \"oauthReturn\";\n      bundle: string;\n      orgId: string;\n      idToken: string;\n      isNewUser?: boolean;\n    }\n  | {\n      type: \"otp\";\n      otpCode: string;\n      multiFactors?: VerifyMfaParams[];\n    };\n\nexport type OauthProviderConfig =\n  | {\n      authProviderId: \"auth0\";\n      isCustomProvider?: false;\n      auth0Connection?: string;\n    }\n  | {\n      authProviderId: KnownAuthProvider;\n      isCustomProvider?: false;\n      auth0Connection?: never;\n    }\n  | {\n      authProviderId: string;\n      isCustomProvider: true;\n      auth0Connection?: never;\n    };\n\nexport type OauthRedirectConfig =\n  | { mode: \"redirect\"; redirectUrl: string }\n  | { mode: \"popup\"; redirectUrl?: never };\n\nexport type KnownAuthProvider =\n  | \"google\"\n  | \"apple\"\n  | \"facebook\"\n  | \"twitch\"\n  | \"auth0\";\n\nexport type OauthMode = \"redirect\" | \"popup\";\n\nexport const AlchemySignerParamsSchema = z\n  .object({\n    client: z\n      .custom<AlchemySignerWebClient>()\n      .or(AlchemySignerClientParamsSchema),\n  })\n  .extend({\n    sessionConfig: SessionManagerParamsSchema.omit({\n      client: true,\n    }).optional(),\n  });\n\nexport type AlchemySignerParams = z.input<typeof AlchemySignerParamsSchema>;\n\n/**\n * A SmartAccountSigner that can be used with any SmartContractAccount\n */\nexport class AlchemyWebSigner extends BaseAlchemySigner<AlchemySignerWebClient> {\n  /**\n   * Initializes an instance with the provided Alchemy signer parameters after parsing them with a schema.\n   *\n   * @example\n   * ```ts\n   * import { AlchemyWebSigner } from \"@account-kit/signer\";\n   *\n   * const signer = new AlchemyWebSigner({\n   *  client: {\n   *    connection: {\n   *      rpcUrl: \"/api/rpc\",\n   *    },\n   *    iframeConfig: {\n   *      iframeContainerId: \"alchemy-signer-iframe-container\",\n   *    },\n   *  },\n   * });\n   * ```\n   *\n   * @param {AlchemySignerParams} params The parameters for the Alchemy signer, including the client and session configuration\n   */\n\n  constructor(params: AlchemySignerParams) {\n    const { sessionConfig, ...params_ } =\n      AlchemySignerParamsSchema.parse(params);\n\n    let client: AlchemySignerWebClient;\n    if (\"connection\" in params_.client) {\n      client = new AlchemySignerWebClient(params_.client);\n    } else {\n      client = params_.client;\n    }\n    const {\n      emailBundle,\n      oauthBundle,\n      oauthOrgId,\n      oauthError,\n      idToken,\n      isSignup,\n    } = getAndRemoveQueryParams({\n      emailBundle: \"bundle\",\n      // We don't need this, but we still want to remove it from the URL.\n      emailOrgId: \"orgId\",\n      oauthBundle: \"alchemy-bundle\",\n      oauthOrgId: \"alchemy-org-id\",\n      oauthError: \"alchemy-error\",\n      idToken: \"alchemy-id-token\",\n      isSignup: \"aa-is-signup\",\n    });\n\n    const initialError =\n      oauthError != null\n        ? { name: \"OauthError\", message: oauthError }\n        : undefined;\n\n    super({ client, sessionConfig, initialError });\n\n    const isNewUser = isSignup === \"true\";\n\n    this.signerType = \"alchemy-signer\";\n\n    if (emailBundle) {\n      this.authenticate({\n        type: \"email\",\n        bundle: emailBundle,\n        isNewUser,\n      });\n    } else if (oauthBundle && oauthOrgId && idToken) {\n      this.authenticate({\n        type: \"oauthReturn\",\n        bundle: oauthBundle,\n        orgId: oauthOrgId,\n        idToken,\n        isNewUser,\n      });\n    }\n  }\n}\n\n/**\n * Reads and removes the specified query params from the URL.\n *\n * @param {T} keys object whose values are the query parameter keys to read and\n * remove\n * @returns {{ [K in keyof T]: string | undefined }} object with the same keys\n * as the input whose values are the values of the query params.\n */\nfunction getAndRemoveQueryParams<T extends Record<string, string>>(\n  keys: T\n): { [K in keyof T]: string | undefined } {\n  const url = new URL(window.location.href);\n  const result: Record<string, string | undefined> = {};\n  let foundQueryParam = false;\n  for (const [key, param] of Object.entries(keys)) {\n    const value = url.searchParams.get(param) ?? undefined;\n    foundQueryParam ||= value != null;\n    result[key] = value;\n    url.searchParams.delete(param);\n  }\n  if (foundQueryParam) {\n    window.history.replaceState(window.history.state, \"\", url.toString());\n  }\n  return result as { [K in keyof T]: string | undefined };\n}\n"]}
+{"version":3,"file":"signer.js","sourceRoot":"","sources":["../../src/signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EACL,+BAA+B,EAC/B,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAK3B,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AA6ElE,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,MAAM,EAAE,CAAC;SACN,MAAM,EAA0B;SAChC,EAAE,CAAC,+BAA+B,CAAC;CACvC,CAAC;KACD,MAAM,CAAC;IACN,aAAa,EAAE,0BAA0B,CAAC,IAAI,CAAC;QAC7C,MAAM,EAAE,IAAI;KACb,CAAC,CAAC,QAAQ,EAAE;CACd,CAAC,CAAC;AAIL;;GAEG;AACH,MAAM,OAAO,gBAAiB,SAAQ,iBAAyC;IAE7E;;;;;;;;;;;;;;;;;;;;OAoBG;IAEH,YAAY,MAA2B;QACrC,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,EAAE,GACjC,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAE1C,IAAI,MAA8B,CAAC;QACnC,IAAI,YAAY,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnC,MAAM,GAAG,IAAI,sBAAsB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC1B,CAAC;QAED,MAAM,WAAW,GAAG;YAClB,WAAW,EAAE,QAAQ;YACrB,mEAAmE;YACnE,UAAU,EAAE,OAAO;YACnB,WAAW,EAAE,gBAAgB;YAC7B,UAAU,EAAE,gBAAgB;YAC5B,UAAU,EAAE,eAAe;YAC3B,OAAO,EAAE,kBAAkB;YAC3B,QAAQ,EAAE,cAAc;SACzB,CAAC;QAEF,MAAM,EACJ,WAAW,EACX,WAAW,EACX,UAAU,EACV,UAAU,EACV,OAAO,EACP,QAAQ,GACT,GAAG,uBAAuB,CAAC,WAAW,CAAC,CAAC;QAEzC,IAAI,CAAC,gBAAgB,CAAC,2BAA2B,EAAE,CAAC;YAClD,yBAAyB,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;YACtD,gBAAgB,CAAC,2BAA2B,GAAG,IAAI,CAAC;QACtD,CAAC;QAED,MAAM,YAAY,GAChB,UAAU,IAAI,IAAI;YAChB,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE;YAC7C,CAAC,CAAC,SAAS,CAAC;QAEhB,KAAK,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC,CAAC;QAE/C,MAAM,SAAS,GAAG,QAAQ,KAAK,MAAM,CAAC;QAEtC,IAAI,CAAC,UAAU,GAAG,gBAAgB,CAAC;QAEnC,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,YAAY,CAAC;gBAChB,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,WAAW;gBACnB,SAAS;aACV,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,WAAW,IAAI,UAAU,IAAI,OAAO,EAAE,CAAC;YAChD,IAAI,CAAC,YAAY,CAAC;gBAChB,IAAI,EAAE,aAAa;gBACnB,MAAM,EAAE,WAAW;gBACnB,KAAK,EAAE,UAAU;gBACjB,OAAO;gBACP,SAAS;aACV,CAAC,CAAC;QACL,CAAC;IACH,CAAC;;AArFc;;;;WAA8B,KAAK;GAAC;AAwFrD;;;;GAIG;AACH,SAAS,yBAAyB,CAAC,UAAoB;IACrD,MAAM,oBAAoB,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC;IAEzD,MAAM,UAAU,GAAG,CAAC,GAAoC,EAAE,EAAE;QAC1D,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,GAAG,CAAC;QACb,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC3C,MAAM,cAAc,GAAG,GAAG,CAAC,MAAM,CAAC;YAElC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YACxD,IAAI,cAAc,KAAK,GAAG,CAAC,MAAM;gBAAE,OAAO,GAAG,CAAC;YAE9C,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;YACxD,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;YAClE,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,CAAC,OAAO,CAAC,YAAY,GAAG,UAAU,GAAG,IAAI;QAC7C,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;QAElC,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,IAAI,EAAE;YAC9C,KAAK;YACL,MAAM;YACN,UAAU,CAAC,GAAG,CAAC;SAChB,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,uBAAuB,CAC9B,IAAO;IAEP,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAuC,EAAE,CAAC;IACtD,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC;QACvD,eAAe,KAAf,eAAe,GAAK,KAAK,IAAI,IAAI,EAAC;QAClC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACpB,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,MAAgD,CAAC;AAC1D,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { BaseAlchemySigner } from \"./base.js\";\nimport {\n  AlchemySignerClientParamsSchema,\n  AlchemySignerWebClient,\n} from \"./client/index.js\";\nimport type {\n  CredentialCreationOptionOverrides,\n  VerifyMfaParams,\n} from \"./client/types.js\";\nimport { SessionManagerParamsSchema } from \"./session/manager.js\";\n\nexport type AuthParams =\n  | {\n      type: \"email\";\n      email: string;\n      /** @deprecated This option will be overriden by dashboard settings. Please use the dashboard settings instead. This option will be removed in a future release. */\n      emailMode?: \"magicLink\" | \"otp\";\n      redirectParams?: URLSearchParams;\n      multiFactors?: VerifyMfaParams[];\n    }\n  | { type: \"email\"; bundle: string; orgId?: string; isNewUser?: boolean }\n  | {\n      type: \"passkey\";\n      email: string;\n      creationOpts?: CredentialCreationOptionOverrides;\n    }\n  | {\n      type: \"passkey\";\n      createNew: false;\n    }\n  | {\n      type: \"passkey\";\n      createNew: true;\n      username: string;\n      creationOpts?: CredentialCreationOptionOverrides;\n    }\n  | ({\n      type: \"oauth\";\n      scope?: string;\n      claims?: string;\n      otherParameters?: Record<string, string>;\n    } & OauthProviderConfig &\n      OauthRedirectConfig)\n  | {\n      type: \"oauthReturn\";\n      bundle: string;\n      orgId: string;\n      idToken: string;\n      isNewUser?: boolean;\n    }\n  | {\n      type: \"otp\";\n      otpCode: string;\n      multiFactors?: VerifyMfaParams[];\n    };\n\nexport type OauthProviderConfig =\n  | {\n      authProviderId: \"auth0\";\n      isCustomProvider?: false;\n      auth0Connection?: string;\n    }\n  | {\n      authProviderId: KnownAuthProvider;\n      isCustomProvider?: false;\n      auth0Connection?: never;\n    }\n  | {\n      authProviderId: string;\n      isCustomProvider: true;\n      auth0Connection?: never;\n    };\n\nexport type OauthRedirectConfig =\n  | { mode: \"redirect\"; redirectUrl: string }\n  | { mode: \"popup\"; redirectUrl?: never };\n\nexport type KnownAuthProvider =\n  | \"google\"\n  | \"apple\"\n  | \"facebook\"\n  | \"twitch\"\n  | \"auth0\";\n\nexport type OauthMode = \"redirect\" | \"popup\";\n\nexport const AlchemySignerParamsSchema = z\n  .object({\n    client: z\n      .custom<AlchemySignerWebClient>()\n      .or(AlchemySignerClientParamsSchema),\n  })\n  .extend({\n    sessionConfig: SessionManagerParamsSchema.omit({\n      client: true,\n    }).optional(),\n  });\n\nexport type AlchemySignerParams = z.input<typeof AlchemySignerParamsSchema>;\n\n/**\n * A SmartAccountSigner that can be used with any SmartContractAccount\n */\nexport class AlchemyWebSigner extends BaseAlchemySigner<AlchemySignerWebClient> {\n  private static replaceStateFilterInstalled = false;\n  /**\n   * Initializes an instance with the provided Alchemy signer parameters after parsing them with a schema.\n   *\n   * @example\n   * ```ts\n   * import { AlchemyWebSigner } from \"@account-kit/signer\";\n   *\n   * const signer = new AlchemyWebSigner({\n   *  client: {\n   *    connection: {\n   *      rpcUrl: \"/api/rpc\",\n   *    },\n   *    iframeConfig: {\n   *      iframeContainerId: \"alchemy-signer-iframe-container\",\n   *    },\n   *  },\n   * });\n   * ```\n   *\n   * @param {AlchemySignerParams} params The parameters for the Alchemy signer, including the client and session configuration\n   */\n\n  constructor(params: AlchemySignerParams) {\n    const { sessionConfig, ...params_ } =\n      AlchemySignerParamsSchema.parse(params);\n\n    let client: AlchemySignerWebClient;\n    if (\"connection\" in params_.client) {\n      client = new AlchemySignerWebClient(params_.client);\n    } else {\n      client = params_.client;\n    }\n\n    const qpStructure = {\n      emailBundle: \"bundle\",\n      // We don't need this, but we still want to remove it from the URL.\n      emailOrgId: \"orgId\",\n      oauthBundle: \"alchemy-bundle\",\n      oauthOrgId: \"alchemy-org-id\",\n      oauthError: \"alchemy-error\",\n      idToken: \"alchemy-id-token\",\n      isSignup: \"aa-is-signup\",\n    };\n\n    const {\n      emailBundle,\n      oauthBundle,\n      oauthOrgId,\n      oauthError,\n      idToken,\n      isSignup,\n    } = getAndRemoveQueryParams(qpStructure);\n\n    if (!AlchemyWebSigner.replaceStateFilterInstalled) {\n      installReplaceStateFilter(Object.values(qpStructure));\n      AlchemyWebSigner.replaceStateFilterInstalled = true;\n    }\n\n    const initialError =\n      oauthError != null\n        ? { name: \"OauthError\", message: oauthError }\n        : undefined;\n\n    super({ client, sessionConfig, initialError });\n\n    const isNewUser = isSignup === \"true\";\n\n    this.signerType = \"alchemy-signer\";\n\n    if (emailBundle) {\n      this.authenticate({\n        type: \"email\",\n        bundle: emailBundle,\n        isNewUser,\n      });\n    } else if (oauthBundle && oauthOrgId && idToken) {\n      this.authenticate({\n        type: \"oauthReturn\",\n        bundle: oauthBundle,\n        orgId: oauthOrgId,\n        idToken,\n        isNewUser,\n      });\n    }\n  }\n}\n\n/**\n * Overrides `window.history.replaceState` to remove the specified query params from target URLs.\n *\n * @param {string[]} qpToRemove The query params to remove from target URLs.\n */\nfunction installReplaceStateFilter(qpToRemove: string[]) {\n  const originalReplaceState = window.history.replaceState;\n\n  const processUrl = (src: string | URL | undefined | null) => {\n    if (!src) {\n      return src;\n    }\n\n    try {\n      const url = new URL(src, document.baseURI);\n      const originalSearch = url.search;\n\n      qpToRemove.forEach((qp) => url.searchParams.delete(qp));\n      if (originalSearch === url.search) return src;\n\n      console.log(\"[Alchemy] filtered query params from URL\");\n      return url;\n    } catch (e) {\n      console.log(\"[Alchemy] failed to process URL in state filter\", e);\n      return src;\n    }\n  };\n\n  window.history.replaceState = function (...args) {\n    const [state, unused, url] = args;\n\n    const result = originalReplaceState.apply(this, [\n      state,\n      unused,\n      processUrl(url),\n    ]);\n\n    return result;\n  };\n\n  console.log(\"[Alchemy] installed window.history.replaceState interceptor\");\n}\n\n/**\n * Reads and removes the specified query params from the URL.\n *\n * @param {T} keys object whose values are the query parameter keys to read and\n * remove\n * @returns {{ [K in keyof T]: string | undefined }} object with the same keys\n * as the input whose values are the values of the query params.\n */\nfunction getAndRemoveQueryParams<T extends Record<string, string>>(\n  keys: T\n): { [K in keyof T]: string | undefined } {\n  const url = new URL(window.location.href);\n  const result: Record<string, string | undefined> = {};\n  let foundQueryParam = false;\n  for (const [key, param] of Object.entries(keys)) {\n    const value = url.searchParams.get(param) ?? undefined;\n    foundQueryParam ||= value != null;\n    result[key] = value;\n    url.searchParams.delete(param);\n  }\n  if (foundQueryParam) {\n    window.history.replaceState(window.history.state, \"\", url.toString());\n  }\n  return result as { [K in keyof T]: string | undefined };\n}\n"]}

package/dist/esm/version.d.ts

@@ -1 +1 @@
-export declare const VERSION = "4.30.0";
+export declare const VERSION = "4.31.1";

package/dist/esm/version.js

@@ -1,4 +1,4 @@
 // This file is autogenerated by inject-version.ts. Any changes will be
 // overwritten on commit!
-export const VERSION = "4.30.0";
+export const VERSION = "4.31.1";
 //# sourceMappingURL=version.js.map

package/dist/esm/version.js.map

@@ -1 +1 @@
-{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/version.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,yBAAyB;AACzB,MAAM,CAAC,MAAM,OAAO,GAAG,QAAQ,CAAC","sourcesContent":["// This file is autogenerated by inject-version.ts. Any changes will be\n// overwritten on commit!\nexport const VERSION = \"4.30.0\";\n"]}
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/version.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,yBAAyB;AACzB,MAAM,CAAC,MAAM,OAAO,GAAG,QAAQ,CAAC","sourcesContent":["// This file is autogenerated by inject-version.ts. Any changes will be\n// overwritten on commit!\nexport const VERSION = \"4.31.1\";\n"]}

package/dist/types/signer.d.ts

@@ -320,6 +320,7 @@ export type AlchemySignerParams = z.input<typeof AlchemySignerParamsSchema>;
  * A SmartAccountSigner that can be used with any SmartContractAccount
  */
 export declare class AlchemyWebSigner extends BaseAlchemySigner<AlchemySignerWebClient> {
+    private static replaceStateFilterInstalled;
     /**
      * Initializes an instance with the provided Alchemy signer parameters after parsing them with a schema.
      *

package/dist/types/signer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"signer.d.ts","sourceRoot":"","sources":["../../src/signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAEL,sBAAsB,EACvB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EACV,iCAAiC,EACjC,eAAe,EAChB,MAAM,mBAAmB,CAAC;AAG3B,MAAM,MAAM,UAAU,GAClB;IACE,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,mKAAmK;IACnK,SAAS,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;IAChC,cAAc,CAAC,EAAE,eAAe,CAAC;IACjC,YAAY,CAAC,EAAE,eAAe,EAAE,CAAC;CAClC,GACD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GACtE;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,iCAAiC,CAAC;CAClD,GACD;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,SAAS,EAAE,KAAK,CAAC;CAClB,GACD;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,iCAAiC,CAAC;CAClD,GACD,CAAC;IACC,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC1C,GAAG,mBAAmB,GACrB,mBAAmB,CAAC,GACtB;IACE,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,GACD;IACE,IAAI,EAAE,KAAK,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,eAAe,EAAE,CAAC;CAClC,CAAC;AAEN,MAAM,MAAM,mBAAmB,GAC3B;IACE,cAAc,EAAE,OAAO,CAAC;IACxB,gBAAgB,CAAC,EAAE,KAAK,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GACD;IACE,cAAc,EAAE,iBAAiB,CAAC;IAClC,gBAAgB,CAAC,EAAE,KAAK,CAAC;IACzB,eAAe,CAAC,EAAE,KAAK,CAAC;CACzB,GACD;IACE,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,IAAI,CAAC;IACvB,eAAe,CAAC,EAAE,KAAK,CAAC;CACzB,CAAC;AAEN,MAAM,MAAM,mBAAmB,GAC3B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,KAAK,CAAA;CAAE,CAAC;AAE3C,MAAM,MAAM,iBAAiB,GACzB,QAAQ,GACR,OAAO,GACP,UAAU,GACV,QAAQ,GACR,OAAO,CAAC;AAEZ,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,OAAO,CAAC;AAE7C,eAAO,MAAM,yBAAyB;;;+CAvEhC,mKAAmK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiFrK,CAAC;AAEL,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;GAEG;AACH,qBAAa,gBAAiB,SAAQ,iBAAiB,CAAC,sBAAsB,CAAC;IAC7E;;;;;;;;;;;;;;;;;;;;OAoBG;gBAES,MAAM,EAAE,mBAAmB;CAuDxC"}
+{"version":3,"file":"signer.d.ts","sourceRoot":"","sources":["../../src/signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAEL,sBAAsB,EACvB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EACV,iCAAiC,EACjC,eAAe,EAChB,MAAM,mBAAmB,CAAC;AAG3B,MAAM,MAAM,UAAU,GAClB;IACE,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,mKAAmK;IACnK,SAAS,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;IAChC,cAAc,CAAC,EAAE,eAAe,CAAC;IACjC,YAAY,CAAC,EAAE,eAAe,EAAE,CAAC;CAClC,GACD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GACtE;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,iCAAiC,CAAC;CAClD,GACD;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,SAAS,EAAE,KAAK,CAAC;CAClB,GACD;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,iCAAiC,CAAC;CAClD,GACD,CAAC;IACC,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC1C,GAAG,mBAAmB,GACrB,mBAAmB,CAAC,GACtB;IACE,IAAI,EAAE,aAAa,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,GACD;IACE,IAAI,EAAE,KAAK,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,eAAe,EAAE,CAAC;CAClC,CAAC;AAEN,MAAM,MAAM,mBAAmB,GAC3B;IACE,cAAc,EAAE,OAAO,CAAC;IACxB,gBAAgB,CAAC,EAAE,KAAK,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GACD;IACE,cAAc,EAAE,iBAAiB,CAAC;IAClC,gBAAgB,CAAC,EAAE,KAAK,CAAC;IACzB,eAAe,CAAC,EAAE,KAAK,CAAC;CACzB,GACD;IACE,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,IAAI,CAAC;IACvB,eAAe,CAAC,EAAE,KAAK,CAAC;CACzB,CAAC;AAEN,MAAM,MAAM,mBAAmB,GAC3B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,KAAK,CAAA;CAAE,CAAC;AAE3C,MAAM,MAAM,iBAAiB,GACzB,QAAQ,GACR,OAAO,GACP,UAAU,GACV,QAAQ,GACR,OAAO,CAAC;AAEZ,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,OAAO,CAAC;AAE7C,eAAO,MAAM,yBAAyB;;;+CAvEhC,mKAAmK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiFrK,CAAC;AAEL,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;GAEG;AACH,qBAAa,gBAAiB,SAAQ,iBAAiB,CAAC,sBAAsB,CAAC;IAC7E,OAAO,CAAC,MAAM,CAAC,2BAA2B,CAAS;IACnD;;;;;;;;;;;;;;;;;;;;OAoBG;gBAES,MAAM,EAAE,mBAAmB;CA+DxC"}

package/dist/types/version.d.ts

@@ -1,2 +1,2 @@
-export declare const VERSION = "4.30.0";
+export declare const VERSION = "4.31.1";
 //# sourceMappingURL=version.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@account-kit/signer",
-  "version": "4.30.0",
+  "version": "4.31.1",
   "description": "Core interfaces and clients for interfacing with the Alchemy Signer API",
   "author": "Alchemy",
   "license": "MIT",
@@ -51,8 +51,8 @@
     "vitest": "^2.0.4"
   },
   "dependencies": {
-    "@aa-sdk/core": "^4.30.0",
-    "@account-kit/logging": "^4.30.0",
+    "@aa-sdk/core": "^4.31.1",
+    "@account-kit/logging": "^4.31.1",
     "@solana/web3.js": "^1.98.0",
     "@turnkey/http": "^2.6.2",
     "@turnkey/iframe-stamper": "^1.0.0",
@@ -78,5 +78,5 @@
     "url": "https://github.com/alchemyplatform/aa-sdk/issues"
   },
   "homepage": "https://github.com/alchemyplatform/aa-sdk#readme",
-  "gitHead": "e58090cc00df11f6c6ccfd140088b28a67629fee"
+  "gitHead": "0b89a300a2ab7170e99769599000e2e22bcb2b7c"
 }

package/src/signer.ts

@@ -103,6 +103,7 @@ export type AlchemySignerParams = z.input<typeof AlchemySignerParamsSchema>;
  * A SmartAccountSigner that can be used with any SmartContractAccount
  */
 export class AlchemyWebSigner extends BaseAlchemySigner<AlchemySignerWebClient> {
+  private static replaceStateFilterInstalled = false;
   /**
    * Initializes an instance with the provided Alchemy signer parameters after parsing them with a schema.
    *
@@ -135,14 +136,8 @@ export class AlchemyWebSigner extends BaseAlchemySigner<AlchemySignerWebClient>
     } else {
       client = params_.client;
     }
-    const {
-      emailBundle,
-      oauthBundle,
-      oauthOrgId,
-      oauthError,
-      idToken,
-      isSignup,
-    } = getAndRemoveQueryParams({
+
+    const qpStructure = {
       emailBundle: "bundle",
       // We don't need this, but we still want to remove it from the URL.
       emailOrgId: "orgId",
@@ -151,7 +146,21 @@ export class AlchemyWebSigner extends BaseAlchemySigner<AlchemySignerWebClient>
       oauthError: "alchemy-error",
       idToken: "alchemy-id-token",
       isSignup: "aa-is-signup",
-    });
+    };
+
+    const {
+      emailBundle,
+      oauthBundle,
+      oauthOrgId,
+      oauthError,
+      idToken,
+      isSignup,
+    } = getAndRemoveQueryParams(qpStructure);
+
+    if (!AlchemyWebSigner.replaceStateFilterInstalled) {
+      installReplaceStateFilter(Object.values(qpStructure));
+      AlchemyWebSigner.replaceStateFilterInstalled = true;
+    }
 
     const initialError =
       oauthError != null
@@ -182,6 +191,49 @@ export class AlchemyWebSigner extends BaseAlchemySigner<AlchemySignerWebClient>
   }
 }
 
+/**
+ * Overrides `window.history.replaceState` to remove the specified query params from target URLs.
+ *
+ * @param {string[]} qpToRemove The query params to remove from target URLs.
+ */
+function installReplaceStateFilter(qpToRemove: string[]) {
+  const originalReplaceState = window.history.replaceState;
+
+  const processUrl = (src: string | URL | undefined | null) => {
+    if (!src) {
+      return src;
+    }
+
+    try {
+      const url = new URL(src, document.baseURI);
+      const originalSearch = url.search;
+
+      qpToRemove.forEach((qp) => url.searchParams.delete(qp));
+      if (originalSearch === url.search) return src;
+
+      console.log("[Alchemy] filtered query params from URL");
+      return url;
+    } catch (e) {
+      console.log("[Alchemy] failed to process URL in state filter", e);
+      return src;
+    }
+  };
+
+  window.history.replaceState = function (...args) {
+    const [state, unused, url] = args;
+
+    const result = originalReplaceState.apply(this, [
+      state,
+      unused,
+      processUrl(url),
+    ]);
+
+    return result;
+  };
+
+  console.log("[Alchemy] installed window.history.replaceState interceptor");
+}
+
 /**
  * Reads and removes the specified query params from the URL.
  *

package/src/version.ts

@@ -1,3 +1,3 @@
 // This file is autogenerated by inject-version.ts. Any changes will be
 // overwritten on commit!
-export const VERSION = "4.30.0";
+export const VERSION = "4.31.1";