@dynamic-labs-sdk/client 0.22.1 → 0.23.1

package/dist/{InvalidParamError-Z-OXIzF5.cjs.js → InvalidParamError-BPDELsWj.cjs.js}

@@ -1,9 +1,9 @@
-const require_getNetworkProviderFromNetworkId = require('./getNetworkProviderFromNetworkId-TKiHxL8x.cjs.js');
+const require_getNetworkProviderFromNetworkId = require('./getNetworkProviderFromNetworkId-De3xWm2m.cjs.js');
 let _dynamic_labs_sdk_api_core = require("@dynamic-labs/sdk-api-core");
 
 //#region package.json
 var name = "@dynamic-labs-sdk/client";
-var version = "0.22.1";
+var version = "0.23.1";
 var dependencies = {
 	"@dynamic-labs-sdk/assert-package-version": "workspace:*",
 	"@dynamic-labs-wallet/browser-wallet-client": "0.0.286",
@@ -1416,4 +1416,4 @@ Object.defineProperty(exports, 'version', {
     return version;
   }
 });
-//# sourceMappingURL=InvalidParamError-Z-OXIzF5.cjs.js.map
+//# sourceMappingURL=InvalidParamError-BPDELsWj.cjs.js.map

package/dist/{InvalidParamError-Z-OXIzF5.cjs.js.map → InvalidParamError-BPDELsWj.cjs.js.map}

@@ -1 +1 @@
-{"version":3,"file":"InvalidParamError-Z-OXIzF5.cjs.js","names":["defaultClient: DynamicClient | null","AuthStorageEnum","result: Record<string, unknown>","getCore","baseEvent: Omit<FunctionInstrumentationEvent, 'phase' | 'timestamp'>","clientErrorMapper: ErrorMapper","errorToThrow: Error","cause: Error | null","createApiClient","CHAINS_INFO_MAP: Record<Chain, ChainInfo>"],"sources":["../package.json","../src/client/core/getCore/getCore.ts","../src/errors/base/BaseError.ts","../src/errors/ClientNotFoundError.ts","../src/client/defaultClient/defaultClient.ts","../src/utils/getNonce/constants.ts","../src/modules/apiClient/constants.ts","../src/utils/randomString/randomString.ts","../src/errors/ValueMustBeDefinedError.ts","../src/utils/assertDefined/assertDefined.ts","../src/modules/projectSettings/isCookieEnabled/isCookieEnabled.ts","../src/modules/auth/extractSessionId/extractSessionId.ts","../src/utils/getUserAgent/getUserAgent.ts","../src/services/instrumentation/constants.ts","../src/services/instrumentation/scrubParameters/scrubParameters.ts","../src/services/instrumentation/instrumentFunction/extractParams/extractParams.ts","../src/services/instrumentation/instrumentFunction/scrubResolvedValue/scrubResolvedValue.ts","../src/services/instrumentation/instrumentFunction/instrumentFunction.ts","../src/modules/sessionKeys/getSessionKeys/getSessionKeys.ts","../src/modules/auth/getElevatedAccessToken/getElevatedAccessToken.ts","../src/errors/APIError/APIError.ts","../src/errors/InvalidExternalAuthError.ts","../src/errors/LinkCredentialError.ts","../src/errors/MfaInvalidOtpError.ts","../src/errors/MfaRateLimitedError.ts","../src/errors/SandboxMaximumThresholdReachedError.ts","../src/modules/apiClient/utils/clientErrorMapper/clientErrorMapper.ts","../src/modules/apiClient/utils/convertToApiErrorMiddleware/convertToApiErrorMiddleware.ts","../src/utils/getNonce/getNonce.ts","../src/modules/deviceRegistration/getDeviceSigner/getDeviceSigner.ts","../src/modules/deviceRegistration/getHeadersForNonceSignedByDeviceSigners/getHeadersForNonceSignedByDeviceSigners.ts","../src/modules/apiClient/utils/deviceSignatureHeadersMiddleware/createDeviceSignatureHeadersMiddleware.ts","../src/errors/UnauthorizedError.ts","../src/modules/apiClient/utils/unauthorizedMiddleware/createUnauthorizedMiddleware.ts","../src/modules/apiClient/createApiClient.ts","../src/utils/getNonce/fetchAndStoreNonces/fetchAndStoreNonces.ts","../src/modules/wallets/constants.ts","../src/utils/getChainFromVerifiedCredentialChain/getChainFromVerifiedCredentialChain.ts","../src/constants.ts","../src/modules/waas/constants.ts","../src/errors/InvalidParamError.ts"],"sourcesContent":["","import type { DynamicClient } from '../../types';\nimport type { DynamicCore } from '../types';\n\n/** @not-instrumented */\nexport const getCore = (client: DynamicClient): DynamicCore => {\n  // @ts-expect-error - this was hidden from the public API\n  return client.__core;\n};\n","/* eslint-disable custom-rules/function-name-matches-filename */\nimport { version } from '../../../package.json';\n\nexport type BaseErrorParameters = {\n  /** The underlying error that caused this error, if any */\n  cause: Error | null;\n  /** The error unique code */\n  code: string;\n  /** Additional detailed information about the error */\n  details?: string;\n  /** URL to relevant documentation for this error */\n  docsUrl: string | null;\n  /** Array of additional contextual messages to be displayed */\n  metaMessages?: string[];\n  /** Custom name for the error. Defaults to 'BaseError' if not provided */\n  name: string;\n  /** A brief, human-readable description of the error */\n  shortMessage: string;\n};\n\nconst getDetails = ({ details, cause }: BaseErrorParameters) => {\n  if (cause instanceof BaseError) {\n    return cause.details;\n  }\n\n  if (cause?.message) {\n    return cause.message;\n  }\n\n  return details;\n};\n\n/**\n * Formats the error message with all available information\n */\n// eslint-disable-next-line custom-rules/one-function-per-file\nconst formatMessage = ({\n  shortMessage,\n  details,\n  docsUrl,\n  metaMessages,\n}: BaseErrorParameters) => {\n  return [\n    '[Dynamic JS SDK]',\n    shortMessage,\n    '',\n    ...(metaMessages ? [...metaMessages, ''] : []),\n    ...(docsUrl ? [`Docs: ${docsUrl}`] : []),\n    ...(details ? [`Details: ${details}`] : []),\n    `Version: ${version}`,\n    `Timestamp: ${new Date().toISOString()}`,\n  ].join('\\n');\n};\n\n/**\n * Base error class that provides structured error handling with detailed information\n */\nexport abstract class BaseError extends Error {\n  /** The error unique code */\n  code: string;\n  details: string | undefined;\n  private readonly formattedMessage: string | undefined;\n  override name = 'BaseError';\n  override cause: BaseError | Error | undefined;\n\n  constructor(args: BaseErrorParameters) {\n    const details = getDetails(args);\n    const formattedMessage = formatMessage({ ...args, details });\n    super(\n      args.shortMessage ?? formattedMessage,\n      args.cause ? { cause: args.cause } : undefined\n    );\n\n    this.formattedMessage = formattedMessage;\n    this.details = details;\n    this.name = args.name ?? this.name;\n    this.cause = args.cause ?? this.cause;\n    this.code = args.code;\n  }\n\n  /**\n   * Walks the cause chain of the error and returns the root error\n   */\n  walk(): Error | undefined {\n    const cause = this.cause;\n\n    if (cause instanceof BaseError) {\n      return cause.walk();\n    }\n\n    return cause;\n  }\n\n  override toString() {\n    return this.formattedMessage;\n  }\n}\n","import { BaseError } from './base';\n\nexport class ClientNotFoundError extends BaseError {\n  constructor() {\n    super({\n      cause: null,\n      code: 'client_not_found_error',\n      docsUrl: null,\n      name: 'ClientNotFoundError',\n      shortMessage:\n        'No Dynamic client has been created yet. Make sure you have called createDynamicClient() first.',\n    });\n  }\n}\n","/* eslint-disable custom-rules/function-name-matches-filename */\nimport { ClientNotFoundError } from '../../errors/ClientNotFoundError';\nimport { getCore } from '../core/getCore';\nimport type { DynamicClient } from '../types';\n\nlet defaultClient: DynamicClient | null = null;\nlet numOfInitializedClients = 0;\n\n/**\n * Returns the DynamicClient instance that was initialized with createDynamicClient.\n *\n * If more than one instance of DynamicClient was initialized, you should not use this function.\n * Instead, you should pass the client instance you stored to the function that needs it.\n  * @not-instrumented\n */\nexport const getDefaultClient = (): DynamicClient => {\n  if (!defaultClient) {\n    throw new ClientNotFoundError();\n  }\n\n  if (numOfInitializedClients > 1) {\n    const core = getCore(defaultClient);\n    core.logger.debug(\n      'Multiple instances of DynamicClient found. If you are only using one client (recommended), make sure you are not calling ' +\n        '\"createDynamicClient\" multiple times. If you are using multiple clients, make sure you are passing which client to use as ' +\n        'the last param of all Dynamic functions.'\n    );\n  }\n\n  return defaultClient;\n};\n\n/** @not-instrumented */\n// eslint-disable-next-line custom-rules/one-function-per-file\nexport const setDefaultClient = (client: DynamicClient) => {\n  defaultClient = client;\n  numOfInitializedClients++;\n};\n","export const NONCE_POOL_EXPIRATION_TIME = 60000 * 60 * 24;\n\nexport const NONCE_POOL_SIZE = 5;\n","import { dependencies } from '../../../package.json';\n\nexport const DYNAMIC_API_VERSION_HEADER = 'x-dyn-api-version';\n\nexport const DYNAMIC_REQUEST_ID_HEADER = 'x-dyn-request-id';\n\nexport const DYNAMIC_SDK_VERSION_HEADER = 'x-dyn-version';\n\nexport const ELEVATED_ACCESS_TOKEN_HEADER = 'x-dyn-elevated-access-token';\n\nexport const MFA_TOKEN_HEADER = 'x-mfa-auth-token';\n\nexport const SESSION_PUBLIC_KEY_HEADER = 'x-dyn-session-public-key';\n\nexport const DYNAMIC_SDK_API_VERSION =\n  dependencies['@dynamic-labs/sdk-api-core'];\n\nexport const DYNAMIC_SDK_SESSION_ID_HEADER = 'x-dyn-session-id';\n\nexport const CLIENT_SDK_NAME = 'ClientSDK';\n","const DEFAULT_CHARS =\n  'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';\n\ntype RandomStringParams = {\n  chars?: string;\n  length: number;\n};\n\n/** @not-instrumented */\nexport const randomString = ({ chars = DEFAULT_CHARS, length }: RandomStringParams) => {\n  const bytes = new Uint8Array(length);\n  crypto.getRandomValues(bytes);\n\n  let result = '';\n  for (let i = 0; i < length; i++) {\n    result += chars[bytes[i] % chars.length];\n  }\n  return result;\n};\n","import { BaseError } from './base';\n\nexport class ValueMustBeDefinedError extends BaseError {\n  constructor(message: string) {\n    super({\n      cause: null,\n      code: 'value_must_be_defined_error',\n      docsUrl: null,\n      name: 'ValueMustBeDefined',\n      shortMessage: message,\n    });\n  }\n}\n","/* eslint-disable func-style -- javascript requires this to be a function */\n\nimport { ValueMustBeDefinedError } from './../../errors/ValueMustBeDefinedError';\n\n/**\n * Asserts that a value is not null or undefined, throwing an error if it is.\n * This function acts as a type guard, narrowing the type to exclude null and undefined.\n *\n * @template T - The type of the value being checked\n * @param value - The value to check for null or undefined\n * @param message - The error message to throw if the value is null or undefined\n * @throws Throws an error with the provided message if value is null or undefined\n * @example\n * ```typescript\n * const maybeString: string | null = getValue();\n * assertDefined(maybeString, 'String value is required');\n * // maybeString is now typed as string (null is excluded)\n * ```\n */\nexport function assertDefined<T>(\n  value: T,\n  message: string\n): asserts value is Exclude<NonNullable<T>, void> {\n  if (value === null || value === undefined) {\n    throw new ValueMustBeDefinedError(message);\n  }\n}\n","import { AuthStorageEnum } from '@dynamic-labs/sdk-api-core';\n\nimport type { DynamicClient } from '../../../client/types';\nimport { assertDefined } from '../../../utils/assertDefined';\n\n/**\n * Returns true if the client is using Dynamic cookies or a BYO JWT cookie.\n  * @not-instrumented\n */\nexport const isCookieEnabled = (client: DynamicClient): boolean => {\n  assertDefined(client.projectSettings, 'Project settings are not defined');\n\n  const securitySettings = client.projectSettings.security;\n\n  if (!securitySettings) return false;\n\n  // client uses Dynamic cookies\n  const dynamicCookiesEnabled = (securitySettings.auth?.storage || []).includes(\n    AuthStorageEnum.Cookie\n  );\n\n  // BYO JWT client puts their non-Dynamic JWT in a cookie\n  const byoJwtCookieEnabled = Boolean(\n    securitySettings.externalAuth?.cookieName\n  );\n\n  // should return true for both of these scenarios\n  // because we also need to do `credentials: true` in api.ts when\n  // a byo jwt client sets their named cookie for their jwt and\n  // needs to send it to our backend\n  return dynamicCookiesEnabled || byoJwtCookieEnabled;\n};\n","/**\n * Extracts the session ID (`sid` claim) from a JWT token string.\n *\n * Decodes the base64url-encoded payload segment of the token and reads the\n * `sid` field. This is used to correlate instrumentation events with the\n * authenticated session, without ever forwarding the full token.\n *\n * Returns `null` when no token is present, when the token is malformed, or\n * when the payload does not contain a `sid` claim.\n  * @not-instrumented\n */\nexport const extractSessionId = (token: string): string | null => {\n  try {\n    const payload = token.split('.')[1];\n    const decoded = JSON.parse(atob(payload));\n\n    return decoded.sid ?? null;\n  } catch {\n    return null;\n  }\n};\n","/**\n * Returns the browser's `navigator.userAgent` string for inclusion in\n * instrumentation events.\n *\n * Falls back to an empty string in environments where `navigator` is not\n * available (e.g., Node.js SSR, service workers) so that callers never need\n * to guard against undefined.\n  * @not-instrumented\n */\nexport const getUserAgent = (): string => {\n  try {\n    // eslint-disable-next-line no-restricted-globals\n    return navigator.userAgent;\n  } catch {\n    return '';\n  }\n};\n","export const DEFAULT_PII_FIELDS = [\n  'password',\n  'token',\n  'secret',\n  'privateKey',\n  'mnemonic',\n  'seed',\n  'email',\n  'phone',\n  'ssn',\n  'address',\n  'authorization',\n];\n\nexport const REDACTED_VALUE = '[REDACTED]';\n\nexport const MAX_STRING_LENGTH = 500;\n\nexport const TRUNCATED_SUFFIX = '...[truncated]';\n\n/**\n * Label prefix for binary data placeholders. The full placeholder includes the\n * byte length, e.g. `[Binary:16 bytes]`, so consumers can gauge data size\n * without the actual bytes appearing in logs.\n */\nexport const BINARY_LABEL = 'Binary';\n\n/**\n * Placeholder emitted when a circular reference is detected in the value tree.\n * Using a named constant makes it easy to search for or filter in downstream\n * log tooling.\n */\nexport const CIRCULAR_VALUE = '[Circular]';\n","import {\n  BINARY_LABEL,\n  CIRCULAR_VALUE,\n  MAX_STRING_LENGTH,\n  REDACTED_VALUE,\n  TRUNCATED_SUFFIX,\n} from '../constants';\n\ntype ScrubContext = {\n  piiFieldsLower: string[];\n  redactAll?: boolean;\n  visited: WeakSet<object>;\n};\n\ntype ScrubParametersParams = {\n  piiFields: string[];\n  redactAll?: boolean;\n  value: Record<string, unknown>;\n};\n\ntype ScrubStringParams = {\n  key: string;\n  piiFieldsLower: string[];\n  redactAll?: boolean;\n  value: string;\n};\n\ntype ScrubArrayParams = {\n  context: ScrubContext;\n  value: unknown[];\n};\n\ntype ScrubObjectParams = {\n  context: ScrubContext;\n  value: Record<string, unknown>;\n};\n\ntype ScrubValueParams = {\n  context: ScrubContext;\n  key: string;\n  value: unknown;\n};\n\nconst scrubString = ({\n  key,\n  piiFieldsLower,\n  redactAll,\n  value,\n}: ScrubStringParams): string => {\n  if (piiFieldsLower.includes(key.toLowerCase())) {\n    return REDACTED_VALUE;\n  }\n\n  if (redactAll) {\n    return REDACTED_VALUE;\n  }\n\n  if (value.length > MAX_STRING_LENGTH) {\n    return value.slice(0, MAX_STRING_LENGTH) + TRUNCATED_SUFFIX;\n  }\n\n  return value;\n};\n\n// eslint-disable-next-line custom-rules/one-function-per-file\nconst scrubArray = ({ context, value }: ScrubArrayParams): unknown[] => {\n  if (context.visited.has(value)) {\n    return [CIRCULAR_VALUE];\n  }\n\n  context.visited.add(value);\n\n  const result = value.map((item, index) =>\n    scrubValue({ context, key: String(index), value: item })\n  );\n\n  context.visited.delete(value);\n\n  return result;\n};\n\n// eslint-disable-next-line custom-rules/one-function-per-file\nconst scrubObject = ({\n  context,\n  value,\n}: ScrubObjectParams): Record<string, unknown> => {\n  if (context.visited.has(value)) {\n    return { [CIRCULAR_VALUE]: true };\n  }\n\n  context.visited.add(value);\n\n  // Object.create(null) prevents prototype pollution when keys like '__proto__'\n  // are present (e.g. from a Map converted to a plain object).\n  const result = Object.create(null) as Record<string, unknown>;\n\n  for (const key of Object.keys(value)) {\n    result[key] = scrubValue({ context, key, value: value[key] });\n  }\n\n  context.visited.delete(value);\n\n  return result;\n};\n\n// eslint-disable-next-line custom-rules/one-function-per-file\nconst scrubValue = ({ context, key, value }: ScrubValueParams): unknown => {\n  if (value === null || value === undefined) {\n    return value;\n  }\n\n  if (value instanceof Uint8Array) {\n    return `[${BINARY_LABEL}:${value.byteLength} bytes]`;\n  }\n\n  if (context.piiFieldsLower.includes(key.toLowerCase())) {\n    return REDACTED_VALUE;\n  }\n\n  if (typeof value === 'string') {\n    return scrubString({\n      key,\n      piiFieldsLower: context.piiFieldsLower,\n      redactAll: context.redactAll,\n      value,\n    });\n  }\n\n  if (Array.isArray(value)) {\n    return scrubArray({ context, value });\n  }\n\n  if (value instanceof Set) {\n    if (context.visited.has(value)) {\n      return [CIRCULAR_VALUE];\n    }\n\n    context.visited.add(value);\n    const setResult = scrubArray({ context, value: [...value] });\n    context.visited.delete(value);\n\n    return setResult;\n  }\n\n  if (value instanceof Map) {\n    if (context.visited.has(value)) {\n      return { [CIRCULAR_VALUE]: true };\n    }\n\n    context.visited.add(value);\n    // Object.create(null) avoids prototype pollution when Map keys include\n    // '__proto__', 'constructor', or 'prototype'\n    const asObject = Object.create(null) as Record<string, unknown>;\n\n    for (const [k, v] of value.entries()) {\n      asObject[String(k)] = v;\n    }\n\n    const mapResult = scrubObject({ context, value: asObject });\n    context.visited.delete(value);\n\n    return mapResult;\n  }\n\n  // WeakMap and WeakSet are not iterable and expose no `.size` or enumeration\n  // methods by design — their entries are held weakly and are not accessible\n  // programmatically. We emit a tagged placeholder that identifies the type so\n  // the log record remains self-describing without attempting enumeration.\n  if (value instanceof WeakMap) {\n    return '[WeakMap]';\n  }\n\n  if (value instanceof WeakSet) {\n    return '[WeakSet]';\n  }\n\n  if (value instanceof Date) {\n    return value.toISOString();\n  }\n\n  if (value instanceof Error) {\n    return `[Error: ${value.message}]`;\n  }\n\n  if (typeof value === 'object') {\n    return scrubObject({ context, value: value as Record<string, unknown> });\n  }\n\n  return value;\n};\n\n/** @not-instrumented */\n// eslint-disable-next-line custom-rules/one-function-per-file\nexport const scrubParameters = ({\n  piiFields,\n  redactAll,\n  value,\n}: ScrubParametersParams): Record<string, unknown> => {\n  const context: ScrubContext = {\n    piiFieldsLower: piiFields.map((field) => field.toLowerCase()),\n    redactAll,\n    visited: new WeakSet<object>(),\n  };\n\n  return scrubObject({ context, value });\n};\n","/**\n * Normalises the raw positional arguments of an instrumented function call\n * into a flat `Record<string, unknown>` suitable for structured logging.\n *\n * ## Why this is needed\n *\n * Instrumented functions are wrapped with `(...args: unknown[])`, so their\n * parameters arrive as an array. Logging a raw array loses the semantic names\n * of each argument. This function recovers a named representation:\n *\n * - **No arguments** → `{}`\n * - **Single plain-object argument** → that object is returned as-is, because\n *   SDK functions follow the single-object-parameter convention, so the object\n *   already carries named keys (`{ amount, to }`, etc.).\n * - **Everything else** (multiple args, a single primitive, a single array) →\n *   each value is indexed as `arg0`, `arg1`, …\n *\n * ## Why arrays are NOT treated as plain objects\n *\n * `typeof [] === 'object'` and `[] !== null`, so without the `Array.isArray`\n * guard a single-array argument would be returned as-is. That would produce\n * an object with numeric string keys (`{ '0': ..., '1': ... }`), which is\n * misleading and inconsistent with how multi-arg calls are handled. Instead,\n * arrays fall through to the indexed `arg0` path.\n  * @not-instrumented\n */\nexport const extractParams = (args: unknown[]): Record<string, unknown> => {\n  if (args.length === 0) {\n    return {};\n  }\n\n  if (\n    args.length === 1 &&\n    typeof args[0] === 'object' &&\n    args[0] !== null &&\n    !Array.isArray(args[0])\n  ) {\n    // Single plain-object argument: return it directly so named keys are preserved.\n    return args[0] as Record<string, unknown>;\n  }\n\n  // Multiple args, a primitive, or an array: index each value positionally.\n  const result: Record<string, unknown> = {};\n\n  for (let i = 0; i < args.length; i++) {\n    result[`arg${i}`] = args[i];\n  }\n\n  return result;\n};\n","import { scrubParameters } from '../../scrubParameters';\n\ntype ScrubResolvedValueParams = {\n  piiFields: string[];\n  redactAll?: boolean;\n  value: unknown;\n};\n\n/**\n * Scrubs a resolved return value of any type before logging it.\n * Routes through `scrubParameters` by wrapping the value so that strings,\n * arrays, Dates, Errors, and all other types are handled identically to\n * nested object fields.\n  * @not-instrumented\n */\nexport const scrubResolvedValue = ({\n  piiFields,\n  redactAll,\n  value,\n}: ScrubResolvedValueParams): unknown =>\n  scrubParameters({\n    piiFields,\n    redactAll,\n    value: { result: value },\n  }).result;\n","import type { DynamicCore } from '../../../client/core/types/DynamicCore';\nimport { extractSessionId } from '../../../modules/auth/extractSessionId/extractSessionId';\nimport { getUserAgent } from '../../../utils/getUserAgent/getUserAgent';\nimport type {\n  FunctionInstrumentationEvent,\n  SerializedError,\n} from '../instrumentation.types';\nimport { scrubParameters } from '../scrubParameters';\nimport { extractParams } from './extractParams/extractParams';\nimport { scrubResolvedValue } from './scrubResolvedValue/scrubResolvedValue';\n\n// Error properties (message, name, stack) are non-enumerable so JSON.stringify\n// produces {} for raw Error objects. This helper extracts them explicitly.\nconst serializeError = (error: unknown): SerializedError => {\n  if (error instanceof Error) {\n    return { message: error.message, name: error.name, stack: error.stack };\n  }\n  return { message: String(error), name: 'UnknownError' };\n};\n\ntype InstrumentFunctionParams<T extends (...args: unknown[]) => unknown> = {\n  /** The original function to wrap. */\n  fn: T;\n  /** Human-readable name recorded in every emitted event. */\n  functionName: string;\n  /**\n   * Returns the current `DynamicCore` instance, or `undefined` when the SDK\n   * has not yet been initialised. Instrumentation is skipped when this returns\n   * `undefined` or when `core.instrumentation.config.enabled` is `false`.\n   */\n  getCore: () => DynamicCore | undefined;\n  /**\n   * When `true`, every field in `parameters` and `resolvedValue` is replaced\n   * with `\"[redacted]\"` regardless of `piiFields`. Use this for functions\n   * whose arguments are inherently sensitive (e.g., signing, authentication).\n   */\n  redactAll?: boolean;\n};\n\n/**\n * Wraps a function so that each invocation emits a structured\n * `FunctionInstrumentationEvent` at three lifecycle points:\n *\n * - **started** — immediately before the function body executes, with the\n *   PII-scrubbed call parameters.\n * - **resolved** — after the function (or its returned Promise) settles\n *   successfully, with the PII-scrubbed return value.\n * - **rejected** — if the function throws synchronously or its returned\n *   Promise rejects.\n *\n * The original return value (or thrown error) is always forwarded to the\n * caller unchanged — instrumentation is purely observational.\n *\n * ## Usage\n *\n * ```ts\n * const transfer = instrumentFunction({\n *   fn: rawTransfer,\n *   functionName: 'transfer',\n *   getCore: () => core,\n * });\n *\n * // When called, three events are emitted automatically:\n * await transfer({ amount: 1, to: '0xabc' });\n * ```\n *\n * ## How functions are wrapped\n *\n * `instrumentFunction` is not called manually in application code. Instead,\n * the esbuild instrumentation plugin (`tools/instrumentation-plugin`) injects\n * it at build time: any exported function annotated with `@instrumented` in its\n * JSDoc is automatically wrapped by the plugin during the build step.\n * The plugin strips the original `export`, renames the function, and re-exports\n * it under the original name via `instrumentFunction(...)` — so the public API\n * is unchanged and no call sites need to be updated.\n *\n * ## Opting out\n *\n * Instrumentation is skipped entirely when:\n * - `getCore()` returns `undefined` (SDK not initialised), or\n * - `core.instrumentation.config.enabled` is `false`.\n *\n * In both cases the original function is called directly with no overhead.\n *\n * ## PII scrubbing\n *\n * All string values whose key appears in `piiFields` are replaced with\n * `\"[redacted]\"` before events are emitted. Pass `redactAll: true` to redact\n * every field, regardless of key name.\n * @not-instrumented\n */\n// eslint-disable-next-line custom-rules/one-function-per-file\nexport const instrumentFunction = <T extends (...args: unknown[]) => unknown>({\n  fn,\n  functionName,\n  getCore,\n  redactAll,\n}: InstrumentFunctionParams<T>): T => {\n  const wrapped = (...args: unknown[]) => {\n    const core = getCore();\n\n    if (!core) {\n      return fn(...args);\n    }\n\n    if (!core.instrumentation.config.enabled) {\n      return fn(...args);\n    }\n\n    const instrumentation = core.instrumentation;\n    const state = core.state.get();\n\n    const baseEvent: Omit<FunctionInstrumentationEvent, 'phase' | 'timestamp'> =\n      {\n        environmentId: core.environmentId,\n        functionName,\n        parameters: scrubParameters({\n          piiFields: instrumentation.config.piiFields,\n          redactAll,\n          value: extractParams(args),\n        }),\n        sdkSessionId: core.sdkSessionId,\n        sdkVersion: core.version,\n        // Function events always use 'info' — phase already conveys whether the call\n        // succeeded or failed, so status is not needed to signal severity here.\n        status: 'info',\n        tokenSessionId: state.token ? extractSessionId(state.token) : null,\n        userAgent: getUserAgent(),\n        userId: state.user?.id ?? null,\n      };\n\n    instrumentation.logFunction({\n      ...baseEvent,\n      phase: 'started',\n      timestamp: new Date().toISOString(),\n    });\n\n    try {\n      const result = fn(...args);\n\n      if (result instanceof Promise) {\n        return result\n          .then((value) => {\n            instrumentation.logFunction({\n              ...baseEvent,\n              phase: 'resolved',\n              resolvedValue: scrubResolvedValue({\n                piiFields: instrumentation.config.piiFields,\n                redactAll,\n                value,\n              }),\n              timestamp: new Date().toISOString(),\n            });\n\n            return value;\n          })\n          .catch((error) => {\n            instrumentation.logFunction({\n              ...baseEvent,\n              phase: 'rejected',\n              rejectedError: serializeError(error),\n              timestamp: new Date().toISOString(),\n            });\n            throw error;\n          });\n      }\n\n      instrumentation.logFunction({\n        ...baseEvent,\n        phase: 'resolved',\n        resolvedValue: scrubResolvedValue({\n          piiFields: instrumentation.config.piiFields,\n          redactAll,\n          value: result,\n        }),\n        timestamp: new Date().toISOString(),\n      });\n\n      return result;\n    } catch (error) {\n      instrumentation.logFunction({\n        ...baseEvent,\n        phase: 'rejected',\n        rejectedError: serializeError(error),\n        timestamp: new Date().toISOString(),\n      });\n\n      throw error;\n    }\n  };\n\n  return wrapped as T;\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport type { SessionKeys } from '../sessionKeys.types';\n\n/** @instrumented */\nexport const getSessionKeys = (client: DynamicClient): SessionKeys | undefined => {\n  const core = getCore(client);\n\n  const publicKey = core.state.get().sessionKeys;\n\n  if (!publicKey) {\n    return undefined;\n  }\n\n  return { publicKey };\n};\n","import { getCore } from '../../../client/core/getCore';\nimport { getDefaultClient } from '../../../client/defaultClient';\n\ntype GetElevatedAccessTokenParams = {\n  /**\n   * Whether to consume single-use tokens after retrieval.\n   * Set to `false` to check for token existence without side-effects.\n   * @default true\n    * @instrumented\n */\n  consume?: boolean;\n  scope: string;\n};\n\n/**\n * Gets an elevated access token by scope.\n *\n * This function retrieves an elevated access token that contains the specified scope.\n * Expired tokens are automatically filtered out.\n *\n * By default, if the token has `singleUse: true`, it will be automatically\n * consumed (removed from state) after retrieval. Pass `consume: false` to\n * check for token existence without consuming it.\n *\n * @param params - The parameters object.\n * @param params.scope - The scope to match (e.g., 'wallet:export').\n * @param params.consume - Whether to consume single-use tokens (default: true).\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns The elevated access token if found and not expired, or undefined if not found or expired.\n *\n * @example\n * ```typescript\n * // Retrieve and consume (default)\n * const token = getElevatedAccessToken({ scope: 'wallet:export' });\n *\n * // Check existence without consuming\n * const token = getElevatedAccessToken({ scope: 'credential:unlink', consume: false });\n * ```\n  * @not-instrumented\n */\nexport const getElevatedAccessToken = (\n  { consume = true, scope }: GetElevatedAccessTokenParams,\n  client = getDefaultClient()\n): string | undefined => {\n  const core = getCore(client);\n\n  const now = new Date();\n  const elevatedAccessTokens = core.state.get().elevatedAccessTokens || [];\n\n  // Filter out expired tokens\n  const validTokens = elevatedAccessTokens.filter(\n    (token) => !token.expiresAt || token.expiresAt > now\n  );\n\n  // Remove expired tokens from state if any were found\n  if (validTokens.length !== elevatedAccessTokens.length) {\n    core.state.set({\n      elevatedAccessTokens: validTokens,\n    });\n  }\n\n  const token = validTokens.find((token) => token.scopes.includes(scope));\n\n  if (!token) {\n    return undefined;\n  }\n\n  // Check if token should be consumed based on singleUse property\n  if (consume && token.singleUse) {\n    const updatedTokens = validTokens.filter((t) => t !== token);\n    core.state.set({\n      elevatedAccessTokens: updatedTokens,\n    });\n  }\n\n  return token.token;\n};\n","import { BaseError } from '../base';\n\nexport class APIError extends BaseError {\n  status: number;\n\n  constructor(message: string, code: string, status: number) {\n    super({\n      cause: null,\n      code,\n      docsUrl: null,\n      name: 'APIError',\n      shortMessage: message,\n    });\n\n    this.status = status;\n  }\n\n  static async fromResponse(response: Response) {\n    try {\n      const errorBody = await response.clone().json();\n\n      if (\n        errorBody &&\n        'error' in errorBody &&\n        typeof errorBody.error === 'string'\n      ) {\n        const errorCode =\n          'code' in errorBody && typeof errorBody.code === 'string'\n            ? errorBody.code\n            : 'unknown_error';\n\n        return new APIError(errorBody.error, errorCode, response.status);\n      }\n\n      return null;\n    } catch {\n      return null;\n    }\n  }\n}\n","import { BaseError, type BaseErrorParameters } from './base';\n\nexport class InvalidExternalAuthError extends BaseError {\n  constructor({ cause }: Pick<BaseErrorParameters, 'cause'>) {\n    super({\n      cause,\n      code: 'invalid_external_auth_error',\n      docsUrl:\n        'https://www.dynamic.xyz/docs/external-auth/third-party-auth-overview',\n      name: 'InvalidExternalAuthError',\n      shortMessage: 'Error authenticating with external JWT',\n    });\n  }\n}\n","import { BaseError, type BaseErrorParameters } from './base';\n\nexport class LinkCredentialError extends BaseError {\n  constructor({ cause }: Pick<BaseErrorParameters, 'cause'>) {\n    super({\n      cause,\n      code: 'link_credential_error',\n      docsUrl: null,\n      name: 'LinkCredentialError',\n      shortMessage:\n        'The credential you are trying to link is associated with another account and cannot be reassigned.',\n    });\n  }\n}\n","import { BaseError, type BaseErrorParameters } from './base';\n\nexport class MfaInvalidOtpError extends BaseError {\n  constructor({ cause }: Pick<BaseErrorParameters, 'cause'>) {\n    super({\n      cause,\n      code: 'mfa_invalid_otp_error',\n      docsUrl: null,\n      name: 'MfaInvalidOtpError',\n      shortMessage: 'Invalid OTP',\n    });\n  }\n}\n","import { BaseError, type BaseErrorParameters } from './base';\n\nexport class MfaRateLimitedError extends BaseError {\n  constructor({ cause }: Pick<BaseErrorParameters, 'cause'>) {\n    super({\n      cause,\n      code: 'mfa_rate_limited_error',\n      docsUrl: null,\n      name: 'MfaRateLimitedError',\n      shortMessage: 'Rate limited',\n    });\n  }\n}\n","import { BaseError, type BaseErrorParameters } from './base';\n\nexport class SandboxMaximumThresholdReachedError extends BaseError {\n  constructor({ cause }: Pick<BaseErrorParameters, 'cause'>) {\n    super({\n      cause,\n      code: 'sandbox_maximum_threshold_reached_error',\n      docsUrl:\n        'https://www.dynamic.xyz/docs/developer-dashboard/sandbox-vs-live#sandbox-vs-live',\n      name: 'SandboxMaximumThresholdReachedError',\n      shortMessage:\n        'Your sandbox environment has reached the maximum MAU. Please use a live environment for production traffic.',\n    });\n  }\n}\n","import { APIError } from '../../../../errors/APIError';\nimport { InvalidExternalAuthError } from '../../../../errors/InvalidExternalAuthError';\nimport { LinkCredentialError } from '../../../../errors/LinkCredentialError';\nimport { MfaInvalidOtpError } from '../../../../errors/MfaInvalidOtpError';\nimport { MfaRateLimitedError } from '../../../../errors/MfaRateLimitedError';\nimport { SandboxMaximumThresholdReachedError } from '../../../../errors/SandboxMaximumThresholdReachedError';\nimport type { ErrorMapper } from '../../apiClient.types';\n\n/**\n * Default error mapper for the client that handles common API error codes.\n *\n * This mapper transforms specific API error codes into more specific error types:\n * - `mfa_invalid_code` → `MfaInvalidOtpError`\n * - `mfa_rate_limited` → `MfaRateLimitedError`\n *\n * @param error - The error to be mapped\n * @returns A transformed error if the error code matches a known pattern, or null if no transformation is needed\n *\n * @example\n * ```typescript\n * // This will be automatically applied to all API errors\n * const apiClient = createApiClient({}, client);\n *\n * // The clientErrorMapper will automatically convert mfa_invalid_code errors\n * // to MfaInvalidOtpError instances\n * ```\n  * @not-instrumented\n */\nexport const clientErrorMapper: ErrorMapper = (error) => {\n  if (error instanceof APIError) {\n    if (error.code === 'mfa_invalid_code') {\n      return new MfaInvalidOtpError({ cause: error });\n    }\n\n    if (error.code === 'mfa_rate_limited') {\n      return new MfaRateLimitedError({ cause: error });\n    }\n\n    if (error.code === 'invalid_external_auth') {\n      return new InvalidExternalAuthError({ cause: error });\n    }\n\n    if (error.code === 'sandbox_maximum_threshold_reached') {\n      return new SandboxMaximumThresholdReachedError({ cause: error });\n    }\n\n    if (\n      error.code === 'merge_accounts_invalid' ||\n      error.code === 'reassign_wallet_error'\n    ) {\n      return new LinkCredentialError({ cause: error });\n    }\n  }\n\n  return null;\n};\n","/* eslint-disable custom-rules/function-name-matches-filename */\nimport type { Middleware, ResponseContext } from '@dynamic-labs/sdk-api-core';\n\nimport { APIError } from '../../../../errors/APIError';\nimport type { ErrorMapper } from '../../apiClient.types';\n\ntype CreateConvertToApiErrorMiddlewareOptions = {\n  errorMappers?: ErrorMapper[];\n};\n\n/**\n * Creates middleware that converts HTTP error responses to APIError instances\n * and optionally applies custom error mappers to transform them into specific error types.\n *\n * @param options.errorMappers - Array of error mappers to apply to API errors\n * @returns A middleware function that handles error conversion and mapping\n  * @not-instrumented\n */\nexport const createConvertToApiErrorMiddleware = ({\n  errorMappers = [],\n}: CreateConvertToApiErrorMiddlewareOptions): Middleware => ({\n  post: async (context: ResponseContext) => {\n    if (context.response.status >= 400) {\n      const apiError = await APIError.fromResponse(context.response);\n\n      if (apiError) {\n        let errorToThrow: Error = apiError;\n\n        for (const mapper of errorMappers) {\n          const newError = mapper(apiError);\n\n          if (newError) {\n            errorToThrow = newError;\n            break;\n          }\n        }\n\n        throw errorToThrow;\n      }\n    }\n\n    return context.response;\n  },\n});\n","import { getCore } from '../../client/core/getCore';\nimport type { DynamicClient } from '../../client/types';\nimport { fetchAndStoreNonces } from './fetchAndStoreNonces/fetchAndStoreNonces';\n\n/**\n * Returns a nonce for wallet ownership verification.\n *\n * Pops the first nonce from the prefetched pool. When the pool is running low\n * (≤1 remaining after pop) a background refetch is triggered. If the pool is\n * empty, nonces are fetched on-demand before returning.\n  * @instrumented\n */\nexport const getNonce = async (\n  client: DynamicClient\n): Promise<string> => {\n  const core = getCore(client);\n  const pool = core.state.get().prefetchedNonces;\n\n  if (pool.length > 0) {\n    const [nonce, ...remaining] = pool;\n\n    core.state.set({ prefetchedNonces: remaining });\n\n    if (remaining.length <= 1) {\n      void fetchAndStoreNonces(client);\n    }\n\n    return nonce;\n  }\n\n  await fetchAndStoreNonces(client);\n\n  return getNonce(client);\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport type { DeviceSigner } from '../../../services/deviceSigner';\n\n/** @instrumented */\nexport const getDeviceSigner = async (\n  client: DynamicClient\n): Promise<DeviceSigner> => {\n  const { deviceSigner, keychain } = getCore(client);\n\n  /**\n   * If the device signer is available, it should handle the device signing.\n   * This is used for mobile devices with secure enclave.\n   */\n  if (deviceSigner) {\n    return deviceSigner;\n  }\n\n  const keyName = 'device';\n\n  const existingPublicKey = await keychain.getPublicKey(keyName);\n\n  if (!existingPublicKey) {\n    await keychain.generateKey(keyName);\n  }\n\n  return {\n    getPublicKey: () => keychain.getPublicKey(keyName) as Promise<string>,\n    sign: (payload: string) => keychain.sign(keyName, payload),\n  };\n};\n","import type { DynamicClient } from '../../../client/types';\nimport { assertDefined } from '../../../utils/assertDefined';\nimport { getNonce } from '../../../utils/getNonce';\nimport { isCookieEnabled } from '../../projectSettings/isCookieEnabled';\nimport { getDeviceSigner } from '../getDeviceSigner';\n\n/** @instrumented */\nexport const getHeadersForNonceSignedByDeviceSigners = async (\n  client: DynamicClient\n): Promise<Record<string, string>> => {\n  const { projectSettings } = client;\n\n  assertDefined(projectSettings, 'Project settings not found');\n\n  /**\n   * For cookie based environments, the device registration is handled\n   * by settings the cookie in the browser.\n   * Then we dont need to provide the headers\n   */\n  if (isCookieEnabled(client)) {\n    return {};\n  }\n\n  const deviceSigner = await getDeviceSigner(client);\n\n  const nonce = await getNonce(client);\n\n  const signedNonce = await deviceSigner.sign(nonce);\n  const publicKey = await deviceSigner.getPublicKey();\n\n  return {\n    'x-dynamic-device-nonce': nonce,\n    'x-dynamic-device-publickey': publicKey,\n    'x-dynamic-device-signed-nonce': signedNonce,\n  };\n};\n","import type { Middleware } from '@dynamic-labs/sdk-api-core';\nimport { isDeviceNonceSignatureRequiredForUrl } from '@dynamic-labs/sdk-api-core';\n\nimport type { DynamicClient } from '../../../../client/types';\nimport { getHeadersForNonceSignedByDeviceSigners } from '../../../deviceRegistration/getHeadersForNonceSignedByDeviceSigners';\nimport { isCookieEnabled } from '../../../projectSettings/isCookieEnabled';\n\n/** @instrumented */\nexport const createDeviceSignatureHeadersMiddleware = (\n  client: DynamicClient\n): Middleware => {\n  return {\n    pre: async (context) => {\n      /**\n       * The signed nonce is not required for cookie based environments.\n       */\n      if (\n        isDeviceNonceSignatureRequiredForUrl(context.url) &&\n        !isCookieEnabled(client)\n      ) {\n        const deviceSignerHeaders = await getHeadersForNonceSignedByDeviceSigners(\n          client\n        );\n\n        return {\n          init: {\n            ...context.init,\n            headers: {\n              ...context.init.headers,\n              ...deviceSignerHeaders,\n            },\n          },\n          url: context.url,\n        };\n      }\n\n      return;\n    },\n  };\n};\n","import { BaseError, type BaseErrorParameters } from './base';\n\nexport class UnauthorizedError extends BaseError {\n  constructor({ cause }: Pick<BaseErrorParameters, 'cause'>) {\n    super({\n      cause,\n      code: 'unauthorized_error',\n      docsUrl: null,\n      name: 'UnauthorizedError',\n      shortMessage: 'Unauthorized',\n    });\n  }\n}\n","import type { Middleware, ResponseContext } from '@dynamic-labs/sdk-api-core';\n\nimport { UnauthorizedError } from '../../../../errors/UnauthorizedError';\n\n/** @not-instrumented */\nexport const createUnauthorizedMiddleware = (): Middleware => ({\n  post: async (context: ResponseContext) => {\n    if (context.response.status === 401) {\n      let cause: Error | null = null;\n\n      try {\n        const errorBody = await context.response.clone().json();\n\n        if (\n          errorBody &&\n          'error' in errorBody &&\n          typeof errorBody.error === 'string'\n        ) {\n          // eslint-disable-next-line no-restricted-syntax\n          cause = new Error(errorBody.error);\n        }\n      } catch {\n        // Response body isn't valid JSON — proceed without a cause\n      }\n\n      throw new UnauthorizedError({ cause });\n    }\n\n    return context.response;\n  },\n});\n","import { Configuration, SDKApi } from '@dynamic-labs/sdk-api-core';\n\nimport { version } from '../../../package.json';\nimport { getCore } from '../../client/core/getCore';\nimport type { DynamicClient } from '../../client/types';\nimport { randomString } from '../../utils/randomString';\nimport { isCookieEnabled } from '../projectSettings/isCookieEnabled';\nimport { getSessionKeys } from '../sessionKeys/getSessionKeys';\nimport type { CreateApiClientOptions } from './apiClient.types';\nimport { getElevatedAccessToken } from '../auth/getElevatedAccessToken';\nimport {\n  CLIENT_SDK_NAME,\n  DYNAMIC_API_VERSION_HEADER,\n  DYNAMIC_REQUEST_ID_HEADER,\n  DYNAMIC_SDK_API_VERSION,\n  DYNAMIC_SDK_SESSION_ID_HEADER,\n  DYNAMIC_SDK_VERSION_HEADER,\n  ELEVATED_ACCESS_TOKEN_HEADER,\n  MFA_TOKEN_HEADER,\n  SESSION_PUBLIC_KEY_HEADER,\n} from './constants';\nimport { clientErrorMapper } from './utils/clientErrorMapper';\nimport { createConvertToApiErrorMiddleware } from './utils/convertToApiErrorMiddleware/convertToApiErrorMiddleware';\nimport { createDeviceSignatureHeadersMiddleware } from './utils/deviceSignatureHeadersMiddleware';\nimport { createUnauthorizedMiddleware } from './utils/unauthorizedMiddleware/createUnauthorizedMiddleware';\n\ntype ISettings = {\n  basePath: string;\n  credentials?: 'include';\n  headers: {\n    Authorization?: string;\n    'Content-Type': string;\n    [DYNAMIC_API_VERSION_HEADER]: string;\n    [DYNAMIC_REQUEST_ID_HEADER]: string;\n    [DYNAMIC_SDK_SESSION_ID_HEADER]: string;\n    [DYNAMIC_SDK_VERSION_HEADER]: string;\n    [ELEVATED_ACCESS_TOKEN_HEADER]?: string;\n    [MFA_TOKEN_HEADER]?: string;\n    [SESSION_PUBLIC_KEY_HEADER]?: string;\n  };\n};\n\n/**\n * Returns a new instance of the SDK API client.\n *\n * This is not meant for storing, as it is very light we can create it whenever needed.\n  * @instrumented\n */\nexport const createApiClient = (\n  options: CreateApiClientOptions = {},\n  client: DynamicClient\n) => {\n  const core = getCore(client);\n  const coreState = core.state.get();\n\n  const settings: ISettings = {\n    basePath: core.apiBaseUrl,\n    headers: {\n      'Content-Type': 'application/json',\n      [DYNAMIC_API_VERSION_HEADER]: `API/${DYNAMIC_SDK_API_VERSION}`,\n      [DYNAMIC_REQUEST_ID_HEADER]: randomString({ length: 50 }),\n      [DYNAMIC_SDK_SESSION_ID_HEADER]: core.sdkSessionId,\n      [DYNAMIC_SDK_VERSION_HEADER]: `${CLIENT_SDK_NAME}/${version}`,\n      ...core.getApiHeaders(),\n      ...options.headers,\n    },\n  };\n\n  if (client.token) {\n    settings.headers.Authorization = `Bearer ${client.token}`;\n  }\n\n  if (client.projectSettings && isCookieEnabled(client)) {\n    settings.credentials = 'include';\n  }\n\n  if (options.includeMfaToken && coreState.mfaToken) {\n    settings.headers[MFA_TOKEN_HEADER] = coreState.mfaToken;\n  }\n\n  if (options.elevatedAccessTokenScope) {\n    const elevatedToken = getElevatedAccessToken(\n      { scope: options.elevatedAccessTokenScope },\n      client\n    );\n    if (elevatedToken) {\n      settings.headers[ELEVATED_ACCESS_TOKEN_HEADER] = elevatedToken;\n    }\n  }\n\n  const sessionPublicKey = getSessionKeys(client)?.publicKey;\n\n  // This check is required to avoid overriding the session public key header\n  // that is set by any of our other SDKs using the Dynamic Client SDK.\n  const isSessionPublicKeyHeaderPresent =\n    settings.headers[SESSION_PUBLIC_KEY_HEADER] !== undefined;\n\n  if (sessionPublicKey && !isSessionPublicKeyHeaderPresent) {\n    settings.headers[SESSION_PUBLIC_KEY_HEADER] = sessionPublicKey;\n  }\n\n  return new SDKApi(\n    new Configuration({\n      ...settings,\n      fetchApi: core.fetch,\n      middleware: [\n        createDeviceSignatureHeadersMiddleware(client),\n        createConvertToApiErrorMiddleware({\n          errorMappers: [...(options.errorMappers || []), clientErrorMapper],\n        }),\n        createUnauthorizedMiddleware(),\n      ],\n    })\n  );\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { createApiClient } from '../../../modules/apiClient';\nimport { NONCE_POOL_EXPIRATION_TIME, NONCE_POOL_SIZE } from '../constants';\n\n/**\n * Fetches a batch of nonces from the API.\n *\n * Prefetching is critical for iOS deep link wallet providers (e.g. Phantom\n * redirect). On iOS, a network request (like fetching a nonce) between a user\n * action and a deeplink call will break the gesture chain, causing iOS to\n * silently ignore the deeplink. By prefetching nonces ahead of time,\n * `getNonce` can return synchronously from cache and the deeplink fires\n * without an interrupting network round-trip.\n  * @not-instrumented\n */\nexport const fetchAndStoreNonces = async (\n  client: DynamicClient\n): Promise<void> => {\n  const core = getCore(client);\n\n  const { environmentId } = core;\n\n  const apiClient = createApiClient({}, client);\n\n  const { nonces } = await apiClient.getNonces({\n    count: NONCE_POOL_SIZE,\n    environmentId,\n  });\n\n  core.state.set({\n    prefetchedNonces: nonces,\n    prefetchedNoncesExpiration: Date.now() + NONCE_POOL_EXPIRATION_TIME,\n  });\n};\n","import type { Chain } from '../chain';\n\ntype ChainInfo = {\n  apiChainName: string;\n  blockchainName: string;\n  verifiedCredentialChainName: string;\n  waasChainNameOverride?: string;\n};\n\nexport const CHAINS_INFO_MAP: Record<Chain, ChainInfo> = {\n  ALEO: {\n    apiChainName: 'aleo',\n    blockchainName: 'Aleo',\n    verifiedCredentialChainName: 'aleo',\n  },\n  ALGO: {\n    apiChainName: 'algo',\n    blockchainName: 'Algorand',\n    verifiedCredentialChainName: 'algorand',\n  },\n  APTOS: {\n    apiChainName: 'aptos',\n    blockchainName: 'Aptos',\n    verifiedCredentialChainName: 'aptos',\n  },\n  BTC: {\n    apiChainName: 'bitcoin',\n    blockchainName: 'Bitcoin',\n    verifiedCredentialChainName: 'bip122',\n  },\n  COSMOS: {\n    apiChainName: 'cosmos',\n    blockchainName: 'Cosmos',\n    verifiedCredentialChainName: 'cosmos',\n  },\n  ECLIPSE: {\n    apiChainName: 'eclipse',\n    blockchainName: 'Eclipse',\n    verifiedCredentialChainName: 'eclipse',\n  },\n  EVM: {\n    apiChainName: 'evm',\n    // eslint-disable-next-line custom-rules/ban-ethereum-eth-terms\n    blockchainName: 'Ethereum',\n    verifiedCredentialChainName: 'eip155',\n  },\n  FLOW: {\n    apiChainName: 'flow',\n    blockchainName: 'Flow',\n    verifiedCredentialChainName: 'flow',\n  },\n  MIDNIGHT: {\n    apiChainName: 'midnight',\n    blockchainName: 'Midnight',\n    verifiedCredentialChainName: 'midnight',\n  },\n  SOL: {\n    apiChainName: 'solana',\n    blockchainName: 'Solana',\n    verifiedCredentialChainName: 'solana',\n    waasChainNameOverride: 'SVM',\n  },\n  SPARK: {\n    apiChainName: 'spark',\n    blockchainName: 'Spark',\n    verifiedCredentialChainName: 'spark',\n  },\n  STARK: {\n    apiChainName: 'starknet',\n    blockchainName: 'Starknet',\n    verifiedCredentialChainName: 'starknet',\n  },\n  STELLAR: {\n    apiChainName: 'stellar',\n    blockchainName: 'Stellar',\n    verifiedCredentialChainName: 'stellar',\n  },\n  SUI: {\n    apiChainName: 'sui',\n    blockchainName: 'Sui',\n    verifiedCredentialChainName: 'sui',\n  },\n  TEMPO: {\n    apiChainName: 'tempo',\n    blockchainName: 'Tempo',\n    verifiedCredentialChainName: 'tempo',\n  },\n  TON: {\n    apiChainName: 'ton',\n    blockchainName: 'TON',\n    verifiedCredentialChainName: 'ton',\n  },\n  TRON: {\n    apiChainName: 'tron',\n    blockchainName: 'Tron',\n    verifiedCredentialChainName: 'tron',\n  },\n};\n","import type { Chain } from '../../modules/chain';\nimport { CHAINS_INFO_MAP } from '../../modules/wallets/constants';\nimport { assertDefined } from '../assertDefined';\n\n/** @instrumented */\nexport const getChainFromVerifiedCredentialChain = (\n  verifiedCredentialChain: string\n): Chain => {\n  const chains = Object.keys(CHAINS_INFO_MAP) as Chain[];\n\n  const chain = chains.find(\n    (chain) =>\n      CHAINS_INFO_MAP[chain].verifiedCredentialChainName ===\n      verifiedCredentialChain\n  );\n\n  assertDefined(chain, `Unknown chain: ${verifiedCredentialChain}`);\n\n  return chain;\n};\n","import { dependencies } from '../package.json';\n\nexport const SDK_API_CORE_VERSION = dependencies['@dynamic-labs/sdk-api-core'];\n\nexport const DYNAMIC_ICONIC_SPRITE_URL =\n  'https://iconic.dynamic-static-assets.com/icons/sprite.svg';\n","import { DYNAMIC_ICONIC_SPRITE_URL } from '../../constants';\n\nexport const DEFAULT_WAAS_BASE_API_URL = 'https://app.dynamicauth.com';\nexport const DEFAULT_WAAS_BASE_MPC_RELAY_API_URL =\n  'https://relay.dynamicauth.com';\n\nexport const DYNAMIC_WAAS_METADATA = {\n  displayName: 'Dynamic WaaS',\n  icon: `${DYNAMIC_ICONIC_SPRITE_URL}#dynamicwaas`,\n  normalizedWalletName: 'dynamicwaas',\n};\n","import { BaseError } from './base';\n\nexport class InvalidParamError extends BaseError {\n  constructor(message: string) {\n    super({\n      cause: null,\n      code: 'invalid_param_error',\n      docsUrl: null,\n      name: 'InvalidParamError',\n      shortMessage: message,\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;ACIA,MAAa,WAAW,WAAuC;AAE7D,QAAO,OAAO;;;;;ACchB,MAAM,cAAc,EAAE,SAAS,YAAiC;AAC9D,KAAI,iBAAiB,UACnB,QAAO,MAAM;AAGf,KAAI,OAAO,QACT,QAAO,MAAM;AAGf,QAAO;;;;;AAOT,MAAM,iBAAiB,EACrB,cACA,SACA,SACA,mBACyB;AACzB,QAAO;EACL;EACA;EACA;EACA,GAAI,eAAe,CAAC,GAAG,cAAc,GAAG,GAAG,EAAE;EAC7C,GAAI,UAAU,CAAC,SAAS,UAAU,GAAG,EAAE;EACvC,GAAI,UAAU,CAAC,YAAY,UAAU,GAAG,EAAE;EAC1C,YAAY;EACZ,+BAAc,IAAI,MAAM,EAAC,aAAa;EACvC,CAAC,KAAK,KAAK;;;;;AAMd,IAAsB,YAAtB,MAAsB,kBAAkB,MAAM;;CAE5C;CACA;CACA,AAAiB;CACjB,AAAS,OAAO;CAChB,AAAS;CAET,YAAY,MAA2B;EACrC,MAAM,UAAU,WAAW,KAAK;EAChC,MAAM,mBAAmB,cAAc;GAAE,GAAG;GAAM;GAAS,CAAC;AAC5D,QACE,KAAK,gBAAgB,kBACrB,KAAK,QAAQ,EAAE,OAAO,KAAK,OAAO,GAAG,OACtC;AAED,OAAK,mBAAmB;AACxB,OAAK,UAAU;AACf,OAAK,OAAO,KAAK,QAAQ,KAAK;AAC9B,OAAK,QAAQ,KAAK,SAAS,KAAK;AAChC,OAAK,OAAO,KAAK;;;;;CAMnB,OAA0B;EACxB,MAAM,QAAQ,KAAK;AAEnB,MAAI,iBAAiB,UACnB,QAAO,MAAM,MAAM;AAGrB,SAAO;;CAGT,AAAS,WAAW;AAClB,SAAO,KAAK;;;;;;AC5FhB,IAAa,sBAAb,cAAyC,UAAU;CACjD,cAAc;AACZ,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cACE;GACH,CAAC;;;;;;ACNN,IAAIA,gBAAsC;AAC1C,IAAI,0BAA0B;;;;;;;;AAS9B,MAAa,yBAAwC;AACnD,KAAI,CAAC,cACH,OAAM,IAAI,qBAAqB;AAGjC,KAAI,0BAA0B,EAE5B,CADa,QAAQ,cAAc,CAC9B,OAAO,MACV,gSAGD;AAGH,QAAO;;;AAKT,MAAa,oBAAoB,WAA0B;AACzD,iBAAgB;AAChB;;;;;ACpCF,MAAa,6BAA6B,MAAQ,KAAK;AAEvD,MAAa,kBAAkB;;;;ACA/B,MAAa,6BAA6B;AAE1C,MAAa,4BAA4B;AAEzC,MAAa,6BAA6B;AAE1C,MAAa,+BAA+B;AAE5C,MAAa,mBAAmB;AAEhC,MAAa,4BAA4B;AAEzC,MAAa,0BACX,aAAa;AAEf,MAAa,gCAAgC;AAE7C,MAAa,kBAAkB;;;;ACnB/B,MAAM,gBACJ;;AAQF,MAAa,gBAAgB,EAAE,QAAQ,eAAe,aAAiC;CACrF,MAAM,QAAQ,IAAI,WAAW,OAAO;AACpC,QAAO,gBAAgB,MAAM;CAE7B,IAAI,SAAS;AACb,MAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,IAC1B,WAAU,MAAM,MAAM,KAAK,MAAM;AAEnC,QAAO;;;;;ACfT,IAAa,0BAAb,cAA6C,UAAU;CACrD,YAAY,SAAiB;AAC3B,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;;;;;;;;;;;;;;;;;;;;;ACSN,SAAgB,cACd,OACA,SACgD;AAChD,KAAI,UAAU,QAAQ,UAAU,OAC9B,OAAM,IAAI,wBAAwB,QAAQ;;;;;;;;;ACf9C,MAAa,mBAAmB,WAAmC;AACjE,eAAc,OAAO,iBAAiB,mCAAmC;CAEzE,MAAM,mBAAmB,OAAO,gBAAgB;AAEhD,KAAI,CAAC,iBAAkB,QAAO;CAG9B,MAAM,yBAAyB,iBAAiB,MAAM,WAAW,EAAE,EAAE,SACnEC,2CAAgB,OACjB;CAGD,MAAM,sBAAsB,QAC1B,iBAAiB,cAAc,WAChC;AAMD,QAAO,yBAAyB;;;;;;;;;;;;;;;;ACnBlC,MAAa,oBAAoB,UAAiC;AAChE,KAAI;EACF,MAAM,UAAU,MAAM,MAAM,IAAI,CAAC;AAGjC,SAFgB,KAAK,MAAM,KAAK,QAAQ,CAAC,CAE1B,OAAO;SAChB;AACN,SAAO;;;;;;;;;;;;;;;ACTX,MAAa,qBAA6B;AACxC,KAAI;AAEF,SAAO,UAAU;SACX;AACN,SAAO;;;;;;ACdX,MAAa,qBAAqB;CAChC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD;AAED,MAAa,iBAAiB;AAE9B,MAAa,oBAAoB;AAEjC,MAAa,mBAAmB;;;;;;AAOhC,MAAa,eAAe;;;;;;AAO5B,MAAa,iBAAiB;;;;ACW9B,MAAM,eAAe,EACnB,KACA,gBACA,WACA,YAC+B;AAC/B,KAAI,eAAe,SAAS,IAAI,aAAa,CAAC,CAC5C,QAAO;AAGT,KAAI,UACF,QAAO;AAGT,KAAI,MAAM,SAAS,kBACjB,QAAO,MAAM,MAAM,GAAG,kBAAkB,GAAG;AAG7C,QAAO;;AAIT,MAAM,cAAc,EAAE,SAAS,YAAyC;AACtE,KAAI,QAAQ,QAAQ,IAAI,MAAM,CAC5B,QAAO,CAAC,eAAe;AAGzB,SAAQ,QAAQ,IAAI,MAAM;CAE1B,MAAM,SAAS,MAAM,KAAK,MAAM,UAC9B,WAAW;EAAE;EAAS,KAAK,OAAO,MAAM;EAAE,OAAO;EAAM,CAAC,CACzD;AAED,SAAQ,QAAQ,OAAO,MAAM;AAE7B,QAAO;;AAIT,MAAM,eAAe,EACnB,SACA,YACgD;AAChD,KAAI,QAAQ,QAAQ,IAAI,MAAM,CAC5B,QAAO,GAAG,iBAAiB,MAAM;AAGnC,SAAQ,QAAQ,IAAI,MAAM;CAI1B,MAAM,SAAS,OAAO,OAAO,KAAK;AAElC,MAAK,MAAM,OAAO,OAAO,KAAK,MAAM,CAClC,QAAO,OAAO,WAAW;EAAE;EAAS;EAAK,OAAO,MAAM;EAAM,CAAC;AAG/D,SAAQ,QAAQ,OAAO,MAAM;AAE7B,QAAO;;AAIT,MAAM,cAAc,EAAE,SAAS,KAAK,YAAuC;AACzE,KAAI,UAAU,QAAQ,UAAU,OAC9B,QAAO;AAGT,KAAI,iBAAiB,WACnB,QAAO,IAAI,aAAa,GAAG,MAAM,WAAW;AAG9C,KAAI,QAAQ,eAAe,SAAS,IAAI,aAAa,CAAC,CACpD,QAAO;AAGT,KAAI,OAAO,UAAU,SACnB,QAAO,YAAY;EACjB;EACA,gBAAgB,QAAQ;EACxB,WAAW,QAAQ;EACnB;EACD,CAAC;AAGJ,KAAI,MAAM,QAAQ,MAAM,CACtB,QAAO,WAAW;EAAE;EAAS;EAAO,CAAC;AAGvC,KAAI,iBAAiB,KAAK;AACxB,MAAI,QAAQ,QAAQ,IAAI,MAAM,CAC5B,QAAO,CAAC,eAAe;AAGzB,UAAQ,QAAQ,IAAI,MAAM;EAC1B,MAAM,YAAY,WAAW;GAAE;GAAS,OAAO,CAAC,GAAG,MAAM;GAAE,CAAC;AAC5D,UAAQ,QAAQ,OAAO,MAAM;AAE7B,SAAO;;AAGT,KAAI,iBAAiB,KAAK;AACxB,MAAI,QAAQ,QAAQ,IAAI,MAAM,CAC5B,QAAO,GAAG,iBAAiB,MAAM;AAGnC,UAAQ,QAAQ,IAAI,MAAM;EAG1B,MAAM,WAAW,OAAO,OAAO,KAAK;AAEpC,OAAK,MAAM,CAAC,GAAG,MAAM,MAAM,SAAS,CAClC,UAAS,OAAO,EAAE,IAAI;EAGxB,MAAM,YAAY,YAAY;GAAE;GAAS,OAAO;GAAU,CAAC;AAC3D,UAAQ,QAAQ,OAAO,MAAM;AAE7B,SAAO;;AAOT,KAAI,iBAAiB,QACnB,QAAO;AAGT,KAAI,iBAAiB,QACnB,QAAO;AAGT,KAAI,iBAAiB,KACnB,QAAO,MAAM,aAAa;AAG5B,KAAI,iBAAiB,MACnB,QAAO,WAAW,MAAM,QAAQ;AAGlC,KAAI,OAAO,UAAU,SACnB,QAAO,YAAY;EAAE;EAAgB;EAAkC,CAAC;AAG1E,QAAO;;;AAKT,MAAa,mBAAmB,EAC9B,WACA,WACA,YACoD;AAOpD,QAAO,YAAY;EAAE,SANS;GAC5B,gBAAgB,UAAU,KAAK,UAAU,MAAM,aAAa,CAAC;GAC7D;GACA,yBAAS,IAAI,SAAiB;GAC/B;EAE6B;EAAO,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AClLxC,MAAa,iBAAiB,SAA6C;AACzE,KAAI,KAAK,WAAW,EAClB,QAAO,EAAE;AAGX,KACE,KAAK,WAAW,KAChB,OAAO,KAAK,OAAO,YACnB,KAAK,OAAO,QACZ,CAAC,MAAM,QAAQ,KAAK,GAAG,CAGvB,QAAO,KAAK;CAId,MAAMC,SAAkC,EAAE;AAE1C,MAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,IAC/B,QAAO,MAAM,OAAO,KAAK;AAG3B,QAAO;;;;;;;;;;;;ACjCT,MAAa,sBAAsB,EACjC,WACA,WACA,YAEA,gBAAgB;CACd;CACA;CACA,OAAO,EAAE,QAAQ,OAAO;CACzB,CAAC,CAAC;;;;ACXL,MAAM,kBAAkB,UAAoC;AAC1D,KAAI,iBAAiB,MACnB,QAAO;EAAE,SAAS,MAAM;EAAS,MAAM,MAAM;EAAM,OAAO,MAAM;EAAO;AAEzE,QAAO;EAAE,SAAS,OAAO,MAAM;EAAE,MAAM;EAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2EzD,MAAa,sBAAiE,EAC5E,IACA,cACA,oBACA,gBACoC;CACpC,MAAM,WAAW,GAAG,SAAoB;EACtC,MAAM,OAAOC,WAAS;AAEtB,MAAI,CAAC,KACH,QAAO,GAAG,GAAG,KAAK;AAGpB,MAAI,CAAC,KAAK,gBAAgB,OAAO,QAC/B,QAAO,GAAG,GAAG,KAAK;EAGpB,MAAM,kBAAkB,KAAK;EAC7B,MAAM,QAAQ,KAAK,MAAM,KAAK;EAE9B,MAAMC,YACJ;GACE,eAAe,KAAK;GACpB;GACA,YAAY,gBAAgB;IAC1B,WAAW,gBAAgB,OAAO;IAClC;IACA,OAAO,cAAc,KAAK;IAC3B,CAAC;GACF,cAAc,KAAK;GACnB,YAAY,KAAK;GAGjB,QAAQ;GACR,gBAAgB,MAAM,QAAQ,iBAAiB,MAAM,MAAM,GAAG;GAC9D,WAAW,cAAc;GACzB,QAAQ,MAAM,MAAM,MAAM;GAC3B;AAEH,kBAAgB,YAAY;GAC1B,GAAG;GACH,OAAO;GACP,4BAAW,IAAI,MAAM,EAAC,aAAa;GACpC,CAAC;AAEF,MAAI;GACF,MAAM,SAAS,GAAG,GAAG,KAAK;AAE1B,OAAI,kBAAkB,QACpB,QAAO,OACJ,MAAM,UAAU;AACf,oBAAgB,YAAY;KAC1B,GAAG;KACH,OAAO;KACP,eAAe,mBAAmB;MAChC,WAAW,gBAAgB,OAAO;MAClC;MACA;MACD,CAAC;KACF,4BAAW,IAAI,MAAM,EAAC,aAAa;KACpC,CAAC;AAEF,WAAO;KACP,CACD,OAAO,UAAU;AAChB,oBAAgB,YAAY;KAC1B,GAAG;KACH,OAAO;KACP,eAAe,eAAe,MAAM;KACpC,4BAAW,IAAI,MAAM,EAAC,aAAa;KACpC,CAAC;AACF,UAAM;KACN;AAGN,mBAAgB,YAAY;IAC1B,GAAG;IACH,OAAO;IACP,eAAe,mBAAmB;KAChC,WAAW,gBAAgB,OAAO;KAClC;KACA,OAAO;KACR,CAAC;IACF,4BAAW,IAAI,MAAM,EAAC,aAAa;IACpC,CAAC;AAEF,UAAO;WACA,OAAO;AACd,mBAAgB,YAAY;IAC1B,GAAG;IACH,OAAO;IACP,eAAe,eAAe,MAAM;IACpC,4BAAW,IAAI,MAAM,EAAC,aAAa;IACpC,CAAC;AAEF,SAAM;;;AAIV,QAAO;;;;;;ACvLT,MAAE,kBAAsB,WAAwB;CAG9C,MAAE,4BAAgB,MAAA,KAAA,CAAA;gBAGlB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AC6BF,MAAG,0BACD,EAAA,UAAY,MAAC,yCAES;CACtB,MAAM,OAAA,QAAA,OAAsB;CAE5B,MAAG,sBAAO,IAAI,MAAQ;CACtB,MAAM,uBAAc,KAAA,MAAoB,KAAC,CAAA,wBAAM,EAAA;kDAI5C,YAAO,CAAA,QAAQ,aAAY,QAAS,YAAS,IAChD;AAGA,KAAI,YAAA,WAAA,qBAAA,OACJ,MAAA,MAAA,IAAA,qCAEA,CAAA;CAGA,MAAE,QAAO,YAAS,MAAA,YAAA,QAAA,OAAA,SAAA,MAAA,CAAA;YAGhB;AAIF,KAAI,WAAA,MAAA,WAAsB;EACxB,MAAE,gBAAA,YAAA,QAAA,MAAA,MAAA,MAAA;AACJ,OAAA,MAAA,IAAA,uCAEA,CAAA;;;;;;;;;;;;;;;;;;;ACzEF,IAAa,WAAb,MAAa,iBAAiB,UAAU;CACtC;CAEA,YAAY,SAAiB,MAAc,QAAgB;AACzD,QAAM;GACJ,OAAO;GACP;GACA,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;AAEF,OAAK,SAAS;;CAGhB,aAAa,aAAa,UAAoB;AAC5C,MAAI;GACF,MAAM,YAAY,MAAM,SAAS,OAAO,CAAC,MAAM;AAE/C,OACE,aACA,WAAW,aACX,OAAO,UAAU,UAAU,UAC3B;IACA,MAAM,YACJ,UAAU,aAAa,OAAO,UAAU,SAAS,WAC7C,UAAU,OACV;AAEN,WAAO,IAAI,SAAS,UAAU,OAAO,WAAW,SAAS,OAAO;;AAGlE,UAAO;UACD;AACN,UAAO;;;;;;;AClCb,IAAa,2BAAb,cAA8C,UAAU;CACtD,YAAY,EAAE,SAA6C;AACzD,QAAM;GACJ;GACA,MAAM;GACN,SACE;GACF,MAAM;GACN,cAAc;GACf,CAAC;;;;;;ACTN,IAAa,sBAAb,cAAyC,UAAU;CACjD,YAAY,EAAE,SAA6C;AACzD,QAAM;GACJ;GACA,MAAM;GACN,SAAS;GACT,MAAM;GACN,cACE;GACH,CAAC;;;;;;ACTN,IAAa,qBAAb,cAAwC,UAAU;CAChD,YAAY,EAAE,SAA6C;AACzD,QAAM;GACJ;GACA,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;;;;;;ACRN,IAAa,sBAAb,cAAyC,UAAU;CACjD,YAAY,EAAE,SAA6C;AACzD,QAAM;GACJ;GACA,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;;;;;;ACRN,IAAa,sCAAb,cAAyD,UAAU;CACjE,YAAY,EAAE,SAA6C;AACzD,QAAM;GACJ;GACA,MAAM;GACN,SACE;GACF,MAAM;GACN,cACE;GACH,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;ACgBN,MAAaC,qBAAkC,UAAU;AACvD,KAAI,iBAAiB,UAAU;AAC7B,MAAI,MAAM,SAAS,mBACjB,QAAO,IAAI,mBAAmB,EAAE,OAAO,OAAO,CAAC;AAGjD,MAAI,MAAM,SAAS,mBACjB,QAAO,IAAI,oBAAoB,EAAE,OAAO,OAAO,CAAC;AAGlD,MAAI,MAAM,SAAS,wBACjB,QAAO,IAAI,yBAAyB,EAAE,OAAO,OAAO,CAAC;AAGvD,MAAI,MAAM,SAAS,oCACjB,QAAO,IAAI,oCAAoC,EAAE,OAAO,OAAO,CAAC;AAGlE,MACE,MAAM,SAAS,4BACf,MAAM,SAAS,wBAEf,QAAO,IAAI,oBAAoB,EAAE,OAAO,OAAO,CAAC;;AAIpD,QAAO;;;;;;;;;;;;;ACpCT,MAAa,qCAAqC,EAChD,eAAe,EAAE,QAC0C,EAC3D,MAAM,OAAO,YAA6B;AACxC,KAAI,QAAQ,SAAS,UAAU,KAAK;EAClC,MAAM,WAAW,MAAM,SAAS,aAAa,QAAQ,SAAS;AAE9D,MAAI,UAAU;GACZ,IAAIC,eAAsB;AAE1B,QAAK,MAAM,UAAU,cAAc;IACjC,MAAM,WAAW,OAAO,SAAS;AAEjC,QAAI,UAAU;AACZ,oBAAe;AACf;;;AAIJ,SAAM;;;AAIV,QAAO,QAAQ;GAElB;;;;;;;;;;;;AC5BD,MAAE,WAAa,OACb;CAEA,MAAI,OAAK,QAAY,OAAA;CACrB,MAAE,OAAO,KAAS,MAAC,KAAU,CAAC;AAE9B,KAAE,KAAK,SAAW,GAAC;;AAGjB,OAAE,MAAK,IAAA,EAAA,kBAA2B,WAAA,CAAA;4BAGlC,CAAO,oBAAK,OAAA;AAGd,SAAM;;AAGP,OAAA,oBAAA,OAAA;;;;;;;;;;;;;;;;;;;ACzBD,MAAE,kBAAsB,kBAEpB;CACF,MAAM,EAAA,cAAW,aAAU,QAAc,OAAO;;;;;kBAOhD,QAAM;;MAKW,MAAY,SAAQ,aAAA,QAAA,CAGrC,OAAO,SAAA,YAAA,QAAA;AAGP,QAAC;EACF,oBAAA,SAAA,aAAA,QAAA;;;;;;;;;;;;;;;;;;;;ACpBD,MAAE,0CAAkC,kBAEF;;AAGhC,eAAc,iBAAM,6BAAwC;;;;;;6BAQ5D,QAAM,EAAA;;CAKN,MAAM,QAAA,MAAY,mBAAM,OAAY;CAEpC,MAAM,cAAC,MAAA,aAAA,KAAA,MAAA;CACP,MAAK,YAAQ,MAAO,aAAa,cAAA;AAEjC,QAAK;EACJ,0BAAA;EACF,8BAAA;;;;;;;;;;;;;;;;;;;;ACxBD,MAAE,0CACA,WACM;AACN,QAAO,EACL,KAAI,OAAA,YAAA;;;;AAIF,2EACoC,QAAA,IAAA,IAClC,CAAC,gBAAC,OAAA,EACF;uFAEA,OACC;AAED,UAAI;IACF,MAAM;KACJ,GAAG,QAAE;KACL,SAAC;MACF,GAAA,QAAA,KAAA;MACG,GAAC;MACN;KACH;;IAEA;;;;;;;;;;;;;;;;;;;AClCN,IAAa,oBAAb,cAAuC,UAAU;CAC/C,YAAY,EAAE,SAA6C;AACzD,QAAM;GACJ;GACA,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;;;;;;;ACLN,MAAa,sCAAkD,EAC7D,MAAM,OAAO,YAA6B;AACxC,KAAI,QAAQ,SAAS,WAAW,KAAK;EACnC,IAAIC,QAAsB;AAE1B,MAAI;GACF,MAAM,YAAY,MAAM,QAAQ,SAAS,OAAO,CAAC,MAAM;AAEvD,OACE,aACA,WAAW,aACX,OAAO,UAAU,UAAU,SAG3B,SAAQ,IAAI,MAAM,UAAU,MAAM;UAE9B;AAIR,QAAM,IAAI,kBAAkB,EAAE,OAAO,CAAC;;AAGxC,QAAO,QAAQ;GAElB;;;;;;;;;;ACqBD,MAAK,mBACH,UAA4B,EAAA,EAC5B;CAEA,MAAM,OAAA,QAAU,OAAY;CAC5B,MAAE,YAAe,KAAA,MAAU,KAAA;CAE3B,MAAK,WAAgB;EACnB,UAAG,KAAA;EACH,SAAG;GACD,gBAAC;IACA,6BAA6B,OAAG;IAChC,4BAAsB,aAAA,EAAA,QAAA,IAAA,CAAA;IACtB,gCAAiB,KAAA;IACnB,6BAAA,GAAA,gBAAA,GAAA;GACF,GAAA,KAAA,eAAA;;GAEE;EACF;kBAGC,UAAS,QAAA,gBAAmB,UAAe,OAAO;uDAIlD,UAAS,cAAC;mDAIV,UAAS,QAAC,oBAA0B,UAAA;AAGtC,KAAI,QAAA,0BAAA;EACF,MAAC,gBAAA,iCACC,EAAE,OAAA,QAAe,0BAAA,EACjB,OACF;AACF,MAAA;;CAKA,MAAG,mBAAsB,yBAAe,OAAM,EAAG;CAIjD,MAAI,kCACF,SAAS,QAAQ,+BAA6B;0DAGhD,UAAW,QAAM,6BAAA;AAGjB,QAAI,IAAA,kCACF,IAAE,yCAAY;EACZ,GAAE;EACF,UAAE,KAAA;EACF,YAAI;GACF,iDAAE,OAAA;GACF,kCAA8B,EAC/B,cAAA,CAAA,GAAA,QAAA,gBAAA,EAAA,EAAA,kBAAA,EACF,CAAA;GACF,8BAAA;GACF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AClGD,MAAa,sBAAsB,OACjC,WACkB;CAClB,MAAM,OAAO,QAAQ,OAAO;CAE5B,MAAM,EAAE,kBAAkB;CAI1B,MAAM,EAAE,WAAW,MAFDC,0BAAgB,EAAE,EAAE,OAAO,CAEV,UAAU;EAC3C,OAAO;EACP;EACD,CAAC;AAEF,MAAK,MAAM,IAAI;EACb,kBAAkB;EAClB,4BAA4B,KAAK,KAAK,GAAG;EAC1C,CAAC;;;;;ACxBJ,MAAaC,kBAA4C;CACvD,MAAM;EACJ,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,MAAM;EACJ,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,OAAO;EACL,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,KAAK;EACH,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,QAAQ;EACN,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,SAAS;EACP,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,KAAK;EACH,cAAc;EAEd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,MAAM;EACJ,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,UAAU;EACR,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,KAAK;EACH,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC7B,uBAAuB;EACxB;CACD,OAAO;EACL,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,OAAO;EACL,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,SAAS;EACP,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,KAAK;EACH,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,OAAO;EACL,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,KAAK;EACH,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,MAAM;EACJ,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACF;;;;;ACzFD,MAAE,mEAEM;CAGN,MAAI,QAFO,OAAA,KAAA,gBAAA,CAEP,MACH,qEAED;AAGD,eAAA,OAAA,kBAAA,0BAAA;;;;;;;;;;;;;;;;;;ACjBD,MAAa,uBAAuB,aAAa;AAEjD,MAAa,4BACX;;;;ACHF,MAAa,4BAA4B;AACzC,MAAa,sCACX;AAEF,MAAa,wBAAwB;CACnC,aAAa;CACb,MAAM,GAAG,0BAA0B;CACnC,sBAAsB;CACvB;;;;ACRD,IAAa,oBAAb,cAAuC,UAAU;CAC/C,YAAY,SAAiB;AAC3B,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC"}
+{"version":3,"file":"InvalidParamError-BPDELsWj.cjs.js","names":["defaultClient: DynamicClient | null","AuthStorageEnum","result: Record<string, unknown>","getCore","baseEvent: Omit<FunctionInstrumentationEvent, 'phase' | 'timestamp'>","clientErrorMapper: ErrorMapper","errorToThrow: Error","cause: Error | null","createApiClient","CHAINS_INFO_MAP: Record<Chain, ChainInfo>"],"sources":["../package.json","../src/client/core/getCore/getCore.ts","../src/errors/base/BaseError.ts","../src/errors/ClientNotFoundError.ts","../src/client/defaultClient/defaultClient.ts","../src/utils/getNonce/constants.ts","../src/modules/apiClient/constants.ts","../src/utils/randomString/randomString.ts","../src/errors/ValueMustBeDefinedError.ts","../src/utils/assertDefined/assertDefined.ts","../src/modules/projectSettings/isCookieEnabled/isCookieEnabled.ts","../src/modules/auth/extractSessionId/extractSessionId.ts","../src/utils/getUserAgent/getUserAgent.ts","../src/services/instrumentation/constants.ts","../src/services/instrumentation/scrubParameters/scrubParameters.ts","../src/services/instrumentation/instrumentFunction/extractParams/extractParams.ts","../src/services/instrumentation/instrumentFunction/scrubResolvedValue/scrubResolvedValue.ts","../src/services/instrumentation/instrumentFunction/instrumentFunction.ts","../src/modules/sessionKeys/getSessionKeys/getSessionKeys.ts","../src/modules/auth/getElevatedAccessToken/getElevatedAccessToken.ts","../src/errors/APIError/APIError.ts","../src/errors/InvalidExternalAuthError.ts","../src/errors/LinkCredentialError.ts","../src/errors/MfaInvalidOtpError.ts","../src/errors/MfaRateLimitedError.ts","../src/errors/SandboxMaximumThresholdReachedError.ts","../src/modules/apiClient/utils/clientErrorMapper/clientErrorMapper.ts","../src/modules/apiClient/utils/convertToApiErrorMiddleware/convertToApiErrorMiddleware.ts","../src/utils/getNonce/getNonce.ts","../src/modules/deviceRegistration/getDeviceSigner/getDeviceSigner.ts","../src/modules/deviceRegistration/getHeadersForNonceSignedByDeviceSigners/getHeadersForNonceSignedByDeviceSigners.ts","../src/modules/apiClient/utils/deviceSignatureHeadersMiddleware/createDeviceSignatureHeadersMiddleware.ts","../src/errors/UnauthorizedError.ts","../src/modules/apiClient/utils/unauthorizedMiddleware/createUnauthorizedMiddleware.ts","../src/modules/apiClient/createApiClient.ts","../src/utils/getNonce/fetchAndStoreNonces/fetchAndStoreNonces.ts","../src/modules/wallets/constants.ts","../src/utils/getChainFromVerifiedCredentialChain/getChainFromVerifiedCredentialChain.ts","../src/constants.ts","../src/modules/waas/constants.ts","../src/errors/InvalidParamError.ts"],"sourcesContent":["","import type { DynamicClient } from '../../types';\nimport type { DynamicCore } from '../types';\n\n/** @not-instrumented */\nexport const getCore = (client: DynamicClient): DynamicCore => {\n  // @ts-expect-error - this was hidden from the public API\n  return client.__core;\n};\n","/* eslint-disable custom-rules/function-name-matches-filename */\nimport { version } from '../../../package.json';\n\nexport type BaseErrorParameters = {\n  /** The underlying error that caused this error, if any */\n  cause: Error | null;\n  /** The error unique code */\n  code: string;\n  /** Additional detailed information about the error */\n  details?: string;\n  /** URL to relevant documentation for this error */\n  docsUrl: string | null;\n  /** Array of additional contextual messages to be displayed */\n  metaMessages?: string[];\n  /** Custom name for the error. Defaults to 'BaseError' if not provided */\n  name: string;\n  /** A brief, human-readable description of the error */\n  shortMessage: string;\n};\n\nconst getDetails = ({ details, cause }: BaseErrorParameters) => {\n  if (cause instanceof BaseError) {\n    return cause.details;\n  }\n\n  if (cause?.message) {\n    return cause.message;\n  }\n\n  return details;\n};\n\n/**\n * Formats the error message with all available information\n */\n// eslint-disable-next-line custom-rules/one-function-per-file\nconst formatMessage = ({\n  shortMessage,\n  details,\n  docsUrl,\n  metaMessages,\n}: BaseErrorParameters) => {\n  return [\n    '[Dynamic JS SDK]',\n    shortMessage,\n    '',\n    ...(metaMessages ? [...metaMessages, ''] : []),\n    ...(docsUrl ? [`Docs: ${docsUrl}`] : []),\n    ...(details ? [`Details: ${details}`] : []),\n    `Version: ${version}`,\n    `Timestamp: ${new Date().toISOString()}`,\n  ].join('\\n');\n};\n\n/**\n * Base error class that provides structured error handling with detailed information\n */\nexport abstract class BaseError extends Error {\n  /** The error unique code */\n  code: string;\n  details: string | undefined;\n  private readonly formattedMessage: string | undefined;\n  override name = 'BaseError';\n  override cause: BaseError | Error | undefined;\n\n  constructor(args: BaseErrorParameters) {\n    const details = getDetails(args);\n    const formattedMessage = formatMessage({ ...args, details });\n    super(\n      args.shortMessage ?? formattedMessage,\n      args.cause ? { cause: args.cause } : undefined\n    );\n\n    this.formattedMessage = formattedMessage;\n    this.details = details;\n    this.name = args.name ?? this.name;\n    this.cause = args.cause ?? this.cause;\n    this.code = args.code;\n  }\n\n  /**\n   * Walks the cause chain of the error and returns the root error\n   */\n  walk(): Error | undefined {\n    const cause = this.cause;\n\n    if (cause instanceof BaseError) {\n      return cause.walk();\n    }\n\n    return cause;\n  }\n\n  override toString() {\n    return this.formattedMessage;\n  }\n}\n","import { BaseError } from './base';\n\nexport class ClientNotFoundError extends BaseError {\n  constructor() {\n    super({\n      cause: null,\n      code: 'client_not_found_error',\n      docsUrl: null,\n      name: 'ClientNotFoundError',\n      shortMessage:\n        'No Dynamic client has been created yet. Make sure you have called createDynamicClient() first.',\n    });\n  }\n}\n","/* eslint-disable custom-rules/function-name-matches-filename */\nimport { ClientNotFoundError } from '../../errors/ClientNotFoundError';\nimport { getCore } from '../core/getCore';\nimport type { DynamicClient } from '../types';\n\nlet defaultClient: DynamicClient | null = null;\nlet numOfInitializedClients = 0;\n\n/**\n * Returns the DynamicClient instance that was initialized with createDynamicClient.\n *\n * If more than one instance of DynamicClient was initialized, you should not use this function.\n * Instead, you should pass the client instance you stored to the function that needs it.\n  * @not-instrumented\n */\nexport const getDefaultClient = (): DynamicClient => {\n  if (!defaultClient) {\n    throw new ClientNotFoundError();\n  }\n\n  if (numOfInitializedClients > 1) {\n    const core = getCore(defaultClient);\n    core.logger.debug(\n      'Multiple instances of DynamicClient found. If you are only using one client (recommended), make sure you are not calling ' +\n        '\"createDynamicClient\" multiple times. If you are using multiple clients, make sure you are passing which client to use as ' +\n        'the last param of all Dynamic functions.'\n    );\n  }\n\n  return defaultClient;\n};\n\n/** @not-instrumented */\n// eslint-disable-next-line custom-rules/one-function-per-file\nexport const setDefaultClient = (client: DynamicClient) => {\n  defaultClient = client;\n  numOfInitializedClients++;\n};\n","export const NONCE_POOL_EXPIRATION_TIME = 60000 * 60 * 24;\n\nexport const NONCE_POOL_SIZE = 5;\n","import { dependencies } from '../../../package.json';\n\nexport const DYNAMIC_API_VERSION_HEADER = 'x-dyn-api-version';\n\nexport const DYNAMIC_REQUEST_ID_HEADER = 'x-dyn-request-id';\n\nexport const DYNAMIC_SDK_VERSION_HEADER = 'x-dyn-version';\n\nexport const ELEVATED_ACCESS_TOKEN_HEADER = 'x-dyn-elevated-access-token';\n\nexport const MFA_TOKEN_HEADER = 'x-mfa-auth-token';\n\nexport const SESSION_PUBLIC_KEY_HEADER = 'x-dyn-session-public-key';\n\nexport const DYNAMIC_SDK_API_VERSION =\n  dependencies['@dynamic-labs/sdk-api-core'];\n\nexport const DYNAMIC_SDK_SESSION_ID_HEADER = 'x-dyn-session-id';\n\nexport const CLIENT_SDK_NAME = 'ClientSDK';\n","const DEFAULT_CHARS =\n  'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';\n\ntype RandomStringParams = {\n  chars?: string;\n  length: number;\n};\n\n/** @not-instrumented */\nexport const randomString = ({ chars = DEFAULT_CHARS, length }: RandomStringParams) => {\n  const bytes = new Uint8Array(length);\n  crypto.getRandomValues(bytes);\n\n  let result = '';\n  for (let i = 0; i < length; i++) {\n    result += chars[bytes[i] % chars.length];\n  }\n  return result;\n};\n","import { BaseError } from './base';\n\nexport class ValueMustBeDefinedError extends BaseError {\n  constructor(message: string) {\n    super({\n      cause: null,\n      code: 'value_must_be_defined_error',\n      docsUrl: null,\n      name: 'ValueMustBeDefined',\n      shortMessage: message,\n    });\n  }\n}\n","/* eslint-disable func-style -- javascript requires this to be a function */\n\nimport { ValueMustBeDefinedError } from './../../errors/ValueMustBeDefinedError';\n\n/**\n * Asserts that a value is not null or undefined, throwing an error if it is.\n * This function acts as a type guard, narrowing the type to exclude null and undefined.\n *\n * @template T - The type of the value being checked\n * @param value - The value to check for null or undefined\n * @param message - The error message to throw if the value is null or undefined\n * @throws Throws an error with the provided message if value is null or undefined\n * @example\n * ```typescript\n * const maybeString: string | null = getValue();\n * assertDefined(maybeString, 'String value is required');\n * // maybeString is now typed as string (null is excluded)\n * ```\n */\nexport function assertDefined<T>(\n  value: T,\n  message: string\n): asserts value is Exclude<NonNullable<T>, void> {\n  if (value === null || value === undefined) {\n    throw new ValueMustBeDefinedError(message);\n  }\n}\n","import { AuthStorageEnum } from '@dynamic-labs/sdk-api-core';\n\nimport type { DynamicClient } from '../../../client/types';\nimport { assertDefined } from '../../../utils/assertDefined';\n\n/**\n * Returns true if the client is using Dynamic cookies or a BYO JWT cookie.\n  * @not-instrumented\n */\nexport const isCookieEnabled = (client: DynamicClient): boolean => {\n  assertDefined(client.projectSettings, 'Project settings are not defined');\n\n  const securitySettings = client.projectSettings.security;\n\n  if (!securitySettings) return false;\n\n  // client uses Dynamic cookies\n  const dynamicCookiesEnabled = (securitySettings.auth?.storage || []).includes(\n    AuthStorageEnum.Cookie\n  );\n\n  // BYO JWT client puts their non-Dynamic JWT in a cookie\n  const byoJwtCookieEnabled = Boolean(\n    securitySettings.externalAuth?.cookieName\n  );\n\n  // should return true for both of these scenarios\n  // because we also need to do `credentials: true` in api.ts when\n  // a byo jwt client sets their named cookie for their jwt and\n  // needs to send it to our backend\n  return dynamicCookiesEnabled || byoJwtCookieEnabled;\n};\n","/**\n * Extracts the session ID (`sid` claim) from a JWT token string.\n *\n * Decodes the base64url-encoded payload segment of the token and reads the\n * `sid` field. This is used to correlate instrumentation events with the\n * authenticated session, without ever forwarding the full token.\n *\n * Returns `null` when no token is present, when the token is malformed, or\n * when the payload does not contain a `sid` claim.\n  * @not-instrumented\n */\nexport const extractSessionId = (token: string): string | null => {\n  try {\n    const payload = token.split('.')[1];\n    const decoded = JSON.parse(atob(payload));\n\n    return decoded.sid ?? null;\n  } catch {\n    return null;\n  }\n};\n","/**\n * Returns the browser's `navigator.userAgent` string for inclusion in\n * instrumentation events.\n *\n * Falls back to an empty string in environments where `navigator` is not\n * available (e.g., Node.js SSR, service workers) so that callers never need\n * to guard against undefined.\n  * @not-instrumented\n */\nexport const getUserAgent = (): string => {\n  try {\n    // eslint-disable-next-line no-restricted-globals\n    return navigator.userAgent;\n  } catch {\n    return '';\n  }\n};\n","export const DEFAULT_PII_FIELDS = [\n  'password',\n  'token',\n  'secret',\n  'privateKey',\n  'mnemonic',\n  'seed',\n  'email',\n  'phone',\n  'ssn',\n  'address',\n  'authorization',\n];\n\nexport const REDACTED_VALUE = '[REDACTED]';\n\nexport const MAX_STRING_LENGTH = 500;\n\nexport const TRUNCATED_SUFFIX = '...[truncated]';\n\n/**\n * Label prefix for binary data placeholders. The full placeholder includes the\n * byte length, e.g. `[Binary:16 bytes]`, so consumers can gauge data size\n * without the actual bytes appearing in logs.\n */\nexport const BINARY_LABEL = 'Binary';\n\n/**\n * Placeholder emitted when a circular reference is detected in the value tree.\n * Using a named constant makes it easy to search for or filter in downstream\n * log tooling.\n */\nexport const CIRCULAR_VALUE = '[Circular]';\n","import {\n  BINARY_LABEL,\n  CIRCULAR_VALUE,\n  MAX_STRING_LENGTH,\n  REDACTED_VALUE,\n  TRUNCATED_SUFFIX,\n} from '../constants';\n\ntype ScrubContext = {\n  piiFieldsLower: string[];\n  redactAll?: boolean;\n  visited: WeakSet<object>;\n};\n\ntype ScrubParametersParams = {\n  piiFields: string[];\n  redactAll?: boolean;\n  value: Record<string, unknown>;\n};\n\ntype ScrubStringParams = {\n  key: string;\n  piiFieldsLower: string[];\n  redactAll?: boolean;\n  value: string;\n};\n\ntype ScrubArrayParams = {\n  context: ScrubContext;\n  value: unknown[];\n};\n\ntype ScrubObjectParams = {\n  context: ScrubContext;\n  value: Record<string, unknown>;\n};\n\ntype ScrubValueParams = {\n  context: ScrubContext;\n  key: string;\n  value: unknown;\n};\n\nconst scrubString = ({\n  key,\n  piiFieldsLower,\n  redactAll,\n  value,\n}: ScrubStringParams): string => {\n  if (piiFieldsLower.includes(key.toLowerCase())) {\n    return REDACTED_VALUE;\n  }\n\n  if (redactAll) {\n    return REDACTED_VALUE;\n  }\n\n  if (value.length > MAX_STRING_LENGTH) {\n    return value.slice(0, MAX_STRING_LENGTH) + TRUNCATED_SUFFIX;\n  }\n\n  return value;\n};\n\n// eslint-disable-next-line custom-rules/one-function-per-file\nconst scrubArray = ({ context, value }: ScrubArrayParams): unknown[] => {\n  if (context.visited.has(value)) {\n    return [CIRCULAR_VALUE];\n  }\n\n  context.visited.add(value);\n\n  const result = value.map((item, index) =>\n    scrubValue({ context, key: String(index), value: item })\n  );\n\n  context.visited.delete(value);\n\n  return result;\n};\n\n// eslint-disable-next-line custom-rules/one-function-per-file\nconst scrubObject = ({\n  context,\n  value,\n}: ScrubObjectParams): Record<string, unknown> => {\n  if (context.visited.has(value)) {\n    return { [CIRCULAR_VALUE]: true };\n  }\n\n  context.visited.add(value);\n\n  // Object.create(null) prevents prototype pollution when keys like '__proto__'\n  // are present (e.g. from a Map converted to a plain object).\n  const result = Object.create(null) as Record<string, unknown>;\n\n  for (const key of Object.keys(value)) {\n    result[key] = scrubValue({ context, key, value: value[key] });\n  }\n\n  context.visited.delete(value);\n\n  return result;\n};\n\n// eslint-disable-next-line custom-rules/one-function-per-file\nconst scrubValue = ({ context, key, value }: ScrubValueParams): unknown => {\n  if (value === null || value === undefined) {\n    return value;\n  }\n\n  if (value instanceof Uint8Array) {\n    return `[${BINARY_LABEL}:${value.byteLength} bytes]`;\n  }\n\n  if (context.piiFieldsLower.includes(key.toLowerCase())) {\n    return REDACTED_VALUE;\n  }\n\n  if (typeof value === 'string') {\n    return scrubString({\n      key,\n      piiFieldsLower: context.piiFieldsLower,\n      redactAll: context.redactAll,\n      value,\n    });\n  }\n\n  if (Array.isArray(value)) {\n    return scrubArray({ context, value });\n  }\n\n  if (value instanceof Set) {\n    if (context.visited.has(value)) {\n      return [CIRCULAR_VALUE];\n    }\n\n    context.visited.add(value);\n    const setResult = scrubArray({ context, value: [...value] });\n    context.visited.delete(value);\n\n    return setResult;\n  }\n\n  if (value instanceof Map) {\n    if (context.visited.has(value)) {\n      return { [CIRCULAR_VALUE]: true };\n    }\n\n    context.visited.add(value);\n    // Object.create(null) avoids prototype pollution when Map keys include\n    // '__proto__', 'constructor', or 'prototype'\n    const asObject = Object.create(null) as Record<string, unknown>;\n\n    for (const [k, v] of value.entries()) {\n      asObject[String(k)] = v;\n    }\n\n    const mapResult = scrubObject({ context, value: asObject });\n    context.visited.delete(value);\n\n    return mapResult;\n  }\n\n  // WeakMap and WeakSet are not iterable and expose no `.size` or enumeration\n  // methods by design — their entries are held weakly and are not accessible\n  // programmatically. We emit a tagged placeholder that identifies the type so\n  // the log record remains self-describing without attempting enumeration.\n  if (value instanceof WeakMap) {\n    return '[WeakMap]';\n  }\n\n  if (value instanceof WeakSet) {\n    return '[WeakSet]';\n  }\n\n  if (value instanceof Date) {\n    return value.toISOString();\n  }\n\n  if (value instanceof Error) {\n    return `[Error: ${value.message}]`;\n  }\n\n  if (typeof value === 'object') {\n    return scrubObject({ context, value: value as Record<string, unknown> });\n  }\n\n  return value;\n};\n\n/** @not-instrumented */\n// eslint-disable-next-line custom-rules/one-function-per-file\nexport const scrubParameters = ({\n  piiFields,\n  redactAll,\n  value,\n}: ScrubParametersParams): Record<string, unknown> => {\n  const context: ScrubContext = {\n    piiFieldsLower: piiFields.map((field) => field.toLowerCase()),\n    redactAll,\n    visited: new WeakSet<object>(),\n  };\n\n  return scrubObject({ context, value });\n};\n","/**\n * Normalises the raw positional arguments of an instrumented function call\n * into a flat `Record<string, unknown>` suitable for structured logging.\n *\n * ## Why this is needed\n *\n * Instrumented functions are wrapped with `(...args: unknown[])`, so their\n * parameters arrive as an array. Logging a raw array loses the semantic names\n * of each argument. This function recovers a named representation:\n *\n * - **No arguments** → `{}`\n * - **Single plain-object argument** → that object is returned as-is, because\n *   SDK functions follow the single-object-parameter convention, so the object\n *   already carries named keys (`{ amount, to }`, etc.).\n * - **Everything else** (multiple args, a single primitive, a single array) →\n *   each value is indexed as `arg0`, `arg1`, …\n *\n * ## Why arrays are NOT treated as plain objects\n *\n * `typeof [] === 'object'` and `[] !== null`, so without the `Array.isArray`\n * guard a single-array argument would be returned as-is. That would produce\n * an object with numeric string keys (`{ '0': ..., '1': ... }`), which is\n * misleading and inconsistent with how multi-arg calls are handled. Instead,\n * arrays fall through to the indexed `arg0` path.\n  * @not-instrumented\n */\nexport const extractParams = (args: unknown[]): Record<string, unknown> => {\n  if (args.length === 0) {\n    return {};\n  }\n\n  if (\n    args.length === 1 &&\n    typeof args[0] === 'object' &&\n    args[0] !== null &&\n    !Array.isArray(args[0])\n  ) {\n    // Single plain-object argument: return it directly so named keys are preserved.\n    return args[0] as Record<string, unknown>;\n  }\n\n  // Multiple args, a primitive, or an array: index each value positionally.\n  const result: Record<string, unknown> = {};\n\n  for (let i = 0; i < args.length; i++) {\n    result[`arg${i}`] = args[i];\n  }\n\n  return result;\n};\n","import { scrubParameters } from '../../scrubParameters';\n\ntype ScrubResolvedValueParams = {\n  piiFields: string[];\n  redactAll?: boolean;\n  value: unknown;\n};\n\n/**\n * Scrubs a resolved return value of any type before logging it.\n * Routes through `scrubParameters` by wrapping the value so that strings,\n * arrays, Dates, Errors, and all other types are handled identically to\n * nested object fields.\n  * @not-instrumented\n */\nexport const scrubResolvedValue = ({\n  piiFields,\n  redactAll,\n  value,\n}: ScrubResolvedValueParams): unknown =>\n  scrubParameters({\n    piiFields,\n    redactAll,\n    value: { result: value },\n  }).result;\n","import type { DynamicCore } from '../../../client/core/types/DynamicCore';\nimport { extractSessionId } from '../../../modules/auth/extractSessionId/extractSessionId';\nimport { getUserAgent } from '../../../utils/getUserAgent/getUserAgent';\nimport type {\n  FunctionInstrumentationEvent,\n  SerializedError,\n} from '../instrumentation.types';\nimport { scrubParameters } from '../scrubParameters';\nimport { extractParams } from './extractParams/extractParams';\nimport { scrubResolvedValue } from './scrubResolvedValue/scrubResolvedValue';\n\n// Error properties (message, name, stack) are non-enumerable so JSON.stringify\n// produces {} for raw Error objects. This helper extracts them explicitly.\nconst serializeError = (error: unknown): SerializedError => {\n  if (error instanceof Error) {\n    return { message: error.message, name: error.name, stack: error.stack };\n  }\n  return { message: String(error), name: 'UnknownError' };\n};\n\ntype InstrumentFunctionParams<T extends (...args: unknown[]) => unknown> = {\n  /** The original function to wrap. */\n  fn: T;\n  /** Human-readable name recorded in every emitted event. */\n  functionName: string;\n  /**\n   * Returns the current `DynamicCore` instance, or `undefined` when the SDK\n   * has not yet been initialised. Instrumentation is skipped when this returns\n   * `undefined` or when `core.instrumentation.config.enabled` is `false`.\n   */\n  getCore: () => DynamicCore | undefined;\n  /**\n   * When `true`, every field in `parameters` and `resolvedValue` is replaced\n   * with `\"[redacted]\"` regardless of `piiFields`. Use this for functions\n   * whose arguments are inherently sensitive (e.g., signing, authentication).\n   */\n  redactAll?: boolean;\n};\n\n/**\n * Wraps a function so that each invocation emits a structured\n * `FunctionInstrumentationEvent` at three lifecycle points:\n *\n * - **started** — immediately before the function body executes, with the\n *   PII-scrubbed call parameters.\n * - **resolved** — after the function (or its returned Promise) settles\n *   successfully, with the PII-scrubbed return value.\n * - **rejected** — if the function throws synchronously or its returned\n *   Promise rejects.\n *\n * The original return value (or thrown error) is always forwarded to the\n * caller unchanged — instrumentation is purely observational.\n *\n * ## Usage\n *\n * ```ts\n * const transfer = instrumentFunction({\n *   fn: rawTransfer,\n *   functionName: 'transfer',\n *   getCore: () => core,\n * });\n *\n * // When called, three events are emitted automatically:\n * await transfer({ amount: 1, to: '0xabc' });\n * ```\n *\n * ## How functions are wrapped\n *\n * `instrumentFunction` is not called manually in application code. Instead,\n * the esbuild instrumentation plugin (`tools/instrumentation-plugin`) injects\n * it at build time: any exported function annotated with `@instrumented` in its\n * JSDoc is automatically wrapped by the plugin during the build step.\n * The plugin strips the original `export`, renames the function, and re-exports\n * it under the original name via `instrumentFunction(...)` — so the public API\n * is unchanged and no call sites need to be updated.\n *\n * ## Opting out\n *\n * Instrumentation is skipped entirely when:\n * - `getCore()` returns `undefined` (SDK not initialised), or\n * - `core.instrumentation.config.enabled` is `false`.\n *\n * In both cases the original function is called directly with no overhead.\n *\n * ## PII scrubbing\n *\n * All string values whose key appears in `piiFields` are replaced with\n * `\"[redacted]\"` before events are emitted. Pass `redactAll: true` to redact\n * every field, regardless of key name.\n * @not-instrumented\n */\n// eslint-disable-next-line custom-rules/one-function-per-file\nexport const instrumentFunction = <T extends (...args: unknown[]) => unknown>({\n  fn,\n  functionName,\n  getCore,\n  redactAll,\n}: InstrumentFunctionParams<T>): T => {\n  const wrapped = (...args: unknown[]) => {\n    const core = getCore();\n\n    if (!core) {\n      return fn(...args);\n    }\n\n    if (!core.instrumentation.config.enabled) {\n      return fn(...args);\n    }\n\n    const instrumentation = core.instrumentation;\n    const state = core.state.get();\n\n    const baseEvent: Omit<FunctionInstrumentationEvent, 'phase' | 'timestamp'> =\n      {\n        environmentId: core.environmentId,\n        functionName,\n        parameters: scrubParameters({\n          piiFields: instrumentation.config.piiFields,\n          redactAll,\n          value: extractParams(args),\n        }),\n        sdkSessionId: core.sdkSessionId,\n        sdkVersion: core.version,\n        // Function events always use 'info' — phase already conveys whether the call\n        // succeeded or failed, so status is not needed to signal severity here.\n        status: 'info',\n        tokenSessionId: state.token ? extractSessionId(state.token) : null,\n        userAgent: getUserAgent(),\n        userId: state.user?.id ?? null,\n      };\n\n    instrumentation.logFunction({\n      ...baseEvent,\n      phase: 'started',\n      timestamp: new Date().toISOString(),\n    });\n\n    try {\n      const result = fn(...args);\n\n      if (result instanceof Promise) {\n        return result\n          .then((value) => {\n            instrumentation.logFunction({\n              ...baseEvent,\n              phase: 'resolved',\n              resolvedValue: scrubResolvedValue({\n                piiFields: instrumentation.config.piiFields,\n                redactAll,\n                value,\n              }),\n              timestamp: new Date().toISOString(),\n            });\n\n            return value;\n          })\n          .catch((error) => {\n            instrumentation.logFunction({\n              ...baseEvent,\n              phase: 'rejected',\n              rejectedError: serializeError(error),\n              timestamp: new Date().toISOString(),\n            });\n            throw error;\n          });\n      }\n\n      instrumentation.logFunction({\n        ...baseEvent,\n        phase: 'resolved',\n        resolvedValue: scrubResolvedValue({\n          piiFields: instrumentation.config.piiFields,\n          redactAll,\n          value: result,\n        }),\n        timestamp: new Date().toISOString(),\n      });\n\n      return result;\n    } catch (error) {\n      instrumentation.logFunction({\n        ...baseEvent,\n        phase: 'rejected',\n        rejectedError: serializeError(error),\n        timestamp: new Date().toISOString(),\n      });\n\n      throw error;\n    }\n  };\n\n  return wrapped as T;\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport type { SessionKeys } from '../sessionKeys.types';\n\n/** @instrumented */\nexport const getSessionKeys = (client: DynamicClient): SessionKeys | undefined => {\n  const core = getCore(client);\n\n  const publicKey = core.state.get().sessionKeys;\n\n  if (!publicKey) {\n    return undefined;\n  }\n\n  return { publicKey };\n};\n","import { getCore } from '../../../client/core/getCore';\nimport { getDefaultClient } from '../../../client/defaultClient';\n\ntype GetElevatedAccessTokenParams = {\n  /**\n   * Whether to consume single-use tokens after retrieval.\n   * Set to `false` to check for token existence without side-effects.\n   * @default true\n    * @instrumented\n */\n  consume?: boolean;\n  scope: string;\n};\n\n/**\n * Gets an elevated access token by scope.\n *\n * This function retrieves an elevated access token that contains the specified scope.\n * Expired tokens are automatically filtered out.\n *\n * By default, if the token has `singleUse: true`, it will be automatically\n * consumed (removed from state) after retrieval. Pass `consume: false` to\n * check for token existence without consuming it.\n *\n * @param params - The parameters object.\n * @param params.scope - The scope to match (e.g., 'wallet:export').\n * @param params.consume - Whether to consume single-use tokens (default: true).\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns The elevated access token if found and not expired, or undefined if not found or expired.\n *\n * @example\n * ```typescript\n * // Retrieve and consume (default)\n * const token = getElevatedAccessToken({ scope: 'wallet:export' });\n *\n * // Check existence without consuming\n * const token = getElevatedAccessToken({ scope: 'credential:unlink', consume: false });\n * ```\n  * @not-instrumented\n */\nexport const getElevatedAccessToken = (\n  { consume = true, scope }: GetElevatedAccessTokenParams,\n  client = getDefaultClient()\n): string | undefined => {\n  const core = getCore(client);\n\n  const now = new Date();\n  const elevatedAccessTokens = core.state.get().elevatedAccessTokens || [];\n\n  // Filter out expired tokens\n  const validTokens = elevatedAccessTokens.filter(\n    (token) => !token.expiresAt || token.expiresAt > now\n  );\n\n  // Remove expired tokens from state if any were found\n  if (validTokens.length !== elevatedAccessTokens.length) {\n    core.state.set({\n      elevatedAccessTokens: validTokens,\n    });\n  }\n\n  const token = validTokens.find((token) => token.scopes.includes(scope));\n\n  if (!token) {\n    return undefined;\n  }\n\n  // Check if token should be consumed based on singleUse property\n  if (consume && token.singleUse) {\n    const updatedTokens = validTokens.filter((t) => t !== token);\n    core.state.set({\n      elevatedAccessTokens: updatedTokens,\n    });\n  }\n\n  return token.token;\n};\n","import { BaseError } from '../base';\n\nexport class APIError extends BaseError {\n  status: number;\n\n  constructor(message: string, code: string, status: number) {\n    super({\n      cause: null,\n      code,\n      docsUrl: null,\n      name: 'APIError',\n      shortMessage: message,\n    });\n\n    this.status = status;\n  }\n\n  static async fromResponse(response: Response) {\n    try {\n      const errorBody = await response.clone().json();\n\n      if (\n        errorBody &&\n        'error' in errorBody &&\n        typeof errorBody.error === 'string'\n      ) {\n        const errorCode =\n          'code' in errorBody && typeof errorBody.code === 'string'\n            ? errorBody.code\n            : 'unknown_error';\n\n        return new APIError(errorBody.error, errorCode, response.status);\n      }\n\n      return null;\n    } catch {\n      return null;\n    }\n  }\n}\n","import { BaseError, type BaseErrorParameters } from './base';\n\nexport class InvalidExternalAuthError extends BaseError {\n  constructor({ cause }: Pick<BaseErrorParameters, 'cause'>) {\n    super({\n      cause,\n      code: 'invalid_external_auth_error',\n      docsUrl:\n        'https://www.dynamic.xyz/docs/external-auth/third-party-auth-overview',\n      name: 'InvalidExternalAuthError',\n      shortMessage: 'Error authenticating with external JWT',\n    });\n  }\n}\n","import { BaseError, type BaseErrorParameters } from './base';\n\nexport class LinkCredentialError extends BaseError {\n  constructor({ cause }: Pick<BaseErrorParameters, 'cause'>) {\n    super({\n      cause,\n      code: 'link_credential_error',\n      docsUrl: null,\n      name: 'LinkCredentialError',\n      shortMessage:\n        'The credential you are trying to link is associated with another account and cannot be reassigned.',\n    });\n  }\n}\n","import { BaseError, type BaseErrorParameters } from './base';\n\nexport class MfaInvalidOtpError extends BaseError {\n  constructor({ cause }: Pick<BaseErrorParameters, 'cause'>) {\n    super({\n      cause,\n      code: 'mfa_invalid_otp_error',\n      docsUrl: null,\n      name: 'MfaInvalidOtpError',\n      shortMessage: 'Invalid OTP',\n    });\n  }\n}\n","import { BaseError, type BaseErrorParameters } from './base';\n\nexport class MfaRateLimitedError extends BaseError {\n  constructor({ cause }: Pick<BaseErrorParameters, 'cause'>) {\n    super({\n      cause,\n      code: 'mfa_rate_limited_error',\n      docsUrl: null,\n      name: 'MfaRateLimitedError',\n      shortMessage: 'Rate limited',\n    });\n  }\n}\n","import { BaseError, type BaseErrorParameters } from './base';\n\nexport class SandboxMaximumThresholdReachedError extends BaseError {\n  constructor({ cause }: Pick<BaseErrorParameters, 'cause'>) {\n    super({\n      cause,\n      code: 'sandbox_maximum_threshold_reached_error',\n      docsUrl:\n        'https://www.dynamic.xyz/docs/developer-dashboard/sandbox-vs-live#sandbox-vs-live',\n      name: 'SandboxMaximumThresholdReachedError',\n      shortMessage:\n        'Your sandbox environment has reached the maximum MAU. Please use a live environment for production traffic.',\n    });\n  }\n}\n","import { APIError } from '../../../../errors/APIError';\nimport { InvalidExternalAuthError } from '../../../../errors/InvalidExternalAuthError';\nimport { LinkCredentialError } from '../../../../errors/LinkCredentialError';\nimport { MfaInvalidOtpError } from '../../../../errors/MfaInvalidOtpError';\nimport { MfaRateLimitedError } from '../../../../errors/MfaRateLimitedError';\nimport { SandboxMaximumThresholdReachedError } from '../../../../errors/SandboxMaximumThresholdReachedError';\nimport type { ErrorMapper } from '../../apiClient.types';\n\n/**\n * Default error mapper for the client that handles common API error codes.\n *\n * This mapper transforms specific API error codes into more specific error types:\n * - `mfa_invalid_code` → `MfaInvalidOtpError`\n * - `mfa_rate_limited` → `MfaRateLimitedError`\n *\n * @param error - The error to be mapped\n * @returns A transformed error if the error code matches a known pattern, or null if no transformation is needed\n *\n * @example\n * ```typescript\n * // This will be automatically applied to all API errors\n * const apiClient = createApiClient({}, client);\n *\n * // The clientErrorMapper will automatically convert mfa_invalid_code errors\n * // to MfaInvalidOtpError instances\n * ```\n  * @not-instrumented\n */\nexport const clientErrorMapper: ErrorMapper = (error) => {\n  if (error instanceof APIError) {\n    if (error.code === 'mfa_invalid_code') {\n      return new MfaInvalidOtpError({ cause: error });\n    }\n\n    if (error.code === 'mfa_rate_limited') {\n      return new MfaRateLimitedError({ cause: error });\n    }\n\n    if (error.code === 'invalid_external_auth') {\n      return new InvalidExternalAuthError({ cause: error });\n    }\n\n    if (error.code === 'sandbox_maximum_threshold_reached') {\n      return new SandboxMaximumThresholdReachedError({ cause: error });\n    }\n\n    if (\n      error.code === 'merge_accounts_invalid' ||\n      error.code === 'reassign_wallet_error'\n    ) {\n      return new LinkCredentialError({ cause: error });\n    }\n  }\n\n  return null;\n};\n","/* eslint-disable custom-rules/function-name-matches-filename */\nimport type { Middleware, ResponseContext } from '@dynamic-labs/sdk-api-core';\n\nimport { APIError } from '../../../../errors/APIError';\nimport type { ErrorMapper } from '../../apiClient.types';\n\ntype CreateConvertToApiErrorMiddlewareOptions = {\n  errorMappers?: ErrorMapper[];\n};\n\n/**\n * Creates middleware that converts HTTP error responses to APIError instances\n * and optionally applies custom error mappers to transform them into specific error types.\n *\n * @param options.errorMappers - Array of error mappers to apply to API errors\n * @returns A middleware function that handles error conversion and mapping\n  * @not-instrumented\n */\nexport const createConvertToApiErrorMiddleware = ({\n  errorMappers = [],\n}: CreateConvertToApiErrorMiddlewareOptions): Middleware => ({\n  post: async (context: ResponseContext) => {\n    if (context.response.status >= 400) {\n      const apiError = await APIError.fromResponse(context.response);\n\n      if (apiError) {\n        let errorToThrow: Error = apiError;\n\n        for (const mapper of errorMappers) {\n          const newError = mapper(apiError);\n\n          if (newError) {\n            errorToThrow = newError;\n            break;\n          }\n        }\n\n        throw errorToThrow;\n      }\n    }\n\n    return context.response;\n  },\n});\n","import { getCore } from '../../client/core/getCore';\nimport type { DynamicClient } from '../../client/types';\nimport { fetchAndStoreNonces } from './fetchAndStoreNonces/fetchAndStoreNonces';\n\n/**\n * Returns a nonce for wallet ownership verification.\n *\n * Pops the first nonce from the prefetched pool. When the pool is running low\n * (≤1 remaining after pop) a background refetch is triggered. If the pool is\n * empty, nonces are fetched on-demand before returning.\n  * @instrumented\n */\nexport const getNonce = async (\n  client: DynamicClient\n): Promise<string> => {\n  const core = getCore(client);\n  const pool = core.state.get().prefetchedNonces;\n\n  if (pool.length > 0) {\n    const [nonce, ...remaining] = pool;\n\n    core.state.set({ prefetchedNonces: remaining });\n\n    if (remaining.length <= 1) {\n      void fetchAndStoreNonces(client);\n    }\n\n    return nonce;\n  }\n\n  await fetchAndStoreNonces(client);\n\n  return getNonce(client);\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport type { DeviceSigner } from '../../../services/deviceSigner';\n\n/** @instrumented */\nexport const getDeviceSigner = async (\n  client: DynamicClient\n): Promise<DeviceSigner> => {\n  const { deviceSigner, keychain } = getCore(client);\n\n  /**\n   * If the device signer is available, it should handle the device signing.\n   * This is used for mobile devices with secure enclave.\n   */\n  if (deviceSigner) {\n    return deviceSigner;\n  }\n\n  const keyName = 'device';\n\n  const existingPublicKey = await keychain.getPublicKey(keyName);\n\n  if (!existingPublicKey) {\n    await keychain.generateKey(keyName);\n  }\n\n  return {\n    getPublicKey: () => keychain.getPublicKey(keyName) as Promise<string>,\n    sign: (payload: string) => keychain.sign(keyName, payload),\n  };\n};\n","import type { DynamicClient } from '../../../client/types';\nimport { assertDefined } from '../../../utils/assertDefined';\nimport { getNonce } from '../../../utils/getNonce';\nimport { isCookieEnabled } from '../../projectSettings/isCookieEnabled';\nimport { getDeviceSigner } from '../getDeviceSigner';\n\n/** @instrumented */\nexport const getHeadersForNonceSignedByDeviceSigners = async (\n  client: DynamicClient\n): Promise<Record<string, string>> => {\n  const { projectSettings } = client;\n\n  assertDefined(projectSettings, 'Project settings not found');\n\n  /**\n   * For cookie based environments, the device registration is handled\n   * by settings the cookie in the browser.\n   * Then we dont need to provide the headers\n   */\n  if (isCookieEnabled(client)) {\n    return {};\n  }\n\n  const deviceSigner = await getDeviceSigner(client);\n\n  const nonce = await getNonce(client);\n\n  const signedNonce = await deviceSigner.sign(nonce);\n  const publicKey = await deviceSigner.getPublicKey();\n\n  return {\n    'x-dynamic-device-nonce': nonce,\n    'x-dynamic-device-publickey': publicKey,\n    'x-dynamic-device-signed-nonce': signedNonce,\n  };\n};\n","import type { Middleware } from '@dynamic-labs/sdk-api-core';\nimport { isDeviceNonceSignatureRequiredForUrl } from '@dynamic-labs/sdk-api-core';\n\nimport type { DynamicClient } from '../../../../client/types';\nimport { getHeadersForNonceSignedByDeviceSigners } from '../../../deviceRegistration/getHeadersForNonceSignedByDeviceSigners';\nimport { isCookieEnabled } from '../../../projectSettings/isCookieEnabled';\n\n/** @instrumented */\nexport const createDeviceSignatureHeadersMiddleware = (\n  client: DynamicClient\n): Middleware => {\n  return {\n    pre: async (context) => {\n      /**\n       * The signed nonce is not required for cookie based environments.\n       */\n      if (\n        isDeviceNonceSignatureRequiredForUrl(context.url) &&\n        !isCookieEnabled(client)\n      ) {\n        const deviceSignerHeaders = await getHeadersForNonceSignedByDeviceSigners(\n          client\n        );\n\n        return {\n          init: {\n            ...context.init,\n            headers: {\n              ...context.init.headers,\n              ...deviceSignerHeaders,\n            },\n          },\n          url: context.url,\n        };\n      }\n\n      return;\n    },\n  };\n};\n","import { BaseError, type BaseErrorParameters } from './base';\n\nexport class UnauthorizedError extends BaseError {\n  constructor({ cause }: Pick<BaseErrorParameters, 'cause'>) {\n    super({\n      cause,\n      code: 'unauthorized_error',\n      docsUrl: null,\n      name: 'UnauthorizedError',\n      shortMessage: 'Unauthorized',\n    });\n  }\n}\n","import type { Middleware, ResponseContext } from '@dynamic-labs/sdk-api-core';\n\nimport { UnauthorizedError } from '../../../../errors/UnauthorizedError';\n\n/** @not-instrumented */\nexport const createUnauthorizedMiddleware = (): Middleware => ({\n  post: async (context: ResponseContext) => {\n    if (context.response.status === 401) {\n      let cause: Error | null = null;\n\n      try {\n        const errorBody = await context.response.clone().json();\n\n        if (\n          errorBody &&\n          'error' in errorBody &&\n          typeof errorBody.error === 'string'\n        ) {\n          // eslint-disable-next-line no-restricted-syntax\n          cause = new Error(errorBody.error);\n        }\n      } catch {\n        // Response body isn't valid JSON — proceed without a cause\n      }\n\n      throw new UnauthorizedError({ cause });\n    }\n\n    return context.response;\n  },\n});\n","import { Configuration, SDKApi } from '@dynamic-labs/sdk-api-core';\n\nimport { version } from '../../../package.json';\nimport { getCore } from '../../client/core/getCore';\nimport type { DynamicClient } from '../../client/types';\nimport { randomString } from '../../utils/randomString';\nimport { isCookieEnabled } from '../projectSettings/isCookieEnabled';\nimport { getSessionKeys } from '../sessionKeys/getSessionKeys';\nimport type { CreateApiClientOptions } from './apiClient.types';\nimport { getElevatedAccessToken } from '../auth/getElevatedAccessToken';\nimport {\n  CLIENT_SDK_NAME,\n  DYNAMIC_API_VERSION_HEADER,\n  DYNAMIC_REQUEST_ID_HEADER,\n  DYNAMIC_SDK_API_VERSION,\n  DYNAMIC_SDK_SESSION_ID_HEADER,\n  DYNAMIC_SDK_VERSION_HEADER,\n  ELEVATED_ACCESS_TOKEN_HEADER,\n  MFA_TOKEN_HEADER,\n  SESSION_PUBLIC_KEY_HEADER,\n} from './constants';\nimport { clientErrorMapper } from './utils/clientErrorMapper';\nimport { createConvertToApiErrorMiddleware } from './utils/convertToApiErrorMiddleware/convertToApiErrorMiddleware';\nimport { createDeviceSignatureHeadersMiddleware } from './utils/deviceSignatureHeadersMiddleware';\nimport { createUnauthorizedMiddleware } from './utils/unauthorizedMiddleware/createUnauthorizedMiddleware';\n\ntype ISettings = {\n  basePath: string;\n  credentials?: 'include';\n  headers: {\n    Authorization?: string;\n    'Content-Type': string;\n    [DYNAMIC_API_VERSION_HEADER]: string;\n    [DYNAMIC_REQUEST_ID_HEADER]: string;\n    [DYNAMIC_SDK_SESSION_ID_HEADER]: string;\n    [DYNAMIC_SDK_VERSION_HEADER]: string;\n    [ELEVATED_ACCESS_TOKEN_HEADER]?: string;\n    [MFA_TOKEN_HEADER]?: string;\n    [SESSION_PUBLIC_KEY_HEADER]?: string;\n  };\n};\n\n/**\n * Returns a new instance of the SDK API client.\n *\n * This is not meant for storing, as it is very light we can create it whenever needed.\n  * @instrumented\n */\nexport const createApiClient = (\n  options: CreateApiClientOptions = {},\n  client: DynamicClient\n) => {\n  const core = getCore(client);\n  const coreState = core.state.get();\n\n  const settings: ISettings = {\n    basePath: core.apiBaseUrl,\n    headers: {\n      'Content-Type': 'application/json',\n      [DYNAMIC_API_VERSION_HEADER]: `API/${DYNAMIC_SDK_API_VERSION}`,\n      [DYNAMIC_REQUEST_ID_HEADER]: randomString({ length: 50 }),\n      [DYNAMIC_SDK_SESSION_ID_HEADER]: core.sdkSessionId,\n      [DYNAMIC_SDK_VERSION_HEADER]: `${CLIENT_SDK_NAME}/${version}`,\n      ...core.getApiHeaders(),\n      ...options.headers,\n    },\n  };\n\n  if (client.token) {\n    settings.headers.Authorization = `Bearer ${client.token}`;\n  }\n\n  if (client.projectSettings && isCookieEnabled(client)) {\n    settings.credentials = 'include';\n  }\n\n  if (options.includeMfaToken && coreState.mfaToken) {\n    settings.headers[MFA_TOKEN_HEADER] = coreState.mfaToken;\n  }\n\n  if (options.elevatedAccessTokenScope) {\n    const elevatedToken = getElevatedAccessToken(\n      { scope: options.elevatedAccessTokenScope },\n      client\n    );\n    if (elevatedToken) {\n      settings.headers[ELEVATED_ACCESS_TOKEN_HEADER] = elevatedToken;\n    }\n  }\n\n  const sessionPublicKey = getSessionKeys(client)?.publicKey;\n\n  // This check is required to avoid overriding the session public key header\n  // that is set by any of our other SDKs using the Dynamic Client SDK.\n  const isSessionPublicKeyHeaderPresent =\n    settings.headers[SESSION_PUBLIC_KEY_HEADER] !== undefined;\n\n  if (sessionPublicKey && !isSessionPublicKeyHeaderPresent) {\n    settings.headers[SESSION_PUBLIC_KEY_HEADER] = sessionPublicKey;\n  }\n\n  return new SDKApi(\n    new Configuration({\n      ...settings,\n      fetchApi: core.fetch,\n      middleware: [\n        createDeviceSignatureHeadersMiddleware(client),\n        createConvertToApiErrorMiddleware({\n          errorMappers: [...(options.errorMappers || []), clientErrorMapper],\n        }),\n        createUnauthorizedMiddleware(),\n      ],\n    })\n  );\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { createApiClient } from '../../../modules/apiClient';\nimport { NONCE_POOL_EXPIRATION_TIME, NONCE_POOL_SIZE } from '../constants';\n\n/**\n * Fetches a batch of nonces from the API.\n *\n * Prefetching is critical for iOS deep link wallet providers (e.g. Phantom\n * redirect). On iOS, a network request (like fetching a nonce) between a user\n * action and a deeplink call will break the gesture chain, causing iOS to\n * silently ignore the deeplink. By prefetching nonces ahead of time,\n * `getNonce` can return synchronously from cache and the deeplink fires\n * without an interrupting network round-trip.\n  * @not-instrumented\n */\nexport const fetchAndStoreNonces = async (\n  client: DynamicClient\n): Promise<void> => {\n  const core = getCore(client);\n\n  const { environmentId } = core;\n\n  const apiClient = createApiClient({}, client);\n\n  const { nonces } = await apiClient.getNonces({\n    count: NONCE_POOL_SIZE,\n    environmentId,\n  });\n\n  core.state.set({\n    prefetchedNonces: nonces,\n    prefetchedNoncesExpiration: Date.now() + NONCE_POOL_EXPIRATION_TIME,\n  });\n};\n","import type { Chain } from '../chain';\n\ntype ChainInfo = {\n  apiChainName: string;\n  blockchainName: string;\n  verifiedCredentialChainName: string;\n  waasChainNameOverride?: string;\n};\n\nexport const CHAINS_INFO_MAP: Record<Chain, ChainInfo> = {\n  ALEO: {\n    apiChainName: 'aleo',\n    blockchainName: 'Aleo',\n    verifiedCredentialChainName: 'aleo',\n  },\n  ALGO: {\n    apiChainName: 'algo',\n    blockchainName: 'Algorand',\n    verifiedCredentialChainName: 'algorand',\n  },\n  APTOS: {\n    apiChainName: 'aptos',\n    blockchainName: 'Aptos',\n    verifiedCredentialChainName: 'aptos',\n  },\n  BTC: {\n    apiChainName: 'bitcoin',\n    blockchainName: 'Bitcoin',\n    verifiedCredentialChainName: 'bip122',\n  },\n  COSMOS: {\n    apiChainName: 'cosmos',\n    blockchainName: 'Cosmos',\n    verifiedCredentialChainName: 'cosmos',\n  },\n  ECLIPSE: {\n    apiChainName: 'eclipse',\n    blockchainName: 'Eclipse',\n    verifiedCredentialChainName: 'eclipse',\n  },\n  EVM: {\n    apiChainName: 'evm',\n    // eslint-disable-next-line custom-rules/ban-ethereum-eth-terms\n    blockchainName: 'Ethereum',\n    verifiedCredentialChainName: 'eip155',\n  },\n  FLOW: {\n    apiChainName: 'flow',\n    blockchainName: 'Flow',\n    verifiedCredentialChainName: 'flow',\n  },\n  MIDNIGHT: {\n    apiChainName: 'midnight',\n    blockchainName: 'Midnight',\n    verifiedCredentialChainName: 'midnight',\n  },\n  SOL: {\n    apiChainName: 'solana',\n    blockchainName: 'Solana',\n    verifiedCredentialChainName: 'solana',\n    waasChainNameOverride: 'SVM',\n  },\n  SPARK: {\n    apiChainName: 'spark',\n    blockchainName: 'Spark',\n    verifiedCredentialChainName: 'spark',\n  },\n  STARK: {\n    apiChainName: 'starknet',\n    blockchainName: 'Starknet',\n    verifiedCredentialChainName: 'starknet',\n  },\n  STELLAR: {\n    apiChainName: 'stellar',\n    blockchainName: 'Stellar',\n    verifiedCredentialChainName: 'stellar',\n  },\n  SUI: {\n    apiChainName: 'sui',\n    blockchainName: 'Sui',\n    verifiedCredentialChainName: 'sui',\n  },\n  TEMPO: {\n    apiChainName: 'tempo',\n    blockchainName: 'Tempo',\n    verifiedCredentialChainName: 'tempo',\n  },\n  TON: {\n    apiChainName: 'ton',\n    blockchainName: 'TON',\n    verifiedCredentialChainName: 'ton',\n  },\n  TRON: {\n    apiChainName: 'tron',\n    blockchainName: 'Tron',\n    verifiedCredentialChainName: 'tron',\n  },\n};\n","import type { Chain } from '../../modules/chain';\nimport { CHAINS_INFO_MAP } from '../../modules/wallets/constants';\nimport { assertDefined } from '../assertDefined';\n\n/** @instrumented */\nexport const getChainFromVerifiedCredentialChain = (\n  verifiedCredentialChain: string\n): Chain => {\n  const chains = Object.keys(CHAINS_INFO_MAP) as Chain[];\n\n  const chain = chains.find(\n    (chain) =>\n      CHAINS_INFO_MAP[chain].verifiedCredentialChainName ===\n      verifiedCredentialChain\n  );\n\n  assertDefined(chain, `Unknown chain: ${verifiedCredentialChain}`);\n\n  return chain;\n};\n","import { dependencies } from '../package.json';\n\nexport const SDK_API_CORE_VERSION = dependencies['@dynamic-labs/sdk-api-core'];\n\nexport const DYNAMIC_ICONIC_SPRITE_URL =\n  'https://iconic.dynamic-static-assets.com/icons/sprite.svg';\n","import { DYNAMIC_ICONIC_SPRITE_URL } from '../../constants';\n\nexport const DEFAULT_WAAS_BASE_API_URL = 'https://app.dynamicauth.com';\nexport const DEFAULT_WAAS_BASE_MPC_RELAY_API_URL =\n  'https://relay.dynamicauth.com';\n\nexport const DYNAMIC_WAAS_METADATA = {\n  displayName: 'Dynamic WaaS',\n  icon: `${DYNAMIC_ICONIC_SPRITE_URL}#dynamicwaas`,\n  normalizedWalletName: 'dynamicwaas',\n};\n","import { BaseError } from './base';\n\nexport class InvalidParamError extends BaseError {\n  constructor(message: string) {\n    super({\n      cause: null,\n      code: 'invalid_param_error',\n      docsUrl: null,\n      name: 'InvalidParamError',\n      shortMessage: message,\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;ACIA,MAAa,WAAW,WAAuC;AAE7D,QAAO,OAAO;;;;;ACchB,MAAM,cAAc,EAAE,SAAS,YAAiC;AAC9D,KAAI,iBAAiB,UACnB,QAAO,MAAM;AAGf,KAAI,OAAO,QACT,QAAO,MAAM;AAGf,QAAO;;;;;AAOT,MAAM,iBAAiB,EACrB,cACA,SACA,SACA,mBACyB;AACzB,QAAO;EACL;EACA;EACA;EACA,GAAI,eAAe,CAAC,GAAG,cAAc,GAAG,GAAG,EAAE;EAC7C,GAAI,UAAU,CAAC,SAAS,UAAU,GAAG,EAAE;EACvC,GAAI,UAAU,CAAC,YAAY,UAAU,GAAG,EAAE;EAC1C,YAAY;EACZ,+BAAc,IAAI,MAAM,EAAC,aAAa;EACvC,CAAC,KAAK,KAAK;;;;;AAMd,IAAsB,YAAtB,MAAsB,kBAAkB,MAAM;;CAE5C;CACA;CACA,AAAiB;CACjB,AAAS,OAAO;CAChB,AAAS;CAET,YAAY,MAA2B;EACrC,MAAM,UAAU,WAAW,KAAK;EAChC,MAAM,mBAAmB,cAAc;GAAE,GAAG;GAAM;GAAS,CAAC;AAC5D,QACE,KAAK,gBAAgB,kBACrB,KAAK,QAAQ,EAAE,OAAO,KAAK,OAAO,GAAG,OACtC;AAED,OAAK,mBAAmB;AACxB,OAAK,UAAU;AACf,OAAK,OAAO,KAAK,QAAQ,KAAK;AAC9B,OAAK,QAAQ,KAAK,SAAS,KAAK;AAChC,OAAK,OAAO,KAAK;;;;;CAMnB,OAA0B;EACxB,MAAM,QAAQ,KAAK;AAEnB,MAAI,iBAAiB,UACnB,QAAO,MAAM,MAAM;AAGrB,SAAO;;CAGT,AAAS,WAAW;AAClB,SAAO,KAAK;;;;;;AC5FhB,IAAa,sBAAb,cAAyC,UAAU;CACjD,cAAc;AACZ,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cACE;GACH,CAAC;;;;;;ACNN,IAAIA,gBAAsC;AAC1C,IAAI,0BAA0B;;;;;;;;AAS9B,MAAa,yBAAwC;AACnD,KAAI,CAAC,cACH,OAAM,IAAI,qBAAqB;AAGjC,KAAI,0BAA0B,EAE5B,CADa,QAAQ,cAAc,CAC9B,OAAO,MACV,gSAGD;AAGH,QAAO;;;AAKT,MAAa,oBAAoB,WAA0B;AACzD,iBAAgB;AAChB;;;;;ACpCF,MAAa,6BAA6B,MAAQ,KAAK;AAEvD,MAAa,kBAAkB;;;;ACA/B,MAAa,6BAA6B;AAE1C,MAAa,4BAA4B;AAEzC,MAAa,6BAA6B;AAE1C,MAAa,+BAA+B;AAE5C,MAAa,mBAAmB;AAEhC,MAAa,4BAA4B;AAEzC,MAAa,0BACX,aAAa;AAEf,MAAa,gCAAgC;AAE7C,MAAa,kBAAkB;;;;ACnB/B,MAAM,gBACJ;;AAQF,MAAa,gBAAgB,EAAE,QAAQ,eAAe,aAAiC;CACrF,MAAM,QAAQ,IAAI,WAAW,OAAO;AACpC,QAAO,gBAAgB,MAAM;CAE7B,IAAI,SAAS;AACb,MAAK,IAAI,IAAI,GAAG,IAAI,QAAQ,IAC1B,WAAU,MAAM,MAAM,KAAK,MAAM;AAEnC,QAAO;;;;;ACfT,IAAa,0BAAb,cAA6C,UAAU;CACrD,YAAY,SAAiB;AAC3B,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;;;;;;;;;;;;;;;;;;;;;ACSN,SAAgB,cACd,OACA,SACgD;AAChD,KAAI,UAAU,QAAQ,UAAU,OAC9B,OAAM,IAAI,wBAAwB,QAAQ;;;;;;;;;ACf9C,MAAa,mBAAmB,WAAmC;AACjE,eAAc,OAAO,iBAAiB,mCAAmC;CAEzE,MAAM,mBAAmB,OAAO,gBAAgB;AAEhD,KAAI,CAAC,iBAAkB,QAAO;CAG9B,MAAM,yBAAyB,iBAAiB,MAAM,WAAW,EAAE,EAAE,SACnEC,2CAAgB,OACjB;CAGD,MAAM,sBAAsB,QAC1B,iBAAiB,cAAc,WAChC;AAMD,QAAO,yBAAyB;;;;;;;;;;;;;;;;ACnBlC,MAAa,oBAAoB,UAAiC;AAChE,KAAI;EACF,MAAM,UAAU,MAAM,MAAM,IAAI,CAAC;AAGjC,SAFgB,KAAK,MAAM,KAAK,QAAQ,CAAC,CAE1B,OAAO;SAChB;AACN,SAAO;;;;;;;;;;;;;;;ACTX,MAAa,qBAA6B;AACxC,KAAI;AAEF,SAAO,UAAU;SACX;AACN,SAAO;;;;;;ACdX,MAAa,qBAAqB;CAChC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD;AAED,MAAa,iBAAiB;AAE9B,MAAa,oBAAoB;AAEjC,MAAa,mBAAmB;;;;;;AAOhC,MAAa,eAAe;;;;;;AAO5B,MAAa,iBAAiB;;;;ACW9B,MAAM,eAAe,EACnB,KACA,gBACA,WACA,YAC+B;AAC/B,KAAI,eAAe,SAAS,IAAI,aAAa,CAAC,CAC5C,QAAO;AAGT,KAAI,UACF,QAAO;AAGT,KAAI,MAAM,SAAS,kBACjB,QAAO,MAAM,MAAM,GAAG,kBAAkB,GAAG;AAG7C,QAAO;;AAIT,MAAM,cAAc,EAAE,SAAS,YAAyC;AACtE,KAAI,QAAQ,QAAQ,IAAI,MAAM,CAC5B,QAAO,CAAC,eAAe;AAGzB,SAAQ,QAAQ,IAAI,MAAM;CAE1B,MAAM,SAAS,MAAM,KAAK,MAAM,UAC9B,WAAW;EAAE;EAAS,KAAK,OAAO,MAAM;EAAE,OAAO;EAAM,CAAC,CACzD;AAED,SAAQ,QAAQ,OAAO,MAAM;AAE7B,QAAO;;AAIT,MAAM,eAAe,EACnB,SACA,YACgD;AAChD,KAAI,QAAQ,QAAQ,IAAI,MAAM,CAC5B,QAAO,GAAG,iBAAiB,MAAM;AAGnC,SAAQ,QAAQ,IAAI,MAAM;CAI1B,MAAM,SAAS,OAAO,OAAO,KAAK;AAElC,MAAK,MAAM,OAAO,OAAO,KAAK,MAAM,CAClC,QAAO,OAAO,WAAW;EAAE;EAAS;EAAK,OAAO,MAAM;EAAM,CAAC;AAG/D,SAAQ,QAAQ,OAAO,MAAM;AAE7B,QAAO;;AAIT,MAAM,cAAc,EAAE,SAAS,KAAK,YAAuC;AACzE,KAAI,UAAU,QAAQ,UAAU,OAC9B,QAAO;AAGT,KAAI,iBAAiB,WACnB,QAAO,IAAI,aAAa,GAAG,MAAM,WAAW;AAG9C,KAAI,QAAQ,eAAe,SAAS,IAAI,aAAa,CAAC,CACpD,QAAO;AAGT,KAAI,OAAO,UAAU,SACnB,QAAO,YAAY;EACjB;EACA,gBAAgB,QAAQ;EACxB,WAAW,QAAQ;EACnB;EACD,CAAC;AAGJ,KAAI,MAAM,QAAQ,MAAM,CACtB,QAAO,WAAW;EAAE;EAAS;EAAO,CAAC;AAGvC,KAAI,iBAAiB,KAAK;AACxB,MAAI,QAAQ,QAAQ,IAAI,MAAM,CAC5B,QAAO,CAAC,eAAe;AAGzB,UAAQ,QAAQ,IAAI,MAAM;EAC1B,MAAM,YAAY,WAAW;GAAE;GAAS,OAAO,CAAC,GAAG,MAAM;GAAE,CAAC;AAC5D,UAAQ,QAAQ,OAAO,MAAM;AAE7B,SAAO;;AAGT,KAAI,iBAAiB,KAAK;AACxB,MAAI,QAAQ,QAAQ,IAAI,MAAM,CAC5B,QAAO,GAAG,iBAAiB,MAAM;AAGnC,UAAQ,QAAQ,IAAI,MAAM;EAG1B,MAAM,WAAW,OAAO,OAAO,KAAK;AAEpC,OAAK,MAAM,CAAC,GAAG,MAAM,MAAM,SAAS,CAClC,UAAS,OAAO,EAAE,IAAI;EAGxB,MAAM,YAAY,YAAY;GAAE;GAAS,OAAO;GAAU,CAAC;AAC3D,UAAQ,QAAQ,OAAO,MAAM;AAE7B,SAAO;;AAOT,KAAI,iBAAiB,QACnB,QAAO;AAGT,KAAI,iBAAiB,QACnB,QAAO;AAGT,KAAI,iBAAiB,KACnB,QAAO,MAAM,aAAa;AAG5B,KAAI,iBAAiB,MACnB,QAAO,WAAW,MAAM,QAAQ;AAGlC,KAAI,OAAO,UAAU,SACnB,QAAO,YAAY;EAAE;EAAgB;EAAkC,CAAC;AAG1E,QAAO;;;AAKT,MAAa,mBAAmB,EAC9B,WACA,WACA,YACoD;AAOpD,QAAO,YAAY;EAAE,SANS;GAC5B,gBAAgB,UAAU,KAAK,UAAU,MAAM,aAAa,CAAC;GAC7D;GACA,yBAAS,IAAI,SAAiB;GAC/B;EAE6B;EAAO,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AClLxC,MAAa,iBAAiB,SAA6C;AACzE,KAAI,KAAK,WAAW,EAClB,QAAO,EAAE;AAGX,KACE,KAAK,WAAW,KAChB,OAAO,KAAK,OAAO,YACnB,KAAK,OAAO,QACZ,CAAC,MAAM,QAAQ,KAAK,GAAG,CAGvB,QAAO,KAAK;CAId,MAAMC,SAAkC,EAAE;AAE1C,MAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,IAC/B,QAAO,MAAM,OAAO,KAAK;AAG3B,QAAO;;;;;;;;;;;;ACjCT,MAAa,sBAAsB,EACjC,WACA,WACA,YAEA,gBAAgB;CACd;CACA;CACA,OAAO,EAAE,QAAQ,OAAO;CACzB,CAAC,CAAC;;;;ACXL,MAAM,kBAAkB,UAAoC;AAC1D,KAAI,iBAAiB,MACnB,QAAO;EAAE,SAAS,MAAM;EAAS,MAAM,MAAM;EAAM,OAAO,MAAM;EAAO;AAEzE,QAAO;EAAE,SAAS,OAAO,MAAM;EAAE,MAAM;EAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2EzD,MAAa,sBAAiE,EAC5E,IACA,cACA,oBACA,gBACoC;CACpC,MAAM,WAAW,GAAG,SAAoB;EACtC,MAAM,OAAOC,WAAS;AAEtB,MAAI,CAAC,KACH,QAAO,GAAG,GAAG,KAAK;AAGpB,MAAI,CAAC,KAAK,gBAAgB,OAAO,QAC/B,QAAO,GAAG,GAAG,KAAK;EAGpB,MAAM,kBAAkB,KAAK;EAC7B,MAAM,QAAQ,KAAK,MAAM,KAAK;EAE9B,MAAMC,YACJ;GACE,eAAe,KAAK;GACpB;GACA,YAAY,gBAAgB;IAC1B,WAAW,gBAAgB,OAAO;IAClC;IACA,OAAO,cAAc,KAAK;IAC3B,CAAC;GACF,cAAc,KAAK;GACnB,YAAY,KAAK;GAGjB,QAAQ;GACR,gBAAgB,MAAM,QAAQ,iBAAiB,MAAM,MAAM,GAAG;GAC9D,WAAW,cAAc;GACzB,QAAQ,MAAM,MAAM,MAAM;GAC3B;AAEH,kBAAgB,YAAY;GAC1B,GAAG;GACH,OAAO;GACP,4BAAW,IAAI,MAAM,EAAC,aAAa;GACpC,CAAC;AAEF,MAAI;GACF,MAAM,SAAS,GAAG,GAAG,KAAK;AAE1B,OAAI,kBAAkB,QACpB,QAAO,OACJ,MAAM,UAAU;AACf,oBAAgB,YAAY;KAC1B,GAAG;KACH,OAAO;KACP,eAAe,mBAAmB;MAChC,WAAW,gBAAgB,OAAO;MAClC;MACA;MACD,CAAC;KACF,4BAAW,IAAI,MAAM,EAAC,aAAa;KACpC,CAAC;AAEF,WAAO;KACP,CACD,OAAO,UAAU;AAChB,oBAAgB,YAAY;KAC1B,GAAG;KACH,OAAO;KACP,eAAe,eAAe,MAAM;KACpC,4BAAW,IAAI,MAAM,EAAC,aAAa;KACpC,CAAC;AACF,UAAM;KACN;AAGN,mBAAgB,YAAY;IAC1B,GAAG;IACH,OAAO;IACP,eAAe,mBAAmB;KAChC,WAAW,gBAAgB,OAAO;KAClC;KACA,OAAO;KACR,CAAC;IACF,4BAAW,IAAI,MAAM,EAAC,aAAa;IACpC,CAAC;AAEF,UAAO;WACA,OAAO;AACd,mBAAgB,YAAY;IAC1B,GAAG;IACH,OAAO;IACP,eAAe,eAAe,MAAM;IACpC,4BAAW,IAAI,MAAM,EAAC,aAAa;IACpC,CAAC;AAEF,SAAM;;;AAIV,QAAO;;;;;;ACvLT,MAAE,kBAAsB,WAAwB;CAG9C,MAAE,4BAAgB,MAAA,KAAA,CAAA;gBAGlB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AC6BF,MAAG,0BACD,EAAA,UAAY,MAAC,yCAES;CACtB,MAAM,OAAA,QAAA,OAAsB;CAE5B,MAAG,sBAAO,IAAI,MAAQ;CACtB,MAAM,uBAAc,KAAA,MAAoB,KAAC,CAAA,wBAAM,EAAA;kDAI5C,YAAO,CAAA,QAAQ,aAAY,QAAS,YAAS,IAChD;AAGA,KAAI,YAAA,WAAA,qBAAA,OACJ,MAAA,MAAA,IAAA,qCAEA,CAAA;CAGA,MAAE,QAAO,YAAS,MAAA,YAAA,QAAA,OAAA,SAAA,MAAA,CAAA;YAGhB;AAIF,KAAI,WAAA,MAAA,WAAsB;EACxB,MAAE,gBAAA,YAAA,QAAA,MAAA,MAAA,MAAA;AACJ,OAAA,MAAA,IAAA,uCAEA,CAAA;;;;;;;;;;;;;;;;;;;ACzEF,IAAa,WAAb,MAAa,iBAAiB,UAAU;CACtC;CAEA,YAAY,SAAiB,MAAc,QAAgB;AACzD,QAAM;GACJ,OAAO;GACP;GACA,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;AAEF,OAAK,SAAS;;CAGhB,aAAa,aAAa,UAAoB;AAC5C,MAAI;GACF,MAAM,YAAY,MAAM,SAAS,OAAO,CAAC,MAAM;AAE/C,OACE,aACA,WAAW,aACX,OAAO,UAAU,UAAU,UAC3B;IACA,MAAM,YACJ,UAAU,aAAa,OAAO,UAAU,SAAS,WAC7C,UAAU,OACV;AAEN,WAAO,IAAI,SAAS,UAAU,OAAO,WAAW,SAAS,OAAO;;AAGlE,UAAO;UACD;AACN,UAAO;;;;;;;AClCb,IAAa,2BAAb,cAA8C,UAAU;CACtD,YAAY,EAAE,SAA6C;AACzD,QAAM;GACJ;GACA,MAAM;GACN,SACE;GACF,MAAM;GACN,cAAc;GACf,CAAC;;;;;;ACTN,IAAa,sBAAb,cAAyC,UAAU;CACjD,YAAY,EAAE,SAA6C;AACzD,QAAM;GACJ;GACA,MAAM;GACN,SAAS;GACT,MAAM;GACN,cACE;GACH,CAAC;;;;;;ACTN,IAAa,qBAAb,cAAwC,UAAU;CAChD,YAAY,EAAE,SAA6C;AACzD,QAAM;GACJ;GACA,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;;;;;;ACRN,IAAa,sBAAb,cAAyC,UAAU;CACjD,YAAY,EAAE,SAA6C;AACzD,QAAM;GACJ;GACA,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;;;;;;ACRN,IAAa,sCAAb,cAAyD,UAAU;CACjE,YAAY,EAAE,SAA6C;AACzD,QAAM;GACJ;GACA,MAAM;GACN,SACE;GACF,MAAM;GACN,cACE;GACH,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;ACgBN,MAAaC,qBAAkC,UAAU;AACvD,KAAI,iBAAiB,UAAU;AAC7B,MAAI,MAAM,SAAS,mBACjB,QAAO,IAAI,mBAAmB,EAAE,OAAO,OAAO,CAAC;AAGjD,MAAI,MAAM,SAAS,mBACjB,QAAO,IAAI,oBAAoB,EAAE,OAAO,OAAO,CAAC;AAGlD,MAAI,MAAM,SAAS,wBACjB,QAAO,IAAI,yBAAyB,EAAE,OAAO,OAAO,CAAC;AAGvD,MAAI,MAAM,SAAS,oCACjB,QAAO,IAAI,oCAAoC,EAAE,OAAO,OAAO,CAAC;AAGlE,MACE,MAAM,SAAS,4BACf,MAAM,SAAS,wBAEf,QAAO,IAAI,oBAAoB,EAAE,OAAO,OAAO,CAAC;;AAIpD,QAAO;;;;;;;;;;;;;ACpCT,MAAa,qCAAqC,EAChD,eAAe,EAAE,QAC0C,EAC3D,MAAM,OAAO,YAA6B;AACxC,KAAI,QAAQ,SAAS,UAAU,KAAK;EAClC,MAAM,WAAW,MAAM,SAAS,aAAa,QAAQ,SAAS;AAE9D,MAAI,UAAU;GACZ,IAAIC,eAAsB;AAE1B,QAAK,MAAM,UAAU,cAAc;IACjC,MAAM,WAAW,OAAO,SAAS;AAEjC,QAAI,UAAU;AACZ,oBAAe;AACf;;;AAIJ,SAAM;;;AAIV,QAAO,QAAQ;GAElB;;;;;;;;;;;;AC5BD,MAAE,WAAa,OACb;CAEA,MAAI,OAAK,QAAY,OAAA;CACrB,MAAE,OAAO,KAAS,MAAC,KAAU,CAAC;AAE9B,KAAE,KAAK,SAAW,GAAC;;AAGjB,OAAE,MAAK,IAAA,EAAA,kBAA2B,WAAA,CAAA;4BAGlC,CAAO,oBAAK,OAAA;AAGd,SAAM;;AAGP,OAAA,oBAAA,OAAA;;;;;;;;;;;;;;;;;;;ACzBD,MAAE,kBAAsB,kBAEpB;CACF,MAAM,EAAA,cAAW,aAAU,QAAc,OAAO;;;;;kBAOhD,QAAM;;MAKW,MAAY,SAAQ,aAAA,QAAA,CAGrC,OAAO,SAAA,YAAA,QAAA;AAGP,QAAC;EACF,oBAAA,SAAA,aAAA,QAAA;;;;;;;;;;;;;;;;;;;;ACpBD,MAAE,0CAAkC,kBAEF;;AAGhC,eAAc,iBAAM,6BAAwC;;;;;;6BAQ5D,QAAM,EAAA;;CAKN,MAAM,QAAA,MAAY,mBAAM,OAAY;CAEpC,MAAM,cAAC,MAAA,aAAA,KAAA,MAAA;CACP,MAAK,YAAQ,MAAO,aAAa,cAAA;AAEjC,QAAK;EACJ,0BAAA;EACF,8BAAA;;;;;;;;;;;;;;;;;;;;ACxBD,MAAE,0CACA,WACM;AACN,QAAO,EACL,KAAI,OAAA,YAAA;;;;AAIF,2EACoC,QAAA,IAAA,IAClC,CAAC,gBAAC,OAAA,EACF;uFAEA,OACC;AAED,UAAI;IACF,MAAM;KACJ,GAAG,QAAE;KACL,SAAC;MACF,GAAA,QAAA,KAAA;MACG,GAAC;MACN;KACH;;IAEA;;;;;;;;;;;;;;;;;;;AClCN,IAAa,oBAAb,cAAuC,UAAU;CAC/C,YAAY,EAAE,SAA6C;AACzD,QAAM;GACJ;GACA,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;;;;;;;ACLN,MAAa,sCAAkD,EAC7D,MAAM,OAAO,YAA6B;AACxC,KAAI,QAAQ,SAAS,WAAW,KAAK;EACnC,IAAIC,QAAsB;AAE1B,MAAI;GACF,MAAM,YAAY,MAAM,QAAQ,SAAS,OAAO,CAAC,MAAM;AAEvD,OACE,aACA,WAAW,aACX,OAAO,UAAU,UAAU,SAG3B,SAAQ,IAAI,MAAM,UAAU,MAAM;UAE9B;AAIR,QAAM,IAAI,kBAAkB,EAAE,OAAO,CAAC;;AAGxC,QAAO,QAAQ;GAElB;;;;;;;;;;ACqBD,MAAK,mBACH,UAA4B,EAAA,EAC5B;CAEA,MAAM,OAAA,QAAU,OAAY;CAC5B,MAAE,YAAe,KAAA,MAAU,KAAA;CAE3B,MAAK,WAAgB;EACnB,UAAG,KAAA;EACH,SAAG;GACD,gBAAC;IACA,6BAA6B,OAAG;IAChC,4BAAsB,aAAA,EAAA,QAAA,IAAA,CAAA;IACtB,gCAAiB,KAAA;IACnB,6BAAA,GAAA,gBAAA,GAAA;GACF,GAAA,KAAA,eAAA;;GAEE;EACF;kBAGC,UAAS,QAAA,gBAAmB,UAAe,OAAO;uDAIlD,UAAS,cAAC;mDAIV,UAAS,QAAC,oBAA0B,UAAA;AAGtC,KAAI,QAAA,0BAAA;EACF,MAAC,gBAAA,iCACC,EAAE,OAAA,QAAe,0BAAA,EACjB,OACF;AACF,MAAA;;CAKA,MAAG,mBAAsB,yBAAe,OAAM,EAAG;CAIjD,MAAI,kCACF,SAAS,QAAQ,+BAA6B;0DAGhD,UAAW,QAAM,6BAAA;AAGjB,QAAI,IAAA,kCACF,IAAE,yCAAY;EACZ,GAAE;EACF,UAAE,KAAA;EACF,YAAI;GACF,iDAAE,OAAA;GACF,kCAA8B,EAC/B,cAAA,CAAA,GAAA,QAAA,gBAAA,EAAA,EAAA,kBAAA,EACF,CAAA;GACF,8BAAA;GACF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AClGD,MAAa,sBAAsB,OACjC,WACkB;CAClB,MAAM,OAAO,QAAQ,OAAO;CAE5B,MAAM,EAAE,kBAAkB;CAI1B,MAAM,EAAE,WAAW,MAFDC,0BAAgB,EAAE,EAAE,OAAO,CAEV,UAAU;EAC3C,OAAO;EACP;EACD,CAAC;AAEF,MAAK,MAAM,IAAI;EACb,kBAAkB;EAClB,4BAA4B,KAAK,KAAK,GAAG;EAC1C,CAAC;;;;;ACxBJ,MAAaC,kBAA4C;CACvD,MAAM;EACJ,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,MAAM;EACJ,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,OAAO;EACL,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,KAAK;EACH,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,QAAQ;EACN,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,SAAS;EACP,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,KAAK;EACH,cAAc;EAEd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,MAAM;EACJ,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,UAAU;EACR,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,KAAK;EACH,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC7B,uBAAuB;EACxB;CACD,OAAO;EACL,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,OAAO;EACL,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,SAAS;EACP,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,KAAK;EACH,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,OAAO;EACL,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,KAAK;EACH,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACD,MAAM;EACJ,cAAc;EACd,gBAAgB;EAChB,6BAA6B;EAC9B;CACF;;;;;ACzFD,MAAE,mEAEM;CAGN,MAAI,QAFO,OAAA,KAAA,gBAAA,CAEP,MACH,qEAED;AAGD,eAAA,OAAA,kBAAA,0BAAA;;;;;;;;;;;;;;;;;;ACjBD,MAAa,uBAAuB,aAAa;AAEjD,MAAa,4BACX;;;;ACHF,MAAa,4BAA4B;AACzC,MAAa,sCACX;AAEF,MAAa,wBAAwB;CACnC,aAAa;CACb,MAAM,GAAG,0BAA0B;CACnC,sBAAsB;CACvB;;;;ACRD,IAAa,oBAAb,cAAuC,UAAU;CAC/C,YAAY,SAAiB;AAC3B,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC"}

package/dist/{InvalidParamError-uk3RG_2n.esm.js → InvalidParamError-PbPtszcu.esm.js}

@@ -2,7 +2,7 @@ import { AuthStorageEnum, Configuration, SDKApi, isDeviceNonceSignatureRequiredF
 
 //#region package.json
 var name = "@dynamic-labs-sdk/client";
-var version = "0.22.1";
+var version = "0.23.1";
 var dependencies = {
 	"@dynamic-labs-sdk/assert-package-version": "workspace:*",
 	"@dynamic-labs-wallet/browser-wallet-client": "0.0.286",
@@ -1170,4 +1170,4 @@ var InvalidParamError = class extends BaseError {
 
 //#endregion
 export { ValueMustBeDefinedError as A, name as B, __getSessionKeys_wrapped as C, extractSessionId as D, getUserAgent as E, getDefaultClient as F, setDefaultClient as I, ClientNotFoundError as L, CLIENT_SDK_NAME as M, DYNAMIC_SDK_API_VERSION as N, isCookieEnabled as O, NONCE_POOL_SIZE as P, BaseError as R, __getElevatedAccessToken_wrapped as S, DEFAULT_PII_FIELDS as T, version as V, MfaRateLimitedError as _, DYNAMIC_ICONIC_SPRITE_URL as a, InvalidExternalAuthError as b, CHAINS_INFO_MAP as c, UnauthorizedError as d, __createDeviceSignatureHeadersMiddleware_wrapped as f, SandboxMaximumThresholdReachedError as g, __getNonce_wrapped as h, DYNAMIC_WAAS_METADATA as i, randomString as j, assertDefined as k, fetchAndStoreNonces as l, __getDeviceSigner_wrapped as m, DEFAULT_WAAS_BASE_API_URL as n, SDK_API_CORE_VERSION as o, __getHeadersForNonceSignedByDeviceSigners_wrapped as p, DEFAULT_WAAS_BASE_MPC_RELAY_API_URL as r, __getChainFromVerifiedCredentialChain_wrapped as s, InvalidParamError as t, __createApiClient_wrapped as u, MfaInvalidOtpError as v, instrumentFunction as w, APIError as x, LinkCredentialError as y, getCore as z };
-//# sourceMappingURL=InvalidParamError-uk3RG_2n.esm.js.map
+//# sourceMappingURL=InvalidParamError-PbPtszcu.esm.js.map