@dynamic-labs-sdk/client 1.10.0 → 1.12.0

package/dist/waasCore.native.esm.js.map

@@ -1 +1 @@
-{"version":3,"file":"waasCore.native.esm.js","names":["REASON_BY_NATIVE_CODE: Record<string, WebViewLoadFailureReason>","reason: WebViewLoadFailureReason","NativeDynamicWebView","messageHandlers: Array<(data: unknown) => void>","errorHandlers: Array<(error: unknown) => void>","subscription: { remove: () => void } | null","createWaasClient: CreateWaasClient","_waasClient: DynamicWalletClient | undefined","getWaasClient: WaasProvider['getWaasClient']","backupKeySharesToGoogleDrive: WaasProvider['backupKeySharesToGoogleDrive']","createWalletAccount: WaasProvider['createWalletAccount']","delegateKeyShares: WaasProvider['delegateKeyShares']","exportClientKeyshares: WaasProvider['exportClientKeyshares']","exportPrivateKey: WaasProvider['exportPrivateKey']","getElevatedAccessToken","restoreUserShareForWalletAccount: WaasProvider['restoreUserShareForWalletAccount']","importPrivateKey: WaasProvider['importPrivateKey']","refreshWalletAccountShares: WaasProvider['refreshWalletAccountShares']","revokeDelegation: WaasProvider['revokeDelegation']","setWaasWalletAccountPassword: WaasProvider['setWaasWalletAccountPassword']","signRawMessage: WaasProvider['signRawMessage']","destroy: WaasProvider['destroy']","updatePassword: WaasProvider['updatePassword']","signMessage: WaasProvider['signMessage']","signSerializedTransaction: WaasProvider['signSerializedTransaction']","getWalletRecoveryState: WaasProvider['getWalletRecoveryState']","unlockWallet: WaasProvider['unlockWallet']","packageName","packageVersion"],"sources":["../src/errors/CorruptedKeyShareError.ts","../src/turboModules/NativeDynamicWebView.ts","../src/errors/WebViewLoadFailedError.ts","../src/modules/waas/createWaasClient/translateNativeOpenError.ts","../src/modules/waas/createWaasClient/createNativeWaasSDKContainer.native.ts","../src/modules/waas/createWaasClient/createWaasSDKContainer.native.ts","../src/modules/waas/createWaasClient/createWaasClient.native.ts","../src/modules/waas/getWaasChainNameFromChain/getWaasChainNameFromChain.ts","../src/modules/waas/createWaasProvider/createWaasProvider.ts","../src/modules/waas/exportWaasPrivateKeyToContainer/exportWaasPrivateKeyToContainer.ts","../src/modules/waas/getAllUserWaasAddressesForChain/getAllUserWaasAddressesForChain.ts","../src/exports/waasCore.ts"],"sourcesContent":["import { BaseError } from './base';\n\ntype CorruptedKeyShareErrorParams = {\n  cause?: Error | null;\n};\n\n/**\n * Thrown when a persisted client key share cannot be parsed back into its\n * structured form (e.g. a partially-written or corrupted keychain entry).\n *\n * Surfaced as a typed error rather than swallowed so callers can distinguish\n * \"no key share stored\" (empty result) from \"key share exists but is\n * unreadable\" — the latter must never be silently treated as the former,\n * which could trigger an unintended re-keygen that overwrites recoverable\n * material.\n */\nexport class CorruptedKeyShareError extends BaseError {\n  constructor({ cause = null }: CorruptedKeyShareErrorParams = {}) {\n    super({\n      cause,\n      code: 'corrupted_key_share_error',\n      details:\n        'The stored client key share could not be parsed. The secure storage entry may be partially written or corrupted.',\n      docsUrl: null,\n      name: 'CorruptedKeyShareError',\n      shortMessage: 'Stored client key share is corrupted and cannot be read.',\n    });\n  }\n}\n","// This file is a TurboModule spec consumed by React Native codegen.\n// The `interface`, `default export`, and the `react-native` import are hard\n// requirements of the codegen parser and intentionally deviate from the\n// project's conventions. Codegen discovers specs by the `Native*` filename\n// prefix, so this file cannot be renamed to `.native.ts`.\n\nimport { type TurboModule, TurboModuleRegistry } from 'react-native';\nimport type { UnsafeObject } from 'react-native/Libraries/Types/CodegenTypes';\n\nexport interface Spec extends TurboModule {\n  addListener(eventName: string): void;\n  close(instanceId: string): void;\n  /**\n   * Creates a WKWebView for the given instanceId and begins loading `url`.\n   *\n   * Resolves on `didCommit` — i.e. the first byte of a 2xx/3xx HTTP\n   * response has been received and content parsing has started. Page-ready\n   * (e.g. the hosted iframe's `iframe-ready-*` handshake) is a separate\n   * concern and must be observed by the caller via the message bus; this\n   * Promise does not wait for it.\n   *\n   * Rejects with a `code` of `webview_<reason>` where `<reason>` is one of:\n   *   - `invalid_url` — URL string was not parseable\n   *   - `no_host_view` — no foreground window to attach the WebView\n   *   - `http_error` — response status was >= 400 (userInfo contains `DynamicWebViewStatusCode`)\n   *   - `navigation_failed` — DNS, TLS, connection failure, or post-commit abort\n   *   - `cancelled` — `close(instanceId)` was called while this open was pending\n   *   - `instance_busy` — `open` was called for an instanceId that already has an active WebView\n   *   - `content_process_terminated` — the WKWebView WebContent process died during load\n   *   - `unsupported` — the device's Android System WebView is too old to support the secure bridge (Android only)\n   *\n   * rejection codes into typed `WebViewLoadFailedError` instances.\n   */\n  open(instanceId: string, url: string): Promise<void>;\n  removeListeners(count: number): void;\n  sendMessage(instanceId: string, data: UnsafeObject): void;\n}\n\n// eslint-disable-next-line import/no-default-export\nexport default TurboModuleRegistry.get<Spec>('DynamicClientWebView');\n","import { BaseError } from './base/BaseError';\n\n/**\n * Discriminator for `WebViewLoadFailedError`. Identifies the specific\n * failure mode so callers can branch on it (e.g. retry on transient\n * navigation failures, abort on invalid URL, treat HTTP errors distinct\n * from network errors).\n */\nexport type WebViewLoadFailureReason =\n  | 'invalid_url'\n  | 'no_host_view'\n  | 'http_error'\n  | 'navigation_failed'\n  | 'cancelled'\n  | 'instance_busy'\n  | 'content_process_terminated'\n  | 'unsupported';\n\ntype WebViewLoadFailedErrorParams = {\n  cause?: Error | null;\n  reason: WebViewLoadFailureReason;\n  shortMessage: string;\n  /** HTTP response status code. Populated only when `reason === 'http_error'`. */\n  statusCode?: number;\n  /** Underlying OS-level error description (e.g. `NSURLErrorDomain`\n   *  localizedDescription). Populated for `reason === 'navigation_failed'`. */\n  underlyingError?: string;\n};\n\n/**\n * Thrown when `DynamicWebView.open()` (via the WaaS transport provider)\n * fails to establish a usable load. Inspect `reason` to distinguish the\n * failure mode; `statusCode` and `underlyingError` provide structured\n * metadata for the cases that have it.\n */\nexport class WebViewLoadFailedError extends BaseError {\n  readonly reason: WebViewLoadFailureReason;\n  readonly statusCode: number | undefined;\n  readonly underlyingError: string | undefined;\n\n  constructor({\n    reason,\n    shortMessage,\n    cause = null,\n    statusCode,\n    underlyingError,\n  }: WebViewLoadFailedErrorParams) {\n    super({\n      cause,\n      code: 'webview_load_failed_error',\n      details: underlyingError,\n      docsUrl: null,\n      name: 'WebViewLoadFailedError',\n      shortMessage,\n    });\n    this.reason = reason;\n    this.statusCode = statusCode;\n    this.underlyingError = underlyingError;\n  }\n}\n","import {\n  WebViewLoadFailedError,\n  type WebViewLoadFailureReason,\n} from '../../../errors/WebViewLoadFailedError';\n\n// Maps the native-side RCT reject codes (emitted by DynamicWebView.mm) to the\n// JS-level discriminator on `WebViewLoadFailedError`. Keys must stay in sync\n// with the `Reason.*` strings in DynamicWebViewImpl.swift.\nconst REASON_BY_NATIVE_CODE: Record<string, WebViewLoadFailureReason> = {\n  webview_cancelled: 'cancelled',\n  webview_content_process_terminated: 'content_process_terminated',\n  webview_http_error: 'http_error',\n  webview_instance_busy: 'instance_busy',\n  webview_invalid_url: 'invalid_url',\n  webview_navigation_failed: 'navigation_failed',\n  webview_no_host_view: 'no_host_view',\n  webview_unsupported: 'unsupported',\n};\n\n// React Native serializes the native NSError's userInfo onto the JS Error as\n// `userInfo`. These keys must stay in sync with the `errorStatusCodeKey` /\n// `errorUnderlyingDescriptionKey` constants in DynamicWebViewImpl.swift.\ntype NativeRejection = {\n  code?: string;\n  message?: string;\n  userInfo?: {\n    DynamicWebViewStatusCode?: number;\n    DynamicWebViewUnderlying?: string;\n  };\n};\n\n/**\n * Translates a native `DynamicWebView.open()` rejection into a typed\n * `WebViewLoadFailedError`. Maps the native RCT reject code to the JS-level\n * `WebViewLoadFailureReason` discriminator (falling back to\n * `navigation_failed` for unrecognized codes) and carries through the\n * structured `statusCode` / `underlyingError` metadata.\n *\n * The `reason` it produces is the contract `createWaasSDKContainer` branches\n * on — notably `emitError` swallows `cancelled` because that code is only ever\n * produced by our own `close()` teardown (verified on both the iOS and Android\n * native sides). Keep `REASON_BY_NATIVE_CODE` in sync with the native reject\n * codes so that branching stays correct.\n *\n * @not-instrumented\n */\nexport const translateNativeOpenError = (\n  err: unknown\n): WebViewLoadFailedError => {\n  const rejection = (err ?? {}) as NativeRejection;\n\n  // Must check the KEYS of REASON_BY_NATIVE_CODE (the `webview_*` native\n  // codes), not its values (the JS-level reasons) — this is called with the\n  // native code, so checking values made every code fall through to\n  // `navigation_failed` and silently broke the `cancelled` swallow.\n  const isNativeRejectionCode = (\n    code: string | undefined\n  ): code is keyof typeof REASON_BY_NATIVE_CODE =>\n    code != undefined && code in REASON_BY_NATIVE_CODE;\n\n  const reason: WebViewLoadFailureReason = isNativeRejectionCode(rejection.code)\n    ? REASON_BY_NATIVE_CODE[rejection.code]\n    : 'navigation_failed';\n  return new WebViewLoadFailedError({\n    cause: err instanceof Error ? err : null,\n    reason,\n    shortMessage:\n      rejection.message ?? `DynamicWebView open failed (${reason}).`,\n    statusCode: rejection.userInfo?.DynamicWebViewStatusCode,\n    underlyingError: rejection.userInfo?.DynamicWebViewUnderlying,\n  });\n};\n","import type { WaasSDKContainer } from '@dynamic-labs-wallet/core';\nimport { NativeEventEmitter } from 'react-native';\n\nimport { NativeModuleNotLinkedError } from '../../../errors/NativeModuleNotLinkedError';\nimport NativeDynamicWebView from '../../../turboModules/NativeDynamicWebView';\nimport { translateNativeOpenError } from './translateNativeOpenError';\n\nconst NATIVE_MODULE_NAME = 'DynamicClientWebView';\nconst MESSAGE_EVENT_NAME = 'dynamicBridgeMessage';\n\ntype BridgeEventPayload = {\n  data: unknown;\n  instanceId: string;\n};\n\n// The instance ID routes bridge messages to the right container, so it must be\n// globally unique. Use a crypto-random UUID (no Math.random) keyed by timestamp\n// for readability across app reloads.\nconst generateInstanceId = (): string =>\n  `${Date.now().toString(36)}-${crypto.randomUUID()}`;\n\n/**\n * Creates a React Native `WaasSDKContainer` backed by a hidden, headless native\n * WebView (WKWebView on iOS, `android.webkit.WebView` on Android) hosted by the\n * `DynamicClientWebView` TurboModule. Each invocation returns an isolated\n * container with its own instance ID, native WebView, and message routing.\n *\n * Used for MPC operations (signing, key-share management) where there is\n * nothing for the user to see. The VISIBLE private-key export display is no\n * longer a native overlay — it is rendered by the `ExportPrivateKey` component\n * (`@dynamic-labs-sdk/react-native-embedded-wallet-export`) on top of\n * `react-native-webview`, so it scrolls and positions like any RN view.\n *\n * @not-instrumented\n */\nexport const createNativeWaasSDKContainer = (): WaasSDKContainer => {\n  if (!NativeDynamicWebView) {\n    throw new NativeModuleNotLinkedError({ moduleName: NATIVE_MODULE_NAME });\n  }\n\n  const nativeModule = NativeDynamicWebView;\n  const instanceId = generateInstanceId();\n  // Construct the emitter against the TurboModule itself — on New Arch,\n  // `NativeModules[name]` can be a different compatibility-shim object,\n  // and binding `addListener`/`removeListeners` on the wrong instance\n  // leaves `startObserving` in the native emitter never firing.\n  const emitter = new NativeEventEmitter(\n    nativeModule as unknown as ConstructorParameters<typeof NativeEventEmitter>[0]\n  );\n\n  // IframeManager on the WaaS SDK calls `container.onMessage(handler)` twice\n  // on the same container — once to wait for the `iframe-ready-*` handshake,\n  // and once later from `setupWaasSDKContainerBridge` to forward transport\n  // messages. Both handlers need to receive every message, so the container\n  // fans out to all registered handlers instead of enforcing single-register.\n  const messageHandlers: Array<(data: unknown) => void> = [];\n  const errorHandlers: Array<(error: unknown) => void> = [];\n  let subscription: { remove: () => void } | null = null;\n  let destroyed = false;\n\n  const emitError = (err: unknown): void => {\n    if (destroyed) return;\n    const translated = translateNativeOpenError(err);\n    // `cancelled` is only ever produced by our own `close()` teardown path on\n    // the native side. Surfacing it via onError would make consumers like\n    // IframeManager interpret their own destroy as a load failure and retry\n    // against a provider that no longer exists.\n    if (translated.reason === 'cancelled') return;\n    for (const handler of errorHandlers) {\n      handler(translated);\n    }\n  };\n\n  return {\n    destroy() {\n      if (destroyed) return;\n      destroyed = true;\n\n      subscription?.remove();\n      subscription = null;\n      messageHandlers.length = 0;\n      errorHandlers.length = 0;\n      nativeModule.close(instanceId);\n    },\n\n    isAlive: () => !destroyed,\n\n    // Signature is dictated by the upstream WaasSDKContainer interface.\n    // eslint-disable-next-line custom-rules/require-single-object-param\n    onError(handler: (error: unknown) => void) {\n      errorHandlers.push(handler);\n      return () => {\n        const index = errorHandlers.indexOf(handler);\n        if (index !== -1) errorHandlers.splice(index, 1);\n      };\n    },\n\n    // Signature is dictated by the upstream WaasSDKContainer interface.\n    // eslint-disable-next-line custom-rules/require-single-object-param\n    onMessage(handler: (data: unknown) => void) {\n      messageHandlers.push(handler);\n\n      subscription ??= emitter.addListener(\n        MESSAGE_EVENT_NAME,\n        (payload: BridgeEventPayload) => {\n          if (payload.instanceId !== instanceId) return;\n\n          for (const fn of messageHandlers) {\n            fn(payload.data);\n          }\n        }\n      );\n\n      // WaaS client expects onMessage to return an unsubscribe function —\n      // used e.g. to tear down the one-shot handshake handler.\n      return () => {\n        const index = messageHandlers.indexOf(handler);\n        if (index !== -1) messageHandlers.splice(index, 1);\n        if (messageHandlers.length === 0) {\n          subscription?.remove();\n          subscription = null;\n        }\n      };\n    },\n\n    sendMessage(data: Record<string, unknown>) {\n      nativeModule.sendMessage(instanceId, data);\n    },\n    /**\n     * Hands the URL off to the native WebView and resolves immediately.\n     *\n     * Per the `WaasSDKContainer` contract (see `@dynamic-labs-wallet/core`\n     * types), `setUrl` resolves once the URL has been handed off to the\n     * container — NOT when the page has finished loading. Load completion is\n     * signalled later via the `iframe-ready-*` message on `onMessage`, and\n     * navigation failures surface via `onError`. This dispatch-and-forget\n     * shape is load-bearing: the WaaS handshake sequencing expects `setUrl` to\n     * resolve before the first message arrives, so the native open is\n     * intentionally NOT awaited/returned — its rejection (HTTP errors,\n     * navigation failures, preflight errors, etc.) is routed through\n     * `emitError` instead. Do not change this to `return nativeModule.open(...)`.\n     */\n    // Signature is dictated by the upstream WaasSDKContainer interface.\n    // eslint-disable-next-line custom-rules/require-single-object-param\n    async setUrl(url: string) {\n      nativeModule.open(instanceId, url).catch(emitError);\n    },\n  };\n};\n","import type { WaasSDKContainer } from '@dynamic-labs-wallet/core';\n\nimport { createNativeWaasSDKContainer } from './createNativeWaasSDKContainer.native';\n\n/**\n * Creates a React Native `WaasSDKContainer` backed by a hidden, headless native\n * WebView (WKWebView on iOS, `android.webkit.WebView` on Android) hosted by the\n * `DynamicClientWebView` TurboModule. Used for MPC operations (signing, key-share\n * management) where there is nothing for the user to see.\n *\n * For the private-key export display — where the hosted page must render the\n * key for the user — use the `ExportPrivateKey` component from\n * `@dynamic-labs-sdk/react-native-embedded-wallet-export`, which renders the\n * key inside a `react-native-webview` instead of a native overlay.\n *\n * @not-instrumented\n */\nexport const createWaasSDKContainer = (): WaasSDKContainer =>\n  createNativeWaasSDKContainer();\n","import type { AuthMode } from '@dynamic-labs-wallet/browser-wallet-client';\nimport { DynamicWalletClient } from '@dynamic-labs-wallet/browser-wallet-client';\nimport type { SecureStorageAdapter } from '@dynamic-labs-wallet/core';\nimport {\n  ACCESSIBLE,\n  getGenericPassword,\n  resetGenericPassword,\n  setGenericPassword,\n} from 'react-native-keychain';\n\nimport { getCore } from '../../../client/core/getCore';\nimport { CorruptedKeyShareError } from '../../../errors/CorruptedKeyShareError';\nimport { CLIENT_SDK_NAME } from '../../apiClient/constants';\nimport { isCookieEnabled } from '../../projectSettings/isCookieEnabled';\nimport {\n  DEFAULT_WAAS_BASE_API_URL,\n  DEFAULT_WAAS_BASE_MPC_RELAY_API_URL,\n} from '../constants';\nimport type { CreateWaasClient } from './createWaasClient.types';\nimport { createWaasSDKContainer } from './createWaasSDKContainer.native';\n\n/**\n * Keychain security options for the client key share. The share is wallet\n * key material that cannot be re-derived locally, so the options are pinned\n * explicitly rather than inherited from `react-native-keychain` defaults\n * (which vary across versions and platforms).\n *\n * `WHEN_UNLOCKED_THIS_DEVICE_ONLY` keeps the share readable only while the\n * device is unlocked, excludes it from iCloud Keychain sync, and prevents it\n * migrating to a new device on encrypted-backup restore. It deliberately does\n * NOT set `accessControl` (e.g. biometry) — reads must not surface a Face ID /\n * passcode prompt, since the share is read on routine wallet operations.\n */\nconst KEY_SHARE_KEYCHAIN_OPTIONS = {\n  accessible: ACCESSIBLE.WHEN_UNLOCKED_THIS_DEVICE_ONLY,\n} as const;\n\n/** @not-instrumented */\nexport const createWaasClient: CreateWaasClient = ({ chainName }, client) => {\n  const core = getCore(client);\n\n  const additionalTrustedOrigins = core.waas?.additionalTrustedOrigins;\n\n  // Namespace the keychain service by environment so two environmentIds on the\n  // same device (or two dApps that observe the same account) can't collide and\n  // mix key shares. The account address alone is not unique across environments.\n  const getKeyShareService = (accountAddress: string): string =>\n    `${core.environmentId}:${accountAddress}`;\n\n  return new DynamicWalletClient(\n    {\n      authMode: (isCookieEnabled(client) ? 'cookie' : 'header') as AuthMode,\n      authToken: client.token || '',\n      baseApiUrl: (core.apiBaseUrl || DEFAULT_WAAS_BASE_API_URL).replace(\n        '/api/v0',\n        ''\n      ),\n      baseMPCRelayApiUrl:\n        client.projectSettings?.sdk.waas?.relayUrl ||\n        DEFAULT_WAAS_BASE_MPC_RELAY_API_URL,\n      chainName,\n      environmentId: core.environmentId,\n      // On React Native there is no real `window.location.origin`, so the hosted\n      // iframe is told the app's universalLink as its host origin. This must be\n      // allowlisted in the environment's CORS/allowed origins, just like a web\n      // app's domain. Without it the WaaS server rejects the iframe load (400).\n      hostOrigin: core.metadata?.universalLink,\n      sdkVersion: `${CLIENT_SDK_NAME}/${core.version}`,\n      ...(additionalTrustedOrigins == undefined\n        ? {}\n        : { additionalTrustedOrigins }),\n    },\n    {\n      createWaasSDKContainer,\n      // Typed as the upstream SecureStorageAdapter so the key-share method\n      // signatures (and the `shares` payload type) stay compiler-enforced\n      // against the WaaS SDK contract rather than re-declared locally.\n      secureStorage: {\n        getClientKeyShare: async (accountAddress) => {\n          const result = await getGenericPassword({\n            service: getKeyShareService(accountAddress),\n          });\n\n          if (!result) {\n            return [];\n          }\n\n          // A corrupted or partially-written keychain entry makes JSON.parse\n          // throw mid key-share load. Surface a typed error instead of an\n          // unhandled rejection so callers can distinguish \"no share stored\"\n          // (empty result above) from \"share exists but is unreadable\".\n          try {\n            return JSON.parse(result.password);\n          } catch (cause) {\n            throw new CorruptedKeyShareError({\n              cause: cause instanceof Error ? cause : null,\n            });\n          }\n        },\n\n        removeClientKeyShare: async (accountAddress) => {\n          await resetGenericPassword({\n            service: getKeyShareService(accountAddress),\n          });\n        },\n\n        setClientKeyShare: async (accountAddress, shares) => {\n          await setGenericPassword(accountAddress, JSON.stringify(shares), {\n            ...KEY_SHARE_KEYCHAIN_OPTIONS,\n            service: getKeyShareService(accountAddress),\n          });\n        },\n      } satisfies SecureStorageAdapter,\n    }\n  );\n};\n","import type { Chain } from '../../chain';\nimport { CHAINS_INFO_MAP } from '../../wallets/constants';\n\n/** @not-instrumented */\n// eslint-disable-next-line custom-rules/require-single-object-param\nexport const getWaasChainNameFromChain = (chain: Chain): string => {\n  return CHAINS_INFO_MAP[chain].waasChainNameOverride || chain;\n};\n","import {\n  type BitcoinConfig,\n  type DynamicWalletClient,\n  ThresholdSignatureScheme,\n  WalletOperation,\n} from '@dynamic-labs-wallet/browser-wallet-client';\nimport { MFAAction, TokenScope } from '@dynamic-labs/sdk-api-core';\n\nimport { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types/DynamicClient';\nimport { InvalidParamError } from '../../../errors/InvalidParamError';\nimport { getElevatedAccessToken } from '../../auth/getElevatedAccessToken';\nimport type { Chain } from '../../chain';\nimport { consumeMfaTokenIfRequiredForAction } from '../../mfa/consumeMfaTokenIfRequiredForAction';\nimport { getSignedSessionId } from '../../sessionKeys/getSignedSessionId';\nimport { createWaasClient } from '../createWaasClient';\nimport { getWaasChainNameFromChain } from '../getWaasChainNameFromChain';\nimport type { WaasProvider } from '../waas.types';\n\nconst RAW_MESSAGE_MESSAGE_REQUIRED_LENGTH = 64;\n\ntype CreateWaasProviderParams = {\n  chain: Chain;\n  sdkClient: DynamicClient;\n};\n\n/** @not-instrumented */\nexport const createWaasProvider = ({\n  sdkClient,\n  chain,\n}: CreateWaasProviderParams): WaasProvider => {\n  const logger = getCore(sdkClient).logger;\n\n  let _waasClient: DynamicWalletClient | undefined;\n\n  // because the waas client needs the authToken to be set, we can only create it\n  // the first time it's needed, which is after the user has logged in\n  const getWaasClient: WaasProvider['getWaasClient'] = async () => {\n    if (!_waasClient) {\n      _waasClient = createWaasClient(\n        { chainName: getWaasChainNameFromChain(chain) },\n        sdkClient\n      );\n      await _waasClient.initialize();\n    }\n    return _waasClient;\n  };\n\n  const backupKeySharesToGoogleDrive: WaasProvider['backupKeySharesToGoogleDrive'] =\n    async ({ googleDriveAccessToken, password, walletAccount }) => {\n      const { signature: signedSessionId } = await getSignedSessionId(\n        sdkClient\n      );\n\n      const waasClient = await getWaasClient();\n\n      return waasClient.backupKeySharesToGoogleDrive({\n        accountAddress: walletAccount.address,\n        authToken: sdkClient.token ?? undefined,\n        googleDriveAccessToken,\n        password,\n        signedSessionId,\n      });\n    };\n\n  const createWalletAccount: WaasProvider['createWalletAccount'] = async (\n    args = {}\n  ) => {\n    logger.debug('[createWaasProvider] createWalletAccount', {\n      bitcoinConfig: args.bitcoinConfig,\n      thresholdSignatureScheme: args.thresholdSignatureScheme,\n    });\n\n    const { signature: signedSessionId } = await getSignedSessionId(sdkClient);\n\n    const waasClient = await getWaasClient();\n\n    const waasWallet = await waasClient.createWalletAccount({\n      authToken: sdkClient.token ?? undefined,\n      bitcoinConfig: args.bitcoinConfig as BitcoinConfig | undefined,\n      password: args.password,\n      signedSessionId,\n      thresholdSignatureScheme:\n        args.thresholdSignatureScheme ?? ThresholdSignatureScheme.TWO_OF_TWO,\n    });\n\n    return waasWallet;\n  };\n\n  const delegateKeyShares: WaasProvider['delegateKeyShares'] = async ({\n    password,\n    walletAccount,\n  }) => {\n    const { signature: signedSessionId } = await getSignedSessionId(sdkClient);\n\n    const waasClient = await getWaasClient();\n\n    return waasClient.delegateKeyShares({\n      accountAddress: walletAccount.address,\n      authToken: sdkClient.token ?? undefined,\n      password,\n      signedSessionId,\n    });\n  };\n\n  const exportClientKeyshares: WaasProvider['exportClientKeyshares'] = async ({\n    password,\n    walletAccount,\n  }) => {\n    const { signature: signedSessionId } = await getSignedSessionId(sdkClient);\n\n    const waasClient = await getWaasClient();\n\n    await waasClient.exportClientKeyshares({\n      accountAddress: walletAccount.address,\n      authToken: sdkClient.token ?? undefined,\n      password,\n      signedSessionId,\n    });\n  };\n\n  const exportPrivateKey: WaasProvider['exportPrivateKey'] = async ({\n    container,\n    displayContainer,\n    walletAccount,\n    password,\n  }) => {\n    const { signature: signedSessionId } = await getSignedSessionId(sdkClient);\n\n    const waasClient = await getWaasClient();\n\n    const mfaToken = await consumeMfaTokenIfRequiredForAction(\n      { mfaAction: MFAAction.WalletWaasExport },\n      sdkClient\n    );\n\n    // Forward any elevated access token previously obtained via step-up\n    // (e.g. requestExternalAuthElevatedToken) so the backend authorizes\n    // the export under the wallet:export scope.\n    const elevatedAccessToken = getElevatedAccessToken(\n      { scope: TokenScope.Walletexport },\n      sdkClient\n    );\n\n    await waasClient.exportPrivateKey({\n      accountAddress: walletAccount.address,\n      authToken: sdkClient.token ?? undefined,\n      // Exactly one display surface is forwarded: `container` (a\n      // WaasSDKContainer, e.g. a React Native visible WebView) or\n      // `displayContainer` (a DOM element, web). The upstream client enforces\n      // the \"exactly one\" invariant and renders the key inside the surface's\n      // own sandboxed document — it never crosses back to the host.\n      container,\n      displayContainer,\n      elevatedAccessToken,\n      mfaToken,\n      password,\n      signedSessionId,\n    });\n  };\n\n  const restoreUserShareForWalletAccount: WaasProvider['restoreUserShareForWalletAccount'] =\n    async ({ walletAccount }) => {\n      const { signature: signedSessionId } = await getSignedSessionId(\n        sdkClient\n      );\n\n      const waasClient = await getWaasClient();\n\n      await waasClient.getWallet({\n        accountAddress: walletAccount.address,\n        authToken: sdkClient.token ?? undefined,\n        signedSessionId,\n        walletOperation: WalletOperation.SIGN_MESSAGE,\n      });\n    };\n\n  const importPrivateKey: WaasProvider['importPrivateKey'] = async ({\n    privateKey,\n    thresholdSignatureScheme = ThresholdSignatureScheme.TWO_OF_TWO,\n  }) => {\n    const { signature: signedSessionId } = await getSignedSessionId(sdkClient);\n\n    const walletClient = await getWaasClient();\n\n    await walletClient.importPrivateKey({\n      authToken: sdkClient.token ?? undefined,\n      privateKey,\n      signedSessionId,\n      thresholdSignatureScheme,\n    });\n  };\n\n  const refreshWalletAccountShares: WaasProvider['refreshWalletAccountShares'] =\n    async ({ password, walletAccount }) => {\n      const { signature: signedSessionId } = await getSignedSessionId(\n        sdkClient\n      );\n\n      const walletClient = await getWaasClient();\n\n      const mfaToken = await consumeMfaTokenIfRequiredForAction(\n        { mfaAction: MFAAction.WalletWaasRefresh },\n        sdkClient\n      );\n\n      return walletClient.refreshWalletAccountShares({\n        accountAddress: walletAccount.address,\n        authToken: sdkClient.token ?? undefined,\n        mfaToken,\n        password,\n        signedSessionId,\n      });\n    };\n\n  const revokeDelegation: WaasProvider['revokeDelegation'] = async ({\n    password,\n    walletAccount,\n  }) => {\n    const { signature: signedSessionId } = await getSignedSessionId(sdkClient);\n\n    const waasClient = await getWaasClient();\n\n    return waasClient.revokeDelegation({\n      accountAddress: walletAccount.address,\n      authToken: sdkClient.token ?? undefined,\n      password,\n      signedSessionId,\n    });\n  };\n\n  const setWaasWalletAccountPassword: WaasProvider['setWaasWalletAccountPassword'] =\n    async ({ password, walletAccount }) => {\n      const { signature: signedSessionId } = await getSignedSessionId(\n        sdkClient\n      );\n\n      const waasClient = await getWaasClient();\n\n      return waasClient.setPassword({\n        accountAddress: walletAccount.address,\n        authToken: sdkClient.token ?? undefined,\n        newPassword: password,\n        signedSessionId,\n      });\n    };\n\n  const signRawMessage: WaasProvider['signRawMessage'] = async ({\n    message,\n    password,\n    walletAccount,\n  }) => {\n    if (message.length !== RAW_MESSAGE_MESSAGE_REQUIRED_LENGTH) {\n      throw new InvalidParamError(\n        `Message must be ${RAW_MESSAGE_MESSAGE_REQUIRED_LENGTH} characters long`\n      );\n    }\n\n    const { signature: signedSessionId } = await getSignedSessionId(sdkClient);\n\n    const mfaToken = await consumeMfaTokenIfRequiredForAction(\n      { mfaAction: MFAAction.WalletWaasSign },\n      sdkClient\n    );\n\n    const elevatedAccessToken = getElevatedAccessToken(\n      { scope: TokenScope.Walletsign },\n      sdkClient\n    );\n\n    const walletClient = await getWaasClient();\n\n    const signature = await walletClient.signRawMessage({\n      accountAddress: walletAccount.address,\n      authToken: sdkClient.token ?? undefined,\n      elevatedAccessToken,\n      message,\n      mfaToken,\n      password,\n      signedSessionId,\n    });\n\n    return { signature };\n  };\n\n  const destroy: WaasProvider['destroy'] = async (args) => {\n    if (!_waasClient) {\n      return;\n    }\n\n    const waasClient = await getWaasClient();\n    // When a session token expires, we preserve key shares in storage instead\n    // of clearing them. Customers with short-lived sessions (minutes) were\n    // hitting excessive server-side share recovery on every re-login, which\n    // also forced users to re-enter their wallet password since the unlocked\n    // share only lives for the duration of the session.\n    //\n    // This is safe because the waas-sdk separately fingerprints the user\n    // (sub + environment_id) and clears all storage if a different user logs\n    // in. On explicit user-initiated logout, shares are always cleared for\n    // security.\n    if (args?.reason !== 'token-expired') {\n      await waasClient.cleanup();\n    }\n    _waasClient = undefined;\n  };\n\n  const updatePassword: WaasProvider['updatePassword'] = async ({\n    walletAccount,\n    currentPassword,\n    newPassword,\n  }) => {\n    const { signature: signedSessionId } = await getSignedSessionId(sdkClient);\n\n    const waasClient = await getWaasClient();\n\n    return waasClient.updatePassword({\n      accountAddress: walletAccount.address,\n      authToken: sdkClient.token ?? undefined,\n      existingPassword: currentPassword,\n      newPassword,\n      signedSessionId,\n    });\n  };\n\n  const signMessage: WaasProvider['signMessage'] = async ({\n    message,\n    walletAccount,\n  }) => {\n    const { signature: signedSessionId } = await getSignedSessionId(sdkClient);\n\n    const mfaToken = await consumeMfaTokenIfRequiredForAction(\n      { mfaAction: MFAAction.WalletWaasSign },\n      sdkClient\n    );\n\n    const elevatedAccessToken = getElevatedAccessToken(\n      { scope: TokenScope.Walletsign },\n      sdkClient\n    );\n\n    const waasClient = await getWaasClient();\n\n    const signature = await waasClient.signMessage({\n      accountAddress: walletAccount.address,\n      authToken: sdkClient.token ?? undefined,\n      elevatedAccessToken,\n      message,\n      mfaToken,\n      signedSessionId,\n    });\n\n    return { signature };\n  };\n\n  const signSerializedTransaction: WaasProvider['signSerializedTransaction'] =\n    async ({ chainId, serializedTransaction, walletAccount }) => {\n      const { signature: signedSessionId } = await getSignedSessionId(\n        sdkClient\n      );\n\n      const mfaToken = await consumeMfaTokenIfRequiredForAction(\n        { mfaAction: MFAAction.WalletWaasSign },\n        sdkClient\n      );\n\n      const elevatedAccessToken = getElevatedAccessToken(\n        { scope: TokenScope.Walletsign },\n        sdkClient\n      );\n\n      const waasClient = await getWaasClient();\n\n      const signature = await waasClient.signTransaction({\n        authToken: sdkClient.token ?? undefined,\n        chainId,\n        elevatedAccessToken,\n        mfaToken,\n        senderAddress: walletAccount.address,\n        signedSessionId,\n        transaction: serializedTransaction,\n      });\n\n      return { signature };\n    };\n\n  const getWalletRecoveryState: WaasProvider['getWalletRecoveryState'] =\n    async ({ walletAccount }) => {\n      const { signature: signedSessionId } = await getSignedSessionId(\n        sdkClient\n      );\n\n      const waasClient = await getWaasClient();\n\n      return waasClient.getWalletRecoveryState({\n        accountAddress: walletAccount.address,\n        authToken: sdkClient.token ?? undefined,\n        signedSessionId,\n      });\n    };\n\n  const unlockWallet: WaasProvider['unlockWallet'] = async ({\n    password,\n    walletAccount,\n  }) => {\n    const { signature: signedSessionId } = await getSignedSessionId(sdkClient);\n\n    const waasClient = await getWaasClient();\n\n    return waasClient.unlockWallet({\n      accountAddress: walletAccount.address,\n      authToken: sdkClient.token ?? undefined,\n      password,\n      signedSessionId,\n    });\n  };\n\n  return {\n    backupKeySharesToGoogleDrive,\n    createWalletAccount,\n    delegateKeyShares,\n    destroy,\n    exportClientKeyshares,\n    exportPrivateKey,\n    getWaasClient,\n    getWalletRecoveryState,\n    importPrivateKey,\n    refreshWalletAccountShares,\n    restoreUserShareForWalletAccount,\n    revokeDelegation,\n    setWaasWalletAccountPassword,\n    signMessage,\n    signRawMessage,\n    signSerializedTransaction,\n    unlockWallet,\n    updatePassword,\n  };\n};\n","import type { WaasSDKContainer } from '@dynamic-labs-wallet/core';\n\nimport type { DynamicClient } from '../../../client/types/DynamicClient';\nimport type { WalletAccount } from '../../wallets/walletAccount';\nimport { getWaasWalletProviderFromWalletAccount } from '../getWaasWalletProviderFromWalletAccount';\n\ntype ExportWaasPrivateKeyToContainerParams = {\n  container: WaasSDKContainer;\n  password?: string;\n  walletAccount: WalletAccount;\n};\n\n/**\n * Exports the private key for a WaaS wallet account into a caller-provided\n * {@link WaasSDKContainer} (e.g. a visible React Native WebView) instead of a\n * DOM element.\n *\n * This is the container-based counterpart to `exportWaasPrivateKey` (which\n * injects an iframe into a DOM `displayContainer` on web). The export ceremony\n * runs — and the private key is rendered — entirely inside the container's own\n * sandboxed document; the key is never exposed to the host JS layer. The caller\n * owns the container's lifecycle and must call `container.destroy()` when the\n * display is dismissed.\n *\n * @param params.walletAccount - The WaaS wallet account to export the private key from.\n * @param params.container - The container that hosts the secure key display.\n * @param [params.password] - Optional password to decrypt the private key.\n * @param client - The Dynamic client instance. This is an internal API (exposed\n *   only via `@dynamic-labs-sdk/client/waas/core`), so the client is passed\n *   explicitly rather than defaulted — callers resolve it (e.g. via\n *   `getDefaultClient()`) and thread it in.\n * @returns A promise that resolves when the private key export is complete.\n * @not-instrumented\n */\nexport const exportWaasPrivateKeyToContainer = async (\n  { container, password, walletAccount }: ExportWaasPrivateKeyToContainerParams,\n  client: DynamicClient\n) => {\n  const provider = getWaasWalletProviderFromWalletAccount(\n    { walletAccount },\n    client\n  );\n\n  return provider.exportPrivateKey({\n    container,\n    password,\n    walletAccount,\n  });\n};\n","import { WalletProviderEnum } from '@dynamic-labs/sdk-api-core';\n\nimport type { DynamicClient } from '../../../client/types';\nimport { getChainFromVerifiedCredentialChain } from '../../../utils/getChainFromVerifiedCredentialChain';\nimport type { Chain } from '../../chain';\nimport { DYNAMIC_WAAS_METADATA } from '../constants';\n\ntype GetAllUserWaasAddressesForChainParams = {\n  chain: Chain;\n};\n\n/** @not-instrumented */\nexport const getAllUserWaasAddressesForChain = (\n  { chain }: GetAllUserWaasAddressesForChainParams,\n  client: DynamicClient\n): string[] => {\n  if (!client.user) {\n    return [];\n  }\n\n  const waasWalletCredentials =\n    client.user.verifiedCredentials.filter(\n      (credential) =>\n        credential.walletProvider === WalletProviderEnum.EmbeddedWallet &&\n        credential.walletName\n          ?.toLowerCase()\n          .startsWith(DYNAMIC_WAAS_METADATA.normalizedWalletName) &&\n        credential.address &&\n        credential.chain &&\n        getChainFromVerifiedCredentialChain(credential.chain) === chain\n    ) ?? [];\n\n  const waasAddresses: string[] = waasWalletCredentials.map(\n    // casting because we're already filtering out credentials without an address\n    (credential) => credential.address as string\n  );\n\n  return waasAddresses;\n};\n","import { assertPackageVersion } from '@dynamic-labs-sdk/assert-package-version';\n\nimport {\n  name as packageName,\n  version as packageVersion,\n} from '../../package.json';\nassertPackageVersion(packageName, packageVersion);\n\nexport type {\n  BitcoinNetwork,\n  DynamicWalletClient,\n  ThresholdSignatureScheme\n} from '@dynamic-labs-wallet/browser-wallet-client';\nexport type { WaasSDKContainer } from '@dynamic-labs-wallet/core';\nexport { DYNAMIC_WAAS_METADATA } from '../modules/waas/constants';\nexport { createWaasClient } from '../modules/waas/createWaasClient';\nexport { createWaasProvider } from '../modules/waas/createWaasProvider';\nexport { exportWaasPrivateKeyToContainer } from '../modules/waas/exportWaasPrivateKeyToContainer';\nexport { getAllUserWaasAddressesForChain } from '../modules/waas/getAllUserWaasAddressesForChain';\nexport { getWaasChainNameFromChain } from '../modules/waas/getWaasChainNameFromChain';\nexport type {\n  WaasProvider,\n  WaasWalletProvider\n} from '../modules/waas/waas.types';\n\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAgBA,IAAa,yBAAb,cAA4C,UAAU;CACpD,YAAY,EAAE,QAAQ,SAAuC,EAAE,EAAE;AAC/D,QAAM;GACJ;GACA,MAAM;GACN,SACE;GACF,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;;;;;;ACaN,mCAAe,oBAAoB,IAAU,uBAAuB;;;;;;;;;;ACJpE,IAAa,yBAAb,cAA4C,UAAU;CACpD,AAAS;CACT,AAAS;CACT,AAAS;CAET,YAAY,EACV,QACA,cACA,QAAQ,MACR,YACA,mBAC+B;AAC/B,QAAM;GACJ;GACA,MAAM;GACN,SAAS;GACT,SAAS;GACT,MAAM;GACN;GACD,CAAC;AACF,OAAK,SAAS;AACd,OAAK,aAAa;AAClB,OAAK,kBAAkB;;;;;;ACjD3B,MAAMA,wBAAkE;CACtE,mBAAmB;CACnB,oCAAoC;CACpC,oBAAoB;CACpB,uBAAuB;CACvB,qBAAqB;CACrB,2BAA2B;CAC3B,sBAAsB;CACtB,qBAAqB;CACtB;;;;;;;;;;;;;;;;AA6BD,MAAa,4BACX,QAC2B;CAC3B,MAAM,YAAa,OAAO,EAAE;CAM5B,MAAM,yBACJ,SAEA,QAAQ,UAAa,QAAQ;CAE/B,MAAMC,SAAmC,sBAAsB,UAAU,KAAK,GAC1E,sBAAsB,UAAU,QAChC;AACJ,QAAO,IAAI,uBAAuB;EAChC,OAAO,eAAe,QAAQ,MAAM;EACpC;EACA,cACE,UAAU,WAAW,+BAA+B,OAAO;EAC7D,YAAY,UAAU,UAAU;EAChC,iBAAiB,UAAU,UAAU;EACtC,CAAC;;;;;AC/DJ,MAAM,qBAAqB;AAC3B,MAAM,qBAAqB;AAU3B,MAAM,2BACJ,GAAG,KAAK,KAAK,CAAC,SAAS,GAAG,CAAC,GAAG,OAAO,YAAY;;;;;;;;;;;;;;;AAgBnD,MAAa,qCAAuD;AAClE,KAAI,CAACC,6BACH,OAAM,IAAI,2BAA2B,EAAE,YAAY,oBAAoB,CAAC;CAG1E,MAAM,eAAeA;CACrB,MAAM,aAAa,oBAAoB;CAKvC,MAAM,UAAU,IAAI,mBAClB,aACD;CAOD,MAAMC,kBAAkD,EAAE;CAC1D,MAAMC,gBAAiD,EAAE;CACzD,IAAIC,eAA8C;CAClD,IAAI,YAAY;CAEhB,MAAM,aAAa,QAAuB;AACxC,MAAI,UAAW;EACf,MAAM,aAAa,yBAAyB,IAAI;AAKhD,MAAI,WAAW,WAAW,YAAa;AACvC,OAAK,MAAM,WAAW,cACpB,SAAQ,WAAW;;AAIvB,QAAO;EACL,UAAU;AACR,OAAI,UAAW;AACf,eAAY;AAEZ,iBAAc,QAAQ;AACtB,kBAAe;AACf,mBAAgB,SAAS;AACzB,iBAAc,SAAS;AACvB,gBAAa,MAAM,WAAW;;EAGhC,eAAe,CAAC;EAIhB,QAAQ,SAAmC;AACzC,iBAAc,KAAK,QAAQ;AAC3B,gBAAa;IACX,MAAM,QAAQ,cAAc,QAAQ,QAAQ;AAC5C,QAAI,UAAU,GAAI,eAAc,OAAO,OAAO,EAAE;;;EAMpD,UAAU,SAAkC;AAC1C,mBAAgB,KAAK,QAAQ;AAE7B,oBAAiB,QAAQ,YACvB,qBACC,YAAgC;AAC/B,QAAI,QAAQ,eAAe,WAAY;AAEvC,SAAK,MAAM,MAAM,gBACf,IAAG,QAAQ,KAAK;KAGrB;AAID,gBAAa;IACX,MAAM,QAAQ,gBAAgB,QAAQ,QAAQ;AAC9C,QAAI,UAAU,GAAI,iBAAgB,OAAO,OAAO,EAAE;AAClD,QAAI,gBAAgB,WAAW,GAAG;AAChC,mBAAc,QAAQ;AACtB,oBAAe;;;;EAKrB,YAAY,MAA+B;AACzC,gBAAa,YAAY,YAAY,KAAK;;EAkB5C,MAAM,OAAO,KAAa;AACxB,gBAAa,KAAK,YAAY,IAAI,CAAC,MAAM,UAAU;;EAEtD;;;;;;;;;;;;;;;;;;AClIH,MAAa,+BACX,8BAA8B;;;;;;;;;;;;;;;;ACehC,MAAM,6BAA6B,EACjC,YAAY,WAAW,gCACxB;;AAGD,MAAaC,oBAAsC,EAAE,aAAa,WAAW;CAC3E,MAAM,OAAO,QAAQ,OAAO;CAE5B,MAAM,2BAA2B,KAAK,MAAM;CAK5C,MAAM,sBAAsB,mBAC1B,GAAG,KAAK,cAAc,GAAG;AAE3B,QAAO,IAAI,oBACT;EACE,UAAW,gBAAgB,OAAO,GAAG,WAAW;EAChD,WAAW,OAAO,SAAS;EAC3B,aAAa,KAAK,cAAc,2BAA2B,QACzD,WACA,GACD;EACD,oBACE,OAAO,iBAAiB,IAAI,MAAM,YAClC;EACF;EACA,eAAe,KAAK;EAKpB,YAAY,KAAK,UAAU;EAC3B,YAAY,GAAG,gBAAgB,GAAG,KAAK;EACvC,GAAI,4BAA4B,SAC5B,EAAE,GACF,EAAE,0BAA0B;EACjC,EACD;EACE;EAIA,eAAe;GACb,mBAAmB,OAAO,mBAAmB;IAC3C,MAAM,SAAS,MAAM,mBAAmB,EACtC,SAAS,mBAAmB,eAAe,EAC5C,CAAC;AAEF,QAAI,CAAC,OACH,QAAO,EAAE;AAOX,QAAI;AACF,YAAO,KAAK,MAAM,OAAO,SAAS;aAC3B,OAAO;AACd,WAAM,IAAI,uBAAuB,EAC/B,OAAO,iBAAiB,QAAQ,QAAQ,MACzC,CAAC;;;GAIN,sBAAsB,OAAO,mBAAmB;AAC9C,UAAM,qBAAqB,EACzB,SAAS,mBAAmB,eAAe,EAC5C,CAAC;;GAGJ,mBAAmB,OAAO,gBAAgB,WAAW;AACnD,UAAM,mBAAmB,gBAAgB,KAAK,UAAU,OAAO,EAAE;KAC/D,GAAG;KACH,SAAS,mBAAmB,eAAe;KAC5C,CAAC;;GAEL;EACF,CACF;;;;;;AC7GH,MAAa,6BAA6B,UAAyB;AACjE,QAAO,gBAAgB,OAAO,yBAAyB;;;;;ACazD,MAAM,sCAAsC;;AAQ5C,MAAa,sBAAsB,EACjC,WACA,YAC4C;CAC5C,MAAM,SAAS,QAAQ,UAAU,CAAC;CAElC,IAAIC;CAIJ,MAAMC,gBAA+C,YAAY;AAC/D,MAAI,CAAC,aAAa;AAChB,iBAAc,iBACZ,EAAE,WAAW,0BAA0B,MAAM,EAAE,EAC/C,UACD;AACD,SAAM,YAAY,YAAY;;AAEhC,SAAO;;CAGT,MAAMC,+BACJ,OAAO,EAAE,wBAAwB,UAAU,oBAAoB;EAC7D,MAAM,EAAE,WAAW,oBAAoB,MAAM,mBAC3C,UACD;AAID,UAFmB,MAAM,eAAe,EAEtB,6BAA6B;GAC7C,gBAAgB,cAAc;GAC9B,WAAW,UAAU,SAAS;GAC9B;GACA;GACA;GACD,CAAC;;CAGN,MAAMC,sBAA2D,OAC/D,OAAO,EAAE,KACN;AACH,SAAO,MAAM,4CAA4C;GACvD,eAAe,KAAK;GACpB,0BAA0B,KAAK;GAChC,CAAC;EAEF,MAAM,EAAE,WAAW,oBAAoB,MAAM,mBAAmB,UAAU;AAa1E,SATmB,OAFA,MAAM,eAAe,EAEJ,oBAAoB;GACtD,WAAW,UAAU,SAAS;GAC9B,eAAe,KAAK;GACpB,UAAU,KAAK;GACf;GACA,0BACE,KAAK,4BAA4B,yBAAyB;GAC7D,CAAC;;CAKJ,MAAMC,oBAAuD,OAAO,EAClE,UACA,oBACI;EACJ,MAAM,EAAE,WAAW,oBAAoB,MAAM,mBAAmB,UAAU;AAI1E,UAFmB,MAAM,eAAe,EAEtB,kBAAkB;GAClC,gBAAgB,cAAc;GAC9B,WAAW,UAAU,SAAS;GAC9B;GACA;GACD,CAAC;;CAGJ,MAAMC,wBAA+D,OAAO,EAC1E,UACA,oBACI;EACJ,MAAM,EAAE,WAAW,oBAAoB,MAAM,mBAAmB,UAAU;AAI1E,SAFmB,MAAM,eAAe,EAEvB,sBAAsB;GACrC,gBAAgB,cAAc;GAC9B,WAAW,UAAU,SAAS;GAC9B;GACA;GACD,CAAC;;CAGJ,MAAMC,mBAAqD,OAAO,EAChE,WACA,kBACA,eACA,eACI;EACJ,MAAM,EAAE,WAAW,oBAAoB,MAAM,mBAAmB,UAAU;EAE1E,MAAM,aAAa,MAAM,eAAe;EAExC,MAAM,WAAW,MAAM,mCACrB,EAAE,WAAW,UAAU,kBAAkB,EACzC,UACD;EAKD,MAAM,sBAAsBC,iCAC1B,EAAE,OAAO,WAAW,cAAc,EAClC,UACD;AAED,QAAM,WAAW,iBAAiB;GAChC,gBAAgB,cAAc;GAC9B,WAAW,UAAU,SAAS;GAM9B;GACA;GACA;GACA;GACA;GACA;GACD,CAAC;;CAGJ,MAAMC,mCACJ,OAAO,EAAE,oBAAoB;EAC3B,MAAM,EAAE,WAAW,oBAAoB,MAAM,mBAC3C,UACD;AAID,SAFmB,MAAM,eAAe,EAEvB,UAAU;GACzB,gBAAgB,cAAc;GAC9B,WAAW,UAAU,SAAS;GAC9B;GACA,iBAAiB,gBAAgB;GAClC,CAAC;;CAGN,MAAMC,mBAAqD,OAAO,EAChE,YACA,2BAA2B,yBAAyB,iBAChD;EACJ,MAAM,EAAE,WAAW,oBAAoB,MAAM,mBAAmB,UAAU;AAI1E,SAFqB,MAAM,eAAe,EAEvB,iBAAiB;GAClC,WAAW,UAAU,SAAS;GAC9B;GACA;GACA;GACD,CAAC;;CAGJ,MAAMC,6BACJ,OAAO,EAAE,UAAU,oBAAoB;EACrC,MAAM,EAAE,WAAW,oBAAoB,MAAM,mBAC3C,UACD;EAED,MAAM,eAAe,MAAM,eAAe;EAE1C,MAAM,WAAW,MAAM,mCACrB,EAAE,WAAW,UAAU,mBAAmB,EAC1C,UACD;AAED,SAAO,aAAa,2BAA2B;GAC7C,gBAAgB,cAAc;GAC9B,WAAW,UAAU,SAAS;GAC9B;GACA;GACA;GACD,CAAC;;CAGN,MAAMC,mBAAqD,OAAO,EAChE,UACA,oBACI;EACJ,MAAM,EAAE,WAAW,oBAAoB,MAAM,mBAAmB,UAAU;AAI1E,UAFmB,MAAM,eAAe,EAEtB,iBAAiB;GACjC,gBAAgB,cAAc;GAC9B,WAAW,UAAU,SAAS;GAC9B;GACA;GACD,CAAC;;CAGJ,MAAMC,+BACJ,OAAO,EAAE,UAAU,oBAAoB;EACrC,MAAM,EAAE,WAAW,oBAAoB,MAAM,mBAC3C,UACD;AAID,UAFmB,MAAM,eAAe,EAEtB,YAAY;GAC5B,gBAAgB,cAAc;GAC9B,WAAW,UAAU,SAAS;GAC9B,aAAa;GACb;GACD,CAAC;;CAGN,MAAMC,iBAAiD,OAAO,EAC5D,SACA,UACA,oBACI;AACJ,MAAI,QAAQ,WAAW,oCACrB,OAAM,IAAI,kBACR,mBAAmB,oCAAoC,kBACxD;EAGH,MAAM,EAAE,WAAW,oBAAoB,MAAM,mBAAmB,UAAU;EAE1E,MAAM,WAAW,MAAM,mCACrB,EAAE,WAAW,UAAU,gBAAgB,EACvC,UACD;EAED,MAAM,sBAAsBN,iCAC1B,EAAE,OAAO,WAAW,YAAY,EAChC,UACD;AAcD,SAAO,EAAE,WAVS,OAFG,MAAM,eAAe,EAEL,eAAe;GAClD,gBAAgB,cAAc;GAC9B,WAAW,UAAU,SAAS;GAC9B;GACA;GACA;GACA;GACA;GACD,CAAC,EAEkB;;CAGtB,MAAMO,UAAmC,OAAO,SAAS;AACvD,MAAI,CAAC,YACH;EAGF,MAAM,aAAa,MAAM,eAAe;AAWxC,MAAI,MAAM,WAAW,gBACnB,OAAM,WAAW,SAAS;AAE5B,gBAAc;;CAGhB,MAAMC,iBAAiD,OAAO,EAC5D,eACA,iBACA,kBACI;EACJ,MAAM,EAAE,WAAW,oBAAoB,MAAM,mBAAmB,UAAU;AAI1E,UAFmB,MAAM,eAAe,EAEtB,eAAe;GAC/B,gBAAgB,cAAc;GAC9B,WAAW,UAAU,SAAS;GAC9B,kBAAkB;GAClB;GACA;GACD,CAAC;;CAGJ,MAAMC,cAA2C,OAAO,EACtD,SACA,oBACI;EACJ,MAAM,EAAE,WAAW,oBAAoB,MAAM,mBAAmB,UAAU;EAE1E,MAAM,WAAW,MAAM,mCACrB,EAAE,WAAW,UAAU,gBAAgB,EACvC,UACD;EAED,MAAM,sBAAsBT,iCAC1B,EAAE,OAAO,WAAW,YAAY,EAChC,UACD;AAaD,SAAO,EAAE,WATS,OAFC,MAAM,eAAe,EAEL,YAAY;GAC7C,gBAAgB,cAAc;GAC9B,WAAW,UAAU,SAAS;GAC9B;GACA;GACA;GACA;GACD,CAAC,EAEkB;;CAGtB,MAAMU,4BACJ,OAAO,EAAE,SAAS,uBAAuB,oBAAoB;EAC3D,MAAM,EAAE,WAAW,oBAAoB,MAAM,mBAC3C,UACD;EAED,MAAM,WAAW,MAAM,mCACrB,EAAE,WAAW,UAAU,gBAAgB,EACvC,UACD;EAED,MAAM,sBAAsBV,iCAC1B,EAAE,OAAO,WAAW,YAAY,EAChC,UACD;AAcD,SAAO,EAAE,WAVS,OAFC,MAAM,eAAe,EAEL,gBAAgB;GACjD,WAAW,UAAU,SAAS;GAC9B;GACA;GACA;GACA,eAAe,cAAc;GAC7B;GACA,aAAa;GACd,CAAC,EAEkB;;CAGxB,MAAMW,yBACJ,OAAO,EAAE,oBAAoB;EAC3B,MAAM,EAAE,WAAW,oBAAoB,MAAM,mBAC3C,UACD;AAID,UAFmB,MAAM,eAAe,EAEtB,uBAAuB;GACvC,gBAAgB,cAAc;GAC9B,WAAW,UAAU,SAAS;GAC9B;GACD,CAAC;;CAGN,MAAMC,eAA6C,OAAO,EACxD,UACA,oBACI;EACJ,MAAM,EAAE,WAAW,oBAAoB,MAAM,mBAAmB,UAAU;AAI1E,UAFmB,MAAM,eAAe,EAEtB,aAAa;GAC7B,gBAAgB,cAAc;GAC9B,WAAW,UAAU,SAAS;GAC9B;GACA;GACD,CAAC;;AAGJ,QAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD;;;;;;;;;;;;;;;;;;;;;;;;;;;AClZH,MAAa,kCAAkC,OAC7C,EAAE,WAAW,UAAU,iBACvB,WACG;AAMH,QALiB,uCACf,EAAE,eAAe,EACjB,OACD,CAEe,iBAAiB;EAC/B;EACA;EACA;EACD,CAAC;;;;;;ACnCJ,MAAa,mCACX,EAAE,SACF,WACa;AACb,KAAI,CAAC,OAAO,KACV,QAAO,EAAE;AAoBX,SAhBE,OAAO,KAAK,oBAAoB,QAC7B,eACC,WAAW,mBAAmB,mBAAmB,kBACjD,WAAW,YACP,aAAa,CACd,WAAW,sBAAsB,qBAAqB,IACzD,WAAW,WACX,WAAW,SACX,oCAAoC,WAAW,MAAM,KAAK,MAC7D,IAAI,EAAE,EAE6C,KAEnD,eAAe,WAAW,QAC5B;;;;;AC7BH,qBAAqBC,MAAaC,QAAe"}
+{"version":3,"file":"waasCore.native.esm.js","names":["REASON_BY_NATIVE_CODE: Record<string, WebViewLoadFailureReason>","reason: WebViewLoadFailureReason","NativeDynamicWebView","messageHandlers: Array<(data: unknown) => void>","errorHandlers: Array<(error: unknown) => void>","subscription: { remove: () => void } | null","createWaasClient: CreateWaasClient","_waasClient: DynamicWalletClient | undefined","getWaasClient: WaasProvider['getWaasClient']","backupKeySharesToGoogleDrive: WaasProvider['backupKeySharesToGoogleDrive']","createWalletAccount: WaasProvider['createWalletAccount']","delegateKeyShares: WaasProvider['delegateKeyShares']","exportClientKeyshares: WaasProvider['exportClientKeyshares']","exportPrivateKey: WaasProvider['exportPrivateKey']","getElevatedAccessToken","restoreUserShareForWalletAccount: WaasProvider['restoreUserShareForWalletAccount']","importPrivateKey: WaasProvider['importPrivateKey']","refreshWalletAccountShares: WaasProvider['refreshWalletAccountShares']","revokeDelegation: WaasProvider['revokeDelegation']","setWaasWalletAccountPassword: WaasProvider['setWaasWalletAccountPassword']","signRawMessage: WaasProvider['signRawMessage']","destroy: WaasProvider['destroy']","updatePassword: WaasProvider['updatePassword']","signMessage: WaasProvider['signMessage']","signSerializedTransaction: WaasProvider['signSerializedTransaction']","getWalletRecoveryState: WaasProvider['getWalletRecoveryState']","unlockWallet: WaasProvider['unlockWallet']","packageName","packageVersion"],"sources":["../src/errors/CorruptedKeyShareError.ts","../src/turboModules/NativeDynamicWebView.ts","../src/errors/WebViewLoadFailedError.ts","../src/modules/waas/createWaasClient/translateNativeOpenError.ts","../src/modules/waas/createWaasClient/createNativeWaasSDKContainer.native.ts","../src/modules/waas/createWaasClient/createWaasSDKContainer.native.ts","../src/modules/waas/createWaasClient/createWaasClient.native.ts","../src/modules/waas/getWaasChainNameFromChain/getWaasChainNameFromChain.ts","../src/modules/waas/createWaasProvider/createWaasProvider.ts","../src/modules/waas/exportWaasPrivateKeyToContainer/exportWaasPrivateKeyToContainer.ts","../src/modules/waas/getAllUserWaasAddressesForChain/getAllUserWaasAddressesForChain.ts","../src/exports/waasCore.ts"],"sourcesContent":["import { BaseError } from './base';\n\ntype CorruptedKeyShareErrorParams = {\n  cause?: Error | null;\n};\n\n/**\n * Thrown when a persisted client key share cannot be parsed back into its\n * structured form (e.g. a partially-written or corrupted keychain entry).\n *\n * Surfaced as a typed error rather than swallowed so callers can distinguish\n * \"no key share stored\" (empty result) from \"key share exists but is\n * unreadable\" — the latter must never be silently treated as the former,\n * which could trigger an unintended re-keygen that overwrites recoverable\n * material.\n */\nexport class CorruptedKeyShareError extends BaseError {\n  constructor({ cause = null }: CorruptedKeyShareErrorParams = {}) {\n    super({\n      cause,\n      code: 'corrupted_key_share_error',\n      details:\n        'The stored client key share could not be parsed. The secure storage entry may be partially written or corrupted.',\n      docsUrl: null,\n      name: 'CorruptedKeyShareError',\n      shortMessage: 'Stored client key share is corrupted and cannot be read.',\n    });\n  }\n}\n","// This file is a TurboModule spec consumed by React Native codegen.\n// The `interface`, `default export`, and the `react-native` import are hard\n// requirements of the codegen parser and intentionally deviate from the\n// project's conventions. Codegen discovers specs by the `Native*` filename\n// prefix, so this file cannot be renamed to `.native.ts`.\n\nimport { type TurboModule, TurboModuleRegistry } from 'react-native';\nimport type { UnsafeObject } from 'react-native/Libraries/Types/CodegenTypes';\n\nexport interface Spec extends TurboModule {\n  addListener(eventName: string): void;\n  close(instanceId: string): void;\n  /**\n   * Creates a WKWebView for the given instanceId and begins loading `url`.\n   *\n   * Resolves on `didCommit` — i.e. the first byte of a 2xx/3xx HTTP\n   * response has been received and content parsing has started. Page-ready\n   * (e.g. the hosted iframe's `iframe-ready-*` handshake) is a separate\n   * concern and must be observed by the caller via the message bus; this\n   * Promise does not wait for it.\n   *\n   * Rejects with a `code` of `webview_<reason>` where `<reason>` is one of:\n   *   - `invalid_url` — URL string was not parseable\n   *   - `no_host_view` — no foreground window to attach the WebView\n   *   - `http_error` — response status was >= 400 (userInfo contains `DynamicWebViewStatusCode`)\n   *   - `navigation_failed` — DNS, TLS, connection failure, or post-commit abort\n   *   - `cancelled` — `close(instanceId)` was called while this open was pending\n   *   - `instance_busy` — `open` was called for an instanceId that already has an active WebView\n   *   - `content_process_terminated` — the WKWebView WebContent process died during load\n   *   - `unsupported` — the device's Android System WebView is too old to support the secure bridge (Android only)\n   *\n   * rejection codes into typed `WebViewLoadFailedError` instances.\n   */\n  open(instanceId: string, url: string): Promise<void>;\n  removeListeners(count: number): void;\n  sendMessage(instanceId: string, data: UnsafeObject): void;\n}\n\n// eslint-disable-next-line import/no-default-export\nexport default TurboModuleRegistry.get<Spec>('DynamicClientWebView');\n","import { BaseError } from './base/BaseError';\n\n/**\n * Discriminator for `WebViewLoadFailedError`. Identifies the specific\n * failure mode so callers can branch on it (e.g. retry on transient\n * navigation failures, abort on invalid URL, treat HTTP errors distinct\n * from network errors).\n */\nexport type WebViewLoadFailureReason =\n  | 'invalid_url'\n  | 'no_host_view'\n  | 'http_error'\n  | 'navigation_failed'\n  | 'cancelled'\n  | 'instance_busy'\n  | 'content_process_terminated'\n  | 'unsupported';\n\ntype WebViewLoadFailedErrorParams = {\n  cause?: Error | null;\n  reason: WebViewLoadFailureReason;\n  shortMessage: string;\n  /** HTTP response status code. Populated only when `reason === 'http_error'`. */\n  statusCode?: number;\n  /** Underlying OS-level error description (e.g. `NSURLErrorDomain`\n   *  localizedDescription). Populated for `reason === 'navigation_failed'`. */\n  underlyingError?: string;\n};\n\n/**\n * Thrown when `DynamicWebView.open()` (via the WaaS transport provider)\n * fails to establish a usable load. Inspect `reason` to distinguish the\n * failure mode; `statusCode` and `underlyingError` provide structured\n * metadata for the cases that have it.\n */\nexport class WebViewLoadFailedError extends BaseError {\n  readonly reason: WebViewLoadFailureReason;\n  readonly statusCode: number | undefined;\n  readonly underlyingError: string | undefined;\n\n  constructor({\n    reason,\n    shortMessage,\n    cause = null,\n    statusCode,\n    underlyingError,\n  }: WebViewLoadFailedErrorParams) {\n    super({\n      cause,\n      code: 'webview_load_failed_error',\n      details: underlyingError,\n      docsUrl: null,\n      name: 'WebViewLoadFailedError',\n      shortMessage,\n    });\n    this.reason = reason;\n    this.statusCode = statusCode;\n    this.underlyingError = underlyingError;\n  }\n}\n","import {\n  WebViewLoadFailedError,\n  type WebViewLoadFailureReason,\n} from '../../../errors/WebViewLoadFailedError';\n\n// Maps the native-side RCT reject codes (emitted by DynamicWebView.mm) to the\n// JS-level discriminator on `WebViewLoadFailedError`. Keys must stay in sync\n// with the `Reason.*` strings in DynamicWebViewImpl.swift.\nconst REASON_BY_NATIVE_CODE: Record<string, WebViewLoadFailureReason> = {\n  webview_cancelled: 'cancelled',\n  webview_content_process_terminated: 'content_process_terminated',\n  webview_http_error: 'http_error',\n  webview_instance_busy: 'instance_busy',\n  webview_invalid_url: 'invalid_url',\n  webview_navigation_failed: 'navigation_failed',\n  webview_no_host_view: 'no_host_view',\n  webview_unsupported: 'unsupported',\n};\n\n// React Native serializes the native NSError's userInfo onto the JS Error as\n// `userInfo`. These keys must stay in sync with the `errorStatusCodeKey` /\n// `errorUnderlyingDescriptionKey` constants in DynamicWebViewImpl.swift.\ntype NativeRejection = {\n  code?: string;\n  message?: string;\n  userInfo?: {\n    DynamicWebViewStatusCode?: number;\n    DynamicWebViewUnderlying?: string;\n  };\n};\n\n/**\n * Translates a native `DynamicWebView.open()` rejection into a typed\n * `WebViewLoadFailedError`. Maps the native RCT reject code to the JS-level\n * `WebViewLoadFailureReason` discriminator (falling back to\n * `navigation_failed` for unrecognized codes) and carries through the\n * structured `statusCode` / `underlyingError` metadata.\n *\n * The `reason` it produces is the contract `createWaasSDKContainer` branches\n * on — notably `emitError` swallows `cancelled` because that code is only ever\n * produced by our own `close()` teardown (verified on both the iOS and Android\n * native sides). Keep `REASON_BY_NATIVE_CODE` in sync with the native reject\n * codes so that branching stays correct.\n *\n * @not-instrumented\n */\nexport const translateNativeOpenError = (\n  err: unknown\n): WebViewLoadFailedError => {\n  const rejection = (err ?? {}) as NativeRejection;\n\n  // Must check the KEYS of REASON_BY_NATIVE_CODE (the `webview_*` native\n  // codes), not its values (the JS-level reasons) — this is called with the\n  // native code, so checking values made every code fall through to\n  // `navigation_failed` and silently broke the `cancelled` swallow.\n  const isNativeRejectionCode = (\n    code: string | undefined\n  ): code is keyof typeof REASON_BY_NATIVE_CODE =>\n    code != undefined && code in REASON_BY_NATIVE_CODE;\n\n  const reason: WebViewLoadFailureReason = isNativeRejectionCode(rejection.code)\n    ? REASON_BY_NATIVE_CODE[rejection.code]\n    : 'navigation_failed';\n  return new WebViewLoadFailedError({\n    cause: err instanceof Error ? err : null,\n    reason,\n    shortMessage:\n      rejection.message ?? `DynamicWebView open failed (${reason}).`,\n    statusCode: rejection.userInfo?.DynamicWebViewStatusCode,\n    underlyingError: rejection.userInfo?.DynamicWebViewUnderlying,\n  });\n};\n","import type { WaasSDKContainer } from '@dynamic-labs-wallet/core';\nimport { NativeEventEmitter } from 'react-native';\n\nimport { NativeModuleNotLinkedError } from '../../../errors/NativeModuleNotLinkedError';\nimport NativeDynamicWebView from '../../../turboModules/NativeDynamicWebView';\nimport { translateNativeOpenError } from './translateNativeOpenError';\n\nconst NATIVE_MODULE_NAME = 'DynamicClientWebView';\nconst MESSAGE_EVENT_NAME = 'dynamicBridgeMessage';\n\ntype BridgeEventPayload = {\n  data: unknown;\n  instanceId: string;\n};\n\n// The instance ID routes bridge messages to the right container, so it must be\n// globally unique. Use a crypto-random UUID (no Math.random) keyed by timestamp\n// for readability across app reloads.\nconst generateInstanceId = (): string =>\n  `${Date.now().toString(36)}-${crypto.randomUUID()}`;\n\n/**\n * Creates a React Native `WaasSDKContainer` backed by a hidden, headless native\n * WebView (WKWebView on iOS, `android.webkit.WebView` on Android) hosted by the\n * `DynamicClientWebView` TurboModule. Each invocation returns an isolated\n * container with its own instance ID, native WebView, and message routing.\n *\n * Used for MPC operations (signing, key-share management) where there is\n * nothing for the user to see. The VISIBLE private-key export display is no\n * longer a native overlay — it is rendered by the `ExportPrivateKey` component\n * (`@dynamic-labs-sdk/react-native-embedded-wallet-export`) on top of\n * `react-native-webview`, so it scrolls and positions like any RN view.\n *\n * @not-instrumented\n */\nexport const createNativeWaasSDKContainer = (): WaasSDKContainer => {\n  if (!NativeDynamicWebView) {\n    throw new NativeModuleNotLinkedError({ moduleName: NATIVE_MODULE_NAME });\n  }\n\n  const nativeModule = NativeDynamicWebView;\n  const instanceId = generateInstanceId();\n  // Construct the emitter against the TurboModule itself — on New Arch,\n  // `NativeModules[name]` can be a different compatibility-shim object,\n  // and binding `addListener`/`removeListeners` on the wrong instance\n  // leaves `startObserving` in the native emitter never firing.\n  const emitter = new NativeEventEmitter(\n    nativeModule as unknown as ConstructorParameters<typeof NativeEventEmitter>[0]\n  );\n\n  // IframeManager on the WaaS SDK calls `container.onMessage(handler)` twice\n  // on the same container — once to wait for the `iframe-ready-*` handshake,\n  // and once later from `setupWaasSDKContainerBridge` to forward transport\n  // messages. Both handlers need to receive every message, so the container\n  // fans out to all registered handlers instead of enforcing single-register.\n  const messageHandlers: Array<(data: unknown) => void> = [];\n  const errorHandlers: Array<(error: unknown) => void> = [];\n  let subscription: { remove: () => void } | null = null;\n  let destroyed = false;\n\n  const emitError = (err: unknown): void => {\n    if (destroyed) return;\n    const translated = translateNativeOpenError(err);\n    // `cancelled` is only ever produced by our own `close()` teardown path on\n    // the native side. Surfacing it via onError would make consumers like\n    // IframeManager interpret their own destroy as a load failure and retry\n    // against a provider that no longer exists.\n    if (translated.reason === 'cancelled') return;\n    for (const handler of errorHandlers) {\n      handler(translated);\n    }\n  };\n\n  return {\n    destroy() {\n      if (destroyed) return;\n      destroyed = true;\n\n      subscription?.remove();\n      subscription = null;\n      messageHandlers.length = 0;\n      errorHandlers.length = 0;\n      nativeModule.close(instanceId);\n    },\n\n    isAlive: () => !destroyed,\n\n    // Signature is dictated by the upstream WaasSDKContainer interface.\n    // eslint-disable-next-line custom-rules/require-single-object-param\n    onError(handler: (error: unknown) => void) {\n      errorHandlers.push(handler);\n      return () => {\n        const index = errorHandlers.indexOf(handler);\n        if (index !== -1) errorHandlers.splice(index, 1);\n      };\n    },\n\n    // Signature is dictated by the upstream WaasSDKContainer interface.\n    // eslint-disable-next-line custom-rules/require-single-object-param\n    onMessage(handler: (data: unknown) => void) {\n      messageHandlers.push(handler);\n\n      subscription ??= emitter.addListener(\n        MESSAGE_EVENT_NAME,\n        (payload: BridgeEventPayload) => {\n          if (payload.instanceId !== instanceId) return;\n\n          for (const fn of messageHandlers) {\n            fn(payload.data);\n          }\n        }\n      );\n\n      // WaaS client expects onMessage to return an unsubscribe function —\n      // used e.g. to tear down the one-shot handshake handler.\n      return () => {\n        const index = messageHandlers.indexOf(handler);\n        if (index !== -1) messageHandlers.splice(index, 1);\n        if (messageHandlers.length === 0) {\n          subscription?.remove();\n          subscription = null;\n        }\n      };\n    },\n\n    sendMessage(data: Record<string, unknown>) {\n      nativeModule.sendMessage(instanceId, data);\n    },\n    /**\n     * Hands the URL off to the native WebView and resolves immediately.\n     *\n     * Per the `WaasSDKContainer` contract (see `@dynamic-labs-wallet/core`\n     * types), `setUrl` resolves once the URL has been handed off to the\n     * container — NOT when the page has finished loading. Load completion is\n     * signalled later via the `iframe-ready-*` message on `onMessage`, and\n     * navigation failures surface via `onError`. This dispatch-and-forget\n     * shape is load-bearing: the WaaS handshake sequencing expects `setUrl` to\n     * resolve before the first message arrives, so the native open is\n     * intentionally NOT awaited/returned — its rejection (HTTP errors,\n     * navigation failures, preflight errors, etc.) is routed through\n     * `emitError` instead. Do not change this to `return nativeModule.open(...)`.\n     */\n    // Signature is dictated by the upstream WaasSDKContainer interface.\n    // eslint-disable-next-line custom-rules/require-single-object-param\n    async setUrl(url: string) {\n      nativeModule.open(instanceId, url).catch(emitError);\n    },\n  };\n};\n","import type { WaasSDKContainer } from '@dynamic-labs-wallet/core';\n\nimport { createNativeWaasSDKContainer } from './createNativeWaasSDKContainer.native';\n\n/**\n * Creates a React Native `WaasSDKContainer` backed by a hidden, headless native\n * WebView (WKWebView on iOS, `android.webkit.WebView` on Android) hosted by the\n * `DynamicClientWebView` TurboModule. Used for MPC operations (signing, key-share\n * management) where there is nothing for the user to see.\n *\n * For the private-key export display — where the hosted page must render the\n * key for the user — use the `ExportPrivateKey` component from\n * `@dynamic-labs-sdk/react-native-embedded-wallet-export`, which renders the\n * key inside a `react-native-webview` instead of a native overlay.\n *\n * @not-instrumented\n */\nexport const createWaasSDKContainer = (): WaasSDKContainer =>\n  createNativeWaasSDKContainer();\n","import type { AuthMode } from '@dynamic-labs-wallet/browser-wallet-client';\nimport { DynamicWalletClient } from '@dynamic-labs-wallet/browser-wallet-client';\nimport type { SecureStorageAdapter } from '@dynamic-labs-wallet/core';\nimport {\n  ACCESSIBLE,\n  getGenericPassword,\n  resetGenericPassword,\n  setGenericPassword,\n} from 'react-native-keychain';\n\nimport { getCore } from '../../../client/core/getCore';\nimport { CorruptedKeyShareError } from '../../../errors/CorruptedKeyShareError';\nimport { CLIENT_SDK_NAME } from '../../apiClient/constants';\nimport { isCookieEnabled } from '../../projectSettings/isCookieEnabled';\nimport {\n  DEFAULT_WAAS_BASE_API_URL,\n  DEFAULT_WAAS_BASE_MPC_RELAY_API_URL,\n} from '../constants';\nimport type { CreateWaasClient } from './createWaasClient.types';\nimport { createWaasSDKContainer } from './createWaasSDKContainer.native';\n\n/**\n * Keychain security options for the client key share. The share is wallet\n * key material that cannot be re-derived locally, so the options are pinned\n * explicitly rather than inherited from `react-native-keychain` defaults\n * (which vary across versions and platforms).\n *\n * `WHEN_UNLOCKED_THIS_DEVICE_ONLY` keeps the share readable only while the\n * device is unlocked, excludes it from iCloud Keychain sync, and prevents it\n * migrating to a new device on encrypted-backup restore. It deliberately does\n * NOT set `accessControl` (e.g. biometry) — reads must not surface a Face ID /\n * passcode prompt, since the share is read on routine wallet operations.\n */\nconst KEY_SHARE_KEYCHAIN_OPTIONS = {\n  accessible: ACCESSIBLE.WHEN_UNLOCKED_THIS_DEVICE_ONLY,\n} as const;\n\n/** @not-instrumented */\nexport const createWaasClient: CreateWaasClient = ({ chainName }, client) => {\n  const core = getCore(client);\n\n  const additionalTrustedOrigins = core.waas?.additionalTrustedOrigins;\n\n  // Namespace the keychain service by environment so two environmentIds on the\n  // same device (or two dApps that observe the same account) can't collide and\n  // mix key shares. The account address alone is not unique across environments.\n  const getKeyShareService = (accountAddress: string): string =>\n    `${core.environmentId}:${accountAddress}`;\n\n  return new DynamicWalletClient(\n    {\n      authMode: (isCookieEnabled(client) ? 'cookie' : 'header') as AuthMode,\n      authToken: client.token || '',\n      baseApiUrl: (core.apiBaseUrl || DEFAULT_WAAS_BASE_API_URL).replace(\n        '/api/v0',\n        ''\n      ),\n      baseMPCRelayApiUrl:\n        client.projectSettings?.sdk.waas?.relayUrl ||\n        DEFAULT_WAAS_BASE_MPC_RELAY_API_URL,\n      chainName,\n      environmentId: core.environmentId,\n      // On React Native there is no real `window.location.origin`, so the hosted\n      // iframe is told the app's universalLink as its host origin. This must be\n      // allowlisted in the environment's CORS/allowed origins, just like a web\n      // app's domain. Without it the WaaS server rejects the iframe load (400).\n      hostOrigin: core.metadata?.universalLink,\n      sdkVersion: `${CLIENT_SDK_NAME}/${core.version}`,\n      ...(additionalTrustedOrigins == undefined\n        ? {}\n        : { additionalTrustedOrigins }),\n    },\n    {\n      createWaasSDKContainer,\n      // Typed as the upstream SecureStorageAdapter so the key-share method\n      // signatures (and the `shares` payload type) stay compiler-enforced\n      // against the WaaS SDK contract rather than re-declared locally.\n      secureStorage: {\n        getClientKeyShare: async (accountAddress) => {\n          const result = await getGenericPassword({\n            service: getKeyShareService(accountAddress),\n          });\n\n          if (!result) {\n            return [];\n          }\n\n          // A corrupted or partially-written keychain entry makes JSON.parse\n          // throw mid key-share load. Surface a typed error instead of an\n          // unhandled rejection so callers can distinguish \"no share stored\"\n          // (empty result above) from \"share exists but is unreadable\".\n          try {\n            return JSON.parse(result.password);\n          } catch (cause) {\n            throw new CorruptedKeyShareError({\n              cause: cause instanceof Error ? cause : null,\n            });\n          }\n        },\n\n        removeClientKeyShare: async (accountAddress) => {\n          await resetGenericPassword({\n            service: getKeyShareService(accountAddress),\n          });\n        },\n\n        setClientKeyShare: async (accountAddress, shares) => {\n          await setGenericPassword(accountAddress, JSON.stringify(shares), {\n            ...KEY_SHARE_KEYCHAIN_OPTIONS,\n            service: getKeyShareService(accountAddress),\n          });\n        },\n      } satisfies SecureStorageAdapter,\n    }\n  );\n};\n","import type { Chain } from '../../chain';\nimport { CHAINS_INFO_MAP } from '../../wallets/constants';\n\n/** @not-instrumented */\n// eslint-disable-next-line custom-rules/require-single-object-param\nexport const getWaasChainNameFromChain = (chain: Chain): string => {\n  return CHAINS_INFO_MAP[chain].waasChainNameOverride || chain;\n};\n","import {\n  type BitcoinConfig,\n  type DynamicWalletClient,\n  ThresholdSignatureScheme,\n  WalletOperation,\n} from '@dynamic-labs-wallet/browser-wallet-client';\nimport { MFAAction, TokenScope } from '@dynamic-labs/sdk-api-core';\n\nimport { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types/DynamicClient';\nimport { InvalidParamError } from '../../../errors/InvalidParamError';\nimport { getElevatedAccessToken } from '../../auth/getElevatedAccessToken';\nimport type { Chain } from '../../chain';\nimport { consumeMfaTokenIfRequiredForAction } from '../../mfa/consumeMfaTokenIfRequiredForAction';\nimport { getSignedSessionId } from '../../sessionKeys/getSignedSessionId';\nimport { createWaasClient } from '../createWaasClient';\nimport { getWaasChainNameFromChain } from '../getWaasChainNameFromChain';\nimport type { WaasProvider } from '../waas.types';\n\nconst RAW_MESSAGE_MESSAGE_REQUIRED_LENGTH = 64;\n\ntype CreateWaasProviderParams = {\n  chain: Chain;\n  sdkClient: DynamicClient;\n};\n\n/** @not-instrumented */\nexport const createWaasProvider = ({\n  sdkClient,\n  chain,\n}: CreateWaasProviderParams): WaasProvider => {\n  const logger = getCore(sdkClient).logger;\n\n  let _waasClient: DynamicWalletClient | undefined;\n\n  // because the waas client needs the authToken to be set, we can only create it\n  // the first time it's needed, which is after the user has logged in\n  const getWaasClient: WaasProvider['getWaasClient'] = async () => {\n    if (!_waasClient) {\n      _waasClient = createWaasClient(\n        { chainName: getWaasChainNameFromChain(chain) },\n        sdkClient\n      );\n      await _waasClient.initialize();\n    }\n    return _waasClient;\n  };\n\n  const backupKeySharesToGoogleDrive: WaasProvider['backupKeySharesToGoogleDrive'] =\n    async ({ googleDriveAccessToken, password, walletAccount }) => {\n      const { signature: signedSessionId } = await getSignedSessionId(\n        sdkClient\n      );\n\n      const waasClient = await getWaasClient();\n\n      return waasClient.backupKeySharesToGoogleDrive({\n        accountAddress: walletAccount.address,\n        authToken: sdkClient.token ?? undefined,\n        googleDriveAccessToken,\n        password,\n        signedSessionId,\n      });\n    };\n\n  const createWalletAccount: WaasProvider['createWalletAccount'] = async (\n    args = {}\n  ) => {\n    logger.debug('[createWaasProvider] createWalletAccount', {\n      bitcoinConfig: args.bitcoinConfig,\n      thresholdSignatureScheme: args.thresholdSignatureScheme,\n    });\n\n    const { signature: signedSessionId } = await getSignedSessionId(sdkClient);\n\n    const waasClient = await getWaasClient();\n\n    const waasWallet = await waasClient.createWalletAccount({\n      authToken: sdkClient.token ?? undefined,\n      bitcoinConfig: args.bitcoinConfig as BitcoinConfig | undefined,\n      password: args.password,\n      signedSessionId,\n      thresholdSignatureScheme:\n        args.thresholdSignatureScheme ?? ThresholdSignatureScheme.TWO_OF_TWO,\n    });\n\n    return waasWallet;\n  };\n\n  const delegateKeyShares: WaasProvider['delegateKeyShares'] = async ({\n    password,\n    walletAccount,\n  }) => {\n    const { signature: signedSessionId } = await getSignedSessionId(sdkClient);\n\n    const waasClient = await getWaasClient();\n\n    return waasClient.delegateKeyShares({\n      accountAddress: walletAccount.address,\n      authToken: sdkClient.token ?? undefined,\n      password,\n      signedSessionId,\n    });\n  };\n\n  const exportClientKeyshares: WaasProvider['exportClientKeyshares'] = async ({\n    password,\n    walletAccount,\n  }) => {\n    const { signature: signedSessionId } = await getSignedSessionId(sdkClient);\n\n    const waasClient = await getWaasClient();\n\n    await waasClient.exportClientKeyshares({\n      accountAddress: walletAccount.address,\n      authToken: sdkClient.token ?? undefined,\n      password,\n      signedSessionId,\n    });\n  };\n\n  const exportPrivateKey: WaasProvider['exportPrivateKey'] = async ({\n    container,\n    displayContainer,\n    walletAccount,\n    password,\n  }) => {\n    const { signature: signedSessionId } = await getSignedSessionId(sdkClient);\n\n    const waasClient = await getWaasClient();\n\n    const mfaToken = await consumeMfaTokenIfRequiredForAction(\n      { mfaAction: MFAAction.WalletWaasExport },\n      sdkClient\n    );\n\n    // Forward any elevated access token previously obtained via step-up\n    // (e.g. requestExternalAuthElevatedToken) so the backend authorizes\n    // the export under the wallet:export scope.\n    const elevatedAccessToken = getElevatedAccessToken(\n      { scope: TokenScope.Walletexport },\n      sdkClient\n    );\n\n    await waasClient.exportPrivateKey({\n      accountAddress: walletAccount.address,\n      authToken: sdkClient.token ?? undefined,\n      // Exactly one display surface is forwarded: `container` (a\n      // WaasSDKContainer, e.g. a React Native visible WebView) or\n      // `displayContainer` (a DOM element, web). The upstream client enforces\n      // the \"exactly one\" invariant and renders the key inside the surface's\n      // own sandboxed document — it never crosses back to the host.\n      container,\n      displayContainer,\n      elevatedAccessToken,\n      mfaToken,\n      password,\n      signedSessionId,\n    });\n  };\n\n  const restoreUserShareForWalletAccount: WaasProvider['restoreUserShareForWalletAccount'] =\n    async ({ walletAccount }) => {\n      const { signature: signedSessionId } = await getSignedSessionId(\n        sdkClient\n      );\n\n      const waasClient = await getWaasClient();\n\n      await waasClient.getWallet({\n        accountAddress: walletAccount.address,\n        authToken: sdkClient.token ?? undefined,\n        signedSessionId,\n        walletOperation: WalletOperation.SIGN_MESSAGE,\n      });\n    };\n\n  const importPrivateKey: WaasProvider['importPrivateKey'] = async ({\n    privateKey,\n    thresholdSignatureScheme = ThresholdSignatureScheme.TWO_OF_TWO,\n  }) => {\n    const { signature: signedSessionId } = await getSignedSessionId(sdkClient);\n\n    const walletClient = await getWaasClient();\n\n    await walletClient.importPrivateKey({\n      authToken: sdkClient.token ?? undefined,\n      privateKey,\n      signedSessionId,\n      thresholdSignatureScheme,\n    });\n  };\n\n  const refreshWalletAccountShares: WaasProvider['refreshWalletAccountShares'] =\n    async ({ password, walletAccount }) => {\n      const { signature: signedSessionId } = await getSignedSessionId(\n        sdkClient\n      );\n\n      const walletClient = await getWaasClient();\n\n      const mfaToken = await consumeMfaTokenIfRequiredForAction(\n        { mfaAction: MFAAction.WalletWaasRefresh },\n        sdkClient\n      );\n\n      return walletClient.refreshWalletAccountShares({\n        accountAddress: walletAccount.address,\n        authToken: sdkClient.token ?? undefined,\n        mfaToken,\n        password,\n        signedSessionId,\n      });\n    };\n\n  const revokeDelegation: WaasProvider['revokeDelegation'] = async ({\n    password,\n    walletAccount,\n  }) => {\n    const { signature: signedSessionId } = await getSignedSessionId(sdkClient);\n\n    const waasClient = await getWaasClient();\n\n    return waasClient.revokeDelegation({\n      accountAddress: walletAccount.address,\n      authToken: sdkClient.token ?? undefined,\n      password,\n      signedSessionId,\n    });\n  };\n\n  const setWaasWalletAccountPassword: WaasProvider['setWaasWalletAccountPassword'] =\n    async ({ password, walletAccount }) => {\n      const { signature: signedSessionId } = await getSignedSessionId(\n        sdkClient\n      );\n\n      const waasClient = await getWaasClient();\n\n      return waasClient.setPassword({\n        accountAddress: walletAccount.address,\n        authToken: sdkClient.token ?? undefined,\n        newPassword: password,\n        signedSessionId,\n      });\n    };\n\n  const signRawMessage: WaasProvider['signRawMessage'] = async ({\n    message,\n    password,\n    walletAccount,\n  }) => {\n    if (message.length !== RAW_MESSAGE_MESSAGE_REQUIRED_LENGTH) {\n      throw new InvalidParamError(\n        `Message must be ${RAW_MESSAGE_MESSAGE_REQUIRED_LENGTH} characters long`\n      );\n    }\n\n    const { signature: signedSessionId } = await getSignedSessionId(sdkClient);\n\n    const mfaToken = await consumeMfaTokenIfRequiredForAction(\n      { mfaAction: MFAAction.WalletWaasSign },\n      sdkClient\n    );\n\n    const elevatedAccessToken = getElevatedAccessToken(\n      { scope: TokenScope.Walletsign },\n      sdkClient\n    );\n\n    const walletClient = await getWaasClient();\n\n    const signature = await walletClient.signRawMessage({\n      accountAddress: walletAccount.address,\n      authToken: sdkClient.token ?? undefined,\n      elevatedAccessToken,\n      message,\n      mfaToken,\n      password,\n      signedSessionId,\n    });\n\n    return { signature };\n  };\n\n  const destroy: WaasProvider['destroy'] = async (args) => {\n    if (!_waasClient) {\n      return;\n    }\n\n    const waasClient = await getWaasClient();\n    // When a session token expires, we preserve key shares in storage instead\n    // of clearing them. Customers with short-lived sessions (minutes) were\n    // hitting excessive server-side share recovery on every re-login, which\n    // also forced users to re-enter their wallet password since the unlocked\n    // share only lives for the duration of the session.\n    //\n    // This is safe because the waas-sdk separately fingerprints the user\n    // (sub + environment_id) and clears all storage if a different user logs\n    // in. On explicit user-initiated logout, shares are always cleared for\n    // security.\n    if (args?.reason !== 'token-expired') {\n      await waasClient.cleanup();\n    }\n    _waasClient = undefined;\n  };\n\n  const updatePassword: WaasProvider['updatePassword'] = async ({\n    walletAccount,\n    currentPassword,\n    newPassword,\n  }) => {\n    const { signature: signedSessionId } = await getSignedSessionId(sdkClient);\n\n    const waasClient = await getWaasClient();\n\n    return waasClient.updatePassword({\n      accountAddress: walletAccount.address,\n      authToken: sdkClient.token ?? undefined,\n      existingPassword: currentPassword,\n      newPassword,\n      signedSessionId,\n    });\n  };\n\n  const signMessage: WaasProvider['signMessage'] = async ({\n    message,\n    walletAccount,\n  }) => {\n    const { signature: signedSessionId } = await getSignedSessionId(sdkClient);\n\n    const mfaToken = await consumeMfaTokenIfRequiredForAction(\n      { mfaAction: MFAAction.WalletWaasSign },\n      sdkClient\n    );\n\n    const elevatedAccessToken = getElevatedAccessToken(\n      { scope: TokenScope.Walletsign },\n      sdkClient\n    );\n\n    const waasClient = await getWaasClient();\n\n    const signature = await waasClient.signMessage({\n      accountAddress: walletAccount.address,\n      authToken: sdkClient.token ?? undefined,\n      elevatedAccessToken,\n      message,\n      mfaToken,\n      signedSessionId,\n    });\n\n    return { signature };\n  };\n\n  const signSerializedTransaction: WaasProvider['signSerializedTransaction'] =\n    async ({ chainId, serializedTransaction, walletAccount }) => {\n      const { signature: signedSessionId } = await getSignedSessionId(\n        sdkClient\n      );\n\n      const mfaToken = await consumeMfaTokenIfRequiredForAction(\n        { mfaAction: MFAAction.WalletWaasSign },\n        sdkClient\n      );\n\n      const elevatedAccessToken = getElevatedAccessToken(\n        { scope: TokenScope.Walletsign },\n        sdkClient\n      );\n\n      const waasClient = await getWaasClient();\n\n      const signature = await waasClient.signTransaction({\n        authToken: sdkClient.token ?? undefined,\n        chainId,\n        elevatedAccessToken,\n        mfaToken,\n        senderAddress: walletAccount.address,\n        signedSessionId,\n        transaction: serializedTransaction,\n      });\n\n      return { signature };\n    };\n\n  const getWalletRecoveryState: WaasProvider['getWalletRecoveryState'] =\n    async ({ walletAccount }) => {\n      const { signature: signedSessionId } = await getSignedSessionId(\n        sdkClient\n      );\n\n      const waasClient = await getWaasClient();\n\n      return waasClient.getWalletRecoveryState({\n        accountAddress: walletAccount.address,\n        authToken: sdkClient.token ?? undefined,\n        signedSessionId,\n      });\n    };\n\n  const unlockWallet: WaasProvider['unlockWallet'] = async ({\n    password,\n    walletAccount,\n  }) => {\n    const { signature: signedSessionId } = await getSignedSessionId(sdkClient);\n\n    const waasClient = await getWaasClient();\n\n    return waasClient.unlockWallet({\n      accountAddress: walletAccount.address,\n      authToken: sdkClient.token ?? undefined,\n      password,\n      signedSessionId,\n    });\n  };\n\n  return {\n    backupKeySharesToGoogleDrive,\n    createWalletAccount,\n    delegateKeyShares,\n    destroy,\n    exportClientKeyshares,\n    exportPrivateKey,\n    getWaasClient,\n    getWalletRecoveryState,\n    importPrivateKey,\n    refreshWalletAccountShares,\n    restoreUserShareForWalletAccount,\n    revokeDelegation,\n    setWaasWalletAccountPassword,\n    signMessage,\n    signRawMessage,\n    signSerializedTransaction,\n    unlockWallet,\n    updatePassword,\n  };\n};\n","import type { WaasSDKContainer } from '@dynamic-labs-wallet/core';\n\nimport type { DynamicClient } from '../../../client/types/DynamicClient';\nimport type { WalletAccount } from '../../wallets/walletAccount';\nimport { getWaasWalletProviderFromWalletAccount } from '../getWaasWalletProviderFromWalletAccount';\n\ntype ExportWaasPrivateKeyToContainerParams = {\n  container: WaasSDKContainer;\n  password?: string;\n  walletAccount: WalletAccount;\n};\n\n/**\n * Exports the private key for a WaaS wallet account into a caller-provided\n * {@link WaasSDKContainer} (e.g. a visible React Native WebView) instead of a\n * DOM element.\n *\n * This is the container-based counterpart to `exportWaasPrivateKey` (which\n * injects an iframe into a DOM `displayContainer` on web). The export ceremony\n * runs — and the private key is rendered — entirely inside the container's own\n * sandboxed document; the key is never exposed to the host JS layer. The caller\n * owns the container's lifecycle and must call `container.destroy()` when the\n * display is dismissed.\n *\n * @param params.walletAccount - The WaaS wallet account to export the private key from.\n * @param params.container - The container that hosts the secure key display.\n * @param [params.password] - Optional password to decrypt the private key.\n * @param client - The Dynamic client instance. This is an internal API (exposed\n *   only via `@dynamic-labs-sdk/client/waas/core`), so the client is passed\n *   explicitly rather than defaulted — callers resolve it (e.g. via\n *   `getDefaultClient()`) and thread it in.\n * @returns A promise that resolves when the private key export is complete.\n * @not-instrumented\n */\nexport const exportWaasPrivateKeyToContainer = async (\n  { container, password, walletAccount }: ExportWaasPrivateKeyToContainerParams,\n  client: DynamicClient\n) => {\n  const provider = getWaasWalletProviderFromWalletAccount(\n    { walletAccount },\n    client\n  );\n\n  return provider.exportPrivateKey({\n    container,\n    password,\n    walletAccount,\n  });\n};\n","import { WalletProviderEnum } from '@dynamic-labs/sdk-api-core';\n\nimport type { DynamicClient } from '../../../client/types';\nimport { getChainFromVerifiedCredentialChain } from '../../../utils/getChainFromVerifiedCredentialChain';\nimport type { Chain } from '../../chain';\nimport { DYNAMIC_WAAS_METADATA } from '../constants';\n\ntype GetAllUserWaasAddressesForChainParams = {\n  chain: Chain;\n};\n\n/** @not-instrumented */\nexport const getAllUserWaasAddressesForChain = (\n  { chain }: GetAllUserWaasAddressesForChainParams,\n  client: DynamicClient\n): string[] => {\n  if (!client.user) {\n    return [];\n  }\n\n  const waasWalletCredentials =\n    client.user.verifiedCredentials.filter(\n      (credential) =>\n        credential.walletProvider === WalletProviderEnum.EmbeddedWallet &&\n        credential.walletName\n          ?.toLowerCase()\n          .startsWith(DYNAMIC_WAAS_METADATA.normalizedWalletName) &&\n        credential.address &&\n        credential.chain &&\n        getChainFromVerifiedCredentialChain(credential.chain) === chain\n    ) ?? [];\n\n  const waasAddresses: string[] = waasWalletCredentials.map(\n    // casting because we're already filtering out credentials without an address\n    (credential) => credential.address as string\n  );\n\n  return waasAddresses;\n};\n","import { assertPackageVersion } from '@dynamic-labs-sdk/assert-package-version';\n\nimport {\n  name as packageName,\n  version as packageVersion,\n} from '../../package.json';\nassertPackageVersion(packageName, packageVersion);\n\nexport type {\n  BitcoinNetwork,\n  DynamicWalletClient,\n  ThresholdSignatureScheme\n} from '@dynamic-labs-wallet/browser-wallet-client';\nexport type { WaasSDKContainer } from '@dynamic-labs-wallet/core';\nexport { DYNAMIC_WAAS_METADATA } from '../modules/waas/constants';\nexport { createWaasClient } from '../modules/waas/createWaasClient';\nexport { createWaasProvider } from '../modules/waas/createWaasProvider';\nexport { exportWaasPrivateKeyToContainer } from '../modules/waas/exportWaasPrivateKeyToContainer';\nexport { getAllUserWaasAddressesForChain } from '../modules/waas/getAllUserWaasAddressesForChain';\nexport { getWaasChainNameFromChain } from '../modules/waas/getWaasChainNameFromChain';\nexport { preconnectWaasIframe } from '../modules/waas/preconnectWaasIframe';\nexport type {\n  WaasProvider,\n  WaasWalletProvider\n} from '../modules/waas/waas.types';\n\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAgBA,IAAa,yBAAb,cAA4C,UAAU;CACpD,YAAY,EAAE,QAAQ,SAAuC,EAAE,EAAE;AAC/D,QAAM;GACJ;GACA,MAAM;GACN,SACE;GACF,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;;;;;;ACaN,mCAAe,oBAAoB,IAAU,uBAAuB;;;;;;;;;;ACJpE,IAAa,yBAAb,cAA4C,UAAU;CACpD,AAAS;CACT,AAAS;CACT,AAAS;CAET,YAAY,EACV,QACA,cACA,QAAQ,MACR,YACA,mBAC+B;AAC/B,QAAM;GACJ;GACA,MAAM;GACN,SAAS;GACT,SAAS;GACT,MAAM;GACN;GACD,CAAC;AACF,OAAK,SAAS;AACd,OAAK,aAAa;AAClB,OAAK,kBAAkB;;;;;;ACjD3B,MAAMA,wBAAkE;CACtE,mBAAmB;CACnB,oCAAoC;CACpC,oBAAoB;CACpB,uBAAuB;CACvB,qBAAqB;CACrB,2BAA2B;CAC3B,sBAAsB;CACtB,qBAAqB;CACtB;;;;;;;;;;;;;;;;AA6BD,MAAa,4BACX,QAC2B;CAC3B,MAAM,YAAa,OAAO,EAAE;CAM5B,MAAM,yBACJ,SAEA,QAAQ,UAAa,QAAQ;CAE/B,MAAMC,SAAmC,sBAAsB,UAAU,KAAK,GAC1E,sBAAsB,UAAU,QAChC;AACJ,QAAO,IAAI,uBAAuB;EAChC,OAAO,eAAe,QAAQ,MAAM;EACpC;EACA,cACE,UAAU,WAAW,+BAA+B,OAAO;EAC7D,YAAY,UAAU,UAAU;EAChC,iBAAiB,UAAU,UAAU;EACtC,CAAC;;;;;AC/DJ,MAAM,qBAAqB;AAC3B,MAAM,qBAAqB;AAU3B,MAAM,2BACJ,GAAG,KAAK,KAAK,CAAC,SAAS,GAAG,CAAC,GAAG,OAAO,YAAY;;;;;;;;;;;;;;;AAgBnD,MAAa,qCAAuD;AAClE,KAAI,CAACC,6BACH,OAAM,IAAI,2BAA2B,EAAE,YAAY,oBAAoB,CAAC;CAG1E,MAAM,eAAeA;CACrB,MAAM,aAAa,oBAAoB;CAKvC,MAAM,UAAU,IAAI,mBAClB,aACD;CAOD,MAAMC,kBAAkD,EAAE;CAC1D,MAAMC,gBAAiD,EAAE;CACzD,IAAIC,eAA8C;CAClD,IAAI,YAAY;CAEhB,MAAM,aAAa,QAAuB;AACxC,MAAI,UAAW;EACf,MAAM,aAAa,yBAAyB,IAAI;AAKhD,MAAI,WAAW,WAAW,YAAa;AACvC,OAAK,MAAM,WAAW,cACpB,SAAQ,WAAW;;AAIvB,QAAO;EACL,UAAU;AACR,OAAI,UAAW;AACf,eAAY;AAEZ,iBAAc,QAAQ;AACtB,kBAAe;AACf,mBAAgB,SAAS;AACzB,iBAAc,SAAS;AACvB,gBAAa,MAAM,WAAW;;EAGhC,eAAe,CAAC;EAIhB,QAAQ,SAAmC;AACzC,iBAAc,KAAK,QAAQ;AAC3B,gBAAa;IACX,MAAM,QAAQ,cAAc,QAAQ,QAAQ;AAC5C,QAAI,UAAU,GAAI,eAAc,OAAO,OAAO,EAAE;;;EAMpD,UAAU,SAAkC;AAC1C,mBAAgB,KAAK,QAAQ;AAE7B,oBAAiB,QAAQ,YACvB,qBACC,YAAgC;AAC/B,QAAI,QAAQ,eAAe,WAAY;AAEvC,SAAK,MAAM,MAAM,gBACf,IAAG,QAAQ,KAAK;KAGrB;AAID,gBAAa;IACX,MAAM,QAAQ,gBAAgB,QAAQ,QAAQ;AAC9C,QAAI,UAAU,GAAI,iBAAgB,OAAO,OAAO,EAAE;AAClD,QAAI,gBAAgB,WAAW,GAAG;AAChC,mBAAc,QAAQ;AACtB,oBAAe;;;;EAKrB,YAAY,MAA+B;AACzC,gBAAa,YAAY,YAAY,KAAK;;EAkB5C,MAAM,OAAO,KAAa;AACxB,gBAAa,KAAK,YAAY,IAAI,CAAC,MAAM,UAAU;;EAEtD;;;;;;;;;;;;;;;;;;AClIH,MAAa,+BACX,8BAA8B;;;;;;;;;;;;;;;;ACehC,MAAM,6BAA6B,EACjC,YAAY,WAAW,gCACxB;;AAGD,MAAaC,oBAAsC,EAAE,aAAa,WAAW;CAC3E,MAAM,OAAO,QAAQ,OAAO;CAE5B,MAAM,2BAA2B,KAAK,MAAM;CAK5C,MAAM,sBAAsB,mBAC1B,GAAG,KAAK,cAAc,GAAG;AAE3B,QAAO,IAAI,oBACT;EACE,UAAW,gBAAgB,OAAO,GAAG,WAAW;EAChD,WAAW,OAAO,SAAS;EAC3B,aAAa,KAAK,cAAc,2BAA2B,QACzD,WACA,GACD;EACD,oBACE,OAAO,iBAAiB,IAAI,MAAM,YAClC;EACF;EACA,eAAe,KAAK;EAKpB,YAAY,KAAK,UAAU;EAC3B,YAAY,GAAG,gBAAgB,GAAG,KAAK;EACvC,GAAI,4BAA4B,SAC5B,EAAE,GACF,EAAE,0BAA0B;EACjC,EACD;EACE;EAIA,eAAe;GACb,mBAAmB,OAAO,mBAAmB;IAC3C,MAAM,SAAS,MAAM,mBAAmB,EACtC,SAAS,mBAAmB,eAAe,EAC5C,CAAC;AAEF,QAAI,CAAC,OACH,QAAO,EAAE;AAOX,QAAI;AACF,YAAO,KAAK,MAAM,OAAO,SAAS;aAC3B,OAAO;AACd,WAAM,IAAI,uBAAuB,EAC/B,OAAO,iBAAiB,QAAQ,QAAQ,MACzC,CAAC;;;GAIN,sBAAsB,OAAO,mBAAmB;AAC9C,UAAM,qBAAqB,EACzB,SAAS,mBAAmB,eAAe,EAC5C,CAAC;;GAGJ,mBAAmB,OAAO,gBAAgB,WAAW;AACnD,UAAM,mBAAmB,gBAAgB,KAAK,UAAU,OAAO,EAAE;KAC/D,GAAG;KACH,SAAS,mBAAmB,eAAe;KAC5C,CAAC;;GAEL;EACF,CACF;;;;;;AC7GH,MAAa,6BAA6B,UAAyB;AACjE,QAAO,gBAAgB,OAAO,yBAAyB;;;;;ACazD,MAAM,sCAAsC;;AAQ5C,MAAa,sBAAsB,EACjC,WACA,YAC4C;CAC5C,MAAM,SAAS,QAAQ,UAAU,CAAC;CAElC,IAAIC;CAIJ,MAAMC,gBAA+C,YAAY;AAC/D,MAAI,CAAC,aAAa;AAChB,iBAAc,iBACZ,EAAE,WAAW,0BAA0B,MAAM,EAAE,EAC/C,UACD;AACD,SAAM,YAAY,YAAY;;AAEhC,SAAO;;CAGT,MAAMC,+BACJ,OAAO,EAAE,wBAAwB,UAAU,oBAAoB;EAC7D,MAAM,EAAE,WAAW,oBAAoB,MAAM,mBAC3C,UACD;AAID,UAFmB,MAAM,eAAe,EAEtB,6BAA6B;GAC7C,gBAAgB,cAAc;GAC9B,WAAW,UAAU,SAAS;GAC9B;GACA;GACA;GACD,CAAC;;CAGN,MAAMC,sBAA2D,OAC/D,OAAO,EAAE,KACN;AACH,SAAO,MAAM,4CAA4C;GACvD,eAAe,KAAK;GACpB,0BAA0B,KAAK;GAChC,CAAC;EAEF,MAAM,EAAE,WAAW,oBAAoB,MAAM,mBAAmB,UAAU;AAa1E,SATmB,OAFA,MAAM,eAAe,EAEJ,oBAAoB;GACtD,WAAW,UAAU,SAAS;GAC9B,eAAe,KAAK;GACpB,UAAU,KAAK;GACf;GACA,0BACE,KAAK,4BAA4B,yBAAyB;GAC7D,CAAC;;CAKJ,MAAMC,oBAAuD,OAAO,EAClE,UACA,oBACI;EACJ,MAAM,EAAE,WAAW,oBAAoB,MAAM,mBAAmB,UAAU;AAI1E,UAFmB,MAAM,eAAe,EAEtB,kBAAkB;GAClC,gBAAgB,cAAc;GAC9B,WAAW,UAAU,SAAS;GAC9B;GACA;GACD,CAAC;;CAGJ,MAAMC,wBAA+D,OAAO,EAC1E,UACA,oBACI;EACJ,MAAM,EAAE,WAAW,oBAAoB,MAAM,mBAAmB,UAAU;AAI1E,SAFmB,MAAM,eAAe,EAEvB,sBAAsB;GACrC,gBAAgB,cAAc;GAC9B,WAAW,UAAU,SAAS;GAC9B;GACA;GACD,CAAC;;CAGJ,MAAMC,mBAAqD,OAAO,EAChE,WACA,kBACA,eACA,eACI;EACJ,MAAM,EAAE,WAAW,oBAAoB,MAAM,mBAAmB,UAAU;EAE1E,MAAM,aAAa,MAAM,eAAe;EAExC,MAAM,WAAW,MAAM,mCACrB,EAAE,WAAW,UAAU,kBAAkB,EACzC,UACD;EAKD,MAAM,sBAAsBC,iCAC1B,EAAE,OAAO,WAAW,cAAc,EAClC,UACD;AAED,QAAM,WAAW,iBAAiB;GAChC,gBAAgB,cAAc;GAC9B,WAAW,UAAU,SAAS;GAM9B;GACA;GACA;GACA;GACA;GACA;GACD,CAAC;;CAGJ,MAAMC,mCACJ,OAAO,EAAE,oBAAoB;EAC3B,MAAM,EAAE,WAAW,oBAAoB,MAAM,mBAC3C,UACD;AAID,SAFmB,MAAM,eAAe,EAEvB,UAAU;GACzB,gBAAgB,cAAc;GAC9B,WAAW,UAAU,SAAS;GAC9B;GACA,iBAAiB,gBAAgB;GAClC,CAAC;;CAGN,MAAMC,mBAAqD,OAAO,EAChE,YACA,2BAA2B,yBAAyB,iBAChD;EACJ,MAAM,EAAE,WAAW,oBAAoB,MAAM,mBAAmB,UAAU;AAI1E,SAFqB,MAAM,eAAe,EAEvB,iBAAiB;GAClC,WAAW,UAAU,SAAS;GAC9B;GACA;GACA;GACD,CAAC;;CAGJ,MAAMC,6BACJ,OAAO,EAAE,UAAU,oBAAoB;EACrC,MAAM,EAAE,WAAW,oBAAoB,MAAM,mBAC3C,UACD;EAED,MAAM,eAAe,MAAM,eAAe;EAE1C,MAAM,WAAW,MAAM,mCACrB,EAAE,WAAW,UAAU,mBAAmB,EAC1C,UACD;AAED,SAAO,aAAa,2BAA2B;GAC7C,gBAAgB,cAAc;GAC9B,WAAW,UAAU,SAAS;GAC9B;GACA;GACA;GACD,CAAC;;CAGN,MAAMC,mBAAqD,OAAO,EAChE,UACA,oBACI;EACJ,MAAM,EAAE,WAAW,oBAAoB,MAAM,mBAAmB,UAAU;AAI1E,UAFmB,MAAM,eAAe,EAEtB,iBAAiB;GACjC,gBAAgB,cAAc;GAC9B,WAAW,UAAU,SAAS;GAC9B;GACA;GACD,CAAC;;CAGJ,MAAMC,+BACJ,OAAO,EAAE,UAAU,oBAAoB;EACrC,MAAM,EAAE,WAAW,oBAAoB,MAAM,mBAC3C,UACD;AAID,UAFmB,MAAM,eAAe,EAEtB,YAAY;GAC5B,gBAAgB,cAAc;GAC9B,WAAW,UAAU,SAAS;GAC9B,aAAa;GACb;GACD,CAAC;;CAGN,MAAMC,iBAAiD,OAAO,EAC5D,SACA,UACA,oBACI;AACJ,MAAI,QAAQ,WAAW,oCACrB,OAAM,IAAI,kBACR,mBAAmB,oCAAoC,kBACxD;EAGH,MAAM,EAAE,WAAW,oBAAoB,MAAM,mBAAmB,UAAU;EAE1E,MAAM,WAAW,MAAM,mCACrB,EAAE,WAAW,UAAU,gBAAgB,EACvC,UACD;EAED,MAAM,sBAAsBN,iCAC1B,EAAE,OAAO,WAAW,YAAY,EAChC,UACD;AAcD,SAAO,EAAE,WAVS,OAFG,MAAM,eAAe,EAEL,eAAe;GAClD,gBAAgB,cAAc;GAC9B,WAAW,UAAU,SAAS;GAC9B;GACA;GACA;GACA;GACA;GACD,CAAC,EAEkB;;CAGtB,MAAMO,UAAmC,OAAO,SAAS;AACvD,MAAI,CAAC,YACH;EAGF,MAAM,aAAa,MAAM,eAAe;AAWxC,MAAI,MAAM,WAAW,gBACnB,OAAM,WAAW,SAAS;AAE5B,gBAAc;;CAGhB,MAAMC,iBAAiD,OAAO,EAC5D,eACA,iBACA,kBACI;EACJ,MAAM,EAAE,WAAW,oBAAoB,MAAM,mBAAmB,UAAU;AAI1E,UAFmB,MAAM,eAAe,EAEtB,eAAe;GAC/B,gBAAgB,cAAc;GAC9B,WAAW,UAAU,SAAS;GAC9B,kBAAkB;GAClB;GACA;GACD,CAAC;;CAGJ,MAAMC,cAA2C,OAAO,EACtD,SACA,oBACI;EACJ,MAAM,EAAE,WAAW,oBAAoB,MAAM,mBAAmB,UAAU;EAE1E,MAAM,WAAW,MAAM,mCACrB,EAAE,WAAW,UAAU,gBAAgB,EACvC,UACD;EAED,MAAM,sBAAsBT,iCAC1B,EAAE,OAAO,WAAW,YAAY,EAChC,UACD;AAaD,SAAO,EAAE,WATS,OAFC,MAAM,eAAe,EAEL,YAAY;GAC7C,gBAAgB,cAAc;GAC9B,WAAW,UAAU,SAAS;GAC9B;GACA;GACA;GACA;GACD,CAAC,EAEkB;;CAGtB,MAAMU,4BACJ,OAAO,EAAE,SAAS,uBAAuB,oBAAoB;EAC3D,MAAM,EAAE,WAAW,oBAAoB,MAAM,mBAC3C,UACD;EAED,MAAM,WAAW,MAAM,mCACrB,EAAE,WAAW,UAAU,gBAAgB,EACvC,UACD;EAED,MAAM,sBAAsBV,iCAC1B,EAAE,OAAO,WAAW,YAAY,EAChC,UACD;AAcD,SAAO,EAAE,WAVS,OAFC,MAAM,eAAe,EAEL,gBAAgB;GACjD,WAAW,UAAU,SAAS;GAC9B;GACA;GACA;GACA,eAAe,cAAc;GAC7B;GACA,aAAa;GACd,CAAC,EAEkB;;CAGxB,MAAMW,yBACJ,OAAO,EAAE,oBAAoB;EAC3B,MAAM,EAAE,WAAW,oBAAoB,MAAM,mBAC3C,UACD;AAID,UAFmB,MAAM,eAAe,EAEtB,uBAAuB;GACvC,gBAAgB,cAAc;GAC9B,WAAW,UAAU,SAAS;GAC9B;GACD,CAAC;;CAGN,MAAMC,eAA6C,OAAO,EACxD,UACA,oBACI;EACJ,MAAM,EAAE,WAAW,oBAAoB,MAAM,mBAAmB,UAAU;AAI1E,UAFmB,MAAM,eAAe,EAEtB,aAAa;GAC7B,gBAAgB,cAAc;GAC9B,WAAW,UAAU,SAAS;GAC9B;GACA;GACD,CAAC;;AAGJ,QAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD;;;;;;;;;;;;;;;;;;;;;;;;;;;AClZH,MAAa,kCAAkC,OAC7C,EAAE,WAAW,UAAU,iBACvB,WACG;AAMH,QALiB,uCACf,EAAE,eAAe,EACjB,OACD,CAEe,iBAAiB;EAC/B;EACA;EACA;EACD,CAAC;;;;;;ACnCJ,MAAa,mCACX,EAAE,SACF,WACa;AACb,KAAI,CAAC,OAAO,KACV,QAAO,EAAE;AAoBX,SAhBE,OAAO,KAAK,oBAAoB,QAC7B,eACC,WAAW,mBAAmB,mBAAmB,kBACjD,WAAW,YACP,aAAa,CACd,WAAW,sBAAsB,qBAAqB,IACzD,WAAW,WACX,WAAW,SACX,oCAAoC,WAAW,MAAM,KAAK,MAC7D,IAAI,EAAE,EAE6C,KAEnD,eAAe,WAAW,QAC5B;;;;;AC7BH,qBAAqBC,MAAaC,QAAe"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dynamic-labs-sdk/client",
-  "version": "1.10.0",
+  "version": "1.12.0",
   "type": "module",
   "main": "./dist/index.cjs",
   "module": "./dist/index.esm.js",
@@ -56,7 +56,7 @@
     "buffer": "6.0.3",
     "eventemitter3": "5.0.1",
     "zod": "4.0.5",
-    "@dynamic-labs-sdk/assert-package-version": "1.10.0"
+    "@dynamic-labs-sdk/assert-package-version": "1.12.0"
   },
   "devDependencies": {
     "@inrupt/jest-jsdom-polyfills": "4.0.5",

package/dist/NotWaasWalletAccountError-CkH85cm5.native.esm.js

@@ -1,18 +0,0 @@
-import { Z as BaseError } from "./InvalidParamError-BxBgwLQB.native.esm.js";
-
-//#region src/errors/NotWaasWalletAccountError.ts
-var NotWaasWalletAccountError = class extends BaseError {
-	constructor({ walletAddress }) {
-		super({
-			cause: null,
-			code: "not_waas_wallet_account_error",
-			docsUrl: null,
-			name: "NotWaasWalletAccountError",
-			shortMessage: `Wallet account ${walletAddress} is not a Dynamic WaaS wallet account`
-		});
-	}
-};
-
-//#endregion
-export { NotWaasWalletAccountError as t };
-//# sourceMappingURL=NotWaasWalletAccountError-CkH85cm5.native.esm.js.map

package/dist/NotWaasWalletAccountError-CkH85cm5.native.esm.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"NotWaasWalletAccountError-CkH85cm5.native.esm.js","names":[],"sources":["../src/errors/NotWaasWalletAccountError.ts"],"sourcesContent":["import { BaseError } from './base';\n\ntype NotWaasWalletAccountErrorParams = {\n  walletAddress: string;\n};\n\nexport class NotWaasWalletAccountError extends BaseError {\n  constructor({ walletAddress }: NotWaasWalletAccountErrorParams) {\n    super({\n      cause: null,\n      code: 'not_waas_wallet_account_error',\n      docsUrl: null,\n      name: 'NotWaasWalletAccountError',\n      shortMessage: `Wallet account ${walletAddress} is not a Dynamic WaaS wallet account`,\n    });\n  }\n}\n"],"mappings":";;;AAMA,IAAa,4BAAb,cAA+C,UAAU;CACvD,YAAY,EAAE,iBAAkD;AAC9D,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,kBAAkB,cAAc;GAC/C,CAAC"}

package/dist/NotWaasWalletAccountError-DO313zza.esm.js

@@ -1,18 +0,0 @@
-import { st as BaseError } from "./InvalidParamError-BmFmxeXx.esm.js";
-
-//#region src/errors/NotWaasWalletAccountError.ts
-var NotWaasWalletAccountError = class extends BaseError {
-	constructor({ walletAddress }) {
-		super({
-			cause: null,
-			code: "not_waas_wallet_account_error",
-			docsUrl: null,
-			name: "NotWaasWalletAccountError",
-			shortMessage: `Wallet account ${walletAddress} is not a Dynamic WaaS wallet account`
-		});
-	}
-};
-
-//#endregion
-export { NotWaasWalletAccountError as t };
-//# sourceMappingURL=NotWaasWalletAccountError-DO313zza.esm.js.map

package/dist/NotWaasWalletAccountError-DO313zza.esm.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"NotWaasWalletAccountError-DO313zza.esm.js","names":[],"sources":["../src/errors/NotWaasWalletAccountError.ts"],"sourcesContent":["import { BaseError } from './base';\n\ntype NotWaasWalletAccountErrorParams = {\n  walletAddress: string;\n};\n\nexport class NotWaasWalletAccountError extends BaseError {\n  constructor({ walletAddress }: NotWaasWalletAccountErrorParams) {\n    super({\n      cause: null,\n      code: 'not_waas_wallet_account_error',\n      docsUrl: null,\n      name: 'NotWaasWalletAccountError',\n      shortMessage: `Wallet account ${walletAddress} is not a Dynamic WaaS wallet account`,\n    });\n  }\n}\n"],"mappings":";;;AAMA,IAAa,4BAAb,cAA+C,UAAU;CACvD,YAAY,EAAE,iBAAkD;AAC9D,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,kBAAkB,cAAc;GAC/C,CAAC"}

package/dist/NotWaasWalletAccountError-cIj987D7.cjs

@@ -1,23 +0,0 @@
-const require_InvalidParamError = require('./InvalidParamError-CGZRSAOn.cjs');
-
-//#region src/errors/NotWaasWalletAccountError.ts
-var NotWaasWalletAccountError = class extends require_InvalidParamError.BaseError {
-	constructor({ walletAddress }) {
-		super({
-			cause: null,
-			code: "not_waas_wallet_account_error",
-			docsUrl: null,
-			name: "NotWaasWalletAccountError",
-			shortMessage: `Wallet account ${walletAddress} is not a Dynamic WaaS wallet account`
-		});
-	}
-};
-
-//#endregion
-Object.defineProperty(exports, 'NotWaasWalletAccountError', {
-  enumerable: true,
-  get: function () {
-    return NotWaasWalletAccountError;
-  }
-});
-//# sourceMappingURL=NotWaasWalletAccountError-cIj987D7.cjs.map

package/dist/NotWaasWalletAccountError-cIj987D7.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"NotWaasWalletAccountError-cIj987D7.cjs","names":["BaseError"],"sources":["../src/errors/NotWaasWalletAccountError.ts"],"sourcesContent":["import { BaseError } from './base';\n\ntype NotWaasWalletAccountErrorParams = {\n  walletAddress: string;\n};\n\nexport class NotWaasWalletAccountError extends BaseError {\n  constructor({ walletAddress }: NotWaasWalletAccountErrorParams) {\n    super({\n      cause: null,\n      code: 'not_waas_wallet_account_error',\n      docsUrl: null,\n      name: 'NotWaasWalletAccountError',\n      shortMessage: `Wallet account ${walletAddress} is not a Dynamic WaaS wallet account`,\n    });\n  }\n}\n"],"mappings":";;;AAMA,IAAa,4BAAb,cAA+CA,oCAAU;CACvD,YAAY,EAAE,iBAAkD;AAC9D,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,kBAAkB,cAAc;GAC/C,CAAC"}

package/dist/getNetworkProviderFromNetworkId-CxGbMwFL.native.esm.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"getNetworkProviderFromNetworkId-CxGbMwFL.native.esm.js","names":["item: StorageFormat<typeof value>","walletProvidersMap: Map<string, WalletProvider>","BufferPolyfill","resolve: (value: T) => void","reject: (reason?: unknown) => void","LOG_LEVELS: Record<LogLevel, number>","eventEmitter: LoggerEventEmitter","EventEmitter","minLevel: LogLevel","createKeychainService: CreateKeychainService","NativeKeychain","ABLY_STATE_TO_REALTIME_STATE: Record<string, RealtimeConnectionState>","ablyClient: BaseRealtime | undefined","connectionState: RealtimeConnectionState","connect: RealtimeService['connect']","disconnect: RealtimeService['disconnect']","subscribe: RealtimeService['subscribe']","handler: messageCallback<InboundMessage>","unsubscribe: RealtimeService['unsubscribe']","publish: RealtimeService['publish']","connectRequest: ConnectRequest","filteredUnverifiedWalletAccounts: UnverifiedWalletAccount[]","newWalletAccounts: WalletAccount[]","unverifiedWalletAccountsToUpdate: WalletAccount[]","verifiedCredentialIdToWalletProviderKeyMap: Record<string, string>","reconciledWalletAccounts: WalletAccount[]","suffixFields: string[]","networkProvider"],"sources":["../src/utils/isEqualShallow/isEqualShallow.ts","../src/utils/observable/subscribeWithSelector/subscribeWithSelector.ts","../src/utils/retryOnFail/InvalidRetryOnFailCallError.ts","../src/utils/retryOnFail/retryOnFail.ts","../src/modules/auth/isSignedIn/isSignedIn.ts","../src/services/storage/createLocalStorageAdapter/createLocalStorageAdapter.native.ts","../src/errors/InvalidStorageSet.ts","../src/services/storage/createStorage/formatForStorage/isValidDateISOString/isValidDateISOString.ts","../src/services/storage/createStorage/formatForStorage/storageFormat.ts","../src/services/storage/createStorage/createStorage.ts","../src/services/storage/createStorageKeySchema/createStorageKeySchema.ts","../src/modules/projectSettings/fetchProjectSettings/projectSettingsExpirationScheme.ts","../src/modules/projectSettings/fetchProjectSettings/fetchProjectSettings.ts","../src/modules/sessionKeys/generateSessionKeys/generateSessionKeys.ts","../src/modules/wallets/utils/getAvailableWalletProvidersFromWalletAccounts/getAvailableWalletProvidersFromWalletAccounts.ts","../src/modules/wallets/destroyWalletProviders/destroyWalletProviders.ts","../src/modules/auth/logoutWithReason/logoutWithReason.ts","../src/utils/getBuffer/getBuffer.ts","../src/utils/isServerSideRendering/isServerSideRendering.native.ts","../src/modules/initializeClient/consts.ts","../src/utils/deferredPromise/createDeferredPromise.ts","../src/errors/CannotTrackError.ts","../src/services/crossTabBroadcast/crossTabBroadcast.schema.ts","../src/services/crossTabBroadcast/createCrossTabBroadcast/createCrossTabBroadcast.ts","../src/services/logger/createLogger/createLogger.ts","../src/turboModules/NativeKeychain.ts","../src/utils/base64urlFromBytes/base64urlFromBytes.ts","../src/utils/bufferToHex/bufferToHex.ts","../src/utils/bytesFromBase64url/bytesFromBase64url.ts","../src/utils/compressRawPublicKey/compressRawPublicKey.ts","../src/utils/derToP1363/InvalidDERSignatureError.ts","../src/utils/derToP1363/derToP1363.ts","../src/services/keychain/createKeychainService/ImportKeyNotSupportedError.ts","../src/services/keychain/createKeychainService/KeyNotFoundError.ts","../src/services/keychain/createKeychainService/createKeychainService.native.ts","../src/errors/InvalidRealtimePublishError.ts","../src/errors/RealtimeNotConnectedError.ts","../src/services/realtime/createRealtimeService/createRealtimeService.ts","../src/utils/getKeychainIndexedDBName/getKeychainIndexedDBName.ts","../src/errors/NoNetworkProvidersError.ts","../src/errors/WalletAlreadyLinkedToAnotherUserError.ts","../src/errors/MethodNotImplementedError.ts","../src/utils/getAppMetadata/getAppMetadata.ts","../src/modules/captcha/isCaptchaRequired/isCaptchaRequired.ts","../src/modules/captcha/consumeCaptchaToken/consumeCaptchaToken.ts","../src/modules/captcha/setCaptchaToken/setCaptchaToken.ts","../src/modules/extension/hasExtension/hasExtension.ts","../src/modules/auth/createVisit/createVisit.ts","../src/modules/wallets/unverifiedWalletAccounts/setUnverifiedWalletAccounts/setUnverifiedWalletAccounts.ts","../src/modules/wallets/walletProvider/walletProviderKeyMap/updateWalletProviderKeysForVerifiedCredentials/updateWalletProviderKeysForVerifiedCredentials.ts","../src/modules/wallets/reconcileWalletAccountsAgainstClient/reconcileWalletAccountsAgainstClient.ts","../src/modules/wallets/utils/formatSignInMessage/formatSignInMessage.ts","../src/modules/wallets/utils/getSignInMessage/createSignInMessageStatement/createSignInMessageStatement.ts","../src/modules/wallets/unverifiedWalletAccounts/removeUnverifiedWalletAccount/removeUnverifiedWalletAccount.ts","../src/utils/isError/isError.ts","../src/utils/isErrorWithCode/isErrorWithCode.ts","../src/modules/wallets/verifyMessageSignatureOwnership/verifyMessageSignatureOwnership.ts","../src/modules/wallets/networks/getSdkChainFromApiChainName/getSdkChainFromApiChainName.ts","../src/modules/wallets/networks/getNetworksData/getNetworksData.ts","../src/modules/wallets/networks/networkProviderBuilderRegistry/createNetworkProviderBuilderRegistry/createNetworkProviderBuilderRegistry.ts","../src/modules/wallets/networks/networkProviderBuilderRegistry/getNetworkProviderBuilderRegistry/getNetworkProviderBuilderRegistry.ts","../src/modules/wallets/networks/getNetworkProviders/getNetworkProviders.ts","../src/modules/wallets/networks/getNetworkProviderFromNetworkId/getNetworkProviderFromNetworkId.ts"],"sourcesContent":["/**\n * Shallow compare two objects.\n *\n * Source: https://github.com/pmndrs/zustand/blob/main/src/vanilla/shallow.ts\n  * @not-instrumented\n */\n// eslint-disable-next-line custom-rules/require-single-object-param\nexport const isEqualShallow = <T>(objA: T, objB: T) => {\n  if (Object.is(objA, objB)) return true;\n\n  if (\n    typeof objA !== 'object' ||\n    objA === null ||\n    typeof objB !== 'object' ||\n    objB === null\n  ) {\n    return objA === objB;\n  }\n\n  if (objA instanceof Map && objB instanceof Map) {\n    if (objA.size !== objB.size) return false;\n\n    for (const [key, value] of objA) {\n      if (!Object.is(value, objB.get(key))) return false;\n    }\n\n    return true;\n  }\n\n  if (objA instanceof Set && objB instanceof Set) {\n    if (objA.size !== objB.size) return false;\n\n    for (const value of objA) {\n      if (!objB.has(value)) return false;\n    }\n    return true;\n  }\n\n  const keysA = Object.keys(objA);\n\n  if (keysA.length !== Object.keys(objB).length) return false;\n\n  for (const keyA of keysA) {\n    if (\n      !Object.prototype.hasOwnProperty.call(objB, keyA as string) ||\n      !Object.is(objA[keyA as keyof T], objB[keyA as keyof T])\n    ) {\n      return false;\n    }\n  }\n\n  if (objA.constructor !== objB.constructor) return false;\n\n  return true;\n};\n","import { isEqualShallow } from '../../isEqualShallow';\nimport type { ObservableState } from '../observable.types';\n\n/**\n * Allows subscribing to a slice of the state.\n * The slice is a computation of the states.\n *\n * The callback will only be called when the slice has changed.\n * Change is determined by shallow comparison.\n *\n * Returns a function to unsubscribe the callback.\n  * @not-instrumented\n */\nexport const subscribeWithSelector =\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  <T extends Record<string, unknown>, Slice>(\n    observable: ObservableState<T>,\n    selector: (value: T) => Slice\n  ) =>\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  (callback: (slice: Slice) => void) => {\n    let lastSlice = selector(observable.get());\n\n    return observable.subscribe((value) => {\n      const nextSlice = selector(value);\n\n      if (isEqualShallow(nextSlice, lastSlice)) return;\n\n      lastSlice = nextSlice;\n\n      callback(nextSlice);\n    });\n  };\n","import { BaseError } from '../../errors/base';\n\n/**\n * This error is thrown when the `retryOnFail` function is called with an invalid\n * number of retries (i.e. less than 0).\n */\nexport class InvalidRetryOnFailCallError extends BaseError {\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  constructor(maxRetries: number) {\n    super({\n      cause: null,\n      code: 'invalid_retry_on_fail_call_error',\n      docsUrl: null,\n      name: 'InvalidRetryOnFailCallError',\n      shortMessage: `Invalid retries parameter for retryOnFail call: ${maxRetries}`,\n    });\n  }\n}\n","import { InvalidRetryOnFailCallError } from './InvalidRetryOnFailCallError';\n\nexport type RetryOnFailParams<T> = {\n  /**\n   * The delay between retries in milliseconds.\n   */\n  delay?: number;\n  /**\n   * The function to call.\n   */\n  fn: () => Promise<T>;\n  /**\n   * The maximum number of retries.\n   *\n   * When set to 0, the function will be called only once and is\n   * therefore equivalent to calling the function directly.\n   */\n  maxRetries: number;\n};\n\n/** @not-instrumented */\nexport const retryOnFail = async <T>({\n  delay = 0,\n  fn,\n  maxRetries,\n}: RetryOnFailParams<T>) => {\n  for (let retry = 0; retry <= maxRetries; retry++) {\n    try {\n      return await fn();\n    } catch (error) {\n      if (retry >= maxRetries) {\n        throw error;\n      }\n\n      if (delay > 0) {\n        await new Promise((resolve) => setTimeout(resolve, delay));\n      }\n    }\n  }\n\n  /**\n   * Reaching this point should never happen and this\n   * error is thrown to help us debug the issue.\n   */\n  throw new InvalidRetryOnFailCallError(maxRetries);\n};\n","import { getDefaultClient } from '../../../client/defaultClient';\nimport { getWalletAccounts } from '../../wallets/getWalletAccounts';\n\n/**\n * Checks if the user is currently signed in to the Dynamic client.\n *\n * The client is considered to be in a signed in state if a user has\n * authenticated or if the client has at least one wallet connected.\n *\n * @deprecated What counts as \"signed in\" is your app's business logic, not the\n * SDK's. This helper bakes in one opinion (a user OR any connected wallet),\n * which rarely matches every app and forces a dependency on us for every\n * variation. Compose your own check from the underlying primitives instead —\n * e.g. `Boolean(client.user) || isAnyWalletAccountConnected(client)` — and\n * layer in whatever your app requires (device registration, completed\n * onboarding, satisfied MFA, a required embedded wallet, …). See the\n * \"Check if signed in\" guide:\n * https://www.dynamic.xyz/docs/javascript/user-session-management\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns True if the user is signed in, false otherwise.\n * @not-instrumented\n */\nexport const isSignedIn = (client = getDefaultClient()) =>\n  Boolean(client.user || getWalletAccounts(client).length > 0);\n","import AsyncStorage from '@react-native-async-storage/async-storage';\nimport {\n  getGenericPassword,\n  resetGenericPassword,\n  setGenericPassword,\n} from 'react-native-keychain';\n\nimport type { StorageAdapter } from '../storage.types';\n\nconst NAMESPACE = 'dynamic';\n\nconst namespaceKey = (key: string): string => `${NAMESPACE}:${key}`;\n\n/**\n * Creates a localStorage adapter for React Native.\n * Routes operations based on the `storageTier` option:\n * - `'default'`: uses AsyncStorage\n * - `'secure'`: uses react-native-keychain\n * @not-instrumented\n */\nexport const createLocalStorageAdapter = (): StorageAdapter => {\n  return {\n    getItem: async (key, options) => {\n      if (options.storageTier === 'secure') {\n        const result = await getGenericPassword({ service: key });\n\n        if (!result) {\n          return null;\n        }\n\n        return result.password;\n      } else {\n        return AsyncStorage.getItem(namespaceKey(key));\n      }\n    },\n    removeItem: async (key, options) => {\n      if (options.storageTier === 'secure') {\n        await resetGenericPassword({ service: key });\n      } else {\n        await AsyncStorage.removeItem(namespaceKey(key));\n      }\n    },\n    setItem: async (key, value, options) => {\n      if (options.storageTier === 'secure') {\n        await setGenericPassword(key, value, { service: key });\n      } else {\n        await AsyncStorage.setItem(namespaceKey(key), value);\n      }\n    },\n  };\n};\n","import { BaseError } from './base';\n\ntype InvalidStorageSetParams = {\n  key: string;\n  value: string;\n};\n\nexport class InvalidStorageSet extends BaseError {\n  constructor({ key, value }: InvalidStorageSetParams) {\n    super({\n      cause: null,\n      code: 'invalid_storage_set',\n      docsUrl: null,\n      metaMessages: [`key: ${key}`, value],\n      name: 'InvalidStorageSet',\n      shortMessage: 'Tried to store a value that does not match the schema',\n    });\n  }\n}\n","/**\n * Returns whether the given string is a valid ISO date string.\n *\n * Does not support timezone offsets.\n  * @not-instrumented\n */\n// eslint-disable-next-line custom-rules/require-single-object-param\nexport const isValidDateISOString = (value: string): boolean => {\n  const date = new Date(value);\n\n  return !isNaN(date.getTime()) && date.toISOString() === value;\n};\n","/* eslint-disable custom-rules/function-name-matches-filename */\nimport type { StorageFormat } from '../../storage.types';\nimport { isValidDateISOString } from './isValidDateISOString';\n\nconst DATE_PREFIX = '__DATE__';\n\n/** @not-instrumented */\nexport const formatForStorage = (value: unknown) => {\n  const item: StorageFormat<typeof value> = { value };\n\n  return JSON.stringify(item, (_, entry) => {\n    // You might think that entry here would be a Date and one could simply do \"entry instanceof Date\",\n    // but actually it will be a string already (no idea why JSON.stringify does this)\n    if (isValidDateISOString(entry)) {\n      return `${DATE_PREFIX}${entry}`;\n    }\n\n    return entry;\n  });\n};\n\n/** @not-instrumented */\n// eslint-disable-next-line custom-rules/one-function-per-file, custom-rules/require-single-object-param\nexport const parseFromStorage = <T>(value: string): StorageFormat<T> | null => {\n  try {\n    const parsed = JSON.parse(value, (_, entry) => {\n      if (typeof entry === 'string' && entry.startsWith(DATE_PREFIX)) {\n        return new Date(entry.slice(DATE_PREFIX.length));\n      }\n\n      return entry;\n    }) as StorageFormat<T>;\n\n    return parsed;\n    // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  } catch (error) {\n    return null;\n  }\n};\n","import type { Storage, StorageAdapter, StorageAdapterOptions, StorageTier } from '../storage.types';\nimport { InvalidStorageSet } from './../../../errors/InvalidStorageSet';\nimport { formatForStorage } from './formatForStorage';\nimport { parseFromStorage } from './formatForStorage/storageFormat';\n\ntype CreateWebStorageParams = {\n  prefix?: string;\n  storageAdapter: StorageAdapter;\n};\n\n/**\n * Creates a Storage service to interact with storage adapter.\n * Reads the `storageTier` from each key's config and passes it\n * to the adapter on every operation, defaulting to `'default'`.\n * @not-instrumented\n */\nexport const createStorage = ({\n  prefix = '',\n  storageAdapter,\n}: CreateWebStorageParams): Storage => {\n  const getPrefixedKey = (key: string) => (prefix ? `${prefix}_${key}` : key);\n\n  const getAdapterOptions = (storageTier?: StorageTier): StorageAdapterOptions => ({\n    storageTier: storageTier ?? 'default',\n  });\n\n  return {\n    getItem: async (storageKeySchema) => {\n      const prefixedKey = getPrefixedKey(storageKeySchema.key);\n      const options = getAdapterOptions(storageKeySchema.config?.storageTier);\n\n      const rawItem = await storageAdapter.getItem(prefixedKey, options);\n\n      const parsedItem = rawItem ? parseFromStorage(rawItem) : null;\n\n      /**\n       * The item saved to localStorage may be malformed.\n       * In this case, we remove it and return null.\n       */\n      if (parsedItem !== null) {\n        const parsed = storageKeySchema.schema.safeParse(parsedItem.value);\n\n        if (parsed.success) {\n          return parsed.data;\n        }\n      }\n\n      /**\n       * The item saved to localStorage may be malformed.\n       * In this case, we remove it and return null.\n       */\n\n      await storageAdapter.removeItem(prefixedKey, options);\n\n      return null;\n    },\n\n    removeItem: async (storageKeySchema) => {\n      await storageAdapter.removeItem(\n        getPrefixedKey(storageKeySchema.key),\n        getAdapterOptions(storageKeySchema.config?.storageTier),\n      );\n    },\n\n    setItem: async (storageKeySchema, value) => {\n      const parsed = storageKeySchema.schema.safeParse(value);\n\n      if (!parsed.success) {\n        throw new InvalidStorageSet({\n          key: storageKeySchema.key,\n          value: JSON.stringify(value),\n        });\n      }\n\n      const item = formatForStorage(parsed.data);\n\n      await storageAdapter.setItem(\n        getPrefixedKey(storageKeySchema.key),\n        item,\n        getAdapterOptions(storageKeySchema.config?.storageTier),\n      );\n    },\n  };\n};\n","import type * as z from 'zod/mini';\n\nimport type { StorageKeySchema, StorageKeySchemaConfig } from '../storage.types';\n\n/** @not-instrumented */\nexport const createStorageKeySchema = <T>(params: {\n  config?: StorageKeySchemaConfig;\n  key: string;\n  schema: z.ZodMiniType<T>;\n}): StorageKeySchema<T> => {\n  return params;\n};\n","import * as z from 'zod/mini';\n\nimport { createStorageKeySchema } from '../../../services/storage';\n\n/**\n * The schema to track the expiration time of the project settings.\n */\nexport const projectSettingsExpirationStorageKeySchema = createStorageKeySchema(\n  {\n    key: 'projectSettingsExpiration',\n    schema: z.number(),\n  }\n);\n","import { getCore } from '../../../client/core/getCore';\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport { retryOnFail } from '../../../utils/retryOnFail';\nimport { createApiClient } from '../../apiClient';\nimport { CLIENT_SDK_NAME } from '../../apiClient/constants';\nimport { isSignedIn } from '../../auth/isSignedIn';\nimport { projectSettingsExpirationStorageKeySchema } from './projectSettingsExpirationScheme';\n\n/**\n * Expiration time of the project settings in milliseconds.\n */\nexport const PROJECT_SETTINGS_EXPIRATION_TIME = 1000 * 60 * 5; // 5 minutes\n\n/**\n * Fetches and updates the project settings from the API.\n *\n * This function retrieves the latest project configuration settings\n * from Dynamic's servers, including authentication options, enabled chains,\n * and security configurations. The settings are cached for performance.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns A promise that resolves to the updated project settings.\n * @not-instrumented\n */\nexport const fetchProjectSettings = async (client = getDefaultClient()) => {\n  const core = getCore(client);\n\n  const currentExpiration = await core.storage.getItem(\n    projectSettingsExpirationStorageKeySchema\n  );\n\n  const hasProjectSettings = Boolean(client.projectSettings);\n  const isExpired = currentExpiration && currentExpiration < Date.now();\n\n  // We want to cache the project settings if its valid and user is connected.\n  // This avoids unnecessary API calls and speeds up the initial load.\n  if (hasProjectSettings && !isExpired && isSignedIn(client)) {\n    return client.projectSettings;\n  }\n\n  const apiClient = createApiClient({}, client);\n\n  core.logger.debug('[fetchProjectSettings] Fetching project settings...');\n\n  const doFetch = async () =>\n    apiClient.getEnvironmentSettings(\n      {\n        environmentId: core.environmentId,\n        sdkVersion: `${CLIENT_SDK_NAME}/${core.version}`,\n      },\n      {\n        credentials: 'omit',\n      }\n    );\n\n  const projectSettings = await retryOnFail({\n    fn: doFetch,\n    maxRetries: 2,\n  });\n\n  core.state.set({ projectSettings: projectSettings ?? null });\n\n  await core.storage.setItem(\n    projectSettingsExpirationStorageKeySchema,\n    Date.now() + PROJECT_SETTINGS_EXPIRATION_TIME\n  );\n\n  return projectSettings;\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { assertDefined } from '../../../utils/assertDefined';\nimport type { SessionKeys } from '../sessionKeys.types';\n\n/** @not-instrumented */\nexport const generateSessionKeys = async (\n  client: DynamicClient\n): Promise<SessionKeys> => {\n  const core = getCore(client);\n\n  await core.keychain.removeKey('session');\n\n  const publicKey = await core.keychain.generateKey('session');\n\n  assertDefined(publicKey, 'Public key not found');\n\n  core.state.set({\n    sessionKeys: publicKey,\n  });\n\n  return { publicKey };\n};\n","import { getCore } from '../../../../client/core/getCore';\nimport type { DynamicClient } from '../../../../client/types';\nimport { getWalletAccounts } from '../../getWalletAccounts';\nimport type { WalletProvider } from '../../walletProvider';\nimport { getWalletProviderFromWalletAccount } from '../getWalletProviderFromWalletAccount';\n\n/** @not-instrumented */\nexport const getAvailableWalletProvidersFromWalletAccounts = (\n  client: DynamicClient\n) => {\n  const core = getCore(client);\n\n  const walletProvidersMap: Map<string, WalletProvider> = new Map();\n\n  const walletAccounts = getWalletAccounts(client);\n\n  walletAccounts.forEach((walletAccount) => {\n    if (walletProvidersMap.has(walletAccount.walletProviderKey)) {\n      return;\n    }\n\n    try {\n      const walletProvider = getWalletProviderFromWalletAccount(\n        {\n          walletAccount,\n        },\n        client\n      );\n\n      walletProvidersMap.set(walletAccount.walletProviderKey, walletProvider);\n    } catch (error) {\n      core.logger.debug('Wallet provider not found for wallet account', {\n        error,\n        walletAccount: walletAccount.address,\n      });\n    }\n  });\n\n  return Array.from(walletProvidersMap.values());\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types/DynamicClient';\nimport type { LogoutReason } from '../../auth/logoutReason';\nimport { getAvailableWalletProvidersFromWalletAccounts } from '../utils/getAvailableWalletProvidersFromWalletAccounts';\n\n/**\n * Tear down every wallet provider on the client.\n *\n * Each provider's `destroy` is responsible for its own local + remote\n * cleanup. We swallow errors so a failing destroy on one provider does not\n * block teardown of the others (e.g. during logout).\n *\n * @not-instrumented\n */\nexport const destroyWalletProviders = async (\n  { reason }: { reason?: LogoutReason },\n  client: DynamicClient\n) => {\n  const core = getCore(client);\n\n  const walletProviders = getAvailableWalletProvidersFromWalletAccounts(client);\n\n  await Promise.all(\n    walletProviders.map(async (walletProvider) => {\n      if (!walletProvider.destroy) return;\n      try {\n        await walletProvider.destroy({ reason });\n      } catch (err) {\n        core.logger.error(\n          `Error destroying wallet provider ${walletProvider.key}`,\n          err\n        );\n      }\n    })\n  );\n};\n","import type { DynamicClient } from '../../../client/types';\nimport { getCore } from '../../../client/core/getCore';\nimport { setCookie } from '../../../utils/setCookie';\nimport { createApiClient } from '../../apiClient';\nimport { emitEvent } from '../../clientEvents';\nimport { fetchProjectSettings } from '../../projectSettings/fetchProjectSettings';\nimport { isCookieEnabled } from '../../projectSettings/isCookieEnabled';\nimport { generateSessionKeys } from '../../sessionKeys/generateSessionKeys';\nimport { destroyWalletProviders } from '../../wallets/destroyWalletProviders';\nimport { DYNAMIC_AUTH_COOKIE_NAME } from '../consts';\nimport type { LogoutReason } from '../logoutReason';\n\n/**\n * Logs the user out with an explicit reason.\n *\n * Revokes the session, clears auth state, terminates wallet providers, and\n * emits the `logout` client event with the given reason. The reason is also\n * captured as an argument on the function-instrumentation event, which is\n * how Datadog distinguishes between different logout causes.\n *\n * Use this instead of the public `logout` when triggering a logout from\n * internal or extension code — the caller owns the reason string, so the\n * telemetry correctly attributes *why* the logout happened.\n *\n * @param params - The logout params.\n * @param params.reason - Why the logout is being triggered. Extension authors\n *   needing a reason outside the SDK catalog can cast with `as LogoutReason`.\n * @param client - The Dynamic client instance.\n * @instrumented\n */\nexport const logoutWithReason = async (\n  { reason }: { reason: LogoutReason },\n  client: DynamicClient\n) => {\n  const core = getCore(client);\n\n  core.logger.debug('[logoutWithReason] Logging out...', { reason });\n\n  await destroyWalletProviders({ reason }, client);\n\n  if (client.user !== null) {\n    const apiClient = createApiClient({}, client);\n\n    try {\n      await apiClient.revokeSession({\n        environmentId: core.environmentId,\n      });\n    } catch (error) {\n      core.logger.error('Failed to revoke session', error);\n    }\n\n    /**\n     * This deletes the auth cookie if it exists.\n     * If the cookie doesn't exist, this sets a new cookie that expires immediately.\n     */\n    if (isCookieEnabled(client)) {\n      setCookie(\n        `${DYNAMIC_AUTH_COOKIE_NAME}=; Max-Age=-99999999; path=/; SameSite=Lax`\n      );\n    }\n  }\n\n  await core.keychain.removeKey('session');\n\n  core.state.set({\n    captchaToken: null,\n    elevatedAccessTokens: [],\n    legacyToken: null,\n    mfaToken: null,\n    sessionExpiresAt: null,\n    sessionKeys: null,\n    token: null,\n    unverifiedWalletAccounts: [],\n    user: null,\n  });\n\n  emitEvent({ args: { reason }, event: 'logout' }, client);\n\n  // Refetch project settings\n  void fetchProjectSettings(client);\n\n  // Regenerate session keys\n  void generateSessionKeys(client);\n};\n","/* eslint-disable no-restricted-globals */\nimport { Buffer as BufferPolyfill } from 'buffer';\n\n/** @not-instrumented */\nexport const getBuffer = () =>\n  typeof Buffer !== 'undefined' ? Buffer : BufferPolyfill;\n","/**\n * React Native variant — always returns `false`.\n *\n * Metro resolves `.native.ts` over the plain `.ts` counterpart, so this file\n * is used exclusively in RN builds. React Native has no `window` global, so\n * the web implementation would incorrectly return `true` and block the\n * instrumentation transport from being attached.\n * @not-instrumented\n */\nexport const isServerSideRendering = () => false;\n","export const REFRESH_USER_STATE_FROM_COOKIE_TRACKER_KEY =\n  'refresh-user-state-from-cookie';\n\nexport const INITIALIZE_STORAGE_SYNC_TRACKER_KEY = 'initialize-storage-sync';\n\nexport const FETCH_PROJECT_SETTINGS_TRACKER_KEY = 'fetch-project-settings';\n\nexport const GENERATE_SESSION_KEYS_TRACKER_KEY = 'generate-session-keys';\n\nexport const REFRESH_USER_STATE_FROM_VALID_TOKEN_TRACKER_KEY =\n  'refresh-user-state-from-valid-token';\n","import type { DeferredPromise } from './deferredPromise.types';\n\n/** @not-instrumented */\nexport const createDeferredPromise = <T>(): DeferredPromise<T> => {\n  let resolve: (value: T) => void;\n  let reject: (reason?: unknown) => void;\n\n  const promise = new Promise<T>((_resolve, _reject) => {\n    resolve = _resolve;\n    reject = _reject;\n  });\n\n  return {\n    promise,\n    reject: (reason?: unknown) => reject?.(reason),\n    resolve: (value: T) => resolve?.(value),\n  };\n};\n","import { BaseError } from './base';\n\nexport class CannotTrackError extends BaseError {\n  constructor() {\n    super({\n      cause: null,\n      code: 'cannot_track_error',\n      docsUrl: null,\n      name: 'CannotTrackError',\n      shortMessage: 'All track calls must be performed in the same node tick',\n    });\n  }\n}\n","import * as z from 'zod/mini';\n\n/**\n * Schema for validating cross-tab broadcast messages.\n */\nexport const CrossTabBroadcastMessageSchema = z.object({\n  args: z.optional(z.unknown()),\n  event: z.string(),\n});\n","import EventEmitter from 'eventemitter3';\n\nimport { isServerSideRendering } from '../../../utils/isServerSideRendering';\nimport { CrossTabBroadcastMessageSchema } from '../crossTabBroadcast.schema';\nimport type { CrossTabBroadcast } from '../crossTabBroadcast.types';\n\ntype CreateCrossTabBroadcastParams = {\n  channelName: string;\n};\n\n/**\n * Creates a cross-tab broadcast service instance using the BroadcastChannel API.\n *\n * Enables communication between multiple tabs/windows of the same application.\n * Messages are validated against the schema and invalid messages are silently ignored.\n *\n * In SSR or when BroadcastChannel is unavailable, returns a no-op implementation.\n *\n * @param params - Configuration parameters\n * @param params.channelName - The name of the broadcast channel to use\n * @returns A cross-tab broadcast service instance\n  * @not-instrumented\n */\nexport const createCrossTabBroadcast = ({\n  channelName,\n}: CreateCrossTabBroadcastParams): CrossTabBroadcast => {\n  // SSR check - return no-op implementation\n  // eslint-disable-next-line no-restricted-globals\n  if (isServerSideRendering() || typeof BroadcastChannel === 'undefined') {\n    return {\n      off: () => {},\n      on: () => {},\n      send: () => {},\n    };\n  }\n\n  // eslint-disable-next-line no-restricted-globals\n  const channel = new BroadcastChannel(channelName);\n  const eventEmitter = new EventEmitter();\n\n  // Message handler with validation\n  const handleMessage = (messageEvent: MessageEvent) => {\n    const parsed = CrossTabBroadcastMessageSchema.safeParse(messageEvent.data);\n\n    if (!parsed.success) {\n      // Silently ignore invalid messages (consistent with storage patterns)\n      return;\n    }\n\n    const { args, event } = parsed.data;\n    eventEmitter.emit(event, args);\n  };\n\n  channel.addEventListener('message', handleMessage);\n\n  return {\n    off: (event, callback) => {\n      eventEmitter.off(event, callback);\n    },\n\n    on: (event, callback) => {\n      eventEmitter.on(event, callback);\n    },\n\n    send: ({ args, event }) => {\n      channel.postMessage({ args, event });\n    },\n  };\n};\n","import { EventEmitter } from 'eventemitter3';\n\nimport type { LogLevel, Logger, LoggerEventEmitter } from '../logger.types';\n\n/**\n * Configuration options for the logger\n  * @not-instrumented\n */\ntype CreateLoggerOptions = {\n  level?: LogLevel;\n};\n\n/**\n * Log levels and their corresponding numeric values\n */\nconst LOG_LEVELS: Record<LogLevel, number> = {\n  debug: 0,\n  error: 3,\n  info: 1,\n  warn: 2,\n};\n\n// Assign to avoid lint errors\nconst defaultConsole = console;\n\n/**\n * Creates a logger instance with configurable log level and event emission capabilities.\n * @returns A logger instance with debug, info, warn, and error methods\n * @not-instrumented\n */\nexport const createLogger = (options: CreateLoggerOptions = {}): Logger => {\n  const eventEmitter: LoggerEventEmitter = new EventEmitter();\n\n  // Default to 'debug' if no level is provided\n  const minLevel: LogLevel = options.level ?? 'warn';\n\n  // Helper to decide if we should log based on current log level\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  const shouldLog = (level: LogLevel): boolean => {\n    return LOG_LEVELS[level] >= LOG_LEVELS[minLevel];\n  };\n\n  // Helper to format the log message\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  const formatMessage = (level: LogLevel, message: string): string => {\n    const timestamp = new Date().toISOString();\n\n    return `[${timestamp}] ${level.toUpperCase()}: ${message}`;\n  };\n\n  // Unified logger function that checks the level and calls the appropriate console method\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  const log = (\n    level: LogLevel,\n    consoleMethod: (...data: unknown[]) => void,\n    message: string,\n    ...args: unknown[]\n  ) => {\n    eventEmitter.emit('log', level, message, ...args);\n\n    if (!shouldLog(level)) return;\n\n    consoleMethod(formatMessage(level, message), ...args);\n  };\n\n  return {\n    debug: (message, ...args) =>\n      log('debug', defaultConsole.debug, message, ...args),\n\n    error: (message, ...args) =>\n      log('error', defaultConsole.error, message, ...args),\n\n    info: (message, ...args) =>\n      log('info', defaultConsole.info, message, ...args),\n\n    off: eventEmitter.off.bind(eventEmitter),\n\n    on: eventEmitter.on.bind(eventEmitter),\n    warn: (message, ...args) =>\n      log('warn', defaultConsole.warn, message, ...args),\n  };\n};\n","// This file is a TurboModule spec consumed by React Native codegen.\n// The `interface`, `default export`, and `react-native` import are hard\n// requirements of the codegen parser and intentionally deviate from the\n// project's conventions. Codegen discovers specs by the `Native*` filename\n// prefix, so this file cannot be renamed to `.native.ts`.\n\nimport { type TurboModule, TurboModuleRegistry } from 'react-native';\n\nexport interface Spec extends TurboModule {\n  deleteKey(key: string): Promise<void>;\n  generateKeyPair(key: string): Promise<{ publicKey: string }>;\n  getPublicKey(key: string): Promise<{ publicKey: string } | null>;\n  hasKey(key: string): Promise<boolean>;\n  isAvailable(): Promise<boolean>;\n  sign(key: string, payload: string): Promise<{ signature: string }>;\n}\n\n// eslint-disable-next-line import/no-default-export\nexport default TurboModuleRegistry.getEnforcing<Spec>('DynamicClientKeychain');\n","/**\n * Encodes a Uint8Array to a base64url string (RFC 4648 S5, no padding).\n * Used to encode binary data before sending to native modules over the bridge.\n *\n * @not-instrumented\n */\nexport const base64urlFromBytes = (bytes: Uint8Array): string =>\n  btoa(String.fromCodePoint(...bytes))\n    .replaceAll('+', '-')\n    .replaceAll('/', '_')\n    .replaceAll('=', '');\n","/**\n * Converts an ArrayBuffer or Uint8Array to a hex-encoded string\n  * @not-instrumented\n */\nexport const bufferToHex = (buffer: ArrayBufferLike | Uint8Array) =>\n  [...(buffer instanceof Uint8Array ? buffer : new Uint8Array(buffer))]\n    .map((x) => x.toString(16).padStart(2, '0'))\n    .join('');\n","/**\n * Decodes a base64url-encoded string (RFC 4648 S5, no padding) to a Uint8Array.\n * Used to decode binary data received from native modules over the bridge.\n *\n * @not-instrumented\n */\n// eslint-disable-next-line custom-rules/require-single-object-param\nexport const bytesFromBase64url = (s: string): Uint8Array => {\n  const base64 = s.replaceAll('-', '+').replaceAll('_', '/');\n  return Uint8Array.from(atob(base64), (c) => c.codePointAt(0) ?? 0);\n};\n","/**\n * Accepts a public key array buffer, and returns a buffer with the compressed version of the public key\n  * @not-instrumented\n */\nexport const compressRawPublicKey = (rawPublicKey: ArrayBuffer) => {\n  const rawPublicKeyBytes = new Uint8Array(rawPublicKey);\n  const len = rawPublicKeyBytes.byteLength;\n\n  // Drop the y coordinate\n  const compressedBytes = rawPublicKeyBytes.slice(0, (1 + len) >>> 1);\n\n  // Encode the parity of `y` in first bit\n  compressedBytes[0] = 0x2 | (rawPublicKeyBytes[len - 1] & 0x01);\n  return compressedBytes.buffer;\n};\n","import { BaseError } from '../../errors/base';\n\nexport class InvalidDERSignatureError extends BaseError {\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  constructor(message: string) {\n    super({\n      cause: null,\n      code: 'invalid_der_signature_error',\n      docsUrl: null,\n      name: 'InvalidDERSignatureError',\n      shortMessage: message,\n    });\n  }\n}\n","import { InvalidDERSignatureError } from './InvalidDERSignatureError';\n\n/**\n * Converts a DER/X9.62 encoded ECDSA signature to IEEE P1363 format (r || s).\n * Native secure enclaves produce DER-encoded signatures; the server expects P1363.\n *\n * @not-instrumented\n */\nexport const derToP1363 = (der: Uint8Array): Uint8Array => {\n  // DER structure: 30 <len> 02 <r_len> <r_bytes> 02 <s_len> <s_bytes>\n  if (der.length < 8 || der[0] !== 0x30) {\n    throw new InvalidDERSignatureError('Invalid DER signature format');\n  }\n\n  // skip 30 <len>\n  let offset = 2;\n\n  // Parse r\n  if (offset >= der.length || der[offset] !== 0x02) {\n    throw new InvalidDERSignatureError(\n      'Invalid DER signature: missing r INTEGER tag'\n    );\n  }\n\n  // skip 02 tag\n  offset += 1;\n\n  if (offset >= der.length) {\n    throw new InvalidDERSignatureError(\n      'Invalid DER signature: missing r length'\n    );\n  }\n  const rLen = der[offset];\n  offset += 1;\n\n  if (offset + rLen > der.length) {\n    throw new InvalidDERSignatureError(\n      'Invalid DER signature: r bytes out of bounds'\n    );\n  }\n  let rBytes = der.slice(offset, offset + rLen);\n  offset += rLen;\n\n  // Parse s\n  if (offset >= der.length || der[offset] !== 0x02) {\n    throw new InvalidDERSignatureError(\n      'Invalid DER signature: missing s INTEGER tag'\n    );\n  }\n\n  // skip 02 tag\n  offset += 1;\n\n  if (offset >= der.length) {\n    throw new InvalidDERSignatureError(\n      'Invalid DER signature: missing s length'\n    );\n  }\n  const sLen = der[offset];\n  offset += 1;\n\n  if (offset + sLen > der.length) {\n    throw new InvalidDERSignatureError(\n      'Invalid DER signature: s bytes out of bounds'\n    );\n  }\n  let sBytes = der.slice(offset, offset + sLen);\n\n  // Strip leading zero padding (DER adds a 0x00 prefix when high bit is set)\n  if (rBytes.length === 33 && rBytes[0] === 0) rBytes = rBytes.slice(1);\n  if (sBytes.length === 33 && sBytes[0] === 0) sBytes = sBytes.slice(1);\n\n  // Pad to 32 bytes each\n  const result = new Uint8Array(64);\n  result.set(rBytes, 32 - rBytes.length);\n  result.set(sBytes, 64 - sBytes.length);\n  return result;\n};\n","import { BaseError } from '../../../errors/base';\n\nexport class ImportKeyNotSupportedError extends BaseError {\n  constructor() {\n    super({\n      cause: null,\n      code: 'import_key_not_supported_error',\n      details:\n        'Hardware-backed keystores cannot import external private keys.',\n      docsUrl: null,\n      name: 'ImportKeyNotSupportedError',\n      shortMessage: 'importKey is not supported on React Native.',\n    });\n  }\n}\n","import { BaseError } from '../../../errors/base';\n\nexport class KeyNotFoundError extends BaseError {\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  constructor(keyName: string) {\n    super({\n      cause: null,\n      code: 'key_not_found',\n      docsUrl: null,\n      name: 'KeyNotFoundError',\n      shortMessage: `Key \"${keyName}\" not found in keychain`,\n    });\n  }\n}\n","import { NativeModuleNotLinkedError } from '../../../errors/NativeModuleNotLinkedError';\nimport NativeKeychain from '../../../turboModules/NativeKeychain';\nimport { base64urlFromBytes } from '../../../utils/base64urlFromBytes';\nimport { bufferToHex } from '../../../utils/bufferToHex';\nimport { bytesFromBase64url } from '../../../utils/bytesFromBase64url';\nimport { compressRawPublicKey } from '../../../utils/compressRawPublicKey';\nimport { derToP1363 } from '../../../utils/derToP1363';\nimport type { CreateKeychainService } from './createKeychainService.types';\nimport { ImportKeyNotSupportedError } from './ImportKeyNotSupportedError';\nimport { KeyNotFoundError } from './KeyNotFoundError';\n\n/**\n * Creates a KeychainService backed by the platform's secure hardware\n * (iOS Secure Enclave / Android KeyStore with StrongBox or TEE).\n *\n * Keys are generated and stored inside the secure hardware and never\n * leave the device. The native module returns base64url-encoded data\n * which this wrapper converts to the hex format the SDK expects.\n *\n * @throws NativeModuleNotLinkedError if the native Keychain TurboModule is not available.\n *\n * @not-instrumented\n */\nexport const createKeychainService: CreateKeychainService = () => {\n  if (NativeKeychain == null) {\n    throw new NativeModuleNotLinkedError({ moduleName: 'DynamicClientKeychain' });\n  }\n\n  const nativeModule = NativeKeychain;\n\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  const generateKey = async (keyName: string): Promise<string> => {\n    const result = await nativeModule.generateKeyPair(keyName);\n    const uncompressedKey = bytesFromBase64url(result.publicKey);\n    return bufferToHex(\n      compressRawPublicKey(uncompressedKey.buffer as ArrayBuffer)\n    );\n  };\n\n  /**\n   * Importing external private keys is not supported on hardware-backed\n   * keystores (Secure Enclave / Android KeyStore). Keys must be generated\n   * on-device via generateKey().\n   */\n  const importKey = (): Promise<string> => {\n    throw new ImportKeyNotSupportedError();\n  };\n\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  const getPublicKey = async (keyName: string): Promise<string | null> => {\n    const result = await nativeModule.getPublicKey(keyName);\n\n    if (result == null) {\n      return null;\n    }\n\n    const uncompressedKey = bytesFromBase64url(result.publicKey);\n    return bufferToHex(\n      compressRawPublicKey(uncompressedKey.buffer as ArrayBuffer)\n    );\n  };\n\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  const sign = async (keyName: string, message: string): Promise<string> => {\n    const hasKeyResult = await nativeModule.hasKey(keyName);\n\n    if (!hasKeyResult) {\n      throw new KeyNotFoundError(keyName);\n    }\n\n    // Encode the message to UTF-8 bytes, then base64url-encode for the bridge\n    const encodedMessage = new TextEncoder().encode(message);\n    const base64urlPayload = base64urlFromBytes(encodedMessage);\n\n    const result = await nativeModule.sign(keyName, base64urlPayload);\n\n    // Native returns DER-encoded signature; convert to P1363 hex\n    const derSignature = bytesFromBase64url(result.signature);\n    return bufferToHex(derToP1363(derSignature));\n  };\n\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  const hasKey = async (keyName: string): Promise<boolean> => {\n    return nativeModule.hasKey(keyName);\n  };\n\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  const removeKey = async (keyName: string): Promise<void> => {\n    await nativeModule.deleteKey(keyName);\n  };\n\n  return {\n    generateKey,\n    getPublicKey,\n    hasKey,\n    importKey,\n    removeKey,\n    sign,\n  };\n};\n","import { BaseError } from './base';\n\ntype InvalidRealtimePublishParams = {\n  channel: string;\n};\n\nexport class InvalidRealtimePublishError extends BaseError {\n  constructor({ channel }: InvalidRealtimePublishParams) {\n    super({\n      cause: null,\n      code: 'invalid_realtime_publish',\n      docsUrl: null,\n      metaMessages: [`channel: ${channel}`],\n      name: 'InvalidRealtimePublishError',\n      shortMessage:\n        'Tried to publish data that does not match the channel schema',\n    });\n  }\n}\n","import { BaseError } from './base';\n\nexport class RealtimeNotConnectedError extends BaseError {\n  constructor() {\n    super({\n      cause: null,\n      code: 'realtime_not_connected_error',\n      docsUrl: null,\n      name: 'RealtimeNotConnectedError',\n      shortMessage:\n        'Realtime service is not connected. Call connect() before subscribing or publishing.',\n    });\n  }\n}\n","import type { InboundMessage, RealtimeChannel, messageCallback } from 'ably';\nimport type { BaseRealtime } from 'ably/modular';\nimport EventEmitter from 'eventemitter3';\n\nimport { getCore } from '../../../client/core/getCore';\nimport { InvalidRealtimePublishError } from '../../../errors/InvalidRealtimePublishError';\nimport { RealtimeNotConnectedError } from '../../../errors/RealtimeNotConnectedError';\nimport { createApiClient } from '../../../modules/apiClient';\nimport { isServerSideRendering } from '../../../utils/isServerSideRendering';\nimport type {\n  RealtimeChannelSchema,\n  RealtimeConnectionState,\n  RealtimeEventMap,\n  RealtimeService,\n} from '../realtime.types';\n\nconst ABLY_STATE_TO_REALTIME_STATE: Record<string, RealtimeConnectionState> = {\n  closed: 'closed',\n  closing: 'closing',\n  connected: 'connected',\n  connecting: 'connecting',\n  disconnected: 'disconnected',\n  failed: 'failed',\n  initialized: 'idle',\n  suspended: 'suspended',\n};\n\nconst mapAblyState = (ablyState: string): RealtimeConnectionState =>\n  ABLY_STATE_TO_REALTIME_STATE[ablyState] ?? 'idle';\n\n/**\n * Creates a realtime pub/sub service backed by Ably.\n *\n * The service starts idle. Call `connect({ client })` to establish\n * a connection, passing the DynamicClient explicitly.\n *\n * SSR environments receive a no-op implementation.\n  * @not-instrumented\n */\n \nexport const createRealtimeService = (): RealtimeService => {\n  if (isServerSideRendering()) {\n    return {\n      connect: () => Promise.resolve(),\n      disconnect: () => {},\n      getConnectionState: () => 'idle',\n      off: () => {},\n      on: () => {},\n      publish: () => Promise.resolve(),\n      subscribe: () => Promise.resolve(),\n      unsubscribe: () => {},\n    };\n  }\n\n  const eventEmitter = new EventEmitter<RealtimeEventMap>();\n  const channels = new Map<string, RealtimeChannel>();\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  const handlerMap = new WeakMap<(message: { data: any }) => void, messageCallback<InboundMessage>>();\n\n  let ablyClient: BaseRealtime | undefined;\n  let connectionState: RealtimeConnectionState = 'idle';\n  let isConnecting = false;\n\n  const setConnectionState = (state: RealtimeConnectionState) => {\n    connectionState = state;\n    eventEmitter.emit('connectionStateChange', state);\n  };\n\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  const getOrCreateChannel = (channelName: string): RealtimeChannel => {\n    const existing = channels.get(channelName);\n\n    if (existing) {\n      return existing;\n    }\n\n    if (!ablyClient) {\n      throw new RealtimeNotConnectedError();\n    }\n\n    const channel = ablyClient.channels.get(channelName);\n    channels.set(channelName, channel);\n\n    return channel;\n  };\n\n  const connect: RealtimeService['connect'] = async ({ client, headers }) => {\n    if (isConnecting) {\n      return;\n    }\n\n    isConnecting = true;\n\n    try {\n      const core = getCore(client);\n\n      if (ablyClient) {\n        ablyClient.close();\n        channels.clear();\n      }\n\n      // Dynamic import to keep the module tree-shakeable\n      // and avoid loading Ably in SSR environments\n      const {\n        BaseRealtime: AblyBaseRealtime,\n        FetchRequest,\n        WebSocketTransport,\n      } = await import('ably/modular');\n\n      ablyClient = new AblyBaseRealtime({\n        // authCallback must return void (not Promise<void>), so we use\n        // .then().catch() instead of async/await to avoid returning a Promise\n        // to Ably's callback-style auth handler.\n        authCallback: (_tokenParams, callback) => {\n          const apiClient = createApiClient({ headers }, client);\n\n          apiClient\n            .getRealtimeAuthToken({ environmentId: core.environmentId })\n            .then((response) => {\n              callback(null, response.token);\n            })\n            .catch((err: unknown) => {\n              const message = err instanceof Error ? err.message : String(err);\n              callback(message, null);\n            });\n        },\n        autoConnect: false,\n        plugins: { FetchRequest, WebSocketTransport },\n      });\n\n      ablyClient.connection.on((stateChange) => {\n        setConnectionState(mapAblyState(stateChange.current));\n      });\n\n      ablyClient.connect();\n    } finally {\n      isConnecting = false;\n    }\n  };\n\n  const disconnect: RealtimeService['disconnect'] = () => {\n    if (!ablyClient) {\n      return;\n    }\n\n    for (const channel of channels.values()) {\n      channel.detach().catch(() => {});\n    }\n\n    channels.clear();\n    ablyClient.close();\n    ablyClient = undefined;\n  };\n\n  const subscribe: RealtimeService['subscribe'] = async <T>({\n    channelSchema,\n    callback,\n  }: {\n    callback: (message: { data: T }) => void;\n    channelSchema: RealtimeChannelSchema<T>;\n  }) => {\n    const channel = getOrCreateChannel(channelSchema.channel);\n\n    const handler: messageCallback<InboundMessage> = (message) => {\n      const parsed = channelSchema.schema.safeParse(message.data);\n\n      if (!parsed.success) {\n        return;\n      }\n\n      callback({ data: parsed.data });\n    };\n\n    handlerMap.set(callback, handler);\n\n    await channel.subscribe(handler);\n  };\n\n  const unsubscribe: RealtimeService['unsubscribe'] = <T>({\n    channelSchema,\n    callback,\n  }: {\n    callback: (message: { data: T }) => void;\n    channelSchema: RealtimeChannelSchema<T>;\n  }) => {\n    const channel = channels.get(channelSchema.channel);\n\n    if (!channel) {\n      return;\n    }\n\n    const handler = handlerMap.get(callback);\n\n    if (handler) {\n      channel.unsubscribe(handler);\n      handlerMap.delete(callback);\n    }\n  };\n\n  const publish: RealtimeService['publish'] = async <T>({\n    channelSchema,\n    data,\n  }: {\n    channelSchema: RealtimeChannelSchema<T>;\n    data: T;\n  }) => {\n    const parsed = channelSchema.schema.safeParse(data);\n\n    if (!parsed.success) {\n      throw new InvalidRealtimePublishError({ channel: channelSchema.channel });\n    }\n\n    const channel = getOrCreateChannel(channelSchema.channel);\n    await channel.publish('message', parsed.data);\n  };\n\n  return {\n    connect,\n    disconnect,\n    getConnectionState: () => connectionState,\n    off: (event, callback) => {\n      eventEmitter.off(event, callback);\n    },\n    on: (event, callback) => {\n      eventEmitter.on(event, callback);\n    },\n    publish,\n    subscribe,\n    unsubscribe,\n  };\n};\n","type GetKeychainIndexedDBNameParams = {\n  environmentId: string;\n};\n\n/**\n * Builds the IndexedDB database name used by the keychain service for a given\n * environment. Centralizing this avoids drift between the SDK and any\n * extension code that needs to read or migrate the same database.\n *\n * @param params.environmentId - The Dynamic environment id.\n * @returns The IndexedDB database name for the keychain.\n * @not-instrumented\n */\nexport const getKeychainIndexedDBName = ({\n  environmentId,\n}: GetKeychainIndexedDBNameParams): string =>\n  `dynamic_${environmentId}_keychain`;\n","import { BaseError } from './base';\n\nexport class NoNetworkProvidersError extends BaseError {\n  constructor() {\n    super({\n      cause: null,\n      code: 'no_network_providers',\n      docsUrl: null,\n      name: 'NoNetworkProvidersError',\n      shortMessage: 'No networks were registered in the client',\n    });\n  }\n}\n","import { BaseError, type BaseErrorParameters } from './base';\n\nexport class WalletAlreadyLinkedToAnotherUserError extends BaseError {\n  constructor({ cause }: Pick<BaseErrorParameters, 'cause'>) {\n    super({\n      cause,\n      code: 'wallet_already_linked_to_another_user_error',\n      docsUrl: null,\n      name: 'WalletAlreadyLinkedToAnotherUserError',\n      shortMessage: 'This wallet is already linked to another user',\n    });\n  }\n}\n","import { BaseError } from './base';\n\nexport class MethodNotImplementedError extends BaseError {\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  constructor(methodName: string) {\n    super({\n      cause: null,\n      code: 'method_not_implemented_error',\n      docsUrl: null,\n      name: 'MethodNotImplementedError',\n      shortMessage: `This method is not implemented: ${methodName}`,\n    });\n  }\n}\n","import { getCore } from '../../client/core/getCore';\nimport type { DynamicClient } from '../../client/types';\n\nexport type AppMetadata = {\n  appLogoUrl: string | undefined;\n  appName: string;\n  appNativeLink?: string;\n  appUniversalLink?: string;\n};\n\n/**\n * Reads the customer-supplied app name, logo, native link, and universal link.\n * — preferring `core.metadata` (set on the client) over project-settings fallbacks.\n *\n * @param client - The Dynamic client whose configuration drives the result.\n * @not-instrumented\n */\nexport const getAppMetadata = (client: DynamicClient): AppMetadata => {\n  const core = getCore(client);\n  const generalSettings = client.projectSettings?.general;\n\n  return {\n    appLogoUrl: core.metadata?.iconUrl ?? generalSettings?.appLogo ?? undefined,\n    appName: core.metadata?.name ?? generalSettings?.displayName ?? '',\n    appNativeLink: core.metadata?.nativeLink,\n    appUniversalLink: core.metadata?.universalLink,\n  };\n};\n","import { getDefaultClient } from '../../../client/defaultClient';\nimport { assertDefined } from '../../../utils/assertDefined';\n\n/** @not-instrumented */\nexport const isCaptchaRequired = (client = getDefaultClient()) => {\n  const projectSettings = client.projectSettings;\n\n  assertDefined(projectSettings, 'Project settings are not available');\n\n  return projectSettings.security.hCaptcha?.enabled ?? false;\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { assertDefined } from '../../../utils/assertDefined';\nimport { isCaptchaRequired } from '../isCaptchaRequired';\n\n/**\n * Retrieves the current captcha token from the client state and sets it to null.\n  * @not-instrumented\n */\nexport const consumeCaptchaToken = (\n  client: DynamicClient\n): string | undefined => {\n  const core = getCore(client);\n\n  const captchaToken = core.state.get().captchaToken;\n\n  if (isCaptchaRequired(client)) {\n    assertDefined(captchaToken, 'Captcha token is required');\n  }\n\n  core.state.set({\n    captchaToken: null,\n  });\n\n  return captchaToken ?? undefined;\n};\n","import { getCore } from '../../../client/core/getCore';\nimport { getDefaultClient } from '../../../client/defaultClient';\n\ntype SetCaptchaTokenProps = {\n  captchaToken: string;\n};\n\n/**\n * Sets the given captcha token in the client state.\n *\n * @param params.captchaToken - The captcha token to set.\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @instrumented\n * @redact-params\n */\nexport const setCaptchaToken = (\n  { captchaToken }: SetCaptchaTokenProps,\n  client = getDefaultClient()\n) => {\n  const core = getCore(client);\n\n  core.state.set({\n    captchaToken,\n  });\n};\n","import { getCore } from '../../../client/core/getCore';\nimport { getDefaultClient } from '../../../client/defaultClient';\n\ntype HasExtensionParams = {\n  extensionKey: string;\n};\n\n/**\n * Checks if a specific extension has been applied to the Dynamic client.\n *\n * Extensions add optional features to the Dynamic SDK,\n * such as EVM, Solana, or other chain support.\n *\n * @param params.extensionKey - The unique key identifying the extension to check for.\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns True if the extension is applied, false otherwise.\n  * @not-instrumented\n */\nexport const hasExtension = (\n  { extensionKey }: HasExtensionParams,\n  client = getDefaultClient()\n) => {\n  const core = getCore(client);\n\n  return core.extensions.has(extensionKey);\n};\n","import {\n  AuthModeEnum,\n  type ChainEnum,\n  type ConnectRequest,\n} from '@dynamic-labs/sdk-api-core';\n\nimport { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { createApiClient } from '../../apiClient';\nimport { getWalletProviderFromWalletAccount } from '../../wallets/utils/getWalletProviderFromWalletAccount';\nimport { normalizeWalletNameWithChain } from '../../wallets/utils/normalizeWalletNameWithChain';\nimport type { WalletAccount } from '../../wallets/walletAccount';\n\ntype CreateVisitParams = {\n  authMode?: AuthModeEnum;\n  walletAccount: WalletAccount;\n};\n\n/*  \n  In older SDK versions we used to have the concept of \"connect-only\" vs \"connect-and-sign\". \n  The only difference in backend is it stores some extra data for connect-only, \n  so we can just default to using it.\n*/\n/** @not-instrumented */\nexport const createVisit = async (\n  { walletAccount, authMode = AuthModeEnum.Only }: CreateVisitParams,\n  client: DynamicClient\n) => {\n  const core = getCore(client);\n  const apiClient = createApiClient({}, client);\n\n  const walletProvider = getWalletProviderFromWalletAccount(\n    { walletAccount },\n    client\n  );\n\n  try {\n    const walletName = normalizeWalletNameWithChain({\n      chain: walletProvider.chain,\n      displayName: walletProvider.metadata.displayName,\n    });\n\n    const connectRequest: ConnectRequest = {\n      address: walletAccount.address,\n      authMode,\n      // eslint-disable-next-line custom-rules/ban-chain-enum\n      chain: walletProvider.chain as ChainEnum,\n      provider: walletProvider.walletProviderType,\n      walletName,\n    };\n\n    await apiClient.createVisit({\n      connectRequest,\n      environmentId: core.environmentId,\n    });\n  } catch (error) {\n    core.logger.error('Error creating visit', { error });\n  }\n};\n","import { getCore } from '../../../../client/core/getCore';\nimport type { DynamicClient } from '../../../../client/types';\nimport type { UnverifiedWalletAccount } from '../unverifiedWalletAccounts.types';\n\ntype SetUnverifiedWalletAccountsParams = {\n  unverifiedWalletAccountsToUpdate: UnverifiedWalletAccount[];\n};\n\n/**\n * Updates the unverified wallet account in the client state.\n * This will add new wallet accounts and override those with matching ids,\n * but will leave other preexisting wallet accounts unchanged.\n  * @not-instrumented\n */\nexport const setUnverifiedWalletAccounts = (\n  { unverifiedWalletAccountsToUpdate }: SetUnverifiedWalletAccountsParams,\n  client: DynamicClient\n): void => {\n  if (unverifiedWalletAccountsToUpdate.length === 0) {\n    return;\n  }\n\n  const core = getCore(client);\n\n  const unverifiedWalletAccountsToUpdateIds =\n    unverifiedWalletAccountsToUpdate.map(({ id }) => id);\n\n  const filteredUnverifiedWalletAccounts: UnverifiedWalletAccount[] = core.state\n    .get()\n    .unverifiedWalletAccounts.filter(\n      (unverifiedWalletAccount) =>\n        !unverifiedWalletAccountsToUpdateIds.includes(\n          unverifiedWalletAccount.id\n        )\n    );\n\n  core.state.set({\n    unverifiedWalletAccounts: [\n      ...filteredUnverifiedWalletAccounts,\n      ...unverifiedWalletAccountsToUpdate,\n    ],\n  });\n};\n","import { getCore } from '../../../../../client/core/getCore';\nimport type { DynamicClient } from '../../../../../client/types';\n\ntype updateWalletProviderKeysForVerifiedCredentialsParams = {\n  keysToUpdate: Record<string, string>;\n};\n\n/** @not-instrumented */\nexport const updateWalletProviderKeysForVerifiedCredentials = (\n  { keysToUpdate }: updateWalletProviderKeysForVerifiedCredentialsParams,\n  client: DynamicClient\n) => {\n  const core = getCore(client);\n\n  core.state.set({\n    walletProviderKeyMap: {\n      ...core.state.get().walletProviderKeyMap,\n      ...keysToUpdate,\n    },\n  });\n};\n","import type { DynamicClient } from '../../../client/types';\nimport { createVisit } from '../../auth/createVisit';\nimport { emitWalletAccountsChangedEvent } from '../emitWalletAccountsChangedEvent';\nimport { getWalletAccounts } from '../getWalletAccounts';\nimport { setUnverifiedWalletAccounts } from '../unverifiedWalletAccounts/setUnverifiedWalletAccounts';\nimport type { WalletAccount } from '../walletAccount';\nimport { updateWalletProviderKeysForVerifiedCredentials } from '../walletProvider/walletProviderKeyMap/updateWalletProviderKeysForVerifiedCredentials';\n\ntype ReconcileWalletAccountsAgainstClientParams = {\n  /** Whether to write new or updated unverified accounts to client state. Defaults to `true`. */\n  addToDynamicWalletAccounts?: boolean;\n  /** Freshly-connected wallet account candidates to reconcile. */\n  walletAccounts: WalletAccount[];\n  /** Wallet provider key these candidates were connected through. */\n  walletProviderKey: string;\n};\n\n/**\n * Reconciles freshly-connected wallet accounts against the client state. For\n * each candidate it classifies as new, a re-connect of an existing unverified\n * account, or a re-connect of an already-verified account, then runs the\n * appropriate state mutation (`setUnverifiedWalletAccounts`,\n * `updateWalletProviderKeysForVerifiedCredentials`, `createVisit` for truly-new\n * entries) and emits a single `walletAccountsChanged` event if anything\n * actually changed. Returns the candidates with `verifiedCredentialId`\n * populated when the address already corresponded to a verified credential.\n *\n * @not-instrumented\n */\nexport const reconcileWalletAccountsAgainstClient = (\n  {\n    addToDynamicWalletAccounts = true,\n    walletAccounts,\n    walletProviderKey,\n  }: ReconcileWalletAccountsAgainstClientParams,\n  client: DynamicClient\n): WalletAccount[] => {\n  if (walletAccounts.length === 0) {\n    return [];\n  }\n\n  const existingWalletAccounts = getWalletAccounts(client);\n\n  const newWalletAccounts: WalletAccount[] = [];\n  const unverifiedWalletAccountsToUpdate: WalletAccount[] = [];\n  const verifiedCredentialIdToWalletProviderKeyMap: Record<string, string> = {};\n\n  const reconciledWalletAccounts: WalletAccount[] = walletAccounts.map(\n    (candidate) => {\n      const matchingExistingWalletAccount = existingWalletAccounts.find(\n        (existingWalletAccount) => existingWalletAccount.id === candidate.id\n      );\n\n      if (!matchingExistingWalletAccount) {\n        newWalletAccounts.push(candidate);\n        return candidate;\n      }\n\n      const isWalletProviderKeyChanged =\n        matchingExistingWalletAccount.walletProviderKey !== walletProviderKey;\n\n      if (matchingExistingWalletAccount.verifiedCredentialId) {\n        if (isWalletProviderKeyChanged) {\n          verifiedCredentialIdToWalletProviderKeyMap[\n            matchingExistingWalletAccount.verifiedCredentialId\n          ] = walletProviderKey;\n        }\n\n        return {\n          ...candidate,\n          verifiedCredentialId:\n            matchingExistingWalletAccount.verifiedCredentialId,\n        };\n      }\n\n      if (isWalletProviderKeyChanged) {\n        unverifiedWalletAccountsToUpdate.push(candidate);\n      }\n\n      return candidate;\n    }\n  );\n\n  let walletAccountsChanged = false;\n\n  if (Object.keys(verifiedCredentialIdToWalletProviderKeyMap).length > 0) {\n    updateWalletProviderKeysForVerifiedCredentials(\n      { keysToUpdate: verifiedCredentialIdToWalletProviderKeyMap },\n      client\n    );\n\n    walletAccountsChanged = true;\n  }\n\n  if (addToDynamicWalletAccounts) {\n    const accountsToWrite = [\n      ...unverifiedWalletAccountsToUpdate,\n      ...newWalletAccounts,\n    ];\n\n    if (accountsToWrite.length > 0) {\n      setUnverifiedWalletAccounts(\n        { unverifiedWalletAccountsToUpdate: accountsToWrite },\n        client\n      );\n\n      walletAccountsChanged = true;\n\n      for (const newWalletAccount of newWalletAccounts) {\n        void createVisit({ walletAccount: newWalletAccount }, client);\n      }\n    }\n  }\n\n  if (walletAccountsChanged) {\n    emitWalletAccountsChangedEvent(client);\n  }\n\n  return reconciledWalletAccounts;\n};\n","type FormatSignInMessageParams = {\n  address: string;\n  blockchainName: string;\n  chainId?: string;\n  domain: string;\n  issuedAt?: string;\n  nonce: string;\n  requestId?: string;\n  resources?: string[];\n  statement?: string;\n  uri: string;\n};\n\n/**\n * Formats a sign in message to prove ownership of an address.\n  * @not-instrumented\n */\nexport const formatSignInMessage = async ({\n  domain,\n  blockchainName,\n  address,\n  uri,\n  chainId,\n  nonce,\n  issuedAt,\n  requestId,\n  statement,\n  resources,\n}: FormatSignInMessageParams) => {\n  // This format follows the sign-in with ethereum (SIWE) standard,\n  // but we are using it also for non-ethereum wallets for now (eg. Solana)\n  // for more context on format and fields, please see:\n  // https://docs.login.xyz/general-information/siwe-overview/eip-4361\n  const header = `${domain} wants you to sign in with your ${blockchainName} account:`;\n  const prefix = [header, address].join('\\n');\n\n  // If there is a statement, we want to add a gap between the prefix and the statement\n  // two times '\\n', first to move statement to next line and second to add a gap between prefix and statement\n  const prefixWithStatementGap = statement ? '\\n\\n' : '\\n';\n  const prefixWithStatement = `${[prefix, statement].join(\n    prefixWithStatementGap\n  )}\\n`;\n\n  const suffixFields: string[] = [];\n  suffixFields.push(`URI: ${uri}`);\n  suffixFields.push('Version: 1');\n  if (chainId) {\n    suffixFields.push(`Chain ID: ${chainId}`);\n  }\n\n  suffixFields.push(`Nonce: ${nonce}`);\n\n  if (issuedAt) {\n    suffixFields.push(`Issued At: ${issuedAt}`);\n  }\n\n  if (requestId) {\n    suffixFields.push(`Request ID: ${requestId}`);\n  }\n\n  if (resources?.length) {\n    suffixFields.push(\n      `Resources:${resources.map((resource) => '\\n- ' + resource).join()}`\n    );\n  }\n\n  const suffix = suffixFields.join('\\n');\n\n  return [prefixWithStatement, suffix].join('\\n');\n};\n","import type { DynamicClient } from '../../../../../client/types';\nimport { getAppMetadata } from '../../../../../utils/getAppMetadata';\n\n/** @not-instrumented */\nexport const createSignInMessageStatement = (client: DynamicClient) => {\n  const { appName } = getAppMetadata(client);\n\n  return `Welcome to ${appName}. Signing is the only way we can truly know that you are the owner of the wallet you are connecting. Signing is a safe, gas-less transaction that does not in any way give ${appName} permission to perform any transactions with your wallet.`;\n};\n","import { getCore } from '../../../../client/core/getCore';\nimport type { DynamicClient } from '../../../../client/types';\nimport { checkAndRaiseWalletAccountsChangedEvent } from '../../../auth/updateAuthFromVerifyResponse/checkAndRaiseWalletAccountsChangedEvent';\nimport type { UnverifiedWalletAccount } from '../unverifiedWalletAccounts.types';\n\ntype RemoveUnverifiedWalletAccountParams = {\n  unverifiedWalletAccount: UnverifiedWalletAccount;\n};\n\n/**\n * Removes an unverified wallet account from the client's state.\n  * @not-instrumented\n */\nexport const removeUnverifiedWalletAccount = (\n  { unverifiedWalletAccount }: RemoveUnverifiedWalletAccountParams,\n  client: DynamicClient\n) => {\n  const core = getCore(client);\n\n  const previousState = core.state.get();\n\n  const { unverifiedWalletAccounts } = core.state.get();\n\n  const filteredUnverifiedWalletAccounts = unverifiedWalletAccounts.filter(\n    (account) => account.id !== unverifiedWalletAccount.id\n  );\n\n  core.state.set({\n    unverifiedWalletAccounts: filteredUnverifiedWalletAccounts,\n  });\n\n  /**\n   * We check before raising because the wallet account we are removing might still\n   * be present in wallet accounts due to having been moved to verified credentials.\n   */\n  checkAndRaiseWalletAccountsChangedEvent({ previousState }, client);\n};\n","/**\n * Check if the given value is an Error object\n  * @not-instrumented\n */\nexport const isError = (error: unknown): error is Error =>\n  error instanceof Error;\n","import { isError } from '../isError';\n\n/**\n * Check if the given value is an Error object with a specific code\n  * @not-instrumented\n */\n// eslint-disable-next-line custom-rules/require-single-object-param\nexport const isErrorWithCode = <T extends string>(\n  error: unknown,\n  code: T\n): error is Error & { code: T } => {\n  if (!isError(error)) return false;\n\n  return 'code' in error && error.code === code;\n};\n","import type {\n  ChainEnum,\n  TokenScope,\n  VerifyResponse,\n  WalletAddressType,\n  WalletProviderEnum,\n} from '@dynamic-labs/sdk-api-core';\n\nimport { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { isErrorWithCode } from '../../../utils/isErrorWithCode';\nimport { createApiClient } from '../../apiClient';\nimport { consumeCaptchaToken } from '../../captcha/consumeCaptchaToken';\nimport type { Chain } from '../../chain';\nimport { normalizeWalletNameWithChain } from '../utils/normalizeWalletNameWithChain';\nimport type { WalletAddressWithType } from '../walletAccount/walletAccount.types';\nimport { WalletAlreadyLinkedToAnotherUserError } from './../../../errors/WalletAlreadyLinkedToAnotherUserError';\n\ntype VerifyMessageSignatureOwnershipParams = {\n  addressesWithTypes?: WalletAddressWithType[];\n  chain: Chain;\n  isTransfer?: boolean;\n  messageToSign: string;\n  networkId?: string;\n  requestedScopes?: TokenScope[];\n  signature: string;\n  walletAddress: string;\n  walletDisplayName: string;\n  walletProviderType: WalletProviderEnum;\n};\n\n/**\n * Verifies a signed message by calling either the verifyLink, verifyTransfer or verify API function,\n * depending on whether the user is signing in, linking or transferring a wallet.\n *\n * Does NOT call updateAuthFromVerifyResponse, it should be called from the return of this function.\n  * @not-instrumented\n */\nexport const verifyMessageSignatureOwnership = async (\n  {\n    messageToSign,\n    walletAddress,\n    addressesWithTypes,\n    signature,\n    chain,\n    isTransfer = false,\n    walletDisplayName,\n    walletProviderType,\n    networkId,\n    requestedScopes,\n  }: VerifyMessageSignatureOwnershipParams,\n  client: DynamicClient\n): Promise<VerifyResponse> => {\n  const core = getCore(client);\n  const apiClient = createApiClient({}, client);\n\n  const walletName = normalizeWalletNameWithChain({\n    chain,\n    displayName: walletDisplayName,\n  });\n\n  let verifyApiFunction;\n\n  if (!client.user) {\n    // If the user is not authenticated, call the walletsSignin API function to sign in\n    verifyApiFunction = apiClient.walletsSignin.bind(apiClient);\n  } else if (isTransfer) {\n    // If the user is authenticated and is transferring a wallet, call the verifyTransfer API function\n    verifyApiFunction = apiClient.verifyTransfer.bind(apiClient);\n  } else if (client.user && requestedScopes) {\n    // Scopes = step-up auth: user requests permission for a sensitive op (e.g. wallet export).\n    // We grant it only if they prove they own an existing credential (walletsVerify).\n    // Must use walletsVerify: user is already logged in (not signin) and credential exists (not transfer/link).\n    // If the user is authenticated and requested scopes are provided, call the walletsVerify API function\n    verifyApiFunction = apiClient.walletsVerify.bind(apiClient);\n  } else {\n    // If the user is authenticated and is signing in, call the verifyLink API function\n    verifyApiFunction = apiClient.verifyLink.bind(apiClient);\n  }\n\n  try {\n    return await verifyApiFunction({\n      environmentId: core.environmentId,\n      verifyRequest: {\n        // mapping to handle typecasting for address type\n        additionalWalletAddresses: addressesWithTypes?.map((address) => ({\n          address: address.address,\n          publicKey: address.publicKey,\n          type: address.type as WalletAddressType,\n        })),\n        captchaToken: consumeCaptchaToken(client),\n        // eslint-disable-next-line custom-rules/ban-chain-enum\n        chain: chain as ChainEnum,\n        messageToSign,\n        network: networkId,\n        publicWalletAddress: walletAddress,\n        requestedScopes,\n        signedMessage: signature,\n        walletName,\n        walletProvider: walletProviderType,\n      },\n    });\n  } catch (error) {\n    core.logger.error('Failed to verify message signature ownership', error);\n\n    if (\n      isErrorWithCode(error, 'reassign_wallet_confirm') ||\n      isErrorWithCode(error, 'merge_accounts_confirmation')\n    ) {\n      throw new WalletAlreadyLinkedToAnotherUserError({\n        cause: error,\n      });\n    }\n\n    throw error;\n  }\n};\n","import type { Chain } from '../../../chain';\nimport { CHAINS_INFO_MAP } from '../../constants';\n\n/**\n * Maps the chain name from the API to the SDK chain name\n  * @not-instrumented\n */\n// eslint-disable-next-line custom-rules/require-single-object-param\nexport const getSdkChainFromApiChainName = (\n  chainName: string\n): Chain | null => {\n  const chains = Object.keys(CHAINS_INFO_MAP) as Chain[];\n\n  const chain = chains.find(\n    (chain) => CHAINS_INFO_MAP[chain].apiChainName === chainName\n  );\n\n  return chain || null;\n};\n","import { getCore } from '../../../../client/core/getCore';\nimport { getDefaultClient } from '../../../../client/defaultClient';\nimport { assertDefined } from '../../../../utils/assertDefined';\nimport { getSdkChainFromApiChainName } from '../getSdkChainFromApiChainName';\nimport type { NetworkData } from '../networkProvider/networkProvider.types';\n\n/**\n * Retrieves all available network configurations from project settings.\n *\n * This function returns detailed configuration data for all networks enabled\n * in your Dynamic project, including RPC URLs, native currencies, and metadata.\n *\n * If a `transformers.networkData` callback was provided in the client configuration,\n * it will be applied to each network before returning the data. This allows you to\n * customize network properties (such as RPC URLs) in a centralized way.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns An array of network configuration data for all enabled networks.\n * @not-instrumented\n */\nexport const getNetworksData = (client = getDefaultClient()): NetworkData[] => {\n  const core = getCore(client);\n  const { state, transformers } = core;\n\n  const networkDataTransformer =\n    transformers?.networkData ?? ((networkData) => networkData);\n\n  const { projectSettings } = state.get();\n\n  assertDefined(projectSettings, 'projectSettings not found');\n\n  const networks = projectSettings.networks;\n\n  if (!networks) {\n    return [];\n  }\n\n  const networksData = networks\n    .map((network) => {\n      if (!network.chainName) return [];\n\n      const chain = getSdkChainFromApiChainName(network.chainName);\n\n      if (!network?.networks?.length || !chain) return [];\n\n      return network.networks.map((networkConfiguration) => {\n        const networkData: NetworkData = {\n          blockExplorerUrls: networkConfiguration.blockExplorerUrls,\n          chain,\n          cluster: networkConfiguration.cluster,\n          displayName:\n            networkConfiguration.vanityName || networkConfiguration.name,\n          genesisHash: networkConfiguration.genesisHash,\n          iconUrl: networkConfiguration.iconUrls[0],\n          name: networkConfiguration.name,\n          nativeCurrency: {\n            decimals: networkConfiguration.nativeCurrency.decimals,\n            iconUrl: networkConfiguration.nativeCurrency.iconUrl,\n            name: networkConfiguration.nativeCurrency.name,\n            symbol: networkConfiguration.nativeCurrency.symbol,\n          },\n          networkId: networkConfiguration.networkId,\n          rpcUrls: {\n            http: [\n              ...(networkConfiguration.privateCustomerRpcUrls ?? []),\n              ...(networkConfiguration.rpcUrls ?? []),\n            ],\n          },\n          testnet: networkConfiguration.isTestnet ?? false,\n        };\n\n        return networkDataTransformer(networkData);\n      });\n    })\n    .flat();\n\n  return networksData;\n};\n","import type { Chain } from '../../../../chain';\nimport type {\n  NetworkProviderBuilder,\n  NetworkProviderBuilderRegistry,\n} from '../networkProviderBuilderRegistry.types';\n\n/** @not-instrumented */\nexport const createNetworkProviderBuilderRegistry =\n  (): NetworkProviderBuilderRegistry => {\n    const registry = new Map<Chain, NetworkProviderBuilder>();\n\n    return {\n      get: () => registry,\n      register: (networkProviderBuilder) => {\n        registry.set(networkProviderBuilder.chain, networkProviderBuilder);\n      },\n    };\n  };\n","import { createRuntimeServiceAccessKey } from '../../../../../services/runtimeServices';\nimport { createNetworkProviderBuilderRegistry } from '../createNetworkProviderBuilderRegistry';\n\nexport const getNetworkProviderBuilderRegistry = createRuntimeServiceAccessKey(\n  'networkProviderBuilderRegistry',\n  createNetworkProviderBuilderRegistry\n);\n","import type { DynamicClient } from '../../../../client/types';\nimport { getNetworksData } from '../getNetworksData';\nimport type { NetworkProvider } from '../networkProvider';\nimport { getNetworkProviderBuilderRegistry } from '../networkProviderBuilderRegistry';\n\n/**\n * Retrieves all registered network providers for enabled chains.\n  * @not-instrumented\n */\nexport const getNetworkProviders = (\n  client: DynamicClient\n): NetworkProvider[] => {\n  const networkProviderBuilderRegistry =\n    getNetworkProviderBuilderRegistry(client);\n\n  const registeredNetworkProviderBuilders = Array.from(\n    networkProviderBuilderRegistry.get().values()\n  );\n\n  const networksData = getNetworksData(client);\n\n  const networkProviders = registeredNetworkProviderBuilders.map(\n    ({ builder, chain }) => {\n      const networksDataForChain = networksData.filter(\n        (networkData) => networkData.chain === chain\n      );\n\n      return networksDataForChain.map(builder);\n    }\n  );\n\n  return networkProviders.flat();\n};\n","import type { DynamicClient } from '../../../../client/types';\nimport { NoNetworkProvidersError } from '../../../../errors/NoNetworkProvidersError';\nimport { assertDefined } from '../../../../utils/assertDefined';\nimport type { Chain } from '../../../chain';\nimport { getNetworkProviders } from '../getNetworkProviders';\nimport type { NetworkProvider } from '../networkProvider/networkProvider.types';\n\ntype GetNetworkProviderFromNetworkIdProps = {\n  chain: Chain;\n  networkId: string;\n};\n\n/** @not-instrumented */\nexport const getNetworkProviderFromNetworkId = (\n  { networkId, chain }: GetNetworkProviderFromNetworkIdProps,\n  client: DynamicClient\n): NetworkProvider => {\n  const networkProviders = getNetworkProviders(client);\n\n  if (networkProviders.length === 0) {\n    throw new NoNetworkProvidersError();\n  }\n\n  const networkProvider = networkProviders.find(\n    (networkProvider) =>\n      networkProvider.networkId === networkId && networkProvider.chain === chain\n  );\n\n  assertDefined(\n    networkProvider,\n    `No network provider found for chain ${chain} with network id ${networkId}`\n  );\n\n  return networkProvider;\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;AAOA,MAAa,kBAAqB,MAAS,SAAY;AACrD,KAAI,OAAO,GAAG,MAAM,KAAK,CAAE,QAAO;AAElC,KACE,OAAO,SAAS,YAChB,SAAS,QACT,OAAO,SAAS,YAChB,SAAS,KAET,QAAO,SAAS;AAGlB,KAAI,gBAAgB,OAAO,gBAAgB,KAAK;AAC9C,MAAI,KAAK,SAAS,KAAK,KAAM,QAAO;AAEpC,OAAK,MAAM,CAAC,KAAK,UAAU,KACzB,KAAI,CAAC,OAAO,GAAG,OAAO,KAAK,IAAI,IAAI,CAAC,CAAE,QAAO;AAG/C,SAAO;;AAGT,KAAI,gBAAgB,OAAO,gBAAgB,KAAK;AAC9C,MAAI,KAAK,SAAS,KAAK,KAAM,QAAO;AAEpC,OAAK,MAAM,SAAS,KAClB,KAAI,CAAC,KAAK,IAAI,MAAM,CAAE,QAAO;AAE/B,SAAO;;CAGT,MAAM,QAAQ,OAAO,KAAK,KAAK;AAE/B,KAAI,MAAM,WAAW,OAAO,KAAK,KAAK,CAAC,OAAQ,QAAO;AAEtD,MAAK,MAAM,QAAQ,MACjB,KACE,CAAC,OAAO,UAAU,eAAe,KAAK,MAAM,KAAe,IAC3D,CAAC,OAAO,GAAG,KAAK,OAAkB,KAAK,MAAiB,CAExD,QAAO;AAIX,KAAI,KAAK,gBAAgB,KAAK,YAAa,QAAO;AAElD,QAAO;;;;;;;;;;;;;;;ACxCT,MAAa,yBAGT,YACA,cAGD,aAAqC;CACpC,IAAI,YAAY,SAAS,WAAW,KAAK,CAAC;AAE1C,QAAO,WAAW,WAAW,UAAU;EACrC,MAAM,YAAY,SAAS,MAAM;AAEjC,MAAI,eAAe,WAAW,UAAU,CAAE;AAE1C,cAAY;AAEZ,WAAS,UAAU;GACnB;;;;;;;;;ACzBN,IAAa,8BAAb,cAAiD,UAAU;CAEzD,YAAY,YAAoB;AAC9B,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,mDAAmD;GAClE,CAAC;;;;;;;ACMN,MAAa,cAAc,OAAU,EACnC,QAAQ,GACR,IACA,iBAC0B;AAC1B,MAAK,IAAI,QAAQ,GAAG,SAAS,YAAY,QACvC,KAAI;AACF,SAAO,MAAM,IAAI;UACV,OAAO;AACd,MAAI,SAAS,WACX,OAAM;AAGR,MAAI,QAAQ,EACV,OAAM,IAAI,SAAS,YAAY,WAAW,SAAS,MAAM,CAAC;;;;;;AAShE,OAAM,IAAI,4BAA4B,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;ACrBnD,MAAa,cAAc,SAAS,kBAAkB,KACpD,QAAQ,OAAO,QAAQ,kBAAkB,OAAO,CAAC,SAAS,EAAE;;;;ACf9D,MAAM,YAAY;AAElB,MAAM,gBAAgB,QAAwB,GAAG,UAAU,GAAG;;;;;;;;AAS9D,MAAa,kCAAkD;AAC7D,QAAO;EACL,SAAS,OAAO,KAAK,YAAY;AAC/B,OAAI,QAAQ,gBAAgB,UAAU;IACpC,MAAM,SAAS,MAAM,mBAAmB,EAAE,SAAS,KAAK,CAAC;AAEzD,QAAI,CAAC,OACH,QAAO;AAGT,WAAO,OAAO;SAEd,QAAO,aAAa,QAAQ,aAAa,IAAI,CAAC;;EAGlD,YAAY,OAAO,KAAK,YAAY;AAClC,OAAI,QAAQ,gBAAgB,SAC1B,OAAM,qBAAqB,EAAE,SAAS,KAAK,CAAC;OAE5C,OAAM,aAAa,WAAW,aAAa,IAAI,CAAC;;EAGpD,SAAS,OAAO,KAAK,OAAO,YAAY;AACtC,OAAI,QAAQ,gBAAgB,SAC1B,OAAM,mBAAmB,KAAK,OAAO,EAAE,SAAS,KAAK,CAAC;OAEtD,OAAM,aAAa,QAAQ,aAAa,IAAI,EAAE,MAAM;;EAGzD;;;;;AC1CH,IAAa,oBAAb,cAAuC,UAAU;CAC/C,YAAY,EAAE,KAAK,SAAkC;AACnD,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,cAAc,CAAC,QAAQ,OAAO,MAAM;GACpC,MAAM;GACN,cAAc;GACf,CAAC;;;;;;;;;;;;ACTN,MAAa,wBAAwB,UAA2B;CAC9D,MAAM,OAAO,IAAI,KAAK,MAAM;AAE5B,QAAO,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,KAAK,aAAa,KAAK;;;;;ACN1D,MAAM,cAAc;;AAGpB,MAAa,oBAAoB,UAAmB;CAClD,MAAMA,OAAoC,EAAE,OAAO;AAEnD,QAAO,KAAK,UAAU,OAAO,GAAG,UAAU;AAGxC,MAAI,qBAAqB,MAAM,CAC7B,QAAO,GAAG,cAAc;AAG1B,SAAO;GACP;;;AAKJ,MAAa,oBAAuB,UAA2C;AAC7E,KAAI;AASF,SARe,KAAK,MAAM,QAAQ,GAAG,UAAU;AAC7C,OAAI,OAAO,UAAU,YAAY,MAAM,WAAW,YAAY,CAC5D,QAAO,IAAI,KAAK,MAAM,MAAM,EAAmB,CAAC;AAGlD,UAAO;IACP;UAIK,OAAO;AACd,SAAO;;;;;;;;;;;;ACpBX,MAAa,iBAAiB,EAC5B,SAAS,IACT,qBACqC;CACrC,MAAM,kBAAkB,QAAiB,SAAS,GAAG,OAAO,GAAG,QAAQ;CAEvE,MAAM,qBAAqB,iBAAsD,EAC/E,aAAa,eAAe,WAC7B;AAED,QAAO;EACL,SAAS,OAAO,qBAAqB;GACnC,MAAM,cAAc,eAAe,iBAAiB,IAAI;GACxD,MAAM,UAAU,kBAAkB,iBAAiB,QAAQ,YAAY;GAEvE,MAAM,UAAU,MAAM,eAAe,QAAQ,aAAa,QAAQ;GAElE,MAAM,aAAa,UAAU,iBAAiB,QAAQ,GAAG;;;;;AAMzD,OAAI,eAAe,MAAM;IACvB,MAAM,SAAS,iBAAiB,OAAO,UAAU,WAAW,MAAM;AAElE,QAAI,OAAO,QACT,QAAO,OAAO;;;;;;AASlB,SAAM,eAAe,WAAW,aAAa,QAAQ;AAErD,UAAO;;EAGT,YAAY,OAAO,qBAAqB;AACtC,SAAM,eAAe,WACnB,eAAe,iBAAiB,IAAI,EACpC,kBAAkB,iBAAiB,QAAQ,YAAY,CACxD;;EAGH,SAAS,OAAO,kBAAkB,UAAU;GAC1C,MAAM,SAAS,iBAAiB,OAAO,UAAU,MAAM;AAEvD,OAAI,CAAC,OAAO,QACV,OAAM,IAAI,kBAAkB;IAC1B,KAAK,iBAAiB;IACtB,OAAO,KAAK,UAAU,MAAM;IAC7B,CAAC;GAGJ,MAAM,OAAO,iBAAiB,OAAO,KAAK;AAE1C,SAAM,eAAe,QACnB,eAAe,iBAAiB,IAAI,EACpC,MACA,kBAAkB,iBAAiB,QAAQ,YAAY,CACxD;;EAEJ;;;;;;AC7EH,MAAa,0BAA6B,WAIf;AACzB,QAAO;;;;;;;;ACHT,MAAa,4CAA4C,uBACvD;CACE,KAAK;CACL,QAAQ,EAAE,QAAQ;CACnB,CACF;;;;;;;ACDD,MAAa,mCAAmC,MAAO,KAAK;;;;;;;;;;;;AAa5D,MAAa,uBAAuB,OAAO,SAAS,kBAAkB,KAAK;CACzE,MAAM,OAAO,QAAQ,OAAO;CAE5B,MAAM,oBAAoB,MAAM,KAAK,QAAQ,QAC3C,0CACD;AAOD,KAL2B,QAAQ,OAAO,gBAAgB,IAKhC,EAJR,qBAAqB,oBAAoB,KAAK,KAAK,KAI7B,WAAW,OAAO,CACxD,QAAO,OAAO;CAGhB,MAAM,YAAY,gBAAgB,EAAE,EAAE,OAAO;AAE7C,MAAK,OAAO,MAAM,sDAAsD;CAExE,MAAM,UAAU,YACd,UAAU,uBACR;EACE,eAAe,KAAK;EACpB,YAAY,GAAG,gBAAgB,GAAG,KAAK;EACxC,EACD,EACE,aAAa,QACd,CACF;CAEH,MAAM,kBAAkB,MAAM,YAAY;EACxC,IAAI;EACJ,YAAY;EACb,CAAC;AAEF,MAAK,MAAM,IAAI,EAAE,iBAAiB,mBAAmB,MAAM,CAAC;AAE5D,OAAM,KAAK,QAAQ,QACjB,2CACA,KAAK,KAAK,GAAG,iCACd;AAED,QAAO;;;;;;AC7DT,MAAa,sBAAsB,OACjC,WACyB;CACzB,MAAM,OAAO,QAAQ,OAAO;AAE5B,OAAM,KAAK,SAAS,UAAU,UAAU;CAExC,MAAM,YAAY,MAAM,KAAK,SAAS,YAAY,UAAU;AAE5D,eAAc,WAAW,uBAAuB;AAEhD,MAAK,MAAM,IAAI,EACb,aAAa,WACd,CAAC;AAEF,QAAO,EAAE,WAAW;;;;;;ACdtB,MAAa,iDACX,WACG;CACH,MAAM,OAAO,QAAQ,OAAO;CAE5B,MAAMC,qCAAkD,IAAI,KAAK;AAIjE,CAFuB,kBAAkB,OAAO,CAEjC,SAAS,kBAAkB;AACxC,MAAI,mBAAmB,IAAI,cAAc,kBAAkB,CACzD;AAGF,MAAI;GACF,MAAM,iBAAiB,mCACrB,EACE,eACD,EACD,OACD;AAED,sBAAmB,IAAI,cAAc,mBAAmB,eAAe;WAChE,OAAO;AACd,QAAK,OAAO,MAAM,gDAAgD;IAChE;IACA,eAAe,cAAc;IAC9B,CAAC;;GAEJ;AAEF,QAAO,MAAM,KAAK,mBAAmB,QAAQ,CAAC;;;;;;;;;;;;;;ACxBhD,MAAa,yBAAyB,OACpC,EAAE,UACF,WACG;CACH,MAAM,OAAO,QAAQ,OAAO;CAE5B,MAAM,kBAAkB,8CAA8C,OAAO;AAE7E,OAAM,QAAQ,IACZ,gBAAgB,IAAI,OAAO,mBAAmB;AAC5C,MAAI,CAAC,eAAe,QAAS;AAC7B,MAAI;AACF,SAAM,eAAe,QAAQ,EAAE,QAAQ,CAAC;WACjC,KAAK;AACZ,QAAK,OAAO,MACV,oCAAoC,eAAe,OACnD,IACD;;GAEH,CACH;;;;;;;;;;;;;;;;;;;;;;;ACDH,MAAK,mBAAA,OACH,EAAA,qBAEA;;;AAKA,OAAE,uBAAkB,EAAA,QAAmB,EAAC,OAAO;AAE/C,KAAE,OAAI,SAAA,MAAA;EACJ,MAAE,YAAgB,gBAAc,EAAA,EAAA,OAAA;AAEhC,MAAI;AACF,SAAM,UAAQ,cAAA,EACd,eAAiB,KAAE,eACrB,CAAA;;AAEE,QAAA,OAAA,MAAA,4BAAA,MAAA;;;;;;AAOF,MAAG,gBAAA,OAAA,CACH,WACF,GAAA,yBAAA;;AAKA,OAAE,KAAA,SAAkB,UAAA,UAAA;AAEpB,MAAE,MAAA,IAAa;EACb,cAAc;EACd,sBAAsB,EAAA;EACtB,aAAa;EACb,UAAO;EACP,kBAAA;EACA,aAAU;EACV,OAAA;;EAEF,MAAA;;AAGA,WAAK;EAAA,MAAA,EAAA,QAAqB;EAAA,OAAO;EAAA,EAAA,OAAA;AAGjC,CAAK,qBAAoB,OAAO;;;;;;;;;;;;;;;;;;;AC9ElC,MAAa,kBACX,OAAO,WAAW,cAAc,SAASC;;;;;;;;;;;;;ACI3C,MAAa,8BAA8B;;;;ACT3C,MAAa,6CACX;AAEF,MAAa,sCAAsC;AAEnD,MAAa,qCAAqC;AAElD,MAAa,oCAAoC;AAEjD,MAAa,kDACX;;;;;ACPF,MAAa,8BAAqD;CAChE,IAAIC;CACJ,IAAIC;AAOJ,QAAO;EACL,SANc,IAAI,SAAY,UAAU,YAAY;AACpD,aAAU;AACV,YAAS;IACT;EAIA,SAAS,WAAqB,SAAS,OAAO;EAC9C,UAAU,UAAa,UAAU,MAAM;EACxC;;;;;ACdH,IAAa,mBAAb,cAAsC,UAAU;CAC9C,cAAc;AACZ,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;;;;;;;;;ACLN,MAAa,iCAAiC,EAAE,OAAO;CACrD,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC;CAC7B,OAAO,EAAE,QAAQ;CAClB,CAAC;;;;;;;;;;;;;;;;;ACeF,MAAa,2BAA2B,EACtC,kBACsD;AAGtD,KAAI,uBAAuB,IAAI,OAAO,qBAAqB,YACzD,QAAO;EACL,WAAW;EACX,UAAU;EACV,YAAY;EACb;CAIH,MAAM,UAAU,IAAI,iBAAiB,YAAY;CACjD,MAAM,eAAe,IAAI,cAAc;CAGvC,MAAM,iBAAiB,iBAA+B;EACpD,MAAM,SAAS,+BAA+B,UAAU,aAAa,KAAK;AAE1E,MAAI,CAAC,OAAO,QAEV;EAGF,MAAM,EAAE,MAAM,UAAU,OAAO;AAC/B,eAAa,KAAK,OAAO,KAAK;;AAGhC,SAAQ,iBAAiB,WAAW,cAAc;AAElD,QAAO;EACL,MAAM,OAAO,aAAa;AACxB,gBAAa,IAAI,OAAO,SAAS;;EAGnC,KAAK,OAAO,aAAa;AACvB,gBAAa,GAAG,OAAO,SAAS;;EAGlC,OAAO,EAAE,MAAM,YAAY;AACzB,WAAQ,YAAY;IAAE;IAAM;IAAO,CAAC;;EAEvC;;;;;;;;ACpDH,MAAMC,aAAuC;CAC3C,OAAO;CACP,OAAO;CACP,MAAM;CACN,MAAM;CACP;AAGD,MAAM,iBAAiB;;;;;;AAOvB,MAAa,gBAAgB,UAA+B,EAAE,KAAa;CACzE,MAAMC,eAAmC,IAAIC,gBAAc;CAG3D,MAAMC,WAAqB,QAAQ,SAAS;CAI5C,MAAM,aAAa,UAA6B;AAC9C,SAAO,WAAW,UAAU,WAAW;;CAKzC,MAAM,iBAAiB,OAAiB,YAA4B;AAGlE,SAAO,qBAFW,IAAI,MAAM,EAAC,aAAa,CAErB,IAAI,MAAM,aAAa,CAAC,IAAI;;CAKnD,MAAM,OACJ,OACA,eACA,SACA,GAAG,SACA;AACH,eAAa,KAAK,OAAO,OAAO,SAAS,GAAG,KAAK;AAEjD,MAAI,CAAC,UAAU,MAAM,CAAE;AAEvB,gBAAc,cAAc,OAAO,QAAQ,EAAE,GAAG,KAAK;;AAGvD,QAAO;EACL,QAAQ,SAAS,GAAG,SAClB,IAAI,SAAS,eAAe,OAAO,SAAS,GAAG,KAAK;EAEtD,QAAQ,SAAS,GAAG,SAClB,IAAI,SAAS,eAAe,OAAO,SAAS,GAAG,KAAK;EAEtD,OAAO,SAAS,GAAG,SACjB,IAAI,QAAQ,eAAe,MAAM,SAAS,GAAG,KAAK;EAEpD,KAAK,aAAa,IAAI,KAAK,aAAa;EAExC,IAAI,aAAa,GAAG,KAAK,aAAa;EACtC,OAAO,SAAS,GAAG,SACjB,IAAI,QAAQ,eAAe,MAAM,SAAS,GAAG,KAAK;EACrD;;;;;AC9DH,6BAAe,oBAAoB,aAAmB,wBAAwB;;;;;;;;;;ACZ9E,MAAa,sBAAsB,UACjC,KAAK,OAAO,cAAc,GAAG,MAAM,CAAC,CACjC,WAAW,KAAK,IAAI,CACpB,WAAW,KAAK,IAAI,CACpB,WAAW,KAAK,GAAG;;;;;;;;ACNxB,MAAa,eAAe,WAC1B,CAAC,GAAI,kBAAkB,aAAa,SAAS,IAAI,WAAW,OAAO,CAAE,CAClE,KAAK,MAAM,EAAE,SAAS,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,CAC3C,KAAK,GAAG;;;;;;;;;;ACAb,MAAa,sBAAsB,MAA0B;CAC3D,MAAM,SAAS,EAAE,WAAW,KAAK,IAAI,CAAC,WAAW,KAAK,IAAI;AAC1D,QAAO,WAAW,KAAK,KAAK,OAAO,GAAG,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE;;;;;;;;;ACLpE,MAAa,wBAAwB,iBAA8B;CACjE,MAAM,oBAAoB,IAAI,WAAW,aAAa;CACtD,MAAM,MAAM,kBAAkB;CAG9B,MAAM,kBAAkB,kBAAkB,MAAM,GAAI,IAAI,QAAS,EAAE;AAGnE,iBAAgB,KAAK,IAAO,kBAAkB,MAAM,KAAK;AACzD,QAAO,gBAAgB;;;;;ACXzB,IAAa,2BAAb,cAA8C,UAAU;CAEtD,YAAY,SAAiB;AAC3B,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;;;;;;;;;;;;ACHN,MAAa,cAAc,QAAgC;AAEzD,KAAI,IAAI,SAAS,KAAK,IAAI,OAAO,GAC/B,OAAM,IAAI,yBAAyB,+BAA+B;CAIpE,IAAI,SAAS;AAGb,KAAI,UAAU,IAAI,UAAU,IAAI,YAAY,EAC1C,OAAM,IAAI,yBACR,+CACD;AAIH,WAAU;AAEV,KAAI,UAAU,IAAI,OAChB,OAAM,IAAI,yBACR,0CACD;CAEH,MAAM,OAAO,IAAI;AACjB,WAAU;AAEV,KAAI,SAAS,OAAO,IAAI,OACtB,OAAM,IAAI,yBACR,+CACD;CAEH,IAAI,SAAS,IAAI,MAAM,QAAQ,SAAS,KAAK;AAC7C,WAAU;AAGV,KAAI,UAAU,IAAI,UAAU,IAAI,YAAY,EAC1C,OAAM,IAAI,yBACR,+CACD;AAIH,WAAU;AAEV,KAAI,UAAU,IAAI,OAChB,OAAM,IAAI,yBACR,0CACD;CAEH,MAAM,OAAO,IAAI;AACjB,WAAU;AAEV,KAAI,SAAS,OAAO,IAAI,OACtB,OAAM,IAAI,yBACR,+CACD;CAEH,IAAI,SAAS,IAAI,MAAM,QAAQ,SAAS,KAAK;AAG7C,KAAI,OAAO,WAAW,MAAM,OAAO,OAAO,EAAG,UAAS,OAAO,MAAM,EAAE;AACrE,KAAI,OAAO,WAAW,MAAM,OAAO,OAAO,EAAG,UAAS,OAAO,MAAM,EAAE;CAGrE,MAAM,SAAS,IAAI,WAAW,GAAG;AACjC,QAAO,IAAI,QAAQ,KAAK,OAAO,OAAO;AACtC,QAAO,IAAI,QAAQ,KAAK,OAAO,OAAO;AACtC,QAAO;;;;;AC1ET,IAAa,6BAAb,cAAgD,UAAU;CACxD,cAAc;AACZ,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SACE;GACF,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;;;;;;ACVN,IAAa,mBAAb,cAAsC,UAAU;CAE9C,YAAY,SAAiB;AAC3B,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,QAAQ,QAAQ;GAC/B,CAAC;;;;;;;;;;;;;;;;;;ACYN,MAAaC,8BAAqD;AAChE,KAAIC,0BAAkB,KACpB,OAAM,IAAI,2BAA2B,EAAE,YAAY,yBAAyB,CAAC;CAG/E,MAAM,eAAeA;CAGrB,MAAM,cAAc,OAAO,YAAqC;AAG9D,SAAO,YACL,qBAFsB,oBADT,MAAM,aAAa,gBAAgB,QAAQ,EACR,UAAU,CAErB,OAAsB,CAC5D;;;;;;;CAQH,MAAM,kBAAmC;AACvC,QAAM,IAAI,4BAA4B;;CAIxC,MAAM,eAAe,OAAO,YAA4C;EACtE,MAAM,SAAS,MAAM,aAAa,aAAa,QAAQ;AAEvD,MAAI,UAAU,KACZ,QAAO;AAIT,SAAO,YACL,qBAFsB,mBAAmB,OAAO,UAAU,CAErB,OAAsB,CAC5D;;CAIH,MAAM,OAAO,OAAO,SAAiB,YAAqC;AAGxE,MAAI,CAFiB,MAAM,aAAa,OAAO,QAAQ,CAGrD,OAAM,IAAI,iBAAiB,QAAQ;EAKrC,MAAM,mBAAmB,mBADF,IAAI,aAAa,CAAC,OAAO,QAAQ,CACG;AAM3D,SAAO,YAAY,WADE,oBAHN,MAAM,aAAa,KAAK,SAAS,iBAAiB,EAGlB,UAAU,CACd,CAAC;;CAI9C,MAAM,SAAS,OAAO,YAAsC;AAC1D,SAAO,aAAa,OAAO,QAAQ;;CAIrC,MAAM,YAAY,OAAO,YAAmC;AAC1D,QAAM,aAAa,UAAU,QAAQ;;AAGvC,QAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACD;;;;;AC5FH,IAAa,8BAAb,cAAiD,UAAU;CACzD,YAAY,EAAE,WAAyC;AACrD,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,cAAc,CAAC,YAAY,UAAU;GACrC,MAAM;GACN,cACE;GACH,CAAC;;;;;;ACdN,IAAa,4BAAb,cAA+C,UAAU;CACvD,cAAc;AACZ,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cACE;GACH,CAAC;;;;;;ACKN,MAAMC,+BAAwE;CAC5E,QAAQ;CACR,SAAS;CACT,WAAW;CACX,YAAY;CACZ,cAAc;CACd,QAAQ;CACR,aAAa;CACb,WAAW;CACZ;AAED,MAAM,gBAAgB,cACpB,6BAA6B,cAAc;;;;;;;;;;AAY7C,MAAa,8BAA+C;AAC1D,KAAI,uBAAuB,CACzB,QAAO;EACL,eAAe,QAAQ,SAAS;EAChC,kBAAkB;EAClB,0BAA0B;EAC1B,WAAW;EACX,UAAU;EACV,eAAe,QAAQ,SAAS;EAChC,iBAAiB,QAAQ,SAAS;EAClC,mBAAmB;EACpB;CAGH,MAAM,eAAe,IAAI,cAAgC;CACzD,MAAM,2BAAW,IAAI,KAA8B;CAEnD,MAAM,6BAAa,IAAI,SAA4E;CAEnG,IAAIC;CACJ,IAAIC,kBAA2C;CAC/C,IAAI,eAAe;CAEnB,MAAM,sBAAsB,UAAmC;AAC7D,oBAAkB;AAClB,eAAa,KAAK,yBAAyB,MAAM;;CAInD,MAAM,sBAAsB,gBAAyC;EACnE,MAAM,WAAW,SAAS,IAAI,YAAY;AAE1C,MAAI,SACF,QAAO;AAGT,MAAI,CAAC,WACH,OAAM,IAAI,2BAA2B;EAGvC,MAAM,UAAU,WAAW,SAAS,IAAI,YAAY;AACpD,WAAS,IAAI,aAAa,QAAQ;AAElC,SAAO;;CAGT,MAAMC,UAAsC,OAAO,EAAE,QAAQ,cAAc;AACzE,MAAI,aACF;AAGF,iBAAe;AAEf,MAAI;GACF,MAAM,OAAO,QAAQ,OAAO;AAE5B,OAAI,YAAY;AACd,eAAW,OAAO;AAClB,aAAS,OAAO;;GAKlB,MAAM,EACJ,cAAc,kBACd,cACA,uBACE,MAAM,OAAO;AAEjB,gBAAa,IAAI,iBAAiB;IAIhC,eAAe,cAAc,aAAa;AAGxC,KAFkB,gBAAgB,EAAE,SAAS,EAAE,OAAO,CAGnD,qBAAqB,EAAE,eAAe,KAAK,eAAe,CAAC,CAC3D,MAAM,aAAa;AAClB,eAAS,MAAM,SAAS,MAAM;OAC9B,CACD,OAAO,QAAiB;AAEvB,eADgB,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,EAC9C,KAAK;OACvB;;IAEN,aAAa;IACb,SAAS;KAAE;KAAc;KAAoB;IAC9C,CAAC;AAEF,cAAW,WAAW,IAAI,gBAAgB;AACxC,uBAAmB,aAAa,YAAY,QAAQ,CAAC;KACrD;AAEF,cAAW,SAAS;YACZ;AACR,kBAAe;;;CAInB,MAAMC,mBAAkD;AACtD,MAAI,CAAC,WACH;AAGF,OAAK,MAAM,WAAW,SAAS,QAAQ,CACrC,SAAQ,QAAQ,CAAC,YAAY,GAAG;AAGlC,WAAS,OAAO;AAChB,aAAW,OAAO;AAClB,eAAa;;CAGf,MAAMC,YAA0C,OAAU,EACxD,eACA,eAII;EACJ,MAAM,UAAU,mBAAmB,cAAc,QAAQ;EAEzD,MAAMC,WAA4C,YAAY;GAC5D,MAAM,SAAS,cAAc,OAAO,UAAU,QAAQ,KAAK;AAE3D,OAAI,CAAC,OAAO,QACV;AAGF,YAAS,EAAE,MAAM,OAAO,MAAM,CAAC;;AAGjC,aAAW,IAAI,UAAU,QAAQ;AAEjC,QAAM,QAAQ,UAAU,QAAQ;;CAGlC,MAAMC,eAAkD,EACtD,eACA,eAII;EACJ,MAAM,UAAU,SAAS,IAAI,cAAc,QAAQ;AAEnD,MAAI,CAAC,QACH;EAGF,MAAM,UAAU,WAAW,IAAI,SAAS;AAExC,MAAI,SAAS;AACX,WAAQ,YAAY,QAAQ;AAC5B,cAAW,OAAO,SAAS;;;CAI/B,MAAMC,UAAsC,OAAU,EACpD,eACA,WAII;EACJ,MAAM,SAAS,cAAc,OAAO,UAAU,KAAK;AAEnD,MAAI,CAAC,OAAO,QACV,OAAM,IAAI,4BAA4B,EAAE,SAAS,cAAc,SAAS,CAAC;AAI3E,QADgB,mBAAmB,cAAc,QAAQ,CAC3C,QAAQ,WAAW,OAAO,KAAK;;AAG/C,QAAO;EACL;EACA;EACA,0BAA0B;EAC1B,MAAM,OAAO,aAAa;AACxB,gBAAa,IAAI,OAAO,SAAS;;EAEnC,KAAK,OAAO,aAAa;AACvB,gBAAa,GAAG,OAAO,SAAS;;EAElC;EACA;EACA;EACD;;;;;;;;;;;;;;ACxNH,MAAa,4BAA4B,EACvC,oBAEA,WAAW,cAAc;;;;ACd3B,IAAa,0BAAb,cAA6C,UAAU;CACrD,cAAc;AACZ,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;;;;;;ACRN,IAAa,wCAAb,cAA2D,UAAU;CACnE,YAAY,EAAE,SAA6C;AACzD,QAAM;GACJ;GACA,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc;GACf,CAAC;;;;;;ACRN,IAAa,4BAAb,cAA+C,UAAU;CAEvD,YAAY,YAAoB;AAC9B,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,mCAAmC;GAClD,CAAC;;;;;;;;;;;;;ACMN,MAAa,kBAAkB,WAAuC;CACpE,MAAM,OAAO,QAAQ,OAAO;CAC5B,MAAM,kBAAkB,OAAO,iBAAiB;AAEhD,QAAO;EACL,YAAY,KAAK,UAAU,WAAW,iBAAiB,WAAW;EAClE,SAAS,KAAK,UAAU,QAAQ,iBAAiB,eAAe;EAChE,eAAe,KAAK,UAAU;EAC9B,kBAAkB,KAAK,UAAU;EAClC;;;;;;ACtBH,MAAa,qBAAqB,SAAS,kBAAkB,KAAK;CAChE,MAAM,kBAAkB,OAAO;AAE/B,eAAc,iBAAiB,qCAAqC;AAEpE,QAAO,gBAAgB,SAAS,UAAU,WAAW;;;;;;;;;ACAvD,MAAa,uBACX,WACuB;CACvB,MAAM,OAAO,QAAQ,OAAO;CAE5B,MAAM,eAAe,KAAK,MAAM,KAAK,CAAC;AAEtC,KAAI,kBAAkB,OAAO,CAC3B,eAAc,cAAc,4BAA4B;AAG1D,MAAK,MAAM,IAAI,EACb,cAAc,MACf,CAAC;AAEF,QAAO,gBAAgB;;;;;;;;;;;;;ACNzB,MAAK,mBACH,EAAA,gDAEA;AAGD,CAFG,QAAY,OAAA,CAEf,MAAA,IAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACND,MAAa,gBACX,EAAE,gBACF,SAAS,kBAAkB,KACxB;AAGH,QAFa,QAAQ,OAAO,CAEhB,WAAW,IAAI,aAAa;;;;;;ACA1C,MAAa,cAAc,OACzB,EAAE,eAAe,WAAW,aAAa,QACzC,WACG;CACH,MAAM,OAAO,QAAQ,OAAO;CAC5B,MAAM,YAAY,gBAAgB,EAAE,EAAE,OAAO;CAE7C,MAAM,iBAAiB,mCACrB,EAAE,eAAe,EACjB,OACD;AAED,KAAI;EACF,MAAM,aAAa,6BAA6B;GAC9C,OAAO,eAAe;GACtB,aAAa,eAAe,SAAS;GACtC,CAAC;EAEF,MAAMC,iBAAiC;GACrC,SAAS,cAAc;GACvB;GAEA,OAAO,eAAe;GACtB,UAAU,eAAe;GACzB;GACD;AAED,QAAM,UAAU,YAAY;GAC1B;GACA,eAAe,KAAK;GACrB,CAAC;UACK,OAAO;AACd,OAAK,OAAO,MAAM,wBAAwB,EAAE,OAAO,CAAC;;;;;;;;;;;;AC1CxD,MAAa,+BACX,EAAE,oCACF,WACS;AACT,KAAI,iCAAiC,WAAW,EAC9C;CAGF,MAAM,OAAO,QAAQ,OAAO;CAE5B,MAAM,sCACJ,iCAAiC,KAAK,EAAE,SAAS,GAAG;CAEtD,MAAMC,mCAA8D,KAAK,MACtE,KAAK,CACL,yBAAyB,QACvB,4BACC,CAAC,oCAAoC,SACnC,wBAAwB,GACzB,CACJ;AAEH,MAAK,MAAM,IAAI,EACb,0BAA0B,CACxB,GAAG,kCACH,GAAG,iCACJ,EACF,CAAC;;;;;;ACjCJ,MAAa,kDACX,EAAE,gBACF,WACG;CACH,MAAM,OAAO,QAAQ,OAAO;AAE5B,MAAK,MAAM,IAAI,EACb,sBAAsB;EACpB,GAAG,KAAK,MAAM,KAAK,CAAC;EACpB,GAAG;EACJ,EACF,CAAC;;;;;;;;;;;;;;;;;ACUJ,MAAa,wCACX,EACE,6BAA6B,MAC7B,gBACA,qBAEF,WACoB;AACpB,KAAI,eAAe,WAAW,EAC5B,QAAO,EAAE;CAGX,MAAM,yBAAyB,kBAAkB,OAAO;CAExD,MAAMC,oBAAqC,EAAE;CAC7C,MAAMC,mCAAoD,EAAE;CAC5D,MAAMC,6CAAqE,EAAE;CAE7E,MAAMC,2BAA4C,eAAe,KAC9D,cAAc;EACb,MAAM,gCAAgC,uBAAuB,MAC1D,0BAA0B,sBAAsB,OAAO,UAAU,GACnE;AAED,MAAI,CAAC,+BAA+B;AAClC,qBAAkB,KAAK,UAAU;AACjC,UAAO;;EAGT,MAAM,6BACJ,8BAA8B,sBAAsB;AAEtD,MAAI,8BAA8B,sBAAsB;AACtD,OAAI,2BACF,4CACE,8BAA8B,wBAC5B;AAGN,UAAO;IACL,GAAG;IACH,sBACE,8BAA8B;IACjC;;AAGH,MAAI,2BACF,kCAAiC,KAAK,UAAU;AAGlD,SAAO;GAEV;CAED,IAAI,wBAAwB;AAE5B,KAAI,OAAO,KAAK,2CAA2C,CAAC,SAAS,GAAG;AACtE,iDACE,EAAE,cAAc,4CAA4C,EAC5D,OACD;AAED,0BAAwB;;AAG1B,KAAI,4BAA4B;EAC9B,MAAM,kBAAkB,CACtB,GAAG,kCACH,GAAG,kBACJ;AAED,MAAI,gBAAgB,SAAS,GAAG;AAC9B,+BACE,EAAE,kCAAkC,iBAAiB,EACrD,OACD;AAED,2BAAwB;AAExB,QAAK,MAAM,oBAAoB,kBAC7B,CAAK,YAAY,EAAE,eAAe,kBAAkB,EAAE,OAAO;;;AAKnE,KAAI,sBACF,gCAA+B,OAAO;AAGxC,QAAO;;;;;;;;;ACrGT,MAAa,sBAAsB,OAAO,EACxC,QACA,gBACA,SACA,KACA,SACA,OACA,UACA,WACA,WACA,gBAC+B;CAM/B,MAAM,SAAS,CADA,GAAG,OAAO,kCAAkC,eAAe,YAClD,QAAQ,CAAC,KAAK,KAAK;CAI3C,MAAM,yBAAyB,YAAY,SAAS;CACpD,MAAM,sBAAsB,GAAG,CAAC,QAAQ,UAAU,CAAC,KACjD,uBACD,CAAC;CAEF,MAAMC,eAAyB,EAAE;AACjC,cAAa,KAAK,QAAQ,MAAM;AAChC,cAAa,KAAK,aAAa;AAC/B,KAAI,QACF,cAAa,KAAK,aAAa,UAAU;AAG3C,cAAa,KAAK,UAAU,QAAQ;AAEpC,KAAI,SACF,cAAa,KAAK,cAAc,WAAW;AAG7C,KAAI,UACF,cAAa,KAAK,eAAe,YAAY;AAG/C,KAAI,WAAW,OACb,cAAa,KACX,aAAa,UAAU,KAAK,aAAa,SAAS,SAAS,CAAC,MAAM,GACnE;AAKH,QAAO,CAAC,qBAFO,aAAa,KAAK,KAAK,CAEF,CAAC,KAAK,KAAK;;;;;;AChEjD,MAAa,gCAAgC,WAA0B;CACrE,MAAM,EAAE,YAAY,eAAe,OAAO;AAE1C,QAAO,cAAc,QAAQ,6KAA6K,QAAQ;;;;;;;;;ACMpN,MAAa,iCACX,EAAE,2BACF,WACG;CACH,MAAM,OAAO,QAAQ,OAAO;CAE5B,MAAM,gBAAgB,KAAK,MAAM,KAAK;CAEtC,MAAM,EAAE,6BAA6B,KAAK,MAAM,KAAK;CAErD,MAAM,mCAAmC,yBAAyB,QAC/D,YAAY,QAAQ,OAAO,wBAAwB,GACrD;AAED,MAAK,MAAM,IAAI,EACb,0BAA0B,kCAC3B,CAAC;;;;;AAMF,yCAAwC,EAAE,eAAe,EAAE,OAAO;;;;;;;;;AC/BpE,MAAa,WAAW,UACtB,iBAAiB;;;;;;;;ACEnB,MAAa,mBACX,OACA,SACiC;AACjC,KAAI,CAAC,QAAQ,MAAM,CAAE,QAAO;AAE5B,QAAO,UAAU,SAAS,MAAM,SAAS;;;;;;;;;;;;ACyB3C,MAAa,kCAAkC,OAC7C,EACE,eACA,eACA,oBACA,WACA,OACA,aAAa,OACb,mBACA,oBACA,WACA,mBAEF,WAC4B;CAC5B,MAAM,OAAO,QAAQ,OAAO;CAC5B,MAAM,YAAY,gBAAgB,EAAE,EAAE,OAAO;CAE7C,MAAM,aAAa,6BAA6B;EAC9C;EACA,aAAa;EACd,CAAC;CAEF,IAAI;AAEJ,KAAI,CAAC,OAAO,KAEV,qBAAoB,UAAU,cAAc,KAAK,UAAU;UAClD,WAET,qBAAoB,UAAU,eAAe,KAAK,UAAU;UACnD,OAAO,QAAQ,gBAKxB,qBAAoB,UAAU,cAAc,KAAK,UAAU;KAG3D,qBAAoB,UAAU,WAAW,KAAK,UAAU;AAG1D,KAAI;AACF,SAAO,MAAM,kBAAkB;GAC7B,eAAe,KAAK;GACpB,eAAe;IAEb,2BAA2B,oBAAoB,KAAK,aAAa;KAC/D,SAAS,QAAQ;KACjB,WAAW,QAAQ;KACnB,MAAM,QAAQ;KACf,EAAE;IACH,cAAc,oBAAoB,OAAO;IAElC;IACP;IACA,SAAS;IACT,qBAAqB;IACrB;IACA,eAAe;IACf;IACA,gBAAgB;IACjB;GACF,CAAC;UACK,OAAO;AACd,OAAK,OAAO,MAAM,gDAAgD,MAAM;AAExE,MACE,gBAAgB,OAAO,0BAA0B,IACjD,gBAAgB,OAAO,8BAA8B,CAErD,OAAM,IAAI,sCAAsC,EAC9C,OAAO,OACR,CAAC;AAGJ,QAAM;;;;;;;;;;AC1GV,MAAa,+BACX,cACiB;AAOjB,QANe,OAAO,KAAK,gBAAgB,CAEtB,MAClB,UAAU,gBAAgB,OAAO,iBAAiB,UACpD,IAEe;;;;;;;;;;;;;;;;;;;ACGlB,MAAa,mBAAmB,SAAS,kBAAkB,KAAoB;CAE7E,MAAM,EAAE,OAAO,iBADF,QAAQ,OAAO;CAG5B,MAAM,yBACJ,cAAc,iBAAiB,gBAAgB;CAEjD,MAAM,EAAE,oBAAoB,MAAM,KAAK;AAEvC,eAAc,iBAAiB,4BAA4B;CAE3D,MAAM,WAAW,gBAAgB;AAEjC,KAAI,CAAC,SACH,QAAO,EAAE;AA0CX,QAvCqB,SAClB,KAAK,YAAY;AAChB,MAAI,CAAC,QAAQ,UAAW,QAAO,EAAE;EAEjC,MAAM,QAAQ,4BAA4B,QAAQ,UAAU;AAE5D,MAAI,CAAC,SAAS,UAAU,UAAU,CAAC,MAAO,QAAO,EAAE;AAEnD,SAAO,QAAQ,SAAS,KAAK,yBAAyB;AA0BpD,UAAO,uBAzB0B;IAC/B,mBAAmB,qBAAqB;IACxC;IACA,SAAS,qBAAqB;IAC9B,aACE,qBAAqB,cAAc,qBAAqB;IAC1D,aAAa,qBAAqB;IAClC,SAAS,qBAAqB,SAAS;IACvC,MAAM,qBAAqB;IAC3B,gBAAgB;KACd,UAAU,qBAAqB,eAAe;KAC9C,SAAS,qBAAqB,eAAe;KAC7C,MAAM,qBAAqB,eAAe;KAC1C,QAAQ,qBAAqB,eAAe;KAC7C;IACD,WAAW,qBAAqB;IAChC,SAAS,EACP,MAAM,CACJ,GAAI,qBAAqB,0BAA0B,EAAE,EACrD,GAAI,qBAAqB,WAAW,EAAE,CACvC,EACF;IACD,SAAS,qBAAqB,aAAa;IAC5C,CAEyC;IAC1C;GACF,CACD,MAAM;;;;;;ACnEX,MAAa,6CAC2B;CACpC,MAAM,2BAAW,IAAI,KAAoC;AAEzD,QAAO;EACL,WAAW;EACX,WAAW,2BAA2B;AACpC,YAAS,IAAI,uBAAuB,OAAO,uBAAuB;;EAErE;;;;;ACbL,MAAa,oCAAoC,8BAC/C,kCACA,qCACD;;;;;;;;ACGD,MAAa,uBACX,WACsB;CACtB,MAAM,iCACJ,kCAAkC,OAAO;CAE3C,MAAM,oCAAoC,MAAM,KAC9C,+BAA+B,KAAK,CAAC,QAAQ,CAC9C;CAED,MAAM,eAAe,gBAAgB,OAAO;AAY5C,QAVyB,kCAAkC,KACxD,EAAE,SAAS,YAAY;AAKtB,SAJ6B,aAAa,QACvC,gBAAgB,YAAY,UAAU,MACxC,CAE2B,IAAI,QAAQ;GAE3C,CAEuB,MAAM;;;;;;AClBhC,MAAa,mCACX,EAAE,WAAW,SACb,WACoB;CACpB,MAAM,mBAAmB,oBAAoB,OAAO;AAEpD,KAAI,iBAAiB,WAAW,EAC9B,OAAM,IAAI,yBAAyB;CAGrC,MAAM,kBAAkB,iBAAiB,MACtC,sBACCC,kBAAgB,cAAc,aAAaA,kBAAgB,UAAU,MACxE;AAED,eACE,iBACA,uCAAuC,MAAM,mBAAmB,YACjE;AAED,QAAO"}