@dynamic-labs-sdk/client 0.17.1 → 0.17.3

package/dist/{InvalidParamError-3-1rSNtf.esm.js → InvalidParamError-C8bqZx25.esm.js}

@@ -1,10 +1,8 @@
 import { AuthStorageEnum, Configuration, SDKApi, isDeviceNonceSignatureRequiredForUrl } from "@dynamic-labs/sdk-api-core";
-import { Buffer as Buffer$1 } from "buffer";
-import * as z from "zod/mini";
 
 //#region package.json
 var name = "@dynamic-labs-sdk/client";
-var version = "0.17.1";
+var version = "0.17.3";
 var dependencies = {
 	"@dynamic-labs-sdk/assert-package-version": "workspace:*",
 	"@dynamic-labs-wallet/browser-wallet-client": "0.0.286",
@@ -124,9 +122,11 @@ const NONCE_POOL_SIZE = 5;
 const DYNAMIC_API_VERSION_HEADER = "x-dyn-api-version";
 const DYNAMIC_REQUEST_ID_HEADER = "x-dyn-request-id";
 const DYNAMIC_SDK_VERSION_HEADER = "x-dyn-version";
+const ELEVATED_ACCESS_TOKEN_HEADER = "x-dyn-elevated-access-token";
 const MFA_TOKEN_HEADER = "x-mfa-auth-token";
 const SESSION_PUBLIC_KEY_HEADER = "x-dyn-session-public-key";
 const DYNAMIC_SDK_API_VERSION = dependencies["@dynamic-labs/sdk-api-core"];
+const DYNAMIC_SDK_SESSION_ID_HEADER = "x-dyn-session-id";
 const CLIENT_SDK_NAME = "ClientSDK";
 
 //#endregion
@@ -189,22 +189,54 @@ const isCookieEnabled = (client) => {
 	return dynamicCookiesEnabled || byoJwtCookieEnabled;
 };
 
-//#endregion
-//#region src/utils/getBuffer/getBuffer.ts
-const getBuffer = () => typeof Buffer !== "undefined" ? Buffer : Buffer$1;
-
 //#endregion
 //#region src/modules/sessionKeys/getSessionKeys/getSessionKeys.ts
 const getSessionKeys = (client) => {
+	const publicKey = getCore(client).state.get().sessionKeys;
+	if (!publicKey) return;
+	return { publicKey };
+};
+
+//#endregion
+//#region src/modules/auth/getElevatedAccessToken/getElevatedAccessToken.ts
+/**
+* Gets an elevated access token by scope.
+*
+* This function retrieves an elevated access token that contains the specified scope.
+* Expired tokens are automatically filtered out.
+*
+* By default, if the token has `singleUse: true`, it will be automatically
+* consumed (removed from state) after retrieval. Pass `consume: false` to
+* check for token existence without consuming it.
+*
+* @param params - The parameters object.
+* @param params.scope - The scope to match (e.g., 'wallet:export').
+* @param params.consume - Whether to consume single-use tokens (default: true).
+* @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
+* @returns The elevated access token if found and not expired, or undefined if not found or expired.
+*
+* @example
+* ```typescript
+* // Retrieve and consume (default)
+* const token = getElevatedAccessToken({ scope: 'wallet:export' });
+*
+* // Check existence without consuming
+* const token = getElevatedAccessToken({ scope: 'credential:unlink', consume: false });
+* ```
+*/
+const getElevatedAccessToken = ({ consume = true, scope }, client = getDefaultClient()) => {
 	const core = getCore(client);
-	const encodedKeys = core.state.get().sessionKeys;
-	if (!encodedKeys) return;
-	try {
-		return JSON.parse(getBuffer().from(encodedKeys, "base64").toString());
-	} catch (error) {
-		core.logger.error("Error decoding session keys", error);
-		return;
+	const now = /* @__PURE__ */ new Date();
+	const elevatedAccessTokens = core.state.get().elevatedAccessTokens || [];
+	const validTokens = elevatedAccessTokens.filter((token$1) => !token$1.expiresAt || token$1.expiresAt > now);
+	if (validTokens.length !== elevatedAccessTokens.length) core.state.set({ elevatedAccessTokens: validTokens });
+	const token = validTokens.find((token$1) => token$1.scopes.includes(scope));
+	if (!token) return;
+	if (consume && token.singleUse) {
+		const updatedTokens = validTokens.filter((t) => t !== token);
+		core.state.set({ elevatedAccessTokens: updatedTokens });
 	}
+	return token.token;
 };
 
 //#endregion
@@ -386,128 +418,20 @@ const getNonce = async (client) => {
 	return getNonce(client);
 };
 
-//#endregion
-//#region src/utils/bufferToHex/bufferToHex.ts
-/**
-* Converts an ArrayBuffer or Uint8Array to a hex-encoded string
-*/
-const bufferToHex = (buffer) => [...buffer instanceof Uint8Array ? buffer : new Uint8Array(buffer)].map((x) => x.toString(16).padStart(2, "0")).join("");
-
-//#endregion
-//#region src/utils/p256Sign/p256Sign.ts
-const p256Sign = async ({ privateKeyJwk, message }) => {
-	const privateKey = await crypto.subtle.importKey("jwk", privateKeyJwk, {
-		name: "ECDSA",
-		namedCurve: "P-256"
-	}, false, ["sign"]);
-	return bufferToHex(await crypto.subtle.sign({
-		hash: "SHA-256",
-		name: "ECDSA"
-	}, privateKey, new TextEncoder().encode(message)));
-};
-
-//#endregion
-//#region src/services/storage/createStorageKeySchema/createStorageKeySchema.ts
-const createStorageKeySchema = (params) => {
-	return params;
-};
-
-//#endregion
-//#region src/utils/base64UrlDecode/base64UrlDecode.ts
-/**
-* Takes a base64url-encoded string (e.g. "nMueRPiAm51YXEjRtka8S_8Ura3HaqbmqDqMJCZmvkM")
-* and return the corresponding bytes, as an array buffer.
-*/
-const base64UrlDecode = (s) => {
-	s = s?.replace(/-/g, "+").replace(/_/g, "/") || "";
-	return Uint8Array.from(atob(s), (c) => c.charCodeAt(0));
-};
-
-//#endregion
-//#region src/utils/compressRawPublicKey/compressRawPublicKey.ts
-/**
-* Accepts a public key array buffer, and returns a buffer with the compressed version of the public key
-*/
-const compressRawPublicKey = (rawPublicKey) => {
-	const rawPublicKeyBytes = new Uint8Array(rawPublicKey);
-	const len = rawPublicKeyBytes.byteLength;
-	const compressedBytes = rawPublicKeyBytes.slice(0, 1 + len >>> 1);
-	compressedBytes[0] = 2 | rawPublicKeyBytes[len - 1] & 1;
-	return compressedBytes.buffer;
-};
-
-//#endregion
-//#region src/utils/p256Keygen/p256Keygen.ts
-const p256Keygen = async () => {
-	const p256Keypair = await crypto.subtle.generateKey({
-		name: "ECDSA",
-		namedCurve: "P-256"
-	}, true, ["sign", "verify"]);
-	const rawPublicKey = await crypto.subtle.exportKey("raw", p256Keypair.publicKey);
-	const privateKeyJwk = await crypto.subtle.exportKey("jwk", p256Keypair.privateKey);
-	const compressedPublicKeyBuffer = compressRawPublicKey(rawPublicKey);
-	return {
-		private: bufferToHex(base64UrlDecode(privateKeyJwk.d)),
-		privateJwk: privateKeyJwk,
-		public: bufferToHex(compressedPublicKeyBuffer)
-	};
-};
-
-//#endregion
-//#region src/modules/deviceRegistration/getDeviceSigner/deviceSigningKeys.schema.ts
-const deviceSigningKeysSchema = z.object({
-	privateJwk: z.custom(),
-	privateKey: z.string(),
-	publicKey: z.string()
-});
-
-//#endregion
-//#region src/modules/deviceRegistration/getDeviceSigner/getOrCreateEnvironmentDeviceSigningKeys/getOrCreateEnvironmentDeviceSigningKeys.ts
-/**
-* On web we want to auto create the device signing keys for each user.
-* And the user device signing keys should never be deleted.
-*/
-const getOrCreateEnvironmentDeviceSigningKeys = async (client) => {
-	const { storage, environmentId } = getCore(client);
-	assertDefined(environmentId, "Environment ID is required");
-	const environmentDeviceSigningKeysStorageKeySchema = createStorageKeySchema({
-		key: `user_device_signing_keys_${environmentId}`,
-		schema: deviceSigningKeysSchema
-	});
-	const deviceSigningKeys = await storage.getItem(environmentDeviceSigningKeysStorageKeySchema);
-	if (deviceSigningKeys) return deviceSigningKeys;
-	const { public: publicKey, private: privateKey, privateJwk } = await p256Keygen();
-	await storage.setItem(environmentDeviceSigningKeysStorageKeySchema, {
-		privateJwk,
-		privateKey,
-		publicKey
-	});
-	return {
-		privateJwk,
-		privateKey,
-		publicKey
-	};
-};
-
 //#endregion
 //#region src/modules/deviceRegistration/getDeviceSigner/getDeviceSigner.ts
 const getDeviceSigner = async (client) => {
-	const { deviceSigner } = getCore(client);
+	const { deviceSigner, keychain } = getCore(client);
 	/**
-	* If the device signer is available, it should handle the device signing
+	* If the device signer is available, it should handle the device signing.
 	* This is used for mobile devices with secure enclave.
 	*/
 	if (deviceSigner) return deviceSigner;
-	/**
-	* For web devices we want to auto create one PK per user id.
-	*/
-	const environmentDeviceSigningKeys = await getOrCreateEnvironmentDeviceSigningKeys(client);
+	const keyName = "device";
+	if (!await keychain.getPublicKey(keyName)) await keychain.generateKey(keyName);
 	return {
-		getPublicKey: async () => environmentDeviceSigningKeys.publicKey,
-		sign: (payload) => p256Sign({
-			message: payload,
-			privateKeyJwk: environmentDeviceSigningKeys.privateJwk
-		})
+		getPublicKey: () => keychain.getPublicKey(keyName),
+		sign: (payload) => keychain.sign(keyName, payload)
 	};
 };
 
@@ -600,6 +524,7 @@ const createApiClient = (options = {}, client) => {
 			"Content-Type": "application/json",
 			[DYNAMIC_API_VERSION_HEADER]: `API/${DYNAMIC_SDK_API_VERSION}`,
 			[DYNAMIC_REQUEST_ID_HEADER]: randomString({ length: 50 }),
+			[DYNAMIC_SDK_SESSION_ID_HEADER]: core.sdkSessionId,
 			[DYNAMIC_SDK_VERSION_HEADER]: `${CLIENT_SDK_NAME}/${version}`,
 			...core.getApiHeaders(),
 			...options.headers
@@ -608,6 +533,10 @@ const createApiClient = (options = {}, client) => {
 	if (client.token) settings.headers.Authorization = `Bearer ${client.token}`;
 	if (client.projectSettings && isCookieEnabled(client)) settings.credentials = "include";
 	if (options.includeMfaToken && coreState.mfaToken) settings.headers[MFA_TOKEN_HEADER] = coreState.mfaToken;
+	if (options.elevatedAccessTokenScope) {
+		const elevatedToken = getElevatedAccessToken({ scope: options.elevatedAccessTokenScope }, client);
+		if (elevatedToken) settings.headers[ELEVATED_ACCESS_TOKEN_HEADER] = elevatedToken;
+	}
 	const sessionPublicKey = getSessionKeys(client)?.publicKey;
 	const isSessionPublicKeyHeaderPresent = settings.headers[SESSION_PUBLIC_KEY_HEADER] !== void 0;
 	if (sessionPublicKey && !isSessionPublicKeyHeaderPresent) settings.headers[SESSION_PUBLIC_KEY_HEADER] = sessionPublicKey;
@@ -771,5 +700,5 @@ var InvalidParamError = class extends BaseError {
 };
 
 //#endregion
-export { randomString as A, version as B, InvalidExternalAuthError as C, isCookieEnabled as D, getBuffer as E, setDefaultClient as F, ClientNotFoundError as I, BaseError as L, DYNAMIC_SDK_API_VERSION as M, NONCE_POOL_SIZE as N, assertDefined as O, getDefaultClient as P, getCore as R, LinkCredentialError as S, getSessionKeys as T, p256Sign as _, DYNAMIC_ICONIC_SPRITE_URL as a, MfaRateLimitedError as b, CHAINS_INFO_MAP as c, UnauthorizedError as d, createDeviceSignatureHeadersMiddleware as f, createStorageKeySchema as g, p256Keygen as h, DYNAMIC_WAAS_METADATA as i, CLIENT_SDK_NAME as j, ValueMustBeDefinedError as k, fetchAndStoreNonces as l, getDeviceSigner as m, DEFAULT_WAAS_BASE_API_URL as n, SDK_API_CORE_VERSION as o, getHeadersForNonceSignedByDeviceSigners as p, DEFAULT_WAAS_BASE_MPC_RELAY_API_URL as r, getChainFromVerifiedCredentialChain as s, InvalidParamError as t, createApiClient as u, getNonce as v, APIError as w, MfaInvalidOtpError as x, SandboxMaximumThresholdReachedError as y, name as z };
-//# sourceMappingURL=InvalidParamError-3-1rSNtf.esm.js.map
+export { NONCE_POOL_SIZE as A, getSessionKeys as C, randomString as D, ValueMustBeDefinedError as E, getCore as F, name as I, version as L, setDefaultClient as M, ClientNotFoundError as N, CLIENT_SDK_NAME as O, BaseError as P, getElevatedAccessToken as S, assertDefined as T, MfaRateLimitedError as _, DYNAMIC_ICONIC_SPRITE_URL as a, InvalidExternalAuthError as b, CHAINS_INFO_MAP as c, UnauthorizedError as d, createDeviceSignatureHeadersMiddleware as f, SandboxMaximumThresholdReachedError as g, getNonce as h, DYNAMIC_WAAS_METADATA as i, getDefaultClient as j, DYNAMIC_SDK_API_VERSION as k, fetchAndStoreNonces as l, getDeviceSigner as m, DEFAULT_WAAS_BASE_API_URL as n, SDK_API_CORE_VERSION as o, getHeadersForNonceSignedByDeviceSigners as p, DEFAULT_WAAS_BASE_MPC_RELAY_API_URL as r, getChainFromVerifiedCredentialChain as s, InvalidParamError as t, createApiClient as u, MfaInvalidOtpError as v, isCookieEnabled as w, APIError as x, LinkCredentialError as y };
+//# sourceMappingURL=InvalidParamError-C8bqZx25.esm.js.map

package/dist/InvalidParamError-C8bqZx25.esm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"InvalidParamError-C8bqZx25.esm.js","names":["defaultClient: DynamicClient | null","token","clientErrorMapper: ErrorMapper","errorToThrow: Error","cause: Error | null","settings: ISettings","CHAINS_INFO_MAP: Record<Chain, ChainInfo>","chain"],"sources":["../package.json","../src/client/core/getCore/getCore.ts","../src/errors/base/BaseError.ts","../src/errors/ClientNotFoundError.ts","../src/client/defaultClient/defaultClient.ts","../src/utils/getNonce/constants.ts","../src/modules/apiClient/constants.ts","../src/utils/randomString/randomString.ts","../src/errors/ValueMustBeDefinedError.ts","../src/utils/assertDefined/assertDefined.ts","../src/modules/projectSettings/isCookieEnabled/isCookieEnabled.ts","../src/modules/sessionKeys/getSessionKeys/getSessionKeys.ts","../src/modules/auth/getElevatedAccessToken/getElevatedAccessToken.ts","../src/errors/APIError/APIError.ts","../src/errors/InvalidExternalAuthError.ts","../src/errors/LinkCredentialError.ts","../src/errors/MfaInvalidOtpError.ts","../src/errors/MfaRateLimitedError.ts","../src/errors/SandboxMaximumThresholdReachedError.ts","../src/modules/apiClient/utils/clientErrorMapper/clientErrorMapper.ts","../src/modules/apiClient/utils/convertToApiErrorMiddleware/convertToApiErrorMiddleware.ts","../src/utils/getNonce/getNonce.ts","../src/modules/deviceRegistration/getDeviceSigner/getDeviceSigner.ts","../src/modules/deviceRegistration/getHeadersForNonceSignedByDeviceSigners/getHeadersForNonceSignedByDeviceSigners.ts","../src/modules/apiClient/utils/deviceSignatureHeadersMiddleware/createDeviceSignatureHeadersMiddleware.ts","../src/errors/UnauthorizedError.ts","../src/modules/apiClient/utils/unauthorizedMiddleware/createUnauthorizedMiddleware.ts","../src/modules/apiClient/createApiClient.ts","../src/utils/getNonce/fetchAndStoreNonces/fetchAndStoreNonces.ts","../src/modules/wallets/constants.ts","../src/utils/getChainFromVerifiedCredentialChain/getChainFromVerifiedCredentialChain.ts","../src/constants.ts","../src/modules/waas/constants.ts","../src/errors/InvalidParamError.ts"],"sourcesContent":["","import type { DynamicClient } from '../../types';\nimport type { DynamicCore } from '../types';\n\nexport const getCore = (client: DynamicClient): DynamicCore => {\n  // @ts-expect-error - this was hidden from the public API\n  return client.__core;\n};\n","import { version } from '../../../package.json';\n\nexport type BaseErrorParameters = {\n  /** The underlying error that caused this error, if any */\n  cause: Error | null;\n  /** The error unique code */\n  code: string;\n  /** Additional detailed information about the error */\n  details?: string;\n  /** URL to relevant documentation for this error */\n  docsUrl: string | null;\n  /** Array of additional contextual messages to be displayed */\n  metaMessages?: string[];\n  /** Custom name for the error. Defaults to 'BaseError' if not provided */\n  name: string;\n  /** A brief, human-readable description of the error */\n  shortMessage: string;\n};\n\nconst getDetails = ({ details, cause }: BaseErrorParameters) => {\n  if (cause instanceof BaseError) {\n    return cause.details;\n  }\n\n  if (cause?.message) {\n    return cause.message;\n  }\n\n  return details;\n};\n\n/**\n * Formats the error message with all available information\n */\nconst formatMessage = ({\n  shortMessage,\n  details,\n  docsUrl,\n  metaMessages,\n}: BaseErrorParameters) => {\n  return [\n    '[Dynamic JS SDK]',\n    shortMessage,\n    '',\n    ...(metaMessages ? [...metaMessages, ''] : []),\n    ...(docsUrl ? [`Docs: ${docsUrl}`] : []),\n    ...(details ? [`Details: ${details}`] : []),\n    `Version: ${version}`,\n    `Timestamp: ${new Date().toISOString()}`,\n  ].join('\\n');\n};\n\n/**\n * Base error class that provides structured error handling with detailed information\n */\nexport abstract class BaseError extends Error {\n  /** The error unique code */\n  code: string;\n  details: string | undefined;\n  private readonly formattedMessage: string | undefined;\n  override name = 'BaseError';\n  override cause: BaseError | Error | undefined;\n\n  constructor(args: BaseErrorParameters) {\n    const details = getDetails(args);\n    const formattedMessage = formatMessage({ ...args, details });\n    super(\n      args.shortMessage ?? formattedMessage,\n      args.cause ? { cause: args.cause } : undefined\n    );\n\n    this.formattedMessage = formattedMessage;\n    this.details = details;\n    this.name = args.name ?? this.name;\n    this.cause = args.cause ?? this.cause;\n    this.code = args.code;\n  }\n\n  /**\n   * Walks the cause chain of the error and returns the root error\n   */\n  walk(): Error | undefined {\n    const cause = this.cause;\n\n    if (cause instanceof BaseError) {\n      return cause.walk();\n    }\n\n    return cause;\n  }\n\n  override toString() {\n    return this.formattedMessage;\n  }\n}\n","import { BaseError } from './base';\n\nexport class ClientNotFoundError extends BaseError {\n  constructor() {\n    super({\n      cause: null,\n      code: 'client_not_found_error',\n      docsUrl: null,\n      name: 'ClientNotFoundError',\n      shortMessage:\n        'No Dynamic client has been created yet. Make sure you have called createDynamicClient() first.',\n    });\n  }\n}\n","import { ClientNotFoundError } from '../../errors/ClientNotFoundError';\nimport { getCore } from '../core/getCore';\nimport type { DynamicClient } from '../types';\n\nlet defaultClient: DynamicClient | null = null;\nlet numOfInitializedClients = 0;\n\n/**\n * Returns the DynamicClient instance that was initialized with createDynamicClient.\n *\n * If more than one instance of DynamicClient was initialized, you should not use this function.\n * Instead, you should pass the client instance you stored to the function that needs it.\n */\nexport const getDefaultClient = (): DynamicClient => {\n  if (!defaultClient) {\n    throw new ClientNotFoundError();\n  }\n\n  if (numOfInitializedClients > 1) {\n    const core = getCore(defaultClient);\n    core.logger.debug(\n      'Multiple instances of DynamicClient found. If you are only using one client (recommended), make sure you are not calling ' +\n        '\"createDynamicClient\" multiple times. If you are using multiple clients, make sure you are passing which client to use as ' +\n        'the last param of all Dynamic functions.'\n    );\n  }\n\n  return defaultClient;\n};\n\nexport const setDefaultClient = (client: DynamicClient) => {\n  defaultClient = client;\n  numOfInitializedClients++;\n};\n","export const NONCE_POOL_EXPIRATION_TIME = 60000 * 60 * 24;\n\nexport const NONCE_POOL_SIZE = 5;\n","import { dependencies } from '../../../package.json';\n\nexport const DYNAMIC_API_VERSION_HEADER = 'x-dyn-api-version';\n\nexport const DYNAMIC_REQUEST_ID_HEADER = 'x-dyn-request-id';\n\nexport const DYNAMIC_SDK_VERSION_HEADER = 'x-dyn-version';\n\nexport const ELEVATED_ACCESS_TOKEN_HEADER = 'x-dyn-elevated-access-token';\n\nexport const MFA_TOKEN_HEADER = 'x-mfa-auth-token';\n\nexport const SESSION_PUBLIC_KEY_HEADER = 'x-dyn-session-public-key';\n\nexport const DYNAMIC_SDK_API_VERSION =\n  dependencies['@dynamic-labs/sdk-api-core'];\n\nexport const DYNAMIC_SDK_SESSION_ID_HEADER = 'x-dyn-session-id';\n\nexport const CLIENT_SDK_NAME = 'ClientSDK';\n","const DEFAULT_CHARS =\n  'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';\n\ntype RandomStringParams = {\n  chars?: string;\n  length: number;\n};\n\nexport const randomString = ({ chars = DEFAULT_CHARS, length }: RandomStringParams) => {\n  const bytes = new Uint8Array(length);\n  crypto.getRandomValues(bytes);\n\n  let result = '';\n  for (let i = 0; i < length; i++) {\n    result += chars[bytes[i] % chars.length];\n  }\n  return result;\n};\n","import { BaseError } from './base';\n\nexport class ValueMustBeDefinedError extends BaseError {\n  constructor(message: string) {\n    super({\n      cause: null,\n      code: 'value_must_be_defined_error',\n      docsUrl: null,\n      name: 'ValueMustBeDefined',\n      shortMessage: message,\n    });\n  }\n}\n","/* eslint-disable func-style -- javascript requires this to be a function */\n\nimport { ValueMustBeDefinedError } from './../../errors/ValueMustBeDefinedError';\n\n/**\n * Asserts that a value is not null or undefined, throwing an error if it is.\n * This function acts as a type guard, narrowing the type to exclude null and undefined.\n *\n * @template T - The type of the value being checked\n * @param value - The value to check for null or undefined\n * @param message - The error message to throw if the value is null or undefined\n * @throws Throws an error with the provided message if value is null or undefined\n * @example\n * ```typescript\n * const maybeString: string | null = getValue();\n * assertDefined(maybeString, 'String value is required');\n * // maybeString is now typed as string (null is excluded)\n * ```\n */\nexport function assertDefined<T>(\n  value: T,\n  message: string\n): asserts value is Exclude<NonNullable<T>, void> {\n  if (value === null || value === undefined) {\n    throw new ValueMustBeDefinedError(message);\n  }\n}\n","import { AuthStorageEnum } from '@dynamic-labs/sdk-api-core';\n\nimport type { DynamicClient } from '../../../client/types';\nimport { assertDefined } from '../../../utils/assertDefined';\n\n/**\n * Returns true if the client is using Dynamic cookies or a BYO JWT cookie.\n */\nexport const isCookieEnabled = (client: DynamicClient): boolean => {\n  assertDefined(client.projectSettings, 'Project settings are not defined');\n\n  const securitySettings = client.projectSettings.security;\n\n  if (!securitySettings) return false;\n\n  // client uses Dynamic cookies\n  const dynamicCookiesEnabled = (securitySettings.auth?.storage || []).includes(\n    AuthStorageEnum.Cookie\n  );\n\n  // BYO JWT client puts their non-Dynamic JWT in a cookie\n  const byoJwtCookieEnabled = Boolean(\n    securitySettings.externalAuth?.cookieName\n  );\n\n  // should return true for both of these scenarios\n  // because we also need to do `credentials: true` in api.ts when\n  // a byo jwt client sets their named cookie for their jwt and\n  // needs to send it to our backend\n  return dynamicCookiesEnabled || byoJwtCookieEnabled;\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport type { SessionKeys } from '../sessionKeys.types';\n\nexport const getSessionKeys = (client: DynamicClient): SessionKeys | undefined => {\n  const core = getCore(client);\n\n  const publicKey = core.state.get().sessionKeys;\n\n  if (!publicKey) {\n    return undefined;\n  }\n\n  return { publicKey };\n};\n","import { getCore } from '../../../client/core/getCore';\nimport { getDefaultClient } from '../../../client/defaultClient';\n\ntype GetElevatedAccessTokenParams = {\n  /**\n   * Whether to consume single-use tokens after retrieval.\n   * Set to `false` to check for token existence without side-effects.\n   * @default true\n   */\n  consume?: boolean;\n  scope: string;\n};\n\n/**\n * Gets an elevated access token by scope.\n *\n * This function retrieves an elevated access token that contains the specified scope.\n * Expired tokens are automatically filtered out.\n *\n * By default, if the token has `singleUse: true`, it will be automatically\n * consumed (removed from state) after retrieval. Pass `consume: false` to\n * check for token existence without consuming it.\n *\n * @param params - The parameters object.\n * @param params.scope - The scope to match (e.g., 'wallet:export').\n * @param params.consume - Whether to consume single-use tokens (default: true).\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns The elevated access token if found and not expired, or undefined if not found or expired.\n *\n * @example\n * ```typescript\n * // Retrieve and consume (default)\n * const token = getElevatedAccessToken({ scope: 'wallet:export' });\n *\n * // Check existence without consuming\n * const token = getElevatedAccessToken({ scope: 'credential:unlink', consume: false });\n * ```\n */\nexport const getElevatedAccessToken = (\n  { consume = true, scope }: GetElevatedAccessTokenParams,\n  client = getDefaultClient()\n): string | undefined => {\n  const core = getCore(client);\n\n  const now = new Date();\n  const elevatedAccessTokens = core.state.get().elevatedAccessTokens || [];\n\n  // Filter out expired tokens\n  const validTokens = elevatedAccessTokens.filter(\n    (token) => !token.expiresAt || token.expiresAt > now\n  );\n\n  // Remove expired tokens from state if any were found\n  if (validTokens.length !== elevatedAccessTokens.length) {\n    core.state.set({\n      elevatedAccessTokens: validTokens,\n    });\n  }\n\n  const token = validTokens.find((token) => token.scopes.includes(scope));\n\n  if (!token) {\n    return undefined;\n  }\n\n  // Check if token should be consumed based on singleUse property\n  if (consume && token.singleUse) {\n    const updatedTokens = validTokens.filter((t) => t !== token);\n    core.state.set({\n      elevatedAccessTokens: updatedTokens,\n    });\n  }\n\n  return token.token;\n};\n","import { BaseError } from '../base';\n\nexport class APIError extends BaseError {\n  status: number;\n\n  constructor(message: string, code: string, status: number) {\n    super({\n      cause: null,\n      code,\n      docsUrl: null,\n      name: 'APIError',\n      shortMessage: message,\n    });\n\n    this.status = status;\n  }\n\n  static async fromResponse(response: Response) {\n    try {\n      const errorBody = await response.clone().json();\n\n      if (\n        errorBody &&\n        'error' in errorBody &&\n        typeof errorBody.error === 'string'\n      ) {\n        const errorCode =\n          'code' in errorBody && typeof errorBody.code === 'string'\n            ? errorBody.code\n            : 'unknown_error';\n\n        return new APIError(errorBody.error, errorCode, response.status);\n      }\n\n      return null;\n    } catch {\n      return null;\n    }\n  }\n}\n","import { BaseError, type BaseErrorParameters } from './base';\n\nexport class InvalidExternalAuthError extends BaseError {\n  constructor({ cause }: Pick<BaseErrorParameters, 'cause'>) {\n    super({\n      cause,\n      code: 'invalid_external_auth_error',\n      docsUrl:\n        'https://www.dynamic.xyz/docs/external-auth/third-party-auth-overview',\n      name: 'InvalidExternalAuthError',\n      shortMessage: 'Error authenticating with external JWT',\n    });\n  }\n}\n","import { BaseError, type BaseErrorParameters } from './base';\n\nexport class LinkCredentialError extends BaseError {\n  constructor({ cause }: Pick<BaseErrorParameters, 'cause'>) {\n    super({\n      cause,\n      code: 'link_credential_error',\n      docsUrl: null,\n      name: 'LinkCredentialError',\n      shortMessage:\n        'The credential you are trying to link is associated with another account and cannot be reassigned.',\n    });\n  }\n}\n","import { BaseError, type BaseErrorParameters } from './base';\n\nexport class MfaInvalidOtpError extends BaseError {\n  constructor({ cause }: Pick<BaseErrorParameters, 'cause'>) {\n    super({\n      cause,\n      code: 'mfa_invalid_otp_error',\n      docsUrl: null,\n      name: 'MfaInvalidOtpError',\n      shortMessage: 'Invalid OTP',\n    });\n  }\n}\n","import { BaseError, type BaseErrorParameters } from './base';\n\nexport class MfaRateLimitedError extends BaseError {\n  constructor({ cause }: Pick<BaseErrorParameters, 'cause'>) {\n    super({\n      cause,\n      code: 'mfa_rate_limited_error',\n      docsUrl: null,\n      name: 'MfaRateLimitedError',\n      shortMessage: 'Rate limited',\n    });\n  }\n}\n","import { BaseError, type BaseErrorParameters } from './base';\n\nexport class SandboxMaximumThresholdReachedError extends BaseError {\n  constructor({ cause }: Pick<BaseErrorParameters, 'cause'>) {\n    super({\n      cause,\n      code: 'sandbox_maximum_threshold_reached_error',\n      docsUrl:\n        'https://www.dynamic.xyz/docs/developer-dashboard/sandbox-vs-live#sandbox-vs-live',\n      name: 'SandboxMaximumThresholdReachedError',\n      shortMessage:\n        'Your sandbox environment has reached the maximum MAU. Please use a live environment for production traffic.',\n    });\n  }\n}\n","import { APIError } from '../../../../errors/APIError';\nimport { InvalidExternalAuthError } from '../../../../errors/InvalidExternalAuthError';\nimport { LinkCredentialError } from '../../../../errors/LinkCredentialError';\nimport { MfaInvalidOtpError } from '../../../../errors/MfaInvalidOtpError';\nimport { MfaRateLimitedError } from '../../../../errors/MfaRateLimitedError';\nimport { SandboxMaximumThresholdReachedError } from '../../../../errors/SandboxMaximumThresholdReachedError';\nimport type { ErrorMapper } from '../../apiClient.types';\n\n/**\n * Default error mapper for the client that handles common API error codes.\n *\n * This mapper transforms specific API error codes into more specific error types:\n * - `mfa_invalid_code` → `MfaInvalidOtpError`\n * - `mfa_rate_limited` → `MfaRateLimitedError`\n *\n * @param error - The error to be mapped\n * @returns A transformed error if the error code matches a known pattern, or null if no transformation is needed\n *\n * @example\n * ```typescript\n * // This will be automatically applied to all API errors\n * const apiClient = createApiClient({}, client);\n *\n * // The clientErrorMapper will automatically convert mfa_invalid_code errors\n * // to MfaInvalidOtpError instances\n * ```\n */\nexport const clientErrorMapper: ErrorMapper = (error) => {\n  if (error instanceof APIError) {\n    if (error.code === 'mfa_invalid_code') {\n      return new MfaInvalidOtpError({ cause: error });\n    }\n\n    if (error.code === 'mfa_rate_limited') {\n      return new MfaRateLimitedError({ cause: error });\n    }\n\n    if (error.code === 'invalid_external_auth') {\n      return new InvalidExternalAuthError({ cause: error });\n    }\n\n    if (error.code === 'sandbox_maximum_threshold_reached') {\n      return new SandboxMaximumThresholdReachedError({ cause: error });\n    }\n\n    if (\n      error.code === 'merge_accounts_invalid' ||\n      error.code === 'reassign_wallet_error'\n    ) {\n      return new LinkCredentialError({ cause: error });\n    }\n  }\n\n  return null;\n};\n","import type { Middleware, ResponseContext } from '@dynamic-labs/sdk-api-core';\n\nimport { APIError } from '../../../../errors/APIError';\nimport type { ErrorMapper } from '../../apiClient.types';\n\ntype CreateConvertToApiErrorMiddlewareOptions = {\n  errorMappers?: ErrorMapper[];\n};\n\n/**\n * Creates middleware that converts HTTP error responses to APIError instances\n * and optionally applies custom error mappers to transform them into specific error types.\n *\n * @param options.errorMappers - Array of error mappers to apply to API errors\n * @returns A middleware function that handles error conversion and mapping\n */\nexport const createConvertToApiErrorMiddleware = ({\n  errorMappers = [],\n}: CreateConvertToApiErrorMiddlewareOptions): Middleware => ({\n  post: async (context: ResponseContext) => {\n    if (context.response.status >= 400) {\n      const apiError = await APIError.fromResponse(context.response);\n\n      if (apiError) {\n        let errorToThrow: Error = apiError;\n\n        for (const mapper of errorMappers) {\n          const newError = mapper(apiError);\n\n          if (newError) {\n            errorToThrow = newError;\n            break;\n          }\n        }\n\n        throw errorToThrow;\n      }\n    }\n\n    return context.response;\n  },\n});\n","import { getCore } from '../../client/core/getCore';\nimport type { DynamicClient } from '../../client/types';\nimport { fetchAndStoreNonces } from './fetchAndStoreNonces/fetchAndStoreNonces';\n\n/**\n * Returns a nonce for wallet ownership verification.\n *\n * Pops the first nonce from the prefetched pool. When the pool is running low\n * (≤1 remaining after pop) a background refetch is triggered. If the pool is\n * empty, nonces are fetched on-demand before returning.\n */\nexport const getNonce = async (\n  client: DynamicClient\n): Promise<string> => {\n  const core = getCore(client);\n  const pool = core.state.get().prefetchedNonces;\n\n  if (pool.length > 0) {\n    const [nonce, ...remaining] = pool;\n\n    core.state.set({ prefetchedNonces: remaining });\n\n    if (remaining.length <= 1) {\n      void fetchAndStoreNonces(client);\n    }\n\n    return nonce;\n  }\n\n  await fetchAndStoreNonces(client);\n\n  return getNonce(client);\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport type { DeviceSigner } from '../../../services/deviceSigner';\n\nexport const getDeviceSigner = async (\n  client: DynamicClient\n): Promise<DeviceSigner> => {\n  const { deviceSigner, keychain } = getCore(client);\n\n  /**\n   * If the device signer is available, it should handle the device signing.\n   * This is used for mobile devices with secure enclave.\n   */\n  if (deviceSigner) {\n    return deviceSigner;\n  }\n\n  const keyName = 'device';\n\n  const existingPublicKey = await keychain.getPublicKey(keyName);\n\n  if (!existingPublicKey) {\n    await keychain.generateKey(keyName);\n  }\n\n  return {\n    getPublicKey: () => keychain.getPublicKey(keyName) as Promise<string>,\n    sign: (payload: string) => keychain.sign(keyName, payload),\n  };\n};\n","import type { DynamicClient } from '../../../client/types';\nimport { assertDefined } from '../../../utils/assertDefined';\nimport { getNonce } from '../../../utils/getNonce';\nimport { isCookieEnabled } from '../../projectSettings/isCookieEnabled';\nimport { getDeviceSigner } from '../getDeviceSigner';\n\nexport const getHeadersForNonceSignedByDeviceSigners = async (\n  client: DynamicClient\n): Promise<Record<string, string>> => {\n  const { projectSettings } = client;\n\n  assertDefined(projectSettings, 'Project settings not found');\n\n  /**\n   * For cookie based environments, the device registration is handled\n   * by settings the cookie in the browser.\n   * Then we dont need to provide the headers\n   */\n  if (isCookieEnabled(client)) {\n    return {};\n  }\n\n  const deviceSigner = await getDeviceSigner(client);\n\n  const nonce = await getNonce(client);\n\n  const signedNonce = await deviceSigner.sign(nonce);\n  const publicKey = await deviceSigner.getPublicKey();\n\n  return {\n    'x-dynamic-device-nonce': nonce,\n    'x-dynamic-device-publickey': publicKey,\n    'x-dynamic-device-signed-nonce': signedNonce,\n  };\n};\n","import type { Middleware } from '@dynamic-labs/sdk-api-core';\nimport { isDeviceNonceSignatureRequiredForUrl } from '@dynamic-labs/sdk-api-core';\n\nimport type { DynamicClient } from '../../../../client/types';\nimport { getHeadersForNonceSignedByDeviceSigners } from '../../../deviceRegistration/getHeadersForNonceSignedByDeviceSigners';\nimport { isCookieEnabled } from '../../../projectSettings/isCookieEnabled';\n\nexport const createDeviceSignatureHeadersMiddleware = (\n  client: DynamicClient\n): Middleware => {\n  return {\n    pre: async (context) => {\n      /**\n       * The signed nonce is not required for cookie based environments.\n       */\n      if (\n        isDeviceNonceSignatureRequiredForUrl(context.url) &&\n        !isCookieEnabled(client)\n      ) {\n        const deviceSignerHeaders = await getHeadersForNonceSignedByDeviceSigners(\n          client\n        );\n\n        return {\n          init: {\n            ...context.init,\n            headers: {\n              ...context.init.headers,\n              ...deviceSignerHeaders,\n            },\n          },\n          url: context.url,\n        };\n      }\n\n      return;\n    },\n  };\n};\n","import { BaseError, type BaseErrorParameters } from './base';\n\nexport class UnauthorizedError extends BaseError {\n  constructor({ cause }: Pick<BaseErrorParameters, 'cause'>) {\n    super({\n      cause,\n      code: 'unauthorized_error',\n      docsUrl: null,\n      name: 'UnauthorizedError',\n      shortMessage: 'Unauthorized',\n    });\n  }\n}\n","import type { Middleware, ResponseContext } from '@dynamic-labs/sdk-api-core';\n\nimport { UnauthorizedError } from '../../../../errors/UnauthorizedError';\n\nexport const createUnauthorizedMiddleware = (): Middleware => ({\n  post: async (context: ResponseContext) => {\n    if (context.response.status === 401) {\n      let cause: Error | null = null;\n\n      try {\n        const errorBody = await context.response.clone().json();\n\n        if (\n          errorBody &&\n          'error' in errorBody &&\n          typeof errorBody.error === 'string'\n        ) {\n          // eslint-disable-next-line no-restricted-syntax\n          cause = new Error(errorBody.error);\n        }\n      } catch {\n        // Response body isn't valid JSON — proceed without a cause\n      }\n\n      throw new UnauthorizedError({ cause });\n    }\n\n    return context.response;\n  },\n});\n","import { Configuration, SDKApi } from '@dynamic-labs/sdk-api-core';\n\nimport { version } from '../../../package.json';\nimport { getCore } from '../../client/core/getCore';\nimport type { DynamicClient } from '../../client/types';\nimport { randomString } from '../../utils/randomString';\nimport { isCookieEnabled } from '../projectSettings/isCookieEnabled';\nimport { getSessionKeys } from '../sessionKeys/getSessionKeys';\nimport type { CreateApiClientOptions } from './apiClient.types';\nimport { getElevatedAccessToken } from '../auth/getElevatedAccessToken';\nimport {\n  CLIENT_SDK_NAME,\n  DYNAMIC_API_VERSION_HEADER,\n  DYNAMIC_REQUEST_ID_HEADER,\n  DYNAMIC_SDK_API_VERSION,\n  DYNAMIC_SDK_SESSION_ID_HEADER,\n  DYNAMIC_SDK_VERSION_HEADER,\n  ELEVATED_ACCESS_TOKEN_HEADER,\n  MFA_TOKEN_HEADER,\n  SESSION_PUBLIC_KEY_HEADER,\n} from './constants';\nimport { clientErrorMapper } from './utils/clientErrorMapper';\nimport { createConvertToApiErrorMiddleware } from './utils/convertToApiErrorMiddleware/convertToApiErrorMiddleware';\nimport { createDeviceSignatureHeadersMiddleware } from './utils/deviceSignatureHeadersMiddleware';\nimport { createUnauthorizedMiddleware } from './utils/unauthorizedMiddleware/createUnauthorizedMiddleware';\n\ntype ISettings = {\n  basePath: string;\n  credentials?: 'include';\n  headers: {\n    Authorization?: string;\n    'Content-Type': string;\n    [DYNAMIC_API_VERSION_HEADER]: string;\n    [DYNAMIC_REQUEST_ID_HEADER]: string;\n    [DYNAMIC_SDK_SESSION_ID_HEADER]: string;\n    [DYNAMIC_SDK_VERSION_HEADER]: string;\n    [ELEVATED_ACCESS_TOKEN_HEADER]?: string;\n    [MFA_TOKEN_HEADER]?: string;\n    [SESSION_PUBLIC_KEY_HEADER]?: string;\n  };\n};\n\n/**\n * Returns a new instance of the SDK API client.\n *\n * This is not meant for storing, as it is very light we can create it whenever needed.\n */\nexport const createApiClient = (\n  options: CreateApiClientOptions = {},\n  client: DynamicClient\n) => {\n  const core = getCore(client);\n  const coreState = core.state.get();\n\n  const settings: ISettings = {\n    basePath: core.apiBaseUrl,\n    headers: {\n      'Content-Type': 'application/json',\n      [DYNAMIC_API_VERSION_HEADER]: `API/${DYNAMIC_SDK_API_VERSION}`,\n      [DYNAMIC_REQUEST_ID_HEADER]: randomString({ length: 50 }),\n      [DYNAMIC_SDK_SESSION_ID_HEADER]: core.sdkSessionId,\n      [DYNAMIC_SDK_VERSION_HEADER]: `${CLIENT_SDK_NAME}/${version}`,\n      ...core.getApiHeaders(),\n      ...options.headers,\n    },\n  };\n\n  if (client.token) {\n    settings.headers.Authorization = `Bearer ${client.token}`;\n  }\n\n  if (client.projectSettings && isCookieEnabled(client)) {\n    settings.credentials = 'include';\n  }\n\n  if (options.includeMfaToken && coreState.mfaToken) {\n    settings.headers[MFA_TOKEN_HEADER] = coreState.mfaToken;\n  }\n\n  if (options.elevatedAccessTokenScope) {\n    const elevatedToken = getElevatedAccessToken(\n      { scope: options.elevatedAccessTokenScope },\n      client\n    );\n    if (elevatedToken) {\n      settings.headers[ELEVATED_ACCESS_TOKEN_HEADER] = elevatedToken;\n    }\n  }\n\n  const sessionPublicKey = getSessionKeys(client)?.publicKey;\n\n  // This check is required to avoid overriding the session public key header\n  // that is set by any of our other SDKs using the Dynamic Client SDK.\n  const isSessionPublicKeyHeaderPresent =\n    settings.headers[SESSION_PUBLIC_KEY_HEADER] !== undefined;\n\n  if (sessionPublicKey && !isSessionPublicKeyHeaderPresent) {\n    settings.headers[SESSION_PUBLIC_KEY_HEADER] = sessionPublicKey;\n  }\n\n  return new SDKApi(\n    new Configuration({\n      ...settings,\n      fetchApi: core.fetch,\n      middleware: [\n        createDeviceSignatureHeadersMiddleware(client),\n        createConvertToApiErrorMiddleware({\n          errorMappers: [...(options.errorMappers || []), clientErrorMapper],\n        }),\n        createUnauthorizedMiddleware(),\n      ],\n    })\n  );\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { createApiClient } from '../../../modules/apiClient';\nimport { NONCE_POOL_EXPIRATION_TIME, NONCE_POOL_SIZE } from '../constants';\n\n/**\n * Fetches a batch of nonces from the API.\n *\n * Prefetching is critical for iOS deep link wallet providers (e.g. Phantom\n * redirect). On iOS, a network request (like fetching a nonce) between a user\n * action and a deeplink call will break the gesture chain, causing iOS to\n * silently ignore the deeplink. By prefetching nonces ahead of time,\n * `getNonce` can return synchronously from cache and the deeplink fires\n * without an interrupting network round-trip.\n */\nexport const fetchAndStoreNonces = async (\n  client: DynamicClient\n): Promise<void> => {\n  const core = getCore(client);\n\n  const { environmentId } = core;\n\n  const apiClient = createApiClient({}, client);\n\n  const { nonces } = await apiClient.getNonces({\n    count: NONCE_POOL_SIZE,\n    environmentId,\n  });\n\n  core.state.set({\n    prefetchedNonces: nonces,\n    prefetchedNoncesExpiration: Date.now() + NONCE_POOL_EXPIRATION_TIME,\n  });\n};\n","import type { Chain } from '../chain';\n\ntype ChainInfo = {\n  apiChainName: string;\n  blockchainName: string;\n  verifiedCredentialChainName: string;\n  waasChainNameOverride?: string;\n};\n\nexport const CHAINS_INFO_MAP: Record<Chain, ChainInfo> = {\n  ALEO: {\n    apiChainName: 'aleo',\n    blockchainName: 'Aleo',\n    verifiedCredentialChainName: 'aleo',\n  },\n  ALGO: {\n    apiChainName: 'algo',\n    blockchainName: 'Algorand',\n    verifiedCredentialChainName: 'algorand',\n  },\n  APTOS: {\n    apiChainName: 'aptos',\n    blockchainName: 'Aptos',\n    verifiedCredentialChainName: 'aptos',\n  },\n  BTC: {\n    apiChainName: 'bitcoin',\n    blockchainName: 'Bitcoin',\n    verifiedCredentialChainName: 'bip122',\n  },\n  COSMOS: {\n    apiChainName: 'cosmos',\n    blockchainName: 'Cosmos',\n    verifiedCredentialChainName: 'cosmos',\n  },\n  ECLIPSE: {\n    apiChainName: 'eclipse',\n    blockchainName: 'Eclipse',\n    verifiedCredentialChainName: 'eclipse',\n  },\n  EVM: {\n    apiChainName: 'evm',\n    // eslint-disable-next-line custom-rules/ban-ethereum-eth-terms\n    blockchainName: 'Ethereum',\n    verifiedCredentialChainName: 'eip155',\n  },\n  FLOW: {\n    apiChainName: 'flow',\n    blockchainName: 'Flow',\n    verifiedCredentialChainName: 'flow',\n  },\n  SOL: {\n    apiChainName: 'solana',\n    blockchainName: 'Solana',\n    verifiedCredentialChainName: 'solana',\n    waasChainNameOverride: 'SVM',\n  },\n  SPARK: {\n    apiChainName: 'spark',\n    blockchainName: 'Spark',\n    verifiedCredentialChainName: 'spark',\n  },\n  STARK: {\n    apiChainName: 'starknet',\n    blockchainName: 'Starknet',\n    verifiedCredentialChainName: 'starknet',\n  },\n  STELLAR: {\n    apiChainName: 'stellar',\n    blockchainName: 'Stellar',\n    verifiedCredentialChainName: 'stellar',\n  },\n  SUI: {\n    apiChainName: 'sui',\n    blockchainName: 'Sui',\n    verifiedCredentialChainName: 'sui',\n  },\n  TEMPO: {\n    apiChainName: 'tempo',\n    blockchainName: 'Tempo',\n    verifiedCredentialChainName: 'tempo',\n  },\n  TON: {\n    apiChainName: 'ton',\n    blockchainName: 'TON',\n    verifiedCredentialChainName: 'ton',\n  },\n  TRON: {\n    apiChainName: 'tron',\n    blockchainName: 'Tron',\n    verifiedCredentialChainName: 'tron',\n  },\n};\n","import type { Chain } from '../../modules/chain';\nimport { CHAINS_INFO_MAP } from '../../modules/wallets/constants';\nimport { assertDefined } from '../assertDefined';\n\nexport const getChainFromVerifiedCredentialChain = (\n  verifiedCredentialChain: string\n): Chain => {\n  const chains = Object.keys(CHAINS_INFO_MAP) as Chain[];\n\n  const chain = chains.find(\n    (chain) =>\n      CHAINS_INFO_MAP[chain].verifiedCredentialChainName ===\n      verifiedCredentialChain\n  );\n\n  assertDefined(chain, `Unknown chain: ${verifiedCredentialChain}`);\n\n  return chain;\n};\n","import { dependencies } from '../package.json';\n\nexport const SDK_API_CORE_VERSION = dependencies['@dynamic-labs/sdk-api-core'];\n\nexport const DYNAMIC_ICONIC_SPRITE_URL =\n  'https://iconic.dynamic-static-assets.com/icons/sprite.svg';\n","import { DYNAMIC_ICONIC_SPRITE_URL } from '../../constants';\n\nexport const DEFAULT_WAAS_BASE_API_URL = 'https://app.dynamicauth.com';\nexport const DEFAULT_WAAS_BASE_MPC_RELAY_API_URL =\n  'https://relay.dynamicauth.com';\n\nexport const DYNAMIC_WAAS_METADATA = {\n  displayName: 'Dynamic WaaS',\n  icon: `${DYNAMIC_ICONIC_SPRITE_URL}#dynamicwaas`,\n  normalizedWalletName: 'dynamicwaas',\n};\n","import { BaseError } from './base';\n\nexport class InvalidParamError extends BaseError {\n  constructor(message: string) {\n    super({\n      cause: null,\n      code: 'invalid_param_error',\n      docsUrl: null,\n      name: 'InvalidParamError',\n      shortMessage: message,\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;ACGA,MAAa,WAAW,WAAuC;AAE7D,QAAO,OAAO;;;;;ACchB,MAAM,cAAc,EAAE,SAAS,YAAiC;AAC9D,KAAI,iBAAiB,UACnB,QAAO,MAAM;AAGf,KAAI,OAAO,QACT,QAAO,MAAM;AAGf,QAAO;;;;;AAMT,MAAM,iBAAiB,EACrB,cACA,SACA,SACA,mBACyB;AACzB,QAAO;EACL;EACA;EACA;EACA,GAAI,eAAe,CAAC,GAAG,cAAc,GAAG,GAAG,EAAE;EAC7C,GAAI,UAAU,CAAC,SAAS,UAAU,GAAG,EAAE;EACvC,GAAI,UAAU,CAAC,YAAY,UAAU,GAAG,EAAE;EAC1C,YAAY;EACZ,+BAAc,IAAI,MAAM,EAAC,aAAa;EACvC,CAAC,KAAK,KAAK;;;;;AAMd,IAAsB,YAAtB,MAAsB,kBAAkB,MAAM;;CAE5C;CACA;CACA,AAAiB;CACjB,AAAS,OAAO;CAChB,AAAS;CAET,YAAY,MAA2B;EACrC,MAAM,UAAU,WAAW,KAAK;EAChC,MAAM,mBAAmB,cAAc;GAAE,GAAG;GAAM;GAAS,CAAC;AAC5D,QACE,KAAK,gBAAgB,kBACrB,KAAK,QAAQ,EAAE,OAAO,KAAK,OAAO,GAAG,OACtC;AAED,OAAK,mBAAmB;AACxB,OAAK,UAAU;AACf,OAAK,OAAO,KAAK,QAAQ,KAAK;AAC9B,OAAK,QAAQ,KAAK,SAAS,KAAK;AAChC,OAAK,OAAO,KAAK;;;;;CAMnB,OAA0B;EACxB,MAAM,QAAQ,KAAK;AAEnB,MAAI,iBAAiB,UACnB,QAAO,MAAM,MAAM;AAGrB,SAAO;;CAGT,AAAS,WAAW;AAClB,SAAO,KAAK;;;;;;AC1FhB,IAAa,sBAAb,cAAyC,UAAU;CACjD,cAAc;AACZ,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cACE;GACH,CAAC;;;;;;ACPN,IAAIA,gBAAsC;AAC1C,IAAI,0BAA0B;;;;;;;AAQ9B,MAAa,yBAAwC;AACnD,KAAI,CAAC,cACH,OAAM,IAAI,qBAAqB;AAGjC,KAAI,0BAA0B,EAE5B,CADa,QAAQ,cAAc,CAC9B,OAAO,MACV,gSAGD;AAGH,QAAO;;AAGT,MAAa,oBAAoB,WAA0B;AACzD,iBAAgB;AAChB;;;;;AChCF,MAAa,6BAA6B,MAAQ,KAAK;AAEvD,MAAa,kBAAkB;;;;ACA/B,MAAa,6BAA6B;AAE1C,MAAa,4BAA4B;AAEzC,MAAa,6BAA6B;AAE1C,MAAa,+BAA+B;AAE5C,MAAa,mBAAmB;AAEhC,MAAa,4BAA4B;AAEzC,MAAa,0BACX,aAAa;AAEf,MAAa,gCAAgC;AAE7C,MAAa,kBAAkB;;;;ACnB/B,MAAM,gBACJ;AAOF,MAAa,gBAAgB,EAAE,QAAQ,eAAe,aAAiC;CACrF,MAAM,QAAQ,IAAI,WAAW,OAAO;AACpC,QAAO,gBAAgB,MAAM;CAE7B,IAAI,SAAS;AACb,MAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,IAC1B,WAAU,MAAM,MAAM,KAAK,MAAM;AAEnC,QAAO;;;;;ACdT,IAAa,0BAAb,cAA6C,UAAU;CACrD,YAAY,SAAiB;AAC3B,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;;;;;;;;;;;;;;;;;;;;;ACSN,SAAgB,cACd,OACA,SACgD;AAChD,KAAI,UAAU,QAAQ,UAAU,OAC9B,OAAM,IAAI,wBAAwB,QAAQ;;;;;;;;AChB9C,MAAa,mBAAmB,WAAmC;AACjE,eAAc,OAAO,iBAAiB,mCAAmC;CAEzE,MAAM,mBAAmB,OAAO,gBAAgB;AAEhD,KAAI,CAAC,iBAAkB,QAAO;CAG9B,MAAM,yBAAyB,iBAAiB,MAAM,WAAW,EAAE,EAAE,SACnE,gBAAgB,OACjB;CAGD,MAAM,sBAAsB,QAC1B,iBAAiB,cAAc,WAChC;AAMD,QAAO,yBAAyB;;;;;ACzBlC,MAAa,kBAAkB,WAAmD;CAGhF,MAAM,YAFO,QAAQ,OAAO,CAEL,MAAM,KAAK,CAAC;AAEnC,KAAI,CAAC,UACH;AAGF,QAAO,EAAE,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACyBtB,MAAa,0BACX,EAAE,UAAU,MAAM,SAClB,SAAS,kBAAkB,KACJ;CACvB,MAAM,OAAO,QAAQ,OAAO;CAE5B,MAAM,sBAAM,IAAI,MAAM;CACtB,MAAM,uBAAuB,KAAK,MAAM,KAAK,CAAC,wBAAwB,EAAE;CAGxE,MAAM,cAAc,qBAAqB,QACtC,YAAU,CAACC,QAAM,aAAaA,QAAM,YAAY,IAClD;AAGD,KAAI,YAAY,WAAW,qBAAqB,OAC9C,MAAK,MAAM,IAAI,EACb,sBAAsB,aACvB,CAAC;CAGJ,MAAM,QAAQ,YAAY,MAAM,YAAUA,QAAM,OAAO,SAAS,MAAM,CAAC;AAEvE,KAAI,CAAC,MACH;AAIF,KAAI,WAAW,MAAM,WAAW;EAC9B,MAAM,gBAAgB,YAAY,QAAQ,MAAM,MAAM,MAAM;AAC5D,OAAK,MAAM,IAAI,EACb,sBAAsB,eACvB,CAAC;;AAGJ,QAAO,MAAM;;;;;ACvEf,IAAa,WAAb,MAAa,iBAAiB,UAAU;CACtC;CAEA,YAAY,SAAiB,MAAc,QAAgB;AACzD,QAAM;GACJ,OAAO;GACP;GACA,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;AAEF,OAAK,SAAS;;CAGhB,aAAa,aAAa,UAAoB;AAC5C,MAAI;GACF,MAAM,YAAY,MAAM,SAAS,OAAO,CAAC,MAAM;AAE/C,OACE,aACA,WAAW,aACX,OAAO,UAAU,UAAU,UAC3B;IACA,MAAM,YACJ,UAAU,aAAa,OAAO,UAAU,SAAS,WAC7C,UAAU,OACV;AAEN,WAAO,IAAI,SAAS,UAAU,OAAO,WAAW,SAAS,OAAO;;AAGlE,UAAO;UACD;AACN,UAAO;;;;;;;AClCb,IAAa,2BAAb,cAA8C,UAAU;CACtD,YAAY,EAAE,SAA6C;AACzD,QAAM;GACJ;GACA,MAAM;GACN,SACE;GACF,MAAM;GACN,cAAc;GACf,CAAC;;;;;;ACTN,IAAa,sBAAb,cAAyC,UAAU;CACjD,YAAY,EAAE,SAA6C;AACzD,QAAM;GACJ;GACA,MAAM;GACN,SAAS;GACT,MAAM;GACN,cACE;GACH,CAAC;;;;;;ACTN,IAAa,qBAAb,cAAwC,UAAU;CAChD,YAAY,EAAE,SAA6C;AACzD,QAAM;GACJ;GACA,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;;;;;;ACRN,IAAa,sBAAb,cAAyC,UAAU;CACjD,YAAY,EAAE,SAA6C;AACzD,QAAM;GACJ;GACA,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;;;;;;ACRN,IAAa,sCAAb,cAAyD,UAAU;CACjE,YAAY,EAAE,SAA6C;AACzD,QAAM;GACJ;GACA,MAAM;GACN,SACE;GACF,MAAM;GACN,cACE;GACH,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;ACeN,MAAaC,qBAAkC,UAAU;AACvD,KAAI,iBAAiB,UAAU;AAC7B,MAAI,MAAM,SAAS,mBACjB,QAAO,IAAI,mBAAmB,EAAE,OAAO,OAAO,CAAC;AAGjD,MAAI,MAAM,SAAS,mBACjB,QAAO,IAAI,oBAAoB,EAAE,OAAO,OAAO,CAAC;AAGlD,MAAI,MAAM,SAAS,wBACjB,QAAO,IAAI,yBAAyB,EAAE,OAAO,OAAO,CAAC;AAGvD,MAAI,MAAM,SAAS,oCACjB,QAAO,IAAI,oCAAoC,EAAE,OAAO,OAAO,CAAC;AAGlE,MACE,MAAM,SAAS,4BACf,MAAM,SAAS,wBAEf,QAAO,IAAI,oBAAoB,EAAE,OAAO,OAAO,CAAC;;AAIpD,QAAO;;;;;;;;;;;;ACrCT,MAAa,qCAAqC,EAChD,eAAe,EAAE,QAC0C,EAC3D,MAAM,OAAO,YAA6B;AACxC,KAAI,QAAQ,SAAS,UAAU,KAAK;EAClC,MAAM,WAAW,MAAM,SAAS,aAAa,QAAQ,SAAS;AAE9D,MAAI,UAAU;GACZ,IAAIC,eAAsB;AAE1B,QAAK,MAAM,UAAU,cAAc;IACjC,MAAM,WAAW,OAAO,SAAS;AAEjC,QAAI,UAAU;AACZ,oBAAe;AACf;;;AAIJ,SAAM;;;AAIV,QAAO,QAAQ;GAElB;;;;;;;;;;;AC9BD,MAAa,WAAW,OACtB,WACoB;CACpB,MAAM,OAAO,QAAQ,OAAO;CAC5B,MAAM,OAAO,KAAK,MAAM,KAAK,CAAC;AAE9B,KAAI,KAAK,SAAS,GAAG;EACnB,MAAM,CAAC,OAAO,GAAG,aAAa;AAE9B,OAAK,MAAM,IAAI,EAAE,kBAAkB,WAAW,CAAC;AAE/C,MAAI,UAAU,UAAU,EACtB,CAAK,oBAAoB,OAAO;AAGlC,SAAO;;AAGT,OAAM,oBAAoB,OAAO;AAEjC,QAAO,SAAS,OAAO;;;;;AC3BzB,MAAa,kBAAkB,OAC7B,WAC0B;CAC1B,MAAM,EAAE,cAAc,aAAa,QAAQ,OAAO;;;;;AAMlD,KAAI,aACF,QAAO;CAGT,MAAM,UAAU;AAIhB,KAAI,CAFsB,MAAM,SAAS,aAAa,QAAQ,CAG5D,OAAM,SAAS,YAAY,QAAQ;AAGrC,QAAO;EACL,oBAAoB,SAAS,aAAa,QAAQ;EAClD,OAAO,YAAoB,SAAS,KAAK,SAAS,QAAQ;EAC3D;;;;;ACtBH,MAAa,0CAA0C,OACrD,WACoC;CACpC,MAAM,EAAE,oBAAoB;AAE5B,eAAc,iBAAiB,6BAA6B;;;;;;AAO5D,KAAI,gBAAgB,OAAO,CACzB,QAAO,EAAE;CAGX,MAAM,eAAe,MAAM,gBAAgB,OAAO;CAElD,MAAM,QAAQ,MAAM,SAAS,OAAO;CAEpC,MAAM,cAAc,MAAM,aAAa,KAAK,MAAM;CAClD,MAAM,YAAY,MAAM,aAAa,cAAc;AAEnD,QAAO;EACL,0BAA0B;EAC1B,8BAA8B;EAC9B,iCAAiC;EAClC;;;;;AC1BH,MAAa,0CACX,WACe;AACf,QAAO,EACL,KAAK,OAAO,YAAY;;;;AAItB,MACE,qCAAqC,QAAQ,IAAI,IACjD,CAAC,gBAAgB,OAAO,EACxB;GACA,MAAM,sBAAsB,MAAM,wCAChC,OACD;AAED,UAAO;IACL,MAAM;KACJ,GAAG,QAAQ;KACX,SAAS;MACP,GAAG,QAAQ,KAAK;MAChB,GAAG;MACJ;KACF;IACD,KAAK,QAAQ;IACd;;IAKN;;;;;ACnCH,IAAa,oBAAb,cAAuC,UAAU;CAC/C,YAAY,EAAE,SAA6C;AACzD,QAAM;GACJ;GACA,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;;;;;;ACNN,MAAa,sCAAkD,EAC7D,MAAM,OAAO,YAA6B;AACxC,KAAI,QAAQ,SAAS,WAAW,KAAK;EACnC,IAAIC,QAAsB;AAE1B,MAAI;GACF,MAAM,YAAY,MAAM,QAAQ,SAAS,OAAO,CAAC,MAAM;AAEvD,OACE,aACA,WAAW,aACX,OAAO,UAAU,UAAU,SAG3B,SAAQ,IAAI,MAAM,UAAU,MAAM;UAE9B;AAIR,QAAM,IAAI,kBAAkB,EAAE,OAAO,CAAC;;AAGxC,QAAO,QAAQ;GAElB;;;;;;;;;ACkBD,MAAa,mBACX,UAAkC,EAAE,EACpC,WACG;CACH,MAAM,OAAO,QAAQ,OAAO;CAC5B,MAAM,YAAY,KAAK,MAAM,KAAK;CAElC,MAAMC,WAAsB;EAC1B,UAAU,KAAK;EACf,SAAS;GACP,gBAAgB;IACf,6BAA6B,OAAO;IACpC,4BAA4B,aAAa,EAAE,QAAQ,IAAI,CAAC;IACxD,gCAAgC,KAAK;IACrC,6BAA6B,GAAG,gBAAgB,GAAG;GACpD,GAAG,KAAK,eAAe;GACvB,GAAG,QAAQ;GACZ;EACF;AAED,KAAI,OAAO,MACT,UAAS,QAAQ,gBAAgB,UAAU,OAAO;AAGpD,KAAI,OAAO,mBAAmB,gBAAgB,OAAO,CACnD,UAAS,cAAc;AAGzB,KAAI,QAAQ,mBAAmB,UAAU,SACvC,UAAS,QAAQ,oBAAoB,UAAU;AAGjD,KAAI,QAAQ,0BAA0B;EACpC,MAAM,gBAAgB,uBACpB,EAAE,OAAO,QAAQ,0BAA0B,EAC3C,OACD;AACD,MAAI,cACF,UAAS,QAAQ,gCAAgC;;CAIrD,MAAM,mBAAmB,eAAe,OAAO,EAAE;CAIjD,MAAM,kCACJ,SAAS,QAAQ,+BAA+B;AAElD,KAAI,oBAAoB,CAAC,gCACvB,UAAS,QAAQ,6BAA6B;AAGhD,QAAO,IAAI,OACT,IAAI,cAAc;EAChB,GAAG;EACH,UAAU,KAAK;EACf,YAAY;GACV,uCAAuC,OAAO;GAC9C,kCAAkC,EAChC,cAAc,CAAC,GAAI,QAAQ,gBAAgB,EAAE,EAAG,kBAAkB,EACnE,CAAC;GACF,8BAA8B;GAC/B;EACF,CAAC,CACH;;;;;;;;;;;;;;;ACjGH,MAAa,sBAAsB,OACjC,WACkB;CAClB,MAAM,OAAO,QAAQ,OAAO;CAE5B,MAAM,EAAE,kBAAkB;CAI1B,MAAM,EAAE,WAAW,MAFD,gBAAgB,EAAE,EAAE,OAAO,CAEV,UAAU;EAC3C,OAAO;EACP;EACD,CAAC;AAEF,MAAK,MAAM,IAAI;EACb,kBAAkB;EAClB,4BAA4B,KAAK,KAAK,GAAG;EAC1C,CAAC;;;;;ACvBJ,MAAaC,kBAA4C;CACvD,MAAM;EACJ,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,MAAM;EACJ,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,OAAO;EACL,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,KAAK;EACH,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,QAAQ;EACN,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,SAAS;EACP,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,KAAK;EACH,cAAc;EAEd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,MAAM;EACJ,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,KAAK;EACH,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC7B,uBAAuB;EACxB;CACD,OAAO;EACL,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,OAAO;EACL,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,SAAS;EACP,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,KAAK;EACH,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,OAAO;EACL,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,KAAK;EACH,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,MAAM;EACJ,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACF;;;;ACxFD,MAAa,uCACX,4BACU;CAGV,MAAM,QAFS,OAAO,KAAK,gBAAgB,CAEtB,MAClB,YACC,gBAAgBC,SAAO,gCACvB,wBACH;AAED,eAAc,OAAO,kBAAkB,0BAA0B;AAEjE,QAAO;;;;;ACfT,MAAa,uBAAuB,aAAa;AAEjD,MAAa,4BACX;;;;ACHF,MAAa,4BAA4B;AACzC,MAAa,sCACX;AAEF,MAAa,wBAAwB;CACnC,aAAa;CACb,MAAM,GAAG,0BAA0B;CACnC,sBAAsB;CACvB;;;;ACRD,IAAa,oBAAb,cAAuC,UAAU;CAC/C,YAAY,SAAiB;AAC3B,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC"}