@dynamic-labs-sdk/client 1.12.0 → 1.12.1

package/dist/getWalletProviderByKey-B821GpaI.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"getWalletProviderByKey-B821GpaI.cjs","names":["getWalletAccounts","getCore","getWalletAccountsFromState","getDefaultClient","getWalletProviderRegistry","formatWalletProviderKey","DYNAMIC_WAAS_METADATA","WalletProviderEnum","isWaasWalletProvider","DYNAMIC_WAAS_METADATA","getWalletAccounts","InvalidParamError","getCore","newState: Partial<DynamicCoreState>","isCookieEnabled","DYNAMIC_AUTH_COOKIE_NAME","walletProvider","NoWalletProviderFoundError"],"sources":["../src/modules/wallets/emitWalletAccountsChangedEvent/emitWalletAccountsChangedEvent.ts","../src/modules/auth/updateAuthFromVerifyResponse/checkAndRaiseWalletAccountsChangedEvent/checkAndRaiseWalletAccountsChangedEvent.ts","../src/modules/mfa/isUserMissingMfaAuth/isUserMissingMfaAuth.ts","../src/modules/wallets/getWalletProviders/getWalletProviders.ts","../src/modules/waas/findWaasWalletProviderByChain/findWaasWalletProviderByChain.ts","../src/modules/waas/isWaasWalletAccount/isWaasWalletAccount.ts","../src/modules/waas/initializeWaasClientsForEagerRecovery/initializeWaasClientsForEagerRecovery.ts","../src/modules/auth/decodeJwt/decodeJwt.ts","../src/modules/auth/updateAuthFromVerifyResponse/elevatedAccessTokens/normalizeScopes/normalizeScopes.ts","../src/modules/auth/updateAuthFromVerifyResponse/elevatedAccessTokens/parseElevatedAccessToken/parseElevatedAccessToken.ts","../src/modules/auth/updateAuthFromVerifyResponse/elevatedAccessTokens/upsertElevatedAccessToken/upsertElevatedAccessToken.ts","../src/modules/auth/updateAuthFromVerifyResponse/updateAuthFromVerifyResponse.ts","../src/modules/wallets/utils/getVerifiedCredentialForWalletAccount/getVerifiedCredentialForWalletAccount.ts","../src/modules/wallets/getWalletProviderByKey/getWalletProviderByKey.ts"],"sourcesContent":["import type { DynamicClient } from '../../../client/types';\nimport { emitEvent } from '../../clientEvents';\nimport { getWalletAccounts } from '../getWalletAccounts';\n\n/**\n * Emits the `walletAccountsChanged` event.\n  * @not-instrumented\n */\nexport const emitWalletAccountsChangedEvent = (client: DynamicClient): void => {\n  const walletAccounts = getWalletAccounts(client);\n\n  emitEvent(\n    {\n      args: { walletAccounts },\n      event: 'walletAccountsChanged',\n    },\n    client\n  );\n};\n","import { getCore } from '../../../../client/core/getCore';\nimport type { DynamicClient } from '../../../../client/types';\nimport { emitWalletAccountsChangedEvent } from '../../../wallets/emitWalletAccountsChangedEvent';\nimport { getWalletAccountsFromState } from '../../../wallets/getWalletAccounts/getWalletAccountsFromState';\n\ntype CheckAndRaiseWalletAccountsChangedEventParams = {\n  previousState: Readonly<DynamicCoreState>;\n};\n\n/** @not-instrumented */\nexport const checkAndRaiseWalletAccountsChangedEvent = (\n  { previousState }: CheckAndRaiseWalletAccountsChangedEventParams,\n  client: DynamicClient\n) => {\n  const core = getCore(client);\n\n  const walletAccountsHashBefore = getWalletAccountsHash(previousState, client);\n\n  const walletAccountsHashAfter = getWalletAccountsHash(\n    core.state.get(),\n    client\n  );\n\n  if (walletAccountsHashBefore !== walletAccountsHashAfter) {\n    emitWalletAccountsChangedEvent(client);\n  }\n};\n\n \n \nconst getWalletAccountsHash = (\n  state: Readonly<DynamicCoreState>,\n  client: DynamicClient\n) =>\n  getWalletAccountsFromState(state, client)\n    .map((walletAccount) => JSON.stringify(walletAccount))\n    .sort()\n    .join('-');\n","import { getDefaultClient } from '../../../client/defaultClient';\nimport { assertDefined } from '../../../utils/assertDefined';\n\n/**\n * Checks if the user requires additional MFA authentication.\n *\n * This function determines if the current user session requires\n * additional multi-factor authentication to access certain features.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns True if the user needs additional MFA authentication, false otherwise.\n  * @not-instrumented\n */\nexport const isUserMissingMfaAuth = (client = getDefaultClient()) => {\n  const user = client.user;\n\n  assertDefined(user, 'User not logged in');\n\n  return Boolean(user.scope?.includes('requiresAdditionalAuth'));\n};\n","import type { DynamicClient } from '../../../client/types';\nimport { getWalletProviderRegistry } from '../walletProviderRegistry';\n\n/**\n * Get all available wallet providers to interact with internally.\n  * @not-instrumented\n */\nexport const getWalletProviders = (client: DynamicClient) => {\n  const walletProviderRegistry = getWalletProviderRegistry(client);\n\n  return walletProviderRegistry.listProviders();\n};\n","import { WalletProviderEnum } from '@dynamic-labs/sdk-api-core';\n\nimport type { DynamicClient } from '../../../client/types/DynamicClient';\nimport type { Chain } from '../../chain';\nimport { getWalletProviders } from '../../wallets/getWalletProviders';\nimport { formatWalletProviderKey } from '../../wallets/utils/formatWalletProviderKey';\nimport { DYNAMIC_WAAS_METADATA } from '../constants';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\nimport type { WaasWalletProvider } from '../waas.types';\n\ntype FindWaasWalletProviderByChainParams = {\n  chain: Chain;\n};\n\n/** @not-instrumented */\nexport const findWaasWalletProviderByChain = (\n  { chain }: FindWaasWalletProviderByChainParams,\n  client: DynamicClient\n): WaasWalletProvider | null => {\n  const providers = getWalletProviders(client);\n\n  const waasProviderKey = formatWalletProviderKey({\n    chain,\n    displayName: DYNAMIC_WAAS_METADATA.displayName,\n    walletProviderType: WalletProviderEnum.EmbeddedWallet,\n  });\n\n  const waasProvider = providers.find(\n    (provider) => provider.key === waasProviderKey && provider.chain === chain\n  );\n\n  if (!waasProvider || !isWaasWalletProvider(waasProvider)) {\n    return null;\n  }\n\n  return waasProvider;\n};\n","import type { WalletAccount } from '../../wallets/walletAccount';\nimport { DYNAMIC_WAAS_METADATA } from '../constants';\n\ntype IsWaasWalletAccountParams = {\n  walletAccount: WalletAccount;\n};\n\n/**\n * This function determines whether the provided wallet account is a Dynamic\n * WaaS wallet account.\n *\n * @param params.walletAccount - The wallet account to check.\n * @returns True if the wallet account is a WaaS wallet account, false otherwise.\n  * @not-instrumented\n */\nexport const isWaasWalletAccount = ({\n  walletAccount,\n}: IsWaasWalletAccountParams): boolean => {\n  return walletAccount.walletProviderKey.includes(\n    DYNAMIC_WAAS_METADATA.normalizedWalletName\n  );\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { isUserMissingMfaAuth } from '../../mfa/isUserMissingMfaAuth';\nimport { getWalletAccounts } from '../../wallets/getWalletAccounts';\nimport { findWaasWalletProviderByChain } from '../findWaasWalletProviderByChain';\nimport { isWaasWalletAccount } from '../isWaasWalletAccount';\n\n/**\n * On login, boots the WaaS client once per chain so the SDK eagerly recovers\n * key shares itself (the `eagerlyRecoverKeyShares` capability) instead of the\n * host looping per wallet. Booting calls `initialize()`, which sends the auth\n * token the iframe needs to self-recover.\n *\n * @not-instrumented\n */\nexport const initializeWaasClientsForEagerRecovery = async (\n  client: DynamicClient\n): Promise<void> => {\n  /**\n   * Booting triggers recovery, which fails if the user is missing the MFA auth.\n   * This early return avoids attempting a call we know will fail and just adds\n   * noise to the logs.\n   */\n  if (isUserMissingMfaAuth(client)) {\n    return;\n  }\n\n  const waasChains = new Set(\n    getWalletAccounts(client)\n      .filter((walletAccount) => isWaasWalletAccount({ walletAccount }))\n      .map((walletAccount) => walletAccount.chain)\n  );\n\n  await Promise.all(\n    [...waasChains].map(async (chain) => {\n      const provider = findWaasWalletProviderByChain({ chain }, client);\n\n      /**\n       * The environment might not have the embedded wallet extensions installed.\n       * In that case there is no provider for the chain and nothing to boot.\n       */\n      if (!provider) return;\n\n      try {\n        await provider.getWaasClient();\n      } catch (error) {\n        getCore(client).logger.warn(\n          '[initializeWaasClientsForEagerRecovery] failed to boot waas client',\n          error\n        );\n      }\n    })\n  );\n};\n","import { InvalidParamError } from '../../../errors/InvalidParamError';\n\nexport type JwtPayload = {\n  [key: string]: unknown;\n  exp: number;\n  iat: number;\n  scope: string;\n  singleUse?: boolean;\n  sub: string;\n};\n\n/**\n * Decodes a JWT token and returns the full payload.\n *\n * This function extracts and returns the complete JWT payload including scopes,\n * expiration time, and other claims.\n *\n * @param jwt - The JWT token string.\n * @returns The decoded JWT payload object.\n * @throws InvalidParamError if the token is invalid or cannot be decoded.\n *\n * @example\n * ```typescript\n * const payload = decodeJwt(jwt);\n * // Returns: { scopes: ['wallet:export'], exp: 1234567890, ... }\n * ```\n  * @not-instrumented\n */\n// eslint-disable-next-line custom-rules/require-single-object-param\nexport const decodeJwt = (jwt: string): JwtPayload => {\n  try {\n    // JWT format: header.payload.signature\n    const parts = jwt.split('.');\n    if (parts.length !== 3) {\n      throw new InvalidParamError('Invalid JWT format');\n    }\n\n    // Decode the payload (second part)\n    // Base64URL decode: replace URL-safe characters and decode\n    const base64Payload = parts[1].replaceAll('-', '+').replaceAll('_', '/');\n    // Add padding if needed\n    const paddedPayload =\n      base64Payload + '='.repeat((4 - (base64Payload.length % 4)) % 4);\n    const decodedPayload = atob(paddedPayload);\n    const claims = JSON.parse(decodedPayload) as JwtPayload;\n\n    return claims;\n  } catch (error) {\n    if (error instanceof InvalidParamError) {\n      throw error;\n    }\n    throw new InvalidParamError(\n      `Failed to decode JWT: ${\n        error instanceof Error ? error.message : String(error)\n      }`\n    );\n  }\n};\n","/**\n * Normalizes scopes by deduplicating and sorting them.\n * This creates a canonical representation for comparison.\n *\n * @param scopes - Array of scope strings (may contain duplicates)\n * @returns Normalized, sorted array of unique scopes\n  * @not-instrumented\n */\n// eslint-disable-next-line custom-rules/require-single-object-param\nexport const normalizeScopes = (scopes: string[]): string[] => {\n  return [...new Set(scopes)].sort((a, b) => a.localeCompare(b));\n};\n","import { decodeJwt } from '../../../decodeJwt';\nimport type { ParsedElevatedAccessToken } from '../elevatedAccessTokens.types';\nimport { normalizeScopes } from '../normalizeScopes';\n\nexport type ParseElevatedAccessTokenOptions = {\n  /** JWT string containing the elevated access token. */\n  token: string;\n};\n\n/**\n * Validates and parses an elevated access token from a JWT string.\n * Extracts scopes, expiration, and validates the token structure.\n *\n * Policy decisions:\n * - Tokens without scopes are rejected (returns null)\n * - Tokens with empty scopes array are rejected (returns null)\n * - Tokens without exp field are rejected (returns null)\n * - Expired tokens are rejected (returns null)\n *\n * @returns Parsed token data or null if token is invalid/expired\n * @not-instrumented\n */\nexport const parseElevatedAccessToken = ({\n  token,\n}: ParseElevatedAccessTokenOptions): ParsedElevatedAccessToken | null => {\n  const payload = decodeJwt(token);\n  const rawScopeClaim = payload?.scope;\n  const processedScopes = rawScopeClaim?.split(' ') ?? [];\n  const filteredScopes = processedScopes.filter((s) => s.length > 0);\n  const singleUse = payload.singleUse ?? false;\n\n  // Reject tokens without scopes or with empty scopes\n  if (!filteredScopes || filteredScopes.length === 0) {\n    return null;\n  }\n\n  // Reject tokens without exp field\n  if (!payload.exp) {\n    return null;\n  }\n\n  // Convert exp (seconds) to Date (milliseconds)\n  const expiresAt = new Date(payload.exp * 1000);\n\n  // Reject expired tokens\n  if (expiresAt <= new Date()) {\n    return null;\n  }\n\n  return {\n    expiresAt,\n    normalizedScopes: normalizeScopes(filteredScopes),\n    scopes: filteredScopes,\n    singleUse,\n    token,\n  };\n};\n","import type {\n  ElevatedAccessToken,\n  ParsedElevatedAccessToken,\n} from '../elevatedAccessTokens.types';\nimport { normalizeScopes } from '../normalizeScopes';\n\n/**\n * Upserts an elevated access token into the current tokens array.\n *\n * Policy: Only one token per normalized scope-set is allowed.\n * If a token with the same normalized scopes exists, it is replaced.\n * This ensures we don't accumulate multiple tokens for the same scope combination.\n *\n * @param currentTokens - Current array of elevated access tokens\n * @param newToken - New token to upsert\n * @returns Updated array of tokens with the new token upserted\n  * @not-instrumented\n */\nexport const upsertElevatedAccessToken = ({\n  currentTokens,\n  newToken,\n}: {\n  currentTokens: ElevatedAccessToken[];\n  newToken: ParsedElevatedAccessToken;\n}): ElevatedAccessToken[] => {\n  const newScopeKey = normalizeScopes(newToken.scopes).join(' ');\n\n  // Remove any existing token with the same normalized scopes\n  const filteredTokens = currentTokens.filter((existingToken) => {\n    const existingScopeKey = normalizeScopes(existingToken.scopes).join(' ');\n    return existingScopeKey !== newScopeKey;\n  });\n\n  // Add the new token\n  return [\n    ...filteredTokens,\n    {\n      expiresAt: newToken.expiresAt,\n      scopes: newToken.scopes,\n      singleUse: newToken.singleUse,\n      token: newToken.token,\n    },\n  ];\n};\n","import type { VerifyResponse } from '@dynamic-labs/sdk-api-core';\n\nimport { getCore } from '../../../client/core/getCore';\nimport type { DynamicCoreState } from '../../../client/core/types';\nimport type { DynamicClient } from '../../../client/types';\nimport { setCookie } from '../../../utils/setCookie';\nimport { isCookieEnabled } from '../../projectSettings/isCookieEnabled';\nimport { initializeWaasClientsForEagerRecovery } from '../../waas/initializeWaasClientsForEagerRecovery';\nimport { DYNAMIC_AUTH_COOKIE_NAME } from '../consts';\nimport { checkAndRaiseWalletAccountsChangedEvent } from './checkAndRaiseWalletAccountsChangedEvent';\nimport { parseElevatedAccessToken } from './elevatedAccessTokens/parseElevatedAccessToken';\nimport { upsertElevatedAccessToken } from './elevatedAccessTokens/upsertElevatedAccessToken';\n\ntype UpdateAuthFromVerifyResponseParams = {\n  response: VerifyResponse;\n};\n\n/** @not-instrumented */\nexport const updateAuthFromVerifyResponse = (\n  { response }: UpdateAuthFromVerifyResponseParams,\n  client: DynamicClient\n) => {\n  const core = getCore(client);\n\n  const previousState = { ...core.state.get() };\n\n  const { user, minifiedJwt, jwt, expiresAt, mfaToken, elevatedAccessToken } =\n    response;\n\n  // Expires at is in seconds, so we need to convert it to milliseconds\n  const sessionExpiresAt = new Date(expiresAt * 1000);\n\n  const newState: Partial<DynamicCoreState> = {\n    legacyToken: jwt ?? null,\n    sessionExpiresAt: sessionExpiresAt,\n    token: minifiedJwt ?? null,\n    user,\n  };\n\n  // only override the mfaToken if a new one is provided in the response\n  if (mfaToken) {\n    newState.mfaToken = mfaToken;\n  }\n\n  // Add elevated access token to the array if a new one is provided in the response\n  // Policy: Only one token per normalized scope-set is allowed (old tokens are replaced)\n  // Always preserve existing tokens to ensure they're synced to storage\n  const currentTokens = core.state.get().elevatedAccessTokens || [];\n  newState.elevatedAccessTokens = currentTokens;\n  \n  if (elevatedAccessToken) {\n    const parsedToken = parseElevatedAccessToken({\n      token: elevatedAccessToken,\n    });\n    if (parsedToken) {\n      newState.elevatedAccessTokens = upsertElevatedAccessToken({\n        currentTokens,\n        newToken: parsedToken,\n      });\n    }\n  }\n\n  core.state.set(newState);\n\n  /**\n   * For customers using a sandbox environment with cookies enabled, we need to set the cookie\n   * programmatically because Redcoast won't set the cookie via headers. We set the cookie programmatically\n   * so customers can access the cookie from document.cookie consistently between sandbox and live environments.\n   */\n  if (minifiedJwt && isCookieEnabled(client)) {\n    const expireDate = sessionExpiresAt.toUTCString();\n\n    setCookie(\n      `${DYNAMIC_AUTH_COOKIE_NAME}=${minifiedJwt}; expires=${expireDate}; path=/; SameSite=Lax`\n    );\n  }\n\n  checkAndRaiseWalletAccountsChangedEvent({ previousState }, client);\n\n  // if the user is logging in, boot the waas client(s) so the SDK eagerly\n  // recovers key shares for all wallet accounts\n  const isUserLoggingIn = !previousState.user && Boolean(newState.user);\n  if (isUserLoggingIn) {\n    void initializeWaasClientsForEagerRecovery(client);\n  }\n};\n","import type { DynamicClient } from '../../../../client/types/DynamicClient';\nimport type { WalletAccount } from '../../walletAccount';\n\ntype GetVerifiedCredentialForWalletAccountParams = {\n  walletAccount: WalletAccount;\n};\n\n/** @not-instrumented */\nexport const getVerifiedCredentialForWalletAccount = (\n  { walletAccount }: GetVerifiedCredentialForWalletAccountParams,\n  client: DynamicClient\n) => {\n  return client.user?.verifiedCredentials.find(\n    (vc) => vc.id === walletAccount.verifiedCredentialId\n  );\n};\n","import type { DynamicClient } from '../../../client/types';\nimport { NoWalletProviderFoundError } from '../../../errors/NoWalletProviderFoundError';\nimport { getWalletProviders } from '../getWalletProviders';\n\ntype GetWalletProviderByKeyParams = {\n  walletProviderKey: string;\n};\n\n/** @not-instrumented */\nexport const getWalletProviderByKey = (\n  { walletProviderKey }: GetWalletProviderByKeyParams,\n  client: DynamicClient\n) => {\n  const walletProviders = getWalletProviders(client);\n\n  const walletProvider = walletProviders.find(\n    (walletProvider) => walletProvider.key === walletProviderKey\n  );\n\n  if (!walletProvider) {\n    throw new NoWalletProviderFoundError({ walletProviderKey });\n  }\n\n  return walletProvider;\n};\n"],"mappings":";;;;;;;;;AAQA,MAAa,kCAAkC,WAAgC;AAG7E,qCACE;EACE,MAAM,EAAE,gBAJWA,4CAAkB,OAAO,EAIpB;EACxB,OAAO;EACR,EACD,OACD;;;;;;ACPH,MAAa,2CACX,EAAE,iBACF,WACG;CACH,MAAM,OAAOC,kCAAQ,OAAO;AAS5B,KAPiC,sBAAsB,eAAe,OAAO,KAE7C,sBAC9B,KAAK,MAAM,KAAK,EAChB,OACD,CAGC,gCAA+B,OAAO;;AAM1C,MAAM,yBACJ,OACA,WAEAC,qDAA2B,OAAO,OAAO,CACtC,KAAK,kBAAkB,KAAK,UAAU,cAAc,CAAC,CACrD,MAAM,CACN,KAAK,IAAI;;;;;;;;;;;;;;ACxBd,MAAa,wBAAwB,SAASC,4CAAkB,KAAK;CACnE,MAAM,OAAO,OAAO;AAEpB,yCAAc,MAAM,qBAAqB;AAEzC,QAAO,QAAQ,KAAK,OAAO,SAAS,yBAAyB,CAAC;;;;;;;;;ACXhE,MAAa,sBAAsB,WAA0B;AAG3D,QAF+BC,oDAA0B,OAAO,CAElC,eAAe;;;;;;ACK/C,MAAa,iCACX,EAAE,SACF,WAC8B;CAC9B,MAAM,YAAY,mBAAmB,OAAO;CAE5C,MAAM,kBAAkBC,kDAAwB;EAC9C;EACA,aAAaC,gDAAsB;EACnC,oBAAoBC,8CAAmB;EACxC,CAAC;CAEF,MAAM,eAAe,UAAU,MAC5B,aAAa,SAAS,QAAQ,mBAAmB,SAAS,UAAU,MACtE;AAED,KAAI,CAAC,gBAAgB,CAACC,+CAAqB,aAAa,CACtD,QAAO;AAGT,QAAO;;;;;;;;;;;;;ACpBT,MAAa,uBAAuB,EAClC,oBACwC;AACxC,QAAO,cAAc,kBAAkB,SACrCC,gDAAsB,qBACvB;;;;;;;;;;;;;ACLH,MAAa,wCAAwC,OACnD,WACkB;;;;;;AAMlB,KAAI,qBAAqB,OAAO,CAC9B;CAGF,MAAM,aAAa,IAAI,IACrBC,4CAAkB,OAAO,CACtB,QAAQ,kBAAkB,oBAAoB,EAAE,eAAe,CAAC,CAAC,CACjE,KAAK,kBAAkB,cAAc,MAAM,CAC/C;AAED,OAAM,QAAQ,IACZ,CAAC,GAAG,WAAW,CAAC,IAAI,OAAO,UAAU;EACnC,MAAM,WAAW,8BAA8B,EAAE,OAAO,EAAE,OAAO;;;;;AAMjE,MAAI,CAAC,SAAU;AAEf,MAAI;AACF,SAAM,SAAS,eAAe;WACvB,OAAO;AACd,qCAAQ,OAAO,CAAC,OAAO,KACrB,sEACA,MACD;;GAEH,CACH;;;;;;;;;;;;;;;;;;;;;;ACvBH,MAAa,aAAa,QAA4B;AACpD,KAAI;EAEF,MAAM,QAAQ,IAAI,MAAM,IAAI;AAC5B,MAAI,MAAM,WAAW,EACnB,OAAM,IAAIC,4CAAkB,qBAAqB;EAKnD,MAAM,gBAAgB,MAAM,GAAG,WAAW,KAAK,IAAI,CAAC,WAAW,KAAK,IAAI;EAExE,MAAM,gBACJ,gBAAgB,IAAI,QAAQ,IAAK,cAAc,SAAS,KAAM,EAAE;EAClE,MAAM,iBAAiB,KAAK,cAAc;AAG1C,SAFe,KAAK,MAAM,eAAe;UAGlC,OAAO;AACd,MAAI,iBAAiBA,4CACnB,OAAM;AAER,QAAM,IAAIA,4CACR,yBACE,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,GAEzD;;;;;;;;;;;;;;AC9CL,MAAa,mBAAmB,WAA+B;AAC7D,QAAO,CAAC,GAAG,IAAI,IAAI,OAAO,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,EAAE,CAAC;;;;;;;;;;;;;;;;;;ACYhE,MAAa,4BAA4B,EACvC,YACuE;CACvE,MAAM,UAAU,UAAU,MAAM;CAGhC,MAAM,mBAFgB,SAAS,QACQ,MAAM,IAAI,IAAI,EAAE,EAChB,QAAQ,MAAM,EAAE,SAAS,EAAE;CAClE,MAAM,YAAY,QAAQ,aAAa;AAGvC,KAAI,CAAC,kBAAkB,eAAe,WAAW,EAC/C,QAAO;AAIT,KAAI,CAAC,QAAQ,IACX,QAAO;CAIT,MAAM,4BAAY,IAAI,KAAK,QAAQ,MAAM,IAAK;AAG9C,KAAI,6BAAa,IAAI,MAAM,CACzB,QAAO;AAGT,QAAO;EACL;EACA,kBAAkB,gBAAgB,eAAe;EACjD,QAAQ;EACR;EACA;EACD;;;;;;;;;;;;;;;;;ACrCH,MAAa,6BAA6B,EACxC,eACA,eAI2B;CAC3B,MAAM,cAAc,gBAAgB,SAAS,OAAO,CAAC,KAAK,IAAI;AAS9D,QAAO,CACL,GAPqB,cAAc,QAAQ,kBAAkB;AAE7D,SADyB,gBAAgB,cAAc,OAAO,CAAC,KAAK,IAAI,KAC5C;GAC5B,EAKA;EACE,WAAW,SAAS;EACpB,QAAQ,SAAS;EACjB,WAAW,SAAS;EACpB,OAAO,SAAS;EACjB,CACF;;;;;;ACxBH,MAAa,gCACX,EAAE,YACF,WACG;CACH,MAAM,OAAOC,kCAAQ,OAAO;CAE5B,MAAM,gBAAgB,EAAE,GAAG,KAAK,MAAM,KAAK,EAAE;CAE7C,MAAM,EAAE,MAAM,aAAa,KAAK,WAAW,UAAU,wBACnD;CAGF,MAAM,mCAAmB,IAAI,KAAK,YAAY,IAAK;CAEnD,MAAMC,WAAsC;EAC1C,aAAa,OAAO;EACF;EAClB,OAAO,eAAe;EACtB;EACD;AAGD,KAAI,SACF,UAAS,WAAW;CAMtB,MAAM,gBAAgB,KAAK,MAAM,KAAK,CAAC,wBAAwB,EAAE;AACjE,UAAS,uBAAuB;AAEhC,KAAI,qBAAqB;EACvB,MAAM,cAAc,yBAAyB,EAC3C,OAAO,qBACR,CAAC;AACF,MAAI,YACF,UAAS,uBAAuB,0BAA0B;GACxD;GACA,UAAU;GACX,CAAC;;AAIN,MAAK,MAAM,IAAI,SAAS;;;;;;AAOxB,KAAI,eAAeC,0CAAgB,OAAO,CAGxC,qCACE,GAAGC,mDAAyB,GAAG,YAAY,YAH1B,iBAAiB,aAAa,CAGmB,wBACnE;AAGH,yCAAwC,EAAE,eAAe,EAAE,OAAO;AAKlE,KADwB,CAAC,cAAc,QAAQ,QAAQ,SAAS,KAAK,CAEnE,CAAK,sCAAsC,OAAO;;;;;;AC3EtD,MAAa,yCACX,EAAE,iBACF,WACG;AACH,QAAO,OAAO,MAAM,oBAAoB,MACrC,OAAO,GAAG,OAAO,cAAc,qBACjC;;;;;;ACLH,MAAa,0BACX,EAAE,qBACF,WACG;CAGH,MAAM,iBAFkB,mBAAmB,OAAO,CAEX,MACpC,qBAAmBC,iBAAe,QAAQ,kBAC5C;AAED,KAAI,CAAC,eACH,OAAM,IAAIC,qDAA2B,EAAE,mBAAmB,CAAC;AAG7D,QAAO"}

package/dist/{getWalletProviderByKey-OC_h7kSB.esm.js → getWalletProviderByKey-DsTEubkT.esm.js}

@@ -1,4 +1,4 @@
-import { O as setCookie, U as isCookieEnabled, W as assertDefined, a as DYNAMIC_WAAS_METADATA, c as DYNAMIC_AUTH_COOKIE_NAME, ct as getCore, d as getWalletProviderRegistry, g as formatWalletProviderKey, h as getWalletAccountsFromState, it as getDefaultClient, m as getWalletAccounts, n as isWaasWalletProvider, p as NoWalletProviderFoundError, t as InvalidParamError, w as emitEvent } from "./InvalidParamError-6N66SLG8.esm.js";
+import { O as setCookie, U as isCookieEnabled, W as assertDefined, a as DYNAMIC_WAAS_METADATA, c as DYNAMIC_AUTH_COOKIE_NAME, ct as getCore, d as getWalletProviderRegistry, g as formatWalletProviderKey, h as getWalletAccountsFromState, it as getDefaultClient, m as getWalletAccounts, n as isWaasWalletProvider, p as NoWalletProviderFoundError, t as InvalidParamError, w as emitEvent } from "./InvalidParamError-I6NfUdQL.esm.js";
 import { WalletProviderEnum } from "@dynamic-labs/sdk-api-core";
 
 //#region src/modules/wallets/emitWalletAccountsChangedEvent/emitWalletAccountsChangedEvent.ts
@@ -80,24 +80,35 @@ const isWaasWalletAccount = ({ walletAccount }) => {
 };
 
 //#endregion
-//#region src/modules/waas/restoreUserSharesForAllWalletAccounts/restoreUserSharesForAllWalletAccounts.ts
-/** @not-instrumented */
-const restoreUserSharesForAllWalletAccounts = async (client) => {
+//#region src/modules/waas/initializeWaasClientsForEagerRecovery/initializeWaasClientsForEagerRecovery.ts
+/**
+* On login, boots the WaaS client once per chain so the SDK eagerly recovers
+* key shares itself (the `eagerlyRecoverKeyShares` capability) instead of the
+* host looping per wallet. Booting calls `initialize()`, which sends the auth
+* token the iframe needs to self-recover.
+*
+* @not-instrumented
+*/
+const initializeWaasClientsForEagerRecovery = async (client) => {
 	/**
-	* Restoring the user shares will fails if the user is missing the MFA auth.
-	* This early return prevents the attempt to restore the user shares to fail
-	* when we know it will fails and just add noise to the logs.
+	* Booting triggers recovery, which fails if the user is missing the MFA auth.
+	* This early return avoids attempting a call we know will fail and just adds
+	* noise to the logs.
 	*/
 	if (isUserMissingMfaAuth(client)) return;
-	const waasWalletAccounts = getWalletAccounts(client).filter((walletAccount) => isWaasWalletAccount({ walletAccount }));
-	await Promise.all(waasWalletAccounts.map(async (walletAccount) => {
-		const provider = findWaasWalletProviderByChain({ chain: walletAccount.chain }, client);
+	const waasChains = new Set(getWalletAccounts(client).filter((walletAccount) => isWaasWalletAccount({ walletAccount })).map((walletAccount) => walletAccount.chain));
+	await Promise.all([...waasChains].map(async (chain) => {
+		const provider = findWaasWalletProviderByChain({ chain }, client);
 		/**
 		* The environment might not have the embedded wallet extensions installed.
-		* In that case there is no provider for the chain and we can skip restoring the user share.
+		* In that case there is no provider for the chain and nothing to boot.
 		*/
 		if (!provider) return;
-		return provider.restoreUserShareForWalletAccount({ walletAccount });
+		try {
+			await provider.getWaasClient();
+		} catch (error) {
+			getCore(client).logger.warn("[initializeWaasClientsForEagerRecovery] failed to boot waas client", error);
+		}
 	}));
 };
 
@@ -238,7 +249,7 @@ const updateAuthFromVerifyResponse = ({ response }, client) => {
 	*/
 	if (minifiedJwt && isCookieEnabled(client)) setCookie(`${DYNAMIC_AUTH_COOKIE_NAME}=${minifiedJwt}; expires=${sessionExpiresAt.toUTCString()}; path=/; SameSite=Lax`);
 	checkAndRaiseWalletAccountsChangedEvent({ previousState }, client);
-	if (!previousState.user && Boolean(newState.user)) restoreUserSharesForAllWalletAccounts(client);
+	if (!previousState.user && Boolean(newState.user)) initializeWaasClientsForEagerRecovery(client);
 };
 
 //#endregion
@@ -258,5 +269,5 @@ const getWalletProviderByKey = ({ walletProviderKey }, client) => {
 };
 
 //#endregion
-export { parseElevatedAccessToken as a, findWaasWalletProviderByChain as c, checkAndRaiseWalletAccountsChangedEvent as d, emitWalletAccountsChangedEvent as f, upsertElevatedAccessToken as i, getWalletProviders as l, getVerifiedCredentialForWalletAccount as n, restoreUserSharesForAllWalletAccounts as o, updateAuthFromVerifyResponse as r, isWaasWalletAccount as s, getWalletProviderByKey as t, isUserMissingMfaAuth as u };
-//# sourceMappingURL=getWalletProviderByKey-OC_h7kSB.esm.js.map
+export { parseElevatedAccessToken as a, findWaasWalletProviderByChain as c, checkAndRaiseWalletAccountsChangedEvent as d, emitWalletAccountsChangedEvent as f, upsertElevatedAccessToken as i, getWalletProviders as l, getVerifiedCredentialForWalletAccount as n, initializeWaasClientsForEagerRecovery as o, updateAuthFromVerifyResponse as r, isWaasWalletAccount as s, getWalletProviderByKey as t, isUserMissingMfaAuth as u };
+//# sourceMappingURL=getWalletProviderByKey-DsTEubkT.esm.js.map

package/dist/getWalletProviderByKey-DsTEubkT.esm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getWalletProviderByKey-DsTEubkT.esm.js","names":["newState: Partial<DynamicCoreState>","walletProvider"],"sources":["../src/modules/wallets/emitWalletAccountsChangedEvent/emitWalletAccountsChangedEvent.ts","../src/modules/auth/updateAuthFromVerifyResponse/checkAndRaiseWalletAccountsChangedEvent/checkAndRaiseWalletAccountsChangedEvent.ts","../src/modules/mfa/isUserMissingMfaAuth/isUserMissingMfaAuth.ts","../src/modules/wallets/getWalletProviders/getWalletProviders.ts","../src/modules/waas/findWaasWalletProviderByChain/findWaasWalletProviderByChain.ts","../src/modules/waas/isWaasWalletAccount/isWaasWalletAccount.ts","../src/modules/waas/initializeWaasClientsForEagerRecovery/initializeWaasClientsForEagerRecovery.ts","../src/modules/auth/decodeJwt/decodeJwt.ts","../src/modules/auth/updateAuthFromVerifyResponse/elevatedAccessTokens/normalizeScopes/normalizeScopes.ts","../src/modules/auth/updateAuthFromVerifyResponse/elevatedAccessTokens/parseElevatedAccessToken/parseElevatedAccessToken.ts","../src/modules/auth/updateAuthFromVerifyResponse/elevatedAccessTokens/upsertElevatedAccessToken/upsertElevatedAccessToken.ts","../src/modules/auth/updateAuthFromVerifyResponse/updateAuthFromVerifyResponse.ts","../src/modules/wallets/utils/getVerifiedCredentialForWalletAccount/getVerifiedCredentialForWalletAccount.ts","../src/modules/wallets/getWalletProviderByKey/getWalletProviderByKey.ts"],"sourcesContent":["import type { DynamicClient } from '../../../client/types';\nimport { emitEvent } from '../../clientEvents';\nimport { getWalletAccounts } from '../getWalletAccounts';\n\n/**\n * Emits the `walletAccountsChanged` event.\n  * @not-instrumented\n */\nexport const emitWalletAccountsChangedEvent = (client: DynamicClient): void => {\n  const walletAccounts = getWalletAccounts(client);\n\n  emitEvent(\n    {\n      args: { walletAccounts },\n      event: 'walletAccountsChanged',\n    },\n    client\n  );\n};\n","import { getCore } from '../../../../client/core/getCore';\nimport type { DynamicClient } from '../../../../client/types';\nimport { emitWalletAccountsChangedEvent } from '../../../wallets/emitWalletAccountsChangedEvent';\nimport { getWalletAccountsFromState } from '../../../wallets/getWalletAccounts/getWalletAccountsFromState';\n\ntype CheckAndRaiseWalletAccountsChangedEventParams = {\n  previousState: Readonly<DynamicCoreState>;\n};\n\n/** @not-instrumented */\nexport const checkAndRaiseWalletAccountsChangedEvent = (\n  { previousState }: CheckAndRaiseWalletAccountsChangedEventParams,\n  client: DynamicClient\n) => {\n  const core = getCore(client);\n\n  const walletAccountsHashBefore = getWalletAccountsHash(previousState, client);\n\n  const walletAccountsHashAfter = getWalletAccountsHash(\n    core.state.get(),\n    client\n  );\n\n  if (walletAccountsHashBefore !== walletAccountsHashAfter) {\n    emitWalletAccountsChangedEvent(client);\n  }\n};\n\n \n \nconst getWalletAccountsHash = (\n  state: Readonly<DynamicCoreState>,\n  client: DynamicClient\n) =>\n  getWalletAccountsFromState(state, client)\n    .map((walletAccount) => JSON.stringify(walletAccount))\n    .sort()\n    .join('-');\n","import { getDefaultClient } from '../../../client/defaultClient';\nimport { assertDefined } from '../../../utils/assertDefined';\n\n/**\n * Checks if the user requires additional MFA authentication.\n *\n * This function determines if the current user session requires\n * additional multi-factor authentication to access certain features.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns True if the user needs additional MFA authentication, false otherwise.\n  * @not-instrumented\n */\nexport const isUserMissingMfaAuth = (client = getDefaultClient()) => {\n  const user = client.user;\n\n  assertDefined(user, 'User not logged in');\n\n  return Boolean(user.scope?.includes('requiresAdditionalAuth'));\n};\n","import type { DynamicClient } from '../../../client/types';\nimport { getWalletProviderRegistry } from '../walletProviderRegistry';\n\n/**\n * Get all available wallet providers to interact with internally.\n  * @not-instrumented\n */\nexport const getWalletProviders = (client: DynamicClient) => {\n  const walletProviderRegistry = getWalletProviderRegistry(client);\n\n  return walletProviderRegistry.listProviders();\n};\n","import { WalletProviderEnum } from '@dynamic-labs/sdk-api-core';\n\nimport type { DynamicClient } from '../../../client/types/DynamicClient';\nimport type { Chain } from '../../chain';\nimport { getWalletProviders } from '../../wallets/getWalletProviders';\nimport { formatWalletProviderKey } from '../../wallets/utils/formatWalletProviderKey';\nimport { DYNAMIC_WAAS_METADATA } from '../constants';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\nimport type { WaasWalletProvider } from '../waas.types';\n\ntype FindWaasWalletProviderByChainParams = {\n  chain: Chain;\n};\n\n/** @not-instrumented */\nexport const findWaasWalletProviderByChain = (\n  { chain }: FindWaasWalletProviderByChainParams,\n  client: DynamicClient\n): WaasWalletProvider | null => {\n  const providers = getWalletProviders(client);\n\n  const waasProviderKey = formatWalletProviderKey({\n    chain,\n    displayName: DYNAMIC_WAAS_METADATA.displayName,\n    walletProviderType: WalletProviderEnum.EmbeddedWallet,\n  });\n\n  const waasProvider = providers.find(\n    (provider) => provider.key === waasProviderKey && provider.chain === chain\n  );\n\n  if (!waasProvider || !isWaasWalletProvider(waasProvider)) {\n    return null;\n  }\n\n  return waasProvider;\n};\n","import type { WalletAccount } from '../../wallets/walletAccount';\nimport { DYNAMIC_WAAS_METADATA } from '../constants';\n\ntype IsWaasWalletAccountParams = {\n  walletAccount: WalletAccount;\n};\n\n/**\n * This function determines whether the provided wallet account is a Dynamic\n * WaaS wallet account.\n *\n * @param params.walletAccount - The wallet account to check.\n * @returns True if the wallet account is a WaaS wallet account, false otherwise.\n  * @not-instrumented\n */\nexport const isWaasWalletAccount = ({\n  walletAccount,\n}: IsWaasWalletAccountParams): boolean => {\n  return walletAccount.walletProviderKey.includes(\n    DYNAMIC_WAAS_METADATA.normalizedWalletName\n  );\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { isUserMissingMfaAuth } from '../../mfa/isUserMissingMfaAuth';\nimport { getWalletAccounts } from '../../wallets/getWalletAccounts';\nimport { findWaasWalletProviderByChain } from '../findWaasWalletProviderByChain';\nimport { isWaasWalletAccount } from '../isWaasWalletAccount';\n\n/**\n * On login, boots the WaaS client once per chain so the SDK eagerly recovers\n * key shares itself (the `eagerlyRecoverKeyShares` capability) instead of the\n * host looping per wallet. Booting calls `initialize()`, which sends the auth\n * token the iframe needs to self-recover.\n *\n * @not-instrumented\n */\nexport const initializeWaasClientsForEagerRecovery = async (\n  client: DynamicClient\n): Promise<void> => {\n  /**\n   * Booting triggers recovery, which fails if the user is missing the MFA auth.\n   * This early return avoids attempting a call we know will fail and just adds\n   * noise to the logs.\n   */\n  if (isUserMissingMfaAuth(client)) {\n    return;\n  }\n\n  const waasChains = new Set(\n    getWalletAccounts(client)\n      .filter((walletAccount) => isWaasWalletAccount({ walletAccount }))\n      .map((walletAccount) => walletAccount.chain)\n  );\n\n  await Promise.all(\n    [...waasChains].map(async (chain) => {\n      const provider = findWaasWalletProviderByChain({ chain }, client);\n\n      /**\n       * The environment might not have the embedded wallet extensions installed.\n       * In that case there is no provider for the chain and nothing to boot.\n       */\n      if (!provider) return;\n\n      try {\n        await provider.getWaasClient();\n      } catch (error) {\n        getCore(client).logger.warn(\n          '[initializeWaasClientsForEagerRecovery] failed to boot waas client',\n          error\n        );\n      }\n    })\n  );\n};\n","import { InvalidParamError } from '../../../errors/InvalidParamError';\n\nexport type JwtPayload = {\n  [key: string]: unknown;\n  exp: number;\n  iat: number;\n  scope: string;\n  singleUse?: boolean;\n  sub: string;\n};\n\n/**\n * Decodes a JWT token and returns the full payload.\n *\n * This function extracts and returns the complete JWT payload including scopes,\n * expiration time, and other claims.\n *\n * @param jwt - The JWT token string.\n * @returns The decoded JWT payload object.\n * @throws InvalidParamError if the token is invalid or cannot be decoded.\n *\n * @example\n * ```typescript\n * const payload = decodeJwt(jwt);\n * // Returns: { scopes: ['wallet:export'], exp: 1234567890, ... }\n * ```\n  * @not-instrumented\n */\n// eslint-disable-next-line custom-rules/require-single-object-param\nexport const decodeJwt = (jwt: string): JwtPayload => {\n  try {\n    // JWT format: header.payload.signature\n    const parts = jwt.split('.');\n    if (parts.length !== 3) {\n      throw new InvalidParamError('Invalid JWT format');\n    }\n\n    // Decode the payload (second part)\n    // Base64URL decode: replace URL-safe characters and decode\n    const base64Payload = parts[1].replaceAll('-', '+').replaceAll('_', '/');\n    // Add padding if needed\n    const paddedPayload =\n      base64Payload + '='.repeat((4 - (base64Payload.length % 4)) % 4);\n    const decodedPayload = atob(paddedPayload);\n    const claims = JSON.parse(decodedPayload) as JwtPayload;\n\n    return claims;\n  } catch (error) {\n    if (error instanceof InvalidParamError) {\n      throw error;\n    }\n    throw new InvalidParamError(\n      `Failed to decode JWT: ${\n        error instanceof Error ? error.message : String(error)\n      }`\n    );\n  }\n};\n","/**\n * Normalizes scopes by deduplicating and sorting them.\n * This creates a canonical representation for comparison.\n *\n * @param scopes - Array of scope strings (may contain duplicates)\n * @returns Normalized, sorted array of unique scopes\n  * @not-instrumented\n */\n// eslint-disable-next-line custom-rules/require-single-object-param\nexport const normalizeScopes = (scopes: string[]): string[] => {\n  return [...new Set(scopes)].sort((a, b) => a.localeCompare(b));\n};\n","import { decodeJwt } from '../../../decodeJwt';\nimport type { ParsedElevatedAccessToken } from '../elevatedAccessTokens.types';\nimport { normalizeScopes } from '../normalizeScopes';\n\nexport type ParseElevatedAccessTokenOptions = {\n  /** JWT string containing the elevated access token. */\n  token: string;\n};\n\n/**\n * Validates and parses an elevated access token from a JWT string.\n * Extracts scopes, expiration, and validates the token structure.\n *\n * Policy decisions:\n * - Tokens without scopes are rejected (returns null)\n * - Tokens with empty scopes array are rejected (returns null)\n * - Tokens without exp field are rejected (returns null)\n * - Expired tokens are rejected (returns null)\n *\n * @returns Parsed token data or null if token is invalid/expired\n * @not-instrumented\n */\nexport const parseElevatedAccessToken = ({\n  token,\n}: ParseElevatedAccessTokenOptions): ParsedElevatedAccessToken | null => {\n  const payload = decodeJwt(token);\n  const rawScopeClaim = payload?.scope;\n  const processedScopes = rawScopeClaim?.split(' ') ?? [];\n  const filteredScopes = processedScopes.filter((s) => s.length > 0);\n  const singleUse = payload.singleUse ?? false;\n\n  // Reject tokens without scopes or with empty scopes\n  if (!filteredScopes || filteredScopes.length === 0) {\n    return null;\n  }\n\n  // Reject tokens without exp field\n  if (!payload.exp) {\n    return null;\n  }\n\n  // Convert exp (seconds) to Date (milliseconds)\n  const expiresAt = new Date(payload.exp * 1000);\n\n  // Reject expired tokens\n  if (expiresAt <= new Date()) {\n    return null;\n  }\n\n  return {\n    expiresAt,\n    normalizedScopes: normalizeScopes(filteredScopes),\n    scopes: filteredScopes,\n    singleUse,\n    token,\n  };\n};\n","import type {\n  ElevatedAccessToken,\n  ParsedElevatedAccessToken,\n} from '../elevatedAccessTokens.types';\nimport { normalizeScopes } from '../normalizeScopes';\n\n/**\n * Upserts an elevated access token into the current tokens array.\n *\n * Policy: Only one token per normalized scope-set is allowed.\n * If a token with the same normalized scopes exists, it is replaced.\n * This ensures we don't accumulate multiple tokens for the same scope combination.\n *\n * @param currentTokens - Current array of elevated access tokens\n * @param newToken - New token to upsert\n * @returns Updated array of tokens with the new token upserted\n  * @not-instrumented\n */\nexport const upsertElevatedAccessToken = ({\n  currentTokens,\n  newToken,\n}: {\n  currentTokens: ElevatedAccessToken[];\n  newToken: ParsedElevatedAccessToken;\n}): ElevatedAccessToken[] => {\n  const newScopeKey = normalizeScopes(newToken.scopes).join(' ');\n\n  // Remove any existing token with the same normalized scopes\n  const filteredTokens = currentTokens.filter((existingToken) => {\n    const existingScopeKey = normalizeScopes(existingToken.scopes).join(' ');\n    return existingScopeKey !== newScopeKey;\n  });\n\n  // Add the new token\n  return [\n    ...filteredTokens,\n    {\n      expiresAt: newToken.expiresAt,\n      scopes: newToken.scopes,\n      singleUse: newToken.singleUse,\n      token: newToken.token,\n    },\n  ];\n};\n","import type { VerifyResponse } from '@dynamic-labs/sdk-api-core';\n\nimport { getCore } from '../../../client/core/getCore';\nimport type { DynamicCoreState } from '../../../client/core/types';\nimport type { DynamicClient } from '../../../client/types';\nimport { setCookie } from '../../../utils/setCookie';\nimport { isCookieEnabled } from '../../projectSettings/isCookieEnabled';\nimport { initializeWaasClientsForEagerRecovery } from '../../waas/initializeWaasClientsForEagerRecovery';\nimport { DYNAMIC_AUTH_COOKIE_NAME } from '../consts';\nimport { checkAndRaiseWalletAccountsChangedEvent } from './checkAndRaiseWalletAccountsChangedEvent';\nimport { parseElevatedAccessToken } from './elevatedAccessTokens/parseElevatedAccessToken';\nimport { upsertElevatedAccessToken } from './elevatedAccessTokens/upsertElevatedAccessToken';\n\ntype UpdateAuthFromVerifyResponseParams = {\n  response: VerifyResponse;\n};\n\n/** @not-instrumented */\nexport const updateAuthFromVerifyResponse = (\n  { response }: UpdateAuthFromVerifyResponseParams,\n  client: DynamicClient\n) => {\n  const core = getCore(client);\n\n  const previousState = { ...core.state.get() };\n\n  const { user, minifiedJwt, jwt, expiresAt, mfaToken, elevatedAccessToken } =\n    response;\n\n  // Expires at is in seconds, so we need to convert it to milliseconds\n  const sessionExpiresAt = new Date(expiresAt * 1000);\n\n  const newState: Partial<DynamicCoreState> = {\n    legacyToken: jwt ?? null,\n    sessionExpiresAt: sessionExpiresAt,\n    token: minifiedJwt ?? null,\n    user,\n  };\n\n  // only override the mfaToken if a new one is provided in the response\n  if (mfaToken) {\n    newState.mfaToken = mfaToken;\n  }\n\n  // Add elevated access token to the array if a new one is provided in the response\n  // Policy: Only one token per normalized scope-set is allowed (old tokens are replaced)\n  // Always preserve existing tokens to ensure they're synced to storage\n  const currentTokens = core.state.get().elevatedAccessTokens || [];\n  newState.elevatedAccessTokens = currentTokens;\n  \n  if (elevatedAccessToken) {\n    const parsedToken = parseElevatedAccessToken({\n      token: elevatedAccessToken,\n    });\n    if (parsedToken) {\n      newState.elevatedAccessTokens = upsertElevatedAccessToken({\n        currentTokens,\n        newToken: parsedToken,\n      });\n    }\n  }\n\n  core.state.set(newState);\n\n  /**\n   * For customers using a sandbox environment with cookies enabled, we need to set the cookie\n   * programmatically because Redcoast won't set the cookie via headers. We set the cookie programmatically\n   * so customers can access the cookie from document.cookie consistently between sandbox and live environments.\n   */\n  if (minifiedJwt && isCookieEnabled(client)) {\n    const expireDate = sessionExpiresAt.toUTCString();\n\n    setCookie(\n      `${DYNAMIC_AUTH_COOKIE_NAME}=${minifiedJwt}; expires=${expireDate}; path=/; SameSite=Lax`\n    );\n  }\n\n  checkAndRaiseWalletAccountsChangedEvent({ previousState }, client);\n\n  // if the user is logging in, boot the waas client(s) so the SDK eagerly\n  // recovers key shares for all wallet accounts\n  const isUserLoggingIn = !previousState.user && Boolean(newState.user);\n  if (isUserLoggingIn) {\n    void initializeWaasClientsForEagerRecovery(client);\n  }\n};\n","import type { DynamicClient } from '../../../../client/types/DynamicClient';\nimport type { WalletAccount } from '../../walletAccount';\n\ntype GetVerifiedCredentialForWalletAccountParams = {\n  walletAccount: WalletAccount;\n};\n\n/** @not-instrumented */\nexport const getVerifiedCredentialForWalletAccount = (\n  { walletAccount }: GetVerifiedCredentialForWalletAccountParams,\n  client: DynamicClient\n) => {\n  return client.user?.verifiedCredentials.find(\n    (vc) => vc.id === walletAccount.verifiedCredentialId\n  );\n};\n","import type { DynamicClient } from '../../../client/types';\nimport { NoWalletProviderFoundError } from '../../../errors/NoWalletProviderFoundError';\nimport { getWalletProviders } from '../getWalletProviders';\n\ntype GetWalletProviderByKeyParams = {\n  walletProviderKey: string;\n};\n\n/** @not-instrumented */\nexport const getWalletProviderByKey = (\n  { walletProviderKey }: GetWalletProviderByKeyParams,\n  client: DynamicClient\n) => {\n  const walletProviders = getWalletProviders(client);\n\n  const walletProvider = walletProviders.find(\n    (walletProvider) => walletProvider.key === walletProviderKey\n  );\n\n  if (!walletProvider) {\n    throw new NoWalletProviderFoundError({ walletProviderKey });\n  }\n\n  return walletProvider;\n};\n"],"mappings":";;;;;;;;AAQA,MAAa,kCAAkC,WAAgC;AAG7E,WACE;EACE,MAAM,EAAE,gBAJW,kBAAkB,OAAO,EAIpB;EACxB,OAAO;EACR,EACD,OACD;;;;;;ACPH,MAAa,2CACX,EAAE,iBACF,WACG;CACH,MAAM,OAAO,QAAQ,OAAO;AAS5B,KAPiC,sBAAsB,eAAe,OAAO,KAE7C,sBAC9B,KAAK,MAAM,KAAK,EAChB,OACD,CAGC,gCAA+B,OAAO;;AAM1C,MAAM,yBACJ,OACA,WAEA,2BAA2B,OAAO,OAAO,CACtC,KAAK,kBAAkB,KAAK,UAAU,cAAc,CAAC,CACrD,MAAM,CACN,KAAK,IAAI;;;;;;;;;;;;;;ACxBd,MAAa,wBAAwB,SAAS,kBAAkB,KAAK;CACnE,MAAM,OAAO,OAAO;AAEpB,eAAc,MAAM,qBAAqB;AAEzC,QAAO,QAAQ,KAAK,OAAO,SAAS,yBAAyB,CAAC;;;;;;;;;ACXhE,MAAa,sBAAsB,WAA0B;AAG3D,QAF+B,0BAA0B,OAAO,CAElC,eAAe;;;;;;ACK/C,MAAa,iCACX,EAAE,SACF,WAC8B;CAC9B,MAAM,YAAY,mBAAmB,OAAO;CAE5C,MAAM,kBAAkB,wBAAwB;EAC9C;EACA,aAAa,sBAAsB;EACnC,oBAAoB,mBAAmB;EACxC,CAAC;CAEF,MAAM,eAAe,UAAU,MAC5B,aAAa,SAAS,QAAQ,mBAAmB,SAAS,UAAU,MACtE;AAED,KAAI,CAAC,gBAAgB,CAAC,qBAAqB,aAAa,CACtD,QAAO;AAGT,QAAO;;;;;;;;;;;;;ACpBT,MAAa,uBAAuB,EAClC,oBACwC;AACxC,QAAO,cAAc,kBAAkB,SACrC,sBAAsB,qBACvB;;;;;;;;;;;;;ACLH,MAAa,wCAAwC,OACnD,WACkB;;;;;;AAMlB,KAAI,qBAAqB,OAAO,CAC9B;CAGF,MAAM,aAAa,IAAI,IACrB,kBAAkB,OAAO,CACtB,QAAQ,kBAAkB,oBAAoB,EAAE,eAAe,CAAC,CAAC,CACjE,KAAK,kBAAkB,cAAc,MAAM,CAC/C;AAED,OAAM,QAAQ,IACZ,CAAC,GAAG,WAAW,CAAC,IAAI,OAAO,UAAU;EACnC,MAAM,WAAW,8BAA8B,EAAE,OAAO,EAAE,OAAO;;;;;AAMjE,MAAI,CAAC,SAAU;AAEf,MAAI;AACF,SAAM,SAAS,eAAe;WACvB,OAAO;AACd,WAAQ,OAAO,CAAC,OAAO,KACrB,sEACA,MACD;;GAEH,CACH;;;;;;;;;;;;;;;;;;;;;;ACvBH,MAAa,aAAa,QAA4B;AACpD,KAAI;EAEF,MAAM,QAAQ,IAAI,MAAM,IAAI;AAC5B,MAAI,MAAM,WAAW,EACnB,OAAM,IAAI,kBAAkB,qBAAqB;EAKnD,MAAM,gBAAgB,MAAM,GAAG,WAAW,KAAK,IAAI,CAAC,WAAW,KAAK,IAAI;EAExE,MAAM,gBACJ,gBAAgB,IAAI,QAAQ,IAAK,cAAc,SAAS,KAAM,EAAE;EAClE,MAAM,iBAAiB,KAAK,cAAc;AAG1C,SAFe,KAAK,MAAM,eAAe;UAGlC,OAAO;AACd,MAAI,iBAAiB,kBACnB,OAAM;AAER,QAAM,IAAI,kBACR,yBACE,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,GAEzD;;;;;;;;;;;;;;AC9CL,MAAa,mBAAmB,WAA+B;AAC7D,QAAO,CAAC,GAAG,IAAI,IAAI,OAAO,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,EAAE,CAAC;;;;;;;;;;;;;;;;;;ACYhE,MAAa,4BAA4B,EACvC,YACuE;CACvE,MAAM,UAAU,UAAU,MAAM;CAGhC,MAAM,mBAFgB,SAAS,QACQ,MAAM,IAAI,IAAI,EAAE,EAChB,QAAQ,MAAM,EAAE,SAAS,EAAE;CAClE,MAAM,YAAY,QAAQ,aAAa;AAGvC,KAAI,CAAC,kBAAkB,eAAe,WAAW,EAC/C,QAAO;AAIT,KAAI,CAAC,QAAQ,IACX,QAAO;CAIT,MAAM,4BAAY,IAAI,KAAK,QAAQ,MAAM,IAAK;AAG9C,KAAI,6BAAa,IAAI,MAAM,CACzB,QAAO;AAGT,QAAO;EACL;EACA,kBAAkB,gBAAgB,eAAe;EACjD,QAAQ;EACR;EACA;EACD;;;;;;;;;;;;;;;;;ACrCH,MAAa,6BAA6B,EACxC,eACA,eAI2B;CAC3B,MAAM,cAAc,gBAAgB,SAAS,OAAO,CAAC,KAAK,IAAI;AAS9D,QAAO,CACL,GAPqB,cAAc,QAAQ,kBAAkB;AAE7D,SADyB,gBAAgB,cAAc,OAAO,CAAC,KAAK,IAAI,KAC5C;GAC5B,EAKA;EACE,WAAW,SAAS;EACpB,QAAQ,SAAS;EACjB,WAAW,SAAS;EACpB,OAAO,SAAS;EACjB,CACF;;;;;;ACxBH,MAAa,gCACX,EAAE,YACF,WACG;CACH,MAAM,OAAO,QAAQ,OAAO;CAE5B,MAAM,gBAAgB,EAAE,GAAG,KAAK,MAAM,KAAK,EAAE;CAE7C,MAAM,EAAE,MAAM,aAAa,KAAK,WAAW,UAAU,wBACnD;CAGF,MAAM,mCAAmB,IAAI,KAAK,YAAY,IAAK;CAEnD,MAAMA,WAAsC;EAC1C,aAAa,OAAO;EACF;EAClB,OAAO,eAAe;EACtB;EACD;AAGD,KAAI,SACF,UAAS,WAAW;CAMtB,MAAM,gBAAgB,KAAK,MAAM,KAAK,CAAC,wBAAwB,EAAE;AACjE,UAAS,uBAAuB;AAEhC,KAAI,qBAAqB;EACvB,MAAM,cAAc,yBAAyB,EAC3C,OAAO,qBACR,CAAC;AACF,MAAI,YACF,UAAS,uBAAuB,0BAA0B;GACxD;GACA,UAAU;GACX,CAAC;;AAIN,MAAK,MAAM,IAAI,SAAS;;;;;;AAOxB,KAAI,eAAe,gBAAgB,OAAO,CAGxC,WACE,GAAG,yBAAyB,GAAG,YAAY,YAH1B,iBAAiB,aAAa,CAGmB,wBACnE;AAGH,yCAAwC,EAAE,eAAe,EAAE,OAAO;AAKlE,KADwB,CAAC,cAAc,QAAQ,QAAQ,SAAS,KAAK,CAEnE,CAAK,sCAAsC,OAAO;;;;;;AC3EtD,MAAa,yCACX,EAAE,iBACF,WACG;AACH,QAAO,OAAO,MAAM,oBAAoB,MACrC,OAAO,GAAG,OAAO,cAAc,qBACjC;;;;;;ACLH,MAAa,0BACX,EAAE,qBACF,WACG;CAGH,MAAM,iBAFkB,mBAAmB,OAAO,CAEX,MACpC,qBAAmBC,iBAAe,QAAQ,kBAC5C;AAED,KAAI,CAAC,eACH,OAAM,IAAI,2BAA2B,EAAE,mBAAmB,CAAC;AAG7D,QAAO"}

package/dist/{getWalletProviderByKey-Bq0kRpuN.native.esm.js → getWalletProviderByKey-RTW-S68o.native.esm.js}

@@ -1,4 +1,4 @@
-import { J as getDefaultClient, N as isCookieEnabled, P as assertDefined, Q as getCore, Z as BaseError, a as DYNAMIC_WAAS_METADATA, f as NoWalletProviderFoundError, h as emitEvent, n as isWaasWalletProvider, p as getChainFromVerifiedCredentialChain, t as InvalidParamError, u as getWalletProviderRegistry } from "./InvalidParamError-CjC1BFSC.native.esm.js";
+import { J as getDefaultClient, N as isCookieEnabled, P as assertDefined, Q as getCore, Z as BaseError, a as DYNAMIC_WAAS_METADATA, f as NoWalletProviderFoundError, h as emitEvent, n as isWaasWalletProvider, p as getChainFromVerifiedCredentialChain, t as InvalidParamError, u as getWalletProviderRegistry } from "./InvalidParamError-CKUis748.native.esm.js";
 import { JwtVerifiedCredentialFormatEnum, WalletProviderEnum } from "@dynamic-labs/sdk-api-core";
 
 //#region src/utils/setCookie/setCookie.ts
@@ -287,24 +287,35 @@ const isWaasWalletAccount = ({ walletAccount }) => {
 };
 
 //#endregion
-//#region src/modules/waas/restoreUserSharesForAllWalletAccounts/restoreUserSharesForAllWalletAccounts.ts
-/** @not-instrumented */
-const restoreUserSharesForAllWalletAccounts = async (client) => {
+//#region src/modules/waas/initializeWaasClientsForEagerRecovery/initializeWaasClientsForEagerRecovery.ts
+/**
+* On login, boots the WaaS client once per chain so the SDK eagerly recovers
+* key shares itself (the `eagerlyRecoverKeyShares` capability) instead of the
+* host looping per wallet. Booting calls `initialize()`, which sends the auth
+* token the iframe needs to self-recover.
+*
+* @not-instrumented
+*/
+const initializeWaasClientsForEagerRecovery = async (client) => {
 	/**
-	* Restoring the user shares will fails if the user is missing the MFA auth.
-	* This early return prevents the attempt to restore the user shares to fail
-	* when we know it will fails and just add noise to the logs.
+	* Booting triggers recovery, which fails if the user is missing the MFA auth.
+	* This early return avoids attempting a call we know will fail and just adds
+	* noise to the logs.
 	*/
 	if (isUserMissingMfaAuth(client)) return;
-	const waasWalletAccounts = getWalletAccounts(client).filter((walletAccount) => isWaasWalletAccount({ walletAccount }));
-	await Promise.all(waasWalletAccounts.map(async (walletAccount) => {
-		const provider = findWaasWalletProviderByChain({ chain: walletAccount.chain }, client);
+	const waasChains = new Set(getWalletAccounts(client).filter((walletAccount) => isWaasWalletAccount({ walletAccount })).map((walletAccount) => walletAccount.chain));
+	await Promise.all([...waasChains].map(async (chain) => {
+		const provider = findWaasWalletProviderByChain({ chain }, client);
 		/**
 		* The environment might not have the embedded wallet extensions installed.
-		* In that case there is no provider for the chain and we can skip restoring the user share.
+		* In that case there is no provider for the chain and nothing to boot.
 		*/
 		if (!provider) return;
-		return provider.restoreUserShareForWalletAccount({ walletAccount });
+		try {
+			await provider.getWaasClient();
+		} catch (error) {
+			getCore(client).logger.warn("[initializeWaasClientsForEagerRecovery] failed to boot waas client", error);
+		}
 	}));
 };
 
@@ -445,7 +456,7 @@ const updateAuthFromVerifyResponse = ({ response }, client) => {
 	*/
 	if (minifiedJwt && isCookieEnabled(client)) setCookie(`${DYNAMIC_AUTH_COOKIE_NAME}=${minifiedJwt}; expires=${sessionExpiresAt.toUTCString()}; path=/; SameSite=Lax`);
 	checkAndRaiseWalletAccountsChangedEvent({ previousState }, client);
-	if (!previousState.user && Boolean(newState.user)) restoreUserSharesForAllWalletAccounts(client);
+	if (!previousState.user && Boolean(newState.user)) initializeWaasClientsForEagerRecovery(client);
 };
 
 //#endregion
@@ -465,5 +476,5 @@ const getWalletProviderByKey = ({ walletProviderKey }, client) => {
 };
 
 //#endregion
-export { formatWalletAccountId as _, parseElevatedAccessToken as a, InvalidWalletProviderKeyError as b, findWaasWalletProviderByChain as c, checkAndRaiseWalletAccountsChangedEvent as d, emitWalletAccountsChangedEvent as f, normalizeWalletNameWithChain as g, formatWalletProviderKey as h, upsertElevatedAccessToken as i, getWalletProviders as l, getWalletAccounts as m, getVerifiedCredentialForWalletAccount as n, restoreUserSharesForAllWalletAccounts as o, DYNAMIC_AUTH_COOKIE_NAME as p, updateAuthFromVerifyResponse as r, isWaasWalletAccount as s, getWalletProviderByKey as t, isUserMissingMfaAuth as u, normalizeAddress as v, setCookie as x, splitWalletProviderKey as y };
-//# sourceMappingURL=getWalletProviderByKey-Bq0kRpuN.native.esm.js.map
+export { formatWalletAccountId as _, parseElevatedAccessToken as a, InvalidWalletProviderKeyError as b, findWaasWalletProviderByChain as c, checkAndRaiseWalletAccountsChangedEvent as d, emitWalletAccountsChangedEvent as f, normalizeWalletNameWithChain as g, formatWalletProviderKey as h, upsertElevatedAccessToken as i, getWalletProviders as l, getWalletAccounts as m, getVerifiedCredentialForWalletAccount as n, initializeWaasClientsForEagerRecovery as o, DYNAMIC_AUTH_COOKIE_NAME as p, updateAuthFromVerifyResponse as r, isWaasWalletAccount as s, getWalletProviderByKey as t, isUserMissingMfaAuth as u, normalizeAddress as v, setCookie as x, splitWalletProviderKey as y };
+//# sourceMappingURL=getWalletProviderByKey-RTW-S68o.native.esm.js.map

package/dist/{getWalletProviderByKey-Bq0kRpuN.native.esm.js.map → getWalletProviderByKey-RTW-S68o.native.esm.js.map}

@@ -1 +1 @@
-{"version":3,"file":"getWalletProviderByKey-Bq0kRpuN.native.esm.js","names":["walletAccountsMap: Map<string, WalletAccount>","newState: Partial<DynamicCoreState>","walletProvider"],"sources":["../src/utils/setCookie/setCookie.ts","../src/errors/InvalidWalletProviderKeyError.ts","../src/modules/wallets/walletProvider/splitWalletProviderKey/splitWalletProviderKey.ts","../src/modules/wallets/utils/normalizeAddress/normalizeAddress.ts","../src/modules/wallets/utils/formatWalletAccountId/formatWalletAccountId.ts","../src/modules/wallets/utils/convertUnverifiedWalletAccountToWalletAccount/convertUnverifiedWalletAccountToWalletAccount.ts","../src/modules/wallets/utils/normalizeWalletNameWithChain/normalizeWalletNameWithChain.ts","../src/modules/wallets/utils/formatWalletProviderKey/formatWalletProviderKey.ts","../src/modules/wallets/walletProvider/walletProviderKeyMap/getWalletProviderKeyFromVerifiedCredential/getWalletProviderKeyFromVerifiedCredential.ts","../src/modules/wallets/utils/convertVerifiedCredentialToWalletAccount/convertVerifiedCredentialToWalletAccount.ts","../src/modules/wallets/getWalletAccounts/getWalletAccountsFromState/getWalletAccountsFromState.ts","../src/modules/wallets/getWalletAccounts/getWalletAccounts.ts","../src/modules/auth/consts.ts","../src/modules/wallets/emitWalletAccountsChangedEvent/emitWalletAccountsChangedEvent.ts","../src/modules/auth/updateAuthFromVerifyResponse/checkAndRaiseWalletAccountsChangedEvent/checkAndRaiseWalletAccountsChangedEvent.ts","../src/modules/mfa/isUserMissingMfaAuth/isUserMissingMfaAuth.ts","../src/modules/wallets/getWalletProviders/getWalletProviders.ts","../src/modules/waas/findWaasWalletProviderByChain/findWaasWalletProviderByChain.ts","../src/modules/waas/isWaasWalletAccount/isWaasWalletAccount.ts","../src/modules/waas/restoreUserSharesForAllWalletAccounts/restoreUserSharesForAllWalletAccounts.ts","../src/modules/auth/decodeJwt/decodeJwt.ts","../src/modules/auth/updateAuthFromVerifyResponse/elevatedAccessTokens/normalizeScopes/normalizeScopes.ts","../src/modules/auth/updateAuthFromVerifyResponse/elevatedAccessTokens/parseElevatedAccessToken/parseElevatedAccessToken.ts","../src/modules/auth/updateAuthFromVerifyResponse/elevatedAccessTokens/upsertElevatedAccessToken/upsertElevatedAccessToken.ts","../src/modules/auth/updateAuthFromVerifyResponse/updateAuthFromVerifyResponse.ts","../src/modules/wallets/utils/getVerifiedCredentialForWalletAccount/getVerifiedCredentialForWalletAccount.ts","../src/modules/wallets/getWalletProviderByKey/getWalletProviderByKey.ts"],"sourcesContent":["/**\n * Sefelly sets the cookie in the browser.\n  * @not-instrumented\n */\n// eslint-disable-next-line custom-rules/require-single-object-param\nexport const setCookie = (cookie: string) => {\n  // eslint-disable-next-line no-restricted-globals\n  document.cookie = cookie;\n};\n","import { BaseError } from './base';\n\nexport class InvalidWalletProviderKeyError extends BaseError {\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  constructor(value: string) {\n    super({\n      cause: null,\n      code: 'invalid_wallet_provider_key',\n      docsUrl: null,\n      name: 'InvalidWalletProviderKeyError',\n      shortMessage: `Invalid wallet provider key: ${value}. Key must be in the format of <normalizedWalletNameWithChain>:<walletProviderType>[:<suffix>]`,\n    });\n  }\n}\n","import { WalletProviderEnum } from '@dynamic-labs/sdk-api-core';\n\nimport { InvalidWalletProviderKeyError } from '../../../../errors/InvalidWalletProviderKeyError';\n\ntype SplitWalletProviderKeyResult = {\n  normalizedWalletNameWithChain: string;\n  suffix: string | undefined;\n  walletProviderType: WalletProviderEnum;\n};\n\n/** @not-instrumented */\n// eslint-disable-next-line custom-rules/require-single-object-param\nexport const splitWalletProviderKey = (\n  walletProviderKey: string\n): SplitWalletProviderKeyResult => {\n  const [normalizedWalletNameWithChain, walletProviderType, suffix, ...rest] =\n    walletProviderKey.split(':');\n\n  if (\n    !normalizedWalletNameWithChain ||\n    !Object.values(WalletProviderEnum).includes(\n      walletProviderType as WalletProviderEnum\n    ) ||\n    rest.length > 0\n  ) {\n    throw new InvalidWalletProviderKeyError(walletProviderKey);\n  }\n\n  return {\n    normalizedWalletNameWithChain,\n    suffix,\n    walletProviderType: walletProviderType as WalletProviderEnum,\n  };\n};\n","import type { Chain } from '../../../chain';\n\nexport type NormalizeAddressOptions = {\n  /** The raw address to normalize. */\n  address: string;\n\n  /** The chain the address belongs to. */\n  chain: Chain;\n};\n\n/** @not-instrumented */\nexport const normalizeAddress = ({ address, chain }: NormalizeAddressOptions) => {\n  let normalizedAddress = address;\n\n  if (normalizedAddress?.startsWith('0x')) {\n    normalizedAddress = normalizedAddress.slice(2);\n  }\n\n  /**\n   * These are standard from CAIP-2: https://github.com/ChainAgnostic/CAIPs/blob/master/CAIPs/caip-2.md\n   * see also: https://github.com/ChainAgnostic/namespaces\n   * note: no standard namespace currently exists for flow\n   */\n  const chainsThatRequireLowercaseAddress: Chain[] = ['EVM', 'FLOW'];\n\n  normalizedAddress = chainsThatRequireLowercaseAddress.includes(chain)\n    ? normalizedAddress?.toLowerCase()\n    : normalizedAddress;\n\n  return normalizedAddress;\n};\n","import type { Chain } from '../../../chain';\nimport { splitWalletProviderKey } from '../../walletProvider/splitWalletProviderKey';\nimport { normalizeAddress } from '../normalizeAddress';\n\ntype CreateWalletAccountIdParams = {\n  address: string;\n  chain: Chain;\n  walletProviderKey: string;\n};\n\n/** @not-instrumented */\nexport const formatWalletAccountId = ({\n  address,\n  chain,\n  walletProviderKey,\n}: CreateWalletAccountIdParams): string => {\n  const { normalizedWalletNameWithChain } =\n    splitWalletProviderKey(walletProviderKey);\n\n  const normalizedAddress = normalizeAddress({ address, chain });\n\n  return `${normalizedWalletNameWithChain}:${normalizedAddress}`;\n};\n","import type { UnverifiedWalletAccount } from '../../unverifiedWalletAccounts';\nimport type { WalletAccount } from '../../walletAccount';\nimport { formatWalletAccountId } from '../formatWalletAccountId';\n\ntype ConvertUnverifiedWalletAccountToWalletAccountParams = {\n  unverifiedWalletAccount: UnverifiedWalletAccount;\n};\n\n/** @not-instrumented */\nexport const convertUnverifiedWalletAccountToWalletAccount = ({\n  unverifiedWalletAccount,\n}: ConvertUnverifiedWalletAccountToWalletAccountParams): WalletAccount => ({\n  address: unverifiedWalletAccount.address,\n  addressesWithTypes: unverifiedWalletAccount.addressesWithTypes,\n  chain: unverifiedWalletAccount.chain,\n  id: formatWalletAccountId({\n    address: unverifiedWalletAccount.address,\n    chain: unverifiedWalletAccount.chain,\n    walletProviderKey: unverifiedWalletAccount.walletProviderKey,\n  }),\n  lastSelectedAt: unverifiedWalletAccount.lastSelectedAt,\n  verifiedCredentialId: null,\n  walletProviderKey: unverifiedWalletAccount.walletProviderKey,\n});\n","import type { Chain } from '../../../chain';\n\ntype NormalizeWalletNameWithChainParams = {\n  chain: Chain;\n  displayName: string;\n};\n\n/**\n * Format the raw wallet name and chain to get the value we can use for\n * verified credentials' `walletName` field.\n  * @not-instrumented\n */\nexport const normalizeWalletNameWithChain = ({\n  displayName,\n  chain,\n}: NormalizeWalletNameWithChainParams): string => {\n  const sanitizedWalletName = displayName\n    .replace(/[^a-zA-Z0-9]/g, '')\n    .toLowerCase();\n\n  const chainLowered = chain.toLocaleLowerCase();\n\n  if (sanitizedWalletName.endsWith(chainLowered)) {\n    return sanitizedWalletName;\n  }\n\n  return `${sanitizedWalletName}${chainLowered}`;\n};\n","import type { WalletProviderEnum } from '@dynamic-labs/sdk-api-core';\n\nimport type { Chain } from '../../../chain';\nimport { normalizeWalletNameWithChain } from '../normalizeWalletNameWithChain';\n\ntype FormatWalletProviderKeyParams = {\n  chain: Chain;\n  displayName: string;\n  suffix?: string;\n  walletProviderType: WalletProviderEnum;\n};\n\n/**\n * Assembles the wallet provider key from the wallet name, chain, and wallet provider type.\n *\n * The suffix is optional and can be used to add a uniquely identifying string to the key, which\n * might be necessary for some wallet providers (like Wallet Connect).\n *\n * IMPORTANT: Do NOT add a suffix unless absolutely necessary, as it will cause the wallet account\n * to not be able to find its wallet provider when connecting to a new device (it won't be possible\n * to determine the full key just from the Verified Credential data).\n  * @not-instrumented\n */\nexport const formatWalletProviderKey = ({\n  suffix,\n  chain,\n  displayName,\n  walletProviderType,\n}: FormatWalletProviderKeyParams) => {\n  const normalizedNameWithChain = normalizeWalletNameWithChain({\n    chain,\n    displayName,\n  });\n\n  return `${normalizedNameWithChain}:${walletProviderType}${\n    suffix ? `:${suffix}` : ''\n  }`;\n};\n","import type { JwtVerifiedCredential } from '@dynamic-labs/sdk-api-core';\n\nimport { getCore } from '../../../../../client/core/getCore';\nimport type { DynamicClient } from '../../../../../client/types';\nimport { assertDefined } from '../../../../../utils/assertDefined';\nimport { getChainFromVerifiedCredentialChain } from '../../../../../utils/getChainFromVerifiedCredentialChain';\nimport { formatWalletProviderKey } from '../../../utils/formatWalletProviderKey';\n\ntype GetWalletProviderKeyFromVerifiedCredentialParams = {\n  verifiedCredential: JwtVerifiedCredential;\n};\n\n/** @not-instrumented */\nexport const getWalletProviderKeyFromVerifiedCredential = (\n  { verifiedCredential }: GetWalletProviderKeyFromVerifiedCredentialParams,\n  client: DynamicClient\n) => {\n  const core = getCore(client);\n\n  const { walletProviderKeyMap } = core.state.get();\n\n  const storedWalletProviderKey = walletProviderKeyMap[verifiedCredential.id];\n\n  if (storedWalletProviderKey) {\n    return { walletProviderKey: storedWalletProviderKey };\n  }\n\n  /**\n   * We fallback to comprising the wallet provider key from walletName and walletProvider.\n   *\n   * Some wallet provider types (like Wallet Connect) also use a special suffix for their wallet provider\n   * keys, so this won't be enough for them.\n   * Therefore, for those specific wallet providers, the wallet account will remain without a wallet provider\n   * and will require reconnection.\n   * Read walletProvider.types.ts for more info.\n   */\n  assertDefined(\n    verifiedCredential.walletName,\n    `Failed to get wallet provider for verified credential with ID ${verifiedCredential.id}: missing walletName`\n  );\n\n  assertDefined(\n    verifiedCredential.walletProvider,\n    `Failed to get wallet provider for verified credential with ID ${verifiedCredential.id}: missing walletProvider`\n  );\n\n  assertDefined(\n    verifiedCredential.chain,\n    `Failed to get wallet provider for verified credential with ID ${verifiedCredential.id}: missing chain`\n  );\n\n  /**\n   * Historically, walletNames did not include the chain name as a suffix.\n   * This piece of logic simply ensures we normalize any legacy walletNames to conform.\n   */\n  const chain = getChainFromVerifiedCredentialChain(verifiedCredential.chain);\n\n  const walletProviderKey = formatWalletProviderKey({\n    chain,\n    displayName: verifiedCredential.walletName,\n    walletProviderType: verifiedCredential.walletProvider,\n  });\n\n  return { walletProviderKey };\n};\n","import type { JwtVerifiedCredential } from '@dynamic-labs/sdk-api-core';\n\nimport type { DynamicClient } from '../../../../client/types';\nimport { assertDefined } from '../../../../utils/assertDefined';\nimport { getChainFromVerifiedCredentialChain } from '../../../../utils/getChainFromVerifiedCredentialChain';\nimport type { HardwareWalletVendor } from '../../hardwareWallet/hardwareWallet.types';\nimport type { WalletAccount } from '../../walletAccount';\nimport { getWalletProviderKeyFromVerifiedCredential } from '../../walletProvider/walletProviderKeyMap/getWalletProviderKeyFromVerifiedCredential';\nimport { formatWalletAccountId } from '../formatWalletAccountId';\n\ntype ConvertVerifiedCredentialToWalletAccountParams = {\n  verifiedCredential: JwtVerifiedCredential;\n};\n\n/** @not-instrumented */\nexport const convertVerifiedCredentialToWalletAccount = (\n  { verifiedCredential }: ConvertVerifiedCredentialToWalletAccountParams,\n  client: DynamicClient\n): WalletAccount => {\n  assertDefined(\n    verifiedCredential.address,\n    'Missing address in verified credential'\n  );\n  assertDefined(\n    verifiedCredential.chain,\n    'Missing chain in verified credential'\n  );\n\n  const chain = getChainFromVerifiedCredentialChain(verifiedCredential.chain);\n\n  const { walletProviderKey } = getWalletProviderKeyFromVerifiedCredential(\n    {\n      verifiedCredential,\n    },\n    client\n  );\n\n  const walletAccountId = formatWalletAccountId({\n    address: verifiedCredential.address,\n    chain,\n    walletProviderKey,\n  });\n\n  return {\n    address: verifiedCredential.address,\n    addressesWithTypes: verifiedCredential.walletAdditionalAddresses,\n    chain,\n    hardwareWalletVendor: verifiedCredential.walletProperties?.hardwareWallet as\n      | HardwareWalletVendor\n      | undefined,\n    id: walletAccountId,\n    lastSelectedAt: verifiedCredential.lastSelectedAt ?? null,\n    verifiedCredentialId: verifiedCredential.id,\n    walletProviderKey,\n  };\n};\n","import type { SdkUser } from '@dynamic-labs/sdk-api-core';\nimport { JwtVerifiedCredentialFormatEnum } from '@dynamic-labs/sdk-api-core';\n\nimport type { DynamicClient } from '../../../../client/types';\nimport type { UnverifiedWalletAccount } from '../../unverifiedWalletAccounts';\nimport { convertUnverifiedWalletAccountToWalletAccount } from '../../utils/convertUnverifiedWalletAccountToWalletAccount';\nimport { convertVerifiedCredentialToWalletAccount } from '../../utils/convertVerifiedCredentialToWalletAccount';\nimport type { WalletAccount } from '../../walletAccount';\n\ntype GetWalletAccountsFromStateParams = {\n  unverifiedWalletAccounts: UnverifiedWalletAccount[];\n  user: SdkUser | null;\n};\n\n/** @not-instrumented */\nexport const getWalletAccountsFromState = (\n  { unverifiedWalletAccounts, user }: GetWalletAccountsFromStateParams,\n  client: DynamicClient\n): WalletAccount[] => {\n  const walletAccountsMap: Map<string, WalletAccount> = new Map();\n\n  /**\n   * Handle the unverified wallet accounts before the user verified credentials\n   * so the later verified wallet accounts can override the unverified wallet accounts\n   */\n  unverifiedWalletAccounts.forEach((unverifiedWalletAccount) => {\n    const walletAccount = convertUnverifiedWalletAccountToWalletAccount({\n      unverifiedWalletAccount,\n    });\n\n    walletAccountsMap.set(walletAccount.id, walletAccount);\n  });\n\n  /**\n   * Handle user verified credentials\n   */\n  const verifiedCredentials = user?.verifiedCredentials ?? [];\n\n  verifiedCredentials\n    .filter(\n      (verified) =>\n        verified.format === JwtVerifiedCredentialFormatEnum.Blockchain\n    )\n    .forEach((verifiedWalletAccount) => {\n      const walletAccount = convertVerifiedCredentialToWalletAccount(\n        {\n          verifiedCredential: verifiedWalletAccount,\n        },\n        client\n      );\n\n      walletAccountsMap.set(walletAccount.id, walletAccount);\n    });\n\n  return Array.from(walletAccountsMap.values());\n};\n","import { getCore } from '../../../client/core/getCore';\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport type { WalletAccount } from '../walletAccount';\nimport { getWalletAccountsFromState } from './getWalletAccountsFromState';\n\n/**\n * Retrieves all wallet accounts associated with the current session.\n *\n * This function returns both verified and unverified wallet accounts,\n * combining data from user credentials and local unverified accounts.\n * You can differentiate between verified and unverified wallet accounts by\n * checking the `verifiedCredentialId` property.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns An array of wallet accounts associated with the session.\n  * @not-instrumented\n * @hook Exposed as a hook so consumers get the reactive list of wallet accounts.\n */\nexport const getWalletAccounts = (\n  client = getDefaultClient()\n): WalletAccount[] => {\n  const core = getCore(client);\n  const { unverifiedWalletAccounts, user } = core.state.get();\n\n  return getWalletAccountsFromState({ unverifiedWalletAccounts, user }, client);\n};\n","export const DYNAMIC_AUTH_COOKIE_NAME = 'DYNAMIC_JWT_TOKEN';\n","import type { DynamicClient } from '../../../client/types';\nimport { emitEvent } from '../../clientEvents';\nimport { getWalletAccounts } from '../getWalletAccounts';\n\n/**\n * Emits the `walletAccountsChanged` event.\n  * @not-instrumented\n */\nexport const emitWalletAccountsChangedEvent = (client: DynamicClient): void => {\n  const walletAccounts = getWalletAccounts(client);\n\n  emitEvent(\n    {\n      args: { walletAccounts },\n      event: 'walletAccountsChanged',\n    },\n    client\n  );\n};\n","import { getCore } from '../../../../client/core/getCore';\nimport type { DynamicClient } from '../../../../client/types';\nimport { emitWalletAccountsChangedEvent } from '../../../wallets/emitWalletAccountsChangedEvent';\nimport { getWalletAccountsFromState } from '../../../wallets/getWalletAccounts/getWalletAccountsFromState';\n\ntype CheckAndRaiseWalletAccountsChangedEventParams = {\n  previousState: Readonly<DynamicCoreState>;\n};\n\n/** @not-instrumented */\nexport const checkAndRaiseWalletAccountsChangedEvent = (\n  { previousState }: CheckAndRaiseWalletAccountsChangedEventParams,\n  client: DynamicClient\n) => {\n  const core = getCore(client);\n\n  const walletAccountsHashBefore = getWalletAccountsHash(previousState, client);\n\n  const walletAccountsHashAfter = getWalletAccountsHash(\n    core.state.get(),\n    client\n  );\n\n  if (walletAccountsHashBefore !== walletAccountsHashAfter) {\n    emitWalletAccountsChangedEvent(client);\n  }\n};\n\n \n \nconst getWalletAccountsHash = (\n  state: Readonly<DynamicCoreState>,\n  client: DynamicClient\n) =>\n  getWalletAccountsFromState(state, client)\n    .map((walletAccount) => JSON.stringify(walletAccount))\n    .sort()\n    .join('-');\n","import { getDefaultClient } from '../../../client/defaultClient';\nimport { assertDefined } from '../../../utils/assertDefined';\n\n/**\n * Checks if the user requires additional MFA authentication.\n *\n * This function determines if the current user session requires\n * additional multi-factor authentication to access certain features.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns True if the user needs additional MFA authentication, false otherwise.\n  * @not-instrumented\n */\nexport const isUserMissingMfaAuth = (client = getDefaultClient()) => {\n  const user = client.user;\n\n  assertDefined(user, 'User not logged in');\n\n  return Boolean(user.scope?.includes('requiresAdditionalAuth'));\n};\n","import type { DynamicClient } from '../../../client/types';\nimport { getWalletProviderRegistry } from '../walletProviderRegistry';\n\n/**\n * Get all available wallet providers to interact with internally.\n  * @not-instrumented\n */\nexport const getWalletProviders = (client: DynamicClient) => {\n  const walletProviderRegistry = getWalletProviderRegistry(client);\n\n  return walletProviderRegistry.listProviders();\n};\n","import { WalletProviderEnum } from '@dynamic-labs/sdk-api-core';\n\nimport type { DynamicClient } from '../../../client/types/DynamicClient';\nimport type { Chain } from '../../chain';\nimport { getWalletProviders } from '../../wallets/getWalletProviders';\nimport { formatWalletProviderKey } from '../../wallets/utils/formatWalletProviderKey';\nimport { DYNAMIC_WAAS_METADATA } from '../constants';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\nimport type { WaasWalletProvider } from '../waas.types';\n\ntype FindWaasWalletProviderByChainParams = {\n  chain: Chain;\n};\n\n/** @not-instrumented */\nexport const findWaasWalletProviderByChain = (\n  { chain }: FindWaasWalletProviderByChainParams,\n  client: DynamicClient\n): WaasWalletProvider | null => {\n  const providers = getWalletProviders(client);\n\n  const waasProviderKey = formatWalletProviderKey({\n    chain,\n    displayName: DYNAMIC_WAAS_METADATA.displayName,\n    walletProviderType: WalletProviderEnum.EmbeddedWallet,\n  });\n\n  const waasProvider = providers.find(\n    (provider) => provider.key === waasProviderKey && provider.chain === chain\n  );\n\n  if (!waasProvider || !isWaasWalletProvider(waasProvider)) {\n    return null;\n  }\n\n  return waasProvider;\n};\n","import type { WalletAccount } from '../../wallets/walletAccount';\nimport { DYNAMIC_WAAS_METADATA } from '../constants';\n\ntype IsWaasWalletAccountParams = {\n  walletAccount: WalletAccount;\n};\n\n/**\n * This function determines whether the provided wallet account is a Dynamic\n * WaaS wallet account.\n *\n * @param params.walletAccount - The wallet account to check.\n * @returns True if the wallet account is a WaaS wallet account, false otherwise.\n  * @not-instrumented\n */\nexport const isWaasWalletAccount = ({\n  walletAccount,\n}: IsWaasWalletAccountParams): boolean => {\n  return walletAccount.walletProviderKey.includes(\n    DYNAMIC_WAAS_METADATA.normalizedWalletName\n  );\n};\n","import type { DynamicClient } from '../../../client/types';\nimport { isUserMissingMfaAuth } from '../../mfa/isUserMissingMfaAuth';\nimport { getWalletAccounts } from '../../wallets/getWalletAccounts';\nimport { findWaasWalletProviderByChain } from '../findWaasWalletProviderByChain';\nimport { isWaasWalletAccount } from '../isWaasWalletAccount';\n\n/** @not-instrumented */\nexport const restoreUserSharesForAllWalletAccounts = async (\n  client: DynamicClient\n) => {\n  /**\n   * Restoring the user shares will fails if the user is missing the MFA auth.\n   * This early return prevents the attempt to restore the user shares to fail\n   * when we know it will fails and just add noise to the logs.\n   */\n  if (isUserMissingMfaAuth(client)) {\n    return;\n  }\n\n  const walletAccounts = getWalletAccounts(client);\n\n  const waasWalletAccounts = walletAccounts.filter((walletAccount) =>\n    isWaasWalletAccount({ walletAccount })\n  );\n\n  await Promise.all(\n    waasWalletAccounts.map(async (walletAccount) => {\n      const provider = findWaasWalletProviderByChain(\n        { chain: walletAccount.chain },\n        client\n      );\n\n      /**\n       * The environment might not have the embedded wallet extensions installed.\n       * In that case there is no provider for the chain and we can skip restoring the user share.\n       */\n      if (!provider) return;\n\n      return provider.restoreUserShareForWalletAccount({ walletAccount });\n    })\n  );\n};\n","import { InvalidParamError } from '../../../errors/InvalidParamError';\n\nexport type JwtPayload = {\n  [key: string]: unknown;\n  exp: number;\n  iat: number;\n  scope: string;\n  singleUse?: boolean;\n  sub: string;\n};\n\n/**\n * Decodes a JWT token and returns the full payload.\n *\n * This function extracts and returns the complete JWT payload including scopes,\n * expiration time, and other claims.\n *\n * @param jwt - The JWT token string.\n * @returns The decoded JWT payload object.\n * @throws InvalidParamError if the token is invalid or cannot be decoded.\n *\n * @example\n * ```typescript\n * const payload = decodeJwt(jwt);\n * // Returns: { scopes: ['wallet:export'], exp: 1234567890, ... }\n * ```\n  * @not-instrumented\n */\n// eslint-disable-next-line custom-rules/require-single-object-param\nexport const decodeJwt = (jwt: string): JwtPayload => {\n  try {\n    // JWT format: header.payload.signature\n    const parts = jwt.split('.');\n    if (parts.length !== 3) {\n      throw new InvalidParamError('Invalid JWT format');\n    }\n\n    // Decode the payload (second part)\n    // Base64URL decode: replace URL-safe characters and decode\n    const base64Payload = parts[1].replaceAll('-', '+').replaceAll('_', '/');\n    // Add padding if needed\n    const paddedPayload =\n      base64Payload + '='.repeat((4 - (base64Payload.length % 4)) % 4);\n    const decodedPayload = atob(paddedPayload);\n    const claims = JSON.parse(decodedPayload) as JwtPayload;\n\n    return claims;\n  } catch (error) {\n    if (error instanceof InvalidParamError) {\n      throw error;\n    }\n    throw new InvalidParamError(\n      `Failed to decode JWT: ${\n        error instanceof Error ? error.message : String(error)\n      }`\n    );\n  }\n};\n","/**\n * Normalizes scopes by deduplicating and sorting them.\n * This creates a canonical representation for comparison.\n *\n * @param scopes - Array of scope strings (may contain duplicates)\n * @returns Normalized, sorted array of unique scopes\n  * @not-instrumented\n */\n// eslint-disable-next-line custom-rules/require-single-object-param\nexport const normalizeScopes = (scopes: string[]): string[] => {\n  return [...new Set(scopes)].sort((a, b) => a.localeCompare(b));\n};\n","import { decodeJwt } from '../../../decodeJwt';\nimport type { ParsedElevatedAccessToken } from '../elevatedAccessTokens.types';\nimport { normalizeScopes } from '../normalizeScopes';\n\nexport type ParseElevatedAccessTokenOptions = {\n  /** JWT string containing the elevated access token. */\n  token: string;\n};\n\n/**\n * Validates and parses an elevated access token from a JWT string.\n * Extracts scopes, expiration, and validates the token structure.\n *\n * Policy decisions:\n * - Tokens without scopes are rejected (returns null)\n * - Tokens with empty scopes array are rejected (returns null)\n * - Tokens without exp field are rejected (returns null)\n * - Expired tokens are rejected (returns null)\n *\n * @returns Parsed token data or null if token is invalid/expired\n * @not-instrumented\n */\nexport const parseElevatedAccessToken = ({\n  token,\n}: ParseElevatedAccessTokenOptions): ParsedElevatedAccessToken | null => {\n  const payload = decodeJwt(token);\n  const rawScopeClaim = payload?.scope;\n  const processedScopes = rawScopeClaim?.split(' ') ?? [];\n  const filteredScopes = processedScopes.filter((s) => s.length > 0);\n  const singleUse = payload.singleUse ?? false;\n\n  // Reject tokens without scopes or with empty scopes\n  if (!filteredScopes || filteredScopes.length === 0) {\n    return null;\n  }\n\n  // Reject tokens without exp field\n  if (!payload.exp) {\n    return null;\n  }\n\n  // Convert exp (seconds) to Date (milliseconds)\n  const expiresAt = new Date(payload.exp * 1000);\n\n  // Reject expired tokens\n  if (expiresAt <= new Date()) {\n    return null;\n  }\n\n  return {\n    expiresAt,\n    normalizedScopes: normalizeScopes(filteredScopes),\n    scopes: filteredScopes,\n    singleUse,\n    token,\n  };\n};\n","import type {\n  ElevatedAccessToken,\n  ParsedElevatedAccessToken,\n} from '../elevatedAccessTokens.types';\nimport { normalizeScopes } from '../normalizeScopes';\n\n/**\n * Upserts an elevated access token into the current tokens array.\n *\n * Policy: Only one token per normalized scope-set is allowed.\n * If a token with the same normalized scopes exists, it is replaced.\n * This ensures we don't accumulate multiple tokens for the same scope combination.\n *\n * @param currentTokens - Current array of elevated access tokens\n * @param newToken - New token to upsert\n * @returns Updated array of tokens with the new token upserted\n  * @not-instrumented\n */\nexport const upsertElevatedAccessToken = ({\n  currentTokens,\n  newToken,\n}: {\n  currentTokens: ElevatedAccessToken[];\n  newToken: ParsedElevatedAccessToken;\n}): ElevatedAccessToken[] => {\n  const newScopeKey = normalizeScopes(newToken.scopes).join(' ');\n\n  // Remove any existing token with the same normalized scopes\n  const filteredTokens = currentTokens.filter((existingToken) => {\n    const existingScopeKey = normalizeScopes(existingToken.scopes).join(' ');\n    return existingScopeKey !== newScopeKey;\n  });\n\n  // Add the new token\n  return [\n    ...filteredTokens,\n    {\n      expiresAt: newToken.expiresAt,\n      scopes: newToken.scopes,\n      singleUse: newToken.singleUse,\n      token: newToken.token,\n    },\n  ];\n};\n","import type { VerifyResponse } from '@dynamic-labs/sdk-api-core';\n\nimport { getCore } from '../../../client/core/getCore';\nimport type { DynamicCoreState } from '../../../client/core/types';\nimport type { DynamicClient } from '../../../client/types';\nimport { setCookie } from '../../../utils/setCookie';\nimport { isCookieEnabled } from '../../projectSettings/isCookieEnabled';\nimport { restoreUserSharesForAllWalletAccounts } from '../../waas/restoreUserSharesForAllWalletAccounts';\nimport { DYNAMIC_AUTH_COOKIE_NAME } from '../consts';\nimport { checkAndRaiseWalletAccountsChangedEvent } from './checkAndRaiseWalletAccountsChangedEvent';\nimport { parseElevatedAccessToken } from './elevatedAccessTokens/parseElevatedAccessToken';\nimport { upsertElevatedAccessToken } from './elevatedAccessTokens/upsertElevatedAccessToken';\n\ntype UpdateAuthFromVerifyResponseParams = {\n  response: VerifyResponse;\n};\n\n/** @not-instrumented */\nexport const updateAuthFromVerifyResponse = (\n  { response }: UpdateAuthFromVerifyResponseParams,\n  client: DynamicClient\n) => {\n  const core = getCore(client);\n\n  const previousState = { ...core.state.get() };\n\n  const { user, minifiedJwt, jwt, expiresAt, mfaToken, elevatedAccessToken } =\n    response;\n\n  // Expires at is in seconds, so we need to convert it to milliseconds\n  const sessionExpiresAt = new Date(expiresAt * 1000);\n\n  const newState: Partial<DynamicCoreState> = {\n    legacyToken: jwt ?? null,\n    sessionExpiresAt: sessionExpiresAt,\n    token: minifiedJwt ?? null,\n    user,\n  };\n\n  // only override the mfaToken if a new one is provided in the response\n  if (mfaToken) {\n    newState.mfaToken = mfaToken;\n  }\n\n  // Add elevated access token to the array if a new one is provided in the response\n  // Policy: Only one token per normalized scope-set is allowed (old tokens are replaced)\n  // Always preserve existing tokens to ensure they're synced to storage\n  const currentTokens = core.state.get().elevatedAccessTokens || [];\n  newState.elevatedAccessTokens = currentTokens;\n  \n  if (elevatedAccessToken) {\n    const parsedToken = parseElevatedAccessToken({\n      token: elevatedAccessToken,\n    });\n    if (parsedToken) {\n      newState.elevatedAccessTokens = upsertElevatedAccessToken({\n        currentTokens,\n        newToken: parsedToken,\n      });\n    }\n  }\n\n  core.state.set(newState);\n\n  /**\n   * For customers using a sandbox environment with cookies enabled, we need to set the cookie\n   * programmatically because Redcoast won't set the cookie via headers. We set the cookie programmatically\n   * so customers can access the cookie from document.cookie consistently between sandbox and live environments.\n   */\n  if (minifiedJwt && isCookieEnabled(client)) {\n    const expireDate = sessionExpiresAt.toUTCString();\n\n    setCookie(\n      `${DYNAMIC_AUTH_COOKIE_NAME}=${minifiedJwt}; expires=${expireDate}; path=/; SameSite=Lax`\n    );\n  }\n\n  checkAndRaiseWalletAccountsChangedEvent({ previousState }, client);\n\n  // if the user is logging in, we should restore user shares\n  // for all wallet accounts for performance reasons\n  const isUserLoggingIn = !previousState.user && Boolean(newState.user);\n  if (isUserLoggingIn) {\n    void restoreUserSharesForAllWalletAccounts(client);\n  }\n};\n","import type { DynamicClient } from '../../../../client/types/DynamicClient';\nimport type { WalletAccount } from '../../walletAccount';\n\ntype GetVerifiedCredentialForWalletAccountParams = {\n  walletAccount: WalletAccount;\n};\n\n/** @not-instrumented */\nexport const getVerifiedCredentialForWalletAccount = (\n  { walletAccount }: GetVerifiedCredentialForWalletAccountParams,\n  client: DynamicClient\n) => {\n  return client.user?.verifiedCredentials.find(\n    (vc) => vc.id === walletAccount.verifiedCredentialId\n  );\n};\n","import type { DynamicClient } from '../../../client/types';\nimport { NoWalletProviderFoundError } from '../../../errors/NoWalletProviderFoundError';\nimport { getWalletProviders } from '../getWalletProviders';\n\ntype GetWalletProviderByKeyParams = {\n  walletProviderKey: string;\n};\n\n/** @not-instrumented */\nexport const getWalletProviderByKey = (\n  { walletProviderKey }: GetWalletProviderByKeyParams,\n  client: DynamicClient\n) => {\n  const walletProviders = getWalletProviders(client);\n\n  const walletProvider = walletProviders.find(\n    (walletProvider) => walletProvider.key === walletProviderKey\n  );\n\n  if (!walletProvider) {\n    throw new NoWalletProviderFoundError({ walletProviderKey });\n  }\n\n  return walletProvider;\n};\n"],"mappings":";;;;;;;;AAKA,MAAa,aAAa,WAAmB;AAE3C,UAAS,SAAS;;;;;ACLpB,IAAa,gCAAb,cAAmD,UAAU;CAE3D,YAAY,OAAe;AACzB,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,gCAAgC,MAAM;GACrD,CAAC;;;;;;;ACCN,MAAa,0BACX,sBACiC;CACjC,MAAM,CAAC,+BAA+B,oBAAoB,QAAQ,GAAG,QACnE,kBAAkB,MAAM,IAAI;AAE9B,KACE,CAAC,iCACD,CAAC,OAAO,OAAO,mBAAmB,CAAC,SACjC,mBACD,IACD,KAAK,SAAS,EAEd,OAAM,IAAI,8BAA8B,kBAAkB;AAG5D,QAAO;EACL;EACA;EACoB;EACrB;;;;;;ACrBH,MAAa,oBAAoB,EAAE,SAAS,YAAqC;CAC/E,IAAI,oBAAoB;AAExB,KAAI,mBAAmB,WAAW,KAAK,CACrC,qBAAoB,kBAAkB,MAAM,EAAE;AAUhD,qBAFmD,CAAC,OAAO,OAAO,CAEZ,SAAS,MAAM,GACjE,mBAAmB,aAAa,GAChC;AAEJ,QAAO;;;;;;AClBT,MAAa,yBAAyB,EACpC,SACA,OACA,wBACyC;CACzC,MAAM,EAAE,kCACN,uBAAuB,kBAAkB;AAI3C,QAAO,GAAG,8BAA8B,GAFd,iBAAiB;EAAE;EAAS;EAAO,CAAC;;;;;;ACVhE,MAAa,iDAAiD,EAC5D,+BACyE;CACzE,SAAS,wBAAwB;CACjC,oBAAoB,wBAAwB;CAC5C,OAAO,wBAAwB;CAC/B,IAAI,sBAAsB;EACxB,SAAS,wBAAwB;EACjC,OAAO,wBAAwB;EAC/B,mBAAmB,wBAAwB;EAC5C,CAAC;CACF,gBAAgB,wBAAwB;CACxC,sBAAsB;CACtB,mBAAmB,wBAAwB;CAC5C;;;;;;;;;ACXD,MAAa,gCAAgC,EAC3C,aACA,YACgD;CAChD,MAAM,sBAAsB,YACzB,QAAQ,iBAAiB,GAAG,CAC5B,aAAa;CAEhB,MAAM,eAAe,MAAM,mBAAmB;AAE9C,KAAI,oBAAoB,SAAS,aAAa,CAC5C,QAAO;AAGT,QAAO,GAAG,sBAAsB;;;;;;;;;;;;;;;;ACHlC,MAAa,2BAA2B,EACtC,QACA,OACA,aACA,yBACmC;AAMnC,QAAO,GALyB,6BAA6B;EAC3D;EACA;EACD,CAAC,CAEgC,GAAG,qBACnC,SAAS,IAAI,WAAW;;;;;;ACtB5B,MAAa,8CACX,EAAE,sBACF,WACG;CAGH,MAAM,EAAE,yBAFK,QAAQ,OAAO,CAEU,MAAM,KAAK;CAEjD,MAAM,0BAA0B,qBAAqB,mBAAmB;AAExE,KAAI,wBACF,QAAO,EAAE,mBAAmB,yBAAyB;;;;;;;;;;AAYvD,eACE,mBAAmB,YACnB,iEAAiE,mBAAmB,GAAG,sBACxF;AAED,eACE,mBAAmB,gBACnB,iEAAiE,mBAAmB,GAAG,0BACxF;AAED,eACE,mBAAmB,OACnB,iEAAiE,mBAAmB,GAAG,iBACxF;AAcD,QAAO,EAAE,mBANiB,wBAAwB;EAChD,OAHY,oCAAoC,mBAAmB,MAAM;EAIzE,aAAa,mBAAmB;EAChC,oBAAoB,mBAAmB;EACxC,CAAC,EAE0B;;;;;;AChD9B,MAAa,4CACX,EAAE,sBACF,WACkB;AAClB,eACE,mBAAmB,SACnB,yCACD;AACD,eACE,mBAAmB,OACnB,uCACD;CAED,MAAM,QAAQ,oCAAoC,mBAAmB,MAAM;CAE3E,MAAM,EAAE,sBAAsB,2CAC5B,EACE,oBACD,EACD,OACD;CAED,MAAM,kBAAkB,sBAAsB;EAC5C,SAAS,mBAAmB;EAC5B;EACA;EACD,CAAC;AAEF,QAAO;EACL,SAAS,mBAAmB;EAC5B,oBAAoB,mBAAmB;EACvC;EACA,sBAAsB,mBAAmB,kBAAkB;EAG3D,IAAI;EACJ,gBAAgB,mBAAmB,kBAAkB;EACrD,sBAAsB,mBAAmB;EACzC;EACD;;;;;;ACvCH,MAAa,8BACX,EAAE,0BAA0B,QAC5B,WACoB;CACpB,MAAMA,oCAAgD,IAAI,KAAK;;;;;AAM/D,0BAAyB,SAAS,4BAA4B;EAC5D,MAAM,gBAAgB,8CAA8C,EAClE,yBACD,CAAC;AAEF,oBAAkB,IAAI,cAAc,IAAI,cAAc;GACtD;AAOF,EAF4B,MAAM,uBAAuB,EAAE,EAGxD,QACE,aACC,SAAS,WAAW,gCAAgC,WACvD,CACA,SAAS,0BAA0B;EAClC,MAAM,gBAAgB,yCACpB,EACE,oBAAoB,uBACrB,EACD,OACD;AAED,oBAAkB,IAAI,cAAc,IAAI,cAAc;GACtD;AAEJ,QAAO,MAAM,KAAK,kBAAkB,QAAQ,CAAC;;;;;;;;;;;;;;;;;;ACpC/C,MAAa,qBACX,SAAS,kBAAkB,KACP;CAEpB,MAAM,EAAE,0BAA0B,SADrB,QAAQ,OAAO,CACoB,MAAM,KAAK;AAE3D,QAAO,2BAA2B;EAAE;EAA0B;EAAM,EAAE,OAAO;;;;;ACxB/E,MAAa,2BAA2B;;;;;;;;ACQxC,MAAa,kCAAkC,WAAgC;AAG7E,WACE;EACE,MAAM,EAAE,gBAJW,kBAAkB,OAAO,EAIpB;EACxB,OAAO;EACR,EACD,OACD;;;;;;ACPH,MAAa,2CACX,EAAE,iBACF,WACG;CACH,MAAM,OAAO,QAAQ,OAAO;AAS5B,KAPiC,sBAAsB,eAAe,OAAO,KAE7C,sBAC9B,KAAK,MAAM,KAAK,EAChB,OACD,CAGC,gCAA+B,OAAO;;AAM1C,MAAM,yBACJ,OACA,WAEA,2BAA2B,OAAO,OAAO,CACtC,KAAK,kBAAkB,KAAK,UAAU,cAAc,CAAC,CACrD,MAAM,CACN,KAAK,IAAI;;;;;;;;;;;;;;ACxBd,MAAa,wBAAwB,SAAS,kBAAkB,KAAK;CACnE,MAAM,OAAO,OAAO;AAEpB,eAAc,MAAM,qBAAqB;AAEzC,QAAO,QAAQ,KAAK,OAAO,SAAS,yBAAyB,CAAC;;;;;;;;;ACXhE,MAAa,sBAAsB,WAA0B;AAG3D,QAF+B,0BAA0B,OAAO,CAElC,eAAe;;;;;;ACK/C,MAAa,iCACX,EAAE,SACF,WAC8B;CAC9B,MAAM,YAAY,mBAAmB,OAAO;CAE5C,MAAM,kBAAkB,wBAAwB;EAC9C;EACA,aAAa,sBAAsB;EACnC,oBAAoB,mBAAmB;EACxC,CAAC;CAEF,MAAM,eAAe,UAAU,MAC5B,aAAa,SAAS,QAAQ,mBAAmB,SAAS,UAAU,MACtE;AAED,KAAI,CAAC,gBAAgB,CAAC,qBAAqB,aAAa,CACtD,QAAO;AAGT,QAAO;;;;;;;;;;;;;ACpBT,MAAa,uBAAuB,EAClC,oBACwC;AACxC,QAAO,cAAc,kBAAkB,SACrC,sBAAsB,qBACvB;;;;;;ACbH,MAAa,wCAAwC,OACnD,WACG;;;;;;AAMH,KAAI,qBAAqB,OAAO,CAC9B;CAKF,MAAM,qBAFiB,kBAAkB,OAAO,CAEN,QAAQ,kBAChD,oBAAoB,EAAE,eAAe,CAAC,CACvC;AAED,OAAM,QAAQ,IACZ,mBAAmB,IAAI,OAAO,kBAAkB;EAC9C,MAAM,WAAW,8BACf,EAAE,OAAO,cAAc,OAAO,EAC9B,OACD;;;;;AAMD,MAAI,CAAC,SAAU;AAEf,SAAO,SAAS,iCAAiC,EAAE,eAAe,CAAC;GACnE,CACH;;;;;;;;;;;;;;;;;;;;;;ACXH,MAAa,aAAa,QAA4B;AACpD,KAAI;EAEF,MAAM,QAAQ,IAAI,MAAM,IAAI;AAC5B,MAAI,MAAM,WAAW,EACnB,OAAM,IAAI,kBAAkB,qBAAqB;EAKnD,MAAM,gBAAgB,MAAM,GAAG,WAAW,KAAK,IAAI,CAAC,WAAW,KAAK,IAAI;EAExE,MAAM,gBACJ,gBAAgB,IAAI,QAAQ,IAAK,cAAc,SAAS,KAAM,EAAE;EAClE,MAAM,iBAAiB,KAAK,cAAc;AAG1C,SAFe,KAAK,MAAM,eAAe;UAGlC,OAAO;AACd,MAAI,iBAAiB,kBACnB,OAAM;AAER,QAAM,IAAI,kBACR,yBACE,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,GAEzD;;;;;;;;;;;;;;AC9CL,MAAa,mBAAmB,WAA+B;AAC7D,QAAO,CAAC,GAAG,IAAI,IAAI,OAAO,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,EAAE,CAAC;;;;;;;;;;;;;;;;;;ACYhE,MAAa,4BAA4B,EACvC,YACuE;CACvE,MAAM,UAAU,UAAU,MAAM;CAGhC,MAAM,mBAFgB,SAAS,QACQ,MAAM,IAAI,IAAI,EAAE,EAChB,QAAQ,MAAM,EAAE,SAAS,EAAE;CAClE,MAAM,YAAY,QAAQ,aAAa;AAGvC,KAAI,CAAC,kBAAkB,eAAe,WAAW,EAC/C,QAAO;AAIT,KAAI,CAAC,QAAQ,IACX,QAAO;CAIT,MAAM,4BAAY,IAAI,KAAK,QAAQ,MAAM,IAAK;AAG9C,KAAI,6BAAa,IAAI,MAAM,CACzB,QAAO;AAGT,QAAO;EACL;EACA,kBAAkB,gBAAgB,eAAe;EACjD,QAAQ;EACR;EACA;EACD;;;;;;;;;;;;;;;;;ACrCH,MAAa,6BAA6B,EACxC,eACA,eAI2B;CAC3B,MAAM,cAAc,gBAAgB,SAAS,OAAO,CAAC,KAAK,IAAI;AAS9D,QAAO,CACL,GAPqB,cAAc,QAAQ,kBAAkB;AAE7D,SADyB,gBAAgB,cAAc,OAAO,CAAC,KAAK,IAAI,KAC5C;GAC5B,EAKA;EACE,WAAW,SAAS;EACpB,QAAQ,SAAS;EACjB,WAAW,SAAS;EACpB,OAAO,SAAS;EACjB,CACF;;;;;;ACxBH,MAAa,gCACX,EAAE,YACF,WACG;CACH,MAAM,OAAO,QAAQ,OAAO;CAE5B,MAAM,gBAAgB,EAAE,GAAG,KAAK,MAAM,KAAK,EAAE;CAE7C,MAAM,EAAE,MAAM,aAAa,KAAK,WAAW,UAAU,wBACnD;CAGF,MAAM,mCAAmB,IAAI,KAAK,YAAY,IAAK;CAEnD,MAAMC,WAAsC;EAC1C,aAAa,OAAO;EACF;EAClB,OAAO,eAAe;EACtB;EACD;AAGD,KAAI,SACF,UAAS,WAAW;CAMtB,MAAM,gBAAgB,KAAK,MAAM,KAAK,CAAC,wBAAwB,EAAE;AACjE,UAAS,uBAAuB;AAEhC,KAAI,qBAAqB;EACvB,MAAM,cAAc,yBAAyB,EAC3C,OAAO,qBACR,CAAC;AACF,MAAI,YACF,UAAS,uBAAuB,0BAA0B;GACxD;GACA,UAAU;GACX,CAAC;;AAIN,MAAK,MAAM,IAAI,SAAS;;;;;;AAOxB,KAAI,eAAe,gBAAgB,OAAO,CAGxC,WACE,GAAG,yBAAyB,GAAG,YAAY,YAH1B,iBAAiB,aAAa,CAGmB,wBACnE;AAGH,yCAAwC,EAAE,eAAe,EAAE,OAAO;AAKlE,KADwB,CAAC,cAAc,QAAQ,QAAQ,SAAS,KAAK,CAEnE,CAAK,sCAAsC,OAAO;;;;;;AC3EtD,MAAa,yCACX,EAAE,iBACF,WACG;AACH,QAAO,OAAO,MAAM,oBAAoB,MACrC,OAAO,GAAG,OAAO,cAAc,qBACjC;;;;;;ACLH,MAAa,0BACX,EAAE,qBACF,WACG;CAGH,MAAM,iBAFkB,mBAAmB,OAAO,CAEX,MACpC,qBAAmBC,iBAAe,QAAQ,kBAC5C;AAED,KAAI,CAAC,eACH,OAAM,IAAI,2BAA2B,EAAE,mBAAmB,CAAC;AAG7D,QAAO"}
+{"version":3,"file":"getWalletProviderByKey-RTW-S68o.native.esm.js","names":["walletAccountsMap: Map<string, WalletAccount>","newState: Partial<DynamicCoreState>","walletProvider"],"sources":["../src/utils/setCookie/setCookie.ts","../src/errors/InvalidWalletProviderKeyError.ts","../src/modules/wallets/walletProvider/splitWalletProviderKey/splitWalletProviderKey.ts","../src/modules/wallets/utils/normalizeAddress/normalizeAddress.ts","../src/modules/wallets/utils/formatWalletAccountId/formatWalletAccountId.ts","../src/modules/wallets/utils/convertUnverifiedWalletAccountToWalletAccount/convertUnverifiedWalletAccountToWalletAccount.ts","../src/modules/wallets/utils/normalizeWalletNameWithChain/normalizeWalletNameWithChain.ts","../src/modules/wallets/utils/formatWalletProviderKey/formatWalletProviderKey.ts","../src/modules/wallets/walletProvider/walletProviderKeyMap/getWalletProviderKeyFromVerifiedCredential/getWalletProviderKeyFromVerifiedCredential.ts","../src/modules/wallets/utils/convertVerifiedCredentialToWalletAccount/convertVerifiedCredentialToWalletAccount.ts","../src/modules/wallets/getWalletAccounts/getWalletAccountsFromState/getWalletAccountsFromState.ts","../src/modules/wallets/getWalletAccounts/getWalletAccounts.ts","../src/modules/auth/consts.ts","../src/modules/wallets/emitWalletAccountsChangedEvent/emitWalletAccountsChangedEvent.ts","../src/modules/auth/updateAuthFromVerifyResponse/checkAndRaiseWalletAccountsChangedEvent/checkAndRaiseWalletAccountsChangedEvent.ts","../src/modules/mfa/isUserMissingMfaAuth/isUserMissingMfaAuth.ts","../src/modules/wallets/getWalletProviders/getWalletProviders.ts","../src/modules/waas/findWaasWalletProviderByChain/findWaasWalletProviderByChain.ts","../src/modules/waas/isWaasWalletAccount/isWaasWalletAccount.ts","../src/modules/waas/initializeWaasClientsForEagerRecovery/initializeWaasClientsForEagerRecovery.ts","../src/modules/auth/decodeJwt/decodeJwt.ts","../src/modules/auth/updateAuthFromVerifyResponse/elevatedAccessTokens/normalizeScopes/normalizeScopes.ts","../src/modules/auth/updateAuthFromVerifyResponse/elevatedAccessTokens/parseElevatedAccessToken/parseElevatedAccessToken.ts","../src/modules/auth/updateAuthFromVerifyResponse/elevatedAccessTokens/upsertElevatedAccessToken/upsertElevatedAccessToken.ts","../src/modules/auth/updateAuthFromVerifyResponse/updateAuthFromVerifyResponse.ts","../src/modules/wallets/utils/getVerifiedCredentialForWalletAccount/getVerifiedCredentialForWalletAccount.ts","../src/modules/wallets/getWalletProviderByKey/getWalletProviderByKey.ts"],"sourcesContent":["/**\n * Sefelly sets the cookie in the browser.\n  * @not-instrumented\n */\n// eslint-disable-next-line custom-rules/require-single-object-param\nexport const setCookie = (cookie: string) => {\n  // eslint-disable-next-line no-restricted-globals\n  document.cookie = cookie;\n};\n","import { BaseError } from './base';\n\nexport class InvalidWalletProviderKeyError extends BaseError {\n  // eslint-disable-next-line custom-rules/require-single-object-param\n  constructor(value: string) {\n    super({\n      cause: null,\n      code: 'invalid_wallet_provider_key',\n      docsUrl: null,\n      name: 'InvalidWalletProviderKeyError',\n      shortMessage: `Invalid wallet provider key: ${value}. Key must be in the format of <normalizedWalletNameWithChain>:<walletProviderType>[:<suffix>]`,\n    });\n  }\n}\n","import { WalletProviderEnum } from '@dynamic-labs/sdk-api-core';\n\nimport { InvalidWalletProviderKeyError } from '../../../../errors/InvalidWalletProviderKeyError';\n\ntype SplitWalletProviderKeyResult = {\n  normalizedWalletNameWithChain: string;\n  suffix: string | undefined;\n  walletProviderType: WalletProviderEnum;\n};\n\n/** @not-instrumented */\n// eslint-disable-next-line custom-rules/require-single-object-param\nexport const splitWalletProviderKey = (\n  walletProviderKey: string\n): SplitWalletProviderKeyResult => {\n  const [normalizedWalletNameWithChain, walletProviderType, suffix, ...rest] =\n    walletProviderKey.split(':');\n\n  if (\n    !normalizedWalletNameWithChain ||\n    !Object.values(WalletProviderEnum).includes(\n      walletProviderType as WalletProviderEnum\n    ) ||\n    rest.length > 0\n  ) {\n    throw new InvalidWalletProviderKeyError(walletProviderKey);\n  }\n\n  return {\n    normalizedWalletNameWithChain,\n    suffix,\n    walletProviderType: walletProviderType as WalletProviderEnum,\n  };\n};\n","import type { Chain } from '../../../chain';\n\nexport type NormalizeAddressOptions = {\n  /** The raw address to normalize. */\n  address: string;\n\n  /** The chain the address belongs to. */\n  chain: Chain;\n};\n\n/** @not-instrumented */\nexport const normalizeAddress = ({ address, chain }: NormalizeAddressOptions) => {\n  let normalizedAddress = address;\n\n  if (normalizedAddress?.startsWith('0x')) {\n    normalizedAddress = normalizedAddress.slice(2);\n  }\n\n  /**\n   * These are standard from CAIP-2: https://github.com/ChainAgnostic/CAIPs/blob/master/CAIPs/caip-2.md\n   * see also: https://github.com/ChainAgnostic/namespaces\n   * note: no standard namespace currently exists for flow\n   */\n  const chainsThatRequireLowercaseAddress: Chain[] = ['EVM', 'FLOW'];\n\n  normalizedAddress = chainsThatRequireLowercaseAddress.includes(chain)\n    ? normalizedAddress?.toLowerCase()\n    : normalizedAddress;\n\n  return normalizedAddress;\n};\n","import type { Chain } from '../../../chain';\nimport { splitWalletProviderKey } from '../../walletProvider/splitWalletProviderKey';\nimport { normalizeAddress } from '../normalizeAddress';\n\ntype CreateWalletAccountIdParams = {\n  address: string;\n  chain: Chain;\n  walletProviderKey: string;\n};\n\n/** @not-instrumented */\nexport const formatWalletAccountId = ({\n  address,\n  chain,\n  walletProviderKey,\n}: CreateWalletAccountIdParams): string => {\n  const { normalizedWalletNameWithChain } =\n    splitWalletProviderKey(walletProviderKey);\n\n  const normalizedAddress = normalizeAddress({ address, chain });\n\n  return `${normalizedWalletNameWithChain}:${normalizedAddress}`;\n};\n","import type { UnverifiedWalletAccount } from '../../unverifiedWalletAccounts';\nimport type { WalletAccount } from '../../walletAccount';\nimport { formatWalletAccountId } from '../formatWalletAccountId';\n\ntype ConvertUnverifiedWalletAccountToWalletAccountParams = {\n  unverifiedWalletAccount: UnverifiedWalletAccount;\n};\n\n/** @not-instrumented */\nexport const convertUnverifiedWalletAccountToWalletAccount = ({\n  unverifiedWalletAccount,\n}: ConvertUnverifiedWalletAccountToWalletAccountParams): WalletAccount => ({\n  address: unverifiedWalletAccount.address,\n  addressesWithTypes: unverifiedWalletAccount.addressesWithTypes,\n  chain: unverifiedWalletAccount.chain,\n  id: formatWalletAccountId({\n    address: unverifiedWalletAccount.address,\n    chain: unverifiedWalletAccount.chain,\n    walletProviderKey: unverifiedWalletAccount.walletProviderKey,\n  }),\n  lastSelectedAt: unverifiedWalletAccount.lastSelectedAt,\n  verifiedCredentialId: null,\n  walletProviderKey: unverifiedWalletAccount.walletProviderKey,\n});\n","import type { Chain } from '../../../chain';\n\ntype NormalizeWalletNameWithChainParams = {\n  chain: Chain;\n  displayName: string;\n};\n\n/**\n * Format the raw wallet name and chain to get the value we can use for\n * verified credentials' `walletName` field.\n  * @not-instrumented\n */\nexport const normalizeWalletNameWithChain = ({\n  displayName,\n  chain,\n}: NormalizeWalletNameWithChainParams): string => {\n  const sanitizedWalletName = displayName\n    .replace(/[^a-zA-Z0-9]/g, '')\n    .toLowerCase();\n\n  const chainLowered = chain.toLocaleLowerCase();\n\n  if (sanitizedWalletName.endsWith(chainLowered)) {\n    return sanitizedWalletName;\n  }\n\n  return `${sanitizedWalletName}${chainLowered}`;\n};\n","import type { WalletProviderEnum } from '@dynamic-labs/sdk-api-core';\n\nimport type { Chain } from '../../../chain';\nimport { normalizeWalletNameWithChain } from '../normalizeWalletNameWithChain';\n\ntype FormatWalletProviderKeyParams = {\n  chain: Chain;\n  displayName: string;\n  suffix?: string;\n  walletProviderType: WalletProviderEnum;\n};\n\n/**\n * Assembles the wallet provider key from the wallet name, chain, and wallet provider type.\n *\n * The suffix is optional and can be used to add a uniquely identifying string to the key, which\n * might be necessary for some wallet providers (like Wallet Connect).\n *\n * IMPORTANT: Do NOT add a suffix unless absolutely necessary, as it will cause the wallet account\n * to not be able to find its wallet provider when connecting to a new device (it won't be possible\n * to determine the full key just from the Verified Credential data).\n  * @not-instrumented\n */\nexport const formatWalletProviderKey = ({\n  suffix,\n  chain,\n  displayName,\n  walletProviderType,\n}: FormatWalletProviderKeyParams) => {\n  const normalizedNameWithChain = normalizeWalletNameWithChain({\n    chain,\n    displayName,\n  });\n\n  return `${normalizedNameWithChain}:${walletProviderType}${\n    suffix ? `:${suffix}` : ''\n  }`;\n};\n","import type { JwtVerifiedCredential } from '@dynamic-labs/sdk-api-core';\n\nimport { getCore } from '../../../../../client/core/getCore';\nimport type { DynamicClient } from '../../../../../client/types';\nimport { assertDefined } from '../../../../../utils/assertDefined';\nimport { getChainFromVerifiedCredentialChain } from '../../../../../utils/getChainFromVerifiedCredentialChain';\nimport { formatWalletProviderKey } from '../../../utils/formatWalletProviderKey';\n\ntype GetWalletProviderKeyFromVerifiedCredentialParams = {\n  verifiedCredential: JwtVerifiedCredential;\n};\n\n/** @not-instrumented */\nexport const getWalletProviderKeyFromVerifiedCredential = (\n  { verifiedCredential }: GetWalletProviderKeyFromVerifiedCredentialParams,\n  client: DynamicClient\n) => {\n  const core = getCore(client);\n\n  const { walletProviderKeyMap } = core.state.get();\n\n  const storedWalletProviderKey = walletProviderKeyMap[verifiedCredential.id];\n\n  if (storedWalletProviderKey) {\n    return { walletProviderKey: storedWalletProviderKey };\n  }\n\n  /**\n   * We fallback to comprising the wallet provider key from walletName and walletProvider.\n   *\n   * Some wallet provider types (like Wallet Connect) also use a special suffix for their wallet provider\n   * keys, so this won't be enough for them.\n   * Therefore, for those specific wallet providers, the wallet account will remain without a wallet provider\n   * and will require reconnection.\n   * Read walletProvider.types.ts for more info.\n   */\n  assertDefined(\n    verifiedCredential.walletName,\n    `Failed to get wallet provider for verified credential with ID ${verifiedCredential.id}: missing walletName`\n  );\n\n  assertDefined(\n    verifiedCredential.walletProvider,\n    `Failed to get wallet provider for verified credential with ID ${verifiedCredential.id}: missing walletProvider`\n  );\n\n  assertDefined(\n    verifiedCredential.chain,\n    `Failed to get wallet provider for verified credential with ID ${verifiedCredential.id}: missing chain`\n  );\n\n  /**\n   * Historically, walletNames did not include the chain name as a suffix.\n   * This piece of logic simply ensures we normalize any legacy walletNames to conform.\n   */\n  const chain = getChainFromVerifiedCredentialChain(verifiedCredential.chain);\n\n  const walletProviderKey = formatWalletProviderKey({\n    chain,\n    displayName: verifiedCredential.walletName,\n    walletProviderType: verifiedCredential.walletProvider,\n  });\n\n  return { walletProviderKey };\n};\n","import type { JwtVerifiedCredential } from '@dynamic-labs/sdk-api-core';\n\nimport type { DynamicClient } from '../../../../client/types';\nimport { assertDefined } from '../../../../utils/assertDefined';\nimport { getChainFromVerifiedCredentialChain } from '../../../../utils/getChainFromVerifiedCredentialChain';\nimport type { HardwareWalletVendor } from '../../hardwareWallet/hardwareWallet.types';\nimport type { WalletAccount } from '../../walletAccount';\nimport { getWalletProviderKeyFromVerifiedCredential } from '../../walletProvider/walletProviderKeyMap/getWalletProviderKeyFromVerifiedCredential';\nimport { formatWalletAccountId } from '../formatWalletAccountId';\n\ntype ConvertVerifiedCredentialToWalletAccountParams = {\n  verifiedCredential: JwtVerifiedCredential;\n};\n\n/** @not-instrumented */\nexport const convertVerifiedCredentialToWalletAccount = (\n  { verifiedCredential }: ConvertVerifiedCredentialToWalletAccountParams,\n  client: DynamicClient\n): WalletAccount => {\n  assertDefined(\n    verifiedCredential.address,\n    'Missing address in verified credential'\n  );\n  assertDefined(\n    verifiedCredential.chain,\n    'Missing chain in verified credential'\n  );\n\n  const chain = getChainFromVerifiedCredentialChain(verifiedCredential.chain);\n\n  const { walletProviderKey } = getWalletProviderKeyFromVerifiedCredential(\n    {\n      verifiedCredential,\n    },\n    client\n  );\n\n  const walletAccountId = formatWalletAccountId({\n    address: verifiedCredential.address,\n    chain,\n    walletProviderKey,\n  });\n\n  return {\n    address: verifiedCredential.address,\n    addressesWithTypes: verifiedCredential.walletAdditionalAddresses,\n    chain,\n    hardwareWalletVendor: verifiedCredential.walletProperties?.hardwareWallet as\n      | HardwareWalletVendor\n      | undefined,\n    id: walletAccountId,\n    lastSelectedAt: verifiedCredential.lastSelectedAt ?? null,\n    verifiedCredentialId: verifiedCredential.id,\n    walletProviderKey,\n  };\n};\n","import type { SdkUser } from '@dynamic-labs/sdk-api-core';\nimport { JwtVerifiedCredentialFormatEnum } from '@dynamic-labs/sdk-api-core';\n\nimport type { DynamicClient } from '../../../../client/types';\nimport type { UnverifiedWalletAccount } from '../../unverifiedWalletAccounts';\nimport { convertUnverifiedWalletAccountToWalletAccount } from '../../utils/convertUnverifiedWalletAccountToWalletAccount';\nimport { convertVerifiedCredentialToWalletAccount } from '../../utils/convertVerifiedCredentialToWalletAccount';\nimport type { WalletAccount } from '../../walletAccount';\n\ntype GetWalletAccountsFromStateParams = {\n  unverifiedWalletAccounts: UnverifiedWalletAccount[];\n  user: SdkUser | null;\n};\n\n/** @not-instrumented */\nexport const getWalletAccountsFromState = (\n  { unverifiedWalletAccounts, user }: GetWalletAccountsFromStateParams,\n  client: DynamicClient\n): WalletAccount[] => {\n  const walletAccountsMap: Map<string, WalletAccount> = new Map();\n\n  /**\n   * Handle the unverified wallet accounts before the user verified credentials\n   * so the later verified wallet accounts can override the unverified wallet accounts\n   */\n  unverifiedWalletAccounts.forEach((unverifiedWalletAccount) => {\n    const walletAccount = convertUnverifiedWalletAccountToWalletAccount({\n      unverifiedWalletAccount,\n    });\n\n    walletAccountsMap.set(walletAccount.id, walletAccount);\n  });\n\n  /**\n   * Handle user verified credentials\n   */\n  const verifiedCredentials = user?.verifiedCredentials ?? [];\n\n  verifiedCredentials\n    .filter(\n      (verified) =>\n        verified.format === JwtVerifiedCredentialFormatEnum.Blockchain\n    )\n    .forEach((verifiedWalletAccount) => {\n      const walletAccount = convertVerifiedCredentialToWalletAccount(\n        {\n          verifiedCredential: verifiedWalletAccount,\n        },\n        client\n      );\n\n      walletAccountsMap.set(walletAccount.id, walletAccount);\n    });\n\n  return Array.from(walletAccountsMap.values());\n};\n","import { getCore } from '../../../client/core/getCore';\nimport { getDefaultClient } from '../../../client/defaultClient';\nimport type { WalletAccount } from '../walletAccount';\nimport { getWalletAccountsFromState } from './getWalletAccountsFromState';\n\n/**\n * Retrieves all wallet accounts associated with the current session.\n *\n * This function returns both verified and unverified wallet accounts,\n * combining data from user credentials and local unverified accounts.\n * You can differentiate between verified and unverified wallet accounts by\n * checking the `verifiedCredentialId` property.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns An array of wallet accounts associated with the session.\n  * @not-instrumented\n * @hook Exposed as a hook so consumers get the reactive list of wallet accounts.\n */\nexport const getWalletAccounts = (\n  client = getDefaultClient()\n): WalletAccount[] => {\n  const core = getCore(client);\n  const { unverifiedWalletAccounts, user } = core.state.get();\n\n  return getWalletAccountsFromState({ unverifiedWalletAccounts, user }, client);\n};\n","export const DYNAMIC_AUTH_COOKIE_NAME = 'DYNAMIC_JWT_TOKEN';\n","import type { DynamicClient } from '../../../client/types';\nimport { emitEvent } from '../../clientEvents';\nimport { getWalletAccounts } from '../getWalletAccounts';\n\n/**\n * Emits the `walletAccountsChanged` event.\n  * @not-instrumented\n */\nexport const emitWalletAccountsChangedEvent = (client: DynamicClient): void => {\n  const walletAccounts = getWalletAccounts(client);\n\n  emitEvent(\n    {\n      args: { walletAccounts },\n      event: 'walletAccountsChanged',\n    },\n    client\n  );\n};\n","import { getCore } from '../../../../client/core/getCore';\nimport type { DynamicClient } from '../../../../client/types';\nimport { emitWalletAccountsChangedEvent } from '../../../wallets/emitWalletAccountsChangedEvent';\nimport { getWalletAccountsFromState } from '../../../wallets/getWalletAccounts/getWalletAccountsFromState';\n\ntype CheckAndRaiseWalletAccountsChangedEventParams = {\n  previousState: Readonly<DynamicCoreState>;\n};\n\n/** @not-instrumented */\nexport const checkAndRaiseWalletAccountsChangedEvent = (\n  { previousState }: CheckAndRaiseWalletAccountsChangedEventParams,\n  client: DynamicClient\n) => {\n  const core = getCore(client);\n\n  const walletAccountsHashBefore = getWalletAccountsHash(previousState, client);\n\n  const walletAccountsHashAfter = getWalletAccountsHash(\n    core.state.get(),\n    client\n  );\n\n  if (walletAccountsHashBefore !== walletAccountsHashAfter) {\n    emitWalletAccountsChangedEvent(client);\n  }\n};\n\n \n \nconst getWalletAccountsHash = (\n  state: Readonly<DynamicCoreState>,\n  client: DynamicClient\n) =>\n  getWalletAccountsFromState(state, client)\n    .map((walletAccount) => JSON.stringify(walletAccount))\n    .sort()\n    .join('-');\n","import { getDefaultClient } from '../../../client/defaultClient';\nimport { assertDefined } from '../../../utils/assertDefined';\n\n/**\n * Checks if the user requires additional MFA authentication.\n *\n * This function determines if the current user session requires\n * additional multi-factor authentication to access certain features.\n *\n * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.\n * @returns True if the user needs additional MFA authentication, false otherwise.\n  * @not-instrumented\n */\nexport const isUserMissingMfaAuth = (client = getDefaultClient()) => {\n  const user = client.user;\n\n  assertDefined(user, 'User not logged in');\n\n  return Boolean(user.scope?.includes('requiresAdditionalAuth'));\n};\n","import type { DynamicClient } from '../../../client/types';\nimport { getWalletProviderRegistry } from '../walletProviderRegistry';\n\n/**\n * Get all available wallet providers to interact with internally.\n  * @not-instrumented\n */\nexport const getWalletProviders = (client: DynamicClient) => {\n  const walletProviderRegistry = getWalletProviderRegistry(client);\n\n  return walletProviderRegistry.listProviders();\n};\n","import { WalletProviderEnum } from '@dynamic-labs/sdk-api-core';\n\nimport type { DynamicClient } from '../../../client/types/DynamicClient';\nimport type { Chain } from '../../chain';\nimport { getWalletProviders } from '../../wallets/getWalletProviders';\nimport { formatWalletProviderKey } from '../../wallets/utils/formatWalletProviderKey';\nimport { DYNAMIC_WAAS_METADATA } from '../constants';\nimport { isWaasWalletProvider } from '../isWaasWalletProvider';\nimport type { WaasWalletProvider } from '../waas.types';\n\ntype FindWaasWalletProviderByChainParams = {\n  chain: Chain;\n};\n\n/** @not-instrumented */\nexport const findWaasWalletProviderByChain = (\n  { chain }: FindWaasWalletProviderByChainParams,\n  client: DynamicClient\n): WaasWalletProvider | null => {\n  const providers = getWalletProviders(client);\n\n  const waasProviderKey = formatWalletProviderKey({\n    chain,\n    displayName: DYNAMIC_WAAS_METADATA.displayName,\n    walletProviderType: WalletProviderEnum.EmbeddedWallet,\n  });\n\n  const waasProvider = providers.find(\n    (provider) => provider.key === waasProviderKey && provider.chain === chain\n  );\n\n  if (!waasProvider || !isWaasWalletProvider(waasProvider)) {\n    return null;\n  }\n\n  return waasProvider;\n};\n","import type { WalletAccount } from '../../wallets/walletAccount';\nimport { DYNAMIC_WAAS_METADATA } from '../constants';\n\ntype IsWaasWalletAccountParams = {\n  walletAccount: WalletAccount;\n};\n\n/**\n * This function determines whether the provided wallet account is a Dynamic\n * WaaS wallet account.\n *\n * @param params.walletAccount - The wallet account to check.\n * @returns True if the wallet account is a WaaS wallet account, false otherwise.\n  * @not-instrumented\n */\nexport const isWaasWalletAccount = ({\n  walletAccount,\n}: IsWaasWalletAccountParams): boolean => {\n  return walletAccount.walletProviderKey.includes(\n    DYNAMIC_WAAS_METADATA.normalizedWalletName\n  );\n};\n","import { getCore } from '../../../client/core/getCore';\nimport type { DynamicClient } from '../../../client/types';\nimport { isUserMissingMfaAuth } from '../../mfa/isUserMissingMfaAuth';\nimport { getWalletAccounts } from '../../wallets/getWalletAccounts';\nimport { findWaasWalletProviderByChain } from '../findWaasWalletProviderByChain';\nimport { isWaasWalletAccount } from '../isWaasWalletAccount';\n\n/**\n * On login, boots the WaaS client once per chain so the SDK eagerly recovers\n * key shares itself (the `eagerlyRecoverKeyShares` capability) instead of the\n * host looping per wallet. Booting calls `initialize()`, which sends the auth\n * token the iframe needs to self-recover.\n *\n * @not-instrumented\n */\nexport const initializeWaasClientsForEagerRecovery = async (\n  client: DynamicClient\n): Promise<void> => {\n  /**\n   * Booting triggers recovery, which fails if the user is missing the MFA auth.\n   * This early return avoids attempting a call we know will fail and just adds\n   * noise to the logs.\n   */\n  if (isUserMissingMfaAuth(client)) {\n    return;\n  }\n\n  const waasChains = new Set(\n    getWalletAccounts(client)\n      .filter((walletAccount) => isWaasWalletAccount({ walletAccount }))\n      .map((walletAccount) => walletAccount.chain)\n  );\n\n  await Promise.all(\n    [...waasChains].map(async (chain) => {\n      const provider = findWaasWalletProviderByChain({ chain }, client);\n\n      /**\n       * The environment might not have the embedded wallet extensions installed.\n       * In that case there is no provider for the chain and nothing to boot.\n       */\n      if (!provider) return;\n\n      try {\n        await provider.getWaasClient();\n      } catch (error) {\n        getCore(client).logger.warn(\n          '[initializeWaasClientsForEagerRecovery] failed to boot waas client',\n          error\n        );\n      }\n    })\n  );\n};\n","import { InvalidParamError } from '../../../errors/InvalidParamError';\n\nexport type JwtPayload = {\n  [key: string]: unknown;\n  exp: number;\n  iat: number;\n  scope: string;\n  singleUse?: boolean;\n  sub: string;\n};\n\n/**\n * Decodes a JWT token and returns the full payload.\n *\n * This function extracts and returns the complete JWT payload including scopes,\n * expiration time, and other claims.\n *\n * @param jwt - The JWT token string.\n * @returns The decoded JWT payload object.\n * @throws InvalidParamError if the token is invalid or cannot be decoded.\n *\n * @example\n * ```typescript\n * const payload = decodeJwt(jwt);\n * // Returns: { scopes: ['wallet:export'], exp: 1234567890, ... }\n * ```\n  * @not-instrumented\n */\n// eslint-disable-next-line custom-rules/require-single-object-param\nexport const decodeJwt = (jwt: string): JwtPayload => {\n  try {\n    // JWT format: header.payload.signature\n    const parts = jwt.split('.');\n    if (parts.length !== 3) {\n      throw new InvalidParamError('Invalid JWT format');\n    }\n\n    // Decode the payload (second part)\n    // Base64URL decode: replace URL-safe characters and decode\n    const base64Payload = parts[1].replaceAll('-', '+').replaceAll('_', '/');\n    // Add padding if needed\n    const paddedPayload =\n      base64Payload + '='.repeat((4 - (base64Payload.length % 4)) % 4);\n    const decodedPayload = atob(paddedPayload);\n    const claims = JSON.parse(decodedPayload) as JwtPayload;\n\n    return claims;\n  } catch (error) {\n    if (error instanceof InvalidParamError) {\n      throw error;\n    }\n    throw new InvalidParamError(\n      `Failed to decode JWT: ${\n        error instanceof Error ? error.message : String(error)\n      }`\n    );\n  }\n};\n","/**\n * Normalizes scopes by deduplicating and sorting them.\n * This creates a canonical representation for comparison.\n *\n * @param scopes - Array of scope strings (may contain duplicates)\n * @returns Normalized, sorted array of unique scopes\n  * @not-instrumented\n */\n// eslint-disable-next-line custom-rules/require-single-object-param\nexport const normalizeScopes = (scopes: string[]): string[] => {\n  return [...new Set(scopes)].sort((a, b) => a.localeCompare(b));\n};\n","import { decodeJwt } from '../../../decodeJwt';\nimport type { ParsedElevatedAccessToken } from '../elevatedAccessTokens.types';\nimport { normalizeScopes } from '../normalizeScopes';\n\nexport type ParseElevatedAccessTokenOptions = {\n  /** JWT string containing the elevated access token. */\n  token: string;\n};\n\n/**\n * Validates and parses an elevated access token from a JWT string.\n * Extracts scopes, expiration, and validates the token structure.\n *\n * Policy decisions:\n * - Tokens without scopes are rejected (returns null)\n * - Tokens with empty scopes array are rejected (returns null)\n * - Tokens without exp field are rejected (returns null)\n * - Expired tokens are rejected (returns null)\n *\n * @returns Parsed token data or null if token is invalid/expired\n * @not-instrumented\n */\nexport const parseElevatedAccessToken = ({\n  token,\n}: ParseElevatedAccessTokenOptions): ParsedElevatedAccessToken | null => {\n  const payload = decodeJwt(token);\n  const rawScopeClaim = payload?.scope;\n  const processedScopes = rawScopeClaim?.split(' ') ?? [];\n  const filteredScopes = processedScopes.filter((s) => s.length > 0);\n  const singleUse = payload.singleUse ?? false;\n\n  // Reject tokens without scopes or with empty scopes\n  if (!filteredScopes || filteredScopes.length === 0) {\n    return null;\n  }\n\n  // Reject tokens without exp field\n  if (!payload.exp) {\n    return null;\n  }\n\n  // Convert exp (seconds) to Date (milliseconds)\n  const expiresAt = new Date(payload.exp * 1000);\n\n  // Reject expired tokens\n  if (expiresAt <= new Date()) {\n    return null;\n  }\n\n  return {\n    expiresAt,\n    normalizedScopes: normalizeScopes(filteredScopes),\n    scopes: filteredScopes,\n    singleUse,\n    token,\n  };\n};\n","import type {\n  ElevatedAccessToken,\n  ParsedElevatedAccessToken,\n} from '../elevatedAccessTokens.types';\nimport { normalizeScopes } from '../normalizeScopes';\n\n/**\n * Upserts an elevated access token into the current tokens array.\n *\n * Policy: Only one token per normalized scope-set is allowed.\n * If a token with the same normalized scopes exists, it is replaced.\n * This ensures we don't accumulate multiple tokens for the same scope combination.\n *\n * @param currentTokens - Current array of elevated access tokens\n * @param newToken - New token to upsert\n * @returns Updated array of tokens with the new token upserted\n  * @not-instrumented\n */\nexport const upsertElevatedAccessToken = ({\n  currentTokens,\n  newToken,\n}: {\n  currentTokens: ElevatedAccessToken[];\n  newToken: ParsedElevatedAccessToken;\n}): ElevatedAccessToken[] => {\n  const newScopeKey = normalizeScopes(newToken.scopes).join(' ');\n\n  // Remove any existing token with the same normalized scopes\n  const filteredTokens = currentTokens.filter((existingToken) => {\n    const existingScopeKey = normalizeScopes(existingToken.scopes).join(' ');\n    return existingScopeKey !== newScopeKey;\n  });\n\n  // Add the new token\n  return [\n    ...filteredTokens,\n    {\n      expiresAt: newToken.expiresAt,\n      scopes: newToken.scopes,\n      singleUse: newToken.singleUse,\n      token: newToken.token,\n    },\n  ];\n};\n","import type { VerifyResponse } from '@dynamic-labs/sdk-api-core';\n\nimport { getCore } from '../../../client/core/getCore';\nimport type { DynamicCoreState } from '../../../client/core/types';\nimport type { DynamicClient } from '../../../client/types';\nimport { setCookie } from '../../../utils/setCookie';\nimport { isCookieEnabled } from '../../projectSettings/isCookieEnabled';\nimport { initializeWaasClientsForEagerRecovery } from '../../waas/initializeWaasClientsForEagerRecovery';\nimport { DYNAMIC_AUTH_COOKIE_NAME } from '../consts';\nimport { checkAndRaiseWalletAccountsChangedEvent } from './checkAndRaiseWalletAccountsChangedEvent';\nimport { parseElevatedAccessToken } from './elevatedAccessTokens/parseElevatedAccessToken';\nimport { upsertElevatedAccessToken } from './elevatedAccessTokens/upsertElevatedAccessToken';\n\ntype UpdateAuthFromVerifyResponseParams = {\n  response: VerifyResponse;\n};\n\n/** @not-instrumented */\nexport const updateAuthFromVerifyResponse = (\n  { response }: UpdateAuthFromVerifyResponseParams,\n  client: DynamicClient\n) => {\n  const core = getCore(client);\n\n  const previousState = { ...core.state.get() };\n\n  const { user, minifiedJwt, jwt, expiresAt, mfaToken, elevatedAccessToken } =\n    response;\n\n  // Expires at is in seconds, so we need to convert it to milliseconds\n  const sessionExpiresAt = new Date(expiresAt * 1000);\n\n  const newState: Partial<DynamicCoreState> = {\n    legacyToken: jwt ?? null,\n    sessionExpiresAt: sessionExpiresAt,\n    token: minifiedJwt ?? null,\n    user,\n  };\n\n  // only override the mfaToken if a new one is provided in the response\n  if (mfaToken) {\n    newState.mfaToken = mfaToken;\n  }\n\n  // Add elevated access token to the array if a new one is provided in the response\n  // Policy: Only one token per normalized scope-set is allowed (old tokens are replaced)\n  // Always preserve existing tokens to ensure they're synced to storage\n  const currentTokens = core.state.get().elevatedAccessTokens || [];\n  newState.elevatedAccessTokens = currentTokens;\n  \n  if (elevatedAccessToken) {\n    const parsedToken = parseElevatedAccessToken({\n      token: elevatedAccessToken,\n    });\n    if (parsedToken) {\n      newState.elevatedAccessTokens = upsertElevatedAccessToken({\n        currentTokens,\n        newToken: parsedToken,\n      });\n    }\n  }\n\n  core.state.set(newState);\n\n  /**\n   * For customers using a sandbox environment with cookies enabled, we need to set the cookie\n   * programmatically because Redcoast won't set the cookie via headers. We set the cookie programmatically\n   * so customers can access the cookie from document.cookie consistently between sandbox and live environments.\n   */\n  if (minifiedJwt && isCookieEnabled(client)) {\n    const expireDate = sessionExpiresAt.toUTCString();\n\n    setCookie(\n      `${DYNAMIC_AUTH_COOKIE_NAME}=${minifiedJwt}; expires=${expireDate}; path=/; SameSite=Lax`\n    );\n  }\n\n  checkAndRaiseWalletAccountsChangedEvent({ previousState }, client);\n\n  // if the user is logging in, boot the waas client(s) so the SDK eagerly\n  // recovers key shares for all wallet accounts\n  const isUserLoggingIn = !previousState.user && Boolean(newState.user);\n  if (isUserLoggingIn) {\n    void initializeWaasClientsForEagerRecovery(client);\n  }\n};\n","import type { DynamicClient } from '../../../../client/types/DynamicClient';\nimport type { WalletAccount } from '../../walletAccount';\n\ntype GetVerifiedCredentialForWalletAccountParams = {\n  walletAccount: WalletAccount;\n};\n\n/** @not-instrumented */\nexport const getVerifiedCredentialForWalletAccount = (\n  { walletAccount }: GetVerifiedCredentialForWalletAccountParams,\n  client: DynamicClient\n) => {\n  return client.user?.verifiedCredentials.find(\n    (vc) => vc.id === walletAccount.verifiedCredentialId\n  );\n};\n","import type { DynamicClient } from '../../../client/types';\nimport { NoWalletProviderFoundError } from '../../../errors/NoWalletProviderFoundError';\nimport { getWalletProviders } from '../getWalletProviders';\n\ntype GetWalletProviderByKeyParams = {\n  walletProviderKey: string;\n};\n\n/** @not-instrumented */\nexport const getWalletProviderByKey = (\n  { walletProviderKey }: GetWalletProviderByKeyParams,\n  client: DynamicClient\n) => {\n  const walletProviders = getWalletProviders(client);\n\n  const walletProvider = walletProviders.find(\n    (walletProvider) => walletProvider.key === walletProviderKey\n  );\n\n  if (!walletProvider) {\n    throw new NoWalletProviderFoundError({ walletProviderKey });\n  }\n\n  return walletProvider;\n};\n"],"mappings":";;;;;;;;AAKA,MAAa,aAAa,WAAmB;AAE3C,UAAS,SAAS;;;;;ACLpB,IAAa,gCAAb,cAAmD,UAAU;CAE3D,YAAY,OAAe;AACzB,QAAM;GACJ,OAAO;GACP,MAAM;GACN,SAAS;GACT,MAAM;GACN,cAAc,gCAAgC,MAAM;GACrD,CAAC;;;;;;;ACCN,MAAa,0BACX,sBACiC;CACjC,MAAM,CAAC,+BAA+B,oBAAoB,QAAQ,GAAG,QACnE,kBAAkB,MAAM,IAAI;AAE9B,KACE,CAAC,iCACD,CAAC,OAAO,OAAO,mBAAmB,CAAC,SACjC,mBACD,IACD,KAAK,SAAS,EAEd,OAAM,IAAI,8BAA8B,kBAAkB;AAG5D,QAAO;EACL;EACA;EACoB;EACrB;;;;;;ACrBH,MAAa,oBAAoB,EAAE,SAAS,YAAqC;CAC/E,IAAI,oBAAoB;AAExB,KAAI,mBAAmB,WAAW,KAAK,CACrC,qBAAoB,kBAAkB,MAAM,EAAE;AAUhD,qBAFmD,CAAC,OAAO,OAAO,CAEZ,SAAS,MAAM,GACjE,mBAAmB,aAAa,GAChC;AAEJ,QAAO;;;;;;AClBT,MAAa,yBAAyB,EACpC,SACA,OACA,wBACyC;CACzC,MAAM,EAAE,kCACN,uBAAuB,kBAAkB;AAI3C,QAAO,GAAG,8BAA8B,GAFd,iBAAiB;EAAE;EAAS;EAAO,CAAC;;;;;;ACVhE,MAAa,iDAAiD,EAC5D,+BACyE;CACzE,SAAS,wBAAwB;CACjC,oBAAoB,wBAAwB;CAC5C,OAAO,wBAAwB;CAC/B,IAAI,sBAAsB;EACxB,SAAS,wBAAwB;EACjC,OAAO,wBAAwB;EAC/B,mBAAmB,wBAAwB;EAC5C,CAAC;CACF,gBAAgB,wBAAwB;CACxC,sBAAsB;CACtB,mBAAmB,wBAAwB;CAC5C;;;;;;;;;ACXD,MAAa,gCAAgC,EAC3C,aACA,YACgD;CAChD,MAAM,sBAAsB,YACzB,QAAQ,iBAAiB,GAAG,CAC5B,aAAa;CAEhB,MAAM,eAAe,MAAM,mBAAmB;AAE9C,KAAI,oBAAoB,SAAS,aAAa,CAC5C,QAAO;AAGT,QAAO,GAAG,sBAAsB;;;;;;;;;;;;;;;;ACHlC,MAAa,2BAA2B,EACtC,QACA,OACA,aACA,yBACmC;AAMnC,QAAO,GALyB,6BAA6B;EAC3D;EACA;EACD,CAAC,CAEgC,GAAG,qBACnC,SAAS,IAAI,WAAW;;;;;;ACtB5B,MAAa,8CACX,EAAE,sBACF,WACG;CAGH,MAAM,EAAE,yBAFK,QAAQ,OAAO,CAEU,MAAM,KAAK;CAEjD,MAAM,0BAA0B,qBAAqB,mBAAmB;AAExE,KAAI,wBACF,QAAO,EAAE,mBAAmB,yBAAyB;;;;;;;;;;AAYvD,eACE,mBAAmB,YACnB,iEAAiE,mBAAmB,GAAG,sBACxF;AAED,eACE,mBAAmB,gBACnB,iEAAiE,mBAAmB,GAAG,0BACxF;AAED,eACE,mBAAmB,OACnB,iEAAiE,mBAAmB,GAAG,iBACxF;AAcD,QAAO,EAAE,mBANiB,wBAAwB;EAChD,OAHY,oCAAoC,mBAAmB,MAAM;EAIzE,aAAa,mBAAmB;EAChC,oBAAoB,mBAAmB;EACxC,CAAC,EAE0B;;;;;;AChD9B,MAAa,4CACX,EAAE,sBACF,WACkB;AAClB,eACE,mBAAmB,SACnB,yCACD;AACD,eACE,mBAAmB,OACnB,uCACD;CAED,MAAM,QAAQ,oCAAoC,mBAAmB,MAAM;CAE3E,MAAM,EAAE,sBAAsB,2CAC5B,EACE,oBACD,EACD,OACD;CAED,MAAM,kBAAkB,sBAAsB;EAC5C,SAAS,mBAAmB;EAC5B;EACA;EACD,CAAC;AAEF,QAAO;EACL,SAAS,mBAAmB;EAC5B,oBAAoB,mBAAmB;EACvC;EACA,sBAAsB,mBAAmB,kBAAkB;EAG3D,IAAI;EACJ,gBAAgB,mBAAmB,kBAAkB;EACrD,sBAAsB,mBAAmB;EACzC;EACD;;;;;;ACvCH,MAAa,8BACX,EAAE,0BAA0B,QAC5B,WACoB;CACpB,MAAMA,oCAAgD,IAAI,KAAK;;;;;AAM/D,0BAAyB,SAAS,4BAA4B;EAC5D,MAAM,gBAAgB,8CAA8C,EAClE,yBACD,CAAC;AAEF,oBAAkB,IAAI,cAAc,IAAI,cAAc;GACtD;AAOF,EAF4B,MAAM,uBAAuB,EAAE,EAGxD,QACE,aACC,SAAS,WAAW,gCAAgC,WACvD,CACA,SAAS,0BAA0B;EAClC,MAAM,gBAAgB,yCACpB,EACE,oBAAoB,uBACrB,EACD,OACD;AAED,oBAAkB,IAAI,cAAc,IAAI,cAAc;GACtD;AAEJ,QAAO,MAAM,KAAK,kBAAkB,QAAQ,CAAC;;;;;;;;;;;;;;;;;;ACpC/C,MAAa,qBACX,SAAS,kBAAkB,KACP;CAEpB,MAAM,EAAE,0BAA0B,SADrB,QAAQ,OAAO,CACoB,MAAM,KAAK;AAE3D,QAAO,2BAA2B;EAAE;EAA0B;EAAM,EAAE,OAAO;;;;;ACxB/E,MAAa,2BAA2B;;;;;;;;ACQxC,MAAa,kCAAkC,WAAgC;AAG7E,WACE;EACE,MAAM,EAAE,gBAJW,kBAAkB,OAAO,EAIpB;EACxB,OAAO;EACR,EACD,OACD;;;;;;ACPH,MAAa,2CACX,EAAE,iBACF,WACG;CACH,MAAM,OAAO,QAAQ,OAAO;AAS5B,KAPiC,sBAAsB,eAAe,OAAO,KAE7C,sBAC9B,KAAK,MAAM,KAAK,EAChB,OACD,CAGC,gCAA+B,OAAO;;AAM1C,MAAM,yBACJ,OACA,WAEA,2BAA2B,OAAO,OAAO,CACtC,KAAK,kBAAkB,KAAK,UAAU,cAAc,CAAC,CACrD,MAAM,CACN,KAAK,IAAI;;;;;;;;;;;;;;ACxBd,MAAa,wBAAwB,SAAS,kBAAkB,KAAK;CACnE,MAAM,OAAO,OAAO;AAEpB,eAAc,MAAM,qBAAqB;AAEzC,QAAO,QAAQ,KAAK,OAAO,SAAS,yBAAyB,CAAC;;;;;;;;;ACXhE,MAAa,sBAAsB,WAA0B;AAG3D,QAF+B,0BAA0B,OAAO,CAElC,eAAe;;;;;;ACK/C,MAAa,iCACX,EAAE,SACF,WAC8B;CAC9B,MAAM,YAAY,mBAAmB,OAAO;CAE5C,MAAM,kBAAkB,wBAAwB;EAC9C;EACA,aAAa,sBAAsB;EACnC,oBAAoB,mBAAmB;EACxC,CAAC;CAEF,MAAM,eAAe,UAAU,MAC5B,aAAa,SAAS,QAAQ,mBAAmB,SAAS,UAAU,MACtE;AAED,KAAI,CAAC,gBAAgB,CAAC,qBAAqB,aAAa,CACtD,QAAO;AAGT,QAAO;;;;;;;;;;;;;ACpBT,MAAa,uBAAuB,EAClC,oBACwC;AACxC,QAAO,cAAc,kBAAkB,SACrC,sBAAsB,qBACvB;;;;;;;;;;;;;ACLH,MAAa,wCAAwC,OACnD,WACkB;;;;;;AAMlB,KAAI,qBAAqB,OAAO,CAC9B;CAGF,MAAM,aAAa,IAAI,IACrB,kBAAkB,OAAO,CACtB,QAAQ,kBAAkB,oBAAoB,EAAE,eAAe,CAAC,CAAC,CACjE,KAAK,kBAAkB,cAAc,MAAM,CAC/C;AAED,OAAM,QAAQ,IACZ,CAAC,GAAG,WAAW,CAAC,IAAI,OAAO,UAAU;EACnC,MAAM,WAAW,8BAA8B,EAAE,OAAO,EAAE,OAAO;;;;;AAMjE,MAAI,CAAC,SAAU;AAEf,MAAI;AACF,SAAM,SAAS,eAAe;WACvB,OAAO;AACd,WAAQ,OAAO,CAAC,OAAO,KACrB,sEACA,MACD;;GAEH,CACH;;;;;;;;;;;;;;;;;;;;;;ACvBH,MAAa,aAAa,QAA4B;AACpD,KAAI;EAEF,MAAM,QAAQ,IAAI,MAAM,IAAI;AAC5B,MAAI,MAAM,WAAW,EACnB,OAAM,IAAI,kBAAkB,qBAAqB;EAKnD,MAAM,gBAAgB,MAAM,GAAG,WAAW,KAAK,IAAI,CAAC,WAAW,KAAK,IAAI;EAExE,MAAM,gBACJ,gBAAgB,IAAI,QAAQ,IAAK,cAAc,SAAS,KAAM,EAAE;EAClE,MAAM,iBAAiB,KAAK,cAAc;AAG1C,SAFe,KAAK,MAAM,eAAe;UAGlC,OAAO;AACd,MAAI,iBAAiB,kBACnB,OAAM;AAER,QAAM,IAAI,kBACR,yBACE,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,GAEzD;;;;;;;;;;;;;;AC9CL,MAAa,mBAAmB,WAA+B;AAC7D,QAAO,CAAC,GAAG,IAAI,IAAI,OAAO,CAAC,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,EAAE,CAAC;;;;;;;;;;;;;;;;;;ACYhE,MAAa,4BAA4B,EACvC,YACuE;CACvE,MAAM,UAAU,UAAU,MAAM;CAGhC,MAAM,mBAFgB,SAAS,QACQ,MAAM,IAAI,IAAI,EAAE,EAChB,QAAQ,MAAM,EAAE,SAAS,EAAE;CAClE,MAAM,YAAY,QAAQ,aAAa;AAGvC,KAAI,CAAC,kBAAkB,eAAe,WAAW,EAC/C,QAAO;AAIT,KAAI,CAAC,QAAQ,IACX,QAAO;CAIT,MAAM,4BAAY,IAAI,KAAK,QAAQ,MAAM,IAAK;AAG9C,KAAI,6BAAa,IAAI,MAAM,CACzB,QAAO;AAGT,QAAO;EACL;EACA,kBAAkB,gBAAgB,eAAe;EACjD,QAAQ;EACR;EACA;EACD;;;;;;;;;;;;;;;;;ACrCH,MAAa,6BAA6B,EACxC,eACA,eAI2B;CAC3B,MAAM,cAAc,gBAAgB,SAAS,OAAO,CAAC,KAAK,IAAI;AAS9D,QAAO,CACL,GAPqB,cAAc,QAAQ,kBAAkB;AAE7D,SADyB,gBAAgB,cAAc,OAAO,CAAC,KAAK,IAAI,KAC5C;GAC5B,EAKA;EACE,WAAW,SAAS;EACpB,QAAQ,SAAS;EACjB,WAAW,SAAS;EACpB,OAAO,SAAS;EACjB,CACF;;;;;;ACxBH,MAAa,gCACX,EAAE,YACF,WACG;CACH,MAAM,OAAO,QAAQ,OAAO;CAE5B,MAAM,gBAAgB,EAAE,GAAG,KAAK,MAAM,KAAK,EAAE;CAE7C,MAAM,EAAE,MAAM,aAAa,KAAK,WAAW,UAAU,wBACnD;CAGF,MAAM,mCAAmB,IAAI,KAAK,YAAY,IAAK;CAEnD,MAAMC,WAAsC;EAC1C,aAAa,OAAO;EACF;EAClB,OAAO,eAAe;EACtB;EACD;AAGD,KAAI,SACF,UAAS,WAAW;CAMtB,MAAM,gBAAgB,KAAK,MAAM,KAAK,CAAC,wBAAwB,EAAE;AACjE,UAAS,uBAAuB;AAEhC,KAAI,qBAAqB;EACvB,MAAM,cAAc,yBAAyB,EAC3C,OAAO,qBACR,CAAC;AACF,MAAI,YACF,UAAS,uBAAuB,0BAA0B;GACxD;GACA,UAAU;GACX,CAAC;;AAIN,MAAK,MAAM,IAAI,SAAS;;;;;;AAOxB,KAAI,eAAe,gBAAgB,OAAO,CAGxC,WACE,GAAG,yBAAyB,GAAG,YAAY,YAH1B,iBAAiB,aAAa,CAGmB,wBACnE;AAGH,yCAAwC,EAAE,eAAe,EAAE,OAAO;AAKlE,KADwB,CAAC,cAAc,QAAQ,QAAQ,SAAS,KAAK,CAEnE,CAAK,sCAAsC,OAAO;;;;;;AC3EtD,MAAa,yCACX,EAAE,iBACF,WACG;AACH,QAAO,OAAO,MAAM,oBAAoB,MACrC,OAAO,GAAG,OAAO,cAAc,qBACjC;;;;;;ACLH,MAAa,0BACX,EAAE,qBACF,WACG;CAGH,MAAM,iBAFkB,mBAAmB,OAAO,CAEX,MACpC,qBAAmBC,iBAAe,QAAQ,kBAC5C;AAED,KAAI,CAAC,eACH,OAAM,IAAI,2BAA2B,EAAE,mBAAmB,CAAC;AAG7D,QAAO"}

package/dist/index.cjs

@@ -1,10 +1,10 @@
-const require_isMfaRequiredForAction = require('./isMfaRequiredForAction-DSo1ysdD.cjs');
-const require_InvalidParamError = require('./InvalidParamError-Bgg4SDfm.cjs');
-const require_getNetworkProviderFromNetworkId = require('./getNetworkProviderFromNetworkId-Afx6InoJ.cjs');
-const require_getWalletProviderByKey = require('./getWalletProviderByKey-DRex9vzR.cjs');
-const require_refreshAuth = require('./refreshAuth-Ca_JABru.cjs');
-const require_isDynamicWaasEnabled = require('./isDynamicWaasEnabled-CEVTY3gQ.cjs');
-const require_preconnectWaasIframe = require('./preconnectWaasIframe-Cb9xM6kI.cjs');
+const require_isMfaRequiredForAction = require('./isMfaRequiredForAction-DL013-fR.cjs');
+const require_InvalidParamError = require('./InvalidParamError-d0WFn5Ai.cjs');
+const require_getNetworkProviderFromNetworkId = require('./getNetworkProviderFromNetworkId-CfW0tOnr.cjs');
+const require_getWalletProviderByKey = require('./getWalletProviderByKey-B821GpaI.cjs');
+const require_refreshAuth = require('./refreshAuth-tjEnkc58.cjs');
+const require_isDynamicWaasEnabled = require('./isDynamicWaasEnabled-CBOG0ITH.cjs');
+const require_preconnectWaasIframe = require('./preconnectWaasIframe-DWYWeLor.cjs');
 let _dynamic_labs_sdk_assert_package_version = require("@dynamic-labs-sdk/assert-package-version");
 let _dynamic_labs_sdk_api_core = require("@dynamic-labs/sdk-api-core");
 let zod_mini = require("zod/mini");
@@ -519,7 +519,7 @@ const initializeClient = async (client = require_InvalidParamError.getDefaultCli
 		});
 		throw error;
 	}
-	if (client.user) require_getWalletProviderByKey.restoreUserSharesForAllWalletAccounts(client);
+	if (client.user) require_getWalletProviderByKey.initializeWaasClientsForEagerRecovery(client);
 };
 const __initializeClient_impl = initializeClient;
 const __initializeClient_wrapped = require_InvalidParamError.instrumentFunction({
@@ -2063,6 +2063,7 @@ const __signInWithSocialRedirect_wrapped = require_InvalidParamError.instrumentF
 * removed in a future major version.
 *
 * @instrumented
+* @noHook Deprecated alias that is not exposed as a React hook.
 */
 const authenticateWithSocial = (params, client = require_InvalidParamError.getDefaultClient()) => __signInWithSocialRedirect_wrapped(params, client);
 const __authenticateWithSocial_impl = authenticateWithSocial;
@@ -2220,6 +2221,7 @@ const __completeSocialAuthentication_wrapped = require_InvalidParamError.instrum
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns A promise that resolves to true if the URL is an OAuth redirect, false otherwise.
 * @not-instrumented
+* @noHook Low-level redirect-detection primitive that is not exposed as a React hook.
 */
 const detectSocialRedirectUrl = async ({ url }, client = require_InvalidParamError.getDefaultClient()) => {
 	const core = require_InvalidParamError.getCore(client);
@@ -2508,6 +2510,7 @@ const withCheckoutSessionTokenCleanupOn401 = async ({ call, transactionId }, cli
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns The updated checkout transaction (with exchangeSource if sourceType is 'exchange')
 * @instrumented
+* @noHook Legacy checkout function not exposed as a React hook; the checkout product is being renamed to flow.
 */
 const attachCheckoutTransactionSource = async (params, client = require_InvalidParamError.getDefaultClient()) => {
 	const { transactionId, sourceType = "wallet" } = params;
@@ -2557,6 +2560,7 @@ const __attachCheckoutTransactionSource_wrapped = require_InvalidParamError.inst
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns The updated checkout transaction
 * @instrumented
+* @noHook Legacy checkout function not exposed as a React hook; the checkout product is being renamed to flow.
 */
 const broadcastCheckoutTransaction = async ({ transactionId, txHash }, client = require_InvalidParamError.getDefaultClient()) => {
 	const { apiClient, environmentId, sessionToken } = await createCheckoutApiClient({ transactionId }, client);
@@ -2594,6 +2598,7 @@ const __broadcastCheckoutTransaction_wrapped = require_InvalidParamError.instrum
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns The cancelled checkout transaction
 * @instrumented
+* @noHook Legacy checkout function not exposed as a React hook; the checkout product is being renamed to flow.
 */
 const cancelCheckoutTransaction = async ({ transactionId }, client = require_InvalidParamError.getDefaultClient()) => {
 	const { apiClient, environmentId, sessionToken } = await createCheckoutApiClient({ transactionId }, client);
@@ -2641,6 +2646,7 @@ const getCheckouts = async (client) => {
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns The created transaction with session token
 * @instrumented
+* @noHook Legacy checkout function not exposed as a React hook; the checkout product is being renamed to flow.
 */
 const createCheckoutTransaction = async (params, client = require_InvalidParamError.getDefaultClient()) => {
 	const core = require_InvalidParamError.getCore(client);
@@ -2689,6 +2695,7 @@ const __createCheckoutTransaction_wrapped = require_InvalidParamError.instrument
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns The checkout transaction
 * @not-instrumented
+* @noHook Legacy checkout function not exposed as a React hook; the checkout product is being renamed to flow.
 */
 const getCheckoutTransaction = async ({ transactionId }, client = require_InvalidParamError.getDefaultClient()) => {
 	const core = require_InvalidParamError.getCore(client);
@@ -2709,6 +2716,7 @@ const getCheckoutTransaction = async ({ transactionId }, client = require_Invali
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns The updated checkout transaction with quote data
 * @not-instrumented
+* @noHook Legacy checkout function not exposed as a React hook; the checkout product is being renamed to flow.
 */
 const getCheckoutTransactionQuote = async ({ fromChainId, fromTokenAddress, slippage, transactionId }, client = require_InvalidParamError.getDefaultClient()) => {
 	const { apiClient, environmentId, sessionToken } = await createCheckoutApiClient({ transactionId }, client);
@@ -2740,6 +2748,7 @@ const getCheckoutTransactionQuote = async ({ fromChainId, fromTokenAddress, slip
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns The updated checkout transaction
 * @instrumented
+* @noHook Legacy checkout function not exposed as a React hook; the checkout product is being renamed to flow.
 */
 const prepareCheckoutTransaction = async ({ assertBalanceForGasCost, assertBalanceForTransferAmount, transactionId }, client = require_InvalidParamError.getDefaultClient()) => {
 	const { apiClient, environmentId, sessionToken } = await createCheckoutApiClient({ transactionId }, client);
@@ -2889,6 +2898,7 @@ const __executeSwapTransaction_wrapped = require_InvalidParamError.instrumentFun
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns The broadcasted checkout transaction
 * @instrumented
+* @noHook Legacy checkout function not exposed as a React hook; the checkout product is being renamed to flow.
 */
 const submitCheckoutTransaction = async ({ onStepChange, transactionId, walletAccount, assertBalanceForGasCost, assertBalanceForTransferAmount }, client = require_InvalidParamError.getDefaultClient()) => {
 	const signingPayload = (await __prepareCheckoutTransaction_wrapped({
@@ -2941,6 +2951,7 @@ const __submitCheckoutTransaction_wrapped = require_InvalidParamError.instrument
 * @param params.transactionId - The ID of the checkout transaction to track.
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @not-instrumented
+* @noHook Legacy checkout function not exposed as a React hook; the checkout product is being renamed to flow.
 */
 const trackCheckoutTransaction = (_params, client = require_InvalidParamError.getDefaultClient()) => {
 	return Promise.resolve();
@@ -2963,6 +2974,7 @@ const trackCheckoutTransaction = (_params, client = require_InvalidParamError.ge
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns Whether a token conversion is required
 * @not-instrumented
+* @noHook Legacy checkout function not exposed as a React hook; the checkout product is being renamed to flow.
 */
 const requiresConversion = async ({ transaction }, client = require_InvalidParamError.getDefaultClient()) => {
 	if (!transaction.fromChainId || !transaction.fromChainName || !transaction.fromToken) throw new require_InvalidParamError.InvalidParamError("Transaction is missing source information. Make sure that attachCheckoutTransactionSource has been called before calling this function.");
@@ -7704,6 +7716,7 @@ const __connectAndVerifyWithWalletProvider_wrapped = require_InvalidParamError.i
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns An array of wallet provider data including chain, keys, and metadata.
 * @not-instrumented
+* @hook Exposed as a hook so consumers get the reactive list of available wallet providers, updated when wallet providers change.
 */
 const getAvailableWalletProvidersData = (client = require_InvalidParamError.getDefaultClient()) => {
 	return require_getWalletProviderByKey.getWalletProviders(client).filter((walletProvider) => hasWalletProviderConnectMethod({ walletProvider })).map((walletProvider) => ({