@dynamic-labs-sdk/client 0.27.0 → 0.27.1

package/dist/index.native.esm.js

@@ -1,12 +1,12 @@
-import { A as extractSessionId, B as name, C as isCookieEnabled, D as instrumentFunction, E as __getElevatedAccessToken_wrapped, F as getDefaultClient, I as setDefaultClient, O as DEFAULT_PII_FIELDS, P as NONCE_POOL_SIZE, R as BaseError, T as ValueMustBeDefinedError, V as version, _ as MfaRateLimitedError, a as DYNAMIC_ICONIC_SPRITE_URL, b as InvalidExternalAuthError, c as CHAINS_INFO_MAP, d as UnauthorizedError, g as SandboxMaximumThresholdReachedError, h as getNonce, j as randomString, k as getUserAgent, l as fetchAndStoreNonces, o as SDK_API_CORE_VERSION, s as getChainFromVerifiedCredentialChain, t as InvalidParamError, u as createApiClient, v as MfaInvalidOtpError, w as assertDefined, x as APIError, y as LinkCredentialError, z as getCore } from "./InvalidParamError-D_EzyxXy.native.esm.js";
-import { A as GENERATE_SESSION_KEYS_TRACKER_KEY, B as createStorage, D as CannotTrackError, F as getBuffer, G as subscribeWithSelector, H as createLocalStorageAdapter, I as __logoutWithReason_wrapped, K as isEqualShallow, L as generateSessionKeys, M as REFRESH_USER_STATE_FROM_COOKIE_TRACKER_KEY, N as REFRESH_USER_STATE_FROM_VALID_TOKEN_TRACKER_KEY, O as createDeferredPromise, P as isServerSideRendering, R as fetchProjectSettings, S as createKeychainService, T as createCrossTabBroadcast, U as isSignedIn, W as retryOnFail, _ as MethodNotImplementedError, a as updateWalletProviderKeysForVerifiedCredentials, b as getKeychainIndexedDBName, c as createSignInMessageStatement, d as createVisit, f as consumeCaptchaToken, g as isCaptchaRequired, h as __setCaptchaToken_wrapped, i as getNetworksData, j as INITIALIZE_STORAGE_SYNC_TRACKER_KEY, k as FETCH_PROJECT_SETTINGS_TRACKER_KEY, l as formatSignInMessage, m as createRealtimeChannelSchema, o as verifyMessageSignatureOwnership, p as hasExtension, s as removeUnverifiedWalletAccount, t as getNetworkProviderFromNetworkId, u as setUnverifiedWalletAccounts, v as WalletAlreadyLinkedToAnotherUserError, w as createLogger, x as createRealtimeService, y as NoNetworkProvidersError, z as createStorageKeySchema } from "./getNetworkProviderFromNetworkId-BN3NLh8u.native.esm.js";
-import { A as onceEvent, C as formatWalletAccountId, D as emitEvent, O as offEvent, T as splitWalletProviderKey, a as parseElevatedAccessToken, b as getWalletAccounts, d as isUserMissingMfaAuth, f as checkAndRaiseWalletAccountsChangedEvent, h as getWalletProviderFromWalletAccount, i as upsertElevatedAccessToken, k as onEvent, n as getWalletProviderByKey, o as restoreUserSharesForAllWalletAccounts, p as emitWalletAccountsChangedEvent, r as updateAuthFromVerifyResponse, t as getVerifiedCredentialForWalletAccount, u as getWalletProviders, w as normalizeAddress, y as NoWalletProviderFoundError } from "./getVerifiedCredentialForWalletAccount-DMoMmbjK.native.esm.js";
-import { n as __refreshAuth_wrapped, t as NotWaasWalletAccountError } from "./NotWaasWalletAccountError-BSon-4Ob.native.esm.js";
-import { n as getMfaMethods, r as __consumeMfaToken_wrapped, t as isMfaRequiredForAction } from "./isMfaRequiredForAction-iVSdynw1.native.esm.js";
+import { A as extractSessionId, B as name, C as isCookieEnabled, D as instrumentFunction, E as __getElevatedAccessToken_wrapped, F as getDefaultClient, I as setDefaultClient, O as DEFAULT_PII_FIELDS, P as NONCE_POOL_SIZE, R as BaseError, T as ValueMustBeDefinedError, V as version, _ as MfaRateLimitedError, a as DYNAMIC_ICONIC_SPRITE_URL, b as InvalidExternalAuthError, c as CHAINS_INFO_MAP, d as UnauthorizedError, g as SandboxMaximumThresholdReachedError, h as getNonce, j as randomString, k as getUserAgent, l as fetchAndStoreNonces, o as SDK_API_CORE_VERSION, s as getChainFromVerifiedCredentialChain, t as InvalidParamError, u as createApiClient, v as MfaInvalidOtpError, w as assertDefined, x as APIError, y as LinkCredentialError, z as getCore } from "./InvalidParamError-BB1aAMqv.native.esm.js";
+import { A as INITIALIZE_STORAGE_SYNC_TRACKER_KEY, C as createLogger, D as createDeferredPromise, E as CannotTrackError, F as __logoutWithReason_wrapped, G as isEqualShallow, H as isSignedIn, I as generateSessionKeys, L as fetchProjectSettings, M as REFRESH_USER_STATE_FROM_VALID_TOKEN_TRACKER_KEY, N as isServerSideRendering, O as FETCH_PROJECT_SETTINGS_TRACKER_KEY, P as getBuffer, R as createStorageKeySchema, U as retryOnFail, V as createLocalStorageAdapter, W as subscribeWithSelector, _ as WalletAlreadyLinkedToAnotherUserError, a as updateWalletProviderKeysForVerifiedCredentials, b as createRealtimeService, c as createSignInMessageStatement, d as createVisit, f as hasExtension, g as MethodNotImplementedError, h as isCaptchaRequired, i as getNetworksData, j as REFRESH_USER_STATE_FROM_COOKIE_TRACKER_KEY, k as GENERATE_SESSION_KEYS_TRACKER_KEY, l as formatSignInMessage, m as consumeCaptchaToken, o as verifyMessageSignatureOwnership, p as __setCaptchaToken_wrapped, s as removeUnverifiedWalletAccount, t as getNetworkProviderFromNetworkId, u as setUnverifiedWalletAccounts, v as NoNetworkProvidersError, w as createCrossTabBroadcast, x as createKeychainService, y as getKeychainIndexedDBName, z as createStorage } from "./getNetworkProviderFromNetworkId-jKurji7M.native.esm.js";
+import { A as onceEvent, C as formatWalletAccountId, D as emitEvent, O as offEvent, T as splitWalletProviderKey, a as parseElevatedAccessToken, b as getWalletAccounts, d as isUserMissingMfaAuth, f as checkAndRaiseWalletAccountsChangedEvent, h as getWalletProviderFromWalletAccount, i as upsertElevatedAccessToken, k as onEvent, n as getWalletProviderByKey, o as restoreUserSharesForAllWalletAccounts, p as emitWalletAccountsChangedEvent, r as updateAuthFromVerifyResponse, t as getVerifiedCredentialForWalletAccount, u as getWalletProviders, w as normalizeAddress, y as NoWalletProviderFoundError } from "./getVerifiedCredentialForWalletAccount-Cnw0e0bw.native.esm.js";
+import { n as __refreshAuth_wrapped, t as NotWaasWalletAccountError } from "./NotWaasWalletAccountError-CXXB603M.native.esm.js";
+import { n as getMfaMethods, r as __consumeMfaToken_wrapped, t as isMfaRequiredForAction } from "./isMfaRequiredForAction-C4ep39RW.native.esm.js";
 import { assertPackageVersion } from "@dynamic-labs-sdk/assert-package-version";
-import { AuthModeEnum, ExchangeKeyEnum, JwtVerifiedCredentialFormatEnum, MFAAction, MfaBackupCodeAcknowledgement, TokenScope, WalletProviderEnum } from "@dynamic-labs/sdk-api-core";
+import { AuthModeEnum, ExchangeKeyEnum, JwtVerifiedCredentialFormatEnum, MFAAction, MfaBackupCodeAcknowledgement, ProviderEnum, TokenScope, WaasBackupOptionsEnum, WalletProviderEnum } from "@dynamic-labs/sdk-api-core";
 import * as z from "zod/mini";
-import EventEmitter$1, { EventEmitter } from "eventemitter3";
+import EventEmitter, { EventEmitter as EventEmitter$1 } from "eventemitter3";
 import { Passkey } from "react-native-passkey";
 
 //#region src/modules/state/raiseStateEvents/events.ts
@@ -535,7 +535,7 @@ const createAsyncTrack = () => {
 	* This ensures no process is missed (as it would throw when tracked on a different node tick).
 	*/
 	let isTrackEnabled = true;
-	const eventEmitter = new EventEmitter();
+	const eventEmitter = new EventEmitter$1();
 	const allSettledPromise = createDeferredPromise();
 	const tracker = /* @__PURE__ */ new Map();
 	/**
@@ -582,7 +582,7 @@ const createAsyncTrack = () => {
 //#endregion
 //#region src/services/eventEmitter/createEventEmitter.ts
 /** @not-instrumented */
-const createEventEmitter = () => new EventEmitter$1();
+const createEventEmitter = () => new EventEmitter();
 
 //#endregion
 //#region src/errors/UnavailableInServerSideError.ts
@@ -1021,6 +1021,7 @@ const createCore = (config) => {
 	});
 	const fetch = config.coreConfig?.fetch ?? createWebFetch();
 	const openDeeplink = config.coreConfig?.openDeeplink ?? createWebDeeplinkOpener();
+	const openAuthSession = config.coreConfig?.openAuthSession;
 	const navigate = config.coreConfig?.navigate ?? createNavigationHandler();
 	const state = createObservableState(getInitialState);
 	const debouncedMutex = createDebouncedMutex();
@@ -1067,6 +1068,7 @@ const createCore = (config) => {
 		logger,
 		metadata,
 		navigate,
+		openAuthSession,
 		openDeeplink,
 		passkey,
 		realtime,
@@ -1223,6 +1225,34 @@ var InvalidRedirectStorageStateError = class extends BaseError {
 	}
 };
 
+//#endregion
+//#region src/errors/InvalidSocialCallbackOriginError.ts
+var InvalidSocialCallbackOriginError = class extends BaseError {
+	constructor({ actualOrigin, expectedOrigin }) {
+		super({
+			cause: null,
+			code: "invalid_social_callback_origin_error",
+			docsUrl: null,
+			name: "InvalidSocialCallbackOriginError",
+			shortMessage: `OAuth callback URL origin mismatch. Expected ${expectedOrigin}, got ${actualOrigin}. This may indicate a compromised auth session or misconfigured redirect URL.`
+		});
+	}
+};
+
+//#endregion
+//#region src/errors/UserCancelledSocialPopUpError.ts
+var UserCancelledSocialPopUpError = class extends BaseError {
+	constructor() {
+		super({
+			cause: null,
+			code: "user_cancelled_social_popup_error",
+			docsUrl: null,
+			name: "UserCancelledSocialPopUpError",
+			shortMessage: "The user cancelled (or dismissed) the social authentication pop-up."
+		});
+	}
+};
+
 //#endregion
 //#region src/errors/MissingRedirectStorageStateError.ts
 var MissingRedirectStorageStateError = class extends BaseError {
@@ -1879,15 +1909,16 @@ const getUserSocialAccounts = (client = getDefaultClient()) => {
 //#endregion
 //#region src/modules/auth/social/oauth/signInWithSocialRedirect/signInWithSocialRedirect.native.ts
 /**
-* OAuth redirect flow is not implemented on React Native — there is no
-* shared browser to navigate away to and back from. Consumers should use the
-* in-app / native social auth path instead.
+* OAuth redirect flow is not supported on React Native — there is no shared
+* browser to navigate away to and back from. Use `signInWithSocialPopUp`
+* instead: it handles the entire social login flow (open auth session,
+* process callback, verify, update auth state) in a single call.
 *
 * @throws MethodNotImplementedError Always on React Native.
 * @instrumented
 */
 const signInWithSocialRedirect = async ({ provider, redirectUrl }, client = getDefaultClient()) => {
-	throw new MethodNotImplementedError("signInWithSocialRedirect");
+	throw new MethodNotImplementedError("signInWithSocialRedirect (use signInWithSocialPopUp on React Native instead)");
 };
 const __signInWithSocialRedirect_impl = signInWithSocialRedirect;
 const __signInWithSocialRedirect_wrapped = instrumentFunction({
@@ -1902,31 +1933,317 @@ const __signInWithSocialRedirect_wrapped = instrumentFunction({
 	}
 });
 
+//#endregion
+//#region src/modules/auth/social/oauth/redirectStateStorageSchema/redirectStateStorageSchema.ts
+/** The schema to track the state of the OAuth flow. */
+const redirectStateStorageKeySchema = createStorageKeySchema({
+	key: "redirectState",
+	schema: z.object({
+		codeVerifier: z.optional(z.string()),
+		provider: z.enum(ProviderEnum),
+		state: z.string()
+	})
+});
+
+//#endregion
+//#region src/modules/auth/social/oauth/processSocialCallback/processSocialCallback.ts
+/**
+* Platform-agnostic OAuth callback processor used by both the web redirect
+* flow (`completeSocialRedirect`) and the native pop-up flow
+* (`signInWithSocialPopUp`). Intentionally has no `.native.ts` variant — the
+* logic (parse URL, validate state, call oauthSignIn/oauthVerify, update auth)
+* works identically on every platform.
+*
+* Not exported from the public SDK surface; public callers go through
+* `completeSocialRedirect` or `signInWithSocialPopUp` instead.
+*
+* @param params.url - The callback URL containing OAuth response parameters.
+* @param [params.requestedScopes] - Optional scopes to request an elevated access token when verifying (linking) a social account.
+* @param client - The Dynamic client instance.
+* @returns The authenticated user, or null if the verify response had none.
+* @throws MissingSocialUrlParamError If required OAuth parameters are missing.
+* @throws MissingRedirectStorageStateError If no stored redirect state exists.
+* @throws InvalidRedirectStorageStateError If the stored state doesn't match the URL state.
+* @instrumented
+*/
+const processSocialCallback = async ({ url, requestedScopes }, client) => {
+	const core = getCore(client);
+	const apiClient = createApiClient({}, client);
+	await core.initTrack.waitForAll();
+	const dynamicOauthState = url.searchParams.get("dynamicOauthState");
+	const dynamicOauthCode = url.searchParams.get("dynamicOauthCode");
+	if (!dynamicOauthState) throw new MissingSocialUrlParamError("dynamicOauthState");
+	if (!dynamicOauthCode) throw new MissingSocialUrlParamError("dynamicOauthCode");
+	const storedSocialRedirectState = await core.storage.getItem(redirectStateStorageKeySchema);
+	if (!storedSocialRedirectState) throw new MissingRedirectStorageStateError();
+	if (storedSocialRedirectState.state !== dynamicOauthState) throw new InvalidRedirectStorageStateError();
+	const { provider, codeVerifier } = storedSocialRedirectState;
+	await core.storage.removeItem(redirectStateStorageKeySchema);
+	let response;
+	if (client.user) response = await apiClient.oauthVerify({
+		environmentId: core.environmentId,
+		oauthRequest: {
+			code: dynamicOauthCode,
+			codeVerifier,
+			requestedScopes,
+			state: dynamicOauthState
+		},
+		providerType: provider
+	});
+	else response = await apiClient.oauthSignIn({
+		environmentId: core.environmentId,
+		oauthRequest: {
+			captchaToken: consumeCaptchaToken(client),
+			code: dynamicOauthCode,
+			codeVerifier,
+			state: dynamicOauthState
+		},
+		providerType: provider
+	});
+	updateAuthFromVerifyResponse({ response }, client);
+	return response.user;
+};
+const __processSocialCallback_impl = processSocialCallback;
+const __processSocialCallback_wrapped = instrumentFunction({
+	fn: __processSocialCallback_impl,
+	functionName: "processSocialCallback",
+	getCore: () => {
+		try {
+			return getCore(getDefaultClient());
+		} catch {
+			return;
+		}
+	}
+});
+
+//#endregion
+//#region src/utils/digestSHA256/digestSHA256.ts
+/** @not-instrumented */
+const digestSHA256 = (str) => {
+	const data = new TextEncoder().encode(str);
+	return crypto.subtle.digest("SHA-256", data);
+};
+
+//#endregion
+//#region src/utils/encodeBase64Url/encodeBase64Url.ts
+/**
+* Encodes a string to base64url.
+*
+* @param str - The string to encode as an ArrayBuffer.
+* @returns The base64url encoded string.
+* @not-instrumented
+*/
+const encodeBase64Url = (str) => {
+	const numberArray = [];
+	new Uint8Array(str).forEach((item) => numberArray.push(item));
+	return btoa(String.fromCharCode.apply(null, numberArray)).replace(/=/g, "").replace(/\+/g, "-").replace(/\//g, "_");
+};
+
+//#endregion
+//#region src/modules/auth/social/oauth/signInWithSocialRedirect/buildOAuthUrl/addOAuthUrlParams/addOAuthUrlParams.ts
+const APPLE_RESPONSE_MODE = "form_post";
+const APPLE_RESPONSE_TYPE = "code id_token";
+/** Helper function to add OAuth URL parameters to a given base URL.  * @not-instrumented
+*/
+const addOAuthUrlParams = ({ baseUrl, isGoogleDriveBackupEnabled, provider }) => {
+	assertDefined(provider.clientId, "Client ID not found");
+	assertDefined(provider.provider, "Provider type not found");
+	assertDefined(provider.redirectUrl, "Redirect URL not found");
+	const providerType = provider.provider;
+	baseUrl.searchParams.set("client_id", provider.clientId);
+	baseUrl.searchParams.set("response_type", "code");
+	baseUrl.searchParams.set("redirect_uri", provider.redirectUrl);
+	if (providerType === ProviderEnum.Tiktok) {
+		baseUrl.searchParams.delete("client_id");
+		baseUrl.searchParams.set("client_key", provider.clientId);
+	}
+	if (providerType === ProviderEnum.Google) {
+		baseUrl.searchParams.set("access_type", "offline");
+		if (isGoogleDriveBackupEnabled) baseUrl.searchParams.set("prompt", "consent");
+	}
+	if (providerType === ProviderEnum.Apple) {
+		baseUrl.searchParams.set("response_mode", APPLE_RESPONSE_MODE);
+		baseUrl.searchParams.set("response_type", APPLE_RESPONSE_TYPE);
+	}
+	if (provider.scopes) baseUrl.searchParams.set("scope", provider.scopes);
+	return baseUrl;
+};
+
+//#endregion
+//#region src/modules/auth/social/oauth/signInWithSocialRedirect/buildOAuthUrl/getOAuthBaseUrl/getOAuthBaseUrl.ts
+/** Helper function to build the OAuth base URL for a given provider.  * @not-instrumented
+*/
+const getOAuthBaseUrl = (provider) => {
+	assertDefined(provider.provider, "Provider type not found");
+	const providerType = provider.provider;
+	if (providerType === ProviderEnum.Telegram) {
+		assertDefined(provider.authorizationUrl, "Telegram authorization URL not found");
+		return new URL(provider.authorizationUrl);
+	}
+	assertDefined(provider.baseAuthUrl, "Base auth URL not found");
+	if (providerType === ProviderEnum.Shopify) {
+		assertDefined(provider.shopifyStore, "Shopify store value not found in provider");
+		const loginBaseUrl = provider.baseAuthUrl.replace("{{shopifyStore}}", provider.shopifyStore);
+		return new URL(loginBaseUrl);
+	}
+	return new URL(provider.baseAuthUrl);
+};
+
+//#endregion
+//#region src/modules/auth/social/oauth/signInWithSocialRedirect/buildOAuthUrl/buildOAuthUrl.ts
+const providersRequiringPkce = ["twitter", "github"];
+/** Helper function to build the OAuth URL for a given provider.  * @not-instrumented
+*/
+const buildOAuthUrl = async (core, provider) => {
+	const { projectSettings } = core.state.get();
+	assertDefined(projectSettings, "Project settings not found");
+	assertDefined(projectSettings.providers, "Project providers not found");
+	const socialProvider = projectSettings.providers.find((p) => p.provider === provider);
+	assertDefined(socialProvider, `Social provider ${provider} not supported`);
+	const isGoogleDriveBackupEnabled = projectSettings.sdk.waas?.backupOptions?.includes(WaasBackupOptionsEnum.GoogleDrive);
+	const socialProviderUrl = addOAuthUrlParams({
+		baseUrl: getOAuthBaseUrl(socialProvider),
+		isGoogleDriveBackupEnabled,
+		provider: socialProvider
+	});
+	const usingPkce = providersRequiringPkce.includes(provider);
+	const state = randomString({ length: 32 });
+	const codeVerifier = randomString({ length: 43 });
+	socialProviderUrl.searchParams.set("state", state);
+	socialProviderUrl.searchParams.set("response_type", "code");
+	if (usingPkce) {
+		const digest = await digestSHA256(codeVerifier);
+		socialProviderUrl.searchParams.set("code_challenge", encodeBase64Url(digest));
+		socialProviderUrl.searchParams.set("code_challenge_method", "S256");
+	}
+	return {
+		codeVerifier: usingPkce ? codeVerifier : void 0,
+		state,
+		url: socialProviderUrl
+	};
+};
+
+//#endregion
+//#region src/modules/auth/social/oauth/signInWithSocialPopUp/signInWithSocialPopUp.native.ts
+/**
+* Default auth-session opener — uses `react-native-inappbrowser-reborn`
+* (ASWebAuthenticationSession on iOS, Chrome Custom Tabs on Android). Used
+* when the host app has not overridden `coreConfig.openAuthSession`.
+*/
+const openDefaultAuthSession = async ({ authUrl, redirectUrl }) => {
+	const { default: InAppBrowser } = await import("react-native-inappbrowser-reborn");
+	try {
+		InAppBrowser.closeAuth();
+	} catch {}
+	const result = await InAppBrowser.openAuth(authUrl, redirectUrl);
+	if (result.type === "success" && result.url) return {
+		type: "success",
+		url: result.url
+	};
+	return { type: "cancel" };
+};
+/**
+* Signs the user in with a social provider via an in-app authentication
+* session, then completes the flow and returns the authenticated user.
+*
+* Requires `metadata.nativeLink` to be set on the client — it is used as
+* the OAuth redirect URL; the provider redirects back to it after the user
+* authenticates. The auth session defaults to `react-native-inappbrowser-reborn`;
+* override via `coreConfig.openAuthSession` to plug in a different browser.
+*
+* Supports every provider in `SocialProvider` (Apple, Discord, Facebook,
+* Github, Google, Kraken, LinkedIn, Microsoft, Epic Games, Steam, TikTok,
+* Twitch, Twitter).
+*
+* @param params.provider - The social provider to authenticate with.
+* @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
+* @returns The authenticated user, or null if the verify response had none.
+* @throws UserCancelledSocialPopUpError If the user dismisses the pop-up before completing auth.
+* @throws InvalidSocialCallbackOriginError If the callback URL origin does not match `metadata.nativeLink`.
+* @instrumented
+*/
+const signInWithSocialPopUp = async ({ provider }, client = getDefaultClient()) => {
+	const core = getCore(client);
+	const apiClient = createApiClient({}, client);
+	const nativeLink = core.metadata?.nativeLink;
+	assertDefined(nativeLink, "metadata.nativeLink must be set on the Dynamic client to use signInWithSocialPopUp");
+	await core.initTrack.waitForAll();
+	const providerType = provider;
+	const { url, state, codeVerifier } = await buildOAuthUrl(core, providerType);
+	await apiClient.initAuth({
+		environmentId: core.environmentId,
+		oauthInitAuthRequest: {
+			redirectUrl: nativeLink,
+			state
+		},
+		providerType
+	});
+	await core.storage.setItem(redirectStateStorageKeySchema, {
+		codeVerifier,
+		provider: providerType,
+		state
+	});
+	const openSession = core.openAuthSession ?? openDefaultAuthSession;
+	try {
+		const result = await openSession({
+			authUrl: url.toString(),
+			redirectUrl: nativeLink
+		});
+		if (result.type === "cancel") throw new UserCancelledSocialPopUpError();
+		const callbackUrl = new URL(result.url);
+		const expectedUrl = new URL(nativeLink);
+		const callbackOrigin = `${callbackUrl.protocol}//${callbackUrl.host}`;
+		const expectedOrigin = `${expectedUrl.protocol}//${expectedUrl.host}`;
+		if (callbackOrigin !== expectedOrigin) throw new InvalidSocialCallbackOriginError({
+			actualOrigin: callbackOrigin,
+			expectedOrigin
+		});
+		return await __processSocialCallback_wrapped({ url: callbackUrl }, client);
+	} catch (error) {
+		await core.storage.removeItem(redirectStateStorageKeySchema);
+		throw error;
+	}
+};
+const __signInWithSocialPopUp_impl = signInWithSocialPopUp;
+const __signInWithSocialPopUp_wrapped = instrumentFunction({
+	fn: __signInWithSocialPopUp_impl,
+	functionName: "signInWithSocialPopUp",
+	getCore: () => {
+		try {
+			return getCore(getDefaultClient());
+		} catch {
+			return;
+		}
+	}
+});
+
 //#endregion
 //#region src/modules/auth/social/oauth/detectSocialRedirectUrl/detectSocialRedirectUrl.native.ts
 /**
-* OAuth redirect detection is not implemented on React Native — the redirect
-* flow itself is not supported on native, so there is nothing to detect.
+* OAuth redirect detection is not supported on React Native. There is no
+* browser redirect to detect because `signInWithSocialPopUp` processes the
+* pop-up callback inline and returns the authenticated user directly.
 *
 * @throws MethodNotImplementedError Always on React Native.
 * @not-instrumented
 */
 const detectSocialRedirectUrl = async ({ url }, client = getDefaultClient()) => {
-	throw new MethodNotImplementedError("detectSocialRedirectUrl");
+	throw new MethodNotImplementedError("detectSocialRedirectUrl (not needed on React Native — signInWithSocialPopUp processes the callback inline)");
 };
 
 //#endregion
 //#region src/modules/auth/social/oauth/completeSocialRedirect/completeSocialRedirect.native.ts
 /**
-* Completing an OAuth redirect is not implemented on React Native — the
-* redirect flow itself is not supported on native, so there is nothing to
-* complete.
+* Completing an OAuth redirect is not supported on React Native. Use
+* `signInWithSocialPopUp` instead: it opens the in-app auth session,
+* processes the callback, and returns the authenticated user in one call —
+* there is no separate "complete" step on native.
 *
 * @throws MethodNotImplementedError Always on React Native.
 * @instrumented
 */
 const completeSocialRedirect = async ({ url, requestedScopes }, client = getDefaultClient()) => {
-	throw new MethodNotImplementedError("completeSocialRedirect");
+	throw new MethodNotImplementedError("completeSocialRedirect (not needed on React Native — signInWithSocialPopUp processes the callback inline)");
 };
 const __completeSocialRedirect_impl = completeSocialRedirect;
 const __completeSocialRedirect_wrapped = instrumentFunction({
@@ -2248,97 +2565,6 @@ const getCheckouts = async (client) => {
 	return projectSettings.checkouts ?? [];
 };
 
-//#endregion
-//#region src/modules/checkout/utils/createCheckoutTransactionChannelSchema/createCheckoutTransactionChannelSchema.ts
-/**
-* Zod schema for realtime events published to a checkout transaction's channel.
-* Uses z.string() for axis and state fields to remain valid when new states are
-* added to the backend without requiring a SDK update.
-*/
-const checkoutTransactionEventSchema = z.object({
-	axis: z.string(),
-	newState: z.string(),
-	previousState: z.string(),
-	timestamp: z.string(),
-	transactionId: z.string()
-});
-/**
-* Creates a typed realtime channel schema for a given checkout transaction.
-* Channel name follows the backend convention: `transaction:{transactionId}`.
-* @not-instrumented
-*/
-const createCheckoutTransactionChannelSchema = (transactionId) => createRealtimeChannelSchema({
-	channel: `transaction:${transactionId}`,
-	schema: checkoutTransactionEventSchema
-});
-
-//#endregion
-//#region src/modules/checkout/utils/subscribeToCheckoutTransaction/subscribeToCheckoutTransaction.ts
-const TERMINAL_EXECUTION_STATES = new Set([
-	"cancelled",
-	"expired",
-	"failed"
-]);
-const TERMINAL_SETTLEMENT_STATES = new Set(["completed", "failed"]);
-const isTerminalEvent = (data) => {
-	if (data.axis === "execution") return TERMINAL_EXECUTION_STATES.has(data.newState);
-	if (data.axis === "settlement") return TERMINAL_SETTLEMENT_STATES.has(data.newState);
-	return false;
-};
-/**
-* Connects to the realtime service if not already connected and subscribes to
-* all state transition events for the given checkout transaction.
-*
-* Settlement and execution axis events are forwarded as public SDK events.
-* The subscription is torn down automatically when a terminal event is received.
-* @not-instrumented
-*/
-const subscribeToCheckoutTransaction = async ({ transactionId }, client) => {
-	const core = getCore(client);
-	const { realtime } = core;
-	if (realtime.getConnectionState() === "idle") {
-		const sessionToken = await core.storage.getItem(createCheckoutSessionTokenStorageKey(transactionId));
-		const headers = {};
-		if (sessionToken) {
-			headers["x-dynamic-checkout-session-token"] = sessionToken;
-			headers["x-dynamic-checkout-transaction-id"] = transactionId;
-		}
-		await realtime.connect({
-			client,
-			headers
-		});
-	}
-	const channelSchema = createCheckoutTransactionChannelSchema(transactionId);
-	const handler = ({ data }) => {
-		if (data.axis === "execution") emitEvent({
-			args: {
-				newState: data.newState,
-				previousState: data.previousState,
-				timestamp: data.timestamp,
-				transactionId: data.transactionId
-			},
-			event: "checkoutTransactionExecutionStateChanged"
-		}, client);
-		if (data.axis === "settlement") emitEvent({
-			args: {
-				newState: data.newState,
-				previousState: data.previousState,
-				timestamp: data.timestamp,
-				transactionId: data.transactionId
-			},
-			event: "checkoutTransactionSettlementStateChanged"
-		}, client);
-		if (isTerminalEvent(data)) realtime.unsubscribe({
-			callback: handler,
-			channelSchema
-		});
-	};
-	await realtime.subscribe({
-		callback: handler,
-		channelSchema
-	});
-};
-
 //#endregion
 //#region src/modules/checkout/createCheckoutTransaction/createCheckoutTransaction.ts
 /**
@@ -2370,9 +2596,6 @@ const createCheckoutTransaction = async (params, client = getDefaultClient()) =>
 		environmentId: core.environmentId
 	});
 	await core.storage.setItem(createCheckoutSessionTokenStorageKey(result.transaction.id), result.sessionToken);
-	subscribeToCheckoutTransaction({ transactionId: result.transaction.id }, client).catch((error) => {
-		core.logger.error("Failed to subscribe to checkout transaction realtime channel", error);
-	});
 	return result;
 };
 const __createCheckoutTransaction_impl = createCheckoutTransaction;
@@ -2598,11 +2821,17 @@ const __submitCheckoutTransaction_wrapped = instrumentFunction({
 * subscribed — calling this again for those is unnecessary unless the page
 * has been reloaded.
 *
+* NOTE: Temporarily a no-op while the Ably API key is being provisioned for
+* the realtime checkout transaction channel. Will be re-enabled once the
+* dashboard-api environment has the Ably wiring in place.
+*
 * @param params.transactionId - The ID of the checkout transaction to track.
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @not-instrumented
 */
-const trackCheckoutTransaction = ({ transactionId }, client = getDefaultClient()) => subscribeToCheckoutTransaction({ transactionId }, client);
+const trackCheckoutTransaction = (_params, client = getDefaultClient()) => {
+	return Promise.resolve();
+};
 
 //#endregion
 //#region src/modules/checkout/utils/requiresConversion/requiresConversion.ts
@@ -5180,6 +5409,184 @@ const isUserOnboardingComplete = (client = getDefaultClient()) => {
 	return !hasMissingKycFields && !hasPendingMfaAuth && !hasPendingRecoveryCodes;
 };
 
+//#endregion
+//#region src/modules/walletBackup/googleDrive/constants.ts
+/**
+* OAuth scopes that must be granted on the user's Google account in order
+* for the keyshare backup upload to Google Drive to succeed.
+*
+* Exported so host apps can pre-flight check or display these in their own
+* UX. Kept as a `readonly` tuple to discourage mutation.
+*/
+const GOOGLE_DRIVE_BACKUP_REQUIRED_SCOPES = ["https://www.googleapis.com/auth/drive.appdata", "https://www.googleapis.com/auth/drive.file"];
+/**
+* Stable phrase the WaaS layer includes in Google Drive 401 / scope-insufficient
+* upload failure messages. Match by `.includes(...)` rather than equality
+* because the iframe message-handler fallback path rewraps the original error
+* as `new Error(String(response.error))`, which prefixes the message with
+* "Error: ". The phrase remains unique to the auth/scope case across all the
+* Drive failure reasons (rate-limit, storage-full, 5xx, network all use
+* distinct prefixes), so message-only matching is sufficient to discriminate.
+*/
+const ACCESS_DENIED_PHRASE = "Google Drive access denied";
+
+//#endregion
+//#region src/modules/walletBackup/googleDrive/findMissingGoogleDriveBackupScopes/findMissingGoogleDriveBackupScopes.ts
+/**
+* Returns the Google OAuth scopes from `GOOGLE_DRIVE_BACKUP_REQUIRED_SCOPES`
+* that are NOT present in `grantedScopes`. An empty array means all required
+* scopes have been granted.
+*
+* @param grantedScopes - Scopes the user has granted to their Google account.
+* @returns The subset of required scopes that are still missing.
+* @not-instrumented
+*/
+const findMissingGoogleDriveBackupScopes = (grantedScopes) => GOOGLE_DRIVE_BACKUP_REQUIRED_SCOPES.filter((required) => !grantedScopes.includes(required));
+
+//#endregion
+//#region src/modules/walletBackup/googleDrive/utils/fetchGoogleDriveOauthAccess/fetchGoogleDriveOauthAccess.ts
+/**
+* Fetches the user's stored Google OAuth access token together with the
+* scopes that were granted when the token was issued.
+*
+* Internal to the Google Drive backup readiness check — not exported as a
+* public API. The returned `scopes` array can be empty for legacy tokens
+* captured before the API began tracking granted scopes.
+*
+* @param params.oauthAccountId - The verified-credential id of the linked
+*   Google account (see `findGoogleOauthAccountId`).
+* @param client - The Dynamic client instance.
+* @returns The OAuth access token and granted scopes.
+* @not-instrumented
+*/
+const fetchGoogleDriveOauthAccess = async ({ oauthAccountId }, client) => {
+	const core = getCore(client);
+	return createApiClient({}, client).getEndUserOauthAccessToken({
+		environmentId: core.environmentId,
+		oauthAccountId
+	});
+};
+
+//#endregion
+//#region src/modules/walletBackup/googleDrive/utils/findGoogleOauthAccountId/findGoogleOauthAccountId.ts
+/**
+* Returns the verified-credential `id` (UUID of the user_oauth_accounts row)
+* for the user's linked Google account, or `undefined` if no Google account
+* is linked.
+*
+* The `getEndUserOauthAccessToken` API path parameter expects this UUID, NOT
+* the third-party `oauthAccountId` (Google's numeric profile ID) — those are
+* stored in the same credential under different fields.
+*
+* @param credentials - The user's verified credentials, typically from
+*   `client.user?.verifiedCredentials`.
+* @returns The credential id of the linked Google oauth account, or
+*   `undefined`.
+* @not-instrumented
+*/
+const findGoogleOauthAccountId = (credentials) => credentials?.find((cred) => cred.format === JwtVerifiedCredentialFormatEnum.Oauth && cred.oauthProvider === ProviderEnum.Google)?.id;
+
+//#endregion
+//#region src/modules/walletBackup/googleDrive/getGoogleDriveBackupReadiness/getGoogleDriveBackupReadiness.ts
+/**
+* Pre-flight readiness check for backing up MPC keyshares to Google Drive.
+*
+* Call this before initiating the keyshare backup ceremony. When the result
+* is `'needs-access'`, have the user re-link their Google account so the
+* required Drive scopes are granted, then call this again before retrying
+* the backup. This avoids spending an MPC reshare ceremony on a backup that
+* will predictably fail.
+*
+* Status values:
+* - `'ready'`: stored scopes include both required Drive scopes; backup
+*   should succeed (barring transient errors).
+* - `'needs-access'`: backup likely won't succeed without user intervention.
+*   Three sub-cases, distinguished by `missingScopes`:
+*   - No Google account linked → `missingScopes` is the full required set.
+*   - Some scopes granted but not all → `missingScopes` lists the gap.
+*   - Legacy token captured before scope tracking shipped (`scopes: []` from
+*     the API) → `missingScopes` is empty. Forcing a fresh consent will
+*     populate the scopes column for subsequent calls.
+*
+* Failures of the underlying access-token fetch propagate as Promise
+* rejections — the caller is expected to surface or retry them.
+*
+* Pair with `isInsufficientGoogleDriveScopesError` to detect post-flight
+* scope failures (e.g. for the legacy "unknown scopes" case where pre-flight
+* cannot prove failure).
+*
+* @param [client] - The Dynamic client instance. Only required when using
+*   multiple Dynamic clients.
+* @returns The readiness result.
+* @instrumented
+*/
+const getGoogleDriveBackupReadiness = async (client = getDefaultClient()) => {
+	const { user } = client;
+	const oauthAccountId = findGoogleOauthAccountId(user?.verifiedCredentials);
+	if (!oauthAccountId) return {
+		missingScopes: GOOGLE_DRIVE_BACKUP_REQUIRED_SCOPES,
+		status: "needs-access"
+	};
+	const { accessToken, scopes } = await fetchGoogleDriveOauthAccess({ oauthAccountId }, client);
+	if (scopes.length === 0) return {
+		accessToken,
+		missingScopes: [],
+		status: "needs-access"
+	};
+	const missing = findMissingGoogleDriveBackupScopes(scopes);
+	if (missing.length === 0) return {
+		accessToken,
+		missingScopes: [],
+		status: "ready"
+	};
+	return {
+		accessToken,
+		missingScopes: missing,
+		status: "needs-access"
+	};
+};
+const __getGoogleDriveBackupReadiness_impl = getGoogleDriveBackupReadiness;
+const __getGoogleDriveBackupReadiness_wrapped = instrumentFunction({
+	fn: __getGoogleDriveBackupReadiness_impl,
+	functionName: "getGoogleDriveBackupReadiness",
+	getCore: () => {
+		try {
+			return getCore(getDefaultClient());
+		} catch {
+			return;
+		}
+	}
+});
+
+//#endregion
+//#region src/modules/walletBackup/googleDrive/hasAllGoogleDriveBackupScopes/hasAllGoogleDriveBackupScopes.ts
+/**
+* Returns whether `grantedScopes` covers every Google OAuth scope required
+* to upload a keyshare backup to Google Drive.
+*
+* @param grantedScopes - Scopes the user has granted to their Google account.
+* @returns `true` when every required scope is granted, otherwise `false`.
+* @not-instrumented
+*/
+const hasAllGoogleDriveBackupScopes = (grantedScopes) => findMissingGoogleDriveBackupScopes(grantedScopes).length === 0;
+
+//#endregion
+//#region src/modules/walletBackup/googleDrive/isInsufficientGoogleDriveScopesError/isInsufficientGoogleDriveScopesError.ts
+/**
+* Type-guard for Google Drive backup failures caused by missing or
+* insufficient OAuth scopes (or otherwise denied access).
+*
+* Recover by having the user re-link their Google account and retrying the
+* backup once the granted scopes include
+* `GOOGLE_DRIVE_BACKUP_REQUIRED_SCOPES`.
+*
+* @param err - The unknown value to check.
+* @returns `true` when `err` is an `Error` whose message indicates Google
+*   Drive access was denied.
+* @not-instrumented
+*/
+const isInsufficientGoogleDriveScopesError = (err) => err instanceof Error && err.message.includes(ACCESS_DENIED_PHRASE);
+
 //#endregion
 //#region src/modules/wallets/assertWalletAccountSigningAvailability/assertWalletAccountSigningAvailability.ts
 /**
@@ -6253,5 +6660,5 @@ const parseUserAgent = ({ userAgent }) => {
 assertPackageVersion(name, version);
 
 //#endregion
-export { BaseError, CheckoutSessionTokenMissingError, ClientAlreadyInitializedError, DeeplinkConnectAndVerifyUnsupportedError, FeeEstimationFailedError, InvalidDeviceRegistrationRedirectError, InvalidExternalAuthError, InvalidParamError, InvalidRedirectStorageStateError, LinkCredentialError, MFAAction, MfaInvalidOtpError, MfaRateLimitedError, MissingRedirectStorageStateError, MissingSocialUrlParamError, MissingUserVerificationError, NetworkAddingUnavailableError, NetworkNotAddedError, NetworkSwitchingUnavailableError, NoAddressFoundError, NoNetworkProvidersError, NoPasskeyCredentialsFoundError, NoSmartWalletAccountSignerFoundError, NoWebAuthNSupportError, NotWaasWalletAccountError, SandboxMaximumThresholdReachedError, SimulationFailedError, TokenSwapError, UnauthorizedError, UnavailableInServerSideError, UnrecognizedNetworkError, UserNotAuthenticatedError, UserRejectedError, WalletAccountAlreadyVerifiedError, WalletAccountNotSelectedError, WalletAlreadyLinkedToAnotherUserError, WalletProviderMethodUnavailableError, __acknowledgeRecoveryCodes_wrapped as acknowledgeRecoveryCodes, addCoinbaseOnrampOrderEventListener, __addNetwork_wrapped as addNetwork, assertWalletAccountSigningAvailability, assertWalletProviderMethodDefined, __attachCheckoutTransactionSource_wrapped as attachCheckoutTransactionSource, authenticateMfaRecoveryCode, authenticatePasskeyMFA, authenticateTotpMfaDevice, __authenticateWithSocial_wrapped as authenticateWithSocial, __broadcastCheckoutTransaction_wrapped as broadcastCheckoutTransaction, canConnectWithHardwareWallet, __cancelCheckoutTransaction_wrapped as cancelCheckoutTransaction, __checkStepUpAuth_wrapped as checkStepUpAuth, __completeDeviceRegistration_wrapped as completeDeviceRegistration, __completeSocialAuthentication_wrapped as completeSocialAuthentication, __completeSocialRedirect_wrapped as completeSocialRedirect, __confirmTransaction_wrapped as confirmTransaction, __connectAndVerifyWithWalletProvider_wrapped as connectAndVerifyWithWalletProvider, __connectWithWalletProvider_wrapped as connectWithWalletProvider, __consumeMfaToken_wrapped as consumeMfaToken, __createCheckoutTransaction_wrapped as createCheckoutTransaction, __createCoinbaseOnrampOrder_wrapped as createCoinbaseOnrampOrder, __createCryptoDotComPayment_wrapped as createCryptoDotComPayment, __createDynamicClient_wrapped as createDynamicClient, __createKrakenExchangeTransfer_wrapped as createKrakenExchangeTransfer, __createNewMfaRecoveryCodes_wrapped as createNewMfaRecoveryCodes, __deleteMfaDevice_wrapped as deleteMfaDevice, __deletePasskey_wrapped as deletePasskey, __deleteUser_wrapped as deleteUser, detectDeviceRegistrationRedirect, detectOAuthRedirect, detectSocialRedirectUrl, __executeSwapTransaction_wrapped as executeSwapTransaction, fetchProjectSettings, getActiveNetworkData, getActiveNetworkId, getAvailableWalletProvidersData, getBalance, getBalanceForAddress, getBalances, getCheckoutTransaction, getCheckoutTransactionQuote, getCoinbaseBuyUrl, getConnectedAddresses, getDefaultClient, getDeviceRegistrationTokenFromUrl, __getElevatedAccessToken_wrapped as getElevatedAccessToken, getKrakenAccounts, getKrakenWhitelistedAddresses, getMfaDevices, getMfaMethods, getMfaRecoveryCodes, getMissingVerificationForCoinbaseOnrampOrder, getMultichainBalances, getNetworksData, getOwnerWalletAccountForSmartWalletAccount, getPasskeys, getPrimaryWalletAccount, getRegisteredDevices, getSwapQuote, getSwapStatus, getTransactionHistory, getUserSocialAccounts, getWalletAccountAddressByType, getWalletAccountFromAddress, getWalletAccounts, getWalletConnectCatalog, getWalletConnectCatalogWalletByWalletProviderKey, getWalletProviderDataByKey, hasExtension, __initializeClient_wrapped as initializeClient, isCaptchaRequired, isDeeplinkWalletProvider, isDeviceRegistrationRequired, isHardwareWalletAccount, isMfaRequiredForAction, isMobile, isPendingRecoveryCodesAcknowledgment, isProgrammaticNetworkSwitchAvailable, isSignedIn, isUserMissingMfaAuth, isUserOnboardingComplete, isWalletAccountVerified, logout, offEvent, offWalletProviderEvent, onEvent, onWalletProviderEvent, onceEvent, parseUserAgent, __prepareCheckoutTransaction_wrapped as prepareCheckoutTransaction, __proveWalletAccountOwnership_wrapped as proveWalletAccountOwnership, __refreshAuth_wrapped as refreshAuth, __refreshUser_wrapped as refreshUser, __registerPasskey_wrapped as registerPasskey, __registerTotpMfaDevice_wrapped as registerTotpMfaDevice, __removeWalletAccount_wrapped as removeWalletAccount, __requestExternalAuthElevatedToken_wrapped as requestExternalAuthElevatedToken, requiresConversion, __revokeAllRegisteredDevices_wrapped as revokeAllRegisteredDevices, __revokeRegisteredDevice_wrapped as revokeRegisteredDevice, __selectPrimaryWalletAccount_wrapped as selectPrimaryWalletAccount, __sendEmailOTP_wrapped as sendEmailOTP, __sendSmsOTP_wrapped as sendSmsOTP, __setCaptchaToken_wrapped as setCaptchaToken, __setDefaultMfaDevice_wrapped as setDefaultMfaDevice, __setInstrumentationEnabled_wrapped as setInstrumentationEnabled, __signInWithExternalJwt_wrapped as signInWithExternalJwt, __signInWithPasskey_wrapped as signInWithPasskey, __signInWithSocialRedirect_wrapped as signInWithSocialRedirect, __signMessage_wrapped as signMessage, __submitCheckoutTransaction_wrapped as submitCheckoutTransaction, supportedCountries, __switchActiveNetwork_wrapped as switchActiveNetwork, trackCheckoutTransaction, __transferAmount_wrapped as transferAmount, __transferWalletAccount_wrapped as transferWalletAccount, __unlinkSocialAccount_wrapped as unlinkSocialAccount, __updateUser_wrapped as updateUser, __verifyOTP_wrapped as verifyOTP, __verifyWalletAccount_wrapped as verifyWalletAccount, waitForClientInitialized };
+export { BaseError, CheckoutSessionTokenMissingError, ClientAlreadyInitializedError, DeeplinkConnectAndVerifyUnsupportedError, FeeEstimationFailedError, GOOGLE_DRIVE_BACKUP_REQUIRED_SCOPES, InvalidDeviceRegistrationRedirectError, InvalidExternalAuthError, InvalidParamError, InvalidRedirectStorageStateError, InvalidSocialCallbackOriginError, LinkCredentialError, MFAAction, MfaInvalidOtpError, MfaRateLimitedError, MissingRedirectStorageStateError, MissingSocialUrlParamError, MissingUserVerificationError, NetworkAddingUnavailableError, NetworkNotAddedError, NetworkSwitchingUnavailableError, NoAddressFoundError, NoNetworkProvidersError, NoPasskeyCredentialsFoundError, NoSmartWalletAccountSignerFoundError, NoWebAuthNSupportError, NotWaasWalletAccountError, SandboxMaximumThresholdReachedError, SimulationFailedError, TokenSwapError, UnauthorizedError, UnavailableInServerSideError, UnrecognizedNetworkError, UserCancelledSocialPopUpError, UserNotAuthenticatedError, UserRejectedError, WalletAccountAlreadyVerifiedError, WalletAccountNotSelectedError, WalletAlreadyLinkedToAnotherUserError, WalletProviderMethodUnavailableError, __acknowledgeRecoveryCodes_wrapped as acknowledgeRecoveryCodes, addCoinbaseOnrampOrderEventListener, __addNetwork_wrapped as addNetwork, assertWalletAccountSigningAvailability, assertWalletProviderMethodDefined, __attachCheckoutTransactionSource_wrapped as attachCheckoutTransactionSource, authenticateMfaRecoveryCode, authenticatePasskeyMFA, authenticateTotpMfaDevice, __authenticateWithSocial_wrapped as authenticateWithSocial, __broadcastCheckoutTransaction_wrapped as broadcastCheckoutTransaction, canConnectWithHardwareWallet, __cancelCheckoutTransaction_wrapped as cancelCheckoutTransaction, __checkStepUpAuth_wrapped as checkStepUpAuth, __completeDeviceRegistration_wrapped as completeDeviceRegistration, __completeSocialAuthentication_wrapped as completeSocialAuthentication, __completeSocialRedirect_wrapped as completeSocialRedirect, __confirmTransaction_wrapped as confirmTransaction, __connectAndVerifyWithWalletProvider_wrapped as connectAndVerifyWithWalletProvider, __connectWithWalletProvider_wrapped as connectWithWalletProvider, __consumeMfaToken_wrapped as consumeMfaToken, __createCheckoutTransaction_wrapped as createCheckoutTransaction, __createCoinbaseOnrampOrder_wrapped as createCoinbaseOnrampOrder, __createCryptoDotComPayment_wrapped as createCryptoDotComPayment, __createDynamicClient_wrapped as createDynamicClient, __createKrakenExchangeTransfer_wrapped as createKrakenExchangeTransfer, __createNewMfaRecoveryCodes_wrapped as createNewMfaRecoveryCodes, __deleteMfaDevice_wrapped as deleteMfaDevice, __deletePasskey_wrapped as deletePasskey, __deleteUser_wrapped as deleteUser, detectDeviceRegistrationRedirect, detectOAuthRedirect, detectSocialRedirectUrl, __executeSwapTransaction_wrapped as executeSwapTransaction, fetchProjectSettings, findMissingGoogleDriveBackupScopes, getActiveNetworkData, getActiveNetworkId, getAvailableWalletProvidersData, getBalance, getBalanceForAddress, getBalances, getCheckoutTransaction, getCheckoutTransactionQuote, getCoinbaseBuyUrl, getConnectedAddresses, getDefaultClient, getDeviceRegistrationTokenFromUrl, __getElevatedAccessToken_wrapped as getElevatedAccessToken, __getGoogleDriveBackupReadiness_wrapped as getGoogleDriveBackupReadiness, getKrakenAccounts, getKrakenWhitelistedAddresses, getMfaDevices, getMfaMethods, getMfaRecoveryCodes, getMissingVerificationForCoinbaseOnrampOrder, getMultichainBalances, getNetworksData, getOwnerWalletAccountForSmartWalletAccount, getPasskeys, getPrimaryWalletAccount, getRegisteredDevices, getSwapQuote, getSwapStatus, getTransactionHistory, getUserSocialAccounts, getWalletAccountAddressByType, getWalletAccountFromAddress, getWalletAccounts, getWalletConnectCatalog, getWalletConnectCatalogWalletByWalletProviderKey, getWalletProviderDataByKey, hasAllGoogleDriveBackupScopes, hasExtension, __initializeClient_wrapped as initializeClient, isCaptchaRequired, isDeeplinkWalletProvider, isDeviceRegistrationRequired, isHardwareWalletAccount, isInsufficientGoogleDriveScopesError, isMfaRequiredForAction, isMobile, isPendingRecoveryCodesAcknowledgment, isProgrammaticNetworkSwitchAvailable, isSignedIn, isUserMissingMfaAuth, isUserOnboardingComplete, isWalletAccountVerified, logout, offEvent, offWalletProviderEvent, onEvent, onWalletProviderEvent, onceEvent, parseUserAgent, __prepareCheckoutTransaction_wrapped as prepareCheckoutTransaction, __proveWalletAccountOwnership_wrapped as proveWalletAccountOwnership, __refreshAuth_wrapped as refreshAuth, __refreshUser_wrapped as refreshUser, __registerPasskey_wrapped as registerPasskey, __registerTotpMfaDevice_wrapped as registerTotpMfaDevice, __removeWalletAccount_wrapped as removeWalletAccount, __requestExternalAuthElevatedToken_wrapped as requestExternalAuthElevatedToken, requiresConversion, __revokeAllRegisteredDevices_wrapped as revokeAllRegisteredDevices, __revokeRegisteredDevice_wrapped as revokeRegisteredDevice, __selectPrimaryWalletAccount_wrapped as selectPrimaryWalletAccount, __sendEmailOTP_wrapped as sendEmailOTP, __sendSmsOTP_wrapped as sendSmsOTP, __setCaptchaToken_wrapped as setCaptchaToken, __setDefaultMfaDevice_wrapped as setDefaultMfaDevice, __setInstrumentationEnabled_wrapped as setInstrumentationEnabled, __signInWithExternalJwt_wrapped as signInWithExternalJwt, __signInWithPasskey_wrapped as signInWithPasskey, __signInWithSocialPopUp_wrapped as signInWithSocialPopUp, __signInWithSocialRedirect_wrapped as signInWithSocialRedirect, __signMessage_wrapped as signMessage, __submitCheckoutTransaction_wrapped as submitCheckoutTransaction, supportedCountries, __switchActiveNetwork_wrapped as switchActiveNetwork, trackCheckoutTransaction, __transferAmount_wrapped as transferAmount, __transferWalletAccount_wrapped as transferWalletAccount, __unlinkSocialAccount_wrapped as unlinkSocialAccount, __updateUser_wrapped as updateUser, __verifyOTP_wrapped as verifyOTP, __verifyWalletAccount_wrapped as verifyWalletAccount, waitForClientInitialized };
 //# sourceMappingURL=index.native.esm.js.map