@dynamic-labs-sdk/client 0.14.0 → 0.16.0

package/dist/{InvalidParamError-DQn49mNB.esm.js → InvalidParamError-Cty-xWsw.esm.js}

@@ -1,14 +1,16 @@
-import { AuthStorageEnum, Configuration, SDKApi } from "@dynamic-labs/sdk-api-core";
+import { AuthStorageEnum, Configuration, SDKApi, isDeviceNonceSignatureRequiredForUrl } from "@dynamic-labs/sdk-api-core";
 import { Buffer as Buffer$1 } from "buffer";
+import * as z from "zod/mini";
 
 //#region package.json
 var name = "@dynamic-labs-sdk/client";
-var version = "0.14.0";
+var version = "0.16.0";
 var dependencies = {
 	"@dynamic-labs-sdk/assert-package-version": "workspace:*",
 	"@dynamic-labs-wallet/browser-wallet-client": "0.0.286",
-	"@dynamic-labs/sdk-api-core": "0.0.881",
+	"@dynamic-labs/sdk-api-core": "0.0.895",
 	"@simplewebauthn/browser": "13.1.0",
+	"ably": "2.17.1",
 	"buffer": "6.0.3",
 	"eventemitter3": "5.0.1",
 	"zod": "4.0.5"
@@ -112,6 +114,11 @@ const setDefaultClient = (client) => {
 	numOfInitializedClients++;
 };
 
+//#endregion
+//#region src/utils/getNonce/constants.ts
+const NONCE_POOL_EXPIRATION_TIME = 6e4 * 60 * 24;
+const NONCE_POOL_SIZE = 5;
+
 //#endregion
 //#region src/modules/apiClient/constants.ts
 const DYNAMIC_API_VERSION_HEADER = "x-dyn-api-version";
@@ -124,10 +131,12 @@ const CLIENT_SDK_NAME = "ClientSDK";
 
 //#endregion
 //#region src/utils/randomString/randomString.ts
-const randomString = (length) => {
-	const CHARS = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";
+const DEFAULT_CHARS = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
+const randomString = ({ chars = DEFAULT_CHARS, length }) => {
+	const bytes = new Uint8Array(length);
+	crypto.getRandomValues(bytes);
 	let result = "";
-	for (let i = length; i > 0; --i) result += CHARS[Math.floor(Math.random() * 64)];
+	for (let i = 0; i < length; i++) result += chars[bytes[i] % chars.length];
 	return result;
 };
 
@@ -355,6 +364,226 @@ const createConvertToApiErrorMiddleware = ({ errorMappers = [] }) => ({ post: as
 	return context.response;
 } });
 
+//#endregion
+//#region src/utils/getNonce/getNonce.ts
+/**
+* Returns a nonce for wallet ownership verification.
+*
+* Pops the first nonce from the prefetched pool. When the pool is running low
+* (≤1 remaining after pop) a background refetch is triggered. If the pool is
+* empty, nonces are fetched on-demand before returning.
+*/
+const getNonce = async (client) => {
+	const core = getCore(client);
+	const pool = core.state.get().prefetchedNonces;
+	if (pool.length > 0) {
+		const [nonce, ...remaining] = pool;
+		core.state.set({ prefetchedNonces: remaining });
+		if (remaining.length <= 1) fetchAndStoreNonces(client);
+		return nonce;
+	}
+	await fetchAndStoreNonces(client);
+	return getNonce(client);
+};
+
+//#endregion
+//#region src/utils/bufferToHex/bufferToHex.ts
+/**
+* Converts an ArrayBuffer or Uint8Array to a hex-encoded string
+*/
+const bufferToHex = (buffer) => [...buffer instanceof Uint8Array ? buffer : new Uint8Array(buffer)].map((x) => x.toString(16).padStart(2, "0")).join("");
+
+//#endregion
+//#region src/utils/p256Sign/p256Sign.ts
+const p256Sign = async ({ privateKeyJwk, message }) => {
+	const privateKey = await crypto.subtle.importKey("jwk", privateKeyJwk, {
+		name: "ECDSA",
+		namedCurve: "P-256"
+	}, false, ["sign"]);
+	return bufferToHex(await crypto.subtle.sign({
+		hash: "SHA-256",
+		name: "ECDSA"
+	}, privateKey, new TextEncoder().encode(message)));
+};
+
+//#endregion
+//#region src/services/storage/createStorageKeySchema/createStorageKeySchema.ts
+const createStorageKeySchema = (params) => {
+	return params;
+};
+
+//#endregion
+//#region src/utils/base64UrlDecode/base64UrlDecode.ts
+/**
+* Takes a base64url-encoded string (e.g. "nMueRPiAm51YXEjRtka8S_8Ura3HaqbmqDqMJCZmvkM")
+* and return the corresponding bytes, as an array buffer.
+*/
+const base64UrlDecode = (s) => {
+	s = s?.replace(/-/g, "+").replace(/_/g, "/") || "";
+	return Uint8Array.from(atob(s), (c) => c.charCodeAt(0));
+};
+
+//#endregion
+//#region src/utils/compressRawPublicKey/compressRawPublicKey.ts
+/**
+* Accepts a public key array buffer, and returns a buffer with the compressed version of the public key
+*/
+const compressRawPublicKey = (rawPublicKey) => {
+	const rawPublicKeyBytes = new Uint8Array(rawPublicKey);
+	const len = rawPublicKeyBytes.byteLength;
+	const compressedBytes = rawPublicKeyBytes.slice(0, 1 + len >>> 1);
+	compressedBytes[0] = 2 | rawPublicKeyBytes[len - 1] & 1;
+	return compressedBytes.buffer;
+};
+
+//#endregion
+//#region src/utils/p256Keygen/p256Keygen.ts
+const p256Keygen = async () => {
+	const p256Keypair = await crypto.subtle.generateKey({
+		name: "ECDSA",
+		namedCurve: "P-256"
+	}, true, ["sign", "verify"]);
+	const rawPublicKey = await crypto.subtle.exportKey("raw", p256Keypair.publicKey);
+	const privateKeyJwk = await crypto.subtle.exportKey("jwk", p256Keypair.privateKey);
+	const compressedPublicKeyBuffer = compressRawPublicKey(rawPublicKey);
+	return {
+		private: bufferToHex(base64UrlDecode(privateKeyJwk.d)),
+		privateJwk: privateKeyJwk,
+		public: bufferToHex(compressedPublicKeyBuffer)
+	};
+};
+
+//#endregion
+//#region src/modules/deviceRegistration/getDeviceSigner/deviceSigningKeys.schema.ts
+const deviceSigningKeysSchema = z.object({
+	privateJwk: z.custom(),
+	privateKey: z.string(),
+	publicKey: z.string()
+});
+
+//#endregion
+//#region src/modules/deviceRegistration/getDeviceSigner/getOrCreateEnvironmentDeviceSigningKeys/getOrCreateEnvironmentDeviceSigningKeys.ts
+/**
+* On web we want to auto create the device signing keys for each user.
+* And the user device signing keys should never be deleted.
+*/
+const getOrCreateEnvironmentDeviceSigningKeys = async (client) => {
+	const { storage, environmentId } = getCore(client);
+	assertDefined(environmentId, "Environment ID is required");
+	const environmentDeviceSigningKeysStorageKeySchema = createStorageKeySchema({
+		key: `user_device_signing_keys_${environmentId}`,
+		schema: deviceSigningKeysSchema
+	});
+	const deviceSigningKeys = await storage.getItem(environmentDeviceSigningKeysStorageKeySchema);
+	if (deviceSigningKeys) return deviceSigningKeys;
+	const { public: publicKey, private: privateKey, privateJwk } = await p256Keygen();
+	await storage.setItem(environmentDeviceSigningKeysStorageKeySchema, {
+		privateJwk,
+		privateKey,
+		publicKey
+	});
+	return {
+		privateJwk,
+		privateKey,
+		publicKey
+	};
+};
+
+//#endregion
+//#region src/modules/deviceRegistration/getDeviceSigner/getDeviceSigner.ts
+const getDeviceSigner = async (client) => {
+	const { deviceSigner } = getCore(client);
+	/**
+	* If the device signer is available, it should handle the device signing
+	* This is used for mobile devices with secure enclave.
+	*/
+	if (deviceSigner) return deviceSigner;
+	/**
+	* For web devices we want to auto create one PK per user id.
+	*/
+	const environmentDeviceSigningKeys = await getOrCreateEnvironmentDeviceSigningKeys(client);
+	return {
+		getPublicKey: async () => environmentDeviceSigningKeys.publicKey,
+		sign: (payload) => p256Sign({
+			message: payload,
+			privateKeyJwk: environmentDeviceSigningKeys.privateJwk
+		})
+	};
+};
+
+//#endregion
+//#region src/modules/deviceRegistration/getHeadersForNonceSignedByDeviceSigners/getHeadersForNonceSignedByDeviceSigners.ts
+const getHeadersForNonceSignedByDeviceSigners = async (client) => {
+	const { projectSettings } = client;
+	assertDefined(projectSettings, "Project settings not found");
+	/**
+	* For cookie based environments, the device registration is handled
+	* by settings the cookie in the browser.
+	* Then we dont need to provide the headers
+	*/
+	if (isCookieEnabled(client)) return {};
+	const deviceSigner = await getDeviceSigner(client);
+	const nonce = await getNonce(client);
+	const signedNonce = await deviceSigner.sign(nonce);
+	const publicKey = await deviceSigner.getPublicKey();
+	return {
+		"x-dynamic-device-nonce": nonce,
+		"x-dynamic-device-publickey": publicKey,
+		"x-dynamic-device-signed-nonce": signedNonce
+	};
+};
+
+//#endregion
+//#region src/modules/apiClient/utils/deviceSignatureHeadersMiddleware/createDeviceSignatureHeadersMiddleware.ts
+const createDeviceSignatureHeadersMiddleware = (client) => {
+	return { pre: async (context) => {
+		/**
+		* The signed nonce is not required for cookie based environments.
+		*/
+		if (isDeviceNonceSignatureRequiredForUrl(context.url) && !isCookieEnabled(client)) {
+			const deviceSignerHeaders = await getHeadersForNonceSignedByDeviceSigners(client);
+			return {
+				init: {
+					...context.init,
+					headers: {
+						...context.init.headers,
+						...deviceSignerHeaders
+					}
+				},
+				url: context.url
+			};
+		}
+	} };
+};
+
+//#endregion
+//#region src/errors/UnauthorizedError.ts
+var UnauthorizedError = class extends BaseError {
+	constructor({ cause }) {
+		super({
+			cause,
+			code: "unauthorized_error",
+			docsUrl: null,
+			name: "UnauthorizedError",
+			shortMessage: "Unauthorized"
+		});
+	}
+};
+
+//#endregion
+//#region src/modules/apiClient/utils/unauthorizedMiddleware/createUnauthorizedMiddleware.ts
+const createUnauthorizedMiddleware = () => ({ post: async (context) => {
+	if (context.response.status === 401) {
+		let cause = null;
+		try {
+			const errorBody = await context.response.clone().json();
+			if (errorBody && "error" in errorBody && typeof errorBody.error === "string") cause = new Error(errorBody.error);
+		} catch {}
+		throw new UnauthorizedError({ cause });
+	}
+	return context.response;
+} });
+
 //#endregion
 //#region src/modules/apiClient/createApiClient.ts
 /**
@@ -370,7 +599,7 @@ const createApiClient = (options = {}, client) => {
 		headers: {
 			"Content-Type": "application/json",
 			[DYNAMIC_API_VERSION_HEADER]: `API/${DYNAMIC_SDK_API_VERSION}`,
-			[DYNAMIC_REQUEST_ID_HEADER]: randomString(50),
+			[DYNAMIC_REQUEST_ID_HEADER]: randomString({ length: 50 }),
 			[DYNAMIC_SDK_VERSION_HEADER]: `${CLIENT_SDK_NAME}/${version}`,
 			...core.getApiHeaders(),
 			...options.headers
@@ -385,10 +614,39 @@ const createApiClient = (options = {}, client) => {
 	return new SDKApi(new Configuration({
 		...settings,
 		fetchApi: core.fetch,
-		middleware: [createConvertToApiErrorMiddleware({ errorMappers: [...options.errorMappers || [], clientErrorMapper] })]
+		middleware: [
+			createDeviceSignatureHeadersMiddleware(client),
+			createConvertToApiErrorMiddleware({ errorMappers: [...options.errorMappers || [], clientErrorMapper] }),
+			createUnauthorizedMiddleware()
+		]
 	}));
 };
 
+//#endregion
+//#region src/utils/getNonce/fetchAndStoreNonces/fetchAndStoreNonces.ts
+/**
+* Fetches a batch of nonces from the API.
+*
+* Prefetching is critical for iOS deep link wallet providers (e.g. Phantom
+* redirect). On iOS, a network request (like fetching a nonce) between a user
+* action and a deeplink call will break the gesture chain, causing iOS to
+* silently ignore the deeplink. By prefetching nonces ahead of time,
+* `getNonce` can return synchronously from cache and the deeplink fires
+* without an interrupting network round-trip.
+*/
+const fetchAndStoreNonces = async (client) => {
+	const core = getCore(client);
+	const { environmentId } = core;
+	const { nonces } = await createApiClient({}, client).getNonces({
+		count: NONCE_POOL_SIZE,
+		environmentId
+	});
+	core.state.set({
+		prefetchedNonces: nonces,
+		prefetchedNoncesExpiration: Date.now() + NONCE_POOL_EXPIRATION_TIME
+	});
+};
+
 //#endregion
 //#region src/modules/wallets/constants.ts
 const CHAINS_INFO_MAP = {
@@ -508,5 +766,5 @@ var InvalidParamError = class extends BaseError {
 };
 
 //#endregion
-export { version as A, DYNAMIC_SDK_API_VERSION as C, BaseError as D, ClientNotFoundError as E, getCore as O, CLIENT_SDK_NAME as S, setDefaultClient as T, getBuffer as _, DYNAMIC_ICONIC_SPRITE_URL as a, ValueMustBeDefinedError as b, CHAINS_INFO_MAP as c, MfaRateLimitedError as d, MfaInvalidOtpError as f, getSessionKeys as g, APIError as h, DYNAMIC_WAAS_METADATA as i, name as k, createApiClient as l, InvalidExternalAuthError as m, DEFAULT_WAAS_BASE_API_URL as n, SDK_API_CORE_VERSION as o, LinkCredentialError as p, DEFAULT_WAAS_BASE_MPC_RELAY_API_URL as r, getChainFromVerifiedCredentialChain as s, InvalidParamError as t, SandboxMaximumThresholdReachedError as u, isCookieEnabled as v, getDefaultClient as w, randomString as x, assertDefined as y };
-//# sourceMappingURL=InvalidParamError-DQn49mNB.esm.js.map
+export { randomString as A, version as B, InvalidExternalAuthError as C, isCookieEnabled as D, getBuffer as E, setDefaultClient as F, ClientNotFoundError as I, BaseError as L, DYNAMIC_SDK_API_VERSION as M, NONCE_POOL_SIZE as N, assertDefined as O, getDefaultClient as P, getCore as R, LinkCredentialError as S, getSessionKeys as T, p256Sign as _, DYNAMIC_ICONIC_SPRITE_URL as a, MfaRateLimitedError as b, CHAINS_INFO_MAP as c, UnauthorizedError as d, createDeviceSignatureHeadersMiddleware as f, createStorageKeySchema as g, p256Keygen as h, DYNAMIC_WAAS_METADATA as i, CLIENT_SDK_NAME as j, ValueMustBeDefinedError as k, fetchAndStoreNonces as l, getDeviceSigner as m, DEFAULT_WAAS_BASE_API_URL as n, SDK_API_CORE_VERSION as o, getHeadersForNonceSignedByDeviceSigners as p, DEFAULT_WAAS_BASE_MPC_RELAY_API_URL as r, getChainFromVerifiedCredentialChain as s, InvalidParamError as t, createApiClient as u, getNonce as v, APIError as w, MfaInvalidOtpError as x, SandboxMaximumThresholdReachedError as y, name as z };
+//# sourceMappingURL=InvalidParamError-Cty-xWsw.esm.js.map

package/dist/InvalidParamError-Cty-xWsw.esm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"InvalidParamError-Cty-xWsw.esm.js","names":["defaultClient: DynamicClient | null","BufferPolyfill","clientErrorMapper: ErrorMapper","errorToThrow: Error","cause: Error | null","settings: ISettings","CHAINS_INFO_MAP: Record<Chain, ChainInfo>","chain"],"sources":["../package.json","../src/client/core/getCore/getCore.ts","../src/errors/base/BaseError.ts","../src/errors/ClientNotFoundError.ts","../src/client/defaultClient/defaultClient.ts","../src/utils/getNonce/constants.ts","../src/modules/apiClient/constants.ts","../src/utils/randomString/randomString.ts","../src/errors/ValueMustBeDefinedError.ts","../src/utils/assertDefined/assertDefined.ts","../src/modules/projectSettings/isCookieEnabled/isCookieEnabled.ts","../src/utils/getBuffer/getBuffer.ts","../src/modules/sessionKeys/getSessionKeys/getSessionKeys.ts","../src/errors/APIError/APIError.ts","../src/errors/InvalidExternalAuthError.ts","../src/errors/LinkCredentialError.ts","../src/errors/MfaInvalidOtpError.ts","../src/errors/MfaRateLimitedError.ts","../src/errors/SandboxMaximumThresholdReachedError.ts","../src/modules/apiClient/utils/clientErrorMapper/clientErrorMapper.ts","../src/modules/apiClient/utils/convertToApiErrorMiddleware/convertToApiErrorMiddleware.ts","../src/utils/getNonce/getNonce.ts","../src/utils/bufferToHex/bufferToHex.ts","../src/utils/p256Sign/p256Sign.ts","../src/services/storage/createStorageKeySchema/createStorageKeySchema.ts","../src/utils/base64UrlDecode/base64UrlDecode.ts","../src/utils/compressRawPublicKey/compressRawPublicKey.ts","../src/utils/p256Keygen/p256Keygen.ts","../src/modules/deviceRegistration/getDeviceSigner/deviceSigningKeys.schema.ts","../src/modules/deviceRegistration/getDeviceSigner/getOrCreateEnvironmentDeviceSigningKeys/getOrCreateEnvironmentDeviceSigningKeys.ts","../src/modules/deviceRegistration/getDeviceSigner/getDeviceSigner.ts","../src/modules/deviceRegistration/getHeadersForNonceSignedByDeviceSigners/getHeadersForNonceSignedByDeviceSigners.ts","../src/modules/apiClient/utils/deviceSignatureHeadersMiddleware/createDeviceSignatureHeadersMiddleware.ts","../src/errors/UnauthorizedError.ts","../src/modules/apiClient/utils/unauthorizedMiddleware/createUnauthorizedMiddleware.ts","../src/modules/apiClient/createApiClient.ts","../src/utils/getNonce/fetchAndStoreNonces/fetchAndStoreNonces.ts","../src/modules/wallets/constants.ts","../src/utils/getChainFromVerifiedCredentialChain/getChainFromVerifiedCredentialChain.ts","../src/constants.ts","../src/modules/waas/constants.ts","../src/errors/InvalidParamError.ts"],"sourcesContent":["","import type { DynamicClient } from '../../types';\nimport type { DynamicCore } from '../types';\n\nexport const getCore = (client: DynamicClient): DynamicCore => {\n  // @ts-expect-error - this was hidden from the public API\n  return client.__core;\n};\n","import { version } from '../../../package.json';\n\nexport type BaseErrorParameters = {\n  /** The underlying error that caused this error, if any */\n  cause: Error | null;\n  /** The error unique code */\n  code: string;\n  /** Additional detailed information about the error */\n  details?: string;\n  /** URL to relevant documentation for this error */\n  docsUrl: string | null;\n  /** Array of additional contextual messages to be displayed */\n  metaMessages?: string[];\n  /** Custom name for the error. Defaults to 'BaseError' if not provided */\n  name: string;\n  /** A brief, human-readable description of the error */\n  shortMessage: string;\n};\n\nconst getDetails = ({ details, cause }: BaseErrorParameters) => {\n  if (cause instanceof BaseError) {\n    return cause.details;\n  }\n\n  if (cause?.message) {\n    return cause.message;\n  }\n\n  return details;\n};\n\n/**\n * Formats the error message with all available information\n */\nconst formatMessage = ({\n  shortMessage,\n  details,\n  docsUrl,\n  metaMessages,\n}: BaseErrorParameters) => {\n  return [\n    '[Dynamic JS SDK]',\n    shortMessage,\n    '',\n    ...(metaMessages ? [...metaMessages, ''] : []),\n    ...(docsUrl ? [`Docs: ${docsUrl}`] : []),\n    ...(details ? [`Details: ${details}`] : []),\n    `Version: ${version}`,\n    `Timestamp: ${new Date().toISOString()}`,\n  ].join('\\n');\n};\n\n/**\n * Base error class that provides structured error handling with detailed information\n */\nexport abstract class BaseError extends Error {\n  /** The error unique code */\n  code: string;\n  details: string | undefined;\n  private readonly formattedMessage: string | undefined;\n  override name = 'BaseError';\n  override cause: BaseError | Error | undefined;\n\n  constructor(args: BaseErrorParameters) {\n    const details = getDetails(args);\n    const formattedMessage = formatMessage({ ...args, details });\n    super(\n      args.shortMessage ?? formattedMessage,\n      args.cause ? { cause: args.cause } : undefined\n    );\n\n    this.formattedMessage = formattedMessage;\n    this.details = details;\n    this.name = args.name ?? this.name;\n    this.cause = args.cause ?? this.cause;\n    this.code = args.code;\n  }\n\n  /**\n   * Walks the cause chain of the error and returns the root error\n   */\n  walk(): Error | undefined {\n    const cause = this.cause;\n\n    if (cause instanceof BaseError) {\n      return cause.walk();\n    }\n\n    return cause;\n  }\n\n  override toString() {\n    return this.formattedMessage;\n  }\n}\n","import { BaseError } from './base';\n\nexport class ClientNotFoundError extends BaseError {\n  constructor() {\n    super({\n      cause: null,\n      code: 'client_not_found_error',\n      docsUrl: null,\n      name: 'ClientNotFoundError',\n      shortMessage:\n        'No Dynamic client has been created yet. Make sure you have called createDynamicClient() first.',\n    });\n  }\n}\n","import { ClientNotFoundError } from '../../errors/ClientNotFoundError';\nimport { getCore } from '../core/getCore';\nimport type { DynamicClient } from '../types';\n\nlet defaultClient: DynamicClient | null = null;\nlet numOfInitializedClients = 0;\n\n/**\n * Returns the DynamicClient instance that was initialized with createDynamicClient.\n *\n * If more than one instance of DynamicClient was initialized, you should not use this function.\n * Instead, you should pass the client instance you stored to the function that needs it.\n */\nexport const getDefaultClient = (): DynamicClient => {\n  if (!defaultClient) {\n    throw new ClientNotFoundError();\n  }\n\n  if (numOfInitializedClients > 1) {\n    const core = getCore(defaultClient);\n    core.logger.debug(\n      'Multiple instances of DynamicClient found. If you are only using one client (recommended), make sure you are not calling ' +\n        '\"createDynamicClient\" multiple times. If you are using multiple clients, make sure you are passing which client to use as ' +\n        'the last param of all Dynamic functions.'\n    );\n  }\n\n  return defaultClient;\n};\n\nexport const setDefaultClient = (client: DynamicClient) => {\n  defaultClient = client;\n  numOfInitializedClients++;\n};\n","export const NONCE_POOL_EXPIRATION_TIME = 60000 * 60 * 24;\n\nexport const NONCE_POOL_SIZE = 5;\n","import { dependencies } from '../../../package.json';\n\nexport const DYNAMIC_API_VERSION_HEADER = 'x-dyn-api-version';\n\nexport const DYNAMIC_REQUEST_ID_HEADER = 'x-dyn-request-id';\n\nexport const DYNAMIC_SDK_VERSION_HEADER = 'x-dyn-version';\n\nexport const MFA_TOKEN_HEADER = 'x-mfa-auth-token';\n\nexport const SESSION_PUBLIC_KEY_HEADER = 'x-dyn-session-public-key';\n\nexport const DYNAMIC_SDK_API_VERSION =\n  dependencies['@dynamic-labs/sdk-api-core'];\n\nexport const CLIENT_SDK_NAME = 'ClientSDK';\n","const DEFAULT_CHARS =\n  'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';\n\ntype RandomStringParams = {\n  chars?: string;\n  length: number;\n};\n\nexport const randomString = ({ chars = DEFAULT_CHARS, length }: RandomStringParams) => {\n  const bytes = new Uint8Array(length);\n  crypto.getRandomValues(bytes);\n\n  let result = '';\n  for (let i = 0; i < length; i++) {\n    result += chars[bytes[i] % chars.length];\n  }\n  return result;\n};\n","import { BaseError } from './base';\n\nexport class ValueMustBeDefinedError extends BaseError {\n  constructor(message: string) {\n    super({\n      cause: null,\n      code: 'value_must_be_defined_error',\n      docsUrl: null,\n      name: 'ValueMustBeDefined',\n      shortMessage: message,\n    });\n  }\n}\n","/* eslint-disable func-style -- javascript requires this to be a function */\n\nimport { ValueMustBeDefinedError } from './../../errors/ValueMustBeDefinedError';\n\n/**\n * Asserts that a value is not null or undefined, throwing an error if it is.\n * This function acts as a type guard, narrowing the type to exclude null and undefined.\n *\n * @template T - The type of the value being checked\n * @param value - The value to check for null or undefined\n * @param message - The error message to throw if the value is null or undefined\n * @throws Throws an error with the provided message if value is null or undefined\n * @example\n * ```typescript\n * const maybeString: string | null = getValue();\n * assertDefined(maybeString, 'String value is required');\n * // maybeString is now typed as string (null is excluded)\n * ```\n */\nexport function assertDefined<T>(\n  value: T,\n  message: string\n): asserts value is Exclude<NonNullable<T>, void> {\n  if (value === null || value === undefined) {\n    throw new ValueMustBeDefinedError(message);\n  }\n}\n","import { AuthStorageEnum } from '@dynamic-labs/sdk-api-core';\n\nimport type { DynamicClient } from '../../../client/types';\nimport { assertDefined } from '../../../utils/assertDefined';\n\n/**\n * Returns true if the client is using Dynamic cookies or a BYO JWT cookie.\n */\nexport const isCookieEnabled = (client: DynamicClient): boolean => {\n  assertDefined(client.projectSettings, 'Project settings are not defined');\n\n  const securitySettings = client.projectSettings.security;\n\n  if (!securitySettings) return false;\n\n  // client uses Dynamic cookies\n  const dynamicCookiesEnabled = (securitySettings.auth?.storage || []).includes(\n    AuthStorageEnum.Cookie\n  );\n\n  // BYO JWT client puts their non-Dynamic JWT in a cookie\n  const byoJwtCookieEnabled = Boolean(\n    securitySettings.externalAuth?.cookieName\n  );\n\n  // should return true for both of these scenarios\n  // because we also need to do `credentials: true` in api.ts when\n  // a byo jwt client sets their named cookie for their jwt and\n  // needs to send it to our backend\n  return dynamicCookiesEnabled || byoJwtCookieEnabled;\n};\n","/* eslint-disable no-restricted-globals */\nimport { Buffer as BufferPolyfill } from 'buffer';\n\nexport const getBuffer = () =>\n  typeof Buffer !== 'undefined' ? Buffer : BufferPolyfill;\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { getBuffer } from '../../../utils/getBuffer';\nimport type { SessionKeys } from '../sessionKeys.types';\n\nexport const getSessionKeys = (client: DynamicClient) => {\n  const core = getCore(client);\n\n  const encodedKeys = core.state.get().sessionKeys;\n\n  if (!encodedKeys) {\n    return undefined;\n  }\n\n  try {\n    const decodedKeys: SessionKeys = JSON.parse(\n      getBuffer().from(encodedKeys, 'base64').toString()\n    );\n\n    return decodedKeys;\n  } catch (error) {\n    core.logger.error('Error decoding session keys', error);\n    return undefined;\n  }\n};\n","import { BaseError } from '../base';\n\nexport class APIError extends BaseError {\n  status: number;\n\n  constructor(message: string, code: string, status: number) {\n    super({\n      cause: null,\n      code,\n      docsUrl: null,\n      name: 'APIError',\n      shortMessage: message,\n    });\n\n    this.status = status;\n  }\n\n  static async fromResponse(response: Response) {\n    try {\n      const errorBody = await response.clone().json();\n\n      if (\n        errorBody &&\n        'error' in errorBody &&\n        typeof errorBody.error === 'string'\n      ) {\n        const errorCode =\n          'code' in errorBody && typeof errorBody.code === 'string'\n            ? errorBody.code\n            : 'unknown_error';\n\n        return new APIError(errorBody.error, errorCode, response.status);\n      }\n\n      return null;\n    } catch {\n      return null;\n    }\n  }\n}\n","import { BaseError, type BaseErrorParameters } from './base';\n\nexport class InvalidExternalAuthError extends BaseError {\n  constructor({ cause }: Pick<BaseErrorParameters, 'cause'>) {\n    super({\n      cause,\n      code: 'invalid_external_auth_error',\n      docsUrl:\n        'https://www.dynamic.xyz/docs/external-auth/third-party-auth-overview',\n      name: 'InvalidExternalAuthError',\n      shortMessage: 'Error authenticating with external JWT',\n    });\n  }\n}\n","import { BaseError, type BaseErrorParameters } from './base';\n\nexport class LinkCredentialError extends BaseError {\n  constructor({ cause }: Pick<BaseErrorParameters, 'cause'>) {\n    super({\n      cause,\n      code: 'link_credential_error',\n      docsUrl: null,\n      name: 'LinkCredentialError',\n      shortMessage:\n        'The credential you are trying to link is associated with another account and cannot be reassigned.',\n    });\n  }\n}\n","import { BaseError, type BaseErrorParameters } from './base';\n\nexport class MfaInvalidOtpError extends BaseError {\n  constructor({ cause }: Pick<BaseErrorParameters, 'cause'>) {\n    super({\n      cause,\n      code: 'mfa_invalid_otp_error',\n      docsUrl: null,\n      name: 'MfaInvalidOtpError',\n      shortMessage: 'Invalid OTP',\n    });\n  }\n}\n","import { BaseError, type BaseErrorParameters } from './base';\n\nexport class MfaRateLimitedError extends BaseError {\n  constructor({ cause }: Pick<BaseErrorParameters, 'cause'>) {\n    super({\n      cause,\n      code: 'mfa_rate_limited_error',\n      docsUrl: null,\n      name: 'MfaRateLimitedError',\n      shortMessage: 'Rate limited',\n    });\n  }\n}\n","import { BaseError, type BaseErrorParameters } from './base';\n\nexport class SandboxMaximumThresholdReachedError extends BaseError {\n  constructor({ cause }: Pick<BaseErrorParameters, 'cause'>) {\n    super({\n      cause,\n      code: 'sandbox_maximum_threshold_reached_error',\n      docsUrl:\n        'https://www.dynamic.xyz/docs/developer-dashboard/sandbox-vs-live#sandbox-vs-live',\n      name: 'SandboxMaximumThresholdReachedError',\n      shortMessage:\n        'Your sandbox environment has reached the maximum MAU. Please use a live environment for production traffic.',\n    });\n  }\n}\n","import { APIError } from '../../../../errors/APIError';\nimport { InvalidExternalAuthError } from '../../../../errors/InvalidExternalAuthError';\nimport { LinkCredentialError } from '../../../../errors/LinkCredentialError';\nimport { MfaInvalidOtpError } from '../../../../errors/MfaInvalidOtpError';\nimport { MfaRateLimitedError } from '../../../../errors/MfaRateLimitedError';\nimport { SandboxMaximumThresholdReachedError } from '../../../../errors/SandboxMaximumThresholdReachedError';\nimport type { ErrorMapper } from '../../apiClient.types';\n\n/**\n * Default error mapper for the client that handles common API error codes.\n *\n * This mapper transforms specific API error codes into more specific error types:\n * - `mfa_invalid_code` → `MfaInvalidOtpError`\n * - `mfa_rate_limited` → `MfaRateLimitedError`\n *\n * @param error - The error to be mapped\n * @returns A transformed error if the error code matches a known pattern, or null if no transformation is needed\n *\n * @example\n * ```typescript\n * // This will be automatically applied to all API errors\n * const apiClient = createApiClient({}, client);\n *\n * // The clientErrorMapper will automatically convert mfa_invalid_code errors\n * // to MfaInvalidOtpError instances\n * ```\n */\nexport const clientErrorMapper: ErrorMapper = (error) => {\n  if (error instanceof APIError) {\n    if (error.code === 'mfa_invalid_code') {\n      return new MfaInvalidOtpError({ cause: error });\n    }\n\n    if (error.code === 'mfa_rate_limited') {\n      return new MfaRateLimitedError({ cause: error });\n    }\n\n    if (error.code === 'invalid_external_auth') {\n      return new InvalidExternalAuthError({ cause: error });\n    }\n\n    if (error.code === 'sandbox_maximum_threshold_reached') {\n      return new SandboxMaximumThresholdReachedError({ cause: error });\n    }\n\n    if (\n      error.code === 'merge_accounts_invalid' ||\n      error.code === 'reassign_wallet_error'\n    ) {\n      return new LinkCredentialError({ cause: error });\n    }\n  }\n\n  return null;\n};\n","import type { Middleware, ResponseContext } from '@dynamic-labs/sdk-api-core';\n\nimport { APIError } from '../../../../errors/APIError';\nimport type { ErrorMapper } from '../../apiClient.types';\n\ntype CreateConvertToApiErrorMiddlewareOptions = {\n  errorMappers?: ErrorMapper[];\n};\n\n/**\n * Creates middleware that converts HTTP error responses to APIError instances\n * and optionally applies custom error mappers to transform them into specific error types.\n *\n * @param options.errorMappers - Array of error mappers to apply to API errors\n * @returns A middleware function that handles error conversion and mapping\n */\nexport const createConvertToApiErrorMiddleware = ({\n  errorMappers = [],\n}: CreateConvertToApiErrorMiddlewareOptions): Middleware => ({\n  post: async (context: ResponseContext) => {\n    if (context.response.status >= 400) {\n      const apiError = await APIError.fromResponse(context.response);\n\n      if (apiError) {\n        let errorToThrow: Error = apiError;\n\n        for (const mapper of errorMappers) {\n          const newError = mapper(apiError);\n\n          if (newError) {\n            errorToThrow = newError;\n            break;\n          }\n        }\n\n        throw errorToThrow;\n      }\n    }\n\n    return context.response;\n  },\n});\n","import { getCore } from '../../client/core/getCore';\nimport type { DynamicClient } from '../../client/types';\nimport { fetchAndStoreNonces } from './fetchAndStoreNonces/fetchAndStoreNonces';\n\n/**\n * Returns a nonce for wallet ownership verification.\n *\n * Pops the first nonce from the prefetched pool. When the pool is running low\n * (≤1 remaining after pop) a background refetch is triggered. If the pool is\n * empty, nonces are fetched on-demand before returning.\n */\nexport const getNonce = async (\n  client: DynamicClient\n): Promise<string> => {\n  const core = getCore(client);\n  const pool = core.state.get().prefetchedNonces;\n\n  if (pool.length > 0) {\n    const [nonce, ...remaining] = pool;\n\n    core.state.set({ prefetchedNonces: remaining });\n\n    if (remaining.length <= 1) {\n      void fetchAndStoreNonces(client);\n    }\n\n    return nonce;\n  }\n\n  await fetchAndStoreNonces(client);\n\n  return getNonce(client);\n};\n","/**\n * Converts an ArrayBuffer or Uint8Array to a hex-encoded string\n */\nexport const bufferToHex = (buffer: ArrayBufferLike | Uint8Array) =>\n  [...(buffer instanceof Uint8Array ? buffer : new Uint8Array(buffer))]\n    .map((x) => x.toString(16).padStart(2, '0'))\n    .join('');\n","import { bufferToHex } from '../bufferToHex';\n\ntype P256SignParams = {\n  message: string;\n  privateKeyJwk: JsonWebKey;\n};\n\nexport const p256Sign = async ({ privateKeyJwk, message }: P256SignParams) => {\n  const privateKey = await crypto.subtle.importKey(\n    'jwk',\n    privateKeyJwk,\n    {\n      name: 'ECDSA',\n      namedCurve: 'P-256',\n    },\n    false,\n    ['sign']\n  );\n\n  const signature = await crypto.subtle.sign(\n    {\n      hash: 'SHA-256',\n      name: 'ECDSA',\n    },\n    privateKey,\n    new TextEncoder().encode(message)\n  );\n\n  return bufferToHex(signature);\n};\n","import type * as z from 'zod/mini';\n\nimport type { StorageKeySchema } from '../storage.types';\n\nexport const createStorageKeySchema = <T>(params: {\n  key: string;\n  schema: z.ZodMiniType<T>;\n}): StorageKeySchema<T> => {\n  return params;\n};\n","/**\n * Takes a base64url-encoded string (e.g. \"nMueRPiAm51YXEjRtka8S_8Ura3HaqbmqDqMJCZmvkM\")\n * and return the corresponding bytes, as an array buffer.\n */\nexport const base64UrlDecode = (s?: string) => {\n  // Go from base64url encoding to base64 encoding\n  s = s?.replace(/-/g, '+').replace(/_/g, '/') || '';\n  // use `atob` to decode base64\n  return Uint8Array.from(atob(s), (c) => c.charCodeAt(0));\n};\n","/**\n * Accepts a public key array buffer, and returns a buffer with the compressed version of the public key\n */\nexport const compressRawPublicKey = (rawPublicKey: ArrayBuffer) => {\n  const rawPublicKeyBytes = new Uint8Array(rawPublicKey);\n  const len = rawPublicKeyBytes.byteLength;\n\n  // Drop the y coordinate\n  const compressedBytes = rawPublicKeyBytes.slice(0, (1 + len) >>> 1);\n\n  // Encode the parity of `y` in first bit\n  compressedBytes[0] = 0x2 | (rawPublicKeyBytes[len - 1] & 0x01);\n  return compressedBytes.buffer;\n};\n","import { base64UrlDecode } from '../base64UrlDecode';\nimport { bufferToHex } from '../bufferToHex';\nimport { compressRawPublicKey } from '../compressRawPublicKey';\n\nexport const p256Keygen = async () => {\n  // Create a new P-256 keypair\n  const p256Keypair = await crypto.subtle.generateKey(\n    {\n      name: 'ECDSA',\n      namedCurve: 'P-256',\n    },\n    true,\n    ['sign', 'verify']\n  );\n\n  // Export the raw public key. By default this will export in uncompressed format\n  const rawPublicKey = await crypto.subtle.exportKey(\n    'raw',\n    p256Keypair.publicKey\n  );\n\n  // We need to export with JWK format because exporting EC private keys with \"raw\" isn't supported\n  const privateKeyJwk = await crypto.subtle.exportKey(\n    'jwk',\n    p256Keypair.privateKey\n  );\n\n  const compressedPublicKeyBuffer = compressRawPublicKey(rawPublicKey);\n\n  const privateKeyBuffer = base64UrlDecode(privateKeyJwk.d);\n\n  return {\n    private: bufferToHex(privateKeyBuffer),\n    privateJwk: privateKeyJwk,\n    public: bufferToHex(compressedPublicKeyBuffer),\n  };\n};\n","import * as z from 'zod/mini';\n\nexport const deviceSigningKeysSchema = z.object({\n  privateJwk: z.custom<JsonWebKey>(),\n  privateKey: z.string(),\n  publicKey: z.string(),\n});\n","import type * as z from 'zod/mini';\n\nimport { getCore } from '../../../../client/core/getCore';\nimport type { DynamicClient } from '../../../../client/types';\nimport { createStorageKeySchema } from '../../../../services/storage';\nimport { assertDefined } from '../../../../utils/assertDefined';\nimport { p256Keygen } from '../../../../utils/p256Keygen';\nimport { deviceSigningKeysSchema } from '../deviceSigningKeys.schema';\n\n/**\n * On web we want to auto create the device signing keys for each user.\n * And the user device signing keys should never be deleted.\n */\nexport const getOrCreateEnvironmentDeviceSigningKeys = async (\n  client: DynamicClient\n): Promise<z.infer<typeof deviceSigningKeysSchema>> => {\n  const { storage, environmentId } = getCore(client);\n\n  assertDefined(environmentId, 'Environment ID is required');\n\n  const environmentDeviceSigningKeysStorageKeySchema = createStorageKeySchema({\n    key: `user_device_signing_keys_${environmentId}`,\n    schema: deviceSigningKeysSchema,\n  });\n\n  const deviceSigningKeys = await storage.getItem(\n    environmentDeviceSigningKeysStorageKeySchema\n  );\n\n  if (deviceSigningKeys) {\n    return deviceSigningKeys;\n  }\n\n  const {\n    public: publicKey,\n    private: privateKey,\n    privateJwk,\n  } = await p256Keygen();\n\n  await storage.setItem(environmentDeviceSigningKeysStorageKeySchema, {\n    privateJwk,\n    privateKey,\n    publicKey,\n  });\n\n  return {\n    privateJwk,\n    privateKey,\n    publicKey,\n  };\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport type { DeviceSigner } from '../../../services/deviceSigner';\nimport { p256Sign } from '../../../utils/p256Sign';\nimport { getOrCreateEnvironmentDeviceSigningKeys } from './getOrCreateEnvironmentDeviceSigningKeys';\n\nexport const getDeviceSigner = async (\n  client: DynamicClient\n): Promise<DeviceSigner> => {\n  const { deviceSigner } = getCore(client);\n\n  /**\n   * If the device signer is available, it should handle the device signing\n   * This is used for mobile devices with secure enclave.\n   */\n  if (deviceSigner) {\n    return deviceSigner;\n  }\n\n  /**\n   * For web devices we want to auto create one PK per user id.\n   */\n  const environmentDeviceSigningKeys =\n    await getOrCreateEnvironmentDeviceSigningKeys(client);\n\n  return {\n    getPublicKey: async () => environmentDeviceSigningKeys.publicKey,\n    sign: (payload: string) =>\n      p256Sign({\n        message: payload,\n        privateKeyJwk: environmentDeviceSigningKeys.privateJwk,\n      }),\n  };\n};\n","import type { DynamicClient } from '../../../client/types';\nimport { assertDefined } from '../../../utils/assertDefined';\nimport { getNonce } from '../../../utils/getNonce';\nimport { isCookieEnabled } from '../../projectSettings/isCookieEnabled';\nimport { getDeviceSigner } from '../getDeviceSigner';\n\nexport const getHeadersForNonceSignedByDeviceSigners = async (\n  client: DynamicClient\n): Promise<Record<string, string>> => {\n  const { projectSettings } = client;\n\n  assertDefined(projectSettings, 'Project settings not found');\n\n  /**\n   * For cookie based environments, the device registration is handled\n   * by settings the cookie in the browser.\n   * Then we dont need to provide the headers\n   */\n  if (isCookieEnabled(client)) {\n    return {};\n  }\n\n  const deviceSigner = await getDeviceSigner(client);\n\n  const nonce = await getNonce(client);\n\n  const signedNonce = await deviceSigner.sign(nonce);\n  const publicKey = await deviceSigner.getPublicKey();\n\n  return {\n    'x-dynamic-device-nonce': nonce,\n    'x-dynamic-device-publickey': publicKey,\n    'x-dynamic-device-signed-nonce': signedNonce,\n  };\n};\n","import type { Middleware } from '@dynamic-labs/sdk-api-core';\nimport { isDeviceNonceSignatureRequiredForUrl } from '@dynamic-labs/sdk-api-core';\n\nimport type { DynamicClient } from '../../../../client/types';\nimport { getHeadersForNonceSignedByDeviceSigners } from '../../../deviceRegistration/getHeadersForNonceSignedByDeviceSigners';\nimport { isCookieEnabled } from '../../../projectSettings/isCookieEnabled';\n\nexport const createDeviceSignatureHeadersMiddleware = (\n  client: DynamicClient\n): Middleware => {\n  return {\n    pre: async (context) => {\n      /**\n       * The signed nonce is not required for cookie based environments.\n       */\n      if (\n        isDeviceNonceSignatureRequiredForUrl(context.url) &&\n        !isCookieEnabled(client)\n      ) {\n        const deviceSignerHeaders = await getHeadersForNonceSignedByDeviceSigners(\n          client\n        );\n\n        return {\n          init: {\n            ...context.init,\n            headers: {\n              ...context.init.headers,\n              ...deviceSignerHeaders,\n            },\n          },\n          url: context.url,\n        };\n      }\n\n      return;\n    },\n  };\n};\n","import { BaseError, type BaseErrorParameters } from './base';\n\nexport class UnauthorizedError extends BaseError {\n  constructor({ cause }: Pick<BaseErrorParameters, 'cause'>) {\n    super({\n      cause,\n      code: 'unauthorized_error',\n      docsUrl: null,\n      name: 'UnauthorizedError',\n      shortMessage: 'Unauthorized',\n    });\n  }\n}\n","import type { Middleware, ResponseContext } from '@dynamic-labs/sdk-api-core';\n\nimport { UnauthorizedError } from '../../../../errors/UnauthorizedError';\n\nexport const createUnauthorizedMiddleware = (): Middleware => ({\n  post: async (context: ResponseContext) => {\n    if (context.response.status === 401) {\n      let cause: Error | null = null;\n\n      try {\n        const errorBody = await context.response.clone().json();\n\n        if (\n          errorBody &&\n          'error' in errorBody &&\n          typeof errorBody.error === 'string'\n        ) {\n          // eslint-disable-next-line no-restricted-syntax\n          cause = new Error(errorBody.error);\n        }\n      } catch {\n        // Response body isn't valid JSON — proceed without a cause\n      }\n\n      throw new UnauthorizedError({ cause });\n    }\n\n    return context.response;\n  },\n});\n","import { Configuration, SDKApi } from '@dynamic-labs/sdk-api-core';\n\nimport { version } from '../../../package.json';\nimport { getCore } from '../../client/core/getCore';\nimport type { DynamicClient } from '../../client/types';\nimport { randomString } from '../../utils/randomString';\nimport { isCookieEnabled } from '../projectSettings/isCookieEnabled';\nimport { getSessionKeys } from '../sessionKeys/getSessionKeys';\nimport type { CreateApiClientOptions } from './apiClient.types';\nimport {\n  CLIENT_SDK_NAME,\n  DYNAMIC_API_VERSION_HEADER,\n  DYNAMIC_REQUEST_ID_HEADER,\n  DYNAMIC_SDK_API_VERSION,\n  DYNAMIC_SDK_VERSION_HEADER,\n  MFA_TOKEN_HEADER,\n  SESSION_PUBLIC_KEY_HEADER,\n} from './constants';\nimport { clientErrorMapper } from './utils/clientErrorMapper';\nimport { createConvertToApiErrorMiddleware } from './utils/convertToApiErrorMiddleware/convertToApiErrorMiddleware';\nimport { createDeviceSignatureHeadersMiddleware } from './utils/deviceSignatureHeadersMiddleware';\nimport { createUnauthorizedMiddleware } from './utils/unauthorizedMiddleware/createUnauthorizedMiddleware';\n\ntype ISettings = {\n  basePath: string;\n  credentials?: 'include';\n  headers: {\n    Authorization?: string;\n    'Content-Type': string;\n    [DYNAMIC_API_VERSION_HEADER]: string;\n    [DYNAMIC_REQUEST_ID_HEADER]: string;\n    [DYNAMIC_SDK_VERSION_HEADER]: string;\n    [MFA_TOKEN_HEADER]?: string;\n    [SESSION_PUBLIC_KEY_HEADER]?: string;\n  };\n};\n\n/**\n * Returns a new instance of the SDK API client.\n *\n * This is not meant for storing, as it is very light we can create it whenever needed.\n */\nexport const createApiClient = (\n  options: CreateApiClientOptions = {},\n  client: DynamicClient\n) => {\n  const core = getCore(client);\n  const coreState = core.state.get();\n\n  const settings: ISettings = {\n    basePath: core.apiBaseUrl,\n    headers: {\n      'Content-Type': 'application/json',\n      [DYNAMIC_API_VERSION_HEADER]: `API/${DYNAMIC_SDK_API_VERSION}`,\n      [DYNAMIC_REQUEST_ID_HEADER]: randomString({ length: 50 }),\n      [DYNAMIC_SDK_VERSION_HEADER]: `${CLIENT_SDK_NAME}/${version}`,\n      ...core.getApiHeaders(),\n      ...options.headers,\n    },\n  };\n\n  if (client.token) {\n    settings.headers.Authorization = `Bearer ${client.token}`;\n  }\n\n  if (client.projectSettings && isCookieEnabled(client)) {\n    settings.credentials = 'include';\n  }\n\n  if (options.includeMfaToken && coreState.mfaToken) {\n    settings.headers[MFA_TOKEN_HEADER] = coreState.mfaToken;\n  }\n\n  const sessionPublicKey = getSessionKeys(client)?.publicKey;\n\n  // This check is required to avoid overriding the session public key header\n  // that is set by any of our other SDKs using the Dynamic Client SDK.\n  const isSessionPublicKeyHeaderPresent =\n    settings.headers[SESSION_PUBLIC_KEY_HEADER] !== undefined;\n\n  if (sessionPublicKey && !isSessionPublicKeyHeaderPresent) {\n    settings.headers[SESSION_PUBLIC_KEY_HEADER] = sessionPublicKey;\n  }\n\n  return new SDKApi(\n    new Configuration({\n      ...settings,\n      fetchApi: core.fetch,\n      middleware: [\n        createDeviceSignatureHeadersMiddleware(client),\n        createConvertToApiErrorMiddleware({\n          errorMappers: [...(options.errorMappers || []), clientErrorMapper],\n        }),\n        createUnauthorizedMiddleware(),\n      ],\n    })\n  );\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { createApiClient } from '../../../modules/apiClient';\nimport { NONCE_POOL_EXPIRATION_TIME, NONCE_POOL_SIZE } from '../constants';\n\n/**\n * Fetches a batch of nonces from the API.\n *\n * Prefetching is critical for iOS deep link wallet providers (e.g. Phantom\n * redirect). On iOS, a network request (like fetching a nonce) between a user\n * action and a deeplink call will break the gesture chain, causing iOS to\n * silently ignore the deeplink. By prefetching nonces ahead of time,\n * `getNonce` can return synchronously from cache and the deeplink fires\n * without an interrupting network round-trip.\n */\nexport const fetchAndStoreNonces = async (\n  client: DynamicClient\n): Promise<void> => {\n  const core = getCore(client);\n\n  const { environmentId } = core;\n\n  const apiClient = createApiClient({}, client);\n\n  const { nonces } = await apiClient.getNonces({\n    count: NONCE_POOL_SIZE,\n    environmentId,\n  });\n\n  core.state.set({\n    prefetchedNonces: nonces,\n    prefetchedNoncesExpiration: Date.now() + NONCE_POOL_EXPIRATION_TIME,\n  });\n};\n","import type { Chain } from '../chain';\n\ntype ChainInfo = {\n  apiChainName: string;\n  blockchainName: string;\n  verifiedCredentialChainName: string;\n  waasChainNameOverride?: string;\n};\n\nexport const CHAINS_INFO_MAP: Record<Chain, ChainInfo> = {\n  ALEO: {\n    apiChainName: 'aleo',\n    blockchainName: 'Aleo',\n    verifiedCredentialChainName: 'aleo',\n  },\n  ALGO: {\n    apiChainName: 'algo',\n    blockchainName: 'Algorand',\n    verifiedCredentialChainName: 'algorand',\n  },\n  APTOS: {\n    apiChainName: 'aptos',\n    blockchainName: 'Aptos',\n    verifiedCredentialChainName: 'aptos',\n  },\n  BTC: {\n    apiChainName: 'bitcoin',\n    blockchainName: 'Bitcoin',\n    verifiedCredentialChainName: 'bip122',\n  },\n  COSMOS: {\n    apiChainName: 'cosmos',\n    blockchainName: 'Cosmos',\n    verifiedCredentialChainName: 'cosmos',\n  },\n  ECLIPSE: {\n    apiChainName: 'eclipse',\n    blockchainName: 'Eclipse',\n    verifiedCredentialChainName: 'eclipse',\n  },\n  EVM: {\n    apiChainName: 'evm',\n    // eslint-disable-next-line custom-rules/ban-ethereum-eth-terms\n    blockchainName: 'Ethereum',\n    verifiedCredentialChainName: 'eip155',\n  },\n  FLOW: {\n    apiChainName: 'flow',\n    blockchainName: 'Flow',\n    verifiedCredentialChainName: 'flow',\n  },\n  SOL: {\n    apiChainName: 'solana',\n    blockchainName: 'Solana',\n    verifiedCredentialChainName: 'solana',\n    waasChainNameOverride: 'SVM',\n  },\n  SPARK: {\n    apiChainName: 'spark',\n    blockchainName: 'Spark',\n    verifiedCredentialChainName: 'spark',\n  },\n  STARK: {\n    apiChainName: 'starknet',\n    blockchainName: 'Starknet',\n    verifiedCredentialChainName: 'starknet',\n  },\n  STELLAR: {\n    apiChainName: 'stellar',\n    blockchainName: 'Stellar',\n    verifiedCredentialChainName: 'stellar',\n  },\n  SUI: {\n    apiChainName: 'sui',\n    blockchainName: 'Sui',\n    verifiedCredentialChainName: 'sui',\n  },\n  TON: {\n    apiChainName: 'ton',\n    blockchainName: 'TON',\n    verifiedCredentialChainName: 'ton',\n  },\n  TRON: {\n    apiChainName: 'tron',\n    blockchainName: 'Tron',\n    verifiedCredentialChainName: 'tron',\n  },\n};\n","import type { Chain } from '../../modules/chain';\nimport { CHAINS_INFO_MAP } from '../../modules/wallets/constants';\nimport { assertDefined } from '../assertDefined';\n\nexport const getChainFromVerifiedCredentialChain = (\n  verifiedCredentialChain: string\n): Chain => {\n  const chains = Object.keys(CHAINS_INFO_MAP) as Chain[];\n\n  const chain = chains.find(\n    (chain) =>\n      CHAINS_INFO_MAP[chain].verifiedCredentialChainName ===\n      verifiedCredentialChain\n  );\n\n  assertDefined(chain, `Unknown chain: ${verifiedCredentialChain}`);\n\n  return chain;\n};\n","import { dependencies } from '../package.json';\n\nexport const SDK_API_CORE_VERSION = dependencies['@dynamic-labs/sdk-api-core'];\n\nexport const DYNAMIC_ICONIC_SPRITE_URL =\n  'https://iconic.dynamic-static-assets.com/icons/sprite.svg';\n","import { DYNAMIC_ICONIC_SPRITE_URL } from '../../constants';\n\nexport const DEFAULT_WAAS_BASE_API_URL = 'https://app.dynamicauth.com';\nexport const DEFAULT_WAAS_BASE_MPC_RELAY_API_URL =\n  'https://relay.dynamicauth.com';\n\nexport const DYNAMIC_WAAS_METADATA = {\n  displayName: 'Dynamic WaaS',\n  icon: `${DYNAMIC_ICONIC_SPRITE_URL}#dynamicwaas`,\n  normalizedWalletName: 'dynamicwaas',\n};\n","import { BaseError } from './base';\n\nexport class InvalidParamError extends BaseError {\n  constructor(message: string) {\n    super({\n      cause: null,\n      code: 'invalid_param_error',\n      docsUrl: null,\n      name: 'InvalidParamError',\n      shortMessage: message,\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;ACGA,MAAa,WAAW,WAAuC;AAE7D,QAAO,OAAO;;;;;ACchB,MAAM,cAAc,EAAE,SAAS,YAAiC;AAC9D,KAAI,iBAAiB,UACnB,QAAO,MAAM;AAGf,KAAI,OAAO,QACT,QAAO,MAAM;AAGf,QAAO;;;;;AAMT,MAAM,iBAAiB,EACrB,cACA,SACA,SACA,mBACyB;AACzB,QAAO;EACL;EACA;EACA;EACA,GAAI,eAAe,CAAC,GAAG,cAAc,GAAG,GAAG,EAAE;EAC7C,GAAI,UAAU,CAAC,SAAS,UAAU,GAAG,EAAE;EACvC,GAAI,UAAU,CAAC,YAAY,UAAU,GAAG,EAAE;EAC1C,YAAY;EACZ,+BAAc,IAAI,MAAM,EAAC,aAAa;EACvC,CAAC,KAAK,KAAK;;;;;AAMd,IAAsB,YAAtB,MAAsB,kBAAkB,MAAM;;CAE5C;CACA;CACA,AAAiB;CACjB,AAAS,OAAO;CAChB,AAAS;CAET,YAAY,MAA2B;EACrC,MAAM,UAAU,WAAW,KAAK;EAChC,MAAM,mBAAmB,cAAc;GAAE,GAAG;GAAM;GAAS,CAAC;AAC5D,QACE,KAAK,gBAAgB,kBACrB,KAAK,QAAQ,EAAE,OAAO,KAAK,OAAO,GAAG,OACtC;AAED,OAAK,mBAAmB;AACxB,OAAK,UAAU;AACf,OAAK,OAAO,KAAK,QAAQ,KAAK;AAC9B,OAAK,QAAQ,KAAK,SAAS,KAAK;AAChC,OAAK,OAAO,KAAK;;;;;CAMnB,OAA0B;EACxB,MAAM,QAAQ,KAAK;AAEnB,MAAI,iBAAiB,UACnB,QAAO,MAAM,MAAM;AAGrB,SAAO;;CAGT,AAAS,WAAW;AAClB,SAAO,KAAK;;;;;;AC1FhB,IAAa,sBAAb,cAAyC,UAAU;CACjD,cAAc;AACZ,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cACE;GACH,CAAC;;;;;;ACPN,IAAIA,gBAAsC;AAC1C,IAAI,0BAA0B;;;;;;;AAQ9B,MAAa,yBAAwC;AACnD,KAAI,CAAC,cACH,OAAM,IAAI,qBAAqB;AAGjC,KAAI,0BAA0B,EAE5B,CADa,QAAQ,cAAc,CAC9B,OAAO,MACV,gSAGD;AAGH,QAAO;;AAGT,MAAa,oBAAoB,WAA0B;AACzD,iBAAgB;AAChB;;;;;AChCF,MAAa,6BAA6B,MAAQ,KAAK;AAEvD,MAAa,kBAAkB;;;;ACA/B,MAAa,6BAA6B;AAE1C,MAAa,4BAA4B;AAEzC,MAAa,6BAA6B;AAE1C,MAAa,mBAAmB;AAEhC,MAAa,4BAA4B;AAEzC,MAAa,0BACX,aAAa;AAEf,MAAa,kBAAkB;;;;ACf/B,MAAM,gBACJ;AAOF,MAAa,gBAAgB,EAAE,QAAQ,eAAe,aAAiC;CACrF,MAAM,QAAQ,IAAI,WAAW,OAAO;AACpC,QAAO,gBAAgB,MAAM;CAE7B,IAAI,SAAS;AACb,MAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,IAC1B,WAAU,MAAM,MAAM,KAAK,MAAM;AAEnC,QAAO;;;;;ACdT,IAAa,0BAAb,cAA6C,UAAU;CACrD,YAAY,SAAiB;AAC3B,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;;;;;;;;;;;;;;;;;;;;;ACSN,SAAgB,cACd,OACA,SACgD;AAChD,KAAI,UAAU,QAAQ,UAAU,OAC9B,OAAM,IAAI,wBAAwB,QAAQ;;;;;;;;AChB9C,MAAa,mBAAmB,WAAmC;AACjE,eAAc,OAAO,iBAAiB,mCAAmC;CAEzE,MAAM,mBAAmB,OAAO,gBAAgB;AAEhD,KAAI,CAAC,iBAAkB,QAAO;CAG9B,MAAM,yBAAyB,iBAAiB,MAAM,WAAW,EAAE,EAAE,SACnE,gBAAgB,OACjB;CAGD,MAAM,sBAAsB,QAC1B,iBAAiB,cAAc,WAChC;AAMD,QAAO,yBAAyB;;;;;AC1BlC,MAAa,kBACX,OAAO,WAAW,cAAc,SAASC;;;;ACC3C,MAAa,kBAAkB,WAA0B;CACvD,MAAM,OAAO,QAAQ,OAAO;CAE5B,MAAM,cAAc,KAAK,MAAM,KAAK,CAAC;AAErC,KAAI,CAAC,YACH;AAGF,KAAI;AAKF,SAJiC,KAAK,MACpC,WAAW,CAAC,KAAK,aAAa,SAAS,CAAC,UAAU,CACnD;UAGM,OAAO;AACd,OAAK,OAAO,MAAM,+BAA+B,MAAM;AACvD;;;;;;ACpBJ,IAAa,WAAb,MAAa,iBAAiB,UAAU;CACtC;CAEA,YAAY,SAAiB,MAAc,QAAgB;AACzD,QAAM;GACJ,OAAO;GACP;GACA,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;AAEF,OAAK,SAAS;;CAGhB,aAAa,aAAa,UAAoB;AAC5C,MAAI;GACF,MAAM,YAAY,MAAM,SAAS,OAAO,CAAC,MAAM;AAE/C,OACE,aACA,WAAW,aACX,OAAO,UAAU,UAAU,UAC3B;IACA,MAAM,YACJ,UAAU,aAAa,OAAO,UAAU,SAAS,WAC7C,UAAU,OACV;AAEN,WAAO,IAAI,SAAS,UAAU,OAAO,WAAW,SAAS,OAAO;;AAGlE,UAAO;UACD;AACN,UAAO;;;;;;;AClCb,IAAa,2BAAb,cAA8C,UAAU;CACtD,YAAY,EAAE,SAA6C;AACzD,QAAM;GACJ;GACA,MAAM;GACN,SACE;GACF,MAAM;GACN,cAAc;GACf,CAAC;;;;;;ACTN,IAAa,sBAAb,cAAyC,UAAU;CACjD,YAAY,EAAE,SAA6C;AACzD,QAAM;GACJ;GACA,MAAM;GACN,SAAS;GACT,MAAM;GACN,cACE;GACH,CAAC;;;;;;ACTN,IAAa,qBAAb,cAAwC,UAAU;CAChD,YAAY,EAAE,SAA6C;AACzD,QAAM;GACJ;GACA,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;;;;;;ACRN,IAAa,sBAAb,cAAyC,UAAU;CACjD,YAAY,EAAE,SAA6C;AACzD,QAAM;GACJ;GACA,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;;;;;;ACRN,IAAa,sCAAb,cAAyD,UAAU;CACjE,YAAY,EAAE,SAA6C;AACzD,QAAM;GACJ;GACA,MAAM;GACN,SACE;GACF,MAAM;GACN,cACE;GACH,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;ACeN,MAAaC,qBAAkC,UAAU;AACvD,KAAI,iBAAiB,UAAU;AAC7B,MAAI,MAAM,SAAS,mBACjB,QAAO,IAAI,mBAAmB,EAAE,OAAO,OAAO,CAAC;AAGjD,MAAI,MAAM,SAAS,mBACjB,QAAO,IAAI,oBAAoB,EAAE,OAAO,OAAO,CAAC;AAGlD,MAAI,MAAM,SAAS,wBACjB,QAAO,IAAI,yBAAyB,EAAE,OAAO,OAAO,CAAC;AAGvD,MAAI,MAAM,SAAS,oCACjB,QAAO,IAAI,oCAAoC,EAAE,OAAO,OAAO,CAAC;AAGlE,MACE,MAAM,SAAS,4BACf,MAAM,SAAS,wBAEf,QAAO,IAAI,oBAAoB,EAAE,OAAO,OAAO,CAAC;;AAIpD,QAAO;;;;;;;;;;;;ACrCT,MAAa,qCAAqC,EAChD,eAAe,EAAE,QAC0C,EAC3D,MAAM,OAAO,YAA6B;AACxC,KAAI,QAAQ,SAAS,UAAU,KAAK;EAClC,MAAM,WAAW,MAAM,SAAS,aAAa,QAAQ,SAAS;AAE9D,MAAI,UAAU;GACZ,IAAIC,eAAsB;AAE1B,QAAK,MAAM,UAAU,cAAc;IACjC,MAAM,WAAW,OAAO,SAAS;AAEjC,QAAI,UAAU;AACZ,oBAAe;AACf;;;AAIJ,SAAM;;;AAIV,QAAO,QAAQ;GAElB;;;;;;;;;;;AC9BD,MAAa,WAAW,OACtB,WACoB;CACpB,MAAM,OAAO,QAAQ,OAAO;CAC5B,MAAM,OAAO,KAAK,MAAM,KAAK,CAAC;AAE9B,KAAI,KAAK,SAAS,GAAG;EACnB,MAAM,CAAC,OAAO,GAAG,aAAa;AAE9B,OAAK,MAAM,IAAI,EAAE,kBAAkB,WAAW,CAAC;AAE/C,MAAI,UAAU,UAAU,EACtB,CAAK,oBAAoB,OAAO;AAGlC,SAAO;;AAGT,OAAM,oBAAoB,OAAO;AAEjC,QAAO,SAAS,OAAO;;;;;;;;AC5BzB,MAAa,eAAe,WAC1B,CAAC,GAAI,kBAAkB,aAAa,SAAS,IAAI,WAAW,OAAO,CAAE,CAClE,KAAK,MAAM,EAAE,SAAS,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,CAC3C,KAAK,GAAG;;;;ACCb,MAAa,WAAW,OAAO,EAAE,eAAe,cAA8B;CAC5E,MAAM,aAAa,MAAM,OAAO,OAAO,UACrC,OACA,eACA;EACE,MAAM;EACN,YAAY;EACb,EACD,OACA,CAAC,OAAO,CACT;AAWD,QAAO,YATW,MAAM,OAAO,OAAO,KACpC;EACE,MAAM;EACN,MAAM;EACP,EACD,YACA,IAAI,aAAa,CAAC,OAAO,QAAQ,CAClC,CAE4B;;;;;ACxB/B,MAAa,0BAA6B,WAGf;AACzB,QAAO;;;;;;;;;ACJT,MAAa,mBAAmB,MAAe;AAE7C,KAAI,GAAG,QAAQ,MAAM,IAAI,CAAC,QAAQ,MAAM,IAAI,IAAI;AAEhD,QAAO,WAAW,KAAK,KAAK,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,CAAC;;;;;;;;ACLzD,MAAa,wBAAwB,iBAA8B;CACjE,MAAM,oBAAoB,IAAI,WAAW,aAAa;CACtD,MAAM,MAAM,kBAAkB;CAG9B,MAAM,kBAAkB,kBAAkB,MAAM,GAAI,IAAI,QAAS,EAAE;AAGnE,iBAAgB,KAAK,IAAO,kBAAkB,MAAM,KAAK;AACzD,QAAO,gBAAgB;;;;;ACRzB,MAAa,aAAa,YAAY;CAEpC,MAAM,cAAc,MAAM,OAAO,OAAO,YACtC;EACE,MAAM;EACN,YAAY;EACb,EACD,MACA,CAAC,QAAQ,SAAS,CACnB;CAGD,MAAM,eAAe,MAAM,OAAO,OAAO,UACvC,OACA,YAAY,UACb;CAGD,MAAM,gBAAgB,MAAM,OAAO,OAAO,UACxC,OACA,YAAY,WACb;CAED,MAAM,4BAA4B,qBAAqB,aAAa;AAIpE,QAAO;EACL,SAAS,YAHc,gBAAgB,cAAc,EAAE,CAGjB;EACtC,YAAY;EACZ,QAAQ,YAAY,0BAA0B;EAC/C;;;;;ACjCH,MAAa,0BAA0B,EAAE,OAAO;CAC9C,YAAY,EAAE,QAAoB;CAClC,YAAY,EAAE,QAAQ;CACtB,WAAW,EAAE,QAAQ;CACtB,CAAC;;;;;;;;ACOF,MAAa,0CAA0C,OACrD,WACqD;CACrD,MAAM,EAAE,SAAS,kBAAkB,QAAQ,OAAO;AAElD,eAAc,eAAe,6BAA6B;CAE1D,MAAM,+CAA+C,uBAAuB;EAC1E,KAAK,4BAA4B;EACjC,QAAQ;EACT,CAAC;CAEF,MAAM,oBAAoB,MAAM,QAAQ,QACtC,6CACD;AAED,KAAI,kBACF,QAAO;CAGT,MAAM,EACJ,QAAQ,WACR,SAAS,YACT,eACE,MAAM,YAAY;AAEtB,OAAM,QAAQ,QAAQ,8CAA8C;EAClE;EACA;EACA;EACD,CAAC;AAEF,QAAO;EACL;EACA;EACA;EACD;;;;;AC3CH,MAAa,kBAAkB,OAC7B,WAC0B;CAC1B,MAAM,EAAE,iBAAiB,QAAQ,OAAO;;;;;AAMxC,KAAI,aACF,QAAO;;;;CAMT,MAAM,+BACJ,MAAM,wCAAwC,OAAO;AAEvD,QAAO;EACL,cAAc,YAAY,6BAA6B;EACvD,OAAO,YACL,SAAS;GACP,SAAS;GACT,eAAe,6BAA6B;GAC7C,CAAC;EACL;;;;;AC1BH,MAAa,0CAA0C,OACrD,WACoC;CACpC,MAAM,EAAE,oBAAoB;AAE5B,eAAc,iBAAiB,6BAA6B;;;;;;AAO5D,KAAI,gBAAgB,OAAO,CACzB,QAAO,EAAE;CAGX,MAAM,eAAe,MAAM,gBAAgB,OAAO;CAElD,MAAM,QAAQ,MAAM,SAAS,OAAO;CAEpC,MAAM,cAAc,MAAM,aAAa,KAAK,MAAM;CAClD,MAAM,YAAY,MAAM,aAAa,cAAc;AAEnD,QAAO;EACL,0BAA0B;EAC1B,8BAA8B;EAC9B,iCAAiC;EAClC;;;;;AC1BH,MAAa,0CACX,WACe;AACf,QAAO,EACL,KAAK,OAAO,YAAY;;;;AAItB,MACE,qCAAqC,QAAQ,IAAI,IACjD,CAAC,gBAAgB,OAAO,EACxB;GACA,MAAM,sBAAsB,MAAM,wCAChC,OACD;AAED,UAAO;IACL,MAAM;KACJ,GAAG,QAAQ;KACX,SAAS;MACP,GAAG,QAAQ,KAAK;MAChB,GAAG;MACJ;KACF;IACD,KAAK,QAAQ;IACd;;IAKN;;;;;ACnCH,IAAa,oBAAb,cAAuC,UAAU;CAC/C,YAAY,EAAE,SAA6C;AACzD,QAAM;GACJ;GACA,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;;;;;;ACNN,MAAa,sCAAkD,EAC7D,MAAM,OAAO,YAA6B;AACxC,KAAI,QAAQ,SAAS,WAAW,KAAK;EACnC,IAAIC,QAAsB;AAE1B,MAAI;GACF,MAAM,YAAY,MAAM,QAAQ,SAAS,OAAO,CAAC,MAAM;AAEvD,OACE,aACA,WAAW,aACX,OAAO,UAAU,UAAU,SAG3B,SAAQ,IAAI,MAAM,UAAU,MAAM;UAE9B;AAIR,QAAM,IAAI,kBAAkB,EAAE,OAAO,CAAC;;AAGxC,QAAO,QAAQ;GAElB;;;;;;;;;ACaD,MAAa,mBACX,UAAkC,EAAE,EACpC,WACG;CACH,MAAM,OAAO,QAAQ,OAAO;CAC5B,MAAM,YAAY,KAAK,MAAM,KAAK;CAElC,MAAMC,WAAsB;EAC1B,UAAU,KAAK;EACf,SAAS;GACP,gBAAgB;IACf,6BAA6B,OAAO;IACpC,4BAA4B,aAAa,EAAE,QAAQ,IAAI,CAAC;IACxD,6BAA6B,GAAG,gBAAgB,GAAG;GACpD,GAAG,KAAK,eAAe;GACvB,GAAG,QAAQ;GACZ;EACF;AAED,KAAI,OAAO,MACT,UAAS,QAAQ,gBAAgB,UAAU,OAAO;AAGpD,KAAI,OAAO,mBAAmB,gBAAgB,OAAO,CACnD,UAAS,cAAc;AAGzB,KAAI,QAAQ,mBAAmB,UAAU,SACvC,UAAS,QAAQ,oBAAoB,UAAU;CAGjD,MAAM,mBAAmB,eAAe,OAAO,EAAE;CAIjD,MAAM,kCACJ,SAAS,QAAQ,+BAA+B;AAElD,KAAI,oBAAoB,CAAC,gCACvB,UAAS,QAAQ,6BAA6B;AAGhD,QAAO,IAAI,OACT,IAAI,cAAc;EAChB,GAAG;EACH,UAAU,KAAK;EACf,YAAY;GACV,uCAAuC,OAAO;GAC9C,kCAAkC,EAChC,cAAc,CAAC,GAAI,QAAQ,gBAAgB,EAAE,EAAG,kBAAkB,EACnE,CAAC;GACF,8BAA8B;GAC/B;EACF,CAAC,CACH;;;;;;;;;;;;;;;ACjFH,MAAa,sBAAsB,OACjC,WACkB;CAClB,MAAM,OAAO,QAAQ,OAAO;CAE5B,MAAM,EAAE,kBAAkB;CAI1B,MAAM,EAAE,WAAW,MAFD,gBAAgB,EAAE,EAAE,OAAO,CAEV,UAAU;EAC3C,OAAO;EACP;EACD,CAAC;AAEF,MAAK,MAAM,IAAI;EACb,kBAAkB;EAClB,4BAA4B,KAAK,KAAK,GAAG;EAC1C,CAAC;;;;;ACvBJ,MAAaC,kBAA4C;CACvD,MAAM;EACJ,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,MAAM;EACJ,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,OAAO;EACL,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,KAAK;EACH,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,QAAQ;EACN,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,SAAS;EACP,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,KAAK;EACH,cAAc;EAEd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,MAAM;EACJ,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,KAAK;EACH,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC7B,uBAAuB;EACxB;CACD,OAAO;EACL,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,OAAO;EACL,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,SAAS;EACP,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,KAAK;EACH,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,KAAK;EACH,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,MAAM;EACJ,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACF;;;;ACnFD,MAAa,uCACX,4BACU;CAGV,MAAM,QAFS,OAAO,KAAK,gBAAgB,CAEtB,MAClB,YACC,gBAAgBC,SAAO,gCACvB,wBACH;AAED,eAAc,OAAO,kBAAkB,0BAA0B;AAEjE,QAAO;;;;;ACfT,MAAa,uBAAuB,aAAa;AAEjD,MAAa,4BACX;;;;ACHF,MAAa,4BAA4B;AACzC,MAAa,sCACX;AAEF,MAAa,wBAAwB;CACnC,aAAa;CACb,MAAM,GAAG,0BAA0B;CACnC,sBAAsB;CACvB;;;;ACRD,IAAa,oBAAb,cAAuC,UAAU;CAC/C,YAAY,SAAiB;AAC3B,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC"}