@account-kit/signer 4.56.0 → 4.57.1

package/dist/esm/client/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/client/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAgB7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE1D,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAEjC,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,UAAU,EAAE,sBAAsB;IAClC,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC;QACrD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE;KAC9B,CAAC;IACF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,sCAAsC,CAAC;IAClD,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,qCAAqC,CAAC;IACjD,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACxD,CAAC,CAAC;AAMH;;;GAGG;AACH,MAAM,OAAO,sBAAuB,SAAQ,gBAAoC;IAS9E;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,YAAY,MAAiC;QAC3C,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE,GACnE,+BAA+B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEhD,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC;YACtC,eAAe,EAAE,YAAY,CAAC,eAAe;YAC7C,SAAS,EAAE,0BAA0B;YACrC,eAAe,EAAE,QAAQ,CAAC,cAAc,CAAC,YAAY,CAAC,iBAAiB,CAAC;SACzE,CAAC,CAAC;QAEH,KAAK,CAAC;YACJ,UAAU;YACV,SAAS;YACT,OAAO,EAAE,aAAa;SACvB,CAAC,CAAC;QA7CG;;;;;WAA6B;QAC7B;;;;;WAAiC;QACzC;;;;;WAAyB;QACzB;;;;;WAGE;QAmDF;;;;;;;;;;;;;;;;;;;;;;WAsBG;QACa;;;;mBAAgB,KAAK,EACnC,MAAgD,EAChD,EAAE;gBACF,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC1D,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,GAAG,MAAM,CAAC;gBACvD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAElD,IAAI,CAAC;oBACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE;wBACpC,KAAK;wBACL,SAAS;wBACT,eAAe,EAAE,SAAS;wBAC1B,iBAAiB;wBACjB,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,QAAQ,EAAE;wBACjD,YAAY,EAAE,MAAM,CAAC,YAAY;qBAClC,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;oBAE1C,gGAAgG;oBAChG,qEAAqE;oBACrE,IAAI,YAAY,EAAE,CAAC;wBACjB,MAAM,IAAI,gBAAgB,CAAC,YAAY,CAAC,CAAC;oBAC3C,CAAC;oBACD,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;WAAC;QAEF;;;;;;;;;;;;;;;;;;;;;;WAsBG;QACa;;;;mBAAc,KAAK,EACjC,MAA8C,EAC9C,EAAE;gBACF,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC1D,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;gBACzB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAElD,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE;oBAC9B,KAAK;oBACL,eAAe,EAAE,SAAS;iBAC3B,CAAC,CAAC;YACL,CAAC;WAAC;QAgEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA4BG;QACa;;;;mBAAyB,KAAK,EAAE,EAC9C,MAAM,EACN,KAAK,EACL,kBAAkB,EAClB,OAAO,EACP,kBAAkB,GAOnB,EAAiB,EAAE;gBAClB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBACvE,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAEhC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;gBAEvE,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBACxD,CAAC;gBAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBAE/C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,kBAAkB,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;gBAEzD,OAAO,IAAI,CAAC;YACd,CAAC;WAAC;QAEF;;;;;;;;;;;;;;;;;;;;;;;;;;WA0BG;QACa;;;;mBAAe,KAAK,EAAE,EACpC,iBAAiB,EACjB,eAAe,GAAG,uBAAuB,GACtB,EAAE,EAAE;gBACvB,MAAM,yBAAyB,GAAG,IAAI,aAAa,CAAC;oBAClD,eAAe,EAAE,QAAQ,CAAC,cAAc,CAAC,iBAAiB,CAAC;oBAC3D,eAAe,EAAE,eAAe;oBAChC,SAAS,EAAE,4BAA4B;iBACxC,CAAC,CAAC;gBACH,MAAM,yBAAyB,CAAC,IAAI,EAAE,CAAC;gBAEvC,IAAI,IAAI,CAAC,aAAa,CAAC,OAAO,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC;oBACtD,OAAO,IAAI,CAAC,iBAAiB,CAAC;wBAC5B,aAAa,EAAE,yBAAyB;wBACxC,QAAQ,EAAE,aAAa;qBACxB,CAAC,CAAC;gBACL,CAAC;gBAED,OAAO,IAAI,CAAC,iBAAiB,CAAC;oBAC5B,aAAa,EAAE,yBAAyB;oBACxC,QAAQ,EAAE,aAAa;iBACxB,CAAC,CAAC;YACL,CAAC;WAAC;QAEF;;;;;;;;;;;;;;;;;;WAkBG;QACa;;;;mBAAa,KAAK,IAAI,EAAE;gBACtC,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;gBACtB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;gBAE3B,sDAAsD;gBACtD,sDAAsD;gBACtD,oDAAoD;gBACpD,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC;oBAChC,eAAe,EAAE,QAAQ,CAAC,cAAc,CACtC,IAAI,CAAC,YAAY,CAAC,iBAAiB,CACpC;oBACD,eAAe,EAAE,IAAI,CAAC,YAAY,CAAC,eAAe;oBAClD,SAAS,EAAE,0BAA0B;iBACtC,CAAC,CAAC;gBACH,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC;gBAC7B,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAClC,CAAC;WAAC;QAEF;;;;;;;;;;;;;;;;;;;;;;;;;;WA0BG;QACa;;;;mBAAoB,KAAK,EACvC,IAA8D,EACjC,EAAE;gBAC/B,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAEzD,MAAM,WAAW,GAAG,IAAI,CAAC;gBACzB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC;oBACjD,WAAW;oBACX,gBAAgB;oBAChB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;iBACxC,CAAC,CAAC;gBAEH,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,WAAW,CAAC;gBACnC,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAC/B,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,sCAAsC,CAAC,EAAE,IAAI,CAAC,CACvE,CAAC;YACJ,CAAC;WAAC;QAEF;;;;;;;;;;;;;;;;;;;;;;;;;WAyBG;QACa;;;;mBAAiB,KAAK,EACpC,IAA2D,EACV,EAAE;gBACnD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACzD,MAAM,WAAW,GAAG,IAAI,CAAC;gBACzB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC;oBACjD,WAAW;oBACX,gBAAgB;oBAChB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;iBACxC,CAAC,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CACvB,WAAW,EACX,QAAQ,EACR,4BAA4B,CAC7B,CAAC;gBACF,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;gBACvC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBACrC,MAAM,aAAa,GAAG,CAAC,KAAmB,EAAE,EAAE;wBAC5C,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;4BAChB,OAAO;wBACT,CAAC;wBACD,MAAM,EACJ,aAAa,EAAE,MAAM,EACrB,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,KAAK,EACnB,cAAc,EAAE,OAAO,EACvB,eAAe,EAAE,QAAQ,EACzB,YAAY,EACZ,YAAY,EAAE,KAAK,EACnB,YAAY,EAAE,KAAK,EACnB,mBAAmB,EAAE,YAAY,GAClC,GAAG,KAAK,CAAC,IAAI,CAAC;wBACf,IAAI,YAAY,EAAE,CAAC;4BACjB,OAAO,EAAE,CAAC;4BACV,KAAK,EAAE,KAAK,EAAE,CAAC;4BACf,MAAM,CAAC,IAAI,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC;wBAC7C,CAAC;wBACD,IAAI,CAAC,MAAM,EAAE,CAAC;4BACZ,mCAAmC;4BACnC,OAAO;wBACT,CAAC;wBACD,OAAO,EAAE,CAAC;wBACV,KAAK,EAAE,KAAK,EAAE,CAAC;wBACf,QAAQ,MAAM,EAAE,CAAC;4BACf,KAAK,SAAS;gCACZ,IAAI,CAAC,sBAAsB,CAAC;oCAC1B,MAAM;oCACN,KAAK;oCACL,kBAAkB,EAAE,gBAAgB;oCACpC,OAAO;oCACP,kBAAkB,EAAE,OAAO;iCAC5B,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;oCACf,IAAI,QAAQ,EAAE,CAAC;wCACb,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;oCACrC,CAAC;oCACD,OAAO,CAAC,IAAI,CAAC,CAAC;gCAChB,CAAC,EAAE,MAAM,CAAC,CAAC;gCACX,MAAM;4BACR,KAAK,uCAAuC;gCAC1C,OAAO,CAAC;oCACN,MAAM;oCACN,OAAO;oCACP,KAAK;oCACL,YAAY;oCACZ,KAAK;oCACL,KAAK;iCACsB,CAAC,CAAC;gCAC/B,MAAM;4BACR,KAAK,uBAAuB;gCAC1B,OAAO,CAAC;oCACN,MAAM;oCACN,OAAO;oCACP,YAAY;iCACS,CAAC,CAAC;gCACzB,MAAM;4BACR;gCACE,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC,CAAC;wBACnD,CAAC;oBACH,CAAC,CAAC;oBAEF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;oBAElD,MAAM,oBAAoB,GAAG,WAAW,CAAC,GAAG,EAAE;wBAC5C,IAAI,KAAK,EAAE,MAAM,EAAE,CAAC;4BAClB,OAAO,EAAE,CAAC;4BACV,MAAM,CAAC,IAAI,mBAAmB,EAAE,CAAC,CAAC;wBACpC,CAAC;oBACH,CAAC,EAAE,oBAAoB,CAAC,CAAC;oBAEzB,MAAM,OAAO,GAAG,GAAG,EAAE;wBACnB,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;wBACrD,aAAa,CAAC,oBAAoB,CAAC,CAAC;oBACtC,CAAC,CAAC;gBACJ,CAAC,CAAC,CAAC;YACL,CAAC;WAAC;QAEF;;;;;;;;;;;;;;;;;;;;WAoBG;QACa;;;;mBAAkB,KAAK,IAAqB,EAAE;gBAC5D,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACnC,CAAC;WAAC;QAEiB;;;;mBAAyB,KAAK,EAC/C,OAA2C,EAC3C,cAAoC;gBAClC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,WAAW;aAC1C,EACsC,EAAE;gBACzC,MAAM,SAAS,GAAG,oBAAoB,EAAE,CAAC;gBACzC,MAAM,mBAAmB,GAAG,oBAAoB,EAAE,CAAC;gBAEnD,MAAM,WAAW,GAAG,MAAM,sBAAsB,CAAC;oBAC/C,SAAS,EAAE;wBACT,GAAG,OAAO,EAAE,SAAS;wBACrB,sBAAsB,EAAE;4BACtB,WAAW,EAAE,WAAW;4BACxB,kBAAkB,EAAE,KAAK;4BACzB,gBAAgB,EAAE,WAAW;4BAC7B,GAAG,OAAO,EAAE,SAAS,EAAE,sBAAsB;yBAC9C;wBACD,SAAS;wBACT,EAAE,EAAE;4BACF,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ;4BAC5B,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ;4BAC9B,GAAG,OAAO,EAAE,SAAS,EAAE,EAAE;yBAC1B;wBACD,gBAAgB,EAAE;4BAChB;gCACE,IAAI,EAAE,YAAY;gCAClB,GAAG,EAAE,CAAC,CAAC;6BACR;4BACD;gCACE,IAAI,EAAE,YAAY;gCAClB,GAAG,EAAE,CAAC,GAAG;6BACV;yBACF;wBACD,IAAI,EAAE;4BACJ,EAAE,EAAE,mBAAmB;4BACvB,IAAI,EAAE,WAAW,CAAC,QAAQ;4BAC1B,WAAW,EAAE,WAAW,CAAC,QAAQ;4BACjC,GAAG,OAAO,EAAE,SAAS,EAAE,IAAI;yBAC5B;qBACF;oBACD,MAAM,EAAE,OAAO,EAAE,MAAM;iBACxB,CAAC,CAAC;gBAEH,4EAA4E;gBAC5E,IAAI,WAAW,CAAC,UAAU,IAAI,IAAI,IAAI,WAAW,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC1E,WAAW,CAAC,UAAU,GAAG;wBACvB,kCAAkC;wBAClC,gCAAgC;qBACjC,CAAC;gBACJ,CAAC;gBAED,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,WAAW,EAAE,CAAC;YACzD,CAAC;WAAC;QAEiB;;;;mBAAiB,KAAK,IAA0B,EAAE;gBACnE,MAAM,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;gBAClD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAElD,uFAAuF;gBACvF,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;gBAChC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;gBAC5C,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACtD,CAAC;WAAC;QAEM;;;;mBAAoD,IAAI;WAAC;QAljB/D,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QAEjC,IAAI,CAAC,eAAe,GAAG,IAAI,eAAe,CAAC;YACzC,IAAI,EAAE,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ;SACvC,CAAC,CAAC;QAEH,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAC3C,CAAC;IAyFD;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACa,KAAK,CAAC,aAAa,CACjC,IAAwC;QAExC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QAChE,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;YAC7C,GAAG,IAAI;YACP,eAAe;SAChB,CAAC,CAAC;QAEH,IAAI,kBAAkB,IAAI,QAAQ,IAAI,QAAQ,CAAC,gBAAgB,EAAE,CAAC;YAChE,OAAO;gBACL,WAAW,EAAE,KAAK;gBAClB,MAAM,EAAE,QAAQ,CAAC,gBAAgB;aAClC,CAAC;QACJ,CAAC;QAED,wEAAwE;QACxE,IACE,QAAQ,CAAC,MAAM,KAAK,cAAc;YAClC,QAAQ,CAAC,gBAAgB;YACzB,QAAQ,CAAC,YAAY,EACrB,CAAC;YACD,OAAO;gBACL,WAAW,EAAE,IAAI;gBACjB,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;gBAC3C,YAAY,EAAE,QAAQ,CAAC,YAAY;aACpC,CAAC;QACJ,CAAC;QAED,kCAAkC;QAClC,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;IACJ,CAAC;IAuZkB,KAAK,CAAC,kBAAkB;QACzC,IAAI,IAAI,CAAC,yBAAyB,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,yBAAyB,CAAC;QACxC,CAAC;QAED,IAAI,CAAC,yBAAyB,GAAG,CAAC,KAAK,IAAI,EAAE;YAC3C,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,EAAE,CAAC;gBACpC,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;YAClC,CAAC;YAED,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAEpC,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,EAAG,CAAC;QACzC,CAAC,CAAC,EAAE,CAAC;QAEL,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC;YACpD,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,yBAAyB,GAAG,IAAI,CAAC;QACxC,CAAC;IACH,CAAC;IAEkB,KAAK,CAAC,mBAAmB,CAC1C,OAAyB,IAAI,CAAC,IAAI;QAElC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACtC,IAAI,IAAI,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC9B,+GAA+G;YAC/G,IAAI,CAAC,eAAe,CAAC,gBAAgB,GAAG;gBACtC;oBACE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC;oBAC5C,IAAI,EAAE,YAAY;oBAClB,UAAU,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC;iBACnC;aACF,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,mBAAoB,SAAQ,SAAS;IAGhD;;;OAGG;IACH;QACE,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAPlB;;;;mBAAO,qBAAqB;WAAC;IAQtC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,gBAAiB,SAAQ,SAAS;IAA/C;;QACW;;;;mBAAO,kBAAkB;WAAC;IACrC,CAAC;CAAA","sourcesContent":["import { BaseError, ConnectionConfigSchema } from \"@aa-sdk/core\";\nimport { getWebAuthnAttestation } from \"@turnkey/http\";\nimport { IframeStamper } from \"@turnkey/iframe-stamper\";\nimport { WebauthnStamper } from \"@turnkey/webauthn-stamper\";\nimport { z } from \"zod\";\nimport type { AuthParams } from \"../signer.js\";\nimport { generateRandomBuffer } from \"../utils/generateRandomBuffer.js\";\nimport { BaseSignerClient } from \"./base.js\";\nimport type {\n  AlchemySignerClientEvents,\n  AuthenticatingEventMetadata,\n  CredentialCreationOptionOverrides,\n  EmailAuthParams,\n  ExportWalletParams,\n  OauthConfig,\n  OtpParams,\n  User,\n  SubmitOtpCodeResponse,\n  AuthLinkingPrompt,\n  GetWebAuthnAttestationResult,\n  IdTokenOnly,\n  SmsAuthParams,\n} from \"./types.js\";\nimport { MfaRequiredError } from \"../errors.js\";\nimport { parseMfaError } from \"../utils/parseMfaError.js\";\n\nconst CHECK_CLOSE_INTERVAL = 500;\n\nexport const AlchemySignerClientParamsSchema = z.object({\n  connection: ConnectionConfigSchema,\n  iframeConfig: z.object({\n    iframeElementId: z.string().default(\"turnkey-iframe\"),\n    iframeContainerId: z.string(),\n  }),\n  rpId: z.string().optional(),\n  rootOrgId: z\n    .string()\n    .optional()\n    .default(\"24c1acf5-810f-41e0-a503-d5d13fa8e830\"),\n  oauthCallbackUrl: z\n    .string()\n    .optional()\n    .default(\"https://signer.alchemy.com/callback\"),\n  enablePopupOauth: z.boolean().optional().default(false),\n});\n\nexport type AlchemySignerClientParams = z.input<\n  typeof AlchemySignerClientParamsSchema\n>;\n\n/**\n * A lower level client used by the AlchemySigner used to communicate with\n * Alchemy's signer service.\n */\nexport class AlchemySignerWebClient extends BaseSignerClient<ExportWalletParams> {\n  private iframeStamper: IframeStamper;\n  private webauthnStamper: WebauthnStamper;\n  oauthCallbackUrl: string;\n  iframeConfig: {\n    iframeElementId: string;\n    iframeContainerId: string;\n  };\n\n  /**\n   * Initializes a new instance with the given parameters, setting up the connection, iframe configuration, and WebAuthn stamper.\n   *\n   * @example\n   * ```ts\n   * import { AlchemySignerWebClient } from \"@account-kit/signer\";\n   *\n   * const client = new AlchemySignerWebClient({\n   *  connection: {\n   *    apiKey: \"your-api-key\",\n   *  },\n   *  iframeConfig: {\n   *   iframeContainerId: \"signer-iframe-container\",\n   *  },\n   * });\n   * ```\n   *\n   * @param {AlchemySignerClientParams} params the parameters required to initialize the client\n   * @param {ConnectionConfig} params.connection The connection details needed to connect to the service\n   * @param {{ iframeElementId?: string; iframeContainerId: string }} params.iframeConfig The configuration details for setting up the iframe stamper\n   * @param {string} params.rpId The relying party ID, defaulting to the current hostname if not provided\n   * @param {string} params.rootOrgId The root organization ID\n   */\n  constructor(params: AlchemySignerClientParams) {\n    const { connection, iframeConfig, rpId, rootOrgId, oauthCallbackUrl } =\n      AlchemySignerClientParamsSchema.parse(params);\n\n    const iframeStamper = new IframeStamper({\n      iframeElementId: iframeConfig.iframeElementId,\n      iframeUrl: \"https://auth.turnkey.com\",\n      iframeContainer: document.getElementById(iframeConfig.iframeContainerId),\n    });\n\n    super({\n      connection,\n      rootOrgId,\n      stamper: iframeStamper,\n    });\n\n    this.iframeStamper = iframeStamper;\n    this.iframeConfig = iframeConfig;\n\n    this.webauthnStamper = new WebauthnStamper({\n      rpId: rpId ?? window.location.hostname,\n    });\n\n    this.oauthCallbackUrl = oauthCallbackUrl;\n  }\n\n  /**\n   * Begin authenticating a user with their email and an expiration time for the authentication request. Initializes the iframe stamper to get the target public key.\n   * This method sends an email to the user to complete their login\n   *\n   * @example\n   * ```ts\n   * import { AlchemySignerWebClient } from \"@account-kit/signer\";\n   *\n   * const client = new AlchemySignerWebClient({\n   *  connection: {\n   *    apiKey: \"your-api-key\",\n   *  },\n   *  iframeConfig: {\n   *   iframeContainerId: \"signer-iframe-container\",\n   *  },\n   * });\n   *\n   * const account = await client.initEmailAuth({ email: \"you@mail.com\" });\n   * ```\n   *\n   * @param {Omit<EmailAuthParams, \"targetPublicKey\">} params The parameters for email authentication, excluding the target public key\n   * @returns {Promise<any>} The response from the authentication request\n   */\n  public override initEmailAuth = async (\n    params: Omit<EmailAuthParams, \"targetPublicKey\">,\n  ) => {\n    this.eventEmitter.emit(\"authenticating\", { type: \"otp\" });\n    const { email, emailMode, expirationSeconds } = params;\n    const publicKey = await this.initSessionStamper();\n\n    try {\n      return await this.request(\"/v1/auth\", {\n        email,\n        emailMode,\n        targetPublicKey: publicKey,\n        expirationSeconds,\n        redirectParams: params.redirectParams?.toString(),\n        multiFactors: params.multiFactors,\n      });\n    } catch (error) {\n      const multiFactors = parseMfaError(error);\n\n      // If MFA is required, and emailMode is Magic Link, the user must submit mfa with the request or\n      // the the server will return an error with the required mfa factors.\n      if (multiFactors) {\n        throw new MfaRequiredError(multiFactors);\n      }\n      throw error;\n    }\n  };\n\n  /**\n   * Begin authenticating a user through sms. Initializes the iframe stamper to get the target public key.\n   * This method sends a text message to the user to complete their login\n   *\n   * @example\n   * ```ts\n   * import { AlchemySignerWebClient } from \"@account-kit/signer\";\n   *\n   * const client = new AlchemySignerWebClient({\n   *  connection: {\n   *    apiKey: \"your-api-key\",\n   *  },\n   *  iframeConfig: {\n   *   iframeContainerId: \"signer-iframe-container\",\n   *  },\n   * });\n   *\n   * const account = await client.initSmsAuth({ phone: \"+1234567890\" });\n   * ```\n   *\n   * @param {Omit<SmsAuthParams, \"targetPublicKey\">} params The parameters for sms authentication, excluding the target public key\n   * @returns {Promise<any>} The response from the authentication request\n   */\n  public override initSmsAuth = async (\n    params: Omit<SmsAuthParams, \"targetPublicKey\">,\n  ) => {\n    this.eventEmitter.emit(\"authenticating\", { type: \"otp\" });\n    const { phone } = params;\n    const publicKey = await this.initSessionStamper();\n\n    return this.request(\"/v1/auth\", {\n      phone,\n      targetPublicKey: publicKey,\n    });\n  };\n\n  /**\n   * Authenticates using an OTP code which was previously received via email.\n   *\n   * @example\n   * ```ts\n   * import { AlchemySignerWebClient } from \"@account-kit/signer\";\n   *\n   * const client = new AlchemySignerWebClient({\n   *  connection: {\n   *    apiKey: \"your-api-key\",\n   *  },\n   *  iframeConfig: {\n   *   iframeContainerId: \"signer-iframe-container\",\n   *  },\n   * });\n   *\n   * const account = await client.submitOtpCode({\n   *   orgId: \"user-org-id\",\n   *   otpId: \"opt-returned-from-initEmailAuth\",\n   *   otpCode: \"otp-code-from-email\",\n   * });\n   * ```\n   *\n   * @param {Omit<OtpParams, \"targetPublicKey\">} args The parameters for the OTP request, excluding the target public key.\n   * @returns {Promise<{ bundle: string }>} A promise that resolves to an object containing the credential bundle.\n   */\n  public override async submitOtpCode(\n    args: Omit<OtpParams, \"targetPublicKey\">,\n  ): Promise<SubmitOtpCodeResponse> {\n    this.eventEmitter.emit(\"authenticating\", { type: \"otpVerify\" });\n    const targetPublicKey = await this.initSessionStamper();\n    const response = await this.request(\"/v1/otp\", {\n      ...args,\n      targetPublicKey,\n    });\n\n    if (\"credentialBundle\" in response && response.credentialBundle) {\n      return {\n        mfaRequired: false,\n        bundle: response.credentialBundle,\n      };\n    }\n\n    // If the server says \"MFA_REQUIRED\", pass that data back to the caller:\n    if (\n      response.status === \"MFA_REQUIRED\" &&\n      response.encryptedPayload &&\n      response.multiFactors\n    ) {\n      return {\n        mfaRequired: true,\n        encryptedPayload: response.encryptedPayload,\n        multiFactors: response.multiFactors,\n      };\n    }\n\n    // Otherwise, it's truly an error:\n    throw new Error(\n      \"Failed to submit OTP code. Server did not return required fields.\",\n    );\n  }\n\n  /**\n   * Completes auth for the user by injecting a credential bundle and retrieving\n   * the user information based on the provided organization ID. Emits events\n   * during the process.\n   *\n   * @example\n   * ```ts\n   * import { AlchemySignerWebClient } from \"@account-kit/signer\";\n   *\n   * const client = new AlchemySignerWebClient({\n   *  connection: {\n   *    apiKey: \"your-api-key\",\n   *  },\n   *  iframeConfig: {\n   *   iframeContainerId: \"signer-iframe-container\",\n   *  },\n   * });\n   *\n   * const account = await client.completeAuthWithBundle({ orgId: \"user-org-id\", bundle: \"bundle-from-email\", connectedEventName: \"connectedEmail\" });\n   * ```\n   *\n   * @param {{ bundle: string; orgId: string, connectedEventName: keyof AlchemySignerClientEvents, idToken?: string }} config\n   * The configuration object for the authentication function containing the\n   * credential bundle to inject and the organization id associated with the\n   * user, as well as the event to be emitted on success and optionally an OIDC\n   * ID token with extra user information\n   * @returns {Promise<User>} A promise that resolves to the authenticated user\n   * information\n   */\n  public override completeAuthWithBundle = async ({\n    bundle,\n    orgId,\n    connectedEventName,\n    idToken,\n    authenticatingType,\n  }: {\n    bundle: string;\n    orgId: string;\n    connectedEventName: keyof AlchemySignerClientEvents;\n    authenticatingType: AuthenticatingEventMetadata[\"type\"];\n    idToken?: string;\n  }): Promise<User> => {\n    this.eventEmitter.emit(\"authenticating\", { type: authenticatingType });\n    await this.initSessionStamper();\n\n    const result = await this.iframeStamper.injectCredentialBundle(bundle);\n\n    if (!result) {\n      throw new Error(\"Failed to inject credential bundle\");\n    }\n\n    const user = await this.whoami(orgId, idToken);\n\n    this.eventEmitter.emit(connectedEventName, user, bundle);\n\n    return user;\n  };\n\n  /**\n   * Initiates the export of a wallet by creating an iframe stamper and calling the appropriate export function.\n   * The export can be based on a seed phrase or a private key.\n   *\n   * @example\n   * ```ts\n   * import { AlchemySignerWebClient } from \"@account-kit/signer\";\n   *\n   * const client = new AlchemySignerWebClient({\n   *  connection: {\n   *    apiKey: \"your-api-key\",\n   *  },\n   *  iframeConfig: {\n   *   iframeContainerId: \"signer-iframe-container\",\n   *  },\n   * });\n   *\n   * const account = await client.exportWallet({\n   *  iframeContainerId: \"export-iframe-container\",\n   * });\n   * ```\n   *\n   * @param {ExportWalletParams} config The parameters for exporting the wallet\n   * @param {string} config.iframeContainerId The ID of the container element that will hold the iframe stamper\n   * @param {string} [config.iframeElementId] Optional ID for the iframe element\n   * @returns {Promise<void>} A promise that resolves when the export process is complete\n   */\n  public override exportWallet = async ({\n    iframeContainerId,\n    iframeElementId = \"turnkey-export-iframe\",\n  }: ExportWalletParams) => {\n    const exportWalletIframeStamper = new IframeStamper({\n      iframeContainer: document.getElementById(iframeContainerId),\n      iframeElementId: iframeElementId,\n      iframeUrl: \"https://export.turnkey.com\",\n    });\n    await exportWalletIframeStamper.init();\n\n    if (this.turnkeyClient.stamper === this.iframeStamper) {\n      return this.exportWalletInner({\n        exportStamper: exportWalletIframeStamper,\n        exportAs: \"SEED_PHRASE\",\n      });\n    }\n\n    return this.exportWalletInner({\n      exportStamper: exportWalletIframeStamper,\n      exportAs: \"PRIVATE_KEY\",\n    });\n  };\n\n  /**\n   * Asynchronous function that clears the user and resets the iframe stamper.\n   *\n   * @example\n   * ```ts\n   * import { AlchemySignerWebClient } from \"@account-kit/signer\";\n   *\n   * const client = new AlchemySignerWebClient({\n   *  connection: {\n   *    apiKey: \"your-api-key\",\n   *  },\n   *  iframeConfig: {\n   *   iframeContainerId: \"signer-iframe-container\",\n   *  },\n   * });\n   *\n   * const account = await client.disconnect();\n   * ```\n   */\n  public override disconnect = async () => {\n    this.user = undefined;\n    this.iframeStamper.clear();\n\n    // In the latest version of the TK iframe stamper, the\n    // IframeStamper instance seems to not be usable after\n    // clearing it, so we need to create a new instance.\n    const stamper = new IframeStamper({\n      iframeContainer: document.getElementById(\n        this.iframeConfig.iframeContainerId,\n      ),\n      iframeElementId: this.iframeConfig.iframeElementId,\n      iframeUrl: \"https://auth.turnkey.com\",\n    });\n    this.iframeStamper = stamper;\n    await this.initSessionStamper();\n  };\n\n  /**\n   * Redirects the user to the OAuth provider URL based on the provided arguments. This function will always reject after 1 second if the redirection does not occur.\n   *\n   * @example\n   * ```ts\n   * import { AlchemySignerWebClient } from \"@account-kit/signer\";\n   *\n   * const client = new AlchemySignerWebClient({\n   *  connection: {\n   *    apiKey: \"your-api-key\",\n   *  },\n   *  iframeConfig: {\n   *   iframeContainerId: \"signer-iframe-container\",\n   *  },\n   * });\n   *\n   * await client.oauthWithRedirect({\n   *   type: \"oauth\",\n   *   authProviderId: \"google\",\n   *   mode: \"redirect\",\n   *   redirectUrl: \"/\",\n   * });\n   * ```\n   *\n   * @param {Extract<AuthParams, { type: \"oauth\"; mode: \"redirect\" }>} args The arguments required to obtain the OAuth provider URL\n   * @returns {Promise<never>} A promise that will never resolve, only reject if the redirection fails\n   */\n  public override oauthWithRedirect = async (\n    args: Extract<AuthParams, { type: \"oauth\"; mode: \"redirect\" }>,\n  ): Promise<User | IdTokenOnly> => {\n    const turnkeyPublicKey = await this.initSessionStamper();\n\n    const oauthParams = args;\n    const providerUrl = await this.getOauthProviderUrl({\n      oauthParams,\n      turnkeyPublicKey,\n      oauthCallbackUrl: this.oauthCallbackUrl,\n    });\n\n    window.location.href = providerUrl;\n    return new Promise((_, reject) =>\n      setTimeout(() => reject(\"Failed to redirect to OAuth provider\"), 1000),\n    );\n  };\n\n  /**\n   * Initiates an OAuth authentication flow in a popup window and returns the authenticated user.\n   *\n   * @example\n   * ```ts\n   * import { AlchemySignerWebClient } from \"@account-kit/signer\";\n   *\n   * const client = new AlchemySignerWebClient({\n   *  connection: {\n   *    apiKey: \"your-api-key\",\n   *  },\n   *  iframeConfig: {\n   *   iframeContainerId: \"signer-iframe-container\",\n   *  },\n   * });\n   *\n   * const user = await client.oauthWithPopup({\n   *  type: \"oauth\",\n   *  authProviderId: \"google\",\n   *  mode: \"popup\"\n   * });\n   * ```\n   *\n   * @param {Extract<AuthParams, { type: \"oauth\"; mode: \"popup\" }>} args The authentication parameters specifying OAuth type and popup mode\n   * @returns {Promise<User>} A promise that resolves to a `User` object containing the authenticated user information\n   */\n  public override oauthWithPopup = async (\n    args: Extract<AuthParams, { type: \"oauth\"; mode: \"popup\" }>,\n  ): Promise<User | AuthLinkingPrompt | IdTokenOnly> => {\n    const turnkeyPublicKey = await this.initSessionStamper();\n    const oauthParams = args;\n    const providerUrl = await this.getOauthProviderUrl({\n      oauthParams,\n      turnkeyPublicKey,\n      oauthCallbackUrl: this.oauthCallbackUrl,\n    });\n    const popup = window.open(\n      providerUrl,\n      \"_blank\",\n      \"popup,width=500,height=600\",\n    );\n    const eventEmitter = this.eventEmitter;\n    return new Promise((resolve, reject) => {\n      const handleMessage = (event: MessageEvent) => {\n        if (!event.data) {\n          return;\n        }\n        const {\n          alchemyStatus: status,\n          alchemyBundle: bundle,\n          alchemyOrgId: orgId,\n          alchemyIdToken: idToken,\n          alchemyIsSignup: isSignup,\n          alchemyError,\n          alchemyOtpId: otpId,\n          alchemyEmail: email,\n          alchemyAuthProvider: providerName,\n        } = event.data;\n        if (alchemyError) {\n          cleanup();\n          popup?.close();\n          reject(new OauthFailedError(alchemyError));\n        }\n        if (!status) {\n          // This message isn't meant for us.\n          return;\n        }\n        cleanup();\n        popup?.close();\n        switch (status) {\n          case \"SUCCESS\":\n            this.completeAuthWithBundle({\n              bundle,\n              orgId,\n              connectedEventName: \"connectedOauth\",\n              idToken,\n              authenticatingType: \"oauth\",\n            }).then((user) => {\n              if (isSignup) {\n                eventEmitter.emit(\"newUserSignup\");\n              }\n              resolve(user);\n            }, reject);\n            break;\n          case \"ACCOUNT_LINKING_CONFIRMATION_REQUIRED\":\n            resolve({\n              status,\n              idToken,\n              email,\n              providerName,\n              otpId,\n              orgId,\n            } satisfies AuthLinkingPrompt);\n            break;\n          case \"FETCHED_ID_TOKEN_ONLY\":\n            resolve({\n              status,\n              idToken,\n              providerName,\n            } satisfies IdTokenOnly);\n            break;\n          default:\n            reject(new Error(`Unknown status: ${status}`));\n        }\n      };\n\n      window.addEventListener(\"message\", handleMessage);\n\n      const checkCloseIntervalId = setInterval(() => {\n        if (popup?.closed) {\n          cleanup();\n          reject(new OauthCancelledError());\n        }\n      }, CHECK_CLOSE_INTERVAL);\n\n      const cleanup = () => {\n        window.removeEventListener(\"message\", handleMessage);\n        clearInterval(checkCloseIntervalId);\n      };\n    });\n  };\n\n  /**\n   * Initializes the iframe stamper and returns its public key.\n   *\n   * @example\n   * ```ts twoslash\n   * import { AlchemySignerWebClient } from \"@account-kit/signer\";\n   *\n   * const client = new AlchemySignerWebClient({\n   *  connection: {\n   *    apiKey: \"your-api-key\",\n   *  },\n   *  iframeConfig: {\n   *   iframeContainerId: \"signer-iframe-container\",\n   *  },\n   * });\n   *\n   * const publicKey = await client.targetPublicKey();\n   * ```\n   *\n   * @returns {Promise<string>} A promise that resolves with the target public key when the iframe stamper is successfully initialized, or throws an error if the target public key is not supported.\n   */\n  public override targetPublicKey = async (): Promise<string> => {\n    return this.initSessionStamper();\n  };\n\n  protected override getWebAuthnAttestation = async (\n    options?: CredentialCreationOptionOverrides,\n    userDetails: { username: string } = {\n      username: this.user?.email ?? \"anonymous\",\n    },\n  ): Promise<GetWebAuthnAttestationResult> => {\n    const challenge = generateRandomBuffer();\n    const authenticatorUserId = generateRandomBuffer();\n\n    const attestation = await getWebAuthnAttestation({\n      publicKey: {\n        ...options?.publicKey,\n        authenticatorSelection: {\n          residentKey: \"preferred\",\n          requireResidentKey: false,\n          userVerification: \"preferred\",\n          ...options?.publicKey?.authenticatorSelection,\n        },\n        challenge,\n        rp: {\n          id: window.location.hostname,\n          name: window.location.hostname,\n          ...options?.publicKey?.rp,\n        },\n        pubKeyCredParams: [\n          {\n            type: \"public-key\",\n            alg: -7,\n          },\n          {\n            type: \"public-key\",\n            alg: -257,\n          },\n        ],\n        user: {\n          id: authenticatorUserId,\n          name: userDetails.username,\n          displayName: userDetails.username,\n          ...options?.publicKey?.user,\n        },\n      },\n      signal: options?.signal,\n    });\n\n    // on iOS sometimes this is returned as empty or null, so handling that here\n    if (attestation.transports == null || attestation.transports.length === 0) {\n      attestation.transports = [\n        \"AUTHENTICATOR_TRANSPORT_INTERNAL\",\n        \"AUTHENTICATOR_TRANSPORT_HYBRID\",\n      ];\n    }\n\n    return { challenge, authenticatorUserId, attestation };\n  };\n\n  protected override getOauthConfig = async (): Promise<OauthConfig> => {\n    const currentStamper = this.turnkeyClient.stamper;\n    const publicKey = await this.initSessionStamper();\n\n    // swap the stamper back in case the user logged in with a different stamper (passkeys)\n    this.setStamper(currentStamper);\n    const nonce = this.getOauthNonce(publicKey);\n    return this.request(\"/v1/prepare-oauth\", { nonce });\n  };\n\n  private initSessionStamperPromise: Promise<string> | null = null;\n\n  protected override async initSessionStamper(): Promise<string> {\n    if (this.initSessionStamperPromise) {\n      return this.initSessionStamperPromise;\n    }\n\n    this.initSessionStamperPromise = (async () => {\n      if (!this.iframeStamper.publicKey()) {\n        await this.iframeStamper.init();\n      }\n\n      this.setStamper(this.iframeStamper);\n\n      return this.iframeStamper.publicKey()!;\n    })();\n\n    try {\n      const result = await this.initSessionStamperPromise;\n      return result;\n    } finally {\n      this.initSessionStamperPromise = null;\n    }\n  }\n\n  protected override async initWebauthnStamper(\n    user: User | undefined = this.user,\n  ): Promise<void> {\n    this.setStamper(this.webauthnStamper);\n    if (user && user.credentialId) {\n      // The goal here is to allow us to cache the allowed credential, but this doesn't work with hybrid transport :(\n      this.webauthnStamper.allowCredentials = [\n        {\n          id: Buffer.from(user.credentialId, \"base64\"),\n          type: \"public-key\",\n          transports: [\"internal\", \"hybrid\"],\n        },\n      ];\n    }\n  }\n}\n\n/**\n * This error is thrown when the OAuth flow is cancelled because the auth popup\n * window was closed.\n */\nexport class OauthCancelledError extends BaseError {\n  override name = \"OauthCancelledError\";\n\n  /**\n   * Constructor for initializing an error indicating that the OAuth flow was\n   * cancelled.\n   */\n  constructor() {\n    super(\"OAuth cancelled\");\n  }\n}\n\n/**\n * This error is thrown when an error occurs during the OAuth login flow.\n */\nexport class OauthFailedError extends BaseError {\n  override name = \"OauthFailedError\";\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/client/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAkB7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE1D,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAEjC,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,UAAU,EAAE,sBAAsB;IAClC,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC;QACrD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE;KAC9B,CAAC;IACF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,sCAAsC,CAAC;IAClD,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,qCAAqC,CAAC;IACjD,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACxD,CAAC,CAAC;AAMH;;;GAGG;AACH,MAAM,OAAO,sBAAuB,SAAQ,gBAAoC;IAS9E;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,YAAY,MAAiC;QAC3C,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE,GACnE,+BAA+B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEhD,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC;YACtC,eAAe,EAAE,YAAY,CAAC,eAAe;YAC7C,SAAS,EAAE,0BAA0B;YACrC,eAAe,EAAE,QAAQ,CAAC,cAAc,CAAC,YAAY,CAAC,iBAAiB,CAAC;SACzE,CAAC,CAAC;QAEH,KAAK,CAAC;YACJ,UAAU;YACV,SAAS;YACT,OAAO,EAAE,aAAa;SACvB,CAAC,CAAC;QA7CG;;;;;WAA6B;QAC7B;;;;;WAAiC;QACzC;;;;;WAAyB;QACzB;;;;;WAGE;QAmDF;;;;;;;;;;;;;;;;;;;;;;WAsBG;QACa;;;;mBAAgB,KAAK,EACnC,MAAgD,EAChD,EAAE;gBACF,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC1D,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,GAAG,MAAM,CAAC;gBACvD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAElD,IAAI,CAAC;oBACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE;wBACpC,KAAK;wBACL,SAAS;wBACT,eAAe,EAAE,SAAS;wBAC1B,iBAAiB;wBACjB,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,QAAQ,EAAE;wBACjD,YAAY,EAAE,MAAM,CAAC,YAAY;qBAClC,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;oBAE1C,gGAAgG;oBAChG,qEAAqE;oBACrE,IAAI,YAAY,EAAE,CAAC;wBACjB,MAAM,IAAI,gBAAgB,CAAC,YAAY,CAAC,CAAC;oBAC3C,CAAC;oBACD,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;WAAC;QAEF;;;;;;;;;;;;;;;;;;;;;;WAsBG;QACa;;;;mBAAc,KAAK,EACjC,MAA8C,EAC9C,EAAE;gBACF,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC1D,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;gBACzB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAElD,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE;oBAC9B,KAAK;oBACL,eAAe,EAAE,SAAS;iBAC3B,CAAC,CAAC;YACL,CAAC;WAAC;QAsGF;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA4BG;QACa;;;;mBAAyB,KAAK,EAAE,EAC9C,MAAM,EACN,KAAK,EACL,kBAAkB,EAClB,OAAO,EACP,kBAAkB,GAOnB,EAAiB,EAAE;gBAClB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBACvE,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAEhC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;gBAEvE,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBACxD,CAAC;gBAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBAE/C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,kBAAkB,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;gBAEzD,OAAO,IAAI,CAAC;YACd,CAAC;WAAC;QAEF;;;;;;;;;;;;;;;;;;;;;;;;;;WA0BG;QACa;;;;mBAAe,KAAK,EAAE,EACpC,iBAAiB,EACjB,eAAe,GAAG,uBAAuB,GACtB,EAAE,EAAE;gBACvB,MAAM,yBAAyB,GAAG,IAAI,aAAa,CAAC;oBAClD,eAAe,EAAE,QAAQ,CAAC,cAAc,CAAC,iBAAiB,CAAC;oBAC3D,eAAe,EAAE,eAAe;oBAChC,SAAS,EAAE,4BAA4B;iBACxC,CAAC,CAAC;gBACH,MAAM,yBAAyB,CAAC,IAAI,EAAE,CAAC;gBAEvC,IAAI,IAAI,CAAC,aAAa,CAAC,OAAO,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC;oBACtD,OAAO,IAAI,CAAC,iBAAiB,CAAC;wBAC5B,aAAa,EAAE,yBAAyB;wBACxC,QAAQ,EAAE,aAAa;qBACxB,CAAC,CAAC;gBACL,CAAC;gBAED,OAAO,IAAI,CAAC,iBAAiB,CAAC;oBAC5B,aAAa,EAAE,yBAAyB;oBACxC,QAAQ,EAAE,aAAa;iBACxB,CAAC,CAAC;YACL,CAAC;WAAC;QAEF;;;;;;;;;;;;;;;;;;WAkBG;QACa;;;;mBAAa,KAAK,IAAI,EAAE;gBACtC,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;gBACtB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;gBAE3B,sDAAsD;gBACtD,sDAAsD;gBACtD,oDAAoD;gBACpD,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC;oBAChC,eAAe,EAAE,QAAQ,CAAC,cAAc,CACtC,IAAI,CAAC,YAAY,CAAC,iBAAiB,CACpC;oBACD,eAAe,EAAE,IAAI,CAAC,YAAY,CAAC,eAAe;oBAClD,SAAS,EAAE,0BAA0B;iBACtC,CAAC,CAAC;gBACH,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC;gBAC7B,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAClC,CAAC;WAAC;QAEF;;;;;;;;;;;;;;;;;;;;;;;;;;WA0BG;QACa;;;;mBAAoB,KAAK,EACvC,IAA8D,EACjC,EAAE;gBAC/B,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAEzD,MAAM,WAAW,GAAG,IAAI,CAAC;gBACzB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC;oBACjD,WAAW;oBACX,gBAAgB;oBAChB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;iBACxC,CAAC,CAAC;gBAEH,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,WAAW,CAAC;gBACnC,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAC/B,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,sCAAsC,CAAC,EAAE,IAAI,CAAC,CACvE,CAAC;YACJ,CAAC;WAAC;QAEF;;;;;;;;;;;;;;;;;;;;;;;;;WAyBG;QACa;;;;mBAAiB,KAAK,EACpC,IAA2D,EACV,EAAE;gBACnD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACzD,MAAM,WAAW,GAAG,IAAI,CAAC;gBACzB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC;oBACjD,WAAW;oBACX,gBAAgB;oBAChB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;iBACxC,CAAC,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CACvB,WAAW,EACX,QAAQ,EACR,4BAA4B,CAC7B,CAAC;gBACF,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;gBACvC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBACrC,MAAM,aAAa,GAAG,CAAC,KAAmB,EAAE,EAAE;wBAC5C,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;4BAChB,OAAO;wBACT,CAAC;wBACD,MAAM,EACJ,aAAa,EAAE,MAAM,EACrB,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,KAAK,EACnB,cAAc,EAAE,OAAO,EACvB,eAAe,EAAE,QAAQ,EACzB,YAAY,EACZ,YAAY,EAAE,KAAK,EACnB,YAAY,EAAE,KAAK,EACnB,mBAAmB,EAAE,YAAY,GAClC,GAAG,KAAK,CAAC,IAAI,CAAC;wBACf,IAAI,YAAY,EAAE,CAAC;4BACjB,OAAO,EAAE,CAAC;4BACV,KAAK,EAAE,KAAK,EAAE,CAAC;4BACf,MAAM,CAAC,IAAI,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC;wBAC7C,CAAC;wBACD,IAAI,CAAC,MAAM,EAAE,CAAC;4BACZ,mCAAmC;4BACnC,OAAO;wBACT,CAAC;wBACD,OAAO,EAAE,CAAC;wBACV,KAAK,EAAE,KAAK,EAAE,CAAC;wBACf,QAAQ,MAAM,EAAE,CAAC;4BACf,KAAK,SAAS;gCACZ,IAAI,CAAC,sBAAsB,CAAC;oCAC1B,MAAM;oCACN,KAAK;oCACL,kBAAkB,EAAE,gBAAgB;oCACpC,OAAO;oCACP,kBAAkB,EAAE,OAAO;iCAC5B,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;oCACf,IAAI,QAAQ,EAAE,CAAC;wCACb,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;oCACrC,CAAC;oCACD,OAAO,CAAC,IAAI,CAAC,CAAC;gCAChB,CAAC,EAAE,MAAM,CAAC,CAAC;gCACX,MAAM;4BACR,KAAK,uCAAuC;gCAC1C,OAAO,CAAC;oCACN,MAAM;oCACN,OAAO;oCACP,KAAK;oCACL,YAAY;oCACZ,KAAK;oCACL,KAAK;iCACsB,CAAC,CAAC;gCAC/B,MAAM;4BACR,KAAK,uBAAuB;gCAC1B,OAAO,CAAC;oCACN,MAAM;oCACN,OAAO;oCACP,YAAY;iCACS,CAAC,CAAC;gCACzB,MAAM;4BACR;gCACE,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC,CAAC;wBACnD,CAAC;oBACH,CAAC,CAAC;oBAEF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;oBAElD,MAAM,oBAAoB,GAAG,WAAW,CAAC,GAAG,EAAE;wBAC5C,IAAI,KAAK,EAAE,MAAM,EAAE,CAAC;4BAClB,OAAO,EAAE,CAAC;4BACV,MAAM,CAAC,IAAI,mBAAmB,EAAE,CAAC,CAAC;wBACpC,CAAC;oBACH,CAAC,EAAE,oBAAoB,CAAC,CAAC;oBAEzB,MAAM,OAAO,GAAG,GAAG,EAAE;wBACnB,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;wBACrD,aAAa,CAAC,oBAAoB,CAAC,CAAC;oBACtC,CAAC,CAAC;gBACJ,CAAC,CAAC,CAAC;YACL,CAAC;WAAC;QAEF;;;;;;;;;;;;;;;;;;;;WAoBG;QACa;;;;mBAAkB,KAAK,IAAqB,EAAE;gBAC5D,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACnC,CAAC;WAAC;QAEiB;;;;mBAAyB,KAAK,EAC/C,OAA2C,EAC3C,cAAoC;gBAClC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,WAAW;aAC1C,EACsC,EAAE;gBACzC,MAAM,SAAS,GAAG,oBAAoB,EAAE,CAAC;gBACzC,MAAM,mBAAmB,GAAG,oBAAoB,EAAE,CAAC;gBAEnD,MAAM,WAAW,GAAG,MAAM,sBAAsB,CAAC;oBAC/C,SAAS,EAAE;wBACT,GAAG,OAAO,EAAE,SAAS;wBACrB,sBAAsB,EAAE;4BACtB,WAAW,EAAE,WAAW;4BACxB,kBAAkB,EAAE,KAAK;4BACzB,gBAAgB,EAAE,WAAW;4BAC7B,GAAG,OAAO,EAAE,SAAS,EAAE,sBAAsB;yBAC9C;wBACD,SAAS;wBACT,EAAE,EAAE;4BACF,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ;4BAC5B,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ;4BAC9B,GAAG,OAAO,EAAE,SAAS,EAAE,EAAE;yBAC1B;wBACD,gBAAgB,EAAE;4BAChB;gCACE,IAAI,EAAE,YAAY;gCAClB,GAAG,EAAE,CAAC,CAAC;6BACR;4BACD;gCACE,IAAI,EAAE,YAAY;gCAClB,GAAG,EAAE,CAAC,GAAG;6BACV;yBACF;wBACD,IAAI,EAAE;4BACJ,EAAE,EAAE,mBAAmB;4BACvB,IAAI,EAAE,WAAW,CAAC,QAAQ;4BAC1B,WAAW,EAAE,WAAW,CAAC,QAAQ;4BACjC,GAAG,OAAO,EAAE,SAAS,EAAE,IAAI;yBAC5B;qBACF;oBACD,MAAM,EAAE,OAAO,EAAE,MAAM;iBACxB,CAAC,CAAC;gBAEH,4EAA4E;gBAC5E,IAAI,WAAW,CAAC,UAAU,IAAI,IAAI,IAAI,WAAW,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAC1E,WAAW,CAAC,UAAU,GAAG;wBACvB,kCAAkC;wBAClC,gCAAgC;qBACjC,CAAC;gBACJ,CAAC;gBAED,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,WAAW,EAAE,CAAC;YACzD,CAAC;WAAC;QAEiB;;;;mBAAiB,KAAK,IAA0B,EAAE;gBACnE,MAAM,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;gBAClD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAElD,uFAAuF;gBACvF,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;gBAChC,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;gBAC5C,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACtD,CAAC;WAAC;QAEM;;;;mBAAoD,IAAI;WAAC;QAxlB/D,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QAEjC,IAAI,CAAC,eAAe,GAAG,IAAI,eAAe,CAAC;YACzC,IAAI,EAAE,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ;SACvC,CAAC,CAAC;QAEH,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAC3C,CAAC;IAyFD;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACa,KAAK,CAAC,aAAa,CACjC,IAAwC;QAExC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QAChE,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;YAC7C,GAAG,IAAI;YACP,eAAe;SAChB,CAAC,CAAC;QAEH,IAAI,kBAAkB,IAAI,QAAQ,IAAI,QAAQ,CAAC,gBAAgB,EAAE,CAAC;YAChE,OAAO;gBACL,WAAW,EAAE,KAAK;gBAClB,MAAM,EAAE,QAAQ,CAAC,gBAAgB;aAClC,CAAC;QACJ,CAAC;QAED,wEAAwE;QACxE,IACE,QAAQ,CAAC,MAAM,KAAK,cAAc;YAClC,QAAQ,CAAC,gBAAgB;YACzB,QAAQ,CAAC,YAAY,EACrB,CAAC;YACD,OAAO;gBACL,WAAW,EAAE,IAAI;gBACjB,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;gBAC3C,YAAY,EAAE,QAAQ,CAAC,YAAY;aACpC,CAAC;QACJ,CAAC;QAED,kCAAkC;QAClC,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACa,KAAK,CAAC,SAAS,CAC7B,IAAwC;QAExC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QACjE,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxD,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE;YAClC,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,eAAe;YACf,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;SAC1C,CAAC,CAAC;IACL,CAAC;IAuZkB,KAAK,CAAC,kBAAkB;QACzC,IAAI,IAAI,CAAC,yBAAyB,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,yBAAyB,CAAC;QACxC,CAAC;QAED,IAAI,CAAC,yBAAyB,GAAG,CAAC,KAAK,IAAI,EAAE;YAC3C,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,EAAE,CAAC;gBACpC,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;YAClC,CAAC;YAED,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAEpC,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,EAAG,CAAC;QACzC,CAAC,CAAC,EAAE,CAAC;QAEL,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC;YACpD,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,yBAAyB,GAAG,IAAI,CAAC;QACxC,CAAC;IACH,CAAC;IAEkB,KAAK,CAAC,mBAAmB,CAC1C,OAAyB,IAAI,CAAC,IAAI;QAElC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACtC,IAAI,IAAI,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC9B,+GAA+G;YAC/G,IAAI,CAAC,eAAe,CAAC,gBAAgB,GAAG;gBACtC;oBACE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC;oBAC5C,IAAI,EAAE,YAAY;oBAClB,UAAU,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC;iBACnC;aACF,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,mBAAoB,SAAQ,SAAS;IAGhD;;;OAGG;IACH;QACE,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAPlB;;;;mBAAO,qBAAqB;WAAC;IAQtC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,gBAAiB,SAAQ,SAAS;IAA/C;;QACW;;;;mBAAO,kBAAkB;WAAC;IACrC,CAAC;CAAA","sourcesContent":["import { BaseError, ConnectionConfigSchema } from \"@aa-sdk/core\";\nimport { getWebAuthnAttestation } from \"@turnkey/http\";\nimport { IframeStamper } from \"@turnkey/iframe-stamper\";\nimport { WebauthnStamper } from \"@turnkey/webauthn-stamper\";\nimport { z } from \"zod\";\nimport type { AuthParams } from \"../signer.js\";\nimport { generateRandomBuffer } from \"../utils/generateRandomBuffer.js\";\nimport { BaseSignerClient } from \"./base.js\";\nimport type {\n  AlchemySignerClientEvents,\n  AuthenticatingEventMetadata,\n  CredentialCreationOptionOverrides,\n  EmailAuthParams,\n  ExportWalletParams,\n  OauthConfig,\n  OtpParams,\n  JwtParams,\n  JwtResponse,\n  User,\n  SubmitOtpCodeResponse,\n  AuthLinkingPrompt,\n  GetWebAuthnAttestationResult,\n  IdTokenOnly,\n  SmsAuthParams,\n} from \"./types.js\";\nimport { MfaRequiredError } from \"../errors.js\";\nimport { parseMfaError } from \"../utils/parseMfaError.js\";\n\nconst CHECK_CLOSE_INTERVAL = 500;\n\nexport const AlchemySignerClientParamsSchema = z.object({\n  connection: ConnectionConfigSchema,\n  iframeConfig: z.object({\n    iframeElementId: z.string().default(\"turnkey-iframe\"),\n    iframeContainerId: z.string(),\n  }),\n  rpId: z.string().optional(),\n  rootOrgId: z\n    .string()\n    .optional()\n    .default(\"24c1acf5-810f-41e0-a503-d5d13fa8e830\"),\n  oauthCallbackUrl: z\n    .string()\n    .optional()\n    .default(\"https://signer.alchemy.com/callback\"),\n  enablePopupOauth: z.boolean().optional().default(false),\n});\n\nexport type AlchemySignerClientParams = z.input<\n  typeof AlchemySignerClientParamsSchema\n>;\n\n/**\n * A lower level client used by the AlchemySigner used to communicate with\n * Alchemy's signer service.\n */\nexport class AlchemySignerWebClient extends BaseSignerClient<ExportWalletParams> {\n  private iframeStamper: IframeStamper;\n  private webauthnStamper: WebauthnStamper;\n  oauthCallbackUrl: string;\n  iframeConfig: {\n    iframeElementId: string;\n    iframeContainerId: string;\n  };\n\n  /**\n   * Initializes a new instance with the given parameters, setting up the connection, iframe configuration, and WebAuthn stamper.\n   *\n   * @example\n   * ```ts\n   * import { AlchemySignerWebClient } from \"@account-kit/signer\";\n   *\n   * const client = new AlchemySignerWebClient({\n   *  connection: {\n   *    apiKey: \"your-api-key\",\n   *  },\n   *  iframeConfig: {\n   *   iframeContainerId: \"signer-iframe-container\",\n   *  },\n   * });\n   * ```\n   *\n   * @param {AlchemySignerClientParams} params the parameters required to initialize the client\n   * @param {ConnectionConfig} params.connection The connection details needed to connect to the service\n   * @param {{ iframeElementId?: string; iframeContainerId: string }} params.iframeConfig The configuration details for setting up the iframe stamper\n   * @param {string} params.rpId The relying party ID, defaulting to the current hostname if not provided\n   * @param {string} params.rootOrgId The root organization ID\n   */\n  constructor(params: AlchemySignerClientParams) {\n    const { connection, iframeConfig, rpId, rootOrgId, oauthCallbackUrl } =\n      AlchemySignerClientParamsSchema.parse(params);\n\n    const iframeStamper = new IframeStamper({\n      iframeElementId: iframeConfig.iframeElementId,\n      iframeUrl: \"https://auth.turnkey.com\",\n      iframeContainer: document.getElementById(iframeConfig.iframeContainerId),\n    });\n\n    super({\n      connection,\n      rootOrgId,\n      stamper: iframeStamper,\n    });\n\n    this.iframeStamper = iframeStamper;\n    this.iframeConfig = iframeConfig;\n\n    this.webauthnStamper = new WebauthnStamper({\n      rpId: rpId ?? window.location.hostname,\n    });\n\n    this.oauthCallbackUrl = oauthCallbackUrl;\n  }\n\n  /**\n   * Begin authenticating a user with their email and an expiration time for the authentication request. Initializes the iframe stamper to get the target public key.\n   * This method sends an email to the user to complete their login\n   *\n   * @example\n   * ```ts\n   * import { AlchemySignerWebClient } from \"@account-kit/signer\";\n   *\n   * const client = new AlchemySignerWebClient({\n   *  connection: {\n   *    apiKey: \"your-api-key\",\n   *  },\n   *  iframeConfig: {\n   *   iframeContainerId: \"signer-iframe-container\",\n   *  },\n   * });\n   *\n   * const account = await client.initEmailAuth({ email: \"you@mail.com\" });\n   * ```\n   *\n   * @param {Omit<EmailAuthParams, \"targetPublicKey\">} params The parameters for email authentication, excluding the target public key\n   * @returns {Promise<any>} The response from the authentication request\n   */\n  public override initEmailAuth = async (\n    params: Omit<EmailAuthParams, \"targetPublicKey\">,\n  ) => {\n    this.eventEmitter.emit(\"authenticating\", { type: \"otp\" });\n    const { email, emailMode, expirationSeconds } = params;\n    const publicKey = await this.initSessionStamper();\n\n    try {\n      return await this.request(\"/v1/auth\", {\n        email,\n        emailMode,\n        targetPublicKey: publicKey,\n        expirationSeconds,\n        redirectParams: params.redirectParams?.toString(),\n        multiFactors: params.multiFactors,\n      });\n    } catch (error) {\n      const multiFactors = parseMfaError(error);\n\n      // If MFA is required, and emailMode is Magic Link, the user must submit mfa with the request or\n      // the the server will return an error with the required mfa factors.\n      if (multiFactors) {\n        throw new MfaRequiredError(multiFactors);\n      }\n      throw error;\n    }\n  };\n\n  /**\n   * Begin authenticating a user through sms. Initializes the iframe stamper to get the target public key.\n   * This method sends a text message to the user to complete their login\n   *\n   * @example\n   * ```ts\n   * import { AlchemySignerWebClient } from \"@account-kit/signer\";\n   *\n   * const client = new AlchemySignerWebClient({\n   *  connection: {\n   *    apiKey: \"your-api-key\",\n   *  },\n   *  iframeConfig: {\n   *   iframeContainerId: \"signer-iframe-container\",\n   *  },\n   * });\n   *\n   * const account = await client.initSmsAuth({ phone: \"+1234567890\" });\n   * ```\n   *\n   * @param {Omit<SmsAuthParams, \"targetPublicKey\">} params The parameters for sms authentication, excluding the target public key\n   * @returns {Promise<any>} The response from the authentication request\n   */\n  public override initSmsAuth = async (\n    params: Omit<SmsAuthParams, \"targetPublicKey\">,\n  ) => {\n    this.eventEmitter.emit(\"authenticating\", { type: \"otp\" });\n    const { phone } = params;\n    const publicKey = await this.initSessionStamper();\n\n    return this.request(\"/v1/auth\", {\n      phone,\n      targetPublicKey: publicKey,\n    });\n  };\n\n  /**\n   * Authenticates using an OTP code which was previously received via email.\n   *\n   * @example\n   * ```ts\n   * import { AlchemySignerWebClient } from \"@account-kit/signer\";\n   *\n   * const client = new AlchemySignerWebClient({\n   *  connection: {\n   *    apiKey: \"your-api-key\",\n   *  },\n   *  iframeConfig: {\n   *   iframeContainerId: \"signer-iframe-container\",\n   *  },\n   * });\n   *\n   * const account = await client.submitOtpCode({\n   *   orgId: \"user-org-id\",\n   *   otpId: \"opt-returned-from-initEmailAuth\",\n   *   otpCode: \"otp-code-from-email\",\n   * });\n   * ```\n   *\n   * @param {Omit<OtpParams, \"targetPublicKey\">} args The parameters for the OTP request, excluding the target public key.\n   * @returns {Promise<{ bundle: string }>} A promise that resolves to an object containing the credential bundle.\n   */\n  public override async submitOtpCode(\n    args: Omit<OtpParams, \"targetPublicKey\">,\n  ): Promise<SubmitOtpCodeResponse> {\n    this.eventEmitter.emit(\"authenticating\", { type: \"otpVerify\" });\n    const targetPublicKey = await this.initSessionStamper();\n    const response = await this.request(\"/v1/otp\", {\n      ...args,\n      targetPublicKey,\n    });\n\n    if (\"credentialBundle\" in response && response.credentialBundle) {\n      return {\n        mfaRequired: false,\n        bundle: response.credentialBundle,\n      };\n    }\n\n    // If the server says \"MFA_REQUIRED\", pass that data back to the caller:\n    if (\n      response.status === \"MFA_REQUIRED\" &&\n      response.encryptedPayload &&\n      response.multiFactors\n    ) {\n      return {\n        mfaRequired: true,\n        encryptedPayload: response.encryptedPayload,\n        multiFactors: response.multiFactors,\n      };\n    }\n\n    // Otherwise, it's truly an error:\n    throw new Error(\n      \"Failed to submit OTP code. Server did not return required fields.\",\n    );\n  }\n\n  /**\n   * Authenticates using a custom issued JWT\n   *\n   * @example\n   * ```ts\n   * import { AlchemySignerWebClient } from \"@account-kit/signer\";\n   *\n   * const client = new AlchemySignerWebClient({\n   *  connection: {\n   *    apiKey: \"your-api-key\",\n   *  },\n   *  iframeConfig: {\n   *   iframeContainerId: \"signer-iframe-container\",\n   *  },\n   * });\n   *\n   * const account = await client.submitJwt({\n   *   jwt: \"custom-issued-jwt\",\n   *   authProvider: \"auth-provider-name\",\n   * });\n   * ```\n   *\n   * @param {Omit<JwtParams, \"targetPublicKey\">} args The parameters for the JWT request, excluding the target public key.\n   * @returns {Promise<{ bundle: string }>} A promise that resolves to an object containing the credential bundle.\n   */\n  public override async submitJwt(\n    args: Omit<JwtParams, \"targetPublicKey\">,\n  ): Promise<JwtResponse> {\n    this.eventEmitter.emit(\"authenticating\", { type: \"custom-jwt\" });\n    const targetPublicKey = await this.initSessionStamper();\n    return this.request(\"/v1/auth-jwt\", {\n      jwt: args.jwt,\n      targetPublicKey,\n      authProvider: args.authProvider,\n      expirationSeconds: args.expirationSeconds,\n    });\n  }\n\n  /**\n   * Completes auth for the user by injecting a credential bundle and retrieving\n   * the user information based on the provided organization ID. Emits events\n   * during the process.\n   *\n   * @example\n   * ```ts\n   * import { AlchemySignerWebClient } from \"@account-kit/signer\";\n   *\n   * const client = new AlchemySignerWebClient({\n   *  connection: {\n   *    apiKey: \"your-api-key\",\n   *  },\n   *  iframeConfig: {\n   *   iframeContainerId: \"signer-iframe-container\",\n   *  },\n   * });\n   *\n   * const account = await client.completeAuthWithBundle({ orgId: \"user-org-id\", bundle: \"bundle-from-email\", connectedEventName: \"connectedEmail\" });\n   * ```\n   *\n   * @param {{ bundle: string; orgId: string, connectedEventName: keyof AlchemySignerClientEvents, idToken?: string }} config\n   * The configuration object for the authentication function containing the\n   * credential bundle to inject and the organization id associated with the\n   * user, as well as the event to be emitted on success and optionally an OIDC\n   * ID token with extra user information\n   * @returns {Promise<User>} A promise that resolves to the authenticated user\n   * information\n   */\n  public override completeAuthWithBundle = async ({\n    bundle,\n    orgId,\n    connectedEventName,\n    idToken,\n    authenticatingType,\n  }: {\n    bundle: string;\n    orgId: string;\n    connectedEventName: keyof AlchemySignerClientEvents;\n    authenticatingType: AuthenticatingEventMetadata[\"type\"];\n    idToken?: string;\n  }): Promise<User> => {\n    this.eventEmitter.emit(\"authenticating\", { type: authenticatingType });\n    await this.initSessionStamper();\n\n    const result = await this.iframeStamper.injectCredentialBundle(bundle);\n\n    if (!result) {\n      throw new Error(\"Failed to inject credential bundle\");\n    }\n\n    const user = await this.whoami(orgId, idToken);\n\n    this.eventEmitter.emit(connectedEventName, user, bundle);\n\n    return user;\n  };\n\n  /**\n   * Initiates the export of a wallet by creating an iframe stamper and calling the appropriate export function.\n   * The export can be based on a seed phrase or a private key.\n   *\n   * @example\n   * ```ts\n   * import { AlchemySignerWebClient } from \"@account-kit/signer\";\n   *\n   * const client = new AlchemySignerWebClient({\n   *  connection: {\n   *    apiKey: \"your-api-key\",\n   *  },\n   *  iframeConfig: {\n   *   iframeContainerId: \"signer-iframe-container\",\n   *  },\n   * });\n   *\n   * const account = await client.exportWallet({\n   *  iframeContainerId: \"export-iframe-container\",\n   * });\n   * ```\n   *\n   * @param {ExportWalletParams} config The parameters for exporting the wallet\n   * @param {string} config.iframeContainerId The ID of the container element that will hold the iframe stamper\n   * @param {string} [config.iframeElementId] Optional ID for the iframe element\n   * @returns {Promise<void>} A promise that resolves when the export process is complete\n   */\n  public override exportWallet = async ({\n    iframeContainerId,\n    iframeElementId = \"turnkey-export-iframe\",\n  }: ExportWalletParams) => {\n    const exportWalletIframeStamper = new IframeStamper({\n      iframeContainer: document.getElementById(iframeContainerId),\n      iframeElementId: iframeElementId,\n      iframeUrl: \"https://export.turnkey.com\",\n    });\n    await exportWalletIframeStamper.init();\n\n    if (this.turnkeyClient.stamper === this.iframeStamper) {\n      return this.exportWalletInner({\n        exportStamper: exportWalletIframeStamper,\n        exportAs: \"SEED_PHRASE\",\n      });\n    }\n\n    return this.exportWalletInner({\n      exportStamper: exportWalletIframeStamper,\n      exportAs: \"PRIVATE_KEY\",\n    });\n  };\n\n  /**\n   * Asynchronous function that clears the user and resets the iframe stamper.\n   *\n   * @example\n   * ```ts\n   * import { AlchemySignerWebClient } from \"@account-kit/signer\";\n   *\n   * const client = new AlchemySignerWebClient({\n   *  connection: {\n   *    apiKey: \"your-api-key\",\n   *  },\n   *  iframeConfig: {\n   *   iframeContainerId: \"signer-iframe-container\",\n   *  },\n   * });\n   *\n   * const account = await client.disconnect();\n   * ```\n   */\n  public override disconnect = async () => {\n    this.user = undefined;\n    this.iframeStamper.clear();\n\n    // In the latest version of the TK iframe stamper, the\n    // IframeStamper instance seems to not be usable after\n    // clearing it, so we need to create a new instance.\n    const stamper = new IframeStamper({\n      iframeContainer: document.getElementById(\n        this.iframeConfig.iframeContainerId,\n      ),\n      iframeElementId: this.iframeConfig.iframeElementId,\n      iframeUrl: \"https://auth.turnkey.com\",\n    });\n    this.iframeStamper = stamper;\n    await this.initSessionStamper();\n  };\n\n  /**\n   * Redirects the user to the OAuth provider URL based on the provided arguments. This function will always reject after 1 second if the redirection does not occur.\n   *\n   * @example\n   * ```ts\n   * import { AlchemySignerWebClient } from \"@account-kit/signer\";\n   *\n   * const client = new AlchemySignerWebClient({\n   *  connection: {\n   *    apiKey: \"your-api-key\",\n   *  },\n   *  iframeConfig: {\n   *   iframeContainerId: \"signer-iframe-container\",\n   *  },\n   * });\n   *\n   * await client.oauthWithRedirect({\n   *   type: \"oauth\",\n   *   authProviderId: \"google\",\n   *   mode: \"redirect\",\n   *   redirectUrl: \"/\",\n   * });\n   * ```\n   *\n   * @param {Extract<AuthParams, { type: \"oauth\"; mode: \"redirect\" }>} args The arguments required to obtain the OAuth provider URL\n   * @returns {Promise<never>} A promise that will never resolve, only reject if the redirection fails\n   */\n  public override oauthWithRedirect = async (\n    args: Extract<AuthParams, { type: \"oauth\"; mode: \"redirect\" }>,\n  ): Promise<User | IdTokenOnly> => {\n    const turnkeyPublicKey = await this.initSessionStamper();\n\n    const oauthParams = args;\n    const providerUrl = await this.getOauthProviderUrl({\n      oauthParams,\n      turnkeyPublicKey,\n      oauthCallbackUrl: this.oauthCallbackUrl,\n    });\n\n    window.location.href = providerUrl;\n    return new Promise((_, reject) =>\n      setTimeout(() => reject(\"Failed to redirect to OAuth provider\"), 1000),\n    );\n  };\n\n  /**\n   * Initiates an OAuth authentication flow in a popup window and returns the authenticated user.\n   *\n   * @example\n   * ```ts\n   * import { AlchemySignerWebClient } from \"@account-kit/signer\";\n   *\n   * const client = new AlchemySignerWebClient({\n   *  connection: {\n   *    apiKey: \"your-api-key\",\n   *  },\n   *  iframeConfig: {\n   *   iframeContainerId: \"signer-iframe-container\",\n   *  },\n   * });\n   *\n   * const user = await client.oauthWithPopup({\n   *  type: \"oauth\",\n   *  authProviderId: \"google\",\n   *  mode: \"popup\"\n   * });\n   * ```\n   *\n   * @param {Extract<AuthParams, { type: \"oauth\"; mode: \"popup\" }>} args The authentication parameters specifying OAuth type and popup mode\n   * @returns {Promise<User>} A promise that resolves to a `User` object containing the authenticated user information\n   */\n  public override oauthWithPopup = async (\n    args: Extract<AuthParams, { type: \"oauth\"; mode: \"popup\" }>,\n  ): Promise<User | AuthLinkingPrompt | IdTokenOnly> => {\n    const turnkeyPublicKey = await this.initSessionStamper();\n    const oauthParams = args;\n    const providerUrl = await this.getOauthProviderUrl({\n      oauthParams,\n      turnkeyPublicKey,\n      oauthCallbackUrl: this.oauthCallbackUrl,\n    });\n    const popup = window.open(\n      providerUrl,\n      \"_blank\",\n      \"popup,width=500,height=600\",\n    );\n    const eventEmitter = this.eventEmitter;\n    return new Promise((resolve, reject) => {\n      const handleMessage = (event: MessageEvent) => {\n        if (!event.data) {\n          return;\n        }\n        const {\n          alchemyStatus: status,\n          alchemyBundle: bundle,\n          alchemyOrgId: orgId,\n          alchemyIdToken: idToken,\n          alchemyIsSignup: isSignup,\n          alchemyError,\n          alchemyOtpId: otpId,\n          alchemyEmail: email,\n          alchemyAuthProvider: providerName,\n        } = event.data;\n        if (alchemyError) {\n          cleanup();\n          popup?.close();\n          reject(new OauthFailedError(alchemyError));\n        }\n        if (!status) {\n          // This message isn't meant for us.\n          return;\n        }\n        cleanup();\n        popup?.close();\n        switch (status) {\n          case \"SUCCESS\":\n            this.completeAuthWithBundle({\n              bundle,\n              orgId,\n              connectedEventName: \"connectedOauth\",\n              idToken,\n              authenticatingType: \"oauth\",\n            }).then((user) => {\n              if (isSignup) {\n                eventEmitter.emit(\"newUserSignup\");\n              }\n              resolve(user);\n            }, reject);\n            break;\n          case \"ACCOUNT_LINKING_CONFIRMATION_REQUIRED\":\n            resolve({\n              status,\n              idToken,\n              email,\n              providerName,\n              otpId,\n              orgId,\n            } satisfies AuthLinkingPrompt);\n            break;\n          case \"FETCHED_ID_TOKEN_ONLY\":\n            resolve({\n              status,\n              idToken,\n              providerName,\n            } satisfies IdTokenOnly);\n            break;\n          default:\n            reject(new Error(`Unknown status: ${status}`));\n        }\n      };\n\n      window.addEventListener(\"message\", handleMessage);\n\n      const checkCloseIntervalId = setInterval(() => {\n        if (popup?.closed) {\n          cleanup();\n          reject(new OauthCancelledError());\n        }\n      }, CHECK_CLOSE_INTERVAL);\n\n      const cleanup = () => {\n        window.removeEventListener(\"message\", handleMessage);\n        clearInterval(checkCloseIntervalId);\n      };\n    });\n  };\n\n  /**\n   * Initializes the iframe stamper and returns its public key.\n   *\n   * @example\n   * ```ts twoslash\n   * import { AlchemySignerWebClient } from \"@account-kit/signer\";\n   *\n   * const client = new AlchemySignerWebClient({\n   *  connection: {\n   *    apiKey: \"your-api-key\",\n   *  },\n   *  iframeConfig: {\n   *   iframeContainerId: \"signer-iframe-container\",\n   *  },\n   * });\n   *\n   * const publicKey = await client.targetPublicKey();\n   * ```\n   *\n   * @returns {Promise<string>} A promise that resolves with the target public key when the iframe stamper is successfully initialized, or throws an error if the target public key is not supported.\n   */\n  public override targetPublicKey = async (): Promise<string> => {\n    return this.initSessionStamper();\n  };\n\n  protected override getWebAuthnAttestation = async (\n    options?: CredentialCreationOptionOverrides,\n    userDetails: { username: string } = {\n      username: this.user?.email ?? \"anonymous\",\n    },\n  ): Promise<GetWebAuthnAttestationResult> => {\n    const challenge = generateRandomBuffer();\n    const authenticatorUserId = generateRandomBuffer();\n\n    const attestation = await getWebAuthnAttestation({\n      publicKey: {\n        ...options?.publicKey,\n        authenticatorSelection: {\n          residentKey: \"preferred\",\n          requireResidentKey: false,\n          userVerification: \"preferred\",\n          ...options?.publicKey?.authenticatorSelection,\n        },\n        challenge,\n        rp: {\n          id: window.location.hostname,\n          name: window.location.hostname,\n          ...options?.publicKey?.rp,\n        },\n        pubKeyCredParams: [\n          {\n            type: \"public-key\",\n            alg: -7,\n          },\n          {\n            type: \"public-key\",\n            alg: -257,\n          },\n        ],\n        user: {\n          id: authenticatorUserId,\n          name: userDetails.username,\n          displayName: userDetails.username,\n          ...options?.publicKey?.user,\n        },\n      },\n      signal: options?.signal,\n    });\n\n    // on iOS sometimes this is returned as empty or null, so handling that here\n    if (attestation.transports == null || attestation.transports.length === 0) {\n      attestation.transports = [\n        \"AUTHENTICATOR_TRANSPORT_INTERNAL\",\n        \"AUTHENTICATOR_TRANSPORT_HYBRID\",\n      ];\n    }\n\n    return { challenge, authenticatorUserId, attestation };\n  };\n\n  protected override getOauthConfig = async (): Promise<OauthConfig> => {\n    const currentStamper = this.turnkeyClient.stamper;\n    const publicKey = await this.initSessionStamper();\n\n    // swap the stamper back in case the user logged in with a different stamper (passkeys)\n    this.setStamper(currentStamper);\n    const nonce = this.getOauthNonce(publicKey);\n    return this.request(\"/v1/prepare-oauth\", { nonce });\n  };\n\n  private initSessionStamperPromise: Promise<string> | null = null;\n\n  protected override async initSessionStamper(): Promise<string> {\n    if (this.initSessionStamperPromise) {\n      return this.initSessionStamperPromise;\n    }\n\n    this.initSessionStamperPromise = (async () => {\n      if (!this.iframeStamper.publicKey()) {\n        await this.iframeStamper.init();\n      }\n\n      this.setStamper(this.iframeStamper);\n\n      return this.iframeStamper.publicKey()!;\n    })();\n\n    try {\n      const result = await this.initSessionStamperPromise;\n      return result;\n    } finally {\n      this.initSessionStamperPromise = null;\n    }\n  }\n\n  protected override async initWebauthnStamper(\n    user: User | undefined = this.user,\n  ): Promise<void> {\n    this.setStamper(this.webauthnStamper);\n    if (user && user.credentialId) {\n      // The goal here is to allow us to cache the allowed credential, but this doesn't work with hybrid transport :(\n      this.webauthnStamper.allowCredentials = [\n        {\n          id: Buffer.from(user.credentialId, \"base64\"),\n          type: \"public-key\",\n          transports: [\"internal\", \"hybrid\"],\n        },\n      ];\n    }\n  }\n}\n\n/**\n * This error is thrown when the OAuth flow is cancelled because the auth popup\n * window was closed.\n */\nexport class OauthCancelledError extends BaseError {\n  override name = \"OauthCancelledError\";\n\n  /**\n   * Constructor for initializing an error indicating that the OAuth flow was\n   * cancelled.\n   */\n  constructor() {\n    super(\"OAuth cancelled\");\n  }\n}\n\n/**\n * This error is thrown when an error occurs during the OAuth login flow.\n */\nexport class OauthFailedError extends BaseError {\n  override name = \"OauthFailedError\";\n}\n"]}

package/dist/esm/client/types.d.ts

@@ -74,6 +74,17 @@ export type OtpResponse = {
     encryptedPayload: string;
     multiFactors: MfaFactor[];
 };
+export type JwtParams = {
+    jwt: string;
+    targetPublicKey: string;
+    authProvider?: string;
+    expirationSeconds?: number;
+};
+export type JwtResponse = {
+    isSignUp: boolean;
+    orgId: string;
+    credentialBundle: string;
+};
 export type SignupResponse = {
     orgId: string;
     userId?: string;
@@ -231,6 +242,11 @@ export type SignerEndpoints = [
             multiFactors: MfaFactor[];
         };
     },
+    {
+        Route: "/v1/auth-jwt";
+        Body: JwtParams;
+        Response: JwtResponse;
+    },
     {
         Route: "/v1/signer-config";
         Body: {};
@@ -340,7 +356,7 @@ export type SignerEndpoints = [
     }
 ];
 export type AuthenticatingEventMetadata = {
-    type: "email" | "passkey" | "oauth" | "otp" | "otpVerify" | "sms";
+    type: "email" | "passkey" | "oauth" | "otp" | "otpVerify" | "custom-jwt" | "sms";
 };
 export type AlchemySignerClientEvents = {
     connected(user: User): void;
@@ -350,6 +366,7 @@ export type AlchemySignerClientEvents = {
     connectedPasskey(user: User): void;
     connectedOauth(user: User, bundle: string): void;
     connectedOtp(user: User, bundle: string): void;
+    connectedJwt(user: User, bundle: string): void;
     disconnected(): void;
 };
 export type AlchemySignerClientEvent = keyof AlchemySignerClientEvents;

package/dist/esm/client/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/client/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { Address } from \"@aa-sdk/core\";\nimport type {\n  TSignedRequest,\n  TurnkeyApiTypes,\n  getWebAuthnAttestation,\n} from \"@turnkey/http\";\nimport type { Hex } from \"viem\";\nimport type { AuthParams } from \"../signer\";\n\nexport type CredentialCreationOptionOverrides = {\n  publicKey?: Partial<CredentialCreationOptions[\"publicKey\"]>;\n} & Pick<CredentialCreationOptions, \"signal\">;\n\n// [!region User]\nexport type User = {\n  email?: string;\n  orgId: string;\n  userId: string;\n  address: Address;\n  solanaAddress?: string;\n  credentialId?: string;\n  idToken?: string;\n  claims?: Record<string, unknown>;\n};\n// [!endregion User]\n\nexport type ExportWalletParams = {\n  iframeContainerId: string;\n  iframeElementId?: string;\n};\n\nexport type CreateAccountParams =\n  | {\n      type: \"email\";\n      email: string;\n      /** @deprecated This option will be overriden by dashboard settings. Please use the dashboard settings instead. This option will be removed in a future release. */\n      emailMode?: EmailType;\n      expirationSeconds?: number;\n      redirectParams?: URLSearchParams;\n    }\n  | {\n      type: \"sms\";\n      phone: string;\n    }\n  | {\n      type: \"passkey\";\n      email: string;\n      creationOpts?: CredentialCreationOptionOverrides;\n    }\n  | {\n      type: \"passkey\";\n      username: string;\n      creationOpts?: CredentialCreationOptionOverrides;\n    };\n\nexport type EmailType = \"magicLink\" | \"otp\";\n\nexport type EmailAuthParams = {\n  email: string;\n  /** @deprecated This option will be overriden by dashboard settings. Please use the dashboard settings instead. This option will be removed in a future release. */\n  emailMode?: EmailType;\n  expirationSeconds?: number;\n  targetPublicKey: string;\n  redirectParams?: URLSearchParams;\n  multiFactors?: VerifyMfaParams[];\n};\n\nexport type SmsAuthParams = {\n  phone: string;\n  targetPublicKey: string;\n};\n\nexport type OauthParams = Extract<AuthParams, { type: \"oauth\" }> & {\n  expirationSeconds?: number;\n  fetchIdTokenOnly?: boolean;\n};\n\nexport type OtpParams = {\n  orgId: string;\n  otpId: string;\n  otpCode: string;\n  targetPublicKey: string;\n  expirationSeconds?: number;\n  multiFactors?: VerifyMfaParams[];\n};\n\nexport type OtpResponse =\n  | {\n      status: \"SUCCESS\";\n      credentialBundle: string;\n    }\n  | {\n      status: \"MFA_REQUIRED\";\n      encryptedPayload: string;\n      multiFactors: MfaFactor[];\n    };\n\nexport type SignupResponse = {\n  orgId: string;\n  userId?: string;\n  address?: Address;\n  otpId?: string;\n};\n\nexport type OauthConfig = {\n  codeChallenge: string;\n  requestKey: string;\n  authProviders: AuthProviderConfig[];\n};\n\nexport type EmailConfig = {\n  mode?: \"MAGIC_LINK\" | \"OTP\";\n};\n\nexport type SignerConfig = {\n  email: EmailConfig;\n};\n\nexport type AuthProviderConfig = {\n  id: string;\n  isCustomProvider?: boolean;\n  clientId: string;\n  authEndpoint: string;\n};\n\nexport type SignerRoutes = SignerEndpoints[number][\"Route\"];\nexport type SignerBody<T extends SignerRoutes> = Extract<\n  SignerEndpoints[number],\n  { Route: T }\n>[\"Body\"];\nexport type SignerResponse<T extends SignerRoutes> = Extract<\n  SignerEndpoints[number],\n  { Route: T }\n>[\"Response\"];\n\nexport type SignerEndpoints = [\n  {\n    Route: \"/v1/signup\";\n    Body:\n      | (Omit<EmailAuthParams, \"redirectParams\"> & {\n          redirectParams?: string;\n        })\n      | SmsAuthParams\n      | {\n          passkey: {\n            challenge: string;\n            attestation: Awaited<ReturnType<typeof getWebAuthnAttestation>>;\n          };\n        };\n    Response: SignupResponse;\n  },\n  {\n    Route: \"/v1/whoami\";\n    Body: {\n      stampedRequest: TSignedRequest;\n    };\n    Response: User;\n  },\n  {\n    Route: \"/v1/auth\";\n    Body:\n      | (Omit<EmailAuthParams, \"redirectParams\"> & {\n          redirectParams?: string;\n          multiFactors?: VerifyMfaParams[];\n        })\n      | SmsAuthParams;\n    Response: {\n      orgId: string;\n      otpId?: string;\n      multiFactors?: MfaFactor[];\n    };\n  },\n  {\n    Route: \"/v1/lookup\";\n    Body: {\n      email?: string;\n      phone?: string;\n    };\n    Response: {\n      orgId: string | null;\n    };\n  },\n  {\n    Route: \"/v1/sign-payload\";\n    Body: {\n      stampedRequest: TSignedRequest;\n    };\n    Response: {\n      signature: Hex;\n    };\n  },\n  {\n    Route: \"/v1/update-email-auth\";\n    Body: {\n      stampedRequest: TSignedRequest;\n    };\n    Response: void;\n  },\n  {\n    Route: \"/v1/add-oauth-provider\";\n    Body: {\n      stampedRequest: TSignedRequest;\n    };\n    Response: { oauthProviders: OauthProviderInfo[] };\n  },\n  {\n    Route: \"/v1/remove-oauth-provider\";\n    Body: {\n      stampedRequest: TSignedRequest;\n    };\n    Response: void;\n  },\n  {\n    Route: \"/v1/list-auth-methods\";\n    Body: {};\n    Response: AuthMethods;\n  },\n  {\n    Route: \"/v1/prepare-oauth\";\n    Body: {\n      nonce: string;\n    };\n    Response: OauthConfig;\n  },\n  {\n    Route: \"/v1/otp\";\n    Body: OtpParams;\n    Response: OtpResponse;\n  },\n  {\n    Route: \"/v1/auth-list-multi-factors\";\n    Body: {\n      stampedRequest: TSignedRequest;\n    };\n    Response: {\n      multiFactors: MfaFactor[];\n    };\n  },\n  {\n    Route: \"/v1/auth-delete-multi-factors\";\n    Body: {\n      stampedRequest: TSignedRequest;\n      multiFactorIds: string[];\n    };\n    Response: {\n      multiFactors: MfaFactor[];\n    };\n  },\n  {\n    Route: \"/v1/auth-request-multi-factor\";\n    Body: {\n      stampedRequest: TSignedRequest;\n      multiFactorType: MultiFactorType;\n    };\n    Response: AddMfaResult;\n  },\n  {\n    Route: \"/v1/auth-verify-multi-factor\";\n    Body: VerifyMfaParams & {\n      stampedRequest: TSignedRequest;\n    };\n    Response: {\n      multiFactors: MfaFactor[];\n    };\n  },\n  {\n    Route: \"/v1/signer-config\";\n    Body: {};\n    Response: SignerConfig;\n  },\n  {\n    Route: \"/v1/auth-validate-multi-factors\";\n    Body: {\n      encryptedPayload: string;\n      multiFactors: VerifyMfaParams[];\n    };\n    Response: {\n      payload: {\n        credentialBundle?: string;\n      };\n      multiFactors: MfaFactor[];\n    };\n  },\n  {\n    Route: \"/v1/multi-owner-create\";\n    Body: {\n      members: {\n        evmSignerAddress: Address;\n      }[];\n    };\n    Response: {\n      result: {\n        orgId: string;\n        evmSignerAddress: Address;\n        members: {\n          evmSignerAddress: Address;\n        }[];\n      };\n    };\n  },\n  {\n    Route: \"/v1/multi-owner-prepare-add\";\n    Body: {\n      organizationId: string;\n      members: {\n        evmSignerAddress: Address;\n      }[];\n    };\n    Response: {\n      result: TurnkeyApiTypes[\"v1CreateUsersRequest\"];\n    };\n  },\n  {\n    Route: \"/v1/multi-owner-add\";\n    Body: {\n      stampedRequest: TSignedRequest;\n    };\n    Response: {\n      result: {\n        members: {\n          evmSignerAddress: Address;\n        }[];\n        updateRootQuorumRequest: TurnkeyApiTypes[\"v1UpdateRootQuorumRequest\"];\n      };\n    };\n  },\n  {\n    Route: \"/v1/multi-owner-update-root-quorum\";\n    Body: {\n      stampedRequest: TSignedRequest;\n    };\n    Response: {\n      result: TurnkeyApiTypes[\"v1UpdateRootQuorumResult\"];\n    };\n  },\n  {\n    Route: \"/v1/multi-owner-sign-raw-payload\";\n    Body: {\n      stampedRequest: TSignedRequest;\n    };\n    Response: {\n      result: {\n        signRawPayloadResult: TurnkeyApiTypes[\"v1SignRawPayloadResult\"];\n      };\n    };\n  },\n  {\n    Route: \"/v1/multi-owner-prepare-delete\";\n    Body: {\n      organizationId: string;\n      members: {\n        evmSignerAddress: Address;\n      }[];\n    };\n    Response: {\n      result: {\n        updateRootQuorumRequest: TurnkeyApiTypes[\"v1UpdateRootQuorumRequest\"];\n        deleteMembersRequest: TurnkeyApiTypes[\"v1DeleteUsersRequest\"];\n      };\n    };\n  },\n  {\n    Route: \"/v1/multi-owner-delete\";\n    Body: {\n      stampedRequest: TSignedRequest;\n    };\n    Response: {\n      result: {\n        deletedUserIds: string[];\n      };\n    };\n  },\n];\n\nexport type AuthenticatingEventMetadata = {\n  type: \"email\" | \"passkey\" | \"oauth\" | \"otp\" | \"otpVerify\" | \"sms\";\n};\n\nexport type AlchemySignerClientEvents = {\n  connected(user: User): void;\n  newUserSignup(): void;\n  authenticating(data: AuthenticatingEventMetadata): void;\n  connectedEmail(user: User, bundle: string): void;\n  connectedPasskey(user: User): void;\n  connectedOauth(user: User, bundle: string): void;\n  connectedOtp(user: User, bundle: string): void;\n  disconnected(): void;\n};\n\nexport type AlchemySignerClientEvent = keyof AlchemySignerClientEvents;\n\nexport type GetWebAuthnAttestationResult = {\n  attestation: Awaited<ReturnType<typeof getWebAuthnAttestation>>;\n  challenge: ArrayBuffer | string;\n  authenticatorUserId: BufferSource;\n};\n\nexport type AuthLinkingPrompt = {\n  status: \"ACCOUNT_LINKING_CONFIRMATION_REQUIRED\";\n  idToken: string;\n  email: string;\n  providerName: string;\n  otpId: string;\n  orgId: string;\n};\n\nexport type IdTokenOnly = {\n  status: \"FETCHED_ID_TOKEN_ONLY\";\n  idToken: string;\n  providerName: string;\n};\n\nexport type OauthState = {\n  authProviderId: string;\n  isCustomProvider?: boolean;\n  requestKey: string;\n  turnkeyPublicKey: string;\n  expirationSeconds?: number;\n  redirectUrl?: string;\n  openerOrigin?: string;\n  fetchIdTokenOnly?: boolean;\n};\n\nexport type GetOauthProviderUrlArgs = {\n  oauthParams: OauthParams;\n  turnkeyPublicKey: string;\n  oauthCallbackUrl: string;\n  oauthConfig?: OauthConfig;\n  usesRelativeUrl?: boolean;\n};\n\nexport type MfaFactor = {\n  multiFactorId: string;\n  multiFactorType: string;\n};\n\ntype MultiFactorType = \"totp\";\n\nexport type AddMfaParams = {\n  multiFactorType: MultiFactorType;\n};\n\nexport type AddMfaResult = {\n  multiFactorType: MultiFactorType;\n  multiFactorId: string;\n  multiFactorTotpUrl: string;\n};\n\nexport type VerifyMfaParams = {\n  multiFactorId: string;\n  multiFactorCode: string;\n};\n\nexport type RemoveMfaParams = {\n  multiFactorIds: string[];\n};\n\nexport type ValidateMultiFactorsParams = {\n  encryptedPayload: string;\n  multiFactors: VerifyMfaParams[];\n};\n\nexport type MfaChallenge = {\n  multiFactorId: string;\n  multiFactorChallenge:\n    | {\n        code: string;\n      }\n    | Record<string, any>;\n};\n\nexport type SubmitOtpCodeResponse =\n  | { bundle: string; mfaRequired: false }\n  | { mfaRequired: true; encryptedPayload: string; multiFactors: MfaFactor[] };\n\nexport type AddOauthProviderParams = {\n  providerName: string;\n  oidcToken: string;\n};\n\nexport type AuthMethods = {\n  email?: string;\n  oauthProviders: OauthProviderInfo[];\n  passkeys: PasskeyInfo[];\n};\n\nexport type OauthProviderInfo = {\n  providerId: string;\n  issuer: string;\n  providerName?: string;\n  userDisplayName?: string;\n};\n\nexport type PasskeyInfo = {\n  authenticatorId: string;\n  name: string;\n  createdAt: number;\n};\n\nexport type experimental_CreateApiKeyParams = {\n  name: string;\n  publicKey: string;\n  expirationSec: number;\n};\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/client/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { Address } from \"@aa-sdk/core\";\nimport type {\n  TSignedRequest,\n  TurnkeyApiTypes,\n  getWebAuthnAttestation,\n} from \"@turnkey/http\";\nimport type { Hex } from \"viem\";\nimport type { AuthParams } from \"../signer\";\n\nexport type CredentialCreationOptionOverrides = {\n  publicKey?: Partial<CredentialCreationOptions[\"publicKey\"]>;\n} & Pick<CredentialCreationOptions, \"signal\">;\n\n// [!region User]\nexport type User = {\n  email?: string;\n  orgId: string;\n  userId: string;\n  address: Address;\n  solanaAddress?: string;\n  credentialId?: string;\n  idToken?: string;\n  claims?: Record<string, unknown>;\n};\n// [!endregion User]\n\nexport type ExportWalletParams = {\n  iframeContainerId: string;\n  iframeElementId?: string;\n};\n\nexport type CreateAccountParams =\n  | {\n      type: \"email\";\n      email: string;\n      /** @deprecated This option will be overriden by dashboard settings. Please use the dashboard settings instead. This option will be removed in a future release. */\n      emailMode?: EmailType;\n      expirationSeconds?: number;\n      redirectParams?: URLSearchParams;\n    }\n  | {\n      type: \"sms\";\n      phone: string;\n    }\n  | {\n      type: \"passkey\";\n      email: string;\n      creationOpts?: CredentialCreationOptionOverrides;\n    }\n  | {\n      type: \"passkey\";\n      username: string;\n      creationOpts?: CredentialCreationOptionOverrides;\n    };\n\nexport type EmailType = \"magicLink\" | \"otp\";\n\nexport type EmailAuthParams = {\n  email: string;\n  /** @deprecated This option will be overriden by dashboard settings. Please use the dashboard settings instead. This option will be removed in a future release. */\n  emailMode?: EmailType;\n  expirationSeconds?: number;\n  targetPublicKey: string;\n  redirectParams?: URLSearchParams;\n  multiFactors?: VerifyMfaParams[];\n};\n\nexport type SmsAuthParams = {\n  phone: string;\n  targetPublicKey: string;\n};\n\nexport type OauthParams = Extract<AuthParams, { type: \"oauth\" }> & {\n  expirationSeconds?: number;\n  fetchIdTokenOnly?: boolean;\n};\n\nexport type OtpParams = {\n  orgId: string;\n  otpId: string;\n  otpCode: string;\n  targetPublicKey: string;\n  expirationSeconds?: number;\n  multiFactors?: VerifyMfaParams[];\n};\n\nexport type OtpResponse =\n  | {\n      status: \"SUCCESS\";\n      credentialBundle: string;\n    }\n  | {\n      status: \"MFA_REQUIRED\";\n      encryptedPayload: string;\n      multiFactors: MfaFactor[];\n    };\n\nexport type JwtParams = {\n  jwt: string;\n  targetPublicKey: string;\n  authProvider?: string;\n  expirationSeconds?: number;\n};\n\nexport type JwtResponse = {\n  isSignUp: boolean;\n  orgId: string;\n  credentialBundle: string;\n};\n\nexport type SignupResponse = {\n  orgId: string;\n  userId?: string;\n  address?: Address;\n  otpId?: string;\n};\n\nexport type OauthConfig = {\n  codeChallenge: string;\n  requestKey: string;\n  authProviders: AuthProviderConfig[];\n};\n\nexport type EmailConfig = {\n  mode?: \"MAGIC_LINK\" | \"OTP\";\n};\n\nexport type SignerConfig = {\n  email: EmailConfig;\n};\n\nexport type AuthProviderConfig = {\n  id: string;\n  isCustomProvider?: boolean;\n  clientId: string;\n  authEndpoint: string;\n};\n\nexport type SignerRoutes = SignerEndpoints[number][\"Route\"];\nexport type SignerBody<T extends SignerRoutes> = Extract<\n  SignerEndpoints[number],\n  { Route: T }\n>[\"Body\"];\nexport type SignerResponse<T extends SignerRoutes> = Extract<\n  SignerEndpoints[number],\n  { Route: T }\n>[\"Response\"];\n\nexport type SignerEndpoints = [\n  {\n    Route: \"/v1/signup\";\n    Body:\n      | (Omit<EmailAuthParams, \"redirectParams\"> & {\n          redirectParams?: string;\n        })\n      | SmsAuthParams\n      | {\n          passkey: {\n            challenge: string;\n            attestation: Awaited<ReturnType<typeof getWebAuthnAttestation>>;\n          };\n        };\n    Response: SignupResponse;\n  },\n  {\n    Route: \"/v1/whoami\";\n    Body: {\n      stampedRequest: TSignedRequest;\n    };\n    Response: User;\n  },\n  {\n    Route: \"/v1/auth\";\n    Body:\n      | (Omit<EmailAuthParams, \"redirectParams\"> & {\n          redirectParams?: string;\n          multiFactors?: VerifyMfaParams[];\n        })\n      | SmsAuthParams;\n    Response: {\n      orgId: string;\n      otpId?: string;\n      multiFactors?: MfaFactor[];\n    };\n  },\n  {\n    Route: \"/v1/lookup\";\n    Body: {\n      email?: string;\n      phone?: string;\n    };\n    Response: {\n      orgId: string | null;\n    };\n  },\n  {\n    Route: \"/v1/sign-payload\";\n    Body: {\n      stampedRequest: TSignedRequest;\n    };\n    Response: {\n      signature: Hex;\n    };\n  },\n  {\n    Route: \"/v1/update-email-auth\";\n    Body: {\n      stampedRequest: TSignedRequest;\n    };\n    Response: void;\n  },\n  {\n    Route: \"/v1/add-oauth-provider\";\n    Body: {\n      stampedRequest: TSignedRequest;\n    };\n    Response: { oauthProviders: OauthProviderInfo[] };\n  },\n  {\n    Route: \"/v1/remove-oauth-provider\";\n    Body: {\n      stampedRequest: TSignedRequest;\n    };\n    Response: void;\n  },\n  {\n    Route: \"/v1/list-auth-methods\";\n    Body: {};\n    Response: AuthMethods;\n  },\n  {\n    Route: \"/v1/prepare-oauth\";\n    Body: {\n      nonce: string;\n    };\n    Response: OauthConfig;\n  },\n  {\n    Route: \"/v1/otp\";\n    Body: OtpParams;\n    Response: OtpResponse;\n  },\n  {\n    Route: \"/v1/auth-list-multi-factors\";\n    Body: {\n      stampedRequest: TSignedRequest;\n    };\n    Response: {\n      multiFactors: MfaFactor[];\n    };\n  },\n  {\n    Route: \"/v1/auth-delete-multi-factors\";\n    Body: {\n      stampedRequest: TSignedRequest;\n      multiFactorIds: string[];\n    };\n    Response: {\n      multiFactors: MfaFactor[];\n    };\n  },\n  {\n    Route: \"/v1/auth-request-multi-factor\";\n    Body: {\n      stampedRequest: TSignedRequest;\n      multiFactorType: MultiFactorType;\n    };\n    Response: AddMfaResult;\n  },\n  {\n    Route: \"/v1/auth-verify-multi-factor\";\n    Body: VerifyMfaParams & {\n      stampedRequest: TSignedRequest;\n    };\n    Response: {\n      multiFactors: MfaFactor[];\n    };\n  },\n  {\n    Route: \"/v1/auth-jwt\";\n    Body: JwtParams;\n    Response: JwtResponse;\n  },\n  {\n    Route: \"/v1/signer-config\";\n    Body: {};\n    Response: SignerConfig;\n  },\n  {\n    Route: \"/v1/auth-validate-multi-factors\";\n    Body: {\n      encryptedPayload: string;\n      multiFactors: VerifyMfaParams[];\n    };\n    Response: {\n      payload: {\n        credentialBundle?: string;\n      };\n      multiFactors: MfaFactor[];\n    };\n  },\n  {\n    Route: \"/v1/multi-owner-create\";\n    Body: {\n      members: {\n        evmSignerAddress: Address;\n      }[];\n    };\n    Response: {\n      result: {\n        orgId: string;\n        evmSignerAddress: Address;\n        members: {\n          evmSignerAddress: Address;\n        }[];\n      };\n    };\n  },\n  {\n    Route: \"/v1/multi-owner-prepare-add\";\n    Body: {\n      organizationId: string;\n      members: {\n        evmSignerAddress: Address;\n      }[];\n    };\n    Response: {\n      result: TurnkeyApiTypes[\"v1CreateUsersRequest\"];\n    };\n  },\n  {\n    Route: \"/v1/multi-owner-add\";\n    Body: {\n      stampedRequest: TSignedRequest;\n    };\n    Response: {\n      result: {\n        members: {\n          evmSignerAddress: Address;\n        }[];\n        updateRootQuorumRequest: TurnkeyApiTypes[\"v1UpdateRootQuorumRequest\"];\n      };\n    };\n  },\n  {\n    Route: \"/v1/multi-owner-update-root-quorum\";\n    Body: {\n      stampedRequest: TSignedRequest;\n    };\n    Response: {\n      result: TurnkeyApiTypes[\"v1UpdateRootQuorumResult\"];\n    };\n  },\n  {\n    Route: \"/v1/multi-owner-sign-raw-payload\";\n    Body: {\n      stampedRequest: TSignedRequest;\n    };\n    Response: {\n      result: {\n        signRawPayloadResult: TurnkeyApiTypes[\"v1SignRawPayloadResult\"];\n      };\n    };\n  },\n  {\n    Route: \"/v1/multi-owner-prepare-delete\";\n    Body: {\n      organizationId: string;\n      members: {\n        evmSignerAddress: Address;\n      }[];\n    };\n    Response: {\n      result: {\n        updateRootQuorumRequest: TurnkeyApiTypes[\"v1UpdateRootQuorumRequest\"];\n        deleteMembersRequest: TurnkeyApiTypes[\"v1DeleteUsersRequest\"];\n      };\n    };\n  },\n  {\n    Route: \"/v1/multi-owner-delete\";\n    Body: {\n      stampedRequest: TSignedRequest;\n    };\n    Response: {\n      result: {\n        deletedUserIds: string[];\n      };\n    };\n  },\n];\n\nexport type AuthenticatingEventMetadata = {\n  type:\n    | \"email\"\n    | \"passkey\"\n    | \"oauth\"\n    | \"otp\"\n    | \"otpVerify\"\n    | \"custom-jwt\"\n    | \"sms\";\n};\n\nexport type AlchemySignerClientEvents = {\n  connected(user: User): void;\n  newUserSignup(): void;\n  authenticating(data: AuthenticatingEventMetadata): void;\n  connectedEmail(user: User, bundle: string): void;\n  connectedPasskey(user: User): void;\n  connectedOauth(user: User, bundle: string): void;\n  connectedOtp(user: User, bundle: string): void;\n  connectedJwt(user: User, bundle: string): void;\n  disconnected(): void;\n};\n\nexport type AlchemySignerClientEvent = keyof AlchemySignerClientEvents;\n\nexport type GetWebAuthnAttestationResult = {\n  attestation: Awaited<ReturnType<typeof getWebAuthnAttestation>>;\n  challenge: ArrayBuffer | string;\n  authenticatorUserId: BufferSource;\n};\n\nexport type AuthLinkingPrompt = {\n  status: \"ACCOUNT_LINKING_CONFIRMATION_REQUIRED\";\n  idToken: string;\n  email: string;\n  providerName: string;\n  otpId: string;\n  orgId: string;\n};\n\nexport type IdTokenOnly = {\n  status: \"FETCHED_ID_TOKEN_ONLY\";\n  idToken: string;\n  providerName: string;\n};\n\nexport type OauthState = {\n  authProviderId: string;\n  isCustomProvider?: boolean;\n  requestKey: string;\n  turnkeyPublicKey: string;\n  expirationSeconds?: number;\n  redirectUrl?: string;\n  openerOrigin?: string;\n  fetchIdTokenOnly?: boolean;\n};\n\nexport type GetOauthProviderUrlArgs = {\n  oauthParams: OauthParams;\n  turnkeyPublicKey: string;\n  oauthCallbackUrl: string;\n  oauthConfig?: OauthConfig;\n  usesRelativeUrl?: boolean;\n};\n\nexport type MfaFactor = {\n  multiFactorId: string;\n  multiFactorType: string;\n};\n\ntype MultiFactorType = \"totp\";\n\nexport type AddMfaParams = {\n  multiFactorType: MultiFactorType;\n};\n\nexport type AddMfaResult = {\n  multiFactorType: MultiFactorType;\n  multiFactorId: string;\n  multiFactorTotpUrl: string;\n};\n\nexport type VerifyMfaParams = {\n  multiFactorId: string;\n  multiFactorCode: string;\n};\n\nexport type RemoveMfaParams = {\n  multiFactorIds: string[];\n};\n\nexport type ValidateMultiFactorsParams = {\n  encryptedPayload: string;\n  multiFactors: VerifyMfaParams[];\n};\n\nexport type MfaChallenge = {\n  multiFactorId: string;\n  multiFactorChallenge:\n    | {\n        code: string;\n      }\n    | Record<string, any>;\n};\n\nexport type SubmitOtpCodeResponse =\n  | { bundle: string; mfaRequired: false }\n  | { mfaRequired: true; encryptedPayload: string; multiFactors: MfaFactor[] };\n\nexport type AddOauthProviderParams = {\n  providerName: string;\n  oidcToken: string;\n};\n\nexport type AuthMethods = {\n  email?: string;\n  oauthProviders: OauthProviderInfo[];\n  passkeys: PasskeyInfo[];\n};\n\nexport type OauthProviderInfo = {\n  providerId: string;\n  issuer: string;\n  providerName?: string;\n  userDisplayName?: string;\n};\n\nexport type PasskeyInfo = {\n  authenticatorId: string;\n  name: string;\n  createdAt: number;\n};\n\nexport type experimental_CreateApiKeyParams = {\n  name: string;\n  publicKey: string;\n  expirationSec: number;\n};\n"]}

package/dist/esm/metrics.d.ts

@@ -7,6 +7,9 @@ export type SignerEventsSchema = [
         } | {
             authType: "oauth";
             provider: string;
+        } | {
+            authType: "custom-jwt";
+            provider?: string;
         };
     },
     {

package/dist/esm/metrics.js.map

@@ -1 +1 @@
-{"version":3,"file":"metrics.js","sourceRoot":"","sources":["../../src/metrics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAwBvC,MAAM,CAAC,MAAM,YAAY,GAAG,YAAY,CAAqB;IAC3D,OAAO,EAAE,qBAAqB;IAC9B,OAAO,EAAE,OAAO;CACjB,CAAC,CAAC","sourcesContent":["import { createLogger } from \"@account-kit/logging\";\nimport { VERSION } from \"./version.js\";\n\nexport type SignerEventsSchema = [\n  {\n    EventName: \"signer_authnticate\";\n    EventData:\n      | {\n          authType:\n            | \"email\"\n            | \"sms\"\n            | \"passkey_anon\"\n            | \"passkey_email\"\n            | \"otp\"\n            | \"oauthReturn\";\n          provider?: never;\n        }\n      | { authType: \"oauth\"; provider: string };\n  },\n  {\n    EventName: \"signer_sign_message\";\n    EventData: undefined;\n  },\n];\n\nexport const SignerLogger = createLogger<SignerEventsSchema>({\n  package: \"@account-kit/signer\",\n  version: VERSION,\n});\n"]}
+{"version":3,"file":"metrics.js","sourceRoot":"","sources":["../../src/metrics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAyBvC,MAAM,CAAC,MAAM,YAAY,GAAG,YAAY,CAAqB;IAC3D,OAAO,EAAE,qBAAqB;IAC9B,OAAO,EAAE,OAAO;CACjB,CAAC,CAAC","sourcesContent":["import { createLogger } from \"@account-kit/logging\";\nimport { VERSION } from \"./version.js\";\n\nexport type SignerEventsSchema = [\n  {\n    EventName: \"signer_authnticate\";\n    EventData:\n      | {\n          authType:\n            | \"email\"\n            | \"sms\"\n            | \"passkey_anon\"\n            | \"passkey_email\"\n            | \"otp\"\n            | \"oauthReturn\";\n          provider?: never;\n        }\n      | { authType: \"oauth\"; provider: string }\n      | { authType: \"custom-jwt\"; provider?: string };\n  },\n  {\n    EventName: \"signer_sign_message\";\n    EventData: undefined;\n  },\n];\n\nexport const SignerLogger = createLogger<SignerEventsSchema>({\n  package: \"@account-kit/signer\",\n  version: VERSION,\n});\n"]}

package/dist/esm/session/manager.js

@@ -66,6 +66,7 @@ export class SessionManager {
                 switch (existingSession.type) {
                     case "email":
                     case "oauth":
+                    case "custom-jwt":
                     case "otp": {
                         const connectedEventName = (() => {
                             switch (existingSession.type) {
@@ -75,6 +76,8 @@ export class SessionManager {
                                     return "connectedOauth";
                                 case "otp":
                                     return "connectedOtp";
+                                case "custom-jwt":
+                                    return "connectedJwt";
                             }
                         })();
                         const result = await this.client
@@ -219,6 +222,9 @@ export class SessionManager {
                     connectedOtp: (user, bundle) => {
                         this.setSessionWithUserAndBundle({ type: "otp", user, bundle });
                     },
+                    connectedJwt: (user, bundle) => {
+                        this.setSessionWithUserAndBundle({ type: "custom-jwt", user, bundle });
+                    },
                     disconnected: () => this.clearSession(),
                 };
                 for (const [event, listener] of Object.entries(listeners)) {

package/dist/esm/session/manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../../src/session/manager.ts"],"names":[],"mappings":"AAAA,OAAO,YAAY,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,iBAAiB,EACjB,OAAO,EACP,qBAAqB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,WAAW,EAA8B,MAAM,iBAAiB,CAAC;AAO1E,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAGzD,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,aAAa;AAE/D,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,wBAAwB,CAAC;IACxD,OAAO,EAAE,CAAC;SACP,IAAI,CAAC,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;SACxC,OAAO,CAAC,cAAc,CAAC;SACvB,EAAE,CAAC,CAAC,CAAC,MAAM,EAAW,CAAC;IAC1B,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,OAAO,CAAC,kBAAkB,CAAC;SAC3B,QAAQ,CACP,2FAA2F,CAC5F;IACH,MAAM,EAAE,CAAC,CAAC,MAAM,EAAoB;CACrC,CAAC,CAAC;AAoBH,MAAM,OAAO,cAAc;IAQzB,YAAY,MAA4B;QAPhC;;;;;WAAmB;QACnB;;;;;WAAyB;QACzB;;;;;WAAiD;QAChD;;;;;WAAyB;QAC1B;;;;;WAAa;QACb;;;;mBAA4C,IAAI;WAAC;QAgClD;;;;mBAAiB,KAAK,IAA0B,EAAE;gBACvD,MAAM,eAAe,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC1C,IAAI,eAAe,IAAI,IAAI,EAAE,CAAC;oBAC5B,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,QAAQ,eAAe,CAAC,IAAI,EAAE,CAAC;oBAC7B,KAAK,OAAO,CAAC;oBACb,KAAK,OAAO,CAAC;oBACb,KAAK,KAAK,CAAC,CAAC,CAAC;wBACX,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE;4BAC/B,QAAQ,eAAe,CAAC,IAAI,EAAE,CAAC;gCAC7B,KAAK,OAAO;oCACV,OAAO,gBAAgB,CAAC;gCAC1B,KAAK,OAAO;oCACV,OAAO,gBAAgB,CAAC;gCAC1B,KAAK,KAAK;oCACR,OAAO,cAAc,CAAC;4BAC1B,CAAC;wBACH,CAAC,CAAC,EAAE,CAAC;wBACL,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM;6BAC7B,sBAAsB,CAAC;4BACtB,MAAM,EAAE,eAAe,CAAC,MAAM;4BAC9B,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC,KAAK;4BACjC,kBAAkB,EAAE,eAAe,CAAC,IAAI;4BACxC,kBAAkB;4BAClB,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,OAAO;yBACtC,CAAC;6BACD,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;4BACX,OAAO,CAAC,IAAI,CAAC,kCAAkC,EAAE,CAAC,CAAC,CAAC;4BACpD,OAAO,IAAI,CAAC;wBACd,CAAC,CAAC,CAAC;wBAEL,IAAI,CAAC,MAAM,EAAE,CAAC;4BACZ,IAAI,CAAC,YAAY,EAAE,CAAC;4BACpB,OAAO,IAAI,CAAC;wBACd,CAAC;wBAED,OAAO,MAAM,CAAC;oBAChB,CAAC;oBACD,KAAK,SAAS,CAAC,CAAC,CAAC;wBACf,0DAA0D;wBAC1D,wDAAwD;wBACxD,gEAAgE;wBAChE,kBAAkB;wBAClB,OAAO,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;oBACjE,CAAC;oBACD;wBACE,WAAW,CACT,eAAe,EACf,yBAA0B,eAAuB,CAAC,IAAI,EAAE,CACzD,CAAC;gBACN,CAAC;YACH,CAAC;WAAC;QAEK;;;;mBAAe,GAAG,EAAE;gBACzB,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvC,YAAY,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,UAAU,YAAY,CAAC,CAAC;gBAExD,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;oBAC5B,YAAY,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC;WAAC;QAEK;;;;mBAAsB,CAAC,OAAyB,EAAE,EAAE;gBACzD,0FAA0F;gBAC1F,YAAY,CAAC,OAAO,CAClB,GAAG,IAAI,CAAC,UAAU,YAAY,EAC9B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CACxB,CAAC;YACJ,CAAC;WAAC;QAEK;;;;mBAAsB,GAA4B,EAAE;gBACzD,0FAA0F;gBAC1F,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,UAAU,YAAY,CAAC,CAAC;gBAExE,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAChC,CAAC;WAAC;QAEF;;;;mBAAK,CACH,KAAQ,EACR,QAAiC,EACjC,EAAE;gBACF,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,QAAe,CAAC,CAAC;gBAE7C,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,KAAK,EAAE,QAAe,CAAC,CAAC;YACxE,CAAC;WAAC;QAEM;;;;mBAAa,GAAmB,EAAE;gBACxC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC;gBAE9C,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED;;;;;;mBAMG;gBACH,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;oBAC1C,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;oBACzB,IAAI,CAAC,YAAY,EAAE,CAAC;oBACpB,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,IAAI,CAAC,gCAAgC,CAAC,OAAO,CAAC,CAAC;gBAE/C,OAAO,OAAO,CAAC;YACjB,CAAC;WAAC;QAEM;;;;mBAAa,CACnB,QAKmE,EACnE,EAAE;gBACF,MAAM,OAAO,GAAG;oBACd,GAAG,QAAQ;oBACX,gBAAgB,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,gBAAgB;iBACrD,CAAC;gBAEF,IAAI,CAAC,gCAAgC,CAAC,OAAO,CAAC,CAAC;gBAE/C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;YACnC,CAAC;WAAC;QAoBM;;;;mBAAyB,GAAG,EAAE;gBACpC,IAAI,CAAC,KAAK,CAAC,SAAS,CAClB,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,EACxB,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE;oBACvB,IAAI,OAAO,IAAI,IAAI,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;wBAC3C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;oBAC/C,CAAC;yBAAM,IAAI,OAAO,IAAI,IAAI,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;wBAClD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;oBACzC,CAAC;gBACH,CAAC,CACF,CAAC;gBAUF,MAAM,SAAS,GAAc;oBAC3B,SAAS,EAAE,SAAS;oBACpB,aAAa,EAAE,SAAS;oBACxB,cAAc,EAAE,SAAS;oBACzB,cAAc,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAC/B,IAAI,CAAC,2BAA2B,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;oBACnE,gBAAgB,EAAE,CAAC,IAAI,EAAE,EAAE;wBACzB,MAAM,eAAe,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;wBAC1C,IACE,eAAe,IAAI,IAAI;4BACvB,eAAe,CAAC,IAAI,KAAK,SAAS;4BAClC,eAAe,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAC3C,CAAC;4BACD,OAAO;wBACT,CAAC;wBAED,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC7C,CAAC;oBACD,cAAc,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAC/B,IAAI,CAAC,2BAA2B,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;oBACnE,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;wBAC7B,IAAI,CAAC,2BAA2B,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;oBAClE,CAAC;oBACD,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE;iBACxC,CAAC;gBAEF,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC1D,IAAI,QAAQ,EAAE,CAAC;wBACb,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,KAAiC,EAAE,QAAQ,CAAC,CAAC;oBAC9D,CAAC;gBACH,CAAC;gBAED,mEAAmE;gBACnE,8BAA8B;gBAC9B,2EAA2E;gBAC3E,IAAI,CAAC;oBACH,IACE,OAAO,MAAM,KAAK,WAAW;wBAC7B,OAAO,MAAM,CAAC,gBAAgB,KAAK,WAAW,EAC9C,CAAC;wBACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;4BACpC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC;4BACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;4BAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC;4BACjD,IACE,CAAC,UAAU,EAAE,gBAAgB,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE;gCAChD,UAAU,EAAE,IAAI,CAAC,KAAK,KAAK,UAAU,EAAE,IAAI,CAAC,KAAK;gCACjD,UAAU,EAAE,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,IAAI,CAAC,MAAM,EACnD,CAAC;gCACD,sCAAsC;gCACtC,IAAI,CAAC,UAAU,EAAE,CAAC;4BACpB,CAAC;wBACH,CAAC,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,CAAC,CAAC,CAAC;gBACxD,CAAC;YACH,CAAC;WAAC;QAEM;;;;mBAAmC,CAAC,OAAgB,EAAE,EAAE;gBAC9D,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;oBAC5B,YAAY,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;gBACxC,CAAC;gBAED,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAClC,GAAG,EAAE;oBACH,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;oBACzB,IAAI,CAAC,YAAY,EAAE,CAAC;gBACtB,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CACrE,CAAC;YACJ,CAAC;WAAC;QAEM;;;;mBAA8B,CAAC,EACrC,IAAI,EACJ,IAAI,EACJ,MAAM,GAKP,EAAE,EAAE;gBACH,MAAM,eAAe,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC1C,IACE,eAAe,IAAI,IAAI;oBACvB,eAAe,CAAC,IAAI,KAAK,IAAI;oBAC7B,eAAe,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;oBAC3C,+DAA+D;oBAC/D,kCAAkC;oBAClC,eAAe,CAAC,MAAM,KAAK,MAAM,EACjC,CAAC;oBACD,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAC1C,CAAC;WAAC;QAzSA,MAAM,EACJ,UAAU,EACV,OAAO,EAAE,WAAW,EACpB,gBAAgB,EAChB,MAAM,GACP,GAAG,0BAA0B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,MAAM,OAAO,GACX,OAAO,WAAW,KAAK,QAAQ;YAC7B,CAAC,CAAC,WAAW,KAAK,cAAc;gBAC9B,CAAC,CAAC,YAAY;gBACd,CAAC,CAAC,cAAc;YAClB,CAAC,CAAC,WAAW,CAAC;QAClB,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,EAAwB,CAAC;QAE7D,IAAI,CAAC,KAAK,GAAG,WAAW,CACtB,qBAAqB,CACnB,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE;YAC5B,IAAI,EAAE,IAAI,CAAC,UAAU;YACrB,OAAO,EAAE,iBAAiB,CAAe,GAAG,EAAE,CAAC,OAAO,CAAC;SACxD,CAAC,CACH,CACF,CAAC;QAEF,IAAI,CAAC,sBAAsB,EAAE,CAAC;IAChC,CAAC;IAyIM,UAAU;QACf,IAAI,CAAC,cAAc,EAAE;aAClB,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YACb,4FAA4F;YAC5F,IAAI,IAAI;gBAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,UAAU,EAAG,CAAC,CAAC;;gBAC7D,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC9C,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,eAAe;QACrB,OAAO;YACL,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;CAsHF","sourcesContent":["import EventEmitter from \"eventemitter3\";\nimport { z } from \"zod\";\nimport {\n  createJSONStorage,\n  persist,\n  subscribeWithSelector,\n} from \"zustand/middleware\";\nimport { createStore, type Mutate, type StoreApi } from \"zustand/vanilla\";\nimport type { BaseSignerClient } from \"../client/base\";\nimport type {\n  AlchemySignerClientEvent,\n  AlchemySignerClientEvents,\n  User,\n} from \"../client/types\";\nimport { assertNever } from \"../utils/typeAssertions.js\";\nimport type { Session, SessionManagerEvents } from \"./types\";\n\nexport const DEFAULT_SESSION_MS = 15 * 60 * 1000; // 15 minutes\n\nexport const SessionManagerParamsSchema = z.object({\n  sessionKey: z.string().default(\"alchemy-signer-session\"),\n  storage: z\n    .enum([\"localStorage\", \"sessionStorage\"])\n    .default(\"localStorage\")\n    .or(z.custom<Storage>()),\n  expirationTimeMs: z\n    .number()\n    .default(DEFAULT_SESSION_MS)\n    .describe(\n      \"The time in milliseconds that a session should last before expiring [default: 15 minutes]\",\n    ),\n  client: z.custom<BaseSignerClient>(),\n});\n\nexport type SessionManagerParams = z.input<typeof SessionManagerParamsSchema>;\n\ntype SessionState = {\n  session: Session | null;\n};\n\ntype Store = Mutate<\n  StoreApi<SessionState>,\n  [[\"zustand/subscribeWithSelector\", never], [\"zustand/persist\", SessionState]]\n>;\n\ntype TemporarySession = {\n  orgId: string;\n  isNewUser?: boolean;\n  encryptedPayload?: string;\n  mfaFactorId?: string;\n};\n\nexport class SessionManager {\n  private sessionKey: string;\n  private client: BaseSignerClient;\n  private eventEmitter: EventEmitter<SessionManagerEvents>;\n  readonly expirationTimeMs: number;\n  private store: Store;\n  private clearSessionHandle: NodeJS.Timeout | null = null;\n\n  constructor(params: SessionManagerParams) {\n    const {\n      sessionKey,\n      storage: storageType,\n      expirationTimeMs,\n      client,\n    } = SessionManagerParamsSchema.parse(params);\n    this.sessionKey = sessionKey;\n    const storage =\n      typeof storageType === \"string\"\n        ? storageType === \"localStorage\"\n          ? localStorage\n          : sessionStorage\n        : storageType;\n    this.expirationTimeMs = expirationTimeMs;\n    this.client = client;\n    this.eventEmitter = new EventEmitter<SessionManagerEvents>();\n\n    this.store = createStore(\n      subscribeWithSelector(\n        persist(this.getInitialState, {\n          name: this.sessionKey,\n          storage: createJSONStorage<SessionState>(() => storage),\n        }),\n      ),\n    );\n\n    this.registerEventListeners();\n  }\n\n  public getSessionUser = async (): Promise<User | null> => {\n    const existingSession = this.getSession();\n    if (existingSession == null) {\n      return null;\n    }\n\n    switch (existingSession.type) {\n      case \"email\":\n      case \"oauth\":\n      case \"otp\": {\n        const connectedEventName = (() => {\n          switch (existingSession.type) {\n            case \"email\":\n              return \"connectedEmail\";\n            case \"oauth\":\n              return \"connectedOauth\";\n            case \"otp\":\n              return \"connectedOtp\";\n          }\n        })();\n        const result = await this.client\n          .completeAuthWithBundle({\n            bundle: existingSession.bundle,\n            orgId: existingSession.user.orgId,\n            authenticatingType: existingSession.type,\n            connectedEventName,\n            idToken: existingSession.user.idToken,\n          })\n          .catch((e) => {\n            console.warn(\"Failed to load user from session\", e);\n            return null;\n          });\n\n        if (!result) {\n          this.clearSession();\n          return null;\n        }\n\n        return result;\n      }\n      case \"passkey\": {\n        // we don't need to do much here if we already have a user\n        // this will setup the client with the user context, but\n        // requests still have to be signed by the user on first request\n        // so this is fine\n        return this.client.lookupUserWithPasskey(existingSession.user);\n      }\n      default:\n        assertNever(\n          existingSession,\n          `Unknown session type: ${(existingSession as any).type}`,\n        );\n    }\n  };\n\n  public clearSession = () => {\n    this.store.setState({ session: null });\n    localStorage.removeItem(`${this.sessionKey}:temporary`);\n\n    if (this.clearSessionHandle) {\n      clearTimeout(this.clearSessionHandle);\n    }\n  };\n\n  public setTemporarySession = (session: TemporarySession) => {\n    // temporary session must be placed in localStorage so that it can be accessed across tabs\n    localStorage.setItem(\n      `${this.sessionKey}:temporary`,\n      JSON.stringify(session),\n    );\n  };\n\n  public getTemporarySession = (): TemporarySession | null => {\n    // temporary session must be placed in localStorage so that it can be accessed across tabs\n    const sessionStr = localStorage.getItem(`${this.sessionKey}:temporary`);\n\n    if (!sessionStr) {\n      return null;\n    }\n\n    return JSON.parse(sessionStr);\n  };\n\n  on = <E extends keyof SessionManagerEvents>(\n    event: E,\n    listener: SessionManagerEvents[E],\n  ) => {\n    this.eventEmitter.on(event, listener as any);\n\n    return () => this.eventEmitter.removeListener(event, listener as any);\n  };\n\n  private getSession = (): Session | null => {\n    const session = this.store.getState().session;\n\n    if (!session) {\n      return null;\n    }\n\n    /**\n     * TODO: this isn't really good enough\n     * A user's session could be about to expire and we would still return it\n     *\n     * Instead we should check if a session is about to expire and refresh it\n     * We should revisit this later\n     */\n    if (session.expirationDateMs < Date.now()) {\n      this.client.disconnect();\n      this.clearSession();\n      return null;\n    }\n\n    this.registerSessionExpirationHandler(session);\n\n    return session;\n  };\n\n  private setSession = (\n    session_:\n      | Omit<\n          Extract<Session, { type: \"email\" | \"oauth\" | \"otp\" }>,\n          \"expirationDateMs\"\n        >\n      | Omit<Extract<Session, { type: \"passkey\" }>, \"expirationDateMs\">,\n  ) => {\n    const session = {\n      ...session_,\n      expirationDateMs: Date.now() + this.expirationTimeMs,\n    };\n\n    this.registerSessionExpirationHandler(session);\n\n    this.store.setState({ session });\n  };\n\n  public initialize() {\n    this.getSessionUser()\n      .then((user) => {\n        // once we complete auth we can update the state of the session to connected or disconnected\n        if (user) this.eventEmitter.emit(\"connected\", this.getSession()!);\n        else this.eventEmitter.emit(\"disconnected\");\n      })\n      .finally(() => {\n        this.eventEmitter.emit(\"initialized\");\n      });\n  }\n\n  private getInitialState(): SessionState {\n    return {\n      session: null,\n    };\n  }\n\n  private registerEventListeners = () => {\n    this.store.subscribe(\n      ({ session }) => session,\n      (session, prevSession) => {\n        if (session != null && prevSession == null) {\n          this.eventEmitter.emit(\"connected\", session);\n        } else if (session == null && prevSession != null) {\n          this.eventEmitter.emit(\"disconnected\");\n        }\n      },\n    );\n\n    // Helper type to ensure that a listener is either defined or explicitly\n    // omitted for every event type.\n    type Listeners = {\n      [K in keyof AlchemySignerClientEvents]:\n        | AlchemySignerClientEvents[K]\n        | undefined;\n    };\n\n    const listeners: Listeners = {\n      connected: undefined,\n      newUserSignup: undefined,\n      authenticating: undefined,\n      connectedEmail: (user, bundle) =>\n        this.setSessionWithUserAndBundle({ type: \"email\", user, bundle }),\n      connectedPasskey: (user) => {\n        const existingSession = this.getSession();\n        if (\n          existingSession != null &&\n          existingSession.type === \"passkey\" &&\n          existingSession.user.userId === user.userId\n        ) {\n          return;\n        }\n\n        this.setSession({ type: \"passkey\", user });\n      },\n      connectedOauth: (user, bundle) =>\n        this.setSessionWithUserAndBundle({ type: \"oauth\", user, bundle }),\n      connectedOtp: (user, bundle) => {\n        this.setSessionWithUserAndBundle({ type: \"otp\", user, bundle });\n      },\n      disconnected: () => this.clearSession(),\n    };\n\n    for (const [event, listener] of Object.entries(listeners)) {\n      if (listener) {\n        this.client.on(event as AlchemySignerClientEvent, listener);\n      }\n    }\n\n    // sync local state if persisted state has changed from another tab\n    // only do this in the browser\n    // Add a try catch to prevent potential crashes in non-browser environments\n    try {\n      if (\n        typeof window !== \"undefined\" &&\n        typeof window.addEventListener !== \"undefined\"\n      ) {\n        window.addEventListener(\"focus\", () => {\n          const oldSession = this.store.getState().session;\n          this.store.persist.rehydrate();\n          const newSession = this.store.getState().session;\n          if (\n            (oldSession?.expirationDateMs ?? 0) < Date.now() ||\n            oldSession?.user.orgId !== newSession?.user.orgId ||\n            oldSession?.user.userId !== newSession?.user.userId\n          ) {\n            // Initialize if the user has changed.\n            this.initialize();\n          }\n        });\n      }\n    } catch (e) {\n      console.error(\"Error registering event listeners\", e);\n    }\n  };\n\n  private registerSessionExpirationHandler = (session: Session) => {\n    if (this.clearSessionHandle) {\n      clearTimeout(this.clearSessionHandle);\n    }\n\n    this.clearSessionHandle = setTimeout(\n      () => {\n        this.client.disconnect();\n        this.clearSession();\n      },\n      Math.min(session.expirationDateMs - Date.now(), Math.pow(2, 31) - 1),\n    );\n  };\n\n  private setSessionWithUserAndBundle = ({\n    type,\n    user,\n    bundle,\n  }: {\n    type: \"email\" | \"oauth\" | \"otp\";\n    user: User;\n    bundle: string;\n  }) => {\n    const existingSession = this.getSession();\n    if (\n      existingSession != null &&\n      existingSession.type === type &&\n      existingSession.user.userId === user.userId &&\n      // if the bundle is different, then we've refreshed the session\n      // so we need to reset the session\n      existingSession.bundle === bundle\n    ) {\n      return;\n    }\n\n    this.setSession({ type, user, bundle });\n  };\n}\n"]}
+{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../../src/session/manager.ts"],"names":[],"mappings":"AAAA,OAAO,YAAY,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,iBAAiB,EACjB,OAAO,EACP,qBAAqB,GACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,WAAW,EAA8B,MAAM,iBAAiB,CAAC;AAO1E,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAGzD,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,aAAa;AAE/D,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,wBAAwB,CAAC;IACxD,OAAO,EAAE,CAAC;SACP,IAAI,CAAC,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;SACxC,OAAO,CAAC,cAAc,CAAC;SACvB,EAAE,CAAC,CAAC,CAAC,MAAM,EAAW,CAAC;IAC1B,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,OAAO,CAAC,kBAAkB,CAAC;SAC3B,QAAQ,CACP,2FAA2F,CAC5F;IACH,MAAM,EAAE,CAAC,CAAC,MAAM,EAAoB;CACrC,CAAC,CAAC;AAoBH,MAAM,OAAO,cAAc;IAQzB,YAAY,MAA4B;QAPhC;;;;;WAAmB;QACnB;;;;;WAAyB;QACzB;;;;;WAAiD;QAChD;;;;;WAAyB;QAC1B;;;;;WAAa;QACb;;;;mBAA4C,IAAI;WAAC;QAgClD;;;;mBAAiB,KAAK,IAA0B,EAAE;gBACvD,MAAM,eAAe,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC1C,IAAI,eAAe,IAAI,IAAI,EAAE,CAAC;oBAC5B,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,QAAQ,eAAe,CAAC,IAAI,EAAE,CAAC;oBAC7B,KAAK,OAAO,CAAC;oBACb,KAAK,OAAO,CAAC;oBACb,KAAK,YAAY,CAAC;oBAClB,KAAK,KAAK,CAAC,CAAC,CAAC;wBACX,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE;4BAC/B,QAAQ,eAAe,CAAC,IAAI,EAAE,CAAC;gCAC7B,KAAK,OAAO;oCACV,OAAO,gBAAgB,CAAC;gCAC1B,KAAK,OAAO;oCACV,OAAO,gBAAgB,CAAC;gCAC1B,KAAK,KAAK;oCACR,OAAO,cAAc,CAAC;gCACxB,KAAK,YAAY;oCACf,OAAO,cAAc,CAAC;4BAC1B,CAAC;wBACH,CAAC,CAAC,EAAE,CAAC;wBACL,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM;6BAC7B,sBAAsB,CAAC;4BACtB,MAAM,EAAE,eAAe,CAAC,MAAM;4BAC9B,KAAK,EAAE,eAAe,CAAC,IAAI,CAAC,KAAK;4BACjC,kBAAkB,EAAE,eAAe,CAAC,IAAI;4BACxC,kBAAkB;4BAClB,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,OAAO;yBACtC,CAAC;6BACD,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;4BACX,OAAO,CAAC,IAAI,CAAC,kCAAkC,EAAE,CAAC,CAAC,CAAC;4BACpD,OAAO,IAAI,CAAC;wBACd,CAAC,CAAC,CAAC;wBAEL,IAAI,CAAC,MAAM,EAAE,CAAC;4BACZ,IAAI,CAAC,YAAY,EAAE,CAAC;4BACpB,OAAO,IAAI,CAAC;wBACd,CAAC;wBAED,OAAO,MAAM,CAAC;oBAChB,CAAC;oBACD,KAAK,SAAS,CAAC,CAAC,CAAC;wBACf,0DAA0D;wBAC1D,wDAAwD;wBACxD,gEAAgE;wBAChE,kBAAkB;wBAClB,OAAO,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;oBACjE,CAAC;oBACD;wBACE,WAAW,CACT,eAAe,EACf,yBAA0B,eAAuB,CAAC,IAAI,EAAE,CACzD,CAAC;gBACN,CAAC;YACH,CAAC;WAAC;QAEK;;;;mBAAe,GAAG,EAAE;gBACzB,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvC,YAAY,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,UAAU,YAAY,CAAC,CAAC;gBAExD,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;oBAC5B,YAAY,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC;WAAC;QAEK;;;;mBAAsB,CAAC,OAAyB,EAAE,EAAE;gBACzD,0FAA0F;gBAC1F,YAAY,CAAC,OAAO,CAClB,GAAG,IAAI,CAAC,UAAU,YAAY,EAC9B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CACxB,CAAC;YACJ,CAAC;WAAC;QAEK;;;;mBAAsB,GAA4B,EAAE;gBACzD,0FAA0F;gBAC1F,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,UAAU,YAAY,CAAC,CAAC;gBAExE,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAChC,CAAC;WAAC;QAEF;;;;mBAAK,CACH,KAAQ,EACR,QAAiC,EACjC,EAAE;gBACF,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,QAAe,CAAC,CAAC;gBAE7C,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,KAAK,EAAE,QAAe,CAAC,CAAC;YACxE,CAAC;WAAC;QAEM;;;;mBAAa,GAAmB,EAAE;gBACxC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC;gBAE9C,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED;;;;;;mBAMG;gBACH,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;oBAC1C,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;oBACzB,IAAI,CAAC,YAAY,EAAE,CAAC;oBACpB,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,IAAI,CAAC,gCAAgC,CAAC,OAAO,CAAC,CAAC;gBAE/C,OAAO,OAAO,CAAC;YACjB,CAAC;WAAC;QAEM;;;;mBAAa,CACnB,QAKmE,EACnE,EAAE;gBACF,MAAM,OAAO,GAAG;oBACd,GAAG,QAAQ;oBACX,gBAAgB,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,gBAAgB;iBACrD,CAAC;gBAEF,IAAI,CAAC,gCAAgC,CAAC,OAAO,CAAC,CAAC;gBAE/C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;YACnC,CAAC;WAAC;QAoBM;;;;mBAAyB,GAAG,EAAE;gBACpC,IAAI,CAAC,KAAK,CAAC,SAAS,CAClB,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,EACxB,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE;oBACvB,IAAI,OAAO,IAAI,IAAI,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;wBAC3C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;oBAC/C,CAAC;yBAAM,IAAI,OAAO,IAAI,IAAI,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;wBAClD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;oBACzC,CAAC;gBACH,CAAC,CACF,CAAC;gBAUF,MAAM,SAAS,GAAc;oBAC3B,SAAS,EAAE,SAAS;oBACpB,aAAa,EAAE,SAAS;oBACxB,cAAc,EAAE,SAAS;oBACzB,cAAc,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAC/B,IAAI,CAAC,2BAA2B,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;oBACnE,gBAAgB,EAAE,CAAC,IAAI,EAAE,EAAE;wBACzB,MAAM,eAAe,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;wBAC1C,IACE,eAAe,IAAI,IAAI;4BACvB,eAAe,CAAC,IAAI,KAAK,SAAS;4BAClC,eAAe,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAC3C,CAAC;4BACD,OAAO;wBACT,CAAC;wBAED,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC7C,CAAC;oBACD,cAAc,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAC/B,IAAI,CAAC,2BAA2B,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;oBACnE,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;wBAC7B,IAAI,CAAC,2BAA2B,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;oBAClE,CAAC;oBACD,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;wBAC7B,IAAI,CAAC,2BAA2B,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;oBACzE,CAAC;oBACD,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE;iBACxC,CAAC;gBAEF,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC1D,IAAI,QAAQ,EAAE,CAAC;wBACb,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,KAAiC,EAAE,QAAQ,CAAC,CAAC;oBAC9D,CAAC;gBACH,CAAC;gBAED,mEAAmE;gBACnE,8BAA8B;gBAC9B,2EAA2E;gBAC3E,IAAI,CAAC;oBACH,IACE,OAAO,MAAM,KAAK,WAAW;wBAC7B,OAAO,MAAM,CAAC,gBAAgB,KAAK,WAAW,EAC9C,CAAC;wBACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;4BACpC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC;4BACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;4BAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC;4BACjD,IACE,CAAC,UAAU,EAAE,gBAAgB,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE;gCAChD,UAAU,EAAE,IAAI,CAAC,KAAK,KAAK,UAAU,EAAE,IAAI,CAAC,KAAK;gCACjD,UAAU,EAAE,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,IAAI,CAAC,MAAM,EACnD,CAAC;gCACD,sCAAsC;gCACtC,IAAI,CAAC,UAAU,EAAE,CAAC;4BACpB,CAAC;wBACH,CAAC,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,CAAC,CAAC,CAAC;gBACxD,CAAC;YACH,CAAC;WAAC;QAEM;;;;mBAAmC,CAAC,OAAgB,EAAE,EAAE;gBAC9D,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;oBAC5B,YAAY,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;gBACxC,CAAC;gBAED,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAClC,GAAG,EAAE;oBACH,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;oBACzB,IAAI,CAAC,YAAY,EAAE,CAAC;gBACtB,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CACrE,CAAC;YACJ,CAAC;WAAC;QAEM;;;;mBAA8B,CAAC,EACrC,IAAI,EACJ,IAAI,EACJ,MAAM,GAKP,EAAE,EAAE;gBACH,MAAM,eAAe,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC1C,IACE,eAAe,IAAI,IAAI;oBACvB,eAAe,CAAC,IAAI,KAAK,IAAI;oBAC7B,eAAe,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;oBAC3C,+DAA+D;oBAC/D,kCAAkC;oBAClC,eAAe,CAAC,MAAM,KAAK,MAAM,EACjC,CAAC;oBACD,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAC1C,CAAC;WAAC;QA/SA,MAAM,EACJ,UAAU,EACV,OAAO,EAAE,WAAW,EACpB,gBAAgB,EAChB,MAAM,GACP,GAAG,0BAA0B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,MAAM,OAAO,GACX,OAAO,WAAW,KAAK,QAAQ;YAC7B,CAAC,CAAC,WAAW,KAAK,cAAc;gBAC9B,CAAC,CAAC,YAAY;gBACd,CAAC,CAAC,cAAc;YAClB,CAAC,CAAC,WAAW,CAAC;QAClB,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,YAAY,GAAG,IAAI,YAAY,EAAwB,CAAC;QAE7D,IAAI,CAAC,KAAK,GAAG,WAAW,CACtB,qBAAqB,CACnB,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE;YAC5B,IAAI,EAAE,IAAI,CAAC,UAAU;YACrB,OAAO,EAAE,iBAAiB,CAAe,GAAG,EAAE,CAAC,OAAO,CAAC;SACxD,CAAC,CACH,CACF,CAAC;QAEF,IAAI,CAAC,sBAAsB,EAAE,CAAC;IAChC,CAAC;IA4IM,UAAU;QACf,IAAI,CAAC,cAAc,EAAE;aAClB,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YACb,4FAA4F;YAC5F,IAAI,IAAI;gBAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,UAAU,EAAG,CAAC,CAAC;;gBAC7D,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC9C,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,eAAe;QACrB,OAAO;YACL,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;CAyHF","sourcesContent":["import EventEmitter from \"eventemitter3\";\nimport { z } from \"zod\";\nimport {\n  createJSONStorage,\n  persist,\n  subscribeWithSelector,\n} from \"zustand/middleware\";\nimport { createStore, type Mutate, type StoreApi } from \"zustand/vanilla\";\nimport type { BaseSignerClient } from \"../client/base\";\nimport type {\n  AlchemySignerClientEvent,\n  AlchemySignerClientEvents,\n  User,\n} from \"../client/types\";\nimport { assertNever } from \"../utils/typeAssertions.js\";\nimport type { Session, SessionManagerEvents } from \"./types\";\n\nexport const DEFAULT_SESSION_MS = 15 * 60 * 1000; // 15 minutes\n\nexport const SessionManagerParamsSchema = z.object({\n  sessionKey: z.string().default(\"alchemy-signer-session\"),\n  storage: z\n    .enum([\"localStorage\", \"sessionStorage\"])\n    .default(\"localStorage\")\n    .or(z.custom<Storage>()),\n  expirationTimeMs: z\n    .number()\n    .default(DEFAULT_SESSION_MS)\n    .describe(\n      \"The time in milliseconds that a session should last before expiring [default: 15 minutes]\",\n    ),\n  client: z.custom<BaseSignerClient>(),\n});\n\nexport type SessionManagerParams = z.input<typeof SessionManagerParamsSchema>;\n\ntype SessionState = {\n  session: Session | null;\n};\n\ntype Store = Mutate<\n  StoreApi<SessionState>,\n  [[\"zustand/subscribeWithSelector\", never], [\"zustand/persist\", SessionState]]\n>;\n\ntype TemporarySession = {\n  orgId: string;\n  isNewUser?: boolean;\n  encryptedPayload?: string;\n  mfaFactorId?: string;\n};\n\nexport class SessionManager {\n  private sessionKey: string;\n  private client: BaseSignerClient;\n  private eventEmitter: EventEmitter<SessionManagerEvents>;\n  readonly expirationTimeMs: number;\n  private store: Store;\n  private clearSessionHandle: NodeJS.Timeout | null = null;\n\n  constructor(params: SessionManagerParams) {\n    const {\n      sessionKey,\n      storage: storageType,\n      expirationTimeMs,\n      client,\n    } = SessionManagerParamsSchema.parse(params);\n    this.sessionKey = sessionKey;\n    const storage =\n      typeof storageType === \"string\"\n        ? storageType === \"localStorage\"\n          ? localStorage\n          : sessionStorage\n        : storageType;\n    this.expirationTimeMs = expirationTimeMs;\n    this.client = client;\n    this.eventEmitter = new EventEmitter<SessionManagerEvents>();\n\n    this.store = createStore(\n      subscribeWithSelector(\n        persist(this.getInitialState, {\n          name: this.sessionKey,\n          storage: createJSONStorage<SessionState>(() => storage),\n        }),\n      ),\n    );\n\n    this.registerEventListeners();\n  }\n\n  public getSessionUser = async (): Promise<User | null> => {\n    const existingSession = this.getSession();\n    if (existingSession == null) {\n      return null;\n    }\n\n    switch (existingSession.type) {\n      case \"email\":\n      case \"oauth\":\n      case \"custom-jwt\":\n      case \"otp\": {\n        const connectedEventName = (() => {\n          switch (existingSession.type) {\n            case \"email\":\n              return \"connectedEmail\";\n            case \"oauth\":\n              return \"connectedOauth\";\n            case \"otp\":\n              return \"connectedOtp\";\n            case \"custom-jwt\":\n              return \"connectedJwt\";\n          }\n        })();\n        const result = await this.client\n          .completeAuthWithBundle({\n            bundle: existingSession.bundle,\n            orgId: existingSession.user.orgId,\n            authenticatingType: existingSession.type,\n            connectedEventName,\n            idToken: existingSession.user.idToken,\n          })\n          .catch((e) => {\n            console.warn(\"Failed to load user from session\", e);\n            return null;\n          });\n\n        if (!result) {\n          this.clearSession();\n          return null;\n        }\n\n        return result;\n      }\n      case \"passkey\": {\n        // we don't need to do much here if we already have a user\n        // this will setup the client with the user context, but\n        // requests still have to be signed by the user on first request\n        // so this is fine\n        return this.client.lookupUserWithPasskey(existingSession.user);\n      }\n      default:\n        assertNever(\n          existingSession,\n          `Unknown session type: ${(existingSession as any).type}`,\n        );\n    }\n  };\n\n  public clearSession = () => {\n    this.store.setState({ session: null });\n    localStorage.removeItem(`${this.sessionKey}:temporary`);\n\n    if (this.clearSessionHandle) {\n      clearTimeout(this.clearSessionHandle);\n    }\n  };\n\n  public setTemporarySession = (session: TemporarySession) => {\n    // temporary session must be placed in localStorage so that it can be accessed across tabs\n    localStorage.setItem(\n      `${this.sessionKey}:temporary`,\n      JSON.stringify(session),\n    );\n  };\n\n  public getTemporarySession = (): TemporarySession | null => {\n    // temporary session must be placed in localStorage so that it can be accessed across tabs\n    const sessionStr = localStorage.getItem(`${this.sessionKey}:temporary`);\n\n    if (!sessionStr) {\n      return null;\n    }\n\n    return JSON.parse(sessionStr);\n  };\n\n  on = <E extends keyof SessionManagerEvents>(\n    event: E,\n    listener: SessionManagerEvents[E],\n  ) => {\n    this.eventEmitter.on(event, listener as any);\n\n    return () => this.eventEmitter.removeListener(event, listener as any);\n  };\n\n  private getSession = (): Session | null => {\n    const session = this.store.getState().session;\n\n    if (!session) {\n      return null;\n    }\n\n    /**\n     * TODO: this isn't really good enough\n     * A user's session could be about to expire and we would still return it\n     *\n     * Instead we should check if a session is about to expire and refresh it\n     * We should revisit this later\n     */\n    if (session.expirationDateMs < Date.now()) {\n      this.client.disconnect();\n      this.clearSession();\n      return null;\n    }\n\n    this.registerSessionExpirationHandler(session);\n\n    return session;\n  };\n\n  private setSession = (\n    session_:\n      | Omit<\n          Extract<Session, { type: \"email\" | \"oauth\" | \"otp\" | \"custom-jwt\" }>,\n          \"expirationDateMs\"\n        >\n      | Omit<Extract<Session, { type: \"passkey\" }>, \"expirationDateMs\">,\n  ) => {\n    const session = {\n      ...session_,\n      expirationDateMs: Date.now() + this.expirationTimeMs,\n    };\n\n    this.registerSessionExpirationHandler(session);\n\n    this.store.setState({ session });\n  };\n\n  public initialize() {\n    this.getSessionUser()\n      .then((user) => {\n        // once we complete auth we can update the state of the session to connected or disconnected\n        if (user) this.eventEmitter.emit(\"connected\", this.getSession()!);\n        else this.eventEmitter.emit(\"disconnected\");\n      })\n      .finally(() => {\n        this.eventEmitter.emit(\"initialized\");\n      });\n  }\n\n  private getInitialState(): SessionState {\n    return {\n      session: null,\n    };\n  }\n\n  private registerEventListeners = () => {\n    this.store.subscribe(\n      ({ session }) => session,\n      (session, prevSession) => {\n        if (session != null && prevSession == null) {\n          this.eventEmitter.emit(\"connected\", session);\n        } else if (session == null && prevSession != null) {\n          this.eventEmitter.emit(\"disconnected\");\n        }\n      },\n    );\n\n    // Helper type to ensure that a listener is either defined or explicitly\n    // omitted for every event type.\n    type Listeners = {\n      [K in keyof AlchemySignerClientEvents]:\n        | AlchemySignerClientEvents[K]\n        | undefined;\n    };\n\n    const listeners: Listeners = {\n      connected: undefined,\n      newUserSignup: undefined,\n      authenticating: undefined,\n      connectedEmail: (user, bundle) =>\n        this.setSessionWithUserAndBundle({ type: \"email\", user, bundle }),\n      connectedPasskey: (user) => {\n        const existingSession = this.getSession();\n        if (\n          existingSession != null &&\n          existingSession.type === \"passkey\" &&\n          existingSession.user.userId === user.userId\n        ) {\n          return;\n        }\n\n        this.setSession({ type: \"passkey\", user });\n      },\n      connectedOauth: (user, bundle) =>\n        this.setSessionWithUserAndBundle({ type: \"oauth\", user, bundle }),\n      connectedOtp: (user, bundle) => {\n        this.setSessionWithUserAndBundle({ type: \"otp\", user, bundle });\n      },\n      connectedJwt: (user, bundle) => {\n        this.setSessionWithUserAndBundle({ type: \"custom-jwt\", user, bundle });\n      },\n      disconnected: () => this.clearSession(),\n    };\n\n    for (const [event, listener] of Object.entries(listeners)) {\n      if (listener) {\n        this.client.on(event as AlchemySignerClientEvent, listener);\n      }\n    }\n\n    // sync local state if persisted state has changed from another tab\n    // only do this in the browser\n    // Add a try catch to prevent potential crashes in non-browser environments\n    try {\n      if (\n        typeof window !== \"undefined\" &&\n        typeof window.addEventListener !== \"undefined\"\n      ) {\n        window.addEventListener(\"focus\", () => {\n          const oldSession = this.store.getState().session;\n          this.store.persist.rehydrate();\n          const newSession = this.store.getState().session;\n          if (\n            (oldSession?.expirationDateMs ?? 0) < Date.now() ||\n            oldSession?.user.orgId !== newSession?.user.orgId ||\n            oldSession?.user.userId !== newSession?.user.userId\n          ) {\n            // Initialize if the user has changed.\n            this.initialize();\n          }\n        });\n      }\n    } catch (e) {\n      console.error(\"Error registering event listeners\", e);\n    }\n  };\n\n  private registerSessionExpirationHandler = (session: Session) => {\n    if (this.clearSessionHandle) {\n      clearTimeout(this.clearSessionHandle);\n    }\n\n    this.clearSessionHandle = setTimeout(\n      () => {\n        this.client.disconnect();\n        this.clearSession();\n      },\n      Math.min(session.expirationDateMs - Date.now(), Math.pow(2, 31) - 1),\n    );\n  };\n\n  private setSessionWithUserAndBundle = ({\n    type,\n    user,\n    bundle,\n  }: {\n    type: \"email\" | \"oauth\" | \"otp\" | \"custom-jwt\";\n    user: User;\n    bundle: string;\n  }) => {\n    const existingSession = this.getSession();\n    if (\n      existingSession != null &&\n      existingSession.type === type &&\n      existingSession.user.userId === user.userId &&\n      // if the bundle is different, then we've refreshed the session\n      // so we need to reset the session\n      existingSession.bundle === bundle\n    ) {\n      return;\n    }\n\n    this.setSession({ type, user, bundle });\n  };\n}\n"]}

package/dist/esm/session/types.d.ts

@@ -1,6 +1,6 @@
 import type { User } from "../client/types";
 export type Session = {
-    type: "email" | "oauth" | "otp";
+    type: "email" | "oauth" | "otp" | "custom-jwt";
     bundle: string;
     expirationDateMs: number;
     user: User;

package/dist/esm/session/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/session/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { User } from \"../client/types\";\n\nexport type Session =\n  | {\n      type: \"email\" | \"oauth\" | \"otp\";\n      bundle: string;\n      expirationDateMs: number;\n      user: User;\n    }\n  | { type: \"passkey\"; user: User; expirationDateMs: number };\n\nexport type SessionManagerEvents = {\n  connected(session: Session): void;\n  disconnected(): void;\n  initialized(): void;\n};\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/session/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { User } from \"../client/types\";\n\nexport type Session =\n  | {\n      type: \"email\" | \"oauth\" | \"otp\" | \"custom-jwt\";\n      bundle: string;\n      expirationDateMs: number;\n      user: User;\n    }\n  | { type: \"passkey\"; user: User; expirationDateMs: number };\n\nexport type SessionManagerEvents = {\n  connected(session: Session): void;\n  disconnected(): void;\n  initialized(): void;\n};\n"]}

package/dist/esm/signer.d.ts

@@ -40,6 +40,10 @@ export type AuthParams = {
     orgId: string;
     idToken: string;
     isNewUser?: boolean;
+} | {
+    type: "custom-jwt";
+    jwt: string;
+    authProviderId?: string;
 } | {
     type: "otp";
     otpCode: string;

package/dist/esm/signer.js.map

@@ -1 +1 @@
-{"version":3,"file":"signer.js","sourceRoot":"","sources":["../../src/signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EACL,+BAA+B,EAC/B,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAM3B,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAiFlE,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,MAAM,EAAE,CAAC;SACN,MAAM,EAA0B;SAChC,EAAE,CAAC,+BAA+B,CAAC;CACvC,CAAC;KACD,MAAM,CAAC;IACN,aAAa,EAAE,0BAA0B,CAAC,IAAI,CAAC;QAC7C,MAAM,EAAE,IAAI;KACb,CAAC,CAAC,QAAQ,EAAE;CACd,CAAC,CAAC;AAIL;;GAEG;AACH,MAAM,OAAO,gBAAiB,SAAQ,iBAAyC;IAE7E;;;;;;;;;;;;;;;;;;;;OAoBG;IAEH,YAAY,MAA2B;QACrC,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,EAAE,GACjC,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAE1C,IAAI,MAA8B,CAAC;QACnC,IAAI,YAAY,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnC,MAAM,GAAG,IAAI,sBAAsB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC1B,CAAC;QAED,MAAM,WAAW,GAAG;YAClB,WAAW,EAAE,QAAQ;YACrB,mEAAmE;YACnE,UAAU,EAAE,OAAO;YACnB,MAAM,EAAE,gBAAgB;YACxB,WAAW,EAAE,gBAAgB;YAC7B,UAAU,EAAE,gBAAgB;YAC5B,OAAO,EAAE,kBAAkB;YAC3B,QAAQ,EAAE,cAAc;YACxB,KAAK,EAAE,gBAAgB;YACvB,KAAK,EAAE,eAAe;YACtB,YAAY,EAAE,uBAAuB;YACrC,UAAU,EAAE,eAAe;SAC5B,CAAC;QAEF,MAAM,EACJ,WAAW,EACX,MAAM,EACN,WAAW,EACX,UAAU,EACV,OAAO,EACP,QAAQ,EACR,KAAK,EACL,KAAK,EACL,YAAY,EACZ,UAAU,GACX,GAAG,uBAAuB,CAAC,WAAW,CAAC,CAAC;QAEzC,IAAI,CAAC,gBAAgB,CAAC,2BAA2B,EAAE,CAAC;YAClD,yBAAyB,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;YACtD,gBAAgB,CAAC,2BAA2B,GAAG,IAAI,CAAC;QACtD,CAAC;QAED,MAAM,YAAY,GAChB,UAAU,IAAI,IAAI;YAChB,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE;YAC7C,CAAC,CAAC,SAAS,CAAC;QAEhB,MAAM,wBAAwB,GAAkC,CAAC,GAAG,EAAE;YACpE,IAAI,MAAM,KAAK,uCAAuC,EAAE,CAAC;gBACvD,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,IACE,OAAO,IAAI,IAAI;gBACf,KAAK,IAAI,IAAI;gBACb,YAAY,IAAI,IAAI;gBACpB,KAAK,IAAI,IAAI;gBACb,UAAU,IAAI,IAAI,EAClB,CAAC;gBACD,OAAO,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;gBACvE,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO;gBACL,MAAM;gBACN,OAAO;gBACP,KAAK;gBACL,YAAY,EAAE,YAAY;gBAC1B,KAAK;gBACL,KAAK,EAAE,UAAU;aAClB,CAAC;QACJ,CAAC,CAAC,EAAE,CAAC;QAEL,KAAK,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,wBAAwB,EAAE,CAAC,CAAC;QAEzE,MAAM,SAAS,GAAG,QAAQ,KAAK,MAAM,CAAC;QAEtC,IAAI,CAAC,UAAU,GAAG,gBAAgB,CAAC;QAEnC,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,YAAY,CAAC;gBAChB,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,WAAW;gBACnB,SAAS;aACV,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,WAAW,IAAI,UAAU,IAAI,OAAO,EAAE,CAAC;YAChD,IAAI,CAAC,YAAY,CAAC;gBAChB,IAAI,EAAE,aAAa;gBACnB,MAAM,EAAE,WAAW;gBACnB,KAAK,EAAE,UAAU;gBACjB,OAAO;gBACP,SAAS;aACV,CAAC,CAAC;QACL,CAAC;IACH,CAAC;;AArHc;;;;WAA8B,KAAK;GAAC;AAwHrD;;;;GAIG;AACH,SAAS,yBAAyB,CAAC,UAAoB;IACrD,MAAM,oBAAoB,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC;IAEzD,MAAM,UAAU,GAAG,CAAC,GAAoC,EAAE,EAAE;QAC1D,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,GAAG,CAAC;QACb,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC3C,MAAM,cAAc,GAAG,GAAG,CAAC,MAAM,CAAC;YAElC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YACxD,IAAI,cAAc,KAAK,GAAG,CAAC,MAAM;gBAAE,OAAO,GAAG,CAAC;YAE9C,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;YACxD,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;YAClE,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,CAAC,OAAO,CAAC,YAAY,GAAG,UAAU,GAAG,IAAI;QAC7C,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;QAElC,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,IAAI,EAAE;YAC9C,KAAK;YACL,MAAM;YACN,UAAU,CAAC,GAAG,CAAC;SAChB,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,uBAAuB,CAC9B,IAAO;IAEP,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAuC,EAAE,CAAC;IACtD,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC;QACvD,eAAe,KAAf,eAAe,GAAK,KAAK,IAAI,IAAI,EAAC;QAClC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACpB,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,MAAgD,CAAC;AAC1D,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { BaseAlchemySigner } from \"./base.js\";\nimport {\n  AlchemySignerClientParamsSchema,\n  AlchemySignerWebClient,\n} from \"./client/index.js\";\nimport type {\n  AuthLinkingPrompt,\n  CredentialCreationOptionOverrides,\n  VerifyMfaParams,\n} from \"./client/types.js\";\nimport { SessionManagerParamsSchema } from \"./session/manager.js\";\n\nexport type AuthParams =\n  | {\n      type: \"email\";\n      email: string;\n      /** @deprecated This option will be overriden by dashboard settings. Please use the dashboard settings instead. This option will be removed in a future release. */\n      emailMode?: \"magicLink\" | \"otp\";\n      redirectParams?: URLSearchParams;\n      multiFactors?: VerifyMfaParams[];\n    }\n  | { type: \"email\"; bundle: string; orgId?: string; isNewUser?: boolean }\n  | {\n      type: \"sms\";\n      phone: string;\n    }\n  | {\n      type: \"passkey\";\n      email: string;\n      creationOpts?: CredentialCreationOptionOverrides;\n    }\n  | {\n      type: \"passkey\";\n      createNew: false;\n    }\n  | {\n      type: \"passkey\";\n      createNew: true;\n      username: string;\n      creationOpts?: CredentialCreationOptionOverrides;\n    }\n  | ({\n      type: \"oauth\";\n      scope?: string;\n      claims?: string;\n      otherParameters?: Record<string, string>;\n    } & OauthProviderConfig &\n      OauthRedirectConfig)\n  | {\n      type: \"oauthReturn\";\n      bundle: string;\n      orgId: string;\n      idToken: string;\n      isNewUser?: boolean;\n    }\n  | {\n      type: \"otp\";\n      otpCode: string;\n      multiFactors?: VerifyMfaParams[];\n    };\n\nexport type OauthProviderConfig =\n  | {\n      authProviderId: \"auth0\";\n      isCustomProvider?: false;\n      auth0Connection?: string;\n    }\n  | {\n      authProviderId: KnownAuthProvider;\n      isCustomProvider?: false;\n      auth0Connection?: never;\n    }\n  | {\n      authProviderId: string;\n      isCustomProvider: true;\n      auth0Connection?: never;\n    };\n\nexport type OauthRedirectConfig =\n  | { mode: \"redirect\"; redirectUrl: string }\n  | { mode: \"popup\"; redirectUrl?: never };\n\nexport type KnownAuthProvider =\n  | \"google\"\n  | \"apple\"\n  | \"facebook\"\n  | \"twitch\"\n  | \"auth0\";\n\nexport type OauthMode = \"redirect\" | \"popup\";\n\nexport const AlchemySignerParamsSchema = z\n  .object({\n    client: z\n      .custom<AlchemySignerWebClient>()\n      .or(AlchemySignerClientParamsSchema),\n  })\n  .extend({\n    sessionConfig: SessionManagerParamsSchema.omit({\n      client: true,\n    }).optional(),\n  });\n\nexport type AlchemySignerParams = z.input<typeof AlchemySignerParamsSchema>;\n\n/**\n * A SmartAccountSigner that can be used with any SmartContractAccount\n */\nexport class AlchemyWebSigner extends BaseAlchemySigner<AlchemySignerWebClient> {\n  private static replaceStateFilterInstalled = false;\n  /**\n   * Initializes an instance with the provided Alchemy signer parameters after parsing them with a schema.\n   *\n   * @example\n   * ```ts\n   * import { AlchemyWebSigner } from \"@account-kit/signer\";\n   *\n   * const signer = new AlchemyWebSigner({\n   *  client: {\n   *    connection: {\n   *      rpcUrl: \"/api/rpc\",\n   *    },\n   *    iframeConfig: {\n   *      iframeContainerId: \"alchemy-signer-iframe-container\",\n   *    },\n   *  },\n   * });\n   * ```\n   *\n   * @param {AlchemySignerParams} params The parameters for the Alchemy signer, including the client and session configuration\n   */\n\n  constructor(params: AlchemySignerParams) {\n    const { sessionConfig, ...params_ } =\n      AlchemySignerParamsSchema.parse(params);\n\n    let client: AlchemySignerWebClient;\n    if (\"connection\" in params_.client) {\n      client = new AlchemySignerWebClient(params_.client);\n    } else {\n      client = params_.client;\n    }\n\n    const qpStructure = {\n      emailBundle: \"bundle\",\n      // We don't need this, but we still want to remove it from the URL.\n      emailOrgId: \"orgId\",\n      status: \"alchemy-status\",\n      oauthBundle: \"alchemy-bundle\",\n      oauthOrgId: \"alchemy-org-id\",\n      idToken: \"alchemy-id-token\",\n      isSignup: \"aa-is-signup\",\n      otpId: \"alchemy-otp-id\",\n      email: \"alchemy-email\",\n      authProvider: \"alchemy-auth-provider\",\n      oauthError: \"alchemy-error\",\n    };\n\n    const {\n      emailBundle,\n      status,\n      oauthBundle,\n      oauthOrgId,\n      idToken,\n      isSignup,\n      otpId,\n      email,\n      authProvider,\n      oauthError,\n    } = getAndRemoveQueryParams(qpStructure);\n\n    if (!AlchemyWebSigner.replaceStateFilterInstalled) {\n      installReplaceStateFilter(Object.values(qpStructure));\n      AlchemyWebSigner.replaceStateFilterInstalled = true;\n    }\n\n    const initialError =\n      oauthError != null\n        ? { name: \"OauthError\", message: oauthError }\n        : undefined;\n\n    const initialAuthLinkingPrompt: AuthLinkingPrompt | undefined = (() => {\n      if (status !== \"ACCOUNT_LINKING_CONFIRMATION_REQUIRED\") {\n        return undefined;\n      }\n      if (\n        idToken == null ||\n        email == null ||\n        authProvider == null ||\n        otpId == null ||\n        oauthOrgId == null\n      ) {\n        console.error(\"Missing required query params for auth linking prompt\");\n        return undefined;\n      }\n      return {\n        status,\n        idToken,\n        email,\n        providerName: authProvider,\n        otpId,\n        orgId: oauthOrgId,\n      };\n    })();\n\n    super({ client, sessionConfig, initialError, initialAuthLinkingPrompt });\n\n    const isNewUser = isSignup === \"true\";\n\n    this.signerType = \"alchemy-signer\";\n\n    if (emailBundle) {\n      this.authenticate({\n        type: \"email\",\n        bundle: emailBundle,\n        isNewUser,\n      });\n    } else if (oauthBundle && oauthOrgId && idToken) {\n      this.authenticate({\n        type: \"oauthReturn\",\n        bundle: oauthBundle,\n        orgId: oauthOrgId,\n        idToken,\n        isNewUser,\n      });\n    }\n  }\n}\n\n/**\n * Overrides `window.history.replaceState` to remove the specified query params from target URLs.\n *\n * @param {string[]} qpToRemove The query params to remove from target URLs.\n */\nfunction installReplaceStateFilter(qpToRemove: string[]) {\n  const originalReplaceState = window.history.replaceState;\n\n  const processUrl = (src: string | URL | undefined | null) => {\n    if (!src) {\n      return src;\n    }\n\n    try {\n      const url = new URL(src, document.baseURI);\n      const originalSearch = url.search;\n\n      qpToRemove.forEach((qp) => url.searchParams.delete(qp));\n      if (originalSearch === url.search) return src;\n\n      console.log(\"[Alchemy] filtered query params from URL\");\n      return url;\n    } catch (e) {\n      console.log(\"[Alchemy] failed to process URL in state filter\", e);\n      return src;\n    }\n  };\n\n  window.history.replaceState = function (...args) {\n    const [state, unused, url] = args;\n\n    const result = originalReplaceState.apply(this, [\n      state,\n      unused,\n      processUrl(url),\n    ]);\n\n    return result;\n  };\n\n  console.log(\"[Alchemy] installed window.history.replaceState interceptor\");\n}\n\n/**\n * Reads and removes the specified query params from the URL.\n *\n * @param {T} keys object whose values are the query parameter keys to read and\n * remove\n * @returns {{ [K in keyof T]: string | undefined }} object with the same keys\n * as the input whose values are the values of the query params.\n */\nfunction getAndRemoveQueryParams<T extends Record<string, string>>(\n  keys: T,\n): { [K in keyof T]: string | undefined } {\n  const url = new URL(window.location.href);\n  const result: Record<string, string | undefined> = {};\n  let foundQueryParam = false;\n  for (const [key, param] of Object.entries(keys)) {\n    const value = url.searchParams.get(param) ?? undefined;\n    foundQueryParam ||= value != null;\n    result[key] = value;\n    url.searchParams.delete(param);\n  }\n  if (foundQueryParam) {\n    window.history.replaceState(window.history.state, \"\", url.toString());\n  }\n  return result as { [K in keyof T]: string | undefined };\n}\n"]}
+{"version":3,"file":"signer.js","sourceRoot":"","sources":["../../src/signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EACL,+BAA+B,EAC/B,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAM3B,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAsFlE,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,MAAM,EAAE,CAAC;SACN,MAAM,EAA0B;SAChC,EAAE,CAAC,+BAA+B,CAAC;CACvC,CAAC;KACD,MAAM,CAAC;IACN,aAAa,EAAE,0BAA0B,CAAC,IAAI,CAAC;QAC7C,MAAM,EAAE,IAAI;KACb,CAAC,CAAC,QAAQ,EAAE;CACd,CAAC,CAAC;AAIL;;GAEG;AACH,MAAM,OAAO,gBAAiB,SAAQ,iBAAyC;IAE7E;;;;;;;;;;;;;;;;;;;;OAoBG;IAEH,YAAY,MAA2B;QACrC,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,EAAE,GACjC,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAE1C,IAAI,MAA8B,CAAC;QACnC,IAAI,YAAY,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnC,MAAM,GAAG,IAAI,sBAAsB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC1B,CAAC;QAED,MAAM,WAAW,GAAG;YAClB,WAAW,EAAE,QAAQ;YACrB,mEAAmE;YACnE,UAAU,EAAE,OAAO;YACnB,MAAM,EAAE,gBAAgB;YACxB,WAAW,EAAE,gBAAgB;YAC7B,UAAU,EAAE,gBAAgB;YAC5B,OAAO,EAAE,kBAAkB;YAC3B,QAAQ,EAAE,cAAc;YACxB,KAAK,EAAE,gBAAgB;YACvB,KAAK,EAAE,eAAe;YACtB,YAAY,EAAE,uBAAuB;YACrC,UAAU,EAAE,eAAe;SAC5B,CAAC;QAEF,MAAM,EACJ,WAAW,EACX,MAAM,EACN,WAAW,EACX,UAAU,EACV,OAAO,EACP,QAAQ,EACR,KAAK,EACL,KAAK,EACL,YAAY,EACZ,UAAU,GACX,GAAG,uBAAuB,CAAC,WAAW,CAAC,CAAC;QAEzC,IAAI,CAAC,gBAAgB,CAAC,2BAA2B,EAAE,CAAC;YAClD,yBAAyB,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;YACtD,gBAAgB,CAAC,2BAA2B,GAAG,IAAI,CAAC;QACtD,CAAC;QAED,MAAM,YAAY,GAChB,UAAU,IAAI,IAAI;YAChB,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE;YAC7C,CAAC,CAAC,SAAS,CAAC;QAEhB,MAAM,wBAAwB,GAAkC,CAAC,GAAG,EAAE;YACpE,IAAI,MAAM,KAAK,uCAAuC,EAAE,CAAC;gBACvD,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,IACE,OAAO,IAAI,IAAI;gBACf,KAAK,IAAI,IAAI;gBACb,YAAY,IAAI,IAAI;gBACpB,KAAK,IAAI,IAAI;gBACb,UAAU,IAAI,IAAI,EAClB,CAAC;gBACD,OAAO,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;gBACvE,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO;gBACL,MAAM;gBACN,OAAO;gBACP,KAAK;gBACL,YAAY,EAAE,YAAY;gBAC1B,KAAK;gBACL,KAAK,EAAE,UAAU;aAClB,CAAC;QACJ,CAAC,CAAC,EAAE,CAAC;QAEL,KAAK,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,wBAAwB,EAAE,CAAC,CAAC;QAEzE,MAAM,SAAS,GAAG,QAAQ,KAAK,MAAM,CAAC;QAEtC,IAAI,CAAC,UAAU,GAAG,gBAAgB,CAAC;QAEnC,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,YAAY,CAAC;gBAChB,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,WAAW;gBACnB,SAAS;aACV,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,WAAW,IAAI,UAAU,IAAI,OAAO,EAAE,CAAC;YAChD,IAAI,CAAC,YAAY,CAAC;gBAChB,IAAI,EAAE,aAAa;gBACnB,MAAM,EAAE,WAAW;gBACnB,KAAK,EAAE,UAAU;gBACjB,OAAO;gBACP,SAAS;aACV,CAAC,CAAC;QACL,CAAC;IACH,CAAC;;AArHc;;;;WAA8B,KAAK;GAAC;AAwHrD;;;;GAIG;AACH,SAAS,yBAAyB,CAAC,UAAoB;IACrD,MAAM,oBAAoB,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC;IAEzD,MAAM,UAAU,GAAG,CAAC,GAAoC,EAAE,EAAE;QAC1D,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,GAAG,CAAC;QACb,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC3C,MAAM,cAAc,GAAG,GAAG,CAAC,MAAM,CAAC;YAElC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YACxD,IAAI,cAAc,KAAK,GAAG,CAAC,MAAM;gBAAE,OAAO,GAAG,CAAC;YAE9C,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;YACxD,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,GAAG,CAAC,iDAAiD,EAAE,CAAC,CAAC,CAAC;YAClE,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,CAAC,OAAO,CAAC,YAAY,GAAG,UAAU,GAAG,IAAI;QAC7C,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;QAElC,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,IAAI,EAAE;YAC9C,KAAK;YACL,MAAM;YACN,UAAU,CAAC,GAAG,CAAC;SAChB,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,uBAAuB,CAC9B,IAAO;IAEP,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAuC,EAAE,CAAC;IACtD,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC;QACvD,eAAe,KAAf,eAAe,GAAK,KAAK,IAAI,IAAI,EAAC;QAClC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACpB,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,MAAgD,CAAC;AAC1D,CAAC","sourcesContent":["import { z } from \"zod\";\nimport { BaseAlchemySigner } from \"./base.js\";\nimport {\n  AlchemySignerClientParamsSchema,\n  AlchemySignerWebClient,\n} from \"./client/index.js\";\nimport type {\n  AuthLinkingPrompt,\n  CredentialCreationOptionOverrides,\n  VerifyMfaParams,\n} from \"./client/types.js\";\nimport { SessionManagerParamsSchema } from \"./session/manager.js\";\n\nexport type AuthParams =\n  | {\n      type: \"email\";\n      email: string;\n      /** @deprecated This option will be overriden by dashboard settings. Please use the dashboard settings instead. This option will be removed in a future release. */\n      emailMode?: \"magicLink\" | \"otp\";\n      redirectParams?: URLSearchParams;\n      multiFactors?: VerifyMfaParams[];\n    }\n  | { type: \"email\"; bundle: string; orgId?: string; isNewUser?: boolean }\n  | {\n      type: \"sms\";\n      phone: string;\n    }\n  | {\n      type: \"passkey\";\n      email: string;\n      creationOpts?: CredentialCreationOptionOverrides;\n    }\n  | {\n      type: \"passkey\";\n      createNew: false;\n    }\n  | {\n      type: \"passkey\";\n      createNew: true;\n      username: string;\n      creationOpts?: CredentialCreationOptionOverrides;\n    }\n  | ({\n      type: \"oauth\";\n      scope?: string;\n      claims?: string;\n      otherParameters?: Record<string, string>;\n    } & OauthProviderConfig &\n      OauthRedirectConfig)\n  | {\n      type: \"oauthReturn\";\n      bundle: string;\n      orgId: string;\n      idToken: string;\n      isNewUser?: boolean;\n    }\n  | {\n      type: \"custom-jwt\";\n      jwt: string;\n      authProviderId?: string;\n    }\n  | {\n      type: \"otp\";\n      otpCode: string;\n      multiFactors?: VerifyMfaParams[];\n    };\n\nexport type OauthProviderConfig =\n  | {\n      authProviderId: \"auth0\";\n      isCustomProvider?: false;\n      auth0Connection?: string;\n    }\n  | {\n      authProviderId: KnownAuthProvider;\n      isCustomProvider?: false;\n      auth0Connection?: never;\n    }\n  | {\n      authProviderId: string;\n      isCustomProvider: true;\n      auth0Connection?: never;\n    };\n\nexport type OauthRedirectConfig =\n  | { mode: \"redirect\"; redirectUrl: string }\n  | { mode: \"popup\"; redirectUrl?: never };\n\nexport type KnownAuthProvider =\n  | \"google\"\n  | \"apple\"\n  | \"facebook\"\n  | \"twitch\"\n  | \"auth0\";\n\nexport type OauthMode = \"redirect\" | \"popup\";\n\nexport const AlchemySignerParamsSchema = z\n  .object({\n    client: z\n      .custom<AlchemySignerWebClient>()\n      .or(AlchemySignerClientParamsSchema),\n  })\n  .extend({\n    sessionConfig: SessionManagerParamsSchema.omit({\n      client: true,\n    }).optional(),\n  });\n\nexport type AlchemySignerParams = z.input<typeof AlchemySignerParamsSchema>;\n\n/**\n * A SmartAccountSigner that can be used with any SmartContractAccount\n */\nexport class AlchemyWebSigner extends BaseAlchemySigner<AlchemySignerWebClient> {\n  private static replaceStateFilterInstalled = false;\n  /**\n   * Initializes an instance with the provided Alchemy signer parameters after parsing them with a schema.\n   *\n   * @example\n   * ```ts\n   * import { AlchemyWebSigner } from \"@account-kit/signer\";\n   *\n   * const signer = new AlchemyWebSigner({\n   *  client: {\n   *    connection: {\n   *      rpcUrl: \"/api/rpc\",\n   *    },\n   *    iframeConfig: {\n   *      iframeContainerId: \"alchemy-signer-iframe-container\",\n   *    },\n   *  },\n   * });\n   * ```\n   *\n   * @param {AlchemySignerParams} params The parameters for the Alchemy signer, including the client and session configuration\n   */\n\n  constructor(params: AlchemySignerParams) {\n    const { sessionConfig, ...params_ } =\n      AlchemySignerParamsSchema.parse(params);\n\n    let client: AlchemySignerWebClient;\n    if (\"connection\" in params_.client) {\n      client = new AlchemySignerWebClient(params_.client);\n    } else {\n      client = params_.client;\n    }\n\n    const qpStructure = {\n      emailBundle: \"bundle\",\n      // We don't need this, but we still want to remove it from the URL.\n      emailOrgId: \"orgId\",\n      status: \"alchemy-status\",\n      oauthBundle: \"alchemy-bundle\",\n      oauthOrgId: \"alchemy-org-id\",\n      idToken: \"alchemy-id-token\",\n      isSignup: \"aa-is-signup\",\n      otpId: \"alchemy-otp-id\",\n      email: \"alchemy-email\",\n      authProvider: \"alchemy-auth-provider\",\n      oauthError: \"alchemy-error\",\n    };\n\n    const {\n      emailBundle,\n      status,\n      oauthBundle,\n      oauthOrgId,\n      idToken,\n      isSignup,\n      otpId,\n      email,\n      authProvider,\n      oauthError,\n    } = getAndRemoveQueryParams(qpStructure);\n\n    if (!AlchemyWebSigner.replaceStateFilterInstalled) {\n      installReplaceStateFilter(Object.values(qpStructure));\n      AlchemyWebSigner.replaceStateFilterInstalled = true;\n    }\n\n    const initialError =\n      oauthError != null\n        ? { name: \"OauthError\", message: oauthError }\n        : undefined;\n\n    const initialAuthLinkingPrompt: AuthLinkingPrompt | undefined = (() => {\n      if (status !== \"ACCOUNT_LINKING_CONFIRMATION_REQUIRED\") {\n        return undefined;\n      }\n      if (\n        idToken == null ||\n        email == null ||\n        authProvider == null ||\n        otpId == null ||\n        oauthOrgId == null\n      ) {\n        console.error(\"Missing required query params for auth linking prompt\");\n        return undefined;\n      }\n      return {\n        status,\n        idToken,\n        email,\n        providerName: authProvider,\n        otpId,\n        orgId: oauthOrgId,\n      };\n    })();\n\n    super({ client, sessionConfig, initialError, initialAuthLinkingPrompt });\n\n    const isNewUser = isSignup === \"true\";\n\n    this.signerType = \"alchemy-signer\";\n\n    if (emailBundle) {\n      this.authenticate({\n        type: \"email\",\n        bundle: emailBundle,\n        isNewUser,\n      });\n    } else if (oauthBundle && oauthOrgId && idToken) {\n      this.authenticate({\n        type: \"oauthReturn\",\n        bundle: oauthBundle,\n        orgId: oauthOrgId,\n        idToken,\n        isNewUser,\n      });\n    }\n  }\n}\n\n/**\n * Overrides `window.history.replaceState` to remove the specified query params from target URLs.\n *\n * @param {string[]} qpToRemove The query params to remove from target URLs.\n */\nfunction installReplaceStateFilter(qpToRemove: string[]) {\n  const originalReplaceState = window.history.replaceState;\n\n  const processUrl = (src: string | URL | undefined | null) => {\n    if (!src) {\n      return src;\n    }\n\n    try {\n      const url = new URL(src, document.baseURI);\n      const originalSearch = url.search;\n\n      qpToRemove.forEach((qp) => url.searchParams.delete(qp));\n      if (originalSearch === url.search) return src;\n\n      console.log(\"[Alchemy] filtered query params from URL\");\n      return url;\n    } catch (e) {\n      console.log(\"[Alchemy] failed to process URL in state filter\", e);\n      return src;\n    }\n  };\n\n  window.history.replaceState = function (...args) {\n    const [state, unused, url] = args;\n\n    const result = originalReplaceState.apply(this, [\n      state,\n      unused,\n      processUrl(url),\n    ]);\n\n    return result;\n  };\n\n  console.log(\"[Alchemy] installed window.history.replaceState interceptor\");\n}\n\n/**\n * Reads and removes the specified query params from the URL.\n *\n * @param {T} keys object whose values are the query parameter keys to read and\n * remove\n * @returns {{ [K in keyof T]: string | undefined }} object with the same keys\n * as the input whose values are the values of the query params.\n */\nfunction getAndRemoveQueryParams<T extends Record<string, string>>(\n  keys: T,\n): { [K in keyof T]: string | undefined } {\n  const url = new URL(window.location.href);\n  const result: Record<string, string | undefined> = {};\n  let foundQueryParam = false;\n  for (const [key, param] of Object.entries(keys)) {\n    const value = url.searchParams.get(param) ?? undefined;\n    foundQueryParam ||= value != null;\n    result[key] = value;\n    url.searchParams.delete(param);\n  }\n  if (foundQueryParam) {\n    window.history.replaceState(window.history.state, \"\", url.toString());\n  }\n  return result as { [K in keyof T]: string | undefined };\n}\n"]}

package/dist/esm/types.d.ts

@@ -20,6 +20,7 @@ export declare enum AlchemySignerStatus {
     AUTHENTICATING_PASSKEY = "AUTHENTICATING_PASSKEY",
     AUTHENTICATING_EMAIL = "AUTHENTICATING_EMAIL",
     AUTHENTICATING_OAUTH = "AUTHENTICATING_OAUTH",
+    AUTHENTICATING_JWT = "AUTHENTICATING_JWT",
     AWAITING_EMAIL_AUTH = "AWAITING_EMAIL_AUTH",
     AWAITING_SMS_AUTH = "AWAITING_SMS_AUTH",
     AWAITING_OTP_AUTH = "AWAITING_OTP_AUTH",

package/dist/esm/types.js

@@ -6,6 +6,7 @@ export var AlchemySignerStatus;
     AlchemySignerStatus["AUTHENTICATING_PASSKEY"] = "AUTHENTICATING_PASSKEY";
     AlchemySignerStatus["AUTHENTICATING_EMAIL"] = "AUTHENTICATING_EMAIL";
     AlchemySignerStatus["AUTHENTICATING_OAUTH"] = "AUTHENTICATING_OAUTH";
+    AlchemySignerStatus["AUTHENTICATING_JWT"] = "AUTHENTICATING_JWT";
     AlchemySignerStatus["AWAITING_EMAIL_AUTH"] = "AWAITING_EMAIL_AUTH";
     AlchemySignerStatus["AWAITING_SMS_AUTH"] = "AWAITING_SMS_AUTH";
     AlchemySignerStatus["AWAITING_OTP_AUTH"] = "AWAITING_OTP_AUTH";

package/dist/esm/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAkBA,MAAM,CAAN,IAAY,mBAWX;AAXD,WAAY,mBAAmB;IAC7B,oDAA6B,CAAA;IAC7B,8CAAuB,CAAA;IACvB,oDAA6B,CAAA;IAC7B,wEAAiD,CAAA;IACjD,oEAA6C,CAAA;IAC7C,oEAA6C,CAAA;IAC7C,kEAA2C,CAAA;IAC3C,8DAAuC,CAAA;IACvC,8DAAuC,CAAA;IACvC,8DAAuC,CAAA;AACzC,CAAC,EAXW,mBAAmB,KAAnB,mBAAmB,QAW9B;AAED,MAAM,CAAN,IAAY,gBAGX;AAHD,WAAY,gBAAgB;IAC1B,iDAA6B,CAAA;IAC7B,yCAAqB,CAAA;AACvB,CAAC,EAHW,gBAAgB,KAAhB,gBAAgB,QAG3B","sourcesContent":["import type { User } from \"./client/types\";\n\nexport type AlchemySignerEvents = {\n  connected(user: User): void;\n  newUserSignup(): void;\n  disconnected(): void;\n  statusChanged(status: AlchemySignerStatus): void;\n  errorChanged(error: ErrorInfo | undefined): void;\n  mfaStatusChanged(mfaStatus: {\n    mfaRequired: boolean;\n    mfaFactorId?: string;\n    encryptedPayload?: string;\n  }): void;\n  emailAuthLinkingRequired(email: string): void;\n};\n\nexport type AlchemySignerEvent = keyof AlchemySignerEvents;\n\nexport enum AlchemySignerStatus {\n  INITIALIZING = \"INITIALIZING\",\n  CONNECTED = \"CONNECTED\",\n  DISCONNECTED = \"DISCONNECTED\",\n  AUTHENTICATING_PASSKEY = \"AUTHENTICATING_PASSKEY\",\n  AUTHENTICATING_EMAIL = \"AUTHENTICATING_EMAIL\",\n  AUTHENTICATING_OAUTH = \"AUTHENTICATING_OAUTH\",\n  AWAITING_EMAIL_AUTH = \"AWAITING_EMAIL_AUTH\",\n  AWAITING_SMS_AUTH = \"AWAITING_SMS_AUTH\",\n  AWAITING_OTP_AUTH = \"AWAITING_OTP_AUTH\",\n  AWAITING_MFA_AUTH = \"AWAITING_MFA_AUTH\",\n}\n\nexport enum AlchemyMfaStatus {\n  NOT_REQUIRED = \"not_required\",\n  REQUIRED = \"required\",\n}\n\nexport interface ErrorInfo {\n  name: string;\n  message: string;\n}\n\nexport type ValidateMultiFactorsArgs = {\n  multiFactorId?: string;\n  multiFactorCode: string;\n};\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAkBA,MAAM,CAAN,IAAY,mBAYX;AAZD,WAAY,mBAAmB;IAC7B,oDAA6B,CAAA;IAC7B,8CAAuB,CAAA;IACvB,oDAA6B,CAAA;IAC7B,wEAAiD,CAAA;IACjD,oEAA6C,CAAA;IAC7C,oEAA6C,CAAA;IAC7C,gEAAyC,CAAA;IACzC,kEAA2C,CAAA;IAC3C,8DAAuC,CAAA;IACvC,8DAAuC,CAAA;IACvC,8DAAuC,CAAA;AACzC,CAAC,EAZW,mBAAmB,KAAnB,mBAAmB,QAY9B;AAED,MAAM,CAAN,IAAY,gBAGX;AAHD,WAAY,gBAAgB;IAC1B,iDAA6B,CAAA;IAC7B,yCAAqB,CAAA;AACvB,CAAC,EAHW,gBAAgB,KAAhB,gBAAgB,QAG3B","sourcesContent":["import type { User } from \"./client/types\";\n\nexport type AlchemySignerEvents = {\n  connected(user: User): void;\n  newUserSignup(): void;\n  disconnected(): void;\n  statusChanged(status: AlchemySignerStatus): void;\n  errorChanged(error: ErrorInfo | undefined): void;\n  mfaStatusChanged(mfaStatus: {\n    mfaRequired: boolean;\n    mfaFactorId?: string;\n    encryptedPayload?: string;\n  }): void;\n  emailAuthLinkingRequired(email: string): void;\n};\n\nexport type AlchemySignerEvent = keyof AlchemySignerEvents;\n\nexport enum AlchemySignerStatus {\n  INITIALIZING = \"INITIALIZING\",\n  CONNECTED = \"CONNECTED\",\n  DISCONNECTED = \"DISCONNECTED\",\n  AUTHENTICATING_PASSKEY = \"AUTHENTICATING_PASSKEY\",\n  AUTHENTICATING_EMAIL = \"AUTHENTICATING_EMAIL\",\n  AUTHENTICATING_OAUTH = \"AUTHENTICATING_OAUTH\",\n  AUTHENTICATING_JWT = \"AUTHENTICATING_JWT\",\n  AWAITING_EMAIL_AUTH = \"AWAITING_EMAIL_AUTH\",\n  AWAITING_SMS_AUTH = \"AWAITING_SMS_AUTH\",\n  AWAITING_OTP_AUTH = \"AWAITING_OTP_AUTH\",\n  AWAITING_MFA_AUTH = \"AWAITING_MFA_AUTH\",\n}\n\nexport enum AlchemyMfaStatus {\n  NOT_REQUIRED = \"not_required\",\n  REQUIRED = \"required\",\n}\n\nexport interface ErrorInfo {\n  name: string;\n  message: string;\n}\n\nexport type ValidateMultiFactorsArgs = {\n  multiFactorId?: string;\n  multiFactorCode: string;\n};\n"]}

package/dist/esm/version.d.ts

@@ -1 +1 @@
-export declare const VERSION = "4.56.0";
+export declare const VERSION = "4.57.1";

package/dist/esm/version.js

@@ -1,4 +1,4 @@
 // This file is autogenerated by inject-version.ts. Any changes will be
 // overwritten on commit!
-export const VERSION = "4.56.0";
+export const VERSION = "4.57.1";
 //# sourceMappingURL=version.js.map

package/dist/esm/version.js.map

@@ -1 +1 @@
-{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/version.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,yBAAyB;AACzB,MAAM,CAAC,MAAM,OAAO,GAAG,QAAQ,CAAC","sourcesContent":["// This file is autogenerated by inject-version.ts. Any changes will be\n// overwritten on commit!\nexport const VERSION = \"4.56.0\";\n"]}
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/version.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,yBAAyB;AACzB,MAAM,CAAC,MAAM,OAAO,GAAG,QAAQ,CAAC","sourcesContent":["// This file is autogenerated by inject-version.ts. Any changes will be\n// overwritten on commit!\nexport const VERSION = \"4.57.1\";\n"]}

package/dist/types/base.d.ts

@@ -546,6 +546,7 @@ export declare abstract class BaseAlchemySigner<TClient extends BaseSignerClient
      * @throws {NotAuthenticatedError} Thrown if the user is not authenticated
      */
     listAuthMethods: () => Promise<AuthMethods>;
+    private authenticateWithJwt;
     private authenticateWithOtp;
     private setAwaitingEmailAuth;
     private setAwaitingSmsAuth;