@dynamic-labs-sdk/client 1.11.0 → 1.12.0

package/dist/{getWalletProviderByKey-BXGcVzkf.esm.js.map → getWalletProviderByKey-OC_h7kSB.esm.js.map}

@@ -1 +1 @@
-{"version":3,"file":"getWalletProviderByKey-BXGcVzkf.esm.js","names":["newState: Partial<DynamicCoreState>","walletProvider"],"sources":["../src/modules/wallets/emitWalletAccountsChangedEvent/emitWalletAccountsChangedEvent.ts","../src/modules/auth/updateAuthFromVerifyResponse/checkAndRaiseWalletAccountsChangedEvent/checkAndRaiseWalletAccountsChangedEvent.ts","../src/modules/mfa/isUserMissingMfaAuth/isUserMissingMfaAuth.ts","../src/modules/wallets/getWalletProviders/getWalletProviders.ts","../src/modules/waas/findWaasWalletProviderByChain/findWaasWalletProviderByChain.ts","../src/modules/waas/isWaasWalletAccount/isWaasWalletAccount.ts","../src/modules/waas/restoreUserSharesForAllWalletAccounts/restoreUserSharesForAllWalletAccounts.ts","../src/modules/auth/decodeJwt/decodeJwt.ts","../src/modules/auth/updateAuthFromVerifyResponse/elevatedAccessTokens/normalizeScopes/normalizeScopes.ts","../src/modules/auth/updateAuthFromVerifyResponse/elevatedAccessTokens/parseElevatedAccessToken/parseElevatedAccessToken.ts","../src/modules/auth/updateAuthFromVerifyResponse/elevatedAccessTokens/upsertElevatedAccessToken/upsertElevatedAccessToken.ts","../src/modules/auth/updateAuthFromVerifyResponse/updateAuthFromVerifyResponse.ts","../src/modules/wallets/utils/getVerifiedCredentialForWalletAccount/getVerifiedCredentialForWalletAccount.ts","../src/modules/wallets/getWalletProviderByKey/getWalletProviderByKey.ts"],"sourcesContent":["import type { DynamicClient } from '../../../client/types';\nimport { emitEvent } from '../../clientEvents';\nimport { getWalletAccounts } from '../getWalletAccounts';\n\n/**\n * Emits the `walletAccountsChanged` event.\n  * @not-instrumented\n */\nexport const emitWalletAccountsChangedEvent = (client: DynamicClient): void => {\n  const walletAccounts = getWalletAccounts(client);\n\n  emitEvent(\n    {\n      args: { walletAccounts },\n      event: 'walletAccountsChanged',\n    },\n    client\n  );\n};\n","import { getCore } from '../../../../client/core/getCore';\nimport type { DynamicClient } from '../../../../client/types';\nimport { emitWalletAccountsChangedEvent } from '../../../wallets/emitWalletAccountsChangedEvent';\nimport { getWalletAccountsFromState } from '../../../wallets/getWalletAccounts/getWalletAccountsFromState';\n\ntype CheckAndRaiseWalletAccountsChangedEventParams = {\n  previousState: Readonly<DynamicCoreState>;\n};\n\n/** @not-instrumented */\nexport const checkAndRaiseWalletAccountsChangedEvent = (\n  { previousState }: CheckAndRaiseWalletAccountsChangedEventParams,\n  client: DynamicClient\n) => {\n  const core = getCore(client);\n\n  const walletAccountsHashBefore = getWalletAccountsHash(previousState, client);\n\n  const walletAccountsHashAfter = getWalletAccountsHash(\n    core.state.get(),\n    client\n  );\n\n  if (walletAccountsHashBefore !== walletAccountsHashAfter) {\n    emitWalletAccountsChangedEvent(client);\n  }\n};\n\n \n \nconst getWalletAccountsHash = (\n  state: Readonly<DynamicCoreState>,\n  client: DynamicClient\n) =>\n  getWalletAccountsFromState(state, client)\n    .map((walletAccount) => JSON.stringify(walletAccount))\n    .sort()\n    .join('-');\n","import { getDefaultClient } from '../../../client/defaultClient';\nimport { assertDefined } from '../../../utils/assertDefined';\n\n/**\n * Checks if the user requires additional MFA authentication.\n *\n * This function determines if the current user session requires\n * additional multi-factor authentication to access certain features.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns True if the user needs additional MFA authentication, false otherwise.\n  * @not-instrumented\n */\nexport const isUserMissingMfaAuth = (client = getDefaultClient()) => {\n  const user = client.user;\n\n  assertDefined(user, 'User not logged in');\n\n  return Boolean(user.scope?.includes('requiresAdditionalAuth'));\n};\n","import type { DynamicClient } from '../../../client/types';\nimport { getWalletProviderRegistry } from '../walletProviderRegistry';\n\n/**\n * Get all available wallet providers to interact with internally.\n  * @not-instrumented\n */\nexport const getWalletProviders = (client: DynamicClient) => {\n  const walletProviderRegistry = getWalletProviderRegistry(client);\n\n  return walletProviderRegistry.listProviders();\n};\n","import { WalletProviderEnum } from '@dynamic-labs/sdk-api-core';\n\nimport type { DynamicClient } from '../../../client/types/DynamicClient';\nimport type { Chain } from '../../chain';\nimport { getWalletProviders } from '../../wallets/getWalletProviders';\nimport { formatWalletProviderKey } from '../../wallets/utils/formatWalletProviderKey';\nimport { DYNAMIC_WAAS_METADATA } from '../constants';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\nimport type { WaasWalletProvider } from '../waas.types';\n\ntype FindWaasWalletProviderByChainParams = {\n  chain: Chain;\n};\n\n/** @not-instrumented */\nexport const findWaasWalletProviderByChain = (\n  { chain }: FindWaasWalletProviderByChainParams,\n  client: DynamicClient\n): WaasWalletProvider | null => {\n  const providers = getWalletProviders(client);\n\n  const waasProviderKey = formatWalletProviderKey({\n    chain,\n    displayName: DYNAMIC_WAAS_METADATA.displayName,\n    walletProviderType: WalletProviderEnum.EmbeddedWallet,\n  });\n\n  const waasProvider = providers.find(\n    (provider) => provider.key === waasProviderKey && provider.chain === chain\n  );\n\n  if (!waasProvider || !isWaasWalletProvider(waasProvider)) {\n    return null;\n  }\n\n  return waasProvider;\n};\n","import type { WalletAccount } from '../../wallets/walletAccount';\nimport { DYNAMIC_WAAS_METADATA } from '../constants';\n\ntype IsWaasWalletAccountParams = {\n  walletAccount: WalletAccount;\n};\n\n/**\n * This function determines whether the provided wallet account is a Dynamic\n * WaaS wallet account.\n *\n * @param params.walletAccount - The wallet account to check.\n * @returns True if the wallet account is a WaaS wallet account, false otherwise.\n  * @not-instrumented\n */\nexport const isWaasWalletAccount = ({\n  walletAccount,\n}: IsWaasWalletAccountParams): boolean => {\n  return walletAccount.walletProviderKey.includes(\n    DYNAMIC_WAAS_METADATA.normalizedWalletName\n  );\n};\n","import type { DynamicClient } from '../../../client/types';\nimport { isUserMissingMfaAuth } from '../../mfa/isUserMissingMfaAuth';\nimport { getWalletAccounts } from '../../wallets/getWalletAccounts';\nimport { findWaasWalletProviderByChain } from '../findWaasWalletProviderByChain';\nimport { isWaasWalletAccount } from '../isWaasWalletAccount';\n\n/** @not-instrumented */\nexport const restoreUserSharesForAllWalletAccounts = async (\n  client: DynamicClient\n) => {\n  /**\n   * Restoring the user shares will fails if the user is missing the MFA auth.\n   * This early return prevents the attempt to restore the user shares to fail\n   * when we know it will fails and just add noise to the logs.\n   */\n  if (isUserMissingMfaAuth(client)) {\n    return;\n  }\n\n  const walletAccounts = getWalletAccounts(client);\n\n  const waasWalletAccounts = walletAccounts.filter((walletAccount) =>\n    isWaasWalletAccount({ walletAccount })\n  );\n\n  await Promise.all(\n    waasWalletAccounts.map(async (walletAccount) => {\n      const provider = findWaasWalletProviderByChain(\n        { chain: walletAccount.chain },\n        client\n      );\n\n      /**\n       * The environment might not have the embedded wallet extensions installed.\n       * In that case there is no provider for the chain and we can skip restoring the user share.\n       */\n      if (!provider) return;\n\n      return provider.restoreUserShareForWalletAccount({ walletAccount });\n    })\n  );\n};\n","import { InvalidParamError } from '../../../errors/InvalidParamError';\n\nexport type JwtPayload = {\n  [key: string]: unknown;\n  exp: number;\n  iat: number;\n  scope: string;\n  singleUse?: boolean;\n  sub: string;\n};\n\n/**\n * Decodes a JWT token and returns the full payload.\n *\n * This function extracts and returns the complete JWT payload including scopes,\n * expiration time, and other claims.\n *\n * @param jwt - The JWT token string.\n * @returns The decoded JWT payload object.\n * @throws InvalidParamError if the token is invalid or cannot be decoded.\n *\n * @example\n * ```typescript\n * const payload = decodeJwt(jwt);\n * // Returns: { scopes: ['wallet:export'], exp: 1234567890, ... }\n * ```\n  * @not-instrumented\n */\n// eslint-disable-next-line custom-rules/require-single-object-param\nexport const decodeJwt = (jwt: string): JwtPayload => {\n  try {\n    // JWT format: header.payload.signature\n    const parts = jwt.split('.');\n    if (parts.length !== 3) {\n      throw new InvalidParamError('Invalid JWT format');\n    }\n\n    // Decode the payload (second part)\n    // Base64URL decode: replace URL-safe characters and decode\n    const base64Payload = parts[1].replaceAll('-', '+').replaceAll('_', '/');\n    // Add padding if needed\n    const paddedPayload =\n      base64Payload + '='.repeat((4 - (base64Payload.length % 4)) % 4);\n    const decodedPayload = atob(paddedPayload);\n    const claims = JSON.parse(decodedPayload) as JwtPayload;\n\n    return claims;\n  } catch (error) {\n    if (error instanceof InvalidParamError) {\n      throw error;\n    }\n    throw new InvalidParamError(\n      `Failed to decode JWT: ${\n        error instanceof Error ? error.message : String(error)\n      }`\n    );\n  }\n};\n","/**\n * Normalizes scopes by deduplicating and sorting them.\n * This creates a canonical representation for comparison.\n *\n * @param scopes - Array of scope strings (may contain duplicates)\n * @returns Normalized, sorted array of unique scopes\n  * @not-instrumented\n */\n// eslint-disable-next-line custom-rules/require-single-object-param\nexport const normalizeScopes = (scopes: string[]): string[] => {\n  return [...new Set(scopes)].sort((a, b) => a.localeCompare(b));\n};\n","import { decodeJwt } from '../../../decodeJwt';\nimport type { ParsedElevatedAccessToken } from '../elevatedAccessTokens.types';\nimport { normalizeScopes } from '../normalizeScopes';\n\nexport type ParseElevatedAccessTokenOptions = {\n  /** JWT string containing the elevated access token. */\n  token: string;\n};\n\n/**\n * Validates and parses an elevated access token from a JWT string.\n * Extracts scopes, expiration, and validates the token structure.\n *\n * Policy decisions:\n * - Tokens without scopes are rejected (returns null)\n * - Tokens with empty scopes array are rejected (returns null)\n * - Tokens without exp field are rejected (returns null)\n * - Expired tokens are rejected (returns null)\n *\n * @returns Parsed token data or null if token is invalid/expired\n * @not-instrumented\n */\nexport const parseElevatedAccessToken = ({\n  token,\n}: ParseElevatedAccessTokenOptions): ParsedElevatedAccessToken | null => {\n  const payload = decodeJwt(token);\n  const rawScopeClaim = payload?.scope;\n  const processedScopes = rawScopeClaim?.split(' ') ?? [];\n  const filteredScopes = processedScopes.filter((s) => s.length > 0);\n  const singleUse = payload.singleUse ?? false;\n\n  // Reject tokens without scopes or with empty scopes\n  if (!filteredScopes || filteredScopes.length === 0) {\n    return null;\n  }\n\n  // Reject tokens without exp field\n  if (!payload.exp) {\n    return null;\n  }\n\n  // Convert exp (seconds) to Date (milliseconds)\n  const expiresAt = new Date(payload.exp * 1000);\n\n  // Reject expired tokens\n  if (expiresAt <= new Date()) {\n    return null;\n  }\n\n  return {\n    expiresAt,\n    normalizedScopes: normalizeScopes(filteredScopes),\n    scopes: filteredScopes,\n    singleUse,\n    token,\n  };\n};\n","import type {\n  ElevatedAccessToken,\n  ParsedElevatedAccessToken,\n} from '../elevatedAccessTokens.types';\nimport { normalizeScopes } from '../normalizeScopes';\n\n/**\n * Upserts an elevated access token into the current tokens array.\n *\n * Policy: Only one token per normalized scope-set is allowed.\n * If a token with the same normalized scopes exists, it is replaced.\n * This ensures we don't accumulate multiple tokens for the same scope combination.\n *\n * @param currentTokens - Current array of elevated access tokens\n * @param newToken - New token to upsert\n * @returns Updated array of tokens with the new token upserted\n  * @not-instrumented\n */\nexport const upsertElevatedAccessToken = ({\n  currentTokens,\n  newToken,\n}: {\n  currentTokens: ElevatedAccessToken[];\n  newToken: ParsedElevatedAccessToken;\n}): ElevatedAccessToken[] => {\n  const newScopeKey = normalizeScopes(newToken.scopes).join(' ');\n\n  // Remove any existing token with the same normalized scopes\n  const filteredTokens = currentTokens.filter((existingToken) => {\n    const existingScopeKey = normalizeScopes(existingToken.scopes).join(' ');\n    return existingScopeKey !== newScopeKey;\n  });\n\n  // Add the new token\n  return [\n    ...filteredTokens,\n    {\n      expiresAt: newToken.expiresAt,\n      scopes: newToken.scopes,\n      singleUse: newToken.singleUse,\n      token: newToken.token,\n    },\n  ];\n};\n","import type { VerifyResponse } from '@dynamic-labs/sdk-api-core';\n\nimport { getCore } from '../../../client/core/getCore';\nimport type { DynamicCoreState } from '../../../client/core/types';\nimport type { DynamicClient } from '../../../client/types';\nimport { setCookie } from '../../../utils/setCookie';\nimport { isCookieEnabled } from '../../projectSettings/isCookieEnabled';\nimport { restoreUserSharesForAllWalletAccounts } from '../../waas/restoreUserSharesForAllWalletAccounts';\nimport { DYNAMIC_AUTH_COOKIE_NAME } from '../consts';\nimport { checkAndRaiseWalletAccountsChangedEvent } from './checkAndRaiseWalletAccountsChangedEvent';\nimport { parseElevatedAccessToken } from './elevatedAccessTokens/parseElevatedAccessToken';\nimport { upsertElevatedAccessToken } from './elevatedAccessTokens/upsertElevatedAccessToken';\n\ntype UpdateAuthFromVerifyResponseParams = {\n  response: VerifyResponse;\n};\n\n/** @not-instrumented */\nexport const updateAuthFromVerifyResponse = (\n  { response }: UpdateAuthFromVerifyResponseParams,\n  client: DynamicClient\n) => {\n  const core = getCore(client);\n\n  const previousState = { ...core.state.get() };\n\n  const { user, minifiedJwt, jwt, expiresAt, mfaToken, elevatedAccessToken } =\n    response;\n\n  // Expires at is in seconds, so we need to convert it to milliseconds\n  const sessionExpiresAt = new Date(expiresAt * 1000);\n\n  const newState: Partial<DynamicCoreState> = {\n    legacyToken: jwt ?? null,\n    sessionExpiresAt: sessionExpiresAt,\n    token: minifiedJwt ?? null,\n    user,\n  };\n\n  // only override the mfaToken if a new one is provided in the response\n  if (mfaToken) {\n    newState.mfaToken = mfaToken;\n  }\n\n  // Add elevated access token to the array if a new one is provided in the response\n  // Policy: Only one token per normalized scope-set is allowed (old tokens are replaced)\n  // Always preserve existing tokens to ensure they're synced to storage\n  const currentTokens = core.state.get().elevatedAccessTokens || [];\n  newState.elevatedAccessTokens = currentTokens;\n  \n  if (elevatedAccessToken) {\n    const parsedToken = parseElevatedAccessToken({\n      token: elevatedAccessToken,\n    });\n    if (parsedToken) {\n      newState.elevatedAccessTokens = upsertElevatedAccessToken({\n        currentTokens,\n        newToken: parsedToken,\n      });\n    }\n  }\n\n  core.state.set(newState);\n\n  /**\n   * For customers using a sandbox environment with cookies enabled, we need to set the cookie\n   * programmatically because Redcoast won't set the cookie via headers. We set the cookie programmatically\n   * so customers can access the cookie from document.cookie consistently between sandbox and live environments.\n   */\n  if (minifiedJwt && isCookieEnabled(client)) {\n    const expireDate = sessionExpiresAt.toUTCString();\n\n    setCookie(\n      `${DYNAMIC_AUTH_COOKIE_NAME}=${minifiedJwt}; expires=${expireDate}; path=/; SameSite=Lax`\n    );\n  }\n\n  checkAndRaiseWalletAccountsChangedEvent({ previousState }, client);\n\n  // if the user is logging in, we should restore user shares\n  // for all wallet accounts for performance reasons\n  const isUserLoggingIn = !previousState.user && Boolean(newState.user);\n  if (isUserLoggingIn) {\n    void restoreUserSharesForAllWalletAccounts(client);\n  }\n};\n","import type { DynamicClient } from '../../../../client/types/DynamicClient';\nimport type { WalletAccount } from '../../walletAccount';\n\ntype GetVerifiedCredentialForWalletAccountParams = {\n  walletAccount: WalletAccount;\n};\n\n/** @not-instrumented */\nexport const getVerifiedCredentialForWalletAccount = (\n  { walletAccount }: GetVerifiedCredentialForWalletAccountParams,\n  client: DynamicClient\n) => {\n  return client.user?.verifiedCredentials.find(\n    (vc) => vc.id === walletAccount.verifiedCredentialId\n  );\n};\n","import type { DynamicClient } from '../../../client/types';\nimport { NoWalletProviderFoundError } from '../../../errors/NoWalletProviderFoundError';\nimport { getWalletProviders } from '../getWalletProviders';\n\ntype GetWalletProviderByKeyParams = {\n  walletProviderKey: string;\n};\n\n/** @not-instrumented */\nexport const getWalletProviderByKey = (\n  { walletProviderKey }: GetWalletProviderByKeyParams,\n  client: DynamicClient\n) => {\n  const walletProviders = getWalletProviders(client);\n\n  const walletProvider = walletProviders.find(\n    (walletProvider) => walletProvider.key === walletProviderKey\n  );\n\n  if (!walletProvider) {\n    throw new NoWalletProviderFoundError({ walletProviderKey });\n  }\n\n  return walletProvider;\n};\n"],"mappings":";;;;;;;;AAQA,MAAa,kCAAkC,WAAgC;AAG7E,WACE;EACE,MAAM,EAAE,gBAJW,kBAAkB,OAAO,EAIpB;EACxB,OAAO;EACR,EACD,OACD;;;;;;ACPH,MAAa,2CACX,EAAE,iBACF,WACG;CACH,MAAM,OAAO,QAAQ,OAAO;AAS5B,KAPiC,sBAAsB,eAAe,OAAO,KAE7C,sBAC9B,KAAK,MAAM,KAAK,EAChB,OACD,CAGC,gCAA+B,OAAO;;AAM1C,MAAM,yBACJ,OACA,WAEA,2BAA2B,OAAO,OAAO,CACtC,KAAK,kBAAkB,KAAK,UAAU,cAAc,CAAC,CACrD,MAAM,CACN,KAAK,IAAI;;;;;;;;;;;;;;ACxBd,MAAa,wBAAwB,SAAS,kBAAkB,KAAK;CACnE,MAAM,OAAO,OAAO;AAEpB,eAAc,MAAM,qBAAqB;AAEzC,QAAO,QAAQ,KAAK,OAAO,SAAS,yBAAyB,CAAC;;;;;;;;;ACXhE,MAAa,sBAAsB,WAA0B;AAG3D,QAF+B,0BAA0B,OAAO,CAElC,eAAe;;;;;;ACK/C,MAAa,iCACX,EAAE,SACF,WAC8B;CAC9B,MAAM,YAAY,mBAAmB,OAAO;CAE5C,MAAM,kBAAkB,wBAAwB;EAC9C;EACA,aAAa,sBAAsB;EACnC,oBAAoB,mBAAmB;EACxC,CAAC;CAEF,MAAM,eAAe,UAAU,MAC5B,aAAa,SAAS,QAAQ,mBAAmB,SAAS,UAAU,MACtE;AAED,KAAI,CAAC,gBAAgB,CAAC,qBAAqB,aAAa,CACtD,QAAO;AAGT,QAAO;;;;;;;;;;;;;ACpBT,MAAa,uBAAuB,EAClC,oBACwC;AACxC,QAAO,cAAc,kBAAkB,SACrC,sBAAsB,qBACvB;;;;;;ACbH,MAAa,wCAAwC,OACnD,WACG;;;;;;AAMH,KAAI,qBAAqB,OAAO,CAC9B;CAKF,MAAM,qBAFiB,kBAAkB,OAAO,CAEN,QAAQ,kBAChD,oBAAoB,EAAE,eAAe,CAAC,CACvC;AAED,OAAM,QAAQ,IACZ,mBAAmB,IAAI,OAAO,kBAAkB;EAC9C,MAAM,WAAW,8BACf,EAAE,OAAO,cAAc,OAAO,EAC9B,OACD;;;;;AAMD,MAAI,CAAC,SAAU;AAEf,SAAO,SAAS,iCAAiC,EAAE,eAAe,CAAC;GACnE,CACH;;;;;;;;;;;;;;;;;;;;;;ACXH,MAAa,aAAa,QAA4B;AACpD,KAAI;EAEF,MAAM,QAAQ,IAAI,MAAM,IAAI;AAC5B,MAAI,MAAM,WAAW,EACnB,OAAM,IAAI,kBAAkB,qBAAqB;EAKnD,MAAM,gBAAgB,MAAM,GAAG,WAAW,KAAK,IAAI,CAAC,WAAW,KAAK,IAAI;EAExE,MAAM,gBACJ,gBAAgB,IAAI,QAAQ,IAAK,cAAc,SAAS,KAAM,EAAE;EAClE,MAAM,iBAAiB,KAAK,cAAc;AAG1C,SAFe,KAAK,MAAM,eAAe;UAGlC,OAAO;AACd,MAAI,iBAAiB,kBACnB,OAAM;AAER,QAAM,IAAI,kBACR,yBACE,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,GAEzD;;;;;;;;;;;;;;AC9CL,MAAa,mBAAmB,WAA+B;AAC7D,QAAO,CAAC,GAAG,IAAI,IAAI,OAAO,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,EAAE,CAAC;;;;;;;;;;;;;;;;;;ACYhE,MAAa,4BAA4B,EACvC,YACuE;CACvE,MAAM,UAAU,UAAU,MAAM;CAGhC,MAAM,mBAFgB,SAAS,QACQ,MAAM,IAAI,IAAI,EAAE,EAChB,QAAQ,MAAM,EAAE,SAAS,EAAE;CAClE,MAAM,YAAY,QAAQ,aAAa;AAGvC,KAAI,CAAC,kBAAkB,eAAe,WAAW,EAC/C,QAAO;AAIT,KAAI,CAAC,QAAQ,IACX,QAAO;CAIT,MAAM,4BAAY,IAAI,KAAK,QAAQ,MAAM,IAAK;AAG9C,KAAI,6BAAa,IAAI,MAAM,CACzB,QAAO;AAGT,QAAO;EACL;EACA,kBAAkB,gBAAgB,eAAe;EACjD,QAAQ;EACR;EACA;EACD;;;;;;;;;;;;;;;;;ACrCH,MAAa,6BAA6B,EACxC,eACA,eAI2B;CAC3B,MAAM,cAAc,gBAAgB,SAAS,OAAO,CAAC,KAAK,IAAI;AAS9D,QAAO,CACL,GAPqB,cAAc,QAAQ,kBAAkB;AAE7D,SADyB,gBAAgB,cAAc,OAAO,CAAC,KAAK,IAAI,KAC5C;GAC5B,EAKA;EACE,WAAW,SAAS;EACpB,QAAQ,SAAS;EACjB,WAAW,SAAS;EACpB,OAAO,SAAS;EACjB,CACF;;;;;;ACxBH,MAAa,gCACX,EAAE,YACF,WACG;CACH,MAAM,OAAO,QAAQ,OAAO;CAE5B,MAAM,gBAAgB,EAAE,GAAG,KAAK,MAAM,KAAK,EAAE;CAE7C,MAAM,EAAE,MAAM,aAAa,KAAK,WAAW,UAAU,wBACnD;CAGF,MAAM,mCAAmB,IAAI,KAAK,YAAY,IAAK;CAEnD,MAAMA,WAAsC;EAC1C,aAAa,OAAO;EACF;EAClB,OAAO,eAAe;EACtB;EACD;AAGD,KAAI,SACF,UAAS,WAAW;CAMtB,MAAM,gBAAgB,KAAK,MAAM,KAAK,CAAC,wBAAwB,EAAE;AACjE,UAAS,uBAAuB;AAEhC,KAAI,qBAAqB;EACvB,MAAM,cAAc,yBAAyB,EAC3C,OAAO,qBACR,CAAC;AACF,MAAI,YACF,UAAS,uBAAuB,0BAA0B;GACxD;GACA,UAAU;GACX,CAAC;;AAIN,MAAK,MAAM,IAAI,SAAS;;;;;;AAOxB,KAAI,eAAe,gBAAgB,OAAO,CAGxC,WACE,GAAG,yBAAyB,GAAG,YAAY,YAH1B,iBAAiB,aAAa,CAGmB,wBACnE;AAGH,yCAAwC,EAAE,eAAe,EAAE,OAAO;AAKlE,KADwB,CAAC,cAAc,QAAQ,QAAQ,SAAS,KAAK,CAEnE,CAAK,sCAAsC,OAAO;;;;;;AC3EtD,MAAa,yCACX,EAAE,iBACF,WACG;AACH,QAAO,OAAO,MAAM,oBAAoB,MACrC,OAAO,GAAG,OAAO,cAAc,qBACjC;;;;;;ACLH,MAAa,0BACX,EAAE,qBACF,WACG;CAGH,MAAM,iBAFkB,mBAAmB,OAAO,CAEX,MACpC,qBAAmBC,iBAAe,QAAQ,kBAC5C;AAED,KAAI,CAAC,eACH,OAAM,IAAI,2BAA2B,EAAE,mBAAmB,CAAC;AAG7D,QAAO"}
+{"version":3,"file":"getWalletProviderByKey-OC_h7kSB.esm.js","names":["newState: Partial<DynamicCoreState>","walletProvider"],"sources":["../src/modules/wallets/emitWalletAccountsChangedEvent/emitWalletAccountsChangedEvent.ts","../src/modules/auth/updateAuthFromVerifyResponse/checkAndRaiseWalletAccountsChangedEvent/checkAndRaiseWalletAccountsChangedEvent.ts","../src/modules/mfa/isUserMissingMfaAuth/isUserMissingMfaAuth.ts","../src/modules/wallets/getWalletProviders/getWalletProviders.ts","../src/modules/waas/findWaasWalletProviderByChain/findWaasWalletProviderByChain.ts","../src/modules/waas/isWaasWalletAccount/isWaasWalletAccount.ts","../src/modules/waas/restoreUserSharesForAllWalletAccounts/restoreUserSharesForAllWalletAccounts.ts","../src/modules/auth/decodeJwt/decodeJwt.ts","../src/modules/auth/updateAuthFromVerifyResponse/elevatedAccessTokens/normalizeScopes/normalizeScopes.ts","../src/modules/auth/updateAuthFromVerifyResponse/elevatedAccessTokens/parseElevatedAccessToken/parseElevatedAccessToken.ts","../src/modules/auth/updateAuthFromVerifyResponse/elevatedAccessTokens/upsertElevatedAccessToken/upsertElevatedAccessToken.ts","../src/modules/auth/updateAuthFromVerifyResponse/updateAuthFromVerifyResponse.ts","../src/modules/wallets/utils/getVerifiedCredentialForWalletAccount/getVerifiedCredentialForWalletAccount.ts","../src/modules/wallets/getWalletProviderByKey/getWalletProviderByKey.ts"],"sourcesContent":["import type { DynamicClient } from '../../../client/types';\nimport { emitEvent } from '../../clientEvents';\nimport { getWalletAccounts } from '../getWalletAccounts';\n\n/**\n * Emits the `walletAccountsChanged` event.\n  * @not-instrumented\n */\nexport const emitWalletAccountsChangedEvent = (client: DynamicClient): void => {\n  const walletAccounts = getWalletAccounts(client);\n\n  emitEvent(\n    {\n      args: { walletAccounts },\n      event: 'walletAccountsChanged',\n    },\n    client\n  );\n};\n","import { getCore } from '../../../../client/core/getCore';\nimport type { DynamicClient } from '../../../../client/types';\nimport { emitWalletAccountsChangedEvent } from '../../../wallets/emitWalletAccountsChangedEvent';\nimport { getWalletAccountsFromState } from '../../../wallets/getWalletAccounts/getWalletAccountsFromState';\n\ntype CheckAndRaiseWalletAccountsChangedEventParams = {\n  previousState: Readonly<DynamicCoreState>;\n};\n\n/** @not-instrumented */\nexport const checkAndRaiseWalletAccountsChangedEvent = (\n  { previousState }: CheckAndRaiseWalletAccountsChangedEventParams,\n  client: DynamicClient\n) => {\n  const core = getCore(client);\n\n  const walletAccountsHashBefore = getWalletAccountsHash(previousState, client);\n\n  const walletAccountsHashAfter = getWalletAccountsHash(\n    core.state.get(),\n    client\n  );\n\n  if (walletAccountsHashBefore !== walletAccountsHashAfter) {\n    emitWalletAccountsChangedEvent(client);\n  }\n};\n\n \n \nconst getWalletAccountsHash = (\n  state: Readonly<DynamicCoreState>,\n  client: DynamicClient\n) =>\n  getWalletAccountsFromState(state, client)\n    .map((walletAccount) => JSON.stringify(walletAccount))\n    .sort()\n    .join('-');\n","import { getDefaultClient } from '../../../client/defaultClient';\nimport { assertDefined } from '../../../utils/assertDefined';\n\n/**\n * Checks if the user requires additional MFA authentication.\n *\n * This function determines if the current user session requires\n * additional multi-factor authentication to access certain features.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns True if the user needs additional MFA authentication, false otherwise.\n  * @not-instrumented\n */\nexport const isUserMissingMfaAuth = (client = getDefaultClient()) => {\n  const user = client.user;\n\n  assertDefined(user, 'User not logged in');\n\n  return Boolean(user.scope?.includes('requiresAdditionalAuth'));\n};\n","import type { DynamicClient } from '../../../client/types';\nimport { getWalletProviderRegistry } from '../walletProviderRegistry';\n\n/**\n * Get all available wallet providers to interact with internally.\n  * @not-instrumented\n */\nexport const getWalletProviders = (client: DynamicClient) => {\n  const walletProviderRegistry = getWalletProviderRegistry(client);\n\n  return walletProviderRegistry.listProviders();\n};\n","import { WalletProviderEnum } from '@dynamic-labs/sdk-api-core';\n\nimport type { DynamicClient } from '../../../client/types/DynamicClient';\nimport type { Chain } from '../../chain';\nimport { getWalletProviders } from '../../wallets/getWalletProviders';\nimport { formatWalletProviderKey } from '../../wallets/utils/formatWalletProviderKey';\nimport { DYNAMIC_WAAS_METADATA } from '../constants';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\nimport type { WaasWalletProvider } from '../waas.types';\n\ntype FindWaasWalletProviderByChainParams = {\n  chain: Chain;\n};\n\n/** @not-instrumented */\nexport const findWaasWalletProviderByChain = (\n  { chain }: FindWaasWalletProviderByChainParams,\n  client: DynamicClient\n): WaasWalletProvider | null => {\n  const providers = getWalletProviders(client);\n\n  const waasProviderKey = formatWalletProviderKey({\n    chain,\n    displayName: DYNAMIC_WAAS_METADATA.displayName,\n    walletProviderType: WalletProviderEnum.EmbeddedWallet,\n  });\n\n  const waasProvider = providers.find(\n    (provider) => provider.key === waasProviderKey && provider.chain === chain\n  );\n\n  if (!waasProvider || !isWaasWalletProvider(waasProvider)) {\n    return null;\n  }\n\n  return waasProvider;\n};\n","import type { WalletAccount } from '../../wallets/walletAccount';\nimport { DYNAMIC_WAAS_METADATA } from '../constants';\n\ntype IsWaasWalletAccountParams = {\n  walletAccount: WalletAccount;\n};\n\n/**\n * This function determines whether the provided wallet account is a Dynamic\n * WaaS wallet account.\n *\n * @param params.walletAccount - The wallet account to check.\n * @returns True if the wallet account is a WaaS wallet account, false otherwise.\n  * @not-instrumented\n */\nexport const isWaasWalletAccount = ({\n  walletAccount,\n}: IsWaasWalletAccountParams): boolean => {\n  return walletAccount.walletProviderKey.includes(\n    DYNAMIC_WAAS_METADATA.normalizedWalletName\n  );\n};\n","import type { DynamicClient } from '../../../client/types';\nimport { isUserMissingMfaAuth } from '../../mfa/isUserMissingMfaAuth';\nimport { getWalletAccounts } from '../../wallets/getWalletAccounts';\nimport { findWaasWalletProviderByChain } from '../findWaasWalletProviderByChain';\nimport { isWaasWalletAccount } from '../isWaasWalletAccount';\n\n/** @not-instrumented */\nexport const restoreUserSharesForAllWalletAccounts = async (\n  client: DynamicClient\n) => {\n  /**\n   * Restoring the user shares will fails if the user is missing the MFA auth.\n   * This early return prevents the attempt to restore the user shares to fail\n   * when we know it will fails and just add noise to the logs.\n   */\n  if (isUserMissingMfaAuth(client)) {\n    return;\n  }\n\n  const walletAccounts = getWalletAccounts(client);\n\n  const waasWalletAccounts = walletAccounts.filter((walletAccount) =>\n    isWaasWalletAccount({ walletAccount })\n  );\n\n  await Promise.all(\n    waasWalletAccounts.map(async (walletAccount) => {\n      const provider = findWaasWalletProviderByChain(\n        { chain: walletAccount.chain },\n        client\n      );\n\n      /**\n       * The environment might not have the embedded wallet extensions installed.\n       * In that case there is no provider for the chain and we can skip restoring the user share.\n       */\n      if (!provider) return;\n\n      return provider.restoreUserShareForWalletAccount({ walletAccount });\n    })\n  );\n};\n","import { InvalidParamError } from '../../../errors/InvalidParamError';\n\nexport type JwtPayload = {\n  [key: string]: unknown;\n  exp: number;\n  iat: number;\n  scope: string;\n  singleUse?: boolean;\n  sub: string;\n};\n\n/**\n * Decodes a JWT token and returns the full payload.\n *\n * This function extracts and returns the complete JWT payload including scopes,\n * expiration time, and other claims.\n *\n * @param jwt - The JWT token string.\n * @returns The decoded JWT payload object.\n * @throws InvalidParamError if the token is invalid or cannot be decoded.\n *\n * @example\n * ```typescript\n * const payload = decodeJwt(jwt);\n * // Returns: { scopes: ['wallet:export'], exp: 1234567890, ... }\n * ```\n  * @not-instrumented\n */\n// eslint-disable-next-line custom-rules/require-single-object-param\nexport const decodeJwt = (jwt: string): JwtPayload => {\n  try {\n    // JWT format: header.payload.signature\n    const parts = jwt.split('.');\n    if (parts.length !== 3) {\n      throw new InvalidParamError('Invalid JWT format');\n    }\n\n    // Decode the payload (second part)\n    // Base64URL decode: replace URL-safe characters and decode\n    const base64Payload = parts[1].replaceAll('-', '+').replaceAll('_', '/');\n    // Add padding if needed\n    const paddedPayload =\n      base64Payload + '='.repeat((4 - (base64Payload.length % 4)) % 4);\n    const decodedPayload = atob(paddedPayload);\n    const claims = JSON.parse(decodedPayload) as JwtPayload;\n\n    return claims;\n  } catch (error) {\n    if (error instanceof InvalidParamError) {\n      throw error;\n    }\n    throw new InvalidParamError(\n      `Failed to decode JWT: ${\n        error instanceof Error ? error.message : String(error)\n      }`\n    );\n  }\n};\n","/**\n * Normalizes scopes by deduplicating and sorting them.\n * This creates a canonical representation for comparison.\n *\n * @param scopes - Array of scope strings (may contain duplicates)\n * @returns Normalized, sorted array of unique scopes\n  * @not-instrumented\n */\n// eslint-disable-next-line custom-rules/require-single-object-param\nexport const normalizeScopes = (scopes: string[]): string[] => {\n  return [...new Set(scopes)].sort((a, b) => a.localeCompare(b));\n};\n","import { decodeJwt } from '../../../decodeJwt';\nimport type { ParsedElevatedAccessToken } from '../elevatedAccessTokens.types';\nimport { normalizeScopes } from '../normalizeScopes';\n\nexport type ParseElevatedAccessTokenOptions = {\n  /** JWT string containing the elevated access token. */\n  token: string;\n};\n\n/**\n * Validates and parses an elevated access token from a JWT string.\n * Extracts scopes, expiration, and validates the token structure.\n *\n * Policy decisions:\n * - Tokens without scopes are rejected (returns null)\n * - Tokens with empty scopes array are rejected (returns null)\n * - Tokens without exp field are rejected (returns null)\n * - Expired tokens are rejected (returns null)\n *\n * @returns Parsed token data or null if token is invalid/expired\n * @not-instrumented\n */\nexport const parseElevatedAccessToken = ({\n  token,\n}: ParseElevatedAccessTokenOptions): ParsedElevatedAccessToken | null => {\n  const payload = decodeJwt(token);\n  const rawScopeClaim = payload?.scope;\n  const processedScopes = rawScopeClaim?.split(' ') ?? [];\n  const filteredScopes = processedScopes.filter((s) => s.length > 0);\n  const singleUse = payload.singleUse ?? false;\n\n  // Reject tokens without scopes or with empty scopes\n  if (!filteredScopes || filteredScopes.length === 0) {\n    return null;\n  }\n\n  // Reject tokens without exp field\n  if (!payload.exp) {\n    return null;\n  }\n\n  // Convert exp (seconds) to Date (milliseconds)\n  const expiresAt = new Date(payload.exp * 1000);\n\n  // Reject expired tokens\n  if (expiresAt <= new Date()) {\n    return null;\n  }\n\n  return {\n    expiresAt,\n    normalizedScopes: normalizeScopes(filteredScopes),\n    scopes: filteredScopes,\n    singleUse,\n    token,\n  };\n};\n","import type {\n  ElevatedAccessToken,\n  ParsedElevatedAccessToken,\n} from '../elevatedAccessTokens.types';\nimport { normalizeScopes } from '../normalizeScopes';\n\n/**\n * Upserts an elevated access token into the current tokens array.\n *\n * Policy: Only one token per normalized scope-set is allowed.\n * If a token with the same normalized scopes exists, it is replaced.\n * This ensures we don't accumulate multiple tokens for the same scope combination.\n *\n * @param currentTokens - Current array of elevated access tokens\n * @param newToken - New token to upsert\n * @returns Updated array of tokens with the new token upserted\n  * @not-instrumented\n */\nexport const upsertElevatedAccessToken = ({\n  currentTokens,\n  newToken,\n}: {\n  currentTokens: ElevatedAccessToken[];\n  newToken: ParsedElevatedAccessToken;\n}): ElevatedAccessToken[] => {\n  const newScopeKey = normalizeScopes(newToken.scopes).join(' ');\n\n  // Remove any existing token with the same normalized scopes\n  const filteredTokens = currentTokens.filter((existingToken) => {\n    const existingScopeKey = normalizeScopes(existingToken.scopes).join(' ');\n    return existingScopeKey !== newScopeKey;\n  });\n\n  // Add the new token\n  return [\n    ...filteredTokens,\n    {\n      expiresAt: newToken.expiresAt,\n      scopes: newToken.scopes,\n      singleUse: newToken.singleUse,\n      token: newToken.token,\n    },\n  ];\n};\n","import type { VerifyResponse } from '@dynamic-labs/sdk-api-core';\n\nimport { getCore } from '../../../client/core/getCore';\nimport type { DynamicCoreState } from '../../../client/core/types';\nimport type { DynamicClient } from '../../../client/types';\nimport { setCookie } from '../../../utils/setCookie';\nimport { isCookieEnabled } from '../../projectSettings/isCookieEnabled';\nimport { restoreUserSharesForAllWalletAccounts } from '../../waas/restoreUserSharesForAllWalletAccounts';\nimport { DYNAMIC_AUTH_COOKIE_NAME } from '../consts';\nimport { checkAndRaiseWalletAccountsChangedEvent } from './checkAndRaiseWalletAccountsChangedEvent';\nimport { parseElevatedAccessToken } from './elevatedAccessTokens/parseElevatedAccessToken';\nimport { upsertElevatedAccessToken } from './elevatedAccessTokens/upsertElevatedAccessToken';\n\ntype UpdateAuthFromVerifyResponseParams = {\n  response: VerifyResponse;\n};\n\n/** @not-instrumented */\nexport const updateAuthFromVerifyResponse = (\n  { response }: UpdateAuthFromVerifyResponseParams,\n  client: DynamicClient\n) => {\n  const core = getCore(client);\n\n  const previousState = { ...core.state.get() };\n\n  const { user, minifiedJwt, jwt, expiresAt, mfaToken, elevatedAccessToken } =\n    response;\n\n  // Expires at is in seconds, so we need to convert it to milliseconds\n  const sessionExpiresAt = new Date(expiresAt * 1000);\n\n  const newState: Partial<DynamicCoreState> = {\n    legacyToken: jwt ?? null,\n    sessionExpiresAt: sessionExpiresAt,\n    token: minifiedJwt ?? null,\n    user,\n  };\n\n  // only override the mfaToken if a new one is provided in the response\n  if (mfaToken) {\n    newState.mfaToken = mfaToken;\n  }\n\n  // Add elevated access token to the array if a new one is provided in the response\n  // Policy: Only one token per normalized scope-set is allowed (old tokens are replaced)\n  // Always preserve existing tokens to ensure they're synced to storage\n  const currentTokens = core.state.get().elevatedAccessTokens || [];\n  newState.elevatedAccessTokens = currentTokens;\n  \n  if (elevatedAccessToken) {\n    const parsedToken = parseElevatedAccessToken({\n      token: elevatedAccessToken,\n    });\n    if (parsedToken) {\n      newState.elevatedAccessTokens = upsertElevatedAccessToken({\n        currentTokens,\n        newToken: parsedToken,\n      });\n    }\n  }\n\n  core.state.set(newState);\n\n  /**\n   * For customers using a sandbox environment with cookies enabled, we need to set the cookie\n   * programmatically because Redcoast won't set the cookie via headers. We set the cookie programmatically\n   * so customers can access the cookie from document.cookie consistently between sandbox and live environments.\n   */\n  if (minifiedJwt && isCookieEnabled(client)) {\n    const expireDate = sessionExpiresAt.toUTCString();\n\n    setCookie(\n      `${DYNAMIC_AUTH_COOKIE_NAME}=${minifiedJwt}; expires=${expireDate}; path=/; SameSite=Lax`\n    );\n  }\n\n  checkAndRaiseWalletAccountsChangedEvent({ previousState }, client);\n\n  // if the user is logging in, we should restore user shares\n  // for all wallet accounts for performance reasons\n  const isUserLoggingIn = !previousState.user && Boolean(newState.user);\n  if (isUserLoggingIn) {\n    void restoreUserSharesForAllWalletAccounts(client);\n  }\n};\n","import type { DynamicClient } from '../../../../client/types/DynamicClient';\nimport type { WalletAccount } from '../../walletAccount';\n\ntype GetVerifiedCredentialForWalletAccountParams = {\n  walletAccount: WalletAccount;\n};\n\n/** @not-instrumented */\nexport const getVerifiedCredentialForWalletAccount = (\n  { walletAccount }: GetVerifiedCredentialForWalletAccountParams,\n  client: DynamicClient\n) => {\n  return client.user?.verifiedCredentials.find(\n    (vc) => vc.id === walletAccount.verifiedCredentialId\n  );\n};\n","import type { DynamicClient } from '../../../client/types';\nimport { NoWalletProviderFoundError } from '../../../errors/NoWalletProviderFoundError';\nimport { getWalletProviders } from '../getWalletProviders';\n\ntype GetWalletProviderByKeyParams = {\n  walletProviderKey: string;\n};\n\n/** @not-instrumented */\nexport const getWalletProviderByKey = (\n  { walletProviderKey }: GetWalletProviderByKeyParams,\n  client: DynamicClient\n) => {\n  const walletProviders = getWalletProviders(client);\n\n  const walletProvider = walletProviders.find(\n    (walletProvider) => walletProvider.key === walletProviderKey\n  );\n\n  if (!walletProvider) {\n    throw new NoWalletProviderFoundError({ walletProviderKey });\n  }\n\n  return walletProvider;\n};\n"],"mappings":";;;;;;;;AAQA,MAAa,kCAAkC,WAAgC;AAG7E,WACE;EACE,MAAM,EAAE,gBAJW,kBAAkB,OAAO,EAIpB;EACxB,OAAO;EACR,EACD,OACD;;;;;;ACPH,MAAa,2CACX,EAAE,iBACF,WACG;CACH,MAAM,OAAO,QAAQ,OAAO;AAS5B,KAPiC,sBAAsB,eAAe,OAAO,KAE7C,sBAC9B,KAAK,MAAM,KAAK,EAChB,OACD,CAGC,gCAA+B,OAAO;;AAM1C,MAAM,yBACJ,OACA,WAEA,2BAA2B,OAAO,OAAO,CACtC,KAAK,kBAAkB,KAAK,UAAU,cAAc,CAAC,CACrD,MAAM,CACN,KAAK,IAAI;;;;;;;;;;;;;;ACxBd,MAAa,wBAAwB,SAAS,kBAAkB,KAAK;CACnE,MAAM,OAAO,OAAO;AAEpB,eAAc,MAAM,qBAAqB;AAEzC,QAAO,QAAQ,KAAK,OAAO,SAAS,yBAAyB,CAAC;;;;;;;;;ACXhE,MAAa,sBAAsB,WAA0B;AAG3D,QAF+B,0BAA0B,OAAO,CAElC,eAAe;;;;;;ACK/C,MAAa,iCACX,EAAE,SACF,WAC8B;CAC9B,MAAM,YAAY,mBAAmB,OAAO;CAE5C,MAAM,kBAAkB,wBAAwB;EAC9C;EACA,aAAa,sBAAsB;EACnC,oBAAoB,mBAAmB;EACxC,CAAC;CAEF,MAAM,eAAe,UAAU,MAC5B,aAAa,SAAS,QAAQ,mBAAmB,SAAS,UAAU,MACtE;AAED,KAAI,CAAC,gBAAgB,CAAC,qBAAqB,aAAa,CACtD,QAAO;AAGT,QAAO;;;;;;;;;;;;;ACpBT,MAAa,uBAAuB,EAClC,oBACwC;AACxC,QAAO,cAAc,kBAAkB,SACrC,sBAAsB,qBACvB;;;;;;ACbH,MAAa,wCAAwC,OACnD,WACG;;;;;;AAMH,KAAI,qBAAqB,OAAO,CAC9B;CAKF,MAAM,qBAFiB,kBAAkB,OAAO,CAEN,QAAQ,kBAChD,oBAAoB,EAAE,eAAe,CAAC,CACvC;AAED,OAAM,QAAQ,IACZ,mBAAmB,IAAI,OAAO,kBAAkB;EAC9C,MAAM,WAAW,8BACf,EAAE,OAAO,cAAc,OAAO,EAC9B,OACD;;;;;AAMD,MAAI,CAAC,SAAU;AAEf,SAAO,SAAS,iCAAiC,EAAE,eAAe,CAAC;GACnE,CACH;;;;;;;;;;;;;;;;;;;;;;ACXH,MAAa,aAAa,QAA4B;AACpD,KAAI;EAEF,MAAM,QAAQ,IAAI,MAAM,IAAI;AAC5B,MAAI,MAAM,WAAW,EACnB,OAAM,IAAI,kBAAkB,qBAAqB;EAKnD,MAAM,gBAAgB,MAAM,GAAG,WAAW,KAAK,IAAI,CAAC,WAAW,KAAK,IAAI;EAExE,MAAM,gBACJ,gBAAgB,IAAI,QAAQ,IAAK,cAAc,SAAS,KAAM,EAAE;EAClE,MAAM,iBAAiB,KAAK,cAAc;AAG1C,SAFe,KAAK,MAAM,eAAe;UAGlC,OAAO;AACd,MAAI,iBAAiB,kBACnB,OAAM;AAER,QAAM,IAAI,kBACR,yBACE,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,GAEzD;;;;;;;;;;;;;;AC9CL,MAAa,mBAAmB,WAA+B;AAC7D,QAAO,CAAC,GAAG,IAAI,IAAI,OAAO,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,EAAE,CAAC;;;;;;;;;;;;;;;;;;ACYhE,MAAa,4BAA4B,EACvC,YACuE;CACvE,MAAM,UAAU,UAAU,MAAM;CAGhC,MAAM,mBAFgB,SAAS,QACQ,MAAM,IAAI,IAAI,EAAE,EAChB,QAAQ,MAAM,EAAE,SAAS,EAAE;CAClE,MAAM,YAAY,QAAQ,aAAa;AAGvC,KAAI,CAAC,kBAAkB,eAAe,WAAW,EAC/C,QAAO;AAIT,KAAI,CAAC,QAAQ,IACX,QAAO;CAIT,MAAM,4BAAY,IAAI,KAAK,QAAQ,MAAM,IAAK;AAG9C,KAAI,6BAAa,IAAI,MAAM,CACzB,QAAO;AAGT,QAAO;EACL;EACA,kBAAkB,gBAAgB,eAAe;EACjD,QAAQ;EACR;EACA;EACD;;;;;;;;;;;;;;;;;ACrCH,MAAa,6BAA6B,EACxC,eACA,eAI2B;CAC3B,MAAM,cAAc,gBAAgB,SAAS,OAAO,CAAC,KAAK,IAAI;AAS9D,QAAO,CACL,GAPqB,cAAc,QAAQ,kBAAkB;AAE7D,SADyB,gBAAgB,cAAc,OAAO,CAAC,KAAK,IAAI,KAC5C;GAC5B,EAKA;EACE,WAAW,SAAS;EACpB,QAAQ,SAAS;EACjB,WAAW,SAAS;EACpB,OAAO,SAAS;EACjB,CACF;;;;;;ACxBH,MAAa,gCACX,EAAE,YACF,WACG;CACH,MAAM,OAAO,QAAQ,OAAO;CAE5B,MAAM,gBAAgB,EAAE,GAAG,KAAK,MAAM,KAAK,EAAE;CAE7C,MAAM,EAAE,MAAM,aAAa,KAAK,WAAW,UAAU,wBACnD;CAGF,MAAM,mCAAmB,IAAI,KAAK,YAAY,IAAK;CAEnD,MAAMA,WAAsC;EAC1C,aAAa,OAAO;EACF;EAClB,OAAO,eAAe;EACtB;EACD;AAGD,KAAI,SACF,UAAS,WAAW;CAMtB,MAAM,gBAAgB,KAAK,MAAM,KAAK,CAAC,wBAAwB,EAAE;AACjE,UAAS,uBAAuB;AAEhC,KAAI,qBAAqB;EACvB,MAAM,cAAc,yBAAyB,EAC3C,OAAO,qBACR,CAAC;AACF,MAAI,YACF,UAAS,uBAAuB,0BAA0B;GACxD;GACA,UAAU;GACX,CAAC;;AAIN,MAAK,MAAM,IAAI,SAAS;;;;;;AAOxB,KAAI,eAAe,gBAAgB,OAAO,CAGxC,WACE,GAAG,yBAAyB,GAAG,YAAY,YAH1B,iBAAiB,aAAa,CAGmB,wBACnE;AAGH,yCAAwC,EAAE,eAAe,EAAE,OAAO;AAKlE,KADwB,CAAC,cAAc,QAAQ,QAAQ,SAAS,KAAK,CAEnE,CAAK,sCAAsC,OAAO;;;;;;AC3EtD,MAAa,yCACX,EAAE,iBACF,WACG;AACH,QAAO,OAAO,MAAM,oBAAoB,MACrC,OAAO,GAAG,OAAO,cAAc,qBACjC;;;;;;ACLH,MAAa,0BACX,EAAE,qBACF,WACG;CAGH,MAAM,iBAFkB,mBAAmB,OAAO,CAEX,MACpC,qBAAmBC,iBAAe,QAAQ,kBAC5C;AAED,KAAI,CAAC,eACH,OAAM,IAAI,2BAA2B,EAAE,mBAAmB,CAAC;AAG7D,QAAO"}

package/dist/index.cjs

@@ -1,9 +1,10 @@
-const require_isMfaRequiredForAction = require('./isMfaRequiredForAction-CxWuGsmB.cjs');
-const require_InvalidParamError = require('./InvalidParamError-CMesesy6.cjs');
-const require_getNetworkProviderFromNetworkId = require('./getNetworkProviderFromNetworkId-D4xzWb7w.cjs');
-const require_getWalletProviderByKey = require('./getWalletProviderByKey-1zHjzqbz.cjs');
-const require_refreshAuth = require('./refreshAuth-CKcNynMk.cjs');
-const require_NotWaasWalletAccountError = require('./NotWaasWalletAccountError-D-yqOoH6.cjs');
+const require_isMfaRequiredForAction = require('./isMfaRequiredForAction-DSo1ysdD.cjs');
+const require_InvalidParamError = require('./InvalidParamError-Bgg4SDfm.cjs');
+const require_getNetworkProviderFromNetworkId = require('./getNetworkProviderFromNetworkId-Afx6InoJ.cjs');
+const require_getWalletProviderByKey = require('./getWalletProviderByKey-DRex9vzR.cjs');
+const require_refreshAuth = require('./refreshAuth-Ca_JABru.cjs');
+const require_isDynamicWaasEnabled = require('./isDynamicWaasEnabled-CEVTY3gQ.cjs');
+const require_preconnectWaasIframe = require('./preconnectWaasIframe-Cb9xM6kI.cjs');
 let _dynamic_labs_sdk_assert_package_version = require("@dynamic-labs-sdk/assert-package-version");
 let _dynamic_labs_sdk_api_core = require("@dynamic-labs/sdk-api-core");
 let zod_mini = require("zod/mini");
@@ -2111,6 +2112,7 @@ const processSocialCallback = async ({ url, requestedScopes }, client) => {
 	if (storedSocialRedirectState.state !== dynamicOauthState) throw new InvalidRedirectStorageStateError();
 	const { provider, codeVerifier } = storedSocialRedirectState;
 	await core.storage.removeItem(redirectStateStorageKeySchema);
+	require_preconnectWaasIframe.preconnectWaasIframe(client);
 	let response;
 	if (client.user) response = await apiClient.oauthVerify({
 		environmentId: core.environmentId,
@@ -2500,6 +2502,8 @@ const withCheckoutSessionTokenCleanupOn401 = async ({ call, transactionId }, cli
 * exchange source record. The response includes `exchangeSource.metadata.url`
 * which can be embedded in an iframe for the user to complete payment.
 *
+* @deprecated Use {@link attachFlowSource} instead. See https://www.dynamic.xyz/docs/javascript/reference/flow-getting-started
+*
 * @param params AttachCheckoutTransactionSourceParams - The source details to attach.
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns The updated checkout transaction (with exchangeSource if sourceType is 'exchange')
@@ -2547,6 +2551,8 @@ const __attachCheckoutTransactionSource_wrapped = require_InvalidParamError.inst
 * For exchange sources, `txHash` can be omitted — the user confirms
 * they completed the payment and the transaction moves to `broadcasted`.
 *
+* @deprecated Use {@link broadcastFlow} instead. See https://www.dynamic.xyz/docs/javascript/reference/flow-getting-started
+*
 * @param params BroadcastCheckoutTransactionParams - The transaction ID and optional tx hash.
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns The updated checkout transaction
@@ -2582,6 +2588,8 @@ const __broadcastCheckoutTransaction_wrapped = require_InvalidParamError.instrum
 /**
 * Cancels a checkout transaction before it has been broadcasted
 *
+* @deprecated Use {@link cancelFlow} instead. See https://www.dynamic.xyz/docs/javascript/reference/flow-getting-started
+*
 * @param params CancelCheckoutTransactionParams - The transaction to cancel.
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns The cancelled checkout transaction
@@ -2627,6 +2635,8 @@ const getCheckouts = async (client) => {
 /**
 * Creates a new checkout transaction and stores the session token for subsequent calls
 *
+* @deprecated Use the Flow API instead. See https://www.dynamic.xyz/docs/javascript/reference/flow-getting-started
+*
 * @param params CreateCheckoutTransactionParams - The parameters for the checkout transaction.
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns The created transaction with session token
@@ -2673,6 +2683,8 @@ const __createCheckoutTransaction_wrapped = require_InvalidParamError.instrument
 /**
 * Fetches the current state of a checkout transaction
 *
+* @deprecated Use {@link getFlow} instead. See https://www.dynamic.xyz/docs/javascript/reference/flow-getting-started
+*
 * @param params GetCheckoutTransactionParams - The parameters for fetching the transaction.
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns The checkout transaction
@@ -2691,6 +2703,8 @@ const getCheckoutTransaction = async ({ transactionId }, client = require_Invali
 /**
 * Fetches a quote for a checkout transaction
 *
+* @deprecated Use {@link getFlowQuote} instead. See https://www.dynamic.xyz/docs/javascript/reference/flow-getting-started
+*
 * @param params GetCheckoutTransactionQuoteParams - The quote parameters.
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns The updated checkout transaction with quote data
@@ -2720,6 +2734,8 @@ const getCheckoutTransactionQuote = async ({ fromChainId, fromTokenAddress, slip
 * This should be called immediately before triggering the transaction signing.
 * It will confirm the quote is still valid, the risk state is cleared, and the transaction is ready to be signed.
 *
+* @deprecated Use {@link prepareFlowSigning} instead. See https://www.dynamic.xyz/docs/javascript/reference/flow-getting-started
+*
 * @param params PrepareCheckoutTransactionParams - The transaction to prepare.
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns The updated checkout transaction
@@ -2867,6 +2883,8 @@ const __executeSwapTransaction_wrapped = require_InvalidParamError.instrumentFun
 * 3. Delegates on-chain signing to the wallet provider's executeSwapTransaction method
 * 4. Calls broadcastCheckoutTransaction with the resulting txHash
 *
+* @deprecated Use {@link submitFlowTransaction} instead. See https://www.dynamic.xyz/docs/javascript/reference/flow-getting-started
+*
 * @param params SubmitCheckoutTransactionParams - The transaction ID, wallet account, and optional step callback.
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns The broadcasted checkout transaction
@@ -2918,6 +2936,8 @@ const __submitCheckoutTransaction_wrapped = require_InvalidParamError.instrument
 * the realtime checkout transaction channel. Will be re-enabled once the
 * dashboard-api environment has the Ably wiring in place.
 *
+* @deprecated Use the Flow API instead. See https://www.dynamic.xyz/docs/javascript/reference/flow-getting-started
+*
 * @param params.transactionId - The ID of the checkout transaction to track.
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @not-instrumented
@@ -2937,6 +2957,8 @@ const trackCheckoutTransaction = (_params, client = require_InvalidParamError.ge
 * Returns `false` when the from token already matches a settlement token, so no
 * conversion is needed.
 *
+* @deprecated Use the Flow API instead. See https://www.dynamic.xyz/docs/javascript/reference/flow-getting-started
+*
 * @param params - The from token details and the checkout's settlement config.
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns Whether a token conversion is required
@@ -4832,7 +4854,9 @@ const __setDefaultMfaDevice_wrapped = require_InvalidParamError.instrumentFuncti
 */
 const sendEmailOTP = async ({ email }, client = require_InvalidParamError.getDefaultClient()) => {
 	const core = require_InvalidParamError.getCore(client);
-	const { verificationUUID } = await require_InvalidParamError.createApiClient({}, client).createEmailVerification({
+	const apiClient = require_InvalidParamError.createApiClient({}, client);
+	require_preconnectWaasIframe.preconnectWaasIframe(client);
+	const { verificationUUID } = await apiClient.createEmailVerification({
 		emailVerificationCreateRequest: {
 			captchaToken: require_getNetworkProviderFromNetworkId.consumeCaptchaToken(client),
 			email
@@ -5795,6 +5819,7 @@ const sendSmsOTP = async ({ isoCountryCode, phoneNumber }, client = require_Inva
 	const core = require_InvalidParamError.getCore(client);
 	const apiClient = require_InvalidParamError.createApiClient({}, client);
 	const phoneCountryCode = supportedCountries[isoCountryCode].code;
+	require_preconnectWaasIframe.preconnectWaasIframe(client);
 	const { verificationUUID } = await apiClient.createSmsVerification({
 		environmentId: core.environmentId,
 		smsVerificationCreateRequest: {
@@ -5882,6 +5907,7 @@ const verifyOTPForUserUpdate = async ({ otpVerification, verificationToken, requ
 * @redact-params
 */
 const verifyOTP = async ({ otpVerification, verificationToken, requestedScopes }, client = require_InvalidParamError.getDefaultClient()) => {
+	require_preconnectWaasIframe.preconnectWaasIframe(client);
 	let response;
 	if (client.user) response = await verifyOTPForUserUpdate({
 		otpVerification,
@@ -8421,7 +8447,7 @@ exports.NoNetworkProvidersError = require_getNetworkProviderFromNetworkId.NoNetw
 exports.NoPasskeyCredentialsFoundError = NoPasskeyCredentialsFoundError;
 exports.NoSmartWalletAccountSignerFoundError = NoSmartWalletAccountSignerFoundError;
 exports.NoWebAuthNSupportError = NoWebAuthNSupportError;
-exports.NotWaasWalletAccountError = require_NotWaasWalletAccountError.NotWaasWalletAccountError;
+exports.NotWaasWalletAccountError = require_isDynamicWaasEnabled.NotWaasWalletAccountError;
 exports.SandboxMaximumThresholdReachedError = require_InvalidParamError.SandboxMaximumThresholdReachedError;
 exports.SimulationFailedError = SimulationFailedError;
 exports.TokenSwapError = TokenSwapError;