@dynamic-labs-sdk/client 1.19.1 → 1.21.0

package/dist/waas.cjs

@@ -1,11 +1,129 @@
-const require_isMfaRequiredForAction = require('./isMfaRequiredForAction-CHeYEkjj.cjs');
-const require_updateAuthFromVerifyResponse = require('./updateAuthFromVerifyResponse-CY0xTIXF.cjs');
-const require_isDynamicWaasEnabled = require('./isDynamicWaasEnabled-Dmbdiybh.cjs');
-const require_getWalletProviderByKey = require('./getWalletProviderByKey-CSVSMios.cjs');
-const require_migrateFromFireblocks = require('./migrateFromFireblocks-DrHwloUB.cjs');
+const require_updateAuthFromVerifyResponse = require('./updateAuthFromVerifyResponse-CSqnGlh3.cjs');
+const require_isDynamicWaasEnabled = require('./isDynamicWaasEnabled-BEVAshnS.cjs');
+const require_getWalletProviderByKey = require('./getWalletProviderByKey-BwivhTYu.cjs');
+require('./getSignedSessionId-E6FIx5aj.cjs');
+const require_migrateFromFireblocks = require('./migrateFromFireblocks-CLUkVcFT.cjs');
 let _dynamic_labs_sdk_assert_package_version = require("@dynamic-labs-sdk/assert-package-version");
 let _dynamic_labs_sdk_api_core = require("@dynamic-labs/sdk-api-core");
 
+//#region src/modules/waas/businessAccounts/getBusinessAccountsClient/getBusinessAccountsClient.ts
+/**
+* Returns the business accounts API client for the first enabled WaaS chain.
+*
+* @param client - The Dynamic client instance.
+* @returns The business accounts API client.
+* @throws {InvalidParamError} When no WaaS chain configuration is enabled for the project.
+* @notInstrumented
+*/
+const getBusinessAccountsClient = (client) => {
+	const projectSettings = client.projectSettings;
+	require_updateAuthFromVerifyResponse.assertDefined(projectSettings, "Project settings are not available");
+	const chainConfig = projectSettings.sdk.embeddedWallets?.chainConfigurations?.find((chain) => chain.enabled);
+	if (!chainConfig) throw new require_updateAuthFromVerifyResponse.InvalidParamError("No WaaS chain is enabled for this project");
+	return require_migrateFromFireblocks.createWaasClient({ chainName: require_migrateFromFireblocks.getWaasChainNameFromChain(chainConfig.name) }, client).businessAccounts;
+};
+
+//#endregion
+//#region src/modules/waas/businessAccounts/addBusinessAccountMember/addBusinessAccountMember.ts
+/**
+* Adds a member to an existing business account. Identify the target by a known
+* `userId`, or by `identifier` + `identifierType` (e.g. an email — the user is
+* created if absent).
+*
+* @param params.businessAccountId - The ID of the business account.
+* @param [params.userId] - The ID of the user to add as a member.
+* @param [params.identifier] - The identifier value (e.g. an email address).
+* @param [params.identifierType] - The identifier type (e.g. `email`).
+* @param [params.role] - The member role (`admin` or `viewer`). Defaults server-side.
+* @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
+* @returns The created business account member.
+* @notInstrumented
+*/
+const addBusinessAccountMember = async ({ businessAccountId, userId, identifier, identifierType, role }, client = require_updateAuthFromVerifyResponse.getDefaultClient()) => {
+	return getBusinessAccountsClient(client).addMember({
+		businessAccountId,
+		identifier,
+		identifierType,
+		role,
+		userId
+	});
+};
+
+//#endregion
+//#region src/modules/waas/getWaasWalletProviderByChain/getWaasWalletProviderByChain.ts
+/** @notInstrumented */
+const getWaasWalletProviderByChain = ({ chain }, client) => {
+	const waasProvider = require_updateAuthFromVerifyResponse.findWaasWalletProviderByChain({ chain }, client);
+	if (!waasProvider) throw new require_updateAuthFromVerifyResponse.NoWalletProviderFoundError({ walletProviderKey: require_updateAuthFromVerifyResponse.formatWalletProviderKey({
+		chain,
+		displayName: require_updateAuthFromVerifyResponse.DYNAMIC_WAAS_METADATA.displayName,
+		walletProviderType: _dynamic_labs_sdk_api_core.WalletProviderEnum.EmbeddedWallet
+	}) });
+	return waasProvider;
+};
+
+//#endregion
+//#region src/modules/waas/businessAccounts/addBusinessAccountSigner/addBusinessAccountSigner.ts
+/**
+* Adds a signer to a business-account wallet via the reshare ceremony, minting
+* the new signer's share set. Identify the target by `userId`, or `identifier`
+* + `identifierType` (the user is created if absent).
+*
+* Omit `businessAccountId` to add a signer to a wallet that isn't in a business
+* account yet: the wallet's per-account is found-or-created first (idempotent —
+* converts the personal wallet, seating its owner as the first signer), then
+* the new signer is reshared in.
+*
+* @param params.walletAccount - The wallet account to add the signer to.
+* @param [params.businessAccountId] - The business account; found-or-created when omitted.
+* @param [params.walletId] - The wallet UUID to link when finding-or-creating; defaults to `walletAccount.verifiedCredentialId`.
+* @param params.targetSignerIdentity - The signer to add (userId, or identifier + identifierType).
+* @param [params.signerType] - `endUser` (default) or `server`.
+* @param [params.password] - Password for the reshare, if the wallet is password-encrypted.
+* @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
+* @returns The new signer's share set id.
+* @notInstrumented
+*/
+const addBusinessAccountSigner = async ({ walletAccount, businessAccountId, walletId, targetSignerIdentity, signerType, password }, client = require_updateAuthFromVerifyResponse.getDefaultClient()) => {
+	const hasUserId = Boolean(targetSignerIdentity.userId);
+	const hasIdentifier = Boolean(targetSignerIdentity.identifier && targetSignerIdentity.identifierType);
+	if (!hasUserId && !hasIdentifier) throw new require_updateAuthFromVerifyResponse.InvalidParamError("addBusinessAccountSigner: targetSignerIdentity must provide a userId, or an identifier with its identifierType");
+	let resolvedBusinessAccountId = businessAccountId;
+	if (!resolvedBusinessAccountId) {
+		const linkWalletId = walletId ?? walletAccount.verifiedCredentialId;
+		if (!linkWalletId) throw new require_updateAuthFromVerifyResponse.InvalidParamError("addBusinessAccountSigner: cannot resolve a wallet id to link — pass walletId, or use a verified wallet account");
+		resolvedBusinessAccountId = (await getBusinessAccountsClient(client).addWalletToBusinessAccount({ walletId: linkWalletId })).id;
+	}
+	return getWaasWalletProviderByChain({ chain: walletAccount.chain }, client).reshareToNewSignerShareSet({
+		businessAccountId: resolvedBusinessAccountId,
+		password,
+		signerType,
+		targetSignerIdentity,
+		walletAccount
+	});
+};
+
+//#endregion
+//#region src/modules/waas/businessAccounts/addWalletToBusinessAccount/addWalletToBusinessAccount.ts
+/**
+* Links an existing wallet to a business account. Omit `businessAccountId` to
+* find-or-create the per-wallet business account (the server seats the wallet's
+* owner as the first member/signer).
+*
+* @param [params.businessAccountId] - The business account to link to; found-or-created when omitted.
+* @param params.walletId - The ID of the wallet to link.
+* @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
+* @returns The updated business account detail.
+* @notInstrumented
+*/
+const addWalletToBusinessAccount = async ({ businessAccountId, walletId }, client = require_updateAuthFromVerifyResponse.getDefaultClient()) => {
+	return getBusinessAccountsClient(client).addWalletToBusinessAccount({
+		businessAccountId,
+		walletId
+	});
+};
+
+//#endregion
 //#region src/modules/waas/backupWaasKeySharesToGoogleDrive/backupWaasKeySharesToGoogleDrive.ts
 /**
 * Backs up WaaS wallet key shares to Google Drive for secure recovery.
@@ -28,6 +146,21 @@ const backupWaasKeySharesToGoogleDrive = async ({ googleDriveAccessToken, passwo
 	});
 };
 
+//#endregion
+//#region src/modules/waas/businessAccounts/createBusinessAccount/createBusinessAccount.ts
+/**
+* Creates a new business account.
+*
+* @param [params] - Optional parameters for the business account.
+* @param [params.name] - Optional name for the business account.
+* @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
+* @returns The created business account.
+* @notInstrumented
+*/
+const createBusinessAccount = async (params, client = require_updateAuthFromVerifyResponse.getDefaultClient()) => {
+	return getBusinessAccountsClient(client).createBusinessAccount({ request: { name: params?.name } });
+};
+
 //#endregion
 //#region src/modules/waas/isWalletCreationRequirement/isWalletCreationRequirement.ts
 /**
@@ -152,6 +285,37 @@ const createWaasWalletAccounts = async ({ chains, password, thresholdSignatureSc
 	await require_isDynamicWaasEnabled.__refreshAuth_wrapped(client);
 };
 
+//#endregion
+//#region src/modules/waas/businessAccounts/createWalletForBusinessAccount/createWalletForBusinessAccount.ts
+/**
+* Creates a WaaS wallet account owned directly by a business account, in one
+* step — the server seats the wallet's signer row against the business account
+* as it is minted, so no separate link call is needed.
+*
+* @example
+* ```ts
+* const wallet = await createWalletForBusinessAccount({
+*   businessAccountId: 'ba-1',
+*   chain: 'EVM',
+* });
+* ```
+*
+* @param params.businessAccountId - The business account that will own the wallet.
+* @param params.chain - The chain to create the wallet account for.
+* @param [params.password] - Optional password used to encrypt the user share.
+* @param [params.thresholdSignatureScheme] - The threshold signature scheme to use. (Default: TWO_OF_TWO)
+* @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
+* @returns The created wallet account.
+* @notInstrumented
+*/
+const createWalletForBusinessAccount = async ({ businessAccountId, chain, password, thresholdSignatureScheme }, client = require_updateAuthFromVerifyResponse.getDefaultClient()) => {
+	return getWaasWalletProviderByChain({ chain }, client).createWalletAccount({
+		businessAccountId,
+		password,
+		thresholdSignatureScheme
+	});
+};
+
 //#endregion
 //#region src/modules/waas/delegateWaasKeyShares/delegateWaasKeyShares.ts
 /**
@@ -218,6 +382,20 @@ const exportWaasPrivateKey = async ({ displayContainer, password, walletAccount
 	});
 };
 
+//#endregion
+//#region src/modules/waas/businessAccounts/getBusinessAccount/getBusinessAccount.ts
+/**
+* Retrieves a business account by ID, including its members, signers, and wallets.
+*
+* @param params.businessAccountId - The ID of the business account to retrieve.
+* @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
+* @returns The business account with its members, signers, and wallets.
+* @notInstrumented
+*/
+const getBusinessAccount = async ({ businessAccountId }, client = require_updateAuthFromVerifyResponse.getDefaultClient()) => {
+	return getBusinessAccountsClient(client).getBusinessAccount({ businessAccountId });
+};
+
 //#endregion
 //#region src/modules/wallets/userHasEmbeddedWalletForChain/userHasEmbeddedWalletForChain.ts
 /** @notInstrumented */
@@ -343,19 +521,6 @@ const hasDelegatedAccess = ({ walletAccount }, client = require_updateAuthFromVe
 */
 const hasEmbeddedWalletsRequiringUpgrade = (client = require_updateAuthFromVerifyResponse.getDefaultClient()) => getEmbeddedWalletsRequiringUpgrade(client).length > 0;
 
-//#endregion
-//#region src/modules/waas/getWaasWalletProviderByChain/getWaasWalletProviderByChain.ts
-/** @notInstrumented */
-const getWaasWalletProviderByChain = ({ chain }, client) => {
-	const waasProvider = require_updateAuthFromVerifyResponse.findWaasWalletProviderByChain({ chain }, client);
-	if (!waasProvider) throw new require_updateAuthFromVerifyResponse.NoWalletProviderFoundError({ walletProviderKey: require_updateAuthFromVerifyResponse.formatWalletProviderKey({
-		chain,
-		displayName: require_updateAuthFromVerifyResponse.DYNAMIC_WAAS_METADATA.displayName,
-		walletProviderType: _dynamic_labs_sdk_api_core.WalletProviderEnum.EmbeddedWallet
-	}) });
-	return waasProvider;
-};
-
 //#endregion
 //#region src/modules/waas/importWaasPrivateKey/importWaasPrivateKey.ts
 /**
@@ -397,6 +562,19 @@ const isPasswordRequiredForWaasWallets = (client = require_updateAuthFromVerifyR
 	return user.verifiedCredentials.some((credential) => credential.walletProperties?.keyShares?.some((keyShare) => keyShare.passwordEncrypted));
 };
 
+//#endregion
+//#region src/modules/waas/businessAccounts/listBusinessAccounts/listBusinessAccounts.ts
+/**
+* Lists all business accounts for the current project environment.
+*
+* @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
+* @returns A paginated list of business accounts.
+* @notInstrumented
+*/
+const listBusinessAccounts = async (client = require_updateAuthFromVerifyResponse.getDefaultClient()) => {
+	return getBusinessAccountsClient(client).listBusinessAccounts();
+};
+
 //#endregion
 //#region src/modules/waas/refreshWaasWalletAccountShares/refreshWaasWalletAccountShares.ts
 /**
@@ -418,6 +596,82 @@ const refreshWaasWalletAccountShares = async ({ walletAccount, password }, clien
 	});
 };
 
+//#endregion
+//#region src/modules/waas/businessAccounts/removeBusinessAccountMember/removeBusinessAccountMember.ts
+/**
+* Removes a member from a business account. Any signer rows the member held on
+* the account's wallets are torn down as part of the removal. The backend
+* refuses to remove the account's last owner.
+*
+* @param params.businessAccountId - The business account to remove the member from.
+* @param params.userId - The id of the user to remove.
+* @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
+* @returns The removed member.
+*
+* @example
+* ```ts
+* const detail = await getBusinessAccount({ businessAccountId });
+* const member = detail.members[0];
+* await removeBusinessAccountMember({
+*   businessAccountId,
+*   userId: member.userId,
+* });
+* ```
+*
+* @see addBusinessAccountMember
+* @see getBusinessAccount
+* @notInstrumented
+*/
+const removeBusinessAccountMember = async ({ businessAccountId, userId }, client = require_updateAuthFromVerifyResponse.getDefaultClient()) => {
+	const core = require_updateAuthFromVerifyResponse.getCore(client);
+	const { member } = await require_updateAuthFromVerifyResponse.createApiClient({}, client).sdkRemoveBusinessAccountMember({
+		businessAccountId,
+		environmentId: core.environmentId,
+		userId
+	});
+	return member;
+};
+
+//#endregion
+//#region src/modules/waas/businessAccounts/removeBusinessAccountSigner/removeBusinessAccountSigner.ts
+/**
+* Removes a signer from a business-account wallet. This detaches the signer's
+* share set from the wallet — it does not run an MPC ceremony — so the removed
+* identity can no longer sign for that wallet. The backend refuses to remove
+* the last remaining signer on a wallet.
+*
+* @param params.businessAccountId - The business account the wallet belongs to.
+* @param params.walletId - The wallet the signer is attached to.
+* @param params.signerId - The id of the signer to remove (`BusinessAccountSigner.id`).
+* @param [client] - The Dynamic client instance. Only required when using multiple Dynamic clients.
+* @returns The removed signer.
+*
+* @example
+* ```ts
+* const detail = await getBusinessAccount({ businessAccountId });
+* const signer = detail.signers[0];
+* await removeBusinessAccountSigner({
+*   businessAccountId,
+*   walletId: signer.walletId,
+*   signerId: signer.id,
+* });
+* ```
+*
+* @see addBusinessAccountSigner
+* @see getBusinessAccount
+* @notInstrumented
+*/
+const removeBusinessAccountSigner = async ({ businessAccountId, walletId, signerId }, client = require_updateAuthFromVerifyResponse.getDefaultClient()) => {
+	const core = require_updateAuthFromVerifyResponse.getCore(client);
+	const { signer } = await require_updateAuthFromVerifyResponse.createApiClient({}, client).sdkRemoveBusinessAccountSigner({
+		businessAccountId,
+		environmentId: core.environmentId,
+		signerId,
+		walletId
+	});
+	return signer;
+};
+
 //#endregion
 //#region src/modules/waas/revokeWaasDelegation/revokeWaasDelegation.ts
 /**
@@ -532,11 +786,17 @@ const updateWaasPassword = async ({ currentPassword, newPassword, walletAccount
 
 //#endregion
 exports.NotWaasWalletProviderError = require_migrateFromFireblocks.NotWaasWalletProviderError;
+exports.addBusinessAccountMember = addBusinessAccountMember;
+exports.addBusinessAccountSigner = addBusinessAccountSigner;
+exports.addWalletToBusinessAccount = addWalletToBusinessAccount;
 exports.backupWaasKeySharesToGoogleDrive = backupWaasKeySharesToGoogleDrive;
+exports.createBusinessAccount = createBusinessAccount;
 exports.createWaasWalletAccounts = createWaasWalletAccounts;
+exports.createWalletForBusinessAccount = createWalletForBusinessAccount;
 exports.delegateWaasKeyShares = delegateWaasKeyShares;
 exports.exportWaasClientKeyshares = exportWaasClientKeyshares;
 exports.exportWaasPrivateKey = exportWaasPrivateKey;
+exports.getBusinessAccount = getBusinessAccount;
 exports.getChainsMissingWaasWalletAccounts = getChainsMissingWaasWalletAccounts;
 exports.getEmbeddedWalletsRequiringUpgrade = getEmbeddedWalletsRequiringUpgrade;
 exports.getWalletRecoveryState = getWalletRecoveryState;
@@ -547,9 +807,12 @@ exports.isDynamicWaasEnabled = require_isDynamicWaasEnabled.isDynamicWaasEnabled
 exports.isPasswordRequiredForWaasWallets = isPasswordRequiredForWaasWallets;
 exports.isWaasWalletAccount = require_updateAuthFromVerifyResponse.isWaasWalletAccount;
 exports.isWalletCreationRequirement = isWalletCreationRequirement;
+exports.listBusinessAccounts = listBusinessAccounts;
 exports.migrateFromFireblocks = require_migrateFromFireblocks.migrateFromFireblocks;
 exports.normalizeWalletRequirements = normalizeWalletRequirements;
 exports.refreshWaasWalletAccountShares = refreshWaasWalletAccountShares;
+exports.removeBusinessAccountMember = removeBusinessAccountMember;
+exports.removeBusinessAccountSigner = removeBusinessAccountSigner;
 exports.revokeWaasDelegation = revokeWaasDelegation;
 exports.setWaasWalletAccountPassword = setWaasWalletAccountPassword;
 exports.shouldAutoCreateWalletForChain = shouldAutoCreateWalletForChain;