@dynamic-labs-sdk/client 1.17.0 → 1.18.0

package/dist/index.esm.js

@@ -1,13 +1,13 @@
-import { $ as MfaRateLimitedError, A as NoWalletProviderFoundError, B as emitEvent, C as getOperatingSystem, D as WalletProviderPriority, E as getWalletProviderFromWalletAccount, F as CHAINS_INFO_MAP, G as fetchAndStoreNonces, H as onEvent, I as formatWalletAccountId, K as createApiClient, L as normalizeAddress, O as getWalletProviderRegistry, P as getChainFromVerifiedCredentialChain, Q as SandboxMaximumThresholdReachedError, R as splitWalletProviderKey, S as getPlatform, U as onceEvent, V as offEvent, Z as getNonce, _ as SDK_API_CORE_VERSION, _t as getCore, a as initializeWaasClientsForEagerRecovery, at as isCookieEnabled, b as DEFAULT_PII_FIELDS, ct as getElevatedAccessToken, et as MfaInvalidOtpError, f as getWalletProviders, ft as NONCE_POOL_SIZE, g as DYNAMIC_ICONIC_SPRITE_URL, gt as BaseError, i as InvalidParamError, j as getWalletAccounts, lt as randomString, m as checkAndRaiseWalletAccountsChangedEvent, mt as setDefaultClient, n as upsertElevatedAccessToken, nt as InvalidExternalAuthError, ot as assertDefined, p as isUserMissingMfaAuth, pt as getDefaultClient, q as UnauthorizedError, r as parseElevatedAccessToken, rt as APIError, st as ValueMustBeDefinedError, t as updateAuthFromVerifyResponse, tt as LinkCredentialError, v as instrumentFunction, vt as name, w as extractSessionId, x as getUserAgent, y as scrubParameters, yt as version } from "./updateAuthFromVerifyResponse-BdokPJ21.esm.js";
-import { A as GENERATE_SESSION_KEYS_TRACKER_KEY, B as isEqualShallow, C as createKeychainService, D as CannotTrackError, F as getBuffer, I as createStorage, M as REFRESH_USER_STATE_FROM_COOKIE_TRACKER_KEY, N as REFRESH_USER_STATE_FROM_VALID_TOKEN_TRACKER_KEY, O as createDeferredPromise, P as isServerSideRendering, R as createLocalStorageAdapter, S as createRealtimeService, T as createCrossTabBroadcast, _ as consumeCaptchaToken, a as verifyMessageSignatureOwnership, b as NoNetworkProvidersError, c as formatSignInMessage, d as updateWalletProviderKeysForVerifiedCredentials, f as setUnverifiedWalletAccounts, g as MethodNotImplementedError, h as __setCaptchaToken_wrapped, i as getNetworksData, j as INITIALIZE_STORAGE_SYNC_TRACKER_KEY, k as FETCH_PROJECT_SETTINGS_TRACKER_KEY, l as getAppMetadata, m as hasExtension, o as removeUnverifiedWalletAccount, p as createVisit, s as createSignInMessageStatement, t as getNetworkProviderFromNetworkId, u as reconcileWalletAccountsAgainstClient, v as isCaptchaRequired, w as createLogger, x as getKeychainIndexedDBName, y as WalletAlreadyLinkedToAnotherUserError, z as subscribeWithSelector } from "./getNetworkProviderFromNetworkId-BVVs3arj.esm.js";
-import { a as generateSessionKeys, c as isSignedIn, i as __logoutWithReason_wrapped, l as retryOnFail, n as getMfaMethods, o as fetchProjectSettings, r as __consumeMfaToken_wrapped, s as createStorageKeySchema, t as isMfaRequiredForAction } from "./isMfaRequiredForAction-B7wNkqQf.esm.js";
-import { n as NotWaasWalletAccountError, r as __refreshAuth_wrapped } from "./isDynamicWaasEnabled-DYy0TvLy.esm.js";
-import { a as WaasOnboardingIncompleteError, i as preconnectWaasIframe, n as isPendingRecoveryCodesAcknowledgment, r as isDeviceRegistrationRequired, t as isUserOnboardingComplete } from "./isUserOnboardingComplete-CGz-9Iyw.esm.js";
-import { n as getVerifiedCredentialForWalletAccount, t as getWalletProviderByKey } from "./getWalletProviderByKey-BL3u0e-d.esm.js";
+import { $ as SandboxMaximumThresholdReachedError, A as NoWalletProviderFoundError, B as emitEvent, C as getOperatingSystem, D as WalletProviderPriority, E as getWalletProviderFromWalletAccount, F as CHAINS_INFO_MAP, H as onEvent, I as formatWalletAccountId, J as UnauthorizedError, K as fetchAndStoreNonces, L as normalizeAddress, O as getWalletProviderRegistry, P as getChainFromVerifiedCredentialChain, Q as getNonce, R as splitWalletProviderKey, S as getPlatform, U as onceEvent, V as offEvent, _ as SDK_API_CORE_VERSION, _t as BaseError, a as initializeWaasClientsForEagerRecovery, b as DEFAULT_PII_FIELDS, bt as version, ct as ValueMustBeDefinedError, et as MfaRateLimitedError, f as getWalletProviders, g as DYNAMIC_ICONIC_SPRITE_URL, ht as setDefaultClient, i as InvalidParamError, it as APIError, j as getWalletAccounts, lt as getElevatedAccessToken, m as checkAndRaiseWalletAccountsChangedEvent, mt as getDefaultClient, n as upsertElevatedAccessToken, nt as LinkCredentialError, ot as isCookieEnabled, p as isUserMissingMfaAuth, pt as NONCE_POOL_SIZE, q as createApiClient, r as parseElevatedAccessToken, rt as InvalidExternalAuthError, st as assertDefined, t as updateAuthFromVerifyResponse, tt as MfaInvalidOtpError, ut as randomString, v as instrumentFunction, vt as getCore, w as extractSessionId, x as getUserAgent, y as scrubParameters, yt as name } from "./updateAuthFromVerifyResponse-BQes11vz.esm.js";
+import { A as CannotTrackError, C as createRealtimeService, D as createLogger, F as REFRESH_USER_STATE_FROM_COOKIE_TRACKER_KEY, H as subscribeWithSelector, I as REFRESH_USER_STATE_FROM_VALID_TOKEN_TRACKER_KEY, L as isServerSideRendering, M as FETCH_PROJECT_SETTINGS_TRACKER_KEY, N as GENERATE_SESSION_KEYS_TRACKER_KEY, O as createCrossTabBroadcast, P as INITIALIZE_STORAGE_SYNC_TRACKER_KEY, R as getBuffer, S as getKeychainIndexedDBName, T as assertSafeNavigationUrl, U as isEqualShallow, V as createLocalStorageAdapter, _ as consumeCaptchaToken, a as verifyMessageSignatureOwnership, b as WalletAlreadyLinkedToAnotherUserError, c as formatSignInMessage, d as updateWalletProviderKeysForVerifiedCredentials, f as setUnverifiedWalletAccounts, g as MethodNotImplementedError, h as __setCaptchaToken_wrapped, i as getNetworksData, j as createDeferredPromise, l as getAppMetadata, m as hasExtension, o as removeUnverifiedWalletAccount, p as createVisit, s as createSignInMessageStatement, t as getNetworkProviderFromNetworkId, u as reconcileWalletAccountsAgainstClient, v as isCaptchaRequired, w as createKeychainService, x as NoNetworkProvidersError, y as WalletScreeningBlockedError, z as createStorage } from "./getNetworkProviderFromNetworkId-CEs4SGW4.esm.js";
+import { a as generateSessionKeys, c as isSignedIn, i as __logoutWithReason_wrapped, l as retryOnFail, n as getMfaMethods, o as fetchProjectSettings, r as __consumeMfaToken_wrapped, s as createStorageKeySchema, t as isMfaRequiredForAction } from "./isMfaRequiredForAction-r9aDdmK5.esm.js";
+import { n as NotWaasWalletAccountError, r as __refreshAuth_wrapped } from "./isDynamicWaasEnabled-BlVIlXMZ.esm.js";
+import { a as WaasOnboardingIncompleteError, i as preconnectWaasIframe, n as isPendingRecoveryCodesAcknowledgment, r as isDeviceRegistrationRequired, t as isUserOnboardingComplete } from "./isUserOnboardingComplete-BMNAbXk1.esm.js";
+import { n as getVerifiedCredentialForWalletAccount, t as getWalletProviderByKey } from "./getWalletProviderByKey-CKORCA8l.esm.js";
 import { assertPackageVersion } from "@dynamic-labs-sdk/assert-package-version";
-import { AuthModeEnum, ExchangeKeyEnum, JwtVerifiedCredentialFormatEnum, MFAAction, MfaBackupCodeAcknowledgement, ProviderEnum, TokenScope, WaasBackupOptionsEnum, WalletProviderEnum } from "@dynamic-labs/sdk-api-core";
+import { AuthModeEnum, CaptchaProviderEnum, CaptchaProviderEnum as CaptchaProviderEnum$1, ExchangeKeyEnum, JwtVerifiedCredentialFormatEnum, JwtVerifiedCredentialFormatEnum as JwtVerifiedCredentialFormatEnum$1, MFAAction, MfaBackupCodeAcknowledgement, ProviderEnum, ProviderEnum as ProviderEnum$1, TokenScope, TokenScope as TokenScope$1, WaasBackupOptionsEnum, WalletProviderEnum } from "@dynamic-labs/sdk-api-core";
 import * as z from "zod/mini";
-import EventEmitter, { EventEmitter as EventEmitter$1 } from "eventemitter3";
+import EventEmitter$1, { EventEmitter } from "eventemitter3";
 import { browserSupportsWebAuthn, startAuthentication, startRegistration } from "@simplewebauthn/browser";
 
 //#region src/modules/state/raiseStateEvents/events.ts
@@ -545,7 +545,7 @@ const createAsyncTrack = () => {
 	* This ensures no process is missed (as it would throw when tracked on a different node tick).
 	*/
 	let isTrackEnabled = true;
-	const eventEmitter = new EventEmitter$1();
+	const eventEmitter = new EventEmitter();
 	const allSettledPromise = createDeferredPromise();
 	const tracker = /* @__PURE__ */ new Map();
 	/**
@@ -592,7 +592,7 @@ const createAsyncTrack = () => {
 //#endregion
 //#region src/services/eventEmitter/createEventEmitter.ts
 /** @notInstrumented */
-const createEventEmitter = () => new EventEmitter();
+const createEventEmitter = () => new EventEmitter$1();
 
 //#endregion
 //#region src/errors/UnavailableInServerSideError.ts
@@ -749,10 +749,67 @@ const createDynamicTransport = (params) => {
 const createNavigationHandler = () => {
 	if (isServerSideRendering()) return () => Promise.reject(new UnavailableInServerSideError("createNavigationHandler"));
 	return async (url) => {
+		assertSafeNavigationUrl(url);
 		window.location.href = url;
 	};
 };
 
+//#endregion
+//#region src/errors/UnsafeDeeplinkUrlError.ts
+/**
+* Thrown when a deeplink is opened with a URL whose scheme can execute script
+* in the current origin (`javascript:`, `data:`, `vbscript:`). Unlike
+* navigation, deeplinks legitimately use custom app schemes (e.g. `phantom:`,
+* `metamask:`), so this guards via a denylist of dangerous schemes rather than
+* an `http(s)` allowlist, preventing DOM XSS through the `window.location.assign`
+* sink while leaving valid wallet deeplinks untouched.
+*/
+var UnsafeDeeplinkUrlError = class extends BaseError {
+	constructor({ scheme }) {
+		super({
+			cause: null,
+			code: "unsafe_deeplink_url_error",
+			docsUrl: null,
+			name: "UnsafeDeeplinkUrlError",
+			shortMessage: `Refusing to open a deeplink with an unsafe scheme "${scheme}". Script-executing schemes (javascript:, data:, vbscript:) are not allowed. This may indicate a compromised or misconfigured deeplink URL.`
+		});
+	}
+};
+
+//#endregion
+//#region src/utils/assertSafeDeeplinkUrl/assertSafeDeeplinkUrl.ts
+/**
+* Schemes that can execute script in the current origin and must never reach a
+* deeplink navigation sink. Deeplinks legitimately use arbitrary custom app
+* schemes (e.g. `phantom:`, `metamask:`), so a denylist of dangerous schemes is
+* used here instead of the `http(s)` allowlist applied to standard navigation.
+*/
+const DANGEROUS_DEEPLINK_SCHEMES = new Set([
+	"javascript:",
+	"data:",
+	"vbscript:",
+	"blob:"
+]);
+/**
+* Asserts that the given deeplink URL is safe to open, i.e. its scheme is not
+* one that can execute script (`javascript:`, `data:`, `vbscript:`, `blob:`). Used as a
+* defense-in-depth guard on the `window.location.assign` deeplink sink to
+* prevent DOM XSS, while still permitting custom wallet app schemes.
+*
+* @param url - The deeplink URL string to validate.
+* @throws {UnsafeDeeplinkUrlError} If the URL cannot be parsed or its scheme can execute script.
+* @notInstrumented
+*/
+const assertSafeDeeplinkUrl = (url) => {
+	let parsed;
+	try {
+		parsed = new URL(url);
+	} catch {
+		throw new UnsafeDeeplinkUrlError({ scheme: "unknown" });
+	}
+	if (DANGEROUS_DEEPLINK_SCHEMES.has(parsed.protocol)) throw new UnsafeDeeplinkUrlError({ scheme: parsed.protocol });
+};
+
 //#endregion
 //#region src/services/openDeeplink/createWebDeeplinkOpener/createWebDeeplinkOpener.ts
 /**
@@ -772,6 +829,7 @@ const createNavigationHandler = () => {
 const createWebDeeplinkOpener = () => {
 	if (isServerSideRendering()) return () => Promise.reject(new UnavailableInServerSideError("createWebDeeplinkOpener"));
 	return async (url) => {
+		assertSafeDeeplinkUrl(url);
 		window.location.assign(url);
 	};
 };
@@ -1128,6 +1186,21 @@ var DeeplinkConnectAndVerifyUnsupportedError = class extends BaseError {
 	}
 };
 
+//#endregion
+//#region src/errors/DeviceRegistrationIdentityMismatchError.ts
+var DeviceRegistrationIdentityMismatchError = class extends BaseError {
+	constructor() {
+		super({
+			cause: null,
+			code: "device_registration_identity_mismatch_error",
+			docsUrl: null,
+			metaMessages: ["The device registration token resolved to a different user than the one currently authenticated.", "This can indicate a login-CSRF / session-fixation attempt, so the returned session was rejected and the current session was left untouched."],
+			name: "DeviceRegistrationIdentityMismatchError",
+			shortMessage: "Device registration completion was rejected because it would have replaced the current session with a different identity."
+		});
+	}
+};
+
 //#endregion
 //#region src/errors/FeeEstimationFailedError.ts
 var FeeEstimationFailedError = class extends BaseError {
@@ -1575,7 +1648,6 @@ const __checkStepUpAuth_wrapped = instrumentFunction({
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns A promise that resolves to the assertion response containing the elevated access token.
 * @instrumented
-* @redact-params
 */
 const requestExternalAuthElevatedToken = async ({ externalJwt }, client = getDefaultClient()) => {
 	const core = getCore(client);
@@ -1603,8 +1675,7 @@ const __requestExternalAuthElevatedToken_wrapped = instrumentFunction({
 		} catch {
 			return;
 		}
-	},
-	redactAll: true
+	}
 });
 
 //#endregion
@@ -1619,7 +1690,6 @@ const __requestExternalAuthElevatedToken_wrapped = instrumentFunction({
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns A promise that resolves to the authentication response from the server.
 * @instrumented
-* @redact-params
 */
 const signInWithExternalJwt = async ({ externalJwt, sessionPublicKey } = {}, client = getDefaultClient()) => {
 	const core = getCore(client);
@@ -1643,8 +1713,7 @@ const __signInWithExternalJwt_wrapped = instrumentFunction({
 		} catch {
 			return;
 		}
-	},
-	redactAll: true
+	}
 });
 
 //#endregion
@@ -1679,7 +1748,7 @@ const logout = async (client = getDefaultClient()) => {
 const deletePasskey = async ({ passkeyId }, client = getDefaultClient()) => {
 	const core = getCore(client);
 	await createApiClient({
-		elevatedAccessTokenScope: TokenScope.Credentialunlink,
+		elevatedAccessTokenScope: TokenScope$1.Credentialunlink,
 		includeMfaToken: true
 	}, client).deletePasskey({
 		deleteUserPasskeyRequest: { passkeyId },
@@ -1729,7 +1798,7 @@ const getPasskeyRegistrationOptions = async (client) => {
 /** @notInstrumented */
 const serverRegisterPasskey = async ({ registration, createMfaToken }, client) => {
 	const core = getCore(client);
-	return await createApiClient({ elevatedAccessTokenScope: TokenScope.Credentiallink }, client).registerPasskey({
+	return await createApiClient({ elevatedAccessTokenScope: TokenScope$1.Credentiallink }, client).registerPasskey({
 		environmentId: core.environmentId,
 		passkeyRegisterRequest: {
 			...registration,
@@ -1756,7 +1825,6 @@ const serverRegisterPasskey = async ({ registration, createMfaToken }, client) =
 * @returns A promise that resolves to the registration response.
 * @throws NoWebAuthNSupportError If WebAuthn is not supported by the browser.
 * @instrumented
-* @redact-params
 */
 const registerPasskey = async ({ createMfaToken } = {}, client = getDefaultClient()) => {
 	const core = getCore(client);
@@ -1779,8 +1847,7 @@ const __registerPasskey_wrapped = instrumentFunction({
 		} catch {
 			return;
 		}
-	},
-	redactAll: true
+	}
 });
 
 //#endregion
@@ -1825,7 +1892,6 @@ const serverSigninPasskey = async ({ authentication, createMfaToken }, client) =
 * @returns A promise that resolves to the authentication response.
 * @throws NoWebAuthNSupportError If WebAuthn is not supported by the browser.
 * @instrumented
-* @redact-params
 */
 const signInWithPasskey = async ({ relatedOriginRpId } = {}, client = getDefaultClient()) => {
 	const core = getCore(client);
@@ -1845,8 +1911,7 @@ const __signInWithPasskey_wrapped = instrumentFunction({
 		} catch {
 			return;
 		}
-	},
-	redactAll: true
+	}
 });
 
 //#endregion
@@ -1862,7 +1927,7 @@ const __signInWithPasskey_wrapped = instrumentFunction({
 const getUserSocialAccounts = (client = getDefaultClient()) => {
 	const { user } = client;
 	assertDefined(user, "User is not authenticated");
-	return (user.verifiedCredentials.filter((credential) => credential.format === JwtVerifiedCredentialFormatEnum.Oauth) ?? []).map((credential) => ({
+	return (user.verifiedCredentials.filter((credential) => credential.format === JwtVerifiedCredentialFormatEnum$1.Oauth) ?? []).map((credential) => ({
 		accountId: credential.oauthAccountId ?? void 0,
 		displayName: credential.oauthDisplayName ?? void 0,
 		emails: credential.oauthEmails ?? [],
@@ -1890,7 +1955,7 @@ const redirectStateStorageKeySchema = createStorageKeySchema({
 	key: "redirectState",
 	schema: z.object({
 		codeVerifier: z.optional(z.string()),
-		provider: z.enum(ProviderEnum),
+		provider: z.enum(ProviderEnum$1),
 		state: z.string()
 	})
 });
@@ -1932,15 +1997,15 @@ const addOAuthUrlParams = ({ baseUrl, isGoogleDriveBackupEnabled, provider }) =>
 	baseUrl.searchParams.set("client_id", provider.clientId);
 	baseUrl.searchParams.set("response_type", "code");
 	baseUrl.searchParams.set("redirect_uri", provider.redirectUrl);
-	if (providerType === ProviderEnum.Tiktok) {
+	if (providerType === ProviderEnum$1.Tiktok) {
 		baseUrl.searchParams.delete("client_id");
 		baseUrl.searchParams.set("client_key", provider.clientId);
 	}
-	if (providerType === ProviderEnum.Google) {
+	if (providerType === ProviderEnum$1.Google) {
 		baseUrl.searchParams.set("access_type", "offline");
 		if (isGoogleDriveBackupEnabled) baseUrl.searchParams.set("prompt", "consent");
 	}
-	if (providerType === ProviderEnum.Apple) {
+	if (providerType === ProviderEnum$1.Apple) {
 		baseUrl.searchParams.set("response_mode", APPLE_RESPONSE_MODE);
 		baseUrl.searchParams.set("response_type", APPLE_RESPONSE_TYPE);
 	}
@@ -1950,22 +2015,29 @@ const addOAuthUrlParams = ({ baseUrl, isGoogleDriveBackupEnabled, provider }) =>
 
 //#endregion
 //#region src/modules/auth/social/oauth/signInWithSocialRedirect/buildOAuthUrl/getOAuthBaseUrl/getOAuthBaseUrl.ts
-/** Helper function to build the OAuth base URL for a given provider.  * @notInstrumented
+/**
+* Resolves the raw base URL string for a provider before parsing/validation.
 */
-const getOAuthBaseUrl = (provider) => {
+const resolveBaseUrl = (provider) => {
 	assertDefined(provider.provider, "Provider type not found");
 	const providerType = provider.provider;
-	if (providerType === ProviderEnum.Telegram) {
+	if (providerType === ProviderEnum$1.Telegram) {
 		assertDefined(provider.authorizationUrl, "Telegram authorization URL not found");
-		return new URL(provider.authorizationUrl);
+		return provider.authorizationUrl;
 	}
 	assertDefined(provider.baseAuthUrl, "Base auth URL not found");
-	if (providerType === ProviderEnum.Shopify) {
+	if (providerType === ProviderEnum$1.Shopify) {
 		assertDefined(provider.shopifyStore, "Shopify store value not found in provider");
-		const loginBaseUrl = provider.baseAuthUrl.replace("{{shopifyStore}}", provider.shopifyStore);
-		return new URL(loginBaseUrl);
+		return provider.baseAuthUrl.replace("{{shopifyStore}}", provider.shopifyStore);
 	}
-	return new URL(provider.baseAuthUrl);
+	return provider.baseAuthUrl;
+};
+/** Helper function to build the OAuth base URL for a given provider.  * @notInstrumented
+*/
+const getOAuthBaseUrl = (provider) => {
+	const urlString = resolveBaseUrl(provider);
+	assertSafeNavigationUrl(urlString);
+	return new URL(urlString);
 };
 
 //#endregion
@@ -2099,7 +2171,7 @@ const __authenticateWithSocial_wrapped = instrumentFunction({
 */
 const processSocialCallback = async ({ url, requestedScopes }, client) => {
 	const core = getCore(client);
-	const apiClient = createApiClient(client.user ? { elevatedAccessTokenScope: TokenScope.Credentiallink } : {}, client);
+	const apiClient = createApiClient(client.user ? { elevatedAccessTokenScope: TokenScope$1.Credentiallink } : {}, client);
 	await core.initTrack.waitForAll();
 	const dynamicOauthState = url.searchParams.get("dynamicOauthState");
 	const dynamicOauthCode = url.searchParams.get("dynamicOauthCode");
@@ -2300,11 +2372,10 @@ const getPrimaryWalletAccount = (client = getDefaultClient()) => {
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns A promise that resolves to the verify response.
 * @instrumented
-* @redact-params
 */
 const unlinkSocialAccount = async ({ verifiedCredentialId }, client = getDefaultClient()) => {
 	const core = getCore(client);
-	const apiClient = createApiClient({ elevatedAccessTokenScope: TokenScope.Credentialunlink }, client);
+	const apiClient = createApiClient({ elevatedAccessTokenScope: TokenScope$1.Credentialunlink }, client);
 	const primaryWalletAccount = getPrimaryWalletAccount(client);
 	const walletId = primaryWalletAccount?.verifiedCredentialId?.replace("-zerodev", "") ?? void 0;
 	const isEmbeddedWallet = !!primaryWalletAccount && getVerifiedCredentialForWalletAccount({ walletAccount: primaryWalletAccount }, client)?.walletProvider === WalletProviderEnum.EmbeddedWallet;
@@ -2328,8 +2399,7 @@ const __unlinkSocialAccount_wrapped = instrumentFunction({
 		} catch {
 			return;
 		}
-	},
-	redactAll: true
+	}
 });
 
 //#endregion
@@ -2421,6 +2491,32 @@ const getMultichainTokenBalances = async ({ balanceRequest }, client = getDefaul
 */
 const getMultichainBalances = (params, client = getDefaultClient()) => getMultichainTokenBalances(params, client);
 
+//#endregion
+//#region src/modules/captcha/getCaptchaSettings/getCaptchaSettings.ts
+/**
+* Returns the active captcha provider and site key, or undefined if captcha is not enabled.
+* Use this to determine which captcha widget to render and which site key to pass it.
+*
+* @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
+* @notInstrumented
+*/
+const getCaptchaSettings = (client = getDefaultClient()) => {
+	const projectSettings = client.projectSettings;
+	if (!projectSettings) return void 0;
+	const { security } = projectSettings;
+	if (security.captcha) {
+		if (security.captcha.enabled) return {
+			provider: security.captcha.provider ?? CaptchaProviderEnum$1.Hcaptcha,
+			siteKey: security.captcha.siteKey
+		};
+		return;
+	}
+	if (security.hCaptcha?.enabled) return {
+		provider: CaptchaProviderEnum$1.Hcaptcha,
+		siteKey: security.hCaptcha.siteKey
+	};
+};
+
 //#endregion
 //#region src/modules/checkout/utils/createCheckoutSessionTokenStorageKey/createCheckoutSessionTokenStorageKey.ts
 /** @notInstrumented */
@@ -2987,7 +3083,9 @@ const DEVICE_REGISTRATION_TOKEN_HEADER = "x-dynamic-device-registration-token";
 const completeDeviceRegistration = async ({ deviceToken }, client = getDefaultClient()) => {
 	assertDefined(deviceToken, "deviceToken is required");
 	const core = getCore(client);
+	const currentUser = core.state.get().user;
 	const response = await createApiClient({ headers: { [DEVICE_REGISTRATION_TOKEN_HEADER]: deviceToken } }, client).deviceRegistration({ environmentId: core.environmentId });
+	if (currentUser && response.user?.id !== currentUser.id) throw new DeviceRegistrationIdentityMismatchError();
 	updateAuthFromVerifyResponse({ response }, client);
 	emitEvent({ event: "deviceRegistrationCompleted" }, client);
 	return response;
@@ -3168,6 +3266,22 @@ const withFlowSessionTokenCleanupOn401 = async ({ call, flowId }, client) => {
 	}
 };
 
+//#endregion
+//#region src/modules/flow/attachFlowSource/attachFlowSource.instrumentation.ts
+/**
+* Explicit instrumentation payload for attachFlowSource. Reads the nested
+* `flow` and logs non-sensitive volume and routing dimensions only — never the
+* wallet address, and never the response's session token.
+*/
+const attachFlowSourceInstrumentation = { resolved: ({ flow }) => ({
+	amount: flow.amount ?? null,
+	currency: flow.currency ?? null,
+	fromChainId: flow.fromChainId ?? null,
+	fromChainName: flow.fromChainName ?? null,
+	mode: flow.mode ?? null,
+	sourceType: flow.sourceType ?? null
+}) };
+
 //#endregion
 //#region src/modules/flow/attachFlowSource/attachFlowSource.ts
 /**
@@ -3197,11 +3311,13 @@ const attachFlowSource = async (params, client = getDefaultClient()) => {
 		flowAttachSourceRequest.fromChainId = params.fromChainId;
 		flowAttachSourceRequest.fromChainName = params.fromChainName;
 	}
+	const existingToken = await core.storage.getItem(createFlowSessionTokenStorageKey(flowId));
 	const result = await withFlowSessionTokenCleanupOn401({
 		call: () => apiClient.attachFlowSource({
 			environmentId: core.environmentId,
 			flowAttachSourceRequest,
-			flowId
+			flowId,
+			xDynamicFlowSessionToken: existingToken ?? void 0
 		}),
 		flowId
 	}, client);
@@ -3218,7 +3334,8 @@ const __attachFlowSource_wrapped = instrumentFunction({
 		} catch {
 			return;
 		}
-	}
+	},
+	selectors: attachFlowSourceInstrumentation
 });
 
 //#endregion
@@ -3236,6 +3353,22 @@ const createFlowApiClient = async ({ flowId }, client) => {
 	};
 };
 
+//#endregion
+//#region src/modules/flow/broadcastFlow/broadcastFlow.instrumentation.ts
+/**
+* Explicit instrumentation payload for broadcastFlow. Logs non-sensitive
+* volume and routing dimensions only — never the wallet address or any
+* session token — so we can understand volume moved through the flow product.
+*/
+const broadcastFlowInstrumentation = { resolved: (flow) => ({
+	amount: flow.amount ?? null,
+	currency: flow.currency ?? null,
+	fromChainId: flow.fromChainId ?? null,
+	fromChainName: flow.fromChainName ?? null,
+	mode: flow.mode ?? null,
+	sourceType: flow.sourceType ?? null
+}) };
+
 //#endregion
 //#region src/modules/flow/broadcastFlow/broadcastFlow.ts
 /**
@@ -3272,9 +3405,25 @@ const __broadcastFlow_wrapped = instrumentFunction({
 		} catch {
 			return;
 		}
-	}
+	},
+	selectors: broadcastFlowInstrumentation
 });
 
+//#endregion
+//#region src/modules/flow/cancelFlow/cancelFlow.instrumentation.ts
+/**
+* Explicit instrumentation payload for cancelFlow. Logs non-sensitive volume
+* and routing dimensions only — never the wallet address or any session token.
+*/
+const cancelFlowInstrumentation = { resolved: (flow) => ({
+	amount: flow.amount ?? null,
+	currency: flow.currency ?? null,
+	fromChainId: flow.fromChainId ?? null,
+	fromChainName: flow.fromChainName ?? null,
+	mode: flow.mode ?? null,
+	sourceType: flow.sourceType ?? null
+}) };
+
 //#endregion
 //#region src/modules/flow/cancelFlow/cancelFlow.ts
 /**
@@ -3308,7 +3457,8 @@ const __cancelFlow_wrapped = instrumentFunction({
 		} catch {
 			return;
 		}
-	}
+	},
+	selectors: cancelFlowInstrumentation
 });
 
 //#endregion
@@ -3356,6 +3506,22 @@ const getFlowQuote = async ({ flowId, fromChainId, fromTokenAddress, slippage },
 	}, client);
 };
 
+//#endregion
+//#region src/modules/flow/prepareFlowSigning/prepareFlowSigning.instrumentation.ts
+/**
+* Explicit instrumentation payload for prepareFlowSigning. Logs non-sensitive
+* volume and routing dimensions only — never the wallet address or any
+* session token.
+*/
+const prepareFlowSigningInstrumentation = { resolved: (flow) => ({
+	amount: flow.amount ?? null,
+	currency: flow.currency ?? null,
+	fromChainId: flow.fromChainId ?? null,
+	fromChainName: flow.fromChainName ?? null,
+	mode: flow.mode ?? null,
+	sourceType: flow.sourceType ?? null
+}) };
+
 //#endregion
 //#region src/modules/flow/prepareFlowSigning/prepareFlowSigning.ts
 /**
@@ -3393,9 +3559,26 @@ const __prepareFlowSigning_wrapped = instrumentFunction({
 		} catch {
 			return;
 		}
-	}
+	},
+	selectors: prepareFlowSigningInstrumentation
 });
 
+//#endregion
+//#region src/modules/flow/submitFlowTransaction/submitFlowTransaction.instrumentation.ts
+/**
+* Explicit instrumentation payload for submitFlowTransaction. Logs
+* non-sensitive volume and routing dimensions only — never the wallet address
+* or any session token — so executed flow volume is measurable.
+*/
+const submitFlowTransactionInstrumentation = { resolved: (flow) => ({
+	amount: flow.amount ?? null,
+	currency: flow.currency ?? null,
+	fromChainId: flow.fromChainId ?? null,
+	fromChainName: flow.fromChainName ?? null,
+	mode: flow.mode ?? null,
+	sourceType: flow.sourceType ?? null
+}) };
+
 //#endregion
 //#region src/modules/flow/submitFlowTransaction/submitFlowTransaction.ts
 /**
@@ -3439,7 +3622,8 @@ const __submitFlowTransaction_wrapped = instrumentFunction({
 		} catch {
 			return;
 		}
-	}
+	},
+	selectors: submitFlowTransactionInstrumentation
 });
 
 //#endregion
@@ -3501,7 +3685,7 @@ const getMissingVerificationForCoinbaseOnrampOrder = ({ paymentMethod }, client
 	const { user } = client;
 	assertDefined(user, "User is not authenticated");
 	const fieldsMissingVerification = [];
-	const emailVerifiedCredential = user.verifiedCredentials.find((credential) => credential.format === JwtVerifiedCredentialFormatEnum.Email);
+	const emailVerifiedCredential = user.verifiedCredentials.find((credential) => credential.format === JwtVerifiedCredentialFormatEnum$1.Email);
 	if (!user.email) fieldsMissingVerification.push({
 		errorCode: "MISSING_INFORMATION",
 		field: "email"
@@ -3511,7 +3695,7 @@ const getMissingVerificationForCoinbaseOnrampOrder = ({ paymentMethod }, client
 		errorCode: "MISSING_VERIFICATION",
 		field: "email"
 	});
-	const phoneVerifiedCredential = user.verifiedCredentials.find((credential) => credential.format === JwtVerifiedCredentialFormatEnum.PhoneNumber);
+	const phoneVerifiedCredential = user.verifiedCredentials.find((credential) => credential.format === JwtVerifiedCredentialFormatEnum$1.PhoneNumber);
 	const phoneNumberVerifiedInPast60Days = phoneVerifiedCredential?.verifiedAt && phoneVerifiedCredential.verifiedAt >= /* @__PURE__ */ new Date(Date.now() - 1440 * 60 * 60 * 1e3);
 	if (!user.phoneNumber) fieldsMissingVerification.push({
 		errorCode: "MISSING_INFORMATION",
@@ -3671,18 +3855,6 @@ const createKrakenExchangeTransfer = async (transferParams, client = getDefaultC
 		exchangeKey: ExchangeKeyEnum.Kraken
 	});
 };
-const __createKrakenExchangeTransfer_impl = createKrakenExchangeTransfer;
-const __createKrakenExchangeTransfer_wrapped = instrumentFunction({
-	fn: __createKrakenExchangeTransfer_impl,
-	functionName: "createKrakenExchangeTransfer",
-	getCore: () => {
-		try {
-			return getCore(getDefaultClient());
-		} catch {
-			return;
-		}
-	}
-});
 
 //#endregion
 //#region src/modules/funding/kraken/getKrakenAccounts/getKrakenAccounts.ts
@@ -3794,10 +3966,6 @@ var MoonPayProviderNotAvailableError = class extends BaseError {
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns The signed MoonPay URL.
 * @instrumented
-* @redact-params - the return is a bare signed onramp URL whose query string
-* carries the provider signature plus the user's wallet address; a bare-string
-* return is logged under the synthetic `result` key, which no key-based rule
-* covers, so redact the whole event.
 */
 const getMoonPayUrl = async (params, client = getDefaultClient()) => {
 	const core = getCore(client);
@@ -3811,7 +3979,7 @@ const getMoonPayUrl = async (params, client = getDefaultClient()) => {
 		token: params.token,
 		tokenAmount: params.tokenAmount,
 		walletAddress: params.walletAddress
-	})).onramps?.find((provider) => provider.provider === ProviderEnum.MoonPay);
+	})).onramps?.find((provider) => provider.provider === ProviderEnum$1.MoonPay);
 	if (!moonPayProvider?.url) throw new MoonPayProviderNotAvailableError();
 	const parsedUrl = new URL(moonPayProvider.url);
 	const isValidHost = parsedUrl.hostname === "moonpay.com" || parsedUrl.hostname.endsWith(".moonpay.com");
@@ -3831,8 +3999,7 @@ const __getMoonPayUrl_wrapped = instrumentFunction({
 		} catch {
 			return;
 		}
-	},
-	redactAll: true
+	}
 });
 
 //#endregion
@@ -4416,7 +4583,6 @@ const getWalletConnectCatalogWalletByWalletProviderKey = async ({ walletProvider
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns A promise that resolves to OTP verification details if verification is required, or undefined.
 * @instrumented
-* @redact-params
 */
 const updateUser = async ({ userFields }, client = getDefaultClient()) => {
 	const core = getCore(client);
@@ -4446,8 +4612,7 @@ const __updateUser_wrapped = instrumentFunction({
 		} catch {
 			return;
 		}
-	},
-	redactAll: true
+	}
 });
 
 //#endregion
@@ -4661,7 +4826,6 @@ const authenticateTotpMfaDevice = async ({ deviceId, code, createMfaTokenOptions
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns A promise that resolves to the newly generated recovery codes.
 * @instrumented
-* @redact-params
 */
 const createNewMfaRecoveryCodes = async (client = getDefaultClient()) => {
 	const core = getCore(client);
@@ -4677,8 +4841,7 @@ const __createNewMfaRecoveryCodes_wrapped = instrumentFunction({
 		} catch {
 			return;
 		}
-	},
-	redactAll: true
+	}
 });
 
 //#endregion
@@ -4702,9 +4865,9 @@ const deleteMfaDevice = async ({ deviceId, mfaAuthToken }, client = getDefaultCl
 	assertDefined(deviceId, "deviceId is required");
 	if (!getElevatedAccessToken({
 		consume: false,
-		scope: TokenScope.Credentialunlink
+		scope: TokenScope$1.Credentialunlink
 	}, client)) assertDefined(mfaAuthToken, "mfaAuthToken is required");
-	return createApiClient({ elevatedAccessTokenScope: TokenScope.Credentialunlink }, client).deleteMfaDevice({
+	return createApiClient({ elevatedAccessTokenScope: TokenScope$1.Credentialunlink }, client).deleteMfaDevice({
 		environmentId: core.environmentId,
 		mfaDeviceId: deviceId,
 		xMfaAuthToken: mfaAuthToken ?? ""
@@ -4772,13 +4935,10 @@ const getMfaRecoveryCodes = async (client = getDefaultClient()) => {
 * @returns A promise that resolves to the TOTP registration response containing setup information,
 * like the secret key and the OTP Auth URI.
 * @instrumented
-* @redact-params - the response embeds the TOTP shared secret in both `secret`
-* and the `uri` (`otpauth://...?secret=...`); redact the whole event so the
-* seed never reaches logs via the un-keyed `uri` field.
 */
 const registerTotpMfaDevice = async (client = getDefaultClient()) => {
 	const core = getCore(client);
-	return createApiClient({ elevatedAccessTokenScope: TokenScope.Credentiallink }, client).registerTotpMfaDevice({ environmentId: core.environmentId });
+	return createApiClient({ elevatedAccessTokenScope: TokenScope$1.Credentiallink }, client).registerTotpMfaDevice({ environmentId: core.environmentId });
 };
 const __registerTotpMfaDevice_impl = registerTotpMfaDevice;
 const __registerTotpMfaDevice_wrapped = instrumentFunction({
@@ -4790,8 +4950,7 @@ const __registerTotpMfaDevice_wrapped = instrumentFunction({
 		} catch {
 			return;
 		}
-	},
-	redactAll: true
+	}
 });
 
 //#endregion
@@ -4840,7 +4999,6 @@ const __setDefaultMfaDevice_wrapped = instrumentFunction({
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns A promise that resolves to an OTPVerification object containing the email and verification UUID.
 * @instrumented
-* @redact-params
 */
 const sendEmailOTP = async ({ email }, client = getDefaultClient()) => {
 	const core = getCore(client);
@@ -4868,8 +5026,7 @@ const __sendEmailOTP_wrapped = instrumentFunction({
 		} catch {
 			return;
 		}
-	},
-	redactAll: true
+	}
 });
 
 //#endregion
@@ -5803,7 +5960,6 @@ const supportedCountries = {
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns A promise that resolves to an OTPVerification object containing the phone details and verification UUID.
 * @instrumented
-* @redact-params
 */
 const sendSmsOTP = async ({ isoCountryCode, phoneNumber }, client = getDefaultClient()) => {
 	const core = getCore(client);
@@ -5836,8 +5992,7 @@ const __sendSmsOTP_wrapped = instrumentFunction({
 		} catch {
 			return;
 		}
-	},
-	redactAll: true
+	}
 });
 
 //#endregion
@@ -5894,7 +6049,6 @@ const verifyOTPForUserUpdate = async ({ otpVerification, verificationToken, requ
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns A promise that resolves to the verify response object upon successful verification.
 * @instrumented
-* @redact-params
 */
 const verifyOTP = async ({ otpVerification, verificationToken, requestedScopes }, client = getDefaultClient()) => {
 	preconnectWaasIframe(client);
@@ -5921,8 +6075,7 @@ const __verifyOTP_wrapped = instrumentFunction({
 		} catch {
 			return;
 		}
-	},
-	redactAll: true
+	}
 });
 
 //#endregion
@@ -6109,7 +6262,7 @@ const fetchGoogleDriveOauthAccess = async ({ oauthAccountId }, client) => {
 *   `undefined`.
 * @notInstrumented
 */
-const findGoogleOauthAccountId = (credentials) => credentials?.find((cred) => cred.format === JwtVerifiedCredentialFormatEnum.Oauth && cred.oauthProvider === ProviderEnum.Google)?.id;
+const findGoogleOauthAccountId = (credentials) => credentials?.find((cred) => cred.format === JwtVerifiedCredentialFormatEnum$1.Oauth && cred.oauthProvider === ProviderEnum$1.Google)?.id;
 
 //#endregion
 //#region src/modules/walletBackup/googleDrive/getGoogleDriveBackupReadiness/getGoogleDriveBackupReadiness.ts
@@ -7752,6 +7905,7 @@ const getWalletAccountAddressByType = ({ type, walletAccount }) => {
 * @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
 * @returns The data for the wallet provider.
 * @notInstrumented
+* @hook Exposed as a hook so consumers get reactive wallet provider data, updated when the wallet provider registry changes.
 */
 const getWalletProviderDataByKey = ({ walletProviderKey }, client = getDefaultClient()) => {
 	const { chain, groupKey, key, metadata, walletProviderType } = getWalletProviderByKey({ walletProviderKey }, client);
@@ -8410,5 +8564,5 @@ const parseUserAgent = ({ userAgent }) => {
 assertPackageVersion(name, version);
 
 //#endregion
-export { BaseError, CheckoutSessionTokenMissingError, ClientAlreadyInitializedError, DeeplinkConnectAndVerifyUnsupportedError, FeeEstimationFailedError, FlowSessionTokenMissingError, GOOGLE_DRIVE_BACKUP_REQUIRED_SCOPES, InvalidDeviceRegistrationRedirectError, InvalidExternalAuthError, InvalidParamError, InvalidRedirectStorageStateError, InvalidSocialCallbackOriginError, LinkCredentialError, MFAAction, MfaInvalidOtpError, MfaRateLimitedError, MissingRedirectStorageStateError, MissingSocialUrlParamError, MissingUserVerificationError, NetworkAddingUnavailableError, NetworkNotAddedError, NetworkSwitchingUnavailableError, NoAddressFoundError, NoNetworkProvidersError, NoPasskeyCredentialsFoundError, NoSmartWalletAccountSignerFoundError, NoWebAuthNSupportError, NotWaasWalletAccountError, SandboxMaximumThresholdReachedError, SimulationFailedError, TokenSwapError, UnauthorizedError, UnavailableInServerSideError, UnrecognizedNetworkError, UserCancelledSocialPopUpError, UserNotAuthenticatedError, UserRejectedError, WaasOnboardingIncompleteError, WalletAccountAlreadyVerifiedError, WalletAccountNotSelectedError, WalletAlreadyLinkedToAnotherUserError, WalletProviderMethodUnavailableError, __acknowledgeRecoveryCodes_wrapped as acknowledgeRecoveryCodes, addCoinbaseOnrampOrderEventListener, __addNetwork_wrapped as addNetwork, appendConnectionUriToDeeplink, assertWalletAccountSigningAvailability, assertWalletProviderMethodDefined, __attachCheckoutTransactionSource_wrapped as attachCheckoutTransactionSource, __attachFlowSource_wrapped as attachFlowSource, authenticateMfaRecoveryCode, authenticatePasskeyMFA, authenticateTotpMfaDevice, __authenticateWithSocial_wrapped as authenticateWithSocial, __broadcastCheckoutTransaction_wrapped as broadcastCheckoutTransaction, __broadcastFlow_wrapped as broadcastFlow, canConnectWithHardwareWallet, __cancelCheckoutTransaction_wrapped as cancelCheckoutTransaction, __cancelFlow_wrapped as cancelFlow, __checkStepUpAuth_wrapped as checkStepUpAuth, __completeDeviceRegistration_wrapped as completeDeviceRegistration, __completeSocialAuthentication_wrapped as completeSocialAuthentication, __completeSocialRedirect_wrapped as completeSocialRedirect, __confirmTransaction_wrapped as confirmTransaction, __connectAndVerifyWithWalletProvider_wrapped as connectAndVerifyWithWalletProvider, __connectWithWalletProvider_wrapped as connectWithWalletProvider, __consumeMfaToken_wrapped as consumeMfaToken, __createCheckoutTransaction_wrapped as createCheckoutTransaction, __createCoinbaseOnrampOrder_wrapped as createCoinbaseOnrampOrder, __createCryptoDotComPayment_wrapped as createCryptoDotComPayment, __createDynamicClient_wrapped as createDynamicClient, __createKrakenExchangeTransfer_wrapped as createKrakenExchangeTransfer, __createNewMfaRecoveryCodes_wrapped as createNewMfaRecoveryCodes, __deleteMfaDevice_wrapped as deleteMfaDevice, __deletePasskey_wrapped as deletePasskey, __deleteUser_wrapped as deleteUser, detectDeviceRegistrationRedirect, detectOAuthRedirect, detectSocialRedirectUrl, excludeInstalledFromCatalog, __executeSwapTransaction_wrapped as executeSwapTransaction, fetchProjectSettings, findMissingGoogleDriveBackupScopes, getActiveNetworkData, getActiveNetworkId, getAvailableWalletProvidersData, getBalance, getBalanceForAddress, getBalances, getCheckoutTransaction, getCheckoutTransactionQuote, getCoinbaseBuyUrl, getConnectedAddresses, getDefaultClient, getDeviceRegistrationTokenFromUrl, getElevatedAccessToken, getFlow, getFlowQuote, __getGoogleDriveBackupReadiness_wrapped as getGoogleDriveBackupReadiness, getInstallationLinkForCurrentPlatform, getKrakenAccounts, getKrakenWhitelistedAddresses, getMfaDevices, getMfaMethods, getMfaRecoveryCodes, getMissingVerificationForCoinbaseOnrampOrder, __getMoonPayCurrencies_wrapped as getMoonPayCurrencies, __getMoonPayUrl_wrapped as getMoonPayUrl, getMultichainBalances, getMultichainTokenBalances, getNativeBalance, getNetworksData, getOwnerWalletAccountForSmartWalletAccount, getPasskeys, getPrimaryWalletAccount, getRegisteredDevices, getSwapQuote, getSwapStatus, getTokenBalances, getTransactionHistory, getUserSocialAccounts, getWalletAccountAddressByType, getWalletAccountFromAddress, getWalletAccounts, getWalletConnectCatalog, getWalletConnectCatalogWalletByWalletProviderKey, getWalletOptionsCatalogue, getWalletProviderDataByKey, hasAllGoogleDriveBackupScopes, hasExtension, __initializeClient_wrapped as initializeClient, isAnyWalletAccountConnected, isCaptchaRequired, isDeeplinkWalletProvider, isDeviceRegistrationRequired, isHardwareWalletAccount, isInsufficientGoogleDriveScopesError, isMfaRequiredForAction, isMobile, isPendingRecoveryCodesAcknowledgment, isProgrammaticNetworkSwitchAvailable, isSignedIn, isUserMissingMfaAuth, isUserOnboardingComplete, isWalletAccountVerified, logout, matchWalletProvidersToCatalogGroup, offEvent, offWalletProviderEvent, onEvent, onWalletProviderEvent, onceEvent, parseUserAgent, __prepareCheckoutTransaction_wrapped as prepareCheckoutTransaction, __prepareFlowSigning_wrapped as prepareFlowSigning, __proveWalletAccountOwnership_wrapped as proveWalletAccountOwnership, __refreshAuth_wrapped as refreshAuth, __refreshUser_wrapped as refreshUser, __registerPasskey_wrapped as registerPasskey, __registerTotpMfaDevice_wrapped as registerTotpMfaDevice, __removeWalletAccount_wrapped as removeWalletAccount, __requestExternalAuthElevatedToken_wrapped as requestExternalAuthElevatedToken, requiresConversion, __revokeAllRegisteredDevices_wrapped as revokeAllRegisteredDevices, __revokeRegisteredDevice_wrapped as revokeRegisteredDevice, __selectPrimaryWalletAccount_wrapped as selectPrimaryWalletAccount, __sendEmailOTP_wrapped as sendEmailOTP, __sendSmsOTP_wrapped as sendSmsOTP, __setCaptchaToken_wrapped as setCaptchaToken, __setDefaultMfaDevice_wrapped as setDefaultMfaDevice, __setInstrumentationEnabled_wrapped as setInstrumentationEnabled, __signInWithExternalJwt_wrapped as signInWithExternalJwt, __signInWithPasskey_wrapped as signInWithPasskey, __signInWithSocialPopUp_wrapped as signInWithSocialPopUp, __signInWithSocialRedirect_wrapped as signInWithSocialRedirect, __signMessage_wrapped as signMessage, __submitCheckoutTransaction_wrapped as submitCheckoutTransaction, __submitFlowTransaction_wrapped as submitFlowTransaction, supportedCountries, __switchActiveNetwork_wrapped as switchActiveNetwork, trackCheckoutTransaction, __transferAmount_wrapped as transferAmount, __transferWalletAccount_wrapped as transferWalletAccount, __unlinkSocialAccount_wrapped as unlinkSocialAccount, __updateUser_wrapped as updateUser, __verifyOTP_wrapped as verifyOTP, __verifyWalletAccount_wrapped as verifyWalletAccount, waitForClientInitialized };
+export { BaseError, CaptchaProviderEnum, CheckoutSessionTokenMissingError, ClientAlreadyInitializedError, DeeplinkConnectAndVerifyUnsupportedError, DeviceRegistrationIdentityMismatchError, FeeEstimationFailedError, FlowSessionTokenMissingError, GOOGLE_DRIVE_BACKUP_REQUIRED_SCOPES, InvalidDeviceRegistrationRedirectError, InvalidExternalAuthError, InvalidParamError, InvalidRedirectStorageStateError, InvalidSocialCallbackOriginError, JwtVerifiedCredentialFormatEnum, LinkCredentialError, MFAAction, MfaInvalidOtpError, MfaRateLimitedError, MissingRedirectStorageStateError, MissingSocialUrlParamError, MissingUserVerificationError, NetworkAddingUnavailableError, NetworkNotAddedError, NetworkSwitchingUnavailableError, NoAddressFoundError, NoNetworkProvidersError, NoPasskeyCredentialsFoundError, NoSmartWalletAccountSignerFoundError, NoWebAuthNSupportError, NotWaasWalletAccountError, ProviderEnum, SandboxMaximumThresholdReachedError, SimulationFailedError, TokenScope, TokenSwapError, UnauthorizedError, UnavailableInServerSideError, UnrecognizedNetworkError, UserCancelledSocialPopUpError, UserNotAuthenticatedError, UserRejectedError, WaasOnboardingIncompleteError, WalletAccountAlreadyVerifiedError, WalletAccountNotSelectedError, WalletAlreadyLinkedToAnotherUserError, WalletProviderMethodUnavailableError, WalletScreeningBlockedError, __acknowledgeRecoveryCodes_wrapped as acknowledgeRecoveryCodes, addCoinbaseOnrampOrderEventListener, __addNetwork_wrapped as addNetwork, appendConnectionUriToDeeplink, assertWalletAccountSigningAvailability, assertWalletProviderMethodDefined, __attachCheckoutTransactionSource_wrapped as attachCheckoutTransactionSource, __attachFlowSource_wrapped as attachFlowSource, authenticateMfaRecoveryCode, authenticatePasskeyMFA, authenticateTotpMfaDevice, __authenticateWithSocial_wrapped as authenticateWithSocial, __broadcastCheckoutTransaction_wrapped as broadcastCheckoutTransaction, __broadcastFlow_wrapped as broadcastFlow, canConnectWithHardwareWallet, __cancelCheckoutTransaction_wrapped as cancelCheckoutTransaction, __cancelFlow_wrapped as cancelFlow, __checkStepUpAuth_wrapped as checkStepUpAuth, __completeDeviceRegistration_wrapped as completeDeviceRegistration, __completeSocialAuthentication_wrapped as completeSocialAuthentication, __completeSocialRedirect_wrapped as completeSocialRedirect, __confirmTransaction_wrapped as confirmTransaction, __connectAndVerifyWithWalletProvider_wrapped as connectAndVerifyWithWalletProvider, __connectWithWalletProvider_wrapped as connectWithWalletProvider, __consumeMfaToken_wrapped as consumeMfaToken, __createCheckoutTransaction_wrapped as createCheckoutTransaction, __createCoinbaseOnrampOrder_wrapped as createCoinbaseOnrampOrder, __createCryptoDotComPayment_wrapped as createCryptoDotComPayment, __createDynamicClient_wrapped as createDynamicClient, createKrakenExchangeTransfer, __createNewMfaRecoveryCodes_wrapped as createNewMfaRecoveryCodes, __deleteMfaDevice_wrapped as deleteMfaDevice, __deletePasskey_wrapped as deletePasskey, __deleteUser_wrapped as deleteUser, detectDeviceRegistrationRedirect, detectOAuthRedirect, detectSocialRedirectUrl, excludeInstalledFromCatalog, __executeSwapTransaction_wrapped as executeSwapTransaction, fetchProjectSettings, findMissingGoogleDriveBackupScopes, getActiveNetworkData, getActiveNetworkId, getAvailableWalletProvidersData, getBalance, getBalanceForAddress, getBalances, getCaptchaSettings, getCheckoutTransaction, getCheckoutTransactionQuote, getCoinbaseBuyUrl, getConnectedAddresses, getDefaultClient, getDeviceRegistrationTokenFromUrl, getElevatedAccessToken, getFlow, getFlowQuote, __getGoogleDriveBackupReadiness_wrapped as getGoogleDriveBackupReadiness, getInstallationLinkForCurrentPlatform, getKrakenAccounts, getKrakenWhitelistedAddresses, getMfaDevices, getMfaMethods, getMfaRecoveryCodes, getMissingVerificationForCoinbaseOnrampOrder, __getMoonPayCurrencies_wrapped as getMoonPayCurrencies, __getMoonPayUrl_wrapped as getMoonPayUrl, getMultichainBalances, getMultichainTokenBalances, getNativeBalance, getNetworksData, getOwnerWalletAccountForSmartWalletAccount, getPasskeys, getPrimaryWalletAccount, getRegisteredDevices, getSwapQuote, getSwapStatus, getTokenBalances, getTransactionHistory, getUserSocialAccounts, getWalletAccountAddressByType, getWalletAccountFromAddress, getWalletAccounts, getWalletConnectCatalog, getWalletConnectCatalogWalletByWalletProviderKey, getWalletOptionsCatalogue, getWalletProviderDataByKey, hasAllGoogleDriveBackupScopes, hasExtension, __initializeClient_wrapped as initializeClient, isAnyWalletAccountConnected, isCaptchaRequired, isDeeplinkWalletProvider, isDeviceRegistrationRequired, isHardwareWalletAccount, isInsufficientGoogleDriveScopesError, isMfaRequiredForAction, isMobile, isPendingRecoveryCodesAcknowledgment, isProgrammaticNetworkSwitchAvailable, isSignedIn, isUserMissingMfaAuth, isUserOnboardingComplete, isWalletAccountVerified, logout, matchWalletProvidersToCatalogGroup, offEvent, offWalletProviderEvent, onEvent, onWalletProviderEvent, onceEvent, parseUserAgent, __prepareCheckoutTransaction_wrapped as prepareCheckoutTransaction, __prepareFlowSigning_wrapped as prepareFlowSigning, __proveWalletAccountOwnership_wrapped as proveWalletAccountOwnership, __refreshAuth_wrapped as refreshAuth, __refreshUser_wrapped as refreshUser, __registerPasskey_wrapped as registerPasskey, __registerTotpMfaDevice_wrapped as registerTotpMfaDevice, __removeWalletAccount_wrapped as removeWalletAccount, __requestExternalAuthElevatedToken_wrapped as requestExternalAuthElevatedToken, requiresConversion, __revokeAllRegisteredDevices_wrapped as revokeAllRegisteredDevices, __revokeRegisteredDevice_wrapped as revokeRegisteredDevice, __selectPrimaryWalletAccount_wrapped as selectPrimaryWalletAccount, __sendEmailOTP_wrapped as sendEmailOTP, __sendSmsOTP_wrapped as sendSmsOTP, __setCaptchaToken_wrapped as setCaptchaToken, __setDefaultMfaDevice_wrapped as setDefaultMfaDevice, __setInstrumentationEnabled_wrapped as setInstrumentationEnabled, __signInWithExternalJwt_wrapped as signInWithExternalJwt, __signInWithPasskey_wrapped as signInWithPasskey, __signInWithSocialPopUp_wrapped as signInWithSocialPopUp, __signInWithSocialRedirect_wrapped as signInWithSocialRedirect, __signMessage_wrapped as signMessage, __submitCheckoutTransaction_wrapped as submitCheckoutTransaction, __submitFlowTransaction_wrapped as submitFlowTransaction, supportedCountries, __switchActiveNetwork_wrapped as switchActiveNetwork, trackCheckoutTransaction, __transferAmount_wrapped as transferAmount, __transferWalletAccount_wrapped as transferWalletAccount, __unlinkSocialAccount_wrapped as unlinkSocialAccount, __updateUser_wrapped as updateUser, __verifyOTP_wrapped as verifyOTP, __verifyWalletAccount_wrapped as verifyWalletAccount, waitForClientInitialized };
 //# sourceMappingURL=index.esm.js.map